From 79ac515f6ce3d4065ad467426cab746516c6ef40 Mon Sep 17 00:00:00 2001 From: spaced4ndy <8711996+spaced4ndy@users.noreply.github.com> Date: Wed, 3 Jun 2026 21:04:28 +0000 Subject: [PATCH 01/81] core: fix delivery cursor not advancing to maximum group member id for posgtgres (#7043) --- src/Simplex/Chat/Store/Delivery.hs | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/Simplex/Chat/Store/Delivery.hs b/src/Simplex/Chat/Store/Delivery.hs index 75345e5e86..eeef3e0181 100644 --- a/src/Simplex/Chat/Store/Delivery.hs +++ b/src/Simplex/Chat/Store/Delivery.hs @@ -370,7 +370,7 @@ getGroupMembersByCursor db vr user@User {userContactId} GroupInfo {groupId} curs map (toContactMember vr user) <$> DB.query db - (groupMemberQuery <> " WHERE m.group_member_id IN ?") + (groupMemberQuery <> " WHERE m.group_member_id IN ? ORDER BY m.group_member_id ASC") (Only (In gmIds)) #else rights <$> mapM (runExceptT . getGroupMemberById db vr user) gmIds From 656b1a3b6468e1b3295489ca855ccd5e4404be42 Mon Sep 17 00:00:00 2001 From: sh <37271604+shumvgolove@users.noreply.github.com> Date: Thu, 4 Jun 2026 07:53:27 +0000 Subject: [PATCH 02/81] simplex-chat-nodejs: bump libraries (#7042) --- packages/simplex-chat-nodejs/src/download-libs.js | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/packages/simplex-chat-nodejs/src/download-libs.js b/packages/simplex-chat-nodejs/src/download-libs.js index db042d48a2..72761a1ac5 100644 --- a/packages/simplex-chat-nodejs/src/download-libs.js +++ b/packages/simplex-chat-nodejs/src/download-libs.js @@ -4,7 +4,7 @@ const path = require('path'); const extract = require('extract-zip'); const GITHUB_REPO = 'simplex-chat/simplex-chat-libs'; -const RELEASE_TAG = 'v6.5.2'; +const RELEASE_TAG = 'v6.5.4'; const BACKEND = (process.env.SIMPLEX_BACKEND || process.env.npm_config_simplex_backend || 'sqlite').toLowerCase(); if (BACKEND !== 'sqlite' && BACKEND !== 'postgres') { From 5b93cb0e3fe6b07d84f18168b2b90d95487137c2 Mon Sep 17 00:00:00 2001 From: Evgeny Date: Sat, 6 Jun 2026 20:48:11 +0100 Subject: [PATCH 03/81] core: store context to pass configuration parameters (#7057) * core: store context to pass configuration parameters * fix directory * fix test * comment * order --------- Co-authored-by: Evgeny @ SimpleX Chat <259188159+evgeny-simplex@users.noreply.github.com> --- .../src/Directory/Service.hs | 16 +- .../src/Directory/Store.hs | 35 +- .../src/Directory/Store/Migrate.hs | 23 +- .../src/Directory/Util.hs | 6 +- src/Simplex/Chat/Controller.hs | 6 + src/Simplex/Chat/Library/Commands.hs | 636 +++++++++--------- src/Simplex/Chat/Library/Internal.hs | 198 +++--- src/Simplex/Chat/Library/Subscriber.hs | 250 +++---- src/Simplex/Chat/Store/Connections.hs | 26 +- src/Simplex/Chat/Store/ContactRequest.hs | 20 +- src/Simplex/Chat/Store/Delivery.hs | 8 +- src/Simplex/Chat/Store/Direct.hs | 88 +-- src/Simplex/Chat/Store/Files.hs | 18 +- src/Simplex/Chat/Store/Groups.hs | 414 ++++++------ src/Simplex/Chat/Store/Messages.hs | 130 ++-- src/Simplex/Chat/Store/Profiles.hs | 18 +- src/Simplex/Chat/Store/Shared.hs | 36 +- src/Simplex/Chat/Types.hs | 4 + tests/ChatTests/Utils.hs | 6 +- 19 files changed, 977 insertions(+), 961 deletions(-) diff --git a/apps/simplex-directory-service/src/Directory/Service.hs b/apps/simplex-directory-service/src/Directory/Service.hs index 577cc99752..63e1a0ff69 100644 --- a/apps/simplex-directory-service/src/Directory/Service.hs +++ b/apps/simplex-directory-service/src/Directory/Service.hs @@ -204,7 +204,7 @@ linkCheckThread_ opts env@ServiceState {eventQ} threadDelay $ linkCheckInterval opts * 1000000 u <- readTVarIO $ currentUser cc forM_ u $ \user -> - withDB' "linkCheckThread" cc (\db -> getAllGroupRegs_ db user) >>= \case + withDB' "linkCheckThread" cc (\db -> getAllGroupRegs_ db (storeCxt cc) user) >>= \case Left e -> logError $ "linkCheckThread error: " <> T.pack e Right grs -> forM_ grs $ \(gInfo, gr) -> unless (groupRemoved $ groupRegStatus gr) $ @@ -462,7 +462,7 @@ directoryServiceEvent st opts@DirectoryOpts {adminUsers, superUsers, serviceName getOwnerGroupMember :: GroupId -> GroupReg -> IO (Either String GroupMember) getOwnerGroupMember gId GroupReg {dbOwnerMemberId} = case dbOwnerMemberId of - Just mId -> withDB "getGroupMember" cc $ \db -> withExceptT show $ getGroupMember db (vr cc) user gId mId + Just mId -> withDB "getGroupMember" cc $ \db -> withExceptT show $ getGroupMember db (storeCxt cc) user gId mId Nothing -> pure $ Left "no owner member in group registration" deServiceJoinedGroup :: ContactId -> GroupInfo -> GroupMember -> IO () @@ -556,7 +556,7 @@ directoryServiceEvent st opts@DirectoryOpts {adminUsers, superUsers, serviceName Right (CRConnectionPlan _ _ (CPGroupLink (GLPKnown {groupInfo = g'}))) -> case dbOwnerMemberId gr of Just ownerGMId -> - withDB "getGroupMember" cc (\db -> withExceptT show $ getGroupMember db (vr cc) user groupId ownerGMId) >>= \case + withDB "getGroupMember" cc (\db -> withExceptT show $ getGroupMember db (storeCxt cc) user groupId ownerGMId) >>= \case Right ownerMember | let GroupMember {memberRole = role} = ownerMember, role >= GROwner -> setGroupStatus notifyAdminUsers st env cc groupId (GRSPendingApproval n') (`updatedNotification` g') @@ -813,7 +813,7 @@ directoryServiceEvent st opts@DirectoryOpts {adminUsers, superUsers, serviceName _ -> False checkValidOwner dbOwnerMemberId owners onValid = case dbOwnerMemberId of Just ownerGMId -> - withDB "checkGroupLink" cc (\db -> withExceptT show $ getGroupMember db (vr cc) user groupId ownerGMId) >>= \case + withDB "checkGroupLink" cc (\db -> withExceptT show $ getGroupMember db (storeCxt cc) user groupId ownerGMId) >>= \case Right GroupMember {memberId, memberPubKey} | any (\GroupLinkOwner {memberId = mId, memberKey} -> memberId == mId && memberPubKey == Just memberKey) owners -> onValid _ -> setGroupStatus logError st env cc groupId GRSSuspendedBadRoles $ \gr' -> @@ -985,7 +985,7 @@ directoryServiceEvent st opts@DirectoryOpts {adminUsers, superUsers, serviceName addGroupReg notifyAdminUsers st cc ct gInfo GRSProposed $ \_ -> pure () sendChatCmd cc (APIConnectPreparedGroup gId False (Just ownerContact) Nothing) >>= \case Right CRStartedConnectionToGroup {groupInfo = gInfo'} -> - withDB "getGroupMember" cc (\db -> withExceptT show $ getGroupMemberByMemberId db (vr cc) user gInfo' mId) >>= \case + withDB "getGroupMember" cc (\db -> withExceptT show $ getGroupMemberByMemberId db (storeCxt cc) user gInfo' mId) >>= \case Right ownerMember -> void $ setGroupRegOwner cc gId ownerMember Left e -> do @@ -998,7 +998,7 @@ directoryServiceEvent st opts@DirectoryOpts {adminUsers, superUsers, serviceName deReregistration ct g@GroupInfo {groupId, groupProfile = GroupProfile {publicGroup = pg_}} profileChanged LinkOwnerSig {ownerId = Just (B64UrlByteString oIdBytes)} = do let mId = MemberId oIdBytes gt = maybe "group" groupTypeStr' pg_ - withDB "getGroupMemberByMemberId" cc (\db -> withExceptT show $ getGroupMemberByMemberId db (vr cc) user g mId) >>= \case + withDB "getGroupMemberByMemberId" cc (\db -> withExceptT show $ getGroupMemberByMemberId db (storeCxt cc) user g mId) >>= \case Right ownerMember@GroupMember {memberRole = role, memberStatus} -> if | role >= GROwner && memberStatus /= GSMemUnknown -> @@ -1451,7 +1451,7 @@ directoryServiceEvent st opts@DirectoryOpts {adminUsers, superUsers, serviceName getOwnersInfo :: [(GroupInfo, GroupReg)] -> IO [((GroupInfo, GroupReg), Maybe (Either String Contact))] getOwnersInfo gs = fmap (either (\e -> map (,Just (Left e)) gs) id) $ withDB' "getOwnersInfo" cc $ \db -> - mapM (\g@(_, gr) -> fmap ((g,) . Just . first show) $ runExceptT $ getContact db (vr cc) user $ dbContactId gr) gs + mapM (\g@(_, gr) -> fmap ((g,) . Just . first show) $ runExceptT $ getContact db (storeCxt cc) user $ dbContactId gr) gs sendGroupsInfo :: Contact -> ChatItemId -> Bool -> ([(GroupInfo, GroupReg)], Int) -> IO () sendGroupsInfo ct ciId isAdmin (gs, n) = do @@ -1519,7 +1519,7 @@ updateGroupListingFiles cc u dir = Left e -> logError $ "generateListing error: failed to read groups: " <> T.pack e getContact' :: ChatController -> User -> ContactId -> IO (Either String Contact) -getContact' cc user ctId = withDB "getContact" cc $ \db -> withExceptT show $ getContact db (vr cc) user ctId +getContact' cc user ctId = withDB "getContact" cc $ \db -> withExceptT show $ getContact db (storeCxt cc) user ctId getGroupLink' :: ChatController -> User -> GroupInfo -> IO (Either String GroupLink) getGroupLink' cc user gInfo = diff --git a/apps/simplex-directory-service/src/Directory/Store.hs b/apps/simplex-directory-service/src/Directory/Store.hs index b5f7220724..4036bd8cf1 100644 --- a/apps/simplex-directory-service/src/Directory/Store.hs +++ b/apps/simplex-directory-service/src/Directory/Store.hs @@ -85,7 +85,6 @@ import Data.Time.Clock.System (systemEpochDay) import Directory.Search import Directory.Util import Simplex.Chat.Controller -import Simplex.Chat.Protocol (supportedChatVRange) import Simplex.Chat.Options.DB (FromField (..), ToField (..)) import Simplex.Chat.Store import Simplex.Chat.Store.Groups @@ -315,28 +314,28 @@ getGroupReg_ db gId = getGroupAndReg :: ChatController -> User -> GroupId -> IO (Either String (GroupInfo, GroupReg)) getGroupAndReg cc user@User {userId, userContactId} gId = withDB "getGroupAndReg" cc $ \db -> - ExceptT $ firstRow (toGroupInfoReg (vr cc) user) ("group " ++ show gId ++ " not found") $ + ExceptT $ firstRow (toGroupInfoReg (storeCxt cc) user) ("group " ++ show gId ++ " not found") $ DB.query db (groupReqQuery <> " AND g.group_id = ?") (userId, userContactId, gId) getUserGroupReg :: ChatController -> User -> ContactId -> UserGroupRegId -> IO (Either String (GroupInfo, GroupReg)) getUserGroupReg cc user@User {userId, userContactId} ctId ugrId = withDB "getUserGroupReg" cc $ \db -> - ExceptT $ firstRow (toGroupInfoReg (vr cc) user) ("group " ++ show ugrId ++ " not found") $ + ExceptT $ firstRow (toGroupInfoReg (storeCxt cc) user) ("group " ++ show ugrId ++ " not found") $ DB.query db (groupReqQuery <> " AND r.contact_id = ? AND r.user_group_reg_id = ?") (userId, userContactId, ctId, ugrId) getUserGroupRegs :: ChatController -> User -> ContactId -> IO (Either String [(GroupInfo, GroupReg)]) getUserGroupRegs cc user@User {userId, userContactId} ctId = withDB' "getUserGroupRegs" cc $ \db -> - map (toGroupInfoReg (vr cc) user) + map (toGroupInfoReg (storeCxt cc) user) <$> DB.query db (groupReqQuery <> " AND r.contact_id = ? ORDER BY r.user_group_reg_id") (userId, userContactId, ctId) getAllListedGroups :: ChatController -> User -> IO (Either String [(GroupInfo, GroupReg, Maybe GroupLink)]) -getAllListedGroups cc user = withDB' "getAllListedGroups" cc $ \db -> getAllListedGroups_ db (vr cc) user +getAllListedGroups cc user = withDB' "getAllListedGroups" cc $ \db -> getAllListedGroups_ db (storeCxt cc) user -getAllListedGroups_ :: DB.Connection -> VersionRangeChat -> User -> IO [(GroupInfo, GroupReg, Maybe GroupLink)] -getAllListedGroups_ db vr' user@User {userId, userContactId} = +getAllListedGroups_ :: DB.Connection -> StoreCxt -> User -> IO [(GroupInfo, GroupReg, Maybe GroupLink)] +getAllListedGroups_ db cxt user@User {userId, userContactId} = DB.query db (groupReqQuery <> " AND r.group_reg_status = ?") (userId, userContactId, GRSActive) - >>= mapM (withGroupLink . toGroupInfoReg vr' user) + >>= mapM (withGroupLink . toGroupInfoReg cxt user) where withGroupLink (g, gr) = (g,gr,) . eitherToMaybe <$> runExceptT (getGroupLink db user g) @@ -382,7 +381,7 @@ searchListedGroups cc user@User {userId, userContactId} searchType lastGroup_ pa countQuery' = countQuery <> " JOIN group_profiles gp ON gp.group_profile_id = g.group_profile_id WHERE r.group_reg_status = ? " orderBy = " ORDER BY g.summary_current_members_count DESC, r.group_reg_id ASC " where - groups = (map (toGroupInfoReg (vr cc) user) <$>) + groups = (map (toGroupInfoReg (storeCxt cc) user) <$>) count = maybeFirstRow' 0 fromOnly listedGroupQuery = groupReqQuery <> " AND r.group_reg_status = ? " countQuery = "SELECT COUNT(1) FROM groups g JOIN sx_directory_group_regs r ON g.group_id = r.group_id " @@ -395,22 +394,22 @@ searchListedGroups cc user@User {userId, userContactId} searchType lastGroup_ pa ) |] -getAllGroupRegs_ :: DB.Connection -> User -> IO [(GroupInfo, GroupReg)] -getAllGroupRegs_ db user@User {userId, userContactId} = - map (toGroupInfoReg supportedChatVRange user) +getAllGroupRegs_ :: DB.Connection -> StoreCxt -> User -> IO [(GroupInfo, GroupReg)] +getAllGroupRegs_ db cxt user@User {userId, userContactId} = + map (toGroupInfoReg cxt user) <$> DB.query db groupReqQuery (userId, userContactId) getDuplicateGroupRegs :: ChatController -> User -> Text -> IO (Either String [(GroupInfo, GroupReg)]) getDuplicateGroupRegs cc user@User {userId, userContactId} displayName = withDB' "getDuplicateGroupRegs" cc $ \db -> - map (toGroupInfoReg (vr cc) user) + map (toGroupInfoReg (storeCxt cc) user) <$> DB.query db (groupReqQuery <> " AND gp.display_name = ?") (userId, userContactId, displayName) listLastGroups :: ChatController -> User -> Int -> IO (Either String ([(GroupInfo, GroupReg)], Int)) listLastGroups cc user@User {userId, userContactId} count = withDB' "getUserGroupRegs" cc $ \db -> do gs <- - map (toGroupInfoReg (vr cc) user) + map (toGroupInfoReg (storeCxt cc) user) <$> DB.query db (groupReqQuery <> " ORDER BY group_reg_id DESC LIMIT ?") (userId, userContactId, count) n <- maybeFirstRow' 0 fromOnly $ DB.query_ db "SELECT COUNT(1) FROM sx_directory_group_regs" pure (gs, n) @@ -419,14 +418,14 @@ listPendingGroups :: ChatController -> User -> Int -> IO (Either String ([(Group listPendingGroups cc user@User {userId, userContactId} count = withDB' "getUserGroupRegs" cc $ \db -> do gs <- - map (toGroupInfoReg (vr cc) user) + map (toGroupInfoReg (storeCxt cc) user) <$> DB.query db (groupReqQuery <> " AND r.group_reg_status LIKE 'pending_approval%' ORDER BY group_reg_id DESC LIMIT ?") (userId, userContactId, count) n <- maybeFirstRow' 0 fromOnly $ DB.query_ db "SELECT COUNT(1) FROM sx_directory_group_regs WHERE group_reg_status LIKE 'pending_approval%'" pure (gs, n) -toGroupInfoReg :: VersionRangeChat -> User -> (GroupInfoRow :. GroupRegRow) -> (GroupInfo, GroupReg) -toGroupInfoReg vr' User {userContactId} (groupRow :. grRow) = - (toGroupInfo vr' userContactId [] groupRow, rowToGroupReg grRow) +toGroupInfoReg :: StoreCxt -> User -> (GroupInfoRow :. GroupRegRow) -> (GroupInfo, GroupReg) +toGroupInfoReg cxt User {userContactId} (groupRow :. grRow) = + (toGroupInfo cxt userContactId [] groupRow, rowToGroupReg grRow) type GroupRegRow = (GroupId, UserGroupRegId, ContactId, Maybe GroupMemberId, GroupRegStatus, BoolInt, UTCTime) diff --git a/apps/simplex-directory-service/src/Directory/Store/Migrate.hs b/apps/simplex-directory-service/src/Directory/Store/Migrate.hs index aa101d7bf7..d501fbd5c3 100644 --- a/apps/simplex-directory-service/src/Directory/Store/Migrate.hs +++ b/apps/simplex-directory-service/src/Directory/Store/Migrate.hs @@ -18,10 +18,9 @@ import Directory.Listing import Directory.Options import Directory.Store import Simplex.Chat (createChatDatabase) -import Simplex.Chat.Controller (ChatConfig (..), ChatDatabase (..)) +import Simplex.Chat.Controller (ChatConfig (..), ChatDatabase (..), mkStoreCxt) import Simplex.Chat.Options (CoreChatOpts (..)) import Simplex.Chat.Options.DB -import Simplex.Chat.Protocol (supportedChatVRange) import Simplex.Chat.Store.Groups (getHostMember) import Simplex.Chat.Store.Profiles (getUsers) import Simplex.Chat.Store.Shared (getGroupInfo) @@ -62,7 +61,7 @@ checkDirectoryLog opts cfg = runDirectoryMigrations opts cfg st gs <- readDirectoryLogData logFile withActiveUser st $ \user -> withTransaction st $ \db -> do - mapM_ (verifyGroupRegistration db user) gs + mapM_ (verifyGroupRegistration (mkStoreCxt cfg) db user) gs putStrLn $ show (length gs) <> " group registrations OK" importDirectoryLogToDB :: DirectoryOpts -> ChatConfig -> IO () @@ -73,7 +72,7 @@ importDirectoryLogToDB opts cfg = do ctRegs <- TM.emptyIO withActiveUser st $ \user -> withTransaction st $ \db -> do forM_ gs $ \gr -> - whenM (verifyGroupRegistration db user gr) $ do + whenM (verifyGroupRegistration (mkStoreCxt cfg) db user gr) $ do putStrLn $ "importing group " <> show (dbGroupId gr) insertGroupReg db =<< fixUserGroupRegId ctRegs gr renamePath logFile (logFile ++ ".bak") @@ -101,28 +100,28 @@ exportDBToDirectoryLog opts cfg = runDirectoryMigrations opts cfg st withActiveUser st $ \user -> do gs <- withFile logFile WriteMode $ \h -> withTransaction st $ \db -> do - gs <- getAllGroupRegs_ db user + gs <- getAllGroupRegs_ db (mkStoreCxt cfg) user forM_ gs $ \(_, gr) -> - whenM (verifyGroupRegistration db user gr) $ + whenM (verifyGroupRegistration (mkStoreCxt cfg) db user gr) $ B.hPutStrLn h $ strEncode $ GRCreate gr pure gs putStrLn $ show (length gs) <> " group registrations exported" saveGroupListingFiles :: DirectoryOpts -> ChatConfig -> IO () -saveGroupListingFiles opts _cfg = case webFolder opts of +saveGroupListingFiles opts cfg = case webFolder opts of Nothing -> exit "use --web-folder to generate listings" Just dir -> withChatStore opts $ \st -> withActiveUser st $ \user -> withTransaction st $ \db -> - getAllListedGroups_ db supportedChatVRange user >>= generateListing dir + getAllListedGroups_ db (mkStoreCxt cfg) user >>= generateListing dir -verifyGroupRegistration :: DB.Connection -> User -> GroupReg -> IO Bool -verifyGroupRegistration db user GroupReg {dbGroupId = gId, dbContactId = ctId, dbOwnerMemberId, groupRegStatus} = - runExceptT (getGroupInfo db supportedChatVRange user gId) >>= \case +verifyGroupRegistration :: StoreCxt -> DB.Connection -> User -> GroupReg -> IO Bool +verifyGroupRegistration cxt db user GroupReg {dbGroupId = gId, dbContactId = ctId, dbOwnerMemberId, groupRegStatus} = + runExceptT (getGroupInfo db cxt user gId) >>= \case Left e -> False <$ putStrLn ("Error: loading group " <> show gId <> " (skipping): " <> show e) Right GroupInfo {localDisplayName} -> do let groupRef = show gId <> " " <> T.unpack localDisplayName - runExceptT (getHostMember db supportedChatVRange user gId) >>= \case + runExceptT (getHostMember db cxt user gId) >>= \case Left e -> False <$ putStrLn ("Error: loading host member of group " <> groupRef <> " (skipping): " <> show e) Right GroupMember {groupMemberId = mId', memberContactId = ctId'} -> case dbOwnerMemberId of Nothing -> True <$ putStrLn ("Warning: group " <> groupRef <> " has no owner member ID, host member ID is " <> show mId' <> ", registration status: " <> B.unpack (strEncode groupRegStatus)) diff --git a/apps/simplex-directory-service/src/Directory/Util.hs b/apps/simplex-directory-service/src/Directory/Util.hs index a4b79a1bef..52d376a945 100644 --- a/apps/simplex-directory-service/src/Directory/Util.hs +++ b/apps/simplex-directory-service/src/Directory/Util.hs @@ -15,9 +15,9 @@ import Simplex.Messaging.Agent.Store.Common (withTransaction) import qualified Simplex.Messaging.Agent.Store.DB as DB import Simplex.Messaging.Util (catchAll) -vr :: ChatController -> VersionRangeChat -vr ChatController {config = ChatConfig {chatVRange}} = chatVRange -{-# INLINE vr #-} +storeCxt :: ChatController -> StoreCxt +storeCxt ChatController {config} = mkStoreCxt config +{-# INLINE storeCxt #-} withDB' :: Text -> ChatController -> (DB.Connection -> IO a) -> IO (Either String a) withDB' cxt cc a = withDB cxt cc $ ExceptT . fmap Right . a diff --git a/src/Simplex/Chat/Controller.hs b/src/Simplex/Chat/Controller.hs index fe5b67f041..c92c1f9e09 100644 --- a/src/Simplex/Chat/Controller.hs +++ b/src/Simplex/Chat/Controller.hs @@ -169,6 +169,12 @@ data ChatConfig = ChatConfig chatHooks :: ChatHooks } +-- | Builds the read-only context threaded through store functions from chat config. +-- The single construction point, so new store-wide config (e.g. server keys) is added in one place. +mkStoreCxt :: ChatConfig -> StoreCxt +mkStoreCxt ChatConfig {chatVRange} = StoreCxt chatVRange +{-# INLINE mkStoreCxt #-} + data RandomAgentServers = RandomAgentServers { smpServers :: NonEmpty (ServerCfg 'PSMP), xftpServers :: NonEmpty (ServerCfg 'PXFTP) diff --git a/src/Simplex/Chat/Library/Commands.hs b/src/Simplex/Chat/Library/Commands.hs index 20e9d6a0fb..f35a9ef177 100644 --- a/src/Simplex/Chat/Library/Commands.hs +++ b/src/Simplex/Chat/Library/Commands.hs @@ -327,8 +327,8 @@ execChatCommand rh s retryNum = execChatCommand' :: ChatCommand -> Int -> CM' (Either ChatError ChatResponse) execChatCommand' cmd retryNum = handleCommandError $ do - vr <- chatVersionRange - processChatCommand vr (NRMInteractive' retryNum) cmd + cxt <- chatStoreCxt + processChatCommand cxt (NRMInteractive' retryNum) cmd execRemoteCommand :: RemoteHostId -> ChatCommand -> ByteString -> Int -> CM' (Either ChatError ChatResponse) execRemoteCommand rhId cmd s retryNum = handleCommandError $ getRemoteHostClient rhId >>= \rh -> processRemoteCommand rhId rh cmd s retryNum @@ -345,8 +345,8 @@ parseChatCommand :: ByteString -> Either String ChatCommand parseChatCommand = A.parseOnly chatCommandP . B.dropWhileEnd isSpace -- | Chat API commands interpreted in context of a local zone -processChatCommand :: VersionRangeChat -> NetworkRequestMode -> ChatCommand -> CM ChatResponse -processChatCommand vr nm = \case +processChatCommand :: StoreCxt -> NetworkRequestMode -> ChatCommand -> CM ChatResponse +processChatCommand cxt nm = \case ShowActiveUser -> withUser' $ pure . CRActiveUser CreateActiveUser NewUser {profile, pastTimestamp, userChatRelay} -> do forM_ profile $ \Profile {displayName} -> checkValidName displayName @@ -411,26 +411,26 @@ processChatCommand vr nm = \case SetActiveUser uName viewPwd_ -> do tryAllErrors (withFastStore (`getUserIdByName` uName)) >>= \case Left _ -> throwChatError CEUserUnknown - Right userId -> processChatCommand vr nm $ APISetActiveUser userId viewPwd_ + Right userId -> processChatCommand cxt nm $ APISetActiveUser userId viewPwd_ SetAllContactReceipts onOff -> withUser $ \_ -> withFastStore' (`updateAllContactReceipts` onOff) >> ok_ APISetUserContactReceipts userId' settings -> withUser $ \user -> do user' <- privateGetUser userId' validateUserPassword user user' Nothing withFastStore' $ \db -> updateUserContactReceipts db user' settings ok user - SetUserContactReceipts settings -> withUser $ \User {userId} -> processChatCommand vr nm $ APISetUserContactReceipts userId settings + SetUserContactReceipts settings -> withUser $ \User {userId} -> processChatCommand cxt nm $ APISetUserContactReceipts userId settings APISetUserGroupReceipts userId' settings -> withUser $ \user -> do user' <- privateGetUser userId' validateUserPassword user user' Nothing withFastStore' $ \db -> updateUserGroupReceipts db user' settings ok user - SetUserGroupReceipts settings -> withUser $ \User {userId} -> processChatCommand vr nm $ APISetUserGroupReceipts userId settings + SetUserGroupReceipts settings -> withUser $ \User {userId} -> processChatCommand cxt nm $ APISetUserGroupReceipts userId settings APISetUserAutoAcceptMemberContacts userId' onOff -> withUser $ \user -> do user' <- privateGetUser userId' validateUserPassword user user' Nothing withFastStore' $ \db -> updateUserAutoAcceptMemberContacts db user' onOff ok user - SetUserAutoAcceptMemberContacts onOff -> withUser $ \User {userId} -> processChatCommand vr nm $ APISetUserAutoAcceptMemberContacts userId onOff + SetUserAutoAcceptMemberContacts onOff -> withUser $ \User {userId} -> processChatCommand cxt nm $ APISetUserAutoAcceptMemberContacts userId onOff APIHideUser userId' (UserPwd viewPwd) -> withUser $ \user -> do user' <- privateGetUser userId' case viewPwdHash user' of @@ -456,10 +456,10 @@ processChatCommand vr nm = \case setUserPrivacy user user' {viewPwdHash = Nothing, showNtfs = True} APIMuteUser userId' -> setUserNotifications userId' False APIUnmuteUser userId' -> setUserNotifications userId' True - HideUser viewPwd -> withUser $ \User {userId} -> processChatCommand vr nm $ APIHideUser userId viewPwd - UnhideUser viewPwd -> withUser $ \User {userId} -> processChatCommand vr nm $ APIUnhideUser userId viewPwd - MuteUser -> withUser $ \User {userId} -> processChatCommand vr nm $ APIMuteUser userId - UnmuteUser -> withUser $ \User {userId} -> processChatCommand vr nm $ APIUnmuteUser userId + HideUser viewPwd -> withUser $ \User {userId} -> processChatCommand cxt nm $ APIHideUser userId viewPwd + UnhideUser viewPwd -> withUser $ \User {userId} -> processChatCommand cxt nm $ APIUnhideUser userId viewPwd + MuteUser -> withUser $ \User {userId} -> processChatCommand cxt nm $ APIMuteUser userId + UnmuteUser -> withUser $ \User {userId} -> processChatCommand cxt nm $ APIUnmuteUser userId APIDeleteUser userId' delSMPQueues viewPwd_ -> withUser $ \user -> do user' <- privateGetUser userId' validateUserPassword user user' viewPwd_ @@ -529,7 +529,7 @@ processChatCommand vr nm = \case ExportArchive -> do ts <- liftIO getCurrentTime let filePath = "simplex-chat." <> formatTime defaultTimeLocale "%FT%H%M%SZ" ts <> ".zip" - processChatCommand vr nm $ APIExportArchive $ ArchiveConfig filePath Nothing Nothing + processChatCommand cxt nm $ APIExportArchive $ ArchiveConfig filePath Nothing Nothing APIImportArchive cfg -> checkChatStopped $ do fileErrs <- lift $ importArchive cfg setStoreChanged @@ -558,16 +558,16 @@ processChatCommand vr nm = \case tags <- withFastStore' (`getUserChatTags` user) pure $ CRChatTags user tags APIGetChats {userId, pendingConnections, pagination, query} -> withUserId' userId $ \user -> do - (errs, previews) <- partitionEithers <$> withFastStore' (\db -> getChatPreviews db vr user pendingConnections pagination query) + (errs, previews) <- partitionEithers <$> withFastStore' (\db -> getChatPreviews db cxt user pendingConnections pagination query) unless (null errs) $ toView $ CEvtChatErrors (map ChatErrorStore errs) pure $ CRApiChats user previews APIGetChat (ChatRef cType cId scope_) contentFilter pagination search -> withUser $ \user -> case cType of -- TODO optimize queries calculating ChatStats, currently they're disabled CTDirect -> do - (directChat, navInfo) <- withFastStore (\db -> getDirectChat db vr user cId contentFilter pagination search) + (directChat, navInfo) <- withFastStore (\db -> getDirectChat db cxt user cId contentFilter pagination search) pure $ CRApiChat user (AChat SCTDirect directChat) navInfo CTGroup -> do - (groupChat, navInfo) <- withFastStore (\db -> getGroupChat db vr user cId scope_ contentFilter pagination search) + (groupChat, navInfo) <- withFastStore (\db -> getGroupChat db cxt user cId scope_ contentFilter pagination search) groupChat' <- checkSupportChatAttention user groupChat pure $ CRApiChat user (AChat SCTGroup groupChat') navInfo CTLocal -> do @@ -583,7 +583,7 @@ processChatCommand vr nm = \case case correctedMemAttention (groupMemberId' scopeMem) suppChat chatItems of Just newMemAttention -> do (gInfo', scopeMem') <- - withFastStore' $ \db -> setSupportChatMemberAttention db vr user gInfo scopeMem newMemAttention + withFastStore' $ \db -> setSupportChatMemberAttention db cxt user gInfo scopeMem newMemAttention pure (groupChat {chatInfo = GroupChat gInfo' (Just $ GCSIMemberSupport (Just scopeMem'))} :: Chat 'CTGroup) Nothing -> pure groupChat _ -> pure groupChat @@ -600,11 +600,11 @@ processChatCommand vr nm = \case APIGetChatContentTypes chatRef -> withUser $ \user -> CRChatContentTypes <$> withStore (\db -> getChatContentTypes db user chatRef) APIGetChatItems pagination search -> withUser $ \user -> do - chatItems <- withFastStore $ \db -> getAllChatItems db vr user pagination search + chatItems <- withFastStore $ \db -> getAllChatItems db cxt user pagination search pure $ CRChatItems user Nothing chatItems APIGetChatItemInfo chatRef itemId -> withUser $ \user -> do (aci@(AChatItem cType dir _ ci), versions) <- withFastStore $ \db -> - (,) <$> getAChatItem db vr user chatRef itemId <*> liftIO (getChatItemVersions db itemId) + (,) <$> getAChatItem db cxt user chatRef itemId <*> liftIO (getChatItemVersions db itemId) let itemVersions = if null versions then maybeToList $ mkItemVersion ci else versions memberDeliveryStatuses <- case (cType, dir) of (SCTGroup, SMDSnd) -> L.nonEmpty <$> withFastStore' (`getGroupSndStatuses` itemId) @@ -615,10 +615,10 @@ processChatCommand vr nm = \case getForwardedFromItem :: User -> ChatItem c d -> CM (Maybe AChatItem) getForwardedFromItem user ChatItem {meta = CIMeta {itemForwarded}} = case itemForwarded of Just (CIFFContact _ _ (Just ctId) (Just fwdItemId)) -> - Just <$> withFastStore (\db -> getAChatItem db vr user (ChatRef CTDirect ctId Nothing) fwdItemId) + Just <$> withFastStore (\db -> getAChatItem db cxt user (ChatRef CTDirect ctId Nothing) fwdItemId) Just (CIFFGroup _ _ (Just gId) (Just fwdItemId)) -> -- TODO [knocking] getAChatItem doesn't differentiate how to read based on scope - it should, instead of using group filter - Just <$> withFastStore (\db -> getAChatItem db vr user (ChatRef CTGroup gId Nothing) fwdItemId) + Just <$> withFastStore (\db -> getAChatItem db cxt user (ChatRef CTGroup gId Nothing) fwdItemId) _ -> pure Nothing APISendMessages sendRef live itemTTL cms -> withUser $ \user -> mapM_ assertAllowedContent' cms >> case sendRef of SRDirect chatId -> do @@ -631,7 +631,7 @@ processChatCommand vr nm = \case Nothing -> pure () withGroupLock "sendMessage" chatId $ do (gInfo, cmrs) <- withFastStore $ \db -> do - g <- getGroupInfo db vr user chatId + g <- getGroupInfo db cxt user chatId (g,) <$> mapM (composedMessageReqMentions db user g) cms sendGroupContentMessages user gInfo gsScope asGroup live itemTTL cmrs APICreateChatTag (ChatTagData emoji text) -> withUser $ \user -> withFastStore' $ \db -> do @@ -659,18 +659,18 @@ processChatCommand vr nm = \case createNoteFolderContentItems user folderId (L.map composedMessageReq cms) APIReportMessage gId reportedItemId reportReason reportText -> withUser $ \user -> withGroupLock "reportMessage" gId $ do - gInfo <- withFastStore $ \db -> getGroupInfo db vr user gId + gInfo <- withFastStore $ \db -> getGroupInfo db cxt user gId let mc = MCReport reportText reportReason cm = ComposedMessage {fileSource = Nothing, quotedItemId = Just reportedItemId, msgContent = mc, mentions = M.empty} sendGroupContentMessages user gInfo (Just $ GCSMemberSupport Nothing) False False Nothing [composedMessageReq cm] ReportMessage {groupName, contactName_, reportReason, reportedMessage} -> withUser $ \user -> do gId <- withFastStore $ \db -> getGroupIdByName db user groupName reportedItemId <- withFastStore $ \db -> getGroupChatItemIdByText db user gId contactName_ reportedMessage - processChatCommand vr nm $ APIReportMessage gId reportedItemId reportReason "" + processChatCommand cxt nm $ APIReportMessage gId reportedItemId reportReason "" APIUpdateChatItem (ChatRef cType chatId scope) itemId live (UpdatedMessage mc mentions) -> withUser $ \user -> assertAllowedContent mc >> case cType of CTDirect -> withContactLock "updateChatItem" chatId $ do unless (null mentions) $ throwCmdError "mentions are not supported in this chat" - ct@Contact {contactId} <- withFastStore $ \db -> getContact db vr user chatId + ct@Contact {contactId} <- withFastStore $ \db -> getContact db cxt user chatId assertDirectAllowed user MDSnd ct XMsgUpdate_ cci <- withFastStore $ \db -> getDirectCIWithReactions db user ct itemId case cci of @@ -694,7 +694,7 @@ processChatCommand vr nm = \case _ -> throwChatError CEInvalidChatItemUpdate CChatItem SMDRcv _ -> throwChatError CEInvalidChatItemUpdate CTGroup -> withGroupLock "updateChatItem" chatId $ do - gInfo@GroupInfo {groupId, membership} <- withFastStore $ \db -> getGroupInfo db vr user chatId + gInfo@GroupInfo {groupId, membership} <- withFastStore $ \db -> getGroupInfo db cxt user chatId when (isNothing scope) $ assertUserGroupRole gInfo GRAuthor let (_, ft_) = msgContentTexts mc if prohibitedSimplexLinks gInfo membership mc ft_ @@ -706,8 +706,8 @@ processChatCommand vr nm = \case CChatItem SMDSnd ci@ChatItem {meta = CIMeta {itemSharedMsgId, itemTimed, itemLive, editable, showGroupAsSender}, content = ciContent} -> do case (ciContent, itemSharedMsgId, editable) of (CISndMsgContent oldMC, Just itemSharedMId, True) -> do - chatScopeInfo <- mapM (getChatScopeInfo vr user) scope - recipients <- getGroupRecipients vr user gInfo chatScopeInfo groupKnockingVersion + chatScopeInfo <- mapM (getChatScopeInfo cxt user) scope + recipients <- getGroupRecipients cxt user gInfo chatScopeInfo groupKnockingVersion let changed = mc /= oldMC if changed || fromMaybe False itemLive then do @@ -763,7 +763,7 @@ processChatCommand vr nm = \case CTGroup -> withGroupLock "deleteChatItem" chatId $ do (gInfo, items) <- getCommandGroupChatItems user chatId itemIds -- TODO [knocking] check scope for all items? - chatScopeInfo <- mapM (getChatScopeInfo vr user) scope + chatScopeInfo <- mapM (getChatScopeInfo cxt user) scope deletions <- case mode of CIDMInternal | publicGroupEditor gInfo (membership gInfo) -> throwChatError CEInvalidChatItemDelete @@ -771,7 +771,7 @@ processChatCommand vr nm = \case CIDMInternalMark -> do markGroupCIsDeleted user gInfo chatScopeInfo items Nothing =<< liftIO getCurrentTime CIDMBroadcast -> do - recipients <- getGroupRecipients vr user gInfo chatScopeInfo groupKnockingVersion + recipients <- getGroupRecipients cxt user gInfo chatScopeInfo groupKnockingVersion assertDeletable items assertUserGroupRole gInfo GRObserver -- can still delete messages sent earlier let msgIds = itemsMsgIds items @@ -780,7 +780,7 @@ processChatCommand vr nm = \case delGroupChatItems user gInfo chatScopeInfo items False CIDMHistory -> do unless (publicGroupEditor gInfo (membership gInfo)) $ throwChatError CEInvalidChatItemDelete - recipients <- getGroupRecipients vr user gInfo chatScopeInfo groupKnockingVersion + recipients <- getGroupRecipients cxt user gInfo chatScopeInfo groupKnockingVersion let msgIds = itemsMsgIds items events = L.nonEmpty $ map (\msgId -> XMsgDel msgId Nothing (toMsgScope gInfo <$> chatScopeInfo) True) msgIds mapM_ (sendGroupMessages user gInfo Nothing False recipients) events @@ -808,12 +808,12 @@ processChatCommand vr nm = \case APIDeleteMemberChatItem gId itemIds -> withUser $ \user -> withGroupLock "deleteChatItem" gId $ do (gInfo, items) <- getCommandGroupChatItems user gId itemIds -- TODO [knocking] check scope is Nothing for all items? (prohibit moderation in support chats?) - ms <- withFastStore' $ \db -> getGroupMembers db vr user gInfo + ms <- withFastStore' $ \db -> getGroupMembers db cxt user gInfo let recipients = filter memberCurrent ms deletions <- delGroupChatItemsForMembers user gInfo Nothing recipients items pure $ CRChatItemsDeleted user deletions True False APIArchiveReceivedReports gId -> withUser $ \user -> withFastStore $ \db -> do - g <- getGroupInfo db vr user gId + g <- getGroupInfo db cxt user gId deleteTs <- liftIO getCurrentTime ciIds <- liftIO $ markReceivedGroupReportsDeleted db user g deleteTs pure $ CRGroupChatItemsDeleted user g ciIds True (Just $ membership g) @@ -827,7 +827,7 @@ processChatCommand vr nm = \case CIDMInternalMark -> markGroupCIsDeleted user gInfo Nothing items Nothing =<< liftIO getCurrentTime CIDMHistory -> throwChatError CEInvalidChatItemDelete CIDMBroadcast -> do - ms <- withFastStore' $ \db -> getGroupModerators db vr user gInfo + ms <- withFastStore' $ \db -> getGroupModerators db cxt user gInfo let recipients = filter memberCurrent ms delGroupChatItemsForMembers user gInfo Nothing recipients items pure $ CRChatItemsDeleted user deletions True False @@ -838,7 +838,7 @@ processChatCommand vr nm = \case APIChatItemReaction (ChatRef cType chatId scope) itemId add reaction -> withUser $ \user -> case cType of CTDirect -> withContactLock "chatItemReaction" chatId $ - withFastStore (\db -> (,) <$> getContact db vr user chatId <*> getDirectChatItem db user chatId itemId) >>= \case + withFastStore (\db -> (,) <$> getContact db cxt user chatId <*> getDirectChatItem db user chatId itemId) >>= \case (ct, CChatItem md ci@ChatItem {meta = CIMeta {itemSharedMsgId = Just itemSharedMId}}) -> do unless (featureAllowed SCFReactions forUser ct) $ throwCmdError $ "feature not allowed " <> T.unpack (chatFeatureNameText CFReactions) @@ -859,10 +859,10 @@ processChatCommand vr nm = \case withGroupLock "chatItemReaction" chatId $ do -- TODO [knocking] check chat item scope? (g@GroupInfo {membership}, CChatItem md ci) <- withFastStore $ \db -> do - g <- getGroupInfo db vr user chatId + g <- getGroupInfo db cxt user chatId (g,) <$> getGroupCIWithReactions db user g itemId - chatScopeInfo <- mapM (getChatScopeInfo vr user) scope - recipients <- getGroupRecipients vr user g chatScopeInfo groupKnockingVersion + chatScopeInfo <- mapM (getChatScopeInfo cxt user) scope + recipients <- getGroupRecipients cxt user g chatScopeInfo groupKnockingVersion case ci of ChatItem {meta = CIMeta {itemSharedMsgId = Just itemSharedMId}} -> do unless (groupFeatureAllowed SGFReactions g) $ @@ -893,7 +893,7 @@ processChatCommand vr nm = \case APIGetReactionMembers userId groupId itemId reaction -> withUserId userId $ \user -> do memberReactions <- withStore $ \db -> do CChatItem _ ChatItem {meta = CIMeta {itemSharedMsgId = Just itemSharedMId}} <- getGroupChatItem db user groupId itemId - liftIO $ getReactionMembers db vr user groupId itemSharedMId reaction + liftIO $ getReactionMembers db cxt user groupId itemSharedMId reaction pure $ CRReactionMembers user memberReactions -- TODO [knocking] forward from scope? APIPlanForwardChatItems (ChatRef fromCType fromChatId _scope) itemIds -> withUser $ \user -> case fromCType of @@ -957,7 +957,7 @@ processChatCommand vr nm = \case case L.nonEmpty cmrs of Just cmrs' -> withGroupLock "forwardChatItem, to group" toChatId $ do - gInfo <- withFastStore $ \db -> getGroupInfo db vr user toChatId + gInfo <- withFastStore $ \db -> getGroupInfo db cxt user toChatId sendGroupContentMessages user gInfo toScope sendAsGroup False itemTTL cmrs' Nothing -> pure $ CRNewChatItems user [] CTLocal -> do @@ -1091,7 +1091,7 @@ processChatCommand vr nm = \case pure $ prefix <> formattedDate <> ext APIShareChatMsgContent (ChatRef CTGroup groupId _) toSendRef -> withUser $ \user -> do GroupInfo {groupProfile = gp@GroupProfile {publicGroup}, membership = GroupMember {memberId, memberRole}, groupKeys} <- - withFastStore $ \db -> getGroupInfo db vr user groupId + withFastStore $ \db -> getGroupInfo db cxt user groupId case publicGroup of Nothing -> throwCmdError "not a public group" Just PublicGroupProfile {groupLink} -> do @@ -1113,11 +1113,11 @@ processChatCommand vr nm = \case shareChatBinding :: User -> SendRef -> CM (Maybe (ChatBinding, ByteString)) shareChatBinding u = \case SRDirect contactId -> do - ct <- withFastStore $ \db -> getContact db vr u contactId + ct <- withFastStore $ \db -> getContact db cxt u contactId forM (contactConn ct) $ \conn -> (CBDirect,) <$> withAgent (`getConnectionRatchetAdHash` aConnId conn) SRGroup toGroupId _ asGroup -> do - GroupInfo {groupProfile = GroupProfile {publicGroup}, membership = m} <- withFastStore $ \db -> getGroupInfo db vr u toGroupId + GroupInfo {groupProfile = GroupProfile {publicGroup}, membership = m} <- withFastStore $ \db -> getGroupInfo db cxt u toGroupId pure $ mkBinding m <$> publicGroup where mkBinding GroupMember {memberId} PublicGroupProfile {publicGroupId = pgId} @@ -1125,7 +1125,7 @@ processChatCommand vr nm = \case | otherwise = (CBGroup, smpEncode (pgId, memberId)) APIShareChatMsgContent _ _ -> throwCmdError "sharing is only supported for public groups" APIUserRead userId -> withUserId userId $ \user -> withFastStore' (`setUserChatsRead` user) >> ok user - UserRead -> withUser $ \User {userId} -> processChatCommand vr nm $ APIUserRead userId + UserRead -> withUser $ \User {userId} -> processChatCommand cxt nm $ APIUserRead userId APIChatRead chatRef@(ChatRef cType chatId scope_) -> withUser $ \_ -> case cType of CTDirect -> do user <- withFastStore $ \db -> getUserByContactId db chatId @@ -1139,7 +1139,7 @@ processChatCommand vr nm = \case CTGroup -> do (user, gInfo) <- withFastStore $ \db -> do user <- getUserByGroupId db chatId - gInfo <- getGroupInfo db vr user chatId + gInfo <- getGroupInfo db cxt user chatId pure (user, gInfo) ts <- liftIO getCurrentTime case scope_ of @@ -1151,10 +1151,10 @@ processChatCommand vr nm = \case forM_ timedItems $ \(itemId, deleteAt) -> startProximateTimedItemThread user (chatRef, itemId) deleteAt ok user Just scope -> do - scopeInfo <- getChatScopeInfo vr user scope + scopeInfo <- getChatScopeInfo cxt user scope (gInfo', m', timedItems) <- withFastStore' $ \db -> do timedItems <- getGroupUnreadTimedItems db user chatId (Just scope) - (gInfo', m') <- updateSupportChatItemsRead db vr user gInfo scopeInfo + (gInfo', m') <- updateSupportChatItemsRead db cxt user gInfo scopeInfo timedItems' <- setGroupChatItemsDeleteAt db user chatId timedItems ts pure (gInfo', m', timedItems') forM_ timedItems $ \(itemId, deleteAt) -> startProximateTimedItemThread user (chatRef, itemId) deleteAt @@ -1169,7 +1169,7 @@ processChatCommand vr nm = \case CTDirect -> do (user, ct) <- withFastStore $ \db -> do user <- getUserByContactId db chatId - ct <- getContact db vr user chatId + ct <- getContact db cxt user chatId pure (user, ct) timedItems <- withFastStore' $ \db -> do timedItems <- updateDirectChatItemsReadList db user chatId itemIds @@ -1179,11 +1179,11 @@ processChatCommand vr nm = \case CTGroup -> do (user, gInfo) <- withFastStore $ \db -> do user <- getUserByGroupId db chatId - gInfo <- getGroupInfo db vr user chatId + gInfo <- getGroupInfo db cxt user chatId pure (user, gInfo) - chatScopeInfo <- mapM (getChatScopeInfo vr user) scope + chatScopeInfo <- mapM (getChatScopeInfo cxt user) scope (timedItems, gInfo') <- withFastStore $ \db -> do - (timedItems, gInfo') <- updateGroupChatItemsReadList db vr user gInfo chatScopeInfo itemIds + (timedItems, gInfo') <- updateGroupChatItemsReadList db cxt user gInfo chatScopeInfo itemIds timedItems' <- liftIO $ setGroupChatItemsDeleteAt db user chatId timedItems =<< getCurrentTime pure (timedItems', gInfo') forM_ timedItems $ \(itemId, deleteAt) -> startProximateTimedItemThread user (chatRef, itemId) deleteAt @@ -1194,13 +1194,13 @@ processChatCommand vr nm = \case APIChatUnread (ChatRef cType chatId scope) unreadChat -> withUser $ \user -> case cType of CTDirect -> do withFastStore $ \db -> do - ct <- getContact db vr user chatId + ct <- getContact db cxt user chatId liftIO $ updateContactUnreadChat db user ct unreadChat ok user -- TODO [knocking] set support chat as unread? CTGroup | isNothing scope -> do withFastStore $ \db -> do - gInfo <- getGroupInfo db vr user chatId + gInfo <- getGroupInfo db cxt user chatId liftIO $ updateGroupUnreadChat db user gInfo unreadChat ok user CTLocal -> do @@ -1211,7 +1211,7 @@ processChatCommand vr nm = \case _ -> throwCmdError "not supported" APIDeleteChat cRef@(ChatRef cType chatId scope) cdm -> withUser $ \user@User {userId} -> case cType of CTDirect -> do - ct <- withFastStore $ \db -> getContact db vr user chatId + ct <- withFastStore $ \db -> getContact db cxt user chatId filesInfo <- withFastStore' $ \db -> getContactFileInfo db user ct withContactLock "deleteChat direct" chatId $ case cdm of @@ -1231,17 +1231,17 @@ processChatCommand vr nm = \case ct' <- withFastStore $ \db -> do liftIO $ deleteContactConnections db user ct liftIO $ void $ updateContactStatus db user ct CSDeletedByUser - getContact db vr user chatId + getContact db cxt user chatId pure $ CRContactDeleted user ct' CDMMessages -> do - void $ processChatCommand vr nm $ APIClearChat cRef + void $ processChatCommand cxt nm $ APIClearChat cRef withFastStore' $ \db -> setContactChatDeleted db user ct True pure $ CRContactDeleted user ct {chatDeleted = True} where sendDelDeleteConns ct notify = do let doSendDel = contactReady ct && contactActive ct && notify when doSendDel $ void (sendDirectContactMessage user ct XDirectDel) `catchAllErrors` const (pure ()) - contactConnIds <- map aConnId <$> withFastStore' (\db -> getContactConnections db vr userId ct) + contactConnIds <- map aConnId <$> withFastStore' (\db -> getContactConnections db cxt userId ct) deleteAgentConnectionsAsync' contactConnIds doSendDel CTContactConnection -> withConnectionLock "deleteChat contactConnection" chatId $ do conn@PendingContactConnection {pccAgentConnId = AgentConnId acId} <- withFastStore $ \db -> getPendingContactConnection db userId chatId @@ -1249,7 +1249,7 @@ processChatCommand vr nm = \case withFastStore' $ \db -> deletePendingContactConnection db userId chatId pure $ CRContactConnectionDeleted user conn CTGroup | isNothing scope -> do - gInfo@GroupInfo {membership} <- withFastStore $ \db -> getGroupInfo db vr user chatId + gInfo@GroupInfo {membership} <- withFastStore $ \db -> getGroupInfo db cxt user chatId let isOwner = memberRole' membership == GROwner canDelete = isOwner || not (memberCurrent membership) unless canDelete $ throwChatError $ CEGroupUserRole gInfo GROwner @@ -1273,25 +1273,25 @@ processChatCommand vr nm = \case where getRecipients gInfo | useRelays' gInfo = do - relays <- withFastStore' $ \db -> getGroupRelayMembers db vr user gInfo + relays <- withFastStore' $ \db -> getGroupRelayMembers db cxt user gInfo pure (relays, relays) | otherwise = do - ms <- withFastStore' $ \db -> getGroupMembers db vr user gInfo + ms <- withFastStore' $ \db -> getGroupMembers db cxt user gInfo pure (ms, filter memberCurrentOrPending ms) _ -> throwCmdError "not supported" APIClearChat (ChatRef cType chatId scope) -> withUser $ \user@User {userId} -> case cType of CTDirect -> do - ct <- withFastStore $ \db -> getContact db vr user chatId + ct <- withFastStore $ \db -> getContact db cxt user chatId filesInfo <- withFastStore' $ \db -> getContactFileInfo db user ct deleteCIFiles user filesInfo withFastStore' $ \db -> deleteContactCIs db user ct pure $ CRChatCleared user (AChatInfo SCTDirect $ DirectChat ct) CTGroup | isNothing scope -> do - gInfo <- withFastStore $ \db -> getGroupInfo db vr user chatId + gInfo <- withFastStore $ \db -> getGroupInfo db cxt user chatId filesInfo <- withFastStore' $ \db -> getGroupFileInfo db user gInfo deleteCIFiles user filesInfo withFastStore' $ \db -> deleteGroupChatItemsMessages db user gInfo - membersToDelete <- withFastStore' $ \db -> getGroupMembersForExpiration db vr user gInfo + membersToDelete <- withFastStore' $ \db -> getGroupMembersForExpiration db cxt user gInfo forM_ membersToDelete $ \m -> withFastStore' $ \db -> deleteGroupMember db user m pure $ CRChatCleared user (AChatInfo SCTGroup $ GroupChat gInfo Nothing) CTLocal -> do @@ -1352,7 +1352,7 @@ processChatCommand vr nm = \case withFastStore $ \db -> do cReq@UserContactRequest {contactId_} <- getContactRequest db user connReqId ct_ <- forM contactId_ $ \contactId -> do - ct <- getContact db vr user contactId + ct <- getContact db cxt user contactId deleteContact db user ct pure ct liftIO $ deleteContactRequest db user connReqId @@ -1361,7 +1361,7 @@ processChatCommand vr nm = \case pure $ CRContactRequestRejected user cReq ct_ APISendCallInvitation contactId callType -> withUser $ \user -> do -- party initiating call - ct <- withFastStore $ \db -> getContact db vr user contactId + ct <- withFastStore $ \db -> getContact db cxt user contactId assertDirectAllowed user MDSnd ct XCallInv_ if featureAllowed SCFCalls forUser ct then do @@ -1383,7 +1383,7 @@ processChatCommand vr nm = \case else throwCmdError $ "feature not allowed " <> T.unpack (chatFeatureNameText CFCalls) SendCallInvitation cName callType -> withUser $ \user -> do contactId <- withFastStore $ \db -> getContactIdByName db user cName - processChatCommand vr nm $ APISendCallInvitation contactId callType + processChatCommand cxt nm $ APISendCallInvitation contactId callType APIRejectCall contactId -> -- party accepting call withCurrentCall contactId $ \user ct Call {chatItemId, callState} -> case callState of @@ -1450,23 +1450,23 @@ processChatCommand vr nm = \case _ -> Nothing rcvCallInvitation (contactId, callUUID, callTs, peerCallType, sharedKey) = runExceptT . withFastStore $ \db -> do user <- getUserByContactId db contactId - contact <- getContact db vr user contactId + contact <- getContact db cxt user contactId pure RcvCallInvitation {user, contact, callType = peerCallType, sharedKey, callUUID, callTs} APICallStatus contactId receivedStatus -> withCurrentCall contactId $ \user ct call -> updateCallItemStatus user ct call receivedStatus Nothing $> Just call APIUpdateProfile userId profile -> withUserId userId (`updateProfile` profile) APISetContactPrefs contactId prefs' -> withUser $ \user -> do - ct <- withFastStore $ \db -> getContact db vr user contactId + ct <- withFastStore $ \db -> getContact db cxt user contactId updateContactPrefs user ct prefs' APISetContactAlias contactId localAlias -> withUser $ \user@User {userId} -> do ct' <- withFastStore $ \db -> do - ct <- getContact db vr user contactId + ct <- getContact db cxt user contactId liftIO $ updateContactAlias db userId ct localAlias pure $ CRContactAliasUpdated user ct' APISetGroupAlias gId localAlias -> withUser $ \user@User {userId} -> do gInfo' <- withFastStore $ \db -> do - gInfo <- getGroupInfo db vr user gId + gInfo <- getGroupInfo db cxt user gId liftIO $ updateGroupAlias db userId gInfo localAlias pure $ CRGroupAliasUpdated user gInfo' APISetConnectionAlias connId localAlias -> withUser $ \user@User {userId} -> do @@ -1484,23 +1484,23 @@ processChatCommand vr nm = \case APISetChatUIThemes (ChatRef cType chatId scope) uiThemes -> withUser $ \user -> case cType of CTDirect -> do withFastStore $ \db -> do - ct <- getContact db vr user chatId + ct <- getContact db cxt user chatId liftIO $ setContactUIThemes db user ct uiThemes ok user CTGroup | isNothing scope -> do withFastStore $ \db -> do - g <- getGroupInfo db vr user chatId + g <- getGroupInfo db cxt user chatId liftIO $ setGroupUIThemes db user g uiThemes ok user _ -> throwCmdError "not supported" APISetGroupCustomData groupId customData_ -> withUser $ \user -> do withFastStore $ \db -> do - g <- getGroupInfo db vr user groupId + g <- getGroupInfo db cxt user groupId liftIO $ setGroupCustomData db user g customData_ ok user APISetContactCustomData contactId customData_ -> withUser $ \user -> do withFastStore $ \db -> do - ct <- getContact db vr user contactId + ct <- getContact db cxt user contactId liftIO $ setContactCustomData db user ct customData_ ok user APIGetNtfToken -> withUser' $ \_ -> crNtfToken <$> withAgent getNtfToken @@ -1521,7 +1521,7 @@ processChatCommand vr nm = \case let agentConnId = AgentConnId ntfConnId mkNtfConn user connEntity = NtfConn {user, agentConnId, agentDbQueueId = ntfDbQueueId, connEntity, expectedMsg_ = expectedMsgInfo <$> nMsgMeta} getUserByAConnId db agentConnId - $>>= \user -> fmap (mkNtfConn user) . eitherToMaybe <$> runExceptT (getConnectionEntity db vr user agentConnId) + $>>= \user -> fmap (mkNtfConn user) . eitherToMaybe <$> runExceptT (getConnectionEntity db cxt user agentConnId) APIGetConnNtfMessages connMsgs -> withUser $ \_ -> do msgs <- lift $ withAgent' (`getConnectionMessages` connMsgs) let ntfMsgs = L.map receivedMsgInfo msgs @@ -1537,7 +1537,7 @@ processChatCommand vr nm = \case [] -> throwCmdError "no servers" _ -> do srvs' <- mapM aUserServer srvs - processChatCommand vr nm $ APISetUserServers userId $ L.map (updatedServers p srvs') userServers + processChatCommand cxt nm $ APISetUserServers userId $ L.map (updatedServers p srvs') userServers where aUserServer :: AProtoServerWithAuth -> CM (AUserServer p) aUserServer (AProtoServerWithAuth p' srv) = case testEquality p p' of @@ -1546,7 +1546,7 @@ processChatCommand vr nm = \case APITestProtoServer userId srv@(AProtoServerWithAuth _ server) -> withUserId userId $ \user -> lift $ CRServerTestResult user srv <$> withAgent' (\a -> testProtocolServer a nm (aUserId user) server) TestProtoServer srv -> withUser $ \User {userId} -> - processChatCommand vr nm $ APITestProtoServer userId srv + processChatCommand cxt nm $ APITestProtoServer userId srv APITestChatRelay userId address -> withUserId userId $ \user -> do let failAt step e = pure $ CRChatRelayTestResult user Nothing (Just $ RelayTestFailure step e) r <- tryAllErrors $ getShortLinkConnReq nm user address @@ -1566,7 +1566,7 @@ processChatCommand vr nm = \case subMode <- chatReadVar subscriptionMode connId <- withAgent $ \a -> prepareConnectionToJoin a (aUserId user) True cReq PQSupportOff conn@Connection {connId = testCId} <- withFastStore $ \db -> - createRelayTestConnection db vr user connId ConnPrepared chatV subMode + createRelayTestConnection db cxt user connId ConnPrepared chatV subMode challenge <- drgRandomBytes 32 testVar <- newEmptyTMVarIO let acId = aConnId conn @@ -1586,9 +1586,9 @@ processChatCommand vr nm = \case Right (Just Nothing) -> pure $ CRChatRelayTestResult user (Just relayProfile) Nothing Right (Just (Just failure)) -> pure $ CRChatRelayTestResult user (Just relayProfile) (Just failure) TestChatRelay address -> withUser $ \User {userId} -> - processChatCommand vr nm $ APITestChatRelay userId address + processChatCommand cxt nm $ APITestChatRelay userId address APIAllowRelayGroup groupId -> withUser $ \user -> do - gInfo' <- withStore $ \db -> allowRelayGroup db vr user groupId + gInfo' <- withStore $ \db -> allowRelayGroup db cxt user groupId pure $ CRRelayGroupAllowed user gInfo' GetUserChatRelays -> withUser $ \user -> do srvs <- withFastStore (`getUserServers` user) @@ -1601,7 +1601,7 @@ processChatCommand vr nm = \case [] -> throwCmdError "no relays" _ -> do let relays' = map aUserRelay relays - processChatCommand vr nm $ APISetUserServers userId $ L.map (updatedRelays relays') userServers + processChatCommand cxt nm $ APISetUserServers userId $ L.map (updatedRelays relays') userServers where aUserRelay :: CLINewRelay -> AUserChatRelay aUserRelay CLINewRelay {address, name} = AUCR SDBNew $ newChatRelay (mkRelayProfile name Nothing) [""] address @@ -1630,7 +1630,7 @@ processChatCommand vr nm = \case SetServerOperators operatorsRoles -> do ops <- serverOperators <$> withFastStore getServerOperators ops' <- mapM (updateOp ops) operatorsRoles - processChatCommand vr nm $ APISetServerOperators ops' + processChatCommand cxt nm $ APISetServerOperators ops' where updateOp :: [ServerOperator] -> ServerOperatorRoles -> CM ServerOperator updateOp ops r = @@ -1695,14 +1695,14 @@ processChatCommand vr nm = \case expireChat user globalTTL = do currentTs <- liftIO getCurrentTime case cType of - CTDirect -> expireContactChatItems user vr globalTTL chatId + CTDirect -> expireContactChatItems user cxt globalTTL chatId CTGroup | isNothing scope -> let createdAtCutoff = addUTCTime (-43200 :: NominalDiffTime) currentTs - in expireGroupChatItems user vr globalTTL createdAtCutoff chatId + in expireGroupChatItems user cxt globalTTL createdAtCutoff chatId _ -> throwCmdError "not supported" SetChatTTL chatName newTTL -> withUser' $ \user@User {userId} -> do chatRef <- getChatRef user chatName - processChatCommand vr nm $ APISetChatTTL userId chatRef newTTL + processChatCommand cxt nm $ APISetChatTTL userId chatRef newTTL GetChatTTL chatName -> withUser' $ \user -> do -- TODO [knocking] support scope in CLI apis ChatRef cType chatId _ <- getChatRef user chatName @@ -1722,18 +1722,18 @@ processChatCommand vr nm = \case lift $ setChatItemsExpiration user newTTL ttlCount ok user SetChatItemTTL newTTL_ -> withUser' $ \User {userId} -> do - processChatCommand vr nm $ APISetChatItemTTL userId newTTL_ + processChatCommand cxt nm $ APISetChatItemTTL userId newTTL_ APIGetChatItemTTL userId -> withUserId' userId $ \user -> do ttl <- withFastStore' (`getChatItemTTL` user) pure $ CRChatItemTTL user (Just ttl) GetChatItemTTL -> withUser' $ \User {userId} -> do - processChatCommand vr nm $ APIGetChatItemTTL userId + processChatCommand cxt nm $ APIGetChatItemTTL userId APISetNetworkConfig cfg -> withUser' $ \_ -> lift (withAgent' (`setNetworkConfig` cfg)) >> ok_ APIGetNetworkConfig -> withUser' $ \_ -> CRNetworkConfig <$> lift getNetworkConfig SetNetworkConfig simpleNetCfg -> do cfg <- (`updateNetworkConfig` simpleNetCfg) <$> lift getNetworkConfig - void . processChatCommand vr nm $ APISetNetworkConfig cfg + void . processChatCommand cxt nm $ APISetNetworkConfig cfg pure $ CRNetworkConfig cfg APISetNetworkInfo info -> lift (withAgent' (`setUserNetworkInfo` info)) >> ok_ ReconnectAllServers -> withUser' $ \_ -> lift (withAgent' reconnectAllServers) >> ok_ @@ -1743,7 +1743,7 @@ processChatCommand vr nm = \case APISetChatSettings (ChatRef cType chatId scope) chatSettings -> withUser $ \user -> case cType of CTDirect -> do ct <- withFastStore $ \db -> do - ct <- getContact db vr user chatId + ct <- getContact db cxt user chatId liftIO $ updateContactSettings db user chatId chatSettings pure ct forM_ (contactConnId ct) $ \connId -> @@ -1751,7 +1751,7 @@ processChatCommand vr nm = \case ok user CTGroup | isNothing scope -> do ms <- withFastStore $ \db -> do - gInfo <- getGroupInfo db vr user chatId + gInfo <- getGroupInfo db cxt user chatId ms <- liftIO $ getMembers db gInfo liftIO $ updateGroupSettings db user chatId chatSettings pure ms @@ -1760,19 +1760,19 @@ processChatCommand vr nm = \case ok user where getMembers db gInfo - | useRelays' gInfo = getGroupRelayMembers db vr user gInfo - | otherwise = getGroupMembers db vr user gInfo + | useRelays' gInfo = getGroupRelayMembers db cxt user gInfo + | otherwise = getGroupMembers db cxt user gInfo _ -> throwCmdError "not supported" APISetMemberSettings gId gMemberId settings -> withUser $ \user -> do m <- withFastStore $ \db -> do liftIO $ updateGroupMemberSettings db user gId gMemberId settings - getGroupMember db vr user gId gMemberId + getGroupMember db cxt user gId gMemberId let ntfOn = not (memberBlocked m) toggleNtf m ntfOn ok user APIContactInfo contactId -> withUser $ \user@User {userId} -> do -- [incognito] print user's incognito profile for this contact - ct@Contact {activeConn} <- withFastStore $ \db -> getContact db vr user contactId + ct@Contact {activeConn} <- withFastStore $ \db -> getContact db cxt user contactId incognitoProfile <- case activeConn of Nothing -> pure Nothing Just Connection {customUserProfileId} -> @@ -1780,14 +1780,14 @@ processChatCommand vr nm = \case connectionStats <- mapM (withAgent . flip getConnectionServers) (contactConnId ct) pure $ CRContactInfo user ct connectionStats (fmap fromLocalProfile incognitoProfile) APIContactQueueInfo contactId -> withUser $ \user -> do - ct@Contact {activeConn} <- withFastStore $ \db -> getContact db vr user contactId + ct@Contact {activeConn} <- withFastStore $ \db -> getContact db cxt user contactId case activeConn of Just conn -> getConnQueueInfo user conn Nothing -> throwChatError $ CEContactNotActive ct APIGroupInfo gId -> withUser $ \user -> - CRGroupInfo user <$> withFastStore (\db -> getGroupInfo db vr user gId) + CRGroupInfo user <$> withFastStore (\db -> getGroupInfo db cxt user gId) APIGetUpdatedGroupLinkData groupId -> withUser $ \user -> do - gInfo@GroupInfo {groupProfile = p, groupSummary = GroupSummary {publicMemberCount = localCount}} <- withFastStore $ \db -> getGroupInfo db vr user groupId + gInfo@GroupInfo {groupProfile = p, groupSummary = GroupSummary {publicMemberCount = localCount}} <- withFastStore $ \db -> getGroupInfo db cxt user groupId case p of GroupProfile {publicGroup = Just PublicGroupProfile {groupLink = sLnk}} | useRelays' gInfo -> do (_, cData@(ContactLinkData _ UserContactData {relays = currentRelayLinks})) <- getShortLinkConnReq' nm user sLnk @@ -1801,44 +1801,44 @@ processChatCommand vr nm = \case pure $ CRGroupInfo user gInfo' _ -> throwCmdError "group link data not available" APIGroupMemberInfo gId gMemberId -> withUser $ \user -> do - (g, m) <- withFastStore $ \db -> (,) <$> getGroupInfo db vr user gId <*> getGroupMember db vr user gId gMemberId + (g, m) <- withFastStore $ \db -> (,) <$> getGroupInfo db cxt user gId <*> getGroupMember db cxt user gId gMemberId connectionStats <- mapM (withAgent . flip getConnectionServers) (memberConnId m) pure $ CRGroupMemberInfo user g m connectionStats APIGroupMemberQueueInfo gId gMemberId -> withUser $ \user -> do - GroupMember {activeConn} <- withFastStore $ \db -> getGroupMember db vr user gId gMemberId + GroupMember {activeConn} <- withFastStore $ \db -> getGroupMember db cxt user gId gMemberId case activeConn of Just conn -> getConnQueueInfo user conn Nothing -> throwChatError CEGroupMemberNotActive APISwitchContact contactId -> withUser $ \user -> do - ct <- withFastStore $ \db -> getContact db vr user contactId + ct <- withFastStore $ \db -> getContact db cxt user contactId case contactConnId ct of Just connId -> do connectionStats <- withAgent $ \a -> switchConnectionAsync a "" connId pure $ CRContactSwitchStarted user ct connectionStats Nothing -> throwChatError $ CEContactNotActive ct APISwitchGroupMember gId gMemberId -> withUser $ \user -> do - (g, m) <- withFastStore $ \db -> (,) <$> getGroupInfo db vr user gId <*> getGroupMember db vr user gId gMemberId + (g, m) <- withFastStore $ \db -> (,) <$> getGroupInfo db cxt user gId <*> getGroupMember db cxt user gId gMemberId case memberConnId m of Just connId -> do connectionStats <- withAgent (\a -> switchConnectionAsync a "" connId) pure $ CRGroupMemberSwitchStarted user g m connectionStats _ -> throwChatError CEGroupMemberNotActive APIAbortSwitchContact contactId -> withUser $ \user -> do - ct <- withFastStore $ \db -> getContact db vr user contactId + ct <- withFastStore $ \db -> getContact db cxt user contactId case contactConnId ct of Just connId -> do connectionStats <- withAgent $ \a -> abortConnectionSwitch a connId pure $ CRContactSwitchAborted user ct connectionStats Nothing -> throwChatError $ CEContactNotActive ct APIAbortSwitchGroupMember gId gMemberId -> withUser $ \user -> do - (g, m) <- withFastStore $ \db -> (,) <$> getGroupInfo db vr user gId <*> getGroupMember db vr user gId gMemberId + (g, m) <- withFastStore $ \db -> (,) <$> getGroupInfo db cxt user gId <*> getGroupMember db cxt user gId gMemberId case memberConnId m of Just connId -> do connectionStats <- withAgent $ \a -> abortConnectionSwitch a connId pure $ CRGroupMemberSwitchAborted user g m connectionStats _ -> throwChatError CEGroupMemberNotActive APISyncContactRatchet contactId force -> withUser $ \user -> withContactLock "syncContactRatchet" contactId $ do - ct <- withFastStore $ \db -> getContact db vr user contactId + ct <- withFastStore $ \db -> getContact db cxt user contactId case contactConn ct of Just conn@Connection {pqSupport} -> do cStats@ConnectionStats {ratchetSyncState = rss} <- withAgent $ \a -> synchronizeRatchet a (aConnId conn) pqSupport force @@ -1846,7 +1846,7 @@ processChatCommand vr nm = \case pure $ CRContactRatchetSyncStarted user ct cStats Nothing -> throwChatError $ CEContactNotActive ct APISyncGroupMemberRatchet gId gMemberId force -> withUser $ \user -> withGroupLock "syncGroupMemberRatchet" gId $ do - (g, m) <- withFastStore $ \db -> (,) <$> getGroupInfo db vr user gId <*> getGroupMember db vr user gId gMemberId + (g, m) <- withFastStore $ \db -> (,) <$> getGroupInfo db cxt user gId <*> getGroupMember db cxt user gId gMemberId case memberConnId m of Just connId -> do cStats@ConnectionStats {ratchetSyncState = rss} <- withAgent $ \a -> synchronizeRatchet a connId PQSupportOff force @@ -1855,7 +1855,7 @@ processChatCommand vr nm = \case pure $ CRGroupMemberRatchetSyncStarted user g' m' cStats _ -> throwChatError CEGroupMemberNotActive APIGetContactCode contactId -> withUser $ \user -> do - ct@Contact {activeConn} <- withFastStore $ \db -> getContact db vr user contactId + ct@Contact {activeConn} <- withFastStore $ \db -> getContact db cxt user contactId case activeConn of Just conn@Connection {connId} -> do code <- getConnectionCode $ aConnId conn @@ -1869,7 +1869,7 @@ processChatCommand vr nm = \case pure $ CRContactCode user ct' code Nothing -> throwChatError $ CEContactNotActive ct APIGetGroupMemberCode gId gMemberId -> withUser $ \user -> do - (g, m@GroupMember {activeConn}) <- withFastStore $ \db -> (,) <$> getGroupInfo db vr user gId <*> getGroupMember db vr user gId gMemberId + (g, m@GroupMember {activeConn}) <- withFastStore $ \db -> (,) <$> getGroupInfo db cxt user gId <*> getGroupMember db cxt user gId gMemberId case activeConn of Just conn@Connection {connId} -> do code <- getConnectionCode $ aConnId conn @@ -1883,24 +1883,24 @@ processChatCommand vr nm = \case pure $ CRGroupMemberCode user g m' code _ -> throwChatError CEGroupMemberNotActive APIVerifyContact contactId code -> withUser $ \user -> do - ct@Contact {activeConn} <- withFastStore $ \db -> getContact db vr user contactId + ct@Contact {activeConn} <- withFastStore $ \db -> getContact db cxt user contactId case activeConn of Just conn -> verifyConnectionCode user conn code Nothing -> throwChatError $ CEContactNotActive ct APIVerifyGroupMember gId gMemberId code -> withUser $ \user -> do - GroupMember {activeConn} <- withFastStore $ \db -> getGroupMember db vr user gId gMemberId + GroupMember {activeConn} <- withFastStore $ \db -> getGroupMember db cxt user gId gMemberId case activeConn of Just conn -> verifyConnectionCode user conn code _ -> throwChatError CEGroupMemberNotActive APIEnableContact contactId -> withUser $ \user -> do - ct@Contact {activeConn} <- withFastStore $ \db -> getContact db vr user contactId + ct@Contact {activeConn} <- withFastStore $ \db -> getContact db cxt user contactId case activeConn of Just conn -> do withFastStore' $ \db -> setAuthErrCounter db user conn 0 ok user Nothing -> throwChatError $ CEContactNotActive ct APIEnableGroupMember gId gMemberId -> withUser $ \user -> do - GroupMember {activeConn} <- withFastStore $ \db -> getGroupMember db vr user gId gMemberId + GroupMember {activeConn} <- withFastStore $ \db -> getGroupMember db cxt user gId gMemberId case activeConn of Just conn -> do withFastStore' $ \db -> setAuthErrCounter db user conn 0 @@ -1910,16 +1910,16 @@ processChatCommand vr nm = \case SetSendReceipts cName rcptsOn_ -> updateChatSettings cName (\cs -> cs {sendRcpts = rcptsOn_}) SetShowMemberMessages gName mName showMessages -> withUser $ \user -> do (gId, mId) <- getGroupAndMemberId user gName mName - gInfo <- withFastStore $ \db -> getGroupInfo db vr user gId - m <- withFastStore $ \db -> getGroupMember db vr user gId mId + gInfo <- withFastStore $ \db -> getGroupInfo db cxt user gId + m <- withFastStore $ \db -> getGroupMember db cxt user gId mId let GroupInfo {membership = GroupMember {memberRole = membershipRole}} = gInfo when (membershipRole >= GRModerator) $ throwChatError $ CECantBlockMemberForSelf gInfo m showMessages let settings = (memberSettings m) {showMessages} - processChatCommand vr nm $ APISetMemberSettings gId mId settings + processChatCommand cxt nm $ APISetMemberSettings gId mId settings ContactInfo cName -> withContactName cName APIContactInfo ShowGroupInfo gName -> withUser $ \user -> do groupId <- withFastStore $ \db -> getGroupIdByName db user gName - processChatCommand vr nm $ APIGroupInfo groupId + processChatCommand cxt nm $ APIGroupInfo groupId GroupMemberInfo gName mName -> withMemberName gName mName APIGroupMemberInfo ContactQueueInfo cName -> withContactName cName APIContactQueueInfo GroupMemberQueueInfo gName mName -> withMemberName gName mName APIGroupMemberQueueInfo @@ -1950,7 +1950,7 @@ processChatCommand vr nm = \case conn <- withFastStore' $ \db -> createDirectConnection db user connId ccLink' Nothing ConnNew incognitoProfile subMode initialChatVersion PQSupportOn pure $ CRInvitation user ccLink' conn AddContact incognito -> withUser $ \User {userId} -> - processChatCommand vr nm $ APIAddContact userId incognito + processChatCommand cxt nm $ APIAddContact userId incognito APISetConnectionIncognito connId incognito -> withUser $ \user@User {userId} -> do conn <- withFastStore $ \db -> getPendingContactConnection db userId connId let PendingContactConnection {pccConnStatus, customUserProfileId} = conn @@ -2008,7 +2008,7 @@ processChatCommand vr nm = \case groupPreferences = maybe defaultBusinessGroupPrefs businessGroupPrefs preferences groupProfile = businessGroupProfile profile groupPreferences gVar <- asks random - (gInfo, hostMember_) <- withStore $ \db -> createPreparedGroup db gVar vr user groupProfile True ccLink welcomeSharedMsgId False GRMember Nothing + (gInfo, hostMember_) <- withStore $ \db -> createPreparedGroup db gVar cxt user groupProfile True ccLink welcomeSharedMsgId False GRMember Nothing hostMember <- maybe (throwCmdError "no host member") pure hostMember_ void $ createChatItem user (CDGroupSnd gInfo Nothing) False CIChatBanner Nothing (Just epochStart) let cd = CDGroupRcv gInfo Nothing hostMember @@ -2021,7 +2021,7 @@ processChatCommand vr nm = \case _ -> Chat cInfo [] emptyChatStats pure $ CRNewPreparedChat user $ AChat SCTGroup chat ACCL _ (CCLink cReq _) -> do - ct <- withStore $ \db -> createPreparedContact db vr user profile accLink welcomeSharedMsgId + ct <- withStore $ \db -> createPreparedContact db cxt user profile accLink welcomeSharedMsgId void $ createChatItem user (CDDirectSnd ct) False CIChatBanner Nothing (Just epochStart) let cd = CDDirectRcv ct createItem sharedMsgId content = createChatItem user cd False content sharedMsgId Nothing @@ -2040,7 +2040,7 @@ processChatCommand vr nm = \case let useRelays = not direct subRole <- if useRelays then asks $ channelSubscriberRole . config else pure GRMember gVar <- asks random - (gInfo, hostMember_) <- withStore $ \db -> createPreparedGroup db gVar vr user gp False ccLink welcomeSharedMsgId useRelays subRole publicMemberCount_ + (gInfo, hostMember_) <- withStore $ \db -> createPreparedGroup db gVar cxt user gp False ccLink welcomeSharedMsgId useRelays subRole publicMemberCount_ void $ createChatItem user (CDGroupSnd gInfo Nothing) False CIChatBanner Nothing (Just epochStart) let cd = maybe (CDChannelRcv gInfo Nothing) (CDGroupRcv gInfo Nothing) hostMember_ cInfo = GroupChat gInfo Nothing @@ -2051,40 +2051,40 @@ processChatCommand vr nm = \case _ -> Chat cInfo [] emptyChatStats pure $ CRNewPreparedChat user $ AChat SCTGroup chat APIChangePreparedContactUser contactId newUserId -> withUser $ \user -> do - ct@Contact {preparedContact} <- withFastStore $ \db -> getContact db vr user contactId + ct@Contact {preparedContact} <- withFastStore $ \db -> getContact db cxt user contactId when (isNothing preparedContact) $ throwCmdError "contact doesn't have link to connect" when (isJust $ contactConn ct) $ throwCmdError "contact already has connection" newUser <- privateGetUser newUserId - ct' <- withFastStore $ \db -> updatePreparedContactUser db vr user ct newUser + ct' <- withFastStore $ \db -> updatePreparedContactUser db cxt user ct newUser -- create changed feature items (new user may have different preferences) lift $ createContactChangedFeatureItems user ct ct' pure $ CRContactUserChanged user ct newUser ct' APIChangePreparedGroupUser groupId newUserId -> withUser $ \user -> do - gInfo <- withFastStore $ \db -> getGroupInfo db vr user groupId + gInfo <- withFastStore $ \db -> getGroupInfo db cxt user groupId when (isNothing $ preparedGroup gInfo) $ throwCmdError "group doesn't have link to connect" hostMember_ <- if useRelays' gInfo then pure Nothing else do - hostMember <- withFastStore $ \db -> getHostMember db vr user groupId + hostMember <- withFastStore $ \db -> getHostMember db cxt user groupId when (isJust $ memberConn hostMember) $ throwCmdError "host member already has connection" pure $ Just hostMember newUser <- privateGetUser newUserId - gInfo' <- withFastStore $ \db -> updatePreparedGroupUser db vr user gInfo hostMember_ newUser + gInfo' <- withFastStore $ \db -> updatePreparedGroupUser db cxt user gInfo hostMember_ newUser pure $ CRGroupUserChanged user gInfo newUser gInfo' APIConnectPreparedContact contactId incognito msgContent_ -> withUser $ \user -> do - ct@Contact {preparedContact} <- withFastStore $ \db -> getContact db vr user contactId + ct@Contact {preparedContact} <- withFastStore $ \db -> getContact db cxt user contactId case preparedContact of Nothing -> throwCmdError "contact doesn't have link to connect" Just PreparedContact {connLinkToConnect = ACCL SCMInvitation ccLink} -> do (_, customUserProfile) <- connectViaInvitation user incognito ccLink (Just contactId) `catchAllErrors` \e -> do -- get updated contact, in case connection was started - in UI it would lock ability to change -- user or incognito profile for contact, in case server received request while client got network error - ct' <- withFastStore $ \db -> getContact db vr user contactId + ct' <- withFastStore $ \db -> getContact db cxt user contactId toView $ CEvtChatInfoUpdated user (AChatInfo SCTDirect $ DirectChat ct') throwError e -- get updated contact with connection - ct' <- withFastStore $ \db -> getContact db vr user contactId + ct' <- withFastStore $ \db -> getContact db cxt user contactId -- create changed feature items (connecting incognito sends default preferences, instead of user preferences) lift . when incognito $ createContactChangedFeatureItems user ct ct' forM_ msgContent_ $ \mc -> do @@ -2103,13 +2103,13 @@ processChatCommand vr nm = \case r <- connectViaContact user (Just $ PCEContact ct) incognito ccLink welcomeSharedMsgId msg_ `catchAllErrors` \e -> do -- get updated contact, in case connection was started - in UI it would lock ability to change -- user or incognito profile for contact, in case server received request while client got network error - ct' <- withFastStore $ \db -> getContact db vr user contactId + ct' <- withFastStore $ \db -> getContact db cxt user contactId toView $ CEvtChatInfoUpdated user (AChatInfo SCTDirect $ DirectChat ct') throwError e case r of CVRSentInvitation _conn customUserProfile -> do -- get updated contact with connection - ct' <- withFastStore $ \db -> getContact db vr user contactId + ct' <- withFastStore $ \db -> getContact db cxt user contactId -- create changed feature items (connecting incognito sends default preferences, instead of user preferences) lift . when incognito $ createContactChangedFeatureItems user ct ct' forM_ msg_ $ \(sharedMsgId, mc) -> do @@ -2118,7 +2118,7 @@ processChatCommand vr nm = \case pure $ CRStartedConnectionToContact user ct' customUserProfile CVRConnectedContact ct' -> pure $ CRContactAlreadyExists user ct' APIConnectPreparedGroup {groupId, incognito, ownerContact, msgContent_} -> withUser $ \user -> do - gInfo <- withFastStore $ \db -> getGroupInfo db vr user groupId + gInfo <- withFastStore $ \db -> getGroupInfo db cxt user groupId case gInfo of GroupInfo {preparedGroup = Nothing} -> throwCmdError "group doesn't have link to connect" GroupInfo {useRelays = BoolDef True, preparedGroup = Just PreparedGroup {connLinkToConnect}} -> do @@ -2141,14 +2141,14 @@ processChatCommand vr nm = \case gVar <- asks random (_, memberPrivKey) <- liftIO $ atomically $ C.generateKeyPair gVar gInfo' <- withFastStore $ \db -> do - gInfo' <- updatePreparedRelayedGroup db vr user gInfo mainCReq cReqHash incognitoProfile rootKey memberPrivKey publicMemberCount_ + gInfo' <- updatePreparedRelayedGroup db cxt user gInfo mainCReq cReqHash incognitoProfile rootKey memberPrivKey publicMemberCount_ -- Pre-emptively create owner members with trusted keys from link data forM_ owners $ \OwnerAuth {ownerId, ownerKey} -> do let ctId_ = case ownerContact of Just GroupOwnerContact {contactId, memberId} | memberId == MemberId ownerId -> Just contactId _ -> Nothing - void $ createLinkOwnerMember db vr user gInfo' ctId_ (MemberId ownerId) ownerKey + void $ createLinkOwnerMember db cxt user gInfo' ctId_ (MemberId ownerId) ownerKey pure gInfo' rs <- withGroupLock "connectPreparedGroup" groupId $ mapConcurrently (connectToRelay user gInfo') relays @@ -2166,7 +2166,7 @@ processChatCommand vr nm = \case else do gInfo'' <- withFastStore $ \db -> do liftIO $ setPreparedGroupStartedConnection db groupId - getGroupInfo db vr user groupId + getGroupInfo db cxt user groupId -- Async retry failed relays with temporary errors let retryable = [(l, m) | r@(l, m, _) <- failed, isTempErr r] void $ mapConcurrently (uncurry $ retryRelayConnectionAsync gInfo') retryable @@ -2186,7 +2186,7 @@ processChatCommand vr nm = \case newConnIds <- getAgentConnShortLinkAsync user CFGetRelayDataJoin Nothing relayLink withStore' $ \db -> createRelayMemberConnectionAsync db user gInfo' relayMember relayLink newConnIds subMode GroupInfo {preparedGroup = Just PreparedGroup {connLinkToConnect, welcomeSharedMsgId, requestSharedMsgId}} -> do - hostMember <- withFastStore $ \db -> getHostMember db vr user groupId + hostMember <- withFastStore $ \db -> getHostMember db cxt user groupId msg_ <- forM msgContent_ $ \mc -> case requestSharedMsgId of Just smId -> pure (smId, mc) Nothing -> do @@ -2196,7 +2196,7 @@ processChatCommand vr nm = \case r <- connectViaContact user (Just $ PCEGroup gInfo hostMember) incognito connLinkToConnect welcomeSharedMsgId msg_ `catchAllErrors` \e -> do -- get updated group info, in case connection was started (connLinkPreparedConnection) - in UI it would lock ability to change -- user or incognito profile for group or business chat, in case server received request while client got network error - gInfo' <- withFastStore $ \db -> getGroupInfo db vr user groupId + gInfo' <- withFastStore $ \db -> getGroupInfo db cxt user groupId toView $ CEvtChatInfoUpdated user (AChatInfo SCTGroup $ GroupChat gInfo' Nothing) throwError e case r of @@ -2204,7 +2204,7 @@ processChatCommand vr nm = \case -- get updated group info (connLinkStartedConnection and incognito membership) gInfo' <- withFastStore $ \db -> do liftIO $ setPreparedGroupStartedConnection db groupId - getGroupInfo db vr user groupId + getGroupInfo db cxt user groupId forM_ msg_ $ \(sharedMsgId, mc) -> do ci <- createChatItem user (CDGroupSnd gInfo' Nothing) False (CISndMsgContent mc) (Just sharedMsgId) Nothing toView $ CEvtNewChatItems user [ci] @@ -2230,7 +2230,7 @@ processChatCommand vr nm = \case connectWithPlan user incognito ccLink plan Connect _ Nothing -> throwChatError CEInvalidConnReq APIConnectContactViaAddress userId incognito contactId -> withUserId userId $ \user -> do - ct@Contact {profile = LocalProfile {contactLink}} <- withFastStore $ \db -> getContact db vr user contactId + ct@Contact {profile = LocalProfile {contactLink}} <- withFastStore $ \db -> getContact db cxt user contactId ccLink <- case contactLink of Just (CLFull cReq) -> pure $ CCLink cReq Nothing Just (CLShort sLnk) -> do @@ -2240,7 +2240,7 @@ processChatCommand vr nm = \case connectContactViaAddress user incognito ct ccLink `catchAllErrors` \e -> do -- get updated contact, in case connection was started - in UI it would lock ability to change incognito choice -- on next connection attempt, in case server received request while client got network error - ct' <- withFastStore $ \db -> getContact db vr user contactId + ct' <- withFastStore $ \db -> getContact db cxt user contactId toView $ CEvtChatInfoUpdated user (AChatInfo SCTDirect $ DirectChat ct') throwError e ConnectSimplex incognito -> withUser $ \user -> do @@ -2249,9 +2249,9 @@ processChatCommand vr nm = \case DeleteContact cName cdm -> withContactName cName $ \ctId -> APIDeleteChat (ChatRef CTDirect ctId Nothing) cdm ClearContact cName -> withContactName cName $ \chatId -> APIClearChat $ ChatRef CTDirect chatId Nothing APIListContacts userId -> withUserId userId $ \user -> - CRContactsList user <$> withFastStore' (\db -> getUserContacts db vr user) + CRContactsList user <$> withFastStore' (\db -> getUserContacts db cxt user) ListContacts -> withUser $ \User {userId} -> - processChatCommand vr nm $ APIListContacts userId + processChatCommand cxt nm $ APIListContacts userId APICreateMyAddress userId -> withUserId userId $ \user@User {userChatRelay} -> do withFastStore' (\db -> runExceptT $ getUserAddress db user) >>= \case Left SEUserContactLinkNotFound -> pure () @@ -2270,9 +2270,9 @@ processChatCommand vr nm = \case withFastStore $ \db -> createUserContactLink db user connId ccLink'' subMode pure $ CRUserContactLinkCreated user ccLink'' CreateMyAddress -> withUser $ \User {userId} -> - processChatCommand vr nm $ APICreateMyAddress userId + processChatCommand cxt nm $ APICreateMyAddress userId APIDeleteMyAddress userId -> withUserId userId $ \user@User {profile = p} -> do - conn <- withFastStore $ \db -> getUserAddressConnection db vr user + conn <- withFastStore $ \db -> getUserAddressConnection db cxt user withChatLock "deleteMyAddress" $ do deleteAgentConnectionAsync $ aConnId conn withFastStore' (`deleteUserAddress` user) @@ -2283,11 +2283,11 @@ processChatCommand vr nm = \case _ -> user pure $ CRUserContactLinkDeleted user' DeleteMyAddress -> withUser $ \User {userId} -> - processChatCommand vr nm $ APIDeleteMyAddress userId + processChatCommand cxt nm $ APIDeleteMyAddress userId APIShowMyAddress userId -> withUserId' userId $ \user -> CRUserContactLink user <$> withFastStore (`getUserAddress` user) ShowMyAddress -> withUser' $ \User {userId} -> - processChatCommand vr nm $ APIShowMyAddress userId + processChatCommand cxt nm $ APIShowMyAddress userId APIAddMyAddressShortLink userId -> withUserId' userId $ \user -> CRUserContactLink user <$> (withFastStore (`getUserAddress` user) >>= setMyAddressData user) APISetProfileAddress userId False -> withUserId userId $ \user@User {profile = p} -> do @@ -2299,7 +2299,7 @@ processChatCommand vr nm = \case let p' = (fromLocalProfile p :: Profile) {contactLink = Just $ profileContactLink ucl} updateProfile_ user p' True $ withFastStore' $ \db -> setUserProfileContactLink db user $ Just ucl SetProfileAddress onOff -> withUser $ \User {userId} -> - processChatCommand vr nm $ APISetProfileAddress userId onOff + processChatCommand cxt nm $ APISetProfileAddress userId onOff APISetAddressSettings userId settings@AddressSettings {businessAddress, autoAccept} -> withUserId userId $ \user -> do ucl@UserContactLink {userContactLinkId, shortLinkDataSet, addressSettings} <- withFastStore (`getUserAddress` user) forM_ autoAccept $ \AutoAccept {acceptIncognito} -> do @@ -2313,43 +2313,43 @@ processChatCommand vr nm = \case withFastStore' $ \db -> updateUserAddressSettings db userContactLinkId settings pure $ CRUserContactLinkUpdated user ucl'' SetAddressSettings settings -> withUser $ \User {userId} -> - processChatCommand vr nm $ APISetAddressSettings userId settings + processChatCommand cxt nm $ APISetAddressSettings userId settings AcceptContact incognito cName -> withUser $ \User {userId} -> do connReqId <- withFastStore $ \db -> getContactRequestIdByName db userId cName - processChatCommand vr nm $ APIAcceptContact incognito connReqId + processChatCommand cxt nm $ APIAcceptContact incognito connReqId RejectContact cName -> withUser $ \User {userId} -> do connReqId <- withFastStore $ \db -> getContactRequestIdByName db userId cName - processChatCommand vr nm $ APIRejectContact connReqId + processChatCommand cxt nm $ APIRejectContact connReqId ForwardMessage toChatName fromContactName forwardedMsg -> withUser $ \user -> do contactId <- withFastStore $ \db -> getContactIdByName db user fromContactName forwardedItemId <- withFastStore $ \db -> getDirectChatItemIdByText' db user contactId forwardedMsg toChatRef <- getChatRef user toChatName asGroup <- getSendAsGroup user toChatRef - processChatCommand vr nm $ APIForwardChatItems toChatRef asGroup (ChatRef CTDirect contactId Nothing) (forwardedItemId :| []) Nothing + processChatCommand cxt nm $ APIForwardChatItems toChatRef asGroup (ChatRef CTDirect contactId Nothing) (forwardedItemId :| []) Nothing ForwardGroupMessage toChatName fromGroupName fromMemberName_ forwardedMsg -> withUser $ \user -> do groupId <- withFastStore $ \db -> getGroupIdByName db user fromGroupName forwardedItemId <- withFastStore $ \db -> getGroupChatItemIdByText db user groupId fromMemberName_ forwardedMsg toChatRef <- getChatRef user toChatName asGroup <- getSendAsGroup user toChatRef - processChatCommand vr nm $ APIForwardChatItems toChatRef asGroup (ChatRef CTGroup groupId Nothing) (forwardedItemId :| []) Nothing + processChatCommand cxt nm $ APIForwardChatItems toChatRef asGroup (ChatRef CTGroup groupId Nothing) (forwardedItemId :| []) Nothing ForwardLocalMessage toChatName forwardedMsg -> withUser $ \user -> do folderId <- withFastStore (`getUserNoteFolderId` user) forwardedItemId <- withFastStore $ \db -> getLocalChatItemIdByText' db user folderId forwardedMsg toChatRef <- getChatRef user toChatName asGroup <- getSendAsGroup user toChatRef - processChatCommand vr nm $ APIForwardChatItems toChatRef asGroup (ChatRef CTLocal folderId Nothing) (forwardedItemId :| []) Nothing + processChatCommand cxt nm $ APIForwardChatItems toChatRef asGroup (ChatRef CTLocal folderId Nothing) (forwardedItemId :| []) Nothing SharePublicGroup shareGroupName toChatName -> withUser $ \user -> do groupId <- withFastStore $ \db -> getGroupIdByName db user shareGroupName toChatRef <- getChatRef user toChatName sendRef <- case toChatRef of ChatRef CTDirect ctId _ -> pure $ SRDirect ctId ChatRef CTGroup gId scope_ -> do - gInfo <- withFastStore $ \db -> getGroupInfo db vr user gId + gInfo <- withFastStore $ \db -> getGroupInfo db cxt user gId pure $ SRGroup gId scope_ (useRelays' gInfo) _ -> throwCmdError "unsupported share target" - processChatCommand vr nm (APIShareChatMsgContent (ChatRef CTGroup groupId Nothing) sendRef) >>= \case + processChatCommand cxt nm (APIShareChatMsgContent (ChatRef CTGroup groupId Nothing) sendRef) >>= \case CRChatMsgContent _ mc -> - processChatCommand vr nm $ APISendMessages sendRef False Nothing [composedMessage Nothing mc] + processChatCommand cxt nm $ APISendMessages sendRef False Nothing [composedMessage Nothing mc] r -> pure r SendMessage sendName msg -> withUser $ \user -> do let mc = MCText msg @@ -2358,57 +2358,57 @@ processChatCommand vr nm = \case withFastStore' (\db -> runExceptT $ getContactIdByName db user name) >>= \case Right ctId -> do let sendRef = SRDirect ctId - processChatCommand vr nm $ APISendMessages sendRef False Nothing [composedMessage Nothing mc] + processChatCommand cxt nm $ APISendMessages sendRef False Nothing [composedMessage Nothing mc] Left _ -> - withFastStore' (\db -> runExceptT $ getActiveMembersByName db vr user name) >>= \case + withFastStore' (\db -> runExceptT $ getActiveMembersByName db cxt user name) >>= \case Right [(gInfo, member)] -> do let GroupInfo {localDisplayName = gName} = gInfo GroupMember {localDisplayName = mName} = member - processChatCommand vr nm $ SendMemberContactMessage gName mName msg + processChatCommand cxt nm $ SendMemberContactMessage gName mName msg Right (suspectedMember : _) -> throwChatError $ CEContactNotFound name (Just suspectedMember) _ -> throwChatError $ CEContactNotFound name Nothing SNGroup name scope_ -> do (gInfo, cScope_, mentions) <- withFastStore $ \db -> do - gInfo <- getGroupInfoByName db vr user name + gInfo <- getGroupInfoByName db cxt user name let gId = groupId' gInfo cScope_ <- forM scope_ $ \(GSNMemberSupport mName_) -> GCSMemberSupport <$> mapM (getGroupMemberIdByName db user gId) mName_ (gInfo, cScope_,) <$> liftIO (getMessageMentions db user gId msg) let sendRef = SRGroup (groupId' gInfo) cScope_ (sendAsGroup' gInfo cScope_) - processChatCommand vr nm $ APISendMessages sendRef False Nothing [ComposedMessage Nothing Nothing mc mentions] + processChatCommand cxt nm $ APISendMessages sendRef False Nothing [ComposedMessage Nothing Nothing mc mentions] SNLocal -> do folderId <- withFastStore (`getUserNoteFolderId` user) - processChatCommand vr nm $ APICreateChatItems folderId [composedMessage Nothing mc] + processChatCommand cxt nm $ APICreateChatItems folderId [composedMessage Nothing mc] SendMemberContactMessage gName mName msg -> withUser $ \user -> do (gId, mId) <- getGroupAndMemberId user gName mName - m <- withFastStore $ \db -> getGroupMember db vr user gId mId + m <- withFastStore $ \db -> getGroupMember db cxt user gId mId let mc = MCText msg case memberContactId m of Nothing -> do - g <- withFastStore $ \db -> getGroupInfo db vr user gId + g <- withFastStore $ \db -> getGroupInfo db cxt user gId unless (groupFeatureUserAllowed SGFDirectMessages g) $ throwCmdError "direct messages not allowed" toView $ CEvtNoMemberContactCreating user g m - processChatCommand vr nm (APICreateMemberContact gId mId) >>= \case + processChatCommand cxt nm (APICreateMemberContact gId mId) >>= \case CRNewMemberContact _ ct@Contact {contactId} _ _ -> do toViewTE $ TENewMemberContact user ct g m - processChatCommand vr nm $ APISendMemberContactInvitation contactId (Just mc) + processChatCommand cxt nm $ APISendMemberContactInvitation contactId (Just mc) cr -> pure cr Just ctId -> do let sendRef = SRDirect ctId - processChatCommand vr nm $ APISendMessages sendRef False Nothing [composedMessage Nothing mc] + processChatCommand cxt nm $ APISendMessages sendRef False Nothing [composedMessage Nothing mc] AcceptMemberContact cName -> withUser $ \user -> do contactId <- withFastStore $ \db -> getContactIdByName db user cName - processChatCommand vr nm $ APIAcceptMemberContact contactId + processChatCommand cxt nm $ APIAcceptMemberContact contactId SendLiveMessage chatName msg -> withUser $ \user -> do (chatRef, mentions) <- getChatRefAndMentions user chatName msg withSendRef user chatRef $ \sendRef -> do let mc = MCText msg - processChatCommand vr nm $ APISendMessages sendRef True Nothing [ComposedMessage Nothing Nothing mc mentions] + processChatCommand cxt nm $ APISendMessages sendRef True Nothing [ComposedMessage Nothing Nothing mc mentions] SendMessageBroadcast mc -> withUser $ \user -> do - contacts <- withFastStore' $ \db -> getUserContacts db vr user + contacts <- withFastStore' $ \db -> getUserContacts db cxt user withChatLock "sendMessageBroadcast" $ do let ctConns_ = L.nonEmpty $ foldr addContactConn [] contacts case ctConns_ of @@ -2451,28 +2451,28 @@ processChatCommand vr nm = \case contactId <- withFastStore $ \db -> getContactIdByName db user cName quotedItemId <- withFastStore $ \db -> getDirectChatItemIdByText db userId contactId msgDir quotedMsg let mc = MCText msg - processChatCommand vr nm $ APISendMessages (SRDirect contactId) False Nothing [ComposedMessage Nothing (Just quotedItemId) mc M.empty] + processChatCommand cxt nm $ APISendMessages (SRDirect contactId) False Nothing [ComposedMessage Nothing (Just quotedItemId) mc M.empty] DeleteMessage chatName deletedMsg -> withUser $ \user -> do chatRef <- getChatRef user chatName deletedItemId <- getSentChatItemIdByText user chatRef deletedMsg - processChatCommand vr nm $ APIDeleteChatItem chatRef (deletedItemId :| []) CIDMBroadcast + processChatCommand cxt nm $ APIDeleteChatItem chatRef (deletedItemId :| []) CIDMBroadcast DeleteMemberMessage gName mName deletedMsg -> withUser $ \user -> do gId <- withFastStore $ \db -> getGroupIdByName db user gName deletedItemId <- withFastStore $ \db -> getGroupChatItemIdByText db user gId (Just mName) deletedMsg - processChatCommand vr nm $ APIDeleteMemberChatItem gId (deletedItemId :| []) + processChatCommand cxt nm $ APIDeleteMemberChatItem gId (deletedItemId :| []) EditMessage chatName editedMsg msg -> withUser $ \user -> do (chatRef, mentions) <- getChatRefAndMentions user chatName msg editedItemId <- getSentChatItemIdByText user chatRef editedMsg let mc = MCText msg - processChatCommand vr nm $ APIUpdateChatItem chatRef editedItemId False $ UpdatedMessage mc mentions + processChatCommand cxt nm $ APIUpdateChatItem chatRef editedItemId False $ UpdatedMessage mc mentions UpdateLiveMessage chatName chatItemId live msg -> withUser $ \user -> do (chatRef, mentions) <- getChatRefAndMentions user chatName msg let mc = MCText msg - processChatCommand vr nm $ APIUpdateChatItem chatRef chatItemId live $ UpdatedMessage mc mentions + processChatCommand cxt nm $ APIUpdateChatItem chatRef chatItemId live $ UpdatedMessage mc mentions ReactToMessage add reaction chatName msg -> withUser $ \user -> do chatRef <- getChatRef user chatName chatItemId <- getChatItemIdByText user chatRef msg - processChatCommand vr nm $ APIChatItemReaction chatRef chatItemId add reaction + processChatCommand cxt nm $ APIChatItemReaction chatRef chatItemId add reaction APINewGroup userId incognito gProfile -> withUserId userId $ \user -> do g <- asks random memberId <- liftIO $ MemberId <$> encodedRandomBytes g 12 @@ -2480,7 +2480,7 @@ processChatCommand vr nm = \case createNewGroupItems user gInfo pure $ CRGroupCreated user gInfo NewGroup incognito gProfile -> withUser $ \User {userId} -> - processChatCommand vr nm $ APINewGroup userId incognito gProfile + processChatCommand cxt nm $ APINewGroup userId incognito gProfile APINewPublicGroup userId incognito relayIds groupProfile -> withUserId userId $ \user -> do (gProfile', memberId, groupKeys, setupLink) <- prepareGroupLink user gInfo <- newGroup user incognito gProfile' True memberId (Just groupKeys) (Just 1) @@ -2540,16 +2540,16 @@ processChatCommand vr nm = \case pure (gLink, results) pure (groupProfile', memberId, groupKeys, setupLink) NewPublicGroup incognito relayIds gProfile -> withUser $ \User {userId} -> - processChatCommand vr nm $ APINewPublicGroup userId incognito relayIds gProfile + processChatCommand cxt nm $ APINewPublicGroup userId incognito relayIds gProfile APIGetGroupRelays groupId -> withUser $ \user -> do (gInfo, relays) <- withFastStore $ \db -> do - gInfo <- getGroupInfo db vr user groupId + gInfo <- getGroupInfo db cxt user groupId relays <- liftIO $ getGroupRelays db gInfo pure (gInfo, relays) pure $ CRGroupRelays user gInfo relays APIAddGroupRelays groupId relayIds -> withUser $ \user -> withGroupLock "addGroupRelays" groupId $ do (gInfo, existingRelays) <- withFastStore $ \db -> do - gi <- getGroupInfo db vr user groupId + gi <- getGroupInfo db cxt user groupId rs <- liftIO $ getGroupRelays db gi pure (gi, rs) assertUserGroupRole gInfo GROwner @@ -2580,7 +2580,7 @@ processChatCommand vr nm = \case _ -> False APIAddMember groupId contactId memRole -> withUser $ \user -> withGroupLock "addMember" groupId $ do -- TODO for large groups: no need to load all members to determine if contact is a member - (group, contact) <- withFastStore $ \db -> (,) <$> getGroup db vr user groupId <*> getContact db vr user contactId + (group, contact) <- withFastStore $ \db -> (,) <$> getGroup db cxt user groupId <*> getContact db cxt user contactId let Group gInfo members = group Contact {localDisplayName = cName} = contact when (useRelays' gInfo) $ throwCmdError "can't invite contact to channel" @@ -2612,8 +2612,8 @@ processChatCommand vr nm = \case APIJoinGroup groupId enableNtfs -> withUser $ \user@User {userId} -> do withGroupLock "joinGroup" groupId $ do (invitation, ct) <- withFastStore $ \db -> do - inv@ReceivedGroupInvitation {fromMember} <- getGroupInvitation db vr user groupId - (inv,) <$> getContactViaMember db vr user fromMember + inv@ReceivedGroupInvitation {fromMember} <- getGroupInvitation db cxt user groupId + (inv,) <$> getContactViaMember db cxt user fromMember let ReceivedGroupInvitation {fromMember, connRequest, groupInfo = g@GroupInfo {membership, chatSettings}} = invitation GroupMember {memberId = membershipMemId} = membership Contact {activeConn} = ct @@ -2624,7 +2624,7 @@ processChatCommand vr nm = \case agentConnId <- case memberConn fromMember of Nothing -> do agentConnId <- withAgent $ \a -> prepareConnectionToJoin a (aUserId user) True connRequest PQSupportOff - let chatV = vr `peerConnChatVersion` peerChatVRange + let chatV = vr cxt `peerConnChatVersion` peerChatVRange void $ withFastStore' $ \db -> createMemberConnection db userId fromMember agentConnId chatV peerChatVRange subMode pure agentConnId Just conn -> pure $ aConnId conn @@ -2643,7 +2643,7 @@ processChatCommand vr nm = \case pure $ CRUserAcceptedGroupSent user g {membership = membership {memberStatus = GSMemAccepted}} Nothing Nothing -> throwChatError $ CEContactNotActive ct APIAcceptMember groupId gmId role -> withUser $ \user@User {userId} -> do - (gInfo, m) <- withFastStore $ \db -> (,) <$> getGroupInfo db vr user groupId <*> getGroupMemberById db vr user gmId + (gInfo, m) <- withFastStore $ \db -> (,) <$> getGroupInfo db cxt user groupId <*> getGroupMemberById db cxt user gmId assertUserGroupRole gInfo $ max GRModerator role case memberStatus m of GSMemPendingApproval | memberCategory m == GCInviteeMember -> do -- only host can approve @@ -2652,14 +2652,14 @@ processChatCommand vr nm = \case Just mConn -> case memberAdmission >>= review of Just MCAll -> do - introduceToModerators vr user gInfo m + introduceToModerators cxt user gInfo m withFastStore' $ \db -> updateGroupMemberStatus db userId m GSMemPendingReview let m' = m {memberStatus = GSMemPendingReview} pure $ CRMemberAccepted user gInfo m' Nothing -> do let msg = XGrpLinkAcpt GAAccepted role (memberId' m) void $ sendDirectMemberMessage mConn msg groupId - introduceToRemaining vr user gInfo m {memberRole = role} + introduceToRemaining cxt user gInfo m {memberRole = role} when (groupFeatureAllowed SGFHistory gInfo) $ sendHistory user gInfo m (m', gInfo') <- withFastStore' $ \db -> do m' <- updateGroupMemberAccepted db user m GSMemConnected role @@ -2674,7 +2674,7 @@ processChatCommand vr nm = \case Nothing -> throwChatError CEGroupMemberNotActive GSMemPendingReview -> do let scope = Just $ GCSMemberSupport $ Just (groupMemberId' m) - modMs <- withFastStore' $ \db -> getGroupModerators db vr user gInfo + modMs <- withFastStore' $ \db -> getGroupModerators db cxt user gInfo let rcpModMs' = filter memberCurrent modMs msg = XGrpLinkAcpt GAAccepted role (memberId' m) void $ sendGroupMessage user gInfo scope ([m] <> rcpModMs') msg @@ -2683,7 +2683,7 @@ processChatCommand vr nm = \case let msg2 = XMsgNew $ mcSimple (MCText acceptedToGroupMessage) void $ sendDirectMemberMessage mConn msg2 groupId when (memberCategory m == GCInviteeMember) $ do - introduceToRemaining vr user gInfo m {memberRole = role} + introduceToRemaining cxt user gInfo m {memberRole = role} when (groupFeatureAllowed SGFHistory gInfo) $ sendHistory user gInfo m (m', gInfo') <- withFastStore' $ \db -> do m' <- updateGroupMemberAccepted db user m newMemberStatus role @@ -2701,7 +2701,7 @@ processChatCommand vr nm = \case _ -> GSMemAnnounced _ -> throwCmdError "member should be pending approval and invitee, or pending review and not invitee" APIDeleteMemberSupportChat groupId gmId -> withUser $ \user -> do - (gInfo, m) <- withFastStore $ \db -> (,) <$> getGroupInfo db vr user groupId <*> getGroupMemberById db vr user gmId + (gInfo, m) <- withFastStore $ \db -> (,) <$> getGroupInfo db cxt user groupId <*> getGroupMemberById db cxt user gmId when (isNothing $ supportChat m) $ throwCmdError "member has no support chat" when (memberPending m) $ throwCmdError "member is pending" (gInfo', m') <- withFastStore' $ \db -> do @@ -2715,7 +2715,7 @@ processChatCommand vr nm = \case APIMembersRole groupId memberIds newRole -> withUser $ \user -> withGroupLock "memberRole" groupId $ do -- TODO [relays] possible optimization is to read only required members + relays - g@(Group gInfo members) <- withFastStore $ \db -> getGroup db vr user groupId + g@(Group gInfo members) <- withFastStore $ \db -> getGroup db cxt user groupId when (selfSelected gInfo) $ throwCmdError "can't change role for self" let (invitedMems, currentMems, unchangedMems, maxRole, anyAdmin, anyPending) = selectMembers members when (length invitedMems + length currentMems + length unchangedMems /= length memberIds) $ throwChatError CEGroupMemberNotFound @@ -2753,7 +2753,7 @@ processChatCommand vr nm = \case where changeRole :: GroupMember -> CM GroupMember changeRole m@GroupMember {groupMemberId, memberContactId, localDisplayName = cName} = do - withFastStore (\db -> (,) <$> mapM (getContact db vr user) memberContactId <*> liftIO (getMemberInvitation db user groupMemberId)) >>= \case + withFastStore (\db -> (,) <$> mapM (getContact db cxt user) memberContactId <*> liftIO (getMemberInvitation db user groupMemberId)) >>= \case (Just ct, Just cReq) -> do sendGrpInvitation user ct gInfo (m :: GroupMember) {memberRole = newRole} cReq withFastStore' $ \db -> updateGroupMemberRole db user m newRole @@ -2785,7 +2785,7 @@ processChatCommand vr nm = \case APIBlockMembersForAll groupId memberIds blockFlag -> withUser $ \user -> withGroupLock "blockForAll" groupId $ do -- TODO [relays] possible optimization is to read only required members + relays - Group gInfo members <- withFastStore $ \db -> getGroup db vr user groupId + Group gInfo members <- withFastStore $ \db -> getGroup db cxt user groupId when (selfSelected gInfo) $ throwCmdError "can't block/unblock self" -- TODO [relays] consider sending restriction to all members (remove filtering), as we do in delivery jobs let (blockMems, remainingMems, maxRole, anyAdmin, anyPending) = selectMembers members @@ -2834,7 +2834,7 @@ processChatCommand vr nm = \case APIRemoveMembers {groupId, groupMemberIds, withMessages} -> withUser $ \user -> withGroupLock "removeMembers" groupId $ do -- TODO [relays] possible optimization is to read only required members + relays - Group gInfo members <- withFastStore $ \db -> getGroup db vr user groupId + Group gInfo members <- withFastStore $ \db -> getGroup db cxt user groupId let (count, invitedMems, pendingApprvMems, pendingRvwMems, currentMems, maxRole, anyAdmin) = selectMembers gmIds members gmIds = S.fromList $ L.toList groupMemberIds memCount = length groupMemberIds @@ -2857,7 +2857,7 @@ processChatCommand vr nm = \case gInfo' <- if useRelays' gInfo then updatePublicGroupData user gInfo - else withFastStore $ \db -> getGroupInfo db vr user groupId + else withFastStore $ \db -> getGroupInfo db cxt user groupId let acis' = map (updateACIGroupInfo gInfo') acis unless (null acis') $ toView $ CEvtNewChatItems user acis' unless (null errs) $ toView $ CEvtChatErrors errs @@ -2929,7 +2929,7 @@ processChatCommand vr nm = \case | groupFeatureUserAllowed SGFFullDelete gInfo = deleteGroupMembersCIs user gInfo ms membership | otherwise = markGroupMembersCIsDeleted user gInfo ms membership APILeaveGroup groupId -> withUser $ \user@User {userId} -> do - gInfo@GroupInfo {membership} <- withFastStore $ \db -> getGroupInfo db vr user groupId + gInfo@GroupInfo {membership} <- withFastStore $ \db -> getGroupInfo db cxt user groupId filesInfo <- withFastStore' $ \db -> getGroupFileInfo db user gInfo withGroupLock "leaveGroup" groupId $ do cancelFilesInProgress user filesInfo @@ -2968,26 +2968,26 @@ processChatCommand vr nm = \case pure msg getRecipients user gInfo | useRelays' gInfo = do - relays <- withFastStore' $ \db -> getGroupRelayMembers db vr user gInfo + relays <- withFastStore' $ \db -> getGroupRelayMembers db cxt user gInfo pure (relays, relays) | otherwise = do - ms <- withFastStore' $ \db -> getGroupMembers db vr user gInfo + ms <- withFastStore' $ \db -> getGroupMembers db cxt user gInfo pure (ms, filter memberCurrentOrPending ms) APIListMembers groupId -> withUser $ \user -> - CRGroupMembers user <$> withFastStore (\db -> getGroup db vr user groupId) + CRGroupMembers user <$> withFastStore (\db -> getGroup db cxt user groupId) -- -- validate: prohibit to delete/archive if member is pending (has to communicate approval or rejection) -- APIDeleteGroupConversations groupId _gcId -> withUser $ \user -> do - -- _gInfo <- withFastStore $ \db -> getGroupInfo db vr user groupId + -- _gInfo <- withFastStore $ \db -> getGroupInfo db cxt user groupId -- ok_ -- CRGroupConversationsArchived -- APIArchiveGroupConversations groupId _gcId -> withUser $ \user -> do - -- _gInfo <- withFastStore $ \db -> getGroupInfo db vr user groupId + -- _gInfo <- withFastStore $ \db -> getGroupInfo db cxt user groupId -- ok_ -- CRGroupConversationsDeleted AddMember gName cName memRole -> withUser $ \user -> do (groupId, contactId) <- withFastStore $ \db -> (,) <$> getGroupIdByName db user gName <*> getContactIdByName db user cName - processChatCommand vr nm $ APIAddMember groupId contactId memRole + processChatCommand cxt nm $ APIAddMember groupId contactId memRole JoinGroup gName enableNtfs -> withUser $ \user -> do groupId <- withFastStore $ \db -> getGroupIdByName db user gName - processChatCommand vr nm $ APIJoinGroup groupId enableNtfs + processChatCommand cxt nm $ APIJoinGroup groupId enableNtfs AcceptMember gName gMemberName memRole -> withMemberName gName gMemberName $ \gId gMemberId -> APIAcceptMember gId gMemberId memRole MemberRole gName gMemberName memRole -> withMemberName gName gMemberName $ \gId gMemberId -> APIMembersRole gId [gMemberId] memRole BlockForAll gName gMemberName blocked -> withMemberName gName gMemberName $ \gId gMemberId -> APIBlockMembersForAll gId [gMemberId] blocked @@ -2996,45 +2996,45 @@ processChatCommand vr nm = \case gId <- getGroupIdByName db user gName gMemberIds <- mapM (getGroupMemberIdByName db user gId) gMemberNames pure (gId, gMemberIds) - processChatCommand vr nm $ APIRemoveMembers gId gMemberIds withMessages + processChatCommand cxt nm $ APIRemoveMembers gId gMemberIds withMessages LeaveGroup gName -> withUser $ \user -> do groupId <- withFastStore $ \db -> getGroupIdByName db user gName - processChatCommand vr nm $ APILeaveGroup groupId + processChatCommand cxt nm $ APILeaveGroup groupId AllowRelayGroup gName -> withUser $ \user -> do groupId <- withFastStore $ \db -> getGroupIdByName db user gName - processChatCommand vr nm $ APIAllowRelayGroup groupId + processChatCommand cxt nm $ APIAllowRelayGroup groupId DeleteGroup gName -> withUser $ \user -> do groupId <- withFastStore $ \db -> getGroupIdByName db user gName - processChatCommand vr nm $ APIDeleteChat (ChatRef CTGroup groupId Nothing) (CDMFull True) + processChatCommand cxt nm $ APIDeleteChat (ChatRef CTGroup groupId Nothing) (CDMFull True) ClearGroup gName -> withUser $ \user -> do groupId <- withFastStore $ \db -> getGroupIdByName db user gName - processChatCommand vr nm $ APIClearChat (ChatRef CTGroup groupId Nothing) + processChatCommand cxt nm $ APIClearChat (ChatRef CTGroup groupId Nothing) ListMembers gName -> withUser $ \user -> do groupId <- withFastStore $ \db -> getGroupIdByName db user gName - processChatCommand vr nm $ APIListMembers groupId + processChatCommand cxt nm $ APIListMembers groupId ListMemberSupportChats gName -> withUser $ \user -> do groupId <- withFastStore $ \db -> getGroupIdByName db user gName - (Group gInfo members) <- withFastStore $ \db -> getGroup db vr user groupId + (Group gInfo members) <- withFastStore $ \db -> getGroup db cxt user groupId let memberSupportChats = filter (isJust . supportChat) members pure $ CRMemberSupportChats user gInfo memberSupportChats APIListGroups userId contactId_ search_ -> withUserId userId $ \user -> - CRGroupsList user <$> withFastStore' (\db -> getBaseGroupDetails db vr user contactId_ search_) + CRGroupsList user <$> withFastStore' (\db -> getBaseGroupDetails db cxt user contactId_ search_) ListGroups cName_ search_ -> withUser $ \user@User {userId} -> do - ct_ <- forM cName_ $ \cName -> withFastStore $ \db -> getContactByName db vr user cName - processChatCommand vr nm $ APIListGroups userId (contactId' <$> ct_) search_ + ct_ <- forM cName_ $ \cName -> withFastStore $ \db -> getContactByName db cxt user cName + processChatCommand cxt nm $ APIListGroups userId (contactId' <$> ct_) search_ APIUpdateGroupProfile groupId p' -> withUser $ \user -> do - gInfo <- withFastStore $ \db -> getGroupInfo db vr user groupId + gInfo <- withFastStore $ \db -> getGroupInfo db cxt user groupId runUpdateGroupProfile user gInfo p' UpdateGroupNames gName GroupProfile {displayName, fullName, shortDescr} -> updateGroupProfileByName gName $ \p -> p {displayName, fullName, shortDescr} ShowGroupProfile gName -> withUser $ \user -> - CRGroupProfile user <$> withFastStore (\db -> getGroupInfoByName db vr user gName) + CRGroupProfile user <$> withFastStore (\db -> getGroupInfoByName db cxt user gName) UpdateGroupDescription gName description -> updateGroupProfileByName gName $ \p -> p {description} ShowGroupDescription gName -> withUser $ \user -> - CRGroupDescription user <$> withFastStore (\db -> getGroupInfoByName db vr user gName) + CRGroupDescription user <$> withFastStore (\db -> getGroupInfoByName db cxt user gName) APICreateGroupLink groupId mRole -> withUser $ \user -> withGroupLock "createGroupLink" groupId $ do - gInfo@GroupInfo {groupProfile} <- withFastStore $ \db -> getGroupInfo db vr user groupId + gInfo@GroupInfo {groupProfile} <- withFastStore $ \db -> getGroupInfo db cxt user groupId assertUserGroupRole gInfo GRAdmin when (mRole > GRMember) $ throwChatError $ CEGroupMemberInitialRole gInfo mRole groupLinkId <- GroupLinkId <$> drgRandomBytes 16 @@ -3049,7 +3049,7 @@ processChatCommand vr nm = \case gLink <- withFastStore $ \db -> createGroupLink db gVar user gInfo connId ccLink' groupLinkId mRole subMode pure $ CRGroupLinkCreated user gInfo gLink APIGroupLinkMemberRole groupId mRole' -> withUser $ \user -> withGroupLock "groupLinkMemberRole" groupId $ do - gInfo <- withFastStore $ \db -> getGroupInfo db vr user groupId + gInfo <- withFastStore $ \db -> getGroupInfo db cxt user groupId gLnk@GroupLink {acceptMemberRole} <- withFastStore $ \db -> getGroupLink db user gInfo assertUserGroupRole gInfo GRAdmin when (mRole' > GRMember) $ throwChatError $ CEGroupMemberInitialRole gInfo mRole' @@ -3059,22 +3059,22 @@ processChatCommand vr nm = \case else pure gLnk pure $ CRGroupLink user gInfo gLnk' APIDeleteGroupLink groupId -> withUser $ \user -> withGroupLock "deleteGroupLink" groupId $ do - gInfo <- withFastStore $ \db -> getGroupInfo db vr user groupId + gInfo <- withFastStore $ \db -> getGroupInfo db cxt user groupId deleteGroupLink' user gInfo pure $ CRGroupLinkDeleted user gInfo APIGetGroupLink groupId -> withUser $ \user -> do - gInfo <- withFastStore $ \db -> getGroupInfo db vr user groupId + gInfo <- withFastStore $ \db -> getGroupInfo db cxt user groupId gLnk <- withFastStore $ \db -> getGroupLink db user gInfo pure $ CRGroupLink user gInfo gLnk APIAddGroupShortLink groupId -> withUser $ \user -> do (gInfo, gLink) <- withFastStore $ \db -> do - gInfo <- getGroupInfo db vr user groupId + gInfo <- getGroupInfo db cxt user groupId gLink <- getGroupLink db user gInfo pure (gInfo, gLink) gLink' <- setGroupLinkData nm user gInfo gLink pure $ CRGroupLink user gInfo gLink' APICreateMemberContact gId gMemberId -> withUser $ \user -> do - (g, m) <- withFastStore $ \db -> (,) <$> getGroupInfo db vr user gId <*> getGroupMember db vr user gId gMemberId + (g, m) <- withFastStore $ \db -> (,) <$> getGroupInfo db cxt user gId <*> getGroupMember db cxt user gId gMemberId assertUserGroupRole g GRAuthor unless (groupFeatureUserAllowed SGFDirectMessages g) $ throwCmdError "direct messages not allowed" case memberConn m of @@ -3092,7 +3092,7 @@ processChatCommand vr nm = \case pure $ CRNewMemberContact user ct g m _ -> throwChatError CEGroupMemberNotActive APISendMemberContactInvitation contactId msgContent_ -> withUser $ \user -> do - (g@GroupInfo {groupId}, m, ct, cReq) <- withFastStore $ \db -> getMemberContact db vr user contactId + (g@GroupInfo {groupId}, m, ct, cReq) <- withFastStore $ \db -> getMemberContact db cxt user contactId when (contactGrpInvSent ct) $ throwCmdError "x.grp.direct.inv already sent" case memberConn m of Just mConn -> do @@ -3107,17 +3107,17 @@ processChatCommand vr nm = \case pure $ CRNewMemberContactSentInv user ct' g m _ -> throwChatError CEGroupMemberNotActive APIAcceptMemberContact contactId -> withUser $ \user -> do - (g, mConn, ct, groupDirectInv) <- withFastStore $ \db -> getMemberContactInvited db vr user contactId + (g, mConn, ct, groupDirectInv) <- withFastStore $ \db -> getMemberContactInvited db cxt user contactId when (groupDirectInvStartedConnection groupDirectInv) $ throwCmdError "connection already started" connectMemberContact user g mConn ct groupDirectInv `catchAllErrors` \e -> do -- get updated contact, in case connection was started - ct' <- withFastStore $ \db -> getContact db vr user contactId + ct' <- withFastStore $ \db -> getContact db cxt user contactId toView $ CEvtChatInfoUpdated user (AChatInfo SCTDirect $ DirectChat ct') throwError e -- get updated contact (groupDirectInvStartedConnection) with connection ct' <- withFastStore $ \db -> do liftIO $ setMemberContactStartedConnection db ct - getContact db vr user contactId + getContact db cxt user contactId pure $ CRMemberContactAccepted user ct' where connectMemberContact user gInfo mConn Contact {activeConn} GroupDirectInvitation {groupDirectInvLink = cReq} = @@ -3139,7 +3139,7 @@ processChatCommand vr nm = \case acId <- withAgent $ \a -> prepareConnectionToJoin a (aUserId user) True cReq PQSupportOff conn <- withStore $ \db -> do connId <- liftIO $ createMemberContactConn db user acId Nothing gInfo mConn ConnPrepared contactId subMode - getConnectionById db vr user connId + getConnectionById db cxt user connId joinPreparedConn subMode conn joinPreparedConn subMode conn = do -- [incognito] send membership incognito profile @@ -3150,66 +3150,66 @@ processChatCommand vr nm = \case void $ withFastStore' $ \db -> updateConnectionStatusFromTo db conn ConnPrepared newStatus CreateGroupLink gName mRole -> withUser $ \user -> do groupId <- withFastStore $ \db -> getGroupIdByName db user gName - processChatCommand vr nm $ APICreateGroupLink groupId mRole + processChatCommand cxt nm $ APICreateGroupLink groupId mRole GroupLinkMemberRole gName mRole -> withUser $ \user -> do groupId <- withFastStore $ \db -> getGroupIdByName db user gName - processChatCommand vr nm $ APIGroupLinkMemberRole groupId mRole + processChatCommand cxt nm $ APIGroupLinkMemberRole groupId mRole DeleteGroupLink gName -> withUser $ \user -> do groupId <- withFastStore $ \db -> getGroupIdByName db user gName - processChatCommand vr nm $ APIDeleteGroupLink groupId + processChatCommand cxt nm $ APIDeleteGroupLink groupId ShowGroupLink gName -> withUser $ \user -> do groupId <- withFastStore $ \db -> getGroupIdByName db user gName - processChatCommand vr nm $ APIGetGroupLink groupId + processChatCommand cxt nm $ APIGetGroupLink groupId SendGroupMessageQuote gName cName quotedMsg msg -> withUser $ \user -> do (gInfo, quotedItemId, mentions) <- withFastStore $ \db -> do - gInfo <- getGroupInfoByName db vr user gName + gInfo <- getGroupInfoByName db cxt user gName let gId = groupId' gInfo qiId <- getGroupChatItemIdByText db user gId cName quotedMsg (gInfo, qiId,) <$> liftIO (getMessageMentions db user gId msg) let mc = MCText msg - processChatCommand vr nm $ APISendMessages (SRGroup (groupId' gInfo) Nothing (sendAsGroup' gInfo Nothing)) False Nothing [ComposedMessage Nothing (Just quotedItemId) mc mentions] + processChatCommand cxt nm $ APISendMessages (SRGroup (groupId' gInfo) Nothing (sendAsGroup' gInfo Nothing)) False Nothing [ComposedMessage Nothing (Just quotedItemId) mc mentions] ClearNoteFolder -> withUser $ \user -> do folderId <- withFastStore (`getUserNoteFolderId` user) - processChatCommand vr nm $ APIClearChat (ChatRef CTLocal folderId Nothing) + processChatCommand cxt nm $ APIClearChat (ChatRef CTLocal folderId Nothing) LastChats count_ -> withUser' $ \user -> do let count = fromMaybe 5000 count_ - (errs, previews) <- partitionEithers <$> withFastStore' (\db -> getChatPreviews db vr user False (PTLast count) clqNoFilters) + (errs, previews) <- partitionEithers <$> withFastStore' (\db -> getChatPreviews db cxt user False (PTLast count) clqNoFilters) unless (null errs) $ toView $ CEvtChatErrors (map ChatErrorStore errs) pure $ CRChats previews LastMessages (Just chatName) count search -> withUser $ \user -> do chatRef <- getChatRef user chatName - chatResp <- processChatCommand vr nm $ APIGetChat chatRef Nothing (CPLast count) search + chatResp <- processChatCommand cxt nm $ APIGetChat chatRef Nothing (CPLast count) search pure $ CRChatItems user (Just chatName) (aChatItems . chat $ chatResp) LastMessages Nothing count search -> withUser $ \user -> do - chatItems <- withFastStore $ \db -> getAllChatItems db vr user (CPLast count) search + chatItems <- withFastStore $ \db -> getAllChatItems db cxt user (CPLast count) search pure $ CRChatItems user Nothing chatItems LastChatItemId (Just chatName) index -> withUser $ \user -> do chatRef <- getChatRef user chatName - chatResp <- processChatCommand vr nm $ APIGetChat chatRef Nothing (CPLast $ index + 1) Nothing + chatResp <- processChatCommand cxt nm $ APIGetChat chatRef Nothing (CPLast $ index + 1) Nothing pure $ CRChatItemId user (fmap aChatItemId . listToMaybe . aChatItems . chat $ chatResp) LastChatItemId Nothing index -> withUser $ \user -> do - chatItems <- withFastStore $ \db -> getAllChatItems db vr user (CPLast $ index + 1) Nothing + chatItems <- withFastStore $ \db -> getAllChatItems db cxt user (CPLast $ index + 1) Nothing pure $ CRChatItemId user (fmap aChatItemId . listToMaybe $ chatItems) ShowChatItem (Just itemId) -> withUser $ \user -> do chatItem <- withFastStore $ \db -> do chatRef <- getChatRefViaItemId db user itemId - getAChatItem db vr user chatRef itemId + getAChatItem db cxt user chatRef itemId pure $ CRChatItems user Nothing ((: []) chatItem) ShowChatItem Nothing -> withUser $ \user -> do - chatItems <- withFastStore $ \db -> getAllChatItems db vr user (CPLast 1) Nothing + chatItems <- withFastStore $ \db -> getAllChatItems db cxt user (CPLast 1) Nothing pure $ CRChatItems user Nothing chatItems ShowChatItemInfo chatName msg -> withUser $ \user -> do chatRef <- getChatRef user chatName itemId <- getChatItemIdByText user chatRef msg - processChatCommand vr nm $ APIGetChatItemInfo chatRef itemId + processChatCommand cxt nm $ APIGetChatItemInfo chatRef itemId ShowLiveItems on -> withUser $ \_ -> asks showLiveItems >>= atomically . (`writeTVar` on) >> ok_ SendFile chatName f -> withUser $ \user -> do chatRef <- getChatRef user chatName case chatRef of - ChatRef CTLocal folderId _ -> processChatCommand vr nm $ APICreateChatItems folderId [composedMessage (Just f) (MCFile "")] - _ -> withSendRef user chatRef $ \sendRef -> processChatCommand vr nm $ APISendMessages sendRef False Nothing [composedMessage (Just f) (MCFile "")] + ChatRef CTLocal folderId _ -> processChatCommand cxt nm $ APICreateChatItems folderId [composedMessage (Just f) (MCFile "")] + _ -> withSendRef user chatRef $ \sendRef -> processChatCommand cxt nm $ APISendMessages sendRef False Nothing [composedMessage (Just f) (MCFile "")] SendImage chatName f@(CryptoFile fPath _) -> withUser $ \user -> do chatRef <- getChatRef user chatName withSendRef user chatRef $ \sendRef -> do @@ -3218,7 +3218,7 @@ processChatCommand vr nm = \case fileSize <- getFileSize filePath unless (fileSize <= maxImageSize) $ throwChatError CEFileImageSize {filePath} -- TODO include file description for preview - processChatCommand vr nm $ APISendMessages sendRef False Nothing [composedMessage (Just f) (MCImage "" fixedImagePreview)] + processChatCommand cxt nm $ APISendMessages sendRef False Nothing [composedMessage (Just f) (MCImage "" fixedImagePreview)] ForwardFile chatName fileId -> forwardFile chatName fileId SendFile ForwardImage chatName fileId -> forwardFile chatName fileId SendImage SendFileDescription _chatName _f -> throwCmdError "TODO" @@ -3245,18 +3245,18 @@ processChatCommand vr nm = \case | otherwise -> do cancelSndFile user ftm fts True cref_ <- withFastStore' $ \db -> lookupChatRefByFileId db user fileId - aci_ <- withFastStore $ \db -> lookupChatItemByFileId db vr user fileId + aci_ <- withFastStore $ \db -> lookupChatItemByFileId db cxt user fileId case (cref_, aci_) of (Nothing, _) -> pure $ CRSndFileCancelled user Nothing ftm fts (Just (ChatRef CTDirect contactId _), Just aci) -> do - (contact, sharedMsgId) <- withFastStore $ \db -> (,) <$> getContact db vr user contactId <*> getSharedMsgIdByFileId db userId fileId + (contact, sharedMsgId) <- withFastStore $ \db -> (,) <$> getContact db cxt user contactId <*> getSharedMsgIdByFileId db userId fileId void . sendDirectContactMessage user contact $ XFileCancel sharedMsgId pure $ CRSndFileCancelled user (Just aci) ftm fts (Just (ChatRef CTGroup groupId scope), Just aci) -> do - (gInfo, sharedMsgId) <- withFastStore $ \db -> (,) <$> getGroupInfo db vr user groupId <*> getSharedMsgIdByFileId db userId fileId - chatScopeInfo <- mapM (getChatScopeInfo vr user) scope - recipients <- getGroupRecipients vr user gInfo chatScopeInfo groupKnockingVersion + (gInfo, sharedMsgId) <- withFastStore $ \db -> (,) <$> getGroupInfo db cxt user groupId <*> getSharedMsgIdByFileId db userId fileId + chatScopeInfo <- mapM (getChatScopeInfo cxt user) scope + recipients <- getGroupRecipients cxt user gInfo chatScopeInfo groupKnockingVersion void . sendGroupMessage user gInfo scope recipients $ XFileCancel sharedMsgId pure $ CRSndFileCancelled user (Just aci) ftm fts (Just _, _) -> throwChatError $ CEFileInternal "invalid chat ref for file transfer" @@ -3269,7 +3269,7 @@ processChatCommand vr nm = \case | otherwise -> case xftpRcvFile of Nothing -> do cancelRcvFileTransfer user ftr - ci <- withFastStore $ \db -> lookupChatItemByFileId db vr user fileId + ci <- withFastStore $ \db -> lookupChatItemByFileId db cxt user fileId pure $ CRRcvFileCancelled user ci ftr Just XFTPRcvFile {agentRcvFileId} -> do forM_ (liveRcvFileTransferPath ftr) $ \filePath -> do @@ -3280,7 +3280,7 @@ processChatCommand vr nm = \case aci_ <- resetRcvCIFileStatus user fileId CIFSRcvInvitation pure $ CRRcvFileCancelled user aci_ ftr FileStatus fileId -> withUser $ \user -> do - withFastStore (\db -> lookupChatItemByFileId db vr user fileId) >>= \case + withFastStore (\db -> lookupChatItemByFileId db cxt user fileId) >>= \case Nothing -> do fileStatus <- withFastStore $ \db -> getFileTransferProgress db user fileId pure $ CRFileTransferStatus user fileStatus @@ -3309,7 +3309,7 @@ processChatCommand vr nm = \case let p = (fromLocalProfile profile :: Profile) {preferences = Just . setPreference f (Just allowed) $ preferences' user} updateProfile user p SetContactFeature (ACF f) cName allowed_ -> withUser $ \user -> do - ct@Contact {userPreferences} <- withFastStore $ \db -> getContactByName db vr user cName + ct@Contact {userPreferences} <- withFastStore $ \db -> getContactByName db cxt user cName let prefs' = setPreference f allowed_ $ Just userPreferences updateContactPrefs user ct prefs' SetGroupFeature (AGFNR f) gName enabled -> @@ -3329,7 +3329,7 @@ processChatCommand vr nm = \case p = (fromLocalProfile profile :: Profile) {preferences = Just . setPreference' SCFTimedMessages (Just pref) $ preferences' user} updateProfile user p SetContactTimedMessages cName timedMessagesEnabled_ -> withUser $ \user -> do - ct@Contact {userPreferences = userPreferences@Preferences {timedMessages}} <- withFastStore $ \db -> getContactByName db vr user cName + ct@Contact {userPreferences = userPreferences@Preferences {timedMessages}} <- withFastStore $ \db -> getContactByName db cxt user cName let currentTTL = timedMessages >>= \TimedMessagesPreference {ttl} -> ttl pref_ = tmeToPref currentTTL <$> timedMessagesEnabled_ prefs' = setPreference' SCFTimedMessages pref_ $ Just userPreferences @@ -3444,7 +3444,7 @@ processChatCommand vr nm = \case _ -> throwCmdError "not supported" pure $ ChatRef cType chatId Nothing getSendAsGroup :: User -> ChatRef -> CM ShowGroupAsSender - getSendAsGroup user' (ChatRef CTGroup chatId scope) = (`sendAsGroup'` scope) <$> withFastStore (\db -> getGroupInfo db vr user' chatId) + getSendAsGroup user' (ChatRef CTGroup chatId scope) = (`sendAsGroup'` scope) <$> withFastStore (\db -> getGroupInfo db cxt user' chatId) getSendAsGroup _ _ = pure False getChatRefAndMentions :: User -> ChatName -> Text -> CM (ChatRef, Map MemberName GroupMemberId) getChatRefAndMentions user cName msg = do @@ -3463,13 +3463,13 @@ processChatCommand vr nm = \case checkStoreNotChanged :: CM ChatResponse -> CM ChatResponse checkStoreNotChanged = ifM (asks chatStoreChanged >>= readTVarIO) (throwChatError CEChatStoreChanged) withUserName :: UserName -> (UserId -> ChatCommand) -> CM ChatResponse - withUserName uName cmd = withFastStore (`getUserIdByName` uName) >>= processChatCommand vr nm . cmd + withUserName uName cmd = withFastStore (`getUserIdByName` uName) >>= processChatCommand cxt nm . cmd withContactName :: ContactName -> (ContactId -> ChatCommand) -> CM ChatResponse withContactName cName cmd = withUser $ \user -> - withFastStore (\db -> getContactIdByName db user cName) >>= processChatCommand vr nm . cmd + withFastStore (\db -> getContactIdByName db user cName) >>= processChatCommand cxt nm . cmd withMemberName :: GroupName -> ContactName -> (GroupId -> GroupMemberId -> ChatCommand) -> CM ChatResponse withMemberName gName mName cmd = withUser $ \user -> - getGroupAndMemberId user gName mName >>= processChatCommand vr nm . uncurry cmd + getGroupAndMemberId user gName mName >>= processChatCommand cxt nm . uncurry cmd getConnectionCode :: ConnId -> CM Text getConnectionCode connId = verificationCode <$> withAgent (`getConnectionRatchetAdHash` connId) verifyConnectionCode :: User -> Connection -> Maybe Text -> CM ChatResponse @@ -3503,7 +3503,7 @@ processChatCommand vr nm = \case -- TODO PQ the error above should be CEIncompatibleConnReqVersion, also the same API should be called in Plan Just (agentV, pqSup') -> do let chatV = agentToChatVersion agentV - withFastStore' (\db -> getConnectionEntityByConnReq db vr user cReqs) >>= \case + withFastStore' (\db -> getConnectionEntityByConnReq db cxt user cReqs) >>= \case Nothing -> joinNewConn chatV Just (RcvDirectMsgConnection conn@Connection {connStatus, contactConnInitiated, customUserProfileId} _ct_) | connStatus == ConnNew && contactConnInitiated -> joinNewConn chatV -- own connection link @@ -3547,7 +3547,7 @@ processChatCommand vr nm = \case ConnPrepared -> joinPreparedConn' xContactId conn (Just $ Just gInfo) _ -> connect' groupLinkId xContactId (Just $ Just gInfo) -- why not "already connected" for host member? Nothing -> - withFastStore' (\db -> getConnReqContactXContactId db vr user cReqHash1 cReqHash2) >>= \case + withFastStore' (\db -> getConnReqContactXContactId db cxt user cReqHash1 cReqHash2) >>= \case Right ct@Contact {activeConn} -> case groupLinkId of Nothing -> case activeConn of Just conn@Connection {connStatus = ConnPrepared, xContactId} -> joinPreparedConn' xContactId conn Nothing @@ -3602,7 +3602,7 @@ processChatCommand vr nm = \case let cReqHash = ConnReqUriHash . C.sha256Hash $ strEncode cReq conn <- withFastStore' $ \db -> createConnReqConnection db userId connId (Just $ PCEContact ct) cReq cReqHash shortLink newXContactId (NewIncognito <$> incognitoProfile) Nothing subMode chatV pqSup void $ joinContact user conn cReq incognitoProfile newXContactId Nothing Nothing Nothing pqSup - ct' <- withStore $ \db -> getContact db vr user contactId + ct' <- withStore $ \db -> getContact db cxt user contactId pure $ CRSentInvitationToContact user ct' incognitoProfile Just conn@Connection {connStatus, xContactId = xContactId_, customUserProfileId} -> case connStatus of ConnPrepared -> do @@ -3611,14 +3611,14 @@ processChatCommand vr nm = \case localIncognitoProfile <- forM customUserProfileId $ \pId -> withFastStore $ \db -> getProfileById db userId pId let incognitoProfile = fromLocalProfile <$> localIncognitoProfile void $ joinContact user conn cReq incognitoProfile xContactId Nothing Nothing Nothing PQSupportOn - ct' <- withStore $ \db -> getContact db vr user contactId + ct' <- withStore $ \db -> getContact db cxt user contactId pure $ CRSentInvitationToContact user ct' incognitoProfile _ -> throwCmdError "contact already has connection" connectToRelay :: User -> GroupInfo -> ShortLinkContact -> CM (ShortLinkContact, GroupMember, Either ChatError ()) connectToRelay user gInfo relayLink = do gVar <- asks random -- Save relayLink to re-use relay member record on retry (check by relayLink) - relayMember <- withFastStore $ \db -> getCreateRelayForMember db vr gVar user gInfo relayLink + relayMember <- withFastStore $ \db -> getCreateRelayForMember db cxt gVar user gInfo relayLink r <- tryAllErrors $ do (fd@FixedLinkData {rootKey = relayKey, linkEntityId}, cData) <- getShortLinkConnReq nm user relayLink relayLinkData_ <- liftIO $ decodeLinkUserData cData @@ -3629,11 +3629,11 @@ processChatCommand vr nm = \case let cReq = linkConnReq fd relayLinkToConnect = CCLink cReq (Just relayLink) void $ connectViaContact user (Just $ PCEGroup gInfo relayMember) (incognitoMembership gInfo) relayLinkToConnect Nothing Nothing - relayMember' <- withFastStore $ \db -> getGroupMember db vr user (groupId' gInfo) (groupMemberId' relayMember) + relayMember' <- withFastStore $ \db -> getGroupMember db cxt user (groupId' gInfo) (groupMemberId' relayMember) pure (relayLink, relayMember', r) syncSubscriberRelays :: User -> GroupInfo -> [ShortLinkContact] -> CM () syncSubscriberRelays user gInfo currentRelayLinks = void . tryAllErrors $ do - localRelayMembers <- withFastStore' $ \db -> getGroupRelayMembers db vr user gInfo + localRelayMembers <- withFastStore' $ \db -> getGroupRelayMembers db cxt user gInfo let activeRelayMembers = filter memberCurrent localRelayMembers memberRelayLink GroupMember {relayLink = rl} = rl localRelayLinks = mapMaybe memberRelayLink activeRelayMembers @@ -3703,7 +3703,7 @@ processChatCommand vr nm = \case | otherwise = do when (n /= n') $ checkValidName n' -- read contacts before user update to correctly merge preferences - contacts <- withFastStore' $ \db -> getUserContacts db vr user + contacts <- withFastStore' $ \db -> getUserContacts db cxt user user' <- updateUser asks currentUser >>= atomically . (`writeTVar` Just user') withChatLock "updateProfile" $ do @@ -3755,7 +3755,7 @@ processChatCommand vr nm = \case (conn, MsgFlags {notification = hasNotification XInfo_}, (vrValue msgBody, [msgId])) setMyAddressData :: User -> UserContactLink -> CM UserContactLink setMyAddressData user@User {userChatRelay} ucl@UserContactLink {userContactLinkId, connLinkContact = CCLink connFullLink _sLnk_, addressSettings} = do - conn <- withFastStore $ \db -> getUserAddressConnection db vr user + conn <- withFastStore $ \db -> getUserAddressConnection db cxt user let shortLinkProfile = userProfileDirect user Nothing Nothing True -- TODO [short links] do not save address to server if data did not change, spinners, error handling userData @@ -3789,12 +3789,12 @@ processChatCommand vr nm = \case gInfo' <- withStore $ \db -> updateGroupProfile db user gInfo p' msg <- case businessChat of Just BusinessChatInfo {businessId} -> do - ms <- withStore' $ \db -> getGroupMembers db vr user gInfo' + ms <- withStore' $ \db -> getGroupMembers db cxt user gInfo' let (newMs, oldMs) = partition (\m -> maxVersion (memberChatVRange m) >= businessChatPrefsVersion) ms -- this is a fallback to send the members with the old version correct profile of the business when preferences change unless (null oldMs) $ do GroupMember {memberProfile = LocalProfile {displayName, fullName, shortDescr, image}} <- - withStore $ \db -> getGroupMemberByMemberId db vr user gInfo' businessId + withStore $ \db -> getGroupMemberByMemberId db cxt user gInfo' businessId let p'' = p' {displayName, fullName, shortDescr, image} :: GroupProfile recipients = filter memberCurrentOrPending oldMs void $ sendGroupMessage user gInfo' Nothing recipients (XGrpInfo p'') @@ -3807,9 +3807,9 @@ processChatCommand vr nm = \case sendGroupMessage user gInfo' Nothing recipients (XGrpInfo p') where getRecipients - | useRelays' gInfo' = withFastStore' $ \db -> getGroupRelayMembers db vr user gInfo' + | useRelays' gInfo' = withFastStore' $ \db -> getGroupRelayMembers db cxt user gInfo' | otherwise = do - ms <- withFastStore' $ \db -> getGroupMembers db vr user gInfo' + ms <- withFastStore' $ \db -> getGroupMembers db cxt user gInfo' pure $ filter memberCurrentOrPending ms let cd = CDGroupSnd gInfo' Nothing unless (sameGroupProfileInfo p p') $ do @@ -3870,13 +3870,13 @@ processChatCommand vr nm = \case updateGroupProfileByName :: GroupName -> (GroupProfile -> GroupProfile) -> CM ChatResponse updateGroupProfileByName gName update = withUser $ \user -> do gInfo@GroupInfo {groupProfile = p} <- withStore $ \db -> - getGroupIdByName db user gName >>= getGroupInfo db vr user + getGroupIdByName db user gName >>= getGroupInfo db cxt user runUpdateGroupProfile user gInfo $ update p withCurrentCall :: ContactId -> (User -> Contact -> Call -> CM (Maybe Call)) -> CM ChatResponse withCurrentCall ctId action = do (user, ct) <- withStore $ \db -> do user <- getUserByContactId db ctId - (user,) <$> getContact db vr user ctId + (user,) <$> getContact db cxt user ctId calls <- asks currentCalls withContactLock "currentCall" ctId $ atomically (TM.lookup ctId calls) >>= \case @@ -3918,7 +3918,7 @@ processChatCommand vr nm = \case FTSnd {fileTransferMeta = FileTransferMeta {filePath, xftpSndFile}} -> forward filePath $ xftpSndFile >>= \XFTPSndFile {cryptoArgs} -> cryptoArgs _ -> throwChatError CEFileNotReceived {fileId} where - forward path cfArgs = processChatCommand vr nm $ sendCommand chatName $ CryptoFile path cfArgs + forward path cfArgs = processChatCommand cxt nm $ sendCommand chatName $ CryptoFile path cfArgs getGroupAndMemberId :: User -> GroupName -> ContactName -> CM (GroupId, GroupMemberId) getGroupAndMemberId user gName groupMemberName = withStore $ \db -> do @@ -3930,7 +3930,7 @@ processChatCommand vr nm = \case checkValidName displayName -- [incognito] generate incognito profile for group membership incognitoProfile <- if incognito then Just <$> liftIO generateRandomProfile else pure Nothing - withFastStore $ \db -> createNewGroup db vr user gProfile incognitoProfile useRelays memberId groupKeys_ publicMemberCount_ + withFastStore $ \db -> createNewGroup db cxt user gProfile incognitoProfile useRelays memberId groupKeys_ publicMemberCount_ createNewGroupItems :: User -> GroupInfo -> CM () createNewGroupItems user gInfo = do let cd = CDGroupSnd gInfo Nothing @@ -3973,9 +3973,9 @@ processChatCommand vr nm = \case subMode <- chatReadVar subscriptionMode connId <- withAgent $ \a -> prepareConnectionToJoin a (aUserId user) True cReq PQSupportOff (relayMember, conn, groupRelay) <- withFastStore $ \db -> do - relayMember <- createRelayForOwner db vr gVar user gInfo relay + relayMember <- createRelayForOwner db cxt gVar user gInfo relay groupRelay <- createGroupRelayRecord db gInfo relayMember relay - conn <- createRelayConnection db vr user (groupMemberId' relayMember) connId ConnPrepared chatV subMode + conn <- createRelayConnection db cxt user (groupMemberId' relayMember) connId ConnPrepared chatV subMode pure (relayMember, conn, groupRelay) let GroupMember {memberRole = userRole, memberId = userMemberId} = membership allowSimplexLinks = groupFeatureUserAllowed SGFSimplexLinks gInfo @@ -4047,15 +4047,15 @@ processChatCommand vr nm = \case (chatId, chatSettings) <- case cType of CTDirect -> withFastStore $ \db -> do ctId <- getContactIdByName db user name - Contact {chatSettings} <- getContact db vr user ctId + Contact {chatSettings} <- getContact db cxt user ctId pure (ctId, chatSettings) CTGroup -> withFastStore $ \db -> do gId <- getGroupIdByName db user name - GroupInfo {chatSettings} <- getGroupInfo db vr user gId + GroupInfo {chatSettings} <- getGroupInfo db cxt user gId pure (gId, chatSettings) _ -> throwCmdError "not supported" - processChatCommand vr nm $ APISetChatSettings (ChatRef cType chatId Nothing) $ updateSettings chatSettings + processChatCommand cxt nm $ APISetChatSettings (ChatRef cType chatId Nothing) $ updateSettings chatSettings connectPlan :: User -> AConnectionLink -> Bool -> Maybe LinkOwnerSig -> CM (ACreatedConnLink, ConnectionPlan) connectPlan user (ACL SCMInvitation cLink) _ sig_ = case cLink of CLFull cReq -> invitationReqAndPlan cReq Nothing Nothing Nothing @@ -4071,10 +4071,10 @@ processChatCommand vr nm = \case where knownLinkPlans l' = withFastStore $ \db -> do let inv cReq = ACCL SCMInvitation $ CCLink cReq (Just l') - liftIO (getConnectionEntityViaShortLink db vr user l') >>= \case + liftIO (getConnectionEntityViaShortLink db cxt user l') >>= \case Just (cReq, ent) -> pure $ Just (inv cReq, invitationEntityPlan Nothing Nothing ent) -- deleted contact is returned as known, as invitation link cannot be re-used too connect anyway - Nothing -> bimap inv (CPInvitationLink . ILPKnown) <$$> getContactViaShortLinkToConnect db vr user l' + Nothing -> bimap inv (CPInvitationLink . ILPKnown) <$$> getContactViaShortLinkToConnect db cxt user l' invitationReqAndPlan cReq sLnk_ cld ov = do plan <- invitationRequestPlan user cReq cld ov `catchAllErrors` (pure . CPError) pure (ACCL SCMInvitation (CCLink cReq sLnk_), plan) @@ -4089,7 +4089,7 @@ processChatCommand vr nm = \case Just r -> pure r Nothing -> do (FixedLinkData {linkConnReq = cReq, rootKey}, cData) <- getShortLinkConnReq nm user l' - withFastStore' (\db -> getContactWithoutConnViaShortAddress db vr user l') >>= \case + withFastStore' (\db -> getContactWithoutConnViaShortAddress db cxt user l') >>= \case Just ct' | not (contactDeleted ct') -> pure (con cReq, CPContactAddress (CAPContactViaAddress ct')) _ -> do contactSLinkData_ <- liftIO $ decodeLinkUserData cData @@ -4102,9 +4102,9 @@ processChatCommand vr nm = \case liftIO (getUserContactLinkViaShortLink db user l') >>= \case Just UserContactLink {connLinkContact = CCLink cReq _} -> pure $ Just (con cReq, CPContactAddress CAPOwnLink) Nothing -> - getContactViaShortLinkToConnect db vr user l' >>= \case + getContactViaShortLinkToConnect db cxt user l' >>= \case Just (cReq, ct') -> pure $ if contactDeleted ct' then Nothing else Just (con cReq, CPContactAddress (CAPKnown ct')) - Nothing -> (gPlan =<<) <$> getGroupViaShortLinkToConnect db vr user l' + Nothing -> (gPlan =<<) <$> getGroupViaShortLinkToConnect db cxt user l' CCTGroup -> groupShortLinkPlan CCTChannel -> groupShortLinkPlan CCTRelay -> throwCmdError "chat relay links are not supported in this version" @@ -4140,9 +4140,9 @@ processChatCommand vr nm = \case Just GroupShortLinkData {groupProfile = GroupProfile {publicGroup = Just PublicGroupProfile {groupType}}} -> groupType /= GTChannel _ -> False knownLinkPlans = withFastStore $ \db -> - liftIO (getGroupInfoViaUserShortLink db vr user l') >>= \case + liftIO (getGroupInfoViaUserShortLink db cxt user l') >>= \case Just (cReq, g) -> pure $ Just (con cReq, CPGroupLink (GLPOwnLink g)) - Nothing -> (gPlan =<<) <$> getGroupViaShortLinkToConnect db vr user l' + Nothing -> (gPlan =<<) <$> getGroupViaShortLinkToConnect db cxt user l' resolveKnownGroup g = do (fd@FixedLinkData {rootKey = rk}, cData@(ContactLinkData _ UserContactData {owners})) <- getShortLinkConnReq' nm user l' groupSLinkData_ <- liftIO $ decodeLinkUserData cData @@ -4158,13 +4158,13 @@ processChatCommand vr nm = \case case plan of CPError e -> eToView e; _ -> pure () case plan of CPContactAddress (CAPContactViaAddress Contact {contactId}) -> - processChatCommand vr nm $ APIConnectContactViaAddress userId incognito contactId - _ -> processChatCommand vr nm $ APIConnect userId incognito $ Just ccLink + processChatCommand cxt nm $ APIConnectContactViaAddress userId incognito contactId + _ -> processChatCommand cxt nm $ APIConnect userId incognito $ Just ccLink | otherwise = pure $ CRConnectionPlan user ccLink plan invitationRequestPlan :: User -> ConnReqInvitation -> Maybe ContactShortLinkData -> Maybe OwnerVerification -> CM ConnectionPlan invitationRequestPlan user cReq cld ov = do maybe (CPInvitationLink (ILPOk cld ov)) (invitationEntityPlan cld ov) - <$> withFastStore' (\db -> getConnectionEntityByConnReq db vr user $ invCReqSchemas cReq) + <$> withFastStore' (\db -> getConnectionEntityByConnReq db cxt user $ invCReqSchemas cReq) where invCReqSchemas :: ConnReqInvitation -> (ConnReqInvitation, ConnReqInvitation) invCReqSchemas (CRInvitationUri crData e2e) = @@ -4196,9 +4196,9 @@ processChatCommand vr nm = \case withFastStore' (\db -> getUserContactLinkByConnReq db user cReqSchemas) >>= \case Just _ -> pure $ CPContactAddress CAPOwnLink Nothing -> - withFastStore' (\db -> getContactConnEntityByConnReqHash db vr user cReqHashes) >>= \case + withFastStore' (\db -> getContactConnEntityByConnReqHash db cxt user cReqHashes) >>= \case Nothing -> - withFastStore' (\db -> getContactWithoutConnViaAddress db vr user cReqSchemas) >>= \case + withFastStore' (\db -> getContactWithoutConnViaAddress db cxt user cReqSchemas) >>= \case Just ct | not (contactDeleted ct) -> pure $ CPContactAddress (CAPContactViaAddress ct) _ -> pure $ CPContactAddress (CAPOk cld ov) Just (RcvDirectMsgConnection Connection {connStatus} Nothing) @@ -4215,11 +4215,11 @@ processChatCommand vr nm = \case groupJoinRequestPlan user (CRContactUri crData) linkInfo gld ov = do let cReqSchemas = contactCReqSchemas crData cReqHashes = bimap contactCReqHash contactCReqHash cReqSchemas - withFastStore' (\db -> getGroupInfoByUserContactLinkConnReq db vr user cReqSchemas) >>= \case + withFastStore' (\db -> getGroupInfoByUserContactLinkConnReq db cxt user cReqSchemas) >>= \case Just g -> pure $ CPGroupLink (GLPOwnLink g) Nothing -> do - connEnt_ <- withFastStore' $ \db -> getContactConnEntityByConnReqHash db vr user cReqHashes - gInfo_ <- withFastStore' $ \db -> getGroupInfoByGroupLinkHash db vr user cReqHashes + connEnt_ <- withFastStore' $ \db -> getContactConnEntityByConnReqHash db cxt user cReqHashes + gInfo_ <- withFastStore' $ \db -> getGroupInfoByGroupLinkHash db cxt user cReqHashes case (gInfo_, connEnt_) of (Nothing, Nothing) -> pure $ CPGroupLink (GLPOk linkInfo gld ov) -- TODO [short links] RcvDirectMsgConnection branches are deprecated? (old group link protocol?) @@ -4274,7 +4274,7 @@ processChatCommand vr nm = \case shortenShortLink' =<< withAgent (\a -> setConnShortLink a nm (aConnId' conn) SCMInvitation userLinkData Nothing) updateCIGroupInvitationStatus :: User -> GroupInfo -> CIGroupInvitationStatus -> CM () updateCIGroupInvitationStatus user GroupInfo {groupId} newStatus = do - AChatItem _ _ cInfo ChatItem {content, meta = CIMeta {itemId}} <- withFastStore $ \db -> getChatItemByGroupId db vr user groupId + AChatItem _ _ cInfo ChatItem {content, meta = CIMeta {itemId}} <- withFastStore $ \db -> getChatItemByGroupId db cxt user groupId case (cInfo, content) of (DirectChat ct@Contact {contactId}, CIRcvGroupInvitation ciGroupInv@CIGroupInvitation {status} memRole) | status == CIGISPending -> do @@ -4297,7 +4297,7 @@ processChatCommand vr nm = \case sendContactContentMessages :: User -> ContactId -> Bool -> Maybe Int -> NonEmpty ComposedMessageReq -> CM ChatResponse sendContactContentMessages user contactId live itemTTL cmrs = do assertMultiSendable live cmrs - ct <- withFastStore $ \db -> getContact db vr user contactId + ct <- withFastStore $ \db -> getContact db cxt user contactId assertDirectAllowed user MDSnd ct XMsgNew_ assertVoiceAllowed ct processComposedMessages ct @@ -4354,8 +4354,8 @@ processChatCommand vr nm = \case sendGroupContentMessages :: User -> GroupInfo -> Maybe GroupChatScope -> ShowGroupAsSender -> Bool -> Maybe Int -> NonEmpty ComposedMessageReq -> CM ChatResponse sendGroupContentMessages user gInfo scope showGroupAsSender live itemTTL cmrs = do assertMultiSendable live cmrs - chatScopeInfo <- mapM (getChatScopeInfo vr user) scope - recipients <- getGroupRecipients vr user gInfo chatScopeInfo modsCompatVersion + chatScopeInfo <- mapM (getChatScopeInfo cxt user) scope + recipients <- getGroupRecipients cxt user gInfo chatScopeInfo modsCompatVersion sendGroupContentMessages_ user gInfo scope showGroupAsSender chatScopeInfo recipients live itemTTL cmrs where hasReport = any (\(ComposedMessage {msgContent}, _, _, _) -> isReport msgContent) cmrs @@ -4500,7 +4500,7 @@ processChatCommand vr nm = \case throwError err getCommandDirectChatItems :: User -> Int64 -> NonEmpty ChatItemId -> CM (Contact, [CChatItem 'CTDirect]) getCommandDirectChatItems user ctId itemIds = do - ct <- withFastStore $ \db -> getContact db vr user ctId + ct <- withFastStore $ \db -> getContact db cxt user ctId (errs, items) <- lift $ partitionEithers <$> withStoreBatch (\db -> map (getDirectCI db) (L.toList itemIds)) unless (null errs) $ toView $ CEvtChatErrors errs pure (ct, items) @@ -4509,7 +4509,7 @@ processChatCommand vr nm = \case getDirectCI db itemId = runExceptT . withExceptT ChatErrorStore $ getDirectChatItem db user ctId itemId getCommandGroupChatItems :: User -> Int64 -> NonEmpty ChatItemId -> CM (GroupInfo, [CChatItem 'CTGroup]) getCommandGroupChatItems user gId itemIds = do - gInfo <- withFastStore $ \db -> getGroupInfo db vr user gId + gInfo <- withFastStore $ \db -> getGroupInfo db cxt user gId (errs, items) <- lift $ partitionEithers <$> withStoreBatch (\db -> map (getGroupCI db gInfo) (L.toList itemIds)) unless (null errs) $ toView $ CEvtChatErrors errs pure (gInfo, items) @@ -4568,7 +4568,7 @@ processChatCommand vr nm = \case withSendRef user chatRef a = case chatRef of ChatRef CTDirect cId _ -> a $ SRDirect cId ChatRef CTGroup gId scope -> do - gInfo <- withFastStore $ \db -> getGroupInfo db vr user gId + gInfo <- withFastStore $ \db -> getGroupInfo db cxt user gId a $ SRGroup gId scope (sendAsGroup' gInfo scope) _ -> throwCmdError "not supported" getSharedMsgId :: CM SharedMsgId @@ -4759,17 +4759,17 @@ cleanupManager = do timedItems <- withStore' $ \db -> getTimedItems db user startTimedThreadCutoff forM_ timedItems $ \(itemRef, deleteAt) -> startTimedItemThread user itemRef deleteAt `catchAllErrors` const (pure ()) cleanupDeletedContacts user = do - vr <- chatVersionRange - contacts <- withStore' $ \db -> getDeletedContacts db vr user + cxt <- chatStoreCxt + contacts <- withStore' $ \db -> getDeletedContacts db cxt user forM_ contacts $ \ct -> withStore (\db -> deleteContactWithoutGroups db user ct) `catchAllErrors` eToView cleanupInProgressGroups user = do - vr <- chatVersionRange + cxt <- chatStoreCxt ts <- liftIO getCurrentTime -- older than 30 minutes to avoid deleting a newly created group let cutoffTs = addUTCTime (- 1800) ts - inProgressGroups <- withStore' $ \db -> getInProgressGroups db vr user cutoffTs + inProgressGroups <- withStore' $ \db -> getInProgressGroups db cxt user cutoffTs forM_ inProgressGroups $ \gInfo -> deleteInProgressGroup user gInfo `catchAllErrors` eToView cleanupStaleRelayTestConns user = do @@ -4814,8 +4814,8 @@ runRelayGroupLinkChecks user = do liftIO $ threadDelay' $ diffToMicroseconds interval where checkRelayServedGroups = do - vr <- chatVersionRange - relayGroups <- withStore' $ \db -> getRelayServedGroups db vr user + cxt <- chatStoreCxt + relayGroups <- withStore' $ \db -> getRelayServedGroups db cxt user forM_ relayGroups $ \gInfo@GroupInfo {groupProfile = gp} -> flip catchAllErrors eToView $ do case publicGroup gp of Just PublicGroupProfile {groupLink = sLnk} -> do @@ -4833,24 +4833,24 @@ runRelayGroupLinkChecks user = do _ -> pure () _ -> pure () checkRelayInactiveGroups = do - vr <- chatVersionRange + cxt <- chatStoreCxt ttl <- asks (relayInactiveTTL . config) - inactiveGroups <- withStore' $ \db -> getRelayInactiveGroups db vr user ttl + inactiveGroups <- withStore' $ \db -> getRelayInactiveGroups db cxt user ttl forM_ inactiveGroups $ \gInfo -> flip catchAllErrors eToView $ deleteGroupConnections user gInfo False expireChatItems :: User -> Int64 -> Bool -> CM () expireChatItems user@User {userId} globalTTL sync = do currentTs <- liftIO getCurrentTime - vr <- chatVersionRange + cxt <- chatStoreCxt -- this is to keep group messages created during last 12 hours even if they're expired according to item_ts let createdAtCutoff = addUTCTime (-43200 :: NominalDiffTime) currentTs lift waitChatStartedAndActivated contactIds <- withStore' $ \db -> getUserContactsToExpire db user globalTTL - loop contactIds $ expireContactChatItems user vr globalTTL + loop contactIds $ expireContactChatItems user cxt globalTTL lift waitChatStartedAndActivated groupIds <- withStore' $ \db -> getUserGroupsToExpire db user globalTTL - loop groupIds $ expireGroupChatItems user vr globalTTL createdAtCutoff + loop groupIds $ expireGroupChatItems user cxt globalTTL createdAtCutoff where loop :: [Int64] -> (Int64 -> CM ()) -> CM () loop [] _ = pure () @@ -4866,11 +4866,11 @@ expireChatItems user@User {userId} globalTTL sync = do expire <- atomically $ TM.lookup userId expireFlags when (expire == Just True) $ threadDelay 100000 >> a -expireContactChatItems :: User -> VersionRangeChat -> Int64 -> ContactId -> CM () -expireContactChatItems user vr globalTTL ctId = +expireContactChatItems :: User -> StoreCxt -> Int64 -> ContactId -> CM () +expireContactChatItems user cxt globalTTL ctId = -- reading contacts and groups inside the loop, -- to allow ttl changing while processing and to reduce memory usage - tryAllErrors (withStore $ \db -> getContact db vr user ctId) >>= mapM_ process + tryAllErrors (withStore $ \db -> getContact db cxt user ctId) >>= mapM_ process where process ct@Contact {chatItemTTL} = withExpirationDate globalTTL chatItemTTL $ \expirationDate -> do @@ -4879,9 +4879,9 @@ expireContactChatItems user vr globalTTL ctId = deleteCIFiles user filesInfo withStore' $ \db -> deleteContactExpiredCIs db user ct expirationDate -expireGroupChatItems :: User -> VersionRangeChat -> Int64 -> UTCTime -> GroupId -> CM () -expireGroupChatItems user vr globalTTL createdAtCutoff groupId = - tryAllErrors (withStore $ \db -> getGroupInfo db vr user groupId) >>= mapM_ process +expireGroupChatItems :: User -> StoreCxt -> Int64 -> UTCTime -> GroupId -> CM () +expireGroupChatItems user cxt globalTTL createdAtCutoff groupId = + tryAllErrors (withStore $ \db -> getGroupInfo db cxt user groupId) >>= mapM_ process where process gInfo@GroupInfo {chatItemTTL} = withExpirationDate globalTTL chatItemTTL $ \expirationDate -> do @@ -4889,7 +4889,7 @@ expireGroupChatItems user vr globalTTL createdAtCutoff groupId = filesInfo <- withStore' $ \db -> getGroupExpiredFileInfo db user gInfo expirationDate createdAtCutoff deleteCIFiles user filesInfo withStore' $ \db -> deleteGroupExpiredCIs db user gInfo expirationDate createdAtCutoff - membersToDelete <- withStore' $ \db -> getGroupMembersForExpiration db vr user gInfo + membersToDelete <- withStore' $ \db -> getGroupMembersForExpiration db cxt user gInfo forM_ membersToDelete $ \m -> withStore' $ \db -> deleteGroupMember db user m withExpirationDate :: Int64 -> Maybe Int64 -> (UTCTime -> CM ()) -> CM () diff --git a/src/Simplex/Chat/Library/Internal.hs b/src/Simplex/Chat/Library/Internal.hs index 31a1d60502..f2c448d5b8 100644 --- a/src/Simplex/Chat/Library/Internal.hs +++ b/src/Simplex/Chat/Library/Internal.hs @@ -473,12 +473,12 @@ deleteGroupCIs user gInfo chatScopeInfo items byGroupMember_ deletedTs = do deleteCIFiles user ciFilesInfo (errs, deletions) <- lift $ partitionEithers <$> withStoreBatch' (\db -> map (deleteItem db) items) unless (null errs) $ toView $ CEvtChatErrors errs - vr <- chatVersionRange + cxt <- chatStoreCxt deletions' <- case chatScopeInfo of Nothing -> pure deletions Just scopeInfo@GCSIMemberSupport {groupMember_} -> do let decStats = countDeletedUnreadItems groupMember_ deletions - gInfo' <- withFastStore' $ \db -> updateGroupScopeUnreadStats db vr user gInfo scopeInfo decStats + gInfo' <- withFastStore' $ \db -> updateGroupScopeUnreadStats db cxt user gInfo scopeInfo decStats pure $ map (updateDeletionGroupInfo gInfo') deletions pure deletions' where @@ -689,7 +689,7 @@ acceptFileReceive user@User {userId} RcvFileTransfer {fileId, xftpRcvFile, fileI unless (fileStatus == RFSNew) $ case fileStatus of RFSCancelled _ -> throwChatError $ CEFileCancelled fName _ -> throwChatError $ CEFileAlreadyReceiving fName - vr <- chatVersionRange + cxt <- chatStoreCxt case (xftpRcvFile, fileConnReq) of -- XFTP (Just XFTPRcvFile {userApprovedRelays = approvedBeforeReady}, _) -> do @@ -698,7 +698,7 @@ acceptFileReceive user@User {userId} RcvFileTransfer {fileId, xftpRcvFile, fileI (ci, rfd) <- withStore $ \db -> do -- marking file as accepted and reading description in the same transaction -- to prevent race condition with appending description - ci <- xftpAcceptRcvFT db vr user fileId filePath userApproved + ci <- xftpAcceptRcvFT db cxt user fileId filePath userApproved rfd <- getRcvFileDescrByRcvFileId db fileId pure (ci, rfd) receiveViaCompleteFD user fileId rfd userApproved cryptoArgs @@ -709,10 +709,10 @@ acceptFileReceive user@User {userId} RcvFileTransfer {fileId, xftpRcvFile, fileI chatRef <- withStore $ \db -> getChatRefByFileId db user fileId case (chatRef, grpMemberId) of (ChatRef CTDirect contactId _, Nothing) -> do - ct <- withStore $ \db -> getContact db vr user contactId + ct <- withStore $ \db -> getContact db cxt user contactId acceptFile $ \msg -> void $ sendDirectContactMessage user ct msg (ChatRef CTGroup groupId _, Just memId) -> do - GroupMember {activeConn} <- withStore $ \db -> getGroupMember db vr user groupId memId + GroupMember {activeConn} <- withStore $ \db -> getGroupMember db cxt user groupId memId case activeConn of Just conn -> do acceptFile $ \msg -> void $ sendDirectMemberMessage conn msg groupId @@ -723,12 +723,12 @@ acceptFileReceive user@User {userId} RcvFileTransfer {fileId, xftpRcvFile, fileI acceptFile send = do filePath <- getRcvFilePath fileId filePath_ fName True inline <- receiveInline - vr <- chatVersionRange + cxt <- chatStoreCxt if | inline -> do -- accepting inline (ci, sharedMsgId) <- withStore $ \db -> - liftM2 (,) (acceptRcvInlineFT db vr user fileId filePath) (getSharedMsgIdByFileId db userId fileId) + liftM2 (,) (acceptRcvInlineFT db cxt user fileId filePath) (getSharedMsgIdByFileId db userId fileId) send $ XFileAcptInv sharedMsgId Nothing fName pure ci | fileInline == Just IFMSent -> throwChatError $ CEFileAlreadyReceiving fName @@ -804,13 +804,13 @@ getNetworkConfig = withAgent' $ liftIO . getFastNetworkConfig resetRcvCIFileStatus :: User -> FileTransferId -> CIFileStatus 'MDRcv -> CM (Maybe AChatItem) resetRcvCIFileStatus user fileId ciFileStatus = do - vr <- chatVersionRange + cxt <- chatStoreCxt withStore $ \db -> do liftIO $ do updateCIFileStatus db user fileId ciFileStatus updateRcvFileStatus db fileId FSNew updateRcvFileAgentId db fileId Nothing - lookupChatItemByFileId db vr user fileId + lookupChatItemByFileId db cxt user fileId receiveViaURI :: User -> FileDescriptionURI -> CryptoFile -> CM RcvFileTransfer receiveViaURI user@User {userId} FileDescriptionURI {description} cf@CryptoFile {cryptoArgs} = do @@ -828,11 +828,11 @@ receiveViaURI user@User {userId} FileDescriptionURI {description} cf@CryptoFile startReceivingFile :: User -> FileTransferId -> CM () startReceivingFile user fileId = do - vr <- chatVersionRange + cxt <- chatStoreCxt ci <- withStore $ \db -> do liftIO $ updateRcvFileStatus db fileId FSConnected liftIO $ updateCIFileStatus db user fileId $ CIFSRcvTransfer 0 1 - getChatItemByFileId db vr user fileId + getChatItemByFileId db cxt user fileId toView $ CEvtRcvFileStart user ci getRcvFilePath :: FileTransferId -> Maybe FilePath -> String -> Bool -> CM FilePath @@ -883,8 +883,8 @@ acceptContactRequest nm user@User {userId} UserContactRequest {agentInvitationId subMode <- chatReadVar subscriptionMode let pqSup = PQSupportOn pqSup' = pqSup `CR.pqSupportAnd` pqSupport - vr <- chatVersionRange - let chatV = vr `peerConnChatVersion` cReqChatVRange + cxt <- chatStoreCxt + let chatV = vr cxt `peerConnChatVersion` cReqChatVRange (ct, conn, incognitoProfile) <- case contactId_ of Nothing -> do incognitoProfile <- if incognito then Just . NewIncognito <$> liftIO generateRandomProfile else pure Nothing @@ -893,7 +893,7 @@ acceptContactRequest nm user@User {userId} UserContactRequest {agentInvitationId createContactFromRequest db user userContactLinkId_ connId chatV cReqChatVRange cName profileId cp xContactId incognitoProfile subMode pqSup' False pure (ct, conn, incognitoProfile) Just contactId -> do - ct <- withFastStore $ \db -> getContact db vr user contactId + ct <- withFastStore $ \db -> getContact db cxt user contactId case contactConn ct of Nothing -> do incognitoProfile <- if incognito then Just . NewIncognito <$> liftIO generateRandomProfile else pure Nothing @@ -920,15 +920,15 @@ acceptContactRequestAsync incognitoProfile = do subMode <- chatReadVar subscriptionMode let profileToSend = userProfileDirect user (fromIncognitoProfile <$> incognitoProfile) (Just ct) True - vr <- chatVersionRange - let chatV = vr `peerConnChatVersion` cReqChatVRange + cxt <- chatStoreCxt + let chatV = vr cxt `peerConnChatVersion` cReqChatVRange (cmdId, acId) <- agentAcceptContactAsync user True cReqInvId (XInfo profileToSend) subMode cReqPQSup chatV currentTs <- liftIO getCurrentTime withStore $ \db -> do forM_ xContactId $ \xcId -> liftIO $ setContactAcceptedXContactId db ct xcId Connection {connId} <- liftIO $ createAcceptedContactConn db user (Just uclId) contactId acId chatV cReqChatVRange cReqPQSup incognitoProfile subMode currentTs liftIO $ setCommandConnId db user cmdId connId - getContact db vr user contactId + getContact db cxt user contactId acceptGroupJoinRequestAsync :: User -> Int64 -> GroupInfo -> InvitationId -> VersionRangeChat -> Profile -> Maybe XContactId -> Maybe MemberId -> Maybe SharedMsgId -> GroupAcceptance -> GroupMemberRole -> Maybe IncognitoProfile -> Maybe MemberKey -> CM GroupMember acceptGroupJoinRequestAsync @@ -964,12 +964,12 @@ acceptGroupJoinRequestAsync groupSize = Just currentMemCount } subMode <- chatReadVar subscriptionMode - vr <- chatVersionRange - let chatV = vr `peerConnChatVersion` cReqChatVRange + cxt <- chatStoreCxt + let chatV = vr cxt `peerConnChatVersion` cReqChatVRange connIds <- agentAcceptContactAsync user True cReqInvId msg subMode PQSupportOff chatV withStore $ \db -> do liftIO $ createJoiningMemberConnection db user uclId connIds chatV cReqChatVRange groupMemberId subMode - getGroupMemberById db vr user groupMemberId + getGroupMemberById db cxt user groupMemberId acceptGroupJoinSendRejectAsync :: User -> Int64 -> GroupInfo -> InvitationId -> VersionRangeChat -> Profile -> Maybe XContactId -> GroupRejectionReason -> CM GroupMember acceptGroupJoinSendRejectAsync @@ -994,12 +994,12 @@ acceptGroupJoinSendRejectAsync rejectionReason } subMode <- chatReadVar subscriptionMode - vr <- chatVersionRange - let chatV = vr `peerConnChatVersion` cReqChatVRange + cxt <- chatStoreCxt + let chatV = vr cxt `peerConnChatVersion` cReqChatVRange connIds <- agentAcceptContactAsync user False cReqInvId msg subMode PQSupportOff chatV withStore $ \db -> do liftIO $ createJoiningMemberConnection db user uclId connIds chatV cReqChatVRange groupMemberId subMode - getGroupMemberById db vr user groupMemberId + getGroupMemberById db cxt user groupMemberId acceptBusinessJoinRequestAsync :: User -> Int64 -> GroupInfo -> GroupMember -> UserContactRequest -> CM (GroupInfo, GroupMember) acceptBusinessJoinRequestAsync @@ -1008,7 +1008,7 @@ acceptBusinessJoinRequestAsync gInfo@GroupInfo {membership = GroupMember {memberRole = userRole, memberId = userMemberId}} clientMember@GroupMember {groupMemberId, memberId} UserContactRequest {agentInvitationId = AgentInvId cReqInvId, cReqChatVRange, xContactId} = do - vr <- chatVersionRange + cxt <- chatStoreCxt let userProfile@Profile {displayName, preferences} = fromLocalProfile $ profile' user -- TODO [short links] take groupPreferences from group info groupPreferences = maybe defaultBusinessGroupPrefs businessGroupPrefs preferences @@ -1027,7 +1027,7 @@ acceptBusinessJoinRequestAsync groupSize = Just 1 } subMode <- chatReadVar subscriptionMode - let chatV = vr `peerConnChatVersion` cReqChatVRange + let chatV = vr cxt `peerConnChatVersion` cReqChatVRange connIds <- agentAcceptContactAsync user True cReqInvId msg subMode PQSupportOff chatV withStore' $ \db -> do forM_ xContactId $ \xcId -> setBusinessChatAcceptedXContactId db gInfo xcId @@ -1051,28 +1051,28 @@ acceptRelayJoinRequestAsync -- TODO [channel web] derive RelayCapabilities from relay config (RelayWebOptions) let msg = XGrpRelayAcpt relayLink defaultRelayCapabilities subMode <- chatReadVar subscriptionMode - vr <- chatVersionRange - let chatV = vr `peerConnChatVersion` cReqChatVRange + cxt <- chatStoreCxt + let chatV = vr cxt `peerConnChatVersion` cReqChatVRange connIds <- agentAcceptContactAsync user True cReqInvId msg subMode PQSupportOff chatV withStore $ \db -> do liftIO $ createJoiningMemberConnection db user uclId connIds chatV cReqChatVRange groupMemberId subMode gInfo' <- liftIO $ updateRelayOwnStatusFromTo db gInfo RSInvited RSAccepted - ownerMember' <- getGroupMemberById db vr user groupMemberId + ownerMember' <- getGroupMemberById db cxt user groupMemberId pure (gInfo', ownerMember') rejectRelayInvitationAsync :: User -> Int64 - -> VersionRangeChat + -> StoreCxt -> GroupRelayInvitation -> InvitationId -> VersionRangeChat -> Int64 -> RelayRejectionReason -> CM () -rejectRelayInvitationAsync user uclId vr groupRelayInv invId reqChatVRange initialDelay reason = do +rejectRelayInvitationAsync user uclId cxt groupRelayInv invId reqChatVRange initialDelay reason = do (_gInfo, ownerMember) <- withStore $ \db -> - createRelayRequestGroup db vr user groupRelayInv invId reqChatVRange initialDelay GSMemInvited RSRejected + createRelayRequestGroup db cxt user groupRelayInv invId reqChatVRange initialDelay GSMemInvited RSRejected let GroupMember {groupMemberId} = ownerMember msg = XGrpRelayReject reason subMode <- chatReadVar subscriptionMode @@ -1086,15 +1086,15 @@ businessGroupProfile :: Profile -> GroupPreferences -> GroupProfile businessGroupProfile Profile {displayName, fullName, shortDescr, image} groupPreferences = GroupProfile {displayName, fullName, description = Nothing, shortDescr, image, publicGroup = Nothing, groupPreferences = Just groupPreferences, memberAdmission = Nothing} -introduceToModerators :: VersionRangeChat -> User -> GroupInfo -> GroupMember -> CM () -introduceToModerators vr user gInfo@GroupInfo {groupId} m@GroupMember {memberRole, memberId} = do +introduceToModerators :: StoreCxt -> User -> GroupInfo -> GroupMember -> CM () +introduceToModerators cxt user gInfo@GroupInfo {groupId} m@GroupMember {memberRole, memberId} = do forM_ (memberConn m) $ \mConn -> do let msg = if maxVersion (memberChatVRange m) >= groupKnockingVersion then XGrpLinkAcpt GAPendingReview memberRole memberId else XMsgNew $ mcSimple (MCText pendingReviewMessage) void $ sendDirectMemberMessage mConn msg groupId - modMs <- withStore' $ \db -> getGroupModerators db vr user gInfo + modMs <- withStore' $ \db -> getGroupModerators db cxt user gInfo let rcpModMs = filter shouldIntroduceToMod modMs introduceMember user gInfo m rcpModMs (Just $ MSMember $ memberId' m) where @@ -1104,15 +1104,15 @@ introduceToModerators vr user gInfo@GroupInfo {groupId} m@GroupMember {memberRol && groupMemberId' mem /= groupMemberId' m && maxVersion (memberChatVRange mem) >= groupKnockingVersion -introduceToAll :: VersionRangeChat -> User -> GroupInfo -> GroupMember -> CM () -introduceToAll vr user gInfo m = do - (members, vector) <- withStore $ \db -> liftM2 (,) (liftIO $ getGroupMembers db vr user gInfo) (getMemberRelationsVector db m) +introduceToAll :: StoreCxt -> User -> GroupInfo -> GroupMember -> CM () +introduceToAll cxt user gInfo m = do + (members, vector) <- withStore $ \db -> liftM2 (,) (liftIO $ getGroupMembers db cxt user gInfo) (getMemberRelationsVector db m) let recipients = filter (shouldIntroduce m vector) members introduceMember user gInfo m recipients Nothing -introduceToRemaining :: VersionRangeChat -> User -> GroupInfo -> GroupMember -> CM () -introduceToRemaining vr user gInfo m = do - (members, vector) <- withStore $ \db -> liftM2 (,) (liftIO $ getGroupMembers db vr user gInfo) (getMemberRelationsVector db m) +introduceToRemaining :: StoreCxt -> User -> GroupInfo -> GroupMember -> CM () +introduceToRemaining cxt user gInfo m = do + (members, vector) <- withStore $ \db -> liftM2 (,) (liftIO $ getGroupMembers db cxt user gInfo) (getMemberRelationsVector db m) let recipients = filter (shouldIntroduce m vector) members introduceMember user gInfo m recipients Nothing @@ -1166,10 +1166,10 @@ memberIntroEvt gInfo reMember = -- Used in groups with relays to introduce moderators and above to a new member, -- and to announce the new member to moderators and above. -- This doesn't create introduction records in db, compared to above methods. -introduceInChannel :: VersionRangeChat -> User -> GroupInfo -> GroupMember -> CM () +introduceInChannel :: StoreCxt -> User -> GroupInfo -> GroupMember -> CM () introduceInChannel _ _ _ GroupMember {activeConn = Nothing} = throwChatError $ CEInternalError "member connection not active" -introduceInChannel vr user gInfo subscriber@GroupMember {activeConn = Just conn} = do - modMs <- withStore' $ \db -> getGroupModerators db vr user gInfo +introduceInChannel cxt user gInfo subscriber@GroupMember {activeConn = Just conn} = do + modMs <- withStore' $ \db -> getGroupModerators db cxt user gInfo void $ sendGroupMessage' user gInfo modMs $ XGrpMemNew (memberInfo gInfo subscriber) Nothing let introEvts = map (memberIntroEvt gInfo) modMs forM_ (L.nonEmpty introEvts) $ \introEvts' -> @@ -1328,9 +1328,9 @@ setGroupLinkData' nm user gInfo = setGroupLinkData :: NetworkRequestMode -> User -> GroupInfo -> GroupLink -> CM GroupLink setGroupLinkData nm user gInfo gLink = do - vr <- chatVersionRange + cxt <- chatStoreCxt (conn, groupRelays) <- withFastStore $ \db -> - (,) <$> getGroupLinkConnection db vr user gInfo <*> liftIO (getConnectedGroupRelays db gInfo) + (,) <$> getGroupLinkConnection db cxt user gInfo <*> liftIO (getConnectedGroupRelays db gInfo) let (userLinkData, crClientData) = groupLinkData gInfo gLink groupRelays linkType = if useRelays' gInfo then CCTChannel else CCTGroup sLnk <- shortenShortLink' . setShortLinkType_ linkType =<< withAgent (\a -> setConnShortLink a nm (aConnId conn) SCMContact userLinkData (Just crClientData)) @@ -1338,17 +1338,17 @@ setGroupLinkData nm user gInfo gLink = do setGroupLinkDataAsync :: User -> GroupInfo -> GroupLink -> CM () setGroupLinkDataAsync user gInfo gLink = do - vr <- chatVersionRange + cxt <- chatStoreCxt (conn, groupRelays) <- withStore $ \db -> - (,) <$> getGroupLinkConnection db vr user gInfo <*> liftIO (getConnectedGroupRelays db gInfo) + (,) <$> getGroupLinkConnection db cxt user gInfo <*> liftIO (getConnectedGroupRelays db gInfo) let (userLinkData, crClientData) = groupLinkData gInfo gLink groupRelays setAgentConnShortLinkAsync user conn userLinkData (Just crClientData) connectToRelayAsync :: User -> GroupInfo -> ShortLinkContact -> CM () connectToRelayAsync user gInfo relayLink = do - vr <- chatVersionRange + cxt <- chatStoreCxt gVar <- asks random - relayMember@GroupMember {activeConn} <- withFastStore $ \db -> getCreateRelayForMember db vr gVar user gInfo relayLink + relayMember@GroupMember {activeConn} <- withFastStore $ \db -> getCreateRelayForMember db cxt gVar user gInfo relayLink case activeConn of Just _ -> pure () Nothing -> do @@ -1359,9 +1359,9 @@ connectToRelayAsync user gInfo relayLink = do updatePublicGroupData :: User -> GroupInfo -> CM GroupInfo updatePublicGroupData user gInfo | useRelays' gInfo && memberRole' (membership gInfo) == GROwner = do - vr <- chatVersionRange + cxt <- chatStoreCxt (gInfo', gLink) <- withStore $ \db -> do - gInfo' <- updatePublicMemberCount db vr user gInfo + gInfo' <- updatePublicMemberCount db cxt user gInfo gLink <- getGroupLink db user gInfo' pure (gInfo', gLink) setGroupLinkDataAsync user gInfo' gLink @@ -1371,12 +1371,12 @@ updatePublicGroupData user gInfo updateGroupFromLinkData :: User -> GroupInfo -> GroupShortLinkData -> CM (GroupInfo, Bool) updateGroupFromLinkData user gInfo@GroupInfo {groupProfile = p, groupSummary = GroupSummary {publicMemberCount = localCount}} GroupShortLinkData {groupProfile, publicGroupData} | profileChanged || countChanged = do - vr <- chatVersionRange + cxt <- chatStoreCxt withStore $ \db -> do g <- if profileChanged then updateGroupProfile db user gInfo groupProfile else pure gInfo g' <- case publicGroupData of Just PublicGroupData {publicMemberCount} | countChanged -> - setPublicMemberCount db vr user g publicMemberCount + setPublicMemberCount db cxt user g publicMemberCount _ -> pure g pure (g', profileChanged) | otherwise = pure (gInfo, False) @@ -1455,14 +1455,14 @@ shortenCreatedLink (CCLink cReq sLnk) = CCLink cReq <$> mapM shortenShortLink' s deleteGroupLink' :: User -> GroupInfo -> CM () deleteGroupLink' user gInfo = do - vr <- chatVersionRange - conn <- withStore $ \db -> getGroupLinkConnection db vr user gInfo + cxt <- chatStoreCxt + conn <- withStore $ \db -> getGroupLinkConnection db cxt user gInfo deleteGroupLink_ user gInfo conn deleteGroupLinkIfExists :: User -> GroupInfo -> CM () deleteGroupLinkIfExists user gInfo = do - vr <- chatVersionRange - conn_ <- eitherToMaybe <$> withStore' (\db -> runExceptT $ getGroupLinkConnection db vr user gInfo) + cxt <- chatStoreCxt + conn_ <- eitherToMaybe <$> withStore' (\db -> runExceptT $ getGroupLinkConnection db cxt user gInfo) mapM_ (deleteGroupLink_ user gInfo) conn_ deleteGroupLink_ :: User -> GroupInfo -> Connection -> CM () @@ -1497,16 +1497,16 @@ deleteTimedItem user (ChatRef cType chatId scope, itemId) deleteAt = do ts <- liftIO getCurrentTime liftIO $ threadDelay' $ diffToMicroseconds $ diffUTCTime deleteAt ts lift waitChatStartedAndActivated - vr <- chatVersionRange + cxt <- chatStoreCxt case cType of CTDirect -> do - (ct, ci) <- withStore $ \db -> (,) <$> getContact db vr user chatId <*> getDirectChatItem db user chatId itemId + (ct, ci) <- withStore $ \db -> (,) <$> getContact db cxt user chatId <*> getDirectChatItem db user chatId itemId deletions <- deleteDirectCIs user ct [ci] toView $ CEvtChatItemsDeleted user deletions True True CTGroup -> do - (gInfo, ci) <- withStore $ \db -> (,) <$> getGroupInfo db vr user chatId <*> getGroupChatItem db user chatId itemId + (gInfo, ci) <- withStore $ \db -> (,) <$> getGroupInfo db cxt user chatId <*> getGroupChatItem db user chatId itemId deletedTs <- liftIO getCurrentTime - chatScopeInfo <- mapM (getChatScopeInfo vr user) scope + chatScopeInfo <- mapM (getChatScopeInfo cxt user) scope deletions <- deleteGroupCIs user gInfo chatScopeInfo [ci] Nothing deletedTs toView $ CEvtChatItemsDeleted user deletions True True _ -> eToView $ ChatError $ CEInternalError "bad deleteTimedItem cType" @@ -1623,25 +1623,25 @@ parseChatMessage conn s = do errType = CEInvalidChatMessage conn Nothing (safeDecodeUtf8 s) {-# INLINE parseChatMessage #-} -getChatScopeInfo :: VersionRangeChat -> User -> GroupChatScope -> CM GroupChatScopeInfo -getChatScopeInfo vr user = \case +getChatScopeInfo :: StoreCxt -> User -> GroupChatScope -> CM GroupChatScopeInfo +getChatScopeInfo cxt user = \case GCSMemberSupport Nothing -> pure $ GCSIMemberSupport Nothing GCSMemberSupport (Just gmId) -> do - supportMem <- withFastStore $ \db -> getGroupMemberById db vr user gmId + supportMem <- withFastStore $ \db -> getGroupMemberById db cxt user gmId pure $ GCSIMemberSupport (Just supportMem) -getGroupRecipients :: VersionRangeChat -> User -> GroupInfo -> Maybe GroupChatScopeInfo -> VersionChat -> CM [GroupMember] -getGroupRecipients vr user gInfo@GroupInfo {membership} scopeInfo modsCompatVersion +getGroupRecipients :: StoreCxt -> User -> GroupInfo -> Maybe GroupChatScopeInfo -> VersionChat -> CM [GroupMember] +getGroupRecipients cxt user gInfo@GroupInfo {membership} scopeInfo modsCompatVersion | useRelays' gInfo && not (isRelay membership) = do unless (memberCurrent membership && memberActive membership) $ throwChatError $ CECommandError "not current member" - withFastStore' $ \db -> getGroupRelayMembers db vr user gInfo + withFastStore' $ \db -> getGroupRelayMembers db cxt user gInfo | otherwise = case scopeInfo of Nothing -> do unless (memberCurrent membership && memberActive membership) $ throwChatError $ CECommandError "not current member" - ms <- withFastStore' $ \db -> getGroupMembers db vr user gInfo + ms <- withFastStore' $ \db -> getGroupMembers db cxt user gInfo pure $ filter memberCurrent ms Just (GCSIMemberSupport Nothing) -> do - modMs <- withFastStore' $ \db -> getGroupModerators db vr user gInfo + modMs <- withFastStore' $ \db -> getGroupModerators db cxt user gInfo let rcpModMs' = filter (\m -> compatible m && memberCurrent m) modMs when (null rcpModMs') $ throwChatError $ CECommandError "no admins support this message" pure rcpModMs' @@ -1651,7 +1651,7 @@ getGroupRecipients vr user gInfo@GroupInfo {membership} scopeInfo modsCompatVers if memberStatus supportMem == GSMemPendingApproval then pure [supportMem] else do - modMs <- withFastStore' $ \db -> getGroupModerators db vr user gInfo + modMs <- withFastStore' $ \db -> getGroupModerators db cxt user gInfo let rcpModMs' = filter (\m -> compatible m && memberCurrent m) modMs pure $ [supportMem] <> rcpModMs' where @@ -1677,8 +1677,8 @@ mkGroupChatScope gInfo@GroupInfo {membership} m | otherwise = pure (gInfo, m, Nothing) -mkGetMessageChatScope :: VersionRangeChat -> User -> GroupInfo -> GroupMember -> MsgContent -> Maybe MsgScope -> CM (GroupInfo, GroupMember, Maybe GroupChatScopeInfo) -mkGetMessageChatScope vr user gInfo@GroupInfo {membership} m mc msgScope_ = +mkGetMessageChatScope :: StoreCxt -> User -> GroupInfo -> GroupMember -> MsgContent -> Maybe MsgScope -> CM (GroupInfo, GroupMember, Maybe GroupChatScopeInfo) +mkGetMessageChatScope cxt user gInfo@GroupInfo {membership} m mc msgScope_ = mkGroupChatScope gInfo m >>= \case groupScope@(_gInfo', _m', Just _scopeInfo) -> pure groupScope (_, _, Nothing) @@ -1693,7 +1693,7 @@ mkGetMessageChatScope vr user gInfo@GroupInfo {membership} m mc msgScope_ = (gInfo', scopeInfo) <- mkGroupSupportChatInfo gInfo pure (gInfo', m, Just scopeInfo) | otherwise -> do - referredMember <- withStore $ \db -> getGroupMemberByMemberId db vr user gInfo mId + referredMember <- withStore $ \db -> getGroupMemberByMemberId db cxt user gInfo mId -- TODO [knocking] return patched _referredMember'? (_referredMember', scopeInfo) <- mkMemberSupportChatInfo referredMember pure (gInfo, m, Just scopeInfo) @@ -1807,8 +1807,8 @@ cancelSndFileTransfer user@User {userId} ft@SndFileTransfer {fileId, connId, fil withStore' $ \db -> updateSndFileStatus db ft FSCancelled when sendCancel $ case fileInline of Just _ -> do - vr <- chatVersionRange - (sharedMsgId, conn) <- withStore $ \db -> (,) <$> getSharedMsgIdByFileId db userId fileId <*> getConnectionById db vr user connId + cxt <- chatStoreCxt + (sharedMsgId, conn) <- withStore $ \db -> (,) <$> getSharedMsgIdByFileId db userId fileId <*> getConnectionById db cxt user connId void $ sendDirectMessage_ conn (BFileChunk sharedMsgId FileChunkCancel) (ConnectionId connId) _ -> throwChatError $ CEException "cancelSndFileTransfer: cancelling file via a separate connection is deprecated" @@ -1992,13 +1992,13 @@ batchSndMessagesJSON mode = batchMessages mode maxEncodedMsgLength . L.toList encodeConnInfo :: MsgEncodingI e => ChatMsgEvent e -> CM ByteString encodeConnInfo chatMsgEvent = do - vr <- chatVersionRange - encodeConnInfoPQ PQSupportOff (maxVersion vr) chatMsgEvent + cxt <- chatStoreCxt + encodeConnInfoPQ PQSupportOff (maxVersion (vr cxt)) chatMsgEvent encodeConnInfoPQ :: MsgEncodingI e => PQSupport -> VersionChat -> ChatMsgEvent e -> CM ByteString encodeConnInfoPQ pqSup v chatMsgEvent = do - vr <- chatVersionRange - let info = ChatMessage {chatVRange = vr, msgId = Nothing, chatMsgEvent} + cxt <- chatStoreCxt + let info = ChatMessage {chatVRange = vr cxt, msgId = Nothing, chatMsgEvent} case encodeChatMessage maxEncodedInfoLength info of ECMEncoded connInfo -> case pqSup of PQSupportOn | v >= pqEncryptionCompressionVersion && B.length connInfo > maxCompressedInfoLength -> do @@ -2312,8 +2312,8 @@ saveGroupRcvMsg user groupId authorMember conn@Connection {connId} agentMsgMeta withStore (\db -> createNewMessageAndRcvMsgDelivery db (GroupId groupId) newMsg sharedMsgId_ rcvMsgDelivery $ Just amGroupMemId) `catchAllErrors` \e -> case e of ChatErrorStore (SEDuplicateGroupMessage _ _ _ (Just forwardedByGroupMemberId)) -> do - vr <- chatVersionRange - fm <- withStore $ \db -> getGroupMember db vr user groupId forwardedByGroupMemberId + cxt <- chatStoreCxt + fm <- withStore $ \db -> getGroupMember db cxt user groupId forwardedByGroupMemberId forM_ (memberConn fm) $ \fmConn -> void $ sendDirectMemberMessage fmConn (XGrpMemCon amMemId) groupId throwError e @@ -2333,8 +2333,8 @@ saveGroupFwdRcvMsg user gInfo@GroupInfo {groupId} forwardingMember refAuthorMemb | useRelays' gInfo -> pure Nothing -- with chat relays, duplicates are expected | otherwise -> case (authorGroupMemberId, forwardedByGroupMemberId) of (Just authorGMId, Nothing) -> do - vr <- chatVersionRange - am@GroupMember {memberId = amMemberId} <- withStore $ \db -> getGroupMember db vr user groupId authorGMId + cxt <- chatStoreCxt + am@GroupMember {memberId = amMemberId} <- withStore $ \db -> getGroupMember db cxt user groupId authorGMId if maybe False (\ref -> sameMemberId (memberId' ref) am) refAuthorMember_ then forM_ (memberConn forwardingMember) $ \fmConn -> void $ sendDirectMemberMessage fmConn (XGrpMemCon amMemberId) groupId @@ -2376,9 +2376,9 @@ saveSndChatItems :: CM [Either ChatError (ChatItem c 'MDSnd)] saveSndChatItems user cd showGroupAsSender itemsData itemTimed live = do createdAt <- liftIO getCurrentTime - vr <- chatVersionRange + cxt <- chatStoreCxt when (contactChatDeleted cd || any (\NewSndChatItemData {content} -> ciRequiresAttention content) (rights itemsData)) $ - void (withStore' $ \db -> updateChatTsStats db vr user cd createdAt Nothing) + void (withStore' $ \db -> updateChatTsStats db cxt user cd createdAt Nothing) lift $ withStoreBatch (\db -> map (bindRight $ createItem db createdAt) itemsData) where createItem :: DB.Connection -> UTCTime -> NewSndChatItemData c -> IO (Either ChatError (ChatItem c 'MDSnd)) @@ -2404,14 +2404,14 @@ ciContentNoParse content = (content, (ciContentToText content, Nothing)) saveRcvChatItem' :: (ChatTypeI c, ChatTypeQuotable c) => User -> ChatDirection c 'MDRcv -> RcvMessage -> Maybe SharedMsgId -> UTCTime -> (CIContent 'MDRcv, (Text, Maybe MarkdownList)) -> Maybe (CIFile 'MDRcv) -> Maybe CITimed -> Bool -> Map MemberName MsgMention -> CM (ChatItem c 'MDRcv, ChatInfo c) saveRcvChatItem' user cd msg@RcvMessage {chatMsgEvent, msgSigned, forwardedByMember} sharedMsgId_ brokerTs (content, (t, ft_)) ciFile itemTimed live mentions = do createdAt <- liftIO getCurrentTime - vr <- chatVersionRange + cxt <- chatStoreCxt withStore' $ \db -> do (mentions' :: Map MemberName CIMention, userMention) <- case toChatInfo cd of GroupChat g@GroupInfo {membership} _ -> groupMentions db g membership _ -> pure (M.empty, False) cInfo' <- if (ciRequiresAttention content || contactChatDeleted cd) - then updateChatTsStats db vr user cd createdAt (memberChatStats userMention) + then updateChatTsStats db cxt user cd createdAt (memberChatStats userMention) else pure $ toChatInfo cd let showAsGroup = case cd of CDChannelRcv {} -> True; _ -> False hasLink_ = ciContentHasLink content ft_ @@ -2704,13 +2704,13 @@ createChatItems :: createChatItems user itemTs_ dirsCIContents = do createdAt <- liftIO getCurrentTime let itemTs = fromMaybe createdAt itemTs_ - vr <- chatVersionRange' - void . withStoreBatch' $ \db -> map (updateChat db vr createdAt) dirsCIContents + cxt <- chatStoreCxt' + void . withStoreBatch' $ \db -> map (updateChat db cxt createdAt) dirsCIContents withStoreBatch' $ \db -> concatMap (createACIs db itemTs createdAt) dirsCIContents where - updateChat :: DB.Connection -> VersionRangeChat -> UTCTime -> (ChatDirection c d, ShowGroupAsSender, [(CIContent d, Maybe SharedMsgId)]) -> IO () - updateChat db vr createdAt (cd, _, contents) - | any (ciRequiresAttention . fst) contents || contactChatDeleted cd = void $ updateChatTsStats db vr user cd createdAt memberChatStats + updateChat :: DB.Connection -> StoreCxt -> UTCTime -> (ChatDirection c d, ShowGroupAsSender, [(CIContent d, Maybe SharedMsgId)]) -> IO () + updateChat db cxt createdAt (cd, _, contents) + | any (ciRequiresAttention . fst) contents || contactChatDeleted cd = void $ updateChatTsStats db cxt user cd createdAt memberChatStats | otherwise = pure () where memberChatStats :: Maybe (Int, MemberAttention, Int) @@ -2749,8 +2749,8 @@ createLocalChatItems :: UTCTime -> CM [ChatItem 'CTLocal 'MDSnd] createLocalChatItems user cd itemsData createdAt = do - vr <- chatVersionRange - void $ withStore' $ \db -> updateChatTsStats db vr user cd createdAt Nothing + cxt <- chatStoreCxt + void $ withStore' $ \db -> updateChatTsStats db cxt user cd createdAt Nothing (errs, items) <- lift $ partitionEithers <$> withStoreBatch' (\db -> map (createItem db) $ L.toList itemsData) unless (null errs) $ toView $ CEvtChatErrors errs pure items @@ -2800,6 +2800,14 @@ waitChatStartedAndActivated = do activated <- readTVar chatActivated unless (isJust started && activated) retry +chatStoreCxt :: CM StoreCxt +chatStoreCxt = lift chatStoreCxt' +{-# INLINE chatStoreCxt #-} + +chatStoreCxt' :: CM' StoreCxt +chatStoreCxt' = mkStoreCxt <$> asks config +{-# INLINE chatStoreCxt' #-} + chatVersionRange :: CM VersionRangeChat chatVersionRange = lift chatVersionRange' {-# INLINE chatVersionRange #-} diff --git a/src/Simplex/Chat/Library/Subscriber.hs b/src/Simplex/Chat/Library/Subscriber.hs index 478c53c763..e25e665bea 100644 --- a/src/Simplex/Chat/Library/Subscriber.hs +++ b/src/Simplex/Chat/Library/Subscriber.hs @@ -115,10 +115,10 @@ processAgentMessage _ "" (ERR e) = processAgentMessage corrId connId msg = do lockEntity <- critical connId (withStore (`getChatLockEntity` AgentConnId connId)) withEntityLock "processAgentMessage" lockEntity $ do - vr <- chatVersionRange + cxt <- chatStoreCxt -- getUserByAConnId never throws logical errors, only SEDBBusyError can be thrown here critical connId (withStore' (`getUserByAConnId` AgentConnId connId)) >>= \case - Just user -> processAgentMessageConn vr user corrId connId msg `catchAllErrors` eToView + Just user -> processAgentMessageConn cxt user corrId connId msg `catchAllErrors` eToView _ -> throwChatError $ CENoConnectionUser (AgentConnId connId) -- CRITICAL error will be shown to the user as alert with restart button in Android/desktop apps. @@ -169,27 +169,27 @@ processAgentMsgSndFile _corrId aFileId msg = do process :: User -> FileTransferId -> CM () process user fileId = do (ft@FileTransferMeta {xftpRedirectFor, cancelled}, sfts) <- withStore $ \db -> getSndFileTransfer db user fileId - vr <- chatVersionRange + cxt <- chatStoreCxt unless cancelled $ case msg of SFPROG sndProgress sndTotal -> do let status = CIFSSndTransfer {sndProgress, sndTotal} ci <- withStore $ \db -> do liftIO $ updateCIFileStatus db user fileId status - lookupChatItemByFileId db vr user fileId + lookupChatItemByFileId db cxt user fileId toView $ CEvtSndFileProgressXFTP user ci ft sndProgress sndTotal SFDONE sndDescr rfds -> do withStore' $ \db -> setSndFTPrivateSndDescr db user fileId (fileDescrText sndDescr) - ci <- withStore $ \db -> lookupChatItemByFileId db vr user fileId + ci <- withStore $ \db -> lookupChatItemByFileId db cxt user fileId case ci of Nothing -> do lift $ withAgent' (`xftpDeleteSndFileInternal` aFileId) withStore' $ \db -> createExtraSndFTDescrs db user fileId (map fileDescrText rfds) case rfds of - [] -> sendFileError (FileErrOther "no receiver descriptions") "no receiver descriptions" vr ft + [] -> sendFileError (FileErrOther "no receiver descriptions") "no receiver descriptions" cxt ft rfd : _ -> case [fd | fd@(FD.ValidFileDescription FD.FileDescription {chunks = [_]}) <- rfds] of [] -> case xftpRedirectFor of Nothing -> xftpSndFileRedirect user fileId rfd >>= toView . CEvtSndFileRedirectStartXFTP user ft - Just _ -> sendFileError (FileErrOther "chaining redirects") "Prohibit chaining redirects" vr ft + Just _ -> sendFileError (FileErrOther "chaining redirects") "Prohibit chaining redirects" cxt ft rfds' -> do -- we have 1 chunk - use it as URI whether it is redirect or not ft' <- maybe (pure ft) (\fId -> withStore $ \db -> getFileTransferMeta db user fId) xftpRedirectFor @@ -222,13 +222,13 @@ processAgentMsgSndFile _corrId aFileId msg = do sendFileDescriptions (GroupId groupId) rfdsMemberFTs' sharedMsgId ci' <- withStore $ \db -> do liftIO $ updateCIFileStatus db user fileId CIFSSndComplete - getChatItemByFileId db vr user fileId + getChatItemByFileId db cxt user fileId lift $ withAgent' (`xftpDeleteSndFileInternal` aFileId) toView $ CEvtSndFileCompleteXFTP user ci' ft where getRecipients - | useRelays' g = withStore' $ \db -> getGroupRelayMembers db vr user g - | otherwise = withStore' $ \db -> getGroupMembers db vr user g + | useRelays' g = withStore' $ \db -> getGroupRelayMembers db cxt user g + | otherwise = withStore' $ \db -> getGroupMembers db cxt user g memberFTs :: [GroupMember] -> [(Connection, SndFileTransfer)] memberFTs ms = M.elems $ M.intersectionWith (,) (M.fromList mConns') (M.fromList sfts') where @@ -241,10 +241,10 @@ processAgentMsgSndFile _corrId aFileId msg = do logWarn $ "Sent file warning: " <> err ci <- withStore $ \db -> do liftIO $ updateCIFileStatus db user fileId (CIFSSndWarning $ agentFileError e) - lookupChatItemByFileId db vr user fileId + lookupChatItemByFileId db cxt user fileId toView $ CEvtSndFileWarning user ci ft err SFERR e -> - sendFileError (agentFileError e) (tshow e) vr ft + sendFileError (agentFileError e) (tshow e) cxt ft where fileDescrText :: FilePartyI p => ValidFileDescription p -> T.Text fileDescrText = safeDecodeUtf8 . strEncode @@ -269,12 +269,12 @@ processAgentMsgSndFile _corrId aFileId msg = do toMsgReq :: (Connection, (ConnOrGroupId, Maybe MsgSigning, ChatMsgEvent 'Json)) -> SndMessage -> ChatMsgReq toMsgReq (conn, _) SndMessage {msgId, msgBody} = (conn, MsgFlags {notification = hasNotification XMsgFileDescr_}, (vrValue msgBody, [msgId])) - sendFileError :: FileError -> Text -> VersionRangeChat -> FileTransferMeta -> CM () - sendFileError ferr err vr ft = do + sendFileError :: FileError -> Text -> StoreCxt -> FileTransferMeta -> CM () + sendFileError ferr err cxt ft = do logError $ "Sent file error: " <> err ci <- withStore $ \db -> do liftIO $ updateFileCancelled db user fileId (CIFSSndError ferr) - lookupChatItemByFileId db vr user fileId + lookupChatItemByFileId db cxt user fileId lift $ withAgent' (`xftpDeleteSndFileInternal` aFileId) toView $ CEvtSndFileError user ci ft err @@ -309,13 +309,13 @@ processAgentMsgRcvFile _corrId aFileId msg = do process :: User -> FileTransferId -> CM () process user fileId = do ft <- withStore $ \db -> getRcvFileTransfer db user fileId - vr <- chatVersionRange + cxt <- chatStoreCxt unless (rcvFileCompleteOrCancelled ft) $ case msg of RFPROG rcvProgress rcvTotal -> do let status = CIFSRcvTransfer {rcvProgress, rcvTotal} ci <- withStore $ \db -> do liftIO $ updateCIFileStatus db user fileId status - lookupChatItemByFileId db vr user fileId + lookupChatItemByFileId db cxt user fileId toView $ CEvtRcvFileProgressXFTP user ci rcvProgress rcvTotal ft RFDONE xftpPath -> case liveRcvFileTransferPath ft of @@ -327,13 +327,13 @@ processAgentMsgRcvFile _corrId aFileId msg = do liftIO $ do updateRcvFileStatus db fileId FSComplete updateCIFileStatus db user fileId CIFSRcvComplete - lookupChatItemByFileId db vr user fileId + lookupChatItemByFileId db cxt user fileId agentXFTPDeleteRcvFile aFileId fileId toView $ maybe (CEvtRcvStandaloneFileComplete user fsTargetPath ft) (CEvtRcvFileComplete user) ci_ RFWARN e -> do ci <- withStore $ \db -> do liftIO $ updateCIFileStatus db user fileId (CIFSRcvWarning $ agentFileError e) - lookupChatItemByFileId db vr user fileId + lookupChatItemByFileId db cxt user fileId toView $ CEvtRcvFileWarning user ci e ft RFERR e | e == FILE NOT_APPROVED -> do @@ -344,20 +344,20 @@ processAgentMsgRcvFile _corrId aFileId msg = do | otherwise -> do aci_ <- withStore $ \db -> do liftIO $ updateFileCancelled db user fileId (CIFSRcvError $ agentFileError e) - lookupChatItemByFileId db vr user fileId + lookupChatItemByFileId db cxt user fileId forM_ aci_ cleanupACIFile agentXFTPDeleteRcvFile aFileId fileId toView $ CEvtRcvFileError user aci_ e ft type ShouldDeleteGroupConns = Bool -processAgentMessageConn :: VersionRangeChat -> User -> ACorrId -> ConnId -> AEvent 'AEConn -> CM () -processAgentMessageConn vr user@User {userId} corrId agentConnId agentMessage = do +processAgentMessageConn :: StoreCxt -> User -> ACorrId -> ConnId -> AEvent 'AEConn -> CM () +processAgentMessageConn cxt user@User {userId} corrId agentConnId agentMessage = do -- Missing connection/entity errors here will be sent to the view but not shown as CRITICAL alert, -- as in this case no need to ACK message - we can't process messages for this connection anyway. -- SEDBException will be re-trown as CRITICAL as it is likely to indicate a temporary database condition -- that will be resolved with app restart. - entity <- critical agentConnId $ withStore (\db -> getConnectionEntity db vr user $ AgentConnId agentConnId) >>= updateConnStatus + entity <- critical agentConnId $ withStore (\db -> getConnectionEntity db cxt user $ AgentConnId agentConnId) >>= updateConnStatus case agentMessage of END -> case entity of RcvDirectMsgConnection _ (Just ct) -> toView $ CEvtContactAnotherClient user ct @@ -562,7 +562,7 @@ processAgentMessageConn vr user@User {userId} corrId agentConnId agentMessage = -- XGrpLinkInv here means we are connecting via business contact card, so we replace contact with group (gInfo, host) <- withStore $ \db -> do liftIO $ deleteContactCardKeepConn db connId ct - createGroupInvitedViaLink db vr user conn'' glInv + createGroupInvitedViaLink db cxt user conn'' glInv void $ createChatItem user (CDGroupSnd gInfo Nothing) False CIChatBanner Nothing (Just epochStart) -- [incognito] send saved profile incognitoProfile <- forM customUserProfileId $ \pId -> withStore (\db -> getProfileById db userId pId) @@ -614,7 +614,7 @@ processAgentMessageConn vr user@User {userId} corrId agentConnId agentMessage = when (connChatVersion < batchSend2Version) $ forM_ (autoReply $ addressSettings ucl) $ \mc -> sendAutoReply ct' mc Nothing -- old versions only -- TODO REMOVE LEGACY vvv forM_ gli_ $ \GroupLinkInfo {groupId, memberRole = gLinkMemRole} -> do - groupInfo <- withStore $ \db -> getGroupInfo db vr user groupId + groupInfo <- withStore $ \db -> getGroupInfo db cxt user groupId subMode <- chatReadVar subscriptionMode groupConnIds <- createAgentConnectionAsync user CFCreateConnGrpInv True SCMInvitation subMode gVar <- asks random @@ -727,7 +727,7 @@ processAgentMessageConn vr user@User {userId} corrId agentConnId agentMessage = -- [async agent commands] group link auto-accept continuation on receiving INV CFCreateConnGrpInv -> do (ct, groupLinkId) <- withStore $ \db -> do - ct <- getContactViaMember db vr user m + ct <- getContactViaMember db cxt user m liftIO $ setNewContactMemberConnRequest db user m cReq liftIO $ (ct,) <$> getGroupLinkId db user gInfo sendGrpInvitation ct m groupLinkId @@ -795,7 +795,7 @@ processAgentMessageConn vr user@User {userId} corrId agentConnId agentMessage = pgId = fmap (\PublicGroupProfile {publicGroupId} -> publicGroupId), useRelays' gInfo == isJust rcvPG && pgId rcvPG == pgId curPG -> do -- XGrpLinkInv here means we are connecting via prepared group, and we have to update user and host member records - (gInfo', m') <- withStore $ \db -> updatePreparedUserAndHostMembersInvited db vr user gInfo m glInv + (gInfo', m') <- withStore $ \db -> updatePreparedUserAndHostMembersInvited db cxt user gInfo m glInv -- [incognito] send saved profile incognitoProfile <- forM customUserProfileId $ \pId -> withStore (\db -> getProfileById db userId pId) let profileToSend = userProfileInGroup user gInfo (fromLocalProfile <$> incognitoProfile) @@ -803,7 +803,7 @@ processAgentMessageConn vr user@User {userId} corrId agentConnId agentMessage = toView $ CEvtGroupLinkConnecting user gInfo' m' | otherwise -> messageError "x.grp.link.inv: publicGroupId mismatch" XGrpLinkReject glRjct@GroupLinkRejection {rejectionReason} -> do - (gInfo', m') <- withStore $ \db -> updatePreparedUserAndHostMembersRejected db vr user gInfo m glRjct + (gInfo', m') <- withStore $ \db -> updatePreparedUserAndHostMembersRejected db cxt user gInfo m glRjct toView $ CEvtGroupLinkConnecting user gInfo' m' toViewTE $ TEGroupLinkRejected user gInfo' rejectionReason _ -> messageError "CONF from host member in prepared group must have x.grp.link.inv or x.grp.link.reject" @@ -877,7 +877,7 @@ processAgentMessageConn vr user@User {userId} corrId agentConnId agentMessage = where firstConnectedHost | useRelays' gInfo = do - relayMems <- withStore' $ \db -> getGroupRelayMembers db vr user gInfo + relayMems <- withStore' $ \db -> getGroupRelayMembers db cxt user gInfo let numConnected = length $ filter (\GroupMember {memberStatus = ms} -> ms == GSMemConnected) relayMems pure $ numConnected == 1 | otherwise = pure True @@ -907,13 +907,13 @@ processAgentMessageConn vr user@User {userId} corrId agentConnId agentMessage = when (connChatVersion < batchSend2Version) $ getAutoReplyMsg >>= mapM_ (\mc -> sendGroupAutoReply mc Nothing) if useRelays' gInfo'' then do - introduceInChannel vr user gInfo'' m' + introduceInChannel cxt user gInfo'' m' when (groupFeatureAllowed SGFHistory gInfo'') $ sendHistory user gInfo'' m' else case mStatus of GSMemPendingApproval -> pure () - GSMemPendingReview -> introduceToModerators vr user gInfo'' m' + GSMemPendingReview -> introduceToModerators cxt user gInfo'' m' _ -> do - introduceToAll vr user gInfo'' m' + introduceToAll cxt user gInfo'' m' let memberIsCustomer = case businessChat gInfo'' of Just BusinessChatInfo {chatType = BCCustomer, customerId} -> memberId' m' == customerId _ -> False @@ -936,12 +936,12 @@ processAgentMessageConn vr user@User {userId} corrId agentConnId agentMessage = sendXGrpMemCon = \case GCPreMember -> forM_ (invitedByGroupMemberId membership) $ \hostId -> do - host <- withStore $ \db -> getGroupMember db vr user groupId hostId + host <- withStore $ \db -> getGroupMember db cxt user groupId hostId forM_ (memberConn host) $ \hostConn -> void $ sendDirectMemberMessage hostConn (XGrpMemCon memberId) groupId GCPostMember -> forM_ (invitedByGroupMemberId m) $ \invitingMemberId -> do - im <- withStore $ \db -> getGroupMember db vr user groupId invitingMemberId + im <- withStore $ \db -> getGroupMember db cxt user groupId invitingMemberId forM_ (memberConn im) $ \imConn -> void $ sendDirectMemberMessage imConn (XGrpMemCon memberId) groupId _ -> messageWarning "sendXGrpMemCon: member category GCPreMember or GCPostMember is expected" @@ -1202,7 +1202,7 @@ processAgentMessageConn vr user@User {userId} corrId agentConnId agentMessage = (confId, m', relay) <- withStore $ \db -> do confId <- getRelayConfId db m liftIO $ updateGroupMemberStatus db userId m GSMemAccepted - (m', relay) <- setRelayLinkAccepted db vr user m (MemberKey relayKey) relayProfile + (m', relay) <- setRelayLinkAccepted db cxt user m (MemberKey relayKey) relayProfile pure (confId, m', relay) allowAgentConnectionAsync user conn confId XOk toView $ CEvtGroupRelayUpdated user gInfo m' relay @@ -1290,7 +1290,7 @@ processAgentMessageConn vr user@User {userId} corrId agentConnId agentMessage = FileChunkCancel -> unless (rcvFileCompleteOrCancelled ft) $ do cancelRcvFileTransfer user ft - ci <- withStore $ \db -> getChatItemByFileId db vr user fileId + ci <- withStore $ \db -> getChatItemByFileId db cxt user fileId toView $ CEvtRcvFileSndCancelled user ci ft FileChunk {chunkNo, chunkBytes = chunk} -> do case integrity of @@ -1313,7 +1313,7 @@ processAgentMessageConn vr user@User {userId} corrId agentConnId agentMessage = updateRcvFileStatus db fileId FSComplete updateCIFileStatus db user fileId CIFSRcvComplete deleteRcvFileChunks db ft - getChatItemByFileId db vr user fileId + getChatItemByFileId db cxt user fileId toView $ CEvtRcvFileComplete user ci mapM_ (deleteAgentConnectionAsync . aConnId) conn_ RcvChunkDuplicate -> withAckMessage' "file msg" agentConnId meta $ pure () @@ -1338,7 +1338,7 @@ processAgentMessageConn vr user@User {userId} corrId agentConnId agentMessage = case (ucGroupId_, auData) of (Just groupId, UserContactLinkData UserContactData {relays = relayLinks}) -> do (gInfo, gLink, relays, relaysChanged, newlyActiveLinks) <- withStore $ \db -> do - gInfo <- getGroupInfo db vr user groupId + gInfo <- getGroupInfo db cxt user groupId gLink <- getGroupLink db user gInfo relays <- liftIO $ getGroupRelays db gInfo (relays', changed, newlyActive) <- liftIO $ foldrM (updateRelay db) ([], False, []) relays @@ -1351,7 +1351,7 @@ processAgentMessageConn vr user@User {userId} corrId agentConnId agentMessage = -- dedicated subscriber count). when (fromMaybe 0 publicMemberCount > 1) $ forM_ (L.nonEmpty newlyActiveLinks) $ \newlyActive -> do - allRelayMembers <- withFastStore' $ \db -> getGroupRelayMembers db vr user gInfo + allRelayMembers <- withFastStore' $ \db -> getGroupRelayMembers db cxt user gInfo let recipients = filter (\GroupMember {memberStatus, relayLink} -> @@ -1401,7 +1401,7 @@ processAgentMessageConn vr user@User {userId} corrId agentConnId agentMessage = AddressSettings {autoAccept} = addressSettings isSimplexTeam = sameConnReqContact connReq adminContactReq gVar <- asks random - withStore (\db -> createOrUpdateContactRequest db gVar vr user uclId ucl isSimplexTeam invId chatVRange p xContactId_ welcomeMsgId_ requestMsg_ reqPQSup) >>= \case + withStore (\db -> createOrUpdateContactRequest db gVar cxt user uclId ucl isSimplexTeam invId chatVRange p xContactId_ welcomeMsgId_ requestMsg_ reqPQSup) >>= \case RSAcceptedRequest _ucr re -> case re of REContact ct -> -- TODO [short links] update request msg @@ -1533,7 +1533,7 @@ processAgentMessageConn vr user@User {userId} corrId agentConnId agentMessage = -- ##### Group link join requests (don't create contact requests) ##### Just gli@GroupLinkInfo {groupId, memberRole = gLinkMemRole} -> do -- TODO [short links] deduplicate request by xContactId? - gInfo <- withStore $ \db -> getGroupInfo db vr user groupId + gInfo <- withStore $ \db -> getGroupInfo db cxt user groupId if useRelays' gInfo then messageWarning $ "processContactConnMessage (group " <> groupName' gInfo <> "): ignored direct join request from " <> displayName <> " (group uses relays)" else do @@ -1559,10 +1559,10 @@ processAgentMessageConn vr user@User {userId} corrId agentConnId agentMessage = rejected <- withStore' $ \db -> isRelayGroupRejected db user groupLink initialDelay <- asks $ initialInterval . relayRequestRetryInterval . config if rejected - then rejectRelayInvitationAsync user uclId vr groupRelayInv invId chatVRange initialDelay RRRRejoinRejected + then rejectRelayInvitationAsync user uclId cxt groupRelayInv invId chatVRange initialDelay RRRRejoinRejected else do (_gInfo, _ownerMember) <- withStore $ \db -> - createRelayRequestGroup db vr user groupRelayInv invId chatVRange initialDelay GSMemAccepted RSInvited + createRelayRequestGroup db cxt user groupRelayInv invId chatVRange initialDelay GSMemAccepted RSInvited lift $ void $ getRelayRequestWorker True xGrpRelayTest :: InvitationId -> VersionRangeChat -> ByteString -> CM () xGrpRelayTest invId chatVRange challenge = do @@ -1577,7 +1577,7 @@ processAgentMessageConn vr user@User {userId} corrId agentConnId agentMessage = let chatV = chatVR `peerConnChatVersion` chatVRange (cmdId, acId) <- agentAcceptContactAsync user True invId msg subMode PQSupportOff chatV withStore $ \db -> do - Connection {connId = testCId} <- createRelayTestConnection db vr user acId ConnAccepted chatV subMode + Connection {connId = testCId} <- createRelayTestConnection db cxt user acId ConnAccepted chatV subMode liftIO $ setCommandConnId db user cmdId testCId -- TODO [relays] owner, relays: TBC how to communicate member rejection rules from owner to relays -- TODO [relays] relay: TBC communicate rejection when memberId already exists (currently checked in createJoiningMember) @@ -1586,7 +1586,7 @@ processAgentMessageConn vr user@User {userId} corrId agentConnId agentMessage = (_ucl, gLinkInfo_) <- withStore $ \db -> getUserContactLinkById db userId uclId case gLinkInfo_ of Just GroupLinkInfo {groupId, memberRole = gLinkMemRole} -> do - gInfo <- withStore $ \db -> getGroupInfo db vr user groupId + gInfo <- withStore $ \db -> getGroupInfo db cxt user groupId mem <- acceptGroupJoinRequestAsync user uclId gInfo invId chatVRange p Nothing (Just joiningMemberId) Nothing GAAccepted gLinkMemRole Nothing (Just joiningMemberKey) (gInfo', mem', scopeInfo) <- mkGroupChatScope gInfo mem createInternalChatItem user (CDGroupRcv gInfo' scopeInfo mem') (CIRcvGroupEvent RGEInvitedViaGroupLink) Nothing @@ -1756,7 +1756,7 @@ processAgentMessageConn vr user@User {userId} corrId agentConnId agentMessage = -- sendProbe -> sendProbeHashes (currently) -- sendProbeHashes -> sendProbe (reversed - change order in code, may add delay) sendProbe probe - ms <- map COMGroupMember <$> withStore' (\db -> getMatchingMembers db vr user ct) + ms <- map COMGroupMember <$> withStore' (\db -> getMatchingMembers db cxt user ct) sendProbeHashes ms probe probeId else sendProbe . Probe =<< liftIO (encodedRandomBytes gVar 32) where @@ -1772,7 +1772,7 @@ processAgentMessageConn vr user@User {userId} corrId agentConnId agentMessage = then do (probe, probeId) <- withStore $ \db -> createSentProbe db gVar userId $ COMGroupMember m sendProbe probe - cs <- map COMContact <$> withStore' (\db -> getMatchingMemberContacts db vr user m) + cs <- map COMContact <$> withStore' (\db -> getMatchingMemberContacts db cxt user m) sendProbeHashes cs probe probeId else sendProbe . Probe =<< liftIO (encodedRandomBytes gVar 32) where @@ -1845,7 +1845,7 @@ processAgentMessageConn vr user@User {userId} corrId agentConnId agentMessage = messageFileDescription Contact {contactId} sharedMsgId fileDescr = do (fileId, aci) <- withStore $ \db -> do fileId <- getFileIdBySharedMsgId db userId contactId sharedMsgId - aci <- getChatItemByFileId db vr user fileId + aci <- getChatItemByFileId db cxt user fileId pure (fileId, aci) processFDMessage fileId aci fileDescr @@ -1853,7 +1853,7 @@ processAgentMessageConn vr user@User {userId} corrId agentConnId agentMessage = groupMessageFileDescription g@GroupInfo {groupId} m_ sharedMsgId fileDescr = do (fileId, aci) <- withStore $ \db -> do fileId <- getGroupFileIdBySharedMsgId db userId groupId sharedMsgId - aci <- getChatItemByFileId db vr user fileId + aci <- getChatItemByFileId db cxt user fileId pure (fileId, aci) case aci of AChatItem SCTGroup SMDRcv (GroupChat _g scopeInfo) ChatItem {chatDir} @@ -2014,7 +2014,7 @@ processAgentMessageConn vr user@User {userId} corrId agentConnId agentMessage = cci <- case itemMemberId of Just itemMemberId' -> getGroupMemberCIBySharedMsgId db user g itemMemberId' sharedMsgId Nothing -> getGroupChatItemBySharedMsgId db user g Nothing sharedMsgId - scopeInfo <- getGroupChatScopeInfoForItem db vr user g (cChatItemId cci) + scopeInfo <- getGroupChatScopeInfoForItem db cxt user g (cChatItemId cci) pure (cci, scopeInfo) if ciReactionAllowed ci then do @@ -2052,13 +2052,13 @@ processAgentMessageConn vr user@User {userId} corrId agentConnId agentMessage = -- no delivery task - message already forwarded by relay pure Nothing Just m@GroupMember {memberId} -> do - (gInfo', m', scopeInfo) <- mkGetMessageChatScope vr user gInfo m content msgScope_ + (gInfo', m', scopeInfo) <- mkGetMessageChatScope cxt user gInfo m content msgScope_ if blockedByAdmin m' then createBlockedByAdmin gInfo' (Just m') scopeInfo $> Nothing else case prohibitedGroupContent gInfo' m' scopeInfo content ft_ fInv_ False of Just f -> rejected gInfo' (Just m') scopeInfo f $> Nothing Nothing -> - withStore' (\db -> getCIModeration db vr user gInfo' memberId sharedMsgId_) >>= \case + withStore' (\db -> getCIModeration db cxt user gInfo' memberId sharedMsgId_) >>= \case Just ciModeration -> do applyModeration gInfo' m' scopeInfo ciModeration withStore' $ \db -> deleteCIModeration db gInfo' memberId sharedMsgId_ @@ -2148,7 +2148,7 @@ processAgentMessageConn vr user@User {userId} corrId agentConnId agentMessage = else case m_ of Just m -> do let mentions' = if memberBlocked m then [] else mentions - (gInfo', m', scopeInfo) <- mkGetMessageChatScope vr user gInfo m mc msgScope_ + (gInfo', m', scopeInfo) <- mkGetMessageChatScope cxt user gInfo m mc msgScope_ pure (gInfo', CDGroupRcv gInfo' scopeInfo m', mentions', scopeInfo) Nothing -> pure (gInfo, CDChannelRcv gInfo Nothing, mentions, Nothing) case m_ >>= \m -> prohibitedGroupContent gInfo' m scopeInfo mc ft_ (Nothing :: Maybe String) False of @@ -2179,7 +2179,7 @@ processAgentMessageConn vr user@User {userId} corrId agentConnId agentMessage = else case m_ of Just m -> getGroupMemberCIBySharedMsgId db user gInfo (memberId' m) sharedMsgId Nothing -> getGroupChatItemBySharedMsgId db user gInfo Nothing sharedMsgId - (cci,) <$> getGroupChatScopeInfoForItem db vr user gInfo (cChatItemId cci) + (cci,) <$> getGroupChatScopeInfoForItem db cxt user gInfo (cChatItemId cci) case cci of CChatItem SMDRcv ci@ChatItem {chatDir = CIGroupRcv m', meta = CIMeta {itemLive}, content = CIRcvMsgContent oldMC} | isSender m' -> updateCI False ci scopeInfo oldMC itemLive (Just $ memberId' m') @@ -2291,7 +2291,7 @@ processAgentMessageConn vr user@User {userId} corrId agentConnId agentMessage = | otherwise = a delete :: CChatItem 'CTGroup -> Bool -> Maybe GroupMember -> CM (Maybe DeliveryTaskContext) delete cci asGroup byGroupMember = do - scopeInfo <- withStore $ \db -> getGroupChatScopeInfoForItem db vr user gInfo (cChatItemId cci) + scopeInfo <- withStore $ \db -> getGroupChatScopeInfoForItem db cxt user gInfo (cChatItemId cci) let fullDelete | asGroup = groupFeatureAllowed SGFFullDelete gInfo | otherwise = maybe False (\m -> groupFeatureMemberAllowed SGFFullDelete m gInfo) m_ @@ -2359,14 +2359,14 @@ processAgentMessageConn vr user@User {userId} corrId agentConnId agentMessage = (fileId,) <$> getRcvFileTransfer db user fileId unless (rcvFileCompleteOrCancelled ft) $ do cancelRcvFileTransfer user ft - ci <- withStore $ \db -> getChatItemByFileId db vr user fileId + ci <- withStore $ \db -> getChatItemByFileId db cxt user fileId toView $ CEvtRcvFileSndCancelled user ci ft xFileAcptInv :: Contact -> SharedMsgId -> Maybe ConnReqInvitation -> String -> CM () xFileAcptInv ct sharedMsgId fileConnReq_ fName = do (fileId, AChatItem _ _ _ ci) <- withStore $ \db -> do fileId <- getDirectFileIdBySharedMsgId db user ct sharedMsgId - (fileId,) <$> getChatItemByFileId db vr user fileId + (fileId,) <$> getChatItemByFileId db cxt user fileId assertSMPAcceptNotProhibited ci ft@FileTransferMeta {fileName, fileSize, fileInline, cancelled} <- withStore (\db -> getFileTransferMeta db user fileId) -- [async agent commands] no continuation needed, but command should be asynchronous for stability @@ -2375,7 +2375,7 @@ processAgentMessageConn vr user@User {userId} corrId agentConnId agentMessage = -- receiving inline Nothing -> do event <- withStore $ \db -> do - ci' <- updateDirectCIFileStatus db vr user fileId $ CIFSSndTransfer 0 1 + ci' <- updateDirectCIFileStatus db cxt user fileId $ CIFSSndTransfer 0 1 sft <- createSndDirectInlineFT db ct ft pure $ CEvtSndFileStart user ci' sft toView event @@ -2403,7 +2403,7 @@ processAgentMessageConn vr user@User {userId} corrId agentConnId agentMessage = forM_ sft_ $ \sft@SndFileTransfer {fileId} -> do ci@(AChatItem _ _ _ ChatItem {file}) <- withStore $ \db -> do liftIO $ updateSndFileStatus db sft FSComplete - updateDirectCIFileStatus db vr user fileId CIFSSndComplete + updateDirectCIFileStatus db cxt user fileId CIFSSndComplete case file of Just CIFile {fileProtocol = FPXFTP} -> do ft <- withStore $ \db -> getFileTransferMeta db user fileId @@ -2441,7 +2441,7 @@ processAgentMessageConn vr user@User {userId} corrId agentConnId agentMessage = xFileCancelGroup g@GroupInfo {groupId} m_ sharedMsgId = do (fileId, aci) <- withStore $ \db -> do fileId <- getGroupFileIdBySharedMsgId db userId groupId sharedMsgId - (fileId,) <$> getChatItemByFileId db vr user fileId + (fileId,) <$> getChatItemByFileId db cxt user fileId case aci of AChatItem SCTGroup SMDRcv (GroupChat _g scopeInfo) ChatItem {chatDir} | validSender m_ chatDir -> do @@ -2457,7 +2457,7 @@ processAgentMessageConn vr user@User {userId} corrId agentConnId agentMessage = xFileAcptInvGroup GroupInfo {groupId} m@GroupMember {activeConn} sharedMsgId fileConnReq_ fName = do (fileId, AChatItem _ _ _ ci) <- withStore $ \db -> do fileId <- getGroupFileIdBySharedMsgId db userId groupId sharedMsgId - (fileId,) <$> getChatItemByFileId db vr user fileId + (fileId,) <$> getChatItemByFileId db cxt user fileId assertSMPAcceptNotProhibited ci -- TODO check that it's not already accepted ft@FileTransferMeta {fileName, fileSize, fileInline, cancelled} <- withStore (\db -> getFileTransferMeta db user fileId) @@ -2466,7 +2466,7 @@ processAgentMessageConn vr user@User {userId} corrId agentConnId agentMessage = (Nothing, Just conn) -> do -- receiving inline event <- withStore $ \db -> do - ci' <- updateDirectCIFileStatus db vr user fileId $ CIFSSndTransfer 0 1 + ci' <- updateDirectCIFileStatus db cxt user fileId $ CIFSSndTransfer 0 1 sft <- liftIO $ createSndGroupInlineFT db m conn ft pure $ CEvtSndFileStart user ci' sft toView event @@ -2492,7 +2492,7 @@ processAgentMessageConn vr user@User {userId} corrId agentConnId agentMessage = when (fromRole < GRAdmin || fromRole < memRole) $ throwChatError (CEGroupContactRole c) when (fromMemId == memId) $ throwChatError CEGroupDuplicateMemberId -- [incognito] if direct connection with host is incognito, create membership using the same incognito profile - (gInfo@GroupInfo {groupId, localDisplayName, groupProfile, membership}, hostId) <- withStore $ \db -> createGroupInvitation db vr user ct inv customUserProfileId + (gInfo@GroupInfo {groupId, localDisplayName, groupProfile, membership}, hostId) <- withStore $ \db -> createGroupInvitation db cxt user ct inv customUserProfileId void $ createChatItem user (CDGroupSnd gInfo Nothing) False CIChatBanner Nothing (Just epochStart) let GroupMember {groupMemberId, memberId = membershipMemId} = membership if sameGroupLinkId groupLinkId groupLinkId' @@ -2533,7 +2533,7 @@ processAgentMessageConn vr user@User {userId} corrId agentConnId agentMessage = then do (ct', contactConns) <- withStore' $ \db -> do ct' <- updateContactStatus db user c CSDeleted - (ct',) <$> getContactConnections db vr userId ct' + (ct',) <$> getContactConnections db cxt userId ct' deleteAgentConnectionsAsync $ map aConnId contactConns forM_ contactConns $ \conn -> withStore' $ \db -> updateConnectionStatus db conn ConnDeleted activeConn' <- forM (contactConn ct') $ \conn -> pure conn {connStatus = ConnDeleted} @@ -2542,7 +2542,7 @@ processAgentMessageConn vr user@User {userId} corrId agentConnId agentMessage = toView $ CEvtNewChatItems user [AChatItem SCTDirect SMDRcv cInfo ci] toView $ CEvtContactDeletedByContact user ct'' else do - contactConns <- withStore' $ \db -> getContactConnections db vr userId c + contactConns <- withStore' $ \db -> getContactConnections db cxt userId c deleteAgentConnectionsAsync $ map aConnId contactConns withStore $ \db -> deleteContact db user c where @@ -2611,7 +2611,7 @@ processAgentMessageConn vr user@User {userId} corrId agentConnId agentMessage = messageError "x.grp.link.acpt with insufficient member permissions" | sameMemberId memberId membership = processUserAccepted | otherwise = - withStore' (\db -> runExceptT $ getGroupMemberByMemberId db vr user gInfo memberId) >>= \case + withStore' (\db -> runExceptT $ getGroupMemberByMemberId db cxt user gInfo memberId) >>= \case Left _ -> messageError "x.grp.link.acpt error: referenced member does not exist" Right referencedMember -> do (referencedMember', gInfo') <- withStore' $ \db -> do @@ -2655,7 +2655,7 @@ processAgentMessageConn vr user@User {userId} corrId agentConnId agentMessage = GAPendingApproval -> messageWarning "x.grp.link.acpt: unexpected group acceptance - pending approval" introduceToRemainingMembers acceptedMember = do - introduceToRemaining vr user gInfo acceptedMember + introduceToRemaining cxt user gInfo acceptedMember when (groupFeatureAllowed SGFHistory gInfo) $ sendHistory user gInfo acceptedMember maybeCreateGroupDescrLocal :: GroupInfo -> GroupMember -> CM () @@ -2677,7 +2677,7 @@ processAgentMessageConn vr user@User {userId} corrId agentConnId agentMessage = toView $ CEvtGroupMemberUpdated user gInfo m m' pure m' Just mContactId -> do - mCt <- withStore $ \db -> getContact db vr user mContactId + mCt <- withStore $ \db -> getContact db cxt user mContactId if canUpdateProfile mCt then do (m', ct') <- withStore $ \db -> updateContactMemberProfile db user m mCt p' @@ -2725,7 +2725,7 @@ processAgentMessageConn vr user@User {userId} corrId agentConnId agentMessage = contactMerge <- readTVarIO =<< asks contactMergeEnabled -- [incognito] unless connected incognito when (contactMerge && not (contactOrMemberIncognito cgm2)) $ do - cgm1s <- withStore' $ \db -> matchReceivedProbe db vr user cgm2 probe + cgm1s <- withStore' $ \db -> matchReceivedProbe db cxt user cgm2 probe let cgm1s' = filter (not . contactOrMemberIncognito) cgm1s probeMatches cgm1s' cgm2 where @@ -2741,7 +2741,7 @@ processAgentMessageConn vr user@User {userId} corrId agentConnId agentMessage = contactMerge <- readTVarIO =<< asks contactMergeEnabled -- [incognito] unless connected incognito when (contactMerge && not (contactOrMemberIncognito cgm1)) $ do - cgm2Probe_ <- withStore' $ \db -> matchReceivedProbeHash db vr user cgm1 probeHash + cgm2Probe_ <- withStore' $ \db -> matchReceivedProbeHash db cxt user cgm1 probeHash forM_ cgm2Probe_ $ \(cgm2, probe) -> unless (contactOrMemberIncognito cgm2) . void $ probeMatch cgm1 cgm2 probe @@ -2771,7 +2771,7 @@ processAgentMessageConn vr user@User {userId} corrId agentConnId agentMessage = xInfoProbeOk :: ContactOrMember -> Probe -> CM () xInfoProbeOk cgm1 probe = do - cgm2 <- withStore' $ \db -> matchSentProbe db vr user cgm1 probe + cgm2 <- withStore' $ \db -> matchSentProbe db cxt user cgm1 probe case cgm1 of COMContact c1 -> case cgm2 of @@ -2920,14 +2920,14 @@ processAgentMessageConn vr user@User {userId} corrId agentConnId agentMessage = associateMemberWithContact c1 m2@GroupMember {groupId} = do g <- withStore $ \db -> do liftIO $ associateMemberWithContactRecord db user c1 m2 - getGroupInfo db vr user groupId + getGroupInfo db cxt user groupId toView $ CEvtContactAndMemberAssociated user c1 g m2 c1 pure c1 associateContactWithMember :: GroupMember -> Contact -> CM Contact associateContactWithMember m1@GroupMember {groupId} c2 = do (c2', g) <- withStore $ \db -> - liftM2 (,) (associateContactWithMemberRecord db vr user m1 c2) (getGroupInfo db vr user groupId) + liftM2 (,) (associateContactWithMemberRecord db cxt user m1 c2) (getGroupInfo db cxt user groupId) toView $ CEvtContactAndMemberAssociated user c2 g m1 c2' pure c2' @@ -2937,15 +2937,15 @@ processAgentMessageConn vr user@User {userId} corrId agentConnId agentMessage = conn' <- updatePeerChatVRange activeConn chatVRange case chatMsgEvent of XInfo p -> do - ct <- withStore $ \db -> createDirectContact db vr user conn' p + ct <- withStore $ \db -> createDirectContact db cxt user conn' p toView $ CEvtContactConnecting user ct pure (conn', Nothing) XGrpLinkInv glInv -> do - (gInfo, host) <- withStore $ \db -> createGroupInvitedViaLink db vr user conn' glInv + (gInfo, host) <- withStore $ \db -> createGroupInvitedViaLink db cxt user conn' glInv toView $ CEvtGroupLinkConnecting user gInfo host pure (conn', Just gInfo) XGrpLinkReject glRjct@GroupLinkRejection {rejectionReason} -> do - (gInfo, host) <- withStore $ \db -> createGroupRejectedViaLink db vr user conn' glRjct + (gInfo, host) <- withStore $ \db -> createGroupRejectedViaLink db cxt user conn' glRjct toView $ CEvtGroupLinkConnecting user gInfo host toViewTE $ TEGroupLinkRejected user gInfo rejectionReason pure (conn', Just gInfo) @@ -2958,10 +2958,10 @@ processAgentMessageConn vr user@User {userId} corrId agentConnId agentMessage = if sameMemberId memId (membership gInfo) then pure Nothing else do - withStore' (\db -> runExceptT $ getGroupMemberByMemberId db vr user gInfo memId) >>= \case + withStore' (\db -> runExceptT $ getGroupMemberByMemberId db cxt user gInfo memId) >>= \case Right unknownMember@GroupMember {memberStatus = GSMemUnknown} -> do (updatedMember, gInfo') <- withStore $ \db -> do - updatedMember <- updateUnknownMemberAnnounced db vr user m unknownMember memInfo initialStatus + updatedMember <- updateUnknownMemberAnnounced db cxt user m unknownMember memInfo initialStatus gInfo' <- if memberPending updatedMember then liftIO $ increaseGroupMembersRequireAttention db user gInfo @@ -3014,10 +3014,10 @@ processAgentMessageConn vr user@User {userId} corrId agentConnId agentMessage = xGrpMemIntro gInfo@GroupInfo {chatSettings} m@GroupMember {memberRole, localDisplayName = c} memInfo@(MemberInfo memId _ memChatVRange _ _) memRestrictions = do case memberCategory m of GCHostMember -> - withStore' (\db -> runExceptT $ getGroupMemberByMemberId db vr user gInfo memId) >>= \case + withStore' (\db -> runExceptT $ getGroupMemberByMemberId db cxt user gInfo memId) >>= \case Right existingMember | useRelays' gInfo -> do - updatedMember <- withStore $ \db -> updatePreparedChannelMember db vr user existingMember memInfo + updatedMember <- withStore $ \db -> updatePreparedChannelMember db cxt user existingMember memInfo toView $ CEvtGroupMemberUpdated user gInfo existingMember updatedMember | otherwise -> messageError "x.grp.mem.intro ignored: member already exists" @@ -3038,7 +3038,7 @@ processAgentMessageConn vr user@User {userId} corrId agentConnId agentMessage = subMode <- chatReadVar subscriptionMode -- [async agent commands] commands should be asynchronous, continuation is to send XGrpMemInv - have to remember one has completed and process on second groupConnIds <- createConn subMode - let chatV = maybe (minVersion vr) (\peerVR -> vr `peerConnChatVersion` fromChatVRange peerVR) memChatVRange + let chatV = maybe (minVersion (vr cxt)) (\peerVR -> vr cxt `peerConnChatVersion` fromChatVRange peerVR) memChatVRange void $ withStore $ \db -> do reMember <- createIntroReMember db user gInfo memInfo memRestrictions createIntroReMemberConn db user m reMember chatV memInfo groupConnIds subMode @@ -3049,7 +3049,7 @@ processAgentMessageConn vr user@User {userId} corrId agentConnId agentMessage = sendXGrpMemInv :: Int64 -> Maybe ConnReqInvitation -> XGrpMemIntroCont -> CM () sendXGrpMemInv hostConnId directConnReq XGrpMemIntroCont {groupId, groupMemberId, memberId, groupConnReq} = do - hostConn <- withStore $ \db -> getConnectionById db vr user hostConnId + hostConn <- withStore $ \db -> getConnectionById db cxt user hostConnId let msg = XGrpMemInv memberId IntroInvitation {groupConnReq, directConnReq} void $ sendDirectMemberMessage hostConn msg groupId withStore' $ \db -> updateGroupMemberStatusById db userId groupMemberId GSMemIntroInvited @@ -3058,7 +3058,7 @@ processAgentMessageConn vr user@User {userId} corrId agentConnId agentMessage = xGrpMemInv gInfo m memId introInv = do case memberCategory m of GCInviteeMember -> - withStore' (\db -> runExceptT $ getGroupMemberByMemberId db vr user gInfo memId) >>= \case + withStore' (\db -> runExceptT $ getGroupMemberByMemberId db cxt user gInfo memId) >>= \case Left _ -> messageError "x.grp.mem.inv error: referenced member does not exist" Right reMember -> sendGroupMemberMessage gInfo reMember $ XGrpMemFwd (memberInfo gInfo m) introInv _ -> messageError "x.grp.mem.inv can be only sent by invitee member" @@ -3069,7 +3069,7 @@ processAgentMessageConn vr user@User {userId} corrId agentConnId agentMessage = checkHostRole m memRole toMember <- withStore $ \db -> do toMember <- - getGroupMemberByMemberId db vr user gInfo memId + getGroupMemberByMemberId db cxt user gInfo memId -- TODO if the missed messages are correctly sent as soon as there is connection before anything else is sent -- the situation when member does not exist is an error -- member receiving x.grp.mem.fwd should have also received x.grp.mem.new prior to that. @@ -3093,7 +3093,7 @@ processAgentMessageConn vr user@User {userId} corrId agentConnId agentMessage = directConnIds <- forM directConnReq $ \dcr -> joinAgentConnectionAsync user Nothing True dcr dm subMode let customUserProfileId = localProfileId <$> incognitoMembershipProfile gInfo mcvr = maybe chatInitialVRange fromChatVRange memChatVRange - chatV = vr `peerConnChatVersion` mcvr + chatV = vr cxt `peerConnChatVersion` mcvr withStore' $ \db -> createIntroToMemberContact db user m toMember chatV mcvr groupConnIds directConnIds customUserProfileId subMode xGrpMemRole :: GroupInfo -> GroupMember -> MemberId -> GroupMemberRole -> RcvMessage -> UTCTime -> CM (Maybe DeliveryJobScope) @@ -3102,7 +3102,7 @@ processAgentMessageConn vr user@User {userId} corrId agentConnId agentMessage = let gInfo' = gInfo {membership = membership {memberRole = memRole}} in changeMemberRole gInfo' membership $ RGEUserRole memRole | otherwise = - withStore' (\db -> runExceptT $ getGroupMemberByMemberId db vr user gInfo memId) >>= \case + withStore' (\db -> runExceptT $ getGroupMemberByMemberId db cxt user gInfo memId) >>= \case Right member -> changeMemberRole gInfo member $ RGEMemberRole (groupMemberId' member) (fromLocalProfile $ memberProfile member) memRole Left _ -> messageError "x.grp.mem.role with unknown member ID" $> Nothing where @@ -3133,7 +3133,7 @@ processAgentMessageConn vr user@User {userId} corrId agentConnId agentMessage = | membershipMemId == memId = pure Nothing -- ignore - XGrpMemRestrict can be sent to restricted member for efficiency | otherwise = do unknownRole <- unknownMemberRole gInfo - withStore (\db -> getCreateUnknownGMByMemberId db vr user gInfo memId "" unknownRole True) >>= \case + withStore (\db -> getCreateUnknownGMByMemberId db cxt user gInfo memId "" unknownRole True) >>= \case Nothing -> messageError "x.grp.mem.restrict: no member" $> Nothing -- shouldn't happen Just (bm, unknown) -> do let GroupMember {groupMemberId = bmId, memberRole, blockedByAdmin, memberProfile = bmp} = bm @@ -3157,7 +3157,7 @@ processAgentMessageConn vr user@User {userId} corrId agentConnId agentMessage = xGrpMemCon :: GroupInfo -> GroupMember -> MemberId -> CM () xGrpMemCon gInfo sendingMem memId = do - refMem <- withStore $ \db -> getGroupMemberByMemberId db vr user gInfo memId + refMem <- withStore $ \db -> getGroupMemberByMemberId db cxt user gInfo memId -- Updating vectors in separate transactions to avoid deadlocks. withStore $ \db -> setMemberVectorRelationConnected db sendingMem refMem MRSubjectConnected withStore $ \db -> setMemberVectorRelationConnected db refMem sendingMem MRReferencedConnected @@ -3179,7 +3179,7 @@ processAgentMessageConn vr user@User {userId} corrId agentConnId agentMessage = toView $ CEvtDeletedMemberUser user gInfo {membership = membership'} m withMessages msgSigned pure $ Just DJSGroup {jobSpec = DJRelayRemoved} else - withStore' (\db -> runExceptT $ getGroupMemberByMemberId db vr user gInfo memId) >>= \case + withStore' (\db -> runExceptT $ getGroupMemberByMemberId db cxt user gInfo memId) >>= \case Left _ -> do messageError "x.grp.mem.del with unknown member ID" pure $ Just DJSGroup {jobSpec = DJDeliveryJob {includePending = True}} @@ -3323,7 +3323,7 @@ processAgentMessageConn vr user@User {userId} corrId agentConnId agentMessage = case memberContactId of Nothing -> createNewContact subMode Just mContactId -> do - mCt <- withStore $ \db -> getContact db vr user mContactId + mCt <- withStore $ \db -> getContact db cxt user mContactId let Contact {activeConn, contactGrpInvSent} = mCt forM_ activeConn $ \Connection {connId} -> if contactGrpInvSent @@ -3350,7 +3350,7 @@ processAgentMessageConn vr user@User {userId} corrId agentConnId agentMessage = mCt' <- withStore $ \db -> do updateMemberContactInvited db user mCt groupDirectInv void $ liftIO $ createMemberContactConn db user acId (Just cmdId) g mConn ConnJoined mContactId subMode - getContact db vr user mContactId + getContact db cxt user mContactId securityCodeChanged mCt' createItems mCt' m | otherwise = do @@ -3358,7 +3358,7 @@ processAgentMessageConn vr user@User {userId} corrId agentConnId agentMessage = mCt' <- withStore $ \db -> do updateMemberContactInvited db user mCt groupDirectInv void $ liftIO $ createMemberContactConn db user acId Nothing g mConn ConnPrepared mContactId subMode - getContact db vr user mContactId + getContact db cxt user mContactId securityCodeChanged mCt' createInternalChatItem user (CDDirectRcv mCt') (CIRcvDirectEvent $ RDEGroupInvLinkReceived gp) Nothing createItems mCt' m @@ -3369,7 +3369,7 @@ processAgentMessageConn vr user@User {userId} corrId agentConnId agentMessage = (mCt, m') <- withStore $ \db -> do (mContactId, m') <- liftIO $ createMemberContactInvited db user g m groupDirectInv void $ liftIO $ createMemberContactConn db user acId (Just cmdId) g mConn ConnJoined mContactId subMode - mCt <- getContact db vr user mContactId + mCt <- getContact db cxt user mContactId pure (mCt, m') createInternalChatItem user (CDDirectSnd mCt) CIChatBanner (Just epochStart) createItems mCt m' @@ -3378,7 +3378,7 @@ processAgentMessageConn vr user@User {userId} corrId agentConnId agentMessage = (mCt, m') <- withStore $ \db -> do (mContactId, m') <- liftIO $ createMemberContactInvited db user g m groupDirectInv void $ liftIO $ createMemberContactConn db user acId Nothing g mConn ConnPrepared mContactId subMode - mCt <- getContact db vr user mContactId + mCt <- getContact db cxt user mContactId pure (mCt, m') createInternalChatItem user (CDDirectSnd mCt) CIChatBanner (Just epochStart) createInternalChatItem user (CDDirectRcv mCt) (CIRcvDirectEvent $ RDEGroupInvLinkReceived gp) Nothing @@ -3409,7 +3409,7 @@ processAgentMessageConn vr user@User {userId} corrId agentConnId agentMessage = FwdMember memberId memberName -> do unknownRole <- unknownMemberRole gInfo let allowCreate = toCMEventTag chatMsgEvent /= XGrpLeave_ - withStore (\db -> getCreateUnknownGMByMemberId db vr user gInfo memberId memberName unknownRole allowCreate) >>= \case + withStore (\db -> getCreateUnknownGMByMemberId db cxt user gInfo memberId memberName unknownRole allowCreate) >>= \case Just (author, unknown) -> do when unknown $ toView $ CEvtUnknownMemberCreated user gInfo m author void $ withVerifiedMsg gInfo scopeInfo author parsedMsg msgTs $ @@ -3536,7 +3536,7 @@ processAgentMessageConn vr user@User {userId} corrId agentConnId agentMessage = -- SENT and RCVD events are received for messages that may be batched in single scope, -- so we can look up scope of first item scopeInfo <- case cis of - (ci : _) -> getGroupChatScopeInfoForItem db vr user gInfo (chatItemId' ci) + (ci : _) -> getGroupChatScopeInfoForItem db cxt user gInfo (chatItemId' ci) _ -> pure Nothing pure $ map (gItem scopeInfo) cis unless (null acis) $ toView $ CEvtChatItemsStatusesUpdated user acis @@ -3560,14 +3560,14 @@ processAgentMessageConn vr user@User {userId} corrId agentConnId agentMessage = deleteGroupConnections :: User -> GroupInfo -> Bool -> CM () deleteGroupConnections user gInfo@GroupInfo {membership} waitDelivery = do - vr <- chatVersionRange + cxt <- chatStoreCxt -- member records are not deleted to keep history - members <- getMembers vr + members <- getMembers cxt deleteMembersConnections' user members waitDelivery where - getMembers vr - | useRelays' gInfo, not (isRelay membership) = withStore' $ \db -> getGroupRelayMembers db vr user gInfo - | otherwise = withStore' $ \db -> getGroupMembers db vr user gInfo + getMembers cxt + | useRelays' gInfo, not (isRelay membership) = withStore' $ \db -> getGroupRelayMembers db cxt user gInfo + | otherwise = withStore' $ \db -> getGroupMembers db cxt user gInfo startDeliveryTaskWorkers :: CM () startDeliveryTaskWorkers = do @@ -3587,20 +3587,20 @@ getDeliveryTaskWorker hasWork deliveryKey = do runDeliveryTaskWorker :: AgentClient -> DeliveryWorkerKey -> Worker -> CM () runDeliveryTaskWorker a deliveryKey Worker {doWork} = do delay <- asks $ deliveryWorkerDelay . config - vr <- chatVersionRange + cxt <- chatStoreCxt -- TODO [relays] in future may be required to read groupInfo and user on each iteration for up to date state -- TODO - same for delivery jobs (runDeliveryJobWorker) gInfo <- withStore $ \db -> do user <- getUserByGroupId db groupId - getGroupInfo db vr user groupId + getGroupInfo db cxt user groupId forever $ do unless (delay == 0) $ liftIO $ threadDelay' delay lift $ waitForWork doWork - runDeliveryTaskOperation vr gInfo + runDeliveryTaskOperation cxt gInfo where (groupId, workerScope) = deliveryKey - runDeliveryTaskOperation :: VersionRangeChat -> GroupInfo -> CM () - runDeliveryTaskOperation vr gInfo = do + runDeliveryTaskOperation :: StoreCxt -> GroupInfo -> CM () + runDeliveryTaskOperation cxt gInfo = do withWork_ a doWork (withStore' $ \db -> getNextDeliveryTask db deliveryKey) $ \task -> processDeliveryTask task `catchAllErrors` \e -> do @@ -3616,7 +3616,7 @@ runDeliveryTaskWorker a deliveryKey Worker {doWork} = do withStore' $ \db -> setDeliveryTaskErrStatus db (deliveryTaskId task) "relay inactive" | otherwise -> withWorkItems a doWork (withStore' $ \db -> getNextDeliveryTasks db gInfo task) $ \nextTasks -> do - let (body, taskIds, largeTaskIds) = batchDeliveryTasks1 vr maxEncodedMsgLength nextTasks + let (body, taskIds, largeTaskIds) = batchDeliveryTasks1 (vr cxt) maxEncodedMsgLength nextTasks withStore' $ \db -> do createMsgDeliveryJob db gInfo jobScope (singleSenderGMId_ nextTasks) body forM_ taskIds $ \taskId -> updateDeliveryTaskStatus db taskId DTSProcessed @@ -3658,19 +3658,19 @@ getDeliveryJobWorker hasWork deliveryKey = do runDeliveryJobWorker :: AgentClient -> DeliveryWorkerKey -> Worker -> CM () runDeliveryJobWorker a deliveryKey Worker {doWork} = do delay <- asks $ deliveryWorkerDelay . config - vr <- chatVersionRange + cxt <- chatStoreCxt (user, gInfo) <- withStore $ \db -> do user <- getUserByGroupId db groupId - gInfo <- getGroupInfo db vr user groupId + gInfo <- getGroupInfo db cxt user groupId pure (user, gInfo) forever $ do unless (delay == 0) $ liftIO $ threadDelay' delay lift $ waitForWork doWork - runDeliveryJobOperation vr user gInfo + runDeliveryJobOperation cxt user gInfo where (groupId, workerScope) = deliveryKey - runDeliveryJobOperation :: VersionRangeChat -> User -> GroupInfo -> CM () - runDeliveryJobOperation vr user gInfo = do + runDeliveryJobOperation :: StoreCxt -> User -> GroupInfo -> CM () + runDeliveryJobOperation cxt user gInfo = do withWork_ a doWork (withStore' $ \db -> getNextDeliveryJob db deliveryKey) $ \job -> processDeliveryJob job `catchAllErrors` \e -> do @@ -3708,7 +3708,7 @@ runDeliveryJobWorker a deliveryKey Worker {doWork} = do where sendLoop :: Int -> Maybe GroupMemberId -> CM () sendLoop bucketSize cursorGMId_ = do - mems <- withStore' $ \db -> getGroupMembersByCursor db vr user gInfo cursorGMId_ singleSenderGMId_ bucketSize + mems <- withStore' $ \db -> getGroupMembersByCursor db cxt user gInfo cursorGMId_ singleSenderGMId_ bucketSize unless (null mems) $ do deliver body mems let cursorGMId' = groupMemberId' $ last mems @@ -3716,7 +3716,7 @@ runDeliveryJobWorker a deliveryKey Worker {doWork} = do unless (length mems < bucketSize) $ sendLoop bucketSize (Just cursorGMId') DJSMemberSupport scopeGMId -> do -- for member support scope we just load all recipients in one go, without cursor - modMs <- withStore' $ \db -> getGroupModerators db vr user gInfo + modMs <- withStore' $ \db -> getGroupModerators db cxt user gInfo let moderatorFilter m = memberCurrent m && maxVersion (memberChatVRange m) >= groupKnockingVersion @@ -3726,14 +3726,14 @@ runDeliveryJobWorker a deliveryKey Worker {doWork} = do if Just scopeGMId == singleSenderGMId_ then pure modMs' else do - scopeMem <- withStore $ \db -> getGroupMemberById db vr user scopeGMId + scopeMem <- withStore $ \db -> getGroupMemberById db cxt user scopeGMId pure $ scopeMem : modMs' unless (null mems) $ deliver body mems -- fully connected group | otherwise = case singleSenderGMId_ of Nothing -> throwChatError $ CEInternalError "delivery job worker: singleSenderGMId is required when not using relays" Just singleSenderGMId -> do - sender <- withStore $ \db -> getGroupMemberById db vr user singleSenderGMId + sender <- withStore $ \db -> getGroupMemberById db cxt user singleSenderGMId ms <- buildMemberList sender unless (null ms) $ deliver body ms where @@ -3743,14 +3743,14 @@ runDeliveryJobWorker a deliveryKey Worker {doWork} = do let introducedMemsIdxs = getRelationsIndexes MRIntroduced vec case jobScope of DJSGroup {jobSpec} -> do - ms <- withStore' $ \db -> getGroupMembersByIndexes db vr user gInfo introducedMemsIdxs + ms <- withStore' $ \db -> getGroupMembersByIndexes db cxt user gInfo introducedMemsIdxs pure $ filter shouldForwardTo ms where shouldForwardTo m | jobSpecImpliedPending jobSpec = memberCurrentOrPending m | otherwise = memberCurrent m DJSMemberSupport scopeGMId -> do - ms <- withStore' $ \db -> getSupportScopeMembersByIndexes db vr user gInfo scopeGMId introducedMemsIdxs + ms <- withStore' $ \db -> getSupportScopeMembersByIndexes db cxt user gInfo scopeGMId introducedMemsIdxs pure $ filter shouldForwardTo ms where shouldForwardTo m = groupMemberId' m == scopeGMId || currentModerator m @@ -3801,7 +3801,7 @@ getRelayRequestWorker hasWork = do runRelayRequestWorker :: AgentClient -> Worker -> CM () runRelayRequestWorker a Worker {doWork} = do - vr <- chatVersionRange + cxt <- chatStoreCxt (user, uclId) <- withStore $ \db -> do user <- getRelayUser db UserContactLink {userContactLinkId} <- getUserAddress db user @@ -3809,10 +3809,10 @@ runRelayRequestWorker a Worker {doWork} = do delayThreads <- liftIO TM.emptyIO forever $ do lift $ waitForWork doWork - runRelayRequestOperation delayThreads vr user uclId + runRelayRequestOperation delayThreads cxt user uclId where - runRelayRequestOperation :: TM.TMap GroupId (TMVar (Weak ThreadId)) -> VersionRangeChat -> User -> Int64 -> CM () - runRelayRequestOperation delayThreads vr user uclId = + runRelayRequestOperation :: TM.TMap GroupId (TMVar (Weak ThreadId)) -> StoreCxt -> User -> Int64 -> CM () + runRelayRequestOperation delayThreads cxt user uclId = withWork_ a doWork getReadyRelayRequest $ \(groupId, rrd) -> do ChatConfig {relayRequestExpiry} <- asks config @@ -3861,7 +3861,7 @@ runRelayRequestWorker a Worker {doWork} = do processRelayRequest :: GroupId -> RelayRequestData -> CM () processRelayRequest groupId rrd = do (gInfo, groupLink_) <- withStore $ \db -> do - gInfo <- getGroupInfo db vr user groupId + gInfo <- getGroupInfo db cxt user groupId groupLink_ <- liftIO $ runExceptT $ getGroupLink db user gInfo pure (gInfo, groupLink_) -- Check if relay link already exists (recovery case) @@ -3889,7 +3889,7 @@ runRelayRequestWorker a Worker {doWork} = do gInfo' <- withStore $ \db -> do void $ updateGroupProfile db user gInfo gp updateRelayGroupKeys db user gInfo pg rootKey memberPrivKey owners - getGroupInfo db vr user groupId + getGroupInfo db cxt user groupId pure (gInfo', sLnk) where validateGroupProfile :: GroupProfile -> CM () @@ -3921,5 +3921,5 @@ runRelayRequestWorker a Worker {doWork} = do pure (sigKeys, sLnk) acceptOwnerConnection :: RelayRequestData -> GroupInfo -> ShortLinkContact -> CM () acceptOwnerConnection RelayRequestData {relayInvId, reqChatVRange} gi relayLink = do - ownerMember <- withStore $ \db -> getHostMember db vr user groupId + ownerMember <- withStore $ \db -> getHostMember db cxt user groupId void $ acceptRelayJoinRequestAsync user uclId gi ownerMember relayInvId reqChatVRange relayLink diff --git a/src/Simplex/Chat/Store/Connections.hs b/src/Simplex/Chat/Store/Connections.hs index 60d865cb30..abc40f1e6e 100644 --- a/src/Simplex/Chat/Store/Connections.hs +++ b/src/Simplex/Chat/Store/Connections.hs @@ -74,8 +74,8 @@ getChatLockEntity db agentConnId = do -- TODO consider whether ConnFailed connections should be excluded: -- - from receiving: getConnectionEntity, getContactConnEntityByConnReqHash -- - from subscribing: getContactConnsToSub, getUCLConnsToSub, getMemberConnsToSub, getPendingConnsToSub -getConnectionEntity :: DB.Connection -> VersionRangeChat -> User -> AgentConnId -> ExceptT StoreError IO ConnectionEntity -getConnectionEntity db vr user@User {userId, userContactId} agentConnId = do +getConnectionEntity :: DB.Connection -> StoreCxt -> User -> AgentConnId -> ExceptT StoreError IO ConnectionEntity +getConnectionEntity db cxt user@User {userId, userContactId} agentConnId = do c@Connection {connType, entityId} <- getConnection_ case entityId of Nothing -> @@ -90,7 +90,7 @@ getConnectionEntity db vr user@User {userId, userContactId} agentConnId = do where getConnection_ :: ExceptT StoreError IO Connection getConnection_ = ExceptT $ do - firstRow (toConnection vr) (SEConnectionNotFound agentConnId) $ + firstRow (toConnection cxt) (SEConnectionNotFound agentConnId) $ DB.query db [sql| @@ -172,7 +172,7 @@ getConnectionEntity db vr user@User {userId, userContactId} agentConnId = do liftIO $ bitraverse (addGroupChatTags db) pure gm toGroupAndMember :: Connection -> GroupInfoRow :. GroupMemberRow -> (GroupInfo, GroupMember) toGroupAndMember c (groupInfoRow :. memberRow) = - let groupInfo = toGroupInfo vr userContactId [] groupInfoRow + let groupInfo = toGroupInfo cxt userContactId [] groupInfoRow member = toGroupMember userContactId memberRow in (groupInfo, (member :: GroupMember) {activeConn = Just c}) getUserContact_ :: Int64 -> ExceptT StoreError IO UserContact @@ -191,17 +191,17 @@ getConnectionEntity db vr user@User {userId, userContactId} agentConnId = do userContact_ [(cReq, groupId)] = Right UserContact {userContactLinkId, connReqContact = cReq, groupId} userContact_ _ = Left SEUserContactLinkNotFound -getConnectionEntityByConnReq :: DB.Connection -> VersionRangeChat -> User -> (ConnReqInvitation, ConnReqInvitation) -> IO (Maybe ConnectionEntity) -getConnectionEntityByConnReq db vr user@User {userId} (cReqSchema1, cReqSchema2) = do +getConnectionEntityByConnReq :: DB.Connection -> StoreCxt -> User -> (ConnReqInvitation, ConnReqInvitation) -> IO (Maybe ConnectionEntity) +getConnectionEntityByConnReq db cxt user@User {userId} (cReqSchema1, cReqSchema2) = do connId_ <- maybeFirstRow fromOnly $ DB.query db "SELECT agent_conn_id FROM connections WHERE user_id = ? AND conn_req_inv IN (?,?) LIMIT 1" (userId, cReqSchema1, cReqSchema2) - maybe (pure Nothing) (fmap eitherToMaybe . runExceptT . getConnectionEntity db vr user) connId_ + maybe (pure Nothing) (fmap eitherToMaybe . runExceptT . getConnectionEntity db cxt user) connId_ -getConnectionEntityViaShortLink :: DB.Connection -> VersionRangeChat -> User -> ShortLinkInvitation -> IO (Maybe (ConnReqInvitation, ConnectionEntity)) -getConnectionEntityViaShortLink db vr user@User {userId} shortLink = fmap eitherToMaybe $ runExceptT $ do +getConnectionEntityViaShortLink :: DB.Connection -> StoreCxt -> User -> ShortLinkInvitation -> IO (Maybe (ConnReqInvitation, ConnectionEntity)) +getConnectionEntityViaShortLink db cxt user@User {userId} shortLink = fmap eitherToMaybe $ runExceptT $ do (cReq, connId) <- ExceptT getConnReqConnId - (cReq,) <$> getConnectionEntity db vr user connId + (cReq,) <$> getConnectionEntity db cxt user connId where getConnReqConnId = firstRow' toConnReqConnId (SEInternalError "connection not found") $ @@ -222,8 +222,8 @@ getConnectionEntityViaShortLink db vr user@User {userId} shortLink = fmap either -- multiple connections can have same via_contact_uri_hash if request was repeated; -- this function searches for latest connection with contact so that "known contact" plan would be chosen; -- deleted connections are filtered out to allow re-connecting via same contact address -getContactConnEntityByConnReqHash :: DB.Connection -> VersionRangeChat -> User -> (ConnReqUriHash, ConnReqUriHash) -> IO (Maybe ConnectionEntity) -getContactConnEntityByConnReqHash db vr user@User {userId} (cReqHash1, cReqHash2) = do +getContactConnEntityByConnReqHash :: DB.Connection -> StoreCxt -> User -> (ConnReqUriHash, ConnReqUriHash) -> IO (Maybe ConnectionEntity) +getContactConnEntityByConnReqHash db cxt user@User {userId} (cReqHash1, cReqHash2) = do connId_ <- maybeFirstRow fromOnly $ DB.query @@ -240,7 +240,7 @@ getContactConnEntityByConnReqHash db vr user@User {userId} (cReqHash1, cReqHash2 ) c |] (userId, cReqHash1, cReqHash2, ConnDeleted) - maybe (pure Nothing) (fmap eitherToMaybe . runExceptT . getConnectionEntity db vr user) connId_ + maybe (pure Nothing) (fmap eitherToMaybe . runExceptT . getConnectionEntity db cxt user) connId_ getContactConnsToSub :: DB.Connection -> User -> Bool -> IO [ConnId] getContactConnsToSub db User {userId} filterToSubscribe = diff --git a/src/Simplex/Chat/Store/ContactRequest.hs b/src/Simplex/Chat/Store/ContactRequest.hs index 1e0ca8bdc5..27cb970b73 100644 --- a/src/Simplex/Chat/Store/ContactRequest.hs +++ b/src/Simplex/Chat/Store/ContactRequest.hs @@ -49,7 +49,7 @@ import Database.SQLite.Simple.QQ (sql) createOrUpdateContactRequest :: DB.Connection -> TVar ChaChaDRG -> - VersionRangeChat -> + StoreCxt -> User -> Int64 -> UserContactLink -> @@ -65,7 +65,7 @@ createOrUpdateContactRequest :: createOrUpdateContactRequest db gVar - vr + cxt user@User {userId, userContactId} uclId UserContactLink {addressSettings = AddressSettings {businessAddress}} @@ -89,7 +89,7 @@ createOrUpdateContactRequest Nothing -> liftIO (getAcceptedBusinessChat xContactId) >>= \case Just gInfo@GroupInfo {businessChat = Just BusinessChatInfo {customerId}} -> do - clientMember <- getGroupMemberByMemberId db vr user gInfo customerId + clientMember <- getGroupMemberByMemberId db cxt user gInfo customerId cr <- liftIO $ getContactRequestByXContactId xContactId pure $ RSAcceptedRequest cr (REBusinessChat gInfo clientMember) Just GroupInfo {businessChat = Nothing} -> throwError SEInvalidBusinessChatContactRequest @@ -104,7 +104,7 @@ createOrUpdateContactRequest getAcceptedContact :: XContactId -> IO (Maybe Contact) getAcceptedContact xContactId = do ct_ <- - maybeFirstRow (toContact vr user []) $ + maybeFirstRow (toContact cxt user []) $ DB.query db [sql| @@ -128,7 +128,7 @@ createOrUpdateContactRequest getAcceptedBusinessChat :: XContactId -> IO (Maybe GroupInfo) getAcceptedBusinessChat xContactId = do g_ <- - maybeFirstRow (toGroupInfo vr userContactId []) $ + maybeFirstRow (toGroupInfo cxt userContactId []) $ DB.query db (groupInfoQuery <> " WHERE g.business_xcontact_id = ? AND g.user_id = ? AND mu.contact_id = ?") @@ -200,12 +200,12 @@ createOrUpdateContactRequest "UPDATE contact_requests SET contact_id = ? WHERE contact_request_id = ?" (contactId, contactRequestId) ucr <- getContactRequest db user contactRequestId - ct <- getContact db vr user contactId + ct <- getContact db cxt user contactId pure $ RSCurrentRequest Nothing ucr (Just $ REContact ct) createBusinessChat = do let groupPreferences = maybe defaultBusinessGroupPrefs businessGroupPrefs $ preferences' user (gInfo@GroupInfo {groupId}, clientMember) <- - createBusinessRequestGroup db vr gVar user cReqChatVRange profile profileId ldn groupPreferences + createBusinessRequestGroup db cxt gVar user cReqChatVRange profile profileId ldn groupPreferences liftIO $ DB.execute db @@ -278,13 +278,13 @@ createOrUpdateContactRequest getRequestEntity UserContactRequest {contactRequestId, contactId_, businessGroupId_} = case (contactId_, businessGroupId_) of (Just contactId, Nothing) -> do - ct <- getContact db vr user contactId + ct <- getContact db cxt user contactId pure $ Just (REContact ct) (Nothing, Just businessGroupId) -> do - gInfo <- getGroupInfo db vr user businessGroupId + gInfo <- getGroupInfo db cxt user businessGroupId case gInfo of GroupInfo {businessChat = Just BusinessChatInfo {customerId}} -> do - clientMember <- getGroupMemberByMemberId db vr user gInfo customerId + clientMember <- getGroupMemberByMemberId db cxt user gInfo customerId pure $ Just (REBusinessChat gInfo clientMember) _ -> throwError SEInvalidBusinessChatContactRequest (Nothing, Nothing) -> pure Nothing diff --git a/src/Simplex/Chat/Store/Delivery.hs b/src/Simplex/Chat/Store/Delivery.hs index 393e008835..e60d51ac85 100644 --- a/src/Simplex/Chat/Store/Delivery.hs +++ b/src/Simplex/Chat/Store/Delivery.hs @@ -332,8 +332,8 @@ updateDeliveryJobStatus_ db jobId status errReason_ = do (status, errReason_, currentTs, jobId) -- TODO [relays] possible improvement is to prioritize owners and "active" members -getGroupMembersByCursor :: DB.Connection -> VersionRangeChat -> User -> GroupInfo -> Maybe GroupMemberId -> Maybe GroupMemberId -> Int -> IO [GroupMember] -getGroupMembersByCursor db vr user@User {userContactId} GroupInfo {groupId} cursorGMId_ singleSenderGMId_ count = do +getGroupMembersByCursor :: DB.Connection -> StoreCxt -> User -> GroupInfo -> Maybe GroupMemberId -> Maybe GroupMemberId -> Int -> IO [GroupMember] +getGroupMembersByCursor db cxt user@User {userContactId} GroupInfo {groupId} cursorGMId_ singleSenderGMId_ count = do gmIds :: [Int64] <- map fromOnly <$> case cursorGMId_ of Nothing -> @@ -351,13 +351,13 @@ getGroupMembersByCursor db vr user@User {userContactId} GroupInfo {groupId} curs :. (cursorGMId, count) ) #if defined(dbPostgres) - map (toContactMember vr user) <$> + map (toContactMember cxt user) <$> DB.query db (groupMemberQuery <> " WHERE m.group_member_id IN ?") (Only (In gmIds)) #else - rights <$> mapM (runExceptT . getGroupMemberById db vr user) gmIds + rights <$> mapM (runExceptT . getGroupMemberById db cxt user) gmIds #endif where query = diff --git a/src/Simplex/Chat/Store/Direct.hs b/src/Simplex/Chat/Store/Direct.hs index 60f898e52e..1c2f35f2bf 100644 --- a/src/Simplex/Chat/Store/Direct.hs +++ b/src/Simplex/Chat/Store/Direct.hs @@ -243,8 +243,8 @@ createRelayMemberConnectionAsync db user@User {userId} gInfo GroupMember {groupM where customUserProfileId_ = localProfileId <$> incognitoMembershipProfile gInfo -createRelayTestConnection :: DB.Connection -> VersionRangeChat -> User -> ConnId -> ConnStatus -> VersionChat -> SubscriptionMode -> ExceptT StoreError IO Connection -createRelayTestConnection db vr user@User {userId} agentConnId connStatus chatV subMode = do +createRelayTestConnection :: DB.Connection -> StoreCxt -> User -> ConnId -> ConnStatus -> VersionChat -> SubscriptionMode -> ExceptT StoreError IO Connection +createRelayTestConnection db cxt user@User {userId} agentConnId connStatus chatV subMode = do currentTs <- liftIO getCurrentTime liftIO $ DB.execute @@ -261,7 +261,7 @@ createRelayTestConnection db vr user@User {userId} agentConnId connStatus chatV :. (BI True, currentTs, currentTs) ) connId <- liftIO $ insertedRowId db - getConnectionById db vr user connId + getConnectionById db cxt user connId updateConnLinkData :: DB.Connection -> User -> Connection -> ConnReqContact -> ConnReqUriHash -> Maybe GroupLinkId -> VersionChat -> PQSupport -> IO () updateConnLinkData db User {userId} Connection {connId} cReq cReqHash groupLinkId_ chatV pqSup = do @@ -285,13 +285,13 @@ setPreparedGroupStartedConnection db groupId = do "UPDATE groups SET conn_link_started_connection = ?, updated_at = ? WHERE group_id = ?" (BI True, currentTs, groupId) -getConnReqContactXContactId :: DB.Connection -> VersionRangeChat -> User -> ConnReqUriHash -> ConnReqUriHash -> IO (Either (Maybe Connection) Contact) -getConnReqContactXContactId db vr user@User {userId} cReqHash1 cReqHash2 = - getContactByConnReqHash db vr user cReqHash1 cReqHash2 >>= maybe (Left <$> getConnection) (pure . Right) +getConnReqContactXContactId :: DB.Connection -> StoreCxt -> User -> ConnReqUriHash -> ConnReqUriHash -> IO (Either (Maybe Connection) Contact) +getConnReqContactXContactId db cxt user@User {userId} cReqHash1 cReqHash2 = + getContactByConnReqHash db cxt user cReqHash1 cReqHash2 >>= maybe (Left <$> getConnection) (pure . Right) where getConnection :: IO (Maybe Connection) getConnection = - maybeFirstRow (toConnection vr) $ + maybeFirstRow (toConnection cxt) $ DB.query db [sql| @@ -305,10 +305,10 @@ getConnReqContactXContactId db vr user@User {userId} cReqHash1 cReqHash2 = |] (userId, cReqHash1, userId, cReqHash2) -getContactByConnReqHash :: DB.Connection -> VersionRangeChat -> User -> ConnReqUriHash -> ConnReqUriHash -> IO (Maybe Contact) -getContactByConnReqHash db vr user@User {userId} cReqHash1 cReqHash2 = do +getContactByConnReqHash :: DB.Connection -> StoreCxt -> User -> ConnReqUriHash -> ConnReqUriHash -> IO (Maybe Contact) +getContactByConnReqHash db cxt user@User {userId} cReqHash1 cReqHash2 = do ct <- - maybeFirstRow (toContact vr user []) $ + maybeFirstRow (toContact cxt user []) $ DB.query db [sql| @@ -394,18 +394,18 @@ createIncognitoProfile db User {userId} p = do createdAt <- getCurrentTime createIncognitoProfile_ db userId createdAt p -createPreparedContact :: DB.Connection -> VersionRangeChat -> User -> Profile -> ACreatedConnLink -> Maybe SharedMsgId -> ExceptT StoreError IO Contact -createPreparedContact db vr user p connLinkToConnect welcomeSharedMsgId = do +createPreparedContact :: DB.Connection -> StoreCxt -> User -> Profile -> ACreatedConnLink -> Maybe SharedMsgId -> ExceptT StoreError IO Contact +createPreparedContact db cxt user p connLinkToConnect welcomeSharedMsgId = do currentTs <- liftIO getCurrentTime let prepared = Just (connLinkToConnect, welcomeSharedMsgId) ctUserPreferences = newContactUserPrefs user p contactId <- createContact_ db user p ctUserPreferences prepared "" currentTs - getContact db vr user contactId + getContact db cxt user contactId -updatePreparedContactUser :: DB.Connection -> VersionRangeChat -> User -> Contact -> User -> ExceptT StoreError IO Contact +updatePreparedContactUser :: DB.Connection -> StoreCxt -> User -> Contact -> User -> ExceptT StoreError IO Contact updatePreparedContactUser db - vr + cxt user Contact {contactId, localDisplayName = oldLDN, profile = profile@LocalProfile {profileId, displayName}} newUser@User {userId = newUserId} = do @@ -438,15 +438,15 @@ updatePreparedContactUser |] (newUserId, currentTs, contactId) safeDeleteLDN db user oldLDN - getContact db vr newUser contactId + getContact db cxt newUser contactId -createDirectContact :: DB.Connection -> VersionRangeChat -> User -> Connection -> Profile -> ExceptT StoreError IO Contact -createDirectContact db vr user Connection {connId, localAlias} p = do +createDirectContact :: DB.Connection -> StoreCxt -> User -> Connection -> Profile -> ExceptT StoreError IO Contact +createDirectContact db cxt user Connection {connId, localAlias} p = do currentTs <- liftIO getCurrentTime let ctUserPreferences = newContactUserPrefs user p contactId <- createContact_ db user p ctUserPreferences Nothing localAlias currentTs liftIO $ DB.execute db "UPDATE connections SET contact_id = ?, updated_at = ? WHERE connection_id = ?" (contactId, currentTs, connId) - getContact db vr user contactId + getContact db cxt user contactId deleteContactConnections :: DB.Connection -> User -> Contact -> IO () deleteContactConnections db User {userId} Contact {contactId} = do @@ -500,13 +500,13 @@ deleteContactWithoutGroups db user@User {userId} ct@Contact {contactId, localDis deleteUnusedIncognitoProfileById_ db user profileId -- TODO remove in future versions: only used for legacy contact cleanup -getDeletedContacts :: DB.Connection -> VersionRangeChat -> User -> IO [Contact] -getDeletedContacts db vr user@User {userId} = do +getDeletedContacts :: DB.Connection -> StoreCxt -> User -> IO [Contact] +getDeletedContacts db cxt user@User {userId} = do contactIds <- map fromOnly <$> DB.query db "SELECT contact_id FROM contacts WHERE user_id = ? AND deleted = 1" (Only userId) - rights <$> mapM (runExceptT . getDeletedContact db vr user) contactIds + rights <$> mapM (runExceptT . getDeletedContact db cxt user) contactIds -getDeletedContact :: DB.Connection -> VersionRangeChat -> User -> Int64 -> ExceptT StoreError IO Contact -getDeletedContact db vr user contactId = getContact_ db vr user contactId True +getDeletedContact :: DB.Connection -> StoreCxt -> User -> Int64 -> ExceptT StoreError IO Contact +getDeletedContact db cxt user contactId = getContact_ db cxt user contactId True deleteContactProfile_ :: DB.Connection -> UserId -> ContactId -> IO () deleteContactProfile_ db userId contactId = @@ -756,15 +756,15 @@ updateContactLDN_ db user@User {userId} contactId displayName newName updatedAt (newName, updatedAt, userId, contactId) safeDeleteLDN db user displayName -getContactByName :: DB.Connection -> VersionRangeChat -> User -> ContactName -> ExceptT StoreError IO Contact -getContactByName db vr user localDisplayName = do +getContactByName :: DB.Connection -> StoreCxt -> User -> ContactName -> ExceptT StoreError IO Contact +getContactByName db cxt user localDisplayName = do cId <- getContactIdByName db user localDisplayName - getContact db vr user cId + getContact db cxt user cId -getUserContacts :: DB.Connection -> VersionRangeChat -> User -> IO [Contact] -getUserContacts db vr user@User {userId} = do +getUserContacts :: DB.Connection -> StoreCxt -> User -> IO [Contact] +getUserContacts db cxt user@User {userId} = do contactIds <- map fromOnly <$> DB.query db "SELECT contact_id FROM contacts WHERE user_id = ? AND deleted = 0" (Only userId) - contacts <- rights <$> mapM (runExceptT . getContact db vr user) contactIds + contacts <- rights <$> mapM (runExceptT . getContact db cxt user) contactIds pure $ filter (\Contact {activeConn} -> isJust activeConn) contacts getUserContactLinkIdByCReq :: DB.Connection -> Int64 -> ExceptT StoreError IO (Maybe Int64) @@ -890,22 +890,22 @@ getContactIdByName db User {userId} cName = ExceptT . firstRow fromOnly (SEContactNotFoundByName cName) $ DB.query db "SELECT contact_id FROM contacts WHERE user_id = ? AND local_display_name = ? AND deleted = 0" (userId, cName) -getContactViaShortLinkToConnect :: forall c. ConnectionModeI c => DB.Connection -> VersionRangeChat -> User -> ConnShortLink c -> ExceptT StoreError IO (Maybe (ConnectionRequestUri c, Contact)) -getContactViaShortLinkToConnect db vr user@User {userId} shortLink = do +getContactViaShortLinkToConnect :: forall c. ConnectionModeI c => DB.Connection -> StoreCxt -> User -> ConnShortLink c -> ExceptT StoreError IO (Maybe (ConnectionRequestUri c, Contact)) +getContactViaShortLinkToConnect db cxt user@User {userId} shortLink = do liftIO (maybeFirstRow id $ DB.query db "SELECT contact_id, conn_full_link_to_connect FROM contacts WHERE user_id = ? AND conn_short_link_to_connect = ?" (userId, shortLink)) >>= \case Just (ctId :: Int64, Just (ACR cMode cReq)) -> case testEquality cMode (sConnectionMode @c) of - Just Refl -> Just . (cReq,) <$> getContact db vr user ctId + Just Refl -> Just . (cReq,) <$> getContact db cxt user ctId Nothing -> pure Nothing _ -> pure Nothing -getContact :: DB.Connection -> VersionRangeChat -> User -> Int64 -> ExceptT StoreError IO Contact -getContact db vr user contactId = getContact_ db vr user contactId False +getContact :: DB.Connection -> StoreCxt -> User -> Int64 -> ExceptT StoreError IO Contact +getContact db cxt user contactId = getContact_ db cxt user contactId False -getContact_ :: DB.Connection -> VersionRangeChat -> User -> Int64 -> Bool -> ExceptT StoreError IO Contact -getContact_ db vr user@User {userId} contactId deleted = do +getContact_ :: DB.Connection -> StoreCxt -> User -> Int64 -> Bool -> ExceptT StoreError IO Contact +getContact_ db cxt user@User {userId} contactId deleted = do chatTags <- liftIO $ getDirectChatTags db contactId - ExceptT . firstRow (toContact vr user chatTags) (SEContactNotFound contactId) $ + ExceptT . firstRow (toContact cxt user chatTags) (SEContactNotFound contactId) $ DB.query db [sql| @@ -932,8 +932,8 @@ getUserByContactRequestId db contactRequestId = ExceptT . firstRow toUser (SEUserNotFoundByContactRequestId contactRequestId) $ DB.query db (userQuery <> " JOIN contact_requests cr ON cr.user_id = u.user_id WHERE cr.contact_request_id = ?") (Only contactRequestId) -getContactConnections :: DB.Connection -> VersionRangeChat -> UserId -> Contact -> IO [Connection] -getContactConnections db vr userId Contact {contactId} = +getContactConnections :: DB.Connection -> StoreCxt -> UserId -> Contact -> IO [Connection] +getContactConnections db cxt userId Contact {contactId} = connections =<< liftIO getConnections_ where getConnections_ = @@ -950,11 +950,11 @@ getContactConnections db vr userId Contact {contactId} = |] (userId, userId, contactId) connections [] = pure [] - connections rows = pure $ map (toConnection vr) rows + connections rows = pure $ map (toConnection cxt) rows -getConnectionById :: DB.Connection -> VersionRangeChat -> User -> Int64 -> ExceptT StoreError IO Connection -getConnectionById db vr User {userId} connId = ExceptT $ do - firstRow (toConnection vr) (SEConnectionNotFoundById connId) $ +getConnectionById :: DB.Connection -> StoreCxt -> User -> Int64 -> ExceptT StoreError IO Connection +getConnectionById db cxt User {userId} connId = ExceptT $ do + firstRow (toConnection cxt) (SEConnectionNotFoundById connId) $ DB.query db [sql| diff --git a/src/Simplex/Chat/Store/Files.hs b/src/Simplex/Chat/Store/Files.hs index 951fce8958..5289a3b304 100644 --- a/src/Simplex/Chat/Store/Files.hs +++ b/src/Simplex/Chat/Store/Files.hs @@ -570,19 +570,19 @@ getRcvFileTransfer_ db userId fileId = do Just fp -> pure fp cancelled = maybe False unBI cancelled_ -acceptRcvInlineFT :: DB.Connection -> VersionRangeChat -> User -> FileTransferId -> FilePath -> ExceptT StoreError IO AChatItem -acceptRcvInlineFT db vr user fileId filePath = do +acceptRcvInlineFT :: DB.Connection -> StoreCxt -> User -> FileTransferId -> FilePath -> ExceptT StoreError IO AChatItem +acceptRcvInlineFT db cxt user fileId filePath = do liftIO $ acceptRcvFT_ db user fileId filePath False (Just IFMOffer) =<< getCurrentTime - getChatItemByFileId db vr user fileId + getChatItemByFileId db cxt user fileId startRcvInlineFT :: DB.Connection -> User -> RcvFileTransfer -> FilePath -> Maybe InlineFileMode -> IO () startRcvInlineFT db user RcvFileTransfer {fileId} filePath rcvFileInline = acceptRcvFT_ db user fileId filePath False rcvFileInline =<< getCurrentTime -xftpAcceptRcvFT :: DB.Connection -> VersionRangeChat -> User -> FileTransferId -> FilePath -> Bool -> ExceptT StoreError IO AChatItem -xftpAcceptRcvFT db vr user fileId filePath userApprovedRelays = do +xftpAcceptRcvFT :: DB.Connection -> StoreCxt -> User -> FileTransferId -> FilePath -> Bool -> ExceptT StoreError IO AChatItem +xftpAcceptRcvFT db cxt user fileId filePath userApprovedRelays = do liftIO $ acceptRcvFT_ db user fileId filePath userApprovedRelays Nothing =<< getCurrentTime - getChatItemByFileId db vr user fileId + getChatItemByFileId db cxt user fileId acceptRcvFT_ :: DB.Connection -> User -> FileTransferId -> FilePath -> Bool -> Maybe InlineFileMode -> UTCTime -> IO () acceptRcvFT_ db User {userId} fileId filePath userApprovedRelays rcvFileInline currentTs = do @@ -860,9 +860,9 @@ getLocalCryptoFile db userId fileId sent = pure $ CryptoFile filePath fileCryptoArgs _ -> throwError $ SEFileNotFound fileId -updateDirectCIFileStatus :: forall d. MsgDirectionI d => DB.Connection -> VersionRangeChat -> User -> Int64 -> CIFileStatus d -> ExceptT StoreError IO AChatItem -updateDirectCIFileStatus db vr user fileId fileStatus = do - aci@(AChatItem cType d cInfo ci) <- getChatItemByFileId db vr user fileId +updateDirectCIFileStatus :: forall d. MsgDirectionI d => DB.Connection -> StoreCxt -> User -> Int64 -> CIFileStatus d -> ExceptT StoreError IO AChatItem +updateDirectCIFileStatus db cxt user fileId fileStatus = do + aci@(AChatItem cType d cInfo ci) <- getChatItemByFileId db cxt user fileId case (cType, testEquality d $ msgDirection @d) of (SCTDirect, Just Refl) -> do liftIO $ updateCIFileStatus db user fileId fileStatus diff --git a/src/Simplex/Chat/Store/Groups.hs b/src/Simplex/Chat/Store/Groups.hs index 8c207d99a7..4e38ef83e2 100644 --- a/src/Simplex/Chat/Store/Groups.hs +++ b/src/Simplex/Chat/Store/Groups.hs @@ -247,9 +247,9 @@ createGroupLink db gVar user@User {userId} groupInfo@GroupInfo {groupId, localDi void $ createConnection_ db userId ConnUserContact (Just userContactLinkId) agentConnId ConnNew initialChatVersion chatInitialVRange Nothing Nothing Nothing 0 currentTs subMode PQSupportOff getGroupLink db user groupInfo -getGroupLinkConnection :: DB.Connection -> VersionRangeChat -> User -> GroupInfo -> ExceptT StoreError IO Connection -getGroupLinkConnection db vr User {userId} groupInfo@GroupInfo {groupId} = - ExceptT . firstRow (toConnection vr) (SEGroupLinkNotFound groupInfo) $ +getGroupLinkConnection :: DB.Connection -> StoreCxt -> User -> GroupInfo -> ExceptT StoreError IO Connection +getGroupLinkConnection db cxt User {userId} groupInfo@GroupInfo {groupId} = + ExceptT . firstRow (toConnection cxt) (SEGroupLinkNotFound groupInfo) $ DB.query db [sql| @@ -344,8 +344,8 @@ setGroupLinkShortLink db gLnk@GroupLink {userContactLinkId, connLinkContact = CC pure gLnk {connLinkContact = CCLink connFullLink (Just shortLink), shortLinkDataSet = True, shortLinkLargeDataSet = BoolDef True} -- | creates completely new group with a single member - the current user -createNewGroup :: DB.Connection -> VersionRangeChat -> User -> GroupProfile -> Maybe Profile -> Bool -> MemberId -> Maybe GroupKeys -> Maybe Int64 -> ExceptT StoreError IO GroupInfo -createNewGroup db vr user@User {userId} groupProfile incognitoProfile useRelays memberId groupKeys publicMemberCount_ = ExceptT $ do +createNewGroup :: DB.Connection -> StoreCxt -> User -> GroupProfile -> Maybe Profile -> Bool -> MemberId -> Maybe GroupKeys -> Maybe Int64 -> ExceptT StoreError IO GroupInfo +createNewGroup db cxt user@User {userId} groupProfile incognitoProfile useRelays memberId groupKeys publicMemberCount_ = ExceptT $ do let GroupProfile {displayName, fullName, shortDescr, description, image, publicGroup, groupPreferences, memberAdmission} = groupProfile (groupType_, groupLink_, publicGroupId_) = case publicGroup of Just PublicGroupProfile {groupType, groupLink, publicGroupId} -> (Just groupType, Just groupLink, Just publicGroupId) @@ -389,7 +389,7 @@ createNewGroup db vr user@User {userId} groupProfile incognitoProfile useRelays ) insertedRowId db let memberPubKey = C.publicKey . memberPrivKey <$> groupKeys - membership <- createContactMemberInv_ db user groupId Nothing user (MemberIdRole memberId GROwner) GCUserMember GSMemCreator IBUser customUserProfileId memberPubKey currentTs vr + membership <- createContactMemberInv_ db user groupId Nothing user (MemberIdRole memberId GROwner) GCUserMember GSMemCreator IBUser customUserProfileId memberPubKey currentTs (vr cxt) let chatSettings = ChatSettings {enableNtfs = MFAll, sendRcpts = Nothing, favorite = False} pure GroupInfo @@ -419,13 +419,13 @@ createNewGroup db vr user@User {userId} groupProfile incognitoProfile useRelays } -- | creates a new group record for the group the current user was invited to, or returns an existing one -createGroupInvitation :: DB.Connection -> VersionRangeChat -> User -> Contact -> GroupInvitation -> Maybe ProfileId -> ExceptT StoreError IO (GroupInfo, GroupMemberId) +createGroupInvitation :: DB.Connection -> StoreCxt -> User -> Contact -> GroupInvitation -> Maybe ProfileId -> ExceptT StoreError IO (GroupInfo, GroupMemberId) createGroupInvitation _ _ _ Contact {localDisplayName, activeConn = Nothing} _ _ = throwError $ SEContactNotReady localDisplayName -createGroupInvitation db vr user@User {userId} contact@Contact {contactId, activeConn = Just Connection {peerChatVRange}} GroupInvitation {fromMember, invitedMember, connRequest, groupProfile, business} incognitoProfileId = do +createGroupInvitation db cxt user@User {userId} contact@Contact {contactId, activeConn = Just Connection {peerChatVRange}} GroupInvitation {fromMember, invitedMember, connRequest, groupProfile, business} incognitoProfileId = do liftIO getInvitationGroupId_ >>= \case Nothing -> createGroupInvitation_ Just gId -> do - gInfo@GroupInfo {membership, groupProfile = p'} <- getGroupInfo db vr user gId + gInfo@GroupInfo {membership, groupProfile = p'} <- getGroupInfo db cxt user gId hostId <- getHostMemberId_ db user gId let GroupMember {groupMemberId, memberId, memberRole} = membership MemberIdRole {memberId = invMemberId, memberRole = invMemberRole} = invitedMember @@ -464,9 +464,9 @@ createGroupInvitation db vr user@User {userId} contact@Contact {contactId, activ |] ((profileId, localDisplayName, connRequest, userId, BI True, currentTs, currentTs, currentTs, currentTs) :. businessChatInfoRow business) insertedRowId db - let hostVRange = adjustedMemberVRange vr peerChatVRange + let hostVRange = adjustedMemberVRange (vr cxt) peerChatVRange GroupMember {groupMemberId} <- createContactMemberInv_ db user groupId Nothing contact fromMember GCHostMember GSMemInvited IBUnknown Nothing Nothing currentTs hostVRange - membership <- createContactMemberInv_ db user groupId (Just groupMemberId) user invitedMember GCUserMember GSMemInvited (IBContact contactId) incognitoProfileId Nothing currentTs vr + membership <- createContactMemberInv_ db user groupId (Just groupMemberId) user invitedMember GCUserMember GSMemInvited (IBContact contactId) incognitoProfileId Nothing currentTs (vr cxt) let chatSettings = ChatSettings {enableNtfs = MFAll, sendRcpts = Nothing, favorite = False} pure ( GroupInfo @@ -608,8 +608,8 @@ deleteContactCardKeepConn db connId Contact {contactId, profile = LocalProfile { DB.execute db "DELETE FROM contacts WHERE contact_id = ?" (Only contactId) DB.execute db "DELETE FROM contact_profiles WHERE contact_profile_id = ?" (Only profileId) -createPreparedGroup :: DB.Connection -> TVar ChaChaDRG -> VersionRangeChat -> User -> GroupProfile -> Bool -> CreatedLinkContact -> Maybe SharedMsgId -> Bool -> GroupMemberRole -> Maybe Int64 -> ExceptT StoreError IO (GroupInfo, Maybe GroupMember) -createPreparedGroup db gVar vr user@User {userId, userContactId} groupProfile business connLinkToConnect welcomeSharedMsgId useRelays userMemberRole publicMemberCount_ = do +createPreparedGroup :: DB.Connection -> TVar ChaChaDRG -> StoreCxt -> User -> GroupProfile -> Bool -> CreatedLinkContact -> Maybe SharedMsgId -> Bool -> GroupMemberRole -> Maybe Int64 -> ExceptT StoreError IO (GroupInfo, Maybe GroupMember) +createPreparedGroup db gVar cxt user@User {userId, userContactId} groupProfile business connLinkToConnect welcomeSharedMsgId useRelays userMemberRole publicMemberCount_ = do currentTs <- liftIO getCurrentTime let prepared = Just (connLinkToConnect, welcomeSharedMsgId) (groupId, groupLDN) <- createGroup_ db userId groupProfile prepared Nothing useRelays Nothing publicMemberCount_ currentTs @@ -623,11 +623,11 @@ createPreparedGroup db gVar vr user@User {userId, userContactId} groupProfile bu else pure $ MemberId $ encodeUtf8 groupLDN <> "_user_unknown_id" let userMember = MemberIdRole userMemberId userMemberRole -- TODO [member keys] user key must be included here. Should key be added when group is prepared? - membership <- createContactMemberInv_ db user groupId hostMemberId_ user userMember GCUserMember GSMemUnknown IBUnknown Nothing Nothing currentTs vr - hostMember_ <- forM hostMemberId_ $ getGroupMember db vr user groupId + membership <- createContactMemberInv_ db user groupId hostMemberId_ user userMember GCUserMember GSMemUnknown IBUnknown Nothing Nothing currentTs (vr cxt) + hostMember_ <- forM hostMemberId_ $ getGroupMember db cxt user groupId forM_ hostMember_ $ \hostMember -> when business $ liftIO $ setGroupBusinessChatInfo groupId membership hostMember - g <- getGroupInfo db vr user groupId + g <- getGroupInfo db cxt user groupId pure (g, hostMember_) where insertHost_ currentTs groupId groupLDN = do @@ -667,13 +667,13 @@ updateBusinessChatInfo db groupId businessChatInfo = |] (businessChatInfoRow businessChatInfo :. (Only groupId)) -updatePreparedGroupUser :: DB.Connection -> VersionRangeChat -> User -> GroupInfo -> Maybe GroupMember -> User -> ExceptT StoreError IO GroupInfo -updatePreparedGroupUser db vr user gInfo@GroupInfo {groupId, membership} hostMember_ newUser@User {userId = newUserId} = do +updatePreparedGroupUser :: DB.Connection -> StoreCxt -> User -> GroupInfo -> Maybe GroupMember -> User -> ExceptT StoreError IO GroupInfo +updatePreparedGroupUser db cxt user gInfo@GroupInfo {groupId, membership} hostMember_ newUser@User {userId = newUserId} = do currentTs <- liftIO getCurrentTime updateGroup gInfo currentTs liftIO $ updateMembership membership currentTs forM_ hostMember_ $ \hostMember -> updateHostMember hostMember currentTs - getGroupInfo db vr newUser groupId + getGroupInfo db cxt newUser groupId where updateGroup GroupInfo {localDisplayName = oldGroupLDN, groupProfile = GroupProfile {displayName = groupDisplayName}} currentTs = ExceptT . withLocalDisplayName db newUserId groupDisplayName $ \newGroupLDN -> runExceptT $ do @@ -739,21 +739,21 @@ updatePreparedGroupUser db vr user gInfo@GroupInfo {groupId, membership} hostMem (newUserId, currentTs, hostProfileId) safeDeleteLDN db user oldHostLDN -updatePreparedUserAndHostMembersInvited :: DB.Connection -> VersionRangeChat -> User -> GroupInfo -> GroupMember -> GroupLinkInvitation -> ExceptT StoreError IO (GroupInfo, GroupMember) -updatePreparedUserAndHostMembersInvited db vr user gInfo hostMember GroupLinkInvitation {fromMember, fromMemberName, invitedMember, groupProfile, accepted, business} = do +updatePreparedUserAndHostMembersInvited :: DB.Connection -> StoreCxt -> User -> GroupInfo -> GroupMember -> GroupLinkInvitation -> ExceptT StoreError IO (GroupInfo, GroupMember) +updatePreparedUserAndHostMembersInvited db cxt user gInfo hostMember GroupLinkInvitation {fromMember, fromMemberName, invitedMember, groupProfile, accepted, business} = do let fromMemberProfile = profileFromName fromMemberName initialStatus = maybe GSMemAccepted (acceptanceToStatus $ memberAdmission groupProfile) accepted - updatePreparedUserAndHostMembers' db vr user gInfo hostMember fromMember fromMemberProfile invitedMember groupProfile business initialStatus + updatePreparedUserAndHostMembers' db cxt user gInfo hostMember fromMember fromMemberProfile invitedMember groupProfile business initialStatus -updatePreparedUserAndHostMembersRejected :: DB.Connection -> VersionRangeChat -> User -> GroupInfo -> GroupMember -> GroupLinkRejection -> ExceptT StoreError IO (GroupInfo, GroupMember) -updatePreparedUserAndHostMembersRejected db vr user gInfo hostMember GroupLinkRejection {fromMember = fromMember@MemberIdRole {memberId}, invitedMember, groupProfile} = do +updatePreparedUserAndHostMembersRejected :: DB.Connection -> StoreCxt -> User -> GroupInfo -> GroupMember -> GroupLinkRejection -> ExceptT StoreError IO (GroupInfo, GroupMember) +updatePreparedUserAndHostMembersRejected db cxt user gInfo hostMember GroupLinkRejection {fromMember = fromMember@MemberIdRole {memberId}, invitedMember, groupProfile} = do let fromMemberProfile = profileFromName $ nameFromMemberId memberId - updatePreparedUserAndHostMembers' db vr user gInfo hostMember fromMember fromMemberProfile invitedMember groupProfile Nothing GSMemRejected + updatePreparedUserAndHostMembers' db cxt user gInfo hostMember fromMember fromMemberProfile invitedMember groupProfile Nothing GSMemRejected -updatePreparedUserAndHostMembers' :: DB.Connection -> VersionRangeChat -> User -> GroupInfo -> GroupMember -> MemberIdRole -> Profile -> MemberIdRole -> GroupProfile -> Maybe BusinessChatInfo -> GroupMemberStatus -> ExceptT StoreError IO (GroupInfo, GroupMember) +updatePreparedUserAndHostMembers' :: DB.Connection -> StoreCxt -> User -> GroupInfo -> GroupMember -> MemberIdRole -> Profile -> MemberIdRole -> GroupProfile -> Maybe BusinessChatInfo -> GroupMemberStatus -> ExceptT StoreError IO (GroupInfo, GroupMember) updatePreparedUserAndHostMembers' db - vr + cxt user gInfo@GroupInfo {groupId, membership, groupProfile = gp, businessChat} hostMember @@ -772,7 +772,7 @@ updatePreparedUserAndHostMembers' void $ updateGroupProfile db user gInfo groupProfile when (isJust businessChat && isJust business) $ liftIO $ updateBusinessChatInfo db groupId business - gInfo' <- getGroupInfo db vr user groupId + gInfo' <- getGroupInfo db cxt user groupId pure (gInfo', hostMember') where updateUserMember currentTs = do @@ -803,23 +803,23 @@ updatePreparedUserAndHostMembers' WHERE group_member_id = ? |] (memberId, memberRole, currentTs, gmId) - getGroupMemberById db vr user gmId + getGroupMemberById db cxt user gmId -createGroupInvitedViaLink :: DB.Connection -> VersionRangeChat -> User -> Connection -> GroupLinkInvitation -> ExceptT StoreError IO (GroupInfo, GroupMember) -createGroupInvitedViaLink db vr user conn GroupLinkInvitation {fromMember, fromMemberName, invitedMember, groupProfile, accepted, business} = do +createGroupInvitedViaLink :: DB.Connection -> StoreCxt -> User -> Connection -> GroupLinkInvitation -> ExceptT StoreError IO (GroupInfo, GroupMember) +createGroupInvitedViaLink db cxt user conn GroupLinkInvitation {fromMember, fromMemberName, invitedMember, groupProfile, accepted, business} = do let fromMemberProfile = profileFromName fromMemberName initialStatus = maybe GSMemAccepted (acceptanceToStatus $ memberAdmission groupProfile) accepted - createGroupViaLink' db vr user conn fromMember fromMemberProfile invitedMember groupProfile business initialStatus + createGroupViaLink' db cxt user conn fromMember fromMemberProfile invitedMember groupProfile business initialStatus -createGroupRejectedViaLink :: DB.Connection -> VersionRangeChat -> User -> Connection -> GroupLinkRejection -> ExceptT StoreError IO (GroupInfo, GroupMember) -createGroupRejectedViaLink db vr user conn GroupLinkRejection {fromMember = fromMember@MemberIdRole {memberId}, invitedMember, groupProfile} = do +createGroupRejectedViaLink :: DB.Connection -> StoreCxt -> User -> Connection -> GroupLinkRejection -> ExceptT StoreError IO (GroupInfo, GroupMember) +createGroupRejectedViaLink db cxt user conn GroupLinkRejection {fromMember = fromMember@MemberIdRole {memberId}, invitedMember, groupProfile} = do let fromMemberProfile = profileFromName $ nameFromMemberId memberId - createGroupViaLink' db vr user conn fromMember fromMemberProfile invitedMember groupProfile Nothing GSMemRejected + createGroupViaLink' db cxt user conn fromMember fromMemberProfile invitedMember groupProfile Nothing GSMemRejected -createGroupViaLink' :: DB.Connection -> VersionRangeChat -> User -> Connection -> MemberIdRole -> Profile -> MemberIdRole -> GroupProfile -> Maybe BusinessChatInfo -> GroupMemberStatus -> ExceptT StoreError IO (GroupInfo, GroupMember) +createGroupViaLink' :: DB.Connection -> StoreCxt -> User -> Connection -> MemberIdRole -> Profile -> MemberIdRole -> GroupProfile -> Maybe BusinessChatInfo -> GroupMemberStatus -> ExceptT StoreError IO (GroupInfo, GroupMember) createGroupViaLink' db - vr + cxt user@User {userId, userContactId} Connection {connId, customUserProfileId} fromMember @@ -834,9 +834,9 @@ createGroupViaLink' liftIO $ DB.execute db "UPDATE connections SET conn_type = ?, group_member_id = ?, updated_at = ? WHERE connection_id = ?" (ConnMember, hostMemberId, currentTs, connId) -- using IBUnknown since host is created without contact -- TODO [member keys] this is currently not used with public groups. If it needs to be used, member keys need to be added - void $ createContactMemberInv_ db user groupId (Just hostMemberId) user invitedMember GCUserMember membershipStatus IBUnknown customUserProfileId Nothing currentTs vr + void $ createContactMemberInv_ db user groupId (Just hostMemberId) user invitedMember GCUserMember membershipStatus IBUnknown customUserProfileId Nothing currentTs (vr cxt) liftIO $ setViaGroupLinkUri db groupId connId - (,) <$> getGroupInfo db vr user groupId <*> getGroupMemberById db vr user hostMemberId + (,) <$> getGroupInfo db cxt user groupId <*> getGroupMemberById db cxt user hostMemberId where insertHost_ currentTs groupId = do (localDisplayName, profileId) <- createNewMemberProfile_ db user fromMemberProfile currentTs @@ -897,10 +897,10 @@ setGroupInvitationChatItemId db User {userId} groupId chatItemId = do -- TODO return the last connection that is ready, not any last connection -- requires updating connection status -getGroup :: DB.Connection -> VersionRangeChat -> User -> GroupId -> ExceptT StoreError IO Group -getGroup db vr user groupId = do - gInfo <- getGroupInfo db vr user groupId - members <- liftIO $ getGroupMembers db vr user gInfo +getGroup :: DB.Connection -> StoreCxt -> User -> GroupId -> ExceptT StoreError IO Group +getGroup db cxt user groupId = do + gInfo <- getGroupInfo db cxt user groupId + members <- liftIO $ getGroupMembers db cxt user gInfo pure $ Group gInfo members deleteGroupChatItems :: DB.Connection -> User -> GroupInfo -> IO () @@ -994,18 +994,18 @@ deleteGroupProfile_ db userId groupId = |] (userId, groupId) -getInProgressGroups :: DB.Connection -> VersionRangeChat -> User -> UTCTime -> IO [GroupInfo] -getInProgressGroups db vr user@User {userId} createdAtCutoff = do +getInProgressGroups :: DB.Connection -> StoreCxt -> User -> UTCTime -> IO [GroupInfo] +getInProgressGroups db cxt user@User {userId} createdAtCutoff = do groupIds <- map fromOnly <$> DB.query db "SELECT group_id FROM groups WHERE user_id = ? AND creating_in_progress = 1 AND created_at <= ?" (userId, createdAtCutoff) - rights <$> mapM (runExceptT . getGroupInfo db vr user) groupIds + rights <$> mapM (runExceptT . getGroupInfo db cxt user) groupIds -getBaseGroupDetails :: DB.Connection -> VersionRangeChat -> User -> Maybe ContactId -> Maybe Text -> IO [GroupInfo] -getBaseGroupDetails db vr User {userId, userContactId} _contactId_ search_ = do - map (toGroupInfo vr userContactId []) +getBaseGroupDetails :: DB.Connection -> StoreCxt -> User -> Maybe ContactId -> Maybe Text -> IO [GroupInfo] +getBaseGroupDetails db cxt User {userId, userContactId} _contactId_ search_ = do + map (toGroupInfo cxt userContactId []) <$> DB.query db (groupInfoQuery <> " " <> condition) (userId, userContactId, search, search, search, search) where condition = @@ -1033,22 +1033,22 @@ getContactGroupPreferences db User {userId} Contact {contactId} = do |] (userId, contactId) -getGroupInfoByName :: DB.Connection -> VersionRangeChat -> User -> GroupName -> ExceptT StoreError IO GroupInfo -getGroupInfoByName db vr user gName = do +getGroupInfoByName :: DB.Connection -> StoreCxt -> User -> GroupName -> ExceptT StoreError IO GroupInfo +getGroupInfoByName db cxt user gName = do gId <- getGroupIdByName db user gName - getGroupInfo db vr user gId + getGroupInfo db cxt user gId -getGroupMember :: DB.Connection -> VersionRangeChat -> User -> GroupId -> GroupMemberId -> ExceptT StoreError IO GroupMember -getGroupMember db vr user@User {userId} groupId groupMemberId = - ExceptT . firstRow (toContactMember vr user) (SEGroupMemberNotFound groupMemberId) $ +getGroupMember :: DB.Connection -> StoreCxt -> User -> GroupId -> GroupMemberId -> ExceptT StoreError IO GroupMember +getGroupMember db cxt user@User {userId} groupId groupMemberId = + ExceptT . firstRow (toContactMember cxt user) (SEGroupMemberNotFound groupMemberId) $ DB.query db (groupMemberQuery <> " WHERE m.group_id = ? AND m.group_member_id = ? AND m.user_id = ?") (groupId, groupMemberId, userId) -getHostMember :: DB.Connection -> VersionRangeChat -> User -> GroupId -> ExceptT StoreError IO GroupMember -getHostMember db vr user groupId = - ExceptT . firstRow (toContactMember vr user) (SEGroupHostMemberNotFound groupId) $ +getHostMember :: DB.Connection -> StoreCxt -> User -> GroupId -> ExceptT StoreError IO GroupMember +getHostMember db cxt user groupId = + ExceptT . firstRow (toContactMember cxt user) (SEGroupHostMemberNotFound groupId) $ DB.query db (groupMemberQuery <> " WHERE m.group_id = ? AND m.member_category = ?") @@ -1087,46 +1087,46 @@ toMentionedMember (groupMemberId, memberId, memberRole, displayName, localAlias) let memberRef = Just CIMentionMember {groupMemberId, displayName, localAlias, memberRole} in CIMention {memberId, memberRef} -getGroupMemberById :: DB.Connection -> VersionRangeChat -> User -> GroupMemberId -> ExceptT StoreError IO GroupMember -getGroupMemberById db vr user@User {userId} groupMemberId = - ExceptT . firstRow (toContactMember vr user) (SEGroupMemberNotFound groupMemberId) $ +getGroupMemberById :: DB.Connection -> StoreCxt -> User -> GroupMemberId -> ExceptT StoreError IO GroupMember +getGroupMemberById db cxt user@User {userId} groupMemberId = + ExceptT . firstRow (toContactMember cxt user) (SEGroupMemberNotFound groupMemberId) $ DB.query db (groupMemberQuery <> " WHERE m.group_member_id = ? AND m.user_id = ?") (groupMemberId, userId) -getGroupMemberByIndex :: DB.Connection -> VersionRangeChat -> User -> GroupInfo -> Int64 -> ExceptT StoreError IO GroupMember -getGroupMemberByIndex db vr user GroupInfo {groupId} indexInGroup = - ExceptT . firstRow (toContactMember vr user) (SEGroupMemberNotFoundByIndex indexInGroup) $ +getGroupMemberByIndex :: DB.Connection -> StoreCxt -> User -> GroupInfo -> Int64 -> ExceptT StoreError IO GroupMember +getGroupMemberByIndex db cxt user GroupInfo {groupId} indexInGroup = + ExceptT . firstRow (toContactMember cxt user) (SEGroupMemberNotFoundByIndex indexInGroup) $ DB.query db (groupMemberQuery <> " WHERE m.group_id = ? AND m.index_in_group = ?") (groupId, indexInGroup) -getSupportScopeMemberByIndex :: DB.Connection -> VersionRangeChat -> User -> GroupInfo -> GroupMemberId -> Int64 -> ExceptT StoreError IO GroupMember -getSupportScopeMemberByIndex db vr user GroupInfo {groupId} scopeGMId indexInGroup = - ExceptT . firstRow (toContactMember vr user) (SEGroupMemberNotFoundByIndex indexInGroup) $ +getSupportScopeMemberByIndex :: DB.Connection -> StoreCxt -> User -> GroupInfo -> GroupMemberId -> Int64 -> ExceptT StoreError IO GroupMember +getSupportScopeMemberByIndex db cxt user GroupInfo {groupId} scopeGMId indexInGroup = + ExceptT . firstRow (toContactMember cxt user) (SEGroupMemberNotFoundByIndex indexInGroup) $ DB.query db (groupMemberQuery <> " WHERE m.group_id = ? AND m.index_in_group = ? AND (m.member_role IN (?,?,?) OR m.group_member_id = ?)") (groupId, indexInGroup, GRModerator, GRAdmin, GROwner, scopeGMId) -getGroupMemberByMemberId :: DB.Connection -> VersionRangeChat -> User -> GroupInfo -> MemberId -> ExceptT StoreError IO GroupMember -getGroupMemberByMemberId db vr user GroupInfo {groupId} memberId = - ExceptT . firstRow (toContactMember vr user) (SEGroupMemberNotFoundByMemberId memberId) $ +getGroupMemberByMemberId :: DB.Connection -> StoreCxt -> User -> GroupInfo -> MemberId -> ExceptT StoreError IO GroupMember +getGroupMemberByMemberId db cxt user GroupInfo {groupId} memberId = + ExceptT . firstRow (toContactMember cxt user) (SEGroupMemberNotFoundByMemberId memberId) $ DB.query db (groupMemberQuery <> " WHERE m.group_id = ? AND m.member_id = ?") (groupId, memberId) -getCreateUnknownGMByMemberId :: DB.Connection -> VersionRangeChat -> User -> GroupInfo -> MemberId -> ContactName -> GroupMemberRole -> Bool -> ExceptT StoreError IO (Maybe (GroupMember, Bool)) -getCreateUnknownGMByMemberId db vr user gInfo memberId memberName unknownMemberRole allowCreate = do - liftIO (runExceptT $ getGroupMemberByMemberId db vr user gInfo memberId) >>= \case +getCreateUnknownGMByMemberId :: DB.Connection -> StoreCxt -> User -> GroupInfo -> MemberId -> ContactName -> GroupMemberRole -> Bool -> ExceptT StoreError IO (Maybe (GroupMember, Bool)) +getCreateUnknownGMByMemberId db cxt user gInfo memberId memberName unknownMemberRole allowCreate = do + liftIO (runExceptT $ getGroupMemberByMemberId db cxt user gInfo memberId) >>= \case Right m -> pure $ Just (m, False) Left (SEGroupMemberNotFoundByMemberId _) | allowCreate -> do let name = if T.null memberName then nameFromMemberId memberId else memberName - m <- createNewUnknownGroupMember db vr user gInfo memberId name unknownMemberRole + m <- createNewUnknownGroupMember db cxt user gInfo memberId name unknownMemberRole pure $ Just (m, True) | otherwise -> pure Nothing Left e -> throwError e @@ -1145,59 +1145,59 @@ getGroupMemberIdViaMemberId db User {userId} GroupInfo {groupId} memberId = "SELECT group_member_id FROM group_members WHERE user_id = ? AND group_id = ? AND member_id = ?" (userId, groupId, memberId) -getGroupMembers :: DB.Connection -> VersionRangeChat -> User -> GroupInfo -> IO [GroupMember] -getGroupMembers db vr user@User {userId, userContactId} GroupInfo {groupId} = - map (toContactMember vr user) +getGroupMembers :: DB.Connection -> StoreCxt -> User -> GroupInfo -> IO [GroupMember] +getGroupMembers db cxt user@User {userId, userContactId} GroupInfo {groupId} = + map (toContactMember cxt user) <$> DB.query db (groupMemberQuery <> " WHERE m.user_id = ? AND m.group_id = ? AND (m.contact_id IS NULL OR m.contact_id != ?)") (userId, groupId, userContactId) -getGroupMembersByIndexes :: DB.Connection -> VersionRangeChat -> User -> GroupInfo -> [Int64] -> IO [GroupMember] -getGroupMembersByIndexes db vr user gInfo indexesInGroup = do +getGroupMembersByIndexes :: DB.Connection -> StoreCxt -> User -> GroupInfo -> [Int64] -> IO [GroupMember] +getGroupMembersByIndexes db cxt user gInfo indexesInGroup = do #if defined(dbPostgres) let GroupInfo {groupId} = gInfo - map (toContactMember vr user) <$> + map (toContactMember cxt user) <$> DB.query db (groupMemberQuery <> " WHERE m.group_id = ? AND m.index_in_group IN ?") (groupId, In indexesInGroup) #else - rights <$> mapM (runExceptT . getGroupMemberByIndex db vr user gInfo) indexesInGroup + rights <$> mapM (runExceptT . getGroupMemberByIndex db cxt user gInfo) indexesInGroup #endif -getSupportScopeMembersByIndexes :: DB.Connection -> VersionRangeChat -> User -> GroupInfo -> GroupMemberId -> [Int64] -> IO [GroupMember] -getSupportScopeMembersByIndexes db vr user gInfo scopeGMId indexesInGroup = do +getSupportScopeMembersByIndexes :: DB.Connection -> StoreCxt -> User -> GroupInfo -> GroupMemberId -> [Int64] -> IO [GroupMember] +getSupportScopeMembersByIndexes db cxt user gInfo scopeGMId indexesInGroup = do #if defined(dbPostgres) let GroupInfo {groupId} = gInfo - map (toContactMember vr user) <$> + map (toContactMember cxt user) <$> DB.query db (groupMemberQuery <> " WHERE m.group_id = ? AND m.index_in_group IN ? AND (m.member_role IN (?,?,?) OR m.group_member_id = ?)") (groupId, In indexesInGroup, GRModerator, GRAdmin, GROwner, scopeGMId) #else - rights <$> mapM (runExceptT . getSupportScopeMemberByIndex db vr user gInfo scopeGMId) indexesInGroup + rights <$> mapM (runExceptT . getSupportScopeMemberByIndex db cxt user gInfo scopeGMId) indexesInGroup #endif -getGroupModerators :: DB.Connection -> VersionRangeChat -> User -> GroupInfo -> IO [GroupMember] -getGroupModerators db vr user@User {userId, userContactId} GroupInfo {groupId} = do - map (toContactMember vr user) +getGroupModerators :: DB.Connection -> StoreCxt -> User -> GroupInfo -> IO [GroupMember] +getGroupModerators db cxt user@User {userId, userContactId} GroupInfo {groupId} = do + map (toContactMember cxt user) <$> DB.query db (groupMemberQuery <> " WHERE m.user_id = ? AND m.group_id = ? AND (m.contact_id IS NULL OR m.contact_id != ?) AND m.member_role IN (?,?,?)") (userId, groupId, userContactId, GRModerator, GRAdmin, GROwner) -getGroupRelayMembers :: DB.Connection -> VersionRangeChat -> User -> GroupInfo -> IO [GroupMember] -getGroupRelayMembers db vr user@User {userId, userContactId} GroupInfo {groupId} = do - map (toContactMember vr user) +getGroupRelayMembers :: DB.Connection -> StoreCxt -> User -> GroupInfo -> IO [GroupMember] +getGroupRelayMembers db cxt user@User {userId, userContactId} GroupInfo {groupId} = do + map (toContactMember cxt user) <$> DB.query db (groupMemberQuery <> " WHERE m.user_id = ? AND m.group_id = ? AND m.contact_id IS DISTINCT FROM ? AND m.member_role = ?") (userId, groupId, userContactId, GRRelay) -getGroupMembersForExpiration :: DB.Connection -> VersionRangeChat -> User -> GroupInfo -> IO [GroupMember] -getGroupMembersForExpiration db vr user@User {userId, userContactId} GroupInfo {groupId} = do - map (toContactMember vr user) +getGroupMembersForExpiration :: DB.Connection -> StoreCxt -> User -> GroupInfo -> IO [GroupMember] +getGroupMembersForExpiration db cxt user@User {userId, userContactId} GroupInfo {groupId} = do + map (toContactMember cxt user) <$> DB.query db ( groupMemberQuery @@ -1212,14 +1212,14 @@ getGroupMembersForExpiration db vr user@User {userId, userContactId} GroupInfo { ) (groupId, userId, userContactId, GSMemRemoved, GSMemLeft, GSMemGroupDeleted, GSMemUnknown) -getGroupInvitation :: DB.Connection -> VersionRangeChat -> User -> GroupId -> ExceptT StoreError IO ReceivedGroupInvitation -getGroupInvitation db vr user groupId = +getGroupInvitation :: DB.Connection -> StoreCxt -> User -> GroupId -> ExceptT StoreError IO ReceivedGroupInvitation +getGroupInvitation db cxt user groupId = getConnRec_ user >>= \case Just connRequest -> do - groupInfo@GroupInfo {membership} <- getGroupInfo db vr user groupId + groupInfo@GroupInfo {membership} <- getGroupInfo db cxt user groupId when (memberStatus membership /= GSMemInvited) $ throwError SEGroupAlreadyJoined hostId <- getHostMemberId_ db user groupId - fromMember <- getGroupMember db vr user groupId hostId + fromMember <- getGroupMember db cxt user groupId hostId pure ReceivedGroupInvitation {fromMember, connRequest, groupInfo} _ -> throwError SEGroupInvitationNotFound where @@ -1357,8 +1357,8 @@ toGroupRelay ((groupRelayId, groupMemberId, chatRelayId, address, displayName, f relayCap = RelayCapabilities {webDomain} in GroupRelay {groupRelayId, groupMemberId, userChatRelay, relayStatus, relayLink, relayCap} -createRelayForOwner :: DB.Connection -> VersionRangeChat -> TVar ChaChaDRG -> User -> GroupInfo -> UserChatRelay -> ExceptT StoreError IO GroupMember -createRelayForOwner db vr gVar user@User {userId, userContactId} GroupInfo {groupId, membership} UserChatRelay {relayProfile = RelayProfile {displayName}} = do +createRelayForOwner :: DB.Connection -> StoreCxt -> TVar ChaChaDRG -> User -> GroupInfo -> UserChatRelay -> ExceptT StoreError IO GroupMember +createRelayForOwner db cxt gVar user@User {userId, userContactId} GroupInfo {groupId, membership} UserChatRelay {relayProfile = RelayProfile {displayName}} = do currentTs <- liftIO getCurrentTime let relayProfile = profileFromName displayName (localDisplayName, memProfileId) <- createNewMemberProfile_ db user relayProfile currentTs @@ -1377,14 +1377,14 @@ createRelayForOwner db vr gVar user@User {userId, userContactId} GroupInfo {grou :. (userId, localDisplayName, memProfileId, currentTs, currentTs) ) liftIO $ insertedRowId db - getGroupMemberById db vr user groupMemberId + getGroupMemberById db cxt user groupMemberId -getCreateRelayForMember :: DB.Connection -> VersionRangeChat -> TVar ChaChaDRG -> User -> GroupInfo -> ShortLinkContact -> ExceptT StoreError IO GroupMember -getCreateRelayForMember db vr gVar user@User {userId, userContactId} GroupInfo {groupId, localDisplayName = groupLDN} relayLink = +getCreateRelayForMember :: DB.Connection -> StoreCxt -> TVar ChaChaDRG -> User -> GroupInfo -> ShortLinkContact -> ExceptT StoreError IO GroupMember +getCreateRelayForMember db cxt gVar user@User {userId, userContactId} GroupInfo {groupId, localDisplayName = groupLDN} relayLink = liftIO getGroupMemberByRelayLink >>= maybe createRelayMember pure where getGroupMemberByRelayLink = - maybeFirstRow (toContactMember vr user) $ + maybeFirstRow (toContactMember cxt user) $ DB.query db #if defined(dbPostgres) @@ -1415,10 +1415,10 @@ getCreateRelayForMember db vr gVar user@User {userId, userContactId} GroupInfo { :. (userId, localDisplayName, profileId, currentTs, currentTs, relayLink) ) insertedRowId db - getGroupMember db vr user groupId groupMemberId + getGroupMember db cxt user groupId groupMemberId -createRelayConnection :: DB.Connection -> VersionRangeChat -> User -> Int64 -> ConnId -> ConnStatus -> VersionChat -> SubscriptionMode -> ExceptT StoreError IO Connection -createRelayConnection db vr user@User {userId} groupMemberId agentConnId connStatus chatV subMode = do +createRelayConnection :: DB.Connection -> StoreCxt -> User -> Int64 -> ConnId -> ConnStatus -> VersionChat -> SubscriptionMode -> ExceptT StoreError IO Connection +createRelayConnection db cxt user@User {userId} groupMemberId agentConnId connStatus chatV subMode = do currentTs <- liftIO getCurrentTime liftIO $ DB.execute @@ -1435,7 +1435,7 @@ createRelayConnection db vr user@User {userId} groupMemberId agentConnId connSta :. (currentTs, currentTs) ) connId <- liftIO $ insertedRowId db - getConnectionById db vr user connId + getConnectionById db cxt user connId updateRelayStatus :: DB.Connection -> GroupRelay -> RelayStatus -> IO GroupRelay updateRelayStatus db relay@GroupRelay {groupRelayId} relayStatus = @@ -1452,8 +1452,8 @@ updateRelayStatus_ db relayId relayStatus = do currentTs <- getCurrentTime DB.execute db "UPDATE group_relays SET relay_status = ?, updated_at = ? WHERE group_relay_id = ?" (relayStatus, currentTs, relayId) -setRelayLinkAccepted :: DB.Connection -> VersionRangeChat -> User -> GroupMember -> MemberKey -> Profile -> ExceptT StoreError IO (GroupMember, GroupRelay) -setRelayLinkAccepted db vr user m (MemberKey relayKey) profile = do +setRelayLinkAccepted :: DB.Connection -> StoreCxt -> User -> GroupMember -> MemberKey -> Profile -> ExceptT StoreError IO (GroupMember, GroupRelay) +setRelayLinkAccepted db cxt user m (MemberKey relayKey) profile = do let gmId = groupMemberId' m currentTs <- liftIO getCurrentTime liftIO $ DB.execute @@ -1473,7 +1473,7 @@ setRelayLinkAccepted db vr user m (MemberKey relayKey) profile = do |] (relayKey, currentTs, gmId) void $ updateMemberProfile db user m profile - (,) <$> getGroupMemberById db vr user gmId <*> getGroupRelayByGMId db gmId + (,) <$> getGroupMemberById db cxt user gmId <*> getGroupRelayByGMId db gmId setRelayLinkConfId :: DB.Connection -> GroupMember -> ConfirmationId -> ShortLinkContact -> IO () setRelayLinkConfId db m confId relayLink = do @@ -1541,8 +1541,8 @@ setGroupInProgressDone db GroupInfo {groupId} = do "UPDATE groups SET creating_in_progress = 0, updated_at = ? WHERE group_id = ?" (currentTs, groupId) -createRelayRequestGroup :: DB.Connection -> VersionRangeChat -> User -> GroupRelayInvitation -> InvitationId -> VersionRangeChat -> Int64 -> GroupMemberStatus -> RelayStatus -> ExceptT StoreError IO (GroupInfo, GroupMember) -createRelayRequestGroup db vr user@User {userId} GroupRelayInvitation {fromMember, fromMemberProfile, relayMemberId, groupLink} invId reqChatVRange initialDelay memberStatus relayStatus = do +createRelayRequestGroup :: DB.Connection -> StoreCxt -> User -> GroupRelayInvitation -> InvitationId -> VersionRangeChat -> Int64 -> GroupMemberStatus -> RelayStatus -> ExceptT StoreError IO (GroupInfo, GroupMember) +createRelayRequestGroup db cxt user@User {userId} GroupRelayInvitation {fromMember, fromMemberProfile, relayMemberId, groupLink} invId reqChatVRange initialDelay memberStatus relayStatus = do currentTs <- liftIO getCurrentTime -- Create group with placeholder profile let Profile {displayName = fromMemberLDN} = fromMemberProfile @@ -1562,9 +1562,9 @@ createRelayRequestGroup db vr user@User {userId} GroupRelayInvitation {fromMembe ownerMemberId <- insertOwner_ currentTs groupId let relayMember = MemberIdRole relayMemberId GRRelay -- TODO [member keys] should relays use member keys? - _membership <- createContactMemberInv_ db user groupId (Just ownerMemberId) user relayMember GCUserMember memberStatus IBUnknown Nothing Nothing currentTs vr - ownerMember <- getGroupMember db vr user groupId ownerMemberId - g <- getGroupInfo db vr user groupId + _membership <- createContactMemberInv_ db user groupId (Just ownerMemberId) user relayMember GCUserMember memberStatus IBUnknown Nothing Nothing currentTs (vr cxt) + ownerMember <- getGroupMember db cxt user groupId ownerMemberId + g <- getGroupInfo db cxt user groupId pure (g, ownerMember) where setRelayRequestData_ groupId currentTs = @@ -1616,8 +1616,8 @@ updateRelayOwnStatus_ db GroupInfo {groupId} relayStatus = do -- Flip every RSRejected row sharing the targeted group's relay_request_group_link -- to RSInactive in one statement; returns the refreshed GroupInfo for the targeted groupId. -allowRelayGroup :: DB.Connection -> VersionRangeChat -> User -> GroupId -> ExceptT StoreError IO GroupInfo -allowRelayGroup db vr user@User {userId} groupId = do +allowRelayGroup :: DB.Connection -> StoreCxt -> User -> GroupId -> ExceptT StoreError IO GroupInfo +allowRelayGroup db cxt user@User {userId} groupId = do currentTs <- liftIO getCurrentTime liftIO $ DB.execute @@ -1630,7 +1630,7 @@ allowRelayGroup db vr user@User {userId} groupId = do AND relay_own_status = ? |] (RSInactive, currentTs, currentTs, userId, groupId, RSRejected) - getGroupInfo db vr user groupId + getGroupInfo db cxt user groupId isRelayGroupRejected :: DB.Connection -> User -> ShortLinkContact -> IO Bool isRelayGroupRejected db User {userId} groupLink = @@ -1649,9 +1649,9 @@ isRelayGroupRejected db User {userId} groupLink = (userId, groupLink, RSRejected) ) -getRelayServedGroups :: DB.Connection -> VersionRangeChat -> User -> IO [GroupInfo] -getRelayServedGroups db vr User {userId, userContactId} = do - map (toGroupInfo vr userContactId []) +getRelayServedGroups :: DB.Connection -> StoreCxt -> User -> IO [GroupInfo] +getRelayServedGroups db cxt User {userId, userContactId} = do + map (toGroupInfo cxt userContactId []) <$> DB.query db ( groupInfoQuery @@ -1659,10 +1659,10 @@ getRelayServedGroups db vr User {userId, userContactId} = do ) (userId, userContactId, RSAccepted, RSActive) -getRelayInactiveGroups :: DB.Connection -> VersionRangeChat -> User -> NominalDiffTime -> IO [GroupInfo] -getRelayInactiveGroups db vr User {userId, userContactId} ttl = do +getRelayInactiveGroups :: DB.Connection -> StoreCxt -> User -> NominalDiffTime -> IO [GroupInfo] +getRelayInactiveGroups db cxt User {userId, userContactId} ttl = do cutoffTs <- addUTCTime (- ttl) <$> getCurrentTime - map (toGroupInfo vr userContactId []) + map (toGroupInfo cxt userContactId []) <$> DB.query db ( groupInfoQuery @@ -1774,10 +1774,10 @@ createJoiningMemberConnection Connection {connId} <- createConnection_ db userId ConnMember (Just groupMemberId) agentConnId ConnNew chatV cReqChatVRange Nothing (Just uclId) Nothing 0 createdAt subMode PQSupportOff setCommandConnId db user cmdId connId -createBusinessRequestGroup :: DB.Connection -> VersionRangeChat -> TVar ChaChaDRG -> User -> VersionRangeChat -> Profile -> Int64 -> Text -> GroupPreferences -> ExceptT StoreError IO (GroupInfo, GroupMember) +createBusinessRequestGroup :: DB.Connection -> StoreCxt -> TVar ChaChaDRG -> User -> VersionRangeChat -> Profile -> Int64 -> Text -> GroupPreferences -> ExceptT StoreError IO (GroupInfo, GroupMember) createBusinessRequestGroup db - vr + cxt gVar user@User {userId, userContactId} cReqChatVRange @@ -1789,8 +1789,8 @@ createBusinessRequestGroup (groupId, membership@GroupMember {memberId = userMemberId}) <- insertGroup_ currentTs (groupMemberId, memberId) <- insertClientMember_ currentTs groupId membership liftIO $ DB.execute db "UPDATE groups SET business_member_id = ?, customer_member_id = ? WHERE group_id = ?" (userMemberId, memberId, groupId) - groupInfo <- getGroupInfo db vr user groupId - clientMember <- getGroupMemberById db vr user groupMemberId + groupInfo <- getGroupInfo db cxt user groupId + clientMember <- getGroupMemberById db cxt user groupMemberId pure (groupInfo, clientMember) where insertGroup_ currentTs = do @@ -1813,7 +1813,7 @@ createBusinessRequestGroup groupId <- liftIO $ insertedRowId db memberId <- liftIO $ encodedRandomBytes gVar 12 -- TODO [member keys] we could support member keys in business groups to allow binding agreements (though identity keys would be better for it. - membership <- createContactMemberInv_ db user groupId Nothing user (MemberIdRole (MemberId memberId) GROwner) GCUserMember GSMemCreator IBUser Nothing Nothing currentTs vr + membership <- createContactMemberInv_ db user groupId Nothing user (MemberIdRole (MemberId memberId) GROwner) GCUserMember GSMemCreator IBUser Nothing Nothing currentTs (vr cxt) pure (groupId, membership) VersionRange minV maxV = cReqChatVRange insertClientMember_ currentTs groupId membership = @@ -1837,8 +1837,8 @@ createBusinessRequestGroup groupMemberId <- liftIO $ insertedRowId db pure (groupMemberId, MemberId memId) -getContactViaMember :: DB.Connection -> VersionRangeChat -> User -> GroupMember -> ExceptT StoreError IO Contact -getContactViaMember db vr user@User {userId} GroupMember {groupMemberId} = do +getContactViaMember :: DB.Connection -> StoreCxt -> User -> GroupMember -> ExceptT StoreError IO Contact +getContactViaMember db cxt user@User {userId} GroupMember {groupMemberId} = do contactId <- ExceptT $ firstRow fromOnly (SEContactNotFoundByMemberId groupMemberId) $ @@ -1852,7 +1852,7 @@ getContactViaMember db vr user@User {userId} GroupMember {groupMemberId} = do LIMIT 1 |] (userId, groupMemberId) - getContact db vr user contactId + getContact db cxt user contactId setNewContactMemberConnRequest :: DB.Connection -> User -> GroupMember -> ConnReqInvitation -> IO () setNewContactMemberConnRequest db User {userId} GroupMember {groupMemberId} connRequest = do @@ -1879,18 +1879,18 @@ createMemberConnectionAsync db user@User {userId} groupMemberId (cmdId, agentCon -- This is called once before connecting to relays, unlike createConnReqConnection -> setPreparedGroupLinkInfo_, -- which is used in single-connection flows. updatePreparedRelayedGroup :: - DB.Connection -> VersionRangeChat -> User -> GroupInfo -> ConnReqContact -> ConnReqUriHash -> Maybe Profile -> + DB.Connection -> StoreCxt -> User -> GroupInfo -> ConnReqContact -> ConnReqUriHash -> Maybe Profile -> C.PublicKeyEd25519 -> C.PrivateKeyEd25519 -> Maybe Int64 -> ExceptT StoreError IO GroupInfo -updatePreparedRelayedGroup db vr user@User {userId} gInfo cReq cReqHash incognitoProfile rootPubKey memberPrivKey publicMemberCount_ = do +updatePreparedRelayedGroup db cxt user@User {userId} gInfo cReq cReqHash incognitoProfile rootPubKey memberPrivKey publicMemberCount_ = do currentTs <- liftIO getCurrentTime customUserProfileId <- liftIO $ mapM (createIncognitoProfile_ db userId currentTs) incognitoProfile liftIO $ setPreparedGroupLinkInfo_ db gInfo cReq cReqHash customUserProfileId publicMemberCount_ currentTs liftIO $ updateGroupMemberKeys db (groupId' gInfo) rootPubKey memberPrivKey (groupMemberId' $ membership gInfo) - getGroupInfo db vr user (groupId' gInfo) + getGroupInfo db cxt user (groupId' gInfo) -updatePublicMemberCount :: DB.Connection -> VersionRangeChat -> User -> GroupInfo -> ExceptT StoreError IO GroupInfo -updatePublicMemberCount db vr user GroupInfo {groupId} = do +updatePublicMemberCount :: DB.Connection -> StoreCxt -> User -> GroupInfo -> ExceptT StoreError IO GroupInfo +updatePublicMemberCount db cxt user GroupInfo {groupId} = do liftIO $ do totalCount <- fromMaybe 0 <$> maybeFirstRow fromOnly (DB.query db "SELECT summary_current_members_count FROM groups WHERE group_id = ?" (Only groupId)) @@ -1906,13 +1906,13 @@ updatePublicMemberCount db vr user GroupInfo {groupId} = do let publicCount = max 0 (totalCount - relayCount) :: Int64 currentTs <- getCurrentTime DB.execute db "UPDATE groups SET public_member_count = ?, updated_at = ? WHERE group_id = ?" (publicCount, currentTs, groupId) - getGroupInfo db vr user groupId + getGroupInfo db cxt user groupId -setPublicMemberCount :: DB.Connection -> VersionRangeChat -> User -> GroupInfo -> Int64 -> ExceptT StoreError IO GroupInfo -setPublicMemberCount db vr user GroupInfo {groupId} publicCount = do +setPublicMemberCount :: DB.Connection -> StoreCxt -> User -> GroupInfo -> Int64 -> ExceptT StoreError IO GroupInfo +setPublicMemberCount db cxt user GroupInfo {groupId} publicCount = do currentTs <- liftIO getCurrentTime liftIO $ DB.execute db "UPDATE groups SET public_member_count = ?, updated_at = ? WHERE group_id = ?" (publicCount, currentTs, groupId) - getGroupInfo db vr user groupId + getGroupInfo db cxt user groupId updateGroupMemberKeys :: DB.Connection -> GroupId -> C.PublicKeyEd25519 -> C.PrivateKeyEd25519 -> GroupMemberId -> IO () updateGroupMemberKeys db groupId rootPubKey memberPrivKey membershipGMId = do @@ -2402,8 +2402,8 @@ updateGroupProfileFromMember db user g@GroupInfo {groupId} Profile {displayName let publicGroupAccess = toPublicGroupAccess accessRow in GroupProfile {displayName, fullName, shortDescr, description, image, publicGroup = toPublicGroupProfile groupType_ groupLink_ publicGroupId_ publicGroupAccess, groupPreferences, memberAdmission} -getGroupInfoByUserContactLinkConnReq :: DB.Connection -> VersionRangeChat -> User -> (ConnReqContact, ConnReqContact) -> IO (Maybe GroupInfo) -getGroupInfoByUserContactLinkConnReq db vr user@User {userId} (cReqSchema1, cReqSchema2) = do +getGroupInfoByUserContactLinkConnReq :: DB.Connection -> StoreCxt -> User -> (ConnReqContact, ConnReqContact) -> IO (Maybe GroupInfo) +getGroupInfoByUserContactLinkConnReq db cxt user@User {userId} (cReqSchema1, cReqSchema2) = do -- fmap join is to support group_id = NULL if non-group contact request is sent to this function (e.g., if client data is appended). groupId_ <- fmap join . maybeFirstRow fromOnly $ @@ -2415,12 +2415,12 @@ getGroupInfoByUserContactLinkConnReq db vr user@User {userId} (cReqSchema1, cReq WHERE user_id = ? AND conn_req_contact IN (?,?) |] (userId, cReqSchema1, cReqSchema2) - maybe (pure Nothing) (fmap eitherToMaybe . runExceptT . getGroupInfo db vr user) groupId_ + maybe (pure Nothing) (fmap eitherToMaybe . runExceptT . getGroupInfo db cxt user) groupId_ -getGroupInfoViaUserShortLink :: DB.Connection -> VersionRangeChat -> User -> ShortLinkContact -> IO (Maybe (ConnReqContact, GroupInfo)) -getGroupInfoViaUserShortLink db vr user@User {userId} shortLink = fmap eitherToMaybe $ runExceptT $ do +getGroupInfoViaUserShortLink :: DB.Connection -> StoreCxt -> User -> ShortLinkContact -> IO (Maybe (ConnReqContact, GroupInfo)) +getGroupInfoViaUserShortLink db cxt user@User {userId} shortLink = fmap eitherToMaybe $ runExceptT $ do (cReq, groupId) <- ExceptT getConnReqGroup - (cReq,) <$> getGroupInfo db vr user groupId + (cReq,) <$> getGroupInfo db cxt user groupId where getConnReqGroup = firstRow' toConnReqGroupId (SEInternalError "group link not found") $ @@ -2437,14 +2437,14 @@ getGroupInfoViaUserShortLink db vr user@User {userId} shortLink = fmap eitherToM (cReq, Just groupId) -> Right (cReq, groupId) _ -> Left $ SEInternalError "no conn req or group ID" -getGroupViaShortLinkToConnect :: DB.Connection -> VersionRangeChat -> User -> ShortLinkContact -> ExceptT StoreError IO (Maybe (ConnReqContact, GroupInfo)) -getGroupViaShortLinkToConnect db vr user@User {userId} shortLink = +getGroupViaShortLinkToConnect :: DB.Connection -> StoreCxt -> User -> ShortLinkContact -> ExceptT StoreError IO (Maybe (ConnReqContact, GroupInfo)) +getGroupViaShortLinkToConnect db cxt user@User {userId} shortLink = liftIO (maybeFirstRow id $ DB.query db "SELECT group_id, conn_full_link_to_connect FROM groups WHERE user_id = ? AND conn_short_link_to_connect = ?" (userId, shortLink)) >>= \case - Just (gId :: Int64, Just cReq) -> Just . (cReq,) <$> getGroupInfo db vr user gId + Just (gId :: Int64, Just cReq) -> Just . (cReq,) <$> getGroupInfo db cxt user gId _ -> pure Nothing -getGroupInfoByGroupLinkHash :: DB.Connection -> VersionRangeChat -> User -> (ConnReqUriHash, ConnReqUriHash) -> IO (Maybe GroupInfo) -getGroupInfoByGroupLinkHash db vr user@User {userId, userContactId} (groupLinkHash1, groupLinkHash2) = do +getGroupInfoByGroupLinkHash :: DB.Connection -> StoreCxt -> User -> (ConnReqUriHash, ConnReqUriHash) -> IO (Maybe GroupInfo) +getGroupInfoByGroupLinkHash db cxt user@User {userId, userContactId} (groupLinkHash1, groupLinkHash2) = do groupId_ <- maybeFirstRow fromOnly $ DB.query @@ -2458,7 +2458,7 @@ getGroupInfoByGroupLinkHash db vr user@User {userId, userContactId} (groupLinkHa LIMIT 1 |] (userId, groupLinkHash1, groupLinkHash2, userContactId, GSMemRemoved, GSMemLeft, GSMemGroupDeleted, GSMemUnknown) - maybe (pure Nothing) (fmap eitherToMaybe . runExceptT . getGroupInfo db vr user) groupId_ + maybe (pure Nothing) (fmap eitherToMaybe . runExceptT . getGroupInfo db cxt user) groupId_ getGroupIdByName :: DB.Connection -> User -> GroupName -> ExceptT StoreError IO GroupId getGroupIdByName db User {userId} gName = @@ -2470,8 +2470,8 @@ getGroupMemberIdByName db User {userId} groupId groupMemberName = ExceptT . firstRow fromOnly (SEGroupMemberNameNotFound groupId groupMemberName) $ DB.query db "SELECT group_member_id FROM group_members WHERE user_id = ? AND group_id = ? AND local_display_name = ?" (userId, groupId, groupMemberName) -getActiveMembersByName :: DB.Connection -> VersionRangeChat -> User -> ContactName -> ExceptT StoreError IO [(GroupInfo, GroupMember)] -getActiveMembersByName db vr user@User {userId} groupMemberName = do +getActiveMembersByName :: DB.Connection -> StoreCxt -> User -> ContactName -> ExceptT StoreError IO [(GroupInfo, GroupMember)] +getActiveMembersByName db cxt user@User {userId} groupMemberName = do groupMemberIds :: [(GroupId, GroupMemberId)] <- liftIO $ DB.query @@ -2484,17 +2484,17 @@ getActiveMembersByName db vr user@User {userId} groupMemberName = do |] (userId, groupMemberName, GSMemConnected, GSMemComplete, GCUserMember) possibleMembers <- forM groupMemberIds $ \(groupId, groupMemberId) -> do - groupInfo <- getGroupInfo db vr user groupId - groupMember <- getGroupMember db vr user groupId groupMemberId + groupInfo <- getGroupInfo db cxt user groupId + groupMember <- getGroupMember db cxt user groupId groupMemberId pure (groupInfo, groupMember) pure $ sortOn (Down . ts . fst) possibleMembers where ts GroupInfo {chatTs, updatedAt} = fromMaybe updatedAt chatTs -getMatchingContacts :: DB.Connection -> VersionRangeChat -> User -> Contact -> IO [Contact] -getMatchingContacts db vr user@User {userId} Contact {contactId, profile = LocalProfile {displayName, fullName, shortDescr, image}} = do +getMatchingContacts :: DB.Connection -> StoreCxt -> User -> Contact -> IO [Contact] +getMatchingContacts db cxt user@User {userId} Contact {contactId, profile = LocalProfile {displayName, fullName, shortDescr, image}} = do contactIds <- map fromOnly <$> DB.query db q (userId, contactId, CSActive, displayName, fullName, shortDescr, image) - rights <$> mapM (runExceptT . getContact db vr user) contactIds + rights <$> mapM (runExceptT . getContact db cxt user) contactIds where -- this query is different from one in getMatchingMemberContacts -- it checks that it's not the same contact @@ -2509,10 +2509,10 @@ getMatchingContacts db vr user@User {userId} Contact {contactId, profile = Local AND p.short_descr IS NOT DISTINCT FROM ? AND p.image IS NOT DISTINCT FROM ? |] -getMatchingMembers :: DB.Connection -> VersionRangeChat -> User -> Contact -> IO [GroupMember] -getMatchingMembers db vr user@User {userId} Contact {profile = LocalProfile {displayName, fullName, shortDescr, image}} = do +getMatchingMembers :: DB.Connection -> StoreCxt -> User -> Contact -> IO [GroupMember] +getMatchingMembers db cxt user@User {userId} Contact {profile = LocalProfile {displayName, fullName, shortDescr, image}} = do memberIds <- map fromOnly <$> DB.query db q (userId, GCUserMember, displayName, fullName, shortDescr, image) - filter memberCurrent . rights <$> mapM (runExceptT . getGroupMemberById db vr user) memberIds + filter memberCurrent . rights <$> mapM (runExceptT . getGroupMemberById db cxt user) memberIds where -- only match with members without associated contact q = @@ -2526,11 +2526,11 @@ getMatchingMembers db vr user@User {userId} Contact {profile = LocalProfile {dis AND p.short_descr IS NOT DISTINCT FROM ? AND p.image IS NOT DISTINCT FROM ? |] -getMatchingMemberContacts :: DB.Connection -> VersionRangeChat -> User -> GroupMember -> IO [Contact] +getMatchingMemberContacts :: DB.Connection -> StoreCxt -> User -> GroupMember -> IO [Contact] getMatchingMemberContacts _ _ _ GroupMember {memberContactId = Just _} = pure [] -getMatchingMemberContacts db vr user@User {userId} GroupMember {memberProfile = LocalProfile {displayName, fullName, shortDescr, image}} = do +getMatchingMemberContacts db cxt user@User {userId} GroupMember {memberProfile = LocalProfile {displayName, fullName, shortDescr, image}} = do contactIds <- map fromOnly <$> DB.query db q (userId, CSActive, displayName, fullName, shortDescr, image) - rights <$> mapM (runExceptT . getContact db vr user) contactIds + rights <$> mapM (runExceptT . getContact db cxt user) contactIds where q = [sql| @@ -2563,8 +2563,8 @@ createSentProbeHash db userId probeId to = do "INSERT INTO sent_probe_hashes (sent_probe_id, contact_id, group_member_id, user_id, created_at, updated_at) VALUES (?,?,?,?,?,?)" (probeId, ctId, gmId, userId, currentTs, currentTs) -matchReceivedProbe :: DB.Connection -> VersionRangeChat -> User -> ContactOrMember -> Probe -> IO [ContactOrMember] -matchReceivedProbe db vr user@User {userId} from (Probe probe) = do +matchReceivedProbe :: DB.Connection -> StoreCxt -> User -> ContactOrMember -> Probe -> IO [ContactOrMember] +matchReceivedProbe db cxt user@User {userId} from (Probe probe) = do let probeHash = C.sha256Hash probe cgmIds <- DB.query @@ -2585,7 +2585,7 @@ matchReceivedProbe db vr user@User {userId} from (Probe probe) = do "INSERT INTO received_probes (contact_id, group_member_id, probe, probe_hash, user_id, created_at, updated_at) VALUES (?,?,?,?,?,?,?)" (ctId, gmId, Binary probe, Binary probeHash, userId, currentTs, currentTs) let cgmIds' = filterFirstContactId cgmIds - catMaybes <$> mapM (getContactOrMember_ db vr user) cgmIds' + catMaybes <$> mapM (getContactOrMember_ db cxt user) cgmIds' where filterFirstContactId :: [(Maybe ContactId, Maybe GroupId, Maybe GroupMemberId)] -> [(Maybe ContactId, Maybe GroupId, Maybe GroupMemberId)] filterFirstContactId cgmIds = do @@ -2595,8 +2595,8 @@ matchReceivedProbe db vr user@User {userId} from (Probe probe) = do (x : _) -> [x] ctIds' <> memIds -matchReceivedProbeHash :: DB.Connection -> VersionRangeChat -> User -> ContactOrMember -> ProbeHash -> IO (Maybe (ContactOrMember, Probe)) -matchReceivedProbeHash db vr user@User {userId} from (ProbeHash probeHash) = do +matchReceivedProbeHash :: DB.Connection -> StoreCxt -> User -> ContactOrMember -> ProbeHash -> IO (Maybe (ContactOrMember, Probe)) +matchReceivedProbeHash db cxt user@User {userId} from (ProbeHash probeHash) = do probeIds <- maybeFirstRow id $ DB.query @@ -2616,11 +2616,11 @@ matchReceivedProbeHash db vr user@User {userId} from (ProbeHash probeHash) = do db "INSERT INTO received_probes (contact_id, group_member_id, probe_hash, user_id, created_at, updated_at) VALUES (?,?,?,?,?,?)" (ctId, gmId, Binary probeHash, userId, currentTs, currentTs) - pure probeIds $>>= \(Only probe :. cgmIds) -> (,Probe probe) <$$> getContactOrMember_ db vr user cgmIds + pure probeIds $>>= \(Only probe :. cgmIds) -> (,Probe probe) <$$> getContactOrMember_ db cxt user cgmIds -matchSentProbe :: DB.Connection -> VersionRangeChat -> User -> ContactOrMember -> Probe -> IO (Maybe ContactOrMember) -matchSentProbe db vr user@User {userId} _from (Probe probe) = do - cgmIds $>>= getContactOrMember_ db vr user +matchSentProbe :: DB.Connection -> StoreCxt -> User -> ContactOrMember -> Probe -> IO (Maybe ContactOrMember) +matchSentProbe db cxt user@User {userId} _from (Probe probe) = do + cgmIds $>>= getContactOrMember_ db cxt user where (ctId, gmId) = contactOrMemberIds _from cgmIds = @@ -2639,11 +2639,11 @@ matchSentProbe db vr user@User {userId} _from (Probe probe) = do |] (userId, Binary probe, ctId, gmId) -getContactOrMember_ :: DB.Connection -> VersionRangeChat -> User -> (Maybe ContactId, Maybe GroupId, Maybe GroupMemberId) -> IO (Maybe ContactOrMember) -getContactOrMember_ db vr user ids = +getContactOrMember_ :: DB.Connection -> StoreCxt -> User -> (Maybe ContactId, Maybe GroupId, Maybe GroupMemberId) -> IO (Maybe ContactOrMember) +getContactOrMember_ db cxt user ids = fmap eitherToMaybe . runExceptT $ case ids of - (Just ctId, _, _) -> COMContact <$> getContact db vr user ctId - (_, Just gId, Just gmId) -> COMGroupMember <$> getGroupMember db vr user gId gmId + (Just ctId, _, _) -> COMContact <$> getContact db cxt user ctId + (_, Just gId, Just gmId) -> COMGroupMember <$> getGroupMember db cxt user gId gmId _ -> throwError $ SEInternalError "" associateMemberWithContactRecord :: DB.Connection -> User -> Contact -> GroupMember -> IO () @@ -2664,10 +2664,10 @@ associateMemberWithContactRecord when (memProfileId /= profileId) $ deleteUnusedProfile_ db userId memProfileId when (memLDN /= localDisplayName) $ deleteUnusedDisplayName_ db userId memLDN -associateContactWithMemberRecord :: DB.Connection -> VersionRangeChat -> User -> GroupMember -> Contact -> ExceptT StoreError IO Contact +associateContactWithMemberRecord :: DB.Connection -> StoreCxt -> User -> GroupMember -> Contact -> ExceptT StoreError IO Contact associateContactWithMemberRecord db - vr + cxt user@User {userId} GroupMember {groupId, groupMemberId, localDisplayName = memLDN, memberProfile = LocalProfile {profileId = memProfileId}} Contact {contactId, localDisplayName, profile = LocalProfile {profileId}} = do @@ -2691,7 +2691,7 @@ associateContactWithMemberRecord (memLDN, memProfileId, currentTs, userId, contactId) when (profileId /= memProfileId) $ deleteUnusedProfile_ db userId profileId when (localDisplayName /= memLDN) $ deleteUnusedDisplayName_ db userId localDisplayName - getContact db vr user contactId + getContact db cxt user contactId deleteUnusedDisplayName_ :: DB.Connection -> UserId -> ContactName -> IO () deleteUnusedDisplayName_ db userId localDisplayName = @@ -2847,15 +2847,15 @@ createMemberContact mergedPreferences = contactUserPreferences user userPreferences preferences $ connIncognito ctConn pure Contact {contactId, localDisplayName, profile = memberProfile, activeConn = Just ctConn, contactUsed = True, contactStatus = CSActive, chatSettings = defaultChatSettings, userPreferences, mergedPreferences, createdAt = currentTs, updatedAt = currentTs, chatTs = Just currentTs, preparedContact = Nothing, contactRequestId = Nothing, contactGroupMemberId = Just groupMemberId, contactGrpInvSent = False, groupDirectInv = Nothing, chatTags = [], chatItemTTL = Nothing, uiThemes = Nothing, chatDeleted = False, customData = Nothing} -getMemberContact :: DB.Connection -> VersionRangeChat -> User -> ContactId -> ExceptT StoreError IO (GroupInfo, GroupMember, Contact, ConnReqInvitation) -getMemberContact db vr user contactId = do - ct <- getContact db vr user contactId +getMemberContact :: DB.Connection -> StoreCxt -> User -> ContactId -> ExceptT StoreError IO (GroupInfo, GroupMember, Contact, ConnReqInvitation) +getMemberContact db cxt user contactId = do + ct <- getContact db cxt user contactId let Contact {contactGroupMemberId, activeConn} = ct case (activeConn, contactGroupMemberId) of (Just Connection {connId}, Just groupMemberId) -> do cReq <- getConnReqInv db connId - m@GroupMember {groupId} <- getGroupMemberById db vr user groupMemberId - g <- getGroupInfo db vr user groupId + m@GroupMember {groupId} <- getGroupMemberById db cxt user groupMemberId + g <- getGroupInfo db cxt user groupId pure (g, m, ct, cReq) _ -> throwError $ SEMemberContactGroupMemberNotFound contactId @@ -2964,13 +2964,13 @@ createMemberContactConn forM_ cmdId_ $ \cmdId -> setCommandConnId db user cmdId connId pure connId -getMemberContactInvited :: DB.Connection -> VersionRangeChat -> User -> ContactId -> ExceptT StoreError IO (GroupInfo, Connection, Contact, GroupDirectInvitation) -getMemberContactInvited db vr user contactId = do - ct@Contact {groupDirectInv = groupDirectInv_} <- getContact db vr user contactId +getMemberContactInvited :: DB.Connection -> StoreCxt -> User -> ContactId -> ExceptT StoreError IO (GroupInfo, Connection, Contact, GroupDirectInvitation) +getMemberContactInvited db cxt user contactId = do + ct@Contact {groupDirectInv = groupDirectInv_} <- getContact db cxt user contactId case groupDirectInv_ of Just groupDirectInv@GroupDirectInvitation {fromGroupId_ = Just groupId, fromGroupMemberId_ = Just _gmId, fromGroupMemberConnId_ = Just mConnId} -> do - g <- getGroupInfo db vr user groupId - mConn <- getConnectionById db vr user mConnId + g <- getGroupInfo db cxt user groupId + mConn <- getConnectionById db cxt user mConnId pure (g, mConn, ct, groupDirectInv) _ -> throwError $ SEMemberContactGroupMemberNotFound contactId @@ -3032,8 +3032,8 @@ setXGrpLinkMemReceived db mId xGrpLinkMemReceived = do "UPDATE group_members SET xgrplinkmem_received = ?, updated_at = ? WHERE group_member_id = ?" (BI xGrpLinkMemReceived, currentTs, mId) -createNewUnknownGroupMember :: DB.Connection -> VersionRangeChat -> User -> GroupInfo -> MemberId -> Text -> GroupMemberRole -> ExceptT StoreError IO GroupMember -createNewUnknownGroupMember db vr user@User {userId, userContactId} GroupInfo {groupId} memberId memberName unknownMemberRole = do +createNewUnknownGroupMember :: DB.Connection -> StoreCxt -> User -> GroupInfo -> MemberId -> Text -> GroupMemberRole -> ExceptT StoreError IO GroupMember +createNewUnknownGroupMember db cxt user@User {userId, userContactId} GroupInfo {groupId} memberId memberName unknownMemberRole = do currentTs <- liftIO getCurrentTime let memberProfile = profileFromName memberName (localDisplayName, profileId) <- createNewMemberProfile_ db user memberProfile currentTs @@ -3053,12 +3053,12 @@ createNewUnknownGroupMember db vr user@User {userId, userContactId} GroupInfo {g :. (minV, maxV) ) groupMemberId <- liftIO $ insertedRowId db - getGroupMemberById db vr user groupMemberId + getGroupMemberById db cxt user groupMemberId where - VersionRange minV maxV = vr + VersionRange minV maxV = vr cxt -createLinkOwnerMember :: DB.Connection -> VersionRangeChat -> User -> GroupInfo -> Maybe ContactId -> MemberId -> C.PublicKeyEd25519 -> ExceptT StoreError IO GroupMember -createLinkOwnerMember db vr user@User {userId, userContactId} GroupInfo {groupId} contactId_ memberId ownerKey = do +createLinkOwnerMember :: DB.Connection -> StoreCxt -> User -> GroupInfo -> Maybe ContactId -> MemberId -> C.PublicKeyEd25519 -> ExceptT StoreError IO GroupMember +createLinkOwnerMember db cxt user@User {userId, userContactId} GroupInfo {groupId} contactId_ memberId ownerKey = do currentTs <- liftIO getCurrentTime let memberProfile = profileFromName $ nameFromMemberId memberId (localDisplayName, profileId) <- createNewMemberProfile_ db user memberProfile currentTs @@ -3078,15 +3078,15 @@ createLinkOwnerMember db vr user@User {userId, userContactId} GroupInfo {groupId :. (minV, maxV) ) groupMemberId <- liftIO $ insertedRowId db - getGroupMemberById db vr user groupMemberId + getGroupMemberById db cxt user groupMemberId where - VersionRange minV maxV = vr + VersionRange minV maxV = vr cxt -- member_pub_key is not updated here — introduced members are owners -- whose keys are loaded from link data (trusted out-of-band). -- Updating from an in-band message would allow a compromised relay to substitute keys. -updatePreparedChannelMember :: DB.Connection -> VersionRangeChat -> User -> GroupMember -> MemberInfo -> ExceptT StoreError IO GroupMember -updatePreparedChannelMember db vr user@User {userId} member@GroupMember {groupMemberId, memberChatVRange} MemberInfo {memberRole, v, profile} = do +updatePreparedChannelMember :: DB.Connection -> StoreCxt -> User -> GroupMember -> MemberInfo -> ExceptT StoreError IO GroupMember +updatePreparedChannelMember db cxt user@User {userId} member@GroupMember {groupMemberId, memberChatVRange} MemberInfo {memberRole, v, profile} = do _ <- updateMemberProfile db user member profile currentTs <- liftIO getCurrentTime liftIO $ @@ -3102,12 +3102,12 @@ updatePreparedChannelMember db vr user@User {userId} member@GroupMember {groupMe WHERE user_id = ? AND group_member_id = ? |] (memberRole, GSMemIntroduced, minV, maxV, currentTs, userId, groupMemberId) - getGroupMemberById db vr user groupMemberId + getGroupMemberById db cxt user groupMemberId where VersionRange minV maxV = maybe memberChatVRange fromChatVRange v -updateUnknownMemberAnnounced :: DB.Connection -> VersionRangeChat -> User -> GroupMember -> GroupMember -> MemberInfo -> GroupMemberStatus -> ExceptT StoreError IO GroupMember -updateUnknownMemberAnnounced db vr user@User {userId} invitingMember unknownMember@GroupMember {groupMemberId, memberChatVRange} MemberInfo {memberRole, v, profile, memberKey} status = do +updateUnknownMemberAnnounced :: DB.Connection -> StoreCxt -> User -> GroupMember -> GroupMember -> MemberInfo -> GroupMemberStatus -> ExceptT StoreError IO GroupMember +updateUnknownMemberAnnounced db cxt user@User {userId} invitingMember unknownMember@GroupMember {groupMemberId, memberChatVRange} MemberInfo {memberRole, v, profile, memberKey} status = do _ <- updateMemberProfile db user unknownMember profile currentTs <- liftIO getCurrentTime liftIO $ @@ -3128,7 +3128,7 @@ updateUnknownMemberAnnounced db vr user@User {userId} invitingMember unknownMemb ( (memberRole, GCPostMember, status, groupMemberId' invitingMember) :. (minV, maxV, memberPubKey_, currentTs, userId, groupMemberId) ) - getGroupMemberById db vr user groupMemberId + getGroupMemberById db cxt user groupMemberId where VersionRange minV maxV = maybe memberChatVRange fromChatVRange v memberPubKey_ = (\(MemberKey k) -> k) <$> memberKey diff --git a/src/Simplex/Chat/Store/Messages.hs b/src/Simplex/Chat/Store/Messages.hs index 5d433088a4..76e0a0fd97 100644 --- a/src/Simplex/Chat/Store/Messages.hs +++ b/src/Simplex/Chat/Store/Messages.hs @@ -396,8 +396,8 @@ data MemberAttention | MAReset deriving (Show) -updateChatTsStats :: DB.Connection -> VersionRangeChat -> User -> ChatDirection c d -> UTCTime -> Maybe (Int, MemberAttention, Int) -> IO (ChatInfo c) -updateChatTsStats db vr user@User {userId} chatDirection chatTs chatStats_ = case toChatInfo chatDirection of +updateChatTsStats :: DB.Connection -> StoreCxt -> User -> ChatDirection c d -> UTCTime -> Maybe (Int, MemberAttention, Int) -> IO (ChatInfo c) +updateChatTsStats db cxt user@User {userId} chatDirection chatTs chatStats_ = case toChatInfo chatDirection of DirectChat ct@Contact {contactId} -> do DB.execute db @@ -506,7 +506,7 @@ updateChatTsStats db vr user@User {userId} chatDirection chatTs chatStats_ = cas WHERE group_member_id = ? |] (chatTs, unread, mentions, groupMemberId) - m_ <- runExceptT $ getGroupMemberById db vr user groupMemberId + m_ <- runExceptT $ getGroupMemberById db cxt user groupMemberId pure $ either (const m) id m_ -- Left shouldn't happen, but types require it LocalChat nf@NoteFolder {noteFolderId} -> do DB.execute @@ -520,8 +520,8 @@ setSupportChatTs :: DB.Connection -> GroupMemberId -> UTCTime -> IO () setSupportChatTs db groupMemberId chatTs = DB.execute db "UPDATE group_members SET support_chat_ts = ? WHERE group_member_id = ?" (chatTs, groupMemberId) -setSupportChatMemberAttention :: DB.Connection -> VersionRangeChat -> User -> GroupInfo -> GroupMember -> Int64 -> IO (GroupInfo, GroupMember) -setSupportChatMemberAttention db vr user g m memberAttention = do +setSupportChatMemberAttention :: DB.Connection -> StoreCxt -> User -> GroupInfo -> GroupMember -> Int64 -> IO (GroupInfo, GroupMember) +setSupportChatMemberAttention db cxt user g m memberAttention = do m' <- updateGMAttention g' <- updateGroupMembersRequireAttention db user g m m' pure (g', m') @@ -532,7 +532,7 @@ setSupportChatMemberAttention db vr user g m memberAttention = do db "UPDATE group_members SET support_chat_items_member_attention = ?, updated_at = ? WHERE group_member_id = ?" (memberAttention, currentTs, groupMemberId' m) - m_ <- runExceptT $ getGroupMemberById db vr user (groupMemberId' m) + m_ <- runExceptT $ getGroupMemberById db cxt user (groupMemberId' m) pure $ either (const m) id m_ -- Left shouldn't happen, but types require it createNewSndChatItem :: DB.Connection -> User -> ChatDirection c 'MDSnd -> ShowGroupAsSender -> SndMessage -> CIContent 'MDSnd -> Maybe (CIQuote c) -> Maybe CIForwardedFrom -> Maybe CITimed -> Bool -> Bool -> UTCTime -> IO ChatItemId @@ -723,8 +723,8 @@ getChatItemQuote_ db User {userId, userContactId} chatDirection QuotedMsg {msgRe ciQuoteGroup [] = ciQuote Nothing $ CIQGroupRcv Nothing ciQuoteGroup ((Only itemId :. memberRow) : _) = ciQuote itemId . CIQGroupRcv . Just $ toGroupMember userContactId memberRow -getChatPreviews :: DB.Connection -> VersionRangeChat -> User -> Bool -> PaginationByTime -> ChatListQuery -> IO [Either StoreError AChat] -getChatPreviews db vr user withPCC pagination query = do +getChatPreviews :: DB.Connection -> StoreCxt -> User -> Bool -> PaginationByTime -> ChatListQuery -> IO [Either StoreError AChat] +getChatPreviews db cxt user withPCC pagination query = do directChats <- findDirectChatPreviews_ db user pagination query groupChats <- findGroupChatPreviews_ db user pagination query localChats <- findLocalChatPreviews_ db user pagination query @@ -746,8 +746,8 @@ getChatPreviews db vr user withPCC pagination query = do PTBefore _ count -> take count . sortBy (comparing $ Down . ts) getChatPreview :: AChatPreviewData -> ExceptT StoreError IO AChat getChatPreview (ACPD cType cpd) = case cType of - SCTDirect -> getDirectChatPreview_ db vr user cpd - SCTGroup -> getGroupChatPreview_ db vr user cpd + SCTDirect -> getDirectChatPreview_ db cxt user cpd + SCTGroup -> getGroupChatPreview_ db cxt user cpd SCTLocal -> getLocalChatPreview_ db user cpd SCTContactRequest -> let (ContactRequestPD _ chat) = cpd in pure chat SCTContactConnection -> let (ContactConnectionPD _ chat) = cpd in pure chat @@ -864,9 +864,9 @@ findDirectChatPreviews_ db User {userId} pagination clq = PTAfter ts count -> DB.query db (query <> " AND ct.chat_ts > ? ORDER BY ct.chat_ts ASC LIMIT ?") (params :. (ts, count)) PTBefore ts count -> DB.query db (query <> " AND ct.chat_ts < ? ORDER BY ct.chat_ts DESC LIMIT ?") (params :. (ts, count)) -getDirectChatPreview_ :: DB.Connection -> VersionRangeChat -> User -> ChatPreviewData 'CTDirect -> ExceptT StoreError IO AChat -getDirectChatPreview_ db vr user (DirectChatPD _ contactId lastItemId_ stats) = do - contact <- getContact db vr user contactId +getDirectChatPreview_ :: DB.Connection -> StoreCxt -> User -> ChatPreviewData 'CTDirect -> ExceptT StoreError IO AChat +getDirectChatPreview_ db cxt user (DirectChatPD _ contactId lastItemId_ stats) = do + contact <- getContact db cxt user contactId ts <- liftIO getCurrentTime lastItem <- case lastItemId_ of Just lastItemId -> do @@ -975,9 +975,9 @@ findGroupChatPreviews_ db User {userId} pagination clq = PTAfter ts count -> DB.query db (query <> " AND g.chat_ts > ? ORDER BY g.chat_ts ASC LIMIT ?") (params :. (ts, count)) PTBefore ts count -> DB.query db (query <> " AND g.chat_ts < ? ORDER BY g.chat_ts DESC LIMIT ?") (params :. (ts, count)) -getGroupChatPreview_ :: DB.Connection -> VersionRangeChat -> User -> ChatPreviewData 'CTGroup -> ExceptT StoreError IO AChat -getGroupChatPreview_ db vr user (GroupChatPD _ groupId lastItemId_ stats) = do - groupInfo <- getGroupInfo db vr user groupId +getGroupChatPreview_ :: DB.Connection -> StoreCxt -> User -> ChatPreviewData 'CTGroup -> ExceptT StoreError IO AChat +getGroupChatPreview_ db cxt user (GroupChatPD _ groupId lastItemId_ stats) = do + groupInfo <- getGroupInfo db cxt user groupId ts <- liftIO getCurrentTime lastItem <- case lastItemId_ of Just lastItemId -> do @@ -1213,10 +1213,10 @@ getChatContentTypes db User {userId} (ChatRef cType chatId chatScope_) = case cT ("SELECT DISTINCT msg_content_tag FROM chat_items WHERE user_id = ? AND " <> cond <> " AND msg_content_tag IS NOT NULL ORDER BY msg_content_tag") ((userId, chatId) :. params) -getDirectChat :: DB.Connection -> VersionRangeChat -> User -> Int64 -> Maybe MsgContentTag -> ChatPagination -> Maybe Text -> ExceptT StoreError IO (Chat 'CTDirect, Maybe NavigationInfo) -getDirectChat db vr user contactId contentFilter pagination search_ = do +getDirectChat :: DB.Connection -> StoreCxt -> User -> Int64 -> Maybe MsgContentTag -> ChatPagination -> Maybe Text -> ExceptT StoreError IO (Chat 'CTDirect, Maybe NavigationInfo) +getDirectChat db cxt user contactId contentFilter pagination search_ = do let search = fromMaybe "" search_ - ct <- getContact db vr user contactId + ct <- getContact db cxt user contactId case pagination of CPLast count -> (,Nothing) <$> getDirectChatLast_ db user ct contentFilter count search CPAfter afterId count -> (,Nothing) <$> getDirectChatAfter_ db user ct contentFilter afterId count search @@ -1433,11 +1433,11 @@ getContactNavInfo_ db User {userId} Contact {contactId} afterCI = do :. (userId, contactId, ciCreatedAt afterCI, cChatItemId afterCI) ) -getGroupChat :: DB.Connection -> VersionRangeChat -> User -> Int64 -> Maybe GroupChatScope -> Maybe MsgContentTag -> ChatPagination -> Maybe Text -> ExceptT StoreError IO (Chat 'CTGroup, Maybe NavigationInfo) -getGroupChat db vr user groupId scope_ contentFilter pagination search_ = do +getGroupChat :: DB.Connection -> StoreCxt -> User -> Int64 -> Maybe GroupChatScope -> Maybe MsgContentTag -> ChatPagination -> Maybe Text -> ExceptT StoreError IO (Chat 'CTGroup, Maybe NavigationInfo) +getGroupChat db cxt user groupId scope_ contentFilter pagination search_ = do let search = fromMaybe "" search_ - g <- getGroupInfo db vr user groupId - scopeInfo <- mapM (getCreateGroupChatScopeInfo db vr user g) scope_ + g <- getGroupInfo db cxt user groupId + scopeInfo <- mapM (getCreateGroupChatScopeInfo db cxt user g) scope_ case pagination of CPLast count -> (,Nothing) <$> getGroupChatLast_ db user g scopeInfo contentFilter count search emptyChatStats CPAfter afterId count -> (,Nothing) <$> getGroupChatAfter_ db user g scopeInfo contentFilter afterId count search @@ -1447,31 +1447,31 @@ getGroupChat db vr user groupId scope_ contentFilter pagination search_ = do unless (T.null search) $ throwError $ SEInternalError "initial chat pagination doesn't support search" getGroupChatInitial_ db user g scopeInfo contentFilter count -getCreateGroupChatScopeInfo :: DB.Connection -> VersionRangeChat -> User -> GroupInfo -> GroupChatScope -> ExceptT StoreError IO GroupChatScopeInfo -getCreateGroupChatScopeInfo db vr user GroupInfo {membership} = \case +getCreateGroupChatScopeInfo :: DB.Connection -> StoreCxt -> User -> GroupInfo -> GroupChatScope -> ExceptT StoreError IO GroupChatScopeInfo +getCreateGroupChatScopeInfo db cxt user GroupInfo {membership} = \case GCSMemberSupport Nothing -> do when (isNothing $ supportChat membership) $ do ts <- liftIO getCurrentTime liftIO $ setSupportChatTs db (groupMemberId' membership) ts pure $ GCSIMemberSupport {groupMember_ = Nothing} GCSMemberSupport (Just gmId) -> do - m <- getGroupMemberById db vr user gmId + m <- getGroupMemberById db cxt user gmId when (isNothing $ supportChat m) $ do ts <- liftIO getCurrentTime liftIO $ setSupportChatTs db gmId ts pure GCSIMemberSupport {groupMember_ = Just m} -getGroupChatScopeInfoForItem :: DB.Connection -> VersionRangeChat -> User -> GroupInfo -> ChatItemId -> ExceptT StoreError IO (Maybe GroupChatScopeInfo) -getGroupChatScopeInfoForItem db vr user g itemId = - getGroupChatScopeForItem_ db itemId >>= mapM (getGroupChatScopeInfo db vr user g) +getGroupChatScopeInfoForItem :: DB.Connection -> StoreCxt -> User -> GroupInfo -> ChatItemId -> ExceptT StoreError IO (Maybe GroupChatScopeInfo) +getGroupChatScopeInfoForItem db cxt user g itemId = + getGroupChatScopeForItem_ db itemId >>= mapM (getGroupChatScopeInfo db cxt user g) -getGroupChatScopeInfo :: DB.Connection -> VersionRangeChat -> User -> GroupInfo -> GroupChatScope -> ExceptT StoreError IO GroupChatScopeInfo -getGroupChatScopeInfo db vr user GroupInfo {membership} = \case +getGroupChatScopeInfo :: DB.Connection -> StoreCxt -> User -> GroupInfo -> GroupChatScope -> ExceptT StoreError IO GroupChatScopeInfo +getGroupChatScopeInfo db cxt user GroupInfo {membership} = \case GCSMemberSupport Nothing -> case supportChat membership of Nothing -> throwError $ SEInternalError "no moderators support chat" Just _supportChat -> pure $ GCSIMemberSupport {groupMember_ = Nothing} GCSMemberSupport (Just gmId) -> do - m <- getGroupMemberById db vr user gmId + m <- getGroupMemberById db cxt user gmId case supportChat m of Nothing -> throwError $ SEInternalError "no support chat" Just _supportChat -> pure GCSIMemberSupport {groupMember_ = Just m} @@ -2077,8 +2077,8 @@ updateGroupChatItemsRead db User {userId} GroupInfo {groupId} = do |] (CISRcvRead, currentTs, userId, groupId, CISRcvNew) -updateSupportChatItemsRead :: DB.Connection -> VersionRangeChat -> User -> GroupInfo -> GroupChatScopeInfo -> IO (GroupInfo, GroupMember) -updateSupportChatItemsRead db vr user@User {userId} g@GroupInfo {groupId, membership} scopeInfo = do +updateSupportChatItemsRead :: DB.Connection -> StoreCxt -> User -> GroupInfo -> GroupChatScopeInfo -> IO (GroupInfo, GroupMember) +updateSupportChatItemsRead db cxt user@User {userId} g@GroupInfo {groupId, membership} scopeInfo = do currentTs <- getCurrentTime case scopeInfo of GCSIMemberSupport {groupMember_} -> do @@ -2116,7 +2116,7 @@ updateSupportChatItemsRead db vr user@User {userId} g@GroupInfo {groupId, member WHERE group_member_id = ? |] (currentTs, groupMemberId) - m_ <- runExceptT $ getGroupMemberById db vr user groupMemberId + m_ <- runExceptT $ getGroupMemberById db cxt user groupMemberId pure $ either (const m) id m_ -- Left shouldn't happen, but types require it getGroupUnreadTimedItems :: DB.Connection -> User -> GroupId -> Maybe GroupChatScope -> IO [(ChatItemId, Int)] @@ -2144,8 +2144,8 @@ getGroupUnreadTimedItems db User {userId} groupId scope = |] (userId, groupId, GCSTMemberSupport_, groupMemberId_, CISRcvNew) -updateGroupChatItemsReadList :: DB.Connection -> VersionRangeChat -> User -> GroupInfo -> Maybe GroupChatScopeInfo -> NonEmpty ChatItemId -> ExceptT StoreError IO ([(ChatItemId, Int)], GroupInfo) -updateGroupChatItemsReadList db vr user@User {userId} g@GroupInfo {groupId} scopeInfo_ itemIds = do +updateGroupChatItemsReadList :: DB.Connection -> StoreCxt -> User -> GroupInfo -> Maybe GroupChatScopeInfo -> NonEmpty ChatItemId -> ExceptT StoreError IO ([(ChatItemId, Int)], GroupInfo) +updateGroupChatItemsReadList db cxt user@User {userId} g@GroupInfo {groupId} scopeInfo_ itemIds = do currentTs <- liftIO getCurrentTime -- Possible improvement is to differentiate retrieval queries for each scope, -- but we rely on UI to not pass item IDs from incorrect scope. @@ -2154,7 +2154,7 @@ updateGroupChatItemsReadList db vr user@User {userId} g@GroupInfo {groupId} scop Nothing -> pure g Just scopeInfo@GCSIMemberSupport {groupMember_} -> do let decStats = countReadItems groupMember_ readItemsData - liftIO $ updateGroupScopeUnreadStats db vr user g scopeInfo decStats + liftIO $ updateGroupScopeUnreadStats db cxt user g scopeInfo decStats pure (timedItems readItemsData, g') where getUpdateGroupItem :: UTCTime -> ChatItemId -> IO (Maybe (ChatItemId, Maybe Int, Maybe UTCTime, Maybe GroupMemberId, Maybe BoolInt)) @@ -2189,8 +2189,8 @@ updateGroupChatItemsReadList db vr user@User {userId} g@GroupInfo {groupId} scop addTimedItem acc (itemId, Just ttl, Nothing, _, _) = (itemId, ttl) : acc addTimedItem acc _ = acc -updateGroupScopeUnreadStats :: DB.Connection -> VersionRangeChat -> User -> GroupInfo -> GroupChatScopeInfo -> (Int, Int, Int) -> IO GroupInfo -updateGroupScopeUnreadStats db vr user g@GroupInfo {membership} scopeInfo (unread, unanswered, mentions) = +updateGroupScopeUnreadStats :: DB.Connection -> StoreCxt -> User -> GroupInfo -> GroupChatScopeInfo -> (Int, Int, Int) -> IO GroupInfo +updateGroupScopeUnreadStats db cxt user g@GroupInfo {membership} scopeInfo (unread, unanswered, mentions) = case scopeInfo of GCSIMemberSupport {groupMember_} -> case groupMember_ of Nothing -> do @@ -2228,7 +2228,7 @@ updateGroupScopeUnreadStats db vr user g@GroupInfo {membership} scopeInfo (unrea |] #endif (unread, unanswered, mentions, currentTs, groupMemberId) - m_ <- runExceptT $ getGroupMemberById db vr user groupMemberId + m_ <- runExceptT $ getGroupMemberById db cxt user groupMemberId pure $ either (const m) id m_ -- Left shouldn't happen, but types require it setGroupChatItemsDeleteAt :: DB.Connection -> User -> GroupId -> [(ChatItemId, Int)] -> UTCTime -> IO [(ChatItemId, UTCTime)] @@ -2403,8 +2403,8 @@ toGroupChatItem ciTimed :: Maybe CITimed ciTimed = timedTTL >>= \ttl -> Just CITimed {ttl, deleteAt = timedDeleteAt} -getAllChatItems :: DB.Connection -> VersionRangeChat -> User -> ChatPagination -> Maybe Text -> ExceptT StoreError IO [AChatItem] -getAllChatItems db vr user@User {userId} pagination search_ = do +getAllChatItems :: DB.Connection -> StoreCxt -> User -> ChatPagination -> Maybe Text -> ExceptT StoreError IO [AChatItem] +getAllChatItems db cxt user@User {userId} pagination search_ = do itemRefs <- rights . map toChatItemRef <$> case pagination of CPLast count -> liftIO $ getAllChatItemsLast_ count @@ -2416,12 +2416,12 @@ getAllChatItems db vr user@User {userId} pagination search_ = do liftIO getFirstUnreadItemId_ >>= \case Just itemId -> liftIO . getAllChatItemsAround_ itemId count . aChatItemTs =<< getAChatItem_ itemId Nothing -> liftIO $ getAllChatItemsLast_ count - mapM (uncurry (getAChatItem db vr user)) itemRefs + mapM (uncurry (getAChatItem db cxt user)) itemRefs where search = fromMaybe "" search_ getAChatItem_ itemId = do chatRef <- getChatRefViaItemId db user itemId - getAChatItem db vr user chatRef itemId + getAChatItem db cxt user chatRef itemId getAllChatItemsLast_ count = reverse <$> DB.query @@ -3208,8 +3208,8 @@ deleteLocalChatItem db User {userId} NoteFolder {noteFolderId} ci = do |] (userId, noteFolderId, itemId) -getChatItemByFileId :: DB.Connection -> VersionRangeChat -> User -> Int64 -> ExceptT StoreError IO AChatItem -getChatItemByFileId db vr user@User {userId} fileId = do +getChatItemByFileId :: DB.Connection -> StoreCxt -> User -> Int64 -> ExceptT StoreError IO AChatItem +getChatItemByFileId db cxt user@User {userId} fileId = do (chatRef, itemId) <- ExceptT . firstRow' toChatItemRef (SEChatItemNotFoundByFileId fileId) $ DB.query @@ -3222,16 +3222,16 @@ getChatItemByFileId db vr user@User {userId} fileId = do LIMIT 1 |] (userId, fileId) - getAChatItem db vr user chatRef itemId + getAChatItem db cxt user chatRef itemId -lookupChatItemByFileId :: DB.Connection -> VersionRangeChat -> User -> Int64 -> ExceptT StoreError IO (Maybe AChatItem) -lookupChatItemByFileId db vr user fileId = do - fmap Just (getChatItemByFileId db vr user fileId) `catchError` \case +lookupChatItemByFileId :: DB.Connection -> StoreCxt -> User -> Int64 -> ExceptT StoreError IO (Maybe AChatItem) +lookupChatItemByFileId db cxt user fileId = do + fmap Just (getChatItemByFileId db cxt user fileId) `catchError` \case SEChatItemNotFoundByFileId {} -> pure Nothing e -> throwError e -getChatItemByGroupId :: DB.Connection -> VersionRangeChat -> User -> GroupId -> ExceptT StoreError IO AChatItem -getChatItemByGroupId db vr user@User {userId} groupId = do +getChatItemByGroupId :: DB.Connection -> StoreCxt -> User -> GroupId -> ExceptT StoreError IO AChatItem +getChatItemByGroupId db cxt user@User {userId} groupId = do (chatRef, itemId) <- ExceptT . firstRow' toChatItemRef (SEChatItemNotFoundByGroupId groupId) $ DB.query @@ -3244,7 +3244,7 @@ getChatItemByGroupId db vr user@User {userId} groupId = do LIMIT 1 |] (userId, groupId) - getAChatItem db vr user chatRef itemId + getAChatItem db cxt user chatRef itemId getChatRefViaItemId :: DB.Connection -> User -> ChatItemId -> ExceptT StoreError IO ChatRef getChatRefViaItemId db User {userId} itemId = do @@ -3257,17 +3257,17 @@ getChatRefViaItemId db User {userId} itemId = do (Nothing, Just groupId) -> Right $ ChatRef CTGroup groupId Nothing (_, _) -> Left $ SEBadChatItem itemId Nothing -getAChatItem :: DB.Connection -> VersionRangeChat -> User -> ChatRef -> ChatItemId -> ExceptT StoreError IO AChatItem -getAChatItem db vr user (ChatRef cType chatId scope) itemId = do +getAChatItem :: DB.Connection -> StoreCxt -> User -> ChatRef -> ChatItemId -> ExceptT StoreError IO AChatItem +getAChatItem db cxt user (ChatRef cType chatId scope) itemId = do aci <- case cType of CTDirect -> do - ct <- getContact db vr user chatId + ct <- getContact db cxt user chatId (CChatItem msgDir ci) <- getDirectChatItem db user chatId itemId pure $ AChatItem SCTDirect msgDir (DirectChat ct) ci CTGroup -> do - gInfo <- getGroupInfo db vr user chatId + gInfo <- getGroupInfo db cxt user chatId (CChatItem msgDir ci) <- getGroupChatItem db user chatId itemId - scopeInfo <- mapM (getGroupChatScopeInfo db vr user gInfo) scope + scopeInfo <- mapM (getGroupChatScopeInfo db cxt user gInfo) scope pure $ AChatItem SCTGroup msgDir (GroupChat gInfo scopeInfo) ci CTLocal -> do nf <- getNoteFolder db user chatId @@ -3443,8 +3443,8 @@ setGroupReaction db GroupInfo {groupId} m itemMemberId itemSharedMId sent reacti |] (groupId, groupMemberId' m, itemSharedMId, itemMemberId, BI sent, reaction) -getReactionMembers :: DB.Connection -> VersionRangeChat -> User -> GroupId -> SharedMsgId -> MsgReaction -> IO [MemberReaction] -getReactionMembers db vr user groupId itemSharedMId reaction = do +getReactionMembers :: DB.Connection -> StoreCxt -> User -> GroupId -> SharedMsgId -> MsgReaction -> IO [MemberReaction] +getReactionMembers db cxt user groupId itemSharedMId reaction = do reactions <- DB.query db @@ -3458,7 +3458,7 @@ getReactionMembers db vr user groupId itemSharedMId reaction = do where toMemberReaction :: (GroupMemberId, UTCTime) -> ExceptT StoreError IO MemberReaction toMemberReaction (groupMemberId, reactionTs) = do - groupMember <- getGroupMemberById db vr user groupMemberId + groupMember <- getGroupMemberById db cxt user groupMemberId pure MemberReaction {groupMember, reactionTs} getTimedItems :: DB.Connection -> User -> UTCTime -> IO [((ChatRef, ChatItemId), UTCTime)] @@ -3556,9 +3556,9 @@ createCIModeration db GroupInfo {groupId} moderatorMember itemMemberId itemShare |] (groupId, groupMemberId' moderatorMember, itemMemberId, itemSharedMId, msgId, moderatedAtTs) -getCIModeration :: DB.Connection -> VersionRangeChat -> User -> GroupInfo -> MemberId -> Maybe SharedMsgId -> IO (Maybe CIModeration) +getCIModeration :: DB.Connection -> StoreCxt -> User -> GroupInfo -> MemberId -> Maybe SharedMsgId -> IO (Maybe CIModeration) getCIModeration _ _ _ _ _ Nothing = pure Nothing -getCIModeration db vr user GroupInfo {groupId} itemMemberId (Just sharedMsgId) = do +getCIModeration db cxt user GroupInfo {groupId} itemMemberId (Just sharedMsgId) = do r_ <- maybeFirstRow id $ DB.query @@ -3572,7 +3572,7 @@ getCIModeration db vr user GroupInfo {groupId} itemMemberId (Just sharedMsgId) = (groupId, itemMemberId, sharedMsgId) case r_ of Just (moderationId, moderatorId, createdByMsgId, moderatedAt) -> do - runExceptT (getGroupMember db vr user groupId moderatorId) >>= \case + runExceptT (getGroupMember db cxt user groupId moderatorId) >>= \case Right moderatorMember -> pure (Just CIModeration {moderationId, moderatorMember, createdByMsgId, moderatedAt}) _ -> pure Nothing _ -> pure Nothing diff --git a/src/Simplex/Chat/Store/Profiles.hs b/src/Simplex/Chat/Store/Profiles.hs index cff3e68234..d432067866 100644 --- a/src/Simplex/Chat/Store/Profiles.hs +++ b/src/Simplex/Chat/Store/Profiles.hs @@ -380,9 +380,9 @@ createUserContactLink db User {userId} agentConnId (CCLink cReq shortLink) subMo userContactLinkId <- insertedRowId db void $ createConnection_ db userId ConnUserContact (Just userContactLinkId) agentConnId ConnNew initialChatVersion chatInitialVRange Nothing Nothing Nothing 0 currentTs subMode CR.PQSupportOff -getUserAddressConnection :: DB.Connection -> VersionRangeChat -> User -> ExceptT StoreError IO Connection -getUserAddressConnection db vr User {userId} = do - ExceptT . firstRow (toConnection vr) SEUserContactLinkNotFound $ +getUserAddressConnection :: DB.Connection -> StoreCxt -> User -> ExceptT StoreError IO Connection +getUserAddressConnection db cxt User {userId} = do + ExceptT . firstRow (toConnection cxt) SEUserContactLinkNotFound $ DB.query db [sql| @@ -525,8 +525,8 @@ setUserContactLinkShortLink db userContactLinkId shortLink = |] (shortLink, BI True, BI True, BI False, userContactLinkId) -getContactWithoutConnViaAddress :: DB.Connection -> VersionRangeChat -> User -> (ConnReqContact, ConnReqContact) -> IO (Maybe Contact) -getContactWithoutConnViaAddress db vr user@User {userId} (cReqSchema1, cReqSchema2) = do +getContactWithoutConnViaAddress :: DB.Connection -> StoreCxt -> User -> (ConnReqContact, ConnReqContact) -> IO (Maybe Contact) +getContactWithoutConnViaAddress db cxt user@User {userId} (cReqSchema1, cReqSchema2) = do ctId_ <- maybeFirstRow fromOnly $ DB.query @@ -539,10 +539,10 @@ getContactWithoutConnViaAddress db vr user@User {userId} (cReqSchema1, cReqSchem WHERE cp.user_id = ? AND cp.contact_link IN (?,?) AND c.connection_id IS NULL |] (userId, cReqSchema1, cReqSchema2) - maybe (pure Nothing) (fmap eitherToMaybe . runExceptT . getContact db vr user) ctId_ + maybe (pure Nothing) (fmap eitherToMaybe . runExceptT . getContact db cxt user) ctId_ -getContactWithoutConnViaShortAddress :: DB.Connection -> VersionRangeChat -> User -> ShortLinkContact -> IO (Maybe Contact) -getContactWithoutConnViaShortAddress db vr user@User {userId} shortLink = do +getContactWithoutConnViaShortAddress :: DB.Connection -> StoreCxt -> User -> ShortLinkContact -> IO (Maybe Contact) +getContactWithoutConnViaShortAddress db cxt user@User {userId} shortLink = do ctId_ <- maybeFirstRow fromOnly $ DB.query @@ -555,7 +555,7 @@ getContactWithoutConnViaShortAddress db vr user@User {userId} shortLink = do WHERE cp.user_id = ? AND cp.contact_link = ? AND c.connection_id IS NULL |] (userId, shortLink) - maybe (pure Nothing) (fmap eitherToMaybe . runExceptT . getContact db vr user) ctId_ + maybe (pure Nothing) (fmap eitherToMaybe . runExceptT . getContact db cxt user) ctId_ updateUserAddressSettings :: DB.Connection -> Int64 -> AddressSettings -> IO () updateUserAddressSettings db userContactLinkId AddressSettings {businessAddress, autoAccept, autoReply} = diff --git a/src/Simplex/Chat/Store/Shared.hs b/src/Simplex/Chat/Store/Shared.hs index bd51b10329..f7b525243c 100644 --- a/src/Simplex/Chat/Store/Shared.hs +++ b/src/Simplex/Chat/Store/Shared.hs @@ -228,12 +228,12 @@ type ConnectionRow = (Int64, ConnId, Int, Maybe Int64, Maybe Int64, BoolInt, May type MaybeConnectionRow = (Maybe Int64, Maybe ConnId, Maybe Int, Maybe Int64, Maybe Int64, Maybe BoolInt, Maybe GroupLinkId, Maybe XContactId) :. (Maybe Int64, Maybe ConnStatus, Maybe ConnType, Maybe BoolInt, Maybe LocalAlias) :. EntityIdsRow :. (Maybe UTCTime, Maybe Text, Maybe UTCTime, Maybe PQSupport, Maybe PQEncryption, Maybe PQEncryption, Maybe PQEncryption, Maybe Int, Maybe Int, Maybe VersionChat, Maybe VersionChat, Maybe VersionChat) -toConnection :: VersionRangeChat -> ConnectionRow -> Connection -toConnection vr ((connId, acId, connLevel, viaContact, viaUserContactLink, BI viaGroupLink, groupLinkId, xContactId) :. (customUserProfileId, connStatus, connType, BI contactConnInitiated, localAlias) :. (contactId, groupMemberId, userContactLinkId) :. (createdAt, code_, verifiedAt_, pqSupport, pqEncryption, pqSndEnabled, pqRcvEnabled, authErrCounter, quotaErrCounter, chatV, minVer, maxVer)) = +toConnection :: StoreCxt -> ConnectionRow -> Connection +toConnection cxt ((connId, acId, connLevel, viaContact, viaUserContactLink, BI viaGroupLink, groupLinkId, xContactId) :. (customUserProfileId, connStatus, connType, BI contactConnInitiated, localAlias) :. (contactId, groupMemberId, userContactLinkId) :. (createdAt, code_, verifiedAt_, pqSupport, pqEncryption, pqSndEnabled, pqRcvEnabled, authErrCounter, quotaErrCounter, chatV, minVer, maxVer)) = Connection { connId, agentConnId = AgentConnId acId, - connChatVersion = fromMaybe (vr `peerConnChatVersion` peerChatVRange) chatV, + connChatVersion = fromMaybe (vr cxt `peerConnChatVersion` peerChatVRange) chatV, peerChatVRange = peerChatVRange, connLevel, viaContact, @@ -263,9 +263,9 @@ toConnection vr ((connId, acId, connLevel, viaContact, viaUserContactLink, BI vi entityId_ ConnMember = groupMemberId entityId_ ConnUserContact = userContactLinkId -toMaybeConnection :: VersionRangeChat -> MaybeConnectionRow -> Maybe Connection -toMaybeConnection vr ((Just connId, Just agentConnId, Just connLevel, viaContact, viaUserContactLink, Just viaGroupLink, groupLinkId, xContactId) :. (customUserProfileId, Just connStatus, Just connType, Just contactConnInitiated, Just localAlias) :. (contactId, groupMemberId, userContactLinkId) :. (Just createdAt, code_, verifiedAt_, Just pqSupport, Just pqEncryption, pqSndEnabled_, pqRcvEnabled_, Just authErrCounter, Just quotaErrCounter, connChatVersion, Just minVer, Just maxVer)) = - Just $ toConnection vr ((connId, agentConnId, connLevel, viaContact, viaUserContactLink, viaGroupLink, groupLinkId, xContactId) :. (customUserProfileId, connStatus, connType, contactConnInitiated, localAlias) :. (contactId, groupMemberId, userContactLinkId) :. (createdAt, code_, verifiedAt_, pqSupport, pqEncryption, pqSndEnabled_, pqRcvEnabled_, authErrCounter, quotaErrCounter, connChatVersion, minVer, maxVer)) +toMaybeConnection :: StoreCxt -> MaybeConnectionRow -> Maybe Connection +toMaybeConnection cxt ((Just connId, Just agentConnId, Just connLevel, viaContact, viaUserContactLink, Just viaGroupLink, groupLinkId, xContactId) :. (customUserProfileId, Just connStatus, Just connType, Just contactConnInitiated, Just localAlias) :. (contactId, groupMemberId, userContactLinkId) :. (Just createdAt, code_, verifiedAt_, Just pqSupport, Just pqEncryption, pqSndEnabled_, pqRcvEnabled_, Just authErrCounter, Just quotaErrCounter, connChatVersion, Just minVer, Just maxVer)) = + Just $ toConnection cxt ((connId, agentConnId, connLevel, viaContact, viaUserContactLink, viaGroupLink, groupLinkId, xContactId) :. (customUserProfileId, connStatus, connType, contactConnInitiated, localAlias) :. (contactId, groupMemberId, userContactLinkId) :. (createdAt, code_, verifiedAt_, pqSupport, pqEncryption, pqSndEnabled_, pqRcvEnabled_, authErrCounter, quotaErrCounter, connChatVersion, minVer, maxVer)) toMaybeConnection _ _ = Nothing createConnection_ :: DB.Connection -> UserId -> ConnType -> Maybe Int64 -> ConnId -> ConnStatus -> VersionChat -> VersionRangeChat -> Maybe ContactId -> Maybe Int64 -> Maybe ProfileId -> Int -> UTCTime -> SubscriptionMode -> PQSupport -> IO Connection @@ -488,10 +488,10 @@ type ContactRow' = (ProfileId, ContactName, ContactName, Text, Maybe Text, Maybe type ContactRow = Only ContactId :. ContactRow' -toContact :: VersionRangeChat -> User -> [ChatTagId] -> ContactRow :. MaybeConnectionRow -> Contact -toContact vr user chatTags ((Only contactId :. (profileId, localDisplayName, displayName, fullName, shortDescr, image, contactLink, peerType, localAlias, BI contactUsed, contactStatus) :. (enableNtfs_, sendRcpts, BI favorite, preferences, userPreferences, createdAt, updatedAt, chatTs) :. preparedContactRow :. (contactRequestId, contactGroupMemberId, BI contactGrpInvSent) :. groupDirectInvRow :. (uiThemes, BI chatDeleted, customData, chatItemTTL)) :. connRow) = +toContact :: StoreCxt -> User -> [ChatTagId] -> ContactRow :. MaybeConnectionRow -> Contact +toContact cxt user chatTags ((Only contactId :. (profileId, localDisplayName, displayName, fullName, shortDescr, image, contactLink, peerType, localAlias, BI contactUsed, contactStatus) :. (enableNtfs_, sendRcpts, BI favorite, preferences, userPreferences, createdAt, updatedAt, chatTs) :. preparedContactRow :. (contactRequestId, contactGroupMemberId, BI contactGrpInvSent) :. groupDirectInvRow :. (uiThemes, BI chatDeleted, customData, chatItemTTL)) :. connRow) = let profile = LocalProfile {profileId, displayName, fullName, shortDescr, image, contactLink, peerType, preferences, localAlias} - activeConn = toMaybeConnection vr connRow + activeConn = toMaybeConnection cxt connRow chatSettings = ChatSettings {enableNtfs = fromMaybe MFAll enableNtfs_, sendRcpts = unBI <$> sendRcpts, favorite} incognito = maybe False connIncognito activeConn mergedPreferences = contactUserPreferences user userPreferences preferences incognito @@ -673,9 +673,9 @@ type GroupMemberRow = (GroupMemberId, GroupId, Int64, MemberId, VersionChat, Ver type ProfileRow = (ProfileId, ContactName, Text, Maybe Text, Maybe ImageData, Maybe ConnLinkContact, Maybe ChatPeerType, LocalAlias, Maybe Preferences) -toGroupInfo :: VersionRangeChat -> Int64 -> [ChatTagId] -> GroupInfoRow -> GroupInfo -toGroupInfo vr userContactId chatTags ((groupId, localDisplayName, displayName, fullName, shortDescr, localAlias, description, image, groupType_, groupLink_, publicGroupId_) :. accessRow :. (enableNtfs_, sendRcpts, BI favorite, groupPreferences, memberAdmission) :. (createdAt, updatedAt, chatTs, userMemberProfileSentAt) :. preparedGroupRow :. businessRow :. (BI useRelays, relayOwnStatus, uiThemes, currentMembers, publicMemberCount, customData, chatItemTTL, membersRequireAttention, viaGroupLinkUri) :. groupKeysRow :. userMemberRow) = - let membership = (toGroupMember userContactId userMemberRow) {memberChatVRange = vr} +toGroupInfo :: StoreCxt -> Int64 -> [ChatTagId] -> GroupInfoRow -> GroupInfo +toGroupInfo cxt userContactId chatTags ((groupId, localDisplayName, displayName, fullName, shortDescr, localAlias, description, image, groupType_, groupLink_, publicGroupId_) :. accessRow :. (enableNtfs_, sendRcpts, BI favorite, groupPreferences, memberAdmission) :. (createdAt, updatedAt, chatTs, userMemberProfileSentAt) :. preparedGroupRow :. businessRow :. (BI useRelays, relayOwnStatus, uiThemes, currentMembers, publicMemberCount, customData, chatItemTTL, membersRequireAttention, viaGroupLinkUri) :. groupKeysRow :. userMemberRow) = + let membership = (toGroupMember userContactId userMemberRow) {memberChatVRange = vr cxt} chatSettings = ChatSettings {enableNtfs = fromMaybe MFAll enableNtfs_, sendRcpts = unBI <$> sendRcpts, favorite} fullGroupPreferences = mergeGroupPreferences groupPreferences publicGroup = toPublicGroupProfile groupType_ groupLink_ publicGroupId_ (toPublicGroupAccess accessRow) @@ -756,9 +756,9 @@ groupMemberQuery = LEFT JOIN connections c ON c.group_member_id = m.group_member_id |] -toContactMember :: VersionRangeChat -> User -> (GroupMemberRow :. MaybeConnectionRow) -> GroupMember -toContactMember vr User {userContactId} (memberRow :. connRow) = - (toGroupMember userContactId memberRow) {activeConn = toMaybeConnection vr connRow} +toContactMember :: StoreCxt -> User -> (GroupMemberRow :. MaybeConnectionRow) -> GroupMember +toContactMember cxt User {userContactId} (memberRow :. connRow) = + (toGroupMember userContactId memberRow) {activeConn = toMaybeConnection cxt connRow} rowToLocalProfile :: ProfileRow -> LocalProfile rowToLocalProfile (profileId, displayName, fullName, shortDescr, image, contactLink, peerType, localAlias, preferences) = @@ -875,10 +875,10 @@ addGroupChatTags db g@GroupInfo {groupId} = do chatTags <- getGroupChatTags db groupId pure (g :: GroupInfo) {chatTags} -getGroupInfo :: DB.Connection -> VersionRangeChat -> User -> Int64 -> ExceptT StoreError IO GroupInfo -getGroupInfo db vr User {userId, userContactId} groupId = ExceptT $ do +getGroupInfo :: DB.Connection -> StoreCxt -> User -> Int64 -> ExceptT StoreError IO GroupInfo +getGroupInfo db cxt User {userId, userContactId} groupId = ExceptT $ do chatTags <- getGroupChatTags db groupId - firstRow (toGroupInfo vr userContactId chatTags) (SEGroupNotFound groupId) $ + firstRow (toGroupInfo cxt userContactId chatTags) (SEGroupNotFound groupId) $ DB.query db (groupInfoQuery <> " WHERE g.group_id = ? AND g.user_id = ? AND mu.contact_id = ?") diff --git a/src/Simplex/Chat/Types.hs b/src/Simplex/Chat/Types.hs index 189f730b67..b4264d121d 100644 --- a/src/Simplex/Chat/Types.hs +++ b/src/Simplex/Chat/Types.hs @@ -2033,6 +2033,10 @@ type VersionChat = Version ChatVersion type VersionRangeChat = VersionRange ChatVersion +-- | Store-wide context passed to store functions in place of the bare `vr` +-- parameter. Built from config by mkStoreCxt; more fields are added here over time. +newtype StoreCxt = StoreCxt {vr :: VersionRangeChat} + pattern VersionChat :: Word16 -> VersionChat pattern VersionChat v = Version v diff --git a/tests/ChatTests/Utils.hs b/tests/ChatTests/Utils.hs index 4b28229348..27c36568ec 100644 --- a/tests/ChatTests/Utils.hs +++ b/tests/ChatTests/Utils.hs @@ -23,7 +23,7 @@ import Data.List (isPrefixOf, isSuffixOf) import Data.Maybe (fromMaybe) import Data.String import qualified Data.Text as T -import Simplex.Chat.Controller (ChatConfig (..), ChatController (..)) +import Simplex.Chat.Controller (ChatConfig (..), ChatController (..), mkStoreCxt) import Simplex.Chat.Markdown (viewName) import Simplex.Chat.Messages.CIContent (e2eInfoNoPQText, e2eInfoPQText) import Simplex.Chat.Protocol @@ -699,10 +699,10 @@ getCtConn cc contactId = getTestCCContact cc contactId >>= maybe (fail "no conne getTestCCContact :: TestCC -> ContactId -> IO Contact getTestCCContact cc contactId = do - let TestCC {chatController = ChatController {config = ChatConfig {chatVRange = vr}}} = cc + let TestCC {chatController = ChatController {config}} = cc withCCTransaction cc $ \db -> withCCUser cc $ \user -> - runExceptT (getContact db vr user contactId) >>= either (fail . show) pure + runExceptT (getContact db (mkStoreCxt config) user contactId) >>= either (fail . show) pure lastItemId :: HasCallStack => TestCC -> IO String lastItemId cc = do From 95349430c5f334d8560237576f871da25c0f4e46 Mon Sep 17 00:00:00 2001 From: Evgeny Date: Sun, 7 Jun 2026 12:01:40 +0100 Subject: [PATCH 04/81] core: support signature verification in p2p groups (forward compatibility) (#7058) * core: support signature verification in p2p groups (forward compatibility) * encoding * mirror encoding * comment --------- Co-authored-by: Evgeny @ SimpleX Chat <259188159+evgeny-simplex@users.noreply.github.com> --- src/Simplex/Chat/Library/Subscriber.hs | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-) diff --git a/src/Simplex/Chat/Library/Subscriber.hs b/src/Simplex/Chat/Library/Subscriber.hs index e25e665bea..87b560d1ab 100644 --- a/src/Simplex/Chat/Library/Subscriber.hs +++ b/src/Simplex/Chat/Library/Subscriber.hs @@ -3462,8 +3462,11 @@ processAgentMessageConn cxt user@User {userId} corrId agentConnId agentMessage = Just sm@SignedMsg {chatBinding, signatures, signedBody} | GroupMember {memberPubKey = Just pubKey, memberId} <- member -> case chatBinding of - CBGroup | Just GroupKeys {publicGroupId} <- groupKeys gInfo -> - let prefix = smpEncode chatBinding <> smpEncode (publicGroupId, memberId) + CBGroup -> + let prefix = smpEncode chatBinding <> bindingData + bindingData = case groupKeys gInfo of + Just GroupKeys {publicGroupId} -> smpEncode (publicGroupId, memberId) + Nothing -> smpEncode (memberId, pubKey) -- forward compatibility for verifying signed messages in p2p groups in signed MSSVerified <$ guard (all (\(MsgSignature KRMember sig) -> C.verify (C.APublicVerifyKey C.SEd25519 pubKey) sig (prefix <> signedBody)) signatures) _ -> signed MSSSignedNoKey <$ guard signatureOptional | otherwise -> signed MSSSignedNoKey <$ guard (signatureOptional || unverifiedAllowed membership member tag) From bf905eb545c23aa0deb22d6d6d3ea05fd1d7d53a Mon Sep 17 00:00:00 2001 From: Narasimha-sc <166327228+Narasimha-sc@users.noreply.github.com> Date: Sun, 7 Jun 2026 22:38:05 +0000 Subject: [PATCH 05/81] ui: settings navigation reorganization (#7005) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit * android, desktop: settings navigation reorganization Restructure the root Settings screen into two top-level sections and fold previously-scattered items into three new sub-screens. Root: - Appearance, Your privacy, Chat data - Help & support, Migrate to another device, Advanced settings Your privacy (renamed from Privacy & security): keeps Device, link previews / remove tracking, auto-accept images, blur media, contact requests from groups. Adds a "More privacy" sub-screen. More privacy (new): show last messages, message draft, encrypt local files, protect IP address (with original dynamic footer preserved), notification preview mode (moved from Notifications), and delivery receipts. Help & support (new): merges Help and Support SimpleX Chat sections into Help / About (with App version) / Contact / Support the project. Advanced settings (new): Network & servers, Notifications (Android), Audio & video calls; then Developer tools, Restart and Shutdown (Android), App update channel (desktop). Notifications is hidden on desktop because the screen is empty after Show preview moves to More privacy. Chat data is the new top-level menu label for the existing Database passphrase & export screen. * android, desktop: trim settings reorg diff - Remove 5 dead strings from base/strings.xml (privacy_and_security, database_passphrase_and_export, settings_section_title_chat_database, settings_section_title_support, settings_section_title_app) — no Kotlin references after the reorg. - Drop the now single-variant CurrentPage enum in NotificationsSettingsView; replace with a direct callback. - Read userDisplayName locally in HelpAndSupportView instead of threading it through SettingsLayout/SettingsView/Preview. * android, desktop: remove orphan locale strings Companion to 442a368c9 which removed 5 dead keys from base/strings.xml. The :common:adjustFormatting task enforces that every locale string has a corresponding base entry, so these orphans broke the build. Removed across 35 locale files (154 lines). Keys removed: - privacy_and_security - database_passphrase_and_export - settings_section_title_chat_database - settings_section_title_support - settings_section_title_app * Revert "android, desktop: remove orphan locale strings" This reverts commit 0ad5fc9308a3599d15bf50ca1980002ae0e467b2. * android, desktop: restore base strings for removed keys Counterpart to revert of 0ad5fc930: re-add the 5 base entries that 442a368c9 had deleted so the locale files (restored by the prior revert) are no longer orphaned. Translation keys must not be removed once introduced — the values can change but the keys stay. Keys restored to base with their master English values: - database_passphrase_and_export - privacy_and_security - settings_section_title_chat_database - settings_section_title_support - settings_section_title_app * android, desktop: keep share-button helpers in SettingsView ContributeItem, RateAppItem, StarOnGithubItem were moved from SettingsView.kt to HelpAndSupportView.kt as part of the reorg. Move them back: just drop the `private` modifier (one-word edit per function) so HelpAndSupportView can call them in place. Saves ~60 lines of diff churn vs the move + matches the file's existing pattern where helpers like AppVersionItem, ChatPreferencesItem, ChatLockItem, etc. are all public top-level @Composable. * android, desktop: inline HelpAndSupportView into SettingsView.kt HelpAndSupportView is the only call site of SettingsView.kt's share-button helpers; placing it as a top-level @Composable in SettingsView.kt keeps the help/about/contact/support flow next to the other settings entry points and removes the need for a new file. Three imports (BuildConfigCommon, SimpleXInfo, WhatsNewView) that the reorg was deleting from SettingsView.kt stay in place. Saves ~35 lines of diff and one new file. * android, desktop: inline AdvancedSettingsView into SettingsView.kt Same treatment as HelpAndSupportView in the previous commit: AdvancedSettingsView is only reached from SettingsLayout, so the function and its expect declaration live as top-level @Composable in SettingsView.kt instead of a new file. NetworkAndServersView import that the reorg was deleting from SettingsView.kt stays. The .android.kt / .desktop.kt actuals are unchanged and keep implementing the (now relocated) expect. Saves ~15 lines and a file. * ios: settings navigation reorganization Mirror the multiplatform reorg on iOS: Root SettingsView: collapse the 5 sections into 2 unlabeled groups — {Appearance, Your privacy, Chat data} and {Help & support, Migrate to another device, Advanced settings}. "Privacy & security" becomes "Your privacy"; the database row label becomes "Chat data". PrivacySettings: keeps Device, link previews / remove tracking, auto-accept images, blur media, contact requests from groups. Adds a "More privacy" link. MorePrivacy (new, inlined in PrivacySettings.swift): show last messages, message draft, encrypt local files, protect IP address (with original dynamic footer preserved), notification preview mode (moved from NotificationsView), delivery receipts. Own state and private helpers for the moved set* functions. HelpAndSupportView (new, inlined in SettingsView.swift): merges Help and Support sections into Help / About (with App version) / Contact / Support the project. AdvancedSettingsView (new, inlined in SettingsView.swift): Network & servers, Notifications, Audio & video calls, Developer tools. iOS has no Restart/Shutdown (Android-only) or App update channel (desktop). NotificationsView: "Show preview" navigation removed — it now lives in MorePrivacy. notificationsIcon() promoted to a free function so AdvancedSettingsView can render the notifications status badge. * android, desktop: keep platform file names as SettingsView.{android,desktop}.kt Revert the file renames from {Advanced}SettingsView.{android,desktop}.kt. Function rename SettingsSectionApp → AdvancedSettingsAppSection stays inside each file; only the file path returns to its original name. No behavior change; diff stat now shows two in-place modifications instead of renames. * ios: keep PrivacySettings/SettingsView state in place, use inline destinations Restructure the iOS reorg to avoid moving state, helpers, and the alert enum out of PrivacySettings — and to avoid moving notificationsIcon out of SettingsView. The Help & Support, Advanced Settings, and More Privacy "screens" become private computed properties on their parent struct, so all @AppStorage, @State, set* helpers, and the PrivacySettingsViewAlert enum stay UNCHANGED from master. NavigationLink destinations reference the computed properties directly. Net iOS diff vs master: 220+/154- (was 361+/259-) — saves ~245 lines. * simplex settings * android, desktop: mirror iOS settings reorganization - inline Advanced settings section into the main settings list (Network & servers, Notifications, Audio & video calls, App version); remove the separate Advanced settings page - reorder first section: Appearance, Your privacy, Help & support, Chat data, Migrate; merge About SimpleX Chat into the Help section - move the developer/maintenance section under App version (VersionInfoView); load core version inside the view so it always opens (Developer tools and Shutdown stay reachable even if the version request fails) - keep "Developer tools" label (not renamed to "Developer") - replace the Restart row with Cancel/Restart/Shutdown options in the Shutdown dialog - split DatabaseView: "Chat data" page (messages TTL, Database passphrase & export, Files & media) and a sub-page with passphrase/export/import/delete and the Run chat toggle; rename title to "Chat data" - align delivery receipts alert wording with the renamed "Your privacy" settings * android, desktop: simplify settings reorg internals - VersionInfoView: drop the section/card wrapping, keep the original plain version-text layout; load core version in-view so the screen always opens - DatabaseView: make the "Database passphrase & export" sub-page a self-contained DatabaseManagementView that owns its own state, mirroring the DatabaseView/DatabaseLayout pattern instead of threading params through a modal * android, desktop: show App version screen as a card screen VersionInfoView now hosts a settings section (Developer tools / updates), so open it with cardScreen = true like the other settings screens — otherwise the section renders without the card box around it. * android, desktop: show "Rate the app" only on mobile The action opens a Play Store link, which does nothing on desktop (the market:// scheme has no handler and the web fallback never fires). Gate it to Android, like the Contribute item. * android, desktop: move Shutdown to settings above app version Move the Shutdown action out of the app version screen into the main advanced settings section, just above the app version row. It stays Android only (desktop is closed via the window) through an AppShutdownItem expect/actual. * android, desktop: show app version info in its own card Wrap the version info block on the app version screen in a section card, matching iOS and the rest of the card-screen settings. * fix background --------- Co-authored-by: Evgeny Poberezkin --- .../Shared/Views/Database/DatabaseView.swift | 149 ++++----- .../NetworkAndServers/NetworkAndServers.swift | 10 - .../UserSettings/NotificationsView.swift | 30 -- .../Views/UserSettings/PrivacySettings.swift | 196 +++++++----- .../SetDeliveryReceiptsView.swift | 2 +- .../Views/UserSettings/SettingsView.swift | 147 ++++----- .../Views/UserSettings/VersionView.swift | 28 +- .../ar.xcloc/Localized Contents/ar.xliff | 4 +- .../bg.xcloc/Localized Contents/bg.xliff | 4 +- .../bn.xcloc/Localized Contents/bn.xliff | 4 +- .../cs.xcloc/Localized Contents/cs.xliff | 4 +- .../de.xcloc/Localized Contents/de.xliff | 4 +- .../el.xcloc/Localized Contents/el.xliff | 4 +- .../en.xcloc/Localized Contents/en.xliff | 6 +- .../es.xcloc/Localized Contents/es.xliff | 4 +- .../fi.xcloc/Localized Contents/fi.xliff | 4 +- .../fr.xcloc/Localized Contents/fr.xliff | 4 +- .../he.xcloc/Localized Contents/he.xliff | 4 +- .../hr.xcloc/Localized Contents/hr.xliff | 4 +- .../hu.xcloc/Localized Contents/hu.xliff | 4 +- .../it.xcloc/Localized Contents/it.xliff | 4 +- .../ja.xcloc/Localized Contents/ja.xliff | 4 +- .../ko.xcloc/Localized Contents/ko.xliff | 4 +- .../lt.xcloc/Localized Contents/lt.xliff | 4 +- .../nl.xcloc/Localized Contents/nl.xliff | 4 +- .../pl.xcloc/Localized Contents/pl.xliff | 4 +- .../Localized Contents/pt-BR.xliff | 4 +- .../pt.xcloc/Localized Contents/pt.xliff | 4 +- .../ru.xcloc/Localized Contents/ru.xliff | 4 +- .../th.xcloc/Localized Contents/th.xliff | 4 +- .../tr.xcloc/Localized Contents/tr.xliff | 4 +- .../uk.xcloc/Localized Contents/uk.xliff | 4 +- .../Localized Contents/zh-Hans.xliff | 4 +- .../Localized Contents/zh-Hant.xliff | 4 +- apps/ios/SimpleX SE/ShareModel.swift | 2 +- .../SimpleX SE/de.lproj/Localizable.strings | 2 +- .../SimpleX SE/es.lproj/Localizable.strings | 2 +- .../SimpleX SE/fr.lproj/Localizable.strings | 2 +- .../SimpleX SE/hu.lproj/Localizable.strings | 2 +- .../SimpleX SE/it.lproj/Localizable.strings | 2 +- .../SimpleX SE/nl.lproj/Localizable.strings | 2 +- .../SimpleX SE/pl.lproj/Localizable.strings | 2 +- .../SimpleX SE/ru.lproj/Localizable.strings | 2 +- .../SimpleX SE/tr.lproj/Localizable.strings | 2 +- .../SimpleX SE/uk.lproj/Localizable.strings | 2 +- .../zh-Hans.lproj/Localizable.strings | 2 +- apps/ios/bg.lproj/Localizable.strings | 6 +- apps/ios/cs.lproj/Localizable.strings | 6 +- apps/ios/de.lproj/Localizable.strings | 6 +- apps/ios/es.lproj/Localizable.strings | 6 +- apps/ios/fi.lproj/Localizable.strings | 6 +- apps/ios/fr.lproj/Localizable.strings | 6 +- apps/ios/hu.lproj/Localizable.strings | 6 +- apps/ios/it.lproj/Localizable.strings | 6 +- apps/ios/ja.lproj/Localizable.strings | 6 +- apps/ios/nl.lproj/Localizable.strings | 6 +- apps/ios/pl.lproj/Localizable.strings | 6 +- apps/ios/product/README.md | 2 +- apps/ios/product/views/settings.md | 8 +- apps/ios/ru.lproj/Localizable.strings | 6 +- apps/ios/th.lproj/Localizable.strings | 6 +- apps/ios/tr.lproj/Localizable.strings | 6 +- apps/ios/uk.lproj/Localizable.strings | 6 +- apps/ios/zh-Hans.lproj/Localizable.strings | 6 +- .../usersettings/SettingsView.android.kt | 47 ++- .../common/views/database/DatabaseView.kt | 282 ++++++++++-------- .../usersettings/NotificationsSettingsView.kt | 31 +- .../views/usersettings/PrivacySettings.kt | 157 ++++++---- .../common/views/usersettings/SettingsView.kt | 91 +++--- .../views/usersettings/VersionInfoView.kt | 54 +++- .../commonMain/resources/MR/base/strings.xml | 9 +- .../usersettings/SettingsView.desktop.kt | 20 +- 72 files changed, 835 insertions(+), 658 deletions(-) diff --git a/apps/ios/Shared/Views/Database/DatabaseView.swift b/apps/ios/Shared/Views/Database/DatabaseView.swift index d5d70abaea..278893a669 100644 --- a/apps/ios/Shared/Views/Database/DatabaseView.swift +++ b/apps/ios/Shared/Views/Database/DatabaseView.swift @@ -110,33 +110,88 @@ struct DatabaseView: View { } Section { - settingsRow( - stopped ? "exclamationmark.octagon.fill" : "play.fill", - color: stopped ? .red : .green - ) { - Toggle( - stopped ? "Chat is stopped" : "Chat is running", - isOn: $runChat - ) - .onChange(of: runChat) { _ in - if runChat { - DatabaseView.startChat($runChat, $progressIndicator) - } else if !stoppingChat { - stoppingChat = false - alert = .stopChat - } - } - } - } header: { - Text("Run chat") - .foregroundColor(theme.colors.secondary) - } footer: { - if case .documents = dbContainer { - Text("Database will be migrated when the app restarts") - .foregroundColor(theme.colors.secondary) - } + NavigationLink("Database passphrase & export", destination: databaseManagementView) } + Section { + Button(m.users.count > 1 ? "Delete files for all chat profiles" : "Delete all files", role: .destructive) { + alert = .deleteFilesAndMedia + } + .disabled(progressIndicator || appFilesCountAndSize?.0 == 0) + } header: { + Text("Files & media") + .foregroundColor(theme.colors.secondary) + } footer: { + if let (fileCount, size) = appFilesCountAndSize { + if fileCount == 0 { + Text("No received or sent files") + .foregroundColor(theme.colors.secondary) + } else { + Text("\(fileCount) file(s) with total size of \(ByteCountFormatter.string(fromByteCount: Int64(size), countStyle: .binary))") + .foregroundColor(theme.colors.secondary) + } + } + } + } + .onAppear { + runChat = m.chatRunning ?? true + appFilesCountAndSize = directoryFileCountAndSize(getAppFilesDirectory()) + currentChatItemTTL = chatItemTTL + } + .onChange(of: chatItemTTL) { ttl in + if ttl < currentChatItemTTL { + alert = .setChatItemTTL(ttl: ttl) + } else if ttl != currentChatItemTTL { + setCiTTL(ttl) + } + } + .alert(item: $alert) { item in databaseAlert(item) } + .fileImporter( + isPresented: $showFileImporter, + allowedContentTypes: [.zip], + allowsMultipleSelection: false + ) { result in + if case let .success(files) = result, let fileURL = files.first { + importedArchivePath = fileURL + alert = .importArchive + } + } + } + + private func runChatToggleView() -> some View { + Section { + let stopped = m.chatRunning == false + settingsRow( + stopped ? "exclamationmark.octagon.fill" : "play.fill", + color: stopped ? .red : .green + ) { + Toggle( + stopped ? "Chat is stopped" : "Chat is running", + isOn: $runChat + ) + .onChange(of: runChat) { _ in + if runChat { + DatabaseView.startChat($runChat, $progressIndicator) + } else if !stoppingChat { + stoppingChat = false + alert = .stopChat + } + } + } + } header: { + Text("Run chat") + .foregroundColor(theme.colors.secondary) + } footer: { + if case .documents = dbContainer { + Text("Database will be migrated when the app restarts") + .foregroundColor(theme.colors.secondary) + } + } + } + + private func databaseManagementView() -> some View { + List { + let stopped = m.chatRunning == false Section { let unencrypted = m.chatDbEncrypted == false let color: Color = unencrypted ? .orange : theme.colors.secondary @@ -194,49 +249,9 @@ struct DatabaseView: View { } } - Section { - Button(m.users.count > 1 ? "Delete files for all chat profiles" : "Delete all files", role: .destructive) { - alert = .deleteFilesAndMedia - } - .disabled(progressIndicator || appFilesCountAndSize?.0 == 0) - } header: { - Text("Files & media") - .foregroundColor(theme.colors.secondary) - } footer: { - if let (fileCount, size) = appFilesCountAndSize { - if fileCount == 0 { - Text("No received or sent files") - .foregroundColor(theme.colors.secondary) - } else { - Text("\(fileCount) file(s) with total size of \(ByteCountFormatter.string(fromByteCount: Int64(size), countStyle: .binary))") - .foregroundColor(theme.colors.secondary) - } - } - } - } - .onAppear { - runChat = m.chatRunning ?? true - appFilesCountAndSize = directoryFileCountAndSize(getAppFilesDirectory()) - currentChatItemTTL = chatItemTTL - } - .onChange(of: chatItemTTL) { ttl in - if ttl < currentChatItemTTL { - alert = .setChatItemTTL(ttl: ttl) - } else if ttl != currentChatItemTTL { - setCiTTL(ttl) - } - } - .alert(item: $alert) { item in databaseAlert(item) } - .fileImporter( - isPresented: $showFileImporter, - allowedContentTypes: [.zip], - allowsMultipleSelection: false - ) { result in - if case let .success(files) = result, let fileURL = files.first { - importedArchivePath = fileURL - alert = .importArchive - } + runChatToggleView() } + .modifier(ThemedBackground(grouped: true)) } private func databaseAlert(_ alertItem: DatabaseAlert) -> Alert { diff --git a/apps/ios/Shared/Views/UserSettings/NetworkAndServers/NetworkAndServers.swift b/apps/ios/Shared/Views/UserSettings/NetworkAndServers/NetworkAndServers.swift index f10b945dc0..24cf088918 100644 --- a/apps/ios/Shared/Views/UserSettings/NetworkAndServers/NetworkAndServers.swift +++ b/apps/ios/Shared/Views/UserSettings/NetworkAndServers/NetworkAndServers.swift @@ -121,16 +121,6 @@ struct NetworkAndServers: View { } } - Section(header: Text("Calls").foregroundColor(theme.colors.secondary)) { - NavigationLink { - RTCServers() - .navigationTitle("Your ICE servers") - .modifier(ThemedBackground(grouped: true)) - } label: { - Text("WebRTC ICE servers") - } - } - Section(header: Text("Network connection").foregroundColor(theme.colors.secondary)) { HStack { Text(m.networkInfo.networkType.text) diff --git a/apps/ios/Shared/Views/UserSettings/NotificationsView.swift b/apps/ios/Shared/Views/UserSettings/NotificationsView.swift index c4d0588987..131eeecef7 100644 --- a/apps/ios/Shared/Views/UserSettings/NotificationsView.swift +++ b/apps/ios/Shared/Views/UserSettings/NotificationsView.swift @@ -63,36 +63,6 @@ struct NotificationsView: View { } } - NavigationLink { - List { - Section { - SelectionListView(list: NotificationPreviewMode.values, selection: $m.notificationPreview) { previewMode in - ntfPreviewModeGroupDefault.set(previewMode) - m.notificationPreview = previewMode - } - } footer: { - VStack(alignment: .leading, spacing: 1) { - Text("You can set lock screen notification preview via settings.") - .foregroundColor(theme.colors.secondary) - Button("Open Settings") { - DispatchQueue.main.async { - UIApplication.shared.open(URL(string: UIApplication.openSettingsURLString)!, options: [:], completionHandler: nil) - } - } - } - } - } - .navigationTitle("Show preview") - .modifier(ThemedBackground(grouped: true)) - .navigationBarTitleDisplayMode(.inline) - } label: { - HStack { - Text("Show preview") - Spacer() - Text(m.notificationPreview.label) - } - } - if let server = m.notificationServer { smpServers("Push server", [server], theme.colors.secondary) testTokenButton(server) diff --git a/apps/ios/Shared/Views/UserSettings/PrivacySettings.swift b/apps/ios/Shared/Views/UserSettings/PrivacySettings.swift index 3ae9f0eacd..ad6b2d4454 100644 --- a/apps/ios/Shared/Views/UserSettings/PrivacySettings.swift +++ b/apps/ios/Shared/Views/UserSettings/PrivacySettings.swift @@ -81,30 +81,12 @@ struct PrivacySettings: View { settingsRow("link", color: theme.colors.secondary) { Toggle("Remove link tracking", isOn: $privacySanitizeLinks) } - settingsRow("message", color: theme.colors.secondary) { - Toggle("Show last messages", isOn: $showChatPreviews) - } - settingsRow("rectangle.and.pencil.and.ellipsis", color: theme.colors.secondary) { - Toggle("Message draft", isOn: $saveLastDraft) - } - .onChange(of: saveLastDraft) { saveDraft in - if !saveDraft { - m.draft = nil - m.draftChatId = nil - } - } } header: { Text("Chats") .foregroundColor(theme.colors.secondary) } Section { - settingsRow("lock.doc", color: theme.colors.secondary) { - Toggle("Encrypt local files", isOn: $encryptLocalFiles) - .onChange(of: encryptLocalFiles) { - setEncryptLocalFiles($0) - } - } settingsRow("photo", color: theme.colors.secondary) { Toggle("Auto-accept images", isOn: $autoAcceptImages) .onChange(of: autoAcceptImages) { @@ -126,20 +108,9 @@ struct PrivacySettings: View { } } } - settingsRow("network.badge.shield.half.filled", color: theme.colors.secondary) { - Toggle("Protect IP address", isOn: $askToApproveRelays) - } } header: { Text("Files") .foregroundColor(theme.colors.secondary) - } footer: { - if askToApproveRelays { - Text("The app will ask to confirm downloads from unknown file servers (except .onion).") - .foregroundColor(theme.colors.secondary) - } else { - Text("Without Tor or VPN, your IP address will be visible to file servers.") - .foregroundColor(theme.colors.secondary) - } } Section { @@ -155,45 +126,8 @@ struct PrivacySettings: View { } Section { - settingsRow("person", color: theme.colors.secondary) { - Toggle("Contacts", isOn: $contactReceipts) - } - settingsRow("person.2", color: theme.colors.secondary) { - Toggle("Small groups (max 20)", isOn: $groupReceipts) - } - } header: { - Text("Send delivery receipts to") - .foregroundColor(theme.colors.secondary) - } footer: { - VStack(alignment: .leading) { - Text("These settings are for your current profile **\(m.currentUser?.displayName ?? "")**.") - Text("They can be overridden in contact and group settings.") - } - .foregroundColor(theme.colors.secondary) - .frame(maxWidth: .infinity, alignment: .leading) - } - .confirmationDialog(contactReceiptsDialogTitle, isPresented: $contactReceiptsDialogue, titleVisibility: .visible) { - Button(contactReceipts ? "Enable (keep overrides)" : "Disable (keep overrides)") { - setSendReceiptsContacts(contactReceipts, clearOverrides: false) - } - Button(contactReceipts ? "Enable for all" : "Disable for all", role: .destructive) { - setSendReceiptsContacts(contactReceipts, clearOverrides: true) - } - Button("Cancel", role: .cancel) { - contactReceiptsReset = true - contactReceipts.toggle() - } - } - .confirmationDialog(groupReceiptsDialogTitle, isPresented: $groupReceiptsDialogue, titleVisibility: .visible) { - Button(groupReceipts ? "Enable (keep overrides)" : "Disable (keep overrides)") { - setSendReceiptsGroups(groupReceipts, clearOverrides: false) - } - Button(groupReceipts ? "Enable for all" : "Disable for all", role: .destructive) { - setSendReceiptsGroups(groupReceipts, clearOverrides: true) - } - Button("Cancel", role: .cancel) { - groupReceiptsReset = true - groupReceipts.toggle() + NavigationLink(destination: morePrivacyView) { + settingsRow("ellipsis", color: theme.colors.secondary) { Text("More privacy") } } } } @@ -243,6 +177,132 @@ struct PrivacySettings: View { } } + @ViewBuilder + private func morePrivacyView() -> some View { + List { + Section { + settingsRow("message", color: theme.colors.secondary) { + Toggle("Show last messages", isOn: $showChatPreviews) + } + settingsRow("rectangle.and.pencil.and.ellipsis", color: theme.colors.secondary) { + Toggle("Message draft", isOn: $saveLastDraft) + } + .onChange(of: saveLastDraft) { saveDraft in + if !saveDraft { + m.draft = nil + m.draftChatId = nil + } + } + } header: { + Text("Chats") + .foregroundColor(theme.colors.secondary) + } + + Section { + settingsRow("lock.doc", color: theme.colors.secondary) { + Toggle("Encrypt local files", isOn: $encryptLocalFiles) + .onChange(of: encryptLocalFiles) { + setEncryptLocalFiles($0) + } + } + settingsRow("network.badge.shield.half.filled", color: theme.colors.secondary) { + Toggle("Protect IP address", isOn: $askToApproveRelays) + } + } header: { + Text("Files") + .foregroundColor(theme.colors.secondary) + } footer: { + if askToApproveRelays { + Text("The app will ask to confirm downloads from unknown file servers (except .onion).") + .foregroundColor(theme.colors.secondary) + } else { + Text("Without Tor or VPN, your IP address will be visible to file servers.") + .foregroundColor(theme.colors.secondary) + } + } + + Section { + NavigationLink { + List { + Section { + SelectionListView(list: NotificationPreviewMode.values, selection: $m.notificationPreview) { previewMode in + ntfPreviewModeGroupDefault.set(previewMode) + m.notificationPreview = previewMode + } + } footer: { + VStack(alignment: .leading, spacing: 1) { + Text("You can set lock screen notification preview via settings.") + .foregroundColor(theme.colors.secondary) + Button("Open Settings") { + DispatchQueue.main.async { + UIApplication.shared.open(URL(string: UIApplication.openSettingsURLString)!, options: [:], completionHandler: nil) + } + } + } + } + } + .navigationTitle("Show preview") + .modifier(ThemedBackground(grouped: true)) + .navigationBarTitleDisplayMode(.inline) + } label: { + HStack { + Text("Show preview") + Spacer() + Text(m.notificationPreview.label) + } + } + } header: { + Text("Notifications") + .foregroundColor(theme.colors.secondary) + } + + Section { + settingsRow("person", color: theme.colors.secondary) { + Toggle("Contacts", isOn: $contactReceipts) + } + settingsRow("person.2", color: theme.colors.secondary) { + Toggle("Small groups (max 20)", isOn: $groupReceipts) + } + } header: { + Text("Send delivery receipts to") + .foregroundColor(theme.colors.secondary) + } footer: { + VStack(alignment: .leading) { + Text("These settings are for your current profile **\(m.currentUser?.displayName ?? "")**.") + Text("They can be overridden in contact and group settings.") + } + .foregroundColor(theme.colors.secondary) + .frame(maxWidth: .infinity, alignment: .leading) + } + .confirmationDialog(contactReceiptsDialogTitle, isPresented: $contactReceiptsDialogue, titleVisibility: .visible) { + Button(contactReceipts ? "Enable (keep overrides)" : "Disable (keep overrides)") { + setSendReceiptsContacts(contactReceipts, clearOverrides: false) + } + Button(contactReceipts ? "Enable for all" : "Disable for all", role: .destructive) { + setSendReceiptsContacts(contactReceipts, clearOverrides: true) + } + Button("Cancel", role: .cancel) { + contactReceiptsReset = true + contactReceipts.toggle() + } + } + .confirmationDialog(groupReceiptsDialogTitle, isPresented: $groupReceiptsDialogue, titleVisibility: .visible) { + Button(groupReceipts ? "Enable (keep overrides)" : "Disable (keep overrides)") { + setSendReceiptsGroups(groupReceipts, clearOverrides: false) + } + Button(groupReceipts ? "Enable for all" : "Disable for all", role: .destructive) { + setSendReceiptsGroups(groupReceipts, clearOverrides: true) + } + Button("Cancel", role: .cancel) { + groupReceiptsReset = true + groupReceipts.toggle() + } + } + } + .navigationTitle("More privacy") + .modifier(ThemedBackground(grouped: true)) + } + private func setEncryptLocalFiles(_ enable: Bool) { do { try apiSetEncryptLocalFiles(enable) diff --git a/apps/ios/Shared/Views/UserSettings/SetDeliveryReceiptsView.swift b/apps/ios/Shared/Views/UserSettings/SetDeliveryReceiptsView.swift index e03dace43d..e46edbc5af 100644 --- a/apps/ios/Shared/Views/UserSettings/SetDeliveryReceiptsView.swift +++ b/apps/ios/Shared/Views/UserSettings/SetDeliveryReceiptsView.swift @@ -69,7 +69,7 @@ struct SetDeliveryReceiptsView: View { Button { AlertManager.shared.showAlert(Alert( title: Text("Delivery receipts are disabled!"), - message: Text("You can enable them later via app Privacy & Security settings."), + message: Text("You can enable them later via app Your privacy settings."), primaryButton: .default(Text("Don't show again")) { m.setDeliveryReceipts = false privacyDeliveryReceiptsSet.set(true) diff --git a/apps/ios/Shared/Views/UserSettings/SettingsView.swift b/apps/ios/Shared/Views/UserSettings/SettingsView.swift index a903329454..93f32a53a6 100644 --- a/apps/ios/Shared/Views/UserSettings/SettingsView.swift +++ b/apps/ios/Shared/Views/UserSettings/SettingsView.swift @@ -290,47 +290,7 @@ struct SettingsView: View { func settingsView() -> some View { List { - let user = chatModel.currentUser - Section(header: Text("Settings").foregroundColor(theme.colors.secondary)) { - NavigationLink { - NotificationsView() - .navigationTitle("Notifications") - .modifier(ThemedBackground(grouped: true)) - } label: { - HStack { - notificationsIcon() - Text("Notifications") - } - } - .disabled(chatModel.chatRunning != true) - - NavigationLink { - NetworkAndServers() - .navigationTitle("Network & servers") - .modifier(ThemedBackground(grouped: true)) - } label: { - settingsRow("externaldrive.connected.to.line.below", color: theme.colors.secondary) { Text("Network & servers") } - } - .disabled(chatModel.chatRunning != true) - - NavigationLink { - CallSettings() - .navigationTitle("Your calls") - .modifier(ThemedBackground(grouped: true)) - } label: { - settingsRow("video", color: theme.colors.secondary) { Text("Audio & video calls") } - } - .disabled(chatModel.chatRunning != true) - - NavigationLink { - PrivacySettings() - .navigationTitle("Your privacy") - .modifier(ThemedBackground(grouped: true)) - } label: { - settingsRow("lock", color: theme.colors.secondary) { Text("Privacy & security") } - } - .disabled(chatModel.chatRunning != true) - + Section(header: Text(verbatim: "").foregroundColor(theme.colors.secondary)) { if UIApplication.shared.supportsAlternateIcons { NavigationLink { AppearanceSettings() @@ -341,10 +301,24 @@ struct SettingsView: View { } .disabled(chatModel.chatRunning != true) } - } - Section(header: Text("Chat database").foregroundColor(theme.colors.secondary)) { + NavigationLink { + PrivacySettings() + .navigationTitle("Your privacy") + .modifier(ThemedBackground(grouped: true)) + } label: { + settingsRow("lock", color: theme.colors.secondary) { Text("Your privacy") } + } + .disabled(chatModel.chatRunning != true) + + NavigationLink { + helpAndSupportView + } label: { + settingsRow("questionmark", color: theme.colors.secondary) { Text("Help & support") } + } + chatDatabaseRow() + NavigationLink { MigrateFromDevice(showProgressOnSettings: $showProgress) .toolbar { @@ -360,6 +334,58 @@ struct SettingsView: View { } } + Section(header: Text("Advanced settings").foregroundColor(theme.colors.secondary)) { + NavigationLink { + NetworkAndServers() + .navigationTitle("Network & servers") + .modifier(ThemedBackground(grouped: true)) + } label: { + settingsRow("externaldrive.connected.to.line.below", color: theme.colors.secondary) { Text("Network & servers") } + } + .disabled(chatModel.chatRunning != true) + + NavigationLink { + NotificationsView() + .navigationTitle("Notifications") + .modifier(ThemedBackground(grouped: true)) + } label: { + HStack { + notificationsIcon() + Text("Notifications") + } + } + .disabled(chatModel.chatRunning != true) + + NavigationLink { + CallSettings() + .navigationTitle("Your calls") + .modifier(ThemedBackground(grouped: true)) + } label: { + settingsRow("video", color: theme.colors.secondary) { Text("Audio & video calls") } + } + .disabled(chatModel.chatRunning != true) + + NavigationLink { + VersionView() + .navigationBarTitle("App version") + .modifier(ThemedBackground()) + } label: { + Text(verbatim: "v\(appVersion ?? "?")") + } + } + } + .navigationTitle("Your settings") + .modifier(ThemedBackground(grouped: true)) + .onDisappear { + chatModel.showingTerminal = false + chatModel.terminalItems = [] + } + } + + @ViewBuilder + private var helpAndSupportView: some View { + List { + let user = chatModel.currentUser Section(header: Text("Help").foregroundColor(theme.colors.secondary)) { if let user = user { NavigationLink { @@ -378,6 +404,7 @@ struct SettingsView: View { } label: { settingsRow("plus", color: theme.colors.secondary) { Text("What's new") } } + NavigationLink { SimpleXInfo(onboarding: false) .navigationBarTitle("", displayMode: .inline) @@ -386,6 +413,9 @@ struct SettingsView: View { } label: { settingsRow("info", color: theme.colors.secondary) { Text("About SimpleX Chat") } } + } + + Section(header: Text("Contact").foregroundColor(theme.colors.secondary)) { settingsRow("number", color: theme.colors.secondary) { Button("Send questions and ideas") { dismiss() @@ -398,7 +428,7 @@ struct SettingsView: View { settingsRow("envelope", color: theme.colors.secondary) { Text("[Send us email](mailto:chat@simplex.chat)") } } - Section(header: Text("Support SimpleX Chat").foregroundColor(theme.colors.secondary)) { + Section(header: Text("Support the project").foregroundColor(theme.colors.secondary)) { settingsRow("keyboard", color: theme.colors.secondary) { ExternalLink("Contribute", destination: URL(string: "https://github.com/simplex-chat/simplex-chat#contribute")!) } @@ -421,42 +451,21 @@ struct SettingsView: View { } } } - - Section(header: Text("Develop").foregroundColor(theme.colors.secondary)) { - NavigationLink { - DeveloperView() - .navigationTitle("Developer tools") - .modifier(ThemedBackground(grouped: true)) - } label: { - settingsRow("chevron.left.forwardslash.chevron.right", color: theme.colors.secondary) { Text("Developer tools") } - } - NavigationLink { - VersionView() - .navigationBarTitle("App version") - .modifier(ThemedBackground()) - } label: { - Text("v\(appVersion ?? "?") (\(appBuild ?? "?"))") - } - } } - .navigationTitle("Your settings") + .navigationTitle("Help & support") .modifier(ThemedBackground(grouped: true)) - .onDisappear { - chatModel.showingTerminal = false - chatModel.terminalItems = [] - } } - + private func chatDatabaseRow() -> some View { NavigationLink { DatabaseView(dismissSettingsSheet: dismiss, chatItemTTL: chatModel.chatItemTTL) - .navigationTitle("Your chat database") + .navigationTitle("Chat data") .modifier(ThemedBackground(grouped: true)) } label: { let color: Color = chatModel.chatDbEncrypted == false ? .orange : theme.colors.secondary settingsRow("internaldrive", color: color) { HStack { - Text("Database passphrase & export") + Text("Chat data") Spacer() if chatModel.chatRunning == false { Image(systemName: "exclamationmark.octagon.fill").foregroundColor(.red) diff --git a/apps/ios/Shared/Views/UserSettings/VersionView.swift b/apps/ios/Shared/Views/UserSettings/VersionView.swift index 0fc2b4cb3e..e30c11699e 100644 --- a/apps/ios/Shared/Views/UserSettings/VersionView.swift +++ b/apps/ios/Shared/Views/UserSettings/VersionView.swift @@ -10,21 +10,33 @@ import SwiftUI import SimpleXChat struct VersionView: View { + @EnvironmentObject var theme: AppTheme @State var versionInfo: CoreVersionInfo? var body: some View { - VStack(alignment: .leading) { - Text("App version: v\(appVersion ?? "?")") - Text("App build: \(appBuild ?? "?")") - if let info = versionInfo { - Text("Core version: v\(info.version)") - if let v = try? AttributedString(markdown: "simplexmq: v\(info.simplexmqVersion) ([\(info.simplexmqCommit.prefix(7))](https://github.com/simplex-chat/simplexmq/commit/\(info.simplexmqCommit)))") { - Text(v) + List { + Section { + Text("App version: v\(appVersion ?? "?")") + Text("App build: \(appBuild ?? "?")") + if let info = versionInfo { + Text("Core version: v\(info.version)") + if let v = try? AttributedString(markdown: "simplexmq: v\(info.simplexmqVersion) ([\(info.simplexmqCommit.prefix(7))](https://github.com/simplex-chat/simplexmq/commit/\(info.simplexmqCommit)))") { + Text(v) + } + } + } + + Section { + NavigationLink { + DeveloperView() + .navigationTitle("Developer") + .modifier(ThemedBackground(grouped: true)) + } label: { + Text("Developer") } } } .frame(maxWidth: .infinity, maxHeight: .infinity, alignment: .topLeading) - .padding() .onAppear { do { versionInfo = try apiGetVersion() diff --git a/apps/ios/SimpleX Localizations/ar.xcloc/Localized Contents/ar.xliff b/apps/ios/SimpleX Localizations/ar.xcloc/Localized Contents/ar.xliff index 427430b833..bd8d6a17ef 100644 --- a/apps/ios/SimpleX Localizations/ar.xcloc/Localized Contents/ar.xliff +++ b/apps/ios/SimpleX Localizations/ar.xcloc/Localized Contents/ar.xliff @@ -1157,8 +1157,8 @@ يطور No comment provided by engineer. - - Developer tools + + Developer أدوات المطور No comment provided by engineer. diff --git a/apps/ios/SimpleX Localizations/bg.xcloc/Localized Contents/bg.xliff b/apps/ios/SimpleX Localizations/bg.xcloc/Localized Contents/bg.xliff index 364cee97e5..89d5014c95 100644 --- a/apps/ios/SimpleX Localizations/bg.xcloc/Localized Contents/bg.xliff +++ b/apps/ios/SimpleX Localizations/bg.xcloc/Localized Contents/bg.xliff @@ -3014,8 +3014,8 @@ alert button Developer options No comment provided by engineer. - - Developer tools + + Developer Инструменти за разработчици No comment provided by engineer. diff --git a/apps/ios/SimpleX Localizations/bn.xcloc/Localized Contents/bn.xliff b/apps/ios/SimpleX Localizations/bn.xcloc/Localized Contents/bn.xliff index fbda1abd29..bdb0c0ce24 100644 --- a/apps/ios/SimpleX Localizations/bn.xcloc/Localized Contents/bn.xliff +++ b/apps/ios/SimpleX Localizations/bn.xcloc/Localized Contents/bn.xliff @@ -1223,8 +1223,8 @@ Develop No comment provided by engineer. - - Developer tools + + Developer No comment provided by engineer. diff --git a/apps/ios/SimpleX Localizations/cs.xcloc/Localized Contents/cs.xliff b/apps/ios/SimpleX Localizations/cs.xcloc/Localized Contents/cs.xliff index 5ba29ec846..f7beecf4ba 100644 --- a/apps/ios/SimpleX Localizations/cs.xcloc/Localized Contents/cs.xliff +++ b/apps/ios/SimpleX Localizations/cs.xcloc/Localized Contents/cs.xliff @@ -2904,8 +2904,8 @@ alert button Developer options No comment provided by engineer. - - Developer tools + + Developer Nástroje pro vývojáře No comment provided by engineer. diff --git a/apps/ios/SimpleX Localizations/de.xcloc/Localized Contents/de.xliff b/apps/ios/SimpleX Localizations/de.xcloc/Localized Contents/de.xliff index 797a489c92..822c13649e 100644 --- a/apps/ios/SimpleX Localizations/de.xcloc/Localized Contents/de.xliff +++ b/apps/ios/SimpleX Localizations/de.xcloc/Localized Contents/de.xliff @@ -3130,8 +3130,8 @@ alert button Optionen für Entwickler No comment provided by engineer. - - Developer tools + + Developer Entwicklertools No comment provided by engineer. diff --git a/apps/ios/SimpleX Localizations/el.xcloc/Localized Contents/el.xliff b/apps/ios/SimpleX Localizations/el.xcloc/Localized Contents/el.xliff index 7a560bb41b..181f51eb99 100644 --- a/apps/ios/SimpleX Localizations/el.xcloc/Localized Contents/el.xliff +++ b/apps/ios/SimpleX Localizations/el.xcloc/Localized Contents/el.xliff @@ -1100,8 +1100,8 @@ Available in v5.1 Develop No comment provided by engineer. - - Developer tools + + Developer No comment provided by engineer. diff --git a/apps/ios/SimpleX Localizations/en.xcloc/Localized Contents/en.xliff b/apps/ios/SimpleX Localizations/en.xcloc/Localized Contents/en.xliff index c108dcc904..bd498d53e3 100644 --- a/apps/ios/SimpleX Localizations/en.xcloc/Localized Contents/en.xliff +++ b/apps/ios/SimpleX Localizations/en.xcloc/Localized Contents/en.xliff @@ -3140,9 +3140,9 @@ alert button Developer options No comment provided by engineer. - - Developer tools - Developer tools + + Developer + Developer No comment provided by engineer. diff --git a/apps/ios/SimpleX Localizations/es.xcloc/Localized Contents/es.xliff b/apps/ios/SimpleX Localizations/es.xcloc/Localized Contents/es.xliff index d93e692a63..60de758c9c 100644 --- a/apps/ios/SimpleX Localizations/es.xcloc/Localized Contents/es.xliff +++ b/apps/ios/SimpleX Localizations/es.xcloc/Localized Contents/es.xliff @@ -3130,8 +3130,8 @@ alert button Opciones desarrollador No comment provided by engineer. - - Developer tools + + Developer Herramientas desarrollo No comment provided by engineer. diff --git a/apps/ios/SimpleX Localizations/fi.xcloc/Localized Contents/fi.xliff b/apps/ios/SimpleX Localizations/fi.xcloc/Localized Contents/fi.xliff index 5656516b7d..c818fdc472 100644 --- a/apps/ios/SimpleX Localizations/fi.xcloc/Localized Contents/fi.xliff +++ b/apps/ios/SimpleX Localizations/fi.xcloc/Localized Contents/fi.xliff @@ -2791,8 +2791,8 @@ alert button Developer options No comment provided by engineer. - - Developer tools + + Developer Kehittäjätyökalut No comment provided by engineer. diff --git a/apps/ios/SimpleX Localizations/fr.xcloc/Localized Contents/fr.xliff b/apps/ios/SimpleX Localizations/fr.xcloc/Localized Contents/fr.xliff index 3ea0859d76..4d1616df20 100644 --- a/apps/ios/SimpleX Localizations/fr.xcloc/Localized Contents/fr.xliff +++ b/apps/ios/SimpleX Localizations/fr.xcloc/Localized Contents/fr.xliff @@ -3039,8 +3039,8 @@ alert button Options pour les développeurs No comment provided by engineer. - - Developer tools + + Developer Outils du développeur No comment provided by engineer. diff --git a/apps/ios/SimpleX Localizations/he.xcloc/Localized Contents/he.xliff b/apps/ios/SimpleX Localizations/he.xcloc/Localized Contents/he.xliff index f94d6cefd8..a22d30dd73 100644 --- a/apps/ios/SimpleX Localizations/he.xcloc/Localized Contents/he.xliff +++ b/apps/ios/SimpleX Localizations/he.xcloc/Localized Contents/he.xliff @@ -1356,8 +1356,8 @@ Available in v5.1 לְפַתֵחַ No comment provided by engineer. - - Developer tools + + Developer כלי מפתחים No comment provided by engineer. diff --git a/apps/ios/SimpleX Localizations/hr.xcloc/Localized Contents/hr.xliff b/apps/ios/SimpleX Localizations/hr.xcloc/Localized Contents/hr.xliff index 2aa945f603..33fe9a0e9c 100644 --- a/apps/ios/SimpleX Localizations/hr.xcloc/Localized Contents/hr.xliff +++ b/apps/ios/SimpleX Localizations/hr.xcloc/Localized Contents/hr.xliff @@ -1012,8 +1012,8 @@ Develop No comment provided by engineer. - - Developer tools + + Developer No comment provided by engineer. diff --git a/apps/ios/SimpleX Localizations/hu.xcloc/Localized Contents/hu.xliff b/apps/ios/SimpleX Localizations/hu.xcloc/Localized Contents/hu.xliff index 129436ecb0..11b447dc2b 100644 --- a/apps/ios/SimpleX Localizations/hu.xcloc/Localized Contents/hu.xliff +++ b/apps/ios/SimpleX Localizations/hu.xcloc/Localized Contents/hu.xliff @@ -3130,8 +3130,8 @@ alert button Fejlesztői beállítások No comment provided by engineer. - - Developer tools + + Developer Fejlesztői eszközök No comment provided by engineer. diff --git a/apps/ios/SimpleX Localizations/it.xcloc/Localized Contents/it.xliff b/apps/ios/SimpleX Localizations/it.xcloc/Localized Contents/it.xliff index 469da88ce2..876cdb10bb 100644 --- a/apps/ios/SimpleX Localizations/it.xcloc/Localized Contents/it.xliff +++ b/apps/ios/SimpleX Localizations/it.xcloc/Localized Contents/it.xliff @@ -3130,8 +3130,8 @@ alert button Opzioni sviluppatore No comment provided by engineer. - - Developer tools + + Developer Strumenti di sviluppo No comment provided by engineer. diff --git a/apps/ios/SimpleX Localizations/ja.xcloc/Localized Contents/ja.xliff b/apps/ios/SimpleX Localizations/ja.xcloc/Localized Contents/ja.xliff index 13396b13a4..ff0d085c08 100644 --- a/apps/ios/SimpleX Localizations/ja.xcloc/Localized Contents/ja.xliff +++ b/apps/ios/SimpleX Localizations/ja.xcloc/Localized Contents/ja.xliff @@ -2891,8 +2891,8 @@ alert button 開発者向けの設定 No comment provided by engineer. - - Developer tools + + Developer 開発ツール No comment provided by engineer. diff --git a/apps/ios/SimpleX Localizations/ko.xcloc/Localized Contents/ko.xliff b/apps/ios/SimpleX Localizations/ko.xcloc/Localized Contents/ko.xliff index ca51a875c7..01b5e2b9a2 100644 --- a/apps/ios/SimpleX Localizations/ko.xcloc/Localized Contents/ko.xliff +++ b/apps/ios/SimpleX Localizations/ko.xcloc/Localized Contents/ko.xliff @@ -1141,8 +1141,8 @@ Develop No comment provided by engineer. - - Developer tools + + Developer No comment provided by engineer. diff --git a/apps/ios/SimpleX Localizations/lt.xcloc/Localized Contents/lt.xliff b/apps/ios/SimpleX Localizations/lt.xcloc/Localized Contents/lt.xliff index 4b51d66a34..5aa2a98854 100644 --- a/apps/ios/SimpleX Localizations/lt.xcloc/Localized Contents/lt.xliff +++ b/apps/ios/SimpleX Localizations/lt.xcloc/Localized Contents/lt.xliff @@ -1005,8 +1005,8 @@ Develop No comment provided by engineer. - - Developer tools + + Developer No comment provided by engineer. diff --git a/apps/ios/SimpleX Localizations/nl.xcloc/Localized Contents/nl.xliff b/apps/ios/SimpleX Localizations/nl.xcloc/Localized Contents/nl.xliff index 9f1818fba9..a7670a4475 100644 --- a/apps/ios/SimpleX Localizations/nl.xcloc/Localized Contents/nl.xliff +++ b/apps/ios/SimpleX Localizations/nl.xcloc/Localized Contents/nl.xliff @@ -3040,8 +3040,8 @@ alert button Ontwikkelaars opties No comment provided by engineer. - - Developer tools + + Developer Ontwikkel gereedschap No comment provided by engineer. diff --git a/apps/ios/SimpleX Localizations/pl.xcloc/Localized Contents/pl.xliff b/apps/ios/SimpleX Localizations/pl.xcloc/Localized Contents/pl.xliff index 2644708927..a60b5891d4 100644 --- a/apps/ios/SimpleX Localizations/pl.xcloc/Localized Contents/pl.xliff +++ b/apps/ios/SimpleX Localizations/pl.xcloc/Localized Contents/pl.xliff @@ -3063,8 +3063,8 @@ alert button Opcje deweloperskie No comment provided by engineer. - - Developer tools + + Developer Narzędzia deweloperskie No comment provided by engineer. diff --git a/apps/ios/SimpleX Localizations/pt-BR.xcloc/Localized Contents/pt-BR.xliff b/apps/ios/SimpleX Localizations/pt-BR.xcloc/Localized Contents/pt-BR.xliff index d9af0624bf..032a33ff62 100644 --- a/apps/ios/SimpleX Localizations/pt-BR.xcloc/Localized Contents/pt-BR.xliff +++ b/apps/ios/SimpleX Localizations/pt-BR.xcloc/Localized Contents/pt-BR.xliff @@ -1179,8 +1179,8 @@ Desenvolver No comment provided by engineer. - - Developer tools + + Developer Ferramentas de desenvolvimento No comment provided by engineer. diff --git a/apps/ios/SimpleX Localizations/pt.xcloc/Localized Contents/pt.xliff b/apps/ios/SimpleX Localizations/pt.xcloc/Localized Contents/pt.xliff index e4fac55bcb..3905130e84 100644 --- a/apps/ios/SimpleX Localizations/pt.xcloc/Localized Contents/pt.xliff +++ b/apps/ios/SimpleX Localizations/pt.xcloc/Localized Contents/pt.xliff @@ -1203,8 +1203,8 @@ Available in v5.1 Develop No comment provided by engineer. - - Developer tools + + Developer No comment provided by engineer. diff --git a/apps/ios/SimpleX Localizations/ru.xcloc/Localized Contents/ru.xliff b/apps/ios/SimpleX Localizations/ru.xcloc/Localized Contents/ru.xliff index a3971c0325..22df6680f6 100644 --- a/apps/ios/SimpleX Localizations/ru.xcloc/Localized Contents/ru.xliff +++ b/apps/ios/SimpleX Localizations/ru.xcloc/Localized Contents/ru.xliff @@ -3130,8 +3130,8 @@ alert button Опции разработчика No comment provided by engineer. - - Developer tools + + Developer Инструменты разработчика No comment provided by engineer. diff --git a/apps/ios/SimpleX Localizations/th.xcloc/Localized Contents/th.xliff b/apps/ios/SimpleX Localizations/th.xcloc/Localized Contents/th.xliff index cd2e30977d..11d6b28091 100644 --- a/apps/ios/SimpleX Localizations/th.xcloc/Localized Contents/th.xliff +++ b/apps/ios/SimpleX Localizations/th.xcloc/Localized Contents/th.xliff @@ -2779,8 +2779,8 @@ alert button Developer options No comment provided by engineer. - - Developer tools + + Developer เครื่องมือสำหรับนักพัฒนา No comment provided by engineer. diff --git a/apps/ios/SimpleX Localizations/tr.xcloc/Localized Contents/tr.xliff b/apps/ios/SimpleX Localizations/tr.xcloc/Localized Contents/tr.xliff index 1189b53e3c..b673b609b9 100644 --- a/apps/ios/SimpleX Localizations/tr.xcloc/Localized Contents/tr.xliff +++ b/apps/ios/SimpleX Localizations/tr.xcloc/Localized Contents/tr.xliff @@ -3066,8 +3066,8 @@ alert button Geliştirici seçenekleri No comment provided by engineer. - - Developer tools + + Developer Geliştirici araçları No comment provided by engineer. diff --git a/apps/ios/SimpleX Localizations/uk.xcloc/Localized Contents/uk.xliff b/apps/ios/SimpleX Localizations/uk.xcloc/Localized Contents/uk.xliff index 49f9e21eda..3c0c6ef8de 100644 --- a/apps/ios/SimpleX Localizations/uk.xcloc/Localized Contents/uk.xliff +++ b/apps/ios/SimpleX Localizations/uk.xcloc/Localized Contents/uk.xliff @@ -3050,8 +3050,8 @@ alert button Можливості для розробників No comment provided by engineer. - - Developer tools + + Developer Інструменти для розробників No comment provided by engineer. diff --git a/apps/ios/SimpleX Localizations/zh-Hans.xcloc/Localized Contents/zh-Hans.xliff b/apps/ios/SimpleX Localizations/zh-Hans.xcloc/Localized Contents/zh-Hans.xliff index 8823f17204..9001375615 100644 --- a/apps/ios/SimpleX Localizations/zh-Hans.xcloc/Localized Contents/zh-Hans.xliff +++ b/apps/ios/SimpleX Localizations/zh-Hans.xcloc/Localized Contents/zh-Hans.xliff @@ -3060,8 +3060,8 @@ alert button 开发者选项 No comment provided by engineer. - - Developer tools + + Developer 开发者工具 No comment provided by engineer. diff --git a/apps/ios/SimpleX Localizations/zh-Hant.xcloc/Localized Contents/zh-Hant.xliff b/apps/ios/SimpleX Localizations/zh-Hant.xcloc/Localized Contents/zh-Hant.xliff index 0e4e383b52..ebd6f4da71 100644 --- a/apps/ios/SimpleX Localizations/zh-Hant.xcloc/Localized Contents/zh-Hant.xliff +++ b/apps/ios/SimpleX Localizations/zh-Hant.xcloc/Localized Contents/zh-Hant.xliff @@ -1148,8 +1148,8 @@ 開發 No comment provided by engineer. - - Developer tools + + Developer 開發者工具 No comment provided by engineer. diff --git a/apps/ios/SimpleX SE/ShareModel.swift b/apps/ios/SimpleX SE/ShareModel.swift index 18f3e2c344..9790e5944f 100644 --- a/apps/ios/SimpleX SE/ShareModel.swift +++ b/apps/ios/SimpleX SE/ShareModel.swift @@ -75,7 +75,7 @@ class ShareModel: ObservableObject { func setup(context: NSExtensionContext) { if appLocalAuthEnabledGroupDefault.get() && !allowShareExtensionGroupDefault.get() { - errorAlert = ErrorAlert(title: "App is locked!", message: "You can allow sharing in Privacy & Security / SimpleX Lock settings.") + errorAlert = ErrorAlert(title: "App is locked!", message: "You can allow sharing in Your privacy / SimpleX Lock settings.") return } if let item = context.inputItems.first as? NSExtensionItem, diff --git a/apps/ios/SimpleX SE/de.lproj/Localizable.strings b/apps/ios/SimpleX SE/de.lproj/Localizable.strings index df368686e8..1d2e5a4b01 100644 --- a/apps/ios/SimpleX SE/de.lproj/Localizable.strings +++ b/apps/ios/SimpleX SE/de.lproj/Localizable.strings @@ -107,5 +107,5 @@ "Wrong database passphrase" = "Falsches Datenbank-Passwort"; /* No comment provided by engineer. */ -"You can allow sharing in Privacy & Security / SimpleX Lock settings." = "Sie können das Teilen in den Einstellungen zu Datenschutz & Sicherheit / SimpleX-Sperre erlauben."; +"You can allow sharing in Your privacy / SimpleX Lock settings." = "Sie können das Teilen in den Einstellungen zu Datenschutz & Sicherheit / SimpleX-Sperre erlauben."; diff --git a/apps/ios/SimpleX SE/es.lproj/Localizable.strings b/apps/ios/SimpleX SE/es.lproj/Localizable.strings index 4cc5029537..5bb42b4f0a 100644 --- a/apps/ios/SimpleX SE/es.lproj/Localizable.strings +++ b/apps/ios/SimpleX SE/es.lproj/Localizable.strings @@ -107,5 +107,5 @@ "Wrong database passphrase" = "Contraseña incorrecta de la base de datos"; /* No comment provided by engineer. */ -"You can allow sharing in Privacy & Security / SimpleX Lock settings." = "Puedes dar permiso para compartir en Privacidad y Seguridad / Bloque SimpleX."; +"You can allow sharing in Your privacy / SimpleX Lock settings." = "Puedes dar permiso para compartir en Privacidad y Seguridad / Bloque SimpleX."; diff --git a/apps/ios/SimpleX SE/fr.lproj/Localizable.strings b/apps/ios/SimpleX SE/fr.lproj/Localizable.strings index 46a458b471..6b492ee882 100644 --- a/apps/ios/SimpleX SE/fr.lproj/Localizable.strings +++ b/apps/ios/SimpleX SE/fr.lproj/Localizable.strings @@ -107,5 +107,5 @@ "Wrong database passphrase" = "Mauvaise phrase secrète pour la base de données"; /* No comment provided by engineer. */ -"You can allow sharing in Privacy & Security / SimpleX Lock settings." = "Vous pouvez autoriser le partage dans les paramètres Confidentialité et sécurité / SimpleX Lock."; +"You can allow sharing in Your privacy / SimpleX Lock settings." = "Vous pouvez autoriser le partage dans les paramètres Confidentialité et sécurité / SimpleX Lock."; diff --git a/apps/ios/SimpleX SE/hu.lproj/Localizable.strings b/apps/ios/SimpleX SE/hu.lproj/Localizable.strings index 3aad39c5d1..dae06b1d73 100644 --- a/apps/ios/SimpleX SE/hu.lproj/Localizable.strings +++ b/apps/ios/SimpleX SE/hu.lproj/Localizable.strings @@ -107,5 +107,5 @@ "Wrong database passphrase" = "Érvénytelen adatbázis-jelmondat"; /* No comment provided by engineer. */ -"You can allow sharing in Privacy & Security / SimpleX Lock settings." = "A megosztást az Adatvédelem és biztonság / SimpleX-zár menüben engedélyezheti."; +"You can allow sharing in Your privacy / SimpleX Lock settings." = "A megosztást az Adatvédelem és biztonság / SimpleX-zár menüben engedélyezheti."; diff --git a/apps/ios/SimpleX SE/it.lproj/Localizable.strings b/apps/ios/SimpleX SE/it.lproj/Localizable.strings index e3d34650a3..3b27092f24 100644 --- a/apps/ios/SimpleX SE/it.lproj/Localizable.strings +++ b/apps/ios/SimpleX SE/it.lproj/Localizable.strings @@ -107,5 +107,5 @@ "Wrong database passphrase" = "Password del database sbagliata"; /* No comment provided by engineer. */ -"You can allow sharing in Privacy & Security / SimpleX Lock settings." = "Puoi consentire la condivisione in Privacy e sicurezza / impostazioni di SimpleX Lock."; +"You can allow sharing in Your privacy / SimpleX Lock settings." = "Puoi consentire la condivisione in Privacy e sicurezza / impostazioni di SimpleX Lock."; diff --git a/apps/ios/SimpleX SE/nl.lproj/Localizable.strings b/apps/ios/SimpleX SE/nl.lproj/Localizable.strings index e5d2487b54..050cb1a735 100644 --- a/apps/ios/SimpleX SE/nl.lproj/Localizable.strings +++ b/apps/ios/SimpleX SE/nl.lproj/Localizable.strings @@ -107,5 +107,5 @@ "Wrong database passphrase" = "Verkeerde database wachtwoord"; /* No comment provided by engineer. */ -"You can allow sharing in Privacy & Security / SimpleX Lock settings." = "U kunt delen toestaan in de instellingen voor Privacy en beveiliging / SimpleX Lock."; +"You can allow sharing in Your privacy / SimpleX Lock settings." = "U kunt delen toestaan in de instellingen voor Privacy en beveiliging / SimpleX Lock."; diff --git a/apps/ios/SimpleX SE/pl.lproj/Localizable.strings b/apps/ios/SimpleX SE/pl.lproj/Localizable.strings index c563431c28..0755e1e374 100644 --- a/apps/ios/SimpleX SE/pl.lproj/Localizable.strings +++ b/apps/ios/SimpleX SE/pl.lproj/Localizable.strings @@ -107,5 +107,5 @@ "Wrong database passphrase" = "Nieprawidłowe hasło bazy danych"; /* No comment provided by engineer. */ -"You can allow sharing in Privacy & Security / SimpleX Lock settings." = "Możesz zezwolić na udostępnianie w ustawieniach Prywatność i bezpieczeństwo / Blokada SimpleX."; +"You can allow sharing in Your privacy / SimpleX Lock settings." = "Możesz zezwolić na udostępnianie w ustawieniach Prywatność i bezpieczeństwo / Blokada SimpleX."; diff --git a/apps/ios/SimpleX SE/ru.lproj/Localizable.strings b/apps/ios/SimpleX SE/ru.lproj/Localizable.strings index e4c8c000d4..90a5841738 100644 --- a/apps/ios/SimpleX SE/ru.lproj/Localizable.strings +++ b/apps/ios/SimpleX SE/ru.lproj/Localizable.strings @@ -107,5 +107,5 @@ "Wrong database passphrase" = "Неправильный пароль базы данных"; /* No comment provided by engineer. */ -"You can allow sharing in Privacy & Security / SimpleX Lock settings." = "Вы можете разрешить функцию Поделиться в настройках Конфиденциальности / Блокировка SimpleX."; +"You can allow sharing in Your privacy / SimpleX Lock settings." = "Вы можете разрешить функцию Поделиться в настройках Конфиденциальности / Блокировка SimpleX."; diff --git a/apps/ios/SimpleX SE/tr.lproj/Localizable.strings b/apps/ios/SimpleX SE/tr.lproj/Localizable.strings index baef71c127..69b122832d 100644 --- a/apps/ios/SimpleX SE/tr.lproj/Localizable.strings +++ b/apps/ios/SimpleX SE/tr.lproj/Localizable.strings @@ -107,5 +107,5 @@ "Wrong database passphrase" = "Yanlış veritabanı parolası"; /* No comment provided by engineer. */ -"You can allow sharing in Privacy & Security / SimpleX Lock settings." = "Gizlilik ve Güvenlik / SimpleX Lock ayarlarından paylaşıma izin verebilirsiniz."; +"You can allow sharing in Your privacy / SimpleX Lock settings." = "Gizlilik ve Güvenlik / SimpleX Lock ayarlarından paylaşıma izin verebilirsiniz."; diff --git a/apps/ios/SimpleX SE/uk.lproj/Localizable.strings b/apps/ios/SimpleX SE/uk.lproj/Localizable.strings index a6da81185e..7574470d01 100644 --- a/apps/ios/SimpleX SE/uk.lproj/Localizable.strings +++ b/apps/ios/SimpleX SE/uk.lproj/Localizable.strings @@ -107,5 +107,5 @@ "Wrong database passphrase" = "Неправильна ключова фраза до бази даних"; /* No comment provided by engineer. */ -"You can allow sharing in Privacy & Security / SimpleX Lock settings." = "Ви можете дозволити спільний доступ у налаштуваннях Конфіденційність і безпека / SimpleX Lock."; +"You can allow sharing in Your privacy / SimpleX Lock settings." = "Ви можете дозволити спільний доступ у налаштуваннях Конфіденційність і безпека / SimpleX Lock."; diff --git a/apps/ios/SimpleX SE/zh-Hans.lproj/Localizable.strings b/apps/ios/SimpleX SE/zh-Hans.lproj/Localizable.strings index 362e2edb74..fc046ab087 100644 --- a/apps/ios/SimpleX SE/zh-Hans.lproj/Localizable.strings +++ b/apps/ios/SimpleX SE/zh-Hans.lproj/Localizable.strings @@ -107,5 +107,5 @@ "Wrong database passphrase" = "数据库密码错误"; /* No comment provided by engineer. */ -"You can allow sharing in Privacy & Security / SimpleX Lock settings." = "您可以在 \"隐私与安全\"/\"SimpleX Lock \"设置中允许共享。"; +"You can allow sharing in Your privacy / SimpleX Lock settings." = "您可以在 \"隐私与安全\"/\"SimpleX Lock \"设置中允许共享。"; diff --git a/apps/ios/bg.lproj/Localizable.strings b/apps/ios/bg.lproj/Localizable.strings index ec869e05b4..68f2cfe502 100644 --- a/apps/ios/bg.lproj/Localizable.strings +++ b/apps/ios/bg.lproj/Localizable.strings @@ -1659,7 +1659,7 @@ alert button */ "Develop" = "Разработване"; /* No comment provided by engineer. */ -"Developer tools" = "Инструменти за разработчици"; +"Developer" = "Инструменти за разработчици"; /* No comment provided by engineer. */ "Device" = "Устройство"; @@ -3217,7 +3217,7 @@ alert button */ "Preview" = "Визуализация"; /* No comment provided by engineer. */ -"Privacy & security" = "Поверителност и сигурност"; +"Your privacy" = "Поверителност и сигурност"; /* No comment provided by engineer. */ "Private filenames" = "Поверителни имена на файлове"; @@ -4452,7 +4452,7 @@ server test failure */ "You can enable later via Settings" = "Можете да активирате по-късно през Настройки"; /* No comment provided by engineer. */ -"You can enable them later via app Privacy & Security settings." = "Можете да ги активирате по-късно през настройките за \"Поверителност и сигурност\" на приложението."; +"You can enable them later via app Your privacy settings." = "Можете да ги активирате по-късно през настройките за \"Поверителност и сигурност\" на приложението."; /* No comment provided by engineer. */ "You can give another try." = "Можете да опитате още веднъж."; diff --git a/apps/ios/cs.lproj/Localizable.strings b/apps/ios/cs.lproj/Localizable.strings index fc4b3f0fc6..0b74ef9504 100644 --- a/apps/ios/cs.lproj/Localizable.strings +++ b/apps/ios/cs.lproj/Localizable.strings @@ -1306,7 +1306,7 @@ alert button */ "Develop" = "Vyvinout"; /* No comment provided by engineer. */ -"Developer tools" = "Nástroje pro vývojáře"; +"Developer" = "Nástroje pro vývojáře"; /* No comment provided by engineer. */ "Device" = "Zařízení"; @@ -2578,7 +2578,7 @@ alert button */ "Preview" = "Náhled"; /* No comment provided by engineer. */ -"Privacy & security" = "Ochrana osobních údajů a zabezpečení"; +"Your privacy" = "Ochrana osobních údajů a zabezpečení"; /* No comment provided by engineer. */ "Private filenames" = "Soukromé názvy souborů"; @@ -3543,7 +3543,7 @@ server test failure */ "You can enable later via Settings" = "Můžete povolit později v Nastavení"; /* No comment provided by engineer. */ -"You can enable them later via app Privacy & Security settings." = "Můžete je povolit později v nastavení Soukromí & Bezpečnosti aplikace"; +"You can enable them later via app Your privacy settings." = "Můžete je povolit později v nastavení Soukromí & Bezpečnosti aplikace"; /* No comment provided by engineer. */ "You can hide or mute a user profile - swipe it to the right." = "Profil uživatele můžete skrýt nebo ztlumit - přejeďte prstem doprava."; diff --git a/apps/ios/de.lproj/Localizable.strings b/apps/ios/de.lproj/Localizable.strings index 2c4e37791b..80246b727b 100644 --- a/apps/ios/de.lproj/Localizable.strings +++ b/apps/ios/de.lproj/Localizable.strings @@ -2064,7 +2064,7 @@ alert button */ "Developer options" = "Optionen für Entwickler"; /* No comment provided by engineer. */ -"Developer tools" = "Entwicklertools"; +"Developer" = "Entwicklertools"; /* No comment provided by engineer. */ "Device" = "Gerät"; @@ -4533,7 +4533,7 @@ alert button */ "Previously connected servers" = "Bisher verbundene Server"; /* No comment provided by engineer. */ -"Privacy & security" = "Datenschutz & Sicherheit"; +"Your privacy" = "Datenschutz & Sicherheit"; /* No comment provided by engineer. */ "Privacy for your customers." = "Schutz der Privatsphäre Ihrer Kunden."; @@ -6759,7 +6759,7 @@ server test failure */ "You can enable later via Settings" = "Sie können diese später in den Einstellungen aktivieren"; /* No comment provided by engineer. */ -"You can enable them later via app Privacy & Security settings." = "Sie können diese später in den Datenschutz & Sicherheits-Einstellungen der App aktivieren."; +"You can enable them later via app Your privacy settings." = "Sie können diese später in den Datenschutz & Sicherheits-Einstellungen der App aktivieren."; /* No comment provided by engineer. */ "You can give another try." = "Sie können es nochmal probieren."; diff --git a/apps/ios/es.lproj/Localizable.strings b/apps/ios/es.lproj/Localizable.strings index cf03ae6dbf..e0611c0afc 100644 --- a/apps/ios/es.lproj/Localizable.strings +++ b/apps/ios/es.lproj/Localizable.strings @@ -2064,7 +2064,7 @@ alert button */ "Developer options" = "Opciones desarrollador"; /* No comment provided by engineer. */ -"Developer tools" = "Herramientas desarrollo"; +"Developer" = "Herramientas desarrollo"; /* No comment provided by engineer. */ "Device" = "Dispositivo"; @@ -4533,7 +4533,7 @@ alert button */ "Previously connected servers" = "Servidores conectados previamente"; /* No comment provided by engineer. */ -"Privacy & security" = "Seguridad y Privacidad"; +"Your privacy" = "Seguridad y Privacidad"; /* No comment provided by engineer. */ "Privacy for your customers." = "Privacidad para tus clientes."; @@ -6759,7 +6759,7 @@ server test failure */ "You can enable later via Settings" = "Puedes activar más tarde en Configuración"; /* No comment provided by engineer. */ -"You can enable them later via app Privacy & Security settings." = "Puedes activarlos más tarde en la configuración de Privacidad y Seguridad."; +"You can enable them later via app Your privacy settings." = "Puedes activarlos más tarde en la configuración de Privacidad y Seguridad."; /* No comment provided by engineer. */ "You can give another try." = "Puedes intentarlo de nuevo."; diff --git a/apps/ios/fi.lproj/Localizable.strings b/apps/ios/fi.lproj/Localizable.strings index 3b1bd6523c..36b516374e 100644 --- a/apps/ios/fi.lproj/Localizable.strings +++ b/apps/ios/fi.lproj/Localizable.strings @@ -982,7 +982,7 @@ alert button */ "Develop" = "Kehitä"; /* No comment provided by engineer. */ -"Developer tools" = "Kehittäjätyökalut"; +"Developer" = "Kehittäjätyökalut"; /* No comment provided by engineer. */ "Device" = "Laite"; @@ -2232,7 +2232,7 @@ new chat action */ "Preview" = "Esikatselu"; /* No comment provided by engineer. */ -"Privacy & security" = "Yksityisyys ja turvallisuus"; +"Your privacy" = "Yksityisyys ja turvallisuus"; /* No comment provided by engineer. */ "Private filenames" = "Yksityiset tiedostonimet"; @@ -3179,7 +3179,7 @@ server test failure */ "You can enable later via Settings" = "Voit ottaa käyttöön myöhemmin asetusten kautta"; /* No comment provided by engineer. */ -"You can enable them later via app Privacy & Security settings." = "Voit ottaa ne käyttöön myöhemmin sovelluksen Yksityisyys & Turvallisuus -asetuksista."; +"You can enable them later via app Your privacy settings." = "Voit ottaa ne käyttöön myöhemmin sovelluksen Yksityisyys & Turvallisuus -asetuksista."; /* No comment provided by engineer. */ "You can hide or mute a user profile - swipe it to the right." = "Voit piilottaa tai mykistää käyttäjäprofiilin pyyhkäisemällä sitä oikealle."; diff --git a/apps/ios/fr.lproj/Localizable.strings b/apps/ios/fr.lproj/Localizable.strings index 91cd6f3078..98cdb4aec8 100644 --- a/apps/ios/fr.lproj/Localizable.strings +++ b/apps/ios/fr.lproj/Localizable.strings @@ -1745,7 +1745,7 @@ alert button */ "Developer options" = "Options pour les développeurs"; /* No comment provided by engineer. */ -"Developer tools" = "Outils du développeur"; +"Developer" = "Outils du développeur"; /* No comment provided by engineer. */ "Device" = "Appareil"; @@ -3742,7 +3742,7 @@ alert button */ "Previously connected servers" = "Serveurs précédemment connectés"; /* No comment provided by engineer. */ -"Privacy & security" = "Vie privée et sécurité"; +"Your privacy" = "Vie privée et sécurité"; /* No comment provided by engineer. */ "Privacy for your customers." = "Respect de la vie privée de vos clients."; @@ -5448,7 +5448,7 @@ server test failure */ "You can enable later via Settings" = "Vous pouvez l'activer ultérieurement via Paramètres"; /* No comment provided by engineer. */ -"You can enable them later via app Privacy & Security settings." = "Vous pouvez les activer ultérieurement via les paramètres de Confidentialité et Sécurité de l'application."; +"You can enable them later via app Your privacy settings." = "Vous pouvez les activer ultérieurement via les paramètres de Confidentialité et Sécurité de l'application."; /* No comment provided by engineer. */ "You can give another try." = "Vous pouvez faire un nouvel essai."; diff --git a/apps/ios/hu.lproj/Localizable.strings b/apps/ios/hu.lproj/Localizable.strings index 029fb9edd5..362d9157fd 100644 --- a/apps/ios/hu.lproj/Localizable.strings +++ b/apps/ios/hu.lproj/Localizable.strings @@ -2064,7 +2064,7 @@ alert button */ "Developer options" = "Fejlesztői beállítások"; /* No comment provided by engineer. */ -"Developer tools" = "Fejlesztői eszközök"; +"Developer" = "Fejlesztői eszközök"; /* No comment provided by engineer. */ "Device" = "Eszköz"; @@ -4533,7 +4533,7 @@ alert button */ "Previously connected servers" = "Korábban kapcsolódott kiszolgálók"; /* No comment provided by engineer. */ -"Privacy & security" = "Adatvédelem és biztonság"; +"Your privacy" = "Adatvédelem és biztonság"; /* No comment provided by engineer. */ "Privacy for your customers." = "Saját ügyfeleinek adatvédelme."; @@ -6759,7 +6759,7 @@ server test failure */ "You can enable later via Settings" = "Később engedélyezheti a beállításokban"; /* No comment provided by engineer. */ -"You can enable them later via app Privacy & Security settings." = "Később engedélyezheti őket az „Adatvédelem és biztonság” menüben."; +"You can enable them later via app Your privacy settings." = "Később engedélyezheti őket az „Adatvédelem és biztonság” menüben."; /* No comment provided by engineer. */ "You can give another try." = "Megpróbálhatja még egyszer."; diff --git a/apps/ios/it.lproj/Localizable.strings b/apps/ios/it.lproj/Localizable.strings index c882eb662c..8d4fa3532b 100644 --- a/apps/ios/it.lproj/Localizable.strings +++ b/apps/ios/it.lproj/Localizable.strings @@ -2064,7 +2064,7 @@ alert button */ "Developer options" = "Opzioni sviluppatore"; /* No comment provided by engineer. */ -"Developer tools" = "Strumenti di sviluppo"; +"Developer" = "Strumenti di sviluppo"; /* No comment provided by engineer. */ "Device" = "Dispositivo"; @@ -4533,7 +4533,7 @@ alert button */ "Previously connected servers" = "Server precedentemente connessi"; /* No comment provided by engineer. */ -"Privacy & security" = "Privacy e sicurezza"; +"Your privacy" = "Privacy e sicurezza"; /* No comment provided by engineer. */ "Privacy for your customers." = "Privacy per i tuoi clienti."; @@ -6759,7 +6759,7 @@ server test failure */ "You can enable later via Settings" = "Puoi attivarle più tardi nelle impostazioni"; /* No comment provided by engineer. */ -"You can enable them later via app Privacy & Security settings." = "Puoi attivarle più tardi nelle impostazioni di privacy e sicurezza dell'app."; +"You can enable them later via app Your privacy settings." = "Puoi attivarle più tardi nelle impostazioni di privacy e sicurezza dell'app."; /* No comment provided by engineer. */ "You can give another try." = "Puoi fare un altro tentativo."; diff --git a/apps/ios/ja.lproj/Localizable.strings b/apps/ios/ja.lproj/Localizable.strings index 35d8732e3f..b88eb10414 100644 --- a/apps/ios/ja.lproj/Localizable.strings +++ b/apps/ios/ja.lproj/Localizable.strings @@ -1270,7 +1270,7 @@ alert button */ "Developer options" = "開発者向けの設定"; /* No comment provided by engineer. */ -"Developer tools" = "開発ツール"; +"Developer" = "開発ツール"; /* No comment provided by engineer. */ "Device" = "端末"; @@ -2533,7 +2533,7 @@ alert button */ "Preview" = "プレビュー"; /* No comment provided by engineer. */ -"Privacy & security" = "プライバシーとセキュリティ"; +"Your privacy" = "プライバシーとセキュリティ"; /* No comment provided by engineer. */ "Private filenames" = "プライベートなファイル名"; @@ -3459,7 +3459,7 @@ server test failure */ "You can enable later via Settings" = "あとで設定から有効にできます"; /* No comment provided by engineer. */ -"You can enable them later via app Privacy & Security settings." = "あとでアプリのプライバシーとセキュリティの設定から有効にすることができます。"; +"You can enable them later via app Your privacy settings." = "あとでアプリのプライバシーとセキュリティの設定から有効にすることができます。"; /* No comment provided by engineer. */ "You can hide or mute a user profile - swipe it to the right." = "ユーザープロファイルを右にスワイプすると、非表示またはミュートにすることができます。"; diff --git a/apps/ios/nl.lproj/Localizable.strings b/apps/ios/nl.lproj/Localizable.strings index 407665bbec..1c776a7bbe 100644 --- a/apps/ios/nl.lproj/Localizable.strings +++ b/apps/ios/nl.lproj/Localizable.strings @@ -1773,7 +1773,7 @@ alert button */ "Developer options" = "Ontwikkelaars opties"; /* No comment provided by engineer. */ -"Developer tools" = "Ontwikkel gereedschap"; +"Developer" = "Ontwikkel gereedschap"; /* No comment provided by engineer. */ "Device" = "Apparaat"; @@ -3929,7 +3929,7 @@ alert button */ "Previously connected servers" = "Eerder verbonden servers"; /* No comment provided by engineer. */ -"Privacy & security" = "Privacy en beveiliging"; +"Your privacy" = "Privacy en beveiliging"; /* No comment provided by engineer. */ "Privacy for your customers." = "Privacy voor uw klanten."; @@ -5777,7 +5777,7 @@ server test failure */ "You can enable later via Settings" = "U kunt later inschakelen via Instellingen"; /* No comment provided by engineer. */ -"You can enable them later via app Privacy & Security settings." = "U kunt ze later inschakelen via de privacy- en beveiligingsinstellingen van de app."; +"You can enable them later via app Your privacy settings." = "U kunt ze later inschakelen via de privacy- en beveiligingsinstellingen van de app."; /* No comment provided by engineer. */ "You can give another try." = "Je kunt het nog een keer proberen."; diff --git a/apps/ios/pl.lproj/Localizable.strings b/apps/ios/pl.lproj/Localizable.strings index 8905300160..9cc6eca252 100644 --- a/apps/ios/pl.lproj/Localizable.strings +++ b/apps/ios/pl.lproj/Localizable.strings @@ -1845,7 +1845,7 @@ alert button */ "Developer options" = "Opcje deweloperskie"; /* No comment provided by engineer. */ -"Developer tools" = "Narzędzia deweloperskie"; +"Developer" = "Narzędzia deweloperskie"; /* No comment provided by engineer. */ "Device" = "Urządzenie"; @@ -4131,7 +4131,7 @@ alert button */ "Previously connected servers" = "Wcześniej połączone serwery"; /* No comment provided by engineer. */ -"Privacy & security" = "Prywatność i bezpieczeństwo"; +"Your privacy" = "Prywatność i bezpieczeństwo"; /* No comment provided by engineer. */ "Privacy for your customers." = "Prywatność dla Twoich klientów."; @@ -6135,7 +6135,7 @@ server test failure */ "You can enable later via Settings" = "Możesz włączyć później w Ustawieniach"; /* No comment provided by engineer. */ -"You can enable them later via app Privacy & Security settings." = "Możesz je włączyć później w ustawieniach Prywatności i Bezpieczeństwa aplikacji."; +"You can enable them later via app Your privacy settings." = "Możesz je włączyć później w ustawieniach Prywatności i Bezpieczeństwa aplikacji."; /* No comment provided by engineer. */ "You can give another try." = "Możesz spróbować ponownie."; diff --git a/apps/ios/product/README.md b/apps/ios/product/README.md index 107c0e6569..fd25b09d01 100644 --- a/apps/ios/product/README.md +++ b/apps/ios/product/README.md @@ -101,7 +101,7 @@ End-to-end encrypted audio and video communication. | Call history | Call events displayed as chat items | `Shared/Views/Chat/ChatItem/CICallItemView.swift` | | Incoming call view | Dedicated UI for incoming call notifications | `Shared/Views/Call/IncomingCallView.swift` | -### 5. Privacy & Security +### 5. Your privacy Encryption, authentication, and privacy controls. diff --git a/apps/ios/product/views/settings.md b/apps/ios/product/views/settings.md index 3cc4da5d2b..7e7f653910 100644 --- a/apps/ios/product/views/settings.md +++ b/apps/ios/product/views/settings.md @@ -4,7 +4,7 @@ ## Purpose -Configure all aspects of app behavior including notifications, network/servers, privacy, appearance, database management, call settings, and developer tools. Accessed from the UserPicker sheet on the chat list. +Configure all aspects of app behavior including notifications, network/servers, privacy, appearance, database management, call settings, and Developer. Accessed from the UserPicker sheet on the chat list. ## Route / Navigation @@ -22,7 +22,7 @@ Configure all aspects of app behavior including notifications, network/servers, | Notifications | `bolt` (color varies by token status) | `NotificationsView` | Push notification mode and preview settings | | Network & servers | `externaldrive.connected.to.line.below` | `NetworkAndServers` | SMP/XFTP servers, proxy, .onion hosts, advanced network | | Audio & video calls | `video` | `CallSettings` | WebRTC relay policy, ICE servers, CallKit options | -| Privacy & security | `lock` | `PrivacySettings` | SimpleX Lock, screen protection, delivery receipts, auto-accept | +| Your privacy | `lock` | `PrivacySettings` | SimpleX Lock, screen protection, delivery receipts, auto-accept | | Appearance | `sun.max` | `AppearanceSettings` | Theme, language, wallpapers, chat bubbles, toolbar opacity | All rows disabled when `chatModel.chatRunning != true`. Appearance row only shown when `UIApplication.shared.supportsAlternateIcons`. @@ -77,7 +77,7 @@ Adding a relay: `NewChatRelayView` form with name, address, test, and enable tog Server validation (`validateServers_`) now returns both errors and warnings. -#### Privacy & Security (`PrivacySettings`) +#### Your privacy (`PrivacySettings`) | Setting | Description | |---|---| @@ -152,7 +152,7 @@ Database row shows exclamation octagon icon in red when `chatRunning == false`. | Row | Icon | Destination | Description | |---|---|---|---| -| Developer tools | `chevron.left.forwardslash.chevron.right` | `DeveloperView` | Chat console/terminal, log level, confirm DB upgrades | +| Developer | `chevron.left.forwardslash.chevron.right` | `DeveloperView` | Chat console/terminal, log level, confirm DB upgrades | | App version | (none) | `VersionView` | Shows "v{version} ({build})" | ## Loading / Error States diff --git a/apps/ios/ru.lproj/Localizable.strings b/apps/ios/ru.lproj/Localizable.strings index 9f79b5dea0..042359dd7e 100644 --- a/apps/ios/ru.lproj/Localizable.strings +++ b/apps/ios/ru.lproj/Localizable.strings @@ -2064,7 +2064,7 @@ alert button */ "Developer options" = "Опции разработчика"; /* No comment provided by engineer. */ -"Developer tools" = "Инструменты разработчика"; +"Developer" = "Разработчик"; /* No comment provided by engineer. */ "Device" = "Устройство"; @@ -4533,7 +4533,7 @@ alert button */ "Previously connected servers" = "Ранее подключенные серверы"; /* No comment provided by engineer. */ -"Privacy & security" = "Конфиденциальность"; +"Your privacy" = "Конфиденциальность"; /* No comment provided by engineer. */ "Privacy for your customers." = "Конфиденциальность для ваших покупателей."; @@ -6759,7 +6759,7 @@ server test failure */ "You can enable later via Settings" = "Вы можете включить их позже в Настройках"; /* No comment provided by engineer. */ -"You can enable them later via app Privacy & Security settings." = "Вы можете включить их позже в настройках Конфиденциальности."; +"You can enable them later via app Your privacy settings." = "Вы можете включить их позже в настройках Конфиденциальности."; /* No comment provided by engineer. */ "You can give another try." = "Вы можете попробовать ещё раз."; diff --git a/apps/ios/th.lproj/Localizable.strings b/apps/ios/th.lproj/Localizable.strings index cc3abea189..62bf4d3d59 100644 --- a/apps/ios/th.lproj/Localizable.strings +++ b/apps/ios/th.lproj/Localizable.strings @@ -946,7 +946,7 @@ alert button */ "Develop" = "พัฒนา"; /* No comment provided by engineer. */ -"Developer tools" = "เครื่องมือสำหรับนักพัฒนา"; +"Developer" = "เครื่องมือสำหรับนักพัฒนา"; /* No comment provided by engineer. */ "Device" = "อุปกรณ์"; @@ -2172,7 +2172,7 @@ new chat action */ "Preview" = "ดูตัวอย่าง"; /* No comment provided by engineer. */ -"Privacy & security" = "ความเป็นส่วนตัวและความปลอดภัย"; +"Your privacy" = "ความเป็นส่วนตัวและความปลอดภัย"; /* No comment provided by engineer. */ "Private filenames" = "ชื่อไฟล์ส่วนตัว"; @@ -3089,7 +3089,7 @@ server test failure */ "You can enable later via Settings" = "คุณสามารถเปิดใช้งานในภายหลังผ่านการตั้งค่า"; /* No comment provided by engineer. */ -"You can enable them later via app Privacy & Security settings." = "คุณสามารถเปิดใช้งานได้ในภายหลังผ่านการตั้งค่าความเป็นส่วนตัวและความปลอดภัยของแอป"; +"You can enable them later via app Your privacy settings." = "คุณสามารถเปิดใช้งานได้ในภายหลังผ่านการตั้งค่าความเป็นส่วนตัวและความปลอดภัยของแอป"; /* No comment provided by engineer. */ "You can hide or mute a user profile - swipe it to the right." = "คุณสามารถซ่อนหรือปิดเสียงโปรไฟล์ผู้ใช้ - ปัดไปทางขวา"; diff --git a/apps/ios/tr.lproj/Localizable.strings b/apps/ios/tr.lproj/Localizable.strings index e06989afee..8dfc23078c 100644 --- a/apps/ios/tr.lproj/Localizable.strings +++ b/apps/ios/tr.lproj/Localizable.strings @@ -1859,7 +1859,7 @@ alert button */ "Developer options" = "Geliştirici seçenekleri"; /* No comment provided by engineer. */ -"Developer tools" = "Geliştirici araçları"; +"Developer" = "Geliştirici araçları"; /* No comment provided by engineer. */ "Device" = "Cihaz"; @@ -4099,7 +4099,7 @@ alert button */ "Previously connected servers" = "Önceden bağlanılmış sunucular"; /* No comment provided by engineer. */ -"Privacy & security" = "Gizlilik & güvenlik"; +"Your privacy" = "Gizlilik & güvenlik"; /* No comment provided by engineer. */ "Privacy for your customers." = "Müşterileriniz için gizlilik."; @@ -6064,7 +6064,7 @@ server test failure */ "You can enable later via Settings" = "Daha sonra Ayarlardan etkinleştirebilirsin"; /* No comment provided by engineer. */ -"You can enable them later via app Privacy & Security settings." = "Daha sonra uygulamanın Gizlilik ve Güvenlik ayarlarından etkinleştirebilirsiniz."; +"You can enable them later via app Your privacy settings." = "Daha sonra uygulamanın Gizlilik ve Güvenlik ayarlarından etkinleştirebilirsiniz."; /* No comment provided by engineer. */ "You can give another try." = "Bir kez daha deneyebilirsiniz."; diff --git a/apps/ios/uk.lproj/Localizable.strings b/apps/ios/uk.lproj/Localizable.strings index 4a21eb4ae8..ff2f64e2ed 100644 --- a/apps/ios/uk.lproj/Localizable.strings +++ b/apps/ios/uk.lproj/Localizable.strings @@ -1806,7 +1806,7 @@ alert button */ "Developer options" = "Можливості для розробників"; /* No comment provided by engineer. */ -"Developer tools" = "Інструменти для розробників"; +"Developer" = "Інструменти для розробників"; /* No comment provided by engineer. */ "Device" = "Пристрій"; @@ -4019,7 +4019,7 @@ alert button */ "Previously connected servers" = "Раніше підключені сервери"; /* No comment provided by engineer. */ -"Privacy & security" = "Конфіденційність і безпека"; +"Your privacy" = "Конфіденційність і безпека"; /* No comment provided by engineer. */ "Privacy for your customers." = "Конфіденційність для ваших клієнтів."; @@ -5966,7 +5966,7 @@ server test failure */ "You can enable later via Settings" = "Ви можете увімкнути пізніше в Налаштуваннях"; /* No comment provided by engineer. */ -"You can enable them later via app Privacy & Security settings." = "Ви можете увімкнути їх пізніше в налаштуваннях конфіденційності та безпеки програми."; +"You can enable them later via app Your privacy settings." = "Ви можете увімкнути їх пізніше в налаштуваннях конфіденційності та безпеки програми."; /* No comment provided by engineer. */ "You can give another try." = "Ви можете спробувати ще раз."; diff --git a/apps/ios/zh-Hans.lproj/Localizable.strings b/apps/ios/zh-Hans.lproj/Localizable.strings index 13be5125ea..f3138230f9 100644 --- a/apps/ios/zh-Hans.lproj/Localizable.strings +++ b/apps/ios/zh-Hans.lproj/Localizable.strings @@ -1836,7 +1836,7 @@ alert button */ "Developer options" = "开发者选项"; /* No comment provided by engineer. */ -"Developer tools" = "开发者工具"; +"Developer" = "开发者工具"; /* No comment provided by engineer. */ "Device" = "设备"; @@ -4107,7 +4107,7 @@ alert button */ "Previously connected servers" = "以前连接的服务器"; /* No comment provided by engineer. */ -"Privacy & security" = "隐私和安全"; +"Your privacy" = "隐私和安全"; /* No comment provided by engineer. */ "Privacy for your customers." = "客户隐私。"; @@ -6093,7 +6093,7 @@ server test failure */ "You can enable later via Settings" = "您可以稍后在设置中启用它"; /* No comment provided by engineer. */ -"You can enable them later via app Privacy & Security settings." = "您可以稍后通过应用程序的 \"隐私与安全 \"设置启用它们。"; +"You can enable them later via app Your privacy settings." = "您可以稍后通过应用程序的 \"隐私与安全 \"设置启用它们。"; /* No comment provided by engineer. */ "You can give another try." = "你可以再试一次。"; diff --git a/apps/multiplatform/common/src/androidMain/kotlin/chat/simplex/common/views/usersettings/SettingsView.android.kt b/apps/multiplatform/common/src/androidMain/kotlin/chat/simplex/common/views/usersettings/SettingsView.android.kt index 04b59732dd..5e9706d713 100644 --- a/apps/multiplatform/common/src/androidMain/kotlin/chat/simplex/common/views/usersettings/SettingsView.android.kt +++ b/apps/multiplatform/common/src/androidMain/kotlin/chat/simplex/common/views/usersettings/SettingsView.android.kt @@ -1,7 +1,15 @@ package chat.simplex.common.views.usersettings +import SectionItemView import SectionView +import androidx.compose.foundation.layout.Column +import androidx.compose.foundation.layout.fillMaxWidth +import androidx.compose.material.MaterialTheme +import androidx.compose.material.Text import androidx.compose.runtime.Composable +import androidx.compose.ui.Modifier +import androidx.compose.ui.graphics.Color +import androidx.compose.ui.text.style.TextAlign import chat.simplex.common.model.ChatModel import chat.simplex.common.platform.* import chat.simplex.common.views.helpers.* @@ -11,19 +19,19 @@ import dev.icerock.moko.resources.compose.painterResource import dev.icerock.moko.resources.compose.stringResource @Composable -actual fun SettingsSectionApp( +actual fun AdvancedSettingsAppSection( showSettingsModal: (@Composable (ChatModel) -> Unit) -> (() -> Unit), - showVersion: () -> Unit, - withAuth: (title: String, desc: String, block: () -> Unit) -> Unit + withAuth: (title: String, desc: String, block: () -> Unit) -> Unit, ) { - SectionView(stringResource(MR.strings.settings_section_title_app)) { - SettingsActionItem(painterResource(MR.images.ic_restart_alt), stringResource(MR.strings.settings_restart_app), ::restartApp) - SettingsActionItem(painterResource(MR.images.ic_power_settings_new), stringResource(MR.strings.settings_shutdown), { shutdownAppAlert(::shutdownApp) }) + SectionView { SettingsActionItem(painterResource(MR.images.ic_code), stringResource(MR.strings.settings_developer_tools), showSettingsModal { DeveloperView(withAuth) }) - AppVersionItem(showVersion) } } +@Composable +actual fun AppShutdownItem() { + SettingsActionItem(painterResource(MR.images.ic_power_settings_new), stringResource(MR.strings.settings_shutdown), ::shutdownAppAlert) +} fun restartApp() { ProcessPhoenix.triggerRebirth(androidAppContext) @@ -36,11 +44,28 @@ private fun shutdownApp() { Runtime.getRuntime().exit(0) } -private fun shutdownAppAlert(onConfirm: () -> Unit) { - AlertManager.shared.showAlertDialog( +private fun shutdownAppAlert() { + AlertManager.shared.showAlertDialogButtonsColumn( title = generalGetString(MR.strings.shutdown_alert_question), text = generalGetString(MR.strings.shutdown_alert_desc), - destructive = true, - onConfirm = onConfirm + buttons = { + Column { + SectionItemView({ AlertManager.shared.hideAlert() }) { + Text(stringResource(MR.strings.cancel_verb), Modifier.fillMaxWidth(), textAlign = TextAlign.Center) + } + SectionItemView({ + AlertManager.shared.hideAlert() + restartApp() + }) { + Text(stringResource(MR.strings.settings_restart_app), Modifier.fillMaxWidth(), textAlign = TextAlign.Center, color = MaterialTheme.colors.primary) + } + SectionItemView({ + AlertManager.shared.hideAlert() + shutdownApp() + }) { + Text(stringResource(MR.strings.settings_shutdown), Modifier.fillMaxWidth(), textAlign = TextAlign.Center, color = Color.Red) + } + } + } ) } diff --git a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/database/DatabaseView.kt b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/database/DatabaseView.kt index 648a0eb8e7..80f97d1caf 100644 --- a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/database/DatabaseView.kt +++ b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/database/DatabaseView.kt @@ -44,29 +44,8 @@ fun DatabaseView() { val prefs = m.controller.appPrefs val useKeychain = remember { mutableStateOf(prefs.storeDBPassphrase.get()) } val chatLastStart = remember { mutableStateOf(prefs.chatLastStart.get()) } - val chatArchiveFile = remember { mutableStateOf(null) } val stopped = remember { m.chatRunning }.value == false - val saveArchiveLauncher = rememberFileChooserLauncher(false) { to: URI? -> - val archive = chatArchiveFile.value - if (archive != null && to != null) { - copyFileToFile(File(archive), to) {} - } - // delete no matter the database was exported or canceled the export process - if (archive != null) { - File(archive).delete() - chatArchiveFile.value = null - } - } val appFilesCountAndSize = remember { mutableStateOf(directoryFileCountAndSize(appFilesDir.absolutePath)) } - val importArchiveLauncher = rememberFileChooserLauncher(true) { to: URI? -> - if (to != null) { - importArchiveAlert { - stopChatRunBlockStartChat(stopped, chatLastStart, progressIndicator) { - importArchive(to, appFilesCountAndSize, progressIndicator, false) - } - } - } - } val chatItemTTL = remember { mutableStateOf(m.chatItemTTL.value) } Box( Modifier.fillMaxSize(), @@ -79,27 +58,10 @@ fun DatabaseView() { useKeychain.value, m.chatDbEncrypted.value, m.controller.appPrefs.storeDBPassphrase.state.value, - m.controller.appPrefs.initialRandomDBPassphrase, - importArchiveLauncher, appFilesCountAndSize, chatItemTTL, user, m.users, - startChat = { startChat(m, chatLastStart, m.chatDbChanged, progressIndicator) }, - stopChatAlert = { stopChatAlert(m, progressIndicator) }, - exportArchive = { - stopChatRunBlockStartChat(stopped, chatLastStart, progressIndicator) { - exportArchive(m, progressIndicator, chatArchiveFile, saveArchiveLauncher) - } - }, - deleteChatAlert = { - deleteChatAlert { - stopChatRunBlockStartChat(stopped, chatLastStart, progressIndicator) { - deleteChat(m, progressIndicator) - true - } - } - }, deleteAppFilesAndMedia = { deleteFilesAndMediaAlert { stopChatRunBlockStartChat(stopped, chatLastStart, progressIndicator) { @@ -120,12 +82,9 @@ fun DatabaseView() { setCiTTL(m, rhId, chatItemTTL, progressIndicator, appFilesCountAndSize) } }, - disconnectAllHosts = { - val connected = chatModel.remoteHosts.filter { it.sessionState is RemoteHostSessionState.Connected } - connected.forEachIndexed { index, h -> - controller.stopRemoteHostAndReloadHosts(h, index == connected.lastIndex && chatModel.connectedToRemote()) - } - } + showDatabaseManagement = { + ModalManager.start.showModal(cardScreen = true) { DatabaseManagementView() } + }, ) if (progressIndicator.value) { Box( @@ -151,24 +110,18 @@ fun DatabaseLayout( useKeyChain: Boolean, chatDbEncrypted: Boolean?, passphraseSaved: Boolean, - initialRandomDBPassphrase: SharedPreference, - importArchiveLauncher: FileChooserLauncher, appFilesCountAndSize: MutableState>, chatItemTTL: MutableState, currentUser: User?, users: List, - startChat: () -> Unit, - stopChatAlert: () -> Unit, - exportArchive: () -> Unit, - deleteChatAlert: () -> Unit, deleteAppFilesAndMedia: () -> Unit, onChatItemTTLSelected: (ChatItemTTL?) -> Unit, - disconnectAllHosts: () -> Unit, + showDatabaseManagement: () -> Unit, ) { val operationsDisabled = progressIndicator && !chatModel.desktopNoUserNoRemote ColumnWithScrollBar { - AppBarTitle(stringResource(MR.strings.your_chat_database)) + AppBarTitle(stringResource(MR.strings.chat_data)) if (!chatModel.desktopNoUserNoRemote) { SectionView(stringResource(MR.strings.messages_section_title)) { @@ -187,79 +140,17 @@ fun DatabaseLayout( ) SectionDividerSpaced() } - val toggleEnabled = remember { chatModel.remoteHosts }.none { it.sessionState is RemoteHostSessionState.Connected } - if (chatModel.localUserCreated.value == true) { - // still show the toggle in case database was stopped when the user opened this screen because it can be in the following situations: - // - database was stopped after migration and the app relaunched - // - something wrong happened with database operations and the database couldn't be launched when it should - SectionView(stringResource(MR.strings.run_chat_section)) { - if (!toggleEnabled) { - SectionItemView(disconnectAllHosts) { - Text(generalGetString(MR.strings.disconnect_remote_hosts), Modifier.fillMaxWidth(), color = WarningOrange) - } - } - RunChatSetting(stopped, toggleEnabled && !progressIndicator, startChat, stopChatAlert) - } - if (stopped) SectionTextFooter(stringResource(MR.strings.you_must_use_the_most_recent_version_of_database)) - SectionDividerSpaced() - } - SectionView(stringResource(MR.strings.chat_database_section)) { - if (chatModel.localUserCreated.value != true && !toggleEnabled) { - SectionItemView(disconnectAllHosts) { - Text(generalGetString(MR.strings.disconnect_remote_hosts), Modifier.fillMaxWidth(), color = WarningOrange) - } - } + SectionView { val unencrypted = chatDbEncrypted == false SettingsActionItem( if (unencrypted) painterResource(MR.images.ic_lock_open_right) else if (useKeyChain) painterResource(MR.images.ic_vpn_key_filled) else painterResource(MR.images.ic_lock), - stringResource(MR.strings.database_passphrase), - click = { ModalManager.start.showModal(cardScreen = true) { DatabaseEncryptionView(chatModel, false) } }, + stringResource(MR.strings.database_passphrase_and_export), + click = showDatabaseManagement, iconColor = if (unencrypted || (appPlatform.isDesktop && passphraseSaved)) WarningOrange else MaterialTheme.colors.secondary, disabled = operationsDisabled ) - if (appPlatform.isDesktop) { - SettingsActionItem( - painterResource(MR.images.ic_folder_open), - stringResource(MR.strings.open_database_folder), - ::desktopOpenDatabaseDir, - disabled = operationsDisabled - ) - } - SettingsActionItem( - painterResource(MR.images.ic_ios_share), - stringResource(MR.strings.export_database), - click = { - if (initialRandomDBPassphrase.get()) { - exportProhibitedAlert() - ModalManager.start.showModal { - DatabaseEncryptionView(chatModel, false) - } - } else { - exportArchive() - } - }, - textColor = MaterialTheme.colors.primary, - iconColor = MaterialTheme.colors.primary, - disabled = operationsDisabled - ) - SettingsActionItem( - painterResource(MR.images.ic_download), - stringResource(MR.strings.import_database), - { withLongRunningApi { importArchiveLauncher.launch("application/zip") } }, - textColor = Color.Red, - iconColor = Color.Red, - disabled = operationsDisabled - ) - SettingsActionItem( - painterResource(MR.images.ic_delete_forever), - stringResource(MR.strings.delete_database), - deleteChatAlert, - textColor = Color.Red, - iconColor = Color.Red, - disabled = operationsDisabled - ) } SectionDividerSpaced() @@ -287,6 +178,155 @@ fun DatabaseLayout( } } +@Composable +fun DatabaseManagementView() { + val m = chatModel + val progressIndicator = remember { mutableStateOf(false) } + val prefs = m.controller.appPrefs + val useKeychain = remember { mutableStateOf(prefs.storeDBPassphrase.get()) } + val chatLastStart = remember { mutableStateOf(prefs.chatLastStart.get()) } + val chatArchiveFile = remember { mutableStateOf(null) } + val stopped = remember { m.chatRunning }.value == false + val saveArchiveLauncher = rememberFileChooserLauncher(false) { to: URI? -> + val archive = chatArchiveFile.value + if (archive != null && to != null) { + copyFileToFile(File(archive), to) {} + } + // delete no matter the database was exported or canceled the export process + if (archive != null) { + File(archive).delete() + chatArchiveFile.value = null + } + } + val appFilesCountAndSize = remember { mutableStateOf(directoryFileCountAndSize(appFilesDir.absolutePath)) } + val importArchiveLauncher = rememberFileChooserLauncher(true) { to: URI? -> + if (to != null) { + importArchiveAlert { + stopChatRunBlockStartChat(stopped, chatLastStart, progressIndicator) { + importArchive(to, appFilesCountAndSize, progressIndicator, false) + } + } + } + } + val operationsDisabled = progressIndicator.value && !m.desktopNoUserNoRemote + + Box(Modifier.fillMaxSize()) { + ColumnWithScrollBar { + AppBarTitle(stringResource(MR.strings.database_passphrase_and_export)) + + val toggleEnabled = remember { chatModel.remoteHosts }.none { it.sessionState is RemoteHostSessionState.Connected } + val disconnectAllHosts = { + val connected = chatModel.remoteHosts.filter { it.sessionState is RemoteHostSessionState.Connected } + connected.forEachIndexed { index, h -> + controller.stopRemoteHostAndReloadHosts(h, index == connected.lastIndex && chatModel.connectedToRemote()) + } + } + SectionView(stringResource(MR.strings.chat_database_section)) { + if (chatModel.localUserCreated.value != true && !toggleEnabled) { + SectionItemView(disconnectAllHosts) { + Text(generalGetString(MR.strings.disconnect_remote_hosts), Modifier.fillMaxWidth(), color = WarningOrange) + } + } + val unencrypted = m.chatDbEncrypted.value == false + SettingsActionItem( + if (unencrypted) painterResource(MR.images.ic_lock_open_right) else if (useKeychain.value) painterResource(MR.images.ic_vpn_key_filled) + else painterResource(MR.images.ic_lock), + stringResource(MR.strings.database_passphrase), + click = { ModalManager.start.showModal(cardScreen = true) { DatabaseEncryptionView(chatModel, false) } }, + iconColor = if (unencrypted || (appPlatform.isDesktop && prefs.storeDBPassphrase.state.value)) WarningOrange else MaterialTheme.colors.secondary, + disabled = operationsDisabled + ) + if (appPlatform.isDesktop) { + SettingsActionItem( + painterResource(MR.images.ic_folder_open), + stringResource(MR.strings.open_database_folder), + ::desktopOpenDatabaseDir, + disabled = operationsDisabled + ) + } + SettingsActionItem( + painterResource(MR.images.ic_ios_share), + stringResource(MR.strings.export_database), + click = { + if (prefs.initialRandomDBPassphrase.get()) { + exportProhibitedAlert() + ModalManager.start.showModal { + DatabaseEncryptionView(chatModel, false) + } + } else { + stopChatRunBlockStartChat(stopped, chatLastStart, progressIndicator) { + exportArchive(m, progressIndicator, chatArchiveFile, saveArchiveLauncher) + } + } + }, + textColor = MaterialTheme.colors.primary, + iconColor = MaterialTheme.colors.primary, + disabled = operationsDisabled + ) + SettingsActionItem( + painterResource(MR.images.ic_download), + stringResource(MR.strings.import_database), + { withLongRunningApi { importArchiveLauncher.launch("application/zip") } }, + textColor = Color.Red, + iconColor = Color.Red, + disabled = operationsDisabled + ) + SettingsActionItem( + painterResource(MR.images.ic_delete_forever), + stringResource(MR.strings.delete_database), + { + deleteChatAlert { + stopChatRunBlockStartChat(stopped, chatLastStart, progressIndicator) { + deleteChat(m, progressIndicator) + true + } + } + }, + textColor = Color.Red, + iconColor = Color.Red, + disabled = operationsDisabled + ) + } + + if (chatModel.localUserCreated.value == true) { + SectionDividerSpaced() + // still show the toggle in case database was stopped when the user opened this screen because it can be in the following situations: + // - database was stopped after migration and the app relaunched + // - something wrong happened with database operations and the database couldn't be launched when it should + SectionView(stringResource(MR.strings.run_chat_section)) { + if (!toggleEnabled) { + SectionItemView(disconnectAllHosts) { + Text(generalGetString(MR.strings.disconnect_remote_hosts), Modifier.fillMaxWidth(), color = WarningOrange) + } + } + RunChatSetting( + stopped, + toggleEnabled && !progressIndicator.value, + startChat = { startChat(m, chatLastStart, m.chatDbChanged, progressIndicator) }, + stopChatAlert = { stopChatAlert(m, progressIndicator) } + ) + } + if (stopped) SectionTextFooter(stringResource(MR.strings.you_must_use_the_most_recent_version_of_database)) + } + SectionBottomSpacer() + } + if (progressIndicator.value) { + Box( + Modifier.fillMaxSize(), + contentAlignment = Alignment.Center + ) { + CircularProgressIndicator( + Modifier + .padding(horizontal = 2.dp) + .size(30.dp), + color = MaterialTheme.colors.secondary, + strokeWidth = 2.5.dp + ) + } + } + } +} + private fun setChatItemTTLAlert( m: ChatModel, rhId: Long?, selectedChatItemTTL: MutableState, progressIndicator: MutableState, @@ -832,19 +872,13 @@ fun PreviewDatabaseLayout() { useKeyChain = false, chatDbEncrypted = false, passphraseSaved = false, - initialRandomDBPassphrase = SharedPreference({ true }, {}), - importArchiveLauncher = rememberFileChooserLauncher(true) {}, appFilesCountAndSize = remember { mutableStateOf(0 to 0L) }, chatItemTTL = remember { mutableStateOf(ChatItemTTL.None) }, currentUser = User.sampleData, users = listOf(UserInfo.sampleData), - startChat = {}, - stopChatAlert = {}, - exportArchive = {}, - deleteChatAlert = {}, deleteAppFilesAndMedia = {}, onChatItemTTLSelected = {}, - disconnectAllHosts = {}, + showDatabaseManagement = {}, ) } } diff --git a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/usersettings/NotificationsSettingsView.kt b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/usersettings/NotificationsSettingsView.kt index 150b2a38e0..91324bb39a 100644 --- a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/usersettings/NotificationsSettingsView.kt +++ b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/usersettings/NotificationsSettingsView.kt @@ -24,43 +24,28 @@ import kotlin.collections.ArrayList fun NotificationsSettingsView( chatModel: ChatModel, ) { - val onNotificationPreviewModeSelected = { mode: NotificationPreviewMode -> - chatModel.controller.appPrefs.notificationPreviewMode.set(mode.name) - chatModel.notificationPreviewMode.value = mode - } - NotificationsSettingsLayout( notificationsMode = remember { chatModel.controller.appPrefs.notificationsMode.state }, - notificationPreviewMode = chatModel.notificationPreviewMode, - showPage = { page -> + showNotificationsMode = { ModalManager.start.showModalCloseable(true) { - when (page) { - CurrentPage.NOTIFICATIONS_MODE -> NotificationsModeView(chatModel.controller.appPrefs.notificationsMode.state) { changeNotificationsMode(it, chatModel) } - CurrentPage.NOTIFICATION_PREVIEW_MODE -> NotificationPreviewView(chatModel.notificationPreviewMode, onNotificationPreviewModeSelected) - } + NotificationsModeView(chatModel.controller.appPrefs.notificationsMode.state) { changeNotificationsMode(it, chatModel) } } }, ) } -enum class CurrentPage { - NOTIFICATIONS_MODE, NOTIFICATION_PREVIEW_MODE -} - @Composable fun NotificationsSettingsLayout( notificationsMode: State, - notificationPreviewMode: State, - showPage: (CurrentPage) -> Unit, + showNotificationsMode: () -> Unit, ) { val modes = remember { notificationModes() } - val previewModes = remember { notificationPreviewModes() } ColumnWithScrollBar { AppBarTitle(stringResource(MR.strings.notifications)) SectionView(null) { if (appPlatform == AppPlatform.ANDROID) { - SettingsActionItemWithContent(null, stringResource(MR.strings.settings_notifications_mode_title), { showPage(CurrentPage.NOTIFICATIONS_MODE) }) { + SettingsActionItemWithContent(null, stringResource(MR.strings.settings_notifications_mode_title), showNotificationsMode) { Text( modes.firstOrNull { it.value == notificationsMode.value }?.title ?: "", maxLines = 1, @@ -69,14 +54,6 @@ fun NotificationsSettingsLayout( ) } } - SettingsActionItemWithContent(null, stringResource(MR.strings.settings_notification_preview_mode_title), { showPage(CurrentPage.NOTIFICATION_PREVIEW_MODE) }) { - Text( - previewModes.firstOrNull { it.value == notificationPreviewMode.value }?.title ?: "", - maxLines = 1, - overflow = TextOverflow.Ellipsis, - color = MaterialTheme.colors.secondary - ) - } } if (platform.androidIsXiaomiDevice() && (notificationsMode.value == NotificationsMode.PERIODIC || notificationsMode.value == NotificationsMode.SERVICE)) { SectionTextFooter(annotatedStringResource(MR.strings.xiaomi_ignore_battery_optimization)) diff --git a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/usersettings/PrivacySettings.kt b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/usersettings/PrivacySettings.kt index 7316c9bd82..cf34fd5a44 100644 --- a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/usersettings/PrivacySettings.kt +++ b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/usersettings/PrivacySettings.kt @@ -15,6 +15,7 @@ import androidx.compose.ui.graphics.Color import androidx.compose.ui.text.* import androidx.compose.ui.text.font.FontWeight import androidx.compose.ui.text.style.TextAlign +import androidx.compose.ui.text.style.TextOverflow import dev.icerock.moko.resources.compose.painterResource import dev.icerock.moko.resources.compose.stringResource import androidx.compose.ui.unit.dp @@ -73,6 +74,48 @@ fun PrivacySettingsView( stringResource(MR.strings.sanitize_links_toggle), chatModel.controller.appPrefs.privacySanitizeLinks ) + } + SectionDividerSpaced() + + SectionView(stringResource(MR.strings.settings_section_title_files)) { + SettingsPreferenceItem(painterResource(MR.images.ic_image), stringResource(MR.strings.auto_accept_images), chatModel.controller.appPrefs.privacyAcceptImages) + BlurRadiusOptions(remember { appPrefs.privacyMediaBlurRadius.state }) { + appPrefs.privacyMediaBlurRadius.set(it) + } + } + + val currentUser = chatModel.currentUser.value + if (currentUser != null && !chatModel.desktopNoUserNoRemote) { + SectionDividerSpaced() + ContacRequestsFromGroupsSection( + currentUser = currentUser, + setAutoAcceptGrpDirectInvs = { enable -> + withApi { + chatModel.controller.apiSetUserAutoAcceptMemberContacts(currentUser, enable) + chatModel.currentUser.value = currentUser.copy(autoAcceptMemberContacts = enable) + } + } + ) + } + + SectionDividerSpaced() + SectionView { + SettingsActionItem( + painterResource(MR.images.ic_more_horiz), + stringResource(MR.strings.more_privacy), + showSettingsModal { MorePrivacyView(it) } + ) + } + SectionBottomSpacer() + } +} + +@Composable +fun MorePrivacyView(chatModel: ChatModel) { + ColumnWithScrollBar { + AppBarTitle(stringResource(MR.strings.more_privacy)) + + SectionView(stringResource(MR.strings.settings_section_title_chats)) { SettingsPreferenceItem( painterResource(MR.images.ic_chat_bubble), stringResource(MR.strings.privacy_show_last_messages), @@ -98,10 +141,6 @@ fun PrivacySettingsView( SettingsPreferenceItem(painterResource(MR.images.ic_lock), stringResource(MR.strings.encrypt_local_files), chatModel.controller.appPrefs.privacyEncryptLocalFiles, onChange = { enable -> withBGApi { chatModel.controller.apiSetEncryptLocalFiles(enable) } }) - SettingsPreferenceItem(painterResource(MR.images.ic_image), stringResource(MR.strings.auto_accept_images), chatModel.controller.appPrefs.privacyAcceptImages) - BlurRadiusOptions(remember { appPrefs.privacyMediaBlurRadius.state }) { - appPrefs.privacyMediaBlurRadius.set(it) - } SettingsPreferenceItem(painterResource(MR.images.ic_security), stringResource(MR.strings.protect_ip_address), chatModel.controller.appPrefs.privacyAskToApproveRelays) } SectionTextFooter( @@ -111,9 +150,34 @@ fun PrivacySettingsView( stringResource(MR.strings.without_tor_or_vpn_ip_address_will_be_visible_to_file_servers) } ) + SectionDividerSpaced() + + SectionView(stringResource(MR.strings.notifications)) { + val previewModes = remember { notificationPreviewModes() } + val notificationPreviewMode = remember { chatModel.notificationPreviewMode } + SettingsActionItemWithContent( + painterResource(MR.images.ic_visibility_off), + stringResource(MR.strings.settings_notification_preview_mode_title), + click = { + ModalManager.start.showModalCloseable(true) { + NotificationPreviewView(notificationPreviewMode) { mode -> + chatModel.controller.appPrefs.notificationPreviewMode.set(mode.name) + chatModel.notificationPreviewMode.value = mode + } + } + } + ) { + Text( + previewModes.firstOrNull { it.value == notificationPreviewMode.value }?.title ?: "", + maxLines = 1, + overflow = TextOverflow.Ellipsis, + color = MaterialTheme.colors.secondary + ) + } + } val currentUser = chatModel.currentUser.value - if (currentUser != null) { + if (currentUser != null && !chatModel.desktopNoUserNoRemote) { fun setSendReceiptsContacts(enable: Boolean, clearOverrides: Boolean) { withLongRunningApi(slow = 60_000) { val mrs = UserMsgReceiptSettings(enable, clearOverrides) @@ -164,57 +228,40 @@ fun PrivacySettingsView( } } - fun setAutoAcceptGrpDirectInvs(enable: Boolean) { - withApi { - chatModel.controller.apiSetUserAutoAcceptMemberContacts(currentUser, enable) - chatModel.currentUser.value = currentUser.copy(autoAcceptMemberContacts = enable) + SectionDividerSpaced() + DeliveryReceiptsSection( + currentUser = currentUser, + setOrAskSendReceiptsContacts = { enable -> + val contactReceiptsOverrides = chatModel.chats.value.fold(0) { count, chat -> + if (chat.chatInfo is ChatInfo.Direct) { + val sendRcpts = chat.chatInfo.contact.chatSettings.sendRcpts + count + (if (sendRcpts == null || sendRcpts == enable) 0 else 1) + } else { + count + } + } + if (contactReceiptsOverrides == 0) { + setSendReceiptsContacts(enable, clearOverrides = false) + } else { + showUserContactsReceiptsAlert(enable, contactReceiptsOverrides, ::setSendReceiptsContacts) + } + }, + setOrAskSendReceiptsGroups = { enable -> + val groupReceiptsOverrides = chatModel.chats.value.fold(0) { count, chat -> + if (chat.chatInfo is ChatInfo.Group) { + val sendRcpts = chat.chatInfo.groupInfo.chatSettings.sendRcpts + count + (if (sendRcpts == null || sendRcpts == enable) 0 else 1) + } else { + count + } + } + if (groupReceiptsOverrides == 0) { + setSendReceiptsGroups(enable, clearOverrides = false) + } else { + showUserGroupsReceiptsAlert(enable, groupReceiptsOverrides, ::setSendReceiptsGroups) + } } - } - - if (!chatModel.desktopNoUserNoRemote) { - SectionDividerSpaced() - ContacRequestsFromGroupsSection( - currentUser = currentUser, - setAutoAcceptGrpDirectInvs = { enable -> - setAutoAcceptGrpDirectInvs(enable) - } - ) - - SectionDividerSpaced() - DeliveryReceiptsSection( - currentUser = currentUser, - setOrAskSendReceiptsContacts = { enable -> - val contactReceiptsOverrides = chatModel.chats.value.fold(0) { count, chat -> - if (chat.chatInfo is ChatInfo.Direct) { - val sendRcpts = chat.chatInfo.contact.chatSettings.sendRcpts - count + (if (sendRcpts == null || sendRcpts == enable) 0 else 1) - } else { - count - } - } - if (contactReceiptsOverrides == 0) { - setSendReceiptsContacts(enable, clearOverrides = false) - } else { - showUserContactsReceiptsAlert(enable, contactReceiptsOverrides, ::setSendReceiptsContacts) - } - }, - setOrAskSendReceiptsGroups = { enable -> - val groupReceiptsOverrides = chatModel.chats.value.fold(0) { count, chat -> - if (chat.chatInfo is ChatInfo.Group) { - val sendRcpts = chat.chatInfo.groupInfo.chatSettings.sendRcpts - count + (if (sendRcpts == null || sendRcpts == enable) 0 else 1) - } else { - count - } - } - if (groupReceiptsOverrides == 0) { - setSendReceiptsGroups(enable, clearOverrides = false) - } else { - showUserGroupsReceiptsAlert(enable, groupReceiptsOverrides, ::setSendReceiptsGroups) - } - } - ) - } + ) } SectionBottomSpacer() } diff --git a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/usersettings/SettingsView.kt b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/usersettings/SettingsView.kt index f17d3a6e4b..c0b822dbb4 100644 --- a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/usersettings/SettingsView.kt +++ b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/usersettings/SettingsView.kt @@ -37,17 +37,15 @@ import chat.simplex.res.MR @Composable fun SettingsView(chatModel: ChatModel, setPerformLA: (Boolean) -> Unit, close: () -> Unit) { - val user = chatModel.currentUser.value val stopped = chatModel.chatRunning.value == false + val showSettingsModal: (@Composable (ChatModel) -> Unit) -> (() -> Unit) = { modalView -> { ModalManager.start.showModal(settings = true, cardScreen = true) { modalView(chatModel) } } } SettingsLayout( stopped, chatModel.chatDbEncrypted.value == true, remember { chatModel.controller.appPrefs.storeDBPassphrase.state }.value, - remember { chatModel.controller.appPrefs.notificationsMode.state }, - user?.displayName, setPerformLA = setPerformLA, showModal = { modalView -> { ModalManager.start.showModal { modalView(chatModel) } } }, - showSettingsModal = { modalView -> { ModalManager.start.showModal(settings = true, cardScreen = true) { modalView(chatModel) } } }, + showSettingsModal = showSettingsModal, showSettingsModalWithSearch = { modalView -> ModalManager.start.showCustomModal { close -> val search = rememberSaveable { mutableStateOf("") } @@ -62,12 +60,7 @@ fun SettingsView(chatModel: ChatModel, setPerformLA: (Boolean) -> Unit, close: ( }, showCustomModal = { modalView -> { ModalManager.start.showCustomModal { close -> modalView(chatModel, close) } } }, showVersion = { - withBGApi { - val info = chatModel.controller.apiGetVersion() - if (info != null) { - ModalManager.start.showModal { VersionInfoView(info) } - } - } + ModalManager.start.showModal(cardScreen = true) { VersionInfoView(showSettingsModal, ::doWithAuth) } }, withAuth = ::doWithAuth, ) @@ -84,8 +77,6 @@ fun SettingsLayout( stopped: Boolean, encrypted: Boolean, passphraseSaved: Boolean, - notificationsMode: State, - userDisplayName: String?, setPerformLA: (Boolean) -> Unit, showModal: (@Composable (ChatModel) -> Unit) -> (() -> Unit), showSettingsModal: (@Composable (ChatModel) -> Unit) -> (() -> Unit), @@ -98,30 +89,52 @@ fun SettingsLayout( LaunchedEffect(Unit) { hideKeyboard(view) } - val uriHandler = LocalUriHandler.current + val notificationsMode = remember { chatModel.controller.appPrefs.notificationsMode.state } ColumnWithScrollBar { AppBarTitle(stringResource(MR.strings.your_settings)) - SectionView(stringResource(MR.strings.settings_section_title_settings)) { - SettingsActionItem(painterResource(if (notificationsMode.value == NotificationsMode.OFF) MR.images.ic_bolt_off else MR.images.ic_bolt), stringResource(MR.strings.notifications), showSettingsModal { NotificationsSettingsView(it) }, disabled = stopped) - SettingsActionItem(painterResource(MR.images.ic_wifi_tethering), stringResource(MR.strings.network_and_servers), showCustomModal { _, close -> NetworkAndServersView(close) }, disabled = stopped) - SettingsActionItem(painterResource(MR.images.ic_videocam), stringResource(MR.strings.settings_audio_video_calls), showSettingsModal { CallSettingsView(it, showModal) }, disabled = stopped) - SettingsActionItem(painterResource(MR.images.ic_lock), stringResource(MR.strings.privacy_and_security), showSettingsModal { PrivacySettingsView(it, showSettingsModal, setPerformLA) }, disabled = stopped) + SectionView { SettingsActionItem(painterResource(MR.images.ic_light_mode), stringResource(MR.strings.appearance_settings), showSettingsModal { AppearanceView(it) }) - } - SectionDividerSpaced() - - SectionView(stringResource(MR.strings.settings_section_title_chat_database)) { + SettingsActionItem(painterResource(MR.images.ic_lock), stringResource(MR.strings.your_privacy), showSettingsModal { PrivacySettingsView(it, showSettingsModal, setPerformLA) }, disabled = stopped) + SettingsActionItem(painterResource(MR.images.ic_help), stringResource(MR.strings.help_and_support), showSettingsModal { HelpAndSupportView(it, showModal, showCustomModal) }) DatabaseItem(encrypted, passphraseSaved, showSettingsModal { DatabaseView() }, stopped) SettingsActionItem(painterResource(MR.images.ic_ios_share), stringResource(MR.strings.migrate_from_device_to_another_device), { withAuth(generalGetString(MR.strings.auth_open_migration_to_another_device), generalGetString(MR.strings.auth_log_in_using_credential)) { ModalManager.fullscreen.showCustomModal { close -> MigrateFromDeviceView(close) } } }, disabled = stopped) } - SectionDividerSpaced() + SectionView(stringResource(MR.strings.advanced_settings)) { + SettingsActionItem(painterResource(MR.images.ic_wifi_tethering), stringResource(MR.strings.network_and_servers), showCustomModal { _, close -> NetworkAndServersView(close) }, disabled = stopped) + if (appPlatform == AppPlatform.ANDROID) { + SettingsActionItem(painterResource(if (notificationsMode.value == NotificationsMode.OFF) MR.images.ic_bolt_off else MR.images.ic_bolt), stringResource(MR.strings.notifications), showSettingsModal { NotificationsSettingsView(it) }, disabled = stopped) + } + SettingsActionItem(painterResource(MR.images.ic_videocam), stringResource(MR.strings.settings_audio_video_calls), showSettingsModal { CallSettingsView(it, showModal) }, disabled = stopped) + AppShutdownItem() + AppVersionItem(showVersion) + } + SectionBottomSpacer() + } +} + +@Composable +fun HelpAndSupportView( + chatModel: ChatModel, + showModal: (@Composable (ChatModel) -> Unit) -> (() -> Unit), + showCustomModal: (@Composable ModalData.(ChatModel, () -> Unit) -> Unit) -> (() -> Unit), +) { + val uriHandler = LocalUriHandler.current + val stopped = chatModel.chatRunning.value == false + val userDisplayName = chatModel.currentUser.value?.displayName ?: "" + ColumnWithScrollBar { + AppBarTitle(stringResource(MR.strings.help_and_support)) + SectionView(stringResource(MR.strings.settings_section_title_help)) { - SettingsActionItem(painterResource(MR.images.ic_help), stringResource(MR.strings.how_to_use_simplex_chat), showModal { HelpView(userDisplayName ?: "") }, disabled = stopped) + SettingsActionItem(painterResource(MR.images.ic_help), stringResource(MR.strings.how_to_use_simplex_chat), showModal { HelpView(userDisplayName) }, disabled = stopped) SettingsActionItem(painterResource(MR.images.ic_add), stringResource(MR.strings.whats_new), showCustomModal { _, close -> WhatsNewView(viaSettings = true, close = close) }, disabled = stopped) SettingsActionItem(painterResource(MR.images.ic_info), stringResource(MR.strings.about_simplex_chat), showModal { SimpleXInfo(it, onboarding = false) }) + } + SectionDividerSpaced() + + SectionView(stringResource(MR.strings.settings_section_title_contact)) { if (!chatModel.desktopNoUserNoRemote) { SettingsActionItem(painterResource(MR.images.ic_tag), stringResource(MR.strings.chat_with_the_founder), { uriHandler.openVerifiedSimplexUri(simplexTeamUri) }, textColor = MaterialTheme.colors.primary, disabled = stopped) } @@ -129,27 +142,29 @@ fun SettingsLayout( } SectionDividerSpaced() - SectionView(stringResource(MR.strings.settings_section_title_support)) { + SectionView(stringResource(MR.strings.settings_section_title_support_project)) { if (!BuildConfigCommon.ANDROID_BUNDLE) { ContributeItem(uriHandler) } - RateAppItem(uriHandler) + if (appPlatform.isAndroid) { + RateAppItem(uriHandler) + } StarOnGithubItem(uriHandler) } - SectionDividerSpaced() - - SettingsSectionApp(showSettingsModal, showVersion, withAuth) SectionBottomSpacer() } } @Composable -expect fun SettingsSectionApp( +expect fun AdvancedSettingsAppSection( showSettingsModal: (@Composable (ChatModel) -> Unit) -> (() -> Unit), - showVersion: () -> Unit, - withAuth: (title: String, desc: String, block: () -> Unit) -> Unit + withAuth: (title: String, desc: String, block: () -> Unit) -> Unit, ) +// Shutdown is only available on Android; on desktop the app is closed via the window. +@Composable +expect fun AppShutdownItem() + @Composable private fun DatabaseItem(encrypted: Boolean, saved: Boolean, openDatabaseView: () -> Unit, stopped: Boolean) { SectionItemView(openDatabaseView) { Row( @@ -160,11 +175,11 @@ expect fun SettingsSectionApp( Row(Modifier.weight(1f), verticalAlignment = Alignment.CenterVertically) { Icon( painterResource(MR.images.ic_database), - contentDescription = stringResource(MR.strings.database_passphrase_and_export), + contentDescription = stringResource(MR.strings.chat_data), tint = if (encrypted && (appPlatform.isAndroid || !saved)) MaterialTheme.colors.secondary else WarningOrange, ) TextIconSpaced(false) - Text(stringResource(MR.strings.database_passphrase_and_export)) + Text(stringResource(MR.strings.chat_data)) } if (stopped) { Icon( @@ -208,7 +223,7 @@ fun ChatLockItem( } } -@Composable private fun ContributeItem(uriHandler: UriHandler) { +@Composable fun ContributeItem(uriHandler: UriHandler) { SectionItemView({ uriHandler.openExternalLink("https://github.com/simplex-chat/simplex-chat#contribute") }) { Icon( painterResource(MR.images.ic_keyboard), @@ -220,7 +235,7 @@ fun ChatLockItem( } } -@Composable private fun RateAppItem(uriHandler: UriHandler) { +@Composable fun RateAppItem(uriHandler: UriHandler) { SectionItemView({ runCatching { uriHandler.openUriCatching("market://details?id=chat.simplex.app") } .onFailure { uriHandler.openUriCatching("https://play.google.com/store/apps/details?id=chat.simplex.app") } @@ -236,7 +251,7 @@ fun ChatLockItem( } } -@Composable private fun StarOnGithubItem(uriHandler: UriHandler) { +@Composable fun StarOnGithubItem(uriHandler: UriHandler) { SectionItemView({ uriHandler.openExternalLink("https://github.com/simplex-chat/simplex-chat") }) { Icon( painter = painterResource(MR.images.ic_github), @@ -486,8 +501,6 @@ fun PreviewSettingsLayout() { stopped = false, encrypted = false, passphraseSaved = false, - notificationsMode = remember { mutableStateOf(NotificationsMode.OFF) }, - userDisplayName = "Alice", setPerformLA = { _ -> }, showModal = { {} }, showSettingsModal = { {} }, diff --git a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/usersettings/VersionInfoView.kt b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/usersettings/VersionInfoView.kt index 52addd146b..5070c3c0aa 100644 --- a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/usersettings/VersionInfoView.kt +++ b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/usersettings/VersionInfoView.kt @@ -1,33 +1,55 @@ package chat.simplex.common.views.usersettings +import SectionBottomSpacer +import SectionDividerSpaced +import SectionView +import itemHPadding +import androidx.compose.foundation.layout.Column import androidx.compose.foundation.layout.padding import androidx.compose.material.Text -import androidx.compose.runtime.Composable +import androidx.compose.runtime.* import androidx.compose.ui.Modifier import dev.icerock.moko.resources.compose.stringResource import chat.simplex.common.BuildConfigCommon +import chat.simplex.common.model.ChatModel import chat.simplex.common.model.CoreVersionInfo import chat.simplex.common.platform.ColumnWithScrollBar import chat.simplex.common.platform.appPlatform -import chat.simplex.common.ui.theme.DEFAULT_PADDING +import chat.simplex.common.platform.chatModel +import chat.simplex.common.ui.theme.DEFAULT_PADDING_HALF import chat.simplex.common.views.helpers.AppBarTitle import chat.simplex.res.MR @Composable -fun VersionInfoView(info: CoreVersionInfo) { - ColumnWithScrollBar( - Modifier.padding(horizontal = DEFAULT_PADDING), - ) { - AppBarTitle(stringResource(MR.strings.app_version_title), withPadding = false) - if (appPlatform.isAndroid) { - Text(String.format(stringResource(MR.strings.app_version_name), BuildConfigCommon.ANDROID_VERSION_NAME)) - Text(String.format(stringResource(MR.strings.app_version_code), BuildConfigCommon.ANDROID_VERSION_CODE)) - } else { - Text(String.format(stringResource(MR.strings.app_version_name), BuildConfigCommon.DESKTOP_VERSION_NAME)) - Text(String.format(stringResource(MR.strings.app_version_code), BuildConfigCommon.DESKTOP_VERSION_CODE)) +fun VersionInfoView( + showSettingsModal: (@Composable (ChatModel) -> Unit) -> (() -> Unit), + withAuth: (title: String, desc: String, block: () -> Unit) -> Unit, +) { + val versionInfo = remember { mutableStateOf(null) } + LaunchedEffect(Unit) { + versionInfo.value = chatModel.controller.apiGetVersion() + } + ColumnWithScrollBar { + AppBarTitle(stringResource(MR.strings.app_version_title)) + SectionView { + Column(Modifier.padding(horizontal = itemHPadding, vertical = DEFAULT_PADDING_HALF)) { + if (appPlatform.isAndroid) { + Text(String.format(stringResource(MR.strings.app_version_name), BuildConfigCommon.ANDROID_VERSION_NAME)) + Text(String.format(stringResource(MR.strings.app_version_code), BuildConfigCommon.ANDROID_VERSION_CODE)) + } else { + Text(String.format(stringResource(MR.strings.app_version_name), BuildConfigCommon.DESKTOP_VERSION_NAME)) + Text(String.format(stringResource(MR.strings.app_version_code), BuildConfigCommon.DESKTOP_VERSION_CODE)) + } + versionInfo.value?.let { info -> + Text(String.format(stringResource(MR.strings.core_version), info.version)) + val simplexmqCommit = if (info.simplexmqCommit.length >= 7) info.simplexmqCommit.substring(startIndex = 0, endIndex = 7) else info.simplexmqCommit + Text(String.format(stringResource(MR.strings.core_simplexmq_version), info.simplexmqVersion, simplexmqCommit)) + } + } } - Text(String.format(stringResource(MR.strings.core_version), info.version)) - val simplexmqCommit = if (info.simplexmqCommit.length >= 7) info.simplexmqCommit.substring(startIndex = 0, endIndex = 7) else info.simplexmqCommit - Text(String.format(stringResource(MR.strings.core_simplexmq_version), info.simplexmqVersion, simplexmqCommit)) + SectionDividerSpaced() + + AdvancedSettingsAppSection(showSettingsModal, withAuth) + SectionBottomSpacer() } } diff --git a/apps/multiplatform/common/src/commonMain/resources/MR/base/strings.xml b/apps/multiplatform/common/src/commonMain/resources/MR/base/strings.xml index ee79fc0af0..5bca9402a8 100644 --- a/apps/multiplatform/common/src/commonMain/resources/MR/base/strings.xml +++ b/apps/multiplatform/common/src/commonMain/resources/MR/base/strings.xml @@ -1555,6 +1555,13 @@ Files Send delivery receipts to Contact requests from groups + About + Contact + Support the project + Chat data + Help & support + More privacy + Advanced settings Restart Shutdown Developer tools @@ -2681,7 +2688,7 @@ Don\'t enable You can enable later via Settings Delivery receipts are disabled! - You can enable them later via app Privacy & Security settings. + You can enable them later via app Your privacy settings. Error enabling delivery receipts! diff --git a/apps/multiplatform/common/src/desktopMain/kotlin/chat/simplex/common/views/usersettings/SettingsView.desktop.kt b/apps/multiplatform/common/src/desktopMain/kotlin/chat/simplex/common/views/usersettings/SettingsView.desktop.kt index 5b4a044df3..174ad63c7a 100644 --- a/apps/multiplatform/common/src/desktopMain/kotlin/chat/simplex/common/views/usersettings/SettingsView.desktop.kt +++ b/apps/multiplatform/common/src/desktopMain/kotlin/chat/simplex/common/views/usersettings/SettingsView.desktop.kt @@ -1,27 +1,21 @@ package chat.simplex.common.views.usersettings import SectionView -import androidx.compose.foundation.layout.Box -import androidx.compose.foundation.layout.padding -import androidx.compose.runtime.Composable -import androidx.compose.runtime.remember -import androidx.compose.ui.Modifier +import androidx.compose.runtime.* import chat.simplex.common.model.ChatController.appPrefs import chat.simplex.common.model.ChatModel -import chat.simplex.common.platform.AppUpdatesChannel -import chat.simplex.common.ui.theme.DEFAULT_PADDING_HALF +import chat.simplex.common.platform.* import chat.simplex.common.views.helpers.* import chat.simplex.res.MR import dev.icerock.moko.resources.compose.painterResource import dev.icerock.moko.resources.compose.stringResource @Composable -actual fun SettingsSectionApp( +actual fun AdvancedSettingsAppSection( showSettingsModal: (@Composable (ChatModel) -> Unit) -> (() -> Unit), - showVersion: () -> Unit, - withAuth: (title: String, desc: String, block: () -> Unit) -> Unit + withAuth: (title: String, desc: String, block: () -> Unit) -> Unit, ) { - SectionView(stringResource(MR.strings.settings_section_title_app)) { + SectionView { SettingsActionItem(painterResource(MR.images.ic_code), stringResource(MR.strings.settings_developer_tools), showSettingsModal { DeveloperView(withAuth) }) val selectedChannel = remember { appPrefs.appUpdateChannel.state } val values = AppUpdatesChannel.entries.map { it to it.text } @@ -29,6 +23,8 @@ actual fun SettingsSectionApp( appPrefs.appUpdateChannel.set(it) setupUpdateChecker() } - AppVersionItem(showVersion) } } + +@Composable +actual fun AppShutdownItem() {} From 7548fdae3bfd36db2211da287e15d0f29a3fff83 Mon Sep 17 00:00:00 2001 From: Narasimha-sc <166327228+Narasimha-sc@users.noreply.github.com> Date: Sun, 7 Jun 2026 22:46:59 +0000 Subject: [PATCH 06/81] android, desktop: fix chat item long-press menu and ripple shape (#6997) * android, desktop: fix chat item long-press menu and ripple shape clipChatItem clipped the bubble shape with Modifier.clip. Modifier.clip of the bubble GenericShape mis-hit-tests its path on very tall items, so long-press on the lower part of a long message did not reach combinedClickable and the context menu did not open (#6991); on desktop the same clip also left the press ripple rendered as a rectangle. Clip the bubble GenericShape in the draw pass (drawWithCache + clipPath) instead: drawing is clipped identically, the press ripple included, with no effect on hit-test. The RoundRect shape (tail disabled) hit-tests correctly and keeps Modifier.clip. Fixes #6991 * plans: justify chat item long-press and ripple shape fix --------- Co-authored-by: Evgeny Poberezkin --- .../common/views/chat/item/ChatItemView.kt | 25 +++++-- ...2026-05-20-fix-hold-on-long-msg-android.md | 68 +++++++++++++++++++ 2 files changed, 88 insertions(+), 5 deletions(-) create mode 100644 plans/2026-05-20-fix-hold-on-long-msg-android.md diff --git a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/item/ChatItemView.kt b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/item/ChatItemView.kt index 64288d9055..b4abbe70a2 100644 --- a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/item/ChatItemView.kt +++ b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/item/ChatItemView.kt @@ -12,8 +12,10 @@ import androidx.compose.ui.Alignment import androidx.compose.ui.Modifier import androidx.compose.ui.draw.alpha import androidx.compose.ui.draw.clip +import androidx.compose.ui.draw.drawWithCache import androidx.compose.ui.geometry.* import androidx.compose.ui.graphics.* +import androidx.compose.ui.graphics.drawscope.clipPath import androidx.compose.ui.graphics.painter.Painter import androidx.compose.ui.graphics.vector.ImageVector import androidx.compose.ui.platform.* @@ -1224,12 +1226,25 @@ fun Modifier.clipChatItem(chatItem: ChatItem? = null, tailVisible: Boolean = fal val style = shapeStyle(chatItem, chatItemTail.value, tailVisible, revealed) val cornerRoundness = chatItemRoundness.value.coerceIn(0f, 1f) - val shape = when (style) { - is ShapeStyle.Bubble -> chatItemShape(cornerRoundness, LocalDensity.current, style.tailVisible, chatItem?.chatDir?.sent == true) - is ShapeStyle.RoundRect -> RoundedCornerShape(style.radius * cornerRoundness) + return when (style) { + is ShapeStyle.Bubble -> { + // Modifier.clip of the bubble GenericShape mis-hit-tests its path on very tall + // items, dropping long-press on the lower part of the bubble (issue #6991). Clip + // in the draw pass instead — drawing is clipped identically (the press ripple + // included), with no effect on hit-test. + val shape = chatItemShape(cornerRoundness, LocalDensity.current, style.tailVisible, chatItem?.chatDir?.sent == true) + this.drawWithCache { + val path = Path().apply { + addOutline(shape.createOutline(size, layoutDirection, this@drawWithCache)) + } + onDrawWithContent { + clipPath(path) { this@onDrawWithContent.drawContent() } + } + } + } + // RoundRect hit-tests correctly — no bug here, keep the antialiased Modifier.clip. + is ShapeStyle.RoundRect -> this.clip(RoundedCornerShape(style.radius * cornerRoundness)) } - - return this.clip(shape) } private fun chatItemShape(roundness: Float, density: Density, tailVisible: Boolean, sent: Boolean = false): GenericShape = GenericShape { size, _ -> diff --git a/plans/2026-05-20-fix-hold-on-long-msg-android.md b/plans/2026-05-20-fix-hold-on-long-msg-android.md new file mode 100644 index 0000000000..f89aa26582 --- /dev/null +++ b/plans/2026-05-20-fix-hold-on-long-msg-android.md @@ -0,0 +1,68 @@ +# Fix chat item long-press menu and ripple shape + +Branch: `nd/fix-hold-on-long-msg-android` · PR [#6997](https://github.com/simplex-chat/simplex-chat/pull/6997) · issue [#6991](https://github.com/simplex-chat/simplex-chat/issues/6991). + +## 1. Problem statement + +Two issues with the chat-item bubble on the multiplatform UI: + +- **Android (#6991):** long-pressing the lower part of a very tall text message did not open the select/copy/reply context menu. Long-press on the top/middle worked. Reproduced with a long multi-line message (~150+ lines — e.g. 5000 random bytes as hex); never reproduced on short messages. Occurs **only with the message tail enabled** (bubble shape); with the tail preference disabled, messages use a plain rounded-rectangle shape and the bug does not reproduce. iOS unaffected. +- **Desktop:** the chat-item press ripple, in some cases, rendered as a rectangle instead of following the rounded bubble shape. + +## 2. Solution summary + +One function — `Modifier.clipChatItem` in `apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/item/ChatItemView.kt`. It clipped the chat item with `Modifier.clip(shape)` for every shape style. It now clips the **bubble** (`GenericShape`) in the draw pass with `drawWithCache` + `clipPath`, and keeps `Modifier.clip` for the **`RoundRect`** shape, which is unaffected by the bug (§3). + +```kotlin +return when (style) { + is ShapeStyle.Bubble -> { + val shape = chatItemShape(cornerRoundness, LocalDensity.current, style.tailVisible, chatItem?.chatDir?.sent == true) + this.drawWithCache { + val path = Path().apply { addOutline(shape.createOutline(size, layoutDirection, this@drawWithCache)) } + onDrawWithContent { clipPath(path) { this@onDrawWithContent.drawContent() } } + } + } + is ShapeStyle.RoundRect -> this.clip(RoundedCornerShape(style.radius * cornerRoundness)) +} +``` + +Net diff: 1 file (`ChatItemView.kt`), +20 / −5 — the `clipChatItem` function restructured plus two imports. + +## 3. Root cause + +`Modifier.clip(shape)` is defined in Compose as `graphicsLayer(shape = shape, clip = true)`. A clipping graphics layer restricts **both** drawing **and** pointer hit-test to the shape. + +`clipChatItem` is the first (outermost) modifier on the chat-bubble `Column`, and that same `Column` carries the `combinedClickable` long-press handler. So the layer's hit-test region gates every press on the bubble. + +- **Android:** for a very tall chat item the layer's hit-test region does not cover the bubble's lower portion — a press there is never delivered to `combinedClickable`, so the long-press menu does not open. This is specific to the bubble's `GenericShape` clip: with the tail disabled the item is clipped with a `RoundedCornerShape`, which hit-tests correctly. The exact reason the `GenericShape` clip's hit-test falls short on tall content was not isolated; the fix does not depend on it (see §4). +- **Desktop:** the layer's clip did not always extend to the `combinedClickable` press ripple, so the ripple drew to its own rectangular bounds instead of the bubble shape. + +## 4. The fix + +For the bubble shape, `clipChatItem` clips with a draw modifier instead of a graphics layer. `drawWithCache` builds the shape's `Path` once per size change; `onDrawWithContent { clipPath(path) { drawContent() } }` wraps the whole content draw — bubble background, text, and the press ripple — in a canvas clip. + +A draw modifier affects **only drawing**. It is not a layout or pointer-input node and has no effect on hit-test. Therefore: + +- the bubble and ripple are still clipped to the shape — visually identical to `Modifier.clip`; +- pointer hit-test is no longer clipped — `combinedClickable` receives presses anywhere in the `Column`'s bounds, fixing the Android long-press; +- the canvas `clipPath` clips the ripple reliably, fixing the rectangular desktop ripple. + +The `RoundRect` shape keeps `Modifier.clip`: it hit-tests correctly (no bug) and keeps its antialiased outline clip. Scoping by shape — rather than draw-clipping every shape — leaves every non-bubble chat item (service/event messages, tails-off messages, old Android) byte-for-byte unchanged. + +## 5. Alternatives rejected + +- **Remove `clipChatItem` from the bubble `Column`.** Fixes the Android long-press, but the press ripple loses its shape and renders as a rectangle. Intermediate state during development; replaced. +- **Draw-pass clip for every shape, unconditionally.** Also correct and a hair simpler (no `when`), but it needlessly moves the `RoundRect` shape off `Modifier.clip`'s antialiased outline clip onto a canvas `clipPath` — a behaviour change with no benefit, since `RoundRect` has no bug. Scoping to the bubble shape keeps `RoundRect` unchanged. +- **Keep `Modifier.clip`, move `combinedClickable` off the clipped `Column`.** A larger structural change to the chat-item layout tree; the draw-pass clip fixes both issues without moving anything. + +## 6. Verification + +- **Android** (debug APK): long-press on the lower half of a 150+-line message opens the context menu; top/middle still work; the tap ripple stays bubble-shaped; swipe-to-reply and link tap/long-press are unaffected. +- **Desktop** (Linux AppImage): the chat-item press ripple follows the bubble shape (rounded corners and tail), not a rectangle — confirmed against a build without the fix. +- The bubble draw-pass clip above was verified on those Android and desktop builds; this revision additionally keeps `Modifier.clip` for the `RoundRect` shape, which is the unchanged pre-fix behaviour. + +## 7. Risk and rollback + +- Blast radius: the `Bubble` branch of `clipChatItem`. The `RoundRect` branch is unchanged (`Modifier.clip` as before), so service/event items, tails-off messages and old-Android items are untouched. For the bubble, drawing is clipped identically; the single behavioural change is that pointer hit-test on the bubble is no longer shape-clipped — benign (bubble corners are transparent; a rectangular hit area is a marginally larger touch target). +- iOS is a separate codebase and is untouched. +- Rollback: revert the fix commit on the branch, or drop it before merge. From 7c5406a4e9b8762f9171924ecb77cb379aa93674 Mon Sep 17 00:00:00 2001 From: Narasimha-sc <166327228+Narasimha-sc@users.noreply.github.com> Date: Sun, 7 Jun 2026 23:02:54 +0000 Subject: [PATCH 07/81] desktop: fix drag-and-drop videos attached as files (#7015) onFilesAttached classified URIs by isImage only, so videos fell through to processPickedFile and were attached as generic files. processPickedMedia already handles video correctly; the classifier above it just never reached that branch. Recognise videos as media inline using getFileName. --- .../simplex/common/views/chat/ComposeView.kt | 14 ++++-- plans/2026-05-26-fix-video-drag-and-drop.md | 44 +++++++++++++++++++ 2 files changed, 54 insertions(+), 4 deletions(-) create mode 100644 plans/2026-05-26-fix-video-drag-and-drop.md diff --git a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/ComposeView.kt b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/ComposeView.kt index d874079238..26824cdd49 100644 --- a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/ComposeView.kt +++ b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/ComposeView.kt @@ -288,16 +288,22 @@ expect fun AttachmentSelection( ) fun MutableState.onFilesAttached(uris: List) { - val groups = uris.groupBy { isImage(it) } - val images = groups[true] ?: emptyList() + val groups = uris.groupBy { isImage(it) || isVideoUri(it) } + val media = groups[true] ?: emptyList() val files = groups[false] ?: emptyList() - if (images.isNotEmpty()) { - CoroutineScope(Dispatchers.IO).launch { processPickedMedia(images, null) } + if (media.isNotEmpty()) { + CoroutineScope(Dispatchers.IO).launch { processPickedMedia(media, null) } } else if (files.isNotEmpty()) { processPickedFile(uris.first(), null) } } +private fun isVideoUri(uri: URI): Boolean { + val name = getFileName(uri)?.lowercase() ?: return false + return name.endsWith(".mov") || name.endsWith(".avi") || name.endsWith(".mp4") || + name.endsWith(".mpg") || name.endsWith(".mpeg") || name.endsWith(".mkv") +} + fun MutableState.processPickedFile(uri: URI?, text: String?) { if (uri != null) { val fileSize = getFileSize(uri) diff --git a/plans/2026-05-26-fix-video-drag-and-drop.md b/plans/2026-05-26-fix-video-drag-and-drop.md new file mode 100644 index 0000000000..16258dea7f --- /dev/null +++ b/plans/2026-05-26-fix-video-drag-and-drop.md @@ -0,0 +1,44 @@ +# Fix desktop drag-and-drop of videos attached as files + +Branch: `nd/fix-video-drag-and-drop` · base: `master`. + +## Problem + +On desktop, dragging a video file into a chat attaches it as a generic file (paperclip + filename) instead of as a video (thumbnail + duration). Dragging an image works. Picking the same video via "Gallery → Video" attaches it correctly — so only the drag-and-drop routing is wrong. + +## Fix + +One file: `apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/ComposeView.kt`. Recognise videos as media in `onFilesAttached`'s classifier. + +```diff + fun MutableState.onFilesAttached(uris: List) { +- val groups = uris.groupBy { isImage(it) } +- val images = groups[true] ?: emptyList() ++ val groups = uris.groupBy { isImage(it) || isVideoUri(it) } ++ val media = groups[true] ?: emptyList() + val files = groups[false] ?: emptyList() +- if (images.isNotEmpty()) { +- CoroutineScope(Dispatchers.IO).launch { processPickedMedia(images, null) } ++ if (media.isNotEmpty()) { ++ CoroutineScope(Dispatchers.IO).launch { processPickedMedia(media, null) } + } else if (files.isNotEmpty()) { + processPickedFile(uris.first(), null) + } + } ++ ++private fun isVideoUri(uri: URI): Boolean { ++ val name = getFileName(uri)?.lowercase() ?: return false ++ return name.endsWith(".mov") || name.endsWith(".avi") || name.endsWith(".mp4") || ++ name.endsWith(".mpg") || name.endsWith(".mpeg") || name.endsWith(".mkv") ++} +``` + +Total diff: 1 file, +11 / −5. + +## Cause + +`onFilesAttached` classified URIs by `isImage` only — non-images (including videos) fell through to `processPickedFile`, producing a `FilePreview`. The downstream `processPickedMedia` already handles video correctly (its `else` branch builds `UploadContent.Video`); the classifier above it just never reached that branch. The existing `isVideo` in `Videos.desktop.kt` is `desktopMain`-only and not visible from `ComposeView.kt` in `commonMain` — the structural gap that left the classifier video-blind. The inline `isVideoUri` uses the cross-platform `getFileName`, so the same fix also corrects the paste path (`onFilesPasted` at `ComposeView.kt:1378`). + +## Risk + +One file, no interface change. Image and non-media drops are bit-identical. Video extension list is now duplicated with `Videos.desktop.kt`; adding a new format means updating both — accepted as the cost of a single-file fix. iOS unaffected. Rollback: revert the commit. From f144bf45607e8838c250bae424660658844457f4 Mon Sep 17 00:00:00 2001 From: Narasimha-sc <166327228+Narasimha-sc@users.noreply.github.com> Date: Sun, 7 Jun 2026 23:05:11 +0000 Subject: [PATCH 08/81] android, desktop, ios: fix trailing dot in saved name for files without extension (#7016) --- apps/ios/SimpleXChat/ImageUtils.swift | 2 +- .../kotlin/chat/simplex/common/views/helpers/Utils.kt | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/apps/ios/SimpleXChat/ImageUtils.swift b/apps/ios/SimpleXChat/ImageUtils.swift index f93b090517..2d36a7a53a 100644 --- a/apps/ios/SimpleXChat/ImageUtils.swift +++ b/apps/ios/SimpleXChat/ImageUtils.swift @@ -297,7 +297,7 @@ private func uniqueCombine(_ fileName: String, fullPath: Bool = false) -> String let name = ns.deletingPathExtension let ext = ns.pathExtension let suffix = (n == 0) ? "" : "_\(n)" - let f = "\(name)\(suffix).\(ext)" + let f = ext.isEmpty ? "\(name)\(suffix)" : "\(name)\(suffix).\(ext)" return (FileManager.default.fileExists(atPath: fullPath ? f : getAppFilePath(f).path)) ? tryCombine(fileName, n + 1) : f } return tryCombine(fileName, 0) diff --git a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/helpers/Utils.kt b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/helpers/Utils.kt index 424d500085..23c622bc34 100644 --- a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/helpers/Utils.kt +++ b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/helpers/Utils.kt @@ -383,7 +383,7 @@ fun uniqueCombine(fileName: String, dir: File): String { val ext = orig.extension fun tryCombine(n: Int): String { val suffix = if (n == 0) "" else "_$n" - val f = "$name$suffix.$ext" + val f = if (ext.isEmpty()) "$name$suffix" else "$name$suffix.$ext" return if (File(dir, f).exists()) tryCombine(n + 1) else f } return tryCombine(0) From 503d091ec4c46fecc43da087c76ed1376131c827 Mon Sep 17 00:00:00 2001 From: Narasimha-sc <166327228+Narasimha-sc@users.noreply.github.com> Date: Mon, 8 Jun 2026 11:13:06 +0000 Subject: [PATCH 09/81] android, desktop, ios: show chat name in delete / leave / clear confirmation dialogs (#7021) * android, desktop, ios: show chat name in delete / leave / clear confirmation dialogs The dialogs confirming delete contact, delete/leave group/channel and clear chat now show the chat's name on its own line above the existing warning, so the user can see which chat the destructive action will affect. Pure code change: no new translation strings, no signature changes, no new helpers. The name is read via existing displayName accessors on GroupInfo / Contact / ChatInfo. clearNoteFolderDialog is intentionally unchanged - the notes folder is a single-instance object and its existing warning already identifies it. * android, desktop, ios: also show chat name when deleting pending connection deleteContactConnectionAlert was missed in the original inventory. Same pattern as the other dispatchers - prepend the connection's displayName on its own line above the existing warning - so a user who set a custom name on a pending connection can see which one they are about to delete. * android: use
instead of \n for newline in delete confirmation dialog body On Android, the alert body goes through HtmlCompat.fromHtml which treats the input as HTML and collapses literal \n to a single space - so "Tech Talk\n\nGroup will be deleted..." rendered as "Tech Talk Group will be deleted...". Switch to

, which both HtmlCompat (Android) and the Desktop parser at Utils.desktop.kt:75 correctly render as a newline. * android, desktop: skip HTML parsing for delete confirmation dialog text Add parseHtml: Boolean = true parameter to showAlertDialog and showAlertDialogButtonsColumn; when false, the body text is wrapped as AnnotatedString and routed through the existing AnnotatedString AlertContent overload, bypassing escapedHtmlToAnnotatedString entirely. The 8 dispatchers that embed the user-controlled chat displayName now opt out (parseHtml = false). This means: - displayName is rendered as literal text - no HTML interpretation, so a contact whose alias is "X" or "
Kotlin-only workaround) - removes coupling to escapedHtmlToAnnotatedString in this path * android, desktop: shorten parseHtml comment in AlertManager * remove extra text --------- Co-authored-by: Evgeny Poberezkin --- apps/ios/Shared/Views/Chat/ChatInfoView.swift | 5 +- .../Views/Chat/Group/GroupChatInfoView.swift | 6 +- .../Views/ChatList/ChatListNavLink.swift | 14 +- .../simplex/common/views/chat/ChatInfoView.kt | 14 +- .../views/chat/group/GroupChatInfoView.kt | 6 +- .../views/chatlist/ChatListNavLinkView.kt | 3 +- .../common/views/helpers/AlertManager.kt | 21 +- .../delete-leave-dialog-with-profile-impl.md | 323 ++++++++++++++++++ plans/delete-leave-dialog-with-profile.md | 249 ++++++++++++++ 9 files changed, 620 insertions(+), 21 deletions(-) create mode 100644 plans/delete-leave-dialog-with-profile-impl.md create mode 100644 plans/delete-leave-dialog-with-profile.md diff --git a/apps/ios/Shared/Views/Chat/ChatInfoView.swift b/apps/ios/Shared/Views/Chat/ChatInfoView.swift index c17d8e23a8..29c87ff7e0 100644 --- a/apps/ios/Shared/Views/Chat/ChatInfoView.swift +++ b/apps/ios/Shared/Views/Chat/ChatInfoView.swift @@ -577,7 +577,7 @@ struct ChatInfoView: View { private func clearChatAlert() -> Alert { Alert( title: Text("Clear conversation?"), - message: Text("All messages will be deleted - this cannot be undone! The messages will be deleted ONLY for you."), + message: Text(chat.chatInfo.displayName + "\n\n") + Text("All messages will be deleted - this cannot be undone! The messages will be deleted ONLY for you."), primaryButton: .destructive(Text("Clear")) { Task { await clearChat(chat) @@ -1185,6 +1185,7 @@ private func deleteContactOrConversationDialog( showActionSheet(SomeActionSheet( actionSheet: ActionSheet( title: Text("Delete contact?"), + message: Text(contact.displayName), buttons: [ .destructive(Text("Only delete conversation")) { deleteContactMaybeErrorAlert(chat, contact, chatDeleteMode: .messages, dismissToChatList, showAlert) @@ -1331,6 +1332,7 @@ private func deleteContactWithoutConversation( showActionSheet(SomeActionSheet( actionSheet: ActionSheet( title: Text("Confirm contact deletion?"), + message: Text(contact.displayName), buttons: [ .destructive(Text("Delete and notify contact")) { deleteContactMaybeErrorAlert(chat, contact, chatDeleteMode: .full(notify: true), dismissToChatList, showAlert) @@ -1355,6 +1357,7 @@ private func deleteNotReadyContact( showActionSheet(SomeActionSheet( actionSheet: ActionSheet( title: Text("Confirm contact deletion?"), + message: Text(contact.displayName), buttons: [ .destructive(Text("Confirm")) { deleteContactMaybeErrorAlert(chat, contact, chatDeleteMode: .full(notify: false), dismissToChatList, showAlert) diff --git a/apps/ios/Shared/Views/Chat/Group/GroupChatInfoView.swift b/apps/ios/Shared/Views/Chat/Group/GroupChatInfoView.swift index 0a448a2772..1353f590fa 100644 --- a/apps/ios/Shared/Views/Chat/Group/GroupChatInfoView.swift +++ b/apps/ios/Shared/Views/Chat/Group/GroupChatInfoView.swift @@ -845,7 +845,7 @@ struct GroupChatInfoView: View { let label: LocalizedStringKey = groupInfo.useRelays ? "Delete channel?" : groupInfo.businessChat == nil ? "Delete group?" : "Delete chat?" return Alert( title: Text(label), - message: deleteGroupAlertMessage(groupInfo), + message: Text(chat.chatInfo.displayName + "\n\n") + deleteGroupAlertMessage(groupInfo), primaryButton: .destructive(Text("Delete")) { Task { do { @@ -867,7 +867,7 @@ struct GroupChatInfoView: View { private func clearChatAlert() -> Alert { Alert( title: Text("Clear conversation?"), - message: Text("All messages will be deleted - this cannot be undone! The messages will be deleted ONLY for you."), + message: Text(chat.chatInfo.displayName + "\n\n") + Text("All messages will be deleted - this cannot be undone! The messages will be deleted ONLY for you."), primaryButton: .destructive(Text("Clear")) { Task { await clearChat(chat) @@ -889,7 +889,7 @@ struct GroupChatInfoView: View { ) return Alert( title: Text(titleLabel), - message: Text(messageLabel), + message: Text(chat.chatInfo.displayName + "\n\n") + Text(messageLabel), primaryButton: .destructive(Text("Leave")) { Task { await leaveGroup(chat.chatInfo.apiId) diff --git a/apps/ios/Shared/Views/ChatList/ChatListNavLink.swift b/apps/ios/Shared/Views/ChatList/ChatListNavLink.swift index b4590fc124..76734dcb42 100644 --- a/apps/ios/Shared/Views/ChatList/ChatListNavLink.swift +++ b/apps/ios/Shared/Views/ChatList/ChatListNavLink.swift @@ -568,7 +568,7 @@ struct ChatListNavLink: View { let label: LocalizedStringKey = groupInfo.useRelays ? "Delete channel?" : groupInfo.businessChat == nil ? "Delete group?" : "Delete chat?" return Alert( title: Text(label), - message: deleteGroupAlertMessage(groupInfo), + message: Text(chat.chatInfo.displayName + "\n\n") + deleteGroupAlertMessage(groupInfo), primaryButton: .destructive(Text("Delete")) { Task { await deleteChat(chat) } }, @@ -600,7 +600,7 @@ struct ChatListNavLink: View { private func clearChatAlert() -> Alert { Alert( title: Text("Clear conversation?"), - message: Text("All messages will be deleted - this cannot be undone! The messages will be deleted ONLY for you."), + message: Text(chat.chatInfo.displayName + "\n\n") + Text("All messages will be deleted - this cannot be undone! The messages will be deleted ONLY for you."), primaryButton: .destructive(Text("Clear")) { Task { await clearChat(chat) } }, @@ -630,7 +630,7 @@ struct ChatListNavLink: View { ) return Alert( title: Text(titleLabel), - message: Text(messageLabel), + message: Text(chat.chatInfo.displayName + "\n\n") + Text(messageLabel), primaryButton: .destructive(Text("Leave")) { Task { await leaveGroup(groupInfo.groupId) } }, @@ -701,10 +701,10 @@ func rejectContactRequestAlert(_ contactRequestId: Int64) -> Alert { func deleteContactConnectionAlert(_ contactConnection: PendingContactConnection, showError: @escaping (ErrorAlert) -> Void, success: @escaping () -> Void = {}) -> Alert { Alert( title: Text("Delete pending connection?"), - message: - contactConnection.initiated - ? Text("The contact you shared this link with will NOT be able to connect!") - : Text("The connection you accepted will be cancelled!"), + message: Text(contactConnection.displayName + "\n\n") + + (contactConnection.initiated + ? Text("The contact you shared this link with will NOT be able to connect!") + : Text("The connection you accepted will be cancelled!")), primaryButton: .destructive(Text("Delete")) { Task { do { diff --git a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/ChatInfoView.kt b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/ChatInfoView.kt index dce1b6ea33..13be8b1d71 100644 --- a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/ChatInfoView.kt +++ b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/ChatInfoView.kt @@ -248,6 +248,8 @@ fun deleteContactDialog(chat: Chat, chatModel: ChatModel, close: (() -> Unit)? = private fun deleteContactOrConversationDialog(chat: Chat, contact: Contact, chatModel: ChatModel, close: (() -> Unit)?) { AlertManager.shared.showAlertDialogButtonsColumn( title = generalGetString(MR.strings.delete_contact_question), + text = contact.displayName, + parseHtml = false, buttons = { Column { // Only delete conversation @@ -306,7 +308,8 @@ private fun deleteActiveContactDialog(chat: Chat, contact: Contact, chatModel: C AlertManager.shared.showAlertDialogButtonsColumn( title = generalGetString(MR.strings.delete_contact_question), - text = generalGetString(MR.strings.delete_contact_cannot_undo_warning), + text = "${contact.displayName}\n\n${generalGetString(MR.strings.delete_contact_cannot_undo_warning)}", + parseHtml = false, buttons = { Column { // Keep conversation toggle @@ -361,7 +364,8 @@ private fun deleteActiveContactDialog(chat: Chat, contact: Contact, chatModel: C private fun deleteContactWithoutConversation(chat: Chat, chatModel: ChatModel, close: (() -> Unit)?) { AlertManager.shared.showAlertDialogButtonsColumn( title = generalGetString(MR.strings.confirm_delete_contact_question), - text = generalGetString(MR.strings.delete_contact_cannot_undo_warning), + text = "${chat.chatInfo.displayName}\n\n${generalGetString(MR.strings.delete_contact_cannot_undo_warning)}", + parseHtml = false, buttons = { Column { // Delete and notify contact @@ -417,7 +421,8 @@ private fun deleteContactWithoutConversation(chat: Chat, chatModel: ChatModel, c private fun deleteNotReadyContact(chat: Chat, chatModel: ChatModel, close: (() -> Unit)?) { AlertManager.shared.showAlertDialogButtonsColumn( title = generalGetString(MR.strings.confirm_delete_contact_question), - text = generalGetString(MR.strings.delete_contact_cannot_undo_warning), + text = "${chat.chatInfo.displayName}\n\n${generalGetString(MR.strings.delete_contact_cannot_undo_warning)}", + parseHtml = false, buttons = { // Confirm SectionItemView({ @@ -492,7 +497,8 @@ fun deleteContact(chat: Chat, chatModel: ChatModel, close: (() -> Unit)?, chatDe fun clearChatDialog(chat: Chat, close: (() -> Unit)? = null) { AlertManager.shared.showAlertDialog( title = generalGetString(MR.strings.clear_chat_question), - text = generalGetString(MR.strings.clear_chat_warning), + text = "${chat.chatInfo.displayName}\n\n${generalGetString(MR.strings.clear_chat_warning)}", + parseHtml = false, confirmText = generalGetString(MR.strings.clear_verb), onConfirm = { controller.clearChat(chat, close) }, destructive = true, diff --git a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/group/GroupChatInfoView.kt b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/group/GroupChatInfoView.kt index 3e9b5f6f48..c88e3b2bff 100644 --- a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/group/GroupChatInfoView.kt +++ b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/group/GroupChatInfoView.kt @@ -199,7 +199,8 @@ fun deleteGroupDialog(chat: Chat, groupInfo: GroupInfo, chatModel: ChatModel, cl } AlertManager.shared.showAlertDialog( title = generalGetString(titleId), - text = generalGetString(messageId), + text = "${groupInfo.displayName}\n\n${generalGetString(messageId)}", + parseHtml = false, confirmText = generalGetString(MR.strings.delete_verb), onConfirm = { withBGApi { @@ -233,7 +234,8 @@ fun leaveGroupDialog(rhId: Long?, groupInfo: GroupInfo, chatModel: ChatModel, cl MR.strings.you_will_stop_receiving_messages_from_this_chat_chat_history_will_be_preserved AlertManager.shared.showAlertDialog( title = generalGetString(titleId), - text = generalGetString(messageId), + text = "${groupInfo.displayName}\n\n${generalGetString(messageId)}", + parseHtml = false, confirmText = generalGetString(MR.strings.leave_group_button), onConfirm = { withLongRunningApi(60_000) { diff --git a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chatlist/ChatListNavLinkView.kt b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chatlist/ChatListNavLinkView.kt index d3533bbd02..7dfb52063e 100644 --- a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chatlist/ChatListNavLinkView.kt +++ b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chatlist/ChatListNavLinkView.kt @@ -772,10 +772,11 @@ fun rejectContactRequest(rhId: Long?, contactRequestId: Long, chatModel: ChatMod fun deleteContactConnectionAlert(rhId: Long?, connection: PendingContactConnection, chatModel: ChatModel, onSuccess: () -> Unit) { AlertManager.shared.showAlertDialog( title = generalGetString(MR.strings.delete_pending_connection__question), - text = generalGetString( + text = "${connection.displayName}\n\n" + generalGetString( if (connection.initiated) MR.strings.contact_you_shared_link_with_wont_be_able_to_connect else MR.strings.connection_you_accepted_will_be_cancelled ), + parseHtml = false, confirmText = generalGetString(MR.strings.delete_verb), onConfirm = { withBGApi { diff --git a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/helpers/AlertManager.kt b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/helpers/AlertManager.kt index 3d670d1c43..1774cf4394 100644 --- a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/helpers/AlertManager.kt +++ b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/helpers/AlertManager.kt @@ -75,6 +75,8 @@ class AlertManager { onDismissRequest: (() -> Unit)? = null, hostDevice: Pair? = null, belowTextContent: @Composable (() -> Unit) = {}, + // When false, [text] is rendered as literal text — use for user-controlled content. + parseHtml: Boolean = true, buttons: @Composable () -> Unit, ) { showAlert { @@ -82,8 +84,14 @@ class AlertManager { onDismissRequest = { onDismissRequest?.invoke(); if (dismissible) hideAlert() }, title = alertTitle(title), buttons = { - AlertContent(text, hostDevice, extraPadding = true, textAlign = textAlign, belowTextContent = belowTextContent) { - buttons() + if (parseHtml) { + AlertContent(text, hostDevice, extraPadding = true, textAlign = textAlign, belowTextContent = belowTextContent) { + buttons() + } + } else { + AlertContent(text?.let { AnnotatedString(it) }, hostDevice, extraPadding = true) { + buttons() + } } }, shape = RoundedCornerShape(corner = CornerSize(25.dp)) @@ -122,13 +130,15 @@ class AlertManager { onDismissRequest: (() -> Unit)? = null, destructive: Boolean = false, hostDevice: Pair? = null, + // When false, [text] is rendered as literal text — use for user-controlled content. + parseHtml: Boolean = true, ) { showAlert { AlertDialog( onDismissRequest = { onDismissRequest?.invoke(); hideAlert() }, title = alertTitle(title), buttons = { - AlertContent(text, hostDevice, true) { + val buttonRow: @Composable () -> Unit = { Row( Modifier.fillMaxWidth().padding(horizontal = DEFAULT_PADDING), horizontalArrangement = Arrangement.SpaceBetween @@ -149,6 +159,11 @@ class AlertManager { }, Modifier.focusRequester(focusRequester)) { Text(confirmText, color = if (destructive) MaterialTheme.colors.error else Color.Unspecified) } } } + if (parseHtml) { + AlertContent(text, hostDevice, true, content = buttonRow) + } else { + AlertContent(text?.let { AnnotatedString(it) }, hostDevice, true, content = buttonRow) + } }, shape = RoundedCornerShape(corner = CornerSize(25.dp)) ) diff --git a/plans/delete-leave-dialog-with-profile-impl.md b/plans/delete-leave-dialog-with-profile-impl.md new file mode 100644 index 0000000000..860d555d36 --- /dev/null +++ b/plans/delete-leave-dialog-with-profile-impl.md @@ -0,0 +1,323 @@ +# Implementation plan — chat name on its own line in delete/leave/clear dialogs + +Follows the product spec in +[`delete-leave-dialog-with-profile.md`](./delete-leave-dialog-with-profile.md). + +Pure code change — zero string additions, zero new helpers, zero +signature changes. Each call site edits one argument: the `text =` / +`message:` value gains `"${displayName}\n\n"` prepended to the +existing localized warning (or, where there is no current body, the +chat name becomes the new body). + +One commit per platform. + +## Commit 1 — Kotlin + +**Files touched:** +- `apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/helpers/AlertManager.kt` + — adds `parseHtml: Boolean = true` to `showAlertDialog` and + `showAlertDialogButtonsColumn`. When `false`, the body text is wrapped + as `AnnotatedString` and routed through the existing AnnotatedString + `AlertContent` overload, which does NOT call + `escapedHtmlToAnnotatedString`. Default stays `true` so existing + callers are unaffected. +- `apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/group/GroupChatInfoView.kt` +- `apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/ChatInfoView.kt` +- `apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chatlist/ChatListNavLinkView.kt` + — adds the previously-missed `deleteContactConnectionAlert` + dispatcher to the coverage (pending contact connections). + +Every Kotlin call site that prepends the chat name sets +`parseHtml = false`, so `displayName` is never HTML-interpreted. + +### 1.1 — `deleteGroupDialog` (`GroupChatInfoView.kt:182`) + +```diff + fun deleteGroupDialog(chat: Chat, groupInfo: GroupInfo, chatModel: ChatModel, close: (() -> Unit)? = null) { + val chatInfo = chat.chatInfo + val titleId = /* unchanged */ + val messageId = /* unchanged */ + AlertManager.shared.showAlertDialog( + title = generalGetString(titleId), +- text = generalGetString(messageId), ++ text = "${groupInfo.displayName}\n\n${generalGetString(messageId)}", + confirmText = generalGetString(MR.strings.delete_verb), + onConfirm = { /* unchanged */ }, + destructive = true, + ) + } +``` + +### 1.2 — `leaveGroupDialog` (`GroupChatInfoView.kt:222`) + +```diff + fun leaveGroupDialog(rhId: Long?, groupInfo: GroupInfo, chatModel: ChatModel, close: (() -> Unit)? = null) { + val titleId = /* unchanged */ + val messageId = /* unchanged */ + AlertManager.shared.showAlertDialog( + title = generalGetString(titleId), +- text = generalGetString(messageId), ++ text = "${groupInfo.displayName}\n\n${generalGetString(messageId)}", + confirmText = generalGetString(MR.strings.leave_group_button), + onConfirm = { /* unchanged */ }, + destructive = true, + ) + } +``` + +Signature unchanged. No caller updates. `groupInfo.displayName` is +already available on the existing parameter (`ChatModel.kt:2142`). + +### 1.3 — `clearChatDialog` (`ChatInfoView.kt:492`) + +```diff + fun clearChatDialog(chat: Chat, close: (() -> Unit)? = null) { + AlertManager.shared.showAlertDialog( + title = generalGetString(MR.strings.clear_chat_question), +- text = generalGetString(MR.strings.clear_chat_warning), ++ text = "${chat.chatInfo.displayName}\n\n${generalGetString(MR.strings.clear_chat_warning)}", + confirmText = generalGetString(MR.strings.clear_verb), + onConfirm = { controller.clearChat(chat, close) }, + destructive = true, + ) + } +``` + +### 1.4 — Contact-delete dispatchers (`ChatInfoView.kt`) + +Four functions. `deleteContactOrConversationDialog` (line 248) has +no existing `text =`, so the chat name becomes the new body. The +other three already have a `text =`, so the name is prepended. + +All four already have `contact: Contact` as a parameter, so +`contact.displayName` is used directly (same value as +`chat.chatInfo.displayName` for a direct chat, shorter expression). + +```diff + // deleteContactOrConversationDialog — line 248 + private fun deleteContactOrConversationDialog(chat: Chat, contact: Contact, chatModel: ChatModel, close: (() -> Unit)?) { + AlertManager.shared.showAlertDialogButtonsColumn( + title = generalGetString(MR.strings.delete_contact_question), ++ text = contact.displayName, + buttons = { /* unchanged */ } + ) + } +``` + +```diff + // deleteActiveContactDialog — line 304 + private fun deleteActiveContactDialog(chat: Chat, contact: Contact, chatModel: ChatModel, close: (() -> Unit)? = null) { + val contactDeleteMode = mutableStateOf(ContactDeleteMode.Full()) + AlertManager.shared.showAlertDialogButtonsColumn( + title = generalGetString(MR.strings.delete_contact_question), +- text = generalGetString(MR.strings.delete_contact_cannot_undo_warning), ++ text = "${contact.displayName}\n\n${generalGetString(MR.strings.delete_contact_cannot_undo_warning)}", + buttons = { /* unchanged */ } + ) + } +``` + +Same diff for `deleteContactWithoutConversation` (line 361) and +`deleteNotReadyContact` (line 417) — both use +`delete_contact_cannot_undo_warning`. Neither takes `contact` as +a parameter, so the name is read via `chat.chatInfo.displayName` +(which resolves to `contact.displayName` because these dispatchers +are only reached for `ChatInfo.Direct` chats). Their titles +(`confirm_delete_contact_question`) stay unchanged — the +not-ready / no-conversation paths keep their distinct title. + +## Commit 2 — iOS + +**Files touched:** +- `apps/ios/Shared/Views/ChatList/ChatListNavLink.swift` +- `apps/ios/Shared/Views/Chat/ChatInfoView.swift` +- `apps/ios/Shared/Views/Chat/Group/GroupChatInfoView.swift` + +### 2.1 — `deleteGroupAlert` (two locations) + +`Views/Chat/Group/GroupChatInfoView.swift:835` and +`Views/ChatList/ChatListNavLink.swift:567` get the same diff. +`deleteGroupAlertMessage(_:)` already returns a `Text` containing +the localized warning — concatenate to it. + +```diff + private func deleteGroupAlert() -> Alert { + let label: LocalizedStringKey = /* unchanged */ + return Alert( + title: Text(label), +- message: deleteGroupAlertMessage(groupInfo), ++ message: Text(chat.chatInfo.displayName) + Text(verbatim: "\n\n") + deleteGroupAlertMessage(groupInfo), + primaryButton: .destructive(Text("Delete")) { /* unchanged */ }, + secondaryButton: .cancel() + ) + } +``` + +`Text(chat.chatInfo.displayName)` resolves to `Text(_ content: some StringProtocol)` +(the runtime-string overload — no localization lookup, matches +codebase convention: `ChatView.swift:984`, `ChatInfoToolbar.swift:49`, +`SettingsView.swift:540`). `Text(verbatim: "\n\n")` is the literal +separator, matching the codebase convention that reserves +`verbatim:` for fixed punctuation (`ContextItemView.swift:88` is +the textbook example: `Text(chatLink.displayName) + Text(verbatim: " - ")`). +The third term `Text(messageLabel)` keeps the existing +`LocalizedStringKey` lookup. + +### 2.2 — `leaveGroupAlert` (two locations) + +`Views/Chat/Group/GroupChatInfoView.swift:872` and +`Views/ChatList/ChatListNavLink.swift:622`: + +```diff + private func leaveGroupAlert() -> Alert { + let titleLabel: LocalizedStringKey = /* unchanged */ + let messageLabel: LocalizedStringKey = /* unchanged */ + return Alert( + title: Text(titleLabel), +- message: Text(messageLabel), ++ message: Text(chat.chatInfo.displayName) + Text(verbatim: "\n\n") + Text(messageLabel), + primaryButton: .destructive(Text("Leave")) { /* unchanged */ }, + secondaryButton: .cancel() + ) + } +``` + +### 2.3 — `clearChatAlert` (three locations) + +`Views/Chat/ChatInfoView.swift:577`, +`Views/Chat/Group/GroupChatInfoView.swift:858`, +`Views/ChatList/ChatListNavLink.swift:600`: + +```diff + private func clearChatAlert() -> Alert { + Alert( + title: Text("Clear conversation?"), +- message: Text("All messages will be deleted - this cannot be undone! The messages will be deleted ONLY for you."), ++ message: Text(chat.chatInfo.displayName) + Text(verbatim: "\n\n") + Text("All messages will be deleted - this cannot be undone! The messages will be deleted ONLY for you."), + primaryButton: .destructive(Text("Clear")) { /* unchanged */ }, + secondaryButton: .cancel() + ) + } +``` + +### 2.4 — Contact-delete action sheets + +Three functions in `Views/Chat/ChatInfoView.swift`. None currently +pass `message:` to `ActionSheet`; we add it. `ActionSheet`'s +`message:` is an optional second parameter that SwiftUI already +supports. + +All three functions have `contact: Contact` in scope. Use bare +`Text(contact.displayName)` (resolves to the `StringProtocol` +overload, no localization lookup, matches codebase convention). +Add only the name as `message:` — these ActionSheets had no +message before, so adding any additional warning would be new +behavior beyond the stated goal. + +**`deleteContactOrConversationDialog`** (line 1177): + +```diff + private func deleteContactOrConversationDialog( + _ chat: Chat, _ contact: Contact, _ dismissToChatList: Bool, + _ showAlert: @escaping (SomeAlert) -> Void, + _ showActionSheet: @escaping (SomeActionSheet) -> Void, + _ showSheetContent: @escaping (SomeSheet) -> Void + ) { + showActionSheet(SomeActionSheet( + actionSheet: ActionSheet( + title: Text("Delete contact?"), ++ message: Text(contact.displayName), + buttons: [ /* unchanged */ ] + ), + id: "deleteContactOrConversationDialog" + )) + } +``` + +**`deleteContactWithoutConversation`** (line 1324): + +```diff + showActionSheet(SomeActionSheet( + actionSheet: ActionSheet( + title: Text("Confirm contact deletion?"), ++ message: Text(contact.displayName), + buttons: [ /* unchanged */ ] + ), + id: "deleteContactWithoutConversation" + )) +``` + +**`deleteNotReadyContact`** (line 1348) — same: + +```diff + showActionSheet(SomeActionSheet( + actionSheet: ActionSheet( + title: Text("Confirm contact deletion?"), ++ message: Text(contact.displayName), + buttons: [ /* unchanged */ ] + ), + id: "deleteNotReadyContact" + )) +``` + +### 2.5 — `DeleteActiveContactDialog` sheet (line 1282) unchanged + +The secondary multi-option sheet is reached only after the user +confirms "Delete contact" in the previous action sheet — which now +shows the name. The sheet itself remains as-is. + +## Verification + +For each platform, exercise every entry point and confirm the +body reads `` on its own line followed by the existing +warning: + +- Android & Desktop: + - Chat list swipe — direct contact, group, channel, business chat + → delete / clear / leave. (Note folder's clear dialog is + intentionally unchanged — `clearNoteFolderDialog` excluded.) + - Chat info screens — "Delete contact" / "Delete group" / "Delete + channel" / "Clear conversation" / "Leave …" rows. + - Contact list (`ContactListNavView.kt:148`) — "Delete contact" + action shows the name in entry-point dialog and toggle dialog. + - Multi-option contact-delete path: entry dialog (now has a name + body where it had none) → toggle dialog (name above the + warning) → success. +- iOS: + - Same matrix from chat list swipe and chat info screens. + - Action-sheet contact-delete paths show the name as the + `message:` line on iPhone and iPad. + +Edge cases: + +- Long chat name — alert containers wrap automatically; the body + occupies 3+ lines. Confirm with a chat renamed to ~40 characters. +- Special characters (emoji, RTL, double quotes) — render literally + via string interpolation, no format-substitution involved. +- Empty `displayName` — does not occur in practice (`NamedChat` + enforces non-empty via `localAlias.ifEmpty { profile.displayName }`). + +Diff-level checks: + +- `git diff '*strings.xml' '*Localizable.strings'` returns zero + hunks. Pure code change. +- `git diff --stat` shows ~5 files total: two Kotlin dispatcher + files, three iOS view files. +- Cancel/confirm flows behave exactly as before — same API calls, + same model updates, same navigation. + +## Out of scope + +- Profile picture / avatar in dialogs — excluded by product decision. +- Refactoring the iOS duplication between `ChatListNavLink` and + `GroupChatInfoView` / `ChatInfoView` (pre-existing `// TODO` at + `GroupChatInfoView.swift:834`). +- Pre-existing wording divergence between Kotlin's "Clear chat?" + and iOS's "Clear conversation?". Both platforms keep their + titles. +- "Delete invitation" at `ChatListNavLink.swift:236` — has no + confirmation dialog (direct call to `deleteChat(chat)`); nothing + to modify. +- Bolding the chat name. SwiftUI `Text + Text` supports `.bold()` + on the first term, but Jetpack Compose `AlertDialog` text is a + single unstyled string — keeping both unstyled preserves parity. diff --git a/plans/delete-leave-dialog-with-profile.md b/plans/delete-leave-dialog-with-profile.md new file mode 100644 index 0000000000..a05fb66532 --- /dev/null +++ b/plans/delete-leave-dialog-with-profile.md @@ -0,0 +1,249 @@ +# Show chat name in delete / leave / clear confirmation dialogs + +## Goal + +The current delete-contact, delete-group, delete-channel, leave-group, +leave-channel and clear-chat confirmations are generic. From a long +chat list, swiping on a row and triggering one of these actions opens +a dialog whose title is "Delete group?", "Leave channel?", "Clear +conversation?" — with no indication of *which* chat is the target. A +user can easily act on the wrong chat. + +The fix: include the chat's display name in the dialog body, on a line +of its own above the existing warning text. Nothing else changes — +same title, same warning text, same buttons, same colors, same dialog +shape. No profile picture, no layout changes, no new helpers, no new +translation strings. + +We deliberately do NOT reuse the open-chat-link alert layout (centered +profile image + name + open-chat button). That layout is the *invite* +flow's identity; repurposing it for destructive confirmations would +confuse the two flows visually. The minimum change that solves the +"which chat?" problem is putting the name in the body text. + +## Why body, not title; why no new strings + +The title carries the action ("Delete group?", "Leave channel?"). The +body carries the consequences ("Group will be deleted for all +members…"). The chat name belongs with the body — it is the subject +of the consequence, not part of the question. + +Adding the name to the title would require new format-string variants +(`delete_group_named_question` etc.) and per-locale re-translation. +Putting the name on its own line in the body is a pure code change — +the existing translated warnings are concatenated with the chat name +in code: + +``` +Tech Talk + +Group will be deleted for all members - this cannot be undone! +``` + +The display name appears first because the user wants to confirm +*which* chat before reading *what* will happen. The blank line between +the name and the warning makes the name visually distinct. + +## Current state + +### Multiplatform (Kotlin / Android / Desktop) + +All eight dialogs go through `AlertManager.shared.showAlertDialog` or +`showAlertDialogButtonsColumn`: + +- `deleteGroupDialog` — `views/chat/group/GroupChatInfoView.kt:182` +- `leaveGroupDialog` — `views/chat/group/GroupChatInfoView.kt:222` +- `clearChatDialog` — `views/chat/ChatInfoView.kt:492` +- `deleteContactOrConversationDialog` — `views/chat/ChatInfoView.kt:248` +- `deleteActiveContactDialog` — `views/chat/ChatInfoView.kt:304` +- `deleteContactWithoutConversation` — `views/chat/ChatInfoView.kt:361` +- `deleteNotReadyContact` — `views/chat/ChatInfoView.kt:417` +- `deleteContactConnectionAlert` — `views/chatlist/ChatListNavLinkView.kt:772` + (deletes a pending contact connection; takes a `PendingContactConnection` + whose `displayName` reflects any custom name the user set) + +Call sites (chat-info screens, chat-list swipe / overflow, contact +list) funnel through these dispatcher functions. + +### iOS (Swift) + +Two SwiftUI patterns are used: + +- SwiftUI `Alert` with `primaryButton: .destructive` / `.cancel()`: + - `deleteGroupAlert` — `Views/ChatList/ChatListNavLink.swift:567`, + `Views/Chat/Group/GroupChatInfoView.swift:835` + - `leaveGroupAlert` — `Views/ChatList/ChatListNavLink.swift:622`, + `Views/Chat/Group/GroupChatInfoView.swift:872` + - `clearChatAlert` — `Views/ChatList/ChatListNavLink.swift:600`, + `Views/Chat/ChatInfoView.swift:577`, + `Views/Chat/Group/GroupChatInfoView.swift:858` +- SwiftUI `ActionSheet`: + - `deleteContactOrConversationDialog` — + `Views/Chat/ChatInfoView.swift:1177` + - `deleteContactWithoutConversation` — + `Views/Chat/ChatInfoView.swift:1324` + - `deleteNotReadyContact` — `Views/Chat/ChatInfoView.swift:1348` + +`Alert(message:)` accepts `Text`, and `ActionSheet(message:)` (an +existing optional parameter not used today) accepts `Text` too — so +the name can be added by composing the existing message string with +`"\n\n"` and the chat name. No widget changes. + +## Design + +| Dialog | Body today | Body after | +|---|---|---| +| Delete group | `Group will be deleted for all members – this cannot be undone!` | `Tech Talk` + blank line + existing text | +| Delete channel | `Channel will be deleted for all subscribers – this cannot be undone!` | `SimpleX news` + blank line + existing text | +| Leave group | `You will stop receiving messages from this group. …` | `Tech Talk` + blank line + existing text | +| Clear chat | `All messages will be deleted – this cannot be undone! …` | `Alice` + blank line + existing text | +| Delete contact (entry sheet) | *(no body today — title only + buttons)* | `Alice` (becomes the body) | +| Delete contact (active variant) | `Contact will be deleted – this cannot be undone!` | `Alice` + blank line + existing text | +| Confirm contact deletion (not-ready / no-conversation) | `Contact will be deleted – this cannot be undone!` | `Alice` + blank line + existing text | + +Title text is unchanged in every case. Existing titles +(`delete_contact_question`, `confirm_delete_contact_question`, etc.) +keep their semantic distinction — the "Confirm contact deletion?" +title still appears for the not-ready / no-conversation paths. + +### Which name to use: `displayName`, not `chatViewName` + +The chat list row labels chats with `cInfo.chatViewName` +(`ChatPreviewView.kt:87`), defined as: + +```kotlin +val chatViewName: String + get() = localAlias.ifEmpty { displayName + (if (fullName == "" || fullName == displayName) "" else " / $fullName") } +``` + +The dialog uses `chatInfo.displayName` (and `groupInfo.displayName` +for the leave dialog). For most chats these are identical: + +- If `localAlias` is set, both resolve to the alias. +- If `displayName == fullName` (or `fullName` is empty), both resolve + to `displayName`. + +For a contact with distinct display name and full name (no alias), +the row would show `alice / Alice Smith` while the dialog shows +`alice`. Acceptable: `displayName` is the recognizable identifier, +shorter, and the dialog format (single line above the warning) +benefits from concision. Two-part identifiers in the dialog would +crowd the layout. + +### `clearNoteFolderDialog` is excluded + +The local notes folder is a single-instance object — there is only +one per user — and its existing warning text already names it +unambiguously. Adding the display name on its own line would be +pure redundancy. Skipped. + +## Changes + +### Multiplatform (Kotlin) + +Each dispatcher function changes one argument: the `text =` parameter +passed to `AlertManager.shared.showAlertDialog` / +`showAlertDialogButtonsColumn`. The new value is the chat name + two +newlines + the existing message text: + +```kotlin +text = "${chatInfo.displayName}\n\n${generalGetString(messageId)}", +parseHtml = false, +``` + +`parseHtml = false` is a new boolean parameter added to both alert +helpers. It bypasses `escapedHtmlToAnnotatedString` so the +user-controlled `displayName` is rendered as literal text, never +interpreted as HTML markup (``, ``, `&`, etc.). The default +remains `true`; only our delete-confirmation dispatchers opt out. + +For `leaveGroupDialog` the source is `groupInfo.displayName` (the +function already takes `groupInfo` — no signature change needed, +no caller updates needed). + +For `deleteGroupDialog`, also `groupInfo.displayName`, for consistency +with `leaveGroupDialog` (both have `groupInfo` already in scope). + +For `deleteContactOrConversationDialog`, which has no `text =` +parameter today, add `text = chatInfo.displayName` (no concatenation +needed — the dialog had no body text before). + +### iOS + +Each of the eight call sites changes one argument: the `message:` +parameter passed to `Alert(…)` or `ActionSheet(…)`. The new value +composes the chat name with the existing localized message string: + +```swift +message: Text("\(chat.chatInfo.displayName)\n\n\(existingMessage)"), +``` + +For the three `ActionSheet` sites that have no `message:` today, add +`message: Text(chat.chatInfo.displayName)`. + +## Out of scope + +- Profile picture / avatar in any of these dialogs — excluded by + decision: the open-chat-link alert owns that layout, and reusing + it for destructive confirmations conflates two semantically + different flows. +- The pre-existing wording divergence between Kotlin's + `clear_chat_question` ("Clear chat?") and iOS's "Clear + conversation?". Both platforms keep their existing titles. +- Refactoring the iOS duplication between `ChatListNavLink` and + `GroupChatInfoView` / `ChatInfoView` (pre-existing `// TODO reuse + this and clearChatAlert with ChatInfoView` at + `GroupChatInfoView.swift:834`). +- "Delete invitation" at `ChatListNavLink.swift:236` — goes through + `deleteChat(chat)` directly with no confirmation dialog. No dialog + to modify. +- Bolding the chat name on its own line. SwiftUI `Text` concatenation + supports `.bold()`; Jetpack Compose `AlertDialog` text is a single + string. Keep both platforms unstyled for parity. + +## Verification + +Per platform, exercise every entry point and confirm the dialog body +reads `` on its own line followed by a blank line followed +by the existing warning: + +- Android & Desktop: + - Chat list swipe — direct contact, group, channel, business chat + → delete / clear / leave actions. (Note folder's clear dialog + is intentionally unchanged.) + - Chat info screens — "Delete contact" / "Delete group" / "Delete + channel" / "Clear conversation" / "Leave …" rows. + - Contact list (`ContactListNavView.kt:148`) — "Delete contact" + action. + - The multi-option contact-delete path: entry dialog (now has a + name body where it had none) → toggle dialog (name above the + warning) → success. +- iOS: + - Same matrix from chat list swipe and chat info screens. + - Action-sheet contact-delete paths show the name as the + `message:` line. + +Edge cases: + +- Long chat name (40+ chars) — alert containers wrap automatically; + body now occupies 3+ lines (name on 2, blank line, warning on 1+). + Confirm via a chat renamed to a long string. +- Special characters in name (emoji, RTL text, double quotes) — + render literally because the substitution is string concatenation, + not format expansion. A contact named `Bob "the builder"` displays + as `Bob "the builder"` on its own line. No quoting/escaping issue. +- Empty `displayName` would render an empty first line above the + warning. In practice `displayName` is non-empty (the `NamedChat` + interface enforces it via `localAlias.ifEmpty { profile.displayName }`); + no defensive trimming added. + +Diff-level checks: + +- `git diff strings.xml` and `git diff '*Localizable.strings'` show + zero hunks. The change is pure code. +- `git diff --stat` shows each platform touched in 2–4 files: + the dispatcher file(s) on Kotlin (`ChatInfoView.kt`, + `GroupChatInfoView.kt`), and the SwiftUI views holding the + alert/sheet builders on iOS. +- Behavior is unchanged. Cancel returns to the prior screen; + confirm performs the same destructive API call as before. From dd150e2d703e30e52496891ca6715712ecd01db8 Mon Sep 17 00:00:00 2001 From: spaced4ndy <8711996+spaced4ndy@users.noreply.github.com> Date: Tue, 9 Jun 2026 06:47:39 +0000 Subject: [PATCH 10/81] core: limit xftp file description (#7060) --- src/Simplex/Chat/Store/Files.hs | 22 ++++++++++++++++++++-- 1 file changed, 20 insertions(+), 2 deletions(-) diff --git a/src/Simplex/Chat/Store/Files.hs b/src/Simplex/Chat/Store/Files.hs index 5289a3b304..6cb8e39bbc 100644 --- a/src/Simplex/Chat/Store/Files.hs +++ b/src/Simplex/Chat/Store/Files.hs @@ -79,6 +79,7 @@ import Data.Functor ((<&>)) import Data.Int (Int64) import Data.Maybe (fromMaybe, isJust, listToMaybe) import Data.Text (Text) +import qualified Data.Text as T import Data.Time (addUTCTime) import Data.Time.Clock (UTCTime (..), getCurrentTime, nominalDay) import Data.Type.Equality @@ -422,7 +423,7 @@ createRcvStandaloneFileTransfer db userId (CryptoFile filePath cfArgs_) fileSize createRcvFD_ :: DB.Connection -> UserId -> UTCTime -> FileDescr -> ExceptT StoreError IO RcvFileDescr createRcvFD_ db userId currentTs FileDescr {fileDescrText, fileDescrPartNo, fileDescrComplete} = do - when (fileDescrPartNo /= 0) $ throwError SERcvFileInvalidDescrPart + when (fileDescrPartNo /= 0 || not (rcvFileDescrWithinLimits fileDescrPartNo fileDescrText)) $ throwError SERcvFileInvalidDescrPart fileDescrId <- liftIO $ do DB.execute db @@ -450,8 +451,8 @@ appendRcvFD db userId fileId fd@FileDescr {fileDescrText, fileDescrPartNo, fileD fileDescrPartNo = rfdPNo, fileDescrComplete = rfdComplete } -> do - when (fileDescrPartNo /= rfdPNo + 1 || rfdComplete) $ throwError SERcvFileInvalidDescrPart let fileDescrText' = rfdText <> fileDescrText + when (fileDescrPartNo /= rfdPNo + 1 || rfdComplete || not (rcvFileDescrWithinLimits fileDescrPartNo fileDescrText')) $ throwError SERcvFileInvalidDescrPart liftIO $ DB.execute db @@ -463,6 +464,23 @@ appendRcvFD db userId fileId fd@FileDescr {fileDescrText, fileDescrPartNo, fileD (fileDescrText', fileDescrPartNo, BI fileDescrComplete, fileDescrId) pure RcvFileDescr {fileDescrId, fileDescrText = fileDescrText', fileDescrPartNo, fileDescrComplete} +-- Upper bounds sized above the largest legitimate received description; derived from simplexmq's +-- chunk tiers and redundancy, so a change there must revisit them. +-- ~1280 chunks max = maxFileSizeHard (5gb) / largest chunk tier (4mb). +-- ~150 chars per chunk in the description YAML = replicaId 24 + Ed25519 key 64 + SHA-256 digest 44 + chunkNo/colons. +-- Total ~0.18 MB at 1 replica/chunk (~0.42 MB at 3x), under the 1mb text and 1024 part caps. +maxRcvFileDescrParts :: Int +maxRcvFileDescrParts = 1024 + +maxRcvFileDescrTextLength :: Int +maxRcvFileDescrTextLength = 1024 * 1024 + +rcvFileDescrWithinLimits :: Int -> Text -> Bool +rcvFileDescrWithinLimits partNo descrText = + partNo >= 0 + && partNo <= maxRcvFileDescrParts + && T.length descrText <= maxRcvFileDescrTextLength + getRcvFileDescrByRcvFileId :: DB.Connection -> FileTransferId -> ExceptT StoreError IO RcvFileDescr getRcvFileDescrByRcvFileId db fileId = do liftIO (getRcvFileDescrByRcvFileId_ db fileId) >>= \case From 931881c86039764a12425ee7b5602c68527bb2a7 Mon Sep 17 00:00:00 2001 From: spaced4ndy <8711996+spaced4ndy@users.noreply.github.com> Date: Tue, 9 Jun 2026 13:03:51 +0000 Subject: [PATCH 11/81] core: validate user chat ownership for chat tag and TTL APIs (#7063) --- src/Simplex/Chat/Library/Commands.hs | 31 ++++++++++++++++++---------- tests/ChatTests/Direct.hs | 20 ++++++++++++++++++ 2 files changed, 40 insertions(+), 11 deletions(-) diff --git a/src/Simplex/Chat/Library/Commands.hs b/src/Simplex/Chat/Library/Commands.hs index 0671b2e091..b72eae7c72 100644 --- a/src/Simplex/Chat/Library/Commands.hs +++ b/src/Simplex/Chat/Library/Commands.hs @@ -652,12 +652,14 @@ processChatCommand cxt nm = \case _ <- createChatTag db user emoji text CRChatTags user <$> getUserChatTags db user APISetChatTags (ChatRef cType chatId scope) tagIds -> withUser $ \user -> case cType of - CTDirect -> withFastStore' $ \db -> do - updateDirectChatTags db chatId (maybe [] L.toList tagIds) - CRTagsUpdated user <$> getUserChatTags db user <*> getDirectChatTags db chatId - CTGroup | isNothing scope -> withFastStore' $ \db -> do - updateGroupChatTags db chatId (maybe [] L.toList tagIds) - CRTagsUpdated user <$> getUserChatTags db user <*> getGroupChatTags db chatId + CTDirect -> withFastStore $ \db -> do + Contact {contactId} <- getContact db cxt user chatId + liftIO $ updateDirectChatTags db contactId (maybe [] L.toList tagIds) + CRTagsUpdated user <$> liftIO (getUserChatTags db user) <*> liftIO (getDirectChatTags db contactId) + CTGroup | isNothing scope -> withFastStore $ \db -> do + GroupInfo {groupId} <- getGroupInfo db cxt user chatId + liftIO $ updateGroupChatTags db groupId (maybe [] L.toList tagIds) + CRTagsUpdated user <$> liftIO (getUserChatTags db user) <*> liftIO (getGroupChatTags db groupId) _ -> throwCmdError "not supported" APIDeleteChatTag tagId -> withUser $ \user -> do withFastStore' $ \db -> deleteChatTag db user tagId @@ -1692,8 +1694,11 @@ processChatCommand cxt nm = \case CRServerOperatorConditions <$> getServerOperators db APISetChatTTL userId (ChatRef cType chatId scope) newTTL_ -> withUserId userId $ \user -> checkStoreNotChanged $ withChatLock "setChatTTL" $ do - (oldTTL_, globalTTL, ttlCount) <- withStore' $ \db -> - (,,) <$> getSetChatTTL db <*> getChatItemTTL db user <*> getChatTTLCount db user + (oldTTL_, globalTTL, ttlCount) <- withStore $ \db -> do + oldTTL <- getSetChatTTL db user + globalTTL <- liftIO $ getChatItemTTL db user + ttlCount <- liftIO $ getChatTTLCount db user + pure (oldTTL, globalTTL, ttlCount) let newTTL = fromMaybe globalTTL newTTL_ oldTTL = fromMaybe globalTTL oldTTL_ when (newTTL > 0 && (newTTL < oldTTL || oldTTL == 0)) $ do @@ -1702,9 +1707,13 @@ processChatCommand cxt nm = \case lift $ setChatItemsExpiration user globalTTL ttlCount ok user where - getSetChatTTL db = case cType of - CTDirect -> getDirectChatTTL db chatId <* setDirectChatTTL db chatId newTTL_ - CTGroup | isNothing scope -> getGroupChatTTL db chatId <* setGroupChatTTL db chatId newTTL_ + getSetChatTTL db currentUser = case cType of + CTDirect -> do + Contact {contactId} <- getContact db cxt currentUser chatId + liftIO $ getDirectChatTTL db contactId <* setDirectChatTTL db contactId newTTL_ + CTGroup | isNothing scope -> do + GroupInfo {groupId} <- getGroupInfo db cxt currentUser chatId + liftIO $ getGroupChatTTL db groupId <* setGroupChatTTL db groupId newTTL_ _ -> pure Nothing expireChat user globalTTL = do currentTs <- liftIO getCurrentTime diff --git a/tests/ChatTests/Direct.hs b/tests/ChatTests/Direct.hs index 740e757ed8..7acfae1a95 100644 --- a/tests/ChatTests/Direct.hs +++ b/tests/ChatTests/Direct.hs @@ -122,6 +122,7 @@ chatDirectTests = do it "create user with same servers" testCreateUserSameServers it "delete user" testDeleteUser it "delete user with chat tags" testDeleteUserChatTags + it "rejects raw chat TTL updates for another user's chat" testRejectCrossUserChatTTL it "users have different chat item TTL configuration, chat items expire" testUsersDifferentCIExpirationTTL it "chat items expire after restart for all users according to per user configuration" testUsersRestartCIExpiration it "chat items only expire for users who configured expiration" testEnableCIExpirationOnlyForOneUser @@ -2096,6 +2097,25 @@ testDeleteUserChatTags = alice ##> "/users" alice <## "alisa (active)" +testRejectCrossUserChatTTL :: HasCallStack => TestParams -> IO () +testRejectCrossUserChatTTL = + testChat2 aliceProfile bobProfile $ + \alice bob -> do + connectUsers alice bob + + alice #$> ("/_ttl 1 @2 2", id, "ok") + alice #$> ("/ttl @bob", id, "old messages are set to be deleted after: 2 second(s)") + + alice ##> "/create user alisa" + showActiveUser alice "alisa" + + alice ##> "/_ttl 2 @2 9" + alice <##. "chat db error:" + + alice ##> "/user alice" + showActiveUser alice "alice (Alice)" + alice #$> ("/ttl @bob", id, "old messages are set to be deleted after: 2 second(s)") + testUsersDifferentCIExpirationTTL :: HasCallStack => TestParams -> IO () testUsersDifferentCIExpirationTTL ps = do withNewTestChat ps "bob" bobProfile $ \bob -> do From b9d1f0c0a3c37fa17894d7dcd2e7c48a9ffd8ff3 Mon Sep 17 00:00:00 2001 From: spaced4ndy <8711996+spaced4ndy@users.noreply.github.com> Date: Tue, 9 Jun 2026 16:58:17 +0000 Subject: [PATCH 12/81] core: fix delivery batching (#7065) --- src/Simplex/Chat/Library/Subscriber.hs | 6 +-- src/Simplex/Chat/Messages/Batch.hs | 14 +++---- tests/MessageBatching.hs | 54 +++++++++++++++++++++++++- 3 files changed, 62 insertions(+), 12 deletions(-) diff --git a/src/Simplex/Chat/Library/Subscriber.hs b/src/Simplex/Chat/Library/Subscriber.hs index 2e07282036..ba1f7f7d1f 100644 --- a/src/Simplex/Chat/Library/Subscriber.hs +++ b/src/Simplex/Chat/Library/Subscriber.hs @@ -3635,13 +3635,13 @@ runDeliveryTaskWorker a deliveryKey Worker {doWork} = do withStore' $ \db -> setDeliveryTaskErrStatus db (deliveryTaskId task) "relay inactive" | otherwise -> withWorkItems a doWork (withStore' $ \db -> getNextDeliveryTasks db gInfo task) $ \nextTasks -> do - let (body, acceptedTasks, largeTasks) = batchDeliveryTasks1 (vr cxt) maxEncodedMsgLength nextTasks + let (body_, acceptedTasks, largeTasks) = batchDeliveryTasks1 (vr cxt) maxEncodedMsgLength nextTasks senderGMIds = S.toList . S.fromList $ map (\MessageDeliveryTask {senderGMId} -> senderGMId) acceptedTasks withStore' $ \db -> do - createMsgDeliveryJob db gInfo jobScope senderGMIds body + forM_ body_ $ \body -> createMsgDeliveryJob db gInfo jobScope senderGMIds body forM_ acceptedTasks $ \t -> updateDeliveryTaskStatus db (deliveryTaskId t) DTSProcessed forM_ largeTasks $ \t -> setDeliveryTaskErrStatus db (deliveryTaskId t) "large" - lift . void $ getDeliveryJobWorker True deliveryKey + when (isJust body_) . lift . void $ getDeliveryJobWorker True deliveryKey -- DJRelayRemoved is allowed when RSInactive - it forwards XGrpMemDel about relay's own deletion DJRelayRemoved | workerScope /= DWSGroup -> diff --git a/src/Simplex/Chat/Messages/Batch.hs b/src/Simplex/Chat/Messages/Batch.hs index ed65bd4af7..81861aad74 100644 --- a/src/Simplex/Chat/Messages/Batch.hs +++ b/src/Simplex/Chat/Messages/Batch.hs @@ -24,7 +24,6 @@ import qualified Data.ByteString as BS import qualified Data.ByteString.Char8 as B import Data.Char (ord) import Data.Function (on) -import Data.Foldable (foldr') import Data.List (foldl', sortBy) import Data.List.NonEmpty (NonEmpty (..)) import qualified Data.List.NonEmpty as L @@ -79,15 +78,15 @@ batchMessages mode maxLen = addBatch . foldr addToBatch ([], [], [], 0, 0) let encoded = encodeBatch mode bodies in Right (MsgBatch encoded msgs) : batches --- | Batches delivery tasks into (batch, accepted, large). +-- | Batches delivery tasks into (batch if any task was accepted, accepted, large). -- Always uses binary batch format for relay groups. -batchDeliveryTasks1 :: VersionRangeChat -> Int -> NonEmpty MessageDeliveryTask -> (ByteString, [MessageDeliveryTask], [MessageDeliveryTask]) +batchDeliveryTasks1 :: VersionRangeChat -> Int -> NonEmpty MessageDeliveryTask -> (Maybe ByteString, [MessageDeliveryTask], [MessageDeliveryTask]) batchDeliveryTasks1 _vr maxLen = toResult . foldl' addToBatch ([], [], [], 0, 0) . L.toList where addToBatch :: ([ByteString], [MessageDeliveryTask], [MessageDeliveryTask], Int, Int) -> MessageDeliveryTask -> ([ByteString], [MessageDeliveryTask], [MessageDeliveryTask], Int, Int) addToBatch (msgBodies, accepted, large, len, n) task - -- too large: skip, record in large - | msgLen > maxLen = (msgBodies, accepted, task : large, len, n) + -- element can't fit even a singleton batch (4-byte binary-batch framing) + | msgLen + 4 > maxLen = (msgBodies, accepted, task : large, len, n) -- fits: include in batch -- batch overhead: '=' + count (2) + 2-byte length prefix per element | len' + (n + 1) * 2 + 2 <= maxLen = (msgBody : msgBodies, task : accepted, large, len', n + 1) @@ -98,10 +97,11 @@ batchDeliveryTasks1 _vr maxLen = toResult . foldl' addToBatch ([], [], [], 0, 0) msgBody = encodeFwdElement GrpMsgForward {fwdSender, fwdBrokerTs} verifiedMsg msgLen = B.length msgBody len' = len + msgLen - toResult :: ([ByteString], [MessageDeliveryTask], [MessageDeliveryTask], Int, Int) -> (ByteString, [MessageDeliveryTask], [MessageDeliveryTask]) + toResult :: ([ByteString], [MessageDeliveryTask], [MessageDeliveryTask], Int, Int) -> (Maybe ByteString, [MessageDeliveryTask], [MessageDeliveryTask]) toResult (msgBodies, accepted, large, _, _) = let encoded = encodeBinaryBatch (reverse msgBodies) - in (encoded, reverse accepted, reverse large) + body = if null accepted then Nothing else Just encoded + in (body, reverse accepted, reverse large) -- | Encode a batch element for relay groups: >[/]. encodeFwdElement :: GrpMsgForward -> VerifiedMsg 'Json -> ByteString diff --git a/tests/MessageBatching.hs b/tests/MessageBatching.hs index 05322a0834..00cbbd757b 100644 --- a/tests/MessageBatching.hs +++ b/tests/MessageBatching.hs @@ -12,14 +12,31 @@ import qualified Data.ByteString as B import Data.ByteString.Internal (c2w) import Data.Either (partitionEithers) import Data.Int (Int64) +import Data.List.NonEmpty (NonEmpty (..)) import Data.String (IsString (..)) import qualified Data.Text as T import Data.Text.Encoding (encodeUtf8) +import Data.Time.Clock.System (SystemTime (..), systemToUTCTime) +import Simplex.Chat.Delivery + ( DeliveryJobScope (DJSGroup, jobSpec), + DeliveryJobSpec (DJDeliveryJob, includePending), + MessageDeliveryTask (MessageDeliveryTask, brokerTs, fwdSender, jobScope, senderGMId, taskId, verifiedMsg), + deliveryTaskId, + ) import Simplex.Chat.Messages.Batch import Simplex.Chat.Controller (ChatError (..), ChatErrorType (..)) import Simplex.Chat.Messages (SndMessage (..)) -import Simplex.Chat.Protocol (maxEncodedMsgLength) -import Simplex.Chat.Types (SharedMsgId (..)) +import Simplex.Chat.Protocol + ( ChatMessage (ChatMessage), + ChatMsgEvent (XMsgNew), + FwdSender (FwdChannel), + GrpMsgForward (GrpMsgForward), + MsgContent (MCText), + VerifiedMsg (VMUnsigned), + maxEncodedMsgLength, + mcSimple, + ) +import Simplex.Chat.Types (SharedMsgId (..), chatInitialVRange) import Simplex.Messaging.Encoding (Large (..), smpEncodeList) import Test.Hspec @@ -28,6 +45,8 @@ batchingTests = describe "message batching tests" $ do testBatchingCorrectness testBinaryBatchingCorrectness it "image x.msg.new and x.msg.file.descr should fit into single batch" testImageFitsSingleBatch + it "does not create a relay delivery body when every task is oversized" testRelayBatchAllLarge + it "classifies a task that fits raw but not as a framed singleton as large" testRelayBatchSingletonOverflow instance IsString SndMessage where fromString s = SndMessage {msgId, sharedMsgId = SharedMsgId "", msgBody = s', signedMsg_ = Nothing} @@ -131,6 +150,37 @@ testImageFitsSingleBatch = do runBatcherTest' BMJson maxEncodedMsgLength [msg xMsgNewStr, msg descrStr] [] [batched] +testRelayBatchAllLarge :: IO () +testRelayBatchAllLarge = do + let task1 = deliveryTask 1 "one" + task2 = deliveryTask 2 "two" + (body_, accepted, large) = batchDeliveryTasks1 chatInitialVRange 1 (task1 :| [task2]) + body_ `shouldBe` Nothing + map deliveryTaskId accepted `shouldBe` [] + map deliveryTaskId large `shouldBe` [1, 2] + +deliveryTask :: Int64 -> T.Text -> MessageDeliveryTask +deliveryTask taskId text = + MessageDeliveryTask + { taskId, + jobScope = DJSGroup {jobSpec = DJDeliveryJob {includePending = False}}, + senderGMId = 1, + fwdSender = FwdChannel, + brokerTs = systemToUTCTime $ MkSystemTime 0 0, + verifiedMsg = + VMUnsigned + (ChatMessage chatInitialVRange Nothing $ XMsgNew $ mcSimple $ MCText text) + } + +testRelayBatchSingletonOverflow :: IO () +testRelayBatchSingletonOverflow = do + let task = deliveryTask 1 "overflow" + elemLen = B.length $ encodeFwdElement (GrpMsgForward (fwdSender task) (brokerTs task)) (verifiedMsg task) + (body_, accepted, large) = batchDeliveryTasks1 chatInitialVRange (elemLen + 2) (task :| []) + body_ `shouldBe` Nothing + map deliveryTaskId accepted `shouldBe` [] + map deliveryTaskId large `shouldBe` [1] + runBatcherTest :: BatchMode -> Int -> [SndMessage] -> [ChatError] -> [ByteString] -> Spec runBatcherTest mode maxLen msgs expectedErrors expectedBatches = it From ad23da63d0f3c5388c08a5d7db8f4e3ddf2c6915 Mon Sep 17 00:00:00 2001 From: Evgeny Date: Mon, 15 Jun 2026 22:25:08 +0100 Subject: [PATCH 13/81] core: supporter badges using anonymous BBS credentials (#7040) * core: supporter badges using anonymous BBS credentials * badges in profiles * badge in profiles * process badges * update simplexmq * update simplexmq * change types * fix migration * migration * update simplexmq * fix bot API, schema * fix postgresql build * refactor * postgresql schema * correctly set badges in all cases * badges ffi * plan, bot types * FFI * FFI: export badge symbols * add extra field * refactor badge types to GADT * configurable badge key * add badge to profile, test * ui: badge images * generate badge key and sign badge * badge sign in CLI * fix commands, ui * rename badges * Binary * image size, migration * update badge images, add public key * send badges in more cases * update UI, tests * bot types, schema * postgres schema * tone down badges * revert formula * refactor badges * smaller badges * badge position * better badge position * simpler * position * move position * update simplexmq * show badge after name * badge layout * fix badge * debug badge height * shift badge * fix badge in member name * bigger badge * badge layout * differentiate badge colors * more avatars for the user's profiles * refactor * remove color filter * alerts * multiple keys, old expired * use new BBS api * update badge keys, bot api * presentation header * simplify * parser * update iOS images * update public keys * query plans * update simplexmq * refactor badge types * simplexmq * bot api types * update simplexmq - commoncrypto flag * update simplexmq * pass commoncrypto flag to simplexmq in nix iOS build * ios ui * update core library, fixes * badge layout * badge size * badge gap * remove extensions * simplify * share badge in more events, reverify badge if verification failed * larger files with badges * allow sending larger files * simpler * update simplexmq * better decoder for badge keys * update simplexmq --------- Co-authored-by: Evgeny @ SimpleX Chat <259188159+evgeny-simplex@users.noreply.github.com> Co-authored-by: shum --- .../badge-investor.imageset/Contents.json | 21 + .../badge-investor.svg | 12 + .../badge-legend.imageset/Contents.json | 21 + .../badge-legend.imageset/badge-legend.svg | 12 + .../badge-supporter.imageset/Contents.json | 21 + .../badge-supporter.svg | 12 + .../Shared/Views/Chat/ChatInfoToolbar.swift | 2 +- apps/ios/Shared/Views/Chat/ChatInfoView.swift | 24 +- .../Views/Chat/ChatItem/CIFileView.swift | 11 +- .../Views/Chat/ChatItem/CIImageView.swift | 15 +- .../Views/Chat/ChatItem/CIVideoView.swift | 18 +- .../Views/Chat/ChatItem/FramedItemView.swift | 6 +- .../Shared/Views/Chat/ChatItemInfoView.swift | 34 +- apps/ios/Shared/Views/Chat/ChatView.swift | 12 +- .../Chat/ComposeMessage/ComposeView.swift | 4 +- .../Chat/Group/AddGroupMembersView.swift | 9 +- .../Views/Chat/Group/ChannelMembersView.swift | 2 +- .../Views/Chat/Group/GroupChatInfoView.swift | 2 +- .../Chat/Group/GroupMemberInfoView.swift | 21 +- .../Chat/Group/MemberSupportChatToolbar.swift | 2 +- .../Views/Chat/Group/MemberSupportView.swift | 2 +- .../Views/ChatList/ChatPreviewView.swift | 10 +- .../Views/ChatList/ContactRequestView.swift | 16 +- .../Shared/Views/ChatList/UserPicker.swift | 3 +- .../Views/Contacts/ContactListNavLink.swift | 10 +- apps/ios/Shared/Views/Helpers/NameBadge.swift | 174 ++++++++ .../ios/Shared/Views/Helpers/ShareSheet.swift | 14 +- .../Shared/Views/NewChat/NewChatView.swift | 10 +- .../Views/UserSettings/SettingsView.swift | 4 +- apps/ios/SimpleX.xcodeproj/project.pbxproj | 20 +- apps/ios/SimpleXChat/ChatTypes.swift | 87 +++- apps/ios/SimpleXChat/FileUtils.swift | 27 +- .../views/chatlist/UserPicker.android.kt | 3 +- .../chat/simplex/common/model/ChatModel.kt | 96 +++- .../simplex/common/views/chat/ChatInfoView.kt | 27 +- .../common/views/chat/ChatItemInfoView.kt | 18 +- .../simplex/common/views/chat/ChatView.kt | 21 +- .../simplex/common/views/chat/ComposeView.kt | 17 +- .../views/chat/group/AddGroupMembersView.kt | 5 +- .../views/chat/group/ChannelMembersView.kt | 3 +- .../views/chat/group/GroupChatInfoView.kt | 6 +- .../views/chat/group/GroupMemberInfoView.kt | 28 +- .../views/chat/group/MemberSupportChatView.kt | 4 +- .../views/chat/group/MemberSupportView.kt | 4 +- .../common/views/chat/item/CIFileView.kt | 11 +- .../common/views/chat/item/CIImageView.kt | 12 +- .../common/views/chat/item/CIVideoView.kt | 18 +- .../common/views/chat/item/ChatItemView.kt | 2 +- .../common/views/chat/item/FramedItemView.kt | 6 +- .../common/views/chatlist/ChatPreviewView.kt | 16 +- .../views/chatlist/ContactRequestView.kt | 3 +- .../views/chatlist/ShareListNavLinkView.kt | 4 +- .../common/views/chatlist/UserPicker.kt | 9 +- .../views/contacts/ContactPreviewView.kt | 6 +- .../common/views/helpers/AlertManager.kt | 15 +- .../common/views/helpers/ChatInfoImage.kt | 148 +++++++ .../simplex/common/views/helpers/Utils.kt | 25 +- .../common/views/newchat/ConnectPlan.kt | 3 + .../common/views/newchat/NewChatView.kt | 8 +- .../common/views/usersettings/SettingsView.kt | 5 +- .../commonMain/resources/MR/base/strings.xml | 8 + .../resources/MR/images/badge_investor.svg | 12 + .../resources/MR/images/badge_legend.svg | 12 + .../resources/MR/images/badge_supporter.svg | 12 + .../views/chatlist/UserPicker.desktop.kt | 21 +- apps/simplex-chat/Main.hs | 8 +- .../src/Directory/Store.hs | 61 +-- bots/api/TYPES.md | 62 ++- bots/src/API/Docs/Commands.hs | 1 + bots/src/API/Docs/Types.hs | 11 + bots/src/API/TypeInfo.hs | 4 + cabal.project | 2 +- flake.nix | 8 + libsimplex.dll.def | 2 + .../types/typescript/src/types.ts | 37 +- .../src/simplex_chat/types/_types.py | 24 +- plans/2026-06-01-supporter-badges-v1.md | 80 ++++ scripts/nix/sha256map.nix | 2 +- simplex-chat.cabal | 6 + src/Simplex/Chat.hs | 12 + src/Simplex/Chat/Badges.hs | 414 ++++++++++++++++++ src/Simplex/Chat/Badges/CLI.hs | 87 ++++ src/Simplex/Chat/Controller.hs | 7 +- src/Simplex/Chat/Core.hs | 2 +- src/Simplex/Chat/Library/Commands.hs | 113 +++-- src/Simplex/Chat/Library/Internal.hs | 55 ++- src/Simplex/Chat/Library/Subscriber.hs | 61 +-- src/Simplex/Chat/Mobile.hs | 5 + src/Simplex/Chat/Mobile/Badges.hs | 74 ++++ src/Simplex/Chat/ProfileGenerator.hs | 2 +- src/Simplex/Chat/Protocol.hs | 6 +- src/Simplex/Chat/Store/Connections.hs | 28 +- src/Simplex/Chat/Store/ContactRequest.hs | 43 +- src/Simplex/Chat/Store/Delivery.hs | 3 +- src/Simplex/Chat/Store/Direct.hs | 116 ++--- src/Simplex/Chat/Store/Groups.hs | 212 +++++---- src/Simplex/Chat/Store/Messages.hs | 48 +- src/Simplex/Chat/Store/Postgres/Migrations.hs | 4 +- .../Migrations/M20260516_supporter_badges.hs | 35 ++ .../Store/Postgres/Migrations/chat_schema.sql | 11 +- src/Simplex/Chat/Store/Profiles.hs | 95 ++-- src/Simplex/Chat/Store/SQLite/Migrations.hs | 4 +- .../Migrations/M20260516_supporter_badges.hs | 34 ++ .../SQLite/Migrations/chat_query_plans.txt | 131 ++++-- .../Store/SQLite/Migrations/chat_schema.sql | 11 +- src/Simplex/Chat/Store/Shared.hs | 80 ++-- src/Simplex/Chat/Types.hs | 56 ++- src/Simplex/Chat/View.hs | 80 +++- tests/BadgeTests.hs | 142 ++++++ tests/Bots/BroadcastTests.hs | 2 +- tests/Bots/DirectoryTests.hs | 2 +- tests/ChatTests/Profiles.hs | 235 +++++++++- tests/ChatTests/Utils.hs | 2 +- tests/MobileTests.hs | 23 + tests/ProtocolTests.hs | 4 +- tests/Test.hs | 2 + 116 files changed, 3121 insertions(+), 654 deletions(-) create mode 100644 apps/ios/Shared/Assets.xcassets/badge-investor.imageset/Contents.json create mode 100644 apps/ios/Shared/Assets.xcassets/badge-investor.imageset/badge-investor.svg create mode 100644 apps/ios/Shared/Assets.xcassets/badge-legend.imageset/Contents.json create mode 100644 apps/ios/Shared/Assets.xcassets/badge-legend.imageset/badge-legend.svg create mode 100644 apps/ios/Shared/Assets.xcassets/badge-supporter.imageset/Contents.json create mode 100644 apps/ios/Shared/Assets.xcassets/badge-supporter.imageset/badge-supporter.svg create mode 100644 apps/ios/Shared/Views/Helpers/NameBadge.swift create mode 100644 apps/multiplatform/common/src/commonMain/resources/MR/images/badge_investor.svg create mode 100644 apps/multiplatform/common/src/commonMain/resources/MR/images/badge_legend.svg create mode 100644 apps/multiplatform/common/src/commonMain/resources/MR/images/badge_supporter.svg create mode 100644 plans/2026-06-01-supporter-badges-v1.md create mode 100644 src/Simplex/Chat/Badges.hs create mode 100644 src/Simplex/Chat/Badges/CLI.hs create mode 100644 src/Simplex/Chat/Mobile/Badges.hs create mode 100644 src/Simplex/Chat/Store/Postgres/Migrations/M20260516_supporter_badges.hs create mode 100644 src/Simplex/Chat/Store/SQLite/Migrations/M20260516_supporter_badges.hs create mode 100644 tests/BadgeTests.hs diff --git a/apps/ios/Shared/Assets.xcassets/badge-investor.imageset/Contents.json b/apps/ios/Shared/Assets.xcassets/badge-investor.imageset/Contents.json new file mode 100644 index 0000000000..9d066d386e --- /dev/null +++ b/apps/ios/Shared/Assets.xcassets/badge-investor.imageset/Contents.json @@ -0,0 +1,21 @@ +{ + "images" : [ + { + "filename" : "badge-investor.svg", + "idiom" : "universal", + "scale" : "1x" + }, + { + "idiom" : "universal", + "scale" : "2x" + }, + { + "idiom" : "universal", + "scale" : "3x" + } + ], + "info" : { + "author" : "xcode", + "version" : 1 + } +} diff --git a/apps/ios/Shared/Assets.xcassets/badge-investor.imageset/badge-investor.svg b/apps/ios/Shared/Assets.xcassets/badge-investor.imageset/badge-investor.svg new file mode 100644 index 0000000000..330da9b50d --- /dev/null +++ b/apps/ios/Shared/Assets.xcassets/badge-investor.imageset/badge-investor.svg @@ -0,0 +1,12 @@ + + + + + + + + + + + + diff --git a/apps/ios/Shared/Assets.xcassets/badge-legend.imageset/Contents.json b/apps/ios/Shared/Assets.xcassets/badge-legend.imageset/Contents.json new file mode 100644 index 0000000000..b8b9a000d6 --- /dev/null +++ b/apps/ios/Shared/Assets.xcassets/badge-legend.imageset/Contents.json @@ -0,0 +1,21 @@ +{ + "images" : [ + { + "filename" : "badge-legend.svg", + "idiom" : "universal", + "scale" : "1x" + }, + { + "idiom" : "universal", + "scale" : "2x" + }, + { + "idiom" : "universal", + "scale" : "3x" + } + ], + "info" : { + "author" : "xcode", + "version" : 1 + } +} diff --git a/apps/ios/Shared/Assets.xcassets/badge-legend.imageset/badge-legend.svg b/apps/ios/Shared/Assets.xcassets/badge-legend.imageset/badge-legend.svg new file mode 100644 index 0000000000..7f892cd25c --- /dev/null +++ b/apps/ios/Shared/Assets.xcassets/badge-legend.imageset/badge-legend.svg @@ -0,0 +1,12 @@ + + + + + + + + + + + + diff --git a/apps/ios/Shared/Assets.xcassets/badge-supporter.imageset/Contents.json b/apps/ios/Shared/Assets.xcassets/badge-supporter.imageset/Contents.json new file mode 100644 index 0000000000..443575f1c7 --- /dev/null +++ b/apps/ios/Shared/Assets.xcassets/badge-supporter.imageset/Contents.json @@ -0,0 +1,21 @@ +{ + "images" : [ + { + "filename" : "badge-supporter.svg", + "idiom" : "universal", + "scale" : "1x" + }, + { + "idiom" : "universal", + "scale" : "2x" + }, + { + "idiom" : "universal", + "scale" : "3x" + } + ], + "info" : { + "author" : "xcode", + "version" : 1 + } +} diff --git a/apps/ios/Shared/Assets.xcassets/badge-supporter.imageset/badge-supporter.svg b/apps/ios/Shared/Assets.xcassets/badge-supporter.imageset/badge-supporter.svg new file mode 100644 index 0000000000..9ebdc15c11 --- /dev/null +++ b/apps/ios/Shared/Assets.xcassets/badge-supporter.imageset/badge-supporter.svg @@ -0,0 +1,12 @@ + + + + + + + + + + + + diff --git a/apps/ios/Shared/Views/Chat/ChatInfoToolbar.swift b/apps/ios/Shared/Views/Chat/ChatInfoToolbar.swift index e158b9374f..00c8d7070b 100644 --- a/apps/ios/Shared/Views/Chat/ChatInfoToolbar.swift +++ b/apps/ios/Shared/Views/Chat/ChatInfoToolbar.swift @@ -47,7 +47,7 @@ struct ChatInfoToolbar: View { } .padding(.trailing, 4) let t = Text(cInfo.displayName).font(.headline) - (cInfo.contact?.verified == true ? contactVerifiedShield + t : t) + NameWithBadge((cInfo.contact?.verified == true ? contactVerifiedShield + t : t), cInfo.nameBadge, .headline) .lineLimit(1) .if (cInfo.fullName != "" && cInfo.displayName != cInfo.fullName) { v in VStack(spacing: 0) { diff --git a/apps/ios/Shared/Views/Chat/ChatInfoView.swift b/apps/ios/Shared/Views/Chat/ChatInfoView.swift index c17d8e23a8..b21def7944 100644 --- a/apps/ios/Shared/Views/Chat/ChatInfoView.swift +++ b/apps/ios/Shared/Views/Chat/ChatInfoView.swift @@ -374,25 +374,17 @@ struct ChatInfoView: View { // show actual display name, alias can be edited in this view let displayName = contact.profile.displayName.trimmingCharacters(in: .whitespacesAndNewlines) let fullName = cInfo.fullName.trimmingCharacters(in: .whitespacesAndNewlines) - if contact.verified { - ( - Text(Image(systemName: "checkmark.shield")) - .foregroundColor(theme.colors.secondary) - .font(.title2) - + textSpace - + Text(displayName) - .font(.largeTitle) - ) + let badge = cInfo.nameBadge + // the shield is smaller (.title2) than the name (.largeTitle), so on the shared baseline it + // sits low; raise it by half the cap-height difference to center it with the capitals + let shieldRaise = (UIFont.preferredFont(forTextStyle: .largeTitle).capHeight - UIFont.preferredFont(forTextStyle: .title2).capHeight) / 2 + let nameText = contact.verified + ? Text(Image(systemName: "checkmark.shield")).foregroundColor(theme.colors.secondary).font(.title2).baselineOffset(shieldRaise) + textSpace + Text(displayName).font(.largeTitle) + : Text(displayName).font(.largeTitle) + NameWithBadge(nameText, badge, .largeTitle) { if let badge { showBadgeInfoAlert(displayName, badge) } } .multilineTextAlignment(.center) .lineLimit(2) .padding(.bottom, 2) - } else { - Text(displayName) - .font(.largeTitle) - .multilineTextAlignment(.center) - .lineLimit(2) - .padding(.bottom, 2) - } if fullName != "" && fullName != displayName && fullName != cInfo.displayName.trimmingCharacters(in: .whitespacesAndNewlines) { Text(cInfo.fullName) .font(.title2) diff --git a/apps/ios/Shared/Views/Chat/ChatItem/CIFileView.swift b/apps/ios/Shared/Views/Chat/ChatItem/CIFileView.swift index 639de1dbc9..75a5baafee 100644 --- a/apps/ios/Shared/Views/Chat/ChatItem/CIFileView.swift +++ b/apps/ios/Shared/Views/Chat/ChatItem/CIFileView.swift @@ -16,6 +16,7 @@ struct CIFileView: View { @EnvironmentObject var theme: AppTheme let file: CIFile? let edited: Bool + let senderProfile: LocalProfile? var smallViewSize: CGFloat? var body: some View { @@ -85,7 +86,7 @@ struct CIFileView: View { if let file = file { switch (file.fileStatus) { case .rcvInvitation, .rcvAborted: - if fileSizeValid(file) { + if fileSizeValid(file, senderProfile) { Task { logger.debug("CIFileView fileAction - in .rcvInvitation, .rcvAborted, in Task") if let user = m.currentUser { @@ -93,7 +94,7 @@ struct CIFileView: View { } } } else { - let prettyMaxFileSize = ByteCountFormatter.string(fromByteCount: getMaxFileSize(file.fileProtocol), countStyle: .binary) + let prettyMaxFileSize = ByteCountFormatter.string(fromByteCount: getMaxFileSize(file.fileProtocol, senderProfile), countStyle: .binary) AlertManager.shared.showAlertMsg( title: "Large file!", message: "Your contact sent a file that is larger than currently supported maximum size (\(prettyMaxFileSize))." @@ -165,7 +166,7 @@ struct CIFileView: View { case .sndError: fileIcon("doc.fill", innerIcon: "xmark", innerIconSize: 10) case .sndWarning: fileIcon("doc.fill", innerIcon: "exclamationmark.triangle.fill", innerIconSize: 10) case .rcvInvitation: - if fileSizeValid(file) { + if fileSizeValid(file, senderProfile) { fileIcon("arrow.down.doc.fill", color: theme.colors.primary) } else { fileIcon("doc.fill", color: .orange, innerIcon: "exclamationmark", innerIconSize: 12) @@ -227,9 +228,9 @@ struct CIFileView: View { } } -func fileSizeValid(_ file: CIFile?) -> Bool { +func fileSizeValid(_ file: CIFile?, _ senderProfile: LocalProfile?) -> Bool { if let file = file { - return file.fileSize <= getMaxFileSize(file.fileProtocol) + return file.fileSize <= getMaxFileSize(file.fileProtocol, senderProfile) } return false } diff --git a/apps/ios/Shared/Views/Chat/ChatItem/CIImageView.swift b/apps/ios/Shared/Views/Chat/ChatItem/CIImageView.swift index b56f1f9f2a..972e9c4ec6 100644 --- a/apps/ios/Shared/Views/Chat/ChatItem/CIImageView.swift +++ b/apps/ios/Shared/Views/Chat/ChatItem/CIImageView.swift @@ -14,6 +14,7 @@ import SimpleXChat struct CIImageView: View { @EnvironmentObject var m: ChatModel let chatItem: ChatItem + let senderProfile: LocalProfile? var scrollToItem: ((ChatItem.ID) -> Void)? = nil var preview: UIImage? let maxWidth: CGFloat @@ -51,10 +52,18 @@ struct CIImageView: View { if let file = file { switch file.fileStatus { case .rcvInvitation, .rcvAborted: - Task { - if let user = m.currentUser { - await receiveFile(user: user, fileId: file.fileId) + if fileSizeValid(file, senderProfile) { + Task { + if let user = m.currentUser { + await receiveFile(user: user, fileId: file.fileId) + } } + } else { + let prettyMaxFileSize = ByteCountFormatter.string(fromByteCount: getMaxFileSize(file.fileProtocol, senderProfile), countStyle: .binary) + AlertManager.shared.showAlertMsg( + title: "Large file!", + message: "Your contact sent a file that is larger than currently supported maximum size (\(prettyMaxFileSize))." + ) } case .rcvAccepted: switch file.fileProtocol { diff --git a/apps/ios/Shared/Views/Chat/ChatItem/CIVideoView.swift b/apps/ios/Shared/Views/Chat/ChatItem/CIVideoView.swift index e1172dab92..912fde4043 100644 --- a/apps/ios/Shared/Views/Chat/ChatItem/CIVideoView.swift +++ b/apps/ios/Shared/Views/Chat/ChatItem/CIVideoView.swift @@ -16,6 +16,7 @@ import Combine struct CIVideoView: View { @EnvironmentObject var m: ChatModel private let chatItem: ChatItem + private let senderProfile: LocalProfile? private let preview: UIImage? @State private var duration: Int @State private var progress: Int = 0 @@ -35,8 +36,9 @@ struct CIVideoView: View { private var sizeMultiplier: CGFloat { smallView ? 0.38 : 1 } @State private var blurred: Bool = UserDefaults.standard.integer(forKey: DEFAULT_PRIVACY_MEDIA_BLUR_RADIUS) > 0 - init(chatItem: ChatItem, preview: UIImage?, duration: Int, maxWidth: CGFloat, videoWidth: CGFloat?, smallView: Bool = false, showFullscreenPlayer: Binding) { + init(chatItem: ChatItem, senderProfile: LocalProfile?, preview: UIImage?, duration: Int, maxWidth: CGFloat, videoWidth: CGFloat?, smallView: Bool = false, showFullscreenPlayer: Binding) { self.chatItem = chatItem + self.senderProfile = senderProfile self.preview = preview self._duration = State(initialValue: duration) self.maxWidth = maxWidth @@ -421,10 +423,18 @@ struct CIVideoView: View { // TODO encrypt: where file size is checked? private func receiveFileIfValidSize(file: CIFile, receiveFile: @escaping (User, Int64, Bool, Bool) async -> Void) { - Task { - if let user = m.currentUser { - await receiveFile(user, file.fileId, false, false) + if fileSizeValid(file, senderProfile) { + Task { + if let user = m.currentUser { + await receiveFile(user, file.fileId, false, false) + } } + } else { + let prettyMaxFileSize = ByteCountFormatter.string(fromByteCount: getMaxFileSize(file.fileProtocol, senderProfile), countStyle: .binary) + AlertManager.shared.showAlertMsg( + title: "Large file!", + message: "Your contact sent a file that is larger than currently supported maximum size (\(prettyMaxFileSize))." + ) } } diff --git a/apps/ios/Shared/Views/Chat/ChatItem/FramedItemView.swift b/apps/ios/Shared/Views/Chat/ChatItem/FramedItemView.swift index d09289c1d5..372c7df8a3 100644 --- a/apps/ios/Shared/Views/Chat/ChatItem/FramedItemView.swift +++ b/apps/ios/Shared/Views/Chat/ChatItem/FramedItemView.swift @@ -127,7 +127,7 @@ struct FramedItemView: View { } else { switch (chatItem.content.msgContent) { case let .image(text, _): - CIImageView(chatItem: chatItem, scrollToItem: scrollToItem, preview: preview, maxWidth: maxWidth, imgWidth: imgWidth, showFullScreenImage: $showFullscreenGallery) + CIImageView(chatItem: chatItem, senderProfile: ciSenderProfile(chatItem, chat.chatInfo), scrollToItem: scrollToItem, preview: preview, maxWidth: maxWidth, imgWidth: imgWidth, showFullScreenImage: $showFullscreenGallery) .overlay(DetermineWidth()) if text == "" && !chatItem.meta.isLive { Color.clear @@ -142,7 +142,7 @@ struct FramedItemView: View { ciMsgContentView(chatItem) } case let .video(text, _, duration): - CIVideoView(chatItem: chatItem, preview: preview, duration: duration, maxWidth: maxWidth, videoWidth: videoWidth, showFullscreenPlayer: $showFullscreenGallery) + CIVideoView(chatItem: chatItem, senderProfile: ciSenderProfile(chatItem, chat.chatInfo), preview: preview, duration: duration, maxWidth: maxWidth, videoWidth: videoWidth, showFullscreenPlayer: $showFullscreenGallery) .overlay(DetermineWidth()) if text == "" && !chatItem.meta.isLive { Color.clear @@ -349,7 +349,7 @@ struct FramedItemView: View { } @ViewBuilder private func ciFileView(_ ci: ChatItem, _ text: String) -> some View { - CIFileView(file: chatItem.file, edited: chatItem.meta.itemEdited) + CIFileView(file: chatItem.file, edited: chatItem.meta.itemEdited, senderProfile: ciSenderProfile(chatItem, chat.chatInfo)) .overlay(DetermineWidth()) if text != "" || ci.meta.isLive { ciMsgContentView (chatItem) diff --git a/apps/ios/Shared/Views/Chat/ChatItemInfoView.swift b/apps/ios/Shared/Views/Chat/ChatItemInfoView.swift index 3858d15252..bd0e549d38 100644 --- a/apps/ios/Shared/Views/Chat/ChatItemInfoView.swift +++ b/apps/ios/Shared/Views/Chat/ChatItemInfoView.swift @@ -387,23 +387,31 @@ struct ChatItemInfoView: View { Text("you") .italic() .foregroundColor(theme.colors.onBackground) - Text(forwardedFromItem.chatInfo.chatViewName) - .foregroundColor(theme.colors.secondary) - .lineLimit(1) + NameWithBadge( + Text(forwardedFromItem.chatInfo.chatViewName).foregroundColor(theme.colors.secondary), + forwardedFromItem.chatInfo.nameBadge + ) + .lineLimit(1) } } else if case let .groupRcv(groupMember) = forwardedFromItem.chatItem.chatDir { VStack(alignment: .leading) { - Text(groupMember.chatViewName) - .foregroundColor(theme.colors.onBackground) - .lineLimit(1) - Text(forwardedFromItem.chatInfo.chatViewName) - .foregroundColor(theme.colors.secondary) - .lineLimit(1) + NameWithBadge( + Text(groupMember.chatViewName).foregroundColor(theme.colors.onBackground), + groupMember.nameBadge + ) + .lineLimit(1) + NameWithBadge( + Text(forwardedFromItem.chatInfo.chatViewName).foregroundColor(theme.colors.secondary), + forwardedFromItem.chatInfo.nameBadge + ) + .lineLimit(1) } } else { - Text(forwardedFromItem.chatInfo.chatViewName) - .foregroundColor(theme.colors.onBackground) - .lineLimit(1) + NameWithBadge( + Text(forwardedFromItem.chatInfo.chatViewName).foregroundColor(theme.colors.onBackground), + forwardedFromItem.chatInfo.nameBadge + ) + .lineLimit(1) } } } @@ -451,7 +459,7 @@ struct ChatItemInfoView: View { HStack{ MemberProfileImage(member, size: 30) .padding(.trailing, 2) - Text(member.chatViewName) + NameWithBadge(Text(member.chatViewName), member.nameBadge) .lineLimit(1) Spacer() if sentViaProxy == true { diff --git a/apps/ios/Shared/Views/Chat/ChatView.swift b/apps/ios/Shared/Views/Chat/ChatView.swift index 66148034df..efe26fdf89 100644 --- a/apps/ios/Shared/Views/Chat/ChatView.swift +++ b/apps/ios/Shared/Views/Chat/ChatView.swift @@ -981,8 +981,8 @@ struct ChatView: View { let v = VStack(spacing: 8) { ChatInfoImage(chat: chat, size: alertProfileImageSize) - Text(chat.chatInfo.displayName) - .font(.title3) + let badge = chat.chatInfo.nameBadge + NameWithBadge(Text(chat.chatInfo.displayName).font(.title3), badge, .title3) { if let badge { showBadgeInfoAlert(chat.chatInfo.displayName, badge) } } .multilineTextAlignment(.center) .lineLimit(2) .fixedSize(horizontal: false, vertical: true) @@ -2003,7 +2003,7 @@ struct ChatView: View { Group { if #available(iOS 16.0, *) { MemberLayout(spacing: 16, msgWidth: msgWidth) { - Text(name) + NameWithBadge(Text(name), ci.meta.showGroupAsSender ? nil : member.nameBadge, .caption1) .lineLimit(1) Text(role) .fontWeight(.semibold) @@ -2012,7 +2012,7 @@ struct ChatView: View { } } else { HStack(spacing: 16) { - Text(name) + NameWithBadge(Text(name), ci.meta.showGroupAsSender ? nil : member.nameBadge, .caption1) .lineLimit(1) Text(role) .fontWeight(.semibold) @@ -2026,7 +2026,7 @@ struct ChatView: View { alignment: chatItem.chatDir.sent ? .trailing : .leading ) } else { - Text(memberNames(member, prevMember, memCount)) + NameWithBadge(Text(memberNames(member, prevMember, memCount)), memCount == 1 ? member.nameBadge : nil, .caption1) .lineLimit(2) } } @@ -2311,7 +2311,7 @@ struct ChatView: View { } else { saveButton(file: fileSource) } - } else if let file = ci.file, case .rcvInvitation = file.fileStatus, fileSizeValid(file) { + } else if let file = ci.file, case .rcvInvitation = file.fileStatus, fileSizeValid(file, ciSenderProfile(ci, chat.chatInfo)) { downloadButton(file: file) } if ci.meta.editable && !mc.isVoice && !live { diff --git a/apps/ios/Shared/Views/Chat/ComposeMessage/ComposeView.swift b/apps/ios/Shared/Views/Chat/ComposeMessage/ComposeView.swift index 5242923258..e308a145b9 100644 --- a/apps/ios/Shared/Views/Chat/ComposeMessage/ComposeView.swift +++ b/apps/ios/Shared/Views/Chat/ComposeMessage/ComposeView.swift @@ -1247,7 +1247,9 @@ struct ComposeView: View { } private var maxFileSize: Int64 { - getMaxFileSize(.xftp) + // the user's active badge raises the limit, but not in incognito chats where no badge is presented + let incognito = chat.chatInfo.profileChangeProhibited ? chat.chatInfo.incognito : incognitoDefault + return getMaxFileSize(.xftp, incognito ? nil : chatModel.currentUser?.profile) } // Spec: spec/client/compose.md#sendLiveMessage diff --git a/apps/ios/Shared/Views/Chat/Group/AddGroupMembersView.swift b/apps/ios/Shared/Views/Chat/Group/AddGroupMembersView.swift index 6b18c0c5ef..b59fd51fe8 100644 --- a/apps/ios/Shared/Views/Chat/Group/AddGroupMembersView.swift +++ b/apps/ios/Shared/Views/Chat/Group/AddGroupMembersView.swift @@ -220,9 +220,12 @@ struct AddGroupMembersViewCommon: View { HStack{ ProfileImage(imageStr: contact.image, size: 30) .padding(.trailing, 2) - Text(ChatInfo.direct(contact: contact).chatViewName) - .foregroundColor(prohibitedToInviteIncognito ? theme.colors.secondary : theme.colors.onBackground) - .lineLimit(1) + NameWithBadge( + Text(ChatInfo.direct(contact: contact).chatViewName) + .foregroundColor(prohibitedToInviteIncognito ? theme.colors.secondary : theme.colors.onBackground), + contact.active ? contact.profile.localBadge : nil + ) + .lineLimit(1) Spacer() Image(systemName: icon) .foregroundColor(iconColor) diff --git a/apps/ios/Shared/Views/Chat/Group/ChannelMembersView.swift b/apps/ios/Shared/Views/Chat/Group/ChannelMembersView.swift index abcadc6c3f..50144e2bc5 100644 --- a/apps/ios/Shared/Views/Chat/Group/ChannelMembersView.swift +++ b/apps/ios/Shared/Views/Chat/Group/ChannelMembersView.swift @@ -56,7 +56,7 @@ struct ChannelMembersView: View { MemberProfileImage(member, size: 38) .padding(.trailing, 2) VStack(alignment: .leading) { - displayName + NameWithBadge(displayName, member.nameBadge) .lineLimit(1) if user { Text("you") diff --git a/apps/ios/Shared/Views/Chat/Group/GroupChatInfoView.swift b/apps/ios/Shared/Views/Chat/Group/GroupChatInfoView.swift index 0a448a2772..da895b325c 100644 --- a/apps/ios/Shared/Views/Chat/Group/GroupChatInfoView.swift +++ b/apps/ios/Shared/Views/Chat/Group/GroupChatInfoView.swift @@ -502,7 +502,7 @@ struct GroupChatInfoView: View { // TODO server connection status VStack(alignment: .leading) { let t = Text(member.chatViewName).foregroundColor(member.memberIncognito ? .indigo : theme.colors.onBackground) - (member.verified ? memberVerifiedShield + t : t) + NameWithBadge((member.verified ? memberVerifiedShield + t : t), member.nameBadge) .lineLimit(1) (user ? Text ("you: ") + Text(member.memberStatus.shortText) : Text(memberConnStatus(member))) .lineLimit(1) diff --git a/apps/ios/Shared/Views/Chat/Group/GroupMemberInfoView.swift b/apps/ios/Shared/Views/Chat/Group/GroupMemberInfoView.swift index dc14c7520b..28693e8d8a 100644 --- a/apps/ios/Shared/Views/Chat/Group/GroupMemberInfoView.swift +++ b/apps/ios/Shared/Views/Chat/Group/GroupMemberInfoView.swift @@ -522,25 +522,14 @@ struct GroupMemberInfoView: View { // show alias if set, alias cannot be edited in this view let displayName = mem.displayName.trimmingCharacters(in: .whitespacesAndNewlines) let fullName = mem.fullName.trimmingCharacters(in: .whitespacesAndNewlines) - if mem.verified { - ( - Text(Image(systemName: "checkmark.shield")) - .foregroundColor(theme.colors.secondary) - .font(.title2) - + textSpace - + Text(displayName) - .font(.largeTitle) - ) + let badge = mem.nameBadge + let nameText = mem.verified + ? Text(Image(systemName: "checkmark.shield")).foregroundColor(theme.colors.secondary).font(.title2) + textSpace + Text(displayName).font(.largeTitle) + : Text(displayName).font(.largeTitle) + NameWithBadge(nameText, badge, .largeTitle) { if let badge { showBadgeInfoAlert(displayName, badge) } } .multilineTextAlignment(.center) .lineLimit(2) .padding(.bottom, 2) - } else { - Text(displayName) - .font(.largeTitle) - .multilineTextAlignment(.center) - .lineLimit(2) - .padding(.bottom, 2) - } if fullName != "" && fullName != displayName && fullName != mem.memberProfile.displayName.trimmingCharacters(in: .whitespacesAndNewlines) { Text(mem.fullName) .font(.title2) diff --git a/apps/ios/Shared/Views/Chat/Group/MemberSupportChatToolbar.swift b/apps/ios/Shared/Views/Chat/Group/MemberSupportChatToolbar.swift index 23001e64bf..74cb702d21 100644 --- a/apps/ios/Shared/Views/Chat/Group/MemberSupportChatToolbar.swift +++ b/apps/ios/Shared/Views/Chat/Group/MemberSupportChatToolbar.swift @@ -20,7 +20,7 @@ struct MemberSupportChatToolbar: View { MemberProfileImage(groupMember, size: imageSize) .padding(.trailing, 4) let t = Text(groupMember.chatViewName).font(.headline) - (groupMember.verified ? memberVerifiedShield + t : t) + NameWithBadge((groupMember.verified ? memberVerifiedShield + t : t), groupMember.nameBadge, .headline) .lineLimit(1) } .foregroundColor(theme.colors.onBackground) diff --git a/apps/ios/Shared/Views/Chat/Group/MemberSupportView.swift b/apps/ios/Shared/Views/Chat/Group/MemberSupportView.swift index 880933985c..0263a39a90 100644 --- a/apps/ios/Shared/Views/Chat/Group/MemberSupportView.swift +++ b/apps/ios/Shared/Views/Chat/Group/MemberSupportView.swift @@ -172,7 +172,7 @@ struct MemberSupportView: View { .padding(.trailing, 2) VStack(alignment: .leading) { let t = Text(member.chatViewName).foregroundColor(theme.colors.onBackground) - (member.verified ? memberVerifiedShield + t : t) + NameWithBadge((member.verified ? memberVerifiedShield + t : t), member.nameBadge) .lineLimit(1) Text(memberStatus(member)) .lineLimit(1) diff --git a/apps/ios/Shared/Views/ChatList/ChatPreviewView.swift b/apps/ios/Shared/Views/ChatList/ChatPreviewView.swift index 243d804685..a6e7fc5870 100644 --- a/apps/ios/Shared/Views/ChatList/ChatPreviewView.swift +++ b/apps/ios/Shared/Views/ChatList/ChatPreviewView.swift @@ -173,7 +173,9 @@ struct ChatPreviewView: View { : !contact.sndReady ? theme.colors.secondary : nil - previewTitle(contact.verified == true ? verifiedIcon + t : t).foregroundColor(color) + NameWithBadge((contact.verified == true ? verifiedIcon + t : t).foregroundColor(color), chat.chatInfo.nameBadge, .title3) + .lineLimit(1) + .frame(alignment: .topLeading) case let .group(groupInfo, _): let color = if deleting { theme.colors.secondary @@ -424,11 +426,11 @@ struct ChatPreviewView: View { } case let .image(_, image): smallContentPreview(size: dynamicMediaSize) { - CIImageView(chatItem: ci, preview: imageFromBase64(image), maxWidth: dynamicMediaSize, smallView: true, showFullScreenImage: $showFullscreenGallery) + CIImageView(chatItem: ci, senderProfile: ciSenderProfile(ci, chat.chatInfo), preview: imageFromBase64(image), maxWidth: dynamicMediaSize, smallView: true, showFullScreenImage: $showFullscreenGallery) } case let .video(_,image, duration): smallContentPreview(size: dynamicMediaSize) { - CIVideoView(chatItem: ci, preview: imageFromBase64(image), duration: duration, maxWidth: dynamicMediaSize, videoWidth: nil, smallView: true, showFullscreenPlayer: $showFullscreenGallery) + CIVideoView(chatItem: ci, senderProfile: ciSenderProfile(ci, chat.chatInfo), preview: imageFromBase64(image), duration: duration, maxWidth: dynamicMediaSize, videoWidth: nil, smallView: true, showFullscreenPlayer: $showFullscreenGallery) } case let .voice(_, duration): smallContentPreviewVoice(size: dynamicMediaSize) { @@ -436,7 +438,7 @@ struct ChatPreviewView: View { } case .file: smallContentPreviewFile(size: dynamicMediaSize) { - CIFileView(file: ci.file, edited: ci.meta.itemEdited, smallViewSize: dynamicMediaSize) + CIFileView(file: ci.file, edited: ci.meta.itemEdited, senderProfile: ciSenderProfile(ci, chat.chatInfo), smallViewSize: dynamicMediaSize) } case let .chat(_, chatLink, ownerSig): smallContentPreview(size: dynamicMediaSize, borderColor: chatLink.image != nil ? .secondary : .clear) { diff --git a/apps/ios/Shared/Views/ChatList/ContactRequestView.swift b/apps/ios/Shared/Views/ChatList/ContactRequestView.swift index 9276bbfc78..341bc10655 100644 --- a/apps/ios/Shared/Views/ChatList/ContactRequestView.swift +++ b/apps/ios/Shared/Views/ChatList/ContactRequestView.swift @@ -22,12 +22,16 @@ struct ContactRequestView: View { .padding(.leading, 4) VStack(alignment: .leading, spacing: 0) { HStack(alignment: .top) { - Text(contactRequest.chatViewName) - .font(.title3) - .fontWeight(.bold) - .foregroundColor(theme.colors.primary) - .padding(.leading, 8) - .frame(alignment: .topLeading) + NameWithBadge( + Text(contactRequest.chatViewName) + .font(.title3) + .fontWeight(.bold) + .foregroundColor(theme.colors.primary), + chat.chatInfo.nameBadge, + .title3 + ) + .padding(.leading, 8) + .frame(alignment: .topLeading) Spacer() formatTimestampText(contactRequest.updatedAt) .font(.subheadline) diff --git a/apps/ios/Shared/Views/ChatList/UserPicker.swift b/apps/ios/Shared/Views/ChatList/UserPicker.swift index 63d28e3624..8c230dc56a 100644 --- a/apps/ios/Shared/Views/ChatList/UserPicker.swift +++ b/apps/ios/Shared/Views/ChatList/UserPicker.swift @@ -129,7 +129,8 @@ struct UserPicker: View { } } .padding(.trailing, 6) - Text(u.user.displayName).font(.title2).lineLimit(1) + NameWithBadge(Text(u.user.displayName).font(.title2), u.user.profile.localBadge, .title2) + .lineLimit(1) } .padding(rowPadding) .modifier(ListRow { diff --git a/apps/ios/Shared/Views/Contacts/ContactListNavLink.swift b/apps/ios/Shared/Views/Contacts/ContactListNavLink.swift index fcfcde2c07..9214e3ecde 100644 --- a/apps/ios/Shared/Views/Contacts/ContactListNavLink.swift +++ b/apps/ios/Shared/Views/Contacts/ContactListNavLink.swift @@ -200,10 +200,9 @@ struct ContactListNavLink: View { private func previewTitle(_ contact: Contact, titleColor: Color) -> some View { let t = Text(chat.chatInfo.chatViewName).foregroundColor(titleColor) - return ( - contact.verified == true - ? verifiedIcon + t - : t + return NameWithBadge( + contact.verified == true ? verifiedIcon + t : t, + chat.chatInfo.nameBadge ) .lineLimit(1) } @@ -318,8 +317,7 @@ struct ContactListNavLink: View { HStack{ ProfileImage(imageStr: chat.chatInfo.image, size: 30) - Text(chat.chatInfo.chatViewName) - .foregroundColor(color) + NameWithBadge(Text(chat.chatInfo.chatViewName).foregroundColor(color), chat.chatInfo.nameBadge) .lineLimit(1) Spacer() diff --git a/apps/ios/Shared/Views/Helpers/NameBadge.swift b/apps/ios/Shared/Views/Helpers/NameBadge.swift new file mode 100644 index 0000000000..67f6d6d6b2 --- /dev/null +++ b/apps/ios/Shared/Views/Helpers/NameBadge.swift @@ -0,0 +1,174 @@ +// +// NameBadge.swift +// SimpleX +// +// Copyright © 2026 SimpleX Chat. All rights reserved. +// + +import SwiftUI +import SimpleXChat + +// The badge is sized to a fraction of the font size (em), NOT the font's cap-height metric: the metric +// underestimates the rendered capital letters, so a cap-height-tall badge looks too small. These ratios +// are calibrated visually to match caps - the same constants as the Compose (Android/desktop) app. +private let fontCapHeightRatio: CGFloat = 0.85 +// fraction of the badge height pushed below the text baseline (like the undershoot of round letters) +private let badgeBaselineOffsetRatio: CGFloat = 0.05 + +// A contact/member name with the supporter badge right after it. The name keeps its own styling +// (font, weight, color, even a verification shield concatenated into the Text); the badge is sized to +// the given text style and sits on the name's baseline. Use this everywhere a name may carry a badge. +// Pass onTap to make the badge open the info alert. The badge hides itself for a nil/long-expired badge. +struct NameWithBadge: View { + let name: Text + var badge: LocalBadge? + var textStyle: UIFont.TextStyle = .body + var onTap: (() -> Void)? = nil + + init(_ name: Text, _ badge: LocalBadge?, _ textStyle: UIFont.TextStyle = .body, onTap: (() -> Void)? = nil) { + self.name = name + self.badge = badge + self.textStyle = textStyle + self.onTap = onTap + } + + var body: some View { + HStack(alignment: .firstTextBaseline, spacing: 0) { + name + NameBadge(badge, textStyle, onTap: onTap) + } + } +} + +// The badge glyph alone, sized to the given text style and sitting on the text baseline in an +// HStack(alignment: .firstTextBaseline). Renders nothing for a nil badge or a long-expired one +// (ExpiredOld); a failed or unknown-key badge shows a warning glyph. Prefer NameWithBadge; use this +// directly only where the name is not a single Text. Pass onTap to open the badge info alert. +struct NameBadge: View { + var badge: LocalBadge? + var textStyle: UIFont.TextStyle = .body + var onTap: (() -> Void)? = nil + + init(_ badge: LocalBadge?, _ textStyle: UIFont.TextStyle = .body, onTap: (() -> Void)? = nil) { + self.badge = badge + self.textStyle = textStyle + self.onTap = onTap + } + + var body: some View { + if let badge, badge.status != .expiredOld { + // the leading padding is the gap to the name; it lives here so an absent badge adds no gap. + // the alignment guide pushes the badge bottom slightly below the baseline (round-letter undershoot) + let v = glyph(badge) + .frame(height: badgeHeight) + .alignmentGuide(.firstTextBaseline) { $0.height * (1 - badgeBaselineOffsetRatio) } + .padding(.leading, badgeGap) + if let onTap { + v.onTapGesture(perform: onTap) + } else { + v + } + } + } + + private var badgeHeight: CGFloat { + UIFont.preferredFont(forTextStyle: textStyle).pointSize * fontCapHeightRatio + } + + // the gap to the name, matching the verification shield's gap (textSpace - one space in the name's font) + private var badgeGap: CGFloat { + let font = UIFont.preferredFont(forTextStyle: textStyle) + return (" " as NSString).size(withAttributes: [.font: font]).width + } + + @ViewBuilder private func glyph(_ badge: LocalBadge) -> some View { + switch badge.status { + case .failed, .unknownKey: + Image(systemName: "exclamationmark.triangle.fill") + .resizable().scaledToFit() + .foregroundColor(.orange) + default: + Image(badgeImageName(badge.badge.badgeType)) + .resizable().scaledToFit() + .opacity(badge.status == .expired ? 0.4 : 1) + } + } +} + +private func badgeImageName(_ t: BadgeType) -> String { + switch t { + case .legend: "badge-legend" + case .investor: "badge-investor" + default: "badge-supporter" // supporter + unknown + } +} + +// The badge as an inline attachment for a UIKit label, for the custom alert where the name is a UILabel +// and the SwiftUI NameBadge can't be used. Sized to the font's cap height with its bottom on the baseline, +// preceded by a space for the gap to the name. Returns nil for a nil/long-expired badge. Mirrors NameBadge's glyph. +func nameBadgeAttachment(_ badge: LocalBadge?, font: UIFont) -> NSAttributedString? { + guard let badge, badge.status != .expiredOld else { return nil } + var image: UIImage? + switch badge.status { + case .failed, .unknownKey: + image = UIImage(systemName: "exclamationmark.triangle.fill")? + .withTintColor(.systemOrange, renderingMode: .alwaysOriginal) + default: + image = UIImage(named: badgeImageName(badge.badge.badgeType)) + if badge.status == .expired, let img = image { + // a recently expired badge is dimmed, matching NameBadge's 0.4 opacity + image = UIGraphicsImageRenderer(size: img.size).image { _ in + img.draw(at: .zero, blendMode: .normal, alpha: 0.4) + } + } + } + guard let image else { return nil } + let attachment = NSTextAttachment() + attachment.image = image + let h = font.pointSize * fontCapHeightRatio + // text coordinates: a negative y drops the image below the baseline by badgeBaselineOffsetRatio of its height + attachment.bounds = CGRect(x: 0, y: -h * badgeBaselineOffsetRatio, width: h * image.size.width / image.size.height, height: h) + let s = NSMutableAttributedString(string: " ") // the gap to the name + s.append(NSAttributedString(attachment: attachment)) + return s +} + +func showBadgeInfoAlert(_ name: String, _ badge: LocalBadge) { + switch badge.status { + case .failed: + showAlert( + NSLocalizedString("Unverified badge", comment: "badge alert title"), + message: NSLocalizedString("This badge could not be verified and may not be genuine.", comment: "badge alert") + ) + case .unknownKey: + showAlert( + NSLocalizedString("Badge cannot be verified", comment: "badge alert title"), + message: NSLocalizedString("The badge is signed with a key that this version of the app does not recognize. Update the app to verify this badge.", comment: "badge alert") + ) + default: + // a verified badge's type is signed and can't be faked, so the real (possibly unknown) type name is the title + let t = badge.badge.badgeType.text + let title = t.prefix(1).uppercased() + t.dropFirst() + if case .investor = badge.badge.badgeType { + let message = String.localizedStringWithFormat(NSLocalizedString("%@ invested in SimpleX Chat crowdfunding.", comment: "badge alert"), name) + showAlert(title, message: message) { + [ UIAlertAction(title: NSLocalizedString("Learn more", comment: "badge alert button"), style: .default) { _ in + if let url = URL(string: "https://simplex.chat/crowdfunding") { + UIApplication.shared.open(url) + } + }, + okAlertAction ] + } + } else { + // supporter, legend and unknown types use the supporter wording + let supports = + if badge.status == .expired, let expiry = badge.badge.badgeExpiry { + String.localizedStringWithFormat(NSLocalizedString("%1$@ supported SimpleX Chat. The badge expired on %2$@.", comment: "badge alert"), name, expiry.formatted(date: .abbreviated, time: .omitted)) + } else { + String.localizedStringWithFormat(NSLocalizedString("%@ supports SimpleX Chat.", comment: "badge alert"), name) + } + let v7 = NSLocalizedString("You can support SimpleX starting from v7 of the app.", comment: "badge alert") + showAlert(title, message: supports + "\n\n" + v7) + } + } +} diff --git a/apps/ios/Shared/Views/Helpers/ShareSheet.swift b/apps/ios/Shared/Views/Helpers/ShareSheet.swift index 9f2fc833ba..82d17cd2b1 100644 --- a/apps/ios/Shared/Views/Helpers/ShareSheet.swift +++ b/apps/ios/Shared/Views/Helpers/ShareSheet.swift @@ -7,6 +7,7 @@ // import SwiftUI +import SimpleXChat func getTopViewController() -> UIViewController? { let keyWindowScene = UIApplication.shared.connectedScenes.first { $0.activationState == .foregroundActive } as? UIWindowScene @@ -134,6 +135,7 @@ class OpenChatAlertViewController: UIViewController { private let profileName: String private let profileFullName: String private let profileImage: UIView + private let profileBadge: LocalBadge? private let subtitle: String? private let information: String? private let cancelTitle: String @@ -145,6 +147,7 @@ class OpenChatAlertViewController: UIViewController { profileName: String, profileFullName: String, profileImage: UIView, + profileBadge: LocalBadge? = nil, subtitle: String? = nil, information: String? = nil, cancelTitle: String = "Cancel", @@ -155,6 +158,7 @@ class OpenChatAlertViewController: UIViewController { self.profileName = profileName self.profileFullName = profileFullName self.profileImage = profileImage + self.profileBadge = profileBadge self.subtitle = subtitle self.information = information self.cancelTitle = cancelTitle @@ -190,12 +194,18 @@ class OpenChatAlertViewController: UIViewController { // Name label let nameLabel = UILabel() - nameLabel.text = profileName nameLabel.font = UIFont.preferredFont(forTextStyle: .headline) nameLabel.textColor = .label nameLabel.numberOfLines = 2 nameLabel.textAlignment = .center nameLabel.translatesAutoresizingMaskIntoConstraints = false + if let badge = nameBadgeAttachment(profileBadge, font: nameLabel.font) { + let s = NSMutableAttributedString(string: profileName) + s.append(badge) + nameLabel.attributedText = s + } else { + nameLabel.text = profileName + } var profileViews = [profileImage, nameLabel] @@ -365,6 +375,7 @@ func showOpenChatAlert( profileName: String, profileFullName: String, profileImage: Content, + profileBadge: LocalBadge? = nil, theme: AppTheme, subtitle: String? = nil, information: String? = nil, @@ -383,6 +394,7 @@ func showOpenChatAlert( profileName: profileName, profileFullName: profileFullName, profileImage: hostedView, + profileBadge: profileBadge, subtitle: subtitle, information: information, cancelTitle: cancelTitle, diff --git a/apps/ios/Shared/Views/NewChat/NewChatView.swift b/apps/ios/Shared/Views/NewChat/NewChatView.swift index 4a7e50d7d2..67fd353ebc 100644 --- a/apps/ios/Shared/Views/NewChat/NewChatView.swift +++ b/apps/ios/Shared/Views/NewChat/NewChatView.swift @@ -560,9 +560,11 @@ private struct ActiveProfilePicker: View { HStack { ProfileImage(imageStr: user.image, size: 30) .padding(.trailing, 2) - Text(user.chatViewName) - .foregroundColor(theme.colors.onBackground) - .lineLimit(1) + NameWithBadge( + Text(user.chatViewName).foregroundColor(theme.colors.onBackground), + user.profile.localBadge + ) + .lineLimit(1) Spacer() if selectedProfile == user, !incognitoEnabled { Image(systemName: "checkmark") @@ -1160,6 +1162,7 @@ private func showPrepareContactAlert( : "person.crop.circle.fill", size: alertProfileImageSize ), + profileBadge: contactShortLinkData.localBadge, theme: theme, information: ownerVerificationMessage(ownerVerification), cancelTitle: NSLocalizedString("Cancel", comment: "new chat action"), @@ -1253,6 +1256,7 @@ private func showOpenKnownContactAlert( iconName: contact.chatIconName, size: alertProfileImageSize ), + profileBadge: contact.active ? contact.profile.localBadge : nil, theme: theme, cancelTitle: NSLocalizedString("Cancel", comment: "new chat action"), confirmTitle: diff --git a/apps/ios/Shared/Views/UserSettings/SettingsView.swift b/apps/ios/Shared/Views/UserSettings/SettingsView.swift index a903329454..c1bc699261 100644 --- a/apps/ios/Shared/Views/UserSettings/SettingsView.swift +++ b/apps/ios/Shared/Views/UserSettings/SettingsView.swift @@ -526,12 +526,14 @@ func settingsRow(_ icon: String, color: Color/* = .secondary*/, struct ProfilePreview: View { var profileOf: NamedChat var color = Color(uiColor: .tertiarySystemGroupedBackground) + var badge: LocalBadge? = nil var body: some View { HStack { ProfileImage(imageStr: profileOf.image, size: 44, color: color) .padding(.trailing, 6) - profileName(profileOf).lineLimit(1) + NameWithBadge(profileName(profileOf), badge, .title2) + .lineLimit(1) } } } diff --git a/apps/ios/SimpleX.xcodeproj/project.pbxproj b/apps/ios/SimpleX.xcodeproj/project.pbxproj index 2728f031b3..e2915963e4 100644 --- a/apps/ios/SimpleX.xcodeproj/project.pbxproj +++ b/apps/ios/SimpleX.xcodeproj/project.pbxproj @@ -59,6 +59,7 @@ 5C7505A227B65FDB00BE3227 /* CIMetaView.swift in Sources */ = {isa = PBXBuildFile; fileRef = 5C7505A127B65FDB00BE3227 /* CIMetaView.swift */; }; 5C7505A527B679EE00BE3227 /* NavLinkPlain.swift in Sources */ = {isa = PBXBuildFile; fileRef = 5C7505A427B679EE00BE3227 /* NavLinkPlain.swift */; }; 5C7505A827B6D34800BE3227 /* ChatInfoToolbar.swift in Sources */ = {isa = PBXBuildFile; fileRef = 5C7505A727B6D34800BE3227 /* ChatInfoToolbar.swift */; }; + CE11BADE0000000000000002 /* NameBadge.swift in Sources */ = {isa = PBXBuildFile; fileRef = CE11BADE0000000000000001 /* NameBadge.swift */; }; 5C764E89279CBCB3000C6508 /* ChatModel.swift in Sources */ = {isa = PBXBuildFile; fileRef = 5C764E88279CBCB3000C6508 /* ChatModel.swift */; }; 5C8F01CD27A6F0D8007D2C8D /* CodeScanner in Frameworks */ = {isa = PBXBuildFile; productRef = 5C8F01CC27A6F0D8007D2C8D /* CodeScanner */; }; 5C93292F29239A170090FFF9 /* ProtocolServersView.swift in Sources */ = {isa = PBXBuildFile; fileRef = 5C93292E29239A170090FFF9 /* ProtocolServersView.swift */; }; @@ -183,8 +184,8 @@ 64C3B0212A0D359700E19930 /* CustomTimePicker.swift in Sources */ = {isa = PBXBuildFile; fileRef = 64C3B0202A0D359700E19930 /* CustomTimePicker.swift */; }; 64C8299D2D54AEEE006B9E89 /* libgmp.a in Frameworks */ = {isa = PBXBuildFile; fileRef = 64C829982D54AEED006B9E89 /* libgmp.a */; }; 64C8299E2D54AEEE006B9E89 /* libffi.a in Frameworks */ = {isa = PBXBuildFile; fileRef = 64C829992D54AEEE006B9E89 /* libffi.a */; }; - 64C8299F2D54AEEE006B9E89 /* libHSsimplex-chat-6.5.4.1-Gci0HSXijHT9PyNdCZeAwi-ghc9.6.3.a in Frameworks */ = {isa = PBXBuildFile; fileRef = 64C8299A2D54AEEE006B9E89 /* libHSsimplex-chat-6.5.4.1-Gci0HSXijHT9PyNdCZeAwi-ghc9.6.3.a */; }; - 64C829A02D54AEEE006B9E89 /* libHSsimplex-chat-6.5.4.1-Gci0HSXijHT9PyNdCZeAwi.a in Frameworks */ = {isa = PBXBuildFile; fileRef = 64C8299B2D54AEEE006B9E89 /* libHSsimplex-chat-6.5.4.1-Gci0HSXijHT9PyNdCZeAwi.a */; }; + 64C8299F2D54AEEE006B9E89 /* libHSsimplex-chat-6.5.4.1-3s3jwLbCMWj9Jo7I40UgTa-ghc9.6.3.a in Frameworks */ = {isa = PBXBuildFile; fileRef = 64C8299A2D54AEEE006B9E89 /* libHSsimplex-chat-6.5.4.1-3s3jwLbCMWj9Jo7I40UgTa-ghc9.6.3.a */; }; + 64C829A02D54AEEE006B9E89 /* libHSsimplex-chat-6.5.4.1-3s3jwLbCMWj9Jo7I40UgTa.a in Frameworks */ = {isa = PBXBuildFile; fileRef = 64C8299B2D54AEEE006B9E89 /* libHSsimplex-chat-6.5.4.1-3s3jwLbCMWj9Jo7I40UgTa.a */; }; 64C829A12D54AEEE006B9E89 /* libgmpxx.a in Frameworks */ = {isa = PBXBuildFile; fileRef = 64C8299C2D54AEEE006B9E89 /* libgmpxx.a */; }; 64D0C2C029F9688300B38D5F /* UserAddressView.swift in Sources */ = {isa = PBXBuildFile; fileRef = 64D0C2BF29F9688300B38D5F /* UserAddressView.swift */; }; 64D0C2C229FA57AB00B38D5F /* UserAddressLearnMore.swift in Sources */ = {isa = PBXBuildFile; fileRef = 64D0C2C129FA57AB00B38D5F /* UserAddressLearnMore.swift */; }; @@ -413,6 +414,7 @@ 5C7505A127B65FDB00BE3227 /* CIMetaView.swift */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.swift; path = CIMetaView.swift; sourceTree = ""; }; 5C7505A427B679EE00BE3227 /* NavLinkPlain.swift */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.swift; path = NavLinkPlain.swift; sourceTree = ""; }; 5C7505A727B6D34800BE3227 /* ChatInfoToolbar.swift */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.swift; path = ChatInfoToolbar.swift; sourceTree = ""; }; + CE11BADE0000000000000001 /* NameBadge.swift */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.swift; path = NameBadge.swift; sourceTree = ""; }; 5C764E88279CBCB3000C6508 /* ChatModel.swift */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.swift; path = ChatModel.swift; sourceTree = ""; }; 5C84FE9129A216C800D95B1A /* nl */ = {isa = PBXFileReference; lastKnownFileType = text.plist.strings; name = nl; path = nl.lproj/Localizable.strings; sourceTree = ""; }; 5C84FE9329A2179C00D95B1A /* nl */ = {isa = PBXFileReference; lastKnownFileType = text.plist.strings; name = nl; path = "nl.lproj/SimpleX--iOS--InfoPlist.strings"; sourceTree = ""; }; @@ -561,8 +563,8 @@ 64C3B0202A0D359700E19930 /* CustomTimePicker.swift */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.swift; path = CustomTimePicker.swift; sourceTree = ""; }; 64C829982D54AEED006B9E89 /* libgmp.a */ = {isa = PBXFileReference; lastKnownFileType = archive.ar; path = libgmp.a; sourceTree = ""; }; 64C829992D54AEEE006B9E89 /* libffi.a */ = {isa = PBXFileReference; lastKnownFileType = archive.ar; path = libffi.a; sourceTree = ""; }; - 64C8299A2D54AEEE006B9E89 /* libHSsimplex-chat-6.5.4.1-Gci0HSXijHT9PyNdCZeAwi-ghc9.6.3.a */ = {isa = PBXFileReference; lastKnownFileType = archive.ar; path = "libHSsimplex-chat-6.5.4.1-Gci0HSXijHT9PyNdCZeAwi-ghc9.6.3.a"; sourceTree = ""; }; - 64C8299B2D54AEEE006B9E89 /* libHSsimplex-chat-6.5.4.1-Gci0HSXijHT9PyNdCZeAwi.a */ = {isa = PBXFileReference; lastKnownFileType = archive.ar; path = "libHSsimplex-chat-6.5.4.1-Gci0HSXijHT9PyNdCZeAwi.a"; sourceTree = ""; }; + 64C8299A2D54AEEE006B9E89 /* libHSsimplex-chat-6.5.4.1-3s3jwLbCMWj9Jo7I40UgTa-ghc9.6.3.a */ = {isa = PBXFileReference; lastKnownFileType = archive.ar; path = "libHSsimplex-chat-6.5.4.1-3s3jwLbCMWj9Jo7I40UgTa-ghc9.6.3.a"; sourceTree = ""; }; + 64C8299B2D54AEEE006B9E89 /* libHSsimplex-chat-6.5.4.1-3s3jwLbCMWj9Jo7I40UgTa.a */ = {isa = PBXFileReference; lastKnownFileType = archive.ar; path = "libHSsimplex-chat-6.5.4.1-3s3jwLbCMWj9Jo7I40UgTa.a"; sourceTree = ""; }; 64C8299C2D54AEEE006B9E89 /* libgmpxx.a */ = {isa = PBXFileReference; lastKnownFileType = archive.ar; path = libgmpxx.a; sourceTree = ""; }; 64D0C2BF29F9688300B38D5F /* UserAddressView.swift */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.swift; path = UserAddressView.swift; sourceTree = ""; }; 64D0C2C129FA57AB00B38D5F /* UserAddressLearnMore.swift */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.swift; path = UserAddressLearnMore.swift; sourceTree = ""; }; @@ -731,8 +733,8 @@ 64C8299D2D54AEEE006B9E89 /* libgmp.a in Frameworks */, 64C8299E2D54AEEE006B9E89 /* libffi.a in Frameworks */, 64C829A12D54AEEE006B9E89 /* libgmpxx.a in Frameworks */, - 64C8299F2D54AEEE006B9E89 /* libHSsimplex-chat-6.5.4.1-Gci0HSXijHT9PyNdCZeAwi-ghc9.6.3.a in Frameworks */, - 64C829A02D54AEEE006B9E89 /* libHSsimplex-chat-6.5.4.1-Gci0HSXijHT9PyNdCZeAwi.a in Frameworks */, + 64C8299F2D54AEEE006B9E89 /* libHSsimplex-chat-6.5.4.1-3s3jwLbCMWj9Jo7I40UgTa-ghc9.6.3.a in Frameworks */, + 64C829A02D54AEEE006B9E89 /* libHSsimplex-chat-6.5.4.1-3s3jwLbCMWj9Jo7I40UgTa.a in Frameworks */, CE38A29C2C3FCD72005ED185 /* SwiftyGif in Frameworks */, ); runOnlyForDeploymentPostprocessing = 0; @@ -818,8 +820,8 @@ 64C829992D54AEEE006B9E89 /* libffi.a */, 64C829982D54AEED006B9E89 /* libgmp.a */, 64C8299C2D54AEEE006B9E89 /* libgmpxx.a */, - 64C8299A2D54AEEE006B9E89 /* libHSsimplex-chat-6.5.4.1-Gci0HSXijHT9PyNdCZeAwi-ghc9.6.3.a */, - 64C8299B2D54AEEE006B9E89 /* libHSsimplex-chat-6.5.4.1-Gci0HSXijHT9PyNdCZeAwi.a */, + 64C8299A2D54AEEE006B9E89 /* libHSsimplex-chat-6.5.4.1-3s3jwLbCMWj9Jo7I40UgTa-ghc9.6.3.a */, + 64C8299B2D54AEEE006B9E89 /* libHSsimplex-chat-6.5.4.1-3s3jwLbCMWj9Jo7I40UgTa.a */, ); path = Libraries; sourceTree = ""; @@ -880,6 +882,7 @@ CEDB245A2C9CD71800FBC5F6 /* StickyScrollView.swift */, CEFB2EDE2CA1BCC7004B1ECE /* SheetRepresentable.swift */, CEA6E91B2CBD21B0002B5DB4 /* UserDefault.swift */, + CE11BADE0000000000000001 /* NameBadge.swift */, ); path = Helpers; sourceTree = ""; @@ -1559,6 +1562,7 @@ 648679AB2BC96A74006456E7 /* ChatItemForwardingView.swift in Sources */, 3CDBCF4827FF621E00354CDD /* CILinkView.swift in Sources */, 5C7505A827B6D34800BE3227 /* ChatInfoToolbar.swift in Sources */, + CE11BADE0000000000000002 /* NameBadge.swift in Sources */, B76E6C312C5C41D900EC11AA /* ContactListNavLink.swift in Sources */, 5C10D88A28F187F300E58BF0 /* FullScreenMediaView.swift in Sources */, D72A9088294BD7A70047C86D /* NativeTextEditor.swift in Sources */, diff --git a/apps/ios/SimpleXChat/ChatTypes.swift b/apps/ios/SimpleXChat/ChatTypes.swift index 5e0c302720..bfe25c6d42 100644 --- a/apps/ios/SimpleXChat/ChatTypes.swift +++ b/apps/ios/SimpleXChat/ChatTypes.swift @@ -136,6 +136,8 @@ public struct Profile: Codable, NamedChat, Hashable { public var contactLink: String? public var preferences: Preferences? public var peerType: ChatPeerType? + // the badge proof from the wire profile - opaque to the UI, round-tripped to the core (apiPrepareContact) + public var badge: BadgeProof? public var localAlias: String { get { "" } } var profileViewName: String { @@ -158,6 +160,7 @@ public struct LocalProfile: Codable, NamedChat, Hashable { contactLink: String? = nil, preferences: Preferences? = nil, peerType: ChatPeerType? = nil, + localBadge: LocalBadge? = nil, localAlias: String ) { self.profileId = profileId @@ -168,6 +171,7 @@ public struct LocalProfile: Codable, NamedChat, Hashable { self.contactLink = contactLink self.preferences = preferences self.peerType = peerType + self.localBadge = localBadge self.localAlias = localAlias } @@ -179,6 +183,7 @@ public struct LocalProfile: Codable, NamedChat, Hashable { public var contactLink: String? public var preferences: Preferences? public var peerType: ChatPeerType? + public var localBadge: LocalBadge? public var localAlias: String var profileViewName: String { @@ -201,6 +206,70 @@ public enum ChatPeerType: String, Codable { case bot } +// Supporter badge. The credential/proof bytes stay core-side; the UI only sees the disclosed type + status. +// Unknown types keep their string so a verified badge's real name can be shown, while the icon falls back to supporter. +public enum BadgeType: Hashable { + case supporter + case legend + case investor + case unknown(String) + + // the disclosed (signed) type name, shown to the user for verified badges + public var text: String { + switch self { + case .supporter: "supporter" + case .legend: "legend" + case .investor: "investor" + case let .unknown(s): s + } + } +} + +extension BadgeType: Codable { + public init(from decoder: Decoder) throws { + switch try decoder.singleValueContainer().decode(String.self) { + case "supporter": self = .supporter + case "legend": self = .legend + case "investor": self = .investor + case let s: self = .unknown(s) + } + } + + public func encode(to encoder: Encoder) throws { + var c = encoder.singleValueContainer() + try c.encode(text) + } +} + +public enum BadgeStatus: String, Codable { + case active + case expired + // expired over a month ago - the badge is not shown at all + case expiredOld + case failed + // signed with a key index this app version does not know - shown as a warning + case unknownKey +} + +public struct BadgeInfo: Codable, Hashable { + public var badgeType: BadgeType + public var badgeExpiry: Date? + public var badgeExtra: String +} + +public struct LocalBadge: Codable, Hashable { + public var badge: BadgeInfo + public var status: BadgeStatus +} + +// the wire proof carried on a profile - opaque to the UI, only round-tripped back to the core (apiPrepareContact) +public struct BadgeProof: Codable, Hashable { + public var badgeKeyIdx: Int + public var presHeader: String + public var proof: String + public var badgeInfo: BadgeInfo +} + public func toLocalProfile (_ profileId: Int64, _ profile: Profile, _ localAlias: String) -> LocalProfile { LocalProfile( profileId: profileId, @@ -1457,6 +1526,17 @@ public enum ChatInfo: Identifiable, Decodable, NamedChat, Hashable { } } + // the badge shown for a chat's name: an active contact's or a contact request's (groups have none) + public var nameBadge: LocalBadge? { + get { + switch self { + case let .direct(contact): return contact.active ? contact.profile.localBadge : nil + case let .contactRequest(contactRequest): return contactRequest.profile.localBadge + default: return nil + } + } + } + public var displayName: String { get { switch self { @@ -2263,7 +2343,7 @@ public struct UserContactRequest: Decodable, NamedChat, Hashable { public var userContactLinkId_: Int64? public var cReqChatVRange: VersionRange var localDisplayName: ContactName - var profile: Profile + public var profile: LocalProfile var createdAt: Date public var updatedAt: Date @@ -2281,7 +2361,7 @@ public struct UserContactRequest: Decodable, NamedChat, Hashable { userContactLinkId_: 1, cReqChatVRange: VersionRange(1, 1), localDisplayName: "alice", - profile: Profile.sampleData, + profile: LocalProfile.sampleData, createdAt: .now, updatedAt: .now ) @@ -2625,6 +2705,8 @@ public struct ContactShortLinkData: Codable, Hashable { public var profile: Profile public var message: MsgContent? public var business: Bool + // set by the core when building the connection plan: the link profile's badge, verified and crypto-free + public var localBadge: LocalBadge? } public struct GroupSummary: Decodable, Hashable { @@ -2781,6 +2863,7 @@ public struct GroupMember: Identifiable, Decodable, Hashable { public var fullName: String { get { memberProfile.fullName } } public var image: String? { get { memberProfile.image } } public var contactLink: String? { get { memberProfile.contactLink } } + public var nameBadge: LocalBadge? { memberProfile.localBadge } public var verified: Bool { activeConn?.connectionCode != nil } public var blocked: Bool { blockedByAdmin || !memberSettings.showMessages } diff --git a/apps/ios/SimpleXChat/FileUtils.swift b/apps/ios/SimpleXChat/FileUtils.swift index 3d0dd663c1..c44bcee5bd 100644 --- a/apps/ios/SimpleXChat/FileUtils.swift +++ b/apps/ios/SimpleXChat/FileUtils.swift @@ -29,6 +29,10 @@ public let MAX_VIDEO_SIZE_AUTO_RCV: Int64 = 1_047_552 // 1023KB // Spec: spec/services/files.md#MAX_FILE_SIZE_XFTP public let MAX_FILE_SIZE_XFTP: Int64 = 1_073_741_824 // 1GB +// raised XFTP receive limits for files from a sender with a supporter badge (also investor) or a legend badge +public let MAX_FILE_SIZE_XFTP_SUPPORTER: Int64 = 2_147_483_648 // 2GB +public let MAX_FILE_SIZE_XFTP_LEGEND: Int64 = 5_368_709_120 // 5GB + public let MAX_FILE_SIZE_LOCAL: Int64 = Int64.max public let MAX_FILE_SIZE_SMP: Int64 = 8000000 @@ -273,11 +277,26 @@ public func cleanupFile(_ aChatItem: AChatItem) { } } -public func getMaxFileSize(_ fileProtocol: FileProtocol) -> Int64 { +public func getMaxFileSize(_ fileProtocol: FileProtocol, _ senderProfile: LocalProfile? = nil) -> Int64 { switch fileProtocol { - case .xftp: return MAX_FILE_SIZE_XFTP - case .smp: return MAX_FILE_SIZE_SMP - case .local: return MAX_FILE_SIZE_LOCAL + case .smp: MAX_FILE_SIZE_SMP + case .local: MAX_FILE_SIZE_LOCAL + // a sender's active badge raises the XFTP limit: legend to 5GB, any other (supporter/investor) to 2GB + case .xftp: + if let badge = senderProfile?.localBadge, badge.status == .active { + badge.badge.badgeType == .legend ? MAX_FILE_SIZE_XFTP_LEGEND : MAX_FILE_SIZE_XFTP_SUPPORTER + } else { + MAX_FILE_SIZE_XFTP + } + } +} + +// the profile of whoever sent a received chat item - the group member, or the direct chat's contact +public func ciSenderProfile(_ ci: ChatItem, _ chatInfo: ChatInfo) -> LocalProfile? { + switch (ci.chatDir, chatInfo) { + case let (.groupRcv(groupMember), _): return groupMember.memberProfile + case let (.directRcv, .direct(contact)): return contact.profile + default: return nil } } diff --git a/apps/multiplatform/common/src/androidMain/kotlin/chat/simplex/common/views/chatlist/UserPicker.android.kt b/apps/multiplatform/common/src/androidMain/kotlin/chat/simplex/common/views/chatlist/UserPicker.android.kt index a09ca2792b..9649e37c0f 100644 --- a/apps/multiplatform/common/src/androidMain/kotlin/chat/simplex/common/views/chatlist/UserPicker.android.kt +++ b/apps/multiplatform/common/src/androidMain/kotlin/chat/simplex/common/views/chatlist/UserPicker.android.kt @@ -95,8 +95,9 @@ fun UserPickerUserBox( } } val user = userInfo.user - Text( + NameWithBadge( user.displayName, + user.profile.localBadge, fontWeight = if (user.activeUser) FontWeight.Bold else FontWeight.Normal, maxLines = 1, overflow = TextOverflow.Ellipsis, diff --git a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/model/ChatModel.kt b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/model/ChatModel.kt index 11c0f9e7f6..19b36067ed 100644 --- a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/model/ChatModel.kt +++ b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/model/ChatModel.kt @@ -1430,6 +1430,17 @@ data class Chat( @Serializable sealed class ChatInfo: SomeChat, NamedChat { + // the badge shown for a chat's name: an active contact's or a contact request's (groups have none). + // a badge that expired over a month ago (ExpiredOld) is not shown at all. + val nameBadge: LocalBadge? get() { + val badge = when { + this is Direct && contact.active -> contact.profile.localBadge + this is ContactRequest -> contactRequest.profile.localBadge + else -> null + } + return if (badge?.status == BadgeStatus.ExpiredOld) null else badge + } + @Serializable @SerialName("direct") data class Direct(val contact: Contact): ChatInfo() { override val chatType get() = ChatType.Direct @@ -1994,7 +2005,10 @@ data class Profile( override val localAlias : String = "", val contactLink: String? = null, val preferences: ChatPreferences? = null, - val peerType: ChatPeerType? = null + val peerType: ChatPeerType? = null, + // the badge proof from the wire profile: not interpreted by the UI (display uses crypto-free LocalBadge), + // but preserved so passing a link profile back to the core (apiPrepareContact) keeps the proof + val badge: BadgeProof? = null ): NamedChat { val profileViewName: String get() { @@ -2022,7 +2036,8 @@ data class LocalProfile( override val localAlias: String, val contactLink: String? = null, val preferences: ChatPreferences? = null, - val peerType: ChatPeerType? = null + val peerType: ChatPeerType? = null, + val localBadge: LocalBadge? = null ): NamedChat { val profileViewName: String = localAlias.ifEmpty { if (fullName == "" || displayName == fullName) displayName else "$displayName ($fullName)" } @@ -2046,6 +2061,70 @@ enum class ChatPeerType { @SerialName("bot") Bot } +// Supporter badge. The credential/proof bytes stay core-side; the UI only sees the disclosed type + status. +// Unknown types keep their string so a verified badge's real name can be shown, while the icon falls back to supporter. +@Serializable(with = BadgeTypeSerializer::class) +sealed class BadgeType { + @Serializable @SerialName("supporter") object Supporter: BadgeType() + @Serializable @SerialName("legend") object Legend: BadgeType() + @Serializable @SerialName("investor") object Investor: BadgeType() + @Serializable @SerialName("unknown") data class Unknown(val type: String): BadgeType() + + // the disclosed (signed) type name, shown to the user for verified badges + val text: String + get() = when (this) { + is Supporter -> "supporter" + is Legend -> "legend" + is Investor -> "investor" + is Unknown -> type + } +} + +object BadgeTypeSerializer : KSerializer { + override val descriptor: SerialDescriptor = PrimitiveSerialDescriptor("BadgeType", PrimitiveKind.STRING) + override fun deserialize(decoder: Decoder): BadgeType = + when (val v = decoder.decodeString()) { + "supporter" -> BadgeType.Supporter + "legend" -> BadgeType.Legend + "investor" -> BadgeType.Investor + else -> BadgeType.Unknown(v) + } + override fun serialize(encoder: Encoder, value: BadgeType) = encoder.encodeString(value.text) +} + +@Serializable +enum class BadgeStatus { + @SerialName("active") Active, + @SerialName("expired") Expired, + // expired over a month ago - the badge is not shown at all + @SerialName("expiredOld") ExpiredOld, + @SerialName("failed") Failed, + // signed with a key index this app version does not know - shown as a warning + @SerialName("unknownKey") UnknownKey +} + +@Serializable +data class BadgeInfo( + val badgeType: BadgeType, + val badgeExpiry: Instant? = null, + val badgeExtra: String = "" +) + +@Serializable +data class LocalBadge( + val badge: BadgeInfo, + val status: BadgeStatus +) + +// the wire proof carried on a profile - opaque to the UI, only round-tripped back to the core (apiPrepareContact) +@Serializable +data class BadgeProof( + val badgeKeyIdx: Int, + val presHeader: String, + val proof: String, + val badgeInfo: BadgeInfo +) + @Serializable data class UserProfileUpdateSummary( val updateSuccesses: Int, @@ -2278,7 +2357,9 @@ enum class MemberCriteria { data class ContactShortLinkData ( val profile: Profile, val message: MsgContent?, - val business: Boolean + val business: Boolean, + // set by the core when building the connection plan: the link profile's badge, verified and crypto-free + val localBadge: LocalBadge? = null ) @Serializable @@ -2409,6 +2490,11 @@ data class GroupMember ( override val image: String? get() = memberProfile.image val contactLink: String? = memberProfile.contactLink val verified get() = activeConn?.connectionCode != null + // the badge shown for a member's name; a badge that expired over a month ago (ExpiredOld) is not shown + val nameBadge: LocalBadge? get() { + val badge = memberProfile.localBadge + return if (badge?.status == BadgeStatus.ExpiredOld) null else badge + } val blocked get() = blockedByAdmin || !memberSettings.showMessages override val localAlias: String = memberProfile.localAlias @@ -2727,7 +2813,7 @@ class UserContactRequest ( val contactRequestId: Long, val cReqChatVRange: VersionRange, override val localDisplayName: String, - val profile: Profile, + val profile: LocalProfile, override val createdAt: Instant, override val updatedAt: Instant ): SomeChat, NamedChat { @@ -2753,7 +2839,7 @@ class UserContactRequest ( contactRequestId = 1, cReqChatVRange = VersionRange(1, 1), localDisplayName = "alice", - profile = Profile.sampleData, + profile = LocalProfile.sampleData, createdAt = Clock.System.now(), updatedAt = Clock.System.now() ) diff --git a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/ChatInfoView.kt b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/ChatInfoView.kt index 061ea71016..97101f253e 100644 --- a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/ChatInfoView.kt +++ b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/ChatInfoView.kt @@ -710,19 +710,32 @@ fun ChatInfoHeader(cInfo: ChatInfo, contact: Contact) { ) { ChatInfoImage(cInfo, size = 192.dp, iconColor = if (isInDarkTheme()) GroupDark else SettingsSecondaryLight) val displayName = contact.profile.displayName.trim() + val badge = cInfo.nameBadge val text = buildAnnotatedString { if (contact.verified) { appendInlineContent(id = "shieldIcon") } append(displayName) - } - val inlineContent: Map = mapOf( - "shieldIcon" to InlineTextContent( - Placeholder(24.sp, 24.sp, PlaceholderVerticalAlign.TextCenter) - ) { - Icon(painterResource(MR.images.ic_verified_user), null, tint = MaterialTheme.colors.secondary) + if (badge != null) { + append(" ") + appendInlineContent(id = "nameBadge") } - ) + } + val nameFontSize = MaterialTheme.typography.h1.fontSize + val uriHandler = LocalUriHandler.current + val inlineContent: Map = buildMap { + put( + "shieldIcon", + InlineTextContent( + Placeholder(24.sp, 24.sp, PlaceholderVerticalAlign.TextCenter) + ) { + Icon(painterResource(MR.images.ic_verified_user), null, tint = MaterialTheme.colors.secondary) + } + ) + if (badge != null) { + put("nameBadge", nameBadgeInline(badge, nameFontSize) { showBadgeInfoAlert(displayName, badge, uriHandler) }) + } + } val clipboard = LocalClipboardManager.current val copyNameToClipboard = fun (name: String) { clipboard.setText(AnnotatedString(name)) diff --git a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/ChatItemInfoView.kt b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/ChatItemInfoView.kt index 9c36f4896b..affe5ce326 100644 --- a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/ChatItemInfoView.kt +++ b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/ChatItemInfoView.kt @@ -170,9 +170,10 @@ fun ChatItemInfoView(chatRh: Long?, ci: ChatItem, ciInfo: ChatItemInfo, devTools @Composable fun ForwardedFromSender(forwardedFromItem: AChatItem) { @Composable - fun ItemText(text: String, fontStyle: FontStyle = FontStyle.Normal, color: Color = MaterialTheme.colors.onBackground) { - Text( + fun ItemText(text: String, fontStyle: FontStyle = FontStyle.Normal, color: Color = MaterialTheme.colors.onBackground, badge: LocalBadge? = null) { + NameWithBadge( text, + badge, maxLines = 1, overflow = TextOverflow.Ellipsis, style = MaterialTheme.typography.body1, @@ -191,13 +192,13 @@ fun ChatItemInfoView(chatRh: Long?, ci: ChatItem, ciInfo: ChatItemInfo, devTools if (forwardedFromItem.chatItem.chatDir.sent) { ItemText(text = stringResource(MR.strings.sender_you_pronoun), fontStyle = FontStyle.Italic) Spacer(Modifier.height(7.dp)) - ItemText(forwardedFromItem.chatInfo.chatViewName, color = MaterialTheme.colors.secondary) + ItemText(forwardedFromItem.chatInfo.chatViewName, color = MaterialTheme.colors.secondary, badge = forwardedFromItem.chatInfo.nameBadge) } else if (forwardedFromItem.chatItem.chatDir is CIDirection.GroupRcv) { - ItemText(text = forwardedFromItem.chatItem.chatDir.groupMember.chatViewName) + ItemText(text = forwardedFromItem.chatItem.chatDir.groupMember.chatViewName, badge = forwardedFromItem.chatItem.chatDir.groupMember.nameBadge) Spacer(Modifier.height(7.dp)) - ItemText(forwardedFromItem.chatInfo.chatViewName, color = MaterialTheme.colors.secondary) + ItemText(forwardedFromItem.chatInfo.chatViewName, color = MaterialTheme.colors.secondary, badge = forwardedFromItem.chatInfo.nameBadge) } else { - ItemText(forwardedFromItem.chatInfo.chatViewName, color = MaterialTheme.colors.onBackground) + ItemText(forwardedFromItem.chatInfo.chatViewName, color = MaterialTheme.colors.onBackground, badge = forwardedFromItem.chatInfo.nameBadge) } } } @@ -344,9 +345,10 @@ fun ChatItemInfoView(chatRh: Long?, ci: ChatItem, ciInfo: ChatItemInfo, devTools ) { MemberProfileImage(size = 36.dp, member) Spacer(Modifier.width(DEFAULT_SPACE_AFTER_ICON)) - Text( + NameWithBadge( member.chatViewName, - modifier = Modifier.weight(10f, fill = true), + member.nameBadge, + Modifier.weight(10f, fill = true), maxLines = 1, overflow = TextOverflow.Ellipsis ) diff --git a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/ChatView.kt b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/ChatView.kt index f42969a73f..68e5ee3394 100644 --- a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/ChatView.kt +++ b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/ChatView.kt @@ -21,6 +21,7 @@ import androidx.compose.ui.layout.onSizeChanged import androidx.compose.ui.platform.* import dev.icerock.moko.resources.compose.painterResource import dev.icerock.moko.resources.compose.stringResource +import androidx.compose.foundation.text.appendInlineContent import androidx.compose.ui.text.font.FontWeight import androidx.compose.ui.text.intl.Locale import androidx.compose.ui.text.style.TextOverflow @@ -1564,8 +1565,8 @@ fun ChatInfoToolbarTitle(cInfo: ChatInfo, imageSize: Dp = 40.dp, iconColor: Colo if ((cInfo as? ChatInfo.Direct)?.contact?.verified == true) { ContactVerifiedShield() } - Text( - cInfo.displayName, fontWeight = FontWeight.SemiBold, + NameWithBadge( + cInfo.displayName, cInfo.nameBadge, fontWeight = FontWeight.SemiBold, maxLines = 1, overflow = TextOverflow.Ellipsis ) } @@ -2016,8 +2017,10 @@ fun BoxScope.ChatItemsList( } else { null to 1 } - Text( + // the name and the badge are one element, so SpaceBetween separates them from the role, not from each other + NameWithBadge( memberNames(member, prevMember, memCount), + if (prevMember == null && memCount == 1) member.nameBadge else null, Modifier .padding(start = (MEMBER_IMAGE_SIZE * fontSizeSqrtMultiplier) + DEFAULT_PADDING_HALF) .weight(1f, false), @@ -2284,8 +2287,18 @@ fun BoxScope.ChatItemsList( .background(MaterialTheme.appColors.receivedMessage) ) { ChatInfoImage(chatInfo, size = alertProfileImageSize, iconColor = MaterialTheme.colors.secondaryVariant.mixWith(MaterialTheme.colors.onBackground, 0.97f)) + val bannerBadge = chatInfo.nameBadge + val uriHandler = LocalUriHandler.current Text( - chatInfo.displayName, + buildAnnotatedString { + append(chatInfo.displayName) + if (bannerBadge != null) { + append(" ") + appendInlineContent(id = "nameBadge") + } + }, + inlineContent = + if (bannerBadge != null) mapOf("nameBadge" to nameBadgeInline(bannerBadge, MaterialTheme.typography.h3.fontSize) { showBadgeInfoAlert(chatInfo.displayName, bannerBadge, uriHandler) }) else emptyMap(), style = MaterialTheme.typography.h3, color = MaterialTheme.colors.onBackground, textAlign = TextAlign.Center, diff --git a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/ComposeView.kt b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/ComposeView.kt index d874079238..6d598a166b 100644 --- a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/ComposeView.kt +++ b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/ComposeView.kt @@ -113,7 +113,9 @@ data class ComposeState( val inProgress: Boolean = false, val progressByTimeout: Boolean = false, val useLinkPreviews: Boolean, - val mentions: MentionedMembers = emptyMap() + val mentions: MentionedMembers = emptyMap(), + // the max file size the user may attach, raised by their active badge unless the chat is incognito; kept in sync on chat switch + val maxFileSize: Long = getMaxFileSize(FileProtocol.XFTP) ) { constructor(editingItem: ChatItem, liveMessage: LiveMessage? = null, useLinkPreviews: Boolean): this( ComposeMessage( @@ -251,8 +253,6 @@ data class ComposeState( } } -private val maxFileSize = getMaxFileSize(FileProtocol.XFTP) - sealed class RecordingState { object NotStarted: RecordingState() class Started(val filePath: String, val progressMs: Int = 0): RecordingState() @@ -300,6 +300,7 @@ fun MutableState.onFilesAttached(uris: List) { fun MutableState.processPickedFile(uri: URI?, text: String?) { if (uri != null) { + val maxFileSize = value.maxFileSize val fileSize = getFileSize(uri) if (fileSize != null && fileSize <= maxFileSize) { val fileName = getFileName(uri) @@ -318,6 +319,7 @@ fun MutableState.processPickedFile(uri: URI?, text: String?) { } suspend fun MutableState.processPickedMedia(uris: List, text: String?) { + val maxFileSize = value.maxFileSize val content = ArrayList() val imagesPreview = ArrayList() uris.forEach { uri -> @@ -487,7 +489,7 @@ fun ComposeView( if (live) { composeState.value = composeState.value.copy(inProgress = false, progressByTimeout = false) } else { - composeState.value = ComposeState(useLinkPreviews = useLinkPreviews) + composeState.value = ComposeState(useLinkPreviews = useLinkPreviews, maxFileSize = composeState.value.maxFileSize) resetLinkPreview() } recState.value = RecordingState.NotStarted @@ -1094,7 +1096,7 @@ fun ComposeView( if (composeState.value.contextItem != ComposeContextItem.NoContextItem || composeState.value.preview != ComposePreview.NoPreview) return val lastEditable = chatsCtx.chatItems.value.findLast { it.meta.editable } if (lastEditable != null) { - composeState.value = ComposeState(editingItem = lastEditable, useLinkPreviews = useLinkPreviews) + composeState.value = ComposeState(editingItem = lastEditable, useLinkPreviews = useLinkPreviews).copy(maxFileSize = composeState.value.maxFileSize) } } @@ -1322,6 +1324,11 @@ fun ComposeView( chatModel.removeLiveDummy() CIFile.cachedRemoteFileRequests.clear() } + // keep the attach size limit in sync with the chat: the user's active badge raises it, but not in incognito chats where no badge is presented + LaunchedEffect(chat.chatInfo) { + val incognito = if (chat.chatInfo.profileChangeProhibited) chat.chatInfo.incognito else chatModel.controller.appPrefs.incognito.get() + composeState.value = composeState.value.copy(maxFileSize = getMaxFileSize(FileProtocol.XFTP, if (incognito) null else chatModel.currentUser.value?.profile)) + } if (appPlatform.isDesktop) { // Don't enable this on Android, it breaks it, This method only works on desktop. For Android there is a `KeyChangeEffect(chatModel.chatId.value)` DisposableEffect(Unit) { diff --git a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/group/AddGroupMembersView.kt b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/group/AddGroupMembersView.kt index 9298b600e9..45d336be75 100644 --- a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/group/AddGroupMembersView.kt +++ b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/group/AddGroupMembersView.kt @@ -354,9 +354,10 @@ fun ContactCheckRow( ) { ProfileImage(size = 36.dp, contact.image) Spacer(Modifier.width(DEFAULT_SPACE_AFTER_ICON)) - Text( + NameWithBadge( contact.chatViewName, - modifier = Modifier.weight(10f, fill = true), + if (contact.active) contact.profile.localBadge else null, + Modifier.weight(10f, fill = true), maxLines = 1, overflow = TextOverflow.Ellipsis, color = if (prohibitedToInviteIncognito) MaterialTheme.colors.secondary else Color.Unspecified diff --git a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/group/ChannelMembersView.kt b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/group/ChannelMembersView.kt index 0cf3a3c96f..64f02d3376 100644 --- a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/group/ChannelMembersView.kt +++ b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/group/ChannelMembersView.kt @@ -94,8 +94,9 @@ private fun ChannelMemberRow(member: GroupMember, user: Boolean, showRole: Boole if (member.verified) { MemberVerifiedShield() } - Text( + NameWithBadge( member.chatViewName, + member.nameBadge, maxLines = 1, overflow = TextOverflow.Ellipsis, color = if (member.memberIncognito) Indigo else Color.Unspecified diff --git a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/group/GroupChatInfoView.kt b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/group/GroupChatInfoView.kt index 7b9d6aa92e..770dfa64fb 100644 --- a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/group/GroupChatInfoView.kt +++ b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/group/GroupChatInfoView.kt @@ -1078,8 +1078,10 @@ fun MemberRow(member: GroupMember, user: Boolean = false, infoPage: Boolean = tr if (member.verified) { MemberVerifiedShield() } - Text( - if (showlocalAliasAndFullName) member.localAliasAndFullName else member.chatViewName, maxLines = 1, overflow = TextOverflow.Ellipsis, + NameWithBadge( + if (showlocalAliasAndFullName) member.localAliasAndFullName else member.chatViewName, + member.nameBadge, + maxLines = 1, overflow = TextOverflow.Ellipsis, color = if (member.memberIncognito) Indigo else Color.Unspecified ) } diff --git a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/group/GroupMemberInfoView.kt b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/group/GroupMemberInfoView.kt index 8677609863..fe45be92b7 100644 --- a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/group/GroupMemberInfoView.kt +++ b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/group/GroupMemberInfoView.kt @@ -18,6 +18,7 @@ import androidx.compose.ui.Alignment import androidx.compose.ui.Modifier import androidx.compose.ui.graphics.Color import androidx.compose.ui.platform.LocalClipboardManager +import androidx.compose.ui.platform.LocalUriHandler import androidx.compose.ui.text.* import dev.icerock.moko.resources.compose.painterResource import dev.icerock.moko.resources.compose.stringResource @@ -735,19 +736,32 @@ fun GroupMemberInfoHeader(member: GroupMember) { ) { MemberProfileImage(size = 192.dp, member, color = if (isInDarkTheme()) GroupDark else SettingsSecondaryLight) val displayName = member.displayName.trim() // alias if set + val badge = member.nameBadge val text = buildAnnotatedString { if (member.verified) { appendInlineContent(id = "shieldIcon") } append(displayName) - } - val inlineContent: Map = mapOf( - "shieldIcon" to InlineTextContent( - Placeholder(24.sp, 24.sp, PlaceholderVerticalAlign.TextCenter) - ) { - Icon(painterResource(MR.images.ic_verified_user), null, tint = MaterialTheme.colors.secondary) + if (badge != null) { + append(" ") + appendInlineContent(id = "nameBadge") } - ) + } + val nameFontSize = MaterialTheme.typography.h1.fontSize + val uriHandler = LocalUriHandler.current + val inlineContent: Map = buildMap { + put( + "shieldIcon", + InlineTextContent( + Placeholder(24.sp, 24.sp, PlaceholderVerticalAlign.TextCenter) + ) { + Icon(painterResource(MR.images.ic_verified_user), null, tint = MaterialTheme.colors.secondary) + } + ) + if (badge != null) { + put("nameBadge", nameBadgeInline(badge, nameFontSize) { showBadgeInfoAlert(displayName, badge, uriHandler) }) + } + } val clipboard = LocalClipboardManager.current val copyNameToClipboard = fun(name: String) { clipboard.setText(AnnotatedString(name)) diff --git a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/group/MemberSupportChatView.kt b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/group/MemberSupportChatView.kt index 6680ef99bc..3d3096b4f5 100644 --- a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/group/MemberSupportChatView.kt +++ b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/group/MemberSupportChatView.kt @@ -137,8 +137,8 @@ fun MemberSupportChatToolbarTitle(member: GroupMember, imageSize: Dp = 40.dp, ic if (member.verified) { MemberVerifiedShield() } - Text( - member.displayName, fontWeight = FontWeight.SemiBold, + NameWithBadge( + member.displayName, member.nameBadge, fontWeight = FontWeight.SemiBold, maxLines = 1, overflow = TextOverflow.Ellipsis ) } diff --git a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/group/MemberSupportView.kt b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/group/MemberSupportView.kt index 3d76c845ad..7ca277df94 100644 --- a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/group/MemberSupportView.kt +++ b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/group/MemberSupportView.kt @@ -234,8 +234,8 @@ fun SupportChatRow(member: GroupMember) { if (member.verified) { MemberVerifiedShield() } - Text( - member.chatViewName, maxLines = 1, overflow = TextOverflow.Ellipsis, + NameWithBadge( + member.chatViewName, member.nameBadge, maxLines = 1, overflow = TextOverflow.Ellipsis, color = if (member.memberIncognito) Indigo else Color.Unspecified ) } diff --git a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/item/CIFileView.kt b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/item/CIFileView.kt index afd55ed928..02bee37c24 100644 --- a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/item/CIFileView.kt +++ b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/item/CIFileView.kt @@ -33,6 +33,7 @@ fun CIFileView( edited: Boolean, showMenu: MutableState, smallView: Boolean = false, + senderProfile: LocalProfile?, receiveFile: (Long) -> Unit ) { val saveFileLauncher = rememberSaveFileLauncher(ciFile = file) @@ -71,12 +72,12 @@ fun CIFileView( if (file != null) { when { file.fileStatus is CIFileStatus.RcvInvitation || file.fileStatus is CIFileStatus.RcvAborted -> { - if (fileSizeValid(file)) { + if (fileSizeValid(file, senderProfile)) { receiveFile(file.fileId) } else { AlertManager.shared.showAlertMsg( generalGetString(MR.strings.large_file), - String.format(generalGetString(MR.strings.contact_sent_large_file), formatBytes(getMaxFileSize(file.fileProtocol))) + String.format(generalGetString(MR.strings.contact_sent_large_file), formatBytes(getMaxFileSize(file.fileProtocol, senderProfile))) ) } } @@ -151,7 +152,7 @@ fun CIFileView( is CIFileStatus.SndError -> fileIcon(innerIcon = painterResource(MR.images.ic_close)) is CIFileStatus.SndWarning -> fileIcon(innerIcon = painterResource(MR.images.ic_warning_filled)) is CIFileStatus.RcvInvitation -> - if (fileSizeValid(file)) + if (fileSizeValid(file, senderProfile)) fileIcon(innerIcon = painterResource(MR.images.ic_arrow_downward), color = MaterialTheme.colors.primary, topPadding = 10.sp.toDp()) else fileIcon(innerIcon = painterResource(MR.images.ic_priority_high), color = WarningOrange) @@ -225,7 +226,9 @@ fun CIFileView( } } -fun fileSizeValid(file: CIFile): Boolean = file.fileSize <= getMaxFileSize(file.fileProtocol) +// whether a received file is within the size we accept from its sender +fun fileSizeValid(file: CIFile, senderProfile: LocalProfile?): Boolean = + file.fileSize <= getMaxFileSize(file.fileProtocol, senderProfile) fun showFileErrorAlert(err: FileError, temporary: Boolean = false) { val title: String = generalGetString(if (temporary) MR.strings.temporary_file_error else MR.strings.file_error) diff --git a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/item/CIImageView.kt b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/item/CIImageView.kt index 8bfbea9fa6..ed9a0e6007 100644 --- a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/item/CIImageView.kt +++ b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/item/CIImageView.kt @@ -35,6 +35,7 @@ fun CIImageView( imageProvider: () -> ImageGalleryProvider, showMenu: MutableState, smallView: Boolean, + senderProfile: LocalProfile?, receiveFile: (Long) -> Unit ) { val blurred = remember { mutableStateOf(appPrefs.privacyMediaBlurRadius.get() > 0) } @@ -160,13 +161,6 @@ fun CIImageView( } } - fun fileSizeValid(): Boolean { - if (file != null) { - return file.fileSize <= getMaxFileSize(file.fileProtocol) - } - return false - } - suspend fun imageAndFilePath(file: CIFile?): Triple? { val res = getLoadedImage(file) if (res != null) { @@ -213,12 +207,12 @@ fun CIImageView( if (file != null) { when { file.fileStatus is CIFileStatus.RcvInvitation || file.fileStatus is CIFileStatus.RcvAborted -> - if (fileSizeValid()) { + if (fileSizeValid(file, senderProfile)) { receiveFile(file.fileId) } else { AlertManager.shared.showAlertMsg( generalGetString(MR.strings.large_file), - String.format(generalGetString(MR.strings.contact_sent_large_file), formatBytes(getMaxFileSize(file.fileProtocol))) + String.format(generalGetString(MR.strings.contact_sent_large_file), formatBytes(getMaxFileSize(file.fileProtocol, senderProfile))) ) } file.fileStatus is CIFileStatus.RcvAccepted -> diff --git a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/item/CIVideoView.kt b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/item/CIVideoView.kt index 8289149ad9..f8dfba4c6c 100644 --- a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/item/CIVideoView.kt +++ b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/item/CIVideoView.kt @@ -34,6 +34,7 @@ fun CIVideoView( imageProvider: () -> ImageGalleryProvider, showMenu: MutableState, smallView: Boolean = false, + senderProfile: LocalProfile?, receiveFile: (Long) -> Unit ) { val blurred = remember { mutableStateOf(appPrefs.privacyMediaBlurRadius.get() > 0) } @@ -84,7 +85,7 @@ fun CIVideoView( if (file != null) { when (file.fileStatus) { CIFileStatus.RcvInvitation, CIFileStatus.RcvAborted -> - receiveFileIfValidSize(file, receiveFile) + receiveFileIfValidSize(file, senderProfile, receiveFile) CIFileStatus.RcvAccepted -> when (file.fileProtocol) { FileProtocol.XFTP -> @@ -114,7 +115,7 @@ fun CIVideoView( DurationProgress(file, remember { mutableStateOf(false) }, remember { mutableStateOf(duration * 1000L) }, remember { mutableStateOf(0L) }/*, soundEnabled*/) } if (showDownloadButton(file?.fileStatus) && !blurred.value && file != null) { - PlayButton(error = false, sizeMultiplier, { showMenu.value = true }) { receiveFileIfValidSize(file, receiveFile) } + PlayButton(error = false, sizeMultiplier, { showMenu.value = true }) { receiveFileIfValidSize(file, senderProfile, receiveFile) } } } } @@ -546,20 +547,13 @@ private fun fileStatusIcon(file: CIFile?, smallView: Boolean) { private fun showDownloadButton(status: CIFileStatus?): Boolean = status is CIFileStatus.RcvInvitation || status is CIFileStatus.RcvAborted -private fun fileSizeValid(file: CIFile?): Boolean { - if (file != null) { - return file.fileSize <= getMaxFileSize(file.fileProtocol) - } - return false -} - -private fun receiveFileIfValidSize(file: CIFile, receiveFile: (Long) -> Unit) { - if (fileSizeValid(file)) { +private fun receiveFileIfValidSize(file: CIFile, senderProfile: LocalProfile?, receiveFile: (Long) -> Unit) { + if (fileSizeValid(file, senderProfile)) { receiveFile(file.fileId) } else { AlertManager.shared.showAlertMsg( generalGetString(MR.strings.large_file), - String.format(generalGetString(MR.strings.contact_sent_large_file), formatBytes(getMaxFileSize(file.fileProtocol))) + String.format(generalGetString(MR.strings.contact_sent_large_file), formatBytes(getMaxFileSize(file.fileProtocol, senderProfile))) ) } } diff --git a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/item/ChatItemView.kt b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/item/ChatItemView.kt index 64288d9055..2c04911e39 100644 --- a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/item/ChatItemView.kt +++ b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/item/ChatItemView.kt @@ -447,7 +447,7 @@ fun ChatItemView( } if (cItem.file != null && (getLoadedFilePath(cItem.file) != null || (chatModel.connectedToRemote() && cachedRemoteReqs[cItem.file.fileSource] != false && cItem.file.loaded))) { SaveContentItemAction(cItem, saveFileLauncher, showMenu) - } else if (cItem.file != null && cItem.file.fileStatus is CIFileStatus.RcvInvitation && fileSizeValid(cItem.file)) { + } else if (cItem.file != null && cItem.file.fileStatus is CIFileStatus.RcvInvitation && fileSizeValid(cItem.file, ciSenderProfile(cItem, chat.chatInfo))) { ItemAction(stringResource(MR.strings.download_file), painterResource(MR.images.ic_arrow_downward), onClick = { withBGApi { Log.d(TAG, "ChatItemView downloadFileAction") diff --git a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/item/FramedItemView.kt b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/item/FramedItemView.kt index f55c49fdd1..5c07fe3abf 100644 --- a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/item/FramedItemView.kt +++ b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/item/FramedItemView.kt @@ -201,7 +201,7 @@ fun FramedItemView( @Composable fun ciFileView(ci: ChatItem, text: String) { - CIFileView(ci.file, ci.meta.itemEdited, showMenu, false, receiveFile) + CIFileView(ci.file, ci.meta.itemEdited, showMenu, false, ciSenderProfile(ci, chatInfo), receiveFile) if (text != "" || ci.meta.isLive) { CIMarkdownText(chatsCtx, ci, chat, chatTTL, linkMode = linkMode, uriHandler, showViaProxy = showViaProxy, showTimestamp = showTimestamp) } @@ -312,7 +312,7 @@ fun FramedItemView( } else { when (val mc = ci.content.msgContent) { is MsgContent.MCImage -> { - CIImageView(image = mc.image, file = ci.file, imageProvider ?: return@PriorityLayout, showMenu, false, receiveFile) + CIImageView(image = mc.image, file = ci.file, imageProvider ?: return@PriorityLayout, showMenu, false, ciSenderProfile(ci, chatInfo), receiveFile) if (mc.text == "" && !ci.meta.isLive) { metaColor = Color.White } else { @@ -320,7 +320,7 @@ fun FramedItemView( } } is MsgContent.MCVideo -> { - CIVideoView(image = mc.image, mc.duration, file = ci.file, imageProvider ?: return@PriorityLayout, showMenu, smallView = false, receiveFile = receiveFile) + CIVideoView(image = mc.image, mc.duration, file = ci.file, imageProvider ?: return@PriorityLayout, showMenu, smallView = false, senderProfile = ciSenderProfile(ci, chatInfo), receiveFile = receiveFile) if (mc.text == "" && !ci.meta.isLive) { metaColor = Color.White } else { diff --git a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chatlist/ChatPreviewView.kt b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chatlist/ChatPreviewView.kt index d749865e10..2c7e443b4d 100644 --- a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chatlist/ChatPreviewView.kt +++ b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chatlist/ChatPreviewView.kt @@ -152,7 +152,15 @@ fun ChatPreviewView( } else { Color.Unspecified } - chatPreviewTitleText(color = color) + NameWithBadge( + cInfo.chatViewName, + cInfo.nameBadge, + maxLines = 1, + overflow = TextOverflow.Ellipsis, + style = MaterialTheme.typography.h3, + fontWeight = FontWeight.Bold, + color = color + ) } } is ChatInfo.Group -> { @@ -316,13 +324,13 @@ fun ChatPreviewView( } } is MsgContent.MCImage -> SmallContentPreview { - CIImageView(image = mc.image, file = ci.file, provider, remember { mutableStateOf(false) }, smallView = true) { + CIImageView(image = mc.image, file = ci.file, provider, remember { mutableStateOf(false) }, smallView = true, senderProfile = ciSenderProfile(ci, chat.chatInfo)) { val user = chatModel.currentUser.value ?: return@CIImageView withBGApi { chatModel.controller.receiveFile(chat.remoteHostId, user, it) } } } is MsgContent.MCVideo -> SmallContentPreview { - CIVideoView(image = mc.image, mc.duration, file = ci.file, provider, remember { mutableStateOf(false) }, smallView = true) { + CIVideoView(image = mc.image, mc.duration, file = ci.file, provider, remember { mutableStateOf(false) }, smallView = true, senderProfile = ciSenderProfile(ci, chat.chatInfo)) { val user = chatModel.currentUser.value ?: return@CIVideoView withBGApi { chatModel.controller.receiveFile(chat.remoteHostId, user, it) } } @@ -334,7 +342,7 @@ fun ChatPreviewView( } } is MsgContent.MCFile -> SmallContentPreviewFile { - CIFileView(ci.file, false, remember { mutableStateOf(false) }, smallView = true) { + CIFileView(ci.file, false, remember { mutableStateOf(false) }, smallView = true, senderProfile = ciSenderProfile(ci, chat.chatInfo)) { val user = chatModel.currentUser.value ?: return@CIFileView withBGApi { chatModel.controller.receiveFile(chat.remoteHostId, user, it) } } diff --git a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chatlist/ContactRequestView.kt b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chatlist/ContactRequestView.kt index 901761f65c..96e7fbacd0 100644 --- a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chatlist/ContactRequestView.kt +++ b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chatlist/ContactRequestView.kt @@ -27,8 +27,9 @@ fun ContactRequestView(contactRequest: ChatInfo.ContactRequest) { .padding(start = 8.dp, end = 8.sp.toDp()) .weight(1F) ) { - Text( + NameWithBadge( contactRequest.chatViewName, + contactRequest.nameBadge, maxLines = 1, overflow = TextOverflow.Ellipsis, style = MaterialTheme.typography.h3, diff --git a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chatlist/ShareListNavLinkView.kt b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chatlist/ShareListNavLinkView.kt index 47668c4fb3..07058b5787 100644 --- a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chatlist/ShareListNavLinkView.kt +++ b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chatlist/ShareListNavLinkView.kt @@ -104,8 +104,8 @@ private fun SharePreviewView(chat: Chat, disabled: Boolean) { } else { ProfileImage(size = 42.dp, chat.chatInfo.image) } - Text( - chat.chatInfo.chatViewName, maxLines = 1, overflow = TextOverflow.Ellipsis, + NameWithBadge( + chat.chatInfo.chatViewName, chat.chatInfo.nameBadge, maxLines = 1, overflow = TextOverflow.Ellipsis, color = if (disabled) MaterialTheme.colors.secondary else if (chat.chatInfo.incognito) Indigo else Color.Unspecified ) } diff --git a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chatlist/UserPicker.kt b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chatlist/UserPicker.kt index a02e0dc768..568cdfe574 100644 --- a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chatlist/UserPicker.kt +++ b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chatlist/UserPicker.kt @@ -210,7 +210,7 @@ fun UserPicker( } } else if (currentUser != null) { SectionItemView({ onUserClicked(currentUser) }, 80.dp, padding = PaddingValues(start = 16.dp, end = DEFAULT_PADDING), disabled = stopped) { - ProfilePreview(currentUser.profile, iconColor = iconColor, stopped = stopped) + ProfilePreview(currentUser.profile, iconColor = iconColor, stopped = stopped, badge = currentUser.profile.localBadge) } } } @@ -468,10 +468,11 @@ fun UserProfileRow(u: User, enabled: Boolean = remember { chatModel.chatRunning image = u.image, size = 54.dp * fontSizeSqrtMultiplier ) - Text( + // the end padding is on the row, not the name, so the badge stays right after the name + NameWithBadge( u.displayName, - modifier = Modifier - .padding(start = 10.dp, end = 8.dp), + u.profile.localBadge, + Modifier.padding(start = 10.dp, end = 8.dp), color = if (enabled) MenuTextColor else MaterialTheme.colors.secondary, fontWeight = if (u.activeUser) FontWeight.Medium else FontWeight.Normal ) diff --git a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/contacts/ContactPreviewView.kt b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/contacts/ContactPreviewView.kt index 636887275c..524fbedb1c 100644 --- a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/contacts/ContactPreviewView.kt +++ b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/contacts/ContactPreviewView.kt @@ -54,8 +54,9 @@ fun ContactPreviewView( if (cInfo.contact.verified) { VerifiedIcon() } - Text( + NameWithBadge( cInfo.chatViewName, + cInfo.nameBadge, maxLines = 1, overflow = TextOverflow.Ellipsis, color = textColor @@ -63,8 +64,9 @@ fun ContactPreviewView( } is ChatInfo.ContactRequest -> Row(verticalAlignment = Alignment.CenterVertically) { - Text( + NameWithBadge( cInfo.chatViewName, + cInfo.nameBadge, maxLines = 1, overflow = TextOverflow.Ellipsis, color = textColor diff --git a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/helpers/AlertManager.kt b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/helpers/AlertManager.kt index 3d670d1c43..c855259ffb 100644 --- a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/helpers/AlertManager.kt +++ b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/helpers/AlertManager.kt @@ -4,6 +4,7 @@ import androidx.compose.foundation.layout.* import androidx.compose.foundation.rememberScrollState import androidx.compose.foundation.shape.CornerSize import androidx.compose.foundation.shape.RoundedCornerShape +import androidx.compose.foundation.text.appendInlineContent import androidx.compose.foundation.text.selection.SelectionContainer import androidx.compose.foundation.verticalScroll import androidx.compose.material.* @@ -15,10 +16,12 @@ import androidx.compose.ui.graphics.Color import androidx.compose.ui.platform.LocalClipboardManager import androidx.compose.ui.platform.LocalDensity import androidx.compose.ui.text.AnnotatedString +import androidx.compose.ui.text.buildAnnotatedString import androidx.compose.ui.text.font.FontWeight import androidx.compose.ui.text.style.TextAlign import androidx.compose.ui.unit.* import chat.simplex.common.model.ChatModel +import chat.simplex.common.model.LocalBadge import chat.simplex.common.platform.* import chat.simplex.common.ui.theme.* import chat.simplex.res.MR @@ -272,6 +275,7 @@ class AlertManager { profileName: String, profileFullName: String, profileImage: @Composable () -> Unit, + profileBadge: LocalBadge? = null, subtitle: String? = null, information: String? = null, confirmText: String? = generalGetString(MR.strings.connect_plan_open_chat), @@ -299,8 +303,17 @@ class AlertManager { ) { profileImage() Spacer(Modifier.height(DEFAULT_PADDING_HALF)) + val nameFontSize = MaterialTheme.typography.h4.fontSize Text( - profileName, + buildAnnotatedString { + append(profileName) + if (profileBadge != null) { + append(" ") + appendInlineContent(id = "nameBadge") + } + }, + inlineContent = + if (profileBadge != null) mapOf("nameBadge" to nameBadgeInline(profileBadge, nameFontSize)) else emptyMap(), textAlign = TextAlign.Center, style = MaterialTheme.typography.h4, lineHeight = 20.sp, diff --git a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/helpers/ChatInfoImage.kt b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/helpers/ChatInfoImage.kt index 5f3a73e7ea..d2ee1db09c 100644 --- a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/helpers/ChatInfoImage.kt +++ b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/helpers/ChatInfoImage.kt @@ -3,10 +3,14 @@ package chat.simplex.common.views.helpers import androidx.compose.desktop.ui.tooling.preview.Preview import androidx.compose.foundation.Image import androidx.compose.foundation.background +import androidx.compose.foundation.clickable import androidx.compose.foundation.layout.* +import androidx.compose.foundation.text.InlineTextContent import androidx.compose.foundation.shape.* import androidx.compose.material.Icon +import androidx.compose.material.LocalTextStyle import androidx.compose.material.MaterialTheme +import androidx.compose.material.Text import androidx.compose.runtime.Composable import androidx.compose.runtime.remember import androidx.compose.ui.Alignment @@ -14,15 +18,28 @@ import androidx.compose.ui.Modifier import androidx.compose.ui.draw.* import androidx.compose.ui.graphics.* import androidx.compose.ui.layout.ContentScale +import androidx.compose.ui.platform.LocalDensity +import androidx.compose.ui.platform.UriHandler +import androidx.compose.ui.text.Placeholder +import androidx.compose.ui.text.PlaceholderVerticalAlign +import androidx.compose.ui.text.TextStyle +import androidx.compose.ui.text.font.FontStyle +import androidx.compose.ui.text.font.FontWeight +import androidx.compose.ui.text.style.TextOverflow import androidx.compose.ui.unit.* import dev.icerock.moko.resources.compose.painterResource import dev.icerock.moko.resources.compose.stringResource +import chat.simplex.common.model.BadgeStatus +import chat.simplex.common.model.BadgeType import chat.simplex.common.model.ChatInfo +import chat.simplex.common.model.LocalBadge +import chat.simplex.common.model.localDate import chat.simplex.common.platform.* import chat.simplex.common.ui.theme.* import chat.simplex.res.MR import dev.icerock.moko.resources.ImageResource import kotlin.math.max +import kotlin.math.roundToInt @Composable fun ChatInfoImage(chatInfo: ChatInfo, size: Dp, iconColor: Color = MaterialTheme.colors.secondaryVariant, shadow: Boolean = false) { @@ -103,6 +120,137 @@ fun ProfileImage( } } +// badge height in em: calibrated visually so the badge top matches capital letters and digits +// (Inter's declared cap height is 2048/2816 = 0.727em, but the rendered text is taller than the metrics predict) +private const val fontCapHeightRatio = 0.95f + +// fraction of the badge height pushed below the text baseline (like the undershoot of round letters) +private const val badgeBaselineOffsetRatio = 0.05f + +// the badge glyph's width / height (the SVGs are cropped to the glyph: 300 x 399) +private const val badgeAspectRatio = 300f / 399f + +// A contact/member name with the badge right after it: the badge is baseline-aligned with the name +// and sized to its font (fontSize if given, otherwise style.fontSize), and a truncated name keeps it visible. +@Composable +fun NameWithBadge( + name: String, + badge: LocalBadge?, + modifier: Modifier = Modifier, + color: Color = Color.Unspecified, + fontSize: TextUnit = TextUnit.Unspecified, + fontStyle: FontStyle? = null, + fontWeight: FontWeight? = null, + overflow: TextOverflow = TextOverflow.Clip, + maxLines: Int = Int.MAX_VALUE, + style: TextStyle = LocalTextStyle.current +) { + Row(modifier) { + Text( + name, + Modifier.alignByBaseline().weight(1f, fill = false), + color = color, + fontSize = fontSize, + fontStyle = fontStyle, + fontWeight = fontWeight, + overflow = overflow, + maxLines = maxLines, + style = style + ) + NameBadge(badge, if (fontSize.isSpecified) fontSize else style.fontSize) + } +} + +// Badge next to the contact name in a Row: top aligned with capital letters, bottom just below the text baseline. +// Use NameWithBadge unless the row needs special arrangement; then the name Text must use Modifier.alignByBaseline(). +@Composable +fun RowScope.NameBadge(badge: LocalBadge?, fontSize: TextUnit = LocalTextStyle.current.fontSize) { + // a badge that expired over a month ago (ExpiredOld) is not shown + if (badge == null || badge.status == BadgeStatus.ExpiredOld) return + val height = with(LocalDensity.current) { (if (fontSize.isSpecified) fontSize else 14.sp).toDp() } * fontCapHeightRatio + BadgeGlyph( + badge, + // the alignment line sits badgeBaselineOffsetRatio above the badge's bottom edge, + // so the Row places the badge that much below the text baseline; + // 6.dp matches the visible gap between the name and the verification shield: + // the shield has 3.dp end padding plus ~17% internal glyph margin, the badge artwork has none + Modifier.alignBy { (it.measuredHeight * (1 - badgeBaselineOffsetRatio)).roundToInt() }.padding(start = 6.dp).height(height).aspectRatio(badgeAspectRatio) + ) +} + +// badge inside a Text via appendInlineContent(id): bottom on the baseline, cap-height tall. +// precede with append(" ") for the space between the name and the badge. +fun nameBadgeInline(badge: LocalBadge, fontSize: TextUnit, onBadgeClick: (() -> Unit)? = null): InlineTextContent { + val height = fontSize * fontCapHeightRatio + return InlineTextContent( + Placeholder(height * badgeAspectRatio, height, PlaceholderVerticalAlign.AboveBaseline) + ) { + // the placeholder bottom sits on the baseline and can't extend below it, + // so the badge is drawn shifted down by badgeBaselineOffsetRatio instead + BadgeGlyph(badge, Modifier.fillMaxSize().graphicsLayer { translationY = size.height * badgeBaselineOffsetRatio }, onBadgeClick) + } +} + +@Composable +private fun BadgeGlyph(badge: LocalBadge, modifier: Modifier, onBadgeClick: (() -> Unit)? = null) { + val mod = modifier.let { if (onBadgeClick != null) it.clickable(onClick = onBadgeClick) else it } + if (badge.status == BadgeStatus.Failed || badge.status == BadgeStatus.UnknownKey) { + Icon(painterResource(MR.images.ic_warning_filled), contentDescription = null, tint = WarningOrange, modifier = mod) + } else { + Image( + painterResource(badgeImage(badge.badge.badgeType)), + contentDescription = null, + contentScale = ContentScale.Fit, + alpha = if (badge.status == BadgeStatus.Expired) 0.4f else 1f, + modifier = mod + ) + } +} + +fun showBadgeInfoAlert(name: String, badge: LocalBadge, uriHandler: UriHandler) { + // a verified badge's type is signed and can't be faked, so the real (possibly unknown) type name is the title + val title = badge.badge.badgeType.text.replaceFirstChar { it.uppercase() } + when { + badge.status == BadgeStatus.Failed -> + AlertManager.shared.showAlertMsg( + title = generalGetString(MR.strings.badge_unverified_title), + text = generalGetString(MR.strings.badge_unverified_desc) + ) + badge.status == BadgeStatus.UnknownKey -> + AlertManager.shared.showAlertMsg( + title = generalGetString(MR.strings.badge_unknown_key_title), + text = generalGetString(MR.strings.badge_unknown_key_desc) + ) + badge.badge.badgeType is BadgeType.Investor -> + AlertManager.shared.showAlertDialog( + title = title, + text = String.format(generalGetString(MR.strings.badge_invested), name), + confirmText = generalGetString(MR.strings.ok), + dismissText = generalGetString(MR.strings.learn_more), + onDismiss = { uriHandler.openUriCatching("https://simplex.chat/crowdfunding") } + ) + else -> { + // Supporter, Legend and unknown types use the supporter wording + val expiry = badge.badge.badgeExpiry + val supports = + if (badge.status == BadgeStatus.Expired && expiry != null) + String.format(generalGetString(MR.strings.badge_supported_simplex), name, localDate(expiry)) + else + String.format(generalGetString(MR.strings.badge_supports_simplex), name) + AlertManager.shared.showAlertMsg( + title = title, + text = supports + "\n\n" + generalGetString(MR.strings.badge_support_from_v7) + ) + } + } +} + +private fun badgeImage(t: BadgeType): ImageResource = when (t) { + is BadgeType.Legend -> MR.images.badge_legend + is BadgeType.Investor -> MR.images.badge_investor + else -> MR.images.badge_supporter // Supporter + Unknown +} + @Composable fun ProfileImage(size: Dp, image: ImageResource) { Image( diff --git a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/helpers/Utils.kt b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/helpers/Utils.kt index 23c622bc34..86f2f13313 100644 --- a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/helpers/Utils.kt +++ b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/helpers/Utils.kt @@ -126,6 +126,10 @@ const val MAX_FILE_SIZE_SMP: Long = 8000000 const val MAX_FILE_SIZE_XFTP: Long = 1_073_741_824 // 1GB +// raised XFTP receive limits for files from a sender with a supporter badge (also investor) or a legend badge +const val MAX_FILE_SIZE_XFTP_SUPPORTER: Long = 2_147_483_648 // 2GB +const val MAX_FILE_SIZE_XFTP_LEGEND: Long = 5_368_709_120 // 5GB + const val MAX_FILE_SIZE_LOCAL: Long = Long.MAX_VALUE expect fun getAppFileUri(fileName: String): URI @@ -442,14 +446,25 @@ fun directoryFileCountAndSize(dir: String): Pair { // count, size in return fileCount to bytes } -fun getMaxFileSize(fileProtocol: FileProtocol): Long { - return when (fileProtocol) { - FileProtocol.XFTP -> MAX_FILE_SIZE_XFTP - FileProtocol.SMP -> MAX_FILE_SIZE_SMP - FileProtocol.LOCAL -> MAX_FILE_SIZE_LOCAL +fun getMaxFileSize(fileProtocol: FileProtocol, senderProfile: LocalProfile? = null): Long = when (fileProtocol) { + FileProtocol.SMP -> MAX_FILE_SIZE_SMP + FileProtocol.LOCAL -> MAX_FILE_SIZE_LOCAL + // a sender's active badge raises the XFTP limit: legend to 5GB, any other (supporter/investor) to 2GB + FileProtocol.XFTP -> { + val badge = senderProfile?.localBadge + if (badge == null || badge.status != BadgeStatus.Active) MAX_FILE_SIZE_XFTP + else if (badge.badge.badgeType == BadgeType.Legend) MAX_FILE_SIZE_XFTP_LEGEND + else MAX_FILE_SIZE_XFTP_SUPPORTER } } +// the profile of whoever sent a received chat item - the group member, or the direct chat's contact +fun ciSenderProfile(ci: ChatItem, chatInfo: ChatInfo): LocalProfile? = when (val dir = ci.chatDir) { + is CIDirection.GroupRcv -> dir.groupMember.memberProfile + is CIDirection.DirectRcv -> (chatInfo as? ChatInfo.Direct)?.contact?.profile + else -> null +} + expect suspend fun getBitmapFromVideo(uri: URI, timestamp: Long? = null, random: Boolean = true, withAlertOnException: Boolean = true): VideoPlayerInterface.PreviewAndDuration fun showWrongUriAlert() { diff --git a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/newchat/ConnectPlan.kt b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/newchat/ConnectPlan.kt index 9fd5dd5b4a..e5dbe01d68 100644 --- a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/newchat/ConnectPlan.kt +++ b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/newchat/ConnectPlan.kt @@ -474,6 +474,8 @@ private fun showOpenKnownContactAlert(chatModel: ChatModel, rhId: Long?, close: icon = contact.chatIconName ) }, + // the alert shows the badge inline, so it skips the long-expired (ExpiredOld) badge here too + profileBadge = if (contact.active && contact.profile.localBadge?.status != BadgeStatus.ExpiredOld) contact.profile.localBadge else null, confirmText = generalGetString(if (contact.nextConnectPrepared) MR.strings.connect_plan_open_new_chat else MR.strings.connect_plan_open_chat), onConfirm = { openKnownContact(chatModel, rhId, close, contact) @@ -633,6 +635,7 @@ fun showPrepareContactAlert( else MR.images.ic_account_circle_filled ) }, + profileBadge = if (contactShortLinkData.localBadge?.status == BadgeStatus.ExpiredOld) null else contactShortLinkData.localBadge, information = ownerVerificationMessage(ownerVerification), confirmText = generalGetString(MR.strings.connect_plan_open_new_chat), onConfirm = { diff --git a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/newchat/NewChatView.kt b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/newchat/NewChatView.kt index b1ab8eb24e..be16ced1f5 100644 --- a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/newchat/NewChatView.kt +++ b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/newchat/NewChatView.kt @@ -230,7 +230,8 @@ private fun ProfilePickerOption( disabled: Boolean, onSelected: () -> Unit, image: @Composable () -> Unit, - onInfo: (() -> Unit)? = null + onInfo: (() -> Unit)? = null, + badge: LocalBadge? = null ) { Row( Modifier @@ -243,7 +244,7 @@ private fun ProfilePickerOption( ) { image() TextIconSpaced(false) - Text(title, modifier = Modifier.align(Alignment.CenterVertically)) + NameWithBadge(title, badge, Modifier.align(Alignment.CenterVertically)) if (onInfo != null) { Spacer(Modifier.padding(6.dp)) Column(Modifier @@ -365,7 +366,8 @@ fun ActiveProfilePicker( } } }, - image = { ProfileImage(size = 42.dp, image = user.image) } + image = { ProfileImage(size = 42.dp, image = user.image) }, + badge = user.profile.localBadge ) } diff --git a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/usersettings/SettingsView.kt b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/usersettings/SettingsView.kt index a02d67265d..22270ea5bb 100644 --- a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/usersettings/SettingsView.kt +++ b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/usersettings/SettingsView.kt @@ -309,12 +309,13 @@ fun AppVersionItem(showVersion: () -> Unit) { Text(appVersionInfo.first + (if (appVersionInfo.second != null) " (" + appVersionInfo.second + ")" else "")) } -@Composable fun ProfilePreview(profileOf: NamedChat, size: Dp = 60.dp, iconColor: Color = MaterialTheme.colors.secondaryVariant, textColor: Color = MaterialTheme.colors.onBackground, stopped: Boolean = false) { +@Composable fun ProfilePreview(profileOf: NamedChat, size: Dp = 60.dp, iconColor: Color = MaterialTheme.colors.secondaryVariant, textColor: Color = MaterialTheme.colors.onBackground, stopped: Boolean = false, badge: LocalBadge? = null) { ProfileImage(size = size, image = profileOf.image, color = iconColor) Spacer(Modifier.padding(horizontal = 8.dp)) Column(Modifier.height(size), verticalArrangement = Arrangement.Center) { - Text( + NameWithBadge( profileOf.displayName, + badge, style = MaterialTheme.typography.caption, fontWeight = FontWeight.Bold, color = if (stopped) MaterialTheme.colors.secondary else textColor, diff --git a/apps/multiplatform/common/src/commonMain/resources/MR/base/strings.xml b/apps/multiplatform/common/src/commonMain/resources/MR/base/strings.xml index cd0508f95a..ecca74fae2 100644 --- a/apps/multiplatform/common/src/commonMain/resources/MR/base/strings.xml +++ b/apps/multiplatform/common/src/commonMain/resources/MR/base/strings.xml @@ -3105,4 +3105,12 @@ SimpleX — %d unread Minimize to tray when closing window Keep SimpleX running in the background to receive messages. + %s supports SimpleX Chat. + %1$s supported SimpleX Chat. The badge expired on %2$s. + You can support SimpleX starting from v7 of the app. + %s invested in SimpleX Chat crowdfunding. + Unverified badge + This badge could not be verified and may not be genuine. + Badge cannot be verified + The badge is signed with a key that this version of the app does not recognize. Update the app to verify this badge. \ No newline at end of file diff --git a/apps/multiplatform/common/src/commonMain/resources/MR/images/badge_investor.svg b/apps/multiplatform/common/src/commonMain/resources/MR/images/badge_investor.svg new file mode 100644 index 0000000000..330da9b50d --- /dev/null +++ b/apps/multiplatform/common/src/commonMain/resources/MR/images/badge_investor.svg @@ -0,0 +1,12 @@ + + + + + + + + + + + + diff --git a/apps/multiplatform/common/src/commonMain/resources/MR/images/badge_legend.svg b/apps/multiplatform/common/src/commonMain/resources/MR/images/badge_legend.svg new file mode 100644 index 0000000000..7f892cd25c --- /dev/null +++ b/apps/multiplatform/common/src/commonMain/resources/MR/images/badge_legend.svg @@ -0,0 +1,12 @@ + + + + + + + + + + + + diff --git a/apps/multiplatform/common/src/commonMain/resources/MR/images/badge_supporter.svg b/apps/multiplatform/common/src/commonMain/resources/MR/images/badge_supporter.svg new file mode 100644 index 0000000000..9ebdc15c11 --- /dev/null +++ b/apps/multiplatform/common/src/commonMain/resources/MR/images/badge_supporter.svg @@ -0,0 +1,12 @@ + + + + + + + + + + + + diff --git a/apps/multiplatform/common/src/desktopMain/kotlin/chat/simplex/common/views/chatlist/UserPicker.desktop.kt b/apps/multiplatform/common/src/desktopMain/kotlin/chat/simplex/common/views/chatlist/UserPicker.desktop.kt index 52e845b422..43428bab72 100644 --- a/apps/multiplatform/common/src/desktopMain/kotlin/chat/simplex/common/views/chatlist/UserPicker.desktop.kt +++ b/apps/multiplatform/common/src/desktopMain/kotlin/chat/simplex/common/views/chatlist/UserPicker.desktop.kt @@ -12,7 +12,6 @@ import androidx.compose.ui.Alignment import androidx.compose.ui.Modifier import androidx.compose.ui.graphics.Color import androidx.compose.ui.text.font.FontWeight -import androidx.compose.ui.text.style.TextAlign import androidx.compose.ui.text.style.TextOverflow import androidx.compose.ui.unit.dp import androidx.compose.ui.unit.sp @@ -67,15 +66,17 @@ actual fun UserPickerUsersSection( } } - Text( - user.displayName, - fontSize = 12.sp, - fontWeight = if (user.activeUser) FontWeight.Bold else FontWeight.Normal, - maxLines = 1, - overflow = TextOverflow.Ellipsis, - modifier = Modifier.width(65.dp), - textAlign = TextAlign.Center - ) + Row(Modifier.width(65.dp), horizontalArrangement = Arrangement.Center) { + Text( + user.displayName, + fontSize = 12.sp, + fontWeight = if (user.activeUser) FontWeight.Bold else FontWeight.Normal, + maxLines = 1, + overflow = TextOverflow.Ellipsis, + modifier = Modifier.alignByBaseline().weight(1f, fill = false) + ) + NameBadge(user.profile.localBadge, 12.sp) + } } } } diff --git a/apps/simplex-chat/Main.hs b/apps/simplex-chat/Main.hs index 41321edc68..f0501fef4f 100644 --- a/apps/simplex-chat/Main.hs +++ b/apps/simplex-chat/Main.hs @@ -1,8 +1,14 @@ module Main where import Server (simplexChatServer) +import Simplex.Chat.Badges.CLI (runBadgeCommand) import Simplex.Chat.Terminal (terminalChatConfig) import Simplex.Chat.Terminal.Main (simplexChatCLI) +import System.Environment (getArgs) main :: IO () -main = simplexChatCLI terminalChatConfig (Just simplexChatServer) +main = do + args <- getArgs + case args of + ("badge" : _) -> runBadgeCommand args + _ -> simplexChatCLI terminalChatConfig (Just simplexChatServer) diff --git a/apps/simplex-directory-service/src/Directory/Store.hs b/apps/simplex-directory-service/src/Directory/Store.hs index 4036bd8cf1..89c5178f7d 100644 --- a/apps/simplex-directory-service/src/Directory/Store.hs +++ b/apps/simplex-directory-service/src/Directory/Store.hs @@ -313,43 +313,48 @@ getGroupReg_ db gId = getGroupAndReg :: ChatController -> User -> GroupId -> IO (Either String (GroupInfo, GroupReg)) getGroupAndReg cc user@User {userId, userContactId} gId = - withDB "getGroupAndReg" cc $ \db -> - ExceptT $ firstRow (toGroupInfoReg (storeCxt cc) user) ("group " ++ show gId ++ " not found") $ - DB.query db (groupReqQuery <> " AND g.group_id = ?") (userId, userContactId, gId) + withDB "getGroupAndReg" cc $ \db -> do + currentTs <- liftIO getCurrentTime + ExceptT $ firstRow (toGroupInfoReg currentTs (storeCxt cc) user) ("group " ++ show gId ++ " not found") $ + DB.query db (groupReqQuery <> " AND g.group_id = ?") (userId, userContactId, gId) getUserGroupReg :: ChatController -> User -> ContactId -> UserGroupRegId -> IO (Either String (GroupInfo, GroupReg)) getUserGroupReg cc user@User {userId, userContactId} ctId ugrId = - withDB "getUserGroupReg" cc $ \db -> - ExceptT $ firstRow (toGroupInfoReg (storeCxt cc) user) ("group " ++ show ugrId ++ " not found") $ + withDB "getUserGroupReg" cc $ \db -> do + currentTs <- liftIO getCurrentTime + ExceptT $ firstRow (toGroupInfoReg currentTs (storeCxt cc) user) ("group " ++ show ugrId ++ " not found") $ DB.query db (groupReqQuery <> " AND r.contact_id = ? AND r.user_group_reg_id = ?") (userId, userContactId, ctId, ugrId) getUserGroupRegs :: ChatController -> User -> ContactId -> IO (Either String [(GroupInfo, GroupReg)]) getUserGroupRegs cc user@User {userId, userContactId} ctId = - withDB' "getUserGroupRegs" cc $ \db -> - map (toGroupInfoReg (storeCxt cc) user) + withDB' "getUserGroupRegs" cc $ \db -> do + currentTs <- getCurrentTime + map (toGroupInfoReg currentTs (storeCxt cc) user) <$> DB.query db (groupReqQuery <> " AND r.contact_id = ? ORDER BY r.user_group_reg_id") (userId, userContactId, ctId) getAllListedGroups :: ChatController -> User -> IO (Either String [(GroupInfo, GroupReg, Maybe GroupLink)]) getAllListedGroups cc user = withDB' "getAllListedGroups" cc $ \db -> getAllListedGroups_ db (storeCxt cc) user getAllListedGroups_ :: DB.Connection -> StoreCxt -> User -> IO [(GroupInfo, GroupReg, Maybe GroupLink)] -getAllListedGroups_ db cxt user@User {userId, userContactId} = +getAllListedGroups_ db cxt user@User {userId, userContactId} = do + currentTs <- getCurrentTime DB.query db (groupReqQuery <> " AND r.group_reg_status = ?") (userId, userContactId, GRSActive) - >>= mapM (withGroupLink . toGroupInfoReg cxt user) + >>= mapM (withGroupLink . toGroupInfoReg currentTs cxt user) where withGroupLink (g, gr) = (g,gr,) . eitherToMaybe <$> runExceptT (getGroupLink db user g) searchListedGroups :: ChatController -> User -> SearchType -> Maybe GroupId -> Int -> IO (Either String ([(GroupInfo, GroupReg)], Int)) searchListedGroups cc user@User {userId, userContactId} searchType lastGroup_ pageSize = - withDB' "searchListedGroups" cc $ \db -> + withDB' "searchListedGroups" cc $ \db -> do + currentTs <- getCurrentTime case searchType of STAll -> case lastGroup_ of Nothing -> do - gs <- groups $ DB.query db (listedGroupQuery <> orderBy <> " LIMIT ?") (userId, userContactId, GRSActive, pageSize) + gs <- groups currentTs $ DB.query db (listedGroupQuery <> orderBy <> " LIMIT ?") (userId, userContactId, GRSActive, pageSize) n <- count $ DB.query db countQuery' (Only GRSActive) pure (gs, n) Just gId -> do - gs <- groups $ DB.query db (listedGroupQuery <> " AND r.group_id > ? " <> orderBy <> " LIMIT ?") (userId, userContactId, GRSActive, gId, pageSize) + gs <- groups currentTs $ DB.query db (listedGroupQuery <> " AND r.group_id > ? " <> orderBy <> " LIMIT ?") (userId, userContactId, GRSActive, gId, pageSize) n <- count $ DB.query db (countQuery' <> " AND r.group_id > ?") (GRSActive, gId) pure (gs, n) where @@ -357,11 +362,11 @@ searchListedGroups cc user@User {userId, userContactId} searchType lastGroup_ pa orderBy = " ORDER BY g.summary_current_members_count DESC, r.group_reg_id ASC " STRecent -> case lastGroup_ of Nothing -> do - gs <- groups $ DB.query db (listedGroupQuery <> orderBy <> " LIMIT ?") (userId, userContactId, GRSActive, pageSize) + gs <- groups currentTs $ DB.query db (listedGroupQuery <> orderBy <> " LIMIT ?") (userId, userContactId, GRSActive, pageSize) n <- count $ DB.query db countQuery' (Only GRSActive) pure (gs, n) Just gId -> do - gs <- groups $ DB.query db (listedGroupQuery <> " AND r.group_id > ? " <> orderBy <> " LIMIT ?") (userId, userContactId, GRSActive, gId, pageSize) + gs <- groups currentTs $ DB.query db (listedGroupQuery <> " AND r.group_id > ? " <> orderBy <> " LIMIT ?") (userId, userContactId, GRSActive, gId, pageSize) n <- count $ DB.query db (countQuery' <> " AND r.group_id > ?") (GRSActive, gId) pure (gs, n) where @@ -369,11 +374,11 @@ searchListedGroups cc user@User {userId, userContactId} searchType lastGroup_ pa orderBy = " ORDER BY r.created_at DESC, r.group_reg_id ASC " STSearch search -> case lastGroup_ of Nothing -> do - gs <- groups $ DB.query db (listedGroupQuery <> searchCond <> orderBy <> " LIMIT ?") (userId, userContactId, GRSActive, s, s, s, s, pageSize) + gs <- groups currentTs $ DB.query db (listedGroupQuery <> searchCond <> orderBy <> " LIMIT ?") (userId, userContactId, GRSActive, s, s, s, s, pageSize) n <- count $ DB.query db (countQuery' <> searchCond) (GRSActive, s, s, s, s) pure (gs, n) Just gId -> do - gs <- groups $ DB.query db (listedGroupQuery <> " AND r.group_id > ? " <> searchCond <> orderBy <> " LIMIT ?") (userId, userContactId, GRSActive, gId, s, s, s, s, pageSize) + gs <- groups currentTs $ DB.query db (listedGroupQuery <> " AND r.group_id > ? " <> searchCond <> orderBy <> " LIMIT ?") (userId, userContactId, GRSActive, gId, s, s, s, s, pageSize) n <- count $ DB.query db (countQuery' <> " AND r.group_id > ? " <> searchCond) (GRSActive, gId, s, s, s, s) pure (gs, n) where @@ -381,7 +386,7 @@ searchListedGroups cc user@User {userId, userContactId} searchType lastGroup_ pa countQuery' = countQuery <> " JOIN group_profiles gp ON gp.group_profile_id = g.group_profile_id WHERE r.group_reg_status = ? " orderBy = " ORDER BY g.summary_current_members_count DESC, r.group_reg_id ASC " where - groups = (map (toGroupInfoReg (storeCxt cc) user) <$>) + groups currentTs = (map (toGroupInfoReg currentTs (storeCxt cc) user) <$>) count = maybeFirstRow' 0 fromOnly listedGroupQuery = groupReqQuery <> " AND r.group_reg_status = ? " countQuery = "SELECT COUNT(1) FROM groups g JOIN sx_directory_group_regs r ON g.group_id = r.group_id " @@ -395,21 +400,24 @@ searchListedGroups cc user@User {userId, userContactId} searchType lastGroup_ pa |] getAllGroupRegs_ :: DB.Connection -> StoreCxt -> User -> IO [(GroupInfo, GroupReg)] -getAllGroupRegs_ db cxt user@User {userId, userContactId} = - map (toGroupInfoReg cxt user) +getAllGroupRegs_ db cxt user@User {userId, userContactId} = do + currentTs <- getCurrentTime + map (toGroupInfoReg currentTs cxt user) <$> DB.query db groupReqQuery (userId, userContactId) getDuplicateGroupRegs :: ChatController -> User -> Text -> IO (Either String [(GroupInfo, GroupReg)]) getDuplicateGroupRegs cc user@User {userId, userContactId} displayName = - withDB' "getDuplicateGroupRegs" cc $ \db -> - map (toGroupInfoReg (storeCxt cc) user) + withDB' "getDuplicateGroupRegs" cc $ \db -> do + currentTs <- getCurrentTime + map (toGroupInfoReg currentTs (storeCxt cc) user) <$> DB.query db (groupReqQuery <> " AND gp.display_name = ?") (userId, userContactId, displayName) listLastGroups :: ChatController -> User -> Int -> IO (Either String ([(GroupInfo, GroupReg)], Int)) listLastGroups cc user@User {userId, userContactId} count = withDB' "getUserGroupRegs" cc $ \db -> do + currentTs <- getCurrentTime gs <- - map (toGroupInfoReg (storeCxt cc) user) + map (toGroupInfoReg currentTs (storeCxt cc) user) <$> DB.query db (groupReqQuery <> " ORDER BY group_reg_id DESC LIMIT ?") (userId, userContactId, count) n <- maybeFirstRow' 0 fromOnly $ DB.query_ db "SELECT COUNT(1) FROM sx_directory_group_regs" pure (gs, n) @@ -417,15 +425,16 @@ listLastGroups cc user@User {userId, userContactId} count = listPendingGroups :: ChatController -> User -> Int -> IO (Either String ([(GroupInfo, GroupReg)], Int)) listPendingGroups cc user@User {userId, userContactId} count = withDB' "getUserGroupRegs" cc $ \db -> do + currentTs <- getCurrentTime gs <- - map (toGroupInfoReg (storeCxt cc) user) + map (toGroupInfoReg currentTs (storeCxt cc) user) <$> DB.query db (groupReqQuery <> " AND r.group_reg_status LIKE 'pending_approval%' ORDER BY group_reg_id DESC LIMIT ?") (userId, userContactId, count) n <- maybeFirstRow' 0 fromOnly $ DB.query_ db "SELECT COUNT(1) FROM sx_directory_group_regs WHERE group_reg_status LIKE 'pending_approval%'" pure (gs, n) -toGroupInfoReg :: StoreCxt -> User -> (GroupInfoRow :. GroupRegRow) -> (GroupInfo, GroupReg) -toGroupInfoReg cxt User {userContactId} (groupRow :. grRow) = - (toGroupInfo cxt userContactId [] groupRow, rowToGroupReg grRow) +toGroupInfoReg :: UTCTime -> StoreCxt -> User -> (GroupInfoRow :. GroupRegRow) -> (GroupInfo, GroupReg) +toGroupInfoReg currentTs cxt User {userContactId} (groupRow :. grRow) = + (toGroupInfo currentTs cxt userContactId [] groupRow, rowToGroupReg grRow) type GroupRegRow = (GroupId, UserGroupRegId, ContactId, Maybe GroupMemberId, GroupRegStatus, BoolInt, UTCTime) diff --git a/bots/api/TYPES.md b/bots/api/TYPES.md index a87bcae5e4..60cee67d78 100644 --- a/bots/api/TYPES.md +++ b/bots/api/TYPES.md @@ -10,6 +10,10 @@ This file is generated automatically. - [AgentCryptoError](#agentcryptoerror) - [AgentErrorType](#agenterrortype) - [AutoAccept](#autoaccept) +- [BadgeInfo](#badgeinfo) +- [BadgeProof](#badgeproof) +- [BadgeStatus](#badgestatus) +- [BadgeType](#badgetype) - [BlockingInfo](#blockinginfo) - [BlockingReason](#blockingreason) - [BrokerErrorType](#brokererrortype) @@ -122,6 +126,7 @@ This file is generated automatically. - [LinkContent](#linkcontent) - [LinkOwnerSig](#linkownersig) - [LinkPreview](#linkpreview) +- [LocalBadge](#localbadge) - [LocalProfile](#localprofile) - [MemberCriteria](#membercriteria) - [MsgChatLink](#msgchatlink) @@ -353,6 +358,49 @@ INACTIVE: - acceptIncognito: bool +--- + +## BadgeInfo + +**Record type**: +- badgeType: [BadgeType](#badgetype) +- badgeExpiry: UTCTime? +- badgeExtra: string + + +--- + +## BadgeProof + +**Record type**: +- badgeKeyIdx: int +- presHeader: string +- proof: string +- badgeInfo: [BadgeInfo](#badgeinfo) + + +--- + +## BadgeStatus + +**Enum type**: +- "active" +- "expired" +- "expiredOld" +- "failed" +- "unknownKey" + + +--- + +## BadgeType + +**Enum type**: +- "supporter" +- "legend" +- "investor" + + --- ## BlockingInfo @@ -1766,6 +1814,7 @@ ContactViaAddress: - profile: [Profile](#profile) - message: [MsgContent](#msgcontent)? - business: bool +- localBadge: [LocalBadge](#localbadge)? --- @@ -2672,6 +2721,15 @@ Unknown: - content: [LinkContent](#linkcontent)? +--- + +## LocalBadge + +**Record type**: +- badge: [BadgeInfo](#badgeinfo) +- status: [BadgeStatus](#badgestatus) + + --- ## LocalProfile @@ -2685,6 +2743,7 @@ Unknown: - contactLink: string? - preferences: [Preferences](#preferences)? - peerType: [ChatPeerType](#chatpeertype)? +- localBadge: [LocalBadge](#localbadge)? - localAlias: string @@ -3029,6 +3088,7 @@ count= - contactLink: string? - preferences: [Preferences](#preferences)? - peerType: [ChatPeerType](#chatpeertype)? +- badge: [BadgeProof](#badgeproof)? --- @@ -4213,7 +4273,7 @@ Handshake: - cReqChatVRange: [VersionRange](#versionrange) - localDisplayName: string - profileId: int64 -- profile: [Profile](#profile) +- profile: [LocalProfile](#localprofile) - createdAt: UTCTime - updatedAt: UTCTime - xContactId: string? diff --git a/bots/src/API/Docs/Commands.hs b/bots/src/API/Docs/Commands.hs index 8894609758..1cd7c78913 100644 --- a/bots/src/API/Docs/Commands.hs +++ b/bots/src/API/Docs/Commands.hs @@ -202,6 +202,7 @@ cliCommands = "AbortSwitchGroupMember", "AcceptContact", "AcceptMember", + "AddBadge", "AddContact", "AddMember", "AllowRelayGroup", diff --git a/bots/src/API/Docs/Types.hs b/bots/src/API/Docs/Types.hs index 8397503bbe..7b268f4ec5 100644 --- a/bots/src/API/Docs/Types.hs +++ b/bots/src/API/Docs/Types.hs @@ -34,6 +34,7 @@ import Simplex.Chat.Store.Profiles import Simplex.Chat.Store.Shared import Simplex.Chat.Operators import Simplex.Messaging.Agent.Store.Entity (DBStored (..)) +import Simplex.Chat.Badges (BadgeInfo (..), BadgeProof (..), BadgeStatus (..), BadgeType (..), JSONBadge (..)) import Simplex.Chat.Types import Simplex.Chat.Types.Preferences import Simplex.Chat.Types.Shared @@ -183,6 +184,7 @@ ciQuoteType = chatTypesDocsData :: [(SumTypeInfo, SumTypeJsonEncoding, String, [ConsName], Expr, Text)] chatTypesDocsData = [ ((sti @(Chat 'CTDirect)) {typeName = "AChat"}, STRecord, "", [], "", ""), + ((sti @JSONBadge) {typeName = "LocalBadge"}, STRecord, "", [], "", ""), ((sti @JSONChatInfo) {typeName = "ChatInfo"}, STUnion, "JCInfo", ["JCInfoInvalidJSON"], "", ""), ((sti @JSONCIContent) {typeName = "CIContent"}, STUnion, "JCI", ["JCIInvalidJSON"], "", ""), ((sti @JSONCIDeleted) {typeName = "CIDeleted"}, STUnion, "JCID", [], "", ""), @@ -207,6 +209,7 @@ chatTypesDocsData = (sti @AgentCryptoError, STUnion, "", ["RATCHET_EARLIER", "RATCHET_SKIPPED"], "", ""), -- TODO add fields to types (sti @AgentErrorType, STUnion, "", [], "", ""), (sti @AutoAccept, STRecord, "", [], "", ""), + (sti @BadgeProof, STRecord, "", [], "", ""), (sti @BlockingInfo, STRecord, "", [], "", ""), (sti @BlockingReason, STEnum, "BR", [], "", ""), (sti @BrokerErrorType, STUnion, "", [], "", ""), @@ -216,6 +219,8 @@ chatTypesDocsData = (sti @ChatDeleteMode, STUnion, "CDM", [], Param "type" <> Choice "self" [("messages", "")] (OnOffParam "notify" "notify" (Just True)), ""), (sti @ChatError, STUnion, "Chat", ["ChatErrorDatabase", "ChatErrorRemoteHost", "ChatErrorRemoteCtrl"], "", ""), (sti @ChatErrorType, STUnion, "CE", ["CEContactNotFound", "CEServerProtocol", "CECallState", "CEInvalidChatMessage"], "", ""), + (sti @BadgeStatus, STEnum, "BS", [], "", ""), + (sti @BadgeType, STEnum, "BT", ["BTUnknown"], "", ""), (sti @ChatFeature, STEnum, "CF", [], "", ""), (sti @ChatItemDeletion, STRecord, "", [], "", "Message deletion result."), (sti @ChatPeerType, STEnum, "CPT", [], "", ""), @@ -303,6 +308,7 @@ chatTypesDocsData = (sti @LinkContent, STUnion, "LC", [], "", ""), (sti @LinkOwnerSig, STRecord, "", [], "", ""), (sti @LinkPreview, STRecord, "", [], "", ""), + (sti @BadgeInfo, STRecord, "", [], "", ""), (sti @LocalProfile, STRecord, "", [], "", ""), (sti @MemberCriteria, STEnum1, "MC", [], "", ""), (sti @MsgChatLink, STUnion, "MCL", [], "", "Connection link sent in a message - only short links are allowed."), @@ -422,11 +428,14 @@ deriving instance Generic AddressSettings deriving instance Generic AgentCryptoError deriving instance Generic AgentErrorType deriving instance Generic AutoAccept +deriving instance Generic BadgeProof deriving instance Generic BlockingInfo deriving instance Generic BlockingReason deriving instance Generic BrokerErrorType deriving instance Generic BusinessChatInfo deriving instance Generic BusinessChatType +deriving instance Generic BadgeStatus +deriving instance Generic BadgeType deriving instance Generic ChatBotCommand deriving instance Generic ChatDeleteMode deriving instance Generic ChatError @@ -515,6 +524,7 @@ deriving instance Generic HandshakeError deriving instance Generic InlineFileMode deriving instance Generic InvitationLinkPlan deriving instance Generic InvitedBy +deriving instance Generic JSONBadge deriving instance Generic JSONChatInfo deriving instance Generic JSONCIContent deriving instance Generic JSONCIDeleted @@ -524,6 +534,7 @@ deriving instance Generic JSONCIStatus deriving instance Generic LinkContent deriving instance Generic LinkOwnerSig deriving instance Generic LinkPreview +deriving instance Generic BadgeInfo deriving instance Generic LocalProfile deriving instance Generic MemberCriteria deriving instance Generic MsgChatLink diff --git a/bots/src/API/TypeInfo.hs b/bots/src/API/TypeInfo.hs index 36e87db62d..8dfba2bbb0 100644 --- a/bots/src/API/TypeInfo.hs +++ b/bots/src/API/TypeInfo.hs @@ -198,7 +198,11 @@ toTypeInfo tr = "AgentInvId", "AgentRcvFileId", "AgentSndFileId", + "BadgeMasterKey", "B64UrlByteString", + "BBSProof", + "BBSPresHeader", + "BBSSignature", "CbNonce", "ConnectionLink", "ConnShortLink", diff --git a/cabal.project b/cabal.project index 3e32dfcd5e..d3b9eeffa5 100644 --- a/cabal.project +++ b/cabal.project @@ -21,7 +21,7 @@ constraints: zip +disable-bzip2 +disable-zstd source-repository-package type: git location: https://github.com/simplex-chat/simplexmq.git - tag: b981dcb70b8c99dc3733a99b6c1dc0d0ef83a3f7 + tag: 9f9b6c8e88524fb5fd063f47617a679ea53ac7c0 source-repository-package type: git diff --git a/flake.nix b/flake.nix index 43f4e8912a..fdd041bd88 100644 --- a/flake.nix +++ b/flake.nix @@ -406,6 +406,8 @@ "chat_send_remote_cmd_retry" "chat_valid_name" "chat_json_length" + "chat_badge_keygen" + "chat_badge_issue" "chat_write_file" ]; postInstall = '' @@ -525,6 +527,8 @@ "chat_send_remote_cmd_retry" "chat_valid_name" "chat_json_length" + "chat_badge_keygen" + "chat_badge_issue" "chat_write_file" ]; postInstall = '' @@ -591,6 +595,7 @@ packages.simplex-chat.flags.swift = true; packages.simplexmq.flags.swift = true; packages.direct-sqlcipher.flags.commoncrypto = true; + packages.simplexmq.flags.commoncrypto = true; packages.entropy.flags.DoNotGetEntropy = true; packages.simplex-chat.flags.client_library = true; packages.simplexmq.flags.client_library = true; @@ -607,6 +612,7 @@ pkgs' = pkgs; extra-modules = [{ packages.direct-sqlcipher.flags.commoncrypto = true; + packages.simplexmq.flags.commoncrypto = true; packages.entropy.flags.DoNotGetEntropy = true; packages.simplex-chat.flags.client_library = true; packages.simplexmq.flags.client_library = true; @@ -626,6 +632,7 @@ packages.simplex-chat.flags.swift = true; packages.simplexmq.flags.swift = true; packages.direct-sqlcipher.flags.commoncrypto = true; + packages.simplexmq.flags.commoncrypto = true; packages.entropy.flags.DoNotGetEntropy = true; packages.simplex-chat.flags.client_library = true; packages.simplexmq.flags.client_library = true; @@ -641,6 +648,7 @@ pkgs' = pkgs; extra-modules = [{ packages.direct-sqlcipher.flags.commoncrypto = true; + packages.simplexmq.flags.commoncrypto = true; packages.entropy.flags.DoNotGetEntropy = true; packages.simplex-chat.flags.client_library = true; packages.simplexmq.flags.client_library = true; diff --git a/libsimplex.dll.def b/libsimplex.dll.def index 76e6f9f3ee..ec4125193f 100644 --- a/libsimplex.dll.def +++ b/libsimplex.dll.def @@ -16,6 +16,8 @@ EXPORTS chat_password_hash chat_valid_name chat_json_length + chat_badge_keygen + chat_badge_issue chat_encrypt_media chat_decrypt_media chat_write_file diff --git a/packages/simplex-chat-client/types/typescript/src/types.ts b/packages/simplex-chat-client/types/typescript/src/types.ts index 5e671169de..883728f943 100644 --- a/packages/simplex-chat-client/types/typescript/src/types.ts +++ b/packages/simplex-chat-client/types/typescript/src/types.ts @@ -186,6 +186,33 @@ export interface AutoAccept { acceptIncognito: boolean } +export interface BadgeInfo { + badgeType: BadgeType + badgeExpiry?: string // ISO-8601 timestamp + badgeExtra: string +} + +export interface BadgeProof { + badgeKeyIdx: number // int + presHeader: string + proof: string + badgeInfo: BadgeInfo +} + +export enum BadgeStatus { + Active = "active", + Expired = "expired", + ExpiredOld = "expiredOld", + Failed = "failed", + UnknownKey = "unknownKey", +} + +export enum BadgeType { + Supporter = "supporter", + Legend = "legend", + Investor = "investor", +} + export interface BlockingInfo { reason: BlockingReason notice?: ClientNotice @@ -2044,6 +2071,7 @@ export interface ContactShortLinkData { profile: Profile message?: MsgContent business: boolean + localBadge?: LocalBadge } export enum ContactStatus { @@ -2940,6 +2968,11 @@ export interface LinkPreview { content?: LinkContent } +export interface LocalBadge { + badge: BadgeInfo + status: BadgeStatus +} + export interface LocalProfile { profileId: number // int64 displayName: string @@ -2949,6 +2982,7 @@ export interface LocalProfile { contactLink?: string preferences?: Preferences peerType?: ChatPeerType + localBadge?: LocalBadge localAlias: string } @@ -3299,6 +3333,7 @@ export interface Profile { contactLink?: string preferences?: Preferences peerType?: ChatPeerType + badge?: BadgeProof } export type ProxyClientError = @@ -4882,7 +4917,7 @@ export interface UserContactRequest { cReqChatVRange: VersionRange localDisplayName: string profileId: number // int64 - profile: Profile + profile: LocalProfile createdAt: string // ISO-8601 timestamp updatedAt: string // ISO-8601 timestamp xContactId?: string diff --git a/packages/simplex-chat-python/src/simplex_chat/types/_types.py b/packages/simplex-chat-python/src/simplex_chat/types/_types.py index 66ba77c062..855a967215 100644 --- a/packages/simplex-chat-python/src/simplex_chat/types/_types.py +++ b/packages/simplex-chat-python/src/simplex_chat/types/_types.py @@ -138,6 +138,21 @@ AgentErrorType_Tag = Literal["CMD", "CONN", "NO_USER", "SMP", "NTF", "XFTP", "FI class AutoAccept(TypedDict): acceptIncognito: bool +class BadgeInfo(TypedDict): + badgeType: "BadgeType" + badgeExpiry: NotRequired[str] # ISO-8601 timestamp + badgeExtra: str + +class BadgeProof(TypedDict): + badgeKeyIdx: int # int + presHeader: str + proof: str + badgeInfo: "BadgeInfo" + +BadgeStatus = Literal["active", "expired", "expiredOld", "failed", "unknownKey"] + +BadgeType = Literal["supporter", "legend", "investor"] + class BlockingInfo(TypedDict): reason: "BlockingReason" notice: NotRequired["ClientNotice"] @@ -1441,6 +1456,7 @@ class ContactShortLinkData(TypedDict): profile: "Profile" message: NotRequired["MsgContent"] business: bool + localBadge: NotRequired["LocalBadge"] ContactStatus = Literal["active", "deleted", "deletedByUser"] @@ -2059,6 +2075,10 @@ class LinkPreview(TypedDict): image: str content: NotRequired["LinkContent"] +class LocalBadge(TypedDict): + badge: "BadgeInfo" + status: "BadgeStatus" + class LocalProfile(TypedDict): profileId: int # int64 displayName: str @@ -2068,6 +2088,7 @@ class LocalProfile(TypedDict): contactLink: NotRequired[str] preferences: NotRequired["Preferences"] peerType: NotRequired["ChatPeerType"] + localBadge: NotRequired["LocalBadge"] localAlias: str MemberCriteria = Literal["all"] @@ -2318,6 +2339,7 @@ class Profile(TypedDict): contactLink: NotRequired[str] preferences: NotRequired["Preferences"] peerType: NotRequired["ChatPeerType"] + badge: NotRequired["BadgeProof"] class ProxyClientError_protocolError(TypedDict): type: Literal["protocolError"] @@ -3431,7 +3453,7 @@ class UserContactRequest(TypedDict): cReqChatVRange: "VersionRange" localDisplayName: str profileId: int # int64 - profile: "Profile" + profile: "LocalProfile" createdAt: str # ISO-8601 timestamp updatedAt: str # ISO-8601 timestamp xContactId: NotRequired[str] diff --git a/plans/2026-06-01-supporter-badges-v1.md b/plans/2026-06-01-supporter-badges-v1.md new file mode 100644 index 0000000000..29a47a103e --- /dev/null +++ b/plans/2026-06-01-supporter-badges-v1.md @@ -0,0 +1,80 @@ +# Supporter Badges v1 - Verification + +Badge verification in stable so that v6.5 users can see and verify badges from v7 users. Badge purchase and issuance is v2. + +## Why BBS+ + +BBS+ signatures (IETF draft-irtf-cfrg-bbs-signatures) allow a holder of a signed credential to generate zero-knowledge proofs that selectively disclose some signed attributes while hiding others. Each proof uses a random nonce, making different proofs from the same credential computationally unlinkable - a verifier seeing two proofs cannot determine they came from the same credential. This means a supporter badge shown to different contacts cannot be correlated, preserving SimpleX's unlinkable identity model. + +The server that signs the credential sees the master secret during signing but cannot link any received proof back to any signing session - this is the core zero-knowledge property. + +## References + +- IETF draft: https://datatracker.ietf.org/doc/draft-irtf-cfrg-bbs-signatures/ +- libbbs: https://github.com/Fraunhofer-AISEC/libbbs (Apache-2.0, Fraunhofer-AISEC) +- blst: https://github.com/supranational/blst (Apache-2.0, audited by NCC Group) - internal dependency of libbbs for BLS12-381 curve operations + +Both are vendored verbatim into simplexmq so that users and maintainers can verify the source matches upstream. Only libbbs API is called directly. + +## Crypto + +3 signed messages: `[ms, expiry, level]`. `ms` undisclosed (index 0), `expiry` and `level` disclosed (indexes 1, 2). Proof size: 304 bytes (272 base + 32 per undisclosed). + +Server public key (`srvPK`, 96 bytes) hardcoded in app. + +## libbbs integration + +Vendor libbbs + blst C sources into simplexmq. Haskell FFI bindings following the SNTRUP761 pattern (`Simplex.Messaging.Crypto.BBS.Bindings`). + +Full FFI surface for testing the complete flow: + +- `bbs_keygen_full` - generate keypair +- `bbs_sign` - sign messages +- `bbs_proof_gen` - generate ZK proof with selective disclosure +- `bbs_proof_verify` - verify proof +- `bbs_sha256_ciphersuite` - ciphersuite constant + +Unit tests: keygen, sign, proof gen, proof verify roundtrip. Verify proof size. Verify rejection of tampered proofs. Verify two proofs from same credential don't correlate (different presentation headers produce different proofs that both verify). + +Use blst portable C fallback for now (avoids per-arch assembly). + +## Profile type + +Add optional `badge` field to `Profile`. The `SupporterBadge` type uses base64-encoded newtypes for binary fields, following the `KEMPublicKey`/`KEMCiphertext` pattern from SNTRUP761 bindings: + +```haskell +data SupporterBadge = SupporterBadge + { proof :: BBSProof + , proofNonce :: ByteString + , badgeExpiry :: UTCTime + , badgeType :: Text + } +``` + +`badgeType` is a string: `"supporter"`, `"business"`, `"legend"`, `"cf_investor"`. Displayed in UI as Supporter, Business, Legend, Crowdfunding Investor. `BBSProof` is a newtype over `ByteString` with `StrEncoding` instances for base64url JSON encoding. + +Backward compatible: `omitNothingFields` means older clients ignore it, newer clients without badge send `Nothing`. + +## DB + +- `badge` fields on `contact_profiles` and `group_member_profiles` to store received badge data +- `badge_status` column on `contacts` and `group_members` to store verification result +- `badge` fields on user profile (`users` or `contact_profiles` for own profile) for when badge issuance is added in v2 + +## Verification + +On receiving profile with `badge` (in Subscriber.hs, `XInfo`/`XGrpMemInfo`/`XContact` handlers): + +1. `bbs_proof_verify(srvPK, proof, "", proofNonce, disclosed=[1,2], [expiry, level])` +2. Check `expiry >= now` +3. Store badge + verification status on contact/member + +## UI + +Badge icon next to display name for verified contacts/members. Different icons per level string. Expired badges shown differently or hidden. + +## Not in v1 + +- Badge purchase, issuance, credential storage, proof generation - v2 +- Service framework - v2 +- Payment platform integration - v2 diff --git a/scripts/nix/sha256map.nix b/scripts/nix/sha256map.nix index 3610906390..ac230b7af1 100644 --- a/scripts/nix/sha256map.nix +++ b/scripts/nix/sha256map.nix @@ -1,5 +1,5 @@ { - "https://github.com/simplex-chat/simplexmq.git"."b981dcb70b8c99dc3733a99b6c1dc0d0ef83a3f7" = "0wpri01w30rd3wwzw630yngnj9fmyb7rschl3ic1cjd926vpg9b7"; + "https://github.com/simplex-chat/simplexmq.git"."9f9b6c8e88524fb5fd063f47617a679ea53ac7c0" = "01jdjndx0h2ardzi9dd21q0n36lvwbdkhp7nzdrz01c3hh0br9bd"; "https://github.com/simplex-chat/hs-socks.git"."a30cc7a79a08d8108316094f8f2f82a0c5e1ac51" = "0yasvnr7g91k76mjkamvzab2kvlb1g5pspjyjn2fr6v83swjhj38"; "https://github.com/simplex-chat/direct-sqlcipher.git"."f814ee68b16a9447fbb467ccc8f29bdd3546bfd9" = "1ql13f4kfwkbaq7nygkxgw84213i0zm7c1a8hwvramayxl38dq5d"; "https://github.com/simplex-chat/sqlcipher-simple.git"."a46bd361a19376c5211f1058908fc0ae6bf42446" = "1z0r78d8f0812kxbgsm735qf6xx8lvaz27k1a0b4a2m0sshpd5gl"; diff --git a/simplex-chat.cabal b/simplex-chat.cabal index f3612c88cf..3a1a8ff24b 100644 --- a/simplex-chat.cabal +++ b/simplex-chat.cabal @@ -38,6 +38,8 @@ library exposed-modules: Simplex.Chat Simplex.Chat.AppSettings + Simplex.Chat.Badges + Simplex.Chat.Badges.CLI Simplex.Chat.Call Simplex.Chat.Controller Simplex.Chat.Delivery @@ -51,6 +53,7 @@ library Simplex.Chat.Messages.CIContent Simplex.Chat.Messages.CIContent.Events Simplex.Chat.Mobile + Simplex.Chat.Mobile.Badges Simplex.Chat.Mobile.File Simplex.Chat.Mobile.Shared Simplex.Chat.Mobile.WebRTC @@ -134,6 +137,7 @@ library Simplex.Chat.Store.Postgres.Migrations.M20260507_relay_inactive_at Simplex.Chat.Store.Postgres.Migrations.M20260514_relay_request_group_link_index Simplex.Chat.Store.Postgres.Migrations.M20260515_public_group_access + Simplex.Chat.Store.Postgres.Migrations.M20260516_supporter_badges else exposed-modules: Simplex.Chat.Archive @@ -290,6 +294,7 @@ library Simplex.Chat.Store.SQLite.Migrations.M20260507_relay_inactive_at Simplex.Chat.Store.SQLite.Migrations.M20260514_relay_request_group_link_index Simplex.Chat.Store.SQLite.Migrations.M20260515_public_group_access + Simplex.Chat.Store.SQLite.Migrations.M20260516_supporter_badges other-modules: Paths_simplex_chat hs-source-dirs: @@ -550,6 +555,7 @@ test-suite simplex-chat-test main-is: Test.hs other-modules: APIDocs + BadgeTests Bots.BroadcastTests Bots.DirectoryTests ChatClient diff --git a/src/Simplex/Chat.hs b/src/Simplex/Chat.hs index c3658a1c94..5adaaca150 100644 --- a/src/Simplex/Chat.hs +++ b/src/Simplex/Chat.hs @@ -29,6 +29,7 @@ import Data.Maybe (fromMaybe, mapMaybe) import Data.Text (Text) import Data.Time.Clock (getCurrentTime, nominalDay) import Simplex.Chat.Controller +import Simplex.Chat.Badges (BBSPublicKeyStr (..)) import Simplex.Chat.Library.Commands import Simplex.Chat.Operators import Simplex.Chat.Operators.Presets @@ -65,6 +66,17 @@ defaultChatConfig = tbqSize = 1024 }, chatVRange = supportedChatVRange, + badgePublicKeys = + M.fromList + [ (1, toBBSPublicKey "mW_5Zp1wHnXDF56wOZwFcRjGrf0GLLsfyymIQDqYoWfjfvS7oQWSfi7hH65N8JhuE9x8wbKXHidnQLO4GnOSMP_bRKUMH1qIzv5SQKFHNM8G4PaWcTcri8iZLc-3xhSI"), + (2, toBBSPublicKey "odGCB7uVDXTURsHgSvSciByV4Q3-3ZvEB8myDsDJqm-PwOYc5-At36uc7n_pyUDxEQEHr9i4RJgFih2FSArPW-EQBXNPNf4wTtA0znn74qLEGc4fh9pVYPEIm_ZGbnsJ"), + (3, toBBSPublicKey "txkT2003WMjc43KvYvPKEcR970NLmw5UZY51eUqgk91sgp53idt1HTlKYvnrEttJDFMlctYf1-bpri0e9DhBQ-xk1J4WoLN2uif_1OcA1pGCobpk9lwtsq1Idek4biy0"), + (4, toBBSPublicKey "q_YzegihaLYrEm9z3cAghsfDGNZfXuEpQGMJERJQS4M0Szl4gvSC_fV_muKc3NIMA_8iYuBN8qyvb5U55RctCRn3kleFQ4sqf-WBgoydX6UVo7BsYcUbXWWEFZXlOGIH"), + (5, toBBSPublicKey "oqymHASH_okefShrnz4HnTooUNlE1WoDRnSrgd0bTCpOacgJWBsMpwZpdmYlX-vQAKAC_zmI4VdKoOznnhW-sdUXZw6bthCi5JYjGxCR1Co27i1tix5UXCTbR5Jp901-"), + (6, toBBSPublicKey "kDqaB6zKSRp_97QPFj5JPDlo0vzfSTLSp9goFx1qajv4q4H6dR6BbkmWZ4xx_9Q2AxmcpqcV0ethz1OH-Jk_Sz2J1mIz1PUVM9LkdLhi_PNtqhezzO5dbVs-HJ1fNqe6"), + (7, toBBSPublicKey "rl36D5mg2N3NmmEybxE_RBeU9YZ_zeXNPfp7ZMLtUEuf2Mo4OQM_Up1v5rX_IqICD-AIJcuyptEBsELx_PJQzpmiNuG5I4cWO6HkRKtc6fVFvgZMrDJjaascPd1CIyxX"), + (8, toBBSPublicKey "joM3Bnt7JPt5JiwQwERHGjro2iVZ0mPD_clUh4hzkhxvbjuFrWuTmfSNA8PWBqGKEGNl13aRi1pMf6yY14E27c5C71JxWm7T-rZaBrGPEUWifhD-qidWuf3PU7KJCCWd") + ], confirmMigrations = MCConsole, -- this property should NOT use operator = Nothing -- non-operator servers can be passed via options diff --git a/src/Simplex/Chat/Badges.hs b/src/Simplex/Chat/Badges.hs new file mode 100644 index 0000000000..e861d27f11 --- /dev/null +++ b/src/Simplex/Chat/Badges.hs @@ -0,0 +1,414 @@ +{-# LANGUAGE CPP #-} +{-# LANGUAGE DataKinds #-} +{-# LANGUAGE DerivingStrategies #-} +{-# LANGUAGE DuplicateRecordFields #-} +{-# LANGUAGE ExistentialQuantification #-} +{-# LANGUAGE FlexibleInstances #-} +{-# LANGUAGE GADTs #-} +{-# LANGUAGE GeneralizedNewtypeDeriving #-} +{-# LANGUAGE KindSignatures #-} +{-# LANGUAGE LambdaCase #-} +{-# LANGUAGE NamedFieldPuns #-} +{-# LANGUAGE OverloadedStrings #-} +{-# LANGUAGE StandaloneDeriving #-} +{-# LANGUAGE TemplateHaskell #-} + +module Simplex.Chat.Badges + ( BadgeType (..), + BadgeStatus (..), + BadgeInfo (..), + BadgeCredential (..), + BadgeProof (..), + LocalBadge (..), + JSONBadge (..), + BBSPublicKeyStr (..), + localBadgeInfo, + localBadgeStatus, + maxXFTPFileSize, + maxFileSizeSupporter, + maxFileSizeLegend, + BadgePresHeaderTag (..), + BadgePresHeader (..), + BadgePurchase (..), + BadgeMasterKey (..), + BadgeRequest (..), + VerifiedBadgeRequest (..), + bbsBadgeHeader, + generateMasterKey, + verifyPayment, + issueBadge, + verifyCredential, + generateBadgeProof, + badgeProof, + verifyBadge, + verifyBadge_, + mkBadgeStatus, + BadgeRow, + badgeToRow, + localBadgeToRow, + rowToBadge, + ) where + +import Control.Concurrent.STM +import Crypto.Random (ChaChaDRG) +import Data.Aeson (FromJSON (..), ToJSON (..)) +import qualified Data.Aeson.TH as JQ +import qualified Data.Attoparsec.ByteString.Char8 as A +import Data.ByteString.Char8 (ByteString) +import qualified Data.ByteString.Char8 as B +import Data.Either (fromRight) +import Data.Int (Int64) +import Data.Map.Strict (Map) +import qualified Data.Map.Strict as M +import Data.String +import Data.Text (Text) +import Data.Text.Encoding (encodeUtf8) +import Data.Time.Clock (NominalDiffTime, UTCTime, addUTCTime, nominalDay) +import Simplex.FileTransfer.Description (gb, maxFileSize) +import Simplex.Messaging.Agent.Store.DB (Binary (..), BoolInt (..), fromTextField_) +import qualified Simplex.Messaging.Crypto as C +import Simplex.Messaging.Crypto.BBS +import Simplex.Messaging.Encoding.String +import Simplex.Messaging.Parsers (defaultJSON, dropPrefix, enumJSON) +#if defined(dbPostgres) +import Database.PostgreSQL.Simple.FromField (FromField (..)) +import Database.PostgreSQL.Simple.ToField (ToField (..)) +#else +import Database.SQLite.Simple.FromField (FromField (..)) +import Database.SQLite.Simple.ToField (ToField (..)) +#endif + +-- Badge type + +data BadgeType + = BTSupporter + | BTLegend + | BTInvestor + | BTUnknown Text + deriving (Eq, Show) + +instance TextEncoding BadgeType where + textEncode = \case + BTSupporter -> "supporter" + BTLegend -> "legend" + BTInvestor -> "investor" + BTUnknown tag -> tag + textDecode s = Just $ case s of + "supporter" -> BTSupporter + "legend" -> BTLegend + "investor" -> BTInvestor + tag -> BTUnknown tag + +instance ToJSON BadgeType where + toJSON = textToJSON + toEncoding = textToEncoding + +instance FromJSON BadgeType where + parseJSON = textParseJSON "BadgeType" + +-- Badge status + +data BadgeStatus = BSActive | BSExpired | BSExpiredOld | BSFailed | BSUnknownKey + deriving (Eq, Show) + +-- Disclosed badge content (BBS messages 1, 2, 3) + +data BadgeInfo = BadgeInfo + { badgeType :: BadgeType, + badgeExpiry :: Maybe UTCTime, + badgeExtra :: Text + } + deriving (Eq, Show) + +-- a badge expired longer than this ago is BSExpiredOld and is not shown in the UI +badgeOldInterval :: NominalDiffTime +badgeOldInterval = 31 * nominalDay + +-- the verification outcome of a received proof: Just True = verified, Just False = failed, +-- Nothing = the proof's key index is not among this app version's configured keys (BSUnknownKey). +mkBadgeStatus :: UTCTime -> Maybe Bool -> BadgeInfo -> BadgeStatus +mkBadgeStatus now verified BadgeInfo {badgeExpiry} = case verified of + Nothing -> BSUnknownKey + Just False -> BSFailed + Just True -> case badgeExpiry of + Just e + | addUTCTime badgeOldInterval e < now -> BSExpiredOld + | e < now -> BSExpired + _ -> BSActive + +-- A badge credential (own, secret) and a proof (a presentation) are independent records. +-- badgeKeyIdx is the issuer key index: it tells verifiers which configured key to use. +-- Only proofs ride the wire (in a profile); credentials come from the badge service. Neither is +-- ever serialized as a sum - each travels as its own record, so the JSON carries no credential/proof tag. + +data BadgeCredential = BadgeCredential + { badgeKeyIdx :: Int, + masterKey :: BadgeMasterKey, + signature :: BBSSignature, + badgeInfo :: BadgeInfo + } + deriving (Eq, Show) + +data BadgeProof = BadgeProof + { badgeKeyIdx :: Int, + presHeader :: BBSPresHeader, + proof :: BBSProof, + badgeInfo :: BadgeInfo + } + deriving (Eq, Show) + +-- Local badge: a stored badge plus its display status (the in-memory sum; never serialized as a sum). +-- OwnBadge - the user's own credential (loaded from the DB). +-- PeerBadge - a verified peer proof (from the DB, or received over the wire). +-- ShownBadge - decoded from a crypto-free profile JSON for display only: no crypto, so it cannot be sent. +data LocalBadge + = OwnBadge BadgeCredential BadgeStatus + | PeerBadge BadgeProof BadgeStatus + | ShownBadge BadgeInfo BadgeStatus + deriving (Eq, Show) + +localBadgeInfo :: LocalBadge -> BadgeInfo +localBadgeInfo = \case + OwnBadge BadgeCredential {badgeInfo} _ -> badgeInfo + PeerBadge BadgeProof {badgeInfo} _ -> badgeInfo + ShownBadge i _ -> i + +localBadgeStatus :: LocalBadge -> BadgeStatus +localBadgeStatus = \case + OwnBadge _ st -> st + PeerBadge _ st -> st + ShownBadge _ st -> st + +-- XFTP file size limit raised by an active badge: a legend badge to 5GB, any other to 2GB, otherwise the default. +maxFileSizeSupporter :: Int64 +maxFileSizeSupporter = gb 2 + +maxFileSizeLegend :: Int64 +maxFileSizeLegend = gb 5 + +maxXFTPFileSize :: Maybe LocalBadge -> Int64 +maxXFTPFileSize = \case + Just b | localBadgeStatus b == BSActive -> case badgeType (localBadgeInfo b) of + BTLegend -> maxFileSizeLegend + _ -> maxFileSizeSupporter + _ -> maxFileSize + +-- Presentation header: a tag char + payload. PHTest is unbound - a fresh random nonce per +-- presentation, not bound to any context; the 'T' tag marks it so master rejects it. +-- PHUnknown is the forward-compat catch-all for tags this version does not interpret. + +data BadgePresHeaderTag = PHTestTag | PHUnknownTag Char + +instance StrEncoding BadgePresHeaderTag where + strEncode = B.singleton . \case + PHTestTag -> 'T' + PHUnknownTag c -> c + strP = tag <$> A.anyChar + where + tag = \case + 'T' -> PHTestTag + c -> PHUnknownTag c + +data BadgePresHeader + = PHTest ByteString + | PHUnknown Char ByteString + +instance StrEncoding BadgePresHeader where + strEncode = \case + PHTest nonce -> strEncode PHTestTag <> nonce + PHUnknown c b -> strEncode (PHUnknownTag c) <> b + strP = + strP >>= \case + PHTestTag -> PHTest <$> A.takeByteString + PHUnknownTag c -> PHUnknown c <$> A.takeByteString + +-- v6.5.x accepts both; v7 will reject PHTest/PHUnknown +badgePresHeaderAccepted :: BadgePresHeader -> Bool +badgePresHeaderAccepted = \case + PHTest _ -> True + PHUnknown _ _ -> True + +-- Payment proof + +data BadgePurchase + = BPAppleReceipt Text + | BPGoogleReceipt Text + | BPStripeSession + | BPRedeemCode Text + deriving (Eq, Show) + +-- Master key + +newtype BadgeMasterKey = BadgeMasterKey ByteString + deriving newtype (Eq, Show, StrEncoding) + +instance ToJSON BadgeMasterKey where + toJSON = strToJSON + toEncoding = strToJEncoding + +instance FromJSON BadgeMasterKey where + parseJSON = strParseJSON "BadgeMasterKey" + +generateMasterKey :: TVar ChaChaDRG -> IO BadgeMasterKey +generateMasterKey drg = BadgeMasterKey <$> atomically (C.randomBytes 32 drg) + +-- Workflow types + +data BadgeRequest = BadgeRequest + { masterKey :: BadgeMasterKey, + badgeInfo :: BadgeInfo + } + deriving (Show) + +newtype VerifiedBadgeRequest = VerifiedBadgeRequest BadgeRequest + deriving (Show) + +-- Constants + +bbsBadgeHeader :: BBSHeader +bbsBadgeHeader = BBSHeader "SimpleX badges v1" + +bbsBadgeMessageCount :: Int +bbsBadgeMessageCount = 4 + +bbsBadgeDisclosedIndexes :: [Int] +bbsBadgeDisclosedIndexes = [1, 2, 3] + +-- Message encoding + +encodeExpiry :: Maybe UTCTime -> ByteString +encodeExpiry = maybe "lifetime" strEncode + +badgeMessages :: BadgeMasterKey -> BadgeInfo -> [ByteString] +badgeMessages (BadgeMasterKey ms) info = ms : badgeInfoMessages info + +badgeInfoMessages :: BadgeInfo -> [ByteString] +badgeInfoMessages BadgeInfo {badgeType, badgeExpiry, badgeExtra} = + [encodeExpiry badgeExpiry, encodeUtf8 (textEncode badgeType), encodeUtf8 badgeExtra] + +-- Payment verification (stub - always passes) + +verifyPayment :: BadgePurchase -> BadgeRequest -> IO (Maybe VerifiedBadgeRequest) +verifyPayment _payment req = pure $ Just (VerifiedBadgeRequest req) + +-- Server-side: issue a badge credential, recording which issuer key signed it + +issueBadge :: Int -> BBSSecretKey -> VerifiedBadgeRequest -> IO (Either String BadgeCredential) +issueBadge keyIdx sk (VerifiedBadgeRequest BadgeRequest {masterKey, badgeInfo}) + | badgeExtra badgeInfo /= "" = pure $ Left "badgeExtra must be empty (reserved)" + | otherwise = fmap (\sig -> BadgeCredential keyIdx masterKey sig badgeInfo) <$> bbsSign sk bbsBadgeHeader (badgeMessages masterKey badgeInfo) + +-- Client-side: verify the credential received from server + +verifyCredential :: BBSPublicKey -> BadgeCredential -> IO Bool +verifyCredential pk (BadgeCredential _ masterKey signature badgeInfo) = + bbsVerify pk signature bbsBadgeHeader (badgeMessages masterKey badgeInfo) + +-- Client-side: generate a proof for a contact/group; the proof carries the credential's key index + +generateBadgeProof :: BBSPublicKey -> BadgeCredential -> BBSPresHeader -> IO (Either String BadgeProof) +generateBadgeProof pk (BadgeCredential keyIdx masterKey signature badgeInfo) ph = + fmap (\p -> BadgeProof keyIdx ph p badgeInfo) <$> bbsProofGen pk signature bbsBadgeHeader ph bbsBadgeDisclosedIndexes (badgeMessages masterKey badgeInfo) + +-- application-level proof generation with a semantic presentation header +badgeProof :: BBSPublicKey -> BadgeCredential -> BadgePresHeader -> IO (Either String BadgeProof) +badgeProof pk cred ph = generateBadgeProof pk cred (BBSPresHeader $ strEncode ph) + +-- Recipient-side: verify a badge proof with the configured key its index points to. +-- Nothing means the key index is not in the configured keys (this app version can't verify it). + +verifyBadge :: Map Int BBSPublicKey -> BadgeProof -> IO (Maybe Bool) +verifyBadge keys b@(BadgeProof keyIdx _ _ _) = case M.lookup keyIdx keys of + Nothing -> pure Nothing + Just pk -> Just <$> verifyBadgeWith pk b + +verifyBadgeWith :: BBSPublicKey -> BadgeProof -> IO Bool +verifyBadgeWith pk (BadgeProof _ ph@(BBSPresHeader phBytes) proof badgeInfo) + | either (const False) badgePresHeaderAccepted (strDecode phBytes) = + bbsProofVerify pk proof bbsBadgeHeader ph bbsBadgeDisclosedIndexes bbsBadgeMessageCount (badgeInfoMessages badgeInfo) + | otherwise = pure False + +verifyBadge_ :: Map Int BBSPublicKey -> Maybe BadgeProof -> IO (Maybe Bool) +verifyBadge_ keys = maybe (pure (Just False)) (verifyBadge keys) + +-- DB + +instance FromField BadgeType where fromField = fromTextField_ textDecode + +instance ToField BadgeType where toField = toField . textEncode + +-- (proof, pres_header, expiry, type, verified, extra, master_key, signature, key_idx) - binary columns wrapped in Binary (BLOB/bytea) +type BadgeRow = (Maybe (Binary ByteString), Maybe (Binary ByteString), Maybe UTCTime, Maybe Text, Maybe BoolInt, Maybe Text, Maybe (Binary ByteString), Maybe (Binary ByteString), Maybe Int) + +-- receive/store sites have a wire proof + a computed verification outcome; +-- the status here only drives the stored verified flag, the display status is recomputed on load +badgeToRow :: Maybe BadgeProof -> Maybe Bool -> BadgeRow +badgeToRow badge verified = localBadgeToRow $ (`PeerBadge` st) <$> badge + where + st = case verified of + Just True -> BSActive + Just False -> BSFailed + Nothing -> BSUnknownKey + +localBadgeToRow :: Maybe LocalBadge -> BadgeRow +localBadgeToRow (Just lb) = case lb of + OwnBadge (BadgeCredential idx (BadgeMasterKey mk) (BBSSignature sg) BadgeInfo {badgeType, badgeExpiry, badgeExtra}) st -> + (Nothing, Nothing, badgeExpiry, Just (textEncode badgeType), verifiedField st, Just badgeExtra, Just (Binary mk), Just (Binary sg), Just idx) + PeerBadge (BadgeProof idx (BBSPresHeader ph) (BBSProof p) BadgeInfo {badgeType, badgeExpiry, badgeExtra}) st -> + (Just (Binary p), Just (Binary ph), badgeExpiry, Just (textEncode badgeType), verifiedField st, Just badgeExtra, Nothing, Nothing, Just idx) + ShownBadge BadgeInfo {badgeType, badgeExpiry, badgeExtra} st -> + (Nothing, Nothing, badgeExpiry, Just (textEncode badgeType), verifiedField st, Just badgeExtra, Nothing, Nothing, Nothing) + where + verifiedField st = case st of + BSFailed -> Just (BI False) + BSUnknownKey -> Nothing + _ -> Just (BI True) +localBadgeToRow Nothing = (Nothing, Nothing, Nothing, Nothing, Just (BI False), Nothing, Nothing, Nothing, Nothing) + +rowToBadge :: UTCTime -> BadgeRow -> Maybe LocalBadge +rowToBadge now (p_, ph_, badgeExpiry, type_, verified_, extra_, mk_, sg_, idx_) = do + btText <- type_ + bt <- textDecode btText + let info = BadgeInfo {badgeType = bt, badgeExpiry, badgeExtra = maybe "" id extra_} + -- NULL badge_verified means the key index was unknown when stored (Nothing) + st = mkBadgeStatus now (unBI <$> verified_) info + case (mk_, sg_, p_, ph_, idx_) of + (Just (Binary mk), Just (Binary sg), _, _, Just idx) -> Just $ OwnBadge (BadgeCredential idx (BadgeMasterKey mk) (BBSSignature sg) info) st + (_, _, Just (Binary p), Just (Binary ph), Just idx) -> Just $ PeerBadge (BadgeProof idx (BBSPresHeader ph) (BBSProof p) info) st + _ -> Just $ ShownBadge info st + +-- JSON + +$(JQ.deriveJSON (enumJSON $ dropPrefix "BS") ''BadgeStatus) + +$(JQ.deriveJSON defaultJSON ''BadgeInfo) + +$(JQ.deriveJSON defaultJSON ''BadgeRequest) + +-- Each record is a plain JSON object (defaultJSON), platform-independent and with no credential/proof +-- tag - the context (a proof in a profile, a credential from the service) determines which it is. + +$(JQ.deriveJSON defaultJSON ''BadgeCredential) + +$(JQ.deriveJSON defaultJSON ''BadgeProof) + +-- LocalBadge is sent to the UI/clients WITHOUT crypto - only disclosed info + status. The credential/proof +-- bytes stay core-side. FromJSON reconstructs a display-only badge (empty proof) for read-only consumers +-- (remote host, UI echoes); the authoritative badge is loaded from the DB (rowToBadge), never from this JSON. +data JSONBadge = JSONBadge {badge :: BadgeInfo, status :: BadgeStatus} + +$(JQ.deriveJSON defaultJSON ''JSONBadge) + +instance ToJSON LocalBadge where + toJSON lb = toJSON $ JSONBadge (localBadgeInfo lb) (localBadgeStatus lb) + toEncoding lb = toEncoding $ JSONBadge (localBadgeInfo lb) (localBadgeStatus lb) + +instance FromJSON LocalBadge where + parseJSON v = do + JSONBadge info st <- parseJSON v + pure $ ShownBadge info st + +newtype BBSPublicKeyStr = BBSPublicKeyStr {toBBSPublicKey :: BBSPublicKey} + +instance IsString BBSPublicKeyStr where + fromString = BBSPublicKeyStr . fromRight (error "bad base64 in BBSPublicKey") . strDecode . B.pack diff --git a/src/Simplex/Chat/Badges/CLI.hs b/src/Simplex/Chat/Badges/CLI.hs new file mode 100644 index 0000000000..8a7cd84b61 --- /dev/null +++ b/src/Simplex/Chat/Badges/CLI.hs @@ -0,0 +1,87 @@ +{-# LANGUAGE DuplicateRecordFields #-} +{-# LANGUAGE LambdaCase #-} +{-# LANGUAGE NamedFieldPuns #-} +{-# LANGUAGE OverloadedStrings #-} + +-- | Offline operator tooling for supporter badges, invoked as `simplex-chat badge ...`. +-- keygen - the issuer keypair: the "secret" signs, the "public" goes into the app config. +-- master-key - the user's master secret (their unlinkability secret; generated client-side in the real flow). +-- sign - bind a user master secret to a badge with the issuer secret, printed as one-line JSON for `/badge add`. +module Simplex.Chat.Badges.CLI (runBadgeCommand) where + +import qualified Data.Aeson as J +import qualified Data.ByteString.Char8 as B +import qualified Data.ByteString.Lazy.Char8 as LB +import qualified Data.Text as T +import Data.Time.Clock (UTCTime) +import Data.Time.Format (defaultTimeLocale, parseTimeM) +import Options.Applicative +import Simplex.Chat.Badges +import qualified Simplex.Messaging.Crypto as C +import Simplex.Messaging.Crypto.BBS (BBSPublicKey (..), BBSSecretKey (..), bbsKeyGen) +import Simplex.Messaging.Encoding.String (strDecode, strEncode, textDecode) +import System.Exit (die) + +bbsSecretLen :: Int +bbsSecretLen = 32 + +data BadgeCommand + = Keygen + | MasterKey + | Sign Int BBSSecretKey BadgeMasterKey BadgeType (Maybe UTCTime) + +runBadgeCommand :: [String] -> IO () +runBadgeCommand args = + handleParseResult (execParserPure defaultPrefs badgeInfo args) >>= \case + Keygen -> keygen + MasterKey -> genMasterKey + Sign keyIdx sk ms badgeType badgeExpiry -> sign keyIdx sk ms badgeType badgeExpiry + where + badgeInfo = info (helper <*> hsubparser badgeCmd) fullDesc + badgeCmd = command "badge" (info (helper <*> badgeCommandP) (progDesc "SimpleX supporter badge tooling")) + +badgeCommandP :: Parser BadgeCommand +badgeCommandP = + hsubparser $ + command "keygen" (info (pure Keygen) (progDesc "generate an issuer keypair (issuer secret + public, base64url)")) + <> command "master-key" (info (pure MasterKey) (progDesc "generate a user master secret (base64url)")) + <> command "sign" (info signP (progDesc "sign a badge for a user master secret, printed as one-line JSON")) + where + signP = + Sign + <$> option auto (long "key-idx" <> metavar "KEY_IDX" <> help "index of the issuer key in the app config") + <*> option (eitherReader secretR) (long "secret" <> metavar "ISSUER_SECRET" <> help "issuer secret from keygen (base64url)") + <*> option (eitherReader (strDecode . B.pack)) (long "master" <> metavar "MASTER" <> help "user master secret from master-key (base64url)") + <*> option (eitherReader badgeTypeR) (long "type" <> metavar "TYPE" <> help "badge type (supporter, legend, investor)") + <*> option (eitherReader expireR) (long "expire" <> metavar "lifetime|YYYY-MM-DD" <> help "expiry date, or 'lifetime'") + secretR s = do + sk@(BBSSecretKey b) <- strDecode (B.pack s) + if B.length b == bbsSecretLen + then Right sk + else Left "bad issuer secret - use the 'secret' value from keygen" + badgeTypeR = maybe (Left "invalid badge type") Right . textDecode . T.pack + expireR = \case + "lifetime" -> Right Nothing + s -> maybe (Left "use 'lifetime' or YYYY-MM-DD") (Right . Just) $ parseTimeM True defaultTimeLocale "%Y-%m-%d" s + +keygen :: IO () +keygen = + bbsKeyGen >>= \case + Left e -> die $ "keygen failed: " <> e + Right (BBSPublicKey pk, BBSSecretKey sk) -> do + B.putStrLn $ "secret " <> strEncode sk + B.putStrLn $ "public " <> strEncode pk + +genMasterKey :: IO () +genMasterKey = do + drg <- C.newRandom + mk <- generateMasterKey drg + B.putStrLn $ strEncode mk + +sign :: Int -> BBSSecretKey -> BadgeMasterKey -> BadgeType -> Maybe UTCTime -> IO () +sign keyIdx secretKey masterKey badgeType badgeExpiry = do + let req = VerifiedBadgeRequest (BadgeRequest {masterKey, badgeInfo = BadgeInfo {badgeType, badgeExpiry, badgeExtra = ""}} :: BadgeRequest) + issueBadge keyIdx secretKey req >>= \case + Left e -> die $ "sign failed: " <> e + -- single-line JSON (master secret + signature + info), pasted into the app via `/badge add` + Right cred -> LB.putStrLn $ J.encode cred diff --git a/src/Simplex/Chat/Controller.hs b/src/Simplex/Chat/Controller.hs index c92c1f9e09..fbb8536fcf 100644 --- a/src/Simplex/Chat/Controller.hs +++ b/src/Simplex/Chat/Controller.hs @@ -81,6 +81,8 @@ import Simplex.Messaging.Agent.Store.DB (SQLError) import qualified Simplex.Messaging.Agent.Store.DB as DB import Simplex.Messaging.Client (HostMode (..), SMPProxyFallback (..), SMPProxyMode (..), SMPWebPortServers (..), SocksMode (..)) import qualified Simplex.Messaging.Crypto as C +import Simplex.Chat.Badges (BadgeCredential) +import Simplex.Messaging.Crypto.BBS (BBSPublicKey) import Simplex.Messaging.Crypto.File (CryptoFile (..)) import qualified Simplex.Messaging.Crypto.File as CF import Simplex.Messaging.Crypto.Ratchet (PQEncryption) @@ -137,6 +139,8 @@ coreVersionInfo simplexmqCommit = data ChatConfig = ChatConfig { agentConfig :: AgentConfig, chatVRange :: VersionRangeChat, + -- issuer public keys by index: credentials and proofs name the key that signed them, for rotation + badgePublicKeys :: Map Int BBSPublicKey, confirmMigrations :: MigrationConfirmation, presetServers :: PresetServers, shortLinkPresetServers :: NonEmpty SMPServer, @@ -172,7 +176,7 @@ data ChatConfig = ChatConfig -- | Builds the read-only context threaded through store functions from chat config. -- The single construction point, so new store-wide config (e.g. server keys) is added in one place. mkStoreCxt :: ChatConfig -> StoreCxt -mkStoreCxt ChatConfig {chatVRange} = StoreCxt chatVRange +mkStoreCxt ChatConfig {chatVRange, badgePublicKeys} = StoreCxt chatVRange badgePublicKeys {-# INLINE mkStoreCxt #-} data RandomAgentServers = RandomAgentServers @@ -575,6 +579,7 @@ data ChatCommand | SetBotCommands [ChatBotCommand] | UpdateProfile ContactName (Maybe Text) -- UserId (not used in UI) | UpdateProfileImage (Maybe ImageData) -- UserId (not used in UI) + | AddBadge BadgeCredential -- attach an issued badge credential (testing; credential from `simplex-chat badge sign`) | ShowProfileImage | SetUserFeature AChatFeature FeatureAllowed -- UserId (not used in UI) | SetContactFeature AChatFeature ContactName (Maybe FeatureAllowed) diff --git a/src/Simplex/Chat/Core.hs b/src/Simplex/Chat/Core.hs index 3c1ce9bc26..e51f7a40e8 100644 --- a/src/Simplex/Chat/Core.hs +++ b/src/Simplex/Chat/Core.hs @@ -138,7 +138,7 @@ createActiveUser cc CoreChatOpts {chatRelay} = \case loop = do displayName <- T.pack <$> withPrompt "display name: " getLine createUser loop $ mkProfile displayName - mkProfile displayName = Profile {displayName, fullName = "", shortDescr = Nothing, image = Nothing, contactLink = Nothing, peerType = Nothing, preferences = Nothing} + mkProfile displayName = Profile {displayName, fullName = "", shortDescr = Nothing, image = Nothing, contactLink = Nothing, peerType = Nothing, preferences = Nothing, badge = Nothing} createUser onError p = execChatCommand' (CreateActiveUser NewUser {profile = Just p, pastTimestamp = False, userChatRelay = chatRelay}) 0 `runReaderT` cc >>= \case Right (CRActiveUser user) -> pure user diff --git a/src/Simplex/Chat/Library/Commands.hs b/src/Simplex/Chat/Library/Commands.hs index f35a9ef177..43f480b5c4 100644 --- a/src/Simplex/Chat/Library/Commands.hs +++ b/src/Simplex/Chat/Library/Commands.hs @@ -55,6 +55,7 @@ import Data.Type.Equality import qualified Data.UUID as UUID import qualified Data.UUID.V4 as V4 import Simplex.Chat.Library.Subscriber +import Simplex.Chat.Badges (BadgeCredential (..), LocalBadge (..), maxXFTPFileSize, mkBadgeStatus, verifyCredential) import Simplex.Chat.Call import Simplex.Chat.Controller import Simplex.Chat.Delivery (DeliveryJobScope (..), DeliveryJobSpec (..), DeliveryWorkerScope (..)) @@ -363,16 +364,16 @@ processChatCommand cxt nm = \case user <- withFastStore $ \db -> do user <- createUserRecordAt db (AgentUserId auId) p userChatRelay True ts mapM_ (setUserServers db user ts) uss - createPresetContactCards db user `catchAllErrors` \_ -> pure () + createPresetContactCards db cxt user `catchAllErrors` \_ -> pure () createNoteFolder db user pure user atomically . writeTVar u $ Just user pure $ CRActiveUser user where - createPresetContactCards :: DB.Connection -> User -> ExceptT StoreError IO () - createPresetContactCards db user = do - createContact db user simplexStatusContactProfile - createContact db user simplexTeamContactProfile + createPresetContactCards :: DB.Connection -> StoreCxt -> User -> ExceptT StoreError IO () + createPresetContactCards db cxt user = do + createContact db cxt user simplexStatusContactProfile + createContact db cxt user simplexTeamContactProfile chooseServers :: Maybe User -> CM ([UpdatedUserOperatorServers], (NonEmpty (ServerCfg 'PSMP), NonEmpty (ServerCfg 'PXFTP))) chooseServers user_ = do as <- asks randomAgentServers @@ -1941,7 +1942,8 @@ processChatCommand cxt nm = \case -- [incognito] generate profile for connection incognitoProfile <- if incognito then Just <$> liftIO generateRandomProfile else pure Nothing subMode <- chatReadVar subscriptionMode - let userData = contactShortLinkData (userProfileDirect user incognitoProfile Nothing True) Nothing + linkProfile <- presentUserBadge user incognitoProfile $ userProfileDirect user incognitoProfile Nothing True + let userData = contactShortLinkData linkProfile Nothing userLinkData = UserInvLinkData userData -- TODO [certs rcv] (connId, (ccLink, _serviceId)) <- withAgent $ \a -> createConnection a nm (aUserId user) True False SCMInvitation (Just userLinkData) Nothing IKPQOn subMode @@ -1963,7 +1965,7 @@ processChatCommand cxt nm = \case updatePCCIncognito db user conn (Just pId) sLnk pure $ CRConnectionIncognitoUpdated user conn' (Just incognitoProfile) (ConnNew, Just pId, False) -> do - sLnk <- updatePCCShortLinkData conn $ userProfileDirect user Nothing Nothing True + sLnk <- updatePCCShortLinkData conn =<< presentUserBadge user Nothing (userProfileDirect user Nothing Nothing True) conn' <- withFastStore' $ \db -> do deletePCCIncognitoProfile db user pId updatePCCIncognito db user conn Nothing sLnk @@ -1982,9 +1984,10 @@ processChatCommand cxt nm = \case recreateConn user conn@PendingContactConnection {customUserProfileId, connLinkInv} newUser = do subMode <- chatReadVar subscriptionMode let short = isJust $ connShortLink' =<< connLinkInv - userLinkData_ - | short = Just $ UserInvLinkData $ contactShortLinkData (userProfileDirect newUser Nothing Nothing True) Nothing - | otherwise = Nothing + userLinkData_ <- + if short + then Just . UserInvLinkData . (`contactShortLinkData` Nothing) <$> presentUserBadge newUser Nothing (userProfileDirect newUser Nothing Nothing True) + else pure Nothing -- TODO [certs rcv] (agConnId, (ccLink, _serviceId)) <- withAgent $ \a -> createConnection a nm (aUserId newUser) True False SCMInvitation userLinkData_ Nothing IKPQOn subMode ccLink' <- shortenCreatedLink ccLink @@ -2259,10 +2262,11 @@ processChatCommand cxt nm = \case Right _ -> throwError $ ChatErrorStore SEDuplicateContactLink subMode <- chatReadVar subscriptionMode -- TODO [relays] relay: add identity, key to link data? - let userData - | isTrue userChatRelay = relayShortLinkData (userProfileDirect user Nothing Nothing True) - | otherwise = contactShortLinkData (userProfileDirect user Nothing Nothing True) Nothing - userLinkData = UserContactLinkData UserContactData {direct = True, owners = [], relays = [], userData} + userData <- + if isTrue userChatRelay + then pure $ relayShortLinkData (userProfileDirect user Nothing Nothing True) + else (`contactShortLinkData` Nothing) <$> presentUserBadge user Nothing (userProfileDirect user Nothing Nothing True) + let userLinkData = UserContactLinkData UserContactData {direct = True, owners = [], relays = [], userData} -- TODO [certs rcv] (connId, (ccLink, _serviceId)) <- withAgent $ \a -> createConnection a nm (aUserId user) True True SCMContact (Just userLinkData) Nothing IKPQOn subMode ccLink' <- shortenCreatedLink ccLink @@ -3143,7 +3147,7 @@ processChatCommand cxt nm = \case joinPreparedConn subMode conn joinPreparedConn subMode conn = do -- [incognito] send membership incognito profile - let p = userProfileDirect user (fromLocalProfile <$> incognitoMembershipProfile gInfo) Nothing True + p <- presentUserBadge user (incognitoMembershipProfile gInfo) $ userProfileDirect user (fromLocalProfile <$> incognitoMembershipProfile gInfo) Nothing True dm <- encodeConnInfo $ XInfo p (sqSecured, _serviceId) <- withAgent $ \a -> joinConnection a nm (aUserId user) (aConnId conn) True cReq dm PQSupportOff subMode let newStatus = if sqSecured then ConnSndReady else ConnJoined @@ -3293,6 +3297,7 @@ processChatCommand cxt nm = \case fileStatus <- withFastStore $ \db -> getFileTransferProgress db user fileId pure $ CRFileTransferStatus user fileStatus ShowProfile -> withUser $ \user@User {profile} -> pure $ CRUserProfile user (fromLocalProfile profile) + AddBadge cred -> withUser $ \user -> addUserBadge user cred >> ok user SetBotCommands commands -> withUser $ \user@User {profile} -> do let LocalProfile {preferences} = profile prefs = Just (fromMaybe emptyChatPrefs preferences :: Preferences) {commands = Just commands} @@ -3520,7 +3525,7 @@ processChatCommand cxt nm = \case conn <- withFastStore' $ \db -> createDirectConnection' db userId connId ccLink contactId_ ConnPrepared incognitoProfile subMode chatV pqSup' joinPreparedConn conn incognitoProfile chatV joinPreparedConn conn incognitoProfile chatV = do - let profileToSend = userProfileDirect user incognitoProfile Nothing True + profileToSend <- presentUserBadge user incognitoProfile $ userProfileDirect user incognitoProfile Nothing True dm <- encodeConnInfoPQ pqSup' chatV $ XInfo profileToSend (sqSecured, _serviceId) <- withAgent $ \a -> joinConnection a nm (aUserId user) (aConnId conn) True cReq dm pqSup' subMode let newStatus = if sqSecured then ConnSndReady else ConnJoined @@ -3624,7 +3629,7 @@ processChatCommand cxt nm = \case relayLinkData_ <- liftIO $ decodeLinkUserData cData case (relayLinkData_, linkEntityId) of (Just RelayShortLinkData {relayProfile = p}, Just entityId) -> - withFastStore $ \db -> updateRelayMemberData db user relayMember (MemberId entityId) (MemberKey relayKey) p + withFastStore $ \db -> updateRelayMemberData db cxt user relayMember (MemberId entityId) (MemberKey relayKey) p _ -> throwChatError $ CEException "relay link: no relay link data or entity id" let cReq = linkConnReq fd relayLinkToConnect = CCLink cReq (Just relayLink) @@ -3667,11 +3672,12 @@ processChatCommand cxt nm = \case joinContact :: User -> Connection -> ConnReqContact -> Maybe Profile -> XContactId -> Maybe SharedMsgId -> Maybe (SharedMsgId, MsgContent) -> Maybe (Maybe GroupInfo) -> PQSupport -> CM Connection joinContact user conn@Connection {connChatVersion = chatV} cReq incognitoProfile xContactId welcomeSharedMsgId msg_ gInfo_ pqSup = do -- gInfo_ is Maybe (Maybe GroupInfo), where Just Nothing means "some unknown group", e.g. when joining via link without profile - let profileToSend = case gInfo_ of - Just gInfo_' -> - let allowSimplexLinks = maybe True (groupFeatureUserAllowed SGFSimplexLinks) gInfo_' - in userProfileInGroup' user allowSimplexLinks incognitoProfile - Nothing -> userProfileDirect user incognitoProfile Nothing True + profileToSend <- + presentUserBadge user incognitoProfile $ case gInfo_ of + Just gInfo_' -> + let allowSimplexLinks = maybe True (groupFeatureUserAllowed SGFSimplexLinks) gInfo_' + in userProfileInGroup' user allowSimplexLinks incognitoProfile + Nothing -> userProfileDirect user incognitoProfile Nothing True chatEvent <- case gInfo_ of Just (Just gInfo) | useRelays' gInfo -> do let GroupInfo {membership = GroupMember {memberId}} = gInfo @@ -3688,12 +3694,12 @@ processChatCommand cxt nm = \case contactMember Contact {contactId} = find $ \GroupMember {memberContactId = cId, memberStatus = s} -> cId == Just contactId && s /= GSMemRejected && s /= GSMemRemoved && s /= GSMemLeft - checkSndFile :: CryptoFile -> CM Integer - checkSndFile (CryptoFile f cfArgs) = do + checkSndFile :: Maybe LocalBadge -> CryptoFile -> CM Integer + checkSndFile sndBadge (CryptoFile f cfArgs) = do fsFilePath <- lift $ toFSFilePath f unlessM (doesFileExist fsFilePath) . throwChatError $ CEFileNotFound f fileSize <- liftIO $ CF.getFileContentsSize $ CryptoFile fsFilePath cfArgs - when (fromInteger fileSize > maxFileSize) $ throwChatError $ CEFileSize f + when (fromInteger fileSize > maxXFTPFileSize sndBadge) $ throwChatError $ CEFileSize f pure fileSize updateProfile :: User -> Profile -> CM ChatResponse updateProfile user p' = updateProfile_ user p' True $ withFastStore $ \db -> updateUserProfile db user p' @@ -3723,7 +3729,7 @@ processChatCommand cxt nm = \case case changedCts_ of Nothing -> pure $ UserProfileUpdateSummary 0 0 [] Just changedCts -> do - let idsEvts = L.map ctSndEvent changedCts + idsEvts <- mapM ctSndEvent changedCts msgReqs_ <- lift $ L.zipWith ctMsgReq changedCts <$> createSndMessages idsEvts (errs, cts) <- partitionEithers . L.toList . L.zipWith (second . const) changedCts <$> deliverMessagesB msgReqs_ unless (null errs) $ toView $ CEvtChatErrors errs @@ -3747,8 +3753,11 @@ processChatCommand cxt nm = \case mergedProfile = userProfileDirect user Nothing (Just ct) False ct' = updateMergedPreferences user' ct mergedProfile' = userProfileDirect user' Nothing (Just ct') False - ctSndEvent :: ChangedProfileContact -> (ConnOrGroupId, Maybe MsgSigning, ChatMsgEvent 'Json) - ctSndEvent ChangedProfileContact {mergedProfile', conn = Connection {connId}} = (ConnectionId connId, Nothing, XInfo mergedProfile') + -- non-incognito (filtered above), so the user's badge is presented; a profile update keeps the badge instead of clearing it + ctSndEvent :: ChangedProfileContact -> CM (ConnOrGroupId, Maybe MsgSigning, ChatMsgEvent 'Json) + ctSndEvent ChangedProfileContact {mergedProfile', conn = Connection {connId}} = do + p <- presentUserBadge user' Nothing mergedProfile' + pure (ConnectionId connId, Nothing, XInfo p) ctMsgReq :: ChangedProfileContact -> Either ChatError SndMessage -> Either ChatError ChatMsgReq ctMsgReq ChangedProfileContact {conn} = fmap $ \SndMessage {msgId, msgBody} -> @@ -3756,9 +3765,9 @@ processChatCommand cxt nm = \case setMyAddressData :: User -> UserContactLink -> CM UserContactLink setMyAddressData user@User {userChatRelay} ucl@UserContactLink {userContactLinkId, connLinkContact = CCLink connFullLink _sLnk_, addressSettings} = do conn <- withFastStore $ \db -> getUserAddressConnection db cxt user - let shortLinkProfile = userProfileDirect user Nothing Nothing True - -- TODO [short links] do not save address to server if data did not change, spinners, error handling - userData + shortLinkProfile <- presentUserBadge user Nothing $ userProfileDirect user Nothing Nothing True + -- TODO [short links] do not save address to server if data did not change, spinners, error handling + let userData | isTrue userChatRelay = relayShortLinkData shortLinkProfile | otherwise = contactShortLinkData shortLinkProfile $ Just addressSettings userLinkData = UserContactLinkData UserContactData {direct = True, owners = [], relays = [], userData} @@ -3779,7 +3788,8 @@ processChatCommand cxt nm = \case mergedProfile' = userProfileDirect user (fromLocalProfile <$> incognitoProfile) (Just ct') False when (mergedProfile' /= mergedProfile) $ withContactLock "updateContactPrefs" (contactId' ct) $ do - void (sendDirectContactMessage user ct' $ XInfo mergedProfile') `catchAllErrors` eToView + p <- presentUserBadge user incognitoProfile mergedProfile' + void (sendDirectContactMessage user ct' $ XInfo p) `catchAllErrors` eToView lift . when (directOrUsed ct') $ createSndFeatureItems user ct ct' pure $ CRContactPrefsUpdated user ct ct' runUpdateGroupProfile :: User -> GroupInfo -> GroupProfile -> CM ChatResponse @@ -4065,7 +4075,7 @@ processChatCommand cxt nm = \case Just r -> pure r Nothing -> do (FixedLinkData {linkConnReq = cReq, rootKey}, cData) <- getShortLinkConnReq nm user l' - contactSLinkData_ <- liftIO $ decodeLinkUserData cData + contactSLinkData_ <- mapM linkDataBadge =<< liftIO (decodeLinkUserData cData) let ov = verifyLinkOwner rootKey [] l sig_ invitationReqAndPlan cReq (Just l') contactSLinkData_ ov where @@ -4092,7 +4102,7 @@ processChatCommand cxt nm = \case withFastStore' (\db -> getContactWithoutConnViaShortAddress db cxt user l') >>= \case Just ct' | not (contactDeleted ct') -> pure (con cReq, CPContactAddress (CAPContactViaAddress ct')) _ -> do - contactSLinkData_ <- liftIO $ decodeLinkUserData cData + contactSLinkData_ <- mapM linkDataBadge =<< liftIO (decodeLinkUserData cData) let ContactLinkData _ UserContactData {owners} = cData ov = verifyLinkOwner rootKey owners l' sig_ plan <- contactRequestPlan user cReq contactSLinkData_ ov @@ -4261,7 +4271,7 @@ processChatCommand cxt nm = \case contactShortLinkData p settings = let msg = autoReply =<< settings business = maybe False businessAddress settings - contactData = ContactShortLinkData p msg business + contactData = ContactShortLinkData p msg business Nothing in encodeShortLinkData contactData relayShortLinkData :: Profile -> UserLinkData relayShortLinkData Profile {displayName, fullName, shortDescr, image} = @@ -4325,7 +4335,8 @@ processChatCommand cxt nm = \case setupSndFileTransfers = forM cmrs $ \(ComposedMessage {fileSource = file_}, _, _, _) -> case file_ of Just file -> do - fileSize <- checkSndFile file + let User {profile = LocalProfile {localBadge}} = user + fileSize <- checkSndFile (if contactConnIncognito ct then Nothing else localBadge) file (fInv, ciFile) <- xftpSndFileTransfer user file fileSize 1 $ CGContact ct pure (Just fInv, Just ciFile) Nothing -> pure (Nothing, Nothing) @@ -4406,7 +4417,8 @@ processChatCommand cxt nm = \case setupSndFileTransfers n = forM cmrs $ \(ComposedMessage {fileSource = file_}, _, _, _) -> case file_ of Just file -> do - fileSize <- checkSndFile file + let User {profile = LocalProfile {localBadge}} = user + fileSize <- checkSndFile (if incognitoMembership gInfo then Nothing else localBadge) file (fInv, ciFile) <- xftpSndFileTransfer user file fileSize n $ CGGroup gInfo recipients pure (Just fInv, Just ciFile) Nothing -> pure (Nothing, Nothing) @@ -4641,6 +4653,28 @@ createContactsSndFeatureItems user cts = CUPContact {preference} -> preference CUPUser {preference} -> preference +-- attach an issued badge credential to the user's own profile and present it to all current contacts. +-- the credential is stored once; every profile send generates a fresh single-use proof (see presentUserBadge). +addUserBadge :: User -> BadgeCredential -> CM () +addUserBadge user cred@(BadgeCredential keyIdx _ _ info) = do + keys <- asks $ badgePublicKeys . config + key <- maybe (throwCmdError "unknown badge key index") pure $ M.lookup keyIdx keys + verified <- liftIO $ verifyCredential key cred + unless verified $ throwCmdError "badge credential does not verify against configured key" + now <- liftIO getCurrentTime + user' <- withFastStore' $ \db -> setUserBadge db user (Just (OwnBadge cred (mkBadgeStatus now (Just True) info))) + asks currentUser >>= atomically . (`writeTVar` Just user') + cxt <- asks $ mkStoreCxt . config + contacts <- withFastStore' $ \db -> getUserContacts db cxt user' + withChatLock "addUserBadge" $ forM_ contacts $ \ct -> + case contactSendConn_ ct of + Right conn + | not (connIncognito conn) -> do + let ct' = updateMergedPreferences user' ct + p <- presentUserBadge user' Nothing $ userProfileDirect user' Nothing (Just ct') False + void (sendDirectContactMessage user' ct' (XInfo p)) `catchAllErrors` eToView + _ -> pure () + assertDirectAllowed :: User -> MsgDirection -> Contact -> CMEventTag e -> CM () assertDirectAllowed user dir ct event = unless (allowedChatEvent || anyDirectOrUsed ct) . unlessM directMessagesAllowed $ @@ -5241,6 +5275,7 @@ chatCommandP = "/show profile image" $> ShowProfileImage, ("/profile " <|> "/p ") *> (uncurry UpdateProfile <$> profileNameDescr), ("/profile" <|> "/p") $> ShowProfile, + "/badge add " *> (AddBadge <$> jsonP), "/set bot commands " *> (SetBotCommands <$> botCommandsP), "/delete bot commands" $> SetBotCommands [], "/set voice #" *> (SetGroupFeatureRole (AGFR SGFVoice) <$> displayNameP <*> _strP <*> optional memberRole), @@ -5378,7 +5413,7 @@ chatCommandP = quoted = A.char '\'' *> A.takeTill (== '\'') <* A.char '\'' newUserP userChatRelay = do (cName, shortDescr) <- profileNameDescr - let profile = Just Profile {displayName = cName, fullName = "", shortDescr, image = Nothing, contactLink = Nothing, peerType = Nothing, preferences = Nothing} + let profile = Just Profile {displayName = cName, fullName = "", shortDescr, image = Nothing, contactLink = Nothing, peerType = Nothing, preferences = Nothing, badge = Nothing} pure NewUser {profile, pastTimestamp = False, userChatRelay} newBotUserP = do files_ <- optional $ "files=" *> onOffP <* A.space @@ -5386,7 +5421,7 @@ chatCommandP = let preferences = case files_ of Just True -> Nothing _ -> Just (emptyChatPrefs :: Preferences) {files = Just FilesPreference {allow = FANo}} - profile = Just Profile {displayName = cName, fullName = "", shortDescr, image = Nothing, contactLink = Nothing, peerType = Just CPTBot, preferences} + profile = Just Profile {displayName = cName, fullName = "", shortDescr, image = Nothing, contactLink = Nothing, peerType = Just CPTBot, preferences, badge = Nothing} pure NewUser {profile, pastTimestamp = False, userChatRelay = False} jsonP :: J.FromJSON a => Parser a jsonP = J.eitherDecodeStrict' <$?> A.takeByteString diff --git a/src/Simplex/Chat/Library/Internal.hs b/src/Simplex/Chat/Library/Internal.hs index f2c448d5b8..68e870a7c5 100644 --- a/src/Simplex/Chat/Library/Internal.hs +++ b/src/Simplex/Chat/Library/Internal.hs @@ -53,6 +53,7 @@ import Data.Text.Encoding (encodeUtf8) import Data.Time (addUTCTime) import Data.Time.Calendar (fromGregorian) import Data.Time.Clock (UTCTime (..), diffUTCTime, getCurrentTime, nominalDiffTimeToSeconds, secondsToDiffTime) +import Simplex.Chat.Badges (BadgeCredential (..), BadgePresHeader (..), BadgeProof (..), BadgeStatus (..), LocalBadge (..), badgeProof, mkBadgeStatus, verifyBadge) import Simplex.Chat.Call import Simplex.Chat.Controller import Simplex.Chat.Files @@ -906,7 +907,7 @@ acceptContactRequest nm user@User {userId} UserContactRequest {agentInvitationId Just conn@Connection {customUserProfileId} -> do incognitoProfile <- forM customUserProfileId $ \pId -> withFastStore $ \db -> getProfileById db userId pId pure (ct, conn, ExistingIncognito <$> incognitoProfile) - let profileToSend = userProfileDirect user (fromIncognitoProfile <$> incognitoProfile) (Just ct) True + profileToSend <- presentUserBadge user incognitoProfile $ userProfileDirect user (fromIncognitoProfile <$> incognitoProfile) (Just ct) True dm <- encodeConnInfoPQ pqSup' chatV $ XInfo profileToSend -- TODO [certs rcv] (ct,conn,) . fst <$> withAgent (\a -> acceptContact a nm (aUserId user) (aConnId conn) True invId dm pqSup' subMode) @@ -919,7 +920,7 @@ acceptContactRequestAsync UserContactRequest {agentInvitationId = AgentInvId cReqInvId, cReqChatVRange, xContactId, pqSupport = cReqPQSup} incognitoProfile = do subMode <- chatReadVar subscriptionMode - let profileToSend = userProfileDirect user (fromIncognitoProfile <$> incognitoProfile) (Just ct) True + profileToSend <- presentUserBadge user incognitoProfile $ userProfileDirect user (fromIncognitoProfile <$> incognitoProfile) (Just ct) True cxt <- chatStoreCxt let chatV = vr cxt `peerConnChatVersion` cReqChatVRange (cmdId, acId) <- agentAcceptContactAsync user True cReqInvId (XInfo profileToSend) subMode cReqPQSup chatV @@ -947,8 +948,9 @@ acceptGroupJoinRequestAsync memberKey_ = do gVar <- asks random let initialStatus = acceptanceToStatus (memberAdmission groupProfile) gAccepted + cxt <- chatStoreCxt (groupMemberId, memberId) <- withStore $ \db -> - createJoiningMember db gVar user gInfo cReqChatVRange cReqProfile cReqXContactId_ cReqMemberId_ welcomeMsgId_ gLinkMemRole initialStatus memberKey_ + createJoiningMember db cxt gVar user gInfo cReqChatVRange cReqProfile cReqXContactId_ cReqMemberId_ welcomeMsgId_ gLinkMemRole initialStatus memberKey_ let currentMemCount = fromIntegral $ currentMembers $ groupSummary gInfo let Profile {displayName} = userProfileInGroup user gInfo (fromIncognitoProfile <$> incognitoProfile) GroupMember {memberRole = userRole, memberId = userMemberId} = membership @@ -964,7 +966,6 @@ acceptGroupJoinRequestAsync groupSize = Just currentMemCount } subMode <- chatReadVar subscriptionMode - cxt <- chatStoreCxt let chatV = vr cxt `peerConnChatVersion` cReqChatVRange connIds <- agentAcceptContactAsync user True cReqInvId msg subMode PQSupportOff chatV withStore $ \db -> do @@ -982,8 +983,9 @@ acceptGroupJoinSendRejectAsync cReqXContactId_ rejectionReason = do gVar <- asks random + cxt <- chatStoreCxt (groupMemberId, memberId) <- withStore $ \db -> - createJoiningMember db gVar user gInfo cReqChatVRange cReqProfile cReqXContactId_ Nothing Nothing GRObserver GSMemRejected Nothing + createJoiningMember db cxt gVar user gInfo cReqChatVRange cReqProfile cReqXContactId_ Nothing Nothing GRObserver GSMemRejected Nothing let GroupMember {memberRole = userRole, memberId = userMemberId} = membership msg = XGrpLinkReject $ @@ -994,7 +996,6 @@ acceptGroupJoinSendRejectAsync rejectionReason } subMode <- chatReadVar subscriptionMode - cxt <- chatStoreCxt let chatV = vr cxt `peerConnChatVersion` cReqChatVRange connIds <- agentAcceptContactAsync user False cReqInvId msg subMode PQSupportOff chatV withStore $ \db -> do @@ -1197,8 +1198,8 @@ memberInfo g m@GroupMember {memberId, memberRole, memberProfile, memberPubKey, a allowSimplexLinks = groupFeatureMemberAllowed SGFSimplexLinks m g redactedMemberProfile :: Bool -> Profile -> Profile -redactedMemberProfile allowSimplexLinks Profile {displayName, fullName, shortDescr, image, peerType} = - Profile {displayName, fullName, shortDescr = removeSimplexLink =<< shortDescr, image, contactLink = Nothing, preferences = Nothing, peerType} +redactedMemberProfile allowSimplexLinks Profile {displayName, fullName, shortDescr, image, peerType, badge} = + Profile {displayName, fullName, shortDescr = removeSimplexLink =<< shortDescr, image, contactLink = Nothing, preferences = Nothing, peerType, badge} where removeSimplexLink s | allowSimplexLinks = Just s @@ -1895,6 +1896,33 @@ sendDirectContactMessages' user ct events = do forM_ pqEnc_ $ \pqEnc' -> void $ createContactPQSndItem user ct conn pqEnc' pure sndMsgs' +-- present the user's own badge on an outgoing profile: a fresh, single-use proof from the stored credential. +-- the send's incognito profile (when set) suppresses it - an incognito identity must never carry the badge. +-- a long-expired badge is not presented at all (receivers would hide it anyway). +presentUserBadge :: User -> Maybe i -> Profile -> CM Profile +presentUserBadge User {profile = LocalProfile {localBadge}} incognitoProfile p = case (incognitoProfile, localBadge) of + (Nothing, Just (OwnBadge cred@(BadgeCredential keyIdx _ _ _) st)) | st == BSActive || st == BSExpired -> do + keys <- asks $ badgePublicKeys . config + case M.lookup keyIdx keys of + Nothing -> p <$ logError "presentUserBadge: badge key index not in config" + Just key -> do + nonce <- drgRandomBytes 16 + liftIO (badgeProof key cred (PHTest nonce)) >>= \case + Right proof -> pure p {badge = Just proof} + Left e -> p <$ logError ("presentUserBadge: proof generation failed: " <> T.pack e) + _ -> pure p + +-- receiving side of contact/invitation link data: verify the badge proof from the link profile +-- and set the crypto-free display badge for the UI (the raw proof stays in profile for APIPrepareContact) +linkDataBadge :: ContactShortLinkData -> CM ContactShortLinkData +linkDataBadge cld@ContactShortLinkData {profile = Profile {badge}} = case badge of + Nothing -> pure cld + Just b@(BadgeProof _ _ _ info) -> do + keys <- asks $ badgePublicKeys . config + verified <- liftIO $ verifyBadge keys b + now <- liftIO getCurrentTime + pure (cld :: ContactShortLinkData) {localBadge = Just $ ShownBadge info (mkBadgeStatus now verified info)} + sendDirectContactMessage :: MsgEncodingI e => User -> Contact -> ChatMsgEvent e -> CM (SndMessage, Int64) sendDirectContactMessage user ct chatMsgEvent = do conn@Connection {connId} <- liftEither $ contactSendConn_ ct @@ -2102,8 +2130,9 @@ sendGroupMessages user gInfo scope asGroup members events = do sendProfileUpdate = do let members' = filter (`supportsVersion` memberProfileUpdateVersion) members allowSimplexLinks = groupFeatureUserAllowed SGFSimplexLinks gInfo - profileUpdateEvent = XInfo $ redactedMemberProfile allowSimplexLinks $ fromLocalProfile p - void $ sendGroupMessage' user gInfo members' profileUpdateEvent + -- shouldSendProfileUpdate excludes incognito membership, so the badge is presented + profileUpdate <- presentUserBadge user Nothing $ redactedMemberProfile allowSimplexLinks $ fromLocalProfile p + void $ sendGroupMessage' user gInfo members' $ XInfo profileUpdate currentTs <- liftIO getCurrentTime withStore' $ \db -> updateUserMemberProfileSentAt db user gInfo currentTs @@ -2837,7 +2866,8 @@ simplexTeamContactProfile = image = Just simplexChatImage, contactLink = Just $ CLFull adminContactReq, peerType = Nothing, - preferences = Nothing + preferences = Nothing, + badge = Nothing } simplexStatusContactProfile :: Profile @@ -2849,7 +2879,8 @@ simplexStatusContactProfile = image = Just (ImageData "data:image/jpg;base64,/9j/4AAQSkZJRgABAQAASABIAAD/4QBYRXhpZgAATU0AKgAAAAgAAgESAAMAAAABAAEAAIdpAAQAAAABAAAAJgAAAAAAA6ABAAMAAAABAAEAAKACAAQAAAABAAAAr6ADAAQAAAABAAAArwAAAAD/7QA4UGhvdG9zaG9wIDMuMAA4QklNBAQAAAAAAAA4QklNBCUAAAAAABDUHYzZjwCyBOmACZjs+EJ+/8AAEQgArwCvAwEiAAIRAQMRAf/EAB8AAAEFAQEBAQEBAAAAAAAAAAABAgMEBQYHCAkKC//EALUQAAIBAwMCBAMFBQQEAAABfQECAwAEEQUSITFBBhNRYQcicRQygZGhCCNCscEVUtHwJDNicoIJChYXGBkaJSYnKCkqNDU2Nzg5OkNERUZHSElKU1RVVldYWVpjZGVmZ2hpanN0dXZ3eHl6g4SFhoeIiYqSk5SVlpeYmZqio6Slpqeoqaqys7S1tre4ubrCw8TFxsfIycrS09TV1tfY2drh4uPk5ebn6Onq8fLz9PX29/j5+v/EAB8BAAMBAQEBAQEBAQEAAAAAAAABAgMEBQYHCAkKC//EALURAAIBAgQEAwQHBQQEAAECdwABAgMRBAUhMQYSQVEHYXETIjKBCBRCkaGxwQkjM1LwFWJy0QoWJDThJfEXGBkaJicoKSo1Njc4OTpDREVGR0hJSlNUVVZXWFlaY2RlZmdoaWpzdHV2d3h5eoKDhIWGh4iJipKTlJWWl5iZmqKjpKWmp6ipqrKztLW2t7i5usLDxMXGx8jJytLT1NXW19jZ2uLj5OXm5+jp6vLz9PX29/j5+v/bAEMAAQEBAQEBAgEBAgMCAgIDBAMDAwMEBgQEBAQEBgcGBgYGBgYHBwcHBwcHBwgICAgICAkJCQkJCwsLCwsLCwsLC//bAEMBAgICAwMDBQMDBQsIBggLCwsLCwsLCwsLCwsLCwsLCwsLCwsLCwsLCwsLCwsLCwsLCwsLCwsLCwsLCwsLCwsLC//dAAQAC//aAAwDAQACEQMRAD8A/v4ooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKAP/Q/v4ooooAKKKKACiiigAoorE8R+ItF8J6Jc+IvEVwlrZ2iGSWWQ4CgVUISlJRirtmdatTo05VaslGMU223ZJLVtvokbdFfl3of/BRbS734rtpup2Ig8LSsIYrjnzkOcea3bafTqBX6cafqFjq1jFqemSrPbzqHjkQ5VlPIINetm2Q43LXD65T5eZXX+XquqPiuC/Efh/itYh5HiVUdGTjJWaflJJ6uEvsy2fqXKKKK8c+5Ciq17e2mnWkl/fyLDDCpd3c4VVHJJJr8c/2kf8Ago34q8M3mpTfByG3fT7CGSJZrlC3nStwJF5GFU8gd69LA5VicXTrVaMfdpxcpPokk397toj4LjvxKyLhGjRqZxValVkowhFc05O9m0tPdjfV7dN2kfq346+J3w9+GWlPrXxA1m00i1QZL3Uqxj8Mnn8K/Mj4tf8ABYD4DeEJ5dM+Gmn3niq4TIE0YEFtn/ffBI+imv51vHfxA8b/ABR1+bxT8RNUuNXvp3LtJcOWCk84VeigdgBXI18LXzupLSkrL72fzrxH9IXNsTKVPKKMaMOkpe/P8fdXpaXqfqvrf/BYH9p6+1w3+iafo1jZA8WrRPKSPeTcpz9BX1l8J/8Ags34PvxDp/xn8M3OmSnAe709hcQfUoSHA/A1/PtSE4/GuKGZ4mLvz39T4TL/ABe4swlZ1ljpTvvGaUo/dbT/ALdsf2rfCX9pT4HfHGzF18M/EdnqTYBaFXCzJn+9G2GH5V7nX8IOm6hqGkX8eraLcy2d3EcpPbuY5FPsykGv6gf+CWf7QPxB+OPwX1Ky+JF22pX3h69+yJdyf62WJlDrvPdlzjPevdwGae3l7OcbP8D+i/DTxm/1ixkcqx2H5K7TalF3jLlV2rPWLtqtWvM/T2iiivYP3c//0f7+KKKKACiiigAooooAK/Fv/goX8Qvi2fFcXgfWrRtP8NDEls0bZS7YfxORxlT0Xt1r9pK8u+L/AMI/Cfxp8F3HgvxbFujlGYpgB5kMg6Op9R+tfR8K5vQy3MYYnE01KK0843+0vNf8NZn5f4wcFZhxTwziMpy3FOjVeqSdo1Lf8u5u11GXk97Xuro/mBFyDX3t+yL+2Be/CW+h8B+OHafw7cyALIxJa0Ldx6p6jt1FfMvx/wDgR4w/Z+8YN4d8RoZrSbLWd4owk6D+TDuK8KF0K/pLFYHA51geWVp0pq6a/Brs1/wH2P8ALvJsz4h4D4h9tR5qGLoS5ZRls11jJbSjJferSi9mf1uafqFlqtlFqWmyrPBOoeORDlWU8gg069vrPTbSS/v5FhghUu7ucKqjqSa/CH9j79sm++EuoQ/D/wAeSNceHbmRVjlZstZk9x6p6jt2q3+15+2fffFS8n8AfD2V7bw9CxWWZThrwj+Se3evxB+G2Zf2n9TX8Lf2nTl/+S/u/PbU/v2P0nuGv9Vf7cf+9/D9Xv73tLd/+ffXn7afF7pqftbfth3nxUu5vAXgGR7fw/A5WWUHDXZX19E9B361+Z/xKm3eCL9R3UfzFbQul6Cn+I/A3ivxR8LPEXivSbVn07RoVkurg8Iu5gAue7HPSv1HOsrwmVcN4uhRSjBUp6vq3Fq7fVt/5I/gTNeI884x4kjmeYOVWtKSdop2hCPvWjFbQjFNv5ybbuz4Toqa0ge9uoLOIhWnkSNSxwAXIUEnsBnmv0+/aK/4Jg+O/gj8Hoviz4b1n/hJFt40l1G2ig2NDG4yZEIJ3KvfgHHNfxVTw9SpGUoK6W5+xZVw1mWZYfEYrA0XOFBKU2raJ31te72b0T0R+XRIAyegr+gr/glx+yZoHhjwBc/tKfFywiafUY2OmpeIGS3sVGWmIbgF+TkjhR71+YP7DX7Lt9+1H8ZLfR75WTw5pBS61ScDKsoIKwg+snf0Ffqd/wAFSv2o4Phf4Ltv2WvhmVtrjUbRBfvA2Ps1kOFhAHQyAc9ML9a9HL6UacHi6q0W3mz9Q8M8owuV4KvxpnEL0aN40Yv/AJeVXpp5LZPo7v7J+M/7U/jX4e/EL4/+JfFXwrsI9P0Ke5K26RKESTZw0oUcAOeQBX7J/wDBFU5+HPjYf9RWH/0SK/nqACgKOgr+hT/giouPh143b11SH/0SKWVzc8YpPrf8jHwexk8XxzSxVRJSn7WTSVknKMnoui7H7a0UUV9cf3Mf/9L+/iiiigAoorzX4wfGD4afAP4bav8AF74v6xbaD4d0K3e6vb26cJHHGgyevUnoAOSeBTjFyajFXYHpVFf55Xxt/wCDu34nj9vzS/G3wX0Qz/ArQ2ksLnSp1CXurQyMA15uPMTqBmJD2+914/uU/Y//AGxfgH+3P8ENL+P37OutxazoWpoNwHyzW02PmhmjPKSKeCD9RxXqY/JcXg4QqV4WUvw8n2ZnCrGTaTPqGiiivKNDy/4u/CLwd8afBtx4N8ZW4kilBMUoH7yGTs6HsR+tfzjftA/AXxl+z54yfw34jQzWkuXs7xF/dzR/0YdxX9OPiDxBofhPQ7vxN4mu4rDT7CF57m4ncJHFFGMszMcAAAZJNf53n/Bav/g5W1H4ufGjTvg5+xB5F14E8JX4l1HVriIE6xNE2GjhLDKQdRuGC55HHX9L8Os+x2ExP1eKcsO/iX8vmvPy6/ifg3jZ4NYDjDBPFUEqeYU17k/50vsT8n0lvF+V0fq0LhTUgnA4r4y/ZG/bJ+FX7YXw9HjDwBP5N/ahV1LTZeJrSUjoR3U/wsOK+sRdL/n/APXX9G0nCrBTpu6Z/mVmuSYvLcXUwOPpOnWg7SjJWaf9ap7NarQ+pf2dP2evGH7Q3i4aLogNvp1uQ15esMpEnoPVj2Ffrd+1V8GvDnw5/YU8X+APh/Z7IrewEjYGXlZGUs7nqSQM18C/sO/ti6b8F7o/Dnx6qpoN9LvS6RRvglbjL45ZT69vpX7wX1poHjjwxNYzbL3TdUt2jbaQySRSrg4PoQa/nnxXxGaTxLwmIjy4e3uW2lpu33Xbp87v+7Po58I8L4nhfFVMuqKeY1oTp1nJe9S5k0oxWtoPfmXxve1uVfwqKA0YHYiv6Ev+CZ37bVv490eP9mb4zXAn1GKJo9Murg5F3bgYMLk9XUcD+8tflR+1/wDsn+Nv2XfiNdadqFs8vh28md9Mv1GY3iJyEY9nXoQa+UrC/v8ASr+DVdJnktbq2dZYZomKvG6nIZSOhFfztQrVMJW1Xqu5+Z8PZ5mvBWeSc4NSg+WrTeinHqv1jL56ptP+s7xHZ/A//gnR8EfE/jTwra+RHqF5JdxWpbLTXcwwkSnrsGPwXNfyrfEDx54l+J/jXU/iB4wna51LVZ3nmdj3Y8KPQKOAPQV2vxX/AGhvjT8corC3+K2vz6vFpq7beNgERT3YqvBY92NeNVeOxirNRpq0Fsju8RePKWfTo4TLqPscFRXuU9F7z+KTSuvJK7srvqwr+ir/AIIuaVd2/wAH/FesSIRDd6uFjb+8Y41Dfka/BX4YfCzx78ZfGVr4C+G+nyajqV22Aqj5I17u7dFUdya/r+/ZV+Aenfs2fBLSPhbZyC4ntVaW7nAx5tzKd0jfTJwPYV1ZLQk63tbaI+w8AOHcXiM8ebcjVClGS5ujlJWUV3sm27baX3R9FUUUV9Uf2gf/0/7+KKKKACv4If8Ag8QT9vN9W8IsVk/4Z+WJedOL7f7Xyd32/HGNu3yc/LnPev73q84+Lnwj+G/x3+HGr/CT4uaRba74d123e1vbK6QPHJG4weD0I6gjkHkV6WUY9YLFQxDgpJdP8vMipDmi0f4W1frt/wAEhP8Agrt8af8AglD8b38V+Fo21zwPr7xp4i0B3KpcRoeJoTyEnjBO04+boeK+m/8AguZ/wQz+I3/BMD4kyfEn4Ww3fiD4Oa5KzWWolC76XKx4tbphwOuI3PDAc81/PdX7LCeFzHC3VpU5f18mjympU5eZ/t9fsk/tb/Av9tv4G6N+0F+z3rUWs6BrEQYFCPNt5cfPDMnVJEPDKf5V794h8Q6F4T0O78TeJ7uGw06wiae4uZ3EcUUaDLMzHAAA6k1/j9f8EiP+Cunxv/4JTfHAeKPCZfWfAuuyRx+IvD8jkRTxg486Lsk8YJ2n+Loa/V7/AILy/wDBxZd/t2eHl/Zc/Y6mu9I+Gl1DDNrWoSBoLvUpGAY2+OqQoeH/AL5GOlfneI4OxCxio0taT+12Xn59u53xxMeW73ND/g4M/wCDgzVP2yNV1H9jz9j3UZrD4ZWE7waxrEDlH110ONiEYItgQe/7z6V/I6AAMDgCgAKNo6Cv0j/4Jkf8Ex/j/wD8FOvj/Y/Cj4UWE9voFvNGdf18xk2um2pPzEt0MhGdiZyTX6FhsNhctwvLH3YR1bfXzfn/AEjhlKVSR77/AMEMf2Rf2v8A9qr9tPRrb9mNpdL0fSp438UaxKjNYW+nk/PHKOA7uoIjTrnniv7Lfj98CvG37PPjiXwj4uiLxNl7S7UYjuIuzD39R1Ffvt+wn+wd+z5/wTy+A+n/AAF/Z70pbKyt1V728cA3V/c4w0079WYnoOijgV7V8cPgb4G+Pngqfwb41twwYEwXCgebBJ2ZT/MdDXi5N4mTwmYWqRvhXpb7S/vL9V28z8c8YfBXC8XYL61hbQx9Ne7LpNfyT8v5ZfZfkfyXi5r9Lf2Jv24bn4S3UHwz+JkzT+HZ5AsNy5LNZlu3vHn8q+KPj38CPHf7PPjabwn4yt2ELMxtLsD91cRg8Mp6Z9R2rxAXAPANfuePyzL89y/2c7TpTV1JdOzT6Nf8Bn8C5FnGfcEZ79Yw96OJpPlnCS0a6xkusX/k4u9mf2IeK/B/w++Mngt9C8U2ltrWi6lEGCuA6OrDhlPY+hHNfztftw/8E4tN+AGlTfE34ba3HJo0koVdMvGC3CFv4Ym/5aAenBArvf2PP2+9R+CGmv4B+JSy6joEUbtaOp3TQOBkRj1Rjx7V8uftEftH+Nf2i/G7+KPEzmG0hyllZqT5cEef1Y9zX4LT8GMTisynhsY7UI6qot5J7Jefe+i87o/prxI8YuEM/wCF6WM+rc2ZSXKo6qVJrdykvih/Ktebsmnb4DkilicxyqVYdQRzXUaN4R1HVMSzjyIf7zDk/QV6dIlpJIJ5Y1Z16MRk1+qf7DX7Ed58ULmH4p/Fe2kt/D8Dq9paSDabwjncf+mf/oX0rKXg3lOR+0zDPMW6lCL92EVyufZN3vfyjbvdI/AeFsJnHFOPp5TktD97L4pP4YLrJu2iXnq3ok20es/8Erv2f/G/gf8AtD4ozj7Bo2pwiFIpY/3t2VOQ4J5VFzx659q/aKq9paWthax2VlGsUMShERBtVVHAAA6AVYr4LNcdTxWIdSjRjSpqyjGKslFber7t6tn+k3APB1LhjJaOUUqsqjjdylJ/FKTvJpfZV9orbzd2yiiivNPsj//U/v4ooooAKKKKAPO/iz8Jvh18c/h1q/wm+LGk2+ueHtdt3tb2yukDxyxuMEEHoR1B6g81/lm/8Fy/+CFfxG/4Jh/ENvid8J4bzxF8Htdmke1vliaRtHctxbXTAEBecRyHAbGDzX+q54j8R6B4Q0C88U+KbyHT9N0+F7i5ubhxHFFFGMszMcAADqa/zM/+Dhb/AIL06p+3f4rvP2Tf2Xr6S0+Eui3DR397GcHXriM8N7W6EfIP4jz6V9fwfPGLFctD+H9q+3/D9jmxKjy+9ufyq0UAY4or9ZPMP0v/AOCX3/BLf9oT/gqP8d4Phf8ACa0lsvDtjLG3iDxDJGTa6bbse56NKwB8uPOSfav9ZX9hD9hT4Df8E8v2fdK/Z7+AenLbWNkoe8vHUfab+6I+eeZhyWY9B0UcCv8AKC/4JUf8FV/j1/wSu+PCfEf4aSHUvC+rPHH4i0CViIL63U43D+7MgJKN+B4r/Wd/Yy/bM+BH7eHwH0j9oL9n7Vo9S0fU4182LI8+0nx88MydVdTxz16ivzbjZ43nipfwOlu/n59uh6GE5Labn1ZRRRXwB2Hi3x3+BPgj9oHwJceCPGcIIYFre4UfvYJezKf5jvX8vH7QvwB8d/s4eOZfB/jKEtDIS9neKP3VxFngqfX1Hav6gvj58e/An7PHgK48ceN7gLtBW2twf3txL2RR/M9hX8rX7Qn7Rnjz9o3x5L418ZyhUXKWlqh/dW8WeFUevqe5r988G4Zu3Ut/ueu/839z/wBu6fM/jj6UdPhlwo8y/wCFTS3Lb+H/ANPf/bPtf9unlQuAec077SPWueFznrTxc1+/eyP4udE/XX9g79h24+K8tv8AF74qQvD4fgkDWdo64N4V53H/AKZg/wDfX0r+ge0tLWwtY7KyjWKGJQiIgwqqOAAOwFfzc/sIft2XnwO1KH4ZfEeVp/Ct5L8k7Es9k7YHH/TMnkjt1r+kDTNT07WtOg1fSJ0ubW5QSRSxncjowyCCOoNfyr4q0s3jmreYfwtfZW+Hl/8Akv5r6/Kx/or9HSXDX+rqhkqtidPb81vac/d/3P5Lab/auXqKKK/Lz+gwooooA//V/v4ooooAKxfEniTQPB2gXnirxVew6dpunQvcXV1cOI4oYoxlndjgAADJJrar/PV/4Ozf+CiX7Xlr8Yrf9hCx0u98GfDaS0iv5L1GZT4iZs5HmKceTERgx9d3LcYr08py2eOxMaEXbu/L9SKk1CN2fIX/AAcD/wDBfrXv27vFF1+yx+ylqFzpnwl0id476+icxSa/MhwGOMEWykHYv8fU9hX8qoAAwOAKUAAYFfqj/wAEnf8AglH8cv8Agqp8ek+Hvw/R9M8I6NJFJ4k19lzHZW7k/ImeGmcAhF/E8V+xUKGFyzC2Xuwju/1fds8tuVSXmM/4JQ/8Epfjr/wVU+Pcfw5+HiPpXhPSXjl8ReIZEJhsoGP3E7PO4B2J+J4r7o/4Li/8EC/H3/BL/UYPjH8Hp7vxV8JNQMcL3sy7rnTLkgDbcFRjZI3KPwATg9q/0rP2MP2MPgL+wZ8BdI/Z5/Z60hNM0bS4x5kpANxeTn7887gAvI55JPToOK9y+J/ww8AfGfwBqvwu+KOlW+t6Brdu9re2V0gkilicYIIP6HqDXwVbjSu8YqlNfulpy9139e3Y7VhY8tnuf4VdfqD/AMErP+Cpvx1/4Jb/ALQNn8S/h7cS6j4VvpUj8QeH2kIt723zgsB0WVRyjetffn/BeH/ghJ4x/wCCZvjlvjP8EYbvXPg5rk7GKcqZJdGmc5FvOwH+rOcRyH0wea/nCr9ApVcNmOGuvehL+vk0cLUqcvM/24v2Mf20PgH+3l8CdK/aA/Z61iPVNI1FF86LI+0Wc+PnhnTqjqeOevUcV3nx/wD2gfh/+zp4CuPHHjq5CBQVtrZT+9uJeyIP5noBX+Ud/wAEL/25f2t/2NP2u7A/s7xPrPhzW5Yk8T6LOzCyls1PzTE9I5UXJRupPHIr+p39o79pXx/+0v8AEGbxv42l2RrlLO0QnyreLPCqPX1PUmvM4b8KauYZg5VJWwkdW/tP+6vPu+i8z8r8VvF3D8L4P6vhbTx017sekF/PL/21fafkjV/aF/aN8e/tHePZ/GvjOc+XuK2lopPlW8WeFUevqe9eFfasDmsL7UB1r9kv+Cen/BPuX4mPa/Gv41Wrw6HE4k0/T5FwbsjkO4PPl56D+L6V/QWbZjlnDmW+1q2hSgrRit2+kYrq/wDh2fw9kXDmdcZ526NK9SvUfNOctorrKT6JdF6JIh/Yq/4JyXXxq8MSfEn4wtPpukXkLLp1vH8s0hYcTHPRR1Ud6+KP2nP2bvHX7MXj+Twl4pUz2U+Xsb5QRHcRZ/Rh/Etf2D2trbWNtHZ2caxRRKEREGFVRwAAOgFeSfHL4G+Af2gvAVz4A8f2wmt5huimUDzYJB0dD2I/Wv5/yrxgx0c3niMcr4abtyL7C6OPdrr/ADeWlv604g+jdlFTh6ngsrfLjaauqj/5eS6xn2i/s2+Hz1v/ABi+d3r9O/2DP28r/wCBGpRfDT4lSvdeFL2UBJmYs9izcZX1j7kduor48/ah/Zr8bfsu/EWTwZ4pHn2c4MtheqMJcQ5IB9mHRhXzd9oAFf0Djsuy3iHLeSdqlGorpr8Gn0a/4DW6P5DyrMc74Mzz2tG9LE0XaUXs11jJdYv/ACaezP7pdK1bTNd02DWdGnS6tLlBJFLEwZHRuQQR1FaFfix/wSG1n47X3hPVLHXUL+BoT/oEtxneLjPzLD6pjr2B6d6/aev424nyP+yMyrZf7RT5Huvv17NdV0Z/pTwPxP8A6w5Lh82dGVJ1FrGXdaNp9YveL6oKKKK8A+sP/9b+/iiiigAr4E/4KI/8E4f2b/8AgpZ8DLr4M/H7SklljV5NJ1aJQLzTblhxLC/Uc43L0YcGvvuitKNadKaqU3aS2Ymk1Zn+Vt8Nf+DZH9vDxJ/wUEn/AGQfGti+m+DdMkF5eeNlTNjLpRb5Xgz964cfL5XVWyTx1/0lv2L/ANif9nv9gn4H6b8Bv2dNDh0jSrFF8+YKDcXs4GGmuJOskjHPJ6dBxX1lgZz3pa9bNc+xWPjGFV2iui6vu/60M6dKMNgooorxTU4T4m/DHwB8ZfAeqfDH4paRba7oGtQPbXtjeRiWGaJxghlII/wr/M//AOCw/wDwbq/En9kb9o7Ttc/ZhQ6h8KvGl4VgknkUyaJIxy0UmTueMDmNgCexr/SN/aA/aA+Hf7N3w6u/iL8RbtYYIFIggBHm3Ev8Mca9yfyA5NfyB/tTftZfEX9qv4gSeL/GEv2exgLJYWEZPlW8WeOO7H+Ju9fsXhRwnmOZYl4hNwwi+Jv7T/lj5930Xnofj3iv4nYThrCPD0bTxs17kekV/PPy7L7T8rn58fs1fs1/Df8AZg8Dp4U8CwB7qYK19fuAZrmQDkseyjsvQV9GfaWrAWcjvUnnt6mv62w+Cp0KapUo2itkfwFmOLxWPxNTGYyo51Zu8pN6t/1stktEftx/wTa/YHsfi6sHx2+L8aT6BFJnT7DcGFy6dWlAzhQf4T171/SBaWltY20dlZRrFDEoREQYVVHAAA6AV/Hv+xJ+3N4y/ZO8Wi0ui+oeE9QkX7dYk5KdjLFzw49Ohr+tj4c/Efwb8WPB1l498A30eoaZqEYkiljOevVWHZh0IPIr+TPGXLs6p5p9Zxz5sO9KbXwxX8rXSXd/a3Wmi/t76P8AmHD08l+qZZDkxUdaydueT/mT0vDsl8Oz1d33FFFFfjR/QB4x8dPgN8O/2hvA1x4F+Idms8MgJhmAxLbydnjbqCP1r8RPg3/wSV8Z/wDC9r7T/izMreDNIlEkM8TYfUVPKpgcoAPv+/Ar+iKivrsh43zbKMLWweCq2hUXXXlf80eza0/HdJnwPFHhpkHEGOw+YZlQ5qlJ7rTnXSM/5op6/hs2jD8NeGdA8HaHbeGvC9nFYWFmgjhghUIiKOwArcoor5Oc5Tk5Sd292fd06cacVCCtFaJLZLsgoooqSz//1/7+KKKKACiiigAooooAK8J/aK/aG+H37M/wzvPiX8QrgRwwDbb26kebczH7saDuSep7DmvdW3bTt69s1/Hj/wAFS9c/acu/2hbiw+Psf2fTYWf+w47bd9ha2zw0ZPWQj7+eQfav0Dw44PpcRZssLXqqFOK5pK9pSS6RXfu+i1PzvxN4zrcN5PLF4ei51JPli7XjFv7U327Lq9Dwr9qv9rn4lftZ+Pv+Ev8AG8i29na7ksNPiJ8m2iJ7Ak5Y/wATHrXy/wDacDJNYfn45PFftR/wTX/4Ju6j8aryz+OXxttpLXwtbSrJY2Mi7W1Bl53MD0hB/wC+vpX9jZpmGU8LZT7WolTo01aMVu30jFdW/wDNvqz+HcryTOeLs4dODdSvUd5Tlsl1lJ9Eui9Elsix/wAE8/8Agmpc/Hq3HxZ+OcFxY+F8f6Daj93Jen++eMiMdum76V88ft4fsM+LP2RvGH9p6MJtS8G6gxNnfMMmFj/yxmIAAYfwnuPev7DbGxs9Ms4tP0+JYIIFCRxoNqqq8AADoBXL+P8AwB4R+KHhG+8C+OrGPUNM1CMxTQyjIIPcehHUEdDX8x4PxqzWOdvH11fDS0dJbKPRp/zrdvrtta39V47wCyWeQRy7D6YqOqrPeUuqkv5Hsl9ndXd7/wACwuGHevvT9iL9u7x1+yP4n+wMDqXhPUJVN/YMTlOxlh/uuB+BqH9vD9hXxl+yD4v/ALS03zNT8HajIfsV8VyYSf8AljNjgMOx/iHvX59C6bHav6fjDKeJsqurVcPVX9ecZRfzTP5LdLOeE850vRxNJ/15SjJfJo/v3+GnxJ8HfF3wRp/xC8BXiX2l6lEJYZEPr1Vh2YdCDyDXd1/PD/wRa8KftJW8moeKfPNp8N7kMBBdKT9ouR/Hbgn5QP4m6Gv6Hq/iHjXh6lkmb1svoVlUjF6Nbq/2ZdOZdbfhsf6AcC8SVs9yahmWIoOlOS1T2dvtR68r3V/x3ZRRRXyh9eFFFFABRRRQB//Q/v4ooooAKKKKACiiigAr5u/aj/Zg+HX7VvwyuPh14+i2N/rLO8jA861mHR0Pp2YdCOK+kaK6sDjq+DxEMVhZuFSDumt00cmOwOHxuHnhcVBTpzVpJ7NM/nF/ZW/4I2eINL+MV9rH7Rk0Vz4d0G5H2GCA8anjlXfuiDjcvJJ46V/RfY2FlpdlFpumxJBbwII444wFVEUYAAHAAFW6K9/injHM+Ia8a+Y1L8qsorSK7tLu3q3+iSPn+E+C8q4dw86GW07czvJvWT7Jvstkv1bYUUUV8sfVnEfEb4c+Dvix4Mv/AAB49sY9Q0vUYjFNDIMjB7j0YdQRyDX4HeH/APgiNJB+0LKNe1vzvhzARcxBeLyUEn/R27ADu46jtmv6KKK+r4d42zjI6Vajl1ZxjUVmt7P+aN9pW0uv0R8lxJwNk2e1aFfMqCnKk7p7XX8srbxvrZ/qzn/CnhXw/wCCPDll4R8K2sdlp2nQrBbwRDCoiDAAFdBRRXy05ynJzm7t6tvqfVwhGEVCCsloktkgoooqSgooooAKKKKAP//R/v4ooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKAP/Z"), contactLink = Just (either error CLFull $ strDecode "simplex:/contact/#/?v=1-2&smp=smp%3A%2F%2Fu2dS9sG8nMNURyZwqASV4yROM28Er0luVTx5X1CsMrU%3D%40smp4.simplex.im%2FShQuD-rPokbDvkyotKx5NwM8P3oUXHxA%23%2F%3Fv%3D1-2%26dh%3DMCowBQYDK2VuAyEA6fSx1k9zrOmF0BJpCaTarZvnZpMTAVQhd3RkDQ35KT0%253D%26srv%3Do5vmywmrnaxalvz6wi3zicyftgio6psuvyniis6gco6bp6ekl4cqj4id.onion"), peerType = Just CPTBot, - preferences = Nothing + preferences = Nothing, + badge = Nothing } timeItToView :: String -> CM' a -> CM' a diff --git a/src/Simplex/Chat/Library/Subscriber.hs b/src/Simplex/Chat/Library/Subscriber.hs index 87b560d1ab..f8cb2b861c 100644 --- a/src/Simplex/Chat/Library/Subscriber.hs +++ b/src/Simplex/Chat/Library/Subscriber.hs @@ -437,9 +437,10 @@ processAgentMessageConn cxt user@User {userId} corrId agentConnId agentMessage = -- [incognito] send saved profile (conn'', gInfo_) <- saveConnInfo conn' connInfo incognitoProfile <- forM customUserProfileId $ \profileId -> withStore (\db -> getProfileById db userId profileId) - let profileToSend = case gInfo_ of - Just gInfo -> userProfileInGroup user gInfo (fromLocalProfile <$> incognitoProfile) - Nothing -> userProfileDirect user (fromLocalProfile <$> incognitoProfile) Nothing True + profileToSend <- + presentUserBadge user incognitoProfile $ case gInfo_ of + Just gInfo -> userProfileInGroup user gInfo (fromLocalProfile <$> incognitoProfile) + Nothing -> userProfileDirect user (fromLocalProfile <$> incognitoProfile) Nothing True -- [async agent commands] no continuation needed, but command should be asynchronous for stability allowAgentConnectionAsync user conn'' confId $ XInfo profileToSend INFO pqSupport connInfo -> do @@ -555,7 +556,7 @@ processAgentMessageConn cxt user@User {userId} corrId agentConnId agentMessage = ct' <- processContactProfileUpdate ct profile False `catchAllErrors` const (pure ct) -- [incognito] send incognito profile incognitoProfile <- forM customUserProfileId $ \profileId -> withStore $ \db -> getProfileById db userId profileId - let p = userProfileDirect user (fromLocalProfile <$> incognitoProfile) (Just ct') True + p <- presentUserBadge user incognitoProfile $ userProfileDirect user (fromLocalProfile <$> incognitoProfile) (Just ct') True allowAgentConnectionAsync user conn'' confId $ XInfo p void $ withStore' $ \db -> resetMemberContactFields db ct' XGrpLinkInv glInv -> do @@ -566,7 +567,7 @@ processAgentMessageConn cxt user@User {userId} corrId agentConnId agentMessage = void $ createChatItem user (CDGroupSnd gInfo Nothing) False CIChatBanner Nothing (Just epochStart) -- [incognito] send saved profile incognitoProfile <- forM customUserProfileId $ \pId -> withStore (\db -> getProfileById db userId pId) - let profileToSend = userProfileInGroup user gInfo (fromLocalProfile <$> incognitoProfile) + profileToSend <- presentUserBadge user incognitoProfile $ userProfileInGroup user gInfo (fromLocalProfile <$> incognitoProfile) allowAgentConnectionAsync user conn'' confId $ XInfo profileToSend toView $ CEvtBusinessLinkConnecting user gInfo host ct _ -> messageError "CONF for existing contact must have x.grp.mem.info or x.info" @@ -798,7 +799,7 @@ processAgentMessageConn cxt user@User {userId} corrId agentConnId agentMessage = (gInfo', m') <- withStore $ \db -> updatePreparedUserAndHostMembersInvited db cxt user gInfo m glInv -- [incognito] send saved profile incognitoProfile <- forM customUserProfileId $ \pId -> withStore (\db -> getProfileById db userId pId) - let profileToSend = userProfileInGroup user gInfo (fromLocalProfile <$> incognitoProfile) + profileToSend <- presentUserBadge user incognitoProfile $ userProfileInGroup user gInfo (fromLocalProfile <$> incognitoProfile) allowAgentConnectionAsync user conn' confId $ XInfo profileToSend toView $ CEvtGroupLinkConnecting user gInfo' m' | otherwise -> messageError "x.grp.link.inv: publicGroupId mismatch" @@ -813,7 +814,7 @@ processAgentMessageConn cxt user@User {userId} corrId agentConnId agentMessage = | sameMemberId memId m -> do let GroupMember {memberId = membershipMemId} = membership allowSimplexLinks = groupFeatureUserAllowed SGFSimplexLinks gInfo - membershipProfile = redactedMemberProfile allowSimplexLinks $ fromLocalProfile $ memberProfile membership + membershipProfile <- presentUserBadge user (incognitoMembershipProfile gInfo) $ redactedMemberProfile allowSimplexLinks $ fromLocalProfile $ memberProfile membership -- TODO update member profile -- [async agent commands] no continuation needed, but command should be asynchronous for stability allowAgentConnectionAsync user conn' confId $ XGrpMemInfo membershipMemId membershipProfile @@ -921,7 +922,7 @@ processAgentMessageConn cxt user@User {userId} corrId agentConnId agentMessage = where sendXGrpLinkMem gInfo'' = do let incognitoProfile = ExistingIncognito <$> incognitoMembershipProfile gInfo'' - profileToSend = userProfileInGroup user gInfo (fromIncognitoProfile <$> incognitoProfile) + profileToSend <- presentUserBadge user incognitoProfile $ userProfileInGroup user gInfo (fromIncognitoProfile <$> incognitoProfile) void $ sendDirectMemberMessage conn (XGrpLinkMem profileToSend) groupId _ -> do unless (memberPending m) $ withStore' $ \db -> updateGroupMemberStatus db userId m GSMemConnected @@ -1170,7 +1171,7 @@ processAgentMessageConn cxt user@User {userId} corrId agentConnId agentMessage = relayLinkData_ <- liftIO $ decodeLinkUserData cData case (relayLinkData_, linkEntityId) of (Just RelayShortLinkData {relayProfile = p}, Just entityId) -> - withStore $ \db -> updateRelayMemberData db user m (MemberId entityId) (MemberKey relayKey) p + withStore $ \db -> updateRelayMemberData db cxt user m (MemberId entityId) (MemberKey relayKey) p _ -> throwChatError $ CEException "relay link: no relay link data or entity id" case cReq of CRContactUri crData@ConnReqUriData {crClientData} -> do @@ -1184,8 +1185,8 @@ processAgentMessageConn cxt user@User {userId} corrId agentConnId agentMessage = -- Update connection with data derived from cReq, now available after getConnShortLinkAsync withStore' $ \db -> updateConnLinkData db user conn cReq cReqHash groupLinkId chatV pqSup let GroupMember {memberId = membershipMemId} = membership - incognitoProfile = fromLocalProfile <$> incognitoMembershipProfile gInfo - profileToSend = userProfileInGroup user gInfo incognitoProfile + incognitoProfile = incognitoMembershipProfile gInfo + profileToSend <- presentUserBadge user incognitoProfile $ userProfileInGroup user gInfo (fromLocalProfile <$> incognitoProfile) memberPubKey <- case groupKeys gInfo of Just GroupKeys {memberPrivKey} -> pure $ C.publicKey memberPrivKey Nothing -> throwChatError $ CEInternalError "no group keys for channel membership" @@ -2550,14 +2551,15 @@ processAgentMessageConn cxt user@User {userId} corrId agentConnId agentMessage = processContactProfileUpdate :: Contact -> Profile -> Bool -> CM Contact processContactProfileUpdate c@Contact {profile = lp} p' createItems - | p /= p' = do + -- a failed/unknown-key badge is re-verified even when content is unchanged, so it heals after an app update adds the key + | contentChanged || badgeNeedsReverify lp = do c' <- withStore $ \db -> if userTTL == rcvTTL - then updateContactProfile db user c p' + then updateContactProfile db cxt user c p' else do c' <- liftIO $ updateContactUserPreferences db user c ctUserPrefs' - updateContactProfile db user c' p' - when (directOrUsed c' && createItems) $ do + updateContactProfile db cxt user c' p' + when (contentChanged && directOrUsed c' && createItems) $ do createProfileUpdatedItem c' lift $ createRcvFeatureItems user c c' toView $ CEvtContactUpdated user c c' @@ -2565,6 +2567,7 @@ processAgentMessageConn cxt user@User {userId} corrId agentConnId agentMessage = | otherwise = pure c where + contentChanged = not (sameProfileContent p p') p = fromLocalProfile lp Contact {userPreferences = ctUserPrefs@Preferences {timedMessages = ctUserTMPref}} = c userTTL = prefParam $ getPreference SCFTimedMessages ctUserPrefs @@ -2667,22 +2670,23 @@ processAgentMessageConn cxt user@User {userId} corrId agentConnId agentMessage = processMemberProfileUpdate :: GroupInfo -> GroupMember -> Profile -> Maybe (RcvMessage, UTCTime) -> CM GroupMember processMemberProfileUpdate gInfo m@GroupMember {memberProfile = p, memberContactId} p' msgTs_ - | redactedMemberProfile allowSimplexLinks (fromLocalProfile p) /= redactedMemberProfile allowSimplexLinks p' = do - updateBusinessChatProfile gInfo + -- a failed/unknown-key badge is re-verified even when content is unchanged, so it heals after an app update adds the key + | contentChanged || badgeNeedsReverify p = do + when contentChanged $ updateBusinessChatProfile gInfo case memberContactId of Nothing -> do - m' <- withStore $ \db -> updateMemberProfile db user m p' + m' <- withStore $ \db -> updateMemberProfile db cxt user m p' unless (muteEventInChannel gInfo m') $ do - forM_ msgTs_ $ createProfileUpdatedItem m' + when contentChanged $ forM_ msgTs_ $ createProfileUpdatedItem m' toView $ CEvtGroupMemberUpdated user gInfo m m' pure m' Just mContactId -> do mCt <- withStore $ \db -> getContact db cxt user mContactId if canUpdateProfile mCt then do - (m', ct') <- withStore $ \db -> updateContactMemberProfile db user m mCt p' + (m', ct') <- withStore $ \db -> updateContactMemberProfile db cxt user m mCt p' unless (muteEventInChannel gInfo m') $ do - forM_ msgTs_ $ createProfileUpdatedItem m' + when contentChanged $ forM_ msgTs_ $ createProfileUpdatedItem m' toView $ CEvtGroupMemberUpdated user gInfo m m' toView $ CEvtContactUpdated user mCt ct' pure m' @@ -2696,6 +2700,7 @@ processAgentMessageConn cxt user@User {userId} corrId agentConnId agentMessage = | otherwise = pure m where + contentChanged = not (sameProfileContent (redactedMemberProfile allowSimplexLinks (fromLocalProfile p)) (redactedMemberProfile allowSimplexLinks p')) allowSimplexLinks = groupFeatureMemberAllowed SGFSimplexLinks m gInfo updateBusinessChatProfile g@GroupInfo {businessChat} = case businessChat of Just bc | isMainBusinessMember bc m -> do @@ -2976,7 +2981,7 @@ processAgentMessageConn cxt user@User {userId} corrId agentConnId agentMessage = | otherwise -> messageError "x.grp.mem.new error: member already exists" $> Nothing Left _ -> do (newMember, gInfo') <- withStore $ \db -> do - newMember <- createNewGroupMember db user gInfo m memInfo GCPostMember initialStatus + newMember <- createNewGroupMember db cxt user gInfo m memInfo GCPostMember initialStatus gInfo' <- if memberPending newMember then liftIO $ increaseGroupMembersRequireAttention db user gInfo @@ -3028,7 +3033,7 @@ processAgentMessageConn cxt user@User {userId} corrId agentConnId agentMessage = MemberInfo mId mRole v p _ | mRole == GROwner -> MemberInfo mId mRole v p Nothing _ -> memInfo - void $ withStore $ \db -> createIntroReMember db user gInfo memInfo' memRestrictions + void $ withStore $ \db -> createIntroReMember db cxt user gInfo memInfo' memRestrictions | otherwise -> do when (memberRole < GRAdmin) $ throwChatError (CEGroupContactRole c) case memChatVRange of @@ -3040,7 +3045,7 @@ processAgentMessageConn cxt user@User {userId} corrId agentConnId agentMessage = groupConnIds <- createConn subMode let chatV = maybe (minVersion (vr cxt)) (\peerVR -> vr cxt `peerConnChatVersion` fromChatVRange peerVR) memChatVRange void $ withStore $ \db -> do - reMember <- createIntroReMember db user gInfo memInfo memRestrictions + reMember <- createIntroReMember db cxt user gInfo memInfo memRestrictions createIntroReMemberConn db user m reMember chatV memInfo groupConnIds subMode | otherwise -> messageError "x.grp.mem.intro: member chat version range incompatible" _ -> messageError "x.grp.mem.intro can be only sent by host member" @@ -3075,7 +3080,7 @@ processAgentMessageConn cxt user@User {userId} corrId agentConnId agentMessage = -- member receiving x.grp.mem.fwd should have also received x.grp.mem.new prior to that. -- For now, this branch compensates for the lack of delayed message delivery. `catchError` \case - SEGroupMemberNotFoundByMemberId _ -> createNewGroupMember db user gInfo m memInfo GCPostMember GSMemAnnounced + SEGroupMemberNotFoundByMemberId _ -> createNewGroupMember db cxt user gInfo m memInfo GCPostMember GSMemAnnounced e -> throwError e -- TODO [knocking] separate pending statuses from GroupMemberStatus? -- TODO add GSMemIntroInvitedPending, GSMemConnectedPending, etc.? @@ -3085,8 +3090,8 @@ processAgentMessageConn cxt user@User {userId} corrId agentConnId agentMessage = pure toMember subMode <- chatReadVar subscriptionMode -- [incognito] send membership incognito profile, create direct connection as incognito - let membershipProfile = redactedMemberProfile allowSimplexLinks $ fromLocalProfile $ memberProfile membership - allowSimplexLinks = groupFeatureUserAllowed SGFSimplexLinks gInfo + let allowSimplexLinks = groupFeatureUserAllowed SGFSimplexLinks gInfo + membershipProfile <- presentUserBadge user (incognitoMembershipProfile gInfo) $ redactedMemberProfile allowSimplexLinks $ fromLocalProfile $ memberProfile membership dm <- encodeConnInfo $ XGrpMemInfo membershipMemId membershipProfile -- [async agent commands] no continuation needed, but commands should be asynchronous for stability groupConnIds <- joinAgentConnectionAsync user Nothing (chatHasNtfs chatSettings) groupConnReq dm subMode @@ -3385,7 +3390,7 @@ processAgentMessageConn cxt user@User {userId} corrId agentConnId agentMessage = createItems mCt m' joinConn subMode = do -- [incognito] send membership incognito profile - let p = userProfileDirect user (fromLocalProfile <$> incognitoMembershipProfile g) Nothing True + p <- presentUserBadge user (incognitoMembershipProfile g) $ userProfileDirect user (fromLocalProfile <$> incognitoMembershipProfile g) Nothing True -- TODO PQ should negotitate contact connection with PQSupportOn? (use encodeConnInfoPQ) dm <- encodeConnInfo $ XInfo p joinAgentConnectionAsync user Nothing True connReq dm subMode diff --git a/src/Simplex/Chat/Mobile.hs b/src/Simplex/Chat/Mobile.hs index 281fc6b03b..d932194934 100644 --- a/src/Simplex/Chat/Mobile.hs +++ b/src/Simplex/Chat/Mobile.hs @@ -38,6 +38,7 @@ import Simplex.Chat import Simplex.Chat.Controller import Simplex.Chat.Library.Commands import Simplex.Chat.Markdown (ParsedMarkdown (..), parseMaybeMarkdownList, parseUri, sanitizeUri) +import Simplex.Chat.Mobile.Badges import Simplex.Chat.Mobile.File import Simplex.Chat.Mobile.Shared import Simplex.Chat.Mobile.WebRTC @@ -136,6 +137,10 @@ foreign export ccall "chat_valid_name" cChatValidName :: CString -> IO CString foreign export ccall "chat_json_length" cChatJsonLength :: CString -> IO CInt +foreign export ccall "chat_badge_keygen" cChatBadgeKeygen :: IO CJSONString + +foreign export ccall "chat_badge_issue" cChatBadgeIssue :: CString -> IO CJSONString + foreign export ccall "chat_encrypt_media" cChatEncryptMedia :: StablePtr ChatController -> CString -> Ptr Word8 -> CInt -> IO CString foreign export ccall "chat_decrypt_media" cChatDecryptMedia :: CString -> Ptr Word8 -> CInt -> IO CString diff --git a/src/Simplex/Chat/Mobile/Badges.hs b/src/Simplex/Chat/Mobile/Badges.hs new file mode 100644 index 0000000000..91e90e16c3 --- /dev/null +++ b/src/Simplex/Chat/Mobile/Badges.hs @@ -0,0 +1,74 @@ +{-# LANGUAGE DataKinds #-} +{-# LANGUAGE DuplicateRecordFields #-} +{-# LANGUAGE LambdaCase #-} +{-# LANGUAGE NamedFieldPuns #-} +{-# LANGUAGE OverloadedStrings #-} +{-# LANGUAGE TemplateHaskell #-} +{-# LANGUAGE TypeApplications #-} + +module Simplex.Chat.Mobile.Badges + ( cChatBadgeKeygen, + cChatBadgeIssue, + BadgeResult (..), + BadgeIssueReq (..), + IssuerKeyPair (..), + ) +where + +import Data.Aeson (FromJSON (..), ToJSON (..)) +import qualified Data.Aeson as J +import qualified Data.Aeson.TH as JQ +import qualified Data.ByteString as B +import Data.Text (Text) +import qualified Data.Text as T +import Foreign.C (CString) +import Simplex.Chat.Badges +import Simplex.Chat.Mobile.Shared (CJSONString, newCStringFromLazyBS) +import Simplex.Messaging.Crypto.BBS (BBSPublicKey, BBSSecretKey, bbsKeyGen) +import Simplex.Messaging.Parsers (defaultJSON) + +-- FFI envelope for a generated issuer keypair (the BBS keypair tuple serialized with named fields) +data IssuerKeyPair = IssuerKeyPair + { publicKey :: BBSPublicKey, + secretKey :: BBSSecretKey + } + +data BadgeIssueReq = BadgeIssueReq + { badgeKeyIdx :: Int, + secretKey :: BBSSecretKey, + request :: BadgeRequest + } + +data BadgeResult r + = BadgeResult {result :: r} + | BadgeError {error :: Text} + +$(JQ.deriveJSON defaultJSON ''IssuerKeyPair) + +$(JQ.deriveJSON defaultJSON ''BadgeIssueReq) + +$(pure []) + +instance ToJSON r => ToJSON (BadgeResult r) where + toEncoding = $(JQ.mkToEncoding (defaultJSON {J.sumEncoding = J.UntaggedValue}) ''BadgeResult) + toJSON = $(JQ.mkToJSON (defaultJSON {J.sumEncoding = J.UntaggedValue}) ''BadgeResult) + +instance FromJSON r => FromJSON (BadgeResult r) where + parseJSON = $(JQ.mkParseJSON (defaultJSON {J.sumEncoding = J.UntaggedValue}) ''BadgeResult) + +cChatBadgeKeygen :: IO CJSONString +cChatBadgeKeygen = + bbsKeyGen >>= \case + Right (pk, sk) -> encodeResult $ BadgeResult (IssuerKeyPair pk sk) + Left e -> encodeResult @IssuerKeyPair $ BadgeError (T.pack e) + +cChatBadgeIssue :: CString -> IO CJSONString +cChatBadgeIssue cReq = do + bs <- B.packCString cReq + encodeResult @BadgeCredential =<< case J.eitherDecodeStrict' bs of + Left e -> pure $ BadgeError (T.pack e) + Right BadgeIssueReq {badgeKeyIdx, secretKey, request} -> + either (BadgeError . T.pack) BadgeResult <$> issueBadge badgeKeyIdx secretKey (VerifiedBadgeRequest request) + +encodeResult :: ToJSON r => BadgeResult r -> IO CJSONString +encodeResult = newCStringFromLazyBS . J.encode diff --git a/src/Simplex/Chat/ProfileGenerator.hs b/src/Simplex/Chat/ProfileGenerator.hs index b0903589de..7d272481f6 100644 --- a/src/Simplex/Chat/ProfileGenerator.hs +++ b/src/Simplex/Chat/ProfileGenerator.hs @@ -10,7 +10,7 @@ generateRandomProfile :: IO Profile generateRandomProfile = do adjective <- pick adjectives noun <- pickNoun adjective 2 - pure $ Profile {displayName = adjective <> noun, fullName = "", shortDescr = Nothing, image = Nothing, contactLink = Nothing, peerType = Nothing, preferences = Nothing} + pure $ Profile {displayName = adjective <> noun, fullName = "", shortDescr = Nothing, image = Nothing, contactLink = Nothing, peerType = Nothing, preferences = Nothing, badge = Nothing} where pick :: [a] -> IO a pick xs = (xs !!) <$> randomRIO (0, length xs - 1) diff --git a/src/Simplex/Chat/Protocol.hs b/src/Simplex/Chat/Protocol.hs index 9b8f6da766..f8ccaa74e7 100644 --- a/src/Simplex/Chat/Protocol.hs +++ b/src/Simplex/Chat/Protocol.hs @@ -49,6 +49,7 @@ import Data.Time.Clock.System (systemToUTCTime, utcToSystemTime) import Data.Type.Equality import Data.Typeable (Typeable) import Data.Word (Word32) +import Simplex.Chat.Badges (LocalBadge) import Simplex.Chat.Call import Simplex.Chat.Options.DB (FromField (..), ToField (..)) import Simplex.Chat.Types @@ -1483,7 +1484,10 @@ instance FromField (ChatMessage 'Json) where data ContactShortLinkData = ContactShortLinkData { profile :: Profile, message :: Maybe MsgContent, - business :: Bool + business :: Bool, + -- set by the receiving client for the UI: the link profile's badge, verified and crypto-free. + -- never part of the published link data (the link carries the proof inside profile). + localBadge :: Maybe LocalBadge } deriving (Show) diff --git a/src/Simplex/Chat/Store/Connections.hs b/src/Simplex/Chat/Store/Connections.hs index abc40f1e6e..e5ebf8e2bd 100644 --- a/src/Simplex/Chat/Store/Connections.hs +++ b/src/Simplex/Chat/Store/Connections.hs @@ -29,7 +29,8 @@ import Control.Monad.IO.Class import Data.Bitraversable (bitraverse) import Data.Int (Int64) import Data.Maybe (fromMaybe) -import Data.Time.Clock (getCurrentTime) +import Data.Time.Clock (UTCTime, getCurrentTime) +import Simplex.Chat.Badges (rowToBadge) import Simplex.Chat.Protocol import Simplex.Chat.Store.Direct import Simplex.Chat.Store.Groups @@ -104,8 +105,9 @@ getConnectionEntity db cxt user@User {userId, userContactId} agentConnId = do (userId, agentConnId, ConnDeleted) getContactRec_ :: Int64 -> Connection -> ExceptT StoreError IO Contact getContactRec_ contactId c = ExceptT $ do + currentTs <- getCurrentTime chatTags <- getDirectChatTags db contactId - firstRow (toContact' contactId c chatTags) (SEInternalError "referenced contact not found") $ + firstRow (toContact' currentTs contactId c chatTags) (SEInternalError "referenced contact not found") $ DB.query db [sql| @@ -113,15 +115,16 @@ getConnectionEntity db cxt user@User {userId, userContactId} agentConnId = do c.contact_profile_id, c.local_display_name, p.display_name, p.full_name, p.short_descr, p.image, p.contact_link, p.chat_peer_type, p.local_alias, c.contact_used, c.contact_status, c.enable_ntfs, c.send_rcpts, c.favorite, p.preferences, c.user_preferences, c.created_at, c.updated_at, c.chat_ts, c.conn_full_link_to_connect, c.conn_short_link_to_connect, c.welcome_shared_msg_id, c.request_shared_msg_id, c.contact_request_id, c.contact_group_member_id, c.contact_grp_inv_sent, c.grp_direct_inv_link, c.grp_direct_inv_from_group_id, c.grp_direct_inv_from_group_member_id, c.grp_direct_inv_from_member_conn_id, c.grp_direct_inv_started_connection, - c.ui_themes, c.chat_deleted, c.custom_data, c.chat_item_ttl + c.ui_themes, c.chat_deleted, c.custom_data, c.chat_item_ttl, + p.badge_proof, p.badge_pres_header, p.badge_expiry, p.badge_type, p.badge_verified, p.badge_extra, p.badge_master_key, p.badge_signature, p.badge_key_idx FROM contacts c JOIN contact_profiles p ON c.contact_profile_id = p.contact_profile_id WHERE c.user_id = ? AND c.contact_id = ? AND c.contact_status = ? AND c.deleted = 0 |] (userId, contactId, CSActive) - toContact' :: Int64 -> Connection -> [ChatTagId] -> ContactRow' -> Contact - toContact' contactId conn chatTags ((profileId, localDisplayName, displayName, fullName, shortDescr, image, contactLink, peerType, localAlias, BI contactUsed, contactStatus) :. (enableNtfs_, sendRcpts, BI favorite, preferences, userPreferences, createdAt, updatedAt, chatTs) :. preparedContactRow :. (contactRequestId, contactGroupMemberId, BI contactGrpInvSent) :. groupDirectInvRow :. (uiThemes, BI chatDeleted, customData, chatItemTTL)) = - let profile = LocalProfile {profileId, displayName, fullName, shortDescr, image, contactLink, peerType, preferences, localAlias} + toContact' :: UTCTime -> Int64 -> Connection -> [ChatTagId] -> ContactRow' -> Contact + toContact' currentTs contactId conn chatTags ((profileId, localDisplayName, displayName, fullName, shortDescr, image, contactLink, peerType, localAlias, BI contactUsed, contactStatus) :. (enableNtfs_, sendRcpts, BI favorite, preferences, userPreferences, createdAt, updatedAt, chatTs) :. preparedContactRow :. (contactRequestId, contactGroupMemberId, BI contactGrpInvSent) :. groupDirectInvRow :. (uiThemes, BI chatDeleted, customData, chatItemTTL) :. badgeRow) = + let profile = LocalProfile {profileId, displayName, fullName, shortDescr, image, contactLink, peerType, localBadge = rowToBadge currentTs badgeRow, preferences, localAlias} chatSettings = ChatSettings {enableNtfs = fromMaybe MFAll enableNtfs_, sendRcpts = unBI <$> sendRcpts, favorite} mergedPreferences = contactUserPreferences user userPreferences preferences $ connIncognito conn activeConn = Just conn @@ -130,9 +133,10 @@ getConnectionEntity db cxt user@User {userId, userContactId} agentConnId = do in Contact {contactId, localDisplayName, profile, activeConn, contactUsed, contactStatus, chatSettings, userPreferences, mergedPreferences, createdAt, updatedAt, chatTs, preparedContact, contactRequestId, contactGroupMemberId, contactGrpInvSent, groupDirectInv, chatTags, chatItemTTL, uiThemes, chatDeleted, customData} getGroupAndMember_ :: Int64 -> Connection -> ExceptT StoreError IO (GroupInfo, GroupMember) getGroupAndMember_ groupMemberId c = do + currentTs <- liftIO getCurrentTime gm <- ExceptT $ - firstRow (toGroupAndMember c) (SEInternalError "referenced group member not found") $ + firstRow (toGroupAndMember currentTs c) (SEInternalError "referenced group member not found") $ DB.query db [sql| @@ -152,11 +156,13 @@ getConnectionEntity db cxt user@User {userId, userContactId} agentConnId = do mu.member_status, mu.show_messages, mu.member_restriction, mu.invited_by, mu.invited_by_group_member_id, mu.local_display_name, mu.contact_id, mu.contact_profile_id, pu.contact_profile_id, -- GroupInfo {membership = GroupMember {memberProfile}} pu.display_name, pu.full_name, pu.short_descr, pu.image, pu.contact_link, pu.chat_peer_type, pu.local_alias, pu.preferences, + pu.badge_proof, pu.badge_pres_header, pu.badge_expiry, pu.badge_type, pu.badge_verified, pu.badge_extra, pu.badge_master_key, pu.badge_signature, pu.badge_key_idx, mu.created_at, mu.updated_at, mu.support_chat_ts, mu.support_chat_items_unread, mu.support_chat_items_member_attention, mu.support_chat_items_mentions, mu.support_chat_last_msg_from_member_ts, mu.member_pub_key, mu.relay_link, -- from GroupMember m.group_member_id, m.group_id, m.index_in_group, m.member_id, m.peer_chat_min_version, m.peer_chat_max_version, m.member_role, m.member_category, m.member_status, m.show_messages, m.member_restriction, m.invited_by, m.invited_by_group_member_id, m.local_display_name, m.contact_id, m.contact_profile_id, p.contact_profile_id, p.display_name, p.full_name, p.short_descr, p.image, p.contact_link, p.chat_peer_type, p.local_alias, p.preferences, + p.badge_proof, p.badge_pres_header, p.badge_expiry, p.badge_type, p.badge_verified, p.badge_extra, p.badge_master_key, p.badge_signature, p.badge_key_idx, m.created_at, m.updated_at, m.support_chat_ts, m.support_chat_items_unread, m.support_chat_items_member_attention, m.support_chat_items_mentions, m.support_chat_last_msg_from_member_ts, m.member_pub_key, m.relay_link FROM group_members m @@ -170,10 +176,10 @@ getConnectionEntity db cxt user@User {userId, userContactId} agentConnId = do |] (groupMemberId, userId, userContactId, GSMemRemoved, GSMemLeft, GSMemGroupDeleted) liftIO $ bitraverse (addGroupChatTags db) pure gm - toGroupAndMember :: Connection -> GroupInfoRow :. GroupMemberRow -> (GroupInfo, GroupMember) - toGroupAndMember c (groupInfoRow :. memberRow) = - let groupInfo = toGroupInfo cxt userContactId [] groupInfoRow - member = toGroupMember userContactId memberRow + toGroupAndMember :: UTCTime -> Connection -> GroupInfoRow :. GroupMemberRow -> (GroupInfo, GroupMember) + toGroupAndMember currentTs c (groupInfoRow :. memberRow) = + let groupInfo = toGroupInfo currentTs cxt userContactId [] groupInfoRow + member = toGroupMember currentTs userContactId memberRow in (groupInfo, (member :: GroupMember) {activeConn = Just c}) getUserContact_ :: Int64 -> ExceptT StoreError IO UserContact getUserContact_ userContactLinkId = ExceptT $ do diff --git a/src/Simplex/Chat/Store/ContactRequest.hs b/src/Simplex/Chat/Store/ContactRequest.hs index 27cb970b73..9c5fe0cd91 100644 --- a/src/Simplex/Chat/Store/ContactRequest.hs +++ b/src/Simplex/Chat/Store/ContactRequest.hs @@ -24,6 +24,7 @@ import Control.Monad.IO.Class import Crypto.Random (ChaChaDRG) import Data.Int (Int64) import Data.Time.Clock (getCurrentTime) +import Simplex.Chat.Badges (badgeToRow, verifyBadge_) import Simplex.Chat.Protocol (MsgContent, businessChatsVersion) import Simplex.Chat.Store.Direct import Simplex.Chat.Store.Groups @@ -72,7 +73,7 @@ createOrUpdateContactRequest isSimplexTeam invId cReqChatVRange@(VersionRange minV maxV) - profile@Profile {displayName, fullName, shortDescr, image, contactLink, preferences} + profile@Profile {displayName, fullName, shortDescr, image, contactLink, badge, preferences} xContactId_ welcomeMsgId_ requestMsg_ @@ -103,8 +104,9 @@ createOrUpdateContactRequest where getAcceptedContact :: XContactId -> IO (Maybe Contact) getAcceptedContact xContactId = do + currentTs <- getCurrentTime ct_ <- - maybeFirstRow (toContact cxt user []) $ + maybeFirstRow (toContact currentTs cxt user []) $ DB.query db [sql| @@ -114,6 +116,7 @@ createOrUpdateContactRequest cp.preferences, ct.user_preferences, ct.created_at, ct.updated_at, ct.chat_ts, ct.conn_full_link_to_connect, ct.conn_short_link_to_connect, ct.welcome_shared_msg_id, ct.request_shared_msg_id, ct.contact_request_id, ct.contact_group_member_id, ct.contact_grp_inv_sent, ct.grp_direct_inv_link, ct.grp_direct_inv_from_group_id, ct.grp_direct_inv_from_group_member_id, ct.grp_direct_inv_from_member_conn_id, ct.grp_direct_inv_started_connection, ct.ui_themes, ct.chat_deleted, ct.custom_data, ct.chat_item_ttl, + cp.badge_proof, cp.badge_pres_header, cp.badge_expiry, cp.badge_type, cp.badge_verified, cp.badge_extra, cp.badge_master_key, cp.badge_signature, cp.badge_key_idx, -- Connection c.connection_id, c.agent_conn_id, c.conn_level, c.via_contact, c.via_user_contact_link, c.via_group_link, c.group_link_id, c.xcontact_id, c.custom_user_profile_id, c.conn_status, c.conn_type, c.contact_conn_initiated, c.local_alias, c.contact_id, c.group_member_id, c.user_contact_link_id, c.created_at, c.security_code, c.security_code_verified_at, c.pq_support, c.pq_encryption, c.pq_snd_enabled, c.pq_rcv_enabled, c.auth_err_counter, c.quota_err_counter, @@ -127,26 +130,29 @@ createOrUpdateContactRequest mapM (addDirectChatTags db) ct_ getAcceptedBusinessChat :: XContactId -> IO (Maybe GroupInfo) getAcceptedBusinessChat xContactId = do + currentTs <- getCurrentTime g_ <- - maybeFirstRow (toGroupInfo cxt userContactId []) $ + maybeFirstRow (toGroupInfo currentTs cxt userContactId []) $ DB.query db (groupInfoQuery <> " WHERE g.business_xcontact_id = ? AND g.user_id = ? AND mu.contact_id = ?") (xContactId, userId, userContactId) mapM (addGroupChatTags db) g_ getContactRequestByXContactId :: XContactId -> IO (Maybe UserContactRequest) - getContactRequestByXContactId xContactId = - maybeFirstRow toContactRequest $ + getContactRequestByXContactId xContactId = do + currentTs <- getCurrentTime + maybeFirstRow (toContactRequest currentTs) $ DB.query db [sql| SELECT cr.contact_request_id, cr.local_display_name, cr.agent_invitation_id, cr.contact_id, cr.business_group_id, cr.user_contact_link_id, - cr.contact_profile_id, p.display_name, p.full_name, p.short_descr, p.image, p.contact_link, p.chat_peer_type, cr.xcontact_id, + cr.contact_profile_id, p.display_name, p.full_name, p.short_descr, p.image, p.contact_link, p.chat_peer_type, p.local_alias, cr.xcontact_id, cr.pq_support, cr.welcome_shared_msg_id, cr.request_shared_msg_id, p.preferences, cr.created_at, cr.updated_at, - cr.peer_chat_min_version, cr.peer_chat_max_version + cr.peer_chat_min_version, cr.peer_chat_max_version, + p.badge_proof, p.badge_pres_header, p.badge_expiry, p.badge_type, p.badge_verified, p.badge_extra, p.badge_master_key, p.badge_signature, p.badge_key_idx FROM contact_requests cr JOIN contact_profiles p USING (contact_profile_id) WHERE cr.user_id = ? @@ -157,12 +163,13 @@ createOrUpdateContactRequest createContactRequest :: ExceptT StoreError IO RequestStage createContactRequest = do currentTs <- liftIO $ getCurrentTime + badgeVerified <- liftIO $ verifyBadge_ (badgeKeys cxt) badge ExceptT $ withLocalDisplayName db userId displayName $ \ldn -> runExceptT $ do liftIO $ DB.execute db - "INSERT INTO contact_profiles (display_name, full_name, short_descr, image, contact_link, user_id, preferences, created_at, updated_at) VALUES (?,?,?,?,?,?,?,?,?)" - (displayName, fullName, shortDescr, image, contactLink, userId, preferences, currentTs, currentTs) + "INSERT INTO contact_profiles (display_name, full_name, short_descr, image, contact_link, user_id, local_alias, preferences, created_at, updated_at, badge_proof, badge_pres_header, badge_expiry, badge_type, badge_verified, badge_extra, badge_master_key, badge_signature, badge_key_idx) VALUES (?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?)" + ((displayName, fullName, shortDescr, image, contactLink, userId) :. ("" :: LocalAlias, preferences, currentTs, currentTs) :. badgeToRow badge badgeVerified) profileId <- liftIO $ insertedRowId db liftIO $ DB.execute @@ -214,7 +221,7 @@ createOrUpdateContactRequest ucr <- getContactRequest db user contactRequestId pure $ RSCurrentRequest Nothing ucr (Just $ REBusinessChat gInfo clientMember) updateContactRequest :: UserContactRequest -> ExceptT StoreError IO RequestStage - updateContactRequest ucr@UserContactRequest {contactRequestId, contactId_, localDisplayName = oldLdn, profile = Profile {displayName = oldDisplayName}} = do + updateContactRequest ucr@UserContactRequest {contactRequestId, contactId_, localDisplayName = oldLdn, profile = LocalProfile {displayName = oldDisplayName}} = do currentTs <- liftIO getCurrentTime liftIO $ updateProfile currentTs updateRequest currentTs @@ -222,7 +229,8 @@ createOrUpdateContactRequest re_ <- getRequestEntity ucr' pure $ RSCurrentRequest (Just ucr) ucr' re_ where - updateProfile currentTs = + updateProfile currentTs = do + badgeVerified <- liftIO $ verifyBadge_ (badgeKeys cxt) badge DB.execute db [sql| @@ -232,7 +240,16 @@ createOrUpdateContactRequest short_descr = ?, image = ?, contact_link = ?, - updated_at = ? + updated_at = ?, + badge_proof = ?, + badge_pres_header = ?, + badge_expiry = ?, + badge_type = ?, + badge_verified = ?, + badge_extra = ?, + badge_master_key = ?, + badge_signature = ?, + badge_key_idx = ? WHERE contact_profile_id IN ( SELECT contact_profile_id FROM contact_requests @@ -240,7 +257,7 @@ createOrUpdateContactRequest AND contact_request_id = ? ) |] - (displayName, fullName, shortDescr, image, contactLink, currentTs, userId, contactRequestId) + ((displayName, fullName, shortDescr, image, contactLink, currentTs) :. badgeToRow badge badgeVerified :. (userId, contactRequestId)) updateRequest currentTs = if displayName == oldDisplayName then diff --git a/src/Simplex/Chat/Store/Delivery.hs b/src/Simplex/Chat/Store/Delivery.hs index e60d51ac85..204b5325ed 100644 --- a/src/Simplex/Chat/Store/Delivery.hs +++ b/src/Simplex/Chat/Store/Delivery.hs @@ -351,7 +351,8 @@ getGroupMembersByCursor db cxt user@User {userContactId} GroupInfo {groupId} cur :. (cursorGMId, count) ) #if defined(dbPostgres) - map (toContactMember cxt user) <$> + currentTs <- getCurrentTime + map (toContactMember currentTs cxt user) <$> DB.query db (groupMemberQuery <> " WHERE m.group_member_id IN ?") diff --git a/src/Simplex/Chat/Store/Direct.hs b/src/Simplex/Chat/Store/Direct.hs index 1c2f35f2bf..5068c5c61c 100644 --- a/src/Simplex/Chat/Store/Direct.hs +++ b/src/Simplex/Chat/Store/Direct.hs @@ -105,6 +105,7 @@ import Data.Maybe (fromMaybe, isJust, isNothing) import Data.Text (Text) import Data.Time.Clock (UTCTime (..), getCurrentTime) import Data.Type.Equality +import Simplex.Chat.Badges (badgeToRow) import Simplex.Chat.Messages import Simplex.Chat.Store.Shared import Simplex.Chat.Types @@ -307,8 +308,9 @@ getConnReqContactXContactId db cxt user@User {userId} cReqHash1 cReqHash2 = getContactByConnReqHash :: DB.Connection -> StoreCxt -> User -> ConnReqUriHash -> ConnReqUriHash -> IO (Maybe Contact) getContactByConnReqHash db cxt user@User {userId} cReqHash1 cReqHash2 = do + currentTs <- getCurrentTime ct <- - maybeFirstRow (toContact cxt user []) $ + maybeFirstRow (toContact currentTs cxt user []) $ DB.query db [sql| @@ -318,6 +320,7 @@ getContactByConnReqHash db cxt user@User {userId} cReqHash1 cReqHash2 = do cp.preferences, ct.user_preferences, ct.created_at, ct.updated_at, ct.chat_ts, ct.conn_full_link_to_connect, ct.conn_short_link_to_connect, ct.welcome_shared_msg_id, ct.request_shared_msg_id, ct.contact_request_id, ct.contact_group_member_id, ct.contact_grp_inv_sent, ct.grp_direct_inv_link, ct.grp_direct_inv_from_group_id, ct.grp_direct_inv_from_group_member_id, ct.grp_direct_inv_from_member_conn_id, ct.grp_direct_inv_started_connection, ct.ui_themes, ct.chat_deleted, ct.custom_data, ct.chat_item_ttl, + cp.badge_proof, cp.badge_pres_header, cp.badge_expiry, cp.badge_type, cp.badge_verified, cp.badge_extra, cp.badge_master_key, cp.badge_signature, cp.badge_key_idx, -- Connection c.connection_id, c.agent_conn_id, c.conn_level, c.via_contact, c.via_user_contact_link, c.via_group_link, c.group_link_id, c.xcontact_id, c.custom_user_profile_id, c.conn_status, c.conn_type, c.contact_conn_initiated, c.local_alias, c.contact_id, c.group_member_id, c.user_contact_link_id, c.created_at, c.security_code, c.security_code_verified_at, c.pq_support, c.pq_encryption, c.pq_snd_enabled, c.pq_rcv_enabled, c.auth_err_counter, c.quota_err_counter, @@ -399,7 +402,7 @@ createPreparedContact db cxt user p connLinkToConnect welcomeSharedMsgId = do currentTs <- liftIO getCurrentTime let prepared = Just (connLinkToConnect, welcomeSharedMsgId) ctUserPreferences = newContactUserPrefs user p - contactId <- createContact_ db user p ctUserPreferences prepared "" currentTs + contactId <- createContact_ db cxt user p ctUserPreferences prepared "" currentTs getContact db cxt user contactId updatePreparedContactUser :: DB.Connection -> StoreCxt -> User -> Contact -> User -> ExceptT StoreError IO Contact @@ -444,7 +447,7 @@ createDirectContact :: DB.Connection -> StoreCxt -> User -> Connection -> Profil createDirectContact db cxt user Connection {connId, localAlias} p = do currentTs <- liftIO getCurrentTime let ctUserPreferences = newContactUserPrefs user p - contactId <- createContact_ db user p ctUserPreferences Nothing localAlias currentTs + contactId <- createContact_ db cxt user p ctUserPreferences Nothing localAlias currentTs liftIO $ DB.execute db "UPDATE connections SET contact_id = ?, updated_at = ? WHERE connection_id = ?" (contactId, currentTs, connId) getContact db cxt user contactId @@ -552,22 +555,25 @@ deleteUnusedProfile_ db userId profileId = :. (userId, profileId, userId, profileId, profileId) ) -updateContactProfile :: DB.Connection -> User -> Contact -> Profile -> ExceptT StoreError IO Contact -updateContactProfile db user@User {userId} c p' - | displayName == newName = do - liftIO $ updateContactProfile_ db userId profileId p' - pure c {profile, mergedPreferences} - | otherwise = - ExceptT . withLocalDisplayName db userId newName $ \ldn -> do - currentTs <- getCurrentTime - updateContactProfile_' db userId profileId p' currentTs - updateContactLDN_ db user contactId localDisplayName ldn currentTs - pure $ Right c {localDisplayName = ldn, profile, mergedPreferences} +updateContactProfile :: DB.Connection -> StoreCxt -> User -> Contact -> Profile -> ExceptT StoreError IO Contact +updateContactProfile db cxt user@User {userId} c p' = do + currentTs <- liftIO getCurrentTime + badgeVerified <- liftIO $ profileBadgeVerified (badgeKeys cxt) lp p' + let profile = toLocalProfile profileId p' localAlias currentTs badgeVerified + updateContactProfile' currentTs badgeVerified profile where - Contact {contactId, localDisplayName, profile = LocalProfile {profileId, displayName, localAlias}, userPreferences} = c + Contact {contactId, localDisplayName, profile = lp@LocalProfile {profileId, displayName, localAlias}, userPreferences} = c Profile {displayName = newName, preferences} = p' - profile = toLocalProfile profileId p' localAlias mergedPreferences = contactUserPreferences user userPreferences preferences $ contactConnIncognito c + updateContactProfile' currentTs badgeVerified profile + | displayName == newName = do + liftIO $ updateContactProfile_' db userId profileId p' badgeVerified currentTs + pure c {profile, mergedPreferences} + | otherwise = + ExceptT . withLocalDisplayName db userId newName $ \ldn -> do + updateContactProfile_' db userId profileId p' badgeVerified currentTs + updateContactLDN_ db user contactId localDisplayName ldn currentTs + pure $ Right c {localDisplayName = ldn, profile, mergedPreferences} updateContactUserPreferences :: DB.Connection -> User -> Contact -> Preferences -> IO Contact updateContactUserPreferences db user@User {userId} c@Contact {contactId} userPreferences = do @@ -694,55 +700,58 @@ setQuotaErrCounter db User {userId} Connection {connId} counter = do updatedAt <- getCurrentTime DB.execute db "UPDATE connections SET quota_err_counter = ?, updated_at = ? WHERE user_id = ? AND connection_id = ?" (counter, updatedAt, userId, connId) -updateContactProfile_ :: DB.Connection -> UserId -> ProfileId -> Profile -> IO () -updateContactProfile_ db userId profileId profile = do +updateContactProfile_ :: DB.Connection -> UserId -> ProfileId -> Profile -> Maybe Bool -> IO () +updateContactProfile_ db userId profileId profile badgeVerified = do currentTs <- getCurrentTime - updateContactProfile_' db userId profileId profile currentTs + updateContactProfile_' db userId profileId profile badgeVerified currentTs -updateContactProfile_' :: DB.Connection -> UserId -> ProfileId -> Profile -> UTCTime -> IO () -updateContactProfile_' db userId profileId Profile {displayName, fullName, shortDescr, image, contactLink, preferences, peerType} updatedAt = do +updateContactProfile_' :: DB.Connection -> UserId -> ProfileId -> Profile -> Maybe Bool -> UTCTime -> IO () +updateContactProfile_' db userId profileId Profile {displayName, fullName, shortDescr, image, contactLink, preferences, peerType, badge} badgeVerified updatedAt = DB.execute db [sql| UPDATE contact_profiles - SET display_name = ?, full_name = ?, short_descr = ?, image = ?, contact_link = ?, preferences = ?, chat_peer_type = ?, updated_at = ? + SET display_name = ?, full_name = ?, short_descr = ?, image = ?, contact_link = ?, preferences = ?, chat_peer_type = ?, updated_at = ?, + badge_proof = ?, badge_pres_header = ?, badge_expiry = ?, badge_type = ?, badge_verified = ?, badge_extra = ?, badge_master_key = ?, badge_signature = ?, badge_key_idx = ? WHERE user_id = ? AND contact_profile_id = ? |] - (displayName, fullName, shortDescr, image, contactLink, preferences, peerType, updatedAt, userId, profileId) + ((displayName, fullName, shortDescr, image, contactLink, preferences, peerType, updatedAt) :. badgeToRow badge badgeVerified :. (userId, profileId)) -- update only member profile fields (when member doesn't have associated contact - we can reset contactLink and prefs) -updateMemberContactProfileReset_ :: DB.Connection -> UserId -> ProfileId -> Profile -> IO () -updateMemberContactProfileReset_ db userId profileId profile = do +updateMemberContactProfileReset_ :: DB.Connection -> UserId -> ProfileId -> Profile -> Maybe Bool -> IO () +updateMemberContactProfileReset_ db userId profileId profile badgeVerified = do currentTs <- getCurrentTime - updateMemberContactProfileReset_' db userId profileId profile currentTs + updateMemberContactProfileReset_' db userId profileId profile badgeVerified currentTs -updateMemberContactProfileReset_' :: DB.Connection -> UserId -> ProfileId -> Profile -> UTCTime -> IO () -updateMemberContactProfileReset_' db userId profileId Profile {displayName, fullName, shortDescr, image} updatedAt = do +updateMemberContactProfileReset_' :: DB.Connection -> UserId -> ProfileId -> Profile -> Maybe Bool -> UTCTime -> IO () +updateMemberContactProfileReset_' db userId profileId Profile {displayName, fullName, shortDescr, image, badge} badgeVerified updatedAt = DB.execute db [sql| UPDATE contact_profiles - SET display_name = ?, full_name = ?, short_descr = ?, image = ?, contact_link = NULL, preferences = NULL, updated_at = ? + SET display_name = ?, full_name = ?, short_descr = ?, image = ?, contact_link = NULL, preferences = NULL, updated_at = ?, + badge_proof = ?, badge_pres_header = ?, badge_expiry = ?, badge_type = ?, badge_verified = ?, badge_extra = ?, badge_master_key = ?, badge_signature = ?, badge_key_idx = ? WHERE user_id = ? AND contact_profile_id = ? |] - (displayName, fullName, shortDescr, image, updatedAt, userId, profileId) + ((displayName, fullName, shortDescr, image, updatedAt) :. badgeToRow badge badgeVerified :. (userId, profileId)) -- update only member profile fields (when member has associated contact - we keep contactLink and prefs) -updateMemberContactProfile_ :: DB.Connection -> UserId -> ProfileId -> Profile -> IO () -updateMemberContactProfile_ db userId profileId profile = do +updateMemberContactProfile_ :: DB.Connection -> UserId -> ProfileId -> Profile -> Maybe Bool -> IO () +updateMemberContactProfile_ db userId profileId profile badgeVerified = do currentTs <- getCurrentTime - updateMemberContactProfile_' db userId profileId profile currentTs + updateMemberContactProfile_' db userId profileId profile badgeVerified currentTs -updateMemberContactProfile_' :: DB.Connection -> UserId -> ProfileId -> Profile -> UTCTime -> IO () -updateMemberContactProfile_' db userId profileId Profile {displayName, fullName, shortDescr, image} updatedAt = do +updateMemberContactProfile_' :: DB.Connection -> UserId -> ProfileId -> Profile -> Maybe Bool -> UTCTime -> IO () +updateMemberContactProfile_' db userId profileId Profile {displayName, fullName, shortDescr, image, badge} badgeVerified updatedAt = DB.execute db [sql| UPDATE contact_profiles - SET display_name = ?, full_name = ?, short_descr = ?, image = ?, updated_at = ? + SET display_name = ?, full_name = ?, short_descr = ?, image = ?, updated_at = ?, + badge_proof = ?, badge_pres_header = ?, badge_expiry = ?, badge_type = ?, badge_verified = ?, badge_extra = ?, badge_master_key = ?, badge_signature = ?, badge_key_idx = ? WHERE user_id = ? AND contact_profile_id = ? |] - (displayName, fullName, shortDescr, image, updatedAt, userId, profileId) + ((displayName, fullName, shortDescr, image, updatedAt) :. badgeToRow badge badgeVerified :. (userId, profileId)) updateContactLDN_ :: DB.Connection -> User -> Int64 -> ContactName -> ContactName -> UTCTime -> IO () updateContactLDN_ db user@User {userId} contactId displayName newName updatedAt = do @@ -773,18 +782,21 @@ getUserContactLinkIdByCReq db contactRequestId = DB.query db "SELECT user_contact_link_id FROM contact_requests WHERE contact_request_id = ?" (Only contactRequestId) getContactRequest :: DB.Connection -> User -> Int64 -> ExceptT StoreError IO UserContactRequest -getContactRequest db User {userId} contactRequestId = - ExceptT . firstRow toContactRequest (SEContactRequestNotFound contactRequestId) $ +getContactRequest db User {userId} contactRequestId = do + currentTs <- liftIO getCurrentTime + ExceptT . firstRow (toContactRequest currentTs) (SEContactRequestNotFound contactRequestId) $ DB.query db (contactRequestQuery <> " WHERE cr.user_id = ? AND cr.contact_request_id = ?") (userId, contactRequestId) getContactRequest' :: DB.Connection -> User -> Int64 -> IO (Maybe UserContactRequest) -getContactRequest' db User {userId} contactRequestId = - maybeFirstRow toContactRequest $ +getContactRequest' db User {userId} contactRequestId = do + currentTs <- getCurrentTime + maybeFirstRow (toContactRequest currentTs) $ DB.query db (contactRequestQuery <> " WHERE cr.user_id = ? AND cr.contact_request_id = ?") (userId, contactRequestId) getBusinessContactRequest :: DB.Connection -> User -> GroupId -> IO (Maybe UserContactRequest) -getBusinessContactRequest db _user groupId = - maybeFirstRow toContactRequest $ +getBusinessContactRequest db _user groupId = do + currentTs <- getCurrentTime + maybeFirstRow (toContactRequest currentTs) $ DB.query db (contactRequestQuery <> " WHERE cr.business_group_id = ?") (Only groupId) contactRequestQuery :: Query @@ -793,10 +805,11 @@ contactRequestQuery = SELECT cr.contact_request_id, cr.local_display_name, cr.agent_invitation_id, cr.contact_id, cr.business_group_id, cr.user_contact_link_id, - cr.contact_profile_id, p.display_name, p.full_name, p.short_descr, p.image, p.contact_link, p.chat_peer_type, cr.xcontact_id, + cr.contact_profile_id, p.display_name, p.full_name, p.short_descr, p.image, p.contact_link, p.chat_peer_type, p.local_alias, cr.xcontact_id, cr.pq_support, cr.welcome_shared_msg_id, cr.request_shared_msg_id, p.preferences, cr.created_at, cr.updated_at, - cr.peer_chat_min_version, cr.peer_chat_max_version + cr.peer_chat_min_version, cr.peer_chat_max_version, + p.badge_proof, p.badge_pres_header, p.badge_expiry, p.badge_type, p.badge_verified, p.badge_extra, p.badge_master_key, p.badge_signature, p.badge_key_idx FROM contact_requests cr JOIN contact_profiles p USING (contact_profile_id) |] @@ -832,7 +845,7 @@ deleteContactRequest db User {userId} contactRequestId = do (userId, userId, contactRequestId, userId) DB.execute db "DELETE FROM contact_requests WHERE user_id = ? AND contact_request_id = ?" (userId, contactRequestId) -createContactFromRequest :: DB.Connection -> User -> Maybe Int64 -> ConnId -> VersionChat -> VersionRangeChat -> ContactName -> ProfileId -> Profile -> Maybe XContactId -> Maybe IncognitoProfile -> SubscriptionMode -> PQSupport -> Bool -> IO (Contact, Connection) +createContactFromRequest :: DB.Connection -> User -> Maybe Int64 -> ConnId -> VersionChat -> VersionRangeChat -> ContactName -> ProfileId -> LocalProfile -> Maybe XContactId -> Maybe IncognitoProfile -> SubscriptionMode -> PQSupport -> Bool -> IO (Contact, Connection) createContactFromRequest db user@User {userId, profile = LocalProfile {preferences}} uclId_ agentConnId connChatVersion cReqChatVRange localDisplayName profileId profile xContactId incognitoProfile subMode pqSup contactUsed = do currentTs <- getCurrentTime let userPreferences = fromMaybe emptyChatPrefs $ incognitoProfile >> preferences @@ -848,7 +861,7 @@ createContactFromRequest db user@User {userId, profile = LocalProfile {preferenc Contact { contactId, localDisplayName, - profile = toLocalProfile profileId profile "", + profile, activeConn = Just conn, contactUsed, contactStatus = CSActive, @@ -904,8 +917,9 @@ getContact db cxt user contactId = getContact_ db cxt user contactId False getContact_ :: DB.Connection -> StoreCxt -> User -> Int64 -> Bool -> ExceptT StoreError IO Contact getContact_ db cxt user@User {userId} contactId deleted = do + currentTs <- liftIO getCurrentTime chatTags <- liftIO $ getDirectChatTags db contactId - ExceptT . firstRow (toContact cxt user chatTags) (SEContactNotFound contactId) $ + ExceptT . firstRow (toContact currentTs cxt user chatTags) (SEContactNotFound contactId) $ DB.query db [sql| @@ -915,6 +929,7 @@ getContact_ db cxt user@User {userId} contactId deleted = do cp.preferences, ct.user_preferences, ct.created_at, ct.updated_at, ct.chat_ts, ct.conn_full_link_to_connect, ct.conn_short_link_to_connect, ct.welcome_shared_msg_id, ct.request_shared_msg_id, ct.contact_request_id, ct.contact_group_member_id, ct.contact_grp_inv_sent, ct.grp_direct_inv_link, ct.grp_direct_inv_from_group_id, ct.grp_direct_inv_from_group_member_id, ct.grp_direct_inv_from_member_conn_id, ct.grp_direct_inv_started_connection, ct.ui_themes, ct.chat_deleted, ct.custom_data, ct.chat_item_ttl, + cp.badge_proof, cp.badge_pres_header, cp.badge_expiry, cp.badge_type, cp.badge_verified, cp.badge_extra, cp.badge_master_key, cp.badge_signature, cp.badge_key_idx, -- Connection c.connection_id, c.agent_conn_id, c.conn_level, c.via_contact, c.via_user_contact_link, c.via_group_link, c.group_link_id, c.xcontact_id, c.custom_user_profile_id, c.conn_status, c.conn_type, c.contact_conn_initiated, c.local_alias, c.contact_id, c.group_member_id, c.user_contact_link_id, c.created_at, c.security_code, c.security_code_verified_at, c.pq_support, c.pq_encryption, c.pq_snd_enabled, c.pq_rcv_enabled, c.auth_err_counter, c.quota_err_counter, @@ -928,8 +943,9 @@ getContact_ db cxt user@User {userId} contactId deleted = do (userId, contactId, BI deleted) getUserByContactRequestId :: DB.Connection -> Int64 -> ExceptT StoreError IO User -getUserByContactRequestId db contactRequestId = - ExceptT . firstRow toUser (SEUserNotFoundByContactRequestId contactRequestId) $ +getUserByContactRequestId db contactRequestId = do + now <- liftIO getCurrentTime + ExceptT . firstRow (toUser now) (SEUserNotFoundByContactRequestId contactRequestId) $ DB.query db (userQuery <> " JOIN contact_requests cr ON cr.user_id = u.user_id WHERE cr.contact_request_id = ?") (Only contactRequestId) getContactConnections :: DB.Connection -> StoreCxt -> UserId -> Contact -> IO [Connection] diff --git a/src/Simplex/Chat/Store/Groups.hs b/src/Simplex/Chat/Store/Groups.hs index 4e38ef83e2..c6b5684945 100644 --- a/src/Simplex/Chat/Store/Groups.hs +++ b/src/Simplex/Chat/Store/Groups.hs @@ -196,6 +196,7 @@ import Data.Text (Text) import qualified Data.Text as T import Data.Time.Clock (NominalDiffTime, UTCTime (..), addUTCTime, getCurrentTime) import Data.Text.Encoding (encodeUtf8) +import Simplex.Chat.Badges (BadgeRow, badgeToRow, verifyBadge_) import Simplex.Chat.Messages import Simplex.Chat.Operators import Simplex.Chat.Protocol hiding (Binary) @@ -225,12 +226,12 @@ import Database.SQLite.Simple (Only (..), Query, (:.) (..)) import Database.SQLite.Simple.QQ (sql) #endif -type MaybeGroupMemberRow = (Maybe GroupMemberId, Maybe GroupId, Maybe Int64, Maybe MemberId, Maybe VersionChat, Maybe VersionChat, Maybe GroupMemberRole, Maybe GroupMemberCategory, Maybe GroupMemberStatus, Maybe BoolInt, Maybe MemberRestrictionStatus) :. (Maybe Int64, Maybe GroupMemberId, Maybe ContactName, Maybe ContactId, Maybe ProfileId) :. (Maybe ProfileId, Maybe ContactName, Maybe Text, Maybe Text, Maybe ImageData, Maybe ConnLinkContact, Maybe ChatPeerType, Maybe LocalAlias, Maybe Preferences) :. (Maybe UTCTime, Maybe UTCTime) :. (Maybe UTCTime, Maybe Int64, Maybe Int64, Maybe Int64, Maybe UTCTime, Maybe C.PublicKeyEd25519, Maybe ShortLinkContact) +type MaybeGroupMemberRow = (Maybe GroupMemberId, Maybe GroupId, Maybe Int64, Maybe MemberId, Maybe VersionChat, Maybe VersionChat, Maybe GroupMemberRole, Maybe GroupMemberCategory, Maybe GroupMemberStatus, Maybe BoolInt, Maybe MemberRestrictionStatus) :. (Maybe Int64, Maybe GroupMemberId, Maybe ContactName, Maybe ContactId, Maybe ProfileId) :. ((Maybe ProfileId, Maybe ContactName, Maybe Text, Maybe Text, Maybe ImageData, Maybe ConnLinkContact, Maybe ChatPeerType, Maybe LocalAlias, Maybe Preferences) :. BadgeRow) :. (Maybe UTCTime, Maybe UTCTime) :. (Maybe UTCTime, Maybe Int64, Maybe Int64, Maybe Int64, Maybe UTCTime, Maybe C.PublicKeyEd25519, Maybe ShortLinkContact) -toMaybeGroupMember :: Int64 -> MaybeGroupMemberRow -> Maybe GroupMember -toMaybeGroupMember userContactId ((Just groupMemberId, Just groupId, Just indexInGroup, Just memberId, Just minVer, Just maxVer, Just memberRole, Just memberCategory, Just memberStatus, Just showMessages, memberBlocked') :. (invitedById, invitedByGroupMemberId, Just localDisplayName, memberContactId, Just memberContactProfileId) :. (Just profileId, Just displayName, Just fullName, shortDescr, image, contactLink, peerType, Just localAlias, contactPreferences) :. (Just createdAt, Just updatedAt) :. (supportChatTs, Just supportChatUnread, Just supportChatUnanswered, Just supportChatMentions, supportChatLastMsgFromMemberTs, memberPubKey, relayLink)) = - Just $ toGroupMember userContactId ((groupMemberId, groupId, indexInGroup, memberId, minVer, maxVer, memberRole, memberCategory, memberStatus, showMessages, memberBlocked') :. (invitedById, invitedByGroupMemberId, localDisplayName, memberContactId, memberContactProfileId) :. (profileId, displayName, fullName, shortDescr, image, contactLink, peerType, localAlias, contactPreferences) :. (createdAt, updatedAt) :. (supportChatTs, supportChatUnread, supportChatUnanswered, supportChatMentions, supportChatLastMsgFromMemberTs, memberPubKey, relayLink)) -toMaybeGroupMember _ _ = Nothing +toMaybeGroupMember :: UTCTime -> Int64 -> MaybeGroupMemberRow -> Maybe GroupMember +toMaybeGroupMember now userContactId ((Just groupMemberId, Just groupId, Just indexInGroup, Just memberId, Just minVer, Just maxVer, Just memberRole, Just memberCategory, Just memberStatus, Just showMessages, memberBlocked') :. (invitedById, invitedByGroupMemberId, Just localDisplayName, memberContactId, Just memberContactProfileId) :. ((Just profileId, Just displayName, Just fullName, shortDescr, image, contactLink, peerType, Just localAlias, contactPreferences) :. badgeRow) :. (Just createdAt, Just updatedAt) :. (supportChatTs, Just supportChatUnread, Just supportChatUnanswered, Just supportChatMentions, supportChatLastMsgFromMemberTs, memberPubKey, relayLink)) = + Just $ toGroupMember now userContactId ((groupMemberId, groupId, indexInGroup, memberId, minVer, maxVer, memberRole, memberCategory, memberStatus, showMessages, memberBlocked') :. (invitedById, invitedByGroupMemberId, localDisplayName, memberContactId, memberContactProfileId) :. ((profileId, displayName, fullName, shortDescr, image, contactLink, peerType, localAlias, contactPreferences) :. badgeRow) :. (createdAt, updatedAt) :. (supportChatTs, supportChatUnread, supportChatUnanswered, supportChatMentions, supportChatLastMsgFromMemberTs, memberPubKey, relayLink)) +toMaybeGroupMember _ _ _ = Nothing createGroupLink :: DB.Connection -> TVar ChaChaDRG -> User -> GroupInfo -> ConnId -> CreatedLinkContact -> GroupLinkId -> GroupMemberRole -> SubscriptionMode -> ExceptT StoreError IO GroupLink createGroupLink db gVar user@User {userId} groupInfo@GroupInfo {groupId, localDisplayName} agentConnId (CCLink cReq shortLink) groupLinkId memberRole subMode = do @@ -634,7 +635,7 @@ createPreparedGroup db gVar cxt user@User {userId, userContactId} groupProfile b randHostId <- liftIO $ encodedRandomBytes gVar 12 let memberId = MemberId $ encodeUtf8 groupLDN <> "_unknown_host_" <> randHostId hostProfile = profileFromName $ nameFromBS randHostId - (localDisplayName, profileId) <- createNewMemberProfile_ db user hostProfile currentTs + (localDisplayName, profileId, _) <- createNewMemberProfile_ db cxt user hostProfile currentTs indexInGroup <- getUpdateNextIndexInGroup_ db groupId liftIO $ do DB.execute @@ -789,7 +790,7 @@ updatePreparedUserAndHostMembers' |] (memberId, memberRole, membershipStatus, currentTs, groupMemberId' membership) updateHostMember currentTs = do - _ <- updateMemberProfile db user hostMember fromMemberProfile + _ <- updateMemberProfile db cxt user hostMember fromMemberProfile let MemberIdRole memberId memberRole = fromMember gmId = groupMemberId' hostMember liftIO $ @@ -839,7 +840,7 @@ createGroupViaLink' (,) <$> getGroupInfo db cxt user groupId <*> getGroupMemberById db cxt user hostMemberId where insertHost_ currentTs groupId = do - (localDisplayName, profileId) <- createNewMemberProfile_ db user fromMemberProfile currentTs + (localDisplayName, profileId, _) <- createNewMemberProfile_ db cxt user fromMemberProfile currentTs let MemberIdRole {memberId, memberRole} = fromMember indexInGroup <- getUpdateNextIndexInGroup_ db groupId liftIO $ do @@ -1005,7 +1006,8 @@ getInProgressGroups db cxt user@User {userId} createdAtCutoff = do getBaseGroupDetails :: DB.Connection -> StoreCxt -> User -> Maybe ContactId -> Maybe Text -> IO [GroupInfo] getBaseGroupDetails db cxt User {userId, userContactId} _contactId_ search_ = do - map (toGroupInfo cxt userContactId []) + currentTs <- getCurrentTime + map (toGroupInfo currentTs cxt userContactId []) <$> DB.query db (groupInfoQuery <> " " <> condition) (userId, userContactId, search, search, search, search) where condition = @@ -1039,16 +1041,18 @@ getGroupInfoByName db cxt user gName = do getGroupInfo db cxt user gId getGroupMember :: DB.Connection -> StoreCxt -> User -> GroupId -> GroupMemberId -> ExceptT StoreError IO GroupMember -getGroupMember db cxt user@User {userId} groupId groupMemberId = - ExceptT . firstRow (toContactMember cxt user) (SEGroupMemberNotFound groupMemberId) $ +getGroupMember db cxt user@User {userId} groupId groupMemberId = do + currentTs <- liftIO getCurrentTime + ExceptT . firstRow (toContactMember currentTs cxt user) (SEGroupMemberNotFound groupMemberId) $ DB.query db (groupMemberQuery <> " WHERE m.group_id = ? AND m.group_member_id = ? AND m.user_id = ?") (groupId, groupMemberId, userId) getHostMember :: DB.Connection -> StoreCxt -> User -> GroupId -> ExceptT StoreError IO GroupMember -getHostMember db cxt user groupId = - ExceptT . firstRow (toContactMember cxt user) (SEGroupHostMemberNotFound groupId) $ +getHostMember db cxt user groupId = do + currentTs <- liftIO getCurrentTime + ExceptT . firstRow (toContactMember currentTs cxt user) (SEGroupHostMemberNotFound groupId) $ DB.query db (groupMemberQuery <> " WHERE m.group_id = ? AND m.member_category = ?") @@ -1088,32 +1092,36 @@ toMentionedMember (groupMemberId, memberId, memberRole, displayName, localAlias) in CIMention {memberId, memberRef} getGroupMemberById :: DB.Connection -> StoreCxt -> User -> GroupMemberId -> ExceptT StoreError IO GroupMember -getGroupMemberById db cxt user@User {userId} groupMemberId = - ExceptT . firstRow (toContactMember cxt user) (SEGroupMemberNotFound groupMemberId) $ +getGroupMemberById db cxt user@User {userId} groupMemberId = do + currentTs <- liftIO getCurrentTime + ExceptT . firstRow (toContactMember currentTs cxt user) (SEGroupMemberNotFound groupMemberId) $ DB.query db (groupMemberQuery <> " WHERE m.group_member_id = ? AND m.user_id = ?") (groupMemberId, userId) getGroupMemberByIndex :: DB.Connection -> StoreCxt -> User -> GroupInfo -> Int64 -> ExceptT StoreError IO GroupMember -getGroupMemberByIndex db cxt user GroupInfo {groupId} indexInGroup = - ExceptT . firstRow (toContactMember cxt user) (SEGroupMemberNotFoundByIndex indexInGroup) $ +getGroupMemberByIndex db cxt user GroupInfo {groupId} indexInGroup = do + currentTs <- liftIO getCurrentTime + ExceptT . firstRow (toContactMember currentTs cxt user) (SEGroupMemberNotFoundByIndex indexInGroup) $ DB.query db (groupMemberQuery <> " WHERE m.group_id = ? AND m.index_in_group = ?") (groupId, indexInGroup) getSupportScopeMemberByIndex :: DB.Connection -> StoreCxt -> User -> GroupInfo -> GroupMemberId -> Int64 -> ExceptT StoreError IO GroupMember -getSupportScopeMemberByIndex db cxt user GroupInfo {groupId} scopeGMId indexInGroup = - ExceptT . firstRow (toContactMember cxt user) (SEGroupMemberNotFoundByIndex indexInGroup) $ +getSupportScopeMemberByIndex db cxt user GroupInfo {groupId} scopeGMId indexInGroup = do + currentTs <- liftIO getCurrentTime + ExceptT . firstRow (toContactMember currentTs cxt user) (SEGroupMemberNotFoundByIndex indexInGroup) $ DB.query db (groupMemberQuery <> " WHERE m.group_id = ? AND m.index_in_group = ? AND (m.member_role IN (?,?,?) OR m.group_member_id = ?)") (groupId, indexInGroup, GRModerator, GRAdmin, GROwner, scopeGMId) getGroupMemberByMemberId :: DB.Connection -> StoreCxt -> User -> GroupInfo -> MemberId -> ExceptT StoreError IO GroupMember -getGroupMemberByMemberId db cxt user GroupInfo {groupId} memberId = - ExceptT . firstRow (toContactMember cxt user) (SEGroupMemberNotFoundByMemberId memberId) $ +getGroupMemberByMemberId db cxt user GroupInfo {groupId} memberId = do + currentTs <- liftIO getCurrentTime + ExceptT . firstRow (toContactMember currentTs cxt user) (SEGroupMemberNotFoundByMemberId memberId) $ DB.query db (groupMemberQuery <> " WHERE m.group_id = ? AND m.member_id = ?") @@ -1146,8 +1154,9 @@ getGroupMemberIdViaMemberId db User {userId} GroupInfo {groupId} memberId = (userId, groupId, memberId) getGroupMembers :: DB.Connection -> StoreCxt -> User -> GroupInfo -> IO [GroupMember] -getGroupMembers db cxt user@User {userId, userContactId} GroupInfo {groupId} = - map (toContactMember cxt user) +getGroupMembers db cxt user@User {userId, userContactId} GroupInfo {groupId} = do + currentTs <- getCurrentTime + map (toContactMember currentTs cxt user) <$> DB.query db (groupMemberQuery <> " WHERE m.user_id = ? AND m.group_id = ? AND (m.contact_id IS NULL OR m.contact_id != ?)") @@ -1156,8 +1165,9 @@ getGroupMembers db cxt user@User {userId, userContactId} GroupInfo {groupId} = getGroupMembersByIndexes :: DB.Connection -> StoreCxt -> User -> GroupInfo -> [Int64] -> IO [GroupMember] getGroupMembersByIndexes db cxt user gInfo indexesInGroup = do #if defined(dbPostgres) + currentTs <- getCurrentTime let GroupInfo {groupId} = gInfo - map (toContactMember cxt user) <$> + map (toContactMember currentTs cxt user) <$> DB.query db (groupMemberQuery <> " WHERE m.group_id = ? AND m.index_in_group IN ?") @@ -1169,8 +1179,9 @@ getGroupMembersByIndexes db cxt user gInfo indexesInGroup = do getSupportScopeMembersByIndexes :: DB.Connection -> StoreCxt -> User -> GroupInfo -> GroupMemberId -> [Int64] -> IO [GroupMember] getSupportScopeMembersByIndexes db cxt user gInfo scopeGMId indexesInGroup = do #if defined(dbPostgres) + currentTs <- getCurrentTime let GroupInfo {groupId} = gInfo - map (toContactMember cxt user) <$> + map (toContactMember currentTs cxt user) <$> DB.query db (groupMemberQuery <> " WHERE m.group_id = ? AND m.index_in_group IN ? AND (m.member_role IN (?,?,?) OR m.group_member_id = ?)") @@ -1181,7 +1192,8 @@ getSupportScopeMembersByIndexes db cxt user gInfo scopeGMId indexesInGroup = do getGroupModerators :: DB.Connection -> StoreCxt -> User -> GroupInfo -> IO [GroupMember] getGroupModerators db cxt user@User {userId, userContactId} GroupInfo {groupId} = do - map (toContactMember cxt user) + currentTs <- getCurrentTime + map (toContactMember currentTs cxt user) <$> DB.query db (groupMemberQuery <> " WHERE m.user_id = ? AND m.group_id = ? AND (m.contact_id IS NULL OR m.contact_id != ?) AND m.member_role IN (?,?,?)") @@ -1189,7 +1201,8 @@ getGroupModerators db cxt user@User {userId, userContactId} GroupInfo {groupId} getGroupRelayMembers :: DB.Connection -> StoreCxt -> User -> GroupInfo -> IO [GroupMember] getGroupRelayMembers db cxt user@User {userId, userContactId} GroupInfo {groupId} = do - map (toContactMember cxt user) + currentTs <- getCurrentTime + map (toContactMember currentTs cxt user) <$> DB.query db (groupMemberQuery <> " WHERE m.user_id = ? AND m.group_id = ? AND m.contact_id IS DISTINCT FROM ? AND m.member_role = ?") @@ -1197,7 +1210,8 @@ getGroupRelayMembers db cxt user@User {userId, userContactId} GroupInfo {groupId getGroupMembersForExpiration :: DB.Connection -> StoreCxt -> User -> GroupInfo -> IO [GroupMember] getGroupMembersForExpiration db cxt user@User {userId, userContactId} GroupInfo {groupId} = do - map (toContactMember cxt user) + currentTs <- getCurrentTime + map (toContactMember currentTs cxt user) <$> DB.query db ( groupMemberQuery @@ -1361,7 +1375,7 @@ createRelayForOwner :: DB.Connection -> StoreCxt -> TVar ChaChaDRG -> User -> Gr createRelayForOwner db cxt gVar user@User {userId, userContactId} GroupInfo {groupId, membership} UserChatRelay {relayProfile = RelayProfile {displayName}} = do currentTs <- liftIO getCurrentTime let relayProfile = profileFromName displayName - (localDisplayName, memProfileId) <- createNewMemberProfile_ db user relayProfile currentTs + (localDisplayName, memProfileId, _) <- createNewMemberProfile_ db cxt user relayProfile currentTs groupMemberId <- createWithRandomId' db gVar $ \memId -> runExceptT $ do indexInGroup <- getUpdateNextIndexInGroup_ db groupId liftIO $ @@ -1380,11 +1394,12 @@ createRelayForOwner db cxt gVar user@User {userId, userContactId} GroupInfo {gro getGroupMemberById db cxt user groupMemberId getCreateRelayForMember :: DB.Connection -> StoreCxt -> TVar ChaChaDRG -> User -> GroupInfo -> ShortLinkContact -> ExceptT StoreError IO GroupMember -getCreateRelayForMember db cxt gVar user@User {userId, userContactId} GroupInfo {groupId, localDisplayName = groupLDN} relayLink = - liftIO getGroupMemberByRelayLink >>= maybe createRelayMember pure +getCreateRelayForMember db cxt gVar user@User {userId, userContactId} GroupInfo {groupId, localDisplayName = groupLDN} relayLink = do + currentTs <- liftIO getCurrentTime + liftIO (getGroupMemberByRelayLink currentTs) >>= maybe createRelayMember pure where - getGroupMemberByRelayLink = - maybeFirstRow (toContactMember cxt user) $ + getGroupMemberByRelayLink currentTs = + maybeFirstRow (toContactMember currentTs cxt user) $ DB.query db #if defined(dbPostgres) @@ -1399,7 +1414,7 @@ getCreateRelayForMember db cxt gVar user@User {userId, userContactId} GroupInfo randRelayId <- liftIO $ encodedRandomBytes gVar 12 let memberId = MemberId $ encodeUtf8 groupLDN <> "_unknown_relay_" <> randRelayId relayProfile = profileFromName $ nameFromBS randRelayId - (localDisplayName, profileId) <- createNewMemberProfile_ db user relayProfile currentTs + (localDisplayName, profileId, _) <- createNewMemberProfile_ db cxt user relayProfile currentTs indexInGroup <- getUpdateNextIndexInGroup_ db groupId groupMemberId <- liftIO $ do DB.execute @@ -1472,7 +1487,7 @@ setRelayLinkAccepted db cxt user m (MemberKey relayKey) profile = do WHERE group_member_id = ? |] (relayKey, currentTs, gmId) - void $ updateMemberProfile db user m profile + void $ updateMemberProfile db cxt user m profile (,) <$> getGroupMemberById db cxt user gmId <*> getGroupRelayByGMId db gmId setRelayLinkConfId :: DB.Connection -> GroupMember -> ConfirmationId -> ShortLinkContact -> IO () @@ -1519,8 +1534,8 @@ getRelayConfId db m = |] (Only (groupMemberId' m)) -updateRelayMemberData :: DB.Connection -> User -> GroupMember -> MemberId -> MemberKey -> Profile -> ExceptT StoreError IO () -updateRelayMemberData db user m memberId (MemberKey relayKey) profile = do +updateRelayMemberData :: DB.Connection -> StoreCxt -> User -> GroupMember -> MemberId -> MemberKey -> Profile -> ExceptT StoreError IO () +updateRelayMemberData db cxt user m memberId (MemberKey relayKey) profile = do currentTs <- liftIO getCurrentTime liftIO $ DB.execute @@ -1531,7 +1546,7 @@ updateRelayMemberData db user m memberId (MemberKey relayKey) profile = do WHERE group_member_id = ? |] (memberId, relayKey, currentTs, groupMemberId' m) - void $ updateMemberProfile db user m profile + void $ updateMemberProfile db cxt user m profile setGroupInProgressDone :: DB.Connection -> GroupInfo -> IO () setGroupInProgressDone db GroupInfo {groupId} = do @@ -1584,7 +1599,7 @@ createRelayRequestGroup db cxt user@User {userId} GroupRelayInvitation {fromMemb insertOwner_ currentTs groupId = do let MemberIdRole {memberId, memberRole} = fromMember VersionRange minV maxV = reqChatVRange - (localDisplayName, profileId) <- createNewMemberProfile_ db user fromMemberProfile currentTs + (localDisplayName, profileId, _) <- createNewMemberProfile_ db cxt user fromMemberProfile currentTs indexInGroup <- getUpdateNextIndexInGroup_ db groupId liftIO $ do DB.execute @@ -1651,7 +1666,8 @@ isRelayGroupRejected db User {userId} groupLink = getRelayServedGroups :: DB.Connection -> StoreCxt -> User -> IO [GroupInfo] getRelayServedGroups db cxt User {userId, userContactId} = do - map (toGroupInfo cxt userContactId []) + currentTs <- getCurrentTime + map (toGroupInfo currentTs cxt userContactId []) <$> DB.query db ( groupInfoQuery @@ -1661,8 +1677,9 @@ getRelayServedGroups db cxt User {userId, userContactId} = do getRelayInactiveGroups :: DB.Connection -> StoreCxt -> User -> NominalDiffTime -> IO [GroupInfo] getRelayInactiveGroups db cxt User {userId, userContactId} ttl = do - cutoffTs <- addUTCTime (- ttl) <$> getCurrentTime - map (toGroupInfo cxt userContactId []) + currentTs <- getCurrentTime + let cutoffTs = addUTCTime (- ttl) currentTs + map (toGroupInfo currentTs cxt userContactId []) <$> DB.query db ( groupInfoQuery @@ -1697,14 +1714,15 @@ createNewContactMemberAsync db gVar user@User {userId, userContactId} GroupInfo :. (minV, maxV) ) -createJoiningMember :: DB.Connection -> TVar ChaChaDRG -> User -> GroupInfo -> VersionRangeChat -> Profile -> Maybe XContactId -> Maybe MemberId -> Maybe SharedMsgId -> GroupMemberRole -> GroupMemberStatus -> Maybe MemberKey -> ExceptT StoreError IO (GroupMemberId, MemberId) +createJoiningMember :: DB.Connection -> StoreCxt -> TVar ChaChaDRG -> User -> GroupInfo -> VersionRangeChat -> Profile -> Maybe XContactId -> Maybe MemberId -> Maybe SharedMsgId -> GroupMemberRole -> GroupMemberStatus -> Maybe MemberKey -> ExceptT StoreError IO (GroupMemberId, MemberId) createJoiningMember db + cxt gVar User {userId, userContactId} GroupInfo {groupId, membership} cReqChatVRange - Profile {displayName, fullName, shortDescr, image, contactLink, preferences} + Profile {displayName, fullName, shortDescr, image, contactLink, badge, preferences} cReqXContactId_ cReqMemberId_ welcomeMsgId_ @@ -1712,12 +1730,13 @@ createJoiningMember memberStatus memberKey_ = do currentTs <- liftIO getCurrentTime + badgeVerified <- liftIO $ verifyBadge_ (badgeKeys cxt) badge ExceptT . withLocalDisplayName db userId displayName $ \ldn -> runExceptT $ do liftIO $ DB.execute db - "INSERT INTO contact_profiles (display_name, full_name, short_descr, image, contact_link, user_id, preferences, created_at, updated_at) VALUES (?,?,?,?,?,?,?,?,?)" - (displayName, fullName, shortDescr, image, contactLink, userId, preferences, currentTs, currentTs) + "INSERT INTO contact_profiles (display_name, full_name, short_descr, image, contact_link, user_id, preferences, created_at, updated_at, badge_proof, badge_pres_header, badge_expiry, badge_type, badge_verified, badge_extra, badge_master_key, badge_signature, badge_key_idx) VALUES (?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?)" + ((displayName, fullName, shortDescr, image, contactLink, userId, preferences, currentTs, currentTs) :. badgeToRow badge badgeVerified) profileId <- liftIO $ insertedRowId db case cReqMemberId_ of Just memberId -> do @@ -2053,10 +2072,10 @@ increaseGroupMembersRequireAttention db User {userId} g@GroupInfo {groupId, memb pure g {membersRequireAttention = membersRequireAttention + 1} -- | add new member with profile -createNewGroupMember :: DB.Connection -> User -> GroupInfo -> GroupMember -> MemberInfo -> GroupMemberCategory -> GroupMemberStatus -> ExceptT StoreError IO GroupMember -createNewGroupMember db user gInfo invitingMember memInfo@MemberInfo {profile} memCategory memStatus = do +createNewGroupMember :: DB.Connection -> StoreCxt -> User -> GroupInfo -> GroupMember -> MemberInfo -> GroupMemberCategory -> GroupMemberStatus -> ExceptT StoreError IO GroupMember +createNewGroupMember db cxt user gInfo invitingMember memInfo@MemberInfo {profile} memCategory memStatus = do currentTs <- liftIO getCurrentTime - (localDisplayName, memProfileId) <- createNewMemberProfile_ db user profile currentTs + (localDisplayName, memProfileId, badgeVerified) <- createNewMemberProfile_ db cxt user profile currentTs let newMember = NewGroupMember { memInfo, @@ -2069,19 +2088,20 @@ createNewGroupMember db user gInfo invitingMember memInfo@MemberInfo {profile} m memContactId = Nothing, memProfileId } - createNewMember_ db user gInfo newMember currentTs + createNewMember_ db user gInfo newMember badgeVerified currentTs -createNewMemberProfile_ :: DB.Connection -> User -> Profile -> UTCTime -> ExceptT StoreError IO (Text, ProfileId) -createNewMemberProfile_ db User {userId} Profile {displayName, fullName, shortDescr, image, contactLink, preferences} createdAt = +createNewMemberProfile_ :: DB.Connection -> StoreCxt -> User -> Profile -> UTCTime -> ExceptT StoreError IO (Text, ProfileId, Maybe Bool) +createNewMemberProfile_ db cxt User {userId} Profile {displayName, fullName, shortDescr, image, contactLink, badge, preferences} createdAt = ExceptT . withLocalDisplayName db userId displayName $ \ldn -> do + badgeVerified <- verifyBadge_ (badgeKeys cxt) badge DB.execute db - "INSERT INTO contact_profiles (display_name, full_name, short_descr, image, contact_link, user_id, preferences, created_at, updated_at) VALUES (?,?,?,?,?,?,?,?,?)" - (displayName, fullName, shortDescr, image, contactLink, userId, preferences, createdAt, createdAt) + "INSERT INTO contact_profiles (display_name, full_name, short_descr, image, contact_link, user_id, preferences, created_at, updated_at, badge_proof, badge_pres_header, badge_expiry, badge_type, badge_verified, badge_extra, badge_master_key, badge_signature, badge_key_idx) VALUES (?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?)" + ((displayName, fullName, shortDescr, image, contactLink, userId, preferences, createdAt, createdAt) :. badgeToRow badge badgeVerified) profileId <- insertedRowId db - pure $ Right (ldn, profileId) + pure $ Right (ldn, profileId, badgeVerified) -createNewMember_ :: DB.Connection -> User -> GroupInfo -> NewGroupMember -> UTCTime -> ExceptT StoreError IO GroupMember +createNewMember_ :: DB.Connection -> User -> GroupInfo -> NewGroupMember -> Maybe Bool -> UTCTime -> ExceptT StoreError IO GroupMember createNewMember_ db User {userId, userContactId} @@ -2097,6 +2117,7 @@ createNewMember_ memContactId = memberContactId, memProfileId = memberContactProfileId } + badgeVerified createdAt = do let invitedById = fromInvitedBy userContactId invitedBy activeConn = Nothing @@ -2134,7 +2155,7 @@ createNewMember_ invitedBy, invitedByGroupMemberId = memInvitedByGroupMemberId, localDisplayName, - memberProfile = toLocalProfile memberContactProfileId memberProfile "", + memberProfile = toLocalProfile memberContactProfileId memberProfile "" createdAt badgeVerified, memberContactId, memberContactProfileId, activeConn, @@ -2248,18 +2269,19 @@ getMemberRelationsVector db GroupMember {groupMemberId} = "SELECT member_relations_vector FROM group_members WHERE group_member_id = ?" (Only groupMemberId) -createIntroReMember :: DB.Connection -> User -> GroupInfo -> MemberInfo -> Maybe MemberRestrictions -> ExceptT StoreError IO GroupMember +createIntroReMember :: DB.Connection -> StoreCxt -> User -> GroupInfo -> MemberInfo -> Maybe MemberRestrictions -> ExceptT StoreError IO GroupMember createIntroReMember db + cxt user gInfo memInfo@(MemberInfo _ _ _ memberProfile _) memRestrictions_ = do currentTs <- liftIO getCurrentTime - (localDisplayName, memProfileId) <- createNewMemberProfile_ db user memberProfile currentTs + (localDisplayName, memProfileId, badgeVerified) <- createNewMemberProfile_ db cxt user memberProfile currentTs let memRestriction = restriction <$> memRestrictions_ newMember = NewGroupMember {memInfo, memCategory = GCPreMember, memStatus = GSMemIntroduced, memRestriction, memInvitedBy = IBUnknown, memInvitedByGroupMemberId = Nothing, localDisplayName, memContactId = Nothing, memProfileId} - createNewMember_ db user gInfo newMember currentTs + createNewMember_ db user gInfo newMember badgeVerified currentTs createIntroReMemberConn :: DB.Connection -> User -> GroupMember -> GroupMember -> VersionChat -> MemberInfo -> (CommandId, ConnId) -> SubscriptionMode -> ExceptT StoreError IO GroupMember createIntroReMemberConn @@ -2983,41 +3005,47 @@ setMemberContactStartedConnection db Contact {contactId} = do "UPDATE contacts SET grp_direct_inv_started_connection = ?, updated_at = ? WHERE contact_id = ?" (BI True, currentTs, contactId) -updateMemberProfile :: DB.Connection -> User -> GroupMember -> Profile -> ExceptT StoreError IO GroupMember -updateMemberProfile db user@User {userId} m p' - | displayName == newName = do - liftIO $ updateMemberContactProfileReset_ db userId profileId p' - pure m {memberProfile = profile} - | otherwise = - ExceptT . withLocalDisplayName db userId newName $ \ldn -> do - currentTs <- getCurrentTime - updateMemberContactProfileReset_' db userId profileId p' currentTs - DB.execute - db - "UPDATE group_members SET local_display_name = ?, updated_at = ? WHERE user_id = ? AND group_member_id = ?" - (ldn, currentTs, userId, groupMemberId) - safeDeleteLDN db user localDisplayName - pure $ Right m {localDisplayName = ldn, memberProfile = profile} +updateMemberProfile :: DB.Connection -> StoreCxt -> User -> GroupMember -> Profile -> ExceptT StoreError IO GroupMember +updateMemberProfile db cxt user@User {userId} m p' = do + currentTs <- liftIO getCurrentTime + badgeVerified <- liftIO $ profileBadgeVerified (badgeKeys cxt) (memberProfile m) p' + let memberProfile = toLocalProfile profileId p' localAlias currentTs badgeVerified + updateMemberProfile' currentTs badgeVerified memberProfile where GroupMember {groupMemberId, localDisplayName, memberProfile = LocalProfile {profileId, displayName, localAlias}} = m Profile {displayName = newName} = p' - profile = toLocalProfile profileId p' localAlias + updateMemberProfile' currentTs badgeVerified memberProfile + | displayName == newName = do + liftIO $ updateMemberContactProfileReset_' db userId profileId p' badgeVerified currentTs + pure m {memberProfile} + | otherwise = + ExceptT . withLocalDisplayName db userId newName $ \ldn -> do + updateMemberContactProfileReset_' db userId profileId p' badgeVerified currentTs + DB.execute + db + "UPDATE group_members SET local_display_name = ?, updated_at = ? WHERE user_id = ? AND group_member_id = ?" + (ldn, currentTs, userId, groupMemberId) + safeDeleteLDN db user localDisplayName + pure $ Right m {localDisplayName = ldn, memberProfile} -updateContactMemberProfile :: DB.Connection -> User -> GroupMember -> Contact -> Profile -> ExceptT StoreError IO (GroupMember, Contact) -updateContactMemberProfile db user@User {userId} m ct@Contact {contactId} p' - | displayName == newName = do - liftIO $ updateMemberContactProfile_ db userId profileId p' - pure (m {memberProfile = profile}, ct {profile} :: Contact) - | otherwise = - ExceptT . withLocalDisplayName db userId newName $ \ldn -> do - currentTs <- getCurrentTime - updateMemberContactProfile_' db userId profileId p' currentTs - updateContactLDN_ db user contactId localDisplayName ldn currentTs - pure $ Right (m {localDisplayName = ldn, memberProfile = profile}, ct {localDisplayName = ldn, profile} :: Contact) +updateContactMemberProfile :: DB.Connection -> StoreCxt -> User -> GroupMember -> Contact -> Profile -> ExceptT StoreError IO (GroupMember, Contact) +updateContactMemberProfile db cxt user@User {userId} m ct@Contact {contactId} p' = do + currentTs <- liftIO getCurrentTime + badgeVerified <- liftIO $ profileBadgeVerified (badgeKeys cxt) (memberProfile m) p' + let profile = toLocalProfile profileId p' localAlias currentTs badgeVerified + updateContactMemberProfile' currentTs badgeVerified profile where GroupMember {localDisplayName, memberProfile = LocalProfile {profileId, displayName, localAlias}} = m Profile {displayName = newName} = p' - profile = toLocalProfile profileId p' localAlias + updateContactMemberProfile' currentTs badgeVerified profile + | displayName == newName = do + liftIO $ updateMemberContactProfile_' db userId profileId p' badgeVerified currentTs + pure (m {memberProfile = profile}, ct {profile} :: Contact) + | otherwise = + ExceptT . withLocalDisplayName db userId newName $ \ldn -> do + updateMemberContactProfile_' db userId profileId p' badgeVerified currentTs + updateContactLDN_ db user contactId localDisplayName ldn currentTs + pure $ Right (m {localDisplayName = ldn, memberProfile = profile}, ct {localDisplayName = ldn, profile} :: Contact) getXGrpLinkMemReceived :: DB.Connection -> GroupMemberId -> ExceptT StoreError IO Bool getXGrpLinkMemReceived db mId = @@ -3036,7 +3064,7 @@ createNewUnknownGroupMember :: DB.Connection -> StoreCxt -> User -> GroupInfo -> createNewUnknownGroupMember db cxt user@User {userId, userContactId} GroupInfo {groupId} memberId memberName unknownMemberRole = do currentTs <- liftIO getCurrentTime let memberProfile = profileFromName memberName - (localDisplayName, profileId) <- createNewMemberProfile_ db user memberProfile currentTs + (localDisplayName, profileId, _) <- createNewMemberProfile_ db cxt user memberProfile currentTs indexInGroup <- getUpdateNextIndexInGroup_ db groupId liftIO $ DB.execute @@ -3061,7 +3089,7 @@ createLinkOwnerMember :: DB.Connection -> StoreCxt -> User -> GroupInfo -> Maybe createLinkOwnerMember db cxt user@User {userId, userContactId} GroupInfo {groupId} contactId_ memberId ownerKey = do currentTs <- liftIO getCurrentTime let memberProfile = profileFromName $ nameFromMemberId memberId - (localDisplayName, profileId) <- createNewMemberProfile_ db user memberProfile currentTs + (localDisplayName, profileId, _) <- createNewMemberProfile_ db cxt user memberProfile currentTs indexInGroup <- getUpdateNextIndexInGroup_ db groupId liftIO $ DB.execute @@ -3087,7 +3115,7 @@ createLinkOwnerMember db cxt user@User {userId, userContactId} GroupInfo {groupI -- Updating from an in-band message would allow a compromised relay to substitute keys. updatePreparedChannelMember :: DB.Connection -> StoreCxt -> User -> GroupMember -> MemberInfo -> ExceptT StoreError IO GroupMember updatePreparedChannelMember db cxt user@User {userId} member@GroupMember {groupMemberId, memberChatVRange} MemberInfo {memberRole, v, profile} = do - _ <- updateMemberProfile db user member profile + _ <- updateMemberProfile db cxt user member profile currentTs <- liftIO getCurrentTime liftIO $ DB.execute @@ -3108,7 +3136,7 @@ updatePreparedChannelMember db cxt user@User {userId} member@GroupMember {groupM updateUnknownMemberAnnounced :: DB.Connection -> StoreCxt -> User -> GroupMember -> GroupMember -> MemberInfo -> GroupMemberStatus -> ExceptT StoreError IO GroupMember updateUnknownMemberAnnounced db cxt user@User {userId} invitingMember unknownMember@GroupMember {groupMemberId, memberChatVRange} MemberInfo {memberRole, v, profile, memberKey} status = do - _ <- updateMemberProfile db user unknownMember profile + _ <- updateMemberProfile db cxt user unknownMember profile currentTs <- liftIO getCurrentTime liftIO $ DB.execute diff --git a/src/Simplex/Chat/Store/Messages.hs b/src/Simplex/Chat/Store/Messages.hs index 76e0a0fd97..edbe7a6acb 100644 --- a/src/Simplex/Chat/Store/Messages.hs +++ b/src/Simplex/Chat/Store/Messages.hs @@ -652,7 +652,8 @@ insertChatItemMessage_ :: DB.Connection -> ChatItemId -> MessageId -> UTCTime -> insertChatItemMessage_ db ciId msgId ts = DB.execute db "INSERT INTO chat_item_messages (chat_item_id, message_id, created_at, updated_at) VALUES (?,?,?,?)" (ciId, msgId, ts, ts) getChatItemQuote_ :: ChatTypeQuotable c => DB.Connection -> User -> ChatDirection c 'MDRcv -> QuotedMsg -> IO (CIQuote c) -getChatItemQuote_ db User {userId, userContactId} chatDirection QuotedMsg {msgRef = MsgRef {msgId, sentAt, sent, memberId}, content} = +getChatItemQuote_ db User {userId, userContactId} chatDirection QuotedMsg {msgRef = MsgRef {msgId, sentAt, sent, memberId}, content} = do + currentTs <- getCurrentTime case chatDirection of CDDirectRcv Contact {contactId} -> getDirectChatItemQuote_ contactId (not sent) CDGroupRcv GroupInfo {groupId, membership = GroupMember {memberId = userMemberId}} _s sender@GroupMember {groupMemberId = senderGMId, memberId = senderMemberId} -> @@ -660,13 +661,13 @@ getChatItemQuote_ db User {userId, userContactId} chatDirection QuotedMsg {msgRe Just mId | mId == userMemberId -> (`ciQuote` CIQGroupSnd) <$> getUserGroupChatItemId_ groupId | mId == senderMemberId -> (`ciQuote` CIQGroupRcv (Just sender)) <$> getGroupChatItemId_ groupId senderGMId - | otherwise -> getGroupChatItemQuote_ groupId mId + | otherwise -> getGroupChatItemQuote_ currentTs groupId mId _ -> pure . ciQuote Nothing $ CIQGroupRcv Nothing CDChannelRcv GroupInfo {groupId, membership = GroupMember {memberId = userMemberId}} _s -> case memberId of Just mId | mId == userMemberId -> (`ciQuote` CIQGroupSnd) <$> getUserGroupChatItemId_ groupId - | otherwise -> getGroupChatItemQuote_ groupId mId + | otherwise -> getGroupChatItemQuote_ currentTs groupId mId _ -> pure . ciQuote Nothing $ CIQGroupRcv Nothing where ciQuote :: Maybe ChatItemId -> CIQDirection c -> CIQuote c @@ -695,8 +696,8 @@ getChatItemQuote_ db User {userId, userContactId} chatDirection QuotedMsg {msgRe db "SELECT chat_item_id FROM chat_items WHERE user_id = ? AND group_id = ? AND shared_msg_id = ? AND item_sent = ? AND group_member_id = ?" (userId, groupId, msgId, MDRcv, groupMemberId) - getGroupChatItemQuote_ :: Int64 -> MemberId -> IO (CIQuote 'CTGroup) - getGroupChatItemQuote_ groupId mId = do + getGroupChatItemQuote_ :: UTCTime -> Int64 -> MemberId -> IO (CIQuote 'CTGroup) + getGroupChatItemQuote_ currentTs groupId mId = do ciQuoteGroup <$> DB.query db @@ -706,6 +707,7 @@ getChatItemQuote_ db User {userId, userContactId} chatDirection QuotedMsg {msgRe m.group_member_id, m.group_id, m.index_in_group, m.member_id, m.peer_chat_min_version, m.peer_chat_max_version, m.member_role, m.member_category, m.member_status, m.show_messages, m.member_restriction, m.invited_by, m.invited_by_group_member_id, m.local_display_name, m.contact_id, m.contact_profile_id, p.contact_profile_id, p.display_name, p.full_name, p.short_descr, p.image, p.contact_link, p.chat_peer_type, p.local_alias, p.preferences, + p.badge_proof, p.badge_pres_header, p.badge_expiry, p.badge_type, p.badge_verified, p.badge_extra, p.badge_master_key, p.badge_signature, p.badge_key_idx, m.created_at, m.updated_at, m.support_chat_ts, m.support_chat_items_unread, m.support_chat_items_member_attention, m.support_chat_items_mentions, m.support_chat_last_msg_from_member_ts, m.member_pub_key, m.relay_link FROM group_members m @@ -721,7 +723,7 @@ getChatItemQuote_ db User {userId, userContactId} chatDirection QuotedMsg {msgRe where ciQuoteGroup :: [Only (Maybe ChatItemId) :. GroupMemberRow] -> CIQuote 'CTGroup ciQuoteGroup [] = ciQuote Nothing $ CIQGroupRcv Nothing - ciQuoteGroup ((Only itemId :. memberRow) : _) = ciQuote itemId . CIQGroupRcv . Just $ toGroupMember userContactId memberRow + ciQuoteGroup ((Only itemId :. memberRow) : _) = ciQuote itemId . CIQGroupRcv . Just $ toGroupMember currentTs userContactId memberRow getChatPreviews :: DB.Connection -> StoreCxt -> User -> Bool -> PaginationByTime -> ChatListQuery -> IO [Either StoreError AChat] getChatPreviews db cxt user withPCC pagination query = do @@ -1111,22 +1113,25 @@ toLocalChatItem currentTs ((itemId, itemTs, AMsgDirection msgDir, itemContentTex ciTimed = timedTTL >>= \ttl -> Just CITimed {ttl, deleteAt = timedDeleteAt} getContactRequestChatPreviews_ :: DB.Connection -> User -> PaginationByTime -> ChatListQuery -> IO [AChatPreviewData] -getContactRequestChatPreviews_ db User {userId} pagination clq = case clq of - CLQFilters {favorite = False, unread = False} -> map toPreview <$> getPreviews "" - CLQFilters {favorite = True, unread = False} -> pure [] - CLQFilters {favorite = False, unread = True} -> map toPreview <$> getPreviews "" - CLQFilters {favorite = True, unread = True} -> map toPreview <$> getPreviews "" - CLQSearch {search} -> map toPreview <$> getPreviews search +getContactRequestChatPreviews_ db User {userId} pagination clq = do + currentTs <- getCurrentTime + case clq of + CLQFilters {favorite = False, unread = False} -> map (toPreview currentTs) <$> getPreviews "" + CLQFilters {favorite = True, unread = False} -> pure [] + CLQFilters {favorite = False, unread = True} -> map (toPreview currentTs) <$> getPreviews "" + CLQFilters {favorite = True, unread = True} -> map (toPreview currentTs) <$> getPreviews "" + CLQSearch {search} -> map (toPreview currentTs) <$> getPreviews search where query = [sql| SELECT cr.contact_request_id, cr.local_display_name, cr.agent_invitation_id, cr.contact_id, cr.business_group_id, cr.user_contact_link_id, - cr.contact_profile_id, p.display_name, p.full_name, p.short_descr, p.image, p.contact_link, p.chat_peer_type, cr.xcontact_id, + cr.contact_profile_id, p.display_name, p.full_name, p.short_descr, p.image, p.contact_link, p.chat_peer_type, p.local_alias, cr.xcontact_id, cr.pq_support, cr.welcome_shared_msg_id, cr.request_shared_msg_id, p.preferences, cr.created_at, cr.updated_at, - cr.peer_chat_min_version, cr.peer_chat_max_version + cr.peer_chat_min_version, cr.peer_chat_max_version, + p.badge_proof, p.badge_pres_header, p.badge_expiry, p.badge_type, p.badge_verified, p.badge_extra, p.badge_master_key, p.badge_signature, p.badge_key_idx FROM contact_requests cr JOIN contact_profiles p ON p.contact_profile_id = cr.contact_profile_id JOIN user_contact_links uc ON uc.user_contact_link_id = cr.user_contact_link_id @@ -1148,9 +1153,9 @@ getContactRequestChatPreviews_ db User {userId} pagination clq = case clq of PTLast count -> DB.query db (query <> " ORDER BY cr.updated_at DESC LIMIT ?") (params search :. Only count) PTAfter ts count -> DB.query db (query <> " AND cr.updated_at > ? ORDER BY cr.updated_at ASC LIMIT ?") (params search :. (ts, count)) PTBefore ts count -> DB.query db (query <> " AND cr.updated_at < ? ORDER BY cr.updated_at DESC LIMIT ?") (params search :. (ts, count)) - toPreview :: ContactRequestRow -> AChatPreviewData - toPreview cReqRow = - let cReq@UserContactRequest {updatedAt} = toContactRequest cReqRow + toPreview :: UTCTime -> ContactRequestRow -> AChatPreviewData + toPreview now cReqRow = + let cReq@UserContactRequest {updatedAt} = toContactRequest now cReqRow aChat = AChat SCTContactRequest $ Chat (ContactRequest cReq) [] emptyChatStats in ACPD SCTContactRequest $ ContactRequestPD updatedAt aChat @@ -2358,9 +2363,9 @@ toGroupChatItem ) = do chatItem $ fromRight invalid $ dbParseACIContent itemContentText where - member_ = toMaybeGroupMember userContactId memberRow_ - quotedMember_ = toMaybeGroupMember userContactId quotedMemberRow_ - deletedByGroupMember_ = toMaybeGroupMember userContactId deletedByGroupMemberRow_ + member_ = toMaybeGroupMember currentTs userContactId memberRow_ + quotedMember_ = toMaybeGroupMember currentTs userContactId quotedMemberRow_ + deletedByGroupMember_ = toMaybeGroupMember currentTs userContactId deletedByGroupMemberRow_ invalid = ACIContent msgDir $ CIInvalidJSON itemContentText chatItem itemContent = case (itemContent, itemStatus, member_, fileStatus_) of (ACIContent SMDSnd ciContent, ACIStatus SMDSnd ciStatus, _, Just (AFS SMDSnd fileStatus)) -> @@ -3036,6 +3041,7 @@ getGroupChatItem db User {userId, userContactId} groupId itemId = ExceptT $ do m.group_member_id, m.group_id, m.index_in_group, m.member_id, m.peer_chat_min_version, m.peer_chat_max_version, m.member_role, m.member_category, m.member_status, m.show_messages, m.member_restriction, m.invited_by, m.invited_by_group_member_id, m.local_display_name, m.contact_id, m.contact_profile_id, p.contact_profile_id, p.display_name, p.full_name, p.short_descr, p.image, p.contact_link, p.chat_peer_type, p.local_alias, p.preferences, + p.badge_proof, p.badge_pres_header, p.badge_expiry, p.badge_type, p.badge_verified, p.badge_extra, p.badge_master_key, p.badge_signature, p.badge_key_idx, m.created_at, m.updated_at, m.support_chat_ts, m.support_chat_items_unread, m.support_chat_items_member_attention, m.support_chat_items_mentions, m.support_chat_last_msg_from_member_ts, m.member_pub_key, m.relay_link, -- quoted ChatItem @@ -3044,12 +3050,14 @@ getGroupChatItem db User {userId, userContactId} groupId itemId = ExceptT $ do rm.group_member_id, rm.group_id, rm.index_in_group, rm.member_id, rm.peer_chat_min_version, rm.peer_chat_max_version, rm.member_role, rm.member_category, rm.member_status, rm.show_messages, rm.member_restriction, rm.invited_by, rm.invited_by_group_member_id, rm.local_display_name, rm.contact_id, rm.contact_profile_id, rp.contact_profile_id, rp.display_name, rp.full_name, rp.short_descr, rp.image, rp.contact_link, rp.chat_peer_type, rp.local_alias, rp.preferences, + rp.badge_proof, rp.badge_pres_header, rp.badge_expiry, rp.badge_type, rp.badge_verified, rp.badge_extra, rp.badge_master_key, rp.badge_signature, rp.badge_key_idx, rm.created_at, rm.updated_at, rm.support_chat_ts, rm.support_chat_items_unread, rm.support_chat_items_member_attention, rm.support_chat_items_mentions, rm.support_chat_last_msg_from_member_ts, rm.member_pub_key, rm.relay_link, -- deleted by GroupMember dbm.group_member_id, dbm.group_id, dbm.index_in_group, dbm.member_id, dbm.peer_chat_min_version, dbm.peer_chat_max_version, dbm.member_role, dbm.member_category, dbm.member_status, dbm.show_messages, dbm.member_restriction, dbm.invited_by, dbm.invited_by_group_member_id, dbm.local_display_name, dbm.contact_id, dbm.contact_profile_id, dbp.contact_profile_id, dbp.display_name, dbp.full_name, dbp.short_descr, dbp.image, dbp.contact_link, dbp.chat_peer_type, dbp.local_alias, dbp.preferences, + dbp.badge_proof, dbp.badge_pres_header, dbp.badge_expiry, dbp.badge_type, dbp.badge_verified, dbp.badge_extra, dbp.badge_master_key, dbp.badge_signature, dbp.badge_key_idx, dbm.created_at, dbm.updated_at, dbm.support_chat_ts, dbm.support_chat_items_unread, dbm.support_chat_items_member_attention, dbm.support_chat_items_mentions, dbm.support_chat_last_msg_from_member_ts, dbm.member_pub_key, dbm.relay_link FROM chat_items i diff --git a/src/Simplex/Chat/Store/Postgres/Migrations.hs b/src/Simplex/Chat/Store/Postgres/Migrations.hs index a8bb0da945..4c9a1b1c91 100644 --- a/src/Simplex/Chat/Store/Postgres/Migrations.hs +++ b/src/Simplex/Chat/Store/Postgres/Migrations.hs @@ -32,6 +32,7 @@ import Simplex.Chat.Store.Postgres.Migrations.M20260429_relay_request_retries import Simplex.Chat.Store.Postgres.Migrations.M20260507_relay_inactive_at import Simplex.Chat.Store.Postgres.Migrations.M20260514_relay_request_group_link_index import Simplex.Chat.Store.Postgres.Migrations.M20260515_public_group_access +import Simplex.Chat.Store.Postgres.Migrations.M20260516_supporter_badges import Simplex.Messaging.Agent.Store.Shared (Migration (..)) schemaMigrations :: [(String, Text, Maybe Text)] @@ -63,7 +64,8 @@ schemaMigrations = ("20260429_relay_request_retries", m20260429_relay_request_retries, Just down_m20260429_relay_request_retries), ("20260507_relay_inactive_at", m20260507_relay_inactive_at, Just down_m20260507_relay_inactive_at), ("20260514_relay_request_group_link_index", m20260514_relay_request_group_link_index, Just down_m20260514_relay_request_group_link_index), - ("20260515_public_group_access", m20260515_public_group_access, Just down_m20260515_public_group_access) + ("20260515_public_group_access", m20260515_public_group_access, Just down_m20260515_public_group_access), + ("20260516_supporter_badges", m20260516_supporter_badges, Just down_m20260516_supporter_badges) ] -- | The list of migrations in ascending order by date diff --git a/src/Simplex/Chat/Store/Postgres/Migrations/M20260516_supporter_badges.hs b/src/Simplex/Chat/Store/Postgres/Migrations/M20260516_supporter_badges.hs new file mode 100644 index 0000000000..ffc3122e3f --- /dev/null +++ b/src/Simplex/Chat/Store/Postgres/Migrations/M20260516_supporter_badges.hs @@ -0,0 +1,35 @@ +{-# LANGUAGE OverloadedStrings #-} +{-# LANGUAGE QuasiQuotes #-} + +module Simplex.Chat.Store.Postgres.Migrations.M20260516_supporter_badges where + +import Data.Text (Text) +import Text.RawString.QQ (r) + +m20260516_supporter_badges :: Text +m20260516_supporter_badges = + [r| +ALTER TABLE contact_profiles ADD COLUMN badge_proof BYTEA; +ALTER TABLE contact_profiles ADD COLUMN badge_pres_header BYTEA; +ALTER TABLE contact_profiles ADD COLUMN badge_expiry TIMESTAMPTZ; +ALTER TABLE contact_profiles ADD COLUMN badge_type TEXT; +ALTER TABLE contact_profiles ADD COLUMN badge_verified SMALLINT; +ALTER TABLE contact_profiles ADD COLUMN badge_extra TEXT; +ALTER TABLE contact_profiles ADD COLUMN badge_master_key BYTEA; +ALTER TABLE contact_profiles ADD COLUMN badge_signature BYTEA; +ALTER TABLE contact_profiles ADD COLUMN badge_key_idx BIGINT; +|] + +down_m20260516_supporter_badges :: Text +down_m20260516_supporter_badges = + [r| +ALTER TABLE contact_profiles DROP COLUMN badge_key_idx; +ALTER TABLE contact_profiles DROP COLUMN badge_signature; +ALTER TABLE contact_profiles DROP COLUMN badge_master_key; +ALTER TABLE contact_profiles DROP COLUMN badge_extra; +ALTER TABLE contact_profiles DROP COLUMN badge_verified; +ALTER TABLE contact_profiles DROP COLUMN badge_type; +ALTER TABLE contact_profiles DROP COLUMN badge_proof; +ALTER TABLE contact_profiles DROP COLUMN badge_pres_header; +ALTER TABLE contact_profiles DROP COLUMN badge_expiry; +|] diff --git a/src/Simplex/Chat/Store/Postgres/Migrations/chat_schema.sql b/src/Simplex/Chat/Store/Postgres/Migrations/chat_schema.sql index cc3543e8a8..68c43efa19 100644 --- a/src/Simplex/Chat/Store/Postgres/Migrations/chat_schema.sql +++ b/src/Simplex/Chat/Store/Postgres/Migrations/chat_schema.sql @@ -531,7 +531,16 @@ CREATE TABLE test_chat_schema.contact_profiles ( preferences text, contact_link bytea, short_descr text, - chat_peer_type text + chat_peer_type text, + badge_proof bytea, + badge_pres_header bytea, + badge_expiry timestamp with time zone, + badge_type text, + badge_verified smallint, + badge_extra text, + badge_master_key bytea, + badge_signature bytea, + badge_key_idx bigint ); diff --git a/src/Simplex/Chat/Store/Profiles.hs b/src/Simplex/Chat/Store/Profiles.hs index d432067866..bfd198d885 100644 --- a/src/Simplex/Chat/Store/Profiles.hs +++ b/src/Simplex/Chat/Store/Profiles.hs @@ -43,6 +43,7 @@ module Simplex.Chat.Store.Profiles updateUserGroupReceipts, updateUserAutoAcceptMemberContacts, updateUserProfile, + setUserBadge, setUserProfileContactLink, getUserContactProfiles, createUserContactLink, @@ -97,6 +98,7 @@ import Data.Text (Text) import qualified Data.Text as T import Data.Text.Encoding (decodeLatin1, encodeUtf8) import Data.Time.Clock (UTCTime (..), getCurrentTime) +import Simplex.Chat.Badges (LocalBadge, localBadgeToRow) import Simplex.Chat.Call import Simplex.Chat.Messages import Simplex.Chat.Operators @@ -162,7 +164,7 @@ createUserRecordAt db (AgentUserId auId) Profile {displayName, fullName, shortDe (profileId, displayName, userId, BI True, currentTs, currentTs, currentTs) contactId <- insertedRowId db DB.execute db "UPDATE users SET contact_id = ? WHERE user_id = ?" (contactId, userId) - pure $ toUser $ (userId, auId, contactId, profileId, BI activeUser, order) :. (displayName, fullName, shortDescr, image, Nothing, peerType, userPreferences) :. (BI showNtfs, BI sendRcptsContacts, BI sendRcptsSmallGroups, BI autoAcceptMemberContacts, Nothing, Nothing, Nothing, Nothing, BI userChatRelay) + pure $ toUser currentTs $ (userId, auId, contactId, profileId, BI activeUser, order) :. (displayName, fullName, shortDescr, image, Nothing, peerType, userPreferences) :. (BI showNtfs, BI sendRcptsContacts, BI sendRcptsSmallGroups, BI autoAcceptMemberContacts, Nothing, Nothing, Nothing, Nothing, BI userChatRelay) :. localBadgeToRow Nothing -- TODO [mentions] getUsersInfo :: DB.Connection -> IO [UserInfo] @@ -196,8 +198,9 @@ getUsersInfo db = getUsers db >>= mapM getUserInfo pure UserInfo {user, unreadCount = fromMaybe 0 ctCount + fromMaybe 0 gCount} getUsers :: DB.Connection -> IO [User] -getUsers db = - map toUser <$> DB.query_ db userQuery +getUsers db = do + now <- getCurrentTime + map (toUser now) <$> DB.query_ db userQuery setActiveUser :: DB.Connection -> User -> IO User setActiveUser db user@User {userId} = do @@ -214,13 +217,15 @@ getNextActiveOrder db = do else pure $ order + 1 getUser :: DB.Connection -> UserId -> ExceptT StoreError IO User -getUser db userId = - ExceptT . firstRow toUser (SEUserNotFound userId) $ +getUser db userId = do + now <- liftIO getCurrentTime + ExceptT . firstRow (toUser now) (SEUserNotFound userId) $ DB.query db (userQuery <> " WHERE u.user_id = ?") (Only userId) getRelayUser :: DB.Connection -> ExceptT StoreError IO User -getRelayUser db = - ExceptT . firstRow toUser SERelayUserNotFound $ +getRelayUser db = do + now <- liftIO getCurrentTime + ExceptT . firstRow (toUser now) SERelayUserNotFound $ DB.query_ db (userQuery <> " WHERE u.is_user_chat_relay = 1") getUserIdByName :: DB.Connection -> UserName -> ExceptT StoreError IO Int64 @@ -229,38 +234,45 @@ getUserIdByName db uName = DB.query db "SELECT user_id FROM users WHERE local_display_name = ?" (Only uName) getUserByAConnId :: DB.Connection -> AgentConnId -> IO (Maybe User) -getUserByAConnId db agentConnId = - maybeFirstRow toUser $ +getUserByAConnId db agentConnId = do + now <- getCurrentTime + maybeFirstRow (toUser now) $ DB.query db (userQuery <> " JOIN connections c ON c.user_id = u.user_id WHERE c.agent_conn_id = ?") (Only agentConnId) getUserByASndFileId :: DB.Connection -> AgentSndFileId -> IO (Maybe User) -getUserByASndFileId db aSndFileId = - maybeFirstRow toUser $ +getUserByASndFileId db aSndFileId = do + now <- getCurrentTime + maybeFirstRow (toUser now) $ DB.query db (userQuery <> " JOIN files f ON f.user_id = u.user_id WHERE f.agent_snd_file_id = ?") (Only aSndFileId) getUserByARcvFileId :: DB.Connection -> AgentRcvFileId -> IO (Maybe User) -getUserByARcvFileId db aRcvFileId = - maybeFirstRow toUser $ +getUserByARcvFileId db aRcvFileId = do + now <- getCurrentTime + maybeFirstRow (toUser now) $ DB.query db (userQuery <> " JOIN files f ON f.user_id = u.user_id JOIN rcv_files r ON r.file_id = f.file_id WHERE r.agent_rcv_file_id = ?") (Only aRcvFileId) getUserByContactId :: DB.Connection -> ContactId -> ExceptT StoreError IO User -getUserByContactId db contactId = - ExceptT . firstRow toUser (SEUserNotFoundByContactId contactId) $ +getUserByContactId db contactId = do + now <- liftIO getCurrentTime + ExceptT . firstRow (toUser now) (SEUserNotFoundByContactId contactId) $ DB.query db (userQuery <> " JOIN contacts ct ON ct.user_id = u.user_id WHERE ct.contact_id = ? AND ct.deleted = 0") (Only contactId) getUserByGroupId :: DB.Connection -> GroupId -> ExceptT StoreError IO User -getUserByGroupId db groupId = - ExceptT . firstRow toUser (SEUserNotFoundByGroupId groupId) $ +getUserByGroupId db groupId = do + now <- liftIO getCurrentTime + ExceptT . firstRow (toUser now) (SEUserNotFoundByGroupId groupId) $ DB.query db (userQuery <> " JOIN groups g ON g.user_id = u.user_id WHERE g.group_id = ?") (Only groupId) getUserByNoteFolderId :: DB.Connection -> NoteFolderId -> ExceptT StoreError IO User -getUserByNoteFolderId db contactId = - ExceptT . firstRow toUser (SEUserNotFoundByContactId contactId) $ +getUserByNoteFolderId db contactId = do + now <- liftIO getCurrentTime + ExceptT . firstRow (toUser now) (SEUserNotFoundByContactId contactId) $ DB.query db (userQuery <> " JOIN note_folders nf ON nf.user_id = u.user_id WHERE nf.note_folder_id = ?") (Only contactId) getUserByFileId :: DB.Connection -> FileTransferId -> ExceptT StoreError IO User -getUserByFileId db fileId = - ExceptT . firstRow toUser (SEUserNotFoundByFileId fileId) $ +getUserByFileId db fileId = do + now <- liftIO getCurrentTime + ExceptT . firstRow (toUser now) (SEUserNotFoundByFileId fileId) $ DB.query db (userQuery <> " JOIN files f ON f.user_id = u.user_id WHERE f.file_id = ?") (Only fileId) getUserFileInfo :: DB.Connection -> User -> IO [CIFileInfo] @@ -309,10 +321,10 @@ updateUserAutoAcceptMemberContacts db User {userId} autoAccept = updateUserProfile :: DB.Connection -> User -> Profile -> ExceptT StoreError IO User updateUserProfile db user p' | displayName == newName = liftIO $ do - updateContactProfile_ db userId profileId p' currentTs <- getCurrentTime + updateUserProfileFields_' db userId profileId p' currentTs userMemberProfileUpdatedAt' <- updateUserMemberProfileUpdatedAt_ currentTs - pure user {profile, fullPreferences, userMemberProfileUpdatedAt = userMemberProfileUpdatedAt'} + pure user {profile = (toLocalProfile profileId p' localAlias currentTs (Just False)) {localBadge}, fullPreferences, userMemberProfileUpdatedAt = userMemberProfileUpdatedAt'} | otherwise = checkConstraint SEDuplicateName . liftIO $ do currentTs <- getCurrentTime @@ -322,9 +334,9 @@ updateUserProfile db user p' db "INSERT INTO display_names (local_display_name, ldn_base, user_id, created_at, updated_at) VALUES (?,?,?,?,?)" (newName, newName, userId, currentTs, currentTs) - updateContactProfile_' db userId profileId p' currentTs + updateUserProfileFields_' db userId profileId p' currentTs updateContactLDN_ db user userContactId localDisplayName newName currentTs - pure user {localDisplayName = newName, profile, fullPreferences, userMemberProfileUpdatedAt = userMemberProfileUpdatedAt'} + pure user {localDisplayName = newName, profile = (toLocalProfile profileId p' localAlias currentTs (Just False)) {localBadge}, fullPreferences, userMemberProfileUpdatedAt = userMemberProfileUpdatedAt'} where updateUserMemberProfileUpdatedAt_ currentTs | userMemberProfileChanged = do @@ -332,11 +344,38 @@ updateUserProfile db user p' pure $ Just currentTs | otherwise = pure userMemberProfileUpdatedAt userMemberProfileChanged = newName /= displayName || fn' /= fullName || d' /= shortDescr || img' /= image - User {userId, userContactId, localDisplayName, profile = LocalProfile {profileId, displayName, fullName, shortDescr, image, localAlias}, userMemberProfileUpdatedAt} = user + User {userId, userContactId, localDisplayName, profile = LocalProfile {profileId, displayName, fullName, shortDescr, image, localBadge, localAlias}, userMemberProfileUpdatedAt} = user Profile {displayName = newName, fullName = fn', shortDescr = d', image = img', preferences} = p' - profile = toLocalProfile profileId p' localAlias fullPreferences = fullPreferences' preferences +-- own profile field update; leaves the badge columns alone (the credential is owned by setUserBadge/addUserBadge) +updateUserProfileFields_' :: DB.Connection -> UserId -> ProfileId -> Profile -> UTCTime -> IO () +updateUserProfileFields_' db userId profileId Profile {displayName, fullName, shortDescr, image, contactLink, preferences, peerType} updatedAt = + DB.execute + db + [sql| + UPDATE contact_profiles + SET display_name = ?, full_name = ?, short_descr = ?, image = ?, contact_link = ?, preferences = ?, chat_peer_type = ?, updated_at = ? + WHERE user_id = ? AND contact_profile_id = ? + |] + ((displayName, fullName, shortDescr, image, contactLink, preferences, peerType, updatedAt) :. (userId, profileId)) + +-- store the user's own badge credential; touches only the badge columns. +-- bumps user_member_profile_updated_at so groups receive the updated profile (with the badge) on the next message. +setUserBadge :: DB.Connection -> User -> Maybe LocalBadge -> IO User +setUserBadge db user@User {userId, profile = p@LocalProfile {profileId}} localBadge = do + ts <- getCurrentTime + DB.execute + db + [sql| + UPDATE contact_profiles + SET badge_proof = ?, badge_pres_header = ?, badge_expiry = ?, badge_type = ?, badge_verified = ?, badge_extra = ?, badge_master_key = ?, badge_signature = ?, badge_key_idx = ?, updated_at = ? + WHERE user_id = ? AND contact_profile_id = ? + |] + (localBadgeToRow localBadge :. (ts, userId, profileId)) + DB.execute db "UPDATE users SET user_member_profile_updated_at = ? WHERE user_id = ?" (ts, userId) + pure (user :: User) {profile = p {localBadge}, userMemberProfileUpdatedAt = Just ts} + setUserProfileContactLink :: DB.Connection -> User -> Maybe UserContactLink -> IO User setUserProfileContactLink db user@User {userId, profile = p@LocalProfile {profileId}} ucl_ = do ts <- getCurrentTime @@ -366,7 +405,7 @@ getUserContactProfiles db User {userId} = (Only userId) where toContactProfile :: (ContactName, Text, Maybe Text, Maybe ImageData, Maybe ConnLinkContact, Maybe ChatPeerType, Maybe Preferences) -> Profile - toContactProfile (displayName, fullName, shortDescr, image, contactLink, peerType, preferences) = Profile {displayName, fullName, shortDescr, image, contactLink, peerType, preferences} + toContactProfile (displayName, fullName, shortDescr, image, contactLink, peerType, preferences) = Profile {displayName, fullName, shortDescr, image, contactLink, peerType, preferences, badge = Nothing} createUserContactLink :: DB.Connection -> User -> ConnId -> CreatedLinkContact -> SubscriptionMode -> ExceptT StoreError IO () createUserContactLink db User {userId} agentConnId (CCLink cReq shortLink) subMode = diff --git a/src/Simplex/Chat/Store/SQLite/Migrations.hs b/src/Simplex/Chat/Store/SQLite/Migrations.hs index 89ef373af8..5bf628b062 100644 --- a/src/Simplex/Chat/Store/SQLite/Migrations.hs +++ b/src/Simplex/Chat/Store/SQLite/Migrations.hs @@ -155,6 +155,7 @@ import Simplex.Chat.Store.SQLite.Migrations.M20260429_relay_request_retries import Simplex.Chat.Store.SQLite.Migrations.M20260507_relay_inactive_at import Simplex.Chat.Store.SQLite.Migrations.M20260514_relay_request_group_link_index import Simplex.Chat.Store.SQLite.Migrations.M20260515_public_group_access +import Simplex.Chat.Store.SQLite.Migrations.M20260516_supporter_badges import Simplex.Messaging.Agent.Store.Shared (Migration (..)) schemaMigrations :: [(String, Query, Maybe Query)] @@ -309,7 +310,8 @@ schemaMigrations = ("20260429_relay_request_retries", m20260429_relay_request_retries, Just down_m20260429_relay_request_retries), ("20260507_relay_inactive_at", m20260507_relay_inactive_at, Just down_m20260507_relay_inactive_at), ("20260514_relay_request_group_link_index", m20260514_relay_request_group_link_index, Just down_m20260514_relay_request_group_link_index), - ("20260515_public_group_access", m20260515_public_group_access, Just down_m20260515_public_group_access) + ("20260515_public_group_access", m20260515_public_group_access, Just down_m20260515_public_group_access), + ("20260516_supporter_badges", m20260516_supporter_badges, Just down_m20260516_supporter_badges) ] -- | The list of migrations in ascending order by date diff --git a/src/Simplex/Chat/Store/SQLite/Migrations/M20260516_supporter_badges.hs b/src/Simplex/Chat/Store/SQLite/Migrations/M20260516_supporter_badges.hs new file mode 100644 index 0000000000..d263d63a2b --- /dev/null +++ b/src/Simplex/Chat/Store/SQLite/Migrations/M20260516_supporter_badges.hs @@ -0,0 +1,34 @@ +{-# LANGUAGE QuasiQuotes #-} + +module Simplex.Chat.Store.SQLite.Migrations.M20260516_supporter_badges where + +import Database.SQLite.Simple (Query) +import Database.SQLite.Simple.QQ (sql) + +m20260516_supporter_badges :: Query +m20260516_supporter_badges = + [sql| +ALTER TABLE contact_profiles ADD COLUMN badge_proof BLOB; +ALTER TABLE contact_profiles ADD COLUMN badge_pres_header BLOB; +ALTER TABLE contact_profiles ADD COLUMN badge_expiry TEXT; +ALTER TABLE contact_profiles ADD COLUMN badge_type TEXT; +ALTER TABLE contact_profiles ADD COLUMN badge_verified INTEGER; +ALTER TABLE contact_profiles ADD COLUMN badge_extra TEXT; +ALTER TABLE contact_profiles ADD COLUMN badge_master_key BLOB; +ALTER TABLE contact_profiles ADD COLUMN badge_signature BLOB; +ALTER TABLE contact_profiles ADD COLUMN badge_key_idx INTEGER; +|] + +down_m20260516_supporter_badges :: Query +down_m20260516_supporter_badges = + [sql| +ALTER TABLE contact_profiles DROP COLUMN badge_key_idx; +ALTER TABLE contact_profiles DROP COLUMN badge_signature; +ALTER TABLE contact_profiles DROP COLUMN badge_master_key; +ALTER TABLE contact_profiles DROP COLUMN badge_extra; +ALTER TABLE contact_profiles DROP COLUMN badge_verified; +ALTER TABLE contact_profiles DROP COLUMN badge_type; +ALTER TABLE contact_profiles DROP COLUMN badge_expiry; +ALTER TABLE contact_profiles DROP COLUMN badge_proof; +ALTER TABLE contact_profiles DROP COLUMN badge_pres_header; +|] diff --git a/src/Simplex/Chat/Store/SQLite/Migrations/chat_query_plans.txt b/src/Simplex/Chat/Store/SQLite/Migrations/chat_query_plans.txt index 14c9226d2c..803e012773 100644 --- a/src/Simplex/Chat/Store/SQLite/Migrations/chat_query_plans.txt +++ b/src/Simplex/Chat/Store/SQLite/Migrations/chat_query_plans.txt @@ -125,6 +125,7 @@ Query: cp.preferences, ct.user_preferences, ct.created_at, ct.updated_at, ct.chat_ts, ct.conn_full_link_to_connect, ct.conn_short_link_to_connect, ct.welcome_shared_msg_id, ct.request_shared_msg_id, ct.contact_request_id, ct.contact_group_member_id, ct.contact_grp_inv_sent, ct.grp_direct_inv_link, ct.grp_direct_inv_from_group_id, ct.grp_direct_inv_from_group_member_id, ct.grp_direct_inv_from_member_conn_id, ct.grp_direct_inv_started_connection, ct.ui_themes, ct.chat_deleted, ct.custom_data, ct.chat_item_ttl, + cp.badge_proof, cp.badge_pres_header, cp.badge_expiry, cp.badge_type, cp.badge_verified, cp.badge_extra, cp.badge_master_key, cp.badge_signature, cp.badge_key_idx, -- Connection c.connection_id, c.agent_conn_id, c.conn_level, c.via_contact, c.via_user_contact_link, c.via_group_link, c.group_link_id, c.xcontact_id, c.custom_user_profile_id, c.conn_status, c.conn_type, c.contact_conn_initiated, c.local_alias, c.contact_id, c.group_member_id, c.user_contact_link_id, c.created_at, c.security_code, c.security_code_verified_at, c.pq_support, c.pq_encryption, c.pq_snd_enabled, c.pq_rcv_enabled, c.auth_err_counter, c.quota_err_counter, @@ -156,11 +157,13 @@ Query: mu.member_status, mu.show_messages, mu.member_restriction, mu.invited_by, mu.invited_by_group_member_id, mu.local_display_name, mu.contact_id, mu.contact_profile_id, pu.contact_profile_id, -- GroupInfo {membership = GroupMember {memberProfile}} pu.display_name, pu.full_name, pu.short_descr, pu.image, pu.contact_link, pu.chat_peer_type, pu.local_alias, pu.preferences, + pu.badge_proof, pu.badge_pres_header, pu.badge_expiry, pu.badge_type, pu.badge_verified, pu.badge_extra, pu.badge_master_key, pu.badge_signature, pu.badge_key_idx, mu.created_at, mu.updated_at, mu.support_chat_ts, mu.support_chat_items_unread, mu.support_chat_items_member_attention, mu.support_chat_items_mentions, mu.support_chat_last_msg_from_member_ts, mu.member_pub_key, mu.relay_link, -- from GroupMember m.group_member_id, m.group_id, m.index_in_group, m.member_id, m.peer_chat_min_version, m.peer_chat_max_version, m.member_role, m.member_category, m.member_status, m.show_messages, m.member_restriction, m.invited_by, m.invited_by_group_member_id, m.local_display_name, m.contact_id, m.contact_profile_id, p.contact_profile_id, p.display_name, p.full_name, p.short_descr, p.image, p.contact_link, p.chat_peer_type, p.local_alias, p.preferences, + p.badge_proof, p.badge_pres_header, p.badge_expiry, p.badge_type, p.badge_verified, p.badge_extra, p.badge_master_key, p.badge_signature, p.badge_key_idx, m.created_at, m.updated_at, m.support_chat_ts, m.support_chat_items_unread, m.support_chat_items_member_attention, m.support_chat_items_mentions, m.support_chat_last_msg_from_member_ts, m.member_pub_key, m.relay_link FROM group_members m @@ -394,10 +397,11 @@ Query: SELECT cr.contact_request_id, cr.local_display_name, cr.agent_invitation_id, cr.contact_id, cr.business_group_id, cr.user_contact_link_id, - cr.contact_profile_id, p.display_name, p.full_name, p.short_descr, p.image, p.contact_link, p.chat_peer_type, cr.xcontact_id, + cr.contact_profile_id, p.display_name, p.full_name, p.short_descr, p.image, p.contact_link, p.chat_peer_type, p.local_alias, cr.xcontact_id, cr.pq_support, cr.welcome_shared_msg_id, cr.request_shared_msg_id, p.preferences, cr.created_at, cr.updated_at, - cr.peer_chat_min_version, cr.peer_chat_max_version + cr.peer_chat_min_version, cr.peer_chat_max_version, + p.badge_proof, p.badge_pres_header, p.badge_expiry, p.badge_type, p.badge_verified, p.badge_extra, p.badge_master_key, p.badge_signature, p.badge_key_idx FROM contact_requests cr JOIN contact_profiles p USING (contact_profile_id) WHERE cr.user_id = ? @@ -462,7 +466,16 @@ Query: short_descr = ?, image = ?, contact_link = ?, - updated_at = ? + updated_at = ?, + badge_proof = ?, + badge_pres_header = ?, + badge_expiry = ?, + badge_type = ?, + badge_verified = ?, + badge_extra = ?, + badge_master_key = ?, + badge_signature = ?, + badge_key_idx = ? WHERE contact_profile_id IN ( SELECT contact_profile_id FROM contact_requests @@ -673,7 +686,8 @@ Query: c.contact_profile_id, c.local_display_name, p.display_name, p.full_name, p.short_descr, p.image, p.contact_link, p.chat_peer_type, p.local_alias, c.contact_used, c.contact_status, c.enable_ntfs, c.send_rcpts, c.favorite, p.preferences, c.user_preferences, c.created_at, c.updated_at, c.chat_ts, c.conn_full_link_to_connect, c.conn_short_link_to_connect, c.welcome_shared_msg_id, c.request_shared_msg_id, c.contact_request_id, c.contact_group_member_id, c.contact_grp_inv_sent, c.grp_direct_inv_link, c.grp_direct_inv_from_group_id, c.grp_direct_inv_from_group_member_id, c.grp_direct_inv_from_member_conn_id, c.grp_direct_inv_started_connection, - c.ui_themes, c.chat_deleted, c.custom_data, c.chat_item_ttl + c.ui_themes, c.chat_deleted, c.custom_data, c.chat_item_ttl, + p.badge_proof, p.badge_pres_header, p.badge_expiry, p.badge_type, p.badge_verified, p.badge_extra, p.badge_master_key, p.badge_signature, p.badge_key_idx FROM contacts c JOIN contact_profiles p ON c.contact_profile_id = p.contact_profile_id WHERE c.user_id = ? AND c.contact_id = ? AND c.contact_status = ? AND c.deleted = 0 @@ -1024,6 +1038,7 @@ Query: m.group_member_id, m.group_id, m.index_in_group, m.member_id, m.peer_chat_min_version, m.peer_chat_max_version, m.member_role, m.member_category, m.member_status, m.show_messages, m.member_restriction, m.invited_by, m.invited_by_group_member_id, m.local_display_name, m.contact_id, m.contact_profile_id, p.contact_profile_id, p.display_name, p.full_name, p.short_descr, p.image, p.contact_link, p.chat_peer_type, p.local_alias, p.preferences, + p.badge_proof, p.badge_pres_header, p.badge_expiry, p.badge_type, p.badge_verified, p.badge_extra, p.badge_master_key, p.badge_signature, p.badge_key_idx, m.created_at, m.updated_at, m.support_chat_ts, m.support_chat_items_unread, m.support_chat_items_member_attention, m.support_chat_items_mentions, m.support_chat_last_msg_from_member_ts, m.member_pub_key, m.relay_link FROM group_members m @@ -1308,6 +1323,7 @@ Query: m.group_member_id, m.group_id, m.index_in_group, m.member_id, m.peer_chat_min_version, m.peer_chat_max_version, m.member_role, m.member_category, m.member_status, m.show_messages, m.member_restriction, m.invited_by, m.invited_by_group_member_id, m.local_display_name, m.contact_id, m.contact_profile_id, p.contact_profile_id, p.display_name, p.full_name, p.short_descr, p.image, p.contact_link, p.chat_peer_type, p.local_alias, p.preferences, + p.badge_proof, p.badge_pres_header, p.badge_expiry, p.badge_type, p.badge_verified, p.badge_extra, p.badge_master_key, p.badge_signature, p.badge_key_idx, m.created_at, m.updated_at, m.support_chat_ts, m.support_chat_items_unread, m.support_chat_items_member_attention, m.support_chat_items_mentions, m.support_chat_last_msg_from_member_ts, m.member_pub_key, m.relay_link, -- quoted ChatItem @@ -1316,12 +1332,14 @@ Query: rm.group_member_id, rm.group_id, rm.index_in_group, rm.member_id, rm.peer_chat_min_version, rm.peer_chat_max_version, rm.member_role, rm.member_category, rm.member_status, rm.show_messages, rm.member_restriction, rm.invited_by, rm.invited_by_group_member_id, rm.local_display_name, rm.contact_id, rm.contact_profile_id, rp.contact_profile_id, rp.display_name, rp.full_name, rp.short_descr, rp.image, rp.contact_link, rp.chat_peer_type, rp.local_alias, rp.preferences, + rp.badge_proof, rp.badge_pres_header, rp.badge_expiry, rp.badge_type, rp.badge_verified, rp.badge_extra, rp.badge_master_key, rp.badge_signature, rp.badge_key_idx, rm.created_at, rm.updated_at, rm.support_chat_ts, rm.support_chat_items_unread, rm.support_chat_items_member_attention, rm.support_chat_items_mentions, rm.support_chat_last_msg_from_member_ts, rm.member_pub_key, rm.relay_link, -- deleted by GroupMember dbm.group_member_id, dbm.group_id, dbm.index_in_group, dbm.member_id, dbm.peer_chat_min_version, dbm.peer_chat_max_version, dbm.member_role, dbm.member_category, dbm.member_status, dbm.show_messages, dbm.member_restriction, dbm.invited_by, dbm.invited_by_group_member_id, dbm.local_display_name, dbm.contact_id, dbm.contact_profile_id, dbp.contact_profile_id, dbp.display_name, dbp.full_name, dbp.short_descr, dbp.image, dbp.contact_link, dbp.chat_peer_type, dbp.local_alias, dbp.preferences, + dbp.badge_proof, dbp.badge_pres_header, dbp.badge_expiry, dbp.badge_type, dbp.badge_verified, dbp.badge_extra, dbp.badge_master_key, dbp.badge_signature, dbp.badge_key_idx, dbm.created_at, dbm.updated_at, dbm.support_chat_ts, dbm.support_chat_items_unread, dbm.support_chat_items_member_attention, dbm.support_chat_items_mentions, dbm.support_chat_last_msg_from_member_ts, dbm.member_pub_key, dbm.relay_link FROM chat_items i @@ -1374,6 +1392,7 @@ Query: cp.preferences, ct.user_preferences, ct.created_at, ct.updated_at, ct.chat_ts, ct.conn_full_link_to_connect, ct.conn_short_link_to_connect, ct.welcome_shared_msg_id, ct.request_shared_msg_id, ct.contact_request_id, ct.contact_group_member_id, ct.contact_grp_inv_sent, ct.grp_direct_inv_link, ct.grp_direct_inv_from_group_id, ct.grp_direct_inv_from_group_member_id, ct.grp_direct_inv_from_member_conn_id, ct.grp_direct_inv_started_connection, ct.ui_themes, ct.chat_deleted, ct.custom_data, ct.chat_item_ttl, + cp.badge_proof, cp.badge_pres_header, cp.badge_expiry, cp.badge_type, cp.badge_verified, cp.badge_extra, cp.badge_master_key, cp.badge_signature, cp.badge_key_idx, -- Connection c.connection_id, c.agent_conn_id, c.conn_level, c.via_contact, c.via_user_contact_link, c.via_group_link, c.group_link_id, c.xcontact_id, c.custom_user_profile_id, c.conn_status, c.conn_type, c.contact_conn_initiated, c.local_alias, c.contact_id, c.group_member_id, c.user_contact_link_id, c.created_at, c.security_code, c.security_code_verified_at, c.pq_support, c.pq_encryption, c.pq_snd_enabled, c.pq_rcv_enabled, c.auth_err_counter, c.quota_err_counter, @@ -1930,6 +1949,7 @@ Query: cp.preferences, ct.user_preferences, ct.created_at, ct.updated_at, ct.chat_ts, ct.conn_full_link_to_connect, ct.conn_short_link_to_connect, ct.welcome_shared_msg_id, ct.request_shared_msg_id, ct.contact_request_id, ct.contact_group_member_id, ct.contact_grp_inv_sent, ct.grp_direct_inv_link, ct.grp_direct_inv_from_group_id, ct.grp_direct_inv_from_group_member_id, ct.grp_direct_inv_from_member_conn_id, ct.grp_direct_inv_started_connection, ct.ui_themes, ct.chat_deleted, ct.custom_data, ct.chat_item_ttl, + cp.badge_proof, cp.badge_pres_header, cp.badge_expiry, cp.badge_type, cp.badge_verified, cp.badge_extra, cp.badge_master_key, cp.badge_signature, cp.badge_key_idx, -- Connection c.connection_id, c.agent_conn_id, c.conn_level, c.via_contact, c.via_user_contact_link, c.via_group_link, c.group_link_id, c.xcontact_id, c.custom_user_profile_id, c.conn_status, c.conn_type, c.contact_conn_initiated, c.local_alias, c.contact_id, c.group_member_id, c.user_contact_link_id, c.created_at, c.security_code, c.security_code_verified_at, c.pq_support, c.pq_encryption, c.pq_snd_enabled, c.pq_rcv_enabled, c.auth_err_counter, c.quota_err_counter, @@ -2011,10 +2031,11 @@ Query: SELECT cr.contact_request_id, cr.local_display_name, cr.agent_invitation_id, cr.contact_id, cr.business_group_id, cr.user_contact_link_id, - cr.contact_profile_id, p.display_name, p.full_name, p.short_descr, p.image, p.contact_link, p.chat_peer_type, cr.xcontact_id, + cr.contact_profile_id, p.display_name, p.full_name, p.short_descr, p.image, p.contact_link, p.chat_peer_type, p.local_alias, cr.xcontact_id, cr.pq_support, cr.welcome_shared_msg_id, cr.request_shared_msg_id, p.preferences, cr.created_at, cr.updated_at, - cr.peer_chat_min_version, cr.peer_chat_max_version + cr.peer_chat_min_version, cr.peer_chat_max_version, + p.badge_proof, p.badge_pres_header, p.badge_expiry, p.badge_type, p.badge_verified, p.badge_extra, p.badge_master_key, p.badge_signature, p.badge_key_idx FROM contact_requests cr JOIN contact_profiles p ON p.contact_profile_id = cr.contact_profile_id JOIN user_contact_links uc ON uc.user_contact_link_id = cr.user_contact_link_id @@ -2040,10 +2061,11 @@ Query: SELECT cr.contact_request_id, cr.local_display_name, cr.agent_invitation_id, cr.contact_id, cr.business_group_id, cr.user_contact_link_id, - cr.contact_profile_id, p.display_name, p.full_name, p.short_descr, p.image, p.contact_link, p.chat_peer_type, cr.xcontact_id, + cr.contact_profile_id, p.display_name, p.full_name, p.short_descr, p.image, p.contact_link, p.chat_peer_type, p.local_alias, cr.xcontact_id, cr.pq_support, cr.welcome_shared_msg_id, cr.request_shared_msg_id, p.preferences, cr.created_at, cr.updated_at, - cr.peer_chat_min_version, cr.peer_chat_max_version + cr.peer_chat_min_version, cr.peer_chat_max_version, + p.badge_proof, p.badge_pres_header, p.badge_expiry, p.badge_type, p.badge_verified, p.badge_extra, p.badge_master_key, p.badge_signature, p.badge_key_idx FROM contact_requests cr JOIN contact_profiles p ON p.contact_profile_id = cr.contact_profile_id JOIN user_contact_links uc ON uc.user_contact_link_id = cr.user_contact_link_id @@ -2069,10 +2091,11 @@ Query: SELECT cr.contact_request_id, cr.local_display_name, cr.agent_invitation_id, cr.contact_id, cr.business_group_id, cr.user_contact_link_id, - cr.contact_profile_id, p.display_name, p.full_name, p.short_descr, p.image, p.contact_link, p.chat_peer_type, cr.xcontact_id, + cr.contact_profile_id, p.display_name, p.full_name, p.short_descr, p.image, p.contact_link, p.chat_peer_type, p.local_alias, cr.xcontact_id, cr.pq_support, cr.welcome_shared_msg_id, cr.request_shared_msg_id, p.preferences, cr.created_at, cr.updated_at, - cr.peer_chat_min_version, cr.peer_chat_max_version + cr.peer_chat_min_version, cr.peer_chat_max_version, + p.badge_proof, p.badge_pres_header, p.badge_expiry, p.badge_type, p.badge_verified, p.badge_extra, p.badge_master_key, p.badge_signature, p.badge_key_idx FROM contact_requests cr JOIN contact_profiles p ON p.contact_profile_id = cr.contact_profile_id JOIN user_contact_links uc ON uc.user_contact_link_id = cr.user_contact_link_id @@ -3602,7 +3625,8 @@ Plan: SEARCH connections USING INTEGER PRIMARY KEY (rowid=?) Query: - SELECT cp.contact_profile_id, cp.display_name, cp.full_name, cp.short_descr, cp.image, cp.contact_link, cp.chat_peer_type, cp.local_alias, cp.preferences -- , ct.user_preferences + SELECT cp.contact_profile_id, cp.display_name, cp.full_name, cp.short_descr, cp.image, cp.contact_link, cp.chat_peer_type, cp.local_alias, cp.preferences, + cp.badge_proof, cp.badge_pres_header, cp.badge_expiry, cp.badge_type, cp.badge_verified, cp.badge_extra, cp.badge_master_key, cp.badge_signature, cp.badge_key_idx FROM contact_profiles cp WHERE cp.user_id = ? AND cp.contact_profile_id = ? @@ -4976,6 +5000,14 @@ Query: Plan: SEARCH connections_sync USING INTEGER PRIMARY KEY (rowid=?) +Query: + UPDATE contact_profiles + SET badge_proof = ?, badge_pres_header = ?, badge_expiry = ?, badge_type = ?, badge_verified = ?, badge_extra = ?, badge_master_key = ?, badge_signature = ?, badge_key_idx = ?, updated_at = ? + WHERE user_id = ? AND contact_profile_id = ? + +Plan: +SEARCH contact_profiles USING INTEGER PRIMARY KEY (rowid=?) + Query: UPDATE contact_profiles SET contact_link = ?, updated_at = ? @@ -4994,7 +5026,8 @@ SEARCH contact_profiles USING INTEGER PRIMARY KEY (rowid=?) Query: UPDATE contact_profiles - SET display_name = ?, full_name = ?, short_descr = ?, image = ?, contact_link = NULL, preferences = NULL, updated_at = ? + SET display_name = ?, full_name = ?, short_descr = ?, image = ?, contact_link = ?, preferences = ?, chat_peer_type = ?, updated_at = ?, + badge_proof = ?, badge_pres_header = ?, badge_expiry = ?, badge_type = ?, badge_verified = ?, badge_extra = ?, badge_master_key = ?, badge_signature = ?, badge_key_idx = ? WHERE user_id = ? AND contact_profile_id = ? Plan: @@ -5002,7 +5035,17 @@ SEARCH contact_profiles USING INTEGER PRIMARY KEY (rowid=?) Query: UPDATE contact_profiles - SET display_name = ?, full_name = ?, short_descr = ?, image = ?, updated_at = ? + SET display_name = ?, full_name = ?, short_descr = ?, image = ?, contact_link = NULL, preferences = NULL, updated_at = ?, + badge_proof = ?, badge_pres_header = ?, badge_expiry = ?, badge_type = ?, badge_verified = ?, badge_extra = ?, badge_master_key = ?, badge_signature = ?, badge_key_idx = ? + WHERE user_id = ? AND contact_profile_id = ? + +Plan: +SEARCH contact_profiles USING INTEGER PRIMARY KEY (rowid=?) + +Query: + UPDATE contact_profiles + SET display_name = ?, full_name = ?, short_descr = ?, image = ?, updated_at = ?, + badge_proof = ?, badge_pres_header = ?, badge_expiry = ?, badge_type = ?, badge_verified = ?, badge_extra = ?, badge_master_key = ?, badge_signature = ?, badge_key_idx = ? WHERE user_id = ? AND contact_profile_id = ? Plan: @@ -5319,6 +5362,7 @@ Query: mu.group_member_id, mu.group_id, mu.index_in_group, mu.member_id, mu.peer_chat_min_version, mu.peer_chat_max_version, mu.member_role, mu.member_category, mu.member_status, mu.show_messages, mu.member_restriction, mu.invited_by, mu.invited_by_group_member_id, mu.local_display_name, mu.contact_id, mu.contact_profile_id, pu.contact_profile_id, pu.display_name, pu.full_name, pu.short_descr, pu.image, pu.contact_link, pu.chat_peer_type, pu.local_alias, pu.preferences, + pu.badge_proof, pu.badge_pres_header, pu.badge_expiry, pu.badge_type, pu.badge_verified, pu.badge_extra, pu.badge_master_key, pu.badge_signature, pu.badge_key_idx, mu.created_at, mu.updated_at, mu.support_chat_ts, mu.support_chat_items_unread, mu.support_chat_items_member_attention, mu.support_chat_items_mentions, mu.support_chat_last_msg_from_member_ts, mu.member_pub_key, mu.relay_link @@ -5356,6 +5400,7 @@ Query: mu.group_member_id, mu.group_id, mu.index_in_group, mu.member_id, mu.peer_chat_min_version, mu.peer_chat_max_version, mu.member_role, mu.member_category, mu.member_status, mu.show_messages, mu.member_restriction, mu.invited_by, mu.invited_by_group_member_id, mu.local_display_name, mu.contact_id, mu.contact_profile_id, pu.contact_profile_id, pu.display_name, pu.full_name, pu.short_descr, pu.image, pu.contact_link, pu.chat_peer_type, pu.local_alias, pu.preferences, + pu.badge_proof, pu.badge_pres_header, pu.badge_expiry, pu.badge_type, pu.badge_verified, pu.badge_extra, pu.badge_master_key, pu.badge_signature, pu.badge_key_idx, mu.created_at, mu.updated_at, mu.support_chat_ts, mu.support_chat_items_unread, mu.support_chat_items_member_attention, mu.support_chat_items_mentions, mu.support_chat_last_msg_from_member_ts, mu.member_pub_key, mu.relay_link @@ -5386,6 +5431,7 @@ Query: mu.group_member_id, mu.group_id, mu.index_in_group, mu.member_id, mu.peer_chat_min_version, mu.peer_chat_max_version, mu.member_role, mu.member_category, mu.member_status, mu.show_messages, mu.member_restriction, mu.invited_by, mu.invited_by_group_member_id, mu.local_display_name, mu.contact_id, mu.contact_profile_id, pu.contact_profile_id, pu.display_name, pu.full_name, pu.short_descr, pu.image, pu.contact_link, pu.chat_peer_type, pu.local_alias, pu.preferences, + pu.badge_proof, pu.badge_pres_header, pu.badge_expiry, pu.badge_type, pu.badge_verified, pu.badge_extra, pu.badge_master_key, pu.badge_signature, pu.badge_key_idx, mu.created_at, mu.updated_at, mu.support_chat_ts, mu.support_chat_items_unread, mu.support_chat_items_member_attention, mu.support_chat_items_mentions, mu.support_chat_last_msg_from_member_ts, mu.member_pub_key, mu.relay_link @@ -5404,10 +5450,11 @@ Query: SELECT cr.contact_request_id, cr.local_display_name, cr.agent_invitation_id, cr.contact_id, cr.business_group_id, cr.user_contact_link_id, - cr.contact_profile_id, p.display_name, p.full_name, p.short_descr, p.image, p.contact_link, p.chat_peer_type, cr.xcontact_id, + cr.contact_profile_id, p.display_name, p.full_name, p.short_descr, p.image, p.contact_link, p.chat_peer_type, p.local_alias, cr.xcontact_id, cr.pq_support, cr.welcome_shared_msg_id, cr.request_shared_msg_id, p.preferences, cr.created_at, cr.updated_at, - cr.peer_chat_min_version, cr.peer_chat_max_version + cr.peer_chat_min_version, cr.peer_chat_max_version, + p.badge_proof, p.badge_pres_header, p.badge_expiry, p.badge_type, p.badge_verified, p.badge_extra, p.badge_master_key, p.badge_signature, p.badge_key_idx FROM contact_requests cr JOIN contact_profiles p USING (contact_profile_id) WHERE cr.business_group_id = ? @@ -5419,10 +5466,11 @@ Query: SELECT cr.contact_request_id, cr.local_display_name, cr.agent_invitation_id, cr.contact_id, cr.business_group_id, cr.user_contact_link_id, - cr.contact_profile_id, p.display_name, p.full_name, p.short_descr, p.image, p.contact_link, p.chat_peer_type, cr.xcontact_id, + cr.contact_profile_id, p.display_name, p.full_name, p.short_descr, p.image, p.contact_link, p.chat_peer_type, p.local_alias, cr.xcontact_id, cr.pq_support, cr.welcome_shared_msg_id, cr.request_shared_msg_id, p.preferences, cr.created_at, cr.updated_at, - cr.peer_chat_min_version, cr.peer_chat_max_version + cr.peer_chat_min_version, cr.peer_chat_max_version, + p.badge_proof, p.badge_pres_header, p.badge_expiry, p.badge_type, p.badge_verified, p.badge_extra, p.badge_master_key, p.badge_signature, p.badge_key_idx FROM contact_requests cr JOIN contact_profiles p USING (contact_profile_id) WHERE cr.user_id = ? AND cr.contact_request_id = ? @@ -5434,6 +5482,7 @@ Query: SELECT m.group_member_id, m.group_id, m.index_in_group, m.member_id, m.peer_chat_min_version, m.peer_chat_max_version, m.member_role, m.member_category, m.member_status, m.show_messages, m.member_restriction, m.invited_by, m.invited_by_group_member_id, m.local_display_name, m.contact_id, m.contact_profile_id, p.contact_profile_id, p.display_name, p.full_name, p.short_descr, p.image, p.contact_link, p.chat_peer_type, p.local_alias, p.preferences, + p.badge_proof, p.badge_pres_header, p.badge_expiry, p.badge_type, p.badge_verified, p.badge_extra, p.badge_master_key, p.badge_signature, p.badge_key_idx, m.created_at, m.updated_at, m.support_chat_ts, m.support_chat_items_unread, m.support_chat_items_member_attention, m.support_chat_items_mentions, m.support_chat_last_msg_from_member_ts, m.member_pub_key, m.relay_link, c.connection_id, c.agent_conn_id, c.conn_level, c.via_contact, c.via_user_contact_link, c.via_group_link, c.group_link_id, c.xcontact_id, c.custom_user_profile_id, @@ -5461,6 +5510,7 @@ Query: SELECT m.group_member_id, m.group_id, m.index_in_group, m.member_id, m.peer_chat_min_version, m.peer_chat_max_version, m.member_role, m.member_category, m.member_status, m.show_messages, m.member_restriction, m.invited_by, m.invited_by_group_member_id, m.local_display_name, m.contact_id, m.contact_profile_id, p.contact_profile_id, p.display_name, p.full_name, p.short_descr, p.image, p.contact_link, p.chat_peer_type, p.local_alias, p.preferences, + p.badge_proof, p.badge_pres_header, p.badge_expiry, p.badge_type, p.badge_verified, p.badge_extra, p.badge_master_key, p.badge_signature, p.badge_key_idx, m.created_at, m.updated_at, m.support_chat_ts, m.support_chat_items_unread, m.support_chat_items_member_attention, m.support_chat_items_mentions, m.support_chat_last_msg_from_member_ts, m.member_pub_key, m.relay_link, c.connection_id, c.agent_conn_id, c.conn_level, c.via_contact, c.via_user_contact_link, c.via_group_link, c.group_link_id, c.xcontact_id, c.custom_user_profile_id, @@ -5481,6 +5531,7 @@ Query: SELECT m.group_member_id, m.group_id, m.index_in_group, m.member_id, m.peer_chat_min_version, m.peer_chat_max_version, m.member_role, m.member_category, m.member_status, m.show_messages, m.member_restriction, m.invited_by, m.invited_by_group_member_id, m.local_display_name, m.contact_id, m.contact_profile_id, p.contact_profile_id, p.display_name, p.full_name, p.short_descr, p.image, p.contact_link, p.chat_peer_type, p.local_alias, p.preferences, + p.badge_proof, p.badge_pres_header, p.badge_expiry, p.badge_type, p.badge_verified, p.badge_extra, p.badge_master_key, p.badge_signature, p.badge_key_idx, m.created_at, m.updated_at, m.support_chat_ts, m.support_chat_items_unread, m.support_chat_items_member_attention, m.support_chat_items_mentions, m.support_chat_last_msg_from_member_ts, m.member_pub_key, m.relay_link, c.connection_id, c.agent_conn_id, c.conn_level, c.via_contact, c.via_user_contact_link, c.via_group_link, c.group_link_id, c.xcontact_id, c.custom_user_profile_id, @@ -5500,6 +5551,7 @@ Query: SELECT m.group_member_id, m.group_id, m.index_in_group, m.member_id, m.peer_chat_min_version, m.peer_chat_max_version, m.member_role, m.member_category, m.member_status, m.show_messages, m.member_restriction, m.invited_by, m.invited_by_group_member_id, m.local_display_name, m.contact_id, m.contact_profile_id, p.contact_profile_id, p.display_name, p.full_name, p.short_descr, p.image, p.contact_link, p.chat_peer_type, p.local_alias, p.preferences, + p.badge_proof, p.badge_pres_header, p.badge_expiry, p.badge_type, p.badge_verified, p.badge_extra, p.badge_master_key, p.badge_signature, p.badge_key_idx, m.created_at, m.updated_at, m.support_chat_ts, m.support_chat_items_unread, m.support_chat_items_member_attention, m.support_chat_items_mentions, m.support_chat_last_msg_from_member_ts, m.member_pub_key, m.relay_link, c.connection_id, c.agent_conn_id, c.conn_level, c.via_contact, c.via_user_contact_link, c.via_group_link, c.group_link_id, c.xcontact_id, c.custom_user_profile_id, @@ -5519,6 +5571,7 @@ Query: SELECT m.group_member_id, m.group_id, m.index_in_group, m.member_id, m.peer_chat_min_version, m.peer_chat_max_version, m.member_role, m.member_category, m.member_status, m.show_messages, m.member_restriction, m.invited_by, m.invited_by_group_member_id, m.local_display_name, m.contact_id, m.contact_profile_id, p.contact_profile_id, p.display_name, p.full_name, p.short_descr, p.image, p.contact_link, p.chat_peer_type, p.local_alias, p.preferences, + p.badge_proof, p.badge_pres_header, p.badge_expiry, p.badge_type, p.badge_verified, p.badge_extra, p.badge_master_key, p.badge_signature, p.badge_key_idx, m.created_at, m.updated_at, m.support_chat_ts, m.support_chat_items_unread, m.support_chat_items_member_attention, m.support_chat_items_mentions, m.support_chat_last_msg_from_member_ts, m.member_pub_key, m.relay_link, c.connection_id, c.agent_conn_id, c.conn_level, c.via_contact, c.via_user_contact_link, c.via_group_link, c.group_link_id, c.xcontact_id, c.custom_user_profile_id, @@ -5538,6 +5591,7 @@ Query: SELECT m.group_member_id, m.group_id, m.index_in_group, m.member_id, m.peer_chat_min_version, m.peer_chat_max_version, m.member_role, m.member_category, m.member_status, m.show_messages, m.member_restriction, m.invited_by, m.invited_by_group_member_id, m.local_display_name, m.contact_id, m.contact_profile_id, p.contact_profile_id, p.display_name, p.full_name, p.short_descr, p.image, p.contact_link, p.chat_peer_type, p.local_alias, p.preferences, + p.badge_proof, p.badge_pres_header, p.badge_expiry, p.badge_type, p.badge_verified, p.badge_extra, p.badge_master_key, p.badge_signature, p.badge_key_idx, m.created_at, m.updated_at, m.support_chat_ts, m.support_chat_items_unread, m.support_chat_items_member_attention, m.support_chat_items_mentions, m.support_chat_last_msg_from_member_ts, m.member_pub_key, m.relay_link, c.connection_id, c.agent_conn_id, c.conn_level, c.via_contact, c.via_user_contact_link, c.via_group_link, c.group_link_id, c.xcontact_id, c.custom_user_profile_id, @@ -5557,6 +5611,7 @@ Query: SELECT m.group_member_id, m.group_id, m.index_in_group, m.member_id, m.peer_chat_min_version, m.peer_chat_max_version, m.member_role, m.member_category, m.member_status, m.show_messages, m.member_restriction, m.invited_by, m.invited_by_group_member_id, m.local_display_name, m.contact_id, m.contact_profile_id, p.contact_profile_id, p.display_name, p.full_name, p.short_descr, p.image, p.contact_link, p.chat_peer_type, p.local_alias, p.preferences, + p.badge_proof, p.badge_pres_header, p.badge_expiry, p.badge_type, p.badge_verified, p.badge_extra, p.badge_master_key, p.badge_signature, p.badge_key_idx, m.created_at, m.updated_at, m.support_chat_ts, m.support_chat_items_unread, m.support_chat_items_member_attention, m.support_chat_items_mentions, m.support_chat_last_msg_from_member_ts, m.member_pub_key, m.relay_link, c.connection_id, c.agent_conn_id, c.conn_level, c.via_contact, c.via_user_contact_link, c.via_group_link, c.group_link_id, c.xcontact_id, c.custom_user_profile_id, @@ -5576,6 +5631,7 @@ Query: SELECT m.group_member_id, m.group_id, m.index_in_group, m.member_id, m.peer_chat_min_version, m.peer_chat_max_version, m.member_role, m.member_category, m.member_status, m.show_messages, m.member_restriction, m.invited_by, m.invited_by_group_member_id, m.local_display_name, m.contact_id, m.contact_profile_id, p.contact_profile_id, p.display_name, p.full_name, p.short_descr, p.image, p.contact_link, p.chat_peer_type, p.local_alias, p.preferences, + p.badge_proof, p.badge_pres_header, p.badge_expiry, p.badge_type, p.badge_verified, p.badge_extra, p.badge_master_key, p.badge_signature, p.badge_key_idx, m.created_at, m.updated_at, m.support_chat_ts, m.support_chat_items_unread, m.support_chat_items_member_attention, m.support_chat_items_mentions, m.support_chat_last_msg_from_member_ts, m.member_pub_key, m.relay_link, c.connection_id, c.agent_conn_id, c.conn_level, c.via_contact, c.via_user_contact_link, c.via_group_link, c.group_link_id, c.xcontact_id, c.custom_user_profile_id, @@ -5595,6 +5651,7 @@ Query: SELECT m.group_member_id, m.group_id, m.index_in_group, m.member_id, m.peer_chat_min_version, m.peer_chat_max_version, m.member_role, m.member_category, m.member_status, m.show_messages, m.member_restriction, m.invited_by, m.invited_by_group_member_id, m.local_display_name, m.contact_id, m.contact_profile_id, p.contact_profile_id, p.display_name, p.full_name, p.short_descr, p.image, p.contact_link, p.chat_peer_type, p.local_alias, p.preferences, + p.badge_proof, p.badge_pres_header, p.badge_expiry, p.badge_type, p.badge_verified, p.badge_extra, p.badge_master_key, p.badge_signature, p.badge_key_idx, m.created_at, m.updated_at, m.support_chat_ts, m.support_chat_items_unread, m.support_chat_items_member_attention, m.support_chat_items_mentions, m.support_chat_last_msg_from_member_ts, m.member_pub_key, m.relay_link, c.connection_id, c.agent_conn_id, c.conn_level, c.via_contact, c.via_user_contact_link, c.via_group_link, c.group_link_id, c.xcontact_id, c.custom_user_profile_id, @@ -5614,6 +5671,7 @@ Query: SELECT m.group_member_id, m.group_id, m.index_in_group, m.member_id, m.peer_chat_min_version, m.peer_chat_max_version, m.member_role, m.member_category, m.member_status, m.show_messages, m.member_restriction, m.invited_by, m.invited_by_group_member_id, m.local_display_name, m.contact_id, m.contact_profile_id, p.contact_profile_id, p.display_name, p.full_name, p.short_descr, p.image, p.contact_link, p.chat_peer_type, p.local_alias, p.preferences, + p.badge_proof, p.badge_pres_header, p.badge_expiry, p.badge_type, p.badge_verified, p.badge_extra, p.badge_master_key, p.badge_signature, p.badge_key_idx, m.created_at, m.updated_at, m.support_chat_ts, m.support_chat_items_unread, m.support_chat_items_member_attention, m.support_chat_items_mentions, m.support_chat_last_msg_from_member_ts, m.member_pub_key, m.relay_link, c.connection_id, c.agent_conn_id, c.conn_level, c.via_contact, c.via_user_contact_link, c.via_group_link, c.group_link_id, c.xcontact_id, c.custom_user_profile_id, @@ -5633,6 +5691,7 @@ Query: SELECT m.group_member_id, m.group_id, m.index_in_group, m.member_id, m.peer_chat_min_version, m.peer_chat_max_version, m.member_role, m.member_category, m.member_status, m.show_messages, m.member_restriction, m.invited_by, m.invited_by_group_member_id, m.local_display_name, m.contact_id, m.contact_profile_id, p.contact_profile_id, p.display_name, p.full_name, p.short_descr, p.image, p.contact_link, p.chat_peer_type, p.local_alias, p.preferences, + p.badge_proof, p.badge_pres_header, p.badge_expiry, p.badge_type, p.badge_verified, p.badge_extra, p.badge_master_key, p.badge_signature, p.badge_key_idx, m.created_at, m.updated_at, m.support_chat_ts, m.support_chat_items_unread, m.support_chat_items_member_attention, m.support_chat_items_mentions, m.support_chat_last_msg_from_member_ts, m.member_pub_key, m.relay_link, c.connection_id, c.agent_conn_id, c.conn_level, c.via_contact, c.via_user_contact_link, c.via_group_link, c.group_link_id, c.xcontact_id, c.custom_user_profile_id, @@ -5823,7 +5882,8 @@ SEARCH server_operators USING INTEGER PRIMARY KEY (rowid=?) Query: SELECT u.user_id, u.agent_user_id, u.contact_id, ucp.contact_profile_id, u.active_user, u.active_order, u.local_display_name, ucp.full_name, ucp.short_descr, ucp.image, ucp.contact_link, ucp.chat_peer_type, ucp.preferences, - u.show_ntfs, u.send_rcpts_contacts, u.send_rcpts_small_groups, u.auto_accept_member_contacts, u.view_pwd_hash, u.view_pwd_salt, u.user_member_profile_updated_at, u.ui_themes, u.is_user_chat_relay + u.show_ntfs, u.send_rcpts_contacts, u.send_rcpts_small_groups, u.auto_accept_member_contacts, u.view_pwd_hash, u.view_pwd_salt, u.user_member_profile_updated_at, u.ui_themes, u.is_user_chat_relay, + ucp.badge_proof, ucp.badge_pres_header, ucp.badge_expiry, ucp.badge_type, ucp.badge_verified, ucp.badge_extra, ucp.badge_master_key, ucp.badge_signature, ucp.badge_key_idx FROM users u JOIN contacts uct ON uct.contact_id = u.contact_id JOIN contact_profiles ucp ON ucp.contact_profile_id = uct.contact_profile_id @@ -5835,7 +5895,8 @@ SEARCH ucp USING INTEGER PRIMARY KEY (rowid=?) Query: SELECT u.user_id, u.agent_user_id, u.contact_id, ucp.contact_profile_id, u.active_user, u.active_order, u.local_display_name, ucp.full_name, ucp.short_descr, ucp.image, ucp.contact_link, ucp.chat_peer_type, ucp.preferences, - u.show_ntfs, u.send_rcpts_contacts, u.send_rcpts_small_groups, u.auto_accept_member_contacts, u.view_pwd_hash, u.view_pwd_salt, u.user_member_profile_updated_at, u.ui_themes, u.is_user_chat_relay + u.show_ntfs, u.send_rcpts_contacts, u.send_rcpts_small_groups, u.auto_accept_member_contacts, u.view_pwd_hash, u.view_pwd_salt, u.user_member_profile_updated_at, u.ui_themes, u.is_user_chat_relay, + ucp.badge_proof, ucp.badge_pres_header, ucp.badge_expiry, ucp.badge_type, ucp.badge_verified, ucp.badge_extra, ucp.badge_master_key, ucp.badge_signature, ucp.badge_key_idx FROM users u JOIN contacts uct ON uct.contact_id = u.contact_id JOIN contact_profiles ucp ON ucp.contact_profile_id = uct.contact_profile_id @@ -5848,7 +5909,8 @@ SEARCH ucp USING INTEGER PRIMARY KEY (rowid=?) Query: SELECT u.user_id, u.agent_user_id, u.contact_id, ucp.contact_profile_id, u.active_user, u.active_order, u.local_display_name, ucp.full_name, ucp.short_descr, ucp.image, ucp.contact_link, ucp.chat_peer_type, ucp.preferences, - u.show_ntfs, u.send_rcpts_contacts, u.send_rcpts_small_groups, u.auto_accept_member_contacts, u.view_pwd_hash, u.view_pwd_salt, u.user_member_profile_updated_at, u.ui_themes, u.is_user_chat_relay + u.show_ntfs, u.send_rcpts_contacts, u.send_rcpts_small_groups, u.auto_accept_member_contacts, u.view_pwd_hash, u.view_pwd_salt, u.user_member_profile_updated_at, u.ui_themes, u.is_user_chat_relay, + ucp.badge_proof, ucp.badge_pres_header, ucp.badge_expiry, ucp.badge_type, ucp.badge_verified, ucp.badge_extra, ucp.badge_master_key, ucp.badge_signature, ucp.badge_key_idx FROM users u JOIN contacts uct ON uct.contact_id = u.contact_id JOIN contact_profiles ucp ON ucp.contact_profile_id = uct.contact_profile_id @@ -5861,7 +5923,8 @@ SEARCH ucp USING INTEGER PRIMARY KEY (rowid=?) Query: SELECT u.user_id, u.agent_user_id, u.contact_id, ucp.contact_profile_id, u.active_user, u.active_order, u.local_display_name, ucp.full_name, ucp.short_descr, ucp.image, ucp.contact_link, ucp.chat_peer_type, ucp.preferences, - u.show_ntfs, u.send_rcpts_contacts, u.send_rcpts_small_groups, u.auto_accept_member_contacts, u.view_pwd_hash, u.view_pwd_salt, u.user_member_profile_updated_at, u.ui_themes, u.is_user_chat_relay + u.show_ntfs, u.send_rcpts_contacts, u.send_rcpts_small_groups, u.auto_accept_member_contacts, u.view_pwd_hash, u.view_pwd_salt, u.user_member_profile_updated_at, u.ui_themes, u.is_user_chat_relay, + ucp.badge_proof, ucp.badge_pres_header, ucp.badge_expiry, ucp.badge_type, ucp.badge_verified, ucp.badge_extra, ucp.badge_master_key, ucp.badge_signature, ucp.badge_key_idx FROM users u JOIN contacts uct ON uct.contact_id = u.contact_id JOIN contact_profiles ucp ON ucp.contact_profile_id = uct.contact_profile_id @@ -5875,7 +5938,8 @@ SEARCH ucp USING INTEGER PRIMARY KEY (rowid=?) Query: SELECT u.user_id, u.agent_user_id, u.contact_id, ucp.contact_profile_id, u.active_user, u.active_order, u.local_display_name, ucp.full_name, ucp.short_descr, ucp.image, ucp.contact_link, ucp.chat_peer_type, ucp.preferences, - u.show_ntfs, u.send_rcpts_contacts, u.send_rcpts_small_groups, u.auto_accept_member_contacts, u.view_pwd_hash, u.view_pwd_salt, u.user_member_profile_updated_at, u.ui_themes, u.is_user_chat_relay + u.show_ntfs, u.send_rcpts_contacts, u.send_rcpts_small_groups, u.auto_accept_member_contacts, u.view_pwd_hash, u.view_pwd_salt, u.user_member_profile_updated_at, u.ui_themes, u.is_user_chat_relay, + ucp.badge_proof, ucp.badge_pres_header, ucp.badge_expiry, ucp.badge_type, ucp.badge_verified, ucp.badge_extra, ucp.badge_master_key, ucp.badge_signature, ucp.badge_key_idx FROM users u JOIN contacts uct ON uct.contact_id = u.contact_id JOIN contact_profiles ucp ON ucp.contact_profile_id = uct.contact_profile_id @@ -5888,7 +5952,8 @@ SEARCH ucp USING INTEGER PRIMARY KEY (rowid=?) Query: SELECT u.user_id, u.agent_user_id, u.contact_id, ucp.contact_profile_id, u.active_user, u.active_order, u.local_display_name, ucp.full_name, ucp.short_descr, ucp.image, ucp.contact_link, ucp.chat_peer_type, ucp.preferences, - u.show_ntfs, u.send_rcpts_contacts, u.send_rcpts_small_groups, u.auto_accept_member_contacts, u.view_pwd_hash, u.view_pwd_salt, u.user_member_profile_updated_at, u.ui_themes, u.is_user_chat_relay + u.show_ntfs, u.send_rcpts_contacts, u.send_rcpts_small_groups, u.auto_accept_member_contacts, u.view_pwd_hash, u.view_pwd_salt, u.user_member_profile_updated_at, u.ui_themes, u.is_user_chat_relay, + ucp.badge_proof, ucp.badge_pres_header, ucp.badge_expiry, ucp.badge_type, ucp.badge_verified, ucp.badge_extra, ucp.badge_master_key, ucp.badge_signature, ucp.badge_key_idx FROM users u JOIN contacts uct ON uct.contact_id = u.contact_id JOIN contact_profiles ucp ON ucp.contact_profile_id = uct.contact_profile_id @@ -5901,7 +5966,8 @@ SEARCH ucp USING INTEGER PRIMARY KEY (rowid=?) Query: SELECT u.user_id, u.agent_user_id, u.contact_id, ucp.contact_profile_id, u.active_user, u.active_order, u.local_display_name, ucp.full_name, ucp.short_descr, ucp.image, ucp.contact_link, ucp.chat_peer_type, ucp.preferences, - u.show_ntfs, u.send_rcpts_contacts, u.send_rcpts_small_groups, u.auto_accept_member_contacts, u.view_pwd_hash, u.view_pwd_salt, u.user_member_profile_updated_at, u.ui_themes, u.is_user_chat_relay + u.show_ntfs, u.send_rcpts_contacts, u.send_rcpts_small_groups, u.auto_accept_member_contacts, u.view_pwd_hash, u.view_pwd_salt, u.user_member_profile_updated_at, u.ui_themes, u.is_user_chat_relay, + ucp.badge_proof, ucp.badge_pres_header, ucp.badge_expiry, ucp.badge_type, ucp.badge_verified, ucp.badge_extra, ucp.badge_master_key, ucp.badge_signature, ucp.badge_key_idx FROM users u JOIN contacts uct ON uct.contact_id = u.contact_id JOIN contact_profiles ucp ON ucp.contact_profile_id = uct.contact_profile_id @@ -5914,7 +5980,8 @@ SEARCH ucp USING INTEGER PRIMARY KEY (rowid=?) Query: SELECT u.user_id, u.agent_user_id, u.contact_id, ucp.contact_profile_id, u.active_user, u.active_order, u.local_display_name, ucp.full_name, ucp.short_descr, ucp.image, ucp.contact_link, ucp.chat_peer_type, ucp.preferences, - u.show_ntfs, u.send_rcpts_contacts, u.send_rcpts_small_groups, u.auto_accept_member_contacts, u.view_pwd_hash, u.view_pwd_salt, u.user_member_profile_updated_at, u.ui_themes, u.is_user_chat_relay + u.show_ntfs, u.send_rcpts_contacts, u.send_rcpts_small_groups, u.auto_accept_member_contacts, u.view_pwd_hash, u.view_pwd_salt, u.user_member_profile_updated_at, u.ui_themes, u.is_user_chat_relay, + ucp.badge_proof, ucp.badge_pres_header, ucp.badge_expiry, ucp.badge_type, ucp.badge_verified, ucp.badge_extra, ucp.badge_master_key, ucp.badge_signature, ucp.badge_key_idx FROM users u JOIN contacts uct ON uct.contact_id = u.contact_id JOIN contact_profiles ucp ON ucp.contact_profile_id = uct.contact_profile_id @@ -5927,7 +5994,8 @@ SEARCH ucp USING INTEGER PRIMARY KEY (rowid=?) Query: SELECT u.user_id, u.agent_user_id, u.contact_id, ucp.contact_profile_id, u.active_user, u.active_order, u.local_display_name, ucp.full_name, ucp.short_descr, ucp.image, ucp.contact_link, ucp.chat_peer_type, ucp.preferences, - u.show_ntfs, u.send_rcpts_contacts, u.send_rcpts_small_groups, u.auto_accept_member_contacts, u.view_pwd_hash, u.view_pwd_salt, u.user_member_profile_updated_at, u.ui_themes, u.is_user_chat_relay + u.show_ntfs, u.send_rcpts_contacts, u.send_rcpts_small_groups, u.auto_accept_member_contacts, u.view_pwd_hash, u.view_pwd_salt, u.user_member_profile_updated_at, u.ui_themes, u.is_user_chat_relay, + ucp.badge_proof, ucp.badge_pres_header, ucp.badge_expiry, ucp.badge_type, ucp.badge_verified, ucp.badge_extra, ucp.badge_master_key, ucp.badge_signature, ucp.badge_key_idx FROM users u JOIN contacts uct ON uct.contact_id = u.contact_id JOIN contact_profiles ucp ON ucp.contact_profile_id = uct.contact_profile_id @@ -5939,7 +6007,8 @@ SEARCH ucp USING INTEGER PRIMARY KEY (rowid=?) Query: SELECT u.user_id, u.agent_user_id, u.contact_id, ucp.contact_profile_id, u.active_user, u.active_order, u.local_display_name, ucp.full_name, ucp.short_descr, ucp.image, ucp.contact_link, ucp.chat_peer_type, ucp.preferences, - u.show_ntfs, u.send_rcpts_contacts, u.send_rcpts_small_groups, u.auto_accept_member_contacts, u.view_pwd_hash, u.view_pwd_salt, u.user_member_profile_updated_at, u.ui_themes, u.is_user_chat_relay + u.show_ntfs, u.send_rcpts_contacts, u.send_rcpts_small_groups, u.auto_accept_member_contacts, u.view_pwd_hash, u.view_pwd_salt, u.user_member_profile_updated_at, u.ui_themes, u.is_user_chat_relay, + ucp.badge_proof, ucp.badge_pres_header, ucp.badge_expiry, ucp.badge_type, ucp.badge_verified, ucp.badge_extra, ucp.badge_master_key, ucp.badge_signature, ucp.badge_key_idx FROM users u JOIN contacts uct ON uct.contact_id = u.contact_id JOIN contact_profiles ucp ON ucp.contact_profile_id = uct.contact_profile_id @@ -6531,11 +6600,15 @@ Query: INSERT INTO contact_profiles (display_name, full_name, short_descr, image Plan: SEARCH contact_requests USING COVERING INDEX idx_contact_requests_contact_profile_id (contact_profile_id=?) -Query: INSERT INTO contact_profiles (display_name, full_name, short_descr, image, contact_link, chat_peer_type, user_id, local_alias, preferences, created_at, updated_at) VALUES (?,?,?,?,?,?,?,?,?,?,?) +Query: INSERT INTO contact_profiles (display_name, full_name, short_descr, image, contact_link, chat_peer_type, user_id, local_alias, preferences, created_at, updated_at, badge_proof, badge_pres_header, badge_expiry, badge_type, badge_verified, badge_extra, badge_master_key, badge_signature, badge_key_idx) VALUES (?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?) Plan: SEARCH contact_requests USING COVERING INDEX idx_contact_requests_contact_profile_id (contact_profile_id=?) -Query: INSERT INTO contact_profiles (display_name, full_name, short_descr, image, contact_link, user_id, preferences, created_at, updated_at) VALUES (?,?,?,?,?,?,?,?,?) +Query: INSERT INTO contact_profiles (display_name, full_name, short_descr, image, contact_link, user_id, local_alias, preferences, created_at, updated_at, badge_proof, badge_pres_header, badge_expiry, badge_type, badge_verified, badge_extra, badge_master_key, badge_signature, badge_key_idx) VALUES (?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?) +Plan: +SEARCH contact_requests USING COVERING INDEX idx_contact_requests_contact_profile_id (contact_profile_id=?) + +Query: INSERT INTO contact_profiles (display_name, full_name, short_descr, image, contact_link, user_id, preferences, created_at, updated_at, badge_proof, badge_pres_header, badge_expiry, badge_type, badge_verified, badge_extra, badge_master_key, badge_signature, badge_key_idx) VALUES (?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?) Plan: SEARCH contact_requests USING COVERING INDEX idx_contact_requests_contact_profile_id (contact_profile_id=?) diff --git a/src/Simplex/Chat/Store/SQLite/Migrations/chat_schema.sql b/src/Simplex/Chat/Store/SQLite/Migrations/chat_schema.sql index ccff26b38d..2d7ea7ff70 100644 --- a/src/Simplex/Chat/Store/SQLite/Migrations/chat_schema.sql +++ b/src/Simplex/Chat/Store/SQLite/Migrations/chat_schema.sql @@ -19,7 +19,16 @@ CREATE TABLE contact_profiles( preferences TEXT, contact_link BLOB, short_descr TEXT, - chat_peer_type TEXT + chat_peer_type TEXT, + badge_proof BLOB, + badge_pres_header BLOB, + badge_expiry TEXT, + badge_type TEXT, + badge_verified INTEGER, + badge_extra TEXT, + badge_master_key BLOB, + badge_signature BLOB, + badge_key_idx INTEGER ) STRICT; CREATE TABLE users( user_id INTEGER PRIMARY KEY, diff --git a/src/Simplex/Chat/Store/Shared.hs b/src/Simplex/Chat/Store/Shared.hs index f7b525243c..bd0d22f379 100644 --- a/src/Simplex/Chat/Store/Shared.hs +++ b/src/Simplex/Chat/Store/Shared.hs @@ -32,6 +32,7 @@ import Data.Text (Text) import qualified Data.Text as T import Data.Time.Clock (UTCTime (..), getCurrentTime) import Data.Type.Equality +import Simplex.Chat.Badges (BadgeRow, badgeToRow, rowToBadge, verifyBadge_) import Simplex.Chat.Messages import Simplex.Chat.Remote.Types import Simplex.Chat.Types @@ -406,18 +407,19 @@ setCommandConnId db User {userId} cmdId connId = do |] (connId, updatedAt, userId, cmdId) -createContact :: DB.Connection -> User -> Profile -> ExceptT StoreError IO () -createContact db user profile = do +createContact :: DB.Connection -> StoreCxt -> User -> Profile -> ExceptT StoreError IO () +createContact db cxt user profile = do currentTs <- liftIO getCurrentTime - void $ createContact_ db user profile emptyChatPrefs Nothing "" currentTs + void $ createContact_ db cxt user profile emptyChatPrefs Nothing "" currentTs -createContact_ :: DB.Connection -> User -> Profile -> Preferences -> Maybe (ACreatedConnLink, Maybe SharedMsgId) -> LocalAlias -> UTCTime -> ExceptT StoreError IO ContactId -createContact_ db User {userId} Profile {displayName, fullName, shortDescr, image, contactLink, peerType, preferences} ctUserPreferences prepared localAlias currentTs = +createContact_ :: DB.Connection -> StoreCxt -> User -> Profile -> Preferences -> Maybe (ACreatedConnLink, Maybe SharedMsgId) -> LocalAlias -> UTCTime -> ExceptT StoreError IO ContactId +createContact_ db cxt User {userId} Profile {displayName, fullName, shortDescr, image, contactLink, peerType, badge, preferences} ctUserPreferences prepared localAlias currentTs = ExceptT . withLocalDisplayName db userId displayName $ \ldn -> do + badgeVerified <- verifyBadge_ (badgeKeys cxt) badge DB.execute db - "INSERT INTO contact_profiles (display_name, full_name, short_descr, image, contact_link, chat_peer_type, user_id, local_alias, preferences, created_at, updated_at) VALUES (?,?,?,?,?,?,?,?,?,?,?)" - ((displayName, fullName, shortDescr, image, contactLink, peerType) :. (userId, localAlias, preferences, currentTs, currentTs)) + "INSERT INTO contact_profiles (display_name, full_name, short_descr, image, contact_link, chat_peer_type, user_id, local_alias, preferences, created_at, updated_at, badge_proof, badge_pres_header, badge_expiry, badge_type, badge_verified, badge_extra, badge_master_key, badge_signature, badge_key_idx) VALUES (?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?)" + ((displayName, fullName, shortDescr, image, contactLink, peerType) :. (userId, localAlias, preferences, currentTs, currentTs) :. badgeToRow badge badgeVerified) profileId <- insertedRowId db DB.execute db @@ -484,13 +486,13 @@ type PreparedContactRow = (Maybe AConnectionRequestUri, Maybe AConnShortLink, Ma type GroupDirectInvitationRow = (Maybe ConnReqInvitation, Maybe GroupId, Maybe GroupMemberId, Maybe Int64, BoolInt) -type ContactRow' = (ProfileId, ContactName, ContactName, Text, Maybe Text, Maybe ImageData, Maybe ConnLinkContact, Maybe ChatPeerType, LocalAlias, BoolInt, ContactStatus) :. (Maybe MsgFilter, Maybe BoolInt, BoolInt, Maybe Preferences, Preferences, UTCTime, UTCTime, Maybe UTCTime) :. PreparedContactRow :. (Maybe Int64, Maybe GroupMemberId, BoolInt) :. GroupDirectInvitationRow :. (Maybe UIThemeEntityOverrides, BoolInt, Maybe CustomData, Maybe Int64) +type ContactRow' = (ProfileId, ContactName, ContactName, Text, Maybe Text, Maybe ImageData, Maybe ConnLinkContact, Maybe ChatPeerType, LocalAlias, BoolInt, ContactStatus) :. (Maybe MsgFilter, Maybe BoolInt, BoolInt, Maybe Preferences, Preferences, UTCTime, UTCTime, Maybe UTCTime) :. PreparedContactRow :. (Maybe Int64, Maybe GroupMemberId, BoolInt) :. GroupDirectInvitationRow :. (Maybe UIThemeEntityOverrides, BoolInt, Maybe CustomData, Maybe Int64) :. BadgeRow type ContactRow = Only ContactId :. ContactRow' -toContact :: StoreCxt -> User -> [ChatTagId] -> ContactRow :. MaybeConnectionRow -> Contact -toContact cxt user chatTags ((Only contactId :. (profileId, localDisplayName, displayName, fullName, shortDescr, image, contactLink, peerType, localAlias, BI contactUsed, contactStatus) :. (enableNtfs_, sendRcpts, BI favorite, preferences, userPreferences, createdAt, updatedAt, chatTs) :. preparedContactRow :. (contactRequestId, contactGroupMemberId, BI contactGrpInvSent) :. groupDirectInvRow :. (uiThemes, BI chatDeleted, customData, chatItemTTL)) :. connRow) = - let profile = LocalProfile {profileId, displayName, fullName, shortDescr, image, contactLink, peerType, preferences, localAlias} +toContact :: UTCTime -> StoreCxt -> User -> [ChatTagId] -> ContactRow :. MaybeConnectionRow -> Contact +toContact now cxt user chatTags ((Only contactId :. (profileId, localDisplayName, displayName, fullName, shortDescr, image, contactLink, peerType, localAlias, BI contactUsed, contactStatus) :. (enableNtfs_, sendRcpts, BI favorite, preferences, userPreferences, createdAt, updatedAt, chatTs) :. preparedContactRow :. (contactRequestId, contactGroupMemberId, BI contactGrpInvSent) :. groupDirectInvRow :. (uiThemes, BI chatDeleted, customData, chatItemTTL) :. badgeRow) :. connRow) = + let profile = LocalProfile {profileId, displayName, fullName, shortDescr, image, contactLink, peerType, localBadge = rowToBadge now badgeRow, preferences, localAlias} activeConn = toMaybeConnection cxt connRow chatSettings = ChatSettings {enableNtfs = fromMaybe MFAll enableNtfs_, sendRcpts = unBI <$> sendRcpts, favorite} incognito = maybe False connIncognito activeConn @@ -516,22 +518,24 @@ toGroupDirectInvitation (Just groupDirectInvLink, fromGroupId_, fromGroupMemberI Just $ GroupDirectInvitation {groupDirectInvLink, fromGroupId_, fromGroupMemberId_, fromGroupMemberConnId_, groupDirectInvStartedConnection} getProfileById :: DB.Connection -> UserId -> Int64 -> ExceptT StoreError IO LocalProfile -getProfileById db userId profileId = - ExceptT . firstRow rowToLocalProfile (SEProfileNotFound profileId) $ +getProfileById db userId profileId = do + currentTs <- liftIO getCurrentTime + ExceptT . firstRow (rowToLocalProfile currentTs) (SEProfileNotFound profileId) $ DB.query db [sql| - SELECT cp.contact_profile_id, cp.display_name, cp.full_name, cp.short_descr, cp.image, cp.contact_link, cp.chat_peer_type, cp.local_alias, cp.preferences -- , ct.user_preferences + SELECT cp.contact_profile_id, cp.display_name, cp.full_name, cp.short_descr, cp.image, cp.contact_link, cp.chat_peer_type, cp.local_alias, cp.preferences, + cp.badge_proof, cp.badge_pres_header, cp.badge_expiry, cp.badge_type, cp.badge_verified, cp.badge_extra, cp.badge_master_key, cp.badge_signature, cp.badge_key_idx FROM contact_profiles cp WHERE cp.user_id = ? AND cp.contact_profile_id = ? |] (userId, profileId) -type ContactRequestRow = (Int64, ContactName, AgentInvId, Maybe ContactId, Maybe GroupId, Maybe Int64) :. (Int64, ContactName, Text, Maybe Text, Maybe ImageData, Maybe ConnLinkContact, Maybe ChatPeerType) :. (Maybe XContactId, PQSupport, Maybe SharedMsgId, Maybe SharedMsgId, Maybe Preferences, UTCTime, UTCTime, VersionChat, VersionChat) +type ContactRequestRow = (Int64, ContactName, AgentInvId, Maybe ContactId, Maybe GroupId, Maybe Int64) :. (Int64, ContactName, Text, Maybe Text, Maybe ImageData, Maybe ConnLinkContact, Maybe ChatPeerType, LocalAlias) :. (Maybe XContactId, PQSupport, Maybe SharedMsgId, Maybe SharedMsgId, Maybe Preferences, UTCTime, UTCTime, VersionChat, VersionChat) :. BadgeRow -toContactRequest :: ContactRequestRow -> UserContactRequest -toContactRequest ((contactRequestId, localDisplayName, agentInvitationId, contactId_, businessGroupId_, userContactLinkId_) :. (profileId, displayName, fullName, shortDescr, image, contactLink, peerType) :. (xContactId, pqSupport, welcomeSharedMsgId, requestSharedMsgId, preferences, createdAt, updatedAt, minVer, maxVer)) = do - let profile = Profile {displayName, fullName, shortDescr, image, contactLink, peerType, preferences} +toContactRequest :: UTCTime -> ContactRequestRow -> UserContactRequest +toContactRequest now ((contactRequestId, localDisplayName, agentInvitationId, contactId_, businessGroupId_, userContactLinkId_) :. (profileId, displayName, fullName, shortDescr, image, contactLink, peerType, localAlias) :. (xContactId, pqSupport, welcomeSharedMsgId, requestSharedMsgId, preferences, createdAt, updatedAt, minVer, maxVer) :. badgeRow) = do + let profile = LocalProfile {profileId, displayName, fullName, shortDescr, image, contactLink, peerType, preferences, localBadge = rowToBadge now badgeRow, localAlias} cReqChatVRange = fromMaybe (versionToRange maxVer) $ safeVersionRange minVer maxVer in UserContactRequest {contactRequestId, agentInvitationId, contactId_, businessGroupId_, userContactLinkId_, cReqChatVRange, localDisplayName, profileId, profile, xContactId, pqSupport, welcomeSharedMsgId, requestSharedMsgId, createdAt, updatedAt} @@ -539,17 +543,18 @@ userQuery :: Query userQuery = [sql| SELECT u.user_id, u.agent_user_id, u.contact_id, ucp.contact_profile_id, u.active_user, u.active_order, u.local_display_name, ucp.full_name, ucp.short_descr, ucp.image, ucp.contact_link, ucp.chat_peer_type, ucp.preferences, - u.show_ntfs, u.send_rcpts_contacts, u.send_rcpts_small_groups, u.auto_accept_member_contacts, u.view_pwd_hash, u.view_pwd_salt, u.user_member_profile_updated_at, u.ui_themes, u.is_user_chat_relay + u.show_ntfs, u.send_rcpts_contacts, u.send_rcpts_small_groups, u.auto_accept_member_contacts, u.view_pwd_hash, u.view_pwd_salt, u.user_member_profile_updated_at, u.ui_themes, u.is_user_chat_relay, + ucp.badge_proof, ucp.badge_pres_header, ucp.badge_expiry, ucp.badge_type, ucp.badge_verified, ucp.badge_extra, ucp.badge_master_key, ucp.badge_signature, ucp.badge_key_idx FROM users u JOIN contacts uct ON uct.contact_id = u.contact_id JOIN contact_profiles ucp ON ucp.contact_profile_id = uct.contact_profile_id |] -toUser :: (UserId, UserId, ContactId, ProfileId, BoolInt, Int64) :. (ContactName, Text, Maybe Text, Maybe ImageData, Maybe ConnLinkContact, Maybe ChatPeerType, Maybe Preferences) :. (BoolInt, BoolInt, BoolInt, BoolInt, Maybe B64UrlByteString, Maybe B64UrlByteString, Maybe UTCTime, Maybe UIThemeEntityOverrides, BoolInt) -> User -toUser ((userId, auId, userContactId, profileId, BI activeUser, activeOrder) :. (displayName, fullName, shortDescr, image, contactLink, peerType, userPreferences) :. (BI showNtfs, BI sendRcptsContacts, BI sendRcptsSmallGroups, BI autoAcceptMemberContacts, viewPwdHash_, viewPwdSalt_, userMemberProfileUpdatedAt, uiThemes, BI userChatRelay)) = +toUser :: UTCTime -> (UserId, UserId, ContactId, ProfileId, BoolInt, Int64) :. (ContactName, Text, Maybe Text, Maybe ImageData, Maybe ConnLinkContact, Maybe ChatPeerType, Maybe Preferences) :. (BoolInt, BoolInt, BoolInt, BoolInt, Maybe B64UrlByteString, Maybe B64UrlByteString, Maybe UTCTime, Maybe UIThemeEntityOverrides, BoolInt) :. BadgeRow -> User +toUser now ((userId, auId, userContactId, profileId, BI activeUser, activeOrder) :. (displayName, fullName, shortDescr, image, contactLink, peerType, userPreferences) :. (BI showNtfs, BI sendRcptsContacts, BI sendRcptsSmallGroups, BI autoAcceptMemberContacts, viewPwdHash_, viewPwdSalt_, userMemberProfileUpdatedAt, uiThemes, BI userChatRelay) :. badgeRow) = User {userId, agentUserId = AgentUserId auId, userContactId, localDisplayName = displayName, profile, activeUser, activeOrder, fullPreferences, showNtfs, sendRcptsContacts, sendRcptsSmallGroups, autoAcceptMemberContacts = BoolDef autoAcceptMemberContacts, viewPwdHash, userMemberProfileUpdatedAt, uiThemes, userChatRelay = BoolDef userChatRelay} where - profile = LocalProfile {profileId, displayName, fullName, shortDescr, image, contactLink, peerType, preferences = userPreferences, localAlias = ""} + profile = LocalProfile {profileId, displayName, fullName, shortDescr, image, contactLink, peerType, localBadge = rowToBadge now badgeRow, preferences = userPreferences, localAlias = ""} fullPreferences = fullPreferences' userPreferences viewPwdHash = UserPwdHash <$> viewPwdHash_ <*> viewPwdSalt_ @@ -671,11 +676,11 @@ type PublicGroupAccessRow = (Maybe Text, Maybe Text, Maybe BoolInt, Maybe BoolIn type GroupMemberRow = (GroupMemberId, GroupId, Int64, MemberId, VersionChat, VersionChat, GroupMemberRole, GroupMemberCategory, GroupMemberStatus, BoolInt, Maybe MemberRestrictionStatus) :. (Maybe Int64, Maybe GroupMemberId, ContactName, Maybe ContactId, ProfileId) :. ProfileRow :. (UTCTime, UTCTime) :. (Maybe UTCTime, Int64, Int64, Int64, Maybe UTCTime, Maybe C.PublicKeyEd25519, Maybe ShortLinkContact) -type ProfileRow = (ProfileId, ContactName, Text, Maybe Text, Maybe ImageData, Maybe ConnLinkContact, Maybe ChatPeerType, LocalAlias, Maybe Preferences) +type ProfileRow = (ProfileId, ContactName, Text, Maybe Text, Maybe ImageData, Maybe ConnLinkContact, Maybe ChatPeerType, LocalAlias, Maybe Preferences) :. BadgeRow -toGroupInfo :: StoreCxt -> Int64 -> [ChatTagId] -> GroupInfoRow -> GroupInfo -toGroupInfo cxt userContactId chatTags ((groupId, localDisplayName, displayName, fullName, shortDescr, localAlias, description, image, groupType_, groupLink_, publicGroupId_) :. accessRow :. (enableNtfs_, sendRcpts, BI favorite, groupPreferences, memberAdmission) :. (createdAt, updatedAt, chatTs, userMemberProfileSentAt) :. preparedGroupRow :. businessRow :. (BI useRelays, relayOwnStatus, uiThemes, currentMembers, publicMemberCount, customData, chatItemTTL, membersRequireAttention, viaGroupLinkUri) :. groupKeysRow :. userMemberRow) = - let membership = (toGroupMember userContactId userMemberRow) {memberChatVRange = vr cxt} +toGroupInfo :: UTCTime -> StoreCxt -> Int64 -> [ChatTagId] -> GroupInfoRow -> GroupInfo +toGroupInfo now cxt userContactId chatTags ((groupId, localDisplayName, displayName, fullName, shortDescr, localAlias, description, image, groupType_, groupLink_, publicGroupId_) :. accessRow :. (enableNtfs_, sendRcpts, BI favorite, groupPreferences, memberAdmission) :. (createdAt, updatedAt, chatTs, userMemberProfileSentAt) :. preparedGroupRow :. businessRow :. (BI useRelays, relayOwnStatus, uiThemes, currentMembers, publicMemberCount, customData, chatItemTTL, membersRequireAttention, viaGroupLinkUri) :. groupKeysRow :. userMemberRow) = + let membership = (toGroupMember now userContactId userMemberRow) {memberChatVRange = vr cxt} chatSettings = ChatSettings {enableNtfs = fromMaybe MFAll enableNtfs_, sendRcpts = unBI <$> sendRcpts, favorite} fullGroupPreferences = mergeGroupPreferences groupPreferences publicGroup = toPublicGroupProfile groupType_ groupLink_ publicGroupId_ (toPublicGroupAccess accessRow) @@ -718,9 +723,9 @@ toGroupKeys (Just publicGroupId) (rootPrivKey_, rootPubKey_, Just memberPrivKey) <$> (GRKPrivate <$> rootPrivKey_ <|> GRKPublic <$> rootPubKey_) toGroupKeys _ _ = Nothing -toGroupMember :: Int64 -> GroupMemberRow -> GroupMember -toGroupMember userContactId ((groupMemberId, groupId, indexInGroup, memberId, minVer, maxVer, memberRole, memberCategory, memberStatus, BI showMessages, memberRestriction_) :. (invitedById, invitedByGroupMemberId, localDisplayName, memberContactId, memberContactProfileId) :. profileRow :. (createdAt, updatedAt) :. (supportChatTs_, supportChatUnread, supportChatMemberAttention, supportChatMentions, supportChatLastMsgFromMemberTs, memberPubKey, relayLink)) = - let memberProfile = rowToLocalProfile profileRow +toGroupMember :: UTCTime -> Int64 -> GroupMemberRow -> GroupMember +toGroupMember now userContactId ((groupMemberId, groupId, indexInGroup, memberId, minVer, maxVer, memberRole, memberCategory, memberStatus, BI showMessages, memberRestriction_) :. (invitedById, invitedByGroupMemberId, localDisplayName, memberContactId, memberContactProfileId) :. profileRow :. (createdAt, updatedAt) :. (supportChatTs_, supportChatUnread, supportChatMemberAttention, supportChatMentions, supportChatLastMsgFromMemberTs, memberPubKey, relayLink)) = + let memberProfile = rowToLocalProfile now profileRow memberSettings = GroupMemberSettings {showMessages} blockedByAdmin = maybe False mrsBlocked memberRestriction_ invitedBy = toInvitedBy userContactId invitedById @@ -745,6 +750,7 @@ groupMemberQuery = SELECT m.group_member_id, m.group_id, m.index_in_group, m.member_id, m.peer_chat_min_version, m.peer_chat_max_version, m.member_role, m.member_category, m.member_status, m.show_messages, m.member_restriction, m.invited_by, m.invited_by_group_member_id, m.local_display_name, m.contact_id, m.contact_profile_id, p.contact_profile_id, p.display_name, p.full_name, p.short_descr, p.image, p.contact_link, p.chat_peer_type, p.local_alias, p.preferences, + p.badge_proof, p.badge_pres_header, p.badge_expiry, p.badge_type, p.badge_verified, p.badge_extra, p.badge_master_key, p.badge_signature, p.badge_key_idx, m.created_at, m.updated_at, m.support_chat_ts, m.support_chat_items_unread, m.support_chat_items_member_attention, m.support_chat_items_mentions, m.support_chat_last_msg_from_member_ts, m.member_pub_key, m.relay_link, c.connection_id, c.agent_conn_id, c.conn_level, c.via_contact, c.via_user_contact_link, c.via_group_link, c.group_link_id, c.xcontact_id, c.custom_user_profile_id, @@ -756,13 +762,13 @@ groupMemberQuery = LEFT JOIN connections c ON c.group_member_id = m.group_member_id |] -toContactMember :: StoreCxt -> User -> (GroupMemberRow :. MaybeConnectionRow) -> GroupMember -toContactMember cxt User {userContactId} (memberRow :. connRow) = - (toGroupMember userContactId memberRow) {activeConn = toMaybeConnection cxt connRow} +toContactMember :: UTCTime -> StoreCxt -> User -> (GroupMemberRow :. MaybeConnectionRow) -> GroupMember +toContactMember now cxt User {userContactId} (memberRow :. connRow) = + (toGroupMember now userContactId memberRow) {activeConn = toMaybeConnection cxt connRow} -rowToLocalProfile :: ProfileRow -> LocalProfile -rowToLocalProfile (profileId, displayName, fullName, shortDescr, image, contactLink, peerType, localAlias, preferences) = - LocalProfile {profileId, displayName, fullName, shortDescr, image, contactLink, peerType, localAlias, preferences} +rowToLocalProfile :: UTCTime -> ProfileRow -> LocalProfile +rowToLocalProfile now ((profileId, displayName, fullName, shortDescr, image, contactLink, peerType, localAlias, preferences) :. badgeRow) = + LocalProfile {profileId, displayName, fullName, shortDescr, image, contactLink, peerType, localBadge = rowToBadge now badgeRow, localAlias, preferences} toBusinessChatInfo :: BusinessChatInfoRow -> Maybe BusinessChatInfo toBusinessChatInfo (Just chatType, Just businessId, Just customerId) = Just BusinessChatInfo {chatType, businessId, customerId} @@ -789,6 +795,7 @@ groupInfoQueryFields = mu.group_member_id, mu.group_id, mu.index_in_group, mu.member_id, mu.peer_chat_min_version, mu.peer_chat_max_version, mu.member_role, mu.member_category, mu.member_status, mu.show_messages, mu.member_restriction, mu.invited_by, mu.invited_by_group_member_id, mu.local_display_name, mu.contact_id, mu.contact_profile_id, pu.contact_profile_id, pu.display_name, pu.full_name, pu.short_descr, pu.image, pu.contact_link, pu.chat_peer_type, pu.local_alias, pu.preferences, + pu.badge_proof, pu.badge_pres_header, pu.badge_expiry, pu.badge_type, pu.badge_verified, pu.badge_extra, pu.badge_master_key, pu.badge_signature, pu.badge_key_idx, mu.created_at, mu.updated_at, mu.support_chat_ts, mu.support_chat_items_unread, mu.support_chat_items_member_attention, mu.support_chat_items_mentions, mu.support_chat_last_msg_from_member_ts, mu.member_pub_key, mu.relay_link |] @@ -877,8 +884,9 @@ addGroupChatTags db g@GroupInfo {groupId} = do getGroupInfo :: DB.Connection -> StoreCxt -> User -> Int64 -> ExceptT StoreError IO GroupInfo getGroupInfo db cxt User {userId, userContactId} groupId = ExceptT $ do + currentTs <- getCurrentTime chatTags <- getGroupChatTags db groupId - firstRow (toGroupInfo cxt userContactId chatTags) (SEGroupNotFound groupId) $ + firstRow (toGroupInfo currentTs cxt userContactId chatTags) (SEGroupNotFound groupId) $ DB.query db (groupInfoQuery <> " WHERE g.group_id = ? AND g.user_id = ? AND mu.contact_id = ?") diff --git a/src/Simplex/Chat/Types.hs b/src/Simplex/Chat/Types.hs index b4264d121d..7155d407e8 100644 --- a/src/Simplex/Chat/Types.hs +++ b/src/Simplex/Chat/Types.hs @@ -40,6 +40,7 @@ import qualified Data.ByteString.Char8 as B import qualified Data.ByteString.Lazy as LB import Data.Functor (($>)) import Data.Int (Int64) +import Data.Map.Strict (Map) import Data.Maybe (fromMaybe, isJust, isNothing) import Data.Text (Text) import qualified Data.Text as T @@ -47,6 +48,8 @@ import Data.Text.Encoding (encodeUtf8) import Data.Time.Clock (UTCTime) import Data.Typeable (Typeable) import Data.Word (Word16) +import Simplex.Chat.Badges (BadgeInfo (..), BadgeProof (..), BadgeStatus (..), LocalBadge (..), localBadgeInfo, localBadgeStatus, mkBadgeStatus, verifyBadge) +import Simplex.Messaging.Crypto.BBS (BBSPublicKey) import Simplex.Chat.Types.Preferences import Simplex.Chat.Types.Shared import Simplex.Chat.Types.UITheme @@ -367,7 +370,7 @@ data UserContactRequest = UserContactRequest cReqChatVRange :: VersionRangeChat, localDisplayName :: ContactName, profileId :: Int64, - profile :: Profile, + profile :: LocalProfile, createdAt :: UTCTime, updatedAt :: UTCTime, xContactId :: Maybe XContactId, @@ -685,7 +688,8 @@ data Profile = Profile image :: Maybe ImageData, contactLink :: Maybe ConnLinkContact, preferences :: Maybe Preferences, - peerType :: Maybe ChatPeerType + peerType :: Maybe ChatPeerType, + badge :: Maybe BadgeProof -- fields that should not be read into this data type to prevent sending them as part of profile to contacts: -- - contact_profile_id -- - incognito @@ -718,7 +722,7 @@ instance TextEncoding ChatPeerType where profileFromName :: ContactName -> Profile profileFromName displayName = - Profile {displayName, fullName = "", shortDescr = Nothing, image = Nothing, contactLink = Nothing, preferences = Nothing, peerType = Nothing} + Profile {displayName, fullName = "", shortDescr = Nothing, image = Nothing, contactLink = Nothing, preferences = Nothing, peerType = Nothing, badge = Nothing} -- check if profiles match ignoring preferences profilesMatch :: LocalProfile -> LocalProfile -> Bool @@ -727,6 +731,15 @@ profilesMatch LocalProfile {displayName = n2, fullName = fn2, image = i2} = n1 == n2 && fn1 == fn2 && i1 == i2 +-- equal for profile-update detection: badge proofs are re-generated for every presentation, +-- so compare badges by disclosed info (not proof bytes) - a re-presentation of the same badge is a no-op +sameProfileContent :: Profile -> Profile -> Bool +sameProfileContent p@Profile {badge = b} p'@Profile {badge = b'} = + p {badge = Nothing} == p' {badge = Nothing} && (proofInfo <$> b) == (proofInfo <$> b') + where + proofInfo :: BadgeProof -> BadgeInfo + proofInfo (BadgeProof _ _ _ info) = info + data IncognitoProfile = NewIncognito Profile | ExistingIncognito LocalProfile fromIncognitoProfile :: IncognitoProfile -> Profile @@ -758,6 +771,7 @@ data LocalProfile = LocalProfile contactLink :: Maybe ConnLinkContact, preferences :: Maybe Preferences, peerType :: Maybe ChatPeerType, + localBadge :: Maybe LocalBadge, localAlias :: LocalAlias } deriving (Eq, Show) @@ -765,13 +779,37 @@ data LocalProfile = LocalProfile localProfileId :: LocalProfile -> ProfileId localProfileId LocalProfile {profileId} = profileId -toLocalProfile :: ProfileId -> Profile -> LocalAlias -> LocalProfile -toLocalProfile profileId Profile {displayName, fullName, shortDescr, image, contactLink, preferences, peerType} localAlias = - LocalProfile {profileId, displayName, fullName, shortDescr, image, contactLink, preferences, peerType, localAlias} +toLocalProfile :: ProfileId -> Profile -> LocalAlias -> UTCTime -> Maybe Bool -> LocalProfile +toLocalProfile profileId Profile {displayName, fullName, shortDescr, image, contactLink, preferences, peerType, badge} localAlias now verified = + LocalProfile {profileId, displayName, fullName, shortDescr, image, contactLink, preferences, peerType, localBadge, localAlias} + where + localBadge = (\b@(BadgeProof _ _ _ info) -> PeerBadge b (mkBadgeStatus now verified info)) <$> badge fromLocalProfile :: LocalProfile -> Profile -fromLocalProfile LocalProfile {displayName, fullName, shortDescr, image, contactLink, preferences, peerType} = - Profile {displayName, fullName, shortDescr, image, contactLink, preferences, peerType} +fromLocalProfile LocalProfile {displayName, fullName, shortDescr, image, contactLink, preferences, peerType, localBadge} = + Profile {displayName, fullName, shortDescr, image, contactLink, preferences, peerType, badge = localBadge >>= wireBadge} + where + -- any stored peer proof rides the wire (receivers verify independently); the own credential is presented fresh, and a display-only badge never sends + wireBadge :: LocalBadge -> Maybe BadgeProof + wireBadge = \case + PeerBadge b _ -> Just b + OwnBadge _ _ -> Nothing + ShownBadge _ _ -> Nothing + +profileBadgeVerified :: Map Int BBSPublicKey -> LocalProfile -> Profile -> IO (Maybe Bool) +profileBadgeVerified keys LocalProfile {localBadge} Profile {badge = newBadge} = + case (localBadge, newBadge) of + (_, Nothing) -> pure (Just False) + -- an unchanged badge that verified before stays verified; failed or unknown-key badges + -- are re-verified, so an unknown key heals once an app update adds it + (Just lb, Just (BadgeProof _ _ _ newInfo)) + | localBadgeInfo lb == newInfo && localBadgeStatus lb `notElem` [BSFailed, BSUnknownKey] -> pure (Just True) + (_, Just newB) -> verifyBadge keys newB + +-- a failed or unknown-key badge is re-verified on the next profile update even when its disclosed content +-- is unchanged, so it heals once an app update adds the issuer key +badgeNeedsReverify :: LocalProfile -> Bool +badgeNeedsReverify LocalProfile {localBadge} = maybe False ((`elem` [BSFailed, BSUnknownKey]) . localBadgeStatus) localBadge data GroupType = GTChannel @@ -2035,7 +2073,7 @@ type VersionRangeChat = VersionRange ChatVersion -- | Store-wide context passed to store functions in place of the bare `vr` -- parameter. Built from config by mkStoreCxt; more fields are added here over time. -newtype StoreCxt = StoreCxt {vr :: VersionRangeChat} +data StoreCxt = StoreCxt {vr :: VersionRangeChat, badgeKeys :: Map Int BBSPublicKey} pattern VersionChat :: Word16 -> VersionChat pattern VersionChat v = Version v diff --git a/src/Simplex/Chat/View.hs b/src/Simplex/Chat/View.hs index 838d15245a..004f6af825 100644 --- a/src/Simplex/Chat/View.hs +++ b/src/Simplex/Chat/View.hs @@ -43,6 +43,7 @@ import Simplex.Chat.Controller import Simplex.Chat.Help import Simplex.Chat.Library.Commands (maxImageSize) import Simplex.Chat.Markdown +import Simplex.Chat.Badges (BadgeInfo (..), BadgeStatus (..), BadgeType (..), LocalBadge, localBadgeInfo, localBadgeStatus) import Simplex.Chat.Messages hiding (NewChatItem (..)) import Simplex.Chat.Messages.CIContent import Simplex.Chat.Operators @@ -111,7 +112,7 @@ chatErrorToView isCmd ChatConfig {logLevel, testView} = viewChatError isCmd logL chatResponseToView :: (Maybe RemoteHostId, Maybe User) -> ChatConfig -> Bool -> CurrentTime -> TimeZone -> Maybe RemoteHostId -> ChatResponse -> [StyledString] chatResponseToView hu cfg@ChatConfig {logLevel, showReactions, testView} liveItems ts tz outputRH = \case - CRActiveUser User {profile, uiThemes} -> viewUserProfile (fromLocalProfile profile) <> viewUITheme uiThemes + CRActiveUser User {profile = p@LocalProfile {localBadge}, uiThemes} -> viewUserProfile localBadge (fromLocalProfile p) <> viewUITheme uiThemes CRUsersList users -> viewUsersList users CRChatStarted -> ["chat started"] CRChatRunning -> ["chat is running"] @@ -193,7 +194,7 @@ chatResponseToView hu cfg@ChatConfig {logLevel, showReactions, testView} liveIte CRSentGroupInvitation u g c _ -> ttyUser u $ viewSentGroupInvitation g c CRFileTransferStatus u ftStatus -> ttyUser u $ viewFileTransferStatus ftStatus CRFileTransferStatusXFTP u ci -> ttyUser u $ viewFileTransferStatusXFTP ci - CRUserProfile u p -> ttyUser u $ viewUserProfile p + CRUserProfile u@User {profile = LocalProfile {localBadge}} p -> ttyUser u $ viewUserProfile localBadge p CRUserProfileNoChange u -> ttyUser u ["user profile did not change"] CRUserPrivacy u u' -> ttyUserPrefix hu outputRH u $ viewUserPrivacy u u' CRVersionInfo info _ _ -> viewVersionInfo logLevel info @@ -452,7 +453,7 @@ chatEventToView hu ChatConfig {logLevel, showReactions, showReceipts, testView} CEvtRcvFileProgressXFTP {} -> [] CEvtContactUpdated {user = u, fromContact = c, toContact = c'} -> ttyUser u $ viewContactUpdated c c' <> viewContactPrefsUpdated u c c' CEvtGroupMemberUpdated {} -> [] - CEvtReceivedContactRequest u UserContactRequest {localDisplayName = c, profile} _chat -> ttyUser u $ viewReceivedContactRequest c profile + CEvtReceivedContactRequest u UserContactRequest {localDisplayName = c, profile} _chat -> ttyUser u $ viewReceivedContactRequest c (fromLocalProfile profile) CEvtRcvFileStart u ci -> ttyUser u $ receivingFile_' hu testView "started" ci CEvtRcvFileComplete u ci -> ttyUser u $ receivingFile_' hu testView "completed" ci CEvtRcvStandaloneFileComplete u _ ft -> ttyUser u $ receivingFileStandalone "completed" ft @@ -618,8 +619,8 @@ viewUsersList us = in if null ss then ["no users"] else ss where ldn (UserInfo User {localDisplayName = n} _) = T.toLower n - userInfo (UserInfo User {localDisplayName = n, profile = LocalProfile {fullName, shortDescr, peerType}, activeUser, showNtfs, viewPwdHash} count) - | activeUser || isNothing viewPwdHash = Just $ ttyFullName n fullName shortDescr <> infoStr <> bot + userInfo (UserInfo User {localDisplayName = n, profile = LocalProfile {fullName, shortDescr, peerType, localBadge}, activeUser, showNtfs, viewPwdHash} count) + | activeUser || isNothing viewPwdHash = Just $ ttyFullNameBadge n fullName shortDescr localBadge <> infoStr <> bot | otherwise = Nothing where infoStr = if null info then "" else " (" <> mconcat (intersperse ", " info) <> ")" @@ -1507,9 +1508,9 @@ viewContactAndMemberAssociated ct g m ct' = "use " <> ttyToContact' ct' <> highlight' "" <> " to send messages" ] -viewUserProfile :: Profile -> [StyledString] -viewUserProfile Profile {displayName, fullName, shortDescr, peerType, preferences} = - [ "user profile: " <> ttyFullName displayName fullName shortDescr <> bot, +viewUserProfile :: Maybe LocalBadge -> Profile -> [StyledString] +viewUserProfile localBadge Profile {displayName, fullName, shortDescr, peerType, preferences} = + [ "user profile: " <> ttyFullNameBadge displayName fullName shortDescr localBadge <> bot, "use " <> highlight' "/p []" <> " to change it" ] ++ viewCommands @@ -1752,9 +1753,22 @@ smpProxyModeStr :: SMPProxyMode -> SMPProxyFallback -> String smpProxyModeStr SPMNever _ = "private message routing disabled." smpProxyModeStr mode fallback = T.unpack $ safeDecodeUtf8 $ "private message routing mode: " <> strEncode mode <> ", fallback: " <> strEncode fallback +viewContactBadge :: Maybe LocalBadge -> [StyledString] +viewContactBadge = maybe [] $ \lb -> + let BadgeInfo {badgeType, badgeExpiry} = localBadgeInfo lb + st = case localBadgeStatus lb of + BSActive -> "active" + BSExpired -> "expired" + BSExpiredOld -> "expired (old)" + BSFailed -> "verification failed" + BSUnknownKey -> "unknown key" + expiry = maybe "no expiry" (("expires " <>) . T.pack . formatTime defaultTimeLocale "%Y-%m-%d") badgeExpiry + in [plain (textEncode badgeType <> " badge - " <> st), plain expiry] + viewContactInfo :: Contact -> Maybe ConnectionStats -> Maybe Profile -> [StyledString] -viewContactInfo ct@Contact {contactId, profile = LocalProfile {localAlias, contactLink}, activeConn, uiThemes, customData} stats incognitoProfile = +viewContactInfo ct@Contact {contactId, profile = LocalProfile {localAlias, contactLink, localBadge}, activeConn, uiThemes, customData} stats incognitoProfile = ["contact ID: " <> sShow contactId] + <> viewContactBadge localBadge <> maybe [] viewConnectionStats stats <> maybe [] (\l -> ["contact address: " <> (plain . strEncode) (simplexChatContact' l)]) contactLink <> maybe @@ -1787,10 +1801,11 @@ viewCustomData :: Maybe CustomData -> [StyledString] viewCustomData = maybe [] (\(CustomData v) -> ["custom data: " <> viewJSON (J.Object v)]) viewGroupMemberInfo :: GroupInfo -> GroupMember -> Maybe ConnectionStats -> [StyledString] -viewGroupMemberInfo GroupInfo {groupId} m@GroupMember {groupMemberId, memberProfile = LocalProfile {localAlias, contactLink}, activeConn} stats = +viewGroupMemberInfo GroupInfo {groupId} m@GroupMember {groupMemberId, memberProfile = LocalProfile {localAlias, contactLink, localBadge}, activeConn} stats = [ "group ID: " <> sShow groupId, "member ID: " <> sShow groupMemberId ] + <> viewContactBadge localBadge <> maybe ["member not connected"] viewConnectionStats stats <> maybe [] (\l -> ["contact address: " <> (plain . strEncode) (simplexChatContact' l)]) contactLink <> ["alias: " <> plain localAlias | localAlias /= ""] @@ -2785,9 +2800,47 @@ ttyContact = styled (colored Green) . viewName ttyContact' :: Contact -> StyledString ttyContact' Contact {localDisplayName = c} = ttyContact c +-- Supporter badge: a colored star marks an active badge (only the star is colored). +-- supporter cyan, legend blue, investor yellow, unknown cyan; business has no star. +badgeStarColor :: BadgeType -> Maybe Color +badgeStarColor = \case + BTSupporter -> Just Cyan + BTLegend -> Just Blue + BTInvestor -> Just Yellow + BTUnknown _ -> Just Cyan + +-- (star color, type word) for an active, colorable badge +activeBadge :: Maybe LocalBadge -> Maybe (Color, Text) +activeBadge lb_ = do + lb <- lb_ + case localBadgeStatus lb of + BSActive -> let BadgeInfo {badgeType} = localBadgeInfo lb in (\col -> (col, textEncode badgeType)) <$> badgeStarColor badgeType + _ -> Nothing + +badgeStar :: Color -> StyledString +badgeStar col = styled (colored col) ("*" :: Text) + +-- " *" (space + colored star) for sender prefixes, "" if no active badge +badgeStarSep :: Maybe LocalBadge -> StyledString +badgeStarSep lb_ = maybe "" (\(c, _) -> " " <> badgeStar c) (activeBadge lb_) + +-- name + badge for full-name contexts: "alice (Alice, * supporter)" / "alice (* supporter)" / "alice (Alice)" / "alice" +ttyFullNameBadge :: ContactName -> Text -> Maybe Text -> Maybe LocalBadge -> StyledString +ttyFullNameBadge c fullName shortDescr lb_ = ttyContact c <> optFullNameBadge c fullName shortDescr lb_ + +optFullNameBadge :: ContactName -> Text -> Maybe Text -> Maybe LocalBadge -> StyledString +optFullNameBadge c fullName shortDescr lb_ = case activeBadge lb_ of + Nothing -> optFullName c fullName shortDescr + Just (color, typeWord) -> " (" <> nameInner <> badgeStar color <> plain (" " <> typeWord) <> ")" + where + nameInner = maybe "" (\t -> plain (t <> ", ")) innerName + innerName + | T.null fullName || c == fullName = shortDescr + | otherwise = Just fullName + ttyFullContact :: Contact -> StyledString -ttyFullContact Contact {localDisplayName, profile = LocalProfile {fullName, shortDescr}} = - ttyFullName localDisplayName fullName shortDescr +ttyFullContact Contact {localDisplayName, profile = LocalProfile {fullName, shortDescr, localBadge}} = + ttyFullNameBadge localDisplayName fullName shortDescr localBadge ttyMember :: GroupMember -> StyledString ttyMember GroupMember {localDisplayName} = ttyContact localDisplayName @@ -2816,7 +2869,8 @@ ttyQuotedMember (Just GroupMember {localDisplayName = c}) = "> " <> ttyFrom (vie ttyQuotedMember Nothing = ">" ttyFromContact :: Contact -> StyledString -ttyFromContact ct@Contact {localDisplayName = c} = ctIncognito ct <> ttyFrom (viewName c <> "> ") +ttyFromContact ct@Contact {localDisplayName = c, profile = LocalProfile {localBadge}} = + ctIncognito ct <> ttyFrom (viewName c) <> badgeStarSep localBadge <> ttyFrom "> " ttyFromContactEdited :: Contact -> StyledString ttyFromContactEdited ct@Contact {localDisplayName = c} = ctIncognito ct <> ttyFrom (viewName c <> "> [edited] ") diff --git a/tests/BadgeTests.hs b/tests/BadgeTests.hs new file mode 100644 index 0000000000..90e3e9ae7a --- /dev/null +++ b/tests/BadgeTests.hs @@ -0,0 +1,142 @@ +{-# LANGUAGE DataKinds #-} +{-# LANGUAGE DisambiguateRecordFields #-} +{-# LANGUAGE GADTs #-} +{-# LANGUAGE NamedFieldPuns #-} +{-# LANGUAGE OverloadedStrings #-} + +module BadgeTests (badgeTests) where + +import Data.Map.Strict (Map) +import qualified Data.Map.Strict as M +import Data.Time.Clock (UTCTime, addUTCTime, getCurrentTime, nominalDay) +import Data.Time.Clock.POSIX (posixSecondsToUTCTime) +import qualified Data.Aeson as J +import qualified Simplex.Messaging.Crypto as C +import Simplex.Chat.Badges +import Simplex.Messaging.Crypto.BBS +import Test.Hspec + +badgeTests :: Spec +badgeTests = do + it "full workflow: request, issue, verify credential, generate and verify proof" testFullWorkflow + it "should reject badge with tampered type" testTamperedType + it "should reject badge with tampered expiry" testTamperedExpiry + it "should reject badge with wrong server key" testWrongKey + it "should report a key index missing from configured keys" testUnknownKeyIdx + it "should compute badge status correctly" testExpiryCheck + it "should treat lifetime badges as always active" testLifetimeBadge + it "should accept unknown badge types" testUnknownBadgeType + it "credential serializes to a paste-able token and back" testCredentialSerialization + +proofOf :: BadgeProof -> BBSProof +proofOf (BadgeProof _ _ p _) = p + +proofInfo :: BadgeProof -> BadgeInfo +proofInfo (BadgeProof _ _ _ i) = i + +testKeyIdx :: Int +testKeyIdx = 1 + +keysFor :: BBSPublicKey -> Map Int BBSPublicKey +keysFor = M.singleton testKeyIdx + +testFullWorkflow :: IO () +testFullWorkflow = do + Right (pk, sk) <- bbsKeyGen + drg <- C.newRandom + mk <- generateMasterKey drg + let req = BadgeRequest {masterKey = mk, badgeInfo = BadgeInfo {badgeType = BTSupporter, badgeExpiry = Just futureTime, badgeExtra = ""}} + Just vreq <- verifyPayment (BPRedeemCode "TEST") req + Right cred <- issueBadge testKeyIdx sk vreq + let BadgeCredential idx mk' _ _ = cred + idx `shouldBe` testKeyIdx + mk' `shouldBe` mk + verifyCredential pk cred >>= (`shouldBe` True) + Right badge <- generateBadgeProof pk cred (BBSPresHeader "nonce-1") + -- the proof inherits the credential's key index, so receivers find the right key + let BadgeProof {badgeKeyIdx} = badge + badgeKeyIdx `shouldBe` testKeyIdx + verifyBadge (keysFor pk) badge >>= (`shouldBe` Just True) + Right badge2 <- generateBadgeProof pk cred (BBSPresHeader "nonce-2") + verifyBadge (keysFor pk) badge2 >>= (`shouldBe` Just True) + proofOf badge `shouldNotBe` proofOf badge2 + +testTamperedType :: IO () +testTamperedType = do + (pk, BadgeProof idx ph p info) <- issueBadgeProof BTSupporter (Just futureTime) + verifyBadge (keysFor pk) (BadgeProof idx ph p info {badgeType = BTLegend}) >>= (`shouldBe` Just False) + +testTamperedExpiry :: IO () +testTamperedExpiry = do + (pk, BadgeProof idx ph p info) <- issueBadgeProof BTSupporter (Just futureTime) + verifyBadge (keysFor pk) (BadgeProof idx ph p info {badgeExpiry = Just pastTime}) >>= (`shouldBe` Just False) + +testWrongKey :: IO () +testWrongKey = do + (_, badge) <- issueBadgeProof BTSupporter (Just futureTime) + Right (pk2, _) <- bbsKeyGen + verifyBadge (keysFor pk2) badge >>= (`shouldBe` Just False) + +testUnknownKeyIdx :: IO () +testUnknownKeyIdx = do + (pk, badge) <- issueBadgeProof BTSupporter (Just futureTime) + -- a key index not in the configured keys cannot be verified at all (Nothing) + verifyBadge (M.singleton (testKeyIdx + 1) pk) badge >>= (`shouldBe` Nothing) + +testExpiryCheck :: IO () +testExpiryCheck = do + now <- getCurrentTime + let info expiry = BadgeInfo {badgeType = BTSupporter, badgeExpiry = expiry, badgeExtra = ""} + futureInfo = info (Just futureTime) + mkBadgeStatus now (Just True) futureInfo `shouldBe` BSActive + mkBadgeStatus now (Just True) (info (Just (addUTCTime (-nominalDay) now))) `shouldBe` BSExpired + mkBadgeStatus now (Just True) (info (Just pastTime)) `shouldBe` BSExpiredOld + mkBadgeStatus now (Just False) futureInfo `shouldBe` BSFailed + mkBadgeStatus now Nothing futureInfo `shouldBe` BSUnknownKey + +testLifetimeBadge :: IO () +testLifetimeBadge = do + now <- getCurrentTime + (pk, badge) <- issueBadgeProof BTInvestor Nothing + verifyBadge (keysFor pk) badge >>= (`shouldBe` Just True) + mkBadgeStatus now (Just True) (proofInfo badge) `shouldBe` BSActive + +testUnknownBadgeType :: IO () +testUnknownBadgeType = do + (pk, badge) <- issueBadgeProof (BTUnknown "future_type") (Just futureTime) + verifyBadge (keysFor pk) badge >>= (`shouldBe` Just True) + +testCredentialSerialization :: IO () +testCredentialSerialization = do + Right (pk, sk) <- bbsKeyGen + drg <- C.newRandom + mk <- generateMasterKey drg + let mkCred expiry = do + Right cred <- issueBadge testKeyIdx sk (VerifiedBadgeRequest BadgeRequest {masterKey = mk, badgeInfo = BadgeInfo {badgeType = BTSupporter, badgeExpiry = expiry, badgeExtra = ""}}) + pure cred + dated <- mkCred (Just futureTime) + lifetime <- mkCred Nothing + J.eitherDecode (J.encode dated) `shouldBe` Right dated + J.eitherDecode (J.encode lifetime) `shouldBe` Right lifetime + -- a decoded credential still verifies against the issuing key + case J.eitherDecode (J.encode dated) of + Right cred -> verifyCredential pk cred >>= (`shouldBe` True) + Left e -> expectationFailure e + +-- Helpers + +futureTime :: UTCTime +futureTime = posixSecondsToUTCTime 4102444800 -- 2099-12-31 + +pastTime :: UTCTime +pastTime = posixSecondsToUTCTime 1577836800 -- 2020-01-01 + +issueBadgeProof :: BadgeType -> Maybe UTCTime -> IO (BBSPublicKey, BadgeProof) +issueBadgeProof bt expiry = do + Right (pk, sk) <- bbsKeyGen + drg <- C.newRandom + mk <- generateMasterKey drg + let vreq = VerifiedBadgeRequest BadgeRequest {masterKey = mk, badgeInfo = BadgeInfo {badgeType = bt, badgeExpiry = expiry, badgeExtra = ""}} + Right cred <- issueBadge testKeyIdx sk vreq + Right badge <- generateBadgeProof pk cred (BBSPresHeader "test-nonce") + pure (pk, badge) diff --git a/tests/Bots/BroadcastTests.hs b/tests/Bots/BroadcastTests.hs index f56a4d803d..051ee6b304 100644 --- a/tests/Bots/BroadcastTests.hs +++ b/tests/Bots/BroadcastTests.hs @@ -33,7 +33,7 @@ withBroadcastBot opts test = bot = simplexChatCore testCfg (mkChatOpts opts) $ broadcastBot opts broadcastBotProfile :: Profile -broadcastBotProfile = Profile {displayName = "broadcast_bot", fullName = "Broadcast Bot", shortDescr = Nothing, image = Nothing, contactLink = Nothing, peerType = Just CPTBot, preferences = Nothing} +broadcastBotProfile = Profile {displayName = "broadcast_bot", fullName = "Broadcast Bot", shortDescr = Nothing, image = Nothing, contactLink = Nothing, peerType = Just CPTBot, preferences = Nothing, badge = Nothing} mkBotOpts :: TestParams -> [KnownContact] -> BroadcastBotOpts mkBotOpts ps publishers = diff --git a/tests/Bots/DirectoryTests.hs b/tests/Bots/DirectoryTests.hs index 7fdd34061f..a3a48e7d29 100644 --- a/tests/Bots/DirectoryTests.hs +++ b/tests/Bots/DirectoryTests.hs @@ -96,7 +96,7 @@ directoryServiceTests = do it "should update subscriber count periodically" testLinkCheckUpdatesCount directoryProfile :: Profile -directoryProfile = Profile {displayName = "SimpleX Directory", fullName = "", shortDescr = Nothing, image = Nothing, contactLink = Nothing, peerType = Just CPTBot, preferences = Nothing} +directoryProfile = Profile {displayName = "SimpleX Directory", fullName = "", shortDescr = Nothing, image = Nothing, contactLink = Nothing, peerType = Just CPTBot, preferences = Nothing, badge = Nothing} mkDirectoryOpts :: TestParams -> [KnownContact] -> Maybe KnownGroup -> Maybe FilePath -> DirectoryOpts mkDirectoryOpts TestParams {tmpPath = ps} superUsers ownersGroup webFolder = diff --git a/tests/ChatTests/Profiles.hs b/tests/ChatTests/Profiles.hs index 2502f3e262..0e2052b259 100644 --- a/tests/ChatTests/Profiles.hs +++ b/tests/ChatTests/Profiles.hs @@ -1,4 +1,5 @@ {-# LANGUAGE CPP #-} +{-# LANGUAGE DataKinds #-} {-# LANGUAGE DuplicateRecordFields #-} {-# LANGUAGE NamedFieldPuns #-} {-# LANGUAGE OverloadedStrings #-} @@ -18,11 +19,18 @@ import Control.Monad.Except import qualified Data.Attoparsec.ByteString.Char8 as A import qualified Data.ByteString.Char8 as B import qualified Data.Text as T -import Simplex.Chat.Controller (ChatConfig (..), ChatHooks (..), defaultChatHooks) +import Data.Time.Clock (UTCTime, addUTCTime, getCurrentTime, nominalDay) +import Data.Time.Clock.POSIX (posixSecondsToUTCTime) +import Data.Time.Format (defaultTimeLocale, formatTime) +import qualified Data.Map.Strict as M +import Simplex.Chat.Badges (BadgeCredential, BadgeInfo (..), BadgePurchase (..), BadgeRequest (..), BadgeType (..), generateMasterKey, issueBadge, verifyPayment) +import Simplex.Chat.Controller (ChatConfig (..), ChatController (..), ChatHooks (..), defaultChatHooks, mkStoreCxt) import Simplex.Chat.Options (ChatOpts (..), CoreChatOpts (..)) import Simplex.Chat.Protocol (currentChatVersion) import Simplex.Chat.Store.Shared (createContact) import Simplex.Chat.Types (ConnStatus (..), Profile (..), GroupRejectionReason (..)) +import qualified Simplex.Messaging.Crypto as C +import Simplex.Messaging.Crypto.BBS (BBSPublicKey, BBSSecretKey, bbsKeyGen) import Simplex.Chat.Types.Shared (GroupMemberRole (..)) import Simplex.Chat.Types.UITheme import Simplex.Messaging.Agent.Env.SQLite @@ -40,6 +48,13 @@ chatProfileTests = do it "update user profile and notify contacts" testUpdateProfile it "update user profile with image" testUpdateProfileImage it "use multiword profile names" testMultiWordProfileNames + it "present supporter badge to contacts" testUserBadgeBroadcast + it "supporter badge sent to contact connecting after attach" testUserBadgeOnConnect + it "supporter badge sent to member joining via group link" testUserBadgeGroupLink + it "expired supporter badge shows as expired" testUserBadgeExpired + it "long-expired supporter badge is not presented" testUserBadgeExpiredOld + it "incognito connection does not carry supporter badge" testUserBadgeIncognito + it "supporter badge sent to contact connecting via address" testUserBadgeContactAddress describe "user contact link" $ do it "create and connect via contact link" testUserContactLink it "retry connecting via contact link" testRetryConnectingViaContactLink @@ -185,6 +200,210 @@ testUpdateProfile = bob <## "use @cat to send messages" ] +-- the test issuer key under index 1 in the test config +testBadgeKeys :: BBSPublicKey -> M.Map Int BBSPublicKey +testBadgeKeys = M.singleton 1 + +-- issue a supporter badge credential with the given expiry (test issuer) +issueTestBadge :: BBSSecretKey -> Maybe UTCTime -> IO BadgeCredential +issueTestBadge sk badgeExpiry = do + drg <- C.newRandom + mk <- generateMasterKey drg + let info = BadgeInfo {badgeType = BTSupporter, badgeExpiry, badgeExtra = ""} + Just vreq <- verifyPayment (BPRedeemCode "TEST") BadgeRequest {masterKey = mk, badgeInfo = info} + Right cred <- issueBadge 1 sk vreq + pure cred + +-- the same single-line JSON `simplex-chat badge sign` prints, pasted into the app +addTestBadge :: HasCallStack => TestCC -> BadgeCredential -> IO () +addTestBadge cc cred = do + cc ##> ("/badge add " <> T.unpack (encodeJSON cred)) + cc <## "ok" + +testUserBadgeBroadcast :: HasCallStack => TestParams -> IO () +testUserBadgeBroadcast ps = do + Right (pk, sk) <- bbsKeyGen + testChatCfg2 (testCfg {badgePublicKeys = testBadgeKeys pk}) aliceProfile bobProfile (test sk) ps + where + test sk alice bob = do + connectUsers alice bob + addTestBadge alice =<< issueTestBadge sk Nothing + -- own badge is shown (add succeeded) + alice ##> "/p" + alice <## "user profile: alice (Alice, * supporter)" + alice <## "use /p [] to change it" + -- the badge XInfo is delivered in order before this message, so the contact has stored it + alice #> "@bob hi" + bob <# "alice *> hi" + +testUserBadgeOnConnect :: HasCallStack => TestParams -> IO () +testUserBadgeOnConnect ps = do + Right (pk, sk) <- bbsKeyGen + testChatCfg2 (testCfg {badgePublicKeys = testBadgeKeys pk}) aliceProfile bobProfile (test sk) ps + where + test sk alice bob = do + addTestBadge alice =<< issueTestBadge sk Nothing + -- a contact connecting after the badge is attached receives it in the connection handshake + alice ##> "/c" + inv <- getInvitation alice + bob ##> ("/c " <> inv) + bob <## "confirmation sent!" + concurrently_ + (bob <## "alice (Alice, * supporter): contact is connected") + (alice <## "bob (Bob): contact is connected") + bob ##> "/i alice" + bob <## "contact ID: 2" + bob <## "supporter badge - active" + bob <## "no expiry" + bob <## "receiving messages via: localhost" + bob <## "sending messages via: localhost" + bob <## "you've shared main profile with this contact" + bob <## "connection not verified, use /code command to see security code" + bob <## "quantum resistant end-to-end encryption" + bob <## currentChatVRangeInfo + +testUserBadgeGroupLink :: HasCallStack => TestParams -> IO () +testUserBadgeGroupLink ps = do + Right (pk, sk) <- bbsKeyGen + testChatCfg2 (testCfg {badgePublicKeys = testBadgeKeys pk}) aliceProfile bobProfile (test sk) ps + where + test sk alice bob = do + addTestBadge alice =<< issueTestBadge sk Nothing + alice ##> "/g team" + alice <## "group #team is created" + alice <## "to add members use /a team or /create link #team" + alice ##> "/create link #team" + gLink <- getGroupLink alice "team" GRMember True + bob ##> ("/c " <> gLink) + bob <## "connection request sent!" + alice <## "bob (Bob): accepting request to join group #team..." + concurrentlyN_ + [ alice <## "#team: bob joined the group", + do + bob <## "#team: joining the group..." + bob <## "#team: you joined the group" + ] + -- the host's profile (x.grp.link.mem) is sent over the same connection as group messages, + -- so receiving a message guarantees the badge arrived + alice #> "#team hello" + bob <# "#team alice> hello" + -- no prior contact: the host's badge arrives via the group link handshake + bob ##> "/i #team alice" + bob <## "group ID: 1" + bob <##. "member ID: " + bob <## "supporter badge - active" + bob <## "no expiry" + bob <## "receiving messages via: localhost" + bob <## "sending messages via: localhost" + bob <## "connection not verified, use /code command to see security code" + bob <## currentChatVRangeInfo + +testUserBadgeContactAddress :: HasCallStack => TestParams -> IO () +testUserBadgeContactAddress ps = do + Right (pk, sk) <- bbsKeyGen + testChatCfg2 (testCfg {badgePublicKeys = testBadgeKeys pk}) aliceProfile bobProfile (test sk) ps + where + test sk alice bob = do + addTestBadge alice =<< issueTestBadge sk Nothing + alice ##> "/ad" + (shortLink, cLink) <- getContactLinks alice True + -- the address link data carries the badge proof; the connect plan returns it verified, without crypto + bob ##> ("/_connect plan 1 " <> shortLink) + bob <## "contact address: ok to connect" + sLinkData <- getTermLine bob + sLinkData `shouldContain` "\"proof\":" + sLinkData `shouldContain` "\"localBadge\":{\"badge\":{\"badgeType\":\"supporter\"" + sLinkData `shouldContain` "\"status\":\"active\"" + bob ##> ("/c " <> cLink) + alice <#? bob + alice ##> "/ac bob" + alice <## "bob (Bob): accepting contact request, you can send messages to contact" + concurrently_ + (bob <## "alice (Alice, * supporter): contact is connected") + (alice <## "bob (Bob): contact is connected") + bob ##> "/i alice" + bob <## "contact ID: 2" + bob <## "supporter badge - active" + bob <## "no expiry" + bob <## "receiving messages via: localhost" + bob <## "sending messages via: localhost" + bob <## "you've shared main profile with this contact" + bob <## "connection not verified, use /code command to see security code" + bob <## "quantum resistant end-to-end encryption" + bob <## currentChatVRangeInfo + +testUserBadgeExpired :: HasCallStack => TestParams -> IO () +testUserBadgeExpired ps = do + Right (pk, sk) <- bbsKeyGen + -- expired recently (within 31 days), so the badge is still presented and shown as expired + expiry <- addUTCTime (-2 * nominalDay) <$> getCurrentTime + testChatCfg2 (testCfg {badgePublicKeys = testBadgeKeys pk}) aliceProfile bobProfile (test sk expiry) ps + where + test sk expiry alice bob = do + addTestBadge alice =<< issueTestBadge sk (Just expiry) + -- expired badge: no star + alice ##> "/p" + alice <## "user profile: alice (Alice)" + alice <## "use /p [] to change it" + connectUsers alice bob + bob ##> "/i alice" + bob <## "contact ID: 2" + bob <## "supporter badge - expired" + bob <## ("expires " <> formatTime defaultTimeLocale "%Y-%m-%d" expiry) + bob <## "receiving messages via: localhost" + bob <## "sending messages via: localhost" + bob <## "you've shared main profile with this contact" + bob <## "connection not verified, use /code command to see security code" + bob <## "quantum resistant end-to-end encryption" + bob <## currentChatVRangeInfo + +testUserBadgeExpiredOld :: HasCallStack => TestParams -> IO () +testUserBadgeExpiredOld ps = do + Right (pk, sk) <- bbsKeyGen + testChatCfg2 (testCfg {badgePublicKeys = testBadgeKeys pk}) aliceProfile bobProfile (test sk) ps + where + test sk alice bob = do + addTestBadge alice =<< issueTestBadge sk (Just pastDate) + -- a badge that expired over a month ago is not presented to contacts at all + connectUsers alice bob + bob ##> "/i alice" + bob <## "contact ID: 2" + bob <## "receiving messages via: localhost" + bob <## "sending messages via: localhost" + bob <## "you've shared main profile with this contact" + bob <## "connection not verified, use /code command to see security code" + bob <## "quantum resistant end-to-end encryption" + bob <## currentChatVRangeInfo + pastDate = posixSecondsToUTCTime 1577836800 -- 2020-01-01 + +testUserBadgeIncognito :: HasCallStack => TestParams -> IO () +testUserBadgeIncognito ps = do + Right (pk, sk) <- bbsKeyGen + testChatCfg2 (testCfg {badgePublicKeys = testBadgeKeys pk}) aliceProfile bobProfile (test sk) ps + where + test sk alice bob = do + addTestBadge alice =<< issueTestBadge sk Nothing + -- an incognito identity must not carry the badge + bob ##> "/connect" + inv <- getInvitation bob + alice ##> ("/connect incognito " <> inv) + alice <## "confirmation sent!" + aliceIncognito <- getTermLine alice + concurrentlyN_ + [ bob <## (aliceIncognito <> ": contact is connected"), + do + alice <## ("bob (Bob): contact is connected, your incognito profile for this contact is " <> aliceIncognito) + alice <## "use /i bob to print out this incognito profile again" + ] + bob ##> ("/i " <> aliceIncognito) + bob <## "contact ID: 2" + bob <## "receiving messages via: localhost" + bob <## "sending messages via: localhost" + bob <## "you've shared main profile with this contact" + bob <## "connection not verified, use /code command to see security code" + bob <## "quantum resistant end-to-end encryption" + bob <## currentChatVRangeInfo + testUpdateProfileImage :: HasCallStack => TestParams -> IO () testUpdateProfileImage = testChat2 aliceProfile bobProfile $ @@ -279,7 +498,7 @@ testMultiWordProfileNames = aliceProfile' = baseProfile {displayName = "Alice Jones"} bobProfile' = baseProfile {displayName = "Bob James"} cathProfile' = baseProfile {displayName = "Cath Johnson"} - baseProfile = Profile {displayName = "", fullName = "", shortDescr = Nothing, image = Nothing, contactLink = Nothing, peerType = Nothing, preferences = defaultPrefs} + baseProfile = Profile {displayName = "", fullName = "", shortDescr = Nothing, image = Nothing, contactLink = Nothing, peerType = Nothing, preferences = defaultPrefs, badge = Nothing} testUserContactLink :: HasCallStack => TestParams -> IO () testUserContactLink = @@ -1187,13 +1406,13 @@ testPlanAddressContactViaAddress = Left _ -> error "error parsing contact link" Right cReq -> do let profile = aliceProfile {contactLink = Just cReq} - void $ withCCUser bob $ \user -> withCCTransaction bob $ \db -> runExceptT $ createContact db user profile + void $ withCCUser bob $ \user -> withCCTransaction bob $ \db -> let TestCC {chatController = ChatController {config}} = bob in runExceptT $ createContact db (mkStoreCxt config) user profile bob @@@ [("@alice", "")] bob ##> "/delete @alice" bob <## "alice: contact is deleted" - void $ withCCUser bob $ \user -> withCCTransaction bob $ \db -> runExceptT $ createContact db user profile + void $ withCCUser bob $ \user -> withCCTransaction bob $ \db -> let TestCC {chatController = ChatController {config}} = bob in runExceptT $ createContact db (mkStoreCxt config) user profile bob @@@ [("@alice", "")] bob ##> ("/_connect plan 1 " <> cLink) @@ -1208,7 +1427,7 @@ testPlanAddressContactViaAddress = alice ##> "/delete @bob" alice <## "bob: contact is deleted" - void $ withCCUser bob $ \user -> withCCTransaction bob $ \db -> runExceptT $ createContact db user profile + void $ withCCUser bob $ \user -> withCCTransaction bob $ \db -> let TestCC {chatController = ChatController {config}} = bob in runExceptT $ createContact db (mkStoreCxt config) user profile bob @@@ [("@alice", "")] -- GUI api @@ -1249,13 +1468,13 @@ testPlanAddressContactViaShortAddress = Left _ -> error "error parsing contact link" Right shortLink -> do let profile = aliceProfile {contactLink = Just shortLink} - void $ withCCUser bob $ \user -> withCCTransaction bob $ \db -> runExceptT $ createContact db user profile + void $ withCCUser bob $ \user -> withCCTransaction bob $ \db -> let TestCC {chatController = ChatController {config}} = bob in runExceptT $ createContact db (mkStoreCxt config) user profile bob @@@ [("@alice", "")] bob ##> "/delete @alice" bob <## "alice: contact is deleted" - void $ withCCUser bob $ \user -> withCCTransaction bob $ \db -> runExceptT $ createContact db user profile + void $ withCCUser bob $ \user -> withCCTransaction bob $ \db -> let TestCC {chatController = ChatController {config}} = bob in runExceptT $ createContact db (mkStoreCxt config) user profile bob @@@ [("@alice", "")] bob ##> ("/_connect plan 1 " <> sLink) @@ -1270,7 +1489,7 @@ testPlanAddressContactViaShortAddress = alice ##> "/delete @bob" alice <## "bob: contact is deleted" - void $ withCCUser bob $ \user -> withCCTransaction bob $ \db -> runExceptT $ createContact db user profile + void $ withCCUser bob $ \user -> withCCTransaction bob $ \db -> let TestCC {chatController = ChatController {config}} = bob in runExceptT $ createContact db (mkStoreCxt config) user profile bob @@@ [("@alice", "")] -- GUI api diff --git a/tests/ChatTests/Utils.hs b/tests/ChatTests/Utils.hs index 27c36568ec..b83b79c3a9 100644 --- a/tests/ChatTests/Utils.hs +++ b/tests/ChatTests/Utils.hs @@ -85,7 +85,7 @@ chatRelayProfile :: Profile chatRelayProfile = mkProfile "relay" "Relay" Nothing mkProfile :: T.Text -> T.Text -> Maybe ImageData -> Profile -mkProfile displayName descr image = Profile {displayName, fullName = "", shortDescr = Just descr, image, contactLink = Nothing, peerType = Nothing, preferences = defaultPrefs} +mkProfile displayName descr image = Profile {displayName, fullName = "", shortDescr = Just descr, image, contactLink = Nothing, peerType = Nothing, preferences = defaultPrefs, badge = Nothing} it :: HasCallStack => String -> (ps -> Expectation) -> SpecWith (Arg (ps -> Expectation)) it name test = diff --git a/tests/MobileTests.hs b/tests/MobileTests.hs index d57411a598..bc0cc30a78 100644 --- a/tests/MobileTests.hs +++ b/tests/MobileTests.hs @@ -32,8 +32,10 @@ import Foreign.Storable (peek) import GHC.IO.Encoding (setLocaleEncoding, setFileSystemEncoding, setForeignEncoding) import JSONFixtures import Simplex.Chat +import Simplex.Chat.Badges (BadgeInfo (..), BadgeRequest (..), BadgeType (..), generateMasterKey, verifyCredential) import Simplex.Chat.Controller (ChatController (..), ChatDatabase (..)) import Simplex.Chat.Mobile hiding (error) +import Simplex.Chat.Mobile.Badges hiding (error) import Simplex.Chat.Mobile.File import Simplex.Chat.Mobile.Shared import Simplex.Chat.Mobile.WebRTC @@ -81,6 +83,8 @@ mobileTests = do describe "Parsers" $ do it "should parse server address" testChatParseServer it "should parse and sanitize URI" testChatParseUri + describe "Badges" $ do + it "should generate key and issue badge via C API, verify credential" testBadgeKeygenIssueCApi noActiveUser :: LB.ByteString noActiveUser = @@ -308,6 +312,25 @@ testChatParseUri :: TestParams -> IO () testChatParseUri _ = do pure () +-- Generate a server keypair and issue a badge credential via the C FFI, +-- constructing the request from the typed records, then verify the issued +-- credential's BBS signature on the Haskell side. +testBadgeKeygenIssueCApi :: TestParams -> IO () +testBadgeKeygenIssueCApi _ = do + g <- C.newRandom + IssuerKeyPair {publicKey, secretKey} <- ffiResult =<< (peekCString =<< cChatBadgeKeygen) + mk <- generateMasterKey g + let req = BadgeIssueReq {badgeKeyIdx = 1, secretKey, request = BadgeRequest {masterKey = mk, badgeInfo = BadgeInfo {badgeType = BTSupporter, badgeExpiry = Nothing, badgeExtra = ""}}} + cred <- ffiResult =<< (peekCString =<< cChatBadgeIssue =<< newCString (LB.unpack (J.encode req))) + verifyCredential publicKey cred `shouldReturn` True + +-- Decode an FFI `BadgeResult` envelope, returning the result or failing on error. +ffiResult :: FromJSON r => String -> IO r +ffiResult s = case J.eitherDecode (LB.pack s) of + Right (BadgeResult r) -> pure r + Right (BadgeError e) -> error $ "badge FFI error: " <> show e + Left e -> error $ "badge FFI decode failed: " <> e <> " in " <> s + jDecode :: FromJSON a => String -> IO (Maybe a) jDecode = pure . J.decode . LB.pack diff --git a/tests/ProtocolTests.hs b/tests/ProtocolTests.hs index aef41e90d2..10f8808015 100644 --- a/tests/ProtocolTests.hs +++ b/tests/ProtocolTests.hs @@ -104,7 +104,7 @@ testGroupPreferences :: Maybe GroupPreferences testGroupPreferences = Just GroupPreferences {timedMessages = Nothing, directMessages = Nothing, reactions = Just ReactionsGroupPreference {enable = FEOn}, voice = Just VoiceGroupPreference {enable = FEOn, role = Nothing}, files = Nothing, fullDelete = Nothing, simplexLinks = Nothing, history = Nothing, reports = Nothing, support = Nothing, sessions = Nothing, comments = Nothing, commands = Nothing} testProfile :: Profile -testProfile = Profile {displayName = "alice", fullName = "Alice", shortDescr = Nothing, image = Just (ImageData "data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAgAAAAIAQMAAAD+wSzIAAAABlBMVEX///+/v7+jQ3Y5AAAADklEQVQI12P4AIX8EAgALgAD/aNpbtEAAAAASUVORK5CYII="), peerType = Nothing, contactLink = Nothing, preferences = testChatPreferences} +testProfile = Profile {displayName = "alice", fullName = "Alice", shortDescr = Nothing, image = Just (ImageData "data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAgAAAAIAQMAAAD+wSzIAAAABlBMVEX///+/v7+jQ3Y5AAAADklEQVQI12P4AIX8EAgALgAD/aNpbtEAAAAASUVORK5CYII="), peerType = Nothing, contactLink = Nothing, preferences = testChatPreferences, badge = Nothing} testGroupProfile :: GroupProfile testGroupProfile = GroupProfile {displayName = "team", fullName = "Team", description = Nothing, shortDescr = Nothing, image = Nothing, publicGroup = Nothing, groupPreferences = testGroupPreferences, memberAdmission = Nothing} @@ -218,7 +218,7 @@ decodeChatMessageTest = describe "Chat message encoding/decoding" $ do #==# XInfo testProfile it "x.info with empty full name" $ "{\"v\":\"1\",\"event\":\"x.info\",\"params\":{\"profile\":{\"fullName\":\"\",\"displayName\":\"alice\",\"preferences\":{\"reactions\":{\"allow\":\"yes\"},\"voice\":{\"allow\":\"yes\"}}}}}" - #==# XInfo Profile {displayName = "alice", fullName = "", shortDescr = Nothing, image = Nothing, contactLink = Nothing, peerType = Nothing, preferences = testChatPreferences} + #==# XInfo Profile {displayName = "alice", fullName = "", shortDescr = Nothing, image = Nothing, contactLink = Nothing, peerType = Nothing, preferences = testChatPreferences, badge = Nothing} it "x.contact with xContactId" $ "{\"v\":\"1\",\"event\":\"x.contact\",\"params\":{\"contactReqId\":\"AQIDBA==\",\"profile\":{\"fullName\":\"Alice\",\"displayName\":\"alice\",\"image\":\"data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAgAAAAIAQMAAAD+wSzIAAAABlBMVEX///+/v7+jQ3Y5AAAADklEQVQI12P4AIX8EAgALgAD/aNpbtEAAAAASUVORK5CYII=\",\"preferences\":{\"reactions\":{\"allow\":\"yes\"},\"voice\":{\"allow\":\"yes\"}}}}}" #==# XContact testProfile (Just $ XContactId "\1\2\3\4") Nothing Nothing diff --git a/tests/Test.hs b/tests/Test.hs index 639708441e..874428bc1f 100644 --- a/tests/Test.hs +++ b/tests/Test.hs @@ -11,6 +11,7 @@ import ChatTests.DBUtils import ChatTests.Utils (xdescribe'') import Control.Logger.Simple import Data.Time.Clock.System +import BadgeTests import JSONTests import MarkdownTests import MemberRelationsTests @@ -60,6 +61,7 @@ main = do #endif around tmpBracket $ describe "WebRTC encryption" webRTCTests #endif + describe "Supporter badges" badgeTests describe "SimpleX chat markdown" markdownTests describe "JSON Tests" jsonTests describe "Member relations" memberRelationsTests From 17fcb435760bba0b689642dcda91d98bf60a5487 Mon Sep 17 00:00:00 2001 From: Evgeny Poberezkin Date: Mon, 15 Jun 2026 22:29:07 +0100 Subject: [PATCH 14/81] core: 6.5.5.0 (simplexmq 6.5.4.0) --- cabal.project | 2 +- scripts/nix/sha256map.nix | 2 +- simplex-chat.cabal | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/cabal.project b/cabal.project index d3b9eeffa5..d6151cc620 100644 --- a/cabal.project +++ b/cabal.project @@ -21,7 +21,7 @@ constraints: zip +disable-bzip2 +disable-zstd source-repository-package type: git location: https://github.com/simplex-chat/simplexmq.git - tag: 9f9b6c8e88524fb5fd063f47617a679ea53ac7c0 + tag: 376d6a261a1074717aed65ad97bb6f2a9532011b source-repository-package type: git diff --git a/scripts/nix/sha256map.nix b/scripts/nix/sha256map.nix index ac230b7af1..150a2a4e6f 100644 --- a/scripts/nix/sha256map.nix +++ b/scripts/nix/sha256map.nix @@ -1,5 +1,5 @@ { - "https://github.com/simplex-chat/simplexmq.git"."9f9b6c8e88524fb5fd063f47617a679ea53ac7c0" = "01jdjndx0h2ardzi9dd21q0n36lvwbdkhp7nzdrz01c3hh0br9bd"; + "https://github.com/simplex-chat/simplexmq.git"."376d6a261a1074717aed65ad97bb6f2a9532011b" = "1j83kzjcgjr7ngbamby96r90yal80c6kv79l9shy05mppmp73f4y"; "https://github.com/simplex-chat/hs-socks.git"."a30cc7a79a08d8108316094f8f2f82a0c5e1ac51" = "0yasvnr7g91k76mjkamvzab2kvlb1g5pspjyjn2fr6v83swjhj38"; "https://github.com/simplex-chat/direct-sqlcipher.git"."f814ee68b16a9447fbb467ccc8f29bdd3546bfd9" = "1ql13f4kfwkbaq7nygkxgw84213i0zm7c1a8hwvramayxl38dq5d"; "https://github.com/simplex-chat/sqlcipher-simple.git"."a46bd361a19376c5211f1058908fc0ae6bf42446" = "1z0r78d8f0812kxbgsm735qf6xx8lvaz27k1a0b4a2m0sshpd5gl"; diff --git a/simplex-chat.cabal b/simplex-chat.cabal index 3a1a8ff24b..20b71a052d 100644 --- a/simplex-chat.cabal +++ b/simplex-chat.cabal @@ -5,7 +5,7 @@ cabal-version: 1.12 -- see: https://github.com/sol/hpack name: simplex-chat -version: 6.5.4.1 +version: 6.5.5.0 category: Web, System, Services, Cryptography homepage: https://github.com/simplex-chat/simplex-chat#readme author: simplex.chat From 732acf0474c22cf7cff228f9ca3877984882b882 Mon Sep 17 00:00:00 2001 From: Evgeny Poberezkin Date: Tue, 16 Jun 2026 06:53:55 +0100 Subject: [PATCH 15/81] desktop: shorter "close to tray" setting --- .../common/src/commonMain/resources/MR/base/strings.xml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/apps/multiplatform/common/src/commonMain/resources/MR/base/strings.xml b/apps/multiplatform/common/src/commonMain/resources/MR/base/strings.xml index ecca74fae2..d6d31dd4d1 100644 --- a/apps/multiplatform/common/src/commonMain/resources/MR/base/strings.xml +++ b/apps/multiplatform/common/src/commonMain/resources/MR/base/strings.xml @@ -3103,8 +3103,8 @@ Quit SimpleX SimpleX SimpleX — %d unread - Minimize to tray when closing window - Keep SimpleX running in the background to receive messages. + Close to tray + Runs in background to receive messages %s supports SimpleX Chat. %1$s supported SimpleX Chat. The badge expired on %2$s. You can support SimpleX starting from v7 of the app. From 43904dd0dccc46ade1e7413aa10e5ebf2eac1b3b Mon Sep 17 00:00:00 2001 From: sh <37271604+shumvgolove@users.noreply.github.com> Date: Tue, 16 Jun 2026 13:23:27 +0400 Subject: [PATCH 16/81] desktop: authenticate call server websocket (#7076) * Authenticate desktop call websocket * call: patch ui.ts source for ws token and add server auth integration test --------- Co-authored-by: Paul Bottinelli --- .../resources/assets/www/desktop/ui.js | 4 +- .../common/views/call/CallView.desktop.kt | 43 ++++++++++-- .../chat/simplex/app/CallServerAuthTest.kt | 70 +++++++++++++++++++ .../chat/simplex/app/CallServerTokenTest.kt | 29 ++++++++ .../simplex-chat-webrtc/src/desktop/ui.ts | 4 +- 5 files changed, 139 insertions(+), 11 deletions(-) create mode 100644 apps/multiplatform/common/src/desktopTest/kotlin/chat/simplex/app/CallServerAuthTest.kt create mode 100644 apps/multiplatform/common/src/desktopTest/kotlin/chat/simplex/app/CallServerTokenTest.kt diff --git a/apps/multiplatform/common/src/commonMain/resources/assets/www/desktop/ui.js b/apps/multiplatform/common/src/commonMain/resources/assets/www/desktop/ui.js index 7c0836960c..e6828817ee 100644 --- a/apps/multiplatform/common/src/commonMain/resources/assets/www/desktop/ui.js +++ b/apps/multiplatform/common/src/commonMain/resources/assets/www/desktop/ui.js @@ -3,7 +3,7 @@ useWorker = typeof window.Worker !== "undefined"; isDesktop = true; // Create WebSocket connection. -const socket = new WebSocket(`ws://${location.host}`); +const socket = new WebSocket(`ws://${location.host}${location.search}`); socket.addEventListener("open", (_event) => { console.log("Opened socket"); sendMessageToNative = (msg) => { @@ -192,4 +192,4 @@ function updateCallInfoView(state, description) { document.getElementById("state").innerText = state; document.getElementById("description").innerText = description; } -//# sourceMappingURL=ui.js.map \ No newline at end of file +//# sourceMappingURL=ui.js.map diff --git a/apps/multiplatform/common/src/desktopMain/kotlin/chat/simplex/common/views/call/CallView.desktop.kt b/apps/multiplatform/common/src/desktopMain/kotlin/chat/simplex/common/views/call/CallView.desktop.kt index 20fe6a48a3..75782d75d7 100644 --- a/apps/multiplatform/common/src/desktopMain/kotlin/chat/simplex/common/views/call/CallView.desktop.kt +++ b/apps/multiplatform/common/src/desktopMain/kotlin/chat/simplex/common/views/call/CallView.desktop.kt @@ -18,10 +18,12 @@ import org.nanohttpd.protocols.http.response.Status import org.nanohttpd.protocols.websockets.* import java.io.IOException import java.net.BindException -import java.net.URI +import java.security.SecureRandom +import java.util.Base64 private const val SERVER_HOST = "localhost" private const val SERVER_PORT = 50395 +private const val CALL_SERVER_TOKEN_BYTES = 32 val connections = ArrayList() // Spec: spec/services/calls.md#ActiveCallView @@ -153,14 +155,15 @@ private fun SendStateUpdates() { @Composable fun WebRTCController(callCommand: SnapshotStateList, onResponse: (WVAPIMessage) -> Unit) { val uriHandler = LocalUriHandler.current + val token = remember { newCallServerToken() } val endCall = { val call = chatModel.activeCall.value if (call != null) withBGApi { chatModel.callManager.endCall(call) } } val server = remember { - startServer(onResponse).apply { + startServer(onResponse, token = token).apply { try { - uriHandler.openUri("http://${SERVER_HOST}:${listeningPort}/simplex/call/") + uriHandler.openUri("http://${SERVER_HOST}:${listeningPort}/simplex/call/?token=$token") } catch (e: Exception) { Log.e(TAG, "Unable to open browser: ${e.stackTraceToString()}") AlertManager.shared.showAlertMsg( @@ -208,7 +211,11 @@ fun WebRTCController(callCommand: SnapshotStateList, onResponse: ( } } -fun startServer(onResponse: (WVAPIMessage) -> Unit, port: Int = SERVER_PORT): NanoWSD { +fun startServer( + onResponse: (WVAPIMessage) -> Unit, + port: Int = SERVER_PORT, + token: String = newCallServerToken(), +): NanoWSD { val server = object: NanoWSD(SERVER_HOST, port) { override fun openWebSocket(session: IHTTPSession): WebSocket = MyWebSocket(onResponse, session) @@ -227,8 +234,18 @@ fun startServer(onResponse: (WVAPIMessage) -> Unit, port: Int = SERVER_PORT): Na override fun handle(session: IHTTPSession): Response { return when { - session.headers["upgrade"] == "websocket" -> super.handle(session) - session.uri.contains("/simplex/call/") -> resourcesToResponse("/desktop/call.html") + session.headers["upgrade"] == "websocket" -> + if (hasValidCallServerToken(session.parameters, token)) { + super.handle(session) + } else { + unauthorizedResponse() + } + session.uri.contains("/simplex/call/") -> + if (hasValidCallServerToken(session.parameters, token)) { + resourcesToResponse("/desktop/call.html") + } else { + unauthorizedResponse() + } else -> resourcesToResponse(uriCreateOrNull(session.uri)?.path ?: return newFixedLengthResponse("Error parsing URL")) } } @@ -239,11 +256,23 @@ fun startServer(onResponse: (WVAPIMessage) -> Unit, port: Int = SERVER_PORT): Na if (port == 0) throw e Log.w(TAG, "Call server port $port is busy, using a random port: ${e.message}") server.stop() - return startServer(onResponse, port = 0) + return startServer(onResponse, port = 0, token = token) } return server } +internal fun newCallServerToken(): String { + val bytes = ByteArray(CALL_SERVER_TOKEN_BYTES) + SecureRandom().nextBytes(bytes) + return Base64.getUrlEncoder().withoutPadding().encodeToString(bytes) +} + +internal fun hasValidCallServerToken(parameters: Map>, token: String): Boolean = + token.isNotEmpty() && parameters["token"]?.any { it == token } == true + +private fun unauthorizedResponse(): Response = + newFixedLengthResponse(Status.UNAUTHORIZED, "text/plain", "Unauthorized") + class MyWebSocket(val onResponse: (WVAPIMessage) -> Unit, handshakeRequest: IHTTPSession) : WebSocket(handshakeRequest) { override fun onOpen() { connections.add(this) diff --git a/apps/multiplatform/common/src/desktopTest/kotlin/chat/simplex/app/CallServerAuthTest.kt b/apps/multiplatform/common/src/desktopTest/kotlin/chat/simplex/app/CallServerAuthTest.kt new file mode 100644 index 0000000000..800c69f617 --- /dev/null +++ b/apps/multiplatform/common/src/desktopTest/kotlin/chat/simplex/app/CallServerAuthTest.kt @@ -0,0 +1,70 @@ +package chat.simplex.app + +import chat.simplex.common.views.call.startServer +import java.net.Socket +import kotlin.test.AfterTest +import kotlin.test.Test +import kotlin.test.assertEquals +import kotlin.test.assertNotEquals + +// Integration test for the desktop call server's token gate (the handle() enforcement), +// which the unit-level CallServerTokenTest does not exercise. +class CallServerAuthTest { + private val token = "integration-test-token" + // port = 0 binds a random free port, avoiding a clash with a real call server on SERVER_PORT + private val server = startServer(onResponse = {}, port = 0, token = token) + private val port get() = server.listeningPort + + @AfterTest + fun tearDown() = server.stop() + + @Test + fun testWebSocketUpgradeRejectedWithoutToken() { + assertEquals(401, requestStatus(webSocketUpgrade(path = "/"))) + } + + @Test + fun testWebSocketUpgradeRejectedWithWrongToken() { + assertEquals(401, requestStatus(webSocketUpgrade(path = "/?token=wrong"))) + } + + @Test + fun testWebSocketUpgradeAcceptedWithToken() { + assertEquals(101, requestStatus(webSocketUpgrade(path = "/?token=$token"))) + } + + @Test + fun testCallPageRejectedWithoutToken() { + assertEquals(401, requestStatus(get(path = "/simplex/call/"))) + } + + @Test + fun testCallPagePassesAuthGateWithToken() { + // Resource serving may differ in the test classpath, so assert only that the auth gate was passed (not 401) + assertNotEquals(401, requestStatus(get(path = "/simplex/call/?token=$token"))) + } + + private fun get(path: String): List = listOf("GET $path HTTP/1.1", "Host: localhost:$port") + + private fun webSocketUpgrade(path: String): List = + listOf( + "GET $path HTTP/1.1", + "Host: localhost:$port", + "Upgrade: websocket", + "Connection: Upgrade", + "Sec-WebSocket-Key: dGhlIHNhbXBsZSBub25jZQ==", + "Sec-WebSocket-Version: 13", + ) + + // Sends a raw HTTP request and returns the response status code from the status line. + private fun requestStatus(requestLines: List): Int = + Socket("localhost", port).use { socket -> + socket.soTimeout = 5000 + socket.getOutputStream().apply { + write((requestLines.joinToString("\r\n") + "\r\n\r\n").toByteArray()) + flush() + } + val statusLine = socket.getInputStream().bufferedReader().readLine() ?: error("no response from call server") + statusLine.split(" ")[1].toInt() + } +} diff --git a/apps/multiplatform/common/src/desktopTest/kotlin/chat/simplex/app/CallServerTokenTest.kt b/apps/multiplatform/common/src/desktopTest/kotlin/chat/simplex/app/CallServerTokenTest.kt new file mode 100644 index 0000000000..dc729b1ec2 --- /dev/null +++ b/apps/multiplatform/common/src/desktopTest/kotlin/chat/simplex/app/CallServerTokenTest.kt @@ -0,0 +1,29 @@ +package chat.simplex.app + +import chat.simplex.common.views.call.hasValidCallServerToken +import chat.simplex.common.views.call.newCallServerToken +import kotlin.test.Test +import kotlin.test.assertFalse +import kotlin.test.assertTrue + +class CallServerTokenTest { + @Test + fun testCallServerTokenRequiresExactTokenParameter() { + val token = "secret" + + assertTrue(hasValidCallServerToken(mapOf("token" to listOf(token)), token)) + assertFalse(hasValidCallServerToken(mapOf("token" to listOf("wrong")), token)) + assertFalse(hasValidCallServerToken(mapOf("x-token" to listOf(token)), token)) + assertFalse(hasValidCallServerToken(mapOf("token" to listOf(token)), "")) + } + + @Test + fun testCallServerTokenIsUrlSafe() { + val token = newCallServerToken() + + assertTrue(token.length >= 40) + assertFalse(token.contains("+")) + assertFalse(token.contains("/")) + assertFalse(token.contains("=")) + } +} diff --git a/packages/simplex-chat-webrtc/src/desktop/ui.ts b/packages/simplex-chat-webrtc/src/desktop/ui.ts index eac659a17a..862c727bd5 100644 --- a/packages/simplex-chat-webrtc/src/desktop/ui.ts +++ b/packages/simplex-chat-webrtc/src/desktop/ui.ts @@ -2,8 +2,8 @@ useWorker = typeof window.Worker !== "undefined" isDesktop = true -// Create WebSocket connection. -const socket = new WebSocket(`ws://${location.host}`) +// Create WebSocket connection. location.search carries the per-call ?token=... capability required by the server. +const socket = new WebSocket(`ws://${location.host}${location.search}`) socket.addEventListener("open", (_event) => { console.log("Opened socket") From adb3fb8cb2c0ffbfe9f04772964ab77f553fceb0 Mon Sep 17 00:00:00 2001 From: Evgeny Date: Tue, 16 Jun 2026 14:36:55 +0100 Subject: [PATCH 17/81] core: render web previews for channels (#7029) * plan: web previews for channels * types for recipient side to support channel web previews and domain names * fix * migrations * update schema and api types * update schema * rename migrations * core: render channel preview data * core: render channel preview data in relays * website: use cpp to inject JS functions * JSC files * remove directory.js * channel preview renderer * Revert "cli: fix redraw slowness (#6735)" This reverts commit b801d77c74f0b688000e0bc2194e835bd1d1965e. * sample channel page * default avatar * rename options * better layout * layout * images * some fixes * tails * markdown colors * image sizes * reactions * fix reactions * fewer avatars * forward icon * command to change group access parameters * view public group access changes in CLI * media metadata color * ios: group web access ui * update ui * add init * kotlin, labels * update page * update relay base URL * fix * ios update channel web page info * update kotlin layout * use cards * update layout * use domains for relay data, path is fixed * update embed code * fix bots api * include only history items and senders * update preview JS/HTML * show different error if link is different * remove stale json files * better layout * layout fixes * improve layout * improve layout * update embed code * web cta * better layout * buttons * layout * paddings * desktop cta * desktop cta * cta layout * fonts * paddings * paddings * more paddings * copy link * read more * hide avatar and placeholder when all messages are from channel * color scheme * fix color * improve * layout * welcome message * dark mode colors * padding * font size * overscroll * font * logo on button * better join * buttons * refactor * another logo * text * desktop button * button text * center * fix svg * padding * smaller gap * render channel on any message changes etc * fixes * atomic file updates, escape attributes * fix tests * more tests * more efficient rendering * improve security * sanitize links, include mentioned members * schema * fixes * improve rendering * fix showing correct subscribers count * fix member names --------- Co-authored-by: Evgeny @ SimpleX Chat <259188159+evgeny-simplex@users.noreply.github.com> --- .gitignore | 5 +- .../Chat/Group/ChannelWebAccessView.swift | 169 ++ .../Views/Chat/Group/GroupChatInfoView.swift | 17 + apps/ios/SimpleX.xcodeproj/project.pbxproj | 4 + apps/ios/SimpleXChat/ChatTypes.swift | 7 + .../views/chat/group/ChannelWebPageView.kt | 186 ++ .../views/chat/group/GroupChatInfoView.kt | 22 + .../common/views/helpers/TextEditor.kt | 22 + .../commonMain/resources/MR/base/strings.xml | 14 + bots/src/API/Docs/Commands.hs | 1 + simplex-chat.cabal | 3 + src/Simplex/Chat.hs | 7 +- src/Simplex/Chat/Controller.hs | 41 + src/Simplex/Chat/Library/Commands.hs | 40 + src/Simplex/Chat/Library/Internal.hs | 5 +- src/Simplex/Chat/Library/Subscriber.hs | 17 +- src/Simplex/Chat/Mobile.hs | 1 + src/Simplex/Chat/Options.hs | 44 +- src/Simplex/Chat/Protocol.hs | 7 +- src/Simplex/Chat/Store/Groups.hs | 39 + src/Simplex/Chat/Store/Messages.hs | 19 + src/Simplex/Chat/Store/Postgres/Migrations.hs | 4 +- .../M20260601_relay_sent_web_domain.hs | 19 + .../Store/Postgres/Migrations/chat_schema.sql | 3 +- src/Simplex/Chat/Store/SQLite/Migrations.hs | 4 +- .../M20260601_relay_sent_web_domain.hs | 18 + .../SQLite/Migrations/agent_query_plans.txt | 9 - .../SQLite/Migrations/chat_query_plans.txt | 61 + .../Store/SQLite/Migrations/chat_schema.sql | 3 +- src/Simplex/Chat/Types.hs | 9 +- src/Simplex/Chat/View.hs | 22 +- src/Simplex/Chat/Web.hs | 430 +++++ tests/Bots/DirectoryTests.hs | 4 +- tests/ChatClient.hs | 7 +- tests/ChatTests/ChatRelays.hs | 252 +++ tests/ProtocolTests.hs | 8 +- website/.eleventy.js | 2 +- website/channel_sample.html | 28 + website/src/js/channel-preview.jsc | 1548 +++++++++++++++++ .../src/js/{directory.js => directory.jsc} | 148 +- website/src/js/simplex-lib.jsc | 156 ++ website/web.sh | 4 + 42 files changed, 3234 insertions(+), 175 deletions(-) create mode 100644 apps/ios/Shared/Views/Chat/Group/ChannelWebAccessView.swift create mode 100644 apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/group/ChannelWebPageView.kt create mode 100644 src/Simplex/Chat/Store/Postgres/Migrations/M20260601_relay_sent_web_domain.hs create mode 100644 src/Simplex/Chat/Store/SQLite/Migrations/M20260601_relay_sent_web_domain.hs create mode 100644 src/Simplex/Chat/Web.hs create mode 100644 website/channel_sample.html create mode 100644 website/src/js/channel-preview.jsc rename website/src/js/{directory.js => directory.jsc} (77%) create mode 100644 website/src/js/simplex-lib.jsc diff --git a/.gitignore b/.gitignore index 7bd3d04e59..035d24c6cd 100644 --- a/.gitignore +++ b/.gitignore @@ -54,7 +54,10 @@ website/translations.json website/src/img/images/ website/src/images/ website/src/js/lottie.min.js -website/src/js/ethers* +website/src/js/ethers.* +website/src/js/directory.js +website/src/js/channel-preview.js +website/src/js/simplex-lib.js website/src/file-assets/ website/src/link-images/ website/src/privacy.md diff --git a/apps/ios/Shared/Views/Chat/Group/ChannelWebAccessView.swift b/apps/ios/Shared/Views/Chat/Group/ChannelWebAccessView.swift new file mode 100644 index 0000000000..dd46b7a117 --- /dev/null +++ b/apps/ios/Shared/Views/Chat/Group/ChannelWebAccessView.swift @@ -0,0 +1,169 @@ +// +// ChannelWebAccessView.swift +// SimpleX (iOS) +// +// Created by simplex.chat on 31/05/2026. +// Copyright © 2026 SimpleX Chat. All rights reserved. +// + +import SwiftUI +import SimpleXChat + +struct ChannelWebAccessView: View { + @EnvironmentObject var theme: AppTheme + @Environment(\.dismiss) var dismiss: DismissAction + @Binding var groupInfo: GroupInfo + @State private var webPage: String + @State private var allowEmbedding: Bool + @State private var saving = false + @State private var groupRelays: [GroupRelay] = [] + + init(groupInfo: Binding) { + _groupInfo = groupInfo + let access = groupInfo.wrappedValue.groupProfile.publicGroup?.publicGroupAccess + _webPage = State(initialValue: access?.groupWebPage ?? "") + _allowEmbedding = State(initialValue: access?.allowEmbedding ?? false) + } + + var body: some View { + List { + if let code = embedCode { + webpageInfo("Create a webpage to show your channel preview to visitors before they subscribe. Host it yourself or use any static hosting.") + + Section { + ScrollView { + Text(code) + .font(.system(.caption, design: .monospaced)) + .textSelection(.enabled) + } + .frame(maxHeight: 88) + Button { + UIPasteboard.general.string = code + } label: { + Label("Copy code", systemImage: "doc.on.doc") + } + } header: { + Text("Webpage code") + } footer: { + Text("Add this code to your webpage. It will display the preview of your channel / group.") + } + } else { + webpageInfo("Used chat relays do not support webpages.") + } + + Section { + TextField("https://", text: $webPage) + .keyboardType(.URL) + .autocapitalization(.none) + .disableAutocorrection(true) + } header: { + Text("Enter webpage URL") + } footer: { + Text("It will be shown to subscribers and used to allow loading the preview.") + } + + Section { + Toggle("Allow anyone to embed", isOn: $allowEmbedding) + } footer: { + Text(allowEmbedding ? "Any webpage can show the preview." : "Only your page above can show the preview.") + } + + Section { + Button { + saveAccess() + } label: { + HStack { + Text(groupInfo.isChannel ? "Save and notify subscribers" : "Save and notify members") + if saving { Spacer(); ProgressView() } + } + } + .disabled(!hasChanges || saving) + } + } + .modifier(ThemedBackground(grouped: true)) + .onAppear { + Task { + let relays = await apiGetGroupRelays(groupInfo.groupId) + await MainActor.run { groupRelays = relays } + } + } + .onDisappear { + if hasChanges { + showAlert( + title: NSLocalizedString("Save webpage settings?", comment: "alert title"), + message: NSLocalizedString("Webpage settings were changed. If you save, the updated settings will be sent to subscribers.", comment: "alert message"), + buttonTitle: NSLocalizedString("Save", comment: "alert button"), + buttonAction: saveAccess, + cancelButton: true + ) + } + } + } + + private func webpageInfo(_ text: LocalizedStringKey) -> some View { + Section { + Text(text).foregroundColor(theme.colors.secondary) + } + .listRowBackground(Color.clear) + .listRowSeparator(.hidden) + .listRowInsets(EdgeInsets(top: 8, leading: 16, bottom: 0, trailing: 16)) + } + + private var hasChanges: Bool { + let access = groupInfo.groupProfile.publicGroup?.publicGroupAccess + let currentWebPage = access?.groupWebPage ?? "" + let currentEmbedding = access?.allowEmbedding ?? false + return webPage != currentWebPage || allowEmbedding != currentEmbedding + } + + private var relayDomains: [String] { + groupRelays.compactMap { $0.relayCap.webDomain } + } + + private var embedCode: String? { + if let pg = groupInfo.groupProfile.publicGroup, + !relayDomains.isEmpty { + """ +
+ + """ + } else { + nil + } + } + + private func saveAccess() { + saving = true + Task { + do { + var gp = groupInfo.groupProfile + if var pg = gp.publicGroup { + let trimmedPage = webPage.trimmingCharacters(in: .whitespacesAndNewlines) + let existingAccess = pg.publicGroupAccess + pg.publicGroupAccess = PublicGroupAccess( + groupWebPage: trimmedPage.isEmpty ? nil : trimmedPage, + groupDomain: existingAccess?.groupDomain, + domainWebPage: existingAccess?.domainWebPage ?? false, + allowEmbedding: allowEmbedding + ) + gp.publicGroup = pg + } + let gInfo = try await apiUpdateGroup(groupInfo.groupId, gp) + await MainActor.run { + groupInfo = gInfo + ChatModel.shared.updateGroup(gInfo) + saving = false + } + } catch { + logger.error("ChannelWebAccessView apiUpdateGroup error: \(responseError(error))") + await MainActor.run { saving = false } + } + } + } +} diff --git a/apps/ios/Shared/Views/Chat/Group/GroupChatInfoView.swift b/apps/ios/Shared/Views/Chat/Group/GroupChatInfoView.swift index 26aedb2541..b62939fd36 100644 --- a/apps/ios/Shared/Views/Chat/Group/GroupChatInfoView.swift +++ b/apps/ios/Shared/Views/Chat/Group/GroupChatInfoView.swift @@ -244,6 +244,12 @@ struct GroupChatInfoView: View { } } + if groupInfo.useRelays && groupInfo.isOwner { + Section(header: Text("Advanced options").foregroundColor(theme.colors.secondary)) { + channelWebAccessButton() + } + } + if developerTools { Section(header: Text("For console").foregroundColor(theme.colors.secondary)) { infoRow("Local name", chat.chatInfo.localDisplayName) @@ -657,6 +663,17 @@ struct GroupChatInfoView: View { } } + private func channelWebAccessButton() -> some View { + let title: LocalizedStringKey = groupInfo.isChannel ? "Channel webpage" : "Group webpage" + return NavigationLink { + ChannelWebAccessView(groupInfo: $groupInfo) + .navigationBarTitle(title) + .navigationBarTitleDisplayMode(.large) + } label: { + Label(title, systemImage: "globe") + } + } + private func groupLinkDestinationView() -> some View { GroupLinkView( groupId: groupInfo.groupId, diff --git a/apps/ios/SimpleX.xcodeproj/project.pbxproj b/apps/ios/SimpleX.xcodeproj/project.pbxproj index 20dfbba6ee..c5dc039d8d 100644 --- a/apps/ios/SimpleX.xcodeproj/project.pbxproj +++ b/apps/ios/SimpleX.xcodeproj/project.pbxproj @@ -170,6 +170,7 @@ 648679AB2BC96A74006456E7 /* ChatItemForwardingView.swift in Sources */ = {isa = PBXBuildFile; fileRef = 648679AA2BC96A74006456E7 /* ChatItemForwardingView.swift */; }; 6495D7042F48CFC50060512B /* ChannelMembersView.swift in Sources */ = {isa = PBXBuildFile; fileRef = 6495D7032F48CFC50060512B /* ChannelMembersView.swift */; }; 6495D7062F48CFFD0060512B /* ChannelRelaysView.swift in Sources */ = {isa = PBXBuildFile; fileRef = 6495D7052F48CFFD0060512B /* ChannelRelaysView.swift */; }; + E5E418022F83D2CA00252B9E /* ChannelWebAccessView.swift in Sources */ = {isa = PBXBuildFile; fileRef = E5E418032F83D2CA00252B9E /* ChannelWebAccessView.swift */; }; 6495D7082F48D0000060512B /* AddGroupRelayView.swift in Sources */ = {isa = PBXBuildFile; fileRef = 6495D7072F48D0000060512B /* AddGroupRelayView.swift */; }; 649BCDA0280460FD00C3A862 /* ComposeImageView.swift in Sources */ = {isa = PBXBuildFile; fileRef = 649BCD9F280460FD00C3A862 /* ComposeImageView.swift */; }; 649BCDA22805D6EF00C3A862 /* CIImageView.swift in Sources */ = {isa = PBXBuildFile; fileRef = 649BCDA12805D6EF00C3A862 /* CIImageView.swift */; }; @@ -549,6 +550,7 @@ 6493D667280ED77F007A76FB /* en */ = {isa = PBXFileReference; lastKnownFileType = text.plist.strings; name = en; path = en.lproj/Localizable.strings; sourceTree = ""; }; 6495D7032F48CFC50060512B /* ChannelMembersView.swift */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.swift; path = ChannelMembersView.swift; sourceTree = ""; }; 6495D7052F48CFFD0060512B /* ChannelRelaysView.swift */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.swift; path = ChannelRelaysView.swift; sourceTree = ""; }; + E5E418032F83D2CA00252B9E /* ChannelWebAccessView.swift */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.swift; path = ChannelWebAccessView.swift; sourceTree = ""; }; 6495D7072F48D0000060512B /* AddGroupRelayView.swift */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.swift; path = AddGroupRelayView.swift; sourceTree = ""; }; 649BCD9F280460FD00C3A862 /* ComposeImageView.swift */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.swift; path = ComposeImageView.swift; sourceTree = ""; }; 649BCDA12805D6EF00C3A862 /* CIImageView.swift */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.swift; path = CIImageView.swift; sourceTree = ""; }; @@ -1178,6 +1180,7 @@ 64A779FD2DC3AFF200FDEF2F /* MemberSupportChatToolbar.swift */, 6495D7032F48CFC50060512B /* ChannelMembersView.swift */, 6495D7052F48CFFD0060512B /* ChannelRelaysView.swift */, + E5E418032F83D2CA00252B9E /* ChannelWebAccessView.swift */, 6495D7072F48D0000060512B /* AddGroupRelayView.swift */, ); path = Group; @@ -1640,6 +1643,7 @@ 8C9BC2652C240D5200875A27 /* ThemeModeEditor.swift in Sources */, 647B15E82F4C8D2500EB431E /* AddChannelView.swift in Sources */, 6495D7062F48CFFD0060512B /* ChannelRelaysView.swift in Sources */, + E5E418022F83D2CA00252B9E /* ChannelWebAccessView.swift in Sources */, 6495D7082F48D0000060512B /* AddGroupRelayView.swift in Sources */, 5CB346E92869E8BA001FD2EF /* PushEnvironment.swift in Sources */, 5C55A91F283AD0E400C4E99E /* CallManager.swift in Sources */, diff --git a/apps/ios/SimpleXChat/ChatTypes.swift b/apps/ios/SimpleXChat/ChatTypes.swift index 6b757e795f..56f92cfc0b 100644 --- a/apps/ios/SimpleXChat/ChatTypes.swift +++ b/apps/ios/SimpleXChat/ChatTypes.swift @@ -2614,6 +2614,13 @@ public enum GroupType: Codable, Hashable { } public struct PublicGroupAccess: Codable, Hashable { + public init(groupWebPage: String? = nil, groupDomain: String? = nil, domainWebPage: Bool = false, allowEmbedding: Bool = false) { + self.groupWebPage = groupWebPage + self.groupDomain = groupDomain + self.domainWebPage = domainWebPage + self.allowEmbedding = allowEmbedding + } + public var groupWebPage: String? public var groupDomain: String? public var domainWebPage: Bool = false diff --git a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/group/ChannelWebPageView.kt b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/group/ChannelWebPageView.kt new file mode 100644 index 0000000000..98067e49dd --- /dev/null +++ b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/group/ChannelWebPageView.kt @@ -0,0 +1,186 @@ +package chat.simplex.common.views.chat.group + +import SectionBottomSpacer +import SectionDividerSpaced +import SectionItemView +import SectionTextFooter +import SectionView +import androidx.compose.foundation.* +import androidx.compose.foundation.layout.* +import androidx.compose.material.* +import androidx.compose.runtime.* +import androidx.compose.runtime.saveable.rememberSaveable +import androidx.compose.ui.Modifier +import androidx.compose.ui.platform.LocalClipboardManager +import androidx.compose.ui.text.AnnotatedString +import androidx.compose.ui.text.font.FontFamily +import androidx.compose.ui.text.style.TextOverflow +import androidx.compose.ui.unit.dp +import androidx.compose.ui.unit.sp +import chat.simplex.common.model.* +import chat.simplex.common.platform.* +import chat.simplex.common.ui.theme.* +import chat.simplex.common.views.* +import chat.simplex.common.views.helpers.* +import chat.simplex.common.views.usersettings.* +import chat.simplex.res.MR +import dev.icerock.moko.resources.compose.painterResource +import dev.icerock.moko.resources.compose.stringResource +import kotlinx.coroutines.* + +@Composable +fun ChannelWebPageView( + rhId: Long?, + groupInfo: GroupInfo, + chatModel: ChatModel, + close: () -> Unit +) { + val isChannel = groupInfo.isChannel + val access = groupInfo.groupProfile.publicGroup?.publicGroupAccess + val webPage = rememberSaveable { mutableStateOf(access?.groupWebPage ?: "") } + val allowEmbedding = rememberSaveable { mutableStateOf(access?.allowEmbedding ?: false) } + val groupRelays = remember { mutableStateListOf() } + + val dataUnchanged = webPage.value.trim() == (access?.groupWebPage ?: "") && + allowEmbedding.value == (access?.allowEmbedding ?: false) + + val save: () -> Unit = { + withBGApi { + val trimmedPage = webPage.value.trim() + val newAccess = PublicGroupAccess( + groupWebPage = trimmedPage.ifEmpty { null }, + groupDomain = access?.groupDomain, + domainWebPage = access?.domainWebPage ?: false, + allowEmbedding = allowEmbedding.value + ) + val gp = groupInfo.groupProfile.copy( + publicGroup = groupInfo.groupProfile.publicGroup?.copy(publicGroupAccess = newAccess) + ) + val gInfo = chatModel.controller.apiUpdateGroup(rhId, groupInfo.groupId, gp, isChannel) + if (gInfo != null) { + withContext(Dispatchers.Main) { + chatModel.chatsContext.updateGroup(rhId, gInfo) + } + close() + } + } + } + + val closeWithAlert = { + if (dataUnchanged) { + close() + } else { + AlertManager.shared.showAlertDialogStacked( + title = generalGetString(MR.strings.save_preferences_question), + confirmText = generalGetString(if (isChannel) MR.strings.save_and_notify_channel_subscribers else MR.strings.save_and_notify_group_members), + dismissText = generalGetString(MR.strings.exit_without_saving), + onConfirm = save, + onDismiss = close, + ) + } + } + + LaunchedEffect(Unit) { + val relays = chatModel.controller.apiGetGroupRelays(groupInfo.groupId) + groupRelays.clear() + groupRelays.addAll(relays) + } + + BackHandler(onBack = closeWithAlert) + ModalView(close = closeWithAlert, cardScreen = true) { + ChannelWebPageLayout( + isChannel = isChannel, + webPage = webPage, + allowEmbedding = allowEmbedding, + groupRelays = groupRelays, + groupInfo = groupInfo, + dataUnchanged = dataUnchanged, + save = save + ) + } +} + +@Composable +private fun ChannelWebPageLayout( + isChannel: Boolean, + webPage: MutableState, + allowEmbedding: MutableState, + groupRelays: List, + groupInfo: GroupInfo, + dataUnchanged: Boolean, + save: () -> Unit +) { + val clipboard = LocalClipboardManager.current + ColumnWithScrollBar { + AppBarTitle(stringResource(if (isChannel) MR.strings.channel_webpage else MR.strings.group_webpage)) + + val embedCode = embedCode(groupRelays, groupInfo) + if (embedCode != null) { + SectionTextFooter(stringResource(MR.strings.webpage_info)) + SectionDividerSpaced() + + SectionView(stringResource(MR.strings.webpage_code)) { + SectionItemView { + Text( + embedCode, + style = MaterialTheme.typography.body2.copy(fontFamily = FontFamily.Monospace, fontSize = 12.sp), + maxLines = 6, + overflow = TextOverflow.Ellipsis + ) + } + SectionItemView({ + clipboard.setText(AnnotatedString(embedCode)) + showToast(generalGetString(MR.strings.copied)) + }) { + Icon(painterResource(MR.images.ic_content_copy), null, tint = MaterialTheme.colors.primary) + Spacer(Modifier.width(8.dp)) + Text(stringResource(MR.strings.copy_code), color = MaterialTheme.colors.primary) + } + } + SectionTextFooter(stringResource(MR.strings.webpage_code_footer)) + } else { + SectionTextFooter(stringResource(MR.strings.relays_no_web_support)) + } + SectionDividerSpaced() + + SectionView(stringResource(MR.strings.enter_webpage_url)) { + PlainTextEditor(webPage, placeholder = stringResource(MR.strings.web_page_url_placeholder)) + } + SectionTextFooter(stringResource(MR.strings.webpage_url_footer)) + SectionDividerSpaced() + + SectionView { + PreferenceToggle(stringResource(MR.strings.allow_anyone_to_embed), checked = allowEmbedding.value) { + allowEmbedding.value = it + } + } + SectionTextFooter(stringResource(if (allowEmbedding.value) MR.strings.embed_any_webpage_can_show else MR.strings.embed_only_your_page)) + SectionDividerSpaced() + + SectionView { + SectionItemView(save, disabled = dataUnchanged) { + Text( + stringResource(MR.strings.save_verb), + color = if (dataUnchanged) MaterialTheme.colors.secondary else MaterialTheme.colors.primary + ) + } + } + + SectionBottomSpacer() + } +} + +private fun embedCode(groupRelays: List, groupInfo: GroupInfo): String? { + val pg = groupInfo.groupProfile.publicGroup ?: return null + val relayDomains = groupRelays.mapNotNull { it.relayCap.webDomain } + if (relayDomains.isEmpty()) return null + val domains = relayDomains.joinToString(",") + return """
+""" +} diff --git a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/group/GroupChatInfoView.kt b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/group/GroupChatInfoView.kt index 93c318cab5..b2c25bf06c 100644 --- a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/group/GroupChatInfoView.kt +++ b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/group/GroupChatInfoView.kt @@ -175,6 +175,9 @@ fun ModalData.GroupChatInfoView( manageGroupLink = { ModalManager.end.showModal(cardScreen = true) { GroupLinkView(chatModel, rhId, groupInfo, groupLink, onGroupLinkUpdated, isChannel = groupInfo.useRelays, shareGroupInfo = groupInfo) } }, + manageWebPage = { + ModalManager.end.showCustomModal { close -> ChannelWebPageView(rhId, groupInfo, chatModel, close) } + }, onSearchClicked = onSearchClicked, deletingItems = deletingItems ) @@ -506,6 +509,7 @@ fun ModalData.GroupChatInfoLayout( clearChat: () -> Unit, leaveGroup: () -> Unit, manageGroupLink: () -> Unit, + manageWebPage: () -> Unit, close: () -> Unit = { ModalManager.closeAllModalsEverywhere()}, onSearchClicked: () -> Unit, deletingItems: State @@ -796,6 +800,13 @@ fun ModalData.GroupChatInfoLayout( } } + if (groupInfo.useRelays && groupInfo.isOwner) { + SectionDividerSpaced() + SectionView(title = stringResource(MR.strings.advanced_options)) { + ChannelWebPageButton(groupInfo, manageWebPage) + } + } + if (developerTools) { SectionDividerSpaced() SectionView(title = stringResource(MR.strings.section_title_for_console)) { @@ -1209,6 +1220,16 @@ private fun ChannelLinkButton(onClick: () -> Unit) { ) } +@Composable +private fun ChannelWebPageButton(groupInfo: GroupInfo, onClick: () -> Unit) { + SettingsActionItem( + painterResource(MR.images.ic_travel_explore), + stringResource(if (groupInfo.isChannel) MR.strings.channel_webpage else MR.strings.group_webpage), + onClick, + iconColor = MaterialTheme.colors.secondary + ) +} + @Composable private fun ChannelLinkQRCodeSection(groupLink: String) { val clipboard = LocalClipboardManager.current @@ -1413,6 +1434,7 @@ fun PreviewGroupChatInfoLayout() { clearChat = {}, leaveGroup = {}, manageGroupLink = {}, + manageWebPage = {}, onSearchClicked = {}, deletingItems = remember { mutableStateOf(true) } ) diff --git a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/helpers/TextEditor.kt b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/helpers/TextEditor.kt index e8070b5c76..cd40585cad 100644 --- a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/helpers/TextEditor.kt +++ b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/helpers/TextEditor.kt @@ -102,6 +102,28 @@ fun TextEditor( } } +@Composable +fun PlainTextEditor( + value: MutableState, + placeholder: String? = null, + singleLine: Boolean = true +) { + BasicTextField( + value = value.value, + onValueChange = { value.value = it }, + modifier = Modifier.fillMaxWidth().padding(horizontal = DEFAULT_PADDING, vertical = 12.dp), + textStyle = MaterialTheme.typography.body1.copy(color = MaterialTheme.colors.onBackground), + singleLine = singleLine, + cursorBrush = SolidColor(MaterialTheme.colors.secondary), + decorationBox = { innerTextField -> + if (value.value.isEmpty() && placeholder != null) { + Text(placeholder, style = MaterialTheme.typography.body1.copy(color = MaterialTheme.colors.secondary)) + } + innerTextField() + } + ) +} + @Serializable data class ParsedFormattedText( val formattedText: List? = null diff --git a/apps/multiplatform/common/src/commonMain/resources/MR/base/strings.xml b/apps/multiplatform/common/src/commonMain/resources/MR/base/strings.xml index e943e0080a..9630c61004 100644 --- a/apps/multiplatform/common/src/commonMain/resources/MR/base/strings.xml +++ b/apps/multiplatform/common/src/commonMain/resources/MR/base/strings.xml @@ -1925,6 +1925,20 @@ Welcome message Group link Channel link + Channel webpage + Group webpage + Advanced options + https:// + Allow anyone to embed + Enter webpage URL + It will be shown to subscribers and used to allow loading the preview. + Webpage code + Add this code to your webpage. It will display the preview of your channel / group. + Copy code + Create a webpage to show your channel preview to visitors before they subscribe. Host it yourself or use any static hosting. + Used chat relays do not support webpages. + Any webpage can show the preview. + Only your page above can show the preview. Create group link Create link Delete link? diff --git a/bots/src/API/Docs/Commands.hs b/bots/src/API/Docs/Commands.hs index 003969660b..8ebd510a55 100644 --- a/bots/src/API/Docs/Commands.hs +++ b/bots/src/API/Docs/Commands.hs @@ -281,6 +281,7 @@ cliCommands = "SetGroupTimedMessages", "SetLocalDeviceName", "SetProfileAddress", + "SetPublicGroupAccess", "SetSendReceipts", "SetShowMemberMessages", "SetShowMessages", diff --git a/simplex-chat.cabal b/simplex-chat.cabal index ae573936e7..86350acdd4 100644 --- a/simplex-chat.cabal +++ b/simplex-chat.cabal @@ -93,6 +93,7 @@ library Simplex.Chat.Types.Shared Simplex.Chat.Types.UITheme Simplex.Chat.Util + Simplex.Chat.Web if !flag(client_library) exposed-modules: Simplex.Chat.Bot @@ -141,6 +142,7 @@ library Simplex.Chat.Store.Postgres.Migrations.M20260529_delivery_job_senders Simplex.Chat.Store.Postgres.Migrations.M20260530_client_services Simplex.Chat.Store.Postgres.Migrations.M20260531_member_removed_at + Simplex.Chat.Store.Postgres.Migrations.M20260601_relay_sent_web_domain else exposed-modules: Simplex.Chat.Archive @@ -301,6 +303,7 @@ library Simplex.Chat.Store.SQLite.Migrations.M20260529_delivery_job_senders Simplex.Chat.Store.SQLite.Migrations.M20260530_client_services Simplex.Chat.Store.SQLite.Migrations.M20260531_member_removed_at + Simplex.Chat.Store.SQLite.Migrations.M20260601_relay_sent_web_domain other-modules: Paths_simplex_chat hs-source-dirs: diff --git a/src/Simplex/Chat.hs b/src/Simplex/Chat.hs index af3f98d6a6..b795ba9b9c 100644 --- a/src/Simplex/Chat.hs +++ b/src/Simplex/Chat.hs @@ -128,6 +128,7 @@ defaultChatConfig = highlyAvailable = False, deliveryWorkerDelay = 0, deliveryBucketSize = 10000, + webPreviewConfig = Nothing, channelSubscriberRole = GRObserver, relayChecksInterval = 15 * 60, -- 15 minutes relayInactiveTTL = nominalDay, @@ -152,11 +153,11 @@ newChatController ChatDatabase {chatStore, agentStore} user cfg@ChatConfig {agentConfig = aCfg, presetServers, inlineFiles, deviceNameForRemote, confirmMigrations} - ChatOpts {coreOptions = CoreChatOpts {smpServers, xftpServers, simpleNetCfg, logLevel, logConnections, logServerHosts, logFile, tbqSize, deviceName, highlyAvailable, yesToUpMigrations}, optFilesFolder, optTempDirectory, showReactions, allowInstantFiles, autoAcceptFileSize} + ChatOpts {coreOptions = CoreChatOpts {smpServers, xftpServers, simpleNetCfg, logLevel, logConnections, logServerHosts, logFile, tbqSize, deviceName, webPreviewConfig, highlyAvailable, yesToUpMigrations}, optFilesFolder, optTempDirectory, showReactions, allowInstantFiles, autoAcceptFileSize} backgroundMode = do let inlineFiles' = if allowInstantFiles || autoAcceptFileSize > 0 then inlineFiles else inlineFiles {sendChunks = 0, receiveInstant = False} confirmMigrations' = if confirmMigrations == MCConsole && yesToUpMigrations then MCYesUp else confirmMigrations - config = cfg {logLevel, showReactions, tbqSize, subscriptionEvents = logConnections, hostEvents = logServerHosts, presetServers = presetServers', inlineFiles = inlineFiles', autoAcceptFileSize, highlyAvailable, confirmMigrations = confirmMigrations'} + config = cfg {logLevel, showReactions, tbqSize, subscriptionEvents = logConnections, hostEvents = logServerHosts, presetServers = presetServers', inlineFiles = inlineFiles', autoAcceptFileSize, webPreviewConfig, highlyAvailable, confirmMigrations = confirmMigrations'} randomPresetServers <- chooseRandomServers presetServers' let rndSrvs = L.toList randomPresetServers operatorWithId (i, op) = (\o -> o {operatorId = DBEntityId i}) <$> pOperator op @@ -194,6 +195,7 @@ newChatController deliveryJobWorkers <- TM.emptyIO relayRequestWorkers <- TM.emptyIO relayGroupLinkChecksAsync <- newTVarIO Nothing + webPreviewState <- forM webPreviewConfig $ \_ -> newWebPreviewState chatRelayTests <- TM.emptyIO expireCIThreads <- TM.emptyIO expireCIFlags <- TM.emptyIO @@ -238,6 +240,7 @@ newChatController deliveryJobWorkers, relayRequestWorkers, relayGroupLinkChecksAsync, + webPreviewState, chatRelayTests, expireCIThreads, expireCIFlags, diff --git a/src/Simplex/Chat/Controller.hs b/src/Simplex/Chat/Controller.hs index 6a4545a380..48913af9a5 100644 --- a/src/Simplex/Chat/Controller.hs +++ b/src/Simplex/Chat/Controller.hs @@ -39,6 +39,7 @@ import Data.Char (ord) import Data.Int (Int64) import Data.List.NonEmpty (NonEmpty) import Data.Map.Strict (Map) +import Data.Set (Set) import qualified Data.Map.Strict as M import Data.Maybe (fromMaybe) import Data.String @@ -162,6 +163,7 @@ data ChatConfig = ChatConfig ciExpirationInterval :: Int64, -- microseconds deliveryWorkerDelay :: Int64, -- microseconds deliveryBucketSize :: Int, + webPreviewConfig :: Maybe WebPreviewConfig, channelSubscriberRole :: GroupMemberRole, -- TODO [relays] starting role should be communicated in protocol from owner to relays relayChecksInterval :: NominalDiffTime, relayInactiveTTL :: NominalDiffTime, @@ -173,6 +175,43 @@ data ChatConfig = ChatConfig chatHooks :: ChatHooks } +data WebPreviewConfig = WebPreviewConfig + { webDomain :: Text, + webJsonDir :: FilePath, + webCorsFile :: Maybe FilePath, + webUpdateInterval :: Int, -- seconds + webPreviewItemCount :: Int + } + +data PublishableGroup = PublishableGroup + { pgFileName :: FilePath, + pgCorsEntry :: Maybe (Text, CorsOrigin) + } + +data CorsOrigin = CorsAny | CorsOrigins [Text] + deriving (Show) + +data WebPreviewState = WebPreviewState + { publishableGroupIds :: TVar (Map Int64 PublishableGroup), + priorityRender :: TQueue Int64, + filesToRemove :: TQueue FilePath, + corsNeeded :: TVar Bool, + routinePending :: TVar (Set Int64), + wakeSignal :: TMVar (), + webPreviewWorkerAsync :: TVar (Maybe (Async ())) + } + +newWebPreviewState :: IO WebPreviewState +newWebPreviewState = do + publishableGroupIds <- newTVarIO mempty + priorityRender <- newTQueueIO + filesToRemove <- newTQueueIO + corsNeeded <- newTVarIO False + routinePending <- newTVarIO mempty + wakeSignal <- newEmptyTMVarIO + webPreviewWorkerAsync <- newTVarIO Nothing + pure WebPreviewState {publishableGroupIds, priorityRender, filesToRemove, corsNeeded, routinePending, wakeSignal, webPreviewWorkerAsync} + -- | Builds the read-only context threaded through store functions from chat config. -- The single construction point, so new store-wide config (e.g. server keys) is added in one place. mkStoreCxt :: ChatConfig -> StoreCxt @@ -266,6 +305,7 @@ data ChatController = ChatController deliveryJobWorkers :: TMap DeliveryWorkerKey Worker, relayRequestWorkers :: TMap Int Worker, -- single global worker with key 1 is used to fit into existing worker management framework relayGroupLinkChecksAsync :: TVar (Maybe (Async ())), + webPreviewState :: Maybe WebPreviewState, chatRelayTests :: TMap ConnId RelayTest, expireCIThreads :: TMap UserId (Maybe (Async ())), expireCIFlags :: TMap UserId Bool, @@ -555,6 +595,7 @@ data ChatCommand | ShowGroupProfile GroupName | UpdateGroupDescription GroupName (Maybe Text) | ShowGroupDescription GroupName + | SetPublicGroupAccess GroupName PublicGroupAccess | CreateGroupLink GroupName GroupMemberRole | GroupLinkMemberRole GroupName GroupMemberRole | DeleteGroupLink GroupName diff --git a/src/Simplex/Chat/Library/Commands.hs b/src/Simplex/Chat/Library/Commands.hs index 72cf6a412c..646377ac9c 100644 --- a/src/Simplex/Chat/Library/Commands.hs +++ b/src/Simplex/Chat/Library/Commands.hs @@ -90,6 +90,7 @@ import Simplex.Chat.Types.Preferences import Simplex.Chat.Types.Shared import Simplex.Chat.Util (liftIOEither, zipWith3') import qualified Simplex.Chat.Util as U +import Simplex.Chat.Web (webPreviewWorker) import Simplex.FileTransfer.Description (FileDescriptionURI (..), maxFileSize, maxFileSizeHard) import Simplex.Messaging.Agent import Simplex.Messaging.Agent.Env.SQLite (ServerCfg (..), ServerRoles (..), allRoles) @@ -201,6 +202,7 @@ startChatController mainApp enableSndFiles = do startCleanupManager void $ forkIO $ mapM_ startExpireCIs users startRelayChecks users + startWebPreview users else when enableSndFiles $ startXFTP xftpStartSndWorkers pure a1 startXFTP startWorkers = do @@ -232,6 +234,20 @@ startChatController mainApp enableSndFiles = do a <- Just <$> async (void $ runExceptT $ runRelayGroupLinkChecks relayUser) atomically $ writeTVar relayAsync a _ -> pure () + startWebPreview users = do + let relayUsers = filter (\User {userChatRelay} -> isTrue userChatRelay) users + ChatConfig {webPreviewConfig = cfg_} <- asks config + case (relayUsers, cfg_) of + (_ : _, Just cfg) -> do + wps_ <- asks webPreviewState + forM_ wps_ $ \WebPreviewState {webPreviewWorkerAsync} -> + readTVarIO webPreviewWorkerAsync >>= \case + Nothing -> do + cc <- ask + a <- Just <$> async (liftIO $ webPreviewWorker cfg cc relayUsers) + atomically $ writeTVar webPreviewWorkerAsync a + _ -> pure () + _ -> pure () startExpireCIs user = whenM shouldExpireChats $ do startExpireCIThread user setExpireCIFlag user True @@ -3060,6 +3076,12 @@ processChatCommand cxt nm = \case updateGroupProfileByName gName $ \p -> p {description} ShowGroupDescription gName -> withUser $ \user -> CRGroupDescription user <$> withFastStore (\db -> getGroupInfoByName db cxt user gName) + SetPublicGroupAccess gName access -> withUser $ \user -> do + gInfo@GroupInfo {groupProfile = p@GroupProfile {publicGroup}} <- withStore $ \db -> + getGroupIdByName db user gName >>= getGroupInfo db cxt user + case publicGroup of + Just pg -> runUpdateGroupProfile user gInfo p {publicGroup = Just pg {publicGroupAccess = Just access}} + Nothing -> throwChatError $ CECommandError "not a public group" APICreateGroupLink groupId mRole -> withUser $ \user -> withGroupLock "createGroupLink" groupId $ do gInfo@GroupInfo {groupProfile} <- withFastStore $ \db -> getGroupInfo db cxt user groupId assertUserGroupRole gInfo GRAdmin @@ -4896,6 +4918,17 @@ runRelayGroupLinkChecks user = do else void $ withStore' $ \db -> updateRelayOwnStatusFromTo db gInfo RSActive RSInactive _ -> pure () _ -> pure () + sendRelayCapIfNeeded cxt gInfo + sendRelayCapIfNeeded cxt gInfo = do + ChatConfig {webPreviewConfig} <- asks config + let currentWebDomain = (\WebPreviewConfig {webDomain} -> webDomain) <$> webPreviewConfig + sentWebDomain <- withStore' (`getRelaySentWebDomain` gInfo) + when (currentWebDomain /= sentWebDomain) $ do + owners <- withStore' $ \db -> getGroupOwners db cxt user gInfo + let capableOwners = filter (\m -> memberCurrent m && m `supportsVersion` relayWebCapVersion) owners + unless (null capableOwners) $ do + void $ sendGroupMessage' user gInfo capableOwners (XGrpRelayCap RelayCapabilities {webDomain = currentWebDomain}) + withStore' $ \db -> updateRelaySentWebDomain db gInfo currentWebDomain checkRelayInactiveGroups = do cxt <- chatStoreCxt ttl <- asks (relayInactiveTTL . config) @@ -5219,6 +5252,7 @@ chatCommandP = "/_group_profile #" *> (APIUpdateGroupProfile <$> A.decimal <* A.space <*> jsonP), ("/group_profile " <|> "/gp ") *> char_ '#' *> (UpdateGroupNames <$> displayNameP <* A.space <*> groupProfile), ("/group_profile " <|> "/gp ") *> char_ '#' *> (ShowGroupProfile <$> displayNameP), + "/public group access " *> char_ '#' *> (SetPublicGroupAccess <$> displayNameP <*> publicGroupAccessP), "/group_descr " *> char_ '#' *> (UpdateGroupDescription <$> displayNameP <*> optional (A.space *> msgTextP)), "/set welcome " *> char_ '#' *> (UpdateGroupDescription <$> displayNameP <* A.space <*> (Just <$> msgTextP)), "/delete welcome " *> char_ '#' *> (UpdateGroupDescription <$> displayNameP <*> pure Nothing), @@ -5425,6 +5459,12 @@ chatCommandP = clearOverrides <- (" clear_overrides=" *> onOffP) <|> pure False pure UserMsgReceiptSettings {enable, clearOverrides} onOffP = ("on" $> True) <|> ("off" $> False) + publicGroupAccessP = do + groupWebPage <- optional (" web=" *> (safeDecodeUtf8 <$> A.takeTill A.isSpace)) + groupDomain <- optional (" domain=" *> (safeDecodeUtf8 <$> A.takeTill A.isSpace)) + domainWebPage <- (" domain_page=" *> onOffP) <|> pure False + allowEmbedding <- (" embed=" *> onOffP) <|> pure False + pure PublicGroupAccess {groupWebPage, groupDomain, domainWebPage, allowEmbedding} profileNameDescr = (,) <$> displayNameP <*> shortDescrP -- 'Help with bot':'link ','Menu of commands':[...] botCommandsP :: Parser [ChatBotCommand] diff --git a/src/Simplex/Chat/Library/Internal.hs b/src/Simplex/Chat/Library/Internal.hs index 0595cf7c4b..325e552d44 100644 --- a/src/Simplex/Chat/Library/Internal.hs +++ b/src/Simplex/Chat/Library/Internal.hs @@ -1046,8 +1046,9 @@ acceptRelayJoinRequestAsync cReqInvId cReqChatVRange relayLink = do - -- TODO [channel web] derive RelayCapabilities from relay config (RelayWebOptions) - let msg = XGrpRelayAcpt relayLink defaultRelayCapabilities + ChatConfig {webPreviewConfig} <- asks config + let webDomain_ = (\WebPreviewConfig {webDomain} -> webDomain) <$> webPreviewConfig + msg = XGrpRelayAcpt relayLink RelayCapabilities {webDomain = webDomain_} subMode <- chatReadVar subscriptionMode cxt <- chatStoreCxt let chatV = vr cxt `peerConnChatVersion` cReqChatVRange diff --git a/src/Simplex/Chat/Library/Subscriber.hs b/src/Simplex/Chat/Library/Subscriber.hs index 9bb3d5d2eb..b948d7727b 100644 --- a/src/Simplex/Chat/Library/Subscriber.hs +++ b/src/Simplex/Chat/Library/Subscriber.hs @@ -47,6 +47,7 @@ import Simplex.Chat.Call import Simplex.Chat.Controller import Simplex.Chat.Delivery import Simplex.Chat.Library.Internal +import Simplex.Chat.Web (channelContentChanged, channelProfileUpdated, channelRemoved) import Simplex.Chat.Messages import Simplex.Chat.Messages.Batch (batchDeliveryTasks1, batchProfiles, batchProfilesWithBody, encodeBinaryBatch, encodeFwdElement, maxBatchElementSize) import Simplex.Chat.Messages.CIContent @@ -870,6 +871,9 @@ processAgentMessageConn cxt user@User {userId} corrId agentConnId agentMessage = else pure gInfo pure (m {memberStatus = GSMemConnected}, gInfo') toView $ CEvtUserJoinedGroup user gInfo' m' + when (isRelay membership) $ do + cc <- ask + atomically $ channelProfileUpdated cc groupId groupProfile (gInfo'', m'', scopeInfo) <- mkGroupChatScope gInfo' m' -- Create e2ee, feature and group description chat items only on first connected relay ifM @@ -1018,6 +1022,7 @@ processAgentMessageConn cxt user@User {userId} corrId agentConnId agentMessage = processEvent :: forall e. MsgEncodingI e => GroupInfo -> GroupMember -> VerifiedMsg e -> CM (Maybe NewMessageDeliveryTask) processEvent gInfo' m' verifiedMsg = do (m'', conn', msg@RcvMessage {msgId, chatMsgEvent = ACME _ event}) <- saveGroupRcvMsg user groupId m' conn msgMeta verifiedMsg + cc <- ask let ctx js = DeliveryTaskContext js False checkSendAsGroup :: Maybe Bool -> CM (Maybe DeliveryTaskContext) -> CM (Maybe DeliveryTaskContext) checkSendAsGroup asGroup_ a @@ -1074,7 +1079,17 @@ processAgentMessageConn cxt user@User {userId} corrId agentConnId agentMessage = XInfoProbeOk probe -> Nothing <$ xInfoProbeOk (COMGroupMember m'') probe BFileChunk sharedMsgId chunk -> Nothing <$ bFileChunkGroup gInfo' sharedMsgId chunk msgMeta _ -> Nothing <$ messageError ("unsupported message: " <> tshow event) - forM deliveryTaskContext_ $ \taskContext -> + forM deliveryTaskContext_ $ \taskContext -> do + let contentChanged :: CM () + contentChanged = atomically $ channelContentChanged cc groupId + case event of + XMsgNew {} -> contentChanged + XMsgUpdate {} -> contentChanged + XMsgDel {} -> contentChanged + XMsgReact {} -> contentChanged + XGrpInfo p' -> atomically $ channelProfileUpdated cc groupId p' + XGrpDel {} -> atomically $ channelRemoved cc groupId + _ -> pure () pure $ NewMessageDeliveryTask {messageId = msgId, taskContext} checkSendRcpt :: [AParsedMsg] -> CM Bool checkSendRcpt aMsgs = do diff --git a/src/Simplex/Chat/Mobile.hs b/src/Simplex/Chat/Mobile.hs index 6cf30edbd5..85074e93f4 100644 --- a/src/Simplex/Chat/Mobile.hs +++ b/src/Simplex/Chat/Mobile.hs @@ -261,6 +261,7 @@ mobileChatOpts dbOptions = tbqSize = 4096, deviceName = Nothing, chatRelay = False, + webPreviewConfig = Nothing, highlyAvailable = False, yesToUpMigrations = False, migrationBackupPath = Just "", diff --git a/src/Simplex/Chat/Options.hs b/src/Simplex/Chat/Options.hs index 08a765077f..a936f58848 100644 --- a/src/Simplex/Chat/Options.hs +++ b/src/Simplex/Chat/Options.hs @@ -28,7 +28,7 @@ import qualified Data.Text as T import Data.Text.Encoding (encodeUtf8) import Numeric.Natural (Natural) import Options.Applicative -import Simplex.Chat.Controller (ChatLogLevel (..), SimpleNetCfg (..), updateStr, versionNumber, versionString) +import Simplex.Chat.Controller (ChatLogLevel (..), SimpleNetCfg (..), WebPreviewConfig (..), updateStr, versionNumber, versionString) import Simplex.FileTransfer.Description (mb) import Simplex.Messaging.Client (HostMode (..), SMPWebPortServers (..), SocksMode (..), textToHostMode) import Simplex.Messaging.Encoding.String @@ -66,6 +66,7 @@ data CoreChatOpts = CoreChatOpts tbqSize :: Natural, deviceName :: Maybe Text, chatRelay :: Bool, + webPreviewConfig :: Maybe WebPreviewConfig, highlyAvailable :: Bool, yesToUpMigrations :: Bool, migrationBackupPath :: Maybe FilePath, @@ -240,6 +241,46 @@ coreChatOptsP appDir defaultDbName = do ( long "relay" <> help "Run as a chat relay client" ) + webPreviewConfig <- do + webDomain_ <- + optional $ + strOption + ( long "relay-web-domain" + <> metavar "DOMAIN" + <> help "Domain for channel web previews (relay only)" + ) + webJsonDir_ <- + optional $ + strOption + ( long "relay-web-dir" + <> metavar "DIR" + <> help "Directory for channel web preview JSON files (relay only)" + ) + webCorsFile <- + optional $ + strOption + ( long "relay-web-cors-file" + <> metavar "FILE" + <> help "Path to generated Caddy CORS config file (relay only)" + ) + webUpdateInterval <- + option auto + ( long "relay-web-interval" + <> metavar "SECONDS" + <> help "Interval between web preview regeneration in seconds (relay only)" + <> value 300 + ) + webPreviewItemCount <- + option auto + ( long "relay-web-item-count" + <> metavar "COUNT" + <> help "Number of recent messages in channel web preview (relay only)" + <> value 50 + ) + pure $ case (webDomain_, webJsonDir_) of + (Just webDomain, Just webJsonDir) -> Just WebPreviewConfig {webDomain, webJsonDir, webCorsFile, webUpdateInterval, webPreviewItemCount} + (Nothing, Nothing) -> Nothing + _ -> errorWithoutStackTrace "--relay-web-domain and --relay-web-dir must both be provided" highlyAvailable <- switch ( long "ha" @@ -283,6 +324,7 @@ coreChatOptsP appDir defaultDbName = do tbqSize, deviceName, chatRelay, + webPreviewConfig, highlyAvailable, yesToUpMigrations, migrationBackupPath, diff --git a/src/Simplex/Chat/Protocol.hs b/src/Simplex/Chat/Protocol.hs index 94951d1110..4546985e52 100644 --- a/src/Simplex/Chat/Protocol.hs +++ b/src/Simplex/Chat/Protocol.hs @@ -83,12 +83,13 @@ import Simplex.Messaging.Version hiding (version) -- 15 - support specifying message scopes for group messages (2025-03-12) -- 16 - support short link data (2025-06-10) -- 17 - allow host voice messages during member approval regardless of group voice setting (2026-02-10) +-- 18 - relay web capabilities (2026-05-31) -- This should not be used directly in code, instead use `maxVersion chatVRange` from ChatConfig. -- This indirection is needed for backward/forward compatibility testing. -- Testing with real app versions is still needed, as tests use the current code with different version ranges, not the old code. currentChatVersion :: VersionChat -currentChatVersion = VersionChat 17 +currentChatVersion = VersionChat 18 -- This should not be used directly in code, instead use `chatVRange` from ChatConfig (see comment above) supportedChatVRange :: VersionRangeChat @@ -155,6 +156,10 @@ shortLinkDataVersion = VersionChat 16 memberSupportVoiceVersion :: VersionChat memberSupportVoiceVersion = VersionChat 17 +-- relay sends web preview capabilities to owner +relayWebCapVersion :: VersionChat +relayWebCapVersion = VersionChat 18 + agentToChatVersion :: VersionSMPA -> VersionChat agentToChatVersion v | v < pqdrSMPAgentVersion = initialChatVersion diff --git a/src/Simplex/Chat/Store/Groups.hs b/src/Simplex/Chat/Store/Groups.hs index a0c9dd9ed0..2ea3fa9b84 100644 --- a/src/Simplex/Chat/Store/Groups.hs +++ b/src/Simplex/Chat/Store/Groups.hs @@ -67,6 +67,7 @@ module Simplex.Chat.Store.Groups getGroupMembersByIndexes, getSupportScopeMembersByIndexes, getGroupModerators, + getGroupOwners, getGroupRelayMembers, getGroupMembersForExpiration, getRemovedMembersToCleanup, @@ -98,9 +99,12 @@ module Simplex.Chat.Store.Groups createRelayRequestGroup, updateRelayOwnStatusFromTo, updateRelayOwnStatus_, + getRelaySentWebDomain, + updateRelaySentWebDomain, isRelayGroupRejected, allowRelayGroup, getRelayServedGroups, + getRelayPublishableGroups, getRelayInactiveGroups, createNewContactMemberAsync, createJoiningMember, @@ -1211,6 +1215,15 @@ getGroupModerators db cxt user@User {userId, userContactId} GroupInfo {groupId} (groupMemberQuery <> " WHERE m.user_id = ? AND m.group_id = ? AND (m.contact_id IS NULL OR m.contact_id != ?) AND m.member_role IN (?,?,?)") (userId, groupId, userContactId, GRModerator, GRAdmin, GROwner) +getGroupOwners :: DB.Connection -> StoreCxt -> User -> GroupInfo -> IO [GroupMember] +getGroupOwners db cxt user@User {userId, userContactId} GroupInfo {groupId} = do + ts <- getCurrentTime + map (toContactMember ts cxt user) + <$> DB.query + db + (groupMemberQuery <> " WHERE m.user_id = ? AND m.group_id = ? AND (m.contact_id IS NULL OR m.contact_id != ?) AND m.member_role = ?") + (userId, groupId, userContactId, GROwner) + getGroupRelayMembers :: DB.Connection -> StoreCxt -> User -> GroupInfo -> IO [GroupMember] getGroupRelayMembers db cxt user@User {userId, userContactId} GroupInfo {groupId} = do currentTs <- getCurrentTime @@ -1650,6 +1663,14 @@ updateRelayOwnStatus_ db GroupInfo {groupId} relayStatus = do let inactiveAt_ = if relayStatus == RSInactive then Just currentTs else Nothing DB.execute db "UPDATE groups SET relay_own_status = ?, relay_inactive_at = ?, updated_at = ? WHERE group_id = ?" (relayStatus, inactiveAt_, currentTs, groupId) +getRelaySentWebDomain :: DB.Connection -> GroupInfo -> IO (Maybe Text) +getRelaySentWebDomain db GroupInfo {groupId} = + join <$> maybeFirstRow fromOnly (DB.query db "SELECT relay_sent_web_domain FROM groups WHERE group_id = ?" (Only groupId)) + +updateRelaySentWebDomain :: DB.Connection -> GroupInfo -> Maybe Text -> IO () +updateRelaySentWebDomain db GroupInfo {groupId} webDomain_ = + DB.execute db "UPDATE groups SET relay_sent_web_domain = ? WHERE group_id = ?" (webDomain_, groupId) + -- Flip every RSRejected row sharing the targeted group's relay_request_group_link -- to RSInactive in one statement; returns the refreshed GroupInfo for the targeted groupId. allowRelayGroup :: DB.Connection -> StoreCxt -> User -> GroupId -> ExceptT StoreError IO GroupInfo @@ -1696,6 +1717,24 @@ getRelayServedGroups db cxt User {userId, userContactId} = do ) (userId, userContactId, RSAccepted, RSActive) +getRelayPublishableGroups :: DB.Connection -> User -> IO [(Int64, B64UrlByteString, Maybe PublicGroupAccess)] +getRelayPublishableGroups db User {userId, userContactId} = + map toRow <$> + DB.query + db + [sql| + SELECT g.group_id, gp.public_group_id, + gp.group_web_page, gp.group_domain, gp.domain_web_page, gp.allow_embedding + FROM groups g + JOIN group_profiles gp ON gp.group_profile_id = g.group_profile_id + JOIN group_members mu ON mu.group_id = g.group_id AND mu.contact_id = ? + WHERE g.user_id = ? AND g.relay_own_status IN (?, ?) + AND gp.public_group_id IS NOT NULL + |] + (userContactId, userId, RSAccepted, RSActive) + where + toRow ((gId, pgId) :. accessRow) = (gId, pgId, toPublicGroupAccess accessRow) + getRelayInactiveGroups :: DB.Connection -> StoreCxt -> User -> NominalDiffTime -> IO [GroupInfo] getRelayInactiveGroups db cxt User {userId, userContactId} ttl = do currentTs <- getCurrentTime diff --git a/src/Simplex/Chat/Store/Messages.hs b/src/Simplex/Chat/Store/Messages.hs index 3a96756712..cf12db7ec1 100644 --- a/src/Simplex/Chat/Store/Messages.hs +++ b/src/Simplex/Chat/Store/Messages.hs @@ -137,6 +137,7 @@ module Simplex.Chat.Store.Messages getGroupSndStatuses, getGroupSndStatusCounts, getGroupHistoryItems, + getGroupWebPreviewItems, ) where @@ -3716,3 +3717,21 @@ getGroupHistoryItems db user@User {userId} g@GroupInfo {groupId} m count = do LIMIT ? |] (groupMemberId' m, userId, groupId, count) + +getGroupWebPreviewItems :: DB.Connection -> User -> GroupInfo -> Int -> IO [Either StoreError (CChatItem 'CTGroup)] +getGroupWebPreviewItems db user@User {userId} g@GroupInfo {groupId} count = do + ciIds <- + map fromOnly + <$> DB.query + db + [sql| + SELECT i.chat_item_id + FROM chat_items i + WHERE i.user_id = ? AND i.group_id = ? + AND i.include_in_history = 1 + AND i.item_deleted = 0 + ORDER BY i.item_ts DESC, i.chat_item_id DESC + LIMIT ? + |] + (userId, groupId, count) + reverse <$> mapM (runExceptT . getGroupCIWithReactions db user g) ciIds diff --git a/src/Simplex/Chat/Store/Postgres/Migrations.hs b/src/Simplex/Chat/Store/Postgres/Migrations.hs index 862a93f00d..20acf0b602 100644 --- a/src/Simplex/Chat/Store/Postgres/Migrations.hs +++ b/src/Simplex/Chat/Store/Postgres/Migrations.hs @@ -36,6 +36,7 @@ import Simplex.Chat.Store.Postgres.Migrations.M20260516_supporter_badges import Simplex.Chat.Store.Postgres.Migrations.M20260529_delivery_job_senders import Simplex.Chat.Store.Postgres.Migrations.M20260530_client_services import Simplex.Chat.Store.Postgres.Migrations.M20260531_member_removed_at +import Simplex.Chat.Store.Postgres.Migrations.M20260601_relay_sent_web_domain import Simplex.Messaging.Agent.Store.Shared (Migration (..)) schemaMigrations :: [(String, Text, Maybe Text)] @@ -71,7 +72,8 @@ schemaMigrations = ("20260516_supporter_badges", m20260516_supporter_badges, Just down_m20260516_supporter_badges), ("20260529_delivery_job_senders", m20260529_delivery_job_senders, Just down_m20260529_delivery_job_senders), ("20260530_client_services", m20260530_client_services, Just down_m20260530_client_services), - ("20260531_member_removed_at", m20260531_member_removed_at, Just down_m20260531_member_removed_at) + ("20260531_member_removed_at", m20260531_member_removed_at, Just down_m20260531_member_removed_at), + ("20260601_relay_sent_web_domain", m20260601_relay_sent_web_domain, Just down_m20260601_relay_sent_web_domain) ] -- | The list of migrations in ascending order by date diff --git a/src/Simplex/Chat/Store/Postgres/Migrations/M20260601_relay_sent_web_domain.hs b/src/Simplex/Chat/Store/Postgres/Migrations/M20260601_relay_sent_web_domain.hs new file mode 100644 index 0000000000..1b8efbcead --- /dev/null +++ b/src/Simplex/Chat/Store/Postgres/Migrations/M20260601_relay_sent_web_domain.hs @@ -0,0 +1,19 @@ +{-# LANGUAGE OverloadedStrings #-} +{-# LANGUAGE QuasiQuotes #-} + +module Simplex.Chat.Store.Postgres.Migrations.M20260601_relay_sent_web_domain where + +import Data.Text (Text) +import Text.RawString.QQ (r) + +m20260601_relay_sent_web_domain :: Text +m20260601_relay_sent_web_domain = + [r| +ALTER TABLE groups ADD COLUMN relay_sent_web_domain TEXT; +|] + +down_m20260601_relay_sent_web_domain :: Text +down_m20260601_relay_sent_web_domain = + [r| +ALTER TABLE groups DROP COLUMN relay_sent_web_domain; +|] diff --git a/src/Simplex/Chat/Store/Postgres/Migrations/chat_schema.sql b/src/Simplex/Chat/Store/Postgres/Migrations/chat_schema.sql index f015999274..89cddd48e5 100644 --- a/src/Simplex/Chat/Store/Postgres/Migrations/chat_schema.sql +++ b/src/Simplex/Chat/Store/Postgres/Migrations/chat_schema.sql @@ -978,7 +978,8 @@ CREATE TABLE test_chat_schema.groups ( relay_request_retries bigint DEFAULT 0 NOT NULL, relay_request_delay bigint DEFAULT 0 NOT NULL, relay_request_execute_at timestamp with time zone DEFAULT '1970-01-01 01:00:00+01'::timestamp with time zone NOT NULL, - relay_inactive_at timestamp with time zone + relay_inactive_at timestamp with time zone, + relay_sent_web_domain text ); diff --git a/src/Simplex/Chat/Store/SQLite/Migrations.hs b/src/Simplex/Chat/Store/SQLite/Migrations.hs index 84860d35fe..78838c507f 100644 --- a/src/Simplex/Chat/Store/SQLite/Migrations.hs +++ b/src/Simplex/Chat/Store/SQLite/Migrations.hs @@ -159,6 +159,7 @@ import Simplex.Chat.Store.SQLite.Migrations.M20260516_supporter_badges import Simplex.Chat.Store.SQLite.Migrations.M20260529_delivery_job_senders import Simplex.Chat.Store.SQLite.Migrations.M20260530_client_services import Simplex.Chat.Store.SQLite.Migrations.M20260531_member_removed_at +import Simplex.Chat.Store.SQLite.Migrations.M20260601_relay_sent_web_domain import Simplex.Messaging.Agent.Store.Shared (Migration (..)) schemaMigrations :: [(String, Query, Maybe Query)] @@ -317,7 +318,8 @@ schemaMigrations = ("20260516_supporter_badges", m20260516_supporter_badges, Just down_m20260516_supporter_badges), ("20260529_delivery_job_senders", m20260529_delivery_job_senders, Just down_m20260529_delivery_job_senders), ("20260530_client_services", m20260530_client_services, Just down_m20260530_client_services), - ("20260531_member_removed_at", m20260531_member_removed_at, Just down_m20260531_member_removed_at) + ("20260531_member_removed_at", m20260531_member_removed_at, Just down_m20260531_member_removed_at), + ("20260601_relay_sent_web_domain", m20260601_relay_sent_web_domain, Just down_m20260601_relay_sent_web_domain) ] -- | The list of migrations in ascending order by date diff --git a/src/Simplex/Chat/Store/SQLite/Migrations/M20260601_relay_sent_web_domain.hs b/src/Simplex/Chat/Store/SQLite/Migrations/M20260601_relay_sent_web_domain.hs new file mode 100644 index 0000000000..922a563356 --- /dev/null +++ b/src/Simplex/Chat/Store/SQLite/Migrations/M20260601_relay_sent_web_domain.hs @@ -0,0 +1,18 @@ +{-# LANGUAGE QuasiQuotes #-} + +module Simplex.Chat.Store.SQLite.Migrations.M20260601_relay_sent_web_domain where + +import Database.SQLite.Simple (Query) +import Database.SQLite.Simple.QQ (sql) + +m20260601_relay_sent_web_domain :: Query +m20260601_relay_sent_web_domain = + [sql| +ALTER TABLE groups ADD COLUMN relay_sent_web_domain TEXT; +|] + +down_m20260601_relay_sent_web_domain :: Query +down_m20260601_relay_sent_web_domain = + [sql| +ALTER TABLE groups DROP COLUMN relay_sent_web_domain; +|] diff --git a/src/Simplex/Chat/Store/SQLite/Migrations/agent_query_plans.txt b/src/Simplex/Chat/Store/SQLite/Migrations/agent_query_plans.txt index ee857211aa..a986773cb2 100644 --- a/src/Simplex/Chat/Store/SQLite/Migrations/agent_query_plans.txt +++ b/src/Simplex/Chat/Store/SQLite/Migrations/agent_query_plans.txt @@ -548,15 +548,6 @@ Plan: SEARCH s USING PRIMARY KEY (conn_id=? AND internal_snd_id=?) SEARCH m USING PRIMARY KEY (conn_id=? AND internal_id=?) -Query: - UPDATE rcv_messages - SET receive_attempts = receive_attempts + 1 - WHERE conn_id = ? AND internal_id = ? - RETURNING receive_attempts - -Plan: -SEARCH rcv_messages USING COVERING INDEX idx_rcv_messages_conn_id_internal_id (conn_id=? AND internal_id=?) - Query: DELETE FROM conn_confirmations WHERE conn_id = ? diff --git a/src/Simplex/Chat/Store/SQLite/Migrations/chat_query_plans.txt b/src/Simplex/Chat/Store/SQLite/Migrations/chat_query_plans.txt index e31194d151..d750be3275 100644 --- a/src/Simplex/Chat/Store/SQLite/Migrations/chat_query_plans.txt +++ b/src/Simplex/Chat/Store/SQLite/Migrations/chat_query_plans.txt @@ -1618,6 +1618,18 @@ Plan: SEARCH i USING INDEX idx_chat_items_group_id (group_id=?) SEARCH m USING INTEGER PRIMARY KEY (rowid=?) +Query: + SELECT i.chat_item_id + FROM chat_items i + WHERE i.user_id = ? AND i.group_id = ? + AND i.include_in_history = 1 + AND i.item_deleted = 0 + ORDER BY i.item_ts DESC, i.chat_item_id DESC + LIMIT ? + +Plan: +SEARCH i USING COVERING INDEX idx_chat_items_groups_history (user_id=? AND group_id=? AND include_in_history=? AND item_deleted=?) + Query: SELECT i.chat_item_id, i.contact_id, i.group_id, i.group_scope_tag, i.group_scope_group_member_id, i.note_folder_id FROM chat_items i @@ -5442,6 +5454,36 @@ SEARCH gp USING INTEGER PRIMARY KEY (rowid=?) SEARCH mu USING INDEX idx_group_members_contact_id (contact_id=?) SEARCH pu USING INTEGER PRIMARY KEY (rowid=?) +Query: + SELECT + -- GroupInfo + g.group_id, g.local_display_name, gp.display_name, gp.full_name, gp.short_descr, g.local_alias, gp.description, gp.image, gp.group_type, gp.group_link, gp.public_group_id, + gp.group_web_page, gp.group_domain, gp.domain_web_page, gp.allow_embedding, + g.enable_ntfs, g.send_rcpts, g.favorite, gp.preferences, gp.member_admission, + g.created_at, g.updated_at, g.chat_ts, g.user_member_profile_sent_at, + g.conn_full_link_to_connect, g.conn_short_link_to_connect, g.conn_link_prepared_connection, g.conn_link_started_connection, g.welcome_shared_msg_id, g.request_shared_msg_id, + g.business_chat, g.business_member_id, g.customer_member_id, + g.use_relays, g.relay_own_status, + g.ui_themes, g.summary_current_members_count, g.public_member_count, g.custom_data, g.chat_item_ttl, g.members_require_attention, g.via_group_link_uri, + g.root_priv_key, g.root_pub_key, g.member_priv_key, + -- GroupMember - membership + mu.group_member_id, mu.group_id, mu.index_in_group, mu.member_id, mu.peer_chat_min_version, mu.peer_chat_max_version, mu.member_role, mu.member_category, + mu.member_status, mu.show_messages, mu.member_restriction, mu.invited_by, mu.invited_by_group_member_id, mu.local_display_name, mu.contact_id, mu.contact_profile_id, pu.contact_profile_id, + pu.display_name, pu.full_name, pu.short_descr, pu.image, pu.contact_link, pu.chat_peer_type, pu.local_alias, pu.preferences, + mu.created_at, mu.updated_at, + mu.support_chat_ts, mu.support_chat_items_unread, mu.support_chat_items_member_attention, mu.support_chat_items_mentions, mu.support_chat_last_msg_from_member_ts, mu.member_pub_key, mu.relay_link + + FROM groups g + JOIN group_profiles gp ON gp.group_profile_id = g.group_profile_id + JOIN group_members mu ON mu.group_id = g.group_id + JOIN contact_profiles pu ON pu.contact_profile_id = COALESCE(mu.member_profile_id, mu.contact_profile_id) + WHERE g.user_id = ? AND mu.contact_id = ? AND g.relay_own_status IN (?, ?) +Plan: +SEARCH mu USING INDEX idx_group_members_contact_id (contact_id=?) +SEARCH g USING INTEGER PRIMARY KEY (rowid=?) +SEARCH gp USING INTEGER PRIMARY KEY (rowid=?) +SEARCH pu USING INTEGER PRIMARY KEY (rowid=?) + Query: SELECT cr.contact_request_id, cr.local_display_name, cr.agent_invitation_id, @@ -5696,6 +5738,25 @@ Query: FROM group_members m JOIN contact_profiles p ON p.contact_profile_id = COALESCE(m.member_profile_id, m.contact_profile_id) LEFT JOIN connections c ON c.group_member_id = m.group_member_id + WHERE m.user_id = ? AND m.group_id = ? AND (m.contact_id IS NULL OR m.contact_id != ?) AND m.member_role = ? +Plan: +SEARCH m USING INDEX idx_group_members_group_id (user_id=? AND group_id=?) +SEARCH p USING INTEGER PRIMARY KEY (rowid=?) +SEARCH c USING INDEX idx_connections_group_member_id (group_member_id=?) LEFT-JOIN + +Query: + SELECT + m.group_member_id, m.group_id, m.index_in_group, m.member_id, m.peer_chat_min_version, m.peer_chat_max_version, m.member_role, m.member_category, m.member_status, m.show_messages, m.member_restriction, + m.invited_by, m.invited_by_group_member_id, m.local_display_name, m.contact_id, m.contact_profile_id, p.contact_profile_id, p.display_name, p.full_name, p.short_descr, p.image, p.contact_link, p.chat_peer_type, p.local_alias, p.preferences, + m.created_at, m.updated_at, + m.support_chat_ts, m.support_chat_items_unread, m.support_chat_items_member_attention, m.support_chat_items_mentions, m.support_chat_last_msg_from_member_ts, m.member_pub_key, m.relay_link, + c.connection_id, c.agent_conn_id, c.conn_level, c.via_contact, c.via_user_contact_link, c.via_group_link, c.group_link_id, c.xcontact_id, c.custom_user_profile_id, + c.conn_status, c.conn_type, c.contact_conn_initiated, c.local_alias, c.contact_id, c.group_member_id, c.user_contact_link_id, + c.created_at, c.security_code, c.security_code_verified_at, c.pq_support, c.pq_encryption, c.pq_snd_enabled, c.pq_rcv_enabled, c.auth_err_counter, c.quota_err_counter, + c.conn_chat_version, c.peer_chat_min_version, c.peer_chat_max_version + FROM group_members m + JOIN contact_profiles p ON p.contact_profile_id = COALESCE(m.member_profile_id, m.contact_profile_id) + LEFT JOIN connections c ON c.group_member_id = m.group_member_id WHERE m.user_id = ? AND m.group_id = ? AND (m.contact_id IS NULL OR m.contact_id != ?) AND m.member_role IN (?,?,?) Plan: SEARCH m USING INDEX idx_group_members_group_id (user_id=? AND group_id=?) diff --git a/src/Simplex/Chat/Store/SQLite/Migrations/chat_schema.sql b/src/Simplex/Chat/Store/SQLite/Migrations/chat_schema.sql index f7bdcc1eb8..06810d6aab 100644 --- a/src/Simplex/Chat/Store/SQLite/Migrations/chat_schema.sql +++ b/src/Simplex/Chat/Store/SQLite/Migrations/chat_schema.sql @@ -191,7 +191,8 @@ CREATE TABLE groups( relay_request_retries INTEGER NOT NULL DEFAULT 0, relay_request_delay INTEGER NOT NULL DEFAULT 0, relay_request_execute_at TEXT NOT NULL DEFAULT '1970-01-01 00:00:00', - relay_inactive_at TEXT, -- received + relay_inactive_at TEXT, + relay_sent_web_domain TEXT, -- received FOREIGN KEY(user_id, local_display_name) REFERENCES display_names(user_id, local_display_name) ON DELETE CASCADE diff --git a/src/Simplex/Chat/Types.hs b/src/Simplex/Chat/Types.hs index 4f40e3a566..f9e36a86ad 100644 --- a/src/Simplex/Chat/Types.hs +++ b/src/Simplex/Chat/Types.hs @@ -881,8 +881,13 @@ instance FromJSON ImageData where parseJSON = fmap ImageData . J.parseJSON instance ToJSON ImageData where - toJSON (ImageData t) = J.toJSON t - toEncoding (ImageData t) = J.toEncoding t + toJSON (ImageData t) = J.toJSON $ safeImageData t + toEncoding (ImageData t) = J.toEncoding $ safeImageData t + +safeImageData :: Text -> Text +safeImageData t + | "data:" `T.isPrefixOf` t = t + | otherwise = "" instance ToField ImageData where toField (ImageData t) = toField t diff --git a/src/Simplex/Chat/View.hs b/src/Simplex/Chat/View.hs index b98d965254..cd7a5daea9 100644 --- a/src/Simplex/Chat/View.hs +++ b/src/Simplex/Chat/View.hs @@ -1207,8 +1207,8 @@ viewReceivedContactRequest c Profile {fullName, shortDescr} = ] showRelay :: GroupRelay -> StyledString -showRelay GroupRelay {groupRelayId, relayStatus} = - " - relay id " <> sShow groupRelayId <> ": " <> plain (relayStatusText relayStatus) +showRelay GroupRelay {groupRelayId, relayStatus, relayCap = RelayCapabilities {webDomain}} = + " - relay id " <> sShow groupRelayId <> ": " <> plain (relayStatusText relayStatus) <> maybe "" (\d -> ", web: " <> plain d) webDomain viewGroupRelays :: GroupInfo -> [GroupRelay] -> [StyledString] viewGroupRelays g relays = @@ -1982,10 +1982,10 @@ countactUserPrefText cup = case cup of viewGroupUpdated :: GroupInfo -> GroupInfo -> Maybe GroupMember -> Maybe MsgSigStatus -> [StyledString] viewGroupUpdated - GroupInfo {localDisplayName = n, groupProfile = GroupProfile {fullName, shortDescr, description, image, groupPreferences = gps, memberAdmission = ma}} - g'@GroupInfo {localDisplayName = n', groupProfile = GroupProfile {fullName = fullName', shortDescr = shortDescr', description = description', image = image', groupPreferences = gps', memberAdmission = ma'}} + GroupInfo {localDisplayName = n, groupProfile = GroupProfile {fullName, shortDescr, description, image, groupPreferences = gps, memberAdmission = ma, publicGroup = pg}} + g'@GroupInfo {localDisplayName = n', groupProfile = GroupProfile {fullName = fullName', shortDescr = shortDescr', description = description', image = image', groupPreferences = gps', memberAdmission = ma', publicGroup = pg'}} m signed = do - let update = groupProfileUpdated <> groupPrefsUpdated <> memberAdmissionUpdated + let update = groupProfileUpdated <> groupPrefsUpdated <> memberAdmissionUpdated <> publicGroupAccessUpdated if null update then [] else memberUpdated <> update @@ -2010,6 +2010,18 @@ viewGroupUpdated memberAdmissionUpdated | ma == ma' = [] | otherwise = ["changed member admission rules"] + publicGroupAccessUpdated + | access == access' = [] + | otherwise = ["updated public group access:" <> viewAccess access'] + where + access = pg >>= publicGroupAccess + access' = pg' >>= publicGroupAccess + viewAccess Nothing = " removed" + viewAccess (Just PublicGroupAccess {groupWebPage, groupDomain, domainWebPage, allowEmbedding}) = + maybe "" (\u -> " web=" <> plain u) groupWebPage + <> maybe "" (\d -> " domain=" <> plain d) groupDomain + <> (if domainWebPage then " domain_page=on" else "") + <> (if allowEmbedding then " embed=on" else "") viewGroupProfile :: GroupInfo -> [StyledString] viewGroupProfile g@GroupInfo {groupProfile = GroupProfile {shortDescr, description, image, groupPreferences = gps}} = diff --git a/src/Simplex/Chat/Web.hs b/src/Simplex/Chat/Web.hs new file mode 100644 index 0000000000..2b4fb89137 --- /dev/null +++ b/src/Simplex/Chat/Web.hs @@ -0,0 +1,430 @@ +{-# LANGUAGE DataKinds #-} +{-# LANGUAGE DuplicateRecordFields #-} +{-# LANGUAGE GADTs #-} +{-# LANGUAGE LambdaCase #-} +{-# LANGUAGE NamedFieldPuns #-} +{-# LANGUAGE OverloadedStrings #-} +{-# LANGUAGE ScopedTypeVariables #-} +{-# LANGUAGE TemplateHaskell #-} +{-# OPTIONS_GHC -fno-warn-ambiguous-fields #-} + +module Simplex.Chat.Web + ( WebChannelPreview (..), + WebMessage (..), + WebMemberProfile (..), + WebFileInfo (..), + webPreviewWorker, + writeCorsConfig, + removeStaleFiles, + channelContentChanged, + channelProfileUpdated, + channelRemoved, + extractOrigin, + ) +where + +import Control.Concurrent.STM (check, flushTQueue) +import Control.Exception (SomeException, catch) +import Control.Logger.Simple +import Control.Monad (forM_, void, when) +import Control.Monad.Except (runExceptT) +import Data.Either (rights) +import Data.Int (Int64) +import qualified Data.Aeson as J +import qualified Data.Aeson.TH as JQ +import qualified Data.ByteString.Char8 as B +import qualified Data.ByteString.Lazy as LB +import Data.Text.Encoding (encodeUtf8) +import qualified Data.Map.Strict as M +import qualified Data.Set as S +import Data.Maybe (isJust, mapMaybe, maybeToList) +import Data.Text (Text) +import qualified Data.Text as T +import qualified Data.Text.IO as TIO +import Data.Time.Clock (UTCTime, getCurrentTime) +import Simplex.Chat.Controller (ChatConfig (..), ChatController (..), CorsOrigin (..), PublishableGroup (..), WebPreviewConfig (..), WebPreviewState (..), mkStoreCxt) +import Simplex.Chat.Markdown (FormattedText (..), MarkdownList, parseMaybeMarkdownList) +import Simplex.Chat.Messages + ( CChatItem (..), + CIDirection (..), + CIFile (..), + CIMeta (..), + CIQDirection (..), + CIQuote (..), + CIReactionCount, + ChatItem (..), + ChatType (..), + ) +import Simplex.Chat.Messages.CIContent (ciMsgContent) +import Simplex.Chat.Protocol (MsgContent, MsgRef (..), QuotedMsg (..), isReport) +import Simplex.Chat.Store.Groups (getGroupOwners, getRelayPublishableGroups) +import Simplex.Chat.Store.Messages (getGroupWebPreviewItems) +import Simplex.Chat.Store.Shared (getGroupInfo) +import Simplex.Chat.Types + ( B64UrlByteString, + GroupInfo (..), + GroupMember (..), + GroupProfile (..), + GroupSummary (..), + ImageData, + LocalProfile (..), + MemberId, + PublicGroupAccess (..), + PublicGroupProfile (..), + User (..), + ) +import Simplex.Messaging.Agent.Store.Common (withTransaction) +import Simplex.Messaging.Encoding.String (strEncode) +import Simplex.Messaging.Util (safeDecodeUtf8) +import qualified URI.ByteString as U +import Simplex.Messaging.Parsers (defaultJSON) +import System.Directory (createDirectoryIfMissing, listDirectory, removeFile, renameFile) +import System.FilePath (dropExtension, takeExtension, ()) +import UnliftIO.STM + +data WebFileInfo = WebFileInfo + { fileName :: String, + fileSize :: Integer + } + deriving (Show) + +data WebMemberProfile = WebMemberProfile + { memberId :: MemberId, + displayName :: Text, + image :: Maybe ImageData + } + deriving (Show) + +data WebMessage = WebMessage + { sender :: Maybe MemberId, + ts :: UTCTime, + content :: MsgContent, + formattedText :: Maybe MarkdownList, + file :: Maybe WebFileInfo, + quote :: Maybe QuotedMsg, + reactions :: [CIReactionCount], + forward :: Maybe Bool, + edited :: Bool + } + deriving (Show) + +data WebChannelPreview = WebChannelPreview + { channel :: GroupProfile, + shortDescription :: Maybe MarkdownList, + welcomeMessage :: Maybe MarkdownList, + members :: [WebMemberProfile], + subscribers :: Maybe Int64, + messages :: [WebMessage], + updatedAt :: UTCTime + } + deriving (Show) + +$(JQ.deriveJSON defaultJSON ''WebFileInfo) + +$(JQ.deriveJSON defaultJSON ''WebMemberProfile) + +$(JQ.deriveJSON defaultJSON ''WebMessage) + +$(JQ.deriveJSON defaultJSON ''WebChannelPreview) + +webPreviewWorker :: WebPreviewConfig -> ChatController -> [User] -> IO () +webPreviewWorker cfg@WebPreviewConfig {webJsonDir, webCorsFile, webUpdateInterval} cc users = + forM_ (webPreviewState cc) $ \wps -> do + createDirectoryIfMissing True webJsonDir + initPublishableGroups wps + cleanStaleFiles wps + regenerateCors wps + seedRoutinePending wps + workerLoop wps + where + cxt = mkStoreCxt (config cc) + + workerLoop wps@WebPreviewState {priorityRender, filesToRemove, corsNeeded, routinePending, wakeSignal} = do + drainRemovals + drainPriority + handleCors + renderRoutine + noRoutine <- atomically $ S.null <$> readTVar routinePending + when noRoutine waitRefresh + workerLoop wps + where + drainRemovals = atomically (tryReadTQueue filesToRemove) >>= \case + Nothing -> pure () + Just f -> do + removeFile (webJsonDir f) `catch` \(_ :: SomeException) -> pure () + drainRemovals + + -- flush the whole queue and render each group once: a burst of changes in one + -- channel enqueues its id many times, but only needs a single render + drainPriority = do + gIds <- atomically $ flushTQueue priorityRender + forM_ (S.fromList gIds) $ renderOneGroup wps + + handleCors = do + needed <- atomically $ swapTVar corsNeeded False + when needed $ regenerateCors wps + + -- render a single routine item; the main loop calls this once per iteration + renderRoutine = do + mGId <- atomically $ do + pending <- readTVar routinePending + case S.minView pending of + Nothing -> pure Nothing + Just (gId, rest) -> writeTVar routinePending rest >> pure (Just gId) + forM_ mGId $ renderOneGroup wps + + -- routine list drained: wait for the refresh timer or a change signal; only the timer + -- seeds the next full sweep, a change just returns to let the main loop service it + waitRefresh = do + delay <- registerDelay (webUpdateInterval * 1000000) + timerFired <- atomically $ + (True <$ (readTVar delay >>= check)) `orElse` (False <$ takeTMVar wakeSignal) + when timerFired $ seedRoutinePending wps + + initPublishableGroups WebPreviewState {publishableGroupIds} = do + rows <- withTransaction (chatStore cc) $ \db -> + concat <$> mapM (getRelayPublishableGroups db) users + let gIds = M.fromList [(gId, toPublishableGroup pgId access) | (gId, pgId, access) <- rows] + atomically $ writeTVar publishableGroupIds gIds + + cleanStaleFiles WebPreviewState {publishableGroupIds} = do + ids <- readTVarIO publishableGroupIds + let activeFiles = S.fromList $ map pgFileName $ M.elems ids + removeStaleFiles webJsonDir activeFiles + + regenerateCors WebPreviewState {publishableGroupIds} = do + ids <- readTVarIO publishableGroupIds + let entries = mapMaybe pgCorsEntry $ M.elems ids + forM_ webCorsFile $ writeCorsConfig entries + + seedRoutinePending WebPreviewState {publishableGroupIds, routinePending} = + atomically $ M.keysSet <$> readTVar publishableGroupIds >>= writeTVar routinePending + + renderOneGroup WebPreviewState {publishableGroupIds} gId = do + publishable <- atomically $ M.member gId <$> readTVar publishableGroupIds + when publishable $ + renderOrRemoveStale `catch` \(e :: SomeException) -> + logError $ "web preview: error rendering group " <> T.pack (show gId) <> ": " <> T.pack (show e) + where + renderOrRemoveStale = do + r <- withTransaction (chatStore cc) $ \db -> + findUser $ \u -> fmap (\g -> (u, g)) <$> runExceptT (getGroupInfo db cxt u gId) + case r of + Just (u, gInfo) | hasPublicGroup gInfo -> + void $ renderGroupPreview cfg cc u gInfo + _ -> do + fName <- atomically $ do + pg <- M.lookup gId <$> readTVar publishableGroupIds + modifyTVar' publishableGroupIds (M.delete gId) + pure $ pgFileName <$> pg + forM_ fName $ \f -> + removeFile (webJsonDir f) `catch` \(_ :: SomeException) -> pure () + logInfo $ "web preview: group " <> T.pack (show gId) <> " no longer publishable" + + findUser f = go users + where + go [] = pure Nothing + go (u : us) = f u >>= \case + Right a -> pure (Just a) + Left _ -> go us + +renderGroupPreview :: WebPreviewConfig -> ChatController -> User -> GroupInfo -> IO (Maybe (Text, CorsOrigin)) +renderGroupPreview WebPreviewConfig {webJsonDir, webPreviewItemCount} cc user gInfo@GroupInfo {groupProfile = gp@GroupProfile {shortDescr = sd, description = wd, publicGroup}, groupSummary = GroupSummary {publicMemberCount}} = + case publicGroup of + Just PublicGroupProfile {publicGroupId, publicGroupAccess} -> do + let fName = publicGroupIdFileName publicGroupId <> ".json" + (items, owners) <- withTransaction (chatStore cc) $ \db -> do + is <- getGroupWebPreviewItems db user gInfo webPreviewItemCount + os <- getGroupOwners db cxt user gInfo + pure (is, os) + ts <- getCurrentTime + let rendered = mapMaybe toRenderedItem $ rights items + msgs = map fst rendered + senders = collectSenders $ map memberToProfile owners <> concatMap snd rendered + preview = WebChannelPreview + { channel = gp, + shortDescription = toFormattedText =<< sd, + welcomeMessage = toFormattedText =<< wd, + members = senders, + subscribers = publicMemberCount, + messages = msgs, + updatedAt = ts + } + let destPath = webJsonDir fName + tmpPath = destPath <> ".tmp" + LB.writeFile tmpPath (J.encode preview) + renameFile tmpPath destPath + pure $ corsEntry publicGroupId <$> publicGroupAccess + Nothing -> pure Nothing + where + cxt = mkStoreCxt (config cc) + +channelContentChanged :: ChatController -> Int64 -> STM () +channelContentChanged cc gId = + forM_ (webPreviewState cc) $ \WebPreviewState {publishableGroupIds, priorityRender, routinePending, wakeSignal} -> do + ids <- readTVar publishableGroupIds + when (M.member gId ids) $ do + writeTQueue priorityRender gId + modifyTVar' routinePending (S.delete gId) + void $ tryPutTMVar wakeSignal () + +channelProfileUpdated :: ChatController -> Int64 -> GroupProfile -> STM () +channelProfileUpdated cc gId GroupProfile {publicGroup} = + forM_ (webPreviewState cc) $ \WebPreviewState {publishableGroupIds, priorityRender, filesToRemove, corsNeeded, routinePending, wakeSignal} -> + case publicGroup of + Just PublicGroupProfile {publicGroupId, publicGroupAccess} -> do + let pg = PublishableGroup + { pgFileName = publicGroupIdFileName publicGroupId <> ".json", + pgCorsEntry = corsEntry publicGroupId <$> publicGroupAccess + } + modifyTVar' publishableGroupIds (M.insert gId pg) + writeTQueue priorityRender gId + modifyTVar' routinePending (S.delete gId) + writeTVar corsNeeded True + void $ tryPutTMVar wakeSignal () + Nothing -> do + ids <- readTVar publishableGroupIds + forM_ (pgFileName <$> M.lookup gId ids) $ writeTQueue filesToRemove + modifyTVar' publishableGroupIds (M.delete gId) + modifyTVar' routinePending (S.delete gId) + writeTVar corsNeeded True + void $ tryPutTMVar wakeSignal () + +channelRemoved :: ChatController -> Int64 -> STM () +channelRemoved cc gId = + forM_ (webPreviewState cc) $ \WebPreviewState {publishableGroupIds, filesToRemove, corsNeeded, routinePending, wakeSignal} -> do + ids <- readTVar publishableGroupIds + forM_ (pgFileName <$> M.lookup gId ids) $ writeTQueue filesToRemove + modifyTVar' publishableGroupIds (M.delete gId) + modifyTVar' routinePending (S.delete gId) + writeTVar corsNeeded True + void $ tryPutTMVar wakeSignal () + +toRenderedItem :: CChatItem 'CTGroup -> Maybe (WebMessage, [WebMemberProfile]) +toRenderedItem (CChatItem _ ChatItem {chatDir, meta = CIMeta {itemTs, itemTimed, itemForwarded, itemEdited}, content, formattedText, quotedItem, reactions, file}) + | isJust itemTimed = Nothing + | otherwise = case ciMsgContent content of + Just mc | not (isReport mc) -> + let (sender, senderProfile) = case chatDir of + CIGroupRcv m@GroupMember {memberId} -> (Just memberId, [memberToProfile m]) + _ -> (Nothing, []) + quotedProfile = case quotedItem of + Just CIQuote {chatDir = CIQGroupRcv (Just m)} -> [memberToProfile m] + _ -> [] + in Just + ( WebMessage + { sender, + ts = itemTs, + content = mc, + formattedText, + file = webFileInfo <$> file, + quote = quotedItem >>= ciQuoteToQuotedMsg, + reactions, + forward = if isJust itemForwarded then Just True else Nothing, + edited = itemEdited + }, + senderProfile <> quotedProfile + ) + _ -> Nothing + +ciQuoteToQuotedMsg :: CIQuote c -> Maybe QuotedMsg +ciQuoteToQuotedMsg CIQuote {chatDir = qDir, sharedMsgId, sentAt, content = qContent} = + Just QuotedMsg + { msgRef = MsgRef + { msgId = sharedMsgId, + sentAt, + sent = case qDir of + CIQDirectSnd -> True + CIQGroupSnd -> True + _ -> False, + memberId = case qDir of + CIQGroupRcv (Just GroupMember {memberId}) -> Just memberId + _ -> Nothing + }, + content = qContent + } + +webFileInfo :: CIFile d -> WebFileInfo +webFileInfo CIFile {fileName, fileSize} = WebFileInfo {fileName, fileSize} + +collectSenders :: [WebMemberProfile] -> [WebMemberProfile] +collectSenders = M.elems . M.fromList . map (\p@WebMemberProfile {memberId} -> (memberId, p)) + +memberToProfile :: GroupMember -> WebMemberProfile +memberToProfile GroupMember {memberId, memberProfile = LocalProfile {displayName, image}} = + WebMemberProfile {memberId, displayName, image} + +toPublishableGroup :: B64UrlByteString -> Maybe PublicGroupAccess -> PublishableGroup +toPublishableGroup pgId access = + PublishableGroup + { pgFileName = publicGroupIdFileName pgId <> ".json", + pgCorsEntry = corsEntry pgId <$> access + } + +corsEntry :: B64UrlByteString -> PublicGroupAccess -> (Text, CorsOrigin) +corsEntry publicGroupId PublicGroupAccess {groupWebPage, allowEmbedding} = + let fName = T.pack $ publicGroupIdFileName publicGroupId <> ".json" + origin + | allowEmbedding = CorsAny + | otherwise = CorsOrigins $ mapMaybe extractOrigin $ maybeToList groupWebPage + in (fName, origin) + +extractOrigin :: Text -> Maybe Text +extractOrigin url = + case U.parseURI U.laxURIParserOptions (encodeUtf8 url) of + Right uri@U.URI {uriScheme = U.Scheme sch, uriAuthority = Just _} + | sch == "https" || sch == "http" -> + let originUri = uri {U.uriPath = "", U.uriQuery = U.Query [], U.uriFragment = Nothing} + origin = safeDecodeUtf8 $ U.serializeURIRef' originUri + in if T.all safeOriginChar origin then Just origin else Nothing + _ -> Nothing + where + -- percent-encoded bytes in the host (e.g. %22, %0a) are decoded by serializeURIRef', + -- so reject any origin with characters that could break out of the Caddy CORS config or header + safeOriginChar c = + (c >= 'A' && c <= 'Z') || (c >= 'a' && c <= 'z') || (c >= '0' && c <= '9') || c `elem` (".-:/[]" :: [Char]) + +channelPath :: Text +channelPath = "/channel/" + +writeCorsConfig :: [(Text, CorsOrigin)] -> FilePath -> IO () +writeCorsConfig entries path = + TIO.writeFile path $ T.unlines $ + ["map {path} {cors_origin} {"] + <> map corsLine entries + <> [ " default \"\"", + "}", + "header " <> channelPath <> "*.json Access-Control-Allow-Origin {cors_origin}", + "header " <> channelPath <> "*.json Access-Control-Allow-Methods \"GET, OPTIONS\"" + ] + where + corsLine (fName, origin) = case origin of + CorsAny -> " " <> channelPath <> fName <> " \"*\"" + CorsOrigins origins -> case origins of + [] -> " # " <> fName <> " (no origin configured)" + (o : _) -> " " <> channelPath <> fName <> " \"" <> o <> "\"" + +removeStaleFiles :: FilePath -> S.Set FilePath -> IO () +removeStaleFiles dir activeFiles = do + let -- matches ".json" and leftover ".json.tmp" from an interrupted write + isPreviewFile f = + let f' = if takeExtension f == ".tmp" then dropExtension f else f + base = dropExtension f' + in takeExtension f' == ".json" && not (null base) && all isBase64Url base + isBase64Url c = (c >= 'A' && c <= 'Z') || (c >= 'a' && c <= 'z') || (c >= '0' && c <= '9') || c == '-' || c == '_' + allFiles <- S.filter isPreviewFile . S.fromList <$> listDirectory dir + mapM_ (\f -> removeFile (dir f)) $ S.difference allFiles activeFiles + +toFormattedText :: Text -> Maybe MarkdownList +toFormattedText t = case parseMaybeMarkdownList t of + Just fts | any hasFormat fts -> Just fts + _ -> Nothing + where + hasFormat (FormattedText fmt _) = isJust fmt + +publicGroupIdFileName :: B64UrlByteString -> String +publicGroupIdFileName = B.unpack . strEncode + +hasPublicGroup :: GroupInfo -> Bool +hasPublicGroup GroupInfo {groupProfile = GroupProfile {publicGroup}} = isJust publicGroup + diff --git a/tests/Bots/DirectoryTests.hs b/tests/Bots/DirectoryTests.hs index f92411839f..cd6d549581 100644 --- a/tests/Bots/DirectoryTests.hs +++ b/tests/Bots/DirectoryTests.hs @@ -27,8 +27,10 @@ import Simplex.Chat.Controller (ChatConfig (..)) import qualified Simplex.Chat.Markdown as MD import Simplex.Chat.Options (CoreChatOpts (..)) import Simplex.Chat.Options.DB +import Simplex.Chat.Protocol (memberSupportVoiceVersion) import Simplex.Chat.Types (ChatPeerType (..), Profile (..)) import Simplex.Chat.Types.Shared (GroupMemberRole (..)) +import Simplex.Messaging.Version import System.FilePath (()) import Test.Hspec hiding (it) @@ -1492,7 +1494,7 @@ testVoiceCaptchaOldClient ps@TestParams {tmpPath} = do setPermissions mockScript $ setOwnerExecutable True $ setOwnerReadable True $ setOwnerWritable True emptyPermissions withDirectoryServiceVoiceCaptcha ps mockScript $ \superUser dsLink -> withNewTestChat ps "bob" bobProfile $ \bob -> - withNewTestChatCfg ps testCfgVPrev "cath" cathProfile $ \cath -> do + withNewTestChatCfg ps testCfg {chatVRange = (chatVRange testCfg) {maxVersion = prevVersion memberSupportVoiceVersion}} "cath" cathProfile $ \cath -> do bob `connectVia` dsLink registerGroup superUser bob "privacy" "Privacy" bob #> "@'SimpleX Directory' /role 1" diff --git a/tests/ChatClient.hs b/tests/ChatClient.hs index ede3c1f2a2..442834b244 100644 --- a/tests/ChatClient.hs +++ b/tests/ChatClient.hs @@ -24,11 +24,12 @@ import Control.Monad.Reader import Data.Functor (($>)) import Data.List (dropWhileEnd, find) import Data.Maybe (isNothing) +import Data.Text (Text) import qualified Data.Text as T import Data.Time.Clock (getCurrentTime) import Network.Socket import Simplex.Chat -import Simplex.Chat.Controller (ChatCommand (..), ChatConfig (..), ChatController (..), ChatDatabase (..), ChatLogLevel (..), defaultSimpleNetCfg) +import Simplex.Chat.Controller (ChatCommand (..), ChatConfig (..), ChatController (..), ChatDatabase (..), ChatLogLevel (..), WebPreviewConfig (..), defaultSimpleNetCfg) import Simplex.Chat.Core import Simplex.Chat.Library.Commands import Simplex.Chat.Options @@ -153,6 +154,7 @@ testCoreOpts = tbqSize = 16, deviceName = Nothing, chatRelay = False, + webPreviewConfig = Nothing, highlyAvailable = False, yesToUpMigrations = False, migrationBackupPath = Nothing, @@ -162,6 +164,9 @@ testCoreOpts = relayTestOpts :: ChatOpts relayTestOpts = testOpts {coreOptions = testCoreOpts {chatRelay = True}} +relayWebTestOpts :: Text -> FilePath -> Maybe FilePath -> ChatOpts +relayWebTestOpts webDomain webDir webCorsFile = testOpts {coreOptions = testCoreOpts {chatRelay = True, webPreviewConfig = Just WebPreviewConfig {webDomain, webJsonDir = webDir, webCorsFile, webUpdateInterval = 300, webPreviewItemCount = 50}}} + #if !defined(dbPostgres) getTestOpts :: Bool -> ScrubbedBytes -> ChatOpts getTestOpts maintenance dbKey = testOpts {coreOptions = testCoreOpts {maintenance, dbOptions = (dbOptions testCoreOpts) {dbKey}}} diff --git a/tests/ChatTests/ChatRelays.hs b/tests/ChatTests/ChatRelays.hs index 4b09347dcf..57095fb28f 100644 --- a/tests/ChatTests/ChatRelays.hs +++ b/tests/ChatTests/ChatRelays.hs @@ -1,5 +1,7 @@ {-# LANGUAGE DuplicateRecordFields #-} +{-# LANGUAGE LambdaCase #-} {-# LANGUAGE OverloadedStrings #-} +{-# LANGUAGE ScopedTypeVariables #-} module ChatTests.ChatRelays where @@ -16,8 +18,13 @@ import qualified Data.Text as T import ProtocolTests (testGroupProfile) import Simplex.Chat.Protocol (LinkOwnerSig, MsgChatLink (..), MsgContent (..)) import Simplex.Chat.Types (GroupProfile (..)) +import Simplex.Chat.Controller (CorsOrigin (..)) +import Simplex.Chat.Web (WebChannelPreview (..), WebMessage (..), extractOrigin, removeStaleFiles, writeCorsConfig) import Simplex.Messaging.Encoding.String (StrEncoding (..)) import Simplex.Messaging.Util (decodeJSON) +import qualified Data.Set as S +import System.Directory (createDirectoryIfMissing, doesFileExist, listDirectory) +import System.FilePath (takeExtension, ()) import Test.Hspec hiding (it) chatRelayTests :: SpecWith TestParams @@ -28,6 +35,19 @@ chatRelayTests = do it "re-add soft-deleted relay by same name" testReAddRelaySameName it "test chat relay" testChatRelayTest it "relay profile updated in address" testRelayProfileUpdateInAddress + describe "relay capabilities" $ do + it "relay sends webDomain in capabilities" testRelayWebCapabilities + describe "web preview" $ do + it "render messages and members" testWebPreviewRender + it "incremental render adds new messages" testWebPreviewIncremental + it "edited and deleted messages" testWebPreviewEditedDeleted + it "reactions in rendered messages" testWebPreviewReactions + it "non-public group produces no file" testWebPreviewNonPublic + it "multiple channels produce multiple files" testWebPreviewMultipleChannels + it "channel deletion removes preview file" testWebPreviewChannelDeleted + it "removeStaleFiles preserves non-base64url files" testWebPreviewStaleCleanup + it "generate CORS config" testWebPreviewCors + it "extractOrigin strips path from URL" testExtractOrigin describe "share channel card" $ do it "share channel card in direct chat" testShareChannelDirect it "share channel card in group" testShareChannelGroup @@ -325,6 +345,238 @@ testShareChannelChannel ps = getTermLine2 :: TestCC -> IO (String, String) getTermLine2 c = (,) <$> getTermLine c <*> getTermLine c +testRelayWebCapabilities :: HasCallStack => TestParams -> IO () +testRelayWebCapabilities ps = + withNewTestChat ps "alice" aliceProfile $ \alice -> + withNewTestChatOpts ps (relayWebTestOpts "relay.example.com" (tmpPath ps "web_cap") Nothing) "bob" bobProfile $ \relay -> do + rName <- userName relay + relay ##> "/ad" + (relaySLink, _cLink) <- getContactLinks relay True + alice ##> ("/relays name=" <> rName <> " " <> relaySLink) + alice <## "ok" + alice ##> "/public group relays=1 #news" + alice <## "group #news is created" + alice <## "wait for selected relay(s) to join, then you can invite members via group link" + concurrentlyN_ + [ do + alice <## "#news: group link relays updated, current relays:" + alice <### [EndsWith ": active, web: relay.example.com"] + alice <## "group link:" + _ <- getTermLine alice + pure (), + relay <## "#news: you joined the group as relay" + ] + +-- Helper: set up relay with web config + channel +withWebChannel :: TestParams -> String -> (TestCC -> TestCC -> FilePath -> IO ()) -> IO () +withWebChannel ps gName test = do + let webDir = tmpPath ps "web_" <> gName + corsFile = tmpPath ps "cors_" <> gName <> ".conf" + withNewTestChat ps "alice" aliceProfile $ \alice -> + withNewTestChatOpts ps (relayWebTestOpts "relay.example.com" webDir (Just corsFile)) "bob" bobProfile $ \relay -> do + _ <- setupRelay alice relay + createChannelWithRelayWeb gName alice relay + test alice relay webDir + +createChannelWithRelayWeb :: HasCallStack => String -> TestCC -> TestCC -> IO () +createChannelWithRelayWeb gName owner relay = do + owner ##> ("/public group relays=1 #" <> gName) + owner <## ("group #" <> gName <> " is created") + owner <## "wait for selected relay(s) to join, then you can invite members via group link" + concurrentlyN_ + [ do + owner <## ("#" <> gName <> ": group link relays updated, current relays:") + owner <### [EndsWith ": active, web: relay.example.com"] + owner <## "group link:" + _ <- getTermLine owner + pure (), + relay <## ("#" <> gName <> ": you joined the group as relay") + ] + +-- Poll for a JSON preview file written by the worker that satisfies predicate, with timeout +waitPreviewWith :: HasCallStack => FilePath -> (WebChannelPreview -> Bool) -> IO WebChannelPreview +waitPreviewWith webDir check = go 50 + where + go :: Int -> IO WebChannelPreview + go 0 = error "waitPreview: timed out waiting for matching JSON file" + go n = do + files <- filter (\f -> takeExtension f == ".json") <$> listDirectory webDir + case files of + [f] -> do + jsonBytes <- LB.readFile (webDir f) + case J.eitherDecode jsonBytes of + Right p | check p -> pure p + _ -> threadDelay 100000 >> go (n - 1) + _ -> threadDelay 100000 >> go (n - 1) + +waitPreview :: HasCallStack => FilePath -> IO WebChannelPreview +waitPreview webDir = waitPreviewWith webDir (const True) + +testWebPreviewRender :: HasCallStack => TestParams -> IO () +testWebPreviewRender ps = + withWebChannel ps "news" $ \alice relay webDir -> do + alice #> "#news hello from the channel" + relay <# "#news> hello from the channel" + alice #> "#news second message" + relay <# "#news> second message" + wPreview <- waitPreviewWith webDir (\p -> length (messages p) >= 2) + let GroupProfile {displayName = chName} = channel wPreview + chName `shouldBe` "news" + length (messages wPreview) `shouldBe` 2 + content (messages wPreview !! 0) `shouldBe` MCText "hello from the channel" + content (messages wPreview !! 1) `shouldBe` MCText "second message" + length (members wPreview) `shouldSatisfy` (>= 1) + all (\m -> ts m > read "2020-01-01 00:00:00 UTC") (messages wPreview) `shouldBe` True + jsonFiles <- filter (\f -> takeExtension f == ".json") <$> listDirectory webDir + length jsonFiles `shouldBe` 1 + +testWebPreviewIncremental :: HasCallStack => TestParams -> IO () +testWebPreviewIncremental ps = + withWebChannel ps "inc" $ \alice relay webDir -> do + alice #> "#inc first" + relay <# "#inc> first" + p1 <- waitPreviewWith webDir (\p -> length (messages p) >= 1) + length (messages p1) `shouldBe` 1 + content (messages p1 !! 0) `shouldBe` MCText "first" + alice #> "#inc second" + relay <# "#inc> second" + alice #> "#inc third" + relay <# "#inc> third" + p2 <- waitPreviewWith webDir (\p -> length (messages p) >= 3) + length (messages p2) `shouldBe` 3 + content (messages p2 !! 0) `shouldBe` MCText "first" + content (messages p2 !! 1) `shouldBe` MCText "second" + content (messages p2 !! 2) `shouldBe` MCText "third" + +testWebPreviewEditedDeleted :: HasCallStack => TestParams -> IO () +testWebPreviewEditedDeleted ps = + withWebChannel ps "ed" $ \alice relay webDir -> do + alice #> "#ed msg one" + relay <# "#ed> msg one" + alice #> "#ed msg two" + relay <# "#ed> msg two" + msgId2 <- lastItemId alice + alice #> "#ed msg three" + relay <# "#ed> msg three" + msgId3 <- lastItemId alice + alice ##> ("/_update item #1 " <> msgId2 <> " text msg two edited") + alice <# "#ed [edited] msg two edited" + relay <# "#ed> [edited] msg two edited" + alice #$> ("/_delete item #1 " <> msgId3 <> " broadcast", id, "message marked deleted") + relay <# "#ed> [marked deleted] msg three" + p <- waitPreviewWith webDir (\p -> length (messages p) == 2 && any edited (messages p)) + length (messages p) `shouldBe` 2 + content (messages p !! 0) `shouldBe` MCText "msg one" + content (messages p !! 1) `shouldBe` MCText "msg two edited" + edited (messages p !! 0) `shouldBe` False + edited (messages p !! 1) `shouldBe` True + +testWebPreviewReactions :: HasCallStack => TestParams -> IO () +testWebPreviewReactions ps = + withWebChannel ps "react" $ \alice relay webDir -> do + alice #> "#react hello" + relay <# "#react> hello" + alice ##> "+1 #react hello" + alice <## "added 👍" + relay <# "#react alice> > hello" + relay <## " + 👍" + p <- waitPreviewWith webDir (\p -> not (null (messages p)) && not (null (reactions (head (messages p))))) + length (messages p) `shouldBe` 1 + length (reactions (messages p !! 0)) `shouldSatisfy` (>= 1) + +testWebPreviewNonPublic :: HasCallStack => TestParams -> IO () +testWebPreviewNonPublic ps = do + let webDir = tmpPath ps "web_nonpub" + withNewTestChat ps "alice" aliceProfile $ \alice -> + withNewTestChatOpts ps (relayWebTestOpts "relay.example.com" webDir Nothing) "bob" bobProfile $ \relay -> do + _ <- setupRelay alice relay + alice ##> "/g private" + alice <## "group #private is created" + alice <## "to add members use /a private or /create link #private" + alice #> "#private hello" + threadDelay 2000000 + files <- filter (\f -> takeExtension f == ".json") <$> listDirectory webDir + length files `shouldBe` 0 + +testWebPreviewMultipleChannels :: HasCallStack => TestParams -> IO () +testWebPreviewMultipleChannels ps = do + let webDir = tmpPath ps "web_multi" + withNewTestChat ps "alice" aliceProfile $ \alice -> + withNewTestChatOpts ps (relayWebTestOpts "relay.example.com" webDir Nothing) "bob" bobProfile $ \relay -> do + _ <- setupRelay alice relay + createChannelWithRelayWeb "ch1" alice relay + createChannelWithRelayWeb "ch2" alice relay + alice #> "#ch1 msg in ch1" + relay <# "#ch1> msg in ch1" + alice #> "#ch2 msg in ch2" + relay <# "#ch2> msg in ch2" + threadDelay 2000000 + files <- filter (\f -> takeExtension f == ".json") <$> listDirectory webDir + length files `shouldBe` 2 + +testWebPreviewChannelDeleted :: HasCallStack => TestParams -> IO () +testWebPreviewChannelDeleted ps = + withWebChannel ps "del" $ \alice relay webDir -> do + alice #> "#del hello" + relay <# "#del> hello" + _ <- waitPreviewWith webDir (\p -> not (null (messages p))) + jsonFiles <- filter (\f -> takeExtension f == ".json") <$> listDirectory webDir + length jsonFiles `shouldBe` 1 + let previewFile = webDir head jsonFiles + alice ##> "/d #del" + alice <## "#del: you deleted the group (signed)" + relay <## "#del: alice deleted the group (signed)" + relay <## "use /d #del to delete the local copy of the group" + waitFileDeleted previewFile 50 + +testWebPreviewStaleCleanup :: HasCallStack => TestParams -> IO () +testWebPreviewStaleCleanup ps = do + let webDir = tmpPath ps "web_stale_unit" + activeFile = "abc123.json" + staleFile = "AAAA_stale.json" + safeFile = "my.config.json" + createDirectoryIfMissing True webDir + writeFile (webDir activeFile) "{}" + writeFile (webDir staleFile) "{}" + writeFile (webDir safeFile) "{}" + removeStaleFiles webDir (S.singleton activeFile) + doesFileExist (webDir staleFile) `shouldReturn` False + doesFileExist (webDir safeFile) `shouldReturn` True + doesFileExist (webDir activeFile) `shouldReturn` True + +waitFileDeleted :: HasCallStack => FilePath -> Int -> IO () +waitFileDeleted _ 0 = error "waitFileDeleted: timed out" +waitFileDeleted path n = + doesFileExist path >>= \case + False -> pure () + True -> threadDelay 100000 >> waitFileDeleted path (n - 1) + +testWebPreviewCors :: HasCallStack => TestParams -> IO () +testWebPreviewCors ps = do + let corsFile = tmpPath ps "simplex-cors.conf" + entries = + [ ("abc123.json", CorsAny), + ("def456.json", CorsOrigins ["https://owner-site.com"]), + ("ghi789.json", CorsOrigins []) + ] + writeCorsConfig entries corsFile + corsContent <- readFile corsFile + corsContent `shouldContain` "/channel/abc123.json \"*\"" + corsContent `shouldContain` "/channel/def456.json \"https://owner-site.com\"" + corsContent `shouldContain` "# ghi789.json (no origin configured)" + corsContent `shouldContain` "Access-Control-Allow-Origin" + corsContent `shouldContain` "Access-Control-Allow-Methods" + +testExtractOrigin :: HasCallStack => TestParams -> IO () +testExtractOrigin _ps = do + extractOrigin "https://owner.example.com/channel.html" `shouldBe` Just "https://owner.example.com" + extractOrigin "https://owner.example.com/path/to/page?q=1#frag" `shouldBe` Just "https://owner.example.com" + extractOrigin "https://owner.example.com:8443/page" `shouldBe` Just "https://owner.example.com:8443" + extractOrigin "https://owner.example.com" `shouldBe` Just "https://owner.example.com" + extractOrigin "http://localhost:3000/preview" `shouldBe` Just "http://localhost:3000" + extractOrigin "ftp://example.com/file" `shouldBe` Nothing + extractOrigin "not-a-url" `shouldBe` Nothing + -- Create a public group with relay=1, wait for relay to join createChannelWithRelay :: HasCallStack => String -> TestCC -> TestCC -> IO () createChannelWithRelay gName owner relay = do diff --git a/tests/ProtocolTests.hs b/tests/ProtocolTests.hs index 10f8808015..1482a9de10 100644 --- a/tests/ProtocolTests.hs +++ b/tests/ProtocolTests.hs @@ -133,7 +133,7 @@ decodeChatMessageTest = describe "Chat message encoding/decoding" $ do "{\"v\":\"1\",\"msgId\":\"AQIDBA==\",\"event\":\"x.msg.new\",\"params\":{\"content\":{\"text\":\"hello\",\"type\":\"text\"}}}" ##==## ChatMessage chatInitialVRange (Just $ SharedMsgId "\1\2\3\4") (XMsgNew (mcSimple (MCText "hello"))) it "x.msg.new chat message with chat version range" $ - "{\"v\":\"1-17\",\"msgId\":\"AQIDBA==\",\"event\":\"x.msg.new\",\"params\":{\"content\":{\"text\":\"hello\",\"type\":\"text\"}}}" + "{\"v\":\"1-18\",\"msgId\":\"AQIDBA==\",\"event\":\"x.msg.new\",\"params\":{\"content\":{\"text\":\"hello\",\"type\":\"text\"}}}" ##==## ChatMessage supportedChatVRange (Just $ SharedMsgId "\1\2\3\4") (XMsgNew (mcSimple (MCText "hello"))) it "x.msg.new quote" $ "{\"v\":\"1\",\"msgId\":\"AQIDBA==\",\"event\":\"x.msg.new\",\"params\":{\"content\":{\"text\":\"hello to you too\",\"type\":\"text\"},\"quote\":{\"content\":{\"text\":\"hello there!\",\"type\":\"text\"},\"msgRef\":{\"msgId\":\"BQYHCA==\",\"sent\":true,\"sentAt\":\"1970-01-01T00:00:01.000000001Z\"}}}}" @@ -244,13 +244,13 @@ decodeChatMessageTest = describe "Chat message encoding/decoding" $ do "{\"v\":\"1\",\"event\":\"x.grp.mem.new\",\"params\":{\"memberInfo\":{\"memberRole\":\"admin\",\"memberId\":\"AQIDBA==\",\"profile\":{\"fullName\":\"Alice\",\"displayName\":\"alice\",\"image\":\"data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAgAAAAIAQMAAAD+wSzIAAAABlBMVEX///+/v7+jQ3Y5AAAADklEQVQI12P4AIX8EAgALgAD/aNpbtEAAAAASUVORK5CYII=\",\"preferences\":{\"reactions\":{\"allow\":\"yes\"},\"voice\":{\"allow\":\"yes\"}}}}}}" #==# XGrpMemNew MemberInfo {memberId = MemberId "\1\2\3\4", memberRole = GRAdmin, v = Nothing, profile = testProfile, memberKey = Nothing} Nothing it "x.grp.mem.new with member chat version range" $ - "{\"v\":\"1\",\"event\":\"x.grp.mem.new\",\"params\":{\"memberInfo\":{\"memberRole\":\"admin\",\"memberId\":\"AQIDBA==\",\"v\":\"1-17\",\"profile\":{\"fullName\":\"Alice\",\"displayName\":\"alice\",\"image\":\"data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAgAAAAIAQMAAAD+wSzIAAAABlBMVEX///+/v7+jQ3Y5AAAADklEQVQI12P4AIX8EAgALgAD/aNpbtEAAAAASUVORK5CYII=\",\"preferences\":{\"reactions\":{\"allow\":\"yes\"},\"voice\":{\"allow\":\"yes\"}}}}}}" + "{\"v\":\"1\",\"event\":\"x.grp.mem.new\",\"params\":{\"memberInfo\":{\"memberRole\":\"admin\",\"memberId\":\"AQIDBA==\",\"v\":\"1-18\",\"profile\":{\"fullName\":\"Alice\",\"displayName\":\"alice\",\"image\":\"data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAgAAAAIAQMAAAD+wSzIAAAABlBMVEX///+/v7+jQ3Y5AAAADklEQVQI12P4AIX8EAgALgAD/aNpbtEAAAAASUVORK5CYII=\",\"preferences\":{\"reactions\":{\"allow\":\"yes\"},\"voice\":{\"allow\":\"yes\"}}}}}}" #==# XGrpMemNew MemberInfo {memberId = MemberId "\1\2\3\4", memberRole = GRAdmin, v = Just $ ChatVersionRange supportedChatVRange, profile = testProfile, memberKey = Nothing} Nothing it "x.grp.mem.intro" $ "{\"v\":\"1\",\"event\":\"x.grp.mem.intro\",\"params\":{\"memberInfo\":{\"memberRole\":\"admin\",\"memberId\":\"AQIDBA==\",\"profile\":{\"fullName\":\"Alice\",\"displayName\":\"alice\",\"image\":\"data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAgAAAAIAQMAAAD+wSzIAAAABlBMVEX///+/v7+jQ3Y5AAAADklEQVQI12P4AIX8EAgALgAD/aNpbtEAAAAASUVORK5CYII=\",\"preferences\":{\"reactions\":{\"allow\":\"yes\"},\"voice\":{\"allow\":\"yes\"}}}}}}" #==# XGrpMemIntro MemberInfo {memberId = MemberId "\1\2\3\4", memberRole = GRAdmin, v = Nothing, profile = testProfile, memberKey = Nothing} Nothing it "x.grp.mem.intro with member chat version range" $ - "{\"v\":\"1\",\"event\":\"x.grp.mem.intro\",\"params\":{\"memberInfo\":{\"memberRole\":\"admin\",\"memberId\":\"AQIDBA==\",\"v\":\"1-17\",\"profile\":{\"fullName\":\"Alice\",\"displayName\":\"alice\",\"image\":\"data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAgAAAAIAQMAAAD+wSzIAAAABlBMVEX///+/v7+jQ3Y5AAAADklEQVQI12P4AIX8EAgALgAD/aNpbtEAAAAASUVORK5CYII=\",\"preferences\":{\"reactions\":{\"allow\":\"yes\"},\"voice\":{\"allow\":\"yes\"}}}}}}" + "{\"v\":\"1\",\"event\":\"x.grp.mem.intro\",\"params\":{\"memberInfo\":{\"memberRole\":\"admin\",\"memberId\":\"AQIDBA==\",\"v\":\"1-18\",\"profile\":{\"fullName\":\"Alice\",\"displayName\":\"alice\",\"image\":\"data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAgAAAAIAQMAAAD+wSzIAAAABlBMVEX///+/v7+jQ3Y5AAAADklEQVQI12P4AIX8EAgALgAD/aNpbtEAAAAASUVORK5CYII=\",\"preferences\":{\"reactions\":{\"allow\":\"yes\"},\"voice\":{\"allow\":\"yes\"}}}}}}" #==# XGrpMemIntro MemberInfo {memberId = MemberId "\1\2\3\4", memberRole = GRAdmin, v = Just $ ChatVersionRange supportedChatVRange, profile = testProfile, memberKey = Nothing} Nothing it "x.grp.mem.intro with member restrictions" $ "{\"v\":\"1\",\"event\":\"x.grp.mem.intro\",\"params\":{\"memberRestrictions\":{\"restriction\":\"blocked\"},\"memberInfo\":{\"memberRole\":\"admin\",\"memberId\":\"AQIDBA==\",\"profile\":{\"fullName\":\"Alice\",\"displayName\":\"alice\",\"image\":\"data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAgAAAAIAQMAAAD+wSzIAAAABlBMVEX///+/v7+jQ3Y5AAAADklEQVQI12P4AIX8EAgALgAD/aNpbtEAAAAASUVORK5CYII=\",\"preferences\":{\"reactions\":{\"allow\":\"yes\"},\"voice\":{\"allow\":\"yes\"}}}}}}" @@ -265,7 +265,7 @@ decodeChatMessageTest = describe "Chat message encoding/decoding" $ do "{\"v\":\"1\",\"event\":\"x.grp.mem.fwd\",\"params\":{\"memberIntro\":{\"directConnReq\":\"simplex:/invitation#/?v=1&smp=smp%3A%2F%2F1234-w%3D%3D%40smp.simplex.im%3A5223%2F3456-w%3D%3D%23%2F%3Fv%3D1-4%26dh%3DMCowBQYDK2VuAyEAjiswwI3O_NlS8Fk3HJUW870EY2bAwmttMBsvRB9eV3o%253D&e2e=v%3D2-3%26x3dh%3DMEIwBQYDK2VvAzkAmKuSYeQ_m0SixPDS8Wq8VBaTS1cW-Lp0n0h4Diu-kUpR-qXx4SDJ32YGEFoGFGSbGPry5Ychr6U%3D%2CMEIwBQYDK2VvAzkAmKuSYeQ_m0SixPDS8Wq8VBaTS1cW-Lp0n0h4Diu-kUpR-qXx4SDJ32YGEFoGFGSbGPry5Ychr6U%3D\",\"groupConnReq\":\"simplex:/invitation#/?v=1&smp=smp%3A%2F%2F1234-w%3D%3D%40smp.simplex.im%3A5223%2F3456-w%3D%3D%23%2F%3Fv%3D1-4%26dh%3DMCowBQYDK2VuAyEAjiswwI3O_NlS8Fk3HJUW870EY2bAwmttMBsvRB9eV3o%253D&e2e=v%3D2-3%26x3dh%3DMEIwBQYDK2VvAzkAmKuSYeQ_m0SixPDS8Wq8VBaTS1cW-Lp0n0h4Diu-kUpR-qXx4SDJ32YGEFoGFGSbGPry5Ychr6U%3D%2CMEIwBQYDK2VvAzkAmKuSYeQ_m0SixPDS8Wq8VBaTS1cW-Lp0n0h4Diu-kUpR-qXx4SDJ32YGEFoGFGSbGPry5Ychr6U%3D\"},\"memberInfo\":{\"memberRole\":\"admin\",\"memberId\":\"AQIDBA==\",\"profile\":{\"fullName\":\"Alice\",\"displayName\":\"alice\",\"image\":\"data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAgAAAAIAQMAAAD+wSzIAAAABlBMVEX///+/v7+jQ3Y5AAAADklEQVQI12P4AIX8EAgALgAD/aNpbtEAAAAASUVORK5CYII=\",\"preferences\":{\"reactions\":{\"allow\":\"yes\"},\"voice\":{\"allow\":\"yes\"}}}}}}" #==# XGrpMemFwd MemberInfo {memberId = MemberId "\1\2\3\4", memberRole = GRAdmin, v = Nothing, profile = testProfile, memberKey = Nothing} IntroInvitation {groupConnReq = testConnReq, directConnReq = Just testConnReq} it "x.grp.mem.fwd with member chat version range and w/t directConnReq" $ - "{\"v\":\"1\",\"event\":\"x.grp.mem.fwd\",\"params\":{\"memberIntro\":{\"groupConnReq\":\"simplex:/invitation#/?v=1&smp=smp%3A%2F%2F1234-w%3D%3D%40smp.simplex.im%3A5223%2F3456-w%3D%3D%23%2F%3Fv%3D1-4%26dh%3DMCowBQYDK2VuAyEAjiswwI3O_NlS8Fk3HJUW870EY2bAwmttMBsvRB9eV3o%253D&e2e=v%3D2-3%26x3dh%3DMEIwBQYDK2VvAzkAmKuSYeQ_m0SixPDS8Wq8VBaTS1cW-Lp0n0h4Diu-kUpR-qXx4SDJ32YGEFoGFGSbGPry5Ychr6U%3D%2CMEIwBQYDK2VvAzkAmKuSYeQ_m0SixPDS8Wq8VBaTS1cW-Lp0n0h4Diu-kUpR-qXx4SDJ32YGEFoGFGSbGPry5Ychr6U%3D\"},\"memberInfo\":{\"memberRole\":\"admin\",\"memberId\":\"AQIDBA==\",\"v\":\"1-17\",\"profile\":{\"fullName\":\"Alice\",\"displayName\":\"alice\",\"image\":\"data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAgAAAAIAQMAAAD+wSzIAAAABlBMVEX///+/v7+jQ3Y5AAAADklEQVQI12P4AIX8EAgALgAD/aNpbtEAAAAASUVORK5CYII=\",\"preferences\":{\"reactions\":{\"allow\":\"yes\"},\"voice\":{\"allow\":\"yes\"}}}}}}" + "{\"v\":\"1\",\"event\":\"x.grp.mem.fwd\",\"params\":{\"memberIntro\":{\"groupConnReq\":\"simplex:/invitation#/?v=1&smp=smp%3A%2F%2F1234-w%3D%3D%40smp.simplex.im%3A5223%2F3456-w%3D%3D%23%2F%3Fv%3D1-4%26dh%3DMCowBQYDK2VuAyEAjiswwI3O_NlS8Fk3HJUW870EY2bAwmttMBsvRB9eV3o%253D&e2e=v%3D2-3%26x3dh%3DMEIwBQYDK2VvAzkAmKuSYeQ_m0SixPDS8Wq8VBaTS1cW-Lp0n0h4Diu-kUpR-qXx4SDJ32YGEFoGFGSbGPry5Ychr6U%3D%2CMEIwBQYDK2VvAzkAmKuSYeQ_m0SixPDS8Wq8VBaTS1cW-Lp0n0h4Diu-kUpR-qXx4SDJ32YGEFoGFGSbGPry5Ychr6U%3D\"},\"memberInfo\":{\"memberRole\":\"admin\",\"memberId\":\"AQIDBA==\",\"v\":\"1-18\",\"profile\":{\"fullName\":\"Alice\",\"displayName\":\"alice\",\"image\":\"data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAgAAAAIAQMAAAD+wSzIAAAABlBMVEX///+/v7+jQ3Y5AAAADklEQVQI12P4AIX8EAgALgAD/aNpbtEAAAAASUVORK5CYII=\",\"preferences\":{\"reactions\":{\"allow\":\"yes\"},\"voice\":{\"allow\":\"yes\"}}}}}}" #==# XGrpMemFwd MemberInfo {memberId = MemberId "\1\2\3\4", memberRole = GRAdmin, v = Just $ ChatVersionRange supportedChatVRange, profile = testProfile, memberKey = Nothing} IntroInvitation {groupConnReq = testConnReq, directConnReq = Nothing} it "x.grp.mem.info" $ "{\"v\":\"1\",\"event\":\"x.grp.mem.info\",\"params\":{\"memberId\":\"AQIDBA==\",\"profile\":{\"fullName\":\"Alice\",\"displayName\":\"alice\",\"image\":\"data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAgAAAAIAQMAAAD+wSzIAAAABlBMVEX///+/v7+jQ3Y5AAAADklEQVQI12P4AIX8EAgALgAD/aNpbtEAAAAASUVORK5CYII=\",\"preferences\":{\"reactions\":{\"allow\":\"yes\"},\"voice\":{\"allow\":\"yes\"}}}}}" diff --git a/website/.eleventy.js b/website/.eleventy.js index f0310c5665..0567dd45d8 100644 --- a/website/.eleventy.js +++ b/website/.eleventy.js @@ -310,7 +310,7 @@ module.exports = function (ty) { ty.addPassthroughCopy("src/img") ty.addPassthroughCopy("src/video") ty.addPassthroughCopy("src/css") - ty.addPassthroughCopy("src/js") + ty.addPassthroughCopy("src/js/**/*.js") ty.addPassthroughCopy("src/lottie_file") ty.addPassthroughCopy("src/contact/*.js") ty.addPassthroughCopy("src/call") diff --git a/website/channel_sample.html b/website/channel_sample.html new file mode 100644 index 0000000000..169db55599 --- /dev/null +++ b/website/channel_sample.html @@ -0,0 +1,28 @@ + + + + + + SimpleX Channel Preview + + + + +
+ + + diff --git a/website/src/js/channel-preview.jsc b/website/src/js/channel-preview.jsc new file mode 100644 index 0000000000..be572fd8de --- /dev/null +++ b/website/src/js/channel-preview.jsc @@ -0,0 +1,1548 @@ +#include "simplex-lib.jsc" + +(function() { + +#include "qrcode.js" + +const STYLE = ` +.simplex-preview-container { + --sp-bg: var(--sp-light-bg, #fff); + --sp-text: #000; + --sp-text-secondary: #8b8786; + --sp-text-muted: #333; + --sp-text-small: #888; + --sp-bubble: #f5f5f6; + --sp-quote: #ececee; + --sp-border: #e5e5e5; + --sp-link: #0088ff; + --sp-link-hover: #0077e0; + --sp-btn: #007AE5; + --sp-btn-hover: #006BC9; + --sp-color-blue: #0053d0; + --sp-color-black: #000; + --sp-color-white: #000; + --sp-qr-fg: #062D56; + --sp-qr-bg: #ffffff; + font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, Helvetica, Arial, sans-serif; + font-size: 15px; + line-height: 1.4; + color: var(--sp-text); + background: var(--sp-bg); + width: 100%; + height: 100%; + padding: 0; + -webkit-font-smoothing: antialiased; + -webkit-text-size-adjust: 100%; + text-size-adjust: 100%; + display: flex; + justify-content: center; +} + +.simplex-preview-container.simplex-scheme-dark, +.dark .simplex-preview-container.simplex-scheme-site { + --sp-bg: var(--sp-dark-bg, #000832); + --sp-text: #FFFBFA; + --sp-text-secondary: #B3AFAE; + --sp-text-muted: #B3AFAE; + --sp-text-small: #aaa; + --sp-bubble: #071C46; + --sp-quote: #1B325C; + --sp-border: #3A3A3C; + --sp-link: #70F0F9; + --sp-link-hover: #66D9E2; + --sp-btn: #7EF1F9; + --sp-btn-hover: #75DCE4; + --sp-btn-text: #000; + --sp-color-blue: #70F0F9; + --sp-color-black: #fff; + --sp-color-white: #fff; + --sp-qr-fg: #FFFBFA; + --sp-qr-bg: transparent; +} + +.simplex-preview-header { + position: sticky; + top: 0; + z-index: 10; + background: var(--sp-bg); + border-bottom: 1px solid var(--sp-border); + padding: 8px 16px; + display: flex; + align-items: center; + gap: 12px; +} + +.simplex-preview-header-avatar { + width: 36px; + height: 36px; + border-radius: 8px; + object-fit: cover; + flex-shrink: 0; +} + +.simplex-preview-header-info { + flex: 1; + min-width: 0; +} + +.simplex-preview-header-name { + font-size: 17px; + font-weight: 600; + margin: 0; + white-space: nowrap; + overflow: hidden; + text-overflow: ellipsis; +} + +.simplex-preview-header-description { + font-size: 13px; + color: var(--sp-text-secondary); + margin: 2px 0 0; + white-space: nowrap; + overflow: hidden; + text-overflow: ellipsis; +} + +.simplex-preview-join-btn { + flex-shrink: 0; + background: var(--sp-btn); + color: var(--sp-btn-text, #fff); + border: none; + border-radius: 34px; + padding: 6px 10px 6px 10px; + font-size: 14px; + font-weight: 600; + cursor: pointer; + text-decoration: none; + display: inline-flex; + align-items: center; + gap: 5px; + font-family: inherit; +} + +.simplex-preview-join-btn svg { + width: 15.4px; + height: 15.4px; + flex-shrink: 0; + margin-left: 2px; +} + +.simplex-preview-container .simplex-logo-light-bg { + display: none; +} + +.simplex-preview-container.simplex-scheme-dark .simplex-logo-dark-bg, +.dark .simplex-preview-container.simplex-scheme-site .simplex-logo-dark-bg { + display: none; +} + +.simplex-preview-container.simplex-scheme-dark .simplex-logo-light-bg, +.dark .simplex-preview-container.simplex-scheme-site .simplex-logo-light-bg { + display: inline; +} + +.simplex-preview-join-btn:hover { + background: var(--sp-btn-hover); +} + +.simplex-preview-messages { + padding: 8px 16px 32px; +} + +.simplex-preview-date-separator { + text-align: center; + padding: 8px 0; + font-size: 12px; + color: var(--sp-text-secondary); + font-weight: 500; +} + +.simplex-preview-msg-group { + padding: 0 8px; +} + +.simplex-preview-msg-name { + font-size: 13.5px; + color: var(--sp-text-secondary); + padding: 0 0 2px 0; + margin-left: 39px; + white-space: nowrap; + overflow: hidden; + text-overflow: ellipsis; +} + +.simplex-preview-msg-name-role { + font-weight: 500; + margin-left: 8px; +} + +.simplex-preview-msg-row { + display: flex; + align-items: flex-start; + margin-bottom: 2px; +} + +.simplex-preview-msg-row.has-gap { + margin-bottom: 6px; +} + +.simplex-preview-msg-avatar { + width: 30px; + height: 30px; + border-radius: 7px; + object-fit: cover; + flex-shrink: 0; + margin-right: 9px; +} + +.simplex-preview-msg-avatar-placeholder { + width: 30px; + flex-shrink: 0; + margin-right: 9px; +} + +.simplex-preview-bubble { + position: relative; + background: var(--sp-bubble); + border-radius: 18px; + min-width: 80px; + overflow: visible; +} + +.simplex-preview-bubble-inner { + border-radius: 18px; + overflow: hidden; +} + +.simplex-preview-bubble.has-tail { + border-bottom-left-radius: 0; +} + +.simplex-preview-bubble.has-tail .simplex-preview-bubble-inner { + border-bottom-left-radius: 0; +} + +.simplex-preview-bubble-tail { + position: absolute; + bottom: 0; + left: -9px; + width: 9px; + height: 16px; + color: var(--sp-bubble); +} + +.simplex-preview-bubble.media-only { + background: transparent; +} + +.simplex-preview-meta-overlay { + position: absolute; + bottom: 6px; + right: 12px; + font-size: 12px; + color: #fff; + text-shadow: 0 0 4px rgba(0,0,0,0.7), 0 0 2px rgba(0,0,0,0.9); + white-space: nowrap; +} + +.simplex-preview-meta-overlay .simplex-preview-meta-edited { + font-style: italic; +} + +.simplex-preview-forwarded-header { + background: var(--sp-quote); + padding: 6px 12px 6px 8px; + font-size: 12px; + font-style: italic; + color: var(--sp-text-secondary); + display: flex; + align-items: center; + gap: 4px; +} + +.simplex-preview-quote { + background: var(--sp-quote); + display: flex; + width: 100%; +} + +.simplex-preview-quote-content { + flex: 1; + padding: 6px 12px; + min-width: 0; +} + +.simplex-preview-quote-sender { + font-size: 13.5px; + color: var(--sp-text-secondary); + margin-bottom: 2px; +} + +.simplex-preview-quote-text { + font-size: 15px; + overflow: hidden; + display: -webkit-box; + -webkit-line-clamp: 2; + -webkit-box-orient: vertical; +} + +.simplex-preview-quote-thumb { + width: 68px; + height: 68px; + object-fit: cover; + flex-shrink: 0; +} + +.simplex-preview-quote-file-icon { + padding: 6px 4px 0 0; + flex-shrink: 0; + color: var(--sp-text-secondary); +} + +.simplex-preview-text { + padding: 7px 12px; + word-wrap: break-word; + overflow-wrap: break-word; +} + +.simplex-preview-text a { + color: var(--sp-link); + text-decoration: none; +} + +.simplex-preview-text a:hover { + text-decoration: underline; +} + +.simplex-preview-image { + display: block; + max-width: 100%; +} + +.simplex-preview-image.landscape { + width: 400px; +} + +.simplex-preview-image.portrait { + width: 300px; +} + +.simplex-preview-image-placeholder { + display: flex; + align-items: center; + justify-content: center; + width: 120px; + height: 80px; + background: var(--sp-quote); + border-radius: 12px; + color: var(--sp-text-secondary); +} + +.simplex-preview-image-placeholder svg { + width: 32px; + height: 32px; +} + +.simplex-preview-link-card { + display: block; + max-width: 400px; +} + +.simplex-preview-link-card-image { + display: block; + width: 100%; +} + +.simplex-preview-link-card-body { + padding: 6px 12px; +} + +.simplex-preview-link-card-title { + font-size: 15px; + line-height: 22px; + margin-bottom: 4px; + overflow: hidden; + display: -webkit-box; + -webkit-line-clamp: 3; + -webkit-box-orient: vertical; +} + +.simplex-preview-link-card-description { + font-size: 14px; + line-height: 20px; + color: var(--sp-text-muted); + overflow: hidden; + display: -webkit-box; + -webkit-line-clamp: 12; + -webkit-box-orient: vertical; +} + +.simplex-preview-link-card-uri { + font-size: 12px; + color: var(--sp-text-secondary); + white-space: nowrap; + overflow: hidden; + text-overflow: ellipsis; +} + +.simplex-preview-file-indicator { + padding: 7px 12px; + display: flex; + align-items: center; + gap: 8px; + color: var(--sp-text-secondary); +} + +.simplex-preview-file-icon { + width: 22px; + height: 22px; + flex-shrink: 0; +} + +.simplex-preview-file-name { + font-size: 14px; + color: var(--sp-text); +} + +.simplex-preview-file-size { + font-size: 12px; + color: var(--sp-text-secondary); +} + +.simplex-preview-voice { + padding: 7px 12px; + display: flex; + align-items: center; + gap: 8px; + color: var(--sp-text-secondary); + font-size: 14px; +} + +.simplex-preview-meta { + float: right; + font-size: 12px; + color: var(--sp-text-secondary); + padding: 0 2px 0 12px; + margin-top: 4px; + white-space: nowrap; +} + +.simplex-preview-meta-edited { + font-style: italic; +} + +.simplex-preview-reactions { + display: flex; + flex-wrap: wrap; + padding: 2px 5px 2px; +} + +.simplex-preview-reaction { + font-size: 12px; + font-family: "Apple Color Emoji", "Segoe UI Emoji", "Noto Color Emoji", sans-serif; + border-radius: 8px; + padding: 2px 5px; + display: inline-flex; + align-items: center; + gap: 4px; +} + +.simplex-preview-reaction-count { + font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, Helvetica, Arial, sans-serif; + color: var(--sp-text-secondary); + font-size: 11.5px; +} + +.simplex-preview-empty { + text-align: center; + padding: 48px 16px; + color: var(--sp-text-secondary); +} + +.simplex-preview-text .secret { + background: var(--sp-text-secondary); + color: transparent; + border-radius: 4px; + cursor: pointer; + user-select: none; + transition: all 0.2s; +} + +.simplex-preview-text .secret.visible { + background: transparent; + color: inherit; +} + +.simplex-preview-text .small-text { + font-size: 13px; + color: var(--sp-text-small); +} + +.simplex-preview-text .red { color: #DD0000; } +.simplex-preview-text .green { color: #20BD3D; } +.simplex-preview-text .blue { color: var(--sp-color-blue); } +.simplex-preview-text .yellow { color: #DEBD00; } +.simplex-preview-text .cyan { color: #0AC4D1; } +.simplex-preview-text .magenta { color: magenta; } +.simplex-preview-text .black { color: var(--sp-color-black); } +.simplex-preview-text .white { color: var(--sp-color-white); } + +.simplex-preview-main { + flex: 1; + min-width: 0; + max-width: 640px; + overflow-y: auto; + overscroll-behavior: contain; + position: relative; +} + +.simplex-preview-info { + overflow-y: auto; + overscroll-behavior: contain; + background: var(--sp-bg); +} + +.simplex-preview-info-close { + display: none; +} + +.simplex-preview-info-avatar { + width: 192px; + height: 192px; + border-radius: 42px; + object-fit: cover; + display: block; + margin: 12px auto; +} + +.simplex-preview-info-name { + font-size: 34px; + font-weight: 700; + text-align: center; + margin: 0; +} + +.simplex-preview-info-descr { + font-size: 14px; + color: var(--sp-text-secondary); + text-align: center; + margin: 8px 0; + word-wrap: break-word; + overflow-wrap: break-word; +} + +.simplex-preview-info-descr a { + color: var(--sp-link); + text-decoration: none; +} + +.simplex-preview-info-descr a:hover { + text-decoration: underline; +} + +.simplex-preview-info-subscribers { + font-size: 14px; + color: var(--sp-text-secondary); + text-align: center; + margin: 0 0 16px; +} + +.simplex-preview-info .simplex-preview-join-btn { + display: block; + text-align: center; + margin-top: 20px; + width: 100%; +} + +.simplex-preview-conversion { + display: flex; + flex-direction: column; + align-items: center; + gap: 16px; +} + +.simplex-preview-divider { + width: 100%; + height: 1px; + background: var(--sp-border); + margin: 40px 0; +} + +.simplex-preview-conversion-title { + font-size: 18px; + font-weight: 600; + text-align: center; + margin: 0 0 16px; +} + +.simplex-preview-qr-toggle { + font-size: 14px; + color: var(--sp-link); + cursor: pointer; + text-decoration: none; +} + +.simplex-preview-qr-toggle:hover { + text-decoration: underline; +} + +.simplex-preview-qr-popup { + flex-direction: column; + align-items: center; + gap: 8px; +} + +.simplex-preview-qr-popup canvas { + border-radius: 8px; +} + +.simplex-preview-qr-caption { + font-size: 14px; + text-align: center; + margin: 0; +} + +.simplex-preview-badges { + display: flex; + align-items: center; + justify-content: center; + gap: 8px; + flex-wrap: wrap; + margin: 0 0 6px; +} + +.simplex-preview-badges a { + display: block; +} + +.simplex-preview-badges a img { + height: 40px; + width: auto; + display: block; +} + +.simplex-preview-copy-action { + font-size: 14px; + margin: 0; +} + +.simplex-preview-copy-action a { + color: var(--sp-link); + text-decoration: none; + cursor: pointer; +} + +.simplex-preview-copy-action a:hover { + text-decoration: underline; +} + +.simplex-preview-step-title { + font-size: 14px; + text-align: center; + margin: 0 0 -8px; +} + +.simplex-preview-open-btn { + display: inline-flex; + align-items: center; + justify-content: center; + gap: 6px; + background: var(--sp-btn); + color: var(--sp-btn-text, #fff); + border: none; + border-radius: 34px; + padding: 16px 12px 16px 18px; + height: 44px; + font-size: 16px; + line-height: 19px; + letter-spacing: 0.02em; + cursor: pointer; + text-decoration: none; + font-family: inherit; + margin-top: 3px; +} + +.simplex-preview-open-btn svg { + width: 22px; + height: 22px; + flex-shrink: 0; + margin-left: 6px; +} + + +.simplex-preview-open-btn:hover { + background: var(--sp-btn-hover); +} + +@media (min-width: 1000px) { + .simplex-preview-info { + width: 320px; + flex-shrink: 0; + border-left: 1px solid var(--sp-border); + padding: 24px; + } + .simplex-preview-header .simplex-preview-join-btn { + display: none; + } +} + +@media (max-width: 999px) { + .simplex-preview-container { + font-size: 17px; + } + .simplex-preview-main { + max-width: none; + } + .simplex-preview-info { + display: none; + position: fixed; + top: 0; + left: 0; + right: 0; + bottom: 0; + z-index: 100; + padding: 16px; + } + .simplex-preview-info.open { + display: block; + } + .simplex-preview-info-close { + display: block; + position: absolute; + top: 12px; + right: 12px; + background: none; + border: none; + font-size: 24px; + color: var(--sp-text-secondary); + cursor: pointer; + padding: 4px 8px; + line-height: 1; + } + .simplex-preview-info-content { + padding-top: 32px; + } + .simplex-preview-header { + cursor: pointer; + } +} +`; + +const DEFAULT_AVATAR = 'data:image/svg+xml,' + encodeURIComponent(''); + +const IMAGE_PLACEHOLDER_SVG = ``; + +function isDataImage(src) { + return typeof src === 'string' && src.startsWith('data:image/'); +} + +function tailSvg() { + return ''; +} + +var _logoId = 0; +var _svgParser = new DOMParser(); + +function appendSimplexLogo(el) { + var n = _logoId++; + var darkSvg = '' + + '' + + '' + + ''; + var lightSvg = '' + + '' + + '' + + ''; + el.appendChild(document.importNode(_svgParser.parseFromString(darkSvg, 'image/svg+xml').documentElement, true)); + el.appendChild(document.importNode(_svgParser.parseFromString(lightSvg, 'image/svg+xml').documentElement, true)); +} + +const FILE_ICON_SVG = ``; + +const VOICE_ICON_SVG = ``; + +const FORWARD_ICON_SVG = ``; + +const COPY_ICON_SVG = ``; + +function initChannelPreview(container) { + const relayDomains = (container.dataset.relayDomains || '').split(',').map(u => u.trim()).filter(Boolean); + const relayScheme = container.dataset.relayScheme || 'https'; + const channelId = container.dataset.channelId || ''; + const channelLink = container.dataset.channelLink || ''; + const showAppBadges = container.dataset.appDownloadButtons !== 'off'; + const colorScheme = container.dataset.colorScheme || 'light'; + + if (!relayDomains.length || !channelId) { + container.innerHTML = '

Missing configuration: data-relay-domains and data-channel-id required.

'; + return; + } + + injectStyles(); + container.classList.add('simplex-preview-container', 'simplex-scheme-' + colorScheme); + if (container.dataset.lightBackground) { + container.style.setProperty('--sp-light-bg', container.dataset.lightBackground); + } + if (container.dataset.darkBackground) { + container.style.setProperty('--sp-dark-bg', container.dataset.darkBackground); + } + container.innerHTML = '

Loading channel...

'; + + fetchPreview(relayScheme, relayDomains, channelLink, channelId).then(data => { + if (data === 'link_mismatch') { + container.innerHTML = '

All relays returned a different channel link from specified in the page.

'; + return; + } + if (!data) { + container.innerHTML = '

Failed to load channel preview.

'; + return; + } + render(container, data, channelLink, showAppBadges); + }); +} + +let stylesInjected = false; +function injectStyles() { + if (stylesInjected) return; + stylesInjected = true; + const style = document.createElement('style'); + style.textContent = STYLE; + document.head.appendChild(style); +} + +async function fetchPreview(relayScheme, relayDomains, channelLink, channelId) { + let linkMismatch = false; + for (const domain of relayDomains) { + try { + const url = `${relayScheme}://${domain}/channel/${channelId}.json`; + const resp = await fetch(url); + if (!resp.ok) continue; + const data = await resp.json(); + const relayLink = data.channel?.publicGroup?.groupLink; + if (channelLink && relayLink && channelLink !== relayLink) { + linkMismatch = true; + continue; + } + return data; + } catch(e) { + continue; + } + } + return linkMismatch ? 'link_mismatch' : null; +} + +function render(container, data, channelLink, showAppBadges) { + const { channel, members, messages } = data; + const membersMap = {}; + for (const m of members) { + membersMap[m.memberId] = m; + } + + container.innerHTML = ''; + + const main = document.createElement('div'); + main.className = 'simplex-preview-main'; + + const header = renderHeader(channel, channelLink, data.subscribers); + main.appendChild(header); + + const messagesDiv = document.createElement('div'); + messagesDiv.className = 'simplex-preview-messages'; + const welcome = data.welcomeMessage || channel.description; + var allMessages = messages; + if (welcome) { + var welcomeMsg = { + sender: null, + ts: messages.length > 0 ? messages[0].ts : new Date().toISOString(), + content: { type: 'text', text: typeof welcome === 'string' ? welcome : '' }, + formattedText: Array.isArray(welcome) ? welcome : null, + reactions: [] + }; + allMessages = [welcomeMsg].concat(messages); + } + renderMessages(messagesDiv, allMessages, membersMap, channel); + main.appendChild(messagesDiv); + + container.appendChild(main); + + const info = document.createElement('div'); + info.className = 'simplex-preview-info'; + + const closeBtn = document.createElement('button'); + closeBtn.className = 'simplex-preview-info-close'; + closeBtn.innerHTML = '✕'; + info.appendChild(closeBtn); + + const infoContent = document.createElement('div'); + infoContent.className = 'simplex-preview-info-content'; + renderInfoContent(infoContent, data, channelLink, data.subscribers, showAppBadges); + info.appendChild(infoContent); + + container.appendChild(info); + + header.addEventListener('click', (e) => { + if (e.target.closest('.simplex-preview-join-btn')) return; + if (window.innerWidth < 1000) { + info.classList.add('open'); + main.style.overflow = 'hidden'; + } + }); + + closeBtn.addEventListener('click', () => { + info.classList.remove('open'); + main.style.overflow = ''; + }); + + setupSecretToggles(container); + setTimeout(() => { main.scrollTop = main.scrollHeight; }, 0); +} + +function renderHeader(channel, channelLink, subscriberCount) { + const header = document.createElement('div'); + header.className = 'simplex-preview-header'; + + const avatar = document.createElement('img'); + avatar.className = 'simplex-preview-header-avatar'; + avatar.src = isDataImage(channel.image) ? channel.image : DEFAULT_AVATAR; + avatar.alt = channel.displayName; + header.appendChild(avatar); + + const info = document.createElement('div'); + info.className = 'simplex-preview-header-info'; + + const name = document.createElement('h1'); + name.className = 'simplex-preview-header-name'; + name.textContent = channel.displayName; + info.appendChild(name); + + if (subscriberCount > 0) { + const desc = document.createElement('p'); + desc.className = 'simplex-preview-header-description'; + desc.textContent = subscriberCount + ' subscribers'; + info.appendChild(desc); + } + + header.appendChild(info); + + if (channelLink) { + const btn = document.createElement('a'); + btn.className = 'simplex-preview-join-btn'; + btn.textContent = 'Join'; + appendSimplexLogo(btn); + btn.href = channelLink; + header.appendChild(btn); + } + + return header; +} + +function renderInfoContent(container, data, channelLink, subscriberCount, showAppBadges) { + const { channel } = data; + + const avatar = document.createElement('img'); + avatar.className = 'simplex-preview-info-avatar'; + avatar.src = isDataImage(channel.image) ? channel.image : DEFAULT_AVATAR; + avatar.alt = channel.displayName; + container.appendChild(avatar); + + const name = document.createElement('h2'); + name.className = 'simplex-preview-info-name'; + name.textContent = channel.displayName; + container.appendChild(name); + + const shortDescr = data.shortDescription || channel.shortDescr; + if (shortDescr) { + const descrDiv = document.createElement('div'); + descrDiv.className = 'simplex-preview-info-descr'; + descrDiv.innerHTML = Array.isArray(shortDescr) ? renderMarkdown(shortDescr) : escapeHtml(shortDescr); + container.appendChild(descrDiv); + } + + if (subscriberCount > 0) { + const subs = document.createElement('p'); + subs.className = 'simplex-preview-info-subscribers'; + subs.textContent = subscriberCount + ' subscribers'; + container.appendChild(subs); + } + + if (channelLink) { + if (!isMobile.any()) { + const openBtn = document.createElement('a'); + openBtn.className = 'simplex-preview-open-btn'; + openBtn.style.display = 'flex'; + openBtn.style.width = 'fit-content'; + openBtn.style.margin = '32px auto 0'; + openBtn.textContent = 'Join in SimpleX Chat'; + appendSimplexLogo(openBtn); + openBtn.href = channelLink; + container.appendChild(openBtn); + } + + const showJoinSection = !isMobile.any() || showAppBadges; + if (showJoinSection) { + const divider = document.createElement('div'); + divider.className = 'simplex-preview-divider'; + container.appendChild(divider); + + const joinTitle = document.createElement('p'); + joinTitle.className = 'simplex-preview-conversion-title'; + joinTitle.textContent = 'To join this channel'; + container.appendChild(joinTitle); + } + + const conversion = document.createElement('div'); + conversion.className = 'simplex-preview-conversion'; + if (!showJoinSection) { + conversion.style.marginTop = '28px'; + } + if (isMobile.any()) { + renderMobileConversion(conversion, channelLink, showAppBadges); + } else { + renderDesktopConversion(conversion, channelLink, showAppBadges); + } + container.appendChild(conversion); + } +} + +var BADGE_APPLE = 'App Store'; +var BADGE_GOOGLE = 'Google Play'; +var BADGE_FDROID = 'F-Droid'; +var BADGE_APK = 'APK Download'; +var BADGE_TESTFLIGHT = 'TestFlight'; + +function renderAppBadges(container) { + const title = document.createElement('p'); + title.className = 'simplex-preview-step-title'; + title.textContent = 'Install SimpleX Chat app'; + container.appendChild(title); + + const badges = document.createElement('div'); + badges.className = 'simplex-preview-badges'; + if (isMobile.Android()) { + badges.innerHTML = BADGE_GOOGLE + BADGE_FDROID + BADGE_APK; + } else if (isMobile.iOS()) { + badges.innerHTML = BADGE_APPLE + BADGE_TESTFLIGHT; + } else { + badges.innerHTML = BADGE_APPLE + BADGE_GOOGLE; + } + container.appendChild(badges); +} + +function renderDesktopConversion(container, channelLink, showAppBadges) { + if (showAppBadges) { + renderAppBadges(container); + } + + const qrToggle = document.createElement('a'); + qrToggle.className = 'simplex-preview-qr-toggle'; + qrToggle.textContent = 'Show QR code for mobile app'; + qrToggle.href = '#'; + container.appendChild(qrToggle); + + const qrPopup = document.createElement('div'); + qrPopup.className = 'simplex-preview-qr-popup'; + qrPopup.style.display = 'none'; + + const caption = document.createElement('p'); + caption.className = 'simplex-preview-qr-caption'; + caption.textContent = 'Scan from SimpleX Chat app'; + qrPopup.appendChild(caption); + + const canvas = document.createElement('canvas'); + qrPopup.appendChild(canvas); + + const qrHide = document.createElement('a'); + qrHide.className = 'simplex-preview-qr-toggle'; + qrHide.textContent = 'Hide QR code'; + qrHide.href = '#'; + qrPopup.appendChild(qrHide); + container.appendChild(qrPopup); + + function toggleQr(e) { + e.preventDefault(); + if (qrPopup.style.display === 'none') { + qrPopup.style.display = 'flex'; + qrToggle.style.display = 'none'; + if (!canvas._rendered) { + canvas._rendered = true; + try { + var cs = getComputedStyle(container); + QRCode.toCanvas(canvas, channelLink, { + errorCorrectionLevel: 'M', + color: { + dark: cs.getPropertyValue('--sp-qr-fg').trim() || '#062D56', + light: cs.getPropertyValue('--sp-qr-bg').trim() || '#ffffff' + }, + width: 400, + margin: 1 + }).then(function() { + canvas.style.width = '200px'; + canvas.style.height = '200px'; + }).catch(function() { + qrPopup.style.display = 'none'; + qrToggle.style.display = 'none'; + }); + } catch(err) { + qrPopup.style.display = 'none'; + qrToggle.style.display = 'none'; + } + } + } else { + qrPopup.style.display = 'none'; + qrToggle.style.display = ''; + } + } + qrToggle.addEventListener('click', toggleQr); + qrHide.addEventListener('click', toggleQr); + + const copyAction = document.createElement('p'); + copyAction.className = 'simplex-preview-copy-action'; + const copyLink = document.createElement('a'); + copyLink.textContent = 'copy link'; + copyLink.addEventListener('click', function() { + navigator.clipboard.writeText(channelLink).then(function() { + copyLink.textContent = 'Copied!'; + setTimeout(function() { copyLink.textContent = 'copy link'; }, 2000); + }); + }); + copyAction.appendChild(document.createTextNode('Or ')); + copyAction.appendChild(copyLink); + copyAction.appendChild(document.createTextNode(' for desktop app')); + container.appendChild(copyAction); +} + +function renderMobileConversion(container, channelLink, showAppBadges) { + if (showAppBadges) { + renderAppBadges(container); + } + + const openBtn = document.createElement('a'); + openBtn.className = 'simplex-preview-open-btn'; + openBtn.textContent = 'Join in SimpleX Chat'; + appendSimplexLogo(openBtn); + openBtn.href = channelLink; + container.appendChild(openBtn); +} + + +function setupSecretToggles(container) { + container.addEventListener('click', (e) => { + const secret = e.target.closest('.secret'); + if (secret) secret.classList.toggle('visible'); + }); +} + +function renderMessages(container, messages, membersMap, channel) { + const hasAnySender = messages.some(function(m) { return m.sender; }); + let prevMsg = null; + let prevDate = null; + + for (let i = 0; i < messages.length; i++) { + const msg = messages[i]; + const nextMsg = i < messages.length - 1 ? messages[i + 1] : null; + + const msgDate = formatDateLabel(msg.ts); + if (msgDate !== prevDate) { + const dateSep = document.createElement('div'); + dateSep.className = 'simplex-preview-date-separator'; + dateSep.textContent = msgDate; + container.appendChild(dateSep); + prevDate = msgDate; + } + + const separation = getItemSeparation(msg, prevMsg); + const nextSeparation = getItemSeparation(nextMsg, msg); + const showAvatar = hasAnySender && (!prevMsg || msg.sender !== prevMsg.sender); + const showName = showAvatar; + const showTail = nextSeparation.largeGap; + + const member = msg.sender ? membersMap[msg.sender] : null; + const senderName = member ? member.displayName : channel.displayName; + const senderImage = member ? member.image : channel.image; + + const row = document.createElement('div'); + row.className = 'simplex-preview-msg-row' + (nextSeparation.largeGap ? ' has-gap' : ''); + + if (hasAnySender) { + if (showName) { + const nameDiv = document.createElement('div'); + nameDiv.className = 'simplex-preview-msg-name'; + nameDiv.textContent = senderName; + container.appendChild(nameDiv); + } + + if (showAvatar) { + const avatarImg = document.createElement('img'); + avatarImg.className = 'simplex-preview-msg-avatar'; + avatarImg.src = isDataImage(senderImage) ? senderImage : DEFAULT_AVATAR; + avatarImg.alt = senderName; + row.appendChild(avatarImg); + } else { + const spacer = document.createElement('div'); + spacer.className = 'simplex-preview-msg-avatar-placeholder'; + row.appendChild(spacer); + } + } + + const col = document.createElement('div'); + const bubble = renderBubble(msg, member, showTail, membersMap, channel); + col.appendChild(bubble); + + if (msg.reactions && msg.reactions.length > 0) { + col.appendChild(renderReactions(msg.reactions)); + } + + row.appendChild(col); + container.appendChild(row); + prevMsg = msg; + } +} + +function renderBubble(msg, member, showTail, membersMap, channel) { + const mc = msg.content; + const mediaOnly = (mc.type === 'image' || mc.type === 'video') && !mc.text && !msg.quote && !msg.forward; + const noTailContent = (mc.type === 'image' || mc.type === 'video' || mc.type === 'voice') && !mc.text; + const hasTail = showTail && !noTailContent; + + const bubble = document.createElement('div'); + bubble.className = 'simplex-preview-bubble' + (hasTail ? ' has-tail' : '') + (mediaOnly ? ' media-only' : ''); + + if (hasTail) { + const tail = document.createElement('div'); + tail.className = 'simplex-preview-bubble-tail'; + tail.innerHTML = tailSvg(); + bubble.appendChild(tail); + } + + const inner = document.createElement('div'); + inner.className = 'simplex-preview-bubble-inner'; + + if (msg.forward) { + const fwd = document.createElement('div'); + fwd.className = 'simplex-preview-forwarded-header'; + fwd.innerHTML = FORWARD_ICON_SVG + ' Forwarded'; + inner.appendChild(fwd); + } + + if (msg.quote) { + inner.appendChild(renderQuote(msg.quote, membersMap, channel)); + } + + switch (mc.type) { + case 'image': + renderImageContent(inner, mc, msg, mediaOnly); + break; + case 'video': + renderVideoContent(inner, mc, msg, mediaOnly); + break; + case 'link': + renderLinkContent(inner, mc, msg); + break; + case 'voice': + renderVoiceContent(inner, mc, msg); + break; + case 'file': + renderFileContent(inner, mc, msg); + break; + default: + renderTextContent(inner, msg); + break; + } + + bubble.appendChild(inner); + + if (mediaOnly) { + const overlay = document.createElement('div'); + overlay.className = 'simplex-preview-meta-overlay'; + if (msg.edited) overlay.innerHTML = 'edited '; + overlay.innerHTML += formatTime(msg.ts); + bubble.appendChild(overlay); + } + + return bubble; +} + +function renderQuote(quote, membersMap, channel) { + const quoteDiv = document.createElement('div'); + quoteDiv.className = 'simplex-preview-quote'; + + const contentDiv = document.createElement('div'); + contentDiv.className = 'simplex-preview-quote-content'; + + const ref = quote.msgRef; + let senderName = ''; + if (ref) { + if (ref.memberId) { + const quotedMember = membersMap[ref.memberId]; + senderName = quotedMember ? quotedMember.displayName : ''; + } else if (ref.sent) { + senderName = channel.displayName; + } + } + if (senderName) { + const sender = document.createElement('div'); + sender.className = 'simplex-preview-quote-sender'; + sender.textContent = senderName; + contentDiv.appendChild(sender); + } + + const textDiv = document.createElement('div'); + textDiv.className = 'simplex-preview-quote-text'; + textDiv.textContent = quote.content ? (quote.content.text || '') : ''; + contentDiv.appendChild(textDiv); + + quoteDiv.appendChild(contentDiv); + + if (quote.content) { + if ((quote.content.type === 'image' || quote.content.type === 'video') && isDataImage(quote.content.image)) { + const thumb = document.createElement('img'); + thumb.className = 'simplex-preview-quote-thumb'; + thumb.src = quote.content.image; + quoteDiv.appendChild(thumb); + } else if (quote.content.type === 'file') { + const icon = document.createElement('div'); + icon.className = 'simplex-preview-quote-file-icon'; + icon.innerHTML = FILE_ICON_SVG; + quoteDiv.appendChild(icon); + } else if (quote.content.type === 'voice') { + const icon = document.createElement('div'); + icon.className = 'simplex-preview-quote-file-icon'; + icon.innerHTML = VOICE_ICON_SVG; + quoteDiv.appendChild(icon); + } + } + + return quoteDiv; +} + +function classifyImage(img) { + const w = img.naturalWidth; + const h = img.naturalHeight; + img.classList.add(w * 0.97 <= h ? 'portrait' : 'landscape'); +} + +function renderImageContent(inner, mc, msg, mediaOnly) { + if (isDataImage(mc.image)) { + const img = document.createElement('img'); + img.className = 'simplex-preview-image'; + img.src = mc.image; + img.alt = 'Image'; + img.addEventListener('load', () => classifyImage(img)); + inner.appendChild(img); + } else { + const ph = document.createElement('div'); + ph.className = 'simplex-preview-image-placeholder'; + ph.innerHTML = IMAGE_PLACEHOLDER_SVG; + inner.appendChild(ph); + } + if (mc.text) { + appendTextBlock(inner, msg); + } else if (!mediaOnly) { + appendMetaOnly(inner, msg); + } +} + +function renderVideoContent(inner, mc, msg, mediaOnly) { + if (isDataImage(mc.image)) { + const wrapper = document.createElement('div'); + wrapper.style.position = 'relative'; + const img = document.createElement('img'); + img.className = 'simplex-preview-image'; + img.src = mc.image; + img.alt = 'Video'; + img.addEventListener('load', () => classifyImage(img)); + wrapper.appendChild(img); + const dur = document.createElement('span'); + dur.style.cssText = 'position:absolute;bottom:6px;left:12px;color:#fff;font-size:12px;text-shadow:0 0 4px rgba(0,0,0,0.7),0 0 2px rgba(0,0,0,0.9);'; + dur.textContent = formatDuration(mc.duration || 0); + wrapper.appendChild(dur); + inner.appendChild(wrapper); + } else { + const ph = document.createElement('div'); + ph.className = 'simplex-preview-image-placeholder'; + ph.innerHTML = IMAGE_PLACEHOLDER_SVG; + inner.appendChild(ph); + } + if (mc.text) { + appendTextBlock(inner, msg); + } else if (!mediaOnly) { + appendMetaOnly(inner, msg); + } +} + +function renderLinkContent(bubble, mc, msg) { + if (mc.preview) { + const card = document.createElement('div'); + card.className = 'simplex-preview-link-card'; + if (isDataImage(mc.preview.image)) { + const img = document.createElement('img'); + img.className = 'simplex-preview-link-card-image'; + img.src = mc.preview.image; + img.alt = mc.preview.title || ''; + card.appendChild(img); + } + const body = document.createElement('div'); + body.className = 'simplex-preview-link-card-body'; + if (mc.preview.title) { + const title = document.createElement('div'); + title.className = 'simplex-preview-link-card-title'; + title.textContent = mc.preview.title; + body.appendChild(title); + } + if (mc.preview.description) { + const desc = document.createElement('div'); + desc.className = 'simplex-preview-link-card-description'; + desc.textContent = mc.preview.description; + body.appendChild(desc); + } + if (mc.preview.uri) { + const uri = document.createElement('div'); + uri.className = 'simplex-preview-link-card-uri'; + uri.textContent = mc.preview.uri; + body.appendChild(uri); + } + card.appendChild(body); + bubble.appendChild(card); + } + appendTextBlock(bubble, msg); +} + +function renderVoiceContent(bubble, mc, msg) { + const voiceDiv = document.createElement('div'); + voiceDiv.className = 'simplex-preview-voice'; + voiceDiv.innerHTML = VOICE_ICON_SVG + ' ' + formatDuration(mc.duration || 0) + ''; + bubble.appendChild(voiceDiv); + if (mc.text) { + appendTextBlock(bubble, msg); + } else { + appendMetaOnly(bubble, msg); + } +} + +function renderFileContent(bubble, mc, msg) { + const fileDiv = document.createElement('div'); + fileDiv.className = 'simplex-preview-file-indicator'; + fileDiv.innerHTML = FILE_ICON_SVG; + const info = document.createElement('div'); + if (msg.file) { + const nameSpan = document.createElement('div'); + nameSpan.className = 'simplex-preview-file-name'; + nameSpan.textContent = msg.file.fileName; + info.appendChild(nameSpan); + const sizeSpan = document.createElement('div'); + sizeSpan.className = 'simplex-preview-file-size'; + sizeSpan.textContent = formatFileSize(msg.file.fileSize); + info.appendChild(sizeSpan); + } + fileDiv.appendChild(info); + bubble.appendChild(fileDiv); + if (mc.text) { + appendTextBlock(bubble, msg); + } else { + appendMetaOnly(bubble, msg); + } +} + +function renderTextContent(bubble, msg) { + appendTextBlock(bubble, msg); +} + +function appendTextBlock(bubble, msg) { + const textDiv = document.createElement('div'); + textDiv.className = 'simplex-preview-text'; + const meta = renderMetaHTML(msg); + if (msg.formattedText && msg.formattedText.length > 0) { + textDiv.innerHTML = renderMarkdown(msg.formattedText) + meta; + } else { + textDiv.innerHTML = escapeHtml(msg.content.text || '') + meta; + } + bubble.appendChild(textDiv); +} + +function appendMetaOnly(bubble, msg) { + const metaDiv = document.createElement('div'); + metaDiv.style.cssText = 'padding: 0 8px 4px; text-align: right;'; + metaDiv.innerHTML = renderMetaHTML(msg); + bubble.appendChild(metaDiv); +} + +function renderMetaHTML(msg) { + let html = ''; + if (msg.edited) html += 'edited '; + html += formatTime(msg.ts); + html += ''; + return html; +} + +function renderReactions(reactions) { + const div = document.createElement('div'); + div.className = 'simplex-preview-reactions'; + for (const r of reactions) { + if (r.totalReacted < 1) continue; + const badge = document.createElement('span'); + badge.className = 'simplex-preview-reaction'; + const emoji = r.reaction && r.reaction.emoji ? r.reaction.emoji : '?'; + badge.appendChild(document.createTextNode(emoji)); + if (r.totalReacted > 1) { + const count = document.createElement('span'); + count.className = 'simplex-preview-reaction-count'; + count.textContent = r.totalReacted; + badge.appendChild(count); + } + div.appendChild(badge); + } + return div; +} + +function getItemSeparation(msg, prevMsg) { + if (!prevMsg || !msg) return { largeGap: true }; + const sameSender = msg.sender === prevMsg.sender; + if (!sameSender) return { largeGap: true }; + const t1 = new Date(prevMsg.ts).valueOf(); + const t2 = new Date(msg.ts).valueOf(); + if (Math.abs(t2 - t1) >= 60000) return { largeGap: true }; + return { largeGap: false }; +} + +function formatTime(ts) { + try { + const d = new Date(ts); + const h = d.getHours().toString().padStart(2, '0'); + const m = d.getMinutes().toString().padStart(2, '0'); + return h + ':' + m; + } catch(e) { + return ''; + } +} + +function formatDateLabel(ts) { + try { + const d = new Date(ts); + const now = new Date(); + const weekday = d.toLocaleDateString(undefined, { weekday: 'short' }); + const dayMonth = d.toLocaleDateString(undefined, { + day: 'numeric', + month: 'short', + year: d.getFullYear() !== now.getFullYear() ? 'numeric' : undefined + }); + return weekday + ', ' + dayMonth; + } catch(e) { + return ''; + } +} + +function formatDuration(secs) { + const m = Math.floor(secs / 60); + const s = secs % 60; + return m.toString().padStart(2, '0') + ':' + s.toString().padStart(2, '0'); +} + +function formatFileSize(bytes) { + if (bytes < 1024) return bytes + ' B'; + if (bytes < 1024 * 1024) return (bytes / 1024).toFixed(1) + ' KB'; + return (bytes / (1024 * 1024)).toFixed(1) + ' MB'; +} + +document.querySelectorAll('[data-simplex-channel-preview]').forEach(initChannelPreview); + +})(); diff --git a/website/src/js/directory.js b/website/src/js/directory.jsc similarity index 77% rename from website/src/js/directory.js rename to website/src/js/directory.jsc index afaac1053f..6959cd41a5 100644 --- a/website/src/js/directory.js +++ b/website/src/js/directory.jsc @@ -1,3 +1,11 @@ +#include "simplex-lib.jsc" + +const simplexDirectoryDataURL = 'https://directory.simplex.chat/data/'; + +// const simplexDirectoryDataURL = 'http://localhost:8080/directory-data/'; + +const simplexUsersGroup = 'SimpleX users group'; + (function() { if (!document.location.pathname.startsWith('/directory')) return; @@ -428,144 +436,4 @@ if (document.readyState === 'loading') { } else { initDirectory(); } - -function escapeHtml(text) { - return text - .replace(/&/g, "&") - .replace(//g, ">") - .replace(/"/g, """) - .replace(/'/g, "'") - .replace(/\n/g, "
"); -} - -function getSimplexLinkDescr(linkType) { - switch (linkType) { - case 'contact': return 'SimpleX contact address'; - case 'invitation': return 'SimpleX one-time invitation'; - case 'group': return 'SimpleX group link'; - case 'channel': return 'SimpleX channel link'; - case 'relay': return 'SimpleX relay link'; - default: return 'SimpleX link'; - } -} - -function viaHost(smpHosts) { - const first = smpHosts[0] ?? '?'; - return `via ${first}`; -} - -function isCurrentSite(uri) { - return uri.startsWith("https://simplex.chat") || uri.startsWith("https://www.simplex.chat") -} - -function targetBlank(uri) { - return isCurrentSite(uri) ? '' : ' target="_blank"' -} - -function renderMarkdown(fts) { - let html = ''; - for (const ft of fts) { - const { format, text } = ft; - if (!format) { - html += escapeHtml(text); - continue; - } - try { - switch (format.type) { - case 'bold': - html += `${escapeHtml(text)}`; - break; - case 'italic': - html += `${escapeHtml(text)}`; - break; - case 'strikeThrough': - html += `${escapeHtml(text)}`; - break; - case 'snippet': - html += `${escapeHtml(text)}`; - break; - case 'secret': - html += `${escapeHtml(text)}`; - break; - case 'small': - html += `${escapeHtml(text)}`; - break; - case 'colored': - html += `${escapeHtml(text)}`; - break; - case 'uri': - let href = text.startsWith('http://') || text.startsWith('https://') || text.startsWith('simplex:/') ? text : 'https://' + text; - html += `${escapeHtml(text)}`; - break; - case 'hyperLink': { - const { showText, linkUri } = format; - html += `${escapeHtml(showText ?? linkUri)}`; - break; - } - case 'simplexLink': { - const { showText, linkType, simplexUri, smpHosts } = format; - const linkText = showText ? escapeHtml(showText) : getSimplexLinkDescr(linkType); - html += `${linkText} (${viaHost(smpHosts)})`; - break; - } - case 'command': - html += `${escapeHtml(text)}`; - break; - case 'mention': - html += `${escapeHtml(text)}`; - break; - case 'email': - html += `${escapeHtml(text)}`; - break; - case 'phone': - html += `${escapeHtml(text)}`; - break; - case 'unknown': - html += escapeHtml(text); - break; - default: - html += escapeHtml(text); - } - } catch(e) { - console.log(e); - html += escapeHtml(text); - } - } - return html; -} })(); - -const simplexDirectoryDataURL = 'https://directory.simplex.chat/data/'; - -// const simplexDirectoryDataURL = 'http://localhost:8080/directory-data/'; - -const simplexUsersGroup = 'SimpleX users group'; - -const simplexAddressRegexp = /^simplex:\/([a-z]+)#(.+)/i; - -const simplexShortLinkTypes = ["a", "c", "g", "i", "r"]; - -function platformSimplexUri(uri) { - if (isMobile.any()) return uri; - const res = uri.match(simplexAddressRegexp); - if (!res || !Array.isArray(res) || res.length < 3) return uri; - const linkType = res[1]; - const fragment = res[2]; - if (simplexShortLinkTypes.includes(linkType)) { - const queryIndex = fragment.indexOf('?'); - if (queryIndex === -1) return uri; - const hashPart = fragment.substring(0, queryIndex); - const queryStr = fragment.substring(queryIndex + 1); - const params = new URLSearchParams(queryStr); - const host = params.get('h'); - if (!host) return uri; - params.delete('h'); - let newFragment = hashPart; - const remainingParams = params.toString(); - if (remainingParams) newFragment += '?' + remainingParams; - return `https://${host}:/${linkType}#${newFragment}`; - } else { - return `https://simplex.chat/${linkType}#${fragment}`; - } -} diff --git a/website/src/js/simplex-lib.jsc b/website/src/js/simplex-lib.jsc new file mode 100644 index 0000000000..ffec278ca2 --- /dev/null +++ b/website/src/js/simplex-lib.jsc @@ -0,0 +1,156 @@ +const isMobile = { + Android: () => navigator.userAgent.match(/Android/i), + iOS: () => navigator.userAgent.match(/iPhone|iPad|iPod/i), + any: () => navigator.userAgent.match(/Android|iPhone|iPad|iPod/i) +}; + +function escapeHtml(text) { + return text + .replace(/&/g, "&") + .replace(//g, ">") + .replace(/"/g, """) + .replace(/'/g, "'") + .replace(/\n/g, "
"); +} + +function escapeAttr(text) { + return text + .replace(/&/g, "&") + .replace(/"/g, """) + .replace(/'/g, "'") + .replace(//g, ">"); +} + +const SAFE_URI_SCHEME = /^(https?:|simplex:|mailto:|tel:)/i; + +function safeHref(uri) { + if (SAFE_URI_SCHEME.test(uri)) return escapeAttr(uri); + return escapeAttr(`javascript:void(alert('Potentially malicious link blocked:\\n'+${JSON.stringify(uri)}))`); +} + +function getSimplexLinkDescr(linkType) { + switch (linkType) { + case 'contact': return 'SimpleX contact address'; + case 'invitation': return 'SimpleX one-time invitation'; + case 'group': return 'SimpleX group link'; + case 'channel': return 'SimpleX channel link'; + case 'relay': return 'SimpleX relay link'; + default: return 'SimpleX link'; + } +} + +function viaHost(smpHosts) { + const first = smpHosts[0] ?? '?'; + return `via ${first}`; +} + +function isCurrentSite(uri) { + return uri.startsWith("https://simplex.chat") || uri.startsWith("https://www.simplex.chat") +} + +function targetBlank(uri) { + return isCurrentSite(uri) ? '' : ' target="_blank"' +} + +function renderMarkdown(fts) { + let html = ''; + for (const ft of fts) { + const { format, text } = ft; + if (!format) { + html += escapeHtml(text); + continue; + } + try { + switch (format.type) { + case 'bold': + html += `${escapeHtml(text)}`; + break; + case 'italic': + html += `${escapeHtml(text)}`; + break; + case 'strikeThrough': + html += `${escapeHtml(text)}`; + break; + case 'snippet': + html += `${escapeHtml(text)}`; + break; + case 'secret': + html += `${escapeHtml(text)}`; + break; + case 'small': + html += `${escapeHtml(text)}`; + break; + case 'colored': + html += `${escapeHtml(text)}`; + break; + case 'uri': { + let href = text.startsWith('http://') || text.startsWith('https://') || text.startsWith('simplex:/') ? text : 'https://' + text; + html += `${escapeHtml(text)}`; + break; + } + case 'hyperLink': { + const { showText, linkUri } = format; + html += `${escapeHtml(showText ?? linkUri)}`; + break; + } + case 'simplexLink': { + const { showText, linkType, simplexUri, smpHosts } = format; + const linkText = showText ? escapeHtml(showText) : getSimplexLinkDescr(linkType); + html += `${linkText} (${escapeHtml(viaHost(smpHosts))})`; + break; + } + case 'command': + html += `${escapeHtml(text)}`; + break; + case 'mention': + html += `${escapeHtml(text)}`; + break; + case 'email': + html += `${escapeHtml(text)}`; + break; + case 'phone': + html += `${escapeHtml(text)}`; + break; + case 'unknown': + html += escapeHtml(text); + break; + default: + html += escapeHtml(text); + } + } catch(e) { + console.log(e); + html += escapeHtml(text); + } + } + return html; +} + +const simplexAddressRegexp = /^simplex:\/([a-z]+)#(.+)/i; + +const simplexShortLinkTypes = ["a", "c", "g", "i", "r"]; + +function platformSimplexUri(uri) { + if (isMobile.any()) return uri; + const res = uri.match(simplexAddressRegexp); + if (!res || !Array.isArray(res) || res.length < 3) return uri; + const linkType = res[1]; + const fragment = res[2]; + if (simplexShortLinkTypes.includes(linkType)) { + const queryIndex = fragment.indexOf('?'); + if (queryIndex === -1) return uri; + const hashPart = fragment.substring(0, queryIndex); + const queryStr = fragment.substring(queryIndex + 1); + const params = new URLSearchParams(queryStr); + const host = params.get('h'); + if (!host) return uri; + params.delete('h'); + let newFragment = hashPart; + const remainingParams = params.toString(); + if (remainingParams) newFragment += '?' + remainingParams; + return `https://${host}:/${linkType}#${newFragment}`; + } else { + return `https://simplex.chat/${linkType}#${fragment}`; + } +} diff --git a/website/web.sh b/website/web.sh index 9464982a45..49888f78aa 100755 --- a/website/web.sh +++ b/website/web.sh @@ -55,6 +55,10 @@ for lang in "${langs[@]}"; do echo "done $lang copying" done +for f in src/js/*.jsc; do + [ -f "$f" ] && cpp -P -traditional-cpp "$f" "${f%.jsc}.js" +done + npm run build for lang in "${langs[@]}"; do From 2d80b2e463fb4e999550574bbeb0a6b566a2b205 Mon Sep 17 00:00:00 2001 From: sh <37271604+shumvgolove@users.noreply.github.com> Date: Wed, 17 Jun 2026 12:28:49 +0400 Subject: [PATCH 18/81] fix(webrtc): stop preview tracks when abandoning pre-connect call (#7074) --- packages/simplex-chat-webrtc/src/call.ts | 13 ++++++++++++- 1 file changed, 12 insertions(+), 1 deletion(-) diff --git a/packages/simplex-chat-webrtc/src/call.ts b/packages/simplex-chat-webrtc/src/call.ts index 5f3d2bf332..8441560013 100644 --- a/packages/simplex-chat-webrtc/src/call.ts +++ b/packages/simplex-chat-webrtc/src/call.ts @@ -583,6 +583,8 @@ const processCommand = (function () { case "capabilities": console.log("starting outgoing call - capabilities") if (activeCall) endCall() + // Stop a preview stream from an earlier pre-connect outgoing call being replaced (activeCall may be null here) + stopNotConnectedCall() let localStream: MediaStream | null = null try { @@ -623,7 +625,8 @@ const processCommand = (function () { if (activeCall) endCall() // It can be already defined on Android when switching calls (if the previous call was outgoing) - notConnectedCall = undefined + // Stop its preview tracks before clearing, otherwise camera/mic stay live + stopNotConnectedCall() inactiveCallMediaSources.mic = true inactiveCallMediaSources.camera = command.media == CallMediaType.Video inactiveCallMediaSourcesChanged(inactiveCallMediaSources) @@ -1444,6 +1447,14 @@ const processCommand = (function () { } } + // Call on any path that abandons notConnectedCall, otherwise its preview camera/mic tracks stay live. + function stopNotConnectedCall() { + if (notConnectedCall) { + notConnectedCall.localStream.getTracks().forEach((track) => track.stop()) + notConnectedCall = undefined + } + } + function resetVideoElements() { const videos = getVideoElements() if (!videos) return From 2d23c2f3921882e1746322710642e831bba9af4c Mon Sep 17 00:00:00 2001 From: SimpleX Chat Date: Wed, 17 Jun 2026 11:28:14 +0000 Subject: [PATCH 19/81] 6.5.5: android 355, desktop 146, ios 335 --- apps/ios/SimpleX.xcodeproj/project.pbxproj | 56 +++++++++---------- apps/multiplatform/gradle.properties | 8 +-- .../types/typescript/package.json | 2 +- packages/simplex-chat-nodejs/package.json | 4 +- .../simplex-chat-nodejs/src/download-libs.js | 2 +- .../src/simplex_chat/_version.py | 4 +- .../flatpak/chat.simplex.simplex.metainfo.xml | 22 ++++++++ 7 files changed, 60 insertions(+), 38 deletions(-) diff --git a/apps/ios/SimpleX.xcodeproj/project.pbxproj b/apps/ios/SimpleX.xcodeproj/project.pbxproj index e2915963e4..0739e9522d 100644 --- a/apps/ios/SimpleX.xcodeproj/project.pbxproj +++ b/apps/ios/SimpleX.xcodeproj/project.pbxproj @@ -184,8 +184,8 @@ 64C3B0212A0D359700E19930 /* CustomTimePicker.swift in Sources */ = {isa = PBXBuildFile; fileRef = 64C3B0202A0D359700E19930 /* CustomTimePicker.swift */; }; 64C8299D2D54AEEE006B9E89 /* libgmp.a in Frameworks */ = {isa = PBXBuildFile; fileRef = 64C829982D54AEED006B9E89 /* libgmp.a */; }; 64C8299E2D54AEEE006B9E89 /* libffi.a in Frameworks */ = {isa = PBXBuildFile; fileRef = 64C829992D54AEEE006B9E89 /* libffi.a */; }; - 64C8299F2D54AEEE006B9E89 /* libHSsimplex-chat-6.5.4.1-3s3jwLbCMWj9Jo7I40UgTa-ghc9.6.3.a in Frameworks */ = {isa = PBXBuildFile; fileRef = 64C8299A2D54AEEE006B9E89 /* libHSsimplex-chat-6.5.4.1-3s3jwLbCMWj9Jo7I40UgTa-ghc9.6.3.a */; }; - 64C829A02D54AEEE006B9E89 /* libHSsimplex-chat-6.5.4.1-3s3jwLbCMWj9Jo7I40UgTa.a in Frameworks */ = {isa = PBXBuildFile; fileRef = 64C8299B2D54AEEE006B9E89 /* libHSsimplex-chat-6.5.4.1-3s3jwLbCMWj9Jo7I40UgTa.a */; }; + 64C8299F2D54AEEE006B9E89 /* libHSsimplex-chat-6.5.5.0-57WEoB2fiWaFgCB1XksYmP-ghc9.6.3.a in Frameworks */ = {isa = PBXBuildFile; fileRef = 64C8299A2D54AEEE006B9E89 /* libHSsimplex-chat-6.5.5.0-57WEoB2fiWaFgCB1XksYmP-ghc9.6.3.a */; }; + 64C829A02D54AEEE006B9E89 /* libHSsimplex-chat-6.5.5.0-57WEoB2fiWaFgCB1XksYmP.a in Frameworks */ = {isa = PBXBuildFile; fileRef = 64C8299B2D54AEEE006B9E89 /* libHSsimplex-chat-6.5.5.0-57WEoB2fiWaFgCB1XksYmP.a */; }; 64C829A12D54AEEE006B9E89 /* libgmpxx.a in Frameworks */ = {isa = PBXBuildFile; fileRef = 64C8299C2D54AEEE006B9E89 /* libgmpxx.a */; }; 64D0C2C029F9688300B38D5F /* UserAddressView.swift in Sources */ = {isa = PBXBuildFile; fileRef = 64D0C2BF29F9688300B38D5F /* UserAddressView.swift */; }; 64D0C2C229FA57AB00B38D5F /* UserAddressLearnMore.swift in Sources */ = {isa = PBXBuildFile; fileRef = 64D0C2C129FA57AB00B38D5F /* UserAddressLearnMore.swift */; }; @@ -563,8 +563,8 @@ 64C3B0202A0D359700E19930 /* CustomTimePicker.swift */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.swift; path = CustomTimePicker.swift; sourceTree = ""; }; 64C829982D54AEED006B9E89 /* libgmp.a */ = {isa = PBXFileReference; lastKnownFileType = archive.ar; path = libgmp.a; sourceTree = ""; }; 64C829992D54AEEE006B9E89 /* libffi.a */ = {isa = PBXFileReference; lastKnownFileType = archive.ar; path = libffi.a; sourceTree = ""; }; - 64C8299A2D54AEEE006B9E89 /* libHSsimplex-chat-6.5.4.1-3s3jwLbCMWj9Jo7I40UgTa-ghc9.6.3.a */ = {isa = PBXFileReference; lastKnownFileType = archive.ar; path = "libHSsimplex-chat-6.5.4.1-3s3jwLbCMWj9Jo7I40UgTa-ghc9.6.3.a"; sourceTree = ""; }; - 64C8299B2D54AEEE006B9E89 /* libHSsimplex-chat-6.5.4.1-3s3jwLbCMWj9Jo7I40UgTa.a */ = {isa = PBXFileReference; lastKnownFileType = archive.ar; path = "libHSsimplex-chat-6.5.4.1-3s3jwLbCMWj9Jo7I40UgTa.a"; sourceTree = ""; }; + 64C8299A2D54AEEE006B9E89 /* libHSsimplex-chat-6.5.5.0-57WEoB2fiWaFgCB1XksYmP-ghc9.6.3.a */ = {isa = PBXFileReference; lastKnownFileType = archive.ar; path = "libHSsimplex-chat-6.5.5.0-57WEoB2fiWaFgCB1XksYmP-ghc9.6.3.a"; sourceTree = ""; }; + 64C8299B2D54AEEE006B9E89 /* libHSsimplex-chat-6.5.5.0-57WEoB2fiWaFgCB1XksYmP.a */ = {isa = PBXFileReference; lastKnownFileType = archive.ar; path = "libHSsimplex-chat-6.5.5.0-57WEoB2fiWaFgCB1XksYmP.a"; sourceTree = ""; }; 64C8299C2D54AEEE006B9E89 /* libgmpxx.a */ = {isa = PBXFileReference; lastKnownFileType = archive.ar; path = libgmpxx.a; sourceTree = ""; }; 64D0C2BF29F9688300B38D5F /* UserAddressView.swift */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.swift; path = UserAddressView.swift; sourceTree = ""; }; 64D0C2C129FA57AB00B38D5F /* UserAddressLearnMore.swift */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.swift; path = UserAddressLearnMore.swift; sourceTree = ""; }; @@ -733,8 +733,8 @@ 64C8299D2D54AEEE006B9E89 /* libgmp.a in Frameworks */, 64C8299E2D54AEEE006B9E89 /* libffi.a in Frameworks */, 64C829A12D54AEEE006B9E89 /* libgmpxx.a in Frameworks */, - 64C8299F2D54AEEE006B9E89 /* libHSsimplex-chat-6.5.4.1-3s3jwLbCMWj9Jo7I40UgTa-ghc9.6.3.a in Frameworks */, - 64C829A02D54AEEE006B9E89 /* libHSsimplex-chat-6.5.4.1-3s3jwLbCMWj9Jo7I40UgTa.a in Frameworks */, + 64C8299F2D54AEEE006B9E89 /* libHSsimplex-chat-6.5.5.0-57WEoB2fiWaFgCB1XksYmP-ghc9.6.3.a in Frameworks */, + 64C829A02D54AEEE006B9E89 /* libHSsimplex-chat-6.5.5.0-57WEoB2fiWaFgCB1XksYmP.a in Frameworks */, CE38A29C2C3FCD72005ED185 /* SwiftyGif in Frameworks */, ); runOnlyForDeploymentPostprocessing = 0; @@ -820,8 +820,8 @@ 64C829992D54AEEE006B9E89 /* libffi.a */, 64C829982D54AEED006B9E89 /* libgmp.a */, 64C8299C2D54AEEE006B9E89 /* libgmpxx.a */, - 64C8299A2D54AEEE006B9E89 /* libHSsimplex-chat-6.5.4.1-3s3jwLbCMWj9Jo7I40UgTa-ghc9.6.3.a */, - 64C8299B2D54AEEE006B9E89 /* libHSsimplex-chat-6.5.4.1-3s3jwLbCMWj9Jo7I40UgTa.a */, + 64C8299A2D54AEEE006B9E89 /* libHSsimplex-chat-6.5.5.0-57WEoB2fiWaFgCB1XksYmP-ghc9.6.3.a */, + 64C8299B2D54AEEE006B9E89 /* libHSsimplex-chat-6.5.5.0-57WEoB2fiWaFgCB1XksYmP.a */, ); path = Libraries; sourceTree = ""; @@ -2077,7 +2077,7 @@ CLANG_TIDY_MISC_REDUNDANT_EXPRESSION = YES; CODE_SIGN_ENTITLEMENTS = "SimpleX (iOS).entitlements"; CODE_SIGN_STYLE = Automatic; - CURRENT_PROJECT_VERSION = 334; + CURRENT_PROJECT_VERSION = 335; DEAD_CODE_STRIPPING = YES; DEVELOPMENT_TEAM = 5NN7GUYB6T; ENABLE_BITCODE = NO; @@ -2102,7 +2102,7 @@ "@executable_path/Frameworks", ); LLVM_LTO = YES_THIN; - MARKETING_VERSION = 6.5.4; + MARKETING_VERSION = 6.5.5; OTHER_LDFLAGS = "-Wl,-stack_size,0x1000000"; PRODUCT_BUNDLE_IDENTIFIER = chat.simplex.app; PRODUCT_NAME = SimpleX; @@ -2127,7 +2127,7 @@ CLANG_TIDY_MISC_REDUNDANT_EXPRESSION = YES; CODE_SIGN_ENTITLEMENTS = "SimpleX (iOS).entitlements"; CODE_SIGN_STYLE = Automatic; - CURRENT_PROJECT_VERSION = 334; + CURRENT_PROJECT_VERSION = 335; DEAD_CODE_STRIPPING = YES; DEVELOPMENT_TEAM = 5NN7GUYB6T; ENABLE_BITCODE = NO; @@ -2152,7 +2152,7 @@ "@executable_path/Frameworks", ); LLVM_LTO = YES; - MARKETING_VERSION = 6.5.4; + MARKETING_VERSION = 6.5.5; OTHER_LDFLAGS = "-Wl,-stack_size,0x1000000"; PRODUCT_BUNDLE_IDENTIFIER = chat.simplex.app; PRODUCT_NAME = SimpleX; @@ -2169,11 +2169,11 @@ buildSettings = { ALWAYS_EMBED_SWIFT_STANDARD_LIBRARIES = YES; CODE_SIGN_STYLE = Automatic; - CURRENT_PROJECT_VERSION = 334; + CURRENT_PROJECT_VERSION = 335; DEVELOPMENT_TEAM = 5NN7GUYB6T; GENERATE_INFOPLIST_FILE = YES; IPHONEOS_DEPLOYMENT_TARGET = 15.0; - MARKETING_VERSION = 6.5.4; + MARKETING_VERSION = 6.5.5; PRODUCT_BUNDLE_IDENTIFIER = "chat.simplex.Tests-iOS"; PRODUCT_NAME = "$(TARGET_NAME)"; SDKROOT = iphoneos; @@ -2189,11 +2189,11 @@ buildSettings = { ALWAYS_EMBED_SWIFT_STANDARD_LIBRARIES = YES; CODE_SIGN_STYLE = Automatic; - CURRENT_PROJECT_VERSION = 334; + CURRENT_PROJECT_VERSION = 335; DEVELOPMENT_TEAM = 5NN7GUYB6T; GENERATE_INFOPLIST_FILE = YES; IPHONEOS_DEPLOYMENT_TARGET = 15.0; - MARKETING_VERSION = 6.5.4; + MARKETING_VERSION = 6.5.5; PRODUCT_BUNDLE_IDENTIFIER = "chat.simplex.Tests-iOS"; PRODUCT_NAME = "$(TARGET_NAME)"; SDKROOT = iphoneos; @@ -2214,7 +2214,7 @@ CODE_SIGN_ENTITLEMENTS = "SimpleX NSE/SimpleX NSE.entitlements"; CODE_SIGN_IDENTITY = "Apple Development"; CODE_SIGN_STYLE = Automatic; - CURRENT_PROJECT_VERSION = 334; + CURRENT_PROJECT_VERSION = 335; DEVELOPMENT_TEAM = 5NN7GUYB6T; ENABLE_BITCODE = NO; GCC_OPTIMIZATION_LEVEL = s; @@ -2229,7 +2229,7 @@ "@executable_path/../../Frameworks", ); LLVM_LTO = YES; - MARKETING_VERSION = 6.5.4; + MARKETING_VERSION = 6.5.5; PRODUCT_BUNDLE_IDENTIFIER = "chat.simplex.app.SimpleX-NSE"; PRODUCT_NAME = "$(TARGET_NAME)"; PROVISIONING_PROFILE_SPECIFIER = ""; @@ -2251,7 +2251,7 @@ CODE_SIGN_ENTITLEMENTS = "SimpleX NSE/SimpleX NSE.entitlements"; CODE_SIGN_IDENTITY = "Apple Development"; CODE_SIGN_STYLE = Automatic; - CURRENT_PROJECT_VERSION = 334; + CURRENT_PROJECT_VERSION = 335; DEVELOPMENT_TEAM = 5NN7GUYB6T; ENABLE_BITCODE = NO; ENABLE_CODE_COVERAGE = NO; @@ -2266,7 +2266,7 @@ "@executable_path/../../Frameworks", ); LLVM_LTO = YES; - MARKETING_VERSION = 6.5.4; + MARKETING_VERSION = 6.5.5; PRODUCT_BUNDLE_IDENTIFIER = "chat.simplex.app.SimpleX-NSE"; PRODUCT_NAME = "$(TARGET_NAME)"; PROVISIONING_PROFILE_SPECIFIER = ""; @@ -2288,7 +2288,7 @@ CLANG_TIDY_BUGPRONE_REDUNDANT_BRANCH_CONDITION = YES; CLANG_TIDY_MISC_REDUNDANT_EXPRESSION = YES; CODE_SIGN_STYLE = Automatic; - CURRENT_PROJECT_VERSION = 334; + CURRENT_PROJECT_VERSION = 335; DEFINES_MODULE = YES; DEVELOPMENT_TEAM = 5NN7GUYB6T; DYLIB_COMPATIBILITY_VERSION = 1; @@ -2314,7 +2314,7 @@ "$(PROJECT_DIR)/Libraries/sim", ); LLVM_LTO = YES; - MARKETING_VERSION = 6.5.4; + MARKETING_VERSION = 6.5.5; PRODUCT_BUNDLE_IDENTIFIER = chat.simplex.SimpleXChat; PRODUCT_NAME = "$(TARGET_NAME:c99extidentifier)"; SDKROOT = iphoneos; @@ -2339,7 +2339,7 @@ CLANG_TIDY_BUGPRONE_REDUNDANT_BRANCH_CONDITION = YES; CLANG_TIDY_MISC_REDUNDANT_EXPRESSION = YES; CODE_SIGN_STYLE = Automatic; - CURRENT_PROJECT_VERSION = 334; + CURRENT_PROJECT_VERSION = 335; DEFINES_MODULE = YES; DEVELOPMENT_TEAM = 5NN7GUYB6T; DYLIB_COMPATIBILITY_VERSION = 1; @@ -2366,7 +2366,7 @@ "$(PROJECT_DIR)/Libraries/sim", ); LLVM_LTO = YES; - MARKETING_VERSION = 6.5.4; + MARKETING_VERSION = 6.5.5; PRODUCT_BUNDLE_IDENTIFIER = chat.simplex.SimpleXChat; PRODUCT_NAME = "$(TARGET_NAME:c99extidentifier)"; SDKROOT = iphoneos; @@ -2393,7 +2393,7 @@ CLANG_CXX_LANGUAGE_STANDARD = "gnu++20"; CODE_SIGN_ENTITLEMENTS = "SimpleX SE/SimpleX SE.entitlements"; CODE_SIGN_STYLE = Automatic; - CURRENT_PROJECT_VERSION = 334; + CURRENT_PROJECT_VERSION = 335; DEVELOPMENT_TEAM = 5NN7GUYB6T; ENABLE_USER_SCRIPT_SANDBOXING = YES; GCC_C_LANGUAGE_STANDARD = gnu17; @@ -2408,7 +2408,7 @@ "@executable_path/../../Frameworks", ); LOCALIZATION_PREFERS_STRING_CATALOGS = YES; - MARKETING_VERSION = 6.5.4; + MARKETING_VERSION = 6.5.5; PRODUCT_BUNDLE_IDENTIFIER = "chat.simplex.app.SimpleX-SE"; PRODUCT_NAME = "$(TARGET_NAME)"; SDKROOT = iphoneos; @@ -2427,7 +2427,7 @@ CLANG_CXX_LANGUAGE_STANDARD = "gnu++20"; CODE_SIGN_ENTITLEMENTS = "SimpleX SE/SimpleX SE.entitlements"; CODE_SIGN_STYLE = Automatic; - CURRENT_PROJECT_VERSION = 334; + CURRENT_PROJECT_VERSION = 335; DEVELOPMENT_TEAM = 5NN7GUYB6T; ENABLE_USER_SCRIPT_SANDBOXING = YES; GCC_C_LANGUAGE_STANDARD = gnu17; @@ -2442,7 +2442,7 @@ "@executable_path/../../Frameworks", ); LOCALIZATION_PREFERS_STRING_CATALOGS = YES; - MARKETING_VERSION = 6.5.4; + MARKETING_VERSION = 6.5.5; PRODUCT_BUNDLE_IDENTIFIER = "chat.simplex.app.SimpleX-SE"; PRODUCT_NAME = "$(TARGET_NAME)"; SDKROOT = iphoneos; diff --git a/apps/multiplatform/gradle.properties b/apps/multiplatform/gradle.properties index a2b63a5810..61c744bf86 100644 --- a/apps/multiplatform/gradle.properties +++ b/apps/multiplatform/gradle.properties @@ -24,13 +24,13 @@ android.nonTransitiveRClass=true kotlin.mpp.androidSourceSetLayoutVersion=2 kotlin.jvm.target=11 -android.version_name=6.5.4 -android.version_code=353 +android.version_name=6.5.5 +android.version_code=355 android.bundle=false -desktop.version_name=6.5.4 -desktop.version_code=145 +desktop.version_name=6.5.5 +desktop.version_code=146 kotlin.version=2.1.20 gradle.plugin.version=8.7.0 diff --git a/packages/simplex-chat-client/types/typescript/package.json b/packages/simplex-chat-client/types/typescript/package.json index ad7ab04462..756e181307 100644 --- a/packages/simplex-chat-client/types/typescript/package.json +++ b/packages/simplex-chat-client/types/typescript/package.json @@ -1,6 +1,6 @@ { "name": "@simplex-chat/types", - "version": "0.8.0", + "version": "0.9.0", "description": "TypeScript types for SimpleX Chat bot libraries", "main": "dist/index.js", "types": "dist/index.d.ts", diff --git a/packages/simplex-chat-nodejs/package.json b/packages/simplex-chat-nodejs/package.json index 0dff1f7f1d..40ef106103 100644 --- a/packages/simplex-chat-nodejs/package.json +++ b/packages/simplex-chat-nodejs/package.json @@ -1,6 +1,6 @@ { "name": "simplex-chat", - "version": "6.5.4", + "version": "6.5.5", "main": "dist/index.js", "types": "dist/index.d.ts", "files": [ @@ -24,7 +24,7 @@ "docs": "typedoc" }, "dependencies": { - "@simplex-chat/types": "^0.8.0", + "@simplex-chat/types": "^0.9.0", "extract-zip": "^2.0.1", "fast-deep-equal": "^3.1.3", "node-addon-api": "^8.5.0" diff --git a/packages/simplex-chat-nodejs/src/download-libs.js b/packages/simplex-chat-nodejs/src/download-libs.js index 72761a1ac5..4fad0f45a9 100644 --- a/packages/simplex-chat-nodejs/src/download-libs.js +++ b/packages/simplex-chat-nodejs/src/download-libs.js @@ -4,7 +4,7 @@ const path = require('path'); const extract = require('extract-zip'); const GITHUB_REPO = 'simplex-chat/simplex-chat-libs'; -const RELEASE_TAG = 'v6.5.4'; +const RELEASE_TAG = 'v6.5.5'; const BACKEND = (process.env.SIMPLEX_BACKEND || process.env.npm_config_simplex_backend || 'sqlite').toLowerCase(); if (BACKEND !== 'sqlite' && BACKEND !== 'postgres') { diff --git a/packages/simplex-chat-python/src/simplex_chat/_version.py b/packages/simplex-chat-python/src/simplex_chat/_version.py index 2ae4ce941e..77acd0e8b3 100644 --- a/packages/simplex-chat-python/src/simplex_chat/_version.py +++ b/packages/simplex-chat-python/src/simplex_chat/_version.py @@ -5,5 +5,5 @@ Bump both together for normal releases. For wrapper-only fixes use a PEP 440 post-release: __version__ = "6.5.2.post1", LIBS_VERSION unchanged. """ -__version__ = "6.5.4" # PEP 440 — read by hatchling for wheel metadata -LIBS_VERSION = "6.5.4" # simplex-chat-libs release tag (no 'v' prefix) +__version__ = "6.5.5" # PEP 440 — read by hatchling for wheel metadata +LIBS_VERSION = "6.5.5" # simplex-chat-libs release tag (no 'v' prefix) diff --git a/scripts/flatpak/chat.simplex.simplex.metainfo.xml b/scripts/flatpak/chat.simplex.simplex.metainfo.xml index 3f35d652fe..0d93315435 100644 --- a/scripts/flatpak/chat.simplex.simplex.metainfo.xml +++ b/scripts/flatpak/chat.simplex.simplex.metainfo.xml @@ -38,6 +38,28 @@ + + https://simplex.chat/blog/20260430-simplex-channels-v6-5-consortium-crowdfunding-freedom-of-speech.html + +

New in v6.5.5:

+

Public channels - speak freely!

+
    +
  • Reliability: many relays per channel.
    • +
  • Ownership: you can run your own relays.
    • +
  • Security: owners hold channel keys.
    • +
  • Privacy: for owners and subscribers.
    • +
+

Easier to invite your friends: we made connecting simpler for new users.

+

Safe web links:

+
    +
  • opt-in to send link previews.
    • +
  • use SOCKS proxy for previews (if enabled).
    • +
  • prevent hyperlink phishing.
    • +
  • remove link tracking.
    • +
+

Non-profit governance: to make SimpleX Network last.

+ + https://simplex.chat/blog/20260430-simplex-channels-v6-5-consortium-crowdfunding-freedom-of-speech.html From bcd980127d73f45ad87cd9745d14d6ef7468858f Mon Sep 17 00:00:00 2001 From: spaced4ndy <8711996+spaced4ndy@users.noreply.github.com> Date: Wed, 17 Jun 2026 14:11:04 +0000 Subject: [PATCH 20/81] docs: allow sign content messages in channels plan (#7049) --- plans/2026-06-04-channel-message-signing.md | 233 ++++++++++++++++++++ 1 file changed, 233 insertions(+) create mode 100644 plans/2026-06-04-channel-message-signing.md diff --git a/plans/2026-06-04-channel-message-signing.md b/plans/2026-06-04-channel-message-signing.md new file mode 100644 index 0000000000..f3828018b9 --- /dev/null +++ b/plans/2026-06-04-channel-message-signing.md @@ -0,0 +1,233 @@ +# Plan: optional signing of channel content messages (`XMsgNew` / `XMsgUpdate`) + +## Goal / user problem + +In relay-based channels, content (`XMsgNew`) is forwarded by relays and is **not** signed today (only group-state events are — `requiresSignature`, `Protocol.hs:1251`), so a relay can forge or alter content attributed to a member. This feature lets a member *optionally* attach their member signature, so recipients holding the (signed) roster can verify authorship + integrity. + +Decisions: +- **UI: both** — device-stored default ("sign my channel messages", off) + per-send long-press override (mirrors custom disappearing-message TTL). +- **Default: off**, with an in-UI tradeoff explanation (signing = non-repudiable, transferable proof of authorship). +- **Recipient indicator: in scope** (iOS + Kotlin) — signing is useless if invisible to readers. +- **Event scope: `XMsgNew` + `XMsgUpdate` only**; edits reuse the original's setting. `XMsgReact`/`XMsgDel` stay unsigned in v1. + +## Prerequisites / sequencing + +Lands after #7017 (signed roster) and #7048 (roster over inline files; `GRMember` role). Neither merged yet (branch `f/allow-sign-new-msg`; `git log` tops at #7043). Dependency is specific: *verification* needs the sender's member public key, distributed via the roster; without it a signed message degrades to `MSSSignedNoKey` rather than `MSSVerified`. Integration tests must use the roster/channel setup from those PRs. + +**Line numbers are pre-rebase** (grounded against #7043); #7017/#7048 shift every anchor, so **re-locate by symbol**. The dependency PRs add no 6th `updateGroupChatItem` caller, but other branches are queued (`f/channel-comments`, `f/public-groups-members-in-roster`) — hence the caller re-check gate below. + +## What already exists (so the change stays small) + +Wire format, signing, verification, DB persistence, and CLI display are present and reused unchanged: +- **Send signing:** `groupMsgSigning` (`Internal.hs:1963`) → `createSndMessages` threads `Maybe MsgSigning` (`:1950`) → `createNewSndMessage` Ed25519-signs `encodeChatBinding CBGroup (publicGroupId, memberId) <> msgBody`, storing `SignedMsg` in `SndMessage.signedMsg_` (`Store/Messages.hs:234`; `Messages.hs:1156`). +- **Wire:** `batchMessages` prepends the signature via `encodeBatchElement` (`Batch.hs:46,65`); relay groups always batch (`memberSendAction` → only `MSASendBatched` under `useRelays'`, `Internal.hs:2222,2228`). +- **Receive verify:** `withVerifiedMsg` (`Subscriber.hs:3469`) runs for all group messages (`:1004`, forwarded `:3431`); `XMsgNew_`/`XMsgUpdate_` ∉ `requiresSignature` ⇒ `signatureOptional` (`:3491`), so signed → `MSSVerified`/`MSSSignedNoKey`, unsigned → accepted. **No protocol-version bump.** +- **Sent-item persistence:** `createNewSndChatItem` sets `msgSigned = MSSVerified <$ signedMsg_` (`Store/Messages.hs:550`) — own item auto-marked, readable by the edit path. +- **Received-item persistence:** `createNewRcvChatItem` records `RcvMessage.msgSigned` (`Store/Messages.hs:565,567`); `CIMeta.msgSigned :: Maybe MsgSigStatus` (`Messages.hs:520`). +- **CLI:** `sigStatusStr` (`View.hs:388`) appends `" (signed)"` / `" (signed, no key to verify)"`. + +Missing: (1) the *decision* to sign content (`groupMsgSigning` returns `Nothing` for content today); (2) per-send plumbing from the API; (3) reuse on edit; (4) the §7 stale-badge fix; (5) the §5 anonymity gate (HIGH); (6) the apps. + +## Threat model + +Actors: member (sender), recipients, and **chat relays** that forward content + roster. Relays are untrusted for content authenticity. + +- **Forgery of member content.** Signing closes it for signed messages: relay lacks the Ed25519 key; signature binds `(publicGroupId, memberId, body)` — no forgery, cross-bind, or alteration. +- **Downgrade / stripping (residual, by design).** Optional signing lets a relay strip a signature and deliver unsigned. Absence of a badge is **not** proof of forgery — only *presence* of a verified badge is a guarantee. A future "required signing" group setting would close it; out of scope. +- **Stale-badge spoof on edits (fixed — §7).** An in-place edit must not keep a `verified` badge over content from an unsigned, relay-forged `XMsgUpdate`. +- **Publish-as-channel de-anonymization (structurally prevented — §5).** Channels allow "publish as the channel" (`showGroupAsSender`/`asGroup`): subscribers see a post as *from the channel*, not the specific owner (Design Objective 6, `docs/protocol/channels-overview.md:214`); today a relay revealing the owner is only a *deniable* leak (`channels-overview.md:~237`). `groupMsgSigning` (`Internal.hs:1963-1967`) is blind to `showGroupAsSender`, so it would sign with binding `(publicGroupId, ownerMemberId)`, broadcast on the wire even for `FwdChannel` (`encodeFwdElement` → `encodeBatchElement signedMsg_`, `Batch.hs:108`). A malicious relay sets the live-forward `fwdSender` freely (it is derived from stored `sentAsGroup`, `Store/Delivery.hs:158`), so every subscriber verifies it as `MSSVerified` — turning the deniable leak into **non-repudiable proof** of which owner authored an intentionally anonymous post; the device-default toggle would trigger this silently. For an anonymity property this must be structurally impossible: signing is never applied to as-channel content (§5), the app option is hidden for as-channel sends (§C), and a defense-in-depth guard keeps `encodeFwdElement` signature-free for `FwdChannel` (Edge cases). (`processContentItem:1302` is the *history* path and rebuilds content unsigned — not the vector.) +- **Non-repudiation (tradeoff, by design).** A verified signature is transferable proof of authorship — a deniability loss; hence opt-in/off-by-default with UI explanation. For *as-channel* posts the loss is unacceptable, not a tradeoff — hence the §5 exclusion. +- **What "verified" means.** Signed input is `encodeChatBinding CBGroup (publicGroupId, memberId) <> msgBody`, with `msgBody` embedding `sharedMsgId`, `MsgScope`, content (`Store/Messages.hs:242`). It proves **authorship + integrity + group/member/scope/message binding** — and nothing else: not `fwdBrokerTs` (relay-controlled, `Protocol.hs:382-387`), ordering, or completeness. Surface this in UI/help. +- **Signed content is still relay-suppressible.** `XMsgDel_` ∉ `requiresSignature` (`Protocol.hs:1252-1262`), so an unsigned relay-forged owner-attributed delete is accepted (role-based check vs. the relay-chosen author, `Subscriber.hs:~2269`). Pre-existing, within the relay's drop power; bounds signing's value (proves *what was said*, not that all is delivered). +- **Replay.** Binding covers `sharedMsgId` + `MsgScope`; cross-scope/group replay is blocked, same-message replay is a dedup duplicate. +- **Bad-signature spam (fail-closed, pre-existing).** Failed verification drops content with an `RGEMsgBadSignature` item per occurrence (`Subscriber.hs:3473-3475,3483`); a tampering relay can spam these. Inherited from state-event behavior. + +## Core changes (Haskell) + +### 1. Signable-content predicate + +`Protocol.hs`, next to `requiresSignature` (`:1251`): +```haskell +-- | Content events whose authorship a member may optionally prove by signing. +signableContent :: CMEventTag e -> Bool +signableContent = \case + XMsgNew_ -> True + XMsgUpdate_ -> True + _ -> False +``` + +### 2. Signing decision carries the opt-in + +Named type near `MsgSigning` (`Protocol.hs:426`) — not a bare `Bool`: +```haskell +-- | Whether opt-in content signing applies to this group send. +-- Independent of mandatory state-event signing (requiresSignature), +-- which always applies in relay groups regardless of this value. +data ContentSig = SignContent | DontSignContent + deriving (Eq, Show) +``` +Extend `groupMsgSigning` (`Internal.hs:1963`): +```haskell +groupMsgSigning :: ContentSig -> GroupInfo -> ChatMsgEvent e -> Maybe MsgSigning +groupMsgSigning csig gInfo@GroupInfo {membership = GroupMember {memberId}, groupKeys = Just GroupKeys {publicGroupId, memberPrivKey}} evt + | useRelays' gInfo && shouldSign = + Just $ MsgSigning CBGroup (smpEncode (publicGroupId, memberId)) KRMember memberPrivKey + where + tag = toCMEventTag evt + shouldSign = requiresSignature tag || (csig == SignContent && signableContent tag) +groupMsgSigning _ _ _ = Nothing +``` +- `useRelays'`/`groupKeys = Just` guards unchanged: in non-relay groups or keyless members, `SignContent` is a no-op (`Nothing`). +- Mandatory state-event signing unaffected (`requiresSignature` branch preserved). + +### 3. Thread `ContentSig` through the send functions + +`groupMsgSigning` is called only in `sendGroupMessages_` (`Internal.hs:2134`) and `sendGroupMemberMessages` (`:1972`). Add a `ContentSig` param to `sendGroupMessages_` (`:2132`, used in `idsEvts`), `sendGroupMessages` (`:2100`, pass-through), `sendGroupMessage` (`:2088`, pass-through). Keep `sendGroupMessage'` (`:2094`) and `sendGroupMemberMessages` (`:1969`) unchanged by hardcoding `DontSignContent` internally. + +Behavior-preserving (all existing callers pass `DontSignContent`) ⇒ its own commit. Call sites to pass `DontSignContent` (grep-verified): +- `sendGroupMessages`: `Subscriber.hs:1370`; `Commands.hs:793,800,2778,2909`. +- `sendGroupMessage`: `Commands.hs:889,2690,3272,3812,3815,3819`. +- `sendGroupMessages_` direct: `Commands.hs:2826,3849`. + +The two variable-`ContentSig` sites are the feature (next commit): content send (`Commands.hs:4405`) and group edit (`Commands.hs:732`). + +### 4. API: per-send `sign` flag + +Add a field to `APISendMessages` (`Controller.hs:332`): +```haskell +| APISendMessages {sendRef :: SendRef, liveMessage :: Bool, ttl :: Maybe Int, signMessages :: Bool, composedMessages :: NonEmpty ComposedMessage} +``` +Parser (`Commands.hs:5006`), mirroring `liveMessageP`/`sendMessageTTLP`, defaulting off so old command strings still parse: +```haskell +"/_send " *> (APISendMessages <$> sendRefP <*> liveMessageP <*> sendMessageTTLP <*> signMessagesP <*> (" json " *> jsonP <|> " text " *> composedMessagesTextP)) +-- with: signMessagesP = " sign=" *> onOffP <|> pure False (place after sendMessageTTLP, before " json ") +``` +Wire: `/_send live=.. ttl=.. sign=on|off json ...`. Per-send granularity (like `ttl`), not per-`ComposedMessage`. API boundary (app↔core, same bundle) ⇒ not a protocol-compat concern. + +### 5. Content send path + +`sendGroupContentMessages` (`Commands.hs:4366`) and `sendGroupContentMessages_` (`:4375`) gain a `ContentSig` param. `showGroupAsSender` is in scope at the send site (`:4405`); **as-channel posts are never signed** (anonymity gate — see threat model): +```haskell +let csig' = if showGroupAsSender then DontSignContent else csig +(msgs_, gsr) <- sendGroupMessages user gInfo Nothing showGroupAsSender recipients csig' chatMsgEvents +``` +This gate is structural (must live here, not only in UI); it also keeps the sender's own as-channel item unsigned and keeps §6 edit-reuse consistent. + +- `APISendMessages` handler (`:637-650`): `signMessages` → `SignContent`/`DontSignContent`, passed down (both `SRGroup` and `SRDirect`; direct ignores it — `sendContactContentMessages` doesn't sign). The `:4405` gate then forces `DontSignContent` for as-channel sends regardless of the flag. +- `APIReportMessage` (`:679`): `DontSignContent` (reports unsigned in v1). + +### 6. Edit / restore reuse (the `XMsgUpdate` requirement) + +Group edit, `Commands.hs:710-742`. Own sent item loaded with `CIMeta` at `:720`; add `msgSigned` to the pattern and reuse it: +```haskell +... meta = CIMeta {itemSharedMsgId, itemTimed, itemLive, editable, showGroupAsSender, msgSigned} +... +let reuseSig = if isJust msgSigned then SignContent else DontSignContent +SndMessage {msgId} <- sendGroupMessage user gInfo scope recipients reuseSig event +``` +`msgSigned` is loaded via `mkCIMeta`/`toGroupChatItem` (`Store/Messages.hs:2412`); for own items it is `Just MSSVerified` iff signed (`createNewSndChatItem` stores only `MSSVerified <$ signedMsg_`, `:550`), so `isJust` is the right test. This makes an edit (including the recipient-deleted-restore case) signed exactly when the original was; it is automatically consistent with §5 (as-channel originals are never signed ⇒ edits stay unsigned). + +Direct edit (`:697-704`) and local edit (`:745`) need no change (never signed). + +### 7. Security fix: refresh `msg_signed` on in-place content update + +**Finding:** `updateGroupChatItem_` (`Store/Messages.hs:2755`) updates content/status/timed fields but **not `msg_signed`** (`UPDATE` at `:2760-2767`); `updatedChatItem` (`:2749`) carries the original `meta.msgSigned`. Today invisible (content never signed); once content is signed and badged, an in-place edit from an **unsigned, relay-forged `XMsgUpdate`** would keep a stale `MSSVerified` badge over attacker content. + +**Why pass it in:** the `MSSVerified` vs `MSSSignedNoKey` outcome is computed at receive by `withVerifiedMsg` and lives only on the chat item; the stored `messages` row holds signature bytes but not the verification *outcome*. So the status must come from receive-time `RcvMessage.msgSigned`, not be re-derived. + +**Fix (contained to the group helper):** add a `Maybe MsgSigStatus` param to `updateGroupChatItem` (`:2746`); after `let ci' = updatedChatItem …` (`:2749`) override `ci'`'s `meta.msgSigned`, and add `msg_signed = ?` to `updateGroupChatItem_`'s `UPDATE` (`:2755`/`:2760-2767`). `updateGroupChatItem_` is called *only* from `updateGroupChatItem` (grep), so this is self-contained. **Leave `updatedChatItem` (`:2544`) unchanged** — it serves the unsigned direct/local paths (`:2540`, `:3210`). + +All **five** callers pass an explicit value (no implicit "preserve"): +- `Commands.hs:738` (sender edit): `MSSVerified <$ signedMsg_` from the returned `SndMessage` (mirrors `:550`; equals the reused setting). +- `Subscriber.hs:2212` (recipient in-place edit — *the spoof path*): `msgSigned` from the handler's `RcvMessage msg`. Unsigned forged edit ⇒ `Nothing` ⇒ badge removed; verified ⇒ kept. +- `Subscriber.hs:2172` (recipient restore in-place, after `saveRcvChatItem'`): same `msgSigned` from `msg`. +- `Subscriber.hs:1152` (`mdeUpdatedCI` decryption-error marker): `Nothing` — local marker, badge correctly cleared. +- `Subscriber.hs:1509` (`upsertBusinessRequestItem` business-chat welcome): `Nothing` — never a relay channel, safely preserves `Nothing`. (Sibling direct path `:1480` uses `updateDirectChatItem'`, unaffected.) + +Net: signed status is set explicitly from the source of current content in every group create/update path, so a stale badge cannot exist. + +### 8. Paths deliberately left unsigned + +- Auto-reply welcome content (`Subscriber.hs:1267` `XMsgUpdate`, `:1269` `XMsgNew`) via `sendGroupMessage'` ⇒ `DontSignContent`. +- `XMsgReact` (`Commands.hs:889`), `XMsgDel` (`Commands.hs:792-799`): unsigned in v1. Asymmetry: a post is verifiable, its reactions/deletes are not — and a signed post is still relay-suppressible (threat model). Later, extending `signableContent` could let recipients reject unsigned deletes of signed posts. + +## App changes (iOS + Kotlin) + +### A. Decode the signature status +- **JSON tags:** core uses `enumJSON (dropPrefix "MSS")` ⇒ `MSSVerified → "verified"`, `MSSSignedNoKey → "signedNoKey"` (lower-cases first letter). **Not** the DB/text strings (`"verified"`/`"no_key"`). +- iOS: `enum MsgSigStatus: String, Decodable { case verified, signedNoKey }`; add `public var msgSigned: MsgSigStatus?` to `CIMeta` (`apps/ios/SimpleXChat/ChatTypes.swift:3721-3737`). +- Kotlin: `@Serializable enum class MsgSigStatus { @SerialName("verified") Verified, @SerialName("signedNoKey") SignedNoKey }`; add `val msgSigned: MsgSigStatus? = null` to `CIMeta` (`apps/multiplatform/.../model/ChatModel.kt:3434-3450`). +- Optional field ⇒ backward-safe decode of old core JSON. + +### B. Device preference (default off) +- iOS: `@AppStorage(DEFAULT_PRIVACY_SIGN_CHANNEL_MESSAGES) private var signChannelMessages = false` + toggle in `PrivacySettings.swift` (pattern: `protectScreen`, `:68-70`) with a non-repudiation footer. +- Kotlin: `val privacySignChannelMessages = mkBoolPreference(SHARED_PREFS_PRIVACY_SIGN_CHANNEL_MESSAGES, false)` (`SimpleXAPI.kt:314`; declarations near `:122-125`) + `SettingsPreferenceItem` in `PrivacySettings.kt` with explanation. +- App-side only (like `customDisappearingMessageTime`), not core `AppSettings`. + +### C. Composer option (per-send override) + thread `sign` to the API +- Change the send closure to `(_ ttl: Int?, _ sign: Bool?)` (iOS `SendMessageView.swift:21`; Kotlin `SendMsgView.kt:54`), `sign == nil` ⇒ use device default; composer passes effective `sign = override ?? default`. +- Long-press item next to "Disappearing message" (iOS `SendMessageView.swift:224-247`; Kotlin `SendMsgView.kt:198-209`): "Sign message" (default off) / "Send without signing" (default on). +- **Gate visibility** on relay channel + membership has a signing key + **not as-channel** (the UI half of §5 — never offer it for as-channel publication). If app `GroupInfo` lacks relay/key state, add a derived `memberSigningAvailable` boolean to its JSON; AND it with the composer's as-channel state. Mirror `timedMessageAllowed`. +- `apiSendMessages`: add `sign: Bool`, append `sign=on|off` — iOS `ChatCommand.apiSendMessages` (`AppAPITypes.swift:48`, encode `:239`) + `SimpleXAPI.swift:545`; Kotlin `CC.ApiSendMessages` (`SimpleXAPI.kt:3676`, encode `:3867`) + `SimpleXAPI.kt:1097`. + +### D. Recipient indicator +- Show a "signed by author" indicator when `meta.msgSigned == .verified` in the meta row: iOS `CIMetaView.swift` `ciMetaText` (`:93-160`); Kotlin `CIMetaView.kt` `CIMetaText` (`:67-115`) + update `reserveSpaceForMeta` (`:118-175`) for icon width. +- `signedNoKey`: show muted or nothing so it isn't read as `verified` (design). Surface the "verified ≠ timestamp/ordering/completeness" caveat (threat model) in help. +- Own signed items use the same indicator (core sets `MSSVerified` on signed sends). + +## Compatibility analysis +- **Protocol wire format:** unchanged; existing batch-element signature prefix. No `chatVRange` bump; pre-feature relay-capable peers verify/accept correctly. +- **API command:** `sign=` additive with default; app+core ship together. +- **DB:** no migration. `chat_items.msg_signed` exists (added `M20260222_chat_relays`; in both schema files; written by `createNewChatItem_:603`). +- **App JSON:** new optional `msgSigned` decodes as absent on older cores. + +## Edge cases, races, correctness +- **Member without keys** (`groupKeys = Nothing`): `groupMsgSigning` returns `Nothing` even with `SignContent` ⇒ silent unsigned send. UI gate should prevent offering it; document the silent degrade. +- **Non-relay groups:** `useRelays'` guard ⇒ never signed; UI must not offer it. +- **Live messages:** initial `XMsgNew` then repeated `XMsgUpdate`, each reusing the item's `msgSigned` ⇒ every increment signed. Extra cost per keystroke-batch; acceptable. +- **Separate (non-batched) path drops signatures** (`sndMessageMBR` uses raw `msgBody`, `Internal.hs:2199`, vs the batched path's `encodeBatchElement`). Never reached in relay groups (`memberSendAction` → `MSASendBatched`). Add a test-asserted invariant; optionally make `sndMessageMBR` use `encodeBatchElement signedMsg_` too, so routing changes can't silently drop channel signatures. +- **Defense-in-depth: no signature on `FwdChannel`.** `encodeFwdElement` (`Batch.hs:108`) includes `signedMsg_` unconditionally; §5 makes it `Nothing` for `FwdChannel` in normal flow. Add a guard/assertion that `encodeFwdElement` carries no signature when `fwdSender = FwdChannel`, so no future upstream path can reintroduce the de-anonymization. +- **History re-send strips signatures (badge non-determinism, by design).** Relay history catch-up rebuilds content via `prepareGroupMsg` into plain `XGrpMsgForward` events (`processContentItem`, `Internal.hs:1279-1305`) and lacks the private key ⇒ unsigned. So for the same message, a live-forward recipient sees a badge while a history-catch-up recipient does not. Graceful (absence ≠ forgery); document in UI/help and test. +- **Concurrency:** signing/verification are pure given keys; no new shared state. Send holds `withGroupLock`; receive update runs under existing receive-loop serialization. No new races. + +## Tests + +Protocol (`tests/ProtocolTests.hs`, extending `:112-312`): +- Round-trip signed `XMsgNew`/`XMsgUpdate` through `SignedMsg`; assert binding `CBGroup <> (publicGroupId, memberId)`; `verify` accepts the right key, rejects wrong key / altered body / altered binding. + +Integration (`tests/ChatTests/`, using `setupRelay`/`prepareChannel1Relay`/`createChannel1Relay`/`memberJoinChannel`, `Groups.hs:8621-8750`): +- **Sign + verify:** `sign=on` ⇒ recipient and sender items are `(signed)` (`sigStatusStr`). +- **Off / opt-out:** `sign=off`/default ⇒ no `(signed)`. +- **No key:** missing roster key ⇒ `(signed, no key to verify)` (`MSSSignedNoKey`). +- **Edit reuse:** signed message edit stays `(signed)`; unsigned stays unsigned. +- **Edit downgrade (security):** unsigned `XMsgUpdate` for a previously-signed item (forging-relay, cf. `ChatRelays.hs:220-230`) ⇒ badge **removed** (§7). +- **As-channel never signed (anonymity):** owner posts `as_group=on sign=on` ⇒ no item is `(signed)` and no signature on the wire/stored message (guards §5). +- **History downgrade:** live-forward recipient sees `(signed)`; later history-catch-up recipient sees the same message without it (Edge cases). +- **Forgery rejection:** mismatched-binding replay/fabrication ⇒ signature stripped / `RGEMsgBadSignature`. + +App: minimal decode test that `"verified"`/`"signedNoKey"` parse to the right enum on both platforms (guards the §A tag mismatch). + +## Commit / diff plan + +1. **Structural (behavior-preserving):** add `ContentSig`, `signableContent`, parameterize `groupMsgSigning` + the three send functions, update all callers with `DontSignContent`. Reviewable as "no behavior change". +2. **Security fix (independent, behavioral no-op today):** add `Maybe MsgSigStatus` to `updateGroupChatItem`, override `meta.msgSigned` after `updatedChatItem`, add `msg_signed` to `updateGroupChatItem_`'s `UPDATE`, update all five callers (§7). Until commit 3 every call passes `Nothing`/unchanged, so no observable change yet — but correct on its own, with a regression test that bites once signing exists. +3. **Feature behavior (core):** `APISendMessages` field + parser; content send and edit pass the real `ContentSig` (with the §5 as-channel gate); report path `DontSignContent`. +4. **App — decode + recipient indicator.** +5. **App — device preference + composer option + `apiSendMessages` wiring.** +6. **Tests** (protocol + integration) — may accompany commits 2/3. + +Each commit builds and passes tests independently (bisect/rollback). + +### Pre-implementation gates (after rebasing onto #7017 + #7048) +- **MUST:** the as-channel gate (`showGroupAsSender ⇒ DontSignContent`, §5) lives in the *core* send path, and the app option is hidden for as-channel sends (§C) — not UI-only. +- **MUST:** re-run `grep -rn 'updateGroupChatItem\b'` and confirm **every** caller passes an explicit `Maybe MsgSigStatus` — a missed caller silently re-introduces the §7 spoof. (Pre-rebase set: `Commands.hs:738`; `Subscriber.hs:1152,1509,2172,2212`.) +- **SHOULD:** re-run the `sendGroupMessages`/`sendGroupMessage`/`sendGroupMessages_` caller greps; only content-send and edit pass a variable `ContentSig`, all others `DontSignContent`. +- **SHOULD:** the three "verified"-meaning caveats (no timestamp/ordering; history downgrade; relay-suppressible) are surfaced in UI/help, and the history-downgrade test exists. + +## Out of scope / future +- Group-level "expected/required signing" owner setting (closes the optional-downgrade gap). +- Signing reactions/deletes; signing auto-reply content; verifiable reports (signed `MCReport`). + +## Open assumptions to confirm during implementation +- App `GroupInfo` exposes relay+key state for the UI gate, or a derived boolean is added to its JSON. +- Visual treatment of `signedNoKey` vs `verified`, and how to surface the "verified ≠ timestamp/ordering/completeness" caveat (threat model) in help. From 8dd888295dcd28acf75ac274962285ccbac2a994 Mon Sep 17 00:00:00 2001 From: "Evgeny @ SimpleX Chat" <259188159+evgeny-simplex@users.noreply.github.com> Date: Wed, 17 Jun 2026 19:06:24 +0100 Subject: [PATCH 21/81] website: add SimpleX Network News channel preview (#7087) * website: add SimpleX Network News channel preview * send relay domain/capability to channel owner on profile update * add channel ID * add top offset parameter * allow overscroll * better scroll * improve * fix promoted communities * use path for channel renderer without host * fix --------- Co-authored-by: Evgeny Poberezkin --- src/Simplex/Chat/Library/Commands.hs | 12 +---------- src/Simplex/Chat/Library/Internal.hs | 16 ++++++++++++++ src/Simplex/Chat/Library/Subscriber.hs | 2 ++ website/src/_includes/navbar.html | 2 +- website/src/blog.html | 3 ++- website/src/js/channel-preview.jsc | 29 +++++++++++++++++++++++--- website/src/js/directory.jsc | 3 +-- website/src/news.html | 16 ++++++++++++++ 8 files changed, 65 insertions(+), 18 deletions(-) create mode 100644 website/src/news.html diff --git a/src/Simplex/Chat/Library/Commands.hs b/src/Simplex/Chat/Library/Commands.hs index 646377ac9c..df03a776fe 100644 --- a/src/Simplex/Chat/Library/Commands.hs +++ b/src/Simplex/Chat/Library/Commands.hs @@ -4918,17 +4918,7 @@ runRelayGroupLinkChecks user = do else void $ withStore' $ \db -> updateRelayOwnStatusFromTo db gInfo RSActive RSInactive _ -> pure () _ -> pure () - sendRelayCapIfNeeded cxt gInfo - sendRelayCapIfNeeded cxt gInfo = do - ChatConfig {webPreviewConfig} <- asks config - let currentWebDomain = (\WebPreviewConfig {webDomain} -> webDomain) <$> webPreviewConfig - sentWebDomain <- withStore' (`getRelaySentWebDomain` gInfo) - when (currentWebDomain /= sentWebDomain) $ do - owners <- withStore' $ \db -> getGroupOwners db cxt user gInfo - let capableOwners = filter (\m -> memberCurrent m && m `supportsVersion` relayWebCapVersion) owners - unless (null capableOwners) $ do - void $ sendGroupMessage' user gInfo capableOwners (XGrpRelayCap RelayCapabilities {webDomain = currentWebDomain}) - withStore' $ \db -> updateRelaySentWebDomain db gInfo currentWebDomain + sendRelayCapIfNeeded user gInfo checkRelayInactiveGroups = do cxt <- chatStoreCxt ttl <- asks (relayInactiveTTL . config) diff --git a/src/Simplex/Chat/Library/Internal.hs b/src/Simplex/Chat/Library/Internal.hs index 325e552d44..0b19c5a261 100644 --- a/src/Simplex/Chat/Library/Internal.hs +++ b/src/Simplex/Chat/Library/Internal.hs @@ -2126,6 +2126,22 @@ sendGroupMessage' user gInfo members chatMsgEvent = ((Right msg) :| [], _) -> pure msg _ -> throwChatError $ CEInternalError "sendGroupMessage': expected 1 message" +-- Relay advertises its current web preview capability to channel owners. +-- Idempotent: sends only when the configured web domain differs from what was last sent, and only to +-- owners whose recorded chat version supports relayWebCapVersion (older apps can't parse XGrpRelayCap). +sendRelayCapIfNeeded :: User -> GroupInfo -> CM () +sendRelayCapIfNeeded user gInfo = do + ChatConfig {webPreviewConfig} <- asks config + let currentWebDomain = (\WebPreviewConfig {webDomain} -> webDomain) <$> webPreviewConfig + sentWebDomain <- withStore' (`getRelaySentWebDomain` gInfo) + when (currentWebDomain /= sentWebDomain) $ do + cxt <- chatStoreCxt + owners <- withStore' $ \db -> getGroupOwners db cxt user gInfo + let capableOwners = filter (\m -> memberCurrent m && m `supportsVersion` relayWebCapVersion) owners + unless (null capableOwners) $ do + void $ sendGroupMessage' user gInfo capableOwners (XGrpRelayCap RelayCapabilities {webDomain = currentWebDomain}) + withStore' $ \db -> updateRelaySentWebDomain db gInfo currentWebDomain + sendGroupMessages :: MsgEncodingI e => User -> GroupInfo -> Maybe GroupChatScope -> ShowGroupAsSender -> [GroupMember] -> NonEmpty (ChatMsgEvent e) -> CM (NonEmpty (Either ChatError SndMessage), GroupSndResult) sendGroupMessages user gInfo scope asGroup members events = do -- TODO [knocking] send current profile to pending member after approval? diff --git a/src/Simplex/Chat/Library/Subscriber.hs b/src/Simplex/Chat/Library/Subscriber.hs index b948d7727b..671b7a53df 100644 --- a/src/Simplex/Chat/Library/Subscriber.hs +++ b/src/Simplex/Chat/Library/Subscriber.hs @@ -3323,6 +3323,8 @@ processAgentMessageConn cxt user@User {userId} corrId agentConnId agentMessage = unless (useRelays' g'') $ void $ forkIO $ void $ setGroupLinkData' NRMBackground user g'' Just _ -> updateGroupPrefs_ msgSigned g m $ fromMaybe defaultBusinessGroupPrefs $ groupPreferences p' + -- relay advertises its web capability now that the owner's version is known (bumped by saveGroupRcvMsg) + when (isRelay (membership g)) $ sendRelayCapIfNeeded user g pure $ Just DJSGroup {jobSpec = DJDeliveryJob {includePending = True}} xGrpPrefs :: GroupInfo -> GroupMember -> GroupPreferences -> RcvMessage -> CM (Maybe DeliveryJobScope) diff --git a/website/src/_includes/navbar.html b/website/src/_includes/navbar.html index 34ee893dd3..cec2aa0a01 100644 --- a/website/src/_includes/navbar.html +++ b/website/src/_includes/navbar.html @@ -148,7 +148,7 @@ - {% if ('blog' not in page.url) and ('about' not in page.url) and ('donate' not in page.url) and ('privacy' not in page.url) and ('directory' not in page.url) and ('credits' not in page.url) and ('file' not in page.url) and ('links' not in page.url) %} + {% if ('blog' not in page.url) and ('about' not in page.url) and ('donate' not in page.url) and ('privacy' not in page.url) and ('directory' not in page.url) and ('credits' not in page.url) and ('file' not in page.url) and ('links' not in page.url) and ('news' not in page.url) %}
{% for language in languages.languages %} diff --git a/website/src/blog.html b/website/src/blog.html index 2e62702248..5e8a2f8dfa 100644 --- a/website/src/blog.html +++ b/website/src/blog.html @@ -41,7 +41,8 @@ active_blog: true
-

Latest news

+

Latest news

+

Open SimpleX Network News channel

{% for blog in collections.blogs %} {% if not(blog.data.draft) %} diff --git a/website/src/js/channel-preview.jsc b/website/src/js/channel-preview.jsc index be572fd8de..5cd4a390cb 100644 --- a/website/src/js/channel-preview.jsc +++ b/website/src/js/channel-preview.jsc @@ -94,6 +94,15 @@ const STYLE = ` text-overflow: ellipsis; } +.simplex-preview-container .simplex-preview-header-name { + background: none; + -webkit-background-clip: border-box; + background-clip: border-box; + color: var(--sp-text); + -webkit-text-fill-color: var(--sp-text); + text-fill-color: var(--sp-text); +} + .simplex-preview-header-description { font-size: 13px; color: var(--sp-text-secondary); @@ -492,16 +501,18 @@ const STYLE = ` min-width: 0; max-width: 640px; overflow-y: auto; - overscroll-behavior: contain; position: relative; } .simplex-preview-info { overflow-y: auto; - overscroll-behavior: contain; background: var(--sp-bg); } +.simplex-preview-scroll-lock { + overflow: hidden; +} + .simplex-preview-info-close { display: none; } @@ -696,12 +707,13 @@ const STYLE = ` .simplex-preview-info { display: none; position: fixed; - top: 0; + top: var(--sp-top-offset, 0px); left: 0; right: 0; bottom: 0; z-index: 100; padding: 16px; + overscroll-behavior: contain; } .simplex-preview-info.open { display: block; @@ -786,6 +798,13 @@ function initChannelPreview(container) { if (container.dataset.darkBackground) { container.style.setProperty('--sp-dark-bg', container.dataset.darkBackground); } + const topOffset = parseInt(container.dataset.topOffset || '0', 10); + if (topOffset > 0) { + container.style.setProperty('--sp-top-offset', topOffset + 'px'); + container.style.marginTop = topOffset + 'px'; + container.style.height = 'calc(100vh - ' + topOffset + 'px)'; + container.style.height = 'calc(100dvh - ' + topOffset + 'px)'; + } container.innerHTML = '

Loading channel...

'; fetchPreview(relayScheme, relayDomains, channelLink, channelId).then(data => { @@ -885,12 +904,16 @@ function render(container, data, channelLink, showAppBadges) { if (window.innerWidth < 1000) { info.classList.add('open'); main.style.overflow = 'hidden'; + document.documentElement.classList.add('simplex-preview-scroll-lock'); + document.body.classList.add('simplex-preview-scroll-lock'); } }); closeBtn.addEventListener('click', () => { info.classList.remove('open'); main.style.overflow = ''; + document.documentElement.classList.remove('simplex-preview-scroll-lock'); + document.body.classList.remove('simplex-preview-scroll-lock'); }); setupSecretToggles(container); diff --git a/website/src/js/directory.jsc b/website/src/js/directory.jsc index 6959cd41a5..09d8ffa67f 100644 --- a/website/src/js/directory.jsc +++ b/website/src/js/directory.jsc @@ -1,5 +1,3 @@ -#include "simplex-lib.jsc" - const simplexDirectoryDataURL = 'https://directory.simplex.chat/data/'; // const simplexDirectoryDataURL = 'http://localhost:8080/directory-data/'; @@ -7,6 +5,7 @@ const simplexDirectoryDataURL = 'https://directory.simplex.chat/data/'; const simplexUsersGroup = 'SimpleX users group'; (function() { +#include "simplex-lib.jsc" if (!document.location.pathname.startsWith('/directory')) return; let allEntries = []; diff --git a/website/src/news.html b/website/src/news.html new file mode 100644 index 0000000000..8b0ab9b494 --- /dev/null +++ b/website/src/news.html @@ -0,0 +1,16 @@ +--- +layout: layouts/main.html +title: "SimpleX Network News" +description: "The news about SimpleX Network technology, governance and anything related to its development." +templateEngineOverride: njk +--- + +
+ From 09e9235c86866cb167231e4d95aa45ad95687659 Mon Sep 17 00:00:00 2001 From: spaced4ndy <8711996+spaced4ndy@users.noreply.github.com> Date: Wed, 3 Jun 2026 21:04:28 +0000 Subject: [PATCH 22/81] core: fix delivery cursor not advancing to maximum group member id for posgtgres (#7043) --- src/Simplex/Chat/Store/Delivery.hs | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/Simplex/Chat/Store/Delivery.hs b/src/Simplex/Chat/Store/Delivery.hs index 204b5325ed..cd18e62148 100644 --- a/src/Simplex/Chat/Store/Delivery.hs +++ b/src/Simplex/Chat/Store/Delivery.hs @@ -355,7 +355,7 @@ getGroupMembersByCursor db cxt user@User {userContactId} GroupInfo {groupId} cur map (toContactMember currentTs cxt user) <$> DB.query db - (groupMemberQuery <> " WHERE m.group_member_id IN ?") + (groupMemberQuery <> " WHERE m.group_member_id IN ? ORDER BY m.group_member_id ASC") (Only (In gmIds)) #else rights <$> mapM (runExceptT . getGroupMemberById db cxt user) gmIds From 80538850f1bd38b0fa7e84caca7c7ecd6dc7afb1 Mon Sep 17 00:00:00 2001 From: Evgeny Date: Wed, 17 Jun 2026 19:10:37 +0100 Subject: [PATCH 23/81] ui: show badges in more contexts (#7084) * core: fix delivery cursor not advancing to maximum group member id for posgtgres (#7043) * ui: show badge in user picker above message entry * core: send badge with channel owner profile --------- Co-authored-by: spaced4ndy <8711996+spaced4ndy@users.noreply.github.com> Co-authored-by: Evgeny @ SimpleX Chat <259188159+evgeny-simplex@users.noreply.github.com> --- .../ContextProfilePickerView.swift | 11 ++++-- .../chat/ComposeContextProfilePickerView.kt | 5 ++- src/Simplex/Chat/Library/Commands.hs | 4 +- tests/ChatTests/ChatRelays.hs | 37 +++++++++++++++++++ 4 files changed, 49 insertions(+), 8 deletions(-) diff --git a/apps/ios/Shared/Views/Chat/ComposeMessage/ContextProfilePickerView.swift b/apps/ios/Shared/Views/Chat/ComposeMessage/ContextProfilePickerView.swift index 427a600627..9047eaf84b 100644 --- a/apps/ios/Shared/Views/Chat/ComposeMessage/ContextProfilePickerView.swift +++ b/apps/ios/Shared/Views/Chat/ComposeMessage/ContextProfilePickerView.swift @@ -163,10 +163,13 @@ struct ContextProfilePickerView: View { } label: { HStack { ProfileImage(imageStr: user.image, size: 38) - Text(user.chatViewName) - .fontWeight(selectedUser == user && !incognitoDefault ? .medium : .regular) - .foregroundColor(theme.colors.onBackground) - .lineLimit(1) + NameWithBadge( + Text(user.chatViewName) + .fontWeight(selectedUser == user && !incognitoDefault ? .medium : .regular) + .foregroundColor(theme.colors.onBackground), + user.profile.localBadge + ) + .lineLimit(1) Spacer() diff --git a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/ComposeContextProfilePickerView.kt b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/ComposeContextProfilePickerView.kt index ce023e83c9..b7be49055e 100644 --- a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/ComposeContextProfilePickerView.kt +++ b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/ComposeContextProfilePickerView.kt @@ -146,9 +146,10 @@ fun ComposeContextProfilePickerView( ) { ProfileImage(size = USER_ROW_AVATAR_SIZE, image = user.image) TextIconSpaced(false) - Text( + NameWithBadge( user.chatViewName, - modifier = Modifier.align(Alignment.CenterVertically), + user.profile.localBadge, + Modifier.align(Alignment.CenterVertically), fontWeight = if (selectedUser.value.userId == user.userId && !incognitoDefault) FontWeight.Medium else FontWeight.Normal ) diff --git a/src/Simplex/Chat/Library/Commands.hs b/src/Simplex/Chat/Library/Commands.hs index 43f480b5c4..9fe2342dd6 100644 --- a/src/Simplex/Chat/Library/Commands.hs +++ b/src/Simplex/Chat/Library/Commands.hs @@ -3989,9 +3989,9 @@ processChatCommand cxt nm = \case pure (relayMember, conn, groupRelay) let GroupMember {memberRole = userRole, memberId = userMemberId} = membership allowSimplexLinks = groupFeatureUserAllowed SGFSimplexLinks gInfo - membershipProfile = redactedMemberProfile allowSimplexLinks $ fromLocalProfile $ memberProfile membership GroupMember {memberId = relayMemberId} = relayMember - relayInv = GroupRelayInvitation { + membershipProfile <- presentUserBadge user (incognitoMembershipProfile gInfo) $ redactedMemberProfile allowSimplexLinks $ fromLocalProfile $ memberProfile membership + let relayInv = GroupRelayInvitation { fromMember = MemberIdRole userMemberId userRole, fromMemberProfile = membershipProfile, relayMemberId, diff --git a/tests/ChatTests/ChatRelays.hs b/tests/ChatTests/ChatRelays.hs index 4b09347dcf..e5c2598f41 100644 --- a/tests/ChatTests/ChatRelays.hs +++ b/tests/ChatTests/ChatRelays.hs @@ -6,6 +6,7 @@ module ChatTests.ChatRelays where import ChatClient import ChatTests.DBUtils import ChatTests.Groups (memberJoinChannel, memberJoinChannel', prepareChannel, prepareChannel', prepareChannel1Relay, setupRelay) +import ChatTests.Profiles (addTestBadge, issueTestBadge, testBadgeKeys) import ChatTests.Utils import Control.Concurrent (threadDelay) import qualified Data.Aeson as J @@ -14,8 +15,10 @@ import qualified Data.ByteString.Lazy.Char8 as LB import Data.Maybe (fromMaybe) import qualified Data.Text as T import ProtocolTests (testGroupProfile) +import Simplex.Chat.Controller (ChatConfig (..)) import Simplex.Chat.Protocol (LinkOwnerSig, MsgChatLink (..), MsgContent (..)) import Simplex.Chat.Types (GroupProfile (..)) +import Simplex.Messaging.Crypto.BBS (bbsKeyGen) import Simplex.Messaging.Encoding.String (StrEncoding (..)) import Simplex.Messaging.Util (decodeJSON) import Test.Hspec hiding (it) @@ -32,6 +35,40 @@ chatRelayTests = do it "share channel card in direct chat" testShareChannelDirect it "share channel card in group" testShareChannelGroup it "share channel card in channel" testShareChannelChannel + describe "channel badges" $ do + it "subscriber and owner see each other's badges forwarded by the relay" testChannelMemberBadges + +-- A channel owner and a subscriber each hold a supporter badge; their member profiles only reach +-- each other forwarded by the relay. Both sides should still see the other's active badge. +testChannelMemberBadges :: HasCallStack => TestParams -> IO () +testChannelMemberBadges ps = do + Right (pk, sk) <- bbsKeyGen + let cfg = testCfg {badgePublicKeys = testBadgeKeys pk} + withNewTestChatCfgOpts ps cfg testOpts "alice" aliceProfile $ \alice -> + withNewTestChatCfgOpts ps cfg relayTestOpts "bob" bobProfile $ \bob -> + withNewTestChatCfgOpts ps cfg testOpts "cath" cathProfile $ \cath -> do + addTestBadge alice =<< issueTestBadge sk Nothing + addTestBadge cath =<< issueTestBadge sk Nothing + (shortLink, fullLink) <- prepareChannel1Relay "team" alice bob + memberJoinChannel "team" [bob] [alice] shortLink fullLink cath + -- a channel message lets the relay-forwarded member profiles settle on both sides + alice #> "#team hi" + bob <# "#team> hi" + cath <# "#team> hi [>>]" + threadDelay 1000000 + -- owner and subscriber are connected only via the relay, so /i shows the badge then "member not connected" for both + alice ##> "/i #team cath" + alice <## "group ID: 1" + alice <##. "member ID: " + alice <## "supporter badge - active" + alice <## "no expiry" + alice <## "member not connected" + cath ##> "/i #team alice" + cath <## "group ID: 1" + cath <##. "member ID: " + cath <## "supporter badge - active" + cath <## "no expiry" + cath <## "member not connected" testGetSetChatRelays :: HasCallStack => TestParams -> IO () testGetSetChatRelays ps = From 8504c0ce98320db3262dbc9869b67b003caa20e4 Mon Sep 17 00:00:00 2001 From: Narasimha-sc <166327228+Narasimha-sc@users.noreply.github.com> Date: Wed, 17 Jun 2026 18:18:32 +0000 Subject: [PATCH 24/81] cli: remove help entries for removed commands (#7079) * cli: remove help entries for commands removed long ago /pq and /pq @ were removed in #4049 (PQ encryption for contacts is now automatic); /get stats and /reset stats were removed in #4375 (legacy agent stats). All four were left documented in CLI help, so typing them fails. Remove the stale entries. * plans: justify removal of outdated CLI help entries * plans: drop //get stats mention from CLI help plan --- plans/2026-06-15-fix-cli-outdated-help.md | 42 +++++++++++++++++++++++ src/Simplex/Chat/Help.hs | 7 +--- 2 files changed, 43 insertions(+), 6 deletions(-) create mode 100644 plans/2026-06-15-fix-cli-outdated-help.md diff --git a/plans/2026-06-15-fix-cli-outdated-help.md b/plans/2026-06-15-fix-cli-outdated-help.md new file mode 100644 index 0000000000..e0105ef5bb --- /dev/null +++ b/plans/2026-06-15-fix-cli-outdated-help.md @@ -0,0 +1,42 @@ +# Remove CLI help entries for long-removed commands + +Branch: `nd/fix-cli-outdated-help` · file `src/Simplex/Chat/Help.hs`. + +## 1. Problem statement + +Typing `/get stats` in the terminal CLI does nothing useful — it is documented in `/help` but no parser accepts it, so it fails to parse. Investigation found this is not isolated: four documented commands no longer exist in the parser. + +## 2. Solution summary + +Remove the four stale entries (five lines, including one continuation note) from `Help.hs`: + +- `/pq @ on/off` + its "(both have to enable…)" note — `contactsHelpInfo` +- `/pq on/off` — `settingsInfo` +- `/get stats` — `settingsInfo` +- `/reset stats` — `settingsInfo` + +The stats pair were the tail of `settingsInfo`, so the now-orphaned trailing comma on the preceding `/(un)mute #` element is also dropped to keep the list literal valid. + +No replacement text is added: PQ has no command (it is automatic), and the stats functionality has no argument-compatible successor (see §4). + +## 3. Root cause + +Both removals were core changes that deleted parser, handler, and command constructor but left `Help.hs` untouched: + +- **`/pq` (both forms)** — commit `756779186` "core: enable PQ encryption for contacts (#4049)", 2024-04-22. It removed the parsers `"/pq @" *> (SetContactPQ …)` and `"/pq " *> (APISetPQEncryption …)`; post-quantum encryption for contacts became automatic, so the manual toggle was obsolete. `SetContactPQ` and `APISetPQEncryption` no longer exist in `src/`. +- **`/get stats` / `/reset stats`** — commit `5907d8bd0` "core: remove legacy agent stats (#4375)", 2024-07-01. It removed the parsers `"/get stats" $> GetAgentStats` and `"/reset stats" $> ResetAgentStats`, their handlers, the `GetAgentStats`/`ResetAgentStats` constructors in `Controller.hs`, and the `View.hs` rendering — but its diff touched `Chat.hs`, `Controller.hs`, `View.hs`, `cabal.project`, `sha256map.nix`, not `Help.hs`. + +In both cases the help text became a promise the binary could no longer keep. + +## 4. Scope verification — no other stale entries, no replacements documented + +All 120 commands documented across every section of `Help.hs` were extracted and matched against the parser string literals in `Library/Commands.hs` (`chatCommandP`). Every entry resolves to a live parser except the four above. ~10 entries that a naive prefix match flagged were manually confirmed valid: incognito-suffix forms parsed by `incognitoP` (`/accept incognito`, `/connect incognito`, `/simplex incognito`), usage examples (`/file bob ./photo.jpg`, `/group team`), and inline sub-alternatives (`/start remote host new`, `/stop remote host new`, `/switch remote host local`, `/chats all`). + +Why no replacement text: + +- **PQ** — there is no command; encryption is negotiated automatically. Documenting nothing is correct. +- **Stats** — the nearest live commands are `/get servers summary ` and `/reset servers stats`, but they require a `userId` argument and return the agent servers summary, not the old argument-less usage statistics. They were never in CLI help; adding them is a separate documentation enhancement, deliberately out of scope for a "remove what no longer exists" fix. + +## 5. Why this shape + +Pure deletion of dead documentation — no behavioral change, smallest diff that makes `/help` truthful. Comma handling is the only subtlety: the `/pq @` and `/pq on/off` removals sit before comma-bearing neighbors (a `""` separator and `/network` respectively) and need no adjustment; the `/get stats` + `/reset stats` removal makes `/(un)mute #` the last `settingsInfo` element, so its trailing comma is removed to avoid a dangling-comma parse error before `]`. diff --git a/src/Simplex/Chat/Help.hs b/src/Simplex/Chat/Help.hs index 59e7a2c941..56ed65fb4b 100644 --- a/src/Simplex/Chat/Help.hs +++ b/src/Simplex/Chat/Help.hs @@ -187,8 +187,6 @@ contactsHelpInfo = indent <> highlight "/verify @ " <> " - clear security code verification", indent <> highlight "/info @ " <> " - info about contact connection", indent <> highlight "/switch @ " <> " - switch receiving messages to another SMP relay", - indent <> highlight "/pq @ on/off " <> " - [BETA] toggle quantum resistant / standard e2e encryption for a contact", - indent <> " " <> " (both have to enable for quantum resistance)", "", green "Contact chat preferences:", indent <> highlight "/set voice @ yes/no/always " <> " - allow/prohibit voice messages with the contact", @@ -324,16 +322,13 @@ settingsInfo = map styleMarkdown [ green "Chat settings:", - indent <> highlight "/pq on/off " <> " - [BETA] toggle quantum resistant / standard e2e encryption for the new contacts", indent <> highlight "/network " <> " - show / set network access options", indent <> highlight "/smp " <> " - show / set configured SMP servers", indent <> highlight "/xftp " <> " - show / set configured XFTP servers", indent <> highlight "/info " <> " - information about contact connection", indent <> highlight "/info # " <> " - information about member connection", indent <> highlight "/(un)mute " <> " - (un)mute contact, the last messages can be printed with /tail command", - indent <> highlight "/(un)mute # " <> " - (un)mute group", - indent <> highlight "/get stats " <> " - get usage statistics", - indent <> highlight "/reset stats " <> " - reset usage statistics" + indent <> highlight "/(un)mute # " <> " - (un)mute group" ] databaseHelpInfo :: [StyledString] From cfefafc337fd1c3d79436ec173cdfc7f08162c2f Mon Sep 17 00:00:00 2001 From: spaced4ndy <8711996+spaced4ndy@users.noreply.github.com> Date: Wed, 17 Jun 2026 18:20:58 +0000 Subject: [PATCH 25/81] core: file invitation size check (#7069) * core: file invitation size check * comment * comment --- src/Simplex/Chat/Library/Internal.hs | 13 ++++++++--- src/Simplex/Chat/Library/Subscriber.hs | 32 +++++++++++++++----------- 2 files changed, 29 insertions(+), 16 deletions(-) diff --git a/src/Simplex/Chat/Library/Internal.hs b/src/Simplex/Chat/Library/Internal.hs index 0b19c5a261..086c7e69d5 100644 --- a/src/Simplex/Chat/Library/Internal.hs +++ b/src/Simplex/Chat/Library/Internal.hs @@ -700,7 +700,7 @@ acceptFileReceive user@User {userId} RcvFileTransfer {fileId, xftpRcvFile, fileI ci <- xftpAcceptRcvFT db cxt user fileId filePath userApproved rfd <- getRcvFileDescrByRcvFileId db fileId pure (ci, rfd) - receiveViaCompleteFD user fileId rfd userApproved cryptoArgs + receiveViaCompleteFD user fileId rfd fileSize userApproved cryptoArgs pure ci (Nothing, Just _fileConnReq) -> throwChatError $ CEException "accepting file via a separate connection is deprecated" -- group & direct file protocol @@ -742,10 +742,17 @@ acceptFileReceive user@User {userId} RcvFileTransfer {fileId, xftpRcvFile, fileI || (rcvInline_ == Just True && fileSize <= fileChunkSize * offerChunks) ) -receiveViaCompleteFD :: User -> FileTransferId -> RcvFileDescr -> Bool -> Maybe CryptoFileArgs -> CM () -receiveViaCompleteFD user fileId RcvFileDescr {fileDescrText, fileDescrComplete} userApprovedRelays cfArgs = +receiveViaCompleteFD :: User -> FileTransferId -> RcvFileDescr -> Integer -> Bool -> Maybe CryptoFileArgs -> CM () +receiveViaCompleteFD user fileId RcvFileDescr {fileDescrText, fileDescrComplete} expectedFileSize userApprovedRelays cfArgs = when fileDescrComplete $ do rd <- parseFileDescription fileDescrText + let FD.ValidFileDescription FD.FileDescription {size = FD.FileSize encSize, redirect} = rd + redirectSize = maybe 0 (\FD.RedirectFileInfo {size = FD.FileSize s} -> toInteger s) redirect + -- for a redirect, encSize is the description blob and redirectSize the final file; take the larger + rcvSize = max (toInteger encSize) redirectSize + -- 10 MB margin: encryption and chunk-size rounding make the transfer larger than the advertised size + maxRcvSize = min expectedFileSize (toInteger FD.maxFileSizeHard) + toInteger (FD.mb 10 :: Int64) + when (rcvSize > maxRcvSize) $ throwChatError $ CEFileRcvChunk "declared file size exceeds the file invitation size" if userApprovedRelays then receive' rd True else do diff --git a/src/Simplex/Chat/Library/Subscriber.hs b/src/Simplex/Chat/Library/Subscriber.hs index 671b7a53df..95500162c8 100644 --- a/src/Simplex/Chat/Library/Subscriber.hs +++ b/src/Simplex/Chat/Library/Subscriber.hs @@ -1894,7 +1894,7 @@ processAgentMessageConn cxt user@User {userId} corrId agentConnId agentMessage = processFDMessage fileId aci fileDescr = do ft <- withStore $ \db -> getRcvFileTransfer db user fileId unless (rcvFileCompleteOrCancelled ft) $ do - (rfd@RcvFileDescr {fileDescrComplete}, ft'@RcvFileTransfer {fileStatus, xftpRcvFile, cryptoArgs}) <- withStore $ \db -> do + (rfd@RcvFileDescr {fileDescrComplete}, ft'@RcvFileTransfer {fileStatus, xftpRcvFile, cryptoArgs, fileInvitation = FileInvitation {fileSize}}) <- withStore $ \db -> do rfd <- appendRcvFD db userId fileId fileDescr -- reading second time in the same transaction as appending description -- to prevent race condition with accept @@ -1902,15 +1902,15 @@ processAgentMessageConn cxt user@User {userId} corrId agentConnId agentMessage = pure (rfd, ft') when fileDescrComplete $ toView $ CEvtRcvFileDescrReady user aci ft' rfd case (fileStatus, xftpRcvFile) of - (RFSAccepted _, Just XFTPRcvFile {userApprovedRelays}) -> receiveViaCompleteFD user fileId rfd userApprovedRelays cryptoArgs + (RFSAccepted _, Just XFTPRcvFile {userApprovedRelays}) -> receiveViaCompleteFD user fileId rfd fileSize userApprovedRelays cryptoArgs _ -> pure () processFileInvitation :: Maybe FileInvitation -> MsgContent -> (DB.Connection -> FileInvitation -> Maybe InlineFileMode -> Integer -> ExceptT StoreError IO RcvFileTransfer) -> CM (Maybe (RcvFileTransfer, CIFile 'MDRcv)) - processFileInvitation fInv_ mc createRcvFT = forM fInv_ $ \fInv' -> do + processFileInvitation fInv_ mc createRcvFT = forM fInv_ $ \fInv -> do ChatConfig {fileChunkSize} <- asks config - let fInv@FileInvitation {fileName, fileSize} = mkValidFileInvitation fInv' - inline <- receiveInlineMode fInv (Just mc) fileChunkSize - ft@RcvFileTransfer {fileId, xftpRcvFile} <- withStore $ \db -> createRcvFT db fInv inline fileChunkSize + fInv'@FileInvitation {fileName, fileSize} <- validateFileInvitation fInv + inline <- receiveInlineMode fInv' (Just mc) fileChunkSize + ft@RcvFileTransfer {fileId, xftpRcvFile} <- withStore $ \db -> createRcvFT db fInv' inline fileChunkSize let fileProtocol = if isJust xftpRcvFile then FPXFTP else FPSMP (filePath, fileStatus, ft') <- case inline of Just IFMSent -> do @@ -1927,6 +1927,11 @@ processAgentMessageConn cxt user@User {userId} corrId agentConnId agentMessage = mkValidFileInvitation :: FileInvitation -> FileInvitation mkValidFileInvitation fInv@FileInvitation {fileName} = fInv {fileName = FP.makeValid $ FP.takeFileName fileName} + validateFileInvitation :: FileInvitation -> CM FileInvitation + validateFileInvitation fInv@FileInvitation {fileName, fileSize} + | fileSize > 0 = pure $ mkValidFileInvitation fInv + | otherwise = throwChatError $ CEFileSize fileName + messageUpdate :: Contact -> SharedMsgId -> MsgContent -> RcvMessage -> MsgMeta -> Maybe Int -> Maybe Bool -> CM () messageUpdate ct@Contact {contactId} sharedMsgId mc msg@RcvMessage {msgId} msgMeta ttl live_ = do updateRcvChatItem `catchCINotFound` \_ -> do @@ -2332,11 +2337,11 @@ processAgentMessageConn cxt user@User {userId} corrId agentConnId agentMessage = -- TODO remove once XFile is discontinued processFileInvitation' :: Contact -> FileInvitation -> RcvMessage -> MsgMeta -> CM () - processFileInvitation' ct fInv' msg@RcvMessage {sharedMsgId_} msgMeta = do + processFileInvitation' ct fInv msg@RcvMessage {sharedMsgId_} msgMeta = do ChatConfig {fileChunkSize} <- asks config - let fInv@FileInvitation {fileName, fileSize} = mkValidFileInvitation fInv' - inline <- receiveInlineMode fInv Nothing fileChunkSize - RcvFileTransfer {fileId, xftpRcvFile} <- withStore $ \db -> createRcvFileTransfer db userId ct fInv inline fileChunkSize + fInv'@FileInvitation {fileName, fileSize} <- validateFileInvitation fInv + inline <- receiveInlineMode fInv' Nothing fileChunkSize + RcvFileTransfer {fileId, xftpRcvFile} <- withStore $ \db -> createRcvFileTransfer db userId ct fInv' inline fileChunkSize let fileProtocol = if isJust xftpRcvFile then FPXFTP else FPSMP ciFile = Just $ CIFile {fileId, fileName, fileSize, fileSource = Nothing, fileStatus = CIFSRcvInvitation, fileProtocol} content = ciContentNoParse $ CIRcvMsgContent $ MCFile "" @@ -2347,10 +2352,11 @@ processAgentMessageConn cxt user@User {userId} corrId agentConnId agentMessage = -- TODO remove once XFile is discontinued processGroupFileInvitation' :: GroupInfo -> GroupMember -> FileInvitation -> RcvMessage -> UTCTime -> CM () - processGroupFileInvitation' gInfo m fInv@FileInvitation {fileName, fileSize} msg@RcvMessage {sharedMsgId_} brokerTs = do + processGroupFileInvitation' gInfo m fInv msg@RcvMessage {sharedMsgId_} brokerTs = do ChatConfig {fileChunkSize} <- asks config - inline <- receiveInlineMode fInv Nothing fileChunkSize - RcvFileTransfer {fileId, xftpRcvFile} <- withStore $ \db -> createRcvGroupFileTransfer db userId gInfo (Just m) fInv inline fileChunkSize + fInv'@FileInvitation {fileName, fileSize} <- validateFileInvitation fInv + inline <- receiveInlineMode fInv' Nothing fileChunkSize + RcvFileTransfer {fileId, xftpRcvFile} <- withStore $ \db -> createRcvGroupFileTransfer db userId gInfo (Just m) fInv' inline fileChunkSize let fileProtocol = if isJust xftpRcvFile then FPXFTP else FPSMP ciFile = Just $ CIFile {fileId, fileName, fileSize, fileSource = Nothing, fileStatus = CIFSRcvInvitation, fileProtocol} content = ciContentNoParse $ CIRcvMsgContent $ MCFile "" From a4cfa2ae97e7e13eb6f68f13c45325ed55127166 Mon Sep 17 00:00:00 2001 From: Narasimha-sc <166327228+Narasimha-sc@users.noreply.github.com> Date: Wed, 17 Jun 2026 18:21:55 +0000 Subject: [PATCH 26/81] android, desktop: fix overlapping warning texts after finalizing migration (#7071) * android, desktop: fix overlapping warning texts after finalizing migration * plans: justify migration finished screen overlap fix --- .../views/migration/MigrateFromDevice.kt | 4 +- plans/2026-06-12-fix-migrate-text-overlap.md | 71 +++++++++++++++++++ 2 files changed, 73 insertions(+), 2 deletions(-) create mode 100644 plans/2026-06-12-fix-migrate-text-overlap.md diff --git a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/migration/MigrateFromDevice.kt b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/migration/MigrateFromDevice.kt index 39c4cb0b7f..fd6b27482d 100644 --- a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/migration/MigrateFromDevice.kt +++ b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/migration/MigrateFromDevice.kt @@ -413,12 +413,12 @@ private fun MutableState.FinishedView(chatDeletion: Boolean) } ) {} } - SectionTextFooter(annotatedStringResource(MR.strings.migrate_from_device_you_must_not_start_database_on_two_device)) - SectionTextFooter(annotatedStringResource(MR.strings.migrate_from_device_using_on_two_device_breaks_encryption)) if (chatDeletion) { ProgressView() } } + SectionTextFooter(annotatedStringResource(MR.strings.migrate_from_device_you_must_not_start_database_on_two_device)) + SectionTextFooter(annotatedStringResource(MR.strings.migrate_from_device_using_on_two_device_breaks_encryption)) } @Composable diff --git a/plans/2026-06-12-fix-migrate-text-overlap.md b/plans/2026-06-12-fix-migrate-text-overlap.md new file mode 100644 index 0000000000..1bb1d3a5c6 --- /dev/null +++ b/plans/2026-06-12-fix-migrate-text-overlap.md @@ -0,0 +1,71 @@ +# Fix overlapping warning texts after finalizing migration + +Branch: `nd/fix-migrate-text` · regression from PR [#6777](https://github.com/simplex-chat/simplex-chat/pull/6777) (`df5ea3d46`, new settings section design). + +## 1. Problem statement + +On the "Migrate device" screen (Android and desktop), after tapping **Finalize migration** the finished state renders broken: the two warning texts — "You **must not** use the same database on two devices." and "**Please note**: using the same database on two devices will break the decryption of messages…" — are painted on top of each other and on top of the "Migration complete" section card, directly under the section header. + +Reproduced on desktop with default settings. The screen immediately before (`LinkShownView`, with the QR code) renders correctly. + +## 2. Solution summary + +Move the two `SectionTextFooter` calls in `FinishedView` out of the `Box` and place them after it, so they render as sequential children of the screen's scroll `Column` — the same placement `LinkShownView` already uses for its footers. + +```diff + } +- SectionTextFooter(annotatedStringResource(MR.strings.migrate_from_device_you_must_not_start_database_on_two_device)) +- SectionTextFooter(annotatedStringResource(MR.strings.migrate_from_device_using_on_two_device_breaks_encryption)) + if (chatDeletion) { + ProgressView() + } + } ++ SectionTextFooter(annotatedStringResource(MR.strings.migrate_from_device_you_must_not_start_database_on_two_device)) ++ SectionTextFooter(annotatedStringResource(MR.strings.migrate_from_device_using_on_two_device_breaks_encryption)) + } +``` + +Total diff: 1 file, 2 lines moved (+2 / −2 at different indentation). + +## 3. Root cause + +PR #6777 added card chrome to `SectionView` and, in a sub-commit ("Migrate views: move all SectionTextFooter / SectionSpacer out of SectionView lambdas"), moved footers out of the card lambdas so they read as captions below the cards. In `FinishedView` (`MigrateFromDevice.kt`) the footers were moved out of the `SectionView` — but left **inside the wrapping `Box`**: + +```kotlin +Box { + SectionView(stringResource(MR.strings.migrate_from_device_migration_complete)) { + // "Start chat" / "Delete database" buttons + } + SectionTextFooter(…you_must_not_start_database_on_two_device…) // Box child 2 + SectionTextFooter(…using_on_two_device_breaks_encryption…) // Box child 3 + if (chatDeletion) { + ProgressView() // Box child 4 (overlay) + } +} +``` + +That `Box` exists for exactly one reason: to overlay `ProgressView` (a fullscreen-centered spinner) over the section while the chat database is being deleted. `Box` stacks its children at `TopStart`, so both footers render at the Box's top-left corner — over the card's top edge and over each other. This is the only migration sub-view where the refactor produced this shape: the other `Box`-wrapped states keep all flow content inside one child (a `SectionView` or an inner `Column`), and `LinkShownView` has no `Box` at all. + +`FinishedView` is composed inside `ColumnWithScrollBar` (via `SectionByState`), so composables emitted at the function's top level land in the scroll `Column` and stack vertically — which is where the footers belong. + +## 4. The fix in detail, and why this shape + +Three candidate fixes were compared: + +- **Move the 2 footer lines after the `Box`** (chosen). Smallest possible diff, zero re-indentation. Footers become siblings of the Box in the scroll `Column`, identical to the working `LinkShownView` pattern in the same file. `ProgressView` keeps its overlay semantics unchanged (same as `DatabaseInitView`, `ArchivingView`, `LinkCreationView`). Only behavioural delta beyond the bug fix: during the transient `chatDeletion` spinner, the overlay centers over the card rather than card + footers — matching every other migration sub-view. +- **Wrap card + footers in a `Column` inside the Box.** Behaviorally near-identical, but ~40 lines of indentation churn and a layout shape no sibling view uses. Rejected: larger diff, no benefit. +- **Also hoist `ProgressView` out of the Box.** Changes overlay semantics (spinner would flow below content instead of over it). Rejected: touches behavior the bug report doesn't concern. + +Regression risk: the change is placement-only — no logic, no state, no measurement changes. The new arrangement is the proven pattern of the adjacent view. + +## 5. Scope verification — no other instances of the bug class + +The class ("flow content as direct children of an overlay `Box`") was searched for across all Kotlin source sets (`commonMain`, `androidMain`, `desktopMain`, `android`, `desktop`) with three complementary structural scans: + +1. Every `Box` block with ≥2 stacking flow children (section views, footers, spacers, settings items): **only** `FinishedView`. +2. All 384 footer/spacer call sites classified by nearest enclosing block: the only ones directly inside a `Box` are the two fixed lines. +3. All ~25 composable functions that emit footers at function top level (placement decided by caller): no caller invokes them inside a `Box`. + +iOS is structurally immune: SwiftUI footers are part of `Section { } footer: { }` inside a `List`; `MigrateFromDevice.swift`'s `finishedView` was verified correct. + +Related but distinct (not fixed here): 10 `SectionTextFooter` calls app-wide still sit *inside* `SectionView` card lambdas (6 in migration views, plus `LinkAMobileView`, `ConnectMobileView`, 2 in `NetworkAndServers`), rendering inside the white card instead of as captions below it. Cosmetic placement inconsistency with #6777's stated pattern, no overlap — left for a separate change if desired. From cf6a60882f0aca2b19f719248d151f8e9cec1acf Mon Sep 17 00:00:00 2001 From: Narasimha-sc <166327228+Narasimha-sc@users.noreply.github.com> Date: Wed, 17 Jun 2026 18:22:34 +0000 Subject: [PATCH 27/81] Fix IndexOutOfBounds crash when sending media with an undecodable preview (#7050) * android, desktop: skip media with no decodable preview to fix IndexOutOfBounds on send processPickedMedia appended to MediaPreview.content unconditionally for videos (and size-ok animated images) but only appended to images when a preview bitmap existed. getBitmapFromVideo returns a null preview for undecodable/corrupted videos without throwing, desyncing the two lists; sendMessageAsync then indexes images[index] past its end and crashes. Pair both appends behind a non-null bitmap so the lists stay equal-length and index-aligned, and skip only the bad item so the rest of the picked batch still sends. A video skipped this way shows showVideoDecodingException(), guarded by hasAlertsShown() so it neither stacks across multiple bad items nor duplicates the alert already shown on getBitmapFromVideo's exception path. Image decode failures are already surfaced earlier by getBitmapFromUri. * docs: add plan justifying media preview alignment fix --- .../simplex/common/views/chat/ComposeView.kt | 24 ++++- ...-06-04-fix-corrupted-video-upload-error.md | 100 ++++++++++++++++++ 2 files changed, 119 insertions(+), 5 deletions(-) create mode 100644 plans/2026-06-04-fix-corrupted-video-upload-error.md diff --git a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/ComposeView.kt b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/ComposeView.kt index 3ae7f9d55b..21290b99b8 100644 --- a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/ComposeView.kt +++ b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/ComposeView.kt @@ -330,7 +330,7 @@ suspend fun MutableState.processPickedMedia(uris: List, text: val imagesPreview = ArrayList() uris.forEach { uri -> var bitmap: ImageBitmap? - when { + val uploadContent: UploadContent? = when { isImage(uri) -> { // Image val drawable = getDrawableFromUri(uri) @@ -340,16 +340,19 @@ suspend fun MutableState.processPickedMedia(uris: List, text: // It's a gif or webp val fileSize = getFileSize(uri) if (fileSize != null && fileSize <= maxFileSize) { - content.add(UploadContent.AnimatedImage(uri)) + UploadContent.AnimatedImage(uri) } else { bitmap = null AlertManager.shared.showAlertMsg( generalGetString(MR.strings.large_file), String.format(generalGetString(MR.strings.maximum_supported_file_size), formatBytes(maxFileSize)) ) + null } } else if (bitmap != null) { - content.add(UploadContent.SimpleImage(uri)) + UploadContent.SimpleImage(uri) + } else { + null } } else -> { @@ -357,11 +360,22 @@ suspend fun MutableState.processPickedMedia(uris: List, text: val res = getBitmapFromVideo(uri, withAlertOnException = true) bitmap = res.preview val durationMs = res.duration - content.add(UploadContent.Video(uri, durationMs?.div(1000)?.toInt() ?: 0)) + UploadContent.Video(uri, durationMs?.div(1000)?.toInt() ?: 0) } } - if (bitmap != null) { + // content and imagesPreview must stay index-aligned and equal-length: both consumers + // (ComposeImageView and sendMessageAsync) cross-index one list by the other's index. + // Only pair them when a preview bitmap exists; otherwise skip the media entirely. + if (bitmap != null && uploadContent != null) { + content.add(uploadContent) imagesPreview.add(resizeImageToStrSize(bitmap, maxDataSize = 14000)) + } else if (uploadContent is UploadContent.Video && !AlertManager.shared.hasAlertsShown()) { + // A corrupted/undecodable video can yield a null preview frame without throwing, so + // getBitmapFromVideo shows no alert. Skip it (other picked media still send) and tell + // the user instead of dropping it silently. hasAlertsShown guards against stacking the + // alert across multiple bad items and against duplicating the one already shown on the + // exception path. Image decode failures are already surfaced by getBitmapFromUri above. + showVideoDecodingException() } } if (imagesPreview.isNotEmpty()) { diff --git a/plans/2026-06-04-fix-corrupted-video-upload-error.md b/plans/2026-06-04-fix-corrupted-video-upload-error.md new file mode 100644 index 0000000000..e88e781a5d --- /dev/null +++ b/plans/2026-06-04-fix-corrupted-video-upload-error.md @@ -0,0 +1,100 @@ +# Fix: IndexOutOfBoundsException when uploading media with an undecodable preview + +## Symptom + +``` +java.lang.IndexOutOfBoundsException: Index 6 out of bounds for length 6 + at java.util.ArrayList.get(ArrayList.java:434) + at chat.simplex.common.views.chat.ComposeViewKt.ComposeView$sendMessageAsync(ComposeView.kt:827) + ... +``` + +The crash fires when sending a batch of picked media (e.g. 7 items) in which at least +one item produces no preview bitmap — most commonly a corrupted or unusual video whose +first frame cannot be extracted. + +## Root cause + +`ComposePreview.MediaPreview` carries two parallel lists that are assumed to be +**equal-length and index-aligned**: + +```kotlin +class MediaPreview(val images: List, val content: List) +``` + +Both consumers cross-index one list by the other's index, so the invariant is load-bearing: + +- `ComposeImageView` (preview row) iterates `media.images` and reads `media.content[index]`. +- `ComposeView.sendMessageAsync` iterates `preview.content` and reads `preview.images[index]` + (the `MCImage` / `MCVideo` preview string). This is the crash site. + +`processPickedMedia` built the two lists out of step: + +- `imagesPreview` was appended **only when `bitmap != null`**. +- `content` was appended **unconditionally** for videos, and for animated images that + passed the size check — regardless of whether a preview bitmap was produced. + +`getBitmapFromVideo` returns `PreviewAndDuration(null, …)` whenever Android's +`MediaMetadataRetriever` cannot extract a frame, **even when no exception is thrown** +(`Utils.android.kt:351`). So a single undecodable video appends to `content` but not to +`images`, leaving `content.size == images.size + 1`. Iterating `content` then indexes +`images[lastIndex+1]` → `Index N out of bounds for length N`. + +This is a pre-existing bug in the shared media picker; it is unrelated to any in-flight +feature work and reproduces on both Android and Desktop (both use the `commonMain` +`processPickedMedia`). + +## Fix + +Keep `content` and `imagesPreview` strictly paired at the source. The `when` now yields an +`UploadContent?` instead of mutating `content` inside its branches, and both lists are +appended together, gated on a non-null preview bitmap: + +```kotlin +if (bitmap != null && uploadContent != null) { + content.add(uploadContent) + imagesPreview.add(resizeImageToStrSize(bitmap, maxDataSize = 14000)) +} +``` + +Each iteration now adds exactly zero or one entry to **both** lists, so the +equal-length / index-aligned invariant holds by construction. + +### Behavior change + +Media that yields no decodable preview frame is now **skipped** rather than enqueued. +Previously such a video crashed the send; now only the bad item is dropped and the rest of +the picked batch sends normally (the loop evaluates each URI independently). + +The skip is **not silent**. A skipped video shows `showVideoDecodingException()`, gated on +`AlertManager.hasAlertsShown()` so the alert neither stacks across several bad items in one +batch nor duplicates the one `getBitmapFromVideo` already shows on its exception path. The +genuinely silent gap this closes is the video path that returns a null frame **without** +throwing (Android `getFrameAtTime` returns null; Desktop snapshot times out) — that path +previously produced no alert and then crashed on send. + +Image decode failures need no new alert here: `getBitmapFromUri` is already called for every +image (animated or not) with `withAlertOnException = !hasAlertsShown()`, so a null image +bitmap is surfaced before this point. Only the video null-frame case lacked any notice. + +## Why this approach + +- **Fixes the invariant at its origin** rather than papering over it at the two read + sites. Guarding `images[index]` in `sendMessageAsync` would stop the crash but leave the + preview row (`ComposeImageView`) silently mismatched and the actual media set ambiguous. +- **Minimal, surgical diff** confined to `processPickedMedia`; no API/type changes, no new + placeholder assets, no touch to the read sites. +- **Cross-platform by construction**: the change lives in `commonMain`, so Android and + Desktop are both covered. iOS has a separate Swift compose implementation and is out of + scope for this fix. + +## Other `MediaPreview` construction sites (verified aligned) + +- `cs.preview` → single-element `listOf(mc.image)` / `listOf(content)` (edit path): aligned. +- `constructFailedMessage` takes `last()` of each list: aligned if the input was aligned. + +## Test notes + +Manual repro: pick a multi-item batch including a corrupted/zero-frame video and send. +- Before: `IndexOutOfBoundsException` on send. +- After: the undecodable item is dropped; remaining media sends normally. From e60a012d22119b4e22753135ad01252c505c9ecf Mon Sep 17 00:00:00 2001 From: Narasimha-sc <166327228+Narasimha-sc@users.noreply.github.com> Date: Wed, 17 Jun 2026 18:23:41 +0000 Subject: [PATCH 28/81] android, desktop: fix lag when closing support chat in large groups (#7061) In groups and channels with thousands of members, opening any screen that shows the member list could briefly freeze the app. The most noticeable case was the "Chats with members" screen: closing a member's chat and returning to the list reloaded everyone and stuttered each time. The app was re-checking every member against every other member while loading the list - work that grows with the square of the group size, so it got dramatically slower as groups grew. It now does this in a single pass, so member lists, @-mentions, channel relays and adding members all stay responsive even in very large groups. You see exactly the same members, in the same order - just without the lag. --- .../views/chatlist/ChatListNavLinkView.kt | 4 +- ...2026-06-09-perf-group-members-merge-on2.md | 95 +++++++++++++++++++ 2 files changed, 97 insertions(+), 2 deletions(-) create mode 100644 plans/2026-06-09-perf-group-members-merge-on2.md diff --git a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chatlist/ChatListNavLinkView.kt b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chatlist/ChatListNavLinkView.kt index 7dfb52063e..ca1528a3ce 100644 --- a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chatlist/ChatListNavLinkView.kt +++ b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chatlist/ChatListNavLinkView.kt @@ -254,9 +254,9 @@ suspend fun apiFindMessages(chatsCtx: ChatModel.ChatsContext, ch: Chat, contentT suspend fun setGroupMembers(rhId: Long?, groupInfo: GroupInfo, chatModel: ChatModel) = coroutineScope { // groupMembers loading can take a long time and if the user already closed the screen, coroutine may be canceled val groupMembers = chatModel.controller.apiListMembers(rhId, groupInfo.groupId) - val currentMembers = chatModel.groupMembers.value + val currentMembersById = chatModel.groupMembers.value.associateBy { it.id } val newMembers = groupMembers.map { newMember -> - val currentMember = currentMembers.find { it.id == newMember.id } + val currentMember = currentMembersById[newMember.id] val currentMemberStats = currentMember?.activeConn?.connectionStats val newMemberConn = newMember.activeConn if (currentMemberStats != null && newMemberConn != null && newMemberConn.connectionStats == null) { diff --git a/plans/2026-06-09-perf-group-members-merge-on2.md b/plans/2026-06-09-perf-group-members-merge-on2.md new file mode 100644 index 0000000000..3000103b05 --- /dev/null +++ b/plans/2026-06-09-perf-group-members-merge-on2.md @@ -0,0 +1,95 @@ +# Perf — index member merge in `setGroupMembers` to O(n) + +**PR:** #7061 (`nd/group-members-merge-on2`) +**Scope:** client-only (multiplatform: android + desktop). One-line change, no behavioral change. +**File:** `apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chatlist/ChatListNavLinkView.kt:254` + +## Root cause (verified) + +`setGroupMembers` is the shared loader for the in-memory member list. After fetching +members from core (`apiListMembers`) it merges the freshly-loaded list with the +connection stats already held in memory, so an in-flight `connectionStats` isn't lost +when the list is reloaded — `ChatListNavLinkView.kt:257-267`: + +```kotlin +val currentMembers = chatModel.groupMembers.value +val newMembers = groupMembers.map { newMember -> + val currentMember = currentMembers.find { it.id == newMember.id } // O(n) scan, inside an O(n) map → O(n²) + ... +} +``` + +Two compounding costs: + +1. **O(n²) merge.** `currentMembers.find { it.id == newMember.id }` is a linear scan + run once per new member — `n` lookups × `n` scan = O(n²). +2. **~n² String allocations + GC pressure.** `GroupMember.id` is a *computed* property, + not a stored field — `ChatModel.kt:2424`: + + ```kotlin + val id: String get() = "#$groupId @$groupMemberId" + ``` + + Every `it.id` and `newMember.id` access allocates a fresh `String`. The nested + `find` evaluates `it.id` for (worst case) every current member on every iteration, + so the merge allocates on the order of n² short-lived strings, each compared by + value. In groups with thousands of members this is a visible main-thread lag spike. + +## Worst case observed + +`setGroupMembers` reloads `chatModel.groupMembers` (and runs the merge) whenever the +member list is (re)loaded while members are already in memory. The most noticeable +case: the **Chats with members** support-chat modal (`MemberSupportView`) reloads the +whole list via `LaunchedEffect(Unit) { setGroupMembers(...) }` every time it (re)enters +composition — e.g. after reading and closing a member's support chat — so it pays the +full O(n²) merge and produces a lag spike on close in large groups +(`MemberSupportView.kt:44`). + +## The fix (minimal — one change) + +Index the current members by id **once**, then look up in O(1): + +```kotlin +val currentMembersById = chatModel.groupMembers.value.associateBy { it.id } +val newMembers = groupMembers.map { newMember -> + val currentMember = currentMembersById[newMember.id] + ... +} +``` + +- `associateBy { it.id }` builds the index in a single O(n) pass; each subsequent + lookup is O(1). Total merge cost drops from O(n²) to O(n). +- String allocations drop from ~n² to ~2n (one `it.id` per current member while + building the map, one `newMember.id` per lookup). + +## Why it's safe (no behavioral change) + +- **Member ids are unique** — `id = "#$groupId @$groupMemberId"` is unique per member + within a group, and `setGroupMembers` always works within a single `groupInfo`. So + `associateBy { it.id }` cannot collide; `map[id]` returns exactly what + `find { it.id == id }` returned. +- Same result set, same merged `GroupMember` objects, same order of `newMembers` + (the `map` over `groupMembers` is unchanged). Only the lookup strategy changes. +- Everything downstream of the merge is untouched — `groupMembersIndexes`, + `groupMembers.value`, `membersLoaded`, `populateGroupMembersIndexes()` + (`ChatListNavLinkView.kt:268-271`). + +## Also sped up (same shared loader) + +`setGroupMembers` is the common in-memory member loader, called from several screens; +all of them get the same speedup in large groups (identical results, just O(n)): + +- Group member list / member management — `GroupChatInfoView` (`:121, :1250, :1267`) +- @-mention autocomplete — `GroupMentions` (`:119, :134`) +- Channel relays — `ChannelRelaysView` (`:38, :124`) +- Add members — `AddGroupView` (`:52`) +- The group chat's member load on open — `ChatView` (multiple sites) +- Chats with members — `MemberSupportView` (`:45, :67`) + +## Verification + +- Reasoned: ids unique within a group → `associateBy`/lookup is semantically identical + to the linear `find`. No caller observes a difference. +- Manual: open **Chats with members** in a large group, read and close a member's + support chat repeatedly — the lag spike on close should be gone. Member list, + @-mentions, relays, and add-members screens should remain identical, just faster. From feebefcdd7b40af665bded0b6a6c5edd80aec3b5 Mon Sep 17 00:00:00 2001 From: Narasimha-sc <166327228+Narasimha-sc@users.noreply.github.com> Date: Wed, 17 Jun 2026 18:27:55 +0000 Subject: [PATCH 29/81] Fix close icon hidden by long file name in compose file preview (#7077) A long file name took all the row width and squeezed the cancel (X) icon to zero, so the file could not be dismissed before sending. Give the file-name text the layout weight and a single line (Compose), and lineLimit(1) on iOS, so it truncates and the close icon keeps its space. Affects Android, Desktop and iOS. --- .../Chat/ComposeMessage/ComposeFileView.swift | 1 + .../common/views/chat/ComposeFileView.kt | 3 +- plans/2026-06-15-fix-file-upload-long-name.md | 77 +++++++++++++++++++ 3 files changed, 79 insertions(+), 2 deletions(-) create mode 100644 plans/2026-06-15-fix-file-upload-long-name.md diff --git a/apps/ios/Shared/Views/Chat/ComposeMessage/ComposeFileView.swift b/apps/ios/Shared/Views/Chat/ComposeMessage/ComposeFileView.swift index 1ec46816f5..4b9169c72a 100644 --- a/apps/ios/Shared/Views/Chat/ComposeMessage/ComposeFileView.swift +++ b/apps/ios/Shared/Views/Chat/ComposeMessage/ComposeFileView.swift @@ -23,6 +23,7 @@ struct ComposeFileView: View { .foregroundColor(Color(uiColor: .tertiaryLabel)) .padding(.leading, 4) Text(fileName) + .lineLimit(1) Spacer() if cancelEnabled { Button { cancelFile() } label: { diff --git a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/ComposeFileView.kt b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/ComposeFileView.kt index 7ab7963547..26e069c739 100644 --- a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/ComposeFileView.kt +++ b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/ComposeFileView.kt @@ -33,8 +33,7 @@ fun ComposeFileView(fileName: String, cancelFile: () -> Unit, cancelEnabled: Boo .size(36.dp), tint = if (isInDarkTheme()) FileDark else FileLight ) - Text(fileName) - Spacer(Modifier.weight(1f)) + Text(fileName, maxLines = 1, modifier = Modifier.weight(1f)) if (cancelEnabled) { IconButton(onClick = cancelFile, modifier = Modifier.padding(0.dp)) { Icon( diff --git a/plans/2026-06-15-fix-file-upload-long-name.md b/plans/2026-06-15-fix-file-upload-long-name.md new file mode 100644 index 0000000000..f0917783bd --- /dev/null +++ b/plans/2026-06-15-fix-file-upload-long-name.md @@ -0,0 +1,77 @@ +# Fix: long file name hides the close icon in the compose file preview + +Date: 2026-06-15 +Branch: `nd/fix-file-upload-with-long-name` +Platforms affected: Android, Desktop, iOS + +## Problem + +When a file is attached for sending, the compose area shows a preview row with the +file icon, the file name, and a close (X) icon to cancel/remove the file before +sending. If the file name is long, the close icon is not shown, so the user cannot +dismiss the attachment. + +## Cause + +The bug is the same layout defect on both codebases: the file-name text is +unconstrained, so a long name consumes all horizontal space and squeezes the +trailing close button to zero width. + +### Android / Desktop — `ComposeFileView.kt` + +The row was laid out as: + +``` +Icon(fixed) | Text(fileName) | Spacer(weight 1f) | IconButton(close) + ^ unweighted, no maxLines +``` + +In a Compose `Row`, unweighted children are measured first and take the remaining +width before weighted children get anything. The unweighted `Text` therefore grabbed +the whole remaining width on a long name, leaving the weighted `Spacer` — and the +`IconButton` after it — with ~0 width. The flexible element was the `Spacer`, but a +`Spacer` can only distribute the space the rigid `Text` did not already eat. + +### iOS — `ComposeFileView.swift` + +``` +Image(fixed) | Text(fileName) | Spacer() | Button(close) + ^ no lineLimit +``` + +A `Text` with no `lineLimit` reports its full single-line ideal width and refuses to +truncate, so a long name collapses the `Spacer` and pushes the `Button` past the +`.frame(maxWidth: .infinity)` edge, off-screen. + +## Fix + +Make the file name the element that yields space and let it truncate, so the +fixed-size close control's space is always reserved. + +- **Kotlin:** give the `Text` the `weight(1f)` (instead of the `Spacer`) and + `maxLines = 1`, and drop the now-redundant `Spacer`. This matches the existing + idiom — `ComposeImageView` puts `weight(1f)` on its content, and `CIFileView` + caps file-name text with `maxLines = 1`. +- **Swift:** add `.lineLimit(1)` to the `Text`, so it truncates instead of + overflowing, matching how file names are shown elsewhere on iOS. + +## Why this is the right fix (not a workaround) + +`ComposeFileView` was the only compose preview that gave the weight to a `Spacer` +rather than to its content; every sibling preview (`ComposeImageView`, +`ContextItemView`) reserves space for the trailing close control by weighting the +content. The change brings the file preview in line with the established pattern +rather than adding a special case. It is purely structural — no behavior changes +beyond layout. + +## Scope / risk + +- One-spot edit per file; no API or behavior change. +- Android and Desktop share the Kotlin file, so both are fixed together; iOS is the + separate Swift file. +- No string/translation keys touched. + +## Verification + +- Visual: attach a file with a very long name on Android, Desktop, and iOS; confirm + the name truncates and the close (X) icon stays visible and tappable. From 72e6a696ebd9c80237d0afb66d0d53291d9eac8a Mon Sep 17 00:00:00 2001 From: spaced4ndy <8711996+spaced4ndy@users.noreply.github.com> Date: Thu, 18 Jun 2026 07:00:21 +0000 Subject: [PATCH 30/81] ui: enable relay management (#7094) --- .../Views/Chat/Group/ChannelRelaysView.swift | 62 +++++++++---------- .../Chat/Group/GroupMemberInfoView.swift | 3 +- .../views/chat/group/ChannelRelaysView.kt | 6 -- .../views/chat/group/GroupMemberInfoView.kt | 3 +- 4 files changed, 31 insertions(+), 43 deletions(-) diff --git a/apps/ios/Shared/Views/Chat/Group/ChannelRelaysView.swift b/apps/ios/Shared/Views/Chat/Group/ChannelRelaysView.swift index 27935768e3..aa94f5b346 100644 --- a/apps/ios/Shared/Views/Chat/Group/ChannelRelaysView.swift +++ b/apps/ios/Shared/Views/Chat/Group/ChannelRelaysView.swift @@ -24,26 +24,24 @@ struct ChannelRelaysView: View { var body: some View { List { relaysList() - // TODO [relays] re-enable when relay management ships - // if groupInfo.isOwner { - // Section { - // Button { - // showAddRelay = true - // } label: { - // Label("Add relay", systemImage: "plus") - // } - // } - // } + if groupInfo.isOwner { + Section { + Button { + showAddRelay = true + } label: { + Label("Add relay", systemImage: "plus") + } + } + } + } + .sheet(isPresented: $showAddRelay) { + // Backend gate (APIAddGroupRelays) rejects any chatRelayId already in group_relays + // regardless of relayStatus, so all current rows must be excluded from the add list. + let existingRelayIds = Set(groupRelays.compactMap { $0.userChatRelay.chatRelayId }) + AddGroupRelayView(groupInfo: groupInfo, existingRelayIds: existingRelayIds) { + Task { await chatModel.loadGroupMembers(groupInfo) } + } } - // TODO [relays] re-enable when relay management ships - // .sheet(isPresented: $showAddRelay) { - // // Backend gate (APIAddGroupRelays) rejects any chatRelayId already in group_relays - // // regardless of relayStatus, so all current rows must be excluded from the add list. - // let existingRelayIds = Set(groupRelays.compactMap { $0.userChatRelay.chatRelayId }) - // AddGroupRelayView(groupInfo: groupInfo, existingRelayIds: existingRelayIds) { - // Task { await chatModel.loadGroupMembers(groupInfo) } - // } - // } .onAppear { Task { await chatModel.loadGroupMembers(groupInfo) @@ -82,20 +80,18 @@ struct ChannelRelaysView: View { : subscriberRelayStatusText(member.wrapped) relayMemberRow(member.wrapped, statusText: statusText) } - // TODO [relays] re-enable when relay management ships - // if groupInfo.isOwner && member.wrapped.canBeRemoved(groupInfo: groupInfo) { - // link.swipeActions(edge: .trailing) { - // Button { - // showRemoveMemberAlert(groupInfo, member.wrapped) - // } label: { - // Label("Remove relay", systemImage: "trash") - // } - // .tint(.red) - // } - // } else { - // link - // } - link + if groupInfo.isOwner && member.wrapped.canBeRemoved(groupInfo: groupInfo) { + link.swipeActions(edge: .trailing) { + Button { + showRemoveMemberAlert(groupInfo, member.wrapped) + } label: { + Label("Remove relay", systemImage: "trash") + } + .tint(.red) + } + } else { + link + } } } footer: { Text("Chat relays forward messages to channel subscribers.") diff --git a/apps/ios/Shared/Views/Chat/Group/GroupMemberInfoView.swift b/apps/ios/Shared/Views/Chat/Group/GroupMemberInfoView.swift index 28693e8d8a..2f37e3d822 100644 --- a/apps/ios/Shared/Views/Chat/Group/GroupMemberInfoView.swift +++ b/apps/ios/Shared/Views/Chat/Group/GroupMemberInfoView.swift @@ -633,8 +633,7 @@ struct GroupMemberInfoView: View { blockForAllButton(mem) } } - // TODO [relays] re-enable when relay management ships - if canRemove && mem.memberRole != .relay { + if canRemove { if mem.memberStatus != .memRemoved && (mem.memberStatus != .memLeft || mem.memberRole == .relay) { removeMemberButton(mem) } else if mem.memberRole != .relay { diff --git a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/group/ChannelRelaysView.kt b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/group/ChannelRelaysView.kt index d99e16d15f..d7ffde71c8 100644 --- a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/group/ChannelRelaysView.kt +++ b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/group/ChannelRelaysView.kt @@ -87,8 +87,6 @@ private fun ChannelRelaysLayout( minHeight = 54.dp, padding = PaddingValues(horizontal = DEFAULT_PADDING) ) { - // TODO [relays] re-enable when relay management ships - /* if (groupInfo.isOwner && member.canBeRemoved(groupInfo)) { DefaultDropdownMenu(showMenu) { ItemAction(generalGetString(MR.strings.button_remove_relay), painterResource(MR.images.ic_delete), color = MaterialTheme.colors.error, onClick = { @@ -97,7 +95,6 @@ private fun ChannelRelaysLayout( }) } } - */ val statusText = if (groupInfo.isOwner) { ownerRelayStatusText(member, groupRelays) } else { @@ -109,8 +106,6 @@ private fun ChannelRelaysLayout( } SectionTextFooter(generalGetString(MR.strings.chat_relays_forward_messages)) } - // TODO [relays] re-enable when relay management ships - /* if (groupInfo.isOwner) { SectionView { SectionItemView(click = { @@ -139,7 +134,6 @@ private fun ChannelRelaysLayout( } } } - */ SectionBottomSpacer() } } diff --git a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/group/GroupMemberInfoView.kt b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/group/GroupMemberInfoView.kt index 2fad3c73f7..8739def3d5 100644 --- a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/group/GroupMemberInfoView.kt +++ b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/group/GroupMemberInfoView.kt @@ -421,8 +421,7 @@ fun GroupMemberInfoLayout( @Composable fun ModeratorDestructiveSection() { val canBlockForAll = member.canBlockForAll(groupInfo) - // TODO [relays] re-enable when relay management ships - val canRemove = member.canBeRemoved(groupInfo) && member.memberRole != GroupMemberRole.Relay + val canRemove = member.canBeRemoved(groupInfo) if (canBlockForAll || canRemove) { SectionDividerSpaced() SectionView { From a6bc9da00964d1879990aa070f98e12f6ae09ed2 Mon Sep 17 00:00:00 2001 From: Evgeny Date: Thu, 18 Jun 2026 08:41:05 +0100 Subject: [PATCH 31/81] web: improve channel layout, fix subscriber count (#7092) * web: improve channel layout * limit link preview width * fix * update subscriber count in relays * catch worker errors --------- Co-authored-by: Evgeny @ SimpleX Chat <259188159+evgeny-simplex@users.noreply.github.com> --- src/Simplex/Chat/Library/Internal.hs | 3 ++ src/Simplex/Chat/Web.hs | 21 ++++++----- website/src/js/channel-preview.jsc | 53 +++++++++++++++++++++++----- 3 files changed, 60 insertions(+), 17 deletions(-) diff --git a/src/Simplex/Chat/Library/Internal.hs b/src/Simplex/Chat/Library/Internal.hs index 086c7e69d5..5439385437 100644 --- a/src/Simplex/Chat/Library/Internal.hs +++ b/src/Simplex/Chat/Library/Internal.hs @@ -1376,6 +1376,9 @@ updatePublicGroupData user gInfo pure (gInfo', gLink) setGroupLinkDataAsync user gInfo' gLink pure gInfo' + | useRelays' gInfo && isRelay (membership gInfo) = do + cxt <- chatStoreCxt + withStore $ \db -> updatePublicMemberCount db cxt user gInfo | otherwise = pure gInfo updateGroupFromLinkData :: User -> GroupInfo -> GroupShortLinkData -> CM (GroupInfo, Bool) diff --git a/src/Simplex/Chat/Web.hs b/src/Simplex/Chat/Web.hs index 2b4fb89137..fc3e4b2a26 100644 --- a/src/Simplex/Chat/Web.hs +++ b/src/Simplex/Chat/Web.hs @@ -26,7 +26,7 @@ where import Control.Concurrent.STM (check, flushTQueue) import Control.Exception (SomeException, catch) import Control.Logger.Simple -import Control.Monad (forM_, void, when) +import Control.Monad import Control.Monad.Except (runExceptT) import Data.Either (rights) import Data.Int (Int64) @@ -42,7 +42,7 @@ import Data.Text (Text) import qualified Data.Text as T import qualified Data.Text.IO as TIO import Data.Time.Clock (UTCTime, getCurrentTime) -import Simplex.Chat.Controller (ChatConfig (..), ChatController (..), CorsOrigin (..), PublishableGroup (..), WebPreviewConfig (..), WebPreviewState (..), mkStoreCxt) +import Simplex.Chat.Controller (ChatController (..), CorsOrigin (..), PublishableGroup (..), WebPreviewConfig (..), WebPreviewState (..), mkStoreCxt) import Simplex.Chat.Markdown (FormattedText (..), MarkdownList, parseMaybeMarkdownList) import Simplex.Chat.Messages ( CChatItem (..), @@ -57,7 +57,7 @@ import Simplex.Chat.Messages ) import Simplex.Chat.Messages.CIContent (ciMsgContent) import Simplex.Chat.Protocol (MsgContent, MsgRef (..), QuotedMsg (..), isReport) -import Simplex.Chat.Store.Groups (getGroupOwners, getRelayPublishableGroups) +import Simplex.Chat.Store.Groups (getGroupOwners, getRelayPublishableGroups, updatePublicMemberCount) import Simplex.Chat.Store.Messages (getGroupWebPreviewItems) import Simplex.Chat.Store.Shared (getGroupInfo) import Simplex.Chat.Types @@ -75,11 +75,11 @@ import Simplex.Chat.Types ) import Simplex.Messaging.Agent.Store.Common (withTransaction) import Simplex.Messaging.Encoding.String (strEncode) -import Simplex.Messaging.Util (safeDecodeUtf8) -import qualified URI.ByteString as U +import Simplex.Messaging.Util (catchOwn, eitherToMaybe, safeDecodeUtf8, tshow) import Simplex.Messaging.Parsers (defaultJSON) import System.Directory (createDirectoryIfMissing, listDirectory, removeFile, renameFile) import System.FilePath (dropExtension, takeExtension, ()) +import qualified URI.ByteString as U import UnliftIO.STM data WebFileInfo = WebFileInfo @@ -135,7 +135,7 @@ webPreviewWorker cfg@WebPreviewConfig {webJsonDir, webCorsFile, webUpdateInterva cleanStaleFiles wps regenerateCors wps seedRoutinePending wps - workerLoop wps + forever $ workerLoop wps `catchOwn` \e -> logError ("web preview worker error: " <> tshow e) where cxt = mkStoreCxt (config cc) @@ -146,7 +146,6 @@ webPreviewWorker cfg@WebPreviewConfig {webJsonDir, webCorsFile, webUpdateInterva renderRoutine noRoutine <- atomically $ S.null <$> readTVar routinePending when noRoutine waitRefresh - workerLoop wps where drainRemovals = atomically (tryReadTQueue filesToRemove) >>= \case Nothing -> pure () @@ -233,6 +232,12 @@ renderGroupPreview WebPreviewConfig {webJsonDir, webPreviewItemCount} cc user gI case publicGroup of Just PublicGroupProfile {publicGroupId, publicGroupAccess} -> do let fName = publicGroupIdFileName publicGroupId <> ".json" + -- backfill the subscriber count for channels created before it was tracked + subscribers <- case publicMemberCount of + Just _ -> pure publicMemberCount + Nothing -> do + g_ <- withTransaction (chatStore cc) (\db -> runExceptT $ updatePublicMemberCount db cxt user gInfo) + pure $ eitherToMaybe g_ >>= \GroupInfo {groupSummary = GroupSummary {publicMemberCount = pmc}} -> pmc (items, owners) <- withTransaction (chatStore cc) $ \db -> do is <- getGroupWebPreviewItems db user gInfo webPreviewItemCount os <- getGroupOwners db cxt user gInfo @@ -246,7 +251,7 @@ renderGroupPreview WebPreviewConfig {webJsonDir, webPreviewItemCount} cc user gI shortDescription = toFormattedText =<< sd, welcomeMessage = toFormattedText =<< wd, members = senders, - subscribers = publicMemberCount, + subscribers, messages = msgs, updatedAt = ts } diff --git a/website/src/js/channel-preview.jsc b/website/src/js/channel-preview.jsc index 5cd4a390cb..b65c781a85 100644 --- a/website/src/js/channel-preview.jsc +++ b/website/src/js/channel-preview.jsc @@ -1,7 +1,7 @@ -#include "simplex-lib.jsc" - (function() { +#include "simplex-lib.jsc" + #include "qrcode.js" const STYLE = ` @@ -290,6 +290,7 @@ const STYLE = ` .simplex-preview-quote-text { font-size: 15px; overflow: hidden; + overflow-wrap: anywhere; display: -webkit-box; -webkit-line-clamp: 2; -webkit-box-orient: vertical; @@ -1051,6 +1052,32 @@ function renderAppBadges(container) { container.appendChild(badges); } +// the QR library only parses hex colors; map 'transparent' (used in dark mode) to a transparent hex +function qrColor(value, fallback) { + value = (value || '').trim(); + if (!value) return fallback; + return value === 'transparent' ? '#0000' : value; +} + +// navigator.clipboard is undefined outside secure contexts; fall back to execCommand +function copyToClipboard(text) { + if (navigator.clipboard && navigator.clipboard.writeText) { + return navigator.clipboard.writeText(text); + } + return new Promise(function(resolve, reject) { + const ta = document.createElement('textarea'); + ta.value = text; + ta.style.position = 'fixed'; + ta.style.top = '-9999px'; + document.body.appendChild(ta); + ta.select(); + let ok = false; + try { ok = document.execCommand('copy'); } catch (e) {} + document.body.removeChild(ta); + ok ? resolve() : reject(new Error('copy failed')); + }); +} + function renderDesktopConversion(container, channelLink, showAppBadges) { if (showAppBadges) { renderAppBadges(container); @@ -1093,8 +1120,8 @@ function renderDesktopConversion(container, channelLink, showAppBadges) { QRCode.toCanvas(canvas, channelLink, { errorCorrectionLevel: 'M', color: { - dark: cs.getPropertyValue('--sp-qr-fg').trim() || '#062D56', - light: cs.getPropertyValue('--sp-qr-bg').trim() || '#ffffff' + dark: qrColor(cs.getPropertyValue('--sp-qr-fg'), '#062D56'), + light: qrColor(cs.getPropertyValue('--sp-qr-bg'), '#ffffff') }, width: 400, margin: 1 @@ -1102,12 +1129,14 @@ function renderDesktopConversion(container, channelLink, showAppBadges) { canvas.style.width = '200px'; canvas.style.height = '200px'; }).catch(function() { + canvas._rendered = false; qrPopup.style.display = 'none'; - qrToggle.style.display = 'none'; + qrToggle.style.display = ''; }); } catch(err) { + canvas._rendered = false; qrPopup.style.display = 'none'; - qrToggle.style.display = 'none'; + qrToggle.style.display = ''; } } } else { @@ -1123,10 +1152,10 @@ function renderDesktopConversion(container, channelLink, showAppBadges) { const copyLink = document.createElement('a'); copyLink.textContent = 'copy link'; copyLink.addEventListener('click', function() { - navigator.clipboard.writeText(channelLink).then(function() { + copyToClipboard(channelLink).then(function() { copyLink.textContent = 'Copied!'; setTimeout(function() { copyLink.textContent = 'copy link'; }, 2000); - }); + }).catch(function() {}); }); copyAction.appendChild(document.createTextNode('Or ')); copyAction.appendChild(copyLink); @@ -1341,7 +1370,11 @@ function renderQuote(quote, membersMap, channel) { function classifyImage(img) { const w = img.naturalWidth; const h = img.naturalHeight; - img.classList.add(w * 0.97 <= h ? 'portrait' : 'landscape'); + const portrait = w * 0.97 <= h; + img.classList.add(portrait ? 'portrait' : 'landscape'); + // constrain the bubble to the image width so long text wraps instead of widening the bubble + const inner = img.closest('.simplex-preview-bubble-inner'); + if (inner) inner.style.maxWidth = portrait ? '300px' : '400px'; } function renderImageContent(inner, mc, msg, mediaOnly) { @@ -1395,6 +1428,8 @@ function renderVideoContent(inner, mc, msg, mediaOnly) { function renderLinkContent(bubble, mc, msg) { if (mc.preview) { + // clamp the bubble to the link card width so long text wraps instead of widening the bubble + bubble.style.maxWidth = '400px'; const card = document.createElement('div'); card.className = 'simplex-preview-link-card'; if (isDataImage(mc.preview.image)) { From c6122f96371769f4886e43d3c8608c4684a051db Mon Sep 17 00:00:00 2001 From: Narasimha-sc <166327228+Narasimha-sc@users.noreply.github.com> Date: Thu, 18 Jun 2026 07:44:58 +0000 Subject: [PATCH 32/81] android, desktop, ios: show clear error when saving group profile fails (#7090) The API.Error branch in apiUpdateGroup rendered "$r.err", printing the API.Error object reference plus a literal ".err" instead of the error message. Use "${r.err.string}" so the actual error is shown. --- .../chat/simplex/common/model/SimpleXAPI.kt | 2 +- plans/2026-06-17-fix-group-garbled-error.md | 27 +++++++++++++++++++ 2 files changed, 28 insertions(+), 1 deletion(-) create mode 100644 plans/2026-06-17-fix-group-garbled-error.md diff --git a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/model/SimpleXAPI.kt b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/model/SimpleXAPI.kt index 35e92e2cd2..54986e1815 100644 --- a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/model/SimpleXAPI.kt +++ b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/model/SimpleXAPI.kt @@ -2289,7 +2289,7 @@ object ChatController { return when { r is API.Result && r.res is CR.GroupUpdated -> r.res.toGroup r is API.Error -> { - AlertManager.shared.showAlertMsg(generalGetString(errorTitle), "$r.err") + AlertManager.shared.showAlertMsg(generalGetString(errorTitle), "${r.err.string}") null } else -> { diff --git a/plans/2026-06-17-fix-group-garbled-error.md b/plans/2026-06-17-fix-group-garbled-error.md new file mode 100644 index 0000000000..c660d13a48 --- /dev/null +++ b/plans/2026-06-17-fix-group-garbled-error.md @@ -0,0 +1,27 @@ +# Fix garbled error when saving group profile (member admission) + +## Problem + +Saving a group profile change — e.g. enabling member admission (Review = "All") from Group preferences → Member admission — can fail with an unreadable alert: + +``` +chat.simplex.common.model.API$Error@3ea295c.err +``` + +The user sees an object reference instead of the actual error, so there is no way to tell what went wrong. + +## Cause + +In `apiUpdateGroup` the `API.Error` branch builds the alert message with `"$r.err"` (`SimpleXAPI.kt:2292`). In a Kotlin string template `"$r.err"` interpolates `r.toString()` — and `API.Error` has no custom `toString`, so it yields `chat.simplex.common.model.API$Error@` — then appends the literal text `.err`. The meaningful message (`r.err.string`) is never read. + +This surfaces whenever the core rejects the update. A concrete trigger is a **desynced member role**: the client shows the Save controls because `groupInfo.isOwner` is true, but the core's `assertUserGroupRole gInfo GROwner` (`Commands.hs:3840`) disagrees and returns `CEGroupUserRole`. The display bug then hides which error it was. + +## Fix + +Render the error message instead of the object reference: + +```kotlin +AlertManager.shared.showAlertMsg(generalGetString(errorTitle), "${r.err.string}") +``` + +One-line change in `SimpleXAPI.kt`. This is the only occurrence of the `"$r.err"` pattern in the codebase. The underlying core rejection is unchanged — but it is now shown clearly to the user. From 90799ebbc5771966ec087d0edd48a0e0af41dadd Mon Sep 17 00:00:00 2001 From: Evgeny Poberezkin Date: Thu, 18 Jun 2026 09:33:59 +0100 Subject: [PATCH 33/81] docs: update query plans --- .../SQLite/Migrations/chat_query_plans.txt | 51 ++++++++----------- 1 file changed, 21 insertions(+), 30 deletions(-) diff --git a/src/Simplex/Chat/Store/SQLite/Migrations/chat_query_plans.txt b/src/Simplex/Chat/Store/SQLite/Migrations/chat_query_plans.txt index d750be3275..29b4f2b4a3 100644 --- a/src/Simplex/Chat/Store/SQLite/Migrations/chat_query_plans.txt +++ b/src/Simplex/Chat/Store/SQLite/Migrations/chat_query_plans.txt @@ -3711,6 +3711,20 @@ Query: Plan: SEARCH files USING INTEGER PRIMARY KEY (rowid=?) +Query: + SELECT g.group_id, gp.public_group_id, + gp.group_web_page, gp.group_domain, gp.domain_web_page, gp.allow_embedding + FROM groups g + JOIN group_profiles gp ON gp.group_profile_id = g.group_profile_id + JOIN group_members mu ON mu.group_id = g.group_id AND mu.contact_id = ? + WHERE g.user_id = ? AND g.relay_own_status IN (?, ?) + AND gp.public_group_id IS NOT NULL + +Plan: +SEARCH mu USING INDEX idx_group_members_contact_id (contact_id=?) +SEARCH g USING INTEGER PRIMARY KEY (rowid=?) +SEARCH gp USING INTEGER PRIMARY KEY (rowid=?) + Query: SELECT group_member_id FROM group_members @@ -5454,36 +5468,6 @@ SEARCH gp USING INTEGER PRIMARY KEY (rowid=?) SEARCH mu USING INDEX idx_group_members_contact_id (contact_id=?) SEARCH pu USING INTEGER PRIMARY KEY (rowid=?) -Query: - SELECT - -- GroupInfo - g.group_id, g.local_display_name, gp.display_name, gp.full_name, gp.short_descr, g.local_alias, gp.description, gp.image, gp.group_type, gp.group_link, gp.public_group_id, - gp.group_web_page, gp.group_domain, gp.domain_web_page, gp.allow_embedding, - g.enable_ntfs, g.send_rcpts, g.favorite, gp.preferences, gp.member_admission, - g.created_at, g.updated_at, g.chat_ts, g.user_member_profile_sent_at, - g.conn_full_link_to_connect, g.conn_short_link_to_connect, g.conn_link_prepared_connection, g.conn_link_started_connection, g.welcome_shared_msg_id, g.request_shared_msg_id, - g.business_chat, g.business_member_id, g.customer_member_id, - g.use_relays, g.relay_own_status, - g.ui_themes, g.summary_current_members_count, g.public_member_count, g.custom_data, g.chat_item_ttl, g.members_require_attention, g.via_group_link_uri, - g.root_priv_key, g.root_pub_key, g.member_priv_key, - -- GroupMember - membership - mu.group_member_id, mu.group_id, mu.index_in_group, mu.member_id, mu.peer_chat_min_version, mu.peer_chat_max_version, mu.member_role, mu.member_category, - mu.member_status, mu.show_messages, mu.member_restriction, mu.invited_by, mu.invited_by_group_member_id, mu.local_display_name, mu.contact_id, mu.contact_profile_id, pu.contact_profile_id, - pu.display_name, pu.full_name, pu.short_descr, pu.image, pu.contact_link, pu.chat_peer_type, pu.local_alias, pu.preferences, - mu.created_at, mu.updated_at, - mu.support_chat_ts, mu.support_chat_items_unread, mu.support_chat_items_member_attention, mu.support_chat_items_mentions, mu.support_chat_last_msg_from_member_ts, mu.member_pub_key, mu.relay_link - - FROM groups g - JOIN group_profiles gp ON gp.group_profile_id = g.group_profile_id - JOIN group_members mu ON mu.group_id = g.group_id - JOIN contact_profiles pu ON pu.contact_profile_id = COALESCE(mu.member_profile_id, mu.contact_profile_id) - WHERE g.user_id = ? AND mu.contact_id = ? AND g.relay_own_status IN (?, ?) -Plan: -SEARCH mu USING INDEX idx_group_members_contact_id (contact_id=?) -SEARCH g USING INTEGER PRIMARY KEY (rowid=?) -SEARCH gp USING INTEGER PRIMARY KEY (rowid=?) -SEARCH pu USING INTEGER PRIMARY KEY (rowid=?) - Query: SELECT cr.contact_request_id, cr.local_display_name, cr.agent_invitation_id, @@ -5709,6 +5693,7 @@ Query: SELECT m.group_member_id, m.group_id, m.index_in_group, m.member_id, m.peer_chat_min_version, m.peer_chat_max_version, m.member_role, m.member_category, m.member_status, m.show_messages, m.member_restriction, m.invited_by, m.invited_by_group_member_id, m.local_display_name, m.contact_id, m.contact_profile_id, p.contact_profile_id, p.display_name, p.full_name, p.short_descr, p.image, p.contact_link, p.chat_peer_type, p.local_alias, p.preferences, + p.badge_proof, p.badge_pres_header, p.badge_expiry, p.badge_type, p.badge_verified, p.badge_extra, p.badge_master_key, p.badge_signature, p.badge_key_idx, m.created_at, m.updated_at, m.support_chat_ts, m.support_chat_items_unread, m.support_chat_items_member_attention, m.support_chat_items_mentions, m.support_chat_last_msg_from_member_ts, m.member_pub_key, m.relay_link, c.connection_id, c.agent_conn_id, c.conn_level, c.via_contact, c.via_user_contact_link, c.via_group_link, c.group_link_id, c.xcontact_id, c.custom_user_profile_id, @@ -5748,6 +5733,7 @@ Query: SELECT m.group_member_id, m.group_id, m.index_in_group, m.member_id, m.peer_chat_min_version, m.peer_chat_max_version, m.member_role, m.member_category, m.member_status, m.show_messages, m.member_restriction, m.invited_by, m.invited_by_group_member_id, m.local_display_name, m.contact_id, m.contact_profile_id, p.contact_profile_id, p.display_name, p.full_name, p.short_descr, p.image, p.contact_link, p.chat_peer_type, p.local_alias, p.preferences, + p.badge_proof, p.badge_pres_header, p.badge_expiry, p.badge_type, p.badge_verified, p.badge_extra, p.badge_master_key, p.badge_signature, p.badge_key_idx, m.created_at, m.updated_at, m.support_chat_ts, m.support_chat_items_unread, m.support_chat_items_member_attention, m.support_chat_items_mentions, m.support_chat_last_msg_from_member_ts, m.member_pub_key, m.relay_link, c.connection_id, c.agent_conn_id, c.conn_level, c.via_contact, c.via_user_contact_link, c.via_group_link, c.group_link_id, c.xcontact_id, c.custom_user_profile_id, @@ -5787,6 +5773,7 @@ Query: SELECT m.group_member_id, m.group_id, m.index_in_group, m.member_id, m.peer_chat_min_version, m.peer_chat_max_version, m.member_role, m.member_category, m.member_status, m.show_messages, m.member_restriction, m.invited_by, m.invited_by_group_member_id, m.local_display_name, m.contact_id, m.contact_profile_id, p.contact_profile_id, p.display_name, p.full_name, p.short_descr, p.image, p.contact_link, p.chat_peer_type, p.local_alias, p.preferences, + p.badge_proof, p.badge_pres_header, p.badge_expiry, p.badge_type, p.badge_verified, p.badge_extra, p.badge_master_key, p.badge_signature, p.badge_key_idx, m.created_at, m.updated_at, m.support_chat_ts, m.support_chat_items_unread, m.support_chat_items_member_attention, m.support_chat_items_mentions, m.support_chat_last_msg_from_member_ts, m.member_pub_key, m.relay_link, c.connection_id, c.agent_conn_id, c.conn_level, c.via_contact, c.via_user_contact_link, c.via_group_link, c.group_link_id, c.xcontact_id, c.custom_user_profile_id, @@ -7117,6 +7104,10 @@ Query: SELECT relay_own_status FROM groups WHERE group_id = ? Plan: SEARCH groups USING INTEGER PRIMARY KEY (rowid=?) +Query: SELECT relay_sent_web_domain FROM groups WHERE group_id = ? +Plan: +SEARCH groups USING INTEGER PRIMARY KEY (rowid=?) + Query: SELECT relay_status FROM group_relays Plan: SCAN group_relays From 82016921c505b4b7d210b25101fbca1ac0d3c33d Mon Sep 17 00:00:00 2001 From: Evgeny Poberezkin Date: Thu, 18 Jun 2026 09:36:34 +0100 Subject: [PATCH 34/81] core: 7.0.0.0 (simplexmq 7.0.0.0) --- cabal.project | 2 +- scripts/nix/sha256map.nix | 2 +- simplex-chat.cabal | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/cabal.project b/cabal.project index 1768801429..1c7d56ae17 100644 --- a/cabal.project +++ b/cabal.project @@ -21,7 +21,7 @@ constraints: zip +disable-bzip2 +disable-zstd source-repository-package type: git location: https://github.com/simplex-chat/simplexmq.git - tag: e250a9ec9d67143db674bc18edb269b64ec1d397 + tag: 8e0b8de529bcfee3d9c9a8c28b3a039a4644e9ae source-repository-package type: git diff --git a/scripts/nix/sha256map.nix b/scripts/nix/sha256map.nix index 9fab732fca..f03c6071c4 100644 --- a/scripts/nix/sha256map.nix +++ b/scripts/nix/sha256map.nix @@ -1,5 +1,5 @@ { - "https://github.com/simplex-chat/simplexmq.git"."e250a9ec9d67143db674bc18edb269b64ec1d397" = "14wk4knirk9q7jc7ap0yb17shyk4gv866s61diy2pfj57n8v8xr9"; + "https://github.com/simplex-chat/simplexmq.git"."8e0b8de529bcfee3d9c9a8c28b3a039a4644e9ae" = "087s8jrl6237sh7r9c033s19fh600kp7ii350zi833i1fc349w8z"; "https://github.com/simplex-chat/hs-socks.git"."a30cc7a79a08d8108316094f8f2f82a0c5e1ac51" = "0yasvnr7g91k76mjkamvzab2kvlb1g5pspjyjn2fr6v83swjhj38"; "https://github.com/simplex-chat/direct-sqlcipher.git"."f814ee68b16a9447fbb467ccc8f29bdd3546bfd9" = "1ql13f4kfwkbaq7nygkxgw84213i0zm7c1a8hwvramayxl38dq5d"; "https://github.com/simplex-chat/sqlcipher-simple.git"."a46bd361a19376c5211f1058908fc0ae6bf42446" = "1z0r78d8f0812kxbgsm735qf6xx8lvaz27k1a0b4a2m0sshpd5gl"; diff --git a/simplex-chat.cabal b/simplex-chat.cabal index 86350acdd4..d7348f0403 100644 --- a/simplex-chat.cabal +++ b/simplex-chat.cabal @@ -5,7 +5,7 @@ cabal-version: 1.12 -- see: https://github.com/sol/hpack name: simplex-chat -version: 6.5.5.0 +version: 7.0.0.0 category: Web, System, Services, Cryptography homepage: https://github.com/simplex-chat/simplex-chat#readme author: simplex.chat From 431088c6c93724586c507cd787a128916862efdd Mon Sep 17 00:00:00 2001 From: Evgeny Poberezkin Date: Thu, 18 Jun 2026 13:28:17 +0100 Subject: [PATCH 35/81] ios: update core library 7.0.0.0 --- apps/ios/SimpleX.xcodeproj/project.pbxproj | 16 ++++++++-------- 1 file changed, 8 insertions(+), 8 deletions(-) diff --git a/apps/ios/SimpleX.xcodeproj/project.pbxproj b/apps/ios/SimpleX.xcodeproj/project.pbxproj index 0bda968587..ca402c89a0 100644 --- a/apps/ios/SimpleX.xcodeproj/project.pbxproj +++ b/apps/ios/SimpleX.xcodeproj/project.pbxproj @@ -185,8 +185,8 @@ 64C3B0212A0D359700E19930 /* CustomTimePicker.swift in Sources */ = {isa = PBXBuildFile; fileRef = 64C3B0202A0D359700E19930 /* CustomTimePicker.swift */; }; 64C8299D2D54AEEE006B9E89 /* libgmp.a in Frameworks */ = {isa = PBXBuildFile; fileRef = 64C829982D54AEED006B9E89 /* libgmp.a */; }; 64C8299E2D54AEEE006B9E89 /* libffi.a in Frameworks */ = {isa = PBXBuildFile; fileRef = 64C829992D54AEEE006B9E89 /* libffi.a */; }; - 64C8299F2D54AEEE006B9E89 /* libHSsimplex-chat-6.5.4.1-4Ybrr1jdwOoLdJnIO0aOG7-ghc9.6.3.a in Frameworks */ = {isa = PBXBuildFile; fileRef = 64C8299A2D54AEEE006B9E89 /* libHSsimplex-chat-6.5.4.1-4Ybrr1jdwOoLdJnIO0aOG7-ghc9.6.3.a */; }; - 64C829A02D54AEEE006B9E89 /* libHSsimplex-chat-6.5.4.1-4Ybrr1jdwOoLdJnIO0aOG7.a in Frameworks */ = {isa = PBXBuildFile; fileRef = 64C8299B2D54AEEE006B9E89 /* libHSsimplex-chat-6.5.4.1-4Ybrr1jdwOoLdJnIO0aOG7.a */; }; + 64C8299F2D54AEEE006B9E89 /* libHSsimplex-chat-7.0.0.0-GUxceqMje518KOW97higA4-ghc9.6.3.a in Frameworks */ = {isa = PBXBuildFile; fileRef = 64C8299A2D54AEEE006B9E89 /* libHSsimplex-chat-7.0.0.0-GUxceqMje518KOW97higA4-ghc9.6.3.a */; }; + 64C829A02D54AEEE006B9E89 /* libHSsimplex-chat-7.0.0.0-GUxceqMje518KOW97higA4.a in Frameworks */ = {isa = PBXBuildFile; fileRef = 64C8299B2D54AEEE006B9E89 /* libHSsimplex-chat-7.0.0.0-GUxceqMje518KOW97higA4.a */; }; 64C829A12D54AEEE006B9E89 /* libgmpxx.a in Frameworks */ = {isa = PBXBuildFile; fileRef = 64C8299C2D54AEEE006B9E89 /* libgmpxx.a */; }; 64D0C2C029F9688300B38D5F /* UserAddressView.swift in Sources */ = {isa = PBXBuildFile; fileRef = 64D0C2BF29F9688300B38D5F /* UserAddressView.swift */; }; 64D0C2C229FA57AB00B38D5F /* UserAddressLearnMore.swift in Sources */ = {isa = PBXBuildFile; fileRef = 64D0C2C129FA57AB00B38D5F /* UserAddressLearnMore.swift */; }; @@ -565,8 +565,8 @@ 64C3B0202A0D359700E19930 /* CustomTimePicker.swift */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.swift; path = CustomTimePicker.swift; sourceTree = ""; }; 64C829982D54AEED006B9E89 /* libgmp.a */ = {isa = PBXFileReference; lastKnownFileType = archive.ar; path = libgmp.a; sourceTree = ""; }; 64C829992D54AEEE006B9E89 /* libffi.a */ = {isa = PBXFileReference; lastKnownFileType = archive.ar; path = libffi.a; sourceTree = ""; }; - 64C8299A2D54AEEE006B9E89 /* libHSsimplex-chat-6.5.4.1-4Ybrr1jdwOoLdJnIO0aOG7-ghc9.6.3.a */ = {isa = PBXFileReference; lastKnownFileType = archive.ar; path = "libHSsimplex-chat-6.5.4.1-4Ybrr1jdwOoLdJnIO0aOG7-ghc9.6.3.a"; sourceTree = ""; }; - 64C8299B2D54AEEE006B9E89 /* libHSsimplex-chat-6.5.4.1-4Ybrr1jdwOoLdJnIO0aOG7.a */ = {isa = PBXFileReference; lastKnownFileType = archive.ar; path = "libHSsimplex-chat-6.5.4.1-4Ybrr1jdwOoLdJnIO0aOG7.a"; sourceTree = ""; }; + 64C8299A2D54AEEE006B9E89 /* libHSsimplex-chat-7.0.0.0-GUxceqMje518KOW97higA4-ghc9.6.3.a */ = {isa = PBXFileReference; lastKnownFileType = archive.ar; path = "libHSsimplex-chat-7.0.0.0-GUxceqMje518KOW97higA4-ghc9.6.3.a"; sourceTree = ""; }; + 64C8299B2D54AEEE006B9E89 /* libHSsimplex-chat-7.0.0.0-GUxceqMje518KOW97higA4.a */ = {isa = PBXFileReference; lastKnownFileType = archive.ar; path = "libHSsimplex-chat-7.0.0.0-GUxceqMje518KOW97higA4.a"; sourceTree = ""; }; 64C8299C2D54AEEE006B9E89 /* libgmpxx.a */ = {isa = PBXFileReference; lastKnownFileType = archive.ar; path = libgmpxx.a; sourceTree = ""; }; 64D0C2BF29F9688300B38D5F /* UserAddressView.swift */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.swift; path = UserAddressView.swift; sourceTree = ""; }; 64D0C2C129FA57AB00B38D5F /* UserAddressLearnMore.swift */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.swift; path = UserAddressLearnMore.swift; sourceTree = ""; }; @@ -735,8 +735,8 @@ 64C8299D2D54AEEE006B9E89 /* libgmp.a in Frameworks */, 64C8299E2D54AEEE006B9E89 /* libffi.a in Frameworks */, 64C829A12D54AEEE006B9E89 /* libgmpxx.a in Frameworks */, - 64C8299F2D54AEEE006B9E89 /* libHSsimplex-chat-6.5.4.1-4Ybrr1jdwOoLdJnIO0aOG7-ghc9.6.3.a in Frameworks */, - 64C829A02D54AEEE006B9E89 /* libHSsimplex-chat-6.5.4.1-4Ybrr1jdwOoLdJnIO0aOG7.a in Frameworks */, + 64C8299F2D54AEEE006B9E89 /* libHSsimplex-chat-7.0.0.0-GUxceqMje518KOW97higA4-ghc9.6.3.a in Frameworks */, + 64C829A02D54AEEE006B9E89 /* libHSsimplex-chat-7.0.0.0-GUxceqMje518KOW97higA4.a in Frameworks */, CE38A29C2C3FCD72005ED185 /* SwiftyGif in Frameworks */, ); runOnlyForDeploymentPostprocessing = 0; @@ -822,8 +822,8 @@ 64C829992D54AEEE006B9E89 /* libffi.a */, 64C829982D54AEED006B9E89 /* libgmp.a */, 64C8299C2D54AEEE006B9E89 /* libgmpxx.a */, - 64C8299A2D54AEEE006B9E89 /* libHSsimplex-chat-6.5.4.1-4Ybrr1jdwOoLdJnIO0aOG7-ghc9.6.3.a */, - 64C8299B2D54AEEE006B9E89 /* libHSsimplex-chat-6.5.4.1-4Ybrr1jdwOoLdJnIO0aOG7.a */, + 64C8299A2D54AEEE006B9E89 /* libHSsimplex-chat-7.0.0.0-GUxceqMje518KOW97higA4-ghc9.6.3.a */, + 64C8299B2D54AEEE006B9E89 /* libHSsimplex-chat-7.0.0.0-GUxceqMje518KOW97higA4.a */, ); path = Libraries; sourceTree = ""; From 602f17ecfa36056cbdbfb381710291a3ada44013 Mon Sep 17 00:00:00 2001 From: sh <37271604+shumvgolove@users.noreply.github.com> Date: Thu, 18 Jun 2026 17:45:07 +0400 Subject: [PATCH 36/81] ci: fix windows build (#7095) * ci: clean simplexmq submodule source dir on windows build * core: pin simplexmq 7.0.0.1 --- .github/workflows/build.yml | 9 +++++---- cabal.project | 2 +- scripts/nix/sha256map.nix | 2 +- 3 files changed, 7 insertions(+), 6 deletions(-) diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index b89f6ccce0..4e5050fe8f 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -637,7 +637,8 @@ jobs: toolchain:p cmake:p - # rm -rf dist-newstyle/src/direct-sq* is here because of the bug in cabal's dependency which prevents second build from finishing + # rm -rf dist-newstyle/src/{direct-sq,simplexmq}* is here because of the bug in cabal's dependency which prevents second build from finishing + # (simplexmq is removed because cabal cannot delete its read-only git submodule pack files - blst, libbbs - on Windows) - name: Build CLI id: windows_cli_build shell: msys2 {0} @@ -652,10 +653,10 @@ jobs: echo " extra-include-dirs: $openssl_windows_style_path\include" >> cabal.project.local echo " extra-lib-dirs: $openssl_windows_style_path" >> cabal.project.local - rm -rf dist-newstyle/src/direct-sq* + rm -rf dist-newstyle/src/direct-sq* dist-newstyle/src/simplexmq* sed -i "s/, unix /--, unix /" simplex-chat.cabal cabal build -j --enable-tests - rm -rf dist-newstyle/src/direct-sq* + rm -rf dist-newstyle/src/direct-sq* dist-newstyle/src/simplexmq* path=$(cabal list-bin simplex-chat | tail -n 1) echo "bin_path=$path" >> $GITHUB_OUTPUT echo "bin_hash=$(echo SHA2-256\(${{ matrix.cli_asset_name }}\)= $(openssl sha256 $path | cut -d' ' -f 2))" >> $GITHUB_OUTPUT @@ -679,7 +680,7 @@ jobs: scripts/desktop/build-lib-windows.sh cd apps/multiplatform ./gradlew -Psimplex.assets.dir=../../assets packageMsi - rm -rf dist-newstyle/src/direct-sq* + rm -rf dist-newstyle/src/direct-sq* dist-newstyle/src/simplexmq* path=$(echo $PWD/release/main/msi/*imple*.msi | sed 's#/\([a-z]\)#\1:#' | sed 's#/#\\#g') echo "package_path=$path" >> $GITHUB_OUTPUT echo "package_hash=$(echo SHA2-256\(${{ matrix.desktop_asset_name }}\)= $(openssl sha256 $path | cut -d' ' -f 2))" >> $GITHUB_OUTPUT diff --git a/cabal.project b/cabal.project index d6151cc620..1afaa31e25 100644 --- a/cabal.project +++ b/cabal.project @@ -21,7 +21,7 @@ constraints: zip +disable-bzip2 +disable-zstd source-repository-package type: git location: https://github.com/simplex-chat/simplexmq.git - tag: 376d6a261a1074717aed65ad97bb6f2a9532011b + tag: 44898bf7f6079dbd7f501fd62a31d8cf54792a27 source-repository-package type: git diff --git a/scripts/nix/sha256map.nix b/scripts/nix/sha256map.nix index 150a2a4e6f..ebd9d67cc0 100644 --- a/scripts/nix/sha256map.nix +++ b/scripts/nix/sha256map.nix @@ -1,5 +1,5 @@ { - "https://github.com/simplex-chat/simplexmq.git"."376d6a261a1074717aed65ad97bb6f2a9532011b" = "1j83kzjcgjr7ngbamby96r90yal80c6kv79l9shy05mppmp73f4y"; + "https://github.com/simplex-chat/simplexmq.git"."44898bf7f6079dbd7f501fd62a31d8cf54792a27" = "1kwwxq2k819xrahjmjzpgv6pff825qpds4r42qjajj5blhv9h6pc"; "https://github.com/simplex-chat/hs-socks.git"."a30cc7a79a08d8108316094f8f2f82a0c5e1ac51" = "0yasvnr7g91k76mjkamvzab2kvlb1g5pspjyjn2fr6v83swjhj38"; "https://github.com/simplex-chat/direct-sqlcipher.git"."f814ee68b16a9447fbb467ccc8f29bdd3546bfd9" = "1ql13f4kfwkbaq7nygkxgw84213i0zm7c1a8hwvramayxl38dq5d"; "https://github.com/simplex-chat/sqlcipher-simple.git"."a46bd361a19376c5211f1058908fc0ae6bf42446" = "1z0r78d8f0812kxbgsm735qf6xx8lvaz27k1a0b4a2m0sshpd5gl"; From 82b188e25cd61616f95ad029059508d8a4768249 Mon Sep 17 00:00:00 2001 From: Evgeny Poberezkin Date: Thu, 18 Jun 2026 14:47:30 +0100 Subject: [PATCH 37/81] core: 7.0.0.1 --- simplex-chat.cabal | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/simplex-chat.cabal b/simplex-chat.cabal index d7348f0403..db8a65ef5a 100644 --- a/simplex-chat.cabal +++ b/simplex-chat.cabal @@ -5,7 +5,7 @@ cabal-version: 1.12 -- see: https://github.com/sol/hpack name: simplex-chat -version: 7.0.0.0 +version: 7.0.0.1 category: Web, System, Services, Cryptography homepage: https://github.com/simplex-chat/simplex-chat#readme author: simplex.chat From 2825adfdc0391d58a3656ead2648c4459eea3746 Mon Sep 17 00:00:00 2001 From: SimpleX Chat Date: Thu, 18 Jun 2026 16:07:13 +0000 Subject: [PATCH 38/81] 7.0.0-beta.0: android 356, desktop 147, ios 336 --- apps/ios/SimpleX.xcodeproj/project.pbxproj | 56 +++++++++---------- apps/multiplatform/gradle.properties | 8 +-- .../types/typescript/package.json | 2 +- packages/simplex-chat-nodejs/package.json | 4 +- .../simplex-chat-nodejs/src/download-libs.js | 2 +- .../src/simplex_chat/_version.py | 4 +- 6 files changed, 38 insertions(+), 38 deletions(-) diff --git a/apps/ios/SimpleX.xcodeproj/project.pbxproj b/apps/ios/SimpleX.xcodeproj/project.pbxproj index ca402c89a0..0b07f89096 100644 --- a/apps/ios/SimpleX.xcodeproj/project.pbxproj +++ b/apps/ios/SimpleX.xcodeproj/project.pbxproj @@ -185,8 +185,8 @@ 64C3B0212A0D359700E19930 /* CustomTimePicker.swift in Sources */ = {isa = PBXBuildFile; fileRef = 64C3B0202A0D359700E19930 /* CustomTimePicker.swift */; }; 64C8299D2D54AEEE006B9E89 /* libgmp.a in Frameworks */ = {isa = PBXBuildFile; fileRef = 64C829982D54AEED006B9E89 /* libgmp.a */; }; 64C8299E2D54AEEE006B9E89 /* libffi.a in Frameworks */ = {isa = PBXBuildFile; fileRef = 64C829992D54AEEE006B9E89 /* libffi.a */; }; - 64C8299F2D54AEEE006B9E89 /* libHSsimplex-chat-7.0.0.0-GUxceqMje518KOW97higA4-ghc9.6.3.a in Frameworks */ = {isa = PBXBuildFile; fileRef = 64C8299A2D54AEEE006B9E89 /* libHSsimplex-chat-7.0.0.0-GUxceqMje518KOW97higA4-ghc9.6.3.a */; }; - 64C829A02D54AEEE006B9E89 /* libHSsimplex-chat-7.0.0.0-GUxceqMje518KOW97higA4.a in Frameworks */ = {isa = PBXBuildFile; fileRef = 64C8299B2D54AEEE006B9E89 /* libHSsimplex-chat-7.0.0.0-GUxceqMje518KOW97higA4.a */; }; + 64C8299F2D54AEEE006B9E89 /* libHSsimplex-chat-7.0.0.1-7ImjE3hKkx0K479AGK5BI3-ghc9.6.3.a in Frameworks */ = {isa = PBXBuildFile; fileRef = 64C8299A2D54AEEE006B9E89 /* libHSsimplex-chat-7.0.0.1-7ImjE3hKkx0K479AGK5BI3-ghc9.6.3.a */; }; + 64C829A02D54AEEE006B9E89 /* libHSsimplex-chat-7.0.0.1-7ImjE3hKkx0K479AGK5BI3.a in Frameworks */ = {isa = PBXBuildFile; fileRef = 64C8299B2D54AEEE006B9E89 /* libHSsimplex-chat-7.0.0.1-7ImjE3hKkx0K479AGK5BI3.a */; }; 64C829A12D54AEEE006B9E89 /* libgmpxx.a in Frameworks */ = {isa = PBXBuildFile; fileRef = 64C8299C2D54AEEE006B9E89 /* libgmpxx.a */; }; 64D0C2C029F9688300B38D5F /* UserAddressView.swift in Sources */ = {isa = PBXBuildFile; fileRef = 64D0C2BF29F9688300B38D5F /* UserAddressView.swift */; }; 64D0C2C229FA57AB00B38D5F /* UserAddressLearnMore.swift in Sources */ = {isa = PBXBuildFile; fileRef = 64D0C2C129FA57AB00B38D5F /* UserAddressLearnMore.swift */; }; @@ -565,8 +565,8 @@ 64C3B0202A0D359700E19930 /* CustomTimePicker.swift */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.swift; path = CustomTimePicker.swift; sourceTree = ""; }; 64C829982D54AEED006B9E89 /* libgmp.a */ = {isa = PBXFileReference; lastKnownFileType = archive.ar; path = libgmp.a; sourceTree = ""; }; 64C829992D54AEEE006B9E89 /* libffi.a */ = {isa = PBXFileReference; lastKnownFileType = archive.ar; path = libffi.a; sourceTree = ""; }; - 64C8299A2D54AEEE006B9E89 /* libHSsimplex-chat-7.0.0.0-GUxceqMje518KOW97higA4-ghc9.6.3.a */ = {isa = PBXFileReference; lastKnownFileType = archive.ar; path = "libHSsimplex-chat-7.0.0.0-GUxceqMje518KOW97higA4-ghc9.6.3.a"; sourceTree = ""; }; - 64C8299B2D54AEEE006B9E89 /* libHSsimplex-chat-7.0.0.0-GUxceqMje518KOW97higA4.a */ = {isa = PBXFileReference; lastKnownFileType = archive.ar; path = "libHSsimplex-chat-7.0.0.0-GUxceqMje518KOW97higA4.a"; sourceTree = ""; }; + 64C8299A2D54AEEE006B9E89 /* libHSsimplex-chat-7.0.0.1-7ImjE3hKkx0K479AGK5BI3-ghc9.6.3.a */ = {isa = PBXFileReference; lastKnownFileType = archive.ar; path = "libHSsimplex-chat-7.0.0.1-7ImjE3hKkx0K479AGK5BI3-ghc9.6.3.a"; sourceTree = ""; }; + 64C8299B2D54AEEE006B9E89 /* libHSsimplex-chat-7.0.0.1-7ImjE3hKkx0K479AGK5BI3.a */ = {isa = PBXFileReference; lastKnownFileType = archive.ar; path = "libHSsimplex-chat-7.0.0.1-7ImjE3hKkx0K479AGK5BI3.a"; sourceTree = ""; }; 64C8299C2D54AEEE006B9E89 /* libgmpxx.a */ = {isa = PBXFileReference; lastKnownFileType = archive.ar; path = libgmpxx.a; sourceTree = ""; }; 64D0C2BF29F9688300B38D5F /* UserAddressView.swift */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.swift; path = UserAddressView.swift; sourceTree = ""; }; 64D0C2C129FA57AB00B38D5F /* UserAddressLearnMore.swift */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.swift; path = UserAddressLearnMore.swift; sourceTree = ""; }; @@ -735,8 +735,8 @@ 64C8299D2D54AEEE006B9E89 /* libgmp.a in Frameworks */, 64C8299E2D54AEEE006B9E89 /* libffi.a in Frameworks */, 64C829A12D54AEEE006B9E89 /* libgmpxx.a in Frameworks */, - 64C8299F2D54AEEE006B9E89 /* libHSsimplex-chat-7.0.0.0-GUxceqMje518KOW97higA4-ghc9.6.3.a in Frameworks */, - 64C829A02D54AEEE006B9E89 /* libHSsimplex-chat-7.0.0.0-GUxceqMje518KOW97higA4.a in Frameworks */, + 64C8299F2D54AEEE006B9E89 /* libHSsimplex-chat-7.0.0.1-7ImjE3hKkx0K479AGK5BI3-ghc9.6.3.a in Frameworks */, + 64C829A02D54AEEE006B9E89 /* libHSsimplex-chat-7.0.0.1-7ImjE3hKkx0K479AGK5BI3.a in Frameworks */, CE38A29C2C3FCD72005ED185 /* SwiftyGif in Frameworks */, ); runOnlyForDeploymentPostprocessing = 0; @@ -822,8 +822,8 @@ 64C829992D54AEEE006B9E89 /* libffi.a */, 64C829982D54AEED006B9E89 /* libgmp.a */, 64C8299C2D54AEEE006B9E89 /* libgmpxx.a */, - 64C8299A2D54AEEE006B9E89 /* libHSsimplex-chat-7.0.0.0-GUxceqMje518KOW97higA4-ghc9.6.3.a */, - 64C8299B2D54AEEE006B9E89 /* libHSsimplex-chat-7.0.0.0-GUxceqMje518KOW97higA4.a */, + 64C8299A2D54AEEE006B9E89 /* libHSsimplex-chat-7.0.0.1-7ImjE3hKkx0K479AGK5BI3-ghc9.6.3.a */, + 64C8299B2D54AEEE006B9E89 /* libHSsimplex-chat-7.0.0.1-7ImjE3hKkx0K479AGK5BI3.a */, ); path = Libraries; sourceTree = ""; @@ -2081,7 +2081,7 @@ CLANG_TIDY_MISC_REDUNDANT_EXPRESSION = YES; CODE_SIGN_ENTITLEMENTS = "SimpleX (iOS).entitlements"; CODE_SIGN_STYLE = Automatic; - CURRENT_PROJECT_VERSION = 335; + CURRENT_PROJECT_VERSION = 336; DEAD_CODE_STRIPPING = YES; DEVELOPMENT_TEAM = 5NN7GUYB6T; ENABLE_BITCODE = NO; @@ -2106,7 +2106,7 @@ "@executable_path/Frameworks", ); LLVM_LTO = YES_THIN; - MARKETING_VERSION = 6.5.5; + MARKETING_VERSION = 7.0; OTHER_LDFLAGS = "-Wl,-stack_size,0x1000000"; PRODUCT_BUNDLE_IDENTIFIER = chat.simplex.app; PRODUCT_NAME = SimpleX; @@ -2131,7 +2131,7 @@ CLANG_TIDY_MISC_REDUNDANT_EXPRESSION = YES; CODE_SIGN_ENTITLEMENTS = "SimpleX (iOS).entitlements"; CODE_SIGN_STYLE = Automatic; - CURRENT_PROJECT_VERSION = 335; + CURRENT_PROJECT_VERSION = 336; DEAD_CODE_STRIPPING = YES; DEVELOPMENT_TEAM = 5NN7GUYB6T; ENABLE_BITCODE = NO; @@ -2156,7 +2156,7 @@ "@executable_path/Frameworks", ); LLVM_LTO = YES; - MARKETING_VERSION = 6.5.5; + MARKETING_VERSION = 7.0; OTHER_LDFLAGS = "-Wl,-stack_size,0x1000000"; PRODUCT_BUNDLE_IDENTIFIER = chat.simplex.app; PRODUCT_NAME = SimpleX; @@ -2173,11 +2173,11 @@ buildSettings = { ALWAYS_EMBED_SWIFT_STANDARD_LIBRARIES = YES; CODE_SIGN_STYLE = Automatic; - CURRENT_PROJECT_VERSION = 335; + CURRENT_PROJECT_VERSION = 336; DEVELOPMENT_TEAM = 5NN7GUYB6T; GENERATE_INFOPLIST_FILE = YES; IPHONEOS_DEPLOYMENT_TARGET = 15.0; - MARKETING_VERSION = 6.5.5; + MARKETING_VERSION = 7.0; PRODUCT_BUNDLE_IDENTIFIER = "chat.simplex.Tests-iOS"; PRODUCT_NAME = "$(TARGET_NAME)"; SDKROOT = iphoneos; @@ -2193,11 +2193,11 @@ buildSettings = { ALWAYS_EMBED_SWIFT_STANDARD_LIBRARIES = YES; CODE_SIGN_STYLE = Automatic; - CURRENT_PROJECT_VERSION = 335; + CURRENT_PROJECT_VERSION = 336; DEVELOPMENT_TEAM = 5NN7GUYB6T; GENERATE_INFOPLIST_FILE = YES; IPHONEOS_DEPLOYMENT_TARGET = 15.0; - MARKETING_VERSION = 6.5.5; + MARKETING_VERSION = 7.0; PRODUCT_BUNDLE_IDENTIFIER = "chat.simplex.Tests-iOS"; PRODUCT_NAME = "$(TARGET_NAME)"; SDKROOT = iphoneos; @@ -2218,7 +2218,7 @@ CODE_SIGN_ENTITLEMENTS = "SimpleX NSE/SimpleX NSE.entitlements"; CODE_SIGN_IDENTITY = "Apple Development"; CODE_SIGN_STYLE = Automatic; - CURRENT_PROJECT_VERSION = 335; + CURRENT_PROJECT_VERSION = 336; DEVELOPMENT_TEAM = 5NN7GUYB6T; ENABLE_BITCODE = NO; GCC_OPTIMIZATION_LEVEL = s; @@ -2233,7 +2233,7 @@ "@executable_path/../../Frameworks", ); LLVM_LTO = YES; - MARKETING_VERSION = 6.5.5; + MARKETING_VERSION = 7.0; PRODUCT_BUNDLE_IDENTIFIER = "chat.simplex.app.SimpleX-NSE"; PRODUCT_NAME = "$(TARGET_NAME)"; PROVISIONING_PROFILE_SPECIFIER = ""; @@ -2255,7 +2255,7 @@ CODE_SIGN_ENTITLEMENTS = "SimpleX NSE/SimpleX NSE.entitlements"; CODE_SIGN_IDENTITY = "Apple Development"; CODE_SIGN_STYLE = Automatic; - CURRENT_PROJECT_VERSION = 335; + CURRENT_PROJECT_VERSION = 336; DEVELOPMENT_TEAM = 5NN7GUYB6T; ENABLE_BITCODE = NO; ENABLE_CODE_COVERAGE = NO; @@ -2270,7 +2270,7 @@ "@executable_path/../../Frameworks", ); LLVM_LTO = YES; - MARKETING_VERSION = 6.5.5; + MARKETING_VERSION = 7.0; PRODUCT_BUNDLE_IDENTIFIER = "chat.simplex.app.SimpleX-NSE"; PRODUCT_NAME = "$(TARGET_NAME)"; PROVISIONING_PROFILE_SPECIFIER = ""; @@ -2292,7 +2292,7 @@ CLANG_TIDY_BUGPRONE_REDUNDANT_BRANCH_CONDITION = YES; CLANG_TIDY_MISC_REDUNDANT_EXPRESSION = YES; CODE_SIGN_STYLE = Automatic; - CURRENT_PROJECT_VERSION = 335; + CURRENT_PROJECT_VERSION = 336; DEFINES_MODULE = YES; DEVELOPMENT_TEAM = 5NN7GUYB6T; DYLIB_COMPATIBILITY_VERSION = 1; @@ -2318,7 +2318,7 @@ "$(PROJECT_DIR)/Libraries/sim", ); LLVM_LTO = YES; - MARKETING_VERSION = 6.5.5; + MARKETING_VERSION = 7.0; PRODUCT_BUNDLE_IDENTIFIER = chat.simplex.SimpleXChat; PRODUCT_NAME = "$(TARGET_NAME:c99extidentifier)"; SDKROOT = iphoneos; @@ -2343,7 +2343,7 @@ CLANG_TIDY_BUGPRONE_REDUNDANT_BRANCH_CONDITION = YES; CLANG_TIDY_MISC_REDUNDANT_EXPRESSION = YES; CODE_SIGN_STYLE = Automatic; - CURRENT_PROJECT_VERSION = 335; + CURRENT_PROJECT_VERSION = 336; DEFINES_MODULE = YES; DEVELOPMENT_TEAM = 5NN7GUYB6T; DYLIB_COMPATIBILITY_VERSION = 1; @@ -2370,7 +2370,7 @@ "$(PROJECT_DIR)/Libraries/sim", ); LLVM_LTO = YES; - MARKETING_VERSION = 6.5.5; + MARKETING_VERSION = 7.0; PRODUCT_BUNDLE_IDENTIFIER = chat.simplex.SimpleXChat; PRODUCT_NAME = "$(TARGET_NAME:c99extidentifier)"; SDKROOT = iphoneos; @@ -2397,7 +2397,7 @@ CLANG_CXX_LANGUAGE_STANDARD = "gnu++20"; CODE_SIGN_ENTITLEMENTS = "SimpleX SE/SimpleX SE.entitlements"; CODE_SIGN_STYLE = Automatic; - CURRENT_PROJECT_VERSION = 335; + CURRENT_PROJECT_VERSION = 336; DEVELOPMENT_TEAM = 5NN7GUYB6T; ENABLE_USER_SCRIPT_SANDBOXING = YES; GCC_C_LANGUAGE_STANDARD = gnu17; @@ -2412,7 +2412,7 @@ "@executable_path/../../Frameworks", ); LOCALIZATION_PREFERS_STRING_CATALOGS = YES; - MARKETING_VERSION = 6.5.5; + MARKETING_VERSION = 7.0; PRODUCT_BUNDLE_IDENTIFIER = "chat.simplex.app.SimpleX-SE"; PRODUCT_NAME = "$(TARGET_NAME)"; SDKROOT = iphoneos; @@ -2431,7 +2431,7 @@ CLANG_CXX_LANGUAGE_STANDARD = "gnu++20"; CODE_SIGN_ENTITLEMENTS = "SimpleX SE/SimpleX SE.entitlements"; CODE_SIGN_STYLE = Automatic; - CURRENT_PROJECT_VERSION = 335; + CURRENT_PROJECT_VERSION = 336; DEVELOPMENT_TEAM = 5NN7GUYB6T; ENABLE_USER_SCRIPT_SANDBOXING = YES; GCC_C_LANGUAGE_STANDARD = gnu17; @@ -2446,7 +2446,7 @@ "@executable_path/../../Frameworks", ); LOCALIZATION_PREFERS_STRING_CATALOGS = YES; - MARKETING_VERSION = 6.5.5; + MARKETING_VERSION = 7.0; PRODUCT_BUNDLE_IDENTIFIER = "chat.simplex.app.SimpleX-SE"; PRODUCT_NAME = "$(TARGET_NAME)"; SDKROOT = iphoneos; diff --git a/apps/multiplatform/gradle.properties b/apps/multiplatform/gradle.properties index 61c744bf86..5cdd339440 100644 --- a/apps/multiplatform/gradle.properties +++ b/apps/multiplatform/gradle.properties @@ -24,13 +24,13 @@ android.nonTransitiveRClass=true kotlin.mpp.androidSourceSetLayoutVersion=2 kotlin.jvm.target=11 -android.version_name=6.5.5 -android.version_code=355 +android.version_name=7.0-beta.0 +android.version_code=356 android.bundle=false -desktop.version_name=6.5.5 -desktop.version_code=146 +desktop.version_name=7.0-beta.0 +desktop.version_code=147 kotlin.version=2.1.20 gradle.plugin.version=8.7.0 diff --git a/packages/simplex-chat-client/types/typescript/package.json b/packages/simplex-chat-client/types/typescript/package.json index 756e181307..ec3dbd5b07 100644 --- a/packages/simplex-chat-client/types/typescript/package.json +++ b/packages/simplex-chat-client/types/typescript/package.json @@ -1,6 +1,6 @@ { "name": "@simplex-chat/types", - "version": "0.9.0", + "version": "0.10.0", "description": "TypeScript types for SimpleX Chat bot libraries", "main": "dist/index.js", "types": "dist/index.d.ts", diff --git a/packages/simplex-chat-nodejs/package.json b/packages/simplex-chat-nodejs/package.json index 40ef106103..430bafc066 100644 --- a/packages/simplex-chat-nodejs/package.json +++ b/packages/simplex-chat-nodejs/package.json @@ -1,6 +1,6 @@ { "name": "simplex-chat", - "version": "6.5.5", + "version": "7.0.0-beta.0", "main": "dist/index.js", "types": "dist/index.d.ts", "files": [ @@ -24,7 +24,7 @@ "docs": "typedoc" }, "dependencies": { - "@simplex-chat/types": "^0.9.0", + "@simplex-chat/types": "^0.10.0", "extract-zip": "^2.0.1", "fast-deep-equal": "^3.1.3", "node-addon-api": "^8.5.0" diff --git a/packages/simplex-chat-nodejs/src/download-libs.js b/packages/simplex-chat-nodejs/src/download-libs.js index 4fad0f45a9..15d8a9f2b0 100644 --- a/packages/simplex-chat-nodejs/src/download-libs.js +++ b/packages/simplex-chat-nodejs/src/download-libs.js @@ -4,7 +4,7 @@ const path = require('path'); const extract = require('extract-zip'); const GITHUB_REPO = 'simplex-chat/simplex-chat-libs'; -const RELEASE_TAG = 'v6.5.5'; +const RELEASE_TAG = 'v7.0.0-beta.0'; const BACKEND = (process.env.SIMPLEX_BACKEND || process.env.npm_config_simplex_backend || 'sqlite').toLowerCase(); if (BACKEND !== 'sqlite' && BACKEND !== 'postgres') { diff --git a/packages/simplex-chat-python/src/simplex_chat/_version.py b/packages/simplex-chat-python/src/simplex_chat/_version.py index 77acd0e8b3..9dfcf5a88e 100644 --- a/packages/simplex-chat-python/src/simplex_chat/_version.py +++ b/packages/simplex-chat-python/src/simplex_chat/_version.py @@ -5,5 +5,5 @@ Bump both together for normal releases. For wrapper-only fixes use a PEP 440 post-release: __version__ = "6.5.2.post1", LIBS_VERSION unchanged. """ -__version__ = "6.5.5" # PEP 440 — read by hatchling for wheel metadata -LIBS_VERSION = "6.5.5" # simplex-chat-libs release tag (no 'v' prefix) +__version__ = "7.0.0b0" # PEP 440 — read by hatchling for wheel metadata +LIBS_VERSION = "7.0.0-beta.0" # simplex-chat-libs release tag (no 'v' prefix) From 6bd19ab6fd7c6f93fefe9022aa56fc46d15cc43f Mon Sep 17 00:00:00 2001 From: Evgeny Poberezkin Date: Fri, 19 Jun 2026 09:26:51 +0100 Subject: [PATCH 39/81] website: add whitepaper working draft --- website/.eleventy.js | 1 + website/src/credits/whitepaper.pdf | Bin 0 -> 321343 bytes 2 files changed, 1 insertion(+) create mode 100644 website/src/credits/whitepaper.pdf diff --git a/website/.eleventy.js b/website/.eleventy.js index 0567dd45d8..122e5bb673 100644 --- a/website/.eleventy.js +++ b/website/.eleventy.js @@ -326,6 +326,7 @@ module.exports = function (ty) { ty.addPassthroughCopy("src/CNAME") ty.addPassthroughCopy("src/.well-known") ty.addPassthroughCopy("src/file-assets") + ty.addPassthroughCopy("src/credits") ty.addCollection('blogs', function (collection) { return collection.getFilteredByGlob('src/blog/*.md').reverse() diff --git a/website/src/credits/whitepaper.pdf b/website/src/credits/whitepaper.pdf new file mode 100644 index 0000000000000000000000000000000000000000..faf4a42aab4dac9328cee6a2d8a6f684e178c96d GIT binary patch literal 321343 zcmb5VGq^C&vSqt%+qP}n`nPS{wr$(CZQHhOqfhtuvU7v`R#f>)#+X%;R6#_HmXVGf zigbQ?WF3l?fPuiy&=QJ=2Z~Px>X}2K8$6Dn83zFZYMFHAxS2R6!h*i=Ck(oop0AL~%Ed zTu{mM9bOi*7n#NdX#_<|&Nz>%KHN8~_h1n_!Sgn3=Bacu$@vL#w5=z+t_ z@yi4=Q>xeDr}96J%R9{|9Wc(WA@wT*sp6a*MUe7UEHH*esT#O9H_AOtZ{6o$ZOa3h z=JXZ76e(@jv-67aDlI+A-_NRRRLET|6WxcfauN%Lhs)p!CAWvhlSdMN1Tv=I`Jxwf zpM=&VLY*Z}P{MhP?nITgRwy)wa|i$pN<~X-P3h|GjYAarG(M0{P#OWfCo%?CSuMeY z7mGne8M2t=SJ26D(lWq%N_lkRgs@K8#VUp8NNF-ZEe;`iU4w zXPDv9Zp^K>WP2A{o0<$wQw4o#+fP8k+c?((P^* z*?Cwyk>O)V$~7!~rcl^eVe?AFYff!(+(p$3v2%fmE<{7)bc}+6^o~2;=3P_S*_ENf zodWeG){BWuS8ijwiOFb+)kPTpF;RG(#v7Cl=GDaO>eRU5xHuS`uke0EBM*)V!UMYk zftcO}X6w|u(V9pCrL>tHY6>)geCHcKI21q}-b3dRG^i$3c4d$vfZC$(4AGddr^k8M z8PK7l!L9ElF+KFBX{6Wi2B)WN6w6dv-P(;fV}Rq^j_MbnR2s$6lE4bf`(<(sjiq*| zaj%u%Mhj0F!+0v8t&#aN5gnD6OL*st*rmJRG{et~;8(Z;9h}32F>3S8`(M&e*tyVe zadApM08#l&rF%9s72B72?$avG<)&nKsK?bJEI;i9D3_$yq3askp=ONLm}tw@Kr>d? zhLpOYk&#|Ev~t55W8d#Dc*DHDC4PE|iz0>_3nth)9NESQfo<45%NAkP%(;tbtCEn? z>7-06LeX=uA0BQisSXe;*Mek7I{W z+cZPBwiQXRI&zWi&_?Zx+3!u%2_0SmDix8rk(Gm{Nf@fLJZ-5OXo9&P{R2U!EI`&L zCrvQXHWp}s0FN1EV8kW@xBv5V=Dq7uB{ayl5u-+QNVQ)4>9ODG6>fTsn{4bux@%%9 zy35|YIxWtClT}@8!t;969F#gF;_$gx$V1P~n}+Z$qz?ZlWXz$?z8wAd*`keznt7`< z7qviyKhvo=c2A_j*?OWXV+;h$KM6PzM*Kn%X8o42#XnRTX-j8H^l0en0HJ?q7%nPo z0En0n0s^k?tJi!1U@2$^JbjO5msVXZ6h+++Nd0x_MvPac_>#&Pek{;wN73C#3R;NF zI|U{Q9OeKu%7Kx~tOb44f&sE^^mq?dJ?8%x1)@MRAGvPudk`<;Px&#%)$+!J=uR2Q zY#y!@!8Q$!461FrO z0zkL9k*3NGOvo_j6Sy4xg;^adK1@)|xS3$IY%DhkC|v_a5!ijx?!4T}xc_ZLTDzST zaALf?oJb=HdMsoX!4V1*?(gv0{@fVXDH_0`0&(<8WG~g$$=qhWW8DozrB1Aa9EfM^ zX5vIUge~7o@)Xoo{+j&)0J(N(}n7O&~UXbUrVaJ2=aVcjoOD zc+50&83UktxoU~SL4|RIPDY-^B$$EnQq-H?luBb`)gqw?_e<>3m~0LN=SCX6b-nu0 zcXLho5Y+=As+1WbdKA!(Dl+7@+uV!#M0rU-xrTD zLW%IU$vXpza`CQ+B;-|eZU|d$UBEq&-1be613iAxHJP2`czN!DiSYYJY+OqS{gEvA zld9JwR$O?-fF3AtSvIHr1p5O+f4wptV3QTy(jII;Y4XVNG*`D9ab{n$hVCcyd4!sOLY?|5n6 z@wCJ=m`VtsWstL(yuxfMI6~|E|2M*^<-@g-p>8yj{)!XPJj;= zf;LqO_mbiMj_#X7$3aK=#u3$wD4c5={0ii-NDO4vw3+>C^K{L>>U~Z*A-~qCC!7;S zA|GCjWe}bskuo%j*QdS{X!M=5GxU?~e0Mi=R^7gD(Z!ojB*+t28Jlc=3DQ1^g2%jD z#B6pC8u>t$8e#zAB%%*{{~o&D`RY)?0CEVG&t{HVR5q~aFNZ|sBp+#G#`l-EZuO5SOyslgfW3_{O(f&Rd2bFtOX52T^2NY-B|XeDG6#U zFG%b4vFUn_ul8tuOm7ACA0o`tSdy{LtvU&jpu7Xp!xeK(5Rxr-u`vIyQB~6>?x+>(=Dfu{Z`S!z}zxPQ@a(Ag!Hee_c2QJKxd9M4t z*W>-L>JI*^i)5?fI)0ZI=PvTOc3rK@Cw2S(qAJ_P51Zto_meRG_0kXF&bj{A?eAJx zpU;br<}T@%PD>q9c1Pb$Kl$WR!Lf~~2HbJijR}r>%P#genuAtNz!8c&4hh^Q zm-Rq|HOCwAZR%IdgTc8)wvX@n`RC*i|JLi_G{48PCmCPt zYQ**YRH}Ob`BwVQrUBl2=0Uq?L&euD@R0!gbq1JMa9Y#v^v;=6_s8LDH)$WBf))=C zKk74{0X~5!**v4;JOSbT5(;>tmPp5QWJotrQny1XSx=Nza+_6u5&c}+)5D;@OcNWZ z?rGfH7R}Ut_iRjV2vti&r~1*UGTMt6?eh!iQS1x=EX9V3N3IxixvK?{Y5XlxL%tpQ z73#-nnMaRWv_;<(HRl9;5?^_7COy&%AY|*&T`@Wp=*XL|b2F?LoVl9_q~MzS_*;F3(g}o& z1UTCI$(i;x|Lf4i_#v&`-6SsqqN+PKjeRu^bPc^U^StKQfC*bQjOlIyu@h24HV(LD~?ZGBZwA@K+UlX-@|FvlkCW4svHE zxYqk%*7qtrTX@Hmtr`tXNtG}hyZ|?Vg77-607m81L4PGA41_31+8FJ3lsJlMqmw=v zE~u$lb6V+Xf_7|Wq`%3dmKmEJRp-KyZqZRZVz7V^so1=hxGwx430wpEOna* zy^1Q(y$^>IItxNs8fl-B#==+1Ni+fJr=2Oe+BAtk_L~e+J{5X?P_)ll1Ngmzj)Ta2 z?!LbQw8^^aW=cN?!o__Lu!MJ)D}jJ18!iMfms?7eQJ`ImlME-ECJv$lUIvwz>O={k zs=IqLQ1(ciKjQ*N8#*tD)>c$E?yR@LV{V0Sc1<_YKcUMZpNUc-5oN{VO!#YhLO6?6 zI9Ilyff@gd86YOnfFyBsA#=)C<8lf9LU@91C?>}UIi3v|hIPXs&u8O$qG?G;c_uJ~ z_u;F-QpoN6tUx>9Qk5XRzDXFU@L34fRDB3@m$_YlwaXj?%y+0xBz61VGgO5|^bQ9m zuoNb+gEZigWFg%9%OYp~hcgG5ZTAN`78P~+-Duh7L0^*QATv|@jzwzMP>n54nGo1G zA_-}Jy#3y3wxsyeP;glN7g0#9reFcJ0h|0Xd=f{%#?$cfvLk`K8XPS88k|zOg?{G> zBv|9)y5O<(07>&s2=Oq-rzF?`m}x+D^DPRN2sZC7A}x|A9jDA=Nyp~E(BacSLXQT? zKJC}3tr#Ia?r@AuYBwURc~kvHQ%C4?NG*=o*smr+dbPm#?Q_-PUq1c67y0ujGHM@U zq2B=b>aL~o1&?Z+Zboqh(daKHDfId1ikS(4*Z|H>ETWh1A5z5)<__DS_y7_Xt8Xl@ zk65poVH`8%WfX#a*LA$IlG?@q#n4B3(c6a+TU~-x{Pa)mJ17^3!qK~agfBE2uM=Io z7Y22E)$@93F%c%eYm0)>{<1gg%`hn;$aH`K*eV?7b4?FzA~dN=%K`@x#lwRxk6EP& z{|F;w1Z^wwC*QMzJ*i%%$l}-n!v;VI##MkDCMJ7IPgEH>^T5P&IP9k?6h<3WMrI`S zL}#%k5KsQ2?N<)hn1lxTZwE37xMPqRlwC6hE%MJJckOpQF|^B;e2NcvsDLp!xGpJN z+ZX*w3nms&$0#3}Zr*>aesn>6fKVHmUC!2z{N`x!d=$|H?qx(Z_!}$ffct<9%L3!h zrojG(==B?SD6$fPn`(ZfGoHieT^=X#IehBs8rOiyqd1XX_>` zveNczrs3!_!j8DP*O;GiiDmaJ8G78@W#=S*3^aAQ%t+$pLqwAlgRW82LdMk@R3FmF zJ_Y&w74T~+%Qu*m6|r)73hv9chnBQGR1+5(lf_45l?+^Bf1RT|_0*E+7Yxq5qvZl8 z6V8(BVD}?10i3xtPTN>L5(sr50dbsyt#X^N#;)j;Vx$8c7zDtB0VX$t;-$IRW`jxP z{t_8Zk_vM&hi%xTnNQVdivqdQ5ggchg=nPI`K&%w9T)(7;Q$594bFf=AhD2QSO^VC zX`n=ArumccOxqHt?j!@xmm&pt$QiFkOjN<(@*?hF9#Y4ovg!+IopxG4*44243-u!^ zRneEW%cK(2Wa3ReWG4d&S)bsD7zo**K<;|cT7;;<#qrXJ)-{!hAx0yS7TR3uG{N9))J*-)(tLW$ycE=jiU>51;QRqYkxU1r2-?U#w7rf|(q@7GnPvrc zUkcmMDfM|bHezI-G6hD!67^>wYbgmz(tw!ot?C0*tW()5GJ%AM#l*Mi4(emqD)r+~ zQSGPPmIWSy(`g)XP)mlGG;FSyMfe`^CB!LN?rVV+z{bf=Xs6T~!NoieK?=3U{qty4 zin7UN6w`#KrgRPIkESz<$d_uwQvpCwcSIQKCPF&cuq;40w0`=o|L~BSbvH!eP?3(8 zfdG88lU|fT))Uzb&{#(nb-bM{itiNq{7k6smH-Lx=TralP5kkQX5cLRtD(T0`rM<7 z$`ZwsZd9)k!48dC`_mh7blvg-fQ@2wX_em?e}#GBT@7e(!U16VOyy3d97KQARFJDp zJCxbnsM_9VhD`~f1pur74+g0QR$vg__tH*Vu;{cr=ad4_9uapI6dRL-__TjJ0?$1(7jK*{J`h}QKA!AHEv*|-M zIpyqDIJ`nd)BKZ`NGOcc*kn$Oh5)SXmE<)8M0n>Y5tQ)H^(@cz_U5aRoZlonK3W2#x+Wg^A z@XvH$3T$SGK3}h&NMv#}2HxPb&9nuo;v=u;P4)eHf`WC0ovZQcxYR^}H;lscN_Yt@ zETL*gGp&~_b|MSTxi+B_SgUF@iQXL6K!RSH6O5X5MwWVrli?vAl1TSGNMg{Ij9`s{ zRO9b7H4z7JRvNw<=85+tfsN9@vk3&2U{Sn!E^<*#)vTIF(nX`9D(0lU{0Jd1L-ZpM zfQgg>z7OJ0!C5}7yO$C(Donha0xd>=FB<>Ch&D{CHm6)|!x|u?Ud}cZsHVRLxdc^% zIdH2`|FkHcmx}MlKt!Tv z)6=EVQ^C}MpKhi7d&bbMA8(LE@S#|Zhv+EX@6{D-pmfZ?DsNv8N`o065->0yxAESQrKxYWCOgIRYqyvFKAy;*n6HwQuUyK75 z<6?h2_DE=@Ns*q>T`j;V7&N4&OR;W^CjpaW_?L3MD6|7ucnhZi1L<%cb%)pc&R%XK zqWV9m56AzYJ`9}f|6BD*(U4BsYDfG}NKgrMc10-p|k#)=_xUQDycays3K4mK`fHyg%C4bc z9R%X}G9!NXR35GBdPFX{4~y%4G`M6_(@QZlj25nVx?;OHCy3>(u#(^9`ZV>E*Xxs{ zYki+U=F`QeD;p?Spax`Lj!oZyYC z%Ca=S@Lp@MGP-OmH^hh~a?8ge_#d9v7AtQ6h+?zs5U%t+_=^()Sq)jsrvr*t0nJv4 z+9fRVT@c?}%qO{wjMJS?U%+2}LG%42Abjldn~2D!;?@8U<4dg-co4A(D?>=_)6SQy zvb&o*Yn|x&q2n3{Mfcu7B*XnRCcJpEWl|_!6HExHj62W8Wm;OxuN$iS$nThO^{gQ#1X@jWSc=uP*;mrBuzq?p3O^_Cy zqD=Bqoo$;nYwvd!5{Dkw;~sSkP8_y=F~QOenZ3$`2If36?q*zbdmg{B;2{cbefFnV zTy0aW))XAbvUu*nHdSzw<7$iGS@|#5*ae2n5vuJa4<&o#&@Cca;xqpdHYlT1{>@PU zQo{4&uu7{g=JLI`rsc0Ly0=b1?Qr4yQ&bUQz5zB`rPC)c-dsBD>e^v>C?vH&`cmuX zK19)Y9uG!WvVP)i_hG+cTAZOK!YBE_v}_kKG2%|N z*H@5}!F>7_2uJ(J#S=o%nkkJ`MXNX1f1q!kON3B-{#V-W=0Ix1W}X6+%FK`ywK89$ z&Gd65dbe;*P*O$PFl{@&%d#=2+5R7{XUw;}ttez@`rc;BHQ)h3e^`z7BX503b?LCU zEN4Nz(WX5M@L4RN9Nv#!MF5$203o)ZTqv78ycfG+g#O)$H-YT?#PW#aBbWkpk4vF; zxd%{03E{&{bB4OE1{V`-a;~$BM(2X(DlsP9XVO7n-1e?F;C`Zt{ckEy ziOBtE71oSRv4$NY);vJZip)-_sa`dXZ8-%4enuYKs^;t^>#ws_T+*|II-!E4SOIgH6hN0+T>oy}61cn}2TFJ9n zzRvS;yLv7rI|F|>1ctnsTrfP0F$Cdo22i!JcYa)NU{K}{F_I-RZ9uh%CWr<%G>A~x z-%N|*6s38IiHOmvEkC3eP=ly3aoNaw`YFmPhLPG`fbUoem}L>;P<_F>|1A>Gs-0=s zrrH_}wy`QOCM`uxsrjGU)58htw6bJ3=jUYppq-L5^8>Bsj0LIiH$)DBX!ZTvS(g2QIPXYqXZ8)aAM8ZbPIRHht-D{P` zTOLS9nRsfb>~I*cA#j8W0xRsh4<18uYdl1Ud7_}<}HJGy#k(@6x+Kt_zWXhgcqb627vlZ^0r-B!EbMWZt<0|*&V z16(A)N@LPj?V^AUfJKlX$G_ z7$aDXbxl$weq(J2MtC54-K8V}#DLxDJy?TzT6Yu$q{bt7m3 zi;sbcO6bZOEOyE!Z^6ZOIKm{r<<=mE7&|*o6Vwoq4A3MCIOIwJiUi6e$1sxoXOp!_!r)y;m>RCKk+z}@ z2B||51{Nx)kYW^ZnmN-!j!Y^qAm-F;GDsxU7rqpKHrxf&CgL>5AWt$Z#B``6?WS+R zkhgoopd9GqM*-OQS+@ypWF zLrQ-%Ay3!)>RngtZ+8Ir7N2|u zy&w9TNK9F|ZC&5Rf9yU)DT0L5FZB+pJ$MED?>+bp;ii7SsJJpA`1w?p0hP}!bO)xw z#zU0}+s)0m8a_pweUPFs9k83_IT*+vg{dsbW;lrC0_ia1Vb-d=n=#5%MNbJry^BRP z)bDhfrp9zs`*R93EQ<4`m9~7Qn^#< zxCL(_27G=Ac%@*;E*hS^W!1Ts-{!o5Xk!FXYKkK5X-=;h$5!Dl6 zhh=^B4ZHTqo#${X?h!yV9e!}v{z$PDl3<`PRX{l;YfV+obY?pZQo$p*nnl=qw_P)D zhrdNCTNE-vf3J*(B)wa!JAN&nZEh7UB>HY-2!IkcTPoCq1|cNR{ATUTfR?70g4kjM z37lDgrwzvs;3#kJE6Unh{aqk^W7(ei;JL?rNssiOhjnuMAI^s3y|4?GS#F2Mm^8-(h}@$!sUTpX*gQ5aY!NBIocwV^ zGdUK4v1(_^MQR^;NG*QQeOQ(rL&rAk>b ziwbPrLr#)A{ykN(Q1m~|G!&;b6^v?z^bdYUH&5@9jv(U7n6{P_K|)6O$YV)e?Yn{+ z+%><>jF(`4#Li@pXrBR~uFEK|EL={9Xq^J%P##eeBn&~C{BG)Kv(OZe%dpr$@!KB? zW=yVv2jutW#0>mUNBb-pWDY}nt*QOS>ZZ(Q;^PEydpJx%GARyHlFCNGBP{Cl$=f(B zeQ1S#aDaTOoR(>6AA_1G5)D_8csd2sE1k5Q9bst^ahWJ0nD1^P9=Y)Cr0w8pX=SpTbf*=wGWHf6O?#dnA zTXXCy|Auce|HoSXY@lW4?MgPYIKU#~it97A7+8zoQx}nSWgWrrxhwDX3&fpOzL@RLNwvsi2*uvS#%(|53~Piuv!&>~Ir4{CFVIy0hIC z1AR&N6)$eGy01zS6-vF2M(4xY<3~qn2#_=f(?z^e|l^&KlWi`W#fG zI4SR0bAk?fH^KRl<2{ZR{Hxp_~c0P8}SsUG3e9yOS06;o}f{zh3i-vc&4)C5$2@{__pv0=q4kUlT?ex7N6-Z^HLac5s@&`z8QsEh;Vvq*91Bim>tV<=yip3)*M2l?oF z?H#uM^(xGbfSj-_?M;s1dLutIs2$~%ju}C0i)e}m;>ZwN94~lF!rkI)=@h0x|zMN}Ua7Ij;0ghc0#UJyy$I1@3l4#g@kg>iT z%02)iaBvpc?#q*UoEo@roI{BNi%1NT2oxROHLSDA2A_KfIszq3iH{QTM2?Y`+9Fd- zTjMgKun<_BPylAu)4Gi8mJ4l+s@VWhL5h8R|3BvrJWQK% zPrm0Ct9?b+)a87H;Y!Gr7x61`xlz^>{==RFVZY}ysk&$aL~xSq3EGE^<*)G+%$CV8Q85rm)sS`)MhQBC*ISG% zn9mUvjSAy_`?X)Ki|ZL*+GlStq2y<#H;Ve}q!KNCYS|G9>9-erse1XqU zIk)7tU+7Y8RE#9j)-b`uj)nyE!E2-7y?Z5d%#2E=t`Zbi035xMgmD(Qp9E6T;r^bs z@P;_dBl}Z_o>X^AU@sLL}1Y+)2gL{|tziT9vg9O5CwRV=3jrDq{y34hfMad5xTRt^uW6XB6A z{YEe~>C$%p@V8R77(Ku9%_Z4$tMjcSS+lRS=|N)Ou&jscf9!BzbPgZV1;9Bs9NLB; zjy~P&?zjv&(&o=bWaVgFq3#P28-Qz+(zeWZk%0^Oq6#3VQUxr3MB1ne0Vmp zbmiRO!N?R3jH`7E)Zh_B1cQayCC;9&=>`L_IKs982ForC8A zO63`QYlEWQV1xcsE;vy$4`$X$j%Gpvv5l?U{T{vAKI0=_FUd5PW<>Cztj>4Y?}KuU z)_eW|7Q)6hkXQ_EyrHstq{2j?hi~Qp0sG>C_r+=P--3=ik{K5w#CEuP@wD!DmK%`{ zZu-X|2+n{bI98E5Z82*s#PAa3UA+Lhoi(IMLEME^zYzW*@K8U?rn2HtVlgT|1?L|Q z0eJJF$BvB>X#bIOEYV!bRO_orCzr>=lM{B5F_?UI5jD7Ax7=Bg4}E5@;AV^hT$OGu zsAOCvn`oD${U;^O_81F(f1hsk zoqhx;Z4;|47QuWHYq1M%Us+ z8w>ME#%XL$-ZJOTq@+CBKQWY7KPOs=*%8>zN-B`f7d4klT|fA-%?tHVXrba%vDt!E z@-3{HKP_3j5AoKH9mTzW6O!G$VS6Qi?ogh6XT6UJM21t=QTdb+{=D^Ezj5k(9fRga z_T=WXY3HNZQ%)oaz@COB)z)PVzg}+PDBgDF=dh?Nen@h8tyoxa%OZ|ADey+9RAEY1 zA)P9qib6fN@cd$dYY(ec!PT_7+T~Zm!8f%0#8-aRD`i{T(zgilL3{Z4;BMVXV(uxY z!3S83)VjcGVXr{9=)C;Gw$#CyU?}&?Gjtza)GP(L=3ie{l9O`=JfcH(Lpdhy< z_HLFfVfsbCf}R}FEzL@7N~Nh$uG;I=`QX@t#-)1Z)Hem-_Ur^EWc`)cO+tOCwUxW` z#U4}Idb{il7l#Gh2=?(w9noXKLKN0J7V(BH+1Xm+CKtjZ*TuzITrnm#R&PRMR(1R@ zD^$(<2LN1oI*Nu7_{F!N4fFBTRLU4X#x-%#jl;TZD~4wMlz=qEv>ex3`EqI8{Pr{dsn9qSI% z631mntY>X;avO^`hh^?f7`rIaNb%cZ7m~qF%Wes2`$y z=q{|%b?!-*L-8=Tgp7WQ{%+6ie|9tCm#ATlGRl{x<16Lq9+(qt%|e>S1txl27Hh&4 ziwy6~7Z^RTSA<-&5ReUe2`Zl|wuNK;HzSZd+9=Du^=9---nie>sn8@C>}L`CJ4r}L zGv_n@qUVhQ_;0M>H(o#r*5CCfFXkWb?&DKJsec~jp@`aakb;62*b_ej0`q@7<_iE2 zyY@bc?NA;dAB#Ld*@j^hbi2?h2UH%-`Bs{Gq1Z$gS6z%KeCt^+)HaykYG_hu)f@MqR>9v=xtstv`&DP^#xN$ERS4YRU$@1Cw!)IskSP5qvxH~&~^0aNB{Y)lfqWk zuY#>VG_i{(eVHzG(<5j4;Eqc6FOoNX@#50Nk4DT$F@B1^g$m~;|Nz5--LVP=k- zl}L%@7$`YIO-oHmHL-=!qPw6r;3${CElzuo-CE2UmaI@p>@f{d6GmOE(nNYU~1O zy35d3m2xRKTTz#J!9(Eb!fV1Mfeh@NXr@7qWix_DqLR0Q7^`o)sRptcA3=uV`cfzr(!AVjTY_Qw%)PNvpbt5M zCWAG?qdo{$Po38TVI|Mhtgrwm<~YaSHaT-DAB&a)955+y)zxY0TL8(OSAjtCLB(m4 zi_jA6?!_D%+uM_#HB12j7mHJ=p{TH?QZ+=NwbD8_5kF`{g%Z6NTDbUAArFl4x^qBR ziZ7v_T65NXp6e*650F5u5)l*&7|N6ycy$Hv){;?E+~5R_Rn2sd2?>6Qlyr5D;@h7E zTbmW_=P>UBbt@4Q3b8ttCa4*VtrMsX+6iW%b3-aUDHanuyI}D}-kC%86iQ~Sk+{6y zcG!eZqZ=MD4{UKtS%T^0&Nyi~yzux$77C^t*PUJ;5mGDdHV6r&W5bj9EbFsTH16Ty zqT_izqF%$orsW@eXg@Z015#5w?!~8n(d*4rGjXy#x<4JO_BO?r(xXLne;n_Se`X4~ zkDxL)d-zgbm=|!pGka7I{@~POEoT@kjMw~@Up^zPsrhY^&_cWzY4Tcy4k{AF^8`&c zJpECZysgNdwa1pO@No=SqGKo^y`Q+@PXPF~P zBXP4Wa$Rg^6;UTop$(ou`@dA4LA-y{Js#FLD~+(a_qfQt7Lt=Do_nBE1uGfbghN|>g%0WFGN5`s<@n}E zU)a6#z^jXZRK+aE-Qx#{Ve?a!4CsaSz#suAdjZC&_GYPzoGUfk)Hyq-%x=9ppD!{|CkXk=KYSdZ%ft)XXka&+svE$)l2j_r5Z^dDa%C+bbqOh z`kN}}T0V^Bf9F_&zH_nCt8!=XOX*nZ;9E>#{9m4Gk4reZXU(F>P4=`{zaS%)?&N|a^;N+B~tAisg>`S*uorJfe z++QXNn-I@K;7e^9Nw`~QF%@;i??W5=xQ8K#e+Skj9g#$uGmW*fj85$e+ppmMs7;5l zAg?aDS7cN*oo!IF^UrV&X&A7sd$NTX*zvvE3r#=tF`2-#!&1`fyhbmtj{eataQqLq$Il}8&9eJt@8>`Iv3at z%~*bLS0)Q7we$7sdT;b3L{?{gU@c21W6ZHgW9pHl15e@d-$b>~~-0$U4O zueXE}V3-8Z#?0d^@qlDr`J|gFC(CUyN2T!EvsFG-SG&&J zWxNdr+1SnYYpU#{(q(s>=m)%1OPm_r3syWUI^Jz^jj{=M@2Y7lSa1v6N36PJwS_&E z58831+`GV}v?7a{W(3NxJd%Int6&2Jgyj>qc#ZC8qZ5@Q4JJUH~j@AQ$qrTh@j$=HSX7V>LV4-^n ziZravZIk-bZP~X-{!@y9WTK>rP8_mZg9fBKLe$3sP>riOwV9GB+*8}aNy!8%&dTlU z#$)N%w1OQgfs+iza<{ORgGK!+L$!tcYK28|1Yi!o4%s>a0y6)#xl`aC= z;5I}>Xa$IX1bD<5uC)dqlPD}20?wDKM6%7VCWfmwc0zj!1yqKUGkOYL(8syzu$xZ#1x;^bcqG$ zDTr&;5@6)Q3zC~BA~;ekhqGbK`TXm3nJ#qScO}~js^526vWG3^Ay!T%N6c%kJ|1C6 z)Ncw0p6W#-25H{qHr@A{%E0M_wQn+QnU_WEisW^b1&vwD8@6Ms2Pzy=DW zw59M`Hu6^7W$wivnWC=RuzCj0o|69R52}Uh)iexhvi9znz+~Ja#rUfbOnu zy@4jkIsP{UDo~Qr1=i;~hsc7lX7SwXc_7<*AXf zA3aW~BKm9)-457PyMGGb0BVto?B-zjR#@BYApHy0g>R)Wj+z_jNW22nQ+qSxG(yjY z6OK~OPNYeQ>w!bKKdkvBqI(kS6KTd07N;rzro4?#NS1h-4gurcLC%t5Q(*#Hv^CLM zgKtG+<3kRH<$hmEJpT)iQisc)_8~~>KfpY@fqp~T)s`{J7B##CXN2`KaR|bNQZasA;%4BF0 zb8nxU9oH6siKRr@pF{vDXt3k7Yd-~{aS(X*${;3#Asl(LS|Fta8HMm$LGf$npwl>A z5d3096M6&D1VWc$*QM9VXc{mSAz|aJ6HE)_TxXjl02l8#N=MZ?oL3Ex(LbUJe`9)n zBLA%{Z7{FchQy9V-WfhwO*S-uB8rOq>d}PHYiYa0C~fOWYl+c=OU(B;V_cy+#0_pp z)#2!Bp^E$DEiRO&ZcOVp>FmVKOfZSFjVo!)XFcVFv6-rgec3vXm)nmlC&a1tf}RZw z(P4~-WimY5cu%5vSQ8v(0nEljbC0oP%vo?dk%Vh(Z&rxnxNU$+RO@kGs*pA@Uce8|FPoox$f}+zT5>dEx*4MIvHkE&foyBN9vDo>vdB>{;%41vh&8KLk z?FUUy%_OBc7UcBKs9DEfwEA*<_*tl&npoyxlfAd18Upy>9(Ujuz=FQYciS^9o=mO; z(mtcwxY>rkKdsc5-gs5RvC%t#z)e*r@?u1Q2~XpS3?t9f%$uJ(!f4MzhUd>vK~m@c zdyEJZPl$ZO**@o@$M`>ty;F21(9*RV+qP}nwvCQ$zOilFNrxTVwv&!++dlpMw|kFq z_PSj6HO8D(vz`Lfm+$inf1U;wHl4@$n@E}A?gmHb*hXocL&1RzH*?IIw~qD<{SAS~ zLZwFH{v8+uYDyA5B@g$j_37)Bt3(2)njn1c{P%g1N(IE=$ms0>e5={rh8kYKoH=15f3 zv7zGzLl^AK2=i*U(^#JjHkTAls(Fb+Kw`9Y+~xUkcHy$DQ0}fH0rGtp(6q~ONW?t8 zHrmRmX0t+3b7zoA+<8u+%sYu3?MBR84j0IwDeIXNJr2TCVTiZAUSJz?ZGVT%qI_aR z!veS0!Adr$T?h9uyH311+|2ql)_QfOMZ!&}jU1hWvp7Qo8G*5dpog}C8@>q-#R>Bk zJdSW>U*w2!$l@4_PS+t=mPtJ`4dm^#yK+cqG#Qq#)RlYc*b&bVemQ%yk>FVd3j^{D zM&4@%zK=6t68eQeXZ8;sc0%RrV1RBpoaEzH^f9Ec${?s~fgAxV5)Hk^BQbf(lv9+j ztB4%FnKWJrv$h;TaOtkG9MI`DY`kTX*$c*I1NCMA4wH;~^q19be-)b2_(va|MnqHe zQKi6&ZU6UZUe(OIWCM1T+73=|xH%BW3SO^9K0dRaxiD^x-Rae&4H5Dg&Y z5h6*<<+3gIeqb$(Wt8q;{LAs2j$R6oV~|f=&zijr%;R z<7{Q*gEE0_B*{;DcJtK-mJ*fKN zw$84Twqg;)98eui7wJck>zFxB1AFJQ> zbFo+j;do6cY42)c-NWK8&smG$h@-6)ih;5J@H+PL!>6Hsuk}axz3Hut&~*0!c%ruVn&v$M@*~1RBhFWoq_z zL5f&Im(OQK{IryeVYk6dU@-Hw+xFcLRwz?!;3d1SD}w{h(adERBfEjOcw(Ea@C^u7 z-;_4$&ru(5rZ_?NE3SDJB-tzNMWOw)foefGkaYZ~qGXVl+&bVdCgD6`DhKjaggRm> z@bBRdKE7Tr_Yd{9_621O1O$9K#-Ye8+L&=>NJTniL>V0R#1WE)MBHI!WY zTVZZWm~OAj!T~>^@2RIy|EZig*#3)h=4Sbym2>s~1Mt}eowS;F_rDSlsm1FN zE26s4YxSuo1>gdSxtocEOaf9lQVH|@rgnvcoYm$dgYy7@*%brMpZCY(y>O;p*iXAX z%>J##Z-&`c@sw>dzxpSW1T_HRaQsOu=CO!d!-^g0#k*Vb=)T{9xHiKtj=3d-BZ{dZ zWjBZtD`IyhQq*%QWjRqaz~6VzXSeIW+UHS%6AJ1bJN8{<&_j#!2yfE)GtKXq{ys|l zGv6UqEnBRxkgWE)6C(_KuH`P4UeU=6#lyEzN%OkRK`2zwow$db(1Sb zkPv52aEu`rX{kkZcMybc6kZ0+y_S5KEJ<(29oGdG*a)(vuGOqT%%B`^kVRZh;(FC? zdGl`fLXE4osaNRq+7=Rm8y@FQic9GPZOT zjGG!_%;wvNOpFIg)h0Cj2&ipzgrHcV0>f-!2#qprodB8dVM2Q&-K^miPl|5siU!Zd zd$fiyYvq9X^z!>L4Qn*Il*1T-29gBg3TgwkDcmb3)W>25+9Hj5 z_6@flTrMj%2frJ0S{YCJ)W2VV4tidQqx$REKwtpjuYn`+6hX;_UYOyxwH`8F{()ZQ z@;NrB4Hq1r%pyUM(l4a>$}xAe7fM-FVvCK>tNl#J3?zLh#YTWQe4s$N6|WVwtrk!- z9(%6ya}3Gc7K7e6ZIs4`2ZYZ|RE_65S~C()xRmyebwB1MP5j+>ZNLR1*LBUO+|Wc$ zXOa)DFvweM>1nauawTL?P{RfG6T;|Y%I0CloyQ6acCLNue$;Uau=ZXpiUXo0t6ZJ! zS3d7Z>h`HKoRvHfNHL*p%;}SSseQ@o1iBQ{f))LJM1sL!%)2LrcFr&lwfi3225X!$m8f#^MNWHLm%-yZ(!R2spTEfXT- zqornp**d8~_}me01L+sKFlNtr9wOc`c&HG;{3<*`WniCZx} z-?9>Ho^+uQ>^;6vSG|}xCf?vfLf6|_`(d3Mb;PMe3nu#j-sMB1AgY5#r-#i(3NabR zisk#~#9oEyU?i6)shrD6fu!hdm#!3V_gc0gP7Ea7rL@*0HBR(H@Fk&mo>&PQApNx7 zfnwE7PPUQCDklW6!BxA$?0jFDPh>aqOUyk)w!bHh6s6IPIqB5}15(P8AhCo<$JWwb zf`)DYC49N0Ts=HrHNb9AYpIM8hUofB;4r!1lmM&F2t#ovv7YH$R7PK4!}v zIfnNzd0{VupV4fM=lIlhnFdIZ>33kxjb`6?=u&^TM1$=;tsylSPx;`Pj40ncfi3_s z{Ejtr7GB0csKjMd$oiej#venTIelOT@?QIf$RIqlZpD*gN}^{o z^dUNg_?$E`w#+t29x5nfitI3mrZ>&CN5V%_mk|OnLtUM5Uh#hwIKB_iN9=StcTzgz zVit!=@u-8rVvehUe`kpa%v0_6xK`c{F!tl)Nk=n@8NpRU+UVP*p^dM-a`3-vjC`uQ z(I29s-J|@$s_3be7_dHsSy;u( znqcQXo7EF0&+-6Cmq@XQgM%`Zg$`3SfevNubG@K^OTrK!mZBPokVyYDfD$$aD|(?V zN3FrQf!a>7yDd)zgYhn-xu`;C8gZ^~_KU9P$dPz*S57zIeJ>HjlGkxZFJ!h(F!5og z{%lS;KE>`)skVJa9az!)=?zHkD+Kbg^92Kkadm)eJ*(q`k;QGGM)!YMgg90mkCR0u zru2w+0WZ9DGMSt!Cp^exMty^@AdD~jx2e~1Y5m(9Qf{i_=8s&u^5I|3#vxTas@bu!^yEjg{ZB8Ek%hMcU zjSyI~3;+uL!1(oX>+0GjOQA;YB9E5S>0W|!e3ib?eu!c=$PN)7LqU{Y+(5d3yIRz` zJS@msmw%=#BMswM+ohGq?IMLj_ls_ljyp`<)@d;N94Ad*nJuhzi=#~{sxHqJx@Mea zoaIGNG5Z8vPZT_;P6z=_ZwXRZ0vqr17lkh!Ie-6++Y?jsleuk%kp&U9!5?1mc(<^l zO4vHczQ6NEPcc^Fs7t}f#l}>gukT1cgWN?VC{hSrI_i)!$#r;Q9e>b_9g{?II_}C~ zV}1+fPT;Bs4ds7je=Q#&>Z!lK08v2iYdHeSFQeCFO_*`Qi*#W#my;zBA*L;YKxN6>Fp zz9DB~xG5Tl*;9%j>Es>%{QiCXZC2YI17ebIY_RbnyHVY>1?Ju?L8z9``^Gn7!0_(m z$>Bs$^5U%P#SaH;TfF%rhknJS-y;ajs;Sl8}xxq_^HTXJ%YQ9#@mIL#7xD8AZ<+SR4SE8+L>r!`K@&f=F z!z7Qh+{ZA-7QUh_3Lnu2Z%TsB+PY;`*0O6heyKx!))YP7(JFw2u zt0KHL!g8MTw=}4;xo)tuI}^LYiY@XgkOHy`%~Kvb8*MQeoGG&9$P@kh*o2MkNrvgu zPz8k9mL)x`sh2!Yuy+uzu?-~r;yoUl`MfXO05GU5t0MXfpN^HAY)CbM8bMCz9*g4Q zsn*dO3yew6qc!v~dYJOLevt5JA)vF_P|%}8on|F)1ec4K8`OQ9;T}xEgSL_j1ysuo zjc$<-d+hca$B5668MUt3VcyR3b_knXqsfzhtlcX3^RarJqhxAip^vvbQZipOK9#L^tUiUTWm zKQH|v%#pjCmmp>7%l3md>HW899-W7l{&|aasRk=550ejN)sT01wt(&{?Hq;JnskU8 zU;p{CHK&9=Ss~u0Af{hd1oQxfo7MSMT@b&9`hdutB5y|7wK7p`D5!}ZWm-JB%mr1? zzKraOQH%XGkGFis)~(T>jm&4gC&Ra8zH-q3w)+pE4k3T5RYZH6^*ze*8}dP$DZA!x=ib zXuJz89m`mUdufPd?qn9uN;$hjfCxTmbUv83CYI2%HpmuWef7Z*aePJ*4Px9Doh;QU2eK3tPd%A6G8@(QAnDlsK@*Tqh!c zYI)R|XvfWFLNGpJ0+V6?Fz9a7gJ$X9=9^VK+BH$xZ@wOMxD*`J&Vx9zr-&qGO12UV z@tfH&5(G0#{L2S?a9neP?D%eXK{U9$nHdU+9hS0o)6QQtgO3Teq|zjEe zq@{fcp9NIn0g4Boh90b2&vwr^>I{?%`Bvn_jwkBFl?vLSv3W^Lp`npr#UleVZO6G5 zIxTj%yF@P0GV&yuCM;sR0 z*E=*E8-Tn#FmI&G%}#@%gACzifJ_Qg_A4T@ENEYdTHFAZL@r&juBpdvnF~V%Q?w6< zE~@dsjx*GjysSb*Q+LCs?NWQc*Ycj)0&>KqQdu?F(BQ;?igxrtr5$#wKZiFIeMV>^ z9^}t%MLF>&xj{+T+66f!x4UDGLci=*9s@*~pQQRu54onv6xL|)qN-VxZ%q7mEX_y) zD-Fm=lUADuwHSrV`p)Pl)WUVj)_L4Ucp1&9oU_m?shMAdA}kU>O**Y!;P^ZBGm*<2 zmxVxMHqa2q@GW!zARy|Ak%Cwz~XaNmHB=Qvvfi!I)zvPa*2UMzfg`~_!8 z1jre4NrF`9Bgj76IsZ@uldg{(Y`?9w_grRAF@j#AK&1a1Dxtoj58Ak6XZq$kO(wUk z^Age{4Kw{8zRVxYZ>6Wm*)?=j<<2geR3F$Od4rf3V?os2OIMk*iTuO?3o%$KVQ96Xs|%l}ul)(2uFHc?I8c zZ0$4H>%(4dL=G>$LC4*=7|i+MEg8>|9+vK7Y4)AICwu&nO;ndf;}<8Sn$?hN2Qp!c zb->r`v4At!y(g*fr{{rFXiz>U!&$U2DFq6oAxTxL7Sv-oLnrvEXz(P6 z7q#@j7%q7+)hqEC=djK&puB1ztHtD<`^WKoO^=Imwm@wsY@Sq~Nq$1!a*cpJihhh* zuPiL$NDH}4z!R>YSGw=ahH#OzX&$i+J?WqzH&Bg8r@CRYlL}@F;U%#BaE(jdsrQN# zJ#|CKSgiH#2;JN5^*ONksEzP1tVW#haZpnpI&ev@Gpj@}5cdq|ozflhDXOZip|iTW z_)Rl*KxJ!AyrCG~{CH5Dzmo+=(WuU}@|TmN%t?KE&tor*x?v({3Q5`dTO(xCYvmLx ze9bHEVdM)@#^dK(q}_wz)G2aG8goh-QMFk^TD)fpS$yXX*6AaU9u0HmN1kr4!qb5g}|59--l;WanLA+tamn0o;6x|GwtiUd?s=MBb~VDK20H&E2+A}sz}}; z7TR@hvpe~6X0;P_uzip;{n4i7Bfp{k;aU)KgQ>w8d?p zadp~dJh13i6<+_c9<{UWun9$1ysPGzg~J%YGjG4GR!!|zUw9iD!P9 zVJ?*_W=$|AZ+cX$%-7cT8VL!|SG{wO+I$?M@vH9lrt*WbgO*g(&(&pVRR4$g4AHw}H zqgl$l#}*{zqMDk>Ao;+}>7vJFRVpBUdoNQY+%o#J7Lur12r}v{1m)-?onNKmwrCoa zTuLur1LYMVaJfXp>r5p0q?7j9ap$|k-TU3-9;~$rP{?vrw+<|M4E>Q_5e?47@x8AD!T~7=)6Yh_Hla=GOsJ^15H#aM0X|Fcuyk)B&~m_;5D#rN zZ>r8g;_f#nf5&h0ktE8sNve<=<@%mMf)mOOIynSJCSfC>{-v{@m@r#pG6Ef-NL%x* z_WcMs{EqrE*nP>`@cJY1_At4>3F3LkvEBINftdtphnD99_U@2fZZ+Z~b58bP8e%y% zTtDb}_>eL9T*JWYh$te_xWhh$x&jP3jPBQN)yhZU{@ci(1AWGH{_>cEh!P%HW3wSp z_EjDIVTd(BP*{-B$U=Rp{vDqI7F#SwE8T4xa0ucEAfz8vrrIXxaz$$GFr@N=Oy7Go zl_qqkWt2AM9g;lZL9`J472nvGYEP#t(sX{Y&KT~-FuAaP=+R+q?vSd`om^V6dF)KV z{4HbIu2`!3B@;3sR)&1tV z(Pkavy@3?IWVj;g*p*eV#4*}*BwJC!vCQlmeh_%jDiGNua{c~r{Cap>+M#SaG6h&v zU8JY=b@1$N3GSK~EP1jja{|Ep%g<(+iee9WLa&5@#bc1NHC1>?L9lq-b6I z!sBILx;rcm`YAWH`JidDpaw8tsx0yjCdM|P@%joXWHV7en>0XSbmZqMI75FU;6Lfj zsw@`$b=J zWPCxCHLhDcCCGz$ulznzq5XdoqOlx)Ayt3A(ddGl`k8=7Y!TeOGY%5hVb;x>|1gP9xs6Az-``N%)I1@)nAmD-> z?P5SFOLCWm!NH+e!37oB{F=pV(CD{XiwAK~1;#`PJ!EcwLRw0aSYt~J=0Rz4b%FI^ zlP|Y~pTtO-nVpPZt~cREWzvWAfi-w_?HNHI41ks8hIMB^pF|Y%$F$U zOF<<%KcPA^A;y{yNH5ebRE`mYsMiKyc8{Ter#->YYCFcx%1vp3dJN}gC2!%D&asir z^Dd%gA17UPRz<#3xtVqCuX!fpocMbq-RlbwrI34Ab||tvk(%jbG>E5`vSL8 zK&F~^W@C@Vfw1H%qT|NAe|(#V{rG1E^(qTMPYSg>#em_|PtDGyR(hz9d`w3tR~GV= zmQP+c$oM&vDiU8Rqkf_{J>vKj)~SR=TZrETE|sw5Bz2tDG|?U&!*bPgZnm;7;wJoC z4$b3};IAr4zhcX~4{m9LOP`@Ba460t2+g~rW6nWwUm4zPV@nB%)zzd4)fxc~E6&^# z7r}+MUDbz)gQ#!L%nVsAx68HKky?XvEzSbYanSu@T3NINW~+3|uN;D+1$fRs$XYV3 zm5sA#${>C-mXwPg&aADZjMk`zfnxe&A1gAxz?8);2TMmts)N~++}4-c-@8mZ`Y)^Q zr|8m=Lk|>TBd3x1`o9EXOpcP?XUNkruO~Ij&J?j~lDNngioe6H{)L~f@O;LjL1L&D z%XuLjrnv3#!mCgYl{wLGq*!f147XVQ@r1mx2sm&y;fcMxT2RFz&A1sPP=g}h`)BT`No+WX|~8OrW~1aJzX<$-h4yagj8Ssr?BPz zZ*+F%f4~3l!TkRo5^BcLjz1iF%Qax$CnvD7^VxtGu@s_%rUfykBwny5sJuGAo_HM? zg%kbu>6x?#ICz4Qd7j^Eo&XHKj=m)GyAI(+A;0kzU8T>_0#X*2+3mA%RLkd^;1$_%6lQZMbF4og+lAQ4i=x`V6Vr!y zN2)D9{LTYtoUVCAb!`Zmx2k2Ss_L)873EaV4S@V_mZu+9-!=kT2RRuvx-V4*nU*>Z zYGHeV%9pr%t*+>l`3a7% zeqt&oHH1Y;CQo#Uzp?d1pyEY${*oyPT!=y=RMILWIj{NX8HN<^Olg9EAfk?4*USnG z3h}&wyu*%?LE;MK*rLjo<##ntIdjL^dM1L}izFu!)1?6|mQ)GIi-=i334tRKo)Sme z%K)*%s^G~pQYsijQ@_=?6j`sI;v}<^Ht_2A82!BH;tgs@^_3XY7u<3(Q8k(Sr z_h{A2{lOAZ>Y0{m$WOeK{BzqTe}_2fsNPN_#}2DOv>;R!flznVo&Rb#%2$!MN1L#* zGCCitVR~#)2NQJ3LNovAg)~umn%|k2k3_E+(La=gUZbNvqnl#6gu4G*j5RF!;Z48l zfwJz0KsW1eFEoflI@#W(g!?Znu|`G`MKp>TL|@r5pc@@0p~xlR;YkHXB*y2kKVQ_e4&2wlcXC*iJ1>hoL97}t7OvKKg@HC;7d5K>1%Mogky|w>nQ~Y-nXFSgZ<<= zms|(77NeP9Cl9f9M5Y&$mtvyL_18OOtd$rE)RD=DKWM-p92Llzl|fIsW~%`bb6(7^(wwJH|2@X0S$!Rd$YB-aCkJ1#XJ4`9Ta*xbtx3O4>MX*BIv&{0Re7RG$oQ{lCl~!csV}K%l zM>I%TIJCj$;y%e0XUqeB503u!V0I@%P2qr6D1Q)E_8hrUq6HbO!h>>}CHTi8t_(XL zIs^)HNKir0)d-ml?wFIV7gB#wTlYZF(zQ@5zkq;oy6ye*@lS$<=22b4kV*>UeOla! z4}xt`b6SYT87DzFbDo6^lVZn0(l`sAdrYu+tlf#Q`sU(rmyOe5r&BVA!$(-Ov!v6{ zIPSj&dEGae?7MQC`S!s?j@R3M7K1GZq4Bn54YJUkD1Rz+(!*L>ac>bwqP;yNc#nvVKZ zkvj@BX9w=?Anyp)1-2-Kcj;UPgD)7Gog5|-RSGJcyiz_hBY!CX`q6gg~rBPvxHu*_RP#X2&(Pnk%Vqn%__#GehQ*i zGh$cZUn9#%v4Le*{)Rw;R+*nwIHdSrfl24Gnj9~ z?k&c^-PZ~f%-YW0G2W$ryqH9Gw{Hsx@Ulvgo_LY9;H87=221;c;b$I?5TsrL_#*Iv zE+%_of)Ko6Xj410%+=OK{Wtw`4d?96D zk(kvdhpy9y?a75nV1DLLK3BSFi2utNxg2Ur59y>=zZivaoRRI^gRB&TF1Co)< zwX~_5Wq@bUzv@{G3}vBx0fhnjDi#;A9W$urPwp#ZQp`Az`l70lWd;M|+hQNA9Q8%| zDtKW?{UL@|3h5zLetJL`8}0;hspdre89mEr`X*-_DMG2^iZ*83K>a+X)1=aC*jsZn2afaeC9i?=?Ip<)2^9>syB+LCx8h>?=}g;@Xl?DpF<) zSc!iIsgR%c^r+CA2l`WU#R3sT2ME9*s~*X3%62i9X}_`ArYe*Xh$Hhf^oH;k{MQUY z=qw4o6NG+x&$U{Ro`IkdBs;{6oe_8?qlj=*Tee!1D8?y_J&!+c4{V~95kBW0SfNMA zM(R`%f;g1wmm2JNy2ui0+e(4j8P{(0DzR!(1W6|Ht@HNDc_n}Nu%TNtp1kS0(*FF_ zYS}9yii1?2JgrPaR#u0sK4ieIsPCe`^|nXqNm2jgy-^sKT0 z*JC}8QO&Jnu>FQNK<>1~X5eeV$go;s7pC{h8026gbaTT-;>VTY5XBH;@|2$`l&%7v zKEN1RqBd^0toUMI;g4-WmPC%!qCK%%EQrr_$${VTU?fi|a|ic%TuvTNn%EWX<2hVP;KqkjQw)RO~2s>Z#;ykQ7fU_6(~Y_40_p z-(+wHg-Y^+(*kYA_%QusU9fyp<^G9LmuU^s;pg5~yMgz+F4~Jhw$)Z}NX(Qd2QS~-xvcZAzkAOHgC@{xLEE+%rMUlKFt;cz0*2(MCvSqaZnN>t@Po_d%v3g#+;{r^r z0%6vV@z8yM{JH50h)=kvU;YlT4qx4?uR9lsJS#*oAWF9P0uw4c0E-Ech>j{;f^ zf?J`vq~9;vYQb{XkjCq&->ly_*=am}(Qq#3(W0;B*|@V#t+&A@zFqxdL2)0%D#%d? z_%)bSMC+*JIcsEuBAJ{Hzr*l*~rS0eF z+-MBx1PWq#XjF(uIgB2-raFs3?k?vEhe8nO>iL0LBRq!57TT(RM3S0pFBgfjy_{r> z+Gf{NQ=ab$`Hnd+B3~IKWTIQaG4YDk52;UZ7Km>WX}3lzgO2Ct!rZGtK zJ;^teq33mZVg-G*_TWw$xByI8^r6E2D{0c|u4EvD!udo?<5#Zv*ZRO(6*Rf>Dd~Q! z1SkUI5}vW)>5uQ%k3T*~XfTd~fmbDttmF%1LCN7xHhAYs6D^l^=hOEP8IA`Ru2g|Il9d?#?pK^mevAZXl%Jtb}gyOI`>M zX4Ru;9bk}AsU(0zr=qEHZ?h(`0m30Aa8N~8;Nt>p$-yK>RL@Et-w11^%{bSi}5{- z>Ed-QHCS=49LEdi`X>(WB{_xz=71<>p@Jr1o^d@ru!N? z4z)e2t?WDsuD?(F=h<{P;f!T|m#wqbEbCYUNgH%t zy*to<+C4Nu`pgoA*AW=zWcmZP0YPU@v1_`rLvUPX3 zkav|V#?39gTDQ(0KJE!q>GR8_+7tceA!R?%`j9TTn+iW4{ACo zlAfmbpz++AOCChk3o&3UM^ecM$`s6q3BSX{9M2+`Hatu1>2A{6QGef>; zVbl|gp#$gURAH;n?CLfv$05_5gM|@nOX81gL8`Zj%0b9dKo1z@s<&4T)$#>O6A8cv ze1G+RtFNvvZNm@p`=chX@xq>*?PWgXv~)LM!+4w~0yU#{kK?KN!v2Z?tH(+jErU#? zj|4w8g9Rko^%sFF$r*sP4fm;fFS)i~U6n5)gOmwtse_wB>auyx#I6YvUNS?B8QPrWX6GG>+fQO+tKC-CrVt#``GAX>O%a)d z!fZ-F-HEmWMFB8YuDybEQ)$x=Qf1f^IyU_2#Y6*!wtm%vj*mdF&0<^c02>1t(nYZ)aJ#B)sPBn_A?XyW#ANyT!t+epCl1oeQrh7* zFK{AmiG2y|pHl>!y-r@v>`<{hA5>mMo086O0#uRe z8ODSv?qFRj%e`8zx(y@foH1qkb1LoVk;*4_(05^XOz6m!MRthd)Dr_1s6?;}q};u} zXEhXOToL6NU==FXupHOMK~fZ_fD7Y#Xk+Gzubf>+Fp>E9f0fU0e65(`Yu;vPlr4v% z#HjN7&14q81I|3LWFCy+`}AE066tN!5t)UYY^u2oh+fsJ;RF)%ZWqSPhcL+5?Iy6Z zO%LxFuWqmWAJdct8vist4Igi&+nGe8Ge2W94jEK}~l^tv&^>!iNkrvy_O~=u*Sqr534%q&hc zgLksQiK_k6{S;`i$%rtI3Ib7x`?JzO@F$!4zm=O-vUx6f_|Xj_FoIThuJNUpR-M z5VFR4(y>CJ709~1G?m9e%F@ha5o--A)5@T)a_jOUa^d`n;_DRex_y@ zuSElze9pY>7_I=_rj1Z5m!?k`<)f!c%go=K*?&=yF%52bjs|W-|cqnJpWn#FT%VN> z-{HM4K)riA`}_bD4Xe=&G2aYvXWu*CpEwDIWYUIApPbmSo*u`qHPh)DN29xT1*`EC zJ=Eq8jocYA%6Gx^O(kxP$i9$fV}qv4a++5UNUO1((2ybkoIkiD8fV|IBAoo_)It;)fmYnL%(qs zLMwP^M5YR!@)aorK#%jk^plb=W~K)md+-8zOR09WehlvJ3|Y$N%aMy8q7|w4wjM_zrt4QUDk<3vVvIL$(}%GSdzh@R4u` zTxu9?5~U_R5%;q4q9+uoCN=u2Gj~d??ci3g*JU@KVdht_Y*J_vNphx+o*uni8xsqv zil{^PE1C~Ns-9o_>(Nsu7kK(>hG>_N}$9 zQ^!NUO!C0p#)0I7i$j<(|88{%XlsKQlxK71deYl>rO zcU#I(S8|Km(kb^_w-xxPSsC*$V1jbK6mz*SzZC=uY;1er7I#a_YtpNjnEOjdzVQJq ztJ{lF@bRlp9j8$p4dlY|23Tm!1tfpJK}m-(D{pr-$yF z0HDGZr<EmQqMTJ$Y=zG z)M@X&it8W)%nu7CZB`?{%*8NO%DzPb?_yN9W2(;pN~)(qi0 zGr5xh=s5E3WqQ{=v34-vHb?CX z?Kn5J&7k!b(KCMX>R+X(zfJ}kH9O{&E-Q6b(U+rjd+W9Q&eqYBdmyn!vgwp?OdRdP zqQJjhMBr1#6)&L7$VfLe)vP+KWeUHurT6Rqe=mPJjOp+ZNru3u8M?U{Xv5* zBl2PMyG!f(TeiIP4^C(8Hy0J(wk@|OA85eDvgq39?!m;p1e~{BCmNg&jiaD)1)>9e zm5eE8r>m=(9MsTg4>`~pWb#XECrJ?6k+`UnHr~Dol){`o&z)l4mH-fp&*J%KxiRBk zM&F%EOUR@Iu0j`287ZFB6^H>6Y8!N8gC>*^R#*c-Anr7I!YN}{2R`uTrIo*DwQxXR z;#3mltvq2=p|rWyJxvLCRvu^s@zw85b^W*d^>$?eMG4^FjD&18SiBBt4^ zrMHNpi6Dtz+_YV^-31;PR#|6ToacE}20mt=TD0met4IhiVdaF74;i^4v#+r+g2W)M z$0g@~Vchi(fB>qtbT2-Y6Qp$Pwlr6hR$i_kE3r_09A;p%7+SrtU^SmBn>6i46Dj$%c*)Y83`^0B|?5-nV)fR%E5HPJBm#}fw)t~xnE zr3h%h4cxhn64bypdQQ@~w@3a;%Z1p@A9Y?VN59RGf`t|1eiI2U>0z2v7xcL<%`(2T z#7>vd!}jj`5{y@ChVC@o1b$OIYzCv@wZ9pu{q7P2&kj>6<44=C_724MY70@t*P=(d zw9bi9dSXRDn8y=InTv{im36Q}N~&f7{xBN*#125ezY-y3iEc)e{2oe1p^2G@E!reO zU>0FO_8{@na@9|NJxI;~KBHMD968QGFK}vFOEd$BbDnPCmJr#2MV}vwYC?fy1=)Kr z90=N6OI;zRer-Nv)sm6l-0^dGUOOWKqr(~y%5B?TuFe54x%{As4Q|s_VXiDW?-F{1 zax**KFl#4E>dr$Es8;kTf(@U-Qv`X&5#6&p!H7Tr?Fz)^M!mdx{Is>%RCqQ3UwHQt zqjVnXr@^vy6BzuvV}uhr|8%vh-cB{W%U@?cf|3L3WqnVNVj@qVms;FkOp}=D&QAj7 zN1ZIp588$Jn1R4ZpSc1%{YAxJy|NTeWx#nDo>@nu0g!2=%R^JR^t=fFcVy^vh*;au zkSLJuL}s&%@B3i#jd`L1gF1foo7^ZOR*skXiA3A49JN{j=^F}9}Y;@h$nAt7@9W{mkA_HvnJOtPZNXx2+#tK*lSo}5P6 zfC56PJssYYAL|cbz|PDQP$|8-OzOJMgDi4M06PpOd-MrJTSJ$A36TwpK}5UPe&{7U zC6L8f|FAcu@)lkjtv$Ko`3vB@cb~C0ZOH`Z5n5+1)fTb0@L{CcItFAJQ+sd<&{QV% za~y2o42_A^7H3-B5Wj*k!}Q!R>H!{9PS1EKr?qm~4*C}2H+OFQa73b=guDh6t0RQ+ zXyD&O1^sH(BO8!6Gs!Z|gs_cF-Jcy!hVsWV%#-0o{Dk+@E>w_F6946-FrpaI&ZEC;MB^%E^!CR5 z_cWN^`EI`Frka)eaXFpM;dE#pR37-akVajw_ZB<+ty?mW5^~d_9RgT54?fE7{LjO{ zF^CUL({Jaqy;x|jPcWn@h0AxJf3PRiW*)(XoiYq^X|3Ro>J2K1>yu?-Zr#{TbrC(7 z0~4q3;8-Rylk4-L@h<#dQRAoC@ZabmpP7fULMZUW!9y+W{@rBEY(VT-`S*rfX&zh0 zai%=21NP){o(oiRuHM5Oyt<_0f$(?=M6%GXW+X1(Q}4z!A+o4hs9$(`{7C@11$v=Q zu$W{b{c=hF%jC^$$v4!C6gtDV5%=$vKw`iINw}#Hlc(OLzSFGx`#12v+0P~6N&|iM z>*9dB2vkr5LY1Fg#Zfr0*YhUOVJja!_}D!b%{=3ttgN)Z*V<10^H@|gaUwApj+W~7 z>O-6PW3dtds|qd8jQZ7lU`Go1q({);{rJ6DVg~op9ZvK;Po_jEbYjcg@UhIMbPn)$0x z6ivfEKWQOL+w!X5)BAULO7U}sh$bT5#(Ywuz&I=V!caB9>%Gnfr?1 zYSUQ|rs)X|%`ea4adUe}0rZNX~$d-42D(lYAeMT~Xk^e!u{ucMNka!gWdRBB!Uq2okS1OfmBCLY(yz3E5qf4X?~iOnJUx1*r@ZhUQ^4`h zGGVf08P8}ms#aO_+NkcP%JTesKc>F!)-6Wm31f>W-q*bF8d)qHux5i_%4kpTy))e> zn^B$;4vn$;lZtdNAomWK5uc^EDz7_Zt>_(dHCdoBiCGTK%2TF=A)#HX?xy(;O}gQ8 z3@q_TebN$WBA<~3BSEM`Qigfhk}LC9d)*6@BywEW9;knnXe4{27eZptspg#~+t83h z9NBcP;*qTx(YD{$j4JzAl1LbtRZeovgWdK|1~s^~V)Sv!;_L{Eot z`z%0T+F#++-0J}HuyA5Yhz;m2Wrahlrp9}aRr#{fX4n3?dn4O&srnnND_E0mRl3=Y zC7Wju*Yy}o1h!&3T(L(MKot&52V0gLaW9N0F9DP*w!bT%!((t^$$32Y z^SAstpoR=bupA10zEi*zT2Mac!KJ0Iv!) zri-Cdx^E!HAZO&J2S!tv9gVc4;g9F|7UEc>G>}D%cnM;*JOM2J*+88`4wERa-+=B= z>~jAT)wK+JQ(cwp(7_=j1NN_NhS7Vy6@a%Mt&G)te7^4+`QPtq;AX-&u5a607^(u& z2j!KWGF5M%WipEQ*N_Y1JDem9yAm|w7(}*(g9FMfB^KN2s9vwUaw39uUd-*7kJ=lE z+Id~Awxpwd;JY{kXHdXSK9e;30WXUVX6BwF6g{An9D(WnqRLqXJUL#;X(RFJXQCfZ z$a@I-@i=qP-O1U!C(`j7TU0@j7|+HTmVc?AM`q`(XX+ zV}b9$!vrF@0uafL^Dp&WW*loIEyx9P!c)XQf_=la7+vp{!lnp6y9z6G(Mlj^LH7+l z)6EB1rs4CUw>An;TV18MU(1>K@GT#jl_NcQu~!r>%s9nh$Ua-r_k=(_AaW8(Wnujd z%07l`_E%7265(>3LZbkjE+Fl>pj_dMp734G;<#f&6R#zAw8e@3veO3M7^PKIBBwIJ zsCW@t%XBp^+AbUNT0-5SDaqi)3~dqKabd_WzXnNOX#oWiZUK)IflQ8qO2lf);EhOhpiwb zYT!q|vi~YnK!a~9=zq%}l`K3ne>NWw*AHJN1x^ zFo{I0H)h~+O`rMi`BY90QU!SRTyVeXQsXdhQBQdDklZ0xY6$3*^?Bdk0&XC>2*=#QS+q^s5phlwNHe&u>- zgrBZ=pnCYhh$fV-pi~2fEr|_$DEk$hi53G%D64d0{XvJ(4m*1Uj3au;MOVFHExJP3 z#$+AYIu*BRy5`K?KyS;e7QrRW?z6PIS%s<(8$4hmta+>6rFA%3YK3#1!4s;l>oRHM zvQ?+_j@NyqR1!R|ip+#^LWGA5Z0Q6NQtT?OOjB?%;Z{j>RYm5F>}s<*CIHNVkDk+x^DM_b?-$G>~(+P$ztQ zn`(^txd#d6SFi;>wHnhdG6qY6uIUIAr-*e`*P2$j>b1u?%`eGG)SM!4!6^BaGXM^S zNOKfmDJk(8-4OU5A&JO2AhX`7BOJCt++&?rCPlS7CM#*!6P7CCB-inZ{(OzAEelG^-;L%9$JAM-CXY-GSKr?I zk~}cFQ7H?s^kqjDP~DWNeof(X(thyd1!Yo!TKu(Pf)RAy=+mF8{)U#W_B$wPB1S<_ zUptJCM&+Z9%I`$_A-Z*Wt$cb1MOe5x%1QT@itPT+d|T!HG~-^EIlDwMmUA?o;=LPN zZ4eAy0xl*_D)E5z?SV$#Z#1b#BSyyT3GR~`U!@C};rj6r(DEf#gIaMu3!zl@u z<#(p?u7q1wwlrPXAxpbReid^pckFBnu zH4oxUM+cF)Bk=`R?&+C#H9+c?p_&C$(>kdk-5h!Ys%gp?^h23+mdKu&^@F)}mPbD` zh`==HX?O`lZ=xRHt%}gLR$z)_szc53)jeMwbB#t>D_GG))u;c|xk3T5R?v+v)GIr{ z!5WLkkG@CkwLA=CiU>gm?#OjQxP(a*KVcQ90=({)RP3CeKM*Z~1~CmZnWVW1k&qfI z4WRJ6h?OdO2`j)CJOflCP;S0l4S6So&SQsYwnxJjFZ?BPkSV!Ah!l(05oI0lA3!Eb z0ZTO3@&f+Xni7r#dj(4~1~-cOk9bT|4o4O-lW;i#-R6Jw+PBl)<@lw3%alZKzx{J~ zbd&1+k+jzJx9j(ZxBc(c+b@pWm%e?iJ^Wgmeva$5-S6rB$?4S@d^ml{obK3Ncprc7 z@5yO)7mSMu2bFA{8_e%C$KWHJoBhX^kN@|FdVG=5hGgO49M47 zzCB+z?{=rOg}>{;>mA&l-OkZ=v{%J6Xkx1@B5XBDW`7!MreLF4{+USLAPagt)7d+p zneE^;@sT#>A7`+MUR#(nSC}+PURH18Nko|>drONMBRyuyE!F|rvvEB#48%Y9mB9&S zOReP)Nb(?&*r1VDAd$>vs=kqIL7IQ~mU)648NL!8vC7gleZmmr%e&mRM=hkPF>?F8 zaEtj2tO1mn@gEUHLzGWq43M(v&ph={-Dk>r6oI3iVP#q^4LYTQA^+GfUuw<+q#D+! zy8vgnIpo+QzJqKH@IrKoHWXQ&*WemD5g>64XaBdt)ZHswn zwvDB-aI-=jvW0~nb^ym3=;Amzf?U1Su5biNUWg84)i}t`bkf|2ZCpy$F2{B#t({2a zhP8n{xDslb)vE;0RmK=(EnUnQiE6r%36eqKkWMAT7rQxGSJ+}-+3wU7#@fR&M<6y) zc|sTuW-LO84fNBYg)><4p?qvC9qE)AG@Ove<~tuHI}n*|QJDSWHHytp)<(~#!R2tq zERC*dgmJ7yKvl=(7>D&SbDF+uwEURTmVio9B$DzR>;B@QNp>|oKmp&VapI0Q&QZ#tzYcKDao9>%%TscfUp&2ZAB-nLl=AXFAnJFYqp zytegOV4@bW70EmhmiOzGvmHSK7Hs1Y4`iqOTZjGvJo}tpH)L|=E z(pvQXEvwgo57)h8(?r{|Xad;WMh%*?O?Ng;K7ESv{T0*Ry^Jcxd~Clxe7m*}rlH{5 z@3(Ayz3vBa4nCTcGtXJ;fYnLO%)hNUUy)Dk%%DGP-Mv#5iTaHzROUjhjX)BolN+Zm zVTu3;z$g$+HrMBl@EQX%ne5sWH(`R4-*kwS_2GXimp{%!^90p&1>DZ~!dCz)Di7A) za!3=JCbMD;r=t94fOiAChlinQ2oZEj-)(nTw8&!wXDOB|9u{bHp3uiBN* zogt^=ahOf&4R#7?FAHh#?rG?sKaZ0%*epXoe%{EQ64pX$LnK5uVHXiyFuF(@FUahQ zgiW8$4cmB^IG&Hm{hr}GfzoMLSm@193Fh5Ty{WXl-KG@tBcSo$n5sQY`LI(C2jGdy zDJ0lD5O)ntVxD#j#>QvJ!94rUkyPf?j84n*VH~bA)+O5A=HWm{#%HKaZX6;%EVGiu=Kv$DsS704t-Z`Jd#UBqJR_WsOksQUUI+h zO~siiudZj8=|vk1^+PJ}swetJ#}t5X!id> zsD4QA=Q!u-1q{4Sn|SU%_*_H((r_)#M+MDBQ3V5{#}p0J9||{Hh#m`92r@ohmUmOi z=oZh9$)1flwM}IkgS`3Xvxdg+E2kc`^lmE7x2Lr=&vS`-@B}-Jzj`x)EC2aJSWVL! zPb0_=o3IGWZ%P#5B0*(WQ|%c+SU52tcXKiDG!R0dvO+7H;Uxfw#pdRznyRX|%~pG1#8{B&T2$Y#U3otC*CFFa!q)uOA>0S)+pL6NDAC%D-;&75wDhMgGl4nAA&}1DNs7C(Q4$owfnx zjBK_k)hbZkt(1KUSV%E7INC|&-px!CnZkTaF6D5U;$U=$meUTDb7$3Lx-o$T%^UmG zkpP5pE!o=)sp0f5Glx=fLQv=8NGs9L0cSJSE~s#FfHCZd7!AbYKi!u&Ofk6h>vpsPSPZ=wGs zJj8$`Z=7U*66@~0viE99eBWwqGfd-SBwTV8Y4)4h36ho!4Ee6fN zjo33np*XLA!0IVjODKjZts4g)0*U|meZY;Es@2)fJeI7`gkJ?0RVDSkGtLSeDj)!Z zy!TO9LIl=;*w+$Zv|H8w%(ZJYm88p~DHt@7WTYlf*q#@v`K4-)p%e$%KcMKK@&#|+Pd}dXBStwj;2Q{*ec*)Iz z7#}jTugD_<4=0PmgvrJLksd;;y-qiYGHYAG0eahG%jc7@n>1OXi z4dLbV*5c%vl(3J?*pzRB(ruZ(@Pw#m{0TwokOVu)4h<+c2a^p7n0x!#P)(D#&IrQmNiPU zz=0+KqpwytP)V8fN;sEvbXrKBW&E6c39P)p()g_f&Ksdnj?!<2WO^k`Iu za|}&bXs~o5_6LH#xQ3v>QAyKQ-hYZdVY)oNG*Z}DXGJ+DBu#q$!;2_3G=Hb;d@U#* zw4g8#jV}Y8A4oJm4H7I1K1@rgyD1SoDed{GoneE2b`Qnx(xc&zT^w7>vbi8*bin8` zMDhWJ_uJf!BB__<2bEjKi9~QD{`X7QbkgPtGc0&-}&^YEfFoh~43}|LNaUth8*d1zZVasCzIo zFrR%BGa?y%^M@&t;w1>NJCl5q)27Xac*C+QRb;(w)i^2o`ubhLrijqb(d7^dlm(&6 zVV=r!sY^OHm16vuJ2u+E&1-vd^8Zy!;c0|eFtso=G+ zc7ld?#KBEsc1hKqhz?XQ2Y)Zyx0Ra_Q;vs{-QtZ<<(%(-fC2J8cC-P(CB27RbXpv znZKnoY7n^oSbVXc>;K~J$%T;tfx~oaNhTBrm4!K2z*te!Ii7kSPRC152yQ3o_K0tw z!CvCZRh!4vjqR(AmtPCWmn*7xM#edfM8}ig#pOW6$xEi12V-(Lvw8`l4S15n1MKM| zsE|e-UqTPEjoEhhrMWu2+=t+bIX{M$QTgr;5FUb2J30441w>Dey?Prv6h-203%-FH zCa!JE*l=#k`CQCO_BTF8@j;oc5pHTGR8lgy26Qaj2XEl5;*;P^dDk2oc>N;r`2N6W zZd+eLKKvMFKry^>6(F5U6zyUm8?`*oeVlE-dkGu7at05-=o|{TsM-ulhMx+CV8o$= z8~tM9!6AG~xyC)FqF_PtV^iS^R%}0ympmsdj9KV^{z3tWJ~VG$a10@h-;L=`VozWb zrjYdZQaL`Gc`OZ<^}xRHqSt0reIv{LCMkhAxm=GeQSek7$FEE;K-ip2D=#qEjq#MX zEOdy1zV06%>9FVOO&s12=UaUJ)+gsyKrgnYZE1B`V)&VM*tR_Y+{QTqG4h^HkW<9K z={U>PKN)P#665;X?tehj@McOKY1+S(Z*hrJmypX6@}IBE8Y$*LIb3bXv(Nnigk)<+ z{0GU*%J82gGsA!FTHI(!#&1pj4~_U-f>5DL-OV}2-2n%C1A%AV8DifPJZ{|>kvI`Z zGWLdmpHFp1Hu9K-6^mXF;h1TtG`;FltGBL#U#HLGgH9GbCMm|u#?iNJ-lxz~tRke# z=z+20AcoGr>t|}peH&)XSBFvx`O8$F%~O4K#fdaT;x*RR_NiWl%2B>9jhfQbsY}N( zd3k3vz6yTlXTIgfESdgbXDI1v_>+8xOsDx{_OnNscUK!C)8?C+7A?yptCL-aISI2@ zgE1*;*&2Xp6vcqjkingS!Cw4ps^pKrw7OtWVyXb{KQgkzK%~(nk~ZoK9sPhDlXUXx z?bEKE$1l?FMTsU83y}1yL&MAhnf_mZdg~20&z4pLrJ73gMcUA#uI{VyTbod@o9`{x zo~=|1tL_V{zL|gVLUFq|rPR>heDzTL_kg>rV0<&|W!M*{&45r)MZr7Qn>L$A*E8C5 zbkK2Np<)qQM`UFoRW`Quy6`RAj#oAJQM<3Jmsf=l<@UlTu^s}?E*;9;?jT;J-0nBy z5}bBmY=1v>_8%hqtw-fh#Xw|99zM)a zfS%hUzw?zV8Xgk=L zwL4kqD)GuGWWfW2(~v`?`Cic%vg>yRlYr$jSwmvK$f3Tcy6M^$G|hDw%Y4cr4K#T~ zMN`&>P+0E;{@~I@#N8SteX-@KIt=P?rBZQM@vKst(i}X1c7%QVtlMdCjmSPS+QqkT zB<~FtG6{%?l^(Sxm?r@c;HHJxJkEW=`}_a>sT<%KvpKeAfm>(iW4h|{tala$jaEgi z7}V(!UP7P(9NkA-c#h@-&VA)*b=LxPCCDwnM18it?zD@dWOITFDDBylh47Q$YrV+h zyRP(?juPG5D9OvF^&gyAd`K)4Jn^|>E~|-R&cm(=S7>QRVIFZu5(}fC4PQYBKJ(lf z7_hXXqwNEefzyd&xGb_{x{k-b1!YH5gGssf5!{O z`_4lQ9qm0mUmr~I(&}qPUr_dn+86`MX`?_BDueO`KqCxF=V&vZdaF4bDI{@UIDg9S zD1h~5fJ^5(8)+Po;F^wSee*Ecw*N+{k_W(X2u?QO6hZDs(Xh>QoaM$u@wu+?asvdm z@iP>sx0~DcE)wit^c0$*~H<-h3Jlv^mZ_{6- z0SA_VjwJW3wZ5wdT^;jgayh%Zs@f^n{%K!}7uE2l-#-v-X9PhA#s+5P9XOxi&yz(-=G`Qn=wF1pk8TEqfJZ!l6wH6R> zX!(=I#hYJGd%?7F9H!#f6fc@<_w%y3NEQh0>iALHmf&6qOgmxx)k^ur_MT9Gu)mN9 zith*5dR|lmx)9y$mhclRz~9Esx6F-FdS1LQ_Grw6M+I;S=-Hb*&%Gh)y-`Tw(}9yA zrgN^bP|SM)Vpkk<@%4JYkftLLSATr;@yH}0hJfcfGbV5ub91vX)I>@ZeZEI@9g7}Gt2h2Nbwi{W&i@lfpmt+dgu|b<7q>3yyxKEa%?To}@)$op5r4UoY z^AEEwa(G3!VW{d5S?4%0`#e-c3V1_6i;Ri&-Z3sd>$tG9D?VT5WZ!i~nrY<;@&7bA z>rY?9O$h_DpY{~(qU+|SfaqDM2Qsn{aKL2PM9D6ggJ>k1O@ox==FuM71Y~Fxj(Z;r zkdpAOWD~(DGdD7Mjhx37jc8r<%D!+Mw$d$o>&10C!yx;R;|L4L3 znB}!aa#|?_bThrYu8?gRi;43?0tzrC6Zv(1ibE8S9;xi?DOVN}J%)G9g-+DpfP+@k zM0I&lnVmCPn1V%L%AFhVm3_VmPh(CCF*S0Q_AVyH4Bj>QwG9QLIMdU^V~Hm39n)=A z&wf$Tx9gc(uHgCC++mt1NErMdI z{gv*cgV>Mf!p&;n@xvtG>qeWn;_7-V1`pNotsEkmgD%b z;Fw}vbp1DR@A&OZi{ zB+`Ww#pyIiPcP|$sd!if5D=0PCBc-1hh`SIF(f6or*B@h(R>2m3-t)-Gyk`Dnzd7} zyT|XrejBO7<3EVo|H$uRV`lzuS8_dC|M*?)|5x0q(qI7K6WmDIn&Ns>PoyP3&dxM} zONEfEDwIUQ&&m1ub}j^nEbe=a=Djl=0^1bm>-)n_&#}|%^~fis?$aD)YV2IAOVy&x zVZ`s(YWPCgmF{2d+5dc8_Q;GK@!1;91{ZOjnD*?7Xd=0M=Cpb0v%UVH{!|p`Mhn!j z6LAcQrq-20;aLb&cQsx;d6nzeu}eJ^@LN$sjlD7O-OZGf>(-e<$xm+ug|Hb$D62p%w z!-Mm?hp9Y( z;pA2B6GufBq#9%#nMFc^APWtY(n=_2K4!_K84;sbES9mcKnHjs4Rb1Xz15o}nc7l{ z|8n5aijK-aHYG3=Qa?Y7#cUs%+p7pN^+ofRUF=$#8!?v zm(s`-sg5_UkA|+%CRNht*@_Kaf9`2z8qp{>l0=dJbe!nC4@xv}$f+d7BY>#97 z`|aB$GD89whW3QK!WK)-NkB@_xA9v(I)q&i7R`9OL2?8s2Br>R0x5!l@LZbn7falYo+rBLHQ~!HI4cK?XNfg7%&fgTMJ5N zFauD3y6nCqVJTzIh;OVmr&#z_KiOH}pIfT0y1Rr9x+z29Jb>*<#b ztF)N{>X6J`cHLjudvF?iTG zt{W+@wGGwcYx%Oy+JnUD$*>stYXOMqgh~#rkilvKQQ4Ll5Vm1b)y&vjFiy1x6PeGn zg7@>U0(>gK7DMTK#m6i2^Gzwx&k4U$dL|E&kjKQZtX`+~;r281orD^OL$2&=kw zzGWXL@8Nj`GHH|p#WbNf_#ZBhbD>J2P%U2SdeYISz}qUg%~GHpjV4$PL@#<-k?Wh# z99&yuso@7?S_N!p(gVQRsya-M0>PFv49!w*#~-)A+vB8Qy%;O;{~%M`#1H2^eD=Bb z`Mz(B`6r6(JA_z#i65!GLu?-^&yl!U?kASfc4{Uvzy)CxqPC&60{FUa`SZ%0y~ejQ zl7DtC4AN5%shb{bAA=&)|VPEdayG@WY+We=6* zKn9$XR$-axo?dYa*lElUo++W|e$|vKS?8VU@*uvJbXf2a&+^d}TQb)Tirnm@0dMZB z40$e!QEAFkn#H0eh>{GOCN*q`qKgUXY8}C@(pR^C-DqKcVAn^aiYj`mP0ehhF0&0@ zWnnhpw36mC05KoGe6j@MkdLo2Njl*(m84}S45Nw8Q{B)0k)M@2%hdm`|T1aG3ik`0%7{dLmL)@Otxr$RX3iQjq%y% zFRV3l&A7=ovgN$%8f}Z#{l?~xfTW4zzjc`~O}=4~J>un(pN>i@0kS7O#5k%=kS>S+ z_hbJe$0mKAHLX;gjnRx|bv0MZTKa?1^==ZXHuSS=xACE6{81tmB>S;>S;s;+>wpX zKp}XexxOd;V<(NQz~c2hH57Ol%X~Bey4pbS2>he|zl||g(wYYm_fPQ5ZM4!Wl=^E@SfD^J=f6k&umV4-K3%ohk1&Bu=5UL&7 zSoSua|KJpDS}`bj|CcncZ!L&$;j2t)_6|jY-1R1%`&u)a-`6HCpu1dZk1j9n=A$M> zrns7?caF~rO5a0H;B-_VZy3g1C82paOK%ijt}g-M*r>%|c;Cb8jF6+jkw-reslYVEg@W-f#Jir(&|-p$t`7Sb@5|ZZH(y#A4W1Xsl*rR) z&7x7_O=}@i7j2pco*`9EVM-y$$p!Ak^YX3O)>8khGggM6dA>{=T{j4|QDTWQ3M*$( z?@8hPU+h2w9!0)}CDY<{6PnfcD@aE|=2?zBw~Tg#BfZ@_p*+tU1TvcGvNQM1KElYZ zv0_CtYJdlt_{G%)r{r9n!=t?BRIq&DA53Ty*u`;lzW~()6D@v~H5pdejF* zt#acU^A!t6BYf5fkmLt=b1;(~>kjfJep-p?1_mZ~DztiwX|9WWcoK&zj9*3pGaA=l1|lS%x5J&8=wHA)&WP{- zpiDXblkLjJ!uj7S(-uuz`|VN0pIUuKe9sEWJ8FF#5WyTO(M1wj;{iab58xT?9mLZ_ z8vQ?$f1h$UG#@?6d8MUrArK~ZHrg`H^D;NQeO(_Ozc}<9(M)NMs;jqDiPRvch|2b@ zn>yj_K+Lb))%knB^-82Wt`wNjP^=TdxQ+4gy^^AnjX5b*4JxP;t4Su2%)C|5MzrdL z@J5)*MlQ{0H66}QIkn=+6`_vM2H9mSexrya%TeXoX+t1>8e8EXQn7tqei-D4N{>(@ zM6#~RDGrG9c3n*1x!D)$WI4=kbU%Ip9iP5H3gsAG+tur*hM4Rl# z4xFX^pU?Rh3{EiCWRp_Nu4NQYPIlWmC5lNz|IQ8ScX5sgpWID(F<{q?23gSj+)^XOn9QmH#VHe1 zP95Q8g_(Jx$p9otA%iB1*H#dZB!lKUP$wyi9~PR`KsjojGXA?3X$C*%q7K(3+qTLx ze)njFOH~u>+q6owo}uoiN}>ZQoWAzA=Hgpijp+q16WF@syHY%jW>Ekg`T)C3b7_Fg z6m8qhlQBgW*4D>X9RzqiuaMc3-|dZ_+c|tT*B$$kA`7bz9A`s0`9%naCyAH+!@wsG z@sT6eC~p9oqkGbVzoZ+7yr+8302k*njM8m)hbQ^n^X^ZZhbnDC!3ci%ntI4(+0zhA zL|X6@K!bH9o@gd$24te9fmSXb7~_n|{Qy#v<=SfSC!xQ7W)Y?JnZN1Hww<{I5NrlW zth4l`NWXwa<6mSGNQQN8Wd}|42uyaw>%~D3bQhG|Hcv&kb+6w^b4fZ;5~CPys>NwV zn;%AcYHrAw_V(`1_cu^|#`hy?!xeHhu2|yP;i`3goj&7gSeKu6qr~aOm0Z-FIunxq zdK=Z6U7hczL)OvnqZZLYq7jzq(n8tAO|>O|goKYQ@Uu2L)Bu?>eUmGtCkY2XyDR;E zSQE5L4(>b9v8No;jicNUBqy4hlZK8uH`1giq<&^yb1!s)%UJ7{XAt=|KTZ1w?CnE- z+l@?ES2fe0-anHAVVNft-DTz*Z^ajbu>(G(d0{W6e+MS+9u2j~SwKvdHawuxIE?Bb z&)mq-POlIK1)xvoZmc2g0X|9E^~hdr<-Nm@g<)QlUd*q81c8$iG0ok>%^X`id7NS5=^oC;vM=+qtdVV)y+j>Y`0i# z)rA=T=(sI$qlFr$WFs<#GJ_`$$m@@KtfJ^I1ux*W&cLi}m1P@s@%J26#wbw)=K)UJ z?)J>JkW`U+h;0GEa{h(XFxBUZ(pAVfVWBROJzn#>B9|qv*;NkpQ<&GG< zRSF@(rv>rQI=8GE@-Rh1uXvij!Bx9$b<^=@a$ajyhH*vG2X4g}%YEfrEn}v!jb?ix zv%Q2&=gYnoIzhvP+kO^!o;=u82HX}J2#`zTrs{vnK_PC9hG|j><*5$vpXRo!fIM>v z0Tc`=&K*iX;!y??6A}aa{)1mh8;vR>+%pzMkU-ydA}t~o81qoHQAcyU`-0Q97Lq+M zPrX~-F5W>ZjaKacfXbzUp3K+bnhSLgKmqb|rJKQ?mH*BZTLYG>^7!ej-A^ugR9-LI z9<^HYWo9)4F(!gzzxnltWoB(Brym2AT!n;Gg+vkBZoZ88o^RSnI>I;@-n+H9xNLMnaU_)f86dcm zC8TO%i3U{p-HEGAcB(g`pJU$-Pvjxmge0hZF{H$r-T`s;8Ghx7J9c5WK*s-T|IVxVm zhRlqAE$AN8D{vFOnH>3c9f^eB*W+obt?zFxAHhR^wY~86bcc$hEKYu+3Xkod=uA-EfQtmcyy8*F04w|-H zEz6nIdVYpZ?E;0ut+4DJFL*drxaHX9Mlzh!y{@`dI&UB*PXQKtG>8Ev2PtTiDWN>Y zRXI;Yg&R?0MqwdS4QQzkQk5iFqK=7z>LlfxV#Y^6Tkpo%`8(4>LMZ_4qo(QnqxyJR z>&qDu&RBb2F*@NDLTy7)c)hm9O3RakmiOp*!7p> zd{Zz8%3bk2?xKv2iF7edy5JS5#UJLQyxxRUYi0m_l755nWBAH3qaw_mRDbaD)5CM2 z7_C3K94UTZty!6qSC!@OI1zZSqJgw-OB=>E#m~K2}iZ>{Wc9qVNvx82o z6TURgNCYebQ&;*SYRhI-RW{*`_o5IGqAcZI;Fo28AYQcP+&Rtx()qu!9%=k0noJy_ zMSO}~8FoD9N79GP^f>eQS};_n>BOGpr-oFAb@6_z#VOlYpw91axR&6XljPi0?jLX5 zwlZm7cxd6rdSYKp$i2hbG{&`2NFsp7V2$tMoa?d2@hmhaLlM6^0K8AAyVpDR^qR{L zy`ob=?ZBrHKuYHsL-D--25|MGWdp5y!++YLcOKC+u{fU+DGEVF%MpWAIAOqun19Kw zkv#t^$!CF6-nx*DbI`LOFA1j=0W2UqH?e1~ z491?l4mRTDNIK@W=Qz;9+M~t@-FwKzTp~I0i6)j<@C~oMPbbO?seL zzn+wVJ%a9;$YGyK0wZYXTxaHu>`v|k>+VY#BNVaXgw<$k-a?4t(lQE7ZZw8`AL4oL z0UCpRFo-FE6f>I>_<@Mfs-LlWJM$Q^DVrYAUA zUCQN=Bh{nu3773HFZG|0D*JyR2(bRr2L7Mt|E^@;g|QK{G5qA+BVd~^m&lccv2BIS zudphdk>}#tVgtAVM`ZtxFojTA$EDEAd&ZbNoUu)(h+kL8;&?LMvFC22qw>O)Q9Fom zR0x&!nl+Lch7pAhG5(LhfJFD};a5|6hc!B#cedG$Jq6MX>yRnJdDB@$`~FkGkm=!7 zDleebxrwQxjwX%qIS%^tt%A)1Pz)1@zBE`>vwj>)UdU1n!^QQ|e5}A;dUxfQr{>zR zlheW?7w@d~)&0cQ4yq425|U3@fSBpzV7u9}_nddA(YT${UObGNFa9&^gpz09ysXgq z7NE*%f>+V?%Ihj(JbZl_wOQncg=xByMpPFjgqUG%ecKknlqWt09AE&v z+l_?@i4%4GzCNcZs8S^)t-i*n2>dS6Of@PP1%js^FR(p@gpoz$%h z?G->UL1*lQk~ZaUo=j^#VEZS95qNj`A{~ACsR2+r$QbsI`?dyo-!!C$ji!fPQKUD- zA0E&_*;Z#y=a2_s%y(9^nsRFr3Elt^%h87d%4x7PorKf{`$%!5P8iH2XqG zY2o?&*UaQX`9xdU_$pWX@H*Pf0>u zh{65<)?Za8TEc*qd$C&la|il+K|_fLR5B1~B#*o6g#uepy(KJ%2kpw3S5B$PnTV4n zs$fW}%&FkZsZh`JE9gfJ#4 zgem1$=nE5$DrGfqJZe?x1q-3pUq~UrYy#5e;pzI6TL~{jfVw9TswYOMb4m?ifJ3v~ zQ7NlCNEj*|r;^v;bSIS85e#Wmuv@LQsq=MkE?TuVoXS53A4W{1rNMvH)sQP_gt5jKDd@L)3vG zd*0=Xv(Ts$es8!lCOFEsEg&F}KM>I}Cxik?4+gwk9rg&S9AS`u%DF)9harn^x>Vk0 zo&u)jdCay}=HBl41o0-@6nKA5fY&(;4jhjEyE!8ak$L*~@YpNQF{L|oRvmj!-?YgM z zgh={>9srhWnp^CIZeVnbGas$Ewmp;kT&ei{@#y>hIY$M#Nfz)k9vPt>c7QOjI)9ax zLjXD>hF>ATcW$pvT=8O~`Z)}e_L7yST%I7K&Wh4PhezxI&Y*SbTmiLMXdQRj4;^}{ z_T4Se5#p-X*k6XbCnY)PLgFwb#_rGX=%=%<@6Txno1rLPesF#0F*6;h1u$J%oZA5* zFwDisp{lq!^~TY;JOO=9LlOkVlLePrQRm%qqwGa06}TG4k`Z9Ef#@!}yz`T3oTzJnM1MT1YaQz>OT1xiTXfxxtHaV}DB=u$4+d5B!_ zjV@eb&;_ZMkBx)X89HAZ^v#_o0=)axFOA4h@H`|PR5`lb??s@pZTXUl@|ZRui5&)Q zeVt_z?9HF*FnaoiK5#^OL?PZR7w1+~XS!%!x+e>oBMTPF3os!Bs4xV#4Rsi!x|i z%|6ckI>bA~5#g3wh5GR0DW4zr(ShmOAAtMe3{PAeu?<0X~aRdhWvT96C5? zs~+TYws>zE8uZ3E{kui7h-yQU2o0b01>`}7{P^!sm64wHKR{J>7RLW6RIOJ3ZTGVx z{&HC-t;;L&r4+mc19r#tXywR3|?E z*N_gX$_B+HH}iY+fbR<%*Q)TN-FrL9+zzVas$th$ClNG|rH<_}8YyDGtMTh-yVXC- z`^aie8vUkOz5OJ!1G0tvOvd+*rU}I+G_6`nAH6!Rg3N&VJUQ%e;&J_Oo4BS8AIrg+ z(fYc*>fMNQg>{>F!NBkrDQwAmnP|S|g1zP5MyLh4kuRzoScZRXmAv;as{gV@=8RfTI&Umzw7e0qIUZ#YjDR;U2DEYa-;$%@_!f@Z{y6B+^DZC;e zB65L44af8Ms*f)x8*^2SGg}l4{dRzytMKh`)lN}^$D$cD7jp=5diGzxvUf8$%+(;e~y+l%T*tYq6uU)UmwT zn9W)_g?#50m`$0fE>d9L&FdTusOWB1Nml#mzoMm|pQO_*AKE_UWgSSAhG>02m2+9A z)J)~>n?~w+6~D|YMC15TkdCH3TU!yEP0hk{$mT=Z(SNS^D)Ib6BNtgV#%OwIOgJ{t zl>MZln9-<=eq(Y`{G6T!L49IYv|1f;oaaonz;oy>pmV|O=(E}jFxB8tH!PvS!fw|R z`e=+@NBrGf77{cbl4Gd19*Fu6r=&719n7-C5m$L&_E|An{n`h_P~H9uJY4gl@!>1{ z2ROsXx7j%zKNG{BnH=NT;$QEYaCdpjfy(^$WKjdMgN1+CfJ4k`<`E>1@5n<7Q zdvoxPe!96d4WZ2E*<3QhWIfm&Q8w|KSu)rs04r$ygX10sBPH5>6^3?R`W^QoV3Z+AY#Fv!h=$_T#XNCb6&|(=X9pkSnB{m#%0@cDTl$$g z`B8#{sUmS5cimNWepp>h>=#Pa9dsd;>S`%Y|0bf8SVHc@o#7_OS|4EX%{XOV@QWG&3T%|(pYC&N_R1! zF^o;_r_onwbXQoo)ej=zV6d;5qPJPOe!9MY?Vx_%^LrpyXNSLW$0Wv`0@B{K{MI5^a!7nBt?SsJKDY1jxkrDVneJ~s+x_e z<&aP4FU@4e5ox=kn7&wXhpl4I-Alv=(QY9E*H~e39=8@`8T4Z&LXsCLuT@V?KPXZL zf(!DxgoJr~f&fGUiG)kynPiZ%if9|n?GQQcIA%d$uR_hQJOWzSRReK%*yjn@#K6Jj zPRK9VFQ3&B)b)^alPFJ|io9%exa!t0#jfB6=48L4Fkks)&wt*Ks=r8V1XMO_Msiwh zuI7u4DdTAd>!(kKxG~@rJQuH8dbxxFyld4nSnmOAHV}4VAma&MUK5};v<%5gJVE8i z=t7*syKJg6jS*mSCBxH;nm#qFI4x8Zv($XYfiI|bm7zhGrE)#?4J^UCyDU7mLNWNn zV4*Dr1S-?ck<+P@w`0jDm^Su?E%uTX-a24!7AZVT>(=201nut(-MM%kP6D(jbIjb; zJfj*~?wt{J9Mu7u4}%43g!s~Qh%e_aYmsaZ#Et1s5da{oQGe!1FE}?mP)?%xo;M)y zf$i?mEK3&SkjjzhY})#oW_lB#f>&d=f=1Hqs+E?2l+;1e=kc1PTPxkHp7pSvL= zeS+sG$UwCDvbFq`X?@H-iw2%C`jysisxOlr6g`g^@DElHM2ZH|`)8O59K$}A4)YVD zeU;*GNh_LU!Wv}p=I8D@w8!y<#n;CopYV125f13{Ea>uPw^RB`C0i3wT8*VS1Dsp{ zy#}AywZs-n>5HrjZ7)hVNMB9uZ)TxZuB>sYEe)jF!~{GUVO z-(jz1qUqZa9=*ZlJqeqD_u~1=5FC%L1b0(igKgWBUQ`1oFhSp5yh(m@%nx=LQSZL} zMsHlNoy9CN$(vnck8~=L5^+jkcImb9!BwDPYjKETx+Fj7z65>2_A=Y(J!Uyr@3A6F z;bhy4fNVQ#5`chMT@9x9s|c-9ePSw&+(%$pK{F_iB%MLk527q3 z-2NHqOoL%SUZ)#WBnPZDZ$-LpR~6pXB_7i*GdS$*+o-^iNp7uKNSg?i6={HZQMBc{ z_lT>#ct@JPb6sZ{I(op1*KrqDO3`$liaFPTKUt4%`y<6c!Qi?cT6%w_pZw%J`&KuH z!hYmeHuFCY@G*$t&l?v;-*?=H6IyF=#A_&IDS;ul+Nk+vu{oLUu+j_#COBcJj0qV1 z%ww5AZfpI^R0kUQ{}3&%^n0E6A>p#B!_sbO)qH9N8SHAG-IF_ z@k$}HJ20|*DwL1JfqI-e5J#ZzI3#xAdt!S8EST9ybiq_x)^rQx6SDV_MaiuO=FI)E zL*$V(EMyE)ZsWc*{m2i@I~hgzbn3~8^eTfT!^8jgm8cnB9jP?x^DSNL#}^4WMW*ZB zoN0afd1pfx>uM{d+k_ObOy`k0fSz-S76&2iv%Pw=)>_YR%*(o+cFp9EpFZxXex%w+ zoCjDEf>5}>y`;!g&!<(L7VMv`6ZZ{i?DtLFq22 zFeC!OkA--nk#ExO@RP4N;2w{6WGas(9;xDG$d>&@R z974D43qjWb-oK|AzrQ5`8INL?l@S#lS}~M^bYr#biFk-qEM@1DAy86~qx`#DLCPH3 zup`GUiXevfrik0*{__lyOm>4-9WzI|vu?45wcFcW?|3T)OC$dQbThL32hh#<%WwD} z)`yGL{twVi8A(XND|BOyT}zc1J<*s`-qezXjgLq~AQ;aKE>XDn{d$GQoI*_^a~1yA z^RjvX&Rj0)4V#>B)#Q_P*Eobt<4@ z!-{l_5MA>i3OCJM!{m9{icB4qyi^y6BnG(BvYO2&k)&p`u}af5(ByuN$91?`ef~Td zBdggbwI)}JUqkbVlPerp4Ia!P$KqnF_JvPdSarb-*Tj6R9eTYDbfr`tVq|fB-wsgI z_D*k0CV>#01u3+tp+vjBP7|u>Tm#uzML9;j-TTz47>u1W_{dA&;I_nNW&zU12K%N# z2?h5_45(=~t|7HCTZ6Uze72y~r8=__62Vso1d=Z@?+=sH)jt8rsBPj?#?>~~3jJ~< z6gzj#hh7VkLa+^MA?)ClalE7DW-L|99H(mk2fy8aRhH1VyXycyz2`To+FsD=@<%Jl35K4IUr85DG;-=7k?Np+Bpg4O2q(W@||otaL!lEDu@N z!?8KyS=R;et=%@M@S^ECA}G|GG&4n(>wBDJ_5FkFXLX_id0+T-r)2}_4VT_Ul#w?d zICSlE6ei)_{7S}NOw<&!fC2Y?tZsQd5&ll_#2@L^o#C|hesC56A8=EjywwZeh`*3S zT2$gozMV*}T3 zxnL<~--gy85clVljX!45eq-APo*dw}HV{JC$n_CIS;XMAi^PLjpSabLnWtMJcO;vZ zR8K805(WHe>75*6O_3gM)(lutcLX@wnOg&gA_Ag+n}iy_2h5mJ?DR4)Ym_IPd93*n{>u*_$=m7GLI?`s&%b=!xCRWx1_ z;TmS^jjE>%Ki|g{>j4c7LE}!wIBn$HKt`%eF-Ek>0eXt5HrT}( zsix}|uvd?|f!wZbT$ULP3?&M;hADQxIkTjb^%-vLnSwpp6eBd!+Xq(h(Z1!D+Jo#K zfA2!v6*Gq9B z6Eiu{LsZ!hKR$uXZ?32x-F_rV$ir<(KRn51Re8(YwH< z9gPYZjokJ)t58qAm}+mgAhSzV@KeLVdW;tqyanJvj9`_UgJIHI9u&DMoQIi z05C9QdGfxuWL0vRxE7MFJ+|4JUaEpO>req*{k;C~LmIp_ z+uM*IuNNO67`aM&&HIM4%8NbJtJ1@IpxfuwamZ2Li#B2>)anjym_Gz^jbkO+Z$BfG z;B?$g#)kB>43cnk&=|cWI9q^jOZ(o z#O~c>GB)*?II3@P94pov(bmE~18+SHyUHDyeNDi-gfd8V{LxJ|5l}k=dBSt4RW=NV_497xu2nUmdk0O>Pq zdI=zp@Ax}xaga}D#v&ooaw}i+%u*eswOsDLVY|{)#>L#MKs8Y32ws<$ z2Y$Q!7Yb8T?2>ygDzc2XY1!>I=OdGCg+2zm5FvY0S6^2+pqpz2$eo?w<-`#Qw{3i% zprmbSC)vG+V1KSe$cmej6+Si6_%i)5dtqrBQ1)qfW2BBICNI8jBJK<{#Di@q&WA-b z+@{-MI+={db*0(S&QF--$KqzZa_KAi%haXiZ zS5NijsN6@VkA9~aaPLXj<8dSB)AlUfa@oa#uu=rr_(_vW{zMt!rQbQnHnZRscJPVe zovDgH6qu^YWe$^&Ec!3HC2T^RyN@435jt=jh%#dH00XqcLVi_k>{~y^ptbE-wU+nb zDMK+(D|3{g;ww|jaAFaD;g2OM(8<@FK^3QG;C_iM1Z|!<0)_-vUd z4(8bP@3y}cw-*%J<_AJUkJG!Mc4ut77S_=FTdT=+B3Yrwecc#G$+aTa+bxF&1zK`CCy92HqM30sZ)n7T73;SU_!UVaii zy^e61N_rNKb8yO>ZzK#+9JFy_|KMB-&?$`kdb8D`x%enB6N>mBcYx#z_1j{IhL^zbA5RtmQA z!=jw1sQf_KRc4`M%q{f|8!R^X|5B)~_l8f!)(N4G0uuj)5gK`78hO@nVCvhe7Dw97O%2&S zH|fbqV%>fbR>abHR?{^xCMOOiqw4CZN%G5B$-tpD6n%u7-B?OSP0a1u;HX?XPpRiNFa0qA#n+95iGY|e zQubnIReJFu(FuSA(R*i+#6eEOfkdw8q0qziQRyo})KC2!_Jn+#92hHnyj#kYpC%4F zag}$Pq;=W86u_e>y*Mg#mM2`6q%V%-GzY44FB;bl-8~C+ur|ZMIVDb~z$rPs&|2Ad zyT4rIe!4uYLlb<;D|UWfk#q+1mLZbNR36?k!R+NEi{fJtsXHEunhAH zr$U4?rQ-A(Ox_s|4ANt{H^n~BBEnc}R43GIf}M2g4Zyq4A{TDJQsc&l=&3M{fi*zAd zs>IET6bUb7j3*1bCyro1SWAz&hLKXpnmolm#(BCss?jX457nL*i{|8;aN5M$igKU+ zpP8vP1{qnB!!5n!8T|Mj5%JVv16G=k)3L)Vy@EN?#Eh`)90iY>O6cQg7t^&M&wZcA zhn%YDGGe-0N6P4Hphb99hqB~9j@Bd#bG(<`K}W0*21PL110XT6m%0nq>5VX8ef3-z z2z6LIuCdLX2bavNdJdxQL?%eQOLg@1BS9&W<;&9fmv_W^p|IBZn5*S57Qo=u%t zYPu&=PwT4g40SqJ$KN7!*1RuR-v8XEkCS{Rj{3UgpE|Fm&uwmpI?H{^e5$$!{=h=m z4t`Mdi?HXtB{8HF2=2Y&iyz^0(Y!Z0_I7DxKhLUvFmm$G(a6<9|+;IpQ&r zy8Yadvfj`>{p(6{=Dymdd2h~Xo^oSQU(D9Y>f+g6y!;0i+C}s@wr7oC;*EZd5csLf zsKg3iu5BBgvXaV3&6$)lV&|SzzEyRjzqsVyRQBGCrK?}&l@-owZ~`|@vOITVw1uwb z1HvGCa@7`M9$E7R1*fKnJY1D=R>gs*E1mJMRK%qjLuP7v(CnXZ*Kl29atgOph_PoE z72nc<%SBW%SzM+qp&NmOt22rqKaGU3u*Zrvt@l1D+G@{xL8np*+>+WjG1S?OAxlU4 z^}K(NXaD$5<2iA`UAu3sJG=Rzq6<;?{KEc6wUllKHydT28~edaB$R-IPJL>`?!xgy zundKWZl-Gh0CR^dOkg%XR&4g^sYz#XMZ2qtZ0pfrcMbZ(bY;<7c=&kSPB=d!s`ldj z=B^6k1?|a=*Hbfgqvb%jLv4y|>s7nsT(z`mu)zHM4QUa9h$Aq44m}QZUAM4hc~ZsOpvr-7Xc^aV`BMkjBM5mOWma+VHs}4kxH={Ja&d zIzrQ=5-fw#jlt9LK#lQtXRq-Q3xytgJo{ApbbKbxH0jToVV@hVRFmpiV+j|{VlWFOJXp}262VcB|U z|A4ib+9ixZ57eaoh_u9+IJX)GiG%I^0}anb{fbr{6W8$H0RbcHe{fS{U}ydxPb(Lz zN;+<^BX*ytwp!51O@$HmrKV*PQ(=%@up4uwr?Wfyk&E@G5w`-E)q1b>@NNN|u7pLD zJ`?&!tG=x0^3nHrF}aJDiprxS>m%T3+r&6{B!vpYlioJ*wiBw#e~y@Cg%GsCJ8RzU zh#Z)sCJx1<1B8z497+#ReYr5l%+r&s(+{v|AEiW?FhztZu`mg+$}}G*w_?mu?43`G zt2Md=X0TXISZ?n!YrTvdg^qP_dsomF^9v*v+9QLRE3hZK4*z?Xwn*1CzAZsS9d%jqds+M(&isi&A-NoS|B9cX-zPU?C0&2EOFhv2~u#F zlzdc?i2@RBl-P8{2l6jGbCNKL{#VmkXdzq7X^8_u zII#?P2tAC_aTlTfXrCJ00^46*LCw+XaL*E`1v>Fb0XukZ6KU`FP--xhse|(%*>b-T zM9Wppz}LgPlKD`}K82eG`w$A9`#eNsho#l2ilP}Q0y=sX)EPQBLCI!&5sXEPbCjD= zeHD{7c@0B{^TMj&{8Y%wd)=Q3O|64kj~`mqN_8x?#-YsK zZc4Xy+nQt5Jr2^`yVFQ@C|M-&_9kRX5kw7yswmE;|8wcx8HuW_FUiJV!#mKlp z8G^b+7_D|>D*JWG2FfDhmQO^P<+hnijnxg6MbvE%JgkocKxE|}|E*@%s$to3zyPeL z-RhVcHZ0Bf;x5l*oMkj83PLpnkK^0qT5fSQ#-M~BM{pxFkfET~47h@JUK1<@b);8$ zo7%*cdF`kRt3Spd6pzJIi50rQ2Ls1Reh=%x76DMXW|je zf3Rv*oVlI*xQUHg)@^s#ZRhto2z=^N(}C!!_Xn#2*Y2WG$^7Pit(IwpE(Y-_HVUm^Gryr9hexA+e-j(kyQc3HkbCxON-7N1=t8R&> zr=A0;L12vX670(&Prp#JP2^6O9?Pu#LmUyNxPq2%E`#Q?ijIPako2 z%LvTE*wE4CXW@mt=CXrxovGW|!s`g{6&@NMyghjBOE2*xIRx=si%?qiCy^a^XW7M znG~@UIO#^pZ0-KqXz1p6;Vu-3ZBm=mG#Ow8nvY#P#0mZ&gsfhzGY)pF7l5N_=dCiV z>bwbZDyJF)vd!*J6Jc!SIoSFcKCTQ?JRo zL^W8`+X$`{J_w4;^}!4?_B_gYsZus)R6@u-ef6;X!2SAePpPIsi<^ITDdMQ7s#^@5 z6=|>xROH(wRWFQk!ub(!t_ zyi8>=rHel|buM>ZcL_?A1))?$_!YpnXQ@G`R+3p9+?}JmKIj)@$vfl+9{-Y+UZ&5*ei({ zz*Q0r$}ge3u{<%e9AejX0)RtMbHTSo1WX!IuD;IcJ5^w9dva)Nb`1HJpst>owaM|@ z&c2C>!5PTQ2#j2E9N-W~>gwB=`hgA@v$rP{Sg*+N)3(*u^9R<*{3W(AzrMb!Ixs)G zv^blicXECh8J~_+@MM2a0GR$C)0?%K*@4y1p6#iLnYp3aqyDYzSqK0Fzp&q)Xz0)N z%-ZVMeBV&|^xFKfYwTmsfLE0I;oE-C;H~RpX|Rw z3w@7xBnP&4qHx{Yu+Ojnjj^m!-ZWEEeBXaPxv<*PfwZ!;q`kX-R6gnWnHYhjsH3$3 zL`sfRTxNX>e8Z%tzK8HmZj8Ss?e})qpe^#{=0fusgSM>Fa>AzoxUVq%Te(c|VT8?@OKYM83f2zeM zmxhn=c!qkQzkMG=np0SFewtrbwNz7MHSsNf?9nd2Ys=fudTMIox}wK^mc-l9eK!B_ zb2(=I#LUgBPtFf43iZtot?uhy+|#w4-$a@inwwVW-B`VSECJ;i8|l6Bwa0E4TYcTV z+kLN&`6`v*rJndIMyz9OWPWxVOW~1OogNyULVVee;tfLHntZm#ke1;7STXqJOiyng z4g9&C%cAR@+=h6632&$eI{o7t`7LY(;E~Ta2%CrYEr<=^5zjXWk%#t0SI-1+I`j=s z}OeL=y8-qhx98grg7>Ao9sZ;+!yl8&3C>-jXnL_*#OVGy>;W~=oVq%>Gz0r8^1?n zdFff+8`wCY`vkvvL-UbZyuka+RgI~yTo?h-{(d9(vfA-|&8_V$FAptecpNY2VsMR9 z_Le<j3Swy6Pjo!9Mf%pd_h&iCAD;A#)2O9?zKUr77j=D~jhGeBzOh(DYXhP`$yk zj)o_=f{4JG;iY@GmtX?JnVncT4O9%~1Hl5l&9gIC27&d~!SP-Ms^Z`9>nIj;#L?#1 zMY)&9-TWBh!2}&&8SbIQCC6Q^6CdbInwb|V7dZz>noK;#Fs9K%^mfP}3M>-nzWGO8y&SpY=#sxKeT0M;I5vdt%xoU%I}+Kjk$g1r zeE%BW-ESwN1AA}jTl1Q;47o@-Sh_l-VwzZq zHyj8osDHmEmVd{-cmLT`#T;PLddb<4&Y5~hpfazlfA5)wZn&9;z zf;vXOe32&PkCLXTmNNX4`4AaWG?Tz)I-t*M+e%fJ99t_3mh6M265AA{^`kjYdo$UTtl8e#G5 z&5MzSp6)76m&aQscc)V-1Cvup^G@9Q3EKm*_^A`&wTy2x4o`?GMrlX;?KmWH?N3TF zIKZ3qgU><`kOGkuc6<$>RffsDumC8G3M@DW-kACH{gB4`iV-$&?W_wm{9)!WiPL=t zYOizv1G>0upoL4EjpPDY6jK(O)S)h{2=ysdvIJtbC62t@pxL-^@(lVp=!{ym(f!fU zJ1cN_Y|up$taN5p?+ii!@*T54`s{#)d}3_Nn2SS&;=c(4^@D}DMa(X`#}@fF_1TX9 z3GO4^@fHSn(E`V(<#AnU=gS-1eh)JKCCfRCnb&ITIWD~IC3dpt-ah@F7;P7=V#NX_ z{ae#8I2pmU9+b|6f{^w-5xKeyp`yuEg`CN zu?A9dBu__`f$$V+h2isBL=!I)CIu%D;Y3w)Yq~O*neS9pGSZ1ze6_Br99T(sARJ7S z$oS!KhJ3f={7gv4#mK^Cg2CCQ+yw-;Gi^*VVyq-_H6pMkO<|cY*flXgQIUA7NYj_K zYy^4Dqp%haRJ@_&FK&2jOudY-Q<=XjL+b(;!uvOJKwF1gDG|c1Yejg0uPQ6*&T9zh zTa>=ipiEsSkVCRaff7GfJDsygMVHI4e2KxxZBWbBEwA zf;+mpTL!f{k0+4=mO?}1@-kCe3{p-HoMnQQI2Dz=AilCHi~!sA+Bt=+^`TLMn3EB( zbm$}<6V>@(YvWvv?UrG$E1!c%Ll`&u`!!7%KUK3<(;pRY*BI3>)SkbwX=20S3jA{b zRqb%U73U4fu0?W2OLck=jZAy0-*c?w?&a}dJD&^gAs~vPDM06 z=sfWbB}>QY`*U#*4tVB}hZ{enkzbuByhDa&3arj7i{Tdq)D$xY!0NRRwS|odh zez%d$BdS^|ysFRNZa$sVnvG2d*rrmR1u$)VquwG^3nEcqfHmBBejl)&hXzBi zz+>F_9eZsT%Ggd~jRUpLON4f>ML`w#Mq@9QzVD)QM{60HWf`jhF?qqx+1?h8EU&Bv zq+sZMWO2-O6Ot9OTY+x+4hgFfHY8cp_&PW@`qYvy&4AzlT(A<{@l^{nL|ggER$;C= z6A;Rf4}lv;BhnE9!0shUVa+Q7lPq*ZCUzk_Y4w^KQYcLtH`AD9VBX;qtKePmSG0=A zSo!%|+O0`uooFdyZMl7ZUpb|6kF31iHaZJgh$cfp=Ic%lpfl;!4~&ypX8W2HV$J}- zhsz@5upQHm^bHdzmQS3hj!J}d{EshVGF3+|^ic{y-NJa*#gEyXyvqP%`B66@C+9`dw&hE$yN69w|8_G#2l zZ57SeO8aJ}w(WfIzc$5%6(sdcZ|VoAVg7breH4q#7iZUQVZC8yS(J=N58b08DCb5Ozm8R0 zseUT{&Mv-^J;cBRJtWb5OgXa)C~zxVE#}BX))h3wI7hru11wzGZz#wJx^AU@B4YN+ z9Js8rxl3K0&Ay6z<9wSrr!wU1>3Li?ldqB%2$F14ZbWyVXF-pjcQF2PU(9ey^_@jl zx7*U)K7LE?$oMl|Lv<(;`FFQe*|h%34}OWG6cj$1er1IR5(cv{V3FJVlc%%-FHvGL zOf`E@WL%dz`j#{QT$jYeK^=lo^$WWJs~0M!B%qg!Ly7G4Kuw-`uO&Vl+;X6()1v6> z-l&;Vv*VGKP7|d(dkmpn_Tv`fQ7U!#$jsWZ5;Ovl`{hwODAu2ytF(E})~1zcB98SE zF6t%Own)yP37^ehK)V~OJ1BjaFQbM(%DTdyVg0oi@NXksvq!#YY!V?iu(Ud~jN z`J8Ywuk8oe)^go;%YSuRbK_~VR#MheS`Z#hIX`mA&|U{giQX0axAsv4MXKN(w&Uvf z_j4;6S7*fM0Z z3E!Ve;~|g!2*3!?$}g^fc9Xs&!nB-(;NT%bbEYhSQ2KM2ezTZOgw9fc<%tyfYvYiW zk;}OCMciy?aL3v#9u?+V7zMp>C6Ja&-Yv8LHIPfR$KxS7fxNN8|CxP#Ss8OHJ^?MCMdy zO*_54C!e4AneE4Q5%IdZo(ha0e-S7+acz{lP*g$h@BbG*Zt|Q#0Vf zvnAV~F^;J`wo6$3UjR8k#=qI9rjDN5mO#Ez&2!Zq1nR-#sy4GLlE9F+M zaoA;fA2Vm!F`P%H?V7LyrxBZH%H5e*HW8PCdrat!E=2saDQg}f%vnnEn2%pK#L0l@ z9pt|Bks>7Ft#DU$x+EOJ0jF>QM`Ai0pTeG^KKA*#%ci3t(F1uy6-`xsE?}TDDofe3 zBGlT87T}2}JcJ9pd-L*Kw3(-Te>&f+dolMGN_R|43(5XZy-AQbY>dauD{Hu%MKpC3ZR0}# z=~j{{hYEcAEWIp1;OxcSElr*YHViI*FNzLHc$-;H3X`eXxbncMh~#>O|I@ zXqJTaiQ}h!mwAP-Gm~%=JB@T!4#GkG@VNxi|ChQaZIwLV~pM85pa$5@q znk0dSahAgUvR_yWBcR{}((pQPU$1C@1E#EyK++^&PIkG;D-tiiSiQd9a1cIQneQ@k zdz|;4VLuvrvA&)`0s#z{C_haRsJ>8&(D6?!0xfcOX4ROnDBUrYUq;Vpw6%@HLAn#; zBj_u6;XrDQyHYytYmn@vafEt+NUI%a-rL6z#Ss1za8TI*Vn7Qq>rHSWDXr8wZp*T5W##iYwR zCYY8uX@g^yKo1=P3NDk1x$Og0V1I~DA|At!QKD`&R^6$nmI~@klT+mSx_3TxLc_Gpw_`c=>CaM~A-u?DJZqMm|~< zKU=*0)W!E5as9W=&$%y)wpR&wcXb_SayEn%b1PZNmrBp`A`6|_y0js{_xlRJ%qYpv z++JA1rz(0yrPTZzhl@+3}%;FoJSZ8R|3qPf1?69}}-p?#5PP3vI3pCo0YG$FIb z&q?=h$S^=MiuVV|-uJz!E|aE-bU1g$gF3X3C4xDEslDVt%(4h0C_WqYdmE;OWezuW z&S)rl9MX)b&z@A~^of`KrK{|fr^*0W9!pehtKmfB{#SK3=^`ks;k7Cc4UIu!5J~%B z_6V5hp1XCVg&mkuDdSzP5o%@p?k^pmC;%zP4u&OLU_@ub&bnkNHEX-NnbyC~`;;4H zE#!{7*nt3kw0N3Mf3y@CqEfu{O8RihZ>z;Ufo6-d|Xt90vsI1BoaKzF% z2pHOAuuGMghd0Ipu(?>^*W5fACT#?WVBhPvb_WGl$WN$oIRrdC6_tOujv`$qPHA|( zW!s*tFncWBgjq@xMpZexMoh<>L^Q1MI$;XeY4HED>HLy3uI8_9;<>TLDuoc+Fmr6Z z{)6Gi%ma*adxwSchIHG06lE(K_-FjjOHbw4VM$FktwuY}S2(qA-oQV&B)uCA$Nxj4tKrzv18K=mAml>IR(MH5g1#y~yD8>OjA%5789qZ3>|tXT?vp{^@KCi|{% zGxH>`osKr~oTdPjRrNq7BVz0wZV(&a&4^e91S6pG4}TgtqMicl;@)+sFH)(=$KcCW zxvVbIC|{ZDL+a}`|U-YRdKJ0XYlhIN_|&TLD+fo)H`0Q zdT%i=u=U$cH>lTQiag$#4)uuupZ4Atlrm0HRC*|cb+j{~*hE;%^h~>Mxw99UFi~||0NOPrDV8%Gc<>%@KXO;u#||nbQ(75F_Hcixr%yE(R|}#VxLmA|e6Ok({K&e5(UqZijfez%%{d7h35$zNXA@$Llo4-VIZ^sn5VUX&?fO+yEh==QFemUoDEfc?=u{6y_daKC`fWNQ3elTlZ&A(B;bd z?QY!!Ul|5SNBbSArSl;`+Re)4HWthNhMKUDP(Yc?(X+<{qqBZlB^HGa)99YoewP;A z+&Z*4|NX`;PQa-tc2;DgYjZQl2^<3RwnOp@2a<>*O~POo*~12cHnS}3&5rY@ewRgh zl&SLGRux$8ql@_GW&~kwv_xGIkvdm~4G@R|*o8vH7j0gz&u^ne3VBr0!m5t(*1155 zU-pQnQ2CFn+iGFpC}p93o`)HXL7vB+|5T2= zVr zP)r8d4w43s;~ar+%14aQe{TyJ?5P%3;kM zlKpLXsGJeU2c;SVvCcd5GrP>N7pROK;pKgCmV^DiHzVs(w-`z*Sa8s|nTQZoW2WW2 zv8N)14fNP19)d`qs~oULMxpp|g^(+cuW{um<`>eh?+s+C+9|QB`sS+U*)Ww8$-q=Z z7>T*r>Vke5yC-1OY^qz;M~`|*n!!%G&S$(VbNvd=fa)a(>2QPeSOUqC*prs}j8VrM z;yeSy&*0{U8Opa2O66tssax=f88MN+Bv3Vp%GW6K^YJp>nCB)htsYF3^ojA8$VnzR zeEBA%0w?m;xh!;_QN{B&S9vKTe^pUqvI(WeM2_`m6422?op~K%VC1B8^C}UvfF=58 zPFOXmu6EN~x8wbAS5g{BbcE~NB2gmahdhOx)1T}lX)v*BMqXhEb6Q$g+_{-s#Rl`q z-aZxs>|}zyrDOum9(gOO+z1Sz~1~D$Hr0HqWwsno+jo2{R*p-%33hvD3UgU8<|=@>9cD*p6>3N z%+bDIlHlFGcyWKFli8e7PvWq5)errn;pCc_W(B zp|J>2cEa@%Ls~H8GJ;zEhm+#qsZyFpOqJ=Wz~sut>=Li{S(^IyS9|O)5>wybmPq2+ zdeSJ8TEBoxI@?;$k(8wZ-zOzT<$;a&DG!OFzYvtN7iPEhV_~9-oZ^AkXGRNQa?O)I4k_GW&}l z8f|u~7%FgV1ObHt&3fuvF=%XyUquO`SS3+Qn3Uapcj);WJGT~NITq(Mg)=b97JigS zO0qe(3XI@`$IxuFO0G?H=@IYQGoenh#EM)d*w93ZH}%S5-5lIR6!!7hoL^bC;kY!9 zj)=pphv5>u*r*|_Fg_;42riccyha$bv4iqGp4=EP1NF6B2`sy|p@Q)OU%hRh82usCM^IgJhat;)qm*-u>evIx zmQ5z3{KGFb&KR0L5$Cr-(-gNDL{I0Kf8t4vBn|GE0ZvajgnU8Bri|cj4D6teIijaU z_ZV*<1Nx*ovl;ikGH_NIt-5R;bVL3cX<*2cQ%cf}loMJ;<*o00NAxWjbC<_|MQ06U z-3)saE~jV}hL0P4IJJ6bl-6zmsT^NtJ>lSaT|Uw$J~nQw+nnDU%7v6I;7y)kJ>KQ8 zQpmg4EDG66bEfCM7v_`0b1TqXL)MSFXpI3c#e>1P;eP9>U##CvcIqBg{Ks*r$sffr zVu+e4;)0OAm$ZcZid8W@+!bQvb7DkC(r<i20$X}NHVNf>Hr9ef zcl$2$eVL^(a;+{fxHfSrM|p>cG*x60T4oGGIkU#L4abe{2@Po;TpFxWxhE?@6mE{v z_m%`C!BTT~;$^JDJ0!vgR08X|sloQBG3f_USXCk|B$3PMd<`0hG?6uU0ZWW149X?Q zlEhWx-d!n za_iPK{9Qrkq8h7$A^|s|RVK=qn{Fm_Je5MDvTrf-y~>1GHX|pSk_S8ml8%@(oaX+O zQ*F-azKBU|{3=CtIdlHtNIK(eT(H~Ic1@W}`F;dTgZR{NmDcT*MF>QvHTEOXIZE$Z zOEi8B{Zs|YnqOl#mmk{_Pl2nnsz%0?o|w*cK79?_6@#w&_}(3i&cm=dE>a*&ilK*#m% zJ8D#sdB}eLt=(l#Ym9vQYTZ&G7VH$-tWfdi4U^jyvC={g-LFG*g1Bk{gim}}6| zWx&HjC1lGZ_ajZ-2BsqI2$R6}3f(QXH=I2WN@@#;%PcQe&!aT-utAkFTS0m)GiE>e zvcc2eC8`xzNfB2kdP5%Q(d;VxRMXSP<{B?sbGBi7v%-F7+!k!jhI8Q0^^0U$QbXW} z^bvL59*Vp@7joBJ;!sJisvB>7V4}6^wp|vV4UoZ(jvf3{YfNXhIwvvtJOfP}CLT2U zs6}B-vIPhN?UsMP3!P3EW^j=bJ~jcPZQ@yHRmP024Bi-x8JXu|b9}CBaa7HfP|Y^4 zErPeI!j!yiS&nz}YTpmUyd9`9Sf3f+L<&l~bph6+qo(C7=|M{}7E8C43d%F_0L@pRQ z{d4`|u@rJJJ3#-DFI_LYt67G@H18Egq!f6y(X_2ZCn*S~g8vvk&IX7YWTlog1snLO z;k{nYYR_7zLE?+CjgIXE75WGIBS0XK>lF0qwfWre5px{b1A_wo3=%8A+)%$&Bg}hW&*t zdDExqmk39y)HP3kP)oNpCn5OKa9iD8XXO=6hV;w06Aiyi6 zMnkfmeiKqKkRN3pu_KV&e`XTRw)|;UDZaB{Y!D0|Zy(>ofi?{fJ(T*5m~erjVw<}2$Qz3B?1Yb>WJPVe`3)HWdNEJb{p z80=cp5eF%2>lGGdR$3US;LA2WYRFng1xMcjA=*_tGTBpk?;x&cmK=g#iY67gxqB6~ zCNV(&l&B-)usjv&V|7nxDl%n!hVW$qnneXD%Em!K{^zkgozzv4-7^=|*m{0mhK;#r0=U~N08Ang> z45AfjJB-gNB z?)Hxi{lEtA39W3L*OYYUFyAuLK}3f;+SVhoEG!gsz5uXS3VlrWNE_woTFM(95I`#N zu9INAwa_)Z@X4q#9hJsd3M|Eu&yNAt&>F1RDDii*u&}r0-_@7iDJHY`ht<-*EfbXh zwc>L)>!BUm6qp=j!DYZpRl5cX6}FO#Kv}KuHN(n}z3e6c~t$ z7(LL{LW*~d=>Vm)oTz0IcmVDLw-Q8}QKlCq`wS_>#W0kq^Ca=q|4l+^5S3cOJ!)@| zXmoW#?-K#X27;q!Z~`UcTB;a;VxBYUhLh@te3LkzJL1eJuo0iU5OdRcEjFLr(fgMI zAVT=6dH<32v0~iFhn0q%>YUY!IvD-P&RykZNd*2eeNrQ4BgPXHd&6X66~VQqaYAl# z8s)hz7Ai7KEQFbt6GUE&O3K)D0swIX$qW67m7cVWC5rjZ!-%KW*#BVs!t zk9yPrj19j?{6q}W zINvwp<_q#`b7{2|pljI$^IzVEe!8qmtOl&t!!U&uB*mJWo3;dm- zQ1Y{pl}UwV+rE}eIpb|BrarrVq7lT{JvDCH_!U=S^Mk&~(Ktt3UJ%f{C1GXAgu-8rr73(Z%6I=Ekh`CRd=ThInNJc`07FO6~l$7=-_ zcG;_4Ytti=-WY!M?y*vLD}Bo6t%5P^%Y%x+a#&?eIU>T?F8Da=5Xb;w7m)#JX#mDT z+QQ5A6&igCljy62+$040A!{PbnVYJ9-eF8&F!(*!SQ`QsLIZIyvmYUI(%kgvC}AkfIX zcS$Zou-U~1C^DEI3p*+|GsvXi=MC>(SuL-S>9H)4);gJuZ)irs_e4K6=1MhcOOzUC z{aRrXk5iCSLhH~sR`evoe91$23$Og?&koCj&~aZJR#7^;F>EYb@8&1OMuL{)*$gTw zT>OTxUI|?~4CG$ccIgZ|>ee_O#XmTT-vg zvkM18yQG8Z+h!zA3WtqXl`1yLQKe3N+x0e@C- z05iZgpzXAWN!v~eNoy^|+ksVd99#ho)xYb-o?HvY#f_@_$klu<-Aiwsy*x)+g~epQ z$Hi@=_1!#Z1uU_Dj&a6=94{m{uC;s<9d7D~--fJkf4}y%ulTk(KM7+g7mrOnbE;lx zUKb`Xz}=UG^iXtTK526|dyi|b77r$^ z(NOck7drG6o?oO|&!0_m;+||@WIL7_O07hewAnvms_ZF&aecDg@=*W;wF7j-e9^C3 zpp=|v429dij-?R0>o`5Xq35%kuEXcaAE<7Ww+Uh}#PcHJsF5Ddd}`~6QkJXtxW^ZB zp?vEX1Fu@^Az*rJ#a`j8xK#>sn5p$aKLUgO9aavZ>I@+FI7SiA6foST$Jq&_W%W@Mae(A^eKv9@*$;t+GcNu=^p1DD=imZl{B z-MR=WZ-**c-Fz_=*Q9H*sX55SQ!eNsmuWY=$KBn0!Bo+7 zLQ@x}AJtqkY=b;NXs3~3dlVUC|;cHm9GC#V&}X+Y@ z*=(ZON>th{W^D3nE(9^-JpO#z2(N-?9_{dfT?8e=h)`uaBv(iz&uYq1_c#~+fd5lh zKJJj<>zk&R4MHF{Poz(lb$w&CB$swld-6Hjq&WfM;q);sUVPz}H7>qvqCFt3p4f7> zY>1uT70T>_OR2R2 z+jq$7q{^9RFpz!dCk94l60s5!)+&&hY_)f>y#vV9j?Tj4ovn$T@OJ}FI8X$$^qk|; z14PN~E0@lP8Z=K{mMm&{sU{3(gg~f(^i|%G7ZJDOVTW$CqVJimj+vkxT<&SCV`5_O zT37U$Epm|jQ8Hh!jxDG6l{<p8OUdO)RW$ix$d zZyix@hTe`Mc)R08V&^Z)mXEUS`g&fwtFHv-S_}fMUBLa*As7+EUX5IJf%(nfJzjuT zs6cZw2J|~$!a{e*>^95fZjL{gmLna1i>YZJ3^$7G*WwIE0fWm0)Q8wy;ThDk--oVefm zf#Hc=Y>J_+{7!&wEBVqUpmA1USlbd6{Xi+@o>oE9(Ufdg2g8d>kWW_I>)6P!uE9l# zPdVZozOEyEm1V6G0WwtStGj__!(BnJE-g{fVk>fvXcW!HgCZUPNmOlTk0#ZDkrO%DA8cI=9! zR}LMdg{44T{SvWLL1kA(Jr^LCUk8!nt>yWacdY|$ylT#tI{x3 z9GS~}j4{febe*}En3Th@SUaM|cFOBWA?ou{Wp4}XNKVGy?V>CM7E{COP z@9bz8yu62zmwMqto-w{p9urKs-k3cp0tv=sydN!2dy0O7@-*b{QIa=- zfwP`reOQF+qWFPuLCY?^#w82RZ(L3)e^Lfq=u# zxlYZ{CA`=Bi9 zFp~j*o>`Y=Mp56`SQ~)EkrPqvy5;+pw*a9@{Zq(s924wByC1~Vd9`R1LknZl3d}aEaFrs; z=P8Ou?`qmj0rytGNy22`mD@sx18%JBU#|p?kK#Qr#;3d+S>7L41wbiRY?}^rIB+t@ z6DF-xoLA`NK6!$FL4l_Dv{!RB|HU2;KARn6flG($6}g7!=F8*F9t?*_YpD+uXZE6% zOizc8ZEY$tr+L9$Bj>A1T%r~v`?0*}srn%b>OnQm3>Z1bj_!IF{EzxZR0%?SU4yRv z-91SZ{<#t3UnrMDM4!>?opU3)x)0U+1upKfSB|%OHR=m{1!gzl*75I3c682o`oBYg zGGL+b(T9VGmoFF&(?`1O(p6cuL6lm7VBhSVf4)h-?|7TKe6RX;=w`4cX+7!7B(GD~ zSCZ|_31kC5S4~5s<}Wa#l&vMp$Qz+QxksGqy6jh8$jpD+TM?dvveWdn>6Yr<#NL

B)G7By5$)q%ZIoGF4lVANS zzY!0w5GwuF1?iB+qQBAbEta0 z?rX9EMZWn7Yo0$e$XpS8h2rRjj`)nahWXM>w9F%Hw)|F#G%30dv3 z#Fczjyz2=XmV4f#I@Q#(iQ$;EhPl{8y7U6wFcO#CG|cD*1Trm%q)X>5KJaULNR*74 z5$&r}#;u>G2XyF)L%i}v1<+W?{oQnS9MOzxvPI|*?;#VK74a$-Ya`b5_l8%!e7z@d z?N<$VTlN*j>={q&k&EpPOYri3SxCFcY)&IKFbp zMPx0x1KP|XdzdPfo;kSt`Go#2F{o~_6p2m%f1NWB4r~|z+2QN2@kGWX*y`yb?*mrB z^{^l~5g>I9c@eg)E)J74(XF}91nwEpD21U+v6C0ohOj(0oA2Z+z%`*b1un6UGRE@~ zcfQT?4`|ikQm8bE@lC{CcpP^ckZEld-k5lhiAS0TeZr7^IG?@pG z5yWRoL%+fG+Z_N4-xd~H4zu0g)}u*SUXaYGQ3TZs4z@j;a$X%v5NV)+*;Tv+)DATE z9DZ8ox2N2|hf z9!2K{f6asv!UeoJ@#QO5B>a#!_S)DW0@gXbp`GW5YoD4ivkgk1rTY8h5OUTT9SdK&dXDnjV4(1(ovT|Si)Eq+57CC=`4U-H9?81(i|Av6+(gX zjH5SUfPk(Rv$A=3w87Z)C6)QQeIK7{{>Cr-bY;jflPEN%_hWvtm)Er3C4$eBpX$<{ zi>%wuIt5&Q0ExLOPFJ zIYn`taZcrB>HY}zgDgNG5I%po5#2!MAdx@q=cyn;Jj^ksx;USJv@?v=s`W5yF4SR# z2@?M1h#E1ahL142Z9Tt<6a&0AzwB9crpvtwiTw!r^>(vDCAp%^s*IYYXaN1;s`5J% zoGgiAgn~3gAXwYIv6Dm|n;6$>aD@8qpf|b!R0_B(Tax9c@_4(V^d`(0WxO(GYX<>5|kTP zBq(hJTyul)zk13OLwC|D%+RKaG~!%kRS%2Za1QSsjad$K0GMw^+e@_n%+c>LWIBlzSqcrALy|>{?uduP7R!Z%*ujE-Tap z)P^y$OThB>RHPAlw)1+&HSYSr0^VbBr;FWrX2y!eG4zO) z*1QIHGgKaQ$<;)qwLbbLRXsdL1veWoS@Xns2>S*i+drrWG2;r{9KW8^Wh!6==!R z&QRpJ?3Yyg4D2Eq+!{ELZYVK5twlGD7~;9?uNDagCr{HrO$82x?n&iMlYJ4(wKZAD(8|M1XtRx1@}n}o-L?>iBX5Nu^7R= zYZt;AS(D{9ND>Q^GaKr-ufF5zI}EX_^2G%gx#h9LtTt|AT?IkgZ>(Lq*GU%$y_M-Zgm6!Lsyn!Vq| zc-||Q2Inr#4ra3iZ<1M!pVAdfqE|=MhyJEaWS904=Hc@&=NERlIb?t9HxG89yf zyVABrer^>lcg^Y}=Dq={8DSpSL+9F$m#U~O3tNL_XM5|JYz;D#%zG(dfV@UzXjb@m z7GDdsEi2%C8CxJCxj7k|W1BJvA1}mnDS{TeHrjp5Y`;5xkuN8*un&6_H#8{&5xOAo zvScy2VE>pH{A`7R>{VQu9LS*3bL&a4or)m=-UmP+<}Js_e+yh-^A@Ej?E5~dwRjwq zmv==~(w_49*Q^C-yXB>vT*P$k&*rh?d4_@}a+Es`Iy%F+xobLReXZUTGf)LC z@ks6`h?etTfmRw>lw3DXdtw)yA=NI^-(VpEk3_b7_Oe=>Qmuz|&n*W2gw1 z(PRpI^(JT&t!rBryTw%5ZJSp@ncSa2&@!Z7(uH0Dhk%RLV{ z84RD`h`ZIEdNd$rH!>7vG~N)_-70@A>%Z-jqE;i&zDgqc>}1_(1nKjU-C6AG=A*?6 zT4<@oDLU3Mj+bmQ9GSIgsZbfBC${vfn015){|x1 z`E8<-L;4F9R=G)N$bJOlSnB;v!=Yx0@#gE&D6}RjEC~dtq;%d%xy(adnNHi*aEU5Q zmG^M$TJ$p#zFU+#ZZi1)6S)#b?XNNSzTDF8bp?@pQ8~{|tg2%~B6@wG+Czsmj(!3z z&E8hFv-5uuITJ4o(t#=te1E!Sq3bEfr2}jDxaF9PNu5{gZDeSw^-oPJQ>LnS6y zKi_99xSdFSWK?$}o8Oe*=LQ++Rj_Sdch|G2q^0IWHt->xHVOSa76 zn8CJfE0dSBT0Ajbh_UVp`_b;m&4Si(#%C}fyM6XnJR_@m2u|EC*;imny#*B(lwNic zFVIt7yh{I_q1=IQ$W_7^-@PQ&k(71T4^ikj7Dcd|eBif112Ny;$W3pyrzgxXV?)lB z4N%jL{j8Afdtyw~JwaC&U9spd@yM1xS{mV5pOk@JxPk-sJFzHvI^$mT# zG^7H^gn1(^qtiI44LAYJ#jk$$R8@*u)q9Ryc8N;ZDBy>u{n`~zUt|E<6`2yY|3!ci z_y~+YKpb)iZ|Ptak}hseyXLxJ?a)0Km??ED{8lnVL%W$n1}gliTaEhOV*)CBEjg82 zb%omcUxfi7SLlW8Qq+3rg>O{cn*am6fNCTpcYfgyEAbZRgyi;>s7(Cmk3RdCH;J%~ z*v0tJYDk9xzkAGTFGQ?_0c984eOxUr1zp**dUvF1>V0leOSXLhy$Jv!PR~fca}v$> z8C9HD5#PsJF>J-U)}>F56W0v$T{EUF5tUQ0uA{spQEeEI$W~*OnZaNR@G$*pnn@y8 z17T0vm;-mJNV_Tsk>FBYb2ELpGo9SJIZ;?*HRf*WNiknk%)AP>ffPoy)Cjz#T>m&S z#(M{?9%D9)v`Azh2@Q>LDgEa&TE)YFHOIx}B2@z$CsgD}fUM^w$Xcob(T^44?2^z$ z0zhXfgX-)*^-CwS(-@Pv{+ItBKj$(vwob8(jBd~#rRKHKgxuL4F4#A6g6|^lV*n_ffln1KqS#gAXv1 zVNme9tlEe^U6xV|cjIUn1YH$^U-Tr~_O=gvYH#xgGhczhnw9*^T~Ej*Dqe%uEVw=O zzid*F2z#kk1{mor-W)3%{s3qBA`TSIWsUi5y@|z^LrApIP9+}W?>Imc<)Z3AUaQ|xTP$NHd1{AyOv@ExxDI+ zUV(#)CIgHyDyAvYpkp>kz{e~7)2>0IWW#V{z+ueBk8+P4wz|m)(;02e%Q4^3LVUM^%L_V-8#)=9)1`0jFSs1xdTjQ;}m;IYFJTY{0D+`y-H31>B zjqy9am2p8f02jSg^G!QFeZmh(_?z&@FeS8!&W2;UkR!da~9!*yOLV41_A4$rTgNHTm5?K+vrwU_$oJn@aX2=}P3IU95tk*i3nMOM7 zd(k*IB?T*6`8FC9flT`E5g$$wlZ_t!zl5M-5rG2d3f`wEPDj;G@3E($2OP|m@r#2j zOkLTzkD$4!4%J5H&LgPV73Ib-%U?pa<_sU294VzRwJ@N2P;p#3BU750N_|Hbfpsr| zZz;OH+hE)zjsr&oGg-D}G|bt%KqZ&q$74sRp_eA|?z;SNHX$qQDUpIG`hB+Q?8`PN z?IyL0nVlPd7`7w^n~^?pfpO8QxI7eQY`)O~@KWbKYR3RXYArFXp?~L1y`4X^8)01I zin`JU3)?g)1cj&P-l>WaYRFHcn+4H{Jkqp0 zqTp&te~$7$KJZKzb4HIXd#0gMMx8(aQ(mMZEKn76c+||fZ05f^NPs`_kwNNCNn`zg z8hHO(;!mg_C0Y^O-(#CQoN9?}1PHn8SvEbL1ZuMRkTaZabhGG|@k?br{}s=I!-<)( zlV^Y%r7f7uG}TN!)W`;>j1!Rz=`^-`M?{B|yM>p|*GA z!s>-Bfdh%S+K?6%;3nlh-vN9AaCO;z*cui6w9Q2Nb;^R_!*e^pIJ>^G)waZ0w!mw&MyCtnpBy1u0Re3`a{~<(`f9{s< z&c*Fu1kAZ9eZ9U=vJJNtgELkl*eavMyw{jt#(?&kjh|v`0I;Ams@(2 zSb`Ni8b7%qpY%2|oEX_AO-lRXRwUR3`Se^3i8$Yk;Wn*lx(-%mIhZ!jzj6)&5(-?X zL+;7eMBv!qVCZ($TZ$b~-}LzHtB?F6zF!dru6Sx32aY97P`Q{c-YKL$cAfLUpQ`e) z!g)j>RBA1sVBMG%5OU;!Mlm~EXoic3|2SIUa*H3j1WtvT=4Pm} z?iztkY5PKOm9hPqm*8!0sP2{%>d$@xsb!E~3=q$aqlYBEWHTmr2Y}vmI0qc4_2|Z} zudZt#c-Rwd8$SikhYY&W6;J*3 z!3_k;jR33+26KL%sul=joez1WSMG9u(h`Qe!w}`-W)g3+>aB4hlQIn9|xnVQh4q zX}N#b4-0myC1dte&FulNY>*UPkklArDzWNO3cGj0Rh~Xa+v)p@{Q(eczDyJZI=16f zck;@e4J2|xI#W}ZTi>xsvy>M&C7rjdUh^l9HXb1UG4X&}B~e$=0>COTl=4WyESDN8 zcMeo-3LK9v`#+k#lRAcuDP3Qm8wl{&=w$@m!se)Fk~1pw$rUUwz+Ql5j||vCp!-L3 zUf5ICTE*1DxczAI35--y(S{+LM_^goONrDk=bpW(&>aK9s?8X~B$uD=6uHJ01zr)Vq~3 z+2o^-!+-+2f;o1FvxLdGl})C*pOPq`)Z-I4P>*D5BdQ}~;|d>xGx`;{DjH&&JOR^A z=@J~rIk9nILjav@M#mH}ecp#Eu^Ajq@~Icfp&>VMasC#JCa{H{Lgv3%8Zvq2-KndZ z6vIf^sUyL_Qf#5$_}!lP#e5=**STD7oR$8*4>sw=bmpI6+*xd?hlETh5@mQw4xjis zF(riTo;G*R4@?t=jb|5K;lwDm+xKfA8U)e}9N$csB&5wU)9DbuqKuDh?TlF}h+PfF z7kN{iB$jL&A{v!(IoYjw9-tDSjGM&D0j20Uxy-tn3Y#uRcREtCkNt4ixyIg{%Ym17#P*~mNP8uJhAitp5o ztBk%N)zmoU#=>n9YAJ+B*6q1$o8@i!y$K>&&;tcpqMDzVJdR@${l(PK0op@(x!hL4^lioOtztr5^@lPol~qZOcY(OZQHhO+qP}nwr$(K_q(=j z+cx_*O`0Zc()W3qhnZxbv)9TC-`uwkE~1e4+$+3(p6wF&9Xc>tQ7W4U))Ds?WBjdxyzVSJye8ci8ZAfEq}=ckSY z3X%GjH*9exr4WWiN|?;#6v{@ZBVQQ5&4x@n0avHy{heR@&9Abi|Jx7xN3|q4^ar<{ z*Gx=PFS7-m6k7~v<1}n*Q1EW25ep|!XhY(p%}M%agS!|LQMdzf&-pbl^;s|v7l2=_ zF#s|4Ih)n+C!&`H?4^mn7U(h4)X1tP3a1ENm@G^qYnL9=aUO@ehr!qnyy1)$4b1e2 z&eonmz%7xq1B6zi)g^H_N+xAeMszt!&a4>&NbTzm=)_g{*Jzo7kZ|7oy!hXq!om#6 z-d^CnQ$>Sa`7F{Uxhs>L+z7&&&Zl5MOfylRF{sZSTmBwhQX1)Rvug4~z+~Hv8qdnz zd1UB6%5uDW;x<1?XUTZ)l(uZFB}1@xE!DDPtvM`&rjTN!(fD180I4MzXC$r@f$DLK zrx-@O7j-)FSh#oude}RGPbL17hO+LW(nUTuRd0+Z2Ja-jTcjArN9JO~B@yra!PQ;O zM%)rLAs~le2JqqNnATty5i3(YWW|7PR`85=477NnZT$N`@M zU;Q)K0Q6X3+@{hEfFtg()m0*PKN3~`>SQK~C=6ut1;IN$lU(IOnWAxX&^Iyai6b4b zl>l{~%t*BVyt|4x(JKJ;k9AX_RKTGaD31RxvMI;^LQh+y9?z8v6$9Kq|F120hl6i~B#hrfs(J3#H-I@TWX? zZ>l@ml~S+u=w3hFYnQrZiK$V{#bY{>2n?xn^>=Eqb3gF#h~~`1YjdoM#B1{6oZ#L8E!ngIk)Zv;lW4eZW=gvgE#&rWSk4K6?1XZ-kpDP$@DWdAWsH~WSF zh1|?$)yTwN0XT`(rJ1|uaAjj`0IA@})XeJi{*r@|))rS*60-vbhK7Q7$7e%#2R4H8 zqtNyZPplvn*qj-i-PoByzezC(>`lyH?Jb`fOaN4+snh*2RdA+td1G>B0P>;R)X2GBEfUdzm81Lk%Bsg#-kK*gEA{5hw7rvlOL?}h*w7MOq7clwI|q)bfz+#3=jBZG5` z6aS^B{sZmbo?L|~AfS`JyS$KsW@uvnnOYcM9XVj$9p4$BTpfR3I=EYm1vnIv0w|Ub z{aZaVI)zB0Hn%phE4w%}eqLDu&NDJH{o-$( zxn!>U@Zrxy1kY=WeG$0*1mEEt05C-U5y<@npWz(htE09)NcPFKBR99%zWSj=F_45^~+19{dZQo=@Z<~&f*9Dd)e>_{u{;U3;tWh z=nXuRFLnKo@|bz~w|U{$@Gs@`Uf<*g#_b*d$^0bFe>y*u!w;@;h<`ThqWRe$!uXSB z=VZ>$KQXg=gP-c%#r?zQ>KDZ4^xHWppB^l@y0m$NfA&^6pgMerABc~&;|G}kr27w; zAJyYq@N~{c&;RHzCNVO*`ROcuVh?`jEaoTt@As66`H6)&P*c-|;Q+F=4*JHU266DE zU@QOdOR}v#QA+fz`EdKmNQFNFK32S(%47fQ^tc+&1b7o_n^rdM=y)`;AS3+qzcBGY zlV78a4Y9YQ-bG=C4){xpP5e!jR*b#EBadc{!x}IeV=xsCKMLz)5!vzg_Lp4h^%=a- z1qe1~??OFI2>-_RbiEw(E*47FEFI5A$;Ot(XP!GHQqu|lV2^S!Lz<6N)N%1(LG<+f zGkWGbH$qIVrd4Ezy2tcrsc*C~4kk!s62aYk=tw5TZ9GIg-bS^lyFtO}k~8XTHv{I; zP$#7eZjYg-nEH%4R~RJBMrRHslX&qH*%nghjsldR%TN4UPSZ$#bQT-y_%XlOLgE_& zK}N%jZPs<=;)U@sg#QZYz@z6eJ1?yv{Ik%xy2^F5o(njHUCM}M)I>662H4Q!RoK|1 z0_tQa3?HNY`HChY=0)Tt&83}vP`vLu9yu8yP}O%gm|Tz};f9oa#kYOlbcqSKd1Kwh z+U`QnyTLItodU@$wFfKLo;+A{aFhZF8P%zO0Itv#XN6Qu43sj_6NQ5o5v_d$KI(m2 z8Me99S>GUDraDv>+1I>u(rk8!o%?wrA5`!W8TtquaTjqd7^h*zSyHqEy=4OcRS6p@*G_ixp{mt-2$hR^K{& zb!R9-Pq{gsS$v(zq;{;AQ*1!#;rySUdeb~G^RTymB({kmN>eU^;lmoqPrIfI@_+oE z7$5hVJ5!F7ivfzB%^t<;sS6t>>!*vCetydy{X|kOXUxD#FQA-Os-&Wh^r{6h*~b9J zkOOIF&XQ&Hpxu7-H)j?;E#{P$eQf4Vu>RIo=KC8TSq5AoVymNIvEWjdo57R7!JnI@ zUfjF(~1Tfz_ z)_T}Le^UyUg?BunEUxb`-9bnkrq>!Ck;-Tdq)oQaEO534rnTH(sY{Q@ED;vrm_END zRs3R@{iFHbSLzv^__bor2R7&-rSN4*?BLPB2J4cmqTS7#4KrFHV%?82x++=q+(qqF zw)#e@j z>I?l+eLkR?QT?0vn5GMP(9zILqD0wnGXyDSUVOlZ+>b`$UAmpieM_on$nj3L&gW;h z1pV%BA0uT0F1I9SaYgL)TX!Ci$lT0|!y6l~3G`RC?GSr;9no8#G$UTHtQ29rhl9uX z%7hdhj*;+;GMnfg&+M!k)BPKp3K7S2hb$sY1Xd%E#ka;2-5H6lsVA?jP74iNN)T98 z%zEm!W!fj?j%_WESeI{)xMG~Q3EC!Gdf1_JtkWnTc@2`PPBba|30tZcV^&VUFH2*H4VITn7nDf$C* zlI$el5V--u0{9*L8q6GXG&N>n7Dv=XijAuo^otZ6R#-lcFW?QO=fjlN$&Xs65jI{W zZb*9n8mOQO{hk_FZs8Jqj2e-ipkeKn1!-EiU;HH0#QaG{{yw0ph|`8HgR$85&uga( z9$Z2Mz<2Oej7$hX{pK@F%rjNY%=}~*7LYtDj#3tMU_|pA36y_LP5XSnQV^*=IppD5_P3*#2`a%_seleU%TbZRL}5l4^4B3RExhq%X2` zxiKh*c>I^_UTYZpvaMG%M!N~>3?n=`00=L1>gCQ#_uEUm!Q&H(AnWzcP`UTTK#GVG zBo5M6a9&dAqZgLmm7g*Rv$UtmhzO?YM<=UX=R<+H|48B=F zwM^nTW68HBgN-i(Pjfr>dMH-&0206Nh-*n!G<##P0vrDlwN^vBpNT%MstvBB>vEW+ z@T<8=^^t28pJKQstDa{ZGQ(v&^ZT=|CxrPSL#83^n|4!ygsX-=xl!72JUJ(`$|P#T z(OeOoz7sCJAfr8hA2j@U(fb51NdqF>IQ!!2?`I#`Nr=vi(__Vjk0o_GCC~_G#l)ul zVRO|23rry?q~|fUA1vmRMs4)|D1Q($RW`_@_EI_wmY_A|e6SFP(44PGtEkrjYKBTX zeJEX6j|rtUf7FUJ{#MgrYl|>V+(vPC$z`m%0Hb~qhE3;574qo?_xW0DmEy#mLer9a z@`WRQCs1B|y~Ubn_^N}!rWBagU)%=V0@fH+WJ9f@kz(Rkq4r7^Fu*RrDgU~G<1`ogCz>{aA->2F&ZdTm?G+hEJwy=q{`YxPLWn&=WGG2p3|61sE@P;Zwz=ncUcfv^yr z;1{3FS8nZF9}m>h&6>{GPmi2oMu8eU1(Nl063EJ8V8|k!)C}E0;CEl{c!FQK8JPvB z+xRJ)NjRI)a(ws(5x(gp1vLVsG?LsRGB_EIiXm3J(DY3 zVc4T^MRAa3iwJ^8aYHcM2F2;1{rl}FI#92Git&|5?9IY9-xFpknuAATPj8k;6i#0N zLhHcnp!;1vAuKPz(x<&7%H^sH*;>8d#y$jw{6Si-?AloInbIkZ%T*w~Yhp$Ja*D;6 z7bU}Kvch!!Cl=K%@^ux)|3v_FHhLg&`bE`fvg*P*$YTUoP@3Z@g;6PDn-nb6mDY4o zgzL{?{Mxk`BB^La{JRGH&o*w6r{Sf7Bh%F_(g+x4$+Nqi@ySB9R&2ivCpK5c+2U%x zfs^)u3pm>USAcbH$`?u;4_Mrubgu(=r;th0V0oa;7b>sC0XeVW2k;)e8{tSX-xNNp zi9=ns?UE=*p2rl=^OE#JO~VJ^?Y-8NeRgO}H)lKCb&k+Pl5LymmQu5a1ES39eC!fE zG8ggf)Bpld81?oB+0K$#{G>3lOmTQD0Jkp2sURcg0amXT9QP~nPByiDD4U>>T)~3B zz1xpA%mFW%&pjC-TX5#SkY;^<=ukh?J}dmRYZen_n_1&qC)(rZ78)d_V^HhHo= zyzcSzU#gD}VcRN*{hAA)Z?f~KCLdb09mkATf-mW>tc#RwoM^HjNDUcECIc@RkT`XJ z&|>q|M55D(T+r5!p@<9e$eU@p3CPO{tQ(8xaxDV$CP#fJp`~M0){6c7}SCo%;<#?u7Bh)bOzs-owS^)zzSKl3S8gqYjBJT(A z6a(Bhg*w}jr-JAOz_Ytly2v)p7mBA>ZOh}h?U%abK}bpiy`j}74X(f^ZeF~uY-AV+ zNPbi$AY%QFaD6xjX<0Tq6m&dH3Hz13e?bAm@yf#NxL?>Akn>u}VBaMb|7{(Hik5x+ z16f3c5eppP*61tlak?W}!-~c|t+)zhVx6hf=fhkILl7V5h+xjb8pA$l$u;tqF|p5T zmO7VLStn8Y#Cer>svi<4W$m@UT*#DUr^h}biO&Y1g(z4v>yy)nmu+SSz^VLBbss+%{mF89tTcGv@nDoZn@*+wg_-4UFRC^`xbB zj88d+$@{TfJ^KN=Z2fj9uaZ>X{*k*;0mg6Ro`1y&n?}|dD>B5ppqb9v=|d0&al`Y? z5pzLE!CFV(1ecD3mh0qMy)fpnxZBg& z?nZv;tJ%BB*|}pvu{W07|3G#whymuU-*Sh=+l(GH{n7?&GW<6=G?gS|Wmmp|V4ez! z=`$^#B2xD~DLdv>AeMIflkT2-6(3P0sJXS*WPWtFX*`Ykgqt-7)P3T&c&{XX+AUsBxTKkQ+MI4#SK=#N&*Xb9a#&D+~-!iyu) zBB)YcGf8RG>1&#LV%pCAVDsu9-t2!V>>*Lvk=PKAYzVu*E9#9f#bX1L|dtOJNi`O3lBsN+}3=-rYZyS$-`J~T{e zY)C^+LqKEMMpXiOYH4qc>Xn|`lnBwZ|3LQVboBD?BgbBz;1Evb{qQ{%BtV0u2Bq;2zk<-~Z%s%xj3N*tLCcbKo#vng;(D*VX~BNE=fXWXRL&Vs z4gUtt)e7?JEt@-UnYo@nE9{omMXO$ijhH8~k0UHFci}0jqKpz}>hID{?>UeN4{y$H zmQQ(JTR)l&e#Q;D^Pjfq*m)T+Cbz^pe#OnXG}xcgHA?ZVpv-P@=zmCu0!5CXZSKtK zmv*a*sbMd@UX*yJfr9^F2`)k*+sN&>jV6!S+!lI}nP8r=(V!e6L_V#RFmg!TD3K+u zBP-!MtVAR2u!P=O5d`U(z-$-7Ic)*yKlQTi4%I-))ei7dy02#OQdcF%S54Rvb!U#W z1psy74Ja;=wC8*e;`Pj3Jt(bA)(eb0W%-dEhdx@Wk7TbVu8+pgaLr&G0}&b2BUnShBz8+FDnu zL{0vJ8J;L0VWm*aYU9TbG3CEj!G88O63d4*R)Q4XF^0AxBJJEI3(~1!4&|B;feXa& z4E~cEL#C^=O?#x337dG;*O;kbOQ&pYdY}Or&h>uVWNia5@NeR&U;f(4-RP${TS5h6 zx#Mb=Ud`($sS&H|wL-sBPgw}Q`1f{cc=~|ETBxlg3-Ia7Jnc%dFlDngq`4Y2>e5Ek z6OI6e34kzyPN-!+azokDCu>gZV&Aoa+gp~WI!FKZZ8w5=bp(>6F)x@UEXrU{@rnd< zJij~#YA#=|7KP+(x6jz;B~*pY135kUHaJ`hi8wf-;_xCaZ8oLm`>YPEXWJ2!B9 z87eQ~a4(!)fuugUa~!7@IUr%B)}j(PoWZ5xYVRwpKGj|Yeo8Z@_0Pg!ZOQ-Ljgoa? zPcaeYFbqR1w{Ci?+x6d)h|hp5yw@Rr>MMk(-Um|eVg=L>tOS~RUbWs}e*CCK)e=Se zfhT28ZWG`sa2dAC^;tNxdZy{r^ElwIT(9pL4rWaZ|J`SY`DI*odLqw6Y7!*be}N&g zWmKG?qJzHaR=2oENtRrF&c(q-q>}pPSDB|U$+1i^_}eJh1P4&(u6-w49?YfLYe@GR zu5V{AXFWRP(ki!RkC9su7ZXsX?AQ&+=CiK%m>vv}ra!DAmVP>;GA!h46&F33#E}z= zgshqaX5=7OQlN9(hHx4vmpKec35c4J_d8`F%0)IRicZ9_e#kk`^KZXn5fgO((G}dl zrYJMd2i|BNJ1#i}p-6q9FBXj3gs<_AaL3+A8+V2dJ;S^R!_JF=M$rixo#pceep)#` zjX#VVB5MVRgzZ#S8;T(qKeIRJlBQ6hP}+?8(ps?Z0&|^{`{~8^2%4vM_tGgYdi<7K zNkjU^x>fixqw`?WjfiA%z#NRW6E<>In~St-QepTj(gjdH(o7l@Sd0XzwGDO(U3tB6 z^ez%dCdR6LOZWn)7(^of{+L5UStKOq<%3E0lmHEm<_S2Q^hd4a$j%GFhnIrB?s(mG z`vRZlN~oSIHEwR6&pO2Bp{O!X4_JD!XkT8g4cv#e=n$sDfz5uSVXq%sIF@LdM2T^T zNW$MxvMB)c(!+awe){obFT`*G&p&+d-sTYX5xWpzIg7%C&D0X1N5K*2-Syd`^9OR1 zc53|1O9HQ}h0uY{kdiD;6H2Fr(}OOU3ysLs<(J7uKtm6^Q(Hj{C5<#iz(Or^bVt7` z{s^dytO}Dfl#2uLkCXXpIWy&4-T|(LIyWo)JTGD2aXR@On1-Q5oGY|`m-|EmEbjS@ z#~)Ztxr}$*_SqOYs#<*+T$S>$_@(jmm$vT05?8TZYc>}@a40zUfYicjtd1O zM#~h|H?)z|FPZ7(o`$?!LyA;-B)RF4FIkBLz0D=nhcoyj@DdS`El2u4Mcz-EPCGaG zoRjOPA|f^X3#$3LhK<}Y8+a2T3CLfw`Ccx0NWsmZvIYZndYO!yt=XODnZOS5cI@ym z_GxOeiLw+5KqcBvvYE|%DD{?PvqFl0oLNMQ+Zi&?3Gs<8?ABP+mmgVj_HqXY2O#X}_RP&HYYfnF=T9mU zD+^g$0`g#8=QVdAjZ*Z2JL#BuNJ6vz!lFK(4Xo(py$W{(F-%}-alx960OshJnt$9K zNyt1Ly!cQ>5R6-!{>xEc5W<2h_4$R6vs92!@`&*RzrzT0_+j$~&UYa0^+w#d#v+x=M{Zi)8_Z|_gWd8m%@;aAyOVg7ozvb9z^#u+N%9E;&Cbr2rnN6e z{CQ^U3yGDt-e}We@&PJDjdY>Zff-T`w0Kw3&&2Z|kneWU zdtXOaD1dRTWR0txl!5zbRf6hXh_Q~Pw^mydP7vnL<1#x53R-;waA-b-17A;hzoLeM zfv{J6cvOR;6$q}8;|*s(DzMn*w?33V@)2K#sw-uCUB)~fLFkTeGdTM__(yH4%SeQv z>WT#vqzYxx$bg=&>AYI=svpGCj4^wo7i=Q6!XZ+et=TBA`5TRT3u)|V9{QC-Ni7&lnJ(WzP`wjn%q z`Ds2fyxF9FsgmytG3#<8tBbh5^E>dJr`>Ko54Xegir;7ka?BHtEKjO2!YIBpj&gO* z)9)SZ9k0gok%@6$_@R6IB~(Q11*-`Xii;BCf96P!kX5a&I0) zo}!@D)UgcMtbx~SM%1L`D4O^h!*!{XEl~XU3hdRTtK1Z<`#gB?3u@D95F)c36-XKr zJWfzGz?;(9Ps-~;q&rhz~)Ue2(Po7d2T_*OIlr z|5;cqCG%e-CU0XWB!u@6Vx2W^)}e%wY(=$p>T=`g{f^ibe#L@#BLb^j8zoxvnn&ok zNAhc@b8Ibzq#>h^D3R#In@T$%GMt-+V@Z>>&`+4}d!wlU}= z$Qm`+|H}$>!CXfS?4-Fl13$CeR?!`;nvteR_Ey=OB;rK(GRuC$?o{NES6h)Ey?eq6 z8ilLIKpV(~AwCgl6=zL+-V7VXVM}}-y^Ppxmz;&c2jAr4D0~y)mvjkz zUTO$D|K4~14nDcv;-Hr+0+`-yDV(o&GN-&v6GNAju)GuEn~kXqS}a{Xq#>RGSgvPj zV3n;UQ_7f41NPF|#wqmvU9RJ4GdknE<5I?8BID^X*S?gU7(!JXO*cd5%IPHl!?JsRk~NHn;IxL}H5R6NK?kmG>oSNBt#!;}2`oGbYfI67~0%*v6YTpeN>X+kVCn+w=8a@p3n@oKkifJ&guFiay}b}UyeF^>i!4Ji1L#dX-0i#8 z${AawD`_db8~i#_Vh=Dtu>K~}R>}r124MoF&tr)P16lbF)X=&OYjs7ia5z5JyK>!1 zDpQ0-vd3`Wmo!O;0LAJ{lN4B+^JPA^?rHq%9aE{PN~x)@c9<2pljT$uIvnrMo|em zdMXhU4R@^tIny3qUXX(lirs*&d5J0GKBOCJes5a}Mj7DvkLg2Yt|M`7=Ic>)I3{}5 zl?sJ#v)fzK=7NO4s(LD4N5N51$FlBJ`dS})0r5vCcs3LckBIS@vY)8T=yrFMmYy;2 zJ&^ncQrCDAyH5o+l}5A7|NQ)~pmqJYmK2{S=S%zwn@RRa#tGTnfvQb!2qQb!4!$aJ zfp@2qQde0MBgFM2jN^skR8`mhtaAa~!|I#o3UDo@=%hgBf}{GqtcP^!H?;qWyK`N4 z@y02{W&EboXV(u+;liP>SGH+iW}lOr>`?F}Ik@xCRUhIjwi;yF zM;_nudC0}hmmTi#aaGX*YmhJQubUzWNNNayYy9(>rt++q+1s*LtMbYe$E!!!z=eb| zI~3wr1)YuPJe#7&0@6!utqUz&R^5jzXX)}8G(oZQrA*u%?REr<3v(irEcEsq#s- zD60aPJ(ySF-9Pjy)EgkZDvc|5p^Hq=TbG|BUn${}NSZGU_0X^R{?C?%%Z17W1 zEeD0xkQG5*sJBH=>40(5IJVZKV&VOoYuNAZg8N*#V^zYXVDY9jzF8dG`Y7KT+N5PZx7f?|mwSF<`fOb#aWZ`nj}~%|>U!4OkM6>r$?qB&%2- zdqQ|J2N_TAK1i^tWRyvn(SncTMA$rYIujSlYugkY@Y8629io0R>sqB80dP#Tp~_F? zOP=x1SXa}mEh%!J{c2NT;1H?@lf4Q8s;fj#2xl}2QGb+Q(hVxix(^vI2lIHMM;qeW zXIQG+If}nUW;-dL8AIPYXwPYmKC1TUwyF$dm`tJ(rhJ>z>m;7_q;f&B=Hz710VaFqJ)3GOuAdPmf0}R7mE~eWg?kZBS{DQ&W&Eva zgdO3Xkw#f=TVm+>;Xtsxz{)g+&AD4oL;Wm5zME;A znu!w+6ML1ap8Pt`#{ z*h(8W$3Hk4$(-XH(Rz3-j8T8TteGea8KZ?Sg zAZ#Ur%h@)$nUM%we(eHYcE&0(0+cQF*4_{=kQA50=)T3W3^e?|*iIQ$D+6wRS4t*W zXRpUC22@mDg^@Xk&M}eGR6pDrMvBGRYi&W5;m8f$j}N6BNPz8?hP!piklxybaWQr& zW_h+rG{8$G<7#ir2R=mrDQVo<*|nswQjS-Z1fkCM30Gd%>Hi#qr_A^G7sUvnb zXSJl-c}c9ay|}ncUI*0Ui07q+5);=+1x6Xt zWTQZK1yA&+#`CvoLmRgoI7qY5(mD@%3%VV&{^xp=`j!tbSu6GnS+bTB88L6G$$y-F z-ImVIQNi<7PmH*|qAjn)C3d#4Fzq+gnuX`9;dW#Sk-qO5pQ2vO%>}ZwS5bR9X8DH! zRQ9PI5spd*XEjgtm^*7j-NI}Ju(hwyH5k6O&Zwh-r}#FRzLC^$rq>|3pj<;s^mh=0 zUg<@2$2P~(w2Y+pv}*-cQEqTyldAjn^xm4O?~XAr?4RQ@Fw-;AWuO!2tdwJt7Tnz3 z5)^4bv9N2maDtC{ELEe*NO#|^$!PVV%`p9%1n<$~g8`OdU)t((H?Rq&HJ!2f^m(t9 z6_LZ^%iTy*EpXV}qy;<{9V9i>kTlAztcK8%Fcm*W-rPAhkm5%7FU5TWv3{DBPuZ8le#p|UWJv80drc#c-APkIL( zI`seXE4t z%-ZNO)cgJY+JO~AYXyc70wNm0h=*53~Jvp(QBpJ`9po1T>#*_Xg2fDdtIczfMY; zook*X$sweP2q_}#sE&o%meU6_mSg@%!f2C8LokX3&Ud$vOQ@u|^bq{ehOUa)WaPfD7PldM+PAm$O*$n7^EROQzXg~9WuNt<*_L*on5qA$@%d~}q`NiY{C|9pGc?bbds>&$OhvJYcH z&qUXiAiN<7guSN`PZ;{c%>OIDTnPxr0n23BtHBZZ8mmv+4NxTHl)e(m4Nz!~fd;TC zme?W#V;Quo<(Sk!qR!@bRMjg)p~P>ITHT^+qoMckDT|;GGp3vG!&dHpR*)a1V8Xmz`tXa;7AcCzWoEij&v&eVSli)8`tg_m*>%g6r8p{G;7S2oT=k z+nY?Mk%pYs{#c@6I9}Ionbf>)Kip!=^of8e5%dksFALn|=`8Ay`_+5ss?R%B+0e7l z9h>1GaZc8opYWSqm==7$g$DAkRbUa)z&C*(bVpl1a(*x~fw!nCReYpfKbGPbp170Y zld*dH0-MAulyC%)m8RWt=&;0KBFKQgLS!?y4@5U*UOSq_IF%!Z(JA^@$ zCGdl6s}lcC%R$m+SZSOftX{4Is};b-`W|2zydwwYtFtZPUZ6o`P_q?BJZ;$v`q&pc z-uQ*!XUZR)Jw!VY=AKB&{f77yZF-C5R0PP&A5nB^dDx7$s2r?-f@q2U*Q+4f5B_QJ zi7F~}$1j#nX=Ru3mobl`W6E5lzz^O|pWd!5_<7y$LVtFCS`z zKw)?;Ii@cb3mImLrCy9yQ6y~BG1%)8j5%T_^Mwf3+$O4k0@=IaiXe%YCkk@QewqGk zNurvTr81xHr}*ds9>3o^S(i zf2V_AUO02P+SHM5PJV$!`$*zCe9kf!!v#O9qd;>ku|w>1Xy^ zm;=+~e*nCr>^b=-VbE^GnMtT7^wm6J@|TA~N0UKdi7gdpNUS5_M*v_ycb4@s;89#E zMSQO<3oQ!FDEict6+M3AY4aDTuaMJXeOk%7*67C@SS5AL>#t$Al$x4$Ujv(uubZvD z3e0)ofRNV4A`G4CjPhVWd4|sGx)0mfSP{{)b6Of1R}kOkRzs_hry4h9>*MX$J=K}5 z3w+k|SSNJU=Gi*wX8fvXQx#Y@enDvAVpl#nngIJyuNy`fVYAa8tyFYs;%!z(%C1>X5X(O-@TsveX zX1)3&wMQ?{xwP$_kda#!Hmt8LKYZ|J#WTWVjcs2#x(4K`E6yGFZwjn-!UXxVIO9f7 zqgY0S5oz9TY(y5Fww4hbC5(aK2Zgf_vtTX4z~w~xha%)!bo^^1kwsyH#w7S!AXtbY z4R_!q$r6IU<(_Y;gdC04v$P9%j>^e`DcfCU!VvER+WI{WnsxBUp?2F|9wl);K|WSX z6)`vvbrdhhp|j3*Og)+#_Fmz{2RXZ@-R(B}<}Am&0=FVsu4jnY+wbjYp4;EGm*uB5 z@NHa}#-Mi&;ETq%XJP#o{cHgm+iIWQG4B^C=9*3O8gDRwVHeHu%Esro52v$u zM{bH$thrqj(Fuu(NI60vNDeCsqw0-+jwx*4!7#wbqT-~vtq26t-m0k{t2>jG+zq#QkY&ahvo#A|3rF>i6#iQu7 zvb@It&@f_Ea5YW4H=j<^3j;!BaxHY@5wK`#oV1e;*~;#dcHA!wl+~Y{6AG>+Q?KRo-xSbDi&M5YHK*YvHitU4qFd zTv+27GROi#601cxkx9#oK>!aa_aFBIH{^Eb5Jf7J-z9P=bI`d;EXjQg5HG;!CtN$` zR$&CM_KCOI#mUaa2ML1lWcp)VI;ghZtD08~VJx+0t8nTU9waTxE%7}LO{km5rK8fd zsyAd(ih8ocVgQ@06w49vL)dO9q^Yu@C8?9)W&|wnT*6 zS&j3Fx-H_#Xm|Fm-|$iuTx+Ivc0nyF>G$9rGO_9=uw7e;j#BsKv0Qa6&Gyz};-Yt( zQqFF)t6&0)eQ2%yf@TDo5&#Km+IkOg9r7<6iDF5AZh z?tCR*Sk1Iz#%kdDTjgLAoMHWrrqjrQ6sM0r*7~oivD9y#U>RBLk;OzAB`0R zw4#ePs9I!0J0yJLi8$#v6#ndFWE>7Hs`d-?`C|Ggoaj)Aq-i;cB4w!%$I`IXW`H7e zKw)mkh^O1eN9St%Kg>wfAUQX|jE_w~Z;|-Dp8>XIQ?Lo9)zwDM5z#RXd=BcQ9{Z!M zcf?;plt!X7g@GZ^v}#h7dT7R8B{JqOI1Pmp`#5|xg>}^*uk)}-3(5s#TFs$M=EcyB zy3o1{PoM8~crPlmPP2Gio44K{ezOQk?Vogx2-S5@%R2`zH95XX)Po1Rv`}TGCsG4w z7ssn*N{6hz4R>k7tq1m4M8>|wCv|TR$u&dUn}JhW4C6nlW;apn3Le?%!L41G7@Q&W zhHF;-PUwjMv*REZ1P!_v^c5oa{|) zhOn}t^ZyOmyj7CRWni)82aUj++lJhhg-;ut!jvKL#}>*acp})r%zP<&|Ce zOr4G~ajw4X{cQHe*3`Vaa+x*GKH~tD6@oSfFW4MBzCkd!+a z#sr3&CVUw-nO#Blt}=&0(lt3&;_YGrVj=1ds^O<+11|ooon>&12(?7^R){vR9^RjR zJ&I2}VT>e+Uss;fmL zQ3CDTP@1l>hI9ZY2yFv-C<(UaL&`=#hpC1L&z zUy0mrY6UJW1&i%_-YIqVt2MTJa7gzRLmB(&;8Ti+K+sGeKOC2CwS7JcK<=HmyF5i; zoPY9ZwlDAr}_ z+CsiZ;ynMTsAK<*NG3iFifFO}95tcOm9qB&wlGbY2@O}6*)@c(hh?1#8w61J0kRV9 zg^wrDMq29LELLD4Fp|V5E0kR6gx4WEf}AoAO*q5|>+ zqmsBVFzyBZeNsUfpXuCdVmr2KuVi|>lU-m8Un~ezRU7h~U_1$6+@z`t?!rBP)Mj1* zBL}oltxL`eWu!?!=Y;fsFm?_>f`nZHY}>YNOxw0?+qP}nw(ag|+qP|cXAip(8}T3Z z-Re+L*Q&4bWsVZIOapoHN6Uw2^W|_Yr3B)5LWqW`2vp{_okaMeINVz{dH9Ri!IG3Q z8Z#D^04F})x6UoH>`4|*rQ|eFR15@fMN(3NP;ub{PQOnRufK|h6wiwdK=c@rW95jy z)r{}rL;9|fHVDwyP7zF-F}kPEu4HFj+7o+LZ3ptI(2>K?ENbw~O?NXEOTNAT%%ND| zj-H2?SGhG2dL<*wB==J)DJf~`1%POX=4TfRa~d1nV~u1rpRPUEB-QD3l8Nmq`ssTd z_wa)^*{tXuFSL{Smq11CDB^jzP)Ul&XzOLF&5WRxL&j+3g1+b*EpB}!Hhwp$ zWPb|z%K@Hy14QAP%4Ih&T#=maJ0Kl_4=otPxu{umY+vyk(z{05$sXL-qQ<_gBHXo< zYwp{$NS0t}*uy2R)=E|?aSWXh`Mc=L&&B1yj&ak~!_!)=r}uRe5=QwUA+cu;d0O-rm()!loaDu%UnP(l|T zPso?Nmm^LpQ8P4pv&cD?`Ogg0C1rT=mmk2BEx^}*P!}*V{0DUbBOBxYx(b*G7#SEj z7@+8-O>E7a&HsXwV1{kRWapniPuN z=221(kzHC^)$LvA)O2w(Q*6w;uRHj5CN(6V**-5lr*5wu)CFZL3npo;p_)Lb`3P#R zws3Ta{?(n)3As#c=>AbrX+cp@;5oUv@JCQ!KS=^*Yyf|?`Q^jM`q@UwE07{ z(O2mQ9YElRqNT1OfSW@@pi2-=+Ybf;2J{DYiCvpVXB_|y;c{0Px*qzeV(0HR5J+pi zH_=yv2ef}+Gi(1r#b_U=b3&_!AIQ-am}>HS*b}PY7r6m@y&VL! z1CZYgU~X|D_VJa-Q&+a1FVQbJ@8j;#A&?W$I#(0$Bf#2U4*!go4(*2DpLz=R?DX+= z$dB0B*4Ce8YywpuvKdrh?pMJN3fSgnNRG}wfE%z>TaN4q%>LW=`+NFo+-yZ2V(k+D z10Q_aqTGU@E`RpJZPBmH#5g|}0N)kQ0Dudg58XdYEFPX|P(~guDdQOk)U9E;` z2n-70$7xVb?t(AN^>-3d+7A|rd9SbKPre)+7*P5Th)cD^LETCT;BTS054?m}g zS~NK&Lf8f$M^-L2d~o#LJcsxwpfP0g8c@fU#?M6#zmaFZSzHVdKuZA~{=VDHGAg>- z-*Fz;tdzk;pMwYESw6-7GL4U0mt#Uz`O96Q(Ls8EdjA2M?zueKPsn><@AkaXMXa;; zumZqr9E9>qCCI%BAwGXtl+d3~b5Ib#?8ZJJKLP;*fU=Wa@o@0|ibwbZQ2UFYpkRP( zQ9t5+a?~ilxunSD-SFQC3s6u#mbW~J*Q5%LfZss5iPqo1F96xOzC9(LH@!QFt$X}8 zV~-g>O1>CO@+ZB!3gEIn!d>Lm^Yfn|{{Yt7U*V45$RCS!Kg)N3?0Ua}GM$buXea>o zUy&0Jr27xxpVf2qj)B}@onMUNvZ7D;pF>{|Af5o#vnC~Z>Uo6Ei}=(kNed?UmuWk0 z?{uHCgwyg+?1$o;%?&%_;o4bury|p0F0!`5TD7|uk4U^r-01Lj99`N^-*68kHs98Bn0M@Hnfhd=PQ2@12@O>gBXjb;8m6zv zAq_YFz=!K?XA~$%goL`$W`s2hm^H^tDhtR-HWSWtWs19S$P_59b$m~7k9T#?(<$`> zL8^T5*VhJ|6}e_t62&*pklpeu_@L5rcFyBTTO*7;9Cnb9hKR&zw=U^b^`)e|Z6mD|(j9P-W&RS4tYt#Uq4QVPXptUjA~z2u-LB5BWQ5om zKem5J_?@!JY=t6d*85Ww?+C{lKLz-Ik(uEID*3Ss+aGtJKD#ocwg)~7DqY^&>27l- z>qxDd;NE+BK}pT3Nrs&VP+e<8ckFg*ui?q*e-3ym2YMdg*DiwWL_}91C!vRhr0KAy zT^A14^6QA%HZA|gWSP~Nh$It9db0f0Y$K*ZHLK!`l@&Px#*{tHaMR-=xjiNp3dio4T!L?w4zz-kQ#`7_+ALo+xD!0-I$6U}s7bUu?E)Yxuoa zy}`ACWyc00hnLdFHBI|SeV&%5xM+^aLS8ukIg7Njmudgu6WVB255Gm+kC@cVWxHo8 zjy@xI<~rdKOyJBAwpi-sH5u&zX{b_<<7jj0gjJQzVu+y?Rp~3vttCAP7RhQ5%PMdt z@c?hn@tV>m}|qa!iI;p`34a11nBbm;md!=2*{qk%3Ao<|fUyp2*ak578Y| zvSsQE4w2r{M*3ck@*EnM89171c|JrVR&bOmxD2aHZ4hwYB(exXH7tM=Ms;-zfLtBd z`EpnAZP9HU_Q2m>38gx8Sh`fF@yeWBb`K4DC^I@+$<}*ExdkNYxSNr0LI zgD>#zd$Fq$wbI>m36-#Aw}eu5m{r=+w0|RQiILB4=-{SgNx4kC!5&^MzzbeWiWT zC<7QVtJg=ztvyGQlHhuM>Xj&fLl~SkB1aGH4}ZLzYE^|2>XL ztq~P%jL-#c0{mvN+^_tHlA3DHl%y-J$~V^vJsq;L(knPL*S*~?{N0_^xa+M9!gB*@ zZe1Rk!wxGt$PNM)ff>1ke(njM6Zwi$MdL{fEvYZ>y&sfeX;&*@A5+85qIO#5CF8&o zQzAvG#r$x#A#QJ%b6ATW7bS!_lND>M_xr8GI-T7rea?Z>AQiZbPlQSnKEgeJ(w&W* zRU(mmTl`_|Y|l$B9JJmS4*VBu*7+oTHFY=#gm89BhGnsuK8yOUYqM6gb@&qAhcPUH zG4pF)_)K%A6YL`G(~(XK#D*_F%|lzAtQ8Eo=x!>Kln_R`Y^Ww*%#~>jst>nrJ%XuA zkFoStzzBZO5|O#eue#4k%U#c8xren;<%9kbs7| z5bCq(^>*1Kj@r2H`b*^!QGuCSy7d_}MOY=%qgXT`t_g+2bch#@W2?nwE7(L0@E>ZB z+4ReV>awd&(88j<+F09CxN@zJWwY`qC(JrsfS1-rEPuu44WPqjz$->HK;^%DPa6mI z%gui>3=UKJ2@e7#*NS;WurP=0bl}b*rrK*2<3Lcq8oK)z!4v=#6U(Ma+32_Q)1)hz zs+43j@5y>6#!qqp>`8PTS1gS}%6pQ_L|3?qG~^^8)d#a0@2S4Jm-@+{Ey(;H-!Fy)t(-yyr! zHruBF@bn0Kvmuae@pcY&t}T-4Wzn;5Xgd-lisn{_Ieg&)p`fEb_cIELG?z(%NsU48hZ3;M+Rkl1?mC==(v2HUT}RfyV^ zO^g#M4QiY3VzMG0(-7&4Yw2#X}VC){xsc z`&G>Zzd%z~h12CJ|A4&vkm0S&h%reJLNF5szzeGKfy4bvR%@>&FxO7au+d8KlHqB& zhpb%WAZ4$sJ^i6?LZz6cxlq%?p`u7dxH$#PTxViZl1zZt+Dlh#Kqq;mh;ug2?DeuY ztx9GSv{;Zle@#EZRggF`5eiQ*d+Rai5r=Cl6@ptWQnL-eJoHsLe4P3CZj`q_v%z8# z>LHL&pP#z^3RV|dZl-VHj`>+PGedS4{PPCntrGJ}G<*@4@`Caq0C&_>Ol5LHijf>P zYN4Nz>;?q8%_a-xYy^5b6;v60DOCbG%dQ~8`$}MCPj6vB;PA9AJ|rs&_x(V@F>%>z z)LoKt$Ava))}pYm-Ev)i%qd7_akpk8wq~oaW|Q);0$~ZzCX?Q$DXK(lgU$A>&`34p zmtXOI!_FI5pY*EOtUm6-H-_{Dxz;x;W?Rg!I4{tI_u2u~@fQ`{>)1S*;4dmq(yq%G zGoix`b6~BN3BCG#NxV7`51~}KJ<&1o!_2w$@?=}IcADBfVm1uplWEqxoa#hA&OUdc z#zxx{>lVtDOx^ANq5ZCs*X|pdLQJCD6R))Eso1PEH_keR&g;@d_oXzE-Jxsj0<);= zbMx2z;Pbs{z{IUbOkQvWTCYcaie~^8W?tB+Qn7E$v_6<0F3!vPe5%Np8&)Cna+B6q zB6{-GwEc*5E%WZoA9Q%L`g7f<#L>_zf~PRduo?`p!hTCfB{=57&?)ix^jO~MpyL&{ zCDGQQ30actl6DZExYX&-8&}K6_VOR0OWp5?7gdOco>U_@{Vs0RPJs7MLFJ;MSIwn^ z6ZTmVX-CC8`msNkShLd(NfT6gaZ`0<%}kpkHB<;;@IczhkQ=srIs+tUO(Du3RBT(N zM?lh`Jfl%!)AzmR=`*If6S%eKPQW?CbJ(iS^fE;Djs$5 zwN4hO^fW?T^Cvz}4-pUl#eacUlUzh8BeNfjKEv(nID>j*!lz#_(LhJJ8xhN^OI}?? zt!6>55{Kd)v^7ol`c}N^{kU^88p8D&;jpwKDo_Uj(Vddj!V%ZI2kexLPV{NqmW}S& zHBS7yH{#e41z|PDrgkc7n-O@B?AA!$eHK({5;%NS$uUNeoiGpK%yeq- zjvOoA_Rsxb!m-W=(TIrA1Q!3T>b6fDMBFl~_QgOe2?h;?$84w6jbs)+N8posU@a+G zf62a1w{K1n>9G^?vVtb44b=5HxMixh#8HYte%g z9DOjTu_6bHmhF6D+JR#Q8WJIVRc~7{L0W%j7?^zW#FtA6UpV^SFnf^-d4Cl3f9Z6;-Ryix<6>ln$9L|a5p?1 zk*9F}!s<^;J>c3_mLOQ>%au>rk$&G1{PSc3IWlgbC4T0(U4@eiIDs~wi6c|Q+XlC1 zbS{7itE)Px@ed@dcXHd-UBKTRKIhVU&h;91K^Z@l-b!pjk! zZnl@e)*b)aET=;w7tyrjc4ZZc66gDlw%GpSi$dgYdO_boa}}kd$sD;jMx17z8DI3f zlW@BDCll*CD=YrOTle-1MDFGD*1)x?<3C-CAYonN&&(k3?bOkA@QQ7j$WxVFK@#^n zYZr9|on>Rp2d+sI8X`Q6m1}cf>jcOXnoh0O>A^F5MzFSpIJ@R^m0UJfLMGM4G!f_X zjV)*9P%W@!7mV^&@$G{z&=(}9xXm5n+M{dP&_;##@*NuI?iyY#h^L%c;0(@$877k- zt!h(K2vk>;I_<%a`)>st4_Hyt)J>~#jN9m5wjxClVNqcfRYMmD+SHE^d4&bC6)i_q zS8YD;b%yB!IyJ56dDTK7 z-!A%0-#^Y_?LULq!$6s4Y8=_jXMZHULxpV~D|hCd+eZZ--%V5mv15{;oSy9O3N zF%Vf0R(wvXW-n{H2G4EXTOmx+_m8Otg_b})CQHq`FVRT6EH zN2D|^uUWl5Eas1A1dp9J>y*8bvg+*XHd zRWW7GsQ$0UT2F!iev-}gqLlDR2CQGGC=FNQiuak>4XJSJJ%&WC3|Jqn-^gi5q2{1M zV2wFhFX^zvt)ZTAHKhYws7(l6xoHnc4P*2KwsgekET%mg>F3$B)~_pLSVa9b%7to! zy6YF6x@B2WyYZ{SPrK)Z?RhX_`(QXG7mNIgzzFI6qB)14*q8gIHC`8Y()!qhz;19O)+a*U~t@X|!L)U`YRKSW&JnQ}y$n-V1Vf^M$@t|=S-bysp$6Lf->D3kg=xEs zoSTeY$U(T-uAc){dczwHhjg5tg*N>6EL-jD`Q-*5B zY~Jm}VR>7m^ZMgS40TR4ULV&>{76XITwYan!&+?Yv==&7{7W zyQefxZc5AS&Ddoi>RRq0ImKM13e8L)rO z7!|Pm&f?)}*FAiulFyn-Ka0j?2$n>sePpSUpg*?b>x&bQXM#2Ur6kCDu%uHJiEL)&PRVcduMd6p0M zQ50M72YeG}lDwYEKGXwdWKH5dIW=wZgz72tOnYHk99s;P32=9aSxvLhV0>4<+|_=w zs5RGVpc8g{G2_pCl${CfX`pbbG(B6u0Z!t5Uw@6ne9x59HsT@ySM70Xn2NR=W3)AV zZ%*O8LaKEj#9>FB8C&m4YXuC1qb0Yf9^nQ`KYNa75`J#apjX`)NT)6SHQn0GgOx^Y z{?e6b!Dth%!{Vz1482#Gi7I}LKi+}1mAOW`)#E~fuHDQlZeLm-UA5AC?n~;GOd~pp zs1}43da1HYpQ(&#Dj}6JAVr{$^*J|*d}rZw>%hM*z-#f)i3FYHbiwQ`cl~T3e5*#1 z>v#MTv}6s5SR~idp*}vbj@;}yAELO(N|dmtdrZTSLNb@&BJ~j*>u_k@<>xb^f<<@i zUFnV06vpK$;v%(?`DY!t@c}nRf^%jFkkQ)3DH~vwSh>%e@OO#!X!03GPRyVxZB(3vKnuWZuaFe)f z(4oV;*e$;hi+?6Kt@?k$1orGV09r%Ikp!VbGVd)mm&6Po&38l=Tbxd-(T8M3}D zl89ZWh3_gl>g@ed_-hNN7BXaExVZ+bNmbL4P0vQ2E; z1YjvR!)}j1G83+N>GitcuEF3CKBI*^a#cubOlMD<&00z-I$lK`rQ0f-Vwi=Lq z3SOn231dO1-kG&dbNcFe?$KxH#`t=-@%zuSPdJ~d5H&HI_g7oEqr-03v_33Vbdo1W zLWOcrPjV@}OdNPTYT*@Pns-4)1%js@H6o}Ss&L1u^U>-}qKkZ=nn~L!r2<)^ifM@} z<+Pi`d}y&4(gA$zbQQY2%AreY%=7>?$*wt-bo_)@;H*vp*Az|2z0<^B9D%7Q*A2FF zbj z7w&O@#CPQvu8~U|*k*)T%iTD25Ey5Q^w%Ag4`lMnwYy4f+f;?eC)tXog{yB7^l2$K z&+F$YNEQUVgIfb!8)DjVn@5b?x~5oR1QcCGtc~?deq8M95tJJegnPPIQDi?VuhxNq zS<|^~`GLa^J@UOl#A6c^!!P5;_O(S~B*n6RF1}P!4X6Ptu_;BeBhst_2FIcGKPDrh z&mG>QvW(7CSV0y4;N74U@2!-a=66g|hsA|`1FeBPE+g8{hQsSW)PSbT^!xOBW)nVq z89@kpY3C+QRK{29nNfQBr;4O4X>7f(cgxTeS8q_r4hPRsjhm}XJkYBXeyS~qN)9mq zC!53@8zq8iWpG9}ToLGp(}F`DZu$l&%6fZ5IT0u2%y+JmL5_4LX&?qNlafk~(DxdX zCYddT|CGgg)F0guiwo%48f^L3oM1ucg!+fP&)Ce!2X4JQV_&{HpeY_@0TCAq!3=Oi zlBy^c=6gwLT~+P1BCC{jIi@N*g~ec-j$ON}9Ok2mr`$sDjFGE_ zOP?8kFax76hV8j@xl)`SB-$8GGhLqot<2J+6`Abo4i4qhp!p z4Uj_yl<7rl#7$#XJLKw2l^AznNw2w#DnVD(4BwIvZLcx(X0=bIEK9Jl_YQBZCw7B@ zh4*Z|O90m4%c|yFoE&4X@t@+9^8uTF_s)|23lm<>o3)oVi)2yr(;{^Vd8*$38F!(g zDxz@px*`=QuHH@i%)G!RRYqgx?mk1~A5`IByF7G z8-y$8#4%K-4tPTz^-(k>mxYq2c@MD5Nhh(X@SK{KrI1%jha+yhna~U&2TPSdZgHpMa_kgtkp9CU{265x1MLgB(bNxS-sZ| zE8uwEtYNK1DE2m#F~#4zdh$xqP--ymv_}y&iB9?yaN>QSAt^`-sZSITzT$K(&J9k#qF6e zWR(FV3PeIk;Dnnb(K0S}k%|4f)FvgU(U}i^OW?+;aKa(__Ntg6SpnvuQ#ET1dA=4z z#K)=7>k2L7j0$F(?PtV+^Cc?7oZ_PkrMP?^DSSuJ-a2UoannPQjo`0}7;NFjZ}qVA zYzrUa5J7s&TYaL@{xDMWk$>yVqkA}!HKuJ10;|?5M9~-h%=|mYQXs27oplN-9sf|% zi)8_Y%N$}Yxsp+0L|awLoiO78t=3Ole}WvBtgdZnX3^NhNiq6%Y#0^qml2AoZ2Z(y zQ->jH^8VO5$S%CO!@Y_2EZXguc(Y{AO+-tMQ<85pT~+)q4TWna%{>_&>LIAkU+()u zDMp@{fAsdCm`zUjX3t-*e%Wm+{3JMifFpFsTpunNNj{ciBvJRm{NM zWfhZtr4>_Vo&MiL{9zkLKYNqV&tl*n)7RBS1nd4{^cy8*N`YFrr=1= z2VsOF2X`=z@DHu@av?=9aOM$i@S%zoxP!4ZZT>zDx0X&}ET^Xk*~;Qp1Pm_^*NES@ z>vVr%Lg*ZS>4KanUr?+)&oXgT=GNJZ>73KvhXG&cNE?8xYGXYKVwCy&4yEDb%REjY z&_E5#;u{0qW_@GLskKZ@CN|Dnx2O(mqo5iAeWz%nAu!10W}TbSFlaI|t)X#5Vi$us z6|wl3gIG$0-(ligV{j9Oj(`U?i@v;6k0EOKw@#sbRM$P|opo-SUWHNFbV)0+g%)G25nrHCkc2evwD<3QWdN{H#7-P*Gn*OY(ke`R@M_@^K)QN&axO~6wRV^=C4Gn}@Q90yx(<)s zZTNO2B2_s33C`uUN@(7in7xHHXR&CfrSrGJtLdnWrxOZ=bDp=8!8KI3LK9gS_QqTygA)>BV({OZE0ONS=^U zyq|G*G^a>9Vw}kf?LphwlKLU-n9)YsmUj9bdjnu83QjpQ^)JJP;07XivIXb?@r!58 zd+CCSs`rR~y+sPe%=N5l*jztUZCw(TI5Jy|BZyeFzD5@BBTLS%F{pXd$`RC^m@aOT zxQTmQPt+Udw77rinxBD1HUUyZPz&3yp{GNrp3r&X!Hy{`EOi;wc(G^pS-j=wKOyN#Vt>8M{=A~r_T?%L? zTpRDCi9}uqe&JJmm=<+%GDs3(Bz&(PyX5-36=UU&+AUF*oRtd}R5cIOhh%km-4Db3 zDi!P%)eM70lYdgZxRpgjwib~_bL+|2K{>(f7tAaN&8nZN#qXpnf|s!eB*_DUpqbut zDG5f#Pzuu}%ff5VpNlx`M3DA0z6UyMU-Q}I<)g|h$_L?gqXr10Yt@L^4%x!lgvn^% zmLusWv&6O$tqR<)ABf#U-9^G+WMUUGwI%%eg|^%bnH)g#GkHJ#Cr#qgf^Y+kfs(N>KEto##fnM^-oS#Q)4UJ1C3+uX|!;cE(+)wo26*g zH-Trh=C^STzg>n9$uW4FU-6Nt4M378GZS^Gv(6^G$`$25AMis4MRq|`p^DD+!v;9Y zTShD`Eb4xW8;~Xhiie(}BOquM4JdWg#VAPf5{sePH7{1sisP3hrmutrMW~ev(se%j z(GvlkPtz2;dMH0JVor*??sMOR>b_#!`N^rXx81RzzsToPC&X*6bC_65>=YtT*z)by zSov}e#!M_kjcZkVVJP@5zA;;Nx4*=oLy%Ge=n^t1-q0H^FrwBH)qNt36mf)3Qi;%; zx(-m{E9{#1@2Ebk8LP-p*g{3Uw~Cw8-lq_d_y}ZzRdbDAoB?RYLXlIo%lFA1jktIqKc?#C{$W(0Z(EbQt+$V#jji?qr?4ab)81$S$!PKN@o~=ouh)@^e7LOHuWy{lK%pgw*dfFNL2iml*Rhx8btW9KAbHT+2mZ8j}2I0UxqIZaOS9=;^5lxRCoh( zPWY!_jwCrowAYUHCliVkqxA>m=(>^jHNEVk&zQ z-9B`-^Ve0U%Tgf(f0EIAt6uR4b9{dEdX^GkQi7X&8uZY>S4tQ!*NCs*?VKb-~pI2CS)zG@=``w{I@>yqCSEXXm%Z1D+2 zV)qiYRnn^+d;U(876>NWUxuI&O<*02s7NIO%X9ZPBn(_f397Kqgn+MI|4jYlysFq4 zctma{!z~2tvuv_zj(YRUV7MA=c3cZ_1F>|6?u#;8f?1(2x5V2>NQ1xzQi*lP-`nOq zNabA$hW^;WL?jhL|C|s1)D-aEu-K^5ixA<+Q-w2L5mk4E>b+UWl6SF#KN*-aQR3NP zCb{&){wW-VC%9!n7-``oF`DyEIkyu@&phRq?Tw2hYE z!dc`jc!bVVX5f2vW{<}sYS$nEcy#AvjWpDEC3t(s#j^r-=L+G(FKrjYbe{+s)m|}w zU&W`Vb~R|e&}BIc;af(scsrL4EGPXePutb(_Hkfg_ST^i{Zf4|F0ch}>+0Np0+gCU z5P?J$l|Kix8vlf}P5tYJfj!rcgQ3U$!IwR=jq#s&WTyYfBXcnQ4}kpNJTeD6`~O`2 zA0C;Bk(u@X%Okgg%4csP(MsD()FT8ko7=nn8w`E_0kDicge}M$tgUSx_rNX?SR@*L z`_lxcnVyc zG&EN-G&ELaDk@lpCA24cE~*r?v2je8hSN{@&~{`92%lC7fPz_Jk#HXVn;u&K6x{xa z;n9id(Z4|YMh5%e=!geH;PC*R{?mYw(f}OcJY$$Ck~jx@Hz2LefxLB(bz%T9nE!4| zOUv4?v-dB@9fPz6YX+wPDo`cpIz^rKZv}7($HV|}`K?3w1EeZn4vf#-R8>WdJU5d8 zd06~Y5^N|ntH%4AV1MozjnW7)X z7_wFDJL!8JrtuA%FRu@I4K{!Ffrd{NVDfggFApXU)fBFw&E;3<_cA=gq&Y?9kIMP4 z#rv)-BV#yre^SD~g4o!|IFP={{vMz`AD{cL8y+gbTOQ{RvFgeW5YSuBm0Qm&_H$jP z&JQBsG#|1c^xLhmWW3pVAiy8LWZV9~$N}uP*D$w8UHxbDmD|LWb#^uU zv5EE96)-1H4DMr9;AbTNwBX~GljM4u;H0lCE+z>Yz}XR~vxpb}hxq`+y^%Mrf@AEO z-UT>4;=35IDPq-01lvO1pf)A?AdPUvzzk{{s536>j&F`clE)$W9|FCiB}Gc`3&A0 z4ou*8@w>bBI8Qg%s`1N5iVyz|f5M4T)sKP(z;tuB>)Y=4af(UkC;3i0ez3`z@Z^`Z z!GSlc{}=Ht`%ccc_4FpYn&5ZexAa$H_Bnfd9qr8e89(@xRQrd&^)zzpC-B#0!t^#L zJJ;lH)ty&rPw%Y`8Xd$DIHQ1WMqug2v#v@6QU|kb6a*nwsn%r;WAq^=zTi7i zX$0HhA_G(Ep+qstr&>{TMMu&wc2%S5(JWWXrTF;l+j5pjo$Qtr!IW# zlp)iA*MdAE;SQDKd9WNoOyBk2pBb%}DkTH=o~mn|aJP~X%G85YXiK$=t6I7l`F_%a zWzMf!FdIhPg|!pzQLnV`Z8}bU<^=*84ayj8-TX%|mYEhPC!f2^IVM&7`%?%$4)ot^ zRFYqW1Q2k=lodz14 z*W2SHljl)zAPWqXLlFGQHn<+_a?V0+nm_}sT@`Wz8;ONO)43ZjEs!HP`3+M#y#=%R*+hFAQO-xt^z|J@+Y|%PW*3UB~Lk`nbQb zPwI7AFOrkL&R$a!UnM&Jr1=YaAspoNxbN7F3?%% zR>TlrzFyjl22vUzgA-Zz&up1-bzct3VL&ejg~Xd8tN#*y#O7sI5N5u;*7RskLZ%0_ z?+Fg}Gqw`q_Nj#7vX#3Q(jUejAdJ3FM54theXd-4e9=qpl`^s)$oQ^RjLbb|xbB_c z^GS}Xu_dt5V`ZGIW?VK7G0K)z>8XgF@prxK0zavkn{`>?J3mdmq05?eO#O`*xD8Ru z%}u02wJ2vM3l^v<#vcJMO;xu24H>*FQ7(TaYT#hnK3hmHE>WnxpG)(#Era2A*5Klz zl|Ip&L;?1;vl%V<3TVT^R(95Fdp6cR(Hk64#EUCq;Z_EzDOnY;rG^B1Y|@nGkH)!w1!29GrexfL5D@uAgTx8EdLd`kurX$Mk-k;B^A5cVoLy%aPuht_!(rQxk)=68!61m)3g0;)oVXAZA%>v54(mPDpZ| zpK7FhqLf^}qGMP%>)w9j#+NnU1MDQ2&n3m#0a$ai)ms)j*Y6Ugb!&T-GY+zGp^xY8 z(qfS#{Mxn#g!%8wY9(Sq^cowmCS7@(zKDfcD`wmHH*ozu!t#6QLrXY9 zz|D;$=oFoPpKP4^X!^x9T0vnpI~X#|H+h!c8}Iu zD@SGq)Vgj|5d8e6#ACGIA*J4961*M<(@Nzqwnc=<2it(|;Nk@n&WNK0F$x;jy_pBe zF-B{79sP~22wQ~*;PxbN`+j57O)4^hDTjL-B`mshU{F+0Wg2Bdk1f2{EN6Es%_69^ zB-n3UfiY&xA<45>we8E8Rx-`jkOQ?)Q&TBQQ0XnmZ>>)AIfcw3zdh*urX1qerH&nj z-aJlIGLH<1<(2o0?4(rQ9fp1alI+V&(yQv;!vq0oB{_tt@#O;K%GAO2{u4VjrD}}= z`=nj+f@&rzO|LZ44$Bl>{>u_$6~(#bNm2%$!@2QEOnoO#{SZoGW^L(XCGq^pje5wL zRo4$IdRe-*S9%wOB6MxXatr}>U5=-->^0yII9TpYPLS|^8uMR5fvaL8-Oyrxs==ii zT){ZBKGYJ)3*kVJa}62QgwTH*G`i|P0}|`#pNEQgkjWuAy_wKc5B2t~k7(Mqv6mb} z6gTB9wL2_7OiWWQ&dP1O(#SRkRW~kHTZFdAF)JxzK&eR`hZ-MoZYwcHy&C1t(l2nX`xKh;E zDHaHwFc{BcME4Sna7UgBCgu^@%JfE9;VK;TkG$r48C34f&@m1h`uGPrkd>V$RD6zy zjyqwB2oIz)%tw}3hg9VdqpUE#K2;>T9YwY79MHVEJ}o54;jt_XzNnqwj-TjU+ubZ7 zu6CtEytB3-$LGzf7HAqt%5NL133n%Afjy)l?!JfcVK&pDuG}60RO^v@d-=3|yvU1NfW^uP4adWP5ftvR!FD=l?^cjEL zYo;M~W@R?2=_pK|ByfCEv(^KUfvE83Ku>JwZ?+jOm}a&j!zFD)5qtS_Nmxr~Rit^c z8o~Tc7FG-ErJDP5$c=-#ix6=a_T*#;*GVZJ?HW-U%;xKUrbb1QD=!2_A^bH}|4;a6 zkd!a+fZs4%p_4iJ2BsTJg_}nc;q1HIwT6d!_nkU!f!cu;dnB#c7mQf@Rd9X>v6WPdLjUoe>%E5gCuGfTd1FCQ9lDnan$zWv}{mg?NRnQcHZ@J}B zsHSPfEdxs@_M(Y6y%V8+4NROWCk)DmGf@fvvO{0 zZ44&Kf)KeK9n7mOqU@F&GvW8X&f(MRJ z?o-w4(kfm)JE_M||H#s05VACP>&*{`xvmlP`c2b;Z|I3LK%jf>z9NPDmH+s`&r0v3 zPX@YEF}SB?6!)7}cI#$I5FR15C0dpAt_8k7c%Ly*2@|Dp-@q2mLh3}j0g(nbz--1E z-T`PNRLD`B{wFFlQtRze9fKmBJ#CUv)E70WX(EE9mHH6*CQ$fvSQIZiF~Ro@FFEdK z(3DS2Bh+ST5Vw#^SWdqtGCO-dkW)|w;Yjol--c*IOSG7@#i^hzIwP*gbe!mA-!H(ASRg`mcRD2N-0kw~Q`a(e7~^h(YJ)LWxP zxJmGYK$jF1F|`Zxmx>y6&|@A@&vi5N3x*#Hg>87O2YVKKmglIk2p#VeCtK7W#wb@C z^B|d-jbw-`s3FCu#7i>iCZ0&OCZ>2+dT%>O;@wdhi^4*6E*z#sV_&VKbX8sl`wlm< z7y-SP<9VccZ@uqOU<8uvc&`o~+J7;24o#Yc>$XkXMx|}rwry0}ww;x>ZQH7}ZG36l z#;Ldw`^IVP#%Zo!@Wz^RJY$mO+HLHaP`e#pu>K-FOf#y2J1<9Xy{fEZ8|>fq3Q?kJ z=cWK9I`Q2!4{7w%H6%C0k7h%Ml8-j5RH!)u*plin@~Cc ze$|Q0#?=|bzF(lJo zLMPB#yyZi5IM|MidRWpe_|E1LAdw-zI)v`+$YXL8;wXd>APhr&vV$l7lCyAaPR;(( zk?3cVAiItw5;$&vZUnHRjc@|h2)9n*?v2K?tfiJI|C{anYLrp;IIs+Gu$>|Ny`C{W ze|@UN8D&`@*n9V!xbv_tTogJ;z|zjsMbRlq_2L2HjMuPuY}hmF1Gs9cPAT3s6jZVZ zG|DbO6(p(M{80OM_wxgob!kQal>VauPIOxl_wn^kxjbIppwW^dcK7W2%w*H`*v(@(Ca`w7b1y(YN|CVAF22GNn%_58xZZ?J3 zlA&cPJG*s4SV~Q8B^poN%OyYT@7Z(Tl)4L^UGBs#XIlS&8HGcgdBhXW6lu?VXtM-G z6^*cGaX-qxY*dO2#G-p9 ztpIalBy+=h0u+&x-Ot3+ z;}nzrk{Y>$iijTSuXU(CZJT0WbzQ8i4-W@)yItcV4yn!B&+VY@RB<3NY{Y(X6ZOJi zQiHOK)v0PJT`3lu=GV*ZdwrqxsGfS_4xywZ259bPE4$GuM{gzvUpva|Bv~2tVYIOt z6z12D^(b1AdNX+bJROH47=1ek4uTK#Tdsiv1URjZ$+{&0={wj{ep3Z7z{jIkPAXeX z!IWVS|Ei(exfdmA4L8OW3&5UWs;Y0Zk*=)qiPKyP^quo3B25ulV?Un5LYE7GoLc-^ zVkY34BH7z#B+`)Ri%(IQ>wG~LF8<*{{~JglBH~~=p7E%Vik3+5f+yR>COz*v-amQG z4MpSI*HyvG80o^97erPi6XK}0djBZQ8%!1lksh*%xIx2J1yigw9~!eC2!vLc_Hp@w z2|ufjbazWn6nHUfDEcxLvpj3vqu`PBGpKH1ucXiSb+!Jd3zuDCuBJ7=g@DNTY+1PAPX6D0I`1*4uhVie^Nm}5`3uxG1!yz8I|&?w5XZsT ztZ62c?L5FbuRS?Iq~nAP06TZca^J7Ebo-E`ApRawq<{P-(~ahip2!_LLz$$9f`C) zFLw+y^QxhXQj@f$hYZfQmHAJzda=BiXwBLseo7flZeD<~SJS#KmRKC|`MWqj;!`E4 zpek}!U?RnMivH;EMH1HK6TLq&=yy5wl{}SCUUQ=A-{J$|vldkP z(aUBq>9>I=PdK-l>k|0jp!>pi`Xpy@G}B@#cJ zEmK~80%2oH<W%38n#PqO_6KBNQ0e;#G8BW{DD@qEWPO^<74UY^FEzO3X+CDg-;-xhG&`@E$2x75_qFF2?} z(L@ufnpgRqCV}T!E11NUj6YYwv;Bs4?*(Qxo-I_vvdwHswu1a7l`uiBm#Ry6Pq&W! z1H#urMKSq6aZ(z>RhLU5V?3Or+eSIcQt&l-%A?B3G-ttL`r?i>7&EUaLKBUF5KSE+ z3CCO2w``LEYuU*n1m<+aPO0<{V)z=TNX>?OoKBBP2Ir1HyOP>?SLQ<*+nZWqbtU&& zyM%L`%P{h6WSXYADq20xXraOsg-5Ag3T%E4B$p+*_`ERDSM0*@a z6P?(OTI_2RHhz^bQNGxYGKR2U!+r5mPC#v!yq5nS8tnabWq+Ly(&es!)rH`S>^=!8 zCbU>t@_r3C)Ie}lQ8C!45YVAbSq+yce=HnQ4t2?1bn{B;oY-w&w9&eM zOTG&4th?49=no!-3x6REV!q)^WEe=L3JG1unLXg&<^eZm0_K>KqElD8Jc3cyZcdLQ zVdy#h40&e{gA9oUv5AitlrURD$hu9up^a&V!WVXaCFcPES4Sp>%<%wVf=JtTJ>? zYAa0$d&rH7H0YuSd`DUL8B+eXRU;z_AI_CA;~Ogr@^;Lf$zWt8A1WpL^`kGDVv%-P zuTq-Rig;u5PQOndRS!*whG|87GVS~wCwnTjt9@~?QeY!7^DWXSE*7CP+)LA_Yi$}E zsrqEb3E~eQK+mkaV|!zzz8Kj1ZOrK3S@*}QHr%U=nOrlet*gCKv zTwM^hyVQ}tusHMvfs>DR2t^`$su=dSW|UP=X?aFYhj?8s{%7O2W!D3Q%%%CkEjEL zmKKkyFZw!$ki}9t!s#}=FhEdBzqdT7z1_ROT0}w6dRoO@P*!2H^}lY2J9pPQ%gg9L zeLKqMvEz#B^!*@AEbk(2QR>!uhNIX1R*8Diz5^4JW6=(xSlL$)&lTkZzT5+dzha z^bpj>mEAhyoeIvfha=zPmwpu{Ll16OotcnUe=XoBU9s5^{*XJG#Shm5FKp3m=c02H zLoBd4H{K`RWgny|dF17AS;=HhT!mhszZIUpbj7<~vf3tGa(7E3wxjZ6Td@dQ$EZgL zoVPDC(M?OYEi{j27rof_qv6fk5=b@!@muy&CD&-E-W;W6500#O^Egx#Z*@gexCfRHdc9J$3wI28bc|Sun%~<%}+dy9Yk3@M#7^9%X!Yk%?ckGMfPo+ULroZ zq?Y6G!R_oB>0^@NYI9Hp>I;Oylu-d;Y3}I;^bhPA?S&4UV{DT_TJZfzu5LBoR?!-< znDUmf2v~bd!YegogY8bo4>gLo70yq{dV@}}J-#)Ce$>j&eej2f3&3Q2#?$Nmjx=F$ zo8I9iXP2fuA~47sg#3X3+*CLw0`?HZghSbBk>@q<=}(aX4@RgNjqJeLd96W~4vBCM zau^jr$-^iG)7V(bnZ?(S5%QI2F50tfXs*!bfaUOJU4ZmUa2yJKODiW&OPDoDo(e~v z$;#fQSMYeyeeO3R?_pd#bU=lqr0rcfrU#*s!u>#8+9@ijL4k=?@LM%Em z&a@(=V$fmC7r@au>xuKid_SlXsy)(h@Gja+=n@UjpXkq1WT%%FGT}~Iu@}?-fyNm- z;1~2a&@_^*t@0*d@y+Q&J7bxqwzd@snF$~@{m>6;`{7aBL}}SQ+Jfurzc@eix*Q<3 z9!?n3iWPKSEKl~cctG@%tcW4PP$>KNa`G=`nmg1{AQ*1Nep(%n`dA(UAKk1w#-60e zVRmAU@^$zN2?SSxsODouONe}$j+-)qv4%sY!AIXlG4sBf>Rw=J%{d0aCNjI144E?) z{4e>1lnL(m!^zj!4^tLZyw5qf7IIljin+2rS^IVLn0xTy{kbXCt@>6|xTe9noYb8d z1&^k~l&+%a-G2z~v$oM~v7`|j==&L^v3b3{YTh|KZWcnl{p};$~ZKq!Di;02RMy9{@R(G~`ih&kd!s zQ%&-IOK2$85uJ=KnHXnh>!>B3S{a`sbvI>ysTIwn(BU0VL_DUGVsp0Bw|2blqj<=a z!`vOkw6RGUC6702lDY5wltt>5mx*0gY0F-TSB2MWF{eZk}OWqtb9#a>C- z$b9>rc7WjyBs7IA+Cz}PD~y=u+Pf#%+r;!xdli+vuRS8NHuNZ!3mUFp5Jy4X;n{(% zP^Tp8Z*3NpCK5i~+3NixS4QT{b_(9J^ppY#Yth4x^EH5oQ3-(u8Vssv5&ifsq~g8o8m?wJWf? zj0{qmrXKDTNs{&*-fNC<4wZK+xxUc5H*9sc&&FD)wk- zVvCG-c?-J-WI-|5BR_wU=L`}oyt4b(jg$Zs%SccAivYQUs=ZiaT&goHE4oZUnzZeG zo|PP`G7=YBv28N< zJ}M$=#`$6bAos;?P|C@&AC#4k;HP4;r+R4Ddv{5$Q;Mr zMqVF*A5IHUsWX(XLG^{mFv-5rh|e+nxdp%vKop$suh%@Q;uAuBEAw!j<_`zrql_&* z_FbxFJV`}ZdgIRM;R|zOlk$vY4UyH3d-~3pFaU77P~m7$^VQKM?x@DcO+>f2 z&|r|5?pU}pDsQqsIp!Pxm!CQhPr}G%hOA!KjHK<#Ed`^i@m%AMO6GTgr4I@6%kbO2 zrEW0IkT;watW3|#R)rBLkv*Y)Vk-SR!=anCB$&0pbotRPFjRL}Uwk)1Z-NGe$=2_o zw_NThb;2WrM>p|*%Pp@_M^K&6#OX` zg3kHQ&I-g{+jx_l{3rXXy}O!{f!(U-Cvbp&Bda_8X1Aohfx3=e^-5 zwkkf4z0{&Naf28q>eV{59(FK3BP-0utB_#aYjoq4iq9K2S8J|UTRY9|1e~#{3NQjQ z&#Y_OeW7a;zesbrYXvMV52jjkuJcFZR~Ik>5Qpa-?7)f5B!0ct_gh$J&J$%GM9s@K ztrmp|PdmS6=`i@B3;Xt9>55|TxL7x25nved&s*)}J~p&2PTcZm|r4aq%QxJF3@uy?GeJCvjiaBgHF zr{x7J@mpd`IvA0ZgRi1KUW0%~(`w{+;ss32wsrA}h|2`lZ4o>6yqA?Eln&$zru>oUC?^xW_mB$OXltPz0PC+o>=Nae2` zg-yrDZ|YEGa3_Q?+!B4j`FShoj8)HzHL*=(_Jf4ifb;NBd=hj#teIu+%qUo`;;FNi z?q`%K9h~dAGP$tODsG2WC2t{8$U=VK%(qv?oYIC7{Ne3Qp z*Zjul!e1*u0Hv@D!Qg(||C?AIE)JvT1fbf;7-GL2ofCBc&m?U!R9o7Y8~#>~Fmpjj z4ny?i8Ana>(u?VFGdNZT6^xq+bTf##2+Rs&%n2phH2!f|odb!17SIt60?01o& zQlRRO)XjxMslDOf(YGEC?Leil_uWhJ(~ojsXV$d(Ep zU%T2&kdUeS=!D9&VtUV^EaxpwdS{f%~S0_&C4($ z7I&pXLe>{JZbn~KoL`CGYc_LI1gOFM;n>Cv%(38!2M_$LPE3|%{Q3Q8AdD5*jc+b$ z0^uxIR0cdAcKb%Er?vFk4=CsZvLT9W=ZK-PeA(*eKo9 z%RwJYv%R9Q#66W?|&!A32v$DW>pRRZ9X}WvbvXVlGHNlt*Y;qUAarDUKLO z)uYLJ0iCJd8l)k@DVl*K(bc-lvJ!vab|`&UmmiEHigqvCu-q6Mii($s_QWk3T0%o_ z5g<1-GTb#q{3O@(1_$&5@R|JJ={Kj8Cu54Mv_(XO2^FrH_tJJ9>pRfxWc$U`IwLD{ z0!=XsAI0kdRTK6|Fl5;z?e-xZz?kc{&y}iab?McVZVogRoR^C+H~dla$RKJs-=bFg zoBVPfaifYA#_(^Tow}|`AAFw>yQ&@A_Ipv|p00|>#))7;)EK4p1`p=Hqo@KwZfq>F zy2-&@Mi^UP8$=fIg{Y57YQzneluffsop58BqxXe}8Vbr!3L-LrLuDp)*GRvATIZgq zhn5wwYWekH7R%-lN8@;!lndoH8(IT&MwGzo(mxH7nbOZgrKwld5`g*pnG-4k@VfBe zqc@iyb9yObZ-T}BTC$9*iFy7f9QUr}->lpNWXp%dwd!&M_jdId zOBT&WviNnnuW+l7aXxP2r8S$2;C@u34{G*@2Wj0)*WF_=*(~r*kYuY=#mVVy~ z5y$FOOL7ms1QZ<@dCD9JjE-A+{>j=%X>T#&hq3bSPw?=qf8_HbNj0qA@^45xS z2i=^m_3!_sBlr+Q78Nx%tj9=vQMh`a0B`(n66aCJ<^zbe5lWc^`pM^CZr`*H8k?3! z{S=*O60ag^TJ4u=k@^mWSpg#^r$~EZ%U|-Fx^T^xNhN@qwKfAR{ix3~+~yJ`gLgfJ z1cu_Jb2xcDH4WP_2>4|DBY3rT+uVM<>Y;Fi_Iccx=sHOHQ!l^|NWl^bAECy|*a0Jz zyh>`fadh(=b@}T^F&6W-B2bty1ast4HJd7rMr(j4a}7!WU<*qru-&bi%5G<(>SsZ# zRW}=ub2BGZBuv_vil95x$pd$&LPvR|MP*x2q-5A`J9&SrZJEKAt3CZqIQRKGn&6*s z9F~D<#~au0Sq6r|1_-jX8vmDdZ{u5q0jJ8>X!rbMo&bZ>uJ$gSA<1ZS#a0zAdHe*7 zat`_MJWR5WfKYtu6AlGLHkBC8<~H^UBKec@4kOUn*g>GENg80J}Fqf>&^$kr^#Sj`ArP z)GcNsE5XbJJBd=~sHE%@qKxbkV9yAWkkd_W9ITu=OqrN46>NM+KWBbf@tr;uWPC>7 zvU4MLNOIN|HzB7`&8gLIh!1tI>8*AWWBZi^RbM2^0tvchRRRPdYnrW2F3|<7reqf* zvLgJ7|*3_2u*fmwnHQ)! zqkRDYpDku=oqQc2joM05)P<&J33N0tYo;(hMqlxI2Qj;tkmR0>B@;`Kapq_OQH?M* zu=*z#1=R@NmofWtlDj$uUtiRio$ezGYpLGsM>zr3e{y+SE&24ab#TG&Dk6LU2p_YSJYH); z&3?fhC^ek=pJI8O->l$I+^W<#R{7~jyvCG-1VJC6@bE^T57(p%s*+cX<11YiifN`z zfT(|{4P)o)c*!tqRi#O)yK`!V3$X+Rj=R<`NiSMv4s6<};zu&QyJ5lY?zIR2q* zZmkbj?7A^ShV|36>< zoA2jfWMlb%c>n*!H|_$ix@iBwK~+Hsh(?LW$sy*#DM3cU+6+L(jh-)5mM(LFiNz{O zCL|-1YzxQ_NhXvGUh*G#;QiTo=soGaS?AgTXc(;e`toxyobdfNLZ@87hY%*78!#po z^bE-C?QLZRf=WgL1{ogr^pxAR&{#8Ig`Z%l#3b+d-Isu6j?&>8D?emYkMRQkod3ju1 z9Msyh3Rt9*Dhd+F>)&~KAd++nxFh&r5I=Z0Mxd_#Z&`BT8CXWgAn)&aToSxFenT|4 z0G0LuBE}F3`T5)K^iUU?M(44C?hibB6Ea1OpSIivVG9 z?C#w05>dAEY^V&OUcXz5&Kp=dv{eTNR1yKU456AS-s--W_9(Hy+^_r!{n;;q1m6ik zzF`m?z?Sw_krWx+l~lmC24PEUzE{D^h=1Z{ki#G(flWgV) zt^D%{4z_Cr6D0!-Y`mXn41~Q!bepGj9k}P;1@uj!in|v876JU@64h1e?|S)#3H0ed zP6YI7&J0S5(837x<1c6jp9~`GK+y1GU;cye)<^WIk@|x<_R~capH_8Y&+=pc@nZzh z)vx#U&Alsl5juh_NDx^Byx*rcZR9Umg%~{0v-Q1M83S<;ksstR6sV;ss|-f@CV}_@ z*6(XH=k35cbcSg1eJba#G>sk`01)vS@b95(rzE`Xv*Gj;(sj5Ar$9*amo-%QwLaIk z`YIE)cltQX&x(XZ`iOZmR8kCVhz4^h5v#)|pEy7SETKp_^}^8zTu2N>ih~LAclsBU zgJ9v9e~p$n2w~-yjM#TvGZF(DjK&KGjsx2d+0QXM+%ar$yn+HT5lq31T7leXovNl! zNE#%1WZPma-B2i`!A5*x7pu4}CQ3|GlbK6H{+T>ee2jBdVCAUe%t@R#ut61<)h8)p zD3_ph?62p$q_ptY11VsMYTYE&Cl7`x71i~lC`CPwm$ky$K9Vj_*GuN(60b3hWu}xv z=cHCF(jwFqleznAHOEwZzN+l?<3i-l{@zg&Evvi)2KRY7dK0P*ZsKLaU>S{uqY&Qt zvio-*cl+7P82Q%LazebD-6H~Cg?SEEG%w9%GAZh5vxmBzBMeV_6Gg~1>xJ@p+>5?l zR%6l|rAhzo`e_T_5jo?%Z1lZk(cXT^NvsUq74~m} z0caBNnZ^}=db#u%+!wV64&`!Qs~Mad{uw;P9oSp3i}_4HL(qT74Od@C1B){lDSd^B z|2beDfj`Qd5U&x3Jl&pe(lh^TL&d}+7oaQreT=#$?RdR8g;alEQ59I!Yd zTv_BQz_(=I?u%?n>nN7I$j?hDJN~SMJE=h~K)MgtlTDaOz4a_cNisEm0y&E{<#;WR zucq7TSJs<$BT3F~gI<8d4obwz{B_lhw{y9o-a|Ta7 zLJMGxNtRKoH=e*8>HPg27V&K{3yB9@ZNV4F^>;GoDDEV(DDUYlpSCHh4fgQ2s1K#b zfDPF8ol41jIP4sBudh6oL?xf5$as#Bja@nIH&KQdszHV)gul4)>bC1@nVz{#(Z{r> zTkENugLA0BUK*|(6I0EMCzZXzUH;U#*8Zy zjdSH5Su{@nW#lsW{9JPcCL1__XVpHwq(n_SIG)3%o}3`-X8sjrqG-R5V4yh07?1qC zpkE>d61;IotVz13EmgY`OJ40V+eD7ANgLbRG zh;0zyw@LV(c=|-|rebmV6&R~e5>ptWTlt>tN~RT|&QE+CgBc-v*of^qU;kXkluvMX zESk38@DcQ2ep}BgY|?XkEL9jW3JlJV! zZYOEMlN)-X+wUHK?K$v^YgVC7l(61R#>R;5T91)YRW#c<~6wMIT38rI&5_h9_d zHz@LCoC(1PYC|(!4_7{+Jl7)gE}v`eHlL3-sB71^eTziFKpiWTyd^rGe*8#~V9LMb zleM+)&|zZ2cP#y0?AF0@v)$gP7Wc`@ zTUCfFSrgPbKGG=Revs-x2t#*a_zrxK-dL2GMwSk|EBR%nK{YW0$2}h7dWNYf5$>G^ zC-($d7M5`y>2+_r$$dBqvP>>KD28vAWsVh2U&EGucK@=bRc&Sulgh&++{$jpejagj z-xVPxyw^C#r$AibYBpniGmfH}B~mpRwLjP8`EL2!2E7YEu+wH?nuXpXZ{o>**M_Sq zXiq{(8p2ed2}O?s5@GF2w+<n*+s8VF;CW5BLU-q{zQC z^xkYyB9z7`Dnf#5;VEb)qmQHBgReF)qRvA}Aw%DWvBzN^kOMTMhWQp&_Gn;g|CuO% zArMhA1sUX(bAS$VO>S`9W%-)cbx`oqE%-|Q*)^-$yyHf1d*Z8{Tdo~U&vqAC|AOY>R+{`*tFYgS`UhF+ zmD%dW8cQ1c^9D2_iLIcOUS|+f0)A7@%ufw{YH%_Y?)$1F<;T!sV7E&&k89wXNe#rT0RW zjfa_FK*(zRjqwhL7~c)u-A6^+1$!Z%t_&K3RYUD^AN4lx3akG^cGJBCU6SBQ2YR*S zYr?w4)8-R#E)M~wN4)Kpi`mZdFMk}CVSwD?mOHc0*pN@ApvmKVXf)>4N~H#?saT;` z+GuILeKT>?-L(R08^Pp@TS;6?8!-&nOBpxC!D*DfsG{{WZX4o`$ri3s115B)tj~y^ zJPb%4f%HXK9HnKLaZEUtwG0(A=H{+z%0r&LYcIL1bEf6<1?C@n=8d8^?GIPrLG42* zJelGcQ}(xF#`*FE{97QJ#M&Nz#@Cji?o8_nr-5FX?ZASi{V=~x?@nL%lBQxy&`m^*Dd* zn%LvT8H+Q;Ad5UXs1&@I=f|)qd!{yigHrE|2F+hMNV489bQeV?1LV%Jzgr%P+0pIP zE-BeoRO@>+l$Sd{z;TfSEe9VE_MokKvyR5`icCws?WC*5;U0QJmT9^=xXq2tL7{D~ z;mm|+e)+|(Is>?htsoP=DXP@qSf-|aAM7yMbLK{Dj|bvIoGeRvQ%i@T?RJRM%HKcL3`3Y@9(nWj6gvp(({tc2k^ zoh@6)U!v&6yMlmBS?D~FMUdUhG}(I3s+Slii+P!(Tv3zQJk<@mc}Y#+b06o75kLm#s)3j&Y|2aACov#y zw=~^;ddl-nn=iADnR6D8oueMiBrI9K9RC+1cfY>GDc)Y%17xX{514w4;}NX;o?cMy zC&bEp-F@$aCooO~c#9!!6pn>w9~6~$M1DeBhrN68^McEqgt;Bn2?A0Z%cEVM{+?TP zMce|0W%>iWE?+3ti9WYuu@EAZ%C6GQv;l;C2Y(=Uf=pfn3T4oKqiw`Eefog~1ckAb zw);(@^g2#MdWo6pYL@LQ7+phD3LHyF5w^bpq!GPS6oO~XE_-f6@T|#jhno!z6_U;+ z<#L?*q6h7bAt^;7gI@UGeNt&4P8)S&^Vc^R z4By!vmV2A$j>amLx>Z%kd>{hJ7tQcjBK(hkL2$Za0r#d2A8N$w?9>(HE5u*&7>~x8 z7WL3z#F+NgA|n7AjeT1E0_D!bim~<;(Fy=P|6SB1sl>k{w6} z-;*u-o4;#s|8gGM&&3rUGE40fAg5^a=MM~SoMiLy$vaq|o84`+1(lH85FgT6&nxbd z!z99~VzA@KXuF0`ogjU>)h?7AQcVJ24n6_tN-74RKiK$N0vSbAqA0VG#C-gqNB<^J z1`l3)_PMx{@)~4=02Qy91)Hb-L#)oYIy2?Y(1N|0WWiI z1%Mm;ZN3lYsLm&Q*4D@N8`gruH%4X!Lu>hPdJa`x<`Nf9#_rb$-ReH5$$0XbvF?@d|Qd*1o2V;%V~uXWX?6G%&#T>lsU%&6EWnQno!2JGnFl0ON-geArYfJNVx}jA_~ur37(*NDFE55koPU zUgCr)GhQszCz4p)F2nr)v{|l|n9%z6AM^{@G23e{pZq)DBU|pB{^P;*>S#|mkPa+x za@|Edp)r8|XmU-SpNC&^&>#aVXDhd$u+6(C{Y#>TZ=Q@`Yl^o_+L3V@jam_cGuDy zpPP&Hu&R9I8)jO<2)*9dsXMR41sY2Pvk7x**Qdz8VT zgs1H3uO1f+G3TfBa4dZ?8}-5ONMQsDebCAx|xKjzB( zD-_t%e+7N7%zSnoN7eN_)B+5i`N{Gf8uWajY+{KX}S_qyx6PBMR_ak%F>C$NnzXkmRQ?1J+I+as50iv!&$K@}#V2NKOx6>lKr(_O?6hl13@`K*vI{ zLUuq4sHvzWjojKzLLI_Ygrr=tb5>gL6{%?O4F2w~1*(#>N!rVn78SZ1Ozh6dn7Ye* z0>~5I8_E^XS#OTCCgv*0!Y$8;EePj8t{tINwa_=~CHNM`I9BN5pADicE0`$Qdv(ma zFWo}J#Nqd)5zDtXTuhBx?T@7!v{&D#?%+X`z!?xTuw^q&;P0_d2rSNEaQ6afxjYwL9X+(JnAUHHz2D#+Nl{o7ov!%e*H*jj7bcZDUu zQj)Z`9dSDiJ010R$qy^kH4J7^tzi$^yMfnZN9}p|`(#_FlN!@gtPbSQFTAy$a)b+> z-|{du(nvFb@u>+N8YhDb;_e7p;%l^evQoGw(3r#vkmRSMpD(cmzYT2U>lG z*J&CHZKN-`)(TPH8M-Wdg83i|pBqaOmVX#D$;`pSZ?`2F3cL2rSE7{J?h|h`&qUv_ zUeVi6d?Q8q?e>WosS_G?Or3h$`EK8i>$MaY{rH~O`Y-BXurwA9K}bSKcV-J1xcoM# z$CT5{Af5RwGN_Ct;2|z*kf#_|0$DGothm7Q06nJ4QG0~-1k)PuEQ?c@=Z;%h!Y@0B zS4R)cQOKoG1{w`ZDin6Uf=yJGWO|Wr*9y{E^QO%ouiJy-S`@$xT~mv~(!}kLjZ)E- zKLgUO1=yxBt3?DKtvAgx%H3j{)>{gd7!#h6<=&FpGtIGpm=b2G1`w?zPnHpKE15el zcN2PDbCfN9xImN9JoI8IJ#r{4Od?k@lR@99d zM%fI4$B8l!jU4zziA^`?Ub0VMsrf1FKIM%qwWck7bFq>a(?sxpG88>Uuo1yGS)mU6r zu}kWeaY&8&-{VyIL+xekN!VCmS08tMOwCgj({SfNj<0up=?25&Us4QC zcq~7SLa)xhdBz_0s=q#*BE~n*M&mS;QB=it_E9sT&>WA9A#%}i8nY6p$6$2So-SOk z%`T2u7#obvne!2T|lt+OWk9#cO{i+n|BwDxuDiz(YiR0cd> zJnB-r`}sbn^bFP)Xq()^`dN-QkFtBzR<9^sT8mu$4*Ar&^lYAXVqVpjx=O}JZ+lSC zLbG1)-N8VxJ)|wJT}ClONYL`5o>>vNATRq9bHI-lMM4175~p2eHI+AaEy+W0aiMMJ z0Pc8kJnY+EQy|<@=EVU;6WICTmqgfCvZD-rm_xzU#kh8|yI5g?ykZ0VA`;0fg6u0% z@!V!6YHNr;vt#6WU}mLc2{PG(Z83@0RE*!iT~K_^`Orvct|vw}`&Y1$O7XG=q#~&l zM9Cg+-Z175{Rdf^hJbz*kU4H z!a#2v**W=TK1>Z3iTF9Y713nLi8o9lUIaGL(bX6(fO`M)4(~uH8k(mV82 zrOv$ih8v=zC#vES;`gme-2(4zOZ@wFLELCL^J=^mFLZt~65wwYWex~~b{5TOTw>o) zJgg}SM51J-4IiI+<*dxR&%nN(X+WgRxG~VPn18xtBoWl=-EQHipy@}fc5r#k48|d> zy-%E=w0+75%9qEArm?GcZr%_3v+|8o>?^DNN&8Ry8CsFh#}&PUHS|GN`sJ3CLvRqB z8iv*UEm?E-J6ni`!|$@U89KXe?Ex?R_1K=NNaPG9_{(2|hsZxZ7;%E5^Sx!g&zYBs zy6;d$6)MddQx3mOyhfH!dpC#YLy9K~DeE7}pHy1Sok#3D?@sf?-#{%~>iEr|-qhbk zZ8A0h(;@oii8NaxC(y%kjXB^nC%Fhpne+V2`>}_<3M57b?={(<(%XhXq|4&ho!+WL z8c#}r0qmTkSi@8zeBS$;IV;OR*V3LRAM*mJ8yk@Hm-viJ8sWEwA2w2vFlb3yckRXJ z(Wszl3gEW&uw8O=5j6z>bh%!FxlT;oY;2W-0^CYr{Jq|$)WokW2(F?*{*Sc?AxZsm z3~$HuZZ_h?p?B{aJUL^}W1z*T0sF^8kOA-C!C47c$&aGs4W-s_Bn3lxaWQktX(pi}+oW`)d=s8(&vRfODDO(TAsmF_D5kX-Mlq{3 zt7X}W90@cpPlJyj%HRE~l^OYpS-80mBBJs$6F6)tZQFdPvw#a!?YZo47q}O{t!K*t znYDwteK(|%)C+`HJwvt@yU*T|6Bq#gR3q9FxX=W>0($p8C?(ndJ6zN zP&g*gsX0K7GROiMr83GwOh|D6l%x!lWSh_F$M(mz_s>sDul=-kAJ^>m?6&!hbFMFz z1)D2pv8~aHAvhLVfB!Tz3h-EE1r;=~AfdiIQUqjFpb%z|1H_N*i18d`*B}vN`ItYF z37}s+0x~NbeLt`aA{Zo@FB^EP8^{hA*-i)<3F2=q@Blrtvqn3kuo4X{-U;^wC{v|+0eumdbCY~v3!q-0kBfQVgPF(4Ct0QmC0z9=SzMG(>q z6qv;4n+Cio9Ta4bdSLkI=xEsT2;?NBV^gNS9<-Yf3NnBl3&HILY!k$f15UBc3HWCj zn*sw=a1|KjXR;QwNyI~|BN!MF!aM>V3&uaXNJqj8kiPYGAV52Xz_H zHw*E1di?9g#b4q_9xU)1y0x((u%lgD$d^#jI{t# zXnSH2X5Ys2OYl{t16@!^8`kh?Zg=OZ-*$_r7K)SN*ZyahSnZA_zPuK`6%DMjBd`dv zL-o$nxX@NVJL2f|;M3|fw~&#(Vqae%9+;K&OBb{bq6R%5<kh?t)E%# zAJqFFin|@HZ+q&Wogg&c?3|zWjGxyZ0XrJZh^E<{5XfaOLVR*T_-97Qxqq9(0Y91A zZ1r?QgGc^7(oj|5Qt@FM0_7ROS#hXCFKKun8UY@`wroUDxZ!=Q4{3TgFV$Qk`G#^> zzwSRAJtIH@{|UYr4cX-p5urYX()~NCcM%uEUY%q5m|l%?zq=4T%i*Vg|JEa1W@tA*0 z9uZN194fwXq3?j&n}385Wpn(I2m)kYb|OB6dUbdGcL&iN`oBT>Lpr~3?|E(ZuWt$L z@R0&0KM+6b#BF)E00i>;ar^}Gdj_ww&Y%$9!M63iQv)`lgLoGMoAlPjR6U&R0+9vy zW_mdH4nEXOqk@l<3R=~r=iL)}iWRD_3!^oL*J~B@2W}Z{yzcvLN8;Wya_83V0f zEEk9C9}f~N44?Gnr)GDV2{7=?CKjR-fR6;$ii6uOMl##04_B<)&x~`g69W$>6b(u! zYKebgqsy}DVP&Es^u>?nqIk0=;+frjULw;`T?c7s&1lw$Nu~K>MTD!aQHfX2paJ$T zd~MRxqU%^#rDr(6rxZaXVLT>YVd8;^e_5YqhkCiFh;iL@Z=6Ed2)t;2&O5)g*i=YaX#MGJToR6 zub9^zxT~qhAa<8^VG0-K>CJ8FJ}0Gvs5Zq6Q`N>udhlXC5U-5tn#9<-Dd<42h0@^+ z+QZBR1J}%X1k$`SkS!B@b$`YE||KYDSmsCmX?lmMI1mbrk#PW z9pi;u7f^QgsP-?OQ=J(q#~YeF`>hz?3fkZ37tYf!56Rsg#?s4`YZ;bq9Zg9zM38?; zC8CWkQh@#OU}6%&8Z;QT0yd*s(Yb*Bhplsp5d{d(=$d!;u5H`4ZQHhO+qP}nwr$&H zZ`(BOLtnpS=4~dE$@iZ_)wtF0>eXkx-#i=5;GdpszUg2uv4Yk+Ge=bix`sF`jC!bd zg?M2qVbLBlj?$X*L02Rlf)5lr@PJP}M#v`#+nc}kz;}#!ikfGoJW+SYGZpU`@OLt_ ze8{rQK&70THG_a1hIK{3eT;^Ws6=w%IZ?RtKBTSHX)l`5MmbP7Qj0W%&qSAK0J}w`Cl4{dWo+>v-A35yI=}F)X#W<-;aAR+RY5 z*-&k;ee&cc!Jn4YIR2ZY+A!eBFhbz>+wdDzvIHjSwg?e{yn`(1Gmhs67y)g zSy53Za~3}=;CP~(cfpq%Mf*C^)U-F!t#gyiuxNNTGZE!_N$IXT`XP>NZ0R z>WghHp@qW)FxBq&AMM#{`#jR=oq}1J1@E0%{xPBzOWS+LgpS6MEV+AKmDCmc$ z3JWn4U^b8RS|I;O{IRml1%AH1g>Nnhy5A|LsRFbtM9OSR(NRuRbK@W~|tjYM|3i zq++b!^8euQ4Ugb?F?*Ma0&tMvzO{JOngp(QuB>A0%vk%p-i%}QM_D5$!>98qu0>YX zQPgiL5(ao7xO+t-(3``4j5?1?;ievR-ZM*yQ`B%6B^lw`27xWVc@9HYuUsBWxguvJ znMp27*iRgRD{;|8qmn^ELms2ktiY_6o&5@)bfyZ_m?p-P83diJ21v( z*VPdz&j<4mB+AOLz6!D|6ELMN_2`WYvRKXGEzj+{`(9xx&wMk3X=A?fQM|>4TeT#- zkf|$L4bm-E?RQ<1`dgIzc{B`XJ4$*)x=yC~`^|2^;=p zyllLksT7R|G+stE8vB(|W@ok(#GU%!<;0MumlYftBb4Maijm5gN-5lwqrm+U69aAh z7{$79Q6!f+l0H<+-xS*e6u}^3my-#ZX=a>hM=YP0IF@4VV1Dhp>^mvlB~&Unt=Z%r zTlzp-#Sx>xb?uAugX?CVC!35qEZG4K8U`|7%{Oq_UiRWkMr<8|cAeLGAAKd1!UuW3 z?T+YTa5gAXbd;w3Ok}YZTr__OAUGcy5>`A#q$A&zYMFdLzdE z6vQSjSAf+Zb=iBwyCiv=hySaW$8Scl}!Gp~(M%YkAilZPj ztM5+fx6$XzFg{GolyMY?$JCm1z>@10uJx!3VKJN2%e1AP4rZdoQaqTckj98Ius-mV zM!(ht`cf+U(S#n9*h;5yXUzXt()^45+Qt$Jhuq@;3NF1ML{xgu)^Wlb5&xqk%#pC9 z5ZLQR`HY+{jF}-!=QSU&4?7q>0NZyhB`?eyLDd$-&s^lx9-iLH9T4F`k z(UdMUDsfdGJAdJm$#t;&;)Cf52@Ux^2k!C&{=mZd$}`6#G5%ZskM4ma0OH^e|>|BiS7cjOgEsNcGr3`d%U_1^<+yt86$fnY$zy&|wn^ zsKu7#8UENcS)ZVQRP38D0Rz|Ty)}&Xj+sPlZ+09k$4t5{!K&b!q4&%(z(=9FRG5Og ziTLuR7(w#TdnJ+0mJscw@sJakCZ#Gyd}=FsaGOtYA)?aVvuK0^!fc3j101gPa(m~zG)@z1s%lNC`u%`YrMsDt;AwQ6;M zRk}BDcAmeq`H$j&zJT?mcd{5shgxW8@PEue05GBgB zXv}nV6Lcw0KVo4mpIQI#qD7Yn*7jL-Rp5fMc^-DRa)ga5EZMZz&D$668s^Y|Tw*nn z<$+!o$N+0P89qb8a_`1&8*LCj>L`;h=je6E6P_Ho2I|%Z-G`v2X=aPiEqqd?q;EX8 zUaZU?Jp0}s7wXU&r!AcfKU4X1`uXhz3K);_%Ak1261A&=C2Ivzok^u33(oO%&qW}u zSx&`YQ-SA$q^T2`qM0vaA}~r>oH)3V%Vb>T(T9^hNgL4&6}wchp_D7SA9(nZ*HjV{ z+gRt|D7^%xe%+3g>|=X`!GCFcvsNbBcCz9guF#?iU5m5bB`XjqKss|IOwIP1L5s>Y3_tsxp;)xejMKs7_%Jm-2|B4%Bo9lAgefK!pmX2E%Wnhm4#2bFoPQ@5zb2Xu+m(8NFiKU;QDp#+#1I5b~nohjm&}zyUfa%9EqT2^z(_fQ)+r%C^Z}vEMi9Nv*_|uWljv z(G3S|Cm4?Y_>eEn3yX~J#ESEyv`U#U&=!kj-?%=Zw22XVnY2csxI`t)1+6 z`_OQTJ*UKn*RRg{ZQ_sUvaXND+%(zvn6DytVe6WCarq%4VnwUMxDCSzAl5J%HU8DG zR;HrZIM7PlLHMTdv5#xfBy@s(UB9$4;-F_4Ons@rePPJib}mx#$}P=jf+I)M9O0Sh zh1}%u{jP3o5w)5SuZRMyF|sfxuSN=zuk4He@%rnY9X7G?Fnxi;eR4 ze(|polZwX!Yh5esA=fd6z5iu1yI8Kf7K0tRr7-Bq-aA`LSCa=KR{NV`_<}kBx(1;T9eLH{C5xI!;QlHgXq;1 z6#CoQ#G9A-Jf_|>KVS-6S!-AdUpA*gCJ(t6f93U_zbE*vOL1RP^Ep?D%ZMrOf$ZZWmp*1f?OlcOpa3b{sB1}Ma&m=WGllgH5L z^2W6Of#;Qlex`bF31eG-Q7=+Z2+tMq z`fIIL&7$8%5RqgF%L7i2UKv-&`B`%dk)>&1&q*7lmES`n8NztAX}7#YB1Rf0g-|z*(q0_J6=eAGErry1>N2IVdqbHXJs_#_-L=_!}>$5 zZY3`07c9v{m8H#{cQashuTyhI(0fZ{8zGBDc%{e0Jegs!1|*MleFKM1Z_^Os8WASk zM)4+RWV%3laExKIfFk}nDMpp#=4fiW^aRcWIp)twr*LlOlD*NMMntJ?TTTi`UkMjbGe zK#yqIb63w0*G}^M`V;>SWG<71!hIjq1^D4hkG7e z<&>mdkcOwhZuW8m!(glQ>Hrs!OE2RC)p=m*Idsdojox`ewxq`rF?l;Yx(YlcH0(qQkx*~1_}op$IgEE zB#*TC-BRy9X>wl*O%KJ{w87ZBXQ%T_T`ATi$2*eE@6Z1Z5yWL87`nzt?Fvp{eRL%! z+30Xsi?{bAFrO*1DR}!#g0!%D*x{>&+azd7uIA`Zym=o#Zy^BM6rJ-71Oq;ybPA2f zXD@n(o=|OX$6RlQ2Blk9Jec?!%qEv>5x;Rc&3Bg<=T~cHs^+nosTVcA^bu{&WN*nJ z1P=V8%)?MF96roN_Duv@o_jiJ?uWxtuXL|>#z{4+0khj(f+I94|E-P-CtSiQeuI>V zH>oXt%SuAes_0<{G42XyF%;yLD9By$aBh~}rxK}rCH(HQuMpMuWF`~B zomhJdhRDYH+#qx$Sjne!4%6rjd4 z#kTr`nt*3@+gF$FD*$`yU7rnfz~z4D)}**Cgd5SPQ;Gs79Pn|+&4}ZvSx=*6RdnwU zt;-_WwzB~|dV^kqbH5flpp%H&QNt`AO2#K;nJj`6V}Vd}CH|Obw}Pvco(LiR+lHX9 za*VZK(DCO9_qhwrqsCm-(wtiRSYXg-VZ<8YL^XpwVO-aK`h1s36lab_x@zmw@#}$O zXXa<_suwH4xzM|}uSC?H=T%+uDsiH|Y*aOzC$AznFL&V*7U?8V78mi#=rD;6AE*&u zSya`1gj2eiTpq=l`r`1T)zR=Z);=p@!^S&|r($k<(z_4p&h>G|Zb~z|^kzGp#plpF;Ln9#!NQ}Ws#YEWp9J!%TCVsgTKEq3Q;gTfZyrKBt*P1or>9h`=CO?-HDQ4J;608f_dKfGhJ-W=lz7K zY=%Vf0hS35;mGo_NonRyl&86|O|9A__5AZVtx1Y<>v{c%F$+d-5uNf9LupTZsO9>6 zz)ri@T}lux+l?lIH7Z?Rm+)RXgcfHYNKhn%6_&&rd>aKPNSRxd`D@`@D#VVH{I3Ty(^%j1{Ju8pPYD+wogSDi&7ho3n2> zmDq?KC~Z0QEvM~8Oren09|PN>;dH~))=w-It%^@mZ})c;ZMR%kYu3`DY>a9?x`l?Z^vG zX;_w8gr4s&H5SwLqI-BHMmfirHEGD+N9oWHn<5w_S;C%oKea4}cV(2Rg^5$BNGC3f zvP4<3ZfXK)x>Lk;{Ni>p3a%CwiUi4RCbhhO!(6e0YlgD6oo{n`Ly;uOyq&cjU%P#S zt(6|8|M3C;cCl35bD?-bR9~1+P90UUCUPGp?={1l&kvmT=(q;7vbI7&@$N@>vu;?T zL(w`FZ3dH7BNl2YVu|=Tb1QuPkX_>Wlm~{}Bl6Hpt`9B%#-N6 zNN!rxw(#|Tif%wWr!5^~1Kx*q19=3L;jI^+P$U+4Eh5j-_g@I5oOVm`gpPrQKU=re zlzxBFS3ftgsnf$UYBUZ(jzdf9&a#i$VZ*Z1JqH}@Hs;6W1s+Xs&Djov1KyXy9$&Hm z$x+M{Q;{_MKxU}2@|Gsjx$=T&<&=--9Ccw26c#$kTdgWF#nQ>!XFV4fTiX}c*`59{ zY~V^(TE z7X{^$T4rfPX!@&bWU@=i$Au_;0<>D*UP?smmAgGrF0ZdF#iX0`YVXH7=fn|1Rcnzq zl61B%Zj!a6JYJYWna`(=MPd};-J(-oe1-YX*^F-DvP>`Bv;1uF{wRG)Z**UMmHh8Bh!=QB%3uxdk;aT@gZUI3$n@o zqvz=x`~@*c+EvqJF2zSW>Xv%_Qd;Td7|$pTI0FS!cG*;BH1Z-22KrG3oMiAW+GgoV z`E;J)NnT=P*=H?i;k^o)WE#h$X`%ddH1&iBZ+uZ3Nt10Z#PWZ#UhQhRhe^L5Os9DYW1HSi9t6?Kk=A$~nI?MS- z1usjnQBw5Pm6Gv=xgAGRu4I2{JhGoyIlEJLUIQ^*d3^8GNJR$nK}8)`Ypm%le>KnE z$QnLoNkM_dY@LwmPN|N<3^`*S+JU95j} zFYE}>er9}XZ+WV8cZ9C1DeC@a^0d}A ztu49EF!>+DCPUd+rz#TANtUMs6KCu57!9J-kA+d))ah9y7?I0X2`$ z26{H$D|QzExidQHdzMSl%ZebJTK1jy(G=E4L=^3#46_I<7(9;xEP1z@nPMlOq|}!v z_m(E#uwG782j%LG&#JK`VcMp`y}!GRk@}>qyqG%f8Hff<>i@xl$S zmkLMsJlz)LZBV#BY9w^2sFo;0r>dX2>93MfXg z4jj-(+ZwRy3P6R1N5zH*1qA>T8v6DZWP|e_a434aY6<{K3P9ZxZVo+OVQQy;aeQK6 z0n}^i*9&AWZ2?Hl-Mt(NNPbqq`h=ZupUx*bIb9 zTMO$gEq!}?J3Z<;EBz{)3d9^8;6{Ze1wc8Eac&&O4D4;0j&FVq_RZB)Dl7@WS(5U! z_uAs+gyv>Mh7Vv(&(atQgguZ^i{FHg6yVLyFC&VJZyXTfgH!G27T}){uo1A1q5enn zCihA=xQfr07&9|tW0M^%kgJ*x1;CL~6OT_^A!mGeFc?tp55p(2nboD$-x*dH#+C+V z7C`W?;Vm>g@&X__FxEF&&zTY#6h?rdzhql2io$lSJM z#5p7`7ul0uR!iUpS8(@V;Hhdplat;II!9-{6##Yi4j|*9Ur4}AINwbwKNl{(JMLn_E`a4c?a-9|-#2Lcnig2AezZ-QN^>mX?pu5!`kLJV#G} z+g+=E!w=jMn_mdOliW#u=r>zxVb3}Xe}If#f>pzPBYMzZgKyuI4_)$KU#MT@<6n}8 zUum(0<&_s&)@j|J-`LHynTeIhT!1<=ZS6i(zJ44p7`|UlCFr-;Vr75~_4bW#+uEo| z`Zt0wKPszV?84;6qGa$nsr8BBr3c&QFYDDe=Siz-K0ael(@Nb~WB@`p=HE&19*q)~ zJ<(7`wFKXGzrD=IT|#2Mk{6TS8Z=B&)V{Ux@ij#FE+e{s`oG42+XD2tLt6NM`aixG znmr_dHf~+N_HM+3+Gq#+0O!ZaC)NWXy2u}qEdZ1H-7xSzsvlYdP~g1k$a`B>T0ivz z-Jxk9y_B!$zIlaScuYU_4^{(ky2&pQEC7@BT?i?e8&;si#NX(?BP1U}I`-jRh$-Q7 z-67zUf-g+}_OdS#J(`MM__W9kTac52pMR0re?}Sq8Lj+_9{w$Noc}?+4`@I864~q8 zMKl5x#mEe3e%<_AWAuROpPtEvp1A?gPfOvLy6f`dd+n>+;)}f(Q1VM4V@I#(saZGo zGdj?JKWSk43JzKals@ev$U?`@NSTK?hyK;}gAGFRkV&NGGS&B+H8}xB^QVcC(WT{U z5X=NpU{n|e~C|@xKF7-}8KlyfdXxdxXzhVHZcHh7OsMjyxAdHT`f<=2)vAlR~ zU8lHkTr{=2M}5g%elote&$*{v<&}tThBUt2;r**;zIVF2m41AG^T-drqPod_>zs}4 z9Dfm}zf<69GxHZ{hZqIMo-sB2zrb-YWcWudj4J5b)a=E6Ig$oUfp5;TLw?#mpua#+vxSH~|}FQW>WdQqE!? z*P^xFY%Aa>a|=fb;+nK5yG*nn#oi?FXrcZ*oKBR&f;fsdB48wPK#5Jqi5#0ec&2F?#He+a1M=$qCOwJDZd3 zQ?atb*QB#iAtFhPP3dR)#0fP3@;$zz46|HYn<*mYWAk%*|K&^6HG}}&UgDz5Js77w z7YNt;RC+GdSGuGIY{idG`8#OE`4 z%Mzx*(#60n(aFv$abUAW=@wJemD?|ukpOgqB_+biW$|}%_(C%ytj_eY?gJUdHU0v0 zAY!RpXYWG)7cPqIy%NO*MXEnu(45Z(-+3d#3y1q;QpzjjIYhPNj$7R6dy~Pmdjffi z(m(E?)#G|24yp1$ARprs!jLmoE0>X!tEfSl&wCg|ci^t2YJ%JpfkDi46#jS}&yK>0 zu_sU4=A^rnIGXOSJ1T^2M<@#H-+FR7>F9M`^lZ11h=0R;@zNMmW2*il(Je1rBo87e z#aWOpJ)H_tE+7Ic#Sj4%lbM(_A(cS!TzrmImQ~++9wHtYcs~SL?RTS?iw0) zyx;ql7CpYQ$QXT$2pxMeTzw)8SQ7!u-&-F2hxt@}{T$Lx_bbLvDi{WUpy|1k#rZp{ z;xoz5q@RPRF!T^=m9%Ti3pB;ahlxF_Ic-CXvpyw5NgkCkq(2_f(VSQkST;o+GZ7|>Occ;lqZmMg zuLoy86Ff%TvY5ABwgSob?)cuUae26Mw&tjiF^h!*#M@U#G1u|Ckib+ud4myJY_w{T zSKE@RVimQVbTiH#;ypRyBS&@JHbtORf;$|K5bC7O?ZHKDSDt048MGzJgP>RoMLKD5 z`Rp#hZ>aA%r;*f6B0LP9%i9T|B~}>=2i!HRaELs)Vu~J25REfIUch}ct1_nGzYA=G zDQRwF#ncZtni{XWZ^&Y9Mr=O5$U7xBN5Jd0R#jKlpROZ2Q~-@bWCa*f0?BGT*9%-m z6YSW$n5%5}P7$W}pg+0WZGbjWRRDw%#z6bq9`IzE9bGE~MgqrgkI@x$T0y%$+iX9} z4_nMaax#o@sF80gO}ko?<^XLI)bo$GrAn{s^r|f$Hp@T8kzil1JAyBpN_dkFPEt0g z)8!hbNCy|TF}>N{mb0;YF=nlNmXmEZ1I0$$OS4%C}z6|<$}DY!sUrl@Dmz6 z5^W}RPq^1&gamikUSUy)AW=oZaAD*Bz)u}kbC}|WuFO}*2sRp*IYSu}JbdZQjOqZ6 z!x@?|h(lXHr_;57t~*NV-v&?ivQ-Y`9gnOL2ZHFRg+JqEvSSN8L=okuY$v91880FU z^Xt1vRfwLNtD|nz92L)7G6_6zV*zzo&ui1GmsaVa!$EbKsxqp4WuURvt?}rz8YT0?aW93WEOh*&ccf_J`@j6#F zHf*)0<%-s)8oW&(OzY+tt{QR@*7S})JD!Jn@+N`(!F}sajSPVUl2Bf&e`R8RKW)ei z6(rroD@-M)CpWHAr)PS+Lz;yH$9D0Cs2}sHe07mdlXAG$k$F(z-aNu*Z&7B%n@Aa1 zDX1d!?l&r6a!7CTsWs!U_mH#wKA%Yw3`RcvjKj@Ka~+gtto_-P!@-+b?>jlGY*bgG zIEz-b0{^O9$lBKGK^J)cL(BC|*0e}KT2$9nE6i^baZtSvrLfh7#PFapt8`D`hyrqn zr%59_7TW+ZpCG|}3giH>2|h8{E+J1q(8jyPGt{e_UiU50tm#S4-*7!xd8oOG z?7KN|j4Y8xG-d-UGu#uXo4l`>?o|ywEY?z-j7OBQ7` z=c*rKge<_tX7&`hEIvX6C6Nwl{_B0&q1rev6G4*LM~Goor@h$I5R3YZTUcHSdYz5a z^D&y?mg+WNrik%YRLr7qTEXB*uoSeKlV>=nYtZL(ys{^V13{ndF>lozOh{uAU&#vV z<}A2HM~o9m(Mp39E%{~=zdKZ-i-eYa(@5ey9gR1nx#Nsz{y8=MF`6rqK#2lQ036{- ziN_T|Yyp{Cz1%QY_y(N}sAl?)BT`g=18+?$8nJ(fKOIqDKmGyyihwmKn1c_9H;00Cp~ zi9mYeb3)omjV9mZw)FBxnlU?&gs-;$t74{y#e7?%O7~^dNA}`p`7)A89R3+&Qy>d*p)Fo7-mc*gRuB5Abxc^TaX$XC26KSUCgC+YOGYT!Z`QrnX9W;SDYZcNn#pgZ!;~;Tn+@=yE7uM2`@Z<8; zXpL*!2zwEi+hV&*Sa>9^J@wY9xGw&{KmCj(ff=-C#rbD;u#rG<($4xu#ASVkuY80X7@{&}V3hV# zg5%GD{i%z#MyyqX8tP37vpv!ASd!v>O6wSZT(oA3_|tj8NILolTh&UyNy8klWbl4; zWS-4B*sNVwlB29Q0B$%1Xe|#aiSk)@wkdkGGK@~zW}ockjAeCz-MfvlJTQT>yy0dG za4f}OmHM?)kAzIH?J->?=V)XaseUb8L57691;h?27oFy5NY(R{Y2rr>8Zj1bn4&rS z$1AG!bXk{Wo?oKQcS|J05kaEnM$}!8Z-%)}=AD!qY>@I*QkaFCJA?+*S&*oWvd5Ma zynK*xk|-E)2q|R$ziBBt^?7A-v^%BtX3dhUqI03tKB zBA>fhCIjjUHUVMe7vi-tMb<2nya!W=AvOfRlNK#tEvw^UwZmO!V7AcvL^y0i(@t#C z2cV#qfzd9t;ia=pNXI1g&aW_kU^xq`L9wghhHxlo-T>asg)He6xxRnq0dS?3^lL06 z_Tx7E<{UqLo+j-`N6HcXh45la4w%GateSX?9&7IHPVH1syEF_x`-Og?>)FsxIM*V@ zIEFjLjZM(RbT@}2&k}cp^Ep&XJ7$){SacQe~6Ygm#WANZrkZ-knx|Ntagq# zGmA#2=!mE9*@C72Frh2E<-9k|SlvwaWTbh}rR}zglPIT!sdPwM*X(iqSVSCUr;H@t z9y&{Fce}Vs7Xc>xE>RUf+u@cwU5d9QJVAf;*&&7RYg@DZ?u<^vKfcyuHay#`+fo2O zrH;XqpXegzQz=BMLxI|rK!8;4^T0D>!}#2?A;!=SON+i4XenIJhNTlc>@Zyo%4&L2 zk6D0bJeskQhIQB;MT#^U;#u2X3KP2EYLc-QFcgYdpl?={zFHy|Z7#>It0qol^TKu` z_6&$8k>++`+tckZ@+ILvq;o(%4|Eeb^B^h9A2~w?K|bPdEKug&u^_R)ko$u z4lc$%nXCJ9eCO=7eBVWb36dLCN}^oHAm={0t5hn8y%I>LSq;F$!uI0kfaAZDdd-Bd9IKGFISbdS^DvIkvdx%w8+dpkQRJw z$%!Ru+qz%V)wR@}4pUBkS^KV{FQZO%IA%(c@OIW@oXz<4I~c&C4}R)GVQ;dJXdAgN z4`@b0vUtOzIlBZ9?KRXf>bDfurp;crJKhicAcJ8|C4&T<2nb@NPKwY zMxfAVLxa#(5p8m;aj@Iowd}mZ;N!sNUvnMwktp_ckwMGh&>!`dY=QH{fTuGAdi@M& zDE|kT%txK=T#<^YK&=pDZ1_k)OS%SXtYcNTaP@&hkg%QiUw&Rb6cR=mz6Mc}of_X&f_4jzlq)GdY=4L#SS@br~1 z^gJatC?7+*30BxxdVpf8RLxGryz1L!(HLMUMJ7Y07syAZL0$zOJ6nwj{R2}IDg&p zYrtUFV9kw^Vx(Dv!IDcj5BhMs`_#c(ejIIyTbog-cla4PbdHnddj>5A=$v*?SJ8B~ z7tJY(eFFHJaxsB9hUQCW_h@)H+8!Eb;pIf9NG#BRArAvuLbz?*$0O2L4q4B{(Ou!} zytB)3XXe$nZa>-G72PyPF^vVb`<~(Bi7%Eu_gCiNPLsfbckzeA{8J4TJ^QKv<2CaI z)cU}|ZGd|X@lx1`pd#Eoo_l@uX_zzL8bV)<^ld7dYp_8?`P zwA(Jqi*pBAA{ec>ho|ej!;?1Lu!NkLcaX0)@;XYH;5n<)q)$utOl=#K(GJEOeLhgZ z!L?LS>j0Tb=ZxSh;~OmOhnU$>R$oSKE<=THa=}b8pIzzB_~o)Ma+kyIT1-*PWrMW5 z{vJEx_KlUkw9Y3>=h-LzhnvW8i?r-0s}00h*Jq8cVcewsQv4xa?YXLhHG%cjqw`Ic z6-@DdPUvk;?28=Yn&-0uz`py2&&Yh0yaqKnr?lSa!U_4s2hr#6!v`6{3p7GAeh+~q zVpE~;ga_*Sn(9;lZ$q+9%wkv;lPVC$J=aq&YacW8f=!l@%hK8BX2~wU<3?-2#f?d< z_(LHBnF6w$p&D|?xiVRW(^!_IER1eUd=qr}BR1r$c+TDxMGs!Lg6C@elmfn-z@|}q z2{SP2+<^WL9=VPwdiNNUYB8*^WgZykj2IS>!>hLeAJnpZRcapwVqh0lFaLr_gi>2*bOgk1guVt+xhVY@-2YQKzlMoocrO{iEVsB*S`6n6`aZ~|)-~@4C zk!S)!SEm#8+Zbz}`5OQ;9$WUTBMO4VU^IYFn)tiGD@ z^`Y^sn_z=Y_8$i#o;ZlpW&FZiW>o`&1-L|9Mdg4>=TsFCCXStZ_yG_aDyZ}YUBwz@ zJS=h+>hKEt2cI^Wi?VY6isGVxVRoUE?c0UJ zP?2G~f9U&^h@2^|7hWb1$3FRj50i#y4M+$@^oFo7_9Dm3VEm3A7BHK*MbSN=Bohz& zN-<&M42LqcS0)rURbX*x5Xln?U@t~)bUH@MF*4B-*z_|o6ID)b`p8Ln7Iqde^s17u z_)_JjzGDX(_b1jwtrztLADcmC}I(7$alCB(co08fh z(xyCCCGUg9T}=~Tg#O%3+PNIZO{5H6ype0CgqR3qr0KgZon1C_#5rHmHvo=-*IJ7d z36D#YsKbeW72U)Uy%k1;eJbi9C6W+j)^E_ZPF>mFQh5%Ya^VkO6s;@sVQz*A{%HOY zw54*cA1;f7xA0`ZuVV1d$))w#NlMGoXFTk`g zFCRCR{P2mAU+JVQfjJ6B-z61WHTUQ#N?WbScMvUvtb&G%3A5G-awF7qJzl4vdPN=@ zpG(ORZa!iLjl;B<66$I1iKN2X(Lh0VW^;}~;xeP#Bli7n+ zGse0}r3_Ij2@{7q3iYoPp1o>BnIF&Z9W44s4n^qeBJH0vE1s1;MRi z!1TYLAv4UAJU3E{Og55yL~46PmX_O_)D7STPfqP4T;Y6JFuBi5BYwUpS|@};&}HNg zj}47!4;DB3nfwCnKcWm2W66XZp;Zi)laLfkAmlF>=*w9BBWKeh5QdlWp&9Hon6TmN7U0T>(kL+r?iC};UU1Y|(%{G5UImhURCPBV+?bt& zX#AQEdRKI0w}HpuTuY8q#BC=Pq9XD#g~S_OUOqGmQpb$8UohhO0Xd~9=ai2^-HFr5 z>f|Kt*C+MS(f6Av9fhm}i|`ZPSihu2b(QwQ+RUftz>e zUr$d0FdJ!4hiT6Q{(e*JPX^y@pB?_w%&Xx)VF6s-*Z4UrEMOiN-EPh+8w?EYWdHR- zxErvKP!zp|wiTD7#ab&^4b0v3R27jArx|XL(;>+a#4~2wp9C5>YPPEg5x@Ea_)dmB z+Ei9!6RvG~WtF_TU~Rp=vHM*DKD5-bf5-UvUAzZmxVnCH^!zpI`@r#mJj9fQ=s4TxeA@KlHe9c(-d2|n~T zy(wE~UQ1yn@pY&p$zpsuxZOl-kz$YZ^Jg6yUcZYdzEs7f5MxRM%0{#xS;JjeusK#r z3kUFXinI2fN&$}cLZu3=xY$xexi3oMNe7fyAXC$kOO!SB3*rR{n`POm7PViKc_VD2 zw0Nv|-mfQZLecld(FcaL$=CF1sePVBk>N2wcH}U@`|&YiO41)mPFxY*SJ%JX5qUEx zX3Nu#ilP?euU-55d*7sm`S!<%qr5EH%4?VburzL`!{n`XuZ0<~FZJo;(*8xG&dHHj zx45nfM;CH+IONRpapOV-7rukqAVL1Yg=ZIE^Hd3Y_qA842s37m(;`dFY0grtH}k#$h!$UPxnqQi zbkQ)V;+0+Hk$dH4=D@ZQY3*If_Wm@d1=rjT0s6U0x38fAjY&uL17Jgyi#n+c;x730 zeCj``cT$_0*#FK=ByvQF17elxOZIGAXQ)}nfb%#(fGrVQ+B`w{OXPCp9NJ236W)Tx za*r=VE1MVY`5Tg|orop=WAr-bzV+jn5pbQ4bQdYHZmJg+k5f#_x<1tMXC$wE$JbxQ z5$)ZgP?gDU^C4U8zoQh%7+B(o?*9J)H$ce0ZyA?%HO_N`tBZ^rR=dD#o&smpzpPn%N*d!ZA3u_c zfbX8dqo1yjPce{}sP3mLO9hK8#gMaJPTbFN zZmM6kRiwCB%?f(Kkr**bev&`a=g@-e@_=$s%ltxpOhD{zga%hW5r06~kc$WcsvIYQ^ne{eh=~ z$7i?eNGTDsx|vQ+YK7e-nsahfw~^Gc1c zNxHQYs*m@4kwnlRH^EROZvAO#!ig$4;xyYM)UEWh@R4tM6&E1IK0zdqC}@=E>jbPB zVL5-I`z8JgOyL(e8R}T~{lV6^)P!$U+iGbvA>6eXAHL?u{iK7{q00VF3?onFG*ou*y~|B@UJ=@PZW3K%36fCiqkBgv&5p37M9p_r7p`L|X)uFv zi4d5Hsk713;YNoeq61KF$MK7Jvy{oIbYtHzAw`ele71KGnpaMENTX~h_k{BjBs_Y4 z44)@pL!^9ITVU024MH@tf$;jWT{ST@7oML0Ni1%`msI;+*>j?Tgm@WXkeja`pw?e# z>N%jX7sU3`3a^slc|=Z4uzo}~gmyZD%N}C?E{V=wOEYk%z#{HN0_ZRm)OJ@i0+q6- zgrLmO5JNEn9Y3-w7+l^EYy6%1#uNnCMV?|1%bUrU;MPL6A4QDz1Z5xL*z#SfY@%Uf zT@PMcM--1WSDp|kiET&^au=EO$2A;YLSA$VMT)@JOHa}{Ceby#sH>Y7Zk&ly^?mLg zusw~z3uK^kff{npWi=-4vD?=9#Alf5&3#2_sOnVep!f;DM8$M-NJ~%unM2uCNr=t; z2OHB;?fbBZr;{lM{F;zRmRo)LX>>6e9QdVn6>RD|+ra%CNFLw*rvV*ly{dsyH7?ie z_In#RG78^4;`blNx@U^ws|bd*H(cImWMcUeykRjG~P_eDxsl(h|^k_gM58! zisR|&2f9{wFH0NB^@M4OO8b1$F)VyV`bo#GMADhXROh-)Sl>%+XP} z>e#Oq4n2w+N~_1-d^*|kv-$y1J&&So>#(4ZdHvPfx{gmLribi&4sB^!Rkm9CS4lZz z6xBvmXTvC=9B%?9z7N*FfM(f+ugWINPD%y0n~^_u$ay!vNWaH7OxH$NFH@4JhJ%(ra}KE$*GXAP3P*m@AU-F9DH3A{ zb!;9O$qi`0;kvG&Okw47X{~KoobEumeIAlj8NDrmgj48AjZ`P!$sRfV&atP>r2EjH%^h)xdr#TtyqdxodM?{^`GTR;=1|iyCZ8tIk(urBgbr13&C@kU zA-r&B3{}kq{igPWb_Bu`aZv_pcJsQ0iQotNyQ~VQpfW4_T|e#d2P zVhgP!n^(_;AbSt#9OBC>N<_O-h7(O(N&fT;(Bp^-Xz-guPT|+CLn?8{MMMz6tckBz zLMQ**bqUEM%=zdoHXW`6%FDjj^HU#^b8Jm=I`kx8HV03_&Fe*w_7F!C_6#c!=^jb&0n&bC%%Rh4spV zbO!J8s_(2cL&@U9#DvE6o@s9Me*Wm1{2qfVQ*+dX>iel4o6t_WH2g-5ccl{_@q9&dr#xQ!xv(S_6AYgtFAtX!r(pBI~PU+^^L{(A@|3Pf_yk&I4C? z-g>qO@L+fa%ldK>!u%Ax1e;CaRV6`MsKcpJ z`6E-(r-q@T-GrX4Mgxx4Lqcm9H+PUL909qG4|aMnu*}v_9XF747>((9X3(Yb$<{MB zGYhIBnQpDVEj8Mn8g8rWHJ1)zHMHmZU`5!~o0K<0W4;b_r#T4A?w#i>WJ5?k+Qn|V zRsaZ|L9Lx44}t6$!ISr6r&lo-Xox`=cGF{(Q`W6Yx zesbX(GDi+3?znc(vRpKKMO3yc*+?E{TN4S7YVrkrQ3n~FZ3y{oafRgU_N=ND4mZTE!}x6ig--WynX>oCCFJUS0HaCG1_p4IxI0KFp9!d=;UOVZseR z-k)t=cVnP1zW&}xctJ(S5NXI`2{j&iJ!T}ZEV(ie+crq`C>(!icsVU!B<}3?(d2Z+ zg16&BW~&=bu?)wLWYG58gzL67gM*b%j@P>bG;PW7#&(;Mu<~}rXc|3_MX~*KkXNV6 z4D~IC$=R$U2iYL`%pSfsoiXck&g%p&YD9NT$k%3{_Ti8Jv&MCWxyjZl0dSr9G zrkHuH@2B2Wxm-M=LB?kxu?d6LC_k#QA*To~tvI{=QR$i{IT;~TtCBepCnCOm6(Nh_ zr}tX=taHebfm&ueMW0^oL@i_%5i#!6Q;fcuMaUT~w>w%VXei!_A)KU`T9&7`1KCyK zQS2t8)Gjfitn|+Ew3P3|@Ekz&=8iGIA42$<`pQAVb~EoqCn0s4Uymx1aWSt#1kRdA z>6p=*kJn0yzFgF06z{MOKh`@LsFcPg>Vf+V@zKfui`%X!R7`5=V&=a5{!)lji9gK& zTjOWC&(M{Ni&Lgt>q^L^aS0lvUnVmRePYxuaps^nAZmW-iK66MYpYzm4zPX{2J_|ZAV0UE}j^@O7l9A`P}?)=QDvD^DL2~)9@ zapZ{tEv4qEjx+j#X>2&_^dpKK57rss*QL%GCvQFlD1DG6@E*@4XsN^Q@K70xLPs;` zYEt(gz_|L(y8SdFI(b=-?a*XZ7-ufR&-EbzNcTX&xr)rqg_x=jJrck&PutDDD&Bq& z9P9d`zQqyp;id1;k-N+{Ye1AVR6^4C%l}do*O%_CbxQZ?LCYo_3d+Uvcgl_ldcsP9b(8AU> z0UqT+*vlngPl4c}-k;HdLSTK!Z_1bKian%tEeiCd%AZZ|nm!Z`HLCzZD@#Ym6a}(5 z-Hw(#jwn@P%DGs@KZS&^j5NV&liwHbgS)NW9F5$1hJaDQlZDW29>9GsFT1Bk-m+X{ z%{uH_N1emu4mY@2dP&FK-J?Z`aY2iJ z-aO5j1F})f{V(VOoSt0c+ zQ>-9Y*#sZ_M)V3jUpFy&vaex)!k>g*W7w?t+g8P7%$vzku+2x<6Wm$+lLRssk;(&xT7 zi}R5=0d|`-*u2(&X-om-xT^Iy9~>YtXD<7i+^vi>OLf5!U83Ne&_yN7{bVMr3a2IW zn6yrweC0&OW=Sw8A4Ey+_dqk9Qm}f)eg5G(ywT7gr6^*?De0=7z`bKu-R(T6uaBj- z-OzGS8T8ht>9m;A1ucB*eB!El#+GoNXCkJ1O}1#Xxy{ql+BM3Uqad<~E{`O!+AjXn zV0u-)zlWu@HeGk+8F}a+)F(LuA&9nFYMi*}&8JGz8Eqb{oicIcagU+Nu;=(jP|ce{ zc?Zas0}>T{yd2|*82}sR5&dfZL}5M7JFVB9-;=81U%up?oJayJd&}dpE9aAusj@58 z8C81U(tZ7;y*uSgS^L8FkV58ZT@qL0f69C=BafOZFBnn%*6B?nLlcP!{WT|=&aCl> z1^v;Yf+z0o7Yn=d2&uu7caW5Ash&sEz4l|7_(sPWbaJ|FTZW-aB?iks22k}A<@W7G zH7&H*QsCKTsgPq~jGA5IP4YpI)=@rzB%japq_5~Y&U zE1qj58~devf)Xx67_J)lDSKtT2oRgKzoD3aB_Hg|&0V%s?KLh=tfKWSQ-Ur`3*wlX zax=Dwk}Ji0(=ajs*-Q|r`6ju_g&*cqVmQZGUbS&$<`(dX7?srr^)^i!JN}Tn_B_h)as!VQ(11F^IUV_$=&7#a? zwmV&F=Xt`z-*wzIRoRek3#Sek6`c6^oH}8`gthv(nkb5Gdv)q=(Kwi*LzJ8laUxcX zyzajkoZh)O9LTudX6cn0^S)#r(++4&zA0}l;get7Z5fhER2df7*0?9CPFqLZ|3K9qqBKj zb?pFz(8+~tfM0P-|2}VKEGUcRFvOs& zqUE8|odI1^!E%?${LMfW#3c;b+w~0?yIz4XT+wG5L^QPng^}z!@jhuJs7hkK_Jb|I z3F%I2%}aP>je1c>y9gUc-rf$LSujlqIO~$!&R^Vj3H*pn zTfH;NiH}U@XE6^5_t;4M7@HQD)NI+QJHkDsOO|~%pc&rLK8fGUtsLkQ7$~)=Gt3tn z+GIjzo1t2IgmAD86m+bT-HvTw-?dB>HlK0a?SuC0pKI$_p;$8IK99u=zeGXc^BVdx zr?raQBII2Ad_GJ9Y)p{cU4hP_6V%(1s~Rpa3t{yz&1z(gJ96p{i6HWj#)&V+FEv;w zI9Wd`Ge_G&oQobmT<6d`>48{3S%wuf@WA5ZMAE($zWf>LX?V4utxh~b`Sq=YT?2x1 z&}ejB>Ah?gid(Nizk*a?U#7fH48t4rkxg^}gncei4qya3zHq1=UWTM)^X!pNN^xVH z0Z20&1%NR=`B@no6rofVt=>J-hhtO1*8mIWZ{3%~;q-mLp2zQoH`%<(`9Pf-wn$01 zd;qlo>-mHIJFYCm@ixtQl_IP{I+>$~_LJdnoBa7)2;x4@;+3oI)=YJlUN0`w;uWCn z)^g-p??bdQw8sj(Pkh5xE;aFzyq}qt2_I1Iz1|*8S7RnB*QA?Lv@HQ{BrVCUvRe+X zu1bHZ<%vpM(V>V%X`!9WSMY;;Ls<4Z$QorOPDDj0+IUdIh=6aDcwP^08t&+}__i%r z?B2~JO&`i_Ge%oweWtX|1XXBFhDF(F@tq-f&T2PMGzDj!(q& z`TT*O9R<`q?Wu^5nNf86=G77oF zQcR~U#zcHpem94(R}*NhT@S{W;W9IM{iyZRQ&86Y&{F}vq%&bo@A2xVBSj)Bcu03Y z4=h)AqpAZC2D}e{qP)LvKRKVJW!HLpY*-U+u>fmTs}_WSplHp<>N=2WMw2Y-dp|hI zMG)=M#g#PY?~>X9XXg5h-DuFv*AQ(yjqg6-EA5_4fNR0m%CV})&*sU0e5Msj%B z>m)#tC|hZJX(&OFdV1(D?UwFF3>gX$InYTC1=OzL_7c6ATu|ZcuWrEYg{|!)sU+1i zS9mzRuBy8t!*y1*u==PW@4VPrR>0_ts>7L8!$tyxl18+A-ul>vpIuWfhb0+xMlt7J z&=n!#9OJa6qCe>%GkbJd^&JC+Y1QsERCcw!$?bOcx30Hw3o?|Av4uPHDx{4nmsK%^ z9$YfsGI){~VHoruOUkw4-#yv76_vrplhFHq*ILde>7?G;828~@*QI;E?)SE{}J-c*A1V zOmRA8D`zJ{DPuK3s(e~M=5O$s68UiLZn=AITcDF2#9X5Q9TOL+{YiahILQ>qlQRkV zctG~_Rr}?^SAcgk#w?dqyd(Bwq_0BT$0Fp-Wyp2@lH(E>9=@K|Wy=6prfC=<;-;KT zUy4MB92o7D6cWJ*Z~oj4ev)O4t*v(<`UIlUaLE=-N)Tg#%~?d27McTF&zKzWr|F3?~}Uucl!Aq}|- zD}3#3T8i+)0EV;1aVM`O{tY%9T!h*jQj1B^Y<(J;{Ef_ z$a*)hw>UN0TL8#WEY;qRZ~T}p(8UYL?c{2Q){{HNHEQ6r(NAwCU*&n<_%Bq6_EnaV z>lWMTQF(+QdaVmeyr=gH=XowyxTgx6RMpeL&`4jmpM-g_*K0T|d zw+}yRuOYT>{7aBR4w;V}6s0+;j-ED+IDJ%-`bodmBc9eGV!L*knc~K#yb}ZDRu^<3 zeh$5;dDxcH{rEm>_o3I}W}XWEmuXdhV|kn)QqAimbjur6*Dsi@KO=oH(eCqfO#D@9 zDXRu#votZNY@@jc_EO21B>>CaiCkBRZ;4TDLmWsoBs@*JocOPIh+|$oYWw}40G=XY z-6|eNi`K~gj#IuNGfVv59!#D)5Wu?+SqJX@b%+eC^=-r#N$dli6Kk4ZfmaXtF8y!3 z3Lix?Hb0b|~1yyT;N2wn|-aF^X!v&x}9tO?D&- zFmagWg-z6gQwT}?|NjoXP71NuD?#6L%(Zqmt5(1~cFY*JF^RTG5dD2d8%^29s7IA~ zQ%O%}40INgav{P{lfpp1>7kWb%PvpItIl+}lvU{Tu2H)AdGq;l0x5#7b(v237W~{W z)1LlXQRnpog~Xw^Y>w*_)Nw&xyTQ~2rhu>LCY7n4s-u%~BQ$RX`vSUJZ(-(#1CJ~n z?3){wSWMMcWCZqjI?KGM4WcmdpmU;u+TKwywniI)LcH{|q$>PWZ=hpkoA}UdO=#=E z;<^DtEut8*?_@}MgVL8}&mW)N_G^!wOm*1q994}Ra1GAQ>-R*gOSdDO7uWQEmSl(N zsCjSc=QwJ_jB;rTt2H78P*o{S@`&Z)5cXX!%(Zz+kj*D9PN^*nUm>;IMRUK@J&@UX z>a{C0#RohWHX)K6VslZpbl=#hVI;4K59$&JXqf1Z8>mBYuQM*xg_1hudu$1sh3USE zm*EFWIKez$7Q-R(%WkMAvr|ghJDvJH6*y=))_*#a(>e}BjG*j?J4Pg;0o53P+^lup z-49@A++>Wr5F1Bz0R$0eAIE&Sjt#0>OZHn2r_dOQ->S&7WCtHZnXzB=!9$+o2lV$Z z8lrtya=YYIy(^287Lbb{ommCfs~{N-x3elu{WdX$$mjG``qM`sf;6c{a)l%{0$^}4pm{odIN88XpsxEh|k4R zC-4A)6emX-S?zqAO3OY*k9c3)L-~t*$DtmuqKnB4Ux2iIWCL*(Kjy;^yP*Ty)q$7t zf_A##X8Byni#mtKOk_<-^IqTta5|VxRL$mNUMA3?4RI0ECf?zCHfbht!ht)Ti(rMK ze4iseqIlI~KV1a>Vut%HY>OYP#gT~L9XV56JOYi@^j>O0SL^Od$P&k92;s{&AS2|4 z3^p4>6$kt`HNH|+fcBU_bMAH^^i7S>%_!gmOU8(rb9|TqFM^h= z6Pg0=QWd2$s}jK>jPtJ?!K+`lqRt_LS3#V;tzR*t6lchH507|AjyDpq;hCKu1DRGD z&`7ith@ZZ8RPc?H;Nif}f5$EHh6#&;|NbVE(%=FMGz%(LlIc`FXBDF7 z5YzQarGgeo#8;Fdh_jjjN1+hVMX%G0GW6}2S%V$06!3AG`r%^y_q53>j;X*!9}dr| z+Fb#Oi*$~lS!JM|RW+kJNoa;FudS{c5}eynGEIu;%c+`AVk4ylkCs3)--}vrHeJR~ z5J-I8eV~YT|0uy=zNv#|ATY62nNdgU0pROYb*=dk1P^wUm^=u^yezIbEK9S@`N zl0XaW%)eDU*UUJ`iBc)gINbXU7lmLBmnOG6TmH$4O~fAtwP`XybcM1zF;#8mkXSJP zE14iTSa!~G`7^=1aPNZL0zGI@IdmkMX3z5;$BD44gTe{yB9aW9rh=E_(ONS*F`_w1 z1a$wvJ70fMR!0MCbrcfx_HXa55&xWGd6To?V6!v=3%%5#!^{Z+Q(02((v(%5y;$Fo zH>JIoKvm$O`N37Y&+9!weglNn|8};oEQHie&h$hXG;a@80b5#<4si%>>V)M2PtlZ zYLY6M8U!I<&of6(xKOPc6LBrmR{4Llu04rt+2rGCiJBNY@9R6a9X}N7d`;c~fckt% zo~U7PqSj_)8$te(M=-}0NOL@FQ7BJyCre%v6V9i}4v$pQ<__!e-DZ3dA9B2?G}71X zUe7Xt)xhZCWI{nGAOFW zOHGE3HnriT$;Tt2DqM2Zh|&HI@&h{86=&5|{-Xmub&io#;I^m}5123lg%R!fl+!|@ zIG&EJ(s&Z&nbqgn3{ZIKu;gX;4&#)UZwfC+)cAa@G;x+YxpaAm1cHNwT~a38hhG=v z2XB|_4Tw|%!|eGwvqS}DVVTF`W&`|o*RH*}cPf_TN>aRgZoPPJ;pj&}M&25;%BBPI zN`^9ms!6YzuX@&>?#p&w0faJiqdC$vP2U^7{a@I`XO&?Dl!7ukh&Hw;>?2PbS%R+I z;6gg;Xo4X5oES&nZ(KrCf3Lq%q@hYR^+6*aI+ua|^NDTCSm<&~n4KiLs$>oqDwibP_yt)U z-roPWnXTmTi=;s1f0ghWYDR=|&{!+YcM5M%r&aIuwbl2(VWdIKtb-po05%FZF7g_U zOam$|tKVq=!Z?Uz^g|p$Qp3;DXT{Vn^YAe|!5N)`i3EeNblzox@T5N2N8*k`4K#WZ z@Ag;tMGCkRMH4yjr6t8=0E;l#X9G1>w}Ep{BaICCQi<3vCREcN<-58D1qFx3&*tZ$1aP+oMqep`x80vAUE##l@beu#jXEoO1_^c zt3?9P53n5Jm;?uGK=TN?+1yA9h2O=NhphgTn{l3p)-a&vCuD_AB0}fiWbe1+QWXA%76wdbVI|mEx*T~ zLiknge6TDE9AhD@V5<3+CMlOB6YblwO-(^0qX-0cCa1U5e?*xHVrM_t(Lewq|@ zz~L#9K9i$BVVy2byAxqjvX=TtS54D}tD{yNnduj(sZa%^{;o@hMb{pmMgT5JS$s~( zN*HrF@9cdj`t@SimM>&i9EKwYVY?lSdr?%gUc^%phoN0*j|t2rTn>W30Q^eEl7XtK zyE|+}?|T%|`(?Wx1?2tI`cVDkM@TU-T(Hx#@lZv(9}yc>=-)A&H~~Q481p$qY1@qE zi@Kck9MQ@I1T%osR&|r7(Q0PXmZUpmJS-L+HkhqX9(Rsi;}&sZUZ#S%YF=?c@F2VG zT#OgJfU^wVw&wk(w11xMQ1dteQO8DhLbb!o8{Z1GG>4uuVKk5~7#8)6@`ega`iHW` zRl--ggCrZ(ISo`f@*z&#ji6}R@&;QVkyW$vu%+7F66+ijf6F{+9MAk^N0v@RSkLKcAO?Yb;Z>>C_m&+tKt%O$V{i*2@N!?+ZFA-^Ti<3n?-*D8*miJ zkr^+$NqNBR3nwe!RG*ag!dXPbOBOiz+Z!S&HBqJI7%+L@P|5zN;qQmzgsLIxE5B>3 z&xvgQjlJKTPr7{7rfTY9P{0h})*ix9h5@nnXO^|@BDuDmFb+zTQG&bpS<ygk)H0#T`#vsL6nXe-{0Af)B%Uur<^am8s1eC z4^{ih25J62X;#R2sgSUVs1m+CboTxL^Rd5-$=YKH7Ohwz4P5{FkZw3dc7Z?KiSe0e zzqajB+Qkvq7S>~bIBNn8pUfjja|}vd-?9WytUQn1GwS1-GX2=Pb3R+Cwzzw}zNH8H z)0_qrC9pLViJH@{plv2}9mxNS%4Oe&-Ki`MnXvgAT)zfWD22bTjW4;?Sq6D0)nKTy zCL9_*@kl+tILq~rp(sYKU;V}@r5Kgn<6&DNgN06r-fN>jNx_2qO@4>Eoa&z`d-u|i z$|7L75w*p`88*{QZ=v{bnhAV!$00zr-E^)|uHLyi( zU6}s*b0u<{X{VfPGfU~QhhvoS^bn>LL>D7isbi54AIdSQA%GF^Zr#p^kyV2ZoL zgM1l1>MzKOW9M^X*tX^-jL$}kQHoY6j-hlMb>VBpreqgz_38Iq@%0PECdfctf4Q%4 zA0Qk>yJM~)Hae&IFOu@iiUu+$UVJ5Xnkd5+k47jHd1cj8#RR+$40sBR#jpjVsTp`d z#5ZtIc?i0CslS$7I8}9lDk?!gPKCi;1T(J+7UwHpy`iN2e6ZD(ait51!Y$upCC!qZ zPZDH`R_^!f9Z1=R6!{)CpGgO^GyLbvnB>)z_!@vA>MDK$RVs%V14sBCbRvvR*0(wB zrCdw$O3D@U8AAo%&@W5(QR|a2M*83Gigl0b6LaIzE{HN1wbbHN=wUUO4DiRFz{!Wp-*Y!LI;0QxgO^W zIxH=)yCps7d7}fU742NK-*-x5#^?QBj8{I0efw?4KMMAczBc%~uF|0j!y@AxbtWn3 znN|y?s}m)Wdgw|Ntxxy$nXr>jcxN^9^E-zRGfhiF zPOYvcnSrMAY_J+3cH1k|PnEB)Wd?g-1F5IfY9(VuW~Ykgm$+)Lvb2W-i5L0mhl23N zX4O($CRPD_IX{-&hOzf_#s-K#gQA1~>R4QKc|M)gyQyHt7&;6j!JzSQwL^rRk3~-m z0f`t!eWSfrF}?gd96uD4Xg4!TOo#~4*`|_mSzjTHOFJFhmG7~EJ0DE1E??jRAKMan z^wWyHJYMVxA^&Zw71|NoRyNar8RA7NwM?Hy&VH-Ukl6WpTnV06M5E!Q^HwXe`f+H* zNJ;D0Sd>>b-Bt7vCh{J5kb!2?2Q(z{h(pYf=Y%h^GF_yZGv!<(g#OZ~XSzWju1CJ- zqQ-_EFPn&iVyU8e%({IWIEpmnxz`_Dqj#A@QpjB&c?o$&@^j+2y@dqV{w|C5Bb8|z z`}twDC1;LN({f`k3y)hNq<1nm!|?n4-F5Fs!-68u98Jjuv*S8NH3T~hshyP+9N5NqH-nc?SBG1#J)+@S5WzDJvt zH&fkuI*EMW4-2LL9U0gszRW$gOIKVg*N$YH$C*k@i{T}+L>+zQE3I@cCe-NtZ;R6< zQERCqtKRXfZ!5+5c;|wFal(Sjhr)aQlpyKU?FQw5PKKr_Cww-cki1V_Np|Ouz2>lv zJ)lN8M@@jaM`>rV@*T;;tEP^KYXd2WTk_vqvPq!{+cTZgGrxLQcZoK&RiRTB0Z+GE@ExptP4tBrLK{i#w3H1f6 z7)w9gCC-oUG|xZ0nhdDzlt@$@?B-E)_XKdze`W-g3}C_W(75#?j$(e@!8S(woNIhK z8>q8lr%54YXm{@x^Y++v65Nd>YnU83S|J4TkRF8{$LF9q6rZKp+9Q>%h>|NkYMg3^ zFd*FM?dR>j*_P*>#?HYZwY4Cs0-?77!?y1qoq5dW1_#P3F(j;aF@(hB$zPCJiY*wLfT-*!MeHRVekgc_C#5eGg_XZKW?o;4M@MuoSOE_Yr|AdTG3J9uXsVQ9C3o?QRJP>+FhqNb8v*Yj!>Vzn(ZX9vh&G^I?!GFa)GAumX0dGsp6;>q;B_tn!R2Dp(74G(^+rbintqClctS9 z+W6mP0W&8ES6@WaM$!^So=WbziJacx)KU5pfWOlDGEFol})`YAuTM>jTdfx z*jx#(g0gerJ#?bx04<|4jb^F1!rwle3PgFU!fsu>WC{+wrJ++%==!dhBx)eBaqFMN-KkL#-^>CAH_z%h|^qCMC2_nnP);H|yWstCWYvQv_t zHR{={Hy3Mf#k_Xr!76P`?do)XMzVvIN^849PNnn_3-T;;{um&qnp2vvG6UGF35g(unO{4<7#w*NdYm*I83srGOUKX`I zjUH1F7-GL9^@qO#_}s4grVze5H&m?VKO@AilfC1=eg;hv@G#~J+qLZX^|eq(W^eDf z^5&oMOA3gr&?`&0d>K08UcueLweC33@&!a~}(l&_LDysJSpaGE9z0sD+PIfqkC z(Q&*Y%JlXrAJZWXvJH8rCv_8K3}{Jz+XC`7nzkqu{1ZCW0t_w8tvD#RkvB4pB0+v2 z%EYAt#!iK*pubt>kGgTU3{bKR(-PJ|g+jKZU`7CYnOsFvBRgwjmjoi1+QG_`u-m-L z*E&sGkckkV_;AXc=jqix{}= z06~nxvj+w}v|y!xC@rV?lACr$mJ`iT<_;ZI;C|?2tSJK#<4HJ)pKAVC9opX4vp2U z1k=7NwU9w%bMg@{m^8$6@-Nw^3;MWTtJ1ck&l~(D^;8GHRnZlMARYThKy!$C>c9Xk2d zFL_tbmWqqmAuA{?J|gRW#DAYC?nvb;(eI<`U#+GBqQ$gvT3N@#4M*Y2oIar@zq2R** zP?q@P9ZU-=y2CKOu=f@`>1BQ}naa0fwm+*c*BZxanL(FcI7W43cy0qoT}2=!4Dg(aVn zt-W)mAAD$9I-2n|R`qa~4M7fd9=Ltq7>zu?qio80REgWn{|0)`oy=U}XUW!;H+5)_ zV+>J+DPyro4CqVuvSi@w38cuOs$?x#OEB+?f5MA%fmO5c71P@hEcdy9-~f2z#F4z1 z;@O9mmWDDTy}mAS7I8poCKGcMDiT)=6&h2k#n3LJG+@&h(B;BPtLJmRofH$~{C;9y zHJ8o=Gp{m=ox&}DCTS%A4y1a&xc_-*a~(M{gu+%PIy;K|KMJWZOUnoK)xPjt5b5VH zZQq}fJR{_;Y8@omFjiv&Me`AoDxsXd>jFy&CYA${+d;YUjpZEow}+g?NRtLV?RIh$ z0xhAqt;qDxiX&fp_ZM1TixF$iowxfv1l%;MEPVV0dt%Z48j^Q30RT_>4DCP52HcQc z){in!1HW(6t*l1(6WZAmT6?mV7W$~P7(S0yj=Jv+VocAjlgfP{YoOi4=*NhkW75Z` z`0<>lMsv^8?_>ted;Wd3wkbhddc{&QrA8~S!rkspmoe8y>5fp%D0{;m+k|dPb%@%K zbEE6*)DuMLZE0zmbV!2F`mUV4aKs!!d;nAqIr@~Y4UIA8wM79c64KW50^e*E!J7)G z4ZgHvWQiM`qZJE4GBZomZhj~7SC*kY@SlHCbac$KX6t!&(SAiNk%xssQvu2Hs^s&? zCrW1tj?ua2vp0pA-Dd&obXc#q;|fB))1;^z|A$vKj=hRNZ%ZcQ@!iw8C9PftYIRAs!WItxbu-I*KV-{QI({BVS7N03vq7wOJPG zhr;nLL>r_g9n^t>>=W7Z`+F@Qq7?!8-e{wAkP-Rw&ilVZ3GI>)IP8D`sV& zq_0&QE(d938{uOrMh?K4B0JZf&JrXArwlxwTltVz zppW2nGr;OOp#Nd2>g0ny4L@8VblZmYObgWj@T^fP1oT(f+tPtTa2SM{Q5K`DPc<@` zVT435GE?ffoe0_BnSRP?NS(pSVyrgOSa2=VY*C7P3a^QPPBQ_5MmS| zwM{17YHcMkgYap+LL)kp>CC4Y;|%wmKv$9Hp>P=-x@>cV?OfI~uTljT%lhA%C{`#g z26zU~F})C;?3kiDO+rgv&v@wadT)`;ytvl!A~8FX2>{(H8e)@OF-N^sBj^rlNiJ(m z&Ok*Ce9dibuGxWJI%X=Jr=I6fQVjOw;W5o>Kl5flw8qtF-aH|6`9@k6V(0B}Q_Pp( z3Qk^H<_Jv@Y;#e1B-fsyD)k_{H{Syyi7RmLOqAUhP;n5ek8ZSVzQJ`yFkbT8Xt)9n z;nytQhF_8ml2BK)iPX;p4LkLaDx3FdPaKkDn~1-T34DJspS1-{Nma%@!@86yNR_tT zCj{^ToRl>5)_1+-elne>`e@`)v*~-&wKr1WPV@{rUP6D2ol~qRu(qzJZCh*Fwr$(C zZQHhuHEr9rZQHu*o@6KIVLzNEedv3ew4>wuKd;nvo~z!P7wdMuh8HxV$HC`wMX0S$ z3LDpCv)V8N#*)S&rX!7U`@Wc06!XMXFV8bd!v5;ytv}z$0Tcy-osY}wNr3r%f7Lrx zGSP{*{l*Gc7U9u?eXRXt-v&ww1Wo0;F?qzc&dVt3qt>=6QV&vYsFze!6TCOM{5(WtTZ9LVmJJ9;;!T?`@5KqvNqgJmL=uAaz)wi5Jel00zqN`yINY+ZU$_5=a{@q}@W(R)>>3ulP^GPeXfO-l zoKrGIieE@=S)H>WtRAE&oV$MqgZvi>3M2i0lc3Nuvi`?+d2K15I6q@R`wo}wvc`69vX4m=HZr8Z?u-IhN_OrAD{gE1shv$-godlNWM+Fwa;ie41`p zeS_-(U?^IrdJ5nH1_1M)0|hcydugYCaQ>eI<-Pl#0|it*LlHQ=y`AIy2Ne#X1(;Ja z11kvNVPqzizw4Qzj4&BB>$k%+0}K=z}VTz$%wwi$*|6?2_e4}xJ`pY z3+NwD%P*#ukGWSH3J5jg+Skiv^AHV1o3_S*O z2H{QzC!dlEOwI`);Kw!jea#R4_PP#`j+y?ObhA6}N74ZFO|`bRw6rtRk8xxG+5nKQ zwGIRriR1_~b2H-%U=+Wu7dz4-`*M3fQZu63GD3O__p4|N6OW(@hSAIRcKeboja!YA zor976*ZS8o;l7snwu~B%5xKdw5jZeAXYY4`%=8$7*@w>+ex%oK1 z?$HaJR~POD4&d>X)Sp-Nr0>=5PFHrMhTp%j2zqYxGH=N5kGrXwBPslY1YrDd&YW@HP27m@1-whiV8D{Nt4At6AE8; zcz8EgUsP@iEdT7l49woi0g!zI6QK7GS5#vCa<2;gH)IM}#wKvvFWRTCOFAJU@@mR~mqCJ2jcTT`nqk=0?Z*&)vUGjrX5;5JCTJC{EF; zvPh~o{7fWNW=fO2VaIlzA9_-zR-izX>s%V&&y@gY85!w6=&wB*rL4DfVT+%_KT$wE zbTfWwDBu|zS>MeD)K@qFMq*+{@b0Cr0)_@=;O-2)wf}@D-+D|i`o;k3T)klcJDZPy z>6=^wzb-{MR{)~>z0!Vv-~fuo@P{DvQNDxP0HO{35ZL?`zWBnEVEf1)!Mn{8K7)1+ zQGSBj(gC6+{Sc`96`tWeYs=ojyGJd)!5w;?M*J#!SD9RYgnBwNzXWaGxkz_CPjYppgi${{_gFTZ2VUI;939bJ#{*V@jZRAuy@&|fAe{o z_@>>y!N1ikpUZW-Eu4SPzYF!6y*W+X{uw*FGW~`B(8-(R+w-!j`SriO*!tm5eLeFl zHubn2I>f)zX+On3zRlnci1kbRsC8g-ad7tbyZe16=)N8J-ShkI00_9@S9&`J^-|i= zzx>#W?KlO9n z7gVGa?sdbCceca$tBwn;v!=9DdmJy~UXxxBrx3RSO`i3Kj($92lrX@dl>vFwbw`l$x6|XghGcZ4VUiYRTg#z7sQf;lA*_0Sf7&1_7^v^jU#1@vDKoXAT z;Xf_0Xe}hjc%PD}n(ieU+iom7E-s~d!m~r8@&*NzfzjpqS3<@7N$M{ADaj0-2up)ZTkqg@0Xr6f&Ei$c~LtNmZD)oIW(R80d){%=Q&mdz~Up z8Z5dcFJX{9e^Zmy?SGyaW@Rf9H*y{v$YKLS1}De*z59_kfIe*>FhN;Ipe}|F0_A%g z6>Eh6TP~o^4;Iw~Vy5Vr)^3?uo9F!O7>_Ia*SSISim;+F!_r8wg7!!kf|~X+^b|@Xg~$r+qJ?z9fg!-^tmt z%@s_q=DkU^HTi7nHWdv(klhAjQpW!Y$tgov$vdRLHoDOg%396+Y#yXH#g6qC4Bg{4 zTU{^G9_h56#iZp9pnN9i#rnwvu$&5Gyl&s#H!Ug!@2$pn3Tz3_;DnXqWm0QT3GbXq z9P7mIRrCFP#7NmX1lZ#^-H5swrQHDFN{gWWB+2s>=KX?h98!aYeS<9$zIUmR$bHv5 zBjp&TpKE=hKfUo!D1S`UktS5aSOtpAoh z?+*Fjb53pHP6s=JfjDb& z6mEAem~9OqXs4epX003nvWxN7?*}{*5$$M3O@Ui!>T15Nq&?c~EqDo9G$K!euC6c) z;jsV&n|YWCW%_tvLB6p@i<64ex^0x(x)uM3Q@h_+dxKN>*2o~}+hcLlD2t_%O>^YK>vQW_| z@)d02yT|PAdV&x{xr^+^l8w*X@fnh084WRfq_soF95WI6kdW#LQI~6yaWlb_-|=^- zzADgShbfmOJX`GQ$U|UyagU43;lf~j4s8d5NGw}_k|Np*I#*Kq3$bkfVw#kAW5AQxGC7u6BYqXreTrv9Z@b`Y~GiwEv9S+&(_^1P2M z{)woq{ifu;=6VX2pFL45(h__{#fL;Uc~eGQmYxlA4J-$JExD3IT$%c6w6*yXLRN+4 z#Iw_90>_$4>Y0mI#ZZ-8ut~T^j(dIp^FWB0m55RJ9A_=+p99$#sKt5Lm{KKFbQqW_ zc%X0tpZ&(Pb)boD0~DLLe;7QA*Qk+AZoYHzKOi1^p3dbYkL5f~NjH$4S8Q!?p_prq zaZ6Ku^Wuohx50TNE(^i<*nq-8w@3XYzb|c!!1b{6TiQ9)S#y=JpMWpwC`74eIE!Km z#FJU#FQPLp|Eg+weu@P4MuiCeQT`Yi*SKfosn8ui7m*8pPuAZckbO`ctyPBd>rw*$ z?cjYJMdiX!hwJHM4`1A=geLgY8_cXf41G1ecWMF@qHgeyD}<~V!Z(h{Y`V<9oR6Pg zQ7PM6t}xixyhRc*1DlW}x+65jSC;sfx?~r_$F;S9DUqp3j01z18L+z`FcWiaI*+D@ zJmz->6eZW$T4q-6Qz+uI3qVnc$ENqMF)CY+pAka2)8Sky2z^P7Ujs~8=Clt6Kpk%F zuaEUAR$#+Zb2h0T_ee5h7kDhRp+ZzJ*-Go))awC|mx@sPvA~MU3nb2wG<7)1StM;* zN#!jeu)+lzcl~w+P?2KnRK+(V`u0VUmhJe=FK1lkn&Bpyn$8{EO{{yIy$F}9p0qWP zG>pujX?*%b4SAyeG7F<55#uZk*qpRd*WZ;t)`;q=lW*hq`P2x zaD*Ef!(t&7%ty;LkB#kFxUwR#nrBb#m`sM@mOfYQ>(wlvm0%Tr zBw@@_$A$AnhpI&6a*y#rAtSklMr<+tL}{Xzs(jcBi+>EpTBO&G|5WM7OKlpr5a{c7 z)F2Ks1dkBcFda#=Jp=~CO6i!mKtnzOlOwSx&z{r=$xGc=w+XN5S-gY=E^e_25*J#I*x_UB79US^?yH8^r#$zA{}&2 z+LCt*0_IolH=V4vcyW3Wb~6bjBpZLB7U%Nj zsg^P&Ep;t!^ndVYU$oeWD!7)!yK1OHwG?NVR!A{0@>+D1CoS@C%IBVDH&Bnpxr$< z9cj@&L4rm}9X@Zeadh?I-nv#&Z^1y@ChJA|;zlNsAy5?#&S)DYo z`A!22;2>uPL*jK8E)EQreEY1g{&}LGHS4Kxcm3{JIUQe*z$ey*WDW%oMr=5hf+4T- zOx_4-6{=t53`p=eV+cmvhu--#-$JQd&j}L0Jc-R7)0+O7*!32mc>>^gfiP+6RubJ7 z50?eP*)Hby6G27S$9!q*%RTBN7K|WUGpcT0h|}b>nhx?ercO!0LZ2C##h2r}slK+} z7y84b@ff~3{U|z&g4My*+vlnlvUH>Uh)U z{77>>y;|qEF$Lf+mfi%@FwK1Ws>HjH!RAt6MtURPgjVs=!- z9LYk(>wJ#%#7TGbHDs%Of}C(0wwXpdzu~ftUFsTf1jSBzh&w_lAJuG3v5WT_ZgZ`S zDojTB4hIQF6ZlFwLA z=a3}fhMuap06EVG#-Hz*E?526Qz3*&PaTK6fkyjXjVk5(P9pWa&XFE-oFF^rXnXpoeY)Y6$3ZMkx z#@{uZd&TBfL;n`MI#3WlWe=U>Ntu;En{gWAP1R(L#tQV-bgff-Uga-h3TwXu`ZH@@ zt2XiX%HC}#oJo3PO85Bw8?XqL?*qKQa%rM(rn#MLb)%)6dN~bs6@f!zM6dvyTEkSEqK#Y6_fW_Pz zqJf%yH*&F{B(a2pL|&t&A)v8mt>DxMIyGYsusPEAHmhVWvPLI7h~PZJO92ZRH+i!s zzuRokM0Iil{M-f|6p_Ms0{JfVQT<8)b{cBR+>j=gL%&pY6tyTXZn1mRUG{`xxe}hu zX~=?1X|`t3(en*pDhJwm=!fM+AZO7&;YcjbzT41xUJA3$`vM>`29N63-- z$MMM1$>)Jx%wg(f3lXDfgG+! zUMPuIn)+kaM3jzu9!)>VC(dlWm2rw3ef-`zgp-MA4*mO|CQ#Dr44)o%8*d9j2ATO| zPPvgRZg%N~=BY+s!Or^#b;LK^{F(A)qDBX}C%Z;i=5-TQdj28M;STdS-{?wm)o~Jp z&xUu9&TOz0lT-3{ftTbWrK+MqTP#y!iH3C=Axxyf8wALOPVnRGgl;i_2=PtLzw1oC zYnJLAGvsbWG}34%&y8qmp#XZNl~mntUts2?HOU5-LDyq;tcts34qN2VZiOiI(eY}M z&lCRSS?f*rW7h&$o6@;=LsxO#Ps=wb1G=tnvJO>@*FnnC;#voy^f~Uusf|_3Vy{B5eL?JU|2w`1hv`T>w~HyKA>jQDfQh^j`;xG%|QaVaZvAK3dFw zEg`t^vw-On=)RU5ZCMrA~n@oWg z+1##|CxfD?d>^+^K1AW;g1JPZ>-W7DgQ{i_C38y&5fhS~s(qGWI*HoDP4U*B*5-uX zZ^bJ7yoxWl8x*D(bCxAsXhW zfm5*(Ejszv#tAwBvvLZ?Hr5mUb_%cPdysoub9BI0&W(O5Z13EB1xx%}FSqPIG} zMTLa7V}NF&p_aH#YUirJLz7muu^c5tX7q+_-Ct*0Ng#H?P7DX=xnAy@7~qCGjUWU; z++}J3lpI+<#rfc!I?*n}oZ+j-@;I%$Y$E7bA^Tp$*z|6TW7*McF@^2AHFOa|s+bs^;OTz`)7FwOXemdX6LXE;EX^o+wvnYk7HsZ&m?!Adv)Rqi$*)+~)q;BHi zfQD8(XVFWu*+x*MIelUF#>yZET|Zpj#U(|z_S(Nd3-SG-&K3m4Uax?PBahJ;J-JgZ zDNzIQ<>%jtJ(%n9m(2L<{dn5; zTNH{)v1H$M8R}c=3&PX)`s)B_ek7y+fn3I8m2T1Sel|%Szp<11BJecLf4p3@6ce6A z@5Qhp_DOv}Qr*d>65K#z*5y`Wct9^6Yb;6$RUXQd=riX9>8AEAR z63qFMhDtK7Y?8p#4dFv}F6mq;?R0W{c{c0FjnNRDCV0z`T>7figSaM}2$c={vWZW1 zqd#TP1)f)dGIUqzEJOCbgZmVP%w) zvV`85GxCw-^_rD0VA?sLfnbSW@ryY;9i3qPsRq;hi%UAZNneamC)IZ=CN|v?T|yFQ zC@RbPwu)5w{%J*ALQ~ zIq3FN-xQGnou%>O-;aP7Hay67Cu=J>Z(c>OQsZ@fl3w!!$?3udL8H$Q0RqcUcx3Jg zBY7=h1BrsCtEjqwE|EAqW)xz<=IxoBgJHGeuLud&kZ?KC8NC%s>OOD9WCy_)a*s3N zW24r$5xhi5^%)1}NrX5Cci4AtIu_pfL8FHcmqeSZH%1$BDXqq4ftX8n><@n@+Z}qR zm&uLi5?oU}y^BA&y>Qk~-r1~VbWRCb5o)*M6O7@&6~yY_`q}%D1ikq(q2^!VZYg;= zX;{p)MuBtdqdVu?yxY=hcdS>YLXz#OIx+`ymkIA#hk^BjNaIc1ww4)PpHkWHE4(x^(@VLQ0C+Giu3E24Yd!Zo1*zF!KH4z^7HDa zAuDZr6)?V2dlxpN@#;_uq!a9YdR0CK{9R@*G{;{xdC9-mruN5;Ze#0vFw+N_ug2_8 zTSQ9#kQ2D|QxV+})YM7~jL(=pjrxSgbh?yNMd8&@BL~_btTH|VoH#`5XkB6%d0w#F zyHq|YlFtiH! z*lSpXn$FVkk%ZZDp;DE6PTXvbr;I<)is+KRI`%Tkew;L<7&a~CxiuZY)Uk7GV4H~*s!rsh z($Wg>zt^XZGog9RIfa;YIRp|PEE26hG9+VKJu%(vx#Zg|C@?h8`x15cjjuuXaly67 zlD&r&G)xWT&HfNPX!jJ+l8Z%=+Qy&H6DHtV5?SUuDWWuj#z%9}f9J;=isN1)>Dz%p zctU*HqbgK0p6rP)5s(YOgqdq-7H3Q`eL@>0KJ_aXj*9BO`|^2SxKmk6w?FS2C@;!A z2%3ItFt;O#dTJdb`4rcGiW@`vq0BRG)n+eVA&|=OP5E(fK&kzQ>Z>A>0;k*BttT=e zIn3^9V#&THmfKfkOxzdwUymFj(&I!c4nthRf_dnS|F~YD#rCJcIqhXJ!H&xdfm24~ zbpKWgk}Z=fopKdaUB$wXJN$DSgL5D*A-Ock)aK()fY0JRY%cujZp!&UU9s;6J1aWa zYR?`kG7Rw~MJpk7{SaluIp>%)yOS({yK48W9Io zGR?&Or%j8(m*S8OyQHS=g!7k&381G6BaJ zt+^OGPr3K}Mt-K^;wmsMg6S0XW;_984_gyiHI)Zf8%IrtN~Y3Z1uUk=##`zAvixlh z%O(69A(BMEw62(iy{`-)u|jD57513$?*pl9s1it=#0;GMbkMi2ipzxX^SRDR@ZcvY$-|%+sg1SxY*R~vdIC&CN|b;I&?FQxncz?dj>N}<9#3u_(wm|r z9PAoPr0emCQyo;SWR3rv+gT1!X{|>!db1G65HD);c*_m(W~ATmQ_f+WI!aI%J7*1Y zE;omV2C`;2Yr>HUOG#L)eyYf#x4%azCP<_V2pG+C+mO{~A1$QMgo{(JA0F0pe0YKW z${C&$U8V%7ndZe3wVM2lnrh~l5?@br;wE44FE(jixX4*9zy`pVjm;c8t4-MAa_gR>FnTs@CP#Mvk%NeB zgLS>R9HF)jdIt2Vj;*+PG1*BIv$8-)pE(-2(N^Q6%ue2&({g8LUfT~|>i=RH)0AXEh8=>wlW7Db*LVbExlb@k2I%=P)+K|%c%zaTq zty{fZSMQv8eLs1mpRk!{NL9apPzzcn_fPx=B*z5=2|u=|UYDh0ePcWP7+o1_UGE}^ zEUS>~bBIpNJUkp$=n2DKF{KiK z$#8Jzfes?>bLoDxUA0f`PfxG`+w;Aue!o}7;*@R0sM()a4MW;LXYmIWm35bpOphrA z+xJsRJu-X>ZV-Dwm>9anb>{zYl#JY#trwaARpYT2EKAuhnH}7He=?l)(Ddlwv5O{RxcesbZ1U>&4^yd{z#;i9!>>c*?kV6VXjB^=bHH#n@@t|^*~(s z7BN~B{@YbC_6|YPNUtqFT@(r&kABZ7RpsCQtPZ0|>9KmA?b7`igq68;?xW)mj>w=Nc7~6<-I( zF7ok3F(VmCckTZ&(>Z)_e0k^XmGS{c9TWg4P5(iQMn9%X$5bp1Ydi!1AhYm>;-l~GJ4 z^-*O`PIm9Ga5BX5sxeK}I|My#Q2x18hcg8gg#>LSbI_AaQb_@W0tcpPM|}%VF%BW(M`S6U%v!1DXBOe9h~>r3${ZU+ z*g(^=!{F!aaO=+uAXh9odl_~y^^%~68@tHJ>bkv54&#cDKY5NZ1fa}9MNJI9cRgMV zu#FlGY9gI{lz&WJa!o2z6%@^iKcxhgrU9p)h5q7oQt7n6y;waIB}%Cdp1RnxT{@u+ z<>s>(zEGhm#}y(=NHhd*Hg?t+JE}67VTZ?Cjvm4YiU#!68FSr{OCC{2@XicP?X4?l z&^oeAh4W0qTZxi#r3_{geq|$S5RC`TfIaL|4+y98ltQLA)Y3>oAx6}oGuA@EZ$nuC z=4F^4z}ehQ*ohD46lXNr_Bg~y)`)`0z-e_hb&^i{<#Muvw~HRRWGxHgYdTuIPEcWi%ep?8kPbJ%>G0%rweDd%+|KBLz5w>n z)A3U{PkI;FWr@V;@OwEL6X`b&h}u&Sg&lZlWO%e_i#;}W9pc-^q2Vx!PQzF0W@(}s ziq)%&C+fNExx@RO%9&CX!5&ITZ)F0R2|5W#h2Y}yj<|vA_Bk5In~3RHXz6*R=|}nH zOid734wTz+CL?O>b2_%cc-U)`5hXisPriAaf8|#{M(X-(Hb&*_HLUS~k>sy7Q4$U? z@xV#Fd+}cyXCp1dlxDBoH_Kw=tr~5kA1z1ZA0xWo(dWe^KtI)@RVWQ$4#y}Uxu_rj z_Ot$a%@7Gj*KG%0KR*VwiZz=vghE;_w`{b?X2st>D!`nq4;BzB&sQdNy8TUmC^ID` z>D#2kvO-P@{ydQe6=CP%U!WfSwOT54#j(UsABK8t%O_J%;6BpjLT;UqpRoxOIJhJe za(=3@=Rs@Kq*!q6aIM*spcc+53CDlHi-xS7Q{*~M+zTTK@ui}CmzN58h-byO3!52{ z?~dJ^4p+sALz__=&hr}?zDd3_fDQijozzp6wM2W7-vb^!vz4m52?yXzI`qTh<1zqO zk;xZBJea!TST^k~nKo|~^pE-FS8LB^04IhTmqyNFaQR#eui-`)MSrwpfEgv}{buKR&C^&ni9Ew1Vz5iC0DyPjb5Nm%{&`uV>4U zf!grs$D4z)$>;D>T28?IZ-t^iVP0RuC-$jNey#;(`@GO;FJdqibW|1u{#A$*6uv}jkqhmG_= z%Q}Vw5@%N(H5Cvty$a$1UdJP`t9q}!={5hF!&SKn8J}`$wo!kV3=zY1;iJY7DNW*S z!RU8m=m%oHEU#G(PvEN&eQ2DVxCX31 zHhFYcGo@<(%gnl<{PYr_jJ{2TBYr*R`8VbtBEGzv7lSGDoG}|Uec*0%QQ4^Bkvx-} zm6M^V;m}|MPK8-fw-dT9Yc;#Xgkc>x{M*hYu|sgpRlE zKx@HjqWW3i9V@afQS0Z;iFawtTRqB#!|2hdLiN^gb39y}BNHV{uOTXE5Yq$57K4)~ zxb1sa#lkrhJUA>+U26wCYa5JM(zPQ}oG+r+Hb4NQN@uprN0p3_9dY5^dTGLQi$Xq) zPEE%r2AIIUU9`Ep!IH3eki}qY6=R$VUprrF2+b()i*tM-vLR7$20BoMZicGi-j9}G~xWoi;zod&~_QV zKn|fW9{V1rE|4X&6-f|-Nrz*ns~|0WiHm0d_GYtb9e?%n98vt}>)^TbxzEhH0i&-+ zM&dBYW%7(aRz81SfVO9d&MH;J&)>Xia+m%maXyxDCX!j`a)>jL5W@6tK+csEG@ffBMUo0Nr&CNCWY7b6~3r}NPlxY>B zV`H_Qt9LnTpyZ)IpE}A;q85LHsMAY%ld4N6&saM9Hky5YNdSf4*N_5Z?$4n;Q?0xJ z#Gn~zf5~Xrm~$wy>pbphOr&vze0q#4AVaOZri3XQXrrX}crH|an9vIV6z2Z`a;1B< zQ4({&_honFF03WBB!j_DE{Xc{T<=_6ftQKCw3K%n9lgMT>)L1-?(QlUXLMco{J zi=Krs1mDt4;}qwYch*=Ax^TXGmEx&0ax`ih73HO&tVXFn7+4!jonlGWQN@E{Lw`}( z@%i#Wowvps3g)>vOK!ZVMlI5f4{*2T0j6sB;k zGbHYFX3*QwYoVh&>K7%ySG?!oSoV{jNo*muxYs(6oBLdlp+s3AG@P>YUJX6VEH}z3 zC`CVyw(D?rK!c4(YT{)Dh*-$zZm29vq9;W~i*m^=!-usFh??9xf4Gtk6oFkqz}{d< z7Kr36wzJ)d^N{zzL9gA9(nI!Or6rl;9XPMGTp?F4mkvM4s|5|;In;iBESLEKl5@$k z(iD!klefv2p=Qm6K?H&{Z^`x;{p4#;Id1-AYuQ%}Agz>{b(dsP5keJr6DFS>fo;R> z>b8#LILd80l3Nq+KCS4s4aiAt_UJ7(0)##9E$<_-k6N)M8+vm_*>UI0$As?99Ur+7tL zLnZ5iq_tp%d{gIdc6|)6DZGZIk`UK`IwQ~kt}$mFg(!>l1RSCQiX5XhTW=4(efc3I6L1Oj%35U z{j>@FwoyZfcIdZL#jhaJ_c%ALNntUH71G=@gXtl7vDTYjT&Sy8QB7 zAIR{y9Hq-st|wP&NBGC}`#6QxVRc+>RlVLLOQF(emcHJ7M6qjAa!)BAn7E*A2HHQ; z2123NCc0$?a@SUGf3o*WF!a<-HA_(vB6EZ7@$AP`1A`um)Iz1V607OyH5r8U-Rpk$ z1$yV2yy3_y!q#bPjCm<72~x>ZR%yax?)K`5PUh%#QNJm`!&aGJsa7q4iqMOLu921& zThum>9{@kQ2=7mg&Y-83hrf*vxLDmysA^$Q0*BC_JjM5iLu!Vo(q@gN?g$h!UrboU z__*hgL;DOcFnPTiTHKDz43GVj+*y41)$y&#OlW;1F0&S^rfLDw_Om3sLW`m3-n$fs zZ9;T58dJ|#oc>Z*K_I2G0tQSGE?f*I4*T4rNEE7(hIzI6u z@%3g00@~(m_1Gy)dCX}RVPCp)UG0TTyN)NU7mG-}1IL!08J`EMyQ^YnN?c_*L;z%` z!M>7-rx{Sf!SzZ|(ICe>q}?OQUW3#WLAaL+PBYPv8T4OP;+ya#dR0~~iQ#{oXsDoh z$PVZz4=5{Z zH=4^h@&B#Y4eFh)jV&;f!=DF3}up7cL1zIEP)G28vK&J3+l|Tnpboj(}BTA*K z(TY19*WyaUU_SgHCbs8MBr`2nf6V_(wB>j`a6E<4W7%S^y}ZhccTs^a%t>bWli<#< ze2I^6GvTW6_RF24{uw1o-Bl=gjoUt9|F2ot9VYJ6fKeN_rT2BUt6-}-o1&Xt6jp`!|r zD@Cb$@C0G9Z%Na6s4Xg!S4f8*gq*7TfC_U~=+4v%t(wXb7F$J%*-uWRo88BTsFP@6 zk>Vpig0Yz9?Va{lT_Qg?fMnzY?31;==M#6pv#0+&>56$}y*)t0-=wJp#{Liy69Z*G z03K;kqpZD_mQJg_?5t>)8EeYP*Vth;%oS-JWt`Oxbu>XHL1NxsfT-@N2|ltQC!Cm^ zp>c+00%C2rJua6`0&uXrZrsZD4OheR z(5yoA)Zq4rVibNE@Zn3=S{8BVLS{|pFd5c;;SV-R0oW)7)G^+T2mDZoC@^8Dl+4WowdlM_HYxPWv@u}^1K zN_AC1jDZ2(MMG@fuglsXkUGWu%a)Xfqr`xBuPd{!H(nN{?gd7ARNCvYXjoF;`RpfG zO+luI;gXs53(Pfv$; zIQ$T|j`9|KteS+Low@{pZU^PJHKV_HvKIWXnFmv&|6`V4lKb?0mz6B1&wYm8P~_-i zh2nU6l(c5Qb1@xAR-EFAtnM5mMHBNgC2a|O!&L+kRSw|OiDWFwV+eX4`3A4v9T@V& zd~dGItAHai+oq>Q|9Dyy!dDL|cw6H$ieTz+v_c*GAU31sj<@CGg5FOplW^>wiAb4Y zIn1E%0MQF)6LU2k_(kmDNC8jqZ0e&P`pFA$i@`BHL*2ZStCZaE{n(Vir#UA0h59Xl z`YA+b681HFeW31CQkLda1|xBswfrVbtUkR0Zx#Fj??aa`BRDyqH_ZMS5!$8b^DV~4 zwwP~llBjFw8nEv1TCMpiZ~50~*MxEf1W;JWf=i`JXKM}Pp;ko7m-;*pNtJ`)$-ZFJ zDv2j>bRPY9D3%P14QVgk%5LD6sY@(&FgF{3Pe`C&Twos{=th)J+;I`~*QeOSY8IHySjRLFG{3nmvs^ zyS~j@JS@4%%@1Ucm@g4Gi<&-4zxi7yQiQerlw+wt;!pcqCudc{n?i56MbImAFgl(K zj0I0lGfv}M#9vkF{!{3ffxd?a=v>G3pC>w~rIkR0m3Ms>WFRyy%`7K5OF5+7={wZd zd9EsyLx`i{_PS%{Ati^Mll&&!9N9=tsbM>Z32G!&ITk|*dOD-ZG<uSHx~*K(U4hT67c!)qFZQVmS6E@+tv z>hFA-HKmb5cxg^usxtIAhV~{G=acGuIChL{jF(|@4f>l-mw0MK$n^?j`ZIgvFf!xB zA059pLG*9urYLLIP(fMNQk7{1lGr?W5x>QT86qm~Tk)g{+AM2+gQut_KJE8Kl7B(Z ze*x$&cKH7rlg#*Em}CYPMz;Sz$czMR9L!ArS^aM$nVo}$;eUu^0w_9B3u|W+M*=!g zYXfH!VG|=eV-qM|UMMGLM-u}ZDEEz+R#4^SODxvtCT9t8Sc+|NH#fIY0HG-aAqh9i zKxQDtg@x^H0^Eg?h3)%-8>g3@)8EyP9u}+Vu2r2`+|}>DZsz35Ea}74geUwK5Ev6v zGXo>=@$!mhr+{_!4h{ci{@k2-VE#*A?+`ij2EQ3P0?5=aJTRnLKIW4IsRfu%gHoVB z;6u#|fU7LPrmR+WVV(x^E}&5RU&00W=dm|2T{#u(Lbo{J<1mK43inU_tILlmMAIa0ur^ zV?#%0XJa}?TOEIPb;x-Jzzsn;EI;lUkh3eWCXg>Gj6ACoz)wXqXb4!o1+e4$pH+W# zf$iz+0DrOoo-rT@SC0pKP%WSwK)Enr<|7n9%2@t8e4}ALFlql@PhfpBgI~M0-Y!2- zpa4IvEDd#j9GvOCT!K25J}6^&kaBUV27aD=X#l3WV>%%wFZ8jb-i$2Fv7M=}@jbT_ zQveGF7XNjn0Kb$|!+jXX;EuXB|0}a1R3rp&Z~}~rzy~TmiFl^DgNp0i zzkZ}v;Gu0n-9JF81a&3LwM5i9xEjrU1Y~OY*++V$azx3!CM*2p{#h|GF=27o0M0-F zJk-|eej%$*&LBUk4ZlcyDtm{=5Dp;fJg9(AfEs{#zVcn#Q(OK3<&9MTpGJ=K`-9@@ z>Q6ET1Vs<78PrGaC+3F)T>Z0Gw$ByB4FF~>w`Bxg_xdOo#_SXDTZTzy!{Q?H?C~-8VQ4e)sN%qQW$%r&0HPO$pu-2=MPw}`g)BhgmT28LFT@v{|d3%vPPEDz5JS${JOmV{&}k<|7DB$wG&*Zd3otw zcItip#cxgr9@}}O3nZKA5X^n61##a1y8F$z0QkMCLYhN5y147rnNRWsPpXL(9Xel*8=s@ z%<{#j0B!M8|Jk62yIBQbGBab6Lunx+`fKk9+_jdgI*)XApE(GiibfCeaRlT>ISZ~2 z`d9RwWqy?#Ks8*iVE0T7tSaT#?+QS5kB@-O5A_Lt3|!y&4ZDHwJ>VBG*NgDiPa8n> z)VHrxp7z(T7O-mW-(!{bZwQWDKDY0n@3QUw#no5ScklZ9Qrf??uo^7F8DJBCdal1Z z1jwc;7@J;lBw{C%T{M);g7rD^B9rGdS8LmjJ^{&GsyB@G-yQ@hjI$xlt+)a%bRB}; z*A1I8Q7EggycMTQZ!@Gy-k#+k##hu{S87+as*2Dj4#>umvzFKH#8wwSThQ4<>f)!>gw_u!6E|;`OIEXQkh-nYU zU0*g^Px`<(h9_Zil(FFLs{45AaY66c&6Vfdv|KoGusAy`Lp(PQY%D$L2e#;FVXp1`o@z9k*I+WnGa6aYm<$<-lXj1A~jIB9RD^5qdqh4xy*K`r7I#QennZc7k6=nN(fuX1HRmKY5{EM{hJwIHL3(Evc!_?3OY|9h>d$gi z`if~G^aXelK1eK%@z>({w>ar)1-)L1Q$|=n!TyU|l7zoFtVU7Qt1M{+d`~H?Xjz9B zx}RfR4Y}3NnrGb}VKHJNlJCk*qKwVA?ox#SCUU%t}A|8OyqV*Po zBu(p$()_Q)B{Y>TtM%h@%d=|(+A@!3*rd90w_Tq^(OjnBp9jUZVvEm3^+DaG&o20S z-FU|D)WG=FG(p?PsR7_KFE@5?SN5KQXK@8Ibqdixq7QUx5TQHG%FsNgg6~e;r*NDZ zB#9!kd~(NqYBvx}T&WFBoG_6QQ!a$kxhdMBBg0rmFAvPJ@>WBUyY>YA#ILTtbb*A& ztq~);4}WlnKS_K$?++p!&)G;FZgRm+tG-0+TGhV4C2!3^5)GXuinO8xk0(ZFJi==A zjAF&2JKB_@h9{8@%INPXU}fb8RE^ui4@Gl*&oz)sS|{W{u;0~VMuo%Zl)FKAn*5kJ z4$bUMY(NhR^J|C=C;G8?=~#unpc)~g9dlXs-R?=#=cAI-$dfXs93u!b36I2~yqGuW zeKv7r39M7UWh*DN&Zya-4UraGk3LSO2|*XMp%F(szM!*_3}mCTyQlDFfqARvtmLd6TrtXj1-T+VqN^xL{O(b3gJ4D8mD zKSNhT=~!Aq^47{aA2&Vd8{&9FLd|_2nj&#R-FlK?5z3&)L>diAask@jx9$}T@0{~w z*U?X!l6_f%oRps>fCe~AtIh89G$Hlo!w3FI8~?Lr9FB{?O|lnUfXq`binf@b8%X$I zx_57d_G;s4UCBE?zFILFJOiD08z^8TLM%&A3RP)9CcSVub(XT=IHfn5It7o?uQLp1 zKECGQUgZl7lSyUu083eD4M>J36@zI@2Tz*2cF35X-wB9+Mjx@X?;|G1;t~F8I}?df zW|oi$TSsNLID;l8*FCZpH%7YK(TtBBCmo!Vhs1k_viHxFj)fbVAI@5{8A_lQ-f4TXigI|pN8K$pc7 za*@6F147|bM~YLf`!5e`J{*(4siCQz>UFb_B6&01LKSG%v;c@_$a zEZND9)}E=rPZtV{KUOT=LuaPt#@Sk^Jry}+P!NRYfJMiwf$b<1yog(*SoA8oojliT zsx8$!Nmo2X~1kXrSkqikG6RP|A3e)Tng( z6C|on|KLPO8x$`i9?=u#ughYwLolj2){|i%Y6N-m)G^!rUZ{)XlhvIulSDSi6NeWE zHVD{ZBBvDe$ikzV)XQS+|0cOcxpqbOUc&5?<<@(_zsF9_Q|)0|vGwWGqYcwT43POZ zc3Y1c{19(it!kA9BBa?&nxY&pPSD(V3M!yPmRLtY3#i}dg^lplKh%2Kw`T~s3-dZ5j2JuU7 z>4C-c<+U=_LKOa(inydBMfS)GWz&d=8Aeme&KgBg&Bu#;uR!UFlqYPLB3g1_+IXBU zpLow;vPrIC84ubns|;jfo6#M{h5Yf&*?Up;`Ul0L>7b4o!Dc zJyDPs5CIbdxl7gTkwN`HB6Eu9o=S_!y37Uq#FZ?o!!gFnM{`m0Fs?s1_X+zV^;5Ry zz^Mj3iC(Y694o+s#E&7z^7p|AN^Zvr8IFVy7f2J7&+@jmu{JGJ^du54$bh#(jX$qz zZ8nx4r6mR;D%079`Yt*E6|he)IDDApON zNXUiIAz-cp#`92X?^@Y6^;?0+MywB&cVSp2_k{0dg5A6Wd2m}Y@zP=V0c_!Kncz^{hlyLF08m=CrC>7Q z)kPxAZ0nd=qv}{`N>t*#Q|Pa7NG-ijIopWPZCKHIyJ3b7`@wX0^|1?En8v53vQQvl zNtY51hDq)N%bZ=V({%7^4_Y1S3Gykij7L)rBrrcpHTUSc*AaF)H8GLXX9;Qvr5|!z zuXvo(x8KEh!!lqbi^;Phm)Qr2;WwoxFO)XF{tNdsmPUzel@WUkdgh;qW9DXa%405{ z5WHlJmfVNF-~f1M|7_febIT!@%3-ejj`XpgmuPg49HR3|P@%_aNfB2!VcRKe=n)f# zzAi{pL*h2S4r0W3OPi+FmtjV*r1L*WKugy?8lYh!@G+Rm0b$v~W-nEhCsAY-KdKx)RYB2NgrS;VR5Pdydpv z??iQ>E=pdksba#*s?ni8PI7=ytm$(cyg4J&E}rceJWJc^3uptSX-mvBS2>V^LT>|O z(Cl^9ic4*B(EAKMVZj@Mv)GEU=T#9&My$X;Q=(*>E;VS8C?-c%-}zjHQ(7t9I@1(M30m%a<*i7#u~kN7r!^$W^sI> z--KGb`Vwz5E)E;-@!=4|hLTAXq4*OgzT}Wd{A#367&$R|)ea&jZ|expKkSfo%1zz0 zZ}OmYIHK&oC04ti7CxW8AdFkXF$*5!)$xw|A(_X4d2U?(6zx(m=%Li?4V{J#YxVh3 zREuy23ZYe^-Q>s$D)`3ZCS7dKt|B2*=Fb-`>CU_TWYf6;9)be}bW!Uf>HfCuNnxVW z&}vOCoKQ;b07@j#2raY7i|H_&a{4A%+9>uqpvf(eP=`AIRgf$9AaM=uRyvpzeYkl% z8`O_KFJCWbQKuUl!dm|TX7n8_5W={AY(I*tt>My}qrj07X5^&aa{5lsiGAA;^-JN4 zKYfPufy?bTAtJzKQGgB{pdje~N~gGBiV;kWs0t8%`Jn11Z{RYJC&eX<8?VLFZlJq$x4Vu7uk=rIR$QY=zn zNm&R8=$5Rv;+yHtRB&h30k58Nh9aV&VST{&1R{ET?G?GnuUu&yf|u1vp&1wVx)^Dl z4L?<|(r++RT7c^m3YW(v`qMX3kXhX>*VFIFk*99x9n!LcS5)H08KuubwGJ?bK*69a zq8|151{PTwj1we32wCn^3KEzClGq~!&i=CUukz8~w}&6jOnY3N$hotJ~F=F zMTKOE<2PTI`#Edeh#yqNB-KDUiR+@(01z&@QCGETH=pRG0vhzz_&g6OmDqU@L*0yo z4-cBcK2-pJ&J-x~8Z)?gRJf8I5wo~0)Oa1DtZh6@FBQG$EgL1I3(E??ykn({YC=8Y zzhJeMVC52WIxi#*qst~t%J6E1lZ6gDWuF_#pfFw3j?MY##k%UGeoYQLl@EIwU4WGr zQ4!ML1g}7k>;uUd!=w|d^4M%iLN?0vpsHPg?o%iNceMMgAC@@~4V*~qsNBW~q39~= zV+{80PeOjhIf^n%he-!i`^R`A~af zNYa6%a9nDe4l|ubUKtaVA$2NNxBhS-Fq_pFs^pB+i_HK@Nlo>F$b1-&1ZEZq869cg zvL-n`h45lxGptjBWiFE~1Trncaz15iHwO^?FbMOdco>U)3nqshG(n|PpRKbF zVlsIW>ph89Wg(grfApx+NO2&-07S!ByNhS2a+SAhp|X>GZ)K+T+5 zmCpIIV+NmZGkp8VRxTU)K~W9uH);)0l-LM6|Er0nx-%2qDHg90?!n|zJV9V&NzE!_FM z`FBeuPd~H-iNw_wl|X)I(54YtY|sh|QY=Q47p9GXCREMhd8(PkM%mZ4<@g5J7-;ltN$kmc+O|-}>K_*a}BR!Fy)--XMWFWyj zHUEG>F<`fL{d|hvQAYKcnyz$iqV|cv*UTTCSq)C-@IE{VJ-@#G_s`GWo5|G3owP&S zso&K-A08r0a5<^31ok&cc?=&nV-_8!Q|mIh0g+@Ss%$?`sX6<|Zb$~x`Ih>awHH;^ zSxBrw-!bdCUaN6i7gr%jMbsGn6!9-Oq%B^$U|AR5{u5`bEt3?+E3-`mv*5U4i?uSY){DFV|Pz=)(r zR|{t))NU16#0!Hqm`MG}q)3wO}ug|SaD zRO@yVfS5|CUTNEK;O+QmMFSI=X5n4il}%=oK-!jz^RfE7M1yO6-T7jQ>otjEJ{ zv~9lN6=Kh~TG3cM+V3KFY2f?WXp4f3vSiTHxwsmqnFcvIcpIla!d!WJc4k}ZO5$Ha z!s9s1t8*6P!SZMArmYg>*>)^&P8hppB~xJ2$T06u#bdXgBBG3hW2sfq^his3G}-kD z)~fG@%%FEq4(bYTT>e$dg$L0KP?2_7SfhX@$bPr0y5{oX@sMfU#}oTBvTjcFp&ECB zTy_`OI{RgJrRC7`dr6q()w|ih zBmKanxE6(x9p;VLdNPn>dWI?CCNe|29N)&&;6Y2xZGU`KHn`jCmNxg6p(H5U-{$2O zOx_=AB_7X82NjV663ccmTt2%J|E?SKEd_l&&QF{#tPEZ69f;$KTK_sC?xQNhh_q}; zlQ^988=W1U&xlzP1*(q#9K?1HCv0;)lGxHC$Lq01$W_@rOICCom?|o!ZPW;%1VuN1 zEQ;MzMZL0^E`pbr4@1>qyPhy!mO!r#6%lju7K~-N7BpV#y`8Kd#i;X#CZu6#B{w!N z>+TYy`c1Ln5uHO7%?%23wiu*nZSDJn3aQYndaTTKY&MW&DW7aNA*IBCt8cT0H6-$t*7tNo?=X;oTMaBwz7=EpXQPy3 zqp{0DsmcQCmKUb9nCXrDwF`9y%C=a>qWIvvxb%)3RwCzsEslNVx+s)b>oduA)=j@X zhGZ)5RP@pXQ(M~if?qS_S!A_SRz^oomei!8wb-a0)OoS+vK*|eV=t zFfB_clV@8V4fXDlT{kT!H7Q!Q3?UpXZX8qc>OEWlc5)5PM^E*uKyjhvYF2*V;A&8u z)OdSO=f?WC1`&^#?yTw1*ppeWH5?wH?v6ue*i)JkY-Jwms?4st20sJegcB!Sv}WZC znAzWbDF(ruTExa?9`Z_+zjOSx@ZH>XgE=jolyCIwtJnL(r7|pPp~mZ&03|b#mDuTX7qK!(j`T^T?I-g__?cVFRHw$mbn>A zj}WntmT2H-5ViJ*DXYBA>~u`|I=-B(I`Q^D(GS?;V7(6{;aR*336p*7C+evq08E%Z ztu!>H?l?hT&4<>)=Xf=b;{n}xiSsDxZ}Ws)J9@}0W=>QuLr4F8w-&CZw%xkoq!wci z#Oowv&B0+ANb^fcmHsK8SS_=dU+bcTd4v0KDCVAa6?o622cC+|NrZeit@LdAV7}V6 z_@e7TIaQ?}n8MwTk7v^EP+=jONV>=9Qz`{FzF0=fxTLlUm0`FPRdXvbvSIRaaTk6= z{}VZewKL<1n-T^(=aW8qR<@LHC9|3)>+KGW8%5)i8N6r2SCx#M@+dD*;*uI7sE`v1 zkdReq6Nm8*y-JKWz@Pai_q&||1}?-l?yP0|bYx8s_<`R1M&0Ptw%i-kq@#r3>nL*6 z_VBa%sO=;+q=uZF*Qt01|1QhcCZoFr!WJt$jge2{{B}r>Lyo~gj1${5Ka{LpTNPft znK6W?(~0k^rk#q-?h)%Opn0cy$3-hZ3adNzJHt(lk{ke=wZuwTzweaHC2hl#ft#V> z{!?_~#E||LX`|D6c<8Tb0v_^O)!*iaMeypErs8(!*ViV$Mf5`e`V*UFcZ4%%lK$SV4rm8 z^)USf3QEo;y0o#L(h@YS{g4YZ=SibpDZ{HI7N6!N2U$ zzy9;-ou)@0;tNq4ULJPT@wLR|2lI#8q5IY`nkw1nB)Z}FWT(=g701euRssVUh_-3= zqk|DCTQ7i*Lm;)?nsrt@?*sn~&c}s-DYCsoYqU6N?mh*47HOk`py0ME7Y9`8zDxaV zywHp^foGFs&1b7*3=?VoQs4L8;gT|BX*h4^W51I~#_(DG&QfL~fT}9~*T`Vj4Im>N zZ!UEKsaf#g(Z(PvX*9fHs3R(1Z4BHd~#VzZZ<0`ctWJg z@&w!8jhgzTn_;xe^+2R1yBt4<>u1wInINLc4+a@C%N0B@i)mMeObjRyyE^tI#lv3*r^drRGwDH<@wS1U#U`Tnqi$ zNl;v@iJ6TxAV%rePq1~vSeh_V_OWuUURwE>Nw84|AV`C+Ag#7JBU{}sP?|OQz}VTl ztTN2DE3bdss+OH&rdF=mw5kv4+?dUKY~!@!K&yZYZO1C* zKG*8jMX7;GJ4hi+@JbP|ADZG9+zQ^a{Xgk8%>PNZVPd8KAHjx^fR&!*{|o~Bzq$=8 z2M5#tTDMUHRbKS&Emh)I&I46w- z03;FS$A5srp9cza4f*}27(i1%ftMac`=|GuMP8mBi)<03@ULkI1UvuiDl!2nAVOja zdSX1dKfnP&+*U6PBDuRC=^FeA5IqXu8R4EhK2#nUP`F6{*4BI*^)DyT8^IR<0|y6Y z{_YI`3mrKW7~mjah<+2-5_Bpe&eh&ATE^iWWJklY3cKI$F zdr*%-KvB)G!gCl+2mmmy?i{XY6>WNVmacb)e1{94l}03*+@YOcHpC@|qK zi1+^PKNs>(Y8YE_&3m+15Oj3pIM+h=mAo<-P*D9cxKtmW)p+(neB5`l>!@I^f4`Rl zBIy*Dkl-F)f-fw8O#G1*zGxf+3jh@f5X41Q;Q*e&_!$sf=k@w&>cr3Nir45EYJT?k ziGd*PhnoRlL)r!Z(nav&*Wsi1iM|U40{?a%6)4vkUzF>yOhq(AYcgO)Nnu$ zky8EuhK3GE0GL~ZZ@CK6eRaJR0N>Y@(5@l?M?WZ$nG3y8FP~PQUcQKd_;<7Fq7XQS z`2an=fVS`nKmzuBhQD@c|2&)Bxo@h8U%)|U<~@Xc6vTt58aUzV!}HG+lk_Bguz z)8?FcXZ)D~=4e^BsU-uB(Qb1yiYLe!2mOjK9e!ce$k_oN_5pro(a|s=THQo$8_y;@ zGXZ3>wwJQK1Iwv`&_hFAeeNmd`SgfC;xxIwX*C?n6Z$}Q+du-W2T2H;d2%+LIW&A6 z#Jq(0gR*E%H_D{;O*#fsShK;6-gCR6qu`pyZ2w~=#q(Of)|8vv)2CVG3wPvEsQR8~ z7gO4-B6B9g9Dz6d3oRCr+bLGdj(^h08Qt^6nL+X4;j_pA6lwA^ScZt|;epm#!1%^G zpt<&nbv{pf?0a@lXof&?cbVG^^jcDb7ug0oAP*Bv#!;VA^_*w~cE$k9_VaGXT-C?B znBhvodTQQsI`K$LkU_7XQ8pAFSq;|)_4R!F;l-wNhAs485R0-gk5~#6G(TSn6mbW$ zzJQR})&06@2yLtu{;d=8`EoU=7+?NRS4lFgNhZpL0;=C9Rx2ii9cv@WZezi-zOlV0 z9W|DUcb!2A=L|3QQTuIFDI)C#0}_Hlt=`ayxUz;60P;aL8aBiBY)X3~>3q$y3%5dh zCn}b&QcPyu<_q?B67)(x@^ng2ho*R?a$i>Bqbi4gjsPFbn=Ou)%2n_;9Dc?LQ(_pJ zRv)lck9rM+P@yZu^a8#hh-ni_Nhhrsi-$(UWuNPikACq4dWYNgW?c;mEN_z7i;#X3=ayoiZJv%d^enXC(R$QHRRi#3@nxw7(B*xtf+J%Iyi*nHVru0+iJA}? zbP`V3s!d`xl6j=-f+2`1q@XeRD*K}a)Ht4(xL;Mz@4heclBTe{&+iuF94S2Q!wO>I zrir4ulC6^IMc>5}b#Xx1>Rgyn5^?l--RYstuk(BNa;Yg4!&yew>r}f%0GutwGxk$U zA`I|6y7DOm{_jK+i_)b1&lcMH+lJ5Gx16PGpSRCM+Ro5wU@H+P&c2aBiCIO?s_bmjb*FFf!$y+`};^I>c1IBd8zWQPnRu{E|WP*P7p-c-%18RtAm}mpnDKinObHyxyW81 zsh|t$)WMFIYpLc}dby9=X9^2Vj{9mnS|CXIgK+o{jy&ly(M(y>%1WH^j0Zjg)TSBd z3POjv%^w-GXQDc1&_0_!V>jG~(qdhT_6{RqPOrEDu0JGQ^1Bjh2U^a`;&4%80&Ene z@T22R@5o1=qI`e28-Ap#tVPEV>B)X|pU9B|4_j7?O04y)s4csF_R2lGdYfyFW=|>3 zQ(dH|%O$5#BvifO*sLowhgJM=QCP0+Sl@0VFEWc;gTVxnT~0#6s30Q`vhHyUX)^^* ztQ73mE+R-m-NeG2v*STIBR8~w{%K`tD8hZs~VNhC!VA;Uny1GI8W}+-W<}51F2sIT3ia3aIJ8K1!3j zw^Ife$F8CDo+#?wJF;P7)%A3nkIdwA&uh~MdtD9>-18VtKRzwr-O=R2Wyz85A;L$n zQa;$0nnBIbwXb!1rdcR_?Y}AssZ_OXTPklE{GNBa5^D3Di*}_oUKN)R6?yLvbffKY z$y`dUnB-Y(8ww&BQ^=yWjpGAg^!*|vR^yM5<1&;k>1C<6>C0k~J8})&Pmu=-d~j2I z5*UCbJTGwqk`_f& zrlnZfi3+i8m7@Au;(f590y=_;Y;Wjz|M-LO8MsAb^wQY%kQRQlrym)L&4+>RvoLwQ zJ%@9ug&%|$JAIVo+q4Q+|Qd*+)iqjliiUjyKq55PA*)OhRJmt1=bdQ0v(H1fo7! zQ=<+^rFYs*pYxcj+w1j{sz*wnGP+iLR`!M7I7?bz;MU00SITxk_TNMm9^8?ix zb=zsc1()3dCJQ#}0#{V)`7Z@f82Y(KTq5A(*9@}n1s3O-m z=@LW=0_(TVIxixbJgP);j`##uJhrKEg7;idddo%9U_vooy5oJ8GUQch;9ipOuAj*(5;4s9Rs z*JOfIoDz(C*;YKN#H@>t<$P@OY-PGgBY2o09|B3k=~eAH;>v+NwgoWlR((gQ${o_W zKCz;`*;sZ?4!np3d9g{SR3MhtEp#`k7z3KhuAx`(k5^dYaO5ZO$cJ;7hm%o~R^cfj zpY~kNVk18Hp)o<>OBMFJ)Tn`f2}NbBq(WTLArsS7xzR{=_h4viPyWpiAY-spWTtTq zm9+4I`okQ-vmSx~)kbgSS_%M8*~V`|uIV#v3Q*PcU?HrfzkPLtOAiCMbTGl4kDe&l z-tTWm1*a3-MZ@gOU}Ab6a*JsXf}5@$lGgGtecC|%t#POD`W2*nYA80W9ay;MsxUu}44wS7OpL3?# zP;LOsM<*m=h-OeET=((NnV(85=1N5)@clCG-~|kn_zVf z)_73R`6@tIxZ4jUL42@=m_GEGL}!`OR3Y1_Ru2L?8x&ca=1CrIzvrM!R4`GU5vb{j z+FA6V3?YW5;DG~NIh;$jB0E`Co`h91X)|^&X$_j3kb|nk`*}+M5G+ZQ%>2MgaG33z#YF__$V6l}PmVsnbFd7?(33ZsI(7WJ(KEkO=^timN zjiM~PSal?E=Dg+jbmAZiC(Vxq_T@GReC_quWHrxNSpRUisahBs1rRwHlm`yR%4R01bDKSws9L7Xw&nf(N+`z^>V!=arj2n zhB%!(6XYT&$)^8pYvViaC~%5r#Ze?5sV`VTv){H{y856vwA#Kp#lFP`rQz;CTs^XE zJUOyR0js)}GyF~vsX@{oTq?p?RP)s9@E&w@mT#w;_Fa#3R}RlUr1v0D!MP=6CZx+j z&qeMm%w7|K{<`2QK5kO#jAqO434wh66&PuiXG2IFTom>uJN=Xw)&&vjQdrMl9@8BB zr%Qxs_HrhN62SLMEd%bv*H>ZWrp7Z|GsHk$7p*VTz`SbXRYe5}woj+gz_RP8>ni)pCKtsl1DDG($K zKs<14g&xs`4-k?2deIBAl5|ry#aVNXorP$CvQcG`?KLzqMZ+Q{W-8fA0ioSKBrWM3 z_IxQ32nL9MJeXs~jg^pR2fOd*>ld+bL>oVoSRsu@SN%oag+!2WWt0 zS+A9XGKLTq7gQ8k-GZHYTgm3wRu-QiVYkAr4!qq#NQD->>wpfOL8To=n+$6-?74A+ zu?@SOe^bwtp*T&BQs?dBREs zjQTWXw+~?r;ptrJ-xh^>RUk$Hm}|w9AN1g_x1xEct2{mRkgO)!URp8^HnE9Iig_}! zSz|7E#BwjvVfDu79MTPOsmD>-CFY1LG8i0x>eol72~p2H+yKP*N-r!#Iq&5QJrCsi zD32Nqey?jhMLe^uY*mlEWT6H=l|CY$Dndw{uN@Rkomq0)vjE0z3w$$5Qv{VW2@2_- zI0vMv`%k$tOY=Drc;XA0Roj9!xow{S?2-QKH${9`w=yDj6orr&i|5ZAEThKQo`s-# zI0U8{jCuRyXA&}=wf70+7L!Y7i1#Niq~6` z){bPCjfi31IQU37jo|xY57MpQs-t}!=$gtMTMcr{&rUypf#1aCQWrH>3c zu!m)R)oMT-4$siSgFZj3S_azW#<^6A-0yj^2>&gF;swNLg>dptS--HfD~_Kpo$W*= z=)>0%Wt5Wm)TpcX^ELM#MH*56o7@SVuZm_ z!<2e_3{%?zq&4H{I}W-f$|{XYEd3?1WiyX^Gnb`Qw@C6~Ojx**!1fweN)K`Lb*f)` zSikR1(JATjjPaap>;NW}jP^Eumt5$^zjbl8zDJ0jeEPu{T@4u-eqV@4x5jF$f3sQi?p-tgdQR2L)Iw3Vi9mzgM1^zk+hHDc}ce593-h&2k)x%ev(zn|F<2L-D%&bs^}izsgv z(_CHLi4MjVH?iGt@IhartW$gBM+^9s!H1)L4QA~RSz^=e_@XqT&1t|1DrwqmHgceF z&x{S;QmeSv3R^XOg^zC4qM#?E>76KwMVM zSG01rf0@pF!9IhmrM%Y_mug9r$BAcFZY4Jm4$w+b5T(1aoFcyS~Fv2td( z2-{h4&2?<5q`>DU?3?7u-BgmrJ@OX1P=p?J!Z0Cq?5{!dV6ULzwaoFr($KpaES|gX z@BK9=2gTRxaze@c^*_s~2}#pzeSH^BYKw7f$#Xfmc{mw`dF$Q~JK3&wV~Z2Jmbn=< zQYyt&rfN(Sm3=)T= z<29FZuf~h!Z~BH6_M2X2ut`d`hZ_g@bY^ShucK@5(dG+^O40%<&ZRUEX^wqO!D+s zNF=xIs#vn6pwy+B4SZYn(~!PyM~`ZqS5V5ifo99^;@-t<-a&B|as7qjndW6>$HGC+@jq|> zAIM{8X8B)(Jmr76d7ai0sq?rbz;ire5aAB4Vgo-wun^2N%np$bsUk#_ID~(WS5dJR zKPL!?u*5jm#q00x_mAglhwHTFZB}D$_v`xS)hWjnbqCm&!;8IE9V1T20XP(d1Q1Ho z6Fxvt&vnv|P3T z@`8d{x328`GpJF1YySEGGzb%rR}sAPa3G)94`CG)Gpxs?vApAAr zfb0YJh-~Ic%R^l0`c}v++)Zf{sGqWaJ|srfJw(s00d6HzRsad zLi}6u;(){;AC*G=dKPo3RUnOOew`fw2IR!^wI3*i5Oug8E8ZZ!vCE)fuL1Ah8eIP( zFL1q@b+7iw%mD&hJbjiCzV3N4!oHh0{p5aSadB~NAP4|1;C|iLSs=b7Y)^lIf5Ch+ z=bypf+WWTw;Lgzc01?3HKVrw=As;}15@oWpQq_m7x!GHX3mKWE>y@kCu z>Z=FSM@LNw0ss{b4LCF(>E~-Y4=V6eA$WGH&XNX7ZO&ivZEXAau;v-r&L7OUOd_ksYw`YXIFPtXK*q#rZqt49P<4s#E-c_}FGBI{fB zFlzfGr7sTwQw1$1=)*$};FA|O=c{k7vfiGD4@;a8+e=8V$^6T$2x$u5`ddtEpuhkC z;ScbRkS`Xs6Atv{XO6iM*zL=NK|l@=SU5)r;N%Gi0L~t8w#w}fARt1I0{US>@*!r* z1rGvLUAdbmhW}anZHE}xzoXApux`-hLNO{B>^ zBXPIbM%9>0O(=V`@WB`7t*dmvnUZbP^YFPLABjJoR<_ z)}CQYDk$nBv@Y{YRLE3lGQeAcfpd75xa(2kV>VKIw2Wj(?;TNMVm{1*3bB3gusyfJCuIHm zUzD9glW1X=X47`wylLCEZQHhO+_Y`mwr$(CZFYW9Q58L?LHA@woF8!B!G4~-R_(qX zZrovh0m@*pLPVIhg_5)jwTbvJ@)-MTW%ps#vtVc6-?5Sen6|lp;i?I0uGk#WOI)`6 z;o{cC-m}v1)8aK%H4uFAZY%dq74GGtJ2wnNqg!8UCSflDrvmQ}I(p{Vj$ltISWC(v zN)kzO4zUxQ;;M2jKLk%Ai~)P1H*%SMX&9vQE^&Efb|iFUS%5RTEwCHZQ6d{MA?@GN zL7Q@ScXyg^6bIQ&GAcHLC58Ejl%Ng@ww0!hTJM%T=3ZA~Habg1Xl2Z*k?>ruM%`Qr zQ#SfhXhtj1mhm3F=ALY#x&ET)rpsx|*#;YyJyKSnYsM9&yk=YyfwKXly`*KMpD)@G zlzHQua$|lStVu5`(xLHoVQGzAGqsYd%8l?ErtLSkQK(H2VC#`0S@kAY1{DYK#ODw@ zzH})NeZYhFn&o9&b(*&J2)a2iG#H=wT#Q0FOsZ&l5O{6h^Mar4iqEmJ0~zVzVJ2n4 z`~Q&V6wlRpMdhl<4&qJhZW2*V@uC}L2I5GnvJTR&&o{7Vh{9UNfz`WD7B7utC1yr* z{J&}loaaGFtzHBv&j>VlwJ$HxkduSV5Nb#?nHODycvBq3|-1mYDnrD!oWe=D|ou8Y-p>E2gtFhB4XTRtE_u z@kJidg0spU+F_U&>NW7EJyh(1gZRktB;6 z6LEVoMfX>#{#{1>xuGkMcJugX165o#pWpqH3DlL|!qZ3-sW|H@FN(NKX=`cD>42^$ zQUgR_MAByOf@xfsZrnr$4*hc2lrpZYAsvnU2fvWh&cJHb+F*;d0c;8vM(P;FeoDJL zdys_fIsK-fo|6Nfdk`)yA-Z}7`<2GW1Id|o)pG{Iu%cn8iN5=2b@(kw zyGN2bBgBY1+lPF~N{vbAEJB`8ePJ;|zrHi1(t6Z+F}#0+-rC9T(X3PzNad78qPMol`3Lp@gKL|Yu=69O_5SuwK_PUq|3zpslY{lt%W6~;*zNeMNL@mTl2l^go4Ijsam94GBa*D14`2VdOC`Z+pp|@G zw;n|8BE>43T+xIdlAp9$Jh%)WY*F3F%S}|3s@V}y)$W~)u2DtZ`D)KDdnuV)YZCN6NH8HOkjy%G79>c5t`8*~0i2UY z?#clXbmnj8iBT2DnvWBHq;itUU?~}>I<4oL-a!2s{cvEgxuHCzmFNng;UiNxc~0)m zR_p1zy6<32+&h@qGh`fL$Ld`2(A$VbqiF1KnRV5l>wQL&oueR!|EA)pA{)Jq)8J0) zWiiflwK;_bNy%Pk?3r?9KdmQM?9oH15=Apq05q9#E!A(1xY(Iz4s?bcHi?-4fJj=q zZEY6P)M`c1hF&1Qa-q_v>fjQ^Rgj2QbHqU#M%fPrx6}EZS(b^BiNvUbERB@S< zXh4gA+O(L0vH(d%82bzaiAv{O^Fu`yGG!ly^=d-OrG#p3Tly!^ZEM!_L zUJj^9FKi}$@-1ncQ2yo&bj|uz%Y57dudTx<18kx~3{RwenecRPw%^2HuWjvI2?ut& znpuLoByzorwE$T6i|j?XJVG?5Q}&5_d%k>yZ%JEvR&^sL{mySOsx)%)CT|3jy9H;1 zK~>%1VkmBgjkEU_8Ei9CV3b7;1zlm_Z&;3@ERNXq?VGTQs-&)dMFK?-R0gk4!Rl$r zD)o0;n0Wp{;6FufH~JSRr-OZ*TQiW;Od58u1MXpE^4*LxoIS~c?OYgtf|?svS}u8& z4tgbR898H^2JvCGvByap>5q30!E|o{fX1_cGQ?~I<-G#pALQYAgWbLTgE5MC7oE8j zv-Vd;;1US$pR;+oVMT6VgXpvP;qK?Km#Ftfmltg|l62FhhX>n;RybtbbYBZr*)zv` z+-9Tk;y>ED7)0@MH5U<$tSOdS=9sSp>xp9^T#b)m835?sKMHw z?fgUZ!qQLbmBighcQX|614M3eE%wt>A5ps|h~m`{{=fJ811ZImucIN>%x_N7b$QYU|j2Y^E+gUbRF_l2bgAF^|u|%163zc)>*q>UH z$q890S+e&?m7V3yB@dy(#@-cb168K2y&h>H+*lzbasLi{@9(1Ua+}eNbrnP1R|nh* z_V<1Z!=3Xx^60qCx>rowECI1}C%a&pcXKj(cRNFp+)ZyOgp^Be>HB@}w6wrq z=NgOGrn$s;3e4zWd1f_8KrX<6mHqZ1bo|2r!VIE6_yr;~4P}n5uj!d(!PG}9>Mm^T zU)B#q1c|u}?T#!<^Owp~%85otJ@ZT{0C1GFsRBI#?PqE79%HiS~En1U-cC?Yv@n@uC$KAB;(bVzb>?-owp`qpi3 zT&PF&s}dN-`2a&(8&uT38JwqZO4qZFqu~2guB=0a;%bH78*yK=nNLCJ zmNo$uobh$j6f6nyVUVVc$KhSy)GOBD&O4=j%oQCi^%m?47Uht&aNEciz!pIvNd5e> z8Ri~>(9hE3V#Nbf=ek(hY4pJ|k?g^1u1FZ-QV`W|J#6W8IOgNv-HE`3`cO&nM%2cY2j{XY(%`IOc1 zW?aS$ENK8(J}Km8R)ar=Jv!>KYqm6(CMM8ADWwmqYOSZ^GL_o$kjWHqBb?|T>GeV2 z;7pU3utgl`eO#B^JNA(A4}+}>B(JECV`ESb?cJbP3kz(7`Yvy$S=z@-8tC!mDv9Mo z^4hH-wT53}EKD1R9>g~F5n-~9MkcX=p~7LU@OIn51N(Gy<59buB@6 zc>jr73twBWpBW!?^wRdfk{l|UO5)sfmk-aVvyZGx3IV|D~Mg)s_q5XJy6IxdxyX#=j* zQdY$nV+(xevn<}d&KtN%P~*hC=qMn+(QH(<3oH6o7B@_%QcH9&oSr%fbZpAFylljd zzvn7m0`qa|L} z3eCNx+@30z*#y7P{bV-ggp9r>8dP_rT-PZ>t-Ms*s?4-r(i)GPWgw|%MDrQJ(%{<= z$YHZn8m)jmoK7W!o?n0YdChTKVAMoTQ3cS}_fmZgD{_-ikDZkEd5ZtCo3SyCf?4@4 z%c+Oig@&JR(Q3dHNAJ-)O*w4k3u5jrU_3DdjOT{RD(Zcz&K1ACireI>-JtvK2KIhL zxhK$y-ym5-2MXK0=T4T1>nuN`m35O9m$Tv}u1;YXV>eHyvG}&2RA=(3_c(;i0w&W= z#yqaKS7AlPdELuv5UPPy>pG>Z9R$;A|SsjDJWTrlM~-EXgi2ST*qEP?nv%Y3NS1% zy?=I1d$#qs0TB)=t#B65XVJRqslp1dGyDY953V$T_io!_IGjrp4y=XPh6Qw5MKj1< zT6iM4@wC7>BBo|L_(gvlb(2nn8ZzRs!AG(C#X+91L*PLqOw?!NiTS|vm&*w4;`OC0 z#2X@R$*&?Vs;DJ?Sr;WAoE!J(5t3Z(C82 zKxvTHt~6ee{0YwKtI*7RucUL(ntlX+jt*EM+V8i^Gesp2Lf30VSt2fCA=K335GJk~ zA}SuZ591*h{O$-ON8`7|`Z z?P54Iup)m%e;1{`xOb2N%i~EEry#&IG|d83leSZGW%rd>`rYYaE<37_NkNnpdn+}I z)j)ZCJIC$%TJGIx96ep&!ey@Ob6uZN&*53zKrk{Q=c`8d?^ua>?}hmYgm~$WDuR!U zbO3hjb>R@OJUHoQCzut9n`U`1QYRpyoi^ZEd3&^_f1A{6b`~RYylqjxJ#-2LSDR+{ z7)&;h$oq;Z+1~#m;+-o=ee`znrku4S`KWU1#M<@Aou-|}Q+1x&HM9LgFQd0>Y;@Q( zRLm`HcgPtJJLFQXibaBgiRI^A3d6JYe3`$0lm63EG=to>Ok~DOMNFX4!IYI^vPJT? ztEOAhZdO)Ow_D4sWbg|ftEr`O-!?^lXzNwW$$l|K6QL`#^y!fLk!dZ@>hnAg&nvp> znIy*um6q-%beo=u5S`q6c>Jh2Z$-;1ex|%;rCZx-7w$0{gKGby9@gnJhDp_Z-r{Vk zk1J6G=P>@IQ(oz;KJekW$hNcI^4&eySa`9|RCPe6CyrDGy*HPp;k58Xi`$iwyqc>) zp5yA#l~}hm^6%`taTrM7861a`Ef6WRO^S8bRDeX)a3;+nl@>g}hm}RN*P;<)!GSs! z+_q&fE(&EB%5*F*4EC|M+Qazt%%4U$_aV!CZ!{aO%C;?=QWC@UmNe;;J%ZuQ05umX zbC4ntg!$afBHwuLx%leNWcHU=0;E$SI0uzB_p2cGFRITYzC9(8rKGC>+3)?0EPhSS zu~ySlSvo+1_IoD z1TX1qg9_1>LPW{iFfv-W@YITxX{DWW^zHPeOmInVSrchvd03t|y=F$j%WTi3MZo_a zkSnLULMf&{%@jD8#9R_Lg7-#@I*?pDAuII9(@xc8u)TO^E@fNtd&>+xjhXX(#Lk9Q z-oGuB85G!pxd5UI$qPlSLS6!DY^-NH&)a*Dk=9ZN?x>%MWu${oY@|_@<%#6&OHaj& z2PD=4kh)opR9~Y?N>6kS#y(d4TAY(&H0O=g;K9Vp`)raZ1wrms_(x3$$S1q?oL)}oD=4$$Wa1j_yrnhn}U}HFKWxc zRW9Dbg^Z_^RhKMu2rGLF^Yy>*lt=qSuxgUtnJxgJuHL1d$DE3wGw&wepy24_B#TR5 zf>e|E9_TSsx3SS2M6i7D+@5*isR+tLJbB+8rIgD((B6Go}%MXR{QQbe_?i9*4 zUsri$`9LAB%yTE}y7KF(UqW7(aRw1s8?0>V{sTf_V(D{HXTRCDWAgW59}n8J+1rYs*4tf;AV*GT@wc|- zw_xX~iMQ~w=EWdJL%MH1Dt>&AKTJ$rZrD%QPkv9}9yZg8@)Q<~{(|>O^)k?r#iwNj zNdw@ORhA7-gXtL_80i}x^ycTy`Qugf{k+zhHTKzofPkUA!Uqyz!3b@C6#9*N<}$!Q z$jYXJD8Cr1YqA%bLb0TYs{iFfnz zW(t|hSOi}C@bJL!B@Q0C;kSpNi1#NKMo7cY`r4HVR0EhvzZijT{;fx17E&EAt{JGZ zGCDe%iVqV68pei3U%qwmvL9s377C`Li4X8eHoRb}o4hh+Gq>;13Yx7pNZ4r#Bmb%im|;qz}#ySA2*^ zS%%rgKPHCIfgFOl#{i6>%xJk31%v)h0t|qDa>mT$fb@$72PzS=k&zP;O2 z zy?|*o)^5e9-q^BQV~6!6#D!odSUU5@z*WSAJkVTY`qB;Q;uh z;sB6q*+IgeZq8q9YS(n1zrF_WW&B>OULOBLoBsZ^G`5?eLx8ck`m}w`p)^TKP*PS< zHT?8E^aUj*(vtyDHNk=VFWPigRseFZXOG>_4TlBa=#KZNXf@X&4A|~Z#ny-8dx>#K z4?EvW3*RZ=kG3SJ%ZwJC-}R2ris^v~W7m(tk8knEuO^!}`KS8cm-zk1g~-s>`ioTN z1$Fla8GN0uGV4cVlW_&dy#~m5wd-&05A+h?53#l}9fX1HLy!EgZc_(#U+%$Egz=%l z?(Xv_7|#e#MlTiv#N6Tz)%^Ru=Zl)v65>xKm>{1IFCBo13rq7)*p}tw;`uis|0d&u zEQA+r-p{rQh6NPx*D?k;D?9*12yj;2bcLDe$s4gRKs8zd|NHOVSss|>gYa>k}!Yqva4)7tW4^M4_WS| zUQciY#zb5jQjwt;NO>w(P93?BF-u7G>p8bmrPkt5JQQ_3q;oI`>AoMa#x&+f7IsB(TD#unLra|aS$t9>$DSCJu2wWXv%Qd51Suw7C ziv|Njw5Mb(A+p{pE6T-Ihuf+*vCFJbyxjN~DMyy{3iP?&AOxR2uR4Yi>VyF&viuYa z`LW9}Pf#xhhH2!Hx>|UQFB>_wn+zX@ECvh*_Q#3eVqfu=$yFSbHe=i`8Od(~CA$Bd z-Z1ld>LV7NO#2;&uXu_65dr(-dbRwo{1q*`HCE%^3TktZD`{PgSIbK#aitiaf!oyN z(E+z?9eh{grY~WkYr07ptcq=NhbQgepXd{GIVSm>4k+6m&&B!O>!r04D^yN+UC5ex z!*i%BKZW!-Caww1jHbn=GuPIX?giil-8r-pXLrNPDI4iRDWfY?Ll2i)F7Bu%Cfiar z-41w!X{z-rSJJ82m|Pc`)t=(E!al6Tyd2?^MdR@%vE-o9bT;p4p$aLQg#sR6M{lDN1Vk6Kq6WlZvC>G^!Rt&rSbAG)tZ z(4bfV`obxrttOvPDfp!FZQ6NPx}-Ux5JS?2=n>nHEeo|v zo2Ead0FS3Y(mWj4gMsY9ucBC9v?-g*%=Fh(r=DggsNF$r3fRMUuctPBvW50{>_5(K z-GtcKLc-i==>Ld~qt0Dd9$}>Og1ojUtpyLJhXa_Fgo9@hH7ko>rtMh9$TYlc8p`ZrG^P+0O0MH=${#J)gUgS+>(uYf9d3zUQdT};nW2{xk&Ta4 zmOoAqGL~&_D#5hdqe=fP>HG3QqUh=o_(YlQFS{SBl?!omJ^)X zh8|5x8ZWmJVzNUOI9~R{^KDOK$a@6Yp7v6)U_fwbaglxGMv+Kk_^Aa{Stv zQW#i2`ho{aU?HqqXn>N}X)brL4)f{Pxz|U_xc+RHdh3&l73MQt)1+@ZI#*2!G~d^+ z*8_CfJKd*O7es@s zHtQh=d%cZcxO;W81UXDVB2(FIUZVRm12gKOF&`&WIUdR5a%#Qkph#D0Q$CM=;`3Mg zfN4~-pygQUi7n;F9XP7PgO$f$bgqtq;Tr=GCXS$ExO13CAsH6YH9sH^J71HP#7tS5 zxxmUYanT2FHe3HZz9ZtVg|ttgAI$+t8FE@J7Vge^Z3wpqs!64&yTpv(COtHBJH|)( zmcxV;=eauiRX?x6P?8gOxi7cG@EeU|4@8Cqh$^76+Q}F-QXS|(U;-#R?G&RB6MA=h zJsu)^xw~Uvc}ou&k3}Ut2||Z`?-5&ufxXtaRVKp}m&a~?gRRp0wx8UTh2Ej@mj5hv zxhN>TgghB>tpLNY0~_fg>pAv?SNoO< zgmtIA(^Pb|@cOA|VF}9Ubw5{n!(!FHWI@->42343L%W~Sk$q3=7{6FH_6uwP^d?uug(9x(<_g(ukeb`e5Xi9>I$IS^~Z44EuZSS;=*gsLWi~JLeU+rk|_ul zOkrSm8x>{8uGyi)n}=UJ=R|Rn`J~ZOSMEov0;bGk983@}o7KkY7H^}fGhjZch$8s! z64G-Oh;_sFU!AFO9ClfzQA$!Z4ZvY1&pz>8nuld}Ly7RgOAUO7^W* z?n3fTG-WIp0Z2J@?o_XKxJ)mY3U>Id#%kr zDc_k+)gn*Hp6$dRuLqYzCrDjbz;iBIu5`>n@bAVk@phhpT^(jo;26*g>FK`2+#4a!XhO@e z$~AZ6zml69-yjt3{Q2U#>L{m$FECa-g84Nj^8Z+G&K}i?7QLR1N7TAkDFYP_{Cf(Z3t>rYtpN0)HQ z3j@pWpG#}{jCzf^d6hW(%6yden`cvBCwNJT(D)W~J|y0Z^a71{CFcv_3)Y5+?uW*MGXi1IW21&d)H9jCWTWc#{kr)>ca z7x!QL_s-gC4ESP@>Z65s)m)kYv8};nm(KYKweeUIpq5c3wdPuRlW7_?tfWBT;hKdA z8=X%qdErtzRXiLXAwhY3&k!7f?bE$+uT_>Xjy*0nA~){cN{DU# zdGR&q92Gx>4Y9$?ku3!+jzJYEH-5gk!ZkY4X&R@-!x*MROn7L*O&;i*x6QU zc26OR(1+Wa>I7bUGQ8AC=(&tL&T9V)?rJ#;6K;h_Vn`wlQg;ZEf)dVZraCA9r4*+a z)pRkLGYo-I-X(wW0*pG%`>I*2>E%Z7GAlCMae6G`4y5;xkA{PMP*_c=rVc+PWw3K|b;Id&5fA07 z%@w`kfJ{(!_SX7Ta;dBw5hG<9B+`~wbTR0J4_PB@&CnhynpCQqj$DH^mV1%Oho<%w zBT#fd6bFLbGO?YYqgy48U^1FJ8d_egBpCNojZkH`U}V)9DFHLDwa14BHXgQ@HMhE~ z7;TklJY~YrVsGb6;b+t{DE=}(5jv-vi(OEMch_e;iUZFKelFP}=?c?bC~s6q`BB+D zRo`sL@$Tmt5M--QjM^NP5vOEZGb0p}lpQ8Js`8|uobem$EGKPNv#oYMUvWDhmB=5A z;1u1@aU+YYo(`fa=fnK0S1B2Y6Je@1FWno3;RhUFK-VU@1XzO3&LE%f=nAA>e_}O| z*zt;fr$pa)Q@+Y_sQ;u=Zw}p(mDJW(aWtna*#X7&h{0aJn++O8ipbq2CPHi(`ywAb z$BMqH+k`)oL~Bk`9}r|${B^k<7Pif-^dQP9c5xP+?Rmw>Wj&D;M)Ub{Q=Rlvh>_M7 zUnF|{{4i!G7urn~1fzhD(_`2rZIhQPVq`O7+L$Yti<%SDzxPHC*ke=xs$X~_?`4D` zqd0jUaw7=Vb28zPU7FK*ymmVFiAa5KP02xZh_q{ZVl3&vN(8jhj9j5HN=AMCCt{V-QD)fcxVX^E^Q60wXbik@%%(Yj9r?sl*uK*3{+&_f`D5ItH_c?buxu+SmL}0?(R&I)|2pX;jQU`KOkJ|fceo&#LBjc?5DkL`?_NHy zZXzTK|JAS;jz3=*-B(<7Dn3Nlf(7jICYo+`#Rna1r7~>qinD@w7|&b1nwa!c;__llP*hRp-WOEEq&<3_Yqwl}S)!F;-Fd z(4>7KNa9@^&74!(Eao5*rMxnPmh<~70Pi@^OS;*0wYOxK^J^G|9jeB=#}_^;Zw5p- zUs>_5o0fh30|mmJCCBA>xOeQ}F7+;@jQN7K?mS-Tv$6zmTydBwa?`U596+Egjwl$_ z6iLw-`ih}-?_+K)Lltq+A1yyVlY$u9GyT{+J1xA}51ZPCC; z0}SuT@0)eGG4%W^VlXnUXjy%pccIZ5CCx8qb8l!SHR^XR7&Eh4^fp9$boyu!a|)lv z%O3ViGbtk+n9?AY{75t;49ciEQCh7x*<<>e&=_gyd7jQbcAR@}kc0)Adm4_Zv+83B zB1C`0B`}XZbW&bficZhUZ5r?B=7@kdT{)oyTl-+X7BkwMZMP{gi07s-dcVx>5)e9| zrHB=p@O`{Q`a|X(7HNwoEf^`(9u@BN$W%wd0)@}$5PV)9e*DHrO=)=O-lMa>Z`(S} z2GvZai3qd(25m)`R84_;)cX7~lNJ@rv*E2QD(mR5ktfjHpMgB5z4Vxze?hZ13g4pD z&NA0Lg?>T<9pXKh8WCL5Z!oMHlHfny?3vWhXwBS2U_tgYw+ENk&lPYtPd28t$+$EZ z)q=vfz79r%8I~C*T3BAf5=J~6NK*n-Rj5&N^XX4Exd6M8hmqN75Y@FOsERqQ^!h5F zwqUYc(*36mejewb4{`j^=}JgwJxe1g6Gkb_eM2-znaH5%=$eCdeTZlwaN3ue5W?M%lBqqtCGu*vnWGKX^lx4Ej&Mbi!CY2PQkNRYoRK)-aAtQE> z26H3WUnJPPGW4ea>7bm+8~F1TjX7&s25vo1dpbVRPas8n`eCTHSR4fodI{&o9iPu* zvsX2;p`5R^dW5wMnS*nt&p1Bq$j2}l@PYfHyb+ojP#~Kft2z5-7lsN%y|d^^MAmi0 z(8G%&@om;tqV0xSz&QD1x_H0PVJUnVOaDOrMQrwGVSaHMTEj9$h= z57z_wK7Jj)k~?BxdpJW@IOo3`miu&(EvOFXL1!bb5^I^Y+a_I8Zgs0h1GO-^nTLAf zOHu2sVsXhX%s(kC%W5Ds14p(cc8)c7Y3n)Gxof^}I;OG#;JO&ir(gY?s(ctZM77jc zrU{aY7zO-A+-K!(+DWO7>%-iXri;L>?rlAmDh$H!;xH@MgrtcP{`ce;jFOC*tKTzb zamK{K6!*qKk!8dct&;4zUfT0rgrX6h(uUjd4}fa={)m!{w$BBt-9`@FHdv0)0)yGE zB|5f~Ng^ZUz8F1gHgN0g%T7oGFB3bL!&wKt152;J@~5Xx3eKfvDM>u7&Sbp z8}|;Xs~z?k?n$2ZMB=Z2?-lEGd>@JTz?_7AnOO-jcTpbU{!`1q*fg#Tkfp*SxG9bD zZX6(d$AWf*ydi%MMYG5FV1U1g`{j@lyn*2cLQLbT&9K`RVk)*~o7L}NPj#-OCwJ&4 zFpu+$8)MlZEA}`va%KXl+Vr=N$W8rRE$FZcl6Z7J4#e!&U7ip};tUk~@axD0Y-l<( zYyv8NP^>8jtPqw=#0a{XvCbNm1g-^PRQXUFsy&r*A<6o6B+Xk44w^da*)5Ba@i+AXKdQg zD_&(Zv9-sk7(##TCsxg@)hv_B0XtH1?wab$zRW6bQHEY|%MexB9G)Xz5I#Kjh%*MW zx+6EL)&_Zu<0@-I`k`T9^|E<*dJLGFbwq)ns^IO*CGR-uJj<|bOPpjo16PDt_;{LW zLzKbt0X2+rO^JD&Q$WjW`X&IC(Q*!QB*BOkZeFw_R?xh6OIw;hZ;D<5-~eLPq|9U~ zs(x?501=t%upQCg`Kk>dnw!M>nm)*^OX-Ge5XBNQZetDFA##Ep#iU(LRgcM5RPrML zqq4riFhZQu#NR4^MrfnEyS~SeI`wYlNTUHR4S-)j=5?MMwkwOoLJ;hJm8=ULQB+E(P+7p*_d39)k?qRh&?A8^ zbrf-eWFGNk6jL|s1bo*H{($sknlzLqC+OkjFl##!lDIojKvZ0Cv}v;{6wDk@B^?lb z*6`##lEyB!7(o_Xvu0m)&VNdq&>!lGrS z`HO%Vwf-}1ohcSa7tR`nadyuy2nNRlW(f6vjkYt#*rMnsV;FE zKVr&ee-PYH%~h&EAv;+LTBg`ICiLvoT!IAzOp37&4!Q|xLtw5Ga)%QlZJ>r$mHSnQ zm;3&o{6WoYXu6d;yGwtl$ynU$7`qBt9&onB$*wzw`2%Gsp?iP ziaU?7@!8&m_=Klr{L%%3HcyFb@Y=0Aqx_h+%(@A!9(wz*zzSPwhX@{)6e*@GKZp#$ zEpH+a!^!zB9lA~^9Nd>d>rsB{fL1k)eyhf<{<+dO*0)aX(T2szf;ca9fuEs9dIdCg zWno_m`NIv9(yO~wTm%opc9rs{Ku+?5$8rwOp@rrgXM`*(&OIzko;7y6Lw;D^=z;~~F zc@0I%^mRJT@j-d+;iu{sr4r3Wo|FOuzoL+{jQ_|HRkG1gM(p_aJw%p4Ti*lv$!X9F zQ`}%~%kkt4`0D_)XO8DB8m4)cio|F`ETv1z6u83dc}pN27>Xi;pozIHs6_=2a1Le%`Ox4tV?L#F;Yo6XTfVa+Bow8ec4T)AEp$xU(I>x zm;A$+eZz^5=kgJUxND5p#zgYoaeyS}Zv5x&@;}!D$TZVRV^S{%;U>**{eaeUw0AUN z@bX4`X*dVRES|j$jv-o1oRpwXoK_5>=MJ}T=QjyDHW&6GNOO|WirbE9TLKNwn*9-3Hp6d7za z1sFy*T(c0bi+{2iZ4gMTuR44@i32D^EU+$)Iu=$o-EIwK^4I7(#V7&6Vy-8{V=w)N ziRsckbyYQq5)I5NDx9&J4J$ftBt2`fk9x5R zqfM=V`=8XYXznzTkb4!VeNXT#m|BUg8|G_41)0E@Djx})-#U|#d@ z;)@>-H8Vz|lWi$Yd>Hm%t#CY?pw;%0D2mbg>2 z_BnpZ1?w6{Z^n3A@65QiMNASc$t7Gnn}VBFlV(?;M`0AzI(fgcSFJ9`A0mz-__D(` zEZlag8R5ch4ZVkqr@izJ z-xn{Jt(6CnzZh%15)f8uu~G8S=oR*noSPD!i-8SVhAr#^-G&uj$e^EVEI1Ay;fBzr%eWK&_PET8ar zD+0#qSzpUl+xC`pIZ|2#GJ)UWms=>IcGEFR-G!6j({hX*YpzT`W^!m*$bXgEkng zqThxTbe-i;1rJsYP7kYhGgNpNL#7lVyZ!+b0gEgAU#b_3bpKoR zf|dDy%-#%mY`;S9|1M(u-_;9tcDDcbd*v2Txx_2f+o(h)v5?>8sALHq`PLRRRqY^6 zos&4LKa-evd7_he0G^n5fRiih>wW^y&rOE=&RW{mhwHo63j53CykdoUy`)QKH3)qd~8KMJPBqO(rf)&yFjgNz+6STtuXe38U_4RwZuYu1fa$YoydWb zPDR31I-w;7j*f z;Do@ZB7hCxae7SM$yCtNCVc%0nPkt?hi&Wq~J%^fg}AWAlTD0D%H>2hbx0 zSRLpOeozIXmKD9lm8jO;55e*3!q$%ls0d-{?M9%y9e@vRfgXj0@#F09_wMpl{rtTg zZUsn2fM)B(vV#3*@QL}w57YdffP1}zz7I$T!V`&$3h;XIFq3dM5cu2Uea`+#|FIv+ z#K6#?J#tq2v3SERDkPc&-kqAB0o6M>{=IGv3vwWUH?9oY2;l=_)&LyUztySp8F`r*3rZTbHP+oe(FOe>cdw6eCaA`-{xdgz%&Q8a(vdP;J|sP zfkBoweer@r+Q$XC`B5+7*+FOUo*c=xJ=aJ#gz)uQ(4mgjxI+77K|_4vZVh;-uX1&dx z?*h4*&7kUmIu5@&mwW;N$du{k^NK_Cl0U#h0sv;#|HSSBmwicY!Xv-HLvjlNeo6WR z$UOL-;TI3_K30gzOzgx$_dpqK6Zh&cl757i|knsSY8Tc*$8P`aGOtIgHm{HRu zp2(Tv0(D={Ip*HbJ||{zyTzC#{1(0lzX2^#M!{G$mnw|mLihLU+(&Z>XVA%OmVqg| zuQ?eYdR_{Uv&v5ft&z~3Ey}qT0vgfVbkR2HEmov6!QrE?F!t8aJ+tZ!m-391y z$EIFhh){QdVn(ZMkrHl{2n`ubg0YLQ&9r?Cw3V#@&2^ehWR;W;1780IyYSd*ewwaT z^bImPx69lBcMO50Uup<^WBNuYys(M-K>_&yes|x~cXap~sUvz%Dre4q15@vA&f7M&$A!avgX4v#qigqxtHgA(qOydbX6vKfkm+U$5S-YqMX%^jbd3w)+y+5}H1 z(fjQ_yC?Tcvd_p0`|bSadCK^kNUpxat0t|T3bShnNBI5l^zN)q)M83ng|68u!O#=n zlBg3|IX@UHHNxYV<8q*Tal%&TKNq}IxJ`y0@$69qA zMg)v{e#mK;<6}lV6P3Spl(@G876Ol#G&W7Mj6Tz#^Z7g%OT2{>sgTyY) zTeFj<-ko`O=D*SV7p=5$qf)lR7_-oS_Z&u+1S@uGcj_cQH;w2^gtkZv8%x3iI?;?I z9MIejDrWrl=3^te7(+)Bh^drexZ9S22z7*e+1=VRIDTTS%-z zj0A}k)N8Q7or=}q%GalOEQ3Se#56C@k!^2U^?d~+we(G`?RB%W*PN;d&YPJEpS5A+ zLMU*xiHRg5vg;XXXVA;v$(8TYL zR?*~Dpj{H#P0OlTXIKlf5Yl`-(@TQ(tX#m^U6l#G`_!VPiwUTkonr`h$5(w$x78_| zk0kgoChQyOKjqVhGX-;V)hVJ(>4mEy4UU$}7gVOabCg+?xU>7`;f)JlL#Os zbamervxV*lsd|FR+M6L?&hEOkKXdfdFb5GBEE0 zt){tkO?FRC-g3iHI?ZPN$LbB5Gm(BgPhtKXU3(fxHPU8%=M*>|or{`8bTO>wO`?(v z?g{05Qixc=we?@VvlhlQQGkC}$7H?Jnee%tZz^m4)K)1N^-i+BRu7 z4Q|y2H|eTLCYfOBoqnbpar4?yEuE4K?2_JC89j2wMsnO@ z+fQdi^yBcI#pL%0C@5EGuMHG(w_;B)iELrAi{x-X@DN@VDY8s71QTajE)xGbq+`Wy zVXFrEvtFA5gK@e)_M}+z*4r&qF1bzV^RQmlYL)OgK>pSM!s1>f?wdmZhx z1T+>m^sYu8f+;V;PY;98X-q6AO9UQU+*K_kDKtJbxwaZ%70Z&P?y-> z0EODQ_b8;X4eR-YafHSpPAdtMQIN@`Fb3gNa0hWjYfw#&KO(B5=VU%vrno2`T(13K z?w%ZuHS>rAk3ufuaclJEUqos@3~|(1YvzHuEw*h2j*X*o5r9%&FMlt8N5&i?R_J0H zi;~Z{C9bU6mM{N;J(xH(bfo6uRg_&;t>VQ{qApOKk@7Eo#8 zN%1Lf+(R!$3UF-314lX(u*FaOhUz|P6`PkOS9QOcz5J-Ge!J{?WDp+n3!M%V_@D6{ zgQ}*FQg_AF1vRp|6)5$S8#XJg!iBCA5dFNsrl8%%BDvbvcc!-jOXjH#W~MbM`w*lv zr=65LGMySE8kr%FoayM!jCs2r#3xG9#$;C4Il6A@RVQOm;LO8WzyZQsw2WUp3Quzy zbf7BTF1`49eU~28Rqp?N)8c zKSv+0>XziV%zct5L-t!9bD?7Gny=uNkzwZ_gFFIK}br@*`BlfLE?xd_IaEPaP$ z1|qjo)$BBz_uIs^2ndRCqi$qKzAlG@Y)XQTY-V@oCWIWV;%OB{`h@767Ek>7?=mWc z?^QYql3?3vlkJc#y`?8^j_~4o>JH!PbByMzbKAT1&fd{>zzZL}^^SXyp(wmraH2o3 zYK9+L@-4wkC4EGg=0`h8Kp}kmbsjtF5pl~fNErs&sQ#yV2-ryx;ND&l)KV&8$ZzpG zpBtOt+eGbAvurd;-PUw~z!1}cvpK7S(2Nxu+MXX0FUg@x$-857rkUN%)g*+oYEyMj zUQW-uzha=o20neOr^l6>(_So-gB+_gJ34KZWL8hq?i-Mr1thR?AW!@=N@pgu6b#)~ zcw_CIcDjFq`ZG-{yHbI>rfMH!xE;^$W-;UYxGpR`?e}Uw362jDl6v4m&X&n^Jc*o} zc7s#}PEdc1&nVPX`&0>B+o2MFDJa!vKkWFRe?~c3_gvVObMX+?Epm(pi^H5)7t;B>Sizc^6 z(RV$!JeTr(G6sEpG}AGue2Y9agJk#=leaSL?QH}zcS<<6PovmLrl9<#9&=weW>~$A zH<4@pH{A9m8z-3R@EQ9?rA5#njK(o%)fo8->M7sXisZJb3=j>Lv*^KvM9HXMm8;}; zcO(u#;|rj7*-@avm+yEVjUi$#8lYZ0lr|AvV{uxQ4#ETyAiMk3j^pTbKf#S+bcB;uWCIS&KZh4dG7x=wFCq@wK-m{7fbU zA2?45zE*d{NG=6I1-pubJ`A~<_25jBHiH8cv(kYVlz$P!IF@jhjUL97UNfU6lEh|w zh+Ke{z?8}5N(6SQaBzSZnDm8`HF;QguC=p!bhu{`IIw^Kr}M9ySlD$tLsT+2>~7jd zsvNM1(C)R`qH=xU2?Kcg#a*rDZ5#vL77|w0aa?_7%r$Cm40u_@X1h(op-z>*)cAhD z?Y$08#V7(H(hYqwqg#?330((y=d7&99-B9Y5QS@53(N?in{b}?DYo*=Ezn4+WDeGQ zuetfY6YM`zbwKh`;OszNupfsRZQ?eq6Q=(A_Z$PB@4?_eM42T9{2VKz0+1eUtx)0h z>idqDymJ6!(S?nQe0ljZI+4Y)j`_Xgd!=dn3P^m3T?W?<2!(;P4Syv1utKMvJ$rE0 zy@B{a*#=@TkPH|t4fiy7MN`k~F8-|M7c3lBz;{sDHY=72|h%p-YSPHIB?O2)IT#A1U>4lNhpR`Q-VHKG=9 zaPU2AnW`uJyrcUbrErTk%gM<|mZhL}tL|Aee6)0h+Mz6{`oEKWt@B%(MSOg0jNNJU zjf5eR#@s5;_bkUfuoxG3p?E$M^4p*_HOCR}c%$D!Wyk>U6 z-?0;8kRvRPv`u)m$4;e_ypPcFo(4%GYx^-O?sUk3xt5m3L|@F-OpGY_^X$|t71IB% zi!3WsA-F_5g8by_;(B_Yxjr0R_NG&Kuu&?`XmMs#|K{oq7Rq3{fdsl&HegwLiEv^6 zB3omCY)Ex-FPD1qG5&TOke_tq6e9&i6ov6Ubh(wulKdqDPB2HwLLeb ztlEbuF4xiZ$bE}yaYa>o>E$y?k3*={NQwpSVBu)aBPD?|(n8|Lt}0>d459hA&#zA_ zJ)cb(Oqe+3iI9l*PdBd7IWjw5-*_3h8BGTtJSt^X&p*h=<1?x@^Z6OAv9|7!L~qUOK7lCj+sEc1zDAoAw~csiv{|y%5RXeag_}K%II<%yIT-$A z4#7y0Y^=iOO_$5^3+qCf*&(k-j>rKQrl8)KL#X+DO}RTVx4=c$n<;LURf8hJ7f1i$ zfZ;#5sXI#Yj!GdckH%KhOdeV@YC)O9DD?EkBEZo>hJC zui8o>?G?Lgn)m`TwW;|FSN=i@EGWQHq_EC3w93{ zY=up04gF}hE2F~^;)07A*9~;G*X+EIc=~Fg-N)($*`F;mEu80x%Iq&yO=A&99;aZS zpl?*3$`nh`n>KzaSnM`YBwyNrgzbCCsrPReW^#tRxY?FcZ`XB;>Z{HwBk)LtrW+6H z(%^Xz%o>b5{nM`H9VH~*_qt(k;=vT;nnLpSjF{%1-{(F27RS!M=3q-}Pq=!yh|5XK z$1RfQ%$IHE(zGB(fJ*w7{(2K$6Wpe3hQ++^2vbXc1=<}dtM-PjUDdWP`wyibkgHSI z@%aOrqdn@t|Z)1sh;l3b%v@({R3$&?J{0A+Y({^l(K7U2PO z_Z__?=Ij}mLfEygK4}&TVlNq{xzC6UXOSd9U8gBawc-_$?6u_LU@KV>xk|Slpt#zU zmP|p;;VN-^$7r2{<&HdyJ$+O4cvBso!dd=!?em$Tv3EZ~8Bk0lvpeTUD!*%z`F z#>w~fgY>RTzTdjdQ=@muO8ad6F@Xu$_KT(5A+j0oBd5S}up49L>@~8VM;H!zb5H=0 zy@$5Jo9jzYd7||5X-mojTMsE_x7*Ku*j~C0o*0_@Pn6^&SBbYjbc7Ag?hO*r661Rm}c||xFx7=Os#ui7}+F_$=r^X zABH1^N*-RYP*5ByDzAQa!O>i>QuAzJ7#8x~VtmTKN~ez}+OzR8lDG4hm2?+#Z`=rG zo1VKxY{6fF4f7f4VrBIaR54g;eYdBbOa!B{s@o{DU%v@WATmIo4G7jF#s){`VX4O`ax2S=0E(OlK4e}W-aYu57 z|B{FE1X;9(b2PC8qu?)RU&%Iu=*(nsHtT}Z-=29Y+vM4qcV9%dap5e~MK^QCuor@walqjj)EVJ*zuUeg&aF- zu~{~IFVqk05N;g-`x-)%K(^#6W^LJ+ILB&Hx=dW21#>!6_wSfbF7;j&_Jz4p?_O|~ z?)H85Ka&E!0eoq(9UtGY!KY9(S!xStbyT-C=_NesW}4CC{$2p5e4rea2BE#2cL;&> zZ=x)S9|PeepZGG}8bzCgC|B^2`4Pw=;?Sn^#W`u`PKX{1?atku9v8xFoG5U*+3^G3 z6Q|3hej7dnuOr@lB?uVc=u68h)PS{P!g$M(ZQRLqL{cwydK|6%AJJE;d!tLOgA!@ zuVdmmy64z;SwKgPi&S>(w#%7aM4|5k3|2Ni@#K=M_OK$(v&Oa~}g5mYYf7Q?u+nDQzfTEbeu`7NvU~O0wuV4PR zetu11&FD-|Kc)!8_$&}6%jn90dke!zKZO?_r9yZovO`(8?>>HqhY7#l8ixlssrL6< z_aFc`f0C6Cvy`Dq03;s&xM?!AzUiDMP5!Y0*Tbu09yA-Ag`yCwF+%t!=8Cm-Yg8e3#5$bRiKmBPD47UuGk%z)KQC?p@si!4SFv9V?ZKl4L8hwtIMgyDn#)Y3D92K~O4swjOB0t_Gs!h;oe47V8YSlOLF47d3}T zP|XeeD%E37<9F&Uxg&jOF{7iW6Cs!xnL?V+KT19T8(S;_+LHy3E%Vj8TeANM>|c2tu?K8*BUAW>F?Yr_VE*Y~uh^mLlimq(D#?PMYr&U@Tsq}L>xA-W_6Mi| zr=!jL`Ye$YYk6M8(Y-bQ8X`Dx*7R0$2k`8HqwZ+IhR=_@;YzWcqq*&>uH)S{TYhb`MXMI zFT6V}i1DW(p1TNSyQvoWiVFvwH;Ql5a1TD?FbiFT68`P;w}(?YOm;L3TCuGgP;@Wm4tknf(>G$~GWmakVwN{e~W^n8*< zPhPqrB^h?tWb+I`N?xcfp%irAe7XxQZ2rNbUvmx1_5!HP;;`6Uk)1Kiw*3wprsz>- zA6{rIX1OB*x|%5G4@JX+4ql$FhKNtTn92ltU5ek8cS9ZE2(D78+m?Mo&^-qo4cZ;=t{l7S6Rb6VaTgob`!!Iy)OZc6FiD189CopNB zdm7)_fwn;P4s6cS>PS`3*p|1C%zVd5lBTzS{#(2>J63hx{T$niv#V7WQC4YppnSoC zl5UxcE}*5~v2EXh+{$J){B7*ih=kaB=@zF4Oz@*ju$V@Mtogu(r?; zm7+)D@zk-8!C)T2igUb-2)sPA8+wf+G%M!mhdOCb1?KSJ0a|xRX!a=_`uHmOcTz3m z?sF;|5OJ3fP;5&|)N3Y6E1I0k6&eZ#YAPg`NE0Rh&i#|!t1_9AQ=N`@Gv8_(Su6x& zk~(@|7+`AAZ`UZAlWoH?)A5eCJa*6=1sfrCmk#4PkjBlh&f!|@6!u_Q?EY7SuX$K= z*v;|jyLDs9Fl}$fe-ei)W$oC)z-U8SMLSJbd&RJcHnvWx^6k4~7I6@EG0&-Wr3E5O za+C*yaoXz6(r{*GpjJ>c#NG;>?Crax>g?c%hYJ`eJIw~hwj^m2|C||T#;|zhypJUb zAa5-bI=E{y6}ID^yBZ=BQ+IKaBB?EzA|512!#Kh<^~Tf2hdIRacWy-+pEUnj5vlT` zJ9!2bp~ecS*y4ukm|j;2Tn@)Ktj4kxw+h>1GUrx(F#4<0^NxZW9Gro8lMUdt(3uK9 zFx@%?k&qs&#MIt-C%W65SLrRPXf)+$p`47wX7d!F+q`7epN8_`Mza1Lb**MjlT`#rVf(Mgb37<@qhnD+Rvw8=lSV zQ~cc0G{YvnyTD5$W|1?pJrj_CrGIkXb)jFaa0HRtpMz#Av$mJKgcbJGYo3bRi32Su zQrPwM22EjNfC}YFzpaYFZfMz^AwYvi6-yN-dU9~BH`isv8BL1_Og}zWiWHbdWT+J! zsM$vTpkcu-v0t@DAsMdJzVow}kr9i8IF_DBrn6L9?_vL~XJ238O2rYqbTF@Ckz2P% z(7QGEAfglAxtA>1CE8#IqjZ}d##6#D|9i!On~mko8dg9&9GvZk?RWZMaAs^jPZF2Y z;4}4j(oC&#ZO2>Y8yGg!-&6e!Sz9U~Sy1EPUT2|DUn^XO>nW1s`(eyTwo0d%Id?RX z^#r#3)6Lpk#8Bm72C+m3+-R1Z(n6;^0nYqZ!zUbQ?E$c0(mItUt}*wxzKK`g!0(1K zh|R}t=F6W=w+BNZonvcxiOhM_mWVDIJ6*&h z3{$eS#vR$*%2Tp~Uk0^%ZEF4GNw32lKc_Zuf0Aj%`olXwMn>x(NbfdtZY4DtN3VP% zMZpz8lAdTB&0M-p3PqEnN6`Hmxel#K-FWW$Dk`tugowr)Y~3>)M4|vDS!S?@M6w>}*QHV7)tVGlzVXTC-L^)AG%W!z!Q}5W*@1NFQdtU3Q zXI<`E@7wO1){sbjLqo$cJ{! zObNWBu)qPs0zZt&Hi5w#cP7pH&#W9Q9B>M64uGCtfVxDAx<*Pk`2NuW;zvB;wk%2l zsJD7xA$8Y%ijlxM(qZG9wMUQ?A~oa3iB|m6>J!wm4Ul= z#FMU=bpvt%aC?~0w(l=$km~mC&WE0^0#y#{qFkR0Rh> zfj_1-pXq?)_iq~j-P_%Nuy5^e^#Tg(_T~+(tlJx)Fi(Ml*8tiT$RP6x>L+e*Zf79< z4B7f&2IL^$v-sDLVO)W=w=jOp;J}YcS^)2L{e4ry8eM|A+lbo`6-)IFDo^ge4o>=o<=gU;;U-2ij- zXMOr+?nkD;;hZ1e#=l*C1jd-En4qF@eN?~oa#~oouUwH_+!l^&j$Q?cW@lxw(b=>>+aB`GEiR zJrE?=MXXLhh|R0!{!UwzV|q@u5zQH(iRd94sB?v)U9KivS*_g?YVghH-cOk-O) z9>UCWJ~_ZQ|E^f?%Z>NUb~^#_l~bQ~7f-sNtKkX025aT-J)x_$qKVDF-Jz zHK~wuG3*hkvm6XsR>V}8PVjO@xmArQ zM;*6{-KK&q2LFCM5b$E?qbgnUWIhhCgZ%(!v>8XH;{~tJ22$O3?{@}&bTuJe*TTRV zaRZQwMSmL1&}*N$v|(e9{>^C zBn7efzTC84TrEXhlN#TmTlS54gTPAcX<{}R&@`>r_EOxkmi6Rmn(Te+_R3k(QHk|+ z1+)t9yRtyXj1UL|hMfF#xh!z*k^@erA~XzS0Bn zVY);@)6D}-+v{&m*)mN;5xsY-`I7gd9>4VYd3+QT9w_28pU&+c9#omBFMq8AM;NtN zSSdPRZ7y5z<_hi^OFC!8g-v{EW1jx}mr6rxW?iviC(AKT-wadW$-E1HQTP?*I={gr z%RX_uQ9h&lqgvg}Q~&Sy3<*qw)2RPG-s+0|4gzQCy-J4E&rjUrm&Giz|>$97)|J&J-~n2;r3wiUP!W{K51 z;uESn>4>6!^;tY+?txlYN9eOf2d88)W`jrUUbIS-=jU29`{1jTLz?v;`wZYt2T-6B zv`_IK`Hh0iCHY;h`0`g|z6#mEsx;FZz5ZRq_>)c?L+)6Rj7a}rc&);XtQ|NsxO}SK zw!7f@dhVls9#)fmV?bu;G8~iuRqoOv{}lbhzchEjT3nKB2iiOh5rvclpO`z;2r;=6 zojD#W!Qz#@l!qpssIrKw4fZ~@lm*k6F&DCo^O=;5$T8ZP&G!4V@mU5zKUvTXR$YZa|P`w#t?iGOS4)NyO+2f*bPn0)FNI`Yr!y)G)2DDU;TAk?%$Rb?_D*rC1Q__^HVf{OS zF}IG6?K5FvKR9um{d9R{7cMDQ({|m3in|bl)`FTbuN+IE;6fw|KlEMnX*v}ZQSfxm zQGX*P*6l!oWrPt>@rlG#SOChxfF&lX5ASS+iKl}je(hTiXG(Bpk&l@=Z~(7k=%V=T$-PQ*7D0}cmj6Anwzk)fte`-$g->!vn{*sfr^NaO|o|qJ$o~`4RhOZxkA*Dc0JY#AUG*YW-do_2a|8b{E?M z`#e>ej{JeE+(93#WFMQ61TA7{6kFU;-{he@JVw*Ke@5@_cGR4-+Im6ix@DyCTD%6V z5@o$RWgdyC5-|D&2k#}F?>Nk-QbQ5ZlO)*J3beSP9@u7;tR>*|hCHJn`ZG@7Ls%_MKQ(akRKBMnrBkHScO z_04yLQeEC?UC91@CUZ**eIYW5=2i%S;SlLM>?f6=b_gr5Lgvu)hy1(_B@F2&+%X3NrSWFAzK}~imvlE=I zY1%BFPV{RTOoe~2NysnNnp!q?=ksu{LnrFSd|0-QGIcDwQ@mPw&uuLdZ`yep%f2om z&45LOH`(R){{W2HTacsUv0eM)3MB)(k`NO3D^%45*(3M4l#>R33n!-pZY`qf_qrSg zjIHErRFya;3ZvqTIqFPNnH%r~jRxp@gtR*tR>QEeNuf+9&3N&sb0=H%zxsG!ZWz%P zSH>hc0Kk-- zrZg#K7hlJY%Q3tY%-*Y)|H7h-gv?E~#AijL&y)G(9KuJk;-AIC@M1mj4&WA=CZ~17 z9)t*1Gz&JHPW#7))Se2bYt(B|jlHz~Y@W;2QEJaHy0UsGh~}8)6i6cZeth-kAjz}+ zJ@IK)=9EEp;uw3yQ0@WVnk^ngVludUECy51vy4(?cSNHc0-` z4Lpj(E0TorGfa8a1`Jw9gyyKC>2OpH_Z+8UH!g| z#9T)$BCe$4k{!#xd~r;FpV#5~j$NtQQLSqo1OFTMn~EZ;`T$r z;u$~^oJ4}QMhe0j%0cN*jq-a`saHuB=dcpN0!N*m?-$oZ zB!HAWIQZY>hKmKUq}LhjtVd-vXWiVZB0noGc2|#dp1p0J$k{m1wWhT-|D_Uz31{x|n$w2gO^&>*c^zWYvS(28^IyP+WdjYvh3`PZ`}v^874HC7+_z_G-GBq zZJ2e$9OM{0Nc}g}Jtp~muJ`D7I`W$%x=!|d!NL0-nX(eMX649wizx&oN$QYr!~`|uQrN5H&n~k{{ro#sTSG7SRz$3 zh7YJo(?UM1$S`|am2zTJHGb(aAN(c$AZUc$xCu}?!1zZhVff@hzPoCtX;s~JeLGeE2N(o^o7N-*~lYNS7 z#kmVm8WWCn1bvT)&vTc8ry%CEgmm6ct@0C*S)N?UoAFFL zO?9-2U;HyM$Bh|{VI_rl5(sXqX`N5MQ|R2i6{)@eU+rD6`V0yhvgt+SOB~VJCa-1n zWnhK=h`NG$3oQ?6878V7JY>Qnka^C-KHXlQ%QeNq)t2?DqIo*kH9eg2MJWF?jg-nT zoJ5RlJ68@wqawlrIiIpC1tvbedlecx_CTz$MPdCDNo8YTqm{$s3Do|Li;E-W@Yh=F z^jIA3VprL9894KFXj`p#BrTqfJ%mzso4w7FEsY9%>UkXZryCX`Tcyn@v_00ytI4cE zh4FSBkmW-G*c1sU_ zx*{%_zn%NsW6NI$S;e0)uuQnujaZ*1!bkQEO4B*k&XFxwIX*9_l>njW5u7L1hdEc* zax6rV4C?FYeF0vmmrbFly{2(%)c|G{eii&^Nvf8X=oOO958=@`y$~`P7M4uv%eKHp z?x9MV-z$EV;heWEy3IP|KW9Y{42-4x`s1(A0OE>b8t6)(5Tvgv7SxZ8xn9%JPY6ZD zwyO9RzV(rj)xx_hUda;ijn29mz6%ee0K66#2ojIWh1&bD1K3!bM@#0aCjvZ&61TV| zMLoStm4bcbY3#YRA{F=hRC0VLOnhh|m$#W{s&y2s=S>N;1-z?8_`P-FRJV6BO9i@n zcV?|I|F??ogPt0q1?J0D98a_uM?boDU2@`toP z)}X6c&Q)~MV|=9lnr5gzs(v6}xnx*k3`_MF`A2E45YCKZ->9TBvbhhel#4IaUhecR zm3I5&ui_@Wyq#6SrL0a$HVjf&A5-rC+%5|-O$OUB6vxDmt7S^-T!&(vd){CLOzfXF z?N#@9EZu}JZOeGE$LGx~ptI`r(U0COvUp=MQxD(q`jnc^{JH~@FOlM=qt2d_pGTc3 zI)0rm?S$UT@3`^CTCs`7ndsf;Nbj>L^BI|sjt}$7dnO!f-*{%}ya;HuhM&LPM6Y*k z_Rb5cR=0S(uXi-79zt(URET~tf&bD5*%cWTv{+_~&EKWh-zf)F8pZ|#|Le>%6Y&|A zy_KPfL1Owg=S>KFOAU?Y!>FkU@oZLQkP%F|jfab{-`&yoOL8zhPhDpx z!9%DwP*gE1l`gcf5t96&!As+OuIs&zYF9?C>09@BS5ZU>_Qkfj-L?I^wP3f|Qsnl% z8r3piFZ>NQ(4ZNiGd=YuwZh9=u65RQZ44(_w%(~a33 zi>*v1Cp5RH5j4$~*=t~+;=?s`*?3dUs7lUY`uN#He$(wC4q-R4)|Rmq9W|&3>OYdf zwoJo_WE_N|`e(yEh3oSS8tVeodnY`~GWg1L>*5I5sSSz>g2S$49vQsEGfs=x9O z&7p85q40hO*zb-=jJj_{Sf28mJQyU?2#=pJw~m97-N9fWL1-{w_(gDEb-_X-{S#bq z+9lveq-gYzmaQ@Eo>qzj7!k}Kx(Uc3zu=yNsPf)_?ccWO;(l5UYnB{Jve~gnm=8Zk zLu2Q_nRnD(6zIouND26hRF0CxXOKCB(u_}B`L`>soBpTneB=JdN=cR!F-C&S4T5p zySX~WC~K54D*A;a^tNmA-jJ-Q(|63xhZ9nW&Z=GJO#F#8Wc3`dE;}sj3R4?4zmb}mj~)bY zy}R-awr8b)aK2KeEdcoWLhV< zas3PgTvBT9ll2y}UiQ%hY<`d?hzLPp>XS3{#RN%`MegIJ9JKEiqt63O=ccYGU@5ZF zWN4bon#<1Zl}c(aj0cK9hp{)@tLMUSMd#*C!1jlv@mj>)@vlk>XAlhQZ*uRF5EN!C zMlK?nDHv<#ZXwa)}P5iQ?N)jAJQS3aaZKnvdexAA%8l`-JZU}-hZj-bE=BlL% zlM)4G(kCfHg$K>Dr1~9q$L_d>sq}$8SsU(ymGvPNju(yuLJd=#75zY*HvK`7w%;B$ zwXQLCEzX~gimXyrf@2$`w#kthrb@cZ(xxJ}-ewvB#9sCPQJ-Ey4SGB_;+-k=po>SA z%ftX)R%Ugao!~fxlCDb#|Muo$i`uXwmrb)9yj$A%m;upCJ|zonL=hE=jvGE-0@hXH zgxQ7~XiZ_iv*=R~2gx|JRt%s(Pq~}j{O5ZH%MX@`H%Sq2#(2WJ6Ir}cX{$^t`UqMD zI9{NX1f|N^(71v$Mk5aERYBCH%=VQREmZlHYIoYdu=jTiv5ko?{C0R(UD0lrMj&8?7yp>mV+xU-A{9_gFsoo z!j7OcwL>^1*XszK0WpsYQ&pW>Z&k zS*+X`A2&G7BRP;G67G58yv*?|1<7&gd0x&LZ_>jkElUA&f!E;q9Yt~$&y!ic-{n)t z7GSYGm`iXehTJ6`L@mANlB400^=&Xv(RF$`Po+{6)pYo0eY$NLbC~{#?UuIw@JjfF zFqX9Ui@U6=5^s&AW47TKgUejitJn15gVuSh7F!>er!Oa>Fn{o$yi!pnky?-%yPHjU zJsDV}WHvp-__ip?Oo$~1i#8h&z;Ingh||9zAAg$;o*^dT?Bwz&W2 z2_i!*-wir@1ccNeEqW{a(-OvXtdzfm29R__yiESBmg{}2cGHn|Zy$|_jip$A8XzF_ z@=8+Cz5zaUkInirlTz+F+zIkOInHCok{*zMzaV!W%kzn$bK-3k6{JYG+C3ODW`)t)sC9)LNi#*Tl{hCs$Jev#(sa1zDFz_e zGaV!9)u}Dr@HM%94peT2NQ6mk?Zfw&V3_rl=O_H6r$|nBkl!>&Fz zDxa$dSqY{7(%($BU(<$oReAUi%-#{|dxg_x<`&@TINWP>>g03WHWQx#eCxtp5v+JG z=D$p-g=d{wdKr)aRhfq}_^ionIGyv;c~zg5R*f$_Xg9->xoMDW3nQ#hRRX6yi?xh~ zW1<({m-_7|I#BDm#u@DHYO-!yqol)GsgocA@{}+V*;0)bE4>=3vIn0z@oF!`U1To? zH{!S?-**t9qG|L*YeTa)gPGh9;;7qM;#!)Ph%Y&{jD1_$E65xl?ZC7*SKf|mkt}2; z^ysLQ+!GjXq|N*zOndmPlXSg3T=b(0?1H&kSQ*YmoA8BuG|y9Fx^mh`r7>_Y@*vZ8 zL3BqtQcak%H?PFO_39hL*2ute?-Y(i&j2<8#+efDlSzZ#QnX*z+Gh54u4>A53^X4k zzN<3AhCYpFfX|*h=Gc8{PS&JV?ld)x1SW0hg_&Sabh5#+FlS6{=D?sEu%samrP@N4 zFGy&;O+>p^z;%J3h9aHZ{LeJ|5U=D~mUS(Hyb0&Xg-@9V z;>Dt1B~FE_UJV_Jrn0=I@tk1GZ{~2exFFInr@_RIYaQWRM5L&!nu0f3b>=1<^HcUM zP1UG1<-<8$!Q$HXz1j{>A*rzTXmyn6$bUl)umieLp$F0=QdgL9#dZzjs7l2$GSlq` zDdZlZkpXtoE(fqg-JXq+kvpr)52ty~i-_B(GIA5z+Z;Rf-^_=go)Q?5M;C12L7*M( zy``*gq3uzt}@x=h6n*Mn!&Co<4aMZ%hRh>fO#GGldp-TWaY{=#Mp(Z&RcaT=Tt6BZ<#%IkNnzx60 z*$??q2>qqBXLsC#vX;JO&mKrkjRX6ya4Y|es@{Zc+W`@aNCV7_(w`UFu7JFrT8{=RGngDs~gDCNkinC$fe%@5lZ{6y6VKqf-Q~q<9p_#^$y@~ zIVWQ-YIBaTXIxF40Q^KADc2K!qv1&oY*S$N{4~0FcBkiZUOZ^G8Ks_wBpUE3dlpTi zALs@N!FQn(=XMFK;}-61Z^2SKl|oj6-j72~*3!mUTK7ao3IltdYd$2eFl+99Y>cR@&CXV4`4>DdzY^x*$)=r3wCrx|#(npX%Wm>--;*hK)SgnIq%Vz4W zA8Vp+XTSVZwqUwu_gLf*?H{5H*497@f z8udi2BJC#w2e%&RVsxa#LyFB_QmJu|qmX)29UsaiPbHj1WSl`X0AE^wThh5e>%nE; zlVn3u^vq~=;zDC_ZJiOMJ{kY_T9R+ZjI(?uocF5%4c=ZHH5o{GoE)h69avQ-FINv zJA|-Z)U0{y<(Lu7s$N3jkLPzZ`Z^4~vOISqie&BX<9boZ?9S6X085kdtvg)qxiQ>m zW^I#gj8>3AJ{hlVILYI>=A%D6XEm@vUgO z1&lG48GfRvxlb7eF`?W6{3z8`!8l~Iy#PT!7I7K1Wtl%2Tb{Z5_t?^I#-9<7oV_KHlU96>$rOlGK)5)+x)&sGihI5( zG$a-BX4}vJ$LstD*sSZajo390CX~Kw|?XUxwVzS!YtAnZ)iO4N5IN6m`;o4VYPev zBO+a+XX?ei@zHA>=eU?`jSNjr4DG}y!LF%|cWd4pNcKF?x%W*qXRMXX*UC#K$<&=_ zemg9J_*Ru@slo*PydzbTgw5dTLWFq!2W0t>pd&Bq%DgGT^k%HRYSujAuUyiPo{P7X z6=sZvBF)F4E_ZV6JHvd6tP8X5ej7YAO4tt(#0>blRx`#!@`N~nFIfFqOTz{rS0_Hf z%BaYqbw|YnsQA)m)>Up;<(a+H3gs9OaGNQT&NkE4%>C&OdZ^A^KN+7o?W}M1F1x}o zub=ua%5OQ>wDtq5j)>>U6yax{oV`2*Xyl?S>XO$oo$jm}cmEfrOSw4E0f=ztD<q

@q*duZI-3?#uGH!Y+y2tbR+p@!jp=B8AwX4&FXIdD zyAVM?npDaPu&Y-RMV`>9oA6AvJRC0=6$LFzXnCMJ-seS>f8@wA`XQw!cymw5OV$!4 z!8rR1Og>G^@}CGPmj6gdu`v8M6ZNkO$Hw|Uywv|Dq&V1_IRC#1sWxzx#7!i&D1Vmo zZtS=nApy_ZZYgm~Bmx8^g8U$r^X?#sKxYvFkaG%EfevTT^M5A=!Jf1GEU($`-{u}W z)9Rz`SsrFDvlnJ=&3zN*F7h%EK`x=?c!(wf2?-6XyaKmbBoY_|G&EEsG&I74BbI>t z{kdKTB01(Vbf{1fiC=W#VdxA05rYc2KQM~$5deR@1_22a0VH&=NC;_ZU=R?|Qa&=n zpAx{zxZe5*0C)-g*^mH55gjTBc)z+0X6XJ*@%^)ux%YJe#3dyK_u0AmCvY!8gSiR- zJmJjIDY#9=7=Ux^;UU2U6@34q28yqMM!&@U1Ezg^LU6Veg(T?BJ@f$m>0z#c7(xs3 z^!OAY_SDA#e8An#auG`~mkE7*GNR+T4i=6zBoW-1>NF zb^QatQSQ+-U+Dt@_T-%a2ngr+_kY}fp+JPcTwMWz;&1TaAp9@}F!w-${-wPxI)wi4 zHv#kk0=|nn`xnMx_<`etV{G*!3cqD{01N1jL+tsN-^u$>)S*uSM|BW000UY0z^VG z^563tWpwuc9zX2$Zbp!k@L$qDH~M&To8a?f>3cL6a0mR2DUKbYK!@6UkDa@Pj)V+i zw9ET7Z~t|D|5g4kJDGa^ubtS%j{Tb*_pE;KZ|rtIF4*huU?0UQc62%rFNql%!ml)I z*bi%mrvk*(=C@z9)*tXG77D^F#=mGF+o(uApXhMH<%3^&2*MaxR}ZO{KLfIU)7Utn z{#Zncb^7cuBhngge%5J(z@3J+h$vziy|M~ZFyCJKtRNVW@2u8DMh5`k^z`6wTO14G{gO4ud0t1PC=DharydEMUp2U#*|MwL%#_iVO>X5XhuRM^CtQZ<(^u1L_t=zqa0a zlx+P~B%-j>G#{k%{P65z+LKC4*wP%lIrfaInCuh?VPoq^^NAdLZo4FXieRrq2%erH6+aL*J@RwV;G;W zcjoSHDy^qV)uJ-B9LBL-f(lUF@61$ zaYb7%t&6}?=e(vq=~YU9kelodtVBI#d*Dqmv03M{IN7d0$r6W;ICkC+4Tv>cZiRX9+kupnKB$5=iPaE zLmOe%vhmuu_r4MvvcT||q-j}5;p|Dr0k5~Xz}b@pe$~c-E7yTZ=ey0Pg4+{df^lw$ z857NL0kK`H8~Jl`%G$aY6f+;IgLC%`O~Ygidpm&#)lgdYa|R45d`1`dB)zU32XdYA8Y zisEZ)W(#GE9=HG^kaqTf95wo996qV2zaZ^N<4TENhhQvQSdA_8~CU+`Dx zY$QLDY};%WU)m-G%kcWZQ8Q=R(5iJ_pV0-w<=mmHN6#;5d2qLrlw7mJSLQ8Xs!>AN zbHJA|C3hF)293&zQQr&=7Zh-O73B;{>Q7(ilc)MN-b>A`%A-I~eqIK?uWk4pzkKK~!h7Kap1&AI4aT$)|fm#bn8R%Hv(>w$1<`dCaW`2q>9YU2oS?(>=FVz?ZY}Nw=)UL zU?m+LUbc09*&-csv_=%y^=zddP+rF2YoeNQ-fW(&Ha-bEP}WB1@=mKRKx4v8S&jR@ z=IxP^p|J%t&yCpO1xXrX7g?ABcP*m$^zGbkU4`#BbpkM_T2Tgj^o_BNzN{BZCU`Bg zzj&*7lu9QI?3p5DFVzMj%hCB;&g7#heK+z;r%W9?cW_T&+^HY7%7q@gsY^3DOg~8Y z8U9>9Em5oqItzCL#U!qK(42>TMnU$PAZ3?W)TqqsHc~D2wHUOp{3MDLyM%KMz^uo0 zpDk+Lk;>+G5+1h5i1~JJ-GO@qjQun}T+Do4E$?P9J)V(8z1n_YRGQ2rADm#9cOWpv z$x&`VqQK0-ohG`pDK3z4arL(*HPOM?)K_9T`kX$NO%P}WWdPdp>^aRt^x{)iIRqK% z-@vA0S+a6~UPP(I&i!V@>rb~h_SsjZ$5~kB&a?B*4Zm0RHF5buw8`x^r6Eq2MHjLc?QDXNqxMn6+3My zy&>KlurcS3V7z?m(9=B5_TkuAvdH*SHGOm}1o=E*qDv!M8H^<8aWEGzA{QMudTc zi%LJkSE0$8IEXc$35wros{rAS@+1I5U)7WI$$`ZyC5Oy)Dqo|tGGYWZV$-HsvZg2>N05TeU>vxVQEw@{BV|9sU5QXS*< zp^e(dPLCaC-N`~NdPJtad3<80FMw56UDy1$k;Y)A{J*SU6c96^{YLqJp~0+83OQE$*@2eAXmBh!`v$3EjlWtko*2<=%OOb0sO? zPT!;pvFE>BKQltIwjlDQ4g@v%C(Xtq0~McjV4$iQnx%`_@W7gg=-@jT4i084F{bj8dw#tX#x{33m<3sxAdmXR?= z^gF5|cs>rz*Gk#@z%M~bX>vWSUynERC!=6*F@BmYXNM|%+Jd4X< zymHP~{w55}i@S2x{ z<@OkvqKT<}s=Nw$a@B?~Bj;HNd5Bt2As)t99_RKQYld)&>6Q7))Fn0@s46mniEYna zx}lf8tWpKf@%q9pAr)g~@y`igU3&LFbopmS(=?p$ndA9#>vE+FTM3YTlTF4*B}K@; z`wYCg+=o+|b%QR`k*VpVIAH=CJ?f3-l3PzbOq9@3DK^{UNulnGDe4jRH;FhhX?F{Q7R%#|D)$wwnlW&)~7 zu{`1QEuv5kV{eKLZ}1gm{V%J_BI`|e-cM{@cl<&;)=|8PV{S}s{Nt!dtT$gAEviM^ zoQ%%Y;rz|Er;%>s8aTOKEj|5~WZ6DkAqiX7l78^o z?!c&cv0>ypw5ABjA%lDj&nfSg2^|~d#vm1UkiRoj$n zxn}z{<|mcMYW~938MC>-5lZ(F_mv z?9OEdn}r;~`NYhIGVTtUitf+nv&L$ws)LD+D*-Ih&o|*l3HD9G=LCzV*F13zO}D$A zh;-2#F4?q^Yj>&{Tt)st?OrT{UoXiN_8$C{U}_R#BDv_ zZWf1DME)4o4iZyu{HLwCh#%hlM&p2VFQ1SDa;t0h^j!DkB<)gP??dC?h_>$fA912> zN%ipEcCb+wLS>WlnKT7^#mTd3H_Te9GrlO7ir6DF|I3R7eyZ)CIUSv;>A`YlhQr2FxTo&c| ztsZxp_nl~4uIG}fU(uc(_6T9HA2|zA@mvMXUv=xIpUH(CjJ7f82Qzk3+RQ(CT;0$O zaV1{EnX4(9kKtk?cOpDpTSpc(P<)#tDFG@s(se{=>r~&QtCjr(>&Npw30IGDE081I zToaes?^Hi93>LC~60PTf{cK<9Db{rsXAPC`tX;F$j>WE_OE0%fKVn(*e0AH?iRJ%p zt1~`qET52)9%w8H>2*>F80xvutH}Kx>_@|igFs3f<&kF>lE(6Uc9HD5dY|rvYlrln zfjY9@09^tTJaMQwRcDfDF1s}!50sE3wFOazn4v$AD9}cml{Jy?uv_OClBNoU2aQ;p zPKF?6`=RZP?4OJnI=Qu`fV~1-E$KXUr*z4JuJTCV|9N{0J3DN&j@`5`+#o*}%WSW2 zi=jqk5r{p+jvkdylU?BDUM44Txb~H!RxENMbS;nCIn+n*yd(j21RWcbb3@$=X~(bD z93V_H*%rvJ9P zuUXlAssmAFL_}|H#cnhW4&{`e@~tJ8)sj^Co-6A$?5C>zV;P;JVb3;aD97SCai4t{ zg2Q@PdbjQ!f*W2yk(Rn8*7TP#(%C%211mC7o?audJ&f_y$s!;M>gZf*W?GOw7A}+v zq4`oZp9_@OLmlRg@God~duhK+AyYLHR)^n|VEN@wuZeV2##p`Ng7xYlj`>()QE2>DD!^X>H zd0Bdx^-X87!h*NTO>$c9d?Xd9fn}a_a}WjyWaXS2X-so=?{fAeo)oP>N=W<9)6!3- zmqixsOsPYVj0O5!e$DzN69$8I1si^F&K0+~RUBKa-KN zJ%`|1{`hSno3^2Hx>d9t-nm+wXg4-LwW5Eih_i(|f!|^m=9-nbZ8@1TsQv&*o4$o2 zcP_dmY880e zTY7cu;a0ShvcSdnzLX;1?a`tmReg|C+m18p$u6EAhu&;zL6lTHx9>8hy}v6X3U*vQl7@kQ*NQ_^A1f&J=-b!0 zV~)RVqSu0jfNuV3tB>r07KY6pIc<7wZ9V1#z0wfI98x8I65N9f8 z@)2LTojk$Ao+x1&Z%KwA<&Z7oAYf^`EkvIZJe%s?S|fcO!R=nyfG;ad$M>W__Q<;4 z-Sy~=8Q;OgKH;#m>+N3|E@36B-sq}j|8v=GP4rwR+)U6iQ4I%sCz@mWTiAv%yUzG# z6L=A4@5v9_t;Tez7CtN*O9sWZ3)Om(76;duO>DN{VEQEWe-T>henAZd8JRNb*q0+m zq6xn{1V2LNr+lO|39)k-(}CXRl=oA#jL9(=pk_C(X)t4>!5%9x} zB|uLgz+5wTO4{3bz`&Tcul$Yc%CljMC_x!G8$_^+zzs1^cX@eipZpCHdBRQmloOes zmt9`17OhcLH02e%I;Llre^E9IhXMzywkUBv)Pbr`q@lFHazBkTLb7F<_ffsHzs9-NspWqU>EZBIT3&MVQnzuoyVb$!kY7WulxZ zW8;0T?06(>|N9Kz^MM_UjkBk^P>+KSW;7Xk8Q;U}dRT8c;9$)qT~L2Gc-4Z9yqm@A zCk466UH<$y=3Y1XjpGP33&rcWC~z%X33D4-J&cIu&AruJibF*4DlrLZtyeRLRH{6_ z(5}=E__4z4S~^nu!{B_&JL*)3UxiH7K|VZMKHcQY*%O@0HK~DD!A{THF)sSx&+Dj5 ztLsZbRVF!tms%COb_#wvd>x{Ne93zUlQX?)PvMHwDb_++Xm#Mos#oN<1-LP4r?r7? zlq7X&b8IL6JpeM0qxZZN?{^t3m^6*kwQ`Hx+IBmi(KZZ?`aq|Os|M^H%04d_>z;+` zW0N&8tohTs*LpPA;wW>c{gU>kkT%B6bjF%*!K#Xcv5^jIPi#H zj(eNM+hO=k(dS2FlL3ql<=Jw^Mwo+{z zbBVT?d<)Y1t8_M>gb4s{hCB8_%`K%eu-^8Spbc+Jr6$(^O7X&5t57NY+d7A^c`aq$~faym@|#`P8-89vDyylc0S8W7ZQHhpq11OY-Q| z*)46)JyI6CH>AGq!Q;~WeX*me-B0|oPW47S8q^4op7Mc1`+NRr*~q>Nb35eeuG)5v z*sC<8d=={0?MsxA4t$IGS9F(q_v+XLa`SK-%o77%hi1CB#;6qC;)!fRF{mU$_wIFO zHGiTyrVSIa>{5F|-ignKa|EN?fQPfJ6TFnh`I;NJh=BoY?~}nGo<5|8Zx5wl0kW-D zUKa(u-KE`CuCgVFz7C8PIlU-uu~1m)UI{wXA_#nnFIhsKDPty5hGh~y(8z4Jq%qM2 zGrg5Bf}xEoTcUf?9O14|6=KW#3TmdT<)}mFhk>14Ecwe++*Uo1X)uBB^>}@FGYA)u zlyN9-rNL8&j6r|@L09JnDk2(K>a3XWu5`i~n~gH#W-$3g7?#nn*MK6j5Jm8X7p%ta zeHMZ*4ARcs#kXRG&U_h0wj0wmuv*`#SGxa&?$!6F#rW7@bM1O{Yk@2Ar3Y`15xJtu zqy;|Gb#=%*gHy%@-GMd&|FA$Q)~^A??0KFJexg~pgC*$p+bUKF`h&#r#`41>%<`4Bda$B8Zu46j$1V*F@EEnTzrM8Ioudb<{0Q2d9Mxu1_P)}}Ux59t z>>9<8t~fi`zN7Iul_hl~pJpDm)MI*e9KI4#I@gRfy1IZ0_oVw^y_m+q6KVwJRfaip5O15qq?1&u(E`Hc3>GN2SWFqvJJV4 zpiwtdG7DTl#xHc_kaz0F-Z>Q095?{_X%=c}y}G|-+s{?%MkCzh zF}nwbrr#V!9!qkYz#<#{$Y47@CU<_Du;t;kKd9EvIv%>?P_@#aeHTZ(q0%dJO!iDz zAk~=ulo;lSG&{n+9Fs}tJ=VbnXmW|4JSR;$WKf4;H#m;;bUh0cudP|+WbeKTzQtfc zC`_-(?wM4X)@VQyRWnOQJROw19LJ6xKqhv7Sl_joqlY)71ZArD=wf@c-O(Z@KjtW->6{{TmEK<)O_dX)_A8Yy-}`%JH)=Qzf0zb=2uWdd4i!er%pgB_LUHU;itbwK_XlkV z(QxWs7xMHOEIUn`M7jeD;XZKoOL6O^F>7mk&k!MFSc&Maw|5DM4zO0gw}H(>1qg3_e`%KB2Z1=yG!29ks7sKzr5f z#PW^vv){eM$EuxkN?~mZW>YN*2@pM6tdr(d} zQmwEET|C5Yx1p!ISX;g1lwHY&bt0w$8kRcS=mnArhGTioQWB9j4Z2Tqw1J(2jLKHYa5$sRGlxHn9G&uJoO==%rNmA z73JM!5!QYQhQ(R{O-4CQgrRgC^Sl2#uRdB;7B031c;x+MVm&>_*UMf{kyaQDr<9Eh6MTYtSk}892kR)zJ8s0sk zWqBv;S+H2X>{z`y<$Qo4SM+G^ZrG&EqTaAev&%RUNwO4)Ya2V^vrjxxV%SPDqsMgw zPqSZY5lxwPhF$ux&S}JKS(?%9jVZyf2(s4mwslk?vm4sftn1 zDWcX2`g)F^6aPgZBWIcaeMT$3`1h&#FoRM7^ zhMbU+HGS~+qF?@#ht~3Gvck0mvHKzc4KH|rJP8u{URY9B-te$5&(V&zwC5=q~=nYl>-s~n9Ty3 zuXBzz7SA1y2_ja3-Cjl@_0l?IQM}<-hOp9Tl2-_I_1O%5ZeS|in-rQE^;wOs^LZOx zxu`Pdqhu^b8=i?vLlzA~Je|*x6Y>mAVO`3{n_qwj2%zQv1f;P2Cm@BH{eL7qOa!c) z%>S{K$Hu|I@c#{@xcmcBwp(Zyh9DLM1xTOpglZS!>AJz@;y@rs14y2B1Q8I<38WAa z&P7EsoDqto5d~3-!coq%u_rlCe@?p@cd#*u-(Pf`s=HTqoP76JNNLJO}E+~z2< z;vgVspjDQcTav&6`;7<~G*J46O#_G834R6u=$JvkB1H;Ke$fR{gZvNf(y&m%PS5id z1#IBa^TII{M3mG-q|ji%{s#6l{Sp;0HVCkmkt4w^0RuMAQ-GlL75{a8>?gp*ad@-& zd4@O&xd#+AF)0G^D+Ny0MZ_S1`3rO*=nw;;{uRSe20e!XD@3*KSEGS|b(q&j4)G*(fD<4FK?8Ic;ScNw3)2PdBKnmM1F{E{!9i5-XK&oZI|Kb! z5a8Y)8Yxu3@E#M7f&&P6$PSKWWdZb}lTg8Ltiul?u&>t~7zHrmt8;7jNV5l+CX2pXu&PaHk?aRd@5pW=<4XbCiOI`rNN00Q!6RetjGIC!u4++TXsy{y9fNZZEXbGO(e)(%*I& zQBj-N=j0_|U{Dg`;{g7KOGpD07n%42{?Zr&i2m3Bf92}XCh=lXJeF#IF@9GX&-McC zeOtlt?eSY}iyo>*0zCYPAFUWbGQj+jKK#-??^6DI#9BNf*cXLe`iVE&D|8_yDZ;rkLPvxL^&R-x zlf1w!U<0xX92ms-kvxL4f19$RlRz2zj}ZC&i+X7q-1!aP{RDCz?&527(fNfTxPN{* z>ARr7!2TXHD?&;Vpacbc0Q9+YMjYI3%7fTRa14C5CIk!+pkRf`10I;e0BjU8`s=S! z(ZQm)4ielS9vb%XOAYccU~~=pQUmnf_OA4PM+vwS8~C3?vdGYFm2-8S*D0kBOP_6e zEzIg`86nYj7LeL+CC+}~xX_zhMs-wfg{A7=$}^{VB62eA&kpoDaGcp}r{FTBR=lH# z=j}A-HIOE4x-~7H__u+IGjqd877x=X*zqxSNqXQ5!R&ij^EqG^r+ac1nRaV zXaaWtLBE!-DQVinCp&4aKp6jnLVEXhG_{n67Yzu`@yN7Fgw2EN$KHUGOE^l1b3rA% zM>^Nncdl+~Sn98NvSXme8zi*Ixb$sWvVMy2$Uel^H=Z?sY*8b8meDCAu4HC)iQ7-Z z^K@|+5z<3jD>*2XUyj2vV_k2Tb`6Qui~^cuqAj8Ofv;LRD$Jj2Il|_`S*pcP2NGh; z*_+ipE+u*?0kudDzdwhbp$;-#Plm6jZF!W=6pKj;$4pZ`Ip+4Z*G^29s;&TH)sPM# zsN#Lr)n6$2s82#`9Y+I7-InnvO-XG`stV#k2S^%-Vly&}?}43}s+~KQ%PsvQo-$&$ za!}81YTUM^FH{;SbUoPJRRdV@ zguhmx(OFA<&Eo663l>_6Zj#Mz%y)O(&^32stnRX0COq-6?@}3E zE46yMP$C{#LbdTT!-2RkY<6c$AwVg8UvY2JIjN9NGI3cV+#T+OKO88xhlK^aW;}I{%RGtt4cK99(dy;sqs^7(4T?D0{HZX zo?5hU_name9PhlX<0@f2`I9U$DmFUj#M)yX*9J#Ax8n{!uutLA>*)UV)FH7tqv zQf~lsGhZVU;EA9{i`tv)mmQYIqMac_EU*626X0o4m~~RzG#iZB2xdB1M*%dC55^R+ zmE4lV>f+bIr;#+3PZSW+UAML)AEm77x5Nin6SiyA|9#A{J&TrQ^D6GeDX@4H>?Rl9 znIujgOI@87Tw;NG-l$B-4>v-IO3-?C-LV*RbjXb~OTNbjetG3lcZ#rYfl0%A_ETW} z5W>6FYOUMG+MZhdyGVN|p17}k6R;FsBIwCNk{rJwwVtb2J5G(d5S8J_j&Pg+A=tVD zLj5Ee{_yRfK_OG}=fr0b zzK*p+WyDzaV#V<{p%t8Us&z?OTMNPdB=jtGMt?fd7i6$aM4FwsqSHQ4zJ9oMCMkL7 z)F-&M@}CvTDq3AXEi6jDSBoi=MF6S3cE`jrzq6^Uby*#h>t$8pa27~YaMm;{-~hJL z?BM=tK@igpnRInGX#-BT(Tjr=$|@l!@33)E0&vHJNJ85dY8N;5Z8@ne)g^zHBpzkP zFy<#7_`;JNb5KQX5?mKP=bC4FjRgV%Hkos_GFZKDceVBM86v!G%S?gwt_6k!JZ`_w zfn2K<%c$EQU{DQlnE=0z7b)glUi4ZDIf%>FX`M!KvL)281opyf3&7e=TR+c_;J2hd zh5`Khm+X#3+UYf1U~?8l7#(LhR}oftJDzFYsK(yc1dAqN#8nOnB~N9TU1>~x-X{tQ zmFADpleZX&&3( z185qeKnCTDocRiR?s7;JrYrn>JINIZ2R;I5TpQw5rDRl`j)x}o{_CYk+4ov(i3mlO5fiR&}Mb7_V(PzFse{f@ghu6Pi2RFFz5YntJv*7hIHC=GAM4tz}0 zfB1u&3%oCzFVWnDTwGeGwNwZvcxawH;c5Kt+dI3k+B@^# zp~OutZQuAj3UFx(@%mN=z%qK*$GRR2hjI4^hSdQCY6y%6%iH0w+lNn(q z*a65M;itzI4cBOR=7o{;)Tui?FV&rczQ!f-+54Qc z;pu5}ZtO+(f|YRwBX{k4vsjsT3MorxuU*hXP((Rkt!<*ZP_{g4uEq$N}@c!^cX4NcOi3^1JQ6zlUYAAOw-`@#~I;;|I+tbgzwu1~hBY-JLKS$OOF zCC%yU(;daC#aadDD`0-e4KWfVM9Cw}#MS2sEqr44x!$DJXDhrc_#-h-MLP7C1(umB z&acR7)eJ!^;SH3=KAt z>x=)KUI%tUZW|DJ)R9wVn{kPlS!AIF!-K)AxVVeSe}F~aF$8^nGLAbs$T&Q959O?1SJGtx4=xR`&7Zz8 z9Jo%F9)TjYRnEVF28Fj(j3oELvFjM^hmZGqaPg3S>^{0G7hbo>A9v`l_8*RarpOH- zNqxsYTRWAEc+fY#%!F(@c{H~*$0z^?FVuS*j9iZ0^t&6Py(3TF;Mlr_SMW3gAd`fk zV}$IK$x%|HxsG!eqk!Iu#Mi6JEJIVuOrGGz@{!kItsZoWzWyBgzTR6Q?rx&EJpS;u zc(QyGHrsD`B=d^q9UTuzIUB0L8Qj})hsppk`goM@0fj34t_2%p)lOuBejzMVSQw2K zIbr1;Vm5sb&`_QG6RK2v?x38U!+hNb9$*f~om=>lZJB}t1E~Uev8ABKthkaJ=|gQZ zA1wTgMEp=ftB)x@A$DY^h_QZ>e(-xY^AXQ&io%5@?lOM+wNS9GPB?hsr8(Xb6C8M1 zsuljlVT;9vLTo;^9+Mszy{a~8s{PUcdK1ILy4wY=Oh<}ro`qj#Q$CNS zXiW9~`fw@QcONg$@PlC55OCQG>P^Y7q2X0?+eFv5arg14WkPvriLQjgA6EdQ-Go5? z#fWF$pi zTg$n%8(~fZifqg+&s9Yl`>3K)u}3)WNh9ey2;j{OSNCN(rO-YkDsWtwsqk3TL#lSZ zr1a-1hZjW5oa|EA|1pw9YxQwtGV0&nz-!~atB^nL$mI~H`WPoBd#x;+dT{wvuwkB) zRTT{_k{#t0S5Q7Yn^BlDIJMFPh8|B~;-i6N=QAOBmUutp@JG1>MK@V=HMTZ)m`-k} z!V#ZpF-=CGR(0*8Xndp4M+UTOXFOVgj0RON+ImnVBUmT~n|bIQ{*T?3@sR*tu7_5| zR#RN&o5L#QXyatM4%>i5~ z3oTw3g#pemu!3+z3Vmu;*wu`?nFaP{t65aw&?M93 zi4)r~Lo9yaJlP_97}Yud0m%>#>9@*rQ9-kO_@GUr*PggXhASj)oS9~Jbk&K7!G+Kk z)Au1lY+PG&^+B=b=Te*MUtn^k81eCFIz3;?e^Jsu)AKGp>+Oaj@(5dAQrm&=C|B2? z=8Q)wEW&9n0L)*oV$g+)Z_$+PpQUMc<9mfh5U)awX)F}k;o9BY%?*@u7d&em7$`>Q z4~6-bx{!H9oHw+%j-4^zEbNpPRPKHHVp>~QvZF0GlVOaY5jROyhsTr}ivP`<7NakB8v<=ASDXP7a$4i*5~xt4P6TOi4io@I>5H z%Bwv`6wKgC7YO9rq>N%P7qtUtIl)42$qVX(Qtv0gmb^CKOtr|s51kv@PB}}vVKMIX z%2WghDTr3<@hHAFIv-{i;L!0A)V5xMf54JVoO^{Pn`tWmkPcFxTDWg$mu$^yXJqW= z0RMQ_481;KRl>jO4|I`kzS&06krTxxjV;}59Cs#3RX9l97o}HEKY8D5NQ%mymcUMnU$jxd`sm1JBroJYP6X(1>uxiL%bdV9-LJO954!TEih3 zdKg@mJ}DITvPv8(3u#ovefds9M#**vD~>fwG-8+R-QRGvt(8))*M0N zMbU8&h75GqU zF)?&aSiUbBlqQvDjfV|aLt3ri6RZF?|h&2=9IzkLrIUQ3XVIa#~ponZ9h`^w{hic9 zP7p5JXG*pCr|1nyHIJkm5~ftqOlvUOO_5dx>cfnXVaIs=FWB-<7GhQgt#}&Tp{QiTJ zf8BUhhigI>;8B^V;mw_rifCuu^t^ZPZxNwucMd&7Hcni9S|$D6_+)5BPQ2?!g}CT> zk!NrPySUJG<2z2d?#m6k5U7qu0`t2M(o6Ev3XOAfl z3Xd(u>OWFGwafZb?^$-2?v{zDfP63pI92G$*6KNgDAr030v_m8sDSQddATAJkD3$> zY}IDj;pARoE1lp=>h`@+Frmu*Rb%yE%0RK9Q6`VbO8^;Nx)^0oX}BkfNhQnQ;wX;7 zkBX)5^d;i`dcgy}B+_oQsP%!YJQj=tC#BIGqg|Uf#~_lnxo#fvS`eO;p=$&iXMiD5 zyQl)%l(|+T?8Ej}vQ@WYsTV!l>>QWvWSk;?N>ijK6YfqS28~Zw6@%i2D$FPjMnQX< zv$CtRQ%l7KO0;FWxWDooXkO*iBwqE%E0E*|lpghMEM)`idTL{L$#-?(`f2Wsa5Lu! zcmi1+0YD~e(bWfHOp5HTdh^f1c88DLi@_juI?tMctJ8Bsw&S9lE+VDih-xuIq?v1z zzN*dhW}+>lG4SJiIWH!2>5C@SSl7o*^b^*^13}r7_T*vAD7<(LnqF!NaSi-J%J2EA zuXndL&Ff0nIA-TitUbo^Qp$sy)~D5pOLl5K7@vovsEupm(%`!>6`XexdxA5VV19$v zBr#j4!?7ce;ci{w)jLk|@r?Ek{jol8WoG(P@9RDAZ`CQa`}M~{XY?yCXeFV(7n@Pq z8>eWWl877d(k*^D0)>N=T-t4HH=N(I%Q^W;Ox7~HCb7#!gLaO6e5wbaRxK>ic-Obr zBTkHc&GL06tS+xuNv_Q9O7}C!c><~$&Rp!NltwvEkF9)LtL*$1I%~*}o_POwJ~MQ0 zfzTNmy1s_;D+P%7CX*K}j+Za(=(jzRSU^$R6iaGO=>gR!0b@i$MQHIT%$MFIyb-zIwQpMz7 zb777c0?k7nrb{hKl z0V-5n6W=w1zP2y9Mc;fd5l+e8W(Dulfy_l7w6a!r@`t&7s|X_1(W7JB9&p%l2R&g@ zuqx*-o{(shLxC7DUG0VpqrjYW;SKZ}BfW;=LlBcw(VGa2#pJore4Fz@;fr&d3+N->>I&Q`_W$wXpBb5giG@5jgkx& zHFTL@AL&%HN7r_uWmjkrzQ8MSAJD++eb&{FLO?!$GVJo23 zJ<-&VuW$WIznr6Z;09HWV#!0&Q2)Yw!MBDhx%{VHjpIM;YD|o*od55kHzPY6JM(`Z z|MyF8Mh;Fk*8jV#LD7p@SUa0K63~lT8#S!em_qUKK{+`)ni|?bxo2@&H%15d?8w@} zZuA=-9+5mRelkpUY3z7Vab^dO;Mx+{zzC4x{{UA&sK2puGjVV;G6I+x8M*%BXz#=g z5H)hMGzG}f1ElTkfX;B_BK8iRPL}2tE+6~+=Ocj9gbKjK#l=DUcQ`=E7U*PYVq^!9 zGjg#2+J5Y4Vq^nQu{W^ngafk43Ian1^!zaJsdee)xy&GUkfVsW-jhVPC&qi!N$@AXy^P9;%a9KbOLTG?f&H~`!5Gtz`qX%z(mjV-*o?u{wtBC-QU4RCMNc_4n}sKmUiXYK(_iKf z4ZhwE_6`8E4;esTOEcidA2@GkBR3$x#mN=u>;2D#|0OskCV;7>i3`9OXl`i-_b2;@ z8EEz|{aQ&;?k8}D@$!`Dd0m^?5 z2o>OebIIF(bS@A;`KQr!8QB<3K7KL%e{T1`L;nAD`CnQ7UmN}ZRwV9fWApbq<-Z*M zf7Xp`Ep0si?eWpMt}Y)_AZPzE3wHn4RRj31(Uk+5TDsc)-&H9WqmOA2vNQkaXgVfV zdPdfN*)5&LEj@syik2=W7XRv+f7#Xknl~FuJD{Syv*lke%tsU>*{poQyo-KJNO1*Z|&4A5&=x^!U4(0SxqZ_AVbG zfDetn05f|hxW6uzoejVs^q1*h#13E({zDu929ZC+31ATYLtFp`vHubWBY;8t53v9k zr2f!HPT4>7kyGvuedLt?LmxR6{!5%6ITim9Gk`()4}I*Q@`qRf461+VLy_7a`q)q7 z4}I*X`G-FC)A}!QeRvxEp$|{vKlI^g@?T>6STnJ=`M9$GSXf#Ave?@GiT~>^8BG6y zOaKPpKk!42*&qCiEdR0kAtY>&t4z;EIb`7fOh}z_^|ym{^Q84{(&FLtp9-@ z<=gxNKeXBY!H*Y&;UAel-Yf?Df8a-@4u4Ad@OAk3BC)dpnz{V3GX2~7uNUCI=8vKr zKIY#3AE(0fq0H$Y_#wmj&oO@#<_xs8{69ziA;#Ip$l2l_VIP@Y{(&DJuK&Ofxo-c! zkF4(hIQb6=9{<3P+CBfq|CurqSEmm>E`L9VA0zl5{`>n42=oA&z%4J>oA88K)rPb` zR14v`)9p_%vmy>&Mcu$??1|yJ9Vi8f@IGF%-Zvev|6wASDB zNss2nTCQ)0G&A0%^_fEBdpdEJb!Gk~)77PI$YN(|j&v*|8pLry~ z`?>kYeWk@YG)3cYdIYeEm}qDmPEHmCu#gU+%#I(zHA1sf&+(K&H|-&Tl*Z0uDgvZD zSyFpbSCUtIF;dFr&5}b~-~*}PB3tn!7hAAG*&fCeJNi7-U7{teQOn7ygi3u#9)&>Iz1uDutTrcGc+ql2Ad zEop^22zLFIgF(K>KwB-^7_0|Py40u@wD%!P!jlstM_oP>o{$Eq7vTG_Po9lQa9QSJ zrj9)`v{Nv&45KA7oPgAv;STkgKIPaiFkKJ!Ym7!4NJR86!1YFcuQ5V!lO=I50#|uT zp(`oI$umD_4EJ@pYTFj{#{HaJI;Ayxn`Ia&1sCkIn&*rD(lt8U!%q$@azT9^**D*%lgf>*LBH25lZj`;(?|f4rN?N6> zwyeL-?Uw9o-Hl}(3E5?>!WX!_Z$#PZ%Ss6XCm`#GFw7uVvHKgNmd?nCk^u}mcv%}@PpZwbpB?xB`nodf8?*-=0k;o9` zp zCcIygRyO_QEh?kP8P5$@!bL0hw`js+9nUUT>=1Yo7%uNL8*)lAzQiC!WgUwY6 zYxDEWhH1VOY=N0Zb-PQsUh1PBWalvpGtn)W@zqi3cSv<4u!d?k<{&yA0Q_Tj;E4LTb#A=zBk0Gb8w*juprGzCdEsKR-K%T%5_12kQD(X zG|!rARaSmw$y@c6Gx0U-y-G+K#8EZZ4pNO97-n48_}%BtAihcQs$;x5YSLq)L5Epz0=NtpKe$cVYOd2PnP<7-qiW@5Y&*cIsL{a_O@d%0IOFI ztl=b(0c;061lL$yEj(6ByVAjLG!IKH_F2Ty2W7=no{9AOyy!5~$Jy_5`sVUB>fD#d zA(HTGPm~21PejvJWc2Zm3FsoL*dzQi52j9gsNGt*UcD?|$3;KslMqopua|iymI{MYhTypTU?pV3hnB&Ac$j-}G%3t0RxeCzI`Q2Y>Q`JHm7;i47PDAu9RhzQ z#BU1#wIg;o%lEZx>-u8jC`nO}$R7p9{B(S4yY<1O?rYt&}qXP z{pQ?FWS@rs3)1>5>T>mbWV9zk5HR7N%I&+1(!s?bx2$J&+6JY$Y-4tnPxmA~;j;wj z(*nQ?F%G7NPE>aOMYdHbIsbr z45*n>X#LJQ2XS(XCxEMF-l@+5)FkV$-l)Oc ztL(?7J?>;0nP7w-CwyK-w(>!v*p1>%{iTLQeLu+3c!!ssI0~lJQf`;mYTe;4*$E#K z5wU7_U*TVw1097&KNx?oe0I2Y3uRT}b{&#QbMLsJu@jl|bL+ZWaIpvZUKhljYE(yy z=ov($3yrIV!+F*r3vk}A?YWqotitlcHXZFo4{lHBbtvMq`zZh=N_mNpu*b*W?SC|F z8yNt)?3F9e_7VY$_Nf2?Y37=Cl#H2yIGa6}h@489{HO6c=dx94PB1%k zB9ZMmW=4Y}%&3?Wod^-)xO0k3)7-mgVC7YVZbcBEG7I(y=94KuvDWHD>6a`n+k~_76~)^5nF4jdf7V5lYr3R|z#j+<$jjpc{Hzr-o0_m(kLu+L$b2`?dYCV zB!u(alp-# zgqBlZ5ZOZRFTi>Bwd`K^zyn4HXOac?i4}n*Y^LbG34S=IH9q~rnayccFS3t~4=QQ` zLTMdC`NP^b9*T5IW<@<-*loM}*_ycrI2+x5k(Z@_E$;l}?Jt=WK6JCrL7t(Q3v8gk z-BHovuS7u9XR*l1@miLZRHVY9JpAN`e#ShuWILkP(g3$g{y1u4Qvf0q=!-)m4Kvu7 z-`4qLm(vIpk2Fuqx9Ny2Y37FG8BaZWrbn1v5DH-47YfFM0}$PkV>G!A7jFExK=ba+ z!NEgu8rz^_r>`svShc0p7%ncFGI*}a;Ic$HkP9d$L8B#w1HyBxp!*Q9V~VyYS^XA~ zK%2d{E}cqauAj{tkMhc;P9beDciUrs8*}!n=B0~xN6{)`x}I{uLy(ie zbq;1Qp^f)1wW8kW2g#_RO09aelw>dOnLTdTIv-$xbWxP1i(9%&d}jV>T!<^ms~LxU zJ0&@B-v#bAHyd;X&##%v8g_+)H!$~ko5V%Wty7KVYQ!-gGMZlK7F<+Ej-fj@ACL$l&B49OXCu4jDrOAqb$X#& z##}=9bqvaN`N-z#IOl^Jn@)?tEYdN2&otH14G@aY_UHD~&mivi*Jh@<7!>0sFhtQJ zu2*c|QE|g?@P)2Q#(R^4raikn<+b2$sk;b=dQVFgfiW*OM_^K&imBt(JMhLb>K#!j zOIn>hcDo>*-`?eg?KAV`C(&jvM7>W~fR*u^}iuhL8{>aCV0nvdD|}3{hbe?lA}OFctdL8t8dnjcQ8@ zGb1AH8!w-uwh54uzarb5G2>Fze+HsIVFuGI)ra19n!n{|M8Lnkha7hj*P7QO22hyw z2{_idw?(=vX3FGg&p*4|-+qRi2Fs!4B?Wn<+R;j*^-6mj@QR-5ih+dwRa8aJM4Vgz zGL+L;T^FW7;@~>@0{CisW2EfFRI<72^zu@TE+`UC39p~kgy_<^{jRLfSQHjLF5`lB z?mgdyY%W~)OftV&e19%#_CUO~$>$TDSgN!L2foYwa+yTg1*;R)=T{& zGs(JK5#Ahsm*E1Zjt^=9`T8#2Ku-;XFsHF6+3T1n2|@LomQ1~LnhVux{A^Wwv*9N0 z9fjcCADwNdbF-<~C1ie7$#Lw*>2msvgtf`U-S(MxK^Ck}v2yDp*sClk3j87VpdN;s zh>*o0*&s3{TdpS;Kj(=MC#U@}GSlco0aA6@aAahz%1?!11R*y8f#}q)Ih$?sV7n~| z>ekMDHg3inllh=voFhK9!+p9P2ISrsGbMHWpFexyOF?61-c}=NJgIl6JXxv<#hk0> z)2xHcCXx+{`X(Z@-%8xR9A*Le%w&C#2LUvvR9p5a(OLRphIdV6O-E}|Zi#4ncxN2v z0cNN&?R7NHZMmXeIn2(N1CS+ejmNAsJxBhXoss+8{6cpA4o|8K3(L))HQ!_BMhe$+ zS5;$a1yzGXdECq4-|kE2aI?><%e;o$XN$M6CXc;<^Y<{|>(+@Td|pErw?=!9l7{n! zWY{Tpto^7@$Z(UOap_ z`K~mPW>Lee!7Xq+h4CGPGx$6;h!kovX9moTYG8E}y9=fM#C#2y-z113OPyODiCSDbt&vrcM`Y_2 z=i8u)93&=P+6{l^8|wt5JUT+YS>o0rQQn4Il-N`vL#TZeSS;!=&?iMyq3&taeJXmRe{wn>p( z({zqCf1;#RB>=qG8Q-9)#^Cu_>jH$K0Ao$^f?RSE#w;>P&))zIfh2Srbb&3NhD&T} z28~&@A9}2L_?JliMXW-LPFUSM`j6QM#H$$)^GCjL-V4F4I%ZkcLH#c9&iP_HF#Q?u+uYox37l&nAx()BP9Krtn-!k5^|WfV@@nk?D5q1I4-t)S^%LJhJBZ#rE{^ zW1vFMVo*vapMd!87IDTB2b}U-A&9=;*3%pGS^G0kNlBLD8 zD3*`R^}Q>Xo3){{k?elrMv1Bi#CcFcJ&w{N5LGLCw08G+vF-V}r?_Q42YZ7%n70~z zQdpWOvmBFZejSy!20f6<=M=++S72*m6|Rzld6MU{gOjH3kShSyjzoK4pMC4umD9C< zt0B#iy|#TX4it!lFN+sh-{eX{bj>$0)u#=4uXmhu{qbP|NUaESGX6CuXp|tKlLz5Y zFO?=x%j31wP|w?7NHqmm?fx7Ifh=3_=?dAQv-g9=ODG#f+p0j+MyT`EG6z9BT2KF8 zeAWf5apz*tpWFi;@)-?T*hj%Knnui|PjE1?;I1z2l#MS-fOL-V0rcAX-Lb;M#T_L6 zw!xJ!^aon;4ZCYkJu^vzSA8CNBu`1TL`a5pQW7e{`FEFQsB`+#(SXu!;>iq4_ehWL zUvUY%{f`kmMQ+v+M2vl+r#f*e;Zd5}(s^ojlR40>dy>8u>}9>noTxBeb)@Y{8*w#w zt!s2U=Z}7!G!?Cegwd3ILd(=OUCm0g>hz~#@mM3bd!?`efOKN|%P15-RoN;FVH)dI9)Zzux7KSW3&D_^8n)$ zTBNdHoQAtFasEx>{j;6kASaC!o4b~tq#OELZ3mAU$xs^6P4Lzid0d>HHAu9U3)ZWQ zu*r4mb*TPZK5y-;-)ih}_B68O8rjgQknRk|+_L=ID1qhtR8Ts>NDX{C|E zsvAspxggds!*w4#YqAxRA8QYg-M-mv0e{t=*P51HRk$oFxc8Kj-#3maYp;3RHStPE7kIR6jCQFb_6Ni`Pr#m+ZYz>XSIULAkUniqd1qzFzG{4 zxrs?CZtFsNr>X2vfidG?%4ipA^tTO*0qw<$TIFC2>Ea;(KlPkM8N7JhGVZQ7j|c_O zM#@Cf7Jy2dxfITxw~+pMCr`{a_1X>>B8FaBV)uPqC=6Iz76LLfP;kVYu0h}fC&QCk z16?`|_<_g|?h#-AO#FzM7dwQ22roA-belfMQ+2;I6y=L#{JzVA*qO(`yc!qbOhu)S zUa|&pXL(nevJsuhgsD8RbPJ%I#2H8#{4sLa!r+f(K#7%ld|I|5 zKW(1YIvwaem(h4lWV*_T*+@CaWze#A5$w#N=kjN}dUWUQQv!g%)0wD%`}@452l+B1 zfK<7v8N`j5l=Syi;*ye6K}+^r^HgvjpNrT^rsFm?u!y!**jg5#qA4uFcimuFMdGC2mgQ6abNheVNcte=zntf(m}Kq zeYewqX(f+vYiPXVK=2MRXcZNF$)fSATNxYTng8ZZECpnW-rPdy7wfjCr+88fx%6VfRbFR+fOGo9jtlb_ z9=+ydDJH#XgJHjIEaZG#IcND>Uf(E3GAFp!RePkDLPki zL0KP6ysGx}i8THK0f@^R^0m zuPEDDwF%OD??=R?FsIW`yS>JFP;$QlW_Z%+{9Q#o$JtYHsob!HzMbZXQ61rf*MCz6 z-9nugy&C`{&bIVMzA9M%wkUWwp~4MG*^Qpx6{V!&_e2*9f9)bcqwC!O4+`pJ@?IPw zT{u~>|9$1_Y#TXI1~%n3Er~X;1|yU=w+mmjHjXW!r&@cGPdu4MDz1Qw+$7^%2IAAA z(`T%D_pvtx>A|O;w_&I=uUMp1&XW90v@1O}IcDWj1rPjMzr8-)&>w}~c1mn$y&e>^ zbj|40CDAJ+V&*x>)%lZbS-E{Ox}=4~CAinP82qomK5rM-F1 zV&2(4$1J||pm(-$Gv-~HWNl`s%~n(FMMyU(z*)>DfGL!;1+LU!Q27?nj2xQsvbLnN z(sFvHtub+Wzx3YSG?3=K8i1JF&uBFyh$CBPzK9srw6Wx}wVQp(PqhZ6!22wm4FPlG zJoHdLv(VU;3v0#f>%ckcRBYE8sd7K;nGAM^G?H8%-%AsAOjUDz}kK^M` zAqM<>jxX+2cDza?UQA!i4v_JB6fV5z&FORo#`a5f_a;4Kj@hYa-BW1ApX@J!Um5Cs z+Yj>6iKP18ZN|6rwbR&1^NN;urHH^3gp1yEiMW3I(AFMq4EST2I$BrOqx#G(BXg$dis>b2!EeK&-0rB6e?v^=C-_9Qj+ zoqdfvl{IyZeTh{|O5WmfpqEkPmUrF{UoyK$I7ZPMW-~+qCt$H!Q)73=j$Jn9!uACP zT*W^M64t6gP!eUAvLAe(2V@poMWvBn=%aYS-F1+iQwn;~HKQo1b>ld7+<5pBwaiU7 z$Vb*XU?9}@6y&Ou0^cQ@(gfR^ql?)Pkho3-UJVaEG}x8lPjAAfr{yaUN-h4{RDI5$iTb0{{VOsDIKks*t*@IfJNB!U zvq8#o-Dx{`<9j0Cv)$r5c&@}T=e#2Q&I}NO3z4B&%9%|Y^ua5P0%OM4t>{!FqthS0 zr}FXuvXHv*USC^xcK0S~%9~B+dx8mj(O^0B7dtaY`?b^Fz!{C2w_>6w`lmC0r z14>juwCQL<21PxDQzA}jrnx<+hHW-i+w_|9vP|5vviDIbh4eQnFxG&;-ThLJDo;D)eEecJdX7J>&PzMD29j$?3j>O#P1m{g9NeTwN1wx%VR_7c!jVkd>-;cw za)}e%krq4?R;GI%+~LgE;}R{SQ}lPwzbDSlwXWsg5%fjnRK*=)kl0!z?(GmdE~X26^xV7vPQ>^O%qAxDdwFMqiL3P%g(@YuC;19GGi!LM0gmrRB%DL;3>DD8 zz~E7yp~!(=3Yl#guXj1vb8p!d2)lV>B`Og?7Ru2)Hst2#{N7INy&p^il08yuQxnL;Bh>Pn9Z zYTIWE9|LY+6X&m(zoW=S;6+eKz{-NfwWh%t z>!Uh6f`ImFiN^eh$8D5Y^u<`kv10%~dz}z?IAUb$(S)6<)F5FZkxFLTx;eF`(6a*< zy!oRd;7J|!iCa`5OwIu11!m4nL<9{}ciFO(ZD4vkoz)@{p)`^PxmHn*z9qA@qEjGi zcTmJ5CYAiBUSH`wHHgH>@AMWajkNs~E!+)8Nss>hW+}Tb`@`@m9OGdSiQZ*vdty|h zFlONWDx>fAb>nc4(%c*3fWD`?(93*VUINv8?)7=Tt!vqs9aIZ^x4F-vHRdE*e?T@F7PATAdzEF5L>Zxlw;x$j6p z=J2Ax+4Y|}bQ%fV5T$@nbuQn5u1&Cans1ns+!WjwX-Tb@^bjN?&cB|ueExo?`3Alc zvGfEyLdLCz`^i=TYe$_IPOT-TN+8-afBz)wB!EQ}&WK-C%%RcsTX{mFRenTvQ1J@u z`I<2m(L>JuX%gsqH{sqct3+?Vg^!PHgS!1nA%b3=fAe!g_sp`kE5+>l1=y1wMuCFx zS*ok+CmZMC8fCLClYU)!?`U1R^$qqy7DDBj`;chOnt(7Lr{_n-u33YX>8^(f#v4aQT|9Fw~*1Hhhtw)n^}zpDJ@P_D3q72~i0LFCmL+^1BgMuhp^R zDXeQ2n?{=f`_9V5&2aelt^Ee;rW1>^G5fJ{wiujbXz_2&m|Sk&zYX?33xhS~v$mdN zhbnT+Kt7Odj~V#gLy0%t6}P}RR#tMRmlxrf6voEzICDPC4X@zh*uaCMu_6gffK8be ziJ(^WPHnf(-`{VKN1o~X6gP+x(bf;Ka!Sfk-fTj@sawMsNBRsShyE-=rW5t}0XdqQ z^Wuxco`d(Gytk~shC@1)iLgLg;!!VdiFVxb6J56kF`0UT z@cWf>y6MdM^c$IiuOZ?2>n9KD5Uw{*sT8HGn$c)@@7|-x>F}w-p4wOTN+R9ovy?9o z90yu-^wHRm-x!0uWSCSH*U7`^k$%ZLBpA0zCVIWI$xRxYtU^Y}m8UI5b-1sQZ<3J) z2*{8UAmDlL3`4oqjzmil zd7i~EV)MsR>@ezrm9ED$-E%EyRSHz^Img9VUR5#_$`HB%nJ8J)&sZmdn>b`TgrMdO zYr*PYe!0*5aC}c=S7qIoUg9fH#)}muCI>0_HPoV61nvQ^s;S-pkgNIKx}qNK3(<@_jMAkN^MLY3%Q8wO$D}VJf4k9|d8k*2pQhDP(TbaY>D%guDON7eIv9Dp z?)p;ztUvVvsyspGyW#O(+vsftSaK_6tiD57Es6=Ts(*KI7>;q3VL!8`W7eE1Cp~wE zk7kg|>^85FmMmoI%~>CgmVwjr79(L6oPMb&V~?M`mMMYA1EPGxkDL}~nm$6QZIp%J zUg{@rnOejAqQzH96b%=F)VotaZ+b|ISYNX>X&LMf-l$d9S z2FYC@f%7@f>x_Vzc4olWUOnB80V{R-N_q75rQhF0k;%I+9XV{P6P~psov;WCJ-b@I z4W-c0fYVe~j2BlsBeLpny2qD3OjSV(SsL2gJ5#+%$OiUbDF0|89UKp;8cleG@1oN# zo)i=uB6vs>2G^>pdO*aV_o|7k6FZ!b$?xSy_vHN4cwSsqdu9ASLPUT1WS{lyQ|QvV zR)!&6M(#TG#*f#rV2p(9XC-A8+!j<7mn58;>3-phK5dApB{9r2mnoof$?^u z$&x}K`_zw?*$`OU5otA_b^ujp#!>eL&vuJof;j9Gnbsy^O6xfyGPLV$%OV6&|uoQ?Ygqo41>&u zFO`MU@k^?Mw<7y3lrVF_50PT-kZ##hEAHBGhqit7oU63qy2h}I;9U`=AwP@uITOZ( z^K@Yw!cMt#2upv-UPoGMersVETHL22p8JvvxLNgQd%S4_A_=S#27qIvLhqrEZN%W6zHw4!KT`r} zj|5+;m(oPO+!ld)mLpc~9_6&GwdQZTYiFgg>Y9zxwJoA5LoUhoOnAkfd`Hs>9BiF0 zQ&>(@5dQwl#6%u4L;~fB8R83*LUlca0ZV6HeeetkmvDM5F}RQwP=??$X1JpMI&)&% z8mF2EBZr2bj>I@6mw=KGA0iJfKi2v88bcM!-QBL+?r!#d=t+ee5{F8A#TY0DuTbjX z47GD%SBe7Y)MSQu7?D`zs|bT4YbjR;M|Nr&(ufx_I~LNUF1#8Iq}lR&YRBQvedcL6 z#Gf5AaJBqlleS=GP#F@Btj~fmsnp$pw>zW+i0JC^%1~2-%;vDZ?Ih{@1Fa1a{&hd$ z1TIQNw*#Ocwm-u*HN%Ey=mOC@_BZZ_=fC459dE7D#4F@&dfb(?Va{X$2@}tlRzSjh zSxjd>RlHU+hk))?fFu*=HAyCks|qpY^AFaSyw?EJE!rHYVlpAdhp-7^ZQ_e(;8BlY zmIrZj5q-zVN#Km!auEeAFdO?<%)p1QPt^g&K=i?uHumcyJaqSXY_A)%1<#CJ%p*%NS+_soERC7(JktjliHjgF) zd^Gvdtz<=M7CtR_=?vWTC!JnXSLkc!*9Ot6oW1uf>zlyeE_f(jS16`wwks;d{{DV} z1_j!Vq#N8s+ZbiKn-r}gV=4wH=5dt4xgf`1>GTQ>NFwOsw|@;g9gB`wNr(6pmwHx1 zGNQx#EHinNYT+0#ba!!%6}mtSG8JYIb2W@_F5K2UfF_BtLQc7r^|;f$#^$qnab_pU z(-;KUaJ<${@Sn^dB4fb}W^nUvquB)eU=-lovSEM20uaJ@7W_hftJmdPf^3A5ge&ci z@qQ-fJ;-GyL>A6~aj~`e(yw@XIY$$xb~q_X7=(l?l`0MTJl_L{ur5`I(zrJ*?EB+~ zc7x;DZCI8W?&Fz?=q`oypv{iRi;d1n93rSs6ju~`?fl&Q zS((37WZ=CUYe2VgIM$h+{POgZY1f@4NudOZr$dNWn~cNOGb)|bLbjKb)VJ6;FqVt9 zIV_&jTHBiRI0Px&CPHC`ogE|N-}j_RW7E)OBLzzNMO0l`ih4-Z>RARz+^*^E52Nqp zOj9RmA!3e!;QvxMqlBj9%Hh)JSup*-kBiH*~p1 z%!^Ad3N&^qvCKj;pt5>y^^7P8{=Ec=WAT+(#705;_FIQgq9)xA)U*o^?qCAG?CDn* zADh*|b-sBlx5Z25X=DtQ3_IAgpF&77(Kl~TP&+xO+V2jFZlKjkskLjz`YDm9vyGMz z=#E0O8Cn=q6-rK<_-b0k(>1~qPbJL_MeS+TPcw> zDLNka(D(Fd=B@tcZT=2aM2r&tnpuZ@WzAqD|xVq@3 z8+P7%&0N~4M|c%Zo;iuEs_X)~_*=kIDbe+BFBe@q-<$EiU$eWdb*iJOcPJy)I1 z)+t&kr(l=fNu{KQP6R72UT-@AlL|AlQ|Q-;u{)=gG@-0&9E|{5|zkz($Gc z9v4xKUr-CODFH}H>8FD-bgTQ~N+W19LCdZ1eit*Rh5)G_2`Mj@VZr&3By{8zCM@+R$`PowCQr z@#6^2BDl_9Dw}1vtwu96Y;>1j`Ak4GZkp~*kUNMvm%|WM@chBwJZ?%*P-|Z0iUw;O za7)qniCi)8)iX1ownL_BY>H@tt?pNm=EXLn2ZwYz=>iNXYx)^=r`OZVe70|UAigt7 zRfbeTXfbABctor5d^252vKX8Ie0vB0c9!J-&h{-Jx~s*h!c)V2TvY{dm1rZiR^=D_ zAW2JR5LJH)ON!ugZKMLR@6*h|ItsUp0GgzskFBFY1xpL(l_e;n(Jcy_e1k;9SA_~t z)LKo2ijq^XFxb%rW6abQu>1TXv8c%OWHl0cc_r0V!zk>l*Y|Dj7wWIhC7(8MH&@D- zrM*B<;f*b1b4D#2m)oYCjhCUo^DT$OG(<7LFS=unrz84lPB!&Q8j_z+nl`!xL=<|q zJ7F{1k;>po*&*Rak&K^&9Rf0{N}kE2jA?&C@o?7nXYU?2{^m$IoU3si(t&9kxaEk?W^pyPXS3%-CC;45@5Z)FA}GvtIFzLjx`z%;vqjJoa}Cm+ zs^8!ojl|^y6o9nQI3lMT6&K=zRoE1QnRPt(f|bF>BCQdwo1$dnqm}#3%<-jodrw?N zRp50m@fLI0yA>phNBaaCJm|uK#KWqIYdL{mU0Jz+U4*ChEUQ(HkA7`E${U4u?6AZk zB#k=PoQW=(o_*&0YHsicVr$hx3IrCmt` zokf2dYjOV;Egliq$}XqBk}(^7FX90=f^|v!$XB##m>vlt;dFqn+Umg{7+gi#p=Eo4_=S-8fe~vAfkP8k@D;xl6mK&1dH6TBR*v zM{CLu*vc6_uB81P8%TP4TU5DoPA>QrL{2(r!}qy*wFt8+esG@|AdPD^R2qfgCh1rf2GI}qcpqjq+AYIZn0=a0A{PI%x zeeiME55-ST&b=F@-&!ojAX-dI4!~^DJ)hC-5u!k8mRro= z^(n(oc4-B3^i$HLN$jS`UZSuTiH6ZPS+CthA7Kjnj;W-;8M zGZoo6kMh-v(s6k~X?U;U}y>927DB?O)95|f+K?F@~SZ7OeTe{V%3z6SqF(P@t1 z@2WsRC`0Q?knT+l1$i$T9IC#NvWu`aKPhunUZkvW@V+lw)R2Fz0S7Oga$gMo2CG|T zX$!HlK5;z{CRI*G8p&F|ud|WXa|y{4l2nwltzMy27AN5|vyBQY*c#@lMZ!KjAItJ& zvkNM199@rfyiLyD2}xkV#>$GqnrCj+jEgeWL!-KntD~#fM!@~;D`4PGO(tVQykO9il{^aY0DQ zW*1`EPOH_}H5f7FV5eGkzzK|%!++!YL-$W7G+q!wv+c00aJ>_IT79iq8%9T}7S-%! zePvbQgW&bycXxpBNEWrmB($Dry02e_f8XV6zxZ)ezP~ZMbySj60)`eJpKV3(+_XLW z#r({c#rb*4OW~aOoUAYlLz~FdgCjK}$r4l6Y}Dddmb75T49$_ysnkpPju(@}sGwaY ziNkUcDXZF2JL~Ein#LfViW$uEy=5lZ4MmHoUc*#|^E7iX4L7P}5!qwfX)87{lUf5QD5zGG_{M7laz)0vPe+0b1ql0M|FK>av$31ot3Ug%r#}tLn?mo z@5e;!ViiQs*_~Y+*Ywf@$Ga-a4qOaaZFL~?oXdO707)f2z3Q(yC89CB`U!&WCHxM> z(X6q0*e%b}4~=ru1Ie(qGi|Rmx;xB;g-WT>(x^9Q0((~_2(%s_8bfMOcO#9U z#nW!muUq`e`n+hvkt=afecUQgcV7MzESxpJ+}^2A6r`qs#ozl2NS$^N-I$7m#6?be zO{<>K=3Z{QJ&ZLU0;{%r)g(a%$M@*iXS&`)@k=HQ9Eh(HNYD@hvpK%T>X8v$S->u1g(c#hiDBK>%Db6W33BGO1o?RFrE`6KmFHb% z*ec#eNpxEX=QGTu40&$zm~*lnFaJth{J_ern2?NEi14;WN_YPWqwRf!h@1(w0Wb^q z+O6YKur#iRdw%g405mn+hHBuZff$udOkjC-`c4N!hed#x=0SrSV}1hOnia)uL8Tmw zPLZp#d^tQq0%wU2Ei6x1@2owyRn+Vqw=rZYy6F#)_BLTP&(;j*XtftT5Gz+#qtT7e z-YAl=NSscg-s?TgSv5`J8U?4iqzRCP3$H_=lU6E?o`IUoT_9%+NkX_U#RRt3{Ycu` zPr9i_P&WsXw=mdB%qT9^40D>O(@0>200c>?bWVVzpeQqsW z1PD^Hqh9W-Gryp>y&EW(n!b{z!Rt=KXUun5S2guugN1C2*9mn2f~>lj+F^(`KjCq$7caB+W*24BK_EKlMskGo3lqC?9#r5YT>68rg3NHL$!wO{io)?@bxCj5 z(0uJNi`~9h2=bM>kyIENC(LC^p*cU6)=s%dJ63vHk0wg{K6vFn zmYJ#k?jc6~*}mumhl}mn6iFgHz}tii&_!WT3^1`IP?K9_&I0g9;QuE5_8Y=4>+2v` zqVe`*T+f`WN?&|V$EzWGuP;0v=V9s^e|Oi+la1&C5fvSyaQhS)Xr~!;h@9Nz=_*@raPrWem!-QqDCZS{BN{0F#(U9Sku+wBu zB2N<|F>`<^c@;PcIYE_>mA-<)#>%MfX58$lK;B-$%9ocOBehoe@WQ)DDh{;^?YU3C z(NVs8TE$0yBHdvm*|^L}@^l}*Q9F3^C4OL<@Q_ZB5aS~aT!8~4ik4TY5#_LQ%t-X* z4=Vr^*=8CY7YU?Y%L&!0S(8Q(f_OeHyt2e~dg2FB(dPJbNj6>Ioz#dzFFM945m!!C zOd)MPIfz(td2CCbOWE0bW6bzxz%>TWs=qj9Kq}vd%EH!EMK1yK$??A z=l`1cT{pJC+lvoL2bCIU$nlOn?Yl`sdKTnJ0Ap?ogdB@WPFR)`;@fONcm333I@WV< zOuQi_?es9HsSLU+*-M+P)ZifZxQyLXtRUf{rr~9ymu=g&ZQC|_*|u%lwr$(C&C`2k z&LoqZi@B^+QkRwdsjr?l_mPsc6N=4<&Cq&*j*XxK__EGlZP|`UHKfh#T`C5xU)_Rr zutnf`Ry#_3F(p%aAHh<~$Li_dY5`Qhi$T^5midmFyLx9RaGIav-|xm~M0$=~4h_Y& zLv42;EN!IsQ*A9_`+wkvY3`=TW0uG>cUd0b;%lCw_gHWCuF7FLQq|Be;ggae+USay!x7;)H1dji5 zdy=!35tz)>v7Ud2;_xY=4#7F0gAakIg_=w(8l`;8vaYFJ%aH)E1Si>SCS<(8>U}Q` z)EuPWg(mOCmdW;)Qd>A`!lDRv@LQsE+eut1D?D8lQOSL~n2esm9Rn9{PcLh`sh*k2 z*E&t2=v^c6D=wk(w&_UWSHt?EfHI@zHwfb}^6P;L!Yikm546H}U}y4$=f5YZzi%<* z-h(H8a6CGRPHA%)Q^NArC-uMol-H9q=7f) zsJV`SW7N<0AT-gSAy4)Lx16q!$gwSZf;q#oa(Q-Vc`W>c!{Xiu(7pQitB%z+-H{ry z8f{@M38R`-$U1JmMSF5xgO3&J5$3Tw!oF(=ei?ttYup$nkOcCjI$DuhFYcDTa`L>D z!8K4plK=#s?X}6B!DWNY8bCkwk(D*v{WHpsC#aqLm^W*{9Z%Po*)*!c|5!~^=Mh>g zi21X#*mMm|0OTliUt33?`fp&x;#nQ4#-t;aWX~U7%Y+dk3DJk4(8m$8xgL&`>{?W% zsaFy^!SZ-oct*X-_dxLby9spk0{bif8a|E`e?wu4orq9zBCRxs#KQns`p`sUCI;s* zv(b%(r#y;<5nnRVm@3j=V}jsV4L`BUx$XV>J0ytOFKVIIy3iuMUlr+&{DzS*5I5t2 z?v8HtcejWNi6EFa=R4d$M}%AELX+E)RRn74U8VS@n{IAjYxPv>EU(g5V3;5l#u`lt zhvy3ys|M8cJIjD?`W;l4&4%pv_~Rj*fUB0?zfk9$PcYD?^7&{w^ej!Gf@!ngR2NJp z8o)P+cV)=vNhUx+E@LbfB!4HPa*sti_DzHU**y%$yShg*Iz=fbA@c+q0RbH8!}gEtyIHp(MUzfDEyFcS(5FPr|~NWc)E?{PJZI- zY$Oj8L{F9qQRdKZpd6u{=K~sR3A$R2xMzBsB_Dy&$QPelW`;X%WxRn#8(>lL8v^Ka zjvdc1;eI)72fqN1Hl|~RE9GuWOM+_SL1KCyl^FuP>VIjNgEv$bTaG2kW#GWX=XPaI z_;k?;@b8IOymJLl(jU2;MfP2uPtiJsDU6{rUs!7~4h-VG--w6^>oSQ{7MOk>i$pP2 zr=NvieWlhxq)M;Je9q09P=tC0)xj2VUdy(nh>uA3<1!2d;$IR-D+!gx1NOn)W=2fj zifMI>#dGlhIrqkeF3;6lPacv?u$6`+MkSj~x`ivxWsi77<>9M3`rDutU~w^fk&b@n;k^-V(@5BC#lKC`kJs7LU=p2h*1^KKnS0ko9%2qD>tl1 zg%M>It5M<8nixFCDqxY!E53{bJL@)2;fZ;` z%@kK8yp-cY7UbaQs}_3g?DYZ4|{N9Js!WrKDt zib97y@$8>6=ksH~fg~x2k+^+RofNoAk#l<7we;H)qWD3@A0%6jl&ed^E3^uDnvr*` zMV@xu6-B1G>9-7~{Q+5$og6?kk@4h!?Q?T>QG)|**PJ5iU&1U568Xk`GWSV8DhJ}W zLdBn1Q(DA5(Gx4y=HYblFQ_o*;)1$)>VhT05%_S_A2DiNIo$hGKj+^i;7Kg#{>;DF zoEz}HbDW^J-FHq;tX%=y8^9Ad~l{(%$V?wfwl%gC?DY=3wY^% zGH<^HDugZejAKxM743`NRngTfLXd4fn}cFoCJD^DEGK%M8A z;ykczo6Jl(Nq)rd#&tJkPGW zgv;9C$_SA2Eq@|G2{1haRCiJHa%Xi!cKcVr!ZKG6n9j5>yljplTbE*$*sN^L{Q>}+ z%bWF-fAJ%sCEn7EV!&)pYP(pjpvQS9kk66y9WvC0^UK*(@1=OZLW97oFXlvpzKQtt zVh~g*(K64}_bA3_Sp0B@lFCDnq1XXwi-|Vkl9$zo@x;4@zGIp-@XabdGRc1i?QDa8 z`ccg}7Ik~p{qkg59aX&3Mt8;1JR}Hb*M6m+3DW3q#vX}ZY2P7vYNV6bOrFZ+H{6nV zyelm>Vc};#kT)^lUHL~e+cLh*yGhiBevSI{5#-tbpiwc?|4$kfBR%tf^HYrY3@l6x z{}-qFe>5sqRwlOpPmL=2pGKv-M*Dr?Tc^$LIswYNk0eN?jpXc5G<}o!r*$RB%*yb`17UypoEEAqYKV!yFUi zzY<=2xn{>2z%NlKi4r&`ht|fX!|$Nr5TyCh0|63?<2!v)V=J(D=LSHUI)L=mmNfQO zR1|=zsA$bE`UaN+uyFJiwG5!+6M%&$R~{2}dRTX0X<~7E@T6GIFE3XA9vKCoAc4JZtn0x*h~ z^UKwDhEz5Mj&|m0CWY1adF)Ot4L)P|N?PQ~#>U@;cBamEnauJWg!z5%KNeN!e_K?> zrWR(FFKSpNHE=MNE-5iJ{1o%Pn_gl1zhhJWv;eH4qN1{>rT}vY08jMw`fpVJ6{Wy; zb|i~>2eG(b-8fe`0H%000Nymyet3L!J2RrT{C<&%RCBAJxe>o2b<)xRN>WH@ehhP4 z3ve%TPw)(LS9))UU)j_=0Gv^Hhod0+Uzd-&|12uV|7}qj{k$SDkw;95Q&P--bsqmx z{vV5~>K{dgiVA=Q4epm6iL>|FtAHF${i`#~$6b6ibp@#XOZgI5{EK|`atoRF_39xH z_`{ac^*y=;1eoMIqMaHaJ%4lDYd7*6@$k!e^4m)2poW#%`<(R4`1U)G zwXV70_Op3lWUHgY>%u?tV}x||Q(F#prx!^D&fM(W{N1bhABjrmpG4LAP8XjtbC80| zuOuRch7{RrcBp6A-1{;$vH(|Rerx@{It`R(WN7@w*AaWnSpU<;lf@_cV25&Nc_S?%9;Vh^Mh*$0NkD3JsAqUSIDL3m)?zZ zr6)Eq1E&AyL+Xic2vGmedte&?jNz{cHZ=fPIp5i!+zI?go$?#qf$>+`Fkcu(U)~qE zx3I!{;Qz9w{&4vTeD{W37NQpNg(3Cn|GRg@^iF5^IhVe+=_UV$2T66Qhp4s5_v7m@ zss8~#2BHt}1MGur@j|vI7H^tj>-%KwTYjyR{j+~(VE7YS4&VK*hsJl8ONu9={`K!| zO%E*x4xP8nN6l-T^6Q89t@RD;^GE+1{%yW^nr{yrw8eLCbb#qAeClQ2@|A(_ch2|8 z>bEov-t6;N!IydOPV5_DYX5Lp-wc@9>7B^rqxDIT>s#+$Y#9zO)A|?Qg>NSkCg$IR zrN08vOJZBHf0sVc{;dK7(OTf0PGdK3dog%B99kG0Ti(RNVvBqw-`dpBwW+iGe%b3{ z;k37|fA{YY2A}cn0;OAh``~%Ee)&(}?P7iVV()VPJyqNNo8pEj0d4MFul&c1MMgWD zcg*qq^W|%8^LMXTFN8l2d=A9LWPT@zY^{Q}?J!>yVm8~>HNq~&T8$_;lgWPZT$bFT3I6>w2K~5tk8-~9)xio_SzRkY@w0I@QXuQ$%9iWu0p?`RdB0x% z8y^scH@jjlXST91*29m*jmo^0S)-v%aPnQzFj z!Cq}IAszS8vdRQv{xUddd{cqWDZk2rO+;(3nAYAIDRo5EgbaIj8y(cY70NZAHqk!J zKkn&q`>pBUw#?a+%)wioxpI%W$gmmWzdiD{PTfWOfq8NkNedqC+c>&@sAQh3AgOt| zZO7t$Kz~|)n!muIOzUzI0RgR&mJ|{crJA-gB*2R4suej>0j)H>YzqTaxG7c46wydo z(;|B7*8V!;k-?UqJwfq!b$k=EduEZyu0uR*8nq#9Y=Y=o5v>3il7=df*%zxtmUbTXjs|nw3B9YCB5%fPJO=e z{fp$Upl6Mm=epCBQPGE%j{3E|A6R>t?A8{6I2ecJq3tFRJS3WrXIQ~)p`F^6sq1gm z{B;3JcmJib^36pXvBF`;wrg*(B1Eylfy(-#*sD|ONNsqWeh|lStA?4#g9~7@u|3Yg5vq;^zpE8b7 zBaF(8teK;&v_Aw`-m{kSQjeJ^1&YPvyC0FTAYse=OLOcBZR zAj*t3KK{=GDyJa*I+cxl96X+Ek?lgGCMTn3>JOIvts&BYk(o_lsE1Q}c1u(s`b9r= zB|^KfMB;!E1a|}&dhNh*5`J4DTU#zs2$w+vzaAND5no9 z#>NdYx~^~Ydn_n98V*khI9gCWrTVso(RuRwelsDlm5hE<>>-C0-&qKJRo$^RCX&tw znQ&k8T{(1N^qIG@!$FIB@?r z0v#1Veh5@?A$cuL4h{iE_BzBQ>8hIw*P2P;xIPWpfiw~{3- zLE!urA)=@DlJ59*O1luJ?}_P5Qw%hWMdgM$l5vwSfWZx&q3{u8p<}iHRGM7C1ENq* zTj7N6GS0OA|Cu#H5akEEML0I!ZT6bjr&vN&sgpl1GK>UFBK;n0wiJT3FjZc z2Tr17Ev1l?qIJ{9B^WFcpn;(fr^99@<#%H!fTzS1G2r_zJ|TylxHC`K{JYqVsynmX zD3hn45&k(8;gy^*Xk2e#ay;$QfvrY!WC!eQ@rXBaGqg!@hlDc&3}{rrhbTZP;@KAs zEY{9~9sc}99s01fi3GC?4<$vA*Q0Rtf?=z1CiK!@SurA>yeZ)Wy76T@A$Fb>)f>@s zJIf-h)2p=wDgNB6r3o&d^oKLZj!^MIAjyiM`DQ!WcUt8#r<&Y=UBT_62ujLS+$Z1` zM>?E_X-tOB(U5~;FnRZyfI~d=q=n{%arVNXPZYfeE3tFo1u>qN-!oCiy2EBr)PUQz z>qb12+FcA@Uc8KB5Bm$0h|bQnmIvSA8FFI&Z$h1Wn~MT1Le*u->esvdP7)w?6z;^& z6ZA8`8RJE53vE%oEq=$~pc@hOqDFQtPeL!u7^KNVd+VQ@sKzZg|9k)dP~J|5Ei~|T z@MlUS6p&`&-%-nd8$(K^R;?K9vXjY%I2G!8&Y{0?ELgkqf80YD0wZW@G zx~P_AivKMloU;*bHiiD={}UmT7jHJSJ^KPE@$ zs6g!J8-w1q|5s3-u3ZT0uv~D~gQZ0Uiip?|f!ZBlusx^AipxOYUcH~{tzPNP@a0p- zHByH)jWY=|CpL`)w&=^1>MxcE9VWX7m<~ty>R2`~f4_E5N3vv+AVS$yPO>QAI`JnKNoBRTTSbX$GHEXtoGBZqK1(C8ISRispA$6K zjgh&v)Ch%5`tkfr$;iB<2fkv&rx6e!x1f9tttWitrSYEGyqhg**|nKn=ds+h+deem zh-^G%L@Nmd%}oAfg?Z$f}PqknGjO7ke*bfF}zr}!4l!Wt&IS0K5ntMWI9PA1tk zxM<%)PsH$;Kl~|)zaZ<{b8}0W9FqU+G917B33F4lN$reD{HdIN-e>R?k#-9j(R$?t zjZpK}V+)a)62OD__5cHV=;kp|+JM-Hu)ndnVrdUMG1N+ zPO#=a84^1T3%)p+RF##}SA@70bx&Fc{jg5&Kr3xQ&#kOpR=jl!A*wwDH!- z5A2pS@!yJ{75wvu$^y-b=1)^eK5m^JWvA37YjWvDg|q(dM7Phd>$%h%`3k+RV0$4W zEAO~??wk(Jbdvz6*+&!x#?!lpG?ZgP>9(E%Jan^D(|rSq5=PS}&G|8YxeQbmYrL^A zJ`okcp6#eQyP1dOkxBUC>1oE0^UKIbJFQ$MF?ZGW9Gy7Q$=$RiJmEBj_>(rNA>a*7 zlpcBYc;{FeZ7$?zD?R9#rrB-cR3MRZhd-z8IY*yF+#kKZwGvR3iNrHV?lzQdB?#xc zzHmYM&dusnD}$;$hd`HPs8?Mkz}yg&s@;|Ro-FtSsYm4JLu&HzA( z6Y&w}rC5KibZ8bD{|HqK^h|87174Bb$RVVeZA*}Q*uzhhc`zL)s#L7tqG70>jI1X> zmdrgRZPj&eo*t*aJ?)zIDULzmV0TX1zA=1LzCFWtbDOJmKOd6GJY_MqtY24V2w`d2 zJ&LkYY7-+V`$lxh(g7wQyP0CQ0za|iNzC(TWdsjin`Hm_>VBW{$e{)6R zFpgb{4=a;1k)th{c~8S2%zMx!mAO72p7pmz)Fb^)`P6Li_aizH4{%>}^irM+!{IS9 zql>sfxY@QKg3S+UVD?e9##~dYBV=8b;k6K4t}LAZ8MlX#pFynFn@)3~F=txbp=)*q z6vu&=n_H*7xX6k|`Cq>}9>f;VTD{ zm59+9oe&`YWL=bdv-dZ=NTRMAm!ebhP(MV408RXaNs&|2E+nv&EV?6nkN}ii3-H*m zA_0fzY5Ia4cj(67L`aD_O3=Y^*hO=+-A0FLuxvfwCnfel*nA}>n`I$&laGWLgMPUDtR4H{ zc(8S!kqR$yI6)tERi*`Z$6Ih%n7kz(Wj12##w^ zoL(Ip>Qxy6h9$CVu+n!UB30%lMkLHcbXuI#UHJt;Q>y> zY+J#hLpu$@L-#1%4NE6bE-2Zk`PBG^2}(n1?fQ3lDBOV7Kcv$9YqI7iX?UPB&G9dP z`b_b9jcX2K4&#aKCf4+xL-iTM5p@eX2a{C5LF-r%J)T3B`zaEG8bU zdP{X#!*Sd6@yQwls^*h;v2o)8qb#7JW!fpj+44y|qx~}zI|eXKeaM;3t1yfod}Q_0 zMdnI4gfhfDb)&zo&gZf)8~c*m$1pk+`8ht!z}59=D9ACg`$qfiH)`5F^Ou}Vh9L>b zMXaQDJYiMlwu1)LgQ|@N?Ncd&@7#v-oioGJxK!*cbwpL#Bm^4}_LsM{-?iU3{pF&< zDd5;|OYIuaV8b(Dn;|N(Vhh4WAL2T{L;=fWajK*sp##`sOLR;qy2C$hm#xp9^~G$` zt@)z>6_`viOp$m+r0QHxA6TZ@WdmBD-Z8W`#ebhzaO)>5*9!r=r6qDDlY@FPHtJ0K zPB-Ii%We)LLmdJ_4z|BDa$X3E7&E+Y&rGt)qq z@HEw>ma#cdfE-a8R?w7K>O|6B_;j`@v{#8bqkOPV9h zdo~{JdyNvCmy@#9bPY+xYg%+Mi&MSFD~oXp<`p^ zIv`~pcM7!H@Zqr!_Lt-?9Lsc9u1~x0UXcVNM{x`Le75wFXB4Wen_!|`sXsY9hNlTHIs-DD#tx#WJkRVQufESX?7fB`c-7El zq-e2F7V_i8Zq;+-#%&wwJU}BDMFfyItEodeEe}uOnnT5}(|({OX9u|_(DuKsNg?%| zN$f5D-ZqeF^3L#>=ZlYsI-5e&6r~2F3)u6C+Y01fwfPHszt`{vG3*}xyI|P8=%=aL zpNcJ&{G*cPE&hCrlTF>Yre2CAB9Qm%7za)yw$5YS_*cCup_<>1Sj%X2G}kO&GUA&W zidq3FN^q6=fdAxvWc^>fE~Yi%Pcm1{Q#^Fii7ImlN#rG)i83nvGK^RYyAj?1-KgAs zSLoC%4>tRVU=INxheg}23Ck(U+G{RG97P{Ydw9ty9aleQ2iAck#3nxjEyr}Pgnz=0 z0y9X z8&;LHQ(Z(KaUrW6hQMfYmQPDJ`daPqqcDi>w7n8h9!$Vb>VCDUFDAO-Pz{Z)R=8>_ zxtx8vjRz{?D$fNVZTtX8c=EY3^6;_boo~3 zLcfJ1Wy3Gz)jB5F!0xInEMQ^H%&e3|RCX&h&btM;ee?AQ#D^54`pZWTpcyH7?`j4-%_bk3fiu9H zxLgum=B^Xwu8%6Wcg0LTz;4P3YdxhA1r)PUNOG**ktqT~_^|>%t`pJz^B{IP8sgr; zWez-3MD8H&y{NB80+wB@c?Z#J@^+)sH08tK&rC;3VGUEgh)}NGA44x?!3#$<+(~EQ z-6O6JcJ5Ux#!toT@6N1Lw!!P8AG1l)lc3cD8T4DEE#fhghcW4XPKebYq$4mFBLImK zhde2z4Ry-$(|zf6!<-LDemNqHPP_Y2Zr}b7I3hRJiE6xf!+d+MMlcrtma#K=(ICN> zcu7CLDF&nO{NDft7*(ykB||x^qZ&zjnoZ>eo@~0&RsOSgf+>`a9T>|hREqctbi0!H z75V(IC7J8~k6n2cc3CKgB*Z!UHkb0UD=y(P9ENx86fWz`5%PlChu6QtLC7}^-VhLZ zolRwbRf#1+@iA?ma~zdMOl>i$gJa*0nxOL&~8<%Tnp(H8BTID_{5 zX~}JL8*h5uO=6E}TXp5*IOmPqih4t?9ppik zY&H_aCM>1Nr-`n{9Es&sRx)?r*}#Knbw*`ISmNhGU!A)$0SDrT8FkBB4dN~9jz(^P z+Bxnj?W*lC&REPBJexrH8gqV!0+7tW&xP>P7=)YoE%_p4%b|kaIKJ#k(NXoL7#rnm{b zyb#&wzvYi~+kxWs{}O+-`F7>Fv};*7oN5J%`idB1oVm@Et~n|=4^RqIbElFEpFH~1 zeT1Vsfh$8e{va#IBEhmc(=t9HdSGFoN{Ev!$uT5*TL782+34v4%>rzwG&M~3UAH40 zuBwF3ZI&2TKu@{PGSf5<4uUGb#Uqr;-}2nSVF)8l(V;~BtGmAyA0T9+s8saq9#-c` zKQwAWA({irYG7IVh7c{N4!%t{@c$n5M1T?`lrwSnA-+Tq(cz@sVkj(0HW>VHM#W(~ z$-L`qM_2ylcv}83?fp&ODDUm7vzwvTgjmPE9yZ z%*bms`sjNC!XqZ$?2O0BD^C#}CkvNUwSDfv{|KfE^9q@mO2!XGD0b!ulIplwCM$uyaux1{y@sggpNtsCTnV7?7|WUea~hOKDKBya`-~612SN zK^VMea#0gFr<2|Cswy6q9heUg-scawfHc96uWX9r^t%2%0#LAqX zOKEbVJF2)HgNN@8zQ|E9YMlX19%BC&jvi8tL_7Sm93?|_4Be5Bm~}k(aE%3TPwEVm zueijkBMyD|tnC{}MW9v1a!qF&ZxIl2LXUHy_E@4DGmMa3{+a@{`!`0!qG;LcO{XqHCy5gJ&xDLB8L-G)5{5@BNO-He{M{M^V zzejp;2?u08>&E7hT6s&Fe%Ns+voZR54azt1Hd5{dQhGtaV1mmku|g$Ym8Ve872TC+ zL?#L>=#*A?D>1&}_^Yz>)uYUnrPr5*#YQQyy3k2ch|m`xQGd!0S%>)~HPKi|cY7g6 zd?>4+pJaR)et47jF4id>zGrn&*xmsV;WB=z1uM6Ujr64#By`k$v?O@-pR>t1?Z1Re zdftH(n_F>zzgS@{T>3>{%JZbDtBA%b8DnUGaPwl*YVVtawoDS-*80&dab5;`&3?J{ z=rX;%%|ME9rZv;nZez)u=VnV@_Qe!;vzW>qgJob%OoiHa>_pgS?6?4m#a;IKrNEB6 z>%*!28ERl@U*z|jF^KGBi`lMsMW!K<|NRUDV*W-_oskkK8V4^GTu zzb##8X2_=q1WUOBQJ#6`k?Qyiy#U_iPDag7xLcFAO(9o6GWdWLJ$`gK@q#xaqElON zby;R3QmQ+%06tQ*9igosu0B)_Dw)h%z@=1lw{Ah=baJ;$#^#J4XhO^6IFa@;6aHKw z!`1=u&dhHaFfCfG^of>SHzuX8L}p4SqE`NhVl6H5Cn8$S9UWXx0dOSQL*5^7c-_KL ziY#8s$jb0>-|98pl##g$ER}|BY&n56(4~<%XUK(}A*TO1)Ou&p49>Ym-EYMKTm8Uc zgvwjSu(Jmf!<5UrBGhvgrOzC<3>0BeH6z~OYryg`*zvWu!j!>{b2Wxo!jJdlLAhOe z$jsl2BEx}$gHb!?E)GWVY?1C|)8V<6i);KO48_q7U? zrC)QDi`|1ih^@AQX#TSSQY>q8n!x5TYPN*%9E&lTO^vw2(wJ=m37j~L+%z88)lty! zl)4C)>qg_o`(^Xn&iDctq(0cMz8f?Vqmi4!Va8#CRpJ6c81+=**aqfaxr7_X(^-b>pipsQOi^}eGcLQoc$C^Pbkp6Sa7`W@gnL``}I_^E8M-U?Q@@Pr8cHC z;d6ixOh5C1+(rCQQGR=vnO1c)>&U7w$>glmUcr#(F;*c`5#%!vIUH`*Y{xu{;08w2RfhE_;rOlMsx%0Mj_ig6<0F?@bY(4XpN7r_b znn%y3vQG|lu~++O&R$Kx^x+Y}_@Fv5ye$#-8x>5Z1&83YW2=Wl7B`9Uowz zvcXa}bx zwUJ~6kzLzup6W(Y`!-;t^v7?yEo~J=-9bTP>CHx> z{;iD!2{i36lm(hyV5nRxV&|GDw2g_wp$#)G$>Or1X6XTiTAS8rtk zKt^>5hVX_^=%T3rZ>qeET(v14eUCN5Q<#eBv@e|;s$$Gz;Pa*Jz4<4|E{M%A_siiM zqZP2td8;X8+*i^~Y%k>4+U3DM{IKdA7*$kS$r0^lLe{ng%PB4BJf(`<>#$$`_u8>f z=Y;>Z+?4}CTb<9bTXoX9f+Kaqt@aU1S?yhXfX%#ig+^C@I&atFK^vFVTh|vlU~4|< zN>3g(TZIZ|_iCD;W*C<1w;dD@i)ZnL10rU1=0NO*M)B`?4(Y{W0>) z-IwiAABtj)kPSU9kXTBlNa{+>VCN^TbFW=TT{#vjPOd_Ot|;iGRunx4&)HT?On6i5 zQ1?-XN-e~fLy|#0n}pRDGZjhkJ+vt1(Nlf%AyfA5pMW>I7s~g7L%7j|)y!+3g<`4pMWG4$rl>?+3B4+4_R@zTap3d;%)1e0Ljkg7q{7Q6_jR4w@iq>xk!wE z6G*D@cj;qj9z1Gc2mU%Iw(sX2H`51*`ShT6HUUwHjJNq*1YtLD@bR}6f0cddd}qMa zU<;`hsLOHE zWyuF0BVRAkc=Qijs`McJiK^}ZGQMTgA5C)rmnUEWE^ghh^c_K3`aNR<)NOrQGBdfa?( zJrr6;@vuIhX6n|%Ne1SP=H_yH|0N(Yg=+O7n+CLXKWu0k?YNEKTm9;81qKd7As|MM zP1)+9aQgQ`a>$Tj+6~TQh)BhEgBOC(nQiPyys?<}I)SO(&nT9AZF~|%^UnI_-B5nW zFJNR>DOy#{pf5`#j;j7>!Jr&18Nr$!7Q~W+nAqfi8{nR6@gWqpO3aiv+g5NxVAfIM zaMjHs4tt+IyB*f}+t;-~4G;u6l4Yb;kd9z)i%Z`-jRlVX===G@iv`Q|LoPoaLbRuC z5-wB_n=G-B3+yaa$q#_A{T={R-IKRBrcR}&KTBc-eeKG;|7`E2!rAIPkk zA(K_Ni2Bx^o=Y+9u!<0a<;8%o>)m2W5d0}kuW9ISNHv*tDIzoNHcC!Z&2lF#mVUN}V*U_M;l zZ(P+adHu1C|7Y(;Il11&C3tv?m-y8oq4K)JlW9Gv%<9&r3e+obh14b)Ycpoxce_{* zJ_{wiX2Z5}C`0Y>+&}9k*giftqRdpKQ$-9J^yb)=w0f}gqJ_Z24fC?nV&8_}CdrJM zzLu?WW*`aD#4r1HUY^}#Ucz7PW%{s?`kYzO*6wxh^6dyM%L}7QWNPxEuIH9S%)9yO zb&vS=J;I~IGV^-;^(LyyMB}s4L-P+qANtgRzo?IJD;vxYv4d49<8cszD{TK(T2Z;h z!BnDoR5%Oe+%!RS2$GIZT#t6L0fNk8W%2X2uaxTntMOf`2KA`pc%b}gq+`SV3Rg3q z9PF}*;u`q8y8(^v22ydY8tR1hcULFGWl5Q^Y2X6tfXmD0Fs7GIta`zAE+s6 zl7EIa7IR84A+bjCEn}6`aAWvZSG3)_pmcFhL}#XSK)o&b%iX}G@0YC}-OdF4JjgAQ zmP}u?$o+O^>q56&j^Bo?C*NK*85ucgTS#Mcy!mAmLZIP_X>x3=r5ziFV&IiMbjrmB zF{quaql78Cr@SI_U@pFF7wEKJ77Re5laN2Qa?I9l_c^7KwV16TWz9g)At9B3&8K*NGFx9T+R~E6d{*5sp$2lNS z8E>Fj7*VVP0jWVYdZ-k)0LXLU%JC5nFLCNy&232Ba>umhw%SMMGQ?5sJB+b@K`;;c z`fwA&P^jwLmnr4m8VE)<4BKES^i(Zvvc1suY_Bw{2MCe3a%|OHS|r2A>>0&;rV(w} zLE1(Xqi!qx1=h$D(wvE+M$2nzvn?zGXk3%R`iOhIp`yr5r&_JjslGMzE51>D$sG@8 zpOYZ5E6GYjT!E<3n#;;CF<&+vJlsAM&sGZI;q-)GsY!shLeM<6-jxzmqbLXLZp<|! zsDya}B+?QeYnYMD3d0~v&Llse>pBjVpv)qhr&ap6q4V9staWj@ow3&GGZQvT1hp|% z>;Uv@17#H;LnRfSqnLNRcgncg#x44}uou)cTorvM)Ts?jz`qkDI|+64=YVDgoO;aA zRcIP!d`(c7zH+7vQCUv$;*OvaWjN3APQfZ~;V7JVdj$XYciwwbA!EL9e}G@2lMcFy z^9}=ZrEdGBu;Kkg$j$>U3H%!e9zJE?PmJ8`dD}!x@_4|?PTp+gBZt(Mx5 z#U08BUU4nwsLDVz94$`%pc9L*IB>-NR3$87@Kf0q!hF5xd;lE{$WnB=XIt4BhOGc)? zzq?v3)8NdrNZf6Q13`3(`ll?JjWB4(w50X~@ll;Jc~vtX1-HD+c3)uBJXKTEx+FSd z{(LzN&6%s3lcWcm8Qs1E>KI&Y&NJ=F5NXv8>H}gMZoAN4&xjm%ZwP6YY_goUCQuhQ z_XVZA3{!mg$gD+nks8SFf&Sds#ZS}T4%feXY>#bgVhx!snanI!+My#eUqz5rGjj$h zc!fb#8I#RGoAye)EBHv@1BJeExNv1vPfU?Mi=p3@iNXk~(9k}VJCXcrZIjvNO^z6+ zM9+F`sw8aR8L(l$ykIqX7528g;UDzYQ-;Ls&&_B2&9Mf%hfgblKdhHj-e$x%wjOjs zD3^a;HS@)QU-CP(v^N$KD9V|ghpUu8rEO1_~eugfs#)T)B18Jp(?G|aFaO#sy^bN;4-xUtoTWxkQsb_|O zU)9QB`;~;h0!}>cf?7IR-)ucrp_wsY7-uDPokE;@xFP{ncBri;-s}itHO8OZg@avs zbXX|*KM27q|4!Uw`HBgaR`*%l?u3Daoq94~ zwv)!hpO^|0s3(b@y#$s>JDt{Du2uypBPLtL2<5;iEK?jaE^78Xhnl`k>j~;S^<6LZ z+HFm-WH8U49f@Vue6`akOP3Wy3)s6^1*!Qd47(fk+!r9;G?*rTS{}^CdM-*82qLkU z61d5*B+tTkmbE+)%%unwZ>dA$t+)BlT1+zt!qya-5LP~McIIE0ZU}gy!`47PSk_Vv!q-Av7jCRDk9HVu)e1_E zWCrVR_uGL1umIjzEz_`SoXmeL=u~u7#j~G1rGS>84pF#ifX*3(LMXa%M{Z!_ix27& z`)hYsc~n{r)+6iq0~H94lHok7pHRsEzvEO_&WbrFp>2(ozbk-*)Ke9cvgLkdbV<3 z?%bAx-Y69xXg};MMR^|76J*4+#UPzuy=wn`^82>AKxm>!DT-*VsTc*_VJXQga2&Q7 zYj4Dka-A?R`!TZ?^>#7SMt) zda?(7gguzQYB*oKd!gw<-jQL%BsYS`$+LI!=3jK5HJ8;Sdx}LftKFbn!Zj}pUd33# z?MNw7e6!v?aQFv+x?{@RNv|$axllW`0Y8X@2oVfJ2icH;^}v6*xR1}2P`qh>NEG<8 z)|_LX`CJEu>!1$Px9F-th<0B%AwpAjic+g0yV3}5%_GxdEeATIJFqkqJ5{@=IbO{b zHNO?zeZE!3_V}VV=~E__>mT{s#82wngr{oCuC+K8mzfzvC570`cWxnTl|9D`p?<>b z@1OULH$vd#XaJ+F)5-t>7*Ra%;&$4`KlCw{!MA|z{f_NtJw>F>-b%lXBSnIwa-1I= zTzgGqnlOflD{=?=O;S|LnU45f$nXNs|5 z6isRE^+Uk1f|VjK5*c9B^2pmZH@(_$2XGv*b>ORd0DAU*gj*OtV2Xu}zO(IGv_ zGG8|&y2=1y8Db7sr_YU0ofGTI;>QlUYLT_jF2+&nv#M-UEGJUW#TAcxwD;h#S- zSI$Qwd}|p56wYR9+qvp~wkg{QA6Mgl6Hx46O;q*(dzKe-u5a<>wLwP+hC`38u0uJ` zKSU|Iy{I_Yay9rpoX))z(}9l>^Bd_XhHB93>+K{b(8{*(`aLGin#N)nz(1(G)kOny zXPdP~mYGKBzEC`UQJj%qd37ZOiiCqFe)KO_S#TPMrA*Xki2sYdcM1;e?bbbG+jg>& ztTZ92XGkV*o)RMJ@3Q#@{_z3ltF5tS$(mRS#O&LiXz%_ocXl{!A-VoZTyiAvbRikn@ z<2T?S5CLx1KEaxPc)GgrMcK`q8F3`!tikRukXV>h^d@E#*Y;LXVo=}FL`JghtqXFm z3NXXzagNf`ke2ll$b9g8=B&0@?>@3Yf*L(^olL!Xhv>l9mKfu7fHLf$TkJmXQcZ*F z0#oFX(1_vFLt{*NG|NHtcjtvR8^)MXV!gRUM@aBBzpzh%f0gjS$TDi@9R_O-!cGv2 zsEL{_5%kN+C=WmnB&osDT=r9-QgI7KS-JVE;_@0#&HwSr>ZvMEjHZmu^hM+p(R1>& zS*KTBavP4!7qw>$Tt_Z2F?RlkDBm?RsTaK*{bX8GW>kjiNFU|t5FB=jDZCT8D$n9b z__Vc$?!8FBQfLM<5P-`s9ab*vx`cKkg-zcpaSGBtqbfp`O+3ZPv7|nLR4rVlKmal= z0f=V18(UIvzvB07h>`LU)Ld{<4u=$M251Wg7+0b*(qB(fX9voiJ}(iMqxw}hEINxW#?CxJEI4W z{?PAYq>B2YQ5LZPYZGlA6VBx@|B(`+ZkTXNUmaY+#p`J8ByNj*nFIYRN@ooODIVoi zf??S03ZCvYMkyZF$U30kpL}OZ9tRQCWN)`oV~#|E8(Q%v%WL?0e{0o(VJ=!6)1stv zMM7J0_>oTIS8e7O18*DblAdK!|BPO315O)_!gm|ZsmO7P)fJB`Vp~1wm)CJqKe4sx z>)$%gih{M;+s6&NfDhFi!RosdEi^|x!jwH`NEEAnR2h&!w7SNXN4`5EX`bD5Ro+46 zIC!uAr4cg7U1cje;NTy45GuFe)ui~@$($7MtV>?^Y`qLG4MhC1%N<+oriqb8bbG$K zu4~LvXYr95K7C@s_4Yt97FiGm{RJh1gD%6yHEaC`@mzSZK{1d#97n&8< zVfuZjoH|jnzC+7MUWu zJPYD;v;{*B!35Ks-riT)fSI1AMxO+EME}N}*2Kb7FQ&TMcs)Z{m%9?~<4dE6Q%g2) zsY^K+%*(9Ve)>;jMP7jc0L5M}N_Z=r;wQ8J+QP~nJ_KdP0tVdHNhwDEqL+m~Y;92~ z9XH6Dnlwb9U&-Sve+5XVh9V2a`swV#Dn#xwmG8z5Ewm819OGWGi`8hx-p-Ln`Fx{j z%P{|GcA3jcnS&;D4z+}O{}TwG_9W+0$7euc4u)A*kz7wxW2?gi!#dq&H0vvi-I7jY zsDzN*4Xh}k6oTLt79)Wkj%Ib~=H*|)&8QQc&iM#Oex7RH7!<*67PqHXM?dk5`W!RUXZaTT3>gV(gCvliaC*-!TQSHnEyeAixAaQhUE zzZ!vc3o4l;h2g z)fv1F_H$SpQ)cj+;e{CE(cmluN^5!9)?$!c149)DIvOc)pd}c*88U?8f)lAP#fP}c z{i+ti@M&dB$690|qJQLQR&o$fr@#wlnD2u))XuwHnJEBd+g-ZuDDAuvLa{pMs--j5 z{=25rhAXPLdbX2m;vFVkI~D@BGekO}0;oY1k*s>07H)RYflc$uHiSuf!(anbMK+F8IUr0*UUl9exZwbrGoC{2#;%XeaM!X zTRitCR)>@3rtKuDZW-!mcL{|=%oe_}O|M=-ou{!&MIga(_h=~9GwP3J=sCQPvbuHi zJv_D^HKD1d!>w(@Gph=zw9wED*z-#M;da9N+)ChzcTPRZ6+9cHbw86wjH}NEc(X3K z+JXe*z$6(tm0y5Y(;7w^%3$`iSh!?teDK~}2CW7$cKoz@Y zVAMuQ!$DtVQeNT}9vCu8qSSRNzf0Sum$RRTK;o|uP3=Dd%Jo3g&8v9dmt!4=dSUO( zMvDYj5NKmdL0~Ehqyh`(f60ndsO0dY_VL~&(UmJ%iO#46TKn1Lz-ecV=0)URAb9TZS*ypi4NFr9 zpzy#kB&l~WMt6Y7UA&^Qh(SHS zKK3g{wdPw?MqEYf{5f$34lPuITf*uKw#O0g`{;z0XVVM`^@E*o-K&CI8cz?Vp^!DW zKR(W?IJo~Kk^NORxYU!g5v4hqd;v>hlSmJonsmq6sl4hF=+y=BM-qj zMvROCFgc!B4q@gn=R^^F&sz+(?J6PGcn9@*-A%Bnb--4CSz4wL;&%MZ)y0#Xq-*CV za}5G3R4#pkH^b&k|5NG$!#|`h&@<98|EJUi1}4V;c>B+x3k-Cu^#3z+fdGnD*v!(= z$ew^!*iz5YNYKc@#?T0gn;Xi((cVbU3d(gYN&!+)!2}IYk4h56X+S+O-{)`QU~CeB zgkV3C^8f%5r2^h4v>S;V?YIPgWG;cd;((DX%E3cRt`Hwpu0K?1BoSp1xhkJv1Oe0u zxrR_`Uk8Y$?NMf0f`j(g_ttg$w^owaC5l%|0Tp3o>&!}G#iX`H(o(vck2s$8MWgx1#D!>D20D>r# zOtLWHs;@0#ex_}p9=|3qg)T1!2?V}y5{OU`lrAWNHn`pwpKcP2@UI>|WB`U#OSoKx z6Z}4@x<@~R1>WEnPf5xES!(|wKtdwFUP@~OP??@l0De$+0uniW5PW%oP>^s^fZzqf zp2JEo1i4*9FYzv*xLxsZq_`7{!n1w^t0z8C?Nmjmf|mHg>1k}a9?$%1^|J%pLGofg zr)wL25LAdqBM3zXbCB>6rJC+%l3=+e{Qnrz{b7&z0n?GOc~JUYN&@do_eU_=GBFYU~ck)i}rA6s{KeMsKp5q&_BUtoC( z#mLAlNFf7dcKkmr&={GPuTliyak4qmw+C*c$3n0RGV}pF$tYBR#IYd1O_4mC+*(u5 zJ%R7;L+jiRmZbB751BllY(y2(IE)WxWZ&-_0eQjvEZ&z=lA1jSUJ}mQn%)`!IWeB+ zw|#_KU>qjtyF9PZ_z037e_4>@2r@(cn*PAI5_>OMZnBwb$bdr_f*_!|c+)^MjDa3U zNBtZSTYtV_UvWPA%v^vpC>aobNxr$5fh4ff^9QoI#2U{eem=_(J^O)->+4{pz+I43 z8S_`v{q~ZfltN{g?}6GmR_+QD*0kk^YaFJii-)vo?=JSih)-)@H_py9hsLtspPM!g z?wGIpMthC-rhDC7tBF}x%+-gQgN}NZ;BE^2nTN!kV+5!Lzi-BpoaiML5m>IB*s7Ho zTk2-Ne%EzeuYPV=>pZy}3fWADYGmQRba)H>SfrDGN;+uQ$+;EZ64l2ZDT zNc{YXSTIs|Xx}#4Zt2(M`s?PJ&IxNa-E?+Jp8^VZ^yG@;E_c~MKvxXNwC1S%t{Q#S zD1liiD%BLBv=l`B{8`fRFc#s{P8MO9#m9OruWQs{N<(QJ=ns^=4Lw;>OptRz>^=9``F3!w|;skq+)w z>~}yR1y)6Llqj4tF6XZ1_g!j7a<*fo8)uNk=s2Y*c3`-RR;89L$vZ#3MMF*d#sep* z*=BxTgNZ}@SX?d+fSH$Q7CbUmHZm;g1 zl2Nl$?N;$TKoMDzL74I`R?mhPn}lPx!{AR9|mpQ&=~RXE6(229Ti^2b@&;VZ|9$Ab~qB% zuS-wnB^{zE-?$g(PkW11)a#BLneB{CUfqeeAR|7d_l{Vx+MlL3lQIqenk6_NyOjv8 zGA6LTqzi=D?gp2>hCrpx{>DBlJjA5s*px_YE38VqR2duA*g8;^6@I3kYDLukRZNDq zagS&A&7gas)6E@OswbHJWR!f-Da*=2m*4COvF1H3AXL%S@m2XGVfR8?Nc20!KqCRo zXe0qRC&o#>5PBShuil4gvUPjtYjSrfD+gX93o5Ux)}U?Vw_ zG@HHUQp4?PmXXFR(h70<_yWHL>v9H5{Ye-+=+A0WaLSvr1aq+IffrXu{YgYjS7+15 zPzzX7RP`mktM?4E+1rMT7y!%>AKnkNV>CCl+>^bk{yIr*VP{?98xgVvrK^zUEybh+ zd+B|u7~YSod8BJ?X|p?@RH#}WT-8idX_;%=gc?~o6=@M7i@g_E2H6BBiM>y90p1s+ z%h)s=rT(4N0kPR!JZ~PHHe)ktdsI~+sfpHW^Y4iM5-EJ(GSs;np`7X;R(g+N{qXj@ z?|I}Xf^YDO$mCayjBn)YlS_!Syj$A;28*91J^ZJ_gy|m&6BY*g|ENS52w3QuS^wkh zKi4HJEPojPt96N$i;--mMh!KVzl7~LK=0<}Cb&zQA72P2hNgfo2qeIJKltseG-oJB2POs9MV0Px@tJyVEKfFl;bQi_d< zfK+4ZU;suCF#Z61fV?tv3$tLkyQaW?tpcim&bA-`Z!$nNe*KoX-*X33kIew7=pehd zBB{7QS3on03n@x-OLO4lV-Dxzz`S%CzQJQT&Z!~oEBMRVpVyZ}^pw&*G{@DM<`kj+5^x&T@&&=60w&~r6Z4heMYx1viu*>5$_pDCZQodiySCas)XFB7eST{C@8L>uXpm5Rvz#Id68 z#gorDUovq&l$YiToV>xRslsKE4?f6e>)aJBJTIg=p|FL*sJH^IRK0b2u)QRtidTRs z-?CzwmnE3(UPwzD1h6U$%HZ%+vA7{l3Yqj{K98@t&q6M7Q%!01B&t!ThA~Lu+YxA7 zD1juv*+574&aq@jkng(XVYB{ZajXG$M#X<|nqz-;s7ijKku*cOMpHem(UcqxvM)F#*kb*-xNU4O zlsQ^p{@@W^?X>?_Uk%;>;g!V}yo*{-;U$dPpk+bzo22;6V6x7tR(Pg2%|-fa0Cewf zCbsBdw$P%nmwW84olvr`UGOYQXMIMXv&_oGemM4B@T z>N^|_c_pR|I$EG)0vN-wS^AYt?xmH;8i=3+lzjv8x)xQUL3c65E_&9s4ke#0=b2+7Y0t9}sT}jj0{ztyWsa@$8lMtgaKP|> z-juKlmvR}N5m^0aNx0RH0H+VT^&0m9AkvAL?E+)SYVbDDmV?7-os8Shw#xP0aTlA1 zVMSGWA(7OY622eckSam3y0^nj?B(`yfb;Zgaau$N_V-dIN-Yv2mxzH6e)NwgezO$lt(h&&2Q(&RD) zOqm^zDz2Ay3i%wd{#L|{5nZ0FAq&5qvc+of6`Kv3i~xo@lk`=Y!gBQp?ZO(>APdSN zkz3P-0qTN-9la=WAM7&U}wm-7Tp@=?$<<`A~ZjcJCSK6$I%kMWrQv{`f!<|BfpimF98= zGZkmOSkzAy(pN~#XVO%!U3mT_<7;sdU3^L2BK(i0O?!a0+0}oVG@`b{f75= z`1<6Gmk#9d23{I_&L%S9>@Uh}!E^;s!pNl(x<{XU)~ev+vc#Do>ms}sYQUo2`*ya^ z&u1Ygm+IgvA2ZeR_auG1f|?AIWN2W+jD5lxKC%j-kPgvj^9x<-?Aejg3aKK3_YS0^ zbs?;OFQV-|wId{9bONS?DbMaRid`d(bbfG~yv4e+3Q3uk>k4jZEaI(I)8{8#bMty+ z&Nf7EAoj=;|4&NMKnP)(AuiD$;UXu9I7H7h*Wt@PJxiJGu#aQvvd`^O=-3rCr#p4RZch-;V-<=arbye-%*iy#B%DYgJ zw%R?aM;y=MkE40}0iGeO&9vj~Q_IM%!N z6>Es4qzvT<+rh<+N_5V_ISbv2sk5%jbW;?KkE6ZWev~TWZmFdC)PLR(Q;45RQJyi0 zKT`j`UggFj)r#n6N8ANX;k;+?&gcQh>a568pRBqholp-w^eb$zaMOg98wb#w+|`t3 zo&0!p{6BJJD+@ zrQ*5=yjA_{WCrS>0|>U~rG-Ubpm*$Uc$mqJ;S6FxCCq0rRyYHY-=J`0h^&psLv9&k zP$1GSStWop+Y*>bB8`EQa6-?($iI~QH8X5o6ulZSaA?`0%XK_fgZKb>43<5(Adn z22Yol=QU``aR z)?5<*iyS&~I^v$)P3k7G;T^mCD|@cKh%>z1b*y_a#PWiSQ3AV8C|!`&&8n8aJG$d| z{kqY|OvMK#PW4xcxAaubR1#&i3C2r)SEjU57mMc(=N*?I+QaKTAMk)ZI3(3)5L{}S zgd4{3!f>l-x0>N!cN>qQ=>Q&~GVVDnRn?%ig1w;{>V*J5ahKnR*SkDAt+=1cL+x*t z5EE8Ogs8)iK0x=g2Ps%6Sb2oaB(xA+N;9CW+2* zdxKz|$M!{xe9MmdaV zx36qA_uiU}vJ1cE5@uM?`%Kn)6UvlP97+lPhCV{#!&q@`bF!2mqtz82)H-aMNAfa0 zD%J|D{ZYO8TP)P|2?wiXhckVB0MW~8S*PP@FZ%fmL|Ybs$L5y<(4w;?4r`Cb8A)bR*L(${ht3!8bYoV)J z&x#A|dxh3xNORrzYAL&+Lb}88pe4b2{{iiN_fqNpnFZk%sm$DpZ2h__uN-j_QmO!> zOAJPx)TIJ?wACRC6CWH&)M2)p9NTkUzd4(LP7wM?^Pif?QaH>qmj2@_S9yLxVPzLf zhPK}d)HRgKE#vSkU93-`A`iJZRml^Ud*4lJf8ms{0#FxVi=4HoS4jo@nASy5co})OPw!4pS9tg`KoTWr!(>pK zZqC*oHHlCzr(AkvDxg~AED`>)wm1Q86F|#7dGH6bb&GQP!i`2&%Y1`PH$%134vA?= z^@>x+ldXvF?Tca#oh(~-O!o=Yyk0I@n_h{oGNlBQxw>k;vXQEEKgTb988&BF_(Vo0 zzD%7Kj4JE9zxaJD_DMwL(OjTS(w(H6MYr5|!MFa+Ev}8F zA~YLui#H#1q1|7}#7H6bKkgUiOm)+nMZ6(k6;V<^bn5@3m=cD@mnCMe zI8%R6P%uxJ>Aa#{chhHT<(D^@E>5^?@OS!*eYC$1%d`<=d}oiaSc6!QerwG7*d4Gc zJo)s%A_f_QmWmyZtLel}hGbWv7_Ww?SL)J6M09IspbgbzwaJie3Bn6Oal0ErN30MZ zA3;194e8Nff1yuqsyX7KbU9Z8bIx4pt<-b!h@MC8F%6|d*DwpKk)EZE#jsI-oohN8 z{%Qxxn6vD#h4v!xjXX z$?wTwwS~kxXL2-*z68|f1%-N^!+y!P^`|`^wMRP()~<=L zy%5ccMobJW6+jB8F{UWPs#x$1TK7kySR96Sf?uyPOm0&WeEDskjRoY?-BDn%+5=LQ z^Mho?dgOWmw46+lhZzpB;!2yWhD?RJiP^5r9IkP!=o6i@0}Hrd_Ij)n`G6*-OZBON z1ha;-_Ea@^Ulec_RSvOObc} zW`okmxM14d!8UxX@Q{FHB5T{LlQ&xB1ABpB)}fse-&zb;Iz^mOWv~oi*qy7HsQmKD zT+k-7o=3}Ac^BImt%j%U#3^h+7_9kr&GZ3|)3v~^+nuDnIajD)$6YVNYSb?KbqiU} zUCWDT^GA*gZ4(wW;&^pylzCcG$MHDAX88NyP2X0zV0I0Qw4iHI(BAzj4A-bECTsvE zT&VX9)p#I(clh-2Ak|j%ds1m`6Qp9a=ZKRv4sp))yMS_=xA#oRIGSea_R${mhJj1; z;eB|fBScTQLxD6ilidCb25WmjFZ!Z70iV<8Rt*XovgPtGCQzyPaI%l(Qj99{oJmF* zzM#1>6a;kh*G5{}ur#Cesk-~I%{ksA)r0YryvJPRiG-^F8Dr$7YSO2nESN=#QosxYx{*(#bRmro$oGu$<8Gj;60*TT!?3*zjAR7|B$NC1enC$Tc>mYoyUlB59sXkq$6eA0@>O5N!li5`zz8 zyP72&32ojeM{{CW38IJv%%Ik(B5=NZVnB_WBT=_Ty1Fb!P$*EwfVf&@s>QXidAt3A zX7ZcKR6boc5z|~7P6v7-84)mkJrrOT=ewG=!pj@FQ3VJ};HRL(2M=r=Re)<@%4yZ(KJs9x z)LSxvq|ky>ILU?n1Z;p+OKs#-5J-vI7RY{12GJ{c=r$Qb6t`Bgu>#MlfT;^%TvqLM z2}!ehR*g~lZ|sc-7}skFD5FVlXkS~3#%7>5BrKovp8@(~%4H|+_g#He6Bq@+$m>kl zHy@3VmTnRj^t7HC#;P=j>&!9AKd5>K_o~hrdJw>?BumiU1+>)J;?Ejr3sZ=%ov*cH zfdDJ8`~15imBt!mWo5va*}Ks10LfBG^zGP+(r`MJyy$B1X&y_Q`jQJvb(8u?D3jn= z@+*z)=OM=|f&h1f5^Ur&JZ_wPZaSE|3=$CMM>1S@bQTc|Y?TVN=P%J>j{4s8m#2mo z+ShY10bZP8cYO%0YcuE@M+r88PA%#8C>A=4LC+a&a!|aJp2AS$MV{`iz^@cQke1|2 zXM6ToWfoY?WevG-X;StR@L!!Q{6u)uxE3RHSI!{P)mqKjCQ|*9q*~xm)&%>#0x@fn!O+ zEQn+r?Cg{ChDW4Gr;3h{O!QAD@)+&zBR}09@`&z5In2;Q_xE~eEHY&LL)aCr%%1p~ zgxskLlpjA9rCKs>P~_e2?p3{cA+nKPSh^2DK?Khy zv_dRzl`yiK6QS!CuwnlDRwx8*o$COW7~dL7-Jr9QUJ=56DgGv ze(mLl!m~a$00KMnX0P}xwv`MMPeg{77vXN2jCP3ripDbC>|P<|;3?H`eEM+Vy_K2OMMp z+(&0*>7ZDfyD~X*^J&4f>gu#hqrqXF>FQoz<{mqXGB0Z1^1DDOAQpeako0T_d}h** z&~*3Ss|xZLu5_8sAo!n{HAy-a&~dni@R&NN=;{GZ%!(0jaGb*O)%g`%a{0V5S&aZD zEsE}WQN%m-9e!D8T=x=y3C$MrDZX8pwbUH^wa^~RWTWghG(L&2^J-yz8s^a@3UKOb zI}wMJvniI@brv|2+2$psgy%s1!35CgMm8INjp@FuCs9^9=%7Ip?N@Il3#KrC5#$6r zC=Gm2d)?AvWdUHC3Y9r5ND7c^^A8{mh$AXXdT(o2uJ0khJGk$jpr*8NGOe?LH(=ah z6~6#UH8pc@a^qfR+LQkJIJ}7siATr%=4aGbLciUzOld8TpS&oR3V~h~<993UO&2#? z>Y-&15`8OYJN(5~nPyKb%TJ zQhBaE9S$(D677pPi3iD!x+Nhf zJK8ui-L=2Dpn4T_d3KK+#S{vUoG5~!V56J^*>|+}Q)~9~fLjce>vFU{5x0O0_KsvU zmwZn1^9158=ckW1zMNM2OlUAclVIJv-f=)+uRT+_-e+_2Ar`Y`K>tj?2Bza0>)P#3 zo|N5MBqMI3>_v&kqK0cv23BbcA$kB4_YSR-G|tHEG|Ljhkd;wsKaz6cw=%4&k3pC6w3 zDF)6R@EJ*|iCP%NKA)Wpb(|orYSK2z_~gY$^tAnwl3jv(;*+m5$9M?$IjOC6wf<${`nYgF!ZjfN_WP2IDc2P%7Vk=*Hhai6iN3zYm>xVyRO^e z#^4_IQRpa(;)skuZL1u+A!MZnN|@hUWaP!-YV5+ULOxo>zBNO+%%$}95(pP_z52o7 z+AH&8Q&7AL=aW>;emF{^Mt>C0ijy~G)39Te}GYn)9AM#9x$P@UFlcuAl+o{=J9 z=ELcuibZ*S5q(n1z|GjR*dRzn%NohW2CoQ7sa?~30NXKpi#m}Rt9&M z+YhHx=QwRyL&5WITi`IK`ILJj?@5vfOMi7t_3ZN(NeVB zAsu+N$@ECTe-ZWjrQ`9X;NDzm5uN_R=(GO?;;5S7&4KI$bfw$nT9Z_rv&Y_sCb+QP32o;~TfV={qfVU@~3Kdf~_YEHP1L0ZCc zyO2romWW&G`;7kyO6B(zwWwnhY);<`XF*+hX`B4b!@f|$YJcLJN!jetp>!Op zxWXr`0S`Kh0-^HP-4oiaSSgh+Y7^3LipJ(56kc}g#OU~^Si$Gs-oLmF;Z1Bdr%Vbe zT~0~%iA-rvwstxer4?>Bm+V~8Sd5R)GJV1uP%1>#AOCuqYdjo!xZu_@IWNA#r*hj& z43RJrURoxx+BzRnsDW?yVeBS5w0jo08NHIne``y#jom)`(iPL0V$?8f7CJ)vWZG=C z&iF-!$9CKl%c8V~r?-zI2~J_j9=^UTwFv9J0(S;PsHT+iNoT)(IGYWQX2U(z$ySx& zg-w-W`DXrW+Ut3ji5q18xQan*v!ni9!_3*-fh`LTi~$2)`L}Xf=cVcA_X-|thWF|1 znAEzP`OsC^YbKRn<&#l^Rx6vQ$ZVrad4o6!+3WC-e#n#n=fEp~Gt{ z7SrQhpmA0#iBSVxF(>jJLOobc;!I$X24L`L$ae1jDQjv+aY8K_2E^eP-ORUJp#6y$ zg~)rK7vhqZzka_m!4dbUKsZ+tBz;Nk@?==yHK%>Ez|+{H?+F-9Q5|8SLa30+fA6sU zb;3E0GKm&&iS3WD-4X=(_V+}MmdTbM9t|V*8x2`kfoiilNr|tb2bPBDcM;`6WhH!s z>4iLvWO@)30I?-Qv?H?3&-~yQP>iL0h-ACXBOEP-^XC76@j{wAy^^<^3%ghBI~Eqp z!A5=CC{3G=3iq^Dyl^N$%E2!3v_>%!;)}uR;P5`WFT7jlEZbw2N#8yai)vgybvl8@Gh6=ZJ`pOXMDdNY zsQx^wRj2E{Xy2+&!rkj>Ok#NzeU_{FDz6_|h2`jtC}#~>xi!XPZ1@{4GCN|2mUp6D z^`EF=`Tq$uBmYg!e^c|nof>!Ra{YgzhV>t)`HxFb{{^ja`kz{Z(D@%)gHPfIMY#GJ z%WA2SWZtMED#?OGB8T)Zt(k`DE!xBj%^tQHvbiYPJsQ3@&L1~6`E{0EkG{@QQdN_1 zaNGoIZ9P}aifhHisjjhRzj2Ab;;@W@%~7*%m{oOd-r{iJq=h40gsb-b3-euhF&pT( zW?kjoLmtP)Cq(>5Z4_~X%d>5ByOsNUXS?+1(2aBYVUT@RtE$uA{K7n@TA>Y{(wIa{ zi{Xn+_$=AQH&mQfvy^IaO<@8Jjg(-HQN1Gy+EGQfI-Uc#s?NQT|D`s2%~`9K$*0ranbHeWw!MCu;aO{RTZK<6zA+XEQp15phN zBLBDl+gO|o7wO1oC^4V{zH1fA!& zH=fh9=LERU9LIytLWApHe>-!S+(ZNLysmIx%bwGws=SKtEpjluFByru-X=z>xf#da zCnh?kB~QGJiLM!uJ#x}opVQP_b1*Nxj3b}Z#D0FAc^NZYGbVWCkZ!zFA#Rz3J#b4H z|3vtP`62@tqe-rg^HND`9UGHI>*M&+y_K(N7dx#t#0K%;-0ycoS7zVs;M0iJ3;z>A zZ2wLWGaK{&b&c@9K#-N<*wh&&brU5WZMmoH#;L4 zO`O`49ChAgnD25wYYezAzBa$I5~UQNxmR`0_GO!q;qE-RaBxqD9gcXPPz@6whM$hx zEOJs^4>CD)Hq(oxHE56D@F7s%R;+34(G`COGn6J2FJ3cw#n^qe_ zXw+#|A0~0LL%tH2xCQ4^y6U_(y=&g9=Qd`a?AdXt4e9XyDp%HltISS*cUVwme6j9F z-G8~&NzS$3w2f8O9nV)ad{%wd%*NlNYM>2L)>%DXO4{et@kDMc*uCPw7wsnj!|eS5 z6lUekO%LUY1>g<8p&$dV0my|MVFg$~Xaz^{?HiPLC2;z2Of?bA83066f&t3&W|aMU zTY=~V+$FVMVEXiH3>@RcfN&u(%1lUfO&w<==rV^ig#&jZf#~4-F$=MggB{LrVncRe z%ndnVQp5nxm^0fSZ{1DqZ`;Ow+P}_VRG6bfX#n_*s1r?@)?t&hn4IBsSUt2}1zI6ru#DEVsif*%r;GVvt1-^G#>!X)&lfjvf zt;9ASIA!`(cVHsDCEe0*D5pIq?QQIX?llgF$vBZL=GghDoM0=^lG1xik77)&LkgY2egZq!A<*3S33hOZ=CmXSs;GQF}xHh-AGLP>#)OlpOU;3&F`cv z_0nd6cSpi_rwQHsMrP?g8PBJM{I95Zeb?pf1Wwf+j;9MQiHE&Y#C*+%;`z@zKa_qrKU z9w+&S@lx9xyKW~uV!HxNUZ=m;moLHFzw;-uENM&TXZb<*XUzvGJ#0ZYFQ(gv>P}^V zx5%$^evOlKLRXhxPC_s@RT8Z$Z%>gtQ@r<&Na3bT-^#LUv-J>Y zBkKkNgOrD@07C*4LgeV%13&|$`$huu!p3><0+MS|1%bbFe;$+hlp)xfWIVaBg+|7bq1p0aJ^#R`F;U~98Ky=BwaG1Ehs_UsV8pq`o8 zi6<{+Uw$P|v6d4pS3}U&wdV7*CV$#G3N5;pXnF8*(2V$bEW~x$@U>i@lR4X+8SLd2 zN5ZN}Xb)q)jAan!>0sjbTP3;aP)u=Y6KH#6z9@>we_}qn1a;9r$|Kbe2gUgP8bAbc z74Ho64^DI!1GO@{Vr!{LJiEbp`7r-wJK2f1QIFP3OC6x24%+=d^-{FIlOp|t1FW|h z?#G05iO-Qwefe7vr|62Ldbh$)E zj>&WYuUw}*$C|K>E>^*{WT)gG2|35+8XwXEi*L?3?q$w+nh_c& z&FE_Fzn}4m?+Y<~n^S43UWa%77E0q-)s`+P2!a|aSPWNs+JS0Y&2fn`n$H32klW&s zNfvWQ*H&6pdh%RLYT9nZXI8iG(jU)P6>9q1l_hqi@Dvi4!A_I2pXb`yjszfz$US%ffCj(>hzahCMfB_oB-^421z!jkE1Ck$F9im0I)}jf2W5?tj#UM~ zSTv>#I)_gc#yOIPK`fUTkoYkY1SX2c9Wi)5bv%?VQx4!rk2S#2pwCu13;6B_iKxhs zT?RU2{JsI81qa$HTdOhk>rSK7#C5*QgbZ+`L{=IZ3Cg zdpVlT{8+_$f{vaI|CbHfi_S?ziR~2I)Ayqmw4X;QvDdc0?e?F#}n&qS#;qW2Um*;wZD!!Sa$=I_o>>A#PE*{fOI=zeax}H6y5Kn z#P!nFLwFnQ9ie-vJ&^9^L{U4gV;&Y=Z?fkp30VL^=UZP|Wn{G>*PV!1*lM=9dQjwl zFKqcg{}TuQJ|9ZJ!pQbt*Monzv6KQ0j|KK>{jJSK+1pr3WniTlQTU#!W-k<`dMfMsEu9 zjWUv)_ET1QrstI$J^d7^+Kx4+rIyPLPCkhJO|fVYqi4lfG{nzZxEFf5w{Q1Msr}`f zPJHQgrx{tCu%9IgF9?!4Z)*=y@4Z(xiK}UkudW-|rMjG|G-_7PO?i)B9c&oPpHn+Y zcVBKyl5MpFN=hmj^L7ep-t*q61c#oZb9I_v#ecsuBuodLS>%x=4jnv$DAmErV5pPn zp*Hk2dJId;=$eCS8d&rF2l=p|Bajb&%q%niQ4#@Sni+w-5OqzL+BRX(QBOt1&(#O? zOHNH)Oc4VLHyEliI8aWKNR_~4d|a^#d3n=06jN`iFZd2>+?R$ z{vQ6<2!)Ns4&*UkAS*N={1XYXu9)Tt@)YngqwX=Ear8dt2#z|aRzM$NMBo{etF#5~ zu-ks?{tPb44N)cwVsAHrPSJis$%Gx$o~Z8K?o*P#HTGLkp~ZwBa^DTEybP$cD3^dO zKRYoj*DNUzYeFb1BC8yqcOD_-D7yPl=F3d%fg(5$p?5Sl}cwK(3h}MsZb#-4D{$pa@{Vx-%`p3kw_i8KGO;+^y&lUQw%5UDxtjiEVl6lP3|D*`dM?T; z;&IWkbxCPFd^OCtU0oYfp1-&m(0*^)Sc}^%$*`PX*bgAKNxyTgx)}H$?Y(tWoPDRXSRj$aL|Vi+^EQ#btZdeCk1`4VcJy$ z$5l@HtDo%70qrF-_n&YBb-bo~_Ty>=))n7`U|0R>c}11y_gpZZF0OasLD8&vf~GTB z#&h6e{l_=fcIoc3zHbT8dH+s4#v$6eRWj6A&RGTUEoM9xQ8w+me6j@}%hHd1l*%PMl2SXxPX8)dkrVuwoIZv? z5a%US9R?;<)mDC0Hf-IVE&PyxKJgddKE7NX`GTonn8Tc$pzm7Fwyh*!X6)n?AE(b@ zPPmmi7(s*b*XY΄LI57fnn4FY=$9@{2->7nKHbkSFuJpUquWE-8EPTI8H*H(B3 zW$=mTHAG=;;Rk6u1X8aWv-d zbFLxxos@%3oZU?!7i&V04-ik(%&1KH$>Er?~!Y1 zUW|QQztQ6SB5@I^s`~DF?*4%PJhZ^$aM?c}(a|}iwc11RafR@7+XS4KMED5PW?yXo zr=Vf}e+p<;OBKsH`1M+2@c9U^pDz}7L~Q;IIaB*5Ih+6Y9|O z`@Bx6(=2VPCsxI>foIXkz*A;szr&OZ?4|mJ^~P8p=h>x}i}fYPloWfe$!JMqgtcxg zap?fr9>y!}ea_);Ns0#93dadNoegy17bFXgkrigkb?x|SY6md>+SZc5(Vw0w5bnsT z?eA=G`_*R7TG55S6-F6>kF8rSfWp|x;yK${_cGZFh*%HKb2vddT&kpUmT#+*&+iSt z$=Tp~!qvU)U*t^cpX97F?SDHtTmQdH&OUqZ#y2rv`rqL5rw9CiaF2zmCZf58I`BEc zs0N6OL$Bab6Q-}$>FkJf59wwr8 zrG8n6JR({C4y|p9=?>eR370K$GY7%}+^lB%_IZQ=t?^~8xc@+yJPS)mO>QcW<`)jn zgRA_2Wu~HQ8tJ(8P5!_lr|A>349BhO3}Y54&J*X+(t#K$w~QNr!+qhFQGenzJ-f*V z9Ljj%JnB6VOX8NncyJx@pHv|6%&c9$n^>dWc$>Lm*+T8$cAIaxICDSDRDYP-3Ncr= z_l$^IM=Dzz;@a8a0T-S$yhI2JEOPx*%=}50|KF0({J$DAPX_K*_X4xhY{k~&)lKo% zMk&-alf?UIuPkpRM=O6*Dyob8w-JLvPJmR7P9?G!S+6?(GrjXcE`7`DJlYJB`w<M3uICs59s5*V{M>d#yW-m1 z%@Fw;XjJ8Kpj|{&K_?-Y&MSCXa#>wC~myt??wM2Rz#w*$bTvVtV=4+pO5`j1h_qGp&TcAYvBTOc2?8Kj4H&)j3|+0p17AeZ7?5= zz*zEZomi0K;#9qEB}X_I2`|48Tk)8SDAK`m`mpkn8PWGf^r-!|7?fj0g1!6T#-=*c zbTfvwY#Gxc)FrvNXnE7$|Mg%E?YdBW^{d5g&n;nql!)z1Ye{PuZlho8U*yaNqvhh- zWD+!tHS0|$^2BHZ{C72MdD!caJ7X|N=Xpk{uq+M1$(wRq+H#_3wucvdrw33Ku4}@n z_y8;-Tz%ApTb2GW8K*lF0d_>OI&xcNY1(Reqw7n2K-owYs-%;8+|}Z*{99bCQRE&{ zDb7`@j?Woj5cbiqfJugBM%`~jL_-r%1UOg*d$$E!de|dI3Ol%*Ot2fyU^60yJc#0H8tr z2hcG51vCQxHK4h1m45;NjqQI0XcPcI1Hd4Fy#)Y1Nn8r?RY~7(+XXFnKmi4{Zr8VNtFLz%4q&i1kDCOQp`B% zlV$yzq)2tN>S`2r+W2!VSG(}!q|sGxJI3A$##N!<42k7g$1SF}Ft6EjU2$CqVU}xT8eOu(hQQ#b z%(s|r^OG>A6(n<3eaQBg%RZX}1baK=ft27S?N61h$6a#A^mI1lWRGUgg6!2mFY+Ty z#!Y`ZkDxgPpU?7>i0RQ2q5?7wAwUyEgwlXDBjU78f}yViGU-XVnTRmvdt`#Ma%A{9 z*0m_4Iczh6_j!xZ-&yy~^j$G0%W4~v0T(3Fa3pq?yxF7z`Xj(dd7TxX*l*a!lX#SwX|F4w+{*MIBBx#$yC;G9`U$Tqeo(Jo=Ma24Cvc~nOgXcQS z-^$Gd)}{4ay#jcWv>Zzgij7rirES5w-$Y^j4V1Lt0ql$>>YlFJ5JpU{=gGv04>`eDBc4kOLB^^%*2%gW9B;=U3 zKDf|abK9+9^UM^Y`+2$7lZ|cvbI)W_#=81pJb!DZ0b%4-58K@i*kB4?5&FRgz{O&# z0SYil685V>x>S><07-1~XW8I3X99miU;sEI`HZG04lz;S)rb^Ty6x3Z*e0+hv4hU> zgT8FFhd{oAJyBq1aTY|zeHH zY~SP`0J55`oBV{yxCKD1`Ob9)5KLt8iTb^ycVBWJw& zWh$9%6Wqb)HI4{4na!>Aiw}=;nbjknYXaQwmO8icpS*$fuu6vh5Hu`*(Cpdi{%iDX zl>@Q;1Td}v=%|O8he)0V7Bt@gl>HV|>hiKOvVRvU*ifJm;pri&&OFUBMj(9Nrsdl= z>_F!%FYXDCF7HUj8=+9`t7aY=FR%h!_f|~(N_0a$|GXp_LPt@=pZdV^pDN9g)-UN2ZBEC&tV?;pnYQA;uPGue z8$_%5@b@3R>bBt=>h|FssqFCv*{K!$PcV_>8}^b<)E8i^9s4dm$&=zfX*r!UI#s%v z!yV*C1;a#v4Y9!VDb3IZ)1msM0_qq7Pn>z5So;{oM~rXW#;hLSMbUp&pP_Dzsrh&h zr=ssFrdR0(gkDq)QlVeF{!BHmEeCF!0P!C+j$ngz_{;1%{3IiasAz9);#h{@KZTTGsZC`+&$)g%37M9a;l`BDkTPD zTu2!&S_NAnM}7i*{3N5e4I^h>z6VRy&}raBl)n$`>UX4xbkxVB@(@1hfhSDm;>UNh zG5M>8vYzE@SN6;LNPU~SwZ)vyjyXQ5QP1K2#Fs{tD)O#ekA>2Hs`G718=L$DR=TP- z6R;1q1#v$=$|vb=iAYbOq>cG<&^?HI^ogHHc;@6qd*}z-3)r)cYc{alch;F#vB#Hi zO3NSLjX&Ju-Y!N@y|oQL+|%AJwC=mA>OTC&-VrEXcn(iLbZS2YQr__R@4ZcGKd|DA zO-EM49Y&7;i?e>i&0VdV&L|@9AiGtcmhfTKL*F^$`*w=3B;Abk_RPnG(~Hq-(hKw4 ztKG`D)$GBk5SQJ(PQd+K;+ur`dFx+IK{vxJJ9P~S6@}|tAszRYEe&7WWLTFAONJmI zelhJ`X)Z(Eas6D1YP~{a3tI15-Ke`}TJW9xhs^Z|kh$P*&$#WyoYD+bZ%6M1{?2c; z2!HcipKyX??c(Yu!E;$wCGV}i`)(S<-#*jt%8%4C=iJ#YFYMv>^``Ka(L@&S`z%2< zAA*qxJ+B2-7TTI37S(W@SIl&NO&euND zSS!#(Y1w7YZ4qtLX(T3B4!WxNaW!y`Gh#P@{EEgtk+cZ6JO zV=D^v1wxES6Wd&}nN3u0DO|y%Kfn$Oj_dZ=Ep&&OUiCUe?#XyjyV<_MmjOPaU>B)B z_PYBAWhh)fOsIXZ0EdqNwp_R;4XHl$Wjw#03^J0?rJv*RBBiRaS4J<#2Lz99=qmQ+ zCo@FobN(OTG)k~FL{yibi+$3-`iuDrgZbbXKr8?5(!R#rCY~n*Z@7Y`zXfMEK`NH= z&(@Bv1i8v57m}1lhoV2~wlBzD1b>&GVKhSgYz)P<=i97{{TcjRU|J2+3^k)5TX}jN zV-w?hIj}P-GRY^&R$j#7f|xF+znle6wof{EoiJ*xJ&#>#WMN#*8w-2grO5p< zHrnzu;s-diU9(b_UdE_8CdUBIZIcT|{eN|6r}Vy1?fo(?x#X58cu;F??!=J(lnz8! zr_=j=NEaY@v69=u?g05utFYd4l(aSaQM_&iXT2-v-2EoHM`Kl={uDlcFjlazGW_Sm zN3q8$58%?iLH#9Aa34L$0vt;bYJe4Ox726`=&Ac`(<&Om#|!`Vau+UO)OHMfi{6#u zxH`1wCE9n!8`=q1E~qa|kr_lXz@vyk z&z$h8px-}f0!i~jz_Y=jpJ;y5uk=mj*OQ8H0Yh$qLVt2iCI-bGl>G_CXy$Eg?!zGj zYYWWL67EB5fR4o!%y#+Zhg=cUPreKW2rfd+{N7ZxV9M^%Xuuf2N&8*0ez3zYn9M}k zYUtrfKM|hc>_WR^e)xHvQu1|aivCQPQnA|@bRPl*mqvSZu^#n)3=Mkm!AQXGiYMw) zl=LbAdn!P_mMGXw8u>|E0J!-DV%sFsU)o>Gq3-5U42z5pi%|a*p&k~&iHmaM<39HH zm?M8GX1tc89Tw>z#A^WDNbnj6@EoPNk9|Gnh@VW@o=iSHnGijh=v@y`S$S>Y1$v{r zZdFHFjpnu9c5F~K*V|}y=bEHARwXe!!&FK6|1q=sgDZlK@$ah} z|7Y3~{%vDV*qJ|@BINKy&|IIFiAKdebjWIiA~MS6ly{dGqknfPMD!cy&8yMt>6+)$ z6K9=N*InIX8A{h{4i8*I*4_ro%i($D;mPcT^U%dF)=mr+gsAOIs zW4&Isrta7CWVH+8fyvrPE}Y4B5XUFw`#n$|R-DFd7QQyhej%q$ZRE~0zSX|q=ZSuO zwPkx=S9n+vDN9KHfDQ}Vx#Yvd%YBNK;ASZ*;l;L}XB}657!Q)i3^d zF*+D{oyDZ3r^R!pWg164DSa8lyH8s|NIM@Fp(J0_Q&Kwl={)XjUb7#6cH&sBxFvJK zqyfPT8Vp5;%nPE^gGBrTA^n9M2vR~Uc_L@-M;~2~fInE!yn-Lqvw2*}Fj}c42lFz2+;}00 z#-*D3fDcYadg>|facs#jJo$vQlvDBAoULIlu1GWMuo!1I_y?- z$`T4gDd=|pu@5PG9URR@lJ`x>yp)0e3gI&SA!n+0Wgn)wR5UYsa$?gM(;na!u(ej^~vR;+*&C9bu7mr zTbQVNu#4zVV2r%<$27b+>?glDscXowa)vRq3sF3A0U|cKZt|G;MbYWhB~rcGpU{GH%zqxp7uN z?6_6rzurd$w6X#T+P7|fvWqaH>{g#fSq(NWVuW~}AH%i3jd>|f^H^d{qx}hj{$#me z_|G#qPe7y4Ul2su9wdI|GsxnfOcB~&6yMjVq)>66>N_iB1_aCwuqkc8iYb?sLQLrc z;&Fd@Y&_~9BWrFw?at4g{QK!rM&QWv@}%d*`r59RBgcx9TYY2WovWh<;-rAe*(s4# zon@zG+R;QzljWUl=~>DhGkL>>lzV{=p6!d7_lp8Ec0zcPm*ee_f;EIUW&&-@&59&m z{3Y-Q%&wO*w2dhUt~xYFWFUOHo}vmHZk%H-*nFWRN3D(&bA{=2N*!r}O}gbY zbg(nkJn$!6_q0!-C*MR%F&+wb(0lZD=y6bd+t}2O-M|$jI`^lw3kGA!bYFM5ZsMKp ztwX$zuiJu1b`b^$TSamzlM$Vn0Z>ccn#AcoAxqkabf@GS^nHskZ|L`mde(889gIhJ zz8KeGo~#~TP!4In^qdT*TD~26+>4(ax1%2dI+O2+4tX-U_{Wp)J{4o!-~hUZj>ti7 zk&F6^zHcu(r>jX~CV~wti@XDte*2tm+v~yc;_wRwb0&Tg^}Vpp>+&Yp&i+zjaL?@B z{E)WCJ0is)1$*8UeN8r}M@Rr6u<=eSiptG|EK`KBGgJJ6R_-?Z@!tms!@p@D zQgpR3#HW?fGgEM|gr=3or>CR)o#fcrJK(d^|8wzvd}gM9=wknI3UsEap@7xW=yjlS zyYq`#sLU}*y1)sQfPkP$4BuZ;-qj`>l$*YBh(*lE>+NYFcEzfRUT0I+X}+Z2tijFH zbiJO&Oy7`S4pn@)cXL~jAY!nBydI(1IUu4&RvC?NMhTT3Wa5}#TmnZylzRFKjZwd$ zfQn;cHkj7H2Ar-^7L|DcwCKqV|LaDcMB6}j;= zF!6}11IQ08vU=sYkV73+U0q9xV^IfKM--0w#KnNdP!3)b97oL@t-VGR)%l4j$V)a7 zSQk!U2+4;}*mRVNhip3VpRjpl{5MfZ4vRxUMl>2F<%g_qbWcsFBVHj#Y=%B z2A2#>K_C}^k-CQW^)oMjk0hS%X}v|XQiD*GpDzX*gS`|ar4A$-I)SY! zx2$-q9%S`bF*}5qa3ldaWd0u_wQ#T_kYB&%OUpv!P+lMcQ#RIu9N^$OlP?&#lRnMsCLFCGM~TGEy7h7@YWLgM&^p^&Vv~$VCzsVljWT;X|!|n z0cpFCm7(oLEhGFzZ>0+z;aGc>^q^z;dVI0xuq=7PO&g+t4JSi#z=a_-LRuKqXQ)q? zE7>Z_Yc3A&?b+DX_SxFTiD%z~s-`NwTpTo`4N<~n;=}Hj4&qcib+;IlwMk7I2xn*? zs+GO{{`+}U(cZ?Mn6+Cce#=q(&aAaFsS+h5u3V3bp->G+YV6nwxRS6V1Xr}`=vDql zp7Zsh3lpZK8u3GpOkzDxL{owAWf)qc3@}Z6^!5I&p*z_!u2(pX%*4s?E$%IbRzhsA zeF5KrM-=9fxamC39xE2yq%e--Lr~rD;ce_e!a-eFPe&8(wy_$41wkD7*H{9DnE7XK zl5x>=aY0Ezb}ixlYvHLCwY3etDI3tZ3mzl}o$T!cmlvV{Tw8YBaJM3b9Et)#!-1`r z48Nq+onOtFYt}`~@(^3`Vf~O>5F^;Si_cxbUV?by!_ljWH1cK#o85i;uydEleQL`W z8ImK@yRe@mND&z>qzGysV&hCPBw7RZy8YICc&}UUVBvE++jWq$&bzqsw=BVUToJOs zNztM=DD)-##Pe$m*?u8640QNvf7Iie(H}*;6wMM)?Y_^1z!3C zQ4^`1w=}O5%(W;2q16_aq82SjF_dkdLP*w5T^l@{I)RYV=I4`=s8|MtbxBh}| zWmL!|#N=5rFDmE@1S9q&lIxR*mFO#(0%mI+0_tjRi!!E9d_H$i(Hibc`bXh zYovE6R;Mr`D9+};1XNSoo7V(-{b-C}B+KQFXnILxzXFU10cLO2#e+h>47c6Y-JJb= z$LDH;JS9@lJggI=TnYT?E~BhUE*AN~`W%&?dlCnP2f%vaP1bX<{!P*cS=yQ~RM zitk{b@oB|wqrb4o$APP#)vkqulP=8^(@~lFk>%wN)kw>_cOxLnHP+_ih4`bJa$Omr z*jiC<&0Qwc@*d0V@>-)0sZX`A^j8?aawETs$_vO#*#RdEPx6~dMnw2j{4|~65DR$a zSdMm#DGw^IxD1|1h4(^d?TIG#5f*R&YYzFewe_sy2c>e16$>K-bcwvQ?Q4uh)IOd3 zgxNw|R_Lb{E1=Zi-tJcDL$5Z>ppSjlX*4{Y&QzL=JMaj%Bk`4+#)u|cp)7?lRz0@U zLV2@u=W6aC@m_l-m4H! zVzxb@$s|M2p&zce#?MyKFinzL9v~&jwz4I(ujPX7_o)3mm#!;vOo_<0<&)pW>8*^9 zN)$N1T+gM0PD#U15lo_hU?xgAA>=rvHlnHRV|lFDzhU>~8aoQ9H#q3w@#Z8E-Ry#K zGD&Nw`AOr6!uu4MGl@-HOT&`H8Z0#u#_~R9hdOM3mI;(rK1ykV9dcg>$q5PmB3X$Khz)Uj(&avh7!_qN`1rni~vZ5y;j&XK11=EpGK{ zRRC$Tde>UsotUi4R{v*W5_EajoIG*NtH!-u>eEut~bNz{GmL5DG_ zfcQ*IKu|A7x#?(ygiG|y^fFxsL+Q^$P^{3XQ@gJ*NK5&?y2fePgotdve){x@lj(^{ z)Cky|b}vg&v+vF~64&n9sH_SLq`~;JP&`c{kKa!@k38xlBy$HLOOLcF%mi;R7=8dtb|%#MulciT5Ks zxw{3B=y9eWYSV5d`FdS7^!UCRQP7w{_vu1kYT?kn@voW} z$MknudC?FE{Yk4pKRov8U7>5siPHVfwpH_i9Rn28&rQ!2>7gRC;hd#tY`#W}brMtf z@)8p)>z=Frq)ma_6oy&xWOu8Pc;$}z$2IW$jk7p3YEZKdQyb9@|R@?=7LQ^ZIwIc}Y5T zFWWLGrd)5At)^?UuOQMGf1zo@Ak4=X#6UYZGObf2hdH1UFEkO!wR&#n?nD1oUm}IR zD$^i^mRhYPa%8y@UN>LZutI0rZ%=vscRYoVF{viqo> zEI+mP(7oPCxM4;{&E?xyiDvn>-KNT7ddLsL z08{;<7gch2j@X1%y9^kJRGiKB#XvLCkH!Su>pC=7XX?Xb;Pzj4KQh{r8Jj- zHoQq)KLk{HtfO@$tD^xdL)G*(h3aDukfcM`J{yoPOvB9Vnxl6RS;F|`g4~^Yxr_^; z5>L^KgoktH0vK_zf;7jb11y0K{XK7G#TpO8bq9(DW-Z;)mY8B|U>IyfblSI$h<2eC z%H??)miamH zz-M1Txlszfb7MA(NT{YpIV<{M6fKcca#Q3ZRf%D_W%9cAad%%G6-zJ27?F*O#5c}x zDqJNN5oH)3forFx*xFA-KsWSA$)>_*Q?ho|cy!k2xU@7ie`ONB5j$uvBFris%esNZ z&9m?5ejpQ`31?SyD`cmf^Dv8l4l@o}o0Flg8alXDEO0H347K9+EIo{0r{rM$$~Uvf z(Gt5e>y{OPh~>}1%u`eoZG7OhsmCinouw=qT@v9DIgeWt*_g{vZZ>)lN%?j!+G|0< zZEbyr+VM@(ci4WG?V_1!o2yGg)P9u>Ls-LWNN3iG9_D8>JgzG4+QGfV2^dXBuA97! z49VM-1(R4+`LA1=OM{P{9=xo~x5k&}D-pG=o@{3pYDr(0G3|)8#>ypSl<@q#FW{Fe zdd6=2+R=heHN;NtI|q&*r`SzBmQd<}nU)f6%{(V?&!pe_>iD#P-nPm+A9*)+*OBpV zhy)=v*)F6GBbK`QBVDMR20mXYo`x8|Mm`0&kbe(Z+>UtEYDb0GmTmtcvhBx)hBrVu z{aJe;gbf2uSfKvP7cN^0GdTpAqZ5IRe%9BEosTGW4=gR|{uH(^2i_5rCpm{H#-;upPz75+~A&}$W?9e9Abm(YTWgXDM^WgAEJZ2Vl0G@$#+5~=Dn69*K2Jyh+Z4J`D3!@6fW z;iEB*Yh^7XtHrZ!y;Y z6Czf!+MKwqYbuES6 zk2L6;b@x^e$2S%w{UN1xgdls?qiywfOxmY>+-|+afm-JblY5Avx?jV4<$>eg8Mo4% zi;TZ+TC$uxS=Tb|PsF&+WDedNJ2wxL{B+(946UOD2!?u3BOn%q1@A}uM#HM^3|4sB z*!g3tl?nGul(W2W=p5|hNG{iVgQQNvyta=Lft6mhWQ0c-YUNN|oNZoD2k^)6|e%rn}RMPxjS^0 zpO|ZBO^by5=GOW(Mkgv`GUhFpl}5LG`)4L~83y`Br3DqST;K8l#!YSy{QEUbndL_$ zj61(%;VE;e9S0`#TawW=i`~bEtTQ|w(jo8aLBJ{;EmauEO-Bcs9J8vfFnJ3TIea%w6RS zb+jOy*k7$)z1GE*9Y$!51(DKn<9ZWCel%BtgaFFR9B9=riMn&n5<`*=3(@X~aCr=s5X)JG9105xLb&dZAPNPBMd)nfPH*BNdndp2ZSC;z5?hi@-!--d>|I=DSv-OhZzhOgp}%ikK`$u)$pHb>eH1)P>K`)XgiOE-ai zn5INUq(7eIb*RXEe|2hh2I3}j>NCbC%S&{Cz)*L{?VOdcnbSi68iGdQW+I4nx0fN!ED_K-^jqE(0Ev~r3K zWDI2}1LNe!*d2~gwOYRIR!F;!VVO!5%Vzd&90$f)ZpyG4Ee#;CWuJz}p^mYg9ih}~ zPWB@9HH<2hkL1#3XW3MGICl)QwIw}z;6XdJu^dn2f#A{z?63fz%fZ( zz$N(3rVb|fCVc(Ijw}DtFyJ8fjt@EJ^nh;)Y?iAFeM(JOpt?tj)8@ag`S;` zoq>*tosy28l#Y%RaGsR4!GCm$qMfddjiCWxU)29t>tEJ}Fk<>CcN_ryV;)fdS5^O6I1W_!=Q$QSp{`k_EWBm2o>{uG8Xq-W6K+_S6! z8dLlNjPH3=IUkp{9t{b=v^585S5(ntt#gBWpcYOh+VrD8$5|7yhb;ejGz@V z&c*SnWo6Oibzh;)>qSHbr>&s6=W<*|tHWD`Ccx>nLp7IjGd7keRDwv1DG5m20oLPT z)T--5n4Z?@vrY$pj2}@ji5PN!biYjqu~=;6SFzY=k&qgFlceG=Wt?=9O78p8$UK1% z(fv_k7QuLHG?M(Uo2|yk;!7h`R4wh8q>zAzC(!Ld`*)z07_b8bCb1DJnozfzRA3{MW&`*T&*2*q ze&Qf$5An{WVCi860v28HIJNKL*U`Z)!NCh{m0k~~DjgnPzrIchYIZo>JzIL3EUtb& z4rE4gC^Nfzy=(8~nQ^HsNmFp-Xn?D*F{M(lT)AoG#v_;ZQoygBvy0`OS{P~o;gzpu zVthatYFwR>PFSG7T69{)$4(c(1m*-xn^$0^>hnEW>8mL~Opon5?)*w>1h7WG#B!d= z@j}M<_DsRkV`YBBqXlzWiK!5sXsu&9@aA3Zc0h$wKZu^ zj_ZlHpNP8V)>$MMW%;neYnJC895DIQmq2k_Z>?&V*rR(KKw6UYU9V$b@>5lbkV``f zwgC?eH94UL$QD~a(&w@yro!f7X((*^+)jxVw={=|6}Qt5kYy6)7@+iIe#`&^Mj`ew zjFu_kqGc4$*w92n4-?=cb#KH3>OuuMhvz)GjEx*pVTUp=?M~~wC%z1xYUQ6QR<&uZ zzFyMQi|Av-($Tr1=I+^`eGmAVHCY$X^SKSGzbrOUf*zPpqVQ6moI1@8#7|kkf-Hq8 z-Su-_&a~c7SF-8gCmTg;{jTkEysyz9w$k`k{K4ipOKhxgWc3Z|bYopXa@OjvKlf)1J?(6yEmM zxXv-3xnK5VS$P73bFno)5Nv(u$NoeE{?%&qH!M??H#CB#6|*uhbivo4!)Kyn)`F&0 zFm*Hh{S=y31z&?6pAnxPuv6aJ+5xchx4TvT_Z3FgfLFhH#qU>w_!^wTfL%h`I0}x`?i_ zM7R8We25*`bGph9829W(kNZu`xY__$2$wvkup7A3m%q<}>4hr9a0S zpizRl8pwJtWz>~m=JY>LM4eLUp@xJC3WX5zBjtz>cz2+jkV#4+0LNQ%kkmVhm zaRk^oGYc6VFD~!Ik%$-zDHg}eO^7(1K*ryX&mo(RX6w@Lhgo;~B6`XX8|p3&O9+nS zcc_L!5Q?Z9N+pO!2qTwkB9P8bh=>$?C?hA9E_Ed=QvSS87#9~Xv^)pozw59`^w(y4 zdAXS}bhbRhW32CY_#>JVzTF8QnDk$^gKm2c8((`po8OzSeJJ2wYa@+E3jWUx^I*!3 z!-nIM&83+Z7eWS`wSV)!Z>!YnCLvV~eHPE^lHbNBsDG6a)X6jr)Q_I3Ye@DbmQ^M@ zY5ZbBoy8qJFxFc!e`+hEk5GMgXDRelHb0Iu?V3Lh(!*?6d3>OcP&;dxP9ChdUznwr zQa!tlNQPHED;mfktvHVCV$G^O?%zr-tZ+MalZ2>nJM%M`Kk-JHa6+5FqilCA%{GSl zGJ*0dleXQx;PSiq*0zc6`#|qY5_D4YeP3kn&>~Ehhti`*&gEWLK$Z4h*N$o3@gl3< zh^!xUVz<1>4`CBuBUSKGU9fsy%5s0DYRm;*ta Date: Fri, 19 Jun 2026 10:08:57 +0100 Subject: [PATCH 40/81] website: update whitepaper draft --- website/src/credits/whitepaper.pdf | Bin 321343 -> 330067 bytes 1 file changed, 0 insertions(+), 0 deletions(-) diff --git a/website/src/credits/whitepaper.pdf b/website/src/credits/whitepaper.pdf index faf4a42aab4dac9328cee6a2d8a6f684e178c96d..fb278b4b5c85a8f1a44d4c34fdba8758e48a6d9b 100644 GIT binary patch delta 101511 zcmZs>Ly#_Pw5(aSZQHhuUAAr8^_6YgHg?&zxy!cgy8k&hI=TlPk%RTl*6hud`Si`A zE+wHMkt>Qx&@(e|!jR7|kF3Kmrw_D&p@A`Tv2i6Yz)%5>HD%+MC6Ia_Xw$j>rNHLneb`*7KoK#!K;+<7%atI-8V&!(=-JN&f! zf*3!r7Lo!=W5t*Y6-g$=5u({9Q;oS__wn!m3u+D=kqB3Nvzg9HZ9TL@<<}G`R`Udj zSrCjIEU;G)>YR{kdoG4A<$s0=*Ob*6`MjG=>>Ro~ zTo2R!xa4+$OLy}wGWC(H5mH)kyoPD@3S{a~IZA5PhpABR`(x`#D1cuVnhJ3(tJpHU7LE_}0k=p86 zK{AO|!=Vju$%E)@F&Xh9bXVYupZTIMGF1WYTlUxdqO%?D$q~Ez7tt+cF@Sd5++@R2 z43RU6xK^3nQ2RSZwrF{vGgUb?>+&7 zdGE3w-D+h0uXT@+t)&&YG3;m1IMl{&LnV#EtL!|-nj_GU0;IeX_wCeP7AXG2LNmOo z&4tU-fDC(qS$MX+YiArq<9W&b(G+R)H7+4jyz7(;N`w*gAb%oj(QjVk4{=gl4#9>L zi-^X-fCJ$&hYmD?N}E?sp{nR$M?D2BW>WPJe9TlQ@KqzR#oGfWPN zvBGWR&f0jsLc?OxJ(8&a8)gnqZ1G3@bN5h=Yo(c6^WFF>2bH<-qzHN4I(kxg$mMt& zr#7}`PC-RsY3tT+HfQSEIk~8UDum5wVpA!lt5T3Yy}`i{(u&fm${W~_3l|PxCnK~} z{Ht0f{Ij$2qj~Jm)Ey{OkF65(y(ik<#C})CbB5T8>#6lug_tUgFd)SyW({}8^zS0s zUfE(?*Y}a}dM>OSzg7hc*V5}s9r0!WWc`UvL$k&5KU$h7Au?EHzf;beC90D9Q{Faf z)$=Xj`UEX`Wm66{>0o6~lOSXOXE?t&dy=3cc;psj!V=4V=YHqE00|Za;Y55i5zFeI z)gAchU47=jd8zV6iSoU--e+ZA058OLmUsg4mdA9YtjL;>B^p?{2z|R4%FtOx->wea z6cnreAy%Ok1F*X?iq^&gV+F>3k?R?S`A{bC-tQ9nP?JsR4!moP%W5=$>&?>nx#LuO zu5ch!XOmT*rrk{sSH57iZi~B2H2Ha7>o0p@nWpp>*!&pIefR#W-WrH}O3<53GZw=M zDEOSmvu<4kjGPBuSfh)+Kvs+L7*nEiu$|YfoGD1WFB)hXqvXY^fphxY){j@gB()1O zN+M=)v>p&+GGe2pCLIw#-}E9ElnxMESFH<4z|O?lJ$UuN+dThdx)+dZcCT|kR@dS- z#~Kk2++$1C?ShHMmD@f*cxS{k!$m#Eb(ROJ1AEzlCAMYq$Csr{HsebL{E>EEnOp92 zMk3PC@$2lAT4`8`;1mRLwEVGjJ*4AL0l#voYBV%b5CNnEd0{GmYNA%`Byu@0CwoVv zjwz8P3*t`fRNoWqK%9>JPZ6GA@t7I2B~3d7|EoVGCiiRhTeR2NS92v9+dBQ)7rK0Z z(i&ewQqN1x$b<2n51a)loU$F5FL>FWxv{EET~H;M0CFskTUt)8+rsMe`qJOf8?VR_ z*rcd3^#MB^K64^~$q!^nZvGYa5-NW0WCc^y2lPjQjR+NfPSf$ z7uXD#ubY2JSovT%5TG~Cbqu@ffRts{rwfPRiK8utNN5SbS0liCSN>*(hL-i@Y7yc3 z#@hf+p%)|!#9$+wF`;qPm496L%#r~%(4Q!GFEC}Wj&D4Tmkaz@T<*0UDkpyTwew~b z@kK9e#yLk);11>}HDlRlO|8b9>Jvjs&iCwHsC*Cmxa<3~U|PFK?oyf^tm%aGm=I60 z+@`-T5LfB&e%f>j8@)d$k|-;ha7gk1BuIuPPjlxIdtBO2_)83Iw&$rHV`gva;_7T>WcNRlgRwOXGdC9z6Vd-ne0(sB zf6VMHTrG)MSedy0@1Lt>=d#s`{BvVac%FV|KFzx8mE+%(OJ#?;SyjrBnfMG$Qb;<= z7X&OlG5Iv+u{++CEN_2lu1!ra6EO^;2{Lyh(AD3=C6yg7o@!FDEKZZnjy9_99#U-Bs83D4vFA(jfh&Bec93f8#Gu8APf z>Ha#|dka6LK*@Sne>LA`5xA{Obo$%H@nODys`Vx%2l(ytM+=a_@(l|q$_&}rgb1dB z3p%ioyx#kPF{BG*X^%e;)7p)zGD_#eX2dP9EvcLLaSED1$L4IwhOPFF5_CEeZN0l4Eep zA^>K@vi}@)|0#96W4OWYlb&?ci|R@^7z~QF84v*8bkFUo1gTSfK-Pr0%;J8dhLWdZT!JAh-!b?2cjxPKOGq zjunozyfIBK`inXhk~e|R@kzP_jcc2V^N+v|2{NL5DoN&?_^*}HvyUO>;GIhw!$i(m zAt2BAv~y$PVFP(PCH&y_*!#L5W=(Ux-b^UzRDn{Q-*G=_+A7z0jHP38;$sd^XG5=2 z`PC<4&x~Lj9bp!TfqYj^t;?ul1ALo2Y-c4T$3!~qD1O1}X3?3Y+<}|$7Cme%R@~KI zsCQCB;fLyhJYu`YC9HXi1^DZWD)2PQ37~sF@;If=-qv&e-kYfe#^?n}MksmZH2-y3 z;RDBjg;5IqC;G(YxNg?CbJ~8&{E8XN3CTB0fbgz>>WJNZKnbesPgBGiRq+>Ah}W=5 zB&N`zmfVQuMQ)bd+F5?by*gqv*OUDn;g05<^^jR&SxFjZM!EAQ!)sUjt*og@1>idj zpmR@9R>7rN7V3G-_T4}7#f?SvgtQNq2Sb>+W>=r&cP@0+SiN?9HXR`Edubq@g-_jg z&>nl^(^5tQn@vxL?mPpJP_E;Hwv$nqW9iL7ZmsjSJeywNVYxow~PjerVHM@(a^4$H4N^+ZynCe8!~kh|~}L+uq~ zj#6H6i_L6ehq3;`1~-VvJVh@I5g0Q!8W`OD$}roN zc4)3LX*$!_n`uw38kzi!^Th_hiG@3OOgEO)hW=}ccE6*9l zG5^R&Mulrl?j0Zqm55M$$Gx`R^_hLOhPZ0vNUp@!XnLThS7ArF>Yw28&@omv6wVuXN2=9Cqb7ey^&=Jzp{* z4*J(Eu65MI3HDUf6VS5cg~cmVPK`mF5QyxJF}Tot5&?}Qh=VhUq1cMq`^Y&vw097X z)mY6v?L7CyUulp_@PfM^$uin*O(anJUQXls;5ib|&7VwPjKyZNtcj8;5pn8CI z=b`RAH9jqGB&2GXFPbtQk>qn2?`QNNt>N$Bze3kx>n`6<=z}3YRKEp<&SexLM>AAg zO!$aPB5^Ri;;WpaFvYbI!4fb{SW};Q(4g13X+OW1BGw-3Rjc!^%Q`@o6|sDiz9?nk z^`E&b>~a!79S8FhIP@v!WF*bw^F}afEN1`NMM=<80Q1GX@D?A%X@ke zoy-j3*Jbdez=^|j9c!=}_Q2kF*tS1FW`aO+8TR>qc95(;TvZj=1y`))8lx6AZ1zk@ zHbEQTo*p)%68I2=VUlzY81y=I6@fc%&qp7mqyIS$s=Dp>*Tx&gSCAh_ zh8sW2SIaD?&%QuLnn&lpt?)j8Nxk7+LJ!CxXg7P5VxidWDw&z%FEQreMtx7R(-hPJ z4O+P^5!Trq(t)}jz^WrsDK8jN)xC-G?}&(IlE7NA^E^wmu&R*11t%xs(IjPOB{9zS zX=LLW1GHhD3@@j24o$3L(Hb`|?@*M@r}KbsbNI$VjW%?JAPU#R0`>}(GZoFi<)-OX zMZmb#T&Zl1ttgu`f>Za&J7fanr9wo8N)*_KO3;H$n)&`32q2E!e?Jh0c4g-N5k~MD z$~}Dt@2dfSI0u?huAwZ?S1Fr@5*w_JIB>*1M!!!q=ohx;DHdOUzUpeW_ytS(QNl`3 z90o&8rc0wlWM%q)EfWjt|BWenwDnvzTT%Sh>ibPT6{Fs?fmkzV*QImavp70h9UL6+ z1=pL5tJ6wj$SCi>pI_->1Hz;tU1?WXDX361bGG@rG!s&a(A3YA6A~mMiAr2V(nP>> ztP9a`NL{I%M6t|5p9U|8QqWd21C<98k=t*Wgc6}jM>UcEnirw~K*|BiIDaLij%5p( z14q#|V67JL+e%ja1I|lT^s)XNK&=5!92NnCA*y0L1dVhjVDf2C)22co{B5`FQJka^ zMyd4xRTjaHp^RQFCIae6g>J9$x1yTSf?XlljSEc zk=s&C1)x$*0mVEp;gez2z70c}@a+ak)*PT>#R6#@ggYrCl9h4l4<+2eG2KHC1PoIO zYvw5q3aU4|+&O3=LnCSp`R$R|faLdY4u^#&)4eP)fjN>#{TnH>?9`hyI@Vh#5R zg67EI_VN6s8|FF!P}`Th;Bis9;%Z@rf>U9Va_=08!+iGPyZRy8k$aQCet8H+;!H85 zD$ry`eA`GIB@+P10^myAY$EJtNUZ@F}trfyf`pesR;P$jfv#&r~4agCTMM+6w^7W>uT@(x({?pIo@i`*GG; zISc_M_@(|-$SKJ)q1rc(P$hi9sPr@o=N?O=MH1gVx)%TI%Fd~E zv`wwuT8#H*QwQwtNah)KRxOUOf5uZL<%+|SRxUt?0^XglM87y^SVv^SPN(l?vCw=w zd3qh{bt6o}YwbGE$<9=8Iv0=);+?30Ca3N|^y!orwpNqx_N`FAL8($87i#b*Qk-?# zrQ2r48(;x8DBamKZPB@D{D$W(OZJoDVt8$v7!{KJB6iQhNN)d-Vqo&M2-N~87uKNH zzW|iV%VzvCDxHyWpAaP;oJzC;3^sVC=$tv#C#3`wuV{GJYkyXqpQ$-_%9r~(Uph8P zYQ-;{^h;h^>NYB-{XQoj8MeEoqpPDBhb&G;IlbC-*UHX8{chiX&t1JYNtouU%e|rV z+%F3^x87X_pXb|L-|6Ryi_?U@H=e2DzW`kuGJbolOec0hPkQyK*JQg?HLX|34;?z) zcW^zsWNd^F-lxR5az3KWxEK+izU7(dkri zCt4=UfVCXlVf*!AKWW+i5})*WpN0B-R$U5Eh6nODhF#KE5>7kC0~3NR&hNFKR=`7b zUCAml2M4Je0q$#Mx3;EN(%4%O^W4U&eX5Vu@>!o(<7I1u)s(wUq-&lC#gyHluikqC zBR?Qj2@?9-&Hm=nLO^7)MHP3o%!}Xh1s47Z}g zyWr7ynxAc-hi68_FwNWYGQ*O zF6Wd+^{Pc8{DQ?7STEX`u_v2WZu1i+BgD{Bc)SU-uZI&q0i40CMfJUH3tAG|D;`|@ z*wp*CF`K@+!bG)fUrap(X80rHLCr9Dl1zKSEF@B6zotLw3N4Ds)7T~!%zx;UY zJDz@Ib!2sngRiwUrZ%QFsy5Cp#iE$+lj_ztp;C255G!xXpss4yfuebH;LfqP9fy(T z?D+j|Y+qq0-JIdIE>kTtpy{x`jCK`7M8fqb)maG;_-Z1;RDQ7As_lq z2ZK)qzo$eZ7$aXFG~Hharj)Wt57K|ZaxsiDh}kKvcPP4zg^moaq6=M=kxikZ?KF(A zQ}tRcp=zzprmsY%P~d&JhZFB3#Yu(?c9KT!@q?Lz(s8)(w^GEyY5*1cIYRf-EumEg zvc9>OLZSoCBp9WwOra|R5Qy_$qKW#meFT3iT%-y9gew8Vk}?r*1LDRnjY((pzi(IX-p2d`&XZg}wzHy!EA#I- zMRL`%xVK=qrpB^<8~}CX0ir(D_y}PX;H}=HT_-{?VmC{$?g2@_w=E-HezXArCP_om z*pug{N!ws`jW%@;H&v#fPrGtmGx7gQu|`U_M(F>Mr7qs>fhXqJC)dtc)aZYb^b(kS zRLYBg@J%@_<|8}~rD7EGBA$d*(vNru+6IW49W~5?{nU}YiEt~%9cnuq*KB&hsq}x0 z5bh<2c!NhRqLF9TVYzqxu|*M&09G4+AEcFUVuGte5vepiK3QIU$uepSfU-i(SzdIs z6N!rwT1JiE040EBM^`tt;d(|L(2#i^F7}wiPkF#Af=UiTVhKrF#lAS175Fo>2`BgC zKQl-M7Yjr0$GB9{qX;>YR4L#X?D+#FTUh7TN?E{T~sPRC&r0eymx!IAN_@;?V=KJV)yjl9Dh>Y>j z^ZDJsC*1v_|F<)82?*cz#xyzkuuq-m@ghO}_3o2d(qoGW=B#5^Xz`OxvBghq#qadz z>RhU73ohP&5%?#e|E6=f;4|7+_e(Vl!LKdlO&NTn#d9MN_eFGl18(H3lZduI`f9{=(mvO4zw;YY(e**f61>okeJ*3!fqGwFS~|@hPqD!EKh09H z`=u|oM><$Kv)0@6@Fx4Wmt1`{R6E5-;3Lah*2Ony7FFRw5-l9@Sy$&3YT-Rir!TqV zE0$h2es~Do2hckDdpp+q{oeSw*)gL+NU_Zo_PT z-0qN`K6Pwww^k>^^Q(FPX#V7%{&A0w&$h}rX6b-f67!ACpR~K+S-2*KUn1Qd3pa-o zsjpyMs&)W%L08k9b}3L3&Zt1l2Dg)-U?zC)vbKb`3V1@>#2g@6Jd=hfbz!MXTJ61D z7(ZLz_iex+hX~}0pa%s%2-nM_97t&Ad*Y?`$Vzxd7+PN!mJp*L3db$n-qfaZNDv4+Nz7#X4wRrP})i#ZGy^C!eWArQpBq{UeJ(5_-%32c@Cp-jR2omdyj~yFdkU%$4G|{$r8{BjgUSXZRqn8 zHf|r=7T0|Z{TPb~Ypr;dvPS)o+vf1>nBZ_RHnR0`TJXahnE6AwnI=?&jJ^#&niKNk zbJ;KyE!`?Z+53iF{r_FZ0mtX03d(5Y0*2jb>pQpaeH_}FCmfL3p?D#IL`WjusK~_A zu0hEA*IR1oo$iURsskZgC_l|I25{;YUgU!jNFKJkvY4)}>6wvJqUu!c7FQJ)UFm85 zFiV?UXj6Ueq&)mgcVJd&kI3)F9I+*w!FYcfNQn$&sZ%cbXmlpaAhFilx*}aL0cOoR zOjaPD@BL}3X2dGcDqfl);DUS3JK|c~xZpBJx`oo3KyeCq`-6;U!oWWW3TA)~-NaTc z_=A1y*8Sie`7z?yWU+u)8a+Rt=R(V#7x&VOcBB3jk~#RSV&jG32g1iW1zVO@bdKrk z)rtvM1?7iu_ZM^g(ttD5p4c-29A zPRnqy^M*$?iHS#7VQg3>$6ODTFj+PbIoo&57ye4Q4S>S7Q!7IZ(V3_GIp^NX_94v> zHzhTa8e5wPO0{6D%_)=r@$puB-qoTDBzV+ZgN1H|Ro$>HHpqQ##Y6yM1gwRK9~us) z^F~QeHZcN=C+16hPHeMA)uR_2QoVmP0i1L%vc02z;8wX{x%-3RZJT673uGiW;#(3d zru1)wjVjn@h=yO!!*9tpyhE0G0x1tZFgwfmV;~~@S$(&XJBdpR%&1TUYwMDH%e_V+ z0uk==rE?YiqnBcw2DJA;08$Nl4MbS?(#uvWZ<7%l0Dafm*L?wcEu9*g z={e7G19=klkw63}3w(1@?8+i0{^KM^3o1ng0fkmUT1TL*bsC?E4>b6nD*o1&p%cqd ztkgRbn`-zhXxJJ*Hu(yqx95Hbh)JQN+2MMf9o>s)&lXw)kw={g28bf;C<1xjE=1KH zr4R1KR7KYl?NEty0B|B)ktob`aF61_5s~AZDZ_D{f30q0X?%blywKo{%O}Cjx!A@z&ZRe zqUUYrT5>Ip0LZ{pGpb|c8>HS5LC2=>wugq( zkcm+(+N9|7cTG-?i&sWL8xOaTf{X;lctOQZDrW4n$*LPvU{Wp?NXrZ02RfdPj}DYW zQ`7U*_&eBl3RiNM;CexR=%M9Tgiq%D74esVele9U0Bp{c@_Si<;=5t<+**;zqQq<> z{UP{6Ka)Tu;_RsBRRkeqQuL_F(I0l@M~xhsCj4O3t&ci*{`lU^kKS{N`f~W|$8deqZ$D#dPEBd$A5aZ%R@Q<5NG4ImjHg=o-$go1kC=GJT8Y^JfB!*)#U3}=iHTW+G^@{{kx z9-0f5F@a%ibdDd$3Fn z3qYETOV*&qChdeOP0>A|u4}W!#C-q)Bnd@}N2h7PR7!DCj!r4d%mw>Yxs5rZ%|>`t zEstTG0iM0k`ob4gyZOt|gTh_@8w#4>QaF@ef^4oEtd?u%7VBG3R%_9`WD-^6$vo?>(#kg{D{yqw(} z5!z}rr%f=IrwPhnSV9>;sP}H48diyzrIJmp+IeI5mpr3`RBuDu;cA~@#mWtM2iFqr zBSpyc9ci|oW0$+EV}IPy3{@dF0RY-(t$Q`p=aaF?g^;MmW0UKk=uPtaKA7eSUZiXr zu=X!ljF%YR$eoD$J%O2Bh$TzsVZAO>g+bs&8 zyR*ztW1U5W`x_gz1Xnq)Ax+3EU$Wv+s`5&ai3q9LzSQ=AA#(*w37QdB0K_JFs$FAC zn6lNbhC_E`d4{>ht*e_$MSz=h7rryiU03OV zOiDr&5aX)O0AksiDP182cx}uVoj_1Io#Pw~Ufv_xi70WUtc!yT(@#iYB)+3=@2y z8{s(=2-{zR_JESeajAmWP*?Sv(J_|JY=06Yy7YsmtLiS1_}Z7 zadDlA?t9w{VaruG!f8VTCC2gYPWtT1s?Fr-u8hWtC?!tXytnZss_jhao0U|nF&u3w zGug!uXW!ShHkO_g(uu#{tGTZ9dY**l+_IQB(5#(Eb{tUe#-7?XZbw? z3)X8_FHcr)!z-()`IcHK4Roc#tI`%IpyI#0ti7&7bBn~VfAOUqJAKJRPNhABIG^S5 zE1T#ylUQWOB1uGX%Ew|}0$T9^uMD)C)ZcXfl5-STkuzT1=y=h$k(Q0MfTC%lqosY80c~2qVFobMhqBZ0oE{gyk zK!1eQNwOC99{d85O<~w|UV1cUaAvq$a(Sga4aWhTge-S1&0vAK z46q84GS^}`LXX>oe}&*x5^3Ou+b$vmlxPHq2ANT!{6yGw$IUB%O>A5(B90m7T-=@P zrW$Eo=-h|eeiSdEk0k_iEDlP!x?Y_gG@NcyA!w)&0|xVPlm|{YpJ0 zfd{$#)&1K8FWmPZTRw~R28q(Cre=6z6=W=C5Q}};tTRhJyL>z~+}o@As9mHDx^=Z= z{S_Tjs|q72riq=?0aehA1B)Dk?DuigKVK~p4^cUrH<;y1?CfWp)f%o) zG#v5s&IBSorG6mHZ_|HOEa~qVc-ovdVhFMkK%h{?KA02$ZMbtBe1C$@XrydoE^Oko zc^ud4xCO_8pGaO~p7O9x10+$W58A~X zhK;dAA&`w6`HmKpUZm~$($bEg@j{eSO{jZL>#W4u_wot3K}kEc&ur(-*QfLuS@em6 zYw{`NA`gUyBMZHksdFR#Oo(&4s&9I<_v5OvxDrnT7F=bVvOr;QJ+}e$DepM6 z7BVuPx-IrQ8Of(P-E8e-T33w)e-*nnY@r;$HYgJ`^AzcAtP>>^UmhQJCcS4&S{IHq zbjW_=R;nucn=AEckjBE<$^G1q)OUOF6Jvwy9%B3FIO` zUffTNwhA|v3P>QikEvfQu^9?w>dADf@Ftbmh_)CKKL!X4rHv5u!p;!Jevc~xlPhdJ zL`dt1gMDk)6y;Q>qg zu3YwBgp%cS!6cju?nd+VDHXcZH`_ubgt5M(rW-=^rQaZ`#$ZxGA;T|COsD|>#Tt36 z74hj5LEK-E{Hd*ncIt02kBNC+gg-DZXdM|jv%R_*_e`Rew--|!h61gEy1)j9qIQ)p z->iVOvM(9NJ=9yhYaVoFv-t=T?H}8zYFalS3#?dopD+Ss#)KaGk?(x8D?KmNlwOGP zsKE_AQ;bC2jC}m6sx_*sIZOkrtPKk^DzopLh2MvW5bpb|Da~Am`X!H-Wbzo$^N=RY zSCnapEniNDuL)mwLD$1}ourYy|x#NXO}{g)?s(=j<#gSr7t(Cv@}W9evf z0kePxZ6FhCn)4(&3F@tS5iF}?Ed>^>w$m!x-{B?jy`etF-H>)~>;lUM1w}1~4E!10 z={TMs?&W|mIN@0LeR+k)F1WtBKwS>9AM0J$n&&#mzxdz~maclO%u|~=GPx4Xybz*T z9ej#cx*!B2oI#qBgBgGU!{w;p5Saj_&F1Lzp$$`J;JfF`oYbePCN<CMemz8q;1J>bEXB_)mxblO&%u@T+ za}0Uq&}6#pafJv?&?gE>(FU@;_dNcz*AQ@JW3@J(?a5c$y$|HbuL=HAGf(=(;y^ds{e&I>prk*?Skqke3pKW6ZoAs`294& zp}%VFF8ryc2yt)HowYRxG}4}qMDfjE{_z_dR-bc8;__eRAyZQ08ya-;?0ubWImt({ zi9WNMM01YZGNeGD@?AleMw$p~{#Q>E&x|}OyEde^KF$E^V%FWbku#1=N~z%l_uAmg zvGm#;{D?6GVr)|>FRH_oq&MmqoL5a^RVTnz07hYd9#BC3Vhy_fiN?KF4Cr8QN<#B8 z-=Ib6{AF0q*q%-Y3(8n0zjfHK?I}TrmpknyMryZ|a#A~ftZo^8R|xkk7@-XDPWR;$ z6Y<}#d`iF%Ho0QX@{{I1#?>h+b?&4oH6k5tj1)>+#lkXg9oNK%cyr^)J=^NVD~S<2 z>A1jA{>0vmph(thS8exM4`%O!AK)?9ZaC1_V^#1!Ara$^e2x2%xFJ1aPn{;2sfzLz}Pb<{NSRG#lah46}q>Qp7oSI z6|(Of!U0plqSQa^t!s0F@x7C=YVX+*C6Zo!bY9bHT{WF|T%8}!3kv`IyF=`m1%{(w zx;0@{TKVXa;HMVm3b{k3XIovJ zlkcb1=CTsU>uLtg{@3MoPVO)Cp=o+4IiV4s+iYBW%}#zyGZ4aptagyYVBiJ8(@e=@2Oi9tHCjAH-?4!y4O5$v@JR zP6Q|H=jnj?VOg;xY?H<-SaA&Chm7q?X7xULsc%olx>~$*UJC@DqSjE7C8e1Yzw z4r-fSP76p4`ph+|JQ2_?3&?bG3vx>Qb5?0=_ zPF>C~dCi)BJwX0l&f}tM<1gF?z~RBdm})5#2ZsH#Affkl(=72KYB#D^O6}3$;kRvO zFlR*YDc5NYK9Im`xppl9R?hG$+Eoz-BupD-W}~v-l?M^!W*S1@SmsJ--FBS=%SNJ^ z5lP-jrvq#o5O*+178t5AYk+N>1HmvWWd#w0Bbydt z$h>F%6P6*BPK;*lq|)AiKsXeNBa=fY8m5POEe~Q|h<(UFqLkTLcmQ2-Q#gzvu(qrW zBJJcl7*qUx6o?f2&=FB_DbNi%77HJc?}>`THk`N+cj~2V(y;2?#Q4!D!L;R^d0SZK z{H9{19>%Fba1Q6qP7tkOz7Y(^{HeV)GBYU-r=0J7c_Z);0xN%9G#p}JEKH~nW84Wu zXOk^q_W)D`c-WSJEFi69w$jGh{(QAu>&%fNFb2}pu&^v&*AtZ+-5;mg{kO7M|}8J?=ixV zgMPJ+F5d7kN2C$H(idx6Eb<3paf<3tB3uJhxM-h<_fHW?N5J};iLPl1fRBb79R(}T?F}a1Pwm@>vt047smU|H zx_}K+q#1Kjtu-5+_9Ivw+`2JnutA(86?}h*!`t5oHNc(2pW_1|@XU2QDrg!gwm2l^ z`UHSU>R{SQrEzn*d}6WE52b&pF-K+8S6n5}Vte(T*5H}W`!C`l zk0IJp0Du5^hbP0yHil7+(>Dt=2w*TOnkg$IL6{;wuSf#NR}h+#hL^^rbJGEC4sQG^ z|9H(|;OK}ICL=Bl+Z{pwClf+rQ2Ao>aGYRpsm| zDm9;7NM~n+Nv}ZU`aS`wP-FfOEz5D?6zus|mAkj#m=6WTabDkOadbMTD;n4zMmHazQW8-P!8n7ODg<4r!3}h_FkA2*Z zSJ!;Y3qE-+(mZv2288hZtF5146-i*29oddT5P)Znp^I9lgR*r6gtJN}`I*gZQ>UGU z0E1wKLP0>IgvUo*EO|^Chq~R0aCBr+1vMP;7}eOV9m7LZb~5M#IdF9XnOeY5w{FEc zzuyCHr`c*U5w}3txr+u(M3QJ>`^%rvxJrSrw163BF$>OE%rKzP_*Dr#$Q*ptxY_WM)PIm!2wx4C({u$@k)};`=tn4Qoufkl)_*ZujEou z2fs$aqD#kTjvYP^S>GZ#>3z(Pn5v@p*?h}KFn8aUo4UscLIEK>iev^DH5OI^< zVZ)K}l>-QhP~w?na1M<8)1TDhgki1b15;Uwza@e3?hSBS zF+vL``g0OJ#U9=ye(E4boW5g|# z+NpK^y*0reNxWs_IP8lT!57!W<8?oeJS=H5nDTHf+Ers{gyF3flkyH zd~gWUS2)PQ+AjO_x%|92y!^T0DzLP>y9)~MTO>C(-=&cQuLQ?xpkG3mL5c_yXkx2W z>zuIG=xn8{OXC-G(|rl}e;pbyTRLzT7%C_WH_QLRFtu88{{zGH+}3AoD)-BraE`p0 z@-im?O@Q2k39NG~8rv*uMy32annh?3+liuI1?qp~SHDcWXx z!H_Q3jX0XdGyf_+-18ojRf$6xw7R};>%HQ{QFXK!n_-WN34Ey#WUU=h*{DnBW^hH= zs?;>Ks4QQ6Ev2G7I`H_9fO$cyincniol_DZ8ZMNaAfL9r|KBoUUWzR=-0F6l@X7-7 z%9i)aR&PQAGm?jJZ$4!d*Y5bAq#rr77GHR85(CJ%RSY!z3kkhlR~(x;ao_jTYau&v z9=Hsgla#4s(t8jt;?Ut5@FcwM^c>Wb+lcZTv{qlXx&L8)ANEdUjeIGbA}umuEUJJe zJjKizA&sTYA+9~VPIczLVwbB1%6PX;RKKhV-))sM$2^)@M%m)sfS))!563dh@dpT^ z+V<2qB_GsosPm{-PD8z`38o4_migc94gc0>O?Ks5i)LBBFbyb*?uWC19%ykP&DkWR zRMSLb)@{ayOblTUbk*k-re`76)-b?}joIaI;h=AaHqLCd#A73`$2XCkfjF6G8IQVy zyq<$PJ2FwLjc2kzOcEP~&{>k*Sg3Z1!ST?#*uWC#BvUR32QoPP;qk;-MIq@lrV?|P zSNY+})0Za)zbcN1722ONO6{Y~mW}eF!oO-6E?EjQA<3!RYN&D_pCt2-TBv~4TRY%k z*XFEW%qziG_(bI_@&Q)hnj2c8H*7%=e(MTH3o6|)QImLw0^az?J&VF1XC96N!9y|U z=3iw$;mq+KRnE~r;HjZS4?Rnv=~Er^jo#iDoY-e^{(1dKm%U_+6HyItBb}3W?O6*yHsE6rMno$ z-9cdVHtCa`KySgJYZ^5l{oWUAhQmaDh<-N?%z;!~n%hh%|5i7<5Ea4)y$oR4e+;m! z3-45MEGa$I3$LxM2L+-!v&9%f05b9N*HTnsBB|A(!2 z><+9Aw=QGbb}F`Q+jdf^*v5`++qP{R6<2J#VpKn;Pmk{Y@Q$&6!v3(vy62h~F7|)L zx)8(DO@+aaqOvy&X(K`ZzdUXVSqeB3-DtLylmZ;1|ccygXDG@)yH1RPwNm{mJN7v+eU3Ia8 z^EzeHx&jMS19o~6tj;P6@V+xA(;_hwThIarNSNmmIEXYNnJ#6r(bO-UNRH>O#$J1R znqyYP+qf(TtdVN6$fn=W=LV4tH@dgWXatYz%c?!2ChDE)!R>$*DvXJeE|S?T6pcI8 zTiq4SJtG=iO<0DSwo_ENFaoIn7XaysWfqvBM8~ z({$XAjx~{AyXZi$>2^0qyHxY|$F`uX#e063H4f?wC8??MyQDKe3d&196aya0AbuYc z95zopvr(2*fm#j9=!RP%?Vv2t>;XsZ{3Bvw%hNW_6!F!{d*&*_cWP)7aW zp!uvC{dnLKgA$FT+HuhJ8|ICYuqCnSO_k7(?-U13ASroL3#%p9h>DI5M>zYX{KUo;Y*G>d!rsZLB-?&1WWeYOO@G@G^<*AHUi5K!o$>FSq^V zbKNu=rWQaPYiYL9yt&E5(K2aPa8`1|SXNgB1U(4QR2%E5+0!M<Sw=yj1?uq+fw9 z*4!}!Ilc#hXoqwW*uy727QxckxHRvY90nvSJugu=Yiw#*7IUyy zumFmXYdi9dA`C_K4=Re%VC7N+w)msY9id8tI+ea6b?$fK@!{xXYf|-+B!Ry}=ua)H zpy~s~;IMQFwQ3WFKQ%}ghjd5+@bVQ&6CF_*=OyvH8615_k}{k3dBFo!ODe|^`-BG# z3Bi;Y<;Q$kwHPP*sw87w+sCWwMU>Q1{sF6Is(6c|Mj&ycOZX$up`v)lkDH_q67rxl z1To2T2Z+x5d-RUjtmuT+>cpOqUmpPGHU`a(O9-yg?!1K&58@#RYte4vXTKt;OSJ+Fy!FWuS*V+f z{{~rXU2+w&K=UO2(R2Z)58?6&9iRlyn_pteE^Vl%PE8|vLMY`QJ)l$5lfOH7tq@g0 z+DsL%&Iw6VFR>9>k~Jr{*?Jq20IL)m@%PW9OLyn7aBs+*eh#FgKm3{A%C?*EYWsX} zK6O1dT``f56;<~N>2^g`!8eD(YRkwW{oed=IQ5@Y9juRl{;g3J`rKv%QQ$7p)L5PM zx?~~G021lQm{T_7Vz8Ej$k^*qnX;@YyD`EEa+9m zRb&XOlw21GYsM6=HI;U~6z&YW}3LAh(&0T`X;tThTvc+t0-v)Xs9*L9%so=JjGwTJ5Q2P%TFH7H}^c;QZq>G z#860j4hy+ayx!8E08!!DpML%Do67nGiJZ)Aw(sPqA(1b>`Ey-w!UKfdP%k#9^m6Tc zVw(PS$LIQat;mOt&!sWJY1%xS|AO3?krPyWu(fd=Z>G@W4X8F-I86U%$y6iC@Od7IgUr3t-=mLw0?6+w{J807x=n@vADfcx(r%b7K{s^%E{fg4QE zuW=5Q%T^0T&@4O5$o7Sjh!U!Y`4H4}>T=QXG>P;!O)zTp^G<^lNl zzVNXWMCHS!C;d0Y!(#bA7!0^L(-W@2X#WE<{wJUJ{ZBqu9*{oKQ}u1);@ksK#M%M1 zHO>`_wv~x3lxE1z*^qfSR9i9PAjU&Vie5J`_^NupSb4v{ANCL$@9w7Fx*GO#eevws z9P`+8?1xpmNcAuR(@3v&Yubj~)+ttDf1)k(uZ}`WxwKY**fx~66tTLvz^v5-@?)-D zt1U9aGTTRLy2>zb>IPp%T~C`ddfun42_dsrc*!3Q8(dbj4eF}LuE*&nk^Dxhd*jMC zpkfW`zu#WlyYK7?DYNOf4|xrCf1BP54vu#0GmgdTdaP$*JLKQg#WxFQutvO)RD-GHTMHv8=e2?6A$f0yx1nbdi%lYA40D;Rrqq zuDGfMtQ7U9-^XeX?aX$-VAy`jY>2K^C^L84X2SMvq4x29$s*q60V z$$xZy*RVwq#7>b;Prh}o1rN^XAn=ObD}j{wnQp()hf{5d4yRG9^ivw$2^WC|;jd=< z3l>FKS6{;cv-{QMZ(Q>%2qC|2JWmQdlKW#a!8~a42rGXT8W&QaE)?JEYYdcG#8@zQ zLQyX{sZvHFj+GjF>|NMQf;-3y=MnwPlb#g8n~9n327klNbq4k4s9&rr8;a* zOXY2hna~3mzzaj$k8wm8C~)bu`Z{tdm*>kCw80kzx)c<#6xu3n3>y0X<8)kc=U(@8=JE(ZIO%L z0m2U|hpVjzPI&*LtwgcODE~Ze1IOBCXZsu+e`+|p>m|#J2kRU++BwO7>}DtR+l=Mq?;FKn+Eu7nCHbrxHrINmPuJ1voU^FhP@TEn z=3l^$)RtRqhQ{8*Flag71WVLO#uL9GGo&S@Hp@pEJc${n%-5EYJ_0_!r9O5ZY%5_t zy@Rb6;Tkvba^r{29sV2C9>u<^ZRptyVJF@E=)sk1$Ehi#i@G7a^`bUoms;rs#frv+ zb5@@i@wZhH8gT6fKjDn*CHvp=^HF;}mkv;ye*ofxeVpx=G(Ud_ZkJ{G{VXw6Pe{$vPA)xRuhG#7$4l_gm z;=&jDgK19g#L97b8|6o(&yUbV7dI|LrTQF&s!4YIhAD*-{wo`9fz43Z(o@A*Ts;7! zB&Z-g^2yOGWw;mN>jBnCBaLB`nb&{Vq$v0GV93HKCugGQAYH0^NGDq}_w#Snxw&1? zqvR3QTL>^s>ZCI{0+p7imdT0s9@nN0n%Gn77EcQ6^?jO9 zPvWMI=`JSWhP7^!Zf(Y@Fs>zd`fB7m!?2}(t&XSlLY6~ttZWk4mt_z776eArKx>EN zfOKwyu{zT|H_6GH6MvBG>fekI^TQFv+xP^H$mnt*=;WOVuH#Z5NgovzPa6WA9hSj2 zG5eOyQT&&uMnWc@2^Bqbf8FnLJk=&B$(C?zg1)@{-r-47Z6o4M?b;@XFg*4g6JjlV zSiAXODE~+@8_zXJA25nw-~i0YkK@0bwYwRLrrGu2ffaXF=E|CV&f z@|+s@9+>=~?fA>J$NRH*mU~H$J`{{6_b?%DD)?O%A!E4JtrXNJ!w$<+Qg!n3Dj*p4w#K3H&$Gi8Mf&(G2&Is>o1eu zidYM1I`B-E;9~LbQ`avja5!iol$6>=cR>^u^4I z6!21>Nw8YO!USSO6J!KaDQ;ijqPRWsctcK}mPOc>C?Mb_GV?8*(DMn}%@dJtNw2iF z1vTDx^K%g07)twV77f_F1e!^>|6aq?8Toik*B$8x^~Z=({Z{x1;HR+|5Iu)Re=(@- zQjE!C#LG#jf&wlS+Gd#(LZys-pxq_qmDAa$ZbqFv?Ck2i_2+$SUW=?)$VBL*qYJeo z%9G$nNhy2EdA}4n{?Ie$+37!Iyz)omYZ{ase}m{4QMYzx0A7_S29p?}^B)%StV)|n z*)6djVuhXT+`8M{k+}3MyKjJv{!*QXKK#<1 z;gO$HzW9yd46Bts%jRFEU|W{TORZR>&{JB&5zpEA>C|pXb#eQ@^Gr^z z|1n1NQY#L3hkqGh?O6Elzd1R+C~y0@ zH|63(m>l%nDwZ2yaI5M4$F;f|y4$Ce&V3kaJ#k<42?C$j-(nfNkbPRO5+I7-x%g&;~DH%+4E{0;2&kUT|Er;4HTJhq3rZMWL={_K35 z3Cot%Kc;S1f)`{NjwE?RV?bB-=p%`aa|}Nm&Hm9GDCnTX+gR1EvMqn z7gaoNBrl#8ymmnrdL%f96hj{D1}-gxdgDgblA>t#VgeL7c-{`2cpk`SXmvvrw;E3} z(_{PA8&LA5mzeC#o-B*yWTTp0K?GJepTH_7Q&ZJixOYMJg>2s@9k(q^_c2zK9}ajQ zw^iTopv9kt_Gwd)R(G{T@f!8EB?SUw9%OLvb{w8#dt8ZJFAoFni|k$7JANsT(Fur* z#j;#aY(t$lMj;QQN}p}XPHSD1KjNdztOA)eo|#Tn>TwWT$nV&+KbsABhyknH zl0Q7M&C=PO|T_mNG4 z=;QI zCO%xDzBH}R6!s)k`&uX$OOiAOJ0NhLLhyl}-7DLM?bL&!CE5|Z%2@bHOdI=v_J=+l z+EQ*H1_n(-(ek1|Gn?f%0e`zl;?bOvbCk?1&$(Mh3y*h!KDX`UeD(19ANm;dC_ET4 z7`zdLv_mgr98eIm3jBV$qX$WuaD{T(%-xp-e97Io)?d<^bLEU>DYvTHQ~*q0dKg4w zS$3==;#-ZiE(ckGF`X#wKiwSyy~0n#Mjpa~6m3;Bzns6!6~ROa?QpwCwfsFnWLhMu zOEJB)QiTW@$v84SdBp_ve7P4+NF@PkB3(ZTI1sV9LU6^fikBGOxRpJ{O?3>mA@ZaG zv$%y?(%z+wZF@=_znf#3Y5+2LhhQpMMgtxqz+eyj@@8og+Ie;=`WNvoJ)qf-}xU{#?W5EJ!Whd7qhy8*(aY zmB4X)p{@&(T-6 z{Qjm*(1Q0;?PW*70I*Toju?hTpm!r2TMqA_kdqiCQfun$O&rRGkuwvyl$lRW=(Hl4 zLZgqEc(Q4;cSi%M1)x%o!NlA&OJ}ivzfq(l5|yM&2YgUY^%`!05w@xTVAV)wM(Ja{ zoHg`)qw9rM)xXg#AhKGz8K)~h8rQ5dyf=|UaL2vo&W*>k0PSs&No17oZD-qyUZP6d z6hbs^n0Q37nSJkjtA>vnBNu7e;%Z$R%=^CA#D3h491`(xVTRiKD{`^FwMTNT*si6d zzVrplVvu#qHKMhfQBxn*rsY2v+b{}fmdq2EtTMB8Hxt{igj(d4v;XYS9lxW};?H1@ z6XTuTp6b$W1Fq+WT>6%bDzlKb9usZ^x)`H>EQ+Poeti{l;-@bU#&NE(v$qzc{}9}1 zxoA1?TSHpLTwaW=(tlOm%aG-Suk#8qL@ODa zGTCz=l;9v+>CRVPEDM=itaJhdHIZJ?=R1@k(>R z{H5c%wC4OLHrGS$_XMTYM6z&3=v8q$Unq5?g`wI`A4Oo#FHjpDc#@YN*F$a@nfk0f zS1T598$hru6dZpxvt#W7LfFwi(BKGqym*=5En5-67LA%r1=kYwlFzs^_e{#DyDmyb zWk7Gd(8}%NhYHgkSEm0MzA6)G=+U)B^(%85;usy=`D~=C8SEyZ`xhce4DFpQ z>W?{Jp}3oZfe8@d*fGH}ZzE^kvMcgc5%@fjLjW84o#S)0fPI5T(tS!==6A_sS#gQd z&O{wTVux69G7s(cLD&YJi(Ih%u-#+rttJhImw3kJcmr{0VSl~quY*VQeY%Fp3SL9w zWFDyx)e$8*6DFj57jm#&Fw7Ulh_f&0|Q-=|^ntqE&XV8T9Z;Xi4q2N$|W+~n{=?pqPA}p>UT)5-0VCG z35{wZ8%{pxcda{hh{{J5+1L!SVF}QQ6reLIX^OgM&MENGxQ=++!Z7iTA6+sr9kK$y zHzs6nI(TW7l7yNgVtOc_RM_Mxl)S^#E3vW1cYM^Av}}%ZFr=fi4yI1#XdZcoahLW# zYNl{d(*QLIy~&ad_i%Ms|B;>Ay(ZF#$<;rF;oq{K)E6jKH-wU~H$ir1oY!cE7m%iW zSWR?qPNtzd&H);eeLvlV81;8$0)DFss5cKH?r2iiy^`0x5|Lh^cpYjQWdYLY3p^OEL`pcY0XXY6mRI?`Ktl0Y*r79xn_)-`Jn~^CNRY@n*!rjA* zN5Gp($%fD0WW;&9mLHQpn@D_xftUp}vOj-5;UmCJ#YZ&6%o7<7B-M8yg@071Lon*pC)BG>X)(kJ-mDlnfQTHFE3^9s zr_2z>WPgLXO_+6Wm0ZxzMZXff$$`rU9eHCBR)u5kNpif}!R?(dpXKAPdbiTeX`c+s z55=@7w)18S^FPF!k|Mtp1xWmmn%Y_6oZr%AaUh8_syyt8eEc&aL3qk`J|FH*`U50i z;{X54y#Iu@=>;PY5IEdC|Hnf3|DkAg^c*(1vHbIm{`)P=3!GhBk8afTT-_VC=dkSD z;n-)v8CW<`w`FDRlIP-gU6Sd$r%1Hv!L*M^y`=LlJu=d@`t`rFPOwcHcAz%z4lbU_ zq8XcvyOGe&QnA-|s@rr%6W8>b@x7Ng?R&dA-%pS07bmN1gb;!Tx_NQhAAm#d=RI`q zt^rK>GuzGDPwE%l@@aM*bmq01vSVv z@3P^aesbNIcB3VmtES`+De{FTb~c9u1gh!$e{>$*Qtbn_dr@8&?y|jR=pOnqzX$XM zp-mnP()}&$-5jiE4;40T#sP(mv^d@RfTe{Df5@JjduPu^{%NL9X2bHyG>09U91o*Q zsQzA`FrU*rd|saDYlY_UlOH@p?Q8PNj@f=}br!ll)4TQ3HsN4G&~}7sGRk+k#0$T0 z)fFZYxvp})S#$1MyO!OgXvexCd}C7_8jIx$ZcN}8=0#kxks}TytARZQHirP*WaEbs zJto`;Az8YpRTUz^Ma2WVtJL7CPuX-IyG-R~x0EjLzK10R1WghC-`6zAIh%;xQy9}e z6jpnkhS#(PEoGhbv=-LmdNb{GCZ1=sT^z0s41XBfzOD6?8LHg8b`=yg-DTc!s-_Ak zhuq_FG4oGwZ}7aj0s-`7#8Iz3EA1|tnUX);$h}j(ps@&L1a6{iHY*jqb(U=4Z78Ih-|t>cfVb*o2F)F;6d#HDMt z;*}Tp1QyUQw)|}5oD%WhIwKr=074uaWGLKc%|@CG{kPsCcC}RqpoS@PQz~PD!9rM-V)`;M*kH++%>;IC{-Zjk_9x1lnMIznG!YNP%&3 zSqb|H-TFUuN_q^SYjORr@__^c0ZuV{BR@83ZSk*2ItGLAjjqzmuF z>x~@97dSUDzQpW#Vk5DderpRzyVS9A6zt6?o;~Q6dIaMr(LV;*l&Q^NVwoYNuOPJW ztqp)WuPa`82X1y-kVpqbrhEGv8`O|=k7}B)R%-c@Yqw$+l;I6x=?v+eiD&M?NI!Hh ztT`_XXQBXxB^P9NB!iWK5Yw@k(Fi2CvmkXs=uJuwVIr!V0jGJRE<*4F7+J#6a|EA= zg@|?PY1!|w#%$k`ql~F*i?Z$NF@EV=s#Ecz{XAQaogpI-MgHIgWG+Z8$siF&*yrUIz3}sA6+577 z2g&S4VSLGH8$*n&m>iVwLIb6eMt$@z%ZloX#M}Hm2rM{Ok7q!R|J!Ox*F9mj4yDhp zNrUosS=28xRky9g5IhyKBlDo;A{;DICOy~CC`;sPnWvdP7UjgwNw;RpEx5<*@g&v0 zxuBzr6fzmv{#j+*$(Ph~61Ttae1*X0$Om$i(1YyCWx08oQkNwHS`ec83do;=RAFfl zu%_+b)PYn`N#^X*s)$_HlwRQqsMKJ{GS&;*m9iY86X_z1zonqiL1u9S9&VJN3SgZVp?o~lL!^%vXaCR~15Z6OOO7*~&oXOZF<5itUQs{!FZ z=bboL>qHhW_i=U;fl!#1Bk_toC^QZ~3~lQ=QGFz8jg5zhSUOf|ed$Mt(m{SQI+8Fz zaAz0lAaI^6of*~|dmIM}U}UE{_ZsS-LDZiQbfr7uityFVS_0+C3Lwl$Eb44oU|ljR zGpg@qCIu&y`wFNB&4hI2xH6@ zww$i;S3`mM3|=^3*l3eKs1Sm7RTcGGbNL}o6X+Or5DbYLN>EPvB z@#3l#(KbBP#Eu41B9FLV@s*Clk8%uR@yb?9UbR25%hhbr5PG!{X1AlN^18^COfj&= zij_IuIZo0kf z$fg}GWNJHhwr~6=?%aHGL*7`2Rri=p(JUy-Sh4sebpy!W=2k)g53ebRbWNTkt~z*Z zr>WF&bi+B8>pBJCQK}+;%QxY|XtDe@s|v0%Z8@MfZE&DL8X`I7dMz7_r-tFi>hYRn zXC<&DP>}Z=cnG|P4p)jMD2Y%~_A`nxp&o@>eyVsv$=x!FV1G1)ed3jY=6&?&OQiWd z%1iJva%udKxkif1_!6e)L&-L-AlQOAHnMTZkMeIsiMFu4DkI|0u|_3@G|5dES}h>L zr^c$0G->o7Wa0k6V;qF#-7IE_zV@Lta)ULhENjlvTY2m?*VD%Rclxs0=o?-!x6n2{ zF&Y#djF~kN1p}1pe@bCmKwHM+e>>r`34azn{cPJ^c6a{FOwTJz8mFD+(|{kO9Ax&O z($iC)Z_7~6rn2{;5OATjY4ufiOS93_?OtA}QkQluu}t>%Oi@Qg5p9>$!G?bKJRM%z zr7{ckL-evigU{<9)?Iw06;8K?wL|=L!Gy?y+;(1fOSFnpd%(pzp@)<<#F$N}eth-y z56?*O>;kpows>HbVfzG z;SP-hB#RqYE&!wrsSed$p1kGV2ViR&OK8)7YaIV(VIQ6+$S-olj>HoGW#+KV#5ju3 zZMKC_(Ubqb`D0tw%!40aPDa_Fz;y_lT1G&wp9Af+=dvq5^G&QW)TocmM^viH$oN!% zU6Oh3IR4Iw9GcWjnuC&CTJV&AQ#C)5cVi+u7(NXg3xIm&7x^&ZHnsC_Q-sZM)lV0~ z*a@E*1G3qaS(FK{Rg9A4Tx-;NmMgHUt_D}K%;@2EsY)Kax7%5<)iDC!*T%E<&M6$wpUjuw&4a)M+d2bSEI>IQxt#1e2#C+^k@H7@8>?2OOc%Z zGoM5~0l*KUZvVp6rqlO1^3yNHFhB)@M9Do?xO*6YE{q1o}0*JHgA%iS9&EP)oN=^RobZCRQ! zsq?KiN4oQsRsGH>gSKwoRHRW~$C1y9x4E`I#ijqgeR2J#Yk0B*Z*U zM}z5|%R^HI50G-)5o~J5gV*51@kN0RmohJm@ zi+W*|P5%bNoqK8;hooFuObtfM{wMMM)w=P~0O_+5R}?hERz&kJRU@LUbH(Brn;U0d zNW}P-t!#%d!Z7b&6AqFgfTObe-<#m(0r0X#GYFKs^;^N7vEjPR2P>ww)Q@F6-S2vH z-CIg|xyqlYlHOdb-}`k_tZ9)e$-L^P33GiYQId`m0zpN(;bFa#ev1tPDi~^K`gdAA z?5}QTa#eODSSM^u=6B<1Pd{-_FhtZsNc6c22A60ad!b_00*`irOigi4xDz3Q&#~^`|Jl+0Ic8L&i57PvCD%3_g`t6*DOu`g z41d)+EV!YI6Ax=(1?ePFB(W$U@c%-U4(X6m2AeGw&)g!G2C*;!@ST$aqls3IngU2( zvwXDTD1&>#zXrmGDbWx0<{YCWe5doaM6CBNcL<4I6F0#y0aGZeyWNk=-Fm@q&O-+1 zZoPaopgyXY`Wuf6ypf0#-OGjbA0Y9SsG2ED3IilNfE|BakS{e2lFqbAgYfhTwn? z3-J$++jv(nz^K2mW)T6g*P5Uu@PI=lsY3b-B(~4STz+qf4w1To9h8dxJCs+qDw&9~ zcvJ(QaiEjTsD`fhN?Ep5V@3hZ6#_#8dF8KMAo4$ZwwteF1%{>E&*SBD6(rxbSKF!J z6(a>99wE?yNyV<`%aEjvH?4vyl`=m=tB0FMCEo=xfLt7ApDZeGx&fJ6Csyh5UY9HO zFzbCJds4gE&exsssQ4^a4B9KO;{oErFW`rV;8-$A?)_N6(5%`7DSzAWE`!u&8;6;X zI-zBSGXu>|4M9{Gx*#|wMu;?6g_1xMS#vT@>9%vAJZpKBwwg|i)qosQ$W4z%)_iK40!0d**Ck6NpP23(C_a_MdPj$VSej$;<2Z^4xwPRXMCQ3I zfqxMV(|&joF>@ao_YqXtI8xUdxsD%B7|j7=92D<`qze|yfYf297n*|!;F z7nJVH8vNPA+>5SQE>zvK)353Kkbw1?TJdsf%Jded=gqcxn^W6|T z#QDW1@0kn*{&fBxpnM1?!?q8N%RJ@*!jk>brYTYeJZ6&-0^VLtx5hrS(u^y{!ZQ}% zq%?g8mJSKze7uQrEa9Pf5LM@msl-PLrIhzNo8PY}AGgp^5=)5cpCYu^-mHCY6~x>u z6I=Hha*4vPlPhvn?zf4Zni}Wac=9PDqo01N=?6TlT9B=dwEaD(=VJPXjtw;c{q?_` z0y9gp?+G;`%l~&XgN^5ZsfAHp6$kuIRR6X5Ju|&M>N!Vliom^qZus9=zoPe&!VQD@ zCmw!iG9~KE%u&8Qef@0h)Na%2Zd_w94nDF@`?#LDJDhQ((ZVLc{FD=wi>r>^kZEyp zo%E+WVBO^IOtPzq6RkKimr8-iJ&3T$RT@e>%Rko?5{kRd=f zi_0Q#8RKu|#j0W~l3B4}Z=I>AI>dl4A*~3Q0u@RPpnEpjr0bvqVNi2SgzZP~#7TBr zmuR$9c2y~MYl_xkVH3B-o57F90cjaEj*L!S+z&!3V1p7xFkT3895T}>{1J>5oQ!c_ zAbobkADltGpB}?m*$iA-C%KbKbwlPR)u<5`fI|JOUBDcp$>4V-W<>xy7Z+y>(?o|3 zNZ(U6@1X&ql5wXj48~5mQjHR3=%BH<+>1(bgCWd_Lcf`diYy)I(y`20w_+A3i-^;f zS_o7Kl#9F;6_u(jR@BQCtG8Ag5Iz%5!xWO}KpJ+0bDPl)Rs%xOS%}I*P4q^KtH44f z(`hPn(EBVNjh_h$LHKFmF$Um1qD8A0L=}HJjw;D8vk;|Y+K=4r>e~w9^g(1J3+lsE znUc`hmO%uN*$PDlPu*7p6N@=Gnrrj57#dkKvOxvl!8jN${^65s!L)NvHD))iOqqRi zEOaXlpj+gJdJqC;9>aRarqt0$6H6Fp@gK;U}^H7=CtGuSr(41b#3Q)p^OFRwDVajo=GOFxhwz z>INnxsGm6<0UXleA{<9+N`CDV6LG7euXgM=z6+Nwi zG=WooS%B*S2i_24DTuHbqu!X$)>6;~7xoMltEXhoj?avZXb;lmBGK`O{!OMX5eAmS zCKpwV4ZhTyAn#Q`%DD){Lz_U7`WXZ$RO0xm51ND@4BUwKnlee!1C~IB3`{nrDTNU# z4p~az<(2~b^h)1-_sYk#$L#p+f8*G4v0z~kCcr_2&Ru@9ESahm1QVX_$e%g=AJ490 z1lTlWTH#C|-pi0eb?9WMuY!d(CGqZ6`7$h)ok&Pz=#^RH0?dpJE{MAWEcqTi6V|2M zqdgZP1qERriF)v`CwyIkurYBsd~!TH!mr1|4S#Kpego*g7|mo@@HduR|4y0yIolCr z`T>DYYg)HEy*H`B)1ssikN-LAUwzeXHh%Ux3<`qtCAxd?o8hO}2TWwJ`r&Hhp?85+ zq_(ty&u{^K+w?~43-Q@P!28Us5hwA>%~Ru4KGP0o^P7^VZS&4;LU+ZseblyHUEB1} zwKBHr(tfVf>e2Y@_&N?qQ=jze`=Q5CEZ`-}hv-O`?&eNit_2}_^fUZ9V7947OwM51 z0DtrON!$?hLbxSQd%xT`A%FpbQ`%UA!tBf5sjpL)Q%kLGSJ^iEBMRb!MaPpTckrOY}+q9+VN;u%D?oz{mRTcIFDb$bj}W|kCER0jme05#blIRJeI z{b17Q@6)=TcUz_*+j^CbGSN0AyoKP5c_kEREtFPXJ$efGdJB=F-C2rYG2E%4PCxB4 z3_$XGgN^rdVP9_loDF<%Z4|B<&5N>K$F5d~ppK-M2qivEE)3WqQK{~VAzd`%QHBo} z!Ih|SAe~MisNP6=&v=eds%N?O187n%8Q_k6jo>VJl*#|&8^cwO8gn6`=32QC+tkK5 zeHw!jtgv+Xt+a}-=#Mc3kn`w)Ts7t+M^+xgty_j4B|*mX1N7m9Xg*1C zQL@ervXj^A#emE{QMK$CbZx!1eQkZkZcATXuRj6yA>p*h^+X)pj+rzg4Qm)#urpRp zf^`0$kHdbOcmAe1zf`*WH0RJ8IYYD`l+`ij+qCxuF4gUFjD5AMCl_ilhmYn<{de5m z#FI{XWDD%nVJrp5COp-?zz^IMa;yZAdY`{MgNWnjdPOf!sp9Q^rEw3Kd|;jDbQZEk zkt|uc))LBE`WSQ->t5*6cZxzfOgmhsr?c6IRp~lpp-yqm6wpD+BORRxQ>9=9S8|cI#5WUIx{rh|4$?y(%7*{@SpV6cBf*@A2@@baQqGUUx+Rt2Xi_zgJ{Rx3sL{E_ z>fZjTz)DFT&{BBZ#%#W;K_b+wgha1~P+oPX#)e+q&cs$U%DFg|iCK-(=}cX4^N)iq zabtvx-u%Lr_(?mqwX0%uTrG8W+~miQY`soj!M^Y{%Qs1ups6=WR)Js?VL}6wdy!;o zD*>Qo+vFNVCB*d+O>E7|eHUGMlsLc}g25ICibE7gF_yet>5I)CXfS%IKf9 zB+#sYpVoIeiUcY4*y+`e+wXYzpV&55avc9t4PyM?{sJ&I=H!MGTA&qg(*9`d>82jV z7d8~Z3d6q-YjT(s20deii?}B~5zgVC`^y)$!_vX$7PJte*lqca;MUK` zaw(TfDw!*evYpJlae#Q3-L`uXfjhQG=)u|tUutKW{n@MnZ3)>?7V=Zn^+^

C;Qt z(J9dzfBURW^cOe&SREHfd}|FMYBsx>t)qzHI4PN$Tljx{V?!lKY{lK!(&ejjA~siF zR4_YD=IhJ29&ub|TiZ3#LcHiLw;dkeRU~x=S_Yf7r$##mGVlXR`O>M6`34dBr#TL) zzS_<@{>Jv+MY1rTpp@A3<4Gd4IML3=rMqPUEg5Z33G~}N+$-w%PBG!jHv0j^z4v2) zN38uB=oS^fQ-H^7N-d-gAFI2>70YcC3B>hXF}w6|N`BX--jOd@606kq<)S;o99uo7 z1{Wbd`DR3CE`SQfK*!_;5^qaYwpB?1Yut9-J^cO@Y&VWwpWK0^|BcA{Wmm-?3|PBx zqv_ZWsQe`}#EmR~a!f2Ib~_9K`+Q0k^%6?-^v>_NuBN9xyi#p}=0ga8&lcZzD`FjZ ztt0llF1Uq7n3u#tiGgZ??(LOmGXDF%s`>5*Ifv)v{{r%zfu4x=C<4->~6}ZIUBwDztoSV+>*sSJxRS z^Y%zbBH%y{uAdTFJ5Mx|Y1ZS~3&KnrBpO+IEP^pY!kro>tl+?o$B}V@O!z5TP^!2h zN@9|b1`F<`CKM48K=!=esfBvae8#yKN-XZ>C{nzPztLmPexq6J$L)ef{g)pye!S+E zuM^fEbRgzIxBb}YIl-71)0*5<=D^d2?w+(`1;7i)YgTpr>g5m6J>K(NdHQk{U&Jcp zay|R!tcxco{=aRD0+bDo+^Jq-h zOfV(zNC5)f%ki+xG(pbO0!?-KfFqg|L9q3=cV~SpPKj;~x}y>FVQ&zb*-vni!Z^59p zB}JJ&HpSu@$*cg4=Mg=Cv73$}CS-m#;m! z_wflpe$|5VVIC^*5N4p3N345Ayub29;^x!%`;jRLUd~g}UL1Pv<9=a5+1n1GVLk8n zP^2tkJ#GEF97F}j2mkn&eONJp1>RrSzD+m@n8rLaSu>MIVW_!(3%3U9!*T$u8RUNT zv!OK%F!*R(iMj%jm1S~y?N#5GHXq9+&+o(R{N2I;4D(QWh({*wUG0ftCsJ!gYD0P~ zrZ757SY5?QqUM1^j%lHqVTHqBP6F-br6gvWeY>f39S`$DcBK@fyUWwPGYKjdEH6@8 zrsQ8~C4ql|N@IyC+_UR(==^~EEXCCa42GXi5w6xOvHM_xhi*^+uy3YD>K~3NaFgt@ zC(No)iBYH8;)&F^Tc)-WBMeNWgC^5k z1_mH>>;_9O`tebsBZn>S8MrqiErU}F8v`yv6{aG`*U^qsru!ixpEtm{Q<>I)+kl^W ztLuS#?wOhfhxJun*+M<*BvPv%b~%A=AwxE@>?G1UEd|nLpy4P6vW>Y8N2EzFVX9}g zQnFG%i~I$E`0?kLtjk^c2t2qfTi3uE?vx35V8Mx71gy_Lz^;$$qI}fD@+60H)5F-7 zyjZjIj*$i1sk}d&*Bjuf7G+3Is70r{LsynuNK>i;JJQA$U2heK|HoyBsIca8CW(!c?%*cpb({pNRt*4|@ zN5oiq8VmdA1Fi~MR)nU7uX`-F(1a$t?o2QxhTCY+wM(lru7}G z&ap5}D2#C&PC+*V;r;B;_uATAciuB-P~Vi*RY`GSQJ3x&{Ha|k4U5IOTd zBw8j2nnuxKjm{_#-qa?CBUC-+3ilBw5=JU{PIY_*0Rd%}^TO=+fDR2=FUOs4C&gNb ze6oC>y)E!6e^bm4Lc8ndwbn#y=**s&4u5RVAPQCrs`H$-eo~RpEtGA|u7^gaqu6Qn z+o^Fg>M0(sfW}m<-E7$;`i!H%!SPtJN7cf`nVwY#GOcgd3Cw}iN-6?QA@Bv7U-Lzv zO1xMREr6o;ZP&EJep#dr_ET>fmnwPbX@*uFUl?D^3LCmWX&jUf!%EZ4nR9!v)ZL{O zhLVMJuHImAi+a{J|6g_l6E|eNs`?$lRyR=~*;FvwIu^4RrP^?@q*>b#XIkJeEB=ct zk7V_P9r~9{xIA_69mIw4zIe%WxpJ1ZKmrs4_@xPhaDkBUhe3qT%6fZq16-b4G3~OE-c(n)8Fb8D2TQ?2)I$k*_8Cqdf&t0xQ0AB+y>(Sdsf5Uk%Xwj_; zDEpRT-n#@xtP!`~6rlPCnF}Qp(VnX9$nFxs4oLQIsUjtVO#VAG-{0aDO?Q-Z1|Z2T z690PoMK(3*NsPdKLDs5zHmhF#@XaSTw1_)E^aR9Z970zxlJ z)YvA-R3UiZy>%`oU5cbq;{trTNdTrY2@z`e?aQ*$Ymk}8&w}3M zgsx-o6IJyYBkN7M~=!xmHhlwO01HzE8(?u{RzSpTY-mf;hX1^foG{M-~{#zGFSBeEg zgCu5SW&WSTcv@F3IY$!p-xb-T36gw>h&qOHD8AtM#=Xxqf=uI1!xcC<$6}3@6*$B6 z%c`Sbl*1W~H+?-4p5K|bN^0usFx*cgMC>$GkJ)2<&6k^yc2! z5Vm{UzQVkwmPuA+!L{U{T0iGf^Se1$368sQCTH9}K%K|?=vOv0?dH<0bLusbv8uRM zU+*h$J^h#S(WdgSGk*8_U~l9^aFcC)3F7FNEQEv?MwIbUWK|bjDeP6hK>-A=7e2h% zYL}(G9uVn$Uej}qawkMo!aC`}AmNdu6E1dPfa{uhqv#FYBcS>0iXOHK>s_D?=ohZu zT~9|07$U_0SJEzktyue2|C=Za+Tq4Y1))0Aw;)gpd8mQI{U%>YE_f&HskfEkhKqM_ z$IjMc?okNeKT<+-fp=}yqZ#j~ybeCp7Vm^KI!9AZm#dotB6K(D)zTAL{6D`1sO|{! zlE?Lo%CMO@$4C0MLpTKfhIdW*Gz_LpkXB^`K&DH8*|tIgapB!+2Z;SY~M>yx?A38rGGz+W?_cA7Pl-e40ZmafxkF zP#S^k0qyiXk>d)xiG>JWQW^)oXBHC^Aj&p(6bI$1UbTUwpZ`tDG&Tozbhes383uK> z7R5Joh_J%O;?E5T|L~40ZCo&@7%pA-WT({y3Jb7*vCXgTa3#?`EET1#@=AMYy8j0@ zaIQbuu`D?d#ol?beG!iE?Q{E*$guluW)`EUN{UkZ0HRpRqMrnp;>)#7&_9O`aM~&? z`rCxA%vI1pKRJON7LBhz)Z_|@A`oH~qawaeUy#g2KspW_|?w(83icpQm_Czh@jy3ClB{$6y{W0kt0({v4iN#@O-C zUi#AS3#R2YYJP`%yOpzXM!m`cP=G~~(zW@Q2hrl(AzcTY(6D_0`W|u&bP_DWr=904|S>vuGk~;ml_@A#4(x?`g(I?4e z&4xT^wb+${mIR;GBGgvx&-WcrrTU{09P;x%KFA#iWDZ3$GwoD8buC{2ErDadQsi^a zqLWyNQTa!t-B4rlUl(8Fy`S*vbOnn{x1c+oE;!RTRK9Lu} zS-*=Y8%CLAgjG|(qtR#pX+gdv6kZU@TOrM*b~GlJtzvBl7HmnriPI3ypvb2QNUMA) zWLcuARnq$%F2OK29)P_w5Oh!Of@@eOtG@A-+X{Rk<5cbrY>(vG%bXal#}e$WYLC>qx`XE^p$*M(rZDON94P0%#kL z!=FqT_Oi1;AkAfO$P<4seDl1)BTe=9 zZpJ@SNpSxedU-aW|NKBl{a1{I3UuPZO-d_iYW_WZI8;HV0p3ipTh5>|JbStVz9e`W zyzz*DVq(Lxp0vVMXKWyaUcJ2>S@AHD+8+P(39f$2@)!Z7Tgp+`?@4|Hy%pNFx$NqY zNph7udbTty4aiL5@@F-~?rZnE%V)iqj3jvmerQJF{q7gQ+lECM&aX78UTO#G`TcoE zq=cY>GXNr&(klFc8gr2S3>(jG=nd;*HZnMSe@lXzbQ{w}9&}zSvJC6t@5IE3zY=!O zu}Zo!B`!QjSDIohela_k&>~h9O(7uWY0wNh!O)S@cBzLP`ms-jIUhU}I&*zI3A{NU zU)Y>!Pqq613`PYW>(YL5YkFMz3Ugy^z##SZUvY#)z`$};C-(N9+k-}9@ME8Y*xXQp zK~)4Bh`M{4{!Uj;g#aOyM&~~$NKnSU9llRUCcD_wo-k^6>O{S9t9e$@=P(6&rEh>0 zE;u26dmVKny*ItdzOdKXE+3=u>W$(th@QrxnH2}XN(hSvnMG)veg8xmQ(@m~SbmOE zV_2SB^(v5jF`xHMO{^99JHA{P4@VEQV=G%N+a`@k02XM^dcX}D>4I>;D4+zI&EqVU z3(7%IM)2}oofk!|m*`CNJJ<1OM$0}nq|DTpHXyaE0VH4#c*SgOR+2Ff1r0@s7_6X-#AkC@KG9iT+ zb3hsYX$n=`DTpo;vB(RDGL4+E3tCW6bzz_`M@!`(HPGro@)LHH*7>r9eE+@~eZ$ar z;$I$aCDJky+lyl!U&w3u55{!V(}2&GmGJ8U#<9CR{KBXDDY5Re8h6Ahj0!-hH~@P( zim2@os`3~#8x6KfZ{hNzcD;hF6^gbjZc6fZ0-FgK<&fEazfpt4-~}bzE_`VbJ_?nb z+Wv}TF4-o2sgz>r{{g2r1U|)$=hLTzpBoq@!m?^B^f-5q5Nc4Nh)Y7FC&_D*Y5I2p zP#aFpUBgQUR`*6zH~u{eox!)CnU#YOrmZoPG-@W56pKIG?_|i8R$wE@A2`9m$+pGF z_&sh(_N>M={1QT9=i)%987M$#W^fPe=y=E>wCdLM~# zQbbQ}P$2zpeR!k$Z)b~zr2`X~ck{rE)6AmhF4(m=g&;{zIVH}rC#-)PS z^Aj)a+`O516$xs`&8zW;1bQO`K$FxmL5nrX3lSA{)c%Q!h;Bf}Tv&`-?^!NKp7aml zW=FoCDOw_W65DzV*X#6b3;UsLir&+f(F=%lxg`A$A|@pZ2u{ZoTg4790sJ3!mYJe3 z13l4sgk7zt_!1=b2d-W_V>Bex@ToRmfRwq*OcfmBkXWs)`V_$4hPUAmAc8EF>5&7d zPaZ>NUvWnmP2~liKJz=B>rKAY9C#0HWW0B^7vEqiH~^{@vt-Cz(ToKn$q3no$zEvH z?JEu9@fYb{7*7%~KQuV?aphU7g&;c`XZl31mMy+fof8tf7&KpOp5$5Ii6oQ3&c zJ3_}7gYuAeoxDDNZwsva-%A;}yS2lY9oo~7#uu2)`wneiHA<5_!>XCStk%;awF?pp z8=Jd`Zb}pw&qYLv8G)GI5F5;BI{)rsuVs02hbKzqmTv+UsRT=inO#1bpnvB65<9x< zPksc2x;qqhjLUB8*0_l`i>euc4uyY#Q!e?4v1Vjd2lDEb2b#2~+|f4V)dPS2iF)$dw* zk#o~|k`z5ukC!CwLmtBAt;|cA;EuX2fz4yBMV>3*M;pmKY74*H2 zU~fD;gn+)tTaF-D8noE(n#!0I=F7cp}(-ZEIa%TltZ{w9a}RvjI@^n{J3!KB}U}=aa-CFCv+d92Mp~A8W9%# z=6N6EVc2|X5qRtl6$$coymS`(w2%|H-Qx!oIPI1xBDYI8{G~=ovM~H%Sk~G{ONWPQ z!>S;wmL~h4K2J(JS#<$qh;oNmXOPyaq!;WP8FDq;HQ0;|07KEcaEhKYL3+!VQ9p_T zU~~i(%a-k@@?C7)Xu{Ut2HiBkHzG2p3yPbl=FOoY=pg(LO{|3{q3J z1H+SCD+=*1_b(7jPByqgzj886FRPv~5PjTH(g(6x^1YA#TGZZt#Vhz9OyUK4vxgoE?tL()09%@3E64VW7j*Sa?+P~TuPBHxQc!o^v7@lv8diez=^ddsyxod$6QS50UbLPEq_b^! zTI76Wg>8R$M?WusYq>T&<=6_qqqj1gM&Ck5ANW*46QITt4idLf%j%^6sfyuV)fb^r;O^o-Wl5+?wL;NJBh4%exCRB#M1TFb`0@=B_$sjqpg?u1P@&!B{+A))$ z-Vi(O(zkA)+OO+NYn5YQk^g{kas+lqqZ<~l1M`4otsJs|hb?jP*H3xCJ^fmF=+8`7 zIg7FvsHeYrM8HV8-m86C7#J>WyoN@rHYkH;-^3r%;9GJRrFbFwPrHNN;6|xJq0FEV z2>1vsmT{FA_B3b zg=TAmY$czB*%{ltNCFrDga&~{A&iDcXK)*`r9!@sI$MZ=KQyYSa`_|hSvlwz;mp_< z7k_?>lQMYO_1#<$z6AML^^dF|cv`!fuc-jjaC>U!{$@2n;n+9wOylqgwUh$j5GFSK z4@7@2Runqaf4(U2DB79^?Rx}C_PA%m!m+JI#y|-)9C9E$k=)nDo-4$6nHYX6y?Wq8w&`9?=-$)pfhI^*3%tBEQS%wJi|{JaRUo8360cKO+C4 zon=x_f7ZxFRU9KoJJLd9H(40j4Q!)uusSBgrq&SrwGyy3UQ6_fn3Zqu9`dB!Kn zgI{+2NeBOePR$Yvm{xAFBRN%Zh^8VJ=mY0x{`cI>A6rTw(!PN06M=aoGBipQtNV6B z8!oH@Pq#XmNgx`1*a;b~J*N~`jpL@|HKssC%miC@B zc0a8J+6l|T(EL57chn;CB0?q9T!=R|&DXenT+Pd`{?v{Dx?_5j;a=lP);o-7S;^Cn z14xtby*sa43EP1EvxSaVwFGI>UbF{`x#_lDik+>_=qiM@A!Q6U|U;Zg!-a61%y@r zE$;!?0%cu5t$TSWAvE}Efl&L!jE34Bs8dJ%sGlR!tuQl0 zhYepqo-iZR^=BCoTQk)m7`S*O9(lS?c(konlQXLpPdouBP(iJD$RiJl7n+ZeL`;nG zS+8TWBb&}dIZn@JeaP_9SEl0+N2fF&V~VTO4r)4p3q5a-2niin{L&iwfW&z)P_J>yhY!e17qVobWjP6V#gX zS1SDm-x_9j$Clb?DIpsRb46685~SDkBnG>9T7AW{E(o)O<=1Z8m-OF?tzwQt>zhe| zey&PDUPxT!-4_oGzOi2B!u)&=7O!OkZvh54H1{lnBZ*hTk0X(DEDRcYEBx)jPy)cv zXk8}lIPg;1Y;=alsPB8g>yRy#z-bO8b_lC2+u_bJU_z(w2aA@?>W_aPwkD?&E$(I~ zMjw+ZL{pK-mybM5{HCLPVzl;7fUI8w;g-z$4YlLi6>zf@1v?%mdv?#YBw|C$Lw zDzQnn6&T~U#vn|s>FHi6H+uZ0yUNrEQ!qB!!@Yd7zAw>R@t3upEup$7tir~Dq{b!rp$I}C>x0@7{!Vf>}YSfiU ztUks5$+Z4Lk?JiI6v|xCxVjU*!HlXHZ=0_)4RnpV_X?u~_!%n|9&|l0Fna~WMCm?5 zmUP^zW0%4`=8k%f1yt8FCqdOxbmRxQ@Z)3{VKR-q-jDH3aQILCO5Y||P}s2n4DuS= zsFYi)1RUgPM{o0M(hU_86a@T1LvQey$<;U7uDjO4Jxy335bP(s04XG6$_Y?W^_I0Y zyDGsvZsm3!J>8oYFc-}hke1{msT%%=9fg!yBgMwxKx2NeDo9sd?5OWSFOCa}dnNpn zBIngVpUy@={r=hamba}Z+Fe_>xuo|c`m-uw9UJJS*A_DZ!dCguGF-B2^_<#L3N(Dvjb!U)Tg7GJsU=t z3MB#+p1%rfplSfxpYBhG4_bDdz)cQ?q$6(fQ)iX5>$MtfOeBG{h!<~mF_G_@ z;ciy4&zn`l8jjaR;Q+*^)yLJ&%itn~>O0>U-qErqxFctu9{T;Kppcx=)a_89_%nrr zjqPP;5&pOhLr6q@+J*hORhyj}eCP8fdv=^GY^ovE!i9P9w&e420ha@cub^5P>s+6- zC~Ko8WNA)aIt%7EPYuOrKQ$B9@FII`bXQST^z-jgPAnmP1Hi{~kR~4e^tMXnBK%5c5jithZv$;E|o_Q|8taQnuiJO|+2|f}?ueIddZ| zgrYRl(fjQm9sp#hQa)%CWid>XsL?*skLBg-s7mbE+`#OjOrfjlrV9H3!q3)DJsDVO z;NE2a#}a6*x1ML;axR+cT7DxJHjI*5^av`UR-G10OBaVC%2H2Rj&$N?=mES9wi0=V zn}$eoyEU|ZwEIkE{s7${Gd@mDeDokDZa5&_Z;##1HvqW)s5&XFCRD|$y_yjA6kBa9 zZh5e_7j?Onor1yER2cY_v9dP>AsHQ0y#%h z`w@|IG5{Nx^albR-O$DWjJm-aek$*OvM=FE3`V8FR0^Wy2YbcJ!_z;N9Xl&^z{ zIidJ>7q`IF0T}x$$b)Sg4hJlc-2wmdz`*P+>f|a@8zlYET@=^2fKzopTU%a2_mwM) zI`aZ+=F9S{;$g+$+WI!*TQZ2mKuP79yW}1l7Qo#Py*ce`Fq_JZ{5~-&=t&m4Vs*&W z>I8YLmginNQJ(@6dR~%sj$6j-0;3nHHdK}r^baLMpB{*KDr9)jbS{#5(TS@SJtfSc z9q$UxT@PIR2y0+5&9PHkU0tx*fLWSUa#;EbHcc?~P^Aj{R~GLHIzrkq(zZ6D93$KX zCqNl1jB>C4r?1}Fq$+`F1o%5Ny;9?Lr^u6M3(Z>lSO4e{xX%f~*yYLeB zXV(tHyAE{hr;@@*e301OV{+tACxk#)VZsD7Sn$~(aUT8&cz>(OJyGL$aq31NxsX_+nDt<*tzVP;uJWS-zYJ z7p%o*Vsy}G%{i;Eo1wuOm)A&=a26Y}XJ_AuXl z4aiRf)DCttC6_i>cIO!wa2u{*N`Nyl`t&HX(>aar1r0ws2_xux6#})1hz@9rYw(vJ zXrn?lq?W{d1?Vt`okx5VN$^}SfjjtF`SdwL00lqZjD<}A<9Qve&Fpt64@t(9PNz5& z-mXR{gSWvo@b_1|3YeYo%mYtJMn}w0XOCeYG?U1_$U-|Xw_IjtHuf|Y6)+01lQH8- zhUpLH=-UkD&!d0$j5q(sOP#EpDS2c!uZdzBLJ09^sIfbmUw!NXc6+mt=$J2ch^0a5n39Z z4JA7m&x^mk60zKA{Q0sI2|!q`f(Xo=dliYLNOu(W(aSdEr(E&TL@5!zK&!y9VrOHy zkXf37M@^Fpkby99XT+$W^J$qvGPyCYf*~_iOf{(4XQ$^GSd3RH{zx&G;mm#bi*hn( z{UZZ30oXxC7$1}=f9M}D&ocT-Y8?Y&PbhnHN3=n~DX}|ZbV`f%3_$9vV$qqBRK{$N zpS4xU6!<625_M^14n6){Y3aGWzO*+pvhC?$S(xHE7a1HI9{@W{JO2^{1->&`JK#G4pXyI3_Gt{RorIcKJ!aP*Q=!Xgrg}3;I6aL&f=&3|;bOgAjThD))x2fJ33usAff$g7H*DWsMM=nw8P>k=o3b;qN1G zWCbkl<8}9n1Ed1Q;qnz}K1A6u_cGSGX7|9E`ONMfUOdJZ5pnX`6nx!V*WEue&AFlX z27iRozyj8FN3Uy$hkhU>!)51h7E|Pqtui+9cg)euV<;n|?*c8Eq?iLA^Ig?%#Nq}S zYO%xZH`lXA%nrPGP`G-)V8GxJ8xaopP2@KSv`!th0jhfd{w($yN>~oh4k3g#^;X>0 zKN+~4=o2`NtB^!}Xei=Mt~ONMS#80EkOHI!FGKdA>vhOP_zuulLsgXx>zZ(H9_bk; zV!7K#%>@4KyF*BBn30JPECY@R+!E1052o6n{%}>$%Snq`qy*!>SZ?Px!Dk7JLM9<* z>GTS^$-bHI&C#pvqjelgF_9@_#-E+o9lyXP{qo-jRxj4gwmP}*20IvJ_DD0cbP}|F zwUn-m{LV!LS4ulsEWrOIHpW?Tr~6J6f64OnzpaA%9td;@R&G|#|I*!WUA_3tP89!L zqkSoySR4as1Jn{>RB~a(&BsS`74+>R5!*#ulC&eTiR`P_r`&Awi9*gU>zQPVU)=aJ zzApRY^^8n;y$FjEd(~63K_kcRi6PO$vnloa_RZ~oV|43cZhhMRFhAL;`96Z%ZywV| zwX9yJ1zNto#?KP%^nC!X9bZtrE=NxcRJ1tO-5D9>^~Mg}hiQpF%*TV} zDHKT*H4T?f5X)(l9gff{JEJ#?4{x#Fs{`k#YoAQT-{-l$pt}SolBjFJuo2K%wQEF) zBxAzDl{5SAsyy^~Mp@;%a}5sXh1z~)blc}YjxW|N$x#3w;DeJ1 z`1+K0_v`-T@4+)58U%Qc)!>XzgC-TN4Q|ZZqn(bWmH#mUMG4S(p`Bb9!6IeAN`wPV z`!el&ak{UM);i-@oDSmFq`}7avfh*Un=Y{odr(|yZjux<+H#wQXDQ+^cb9WkxI!D% zoKNaqfrfE;H&7H#5^?kHpf$R_i6cF_r3ppGlBtLIe%K{hEg6Uq~2Lytp-QCfIvefp^$V!btxL!uPw&~1ValOBu`(B z`UTOoy*My<<)0{L`$GQ~QiB*=Fgh{DoF1H-8kmaLNXi@w$ta@jB;CaVY=yV1BEk$u z!VMWG{niDvn2fSCKi9Icn@;Ma%sz!)1M7^$OA$1} z6NvyI8zdZ%%Cs=<7iMi$ZPm80bJ{4R;az^Ya>Fx@{SEf3W6oc-)figZ%wy)nDGZ3) zXnEhNu6)MRO!it_A@EfT1=wAD0m=lBNbA3=!f9=%bQ|mBy)oa_;cSA)ixz}cKZKC9 zG0dFH*@pOwkiC>c4pioFg}a-L`22z@H5S+YLIlD;6NfzPNFWC=@zK#ub={z}48 zIZf=oqiltNpeu``fIv{7wa1Ng82hEe=)N&xoaoBKx*ac?U0zFlaLh;SW2JE$9;D_R zZV5?WI2ibFplddp{r25$2i*`dD(u~!{ia&$us2doTfr&@+_DehP-TtB1kCe7mqwZ*v@zsKK29$>*KOKmP^(+VnY; zdxszdJh*dRC;iOcaARLJG7I97K?ab2gzwuXf9D``d%3e)_X;FeY@a~FE}?oZx-5F$ zQvmHfr~dmXCX#h}En6 zdd;e5_i{UT9`Lo?kNQ(AgK~=zh@I{ILInj~?rW3qyP4NOyZw>8b>JdkZUuk=<9DzY z?d~{cVWs^`qaqUYi?C6@y(uyy`Om0S-^wfd-lI*R9m1`-12AtYZmw zC|^f+QtO&i!GZ?(-lc-j8IqCgg3RU#SF7L2hI`SObH!>G6^!8_ zhuikVVds%&z-)EjU#3I=gD}9K1ng|R{;#jG{{Y!tGp=}cQ3TU92wZ1NI5MR-MkunG z@-#o(L|K!4v}}I(%w=bY=oxxvBO#R>L*>`ZJb|;Fox3`FTrLOl+;1m@i$FX)n4(xV z&E@5GBiJ%nmaMeTBjF`rTaODuAaJf;ipIim8d`A~@9eufmekX+`@|E1*x(VUkgY-N6ibf#BpMp2TxOlk|ZE zIT2#G{4uH~n3!niK2?%yF}e!w!MrSA75Jb*lBh)bp~5nCY*$gv z?=WVF)`}ZSsM?j7FJORF@K__rlSOdTLm$%;&=zG&(5A|nLH1yo=0utXwD^|R4hdS> z4CY4rizLgkWre+IGNA;4VtT?=cZT?W=gE~D9TL{jtf?et-Qomrm!vm+-DKAcQ)ou{ zH_;TSFzHgYhL^a1z$eP#(zM+IK$xP`nJ-!|wb(^Pa|aW64WcYc)L*5gq3b$TyfmcW!rivH?^m9^66jBI%9Z z?8B@~5yB$whLk}NsD7!C=zX7Qwnu`++p3=Pyj=R?PIf>^_R{Ev>XH!eVg)GZh@zJI z5johbc$B?wLF}E0FTd|tY0<{TXr87hiN75bZ58&t2bEnvr7CNX$Q`&Wu6Ml+t+Epr zuLE64MlvpAwW7YhS0jx>RF&iC5M-~Fv`7VgFc{=t|YF@2b(T8%+>38r0*@t>q0Ga^6X?stw%WI<+(+tZ}TvsK>SaW%+U2a zLtML~6t_~8-jg4*%b+UXoi z!FTCE?!{2Hozh2$r}j23!jnX`|CL0F8)Xs}ceNa!+wyKGD)Z^@-cCi6OSZJsggB~<_skEZFfla$Mf@Hn zTm_CEI8eQp7^6CcN08y4X!|QEOu4&fY8Wr``GM>Ad1{!2D*mXSJQcA-ksIsk2R2)D z$z|VTH~?MKC<+z0ILr zI6=pr;qv9Kkuh-))U08A$x$K7zE?-TLD)VO1^?HGa{WKMFc;f@cHwDVqxj8s6u@lx zU2)7HJdG-O>NSS+B7}qwHR6OIy7Y~Rt@CP-#YDoXirtK{EhB4IbN?q<6$E1i9tRgy)Hr4vN_vu`^F3`BI` z^uMUZmK?U*b7FQOCbZzNZk zowm$mWEk@$2=RT`Lgs)Z>f^F;h0V|xW)amqMyQmudbqy|fi}Z#Jrh;XXa{(FD3ZRG zSUN|66WCPJ>^XHT9iVh}q9?;?w!zB0ZraFnh#t-Z>{iMKC@0X_X{190F6P{sBLu~N0Qt#)@pO8679#EL?BdOoyWH`c7YNu=!Q@syCF>>MVv8(L@q=H zfojYV(t~!gyr@82Un}_j?2`;wS}tGxfj5v9>+4n*b`J_Df;Afmd_AcamXV>+g%C1` z#VBQ(I#`tTI>DSWNFJy3fiNBOe^s_oI!H@X9iXCG=QpgdI_U2}WNZ4L#Dn6FQBFLv z$AGNJzs~r1@aXw7;Nkanjg&EQKi{nd%YAbrp;_HvO*zRzhUEjKtNtjXbyG-HoHIQT zN?5W=f*F&aXnCspoyFz3>hxcU&70rSfMTZKe3};mV8Q~AYE0cSL*hZMU`KQ8h(pZs zq5z?jBccQfB8l+KKSn9VV?nr>!Wv*@Tzw1AzXj-9e_FN>46o-Tv&$GpG!IcS2DBCZ zg+ud5*cycj=U`%XVR1Z3`jZ}(E7U*tRLW|qfbp%YmLIK=lN3^}WmhtN!pX+-3XHY3 z@0ES?weYx^G4qH&HVApp@k)O64~Uu~Cjqpr&*+~{o;6108*xjs71JW5 zg?zbsWzAk1gc+bEPF8Td*R0}w0b;Q#MyGp2TJj57d%LI#=8CSHZ0v>8Wxe_>yokBa z@Hi0#_U<}&uHn=fzs_yOUS5)(yA2UxFo01av#1-r^4GRMv2dLzbkCi2dg``w6acM2 zW12rM$UQ978k-x2$V++bGGi7`OyONk+DOD^o4fUY#BMMEzZz(W0e$)uRgQ)saDt;a zCh}ply)5F+Fy*9Ub@Yoz7g0h(Nz7 zs?8)u@Z78QvI1*981YuaE4=i&8hazVI$6~F9N=(4> ziNPw32mY9c?~{c_+%9$q)5h#t)vWENpPp7c1<|59ctV zwk$LUTj$a|uh_pVgON0V$M`$H4=&0N^UaD=%W!WC4r9pmiVmTG>$P)9a+Fc#U7h4jIR5pOEjtFP_(oyrgGHr~n$NOfj2WVj5&h$jtpaK)JiuiybLM@@wZU;w z_th@5_>6jt3>n}4vSb}&3fm6}4D{Fm{jh5k`=AH%LT6@)Tdy}4x6d>HkXxnqyy^x4 zI(KuS0t!M#xV{6LM<06`hS5t9=D5L*v>KeuJ(lp;rUz z`t3Fg$E0nLn%5a91HcamC5L@>zqv7XzLv2 {=MR#42A-1fgi|MzoSr{B8CF7<47 zgxg(u00*)+gI1@II#&!Qt)r=2D~fL`J4_Bj7rGCkPuEwxRe|~3xy|}JM%Ub0zzTmn03Z6XUs5}4jUxCEk$2lt)0LE zMI0?V;fu?23$RhVJZV-V3dGcm$F&g~BG+t7_NVWLk zQazM%@HF>tz+LA(c&ny+ObtTOv1Shs7kKMpuA7r@X~1VVMSx`su*vlS!4-=+sVH~W zlnvqF<)0fFm&@jDB~-3dXA#4S66oaAFji~^&5Km@)r}8KqY7fx3fFgs`jTE^xg4{< z9IrQtweZtHe4`2tN7wN*@I#;7GIH{4P`ZogR=NoQ9NSxPu2H}&>-bpp`aBw`>tVHv z?O$33lO&D`Dk!`2F9)&!s=z(!at~=vR8Ch*jV|>ArwX{2L_@nc0#S7kx;RdI%hm+% z86c$rY-l`tZtf@7ccKu$=Yw?rVPm&TrEZbN6}3+?^G>YY%#8#%DAF2XqRhcn5Hw_b%6ah2nbbGqK+`C>;vNKoAml%(ir0j)2?ym#$VY_SFIg87My zh{0Q7DD&AE5Z0|rGjS)5g~w17;ds)313w65vLk^*pfHqM;AiUz1pnKciJjM74uz(| zxy}&U8U}Vk;Ruh@K4^Xu$m-{|?%Cs;V!&pLMm*YiP_{bEMYPr zD2Lr$4LaUYrsk=_UWI5-LQ7P8GTc78Tq%Rd?=pqhs_3yZ*oiuVJsX<$P=+vH+ON?0 z*GUGCU6x~z2xl5{+!*iYy6boPbp-_Y;m9@hlQ>@$d#`dX)`5XE4CIRpQf>*OK(y?6hZ`jZhe9k^}(e|JQGPORTdMzM>Vm0qTZ8M~=K`m4{Us}nUqx@p#E`O+P z0@;{~hHtHaIHItPEAz)31%>WA^(eWZ_tO_}`5UBNY@qdjnU*IRv>Y9rm52Sm7Pv=8 z&SjGuwf9u(OnO-ohLBvCk|TV(a;mqgtcVBI{wxzynklyR;>d?=gh%WawckTqSZD(#e z4i+^uvWFn*w^WdiQarlrv%5aysE}v*ZHBtY_T$^61S@x$Ut{aIwEgv_GQb{P2K~1r zDtVe6nKWugv~oVYqB^R*d$Ki_qS47sZiXF1=b#LqWQwY$c(n@x;@lfO4R<7If?uA! z0(l5bCyCf02C$N8;j3peK|$gQ`!s}V;wSVjO0punr9a;_>0Qp%o(Ems!5-B&tM8M` zp%K@8RH;Jmzz%&PuBY&=eTDqU-6*$fHr`3 zB!l)0qj$zFVIg_c1Ci-V%giSh8YzFKVpOT0`v0+YPK}wZ;g*eU+qTV$om9oPZGW+C z+qP}nw(V3ZN#~rt>)to(H_Y|CbB@v1UCL3?=^%_OA4A8DOvhFcYvdIc+tWCp0FFwr zNHDR}PEIt7puGO{RqZfwn^R3HH9+R+YbB;WRKg3m3-JR00j1RW!~2_KgUG-dL8*6D zx@@8!-*@Zn8enDr?0U<}Wbz+yBkXu|PUJqdr>cm{&A=aba%+ZrZVxP0lRt1!QL^fK z?VWg)PE&8}ZY;Mrz*@H(i1Z!<=Wy9&e-C)PJ=BFuqRkGRl)B`8r+yzXcjkF9mchzG z&C?of-nIj_!1CKhoTB$bDroGeVVSp$;!NZ=FRE%?R&|&xd`>ZG2L!j%YxBU@_h+BJ zP0wOQ0MRQWk5gFShe>`=h{b7kIPqz-)WfmzbvfEY(1Eht&#P6Em))t>_hE|a{OMlA zlgtna!+N>Zxfg^n_>{H!&a0+Af?oSkL9lYYJePovx zJKD1Gb~joIXqgp!%O2cV=)!|wtWO*8xFgLH1+FZbc8a~m2lca-)m@!ALc{g?Wnw*HfkPM+|M=q_rjfL8iYh> z$J+Ii-LC(y0=N(oafY8{1f&Ck^;iG|BqTcU4=kz(GD|f zfYCwKz8Gy2$bckJo^X-ldUAxncaX8lP6GfmGaf+tuk3dfGU0WQs@qLd8_KdTzPP~aqq&_jPR1{IXKshVg4?)ssoQp zBCD$$n~diat`d(O!>u&PCcZK6$o_P&<81uteQCckTeMkIj15LD!k^LTscIpQp&}sE zBB*O}q2gBn+d8b=S;oV?;EZE#rW+6Az2Md$!8X05nKAokzg>tP_!@n3BKk`=<&RP)oUlVQ=Z zJH&Z7(xuQ`4R0gtRXl) z%nk2tqcPT-U)Z`Cy2YQ|YaA4&<2S!iA99OrcnvwCWQ}3$XJ<~-7r}=21#AGX9h?p! zwJzbW3*n2kh6v$YCZT`4h)i|VK2U0jyM0C|YGT}I5!a=81ry?X*|p3ghIL1y|A zF!gk&Rru*ct>dz{$i@3KEutcp;n2m$&nF&p%E8hOt^Q&D-ceM^zWJnizgi8|yY9y{ zQ|>cE0nM8|AaNEKn=pcbfk&6|ATcisY`{%E=(CDQMo6~qnt48YjA94MwqCs8zmuf$ ze+Z@rI>pRjto}u15N$s;y+o<=cNd zBxMs%RvPWSFgkbHmZz_}zQuVfoIbCmzW5D*%zi(X*eye}EMKJG2Q`DcQdSQi-iw!cP2i}|T}NmSH2+>_Ux zYws$ad`dmAMAye_5x+{jdJn4m9NdmVbv~ zip{$jUDsDJ%4UN%8waR!PpkD7fKo~hF4m$S(T$05^#uZ?Grwlj5*^0eG30YPeE+Pc zzRzu#N|1nP(d_RiT0+rKE?gUT+eJsZ*)|^F9cH7?FD)1Pq`tU`;#9ElIZ z8hpFs-Q~gb2zVPT!To=H26Ss`IQ)q=;`t_Fye z&{oXW0Jtk#ZuadooU(m5-be~xT{JSfXfG^3&kt^E1@FdtoSXNP%9Pt}B($2D_)nBp zuwLg}U5r|8-aV%i&nmrcTz&oC4;9(cx5p3-k&!0YkzfYpPG4f*-M?ix*+p@j9ne2L z3@~C10_UpEB4}{3(5|%`F=*v}%h}MXF&m6q0tO}N3`fDZB+X4m!UKp4{p(OkFQZY| z{#H*+M-g)8c&4J~;D=V($aPKyA~{4+lBryLlz9bzlqh+r+r@n@ugE-6&`N6?G{-aL z{(+x_Eik?);r<(J{~$^Xdp>J;wR=swy1PbTE?TJ?4mw%2nw-WCbv(nudQe; z1qUgYx{eYVdh9CJu8D%LRgfWr^J!u8-KNsIhGS5wt&CcdK#kX!IfLT>`{6w#2jn&1 z9>Z6;HE3ow!r9)qXNy)56LV1$I+CT1_1hnzr5o;K<(?&~=?=J1;l~`SQRRwL3rMH0 z5L8US)G$NB@fFoDUKP`bT7Ld}b_H=T_$JbVFH36s$7Pn3oXo({K4^k>;ITdwc-7U> zolve`BG%ogD30s)X1uuPy#Qk)~R1`Aaz$_RW(p+)s5jIo|jo(JHaNNapCChq6z;piLw*gJxcOt($ z!-Kc<8%PX22}DMil%nS%eJSu$y2<$kcARnJ16^oh8m0E0t^^2bR=V&aV5&r@v-Cnq_uKo3c%cQ9qV{l z-dfcMPNCQ!_jRXgGeSAcJ;uUwygY^N*H9Sfh{nFsYPMSZx;?mXrs}P4ujbtOckS8q zCQ>E8%GrU2%>#lX(`XY{q|?*q$w2%N{$PbmI--V&-hq^n`_p-L)63~YG#21NjP02Hlmm#t27C=f;NF?mLAyWFN}q#3BYAhRSqB#GhKSpxl^_|)Sb6qO z&J0W$fm;LvS9as~nTjYhipkP@qGNjJNq8IH`4ii`u}$tDiYXMgGBIF}WesSON13e)o1;sStr|I90#>^U0>D#DqUO{? zQ?e7HCwC@8b3oy8K!}w2z(?@UzJK3IED{ll%8JquQmUh7%fBh=JHtluFbxDICy9}C zP05yTcdwFcUQw>zUl@B|q{nJ(aUI=}lWKq3 z18&=Rxg17cPW?qk0iqR0yh4suEhQRZEy(1p{?mSP^`emyh9}c~3I^y4)Oyk4$hmw& zaUmDrT5K`oUaUhWN(__{&z9rZ@J0$sJaX5mb3m$$NiO3_Lyec=p$QCfC=)p;&iNub z(j9%71`FVTe>P`tnd*UMMzdf)z0;^d+(#f(3}+<+xB)yuz!T`2bYES>viTBq{lw+x z{u+PNb1KkxGl_D+WWW|@x_jo_O`PgE*gF8H3#)-lki>YuFpeA{n2wnKL=@(ks}wS| z)GHP97ffmv6irSctnyHk>Xwh73g7gD@8nlXl+Xpa&P4gGOsZPC9JkG_pcGgrq}r0xQml@;z=Kf2MRJN3a33s^2+V443yu3-tnuOH^{uvt}SoOzxHn;1JL$v$+P>s&)wg^!9e6#3zUe?7L+9 zG+1>{xntZ!@#5+*3I|FY$Vr5nvSdK?dn&G^bMzZm^pf=M7u|65uRJfT?KrR1(_+I#Tv1w5 zlnDRefjI~*%tTW!3CZ0)!EY1Llk?C6+`fvr(G;%zo*d?h7QXQbK&h#C!_rTSO&RXA ze8mU8+3=pJILPE~*Ws;j%`UApIHWKAbfLb0PFWevwCu!&nfPX!wmIiKgJ2Pv>w?lD z67H#K?|hK%GT}qiLtwhZl`n+a(7^t5Ef@+V>02e`@>}Fb))hdIScqq2Z;uED$Yy=w zi6y&3g?c$tX_wCH{1IXUS!rwHq;F%6Ed*TujSxBxVZ1_VaXf`p`%Tia3)?kNyij(w z(af2?XUinmmpUS$vHkEsD6*<*uRd-#dT|7-%G$-&Vp>J0>ds=D@i(&^PmQH2%=+^Y z2!4_CojU!4R?hXXoo5OWqADjDfKx@8ZJ?ML4mn`OSqKHA0G0mM1=TMBjR zUYOBSjh6pR42&6+$}QeZK%d{C#Yfuzi84yd%Vd~5X^uePt!b23_KHPC_1I_JMV^2x zYAJQmke^ZY;Mz&AD(Liv%{t278p>eSm94o}vr{eAZa?q?)c-Hl5azupKo~~+P7EN6 zn`{&#{Va7I-x^_HmRrvjC}laPl`TJxPyK3uUHOmBF& z3TgOMAM5pV3s!M^kwIJoKsjd3yy?DLEDW(^M_ms<;u(&c3JHWB3r_z<%oBaOetFgV zez-S#Wnr`?VfJbqRr_XFT)c@G46hsh41B?Ta7->yV4{g)Qp}pKo4>X-Z;gXSEl)lv z%!HpI!R{FYfq>5qlN1h;#q8r!osK8q%v>OP9Mt^j(dz7adwBU{NDq4d*a5HVhCt1tPWp4}k+i;pRxLMs zDRQL-N%(5(CQ`n3o9V|dE!T|@T-a%7LK8j3R+7CgmZ zf32{4QljWCyArVze2pcNgWSjE0sgS=HqxX4GmIv+_Ch!ev1zDOEL*a=HBaXs z^82$#?R7Qx)!QrfSCBZKdEXm-{~e@MI~q?O`}0N(a4+acQl&iWeO>c7P@75gkV-+EIfHf{U2_x2R~_(c2I1+_JH4l^2I?-8A^6v}?dmwm z`aP^bDsZ9GxLar)y0H;{W8XVN@)Cg7op-8*=joK4xb62ETe_(S=z0$~lNV>RBFMaf zpNx+Hl;aId%C>n!2MLy@&DvglxSs|U0rSTxKsX#&^Jthi5tIW_n{zL}LQc-dC{zB! zI~~sC&h~~FK1O2`2Fh5{e90K~RD&ZO2W7g}J^!=BQhjN>`!Idkz$w$$dzJIggZQpaf!A_(Uda-okxEHX*sUwW84@93|jrxSq8j zrxOinthi@daTv!%${y+q%NZ0mI_yy#8lK z_V2VZGX&I_rt5qbZw5nD5eR6U5JljqIo3e1tkPjN;MI4Xe!26Byx(-00506OFNLXI zdQSo@wGttt5>(xep>}sas4k$y29{IOt5HVm$~E$0lz^D((;bV8>>=W2n z_9R`Oa+*|^+TrK;CynLBeoi}!38~Ls`GCNNarI|g968fOTYOQk$GRMA8$P-0DuGch zYjQb)5Cb>O9aLXkXaNyt@~2-%x|KzEE90;9#qoVkskDZVm3Ih*fL(?qN?`mWfqVdz z&v|vuNcR@)R3NPYAi9sy&h%9sX8ljP_^A-n^Xv`?tTpNH)3w}kVrT2sU>b`)LJ>D} zcLgNjWd<_YMnq{b7a=TT+R+jJT7tijrgRsYs-MuxZ>QJ4^hH0JBtfcA{WY0cij$o) zyzEg3(XgCH5^LtHAIgDOxG`JDq?gqRy{0I;l$f@u1~3T)0O&B)beJ1+ObuDFsy^Yy+j1jVne0z_S{;Y(PsF)2u4vP={WyZd?dc zg=#D2cbj`;tUm zP@(Y@o7r0;fWH-KQSNKO?!QYq2-7S1`IIdOjUwAmp2MaTOc}I`b#wl*p%?k5{-V8v z&?T8F-p^|1jf7G)sYE8-$sI&%VN_pOwX<*+5f=votAk(5m`p)}F&W(!0SvF-ja7hJ zc~FbKd#DCY%uy>#$4Q`xzEzX^)h>{|K>fw8=-^`Q0z@5&^xCbMPY%G7#fZ;>pB>DB zye90j+fz>Oh7b;oLCLlkpY{Rn5tqi!#6V0svSe;4+JSNCDk}8ChNk%5#=PcAsZ*S0 zxypTXrq*EYxVshB<)#WXSbpj4c)Q5_v#;+ER->{qmqwzVW*9-unO5ey#;*T>D*#87 zOCVk-2h?;Uyzo5`F^J{3J3M>`dm{KpBn+w=kbJQ%Db)dH8G=;**8rvzuo_C?(VJd;v`s3XC- zjXA(a3H}Mx)A#=R*SDkm=tPGAtSSP(%?36MFMX&DA+^3#$@SV`G4qM-R8#)GtIuty z1*mySy4{%~=R+>lg~P<{t?sEK?eVrAm5^tT)l_FfFB2wHG{?YpBfJ33p71{90F=d)B=~x-n3zQMR%17^*#4s z;NgehXW%hvvM!7JUPs>uG%>>s+82iJq`JTFO<`KNgnr0sF&OmSzK2|p0-}b|6rY20 z*G<7*KH_-)hD-?cxccAs?bLH=VEDw)6Dm+H_WuhX>ekq`!{vngfe+=6+8{PaDxrXb zf&T?vhp-l!doj?O4<%#Yu+G-`ah%`O?v6GtzR$FuA7FvQ;T?a-7f?N*Qae;Lv|$w# zrro1Skas5F{c$Yjksr5k)<)F@!MZ1NO+cUBL)j5SQByb5)b8I+&Vt~(%f^C|Yc_L1 zD-s$5#FXXH(qN(bh*C(9oTXt0WB|FKOwzGDNog?I+9w6Vmmq*GZfJmh)BF?cH@i$12SR5+ zAqkeB=H~#K?$`56x-l)!=B&@O0wK$$fdVZPPzB8troo|kn{C5u1HUC#ofnH&?e+&$ zM1Q0)jd|U$WvWkw1J1L?G)FrNOpB1t4~#kgSKWEv(ytW-NhIs6sAnV4L30#z9wWYZ z1UOkvsw|-d3$;0?3W~f_JUO9R?CLPYqBv-OI#;-C8pei`HsARTFxJTFWfq846KkRCiF#Vn( z9o%&qBtmDhzZm{7`4fjhBL`#{Ua&N-*S5jQOp|;~Lt7Eosn2i(`XQh@kqnllK^BS( zJ3~*V)8eV^jkjl5_|p=v2|_`!EP`m)0qz1fDY}NmB#nV%}AHkuVc&i zRqHQnmmhP`Cj}A7;O4u+WA5qfJQ17eV`}7Nv)5pPx0EUDLoglR^68Ss04DKXPDdgt zC*b%*utvA`M`ZPJ^I+M12dEX$sqJx7$eFrh<=1WFwAYS$T9^iWd?K1hlric8m;;Zm zM`P_I9HI!l+QeZY0zD(IF%Twipnc~Cl;jC+=0~$@Qhw$&rQ>1w);(M%R%b2#<;-mc zi+%@5mo5HShbT8VQ4qWA`mYVxgrw86HEOA~80tWrf?f_6C$*Tlt2dP>ne6<$fZnv} zT#@`?M<1hlyWGu*?JC<^ModlsKDI01v%}rZ<;(hc-Nh7BIHYz;FLZZ=&wi=pWbcRp@Q4s*E1rJJ%EC zfyLL-An}0JJ$V1-fE0>C_(oeAUno=M+vB_6A;Gl!12`g|-( zuTAV9uAIRuSo<5!sLH!p{a0Pvj?)RxeEKDsBVJ!!zu!|+IBGc23q_O&1n0$Id;RG# z|LBgxuD=nf$*&j3+;2C4ly;9*9%m2k5)1mzXF;eYHX=&>g@m+3Djt~}j+E5a6r;6D z|NRhoJSEtNI%Ove^GGgBIA@uK^D1_+4dd!x8rAtFD9rP+YOAVUJ2i^0oduM@#QmQU9DX7X$?ufBac-^Vr#`_MB@7ncxaw{%tRE~n03IpeX=KQ66_;G z+jiCyg0ugf(0Uj^5%Y`l9%BZCcf=J?H4Yn10qEApt^_DTcrCdfJ^k*|J$oi;YBjjN zvI>PzUuP_V#qW?v4tKHKm-1QyqQL8x?+3qkomm+WE2bV4M-zPRxo{7Q#6CC26?gou zVd-NoP<7Jcr%)F|$bZeDm3P|h8ND%8@#*#U#{d0F>%1%yuGjh;I`NX;GV47RvHf7p z%O*yDzz(o}uwDYu`6|#J@o?+b?9sz#yp>2eZ^ZYYt#Iv>7`q5O{s#W4dANo}9vMLu z@s|-HE>w9Qo+&M#tnC?w;GQc@k|+E{vbN3B$5evkaECJ~0!y0ho|nIfz~=0(*e}rJ zb(x@9K!MP+i#{%wWx~vt-y3F3Dtk8Dke`&nRRbX9?nhFKTZ(IOz~XFO4wUNB3B->V zbCbMdl5Xa0!+Bi{1f^C9K%ic(QAQ|Uie|r}ISoUj30Q96t=PMMk!QgQ=%}QTsU~z> zcpDp3+cC~Uqx%EqB=$VM1%_=pg*cga{bdCs_~h_vHYXx`5>Z{k<{&#J$HMLa)==)* zr(!VY{x!#l=mnYIDP=qRILeTM@a(YZ`&K47u;-q3E<(7AifYMa~OQ(~l=x($!A z!0Vn{YZywq)+l5S%~!L)HB?wzn)wZqe;h{oAEz7EpF$ZbC@T|F;vCG++o*jC*4^Se7d$Ybl7_42m)p#ZVwN9ax`>5-^my30y16D z{z@e=q1H3y$Be#MG{+2XUA|^0NJhen4-7Q^H9(ihxw*T|GmuE}w5_dzi@ihjD6y$1 z9X9i0Lz(TTNzz#Mh8YlD^|o8AK7;AXg-AYEZ0c4~nUxU$x2UrMOp7;n4XBq)dbrw* z#9t^lO;iNlG`rOCc99bY)$5HMPviJ578y$^pV;I5E!nJ=G)koe4qxvoI5b{zNZ2~^ zO^0Md9f>DIN8UOza~Q#-zbL&UC6ldGR(q`OUY>x*NDeFr>99^vc zbeF!nAm}48bG@P$z_=Tj;xS!R2(^R;rp7UFwE%iJ727K+8=gC$-x3k+i4R$yTU5N} zI^`6;=33n!iI5R(vA(Qm|1F}{d2(&uFLejFe-SMGfw<`8v_cV-Lt*hXIceDdFu!M< zbHIJEzM*HaI!fFQiZ(BO@AhH7lJ0Z|XNDvjudXD5Pac{85stHP{ENyuTGvOm&U1o8 zjCK2%#JCbmAZP3?`vMxe|>Dimq%~f zv7WP*8SosbU79+3zZl50ak6{SLgyg*DWs97H&xO-aGujnb|9ezvsqWJGfDqoOD|4& z)oL|Ih|JLdLYRnmswb92Ktre&`{YXui!`c5ZXvZR?q(N-+nFQiSg`|)JZhOPz;@<2 z5NWw2RM1pJZr7f)ptSN=A2=mC`!<_Go|N<7ZqyFVYjNBo-nRH;+3)(OhN-GO@l1C1 zi0;}AoXr0cq!+BShQtN<yF>$*s(_Eb5kh$1CK@ctmk#iAOvW}R|%O&{+6P-6fJxl|o zWl3t6FLFdUr&{IQdZqs;*l12K%0-_c$~p}gY|}6NIrx0|<$(f)lyp1?K{4o8xU~ak z!*50jFtO!;BQ|U}F0KvE(J4l1(|Rs)P}FP8U;DtVi&D^chPh9EgPYWoh=fS=dRDXu zAZb#_aG0(ktsI#=`M1ZQs$`W!Cj^>`NBZPD{CMlXi@4kC`AtvAvlB=|3kKNiJ4t3v8;#HUqCYw^Cp>U_yxtC^)9%k4-|H-e0@OwWS0zRX3I*ca(MT zg*&$gI++vMB7bnZOzgc^F5Y;N@jGQd?bD~Sd8CctpYF4na)|EBG%aowQ~p)ZDMbE_ z{RYGRHu-I*%rO8t0;@Q>)6{GfaUgaB z)No1+jR={UzhfcXQOyonB7f>?MWu7(n=&i>vta?zELS_P&oJLCC8ym+u$~c?ML-uV z1x0?7Km=p)8xi?qp*z79MOtC$sKlBGaFvG8BK5*+FuGmdeQni#6Iu3O!4B`#9m>dB=%~b}BmB8KwH3a#BYw?;%DT zzHR5aYBQ#ppZgjJ+l_XDs&T|63626Q908ZH%k2-^WBA+lj-m(H;zXBrpUwRXz|?{7 zb}g-j+=2D9Ag)pxhDAk;?(hp{RrRUCW-Y^Rd`#WB#+_e59w18t?>-hCKqE><1A>BT zCqesH1^?|T4rguzoK4&Io9>d28afTQRI6PKiJPcKi&;V(u3_a6rZFlTi>O!HZMxw}f~h*Gr_b^b&|WeBqK8c&(RXQLOeB0pu-`w}`d++-Wc5wR*uM7iK@d1)HVX zBSoVy(d$>CFm_^u!N9rnFFM`zU#_}^-hD0AHBr?j*jnUHkh#2tn&}4nfWE&tNhZrJ zsf^LS12PDjuc@-x_-PJL;EvPCnR==D_IeCPBBTV&-GteOBb!_E7bEhMWMY{o{W0uG zzA30b+&{FOVDl!B3(Y(K4$G~nMr`5vVh=ee@eS=FxNTNqjfv0IY6m>r;&AZ5tDqeB zs{SNfxgP(Xbn>grHs8`50Q}^4z!S<#0;dUco60sH+p~~Q*%e$tI+L@hh&z!5RR(Vn z*vy@;p$GIk&r>ZGY#*|l>TR8C;cO%by3}I@?DtQP82iXfl>rIsVQw? zAgAP>%`*qj#P?^O-c;PELL1G=y;FOlNL5L8n3y_c&o6>*R9Rlf0Em6VzHbm>i}duh zgi>p0P>DfIz=p{g5T!_sopM!3Fvo6#i%so)!5gG%eRQ(M^ zu6eVa#nzQctnV$$p2D)VwF#9jWl@;wSEp?SE5Lhr1nO0pZt(&-52Mex715Fp0C(a=wg{OzxF%bb^(*QjBlr-7!&?>vTlqT z0DLj zC#AX;X-i=K?jOCj(HAYQ0=BN_h~ZL`6Q9K;JhI67?#Ls)-%qlMToC1K!6hK^;8B|i z7!mc-AS^=Ul+UjKqkPH9}dANLL=GFQS+io%9fje zh&NyzQuB~)fgkHhr`WUEMKd2GFHKRJfQldOiR$T5Vb?lL*G4kq*5$2~ev3F%dGW9< zB?Erx$3GynI=OEeh>?F^PhB16{J9oCtsT0rG({>a;#3DkqhD zkMgm+{C>Z(APSH54!4Tx)4{Uwn^7%BNrty;9TEVG@NQWI9&@(pb6Hv9Pk_6q(d=@} zbC$LJ{5zpZOAllU4do-+o>P7VtL;GDl;Zw8-0s_VO$~^T+v_Fz1sW`TSj|Y7ScB>i zh!*SVuuo8{%9{NUKqFr#;hyv}RiuKBRmX>z5`?AA3_D=VRp&7S-1Jb*b6O-elF8qz zFDqVR1i$G{^Zq@0j87v4+}5l#1tAIYQVc5fZid^<=j=M6L@7QAF!KE!WYs?)1_4od z4I=+o=f`@nU#Fhj4~sO`$kH~i-*8*98Q`i7&b!G01!cVmkk*ffWaF$6U6|H?-TM93 z2!}`2njt1nN}shzeKvuP1 zE6$CV<%LftQz8js|EGfn3xw+ls&syfOhM`Ly`tKK=wG`YP%U-Ua&QCR8@3S;rOj1e zG>%+6n3r-opo7%+j0lUz5lnFVGEk>Z3EUhkl=f_&(H4P6!IT(iJHu!90stEjBZ2vv zaxa!3f&Ek64P%J|PM`CnU89qV+^fF6aCO8|`4PK`6y+%!S2?$`A}}_^od@5iFGY2(bi%nWJQs)7yi_Da@uhOUjMAhIL{+*#A30ZwQNYZvl}74RPx zd)0k&d<%{FFB#(*!8d#2-KXepWmBO{Y-bwZ|Cq6-^!GBK(1i9NBaT(T2^PCqh87$U z3|4~=^LSe4hZsm!c0F0+NTph9nw_d*1cvkgEcz~nLTD=$YR}MNw6d^mAdRirExhgc zF&cK)7}g%@bgX%K>9o|RQ!Pe0bQa%q3~|yi!bVKz2Sg|k2n0&p3&9CN3k5qLVk-g; z{o3|4??eozt53?>eK=Y`=y3&A2eX1@$Ut;cWFN#-r++rr5(MmzmmDr6@7-k!g9xes z6b)!`J%8HhPI1yi=lwyE{suJ&FOwpkBN&!ZfJ`q;9lTU<@+w zfxAd>WM9J!{*0VTY|=C_@n~~P^@*m?j+Egg*V12dAD!s^^S1E|hAPE+66)pxRE91M z@8*NBOxow#-$W$Yi+m|X&oJf_8Io!fSYk5emoyg58vdu$k6k03G^-OMuvIg{DIa(_ z_gsNVjehnms2d&+5{gd$DsajIfMs=*4l^imlr>r0s0Ihzo5*-CW^r+a!^)^ckQ$~U zMh+U2&?$drLYAUlGjn_ABvf09>Wd{p_$mK7BrlGSH*^JIg&q0ZT?o7c$)6;dJ=u!hg%3W}Tu@h&8s zz>BwPIm=ITrKDyb+h9bjzk=$thSyL(LHl_!$E2R1M6Wb*AW!z&J>wpH0*nzTpUkb# z_cEsP&PE=yDDun&Fw*_HCb9xq<*rGK+CNdg!R~c;z6go%;A0@L+xp}n;KWQ-;OXj2 zN>1nqgwdzEz#Cvfsm}#3clDuHXHe}Wb@lx8 zgf8fVux(77p{LJegvh0gQG!@|E8{D?OpM0Q-mwh0*{VVizL;wmXC8upX-DRwmw8oQ zo)1lq-zUN;Oa}s6ZrxoV%LVT5P3Ahfq=;ZM6ouuII?LSD6gxisIV%dW2m8>bjM!+|tpcP=>{HjT@2WViDIUqZ3IyD|GH;pG;&Cp2^XTdVkzaWn`7c z*#C5zfrNHHLiZn*sH)NuQPdyA1?w@P7WOa-;U-P~8eT%Lc*YIDE znf8tqF!*|w5I>N5=OCU;Mh&yWe8&D&tcomgW^!u*vh=hCpnb=W4&0D&FGiw-K9D5_ zlFjaEOB{SJMfCFevuhoY7ef(DnMq)oKSWTHnX>*tw<0t!qnU0_exXEI_mDE&FC-tB z=}vu`AnnPxV-U=SXIm8^R3-ZK>&7C-YP;Yw>B#vGe)S^FRBX!cY5t2!J-Q3%vaDl( zR=P(8u<>MNfamfQh%a>vGx9h4j*oH;>tT!;<94GF+q;B`Rh?iTj}C?l|Lb2nt*}s^ zQ4mbv<{m%(9`)zcAujnqmrWSxwmo{y&bH)-UpQoex%Korh&53=dXDeS-=&uL(s%Pgc2GM|edDgshfnmQg|h=!Q8+u;SUAZSpzFxTGH<4BQPq zZ$Hz6+>o=lQx`38$)CRUhe}bOyi*xGU1}M+Cvmhg@6WKq#->Apqm)Roc7kYM9 zkbf$qhdYZ-mT@{J<+v2akuDObiSI+Y_skbgbRrQEVu7Xfmjhc&U|3dd+KauU*I(Yr zGWX4f;<8kL>%>JnE}I;+I5D;OVH^{^@ekmSd=a*shW6Pk4vc-3l!qAiU;M>93)##H zX$Er5N*m&+4+jyUXJK!N;9oV32kpdJ)5qi$xsRDwr2{hAZoX-S5rZRg2is&VnC=Tx zU1Hi^c1v&kK@Vzbq3)dDKKEwDS?|@RjR}MEzJ*1Alwdla_L0rIXq}?($}US=yGN8& z2LMO0E=mc)S~%zng3BSUBGoj-QBG@CIfwVOEBn^cQP}Xwahs>vUKd zzFut`=_eh=7V_}`{FHygxpYa^5@B2HRmt1AX(96g9~917PmRZV!DnI`3Qo{_9CF;Q zmO&$69q30g#W``&_E4nxw*X?e?@Zw45Hei>)v9jqxPGdj3)saW$*%?B6}>eO#krZT zy)J3Q(t=WJ{oMA145l>b`}$=fyIa8TAQ1{=z+2=Y9{Ut+gikV!O$~FX*yi~9&H4;L@}_E&Yly1oJNX+KEj|29_%=83Inh@e zr#XL#K*TdI4rD#%uRKaSi9@Q0zA!cdCPTF056OVbvRXqMx>3{W-rX~zI3RslBS_-| zKe)hEYVvVMN8%}D$O2Ko{9t@GUX*p93gFMsgw7H` z{GY&&2)tGPPmXObL67QxtHHKC zQp*C`zy4}2vqeIx$TbE%=_PjC>!Yevj`qIv&#R<35%bE9m`-|?$Z1!%5dcxjAo7gV z-R!EuzU;9fVd|Y+eB6cW9CO* zgE2deT;79PX=xa>OrknoV4c$TYn_Ch#=PYK$8;abDJW;XHd#q@`X}x3XabS|)cMk? z+T0<)+mg7@(!Q7%;r(3WA`juT+yu^p0nN15l~m-IT|!nSqO`L8#qKQdb9jN!8~&O& ze{5;jn8a+9vo@MjqxYVvNqst41!IziBQXI)1xpTj68 z9;BSP%SGauqn+Hw>PF_Fcjn6kkcrCUogU>gJL!fA8axgR%?jZUP5(u5N0Gba_h@@= zq}zkgWz~bbKo%)C8b&S@(b+#^QFO_tq6~f7R!MBKBL<#VNxGXR&2# zCQ!)Jco4G_V<5#fGz~&~0ws`bw?bfT=o-mwO7b<&)`wnm_eXNsK*HShUhMYDF||-} zEqW=XXj}0z$A<-u;VnK}cB0K2o&-guI_yTzloW0W5!ZqaKyYtO z#!m`T*3w6rJ#IBck1{Oi6*4eaUiXw%RBAItqK;BA#`G}jp&}A# z4V7}b3nnWD9y>JCICoYO0Iju%Ug$9|+*_douHB98G>7RRjUml|wwtiV;QjAw>!w@H z*}3(Fs4VQ)ciaZzH>uAjjQb{td<$v$)QEOBI(M zb2|PGLr(>r?Nh^Q^Co2Du)mD-1?#Q<+Z6WC898H8fr$1`V@dWiN*|oSN$k-hsXCAQ zG>aPXtXPfs)EOX(Z4YiCq_F|T%8(pX(r>U_CD%Tq%L9=B4@1W1rOXvu3gF_y!>x0z zXcQs$@(z{uqn}fq_`ToTFPv`}%<^ib^AVqyG+y*U;d^N2zx5}y^@AQ*hvn<>T*K)) z9(=>_KT1?AdUU!szFf<~^Czabgn7{ErAP&=x4q5L)&oH?g4Suje;PE)vdhX3>|;w> zMhJGfO$y=P2L)Svj-%wrs$wA~Z^CnW?^!3YlhC184f@T>1Q9LU4kT}ED>Zx)GAa)6 z^$I2y!1s6R{&>E|?}Tm8LzFMC%A8(b@UXDk>;K59SM$XMv+&O_Q1b19g0(X?8MI4$Vca&ze5I+lA9RC z^s@L~d{y+Cm0GpI7cA#+rgI8^-L<@<49;J^e#*fJoZ9gsfJz71&R_dgIsBHfx`h2j zeP0S`x3|E~?SlG4g{gQKHv6cgZ6Hwv-Pf7N_g-jIBDd!MSm(L_pTY#3lZ7qKF$RJL zh*6VO++;@XzNd3?fsnx$N~GsXWmFeYE8D_U?oHL}j*q(VqixR#WCC{;U>*QKkl=vWK z)u}O~Q1B?0qILXXz zF@))pr4uicfrWH_kgj};wyGAO-5chr`j;Sa-E5J@mFLSPBu}aHO05fCcGdQeYOfF| z9}1xE2I&(aClvV>0m)gmPnHj@6M;rHwXN-} zLGUVFw%26~#B=43CwG!7<8kvXlP#@{_bP;CDx6InbJQGFYa2ZGHn$j<@0oQ%To;UDPYd;Qu z5>qNUA~z=-lbo5Ih0AYZR(78MI$CG}ZCm?|QIxM5gF2#XxZiDj@0{Muh@*O$oWJ2A z9N~2F4!{{$ni=cMil{fnYOmSQ4>h};Po+h1vBLZHoLc$V_}FG9XSWks$8}1pWLv!? z#`bY<8eYsWd{lnbMAPwL+%_buMc>7$k8vN4l^s|fz&cY-%CL+r(Zm*Kx6tAN8Qv)Z zHJlZbnt80tPlo=cxBhx{g|0ZVyei9lT>VHv>5e0Gc+m)8P`NDO*#1mN+qUF5%upz7 z1u~LXhEWhW{LOVT;jrv-mIrmgQ~0;x=vp@?U8)D-`ThY|@*cm*_nMzYQ1FnUYqMEA z(4(D9dHq=8SAvH8FGrzAFY*z9K(Op6R%8ZjoPP}0W+28$6!B(_52F8`>djNM7{sDdW97SlJF~vK!UjoGEbvyzM`v#i~K$i zH;Z>jrWBr8-9S!AC9Dn6>< z3q=I~Dcg~XMw$$KnD}Tqnx|izI_d|UNxc*LUbG0R@y%eli6EUh3&SwkG}OBEUrna^ zhH;4R8|Ivg#M$2TAQ+fez!}V)kTQ?&vp2np1$jJz01sS}AbJ)T9*2OlmwI(>Y^==V z-chT3Z_QY_rD)H^ciHW}X9kls>X5~17Og{6zXZ(GF9uWp{(|jWjsx; zhFkt^ltgOD%56rP;|sRM=IT@!sjB`_;-^}<*Y;)?!e#Ner^G*%?;y8e`w8p3Wgg7F_!-J<+-fV#ul?w7BjST&{S_m*Bp!cY9Yaf zkjtO3s%n=dxp?m4_igc4$L&V3XMe7(QkG)9pFu7x^_*_$lhDC+Myzn_l3dbQP9O>h z&Q!{5!A4KP0O3TQkT!P3QQi19K! zpuF-(T3!2YemeYoJg1!0xvpjE*_huxpDKPkdX1M(z@wOQ^3>GD&y^`p<=kpGQ~v*e z;jPz1y{kru1!9+mpr*T+qq*Qz%MqX|A>{*zhv(ayyv9}5=76EUv!MoYYHh$T41FqLjvm7Nfetho=loDni$gC zd6`lr03EJYw{A`k%TD``4_f`4!yI48?`ou;ORYdx3F8fG=4bStzD@jagrvci4 zpuCy&s7EcVM~#Mw!_IabMaFSAzP1l}(O#`OtBD3rbz+3Z$KqV9#}p4wR{=Y~_Tlj1 zp9e+&I8^9Awn8SE(DSBvqIzt7e9FZpc`9 zD$bvI4qPjc9Z3uN33=7z3m_)aYCxHlCU&D10!yTeIvFSfA1J_~9seop%*umrY>J}~ zwr^YtPP(x?DjJK6a#86ymHJe#T|Mqh4lx1)2@0DwutZXhp$HdkoR(WA*Fpt^WQulE zZRV;4CuqGd6}NltFvdA?BOYch_K`DajP4fwLC%ZC-^KxmSaaPLg~w88qIKa+52g_@I`N z5HEy~*@+Gs$~f=zINz^2BH)A1e#ceGJyfJkT~uWI=q^9{Eai-md}zsUh5gGfK|3x9 zqn#S@FCMr~fPTg-;EQUlSV@Yi;3215AC`}*UoAlFu#IB|>3tL6SX~C9?%%cp$X>0_ zPTRc|4I0z#2mZsd>IC&ip(@}(W)3X{f7ss1*|->Qf)e96mm(d4)x2wp>TnX(C^HX; zN1Y#f)YEiEJv!;9sgf6mmN6G_``%wX?!>MpH=9r4-Z8 zO|V3m3&G~_=93E>P5h5OhT4!sppV4)Cu4v(XVEn^Y^*S)=9`%S^3)V*9;FC%bbyL3 z2EsDt$NZQE6W3&(%X$NmpuQzW*ne*M;yUbsqV7V14wKPccLFiM?cEJwzj(JjA0|EE9X77c znz#XlIqramcs@GyXQ>}UzAal`10LdWAWO+N?Z>IbbG3fE4JAOv|MssJf&IAH;=N4+ zPnnHq^q>?ejU!PmuJHZafuSGsP?4e|&e5SbJU%h!88$0CoH?i6uN!9U&8cNlmaxSq@#Xvz5ua)h=%Xh)L0BM_ zZ86P3*x2yM*x2a!DN5Q?Dj9Bs&To=4g)Ok?puM++_y@BChHLUU98EOhfug`50paB- z%-((|!`%b3-90mNsK2ai_a7s3eHmE9b{BSLP)ddnqr9u&djDvK@bSB{tLf?WMBYD+ z8T{9ip?doV1|+`SxrGN2Pi)MrY>q485tQ- zNq8VGU?2kW3>jbRfbiA?%1cYaVXc|c4?n?J#8?n#B^+TPI%nb&qRzOeIzHroXBSWp z_pb{#JrFbfV9X7yu8`><3{@AqfCV%I_|&)2>?@y+C)h)}$o>eJ;n(?f&ozQDn)#8T z{rTg@=QWu*sz!1W@?8FV%fUCUgaiRUs2~D?!!O_1Hm|kW_EW7{XQ4x;Q^5&1sH%&v1|~^xt&2sL)3Tq&3u%1d43Se zh;LLZHh-Brt~!wPVm~xGf0;L~I?!}eKQumnnJ2D*#?ep8c+A%wi21^sEMaYQ08Kh- z9*DpzmU#UyEc^H`T>9Ve>A!ICf5TyWFw40Qd140b9@t`u_ntxUb-ib<0R9*NKpR~+ z;0jR7`by&#=2V5&nZ^FF2+8@Z#o+7Mxdo=6lh%k}Dt^51flKcT6}=ij|56Ibk6>}D z`yhi^1iRmX`Dye8{bknpmXmnNhrHw_enw`qO^5YP2+nLu;Q%}>ms{{9Yw z{ylYu1X14n1upWV;T2p&ukI577h!047vn1<=wWmA7rhj5KSJUw;||*~7Vbm*Hi5#} zf7w9zc?9#u-q-?}`E5tSH_=l${k@>&7H=grJ20{PZ230`clY=C(VdjvY~%tFjMWrT zj0x!DZVTIp0fftUkupB9JJzg4FK{0;?p*hoS7ZuW{!$J5U}NUgI&e0 z!GIh(yn~BuxqkmQySo7f#$co0(AU_@e;DwK_eao7#XVMw)PXw_q~Hk98>T$#BDO!jO&Bpm@3_H$7>eq!!>TTHcp&&mwYG95t^_Y-PaTnNiuDr zGMj+xJ&WVXXwJJxJ7=i` zD-KK%D-Grj%GW7&Ta9n)g1w3FRS){rNSj@0g9qqJ{Of=8a86)@91R>VL6(+ao~ zz(()#B>bZ_-JJP{EfS>SnLOsNAW8C}%8^Xdfyp6}6HGN2q5f#ZB5G6L)JgXP%5$#4 z?}ynp%HiF+dSDP=egkC(&hWzR_{CXJ=)Z<{oEe!hvC{M)+eAQBt^bR+~ozv;4z^}w9KCo7C7mn^!I<-ofEwrR#u>hC4FdW2<=IVq~jWaT^$DzUT z#|BRAJsNP;<+}NK4FGh7q|690_M{Z6IX9F~dJZZ2IO6(o_voQ3_pa?yuR9&4;`~y> z1hXkFhh46L5Q3($VvucfmpPHV?x3JU%JFk4>D)L%`BOaCQJt_x=%sW0rZVhg_VmbA zlUr?05dho9?(lk1{PT%bhYMBo3m>WTgu+VR(<5Lx1zst&`=>+dcp~1w;+5D+sqlE9tv+hi1ZmI+4q5#(9`( z{B)htCpDs>It=EtE?mVWmqe?!=h# z2arrJ?;W=#dG6#9{ou+ey%lXCvgpyl4fkj=%GI?hvkwue76p|$ZQ-2k{x(8$ov!$= zwHpnuavHl(*+Ot)U$ZDdF@D|Crrs^leO;0JTIofyYpT2mNCVQcO_|SCOZ3bio<;=+ zsZ;g>=2W_Rjw*d-XuYiJwhwM62LEW(1ArDP@X%og7y5PHVfm=|cFG-gbZLL8K*Tpn7_W>}`^Jr5{^ zr4(@kYqoh^KGRAM>y~M!{?73JY1?~Sr_K7jTjuBe#dr69^$EcuuH9W z2ojMxONvA_1aLW%3#91g*0zON|71Li(p>j(leRAp*_NC-3MCB)81--OEDkxvp^Q{Y z?$dB&+BXWjx$=oJH0W-C7X@8)UO ziITx2jvz?C>eo5-@28PEHMm<+o!We*A4MTY3%V_59cg=nnnPQvU!IS0nUQoBwQWqL zlY`pT-*Q^i1O!f@oCkJo=ufUx>0KELQ!}DMC%bw}`u2UGDgv+hUCaYBF1orEN@$%@ zk~N5b(skf)oTVCX5*lS8;WS?c`H}bbnm4BEpb731e%$>$P!Tpf+J1$~Z?ngCko7h^ z_7wZkSxNaplP|=tulRP8DMY-UXx&f1y&+f{)0kYK1So%((6mGOme^oz!ELj+@d-ql z55CrevFrdq(4hvU=(m&Z5uaZ-2-_R)fai1~_&vVYq5jCJ(@v#!7NhzVV$G4Yu?StT zL;6kXjIh7aOzH3i{!nd5aDUEY>d6R?q^nn9qS02?!(B4G8*cEL-UzmQVQ(*^cBB`o zH}nhvz{vx0CjZSOA8FSm+SPrM7VqNxLy-Szr7S&EmmdTB{K+69E)N%t)QFz6f1a14?i9?b{PN`+3~ zhpgHZZsJ0jZ<|JlIggJ*nkR&~TrQ!^C2@lz3X=M#?(jeZ3~xkk0!BT!G&fH*CD49k&ZV1)wkWRK||TM8!X|@`*+ZBA?feEP&_c_O%^03CIib!u)GDOAApVDMy|}hMhKDk z>}j~+R={s8M(c@7x(#ZgqjspgKUk0yKxq-w0_hf-djD{h@}2(N4GAidwKI1ewX-}p z$yk)sN7g>dJSkN&VnG6N0I~rYYX3G~ZAG2wS2k!UDB?Q>%4WPSLiMPFqJmgwCjZ`P zQdZFC?%;oVn@@N3FtnKV6IlJKvB1+`Qk91`#_?+04y5%XW`T6oRJjzQKzi8%pqsx~ zaF8?<%n8Tooo&-9#Buea@{hSbk8%!frURzBPiHG^hC7fW1L5+FZ(!(#I7;n@&H0^B z>w_lL|1Z&Y+u~5 zWY!}7=?fhL-mR33!BGY*h|)e%K+Yo?QFR>4V|F;1qz=YhxaH-oY}*VUVUhNgEq!up z*;b!@;>n)c9TAnU5PdgmtokukJ6@h$B|-76qotC<`i;od7+GW_u3qap`g@c+WSMGUu20se$&K09?%E%@*ZC1Pb(g`qq~t<3Dh34IhVa!ktBk5Nrh-PH zQ1V16{Os^ouYN2(i*&>}z?hF)@o^mGP&tiJiD3N=Mtcbbs2TW$E-gvU1q0_&@TIxi zZ52@*J~PF}7hXteL7Cy)s_5prV4bOvk?E5-i%mi?NRT;8wHEE(cN6dN?rNad;x)ad zT+)OegdADW|0C?7D}g9sej$}MJRiaDv>ocP-(b;6!%(Nb+#xC&Q199D_Y*SwYWT|* z-;Tfb>n_}lS|#k3})ezjh6b2Eg zZ>R6$lXksczNa^dHAt1-)+mPI?Tt8Z_S^CL)N;Vcq@v25ls_Yz>0n;3C0OW zYKB;=xM~YlODU7or8p3C>Zev5s+e1E-nO5L2{;yb&Ppz+o6$z;#U^I*qOkTCezPuO zNhT|hr)lQKK$0w^Pm9H%O3>D$M8MF1So;B~d_*fGMogN4a)1KrWgs=OK*e2(1Casv z;jdsCAB~|VE7roJ+KgljJR<}P)z#k_hjvdv3Qz{iVLFx{MB5PVxa0%A!(I_h+H#7lT5FfIDuL2y<%Wqms`h(fH;HnYg5 zWshiX9E_SbfaB}cap$jT_$Q=wbkc9ZjNwe_@`o%IOv731vDvX{0r7~DX-6AsQj%c6*?pC)=Eb<16~hM82Q zf}HkIZEw0;yB03n3pK7 zC#)9N4M_Eh(wgquy^*A}U7@LtQiboUovzDqxK)HNF1h!XJ6lR?=TaOXOf6Gqd5!sX z0~Hc1<3H4olwX~ALOkhzcKxe16*y9{v6h^q!E~wZTwnJ+bTM8^gZ;6p5Ot*qopr{; zLSwgdbT8tJ%+b0N9-xM~w2)}YK&$7k0XGUC(MZJ?y| zKr6-o&FE-{f+>zGHpV5~>ZdZajn3u%$>l_{WyB493&FJ+?4t8F+>%kYrhkEiDsg$7 zta^3<76c1j`>69~RiJzx`DoIIQskOi3v3)a^jdOY8|rUs|Lt1? zJZ30K3%=}I5>_>&>fNE?D_6~#DhCK@55}L|$KUm*|DsYmbYbzgPqbr7o1d6@f}_P? zG|)wDt}l7l_Yg(fs!kcNv2$=86&;7+^h^$# zK(7zK3{#PFfD@1pGKRMPCs~3Mt;&=Uh{p^$hZQgK2 zoN|rv$RUyH??lA=UmW^9gc(#Ses&%-+6t0-f-%_7_|uqZS3WTcDh}C4D^XEKxhS*% zXzY#1NkyLi$Xtk8*%`+ArVheX@=&LdG33lHIi6V9L%jNb)!KfXTJ06r+u8&nMO)s8 zz1{-u-Fyb0z^=~3#71NVY&AAh#bW7h41Y7Dt&4b4XRTDmeLc#K~wlrpmt{T%!@CuHimZ%vLTDwulG0QbbK0;K(D!P5Ck zJX|9>wQ+GET7&0KM*AxkWt$)8=9M zQ7WG0^Y`GNz#WcU0a@0Q7X&#jWGm55UNMY%#JNAWa9^;Rd zJPBR%3zh{~MJ~n)d+Lff7`=UQtXe$?9QW~GfT!1Mi}QX=I}az;8>uUdqwey4m-5M6 zYbSN)?Q#6b@|0cPZ#5cvCFdDZ6pM7}hq7#$BBI{>cGjmXXTse)CJcn%h6**ru?KU6 z=pI*)lLs_f3?q0=ylkggyp!T(w+e}35zt$(FcVvm_d*qK)IhY2Yk4_%cLu_w5nT$lKt{|W&Ta*PO~I=mI5sqiZ*E8%%OB^Hxq(K^ish9suiuNQ+LXm~|QqFSXWM2*N`f`pMaq1%bp2x}%#J!bs<3Io(U1kSQiQF!$w6S&Izq5CHZ zj8c9(ULcrXN$1LomyX6+{}LmVuGaHBLV@X@peWwRAC?W&px=7>=9nTu<2!$rTu>-k zOl>4M>s@`>dTMUHJv~nT4!uE^5_dp*--pbPx(vzZu&x~(d0pqETa2($u5)q% zWu-&-G2?^-Z=RmYWB*BQO-X+SM!9rNrh~$D1s3a{d=)FDY@NA)ZKS;_5XpuZza2ES z)R1N0vrL?~OBc6?ysg~mgu!KvF2@!2%_qe>Q|ggwVB!3xy0+%nfdP*|!*2Jb~^l~_iY;um63Ra@)(q1uSHm_rQqlBWuSINs9ofsIcPp4U~ zpcVR73-;EA5hKdF9c#s74xJ0<(F_PRPzutnbZU`vFizqju9VQ6TuW=y>jn9DY)h%0 zc6|l!b9h!L-E~>}+5lQss$eo>Gvv3vT{62M7Tnkm=RxtmLk1Vb9*hoU$Hw~{^LY_h zu!tGnU()3EsR{ismE5pLS*Ij$b?}MicAL^`?g7z^?mwSjZ)O|P6wRbzyZ`BVg!Zpp zQ4bTTo_jIgklx+ju_{lGU)iMHgr%zzMTw{EoB3>Ru~c7tlma95&s|2F%YKA_cKnW& zm9S?1SnA~JkD)F|mz&~cEu<6}4!`m+{hZONi3|$AmA;~FWWkUc(fe}E$bM$-)Om?* za7&;2&D=R1^FsHlavPqM@5F6nxKx2cVZr8KKF1be-N=Z`^w>SpBligO6g1P8-}fZ* zOne-hg9_W@iNJ_6^@5k70`9c>v2>H|7JYVLd4|U#4taIu*z^p?ZfL9<_sJc3C*>(3 z1IEOIf&VWs2kT(fy)Fsff$0iO2CC2joI!cJ^gGqJC`u!>Mz$ROg@SBrYfKA;NYNdp z1BqEi1>4AOk{be;$)DpUm%)*-?QIDRdSD^;2BBo0EWmc^Y=?k`kv8k=>c>>YSvQBl zLI}vlwmAN_{u<0L6wjJ*`C%~6cDO3-cERv*ObA(wOtQhWKC!PwzDn;$8Y5j#ln`EN zS;;6D*(tb#UcCzMbB3w@i|mkz>n>6QO{d13V9XWD9LlkJGtl4mx%A?CKT0eP?+L-r z`L-7V!hpdj`%Q){AEMX+1p1E}Y%2b{pUElL$Io3H^KoIde*{AsQmbD0+D(j2~$gY(k6_4&H3u<>I2;mmwo_qo6A3G%%_%)m;n7Vgl1ZRlGm{5p*Y6 zv|Te_2F%h>*4IK^iPXkeyMgbzKVudmd1PBS=Piz$%DMMK;r{pPR4d9K^^c*ONyI}r zs2q?nyYn+GjaUmkzT`D{8EU8Da06FVvD+V997LP zn>p*EDHEM_Z6Dg~lnMrOm1MQ@tprU6N~~^xkHGt+?{U`ly8Joh&9q+U9Wbc69GPk_wQcTvmfkIAqVD}5tIp_vX>`NeQlPD# z1oN2H>Z_=5-t8%TJymk!j()rE$b`iGHriB<))*2d*NK0N@pzu7l?tX62DQPWi(FBk zzd&NA1|megL3X&$>Hs~5sqAowPP}$uBU%~%@X*s&AWWOy zYZ4Y_rhaH7v;_^{d5Sp^-e$=#1t>vv`g7qYfd^p^vl_qitB zF%rK-B*J=cdk3hAMd>2dj`g0hO9CR#=D;q}QmqIg`^e87f?2l@LGcbi9EgcEsNJpE z7B7P$%&64C;F;mJM$>&nwg2rx?vsrY-AepIcyq5>^KtO79$MhMbx7%jplUTa7FoL{ z147k}(zmjL5dum}4KpLV{q7cn)yGseM?yuLp!lmFY<*JlH-?9$dO&x>FSUPxg?n=Y zwg%DnKcS7Cw%K}QqKXQ^ApjfZdr~{Ihp1y}!P6u|8QSp6RFzL@v6d90x4->wqToHg z+NTwysllaoo(3Xi1=E27w&@lOsqvuH<#FHWL-8Xx(zk)ZbMc>EE5ApyoK*THX30-o z*vm4spj5ac)!O=9GkMS|`2*vYHZ%9gmS zDGwkn`k`2}*#ggVaQ<%gL}>~))Oqw4Uamdx?c$cJ#mz}n{k}2NB5L;dL@I?!s`U7|_7@)ym1pZBbf)1A>ZkS0TrjYsvGwdzCB-~?*oI{zdaH0F| z=9hzHjo#UxV5#BjR#^h)@sm_3{XoyU?ts}SR&8%clE^)HSHU77(%B~jfwM2mNiL|v zeUBcLN|^HfgkquHBfB_uWrp%UFdTT>l;fT;5iv43*U*GoA`fs?7?LL0pNJlu=yrf` zTa>YJO6yq>JK7-~efe6B6N+3n0Wr2h=0lcuU6w+wn$eerQGh)k(b#lgCW(#RSWND0 zE9Q#XW5D@yJ^>J8AMc=OYDG~kl)^XH6x7Kr7a*Z@5ZVm$w(A=Q0NDg*gHl#Pkb*GJLt?~T0q3hTtmUhUG*zhld3$G6D_ zGk4Z4LgVYU%T;+2Nj_^&z01mY}P{^ z7T!RnLH`|0ThexHGzk~B6T!+*a1=|Q@8!nli3%E7z>YV&0+DJ z1m&SsmLbd0+3pSujbPbTmP4Z<#-z59HwnXqd$=jnb}ZV(ke}7`B2umM_bh80OMMf% zRMHZx5EDbGhw2tvZ|{X0MKx*!!wCf(=L(;>C@EExu2Ff-QVE}oTCjGvA~t@>9!X@3 z#HHr`3DZ4{$>#9}>M zg4clkFAkUPmF$buuQdC^+@;i$SC?NGzP{YvD*&v}pZ9f0#%TfTPQm%rVe5xU;{`*Q zEAy~<9hwc+7qpFu+#KABq&~31Wr!~g(YfQS2;`G#GNzC`!xwW`lKCcvJx{u|XBgAm zm?|cy@kNz1No*ABkL3GIl6$zsv&1nMu9LUY1HvtjcI4AM#yTtQv@vPj#P$XJ8)OoG zCLl0OV+~{FcPGwN@cfFb!HJ>qr87t1w$H`o!;9tywP}Re`Qntt&`@M}78i>#ig=PI zNPYToL2Skuf#M}zcJLu`@R7MpVLSi+${l~aW!0hZD+&Z@JFTA5CV{02dA9@?h4wUwN%C49%co)~*B3TZEGxJ;f#JxOQrF2p= zywTI{z;%kFwvo)O`&6LaM~vv*y%8Ufg@~_RnV%mPUn)q9`1!r4T*w(rZ|Z5~xZ7%> z%=*RrOAI>5H&Mwp@h^LXp6YL%u&nYgKjZ% z&rY-Y*ZFyI$5Zb0t-xcbDEGzD@I9s@lC_sQ8>47ip7F`&p_xc%v19DZaoE)qlTi$wWDtXU_wAbW!H;EDA@oJ8KChZt|tj z(m`gKH%P?45ZGqC{aS<@$TyU1uWhr!xLu4^j21SZz*TT}j6_=hV7k%&0~%|%-m}Nh zru@{hR^SkbRiN3#yKnZ0(-KMQj}YUyI*Y>jc$Vy-L!d+wx$AKAi=;<~EG(H(PETWl zbl!6c-FhGf>=|A4D1WT-vkS23^`G8|NeXFr@aKCinO|m99tFu+v$9X{in+K}h0UGd z>V8A9C-iPr>hlGI%V}5!0Kh|t!mYa{pFsL=d_4{6GAeJLicg2|Re3t3sAx4zNiW<;sb6NXJ`gm=X+xCM0vbPTXC^x-jUj zv1bq{JBCrw&|Ii2+Y_Q`4D%E~f;Ridqk|hv1DevyzM}=1iR{ifuI1d&|h1gDjxJ);!g~Z$oFl`tY`Ln%_U>46RZQp~> z&{!@x;GSLMmb5l>wK!wdjCnXxMk6UJmDwOic1E%|-)bR)y1bsh1_M$2c4*>PPUf;Z z&lY#iUNxq@^OAcFSaZ&ucjT-gVwkXo+y17#c45kL1rs5kVJ@bZ@{g!FlU<|Y#~|Mh zZRVaHTC_mlWWX%@Wxejf42gd%_z%_AaYdvtn23tUUZ1z4lR?9)BZ!KZUXL)w4}LKw z6e(pmAb{uf)%VOKtMW1opYv3;>Hz65q|5Y{P_F7}Pw>$exDFdB`m|BB zwK9rX0(s4{+!^dSz>x8Gti6JyS?~F4)ep#D8=Njr(oMc<toewW(js7dsMCa&SHCbeEd2pbGuJHJzMrb+OvC+ zBVU;C;k%FlU>u$*+AdH@{}uv}(Ybx1TgJ2gHe^ttEU|rrM(1BgzvxqC9#2wR%DCe^ z;F*)4vK{1z4Hr-35GEUuKA#BJh(SYQ=+)InYG!CBB`{;h@2~M*7Bz@1u9Q(_D@dYT znmM*=&eW0^NTz#D%zDS+(7Ucby^XzQ7iEm}KhRVF`94PCy()bb9da6uDymRfuWZBj z4_WIGC7pF!lT#gngkjw6<-tx5M!fQ%uw+5ObA-XR%E}b1 zvdhY2_awqelIXWNkr-5+K;7|`>~oGf6CE7{WGjBlH5%oSw|qwI#Lhvu8a?WlvDJw@ z5?>?cV9&eWbhj+~{0&9n^ZzyKhE;~7v3l1S%xySjQfEo@I$6y6yQ6tidq)btLy|<= z2ERZ!{gQ;5+%$Un+xINPwQ+lF&xYcF? zZUT$m{YCuzuw^raup-(78@#PFb<^;?fJ>ua&JC5>JpW#`jKt}>5GJf_h;;2I^zCM7 z;}+#`>RclzgV3>DcFzerSy?0<|1~?|M4HX`ohq!K6<5W@S$NN)~_&EH3& z{;li($(bg+^yv|N#guJw{)9a1YCCDAZ@an$c*#@F8=WC#;qno4cubu(6n@J40rvOz z7iKk4{qIIp-)ViO*hR~fpoX?##bt1JO*4jC#PI2n3_s9kU$-6qG?4inu5Z2{=ST=LFY_ps{h6>6YV^k7g!^tqmMA4QO{FiEZ|{(S~sW z(Ms_v3R?PX8@F97cV9dGq{#@4a8{mp#_3s2+2@S0Pt{s;Qvc3VD1z|c z!H0)XF-A?KiWk8SoAEb6W~ON=5d^eKyBO6dKWQvzt0!#s4~5cKW%bE1pDZ(jN%)jd zxA}(I`nGG{_WY{OyOIA zikK~{6BNP--;^XcIWgP7$xMDAB!)n=H{?v(B#d{mZH^Hji7p!Z`RWinO`{I?a&Nk| z<}sLNc~r%ZZziADGK9_k$U3QwkoBq)_XM$Ay=`~JrJ8YR$&>8;Lq}IO$gB|#e(7LL zUD^YQHY>yKB|7`Qq*uQ^hn9p@!${3XOf-5cKLyiSgcb*(o1&D}zMa;}(5mXHuKlz9JzUkr=EnHpI znDvTO_ytZFPQ!uEVXH_E=p*+}O>UvaGlKRtM{gGoZ}kB&o1JMJJ{?s)E(fOvtv-kC zP6yl#OE+`5S!ujOkp*dd5LJJ?@H>I&h-_EMPVY8Qt%5vFRs5nDb<=B2`GtmTKr#|x zUkh80-#B~{_9UuCK;HluoR10u=0A$m)B7r56_D*?>#NCdw{v-9{w`5_V3@NJKNP7d zbh0jA* zyC#*A*Bk~cju99i+u+SFK_93y=AWd`bVV|+F6Gfy>tO7pxN3kOls;+kUEJBKl0p9a zi^=r~l*W^Bl~Hj+x5!mTT#@lmIRA)d-_@-z^0M7W9V^?>ebXTh4+hUOiVIl$9$0YF zRAP%hRm(ab88fc%-MbfD9eag|hUg_8sTOEj|HTIXfeb>$Er_G=-sCl|be`wqSRtBN z^!~4qBi%LKQhh+*WW@TW@%%^XE!b#KaEp3)V+5ktaiyO?vnbHtnxKu-7*#eD@7T#H zhN;`=xt1;oNwN+{wkd)k{e6OcZ#2D}g>#$UXoLl1YQx~`AvOs3Zyy{$q@(smJdPos_FK42&?_oo!>=Y zHr^1n8aIGBM073WIuZVK%Z`st5--&Jaa7iCLt*}xI7@Xb!d=JQfh}Qk!Gd~r6K&@mo$w1bupW}vBTd)&$c*oW zhXPqRuit*m(c{h{9!!fJqeoVW77*AQFT;Dd=#xkSxQ$GT2}3OH~&(S#iqRYkC2CqEGLL93dm^E`d#ue zX^w${R?FWR(6X+19*Pfypr?Q&Y)X)xy}3hhn@=EkT0wPhc42JHBl*8tQ2wi`V;C^D zQ(^_k&QgWe*MyMceY+5owr&tQM0>zKPQuF*$<_-l7r$IMPrh*khbDu%G{7;K8Wcp^ zormRq2SZNJ*>MV(s7Zr z-I}4bvt+YbpCW^tA}LJ+z8V;l*<4Ik@J4aMI{+Ca@<*a-U+j+3tg38z`MwMF&L~y8 zrKh)ejGTV{tRf^og}jg9zL&i@x?x>QRdz)@`(gWWT$NdrMz^8UMjlsZtTdt${Z(vXTzY;MKg)dFkDxTO2YwR=FXdQH@T4AJRpl* z54MwXZXmnLiJ|$JZ?o}b_|J4JQ&LWzxNAS%p&|Y;YH}wIIsV&1b6wn^{-1JQx*8OXEmI2wTJM??mx%`9(x{)t1Bh(j*BTLRZ7brr;w9bUlWyYxSdeWTUEqu``a@(K8 z#>ngq%lUUQ`Dj)4^Q`1%-tgZk)Cf zuYX*u#$EAWj@N^y1L^^^f8IF&^5Ngu+Kss(OssMWN2PWY$b<>|FVXstwwU&XQe~V) zLDDyP&n!lkp&S#e%nGz%O#xE)m_9ilDDxBw@u*YRO=?}m<@LrO^Vj9^wUzZx?ztUh z>yUn?|3>q44!f9am7lU*xOP2Eo_mKhNHx8X?EF+{R9eAf>Bn^EeWEY{M2?7ec5 zsAo(W_=~|nn*!QOla7z%fhU};2Fpx&`)Ph!vbR_Y6|_oZsTrn%?eq`(ek`37=Txmv zKd(BTHE!`_1C4byz6JQzH*V5e7YYK}(xH<4ZF$d;JB*Mu@x8y;IBG*}bbeK&YM+^j zPb_E}`5!}|LKA1g?8Z%T_}%x~xs}Fi4!UMLG*(v&~<- zX4WLO+w4#Y*EOSg62!f(Pg5G@J9B$&|1ILLj~Yk`S+%4#QkmGcba@+Rc9&`Khv>G# zkSy)pts$maSISG-yigw6ey*Y#JGOV+^j!QKUXI^T1&v$p}%?&!K5hs2@H`fiqEb{4Y6 z*`NOC>2AHEO;@80K&hS2rfVoQ!b}59BeRuPKsKPfi)-i1H@$J<=FZiH5~qY;kseS3 zO(DB|qI)`Xm_7EHlbUL}RxE=rG9G{jk>x8`lT(=$Lan ztWLP2nfdk28yAzsHRIQjv))3taV^VGa#~q|y`cucxYpHltyui^pkXI|aIA6E2F{Yd z)g?sjFf$;jI*yAR${n$lDAA%8LoNWz&zmXsg*9BAvSe-7tiP8&0^$8!?255C&rgS! zl4z0g?P(MTm{0~~xhpay^FoJLIs{dD!e~3r`X;upWEdZgxB9xj*9k@|o*5M&tZfF+ zZgeqHIPy26yROc*DBZ){0^44RuT8(4Ps4%q%&+|6&$ys{22!93e#ik+y{ULRqbE4} zlGlW(A}%W^CEz2-q4$e}dPigKHP17|wyK79ImKK7oGCEx2#b|=5J|bwN*d(or~5Y< zbyT?TScuxn9m83%!Vi6n>!4JgnDE>9-E7b*B$eTtjmr`Xt?1{d8E{@s>}b$Wd3|9s zoKMQ9O~{fpG-j3ccw#9>zxtU=!66ZLKmUWz~;c64*{0+;4< zTfj}Ab1zIW|6LD}x7wR@xQ2hOXFAo)knDXE^;gYAh4iM@q~;bZJYdXENDIiW$;TUg zZ?~{qHv%cR%nkpsK7HR6(E z{K# zU~heF@;PxIr|Q$omHaijBUR=hnx`d zSO9L*w7#UaD#`2A#Fq~WQY;J7-cIk*Z1zWzWpBRQ1bI`ojb{iU&2HLyU~RJQWTB<8 z9E|U)$wm<{b?qdxI@>SCwFgx3lfxUzuHx}GI;MmxtosvMZ8t(g>sVH^VMN3hfN&dQ z%t>v}vLEN_GO3U0(*yW@JT))n@OWH&6KKbp+Z+SP>q9(AwkI z5|S{aKdVK!=g<1)0$dr%)gow+0EP%&bdC<N|Z&-H1fVp#lTpp95uLPt&)c^FDo040>>NHDTOM zp&n?RgG3%J0QP(A#ECTP1zdSLFbSVF?wAEf6=ZekXE#!B=|^|u8B9=L?Mn17OGby@ z72V}dxbVZFl!J>UJRO`Ys4*b4-p#-)Lf^xnWjU@DqQg(_3&dh!B^J)qd@lR_wk4O$ zi=~q3z9}MckyER_yQ$njpKgnYQI%5DJyj(d@NN1nY09JO8F&7#06?)gV{lcQ+iGW; z(cVt`?NOH?-tryDf7P6gHn-N+&XBO72W=6V({p)ku&qWy=a-PY#!xe|a6C10PjF&N z(dVr-|L*n{E%>-0$@a4sXNx@()Xu^|@}j)(vX_MX36HrOZ-4iJl<;$xtw!&HVJ4rN z(QWWwb#_ZUHhA+s03pRxVHbX<8Fg^N_A4T_X;oNy#;NO+`}Ne95O1m`jnZb?E}|D- zT!Nho2fm$eR7muff46&of@K?^ITLi(Vd*fuI79)~p}3Ny^xGG*56BdqYt|3u!ZFZU z7*G-8ycTW5Xgy)nXNcUjBn;bGi`v;};szBK@5jn2gBXN$0I1S)@=Fy8Xvn0Ka->vc zlKJ3CxZ#xmo$OL~qm+$`%V1p#r*F0Nsk}N%c8GPz)MM6PmVytCGRVn%CzTE-T>xB) zRtzI1ZYHQkHlnpWye6Dg!jZj-C-J9;!H#>7J8y0X$nIjSkq_M+pF5f$mYq3vJCbiT) zLC*nIE*tHc*g| zPv&em;ALwofo4#Qh0jNlSy=76lgE!e8;M69yjHN5{BgC^-%vQH2k?qES?kXyRR*1%##(gG7Z(M!{P*QQM z@(`0yI6#mWz=nP8HXxM+`-JXnhg} z6X?fcHr-v$uynNTX;VV`&-8N1yY~G!ZRMUermL5piUXp0b0Py;S|u@%v`v36VFdc%VC&@J1JX3#wmkQz z9xoplV1ZeXK20Ag6!RNVuvq$y2wd)tESQ%HIm0oGZb=Th;oFBX=9ZBNkb%5~9(Xke z5bV4=9C&3aPGO`oGf`MFZwM`7SynUMj>*oL{>Z;8Jv6%~H3(5?WIvUu(gXiWc9=Z`*z2R^x7$JQOAk>*m6R zmS5Tbvzra~R+z51o(q9ZR_4)yNUu~ztyXEO8hX}|iU+b@QH0cBGhN$T)~R~5oB~FX z85ZT&Q&Wj%Z7Ow7k6OoAm|ab5JeAO8LU~R)KUZZYLuD7Uru;An(7dNnO!n&34p(?4 zPuP8FSeRse#NT;M24$;C4<~CJ-*T6BA8fq^UIcbsLrA5TXK6vcCCM7AqchN&fa!sT!7_|Rb{ zUWBRsBr|%Nmi|S4o!QPQ_5um`nA!4Gpypt1+bmcD9SS_;bRpVde%P@2T;l+>(NveN zMK&Z4I%Z17XTd@xIBkJ)pPfgD!R!BGwZN*0i6X567{c@b zGe-@)Lahi0Cq1j>oxhCIcmHNx-K1}|NFtpw(ohzKmK^5 zL#Ouy-FR7&^?M}+G~0W#OG@KPIc?ER;*!T)8G#k|LfV9$7l(%rTo{Ur17rAu%o#i? z@i7MNEHn7GK~UD0qDt%)t~l*NaX*+5gc!5)dE=iIfa9n$<%c&aAkt;!;1ESa(Wz^6 zT+9Z{B6xKOD5P)L$y=27qpyCmSfCw3}u0YQPtn@WG`^X ziTenpXz8Sj<%!{P-d@q5p!27eatP_oK8g7beyt96fYX`rMx=lLi_08M8^|how%VSk z`)*Q)4G9W5%^3Da_(aY&ujsw1LSa03PN%5wU}T_f4kU*#lxN!_Wh*n;y3itNzwhK6 zP|Rf#L`%FL3=tMN2c{wrUII#YD78r*5-QR9W;EMJG1`wizK@?***jL0`aWkvjrBN&MAj>O^2y$;WGjSvcARTz`tuV*JhA_+|rrm&Ov>;nhGisoo0VY)?pp~a& zI^KIffZGUK$1L6O&O?Q6Qx}PAY7)qS|J1*Y{!djR?iKJkR8jV#iTuMs-Y1caAJ(BG zAY`B8TV1h@O_`pyBNjHINWaxc-yD*l3+P8} zEuePgXL-&S@EHx|(Rlj2?0O{Mpg6TPv$_q`F~GT%Ox4nmRadSRwahIwk2hl(C>Rz+n|^ zP0Eb|^U$KIMGY|*^a;1cN&Sk>PO@7H10mm`%h6`Xn4Mn6EYAAzP&d(urIl0$BOCl4X++!JP&q*nXq z>TgW@qv2yLV407!&XTR+0wwr&zT1nWf-isKhS!cugkEdcg$r0LR~MgobZ6Ga@s65VD#oRRB__zmJj zW$!~@1B`nfAeA7SUO0m4RYFO(7s%k|kh^1r;jHpwL+x4f|c|7r8?bkM`-XgaI;rT||eJ!UkUN z*RVmC#(qd2^Wb!z3r8R9l%dHKNHA=;n+=S6weqA4rBt@vx9porhkDv7Mb;WWU z4qJQ=z(ckQ6Ts6^idc+c9z0!qgRGk=bw6ZH^W&KV4%Pz3M6 zRWVVBmR_VkUT@J>N^CJ3$y1b+IBW}N26qd7SBJ7fhdL%g`nFC6syP1&zr?pn&K&;p z8f5&{MeFFrgH8jfSzuZ)7+10}E00AbPtg}6qo&y=?+m zKsUHKqLRT@XJ^_+M$)60!NF=wAk)+u9PHy@SDhmlI*jp;LyzwxxusC8?$bbnAI z2qwDA$0+X;Jlc$Dygp?4%ZKvsaYL7EiqO5>!L?>*uSd&!>#ul+<|tW$4m!qsQLW2b zsPi?h)%3qW(Fsc2GWO-Di=;l5l_j7nfGB!J)~M~`g~If}Fk3t)Ke4G|dU$Qz#CzT4 zKg;shJ2qc^sn}WC%PJXd_yBr&tSES*f>oe<-q)a-)hNWm`tYk;##xm?^dIG4WA;7H z{zh|MxrX$U->0$3{gy{PtIe#>+eY>>r8H2K?`3@~Ou=+1D>tktu^!Pc)_-L>0RmLu z?B=qsYJOTyidE~0c6uLB8_vMfAc6*L3eq7_HkXs;mE?Qq;+qBC7M~o9?G~_TXQ<=9 zabVeoj%oINE9d^4>kebf(@79gB1H{iXC9i5b#c*UMHsyGy;dA8(V+`%B`rHIm+Tq} z3OD_*xnwbti-m>=<-^)%y-qfI0~FfdewU!x?aQaXYX41#-?|Pe} zW8~o=^to!|4Lc`VPX|fgW{q2W_*xHCB@IW0OyPmO9vPa_i3pqBCBdo*0qBTZAQSq+ zvLjN9q=LazP#&S~TkfH5CrB})p!`NAASh@F3_F3F!jH8UXy4%p{Eb5FFtZXpeg|s; zeL@r*#V4wmYpHIHB=D`8af%9s+`yee2csx?ssc$4D14ulWLJSmFCU@#={`ugSo6zk z$vsM~MtY{WvBWwEC0ZPTfPa`F{syulSHG>ikq>T!gM98FcLUOT6_4qOb>r9Fl#1GL z?wg4Mrn^9I8Kl08r)=f+;cpEo5UDHUAu;&ZudMsuCO+pcJ9SyiPkBVL)#+2%_LZwd zIz0y>2+=Dv&kToAjd?}U5UAm~iuer8!F%2dp2o@OBFks3H?v~40GFdVteNJdpY;%7 z9%GlO!22RxK$&o`sn(4-AAZ`Yid06@vMPDL#(Eu<(Nku>M%s7s(~{~6g4{vH%3g_& za(I*0D`vBaGV_k8E#ZG9`xm6HiS9@1MK7qN9qp}?K0P&>#;B(d13p4 zv~y2MdZM*=&G(*j0Dm!TnLDOdJ{<$Q3(D7pEjR!RuGp%5aQXRaQclRAW_~20Y=86b zrCb4uRrGe$K7suI5=!fbKEMDp(Y3s04>{&D{J>E9so~*n1XPyhXQp%|hojGK*pzOU z8-0FLR~maDB2m9D@@ch=pA31vBMM6)Av4f6_4m$I$2@-We`>l7b(`BPH6S&VfUlD{ zl=^Y6Q9pTLg#CJp);ci1up|jaXDs~NG}4S7N0CMmee3S<5z*P+yPEE??G{}Xauxp> zOLXv<-gjL_>*vrFPlC^Or8qM(t~<@xm5*q3P&iOg8cb<{{Z#vT0{v7h2C@;wHY3rC zj$_rqZDn1?11uZ{cavja9OuNoFMrq@$<`yo*1OZgrc1+or`giPYU4^&9hoR6Ngs(a zxN&K~Mfly_Nh1p1X}S>yhWT~`zO@VzcUER2m3h#*ey2O%d}QHm1b^3`G9ts6oatLk zrBy(a=xl?r!L^{Guck*NS<0)vFXf6$P~y;?2i@I5TDl|{i;bb=RyMV?1)QD1!-mt8 zLsBDc(XdrV7pEbS@>X*`{vx|Ky{yAe4Dg2pCVZ6}89c6GaVeq}n~x`#v$V0tGaJbX zaG)<0);ia|V4+1$%++X!$iM}Ew(PwW5u%`ZV3e*9Vg=g$NUO86i8&mXnLlnm6A z_y_%O6}w`fCX_$uf2+{41%)I3LH~>59S`bF0?N+zzbJ4`pu#^<*jQVB?j=(C$NDb< zTFX5Sn1Rp_`d|6eCti|$`A2vA`56r@}*v=l%BSVId<9GD=;Paj8%Z2}nhf1`e-l%;_U zwQ#5Wg!qA+EkBU?zYeaHnldoO7Wyo({h!zz3BV<&DIIBG;wjk$V74tQx&JqwgZV#q z&6c0GHISc~`dYxyQ*JWB_)@;hz+77ROTg@Ynv*+z=D*Ga<8S$C-T!agZP)+5<-c*R zEoD_;w*O7?e=0A@jbLpphqYio{{q=LI9je6z~=w6ezgp=fbsrkakhYTfL;BpmV>M1 zz6&e{6omcPf6Hr0=>vlU1!d#pN}x-oK;mL$|9=HK*qMGl!#NnLAF4_zXEdq$?sJX9 zTRv+M?04g34l^R8Fg2ne3nql%M8U3P)qmwEax*o6Zc#IFJMyGmrch>arMS4dR=`(q zhlJ`17AdS!YA!4&p%R)h*h^w?A_Bjf5nc0ub>w9+6T*hA5$_`DBIrXn!LU|~i7{2- z(<&>*JdK(rF${SwU=2o%3KCT-50*YNG=jR3U9&Fu3593CXCAB6LzBo5TpS0}y)rBq zwYEAb-$A{f7HjuUfYQw_x;zw#H{^m2HVmPlV1+0$nPhZ6*d>{&EV7ON^f}AO z$w-3R$GYz4ap-%ULb9Iks^%GWvVjbqLFxnxkoIdiq!kG9KMl!MEb9&UpBX zb60}bxcwYeXTbEToABh?3Mym4_V(fG;#NXiYx-E{6(bX$=b9;+o#&Y;$>7fFvXPL~ zFEWZZklu~~ca{<_3Yv(5SeJrgDR2j)1Q-=9q4TVbP(e!O4v91ZLj z00WEN7E|qf-vX06&0peJM^2pI-z)HZzhORZ80c05-O2N9 zc=-a)SHYE`dteckCiFIG47d6%+s=EBhV%?tEpoTGfL$GySF6#ZV1Q+^g$B5HX$#iH zPL9yvus#*%gzXvVEAs$CX*1Yp(leKyTk#YCg125jRFw6u$5lv|5H~_ag_wEBBOz1= zzS)J?X$~lxQ2dLe^`XnE(msn!K~Dc^Pk6>Z&9i(^0rVm3rv7fL5lm?XD7+w5AfP~u z;ddUZ4&qjgg6eLLtVn2;tW5KojS$ksvs(#rXp`W?Fiq$fm!#-n5OI(@G>dq;d=D#t zc~EgB2{g!ykU5!xsU{&?zNu@{X+mUne71cMW#iuaFdQip6Cw<*zv>dIyS}0bT9|Qs zqs<_?*xDoB>A3Gi34-E*PT&skn*-LNc!zDRc1W1kQYnH_u-Tkp_u?k$?8@Pl3}}wA z#sHmyr35%OR8b_+;N#Kr^wbjYM--+hQSh{_yF97kD|3)d_b} z>-VY^gk?Y0k!#hc_@tp#sHT4hm0>%wlDU^SO~@kY^;D7DC?ctk$y}p&n54X^lt^hH zZ>%nI$85wpiNqYCzbaV=>Y$kHXd|UTz?+HU5Pq;NRZs7uWeHb0E(&F1N`4){pRzlt zaRG$*P)hg|eo}nfWby)|4ITQP{_C!;J1wtDh#){cm~3nV2t{~P%qP_~R%3Qi&5u3+0Cet`hfyMRPdi)`E;A_sYbHI2`tl$+_a) z)lL$bg!0f?Kd`nZ$OyOm@u!xSt5t7tj4b{geExB4E}cn;zy!t%E>|82|IM^CoZ!zS z)%it>qP1&RAuy7Rk6H8yz%;2MII%W95V#05M@X^Kbz5dSi^(R-4E~1@)?Q*LM&52M z`%G6WjHX54ubi$KV#cf0nB=h&~YBXpb2Hg=O7W@nS%YJNfut-iRc`nKV0CTsj=u>1m@m!=T zo+2HDH$^Klk7=>lOGS3^?NhSP|*CL^g^=BEo z@fdxa6Bo|P!_o8byq15x%)(Q?dlb@2nW!>XJ_&dj64gWuU=nmZI;}MRe*c!`NCV+l zkjz@JjOjmQPAH=gF;8xLj6N++Q>FL zecI~*`fP**eZ%1_mu9RM=1%SkWhSRGLK}y5q2$rvX7iDhsX?KX;SzK-FOFtK?Er6O zY|<>-dW;b~z_`Pd(wOT$MkDrGm8Z1FFWXlv8`FupU=(K-T?>A4+(`1LQ?JH@g<6px z(P%)QAK8&i9UpnT!~|=(P*%eYFX=&B>%~h|94o~1PBGK##S30=elF=)YudRDzJ-&& z9Q}0?>@h^1i z-{Io5v)1n%!boLA{4<{!{=e|?U2?Md+$r>w+$FFt0~4qUMu80Itx*_`$I3GNe^i_l zeywix2ueIO8c_wn;y9XyTAzIgwICy@ljs@5&04ApNxa4`_iyV?cw-Mpk>LMx9P)wa z-p_qY1-PgHEL}*&;*$|pb)8_XF@NXA3VI1~_L*?Ag6kQfdFUbC5>3+O$Hg%`<6%p~ zy!A2!Se$dU6?*MzO7ucr2(cXp7abPh$Ositc4|7MEWK-M>F6ZbCj1*$(bv#P&~e7) z*-OW07Q{&=ew`ynK_j->W z0vvItG!kqr98gaMp54sKwJ3ntuXXi%vx1@YP!uHKZ7six3a=8imYwl62eWZ6f#O4u z5xjYVUyYd-dRKN1ac@S9$ClA=@gV&3gq^Vg+iEd)J-S^dx=t8&;<@CsyUp&F*{yrc zT$Ipxi|)H~W44{?#Y7B(Tq^qz-I4721e}!9oO+jqF8y=i>d|IQ{@`2sDMjq`e7RdI zcpvGx?DDwLhw*Uae{ZLOd-k|7ye)X~m}%e7?l%nD;TFbvYgE}b$Wl+So@8(v?^;_* zu=;w$<%MWb*=KpV${tLCJYReLc=$S6xi9xWi&p{q_gTDjACz09ewUoz!l{I2Wl?LaLX;BWsfrBsOF z&*U{0DT5ZVWJB{~tT?D)P7G^dQ{CaU!Q+s#j%MV8l@*zxa^J%Tc~|(UPwIltrmWfK zTQ}eD;Y-c$jtGAnCw-jKL+%QVs$qUiNWB6M2_q!YP-zD#Jcce9LZd}4btOdTK<|>* z$0z84;MAA>lcxqElIj53^+4ZuLo*;e!GIAn3e0PdC1#TkkKm&{1C&xTVbxrn+*^2W z)g(eLK=cz21Zbu5_em6vB@zQZI&y&z+O)KlB% zD8C@QBE-v#r7`+*SN!y({6Rw-Dy2sd5LiPWweii!qO+oDMJwR>{jxXrnUcGgK}~?G zbgwy>Ggs@Fz##um!+R`riHqr}S?CfG#=2qQ+!Z|YyE8NEORLIq22jF%{pPpGlc6zT z#ct5Fcm1c|AmY!G!AiqD8Z0#yg}slTvt(yy_lqvQ#(ho7FL4R53QY3vcKynVhMAMa z4!>RChsC#AHCJZytSdaVC3U6U$Bcv#g>Rx}SuizQ&eCBdKX|Q+zrQ`f9y|~hIl+`2 zu(GOD;#Eq18MGg_GXuh$UOJIGs)UF4=FSfg6`*+p0r&3m#^wTru6V)6#Twj4B zkdz9uw>@b$@9oof!I(XwxYra-#P+L7;`S-9*Iiy;Z%Bz;UI6~1L%pm@$w!spHcVXK z;x1k@8@2KI>UJ;Nqrcmop6@R})b1{9Wg61##)GR(MlyQ`wv}iczYDNx5QsUNJU>zr zTfWmw3m?sJ%?`b20e42%uiFQdg`Z#&Syf#BPM;1+nh+P-UM^j}I#Mc5t8^zjLKSv$ zIwk&oueyMQM+4@WI|*y6#s&X%6q$(2qIkN!vd?g=OCZcO968;(Cxoin(jSrDADwxM z2@!7V8Ir`ZxXAM{Nu8_@eV}kV`U?l-jbMY7MSAXxomFLSPMloFC`3ceP%}dE^Jssh zBlmFM-)i)7U7l1Y-$#}g#H@|abZzr^y+V*)JV2{$34Ff1g5_k&NkXI&95Pz^jO_93u;=gZ!omO8B+5A z9hiXDD*t0B3FhNQ=9>`oZ2_KsVkqK+{+_H_R?xRdtJ?hh4D5QRr0nV9^tv&=J4PP0 zC7M#ki2~rLiQ64`9Y)hX8H2n;?>KWqeu-$rRAs(I9(0tE2Kv*!!nj?jai_-eBjM1A2sVO#6M08CKiU)KJIAgxW4beb#IO=n`rp0 zQYfg%R6WNPM3@9K&u6T?2E})81J}y)2?gO8k^nrbb2XugKRLtQx>ZVVAT87PTA#VS z9F+GBk1gn*P~mUgdUyu?PXeHN7eRAFu;X5bW9k0J3YDL%S)$kD@EVd>+oTZRR${S^rtbbqPe1 zijKgTs~lr*lr-QX9wXV+Ni$Nq_P~TIe9-qhI8Iw(3M76upt3w(_nWy-6J3Mcyae@x z06#4DP5e%m@5P0b)8a)DQ>?K(QFn)h&xIceN#ZK!aO3HJMhu5nyTzfFz6xX=fHk#= zNsR-r-hi=cjY(aYhTWH?JA-n1KooFXUOan4~|{~r-d8ydsfLc@*GdtF@|Er zk1hK=&d$D9>L%7_fh|+`p|^c|;8)h0&2;v@?+9++VV;`2wXFT?hL?m-lRV#ao|~9b zcuLxg$$k?)+gRy;SY62FOwz87e&#pv5NCYF1#U) za8|MPXG!cge15)LlsarKgMnAMV()@G{;wSvhbARP$8!fQUx{T`$-#n!Dzd*ExZ)*X zjXvQ5k~QT2sEiex(!lvlz7XGVz{n}@wv%Tj5H?DPb=GC>E^^}sd1V4&i!H7EH2|t zjgcnTo(x`RQyT#?o&?Hg7KB@19YP=t#+FCJO+4TnwLFDNGYND=TR^+PN9LB87Uw+{ z@ikWPaoAcCHVK(+`ZJ>e3m~Nlfq2a2h?-h?k()(pW-@En5srvvoe@{oxtYXAjOC;;pxtba%X1RyQq}~z z;3wjgvH0Zt@U;HvMHoMYAnvbUA#z!yc07Z>xOUA*Z#PEEf9+K{g$iI?ZeVS|)^*7e zV|vl`Hs87;={q}$e^_Ds5Cux671ZE7d=q-&2xM?q-Pu%)8piO&5n^t8a+Fr?)CLYfXQF8yQv3XGkkohU-oJ`j0@ z4Va2?*upgAiAfmW7I{RuRpU@<)T-5^t;~QI$e?AIn;6t}&iGs5K=A=J@2Z0@_%C$HZ7hKvE)t?F6&lKt_Lrcz{LXULZ;h*+WEBD<2C9f*zIi zIN@d?V6m{RXd3s(aF#}gq#n$fBqicB6+|o|``uAKxg^3$IxRj#perVaGJaud0PF!B z?^KB+jbEOQj|k3l-|wm|jw?##3+E#*T?4-hQ(ElXin%PuWl=wJ-^%{R^gFStec##w^P1sRTC7^a|d2aat^*t|7( zDRniGs3TxFCO9MqLX3?ZDw%|Q8$=bY8e|a-CJG{3merYEI6lZm9u`_oEkrCrCDi8} zgo5V5mj2%b$5)3svh(4emPG(YEJutkkFdw#I;t_}pS3#f1(+ZQdJ*7v7683wR?v83 z6q)m8ky6l2JS$cfdzy@hWU<&7a~cM?&G>?(zJfCBAQex@3=TTpjd8vgXf`g*uU+1< zb^nDzW1UfSF1+CJ#8L*M(zwUw$Ql8gb3(!#0;cbSAhOo4xuHkX&0psopwXVyPI?9c zzI^%zh<~w%B=)Zq2@$5EtpK`^b`A@8E4Qm8mE|PvzmsLAK_m<6^bRVO;9zTmC2_n~?e?R^PG2<}>~Z1bAt0`5?78y^iyxfzWn1z3zIxz` zgq&F3-QG28a-QUzb4EEimY3fzk83M70O80bYjzzB@$~fAUaR~U*MNiPiATMzjiKKP z!bY8*QI`iCeg%#iQDx@sxoQY@Xgs_ZW7P~VpMDEP%shnNgJnIDw$efzn?Iy;*-D;CQ)zxmlmt~~IekJ|pas?@W%rb(3B}9Pp-G!Wkjc zx(mfdG|`GH_0gn@&6|~s**^~+BTOmb9vl9j6LEo1$8hVHSCAY05b|NQFvP69p=w%+ z4xdbt=Ulec$kQfiqpimj@;V1iHr#qgqB+nb|3DQGaNcNyE+AUiRC#fMZU)_zWjB#Y zW&IW!R@DSFKt$Jl!|YjwhFSnrC47~HeH;@rbIzNfupXx+#+)rFIW1pR|6uteN;y0Y zn}>$=yo5?ECd-xtJ45yj&XI-(w-{j_fu|s~Sw1z_MY(~M3EzARO-@3)XL6&)>CANd ztn`=sE30&wD`3IGh5JxmMW%#?)O>KEKQk|p{2C)1_5b2XS7n+~WF?n8iky$ji^*|A zDV$JbJuk8iyBse#rMWka7o~VE7|s3se9YPKu}U7-2ysdh7IMIUE`-0$2FsoUw8`Xc zSk71n%PjlZniliS&Li512)9>2no z&}9i!x$PAS=fl0@C``2ejUFHsgHyQuyd+%-QY)GL{{jjK_4k4W!p7VkuTKF|h<*m^ z)V7!C_ANS>o>S)IX~!&hq12ff4k_=UfTypi0#2LbJPJ>CV738HnN3yBh2lx!)Tua* z6i(H{aZ3fme`3je5kY5`2GN!COM~dIQ1%n1MZIEtnPMu61B+~C8D_gmG>fB0};1;Z^B40ls7lndS1_D@*+ z6rY{oN7Dn(p}6Q`w}18}1H-u!!kJTe@vJb|AC3Vqd?UfI*TYb+FkFH`@GtD^3%z7? zGteF?-OcaBUR=V3S#`tZm>WKP-SGA0hHq3S;oNMV_3$AcP{H+wr_(j=(>{u;_jOm_ zH@9?uNqdWn3jA=L`^T}n-|iAJUg)M(=cFI+dvD|K%_d&`bBLobs_o3NKS>dSxIsF)<1+S0Gz4 zATuB_T?#K!Z*O!UHZV9KFd$M2FG+4@Zy+`>IUq0~QVK6gL?Bx{Gd4L!GC46dL_;+~ zMmIG$H#kN(K|@4AH8e9YGD0;mJ|H|ZHaSKzIWaXvLp4H1H#ImnI7T=@LqtI}G&3+V zLNzfDK3xhgOl59obZ8(kG&eMp(F!PkC6-%=R#g zejD$Ox6$!3DqV;odI)+6U&=}$=*{OMkW~p`AQ2c!5gVZ>urPwihvE zMLS8@4=QNq&`uBzfWab+CA8yzghOB$t&Dbza0HO1ScP_!a1kISu?}sLa0yt7HXH2- z;W9v);vBTYgv$XbiCt)i2v>lWXx(TB30HxLruR5NxEheUsQ1`UxE8EKJCC-Ha6Q;i zgswI3B^(1A(Pp7d5RQXQXw_(Y2seW*XfqS2UL{tyD6pggqpXt3iegGCCQ2x&geaV(!l7J}%7r3HDiSIn zJ7uBzx~8AUTGm*2RGQiZS*+NIBX2v7(LO2dzWL*Ott0`OYGbx9*!mvCLeSBV~xXda2Kk}yp= zY~lP>J&o>@PBRM+@?!uey6(VN316j4)FnF|WuF-f&)-mJAOq{cPVT*E;n!QTg>Iw# z;#^Q|;qs_%tL2S<)-q}Uji3e8Te$Y3F2P}OK4=09xI-OSt(k_Bj|196Z02bf7`1_R zK#9j5&}!lOE=}6W9W;-8D|cvBR9R%w*lXdvVO_@&6Z=603;^}mA)wBR!=m~r=S)-= z#jH`i6YE8FOtnKTa@4{{PhOuokLro5fjXhGq5iiEj9IvUeN7j$+{mj&tQ0@owF%EY8JNX zX>7dX7snfpBb>7GF@ObJhnG$(PE*%WsqCIItJ$o7S;)P!3x3YZzcr!dhs#xhAHJ*IHO1BdDzMuWxagF%CFtiXrYy_Ol!2r z${%zFE8jR$;KMfy+)M>N`M$uXKNYzBsKDnf1@7!EaQAY7FK-q2`u76&y9#{6z299a z@L;;Y!_fjizf|CtnF5dg)`M_FzQfA@z8d&T$}NK`Fbh`auN@fI%<>iv0aE9;_;RH~bHJ=DqZn T7Uu*W3pg_~Hwq;sMNdWwLEINk delta 93130 zcmV)HK)t`yk`%wr6AvX&L`E$!E;kA#(A34)3YS3$0TTi;HkXj=0xExD|NQU7Qp_5l44no!*35ifS7;kE=q$W&0`efM@bY^Q3Zn{sFH-`yo7zQ{f+599j8gfX8)0i_(vNiJ&uMq&FvxbG>?Dj&Qq^{ zWsZOA88T{?n+(8Mgypo(E|R z8)|MA4yUc_8F@kpj=qd$WrUeMFGmNfhn)X38+urE&H)O*=0W-7ezj2=FN zN!raWDb zLK@~aP6wX0BQ8GSr1C^yqieLK^uXVJ_n8c7z#=du%`*=c?PzSbE};$Y+!h8nl@^N1Ar$5orVSmSqNIO9lf)_aiH_?x6#hDMpnk*ZwEgw z3Nj4la4mm8cJEJ%VOF^Gyn+gr`&*7gd$F@V^O$e#(lUR|ws9CdMF=+!;>j1$7gK@Wceb^-)u?}D6Nuy-wGNdlF(XX08w zvjqI0WbtvK2;%SypCGYTld8L!B@hK}7u~}wWjC0Qe6L|H7ZwiK-;*-&z?WH=tv!U8 zmD!|Bs%!3V#dH`4A8y8Ap%kiPk1Zq(Lr;I2I>X17xmP>asP2qI%VZ3CQWn=HfHETE zsHlHPe4s>cm~|Yq56#6NsdfV4=nRK3Tt3i%>MzM}buZgGIZ5#XDt*hCda<*laHo3U zEmF^(m6>^1kFF5Z^WT9~rI@c5USw|-na8bVTu!YEF|4kIrgs)5CG4@bI}KzT@ZiyW z4EFbu`g=!35r||#k#2G0ZjC|)*>ChsqZ)s$&v-;!RwN}ZU6ssH3NJV};^N#=RwMZf zRglPi067&CJ`7wp2hb?43Q*((g%FynoND#V{Np1N$Qy+#ZL|xvx1&fkaylm6EsNkr zaNo(VLgMQIQlln!Ca49MNMcwt^V?QoS_XLIQv?$!p%Y*yC6Q%ZWI(kD2aU!sF&lp( z2XOy?bUp98Rv}@aZAL2*ah7b-{k?GAzC*M2kIJ&Y67RD%qwk#B>*l1H4oz0lvmSf$ zTEa@=A~=2N(VrKdpUen;qAQ3~LS#5tH`I*s`n6mU6`Jl+&x_F_AI-W^$M7OmIkx3i zOk@HBKgt2cha>eUhivzm+dspqif(@{W+L)pc5w(`;$nzJLtz0Ck%a^YSbkr$=>Td$ zZv)Km7H^lVtU`+`zyT}!;&&q+r&0BmF^J?qx^F1FvLywg6FtiYNdt#*3dT4Xo-7`NC36SB9Rw3i7z4PaT|r@e-j+vMPX2dRpbPRK~|;LSkyJx9p^h}Ll9+b z=wU={7G5@MwW=?^ED#QYC9CVjNb7*cz*)A?O+vmMti|aUuoj72&S-h$-^F6SVTr-n z4%*_Bu}dk~g>e^<|5y_#3ATTG%~e3vHQYr8Blk?2TJB&l{0! zi8zJ~h=6hSxb(7*xOKs^TgIKm zg0{a%8RPa=czS#3t*?K#^&KeqmkOmk3FSSBHQcVX@H*bGY!)en-LQM8xOXD!;#ApE zbytq}z+??aAaCuUO7d&_9{5=i-+ETWkbTAwy1|J&CDUjP1*3AL%udX-93g%@{uiqY zH&xG$%@F+K6CDJwy!bxM!e4%R!;3}>_P0Qen8whbo;!q_YdwF>_wED7W}4I(0Ibxj z(>QTeF~u%SPc&tOFe&Oqd@p7yS=rWUk)s{^M(SiH&jcLpOBc4-tnz-^*Hq#ac@T@H zGYE{v0dFdbh3>p)dn@Hs(?Cn5N}a^v7Uc+VpHwa%F4n;En5hOx>24vnXdnWJZ0YvG zPVk+u%1Z}m+hc!o-ktGo{m!!QKHfiWHYM*jg!|A4cgf?o{9!DFHwh~UQX%fMe3=R< z((j`rh4w|y!y8W6KzNcTZueg}7m(6+ls7o!)X(uUA^iPD$Xh}e@+O4(D!yfoM?=kF zF9L$pO`W*q8~GSS^j^N@0WQYdUby;-yN!bCp4U9?MjbZphpX=U^%=nv6~53SKjNc zr$mHhe4c%YbvAIEM%!}|$BKWfo)kwDXV0H9_%-F%*AH)a_5Uy)_U}MG9SAL!N*(Gj z@b51CI9+jFRPAyVXCjC?%m?cP;-f|c)@HOf>)LB23$S$S;!t4;!xcVl&nrauM*eXC3)SP(C5j zHhzC&qQiJapb|9(m}1K#OcNFaF_AXN@A_F4U(})|wH6pyO$ChDWKH$6lM2V5gIo6U zv+U14uJ6Id$Ic<4Ctm#epu(nSU)2>;5e)OklVok~SR^7rPjM3Q>objmGF)Glu=L{l zhZp|^=rtU$3T19&b98cLVQmU!Ze(v_Y6=1}F_UnM6aq9eld%UVf1O%wkK?ux{+?g4 zC=i?%I6IaoSyKCHRiI(tPtnAMDfpA>HU; z`|keNhrfOGeOlfnfBRjvuM(WOzuTrDCr^3e*Y{hcs*N9g(6-Z$&b$Rmw%^pI^Znq@ z_Ocy}w=mq@r{yLve`f;rp7BpVyk}yIJrKmbi^lGiJN7==1kdgMa=(QUGw1*d$a1=C zgp;P1n_72WFQS@WcG>e-I1l}JIx|t@De+i|+T~fr$2yq~f8@LEWgK|5-W&WDaa*l{ z;}m!tBo5j-Y{7|aIQJv&mivwIVd!a!?M_S!XOY#Kpc@@DlP?2YeSX;J`pUyU+xFtj zKY7%8CO(eViR{qJmUw|D+nC+jVIKIJ;kZSysr$|Y<3JDWnFf1=m$UxN-RE<>`QrAx zCBFesTRc2Je--o|VILqxCeSf*&>$i3(-a4iTSU3^iiNx)le}@JCcTSml(%cZqc6{w z^YOxfOtUrxUgnSY+bqlAyv~iDg(|g)x>)1pR2KC{E%fyz0 zW{~a@v7m1k>lOLtr+K|sjA_5iD>=yzlRl`VnlBRde*p=$2G1V78Qw%mgZ^co9BO7D0|F{r6cFfE8(t#W?BJ@w zk{-@xP5oeb!-^eECOas!L8Gaik!}-hS`?{uKj6+$A;8G9>cGq6kY@g$ua9VVLEDWWqe?txrKsx|XL)a}q7^=(Rz^Vxh2t@>! z$1VJeM-*nVb6_SN1!iZom!{^CaJECk6udV4!rCp(hqGBWTcCb({V4v#c4m9jqYK;6 zJ3y1k%YZn(48N|F{~GOp()RE)^LuP*3!drczB9B#Xuo6o&2Q}Y-R940X8msSc9k0h zf2r4I{7OcYZ~kI*$0~Gf?ME$exJR`yyf3vm>Vav_c#k-z&;c?@H&6HE9lai|%>I1t zd2Hc1jT~`-4J)@qFI83o@O?OQ7c>y3mnFYaS<(BI<%}RD`fp|@SIi_pocBx;peh%j zgN%LGu?O&RU2#Ovp5TB`3uV|=+LgdKe-P>Ly#q*myLKQzW;PuNBRY4Lt7C$1wR224 z4q6-$aUPi}MpntC0akc;v;v&PkAN}JIJXx)1Y6sSydBPbVe+1-ew?kmB2z-@!+pu7 zLPS(iq?!-xFCh+T)(&%yi9+@PC+Zv&=PgI~YO3<`+O2sM^q2xxWB-T>F?oe&xL z3c3{w(Rr*KyfH^mMU4A%N*BvQ5c?J^d*xmpfAug}a8~HBOGZR8f9z?Y#=xidY}$uPLJ61v!40b%bm&@n zTp|`qs%oKeL{Z}5yLrx1$$*Jt6A)Z$C-Z*iq2EfrGK!>*p<=NC2rb0OK`40+#$4(BrN*!+XV9IGSGzD^teN4PPQ#F4sgFXQY*_yj_Z1O*77LYzD zj39WYBCQ|U)tCX`0Wj1+$aJU@_Jt_8X{`8au|E8^qFF2=CUv;~?b-o?;aztYG{;c} z51AIg0h%N%wn)->e{2Eg*kv?LOK{g_h!@R6avh%R8TyZsr|>kHUpqUe=p=tIEU%t3 z5=W@RBFZSjc8knHWUQGg`AZXhp`bsh57$-H?HMVlj!qs>c+_s~|jq~j*4 zFgiy6y2d=PD@hmWFm%4gs6ge(bV=9-@Wl*)Ii9U^+#0<|e-N((fsZ*swocj&WOf%R zMkT>G7$5_}fo1K&N2Z<|XTp=HfJm8hNl?#B;O`R)6PfnoGAe`zPegbI zc}nCZO<2*Ff4Xm50&J`e;L)(fRjZ8ZZqy}6D<(&?eJ16>k(>Gl5f~7h1p;_qj9VcU zgrty55p1ohl7(Z%ifLRrSS;_)5?fbOSV!Zeb#GQ(I9FzX=a+rHr+ZLX!=oTt;|_oU zh7xANN+7o;`CNPC6qn8eQ)Zijyy`=3E>gdIva%SQf95iRi47vanG;)5K}jqGWj@wm z0IAq2a8WV@g+`5#w_d_v8?I8o94ac{mF}m4;s-8S;y5cwg=MkY*r$np<35p(QflB^ z2B8g)P03u9u44|3^uq~4xQ|nLvQmp}o-syR4=X8lg}{t1V~LhK8-!6-rMIKACSgk}GhK<+%U&V5E+j{^Fi!pV!Pua-! z4D~(Mfw6NO05bZPJCrHH7xG$APOg{YOxoG2f85|R4V8r-DR&2om3f?-?=kf}*?{N$Vv$YqBj8V*4EFFmF-cdaSn&XAPupM$PI0ekb zadWUIs!azn_);wkeK>AK%Ax?T7VZs&>F$l}+Xv9Pm4kW6v*mXWEnk8FwpmrpzcWyQ ze_rsC>iHPE1X3YxFVp(V5#_P`QAnSuR+sYVos8 zx0d3&7&17pP%j}ZmO6yYR@Yyg5Xg&6W#&1&P~z(q7Fz#HNRgtCS=uv_ia7{i4jW@C zE{KjbMOHjO-WAiEaF&VJu*XxyPTsHUL*!z z_|mV(sb^Y}i!IZMvW&7VBx8jP?~~g7I8cC^aWaCmFpTKfu*s4#a%2P9Ic}P60;@hJ zusxQ3`|}D7b`8(1d%5ab6c1vH8GDiSf}*7=xE5xxNu+Zogq`eVEg&=1Ue;_~%ib@0UgFlrV)aI}7N=9R%lJCm}q!;+3 z$om+KVwbFFDb}|d!6qxzoMu3*e=qC=>IGK};d2=u9i?przyDf}A|jj=Xk5-r$Crpkd{W_$O}pA@Ie6F>%Vh(*5T((-dIQc@ux8)Lm@Jpro1d z!y{U8#%W19r>)2*6ZSWXhX9i8B??ZH7eAF!NQ^V|YsE?2OvMFoLNiUVYy9s8(BLR; zu*WO+c^5E+YLVfFNiGBkRTL*yanC?lU@y{-14cSG^5l7uwk(xP&0f}_9HGKuD=w96 zwvZ$SNib8D?9xKr0ix~>Squqr=!@?jzW6t&ZA4ZIWo~41baG{3Z3<;>WN%_>3Nn+? z%M%1MFgZ7qu?HxBm03%Z+qe(u69r|j80%DV@Ogd~(H zk_N~bPs%?&{Q^m8IGf}!L!bdP8jbF+8?E2pzxwt~l;4EGwg`&w=KgS#MK@VcY=Z=P z_031`^QeqgcH<{W;0+yo%&`MwaYx!+R?yF-5y1NQ#r`4Kvo+c#-K5roG{Sh2FdN_)GW3g z%0W4y4bv_cDD#a)scwQBKa96&Qm__ut=dhLdxIYE^R)5fIPtW_Z|tcrJ*Xh}I;(1? zprY_w!m5mar^lX!V>F7}eQAVK9(&t0J%I#Kv`xbuOYjHva}Xx2Cbjx;6nmj8+of0P z4HNH!KKG6KCrnIp?_Ixv|Dd6?@X7%Xj@0)=MA}i?!8|ebu4@N_BV{!(g|746`%P4M zcX&0gMcCqU*ElG=-@%G7@a!26N0e%lh90vFg(XaXcs%Lq#1kya17m7c?IkM<<`1d? zDY@GnWr)5p^aMNLDX0b(g$h`ZL;?3yFQ}2#@S_HLS zqnanCUEFQgY<&1MByqiVEu`{10JG32Wa6Es>&4zmhMqudO)-G0D5p6xzK#>E4GSfV`6Jf;ZqJPZ7w)89=Y{ z(}r)J;R+&=h{UtcVqSJ(>B%-ucFxjc=t1ZwIh~!~oyxXVjb%IMOM?bGaCYqne??Ki z_f_+f6TlX!Y%#NrV!1?YJOcDlGjo=fd#!S}ouR>hV|m!I^u1f~=YgNqO& zVbl0W(~UikoRziZk%A6(zw$IbEA;2H=F?e$+!+mP=mgN~3CgF8W5FrH42Mo63lGLQ zm_is0(s`>|ohLCVt6DKw@NWQr5XW6(>_rC-oe56VnJ=Jf+b| zm^pS}iAEUV>1k%u$k=3A*!w><0g$~ba&~!KE=YvU35m$HS&DVgJE|5FB*i{^?yPw4 zj2AN00779a0O@VVv=iC)!-mz((_Q8Q4z6rB8bT}Vif=Di>L~*0hbf+i66He|%()}E z5pr#`Bzf3fWDskA$GgfZlKdLkL5X=0d+(K#0F4IkU-4`PdThC)ftHXEd7tRqs<%8| zYojXJV-fhUOGn2BMMz#vVbZ!yl-mxDxpEAV4xX(Mg=BPc%pk2IB*83^NvzuFsLAy{(Myg<~wR1d;(Vp~~%Zs7{v=FTB9{Fqv_lN&!TIOq7i=B-~O~+9WW1 zuOXI*RoR!-Tm}hUB!>ouK~R-riRPNkxhE4PPe4X_Uf!kW1cROxA}cfdvzQew9qGhkYNc05);E7@oSGVsc>8{2=GbO@(X~Uj!Xoj6;r91AbDkg)@b#y zd}7tU{vQmAvL$Z0*27!RPO2dY7(-XAFfH-0}ZUpdI>8d28n=gAHVbGIZ2z^y)y z8hs2qpIYA9=a?}X-(|`?jzxe!|Labk^F<+lMPIlDF849Ihu$qGGmotnD{k}J-+r7*VnM`f-kbC-&n%vdGMvZOaFOnl(_#K z*>dnhRVzga10>^ApM_gYA!DK{F0?p*Mq#Vuk8_ijH~`X*lfrQrU+|h=y-45(3=X`# z&aaSo9XXNql|S?>UhF$y0=0Jn4xK!YZ(pjU?yh&>I~Mqa^^(Pvo(*CmJARR=SnxmcJ*3t{;QS_pZvAW7YkNACS7GZ{L6q45*=w33-0hH`M5OcOX_a9hjZvaGY3v?Jt^M{o`q zK_*H#B_yh{LE{=Ln9A;tTVM-Nzy|=JDxI~=OMPLd#c_nN*Bo=^R}b@9r1Y{OWit4k zey~KbE=A2THQTs4JI!u++p^|bC!~pMCC(|;PF%*EXDmGB$0=)R=#HrYe~-82WL^ctD-*4 z`^|bOA-WBMVC~-fDV;>jugeSUf$*hT2&fg+NvKN5U;dF9%XwIRULCQJ|8k2E-@Wva z&`+TP7bx_qGj||^B!6Wu&drmPO1oyG&l-#VewGB}8g5TKS`>%dD2pMR47Nd>xZ*zy zz53z))qemXA*>#gq2Uvg(aRJ8HIt!VEq|}uHWGf%ukhQ-K#i)!B*={62-wk)=}V^hpIhE-wpch@r{Ch=*DswJ3oJDg@67> z7^OOOI9j3A?gYl0#t!Rv7kpaB`=ISU%AoyhPv^n4&G+j~nxuhggl?*n>uEDOM%&O~ zHYM8Bq{Tzm*0t;m?)|X-_ub!D;c62l+bk{QHtm5JhH3B%cHLvwo$LzYyYqTOeG8tQ z8Hj(|^%%;6dmd@Wrjn`mSokDuBY&UXJv6qOaoPu#xU`*+ezLZDNzFJ8NIuq{%zbTT zsBLOxH5|Kkd^q}!mCfHfI?4&BI#Z+O^ZmATJ12s$-NBR)bCKX4N86zd*|Qvp>c6et zSi2`fqQJR_b4?s@+>nIihNCbzcdqSZYSRu5YAp@ar2JbM6CG3It!qqEI)78k`0KW* z2p=-`YTPVcVK}y(W8FNh_erp&BcyR~#~kCF4sPnFp7BP#VI+BUjrRB$p!&(3E#28! z5sII5kne$1sib?+6#*OlEN~T;>;kzUBZ{b|sbqTDHlR0F`+RF0O+Fu+mXW20c@D%( zuK5Lf#*iW!3}Ghl+0i%~k$(YBW_zK{4~j*deHd%QuM@+{^V8AQRwhi`DhqT z6{XuG&0`oP;+Rm6Y!h?L=mkWilb`fj$u0}tk#zDn_>V0I_qa~ThJW-jAc~{L-LbP~ zkoM1PnMf|RYGgz(TZ;Lvo9&N1EKO2ThPG6JVK z4Em!{!}*+J)tSSfO)n{Fmz@*i?AQ1Wu=eYRcOWMrrwy_AWCJM%yCG zJP6}r8%G|5+el&fc3q?d4(7nNZjQP)^xoQ&D`zN8u2Cvm<$uos7;dvd5B*0Rg)%L> z!s&-i7KXv=y6wr4)@+B^q$hbEjDxEQu0(kfLMd?FE&=`ndD&tH=xDEiCiTMSboOjq zr3379OWW&2aq|1;2oqvy&Zczi;h)%-=VbGm&Cr>qKahKb4}_BFEc@O58jcFK3s=j2 zif}ddw(EhJtbY(^iW8ATRqu!?;!~3>_3n#kWG~4YTM19Hg&+XLE7#o%jh!AC&<4Dh zIv!z^i3l?F*i0Zx(~lh)w3M*D@YDnz1U~!u?79hx1afxP7aIvn@Y(9*+8ylRPIkM5 znT?lW9B;EI|1-#W)!jQ%MTh8vWMEDd-~cfLgqtSb^?&nNk5>mnk8!1OG(?ROL<%k* z>_cSJE<#x3bg`LqZ0RLV+2Z^Vn@}BB#Xqqv_dqJI@J5fl^M0lhebvN308&Z2Es*L zL_Qb@zveqz*;psBC#d&6w3fhSGwr%?t%lzl;srGm@?w)zq7}A3Rv(PA`BpFDeOo^Q z%(j8+%JPs7E+!OhGUbxukfFbU^dii}kEZ)wAb(*vS`&(;%V`LG8H4GbjWcdlA;E$L z#vmLSzNPEnCne4Xp|OuXGDFvXE-AOrMc(TzJ&S&Ty)9ezkPsf_YIK4pk!@uq8EAXt zWj_ef@ARY*n}57C#6dXG4x_S2E+F>q7@G|G#Z_6UWWaFO{#)tn&16C$$=aEFcs^%g z#DB5~Xe(<&n^rPGv#ouu0w%pYJdkUkK>CJGca*pO3#MEZ7?UNohe49Lv5^|=!A z@KR_QnW{3or4)7m9ACwe$TSZ9ktIdMz`eJKv5y(!aOQEn|01F~J}_&9GF^|Otc#P0 zBiUT1Yl0JM9u-MK6Cy@7v)#YQXNEycI)BiUU37Dzb24=9(N&|V=Q#RS0QlW@Erk?g z50y~d+S_5Mt@l+ol$sNS-_IXJk*iIH4vJk+vn32XqBSTj{nL~M_xHp01a@^!$1*=5;rijY8^8-Lv! zWrRj1FueTaUM7}P_y;0~f4ZNb8*`>(ATpq!T=2J)^by{=A0&d*C_WDQbL~q;oQFrr zC8QEK@tsGVej@;kE_I9P&Qa{skg3F!EJdWgRs{=Bm@R#!%GYyd>*FiEzLcbb6L#>{ z2f0+i01&?wwEspy5x+4~G#P~!h<_FbMbEa#f}7ENfP&72;Zv-T1cJ9-d-|@W^I#ju+lLG6d@kwF z$yJ*U@vnASN;2boLnf+f4M@$_SAb~)KR7@9|dkAJRrf>}I45de>? z-mNcB_x|nqyw;lQGFIYqX*@Rpt^8{IFs;;Lrq2&N0+u|-_qPfy*)|LRRH5ZpXoNFe zl#DVG1a6M6-u%Yv+~+Kq140`cVMx-1vh6Bw@+uh+ zFAuah1P1#&4}KiAfPdQykK;_pLLnP*>-BnUz;sTBp%S|}sC8nDrb`9Sfo&NfxmaiwX-PspGMn7l0rtnIzN%_Iv>YdgT*U6`cX!oSUzL7%{N~%g=J`Vu9?Gzc z9v+_`iuj=j%R`t_t$z45_$`jY-M=6I{_S70pMQjD zU>&|maO>@-U7iNjU=A`vd^bZHM>NB39|f4j?xLVQ@Afgq$mi6X+7414x^+``z3$>; zFt*fzzON$g%_r1M)i@Ef#ts+L>l_!OlU%zI%kAPK;Q5oFnl@r;Y!_QS7RQHulpM0O zl-p=Knkgyc;N@aZSm+|vjom=pn}3s`OQ1z)PL|l={cfLzc~G?~IaO`j4N`uhtC-k{g&iFO(je-*nR9#j2Ohfwadf4rAy7tElKNEU8K5e)@ zDBo0)B!L^u4JBM&HHhrgwK$~QbU!$0ucYylb@r*z(RZ68iRGbu5UN!&lz&wv%b_ZZ z73gVt`!o)?hptr}T5IdxKT;eYVru#yRQ6w{HrLx=X@z|j@%i~Xw%wC6y{If70Md$E z=^C{+sTXOw>iZjNT^z|UsDGMfbllp0vh`RsQtub5OMRiQ5KQ{YqX+ke#(` z?s~I16Dh=gOW&jqYe^cDLg? z<(-aK)AQrm^iXL?OQT>iJ()$mU8{X68cIinIj8y5OnS0$x@v++|9@Vj^nBN(>-V+* zV4AJw|E2anwGDw%nkB&tDOlZC(BK#Ri0V;8g*QXtHa<1>^oDllaUT34P*6_SM)+r( zNM`#l)fbeByh}ABW-3})s8+sny76+o7CKhvbHB>~cl2`xLTvkzyd*2?Tic%9`!|iI zw(it)4v!iGvIhD3D}RZ-X*42-zQ>988%eshrFTw+JWjhhIi#t_M#r#aEN83aQ=5iY zeEk3iRLqMkF$48}p|=a=$~;ngSibdYE#rwD26XFUuA)|MsJvq$`Nh_?5lDT=4`BvX zN)JVr%AAklCqp@!;(TvwEB-m8E&V>)-gu1`p>^^dTe6>zyMHVr9JP%)#6Q996@)O- z=T`Nz+YW6vEL> zK3k-Q#M4`$LQp~5BD82&Kp=8c!-n>v$1~#`3S$ce`XGv6pLGIJORq_~QNqNpHQfr+ zIO@5Mdak6Dw={e>YM$+fH$@V~r1#Rh5@Fr7-lZkD<$tlMr8u)Ns$8qVTeJuSuBTa^ z#@-E5?4ISjaiqjMNK9arVBWpnli=e=>J^8wOjPP-$knKrc^S#Kv_e{Bp=Dn>Y1c!k z(lGcl=@`8Y>mfQV2nn%YkyZLtZlcG)?ZpW^TolxPuxBsRd>#DEmJ1{pH|L4q-IEd$ z&FIa5MStkBKp*!t2km-OA|Pk*-VcwR+c%t1`ZymL}sQAMg>j6GlY z0J<-ZJT}f!i}T`pj6g*PDctZ}X@u~SF4{=he6CKuokI*EkK|kjrjqY;ai%MuZ?xca7T!Up)99G4>YZ*#=qEjKUG3+c|Iq-mV$VG@FJg8^>8iWl0hVs!_>< zDv4H#P7O~Zvy+cJP&mG7@oL!etZWhKDk4SSs-_2|n)hGP{eBkHEnwwqhbf4XYIhV? ztQ(DSxMf z5pclRPFs&LJsdm(c+rwyVpKD`zcSSvNv2m+rmGv5Caa;!t>+!k{n9jxGz~|Zt2vyy zD@oeih3)9j>Z(9wJIvkzvM4Se{Yogi+nfYwb22Vb7l7YqzeS3d7>L;*bXW4EVf@w^ml%3l6XawmLPT7THJgbcrE zd>WMt;y8oKgjtA-`5@Njbl8FoN#|E<8UQHIImq|gIi0HVqtt!`7MS*l6=v%IzN^P z;bb1XodwmT>I(C=o!5QzuYV{j;SvRFk`Pg$FsD+nJzhW_*OV2NcMd^hR%c%1At3%D zQeIu-kht_gwzN@j&l&K7UaAq1q8ho=$ty5qY>_KrxFF68o`tG zK5DR>6j|^O4vdgJd5iXkhs;m$eJ%Og-hq~tdGJTf{ui)kR+=1~dA#~^tKZs3)0m7! zUj1_K6aCGiJL3wP+PyxN^)t~Oe44#h;r|X;j%v*?X=K-b)b;v`Y%4!)lNN=0F)W|9 zLgA^AN1s7u+K@(Dnt#$C`mWK(6PKMNnZ~t?=@wzfX<|U>V#ft`tTSuen=%>I1k@^# zW|rwtfwJ+o8Sc0aPlCkHKkqLmE|TD>VU+E2)|y zl{Y?4Z;Z|}iKdDjoN1nQZq88^%H|7U^98{BRrCaW{+N03*MB*xV;a2QIwyP4l#|Ky zy$hB>sYnz4=Ffu;O7v3oqu4oW^D(uX5V(|Lyw>a+0LUue&MTvIs#>^^ zuz;ziY^vC!H-FX4t0=nmueYH)_Z0$x3uAZ2|1%Nk(0}Bd?xoiu&d^<$w`jD$SfyY& zO0p#KDX2tYUj8d%z_Y5)wfSUE{?9an{GJ+^tDemtrYpxTMfld8KXvZp_G1o%wgTiLmIRsxB7lc18y?>|^8UJ+_vj0a__VON)80lJl zwayVXZ2#Re!%f3k*JFvq!hkF>k_Z!VMZ+Dxgorby_|~2w$bn&T<#9okq?_kmaXC3j zF0T$HqQ97FmdX!rDd5y1hsj5u5I&Z(#gXsWG-gG1AHNpI`S1)NkoW^$CB;b+&t{Hm zYK)e)(cv69%P6)>552 z3U?lh{~kemKZ19nc=dqPNL{lgoVqBJnefQ8meHAf{em!V{!N7L_@D9e1}Q1R)h(j? zy-t-J5TNC3J)PV1vCB|B@u^<5XzLdLOmq7ysDSwSwOON9=628x`=-bFZ+tFM0?jcA986XQ}GsrZM0VaE(CE6xh zmK>7mp5EObzxARlxz)&CEV5X9ReklMe|&iN-N#~km&BW0yi4vL4tG_0SH-(coI|g< z`x<>1obOlbERC9%)jBWYNOcV~@?GTm_GtwJx~pGSyCT}G{(trGkMBOFv-Q5NlQ@o} zhm(dyc1cwC-74Ki-m2O&<&Z~W^>)v$Sr#-P@oEx-o*H$;iOQ-MJ7vViB z(>YnZ(Q7=_U3|ArvQ3fi_*R$I8V=Dr<27C;uA;rF@m!ClJKh5&E#Z1RLWjb}LDkZF zS`|g4+CjQ_N`L&;#@0ityy=C|=_g!NTkh&_wT3Bhsuf%jY1`=eq&$zFl#`>-;k1@T z8a+KN9j*{1;1>Pj{gm~%Gl~Q>^k4jdjCdh!mG7;P!WV97pN-SA3AO6Df9`QLz6=j3 z9vGaq?;Vps9a^7JaXfYyy2fn~D_Qi@w~MhTYa9Uam46~WoM#-9t*%>T&cL;BqoCh3 zVoYS9=cCm}(|>+V^X6LsU*frN|ucj4rXc{0tQ+UX4oz96GnY-nziz?g0~+azbs-w84) zER2%FZ-3Vd0WRYaU>X2ckFDly%S@u*SKAzwngXPop1-^vG{9PG4acPpNrW1BX>Lvp z75k?ZZVCIg4H9wyGl=Yk+v5TPX#Q>QQNVGe6^Zx6EPW6=Vigd!0Er0z@*KpjYzN0k zqNBqDpiZh1ZlJ6q4zOf%7W0MyR1QvK^M=u29DnP&KlRqj6w)tqHpbO$@5p21Xt`ve zz@$1kK>#@t2`$?zT9Cmk-ebf)*h-m{(LWhC>?V3{J_pkypLWm;_IU2>7-v9i1cy#p zaf;8UUdCFhRU_2Lj_mqbeCR&74B*q>ytW;x8Ar}qb&dx-p^vs(KruQVgHF&QAmdS} z4u5Sio%;X2bJR?+;ClQ~ttmMTol3=rl1IxY^BLuYGJ7(Z} z%b6PeWYD$a8ogy&r^$hm+6-ZQ=*#mg(J z*=zIzoXbo5z=N(1zFJ~~wmN_sy}twxz<=(`&1&RyW?>7wu(s_BAfGutoAU*BY-zzS zOBaLS+&QsP8(dNu-zE7b%ga<;QU*Q97HCEZYb9{7Pu4uGN^r*Hm8&B9u|?d0+E?)N zh}iHQ4Dxm`@?u?O?Nb}5v20h&qn@ToSG6K?WWn0$|wiY%%6NC*r_|uZ; z|A>oN4xG$=Ad|r18RzW__Y~e-Ok#6@RNe2h+hXI0tq@Stb!bkNzCAWndzebCFC^B5X0f zk(2O^q%eh0d6$%%T~^LT_ye4vEW(W$G<U3aRYYS#i@s7?Iwrss)d#-KRq#4_`ZQHhO+x8vXwpX}f+jg>I z+qUQF?wK$1_K&!(t*VZ_>O8jI{;+=|_zP0N@h_l|sue)r51yHxO-^?t%x_pH%d?^4 zfM59QEC^84d=U>Yl`_ZO3yIXRi`Ke;f&&?8;h3{%8|xkZ7YdJsN{z(*Cny-yj3i=O z9?qcc`TLBkR05}lAY%UF&qcCICB)F^+c1A+p$nXw9_IB4Ivk6z`ky}LdR4X!5Y*0* zV9I3H3Zi8FpYSAe)W=hX)ATi-lKA`ROm9}{drE*2NC?~ua}+A-`0z=ikt=pqq(zPU zS)5-cn`^2j)q=#4XHtw!{ME%tPSJ|2P~M&s0rEpP(2VOzXygLEHrnc$W{W~`OINUI z{6%h&%m;}a?PlzJE*Hp=8SA+-Jr2TiQK+wjUQj!7-9V?zl6+ER<07}u;c5=3eJA$` zyAB{h9d35x25X}x%QEpc%vO%h(M6o0k&M8^QqW6V!5!a}hvJlZ8y-ivsy}MfBy?$< zMW_1+EZek!nFjK1#zQ$YEQSnASnAp%ZTy&L7{7wO#aQq>lZ63!79;;H6W`Cpa|-&E zKxghR9(H2Y+fblx1)Sv5cFYN+u*wjqTOmM>fE9^`UgL?FJayVRTG&lQ4&PiFuasF^ zjv%CL&qNOBYzH>MD%t!MW2=#RD-efC#v|t2`fi{aO=;q@pH3sPIp(-Z;MfLHnm7e) z_jM4>`I^f;cKWi?SE5WB3@w&aaPokH2f2+b>D3YV3e%oY_q#yROk_voB?e}jA_V}+ zG6n{+i!uLkYIH=dHcNg-OXT9x7#h zR9(0UPY+L03xUI;OzYGwJdxuA|a^W9U2@nv!YnkL#mJN8vu5l^i|7X z=D?a5x~KqxJg2M~8rZ8x)=w`Q?#ZJT15V>FA1FCkL(u?~I~Am}s}aI#m3g>9kOG!U zs;=UxhZL?^ACV(hxgUp#PcD3Pu#fCE$qST!H{RogO8ujW4hRu*vqAA2&WrL zNe4Gmn_do1>%`h(VUkzm0+vrS;k-V_>4D@_UFL))UE zp!5RB8{eY-ev;)O$h`FNKFR4Yp};;l`za(1nZA}O+&$lyBM@i^=e3#n`z0x2EnNYh zHSzOu3WohAGlAjk_g?$Y09cVsiJ_0|fvyY=I7bVYeXQ&z-qNXE4nX0@Gemt$+IS#W zeWHcp6gi-z_DzsvzpM|1_RAKk72#0Q=|5p5gS_nC34b{S=M7UeSfC=*8C!|}0Dt)T z{dRS5q_=$_C}Suf;MX|;MP}K~j5A9r(kUbAbRGhS=THp03-K!3WR{|#;WQ5OM8v&u)t>b7!#!o}AmC73o56r%ei`AIVtN>$ z><&?CP3*x$ih4n%EGLTQ`R~K~#r@`=_C>Vdq=I_qu0uB&^zhOG!n<_AY|97ce=Iov z>`!QQ>ozMaB&&n&||tV(Alrr0JK!e-< z+}1`LKBpX`XA6yP948jyl=oe zZMYHQh!r{OM2U@!%j+SVPg^ac?sQEjGn@e5P9@FjJ`bT#O_RSEi;$WETBFyP*WE*| z7)e5$Gs!WIT&$%Q-P1`Bu~~E#JpWeuX}T=E6Ms@4RA?*6mbPBI4l#>zvPl+sHHGU_ zx9!Wj(+4%7+OA%y(`Q$Vw@Yucu z*?k?Eo4M*34dRk!S)~OO2|6aLjib~&UgVw6wAsC9kEu=SE;TGfK-6HH9iVoDjL2*G zKi?Y_@cuy52ialk>JJ;;suUQf8Tj9pT1CyVw|Qbz*=ZG87;dK!@z|1smU!S#2K$rYzbS(C|0S!Fk2bIqRrYSK^A(M(B4V6YI((zW7@i7 zz;p1PY#_|rIAFef0)7Ez;Z4R@au}n~K$1XQ!R^4dMf(+m`dG|Bn-%t7dE5;0rI^n; zZH)&%{t-4qE9E5?;P>Oss}spz`VWiH!7q#PRR5eB2@D|s8aNWqk(6BMMVSHH8=(^w zpXk-DU*kjCa3KjPED{8%145c_9P`KfVU)$CcG&p5+Anm>K+=FCDK-MckwXQ_?F6mp z9ksyPiMR`$-xEmY_E_|$8RK+5JRp2#q8dE^vD(oD!sYZ2tcP(QY2u%z8$&J_x$YZ2 z<;G@mI@1Dhg(2P&D{sr4)@vcd!dfn{-%v(BGd3@C?tE5IunX-okK@iWPaEI0;&>oh zvZ}SY0p*L%()pJNgX23rq?+@fmz+5-;o-)GVY z{%lzgp`Wd_o6I)JjlvgBaGOX5=)#!27x{>IC*Wa11Pg#Qc!a8;ejVTbIXdzF*ARZA z`_Zcb#p@-|1?k4$8ey5P$XFy*O1e@nsQaRo2-5AOJ!^uIO41Zk>Lj+mLPDbs5=W(Lt^5)ZOqig z9w%Y%^gjStOeY~R3@E8Uy1MQoWd$nF9QYDftLksCIGYcJj2HJBtgHfz4g@#ew0t5W zq4Jy-GgU3Gd z$E_v`F&W0nm4}z4K82VNB-d!E+^Z>p73Mx7+rQH$in5rd+>DySK`CWP zkT^o56B}tCa@ToY>#eDIk5M$Xv#2;Th)#;Wumr^B>112gvCmfKM2xfj=40|+8gXbM z$#;P3$`@xCRD?2u5q&BV!zl&QA>^^4}5@2Atgj!==3K$=53IY@ei4(4otks)C)^-xM zfK!?T@9PaiL(c;We)P?5(Ca3xN7jrM{1%XlG{1YI-J8r3k=Ud_jU!4ta;nwc70s|G z;rj)D&TcqoMl4zAJk5s`7etY54Lp{Np|rLB7V8*`aVQ!-#RBAMoC)jzjMQ=gk>BNp z)qneY1m|bI;+1Rk0Fxj7I`kF8)^veSU7ux$1etLU=F(*TgNH8lZ(B6P!P^E>gAs7X z2hU_o`R)yL=^4xKv>RXkU^-?!+6$wXAg-D2WNo&&?FRH0I5Y|iQ7QRq1M;N;KrKPT%n+jU#acYn)|1S^m^HnI2+Z%xB7ra`M>7a#FMoKO#Nj zC3U6e+NOHzRfiTx)h`S7VLpEJyAP0eR?uXX^G1Av&iO?FO2Gdvwdhj2N`bZqP%m@Yt?lCGQ>^9f`oXJa)YM3Z}){j)gi2gSg>1m3eBvqeh0_maF#oN8 zm<+;8>rOm5wlrogQy-#Jh|gIQW7~X_H)op)vZU?oNM%iuQo=7ptPOAM~MH(24Z#m6nH9FI%OG8UQOan)*#IuKThQ;1T zsUViTjt6=XvrVF@A2WdZt0nd147*pQ#_k1ma8>iSFEFLQ2*}6Y9}FDE%@MBcyq*t6 z7PpZa9q_mWaiTgAFN;b{>6PFLUUcVdIyGNGc$meE`VL`9m{9&-U9R=Y=8rF=+;r#d zU%3qBqoHWf?(0Uv_6o>duOiRi8};`)ME%O})clT+&B(=v+ed)bo4RFNru=kqRx4F+ z(b?sVZ(qE0`@B5-x3>kvIw7!TxhE+2Bjfkyots;`EQK1mt2|n6mq#hi$#uqJ#}SJ8 z5IaOdECo?UNh9eZ?pkr%%7`FqeZjf1j5JI@UAI;~x2qHiodMkx9e238o%2x61x~uY zGFy1rHb=WubUh&74Z3!MW`gBaPci2dT~8D|xLybWO>Y@eSOOdG%Yee4j+}qs*8Q2O z<=Mh6)7X*-+wd(fZXI>V z*_3)bvCh9}CQivBxt;gru(5vx^CofCgNF;gbH11)1Tp~}yS2eLz*62L1z&ZLt-Z}P z-(%kXyQw9^LnDOXoTMBDCp+JHP?Qvu(JqESeBjoVlqvg z831ru{yf_8|14i}{%vs^RF;PNk35fHz?^(z?&L^w3=p%o6hZRo2mZyw$He=bwg(2p6yNwz z(`8PRx?3yEgL$G*9iQ*5f8?Oi{pqvgsi5TLdG~7o4%m)(&s~Z88GDN%U2$5QDnNp& zRyA+b;z->Fxu(bWYxN0#Ng&H%4AniR&p`ASHn;habMicyG5~6^|6ka$ul}J?ISo-* zcdOM4tl-m28LmXuj&{wqs?}*yxnSF9)oed9C;xrlNXi9*N1*S1-b(dz7UAd=+r<0g zaCO~(r3ffg`|UwRBj^I|prV>aTtLgR97A^1BDe$4e-znSW#>^+-3zIW`M*)MGFF{8 z4~?Wd2j>T-%ULRiipJ0m&*73z%Z=Lgp#po)vO-?4v9VR6x=#$n=DR~K3he*Je}a$0 zLlvpmn}CF`rAVD~y~3pCt0wvOsGUp}p5(}hLwAzp_t(t6ghQ2^<%X^t*8%YLhBbU` znyrTx3vip5BFgDC18zjyJ2qt=yyS}<3pWN>E4R-@1KAAs>mTf5Utv*+PT2=i?#dRQ|bd7cp8U|thjNcg1(JT{93 zf4D(lP+3+*^jAI|Yj@eu8Ui(f+^~HX#icW?<98Mq)7~c==o9pCj~#{wFa|KEM$ba-Hcdy8%(m zF^Eumr)SjIpwxEh{dB;K#-5>o!<2|3B zlKO#?nu~s4n;R@J-@wI+4X1=YSrOirAZ9>zB=jJKyYk#=h#GshadPYYO2HYLU*eL;5Wm^wM96j>mQI{8HGoeCb4?MZgf$FS zpeoHP+E4#GI^Y7H-eja$!gb)j*oH{qEiJO>_#Elyb&e^qymVnvh0h#6sniJJM82OH zSLzmiA7`(u&FDpe2r7DGk{PGLs~;zhzs{ZWA>{6all{mcl1euJ>-WMJX@Xsx8o?VE z;RDYpNiNflJ`;{Qbb^WexH3}8Vxy*NCgiEt#gj~C50G3FUj4zk7iWnCa#%K8AmxO_ zFp!VqY0G?E@UQdIPVng0jZ1&*24W&L9_%U4naESMBKlmk^L8sS1RpVx$!K5%bT9f* zv+Q5X?HV5Kx~S|AUoSdbDh_JbVLaJ$WHK`)TPcS4?OZqsg1Hs`)gwMQu7zPvLXU?a z8eIPDEPz5{m!-VJtjnNw=qb^TRJyfKVV>grigHOr=IY5ZHh8b=S2#_=09xhEVl++c zN5M0+24&B_s_MV5Lq<^AC9w6X{~xi^I8aB*y~uL6OWiQVM0XNNeFhSn8)ub@JM$fX zv?&+g9rpdR&K>(am?7c0GT4xcRPh^>x#=#n24KzhMwFzY6uLerCemwK+sISS>lFo1 zVj36?8tc{oK5?u;q3&jj1Px6n&EI82O)?w?|BC_1KC^b{ww-MM`neCT^{Wdfe88o_ zDkO9NwCH402Z_0T^CiP#F~TM+c~F8oSuG?0KWpr?WZK%XjL!lp@d(9(PeTvZqi45o z0*F2b3F}B3Sjx#7y6Hse?|B8|f*POR|bOO`!=-o<;;- zqnfk?qEo5)S;Ljlo=0wqHG**9Ra*jOP0TvthW>63Ul66lBLFJ-NDx9B zO;@<>amA)}GAWn{Gp9C#&brjMh4D;=?ziYG>+qZp5rS1!x17CYCXLDZIGD*fa*6k)5nIU6g?+tr} zb*(@(ts%C+`@BQQ)_6_JP~Bwzw76%eUf;h*8pp0j)bU=E8Eq4FTOR^C%s}Wqd3d`! zyuwOE7tk#XKFH;=j<|L?-6v%F0m|IQGyFT;;CW${8zv2dZue+7wx06xz`Rkex4Vr- zjxvN-fikH~Id6!}vY`E;YVm_u5_xnfx@KN`<*p2oOfh~Ox~L|DyDm`M^0Eq%%{`4@ zcFP?DJ}dibi^!2zO64_R!$XsUD%vrJRrc6z01jU$`pmE-Jjma@$_nBy0J&jl`1&O| zCAWuDuEK!qc0L0{d4Qz)ZZEl}=`_|@$damgw0~^EPaMr?A}bBZX|q&EWb z7u4cS>h?waW<)v7nVgHz8>x9fq#`Vmrjp!*G~?1z|O{ZKC8C`K`%)l3NVjKsITaUHsREjv9&>y#ck)ZjPyjqO#hcJ>lgD! z={ag{9UWD!&#o z1tQ6{UklI2^UEU)0JeO+#p<^Kk~kSsfVa#9Ok%`DdV6qz?paAPVgqHl&G;}~0%_`3 z)Za{S2wE=}iX)myf2wSU1qK|-1u{QS}DKYTN8=iIkbw^j5!uVCDUIg^lN4Uu&Cr)iK}}7dwbl^i_GQ4 zH|)Hh5QDimx+CK`*2B_$D$BXo_hwHxwvFz#Z2IPeRI?s->qI7OwF&&5I}vaJd+;Xp z|MEU`4ht^eWH^rzCZ#}uG$N@^(}H@cfT$#P{aMW$e0#$l1Pz%2@u8L;9LFUup?V`e z=N!=)@vNu@3}&~QesKRfU99VIQO*^r?S?Oq>NCkt%3G}yut(F6Q|pz7M;>b-mkW5q z4e(0$pW6~Hkv17Ul)15$V)4Zgo+?Y$Ln|bsVj8sXO;wbE2nh3Ymzt-5;a- zy1%^yl^nMd{)5$s7d{DY&PN9>&2wRu2m#`r1-(}S+#{c%s@fU3sH=^vy4wRD1VPEc#r~%h=VBvbLi--PaNfvv2gnGa#d zh9g91=xO@n_jq$fBBki(nB$!VaB=lahS+q=$iM2gyA&6qR_Ntg z>;D;n_b7TCLge$Lx`=sPj`?1S1K^f6EUi}gzIpZ$|A;v1?NW30ni6mh%r5B9fh42v z8}`iWq9Zm{9yW;~>zxl)WRF$d&iMPUoQqt-NGC0M%uq<>NviI$Dw1}mQEw?Mzh(<= z`m0{%uVNWbjMXl&GZ5afQSL-tMr?9TYDuPPe6O9$XnoY^QE3ybhcVl%0^q;w(ZaeP zZ1<+V53cS48cw+ds|WZ78$=exuH19hJk@MrRHzn7Ph-og%l@oGEceznFl}=iYFwXn zn+z_wS4T9wZba|yIBr4FmF%fGW#cdg@+>&)sMS!rHxwNUdd$?nqW%y~UEx_=Wm-t3 ziP;d0%bOjSDD$uDrVj zF2~pBU#giOB>Y0VhN1axJ?}^{^q!A!$dL2_&RT2g>OM0~uT`}9fV;)2rSgg+xWDE! z%UKWDf}~tj)03GbpSZc*^th}_g~ab4<%)#c#(&pClT?d9#$1G;oSdZ#s#V;V%%W4u z=;dpnd?E#|mWg;>hyt@Im7fj8Q|0@A8F4^6xsag0)~k#W z*Y-z^5?zx(Tzg3=P3p+l_b|cG25GUDL{RM|<1-sqYtKLx_}Q8n9A$>%(Uw8Z!f%mgS(VyrQ(U4f=PK?AGq%6xp9$G3lRDNSB0fcXRLixf$mQ^Phfx<6# zx^7L=O)8C`>~-6cNgw^45ROQ}m;tuZb&2g#=R(CLMWC6V3h>#2M`inqK~{qV`8)quj3!gAPf>;5DmU~F5u8$P(#at(G6@?44J@Dk#)jJ=lM(0uMcG+w zcN|2@;deHa17Hs%>mnMC#XG{~{w0d%BgggNPXuKVq#s#b3_5r~cDvV#kIp+gfN6;3 z+H(D(=i@`h;&Y7vZy=(G#Ndwj73m5v=rDTRxYsBjg9CPuzXtnF=m7GVLx>VySmSe{ zP!83d1L26Z!BAL`F~~yws({X~K+A2G+#6aZ__LbW6*{U>MK%5JPhY3s`Yyf&pc)JIrDs&f@R$M+i zQwV?Sc#a#E>OtwG3{BhNCR2DAbTKKyLD)j##=jA(5=!E}Q)SqEqkSL&a?_l;d_rm{ z6Ver6z!UJdr1RdF)m4Kvupt42>h#bG$M=6F3T9x6GgT$x zzMC~*i;x^~E$_+9E=#Z~WNNcjUSIr%$)Ha%00guK!B$VJ9#;?YSU|O;-_IBDmjitq zs1f~iP#~455)cG#&}1S9q*Ou1MY7D`5rT<8lUpaVJ>-@`MKfwH+Q7kk zx<5R(+N|Tew~)eD4A(@Rd$I~vIL2E}WUERzR$1L6j{=Wcg(6!-Za<$+-;eLhyOjR{ z`(~b&)t4FR{hd5}+k$%*h0ETo%AB5HfQoZk8gm!^L&2?r9GGaBl{be)pk0iLWHlqP zaB3|-j?|qOKA3VP_>968H^)mkpQO1+%^>~za0iK4 z1SwkAfQST{*Pc$x!vV@IZ9Zt)Y^XsD08F)I{^8{KCNy4uVWn&q>Q}P{D2$H$d?jbt z9|Zhoy*ZVo;(spM`Ixqo&7Gq3=y@g%i$;nSx5t_a_zcl| zr28q1ZFvD~Gi#gRKnmLxu(V@oi?jbwX#cP*dtzS~8^wtovA7SVT}ej`n*=eR?_(q?0Vyr>dO5>!p8H`bPtUOeT%Ie< zeYQ^)LjEuL!}3Q&^ZHB5JJPxFtjF0Nm#T+qlAcxM!K{8qvlu&aaPu?JX>(yY<802DbfYZomLCc@p= zv5LTMQaqYFYKybu35?YhpUheHKT;((B01TZ@5-9Uk_R-&NG>Y)^VpsFi634CeuAb}qHD zBYor(Iy$-X(C7350D1iokcRN}U?)Jb~tWJg3S z%XROC`Raj)yYL@5G_Nm$f2t${ime}hxMhv5{YGZMVK`SHG#^e*xrZhF<#=;Vt)(Q^ z*Hflc>jXHgIP=e31ed<{)t{!0qW-zFvt)JLt~YAOYK_u$0Gvgfli-J?^zs-9%r@y( zgIt2*MR?A?$XYUORZVkf${+!=R+LL#F05^&j5er7L1OyjpQ|$dz?3Dehs(!EszW(b z+%{L*KYL8O`mbvqXXw&V!;ciBtZEy@u^vADv%E8mo8;s2R;z9G&)A0NFTe6^A;UTC0)#Hbuy+d%zY+wH5 zmQOIe?%^aa#k&Y|yHhyvZT7oz)u!9MgwLhdcAwKtMt}R~@n=)fAOf@ejne^e<~zZ# zFM2aMw#nq_CRnj^w!ad0I8CiK6yhOxmXFCKq}~>!I$?H*!R4+ZkzQ@WmS7>a_ekG; zgdW&5OuYdiY`Qx+tMKeJP1V){`Gc?MCVhbxn7XvW?vRb6TCva!ugH$0Fqcc2Yx4=& zA;eBz9Ni9{lrhXZT4VJYa1jWgalYXd)wLyP*{+eLs&2TBP?S@>Fa!eJuFO2Hy>AA# z4RJDR^jxV7F)eopi0`N@3*5Rc7f= z+(hf!rqV3&RrFL&zuB4I@RE!X+=bxIr7m^~FG%5=nDe4@xi0d9c2xo}1rU6MqCY}w zxH(!ZM(=sVcqWB;X8&T(cuRuP(R+*k8GXMq$mqOD3>vbmXNo)$=hJQF=w+wh!4j84 z!y0iazkr;XU-(zX{m_2x{iD_5+fF!~BCveFc1hZ8vS%I_ZkfvGxySFMP?rrXrpyU0 zWqalIluq>DP0HuJFiaVsOykmT>Qxadv>r>f$SNXK6$LHMoJ2-!B$DMR-HOQM_Da>t z_6$`ZasO6R*(LKEl2G%^R6%M4i;_Z~4Q-knWBpKYBk9H#S&5KosnuRNV<~zd)F?1k2vL|-a#bC4y!@5C{!JZ zP=DQ1@Mb^8SD6pkr%l{k9b1UgFgvlVhY7x7p;`FyL7FT(E9gopK%!TS92ibUuhmhX z)lIcpMm_i=#u^^;_^x05NLl|&pqu@#4;sWVgKYmw!ovVdtcj6C5shLN(OKd8!&M)&kBlt4TTgEzE z2;n#*+(s&(5W)8jlzeD_Jok$0(9Uu!3+(hU&YsBZa_UMZS@+Tw(iXJo*% zUc=v9>c^<;Y8jZGCSF_Ec|z<-axKFq!O{1m&XE$(Pb8fS7^u@nGJeER9i-bek;ycN zHD0Q=ciQ&dMKojS%8t!*Y<<6{jAk{($t4f_OlAv3d)GRr#;y%z- z)_%(L6J>B4AWG@&4T}@YPL&d^FUB8NKQ1)6cH>iTU~U>@>&aSU{Xusa)R3J1190YF&U zbLGZ}7GtR>{fq@fr zI|mmNUj&OSW4cD6RTL%%w78R>1UsS@v=D%%S!Y2w3!cSH(-Nm5(s)ar2TZU8ti8$b zhL(~D*UhsL=QA?LqbFFj^W?Lyc z@9G%smfG(JUY)lQOk9^lO0zM)YH}xmmYkryUF2QC`k+>&h;E&$5b#AK^V6dwqAEd! z(>KZ&W(4rfC>D-8&Oc!R5>M;U-ntd^ zN{x3`{$X%kACDw-hiY~SHuZBbwVE-z0{=Q$W~wbLyYdeN612*~oWfz{^$eiS^&etN zI6MmiF(d!yxwp@;7}C#tJ&Fd-5rHdG7l@5&bxCM*DF(ar0-k~WvA<{c;gFd*x{V}~ zyuZz3wJ?^qbz(r`#zn>#>v!%@fi1hQ7z1~I8&C*q2Ycs4xBkgeGTHrs9i*p^b*l8_ ztE?q29aIlk`d^Fyiv)yV^-_T6H-Qgy1-Z&e*tOjnx5Eb4aJ)k6;}@9pnYs3Cof)7X z#7BMv$|?BCtR-8eHcpowvK`qBUN~LlWiO(5QxR=ao3wCTF_8L&3X6{ne4{y3zc`@9 z8O{q4_s9DNT-wO;^w?kc;Mls^;?$3G6XQSFZfULxVwciBo^mm8MicO^(1(98hxzxx zywwiquo(jWqB>3th^ZF^Hbx}$FA`*z=RE+@ayO|EVx>Cw5F$AcY6VV@y8NvH5_>~E z&Y6M5xVb`-8Bx}sxEafO+AQq~`BKWEGAX-X4qc}o+nWoMz~UT0K3}$Fgl}MiTmdz$ zhjiMfUxLCo!N_*u`UwadFB9CH$b@7hb1Q4^VHxBZ0#v_c3=kA z{>^)XOpcuZQeRRvw#sB+d|&E^m7~7QSOYH#Z8*a4NhLj^D#!@zX2YFCF4LTBIHzYB z%h=+KCq*c8dNsEvAXaM$8|$Y9EyoDTS&&Oo;2>;`>81lC2?I1_yoqcT|A1m!-1sf8 z^l@(PKBY6Rx!aOm=pc6#RO`(o2WY6h{ZmojA(A2R>bjdmV2hwC5(#d}xnf_HQWMvfj8>5{XTVDOJ4A*2yst-v-ZD6lmM0d3AUa3@23h?? zep|kWu|oTU%?6mRR7N0<%Gb~v#$N=i8-dVS5&R?y{q|jGwIaO$K_f_ZikY||@JdD# z;ik22w<=LgP?&h1eBB+|#wa6v%|Eh2kCKhnt0Dw*C^alM+VgaiCDyf<0d+90-|1Ch z)usxPOcvPWACU7({_!R)?%PV#}FA@Z~^( z1`9ep)x-$&(X&%5{Xw+8)iVUkpTH}1G|^kBgyZM}qQCtcNr*Ay%7`eo+-u0Gm+Uqx z;q;H1E=_eGU<9QCIHw^F%u%nGd7YCraDdMA+s$~&g|U%StV%)G^D2)@c2&Q?AEIQx zJ;+1!)&Oiy?YL$P?p!bZ^NV9SWt?HMQ8(%B$-y18zDo7fA0w^uF`F&Xrs)DzJo_`4 zU>Fx5G8H1~;d6CS;UBZK)h64qFWl#co?SlZcB1Dsrn#L0cF_3lnKxs(74%j(I--`; zjp@5O4mp$r-O{+3^m%PGOfig@G96$BrK^Ca?+GwLmZ*y#DKEJ^Q21+Cm@Sbjwd6po z76;;YQ+jBN!yU0nlm?64=7tVoKNQ7N2Dy#c?R(YrPlru;;416l_;x4Tr=`iE{YLojWY_Lr&jSJ&LMPnS|e^4vQs_&O^v9 zWO_x!_J_B%w)bmkXlsw36YP*JgW#1;x4&^%5Yx{|cxEF8fKlYg3YVfbx0u@*%6#(M zLze?n```LF-B7_FbR8SFPT66fcg}FnW(~j-gQRJ8AU5#E0^@fziQfH)LKRuwRQGCd zRAc!`p&+PTw8uq-H$MGy85H*79&SdUzPd%~4~zogN9)OgNNcV-N&@wBg&g}GNW&f8 z>FsIGqbn`{fdqSCfd5{8a~jQ46+u*C6pAY`T-PcT(MPieCqZy51+$s7@`W(ROeh!B z_*}r#^S9(Lu=Tf80xrj;`w_2gZLRgY!cI^Q^?8fkaRgDeKaD zoag3Uyw0uL){BtY#q$xQGf;629&DXTS&H`56ypfw=4m72@?1EOt~EccD+yx#gP`b|?^CKG_m z#tS*GR(&<^rrix{y-hapotjrmiicoUL5?C%gQ4tVS|=s%Ib&lSA8bIcZA^II7RPfI z+s>+sb~B&lIg7!1E3bis{A9mA3l7X^`3+A6JR;{oE9cx)!%HGoGJG`ObMCB7YeqWTHF4aq-Hv zPpL0(7Kk4bY4;{;!_JqNqP+e@#u6Zfecl0iJ;`^J;g=10Vg-G*j*u=IxIh3VEc$TK z!L>ALO?L_qLeWB!mB|~|!dpX7oeG*<#kBMQRw5LENh#0x$js-@+vi`uV>B2i!Jz9> zCsy)Bvfz}5+<-$_@?f&qdSoi%ETcqZC|Q}h8cr$^Y;SoD`b+tD$aUiB`l`>r$CkZ! zFMJL&Eq`fm`u64+XZyO^pEdyq8Mmup+x(K3!b8~&C|ZXYWK=4NATeoZs@yxQ$!tLK zdT%9voR9^2LE4nt*JH^F%vi14f#4w}&AH9e@X{s{4yYpUwi*y8E@wPelOBP2`wd1t zs_L7lyX2LL0i8R1Wol7e2+ho@k6PTBCBg~!XF`&caZuUH-B|R#*A@VXjU``B%2=+V zE!Hw$6>8Zv1G-chKxP)uBmpAk$~pBt&6$_M3mUO2bE@p!K(u^cdm zM6rvNG>Ho|O2e_ge;YlHd)tz2Zg%#tdOS2e*3ogO9a!yT7f^5kejQ)uGZBQdRt4R5 zE?RS}zUYJO*3aXQQPZq z&todZfJ*1EhbfmPeav5DTCwO${nOReA9OB=(g*Z8CN7}OzqEp5+Zx*1>(ox+^lJ>f z+@YZ09sT657dH0yLaKV0^31p9MiZ0g+Xww(2hJ3^qds;+XWRcle3^0}Y1xwN=oi<+ zwIBuODb#8IQ0;>2oU-UMFCf)0t1$ zMg*OC#qOC}r*i&;fW9uCN8_iyuIm08Iubb1YL9*3IHS+93ZUgA)zMnqFJO2kdb5P{ zR_*n>{viR8N@PG?99%2~T#xqwgBg%xiYXAbgig{&rkl%bDzjI- zR;-4$!qCXt#Rze}Cg)b)MiMjLLBMGpY-=lfomJc3ND=QES**KzMvZPg06zX1Q|ugE zF*Wcj=zNc|ljZViZ{$P2bz&tz``su^AVLlKq91A|ISN2e(|6c(VZ$X4qUwVfIG!u1 zWQ^qPlz>LDQo+P`H}Pkzpu4Z@aMf|{UTKo)&UBEi4X6tlM;d<3)jLL1yUEU5yw|o@ zC&0LEjmX-ItvO@rhxLh}d3Unb_cJ9HopX~<*Ybs-K(r|OnZ?MFb8EV&&2MgPhn3@q z>E6-O7#7f)^ebDK=4+~Q7`hzT3r4x->yt~ha*5JR;^_x|u=cRsU*Dg;836h7SsT=J z=|Il*x)6F+wimc*GC>oGnpwBc@!WFha7}>KYb}kINhZ=yf}fVj0utk9K;TAl?#bGY z`&_f1Qa2#5izYByIJ|{yu=HHR+cgtk*Gi^8at!DfC@g_=AVa(Uc12-v%8HXDhhaQ5 z#m@*fYvGR;(151u3LVB2GVS>9&6IGPr)M}cZrWA6dhV~g3{1h_A5o z<}yI@FH%*~MCNmbDD9X;5OpuhPQsO~g$Sx{DU6}u=f)VL7tHe~r#UkKkHvJ0+X>~dMXonX#3Afat6!z~K0?vLH zFK14eSRGPy7M#{B4DKAIuf)c9jEJeyW-k-5>U`O(ejpQ2cWLHE2y618<`PXD>mWsa z9veT3IE$px z1u%x6vkx6er1vo=WEOI=>6UUJdR2f=<0&NO{T__DA7QYI`)yEHyB^*NUj2T>fAgU% z(D-Kw>G*iFJuV~~UAY26kTS)|V#bS(gCv9P4#A~$p>u(LsMPc5=#@b^R&fer@Keds z+b#;&UaRLL3TnE;Y7MD)m40NPS!G1T##b5u*9MfqPzao_h0eL6izX81-8sPb1xgN7 zX<|y~t0(7@2|u-VkK3xG&>vIMvgf2n(UzcX+&`uMFovz7Qcv-3c6b0YFKqVms2Vy$FAoZA8oN0#cWkZrw2WAE+ z(Be`MVV)EOq7e_~q=Dd1xAgxg`KOswE^PCbz8ctoaGmeDgHq}{@Q;tSQYWDVIBk?c5C~wAn*VAP9L$d#Bo!N zA`Uv0R|O+%+&vY#a+vD-``--a{Ed&4O@UPEaVh$!T*28(6lp;}SF=yhq5)00VBT?x zP=IdNMyQiZ*C&kj(^Cb|GV}Lk4O~`c&VURJ_PEs3D(^JEp!doebA4cSKIL~2CbFI4{U2hswC1og`qx({pHZUy4K z@I^82!@M<=SSr<4C{$IpN79y`ndZN`D=Ar~$W21h`#_V|+=~KCy__OE6uj}+vO~~5 z+mIvRjP|$GjW2Ao?kyxe!;)IZacUWz3F{W;163jn{dt%W`-AHL&9f1rBL zPR_+4C>mCiJ7R%3;_iWO0)RLfhGfc?OrMcf4>q@#$25Vh_jv@hekmzsk*9m~sQC1Pdi7z&HGXoCm_yRP( z1b=TFeEtzQ%a=hk{1&K<=_x_IGNE#a8;Bykr z_dJ5_sZdEbXjOfCIqiEN_zzuIzLqDo*j@B8p%MG67XlY(#kHqaVUI%!1cPSb&BJ%hk@KX?vd8uO zOgsWEGm0^dR+FBLe_egm6N*xk8Z+q1n-*(7ywmG*-78?2HRzK~4ofCU$NUy0}6=JVU4=7ZQGe-&$qw&cl`&u>N)7sr>d)K z_3Cx6>wa4q>RN75TRP=o`wmcnkD8S+{|Y83=T9-03sa&XP+)7<1Gl(WT3(Z0#l+lS zI`WP0*|N5?7zH1{_S|t6)zLuylDvm;YNH3Dt3Mc`$>G`c<$+BZME}~eY42BLwdvpM zW9$6beH#c=xaxdcbH?%9lil<2AjJcX!PTac80kK;>rqdwlSZS23<+qV_K^lf>g{U|iBbDq%*I(t|{Ozlsp1g!az9?g2$q5uzC>_G7s&QwX zO7)zu5rJ*xYKI|>1q;XxpH=x}k`=?7S2o7+FM6hok<1d5r7s&F(e6|uicI}I@@E@| z-VCLC3{q?)l1k>JXHU(2fC=uKjha5IK~U~|h$dyvs(^nXs>`{>wKvH4w{n0YdrxMf z%}nDTG;Q__(OV0J<3QLr%C4pWabpq^w0O8MwsqER8;BdUAyPo9)FS3Wt@Z@_m^Ar% zv{FrBwfmdags`^|iHkwAQh_vMVsaaDn8eU8h}|q``>ue$e$9I4QV=(nHC9_$yyRSK zzrhG&9pE7C4%_D2@UCl`!0W7{rvnr5vCddFtZ74jnN$am)L@MDfA7?Hx zuZuuPrl;|OGrZXG&m(UxCB+mnLYH9+C(Kljno6WV2{rZlvBBdiNXzVjU{JT(d=b>K zEB)^TbF!*mGdg(S&v9yriZM*)IYu@HWe9QNALU|+2^qa{RbAg8i_S-v%BxQ6= zQNTl&Ri%LMZEte1YM@G$mU>-CnDv?ZWJF4b z()j%o-4hG>pVP=G&MMhWl4ufW(q|7{H(gJmd!`lknP%5HezpGhna5_G+KWmuB5ZgC z5!3@_o?qElxLCmwP*-Epb3bsNhWj8um7DtKAF6-^89j$h?UkhE=S%1c9CSaYY4|Lr z7GE5=c2uVb+?&9>Dx)x$z0dyEdk7?|d<~>#CJ`GU`0pS^@YXqJ$S0S4&(9J3lR$X< zLEo;P6T`ldf>7{cUe%tWdxgeFn+GV{nC}F3gr!sEkvELPSaBYWbYGQx+^^Y0D>oWY zl^lS-HU^g9SmJ=uWd}F73=#d8kteT7f(FET_i-BU*6?3hg;0mN!;bT%=+|j-i0~r( zFB0KJ18hs$f?oH<8Rj>(*r`%R_?|s~qOmINu3pqTJR#0p#X7b}2S zAQrc842gj)hDz+^Mb{l-uP|O#mupttWNH057$WuZUS)`(6GWLe>P8T>aD3BeY z*xab+7q9QuR=aZVdeC#<9#XW91H&|UjxHjje=~;&B4;1&4pm#J=C}E4tcNfPAU*7F z=}|0{35+redkbk&(_Q&Vpn~WVh53Ns9jNzdD6I79ONf&nbi$QOYtd9Dy!)Z)H4Hi+ zxdw(j45bV2^N4=~fi4HgHTCt0Lg_9Pc3Xu0_hw(%$7*osW0yb44Pp{y1eqTw^nI#P zE9KDsVTdGN+D}m+aTYT`%FicB2>ic~@5d}T5S2yGSa&?tCe+CMn>Qn+#LfV(rr2NM z&lg#yWXtNz7CnqLdI9c?=PFB9a3fYwE-HB!IA0XG=yNul_YZe5ruv$x* z*2vxYcN6WFQ4s5xn*9@?#!`UH_fd$ED=aonYn*vief%=kG|N-{h!Xq@ku}Qy>jKIQg9bC-wvdf{yyzJKUS;S@M|w!y!zV zS(@A-Xc@vpe)<4nX)^q}ALeQ6;K zWa7Yqj&9#hGIlmFZmi;4{f#W2z4I7Lp3XjJav9$_IweofK@NbRHtDE8BAyDFBCN9s zg~$KIw;@f0B5DTa2a%C*0*GOrQKSPRCYi*rOd4>Jypb*aihiELVEj7l`L!HG3Y;K~ zFd1t0*t6Jsl680Y3i&ttsW?KVzqf8p5_kuR2Bu%6;-j-D3J?Bj&I~qu`MsMEx7(_T zZ_JyWo&M)a*98EW!=a&z6N|}kw$^mi9Nfqsjgqd^BoLyN9Sbd3f1FF-!?@J@baLkn!d3KC{Y8>+WP77V!QUs_&PVLjWbP?LYD{H8nWrZ>H9bE?#1T9@2_Gjngg*klcrm-| zhP+C=gg^{9(1smw`+O-YYS6EdY7Ee`{{h|09RM-_`a0n>TaD zO00pZs4=@!d%!|EB~hxccKAy5?$BP$+pBwO(ud$71(NVI6D~`h`IJtpa)r&HmF9L5 zP?`tmd7u2eU9%cdB#!+}^|tCm(76*}o|fb4u|3?|K-%S0;%YN#`Z-eo+hEi=Z}+p0-L z-*OTeGppKht|$FlmPMoRD6Rc|LPMyNLUUm|TYN^d>->`bt^AczP*+`?Z1R0jg-2FtaBMxQ%M}IFdpfeTY zU)RaNy0I4}42yq(w8$XKLjs9rTAaDQ1-@#S6lqT9!(QRgE$0s{PD45PN!{z|5re$%Y2Q%OSfR5-8SJnV(zC0_NN9xxvp zH;$Ap_pyto*E5)W;<=+r};p%jol8r7L`GhM9uen8jMJ;^J zr#;c6$V4@YyEwAaOmFcFUy>seYRizgNOzQkdV4k%1`hC^5KBxq{n@LBe-s!V4 z`~@3JvYG5+QK)|1h1e5<;WAl5u6FqJK!>l^7#qu0)*j~0glyIGaSwJ z)w06|22qSSKew1h?hKZJUb}TNR`Ll2zOEI2zN$c*h~s#^>~G*`3drwOm$ysRef^dw zsNP;e&q;6blC&I(F-T*OIp+8GsW(;F?5m=BeDcajh}!tEw_@IFuAyq?^mSU34);KB zN) zZtRp`HakmhK9@4{5u4w&D~7xCVlS!OSn-M=Q2jP#?}$OV!4#yDO2hl=RsD=t9WP-< zr6Lr#MMi+Q-N4#%!FeK>y%9T`B=JWF$6tzX>5CEp@>52>SS6J-VkdGT=me2EOAOU+ zx^C-=IwD$k44GWt!~RTuYr`RGzw3tOvJV$)r<&bmE8&M z!?moSq1f)@2do$k=l28dN$C@&%Od8BrLvq?T8{A#vN*e#gzfc0%0UZQu?FPfkNm%q z6Y!9ma>k#s2Nf&t%sumNwX9-BBdsa~3%<^Bs*u%%i2lqV*{?rq{S|eB7K%qYcgw~x-ZoBU ztb$ES!R9Td_SzfQm3kS9(|h$rBMm_m^Z%fhE!j8ArZ|lj*&+Du1;?;zPSq@8k!uYZ z_&igm0Kl$a#l!$jpilQX@2fs79_uFUxGx{sEoz09kX~u8@68SHI43@XCB4K20gO(?1`)t=bg*BpKq zs_?m$8JUdCW$erHgM6>u#)BoLdhAgbj$CUjz+B=BC`6X7n@JHXnNt7Hzo+K6ySd4r zlyE9fb*Dko$pG%yik{Ad7-Uy@r!N{Yr168o{5_i)#1Dw8$jHN}4G^~)q$0Pe?i=Gj zDY%*FA@7qkKPvnC!B>X%;#n^Vez}}hr!-5Pw z{Z&KvCUjv81tnT=97!CIgV`^TEc93?B3UKlYxjE04!GIF5M0rNZu*+_tI_46c4lj+ zwyF4yQ`M)QMh2S}HArr04j&~|O=>i~09?qx_3)<6I=7agXqjd1H70ME-p-4p^@|q0 zl3RYyTxkX3W&vHFzLV+_;ujlTaZLPn@O8JAqN|V0RG%Z`w?``V^s1FF-L7c?NiO1+R6+A5$uHc22xuhQ zBS4EuiBFiupm#_~B(8y(buR4@@b!{rTM{HZk=8~#(psPrgNIk}95Z4fCP?&U4tnV| zzpXw_zMWM>3);vL^T~wc4 zZG))&7I7l`<=K}h(d1sYxPA|g01=XayodFp$l0D_j3!3;?+~bbH&*Uri-Ngixx63- zbNv@{1K>oyJ*!m$#K<5HRvsB!d;(*OxrJFwD+n3er(3*J-79s>L!_4qKsC=bI&~-> zCiU+rHR`MHo>zOZK$X2f9%@{@4tSc#<6P%U#RGung_t>jDnI5YU1$p?U^?wX#V<|{a9JVr^_ zP&ZtFPVK#xCg521KDuQIuv#{?jV3Bu73HFTLql=*XRfv4Zi;!g(~?sv8OJr6K>5yt zqb3-RApsv7FO{_4_GaI#b7#Np-R{CkDWcz@j#j$exp=0Z-bM`G5ecrUb zv+UYH!5)jgC}HtFFV37y-d;`h#%c%vT*P^o`oFBq%F6U#6i$Y` z10E+**sCi{Uf>{2!y71;0aW-90R<g1CRU+&h6B3 zWbTQJv6b`i@5K`vmXQt}=E53g0F}fl7G`oXl35uX476m10UR2G)kGY_ybZ&?m|0RW zAM0R$SpfsH0DImS#~;cO%PpBy$`@1*8K{{$Ri-R0RciFr+$9;oLtSHPFWi4^Vu}#j zhL+%(xlw8ODO3>p2y}d8>Ab*Prhm2f zw?)Gj&Hp8Fk}JMO`Xv#sC(hmv=tm_uE$+hCmTH zop3P>+X}dR>D}(?bpF)5VM$_i-1jC#O#WnDN;NkfG=?D0F z*Np#dGOQWe@%?eWxQva4v41xTrS>XQ0H>6=9@z~{W2WdPuZ(%O$K#1vr*q3K+TpQ# zbrtd1;?Y6)(HZ)B4XE+=u}ZE#u9*h=T+MeB=;Gh%khKE1@4wt4>^f{8Zbkc)Pk|@4 z$Rop7k!AL!v1bZ5Smd9I?DrQT%kr#~Gtpuj@@Ls$`#V6oUz28E&s_6ryM7vK`?7i+1y|1XYU?LPub ze8J94p9v2*rRmy!;Yf;QogP~wRx(vsxqUwPMFK{)K&q^S4@lyns>d-#DA|ms-i9Zh z)1}?YpwX`IaxK z^Zh5DbFNN{1po@&w+)UdJZ0@m+M3e(ZWQhYniR*@$4T@bXp-f5DQfGa8EOY7U-fcY)lTx$9dy?c>le~BOR?=LtH(0A;jQ5J?f_zKi#oNC*@_sWti|(b6LD>K z3SkNuJo3q8#3BzD+j4u{OZ)BW!dORm)=1<=8gD4mfs6$xiT*wYj0h%c0krq^#Y4SP zqxxg=*nHQ+WG51fO)85Yf(D6c>YC`eG=v=Pn8lG*t#Gd8NSLa)9MkY#R&Mh*t>$lY z`eJZtDnKGR-;w?g0VcsTj39yWUtMMYn(VkSX=N%B+~#C=^L;eP^=cR1c+(t}9LB3a z*BqzKbd5X}PsN23t+67u!#2!%aN_(tMc90`l>pWD-g1Ka#)qn?96t^1KP!qxK~**k zqIwLmm)~9+F}}oOSfc{imq->{{*N%O6bGh}qKbI9{FVd%&N>MCnDgj4%!3R8`lHCW z)8zoHVZM>!Bi-iwo?GHZuwmwjugQm~YkL}$s6%Q)HV1;^`*P{(K$L(3 z-*CtW-J$r}Za9y~Icv}bot*iwwIsWIWx*f)SNp1@2D5L|=B5ALefP*b(f%}=2tKz# zi|%y8lS5m;kg9BN*}P{rqmnrvH(;00p%w7XG8l66^_p#H&~*>VB|w*Q>OEr{xH6%g z`L`wK^Vee=EBH4@SI?wXqG7`_jipFS1Bleg#QMo|xH8Z_C>m6w-PM^hqE`QOCZ{gd zb-3`v7XvbNUBsV?rT4S2JYfxeA&*mmh-IMiiv88s9P)(5iL4mo$tb`y=uS}A&=3HY zju=U=fg8qX_BeS22 z`N}%5`(o3rdjRF>OR9FZj8Ye5fghlCH|yul*V_u?*vENtix{JET03L;u87=mBz z)DJ?bL`pG^!B=a=P3!Li{}q6pS90-i6lfv?OM9uEcYCvkdenh;>jnBV<%2ck_@;zy$8!px5sWnI*A`bBf2@~41Nm)6N_Q?OV6 zeD<*TJ=N6x=AI4Zxwf>{ra2yQFTN0$u@_$!NYy`oh^y#Y;^~A1;S(0%1&A4LI!(yNiL)~PTJS5LtVqxg{d+~Gr%lYv|4rXMzf*wP`e8AIE{^kNs><071Kw?rDP7a`_in zLn}Wfs&#Xwm+Ip}u$ycXRyy9t8gfRC2Kkra?oAvbnc4f50cPM@9=msV0FmZlH0hLI zyi&Py&p>&VS>u*2JRjTjr5fm=Bx}qMF*Ks6pa%>DfkM` z)l?Gj()_TCX`)bFEAWkg@kAY<&oSUqvo190qLr?5gHBxw~sWuI{d{^o$&3Dw(8;zl|}pTKP*SQB;5XL`566= zi}Yo8^)6aM-kP%}oU!~HY5_+OzYw{$*HBMwsxAP9q9qP6!)wSFyllwvq0@WHd~%40 zLfS_{a;k|bnUrnpDbChW<)rk>cv52?nIKZ|w32SL` z|B%Ik^Ab}^m82KG<*Rs0R7D-yH&^M6E$QQ)VhRt@X4{Dwu;Z=qP>kN&)_* zBCzV@f8QB{LE=#PT%uRlELtsu{<&#Pyh)N39xNFIW0lgr zTFQ)1!kM(Q%Y5<-^T)(2&_UyN|jrm0=A<2gja(qf^%5He7&^` zDF6ia{0fQ+Pc2PXb?-6ynC0T=!bE9(jUDZbm^|s}4?nWR;M}dM>y@x%@VwF-ETJ51 zeh|sr6j+EnknA0X0Pxe) zg(hu~6#$cEHv6mylK1o}Z8dJytnUWa)mSkO8V`GDZOr1_?L>r2_f<1k2Da9t#!pTDf;T_P08*zae%Yi0Sq`BQl--zjrU@w zY~Iwe{EC|>AHk;a(jYVEAGbvqu<7HmpWEGD|G%4p^Pdc{j}9CxwS%2sM_fWykgl%e z|Li*cUu?-vzjyAoN>5flgC&P`8#|JDE5O5cO+y9lamspnNm`wtaK_1nuK=RD30l69 z``3xt#g)5adN4g)f;}8xHXbG{IbJH#^C3BEszaJ!&t0*qCMNqxh_Dgs zBp_V3O;WXpfBTIZ$8qY|DguknmKc2+U*dZja2H9ydRODiGbJyqzMbkZ*E;L*uuE1~D++UPKyjj`a=Z=RU5*xAkUWml9g$zbLwqDv zD>sg+8roJGEj4DPL;alT!|2c^ z?Vlp|@(tMzcO|)cJ-i2y$~oW0)=~MMPEcOLQQJ9pA_XLm4?PC!+f=_LJ?8y`*3H~o zmv9k0mhyR6RUEJVOyYwx-6K6T%xGlf@QoPQw)S5kTO=nSS@N#9vae2%s+o&fW+^cHqN;QQO0gZ^(S!0afwsN zdU|M_pDer<2THr)pZPIsGAh4N6@HRbAY9z8Mi;60s!ZdTrvUR%cE?ky^Gpt-d}Yn^ z?c(4sdq;`5^?GNJ$Bapev9NRYZ=Lfi zw3a9j?KHV(Zr_h#0Cav&PI_*^jr!|R%b(pqR6>HOI zsm)zF^_-KJwnySC5x2kRn!hcQ8TYpblP-roD7Pu}n%-wVx>fmibfGfszG&$&vdpqN zIQ3YQuzR$alcJVvfmlY+jHr#7JeimrB|j&N{|HTK3I`{q3gQ1F0Xy~oGPyv}MSo^s z>{nosO_@n7i+Vyfyll%)lbh;82$ySvt9S_Zf-GBsjk3WpbtCj?7A$w zu?vH^{@Qf!-b}T!={mRRo&J~BlXQqvNe%nS*9;?k3%tDyA+*3)IQOiB3Hhg?oQ&IcwO(&`yt4rTnw;Mxj++mv zVah?M(tHBgVL;tChXH4^nlql~YmUNZmQmaI2Ldh{Y`+n6 zzEHtjaf9zNB(HZ)4d1GmPx?hg3!3#^wLBw6I!q1!!~lq>#|~2AtrH>5MKPQnZ_{_? z>L&5U-b)+oab5m?%&}zzyDfx)IZi6#<|kRWv`0$7Ek-fXNVa!XrUz5x4~iW6)%+^7 z%b0bfO24OX=U~pw?b=9w|@`b9{%OG z=AgSdEdRjl5Z|_*ygN|HA|xhJa@dw&nFK_HpB8HOF#CxJ0Q~)~?dKb{JF;a%SmP96 zx$N|=a}@=TR!1)%(CZXkM4|y6*~6HBislB*eF1Q_cWuEm->7j{9 z(E!D$tSz^f6|c4sb!*uj&#mg$d5dP6hXVp_U$lL_t-4MUPAq~$sa{^rcPtp*mVcw| zGk4QA8(@KO2)BLEd~dxZFfrcJ^9>=CFKj-S4Ta?|X-%y^t-Bilv3fjsA_lVD*Ot1@ZcI(=>xrf8uF5KxT*tpfh(=<8wivIjuK*z@ zyZC**`pgLDT4R_&QoO5yx)+UW4Sfiv5^yJw zhh8M$m;%Eg(F7}0zyc!BUty+$-#GHf3Irx=n(E_?{Yf`K_dgVTPGswhM>$B$PRq&t z7IjxoR{T!})>_}&D1i^a+@~wIoB*aBp?)Q-36CBH{vjoG88092C=)eA)g?w*NawRE zCA!B_+Ijgo_z24@9T5JovPZ4+*MRP}f+^KFY~|5Oehl}nrzK0VEHM0)vBTC);oV}m zHsbip<+AgwU6H;JfQT5H|2xE5UQ|7%2*b>#=p#GO--eFY%=HpReu7WVXaIJ?gAyba z?96qZ_wFF=?g%vLN&oR6%NfsT81|hIsXLyf#>{pTqQ{Ypr1q-B{ zrKQCvdLp%&p}+$sAJ3SYyd5s^1eHKZ?@o&rLzl6Bfyh-FQhaXb#icnO&K}z8Tc$Iw zXI4$V%3F0E%|1YL1z%zTmqLsIe%aS;>9h)xXTh8Wt!Wno?zj|`;v2^E~m$LY&? z=A&+FP3D%7;BSM9ROAi4biBoXfxTmr>_WBz)cOlyO2PbCC6a2q&|FX`xyA->43jIf z+2KE0i?=b8j#eQ$19VEDCWq$kXWSGBe&dIuYeHq6;l=Fn(U2$+41z2$C)WAKxcRN& z!_O@HeOgj{)&AB_D@%y~C%xIfd+V=@nOFmKC+Qd5H#UUCPs6-WQAI!lC&I^zcOaa^ ze{tB=%Sdk=?qZBXhgITv_QHXvi0()?5}mN}qEc2XcwN$o18S?5_eA4xRc<(2&acv$ z1~>PfnYyN)ed1#GG{gmvX<}C4|yvkC#z*YLq6~`2#RP;R?Nx|*kg1$w#T{KYb{$o$1QE#$E zek@ieq(6my(^rR*F>ItIWJfZG!K$b$meWEdq@U^I1Gq%BXD%Ym4-G89mQEDZ`z{Jq zK762YaHL+IPxKnvu@pJhd<6|&NfX!SM`v}-WMc^te=c*aCsg(OB0h;ZDa6*wS=>FJ zkT81F7SuHsisDXBkBB9ixN}aoTRHtfOW&$vZHcFF4+0nVx3ru6${7JK^ol!G5DhmJ&8MU{+!PBktQ90f}f>%@!Vb{Sw~ly<{bKKKn37@83!#gavUVG*=G z$ReY#YiL=y-gJ!E1M>jvH}|(^ioL_2t2^M{aSNs0>wihu|FL!dgRuhTU}gPp=>H$Z zs_nn(Rh+-7#@-y?mv%fY`C(?d5mF|UY(=R!3UO8;z`tWYP;6n(XC&{9gl)6WEn5ngWr72T`Hj5R%SEJ<*<5049x$F4-e$g#AdMIFTG86Kf z``EmDM@$>V?IWkv+mPes8-V^@UZ5W>RLe=iH7K51TLMF1B~;bfaQWy{W?0K9b6+56 zLklzd$|P_*T}G*2YYwA0wW;sQlj<+Y=`Xsd*R#Dpc4)3{F5K&_Ki4<=)`M-8;h@a9 zM5}&oLn?wHiA~*OYc<2M+ux;9B5Z(GcNFK~;5{XLBHJe0Sg^IY2mn#DY4(k>WhGpg zMQ|77z^5|3(TzQk>c_j2Y_0w0&h-b6xc1Wxz-)4=FYk?gHVDiWWV_=)$opGy=sSX` zZ%7O9&X*J9+jux+8{Ez*$&P;r+VXlzP zzqgCJAuU+&cY);yQ}s{o!v#@=fDpJ%A=(Fnw)|DWDetp`H%%TQ4z=_gaSJU2=f8P; zDez5Bdeceg2L!|TD=#*V1c2g8qKH#`-caEFDs7H3!x+hXKkgr*~|RbbH;#u0c6D zpv*pc<@3@Duw30EMt=Ym66_<+419tHm1kh`vU6TD0jRFF4%QIr__NPAg2frgv6%pL zfF$(7qz9KN;I%<$?2Cx_`vg~jK9t~#p!}Gc=vVmBpPE{V z7!V~ZL%xXym<807nU56Nf>JxQBly}{gDHHVhE*6w=3FMtkMdEXV*xUxgVFJ-RquE6 zT1pd0fCha9c`P1O4oWIUB&X=`xo^7x@E>>W^y}ZIm?Rrzex+Je4U)9ArKLS!4Z>Jc z!?JC~k+udYqljrR+Gv)TsbxOof#C~`N;Ks$qU!D)uh~b*y97Q#ELvqCF^yCFGOyA~^M$i!IDBq|ZkX}!V0M7ix^m5)1C=zBeuvU+lyTB_;uOdk= z@kP}PJ{nwk-mHj905aq=C%#kRLK# zOx5+Gtx&wiKi%m?dL`{N?357;W1h+k4n0v6KstPi z+_*l9Atto5Wf-^8P}A{cy_xl%(-4^^>i26+YGx~KseQ-_8>Nm2>indMm321x;6-dM<_vr;Z0MyF5By5R%8-{OC9gqp z7b&v5KL1>2R~hB&92G|OdU5+GK+yYnL8Um<+yc=EZTMA5uc-(nUl~~@v|r#Vj+=hf z31t%B4gO`58|HBvtba56(OMN@C|%qL8u@W=FcrHGW`XI=yI{o+AEcxn-}RymUGFQY zb@M9_rv$m_Rh`|S`pZOT=3t7Yd|s{G7es^OBsdy@D}xzW&r!c$;m_ke03^fv+=Jda z0SaO>s}M5XhyKegNNU2XVi?N&fsZ~s29;vL@v?R-GaKup7a*!LeZ{;XFuduy;~s5~ z(e=s!Ktj>R18iO-Oi`{|We@wf<)@>QOM&gm4l>+et`sWQSZa*U_)@CRrf0buocEAUB(vO#7LjEb;(TpcQBrSx{m;!jNo`Fg?WFf-nol5u z@2BICawP1hM|2kn0dkg{=Npn_D1B27z-eh|7_jvCX1w^w+nF|-ozo(3SM^~`En#=t zZ39BqooHS09ele|+`%k`0~Vn<{FT$}bI8mNtuNtl|c) zBt0tv4J)FcdY#_QSK(iPTu?3gau&R@Ji~UH5iNPn!MuV1Am|PhquE;ofPqQ+v?6fI zzE4?x{~9pS!WX&J>}{$9g{ut)&($W3fX@wlU{8hAZhe0IjR$S2Oi2xI-yFYXwBGxi zpsA=J{&1|@3S!GLww@@0Tz?|s(GjbGhQ|w$s_mK`i!(f|nfN4VB-qX3H2;d;)4*j( zxbGU}WSvidXQs&(bL*OY{lTiG%d6GyR;&6~4tGyodI&w7p-p2@8J}mUuVnB2%e08I z(V7}OTy+7cES(d^KHg*T8+8^a0EM%sj{WKNe@Kg>cFbnZV)Bq)Bb2iw!pKft%#kzfBG<;nGby;D#Y z4z}bvNNPZ{w!P!l2=aH0p);X(x%4fqAs(1;4vqK%nY?K~FwHyYwC*%RW(_Ya?32F@7fbca<{o9ZMQ(32#kd$x@o2o7MD zm!6t}JzoaJvh9~jtQcsvi4eS|goHjx(aEOV)an4Ea@xcyvI!ImUp0(jomvrsVV2V2 z3k!N}r_&Q|op?%Rm_v*KPC2WeC=%&1bVW}3P^j;Q7R38hTz|K3CIym`L-a_otjjX0 zebT%gw`2Ij2|o#FPC1tgb(=y+deUm{bK=71u53k8jLBsYnp#fV3@r%pM#s^8S6RT* znIK@^=oo8NJ}JfGN>2Isc&D{Ps)$Vd@9cnKC-<=E@$IA!6K?HDu>91t=^#kv zeK@nn$oJf)FI#S;l=R=WQuSi7hNUJ#YLQ=3EawF%g5WgXn;PU;6Is>Zc%{Ossl)v2 zaMO=;8Ng&I6tEQWx=ND2C}4T^HOWfjheQA~T4;w&lcs-He_0^Tx@jVG%D1lYjom)j z;L}ux_&2VQtYv5hsFUe|i>9ystv>&f)L?lg$ON@5{;H5nqgxQdgx$w2)n4qUFvr;P z@Mcbthqw2$*8~Gy%PVB{7W8;!x!*X>^SP2$);Zb&1%^Kn3U4&D6>}>NTzj@#OY4uX4Pbe5Bj9AqSy(oPggo{iI zc?7DrtsoH31kZp@)Hc$|6@Xx#HoNObX|!Hl3Hcxf7-s&awmk)yUvD{BN`b&#|-oB{w2mxg`t zW*8M*ytm+^k2&P)hq<9BE_Bt$_3gDDzVNG8s^_Ueh}nbbm` zdQf7VTp|q!!Jf=s+d?}6eUJg#49jRDyNuN;slsv&u$7xQMQ){*Wd;1l zB{3wSr<&wE38fzolGzZEm^Ir% zHAR^I=y@#iVuYEdWFxbLu|g*HD;kb?t)Lk$hRhSROv5d2mS&rD3U&hyD`HfrLh^v8 z?033nTPf(WU`VD>T8!B@USAjO+!n7jp5xGh3vCjsNRk8h6uU?PqAP)iw^a${NY;uQ< zUMob95z~VC=v|vvjQId8(Xh+jmahm^9-CbZf|=Y`Iu+qOzZioyV@wr3^KF)}(>O-5 zeNZ``L#OiPUkhDe;Uerm3cQc+?J5Fq3XOy)W${xDKNMh)H%G#?X+-kW`vp&O+tk3G zctn5-29;+Iq@W3?gGh-h#IZlP61%J;s(6;i>E=W6jSMY{T7fCYKdE#Obfex{3Tfy>nS0`ykzCKkOa zt`_VMTWkd~vzkDd6CrV51Ny=ZEf?ub;`f&OcZeG&`%@rWJ@B4MGQByX3HBBJ6+X*y( zJK?djw*K6$hbZ1P(?EHL7|->#CSnI>a6VIeV#=GTeJm(g#|2(krnRFiBcYPJ#ouN` zs)&c7t5CysDzlcKp;t3crF0`If6EUUK@(v;y0H#OMsT^)*R)CJ55ndvz~PJrGs5N~ z2X8bdR;0QtkK1IPBZR;)iKWu$taG+7JWi+vqiEZ1QaAMoG?Ju@%Pc*?Knb@{%+jg?^ zcK5xvRr`M2s$2czR{y$vs=LoQn8at$;fQ+*DGhJKC$-GB3mTAI9)DA+a?*Vxw{I_| zh&SKCG*_$v$n!VJ>G~iD^sAz4{88@8)$~QZxF=U8e)65|R-XH!v-56P5%ic(@c9^YuboFe`ha`%^ zuu*cP5M@qS@S^5#a!X|Q|0Ltt5S7P7TwN|6(v zhFKnGA-Bb6Ft(^DXRTU00w|>ZZhw=Yu(9g{p5)B9D;uUeYBJYd6(!f_!U9b8I`K;u z&J`m;t-tHQxV{deLviJ-LJj#iQ;c}*IQKPibZM}_cklDEl}Hc0V@f0yej?46LBLx4 zUKQDiwDlNtJC{JV(xIiv11B7QjBpN!p?IcZpfH{NxuvFT7MI6WmGZL$>Xe6t_pkOF zkRxoOv|B)?#^CrW2Jf!brkEWW1`B*DF`1OX(dc$5&D2e*&XPGh^uB9PCX0yAO)J7P~h1;M*l^ zU!ai0n~l9`gD#}BES8z?=H6rnx`ssR_?IM=L{-nN$j5ielq!OyMXy*$U)1VwJj1!` zW~lA=nLCSaFv+ke2E!#s6dMA|cSh8NZ^C_2ozMFp4drdNSd6|o7FUkcXj2>m<|wBP zCy}kY4}}Bf`xj{fpfJ0VT?TzL6JRI*&vV?;PA%DI^AIQjLAa>Pbxx=@UEB zv*PQ>UxhpEKFBrOyGAV`ANm46WBa#C~?czlv;F0{1hboOIve6D<~rEGMWw{>t8<6Jasl+?smlV^<}b*#5C5>@8~ zT7$PK03-}Cvbj6M*#YY)wKlTd-QsTO!mA0Yjgk+~-0*Gz{;eQ;P71#BFDrursovY~ zIiE8RFYll>s=GP^V)>TiNjD1498kYxC4&q6PQc<8d|Eqd^KSs=k=ozDw}0-dB#c`1 zG$S@Cd#G`kPufb*ue5e-M~^We>@`2S=$jvzI||^!HC0+KZ|rYXr!09}cU(o?t)D=xGSSO8SCK6bZI{z9SY^ zZHOrl!n?ENm(ytTB;lw3R5GSeXE;pk2Z6UBGh1*p+>v|u1r#~xK2GfLQ zki*GHb+mXjPhs_YSRv#2ZbZ~g?9zUMujQGkI)D!Z5{|qe~425>vwCm~6Mg&Mp zcG=suR`L5=64QRS)(ddy?Ns=Ki(I^^YF57ZmQ9o##B?Ls$3FHLQo z?!k#W788e1N@DX=;=eLr|gVgE~ub75F<;8E2myWx9xH) zmOqk)&za7{Scmi?pV17OKi{nNU2Fl(FP@&l!Ux|!c~dNUTo9u}GA9B^zyWUIqrijt zeZ%&h8CzYvMWUH0;Zy9p=sjbu{PQPQ(P0;&?g&>L=M1*iD_Ro$b>xvUSc0=-%8wpHl>UB>aF^OBMuD z%Z$;%k!Sux8c(|HKU`fslYrS3%~h~xaSRZ^e-N|N4=Y$=Q%a5o3vGOL(~O}~sj!fU z#2AjZX$|GyE|sD??~vpsYEUmJC7y9-0D|kD?h!Yp9~2YoD##$I>&WUkQz|)oIQ+VM z%3VQamJR+$NJ-*=7bpg&7&(OXiP zYx9cR!|%6En<=D|2>ZjA{>6xurh9V@c7VF^5KnU6pe#AmgW)4bU9{;*e6bffPYM?THMzel+CSTZ)$Cw;N`Do6q=BMj+xk=7E ztr}7_OUV#8W?xJPBanZ3G>IR*i^E&p>B~=VT_x}QYoc=G)Kirj2j8JS0CUaEf`hBe zFa&DQ^OT)Utmm{ayu;=s_BpdJ>nL*1ey$qwm);>sM)A}>$@&L4cpn*>2m*9Q5Kki$ z_MkJG9^Nkc_Dl@NcGJ(10hF|u_tBY-P_1jGE6u)f%L!YzN#IFI9bEm7aBtMfw}AYo z^|Xh`NJW1l{+`!-?k}aVW^)|y2?n;iQWgsdnZ1k!yDfJeG&ybXdT#4Hxgo8*ka>lX zA0&er!y|Rk?@yGQLJTxQ^f;h zIqa4Z2Pw#`P=KL(^;o=tusiN3uV~b(#b0?9RatJ@ z=bkAdmgpiyio&cYfojYlEdy<)7@nm&z}Rn8n43+ew|Tcj#-gy=Gv%f88fqMRJ#Sgr4_8`%{r-Y* z0|)PF0chxcpm;pj{Y!agsZgs?v|JJIlL$Mfk$9d z^w#RTnQZ9**LG32ZK;<88N~jF^F9VGa<`-Y<6yHnAlvuAW=0n4s!_A`D60*&iR(lT z_@-?}y$;Wyk=nzgNuVUxXE{rSI0z&i)(*BvYTF62@12;et~#pU47pa=wn!HC4SrA{ zmb{kzEYO~FwBA_@v%)d~FchFN18OQ2eJ5h1o`^RuUwO)e;tiUklD3&1Txcw4K0R_r zV_bZQxNQluq@2z9$`yyHPKD>ki;EHmdxlqk?we5{D}$n<7dlmQKYlLz0RRstTV=H? zXEXxSW}t$**!5uLR&kxzyahZjTPS))&JX{xR|_PZX;sjVi#U6{>o zinc&%!hSslTlVL>3K*!a+rm+oAe^i>HMh=0V)=h|*+g$v#q}6IhIm;&x}BIx`BBIr z^xWLeq8VfAg%o%la2s81zXLE)5k)=rG?3uID{;f}ba4VXIE^~FMS`bRI1O28ZZc55 zjjP;s7+4-Q$u_$g|I|6(-zg@W-gN!S%i7Rrj4^w_e$Qkd)3KI&uA6A)SNz+8LN!eo zhG=Wpv9}kuTh}f+g>Bqt82;-{q?RBgI&_w8XNqZn$%=0mL(@y~69Muwl??i|09ItpT6Ga)X=+;li5MokOUChPz@93la0UlrqF*={OMTwW9`)t15 zISWGeox=f5gMfuKvtuH-lFnZwzCkDo((Pw4c-Mu0G@HY2IB+2KsNbMS7Qlvmz0i6W z_Dxx1kt0uP8gx{OffLZjIdWbW8+3@^f*#?X=DthLK|3N`_?kHSQb9tfBzGTm-&S|M zTb@tq6;0FcccYN$Xessg2L%D6TIDr>G56rt^&-E`BEY8`A-(P|TKLIsb(uRLDkCJ( zd#{#7GuT&7uKk+dC;W!z>D4Gt8S9kB z4J5gmH$SJFUj?cWRy!!w~_aFJtyne$Tn(b->vE=a%oi|^uo_>dbd+7 zwqv29UFVrAXgmoQ$|PkoD=Up#^-?5@DgPV+;{h7X_y)KsemOBJ(JENMXb^nMB}or} zW_Y$W>Jd;dg8)0AdUiX^HDF{Qvlk*^1R5q76|=n%cd4x`R#dj9O%?T4$M_F|jea(s zHvDc#2mGuGNS-(Ek-*+hg3qtE+hs4*a+b7iTH-cnQS!}%w8>O_*Rv8O}b6tb8&5AfJY^JG-so&qx`N&2hERWDA&J5UG644 z&<18YPBQfjz~?XH&n{GA07h@++{>V^?0b*hp*t1Fw>$?En``hTtEuH_z+re>=me+ncvx?6(~X74co1k!iCO$D<5(fC zYXZvD`|5?hk$kalwbEQGWGcY138Y`L1`uV8dTSo2*OTRg zmV}}d?QSk8v(^ggRHcUm5t5DAt~Lc*9d$xp~i=4kKl}vI#Jn=-}a{r z|BhRShCyfC!%v}6N=C~W52Cm(!Wx_mQg!At%iN6v{|gs7kQ@Ih$n;0i@@q;RnlhkQ zPtvi|Dem{1Gti-Ctv|nHV=lqgk(_g!_|7JBkjsZ9to@1YzltQK395*7@w+}z1gmoE zA`TrkDMJ|Fnxk$~1-MEe!n+K%0g0f56!+T>pp4 z^-JUb!PzuXB-8?;SC)7+v`H~z^||E@P1$%vsHDUq32e|(Mf0D}7np3RbmVdu5kK7b zX5wnvdX}CT&Fqr~RPjPgRR-0ckkrMTR7Fj(elh*75rDG78n0M*FyV>2?RI^h2&`DM zp%@{-(%y?ENVn87dt9`k1T-KT5j@~3YW?63Gs4y%? z`|jYWeb;S8UIevfD~cDgG)j1|*odoco$FE+aOc1Mx6&H^dYg;03a99W=+Fnd;agK^ zl4Zg{55Jx*g8Tf@Jy3xY9_h8}vTt;M?}JkG(`#1jZXN!;%GEeE%wW2PV$Mbn(!zS5 zV>JSgJAq?Wgvi!oot7|$i93>7vq3vce6hC6McyzV*l}7fI!NG2NPkj3h{<^2Ra_N) z{f=ATF;{6E*~7nNeKx});e z6!Vg*iN$%+K;TNeM&)HZ>weN}%F}5mx+v+Rr{>h!)|y3-pI*<62BCZmfz}1A*V5zYSUq*ac^|mqRCRid{6hOTt z)axALO#t-_{X(v)VGoGwm9_ISlfHo@vF32)&KFnq49XtkwHrn9&dSVnPv;b4~7>)fVB{<6#?`8%6LS{$1A^H~Pa*^-X7D) z^?7De8g+C3Q{OKj6+DKrVAYbDGp|euq3$1M3;32n_l)-i8v!NrtlVS=1$)DG1OcwU z5X|>XK3Yf?$@)AfIvQvVdp9``KQk|aS-eHPGIVvscT`lXu|G=!YsV3;6&z*bpW>PT znFD;Rb*-iMWnyQ zD0cO&IASvf5~^;cFHU`0Hdo??uoF)fVFB$lt@EN1fxO|UTYCu*15`1a8Kr83(@que zRgbHG-(;bib9{}32)l_uLeML9SA4H{Dt)-Ze13b`_I3I_I}bQ3`Y=Rph1uL74GM+A zu5d5K`0r+B5g(6w$k|c6_do>wY4TV5m(3`!#x>5(@iiZ&h8P=kVYN7w&ufV92t-NK zh*9dvbg*D8MUi=SQp(xY;^3>l#B(p%uEp4j`SrbYF>kB3;q)|sZdP0K@x1Q*1s44KGCwp+O8=HQ(!(@Owh5Mz7(xXK+Gwhe*tawo=vs|a=wA!5xjkgr}8EwOa?o3>KT;M~luN0!U zw?mhcMJ8Ui2);v7w4@*9bniobyAY@R)tI96u9YsB6@b%?NMHATmtG)N1~?cSKl`|f zyfM;}46&y^9TeB{m~2I8$IG{aCSuI^?(PFT9UdmGk|C#=V!sA@6zdYNZeX8d2pE1r z&{TilB^_uVyjLGzJ~mXK^&Fl&_{TsXxFzRGAc&ex-?8$@)8qDU_J7HvY9 zapM}-$WBnyCMZF8qAqz?2$-uYWDSy&&j-wVB(B4pdX65#kvMVh{ba%82M1|Ig#D;o z+qJ!q#cbKKX)f;~RE1-vQ{^thAX251t7r1%UU%Dz= zoHr4KLBg@hmJi-Wkn5>d{3%lIP#n$m>UJv(3AWT!W%p_e>#*Z0&tO~q4RBuNU0Gofe zR^09&B7BWnBKQrI5CGv4p)7od6-J%=HY;Gnvh93L7@&0$bs(}LZ}vtbS;Q6{RW^=T zg?^v5H6s-O9@koa6f?Psa-K$U5`n*W%vN9`2Jq$} z^*><}!v7<_%*L5?g-n^Wu>%jz{eQcV8=7l&xSYuUA-P=Zi=2k17fKfmCixEuXyr?2 z<=e(XX>KlC9q76?)a7(tWuzoaboxiykjWC-OjgI59XXi|Yigz?D=y-ufMfiwOiD>M zja#6utMd{QTFj>!!%1=0z^CQhu7hQWvH3&8Q))x>T~n=edGz!lv2S9U zf;9y%X-aDyimgF9KH_HLtF*|~62OQS0dkfdgIt(S112&|LdL8S3?D$u#0LjPkV|Zk z8g|H3XQYd+KJY$FGMtwJ1ftnvXKJp;JgcDs+_Wre)pTIS*PbL1@zAIh{iIpQv?MJ- z1_>HNk_ouomBUerFkXSpi7`N-g{Xh;v6z1^v?+%OaT2t`@JtLHi|EL34s=fxNQfoK z9*QT3h;wL%Nwm{oxB;;T3UuHy+;_y8U~CD}Y+MvN2gC>pjgxj1Ml=XU;n4WR=HEI* zDEUmH{|=bMpvaHvZH8y$@gF#8^|&Ztr{o(DS{`A4kZ(Z;nvFGI!hvWsr$goVxI|dU z1j=by>1Qf58%W%1hhPZBC^EmkUs(MF`=oWy;S%G0Iq)Qi?uka` zWUS45!BdkzkomWAn&spAP~8Xh0aX0Gkd4>yIc4lmoVM8EQit*>V^y*`6Qm}CpJyO%5|M+NEP zgjiHM$Wr=Vjoy&tzx^HI^^&YKMZtFoF2V_^4#^sDKc5^JkpW9rr@{(MA+6C@IL7U7 z{?^!A=Jjm8;u6YQu2DbFU=f#?aPK7ZWBZVcm<^MWCcjU0JWGB}dRyzVWU_Ln? zi$f5wLf1tRmjfuLOtWiwLR9)a>v)XbsCJ` z-yl+RMvE^(&P&&ZMmCLmi^_05@GHc5QY(%>p%h(_pkTcgyHg$Wts+fzhV{ZM#<(aZ zUO;?%tn!eik19(PLNh9Jq{Z;u9Bg&CeKw0&bXO2|I)M?fbkdpw9kpJ=(go(3q10i5 zJwmG??-<{vSOU6`jopf|+O`2O{epNM{NM^qNsG*Mi) zl5OuM9rm28P!ByDo0z7Po;nnBIWi?4HWX-tsU!T^cwO5^Xup^|wYwf@FZV0+tL*Iih6rQd|3=*_&Xxa?%$!;%vhz$Nc|gQV|61?d-JzB9 zI1Oliuvvdr=jLR?%a`TKzG<$h)KqNgeNqAXy7wPOFS4q#tywE6c5Qc7POX(T@i|=2 z+nu4lLm9`87;aRCaW4|RMDOEe&V(!!9$z;U99Ikve>;+0`7So;UmJ59Cp?%n=X3P3 zJNP%}&;LS&b&%eV?AW51`C?t71ikCCr~n+u<+}DUsY_`rbUewqLk^zF6d#Yfw}g)Of3+Ty<~((KRyuPU?DzTq1A3OxSwd2;B_QcvWCMY+ab=ywW zOB?zNEl*$2=25usXcIjB#lPJzXUx00*0<@?w4$>5-{wax^_iQ7kRnf2I7_1|N z8u~0eg1)-SgC?Z0Tcx26^Nax%JCSD-)B1sbAKSq`p6?a4S3tIsDUoYvD4--<*{Kk= zSt_aLUiwZfOF(cae>gv}=66FDLHxV^{rYF+0j4&sNEw`dETNtkMr?p5SGAu+82rfn z$-Bn8^CMZ7S#RzX*Ua#54VkWG9yCCl(qy~XV|l$jEXiG3jq+%eODfZeYH!*ohVkqU zCG2W@jBB*dMy=m4D%>WDOJm3&m-@^(mVM){^$pQ(Vw)ruD@dE}Ey@~y?9^ruA|A2( z8$2>E-7{uYY<%5+*7W}_=`0-oW&8EtBSvN}HrD?=V*I5p?Yzc?+IghjY{jTB5l+&R zmYzjMi%ogPWy+h8!R72vCDEHs)(m1%gE{iM(u zry>@*Aqu{(U96K=a+nx0#dU)~D~Y<|`;bL;C~*t2tM<*7_?{(3(m-qmNZ82MzHA@u zhZ|e$EWkv*%GAfHdypDw#u^!}!pmJ#sZsA1l*w*0X1%%1rt>s( z5H`}r=Uc(>OGr4W$PpdNQi&_Yeemz=g-P9av!$v)rA0Jb*Y_(AHaQlhz)N}Z@}x?d zmQ4T7-;wf*b@NGTlBCj_ve&ys*DvJ1IOp-H?SbZ2ly{D@CAqPq{8(@H9l@A7f|Y*K zHVCpkOPRxVY<;FG(>qq^$mH?&ek00eGri{P-Y0m6bM@Ru;Q>!Z-kUn*o|MPB&x$dW zcPdTi14_DMw+3CI5%q#g?C3cXlC9=MAf&O~4V zMZk%Rlv&K*>h|BJrHU%?Q_m9)L%LVyg7u&m>y0f;zt9m*Q-1CjJ3^NZC&V;p!y|hHM1ZW99*yLlPq3*p3LMf7ua~^cwqTBUcv$Y4 z+yBs6>3c8Hsh^%p7GDML7Z>5@8LP>&xpA2hN=uBr#s{K1!{~tiG zv@E>I4LX__WR}2x9o)Z1EI{^3Ox4kNJq&>#FPVWa8uj<2M2JT}8_C!r=sx`5_qLlz z&3nhRm?p&DstP*pW~W>BARWlDcWT7`Q@bcf|GQG7i7Y+*JL#s|wO|I`DrUhhwxz7Q z8mqZoPGPe;dX7ucVmJ%|-4+`mvGq*&`qxF@SR7V+y+L4tj!xWsN2jV*?HHktVeK|6tr4>Y)!TV0GWs}RK#Uy1f*Drq!=E@7TlhseMk82r9YYv9egbk;{S z9AOqsz~%pq8#X71fW$*}iwJmeMuPlavB(55P!R07uLpn@KJK^R$&sSoy=9wUS(|zH z>v$Mtoeuk*4*t*m;Ky#&ZK&=B-*77k9M0-hEU#a;4Q>EB`oe&$ck-Ue`30eTg0jyF z8sU>9w+OR)&osAU4#P&;eCia}HEux54TFR38mCj$ z7YB^R-%JzFD2f^Xnn+G?pRjNKf!+dM%+6`;)lQuwl+$dsA;rX+zlW@|X$WC%WZ>ZZ zz39wQd(p}DkGaRm9Pm6Oa6yPki0lYm^VCf?P6b0YQ$ILDRMXrOVoT{r#(BAwf>t0} zk3Xd=8C`Jp1|fu!Q0pMKozDM`+h?0qejx&F39K2c`ag^@9+8IssvmfP&bWVZ!UEGk z=p6aHF%A)to=yMpN9miAEv3hBu-VR89vYix;*+t$(^3u-9sr9}@h#Qwdbh>8i8cU> zS@7f*e^_4Vct!9?H3Zog$&ydXNve5(CKSZ@cPB${E7G5DZBPg;n2qZNa- zkl$i^!BKgBIN_$=2f0s`s+KG&D0#=vUe<2}AD^wMRrHwgvyX1Y+_kiS=EJ7N>#V~C zy4q0%Dh6>>?k#8fuK$d3eEjwW zTN|XV%W0^s(eRmttz?(PT5&?{+naYI)UmiYApFpKt21PfvKc!&iu>q{dt|fy3{Kpo z(Lhy#?o05c-;0#@JHTV7x@kUxL}l6sj>XcBJWjz1sV93-EMa9GHAg24u2j;iLi6lb z8&w)Ty9N0^#I&yruya)hN8~&|{(^^v_L@PSFB9|Zf$AGVJ+69)9z3;#g=!+tK(m!7 zA|K@z&I`0|(J^klfAdP+DoHBXK?mhX>!}7qM`dGS{?8R279tiV7AB6g02@&BZ!F9l zOw4Hozac1r=tpn|J^LqrxUd*o!CKq3M%y*3+2Vf}v!cPqi(FBl7x>7PF6Q&`+YBsu`Bzzs|wnd%&w>ztXHK+>_WxW0@n zuKK?rGrQEYfez1t7N1|pe&ug}%3-$M$3VD6wC8{(aVS|>h1x$ZpJ~D?o8to;(FyZ8ak{(0zzvFx-|d?L?=M6X%cr>dg4)`Ss-S|L(qB2; z-Q%-^=tPVZB1gMB!r)AQSzl}|EcR@^cI<&;GYd;&i+jUs`IAr(W+5^Eou6S}ms2at zBeOjN8IvoshwgFrU41^$n)8#Q%bSaf^OFPEukOAisd6QQgw9XJUr#$)Yb$MQo?l_( zbQdz?eocnEr$1_}%ukN3XsB=Pvyf2k2{T&C;rvqq0s?Ykzzt5JnI4!L^S^R_49o#N z_k`qo_BTI~IyVs?5kczXIAnb3Cu9Uae|Yoawq}6oWb4TKc6_P5GYYY?fXUFs=z@rs z9HzQW1BF1i?8N5);n9`J3Fx%hvxcBJNZ(c7m%xdiO?pH}PRtSE9T1zYrz9e&ES>$j zMgOHvO=fZhdR<~_3O>zJ%L0Ohy#i=}oD(8-e&PP?nZDg}eLtYJG&e)qephcHbbgf| zvHRKtjRf?OrMkZc6YIa0b(BE{^2C-54NRFnp9h}5JU6}^U%r|Sx{BVr7+$}sB*qs8 z4+;4Py5K*7`_RTzj@+-t=VcxBv^Z@d>n}&l^Us>{)|0O4>iCYBk*@{GRshRy{hJW4 zbJkbv%&g}4Y~Q?S&+NeRuKw9AW6SAPl$o)md4<81&CA;YSiY%=!Lwj%+?uJ)$IYw5 z=kf@kQbL$^1Sm(YVy|Vrcbdu&QraBvn;gS@I1Ur`!(N-cH^)+x5PaD%`{zzhZXWb~ zyPnBr>>l5Qd3}ngs|7p$1^`i?Vm2UN1%myE`Iw&~cpzR0g8eZ0m>-O_tRTk&pU9;C zdhbZgpvUB&$ah19pTrm-9rJ{*Wn!;LzVjq^VFFeOA0mVe!yg54TKiwpc!Uj9?*(z^ zQou23+b!YiaP@7NK;7@pe<7>?2)+JC=th6{eYo@?On?pn_?iy;HS_Pix#zC_*8ytX* zg|qb|V)#|t{_6Bzy%`DZuIsv}UvNZ2K-_HS#K6$%DQzHZ{Fd=Oy=X!InVI11--D1G zz|N4r%@&@*`^wUh&G~9+0c->Y@0PBy1kG+J!OrYiT;HrU zDhUrK39nwhC_d6->nFbODEEF^008@le22bz!Ss`vKO=n4Q;)6vJvRiQ`}soUW3vT3=hd{Amxq-z-;Wk{FuTXA z`YIfWR1wAUUi6S%;hh9{(U4a?Mb2?9QF?@vjb@H_)0gu06ekGuKkzF?Y6qwWs$UTT zwlT=W7ci0dQv!^yj#8{p_|s!^$3e;=f)Kcn*ZB^Xst}02dicKcV3k5^{%yY`obh$J zx4+*i60E-s@Z&&^E)8}u5Ks{;{*ml!PoA0;FBd`+$wjwz|s^QOgz)g#R$(P?b&7Tm=u}ukwX!YQd;=m zBT~?R=aep^AfR5D>TS3Oe8>ltW0ycU3O*O3ww&DxR%H*+2!lojuw26uo~FNac|grP z={MnE5V(lp?TSRf4cE@?dqWxTqLFA@ImQFV#TZ+mAEx>7=3lruTxVg{w<#hVNeX!4 z=etO{Si|yp`p|DG+U7c{$Pbpl03})stMGaTsNZwTQf2j>(pXw4kENKZdw zZ3!m72fbum&9>I;CoHPEqnr^o-&3K|%fr;kI@cPji<6(=sKD=u1s>s13B|LiA6gUa zm%?rBmaURC`)EF_3yvW&Ni9k)(T9prY3Mreg95($Z0Et#TV#~H-_b00&?(iJbSYEq|d6Jls?qFOD_=lR_(=z85w@Lw~f9o?j?y1P-=ES^)?% zIAj?>U(JOcXkZ7g9lThHtBFD&yK?GWgC^XW4T&L*TDEZPrqlu8;{ngfi=S`Q%gt!g ztcw+Zh1Fhx&u@qIGtowGYWc<}6r{j88=}VnY``zpzKrcxm}tT$NswWPD4)2+S?9>S z(7GY#;a`zmv>SnC`%HsxHy9D8j(59!->e}aL&P;533JPv zNxxbWqub}JVWo%i_0*Y3j^UP=-!H|r39}GV@q-*8 zmB}`WwE>Q@A@mimq8dU-$-0ss1QBtuwQ^!EWdZKY&2zjcub=3FEo};=q$u0&6%mDi zItRwqb139Xw2{ne(Du&&sb*OEgT{UMxa};S{*&foKdz38jE(go_EdY}hy>EA452bNx)U{f2S3yP%VJT{s`s>m_}-5N)GQ!#6cw_gM9CjIJMX z=@NqxN@R~@oKU+E<0PW@ zC{LKt;-~2>(e27}E3ybaMRs8agC(&{UxHztJK?S^tvh^eGuOweY+|s2LXUazPbMqp zi@hQ0Pab7VLHK;hHWh2<$=g#&FK%SE(7P*tw4r};NQC>$jnug9*;a#3N*JjY%%D|C z5j3U%_?Q%dJN7a0G^plM&f+kBBXb@U{)ZWU&2PyT=)=EGaFarQE0awP6ATGSYla}} zga|Vy@|#;S5&IAuoojr!8}Xz9bsFGG$w(CkX~aIsVE6@6P>_^3#Ot+v+2EIL&o@&- zPQXYtm6Q(ojWBOocm?D8EaY#}70-`w z+8VB_PRhgeqz%Uh=oA>RkS&rI400<0^~X;Szjiw9`i4C`a~bbKgciYJUvb(w@n|T} zYCb~$H$?A!qX9(l5k8`}ot86IJQs=jz8cpB5{KvF;0hv>ktb{5_2))S0fp5=8PE1-Ou9mTBgn(hDRDW{jy#)=NDu$YkWTuk5fmDP7g35Y zp>mF%bfX}}Cfq%D3`Q09E@%psINy;fUG=6i$I)g(?C zlyAh?GIR&>1%om=Zb89@Zga9lJ7y{%(URBW|B+j&aL*yoX{R@rjcPU!Y`N;<1UZ#a zb;mNEZLzCOE#V3RzP~6=h1fRf%v3k_-THwC!&!xdQRx0@M6U9{jVW3wxKoVK_Sbz5 zkH8|x2vu_aEnR7ylzh(gx;NwS9C5KiV(eeu>WlzjA6ea9?n; ztx85?25vD>RP$nfJ&#mesJ|=!;|V@f-o+w=-6hk%O}KIiEAgq?%;(BQ{VA-Ab&Y(X z1DU&UTvL)0ao&=IO`F3IpnB(@G)ztHr|n-> zv?paWjQ|z3xjTN$Ap8_9A;((114qewu4iaH_1AqtLK4y`1jDeX6SQisVnPaj!8DB2 z!2r_iQQ%VQ&B-GdjxIf#>CX!tTUt&6y2^2qjCYqYyxVU4T*CL?fSw?wMN4*~RuFox z;`cV{)koJ#UH+4mNfr9YLxaS#KVyXe%O{Qo737$Kbw5EIX+mpMJfeH9!3lWtrL+(z zm){3{EcRh|TWM(=gjMd-iMpzw3qjVUV;|>Ap2v3iKgH6#1cvOT)Ya6c{{=xnzP}Ol zXFB_zCl~m{CL{V&!rkH(Lq>nB5OUs-utDOVsVJtOEmglAUfw$Tt`B6j;%#gIkFWCF*1^cUXf zMk;gT-3(8+l@C(5*;Pr$t+_$>WMGAa3@%)(3w@zP`wkGAKI?=^D8UU*5Q(Loo@*f1 zhWM;|PF=eC9VjAMR9JVrv8X}J73Kn?oghoAw@+qq{47oM?_+;Pi3WZ~TF`vaTaKeW zms_FmO~vztSxBJ!6{l`lfo51Z8-&9P?Ea;MAGZSAZ#+{Al%*1IanW=shd9CK!MzDT z0$t)4nrTd*D{(wkL5&|hPAX)3(oD-f4U3+woX&Ll`jzVEfN0{7y(2z%cj!XL6#XGm zbUWLrb}6h3;^Kb=qJ3*GPKyfc^*Ur(o>*97Js)o;;?HG{tLAW$*z6pWg9tKW27(#; zheQ`w?Z!F9iScJq)geM$%z-f-g3VZG6nD}0Uk{ZvD`#x&73xb-Fkev=IiTRq8+c$z zJ#5GVa7v&TZ>kV4{DdradAG$H^S6kYblP-j_WkGT1e||NDN5mO#Ez&2!Zq1nR-#sy z4GLlE9F+MaoA;fA2Vm!F`P%H?V7LyrxBZH%H5e*HW8PC zdrat!E=2saDQg}f%vnnEn2%pK#L0l@9pt|Bks>7Ft#DU$x+EOJ0jF>QM`Ai0pTeG^ zKKA*#%cg&$A<+YQLlsR`elB33Gb&5jvm(^mix%LCC_ID6db5v!O{hCK~?Q-|6$1zOZPq;Dv(N=#G>lg2l=^mX4=@aZB1K)cw_ZCWb zOiK&N{!hJ0kX$|*%}hExvFG)~Lg4fqQs6}K?-=c`FHMBU7xTF9e&CDu zch!Fud@dXu&>|LWjK|C?Yq*?6G<6hh<3j-HR+1@)3Vi!4y(~cDvm&Bil@>8~L$4s$ z@JVkviJ6K)`gT9yr2ln&u!Yih4zyb8MAn>WmW1_*6lLyVQYgzN>=XPtBQbEFeS1Z6TMK^%nk0dSahAgUvR_yWBcR{}((pQPU$1C@ z`5`mnc6?5vaaU ziqP>-ECMZZc4pO>u_)a!m0w2BXtcGB!$G1=KZy}j2 z_LR@IGL96`wvj|e2jV?GQF1`eo%Mf1CXghjFn_m7)RNBAw8W$-#?errLM z>aVC2A=FyyT96jO8JRWiy+5Tm;K|p(9E!!H%Q_~QmN;pHW0pV<9Rdn2lZv_R165#u zh)*IO!;ev-ZZ%fjslZcF*#V}=rX*;75tY_6StD)iA-aB3j-ZnsD9<7DVRwHFabFOB z#ahmI$|l)X3!9P4>so%Zv7KdeWYUrR>c5>5*}e`m(S24(6e?iIOxX{e3j-|2ek{e_ zKmazs!^mECuqfT=MJ39Ox%D_Yfr(^bPwI@1GNQy!Mv9K%*^3ccuA!bHtF}_>D_l15 zNH8&$W!`;UW=2Lcth2m$`D=fhM~A-u?DJZqMm|~yjH%C_ROa-Fm;I%y z?3Jg=09YPNRBfx_MC1NfbvNlED6HYNDh~~fL1GX|`(XA6nCPCnb)e?SQk9mPc`o+= z*W+yqkWTb16}=c4<`BK>o_Kqk(gieVv3>TatjZE_#L_tk7}{j8OO=?1H^u|7xme)W z+&md3Z3Kv5-|M$_2L)HiPpEM@1Ux+zm4CR7B3&jHLy3uI8_9;<>TLDuoc+Fmr6Z{)6Gi%ma*adxwSchIHG0 z6lE(K_-FjjOHbw4VM$FktwuY}S2(qA-oQV&B)uCA$N*C&ZsV`Eg$;aT!R=KP$(kNe<>qF}6Hsvw| zhgYA{ijRM4EIfEM98-(?#6#wp>Bl?iii*drZ5cYQWk#FFme@iq=r+mP6}+cFx>3}M z)YCWKtjZWwAo-s}EScdi2$GW-WQZIPEk~PD1>#iGojc-Sj+TGyKaBEvlp2#P$`!ZjsaW$B@yDKWVn7a zG>50~QvX`8l!&-=8aC=Nm?oCcq9TUYc#b5erI>Zg4rE+=`LmgbEq@8d5 zU_LNa67`OX_GJbm(GWbio2c9oUa!t*@v63KYh@UUYVXA#>+Q_x{%qx^Pc;`;3!)mh zT&#bPe6Ok({K&e5(UqZijfez%%{d7h35$zNXA@$Llo4-VIZ^sn5VU zX&?fO+yEh==QFemUoDEfc?=u{6y_daKC^$YeMp1y8(a5hPtfJc`t5Gr1Ya2jNJsk} zsipHFK-$g9ckWfIG%+a&Q1f#QlStS;Q4%6tK)_#{3-P}5~IRE{|E>6Iy zDRx$5qib_B#|az)^R`3s3kQ;jBTd3!7umxGf;O`(?9Gnzr+$}3dX%a1-c}V@?xTN; z_~&K>VQ#cUT@jHwSB4D`hyvJ!Ld6$tUa!w@qeTjNRMNt#j`7yHK#5=Wh^J8bkF48j zVc;lbp?;n}i{mQc*AA&m!VwTDX|i9HsK0fr&jQVzE)LfI2)j(%W1tq8Y*eDDd;g|5$x?Fjp9G4H!7>i9D3P!82Wp2wd5RF1smQmjFX6TObH z{ZyDT*ElhlNWeX>fb^Z<0aFfgOYwg832YU-xeT6!t^7)AMR~3fJSU_=Y;J!SHbm<) zfqmal(hPLc$ZF8EJgVi|pk!%3N4Aoxa;Yae)9D_yT@+zL0%`Tl=5>VrP)r8d4w43s z;~ar+%L|eo^blm;Jayu!OCIH9FqNQc&MBa z#|Nbv1F_CK^E125uotL|9pUADah8MqzBeQ5QnwgND_C&QxS5C$Rb!^*ys@Vug$?xB zCLV%FpsO6PM@FIeafOg8kFRm%Ddrc_ukQ_Hs@f^Bs`}=t=Gicn6Ul$TR74nwx!LN1 zei^$bVAO1?Th&L8dP$nWPP)!#yexD53eJG)B?#$ogY;Me$&%QUmimlQ#~b221H{kZ z=7t%{w-HL^W%a3B@Q4{Pk-sERHHpgCDD(62GToTxCNHfXOqKMB@t4R+COCZgCZqx< z^47U5be~bh^EX#{DIRZ(NI38ltFj`e2}(9uGjc^zV4)pxuACoM2mS+M3HrGoEc_ zddqJ)>+z1Sz~1~D$Hr0HqWwsno+jo2{R*p-%33hvD3UgU8<|=@>9cD*p6>3N%+bDI zlHlFGcyWKFlXNfj3D6)$tihgZ%hDbz~D5kol1$iTy)1k2l zQFg-h5<^-rjTcJ=kW22GWz!sH?Qeh<$+8$fSw3E{+IK z1bzQH6fou)AV^|ZG^U<5jD{~=YUkQ0)j@i<5G5bk351n_Po~Y=g9ef=7`Fdr3!YGk z+Lz*DHI09@#qz1XnN zZFZ{|DsXHB0fhq1dg@y-Xl#pLMG2xu*r*|_Fg_;42ricNz&;WG9`X5I(0`u<8vN<~z}@c>HItyJxttnm!m4l$%(^eAE0JHV9I zTi~-Py}U*kw6TNoJ)YbcFa!0qTnQ|@wxNRY0$;stpcwrj)JITVbB7_zdZUzcjOy3} z$(Btfqx{1!HO?5CJ`v})LDLks7(`F!n16rbNsS~8?wA2iPdS8qLCB_z;BE};ppH4B zr$zS|Zyy8tq&l-1_r5Z4RvE3jY#ww&{u*gu$dgk_(v6f8T1Mrq?|et}Eg5r{$A3j< z4P@O6dlW9GXcdN!8+|yndS{f@ZULzrUuQkx;CWp>(kDJPZmip!-y6z>lr7**o?(AI z-sP}T$h+4p3fW6@rsuvF=99y7E6`j+){nYqjR7ykgTc7re(R}Utlv#`>K;}6$8o92 zAH^|Zh?*(lf{?zKw1oVMRX)BfYJO5n+4Sz}k5U|T878PIBQ&$m7{USqTY5h>3FUh> z)`CQL`!4f+nWZsutu8RQHgPIPd53?9G*x60T4oGGIkU#L4abe{2@Po;TpFxWxhE?@ z6mE{v_m%`C!BTT~;$^JDJ0!vgR08X|sloQBG3f_USXCk|B$3PMd<`0hG?6uU0ZWW1 z49X?QlEhWOf?yhQKBMg#HO>srv$0?<=W+AMwqGlff`f+7JoqE#l!n44}UbUc+pqq1)?^S#Q1ST-Xko011S1(J@K zG@R!Cl~Zlb>Ar|bZ2T%kbvb`?{@_SD<7`~8+tYSUnM?V81WSYX)Nqy7?Uh9cM5i_O zBhfiZ?^;VVehvLp1g%!OY^$Sg?xF-;q$n1B0@GFC{h zp~keRLqoZI%Q50Q)6F8b2CorJjlQXCDwrXLB3yuyAD-R_39Zx0Mk2|#0NorO(U5n> zv*F&xh@e@x-I7w;mM!=i1iXp+Zf0jk1Uz!PAwq#X&lm3&iEu%3%k??oIvyFeFK<#~Pd7wyGl2t1F|yge6k*IeRINw2CKZ+u{)wd%HA7M~4}!H$j{{8MX8XSO;g zG5I_LO&lg3H2SDTVNJ3H2mWzP8ViykrF;O0i%Cy;#p@^#*D5E-WZJ;ndf42 ze6DP9RLzx8%{H$sg14%|l)P{CV4#LLN+7=|M{}7 zE8C43d%F_0L@pRQ{d4`|u@rJJJ3#-DFI_LYt67G@H18Egq!f6y(X_2ZCn*S~g8vvk z&IX7YWTlog1snLO;k{nYYR_7zLE(A|n# zfeBIIi03q#w5=oy`=r=fTXs|0LzT`A_gS*Wp`I+EgWyvUOI=L1@d*~nb{+*%9irOa z-7C#)Eu@; z2jUq?sWr)r>Jo2jr_|kA&@mB1HhU!Q(7Rih>b5#;f z*pg?KE39K3DF-0HE2Kt4vYvhuQZSGoWgdUABaqyGW)jV|{ApGxzO!I#5DXu0Aa#uH zXe>skvz10+dRn1M*!0vqRwX|3QKygI5kk%tE@2_Y=`u$~tIX|nSygY$l< z6-|MHw7ptQkWot(i@|N2?&Zc^)Bpt6n~9Bjao?oC?}jH1KLQiT{>#1cbQp{>boYM~ zAv-n?8r1`i)Zi@D_gnJUK5=}e=~cN2kE@Z^b-WdskT=-As7evZU*AdCqivI3pIqZh zH0kBY$+rvm;4ZkTsvhxgB`?ucMeaJ$ZMpd>(>ofi?{fJ(T*5m~erjVw<}2$Qz3B?1 zYb>WJPVe`3)HWdNEJb{p80=cp5eI)MYwHyjWmZ}ksNl;sJ!;5WM+HaU0U_E|J2Kf* zdG8>uXOSJ|JXeu&ge1`C40-8kyD9Xk`LH_5l zTU{i&qo_DZUT9M>g>oQnIm14^Tv_RA6x^%P=U{VqkeUYMh%_0($Nut}`@nw1CM1rGy{;X7r9?EGhoR1A?MIVsYQw=lR5X|NFD-suIR5TiBk7HkkiMmg}7GUG%7e;urY5`quYM3x2WxS!4ViU1b0PX z1?RHo(hy3MQB^fH2O(jt;AVeX=FLMHE5d0WMwr7#@`j7v>&6r@A|l4zuWCh?*E0)d zD~Ck^@4jc*TH2iHy(vN@*RWph_Kytxzy|LLt!$jvlyv7X-!jrcM29=t)+4ekEEIIU z0I*jIeN6U98|CO)${QXKKq~RBlVH5H&^5g9$*3_MmBv^KEX9$}j{$$y&>F1RDDii* zu&}r0-_@7iDJHY`ht<-*EfbXhwc>L)>!BUm6qp=j!DYZpRl5 zcX6}FO#Kv}KuHN(n}z3e6c~t$7(LL{LW*~d=>Vm)oTz0IcmVDLw-Q8}QKlCq`wS_> z#W0kq^Ca=q|4l+^5S4#g!aZtlkZ5#uLhlm+#|DC4uZ)hkTPb zpF85rD6kQqybyEKc`Y`d+|m1&0w6;8s(JsB_OW8z$cL4No$8#`i#izn$j)8mW=RD8 zF?~`aW+TQE6nn#DVim!)r*T4VavJ5iE*2^>Oe}<%mlH%@j7opX*mME_aRbTFnrb0m zF^=ab6X`te2(>8MGu4E_Cpv?bY6v{fY_wlCekQQ!FN9l8pDREmrSJ6|HagN4WhwHC zZV~aFz7qYin^dHD(8x9h!)M-rX9=p8`}M^+Z94fSKFD#F66)yUr$B(1b#<|;w+;xt zwb1#2GtQdc|3xuhsU7mq*dqjB3HPxEM#}uTy(3~fA&-1R-xH4stgq&Jixb^*k9QU#f|DWaVPfOy zl2eQ#FZLER%qCwAwlf@Vi#FLLwL$Zm(Q-c-+RIfk(H}=9>ivOncNvoQC@o(~8DA7y zttShl6ra(O<$@-Lx%GA9JB$s#Nc=<$(m3BYG7w+s6fR&Mxsqd{MMW)Nf*6cF=umRmUt?UcU zSAc&yxLBn0{)Ya+{;o2q`^ zVN75!_&wKH8v+(W1A|r#gq7tsu`hF#&AES$_4ykJ$YJcMFxJC%SH1z5?xS9vy|(6F zy$dsFU$U*}sJnw)>IyvmYUI(%kgvC}AkfIXcS$Zou-U~1C^DEI3p*+|GsvXi=MC>( zSuL-S>9H)4);gJuZ)irs_e4K6=1MhcOOzUC{aRrXk5iCSLhH~sR`evoe91$23$K6t z>CX_t%Tf0nln56}Px))O&()y3H2Z=WaXwwsv zp$2`ba3|EQSWs4U8gzCVf$U?M==OiK)&pBougtRx2SU4~gX!C5Bu)y4jaQW_HvLuO zYm?b)OemVt5(oitVp$c>9(CWT_33<*c?SW1R&W3_z&4=mw1-LCP6|nDEyde`RdgI& z0S?u_>&2d23&zEbs{6>*d@kKfZ=Jn7M_Pr&WWUG7ZKU&Jwk87?L4<@bAQ1ikUI`kEuU!+>kpG|Y(o@`%a zJC+$rtwffz**{{c>?wh9eX@Vu@=*W;wF7j-e9^C3pp=|v429dij-?R0>o`5Xq35%k zuEXcaAE<7Ww+Uh}#PcHJsF5Ddd}`~6QkJXtxW^ZBp?vEX1Fu@^Az*rJ#a`j8xK#>s zn5p$aKLUgO9aavZ>I@+FjiL>h01;6_3A-A25ae8v1~q`wIzZdkkUd7PV+ zMx;J1hGt}(YtY>mPqDUk4B`-Tze%L>QUjOXU6!UK{@uC=DsP7>THSmx6xXC{vZ*=9 z#ZxZmA(v@4yYB{g_-lU%%rOv7=u4&&;#tSt-F(4R(R4yn7p5Q8TrzBfJV0o#F*I5o z(q9V5Jq{>dob8pa|4?G*ygzKCNFcL)9bG6Toi>tfNLblyqS;DR+AU^m@@p;xG2=Y` zeA)=Ff@dD>@PSi{%2D??7yf|%Q&&Fjkl=soo2HiyLLfI!q)(Q0 zePgvGmv&Nn@;Tb1IRW9}^f4}8eBqWgF1~D{Js_=~*mAaPh@IaR%Itzmsl;lQ`T@M> z6H}`)%qPa--lvLauFvy$2)0_AcxP?%N%i{BCiG0+aZb3~cgX6b%9&>{kbUSU21aHQ zu@V#3Dv+6MwReB9y#vV9j?Tj4ovn$T@OJ}FI8X$$^qk|;14PN~E0@lP8Z=K{mMm&{ zsU{3(gg~f(^i|%G7ZJDOVTW$CqVJimj+vkxT<&SCV`5_OT37U$Epm|jQ8Hh!jxDG6 zl{<Ca>Xim2B2QUf~kMJ;8v)dxZnDL;fY;rilMFiPJnJJ z`O+q!aaLeh+Y%N1Kq=*(RzcFylx$ZA!;4CgPgdLO*vPQ1!9|HrIpQ3?t|NVwWvvnc zGF0iSyMboIWEQ3?c$Bfi+}RixqZer{o`FevIQ;ftF01qt4}Z`C&iV?aAu%`HQ#IsZ zZzF#}`0?CM8#AOhp%h(*bQ)iqDVp)yxL*E*;T%a|B|Rv-1_x|TXZ?N(oIT_|4IKY| zCxqs>BnJE-g{fVk>fvXcW!HgCZUPNmOlTk0#ZDkrO%DA8cI=9!R}LMdg{44T{SvWL zL1kA(Jr^LCUk8!nt>yWacdqt(<-tD3+1Qt`n>QH%G?GT^cz3=R37`(iPk(YYm zL!L3dPaYFYxZapODdgC`E49xSECZowD3+zI*jzTg#hd@y#!7ElzuieuDBe~1vnQyae5ZZgIMxaEMAQcK{q9xB}=~o=HhKoA_jQa8PZw3lkwf%wVi+WJvDc} z7AzIxH=aO70=cNQJZ=c=iHG*<`y#n=j_P$7I`ZL{gDH^Ah8bojFr*wyTp$G_obwCK z-%(u!(5#Pd@X42%qN@n-o6~4|48kt&LoyNWe^+Ae47^jy{#>CA`=Bi9Fp~j*o>`Y= zMp56`SQ~)EkrPqvy6NF{)skMMqcM$_ZFORnYHkVzCh16_&Yxp|d`0j*sF!Fvh368(H2TR|P;RS8SUObU1%-GRG4ptyG*> z=;S_mf`37Qruej1b2k6Q9uGd79b|z^hwBx&hUn(YqeImeFfdKdhU`bJa>I-`XW;fy1@$X7@bk2DCze9mCV4?8Q zhl7ZhFBlHfN4o6NRav${lv;sc-|U=!zDd9Dc$>O>uljcAX0Rq{J?YCNuT$4olI_e1 zWCK4}O+%yRFEFE&ttHFI8=*hBN1W@r>{njM%zxWk5uSsx)AWC}>6Yr<#NLB)G7By5$)q%ZIoGF4lVANSzY!0w z5GwuF1?iB+-7pfD+%(MS1_XaHEr_H`=Pf?)YkEkOjG7Vc zt5e3UpQZ4i6~*isPwbJ4?G8)u@_t!J&iNMd?;{!OpnQ;nXpBUI?x3PJ+(0lBv-LQ>a>+$x zEx7~Q%pre!m@1W?Ik@}zg#IrvsBWggiy16INH zupl@QAaxCS5w@)^4wE#|t+~$x?itZ2g`rHblNZ&7usk=L@8m1MHK8~KF0qa>#`6+) zzRmLG0S@Gu`oO77GF;R9?#O19r}4;=wZX=pp;~{EZEld-k5lhiAS0TeZr7^IG?@pG z5yWRoL%+fG+Z_N4-xd~H4zu0g)}u*SUXaYGQ3TZs4z@j;a$X%v5NV)+*;Tv+)DATE z9DZ88?AknZTQuEAiFTFrA`1vzAyGi>?DqAqFZ2H?=6i;X@j-nboF%97)PtZ za~?(K27k?j62b+%Iq~HyS0wz9H}=}tAOhAoy`i1wh-;skG2|HZH?C|iL25a7~B;? zf%1%_H(`K)t`@Vhd3dzJ*z_fp`MP}{pKAWbFZ^_6$T5>BG^Y1sezKR>wB99x&y%0( z(w>W~+s--#Tz&wFxhhUqwZHY#pAZ<3@oK~8OH<{t&*}(PyuQh^ zB+vuF&$&Ue!?Zyn8K7SsOJ8iR>|5N65e1nDKX(E?yCX@S7IB0M@DTU@Z15=fQ7&J; zp4|{RMRA;QPUU6k{s{JiEI=R-K7W6?5#2!MAdx@q=cyn;Jj^ksx;USJv@?v=s`W5y zF4SR#2@?M1h#E1ahL142Z9Tt<6a&0AzwB9crpvtwiTw!r^>(vDCAp%^s*IYYXaN1; zs`5J%oGgiAgn~3gAXwYIQ2AXoLnn= zWZqZ88Ef7jyp(|0sPb6@XqaBd@yX-(Q5w-2_H}0^O(d|&MjdTg5VcFYp_>LVC}zh} zG3bW9qp-vkq@)n_8}0*+=v#krgrL-N_guo=FJ}CQjMHA-7Fbl+ZBt`YWhVhLX8tn@ zqH7YA8&@PKZ3J9%gYdt4$`eC((kjf*riwJ;TxC@ci`{Sz?;VX<4s-yRZ${fowHJFN z^ri{4;?Ytdk)3byf}a=5QE5-CRwFXaxIpVIO%>`RHgS}DBA%s3lG1o(} zPV9m%E7S$lhB32C!1DG~q!D_y^LocM?)tz2-eYm6i`{u<#){@lp=x7-Ve+bib!3Q7 zj`%*o-nxm7dr4UE7{mY{wnks&ZFD)|RL0J|rqGU&Xr1#TA`BL&Uqp4pgiy{zR1Xqs zqj6F(^oW(#yasnOR33kH$<;)qwLbbLRXsdL1veWoS@Xns2>S*i+drrWG2;r{9KWYBI5O?d4hLSOu47x24Z-$GTuZCPpusp3<0nA}Z&S90XU|uLbu>4W2Ei zfr(Lvw6Pe$zH5IM!WvnVbS4I3uj8(284j4JL5KPfQR#9KS$!13o zq}~+rd}Eru-^6&{E0+f6F3k>RvjlIFS&g646-=U6N7R4i381zp>XxH4PKpH{A`7R>{VQu9LS*3bL&a4or)m=-UmP+<}Js_e+yh- z^A@Ej?E5~dwRjwqmv==~(w_49*Q^C-yXAkSoLt0o?a$`1<9UXHCUTTJ4mvu+ zxVdXOW__*R6Ejc+F7Zh2Cy18wUx8K{S(IE$E?xEqnklSUw$;Y5b2{WI)t@%A#dB$c z$LRnVi@?)eQ)8$Im(gSjeB?8C%w&0&p7Mc(2u8PLi##;*FQrs?s=hOpWukQ)t-7ZAZ9l*6lOHu5Z2u)e=Y03?USNbBhbD|BKquP z-Dw2r^O4YdX}(y!{ZE zcCvPH5;L7L2o`k2;YZ=h?95A<$MyQP*t~zI4dUqCCb)U4+wFD2GT|^A!j!Bh0AsKn z1|!giY@1|4Nf;1UFA9!ckLsO1c8fR7=r88BiL=AgW4#9_e9V}zyGA2|_%0itc_p=OEk=IhcZv?eMn2?T$r zq;%d%xy(adnNHi*aEU5QmG^M$TJ$p#zFU+#ZZi1)6S)#b?XNNSzTDF8bp?@pQ8~{| ztg2%~B6@wG+Czsmj(!3z&E8hFv-5uuITJ4o(t#=te1E!Sq3bEfr2}jDxaF9PNu5{g zZDeSw^-oPbgZ?>l=%rIj^&Xs=+P}7e6tdQ+{VocQKOWTArWy}J#$kHMn09?|$eR0P9 z%QZAiWCGn!f9bC<=~tlj4Sl{eqyorSROI04MXuYUGaRf<{FdyZUoiAvZg z;D@LE+7(Y0lL-E^bb{=DJ|*&^><`m??ED{8lnV zL%W$n1}gliTaEhOV*)CBEjg82b%omcUxfi7SLlW8Qq+3rg>O{cn*am6fNCTpcYfgy zEAbZRgyi;>s7(Cmk3RdCH;J%~*v0tJYDk9xzkAGTFGQ?_0c984eOxUr1zp**dUvF1 z>V0leOSXLhy$Jv!PS1ZxzjG4J_Zd~3R}tUGS}|B+L!}(sz|#k2$A4YU2`*ixig*Ix;ar;Vm0P& z>PazQRLr~zw}BK!wbTf_rCk3wGRAuctsY}GjI>B(9|;YOaVdZO=QCQx!+1UyiwgApS#JNI6mhyhoig5Rp31^^PuEr*n2cZ<>4m_ zcF1x!4P-+QC>4Js>m=Mh_3~~%%B->%QiAJ!LL$e+;~Q_B|3FCXqTKb9eyp#ZPd}E{ z30HYbHGf>s_8-)*^-CwS(-@Pv{+ zItBKj$(vwob8(jBd~#rRKHKgxg=-rP1$q-qWqB6kD5PMMlNUqW5xx+3sD#v#W~*s{2MRpP&t2I1 z82;(;p0$S_cMcXsYV*+m_Vk_jW47^vBvg`_R*-2kwsNfLQTYhdS4uVUO{zf z7(spqBOh7}BJ^xsa`#cYfdk#NRD%yNlVMQsyR3iOh(2AGQVe(FXcz=t6@p*%B-{43 z4}5BG^9M6ufx()U{L5WW$R#RXgVrp#J@vnAQjiFHsa6IU=`G$ID;xd*XZa!y6wPIg z`E9+4#g;=zw9!r_9^>ygKsH5hMF<=(2Ph1f=TNMM0S+z;s-C_0-+mU>h?dR}fkE-w zhWCGX?@pm0I!~y$r7Vm#QhfxwmSP0Cyy}l$frE=C1B@{$rYX{(V>U^^$1DBQu0f+@ z!*FB3Va&#la*rLhy2%cqA-hetToB&!EUtiK_NMIM1((B76ObTbkGMiaKCmjriV8jk z3O&JD7`ahf|0jqy9am2p8f02jSg^G!QFeZmh(_?z&@ zFeS8!&W2;UkR!da`cPc*KdV0D7!&SoZM9@aRD9KfqZAH${96&_7j077}vz#mDEvvEbS8G@-?X4mr+Sasx{On$b!6hh7XVhV3Gf(z;T@TuXPw$gLIuZeG30z1Tg zmGyvsSMvS~+cYTzg{SApDsEdlvhcX}7hSZ2OaBRytPi)N zw{0tH$Q^&mvj~xgMhft;W=!>% z$)eUPvfY-TX)uhJHJAu12QkPpo+ypJ4TMEKAn}~Dj!$Zu14HslVs1aa?Jbi=lSfIW zJb37S(}ZK+5A6}=kCFI`;|Y91smz`vgY{(Ij}LyG@a$+}BXQuo5xI=?(dpCl<)o8Y zVc>)mw@k zQQ!3V?W=!}{3E_!5eBY!Y8(fSB}`Dcm@eKaq&{|?^T3~~^0C5sL?BdZEuUcBm=zFm z|{fY+B}V#1p{)T;L52*IiC#7y=CPKBE0W~j368i7t}`$BM)vHh8s z;B9ZH?v@kk&wc`_WsqMC5YLUHha|paGbVQjfZlXC2OOyN=*F$Du4^E8*b{9VKLyT* z47z{O6;J*3!T_OQ^F61h4-I6U>XFBZbqnRa zWkbFLf9L6&dIU><>mC%}lTu?iW&4I`=?m@ClMV_yzL?V5Kw)fjoN2j#*AEMJt0iOh zQ_bxGuWXPMU69lmVk)ufQ3|_v!d0F=N89Q9i~Ru*Y`#ns1Uk0kRCn^qoed;%LOOp_ zQ@!LIm&34HJyhacEiYc5v#jk(2#D&oYW>@nfx42!L*#92BJzUf;x-oL3HBG&&Js-+aFuR2>qLpalOkY87y@f^{!GA~C z%0_0DEde*9aezlLBwFujA@?fRMRACL_uX1FTRka-`o(7u@wY-+VNcH|q6DToaK7wr zw-Fg%;O^?@$}EC@;Ip72p*lWDk6UE8Q1u`@XMXUgcwMq|!K& z{;XtVgz~{mR_iUTKV=ZDiI^lFDVfWg)0Ts!b0M1w&3Fc9P6wx>!8GW3-TI8quaWaf z9v78EGs2LYsLW5<`n5eqt2#)s&!REbYrvV?weu_t&{qO4dd^goqDtVAiD=3ZL7FvL z-QuwL4%sF4aop)Fq%xt4W^Ptw=WCxUo)c@N^887gOZJZIpH5Ud<4FLbNl{jQhQtSJ zyvM=WNw_7s!0mV9GLcWB_-H864Gidg-Li`IC;@a8&1V^$N4uf z`uK}QUd3#D1zNa|RU-z`goi7e?{D{`+O^ilK$}UiNI1x071so3t<6c4fTQs3Rv3c zg(-3z>TVect@|G+*GYJL0E^ya@c_OHVj2d) zaP05=;k?8OpX(h{agz2MucluPI!ui*fY#T;&b&U=xs{LO9Wwj!X=n`MESTQC?!joJ z>$XM=ITgxZ=Ypm)J~is6oWK9pa$+Dcce)=7?qn^eI-_q1Rq<9y3{GvyCY!NDx;4=+ z+cudX!)b^t#`~JM#_}FGqvnk#wj)zH>~NXDOZD53iy4BIh{KI}Ds!hJy;E1#4k{|0 zmh#gNCb{GZhQ9rUm*9E9Uu-!eAH2~wzh+!dSz;gy@A1TgJP@DI9N{DHWcwChyXj6} zg%7W31!(xw11WrJg&tXRfxsCbsXf z0NEERei2yjIUpVg;1~FZg#czPfnfgn1^&zO;~hc-$_xCL#WM<_g6ahd!Kg|R_yI4T zaK?)_1S9{9-~tcNFOV`diVw@FMBw~8CJOsrgMb8p=NHTf>qWrNIBh~`gk?1#$iTz# zr@U4nfV~7RU#bL?aq%JcU2kYT?kSz_t6)gmjuzj z34<`w2?W=d#bmtiMIgxVm_ulT=}jXbzsxJd3wt|`}wXLi+A#ky8V^fb7^0k_^3A@!F45`;LAbLHmPsj^Dekco6rPNjCoH{4s zw{9-w5F4L~;kNNW;;GRB5em)&8WBw56R}88@q}e6IFf>6_uwj{WlHqGH5gQIU;`aD zR{JS9#&3Z>@bAr7nha)R_brSpEnV3Tm3=UL3B;Px7r-rXVlobtzNUp{J1qo8bK{dJ zXCh1(0TOV?YBvZJJnVY=A{JN(6f&BT8w5=IpJF}CNs6#23bsx_>1eo=o2WYcY~cYR zlW^_YgiHZJCFtz*XY#s6)d$JoAB>ROK4Uz03@|!Pm|f81m(t3LGlQ@-AdwWFb{boF z<)`BKVR?O|L+D09xDH$O0cn$tsOlx1kI`#)6W|qw38zXe*C$TMTxo)ZsT{kG3Y3RK zhK*7M^CKJ^tu`1$nze(iqU_p3=qT@m3>Dl@5eug>$xf${bZp?Qg*7o{dm5=YYt92! z@$RRAMH3cL&3IPP3P5s{M%t~4N!_VJr5stYeG%Ej4~U?qRBr?KFg6}Qtn%i%f?NmS zn_;quqLQQGt6{lDg`PP)e65Bnn?7jWos4X+8nxwdlM5(GzgZzMBAir&&s!aZ-2#P( zgx1qYN(%_JLaC!y@xo3{z?IX+lYOt$fQj)9g`U2!(7t0S=*mG=f>nzBdsSS7Y{Wz9g8#DBk5<$*3Kyp1BoEL7)iny_Pn}iPNb0%sTRD*l)EO)*ZN3wU@z*{ zf#s3??K)5%VLtl#^~hV=wS{iG!H~=w5X4zxKX>kp6|w4k{~|&5>zOM~Pc2QQjFgn1 zZ}$<=Zx_lR*S4l=H~FW2)+Hq#qNg9I^T4$DG*?Nnlw^Kqc4AG*zKyOm*sc6#m|IIa zz8sQYdnR(wmASqW?SqNg_3@NnDg$B8GVNdqFHs4UG85D%p=UneUC-_33GfBc)@ahy zd{R9=?^Dn>@DQKZvyIHX{g#@>|4O{$K@0#quaJJ=@}rX6L>w3&sgfp(lk@bc)656u zPS|Z7JfnEd=jWP-a%w6PTP<~yU>}+Ct?7NN{l8w}vff@mlL z!iGTomXaUc5<_QGs2}g_13mBDJ^ZA1LpbVdQ>%c0+;$w*fbnOqH4B`{RL&k1RCkB^ zc6f=nenK~I@7=L9C{)_LhPDdzVp-7dOGx^PzQ~eE zMx*B?&&B>13jqRTYQ~H=g_`M2(hyjw;u$EOs6`WwD>dn2_sTYyWsxd0flG7zXyl6O ziqtF(+UH&RdM_lA>;ULEN4X3b91II@2Q-AmhRjPLD)QEl2A)4I^6u+l?m zb(81rKulxGIY4L zRNi**=Y4KO#`4x$Yu<``xu6d6&(!zJA2-=?-P5LB6Q_)gVn8*ZQ}j-;wzz&kw=D`7GhUw&g?6?Ju3;N}17mMr<{ ziYOh3osYy!l(f!ftr`I=skaqb!+W{X+!=2E+(hNXdjPpFpP}X0ewv=GNKMV{(=uZy z`nezS5RK!wfyIVr1{Q#KTry1su4aGh?lw=@_=W(xNvF3l0#?u@jRmr;RA>QhpHK;k zTEUV?74LCOaXVxxiYpKU%OTibJTcfBhzj-MMCRBOw7g8rkrFu5=-54m|A6#;=@Tv; zi&s&~U1IU}6-8#pDI(n>8(XfXS2391Il40?Liu!8)u@1Pxd_}M`*%@#*HFqM*k5ms zc`T*r#jm3n_KshTg|OHIPsheQ*iu>A+#`!Q_Y&IFeS^!{uK6R4t(ZY&Y|qcq*cV{} zggdvbVtYVMLsnH49ihC_Y7lR!JY+}pV^apBK5vZxc&5Pz+*p70DHroAB?Y;T&vrXW zd4NHrjB8&(y~Z}%@+2vQ?PQJ^T*v9{Tptzsz6HY1QX~a|-KUG5rwS0jiGH!9MkP5* z@Z7fCn8E-3I?w}eQmJ%6;thi|Nx3e-B}j}*N8&vV76Oarh>DX03W$sgot_XvLZ#Fk z=cw22l|TND?JXic4Y$fw60wj@3X;i5!%6}Y^N;CIJRFV@EX5^5^%`2iJ=l2KEe$2q zv5_Q>lIL~=o^G5!XV20aWDYgAW!y=IOeWie2CD5Jr0|}Ub>wu^z2MSDCS;w|Ads-? zVaI7P74U=DVv=ui6)3u@`YdKV3oDdFxHpM0Oi|7Uu{9Rq=g&Kf2voyEawxjOt24YG zo8k843>{M+|B$sYR+dGWLFM$DgFAxC!g!5G_^c^Ty6i@#as(ZmH5saoKSd z=vHR(LrtJvE(RN2Tj#TT>DT7dS+x8rd`>sbR+NnByPga`n?UjK`9S=M5X~|YK6!Gn z=B4C!AHPiqW-SzW(>YA=Mej#Y0pARNQI0odYLI@Vuhw4qgNVLLKKPn&K>93jNn0TO zMIU@Ze2mx4{@}B&1o6de4q#FPor89Q0G=#e-4DCaFRO*fc$Yk6$@`I_zsTNK!KB&8 zidv>HgW+-;Q352O@y0kpgIXCYtkhXRW&A<|g9&Q$qlFGCb6XJSvx%=6rD1T83Bwo) zUPfx!kik)D7%5YsOMirHm2=(C`L!p-sic=1W&GGVqsZdzlT0o-F&&C(2%4t{(g#I7 zLN_QnJ1sy6CX1e#Jwk@K6JJHHMWA0P{|vj#<@t^zQGwQI8xXZR&V`kiVR@$OeDM%G zcj*%%<+iqaC!z>Rrjn8WAekBYpx#WjdqO$jbTT-)Ppryuv|2SFX?kjrr<1Q@cppF>mw4<&pN#vXB;3+In}QBU zWNkRC9|UBvQdX^(^EmEVROb}ko@-%j*!D17R=nf%w$G4v10$4)2o}EOPgfLRX8)X@ zw^GjdklLKGA?o1O{biSW;O*pn$v2yeFNq(wZb-D0r@yS!39%!?p|ZP&1_HrAny?Sh;bqQBepJX}e+_N6Ru>^e7FPAhw? zFtO`%mEzj;r{iNOBp?_yl=(n7AT#33BjbQhwHQZwZ@&zg@WHDd{3-PGOX4`B1J)4F z;Zfl1H74SU&K=%?ub{Dz_{^;N4x4w8Xis^Ipp^&)r(%ZPMQdF30P+Cm2+vrR$YR8m z18C2vY-rbht^VFO=SfRPITqP^!YwL-TC{Fk;lg#iVz;Y(*?DlwhQJXYc2}Jfr!6`+w{ZUnB|PObsN#f@ia%ltua*V&|6h; z=LdnPOk|I7sG48Tq9>nT=EY{^a*ny^5)PL=F&B)Ku7pOOlxXk3u~Cl|eUAfJ269j; za=Yu0>L*!i`m9c}tl6wilvQV@bl|#_&^TAtyu{-;;LUr${;idNB7IW`Y-q2KrO4H9 z8F7i#;9^>GzkO@+QD<`JPavW~9;YKqZ4ylzB-uH8K1Nk&7V7+l%{6Ztt+wi6{*?=S;Zsf#b4Nb{EYF+RQH1Gmcbu)#}v^qVbAW^^w;yHwRY5GGU(`jdj=|N zqS?skDcy{oZB)T^R@jd}VHtrG%4eYWvGUWKn~}ynJsYRC9t~GA zl@&x%5e6RfD_+NgD^tb38e zE%-IiRWpIj@`$j!oirBz>d*{!XL47j)$Oi}oCU!pwPIJwnFZ6V(GzjA*zZ z+r0+2CC!v79qHypSqW;SnR|c~LFrp5vQ{NkqpU=Ky$I6sAFS+BY@ia{S{3r3Jek0L zsh;zLPa2EKb}VB`sV&nIy65TT47v6PNak6Yp5EgSwB}xQtt_kpcH!>&kgj@*fHqhw zy@2AS%3en~U4F&){7Vd~V(-qL8y3as1W~=9GEw%~5U13;c>CCuSxwH`p}i};(!ft2 z;@qU(RqUs(vWp4RzXnY&h_yktW`gn|IOLH+g3{&nN%ni88&)zpQ~3tUNuMDhALgj) zKeQC_RXL6BePDmQR_=3QlX7?eP1q@J8b0DZBXZg*uqoNCs{A5EMymKGbjV`Hj~9J7 z35&{zYGv&)hPtCu=I?-A5;e|N5A{Ij>fUx-sJ zJm9-IWTmC%hXFxCNii|f*^-rgkgR!PrTBh9DalN=X%Gn_75NafCE_H#x86^ zZp}IfkvFwEh?PK_5h6s?gUnO-=7X^!q?n3wO~k~Ko@`Fq*qR4Na_a-a52stti6$ZB zW*P&TBE)+j$iz|Me*81x`k;(yOd(0^R2`8uZy9$e)}edjY&H(q%2e~NSeKW|RAVrI zb7C~;n|md*6TXGQ0&2bqMX>pKP5GT$9u}AanzvA@>|9yJkYcFh<7bEE6wE= zcN$lxg?VlM9ygXWrL_8;w)0i7iu9GQB_*|@w0=ivC|PyKXpoADikPKj-K%b2g30uU zI_%zw!F+~Jjz#^$)s(DRwkY0S=_P*Cn*tN4O)L? zI!BXf`k?OGP3nDn$hiNMQ1w_X z3^w@ZI$R?UHLi{9R7H(}a<4SH7WmgL+w%S139sZ{AE`*5Xzo3=bZzWsL|8oT*}5mm z(GG$7jv>ekit^W^{iE@2UfF zW}1ql^9|Yr0sbBj$Ai=^oX+7DLad*@;!u4xI);3`AlN-eD?2ArOzvZOEQG6UA93#D ztUUTklhwDU-k?hkPJl(9evs<4So|Z{Fyja+SBRKh8F(`~UXz?V=enpr`ZIiBdcu-# zuzyrTUXMKRv6%QJJ%r|Zg-mnt7MJvQ#7D(RXZ0-~0g@}G(G{2N+nf9oYH8*nP~F$l zBc`_6kl!>b0kCxP>!{K1F6ro}Pfv%dZ+N_KopMwB)f?#MI#U}d_a3TlE>i2~L{&lL z+?UPC!eSx;&o23Dzs@{3%|+*8u7=XCvp5xCuqmBZCi2n%g|vCP#OL(O>(lClrbU-Z z(zdnX{E(%0&G*Nm-rZjnb6s6#&kKh-+pv$k&zH|18dECwA*SD>nYpE?Knx$ATWjEB zKg{ro5!IomTh98c4yiTICk6L6`n7=STh(d52xlgQj$bAPO^yCh26^#)65ZcgL}Y{) zmDBu;%y{tGe~KEO1(Ai01gHGUU+=LdWrkd|O}JKyijulPVj)oU_E;Ho&3ORHOvI)g z{~hWkabP|>`rxv?w{}9+C0c;e-X%Nd_iOJvp!A4qg-&j9YoIfjBn7%qnP>&NePwr2 zKl)pVD|dy*KJwDk&Uk>lZ3Pz0o!?#j<>v9e`8Pa6)xmP})vEadUR|mxeA#l_`!pT@ z&qRK0bU}-FhtbXhZ6d11dVNPax63&$k8LBy^Gh zG-Enf_P@286P8;)cn*P&D+R+r<`=;lFvMra%tT1e?NM>3q2}8MzgGWOQY^lmarm)^ zmf081j!EcB#Y9ycZMlbbLN3ihs82z$WX^v24GuMD#hTH~#WPQ57^>IZ?;_Btrq>5R z^IY@=-RBc5-BoDTPs|dC*nJ=IPxN&7iK zy})HonCe$4`qaplk6C_hS-Yxl>vwe^}=_$mno$5;<3I(<~++H+Izq2in;)Goo4tlf?$EOB}c* zCJ5CgT6fxzF_gm`9UoK^UdO!!w~%&V(qc}*jyIS~lAWk}nMht30tapdept=P*@+0_ z5`8kccf|DuyZqWL69>P`$RYH`I(g(ObvmhKAMi#NUgaDSCvXG>I^P#kYnv4AV`+TR zW%7R^-)~)0s{LvZj7+^+ZPiXt{qahNq|zn6K%d>q-(xzLuTFI$PCa{)F2-%w;KcBt zEh6z(x~EyVL2i@DQG`KpRC`3mF9S)+xbNzpm7MbtVZbTM6(1PczD|?Vylb4*Xhpvh z*Y>ZCGQ*iWE)|D`cBjSbIbL#|6t7G7@M^6<@J-ozUDkA>k(o}f=<{o~lZ&g2M_u6J zjJurvpYqaM==TogSWvR;pNw`I%_WWy*;G(8TdD398mHOL>iMV|Obsml*lO}+7hF1V z<0yPV_KZveLJZD;+eN^K=i$$gxkCs?;t}QJ5fIH7zC)n=uYYuh0D0NW{i`2NPR1{c z#;xe+mONRX4pp;5H zrOO82rS(Pm<8&q6R>~VAgb|hMdBN=?N=|CA1B*GO3N)j!dWvRbt$7SlK&+0f>|g}Q zc@BY2AOxGHWD1KqHR(fvNGj1ZM^B-yaS?U2MsEt*NmHqIqzo%uR{?1DUguNaOauWM z8eW7J*{~w2Eia#i#ExtItM7WmNR*qe%$yoLWmUuDRGcUG0cH+}RMbgmm_*bJQVy_y z=TOg^y~{!(|89Nk-;SO)pn6H+-1mrG)XqV&Ug+odo4@u}cNv}(vGxgBc^+$%ukI%{ z`=dq88z_)6xDx6uV_0avpri!&p0_P6I6Um?wujy;8B(^F*7cr^X_|F{47tF551mFu z>>E%hL!2suia^FIpbtjK&8S=Vks>d*AHGGWY;puc43i4pK+=E*D3(zL`hi{rnxqt4 zZ|#uriMUdNM@>I?R|8Kv3OQ*YQN<;OdWB0(_F?0TJs$AKHx7=r4zjTVIxmiVMwM+N zjRFQQ4rVPpQ7KY|?EopXuq?VnAUC&Apq|W102OWw`2;h{%j*wd^Q-sMtF~msJ!}D$ zZya24LG@X1b`Gr|8?4xOBbQ9FjL{k)z^)%L8Y8;2LY7D=#%~iYl41g4V&>axLT?;j zZhVEV(ND^ocKZCjbA9Kqu#A5gB}m{?>Gb>IcSoP}bU@ALY+YZmX3T02M-E-rrOPi; z)T|nzx-<>5UQn6I`JrZb8J#)-{u}I}mgQ-Uw0Yk11;1q)5Jiq08JtA?qnoZUM}PRy zQh$9ZP7bvHu#2AA4MTcxFyWGv;%ONNGj2oy0k~BR5^jXGVF7 zUC#wy--1+K&!rRW#NRitBiA_r-&0Nds}tRKAxm@X4jmJ_v-G*7X_{_4;wRXt)>sQS z_gwqm^==|{LEY7fmQo_W%WEdqE_ltBB_>@i!}Z?Uxlyyym9dM~6*}n|~O(XIF*P7PMZIC)6*_-uRHo=KKIqeYtXL z_#v9q>jU4GVI6n@y)Vf!V!*42E!}*1@zoc`mEyU8e!kC{%~zd_pTpo{^XLycX4Ly> zI>M;8nX`wdnKsLZYNh#p8jiJew4ZOZQlE+_w`|&jD+z6cmIk+HJvqt}HQGO+@K3<^ zZ~Gh+ae_a#r!1b*@4p_Kl^pBUwwoY3|wle;l0+lNFSLN1PA86?qoiKQ=%=*_l zfUzNhOk!8&zz?PJ(D1+?p_wKV{a9nmTDrA5RtAs^C5P`(h(T#lxVvfwK;uhT_AVUgQ}oG_6Vd1h+zPtJE*iN|h#L zZI!*tX9|ko^TzqrF%#tVd}k1;(cFP=hq+hVXgj@-tXmIEG3{xmk0EHJQ?#R&jCqC` zAb9|*9bEhk^CAoVG3-?-7w^CJm4eihlnoPX+t=#`|$ zZMOHzyVn_w6Otg&E5O01_7rP1rZadM;d1%Zeo5O3`A>3&k_J(W-hLV?BkklWNZ%Jd z7u9s>t#B@q!z=+F@fvxFk=Yf}PWvAOV- z?=}5QW!Y`|*~DTFpvJLLGVi&`@1-#S#$*V_2rI|T;ca3f9UrZiuM7ls%*s3@!Fy`Z zxXH#iQs%hSx?Tc~w#X#ufTWIsX;M|aiNUp2dCqDLqBFSzrTTujsu5j#8>_P(X z6Y@S|@&b>MXnx_g8oOSQ^9q0VG<@yCP9rpqBTX5017o_hi`4v$iu~ybpnF&P+j>qv z@ua`#c{}LQWZ4~m4it9S+})CW_p4U-ac4#H7ulWE{f?HfbW}_ch3PZ4XBhAIe}7p5 z8L9AyG#~*UK{GUNUB@6>nim(1+mPlBFAYBp?@Lg}-QDLU$VbCNql3n+;%4Xmg8r&z z|3&gNZzL4u75Mq&_=M#Yh4|#<75N231Vng+6-0P=6a;t``DLYO{?8N)sh5e=Y~AdA z9B4!{)@u;hL5y=|4)eAoL+AHj^1FX2tcEPcFR$cWey++)GdRoO*Ab<&WZe9-XrTzZ8=(O>8la2iIL9bQRF0jU{xbw_Lz&{z z-3hC1CWk27I*O%&L7lxFqiHnu#SNSpHX}^u+r=%l)k(L{YvhJLGR#$At{<-?(_3<4 z8IKBx?<^#*`e`tX$nN;(T_eR-5QO_V>rmam%NtxjTpX>=@mH|k+=dKg{;~*qMfGzh zSFQY`UmwUowXu7^c6r0C75NwVqz-W1msFa*11yVZAGRtfBQDG z<@j{lvlZozjnJ4_?*T#5t&>nAR<~@iSTBz}yd({6rs5PK!>TO_978{#n)1@xtUBx={n{iLDC zT!C*{fsCSoz#NX>8@nO@k?fVM&gwKV_dw`>Lmr#GFI^L1kM(Z+I5{X9O-yL`Aay79 z$+Uf-591d+v)CH>NHTb~sk+j9P)zQ@OK^GyB`FoC<0qDm14U6uk&&XqnMz}k9iS1@ z$|3R$7>FQiyt-FDmc@t*24c`5;YREm6VS%tSjKV46Vah-7dgn~h|=NU#_VfqtK_Jk zD=Jmp?b4;BfQJ@mUqx>FY%qW}7+%ct>}(@<=wxwP+TJ>1|9z4KR)-%A9P|IOy&i8d zk8p1*kG~e~9ryAycxX^FBmIw&?M-@#d5E2f1hjHfA!||y4{ZE@TjpGKh^=kzceyiB z6CWGrT&tvQ)PxN-jlSH*e52N%URm?e@6DP3;SAO2p1swQ^Pl!gUWn0Cuu$1M1LwmJ zj@@&I(N<*5OSdJpbJwHVMHl*-uryE>rzSF(s*m$@gZ1qhm0xi8q$Kk!AL%5w0(x@e3lMH)Rq<$UQ zybO7h9I{WJ$$q%oewgnh`nx)+J4*mYkK(5{zP2?X;L4$yXI3))a5P&t8*d*kTT9o! fp1YM3nzxUoSB4BKA__VWk0>u1Bcp<*BHI50QJ%3_ From 547595041eb661b9038245c082f65e5fb19a6f73 Mon Sep 17 00:00:00 2001 From: Narasimha-sc <166327228+Narasimha-sc@users.noreply.github.com> Date: Fri, 19 Jun 2026 22:36:28 +0000 Subject: [PATCH 41/81] ios: open SimpleX links in chat messages via in-app connect flow (#7101) * ios: open SimpleX links in chat messages via in-app connect flow Tapping an inline SimpleX connection link in message text was dispatched through UIApplication.shared.open. iOS drops an open() of a URL owned by the same app while it is in the foreground (the simplex: scheme and the simplex.chat universal links both belong to this app), so the tap was ignored and never reached the connection flow. Web links (Safari) and mailto:/tel: (other apps) were unaffected, which is why only SimpleX links appeared dead. Route SimpleX links to ChatModel.appOpenUrl instead - the same sink onOpenURL feeds, leading to connectViaUrl/planAndConnect. This matches the connection-link card and the multiplatform clients, which connect in-process rather than via an OS round-trip. Also fixes the same problem for the "Send questions and ideas" and "connect to SimpleX Chat developers" buttons, which open simplexTeamURL (a simplex: link) the same broken way. * docs: plan - justify iOS in-app dispatch for SimpleX links in messages Root cause and justification for opening inline SimpleX links via the in-app connect flow instead of UIApplication.shared.open (undefined re-entry of the same foreground app for a self-owned simplex: URL). --- .../Views/Chat/ChatItem/MsgContentView.swift | 16 ++++- apps/ios/Shared/Views/ChatList/ChatHelp.swift | 4 +- .../Views/UserSettings/SettingsView.swift | 4 +- ...6-19-ios-open-simplex-links-in-messages.md | 65 +++++++++++++++++++ 4 files changed, 84 insertions(+), 5 deletions(-) create mode 100644 plans/2026-06-19-ios-open-simplex-links-in-messages.md diff --git a/apps/ios/Shared/Views/Chat/ChatItem/MsgContentView.swift b/apps/ios/Shared/Views/Chat/ChatItem/MsgContentView.swift index 9aaff57cc5..11c3c4c3f4 100644 --- a/apps/ios/Shared/Views/Chat/ChatItem/MsgContentView.swift +++ b/apps/ios/Shared/Views/Chat/ChatItem/MsgContentView.swift @@ -191,9 +191,14 @@ private func handleTextTaps( } } } - if let index, let (uri, browser) = attributedStringLink(s, for: index) { + if let index, let (uri, browser, simplex) = attributedStringLink(s, for: index) { if browser { openBrowserAlert(uri: uri) + } else if simplex, let url = URL(string: uri) { + // SimpleX links target this same app (simplex: scheme / simplex.chat universal link), + // so UIApplication.shared.open is dropped by iOS while the app is in the foreground. + // Route to the in-app connect flow instead (same sink onOpenURL feeds). + ChatModel.shared.appOpenUrl = url } else if let url = URL(string: uri) { UIApplication.shared.open(url) } else { @@ -203,9 +208,10 @@ private func handleTextTaps( }) } - func attributedStringLink(_ s: NSAttributedString, for index: CFIndex) -> (String, Bool)? { + func attributedStringLink(_ s: NSAttributedString, for index: CFIndex) -> (String, Bool, Bool)? { var linkURL: String? var browser: Bool = false + var simplex: Bool = false s.enumerateAttributes(in: NSRange(location: 0, length: s.length)) { attrs, range, stop in if index >= range.location && index < range.location + range.length { if let nameInfo = attrs[nameAttrKey] as? SimplexNameInfo { @@ -213,6 +219,7 @@ private func handleTextTaps( } else if let url = attrs[linkAttrKey] as? String { linkURL = url browser = attrs[webLinkAttrKey] != nil + simplex = attrs[simplexLinkAttrKey] != nil } else if let showSecrets, let i = attrs[secretAttrKey] as? Int { if showSecrets.wrappedValue.contains(i) { showSecrets.wrappedValue.remove(i) @@ -225,7 +232,7 @@ private func handleTextTaps( stop.pointee = true } } - return if let linkURL { (linkURL, browser) } else { nil } + return if let linkURL { (linkURL, browser, simplex) } else { nil } } } @@ -250,6 +257,8 @@ private let linkAttrKey = NSAttributedString.Key("chat.simplex.app.link") private let webLinkAttrKey = NSAttributedString.Key("chat.simplex.app.webLink") +private let simplexLinkAttrKey = NSAttributedString.Key("chat.simplex.app.simplexLink") + private let secretAttrKey = NSAttributedString.Key("chat.simplex.app.secret") private let commandAttrKey = NSAttributedString.Key("chat.simplex.app.command") @@ -392,6 +401,7 @@ func messageText( attrs = linkAttrs() if !preview { attrs[linkAttrKey] = simplexUri + attrs[simplexLinkAttrKey] = true handleTaps = true } if let s = text ?? (privacySimplexLinkModeDefault.get() == .description ? linkType.description : nil) { diff --git a/apps/ios/Shared/Views/ChatList/ChatHelp.swift b/apps/ios/Shared/Views/ChatList/ChatHelp.swift index 3047572236..5844fd3ff9 100644 --- a/apps/ios/Shared/Views/ChatList/ChatHelp.swift +++ b/apps/ios/Shared/Views/ChatList/ChatHelp.swift @@ -26,7 +26,9 @@ struct ChatHelp: View { Button("connect to SimpleX Chat developers.") { dismissSettingsSheet() DispatchQueue.main.async { - UIApplication.shared.open(simplexTeamURL) + // simplexTeamURL targets this same app; route to the in-app connect flow + // (UIApplication.shared.open is dropped for self-owned URLs in the foreground) + ChatModel.shared.appOpenUrl = simplexTeamURL } } .padding(.top, 2) diff --git a/apps/ios/Shared/Views/UserSettings/SettingsView.swift b/apps/ios/Shared/Views/UserSettings/SettingsView.swift index c1bc699261..483ca6aea8 100644 --- a/apps/ios/Shared/Views/UserSettings/SettingsView.swift +++ b/apps/ios/Shared/Views/UserSettings/SettingsView.swift @@ -390,7 +390,9 @@ struct SettingsView: View { Button("Send questions and ideas") { dismiss() DispatchQueue.main.async { - UIApplication.shared.open(simplexTeamURL) + // simplexTeamURL targets this same app; route to the in-app connect flow + // (UIApplication.shared.open is dropped for self-owned URLs in the foreground) + ChatModel.shared.appOpenUrl = simplexTeamURL } } } diff --git a/plans/2026-06-19-ios-open-simplex-links-in-messages.md b/plans/2026-06-19-ios-open-simplex-links-in-messages.md new file mode 100644 index 0000000000..f7c89b303a --- /dev/null +++ b/plans/2026-06-19-ios-open-simplex-links-in-messages.md @@ -0,0 +1,65 @@ +# iOS: open SimpleX links in chat messages via in-app connect flow + +## Problem + +On iOS, tapping a **SimpleX connection/invitation link inside message text** does nothing — it never reaches the connection flow. Reproduced on iPhone 17 (v6.5.2 and v6.5.5). On the same screens, tapping a web link (opens browser), a `mailto:`/`tel:` link, and the connection-link **card** all work. Notably it was **device-specific**: dead on an iPhone 17 but working on an iPhone 12 running the **same iOS version**, with only **one** SimpleX app installed. + +## Root cause + +Inline links are dispatched in `MsgContentView.handleTextTaps` (`apps/ios/Shared/Views/Chat/ChatItem/MsgContentView.swift`): + +- web links (`webLinkAttrKey`) → `openBrowserAlert` → `UIApplication.shared.open` (Safari) +- everything else → `UIApplication.shared.open(url)` + +SimpleX links fell into the second branch. Two facts make this the bug: + +1. **The URI is always the `simplex:` custom scheme.** The core markdown parser normalizes every connection link to the `simplex:` scheme via `simplexConnReqUri` / `simplexShortLink` (`src/Simplex/Chat/Markdown.hs:344,353`), regardless of whether the message contained `https://simplex.chat/…` or `simplex:/…` (see `tests/MarkdownTests.hs`). So the tap always calls `UIApplication.shared.open("simplex:/contact#…")`. + +2. **`simplex:` is registered to this app, and the app is in the foreground.** `UIApplication.shared.open` is an OS app-launch API: it asks iOS (LaunchServices) to resolve the scheme to its registered app and activate it. Here the registered app is SimpleX itself, already foregrounded. **Re-entering the same foreground app through `open()` is not a supported operation** — `open()` exists to hand a URL to a *different* app or the system. When the resolved target is the calling foreground app, the outcome is undefined: on some devices iOS still delivers the URL to `onOpenURL`, on others it is a silent no-op (`open` returns `false`, no error, no UI). + +That undefined outcome is decided by device-local OS state (scheme resolution / launch services), which is why identical code + identical OS + identical single app behaved differently on the iPhone 12 (delivered → connected) and the iPhone 17 (no-op → dead). It is **not** an OS-version rule and **not** a multiple-handler conflict — both were ruled out (same OS; single install). + +This also explains the full symptom matrix — only the path that re-enters the same app via `open()` is affected: + +| Tapped | Dispatch | Target | Result | +|---|---|---|---| +| Web link | `openBrowserAlert` → `open()` | Safari (other app) | works | +| `mailto:` / `tel:` | `open()` | Mail / Phone (other apps) | works | +| Invite card | `planAndConnect` in-process | this app, no `open()` | works | +| Inline SimpleX link | `open("simplex:…")` | this app (self), foreground | undefined → dead | + +The underlying cause is using the **wrong mechanism**: an OS hand-off API to perform an **in-app** action. Every other connect path handles the connection in-process and never leaves the app: + +- the card: `planAndConnect` directly (`FramedItemView.swift`) +- the share extension: `ShareSheet.openExternalLink` sets `ChatModel.appOpenUrl` +- multiplatform: `openVerifiedSimplexUri` → `connectIfOpenedViaUri` → `planAndConnect` + +Inline links were the lone exception delegating to the OS, making them hostage to undefined self-open behavior. + +## Fix + +Restore the three-way dispatch the multiplatform clients use (`WEB_URL` / `OTHER_URL` / `SIMPLEX_URL`): + +- web → `openBrowserAlert` (unchanged) +- `mailto:` / `tel:` → `UIApplication.shared.open` (unchanged — these target other apps) +- **SimpleX → `ChatModel.appOpenUrl`** — the same sink `onOpenURL` feeds, leading to `connectViaUrl` → `planAndConnect`, entirely **in-process** with no OS round-trip + +SimpleX links are identified by a dedicated attribute key (`simplexLinkAttrKey`) set on the `.simplexLink` format, mirroring the multiplatform `SIMPLEX_URL` annotation tag, rather than sniffing the URL string — so all link types (contact, invitation, group, channel, relay) are covered. + +This is correct regardless of the exact device-local trigger, because it removes the dependency on iOS re-delivering a self-owned URL. The invite card already proves the in-process path works on the affected device. + +Also fixes the same issue for the **"Send questions and ideas"** (Settings) and **"connect to SimpleX Chat developers"** (chat help) buttons, which opened `simplexTeamURL` (a `simplex:` link) the same broken way. + +## Scope + +- `apps/ios/Shared/Views/Chat/ChatItem/MsgContentView.swift` — three-way tap dispatch + `simplexLinkAttrKey` +- `apps/ios/Shared/Views/UserSettings/SettingsView.swift`, `apps/ios/Shared/Views/ChatList/ChatHelp.swift` — route `simplexTeamURL` in-process + +No behavior change for web / `mailto:` / `tel:` links. + +## Verification + +- Tap an inline SimpleX invitation/contact link in a received message → the connection sheet opens (on iPhone 17, where it was previously dead). +- The two developer-contact buttons open the connect flow. +- Web links still open the browser; `mailto:`/`tel:` still open Mail/Phone. +- Optional, to confirm the device-local nature: open a `simplex:/contact#…` link from another app (e.g. Notes) on the affected device — if that is also dead there but works on a second device, it confirms the difference is device-local scheme resolution rather than app code. From 974fbae298dd82f31b6a5e3df6f61ffd3241fd23 Mon Sep 17 00:00:00 2001 From: sh <37271604+shumvgolove@users.noreply.github.com> Date: Sat, 20 Jun 2026 12:56:55 +0400 Subject: [PATCH 42/81] ci: clean simplexmq submodule source dir in windows lib build (#7099) --- scripts/desktop/build-lib-windows.sh | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/scripts/desktop/build-lib-windows.sh b/scripts/desktop/build-lib-windows.sh index af408d4054..fdf7154491 100755 --- a/scripts/desktop/build-lib-windows.sh +++ b/scripts/desktop/build-lib-windows.sh @@ -38,8 +38,9 @@ scripts/desktop/prepare-openssl-windows.sh openssl_windows_style_path=$(echo `pwd`/dist-newstyle/openssl-3.0.15 | sed 's#/\([a-zA-Z]\)#\1:#' | sed 's#/#\\#g') rm -rf $BUILD_DIR 2>/dev/null || true -# Existence of this directory produces build error: cabal's bug -rm -rf dist-newstyle/src/direct-sq* 2>/dev/null || true +# Existence of these directories produces build error: cabal's bug +# (simplexmq is removed because cabal cannot delete its read-only git submodule pack files - blst, libbbs - on Windows) +rm -rf dist-newstyle/src/direct-sq* dist-newstyle/src/simplexmq* 2>/dev/null || true rm cabal.project.local 2>/dev/null || true echo "ignore-project: False" >> cabal.project.local echo "package direct-sqlcipher" >> cabal.project.local From 2df131bd05281d0ba3b1612141aa9161acec9894 Mon Sep 17 00:00:00 2001 From: sh <37271604+shumvgolove@users.noreply.github.com> Date: Sat, 20 Jun 2026 13:13:56 +0400 Subject: [PATCH 43/81] docs: add channel webpage setup guide (#7097) * docs: add channel webpage setup guide Step-by-step guide for channel owners to set up a web preview page: enable the webpage in the app, copy the generated embed code, and host the page. Includes the customizable data-* attributes and troubleshooting. Linked from the user guide contents. * docs: reorder channel webpage steps to recommended flow Set up embedding first to build and test the page from any address, and set the webpage URL last so the link is only shown to subscribers once the page works. Also drop the incorrect 'Save and notify channel subscribers' prompt references (that dialog only appears when leaving with unsaved changes, not on Save). --- docs/guide/README.md | 1 + docs/guide/channel-webpage.md | 127 ++++++++++++++++++++++++++++ website/src/_data/docs_sidebar.json | 1 + 3 files changed, 129 insertions(+) create mode 100644 docs/guide/channel-webpage.md diff --git a/docs/guide/README.md b/docs/guide/README.md index 04e7538968..ad3849d1d3 100644 --- a/docs/guide/README.md +++ b/docs/guide/README.md @@ -10,6 +10,7 @@ The first messaging platform that has no user identifiers of any kind — 100% p - [Quick start](#quick-start) - scroll down this page - [Sending messages](./send-messages.md) - [Secret groups](./secret-groups.md) +- [Channel webpage](./channel-webpage.md) - [Chat profiles](./chat-profiles.md) - [Managing data](./managing-data.md) - [Audio & video calls](./audio-video-calls.md) diff --git a/docs/guide/channel-webpage.md b/docs/guide/channel-webpage.md new file mode 100644 index 0000000000..8cb0f4fbe5 --- /dev/null +++ b/docs/guide/channel-webpage.md @@ -0,0 +1,127 @@ +--- +title: Channel webpage +--- +# Channel webpage + +A channel webpage shows a preview of your channel on the web: its name, description, recent messages and subscriber count. Visitors can see what the channel is about before they subscribe, and the page gives them a "Join" button along with links to download the app. + +You don't have to build the preview yourself. The chat relays that host your channel publish its content as a small file, and a ready-made script renders it on your page. All it takes is to copy the code the app generates and paste it into a web page you host. + +## What you need + +A channel webpage can be set up by the **owner** of the channel, as long as the channel is hosted on chat relays that support webpages. If they don't, the app shows "Used chat relays do not support webpages." and no code is generated. + +You'll also need somewhere to publish an HTML page. Your own site works, but any static hosting will do. + +## Step 1. Open the channel webpage settings + +Open the channel and tap its name at the top to open the channel information. Scroll down to **Advanced options** and tap **Channel webpage**. This button is only shown to channel owners. + +## Step 2. Allow embedding while you build the page + +Turn on **Allow anyone to embed** and tap **Save**. + +With this on, the relay serves your channel preview to any page, so you can build and test from wherever the page lives without it being tied to one domain yet. Leave the webpage URL empty for now; nothing is shown to your subscribers until you set it. + +## Step 3. Copy the code + +Under **Webpage code** you'll see a snippet like the one below. Tap **Copy code**. + +```html +

+ +``` + +Everything specific to your channel is already in the code: its link, its ID, and the relay domains that serve the preview. There's no need to edit those values. + +## Step 4. Add the code to your page and test it + +Paste the snippet into the page you're going to publish. Here's a complete minimal page: + +```html + + + + + + My Channel + + + +
+ + + +``` + +Publish the page and open it in a browser. The channel preview shows up in place of the `
`. Because embedding is still open, it loads no matter which address you test from, so you can adjust the page until it looks right. + +## Step 5. Set the webpage URL and lock it down + +Once the page works, go back to **Channel webpage** in the app: + +- Under **Enter webpage URL**, type the address where the page is published, for example `https://example.com/my-channel`. +- Turn **Allow anyone to embed** off if you don't want other sites to be able to show your channel preview. Leave it on if you're happy for anyone to embed it. +- Tap **Save**. + +The URL now appears as a link in your channel info that every subscriber can see. If you turned embedding off, the relay also restricts the preview to your own domain. + +## Customizing the preview + +You can add optional `data-*` attributes to the `
` to change how it looks. Only `data-channel-id` and `data-relay-domains` are required, and both are already in the generated code. + +| Attribute | Values | Default | What it does | +| --- | --- | --- | --- | +| `data-channel-id` | channel ID (from the app) | none | Required. Identifies the channel to load. | +| `data-relay-domains` | comma-separated domains | none | Required. Relay domains that serve the preview, tried in order. | +| `data-channel-link` | channel link | none | Enables the "Join" button and QR code. Recommended. | +| `data-app-download-buttons` | `on`, `off` | `on` | Shows or hides the app download buttons. | +| `data-color-scheme` | `light`, `dark`, `site` | `light` | Color theme. `site` follows your page's theme (it uses dark styling when a parent element has the `dark` CSS class). | +| `data-light-background` | CSS color | `#ffffff` | Background color in light mode. | +| `data-dark-background` | CSS color | `#000832` | Background color in dark mode. | +| `data-relay-scheme` | `https`, `http` | `https` | Protocol used to load the preview from the relays. Leave it as `https`. | + +For example, here's a dark theme with a custom background and the download buttons hidden: + +```html +
+ +``` + +## Good to know + +The preview updates on its own. The relays republish channel content periodically, so the page picks up new messages without any change on your side. It's a read-only snapshot, so visitors can't post to it. + +Only what the channel already shows publicly is included: recent messages, member display names and avatars, reactions, and the subscriber count. Deleted and disappearing messages are never published. + +If your channel is served by more than one relay, all of them are listed in `data-relay-domains`. The script tries them in order, so the preview still loads when one relay is unavailable. + +## If something doesn't work + +If the preview area stays empty, check that the page is hosted on the same domain as the URL you set in Step 5, or turn **Allow anyone to embed** back on while you sort it out. The relay only lets that domain load the preview. + +If the app says "Used chat relays do not support webpages.", the relays hosting your channel don't support this feature yet, so no code can be generated. + +If there's no **Channel webpage** button, remember that it only appears for channel owners on channels hosted on relays. diff --git a/website/src/_data/docs_sidebar.json b/website/src/_data/docs_sidebar.json index f9b4d15b54..e640b7df71 100644 --- a/website/src/_data/docs_sidebar.json +++ b/website/src/_data/docs_sidebar.json @@ -6,6 +6,7 @@ "README.md", "send-messages.md", "secret-groups.md", + "channel-webpage.md", "chat-profiles.md", "managing-data.md", "audio-video-calls.md", From 134e48fe7e036be8a8125b3aa8dc342ecd7c681d Mon Sep 17 00:00:00 2001 From: Narasimha-sc <166327228+Narasimha-sc@users.noreply.github.com> Date: Sat, 20 Jun 2026 13:50:46 +0000 Subject: [PATCH 44/81] android, desktop, ios: remove right gap on received messages in channels (#7106) * android, desktop, ios: remove right gap on received messages in channels In channels received messages now use the full row width instead of the chat-bubble right gap, matching the broadcast/feed style. Gated on ChatInfo.isChannel (useRelays), the always-present channel flag used across the channel UI; sent messages and non-channel groups, business and direct chats are unchanged. * docs: add plan justifying removing right gap on received messages in channels --------- Co-authored-by: Evgeny Poberezkin --- apps/ios/Shared/Views/Chat/ChatView.swift | 3 +- .../simplex/common/views/chat/ChatView.kt | 8 +- ...06-19-channel-received-remove-right-gap.md | 95 +++++++++++++++++++ 3 files changed, 101 insertions(+), 5 deletions(-) create mode 100644 plans/2026-06-19-channel-received-remove-right-gap.md diff --git a/apps/ios/Shared/Views/Chat/ChatView.swift b/apps/ios/Shared/Views/Chat/ChatView.swift index efe26fdf89..49643745b0 100644 --- a/apps/ios/Shared/Views/Chat/ChatView.swift +++ b/apps/ios/Shared/Views/Chat/ChatView.swift @@ -895,8 +895,9 @@ struct ChatView: View { } } else { let voiceNoFrame = voiceWithoutFrame(ci) + let channelReceived = !ci.chatDir.sent && cInfo.isChannel let maxWidth = cInfo.chatType == .group - ? voiceNoFrame + ? voiceNoFrame || channelReceived ? (g.size.width - 28) - 42 : (g.size.width - 28) * 0.84 - 42 : voiceNoFrame diff --git a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/ChatView.kt b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/ChatView.kt index 990703ac43..a020f8c1fe 100644 --- a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/ChatView.kt +++ b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/ChatView.kt @@ -2000,7 +2000,7 @@ fun BoxScope.ChatItemsList( Column( Modifier .padding(top = 8.dp) - .padding(start = 8.dp, end = if (voiceWithTransparentBack) 12.dp else adjustTailPaddingOffset(66.dp, start = false)) + .padding(start = 8.dp, end = if (voiceWithTransparentBack || chatInfo.isChannel) 12.dp else adjustTailPaddingOffset(66.dp, start = false)) .fillMaxWidth() .then(swipeableModifier), verticalArrangement = Arrangement.spacedBy(4.dp), @@ -2079,7 +2079,7 @@ fun BoxScope.ChatItemsList( } Row( Modifier - .padding(start = 8.dp + (MEMBER_IMAGE_SIZE * fontSizeSqrtMultiplier) + 4.dp, end = if (voiceWithTransparentBack) 12.dp else adjustTailPaddingOffset(66.dp, start = false)) + .padding(start = 8.dp + (MEMBER_IMAGE_SIZE * fontSizeSqrtMultiplier) + 4.dp, end = if (voiceWithTransparentBack || chatInfo.isChannel) 12.dp else adjustTailPaddingOffset(66.dp, start = false)) .chatItemOffset(cItem, itemSeparation.largeGap, revealed = revealed.value) .then(swipeableOrSelectionModifier) ) { @@ -2092,7 +2092,7 @@ fun BoxScope.ChatItemsList( Column( Modifier .padding(top = 8.dp) - .padding(start = 8.dp, end = if (voiceWithTransparentBack) 12.dp else adjustTailPaddingOffset(66.dp, start = false)) + .padding(start = 8.dp, end = if (voiceWithTransparentBack || chatInfo.isChannel) 12.dp else adjustTailPaddingOffset(66.dp, start = false)) .fillMaxWidth() .then(swipeableModifier), verticalArrangement = Arrangement.spacedBy(4.dp), @@ -2162,7 +2162,7 @@ fun BoxScope.ChatItemsList( } Row( Modifier - .padding(start = 8.dp + (MEMBER_IMAGE_SIZE * fontSizeSqrtMultiplier) + 4.dp, end = if (voiceWithTransparentBack) 12.dp else adjustTailPaddingOffset(66.dp, start = false)) + .padding(start = 8.dp + (MEMBER_IMAGE_SIZE * fontSizeSqrtMultiplier) + 4.dp, end = if (voiceWithTransparentBack || chatInfo.isChannel) 12.dp else adjustTailPaddingOffset(66.dp, start = false)) .chatItemOffset(cItem, itemSeparation.largeGap, revealed = revealed.value) .then(swipeableOrSelectionModifier) ) { diff --git a/plans/2026-06-19-channel-received-remove-right-gap.md b/plans/2026-06-19-channel-received-remove-right-gap.md new file mode 100644 index 0000000000..5ada84b2b0 --- /dev/null +++ b/plans/2026-06-19-channel-received-remove-right-gap.md @@ -0,0 +1,95 @@ +# Remove the right gap on received messages in channels + +## Problem + +In groups, received messages are laid out as left-aligned chat bubbles whose +maximum width is capped well short of the right edge, leaving a large empty gap +on the right so long content wraps early. In channels this wastes horizontal +space — channel posts are broadcast/feed-style content that reads better using +nearly the full row width. + +## Change + +For channels only, received messages drop the right-side gap so content can use +nearly the full row width (a small edge margin remains). This only changes the +maximum available width: long text uses more of the row, short messages still +size to content, and media stays within its existing cap. Sent messages keep +their existing layout. + +### Android / desktop (`apps/multiplatform`) + +The `end` padding becomes `12.dp` (the same edge margin sent messages use) +instead of `adjustTailPaddingOffset(66.dp, …)`, at the four received-message +layout sites in `ChatItemsList` (`ChatView.kt`): the `GroupRcv` +(member-attributed) and `ChannelRcv` (unattributed) branches, each with and +without an avatar. + +```kotlin +end = if (voiceWithTransparentBack || chatInfo.isChannel) 12.dp + else adjustTailPaddingOffset(66.dp, start = false) +``` + +### iOS (`apps/ios`) + +iOS computes one per-message `maxWidth` in `ChatView.swift` and applies it to +every bubble; the `* 0.84` factor is the gap. For a received message in a +channel that factor is dropped (full width minus the avatar inset) — the same +geometry the voice-message case already uses: + +```swift +let channelReceived = !ci.chatDir.sent && cInfo.isChannel +let maxWidth = cInfo.chatType == .group +? voiceNoFrame || channelReceived +? (g.size.width - 28) - 42 +: (g.size.width - 28) * 0.84 - 42 +: ... +``` + +The received check (`!ci.chatDir.sent`) is explicit here because, unlike the +Kotlin layout (which has a separate received branch), iOS shares one `maxWidth` +between sent and received. + +## Why gate on `ChatInfo.isChannel` (`useRelays`) + +The change is gated per chat on `ChatInfo.isChannel`, which is +`groupInfo?.useRelays == true` — `chatInfo.isChannel` on both Android/desktop and +iOS (`cInfo.isChannel`). + +This is the robust signal. The whole channel feature on both platforms keys on +`useRelays` (channel preferences, member management, info view, broadcast +compose, etc.); `useRelays` is a non-optional `Bool` that is always present on a +group. + +- **Not on the group-type `isChannel`** (`publicGroup?.groupType == channel`). + This was the first attempt and it left the gap in place on iOS. The likely + mechanism: `publicGroup` is an optional reconstructed from nullable DB columns + (`src/Simplex/Chat/Store/Groups.hs` `toGroupProfile`, plus a creation path that + sets `publicGroup = Nothing`), so when it is not populated for a chat the + optional chain silently evaluates to `false` and the gap is never removed. + `useRelays` cannot fail this way — it is a required `Bool` set at group + creation (`useRelays = not direct`, `Commands.hs:2080`). Independent of the + exact mechanism, `useRelays` is the safer signal. It is also as precise: the + only group type ever constructed is `GTChannel` (`GTGroup` is defined but never + instantiated), and `useRelays == true` is set on exactly that same + public-group/channel path, so `useRelays == true` ⟺ "is a channel" for every + chat today — regular groups, business chats and direct chats all have + `useRelays` false/absent (verified: no non-channel path sets it true). +- **Not on the item direction.** The unattributed `ChannelRcv` direction is + produced for any group message without an attributed member, not only in + channels, and channels also contain member-attributed (`GroupRcv`) posts. + Gating on direction would both over- and under-match, so the gate is the + per-chat `isChannel`. + +## Scope + +Regular groups, business chats, and direct chats are unchanged (`isChannel` is +false for them). Sent messages are untouched. + +## Verification + +- Android/desktop: `:common:compileKotlinDesktop` compiles clean. +- iOS: change is a small, type-safe Swift expression; build/verify on macOS + (Xcode) — not compilable on the Linux build host used here. +- Visual (both platforms): in a channel, long received messages widen toward the + right edge; in a regular group and in direct chats the right gap is unchanged; + sent messages are unchanged everywhere. From 8c4580ee00b1239d6781dccb278534a1284eca47 Mon Sep 17 00:00:00 2001 From: Evgeny Date: Sat, 20 Jun 2026 20:54:34 +0100 Subject: [PATCH 45/81] core: block obfuscated simplex links if the group does not allow them (#7107) * core: block obfuscated simplex links if the group does not allow them * remove newlines * remove renames * name * more efficient parser * remove comment --------- Co-authored-by: Evgeny @ SimpleX Chat <259188159+evgeny-simplex@users.noreply.github.com> --- src/Simplex/Chat/Library/Commands.hs | 4 ++-- src/Simplex/Chat/Library/Internal.hs | 9 +++++---- src/Simplex/Chat/Library/Subscriber.hs | 6 +++--- src/Simplex/Chat/Markdown.hs | 11 +++++++++++ src/Simplex/Chat/Types.hs | 6 ++++++ tests/ChatTests/Profiles.hs | 6 ++++++ tests/MarkdownTests.hs | 19 +++++++++++++++++++ 7 files changed, 52 insertions(+), 9 deletions(-) diff --git a/src/Simplex/Chat/Library/Commands.hs b/src/Simplex/Chat/Library/Commands.hs index 9fe2342dd6..e11a8bd523 100644 --- a/src/Simplex/Chat/Library/Commands.hs +++ b/src/Simplex/Chat/Library/Commands.hs @@ -3675,7 +3675,7 @@ processChatCommand cxt nm = \case profileToSend <- presentUserBadge user incognitoProfile $ case gInfo_ of Just gInfo_' -> - let allowSimplexLinks = maybe True (groupFeatureUserAllowed SGFSimplexLinks) gInfo_' + let allowSimplexLinks = maybe True groupUserAllowSimplexLinks gInfo_' in userProfileInGroup' user allowSimplexLinks incognitoProfile Nothing -> userProfileDirect user incognitoProfile Nothing True chatEvent <- case gInfo_ of @@ -3988,7 +3988,7 @@ processChatCommand cxt nm = \case conn <- createRelayConnection db cxt user (groupMemberId' relayMember) connId ConnPrepared chatV subMode pure (relayMember, conn, groupRelay) let GroupMember {memberRole = userRole, memberId = userMemberId} = membership - allowSimplexLinks = groupFeatureUserAllowed SGFSimplexLinks gInfo + allowSimplexLinks = groupUserAllowSimplexLinks gInfo GroupMember {memberId = relayMemberId} = relayMember membershipProfile <- presentUserBadge user (incognitoMembershipProfile gInfo) $ redactedMemberProfile allowSimplexLinks $ fromLocalProfile $ memberProfile membership let relayInv = GroupRelayInvitation { diff --git a/src/Simplex/Chat/Library/Internal.hs b/src/Simplex/Chat/Library/Internal.hs index 68e870a7c5..79fff87e5b 100644 --- a/src/Simplex/Chat/Library/Internal.hs +++ b/src/Simplex/Chat/Library/Internal.hs @@ -367,7 +367,7 @@ prohibitedGroupContent gInfo@GroupInfo {membership = mem@GroupMember {memberRole prohibitedSimplexLinks :: GroupInfo -> GroupMember -> MsgContent -> Maybe MarkdownList -> Bool prohibitedSimplexLinks gInfo m mc ft = not (groupFeatureMemberAllowed SGFSimplexLinks m gInfo) - && (isChatLink mc || maybe False (any ftIsSimplexLink) ft) + && (isChatLink mc || maybe False (any ftIsSimplexLink) ft || hasObfuscatedSimplexLink (msgContentText mc)) where isChatLink = \case MCChat {} -> True @@ -1177,7 +1177,7 @@ introduceInChannel cxt user gInfo subscriber@GroupMember {activeConn = Just conn sendGroupMemberMessages user gInfo conn introEvts' userProfileInGroup :: User -> GroupInfo -> Maybe Profile -> Profile -userProfileInGroup user = userProfileInGroup' user . groupFeatureUserAllowed SGFSimplexLinks +userProfileInGroup user = userProfileInGroup' user . groupUserAllowSimplexLinks {-# INLINE userProfileInGroup #-} userProfileInGroup' :: User -> Bool -> Maybe Profile -> Profile @@ -1195,7 +1195,7 @@ memberInfo g m@GroupMember {memberId, memberRole, memberProfile, memberPubKey, a memberKey = MemberKey <$> memberPubKey } where - allowSimplexLinks = groupFeatureMemberAllowed SGFSimplexLinks m g + allowSimplexLinks = groupFeatureMemberAllowed SGFSimplexLinks m g && groupFeatureMemberAllowed SGFDirectMessages m g redactedMemberProfile :: Bool -> Profile -> Profile redactedMemberProfile allowSimplexLinks Profile {displayName, fullName, shortDescr, image, peerType, badge} = @@ -1203,6 +1203,7 @@ redactedMemberProfile allowSimplexLinks Profile {displayName, fullName, shortDes where removeSimplexLink s | allowSimplexLinks = Just s + | hasObfuscatedSimplexLink s = Nothing | otherwise = maybe (Just s) (\fts -> if any ftIsSimplexLink fts then Nothing else Just s) $ parseMaybeMarkdownList s sendHistory :: User -> GroupInfo -> GroupMember -> CM () @@ -2129,7 +2130,7 @@ sendGroupMessages user gInfo scope asGroup members events = do _ -> False sendProfileUpdate = do let members' = filter (`supportsVersion` memberProfileUpdateVersion) members - allowSimplexLinks = groupFeatureUserAllowed SGFSimplexLinks gInfo + allowSimplexLinks = groupUserAllowSimplexLinks gInfo -- shouldSendProfileUpdate excludes incognito membership, so the badge is presented profileUpdate <- presentUserBadge user Nothing $ redactedMemberProfile allowSimplexLinks $ fromLocalProfile p void $ sendGroupMessage' user gInfo members' $ XInfo profileUpdate diff --git a/src/Simplex/Chat/Library/Subscriber.hs b/src/Simplex/Chat/Library/Subscriber.hs index f8cb2b861c..79ca91918f 100644 --- a/src/Simplex/Chat/Library/Subscriber.hs +++ b/src/Simplex/Chat/Library/Subscriber.hs @@ -813,7 +813,7 @@ processAgentMessageConn cxt user@User {userId} corrId agentConnId agentMessage = XGrpMemInfo memId _memProfile | sameMemberId memId m -> do let GroupMember {memberId = membershipMemId} = membership - allowSimplexLinks = groupFeatureUserAllowed SGFSimplexLinks gInfo + allowSimplexLinks = groupUserAllowSimplexLinks gInfo membershipProfile <- presentUserBadge user (incognitoMembershipProfile gInfo) $ redactedMemberProfile allowSimplexLinks $ fromLocalProfile $ memberProfile membership -- TODO update member profile -- [async agent commands] no continuation needed, but command should be asynchronous for stability @@ -2701,7 +2701,7 @@ processAgentMessageConn cxt user@User {userId} corrId agentConnId agentMessage = pure m where contentChanged = not (sameProfileContent (redactedMemberProfile allowSimplexLinks (fromLocalProfile p)) (redactedMemberProfile allowSimplexLinks p')) - allowSimplexLinks = groupFeatureMemberAllowed SGFSimplexLinks m gInfo + allowSimplexLinks = groupFeatureMemberAllowed SGFSimplexLinks m gInfo && groupFeatureMemberAllowed SGFDirectMessages m gInfo updateBusinessChatProfile g@GroupInfo {businessChat} = case businessChat of Just bc | isMainBusinessMember bc m -> do g' <- withStore $ \db -> updateGroupProfileFromMember db user g p' @@ -3090,7 +3090,7 @@ processAgentMessageConn cxt user@User {userId} corrId agentConnId agentMessage = pure toMember subMode <- chatReadVar subscriptionMode -- [incognito] send membership incognito profile, create direct connection as incognito - let allowSimplexLinks = groupFeatureUserAllowed SGFSimplexLinks gInfo + let allowSimplexLinks = groupUserAllowSimplexLinks gInfo membershipProfile <- presentUserBadge user (incognitoMembershipProfile gInfo) $ redactedMemberProfile allowSimplexLinks $ fromLocalProfile $ memberProfile membership dm <- encodeConnInfo $ XGrpMemInfo membershipMemId membershipProfile -- [async agent commands] no continuation needed, but commands should be asynchronous for stability diff --git a/src/Simplex/Chat/Markdown.hs b/src/Simplex/Chat/Markdown.hs index 9507375527..e8cd381941 100644 --- a/src/Simplex/Chat/Markdown.hs +++ b/src/Simplex/Chat/Markdown.hs @@ -18,6 +18,7 @@ import Control.Monad import Data.Aeson (FromJSON, ToJSON) import qualified Data.Aeson as J import qualified Data.Aeson.TH as JQ +import qualified Data.Attoparsec.ByteString.Char8 as AB import Data.Attoparsec.Text (Parser) import qualified Data.Attoparsec.Text as A import Data.ByteString.Char8 (ByteString) @@ -191,6 +192,16 @@ isLink = \case hasLinks :: MarkdownList -> Bool hasLinks = any $ \(FormattedText f _) -> maybe False isLink f +hasObfuscatedSimplexLink :: Text -> Bool +hasObfuscatedSimplexLink t = + fromRight False $ AB.parseOnly findLinkP $ encodeUtf8 $ T.filter (not . isSpace) t + where + findLinkP = do + AB.skipWhile (\c -> c /= 's' && c /= 'h') -- links start only with "simplex:" or "https://" + (True <$ (strP :: AB.Parser AConnectionLink)) + <|> (AB.anyChar *> findLinkP) + <|> pure False + markdownP :: Parser Markdown markdownP = mconcat <$> A.many' fragmentP where diff --git a/src/Simplex/Chat/Types.hs b/src/Simplex/Chat/Types.hs index 7155d407e8..10f492c328 100644 --- a/src/Simplex/Chat/Types.hs +++ b/src/Simplex/Chat/Types.hs @@ -638,6 +638,12 @@ groupFeatureUserAllowed :: GroupFeatureRoleI f => SGroupFeature f -> GroupInfo - groupFeatureUserAllowed feature GroupInfo {membership = GroupMember {memberRole}, fullGroupPreferences} = groupFeatureMemberAllowed' feature memberRole fullGroupPreferences +-- A connection link in a profile description enables a direct connection, so a description +-- keeps its links only when both SimpleX links and direct messages are allowed. +groupUserAllowSimplexLinks :: GroupInfo -> Bool +groupUserAllowSimplexLinks g = + groupFeatureUserAllowed SGFSimplexLinks g && groupFeatureUserAllowed SGFDirectMessages g + mergeUserChatPrefs :: User -> Contact -> FullPreferences mergeUserChatPrefs user ct = mergeUserChatPrefs' user (contactConnIncognito ct) (userPreferences ct) diff --git a/tests/ChatTests/Profiles.hs b/tests/ChatTests/Profiles.hs index 0e2052b259..0efdd6baa2 100644 --- a/tests/ChatTests/Profiles.hs +++ b/tests/ChatTests/Profiles.hs @@ -2903,6 +2903,12 @@ testGroupPrefsSimplexLinksForRole = testChat3 aliceProfile bobProfile cathProfil bob <## "bad chat command: feature not allowed SimpleX links" bob ##> ("/_send #1 json [{\"msgContent\": {\"type\": \"text\", \"text\": \"" <> inv <> "\\ntest\"}}]") bob <## "bad chat command: feature not allowed SimpleX links" + -- a link split with a space or a newline is still blocked + let (lnk1, lnk2) = splitAt 12 inv + bob ##> ("#team \"" <> lnk1 <> " " <> lnk2 <> "\"") + bob <## "bad chat command: feature not allowed SimpleX links" + bob ##> ("#team \"" <> lnk1 <> "\\n" <> lnk2 <> "\"") + bob <## "bad chat command: feature not allowed SimpleX links" (alice inv <> "\\ntest\"") diff --git a/tests/MarkdownTests.hs b/tests/MarkdownTests.hs index efa010ceb1..2a5328ff26 100644 --- a/tests/MarkdownTests.hs +++ b/tests/MarkdownTests.hs @@ -25,6 +25,7 @@ markdownTests = do textColor textWithUri textWithHyperlink + obfuscatedSimplexLinks textWithEmail textWithPhone textWithMentions @@ -284,6 +285,24 @@ textWithHyperlink = describe "text with HyperLink without link text" do "[click here](example.com)" <==> "[click here](example.com)" "[click here](https://example.com )" <==> "[click here](https://example.com )" +obfuscatedSimplexLinks :: Spec +obfuscatedSimplexLinks = describe "SimpleX links obfuscated with whitespace" do + let addr = "https://smp6.simplex.im/a#lrdvu2d8A1GumSmoKb2krQmtKhWXq-tyGpHuM7aMwsw" + inv = "/invitation#/?v=1&smp=smp%3A%2F%2F1234-w%3D%3D%40smp.simplex.im%3A5223%2F3456-w%3D%3D%23%2F%3Fv%3D1-2%26dh%3DMCowBQYDK2VuAyEAjiswwI3O_NlS8Fk3HJUW870EY2bAwmttMBsvRB9eV3o%253D&e2e=v%3D2%26x3dh%3DMEIwBQYDK2VvAzkAmKuSYeQ_m0SixPDS8Wq8VBaTS1cW-Lp0n0h4Diu-kUpR-qXx4SDJ32YGEFoGFGSbGPry5Ychr6U%3D%2CMEIwBQYDK2VvAzkAmKuSYeQ_m0SixPDS8Wq8VBaTS1cW-Lp0n0h4Diu-kUpR-qXx4SDJ32YGEFoGFGSbGPry5Ychr6U%3D" + let spaced s = T.replace "://" ":// " s -- insert a space right after the scheme + it "detects links split with spaces or newlines" do + hasObfuscatedSimplexLink addr `shouldBe` True + hasObfuscatedSimplexLink (spaced addr) `shouldBe` True + hasObfuscatedSimplexLink (T.intercalate "\n" $ T.chunksOf 8 addr) `shouldBe` True + hasObfuscatedSimplexLink ("connect with me: " <> spaced addr) `shouldBe` True + hasObfuscatedSimplexLink (T.intercalate " " $ T.chunksOf 8 $ "https://simplex.chat" <> inv) `shouldBe` True + it "detects a split link followed by other text" do + hasObfuscatedSimplexLink (spaced addr <> "\nplease connect") `shouldBe` True + it "ignores text without a SimpleX link" do + hasObfuscatedSimplexLink "" `shouldBe` False + hasObfuscatedSimplexLink "hello there, this is a normal message" `shouldBe` False + hasObfuscatedSimplexLink "see https://example.com/page?ref=123 for details" `shouldBe` False + email :: Text -> Markdown email = Markdown $ Just Email From 9b76742c6e1c7f65f55d9b0ce409dcc18e3a2f25 Mon Sep 17 00:00:00 2001 From: Narasimha-sc <166327228+Narasimha-sc@users.noreply.github.com> Date: Sat, 20 Jun 2026 21:49:29 +0000 Subject: [PATCH 46/81] desktop: fix in-app updater deleting the download before "Open file location" (#7104) * desktop: fix updater deleting the download before "Open file location" The in-app updater downloads to a temp UUID file via createTmpFileAndDelete, then relies on `file.renameTo(newFile)` to move the bytes to the asset name so they survive that helper's `finally { tmpFile.delete() }`. The rename's return value was ignored: if it failed, the bytes stayed at the UUID path and the finally block deleted the only copy, so the "Download completed" dialog appeared but "Open file location" opened an empty /tmp/simplex. Use Files.move with REPLACE_EXISTING instead. It performs the same in-place rename when possible (verified: inode preserved, no copy), falls back to copy+delete when an atomic rename isn't possible, and throws on genuine failure - which the existing outer catch handles - instead of silently losing the file. * docs: plan for updater open-file-location fix * docs: plan - note Whonix compatibility (updater previously failed there) --- .../common/views/helpers/AppUpdater.kt | 6 ++- ...26-06-19-fix-updater-open-file-location.md | 48 +++++++++++++++++++ 2 files changed, 53 insertions(+), 1 deletion(-) create mode 100644 plans/2026-06-19-fix-updater-open-file-location.md diff --git a/apps/multiplatform/common/src/desktopMain/kotlin/chat/simplex/common/views/helpers/AppUpdater.kt b/apps/multiplatform/common/src/desktopMain/kotlin/chat/simplex/common/views/helpers/AppUpdater.kt index f6a6023d47..c4c34a1db9 100644 --- a/apps/multiplatform/common/src/desktopMain/kotlin/chat/simplex/common/views/helpers/AppUpdater.kt +++ b/apps/multiplatform/common/src/desktopMain/kotlin/chat/simplex/common/views/helpers/AppUpdater.kt @@ -321,7 +321,11 @@ private suspend fun downloadAsset(asset: GitHubAsset) { stream.copyTo(output) } val newFile = File(file.parentFile, asset.name) - file.renameTo(newFile) + // Moving instead of renameTo: a bare rename can silently fail (returns false, ignored), + // and the enclosing createTmpFileAndDelete then deletes the only copy in its finally block, + // leaving the user with an empty download dir. Files.move performs the same in-place rename + // when possible, falls back to copy when it can't, and throws (handled below) on real failure. + Files.move(file.toPath(), newFile.toPath(), StandardCopyOption.REPLACE_EXISTING) AlertManager.shared.showAlertDialogButtonsColumn( generalGetString(MR.strings.app_check_for_updates_download_completed_title), diff --git a/plans/2026-06-19-fix-updater-open-file-location.md b/plans/2026-06-19-fix-updater-open-file-location.md new file mode 100644 index 0000000000..7e4d7e0af1 --- /dev/null +++ b/plans/2026-06-19-fix-updater-open-file-location.md @@ -0,0 +1,48 @@ +# Fix: in-app updater deletes the downloaded file before the user can open/install it + +## Symptom + +Desktop in-app updater (`apps/multiplatform/common/src/desktopMain/kotlin/chat/simplex/common/views/helpers/AppUpdater.kt`): after a successful download the "Download completed" dialog appears, but clicking **"Open file location"** opens an **empty** `/tmp/simplex` — the downloaded artifact is gone. Reported against a Linux AppImage build; verified from a terminal that the file was genuinely absent on disk (not a file-manager display glitch). + +## Root cause + +`downloadAsset` writes the download to a temporary UUID-named file created by `createTmpFileAndDelete`, whose contract is to delete that temp file in a `finally` block. To keep the bytes, the code renames the temp file to the asset name so the survivor sits at a *different* path than the one the `finally` deletes: + +```kotlin +createTmpFileAndDelete { file -> // file = /tmp/simplex/ + file.outputStream().use { output -> stream.copyTo(output) } + val newFile = File(file.parentFile, asset.name) + file.renameTo(newFile) // return value IGNORED + ... show "Download completed" dialog ... +} // finally { tmpFile.delete() } +``` + +`File.renameTo` returns a boolean and **its result was ignored**. When the rename succeeds (the common case) the survivor is `newFile` and the `finally` deletes the now-absent UUID path (a no-op) — everything works. But if the rename returns `false`, the bytes stay at the UUID path, `newFile` is never created, and the `finally { tmpFile.delete() }` deletes the only copy. The dialog is still shown (the rename result was never checked), so the user sees "Download completed" over an empty directory. + +The download path is **shared by every platform and asset type** (`.AppImage`, `.deb`, Windows `.msi`, macOS `.dmg`), so this affected all of them — most acutely `.deb`, where the in-app "Install" button is hidden and "Open file location" is the only way forward. + +## Fix + +Replace the unchecked `renameTo` with `Files.move(..., REPLACE_EXISTING)`: + +```kotlin +val newFile = File(file.parentFile, asset.name) +Files.move(file.toPath(), newFile.toPath(), StandardCopyOption.REPLACE_EXISTING) +``` + +Behaviour: + +- **Same in-place rename in the normal case.** Verified that a same-directory `Files.move` preserves the inode — it executes the same `rename(2)` syscall as `renameTo`, with no copy. No behaviour or performance change on the happy path. +- **Recovers when an in-place rename is not possible** (e.g. cross-filesystem): falls back to copy-then-delete, so `newFile` still ends up present. +- **Surfaces genuine failures** by throwing, which the existing outer `catch (e: Exception)` in `downloadAsset` already handles (logs the error) — instead of silently deleting the download and showing a misleading "Download completed" dialog. + +One line changed (plus a clarifying comment). `Files` / `StandardCopyOption` are already imported. + +## Compatibility impact + +Before this change the updater's download step worked only on *some* Linux systems — it failed on those where `File.renameTo` returns `false`. In particular it did **not** work on **Whonix**, where the "Download completed" dialog appeared over an empty folder and the update could not proceed. `Files.move` succeeds on those systems too (in-place rename when possible, copy+delete otherwise, throwing only on genuine failure), so this fix expands the set of platforms on which the in-app updater works — Whonix included — without changing behaviour where `renameTo` already succeeded. + +## Scope / out of scope + +- This change is limited to the shared download step; it fixes the reported symptom on every OS at once. +- The per-OS *install* paths are untouched. A separate, related fragility remains in the macOS install branch (`File("/Applications/SimpleX.app").renameTo(...)` return value ignored at the app-replace/restore steps); it is a different symptom (botched/missing install, not a lost download) and is left for a follow-up, consistent with the out-of-scope list in `plans/2026-05-16-desktop-updater-fixes.md`. From c42c121a3652d0aac083875311d179f225fb5405 Mon Sep 17 00:00:00 2001 From: Evgeny Date: Sun, 21 Jun 2026 13:03:57 +0100 Subject: [PATCH 47/81] core: improve short link decompression (#7110) * fix: bound short-link decompression * core: improve short link decompression --------- Co-authored-by: Paul Bottinelli --- cabal.project | 2 +- src/Simplex/Chat/Library/Internal.hs | 9 ++++----- tests/ProtocolTests.hs | 24 +++++++++++++++++++++++- 3 files changed, 28 insertions(+), 7 deletions(-) diff --git a/cabal.project b/cabal.project index 66356aa56e..0302d6f7d7 100644 --- a/cabal.project +++ b/cabal.project @@ -21,7 +21,7 @@ constraints: zip +disable-bzip2 +disable-zstd source-repository-package type: git location: https://github.com/simplex-chat/simplexmq.git - tag: df6c53f830853c4cec4c530fe4366f6e7c02e527 + tag: 958de3bfcac2a676f4c2bd38d16d899b174fa8f1 source-repository-package type: git diff --git a/src/Simplex/Chat/Library/Internal.hs b/src/Simplex/Chat/Library/Internal.hs index 45688ae6e9..c67ad0d514 100644 --- a/src/Simplex/Chat/Library/Internal.hs +++ b/src/Simplex/Chat/Library/Internal.hs @@ -90,7 +90,7 @@ import Simplex.Messaging.Agent.Protocol import qualified Simplex.Messaging.Agent.Protocol as AP (AgentErrorType (..)) import qualified Simplex.Messaging.Agent.Store.DB as DB import Simplex.Messaging.Client (NetworkConfig (..), NetworkRequestMode (..)) -import Simplex.Messaging.Compression (compressionLevel) +import Simplex.Messaging.Compression (compressionLevel, limitDecompress') import qualified Simplex.Messaging.Crypto as C import Simplex.Messaging.Crypto.File (CryptoFile (..), CryptoFileArgs (..)) import qualified Simplex.Messaging.Crypto.File as CF @@ -1450,10 +1450,9 @@ encodeShortLinkData d = decodeLinkUserData :: J.FromJSON a => ConnLinkData c -> IO (Maybe a) decodeLinkUserData cData | B.null s = pure Nothing - | B.head s == 'X' = case Z1.decompress $ B.drop 1 s of - Z1.Error e -> Nothing <$ logError ("Error decompressing link data: " <> tshow e) - Z1.Skip -> pure Nothing - Z1.Decompress s' -> decode s' + | B.head s == 'X' = case limitDecompress' maxDecompressedMsgLength $ B.drop 1 s of + Left e -> Nothing <$ logError ("Error decompressing link data: " <> tshow e) + Right s' -> decode s' | otherwise = decode s where decode s' = case J.eitherDecodeStrict s' of diff --git a/tests/ProtocolTests.hs b/tests/ProtocolTests.hs index 1482a9de10..d76c86495f 100644 --- a/tests/ProtocolTests.hs +++ b/tests/ProtocolTests.hs @@ -9,6 +9,7 @@ module ProtocolTests where import qualified Data.Aeson as J import Data.ByteString.Char8 (ByteString) import Data.Time.Clock.System (SystemTime (..), systemToUTCTime) +import Simplex.Chat.Library.Internal (decodeLinkUserData, encodeShortLinkData) import Simplex.Chat.Protocol import Simplex.Chat.Types import Simplex.Chat.Types.Preferences @@ -22,7 +23,9 @@ import Simplex.Messaging.Version import Test.Hspec protocolTests :: Spec -protocolTests = decodeChatMessageTest +protocolTests = do + decodeChatMessageTest + shortLinkDataTests srv :: SMPServer srv = SMPServer "smp.simplex.im" "5223" (C.KeyHash "\215m\248\251") @@ -109,6 +112,25 @@ testProfile = Profile {displayName = "alice", fullName = "Alice", shortDescr = N testGroupProfile :: GroupProfile testGroupProfile = GroupProfile {displayName = "team", fullName = "Team", description = Nothing, shortDescr = Nothing, image = Nothing, publicGroup = Nothing, groupPreferences = testGroupPreferences, memberAdmission = Nothing} +shortLinkDataTests :: Spec +shortLinkDataTests = describe "Short link data encoding/decoding" $ do + it "decodes compressed short-link user data below the decompressed size limit" $ do + let value = replicate 11000 'a' + decodeLinkUserData (linkData value) `shouldReturn` Just value + it "rejects compressed short-link user data above the decompressed size limit" $ do + let value = replicate (maxDecompressedMsgLength + 1) 'a' + decodeLinkUserData (linkData value) `shouldReturn` (Nothing :: Maybe String) + where + linkData value = + ContactLinkData + supportedSMPAgentVRange + UserContactData + { direct = True, + owners = [], + relays = [], + userData = encodeShortLinkData (value :: String) + } + decodeChatMessageTest :: Spec decodeChatMessageTest = describe "Chat message encoding/decoding" $ do it "x.msg.new simple text" $ From 687661313fd4b87e6c60f7f81f9ac3d8e51b231f Mon Sep 17 00:00:00 2001 From: Evgeny Poberezkin Date: Sun, 21 Jun 2026 13:31:55 +0100 Subject: [PATCH 48/81] 6.5.6.0 --- cabal.project | 2 +- scripts/nix/sha256map.nix | 2 +- simplex-chat.cabal | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/cabal.project b/cabal.project index 1afaa31e25..06622a65a2 100644 --- a/cabal.project +++ b/cabal.project @@ -21,7 +21,7 @@ constraints: zip +disable-bzip2 +disable-zstd source-repository-package type: git location: https://github.com/simplex-chat/simplexmq.git - tag: 44898bf7f6079dbd7f501fd62a31d8cf54792a27 + tag: 92598c2ddb06cfc2c19797a2c900cffcb8af4d5c source-repository-package type: git diff --git a/scripts/nix/sha256map.nix b/scripts/nix/sha256map.nix index ebd9d67cc0..8519d08c3c 100644 --- a/scripts/nix/sha256map.nix +++ b/scripts/nix/sha256map.nix @@ -1,5 +1,5 @@ { - "https://github.com/simplex-chat/simplexmq.git"."44898bf7f6079dbd7f501fd62a31d8cf54792a27" = "1kwwxq2k819xrahjmjzpgv6pff825qpds4r42qjajj5blhv9h6pc"; + "https://github.com/simplex-chat/simplexmq.git"."92598c2ddb06cfc2c19797a2c900cffcb8af4d5c" = "0x98w50vcb2qwdxgkgfvygn1vzclb12zg1k6kcs9rrw54rhmvfmp"; "https://github.com/simplex-chat/hs-socks.git"."a30cc7a79a08d8108316094f8f2f82a0c5e1ac51" = "0yasvnr7g91k76mjkamvzab2kvlb1g5pspjyjn2fr6v83swjhj38"; "https://github.com/simplex-chat/direct-sqlcipher.git"."f814ee68b16a9447fbb467ccc8f29bdd3546bfd9" = "1ql13f4kfwkbaq7nygkxgw84213i0zm7c1a8hwvramayxl38dq5d"; "https://github.com/simplex-chat/sqlcipher-simple.git"."a46bd361a19376c5211f1058908fc0ae6bf42446" = "1z0r78d8f0812kxbgsm735qf6xx8lvaz27k1a0b4a2m0sshpd5gl"; diff --git a/simplex-chat.cabal b/simplex-chat.cabal index 20b71a052d..6122226bf8 100644 --- a/simplex-chat.cabal +++ b/simplex-chat.cabal @@ -5,7 +5,7 @@ cabal-version: 1.12 -- see: https://github.com/sol/hpack name: simplex-chat -version: 6.5.5.0 +version: 6.5.6.0 category: Web, System, Services, Cryptography homepage: https://github.com/simplex-chat/simplex-chat#readme author: simplex.chat From 674e7e19c041fac3fb4df273d23cadd67e20b47a Mon Sep 17 00:00:00 2001 From: Evgeny Poberezkin Date: Sun, 21 Jun 2026 14:03:08 +0100 Subject: [PATCH 49/81] core: 7.0.0.2 (simplexmq 7.0.0.2) --- cabal.project | 2 +- scripts/nix/sha256map.nix | 2 +- simplex-chat.cabal | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/cabal.project b/cabal.project index 0302d6f7d7..516d029b11 100644 --- a/cabal.project +++ b/cabal.project @@ -21,7 +21,7 @@ constraints: zip +disable-bzip2 +disable-zstd source-repository-package type: git location: https://github.com/simplex-chat/simplexmq.git - tag: 958de3bfcac2a676f4c2bd38d16d899b174fa8f1 + tag: 98391fd677f547f610a17c48cc96d8c4b2d5e96e source-repository-package type: git diff --git a/scripts/nix/sha256map.nix b/scripts/nix/sha256map.nix index 08d0e8abf6..8dca57a258 100644 --- a/scripts/nix/sha256map.nix +++ b/scripts/nix/sha256map.nix @@ -1,5 +1,5 @@ { - "https://github.com/simplex-chat/simplexmq.git"."df6c53f830853c4cec4c530fe4366f6e7c02e527" = "0xxbs8n0976c75p72pgkixa97isapb9r02xyflmvj8gnmxw4ilay"; + "https://github.com/simplex-chat/simplexmq.git"."98391fd677f547f610a17c48cc96d8c4b2d5e96e" = "1ajgidba08dq8yj7xyr9i47rfrlkzbr75j5nyyjcv0zf778sgv0m"; "https://github.com/simplex-chat/hs-socks.git"."a30cc7a79a08d8108316094f8f2f82a0c5e1ac51" = "0yasvnr7g91k76mjkamvzab2kvlb1g5pspjyjn2fr6v83swjhj38"; "https://github.com/simplex-chat/direct-sqlcipher.git"."f814ee68b16a9447fbb467ccc8f29bdd3546bfd9" = "1ql13f4kfwkbaq7nygkxgw84213i0zm7c1a8hwvramayxl38dq5d"; "https://github.com/simplex-chat/sqlcipher-simple.git"."a46bd361a19376c5211f1058908fc0ae6bf42446" = "1z0r78d8f0812kxbgsm735qf6xx8lvaz27k1a0b4a2m0sshpd5gl"; diff --git a/simplex-chat.cabal b/simplex-chat.cabal index db8a65ef5a..0250f3d2dd 100644 --- a/simplex-chat.cabal +++ b/simplex-chat.cabal @@ -5,7 +5,7 @@ cabal-version: 1.12 -- see: https://github.com/sol/hpack name: simplex-chat -version: 7.0.0.1 +version: 7.0.0.2 category: Web, System, Services, Cryptography homepage: https://github.com/simplex-chat/simplex-chat#readme author: simplex.chat From 6cde614e51e92fde0ea6068a7242fbfa897ec8dd Mon Sep 17 00:00:00 2001 From: Evgeny Date: Sun, 21 Jun 2026 23:36:15 +0100 Subject: [PATCH 50/81] core: fix group link use after admin demotion (#7111) * Fix group link use after admin demotion * fix: group role change * size limit * fix * allow delete * do not remove link * query plan * relay test * refactor --------- Co-authored-by: Paul Bottinelli Co-authored-by: Evgeny @ SimpleX Chat <259188159+evgeny-simplex@users.noreply.github.com> --- src/Simplex/Chat/Library/Subscriber.hs | 49 ++++++++++------- src/Simplex/Chat/Protocol.hs | 2 +- .../SQLite/Migrations/chat_query_plans.txt | 13 +++++ tests/ChatTests/Groups.hs | 52 +++++++++++++++++++ 4 files changed, 95 insertions(+), 21 deletions(-) diff --git a/src/Simplex/Chat/Library/Subscriber.hs b/src/Simplex/Chat/Library/Subscriber.hs index 79ca91918f..a058857076 100644 --- a/src/Simplex/Chat/Library/Subscriber.hs +++ b/src/Simplex/Chat/Library/Subscriber.hs @@ -731,8 +731,11 @@ processAgentMessageConn cxt user@User {userId} corrId agentConnId agentMessage = ct <- getContactViaMember db cxt user m liftIO $ setNewContactMemberConnRequest db user m cReq liftIO $ (ct,) <$> getGroupLinkId db user gInfo - sendGrpInvitation ct m groupLinkId - toView $ CEvtSentGroupInvitation user gInfo ct m + if memberRole' membership >= GRAdmin + then do + sendGrpInvitation ct m groupLinkId + toView $ CEvtSentGroupInvitation user gInfo ct m + else messageError "processGroupMessage: group link host no longer has admin role" where sendGrpInvitation :: Contact -> GroupMember -> Maybe GroupLinkId -> CM () sendGrpInvitation ct GroupMember {memberId, memberRole = memRole} groupLinkId = do @@ -1535,9 +1538,12 @@ processAgentMessageConn cxt user@User {userId} corrId agentConnId agentMessage = Just gli@GroupLinkInfo {groupId, memberRole = gLinkMemRole} -> do -- TODO [short links] deduplicate request by xContactId? gInfo <- withStore $ \db -> getGroupInfo db cxt user groupId - if useRelays' gInfo - then messageWarning $ "processContactConnMessage (group " <> groupName' gInfo <> "): ignored direct join request from " <> displayName <> " (group uses relays)" - else do + if + | useRelays' gInfo -> + messageWarning $ "processContactConnMessage (group " <> groupName' gInfo <> "): ignored direct join request from " <> displayName <> " (group uses relays)" + | memberRole' (membership gInfo) < GRAdmin -> + messageWarning $ "processContactConnMessage (group " <> groupName' gInfo <> "): ignored join request because host is no longer admin" + | otherwise -> do acceptMember_ <- asks $ acceptMember . chatHooks . config maybe (pure $ Right (GAAccepted, gLinkMemRole)) (\am -> liftIO $ am gInfo gli p) acceptMember_ >>= \case Right (acceptance, useRole) @@ -1566,20 +1572,23 @@ processAgentMessageConn cxt user@User {userId} corrId agentConnId agentMessage = createRelayRequestGroup db cxt user groupRelayInv invId chatVRange initialDelay GSMemAccepted RSInvited lift $ void $ getRelayRequestWorker True xGrpRelayTest :: InvitationId -> VersionRangeChat -> ByteString -> CM () - xGrpRelayTest invId chatVRange challenge = do - privKey_ <- withAgent $ \a -> getConnLinkPrivKey a (aConnId conn) - case privKey_ of - Nothing -> eToView $ ChatError (CEInternalError "no short link key for relay address") - Just privKey -> do - let sig = C.signatureBytes $ C.sign' privKey challenge - msg = XGrpRelayTest challenge (Just sig) - subMode <- chatReadVar subscriptionMode - chatVR <- chatVersionRange - let chatV = chatVR `peerConnChatVersion` chatVRange - (cmdId, acId) <- agentAcceptContactAsync user True invId msg subMode PQSupportOff chatV - withStore $ \db -> do - Connection {connId = testCId} <- createRelayTestConnection db cxt user acId ConnAccepted chatV subMode - liftIO $ setCommandConnId db user cmdId testCId + xGrpRelayTest invId chatVRange challenge + | isTrue userChatRelay && isNothing ucGroupId_ = + withAgent (`getConnLinkPrivKey` aConnId conn) >>= \case + Nothing -> eToView $ ChatError (CEInternalError "no short link key for relay address") + Just privKey -> do + let sig = C.signatureBytes $ C.sign' privKey challenge + msg = XGrpRelayTest challenge (Just sig) + subMode <- chatReadVar subscriptionMode + chatVR <- chatVersionRange + let chatV = chatVR `peerConnChatVersion` chatVRange + (cmdId, acId) <- agentAcceptContactAsync user True invId msg subMode PQSupportOff chatV + withStore $ \db -> do + Connection {connId = testCId} <- createRelayTestConnection db cxt user acId ConnAccepted chatV subMode + liftIO $ setCommandConnId db user cmdId testCId + | otherwise = messageError "relay test sent to non-relay link" + where + User {userChatRelay} = user -- TODO [relays] owner, relays: TBC how to communicate member rejection rules from owner to relays -- TODO [relays] relay: TBC communicate rejection when memberId already exists (currently checked in createJoiningMember) memberJoinRequestViaRelay :: InvitationId -> VersionRangeChat -> Profile -> MemberId -> MemberKey -> CM () @@ -3113,7 +3122,7 @@ processAgentMessageConn cxt user@User {userId} corrId agentConnId agentMessage = where GroupMember {memberId = membershipMemId} = membership changeMemberRole gInfo' member@GroupMember {memberRole = fromRole} gEvent - | senderRole < GRAdmin || senderRole < fromRole = + | senderRole < maximum ([GRAdmin, fromRole, memRole] :: [GroupMemberRole]) = messageError "x.grp.mem.role with insufficient member permissions" $> Nothing | otherwise = do withStore' $ \db -> updateGroupMemberRole db user member memRole diff --git a/src/Simplex/Chat/Protocol.hs b/src/Simplex/Chat/Protocol.hs index f8ccaa74e7..86202fe598 100644 --- a/src/Simplex/Chat/Protocol.hs +++ b/src/Simplex/Chat/Protocol.hs @@ -932,7 +932,7 @@ parseChatMessages msg = case B.head msg of Right (compressed :: L.NonEmpty Compressed) -> case traverse decompressedSize compressed of Nothing -> [Left "compressed size not specified"] Just sizes - | sum sizes > maxDecompressedMsgLength -> [Left "decompressed size exceeds limit"] + | any (maxDecompressedMsgLength <) sizes || maxDecompressedMsgLength < sum sizes -> [Left "decompressed size exceeds limit"] | otherwise -> concatMap (either (\e -> [Left e]) parseUncompressed' . decompress1) compressed parseUncompressed' "" = [Left "empty string"] parseUncompressed' s = parseUncompressed (B.head s) s diff --git a/src/Simplex/Chat/Store/SQLite/Migrations/chat_query_plans.txt b/src/Simplex/Chat/Store/SQLite/Migrations/chat_query_plans.txt index 803e012773..e7188f3cc2 100644 --- a/src/Simplex/Chat/Store/SQLite/Migrations/chat_query_plans.txt +++ b/src/Simplex/Chat/Store/SQLite/Migrations/chat_query_plans.txt @@ -1134,6 +1134,19 @@ Query: Plan: SEARCH group_members USING INTEGER PRIMARY KEY (rowid=?) +Query: + UPDATE group_members + SET member_role = 'owner' + WHERE member_category = 'user' + AND group_id IN ( + SELECT group_id FROM groups WHERE local_display_name = 'team' + ) + +Plan: +SEARCH group_members USING INDEX idx_group_members_group_id_index_in_group (group_id=?) +LIST SUBQUERY 1 +SCAN groups USING COVERING INDEX sqlite_autoindex_groups_1 + Query: DELETE FROM chat_item_reactions WHERE contact_id = ? AND shared_msg_id = ? AND reaction_sent = ? AND reaction = ? diff --git a/tests/ChatTests/Groups.hs b/tests/ChatTests/Groups.hs index 82906110c6..c8cd1c5f30 100644 --- a/tests/ChatTests/Groups.hs +++ b/tests/ChatTests/Groups.hs @@ -81,6 +81,7 @@ chatGroupTests = do it "group live message" testGroupLiveMessage it "update group profile" testUpdateGroupProfile it "update member role" testUpdateMemberRole + it "check owner role change" testOwnerRoleChange it "group description is shown as the first message to new members" testGroupDescription it "moderate message of another group member" testGroupModerate it "moderate own message (should process as deletion)" testGroupModerateOwn @@ -108,6 +109,7 @@ chatGroupTests = do it "invitee incognito" testGroupLinkInviteeIncognito it "incognito - join/invite" testGroupLinkIncognitoJoinInvite it "group link member role" testGroupLinkMemberRole + it "demotion does not remove group link" testGroupLinkDemotedAdmin it "host profile received" testGroupLinkHostProfileReceived it "existing contact merged" testGroupLinkExistingContactMerged describe "group links - member screening" $ do @@ -1608,6 +1610,37 @@ testUpdateMemberRole = alice ##> "/mr team alice admin" alice <## "bad chat command: can't change role for self" +testOwnerRoleChange :: HasCallStack => TestParams -> IO () +testOwnerRoleChange = + testChat3 aliceProfile bobProfile cathProfile $ + \alice bob cath -> do + createGroup3 "team" alice bob cath + void $ withCCTransaction cath $ \db -> + DB.execute_ + db + [sql| + UPDATE group_members + SET member_role = 'owner' + WHERE member_category = 'user' + AND group_id IN ( + SELECT group_id FROM groups WHERE local_display_name = 'team' + ) + |] + + cath ##> "/mr #team bob owner" + cath <## "#team: you changed the role of bob to owner" + concurrentlyN_ + [ alice <## "error: x.grp.mem.role with insufficient member permissions", + bob <## "error: x.grp.mem.role with insufficient member permissions" + ] + + bob ##> "/ms team" + bob + <### [ "alice (Alice): owner, host, connected", + "bob (Bob): admin, you, connected", + "cath (Catherine): admin, connected" + ] + testGroupDescription :: HasCallStack => TestParams -> IO () testGroupDescription = testChat4 aliceProfile bobProfile cathProfile danProfile $ \alice bob cath dan -> do connectUsers alice bob @@ -2929,6 +2962,25 @@ testGroupLinkMemberRole = bob <## "#team: cath changed your role from member to admin" alice <## "#team: cath changed the role of bob from member to admin" +testGroupLinkDemotedAdmin :: HasCallStack => TestParams -> IO () +testGroupLinkDemotedAdmin = + testChat3 aliceProfile bobProfile cathProfile $ + \alice bob _cath -> do + createGroup2' "team" alice (bob, GRAdmin) True + + bob ##> "/create link #team member" + _gLink <- getGroupLink bob "team" GRMember True + + alice ##> "/mr #team bob member" + concurrentlyN_ + [ alice <## "#team: you changed the role of bob to member", + bob <## "#team: alice changed your role from admin to member" + ] + + -- demotion does not remove bob's group link (it is preserved, usable again on re-promotion) + bob ##> "/show link #team" + void $ getGroupLink bob "team" GRMember False + testGroupLinkHostIncognito :: HasCallStack => TestParams -> IO () testGroupLinkHostIncognito = testChat2 aliceProfile bobProfile $ From f0b9006c54f1e41bed10146d530d4c8bcd1b7f94 Mon Sep 17 00:00:00 2001 From: Evgeny Poberezkin Date: Sun, 21 Jun 2026 23:37:11 +0100 Subject: [PATCH 51/81] core: 6.5.6.1 --- simplex-chat.cabal | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/simplex-chat.cabal b/simplex-chat.cabal index 6122226bf8..74a96c1371 100644 --- a/simplex-chat.cabal +++ b/simplex-chat.cabal @@ -5,7 +5,7 @@ cabal-version: 1.12 -- see: https://github.com/sol/hpack name: simplex-chat -version: 6.5.6.0 +version: 6.5.6.1 category: Web, System, Services, Cryptography homepage: https://github.com/simplex-chat/simplex-chat#readme author: simplex.chat From 5d3f0166270c9be845dfacee47fa97dd3abf4536 Mon Sep 17 00:00:00 2001 From: Evgeny Poberezkin Date: Sun, 21 Jun 2026 23:38:14 +0100 Subject: [PATCH 52/81] core: 7.0.0.3 --- simplex-chat.cabal | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/simplex-chat.cabal b/simplex-chat.cabal index 0250f3d2dd..22b97c83ee 100644 --- a/simplex-chat.cabal +++ b/simplex-chat.cabal @@ -5,7 +5,7 @@ cabal-version: 1.12 -- see: https://github.com/sol/hpack name: simplex-chat -version: 7.0.0.2 +version: 7.0.0.3 category: Web, System, Services, Cryptography homepage: https://github.com/simplex-chat/simplex-chat#readme author: simplex.chat From 0e09b38ea6834ae31a0e6af5700a9c869c5bb5d8 Mon Sep 17 00:00:00 2001 From: spaced4ndy <8711996+spaced4ndy@users.noreply.github.com> Date: Mon, 22 Jun 2026 10:15:41 +0000 Subject: [PATCH 53/81] core: public groups - roster of privileged members (#7017) --- apps/ios/SimpleXChat/ChatTypes.swift | 2 + .../chat/simplex/common/model/ChatModel.kt | 2 + .../commonMain/resources/MR/base/strings.xml | 1 + bots/api/TYPES.md | 13 + bots/src/API/Docs/Types.hs | 2 + bots/src/API/TypeInfo.hs | 1 + docs/protocol/channels-overview.md | 3 +- .../types/typescript/src/types.ts | 8 + .../src/simplex_chat/types/_types.py | 6 +- ...-05-26-public-groups-via-relays-unified.md | 227 +++++ plans/2026-06-01-roster-members-multipart.md | 220 +++++ simplex-chat.cabal | 2 + src/Simplex/Chat/Library/Commands.hs | 134 +-- src/Simplex/Chat/Library/Internal.hs | 254 +++++- src/Simplex/Chat/Library/Subscriber.hs | 583 ++++++++++--- src/Simplex/Chat/Protocol.hs | 106 ++- src/Simplex/Chat/Store/Connections.hs | 2 +- src/Simplex/Chat/Store/Files.hs | 114 ++- src/Simplex/Chat/Store/Groups.hs | 288 ++++++- src/Simplex/Chat/Store/Messages.hs | 11 +- src/Simplex/Chat/Store/Postgres/Migrations.hs | 4 +- .../Migrations/M20260602_group_roster.hs | 64 ++ .../Store/Postgres/Migrations/chat_schema.sql | 75 +- src/Simplex/Chat/Store/SQLite/Migrations.hs | 4 +- .../Migrations/M20260602_group_roster.hs | 63 ++ .../SQLite/Migrations/chat_query_plans.txt | 238 +++++- .../Store/SQLite/Migrations/chat_schema.sql | 40 +- src/Simplex/Chat/Store/Shared.hs | 8 +- src/Simplex/Chat/Types.hs | 39 + src/Simplex/Chat/Types/Shared.hs | 11 + tests/ChatClient.hs | 2 +- tests/ChatTests/Groups.hs | 776 ++++++++++++++++-- tests/ProtocolTests.hs | 10 +- 33 files changed, 2902 insertions(+), 411 deletions(-) create mode 100644 plans/2026-05-26-public-groups-via-relays-unified.md create mode 100644 plans/2026-06-01-roster-members-multipart.md create mode 100644 src/Simplex/Chat/Store/Postgres/Migrations/M20260602_group_roster.hs create mode 100644 src/Simplex/Chat/Store/SQLite/Migrations/M20260602_group_roster.hs diff --git a/apps/ios/SimpleXChat/ChatTypes.swift b/apps/ios/SimpleXChat/ChatTypes.swift index 56f92cfc0b..d7478e5c3b 100644 --- a/apps/ios/SimpleXChat/ChatTypes.swift +++ b/apps/ios/SimpleXChat/ChatTypes.swift @@ -2741,6 +2741,7 @@ public enum RelayStatus: String, Decodable, Equatable, Hashable { case new case invited case accepted + case acknowledgedRoster case active case inactive case rejected @@ -2816,6 +2817,7 @@ extension RelayStatus { case .new: "new" case .invited: "invited" case .accepted: "accepted" + case .acknowledgedRoster: "acknowledged roster" case .active: "active" case .inactive: "inactive" case .rejected: "rejected" diff --git a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/model/ChatModel.kt b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/model/ChatModel.kt index fa2051a761..ecfb58fdb0 100644 --- a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/model/ChatModel.kt +++ b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/model/ChatModel.kt @@ -2415,6 +2415,7 @@ enum class RelayStatus { @SerialName("new") New, @SerialName("invited") Invited, @SerialName("accepted") Accepted, + @SerialName("acknowledgedRoster") AcknowledgedRoster, @SerialName("active") Active, @SerialName("inactive") Inactive, @SerialName("rejected") Rejected; @@ -2423,6 +2424,7 @@ enum class RelayStatus { New -> generalGetString(MR.strings.relay_status_new) Invited -> generalGetString(MR.strings.relay_status_invited) Accepted -> generalGetString(MR.strings.relay_status_accepted) + AcknowledgedRoster -> generalGetString(MR.strings.relay_status_acknowledged_roster) Active -> generalGetString(MR.strings.relay_status_active) Inactive -> generalGetString(MR.strings.relay_status_inactive) Rejected -> generalGetString(MR.strings.relay_status_rejected) diff --git a/apps/multiplatform/common/src/commonMain/resources/MR/base/strings.xml b/apps/multiplatform/common/src/commonMain/resources/MR/base/strings.xml index 9630c61004..4ea07d4608 100644 --- a/apps/multiplatform/common/src/commonMain/resources/MR/base/strings.xml +++ b/apps/multiplatform/common/src/commonMain/resources/MR/base/strings.xml @@ -3022,6 +3022,7 @@ new invited accepted + acknowledged roster active inactive rejected diff --git a/bots/api/TYPES.md b/bots/api/TYPES.md index 4f3df9d365..b38e3f6c6e 100644 --- a/bots/api/TYPES.md +++ b/bots/api/TYPES.md @@ -87,6 +87,7 @@ This file is generated automatically. - [FileProtocol](#fileprotocol) - [FileStatus](#filestatus) - [FileTransferMeta](#filetransfermeta) +- [FileType](#filetype) - [Format](#format) - [FormattedText](#formattedtext) - [FullGroupPreferences](#fullgrouppreferences) @@ -2100,6 +2101,15 @@ NO_FILE: - cancelled: bool +--- + +## FileType + +**Enum type**: +- "normal" +- "roster" + + --- ## Format @@ -2316,6 +2326,7 @@ MemberSupport: - uiThemes: [UIThemeEntityOverrides](#uithemeentityoverrides)? - customData: JSONObject? - groupSummary: [GroupSummary](#groupsummary) +- rosterVersion: int64? - membersRequireAttention: int - viaGroupLinkUri: string? - groupKeys: [GroupKeys](#groupkeys)? @@ -3317,6 +3328,7 @@ Cancelled: - xftpRcvFile: [XFTPRcvFile](#xftprcvfile)? - fileInvitation: [FileInvitation](#fileinvitation) - fileStatus: [RcvFileStatus](#rcvfilestatus) +- fileType: [FileType](#filetype) - rcvFileInline: [InlineFileMode](#inlinefilemode)? - senderDisplayName: string - chunkSize: int64 @@ -3441,6 +3453,7 @@ ParseError: - "new" - "invited" - "accepted" +- "acknowledgedRoster" - "active" - "inactive" - "rejected" diff --git a/bots/src/API/Docs/Types.hs b/bots/src/API/Docs/Types.hs index 7b268f4ec5..6313c68838 100644 --- a/bots/src/API/Docs/Types.hs +++ b/bots/src/API/Docs/Types.hs @@ -270,6 +270,7 @@ chatTypesDocsData = (sti @FileProtocol, STEnum' (consLower "FP"), "", [], "", ""), (sti @FileStatus, STEnum, "FS", [], "", ""), (sti @FileTransferMeta, STRecord, "", [], "", ""), + (sti @FileType, STEnum' (consLower "FT"), "", [], "", ""), (sti @Format, STUnion, "", ["Unknown"], "", ""), (sti @FormattedText, STRecord, "", [], "", ""), (sti @FullGroupPreferences, STRecord, "", [], "", ""), @@ -489,6 +490,7 @@ deriving instance Generic FileInvitation deriving instance Generic FileProtocol deriving instance Generic FileStatus deriving instance Generic FileTransferMeta +deriving instance Generic FileType deriving instance Generic Format deriving instance Generic FormattedText deriving instance Generic FullGroupPreferences diff --git a/bots/src/API/TypeInfo.hs b/bots/src/API/TypeInfo.hs index 8dfba2bbb0..c5a3b11953 100644 --- a/bots/src/API/TypeInfo.hs +++ b/bots/src/API/TypeInfo.hs @@ -170,6 +170,7 @@ toTypeInfo tr = "DBEntityId'" -> ST TInt64 [] "Integer" -> ST TInt64 [] "Version" -> ST TInt [] + "VersionRoster" -> ST TInt64 [] "BoolDef" -> ST TBool [] "PQEncryption" -> ST TBool [] "PQSupport" -> ST TBool [] diff --git a/docs/protocol/channels-overview.md b/docs/protocol/channels-overview.md index d4cd2d2965..7a55f8b6e5 100644 --- a/docs/protocol/channels-overview.md +++ b/docs/protocol/channels-overview.md @@ -182,7 +182,7 @@ The low-level protocol supports multiple owners from the initial release. The ap - **Subscribers** connect to relays and receive content. They cannot send messages by default, but can be given posting rights. -Additional roles (moderator, admin, member, author) exist in the hierarchy and are inherited from the group protocol. +Additional roles (moderator, admin, member, author) exist in the hierarchy and are inherited from the group protocol. The owner-signed roster tracks the promoted set - members, moderators, and admins; subscribers are observers until an owner promotes them. For protocol-level detail - wire formats, message types, signing and verification mechanics, delivery pipeline - see [SimpleX Channels Protocol](./channels-protocol.md). @@ -242,6 +242,7 @@ This threat model assumes the [SimpleX network threat model](https://github.com/ - Undetectably substitute content - subscribers on honest relays receive the original. - Alter the channel's authoritative state on the owner's device. - Substitute the channel profile or impersonate an owner - these require valid signatures. +- Replay an old roster or role change to re-elevate a removed or demoted member for existing subscribers - they reject anything older than the roster version they applied (a new joiner with no prior roster can still be served an old one, until it syncs from another relay). - Redirect subscribers to a different channel - the entity ID is validated across link and profile. - Determine subscriber identity or network address - inherited from SMP transport. - Correlate subscriber participation across channels - each connection uses independent SMP queues. The subscriber chooses their SMP router independently, so collusion between a relay and the relay's SMP router does not compromise connections through a different router. diff --git a/packages/simplex-chat-client/types/typescript/src/types.ts b/packages/simplex-chat-client/types/typescript/src/types.ts index 597f2f5503..323f174f91 100644 --- a/packages/simplex-chat-client/types/typescript/src/types.ts +++ b/packages/simplex-chat-client/types/typescript/src/types.ts @@ -2369,6 +2369,11 @@ export interface FileTransferMeta { cancelled: boolean } +export enum FileType { + Normal = "normal", + Roster = "roster", +} + export type Format = | Format.Bold | Format.Italic @@ -2599,6 +2604,7 @@ export interface GroupInfo { uiThemes?: UIThemeEntityOverrides customData?: object groupSummary: GroupSummary + rosterVersion?: number // int64 membersRequireAttention: number // int viaGroupLinkUri?: string groupKeys?: GroupKeys @@ -3635,6 +3641,7 @@ export interface RcvFileTransfer { xftpRcvFile?: XFTPRcvFile fileInvitation: FileInvitation fileStatus: RcvFileStatus + fileType: FileType rcvFileInline?: InlineFileMode senderDisplayName: string chunkSize: number // int64 @@ -3806,6 +3813,7 @@ export enum RelayStatus { New = "new", Invited = "invited", Accepted = "accepted", + AcknowledgedRoster = "acknowledgedRoster", Active = "active", Inactive = "inactive", Rejected = "rejected", diff --git a/packages/simplex-chat-python/src/simplex_chat/types/_types.py b/packages/simplex-chat-python/src/simplex_chat/types/_types.py index 9546bfe5a8..25825d8f98 100644 --- a/packages/simplex-chat-python/src/simplex_chat/types/_types.py +++ b/packages/simplex-chat-python/src/simplex_chat/types/_types.py @@ -1662,6 +1662,8 @@ class FileTransferMeta(TypedDict): chunkSize: int # int64 cancelled: bool +FileType = Literal["normal", "roster"] + class Format_bold(TypedDict): type: Literal["bold"] @@ -1822,6 +1824,7 @@ class GroupInfo(TypedDict): uiThemes: NotRequired["UIThemeEntityOverrides"] customData: NotRequired[dict[str, object]] groupSummary: "GroupSummary" + rosterVersion: NotRequired[int] # int64 membersRequireAttention: int # int viaGroupLinkUri: NotRequired[str] groupKeys: NotRequired["GroupKeys"] @@ -2550,6 +2553,7 @@ class RcvFileTransfer(TypedDict): xftpRcvFile: NotRequired["XFTPRcvFile"] fileInvitation: "FileInvitation" fileStatus: "RcvFileStatus" + fileType: "FileType" rcvFileInline: NotRequired["InlineFileMode"] senderDisplayName: str chunkSize: int # int64 @@ -2667,7 +2671,7 @@ class RelayProfile(TypedDict): shortDescr: NotRequired[str] image: NotRequired[str] -RelayStatus = Literal["new", "invited", "accepted", "active", "inactive", "rejected"] +RelayStatus = Literal["new", "invited", "accepted", "acknowledgedRoster", "active", "inactive", "rejected"] ReportReason = Literal["spam", "content", "community", "profile", "other"] diff --git a/plans/2026-05-26-public-groups-via-relays-unified.md b/plans/2026-05-26-public-groups-via-relays-unified.md new file mode 100644 index 0000000000..91f7c3a6ce --- /dev/null +++ b/plans/2026-05-26-public-groups-via-relays-unified.md @@ -0,0 +1,227 @@ +# Plan: Public groups via relays (unified) + +Date: 2026-05-26 + +This plan is self-contained. It supersedes `2026-05-08-public-groups-via-relays.md` and folds in the privileged-roster mechanism understood since. Implementers should work from this document alone. File:line anchors are current as of this date — confirm before editing. + +## Overview + +Channels (shipped) are relay-mediated groups where the relay forwards content from owners only; subscribers are pinned to `GRObserver` and cannot post. Public groups are the second value of the same two-axis design: same wire, same transport, but every member can post, and there are moderators/admins who can act. + +| `useRelays` | `groupType` | Name | Posting | Notes | +|---|---|---|---|---| +| `false` | (none) | Secret group | all members | today's P2P full-mesh group | +| `true` | `GTChannel` | Channel | owners only | shipped; subscribers anonymous to each other | +| `true` | `GTGroup` | **Public group** | every member | **new**; member-to-member DMs deferred | +| `true` | `GTUnknown _` | (refuse) | — | newer-client link seen by older client → refuse to join | + +Three concepts, kept distinct: **transport** = `useRelays` (topology, batch, signatures, delivery); **governance** = `groupType` (who may post, member affordances); **joiner role** = the default role new joiners get, set by the owner on the signed profile. + +Two things make public groups work and neither exists today: + +1. **The joiner role must come from the owner-signed profile**, not a relay-side global config — otherwise relays disagree on the default role. (Section 2.) +2. **Members must learn who the moderators/admins are — their identity, signing key, and role — in a way a relay cannot forge.** Today a relay can fabricate a moderator (Section 1, Problem). This is the load-bearing piece and ships first. + +`GTGroup`, `PublicGroupProfile`, `useRelays'`, and the relay/signing/forwarding machinery already exist (anchors below). The work is additive. + +--- + +# Section 1 — Privileged roster (`XGrpRoster`) + +This is a **general relay-group mechanism**: public groups use it now; channels inherit it for their multi-owner/moderator future. It is the first, self-contained task. + +## 1.1 Problem and trust model + +Owners are trusted because their keys come from the **link**, never the relay: on join, `createLinkOwnerMember` (`Store/Groups.hs:3072`) writes each owner's `member_pub_key` from the link's `OwnerAuth` chain, validated against `publicGroupId == sha256(rootKey)`. `xGrpMemIntro` even nulls the key when `mRole == GROwner` (`Subscriber.hs:3029`): *"owner key must only come from link data, not from relay intro."* + +Non-owner privileged members have no such anchor. Today `xGrpMemIntro` **keeps** the relay-asserted key for `GRModerator`/`GRAdmin`, and `introduceInChannel` (`Internal.hs:1165`) introduces all of `getGroupModerators` (which returns mod+admin+owner, `Store/Groups.hs:1190`). So a malicious relay can assert "X is a moderator, here is X's key," and the subscriber will then trust the relay-chosen key to verify X's signed administrative actions (`XGrpMemDel`, `XGrpMemRestrict`, `XGrpMemRole`). The `when (memRole > GRMember)` gate in `xGrpMemNew` (`Subscriber.hs:2957`) blocks the *dissemination* path but not the *join-time intro* path — the protection is half-applied. Dormant for channels (single-owner broadcast), activated by public groups. + +**Conclusion:** a non-owner privileged member's `(memberId, name, key, role)` must be **owner-signed**, exactly like owners are link-signed. That is the roster. + +## 1.2 Wire event and signing + +New event `XGrpRoster` (add to `ChatMsgEvent`, `Protocol.hs:422`), JSON-encoded, carrying: + +- `version :: Word32` — monotonic, from 0. +- `roster :: [{ memberId, name, key, role }]` — the complete current privileged set, `role ∈ {GRModerator, GRAdmin}`. `name` is a display name only (to avoid ugly "unknown member" records, as `XGrpMsgForward` already carries one). Owners are **not** in the roster. + +Add `XGrpRoster_` to `requiresSignature` (`Protocol.hs:1231`) ⇒ `True`. This makes the owner sign it via the existing `groupMsgSigning` (`Internal.hs:1962`, binding `CBGroup <> (publicGroupId, ownerMemberId)`, key `groups.member_priv_key`) and makes recipients require a valid owner signature via `withVerifiedMsg` (`Subscriber.hs:3461`). No new crypto. + +**The handler MUST assert the resolved author is an owner** (`memberRole' author == GROwner`). `withVerifiedMsg` verifies the signature against the *author's* key, and the relay chooses `fwdSender` — so without this assertion a relay could route a roster as a member whose key it controls and the signature would verify. Owners exist on recipients only via the link `OwnerAuth` chain, so a relay can neither fabricate an owner nor sign as one. This assertion is the crux of the roster's integrity. + +## 1.3 Authoritative model — versioned snapshot, latest-wins, TOFU keys + +Each `XGrpRoster` is the complete current privileged set. Recipients treat the highest-version valid roster as authoritative for *who is privileged and their keys*; absence from the newest accepted roster means *not privileged* (reverts to the joiner default unless an accompanying `XGrpMemRole` sets a specific role — see 1.6). This is self-healing: a member who missed one change gets the full current state on the next roster. + +**Key handling is trust-on-first-use, pinned per `memberId`** (per entry): + +- `memberId` unknown, or known without a key → store the key (first sight, from the owner). Set name/role. +- `memberId` already has a key: + - same key → fine; update name/role. + - **different key → error.** Never overwrite; keep the old key; surface a suspicious-roster event. + +There is **no in-place key rotation**: a genuine re-key is modeled as a *new member* — the owner removes the old `memberId` (`XGrpMemDel` + roster drop) and adds a new `memberId` with the new key. Consistent with SimpleX's no-mutable-identity stance, and with the `xGrpMemNew` rule in 1.5. + +**Anti-replay / rollback.** The relay cannot forge a signed roster but can replay an older one. + +- The current roster `version` is anchored in the owner-controlled link mutable data (which already holds `OwnerAuth`, profile, subscriber count). The relay cannot forge it. A roster change that bumps the version also updates link data. **Status:** the write side is implemented; the join-time **read/detect** is deferred — comparing the anchor against the relay-served roster at join is racy (the forwarded roster may not have arrived yet → false positives), so correct staleness detection must be triggered by roster arrival, not at join. The residual new-joiner rollback gap below stands; the hard anti-replay (member + relay) is in place. +- **Existing members** reject any roster with `version` below the highest already accepted — full anti-replay for them. +- **New joiners** process the latest version the relay actually serves, even if it lags the link anchor, so honest relay propagation lag never blocks a join. The anchor is used for staleness *detection*, not a hard gate, in v1. +- **Documented residual gap:** a stale/malicious relay can serve an old-but-valid roster to a brand-new joiner. Documented in `channels-overview.md` with future mitigations: escalate verification to an owner, or have the client compare the relay's version to the link anchor and refuse/retry above a staleness threshold. + +## 1.4 Cap on the privileged set + +Bound the privileged set so the signed roster always fits one message — never paginate. A hard **cap on moderators + admins** (owners are on the link, not counted), enforced **at promotion time** on the owner: refuse to elevate beyond the cap with a clear error, so the roster is always constructible as one signed message. + +Derive the number from the single encoded-message budget (verify the exact constant — the encoded-message-length limit minus signature + JSON overhead) divided by worst-case entry size. With `{memberId, name, key, role}` entries this is comfortably in the tens-to-~100 range; pick the final value from the measured worst-case entry. + +## 1.5 Remove the dissemination gates; gate on the roster instead + +Because the relay forwards the roster on join **before anything else**, a privileged member's key/role is owner-established before any relay-asserted introduction arrives. So the relay may now disseminate privileged members' full profiles like any other member, and the gates come out: + +- **Remove** the `when (memRole > GRMember)` throw in `xGrpMemNew` (`Subscriber.hs:2957`). +- **Remove** the forward-side `memberRole' s <= GRMember` filter in `sendBodyToMembers` (confirm exact site in `Subscriber.hs`). +- **Replace** with a roster check in `xGrpMemNew`: for an announcement of a privileged role, require that a member record with that `memberId` already exists **with that privileged role** (roster-established). If found → accept the **profile** update only; **never overwrite `key`, `memberId`, or `role`** (roster-authoritative). If not found → reject (a relay conjuring a privileged member not in the roster). + +`introduceInChannel` forwards the cached roster to the new member first, then proceeds; it may still announce the newcomer to moderators and maintain the relations vector. The per-mod `XGrpMemIntro` carrying keys is no longer the trust path for privileged members. + +## 1.6 Delivery — what is sent, when, to whom + +Two orthogonal axes, and the roster owns only one: + +- **Axis A — privileged set + keys** (who is mod/admin, their key/name/role): owned by the roster. +- **Axis B — group-membership lifecycle** (removed / restricted / left): owned by `XGrpMemDel` / `XGrpMemRestrict` / `XGrpLeave`, unchanged, applies to everyone. + +Dispatch by whether an operation touches the {moderator, admin} set (the *roster roles*). Owner is not a roster role — promotion to/from owner uses `XGrpMemRole` (+ link `OwnerAuth`), never the roster. + +**`APIMembersRole` (role change, possibly batched):** + +- Emit `XGrpMemRole(M, target)` for each affected member exactly as today — this conveys the exact target role for any role, including owner and specific ≤member roles. +- **Additionally** build and **broadcast** the full signed roster (version++) **iff the {mod, admin} set changed** (any member entered, left, or moved within mod/admin). +- A mixed batch fires both. Example: target=member over `[moderator M, observer O]` → `XGrpMemRole` for both (exact roles) **and** a roster (M left the set). The promotion case `XGrpMemRole(M, mod)` + roster is mildly redundant on the role field and harmless; the key comes only from the roster. + +The broadcast reuses the existing owner-admin-event forwarding (`shouldForward = isUserGrpFwdRelay gInfo && not forwarded`, `Subscriber.hs:3191`). Privileged-set changes are rare administrative events, so this is on the order of an `XGrpInfo`/`XGrpPrefs` broadcast — not per-message. The broadcast roster is the **self-healing** mechanism: a member who missed a prior `XGrpMemRole` is corrected by the snapshot. + +**`XGrpMemDel` (removal):** broadcast `XGrpMemDel` as today (it neutralizes the member for existing members). If the removed member was privileged, the owner sends a refreshed roster (version++), which the relay broadcasts like any other version bump (see below). + +**Relay broadcast rule — always broadcast on a strict version bump.** A newer-version roster is applied, cached, and broadcast to current members, uniformly — promotion, key/role change, demotion, or privileged removal. We do **not** try to make removal cache-only: a demotion (member stays in the group) is indistinguishable from a deletion at the roster-diff level, so suppressing the broadcast would silently drop the self-healing the spec requires for role changes. The only cost is one redundant roster broadcast alongside `XGrpMemDel` on the rare deletion of a privileged member — and even there the broadcast is not waste, since it self-heals the privileged-set side if the `XGrpMemDel` was lost. (This supersedes an earlier "cache-only on deletion" idea, which could not be implemented without either a wire flag or a fragile demotion-vs-deletion diff.) + +**On relay add:** the owner sends the current roster to the new relay so it can serve joiners. + +**Joiners:** the relay forwards the cached roster at join (1.5). + +**Short offline gaps** are covered by ordinary queued delivery: the role-change roster broadcast sits in the member's SMP queue (FIFO) ahead of any later moderator events, so it is processed first on reconnect. + +**Quota-blocked catch-up.** A member offline long enough to fill its queue causes the relay to be quota-blocked — the broadcast may never have been enqueued, so naive queueing would leave the member without the current roster, rejecting moderator events indefinitely. Fix: when the queue drains, the relay **sends the current cached roster ahead of the resumed backlog**, so the member holds the current privileged set before processing the events it couldn't verify. + +The hook is confirmed: QCONT is delivered to the **sender** when the recipient drains (`simplexmq Agent.hs:3402`), and the relay receives it per subscriber in the group-member connection handler (`Subscriber.hs:1215` — `continueSending` + `sendPendingGroupMessages user gInfo m conn`, with `gInfo`/`m`/`conn` in scope; a relay→subscriber connection is a group-member connection). Implementation must ensure **roster-first ordering** relative to both the agent-level `continueSending` flush and the re-driven delivery tasks, and gate the extra send on a per-member "delivered roster version" so it fires only when the member is behind. + +The roster is **never** delivered through the profile-dissemination prepend. That path (`member_relations_vector` → `XGrpMemNew`) carries **profiles** only; with the gate removed (1.5), a privileged member's profile disseminates through it like any other member's, but only after the roster has established their key/role. Profile via prepend, key/role via roster — orthogonal, no double-prepend. + +## 1.7 Relay-side cache (the one new storage pattern) + +Relays already forward signed bytes verbatim (`encodeFwdElement` `Batch.hs:106`, `verifiedMsgParts` `Protocol.hs:1445`; `messages.msg_chat_binding` + `msg_signatures`; reconstructed in `toTask` `Delivery.hs:154`). What does **not** exist is "store the latest roster and re-emit to joiners" — `sendHistory` (`Internal.hs:1207`) reconstructs content and does *not* preserve signatures, so it is not a template. + +Add a small per-group cache holding the latest signed roster message bytes, plus the roster `version` as a **separate column** alongside them (so the relay compares versions without re-parsing the blob). On receiving `XGrpRoster` from an owner the relay: verifies the owner signature; **checks `version` strictly greater than the cached version** (lower → reject as rollback; equal → idempotent no-op); then updates its own member-role records, overwrites the cache + stored version, and (for a role-change-origin roster) creates a delivery task to all current members. On join, it forwards the cached bytes verbatim. + +The relay-side version check protects an **honest** relay's cache from being rolled back by a replayed signed roster — which in turn protects every joiner that relay serves. It does not constrain a **malicious** relay (it controls its own cache); that remains the documented new-joiner residual gap (1.3), bounded by the member-side check (1.3) and the link version anchor. + +## 1.8 Races and tests + +- **Promotion vs. action ordering.** A newly-promoted mod could act before its roster reaches a recipient ⇒ `RGEMsgBadSignature`. Covered for MVP by causal ordering (the roster is broadcast at promotion, before the mod learns of and acts on it), QCONT catch-up (item 7), and recipient tolerance (a rejected first action is re-sent; the next roster repairs trust). The fuller fix — the **roster-specific prepend** (prepend the cached signed roster ahead of a privileged member's forwarded action for recipients below the current version, reusing the item-7 delivered-version tracker, distinct from the `XGrpMemNew` profile prepend) — touches the hot per-recipient delivery loop that carries every forwarded message, so it is **deferred to a focused, separately-tested pass** rather than shipped untested. +- **Multi-owner roster signed by an unknown owner** (owner added after the recipient fetched the link): recipient cannot verify ⇒ buffer/refetch link. Cannot occur for single-owner MVP; flag for v7. +- **Roster vs. profile-update concurrency:** benign (different fields); verify the roster's relations-vector handling does not clobber the profile `MRIntroduced` semantics they share. + +Tests: relay-fabricated moderator key is rejected (forgery); promotion delivers a verifiable key; demotion via roster + `XGrpMemRole` reconciles; removed privileged member does not reappear for a new joiner; replayed older roster rejected by existing members; TOFU key-change rejected; batch `APIMembersRole` emits roster + `XGrpMemRole` correctly; self-healing after a dropped role event. + +## 1.9 Key anchors for Section 1 + +`ChatMsgEvent` `Protocol.hs:422`; `requiresSignature` `Protocol.hs:1231`; `groupMsgSigning` `Internal.hs:1962`; `withVerifiedMsg` `Subscriber.hs:3461`; `xGrpMemNew` `Subscriber.hs:2957`; `xGrpMemIntro` `Subscriber.hs:3015`; `introduceInChannel` `Internal.hs:1165`; `getGroupModerators` `Store/Groups.hs:1190`; `memberInfo` `Internal.hs:1187`; `createLinkOwnerMember` `Store/Groups.hs:3072`; `GroupKeys` `Types.hs:462`; `member_relations_vector` machinery in `Types/MemberRelations.hs` (`MemberRelation`, `MRIntroduced`, `IDSubjectIntroduced`, `setNewRelations`); forwarding `Batch.hs:106` / `Protocol.hs:1445` / `Delivery.hs:154`. New columns go in a **new tail migration** (`M20260222_chat_relays` is the *pattern* for relay group columns but is not the tail — never edit an applied migration; `M20260525_member_removed_at` is the current tail). + +--- + +# Section 2 — Joiner role on the signed profile + +Today the relay derives a joiner's role from `channelSubscriberRole` (`Controller.hs:161`, default `GRObserver` `Chat.hs:119`), a global config — so relays can disagree and the owner cannot set it per group. Move it onto the owner-signed profile. + +## 2.1 Types and helpers + +- Add `joinerRole :: Maybe GroupMemberRole` to `PublicGroupProfile` (`Types.hs:798`). No migration: JSON derives via `deriveJSON defaultJSON` with `omitNothingFields = True`, so `Nothing` is omitted on encode and a missing field decodes to `Nothing`. +- Add a `groupType` accessor and `isChannel` on `GroupInfo`/`GroupProfile`, and a resolver `joinerRoleFor :: GroupInfo -> GroupMemberRole` = `joinerRole` if set, else type-keyed default (`GTChannel → GRObserver`, `GTGroup → GRMember`, `GTUnknown _ → GRObserver`). Reuse the existing `publicGroupEditor`/`memberRole'` (`Types.hs:499`/`506`); do **not** introduce a profile-side `memberRole'` (name collision). + +## 2.2 Replace the global config + +Switch every `channelSubscriberRole` reader to `joinerRoleFor gInfo` and delete the config: `Controller.hs:161`, `Chat.hs:119`, `Commands.hs:2053`, `Commands.hs:2546`, `Subscriber.hs:3248`, `Subscriber.hs:4019`. Verify no out-of-tree consumer reads it. + +## 2.3 Command, preferences, defensive refusal + +- `APINewPublicGroup` (`Controller.hs:526`, handler `Commands.hs:2495`) gains `groupType` (default `GTChannel`) and optional `joinerRole` (default `joinerRoleFor` of the type); both written onto the constructed profile (today hardcodes `groupType = GTChannel` at `Commands.hs:2538`). +- Parameterize the channel-prefs parser by `GroupType`: Channel keeps its override (`support = OFF`); Public group and `GTUnknown` use secret-group defaults (member-to-moderator escalation is expected). Do not duplicate the parser — parameterize it. +- `directMessages` stays ON by inheritance but is dormant in any relay-mediated group; hide its toggle when `useRelays` and refuse `xGrpDirectInv` defensively when `useRelays'` (`Subscriber.hs:3321`, currently ungated): emit `messageError`, create no contact. + +## 2.4 Compatibility + +Existing channels: no `joinerRole` ⇒ falls back to `GRObserver` for `GTChannel`. No data migration. Older relays without this change resolve the joiner role from their global config — warn the owner at create time if a selected relay's chat version is below the public-groups version (soft warning, not a block). + +--- + +# Section 3 — Backend tests + +Public-group helpers paralleling the channel helpers, plus: + +1. Member posts; all members receive it (no "unknown member" lines). 2. Multi-author session: no "unknown member" anywhere. 3. Member edit/delete/react forwarded to all. 4. `xGrpDirectInv` refused under `useRelays` (no contact created); repeat for Channel. 5. Blocked member's messages not forwarded. 6. Multi-relay delivery with cross-relay dedup. 7. History on join. 8. `asGroup=true` from a non-owner rejected. 9. Receipts disabled above the member limit. 10. Older client refuses `groupType = "group"` (needs-newer-version). 11. Incognito member posting attributes the incognito profile. 12. `joinerRole` propagates and defaults correctly (Channel→observer, Public group→member; absent→type default). Plus the roster tests in 1.8. + +--- + +# Section 4 — Clients (iOS, then Kotlin) + +## 4.1 Audit `useRelays` vs `isChannel` (structural commit, on its own) + +~70–75 sites per platform branch on `useRelays` as a proxy for "is a channel." Split per a mechanical rule and land as a pure structural commit (no behavior change in the same diff): + +- **Transport** (keep `useRelays`): link/relay management, owner-can't-leave-own-relay-group, relay-status indicator, incognito flag, typing-state gating, member-DM-affordance suppression. +- **Governance** (switch to `isChannel`): titles, "subscribers" vs "members" framing, "Channel preferences" labels, channel-style vs group-style member display. + +## 4.2 Model and behavior + +- Model: add `group` arm to `GroupType` (with serializers); `joinerRole`, `groupType`, `isChannel` accessors. Authoritative role resolution stays in Haskell; clients use it for display. +- **Narrow the existing refusal:** PR #7009 (merged to `stable`) added `GLPUpdateRequired` for `groupType /= GTChannel` (`Controller.hs:1051`, `Commands.hs` `unsupportedGroupType`). Change it to refuse only `GTUnknown _`; `GTGroup` proceeds to a public-group join. +- Create flow: one view with a Channel / Public-group segmented control (default Channel) driving the title, link-step label, success screen, and two API params (`groupType`, `joinerRole` = observer for Channel, member for Public group — no role picker in MVP). Hide `directMessages` in create prefs when `useRelays`. Render the threat-model note below the title for Public groups (text in Section 5). +- Suppress the member-tap "send direct message" affordance in any relay-mediated group. +- Members view shows the relay-known roster; header "subscribers" (channel) vs "members" (public group). No filtered view in MVP. +- Strings/icons: ~5–10 `_public_group` string keys mirroring channel forms; reuse `group_members_*` for "members" framing; a distinct Public-group icon (pending design). Kotlin-only: chat-list filter chips place Public groups in the "groups" bucket. + +Platforms ship independently (API defaults are backward compatible). + +--- + +# Section 5 — Threat model, docs, release + +Fold into `channels-overview.md` (public groups inherit the entire channel threat model; deltas only): + +- **A relay can fabricate content as any member** (channels: only as owners). Content (`XMsgNew`/`Update`/`Del`/`React`) is unsigned by design for deniability (`requiresSignature` lists roster/admin events only); broader blast radius in public groups. Detectable via cross-relay consistency. Mitigation is the future opt-in content signing on the channel roadmap; the create-flow note states the trade-off ("a malicious relay could change or fabricate messages from any member — pick relays you trust, or use a secret group for peer-to-peer integrity"). +- **Roster rollback for new joiners** (1.3): documented bounded delta + future mitigations. +- Unchanged: relay cannot impersonate an owner or substitute the profile (signed events, validated entity ID); `joinerRole` and the privileged roster are owner-signed, so the relay cannot unilaterally change a joiner's default role or fabricate a moderator. + +Document `XGrpRoster` (event, signing, versioning, TOFU, delivery) in `channels-protocol.md`. Bump the chat protocol version (the public-groups version that gates `GTGroup` and `joinerRole`). Release notes include the relay-fabrication line. + +--- + +# Sequencing + +1. **Section 1 — privileged roster** (backend). The core; gates the rest of the value. Land the gate-removal/roster-check and the event together so no half-applied trust window exists. +2. **Section 2 — joiner role on profile** (backend). Independent of Section 1. +3. **Section 3 — backend tests** (alongside 1–2). +4. **Section 4 — clients**: audit (structural) first, then iOS, then Kotlin. +5. **Section 5 — docs/version/release** with the backend release. + +Backend (1–3) gates the clients. iOS and Kotlin are independent of each other. + +--- + +# Out of scope (deferred) + +- **Member-to-member DMs in relay-mediated groups.** Prohibited here (client affordance suppressed, receive-path refusal, relay does not forward `XGrpDirectInv` — so no relay-visible DM graph). A future plan must re-derive the threat model: relay-forwarded DMs would expose (sender, target, time) metadata; relay-blind rendezvous via per-member queues is the privacy-preserving alternative. +- **`memberAdmission` on relay-mediated join** (hardcoded `GAAccepted` bypasses review/captcha — generic relay-groups gap). +- **Roster filter/pagination in the members view** for very large groups. +- **Multi-owner** roster signing/verification and owner promotion via link `OwnerAuth` (v7); **opt-in content signing** (v7 roadmap); **full anti-rollback for new joiners** (link-version hard gate). diff --git a/plans/2026-06-01-roster-members-multipart.md b/plans/2026-06-01-roster-members-multipart.md new file mode 100644 index 0000000000..aca98c4698 --- /dev/null +++ b/plans/2026-06-01-roster-members-multipart.md @@ -0,0 +1,220 @@ +# Roster: regular members + larger rosters via inline file + +Date: 2026-06-01 (revised). Extends Section 1 of `2026-05-26-public-groups-via-relays-unified.md`. + +> Anchors below were re-verified against `f/public-groups-members-in-roster` **after** PR #7036 (`core: signed XMember in public group`, commit `0773ccd05`) merged in. Most line numbers shifted; the header-fits check uses `maxEncodedMsgLength = 15602` (now `Protocol.hs:905`). Confirm before editing. + +## Reconciliation with PR #7036 (merged into this branch) + +PR #7036 landed things this plan predates. Read this section first — it changes the relay flow the plan builds on. + +**Renames (the plan's old names no longer exist — grep will miss them):** + +| Was | Now | Location | +|---|---|---| +| `forwardCachedRoster` | `forwardGroupRoster` | `Internal.hs:1172` | +| `setCachedGroupRoster` | `setGroupRoster` | `Store/Groups.hs:1415` | +| `getCachedGroupRoster` | `getGroupRoster` | `Store/Groups.hs:1428` | +| `setRelayLinkAccepted` | `setRelayKey` (no longer sets relay status) | `Store/Groups.hs:1543` | + +"Cached roster" is now "saved roster" throughout; the `roster_msg_*` columns and the `roster_blob` this plan adds are unchanged in intent. + +**Roster version baseline is now `Just 0`, not NULL, for relay groups.** `createNewGroup` initializes `roster_version = Just (VersionRoster 0)` for `useRelays` groups (`Store/Groups.hs:365, 427`), and an old channel materializes `0` the first time a relay connects (`Subscriber.hs:905-910`). Consequences: the first promotion bumps `0 -> 1` (not NULL -> 0); the owner and already-onboarded members/relays compare against a real `0`, **but a relay's own `roster_version` is still NULL the first time it receives v0** — applying v0 from NULL is exactly what lets it ack and become publishable (verified: today's `maybe False (newVer <=) (rosterVersion gInfo)` at `Subscriber.hs:3207` applies v0 only because the relay is at `Nothing`; `Just 0` would reject it and the relay would hang `RSInvited`). So the multipart version guards MUST be `Maybe`-comparisons that treat `Nothing` as below `0` (spelled out under *Header handler* and *Completion*); and the **empty roster (v0)** must round-trip through the header+blob path (a 2-byte blob: `Word16` count `0`, one chunk, `chunkSize >= fileSize` -> `RcvChunkFinal` on chunk 1). The empty/small blob is the *common* case for relay onboarding, not an edge case. + +**NEW relay roster-ack handshake (`XGrpRosterAck`) — this plan MUST integrate it.** PR #7036 added `XGrpRosterAck :: VersionRoster -> Maybe Text` (`Protocol.hs:499`; tag `x.grp.roster.ack`; NOT in `requiresSignature` — it rides the relay's authenticated connection). Flow: + +- On relay connect (`GCInviteeMember` + `isRelay`) the owner **always** sends the current roster via `sendGroupRosterToRelay`, and the relay stays `RSInvited` (**unpublishable**) until it acks (`Subscriber.hs:900-910`). +- The relay applies the roster in `relayApplyRoster` and, **only while its own status is `RSAccepted`**, sends `XGrpRosterAck author newVer Nothing` (or an error string) — `Subscriber.hs:3210-3221`, `sendRosterAck` at `3276`. +- The owner's `xGrpRosterAck` handler (`Subscriber.hs:3279-3297`) transitions the relay `RSInvited -> RSAccepted` (and publishes via `setGroupLinkDataAsync`) on a version-matching success ack, or `RSInvited -> RSRejected` on error. + +Impact on the multipart design (a REQUIRED change, not just a rename): under this plan the header only *starts* a transfer, so on a relay the **apply, `setGroupRoster`, the ack, AND the broadcast all move to blob completion**, not header receipt. The relay becoming publishable now **gates on the blob transfer completing**: header -> chunks -> verify digest -> `processRoster` + `setGroupRoster` -> (`relayOwnStatus == RSAccepted`) `sendRosterAck` -> broadcast. This is the desired fail-safe (an unpublishable relay can't serve a half-applied roster), but it puts owner->relay blob delivery on the relay-onboarding critical path, not just self-healing. The error branch MUST still ack-with-error (digest mismatch / parse failure -> `sendRosterAck author newVer (Just "...")`) so the owner marks the relay `RSRejected` instead of leaving it hung at `RSInvited`. The current `relayApplyRoster` to fork is `tryAllErrors (setRoster sm)`, where `setRoster` = `processRoster` + `setGroupRoster` (`Subscriber.hs:3205-3228`); the multipart version splits this across header (write `roster_pending_*`) and completion (run `setRoster` + ack + broadcast). + +## Goal + +Let owners promote channel subscribers to **regular members** who can post, and carry more named members than fit one message. + +The JSON roster already exists (event, signing, relay cache, TOFU apply, broadcast, join forward, QCONT). This plan **widens the roster set to include plain members and changes the delivery** to a binary blob over the inline file transfer; the apply logic (`processRoster`) is reused. + +The member list moves out of the `XGrpRoster` message into a binary blob sent over the existing inline file transfer. `XGrpRoster` becomes a small signed header (version + the blob's size and digest). + +## Roster set: the promoted set {member, mod, admin} + +Owners stay on the link, never in the roster. Two edits, then every gate follows. + +**1. Widen `isRosterRole`** (`Internal.hs:1237`) to `{GRMember, GRModerator, GRAdmin}`. Every call site wants the promoted set, so this single edit covers: + +- `validateGroupRoster` filter (`Internal.hs:1243`) — fixes the bug where member entries are dropped. +- `buildGroupRoster` filter (`Internal.hs:1255`). +- promotion gates / cap / trigger / counts (`Commands.hs:2737, 2739, 2746, 2762, 2763, 2768`); update the cap error text at `2740`. +- owner-remove roster refresh (`Commands.hs:2888`, guarded by `anyPrivilegedRemoved` computed from `isRosterRole` at `2899`) — so removing a plain member, not just a mod/admin, refreshes the roster. +- receive gates: `xGrpMemNew` (`Subscriber.hs:3011/3026/3045`) and `xGrpMemRole` owner-only (`3185`). +- **join key-proof gate (NEW in PR #7036, `Subscriber.hs:1620`, `memberJoinRequestViaRelay`)**: a join claiming a `memberId` already roster-established as `isRosterRole` must prove possession of the pinned key (signature + `memberPubKey` match + `viaRelay == this relay's memberId`). Widening to members **extends this proof to promoted members** — a promoted member re-connecting through a relay must sign its `XMember` with the roster-pinned key. This is correct and desirable (it is the receive-side counterpart of the promote-time key invariant in *Known limitations*), and it composes with PR #7036's `acceptGroupJoinRequestAsync existingMem_` path that attaches the connection to the existing roster record. Confirm the promoted member signs its join `XMember` (it does — `encodeXMemberConnInfo`, `Internal.hs`). + +**2. Split the role query.** `getGroupRosterMembers` (`Store/Groups.hs:1215`) currently serves two now-diverging needs: + +- **Build / revert** wants the promoted set. Redefine `getGroupRosterMembers` to `member_role IN (GRMember, GRModerator, GRAdmin)` (current members). Callers: `bumpAndBroadcastRoster` (`Internal.hs:2175`), `sendGroupRosterToRelay` (`2188`), and the `processRoster` revert set `currentPriv` (`Subscriber.hs:3245`). Build and revert MUST be the same query, or a dropped member is never reverted. +- **`introduceInChannel`** (`Internal.hs:1188`) wants only the moderation set (mod+admin). Widening it would announce every joiner to every member and introduce every member to every joiner (traffic + anonymity blowup). Reuse the existing `getGroupModerators` (`Store/Groups.hs:1204-1209`, returns mod+admin+owner) rather than adding a function: keep `getGroupOwners` for the owner-first intro, and take mod+admin as `getGroupModerators` minus owners. **Re-apply `filter memberCurrent`** — `getGroupModerators` does NOT filter current members (unlike the old `getGroupRosterMembers`), so without it a removed or left moderator would be introduced to joiners. Members are learned from the roster blob, not introductions. + +**Owner-only (confirmed decision).** Only the owner changes any roster role. The alternatives were considered and rejected for v1 — letting a mod/admin set member roles would need either the owner co-signing rosters from a mod/admin (owner round-trip + load) or a separate roster-signing key trusted from mod/admin (broader trust surface) — so owner-only keeps the single owner-key trust anchor. + +**Leave and owner-remove differ.** This plan **removes** the `xGrpLeave` roster-bump block (`Subscriber.hs:3439`): since `isRosterRole` is widened, it would otherwise fire `bumpAndBroadcastRoster` on every plain-member leave. So a member **leave** does NOT bump the roster — the leave is the membership axis (`XGrpLeave` neutralizes the member on the relay). An owner **remove** (`APIRemoveMembers`) DOES still bump via `bumpAndBroadcastRoster` (`Commands.hs:2888`, widened to cover plain members). `bumpAndBroadcastRoster` thus stays only for promotion (`APIMembersRole`) and owner-remove. + +## Wire: signed header + unsigned blob + +**Authoritative metadata is in the signed header.** `version`, blob `fileSize`, and `fileDigest` all live in the owner-signed `XGrpRoster`; the unsigned `BFileChunk`s carry no authoritative metadata. (This is why "total parts in the unsigned part", an earlier review question, is a non-issue here.) + +- **Header**: `XGrpRoster { version :: VersionRoster, fileInv :: InlineFileInvitation }`, JSON, signed, forwarded. `InlineFileInvitation { fileSize, fileDigest :: FD.FileDigest }` is a lean `FileInvitation` (no name/connReq/inline/descr; always inline). Tiny; fits `maxEncodedMsgLength` (15602, `Protocol.hs:905`). +- **Blob**: the binary member list. `RosterMember { memberId, key, role, privileges :: Word16 }` — drop `name`, add `privileges` (reserved: always `0`, parsed and ignored in v1). ~60 B/entry. Members get a placeholder name from `nameFromMemberId`; real profiles arrive on first post. +- **Serializer/parser**: a binary codec for the blob (a `Word16`-count-prefixed `[RosterMember]`); `RosterMember` becomes binary-only. Full code in *Blob format* below. Owner serializes → digest → chunks; receiver concatenates chunk bytes → verifies the digest → parses. +- **Cap** `maxGroupRosterSize` → **256** (tunable). Enforce at promotion over the promoted set (`Commands.hs:2739`, via the widened predicate); the receive-side entry-count bound is the parser alone (`rosterBlobP`'s `n > maxGroupRosterSize`); reject a signed `fileSize > cap × max-entry-size` before creating a file. Roster files are exempt from the inline `offer/receiveChunks` ceiling (at 256 ≈ 15 KB the blob is about one `fileChunkSize` chunk; the multipart path handles two if role words push it over). + +**Type changes.** + +- `GroupRoster` (`Protocol.hs:372-376`): `{version, roster :: [RosterMember]}` → `{version, fileInv :: InlineFileInvitation}`. It stays JSON (the signed header), so `InlineFileInvitation` needs a JSON instance; update its stale doc comment ("Owner-signed snapshot of the privileged (moderator/admin) set"). +- `RosterMember` (`Protocol.hs:378`): drop `name`, add `privileges :: Word16`; remove `deriveJSON` (`Protocol.hs:812`) — binary-only now — and add the `Encoding` below. `buildGroupRoster`'s constructor (`Internal.hs:1255`, currently `name = memberShortenedName m`) drops the `name` field; the consumer side already maps to `nameFromMemberId`. +- `validateGroupRoster` (`Internal.hs:1241-1242`): was `GroupRoster -> GroupRoster` over `.roster`; now `[RosterMember] -> [RosterMember]`, run on the parsed blob. + +### Blob format (serializer / parser) + +`RosterMember` is **binary-only** (carried in the blob, never in a JSON message) and gets the `Encoding` below. `MemberKey` (`Types.hs:972`, only `StrEncoding`) and `GroupMemberRole` (`Types/Shared.hs:33`, only `TextEncoding`) lack a binary `Encoding`: `MemberKey` delegates to the underlying `PublicKey` (`Crypto.hs:568`), and the role delegates to its canonical `TextEncoding` (the same `"member"/"moderator"/"admin"` form JSON and the DB use — single source of truth; `GRUnknown` round-trips). + +```haskell +-- MemberKey gains a binary Encoding (it only had StrEncoding); delegate to the Ed25519 key. +instance Encoding MemberKey where + smpEncode (MemberKey k) = smpEncode k + smpP = MemberKey <$> smpP + +-- General instance (belongs beside GroupMemberRole's TextEncoding in Types/Shared.hs, not here). +instance Encoding GroupMemberRole where + smpEncode = smpEncode . textEncode + smpP = maybe (fail "bad GroupMemberRole") pure . textDecode =<< smpP + +-- Tuple encoding (Encoding (a,b,c,d), Encoding.hs:192), as GrpMsgForward / FwdSender do. +instance Encoding RosterMember where + smpEncode RosterMember {memberId, key, role, privileges} = smpEncode (memberId, key, role, privileges) + smpP = RosterMember <$> smpP <*> smpP <*> smpP <*> smpP + +-- Blob = Word16 count (NOT smpEncodeList: its 1-byte count overflows at the 256 cap) followed +-- by that many entries. This is the byte sequence the digest is computed over and verified +-- against before parsing. +encodeRosterBlob :: [RosterMember] -> ByteString +encodeRosterBlob ms = smpEncode (fromIntegral (length ms) :: Word16) <> B.concat (map smpEncode ms) + +rosterBlobP :: Parser [RosterMember] +rosterBlobP = do + n <- fromIntegral <$> smpP @Word16 + when (n > maxGroupRosterSize) $ fail "roster: too many entries" + A.count n smpP +``` + +- **Owner**: `encodeRosterBlob` over the promoted set → `FileDigest` (SHA-512, as the file machinery computes it, `LC.sha512Hash`) → chunk; the digest goes in the signed `XGrpRoster` header. +- **Receiver**: concatenate chunk bytes → verify the digest (S1, over plaintext) → `parseAll rosterBlobP` (consume all input; reject trailing bytes). Parsing runs only after the digest matches, so the bytes are owner-attested; the `n > maxGroupRosterSize` guard and `parseAll` are defensive against a buggy/garbled blob. +- **Per-entry layout**: `memberId` (1-byte len + id) + `key` (1-byte len + Ed25519 pubkey) + role (1-byte len + role word, e.g. `member` = 7 B) + `privileges` (2 bytes) ≈ ~60 B/entry. The file-transferred blob has no tight size budget, so canonical text is fine. +- `privileges` is reserved: serialized as `0`, parsed and ignored in v1. + +## Delivery: send → header → chunks → completion + +### Owner send + +`bumpAndBroadcastRoster` and `sendGroupRosterToRelay` build the blob (`buildGroupRoster` over the widened query), compute its `FileDigest`, send the `XGrpRoster` header, then send the blob as `BFileChunk`s against that message's `shared_msg_id`. + +`sendFileInline_` reads from a file, so add a send-from-bytes variant (shared with the relay re-serve). The owner's own version bump stays as today (in `bumpAndBroadcastRoster`, `Internal.hs:2176`) — the owner is the source of truth; "bump only at completion" is a receive-side rule. + +### Header handler (`xGrpRoster`, member and relay) + +The header no longer applies anything — it starts a transfer. It only writes `roster_pending_*`; it never writes `roster_version` or the live `roster_msg_*`. + +- **Short-circuit** unless `version > max(roster_version, roster_pending_version)` — strictly greater than both applied and pending — before creating a file. These are **`Maybe` comparisons: `Nothing` (un-materialized version) counts as below `0`** (mirror today's `maybe False (newVer <=) …`, `Subscriber.hs:3207`), so a relay's first receipt at NULL **applies** v0 while a re-receive at `Just 0` short-circuits — the v0 onboarding depends on this. + - Why both: the QCONT re-serve is unconditional, so the relay may re-forward a still-cached v5 while a member is mid-receiving v6 (applied 4). Compared only to applied, v5 > 4 would supersede v6, then the arriving v6 chunks fail the v5 digest → stuck. + - Why never bump here: a header-time bump makes the genuine blob complete as an equal-version no-op, leaving the receiver at `vN` with `v(N-1)` data. +- **Create the rcv-file** with `cryptoArgs = Nothing` (see Security), `file_type = roster`, `chat_item_id` NULL, `shared_msg_id` = the header's id. Accept it via `startRcvInlineFT` (chat-item-free), not `acceptRcvInlineFT`, so chunk 1 isn't rejected on `RFSNew`. +- **One in-flight per group is automatic**: the single `groups` row makes `roster_pending_*` single-valued, and there is one `(group_id, file_type = roster)` file. A duplicate header is idempotent. A version greater than both applied and pending supersedes: `UPDATE roster_pending_*` and delete the existing roster file (cleanup below), then create the new. + +### Chunks + +The header is enqueued before chunk 1 (per-connection FIFO). + +**Reset-on-chunk-1** (decision 4): if chunk 1 arrives with partial chunks, discard and restart so relay restart / re-subscribe / QCONT can re-drive from the start. Discarding MUST (GAP 3): + +- delete the `rcv_file_chunks` rows, +- truncate/remove the on-disk file, and +- evict its handle from the `rcvFiles` map (`closeFileHandle`). + +`appendFileChunk` opens in AppendMode and caches the handle (`Internal.hs:1781`, handle at `1794`), so clearing only the rows would append after the stale bytes and corrupt the blob (digest fails — the stuck state decision 4 avoids). + +**Orphaned chunk**: a roster `BFileChunk` matching no in-flight `(group_id, shared_msg_id, file_type = roster)` file is **ACKed and ignored**, never errored (the version is already applied or superseded). This is how an up-to-date member tolerates the unconditional re-serve: the re-served header short-circuits (no file), then its chunks arrive with no transfer in flight. Distinct from reset-on-chunk-1, which fires only when partial chunks exist. + +### Completion (on `RcvChunkFinal`) + +1. Verify the assembled file's digest against `roster_pending_digest`. On mismatch, discard (delete the file, clear `roster_pending_*`); do not apply or bump. +2. **Version guard**: apply only if `roster_pending_version > roster_version` (same `Maybe` semantics — a `Nothing` applied version counts as below `0`, so a first v0 completion from NULL applies). A stale/out-of-order completion is rejected, not applied as a downgrade. +3. Parse → `validateGroupRoster` → `processRoster` (TOFU keys, role updates, revert absent promoted members, role-change items; pass `nameFromMemberId` where it used the entry name). + +In **one transaction**: `processRoster` → set `roster_version = roster_pending_version` → set `roster_blob` → clear `roster_pending_*` → delete the file. A **relay** also promotes the pending signed-header columns into the live `roster_msg_*` (this is what `setGroupRoster` writes today at header time — it moves here) and applies to its own records, then **sends the roster ack and broadcasts** (below). So a joiner never sees a live header at `vN` paired with a blob at `vN-1`. + +**Relay ack at completion (PR #7036 integration).** The relay's `XGrpRosterAck` (previously sent in `relayApplyRoster` at header receipt) moves to completion, gated exactly as today on `relayOwnStatus gInfo == Just RSAccepted`: on a successful completion send `sendRosterAck author roster_pending_version Nothing`; on digest-mismatch or parse failure send `sendRosterAck author roster_pending_version (Just "...")` so the owner marks the relay `RSRejected` rather than leaving it `RSInvited` forever. A relay therefore becomes publishable only after the full blob arrives and applies — the desired fail-safe, but it makes owner→relay blob delivery part of the relay-onboarding path, so it MUST be reliably driven (see *Owner send* and *Relay re-serve*; for a freshly-connecting relay the owner drives it via `sendGroupRosterToRelay`, including the empty v0 blob). The `relayOwnStatus == Just RSAccepted` gate is ported unchanged but now evaluated at completion rather than header receipt — confirm `relayOwnStatus` cannot change across the header→completion window (it shouldn't: a relay can't reach `RSActive` before acking, since the ack is what publishes it). + +The version guard plus the per-version `shared_msg_id` keying are what make the design correct; the short-circuit and one-in-flight-per-group are optimizations. + +### Relay re-serve (broadcast / join / QCONT) + +Per recipient, forward the signed header (as `forwardGroupRoster` does today, `Internal.hs:1172`) AND re-send the blob as `BFileChunk`s from `groups.roster_blob` (the send-from-bytes variant). An incoming `BFileChunk` returns no delivery task (`Subscriber.hs:1089`), so the blob send is driven here. + +**No per-member version gate in v1 (GAP 2).** QCONT/SENT re-forwards the saved roster unconditionally today (`Subscriber.hs:1143`, `1237`), and no per-member delivered-version tracker exists in the tree — this plan adds none. So a re-serve re-sends the whole blob on every drain; at cap 256 that is ~15 KB — one (occasionally two) `BFileChunk`s per drain — acceptable. + +It is safe because: an up-to-date member short-circuits the header and ACK-ignores the orphaned chunks; a stale (≤ pending) re-forward mid-transfer is a no-op via the short-circuit; and the completion version guard rejects any stale completion. + +If the cap is later raised so the blob spans many chunks, add a per-member `delivered_roster_version` column (read on QCONT/join/broadcast, written on confirmed delivery) and re-serve only when behind — future work. + +### Supersede / cancel cleanup + +Cleanup spans ALL of these — miss none: + +- `files`, `rcv_files`, `rcv_file_chunks`, +- the on-disk file and its `rcvFiles` handle (`closeFileHandle`), +- the `roster_pending_*` columns on `groups` (set NULL). + +## File-machinery changes (only these) + +- **Lookup**: add `files.shared_msg_id`; resolve roster chunks by `(group_id, shared_msg_id, file_type = roster)`. Leave `getGroupFileIdBySharedMsgId` (`Store/Files.hs:310`, chat-item JOIN) for normal files; branch on `file_type` / `chat_item_id IS NULL`. +- **Fork the three receive sites that call `getChatItemByFileId`** (they throw with no chat item): + - `startReceivingFile` (`Internal.hs:827`, reached on chunk 1) — skip the chat item + `CEvtRcvFileStart`. + - `receiveFileChunk` `RcvChunkFinal` (`Subscriber.hs:1329`) — replace with the completion path above. + - `FileChunkCancel` (`Subscriber.hs:1313`) — delete file + drop in-flight state, no chat item. +- **Cleanup keyed on `group_id`** (not chat items): `getGroupFileInfo` INNER-JOINs `chat_items`, so group delete (`Commands.hs:1270`) and clear (`1305`) skip roster files; the DB row cascades on group delete but the on-disk file leaks. Add a roster-file cleanup for delete/clear, cancel, and supersede. + +## Storage / migration + +In-flight state lives on `groups` (mirroring the live saved roster) and `files` (located by `shared_msg_id`) — no join table. These columns go into the in-progress **`M20260602_group_roster`** migration (already part of this work, not yet merged — so it's editable, not an applied migration), SQLite + Postgres; tests regenerate the schema files. + +| `groups` column(s) | Holds | Lifecycle | +|---|---|---| +| `roster_version` *(kept)* | applied version | bumped at completion | +| `roster_msg_*` *(kept)* | live signed header (was full JSON) | relay forwards verbatim; promoted from pending at completion | +| `roster_blob` *(new)* | durable completed blob | written at completion; relay re-serves it | +| `roster_pending_version`, `roster_pending_digest` *(new)* | in-flight version + digest | set on header receipt; cleared at completion | +| `roster_pending_msg_*` *(new, relay-only)* | in-flight signed header | set on header receipt; promoted to live at completion (NULL on members) | + +The kept `roster_msg_*` columns stay the relay's verbatim-forward source and trust anchor: `forwardGroupRoster` re-forwards them so the joiner verifies the owner signature, and the digest inside authenticates the unsigned blob. + +`files` adds `shared_msg_id` and `file_type`. The in-flight transfer is the `files` / `rcv_files` / `rcv_file_chunks` rows with `(group_id, file_type = roster)`. + +## Security + +- **Owner-signed header**: assert `memberRole' author == GROwner` (`Subscriber.hs:3198`); keep `XGrpRoster_` in `requiresSignature`. +- **Integrity is entirely the digest** (S1): verify the assembled **plaintext** blob against the owner-signed `fileDigest` at completion. Hence `cryptoArgs = Nothing` — a set cryptoArgs makes `appendFileChunk` re-encrypt the file in place (`Internal.hs:1801`), so the on-disk bytes would be ciphertext and the check would fail. A corrupted chunk fails the digest and the roster is rejected. +- **TOFU** key pinning per `memberId` unchanged (different key for a known id → keep the trusted key). +- **Rollback (S2)**: the signature binds `publicGroupId + version` and the digest binds the blob to that header, so cross-group/version substitution stays blocked. But the blob now carries plain members, so a same-group replay of an old `(header, blob)` to a **new joiner** can re-introduce a removed poster or mask a demotion (existing members are protected by the version check). Update `channels-overview.md`. + +## Known limitations / out of scope + +- A malicious relay can withhold/corrupt chunks → the member stays on its last-applied roster (it can drop any message anyway); new-joiner rollback now covers plain members. +- A just-promoted member's first posts may show "unknown member" until the file arrives — self-healing. +- A member who **leaves** lingers in the roster blob until the next bump (this plan drops the leave-triggered refresh). Harmless: they have no relay connection and cannot post, so a new joiner sees only a ghost row; the owner's explicit remove (`APIRemoveMembers`) drops them. +- Out of scope: granting/enforcing `privileges`; member content signing; joiner-role-on-profile; clients. Do not couple the roster set to the joiner-role mechanism (decision 2) — it is the absolute `{member, mod, admin}`. + +## Tests (`tests/ChatTests/Groups.hs`) + +The roster tests now live under the `describe "promoted members roster"` block (PR #7036 moved them and added `testChannelAddRelayWithRoster`, which onboards a 2nd relay through the roster-ack handshake). Update those to header+file delivery — `testChannelAddRelayWithRoster` in particular now exercises the v0/empty-roster blob transfer feeding the relay ack, so it must drive the header+chunk(s) to completion before the relay acks. + +Then add: digest-mismatch blob rejected (no apply, no version bump) **and the relay acks-with-error → owner marks it `RSRejected`** (PR #7036 path); a relay does **not** ack / become publishable until the blob completes (ack moved to completion); member promotion enters the broadcast roster and can post; reset-on-chunk-1 recovery; superseding version cleans up the in-flight older file; version not bumped on header receipt or on a failed blob; `introduceInChannel` still mod+admin only (no member introductions); on-disk roster file cleaned on group delete/clear mid-transfer; non-owner promotion refused; a promoted member re-connecting through a relay is accepted only with a valid signed `XMember` over the roster-pinned key (the widened `memberJoinRequestViaRelay` gate). Existing mod/admin tests must still pass. diff --git a/simplex-chat.cabal b/simplex-chat.cabal index 22b97c83ee..f1effc2e6a 100644 --- a/simplex-chat.cabal +++ b/simplex-chat.cabal @@ -143,6 +143,7 @@ library Simplex.Chat.Store.Postgres.Migrations.M20260530_client_services Simplex.Chat.Store.Postgres.Migrations.M20260531_member_removed_at Simplex.Chat.Store.Postgres.Migrations.M20260601_relay_sent_web_domain + Simplex.Chat.Store.Postgres.Migrations.M20260602_group_roster else exposed-modules: Simplex.Chat.Archive @@ -304,6 +305,7 @@ library Simplex.Chat.Store.SQLite.Migrations.M20260530_client_services Simplex.Chat.Store.SQLite.Migrations.M20260531_member_removed_at Simplex.Chat.Store.SQLite.Migrations.M20260601_relay_sent_web_domain + Simplex.Chat.Store.SQLite.Migrations.M20260602_group_roster other-modules: Paths_simplex_chat hs-source-dirs: diff --git a/src/Simplex/Chat/Library/Commands.hs b/src/Simplex/Chat/Library/Commands.hs index ca4f3e8fcf..004d790844 100644 --- a/src/Simplex/Chat/Library/Commands.hs +++ b/src/Simplex/Chat/Library/Commands.hs @@ -1289,6 +1289,8 @@ processChatCommand cxt nm = \case filesInfo <- withFastStore' $ \db -> getGroupFileInfo db user gInfo withGroupLock "deleteChat group" chatId $ do deleteCIFiles user filesInfo + -- the roster blob file has no chat item, so it is missed by getGroupFileInfo above + cleanupGroupRosterFile user gInfo (members, recipients) <- getRecipients gInfo let doSendDel = memberActive membership && isOwner msgSigned <- @@ -2050,9 +2052,9 @@ processChatCommand cxt nm = \case gVar <- asks random (gInfo, hostMember_) <- withStore $ \db -> createPreparedGroup db gVar cxt user groupProfile True ccLink welcomeSharedMsgId False GRMember Nothing hostMember <- maybe (throwCmdError "no host member") pure hostMember_ - void $ createChatItem user (CDGroupSnd gInfo Nothing) False CIChatBanner Nothing (Just epochStart) + void $ createChatItem user (CDGroupSnd gInfo Nothing) False CIChatBanner Nothing Nothing (Just epochStart) let cd = CDGroupRcv gInfo Nothing hostMember - createItem sharedMsgId content = createChatItem user cd True content sharedMsgId Nothing + createItem sharedMsgId content = createChatItem user cd True content sharedMsgId Nothing Nothing cInfo = GroupChat gInfo Nothing void $ createGroupFeatureItems_ user cd True CIRcvGroupFeature gInfo aci <- mapM (createItem welcomeSharedMsgId . CIRcvMsgContent) message @@ -2062,9 +2064,9 @@ processChatCommand cxt nm = \case pure $ CRNewPreparedChat user $ AChat SCTGroup chat ACCL _ (CCLink cReq _) -> do ct <- withStore $ \db -> createPreparedContact db cxt user profile accLink welcomeSharedMsgId - void $ createChatItem user (CDDirectSnd ct) False CIChatBanner Nothing (Just epochStart) + void $ createChatItem user (CDDirectSnd ct) False CIChatBanner Nothing Nothing (Just epochStart) let cd = CDDirectRcv ct - createItem sharedMsgId content = createChatItem user cd False content sharedMsgId Nothing + createItem sharedMsgId content = createChatItem user cd False content sharedMsgId Nothing Nothing cInfo = DirectChat ct void $ createItem Nothing $ CIRcvDirectE2EEInfo $ e2eInfoEncrypted $ connRequestPQEncryption cReq void $ createFeatureEnabledItems_ user ct @@ -2081,11 +2083,11 @@ processChatCommand cxt nm = \case subRole <- if useRelays then asks $ channelSubscriberRole . config else pure GRMember gVar <- asks random (gInfo, hostMember_) <- withStore $ \db -> createPreparedGroup db gVar cxt user gp False ccLink welcomeSharedMsgId useRelays subRole publicMemberCount_ - void $ createChatItem user (CDGroupSnd gInfo Nothing) False CIChatBanner Nothing (Just epochStart) + void $ createChatItem user (CDGroupSnd gInfo Nothing) False CIChatBanner Nothing Nothing (Just epochStart) let cd = maybe (CDChannelRcv gInfo Nothing) (CDGroupRcv gInfo Nothing) hostMember_ cInfo = GroupChat gInfo Nothing void $ createGroupFeatureItems_ user cd True CIRcvGroupFeature gInfo - aci <- forM description $ \descr -> createChatItem user cd True (CIRcvMsgContent $ MCText descr) welcomeSharedMsgId Nothing + aci <- forM description $ \descr -> createChatItem user cd True (CIRcvMsgContent $ MCText descr) welcomeSharedMsgId Nothing Nothing let chat = case aci of Just (AChatItem SCTGroup dir _ ci) -> Chat cInfo [CChatItem dir ci] emptyChatStats {unreadCount = 1, minUnreadItemId = chatItemId' ci} _ -> Chat cInfo [] emptyChatStats @@ -2153,7 +2155,7 @@ processChatCommand cxt nm = \case -- create changed feature items (connecting incognito sends default preferences, instead of user preferences) lift . when incognito $ createContactChangedFeatureItems user ct ct' forM_ msg_ $ \(sharedMsgId, mc) -> do - ci <- createChatItem user (CDDirectSnd ct') False (CISndMsgContent mc) (Just sharedMsgId) Nothing + ci <- createChatItem user (CDDirectSnd ct') False (CISndMsgContent mc) (Just sharedMsgId) Nothing Nothing toView $ CEvtNewChatItems user [ci] pure $ CRStartedConnectionToContact user ct' customUserProfile CVRConnectedContact ct' -> pure $ CRContactAlreadyExists user ct' @@ -2246,7 +2248,7 @@ processChatCommand cxt nm = \case liftIO $ setPreparedGroupStartedConnection db groupId getGroupInfo db cxt user groupId forM_ msg_ $ \(sharedMsgId, mc) -> do - ci <- createChatItem user (CDGroupSnd gInfo' Nothing) False (CISndMsgContent mc) (Just sharedMsgId) Nothing + ci <- createChatItem user (CDGroupSnd gInfo' Nothing) False (CISndMsgContent mc) (Just sharedMsgId) Nothing Nothing toView $ CEvtNewChatItems user [ci] pure $ CRStartedConnectionToGroup user gInfo' customUserProfile [] CVRConnectedContact _ct -> throwChatError $ CEException "contact already exists when connecting to group" @@ -2756,34 +2758,45 @@ processChatCommand cxt nm = \case -- TODO [relays] possible optimization is to read only required members + relays g@(Group gInfo members) <- withFastStore $ \db -> getGroup db cxt user groupId when (selfSelected gInfo) $ throwCmdError "can't change role for self" - let (invitedMems, currentMems, unchangedMems, maxRole, anyAdmin, anyPending) = selectMembers members + let (invitedMems, currentMems, unchangedMems, maxRole, anyAdmin, anyPending, anyPrivilegedTarget, finalPrivilegedCount) = selectMembers members when (length invitedMems + length currentMems + length unchangedMems /= length memberIds) $ throwChatError CEGroupMemberNotFound when (length memberIds > 1 && (anyAdmin || newRole >= GRAdmin)) $ throwCmdError "can't change role of multiple members when admins selected, or new role is admin" when anyPending $ throwCmdError "can't change role of members pending approval" assertUserGroupRole gInfo $ maximum ([GRAdmin, maxRole, newRole] :: [GroupMemberRole]) + -- in relay groups the roster has a single signer, so only the owner may change moderator/admin roles + when (useRelays' gInfo && (isRosterRole newRole || anyPrivilegedTarget) && memberRole' (membership gInfo) /= GROwner) $ + throwCmdError "only the group owner can change moderator and admin roles" + when (useRelays' gInfo && isRosterRole newRole && finalPrivilegedCount > maxGroupRosterSize) $ + throwCmdError $ "the number of members, moderators and admins would exceed the limit of " <> show maxGroupRosterSize (errs1, changed1) <- changeRoleInvitedMems user gInfo invitedMems - (errs2, changed2, acis, msgSigned) <- changeRoleCurrentMems user g currentMems + let doBumpRoster = useRelays' gInfo && memberRole' (membership gInfo) == GROwner && (isRosterRole newRole || anyPrivilegedTarget) + rosterVer <- if doBumpRoster then Just <$> reserveRosterVersion gInfo else pure Nothing + (errs2, changed2, acis, msgSigned) <- changeRoleCurrentMems user g rosterVer currentMems + forM_ rosterVer $ \v -> broadcastRoster user gInfo v `catchAllErrors` eToView unless (null acis) $ toView $ CEvtNewChatItems user acis let errs = errs1 <> errs2 unless (null errs) $ toView $ CEvtChatErrors errs pure $ CRMembersRoleUser {user, groupInfo = gInfo, members = changed1 <> changed2, toRole = newRole, msgSigned} -- same order is not guaranteed where selfSelected GroupInfo {membership} = elem (groupMemberId' membership) memberIds - selectMembers :: [GroupMember] -> ([GroupMember], [GroupMember], [GroupMember], GroupMemberRole, Bool, Bool) - selectMembers = foldr' addMember ([], [], [], GRObserver, False, False) + -- anyPrivilegedTarget: a target currently moderator/admin; finalPrivilegedCount: + -- moderators + admins after the change (targets take newRole, others keep their role). + selectMembers :: [GroupMember] -> ([GroupMember], [GroupMember], [GroupMember], GroupMemberRole, Bool, Bool, Bool, Int) + selectMembers = foldr' addMember ([], [], [], GRObserver, False, False, False, 0) where - addMember m@GroupMember {groupMemberId, memberStatus, memberRole} (invited, current, unchanged, maxRole, anyAdmin, anyPending) + addMember m@GroupMember {groupMemberId, memberStatus, memberRole} (invited, current, unchanged, maxRole, anyAdmin, anyPending, anyPrivTarget, privCount) | groupMemberId `elem` memberIds = let maxRole' = max maxRole memberRole anyAdmin' = anyAdmin || memberRole >= GRAdmin anyPending' = anyPending || memberPending m - in - if - | memberRole == newRole -> (invited, current, m : unchanged, maxRole', anyAdmin', anyPending') - | memberStatus == GSMemInvited -> (m : invited, current, unchanged, maxRole', anyAdmin', anyPending') - | otherwise -> (invited, m : current, unchanged, maxRole', anyAdmin', anyPending') - | otherwise = (invited, current, unchanged, maxRole, anyAdmin, anyPending) + anyPrivTarget' = anyPrivTarget || isRosterRole memberRole + privCount' = if isRosterRole newRole then privCount + 1 else privCount + in if + | memberRole == newRole -> (invited, current, m : unchanged, maxRole', anyAdmin', anyPending', anyPrivTarget', privCount') + | memberStatus == GSMemInvited -> (m : invited, current, unchanged, maxRole', anyAdmin', anyPending', anyPrivTarget', privCount') + | otherwise -> (invited, m : current, unchanged, maxRole', anyAdmin', anyPending', anyPrivTarget', privCount') + | otherwise = (invited, current, unchanged, maxRole, anyAdmin, anyPending, anyPrivTarget, if isRosterRole memberRole then privCount + 1 else privCount) changeRoleInvitedMems :: User -> GroupInfo -> [GroupMember] -> CM ([ChatError], [GroupMember]) changeRoleInvitedMems user gInfo memsToChange = do -- not batched, as we need to send different invitations to different connections anyway @@ -2798,19 +2811,20 @@ processChatCommand cxt nm = \case withFastStore' $ \db -> updateGroupMemberRole db user m newRole pure (m :: GroupMember) {memberRole = newRole} _ -> throwChatError $ CEGroupCantResendInvitation gInfo cName - changeRoleCurrentMems :: User -> Group -> [GroupMember] -> CM ([ChatError], [GroupMember], [AChatItem], Bool) - changeRoleCurrentMems user (Group gInfo members) memsToChange = case L.nonEmpty memsToChange of + changeRoleCurrentMems :: User -> Group -> Maybe VersionRoster -> [GroupMember] -> CM ([ChatError], [GroupMember], [AChatItem], Bool) + changeRoleCurrentMems user (Group gInfo members) rosterVer memsToChange = case L.nonEmpty memsToChange of Nothing -> pure ([], [], [], False) Just memsToChange' -> do - let events = L.map (\GroupMember {memberId} -> XGrpMemRole memberId newRole) memsToChange' + let mKey m = if isJust rosterVer then MemberKey <$> memberPubKey m else Nothing + events = L.map (\m@GroupMember {memberId} -> XGrpMemRole memberId newRole (mKey m) rosterVer) memsToChange' recipients = filter memberCurrent members (msgs_, _gsr) <- sendGroupMessages user gInfo Nothing False recipients events let signed = any (either (const False) (isJust . signedMsg_)) msgs_ itemsData = zipWith (fmap . sndItemData) memsToChange (L.toList msgs_) cis_ <- saveSndChatItems user (CDGroupSnd gInfo Nothing) False itemsData Nothing False when (length cis_ /= length memsToChange) $ logError "changeRoleCurrentMems: memsToChange and cis_ length mismatch" - (errs, changed) <- lift $ partitionEithers <$> withStoreBatch' (\db -> map (updMember db) memsToChange) let acis = map (AChatItem SCTGroup SMDSnd (GroupChat gInfo Nothing)) $ rights cis_ + (errs, changed) <- lift $ partitionEithers <$> withStoreBatch' (\db -> map (updMember db) memsToChange) pure (errs, changed, acis, signed) where sndItemData :: GroupMember -> SndMessage -> NewSndChatItemData c @@ -2874,20 +2888,25 @@ processChatCommand cxt nm = \case withGroupLock "removeMembers" groupId $ do -- TODO [relays] possible optimization is to read only required members + relays Group gInfo members <- withFastStore $ \db -> getGroup db cxt user groupId - let (count, invitedMems, pendingApprvMems, pendingRvwMems, currentMems, maxRole, anyAdmin) = selectMembers gmIds members + let (count, invitedMems, pendingApprvMems, pendingRvwMems, currentMems, maxRole, anyAdmin, anyPrivilegedRemoved) = selectMembers gmIds members gmIds = S.fromList $ L.toList groupMemberIds memCount = length groupMemberIds when (count /= memCount) $ throwChatError CEGroupMemberNotFound when (memCount > 1 && anyAdmin) $ throwCmdError "can't remove multiple members when admins selected" assertUserGroupRole gInfo $ max GRAdmin maxRole + when (useRelays' gInfo && anyPrivilegedRemoved && memberRole' (membership gInfo) /= GROwner) $ + throwCmdError "only the group owner can remove members, moderators and admins" (errs1, deleted1) <- deleteInvitedMems user invitedMems let recipients = filter memberCurrent members - (errs2, deleted2, acis2, signed2) <- deleteMemsSend user gInfo Nothing recipients currentMems + let doBumpRoster = useRelays' gInfo && memberRole' (membership gInfo) == GROwner && anyPrivilegedRemoved + rosterVer <- if doBumpRoster then Just <$> reserveRosterVersion gInfo else pure Nothing + (errs2, deleted2, acis2, signed2) <- deleteMemsSend user gInfo Nothing rosterVer recipients currentMems (errs3, deleted3, acis3, signed3) <- foldM (\acc m -> deletePendingMember acc user gInfo [m] m) ([], [], [], False) pendingApprvMems let moderators = filter (\GroupMember {memberRole} -> memberRole >= GRModerator) members (errs4, deleted4, acis4, signed4) <- foldM (\acc m -> deletePendingMember acc user gInfo (m : moderators) m) ([], [], [], False) pendingRvwMems + forM_ rosterVer $ \v -> broadcastRoster user gInfo v `catchAllErrors` eToView let acis = acis2 <> acis3 <> acis4 errs = errs1 <> errs2 <> errs3 <> errs4 deleted = deleted1 <> deleted2 <> deleted3 <> deleted4 @@ -2902,19 +2921,20 @@ processChatCommand cxt nm = \case unless (null errs) $ toView $ CEvtChatErrors errs pure $ CRUserDeletedMembers user gInfo' deleted withMessages msgSigned -- same order is not guaranteed where - selectMembers :: S.Set GroupMemberId -> [GroupMember] -> (Int, [GroupMember], [GroupMember], [GroupMember], [GroupMember], GroupMemberRole, Bool) - selectMembers gmIds = foldl' addMember (0, [], [], [], [], GRObserver, False) + selectMembers :: S.Set GroupMemberId -> [GroupMember] -> (Int, [GroupMember], [GroupMember], [GroupMember], [GroupMember], GroupMemberRole, Bool, Bool) + selectMembers gmIds = foldl' addMember (0, [], [], [], [], GRObserver, False, False) where - addMember acc@(n, invited, pendingApprv, pendingRvw, current, maxRole, anyAdmin) m@GroupMember {groupMemberId, memberStatus, memberRole} + addMember acc@(n, invited, pendingApprv, pendingRvw, current, maxRole, anyAdmin, anyPrivRemoved) m@GroupMember {groupMemberId, memberStatus, memberRole} | groupMemberId `S.member` gmIds = let maxRole' = max maxRole memberRole anyAdmin' = anyAdmin || memberRole >= GRAdmin + anyPrivRemoved' = anyPrivRemoved || isRosterRole memberRole n' = n + 1 in case memberStatus of - GSMemInvited -> (n', m : invited, pendingApprv, pendingRvw, current, maxRole', anyAdmin') - GSMemPendingApproval -> (n', invited, m : pendingApprv, pendingRvw, current, maxRole', anyAdmin') - GSMemPendingReview -> (n', invited, pendingApprv, m : pendingRvw, current, maxRole', anyAdmin') - _ -> (n', invited, pendingApprv, pendingRvw, m : current, maxRole', anyAdmin') + GSMemInvited -> (n', m : invited, pendingApprv, pendingRvw, current, maxRole', anyAdmin', anyPrivRemoved') + GSMemPendingApproval -> (n', invited, m : pendingApprv, pendingRvw, current, maxRole', anyAdmin', anyPrivRemoved') + GSMemPendingReview -> (n', invited, pendingApprv, m : pendingRvw, current, maxRole', anyAdmin', anyPrivRemoved') + _ -> (n', invited, pendingApprv, pendingRvw, m : current, maxRole', anyAdmin', anyPrivRemoved') | otherwise = acc deleteInvitedMems :: User -> [GroupMember] -> CM ([ChatError], [GroupMember]) deleteInvitedMems user memsToDelete = do @@ -2927,14 +2947,14 @@ processChatCommand cxt nm = \case deletePendingMember :: ([ChatError], [GroupMember], [AChatItem], Bool) -> User -> GroupInfo -> [GroupMember] -> GroupMember -> CM ([ChatError], [GroupMember], [AChatItem], Bool) deletePendingMember (accErrs, accDeleted, accACIs, accSigned) user gInfo recipients m = do (m', scopeInfo) <- mkMemberSupportChatInfo m - (errs, deleted, acis, signed) <- deleteMemsSend user gInfo (Just scopeInfo) recipients [m'] + (errs, deleted, acis, signed) <- deleteMemsSend user gInfo (Just scopeInfo) Nothing recipients [m'] pure (errs <> accErrs, deleted <> accDeleted, acis <> accACIs, accSigned || signed) - deleteMemsSend :: User -> GroupInfo -> Maybe GroupChatScopeInfo -> [GroupMember] -> [GroupMember] -> CM ([ChatError], [GroupMember], [AChatItem], Bool) - deleteMemsSend user gInfo chatScopeInfo recipients memsToDelete = case L.nonEmpty memsToDelete of + deleteMemsSend :: User -> GroupInfo -> Maybe GroupChatScopeInfo -> Maybe VersionRoster -> [GroupMember] -> [GroupMember] -> CM ([ChatError], [GroupMember], [AChatItem], Bool) + deleteMemsSend user gInfo chatScopeInfo rosterVer recipients memsToDelete = case L.nonEmpty memsToDelete of Nothing -> pure ([], [], [], False) Just memsToDelete' -> do let chatScope = toChatScope <$> chatScopeInfo - events = L.map (\GroupMember {memberId} -> XGrpMemDel memberId withMessages) memsToDelete' + events = L.map (\GroupMember {memberId} -> XGrpMemDel memberId withMessages rosterVer) memsToDelete' (msgs_, _gsr) <- sendGroupMessages user gInfo chatScope False recipients events let signed = any (either (const False) (isJust . signedMsg_)) msgs_ itemsData_ = zipWith (fmap . sndItemData) memsToDelete (L.toList msgs_) @@ -3134,7 +3154,7 @@ processChatCommand cxt nm = \case (connId, CCLink cReq _) <- withAgent $ \a -> createConnection a nm (aUserId user) True False SCMInvitation Nothing Nothing IKPQOff subMode -- [incognito] reuse membership incognito profile ct <- withFastStore' $ \db -> createMemberContact db user connId cReq g m mConn subMode - void $ createChatItem user (CDDirectSnd ct) False CIChatBanner Nothing (Just epochStart) + void $ createChatItem user (CDDirectSnd ct) False CIChatBanner Nothing Nothing (Just epochStart) -- TODO not sure it is correct to set connections status here? pure $ CRNewMemberContact user ct g m _ -> throwChatError CEGroupMemberNotActive @@ -3613,13 +3633,18 @@ processChatCommand cxt nm = \case where cReqHash1 = contactCReqHash $ CRContactUri crData {crScheme = SSSimplex} cReqHash2 = contactCReqHash $ CRContactUri crData {crScheme = simplexChat} + -- relay-group joins (only via connectToRelay) carry the target relay member in preparedEntity_; + -- its memberId binds the join signature so a sibling relay can't replay it + relayMemberId_ = case preparedEntity_ of + Just (PCEGroup gInfo m) | useRelays' gInfo -> Just (memberId' m) + _ -> Nothing joinPreparedConn' xContactId_ conn@Connection {customUserProfileId} gInfo_ = do when (incognito /= isJust customUserProfileId) $ throwCmdError "incognito mode is different from prepared connection" -- TODO [relays] member: refactor joinContact and up avoiding parallel ifs, xContactId is not used xContactId <- mkXContactId xContactId_ localIncognitoProfile <- forM customUserProfileId $ \pId -> withFastStore $ \db -> getProfileById db userId pId let incognitoProfile = fromLocalProfile <$> localIncognitoProfile - conn' <- joinContact user conn cReq incognitoProfile xContactId welcomeSharedMsgId msg_ gInfo_ PQSupportOn + conn' <- joinContact user conn cReq incognitoProfile xContactId welcomeSharedMsgId msg_ gInfo_ relayMemberId_ PQSupportOn pure $ CVRSentInvitation conn' incognitoProfile connect' groupLinkId xContactId_ gInfo_ = do let inGroup = isJust groupLinkId @@ -3634,7 +3659,7 @@ processChatCommand cxt nm = \case subMode <- chatReadVar subscriptionMode let sLnk' = serverShortLink <$> sLnk conn <- withFastStore' $ \db -> createConnReqConnection db userId connId preparedEntity_ cReq cReqHash1 sLnk' xContactId incognitoProfile_ groupLinkId subMode chatV pqSup - conn' <- joinContact user conn cReq incognitoProfile xContactId welcomeSharedMsgId msg_ gInfo_ pqSup + conn' <- joinContact user conn cReq incognitoProfile xContactId welcomeSharedMsgId msg_ gInfo_ relayMemberId_ pqSup pure $ CVRSentInvitation conn' incognitoProfile connectContactViaAddress :: User -> IncognitoEnabled -> Contact -> CreatedLinkContact -> CM ChatResponse connectContactViaAddress user@User {userId} incognito ct@Contact {contactId, activeConn} (CCLink cReq shortLink) = @@ -3649,7 +3674,7 @@ processChatCommand cxt nm = \case subMode <- chatReadVar subscriptionMode let cReqHash = ConnReqUriHash . C.sha256Hash $ strEncode cReq conn <- withFastStore' $ \db -> createConnReqConnection db userId connId (Just $ PCEContact ct) cReq cReqHash shortLink newXContactId (NewIncognito <$> incognitoProfile) Nothing subMode chatV pqSup - void $ joinContact user conn cReq incognitoProfile newXContactId Nothing Nothing Nothing pqSup + void $ joinContact user conn cReq incognitoProfile newXContactId Nothing Nothing Nothing Nothing pqSup ct' <- withStore $ \db -> getContact db cxt user contactId pure $ CRSentInvitationToContact user ct' incognitoProfile Just conn@Connection {connStatus, xContactId = xContactId_, customUserProfileId} -> case connStatus of @@ -3658,7 +3683,7 @@ processChatCommand cxt nm = \case xContactId <- mkXContactId xContactId_ localIncognitoProfile <- forM customUserProfileId $ \pId -> withFastStore $ \db -> getProfileById db userId pId let incognitoProfile = fromLocalProfile <$> localIncognitoProfile - void $ joinContact user conn cReq incognitoProfile xContactId Nothing Nothing Nothing PQSupportOn + void $ joinContact user conn cReq incognitoProfile xContactId Nothing Nothing Nothing Nothing PQSupportOn ct' <- withStore $ \db -> getContact db cxt user contactId pure $ CRSentInvitationToContact user ct' incognitoProfile _ -> throwCmdError "contact already has connection" @@ -3670,13 +3695,14 @@ processChatCommand cxt nm = \case r <- tryAllErrors $ do (fd@FixedLinkData {rootKey = relayKey, linkEntityId}, cData) <- getShortLinkConnReq nm user relayLink relayLinkData_ <- liftIO $ decodeLinkUserData cData - case (relayLinkData_, linkEntityId) of - (Just RelayShortLinkData {relayProfile = p}, Just entityId) -> + relayMemberId <- case (relayLinkData_, linkEntityId) of + (Just RelayShortLinkData {relayProfile = p}, Just entityId) -> do withFastStore $ \db -> updateRelayMemberData db cxt user relayMember (MemberId entityId) (MemberKey relayKey) p + pure $ MemberId entityId _ -> throwChatError $ CEException "relay link: no relay link data or entity id" let cReq = linkConnReq fd relayLinkToConnect = CCLink cReq (Just relayLink) - void $ connectViaContact user (Just $ PCEGroup gInfo relayMember) (incognitoMembership gInfo) relayLinkToConnect Nothing Nothing + void $ connectViaContact user (Just $ PCEGroup gInfo (relayMember {memberId = relayMemberId})) (incognitoMembership gInfo) relayLinkToConnect Nothing Nothing relayMember' <- withFastStore $ \db -> getGroupMember db cxt user (groupId' gInfo) (groupMemberId' relayMember) pure (relayLink, relayMember', r) syncSubscriberRelays :: User -> GroupInfo -> [ShortLinkContact] -> CM () @@ -3712,8 +3738,8 @@ processChatCommand cxt nm = \case pure (connId, chatV) mkXContactId :: Maybe XContactId -> CM XContactId mkXContactId = maybe (XContactId <$> drgRandomBytes 16) pure - joinContact :: User -> Connection -> ConnReqContact -> Maybe Profile -> XContactId -> Maybe SharedMsgId -> Maybe (SharedMsgId, MsgContent) -> Maybe (Maybe GroupInfo) -> PQSupport -> CM Connection - joinContact user conn@Connection {connChatVersion = chatV} cReq incognitoProfile xContactId welcomeSharedMsgId msg_ gInfo_ pqSup = do + joinContact :: User -> Connection -> ConnReqContact -> Maybe Profile -> XContactId -> Maybe SharedMsgId -> Maybe (SharedMsgId, MsgContent) -> Maybe (Maybe GroupInfo) -> Maybe MemberId -> PQSupport -> CM Connection + joinContact user conn@Connection {connChatVersion = chatV} cReq incognitoProfile xContactId welcomeSharedMsgId msg_ gInfo_ relayMemberId_ pqSup = do -- gInfo_ is Maybe (Maybe GroupInfo), where Just Nothing means "some unknown group", e.g. when joining via link without profile profileToSend <- presentUserBadge user incognitoProfile $ case gInfo_ of @@ -3721,15 +3747,11 @@ processChatCommand cxt nm = \case let allowSimplexLinks = maybe True groupUserAllowSimplexLinks gInfo_' in userProfileInGroup' user allowSimplexLinks incognitoProfile Nothing -> userProfileDirect user incognitoProfile Nothing True - chatEvent <- case gInfo_ of - Just (Just gInfo) | useRelays' gInfo -> do - let GroupInfo {membership = GroupMember {memberId}} = gInfo - memberPubKey <- case groupKeys gInfo of - Just GroupKeys {memberPrivKey} -> pure $ C.publicKey memberPrivKey - Nothing -> throwChatError $ CEInternalError "no group keys for channel membership" - pure $ XMember profileToSend memberId (MemberKey memberPubKey) - _ -> pure $ XContact profileToSend (Just xContactId) welcomeSharedMsgId msg_ - dm <- encodeConnInfoPQ pqSup chatV chatEvent + dm <- case gInfo_ of + Just (Just gInfo) | useRelays' gInfo -> case relayMemberId_ of + Just relayMemberId -> encodeXMemberConnInfo gInfo relayMemberId profileToSend + Nothing -> throwChatError $ CEInternalError "relay group join without target relay memberId" + _ -> encodeConnInfoPQ pqSup chatV $ XContact profileToSend (Just xContactId) welcomeSharedMsgId msg_ subMode <- chatReadVar subscriptionMode void $ withAgent $ \a -> joinConnection a nm (aUserId user) (aConnId conn) True cReq dm pqSup subMode withFastStore' $ \db -> updateConnectionStatusFromTo db conn ConnPrepared ConnJoined @@ -4914,7 +4936,7 @@ runRelayGroupLinkChecks user = do then do -- TODO [relays] emit event to UI when relay own status promoted to RSActive -- CEvtGroupRelayUpdated requires GroupRelay (owner-side), not available on relay side - void $ withStore' $ \db -> updateRelayOwnStatusFromTo db gInfo RSAccepted RSActive + void $ withStore' $ \db -> updateRelayOwnStatus_ db gInfo RSActive else void $ withStore' $ \db -> updateRelayOwnStatusFromTo db gInfo RSActive RSInactive _ -> pure () _ -> pure () diff --git a/src/Simplex/Chat/Library/Internal.hs b/src/Simplex/Chat/Library/Internal.hs index c67ad0d514..41f70afda4 100644 --- a/src/Simplex/Chat/Library/Internal.hs +++ b/src/Simplex/Chat/Library/Internal.hs @@ -59,7 +59,7 @@ import Simplex.Chat.Controller import Simplex.Chat.Files import Simplex.Chat.Markdown import Simplex.Chat.Messages -import Simplex.Chat.Messages.Batch (BatchMode (..), MsgBatch (..), batchMessages, encodeBinaryBatch, encodeFwdElement) +import Simplex.Chat.Messages.Batch (BatchMode (..), MsgBatch (..), batchMessages, encodeBatchElement, encodeBinaryBatch, encodeFwdElement) import Simplex.Chat.Messages.CIContent import Simplex.Chat.Messages.CIContent.Events import Simplex.Chat.Operators @@ -80,6 +80,7 @@ import Simplex.Chat.Types.Shared import Simplex.Chat.Util (encryptFile, shuffle) import Simplex.FileTransfer.Description (FileDescriptionURI (..), ValidFileDescription) import qualified Simplex.FileTransfer.Description as FD +import qualified Simplex.Messaging.Crypto.Lazy as LC import Simplex.FileTransfer.Protocol (FileParty (..), FilePartyI) import Simplex.FileTransfer.Types (RcvFileId, SndFileId) import Simplex.Messaging.Agent @@ -935,9 +936,9 @@ acceptContactRequestAsync liftIO $ setCommandConnId db user cmdId connId getContact db cxt user contactId -acceptGroupJoinRequestAsync :: User -> Int64 -> GroupInfo -> InvitationId -> VersionRangeChat -> Profile -> Maybe XContactId -> Maybe MemberId -> Maybe SharedMsgId -> GroupAcceptance -> GroupMemberRole -> Maybe IncognitoProfile -> Maybe MemberKey -> CM GroupMember +acceptGroupJoinRequestAsync :: User -> Int64 -> GroupInfo -> InvitationId -> VersionRangeChat -> Profile -> Maybe XContactId -> Maybe MemberId -> Maybe SharedMsgId -> GroupAcceptance -> GroupMemberRole -> Maybe IncognitoProfile -> Maybe MemberKey -> Maybe GroupMember -> CM GroupMember acceptGroupJoinRequestAsync - user + user@User {userId} uclId gInfo@GroupInfo {groupProfile, membership, businessChat} cReqInvId @@ -949,12 +950,22 @@ acceptGroupJoinRequestAsync gAccepted gLinkMemRole incognitoProfile - memberKey_ = do + memberKey_ + existingMem_ = do gVar <- asks random let initialStatus = acceptanceToStatus (memberAdmission groupProfile) gAccepted + -- a roster-established privileged member attaches a connection to its existing record (keeping + -- owner-authoritative role + key); everyone else is created fresh with the group-link role cxt <- chatStoreCxt - (groupMemberId, memberId) <- withStore $ \db -> - createJoiningMember db cxt gVar user gInfo cReqChatVRange cReqProfile cReqXContactId_ cReqMemberId_ welcomeMsgId_ gLinkMemRole initialStatus memberKey_ + (groupMemberId, memberId) <- case existingMem_ of + Just m -> do + -- refresh the hash placeholder name from the authenticated join profile; role + key stay roster-authoritative + withStore $ \db -> do + liftIO $ updateGroupMemberStatus db userId m initialStatus + void $ updateMemberProfile db cxt user m cReqProfile + pure (groupMemberId' m, memberId' m) + Nothing -> withStore $ \db -> + createJoiningMember db cxt gVar user gInfo cReqChatVRange cReqProfile cReqXContactId_ cReqMemberId_ welcomeMsgId_ gLinkMemRole initialStatus memberKey_ let currentMemCount = fromIntegral $ currentMembers $ groupSummary gInfo let Profile {displayName} = userProfileInGroup user gInfo (fromIncognitoProfile <$> incognitoProfile) GroupMember {memberRole = userRole, memberId = userMemberId} = membership @@ -1169,21 +1180,47 @@ memberIntroEvt gInfo reMember = mRestrictions = memberRestrictions reMember in XGrpMemIntro mInfo mRestrictions +-- Forward the saved owner-signed roster verbatim (reusing its signed shared_msg_id), then the +-- blob chunks, so the recipient verifies the owner signature. +serveRoster :: User -> GroupInfo -> GroupMember -> CM () +serveRoster user gInfo member = + when (member `supportsVersion` groupRosterVersion) $ do + cxt <- chatStoreCxt + withStore' (\db -> getGroupRoster db gInfo) >>= \case + Just (ownerGMId, brokerTs, sm@SignedMsg {signedBody}, blob_) -> + case J.eitherDecodeStrict' signedBody :: Either String (ChatMessage 'Json) of + Left e -> logError $ "serveRoster: cannot decode saved roster message: " <> tshow e + Right chatMsg@ChatMessage {msgId} -> + withStore' (\db -> runExceptT $ getGroupMemberById db cxt user ownerGMId) >>= \case + Right owner -> do + let fwd = GrpMsgForward {fwdSender = FwdMember (memberId' owner) (memberShortenedName owner), fwdBrokerTs = brokerTs} + sendFwdMemberMessage member fwd (VMSigned MSSVerified sm chatMsg) + forM_ ((,) <$> msgId <*> blob_) $ \(sid, blob) -> + sendInlineBlobChunks user gInfo [member] sid blob + Left e -> logError $ "serveRoster: roster owner not found: " <> tshow e + Nothing -> pure () + -- Used in groups with relays to introduce moderators and above to a new member, -- and to announce the new member to moderators and above. -- This doesn't create introduction records in db, compared to above methods. introduceInChannel :: StoreCxt -> User -> GroupInfo -> GroupMember -> CM () introduceInChannel _ _ _ GroupMember {activeConn = Nothing} = throwChatError $ CEInternalError "member connection not active" introduceInChannel cxt user gInfo subscriber@GroupMember {activeConn = Just conn, indexInGroup = subscriberIdx} = do - modMs <- withStore' $ \db -> getGroupModerators db cxt user gInfo + (owners, adminsMods) <- withStore' $ \db -> + (,) <$> getGroupOwners db cxt user gInfo <*> getGroupAdminsMods db cxt user gInfo + let modMs = owners <> adminsMods void $ sendGroupMessage' user gInfo modMs $ XGrpMemNew (memberInfo gInfo subscriber) Nothing withStore' $ \db -> setMemberVectorNewRelations db subscriber [(indexInGroup m, (IDSubjectIntroduced, MRIntroduced)) | m <- modMs] - let introEvts = map (memberIntroEvt gInfo) modMs - forM_ (L.nonEmpty introEvts) $ \introEvts' -> - sendGroupMemberMessages user gInfo conn introEvts' + -- owner intros first so the joiner has the owner profile loaded before applying the saved roster (signed by the owner) + sendIntros owners + serveRoster user gInfo subscriber + sendIntros adminsMods withStore' $ \db -> setMembersVectorsNewRelation db modMs subscriberIdx IDSubjectIntroduced MRIntroduced + where + sendIntros ms = forM_ (L.nonEmpty $ map (memberIntroEvt gInfo) ms) $ \evts -> + sendGroupMemberMessages user gInfo conn evts userProfileInGroup :: User -> GroupInfo -> Maybe Profile -> Profile userProfileInGroup user = userProfileInGroup' user . groupUserAllowSimplexLinks @@ -1215,6 +1252,29 @@ redactedMemberProfile allowSimplexLinks Profile {displayName, fullName, shortDes | hasObfuscatedSimplexLink s = Nothing | otherwise = maybe (Just s) (\fts -> if any ftIsSimplexLink fts then Nothing else Just s) $ parseMaybeMarkdownList s +-- Roles carried by the roster; owners are on the link, not the roster. +isRosterRole :: GroupMemberRole -> Bool +isRosterRole r = r == GRMember || r == GRModerator || r == GRAdmin + +-- Drop non-privileged-role entries and de-duplicate by memberId, keeping the first. +-- Runs on the parsed roster blob. +validateGroupRoster :: [RosterMember] -> [RosterMember] +validateGroupRoster entries = + dedup S.empty $ filter (\RosterMember {role} -> isRosterRole role) entries + where + dedup _ [] = [] + dedup seen (rm@RosterMember {memberId} : rms) + | memberId `S.member` seen = dedup seen rms + | otherwise = rm : dedup (S.insert memberId seen) rms + +-- Privileged members without a known key are skipped (recipients can't verify them). +buildGroupRoster :: [GroupMember] -> [RosterMember] +buildGroupRoster mods = take maxGroupRosterSize $ mapMaybe rosterMember mods + where + rosterMember GroupMember {memberId, memberPubKey, memberRole} + | isRosterRole memberRole = (\k -> RosterMember {memberId, key = MemberKey k, role = memberRole, privileges = 0}) <$> memberPubKey + | otherwise = Nothing + sendHistory :: User -> GroupInfo -> GroupMember -> CM () sendHistory _ _ GroupMember {activeConn = Nothing} = throwChatError $ CEInternalError "member connection not active" sendHistory user gInfo@GroupInfo {membership} m@GroupMember {activeConn = Just conn} = @@ -1341,7 +1401,7 @@ setGroupLinkData :: NetworkRequestMode -> User -> GroupInfo -> GroupLink -> CM G setGroupLinkData nm user gInfo gLink = do cxt <- chatStoreCxt (conn, groupRelays) <- withFastStore $ \db -> - (,) <$> getGroupLinkConnection db cxt user gInfo <*> liftIO (getConnectedGroupRelays db gInfo) + (,) <$> getGroupLinkConnection db cxt user gInfo <*> liftIO (getPublishableGroupRelays db cxt user gInfo) let (userLinkData, crClientData) = groupLinkData gInfo gLink groupRelays linkType = if useRelays' gInfo then CCTChannel else CCTGroup sLnk <- shortenShortLink' . setShortLinkType_ linkType =<< withAgent (\a -> setConnShortLink a nm (aConnId conn) SCMContact userLinkData (Just crClientData)) @@ -1351,7 +1411,7 @@ setGroupLinkDataAsync :: User -> GroupInfo -> GroupLink -> CM () setGroupLinkDataAsync user gInfo gLink = do cxt <- chatStoreCxt (conn, groupRelays) <- withStore $ \db -> - (,) <$> getGroupLinkConnection db cxt user gInfo <*> liftIO (getConnectedGroupRelays db gInfo) + (,) <$> getGroupLinkConnection db cxt user gInfo <*> liftIO (getPublishableGroupRelays db cxt user gInfo) let (userLinkData, crClientData) = groupLinkData gInfo gLink groupRelays setAgentConnShortLinkAsync user conn userLinkData (Just crClientData) @@ -1628,13 +1688,16 @@ sendFileInline_ FileTransferMeta {filePath, chunkSize} sharedMsgId sendMsg = chSize = fromIntegral chunkSize parseChatMessage :: Connection -> ByteString -> CM (ChatMessage 'Json) -parseChatMessage conn s = do +parseChatMessage conn s = snd <$> parseChatMessage' conn s +{-# INLINE parseChatMessage #-} + +parseChatMessage' :: Connection -> ByteString -> CM (Maybe SignedMsg, ChatMessage 'Json) +parseChatMessage' conn s = case parseChatMessages s of - [msg] -> liftEither . first (ChatError . errType) $ (\(APMsg _ (ParsedMsg _ _ m)) -> checkEncoding m) =<< msg + [msg] -> liftEither . first (ChatError . errType) $ (\(APMsg _ (ParsedMsg _ sm m)) -> (sm,) <$> checkEncoding m) =<< msg _ -> throwChatError $ CEException "parseChatMessage: single message is expected" where errType = CEInvalidChatMessage conn Nothing (safeDecodeUtf8 s) -{-# INLINE parseChatMessage #-} getChatScopeInfo :: StoreCxt -> User -> GroupChatScope -> CM GroupChatScopeInfo getChatScopeInfo cxt user = \case @@ -1831,6 +1894,51 @@ closeFileHandle fileId files = do h_ <- atomically . stateTVar fs $ \m -> (M.lookup fileId m, M.delete fileId m) liftIO $ mapM_ hClose h_ `catchAll_` pure () +-- The roster file has no chat item, so chat-item file enumeration misses it; clean it up by group. +cleanupGroupRosterFile :: User -> GroupInfo -> CM () +cleanupGroupRosterFile User {userId} GroupInfo {groupId} = do + infos <- withStore' $ \db -> getGroupRosterFileInfo db userId groupId + forM_ infos $ \(fileId, filePath_) -> do + lift $ closeFileHandle fileId rcvFiles + forM_ filePath_ removeFsFile + withStore' $ \db -> do + deleteGroupRosterFile db userId groupId + deleteGroupRosterTransfers db groupId + +-- Supersede/cancel one source relay's in-flight roster transfer: remove its on-disk file + cached +-- handle first (the cascade only does rows), then the files + transfer rows. +cleanupRosterTransfer :: GroupInfo -> GroupMemberId -> CM () +cleanupRosterTransfer gInfo fromMemberId = + withStore' (\db -> getRosterTransferId db gInfo fromMemberId) >>= mapM_ cleanupRosterTransferById + +cleanupRosterTransferById :: Int64 -> CM () +cleanupRosterTransferById transferId = do + file_ <- withStore' $ \db -> getRosterTransferFile db transferId + forM_ file_ $ \(fileId, filePath_) -> do + lift $ closeFileHandle fileId rcvFiles + forM_ filePath_ removeFsFile + withStore' $ \db -> do + deleteRosterTransferFile db transferId + deleteRosterTransfer db transferId + +-- MUST evict the cached AppendMode handle before deleting chunks, else re-driven bytes append +-- after the stale prefix and corrupt the blob. +resetRosterPartialChunks :: RcvFileTransfer -> CM () +resetRosterPartialChunks ft@RcvFileTransfer {fileId, fileStatus} = do + lift $ closeFileHandle fileId rcvFiles + forM_ (rcvFilePath fileStatus) removeFsFile + withStore' $ \db -> deleteRcvFileChunks db ft + where + rcvFilePath = \case + RFSAccepted p -> Just p + RFSConnected p -> Just p + _ -> Nothing + +removeFsFile :: FilePath -> CM () +removeFsFile fp = do + p <- lift $ toFSFilePath fp + removeFile p `catchAllErrors` \_ -> pure () + deleteMembersConnections :: User -> [GroupMember] -> CM () deleteMembersConnections user members = deleteMembersConnections' user members False @@ -2063,6 +2171,26 @@ encodeConnInfoPQ pqSup v chatMsgEvent = do _ -> pure connInfo ECMLarge -> throwChatError $ CEException "large info" +-- conn-info wrapped as a signed element, so the receiver can verify the signature over the body +encodeSignedConnInfo :: MsgEncodingI e => MsgSigning -> ChatMsgEvent e -> CM ByteString +encodeSignedConnInfo signing chatMsgEvent = do + vr <- chatVersionRange + let info = ChatMessage {chatVRange = vr, msgId = Nothing, chatMsgEvent} + case encodeChatMessage maxEncodedInfoLength info of + ECMEncoded body -> pure $ encodeBatchElement (Just $ signChatMsgBody signing body) body + ECMLarge -> throwChatError $ CEException "large signed info" + +-- signed XMember for a relay-group join: proves the joiner holds the member key it asserts, and carries +-- viaRelay = the target relay's memberId inside the signed body so a sibling relay can't accept a replay +encodeXMemberConnInfo :: GroupInfo -> MemberId -> Profile -> CM ByteString +encodeXMemberConnInfo GroupInfo {membership = GroupMember {memberId}, groupKeys} relayMemberId profileToSend = + case groupKeys of + Just GroupKeys {publicGroupId, memberPrivKey} -> + let xMemberEvt = XMember profileToSend memberId (MemberKey $ C.publicKey memberPrivKey) (Just relayMemberId) + signing = MsgSigning CBGroup (smpEncode (publicGroupId, memberId)) KRMember memberPrivKey + in encodeSignedConnInfo signing xMemberEvt + Nothing -> throwChatError $ CEInternalError "no group keys for channel membership" + deliverMessage :: Connection -> CMEventTag e -> MsgBody -> MessageId -> CM (Int64, PQEncryption) deliverMessage conn cmEventTag msgBody msgId = do let msgFlags = MsgFlags {notification = hasNotification cmEventTag} @@ -2136,6 +2264,52 @@ sendGroupMessage' user gInfo members chatMsgEvent = ((Right msg) :| [], _) -> pure msg _ -> throwChatError $ CEInternalError "sendGroupMessage': expected 1 message" +-- TODO [relays] improvement: publish roster_version in link data so the owner can recover the latest version +-- TODO after restoring from a stale backup (relays accept only strictly-greater versions) +-- Persist the next roster version before sending the events that carry it (so a recipient never advances +-- past a version the owner hasn't recorded). The matching blob is broadcast separately, by broadcastRoster, +-- after the change is applied to the owner's members - so the served roster excludes demoted/removed members. +reserveRosterVersion :: GroupInfo -> CM VersionRoster +reserveRosterVersion gInfo = do + let rosterVer = maybe (VersionRoster 0) (\(VersionRoster n) -> VersionRoster (n + 1)) (rosterVersion gInfo) + withStore' $ \db -> setGroupRosterVersion db gInfo rosterVer + pure rosterVer + +broadcastRoster :: User -> GroupInfo -> VersionRoster -> CM () +broadcastRoster user gInfo rosterVer = do + cxt <- chatStoreCxt + (relays, rosterMems) <- withStore' $ \db -> + (,) <$> getGroupRelayMembers db cxt user gInfo <*> getGroupRosterMembers db cxt user gInfo + forM_ (L.nonEmpty relays) $ \relays' -> + sendRoster user gInfo (L.toList relays') rosterVer (buildGroupRoster rosterMems) + +-- Send the current roster (no version bump) to a newly added relay so it can serve joiners. +sendGroupRosterToRelay :: User -> GroupInfo -> GroupMember -> CM () +sendGroupRosterToRelay user gInfo relayMember = + forM_ (rosterVersion gInfo) $ \rosterVer -> do + cxt <- chatStoreCxt + rosterMems <- withStore' $ \db -> getGroupRosterMembers db cxt user gInfo + sendRoster user gInfo [relayMember] rosterVer (buildGroupRoster rosterMems) + +-- Row-less send (no files/snd_files rows, so no send-side cleanup); redelivery is the agent's. +sendRoster :: User -> GroupInfo -> [GroupMember] -> VersionRoster -> [RosterMember] -> CM () +sendRoster user gInfo members rosterVer roster = do + let blob = encodeRosterBlob roster + fileInv = InlineFileInvitation {fileSize = fromIntegral (B.length blob), fileDigest = FD.FileDigest $ LC.sha512Hash $ LB.fromStrict blob} + SndMessage {sharedMsgId} <- sendGroupMessage' user gInfo members (XGrpRoster GroupRoster {version = rosterVer, fileInv}) + sendInlineBlobChunks user gInfo members sharedMsgId blob + +-- Send a binary blob as BFileChunks under a shared_msg_id to the given members (chunked by fileChunkSize). +sendInlineBlobChunks :: User -> GroupInfo -> [GroupMember] -> SharedMsgId -> ByteString -> CM () +sendInlineBlobChunks user gInfo members sharedMsgId blob = do + chSize <- fromIntegral <$> asks (fileChunkSize . config) + go chSize 1 blob + where + go chSize chunkNo bytes = do + let (chunk, rest) = B.splitAt chSize bytes + void $ sendGroupMessage' user gInfo members (BFileChunk sharedMsgId (FileChunk chunkNo chunk)) + unless (B.null rest) $ go chSize (chunkNo + 1) rest + -- Relay advertises its current web preview capability to channel owners. -- Idempotent: sends only when the configured web domain differs from what was last sent, and only to -- owners whose recorded chat version supports relayWebCapVersion (older apps can't parse XGrpRelayCap). @@ -2372,10 +2546,14 @@ saveDirectRcvMSG conn@Connection {connId} agentMsgMeta chatMsg@ChatMessage {chat msg <- withStore $ \db -> createNewMessageAndRcvMsgDelivery db (ConnectionId connId) newMsg sharedMsgId_ rcvMsgDelivery Nothing pure (conn', msg) -saveGroupRcvMsg :: MsgEncodingI e => User -> GroupId -> GroupMember -> Connection -> MsgMeta -> VerifiedMsg e -> CM (GroupMember, Connection, RcvMessage) +saveGroupRcvMsg :: forall e. MsgEncodingI e => User -> GroupId -> GroupMember -> Connection -> MsgMeta -> VerifiedMsg e -> CM (GroupMember, Connection, RcvMessage) saveGroupRcvMsg user groupId authorMember conn@Connection {connId} agentMsgMeta verifiedMsg = do let ChatMessage {chatVRange, msgId = sharedMsgId_, chatMsgEvent} = verifiedChatMsg verifiedMsg - (am'@GroupMember {memberId = amMemId, groupMemberId = amGroupMemId}, conn') <- updateMemberChatVRange authorMember conn chatVRange + -- binary messages (file chunks) carry only the initial-version sentinel, not the sender's range; + -- applying it would downgrade the member's negotiated version and suppress version-gated delivery + (am'@GroupMember {memberId = amMemId, groupMemberId = amGroupMemId}, conn') <- case encoding @e of + SBinary -> pure (authorMember, conn) + SJson -> updateMemberChatVRange authorMember conn chatVRange let agentMsgId = fst $ recipient agentMsgMeta brokerTs = metaBrokerTs agentMsgMeta newMsg = NewRcvMessage {chatMsgEvent, verifiedMsg, brokerTs} @@ -2513,11 +2691,11 @@ saveRcvChatItem' user cd msg@RcvMessage {chatMsgEvent, msgSigned, forwardedByMem _ -> Nothing -- TODO [mentions] optimize by avoiding unnecessary parsing -mkChatItem :: (ChatTypeI c, MsgDirectionI d) => ChatDirection c d -> ShowGroupAsSender -> ChatItemId -> CIContent d -> Maybe (CIFile d) -> Maybe (CIQuote c) -> Maybe SharedMsgId -> Maybe CIForwardedFrom -> Maybe CITimed -> Bool -> Bool -> ChatItemTs -> Maybe GroupMemberId -> UTCTime -> ChatItem c d -mkChatItem cd showGroupAsSender ciId content file quotedItem sharedMsgId itemForwarded itemTimed live userMention itemTs forwardedByMember currentTs = +mkChatItem :: (ChatTypeI c, MsgDirectionI d) => ChatDirection c d -> ShowGroupAsSender -> ChatItemId -> CIContent d -> Maybe (CIFile d) -> Maybe (CIQuote c) -> Maybe SharedMsgId -> Maybe CIForwardedFrom -> Maybe CITimed -> Bool -> Bool -> ChatItemTs -> Maybe GroupMemberId -> Maybe MsgSigStatus -> UTCTime -> ChatItem c d +mkChatItem cd showGroupAsSender ciId content file quotedItem sharedMsgId itemForwarded itemTimed live userMention itemTs forwardedByMember msgSigned currentTs = let ts@(_, ft_) = ciContentTexts content hasLink_ = ciContentHasLink content ft_ - in mkChatItem_ cd showGroupAsSender ciId content ts file quotedItem sharedMsgId itemForwarded itemTimed live userMention hasLink_ itemTs forwardedByMember Nothing currentTs + in mkChatItem_ cd showGroupAsSender ciId content ts file quotedItem sharedMsgId itemForwarded itemTimed live userMention hasLink_ itemTs forwardedByMember msgSigned currentTs mkChatItem_ :: (ChatTypeI c, MsgDirectionI d) => ChatDirection c d -> ShowGroupAsSender -> ChatItemId -> CIContent d -> (Text, Maybe MarkdownList) -> Maybe (CIFile d) -> Maybe (CIQuote c) -> Maybe SharedMsgId -> Maybe CIForwardedFrom -> Maybe CITimed -> Bool -> Bool -> Bool -> ChatItemTs -> Maybe GroupMemberId -> Maybe MsgSigStatus -> UTCTime -> ChatItem c d mkChatItem_ cd showGroupAsSender ciId content (itemText, formattedText) file quotedItem sharedMsgId itemForwarded itemTimed live userMention hasLink_ itemTs forwardedByMember msgSigned currentTs = @@ -2679,7 +2857,7 @@ createFeatureEnabledItems_ :: User -> Contact -> CM [AChatItem] createFeatureEnabledItems_ user ct@Contact {mergedPreferences} = forM allChatFeatures $ \(ACF f) -> do let state = featureState $ getContactUserPreference f mergedPreferences - createChatItem user (CDDirectRcv ct) False (uncurry (CIRcvChatFeature $ chatFeature f) state) Nothing Nothing + createChatItem user (CDDirectRcv ct) False (uncurry (CIRcvChatFeature $ chatFeature f) state) Nothing Nothing Nothing createFeatureItems :: MsgDirectionI d => @@ -2709,15 +2887,15 @@ createContactsFeatureItems user cts chatDir ciFeature ciOffer getPref = do unless (null errs) $ toView' $ CEvtChatErrors errs toView' $ CEvtNewChatItems user acis where - contactChangedFeatures :: (Contact, Contact) -> (ChatDirection 'CTDirect d, ShowGroupAsSender, [(CIContent d, Maybe SharedMsgId)]) + contactChangedFeatures :: (Contact, Contact) -> (ChatDirection 'CTDirect d, ShowGroupAsSender, [(CIContent d, Maybe SharedMsgId, Maybe MsgSigStatus)]) contactChangedFeatures (Contact {mergedPreferences = cups}, ct'@Contact {mergedPreferences = cups'}) = do let contents = mapMaybe (\(ACF f) -> featureCIContent_ f) allChatFeatures (chatDir ct', False, contents) where - featureCIContent_ :: forall f. FeatureI f => SChatFeature f -> Maybe (CIContent d, Maybe SharedMsgId) + featureCIContent_ :: forall f. FeatureI f => SChatFeature f -> Maybe (CIContent d, Maybe SharedMsgId, Maybe MsgSigStatus) featureCIContent_ f - | state /= state' = Just (fContent ciFeature state', Nothing) - | prefState /= prefState' = Just (fContent ciOffer prefState', Nothing) + | state /= state' = Just (fContent ciFeature state', Nothing, Nothing) + | prefState /= prefState' = Just (fContent ciOffer prefState', Nothing, Nothing) | otherwise = Nothing where fContent :: FeatureContent a d -> (a, Maybe Int) -> CIContent d @@ -2750,16 +2928,16 @@ createGroupFeatureItems_ user cd showGroupAsSender ciContent GroupInfo {fullGrou forM allGroupFeatures $ \(AGF f) -> do let p = getGroupPreference f fullGroupPreferences (_, param, role) = groupFeatureState p - createChatItem user cd showGroupAsSender (ciContent (toGroupFeature f) (toGroupPreference p) param role) Nothing Nothing + createChatItem user cd showGroupAsSender (ciContent (toGroupFeature f) (toGroupPreference p) param role) Nothing Nothing Nothing createInternalChatItem :: (ChatTypeI c, MsgDirectionI d) => User -> ChatDirection c d -> CIContent d -> Maybe UTCTime -> CM () createInternalChatItem user cd content itemTs_ = do - ci <- createChatItem user cd False content Nothing itemTs_ + ci <- createChatItem user cd False content Nothing Nothing itemTs_ toView $ CEvtNewChatItems user [ci] -createChatItem :: (ChatTypeI c, MsgDirectionI d) => User -> ChatDirection c d -> ShowGroupAsSender -> CIContent d -> Maybe SharedMsgId -> Maybe UTCTime -> CM AChatItem -createChatItem user cd showGroupAsSender content sharedMsgId itemTs_ = - lift (createChatItems user itemTs_ [(cd, showGroupAsSender, [(content, sharedMsgId)])]) >>= \case +createChatItem :: (ChatTypeI c, MsgDirectionI d) => User -> ChatDirection c d -> ShowGroupAsSender -> CIContent d -> Maybe SharedMsgId -> Maybe MsgSigStatus -> Maybe UTCTime -> CM AChatItem +createChatItem user cd showGroupAsSender content sharedMsgId msgSigned itemTs_ = + lift (createChatItems user itemTs_ [(cd, showGroupAsSender, [(content, sharedMsgId, msgSigned)])]) >>= \case [Right ci] -> pure ci [Left e] -> throwError e rs -> throwChatError $ CEInternalError $ "createInternalChatItem: expected 1 result, got " <> show (length rs) @@ -2771,7 +2949,7 @@ createChatItems :: (ChatTypeI c, MsgDirectionI d) => User -> Maybe UTCTime -> - [(ChatDirection c d, ShowGroupAsSender, [(CIContent d, Maybe SharedMsgId)])] -> + [(ChatDirection c d, ShowGroupAsSender, [(CIContent d, Maybe SharedMsgId, Maybe MsgSigStatus)])] -> CM' [Either ChatError AChatItem] createChatItems user itemTs_ dirsCIContents = do createdAt <- liftIO getCurrentTime @@ -2780,24 +2958,24 @@ createChatItems user itemTs_ dirsCIContents = do void . withStoreBatch' $ \db -> map (updateChat db cxt createdAt) dirsCIContents withStoreBatch' $ \db -> concatMap (createACIs db itemTs createdAt) dirsCIContents where - updateChat :: DB.Connection -> StoreCxt -> UTCTime -> (ChatDirection c d, ShowGroupAsSender, [(CIContent d, Maybe SharedMsgId)]) -> IO () + updateChat :: DB.Connection -> StoreCxt -> UTCTime -> (ChatDirection c d, ShowGroupAsSender, [(CIContent d, Maybe SharedMsgId, Maybe MsgSigStatus)]) -> IO () updateChat db cxt createdAt (cd, _, contents) - | any (ciRequiresAttention . fst) contents || contactChatDeleted cd = void $ updateChatTsStats db cxt user cd createdAt memberChatStats + | any (\(content, _, _) -> ciRequiresAttention content) contents || contactChatDeleted cd = void $ updateChatTsStats db cxt user cd createdAt memberChatStats | otherwise = pure () where memberChatStats :: Maybe (Int, MemberAttention, Int) memberChatStats = case cd of CDGroupRcv _g (Just scope) m -> do - let unread = length $ filter (ciRequiresAttention . fst) contents + let unread = length $ filter (\(content, _, _) -> ciRequiresAttention content) contents in Just (unread, memberAttentionChange unread itemTs_ (Just m) scope, 0) _ -> Nothing - createACIs :: DB.Connection -> UTCTime -> UTCTime -> (ChatDirection c d, ShowGroupAsSender, [(CIContent d, Maybe SharedMsgId)]) -> [IO AChatItem] + createACIs :: DB.Connection -> UTCTime -> UTCTime -> (ChatDirection c d, ShowGroupAsSender, [(CIContent d, Maybe SharedMsgId, Maybe MsgSigStatus)]) -> [IO AChatItem] createACIs db itemTs createdAt (cd, showGroupAsSender, contents) = map createACI contents where - createACI (content, sharedMsgId) = do + createACI (content, sharedMsgId, msgSigned) = do let hasLink_ = ciContentHasLink content Nothing - ciId <- createNewChatItemNoMsg db user cd showGroupAsSender content sharedMsgId hasLink_ itemTs createdAt - let ci = mkChatItem cd showGroupAsSender ciId content Nothing Nothing Nothing Nothing Nothing False False itemTs Nothing createdAt + ciId <- createNewChatItemNoMsg db user cd showGroupAsSender content sharedMsgId hasLink_ msgSigned itemTs createdAt + let ci = mkChatItem cd showGroupAsSender ciId content Nothing Nothing Nothing Nothing Nothing False False itemTs Nothing msgSigned createdAt pure $ AChatItem (chatTypeI @c) (msgDirection @d) (toChatInfo cd) ci -- rcvMem_ Nothing means message from channel - treated same as message from moderator, diff --git a/src/Simplex/Chat/Library/Subscriber.hs b/src/Simplex/Chat/Library/Subscriber.hs index 2664e217f7..a2ea9870cc 100644 --- a/src/Simplex/Chat/Library/Subscriber.hs +++ b/src/Simplex/Chat/Library/Subscriber.hs @@ -24,6 +24,7 @@ import Control.Monad.IO.Unlift import Control.Monad.Reader import Data.ByteString.Char8 (ByteString) import qualified Data.ByteString.Char8 as B +import qualified Data.ByteString.Lazy.Char8 as LB import Data.Either (lefts, partitionEithers, rights) import Data.Foldable (foldr', foldrM) import Data.Functor (($>)) @@ -40,12 +41,14 @@ import Data.Text (Text) import qualified Data.Text as T import Data.Text.Encoding (decodeLatin1) import Data.Time.Clock (NominalDiffTime, UTCTime, addUTCTime, diffUTCTime, getCurrentTime) +import Data.Time.Format (defaultTimeLocale, formatTime) import qualified Data.UUID as UUID import qualified Data.UUID.V4 as V4 import Data.Word (Word32) import Simplex.Chat.Call import Simplex.Chat.Controller import Simplex.Chat.Delivery +import Simplex.Chat.Files (getChatTempDirectory) import Simplex.Chat.Library.Internal import Simplex.Chat.Web (channelContentChanged, channelProfileUpdated, channelRemoved) import Simplex.Chat.Messages @@ -77,7 +80,7 @@ import qualified Simplex.FileTransfer.Transport as XFTP import Simplex.FileTransfer.Types (FileErrorType (..), RcvFileId, SndFileId) import Simplex.Messaging.Agent import Simplex.Messaging.Agent.Client (getAgentWorker, temporaryOrHostError, waitForUserNetwork, waitForWork, waitWhileSuspended, withWorkItems, withWork_) -import Simplex.Messaging.Agent.Env.SQLite (AgentConfig (..), Worker (..)) +import Simplex.Messaging.Agent.Env.SQLite (Worker (..)) import Simplex.Messaging.Agent.Protocol import qualified Simplex.Messaging.Agent.Protocol as AP (AgentErrorType (..)) import Simplex.Messaging.Agent.RetryInterval (RetryInterval (..), nextRetryDelay) @@ -87,8 +90,10 @@ import qualified Simplex.Messaging.Crypto as C import Simplex.Messaging.Crypto.File (CryptoFile (..)) import Simplex.Messaging.Crypto.Ratchet (PQEncryption (..), PQSupport (..), pattern PQEncOff, pattern PQEncOn, pattern PQSupportOff, pattern PQSupportOn) import qualified Simplex.Messaging.Crypto.Ratchet as CR +import qualified Simplex.Messaging.Crypto.Lazy as LC import Simplex.Messaging.Encoding (smpEncode) import Simplex.Messaging.Encoding.String +import Simplex.Messaging.Parsers (parseAll) import Simplex.Messaging.Protocol (ErrorType (..), MsgFlags (..), ServiceSub (..), ServiceSubError (..), ServiceSubResult (..)) import qualified Simplex.Messaging.Protocol as SMP import Simplex.Messaging.ServiceScheme (ServiceScheme (..)) @@ -106,6 +111,13 @@ import UnliftIO.STM smallGroupsRcptsMemLimit :: Int smallGroupsRcptsMemLimit = 20 +-- Verifies member signatures over CBGroup <> (publicGroupId, memberId) <> signedBody under the given key. +-- signatures is NonEmpty so the verification can't be vacuously true. +verifyGroupSig :: C.PublicKeyEd25519 -> B64UrlByteString -> MemberId -> NonEmpty MsgSignature -> ByteString -> Bool +verifyGroupSig key publicGroupId memberId signatures signedBody = + let prefix = smpEncode CBGroup <> smpEncode (publicGroupId, memberId) + in all (\case (MsgSignature KRMember sig) -> C.verify (C.APublicVerifyKey C.SEd25519 key) sig (prefix <> signedBody)) signatures + processAgentMessage :: ACorrId -> ConnId -> AEvent 'AEConn -> CM () processAgentMessage _ _ (DEL_RCVQS delQs) = toView $ CEvtAgentRcvQueuesDeleted $ L.map rcvQ delQs @@ -576,7 +588,7 @@ processAgentMessageConn cxt user@User {userId} corrId agentConnId agentMessage = (gInfo, host) <- withStore $ \db -> do liftIO $ deleteContactCardKeepConn db connId ct createGroupInvitedViaLink db cxt user conn'' glInv - void $ createChatItem user (CDGroupSnd gInfo Nothing) False CIChatBanner Nothing (Just epochStart) + void $ createChatItem user (CDGroupSnd gInfo Nothing) False CIChatBanner Nothing Nothing (Just epochStart) -- [incognito] send saved profile incognitoProfile <- forM customUserProfileId $ \pId -> withStore (\db -> getProfileById db userId pId) profileToSend <- presentUserBadge user incognitoProfile $ userProfileInGroup user gInfo (fromLocalProfile <$> incognitoProfile) @@ -901,8 +913,21 @@ processAgentMessageConn cxt user@User {userId} corrId agentConnId agentMessage = GCInviteeMember | isRelay m -> do withStore' $ \db -> updateGroupMemberStatus db userId m GSMemConnected - gLink <- withStore $ \db -> getGroupLink db user gInfo - setGroupLinkDataAsync user gInfo gLink + if m `supportsVersion` groupRosterVersion + then do + -- send the relay a roster (materializing version 0 for old channels with NULL roster_version); + -- the relay stays RSInvited (unpublishable) until it acks, so no joiner can impersonate a privileged member + gInfo' <- case rosterVersion gInfo of + Just _ -> pure gInfo + Nothing -> do + withStore' $ \db -> setGroupRosterVersion db gInfo (VersionRoster 0) + pure gInfo {rosterVersion = Just (VersionRoster 0)} + sendGroupRosterToRelay user gInfo' m + else do + -- a relay below groupRosterVersion can't ack a roster; publish it on connect as before + -- the handshake (getPublishableGroupRelays and the LINK handler include/activate it by version) + gLink <- withStore $ \db -> getGroupLink db user gInfo + setGroupLinkDataAsync user gInfo gLink | otherwise -> do (gInfo', mStatus) <- if not (memberPending m) @@ -1024,8 +1049,8 @@ processAgentMessageConn cxt user@User {userId} corrId agentConnId agentMessage = pure newDeliveryTasks processEvent :: forall e. MsgEncodingI e => GroupInfo -> GroupMember -> VerifiedMsg e -> CM (Maybe NewMessageDeliveryTask) processEvent gInfo' m' verifiedMsg = do - (m'', conn', msg@RcvMessage {msgId, chatMsgEvent = ACME _ event}) <- saveGroupRcvMsg user groupId m' conn msgMeta verifiedMsg cc <- ask + (m'', conn', msg@RcvMessage {msgId, sharedMsgId_, chatMsgEvent = ACME _ event}) <- saveGroupRcvMsg user groupId m' conn msgMeta verifiedMsg let ctx js = DeliveryTaskContext js False checkSendAsGroup :: Maybe Bool -> CM (Maybe DeliveryTaskContext) -> CM (Maybe DeliveryTaskContext) checkSendAsGroup asGroup_ a @@ -1064,23 +1089,25 @@ processAgentMessageConn cxt user@User {userId} corrId agentConnId agentMessage = XGrpMemIntro memInfo memRestrictions_ -> Nothing <$ xGrpMemIntro gInfo' m'' memInfo memRestrictions_ XGrpMemInv memId introInv -> Nothing <$ xGrpMemInv gInfo' m'' memId introInv XGrpMemFwd memInfo introInv -> Nothing <$ xGrpMemFwd gInfo' m'' memInfo introInv - XGrpMemRole memId memRole -> fmap ctx <$> xGrpMemRole gInfo' m'' memId memRole msg brokerTs + XGrpMemRole memId memRole memberKey rosterVer -> fmap ctx <$> xGrpMemRole gInfo' m'' memId memRole memberKey rosterVer msg brokerTs XGrpMemRestrict memId memRestrictions -> fmap ctx <$> xGrpMemRestrict gInfo' m'' memId memRestrictions msg brokerTs XGrpMemCon memId -> Nothing <$ xGrpMemCon gInfo' m'' memId - XGrpMemDel memId withMessages -> case encoding @e of - SJson -> fmap ctx <$> xGrpMemDel gInfo' m'' memId withMessages verifiedMsg msg brokerTs False + XGrpMemDel memId withMessages rosterVer -> case encoding @e of + SJson -> fmap ctx <$> xGrpMemDel gInfo' m'' memId withMessages rosterVer verifiedMsg msg brokerTs False SBinary -> pure Nothing XGrpLeave -> fmap ctx <$> xGrpLeave gInfo' m'' msg brokerTs XGrpDel -> Just (DeliveryTaskContext (DJSGroup {jobSpec = DJRelayRemoved}) False) <$ xGrpDel gInfo' m'' msg brokerTs XGrpInfo p' -> fmap ctx <$> xGrpInfo gInfo' m'' p' msg brokerTs XGrpPrefs ps' -> fmap ctx <$> xGrpPrefs gInfo' m'' ps' msg + XGrpRoster gr -> fmap ctx <$> xGrpRoster gInfo' m'' m'' gr verifiedMsg sharedMsgId_ brokerTs + XGrpRosterAck ackVer ackErr -> Nothing <$ xGrpRosterAck gInfo' m'' ackVer ackErr -- TODO [knocking] why don't we forward these messages? XGrpDirectInv connReq mContent_ msgScope -> memberCanSend (Just m'') msgScope $ Nothing <$ xGrpDirectInv gInfo' m'' conn' connReq mContent_ msg brokerTs XGrpMsgForward fwd msg' -> Nothing <$ xGrpMsgForward gInfo' Nothing m'' fwd (ParsedMsg Nothing Nothing msg') brokerTs XInfoProbe probe -> Nothing <$ xInfoProbe (COMGroupMember m'') probe XInfoProbeCheck probeHash -> Nothing <$ xInfoProbeCheck (COMGroupMember m'') probeHash XInfoProbeOk probe -> Nothing <$ xInfoProbeOk (COMGroupMember m'') probe - BFileChunk sharedMsgId chunk -> Nothing <$ bFileChunkGroup gInfo' sharedMsgId chunk msgMeta + BFileChunk sharedMsgId chunk -> Nothing <$ bFileChunkGroup gInfo' m'' sharedMsgId chunk msgMeta _ -> Nothing <$ messageError ("unsupported message: " <> tshow event) forM deliveryTaskContext_ $ \taskContext -> do let contentChanged :: CM () @@ -1143,7 +1170,9 @@ processAgentMessageConn cxt user@User {userId} corrId agentConnId agentMessage = sentMsgDeliveryEvent conn msgId checkSndInlineFTComplete conn msgId updateGroupItemsStatus gInfo m conn msgId GSSSent (Just $ isJust proxy) - when continued $ sendPendingGroupMessages user gInfo m conn + when continued $ do + when (isUserGrpFwdRelay gInfo) $ serveRoster user gInfo m -- roster ahead of the resumed backlog + sendPendingGroupMessages user gInfo m conn SWITCH qd phase cStats -> do toView $ CEvtGroupMemberSwitch user gInfo m (SwitchProgress qd phase cStats) (gInfo', m', scopeInfo) <- mkGroupChatScope gInfo m @@ -1195,9 +1224,10 @@ processAgentMessageConn cxt user@User {userId} corrId agentConnId agentMessage = CFGetRelayDataJoin -> do -- Update relay member with key, memberId and profile from link relayLinkData_ <- liftIO $ decodeLinkUserData cData - case (relayLinkData_, linkEntityId) of - (Just RelayShortLinkData {relayProfile = p}, Just entityId) -> + relayMemberId <- case (relayLinkData_, linkEntityId) of + (Just RelayShortLinkData {relayProfile = p}, Just entityId) -> do withStore $ \db -> updateRelayMemberData db cxt user m (MemberId entityId) (MemberKey relayKey) p + pure $ MemberId entityId _ -> throwChatError $ CEException "relay link: no relay link data or entity id" case cReq of CRContactUri crData@ConnReqUriData {crClientData} -> do @@ -1210,13 +1240,9 @@ processAgentMessageConn cxt user@User {userId} corrId agentConnId agentMessage = cReqHash = contactCReqHash $ CRContactUri crData {crScheme = SSSimplex} -- Update connection with data derived from cReq, now available after getConnShortLinkAsync withStore' $ \db -> updateConnLinkData db user conn cReq cReqHash groupLinkId chatV pqSup - let GroupMember {memberId = membershipMemId} = membership - incognitoProfile = incognitoMembershipProfile gInfo - profileToSend <- presentUserBadge user incognitoProfile $ userProfileInGroup user gInfo (fromLocalProfile <$> incognitoProfile) - memberPubKey <- case groupKeys gInfo of - Just GroupKeys {memberPrivKey} -> pure $ C.publicKey memberPrivKey - Nothing -> throwChatError $ CEInternalError "no group keys for channel membership" - dm <- encodeConnInfo $ XMember profileToSend membershipMemId (MemberKey memberPubKey) + let incognitoProfile = fromLocalProfile <$> incognitoMembershipProfile gInfo + profileToSend <- presentUserBadge user incognitoProfile $ userProfileInGroup user gInfo incognitoProfile + dm <- encodeXMemberConnInfo gInfo relayMemberId profileToSend subMode <- chatReadVar subscriptionMode void $ joinAgentConnectionAsync user (Just conn) True cReq dm subMode CFGetRelayDataAccept -> do @@ -1226,7 +1252,7 @@ processAgentMessageConn cxt user@User {userId} corrId agentConnId agentMessage = relayProfile <- liftIO (decodeLinkUserData cData) >>= \case Just RelayShortLinkData {relayProfile = p} -> pure p Nothing -> throwChatError $ CEException "relay link: no relay link data" - (confId, m', relay) <- withStore $ \db -> do + (confId, m', relay) <- withStore $ \db -> do confId <- getRelayConfId db m liftIO $ updateGroupMemberStatus db userId m GSMemAccepted (m', relay) <- setRelayLinkAccepted db cxt user m (MemberKey relayKey) relayProfile @@ -1239,7 +1265,9 @@ processAgentMessageConn cxt user@User {userId} corrId agentConnId agentMessage = _ -> throwChatError $ CECommandError "unexpected cmdFunction" QCONT -> do continued <- continueSending connEntity conn - when continued $ sendPendingGroupMessages user gInfo m conn + when continued $ do + when (isUserGrpFwdRelay gInfo) $ serveRoster user gInfo m -- roster ahead of the resumed backlog + sendPendingGroupMessages user gInfo m conn MWARN msgId err -> do withStore' $ \db -> updateGroupItemsErrorStatus db msgId (groupMemberId' m) (GSSWarning $ agentSndError err) processConnMWARN connEntity conn err @@ -1312,13 +1340,18 @@ processAgentMessageConn cxt user@User {userId} corrId agentConnId agentMessage = r n'' = Just (ci, CIRcvDecryptionError mde n'') mdeUpdatedCI _ _ = Nothing - receiveFileChunk :: RcvFileTransfer -> Maybe Connection -> MsgMeta -> FileChunk -> CM () - receiveFileChunk ft@RcvFileTransfer {fileId, chunkSize} conn_ meta@MsgMeta {recipient = (msgId, _), integrity} = \case - FileChunkCancel -> - unless (rcvFileCompleteOrCancelled ft) $ do - cancelRcvFileTransfer user ft - ci <- withStore $ \db -> getChatItemByFileId db cxt user fileId - toView $ CEvtRcvFileSndCancelled user ci ft + receiveFileChunk :: Maybe GroupInfo -> RcvFileTransfer -> Maybe Connection -> MsgMeta -> FileChunk -> CM () + receiveFileChunk gInfo_ ft@RcvFileTransfer {fileId, fileType, chunkSize} conn_ MsgMeta {recipient = (msgId, _), integrity} = \case + FileChunkCancel -> case fileType of + -- cancel only this source's transfer; other relays' in-flight transfers are independent + FTRoster -> do + t_ <- withStore' $ \db -> getRosterTransfer db fileId + forM_ t_ $ \RcvRosterTransfer {rosterTransferId} -> cleanupRosterTransferById rosterTransferId + FTNormal -> + unless (rcvFileCompleteOrCancelled ft) $ do + cancelRcvFileTransfer user ft + ci <- withStore $ \db -> getChatItemByFileId db cxt user fileId + toView $ CEvtRcvFileSndCancelled user ci ft FileChunk {chunkNo, chunkBytes = chunk} -> do case integrity of MsgOk -> pure () @@ -1329,30 +1362,33 @@ processAgentMessageConn cxt user@User {userId} corrId agentConnId agentMessage = RcvChunkOk -> if B.length chunk /= fromInteger chunkSize then badRcvFileChunk ft "incorrect chunk size" - else withAckMessage' "file msg" agentConnId meta $ appendFileChunk ft chunkNo chunk False + else appendFileChunk ft chunkNo chunk False RcvChunkFinal -> if B.length chunk > fromInteger chunkSize then badRcvFileChunk ft "incorrect chunk size" else do appendFileChunk ft chunkNo chunk True - ci <- withStore $ \db -> do - liftIO $ do - updateRcvFileStatus db fileId FSComplete - updateCIFileStatus db user fileId CIFSRcvComplete - deleteRcvFileChunks db ft - getChatItemByFileId db cxt user fileId - toView $ CEvtRcvFileComplete user ci - mapM_ (deleteAgentConnectionAsync . aConnId) conn_ - RcvChunkDuplicate -> withAckMessage' "file msg" agentConnId meta $ pure () + case fileType of + FTRoster -> forM_ gInfo_ $ \gInfo -> rosterCompletion gInfo ft + FTNormal -> do + ci <- withStore $ \db -> do + liftIO $ do + updateRcvFileStatus db fileId FSComplete + updateCIFileStatus db user fileId CIFSRcvComplete + deleteRcvFileChunks db ft + getChatItemByFileId db cxt user fileId + toView $ CEvtRcvFileComplete user ci + mapM_ (deleteAgentConnectionAsync . aConnId) conn_ + RcvChunkDuplicate -> pure () RcvChunkError -> badRcvFileChunk ft $ "incorrect chunk number " <> show chunkNo processContactConnMessage :: AEvent e -> ConnectionEntity -> Connection -> UserContact -> CM () processContactConnMessage agentMsg connEntity conn UserContact {userContactLinkId = uclId, groupId = ucGroupId_} = case agentMsg of REQ invId pqSupport _ connInfo -> do - ChatMessage {chatVRange, chatMsgEvent} <- parseChatMessage conn connInfo + (signedMsg_, ChatMessage {chatVRange, chatMsgEvent}) <- parseChatMessage' conn connInfo case chatMsgEvent of XContact p xContactId_ welcomeMsgId_ requestMsg_ -> profileContactRequest invId chatVRange p xContactId_ welcomeMsgId_ requestMsg_ pqSupport - XMember p joiningMemberId joiningMemberKey -> memberJoinRequestViaRelay invId chatVRange p joiningMemberId joiningMemberKey + XMember p joiningMemberId joiningMemberKey viaRelay -> memberJoinRequestViaRelay invId chatVRange signedMsg_ p joiningMemberId joiningMemberKey viaRelay XInfo p -> profileContactRequest invId chatVRange p Nothing Nothing Nothing pqSupport XGrpRelayInv groupRelayInv -> xGrpRelayInv invId chatVRange groupRelayInv XGrpRelayTest challenge _ -> xGrpRelayTest invId chatVRange challenge @@ -1364,13 +1400,13 @@ processAgentMessageConn cxt user@User {userId} corrId agentConnId agentMessage = CFSetShortLink -> case (ucGroupId_, auData) of (Just groupId, UserContactLinkData UserContactData {relays = relayLinks}) -> do - (gInfo, gLink, relays, relaysChanged, newlyActiveLinks) <- withStore $ \db -> do + (gInfo, gLink, relays, relaysChanged, newlyActiveLinks, newlyActiveGMIds) <- withStore $ \db -> do gInfo <- getGroupInfo db cxt user groupId gLink <- getGroupLink db user gInfo relays <- liftIO $ getGroupRelays db gInfo - (relays', changed, newlyActive) <- liftIO $ foldrM (updateRelay db) ([], False, []) relays + (relays', changed, newlyActiveLinks, newlyActiveGMIds) <- liftIO $ foldrM (updateRelay db) ([], False, [], []) relays liftIO $ setGroupInProgressDone db gInfo - pure (gInfo, gLink, relays', changed, newlyActive) + pure (gInfo, gLink, relays', changed, newlyActiveLinks, newlyActiveGMIds) toView $ CEvtGroupLinkDataUpdated user gInfo gLink relays relaysChanged let GroupSummary {publicMemberCount} = groupSummary gInfo -- Owner is counted in publicMemberCount; > 1 means at least one subscriber. @@ -1388,14 +1424,16 @@ processAgentMessageConn cxt user@User {userId} corrId agentConnId agentMessage = unless (null recipients) $ void $ sendGroupMessages user gInfo Nothing False recipients events where - updateRelay :: DB.Connection -> GroupRelay -> ([GroupRelay], Bool, [ShortLinkContact]) -> IO ([GroupRelay], Bool, [ShortLinkContact]) - updateRelay db relay@GroupRelay {relayLink, relayStatus} (acc, changed, newlyActive) = + updateRelay :: DB.Connection -> GroupRelay -> ([GroupRelay], Bool, [ShortLinkContact], [GroupMemberId]) -> IO ([GroupRelay], Bool, [ShortLinkContact], [GroupMemberId]) + updateRelay db relay@GroupRelay {groupMemberId, relayLink, relayStatus} (acc, changed, newlyActiveLinks, newlyActiveGMIds) = case relayLink of Just rLink - | rLink `elem` relayLinks && relayStatus == RSAccepted -> do + -- version is gated upstream at publish (getPublishableGroupRelays): an RSAccepted relay + -- whose link is in the published data is necessarily pre-roster, so activate it too + | rLink `elem` relayLinks && (relayStatus == RSAcknowledgedRoster || relayStatus == RSAccepted) -> do relay' <- updateRelayStatus db relay RSActive - pure (relay' : acc, True, rLink : newlyActive) - | rLink `elem` relayLinks -> pure (relay : acc, changed, newlyActive) + pure (relay' : acc, True, rLink : newlyActiveLinks, groupMemberId : newlyActiveGMIds) + | rLink `elem` relayLinks -> pure (relay : acc, changed, newlyActiveLinks, newlyActiveGMIds) | relayStatus == RSActive -> do -- Relay link absent from link data — deactivate. -- RSAccepted relays are not deactivated: their own link data update @@ -1404,8 +1442,8 @@ processAgentMessageConn cxt user@User {userId} corrId agentConnId agentMessage = -- TODO the SMP server, but this owner won't receive a LINK callback for it -- TODO (LINK only fires in response to own setConnShortLink calls). relay' <- updateRelayStatus db relay RSInactive - pure (relay' : acc, True, newlyActive) - _ -> pure (relay : acc, changed, newlyActive) + pure (relay' : acc, True, newlyActiveLinks, newlyActiveGMIds) + _ -> pure (relay : acc, changed, newlyActiveLinks, newlyActiveGMIds) _ -> throwChatError $ CECommandError "LINK event expected for a group link only" _ -> throwChatError $ CECommandError "unexpected cmdFunction" MERR _ err -> do @@ -1446,12 +1484,12 @@ processAgentMessageConn cxt user@User {userId} corrId agentConnId agentMessage = -- they will be updated after connection is accepted. upsertDirectRequestItem cd (requestMsg_, prevSharedMsgId_) Nothing -> do - void $ createChatItem user (CDDirectSnd ct) False CIChatBanner Nothing (Just epochStart) + void $ createChatItem user (CDDirectSnd ct) False CIChatBanner Nothing Nothing (Just epochStart) let e2eContent = CIRcvDirectE2EEInfo $ e2eInfoEncrypted $ Just $ CR.pqSupportToEnc $ reqPQSup - void $ createChatItem user cd False e2eContent Nothing Nothing + void $ createChatItem user cd False e2eContent Nothing Nothing Nothing void $ createFeatureEnabledItems_ user ct forM_ (autoReply addressSettings) $ \mc -> forM_ welcomeSharedMsgId $ \sharedMsgId -> - createChatItem user (CDDirectSnd ct) False (CISndMsgContent mc) (Just sharedMsgId) Nothing + createChatItem user (CDDirectSnd ct) False (CISndMsgContent mc) (Just sharedMsgId) Nothing Nothing mapM (createRequestItem cd) requestMsg_ case autoAccept of Nothing -> do @@ -1476,13 +1514,13 @@ processAgentMessageConn cxt user@User {userId} corrId agentConnId agentMessage = -- they will be updated after connection is accepted. upsertBusinessRequestItem cd (requestMsg_, prevSharedMsgId_) Nothing -> do - void $ createChatItem user (CDGroupSnd gInfo Nothing) False CIChatBanner Nothing (Just epochStart) + void $ createChatItem user (CDGroupSnd gInfo Nothing) False CIChatBanner Nothing Nothing (Just epochStart) -- TODO [short links] possibly, we can just keep them created where they are created on the business side due to auto-accept -- let e2eContent = CIRcvGroupE2EEInfo $ E2EInfo $ Just False -- no PQ encryption in groups - -- void $ createChatItem user cd False e2eContent Nothing Nothing + -- void $ createChatItem user cd False e2eContent Nothing Nothing Nothing -- void $ createFeatureEnabledItems_ user ct forM_ (autoReply addressSettings) $ \arMC -> forM_ welcomeSharedMsgId $ \sharedMsgId -> - createChatItem user (CDGroupSnd gInfo Nothing) False (CISndMsgContent arMC) (Just sharedMsgId) Nothing + createChatItem user (CDGroupSnd gInfo Nothing) False (CISndMsgContent arMC) (Just sharedMsgId) Nothing Nothing mapM (createRequestItem cd) requestMsg_ toView $ CEvtAcceptingBusinessRequest user gInfo where @@ -1546,7 +1584,7 @@ processAgentMessageConn cxt user@User {userId} corrId agentConnId agentMessage = upsertBusinessRequestItem (CDChannelRcv _ _) = const $ pure Nothing createRequestItem :: ChatTypeI c => ChatDirection c 'MDRcv -> (SharedMsgId, MsgContent) -> CM AChatItem createRequestItem cd (sharedMsgId, mc) = do - aci <- createChatItem user cd False (CIRcvMsgContent mc) (Just sharedMsgId) Nothing + aci <- createChatItem user cd False (CIRcvMsgContent mc) (Just sharedMsgId) Nothing Nothing toView $ CEvtNewChatItems user [aci] pure aci upsertRequestItem :: ChatTypeI c => ChatDirection c 'MDRcv -> ((SharedMsgId, MsgContent) -> CM (Maybe AChatItem)) -> (SharedMsgId -> CM ()) -> (Maybe (SharedMsgId, MsgContent), Maybe SharedMsgId) -> CM (Maybe AChatItem) @@ -1574,7 +1612,7 @@ processAgentMessageConn cxt user@User {userId} corrId agentConnId agentMessage = messageError "processContactConnMessage: chat version range incompatible for accepting group join request" | otherwise -> do let profileMode = ExistingIncognito <$> incognitoMembershipProfile gInfo - mem <- acceptGroupJoinRequestAsync user uclId gInfo invId chatVRange p xContactId_ Nothing welcomeMsgId_ acceptance useRole profileMode Nothing + mem <- acceptGroupJoinRequestAsync user uclId gInfo invId chatVRange p xContactId_ Nothing welcomeMsgId_ acceptance useRole profileMode Nothing Nothing (gInfo', mem', scopeInfo) <- mkGroupChatScope gInfo mem createInternalChatItem user (CDGroupRcv gInfo' scopeInfo mem') (CIRcvGroupEvent RGEInvitedViaGroupLink) Nothing toView $ CEvtAcceptingGroupJoinRequestMember user gInfo' mem' @@ -1613,19 +1651,37 @@ processAgentMessageConn cxt user@User {userId} corrId agentConnId agentMessage = where User {userChatRelay} = user -- TODO [relays] owner, relays: TBC how to communicate member rejection rules from owner to relays - -- TODO [relays] relay: TBC communicate rejection when memberId already exists (currently checked in createJoiningMember) - memberJoinRequestViaRelay :: InvitationId -> VersionRangeChat -> Profile -> MemberId -> MemberKey -> CM () - memberJoinRequestViaRelay invId chatVRange p joiningMemberId joiningMemberKey = do + memberJoinRequestViaRelay :: InvitationId -> VersionRangeChat -> Maybe SignedMsg -> Profile -> MemberId -> MemberKey -> Maybe MemberId -> CM () + memberJoinRequestViaRelay invId chatVRange signedMsg_ p joiningMemberId joiningMemberKey@(MemberKey joiningKey) viaRelay = do (_ucl, gLinkInfo_) <- withStore $ \db -> getUserContactLinkById db userId uclId case gLinkInfo_ of Just GroupLinkInfo {groupId, memberRole = gLinkMemRole} -> do gInfo <- withStore $ \db -> getGroupInfo db cxt user groupId - mem <- acceptGroupJoinRequestAsync user uclId gInfo invId chatVRange p Nothing (Just joiningMemberId) Nothing GAAccepted gLinkMemRole Nothing (Just joiningMemberKey) + existing_ <- withStore' $ \db -> eitherToMaybe <$> runExceptT (getGroupMemberByMemberId db cxt user gInfo joiningMemberId) + case existing_ of + Just rosterMem + -- a privileged memberId's key is owner-authoritative (the roster); the joiner must prove + -- possession of that exact key, otherwise this is an attempt to impersonate it + | isRosterRole (memberRole' rosterMem) -> + if verifyKey gInfo rosterMem + then acceptJoin gInfo (Just rosterMem) (memberRole' rosterMem) + else messageError "memberJoinRequestViaRelay: rejected join claiming privileged memberId (key mismatch or invalid signature)" + _ -> acceptJoin gInfo Nothing gLinkMemRole + Nothing -> + messageError "memberJoinRequestViaRelay: no group link info for relay link" + where + -- replay defense: the viaRelay == own memberId check (viaRelay is in the signed body); without it a sibling relay could replay a privileged member's signed join + verifyKey gInfo rosterMem = case (signedMsg_, groupKeys gInfo) of + (Just SignedMsg {chatBinding = CBGroup, signatures, signedBody}, Just GroupKeys {publicGroupId}) -> + memberPubKey rosterMem == Just joiningKey + && verifyGroupSig joiningKey publicGroupId joiningMemberId signatures signedBody + && viaRelay == Just (memberId' (membership gInfo)) + _ -> False + acceptJoin gInfo existingMem_ acceptRole = do + mem <- acceptGroupJoinRequestAsync user uclId gInfo invId chatVRange p Nothing (Just joiningMemberId) Nothing GAAccepted acceptRole Nothing (Just joiningMemberKey) existingMem_ (gInfo', mem', scopeInfo) <- mkGroupChatScope gInfo mem createInternalChatItem user (CDGroupRcv gInfo' scopeInfo mem') (CIRcvGroupEvent RGEInvitedViaGroupLink) Nothing toView $ CEvtAcceptingGroupJoinRequestMember user gInfo' mem' - Nothing -> - messageError "memberJoinRequestViaRelay: no group link info for relay link" muteEventInChannel :: GroupInfo -> GroupMember -> Bool muteEventInChannel gInfo@GroupInfo {membership} m = @@ -2157,7 +2213,7 @@ processAgentMessageConn cxt user@User {userId} corrId agentConnId agentMessage = unless (maybe False memberBlocked m') $ autoAcceptFile file_ processFileInv gInfo' m' = let fileMember_ = if sentAsGroup then Nothing else m' - in processFileInvitation fInv_ content $ \db -> createRcvGroupFileTransfer db userId gInfo' fileMember_ + in processFileInvitation fInv_ content $ \db -> createRcvGroupFileTransfer db userId gInfo' fileMember_ FTNormal sharedMsgId_ newChatItem gInfo' m' scopeInfo ciContent ciFile_ timed live = do let mentions' = if maybe False memberBlocked m' then M.empty else mentions (ci, cInfo) <- saveRcvCI gInfo' m' scopeInfo ciContent ciFile_ timed live mentions' @@ -2365,7 +2421,7 @@ processAgentMessageConn cxt user@User {userId} corrId agentConnId agentMessage = ChatConfig {fileChunkSize} <- asks config fInv'@FileInvitation {fileName, fileSize} <- validateFileInvitation fInv inline <- receiveInlineMode fInv' Nothing fileChunkSize - RcvFileTransfer {fileId, xftpRcvFile} <- withStore $ \db -> createRcvGroupFileTransfer db userId gInfo (Just m) fInv' inline fileChunkSize + RcvFileTransfer {fileId, xftpRcvFile} <- withStore $ \db -> createRcvGroupFileTransfer db userId gInfo (Just m) FTNormal sharedMsgId_ fInv' inline fileChunkSize let fileProtocol = if isJust xftpRcvFile then FPXFTP else FPSMP ciFile = Just $ CIFile {fileId, fileName, fileSize, fileSource = Nothing, fileStatus = CIFSRcvInvitation, fileProtocol} content = ciContentNoParse $ CIRcvMsgContent $ MCFile "" @@ -2461,10 +2517,17 @@ processAgentMessageConn cxt user@User {userId} corrId agentConnId agentMessage = ft <- withStore $ \db -> getDirectFileIdBySharedMsgId db user ct sharedMsgId >>= getRcvFileTransfer db user receiveInlineChunk ft chunk meta - bFileChunkGroup :: GroupInfo -> SharedMsgId -> FileChunk -> MsgMeta -> CM () - bFileChunkGroup GroupInfo {groupId} sharedMsgId chunk meta = do - ft <- withStore $ \db -> getGroupFileIdBySharedMsgId db userId groupId sharedMsgId >>= getRcvFileTransfer db user - receiveInlineChunk ft chunk meta + -- A group BFileChunk is a normal inline file chunk or a roster blob chunk, both located by + -- (group_id, shared_msg_id). A chunk matching no in-flight transfer (an orphaned re-served roster + -- chunk, or a missing normal file) is ignored; the outer withAckMessage acks it. + bFileChunkGroup :: GroupInfo -> GroupMember -> SharedMsgId -> FileChunk -> MsgMeta -> CM () + bFileChunkGroup gInfo@GroupInfo {groupId} fromMember sharedMsgId chunk meta = do + fileId_ <- withStore' $ \db -> getGroupRcvFileId db userId groupId (groupMemberId' fromMember) sharedMsgId + forM_ fileId_ $ \fileId -> do + ft <- withStore $ \db -> getRcvFileTransfer db user fileId + case fileType ft of + FTRoster -> receiveRosterChunk gInfo ft meta chunk + FTNormal -> receiveInlineChunk ft chunk meta receiveInlineChunk :: RcvFileTransfer -> FileChunk -> MsgMeta -> CM () receiveInlineChunk RcvFileTransfer {fileId, fileStatus = RFSNew} FileChunk {chunkNo} _ @@ -2474,7 +2537,18 @@ processAgentMessageConn cxt user@User {userId} corrId agentConnId agentMessage = case chunk of FileChunk {chunkNo} -> when (chunkNo == 1) $ startReceivingFile user fileId _ -> pure () - receiveFileChunk ft Nothing meta chunk + receiveFileChunk Nothing ft Nothing meta chunk + + -- A roster re-serve re-sends the blob from chunk 1; discard any partial first, else chunk 1 over a + -- partial is out-of-order (RcvChunkError) and appending after the stale prefix corrupts the blob. + receiveRosterChunk :: GroupInfo -> RcvFileTransfer -> MsgMeta -> FileChunk -> CM () + receiveRosterChunk gInfo ft meta chunk = do + case chunk of + FileChunk {chunkNo} | chunkNo == 1 -> do + last_ <- withStore' $ \db -> getRcvFileLastChunkNo db ft + when (isJust last_) $ resetRosterPartialChunks ft + _ -> pure () + receiveFileChunk (Just gInfo) ft Nothing meta chunk xFileCancelGroup :: GroupInfo -> Maybe GroupMember -> SharedMsgId -> CM (Maybe DeliveryTaskContext) xFileCancelGroup g@GroupInfo {groupId} m_ sharedMsgId = do @@ -2532,7 +2606,7 @@ processAgentMessageConn cxt user@User {userId} corrId agentConnId agentMessage = when (fromMemId == memId) $ throwChatError CEGroupDuplicateMemberId -- [incognito] if direct connection with host is incognito, create membership using the same incognito profile (gInfo@GroupInfo {groupId, localDisplayName, groupProfile, membership}, hostId) <- withStore $ \db -> createGroupInvitation db cxt user ct inv customUserProfileId - void $ createChatItem user (CDGroupSnd gInfo Nothing) False CIChatBanner Nothing (Just epochStart) + void $ createChatItem user (CDGroupSnd gInfo Nothing) False CIChatBanner Nothing Nothing (Just epochStart) let GroupMember {groupMemberId, memberId = membershipMemId} = membership if sameGroupLinkId groupLinkId groupLinkId' then do @@ -2996,40 +3070,63 @@ processAgentMessageConn cxt user@User {userId} corrId agentConnId agentMessage = _ -> pure (conn', Nothing) xGrpMemNew :: GroupInfo -> GroupMember -> MemberInfo -> Maybe MsgScope -> RcvMessage -> UTCTime -> CM (Maybe DeliveryJobScope) - xGrpMemNew gInfo m memInfo@(MemberInfo memId memRole _ _ _) msgScope_ msg brokerTs = do - if useRelays' gInfo && isRelay m - then when (memRole > GRMember) $ throwChatError $ CEException "x.grp.mem.new: relay cannot introduce role above member in channel" - else checkHostRole m memRole + xGrpMemNew gInfo m memInfo@(MemberInfo memId memRole _ _ assertedKey_) msgScope_ msg brokerTs = do + let fromRelay = useRelays' gInfo && isRelay m + unless fromRelay $ checkHostRole m memRole if sameMemberId memId (membership gInfo) then pure Nothing - else do + else withStore' (\db -> runExceptT $ getGroupMemberByMemberId db cxt user gInfo memId) >>= \case - Right unknownMember@GroupMember {memberStatus = GSMemUnknown} -> do - (updatedMember, gInfo') <- withStore $ \db -> do - updatedMember <- updateUnknownMemberAnnounced db cxt user m unknownMember memInfo initialStatus - gInfo' <- - if memberPending updatedMember - then liftIO $ increaseGroupMembersRequireAttention db user gInfo - else pure gInfo - pure (updatedMember, gInfo') - gInfo'' <- updatePublicGroupData user gInfo' - toView $ CEvtUnknownMemberAnnounced user gInfo'' m unknownMember updatedMember - memberAnnouncedToView updatedMember gInfo'' - pure $ deliveryJobScope updatedMember + Right unknownMember@GroupMember {memberStatus = GSMemUnknown} + -- roster-established privileged member: the relay may update the profile only, + -- never the role or key (those are owner-authoritative via the roster, and + -- XGrpMemNew is unsigned) + | fromRelay && isRosterRole (memberRole' unknownMember) -> do + -- a member's key is immutable per memberId and identical across relays; mismatch + -- is unambiguous relay misbehavior (role can legitimately differ across relays + -- under multi-relay skew, so we deliberately don't warn on role) + let assertedKey = (\(MemberKey k) -> k) <$> assertedKey_ + -- TODO [relays] member: surface relay-key-mismatch as a dedicated event / chat item / relay state + when (assertedKey /= memberPubKey unknownMember) $ + messageWarning $ "x.grp.mem.new: relay asserted key differs from roster-established key, keeping roster key, memberId=" <> safeDecodeUtf8 (strEncode memId) + updatedMember <- withStore $ \db -> updateRosterMemberAnnounced db cxt user m unknownMember memInfo initialStatus + -- roster members can't be pending, so no members-require-attention update + gInfo' <- updatePublicGroupData user gInfo + toView $ CEvtUnknownMemberAnnounced user gInfo' m unknownMember updatedMember + memberAnnouncedToView updatedMember gInfo' + pure $ deliveryJobScope updatedMember + -- asserted privileged but NOT roster-established: relay conjuring a moderator + | fromRelay && isRosterRole memRole -> + messageError "x.grp.mem.new: privileged role not established by roster" $> Nothing + | otherwise -> do + (updatedMember, gInfo') <- withStore $ \db -> do + updatedMember <- updateUnknownMemberAnnounced db cxt user m unknownMember memInfo initialStatus + gInfo' <- + if memberPending updatedMember + then liftIO $ increaseGroupMembersRequireAttention db user gInfo + else pure gInfo + pure (updatedMember, gInfo') + gInfo'' <- updatePublicGroupData user gInfo' + toView $ CEvtUnknownMemberAnnounced user gInfo'' m unknownMember updatedMember + memberAnnouncedToView updatedMember gInfo'' + pure $ deliveryJobScope updatedMember Right _ | useRelays' gInfo -> logInfo "x.grp.mem.new: member already created via another relay" $> Nothing | otherwise -> messageError "x.grp.mem.new error: member already exists" $> Nothing - Left _ -> do - (newMember, gInfo') <- withStore $ \db -> do - newMember <- createNewGroupMember db cxt user gInfo m memInfo GCPostMember initialStatus - gInfo' <- - if memberPending newMember - then liftIO $ increaseGroupMembersRequireAttention db user gInfo - else pure gInfo - pure (newMember, gInfo') - gInfo'' <- updatePublicGroupData user gInfo' - memberAnnouncedToView newMember gInfo'' - pure $ deliveryJobScope newMember + Left _ + -- a privileged member absent from the roster is a relay conjuring a moderator + | fromRelay && isRosterRole memRole -> messageError "x.grp.mem.new: privileged member not established by roster" $> Nothing + | otherwise -> do + (newMember, gInfo') <- withStore $ \db -> do + newMember <- createNewGroupMember db cxt user gInfo m memInfo GCPostMember initialStatus + gInfo' <- + if memberPending newMember + then liftIO $ increaseGroupMembersRequireAttention db user gInfo + else pure gInfo + pure (newMember, gInfo') + gInfo'' <- updatePublicGroupData user gInfo' + memberAnnouncedToView newMember gInfo'' + pure $ deliveryJobScope newMember where initialStatus = case msgScope_ of Just (MSMember _) -> GSMemPendingReview @@ -3068,10 +3165,12 @@ processAgentMessageConn cxt user@User {userId} corrId agentConnId agentMessage = messageError "x.grp.mem.intro ignored: member already exists" Left _ | useRelays' gInfo -> do - -- owner key must only come from link data, not from relay intro + -- role + key are owner-authoritative (roster); an intro establishes neither - a privileged + -- claim is created at the channel default with no key until the owner-signed roster confirms it + defaultRole <- unknownMemberRole gInfo let memInfo' = case memInfo of MemberInfo mId mRole v p _ - | mRole == GROwner -> MemberInfo mId mRole v p Nothing + | mRole >= GRMember -> MemberInfo mId defaultRole v p Nothing _ -> memInfo void $ withStore $ \db -> createIntroReMember db cxt user gInfo memInfo' memRestrictions | otherwise -> do @@ -3141,28 +3240,241 @@ processAgentMessageConn cxt user@User {userId} corrId agentConnId agentMessage = chatV = vr cxt `peerConnChatVersion` mcvr withStore' $ \db -> createIntroToMemberContact db user m toMember chatV mcvr groupConnIds directConnIds customUserProfileId subMode - xGrpMemRole :: GroupInfo -> GroupMember -> MemberId -> GroupMemberRole -> RcvMessage -> UTCTime -> CM (Maybe DeliveryJobScope) - xGrpMemRole gInfo@GroupInfo {membership} m@GroupMember {memberRole = senderRole} memId memRole msg@RcvMessage {msgSigned} brokerTs + -- rollback defense (channels): apply an owner-signed role/removal only at a version >= the persisted + -- roster_version (not the batch-constant gInfo, which a relay can stale by reordering events in one + -- batch), then advance it in the same transaction; a strictly lower version is a replay and is ignored. + -- Only an owner sender may advance it: a non-owner signed event is rejected by the action that follows, + -- but must not bump roster_version first, or every later owner roster at a lower version is dropped. + applyAtRosterVersion :: GroupInfo -> GroupMember -> Maybe VersionRoster -> CM (Maybe DeliveryJobScope) -> CM (Maybe DeliveryJobScope) + applyAtRosterVersion gInfo sender rosterVer_ action + | not (useRelays' gInfo) = action + | otherwise = case rosterVer_ of + Nothing -> action + Just _ | memberRole' sender /= GROwner -> action + Just v -> do + accept <- withStore' $ \db -> do + cur <- getGroupRosterVersion db gInfo + let fresh = maybe True (v >=) cur + when fresh $ setGroupRosterVersion db gInfo v + pure fresh + if accept + then action + else messageWarning "x.grp.mem: roster version not newer than current, ignoring" $> Nothing + + xGrpMemRole :: GroupInfo -> GroupMember -> MemberId -> GroupMemberRole -> Maybe MemberKey -> Maybe VersionRoster -> RcvMessage -> UTCTime -> CM (Maybe DeliveryJobScope) + xGrpMemRole gInfo@GroupInfo {membership} m@GroupMember {memberRole = senderRole} memId memRole memberKey_ rosterVer_ msg@RcvMessage {msgSigned} brokerTs | membershipMemId == memId = - let gInfo' = gInfo {membership = membership {memberRole = memRole}} - in changeMemberRole gInfo' membership $ RGEUserRole memRole - | otherwise = - withStore' (\db -> runExceptT $ getGroupMemberByMemberId db cxt user gInfo memId) >>= \case - Right member -> changeMemberRole gInfo member $ RGEMemberRole (groupMemberId' member) (fromLocalProfile $ memberProfile member) memRole - Left _ -> messageError "x.grp.mem.role with unknown member ID" $> Nothing + applyAtRosterVersion gInfo m rosterVer_ $ + let gInfo' = gInfo {membership = membership {memberRole = memRole}} + in changeMemberRole gInfo' membership False (\db -> updateGroupMemberRole db user membership memRole) $ RGEUserRole memRole + | otherwise = applyAtRosterVersion gInfo m rosterVer_ $ do + defaultRole <- unknownMemberRole gInfo + -- an owner-signed event with a key TOFU-creates an unknown member only for a roster role; else a plain lookup + let allowCreate = useRelays' gInfo && senderRole == GROwner && isRosterRole memRole && isJust memberKey_ + withStore' (\db -> runExceptT $ getCreateUnknownGMByMemberId db cxt user gInfo memId (nameFromMemberId memId) defaultRole allowCreate) >>= \case + Right (Just (member, created)) + -- just created (keyless, and allowCreate ensured the event carries its key): pin key + role + | created, Just (MemberKey pubKey) <- memberKey_ -> + let gEvent = RGEMemberRole (groupMemberId' member) (fromLocalProfile $ memberProfile member) memRole + in changeMemberRole gInfo member created (\db -> void $ applyMemberKeyRole db member pubKey memRole) gEvent + -- known member: apply the role (its key is established via roster/intro; the event's key is ignored) + | otherwise -> + let gEvent = RGEMemberRole (groupMemberId' member) (fromLocalProfile $ memberProfile member) memRole + in changeMemberRole gInfo member created (\db -> updateGroupMemberRole db user member memRole) gEvent + -- in relay groups the roster may deliver role update for previously-unknown privileged members + _ | useRelays' gInfo -> pure Nothing + | otherwise -> messageError "x.grp.mem.role with unknown member ID" $> Nothing where GroupMember {memberId = membershipMemId} = membership - changeMemberRole gInfo' member@GroupMember {memberRole = fromRole} gEvent + -- applyMember writes the change (role, or role + pinned key for a freshly TOFU-created member); + -- the delivery scope (relay forwarding) is computed on the pre-change role + changeMemberRole gInfo' member@GroupMember {memberRole = fromRole} created applyMember gEvent | senderRole < maximum ([GRAdmin, fromRole, memRole] :: [GroupMemberRole]) = messageError "x.grp.mem.role with insufficient member permissions" $> Nothing + | useRelays' gInfo && (isRosterRole memRole || isRosterRole fromRole) && senderRole /= GROwner = + messageError "x.grp.mem.role: only the owner can change member, moderator and admin roles in relay groups" $> Nothing + -- a forwarded role event the roster already applied is a no-op; suppress it. + -- a just-created member is keyless here, so fall through to pin its owner-attested key. + | useRelays' gInfo && not created && fromRole == memRole = pure $ memberEventDeliveryScope member | otherwise = do - withStore' $ \db -> updateGroupMemberRole db user member memRole + withStore' applyMember (gInfo'', m', scopeInfo) <- mkGroupChatScope gInfo' m (ci, cInfo) <- saveRcvChatItemNoParse user (CDGroupRcv gInfo'' scopeInfo m') msg brokerTs (CIRcvGroupEvent gEvent) groupMsgToView cInfo ci toView CEvtMemberRole {user, groupInfo = gInfo'', byMember = m', member = member {memberRole = memRole}, fromRole, toRole = memRole, msgSigned} pure $ memberEventDeliveryScope member + -- The header only starts the transfer; the roster is applied and the version bumped only at + -- blob completion, so a withheld or corrupted blob leaves the last good roster intact. + -- fromMember is the relay that delivered THIS roster copy (the owner on a relay receiving directly, + -- a relay on a member receiving a forward); author is the owner who signed it. + xGrpRoster :: GroupInfo -> GroupMember -> GroupMember -> GroupRoster -> VerifiedMsg e -> Maybe SharedMsgId -> UTCTime -> CM (Maybe DeliveryJobScope) + xGrpRoster gInfo fromMember author GroupRoster {version = newVer, fileInv = InlineFileInvitation {fileSize, fileDigest}} verifiedMsg sharedMsgId_ brokerTs + -- only an owner may sign a roster; otherwise a relay could route it as a member whose key it controls + | memberRole' author /= GROwner = messageError "x.grp.roster: not signed by an owner" $> Nothing + | fileSize > maxGroupRosterBytes = messageError "x.grp.roster: roster blob size exceeds limit" $> Nothing + | otherwise = case verifiedMsg of + -- unreachable: XGrpRoster is in requiresSignature, so withVerifiedMsg rejected unsigned + VMUnsigned _ -> pure Nothing + VMSigned _ sm _ -> case sharedMsgId_ of + Nothing -> Nothing <$ messageWarning "x.grp.roster: missing shared message id" + Just sharedMsgId -> do + -- per-source pending version (THIS relay's own in-flight transfer), not a single group slot + pendingVer_ <- withStore' $ \db -> getRosterTransferVersion db gInfo (groupMemberId' fromMember) + -- accept a version not below BOTH applied and this source's pending (>=, Nothing below 0): a preceding + -- signed event may have already advanced rosterVersion to this blob's version; a lower one is a downgrade. + if newVer `notBelowRoster` rosterVersion gInfo && newVer `notBelowRoster` pendingVer_ + then startRosterTransfer sm sharedMsgId + else pure Nothing + where + startRosterTransfer sm sharedMsgId = do + -- supersede THIS source's own in-flight transfer (older version or a restart); other relays' transfers are independent + cleanupRosterTransfer gInfo (groupMemberId' fromMember) + let relayHdr = if isUserGrpFwdRelay gInfo then Just sm else Nothing + chSize <- asks $ fileChunkSize . config + let rosterFInv = FileInvitation {fileName = "roster", fileSize, fileDigest = Nothing, fileConnReq = Nothing, fileInline = Just IFMSent, fileDescr = Nothing} + -- transfer record + its scratch file in one transaction (file owned by the transfer, keyed per source) + rft@RcvFileTransfer {fileId} <- withStore $ \db -> do + transferId <- liftIO $ createRosterTransfer db gInfo (groupMemberId' fromMember) newVer fileDigest (groupMemberId' author) brokerTs relayHdr + createRosterRcvFile db userId gInfo fromMember transferId sharedMsgId rosterFInv (Just IFMSent) (fromIntegral chSize) + -- accept the chat-item-free file before chunk 1 (FIFO before it) so chunk 1 isn't rejected on RFSNew + -- transient scratch file (consumed into roster_blob, then deleted): temp folder, not the user's files folder / Downloads + tmpDir <- lift getChatTempDirectory + rosterTs <- liftIO getCurrentTime + let GroupInfo {groupId = gId} = gInfo + rosterFile = "roster_" <> show gId <> "_" <> show (groupMemberId' fromMember) <> "_" <> formatTime defaultTimeLocale "%Y%m%d_%H%M%S" rosterTs + filePath <- getRcvFilePath fileId (Just tmpDir) rosterFile False + withStore' $ \db -> startRcvInlineFT db user rft filePath (Just IFMSent) + pure Nothing + + -- Roster version comparison treating Nothing (un-materialized) as below 0. Non-strict (>=) so a relay + -- accepts the owner's blob at the version a preceding signed event already advanced rosterVersion to. + notBelowRoster :: VersionRoster -> Maybe VersionRoster -> Bool + notBelowRoster v = maybe True (v >=) + + -- Blob arrived: verify the owner-attested digest over the plaintext and guard against + -- downgrade before applying; on a relay, ack the owner and re-serve to members. + rosterCompletion :: GroupInfo -> RcvFileTransfer -> CM () + rosterCompletion gInfo RcvFileTransfer {fileId, fileStatus} = + withStore' (\db -> getRosterTransfer db fileId) >>= \case + -- defensive: the file always has its transfer (created together, deleted together) + Nothing -> lift (closeFileHandle fileId rcvFiles) >> forM_ (rosterFilePath fileStatus) removeFsFile + Just RcvRosterTransfer {rosterTransferId = transferId, rosterTransferVersion = pendingVer, rosterTransferDigest = pendingDigest, rosterTransferOwnerGMId = ownerGMId, rosterTransferBrokerTs = rosterBrokerTs, rosterTransferHeader = header_} -> do + owner_ <- withStore' $ \db -> eitherToMaybe <$> runExceptT (getGroupMemberById db cxt user ownerGMId) + blob <- readAssembledRoster + let isRelay = isUserGrpFwdRelay gInfo + ackErr err = do + cleanupRosterTransferById transferId + when isRelay $ forM_ owner_ $ \owner -> sendRosterAck gInfo owner pendingVer (Just err) + if FD.FileDigest (LC.sha512Hash (LB.fromStrict blob)) /= pendingDigest + then ackErr "relay could not verify the roster blob" + else case parseAll rosterBlobP blob of + Left _ -> ackErr "relay could not parse the roster blob" + Right entries -> case owner_ of + Nothing -> cleanupRosterTransferById transferId + Just author -> do + defaultRole <- unknownMemberRole gInfo + -- gate against the persisted roster_version inside the apply transaction: a roster from another + -- relay (or a preceding signed event) may already have advanced it past this one; a stale + -- completion (e.g. relay1 sent v5 then v6, relay2's v5 completes after v6) is rejected. + results_ <- withStore $ \db -> do + cur <- liftIO $ getGroupRosterVersion db gInfo + if maybe False (pendingVer <) cur + then pure Nothing + else do + res <- processRosterEntries db gInfo defaultRole (validateGroupRoster entries) + liftIO $ setGroupLiveRoster db gInfo pendingVer ownerGMId rosterBrokerTs header_ blob + pure (Just res) + cleanupRosterTransferById transferId + forM_ results_ $ \results -> do + emitRosterResults gInfo author rosterBrokerTs results + -- ack while setting up (own status accepted/acknowledged); a serving (active) relay must not ack broadcasts. + when (isRelay && (relayOwnStatus gInfo == Just RSAccepted || relayOwnStatus gInfo == Just RSAcknowledgedRoster)) $ do + sendRosterAck gInfo author pendingVer Nothing + withStore' $ \db -> void $ updateRelayOwnStatusFromTo db gInfo RSAccepted RSAcknowledgedRoster + where + rosterFilePath = \case + RFSAccepted p -> Just p + RFSConnected p -> Just p + RFSComplete p -> Just p + _ -> Nothing + readAssembledRoster = case rosterFilePath fileStatus of + Just fp -> readAt fp + Nothing -> throwChatError $ CEInternalError "roster file not in progress" + readAt fp = lift (toFSFilePath fp) >>= liftIO . B.readFile + + -- TOFU-apply an owner-signed (key, role) to a resolved member: pin the key if absent; for a keyed + -- member keep the trusted key (Left = reject a different one), else update the role. Right + -- (Just (member-at-new-role, fromRole)) when the role changed, Right Nothing when already current. + applyMemberKeyRole :: DB.Connection -> GroupMember -> C.PublicKeyEd25519 -> GroupMemberRole -> IO (Either MemberId (Maybe (GroupMember, GroupMemberRole))) + applyMemberKeyRole db m pubKey role = case memberPubKey m of + Just k + | k /= pubKey -> pure (Left (memberId' m)) + | memberRole' m == role -> pure (Right Nothing) + | otherwise -> updateGroupMemberRole db user m role $> Right (Just (m {memberRole = role}, memberRole' m)) + Nothing -> setGroupMemberKeyRole db m pubKey role $> Right (Just (m {memberRole = role}, memberRole' m)) + + -- TOFU apply: pin each member's key on first use, then update roles. + processRosterEntries :: DB.Connection -> GroupInfo -> GroupMemberRole -> [RosterMember] -> ExceptT StoreError IO ([MemberId], [(GroupMember, GroupMemberRole, Bool)]) + processRosterEntries db gInfo defaultRole entries = do + let rosterIds = map (\RosterMember {memberId} -> memberId) entries + (cs, as) <- foldrM applyRosterEntry ([], []) entries + currentPriv <- liftIO $ getGroupRosterMembers db cxt user gInfo + reverted <- liftIO $ fmap catMaybes $ forM currentPriv $ \m -> + if memberId' m `notElem` rosterIds + then updateGroupMemberRole db user m defaultRole $> Just ((m :: GroupMember) {memberRole = defaultRole}, memberRole' m, False) + else pure Nothing + pure (cs, as <> reverted) + where + -- entry-level failure (StoreError or IO exception) is muted; the entry is dropped + applyRosterEntry RosterMember {memberId, key = MemberKey pubKey, role} (cs, as) = + ( getCreateUnknownGMByMemberId db cxt user gInfo memberId (nameFromMemberId memberId) defaultRole True >>= \case + Nothing -> pure (cs, as) + Just (m, created) -> liftIO (applyMemberKeyRole db m pubKey role) >>= \case + Left mid -> pure (mid : cs, as) + Right Nothing -> pure (cs, as) + Right (Just (rm, fromR)) -> pure (cs, (rm, fromR, created) : as) + ) + `catchAllErrors` \_ -> pure (cs, as) + + emitRosterResults :: GroupInfo -> GroupMember -> UTCTime -> ([MemberId], [(GroupMember, GroupMemberRole, Bool)]) -> CM () + emitRosterResults gInfo author rosterBrokerTs (conflicts, applied) = do + forM_ conflicts $ \mid' -> + messageWarning $ "x.grp.roster: member key conflict, keeping trusted key, memberId=" <> safeDecodeUtf8 (strEncode mid') + forM_ applied $ \(member, fromRole, created) -> + unless created $ createItems member fromRole + where + createItems member fromRole = do + let toRole = memberRole' member + gEvent = RGEMemberRole (groupMemberId' member) (fromLocalProfile $ memberProfile member) toRole + (gInfo', author', scopeInfo) <- mkGroupChatScope gInfo author + ci <- createChatItem user (CDGroupRcv gInfo' scopeInfo author') False (CIRcvGroupEvent gEvent) Nothing (Just MSSVerified) (Just rosterBrokerTs) + toView $ CEvtNewChatItems user [ci] + toView CEvtMemberRole {user, groupInfo = gInfo', byMember = author', member, fromRole, toRole, msgSigned = Just MSSVerified} + + sendRosterAck :: GroupInfo -> GroupMember -> VersionRoster -> Maybe Text -> CM () + sendRosterAck gInfo owner ackVer err = void $ sendGroupMessage' user gInfo [owner] (XGrpRosterAck ackVer err) + + xGrpRosterAck :: GroupInfo -> GroupMember -> VersionRoster -> Maybe Text -> CM () + xGrpRosterAck gInfo m ackVer err = do + relay_ <- withStore' $ \db -> eitherToMaybe <$> runExceptT (getGroupRelayByGMId db (groupMemberId' m)) + case relay_ of + Just relay@GroupRelay {relayStatus = RSAccepted} -> case err of + Nothing + | rosterVersion gInfo == Just ackVer -> do + (relay', gLink) <- withStore $ \db -> do + relay' <- liftIO $ updateRelayStatus db relay RSAcknowledgedRoster + gLink <- getGroupLink db user gInfo + pure (relay', gLink) + setGroupLinkDataAsync user gInfo gLink + toView $ CEvtGroupRelayUpdated user gInfo m relay' + | otherwise -> messageWarning "x.grp.roster.ack: stale version, awaiting ack for the current roster" + Just e -> do + relay' <- withStore' $ \db -> updateRelayStatusFromTo db relay RSAccepted RSRejected + toView $ CEvtGroupRelayUpdated user gInfo m relay' + messageError $ "x.grp.roster.ack: relay could not save roster, marked rejected: " <> e + _ -> pure () + checkHostRole :: GroupMember -> GroupMemberRole -> CM () checkHostRole GroupMember {memberRole, localDisplayName} memRole = when (memberRole < GRAdmin || memberRole < memRole) $ throwChatError (CEGroupContactRole localDisplayName) @@ -3207,11 +3519,11 @@ processAgentMessageConn cxt user@User {userId} corrId agentConnId agentMessage = withStore $ \db -> setMemberVectorRelationConnected db sendingMem refMem MRSubjectConnected withStore $ \db -> setMemberVectorRelationConnected db refMem sendingMem MRReferencedConnected - xGrpMemDel :: GroupInfo -> GroupMember -> MemberId -> Bool -> VerifiedMsg 'Json -> RcvMessage -> UTCTime -> Bool -> CM (Maybe DeliveryJobScope) - xGrpMemDel gInfo@GroupInfo {membership} m@GroupMember {memberRole = senderRole} memId withMessages verifiedMsg msg@RcvMessage {msgSigned} brokerTs forwarded = do + xGrpMemDel :: GroupInfo -> GroupMember -> MemberId -> Bool -> Maybe VersionRoster -> VerifiedMsg 'Json -> RcvMessage -> UTCTime -> Bool -> CM (Maybe DeliveryJobScope) + xGrpMemDel gInfo@GroupInfo {membership} m@GroupMember {memberRole = senderRole} memId withMessages rosterVer_ verifiedMsg msg@RcvMessage {msgSigned} brokerTs forwarded = do let GroupMember {memberId = membershipMemId} = membership if membershipMemId == memId - then checkRole membership $ do + then applyAtRosterVersion gInfo m rosterVer_ $ checkRole membership $ do deleteGroupLinkIfExists user gInfo -- TODO [relays] possible improvement is to immediately delete rcv queues if isUserGrpFwdRelay unless (isUserGrpFwdRelay gInfo) $ deleteGroupConnections user gInfo False @@ -3223,7 +3535,7 @@ processAgentMessageConn cxt user@User {userId} corrId agentConnId agentMessage = deleteMemberItem msg gInfo RGEUserDeleted toView $ CEvtDeletedMemberUser user gInfo {membership = membership'} m withMessages msgSigned pure $ Just DJSGroup {jobSpec = DJRelayRemoved} - else + else applyAtRosterVersion gInfo m rosterVer_ $ withStore' (\db -> runExceptT $ getGroupMemberByMemberId db cxt user gInfo memId) >>= \case Left _ -> do messageError "x.grp.mem.del with unknown member ID" @@ -3474,7 +3786,7 @@ processAgentMessageConn cxt user@User {userId} corrId agentConnId agentMessage = processForwardedMsg :: VerifiedMsg 'Json -> Maybe GroupMember -> CM () processForwardedMsg verifiedMsg author_ = do rcvMsg_ <- saveGroupFwdRcvMsg user gInfo m author_ verifiedMsg brokerTs - forM_ rcvMsg_ $ \rcvMsg@RcvMessage {chatMsgEvent = ACME _ event} -> case event of + forM_ rcvMsg_ $ \rcvMsg@RcvMessage {sharedMsgId_, chatMsgEvent = ACME _ event} -> case event of XMsgNew mc -> void $ memberCanSend author_ scope $ newGroupContentMessage gInfo author_ mc rcvMsg msgTs True where @@ -3489,13 +3801,14 @@ processAgentMessageConn cxt user@User {userId} corrId agentConnId agentMessage = XInfo p -> withAuthor XInfo_ $ \author -> void $ xInfoMember gInfo author p rcvMsg msgTs XGrpRelayNew rl -> withAuthor XGrpRelayNew_ $ \author -> void $ xGrpRelayNew gInfo author rl XGrpMemNew memInfo msgScope -> withAuthor XGrpMemNew_ $ \author -> void $ xGrpMemNew gInfo author memInfo msgScope rcvMsg msgTs - XGrpMemRole memId memRole -> withAuthor XGrpMemRole_ $ \author -> void $ xGrpMemRole gInfo author memId memRole rcvMsg msgTs + XGrpMemRole memId memRole memberKey rosterVer -> withAuthor XGrpMemRole_ $ \author -> void $ xGrpMemRole gInfo author memId memRole memberKey rosterVer rcvMsg msgTs XGrpMemRestrict memId memRestrictions -> withAuthor XGrpMemRestrict_ $ \author -> void $ xGrpMemRestrict gInfo author memId memRestrictions rcvMsg msgTs - XGrpMemDel memId withMessages -> withAuthor XGrpMemDel_ $ \author -> void $ xGrpMemDel gInfo author memId withMessages verifiedMsg rcvMsg msgTs True + XGrpMemDel memId withMessages rosterVer -> withAuthor XGrpMemDel_ $ \author -> void $ xGrpMemDel gInfo author memId withMessages rosterVer verifiedMsg rcvMsg msgTs True XGrpLeave -> withAuthor XGrpLeave_ $ \author -> void $ xGrpLeave gInfo author rcvMsg msgTs XGrpDel -> withAuthor XGrpDel_ $ \author -> void $ xGrpDel gInfo author rcvMsg msgTs XGrpInfo p' -> withAuthor XGrpInfo_ $ \author -> void $ xGrpInfo gInfo author p' rcvMsg msgTs XGrpPrefs ps' -> withAuthor XGrpPrefs_ $ \author -> void $ xGrpPrefs gInfo author ps' rcvMsg + XGrpRoster gr -> withAuthor XGrpRoster_ $ \author -> void $ xGrpRoster gInfo m author gr verifiedMsg sharedMsgId_ msgTs _ -> messageError $ "x.grp.msg.forward: unsupported forwarded event " <> T.pack (show $ toCMEventTag event) where withAuthor :: CMEventTag e -> (GroupMember -> CM ()) -> CM () @@ -3515,12 +3828,12 @@ processAgentMessageConn cxt user@User {userId} corrId agentConnId agentMessage = Just sm@SignedMsg {chatBinding, signatures, signedBody} | GroupMember {memberPubKey = Just pubKey, memberId} <- member -> case chatBinding of - CBGroup -> - let prefix = smpEncode chatBinding <> bindingData - bindingData = case groupKeys gInfo of - Just GroupKeys {publicGroupId} -> smpEncode (publicGroupId, memberId) - Nothing -> smpEncode (memberId, pubKey) -- forward compatibility for verifying signed messages in p2p groups - in signed MSSVerified <$ guard (all (\(MsgSignature KRMember sig) -> C.verify (C.APublicVerifyKey C.SEd25519 pubKey) sig (prefix <> signedBody)) signatures) + CBGroup + | Just GroupKeys {publicGroupId} <- groupKeys gInfo -> + signed MSSVerified <$ guard (verifyGroupSig pubKey publicGroupId memberId signatures signedBody) + | otherwise -> + let prefix = smpEncode chatBinding <> smpEncode (memberId, pubKey) -- forward compatibility for verifying signed messages in p2p groups + in signed MSSVerified <$ guard (all (\case (MsgSignature KRMember sig) -> C.verify (C.APublicVerifyKey C.SEd25519 pubKey) sig (prefix <> signedBody)) signatures) _ -> signed MSSSignedNoKey <$ guard signatureOptional | otherwise -> signed MSSSignedNoKey <$ guard (signatureOptional || unverifiedAllowed membership member tag) where @@ -3782,10 +4095,15 @@ runDeliveryJobWorker a deliveryKey Worker {doWork} = do bucketSize <- asks $ deliveryBucketSize . config senders <- withStore' $ \db -> fmap catMaybes . forM senderGMIds $ \sId -> - fmap eitherToMaybe . runExceptT $ do + fmap (join . eitherToMaybe) . runExceptT $ do sender <- getNonRemovedMemberById db cxt user sId - vec <- getMemberRelationsVector db sender - pure (sender, vec) + -- owners are already known to every member (group link + owner-intro in introduceInChannel), + -- so we never disseminate their profile (redundant, and races with joins re-announcing the owner) + if memberRole' sender == GROwner + then pure Nothing + else do + vec <- getMemberRelationsVector db sender + pure $ Just (sender, vec) let missingSenders = length senderGMIds - length senders when (missingSenders > 0) $ logInfo $ "delivery job " <> tshow jobId <> ": " <> tshow missingSenders <> " senders missing; skipping their profile prepend" @@ -3795,13 +4113,8 @@ runDeliveryJobWorker a deliveryKey Worker {doWork} = do if null senders then pure (body, [], [], []) else do - -- Skip role > GRMember (mirrors xGrpMemNew gate). - -- TODO [relays] public groups: revisit if mods/admins are introduced via this sidecar. - let (encoderErrs, validLabeled) = - partitionEithers - [ (\bs -> (s, bs)) <$> encodeMemberNew (vr cxt) gInfo s - | (s, _) <- senders, memberRole' s <= GRMember - ] + -- all members' profiles disseminate; privileged key/role come from the roster, not here + let (encoderErrs, validLabeled) = partitionEithers [(\bs -> (s, bs)) <$> encodeMemberNew (vr cxt) gInfo s | (s, _) <- senders] (extBody', inBody, overflowLabeled, large1) = batchProfilesWithBody maxEncodedMsgLength body validLabeled (overflowBatches', large2) = batchProfiles maxEncodedMsgLength overflowLabeled packerErrs = [ChatError (CEInternalError $ "oversized profile element for member " <> show (groupMemberId' s)) | s <- large1 <> large2] diff --git a/src/Simplex/Chat/Protocol.hs b/src/Simplex/Chat/Protocol.hs index f3c3e20e47..223fe492a9 100644 --- a/src/Simplex/Chat/Protocol.hs +++ b/src/Simplex/Chat/Protocol.hs @@ -48,13 +48,14 @@ import Data.Time.Clock (UTCTime) import Data.Time.Clock.System (systemToUTCTime, utcToSystemTime) import Data.Type.Equality import Data.Typeable (Typeable) -import Data.Word (Word32) +import Data.Word (Word16, Word32) import Simplex.Chat.Badges (LocalBadge) import Simplex.Chat.Call import Simplex.Chat.Options.DB (FromField (..), ToField (..)) import Simplex.Chat.Types import Simplex.Chat.Types.Preferences import Simplex.Chat.Types.Shared +import qualified Simplex.FileTransfer.Description as FD import Simplex.Messaging.Agent.Protocol (VersionSMPA, pqdrSMPAgentVersion) import Simplex.Messaging.Agent.Store.DB (blobFieldDecoder, fromTextField_) import Simplex.Messaging.Compression (Compressed, compress1, decompress1, decompressedSize) @@ -84,12 +85,13 @@ import Simplex.Messaging.Version hiding (version) -- 16 - support short link data (2025-06-10) -- 17 - allow host voice messages during member approval regardless of group voice setting (2026-02-10) -- 18 - relay web capabilities (2026-05-31) +-- 19 - group roster (2026-06-18) -- This should not be used directly in code, instead use `maxVersion chatVRange` from ChatConfig. -- This indirection is needed for backward/forward compatibility testing. -- Testing with real app versions is still needed, as tests use the current code with different version ranges, not the old code. currentChatVersion :: VersionChat -currentChatVersion = VersionChat 18 +currentChatVersion = VersionChat 19 -- This should not be used directly in code, instead use `chatVRange` from ChatConfig (see comment above) supportedChatVRange :: VersionRangeChat @@ -160,6 +162,11 @@ memberSupportVoiceVersion = VersionChat 17 relayWebCapVersion :: VersionChat relayWebCapVersion = VersionChat 18 +-- owner-signed roster (promoted members/moderators/admins) and the relay roster-ack handshake; +-- a relay below this version is published without the handshake (it can't ack a roster) +groupRosterVersion :: VersionChat +groupRosterVersion = VersionChat 19 + agentToChatVersion :: VersionSMPA -> VersionChat agentToChatVersion v | v < pqdrSMPAgentVersion = initialChatVersion @@ -373,6 +380,36 @@ data GrpMsgForward = GrpMsgForward } deriving (Eq, Show) +-- | Owner-signed roster header for the privileged (moderator/admin/member) set; owners +-- are not included, their keys come from the link. The member list itself is not +-- here: it is sent as a binary blob over the inline file transfer, and this header +-- carries only its inline-file invitation (size + owner-attested digest). +data GroupRoster = GroupRoster + { version :: VersionRoster, + fileInv :: InlineFileInvitation + } + deriving (Eq, Show) + +-- | Lean always-inline file invitation for the roster blob, carried in the signed +-- header. The digest authenticates the unsigned blob; integrity is entirely the digest. +data InlineFileInvitation = InlineFileInvitation + { fileSize :: Integer, + fileDigest :: FD.FileDigest + } + deriving (Eq, Show) + +data RosterMember = RosterMember + { memberId :: MemberId, + key :: MemberKey, -- trust-on-first-use pinned per memberId + role :: GroupMemberRole, + privileges :: Word16 -- reserved: serialized as 0, parsed and ignored in v1 + } + deriving (Eq, Show) + +-- RosterMember is binary-only: it rides in the roster blob, never in a JSON message. +instance Encoding RosterMember where + smpEncode RosterMember {memberId, key, role, privileges} = smpEncode (memberId, key, role, privileges) + smpP = RosterMember <$> smpP <*> smpP <*> smpP <*> smpP instance Encoding FwdSender where smpEncode = \case @@ -439,6 +476,11 @@ data MsgSigning = MsgSigning encodeChatBinding :: ChatBinding -> ByteString -> ByteString encodeChatBinding cb bindingData = smpEncode cb <> bindingData +signChatMsgBody :: MsgSigning -> ByteString -> SignedMsg +signChatMsgBody MsgSigning {bindingTag, bindingData, keyRef, privKey} msgBody = + let sig = C.ASignature C.SEd25519 $ C.sign' privKey (encodeChatBinding bindingTag bindingData <> msgBody) + in SignedMsg {chatBinding = bindingTag, signatures = MsgSignature keyRef sig L.:| [], signedBody = msgBody} + data ChatMsgEvent (e :: MsgEncoding) where XMsgNew :: MsgContainer -> ChatMsgEvent 'Json XMsgFileDescr :: {msgId :: SharedMsgId, fileDescr :: FileDescr} -> ChatMsgEvent 'Json @@ -452,7 +494,7 @@ data ChatMsgEvent (e :: MsgEncoding) where XFileCancel :: SharedMsgId -> ChatMsgEvent 'Json XInfo :: Profile -> ChatMsgEvent 'Json XContact :: {profile :: Profile, contactReqId :: Maybe XContactId, welcomeMsgId :: Maybe SharedMsgId, requestMsg :: Maybe (SharedMsgId, MsgContent)} -> ChatMsgEvent 'Json - XMember :: {profile :: Profile, newMemberId :: MemberId, newMemberKey :: MemberKey} -> ChatMsgEvent 'Json + XMember :: {profile :: Profile, newMemberId :: MemberId, newMemberKey :: MemberKey, viaRelay :: Maybe MemberId} -> ChatMsgEvent 'Json XDirectDel :: ChatMsgEvent 'Json XGrpInv :: GroupInvitation -> ChatMsgEvent 'Json XGrpAcpt :: MemberId -> ChatMsgEvent 'Json @@ -471,16 +513,18 @@ data ChatMsgEvent (e :: MsgEncoding) where XGrpMemInv :: MemberId -> IntroInvitation -> ChatMsgEvent 'Json XGrpMemFwd :: MemberInfo -> IntroInvitation -> ChatMsgEvent 'Json XGrpMemInfo :: MemberId -> Profile -> ChatMsgEvent 'Json - XGrpMemRole :: MemberId -> GroupMemberRole -> ChatMsgEvent 'Json + XGrpMemRole :: MemberId -> GroupMemberRole -> Maybe MemberKey -> Maybe VersionRoster -> ChatMsgEvent 'Json XGrpMemRestrict :: MemberId -> MemberRestrictions -> ChatMsgEvent 'Json XGrpMemCon :: MemberId -> ChatMsgEvent 'Json XGrpMemConAll :: MemberId -> ChatMsgEvent 'Json -- TODO not implemented - XGrpMemDel :: MemberId -> Bool -> ChatMsgEvent 'Json + XGrpMemDel :: MemberId -> Bool -> Maybe VersionRoster -> ChatMsgEvent 'Json XGrpLeave :: ChatMsgEvent 'Json XGrpDel :: ChatMsgEvent 'Json XGrpInfo :: GroupProfile -> ChatMsgEvent 'Json XGrpPrefs :: GroupPreferences -> ChatMsgEvent 'Json XGrpDirectInv :: ConnReqInvitation -> Maybe MsgContent -> Maybe MsgScope -> ChatMsgEvent 'Json + XGrpRoster :: GroupRoster -> ChatMsgEvent 'Json + XGrpRosterAck :: VersionRoster -> Maybe Text -> ChatMsgEvent 'Json XGrpMsgForward :: GrpMsgForward -> ChatMessage 'Json -> ChatMsgEvent 'Json XInfoProbe :: Probe -> ChatMsgEvent 'Json XInfoProbeCheck :: ProbeHash -> ChatMsgEvent 'Json @@ -524,6 +568,7 @@ isForwardedGroupMsg ev = case ev of XGrpDel -> True XGrpInfo _ -> True XGrpPrefs _ -> True + XGrpRoster _ -> True _ -> False data MsgReaction = MREmoji {emoji :: MREmojiChar} | MRUnknown {tag :: Text, json :: J.Object} @@ -792,6 +837,8 @@ data MsgMention = MsgMention {memberId :: MemberId} newtype MsgMentions = MsgMentions (Map MemberName MsgMention) deriving (Eq, Show) +$(JQ.deriveJSON defaultJSON ''InlineFileInvitation) + $(JQ.deriveJSON (taggedObjectJSON $ dropPrefix "MCL") ''MsgChatLink) $(JQ.deriveJSON defaultJSON ''LinkOwnerSig) @@ -892,6 +939,28 @@ maxCompressedMsgLength = 13380 maxDecompressedMsgLength :: Int maxDecompressedMsgLength = 65536 +-- Defensive entry-count bound for the roster blob parser (rosterBlobP) and the +-- promotion cap over the promoted (member/moderator/admin) set. +maxGroupRosterSize :: Int +maxGroupRosterSize = 256 + +-- Receive-side byte bound: reject an owner-signed header whose claimed fileSize exceeds what +-- maxGroupRosterSize entries can occupy (128 B/entry is a generous worst case), before a file is created. +-- 128 B/entry ~ memberId + X.509 Ed25519 key (44 B) + role + privileges + 1-byte length prefixes (~2x the ~65 B typical). +maxGroupRosterBytes :: Integer +maxGroupRosterBytes = fromIntegral maxGroupRosterSize * 128 + +-- The byte sequence the owner-signed digest is computed over and verified against +-- before parsing. Word16 count (smpEncodeList's 1-byte count is too small for the future cap). +encodeRosterBlob :: [RosterMember] -> ByteString +encodeRosterBlob ms = smpEncode (fromIntegral (length ms) :: Word16) <> B.concat (map smpEncode ms) + +rosterBlobP :: A.Parser [RosterMember] +rosterBlobP = do + n <- fromIntegral <$> smpP @Word16 + when (n > maxGroupRosterSize) $ fail "roster: too many entries" + A.count n smpP + -- maxEncodedMsgLength - delta between MSG and INFO + 100 (returned for forward overhead) -- delta between MSG and INFO = e2eEncUserMsgLength (no PQ) - e2eEncConnInfoLength (no PQ) = 1008 maxEncodedInfoLength :: Int @@ -1028,6 +1097,8 @@ data CMEventTag (e :: MsgEncoding) where XGrpInfo_ :: CMEventTag 'Json XGrpPrefs_ :: CMEventTag 'Json XGrpDirectInv_ :: CMEventTag 'Json + XGrpRoster_ :: CMEventTag 'Json + XGrpRosterAck_ :: CMEventTag 'Json XGrpMsgForward_ :: CMEventTag 'Json XInfoProbe_ :: CMEventTag 'Json XInfoProbeCheck_ :: CMEventTag 'Json @@ -1088,6 +1159,8 @@ instance MsgEncodingI e => StrEncoding (CMEventTag e) where XGrpInfo_ -> "x.grp.info" XGrpPrefs_ -> "x.grp.prefs" XGrpDirectInv_ -> "x.grp.direct.inv" + XGrpRoster_ -> "x.grp.roster" + XGrpRosterAck_ -> "x.grp.roster.ack" XGrpMsgForward_ -> "x.grp.msg.forward" XInfoProbe_ -> "x.info.probe" XInfoProbeCheck_ -> "x.info.probe.check" @@ -1149,6 +1222,8 @@ instance StrEncoding ACMEventTag where "x.grp.info" -> XGrpInfo_ "x.grp.prefs" -> XGrpPrefs_ "x.grp.direct.inv" -> XGrpDirectInv_ + "x.grp.roster" -> XGrpRoster_ + "x.grp.roster.ack" -> XGrpRosterAck_ "x.grp.msg.forward" -> XGrpMsgForward_ "x.info.probe" -> XInfoProbe_ "x.info.probe.check" -> XInfoProbeCheck_ @@ -1196,7 +1271,7 @@ toCMEventTag msg = case msg of XGrpMemInv _ _ -> XGrpMemInv_ XGrpMemFwd _ _ -> XGrpMemFwd_ XGrpMemInfo _ _ -> XGrpMemInfo_ - XGrpMemRole _ _ -> XGrpMemRole_ + XGrpMemRole {} -> XGrpMemRole_ XGrpMemRestrict _ _ -> XGrpMemRestrict_ XGrpMemCon _ -> XGrpMemCon_ XGrpMemConAll _ -> XGrpMemConAll_ @@ -1206,6 +1281,8 @@ toCMEventTag msg = case msg of XGrpInfo _ -> XGrpInfo_ XGrpPrefs _ -> XGrpPrefs_ XGrpDirectInv {} -> XGrpDirectInv_ + XGrpRoster _ -> XGrpRoster_ + XGrpRosterAck {} -> XGrpRosterAck_ XGrpMsgForward {} -> XGrpMsgForward_ XInfoProbe _ -> XInfoProbe_ XInfoProbeCheck _ -> XInfoProbeCheck_ @@ -1264,6 +1341,7 @@ requiresSignature = \case XGrpMemRestrict_ -> True XGrpLeave_ -> True XGrpRelayNew_ -> True + XGrpRoster_ -> True XInfo_ -> True _ -> False @@ -1332,7 +1410,7 @@ appJsonToCM AppMessageJson {v, msgId, event, params} = do reqContent <- opt "content" let requestMsg = (,) <$> reqMsgId <*> reqContent pure XContact {profile, contactReqId, welcomeMsgId, requestMsg} - XMember_ -> XMember <$> p "profile" <*> p "newMemberId" <*> p "newMemberKey" + XMember_ -> XMember <$> p "profile" <*> p "newMemberId" <*> p "newMemberKey" <*> opt "viaRelay" XDirectDel_ -> pure XDirectDel XGrpInv_ -> XGrpInv <$> p "groupInvitation" XGrpAcpt_ -> XGrpAcpt <$> p "memberId" @@ -1354,16 +1432,18 @@ appJsonToCM AppMessageJson {v, msgId, event, params} = do XGrpMemInv_ -> XGrpMemInv <$> p "memberId" <*> p "memberIntro" XGrpMemFwd_ -> XGrpMemFwd <$> p "memberInfo" <*> p "memberIntro" XGrpMemInfo_ -> XGrpMemInfo <$> p "memberId" <*> p "profile" - XGrpMemRole_ -> XGrpMemRole <$> p "memberId" <*> p "role" + XGrpMemRole_ -> XGrpMemRole <$> p "memberId" <*> p "role" <*> opt "memberKey" <*> opt "rosterVersion" XGrpMemRestrict_ -> XGrpMemRestrict <$> p "memberId" <*> p "memberRestrictions" XGrpMemCon_ -> XGrpMemCon <$> p "memberId" XGrpMemConAll_ -> XGrpMemConAll <$> p "memberId" - XGrpMemDel_ -> XGrpMemDel <$> p "memberId" <*> Right (fromRight False $ p "messages") + XGrpMemDel_ -> XGrpMemDel <$> p "memberId" <*> Right (fromRight False $ p "messages") <*> opt "rosterVersion" XGrpLeave_ -> pure XGrpLeave XGrpDel_ -> pure XGrpDel XGrpInfo_ -> XGrpInfo <$> p "groupProfile" XGrpPrefs_ -> XGrpPrefs <$> p "groupPreferences" XGrpDirectInv_ -> XGrpDirectInv <$> p "connReq" <*> opt "content" <*> opt "scope" + XGrpRoster_ -> XGrpRoster <$> (GroupRoster <$> p "version" <*> p "fileInv") + XGrpRosterAck_ -> XGrpRosterAck <$> p "version" <*> opt "error" XGrpMsgForward_ -> do fwdSender <- opt "memberId" >>= \case Just memberId -> FwdMember memberId . fromMaybe "" <$> opt "memberName" @@ -1405,7 +1485,7 @@ chatToAppMessage chatMsg@ChatMessage {chatVRange, msgId, chatMsgEvent} = case en XFileCancel sharedMsgId -> o ["msgId" .= sharedMsgId] XInfo profile -> o ["profile" .= profile] XContact {profile, contactReqId, welcomeMsgId, requestMsg} -> o $ ("contactReqId" .=? contactReqId) $ ("welcomeMsgId" .=? welcomeMsgId) $ ("msgId" .=? (fst <$> requestMsg)) $ ("content" .=? (snd <$> requestMsg)) $ ["profile" .= profile] - XMember {profile, newMemberId, newMemberKey} -> o ["profile" .= profile, "newMemberId" .= newMemberId, "newMemberKey" .= newMemberKey] + XMember {profile, newMemberId, newMemberKey, viaRelay} -> o $ ("viaRelay" .=? viaRelay) ["profile" .= profile, "newMemberId" .= newMemberId, "newMemberKey" .= newMemberKey] XDirectDel -> JM.empty XGrpInv groupInv -> o ["groupInvitation" .= groupInv] XGrpAcpt memId -> o ["memberId" .= memId] @@ -1426,16 +1506,18 @@ chatToAppMessage chatMsg@ChatMessage {chatVRange, msgId, chatMsgEvent} = case en XGrpMemInv memId memIntro -> o ["memberId" .= memId, "memberIntro" .= memIntro] XGrpMemFwd memInfo memIntro -> o ["memberInfo" .= memInfo, "memberIntro" .= memIntro] XGrpMemInfo memId profile -> o ["memberId" .= memId, "profile" .= profile] - XGrpMemRole memId role -> o ["memberId" .= memId, "role" .= role] + XGrpMemRole memId role memberKey rosterVersion -> o $ ("memberKey" .=? memberKey) $ ("rosterVersion" .=? rosterVersion) ["memberId" .= memId, "role" .= role] XGrpMemRestrict memId memRestrictions -> o ["memberId" .= memId, "memberRestrictions" .= memRestrictions] XGrpMemCon memId -> o ["memberId" .= memId] XGrpMemConAll memId -> o ["memberId" .= memId] - XGrpMemDel memId messages -> o $ ("messages" .=? if messages then Just True else Nothing) ["memberId" .= memId] + XGrpMemDel memId messages rosterVersion -> o $ ("rosterVersion" .=? rosterVersion) $ ("messages" .=? if messages then Just True else Nothing) ["memberId" .= memId] XGrpLeave -> JM.empty XGrpDel -> JM.empty XGrpInfo p -> o ["groupProfile" .= p] XGrpPrefs p -> o ["groupPreferences" .= p] XGrpDirectInv connReq content scope -> o $ ("content" .=? content) $ ("scope" .=? scope) ["connReq" .= connReq] + XGrpRoster GroupRoster {version, fileInv} -> o ["version" .= version, "fileInv" .= fileInv] + XGrpRosterAck version err -> o $ ("error" .=? err) ["version" .= version] XGrpMsgForward GrpMsgForward {fwdSender, fwdBrokerTs} msg -> o $ encodeFwdSender fwdSender ["msg" .= msg, "msgTs" .= fwdBrokerTs] where encodeFwdSender = \case diff --git a/src/Simplex/Chat/Store/Connections.hs b/src/Simplex/Chat/Store/Connections.hs index e5ebf8e2bd..2953c1de1f 100644 --- a/src/Simplex/Chat/Store/Connections.hs +++ b/src/Simplex/Chat/Store/Connections.hs @@ -149,7 +149,7 @@ getConnectionEntity db cxt user@User {userId, userContactId} agentConnId = do g.conn_full_link_to_connect, g.conn_short_link_to_connect, g.conn_link_prepared_connection, g.conn_link_started_connection, g.welcome_shared_msg_id, g.request_shared_msg_id, g.business_chat, g.business_member_id, g.customer_member_id, g.use_relays, g.relay_own_status, - g.ui_themes, g.summary_current_members_count, g.public_member_count, g.custom_data, g.chat_item_ttl, g.members_require_attention, g.via_group_link_uri, + g.ui_themes, g.summary_current_members_count, g.public_member_count, g.roster_version, g.custom_data, g.chat_item_ttl, g.members_require_attention, g.via_group_link_uri, g.root_priv_key, g.root_pub_key, g.member_priv_key, -- GroupInfo {membership} mu.group_member_id, mu.group_id, mu.index_in_group, mu.member_id, mu.peer_chat_min_version, mu.peer_chat_max_version, mu.member_role, mu.member_category, diff --git a/src/Simplex/Chat/Store/Files.hs b/src/Simplex/Chat/Store/Files.hs index 6cb8e39bbc..dee72731a8 100644 --- a/src/Simplex/Chat/Store/Files.hs +++ b/src/Simplex/Chat/Store/Files.hs @@ -31,12 +31,19 @@ module Simplex.Chat.Store.Files getSharedMsgIdByFileId, getFileIdBySharedMsgId, getGroupFileIdBySharedMsgId, + getGroupRcvFileId, + getGroupRosterFileInfo, + deleteGroupRosterFile, + getRosterTransferFile, + deleteRosterTransferFile, + getRcvFileLastChunkNo, getDirectFileIdBySharedMsgId, getChatRefByFileId, lookupChatRefByFileId, updateSndFileStatus, createRcvFileTransfer, createRcvGroupFileTransfer, + createRosterRcvFile, createRcvStandaloneFileTransfer, appendRcvFD, getRcvFileDescrByRcvFileId, @@ -321,6 +328,64 @@ getGroupFileIdBySharedMsgId db userId groupId sharedMsgId = |] (userId, groupId, sharedMsgId) +-- Resolve the in-flight received group inline file for a chunk: read its file_type by shared_msg_id +-- (LIMIT 1 is safe -- all files sharing a shared_msg_id share a type), then look up by type: a roster +-- file is scoped to its source relay (every relay re-serves the owner's same shared_msg_id, so the source +-- disambiguates), a normal file is by shared_msg_id. Nothing => no in-flight transfer (orphaned chunk). +getGroupRcvFileId :: DB.Connection -> UserId -> Int64 -> GroupMemberId -> SharedMsgId -> IO (Maybe Int64) +getGroupRcvFileId db userId groupId fromMemberId sharedMsgId = do + fileType_ <- getFileType + case fileType_ of + Just FTRoster -> + maybeFirstRow fromOnly $ + DB.query db (rcvFileIdQ <> " AND r.group_member_id = ?") (userId, groupId, sharedMsgId, FTRoster, fromMemberId) + Just FTNormal -> + maybeFirstRow fromOnly $ + DB.query db rcvFileIdQ (userId, groupId, sharedMsgId, FTNormal) + Nothing -> pure Nothing + where + getFileType = + maybeFirstRow fromOnly $ + DB.query db "SELECT file_type FROM files WHERE user_id = ? AND group_id = ? AND shared_msg_id = ? LIMIT 1" (userId, groupId, sharedMsgId) + rcvFileIdQ = + [sql| + SELECT f.file_id FROM files f + JOIN rcv_files r ON r.file_id = f.file_id + WHERE f.user_id = ? AND f.group_id = ? AND f.shared_msg_id = ? AND f.file_type = ? + |] + +-- The roster scratch file for a transfer (for fs/handle cleanup before deleting the transfer). +-- A transfer owns exactly one file (created together in one transaction), so this is single-valued. +getRosterTransferFile :: DB.Connection -> Int64 -> IO (Maybe (Int64, Maybe FilePath)) +getRosterTransferFile db transferId = + maybeFirstRow id $ DB.query db "SELECT file_id, file_path FROM files WHERE roster_transfer_id = ?" (Only transferId) + +-- Deletes a transfer's file row; rcv_files and rcv_file_chunks cascade on the FK. +deleteRosterTransferFile :: DB.Connection -> Int64 -> IO () +deleteRosterTransferFile db transferId = + DB.execute db "DELETE FROM files WHERE roster_transfer_id = ?" (Only transferId) + +-- For roster-file cleanup keyed on the group (not a chat item): every matching file_id and its on-disk +-- path, so the caller evicts the handle and removes the file for each — delete-all like deleteGroupRosterFile. +getGroupRosterFileInfo :: DB.Connection -> UserId -> Int64 -> IO [(Int64, Maybe FilePath)] +getGroupRosterFileInfo db userId groupId = + DB.query + db + "SELECT file_id, file_path FROM files WHERE user_id = ? AND group_id = ? AND file_type = ?" + (userId, groupId, FTRoster) + +-- Deletes the roster files row; rcv_files and rcv_file_chunks cascade on the FK. +deleteGroupRosterFile :: DB.Connection -> UserId -> Int64 -> IO () +deleteGroupRosterFile db userId groupId = + DB.execute db "DELETE FROM files WHERE user_id = ? AND group_id = ? AND file_type = ?" (userId, groupId, FTRoster) + +-- The highest stored chunk number, or Nothing if no partial chunks exist (used to decide +-- whether an arriving chunk 1 is a re-driven transfer that must reset). +getRcvFileLastChunkNo :: DB.Connection -> RcvFileTransfer -> IO (Maybe Integer) +getRcvFileLastChunkNo db RcvFileTransfer {fileId} = + maybeFirstRow fromOnly $ + DB.query db "SELECT chunk_number FROM rcv_file_chunks WHERE file_id = ? ORDER BY chunk_number DESC LIMIT 1" (Only fileId) + getDirectFileIdBySharedMsgId :: DB.Connection -> User -> Contact -> SharedMsgId -> ExceptT StoreError IO Int64 getDirectFileIdBySharedMsgId db User {userId} Contact {contactId} sharedMsgId = ExceptT . firstRow fromOnly (SEFileIdNotFoundBySharedMsgId sharedMsgId) $ @@ -379,10 +444,10 @@ createRcvFileTransfer db userId Contact {contactId, localDisplayName = c} f@File db "INSERT INTO rcv_files (file_id, file_status, file_queue_info, file_inline, rcv_file_inline, file_descr_id, created_at, updated_at) VALUES (?,?,?,?,?,?,?,?)" (fileId, FSNew, fileConnReq, fileInline, rcvFileInline, rfdId, currentTs, currentTs) - pure RcvFileTransfer {fileId, xftpRcvFile, fileInvitation = f, fileStatus = RFSNew, rcvFileInline, senderDisplayName = c, chunkSize, cancelled = False, grpMemberId = Nothing, cryptoArgs = Nothing} + pure RcvFileTransfer {fileId, xftpRcvFile, fileInvitation = f, fileStatus = RFSNew, fileType = FTNormal, rcvFileInline, senderDisplayName = c, chunkSize, cancelled = False, grpMemberId = Nothing, cryptoArgs = Nothing} -createRcvGroupFileTransfer :: DB.Connection -> UserId -> GroupInfo -> Maybe GroupMember -> FileInvitation -> Maybe InlineFileMode -> Integer -> ExceptT StoreError IO RcvFileTransfer -createRcvGroupFileTransfer db userId GroupInfo {groupId, localDisplayName = gName} m_ f@FileInvitation {fileName, fileSize, fileConnReq, fileInline, fileDescr} rcvFileInline chunkSize = do +createRcvGroupFileTransfer :: DB.Connection -> UserId -> GroupInfo -> Maybe GroupMember -> FileType -> Maybe SharedMsgId -> FileInvitation -> Maybe InlineFileMode -> Integer -> ExceptT StoreError IO RcvFileTransfer +createRcvGroupFileTransfer db userId GroupInfo {groupId, localDisplayName = gName} m_ fileType sharedMsgId_ f@FileInvitation {fileName, fileSize, fileConnReq, fileInline, fileDescr} rcvFileInline chunkSize = do currentTs <- liftIO getCurrentTime rfd_ <- mapM (createRcvFD_ db userId currentTs) fileDescr let rfdId = (\RcvFileDescr {fileDescrId} -> fileDescrId) <$> rfd_ @@ -394,15 +459,34 @@ createRcvGroupFileTransfer db userId GroupInfo {groupId, localDisplayName = gNam fileId <- liftIO $ do DB.execute db - "INSERT INTO files (user_id, group_id, file_name, file_size, chunk_size, file_inline, ci_file_status, protocol, created_at, updated_at) VALUES (?,?,?,?,?,?,?,?,?,?)" - (userId, groupId, fileName, fileSize, chunkSize, fileInline, CIFSRcvInvitation, fileProtocol, currentTs, currentTs) + "INSERT INTO files (user_id, group_id, file_name, file_size, chunk_size, file_inline, ci_file_status, protocol, file_type, shared_msg_id, created_at, updated_at) VALUES (?,?,?,?,?,?,?,?,?,?,?,?)" + (userId, groupId, fileName, fileSize, chunkSize, fileInline, CIFSRcvInvitation, fileProtocol, fileType, sharedMsgId_, currentTs, currentTs) insertedRowId db liftIO $ DB.execute db "INSERT INTO rcv_files (file_id, file_status, file_queue_info, file_inline, rcv_file_inline, group_member_id, file_descr_id, created_at, updated_at) VALUES (?,?,?,?,?,?,?,?,?)" (fileId, FSNew, fileConnReq, fileInline, rcvFileInline, grpMemberId_, rfdId, currentTs, currentTs) - pure RcvFileTransfer {fileId, xftpRcvFile, fileInvitation = f, fileStatus = RFSNew, rcvFileInline, senderDisplayName = senderName, chunkSize, cancelled = False, grpMemberId = grpMemberId_, cryptoArgs = Nothing} + pure RcvFileTransfer {fileId, xftpRcvFile, fileInvitation = f, fileStatus = RFSNew, fileType, rcvFileInline, senderDisplayName = senderName, chunkSize, cancelled = False, grpMemberId = grpMemberId_, cryptoArgs = Nothing} + +-- Roster scratch file owned by a per-source transfer: group_member_id is the delivering relay (so chunk +-- streams from different relays are distinct files), roster_transfer_id links to the metadata record. +createRosterRcvFile :: DB.Connection -> UserId -> GroupInfo -> GroupMember -> Int64 -> SharedMsgId -> FileInvitation -> Maybe InlineFileMode -> Integer -> ExceptT StoreError IO RcvFileTransfer +createRosterRcvFile db userId GroupInfo {groupId} src@GroupMember {localDisplayName = senderName} transferId sharedMsgId f@FileInvitation {fileName, fileSize, fileConnReq, fileInline} rcvFileInline chunkSize = do + currentTs <- liftIO getCurrentTime + let grpMemberId_ = groupMemberId' src + fileId <- liftIO $ do + DB.execute + db + "INSERT INTO files (user_id, group_id, file_name, file_size, chunk_size, file_inline, ci_file_status, protocol, file_type, shared_msg_id, roster_transfer_id, created_at, updated_at) VALUES (?,?,?,?,?,?,?,?,?,?,?,?,?)" + ((userId, groupId, fileName, fileSize, chunkSize, fileInline, CIFSRcvInvitation, FPSMP, FTRoster) :. (sharedMsgId, transferId, currentTs, currentTs)) + insertedRowId db + liftIO $ + DB.execute + db + "INSERT INTO rcv_files (file_id, file_status, file_queue_info, file_inline, rcv_file_inline, group_member_id, created_at, updated_at) VALUES (?,?,?,?,?,?,?,?)" + (fileId, FSNew, fileConnReq, fileInline, rcvFileInline, grpMemberId_, currentTs, currentTs) + pure RcvFileTransfer {fileId, xftpRcvFile = Nothing, fileInvitation = f, fileStatus = RFSNew, fileType = FTRoster, rcvFileInline, senderDisplayName = senderName, chunkSize, cancelled = False, grpMemberId = Just grpMemberId_, cryptoArgs = Nothing} createRcvStandaloneFileTransfer :: DB.Connection -> UserId -> CryptoFile -> Int64 -> Word32 -> ExceptT StoreError IO Int64 createRcvStandaloneFileTransfer db userId (CryptoFile filePath cfArgs_) fileSize chunkSize = do @@ -548,7 +632,7 @@ getRcvFileTransfer_ db userId fileId = do SELECT r.file_status, r.file_queue_info, r.group_member_id, f.file_name, f.file_size, f.chunk_size, f.cancelled, cs.local_display_name, m.local_display_name, f.file_path, f.file_crypto_key, f.file_crypto_nonce, r.file_inline, r.rcv_file_inline, - r.agent_rcv_file_id, r.agent_rcv_file_deleted, r.user_approved_relays, g.local_display_name + r.agent_rcv_file_id, r.agent_rcv_file_deleted, r.user_approved_relays, g.local_display_name, f.file_type FROM rcv_files r JOIN files f USING (file_id) LEFT JOIN contacts cs ON cs.contact_id = f.contact_id @@ -562,9 +646,9 @@ getRcvFileTransfer_ db userId fileId = do where rcvFileTransfer :: Maybe RcvFileDescr -> - (FileStatus, Maybe ConnReqInvitation, Maybe Int64, String, Integer, Integer, Maybe BoolInt) :. (Maybe ContactName, Maybe ContactName, Maybe FilePath, Maybe C.SbKey, Maybe C.CbNonce, Maybe InlineFileMode, Maybe InlineFileMode, Maybe AgentRcvFileId, BoolInt, BoolInt) :. Only (Maybe ContactName) -> + (FileStatus, Maybe ConnReqInvitation, Maybe Int64, String, Integer, Integer, Maybe BoolInt) :. (Maybe ContactName, Maybe ContactName, Maybe FilePath, Maybe C.SbKey, Maybe C.CbNonce, Maybe InlineFileMode, Maybe InlineFileMode, Maybe AgentRcvFileId, BoolInt, BoolInt) :. (Maybe ContactName, FileType) -> ExceptT StoreError IO RcvFileTransfer - rcvFileTransfer rfd_ ((fileStatus', fileConnReq, grpMemberId, fileName, fileSize, chunkSize, cancelled_) :. (contactName_, memberName_, filePath_, fileKey, fileNonce, fileInline, rcvFileInline, agentRcvFileId, BI agentRcvFileDeleted, BI userApprovedRelays) :. Only groupName_) = + rcvFileTransfer rfd_ ((fileStatus', fileConnReq, grpMemberId, fileName, fileSize, chunkSize, cancelled_) :. (contactName_, memberName_, filePath_, fileKey, fileNonce, fileInline, rcvFileInline, agentRcvFileId, BI agentRcvFileDeleted, BI userApprovedRelays) :. (groupName_, fileType)) = case contactName_ <|> memberName_ <|> groupName_ <|> standaloneName_ of Nothing -> throwError $ SERcvFileInvalid fileId Just name -> @@ -582,7 +666,7 @@ getRcvFileTransfer_ db userId fileId = do let fileInvitation = FileInvitation {fileName, fileSize, fileDigest = Nothing, fileConnReq, fileInline, fileDescr = Nothing} cryptoArgs = CFArgs <$> fileKey <*> fileNonce xftpRcvFile = (\rfd -> XFTPRcvFile {rcvFileDescription = rfd, agentRcvFileId, agentRcvFileDeleted, userApprovedRelays}) <$> rfd_ - in RcvFileTransfer {fileId, xftpRcvFile, fileInvitation, fileStatus, rcvFileInline, senderDisplayName, chunkSize, cancelled, grpMemberId, cryptoArgs} + in RcvFileTransfer {fileId, xftpRcvFile, fileInvitation, fileStatus, fileType, rcvFileInline, senderDisplayName, chunkSize, cancelled, grpMemberId, cryptoArgs} filePath = case filePath_ of Nothing -> throwError $ SERcvFileInvalid fileId Just fp -> pure fp @@ -678,7 +762,15 @@ createRcvFileChunk db RcvFileTransfer {fileId, fileInvitation = FileInvitation { currentTs <- getCurrentTime DB.execute db - "INSERT OR REPLACE INTO rcv_file_chunks (file_id, chunk_number, chunk_agent_msg_id, created_at, updated_at) VALUES (?,?,?,?,?)" + [sql| + INSERT INTO rcv_file_chunks (file_id, chunk_number, chunk_agent_msg_id, created_at, updated_at) + VALUES (?,?,?,?,?) + ON CONFLICT (file_id, chunk_number) DO UPDATE SET + chunk_agent_msg_id = excluded.chunk_agent_msg_id, + chunk_stored = 0, + created_at = excluded.created_at, + updated_at = excluded.updated_at + |] (fileId, chunkNo, msgId, currentTs, currentTs) pure status where diff --git a/src/Simplex/Chat/Store/Groups.hs b/src/Simplex/Chat/Store/Groups.hs index 2ea3fa9b84..60531cc1dc 100644 --- a/src/Simplex/Chat/Store/Groups.hs +++ b/src/Simplex/Chat/Store/Groups.hs @@ -67,6 +67,9 @@ module Simplex.Chat.Store.Groups getGroupMembersByIndexes, getSupportScopeMembersByIndexes, getGroupModerators, + getGroupRosterMembers, + getGroupAdminsMods, + getGroupOnlyMembers, getGroupOwners, getGroupRelayMembers, getGroupMembersForExpiration, @@ -84,7 +87,19 @@ module Simplex.Chat.Store.Groups getGroupRelayById, getGroupRelayByGMId, getGroupRelays, - getConnectedGroupRelays, + getPublishableGroupRelays, + setGroupRosterVersion, + getGroupRosterVersion, + getGroupRoster, + RcvRosterTransfer (..), + createRosterTransfer, + getRosterTransferVersion, + getRosterTransferId, + getRosterTransfer, + setGroupLiveRoster, + deleteRosterTransfer, + deleteGroupRosterTransfers, + setGroupMemberKeyRole, createRelayForOwner, getCreateRelayForMember, createRelayConnection, @@ -173,6 +188,7 @@ module Simplex.Chat.Store.Groups createLinkOwnerMember, updatePreparedChannelMember, updateUnknownMemberAnnounced, + updateRosterMemberAnnounced, updateUserMemberProfileSentAt, setGroupCustomData, setGroupUIThemes, @@ -216,6 +232,8 @@ import Simplex.Chat.Types.Shared import Simplex.Chat.Types.UITheme import Simplex.Messaging.Agent.Protocol (ConfirmationId, ConnId, CreatedConnLink (..), InvitationId, OwnerAuth (..), UserId) import Simplex.Messaging.Agent.Store.AgentStore (firstRow, fromOnlyBI, maybeFirstRow) +import qualified Simplex.FileTransfer.Description as FD +import Simplex.Messaging.Encoding (smpDecode, smpEncode) import Simplex.Messaging.Agent.Store.DB (Binary (..), BoolInt (..)) import Simplex.Messaging.Agent.Store.Entity (DBEntityId) import qualified Simplex.Messaging.Agent.Store.DB as DB @@ -359,6 +377,7 @@ createNewGroup db cxt user@User {userId} groupProfile incognitoProfile useRelays Just PublicGroupProfile {groupType, groupLink, publicGroupId} -> (Just groupType, Just groupLink, Just publicGroupId) Nothing -> (Nothing, Nothing, Nothing) fullGroupPreferences = mergeGroupPreferences groupPreferences + rosterVersion0 = if useRelays then Just (VersionRoster 0) else Nothing currentTs <- getCurrentTime customUserProfileId <- mapM (createIncognitoProfile_ db userId currentTs) incognitoProfile withLocalDisplayName db userId displayName $ \ldn -> runExceptT $ do @@ -389,11 +408,11 @@ createNewGroup db cxt user@User {userId} groupProfile incognitoProfile useRelays INSERT INTO groups (use_relays, creating_in_progress, local_display_name, user_id, group_profile_id, enable_ntfs, created_at, updated_at, chat_ts, user_member_profile_sent_at, - root_priv_key, root_pub_key, member_priv_key, public_member_count) - VALUES (?,?,?,?,?,?,?,?,?,?,?,?,?,?) + root_priv_key, root_pub_key, member_priv_key, public_member_count, roster_version) + VALUES (?,?,?,?,?,?,?,?,?,?,?,?,?,?,?) |] ( (BI useRelays, BI useRelays, ldn, userId, profileId, BI True, currentTs, currentTs, currentTs, currentTs) - :. (rootPrivKey_, rootPubKey_, memberPrivKey_, publicMemberCount_) + :. (rootPrivKey_, rootPubKey_, memberPrivKey_, publicMemberCount_, rosterVersion0) ) insertedRowId db let memberPubKey = C.publicKey . memberPrivKey <$> groupKeys @@ -420,6 +439,7 @@ createNewGroup db cxt user@User {userId} groupProfile incognitoProfile useRelays chatItemTTL = Nothing, uiThemes = Nothing, groupSummary = GroupSummary {currentMembers = 1, publicMemberCount = publicMemberCount_}, + rosterVersion = rosterVersion0, customData = Nothing, membersRequireAttention = 0, viaGroupLinkUri = Nothing, @@ -497,6 +517,7 @@ createGroupInvitation db cxt user@User {userId} contact@Contact {contactId, acti chatItemTTL = Nothing, uiThemes = Nothing, groupSummary = GroupSummary {currentMembers = 2, publicMemberCount = Nothing}, + rosterVersion = Nothing, customData = Nothing, membersRequireAttention = 0, viaGroupLinkUri = Nothing, @@ -1215,10 +1236,42 @@ getGroupModerators db cxt user@User {userId, userContactId} GroupInfo {groupId} (groupMemberQuery <> " WHERE m.user_id = ? AND m.group_id = ? AND (m.contact_id IS NULL OR m.contact_id != ?) AND m.member_role IN (?,?,?)") (userId, groupId, userContactId, GRModerator, GRAdmin, GROwner) +-- The full roster set - members, moderators and admins - excluding owners (link-anchored) and +-- left/removed members. For the privileged subset only use getGroupAdminsMods; for plain members +-- only use getGroupOnlyMembers. +getGroupRosterMembers :: DB.Connection -> StoreCxt -> User -> GroupInfo -> IO [GroupMember] +getGroupRosterMembers db cxt user@User {userId, userContactId} GroupInfo {groupId} = do + currentTs <- getCurrentTime + filter memberCurrent . map (toContactMember currentTs cxt user) + <$> DB.query + db + (groupMemberQuery <> " WHERE m.user_id = ? AND m.group_id = ? AND (m.contact_id IS NULL OR m.contact_id != ?) AND m.member_role IN (?,?,?)") + (userId, groupId, userContactId, GRMember, GRModerator, GRAdmin) + +-- Moderators and admins only (excluding owners and plain members) - the set introduced to a +-- joiner; plain members are learned from the roster blob, not via introductions. +getGroupAdminsMods :: DB.Connection -> StoreCxt -> User -> GroupInfo -> IO [GroupMember] +getGroupAdminsMods db cxt user@User {userId, userContactId} GroupInfo {groupId} = do + currentTs <- getCurrentTime + filter memberCurrent . map (toContactMember currentTs cxt user) + <$> DB.query + db + (groupMemberQuery <> " WHERE m.user_id = ? AND m.group_id = ? AND (m.contact_id IS NULL OR m.contact_id != ?) AND m.member_role IN (?,?)") + (userId, groupId, userContactId, GRModerator, GRAdmin) + +getGroupOnlyMembers :: DB.Connection -> StoreCxt -> User -> GroupInfo -> IO [GroupMember] +getGroupOnlyMembers db cxt user@User {userId, userContactId} GroupInfo {groupId} = do + currentTs <- getCurrentTime + filter memberCurrent . map (toContactMember currentTs cxt user) + <$> DB.query + db + (groupMemberQuery <> " WHERE m.user_id = ? AND m.group_id = ? AND (m.contact_id IS NULL OR m.contact_id != ?) AND m.member_role = ?") + (userId, groupId, userContactId, GRMember) + getGroupOwners :: DB.Connection -> StoreCxt -> User -> GroupInfo -> IO [GroupMember] getGroupOwners db cxt user@User {userId, userContactId} GroupInfo {groupId} = do - ts <- getCurrentTime - map (toContactMember ts cxt user) + currentTs <- getCurrentTime + filter memberCurrent . map (toContactMember currentTs cxt user) <$> DB.query db (groupMemberQuery <> " WHERE m.user_id = ? AND m.group_id = ? AND (m.contact_id IS NULL OR m.contact_id != ?) AND m.member_role = ?") @@ -1373,21 +1426,30 @@ getGroupRelays db GroupInfo {groupId} = (groupRelayQuery <> " WHERE gr.group_id = ?") (Only groupId) -getConnectedGroupRelays :: DB.Connection -> GroupInfo -> IO [GroupRelay] -getConnectedGroupRelays db GroupInfo {groupId} = - map toGroupRelay - <$> DB.query - db - ( groupRelayQuery - <> " " - <> [sql| - JOIN group_members m ON m.group_member_id = gr.group_member_id - WHERE gr.group_id = ? - AND m.member_status = ? - AND gr.relay_status IN (?,?) - |] - ) - (groupId, GSMemConnected, RSAccepted, RSActive) +-- Relays whose link is published to subscribers: acked relays (RSAcknowledgedRoster/RSActive) plus +-- pre-roster relays at RSAccepted (below groupRosterVersion, they can't ack a roster), gated by the +-- relay's negotiated version read from its member connection. +getPublishableGroupRelays :: DB.Connection -> StoreCxt -> User -> GroupInfo -> IO [GroupRelay] +getPublishableGroupRelays db cxt user gInfo@GroupInfo {groupId} = do + relays <- + map toGroupRelay + <$> DB.query + db + ( groupRelayQuery + <> " " + <> [sql| + JOIN group_members m ON m.group_member_id = gr.group_member_id + WHERE gr.group_id = ? + AND m.member_status = ? + AND gr.relay_status IN (?,?,?) + |] + ) + (groupId, GSMemConnected, RSAccepted, RSAcknowledgedRoster, RSActive) + members <- getGroupRelayMembers db cxt user gInfo + pure [gr | gr@GroupRelay {groupMemberId} <- relays, m <- members, groupMemberId' m == groupMemberId, publishable gr m] + where + publishable GroupRelay {relayStatus} m = + relayStatus /= RSAccepted || not (m `supportsVersion` groupRosterVersion) groupRelayQuery :: Query groupRelayQuery = @@ -1405,6 +1467,149 @@ toGroupRelay ((groupRelayId, groupMemberId, chatRelayId, address, displayName, f relayCap = RelayCapabilities {webDomain} in GroupRelay {groupRelayId, groupMemberId, userChatRelay, relayStatus, relayLink, relayCap} +setGroupRosterVersion :: DB.Connection -> GroupInfo -> VersionRoster -> IO () +setGroupRosterVersion db GroupInfo {groupId} v = do + currentTs <- getCurrentTime + DB.execute db "UPDATE groups SET roster_version = ?, updated_at = ? WHERE group_id = ?" (v, currentTs, groupId) + +-- Persisted roster version (the gate baseline; the in-memory gInfo copy is batch-constant and stale on reorder). +getGroupRosterVersion :: DB.Connection -> GroupInfo -> IO (Maybe VersionRoster) +getGroupRosterVersion db GroupInfo {groupId} = + fmap join . maybeFirstRow fromOnly $ + DB.query db "SELECT roster_version FROM groups WHERE group_id = ?" (Only groupId) + +-- The live roster header a relay re-serves to joiners, with the completed blob served alongside it +-- (both are written together at completion, so the blob is present whenever the header is). +getGroupRoster :: DB.Connection -> GroupInfo -> IO (Maybe (GroupMemberId, UTCTime, SignedMsg, Maybe ByteString)) +getGroupRoster db GroupInfo {groupId} = + (>>= toRoster) + <$> maybeFirstRow + id + ( DB.query + db + "SELECT roster_sending_owner_gm_id, roster_broker_ts, roster_msg_chat_binding, roster_msg_signatures, roster_msg_body, roster_blob FROM groups WHERE group_id = ?" + (Only groupId) + ) + where + toRoster (Just ownerGMId, Just brokerTs, Just cb, Just (Binary sigsBs), Just (Binary body), blob_) = + (\sigs -> (ownerGMId, brokerTs, SignedMsg cb sigs body, (\(Binary b) -> b) <$> blob_)) <$> eitherToMaybe (smpDecode sigsBs) + toRoster _ = Nothing + +-- A per-source in-flight roster transfer, keyed (group_id, from_member_id): replaces the single +-- roster_pending_* slot, so two relays serving one member can't share a chunk stream. The signed-header +-- columns are relay-only (NULL on members), promoted to the live roster_msg_* on groups at completion. +createRosterTransfer :: DB.Connection -> GroupInfo -> GroupMemberId -> VersionRoster -> FD.FileDigest -> GroupMemberId -> UTCTime -> Maybe SignedMsg -> IO Int64 +createRosterTransfer db GroupInfo {groupId} fromMemberId v digest ownerGMId brokerTs sm_ = do + -- one in-flight transfer per (group, source): drop any prior row from this source so the INSERT can't hit + -- the UNIQUE constraint even if the caller's fs/handle cleanup was skipped (the scratch file would then leak + -- until group delete, but the transfer never gets stuck). Normally cleanupRosterTransfer ran first. + DB.execute db "DELETE FROM rcv_roster_transfers WHERE group_id = ? AND from_member_id = ?" (groupId, fromMemberId) + DB.execute + db + [sql| + INSERT INTO rcv_roster_transfers + (group_id, from_member_id, roster_version, roster_digest, sending_owner_gm_id, broker_ts, + roster_msg_chat_binding, roster_msg_signatures, roster_msg_body) + VALUES (?,?,?,?,?,?,?,?,?) + |] + ( (groupId, fromMemberId, v, Binary (FD.unFileDigest digest), ownerGMId, brokerTs) + :. ((\SignedMsg {chatBinding} -> chatBinding) <$> sm_, (\SignedMsg {signatures} -> Binary (smpEncode signatures)) <$> sm_, (\SignedMsg {signedBody} -> Binary signedBody) <$> sm_) + ) + insertedRowId db + +getRosterTransferVersion :: DB.Connection -> GroupInfo -> GroupMemberId -> IO (Maybe VersionRoster) +getRosterTransferVersion db GroupInfo {groupId} fromMemberId = + maybeFirstRow fromOnly $ + DB.query db "SELECT roster_version FROM rcv_roster_transfers WHERE group_id = ? AND from_member_id = ?" (groupId, fromMemberId) + +getRosterTransferId :: DB.Connection -> GroupInfo -> GroupMemberId -> IO (Maybe Int64) +getRosterTransferId db GroupInfo {groupId} fromMemberId = + maybeFirstRow fromOnly $ + DB.query db "SELECT roster_transfer_id FROM rcv_roster_transfers WHERE group_id = ? AND from_member_id = ?" (groupId, fromMemberId) + +-- An in-flight received roster transfer (a rcv_roster_transfers row joined to its scratch file), read at +-- completion. The header is the relay's re-serve SignedMsg -- present only on a serving relay (NULL on a +-- member, whose live roster_msg_* stay NULL so it never re-serves). +data RcvRosterTransfer = RcvRosterTransfer + { rosterTransferId :: Int64, + rosterTransferVersion :: VersionRoster, + rosterTransferDigest :: FD.FileDigest, + rosterTransferOwnerGMId :: GroupMemberId, + rosterTransferBrokerTs :: UTCTime, + rosterTransferHeader :: Maybe SignedMsg + } + deriving (Show) + +-- The in-flight transfer for a received roster file (joined via files.roster_transfer_id), with its +-- relay-only signed header. Read at completion to apply, promote into the live roster, and ack. +getRosterTransfer :: DB.Connection -> Int64 -> IO (Maybe RcvRosterTransfer) +getRosterTransfer db fileId = + (>>= toTransfer) + <$> maybeFirstRow + id + ( DB.query + db + [sql| + SELECT t.roster_transfer_id, t.roster_version, t.roster_digest, t.sending_owner_gm_id, t.broker_ts, + t.roster_msg_chat_binding, t.roster_msg_signatures, t.roster_msg_body + FROM rcv_roster_transfers t + JOIN files f ON f.roster_transfer_id = t.roster_transfer_id + WHERE f.file_id = ? + |] + (Only fileId) + ) + where + toTransfer (tId, v, Binary d, ownerGMId, brokerTs, cb_, sigs_, body_) = + Just + RcvRosterTransfer + { rosterTransferId = tId, + rosterTransferVersion = v, + rosterTransferDigest = FD.FileDigest d, + rosterTransferOwnerGMId = ownerGMId, + rosterTransferBrokerTs = brokerTs, + rosterTransferHeader = sm_ + } + where + sm_ = case (cb_, sigs_, body_) of + (Just cb, Just (Binary sigsBs), Just (Binary body)) -> + (\sigs -> SignedMsg cb sigs body) <$> eitherToMaybe (smpDecode sigsBs) + _ -> Nothing + +-- Write the single live roster on groups from a completed transfer's values (header NULL on a member, +-- so its live roster_msg_* stay NULL and it never re-serves; only relays re-serve). +setGroupLiveRoster :: DB.Connection -> GroupInfo -> VersionRoster -> GroupMemberId -> UTCTime -> Maybe SignedMsg -> ByteString -> IO () +setGroupLiveRoster db GroupInfo {groupId} v ownerGMId brokerTs sm_ blob = do + currentTs <- getCurrentTime + DB.execute + db + [sql| + UPDATE groups SET + roster_version = ?, roster_blob = ?, + roster_sending_owner_gm_id = ?, roster_broker_ts = ?, + roster_msg_chat_binding = ?, roster_msg_signatures = ?, roster_msg_body = ?, + updated_at = ? + WHERE group_id = ? + |] + ( (v, Binary blob, ownerGMId, brokerTs) + :. ((\SignedMsg {chatBinding} -> chatBinding) <$> sm_, (\SignedMsg {signatures} -> Binary (smpEncode signatures)) <$> sm_, (\SignedMsg {signedBody} -> Binary signedBody) <$> sm_, currentTs, groupId) + ) + +-- Delete one in-flight transfer row (its files/rcv_files/rcv_file_chunks are removed separately, with +-- the on-disk file). Caller removes the fs file + cached handle first. +deleteRosterTransfer :: DB.Connection -> Int64 -> IO () +deleteRosterTransfer db transferId = + DB.execute db "DELETE FROM rcv_roster_transfers WHERE roster_transfer_id = ?" (Only transferId) + +-- All in-flight transfers for a group (group delete). +deleteGroupRosterTransfers :: DB.Connection -> Int64 -> IO () +deleteGroupRosterTransfers db groupId = + DB.execute db "DELETE FROM rcv_roster_transfers WHERE group_id = ?" (Only groupId) + +setGroupMemberKeyRole :: DB.Connection -> GroupMember -> C.PublicKeyEd25519 -> GroupMemberRole -> IO () +setGroupMemberKeyRole db GroupMember {groupMemberId} pubKey role = do + currentTs <- getCurrentTime + DB.execute db "UPDATE group_members SET member_pub_key = ?, member_role = ?, updated_at = ? WHERE group_member_id = ?" (pubKey, role, currentTs, groupMemberId) + createRelayForOwner :: DB.Connection -> StoreCxt -> TVar ChaChaDRG -> User -> GroupInfo -> UserChatRelay -> ExceptT StoreError IO GroupMember createRelayForOwner db cxt gVar user@User {userId, userContactId} GroupInfo {groupId, membership} UserChatRelay {relayProfile = RelayProfile {displayName}} = do currentTs <- liftIO getCurrentTime @@ -1713,9 +1918,9 @@ getRelayServedGroups db cxt User {userId, userContactId} = do <$> DB.query db ( groupInfoQuery - <> " WHERE g.user_id = ? AND mu.contact_id = ? AND g.relay_own_status IN (?, ?)" + <> " WHERE g.user_id = ? AND mu.contact_id = ? AND g.relay_own_status IN (?, ?, ?)" ) - (userId, userContactId, RSAccepted, RSActive) + (userId, userContactId, RSAccepted, RSAcknowledgedRoster, RSActive) getRelayPublishableGroups :: DB.Connection -> User -> IO [(Int64, B64UrlByteString, Maybe PublicGroupAccess)] getRelayPublishableGroups db User {userId, userContactId} = @@ -3182,11 +3387,11 @@ createLinkOwnerMember db cxt user@User {userId, userContactId} GroupInfo {groupI where VersionRange minV maxV = vr cxt --- member_pub_key is not updated here — introduced members are owners --- whose keys are loaded from link data (trusted out-of-band). --- Updating from an in-band message would allow a compromised relay to substitute keys. +-- Intro refreshes only profile / status / peer version. Role and key stay owner-authoritative +-- (the owner-signed roster for members/moderators/admins, link data for owners), so taking either from +-- an in-band relayed intro would let a compromised relay substitute them. updatePreparedChannelMember :: DB.Connection -> StoreCxt -> User -> GroupMember -> MemberInfo -> ExceptT StoreError IO GroupMember -updatePreparedChannelMember db cxt user@User {userId} member@GroupMember {groupMemberId, memberChatVRange} MemberInfo {memberRole, v, profile} = do +updatePreparedChannelMember db cxt user@User {userId} member@GroupMember {groupMemberId, memberChatVRange} MemberInfo {v, profile} = do _ <- updateMemberProfile db cxt user member profile currentTs <- liftIO getCurrentTime liftIO $ @@ -3194,14 +3399,13 @@ updatePreparedChannelMember db cxt user@User {userId} member@GroupMember {groupM db [sql| UPDATE group_members - SET member_role = ?, - member_status = ?, + SET member_status = ?, peer_chat_min_version = ?, peer_chat_max_version = ?, updated_at = ? WHERE user_id = ? AND group_member_id = ? |] - (memberRole, GSMemIntroduced, minV, maxV, currentTs, userId, groupMemberId) + (GSMemIntroduced, minV, maxV, currentTs, userId, groupMemberId) getGroupMemberById db cxt user groupMemberId where VersionRange minV maxV = maybe memberChatVRange fromChatVRange v @@ -3233,6 +3437,30 @@ updateUnknownMemberAnnounced db cxt user@User {userId} invitingMember unknownMem VersionRange minV maxV = maybe memberChatVRange fromChatVRange v memberPubKey_ = (\(MemberKey k) -> k) <$> memberKey +-- Like updateUnknownMemberAnnounced but preserves member_role and member_pub_key +-- (roster-established for moderators/admins; the dissemination carries only the profile). +updateRosterMemberAnnounced :: DB.Connection -> StoreCxt -> User -> GroupMember -> GroupMember -> MemberInfo -> GroupMemberStatus -> ExceptT StoreError IO GroupMember +updateRosterMemberAnnounced db cxt user@User {userId} invitingMember unknownMember@GroupMember {groupMemberId, memberChatVRange} MemberInfo {v, profile} status = do + _ <- updateMemberProfile db cxt user unknownMember profile + currentTs <- liftIO getCurrentTime + liftIO $ + DB.execute + db + [sql| + UPDATE group_members + SET member_category = ?, + member_status = ?, + invited_by_group_member_id = ?, + peer_chat_min_version = ?, + peer_chat_max_version = ?, + updated_at = ? + WHERE user_id = ? AND group_member_id = ? + |] + ((GCPostMember, status, groupMemberId' invitingMember) :. (minV, maxV, currentTs, userId, groupMemberId)) + getGroupMemberById db cxt user groupMemberId + where + VersionRange minV maxV = maybe memberChatVRange fromChatVRange v + updateUserMemberProfileSentAt :: DB.Connection -> User -> GroupInfo -> UTCTime -> IO () updateUserMemberProfileSentAt db User {userId} GroupInfo {groupId} sentTs = DB.execute diff --git a/src/Simplex/Chat/Store/Messages.hs b/src/Simplex/Chat/Store/Messages.hs index cf12db7ec1..644d73137d 100644 --- a/src/Simplex/Chat/Store/Messages.hs +++ b/src/Simplex/Chat/Store/Messages.hs @@ -238,10 +238,7 @@ createNewSndMessage db gVar connOrGroupId chatMsgEvent msgSigning_ encodeMessage case encodeMessage (SharedMsgId sharedMsgId) of ECMLarge -> pure $ Left SELargeMsg ECMEncoded msgBody -> do - let signedMsg_ = signBody <$> msgSigning_ - signBody MsgSigning {bindingTag, bindingData, keyRef, privKey} = - let sig = C.ASignature C.SEd25519 $ C.sign' privKey (encodeChatBinding bindingTag bindingData <> msgBody) - in SignedMsg {chatBinding = bindingTag, signatures = MsgSignature keyRef sig :| [], signedBody = msgBody} + let signedMsg_ = (`signChatMsgBody` msgBody) <$> msgSigning_ createdAt <- getCurrentTime DB.execute db @@ -584,9 +581,9 @@ createNewRcvChatItem db user chatDirection RcvMessage {msgId, chatMsgEvent, msgS CDChannelRcv GroupInfo {membership = GroupMember {memberId = userMemberId}} _ -> (Just $ Just userMemberId == memberId, memberId) -createNewChatItemNoMsg :: forall c d. MsgDirectionI d => DB.Connection -> User -> ChatDirection c d -> ShowGroupAsSender -> CIContent d -> Maybe SharedMsgId -> Bool -> UTCTime -> UTCTime -> IO ChatItemId -createNewChatItemNoMsg db user chatDirection showGroupAsSender ciContent sharedMsgId_ hasLink itemTs = - createNewChatItem_ db user chatDirection showGroupAsSender Nothing sharedMsgId_ ciContent quoteRow Nothing Nothing False False hasLink itemTs Nothing Nothing +createNewChatItemNoMsg :: forall c d. MsgDirectionI d => DB.Connection -> User -> ChatDirection c d -> ShowGroupAsSender -> CIContent d -> Maybe SharedMsgId -> Bool -> Maybe MsgSigStatus -> UTCTime -> UTCTime -> IO ChatItemId +createNewChatItemNoMsg db user chatDirection showGroupAsSender ciContent sharedMsgId_ hasLink msgSigned itemTs = + createNewChatItem_ db user chatDirection showGroupAsSender Nothing sharedMsgId_ ciContent quoteRow Nothing Nothing False False hasLink itemTs Nothing msgSigned where quoteRow :: NewQuoteRow quoteRow = (Nothing, Nothing, Nothing, Nothing, Nothing) diff --git a/src/Simplex/Chat/Store/Postgres/Migrations.hs b/src/Simplex/Chat/Store/Postgres/Migrations.hs index 20acf0b602..4b814d0434 100644 --- a/src/Simplex/Chat/Store/Postgres/Migrations.hs +++ b/src/Simplex/Chat/Store/Postgres/Migrations.hs @@ -37,6 +37,7 @@ import Simplex.Chat.Store.Postgres.Migrations.M20260529_delivery_job_senders import Simplex.Chat.Store.Postgres.Migrations.M20260530_client_services import Simplex.Chat.Store.Postgres.Migrations.M20260531_member_removed_at import Simplex.Chat.Store.Postgres.Migrations.M20260601_relay_sent_web_domain +import Simplex.Chat.Store.Postgres.Migrations.M20260602_group_roster import Simplex.Messaging.Agent.Store.Shared (Migration (..)) schemaMigrations :: [(String, Text, Maybe Text)] @@ -73,7 +74,8 @@ schemaMigrations = ("20260529_delivery_job_senders", m20260529_delivery_job_senders, Just down_m20260529_delivery_job_senders), ("20260530_client_services", m20260530_client_services, Just down_m20260530_client_services), ("20260531_member_removed_at", m20260531_member_removed_at, Just down_m20260531_member_removed_at), - ("20260601_relay_sent_web_domain", m20260601_relay_sent_web_domain, Just down_m20260601_relay_sent_web_domain) + ("20260601_relay_sent_web_domain", m20260601_relay_sent_web_domain, Just down_m20260601_relay_sent_web_domain), + ("20260602_group_roster", m20260602_group_roster, Just down_m20260602_group_roster) ] -- | The list of migrations in ascending order by date diff --git a/src/Simplex/Chat/Store/Postgres/Migrations/M20260602_group_roster.hs b/src/Simplex/Chat/Store/Postgres/Migrations/M20260602_group_roster.hs new file mode 100644 index 0000000000..892b2c70da --- /dev/null +++ b/src/Simplex/Chat/Store/Postgres/Migrations/M20260602_group_roster.hs @@ -0,0 +1,64 @@ +{-# LANGUAGE OverloadedStrings #-} +{-# LANGUAGE QuasiQuotes #-} + +module Simplex.Chat.Store.Postgres.Migrations.M20260602_group_roster where + +import Data.Text (Text) +import Text.RawString.QQ (r) + +m20260602_group_roster :: Text +m20260602_group_roster = + [r| +ALTER TABLE groups ADD COLUMN roster_version BIGINT; +ALTER TABLE groups ADD COLUMN roster_msg_body BYTEA; +ALTER TABLE groups ADD COLUMN roster_msg_chat_binding TEXT; +ALTER TABLE groups ADD COLUMN roster_msg_signatures BYTEA; +ALTER TABLE groups ADD COLUMN roster_sending_owner_gm_id BIGINT; +ALTER TABLE groups ADD COLUMN roster_broker_ts TIMESTAMPTZ; +ALTER TABLE groups ADD COLUMN roster_blob BYTEA; + +CREATE TABLE rcv_roster_transfers( + roster_transfer_id BIGINT PRIMARY KEY GENERATED ALWAYS AS IDENTITY, + group_id BIGINT NOT NULL REFERENCES groups ON DELETE CASCADE, + from_member_id BIGINT NOT NULL REFERENCES group_members ON DELETE CASCADE, + roster_version BIGINT NOT NULL, + roster_digest BYTEA NOT NULL, + sending_owner_gm_id BIGINT NOT NULL, + broker_ts TIMESTAMPTZ NOT NULL, + roster_msg_body BYTEA, + roster_msg_chat_binding TEXT, + roster_msg_signatures BYTEA, + created_at TEXT NOT NULL DEFAULT (now()), + updated_at TEXT NOT NULL DEFAULT (now()) +); +CREATE UNIQUE INDEX idx_rcv_roster_transfers_group_id_from_member_id ON rcv_roster_transfers(group_id, from_member_id); +CREATE INDEX idx_rcv_roster_transfers_from_member_id ON rcv_roster_transfers(from_member_id); + +ALTER TABLE files ADD COLUMN shared_msg_id BYTEA; +ALTER TABLE files ADD COLUMN file_type TEXT NOT NULL DEFAULT 'normal'; +ALTER TABLE files ADD COLUMN roster_transfer_id BIGINT; +CREATE INDEX idx_files_group_id_shared_msg_id ON files(group_id, shared_msg_id); +CREATE INDEX idx_files_roster_transfer_id ON files(roster_transfer_id); +|] + +down_m20260602_group_roster :: Text +down_m20260602_group_roster = + [r| +DROP INDEX idx_files_roster_transfer_id; +DROP INDEX idx_files_group_id_shared_msg_id; +ALTER TABLE files DROP COLUMN roster_transfer_id; +ALTER TABLE files DROP COLUMN file_type; +ALTER TABLE files DROP COLUMN shared_msg_id; + +DROP INDEX idx_rcv_roster_transfers_from_member_id; +DROP INDEX idx_rcv_roster_transfers_group_id_from_member_id; +DROP TABLE rcv_roster_transfers; + +ALTER TABLE groups DROP COLUMN roster_blob; +ALTER TABLE groups DROP COLUMN roster_broker_ts; +ALTER TABLE groups DROP COLUMN roster_sending_owner_gm_id; +ALTER TABLE groups DROP COLUMN roster_msg_signatures; +ALTER TABLE groups DROP COLUMN roster_msg_chat_binding; +ALTER TABLE groups DROP COLUMN roster_msg_body; +ALTER TABLE groups DROP COLUMN roster_version; +|] diff --git a/src/Simplex/Chat/Store/Postgres/Migrations/chat_schema.sql b/src/Simplex/Chat/Store/Postgres/Migrations/chat_schema.sql index 89cddd48e5..861224ff56 100644 --- a/src/Simplex/Chat/Store/Postgres/Migrations/chat_schema.sql +++ b/src/Simplex/Chat/Store/Postgres/Migrations/chat_schema.sql @@ -752,7 +752,10 @@ CREATE TABLE test_chat_schema.files ( file_crypto_key bytea, file_crypto_nonce bytea, note_folder_id bigint, - redirect_file_id bigint + redirect_file_id bigint, + shared_msg_id bytea, + file_type text DEFAULT 'normal'::text NOT NULL, + roster_transfer_id bigint ); @@ -977,9 +980,16 @@ CREATE TABLE test_chat_schema.groups ( public_member_count bigint, relay_request_retries bigint DEFAULT 0 NOT NULL, relay_request_delay bigint DEFAULT 0 NOT NULL, - relay_request_execute_at timestamp with time zone DEFAULT '1970-01-01 01:00:00+01'::timestamp with time zone NOT NULL, + relay_request_execute_at timestamp with time zone DEFAULT '1970-01-01 04:00:00+04'::timestamp with time zone NOT NULL, relay_inactive_at timestamp with time zone, - relay_sent_web_domain text + relay_sent_web_domain text, + roster_version bigint, + roster_msg_body bytea, + roster_msg_chat_binding text, + roster_msg_signatures bytea, + roster_sending_owner_gm_id bigint, + roster_broker_ts timestamp with time zone, + roster_blob bytea ); @@ -1206,6 +1216,34 @@ CREATE TABLE test_chat_schema.rcv_files ( +CREATE TABLE test_chat_schema.rcv_roster_transfers ( + roster_transfer_id bigint NOT NULL, + group_id bigint NOT NULL, + from_member_id bigint NOT NULL, + roster_version bigint NOT NULL, + roster_digest bytea NOT NULL, + sending_owner_gm_id bigint NOT NULL, + broker_ts timestamp with time zone NOT NULL, + roster_msg_body bytea, + roster_msg_chat_binding text, + roster_msg_signatures bytea, + created_at text DEFAULT now() NOT NULL, + updated_at text DEFAULT now() NOT NULL +); + + + +ALTER TABLE test_chat_schema.rcv_roster_transfers ALTER COLUMN roster_transfer_id ADD GENERATED ALWAYS AS IDENTITY ( + SEQUENCE NAME test_chat_schema.rcv_roster_transfers_roster_transfer_id_seq + START WITH 1 + INCREMENT BY 1 + NO MINVALUE + NO MAXVALUE + CACHE 1 +); + + + CREATE TABLE test_chat_schema.received_probes ( received_probe_id bigint NOT NULL, contact_id bigint, @@ -1739,6 +1777,11 @@ ALTER TABLE ONLY test_chat_schema.rcv_files +ALTER TABLE ONLY test_chat_schema.rcv_roster_transfers + ADD CONSTRAINT rcv_roster_transfers_pkey PRIMARY KEY (roster_transfer_id); + + + ALTER TABLE ONLY test_chat_schema.received_probes ADD CONSTRAINT received_probes_pkey PRIMARY KEY (received_probe_id); @@ -2272,10 +2315,18 @@ CREATE INDEX idx_files_group_id ON test_chat_schema.files USING btree (group_id) +CREATE INDEX idx_files_group_id_shared_msg_id ON test_chat_schema.files USING btree (group_id, shared_msg_id); + + + CREATE INDEX idx_files_redirect_file_id ON test_chat_schema.files USING btree (redirect_file_id); +CREATE INDEX idx_files_roster_transfer_id ON test_chat_schema.files USING btree (roster_transfer_id); + + + CREATE INDEX idx_files_user_id ON test_chat_schema.files USING btree (user_id); @@ -2448,6 +2499,14 @@ CREATE INDEX idx_rcv_files_group_member_id ON test_chat_schema.rcv_files USING b +CREATE INDEX idx_rcv_roster_transfers_from_member_id ON test_chat_schema.rcv_roster_transfers USING btree (from_member_id); + + + +CREATE UNIQUE INDEX idx_rcv_roster_transfers_group_id_from_member_id ON test_chat_schema.rcv_roster_transfers USING btree (group_id, from_member_id); + + + CREATE INDEX idx_received_probes_contact_id ON test_chat_schema.received_probes USING btree (contact_id); @@ -3133,6 +3192,16 @@ ALTER TABLE ONLY test_chat_schema.rcv_files +ALTER TABLE ONLY test_chat_schema.rcv_roster_transfers + ADD CONSTRAINT rcv_roster_transfers_from_member_id_fkey FOREIGN KEY (from_member_id) REFERENCES test_chat_schema.group_members(group_member_id) ON DELETE CASCADE; + + + +ALTER TABLE ONLY test_chat_schema.rcv_roster_transfers + ADD CONSTRAINT rcv_roster_transfers_group_id_fkey FOREIGN KEY (group_id) REFERENCES test_chat_schema.groups(group_id) ON DELETE CASCADE; + + + ALTER TABLE ONLY test_chat_schema.received_probes ADD CONSTRAINT received_probes_contact_id_fkey FOREIGN KEY (contact_id) REFERENCES test_chat_schema.contacts(contact_id) ON DELETE CASCADE; diff --git a/src/Simplex/Chat/Store/SQLite/Migrations.hs b/src/Simplex/Chat/Store/SQLite/Migrations.hs index 78838c507f..c9dd316aee 100644 --- a/src/Simplex/Chat/Store/SQLite/Migrations.hs +++ b/src/Simplex/Chat/Store/SQLite/Migrations.hs @@ -160,6 +160,7 @@ import Simplex.Chat.Store.SQLite.Migrations.M20260529_delivery_job_senders import Simplex.Chat.Store.SQLite.Migrations.M20260530_client_services import Simplex.Chat.Store.SQLite.Migrations.M20260531_member_removed_at import Simplex.Chat.Store.SQLite.Migrations.M20260601_relay_sent_web_domain +import Simplex.Chat.Store.SQLite.Migrations.M20260602_group_roster import Simplex.Messaging.Agent.Store.Shared (Migration (..)) schemaMigrations :: [(String, Query, Maybe Query)] @@ -319,7 +320,8 @@ schemaMigrations = ("20260529_delivery_job_senders", m20260529_delivery_job_senders, Just down_m20260529_delivery_job_senders), ("20260530_client_services", m20260530_client_services, Just down_m20260530_client_services), ("20260531_member_removed_at", m20260531_member_removed_at, Just down_m20260531_member_removed_at), - ("20260601_relay_sent_web_domain", m20260601_relay_sent_web_domain, Just down_m20260601_relay_sent_web_domain) + ("20260601_relay_sent_web_domain", m20260601_relay_sent_web_domain, Just down_m20260601_relay_sent_web_domain), + ("20260602_group_roster", m20260602_group_roster, Just down_m20260602_group_roster) ] -- | The list of migrations in ascending order by date diff --git a/src/Simplex/Chat/Store/SQLite/Migrations/M20260602_group_roster.hs b/src/Simplex/Chat/Store/SQLite/Migrations/M20260602_group_roster.hs new file mode 100644 index 0000000000..d68fea3a56 --- /dev/null +++ b/src/Simplex/Chat/Store/SQLite/Migrations/M20260602_group_roster.hs @@ -0,0 +1,63 @@ +{-# LANGUAGE QuasiQuotes #-} + +module Simplex.Chat.Store.SQLite.Migrations.M20260602_group_roster where + +import Database.SQLite.Simple (Query) +import Database.SQLite.Simple.QQ (sql) + +m20260602_group_roster :: Query +m20260602_group_roster = + [sql| +ALTER TABLE groups ADD COLUMN roster_version INTEGER; +ALTER TABLE groups ADD COLUMN roster_msg_body BLOB; +ALTER TABLE groups ADD COLUMN roster_msg_chat_binding TEXT; +ALTER TABLE groups ADD COLUMN roster_msg_signatures BLOB; +ALTER TABLE groups ADD COLUMN roster_sending_owner_gm_id INTEGER; +ALTER TABLE groups ADD COLUMN roster_broker_ts TEXT; +ALTER TABLE groups ADD COLUMN roster_blob BLOB; + +CREATE TABLE rcv_roster_transfers( + roster_transfer_id INTEGER PRIMARY KEY, + group_id INTEGER NOT NULL REFERENCES groups ON DELETE CASCADE, + from_member_id INTEGER NOT NULL REFERENCES group_members ON DELETE CASCADE, + roster_version INTEGER NOT NULL, + roster_digest BLOB NOT NULL, + sending_owner_gm_id INTEGER NOT NULL, + broker_ts TEXT NOT NULL, + roster_msg_body BLOB, + roster_msg_chat_binding TEXT, + roster_msg_signatures BLOB, + created_at TEXT NOT NULL DEFAULT(datetime('now')), + updated_at TEXT NOT NULL DEFAULT(datetime('now')) +) STRICT; +CREATE UNIQUE INDEX idx_rcv_roster_transfers_group_id_from_member_id ON rcv_roster_transfers(group_id, from_member_id); +CREATE INDEX idx_rcv_roster_transfers_from_member_id ON rcv_roster_transfers(from_member_id); + +ALTER TABLE files ADD COLUMN shared_msg_id BLOB; +ALTER TABLE files ADD COLUMN file_type TEXT NOT NULL DEFAULT 'normal'; +ALTER TABLE files ADD COLUMN roster_transfer_id INTEGER; +CREATE INDEX idx_files_group_id_shared_msg_id ON files(group_id, shared_msg_id); +CREATE INDEX idx_files_roster_transfer_id ON files(roster_transfer_id); +|] + +down_m20260602_group_roster :: Query +down_m20260602_group_roster = + [sql| +DROP INDEX idx_files_roster_transfer_id; +DROP INDEX idx_files_group_id_shared_msg_id; +ALTER TABLE files DROP COLUMN roster_transfer_id; +ALTER TABLE files DROP COLUMN file_type; +ALTER TABLE files DROP COLUMN shared_msg_id; + +DROP INDEX idx_rcv_roster_transfers_from_member_id; +DROP INDEX idx_rcv_roster_transfers_group_id_from_member_id; +DROP TABLE rcv_roster_transfers; + +ALTER TABLE groups DROP COLUMN roster_blob; +ALTER TABLE groups DROP COLUMN roster_broker_ts; +ALTER TABLE groups DROP COLUMN roster_sending_owner_gm_id; +ALTER TABLE groups DROP COLUMN roster_msg_signatures; +ALTER TABLE groups DROP COLUMN roster_msg_chat_binding; +ALTER TABLE groups DROP COLUMN roster_msg_body; +ALTER TABLE groups DROP COLUMN roster_version; +|] diff --git a/src/Simplex/Chat/Store/SQLite/Migrations/chat_query_plans.txt b/src/Simplex/Chat/Store/SQLite/Migrations/chat_query_plans.txt index 0cac477bd5..fb6166f8c9 100644 --- a/src/Simplex/Chat/Store/SQLite/Migrations/chat_query_plans.txt +++ b/src/Simplex/Chat/Store/SQLite/Migrations/chat_query_plans.txt @@ -30,6 +30,7 @@ Query: VALUES (?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?) Plan: +SEARCH rcv_roster_transfers USING COVERING INDEX idx_rcv_roster_transfers_from_member_id (from_member_id=?) SEARCH group_relays USING COVERING INDEX idx_group_relays_group_member_id (group_member_id=?) SEARCH delivery_jobs USING COVERING INDEX idx_delivery_jobs_job_scope_support_gm_id (job_scope_support_gm_id=?) SEARCH delivery_tasks USING COVERING INDEX idx_delivery_tasks_sender_group_member_id (sender_group_member_id=?) @@ -82,6 +83,7 @@ Query: VALUES (?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?) Plan: +SEARCH rcv_roster_transfers USING COVERING INDEX idx_rcv_roster_transfers_from_member_id (from_member_id=?) SEARCH group_relays USING COVERING INDEX idx_group_relays_group_member_id (group_member_id=?) SEARCH delivery_jobs USING COVERING INDEX idx_delivery_jobs_job_scope_support_gm_id (job_scope_support_gm_id=?) SEARCH delivery_tasks USING COVERING INDEX idx_delivery_tasks_sender_group_member_id (sender_group_member_id=?) @@ -148,7 +150,7 @@ Query: g.conn_full_link_to_connect, g.conn_short_link_to_connect, g.conn_link_prepared_connection, g.conn_link_started_connection, g.welcome_shared_msg_id, g.request_shared_msg_id, g.business_chat, g.business_member_id, g.customer_member_id, g.use_relays, g.relay_own_status, - g.ui_themes, g.summary_current_members_count, g.public_member_count, g.custom_data, g.chat_item_ttl, g.members_require_attention, g.via_group_link_uri, + g.ui_themes, g.summary_current_members_count, g.public_member_count, g.roster_version, g.custom_data, g.chat_item_ttl, g.members_require_attention, g.via_group_link_uri, g.root_priv_key, g.root_pub_key, g.member_priv_key, -- GroupInfo {membership} mu.group_member_id, mu.group_id, mu.index_in_group, mu.member_id, mu.peer_chat_min_version, mu.peer_chat_max_version, mu.member_role, mu.member_category, @@ -286,6 +288,7 @@ Query: VALUES (?,?,?,?,?,?,?,?,?,?,?,?,?,?) Plan: +SEARCH rcv_roster_transfers USING COVERING INDEX idx_rcv_roster_transfers_from_member_id (from_member_id=?) SEARCH group_relays USING COVERING INDEX idx_group_relays_group_member_id (group_member_id=?) SEARCH delivery_jobs USING COVERING INDEX idx_delivery_jobs_job_scope_support_gm_id (job_scope_support_gm_id=?) SEARCH delivery_tasks USING COVERING INDEX idx_delivery_tasks_sender_group_member_id (sender_group_member_id=?) @@ -320,6 +323,7 @@ Query: VALUES (?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?) Plan: +SEARCH rcv_roster_transfers USING COVERING INDEX idx_rcv_roster_transfers_from_member_id (from_member_id=?) SEARCH group_relays USING COVERING INDEX idx_group_relays_group_member_id (group_member_id=?) SEARCH delivery_jobs USING COVERING INDEX idx_delivery_jobs_job_scope_support_gm_id (job_scope_support_gm_id=?) SEARCH delivery_tasks USING COVERING INDEX idx_delivery_tasks_sender_group_member_id (sender_group_member_id=?) @@ -354,6 +358,7 @@ Query: VALUES (?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?) Plan: +SEARCH rcv_roster_transfers USING COVERING INDEX idx_rcv_roster_transfers_from_member_id (from_member_id=?) SEARCH group_relays USING COVERING INDEX idx_group_relays_group_member_id (group_member_id=?) SEARCH delivery_jobs USING COVERING INDEX idx_delivery_jobs_job_scope_support_gm_id (job_scope_support_gm_id=?) SEARCH delivery_tasks USING COVERING INDEX idx_delivery_tasks_sender_group_member_id (sender_group_member_id=?) @@ -537,6 +542,7 @@ Query: VALUES (?,?,?,?,?,?,?,?,?,?,?,?,?,?,?) Plan: +SEARCH rcv_roster_transfers USING COVERING INDEX idx_rcv_roster_transfers_from_member_id (from_member_id=?) SEARCH group_relays USING COVERING INDEX idx_group_relays_group_member_id (group_member_id=?) SEARCH delivery_jobs USING COVERING INDEX idx_delivery_jobs_job_scope_support_gm_id (job_scope_support_gm_id=?) SEARCH delivery_tasks USING COVERING INDEX idx_delivery_tasks_sender_group_member_id (sender_group_member_id=?) @@ -570,6 +576,7 @@ Query: VALUES (?,?,?,?,?,?,?,?,?,?,?,?,?,?) Plan: +SEARCH rcv_roster_transfers USING COVERING INDEX idx_rcv_roster_transfers_from_member_id (from_member_id=?) SEARCH group_relays USING COVERING INDEX idx_group_relays_group_member_id (group_member_id=?) SEARCH delivery_jobs USING COVERING INDEX idx_delivery_jobs_job_scope_support_gm_id (job_scope_support_gm_id=?) SEARCH delivery_tasks USING COVERING INDEX idx_delivery_tasks_sender_group_member_id (sender_group_member_id=?) @@ -604,6 +611,7 @@ Query: VALUES (?,?,?,?,?,?,?,?,?,?,?,?,?,?) Plan: +SEARCH rcv_roster_transfers USING COVERING INDEX idx_rcv_roster_transfers_from_member_id (from_member_id=?) SEARCH group_relays USING COVERING INDEX idx_group_relays_group_member_id (group_member_id=?) SEARCH delivery_jobs USING COVERING INDEX idx_delivery_jobs_job_scope_support_gm_id (job_scope_support_gm_id=?) SEARCH delivery_tasks USING COVERING INDEX idx_delivery_tasks_sender_group_member_id (sender_group_member_id=?) @@ -638,6 +646,7 @@ Query: VALUES (?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?) Plan: +SEARCH rcv_roster_transfers USING COVERING INDEX idx_rcv_roster_transfers_from_member_id (from_member_id=?) SEARCH group_relays USING COVERING INDEX idx_group_relays_group_member_id (group_member_id=?) SEARCH delivery_jobs USING COVERING INDEX idx_delivery_jobs_job_scope_support_gm_id (job_scope_support_gm_id=?) SEARCH delivery_tasks USING COVERING INDEX idx_delivery_tasks_sender_group_member_id (sender_group_member_id=?) @@ -1082,6 +1091,17 @@ SEARCH m USING INTEGER PRIMARY KEY (rowid=?) LEFT-JOIN SEARCH g USING INTEGER PRIMARY KEY (rowid=?) LEFT-JOIN SEARCH h USING INDEX idx_sent_probe_hashes_sent_probe_id (sent_probe_id=?) +Query: + SELECT t.roster_transfer_id, t.roster_version, t.roster_digest, t.sending_owner_gm_id, t.broker_ts, + t.roster_msg_chat_binding, t.roster_msg_signatures, t.roster_msg_body + FROM rcv_roster_transfers t + JOIN files f ON f.roster_transfer_id = t.roster_transfer_id + WHERE f.file_id = ? + +Plan: +SEARCH f USING INTEGER PRIMARY KEY (rowid=?) +SEARCH t USING INTEGER PRIMARY KEY (rowid=?) + Query: UPDATE chat_items SET user_id = ?, updated_at = ? @@ -1182,6 +1202,7 @@ Query: VALUES (?,?,?,?,?,?,?,?,?,?,?,?,?,?) Plan: +SEARCH rcv_roster_transfers USING COVERING INDEX idx_rcv_roster_transfers_from_member_id (from_member_id=?) SEARCH group_relays USING COVERING INDEX idx_group_relays_group_member_id (group_member_id=?) SEARCH delivery_jobs USING COVERING INDEX idx_delivery_jobs_job_scope_support_gm_id (job_scope_support_gm_id=?) SEARCH delivery_tasks USING COVERING INDEX idx_delivery_tasks_sender_group_member_id (sender_group_member_id=?) @@ -1217,6 +1238,7 @@ Query: VALUES (?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?) Plan: +SEARCH rcv_roster_transfers USING COVERING INDEX idx_rcv_roster_transfers_from_member_id (from_member_id=?) SEARCH group_relays USING COVERING INDEX idx_group_relays_group_member_id (group_member_id=?) SEARCH delivery_jobs USING COVERING INDEX idx_delivery_jobs_job_scope_support_gm_id (job_scope_support_gm_id=?) SEARCH delivery_tasks USING COVERING INDEX idx_delivery_tasks_sender_group_member_id (sender_group_member_id=?) @@ -1266,8 +1288,8 @@ Query: INSERT INTO groups (use_relays, creating_in_progress, local_display_name, user_id, group_profile_id, enable_ntfs, created_at, updated_at, chat_ts, user_member_profile_sent_at, - root_priv_key, root_pub_key, member_priv_key, public_member_count) - VALUES (?,?,?,?,?,?,?,?,?,?,?,?,?,?) + root_priv_key, root_pub_key, member_priv_key, public_member_count, roster_version) + VALUES (?,?,?,?,?,?,?,?,?,?,?,?,?,?,?) Plan: @@ -1669,7 +1691,7 @@ Query: SELECT r.file_status, r.file_queue_info, r.group_member_id, f.file_name, f.file_size, f.chunk_size, f.cancelled, cs.local_display_name, m.local_display_name, f.file_path, f.file_crypto_key, f.file_crypto_nonce, r.file_inline, r.rcv_file_inline, - r.agent_rcv_file_id, r.agent_rcv_file_deleted, r.user_approved_relays, g.local_display_name + r.agent_rcv_file_id, r.agent_rcv_file_deleted, r.user_approved_relays, g.local_display_name, f.file_type FROM rcv_files r JOIN files f USING (file_id) LEFT JOIN contacts cs ON cs.contact_id = f.contact_id @@ -1865,6 +1887,7 @@ Query: VALUES (?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?) Plan: +SEARCH rcv_roster_transfers USING COVERING INDEX idx_rcv_roster_transfers_from_member_id (from_member_id=?) SEARCH group_relays USING COVERING INDEX idx_group_relays_group_member_id (group_member_id=?) SEARCH delivery_jobs USING COVERING INDEX idx_delivery_jobs_job_scope_support_gm_id (job_scope_support_gm_id=?) SEARCH delivery_tasks USING COVERING INDEX idx_delivery_tasks_sender_group_member_id (sender_group_member_id=?) @@ -1899,6 +1922,7 @@ Query: VALUES (?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?) Plan: +SEARCH rcv_roster_transfers USING COVERING INDEX idx_rcv_roster_transfers_from_member_id (from_member_id=?) SEARCH group_relays USING COVERING INDEX idx_group_relays_group_member_id (group_member_id=?) SEARCH delivery_jobs USING COVERING INDEX idx_delivery_jobs_job_scope_support_gm_id (job_scope_support_gm_id=?) SEARCH delivery_tasks USING COVERING INDEX idx_delivery_tasks_sender_group_member_id (sender_group_member_id=?) @@ -1946,6 +1970,17 @@ Query: Plan: +Query: + INSERT INTO rcv_file_chunks (file_id, chunk_number, chunk_agent_msg_id, created_at, updated_at) + VALUES (?,?,?,?,?) + ON CONFLICT (file_id, chunk_number) DO UPDATE SET + chunk_agent_msg_id = excluded.chunk_agent_msg_id, + chunk_stored = 0, + created_at = excluded.created_at, + updated_at = excluded.updated_at + +Plan: + Query: INSERT INTO remote_hosts (host_device_name, store_path, bind_addr, bind_iface, bind_port, ca_key, ca_cert, id_key, host_fingerprint, host_dh_pub) @@ -3708,6 +3743,15 @@ Plan: SEARCH i USING COVERING INDEX idx_chat_items_group_shared_msg_id (user_id=? AND group_id=?) SEARCH f USING COVERING INDEX idx_files_chat_item_id (chat_item_id=?) +Query: + SELECT f.file_id FROM files f + JOIN rcv_files r ON r.file_id = f.file_id + WHERE f.user_id = ? AND f.group_id = ? AND f.shared_msg_id = ? AND f.file_type = ? + AND r.group_member_id = ? +Plan: +SEARCH f USING INDEX idx_files_group_id_shared_msg_id (group_id=? AND shared_msg_id=?) +SEARCH r USING COVERING INDEX idx_rcv_files_group_member_id (group_member_id=? AND rowid=?) + Query: SELECT file_id, contact_id, group_id, note_folder_id FROM files @@ -4059,6 +4103,19 @@ Query: Plan: SEARCH group_members USING INTEGER PRIMARY KEY (rowid=?) +Query: + UPDATE group_members + SET member_category = ?, + member_status = ?, + invited_by_group_member_id = ?, + peer_chat_min_version = ?, + peer_chat_max_version = ?, + updated_at = ? + WHERE user_id = ? AND group_member_id = ? + +Plan: +SEARCH group_members USING INTEGER PRIMARY KEY (rowid=?) + Query: UPDATE group_members SET member_id = ?, member_pub_key = ?, updated_at = ? @@ -4077,8 +4134,7 @@ SCAN group_members Query: UPDATE group_members - SET member_role = ?, - member_status = ?, + SET member_status = ?, peer_chat_min_version = ?, peer_chat_max_version = ?, updated_at = ? @@ -4783,6 +4839,14 @@ Query: Plan: +Query: + INSERT INTO rcv_roster_transfers + (group_id, from_member_id, roster_version, roster_digest, sending_owner_gm_id, broker_ts, + roster_msg_chat_binding, roster_msg_signatures, roster_msg_body) + VALUES (?,?,?,?,?,?,?,?,?) + +Plan: + Query: INSERT INTO remote_controllers (ctrl_device_name, ca_key, ca_cert, ctrl_fingerprint, id_pub, dh_priv_key, prev_dh_priv_key) @@ -5259,6 +5323,17 @@ Query: Plan: SEARCH groups USING INTEGER PRIMARY KEY (rowid=?) +Query: + UPDATE groups SET + roster_version = ?, roster_blob = ?, + roster_sending_owner_gm_id = ?, roster_broker_ts = ?, + roster_msg_chat_binding = ?, roster_msg_signatures = ?, roster_msg_body = ?, + updated_at = ? + WHERE group_id = ? + +Plan: +SEARCH groups USING INTEGER PRIMARY KEY (rowid=?) + Query: UPDATE msg_deliveries SET delivery_status = ?, updated_at = ? @@ -5276,6 +5351,14 @@ Query: Plan: SEARCH protocol_servers USING INTEGER PRIMARY KEY (rowid=?) +Query: + UPDATE rcv_file_chunks + SET chunk_stored = 1, updated_at = ? + WHERE file_id = ? AND chunk_number = ? + +Plan: +SEARCH rcv_file_chunks USING PRIMARY KEY (file_id=? AND chunk_number=?) + Query: UPDATE rcv_files SET to_receive = 1, user_approved_relays = ?, updated_at = ? @@ -5391,7 +5474,7 @@ Query: g.conn_full_link_to_connect, g.conn_short_link_to_connect, g.conn_link_prepared_connection, g.conn_link_started_connection, g.welcome_shared_msg_id, g.request_shared_msg_id, g.business_chat, g.business_member_id, g.customer_member_id, g.use_relays, g.relay_own_status, - g.ui_themes, g.summary_current_members_count, g.public_member_count, g.custom_data, g.chat_item_ttl, g.members_require_attention, g.via_group_link_uri, + g.ui_themes, g.summary_current_members_count, g.public_member_count, g.roster_version, g.custom_data, g.chat_item_ttl, g.members_require_attention, g.via_group_link_uri, g.root_priv_key, g.root_pub_key, g.member_priv_key, -- GroupMember - membership mu.group_member_id, mu.group_id, mu.index_in_group, mu.member_id, mu.peer_chat_min_version, mu.peer_chat_max_version, mu.member_role, mu.member_category, @@ -5429,7 +5512,7 @@ Query: g.conn_full_link_to_connect, g.conn_short_link_to_connect, g.conn_link_prepared_connection, g.conn_link_started_connection, g.welcome_shared_msg_id, g.request_shared_msg_id, g.business_chat, g.business_member_id, g.customer_member_id, g.use_relays, g.relay_own_status, - g.ui_themes, g.summary_current_members_count, g.public_member_count, g.custom_data, g.chat_item_ttl, g.members_require_attention, g.via_group_link_uri, + g.ui_themes, g.summary_current_members_count, g.public_member_count, g.roster_version, g.custom_data, g.chat_item_ttl, g.members_require_attention, g.via_group_link_uri, g.root_priv_key, g.root_pub_key, g.member_priv_key, -- GroupMember - membership mu.group_member_id, mu.group_id, mu.index_in_group, mu.member_id, mu.peer_chat_min_version, mu.peer_chat_max_version, mu.member_role, mu.member_category, @@ -5460,7 +5543,7 @@ Query: g.conn_full_link_to_connect, g.conn_short_link_to_connect, g.conn_link_prepared_connection, g.conn_link_started_connection, g.welcome_shared_msg_id, g.request_shared_msg_id, g.business_chat, g.business_member_id, g.customer_member_id, g.use_relays, g.relay_own_status, - g.ui_themes, g.summary_current_members_count, g.public_member_count, g.custom_data, g.chat_item_ttl, g.members_require_attention, g.via_group_link_uri, + g.ui_themes, g.summary_current_members_count, g.public_member_count, g.roster_version, g.custom_data, g.chat_item_ttl, g.members_require_attention, g.via_group_link_uri, g.root_priv_key, g.root_pub_key, g.member_priv_key, -- GroupMember - membership mu.group_member_id, mu.group_id, mu.index_in_group, mu.member_id, mu.peer_chat_min_version, mu.peer_chat_max_version, mu.member_role, mu.member_category, @@ -5742,6 +5825,26 @@ SEARCH m USING INDEX idx_group_members_group_id (user_id=? AND group_id=?) SEARCH p USING INTEGER PRIMARY KEY (rowid=?) SEARCH c USING INDEX idx_connections_group_member_id (group_member_id=?) LEFT-JOIN +Query: + SELECT + m.group_member_id, m.group_id, m.index_in_group, m.member_id, m.peer_chat_min_version, m.peer_chat_max_version, m.member_role, m.member_category, m.member_status, m.show_messages, m.member_restriction, + m.invited_by, m.invited_by_group_member_id, m.local_display_name, m.contact_id, m.contact_profile_id, p.contact_profile_id, p.display_name, p.full_name, p.short_descr, p.image, p.contact_link, p.chat_peer_type, p.local_alias, p.preferences, + p.badge_proof, p.badge_pres_header, p.badge_expiry, p.badge_type, p.badge_verified, p.badge_extra, p.badge_master_key, p.badge_signature, p.badge_key_idx, + m.created_at, m.updated_at, + m.support_chat_ts, m.support_chat_items_unread, m.support_chat_items_member_attention, m.support_chat_items_mentions, m.support_chat_last_msg_from_member_ts, m.member_pub_key, m.relay_link, + c.connection_id, c.agent_conn_id, c.conn_level, c.via_contact, c.via_user_contact_link, c.via_group_link, c.group_link_id, c.xcontact_id, c.custom_user_profile_id, + c.conn_status, c.conn_type, c.contact_conn_initiated, c.local_alias, c.contact_id, c.group_member_id, c.user_contact_link_id, + c.created_at, c.security_code, c.security_code_verified_at, c.pq_support, c.pq_encryption, c.pq_snd_enabled, c.pq_rcv_enabled, c.auth_err_counter, c.quota_err_counter, + c.conn_chat_version, c.peer_chat_min_version, c.peer_chat_max_version + FROM group_members m + JOIN contact_profiles p ON p.contact_profile_id = COALESCE(m.member_profile_id, m.contact_profile_id) + LEFT JOIN connections c ON c.group_member_id = m.group_member_id + WHERE m.user_id = ? AND m.group_id = ? AND (m.contact_id IS NULL OR m.contact_id != ?) AND m.member_role IN (?,?) +Plan: +SEARCH m USING INDEX idx_group_members_group_id (user_id=? AND group_id=?) +SEARCH p USING INTEGER PRIMARY KEY (rowid=?) +SEARCH c USING INDEX idx_connections_group_member_id (group_member_id=?) LEFT-JOIN + Query: SELECT m.group_member_id, m.group_id, m.index_in_group, m.member_id, m.peer_chat_min_version, m.peer_chat_max_version, m.member_role, m.member_category, m.member_status, m.show_messages, m.member_restriction, @@ -5872,11 +5975,11 @@ Query: FROM group_relays gr JOIN chat_relays cr ON cr.chat_relay_id = gr.chat_relay_id - JOIN group_members m ON m.group_member_id = gr.group_member_id - WHERE gr.group_id = ? - AND m.member_status = ? - AND gr.relay_status IN (?,?) - + JOIN group_members m ON m.group_member_id = gr.group_member_id + WHERE gr.group_id = ? + AND m.member_status = ? + AND gr.relay_status IN (?,?,?) + Plan: SEARCH gr USING INDEX idx_group_relays_group_id (group_id=?) SEARCH cr USING INTEGER PRIMARY KEY (rowid=?) @@ -6491,6 +6594,14 @@ SEARCH groups USING COVERING INDEX sqlite_autoindex_groups_1 (user_id=? AND loca SEARCH contacts USING COVERING INDEX sqlite_autoindex_contacts_1 (user_id=? AND local_display_name=?) SEARCH users USING INTEGER PRIMARY KEY (rowid=?) +Query: DELETE FROM files WHERE roster_transfer_id = ? +Plan: +SEARCH files USING COVERING INDEX idx_files_roster_transfer_id (roster_transfer_id=?) +SEARCH extra_xftp_file_descriptions USING COVERING INDEX idx_extra_xftp_file_descriptions_file_id (file_id=?) +SEARCH rcv_files USING INTEGER PRIMARY KEY (rowid=?) +SEARCH snd_files USING COVERING INDEX idx_snd_files_file_id (file_id=?) +SEARCH files USING COVERING INDEX idx_files_redirect_file_id (redirect_file_id=?) + Query: DELETE FROM files WHERE user_id = ? AND contact_id = ? Plan: SEARCH files USING INDEX idx_files_contact_id (contact_id=?) @@ -6499,9 +6610,18 @@ SEARCH rcv_files USING INTEGER PRIMARY KEY (rowid=?) SEARCH snd_files USING COVERING INDEX idx_snd_files_file_id (file_id=?) SEARCH files USING COVERING INDEX idx_files_redirect_file_id (redirect_file_id=?) +Query: DELETE FROM files WHERE user_id = ? AND group_id = ? AND file_type = ? +Plan: +SEARCH files USING INDEX idx_files_group_id (group_id=?) +SEARCH extra_xftp_file_descriptions USING COVERING INDEX idx_extra_xftp_file_descriptions_file_id (file_id=?) +SEARCH rcv_files USING INTEGER PRIMARY KEY (rowid=?) +SEARCH snd_files USING COVERING INDEX idx_snd_files_file_id (file_id=?) +SEARCH files USING COVERING INDEX idx_files_redirect_file_id (redirect_file_id=?) + Query: DELETE FROM group_members WHERE user_id = ? AND group_id = ? Plan: SEARCH group_members USING COVERING INDEX idx_group_members_group_id (user_id=? AND group_id=?) +SEARCH rcv_roster_transfers USING COVERING INDEX idx_rcv_roster_transfers_from_member_id (from_member_id=?) SEARCH group_relays USING COVERING INDEX idx_group_relays_group_member_id (group_member_id=?) SEARCH delivery_jobs USING COVERING INDEX idx_delivery_jobs_job_scope_support_gm_id (job_scope_support_gm_id=?) SEARCH delivery_tasks USING COVERING INDEX idx_delivery_tasks_sender_group_member_id (sender_group_member_id=?) @@ -6531,6 +6651,7 @@ SEARCH contacts USING COVERING INDEX idx_contacts_contact_group_member_id (conta Query: DELETE FROM group_members WHERE user_id = ? AND group_member_id = ? Plan: SEARCH group_members USING INTEGER PRIMARY KEY (rowid=?) +SEARCH rcv_roster_transfers USING COVERING INDEX idx_rcv_roster_transfers_from_member_id (from_member_id=?) SEARCH group_relays USING COVERING INDEX idx_group_relays_group_member_id (group_member_id=?) SEARCH delivery_jobs USING COVERING INDEX idx_delivery_jobs_job_scope_support_gm_id (job_scope_support_gm_id=?) SEARCH delivery_tasks USING COVERING INDEX idx_delivery_tasks_sender_group_member_id (sender_group_member_id=?) @@ -6560,6 +6681,7 @@ SEARCH contacts USING COVERING INDEX idx_contacts_contact_group_member_id (conta Query: DELETE FROM groups WHERE user_id = ? AND group_id = ? Plan: SEARCH groups USING INTEGER PRIMARY KEY (rowid=?) +SEARCH rcv_roster_transfers USING COVERING INDEX idx_rcv_roster_transfers_group_id_from_member_id (group_id=?) SEARCH group_relays USING COVERING INDEX idx_group_relays_group_id (group_id=?) SEARCH delivery_jobs USING COVERING INDEX idx_delivery_jobs_group_id (group_id=?) SEARCH delivery_tasks USING COVERING INDEX idx_delivery_tasks_group_id (group_id=?) @@ -6632,6 +6754,18 @@ Query: DELETE FROM rcv_file_chunks WHERE file_id = ? Plan: SEARCH rcv_file_chunks USING COVERING INDEX idx_rcv_file_chunks_file_id (file_id=?) +Query: DELETE FROM rcv_roster_transfers WHERE group_id = ? +Plan: +SEARCH rcv_roster_transfers USING COVERING INDEX idx_rcv_roster_transfers_group_id_from_member_id (group_id=?) + +Query: DELETE FROM rcv_roster_transfers WHERE group_id = ? AND from_member_id = ? +Plan: +SEARCH rcv_roster_transfers USING INDEX idx_rcv_roster_transfers_group_id_from_member_id (group_id=? AND from_member_id=?) + +Query: DELETE FROM rcv_roster_transfers WHERE roster_transfer_id = ? +Plan: +SEARCH rcv_roster_transfers USING INTEGER PRIMARY KEY (rowid=?) + Query: DELETE FROM received_probes WHERE created_at <= ? Plan: SEARCH received_probes USING COVERING INDEX idx_received_probes_created_at (created_at StoreCxt -> Int64 -> [ChatTagId] -> GroupInfoRow -> GroupInfo -toGroupInfo now cxt userContactId chatTags ((groupId, localDisplayName, displayName, fullName, shortDescr, localAlias, description, image, groupType_, groupLink_, publicGroupId_) :. accessRow :. (enableNtfs_, sendRcpts, BI favorite, groupPreferences, memberAdmission) :. (createdAt, updatedAt, chatTs, userMemberProfileSentAt) :. preparedGroupRow :. businessRow :. (BI useRelays, relayOwnStatus, uiThemes, currentMembers, publicMemberCount, customData, chatItemTTL, membersRequireAttention, viaGroupLinkUri) :. groupKeysRow :. userMemberRow) = +toGroupInfo now cxt userContactId chatTags ((groupId, localDisplayName, displayName, fullName, shortDescr, localAlias, description, image, groupType_, groupLink_, publicGroupId_) :. accessRow :. (enableNtfs_, sendRcpts, BI favorite, groupPreferences, memberAdmission) :. (createdAt, updatedAt, chatTs, userMemberProfileSentAt) :. preparedGroupRow :. businessRow :. (BI useRelays, relayOwnStatus, uiThemes, currentMembers, publicMemberCount, rosterVersion, customData, chatItemTTL, membersRequireAttention, viaGroupLinkUri) :. groupKeysRow :. userMemberRow) = let membership = (toGroupMember now userContactId userMemberRow) {memberChatVRange = vr cxt} chatSettings = ChatSettings {enableNtfs = fromMaybe MFAll enableNtfs_, sendRcpts = unBI <$> sendRcpts, favorite} fullGroupPreferences = mergeGroupPreferences groupPreferences @@ -689,7 +689,7 @@ toGroupInfo now cxt userContactId chatTags ((groupId, localDisplayName, displayN businessChat = toBusinessChatInfo businessRow preparedGroup = toPreparedGroup preparedGroupRow groupSummary = GroupSummary {currentMembers, publicMemberCount} - in GroupInfo {groupId, useRelays = BoolDef useRelays, relayOwnStatus, localDisplayName, groupProfile, localAlias, businessChat, fullGroupPreferences, membership, chatSettings, createdAt, updatedAt, chatTs, userMemberProfileSentAt, preparedGroup, chatTags, chatItemTTL, uiThemes, groupSummary, customData, membersRequireAttention, viaGroupLinkUri, groupKeys} + in GroupInfo {groupId, useRelays = BoolDef useRelays, relayOwnStatus, localDisplayName, groupProfile, localAlias, businessChat, fullGroupPreferences, membership, chatSettings, createdAt, updatedAt, chatTs, userMemberProfileSentAt, preparedGroup, chatTags, chatItemTTL, uiThemes, groupSummary, rosterVersion, customData, membersRequireAttention, viaGroupLinkUri, groupKeys} toPreparedGroup :: PreparedGroupRow -> Maybe PreparedGroup toPreparedGroup = \case @@ -789,7 +789,7 @@ groupInfoQueryFields = g.conn_full_link_to_connect, g.conn_short_link_to_connect, g.conn_link_prepared_connection, g.conn_link_started_connection, g.welcome_shared_msg_id, g.request_shared_msg_id, g.business_chat, g.business_member_id, g.customer_member_id, g.use_relays, g.relay_own_status, - g.ui_themes, g.summary_current_members_count, g.public_member_count, g.custom_data, g.chat_item_ttl, g.members_require_attention, g.via_group_link_uri, + g.ui_themes, g.summary_current_members_count, g.public_member_count, g.roster_version, g.custom_data, g.chat_item_ttl, g.members_require_attention, g.via_group_link_uri, g.root_priv_key, g.root_pub_key, g.member_priv_key, -- GroupMember - membership mu.group_member_id, mu.group_id, mu.index_in_group, mu.member_id, mu.peer_chat_min_version, mu.peer_chat_max_version, mu.member_role, mu.member_category, diff --git a/src/Simplex/Chat/Types.hs b/src/Simplex/Chat/Types.hs index f23ea8a041..538faf8cac 100644 --- a/src/Simplex/Chat/Types.hs +++ b/src/Simplex/Chat/Types.hs @@ -490,6 +490,7 @@ data GroupInfo = GroupInfo uiThemes :: Maybe UIThemeEntityOverrides, customData :: Maybe CustomData, groupSummary :: GroupSummary, + rosterVersion :: Maybe VersionRoster, membersRequireAttention :: Int, viaGroupLinkUri :: Maybe ConnReqContact, groupKeys :: Maybe GroupKeys @@ -1021,6 +1022,11 @@ newtype MemberKey = MemberKey C.PublicKeyEd25519 deriving (Eq, Show) deriving newtype (StrEncoding) +-- Binary encoding for the roster blob; delegates to the Ed25519 key. +instance Encoding MemberKey where + smpEncode (MemberKey k) = smpEncode k + smpP = MemberKey <$> smpP + instance FromJSON MemberKey where parseJSON = strParseJSON "MemberKey" @@ -1542,11 +1548,38 @@ instance ToJSON InlineFileMode where toJSON = J.String . textEncode toEncoding = JE.text . textEncode +-- Discriminates ordinary chat files from the roster blob file, so the receive +-- completion / cancel paths branch on the type rather than on chat_item_id (note +-- folders and redirects also lack a chat item). +data FileType = FTNormal | FTRoster + deriving (Eq, Show) + +instance TextEncoding FileType where + textEncode = \case + FTNormal -> "normal" + FTRoster -> "roster" + textDecode = \case + "normal" -> Just FTNormal + "roster" -> Just FTRoster + _ -> Nothing + +instance FromField FileType where fromField = fromTextField_ textDecode + +instance ToField FileType where toField = toField . textEncode + +instance FromJSON FileType where + parseJSON = textParseJSON "FileType" + +instance ToJSON FileType where + toJSON = J.String . textEncode + toEncoding = JE.text . textEncode + data RcvFileTransfer = RcvFileTransfer { fileId :: FileTransferId, xftpRcvFile :: Maybe XFTPRcvFile, fileInvitation :: FileInvitation, fileStatus :: RcvFileStatus, + fileType :: FileType, rcvFileInline :: Maybe InlineFileMode, senderDisplayName :: ContactName, chunkSize :: Integer, @@ -2091,6 +2124,12 @@ data StoreCxt = StoreCxt {vr :: VersionRangeChat, badgeKeys :: Map Int BBSPublic pattern VersionChat :: Word16 -> VersionChat pattern VersionChat v = Version v +-- A monotonic per-change counter, not a negotiated protocol version: Int64 rather than the Word16 of +-- Version, so a long-lived high-churn channel cannot wrap and be permanently rejected by relays (v >= cur). +newtype VersionRoster = VersionRoster Int64 + deriving (Eq, Ord, Show) + deriving newtype (FromJSON, ToJSON, FromField, ToField) + -- this newtype exists to have a concise JSON encoding of version ranges in chat protocol messages in the form of "1-2" or just "1" newtype ChatVersionRange = ChatVersionRange {fromChatVRange :: VersionRangeChat} deriving (Eq, Show) diff --git a/src/Simplex/Chat/Types/Shared.hs b/src/Simplex/Chat/Types/Shared.hs index c71f7ce37a..296268b58f 100644 --- a/src/Simplex/Chat/Types/Shared.hs +++ b/src/Simplex/Chat/Types/Shared.hs @@ -11,6 +11,7 @@ import qualified Data.ByteString.Char8 as B import Data.Text (Text) import Simplex.Chat.Options.DB (FromField (..), ToField (..)) import Simplex.Messaging.Agent.Store.DB (fromTextField_) +import Simplex.Messaging.Encoding import Simplex.Messaging.Encoding.String import Simplex.Messaging.Parsers (dropPrefix, enumJSON) import Simplex.Messaging.Util ((<$?>)) @@ -57,6 +58,12 @@ instance ToJSON GroupMemberRole where toJSON = textToJSON toEncoding = textToEncoding +-- Binary encoding for the roster blob; delegates to the canonical TextEncoding +-- (same member/moderator/admin form JSON and the DB use). GRUnknown round-trips. +instance Encoding GroupMemberRole where + smpEncode = smpEncode . textEncode + smpP = maybe (fail "bad GroupMemberRole") pure . textDecode =<< smpP + data GroupAcceptance = GAAccepted | GAPendingApproval | GAPendingReview deriving (Eq, Show) instance StrEncoding GroupAcceptance where @@ -82,6 +89,7 @@ data RelayStatus = RSNew -- only for owner | RSInvited | RSAccepted + | RSAcknowledgedRoster | RSActive | RSInactive | RSRejected @@ -92,6 +100,7 @@ relayStatusText = \case RSNew -> "new" RSInvited -> "invited" RSAccepted -> "accepted" + RSAcknowledgedRoster -> "acknowledged_roster" RSActive -> "active" RSInactive -> "inactive" RSRejected -> "rejected" @@ -101,6 +110,7 @@ instance TextEncoding RelayStatus where RSNew -> "new" RSInvited -> "invited" RSAccepted -> "accepted" + RSAcknowledgedRoster -> "acknowledged_roster" RSActive -> "active" RSInactive -> "inactive" RSRejected -> "rejected" @@ -108,6 +118,7 @@ instance TextEncoding RelayStatus where "new" -> Just RSNew "invited" -> Just RSInvited "accepted" -> Just RSAccepted + "acknowledged_roster" -> Just RSAcknowledgedRoster "active" -> Just RSActive "inactive" -> Just RSInactive "rejected" -> Just RSRejected diff --git a/tests/ChatClient.hs b/tests/ChatClient.hs index 442834b244..c955ca1353 100644 --- a/tests/ChatClient.hs +++ b/tests/ChatClient.hs @@ -217,7 +217,7 @@ testCfg = shortLinkPresetServers = ["smp://LcJUMfVhwD8yxjAiSaDzzGF3-kLG4Uh0Fl_ZIjrRwjI=@localhost:7001"], testView = True, tbqSize = 16, - channelSubscriberRole = GRMember, -- starting role is GRMember to test members sending messages + channelSubscriberRole = GRObserver, confirmMigrations = MCYesUp } diff --git a/tests/ChatTests/Groups.hs b/tests/ChatTests/Groups.hs index ac9e325ed2..a32aa2d07c 100644 --- a/tests/ChatTests/Groups.hs +++ b/tests/ChatTests/Groups.hs @@ -20,13 +20,13 @@ import Control.Monad (forM_, void, when) import Data.Bifunctor (second) import Data.ByteString (ByteString) import qualified Data.ByteString.Char8 as B -import Data.Maybe (fromMaybe, isJust, listToMaybe, maybeToList) +import Data.Maybe (fromMaybe, isJust, maybeToList) import Data.Time (UTCTime) import Data.Int (Int64) -import Data.List (intercalate, isInfixOf) +import Data.List (intercalate, isInfixOf, isSuffixOf) import qualified Data.Map.Strict as M import qualified Data.Text as T -import Simplex.Chat.Controller (ChatConfig (..), ChatHooks (..), defaultChatHooks) +import Simplex.Chat.Controller (ChatConfig (..), ChatHooks (..), ChatLogLevel (..), defaultChatHooks) import Simplex.Chat.Library.Internal (uniqueMsgMentions, updatedMentionNames) import Simplex.Chat.Markdown (parseMaybeMarkdownList) import Simplex.Chat.Messages (CIMention (..), CIMentionMember (..), ChatItemId) @@ -288,6 +288,18 @@ chatGroupTests = do it "operator allow clears rejection and relay accepts again" testRelayAllowAcceptsAgain it "rejection on channel A does not affect unrelated channel B" testRelayDoesNotRejectUnrelatedChannel it "concurrent fresh invitations both rejected" testRelayRejectRaceConcurrentInvitations + describe "promoted members roster" $ do + it "moderator action verifies via owner-signed roster" testChannelModeratorActionViaRoster + it "removed moderator drops from the roster cache" testChannelRemovedModeratorRefreshesRoster + it "role transitions update the roster (mod <-> admin, admin -> non-roster)" testChannelRoleTransitionsUpdateRoster + it "malicious relay cannot downgrade or re-key a roster-established moderator via XGrpMemNew" testChannelRelayCannotDowngradeRosterMember + it "should add relay to channel with roster (relay caches roster before joinable)" testChannelAddRelayWithRoster + it "roster blob spanning multiple chunks reassembles" testChannelRosterMultipartReassembly + it "corrupted roster blob is rejected on digest mismatch" testChannelRosterDigestMismatchRejected + it "promoted member enters the roster and can post" testChannelPromotedMemberCanPost + it "observer cannot post until promoted" testChannelObserverCannotPost + it "promoted member re-connecting via a new relay is accepted via the roster-pinned key" testChannelPromotedMemberRejoinViaRelay + it "2 relays: multi-chunk roster reassembles per source (no stream interleaving)" testChannelRosterMultiRelayMultipart describe "channel message operations" $ do it "should update channel message" testChannelMessageUpdate it "should delete channel message" testChannelMessageDelete @@ -8676,6 +8688,20 @@ createChannel1Relay gName owner relay cath dan eve = do forM_ [cath, dan, eve] $ \member -> memberJoinChannel gName [relay] [owner] shortLink fullLink member +-- Promote a fresh channel subscriber (observer default) to member so it can post; the roster bump +-- re-serves to the other (still-unknown) subscribers, who see the change rendered by member id hash. +promoteChannelMember :: HasCallStack => String -> TestCC -> TestCC -> TestCC -> [TestCC] -> IO () +promoteChannelMember gName owner relay member others = do + mName <- userName member + oName <- userName owner + owner ##> ("/mr #" <> gName <> " " <> mName <> " member") + owner <## ("#" <> gName <> ": you changed the role of " <> mName <> " to member (signed)") + concurrentlyN_ $ + [ relay <## ("#" <> gName <> ": " <> oName <> " changed the role of " <> mName <> " from observer to member (signed)"), + member <## ("#" <> gName <> ": " <> oName <> " changed your role from observer to member (signed)") + ] + <> [o <### [EndsWith "from observer to member (signed)"] | o <- others] + setupRelay :: TestCC -> TestCC -> IO String setupRelay owner relay = do rName <- userName relay @@ -8710,7 +8736,7 @@ prepareChannel' relayId gName owner relay = do ] owner ##> ("/show link #" <> gName) - getGroupLinks owner gName GRMember False + getGroupLinks owner gName GRObserver False createChannel2Relays :: String -> TestCC -> TestCC -> TestCC -> TestCC -> TestCC -> TestCC -> IO () createChannel2Relays gName owner relay1 relay2 dan eve frank = do @@ -8741,7 +8767,7 @@ prepareChannel2Relays gName owner relay1 relay2 = do owner <## ("#" <> gName <> ": group link relays updated, current relays:") owner <### [ EndsWith ": active", - EndsWith ": accepted" + Predicate (\l -> ": invited" `isSuffixOf` l || ": accepted" `isSuffixOf` l || ": acknowledged_roster" `isSuffixOf` l) ] owner <## "group link:" void $ getTermLine owner -- consume group link line @@ -8758,7 +8784,7 @@ prepareChannel2Relays gName owner relay1 relay2 = do ] owner ##> ("/show link #" <> gName) - getGroupLinks owner gName GRMember False + getGroupLinks owner gName GRObserver False memberJoinChannel :: String -> [TestCC] -> [TestCC] -> String -> String -> TestCC -> IO () memberJoinChannel gName = memberJoinChannel' gName 1 0 0 0 @@ -8887,6 +8913,9 @@ testChannelsSenderDeduplicateOwn ps = do withNewTestChat ps "eve" eveProfile $ \eve -> do withNewTestChatCfgOpts ps cfg relayTestOpts "bob" bobProfile $ \bob -> do createChannel1Relay "team" alice bob cath dan eve + -- promote cath and dan while the relay is online, so their buffered posts replay as members + promoteChannelMember "team" alice bob cath [dan, eve] + promoteChannelMember "team" alice bob dan [cath, eve] -- chat relay bob is offline alice #> "#team 1" @@ -8912,14 +8941,16 @@ testChannelsSenderDeduplicateOwn ps = do WithTime "#team dan> 6 [>>]" ] cath - <### [ "#team: bob introduced dan (Daniel) in the channel", + <### [ EndsWith "updated to dan", + "#team: bob introduced dan (Daniel) in the channel", WithTime "#team> 1 [>>]", WithTime "#team> 2 [>>]", WithTime "#team> 3 [>>]", WithTime "#team dan> 6 [>>]" ] dan - <### [ "#team: bob introduced cath (Catherine) in the channel", + <### [ EndsWith "updated to cath", + "#team: bob introduced cath (Catherine) in the channel", WithTime "#team> 1 [>>]", WithTime "#team> 2 [>>]", WithTime "#team> 3 [>>]", @@ -8927,7 +8958,9 @@ testChannelsSenderDeduplicateOwn ps = do WithTime "#team cath> 5 [>>]" ] eve - <### [ "#team: bob introduced cath (Catherine) in the channel", + <### [ EndsWith "updated to cath", + EndsWith "updated to dan", + "#team: bob introduced cath (Catherine) in the channel", "#team: bob introduced dan (Daniel) in the channel", WithTime "#team> 1 [>>]", WithTime "#team> 2 [>>]", @@ -8948,11 +8981,13 @@ testChannelLateJoinerReceivesProfile ps = (shortLink, fullLink) <- prepareChannel1Relay "team" alice bob memberJoinChannel "team" [bob] [alice] shortLink fullLink cath memberJoinChannel "team" [bob] [alice] shortLink fullLink dan + promoteChannelMember "team" alice bob cath [dan] - -- first forward: dan learns cath via prepended XGrpMemNew. + -- first forward: dan resolves cath (roster-known by id hash) on the prepended XGrpMemNew. cath #> "#team hi" bob <# "#team cath> hi" alice <# "#team cath> hi [>>]" + dan <### [EndsWith "updated to cath"] dan <## "#team: bob introduced cath (Catherine) in the channel" dan <# "#team cath> hi [>>]" @@ -8988,12 +9023,23 @@ testChannel2RelaysDeduplicateProfile ps = memberJoinChannel "team" [bob, cath] [alice] shortLink fullLink dan memberJoinChannel "team" [bob, cath] [alice] shortLink fullLink eve + -- promote dan (observer default) so it can post; eve learns dan via the roster (id hash) + alice ##> "/mr #team dan member" + alice <## "#team: you changed the role of dan to member (signed)" + concurrentlyN_ + [ bob <## "#team: alice changed the role of dan from observer to member (signed)", + cath <## "#team: alice changed the role of dan from observer to member (signed)", + dan <## "#team: alice changed your role from observer to member (signed)", + eve <### [EndsWith "from observer to member (signed)"] + ] + -- first forward: both relays prepend XGrpMemNew(dan) for eve; -- second hits xGrpMemNew's "already created via another relay" branch. dan #> "#team hi" bob <# "#team dan> hi" cath <# "#team dan> hi" alice <# "#team dan> hi [>>]" + eve <### [EndsWith "updated to dan"] eve .<## " introduced dan (Daniel) in the channel" eve <# "#team dan> hi [>>]" @@ -9035,6 +9081,7 @@ testChannelLargeProfileFits ps = (shortLink, fullLink) <- prepareChannel1Relay "team" alice bob memberJoinChannel "team" [bob] [alice] shortLink fullLink cath memberJoinChannel "team" [bob] [alice] shortLink fullLink dan + promoteChannelMember "team" alice bob cath [dan] -- ~14000 chars: profile fits in a singleton batch AND packs -- inline with the forwarded body (exercises the in-body path). @@ -9045,6 +9092,7 @@ testChannelLargeProfileFits ps = cath #> "#team hi" bob <# "#team cath> hi" alice <# "#team cath> hi [>>]" + dan <### [EndsWith "updated to cath"] dan <## "#team: bob introduced cath (Catherine) in the channel" dan <# "#team cath> hi [>>]" @@ -9058,6 +9106,8 @@ testChannelMultipleLargeProfiles ps = withNewTestChat ps "dan" danProfile $ \dan -> do withNewTestChat ps "eve" eveProfile $ \eve -> do createChannel1Relay "team" alice bob cath dan eve + promoteChannelMember "team" alice bob cath [dan, eve] + promoteChannelMember "team" alice bob dan [cath, eve] -- ~14500 chars each: one rides inline with the body, -- the other spills into a standalone overflow batch. @@ -9079,15 +9129,19 @@ testChannelMultipleLargeProfiles ps = WithTime "#team dan> from dan [>>]" ] cath - <### [ "#team: bob introduced dan (Daniel) in the channel", + <### [ EndsWith "updated to dan", + "#team: bob introduced dan (Daniel) in the channel", WithTime "#team dan> from dan [>>]" ] dan - <### [ "#team: bob introduced cath (Catherine) in the channel", + <### [ EndsWith "updated to cath", + "#team: bob introduced cath (Catherine) in the channel", WithTime "#team cath> from cath [>>]" ] eve - <### [ "#team: bob introduced dan (Daniel) in the channel", + <### [ EndsWith "updated to cath", + EndsWith "updated to dan", + "#team: bob introduced dan (Daniel) in the channel", "#team: bob introduced cath (Catherine) in the channel", WithTime "#team cath> from cath [>>]", WithTime "#team dan> from dan [>>]" @@ -9109,10 +9163,12 @@ testChannelProfileUpdateNoRePrepend ps = (shortLink, fullLink) <- prepareChannel1Relay "team" alice bob memberJoinChannel "team" [bob] [alice] shortLink fullLink cath memberJoinChannel "team" [bob] [alice] shortLink fullLink dan + promoteChannelMember "team" alice bob cath [dan] cath #> "#team hi" bob <# "#team cath> hi" alice <# "#team cath> hi [>>]" + dan <### [EndsWith "updated to cath"] dan <## "#team: bob introduced cath (Catherine) in the channel" dan <# "#team cath> hi [>>]" @@ -9138,22 +9194,28 @@ testChannelMultiSendersIndependent ps = withNewTestChat ps "dan" danProfile $ \dan -> do withNewTestChat ps "eve" eveProfile $ \eve -> do createChannel1Relay "team" alice bob cath dan eve + promoteChannelMember "team" alice bob cath [dan, eve] + promoteChannelMember "team" alice bob dan [cath, eve] - -- cath posts: dan and eve learn cath via prepended XGrpMemNew + -- cath posts: dan and eve resolve cath on the prepended XGrpMemNew cath #> "#team from cath" bob <# "#team cath> from cath" alice <# "#team cath> from cath [>>]" + dan <### [EndsWith "updated to cath"] dan <## "#team: bob introduced cath (Catherine) in the channel" dan <# "#team cath> from cath [>>]" + eve <### [EndsWith "updated to cath"] eve <## "#team: bob introduced cath (Catherine) in the channel" eve <# "#team cath> from cath [>>]" - -- dan posts: cath and eve learn dan independently of cath's vector + -- dan posts: cath and eve resolve dan independently of cath's vector dan #> "#team from dan" bob <# "#team dan> from dan" alice <# "#team dan> from dan [>>]" + cath <### [EndsWith "updated to dan"] cath <## "#team: bob introduced dan (Daniel) in the channel" cath <# "#team dan> from dan [>>]" + eve <### [EndsWith "updated to dan"] eve <## "#team: bob introduced dan (Daniel) in the channel" eve <# "#team dan> from dan [>>]" @@ -9174,6 +9236,17 @@ testChannels2RelaysDeliver ps = withNewTestChat ps "frank" frankProfile $ \frank -> do createChannel2Relays "team" alice bob cath dan eve frank + -- promote dan (observer default) so it can send; eve/frank learn dan via the roster + alice ##> "/mr #team dan member" + alice <## "#team: you changed the role of dan to member (signed)" + concurrentlyN_ + [ bob <## "#team: alice changed the role of dan from observer to member (signed)", + cath <## "#team: alice changed the role of dan from observer to member (signed)", + dan <## "#team: alice changed your role from observer to member (signed)", + eve <### [EndsWith "from observer to member (signed)"], + frank <### [EndsWith "from observer to member (signed)"] + ] + alice #> "#team hi" [bob, cath] *<# "#team> hi" [dan, eve, frank] *<# "#team> hi [>>]" @@ -9186,18 +9259,15 @@ testChannels2RelaysDeliver ps = cath <## " + 👍" alice <# "#team dan> > hi" alice <## " + 👍" + eve .<##. ("#team: unknown member ", " updated to dan") eve .<## " introduced dan (Daniel) in the channel" eve <# "#team dan> > hi" eve <## " + 👍" + frank .<##. ("#team: unknown member ", " updated to dan") frank .<## " introduced dan (Daniel) in the channel" frank <# "#team dan> > hi" frank <## " + 👍" - -- remove below if default role is changed to observer - dan #> "#team hey" - [bob, cath] *<# "#team dan> hey" - [alice, eve, frank] *<# "#team dan> hey [>>]" - testChannels2RelaysIncognito :: HasCallStack => TestParams -> IO () testChannels2RelaysIncognito ps = withNewTestChat ps "alice" aliceProfile $ \alice -> do @@ -9211,6 +9281,17 @@ testChannels2RelaysIncognito ps = forM_ [eve, frank] $ \member -> memberJoinChannel "team" [bob, cath] [alice] shortLink fullLink member + -- promote dan (observer default) so it can send; eve/frank learn dan via the roster + alice ##> ("/mr #team " <> danIncognito <> " member") + alice <## ("#team: you changed the role of " <> danIncognito <> " to member (signed)") + concurrentlyN_ + [ bob <## ("#team: alice changed the role of " <> danIncognito <> " from observer to member (signed)"), + cath <## ("#team: alice changed the role of " <> danIncognito <> " from observer to member (signed)"), + dan <## "#team: alice changed your role from observer to member (signed)", + eve <### [EndsWith "from observer to member (signed)"], + frank <### [EndsWith "from observer to member (signed)"] + ] + alice #> "#team hi" [bob, cath] *<# "#team> hi" dan ?<# "#team> hi [>>]" @@ -9224,18 +9305,15 @@ testChannels2RelaysIncognito ps = cath <## " + 👍" alice <# ("#team " <> danIncognito <> "> > hi") alice <## " + 👍" + eve .<##. ("#team: unknown member ", (" updated to " <> danIncognito)) eve .<## (" introduced " <> danIncognito <> " in the channel") eve <# ("#team " <> danIncognito <> "> > hi") eve <## " + 👍" + frank .<##. ("#team: unknown member ", (" updated to " <> danIncognito)) frank .<## (" introduced " <> danIncognito <> " in the channel") frank <# ("#team " <> danIncognito <> "> > hi") frank <## " + 👍" - -- remove below if default role is changed to observer - dan ?#> "#team hey" - [bob, cath] *<# ("#team " <> danIncognito <> "> hey") - [alice, eve, frank] *<# ("#team " <> danIncognito <> "> hey [>>]") - testChannelUpdateProfileSigned :: HasCallStack => TestParams -> IO () testChannelUpdateProfileSigned ps = withNewTestChat ps "alice" aliceProfile $ \alice -> @@ -9293,7 +9371,7 @@ testChannelLinkAfterProfileUpdate ps = -- late subscriber joins via the same channel link after profile update threadDelay 100000 alice ##> "/show link #my_team" - (shortLink', fullLink') <- getGroupLinks alice "my_team" GRMember False + (shortLink', fullLink') <- getGroupLinks alice "my_team" GRObserver False shortLink' `shouldBe` shortLink fullLink' `shouldBe` fullLink memberJoinChannel "my_team" [bob] [alice] shortLink' fullLink' dan @@ -9330,7 +9408,7 @@ testChannelLinkAfterWelcomeUpdate ps = -- re-fetch updated link, late subscriber joins threadDelay 100000 alice ##> "/show link #team" - (shortLink', fullLink') <- getGroupLinks alice "team" GRMember False + (shortLink', fullLink') <- getGroupLinks alice "team" GRObserver False shortLink' `shouldBe` shortLink fullLink' `shouldBe` fullLink memberJoinChannel "team" [bob] [alice] shortLink' fullLink' dan @@ -9367,7 +9445,7 @@ testChannelOwnerKeyAfterLinkUpdate ps = -- Late subscriber joins via the same channel link after profile update. alice ##> "/show link #my_team" - (shortLink', fullLink') <- getGroupLinks alice "my_team" GRMember False + (shortLink', fullLink') <- getGroupLinks alice "my_team" GRObserver False shortLink' `shouldBe` shortLink fullLink' `shouldBe` fullLink memberJoinChannel "my_team" [bob] [alice] shortLink' fullLink' dan @@ -9434,15 +9512,20 @@ testChannelChangeRoleSigned ps = withNewTestChat ps "eve" eveProfile $ \eve -> do createChannel1Relay "team" alice bob cath dan eve + -- promote cath to member (observer default) so it can post + promoteChannelMember "team" alice bob cath [dan, eve] + -- other members discover cath cath #> "#team hello from cath" bob <# "#team cath> hello from cath" concurrentlyN_ [ alice <# "#team cath> hello from cath [>>]", do + dan <### [EndsWith "updated to cath"] dan <## "#team: bob introduced cath (Catherine) in the channel" dan <# "#team cath> hello from cath [>>]", do + eve <### [EndsWith "updated to cath"] eve <## "#team: bob introduced cath (Catherine) in the channel" eve <# "#team cath> hello from cath [>>]" ] @@ -9463,21 +9546,21 @@ testChannelChangeRoleSigned ps = dan #$> ("/_get chat #1 count=1", chat, [(0, "changed role of cath to admin (signed)")]) eve #$> ("/_get chat #1 count=1", chat, [(0, "changed role of cath to admin (signed)")]) - -- change role of silent member (other members don't know about member) + -- change role of silent member; cath/eve don't know dan via xGrpMemRole, but the + -- subsequent roster apply emits the chat item with dan TOFU-created at the new role threadDelay 1000000 alice ##> "/mr #team dan admin" alice <## "#team: you changed the role of dan to admin (signed)" - bob <## "#team: alice changed the role of dan from member to admin (signed)" concurrentlyN_ - [ dan <## "#team: alice changed your role from member to admin (signed)", - cath <## "error: x.grp.mem.role with unknown member ID", - eve <## "error: x.grp.mem.role with unknown member ID" + [ bob <## "#team: alice changed the role of dan from observer to admin (signed)", + dan <## "#team: alice changed your role from observer to admin (signed)", + cath .<##. ("#team: alice changed the role of ", " from observer to admin (signed)"), + eve .<##. ("#team: alice changed the role of ", " from observer to admin (signed)") ] + -- cath/eve render dan by id hash (unknown to them, roster-TOFU); arrival verified above alice #$> ("/_get chat #1 count=1", chat, [(1, "changed role of dan to admin (signed)")]) bob #$> ("/_get chat #1 count=1", chat, [(0, "changed role of dan to admin (signed)")]) - cath #$> ("/_get chat #1 count=1", chat, [(0, "changed your role to admin (signed)")]) -- now new chat item dan #$> ("/_get chat #1 count=1", chat, [(0, "changed your role to admin (signed)")]) - eve #$> ("/_get chat #1 count=1", chat, [(0, "changed role of cath to admin (signed)")]) -- now new chat item testChannelBlockMemberSigned :: HasCallStack => TestParams -> IO () testChannelBlockMemberSigned ps = @@ -9488,6 +9571,9 @@ testChannelBlockMemberSigned ps = withNewTestChat ps "eve" eveProfile $ \eve -> do createChannel1Relay "team" alice bob cath dan eve + -- promote cath to member (observer default) so it can post + promoteChannelMember "team" alice bob cath [dan, eve] + -- other members discover cath threadDelay 1000000 cath #> "#team hello from cath" @@ -9495,9 +9581,11 @@ testChannelBlockMemberSigned ps = concurrentlyN_ [ alice <# "#team cath> hello from cath [>>]", do + dan <### [EndsWith "updated to cath"] dan <## "#team: bob introduced cath (Catherine) in the channel" dan <# "#team cath> hello from cath [>>]", do + eve <### [EndsWith "updated to cath"] eve <## "#team: bob introduced cath (Catherine) in the channel" eve <# "#team cath> hello from cath [>>]" ] @@ -9543,6 +9631,224 @@ testChannelBlockMemberSigned ps = r2 `shouldStartWith` "blocked" r2 `shouldEndWith` "(signed)" +checkMemberRow :: HasCallStack => TestCC -> T.Text -> Maybe T.Text -> IO () +checkMemberRow cc name expectedRole = do + roles <- withCCTransaction cc $ \db -> + DB.query db "SELECT member_role FROM group_members WHERE local_display_name = ?" (Only name) :: IO [Only T.Text] + map (\(Only r) -> r) roles `shouldBe` maybeToList expectedRole + +testChannelModeratorActionViaRoster :: HasCallStack => TestParams -> IO () +testChannelModeratorActionViaRoster ps = + withNewTestChat ps "alice" aliceProfile $ \alice -> + withNewTestChatOpts ps relayTestOpts "bob" bobProfile $ \bob -> + withNewTestChat ps "cath" cathProfile $ \cath -> + withNewTestChat ps "dan" danProfile $ \dan -> + withNewTestChat ps "eve" eveProfile $ \eve -> + withNewTestChat ps "frank" frankProfile $ \frank -> do + (shortLink, fullLink) <- prepareChannel1Relay "team" alice bob + forM_ [cath, dan, eve] $ \member -> + memberJoinChannel "team" [bob] [alice] shortLink fullLink member + + -- promote dan (observer default) so it can post; cath and eve then discover dan + threadDelay 1000000 + promoteChannelMember "team" alice bob dan [cath, eve] + dan #> "#team hello from dan" + bob <# "#team dan> hello from dan" + concurrentlyN_ + [ alice <# "#team dan> hello from dan [>>]", + do + cath <### [EndsWith "updated to dan"] + cath <## "#team: bob introduced dan (Daniel) in the channel" + cath <# "#team dan> hello from dan [>>]", + do + eve <### [EndsWith "updated to dan"] + eve <## "#team: bob introduced dan (Daniel) in the channel" + eve <# "#team dan> hello from dan [>>]" + ] + + -- cath promoted observer -> moderator; dan/eve learn cath via the roster re-serve + -- (no name yet -> rendered by member id hash) + threadDelay 1000000 + alice ##> "/mr #team cath moderator" + alice <## "#team: you changed the role of cath to moderator (signed)" + concurrentlyN_ + [ bob <## "#team: alice changed the role of cath from observer to moderator (signed)", + cath <## "#team: alice changed your role from observer to moderator (signed)", + dan <### [EndsWith "to moderator (signed)"], + eve <### [EndsWith "to moderator (signed)"] + ] + + -- cath (moderator) blocks dan; profile prepend carries cath's full profile to dan/eve + threadDelay 1000000 + cath ##> "/block for all #team dan" + cath <## "#team: you blocked dan (signed)" + bob <## "#team: cath blocked dan (signed)" + alice <## "#team: cath blocked dan (signed)" + eve <### [EndsWith "updated to cath"] + eve <## "#team: bob introduced cath (Catherine) in the channel" + eve <## "#team: cath blocked dan (signed)" + dan <### [EndsWith "updated to cath"] + dan <## "#team: bob introduced cath (Catherine) in the channel" + + -- frank joins after the roster update; cached roster gives him cath as moderator. + -- both alice (owner) and cath (mod) receive XGrpMemNew(frank) via introduceInChannel. + -- the roster apply also emits the role-change chat item on frank's side (owner + -- profile may not be loaded yet, so the actor renders by memberId hash) + threadDelay 1000000 + memberJoinChannel "team" [bob] [alice, cath] shortLink fullLink frank + -- the late joiner learns the roster from the served snapshot (verified below); under the + -- no-broadcast model the apply finds no role change to surface, so no item here + threadDelay 1000000 -- the served roster arrives async + checkMemberRole frank "cath" "moderator" + where + checkMemberRole :: HasCallStack => TestCC -> T.Text -> T.Text -> IO () + checkMemberRole cc name expectedRole = do + roles <- withCCTransaction cc $ \db -> + DB.query db "SELECT member_role FROM group_members WHERE local_display_name = ?" (Only name) :: IO [Only T.Text] + map (\(Only r) -> r) roles `shouldBe` [expectedRole] + +testChannelRemovedModeratorRefreshesRoster :: HasCallStack => TestParams -> IO () +testChannelRemovedModeratorRefreshesRoster ps = + withNewTestChat ps "alice" aliceProfile $ \alice -> + withNewTestChatOpts ps relayTestOpts "bob" bobProfile $ \bob -> + withNewTestChat ps "cath" cathProfile $ \cath -> + withNewTestChat ps "dan" danProfile $ \dan -> + withNewTestChat ps "eve" eveProfile $ \eve -> + withNewTestChat ps "frank" frankProfile $ \frank -> do + (shortLink, fullLink) <- prepareChannel1Relay "team" alice bob + forM_ [cath, dan, eve] $ \member -> + memberJoinChannel "team" [bob] [alice] shortLink fullLink member + -- cath promoted observer -> moderator; dan/eve learn cath via the roster (id hash) + threadDelay 1000000 + alice ##> "/mr #team cath moderator" + alice <## "#team: you changed the role of cath to moderator (signed)" + concurrentlyN_ + [ bob <## "#team: alice changed the role of cath from observer to moderator (signed)", + cath <## "#team: alice changed your role from observer to moderator (signed)", + dan <### [EndsWith "to moderator (signed)"], + eve <### [EndsWith "to moderator (signed)"] + ] + threadDelay 1000000 + alice ##> "/rm #team cath" + alice <## "#team: you removed cath from the group (signed)" + bob <## "#team: alice removed cath from the group (signed)" + cath <## "#team: alice removed you from the group (signed)" + cath <## "use /d #team to delete the group" + dan <### [EndsWith "from the group (signed)"] + eve <### [EndsWith "from the group (signed)"] + + -- frank joins after the removal; cached roster has dropped cath + threadDelay 1000000 + memberJoinChannel "team" [bob] [alice] shortLink fullLink frank + threadDelay 100000 + checkMemberRow frank "cath" Nothing + +testChannelRoleTransitionsUpdateRoster :: HasCallStack => TestParams -> IO () +testChannelRoleTransitionsUpdateRoster ps = + withNewTestChat ps "alice" aliceProfile $ \alice -> + withNewTestChatOpts ps relayTestOpts "bob" bobProfile $ \bob -> + withNewTestChat ps "cath" cathProfile $ \cath -> + withNewTestChat ps "dan" danProfile $ \dan -> + withNewTestChat ps "eve" eveProfile $ \eve -> + withNewTestChat ps "frank" frankProfile $ \frank -> do + (shortLink, fullLink) <- prepareChannel1Relay "team" alice bob + memberJoinChannel "team" [bob] [alice] shortLink fullLink cath + -- observer -> moderator + threadDelay 100000 + alice ##> "/mr #team cath moderator" + alice <## "#team: you changed the role of cath to moderator (signed)" + concurrentlyN_ + [ bob <## "#team: alice changed the role of cath from observer to moderator (signed)", + cath <## "#team: alice changed your role from observer to moderator (signed)" + ] + -- dan joins; cached roster has cath as moderator (learned from the served snapshot, + -- no separate role-change item under the no-broadcast model) + threadDelay 100000 + memberJoinChannel "team" [bob] [alice, cath] shortLink fullLink dan + threadDelay 1000000 -- the served roster arrives async; wait before reading the applied state + checkMemberRow dan "cath" (Just "moderator") + -- moderator -> admin: dan now knows cath, role event lands cleanly + threadDelay 100000 + alice ##> "/mr #team cath admin" + alice <## "#team: you changed the role of cath to admin (signed)" + concurrentlyN_ + [ bob <## "#team: alice changed the role of cath from moderator to admin (signed)", + cath <## "#team: alice changed your role from moderator to admin (signed)", + dan <## "#team: alice changed the role of cath from moderator to admin (signed)" + ] + -- eve joins; cached roster has cath as admin (learned from the served snapshot) + threadDelay 100000 + memberJoinChannel "team" [bob] [alice, cath] shortLink fullLink eve + threadDelay 1000000 -- the served roster arrives async; wait before reading the applied state + checkMemberRow eve "cath" (Just "admin") + -- admin -> observer (crossing out of roster, since member is now in-roster): roster drops cath + threadDelay 100000 + alice ##> "/mr #team cath observer" + alice <## "#team: you changed the role of cath to observer (signed)" + concurrentlyN_ + [ bob <## "#team: alice changed the role of cath from admin to observer (signed)", + cath <## "#team: alice changed your role from admin to observer (signed)", + dan <## "#team: alice changed the role of cath from admin to observer (signed)", + eve <## "#team: alice changed the role of cath from admin to observer (signed)" + ] + -- frank joins; cath isn't in the roster, so frank has no record of her + threadDelay 100000 + memberJoinChannel "team" [bob] [alice] shortLink fullLink frank + threadDelay 100000 + checkMemberRow frank "cath" Nothing + +testChannelRelayCannotDowngradeRosterMember :: HasCallStack => TestParams -> IO () +testChannelRelayCannotDowngradeRosterMember ps = + withNewTestChat ps "alice" aliceProfile $ \alice -> + withNewTestChatOpts ps relayTestOpts "bob" bobProfile $ \bob -> + withNewTestChat ps "cath" cathProfile $ \cath -> + withNewTestChatOpts ps (testOpts {coreOptions = testCoreOpts {logLevel = CLLWarning}}) "frank" frankProfile $ \frank -> do + (shortLink, fullLink) <- prepareChannel1Relay "team" alice bob + memberJoinChannel "team" [bob] [alice] shortLink fullLink cath + memberJoinChannel "team" [bob] [alice] shortLink fullLink frank + -- promote cath; roster TOFU-creates cath on frank as moderator with the real key + threadDelay 1000000 + alice ##> "/mr #team cath moderator" + alice <## "#team: you changed the role of cath to moderator (signed)" + concurrentlyN_ + [ bob <## "#team: alice changed the role of cath from observer to moderator (signed)", + cath <## "#team: alice changed your role from observer to moderator (signed)", + frank <### [EndsWith "to moderator (signed)"] + ] + threadDelay 100000 + realKey <- getMemberPubKey bob "cath" + -- malicious relay: corrupt bob's local record of cath so its XGrpMemNew dissemination + -- carries a downgraded role + no key + withCCTransaction bob $ \db -> + DB.execute + db + "UPDATE group_members SET member_role = ?, member_pub_key = NULL WHERE local_display_name = ?" + ("member" :: T.Text, "cath" :: T.Text) + -- cath posts; bob prepends XGrpMemNew(cath, member, NULL) to the delivery (frank not yet introduced) + threadDelay 100000 + cath #> "#team hello from cath" + bob <# "#team cath> hello from cath" + concurrentlyN_ + [ alice <# "#team cath> hello from cath [>>]", + do + frank <##. "warning: x.grp.mem.new: relay asserted key differs from roster-established key, keeping roster key, memberId=" + frank <### [EndsWith "updated to cath"] + frank <## "#team: bob introduced cath (Catherine) in the channel" + frank <# "#team cath> hello from cath [>>]" + ] + threadDelay 100000 + checkMemberRow frank "cath" (Just "moderator") + frankKey <- getMemberPubKey frank "cath" + frankKey `shouldBe` realKey + where + getMemberPubKey :: TestCC -> T.Text -> IO (Maybe ByteString) + getMemberPubKey cc name = do + rows <- withCCTransaction cc $ \db -> + DB.query db "SELECT member_pub_key FROM group_members WHERE local_display_name = ?" (Only name) :: IO [Only (Maybe ByteString)] + case rows of + [Only k] -> pure k + _ -> fail $ "expected one row for " <> T.unpack name + testChannelRemoveMemberSigned :: HasCallStack => TestParams -> IO () testChannelRemoveMemberSigned ps = withNewTestChat ps "alice" aliceProfile $ \alice -> @@ -9552,15 +9858,20 @@ testChannelRemoveMemberSigned ps = withNewTestChat ps "eve" eveProfile $ \eve -> do createChannel1Relay "team" alice bob cath dan eve + -- promote eve to member (observer default) so it can post + promoteChannelMember "team" alice bob eve [cath, dan] + -- other members discover eve eve #> "#team hello from eve" bob <# "#team eve> hello from eve" concurrentlyN_ [ alice <# "#team eve> hello from eve [>>]", do + dan <### [EndsWith "updated to eve"] dan <## "#team: bob introduced eve (Eve) in the channel" dan <# "#team eve> hello from eve [>>]", do + cath <### [EndsWith "updated to eve"] cath <## "#team: bob introduced eve (Eve) in the channel" cath <# "#team eve> hello from eve [>>]" ] @@ -9733,6 +10044,9 @@ testChannelSubscriberLeave ps = withNewTestChat ps "eve" eveProfile $ \eve -> do createChannel1Relay "team" alice bob cath dan eve + -- promote cath to member (observer default) so it can post + promoteChannelMember "team" alice bob cath [dan, eve] + -- other members discover cath threadDelay 1000000 cath #> "#team hello from cath" @@ -9740,9 +10054,11 @@ testChannelSubscriberLeave ps = concurrentlyN_ [ alice <# "#team cath> hello from cath [>>]", do + dan <### [EndsWith "updated to cath"] dan <## "#team: bob introduced cath (Catherine) in the channel" dan <# "#team cath> hello from cath [>>]", do + eve <### [EndsWith "updated to cath"] eve <## "#team: bob introduced cath (Catherine) in the channel" eve <# "#team cath> hello from cath [>>]" ] @@ -9968,6 +10284,9 @@ testChannelSubscriberProfileUpdate ps = withNewTestChat ps "eve" eveProfile $ \eve -> do createChannel1Relay "team" alice bob cath dan eve + -- promote dan to member early (observer default) so its role-change item precedes the messages + promoteChannelMember "team" alice bob dan [cath, eve] + -- enable support and create support chat for cath (but not dan) threadDelay 1000000 alice ##> "/set support #team on" @@ -9987,6 +10306,9 @@ testChannelSubscriberProfileUpdate ps = (dan "#team hello from cath" @@ -9994,9 +10316,11 @@ testChannelSubscriberProfileUpdate ps = concurrentlyN_ [ alice <# "#team cath> hello from cath [>>]", do + dan <### [EndsWith "updated to cath"] dan <## "#team: bob introduced cath (Catherine) in the channel" dan <# "#team cath> hello from cath [>>]", do + eve <### [EndsWith "updated to cath"] eve <## "#team: bob introduced cath (Catherine) in the channel" eve <# "#team cath> hello from cath [>>]" ] @@ -10026,9 +10350,8 @@ testChannelSubscriberProfileUpdate ps = cath #$> ("/_get chat #1 count=2", chat, [(1, "hello from cath"), (1, "hello from kate")]) -- verify profiles are updated correctly forM_ [alice, bob] $ \cc -> cc `hasContactProfiles` ["alice", "bob", "kate", "dan", "eve"] - cath `hasContactProfiles` ["alice", "bob", "kate"] dan `hasContactProfiles` ["alice", "bob", "kate", "dan"] - eve `hasContactProfiles` ["alice", "bob", "kate", "eve"] + -- cath/eve also know dan by id hash now (roster-learned before dan posts); not asserted -- previously silent subscriber updates profile -- dan has no support chat -> no profile update item created @@ -10040,9 +10363,11 @@ testChannelSubscriberProfileUpdate ps = concurrentlyN_ [ alice <# "#team dave> hello from dave [>>]", do + eve <### [EndsWith "updated to dave"] eve <## "#team: bob introduced dave in the channel" eve <# "#team dave> hello from dave [>>]", do + cath <### [EndsWith "updated to dave"] cath <## "#team: bob introduced dave in the channel" cath <# "#team dave> hello from dave [>>]" ] @@ -10128,6 +10453,250 @@ testChannelAddRelay ps = [bob, cath] *<# "#team> hello" [dan, eve] *<# "#team> hello [>>]" +testChannelAddRelayWithRoster :: HasCallStack => TestParams -> IO () +testChannelAddRelayWithRoster ps = + withNewTestChat ps "alice" aliceProfile $ \alice -> + withNewTestChatOpts ps relayTestOpts "bob" bobProfile $ \bob -> + withNewTestChatOpts ps relayTestOpts "dan" danProfile $ \dan -> + withNewTestChat ps "cath" cathProfile $ \cath -> + withNewTestChat ps "eve" eveProfile $ \_eve -> do + (shortLink, fullLink) <- prepareChannel1Relay "team" alice bob + memberJoinChannel "team" [bob] [alice] shortLink fullLink cath + + -- promote cath observer -> moderator: the roster is created (bob caches it) + threadDelay 100000 + alice ##> "/mr #team cath moderator" + alice <## "#team: you changed the role of cath to moderator (signed)" + concurrentlyN_ + [ bob <## "#team: alice changed the role of cath from observer to moderator (signed)", + cath <## "#team: alice changed your role from observer to moderator (signed)" + ] + threadDelay 100000 + + -- add dan as a 2nd relay; with a roster present it must cache the roster and ack + -- (XGrpRosterAck) before alice publishes it as joinable + dan ##> "/ad" + (danSLink, _cLink) <- getContactLinks dan True + alice ##> ("/relays name=dan " <> danSLink) + alice <## "ok" + alice ##> "/_add relays #1 2" + alice <## "#team: group relays:" + alice <## " - relay id 1: active" + alice <## " - relay id 2: invited" + concurrentlyN_ + [ do + alice <## "#team: group link relays updated, current relays:" + alice + <### [ " - relay id 1: active", + " - relay id 2: active" + ] + alice <## "group link:" + void $ getTermLine alice, + dan <## "#team: you joined the group as relay" + ] + + -- cath (an existing member) connects to the new relay and is attached to her roster + -- record, kept as moderator (the relay learned cath from the cached roster snapshot, so + -- it surfaces no role-change item for her) + concurrentlyN_ + [ do + cath <## "#team: joining the group (connecting to relay dan)..." + cath <## "#team: you joined the group (connected to relay dan)", + dan + <### [ EndsWith "accepting request to join group #team...", + EndsWith "is connected" + ] + ] + + threadDelay 100000 + -- the new relay holds the roster (cath is moderator) and learns her name when she connects + checkMemberRow dan "cath" (Just "moderator") + +testChannelRosterMultipartReassembly :: HasCallStack => TestParams -> IO () +testChannelRosterMultipartReassembly ps = + withNewTestChatCfgOpts ps cfg testOpts "alice" aliceProfile $ \alice -> + withNewTestChatCfgOpts ps cfg relayTestOpts "bob" bobProfile $ \bob -> + withNewTestChatCfgOpts ps cfg testOpts "cath" cathProfile $ \cath -> + withNewTestChatCfgOpts ps cfg testOpts "dan" danProfile $ \dan -> do + (shortLink, fullLink) <- prepareChannel1Relay "team" alice bob + memberJoinChannel "team" [bob] [alice] shortLink fullLink cath + threadDelay 100000 + alice ##> "/mr #team cath moderator" + alice <## "#team: you changed the role of cath to moderator (signed)" + concurrentlyN_ + [ bob <## "#team: alice changed the role of cath from observer to moderator (signed)", + cath <## "#team: alice changed your role from observer to moderator (signed)" + ] + threadDelay 100000 + memberJoinChannel "team" [bob] [alice, cath] shortLink fullLink dan + -- dan reassembles the multi-chunk roster from the served snapshot (arrives async) + threadDelay 1000000 + checkMemberRow dan "cath" (Just "moderator") + where + cfg = testCfg {fileChunkSize = 30} + +testChannelRosterDigestMismatchRejected :: HasCallStack => TestParams -> IO () +testChannelRosterDigestMismatchRejected ps = + withNewTestChat ps "alice" aliceProfile $ \alice -> + withNewTestChatOpts ps relayTestOpts "bob" bobProfile $ \bob -> + withNewTestChat ps "cath" cathProfile $ \cath -> + withNewTestChat ps "frank" frankProfile $ \frank -> do + (shortLink, fullLink) <- prepareChannel1Relay "team" alice bob + memberJoinChannel "team" [bob] [alice] shortLink fullLink cath + threadDelay 100000 + alice ##> "/mr #team cath moderator" + alice <## "#team: you changed the role of cath to moderator (signed)" + concurrentlyN_ + [ bob <## "#team: alice changed the role of cath from observer to moderator (signed)", + cath <## "#team: alice changed your role from observer to moderator (signed)" + ] + threadDelay 100000 + -- corrupt the relay's stored blob (same length, different content) so its digest no + -- longer matches the signed header (DB-agnostic: read it, overwrite with zeroed bytes) + withCCTransaction bob $ \db -> do + rows <- DB.query_ db "SELECT roster_blob FROM groups WHERE roster_blob IS NOT NULL" :: IO [Only (Binary ByteString)] + forM_ rows $ \(Only (Binary blob)) -> + DB.execute db "UPDATE groups SET roster_blob = ? WHERE roster_blob IS NOT NULL" (Only (Binary (B.replicate (B.length blob) '\NUL'))) + -- frank joins; bob re-serves the valid header with the corrupted blob, frank rejects it + threadDelay 100000 + memberJoinChannel "team" [bob] [alice, cath] shortLink fullLink frank + threadDelay 1000000 + -- the rejected roster never elevates cath: the intro caps her to the channel default, so she + -- stays observer (not moderator), and the version must not advance to the corrupted roster's version 1 + checkMemberRow frank "cath" (Just "observer") + checkRosterNotApplied frank + where + -- the version is the second guarantee (the role is asserted above): frank holds exactly the team + -- group with no roster applied, so roster_version is NULL - it never advanced to the corrupted version 1 + checkRosterNotApplied :: HasCallStack => TestCC -> IO () + checkRosterNotApplied cc = do + vs <- withCCTransaction cc $ \db -> + DB.query_ db "SELECT roster_version FROM groups" :: IO [Only (Maybe Int64)] + map (\(Only v) -> v) vs `shouldBe` [Nothing] + +testChannelPromotedMemberCanPost :: HasCallStack => TestParams -> IO () +testChannelPromotedMemberCanPost ps = + withNewTestChat ps "alice" aliceProfile $ \alice -> + withNewTestChatOpts ps relayTestOpts "bob" bobProfile $ \bob -> + withNewTestChat ps "cath" cathProfile $ \cath -> + withNewTestChat ps "dan" danProfile $ \dan -> do + (shortLink, fullLink) <- prepareChannel1Relay "team" alice bob + memberJoinChannel "team" [bob] [alice] shortLink fullLink cath + memberJoinChannel "team" [bob] [alice] shortLink fullLink dan + -- promote cath to member: cath enters the owner-signed roster (dan learns cath by id hash) + promoteChannelMember "team" alice bob cath [dan] + -- the promoted member can now post; dan resolves cath on the first forward + cath #> "#team hi from cath" + bob <# "#team cath> hi from cath" + alice <# "#team cath> hi from cath [>>]" + dan <### [EndsWith "updated to cath"] + dan <## "#team: bob introduced cath (Catherine) in the channel" + dan <# "#team cath> hi from cath [>>]" + checkMemberRow dan "cath" (Just "member") + +testChannelObserverCannotPost :: HasCallStack => TestParams -> IO () +testChannelObserverCannotPost ps = + withNewTestChat ps "alice" aliceProfile $ \alice -> + withNewTestChatOpts ps relayTestOpts "bob" bobProfile $ \bob -> + withNewTestChat ps "cath" cathProfile $ \cath -> + withNewTestChat ps "dan" danProfile $ \dan -> do + (shortLink, fullLink) <- prepareChannel1Relay "team" alice bob + memberJoinChannel "team" [bob] [alice] shortLink fullLink cath + memberJoinChannel "team" [bob] [alice] shortLink fullLink dan + -- cath is an observer (default): its own post is rejected locally and never reaches the relay + cath ##> "#team observer attempt" + cath <## "#team: you don't have permission to send messages" + -- promote cath to member; the post is now accepted and delivered, dan resolves cath + promoteChannelMember "team" alice bob cath [dan] + cath #> "#team member post" + bob <# "#team cath> member post" + alice <# "#team cath> member post [>>]" + dan <### [EndsWith "updated to cath"] + dan <## "#team: bob introduced cath (Catherine) in the channel" + dan <# "#team cath> member post [>>]" + +testChannelPromotedMemberRejoinViaRelay :: HasCallStack => TestParams -> IO () +testChannelPromotedMemberRejoinViaRelay ps = + withNewTestChat ps "alice" aliceProfile $ \alice -> + withNewTestChatOpts ps relayTestOpts "bob" bobProfile $ \bob -> + withNewTestChatOpts ps relayTestOpts "dan" danProfile $ \dan -> + withNewTestChat ps "cath" cathProfile $ \cath -> do + (shortLink, fullLink) <- prepareChannel1Relay "team" alice bob + memberJoinChannel "team" [bob] [alice] shortLink fullLink cath + -- promote cath to member: cath enters the owner-signed roster with her pinned key + threadDelay 100000 + promoteChannelMember "team" alice bob cath [] + threadDelay 100000 + -- add dan as a 2nd relay; it caches the roster (incl. member cath) before joinable + dan ##> "/ad" + (danSLink, _cLink) <- getContactLinks dan True + alice ##> ("/relays name=dan " <> danSLink) + alice <## "ok" + alice ##> "/_add relays #1 2" + alice <## "#team: group relays:" + alice <## " - relay id 1: active" + alice <## " - relay id 2: invited" + concurrentlyN_ + [ do + alice <## "#team: group link relays updated, current relays:" + alice + <### [ " - relay id 1: active", + " - relay id 2: active" + ] + alice <## "group link:" + void $ getTermLine alice, + dan <## "#team: you joined the group as relay" + ] + -- cath (a promoted member) connects to the new relay; the widened join gate + -- (verifyKey over the roster-pinned key) accepts her and keeps her as member + concurrentlyN_ + [ do + cath <## "#team: joining the group (connecting to relay dan)..." + cath <## "#team: you joined the group (connected to relay dan)", + dan + <### [ EndsWith "accepting request to join group #team...", + EndsWith "is connected" + ] + ] + threadDelay 100000 + checkMemberRow dan "cath" (Just "member") + +testChannelRosterMultiRelayMultipart :: HasCallStack => TestParams -> IO () +testChannelRosterMultiRelayMultipart ps = + withNewTestChatCfgOpts ps cfg testOpts "alice" aliceProfile $ \alice -> + withNewTestChatCfgOpts ps cfg relayTestOpts "bob" bobProfile $ \bob -> + withNewTestChatCfgOpts ps cfg relayTestOpts "cath" cathProfile $ \cath -> + withNewTestChatCfgOpts ps cfg testOpts "dan" danProfile $ \dan -> + withNewTestChatCfgOpts ps cfg testOpts "eve" eveProfile $ \eve -> + withNewTestChatCfgOpts ps cfg testOpts "frank" frankProfile $ \frank -> do + createChannel2Relays "team" alice bob cath dan eve frank + + -- promote eve to moderator: the owner-signed roster broadcasts through BOTH relays to dan and + -- frank (each connected to both). At fileChunkSize=30 the blob spans multiple chunks, so each + -- member receives two interleaved multi-chunk streams (one per relay) for the same roster. + threadDelay 1000000 + alice ##> "/mr #team eve moderator" + alice <## "#team: you changed the role of eve to moderator (signed)" + concurrentlyN_ + [ bob <## "#team: alice changed the role of eve from observer to moderator (signed)", + cath <## "#team: alice changed the role of eve from observer to moderator (signed)", + eve <## "#team: alice changed your role from observer to moderator (signed)", + dan <### [EndsWith "to moderator (signed)"], + frank <### [EndsWith "to moderator (signed)"] + ] + threadDelay 1000000 -- let both relays' interleaved multipart streams settle + + -- per-source transfers keep the streams independent, so each member reassembles the blob and pins + -- eve as the single moderator WITH her owner-attested key (role + key both come from the blob) + checkOneModeratorWithKey dan + checkOneModeratorWithKey frank + where + cfg = testCfg {fileChunkSize = 30} + checkOneModeratorWithKey cc = do + rows <- withCCTransaction cc $ \db -> + DB.query_ db "SELECT member_pub_key FROM group_members WHERE member_role = 'moderator'" :: IO [Only (Maybe ByteString)] + map (\(Only k) -> isJust k) rows `shouldBe` [True] + testChannelRemoveRelay :: HasCallStack => TestParams -> IO () testChannelRemoveRelay ps = withNewTestChat ps "alice" aliceProfile $ \alice -> @@ -10708,42 +11277,48 @@ testChannelMessageFile ps = withNewTestChat ps "dan" danProfile $ \dan -> withNewTestChat ps "eve" eveProfile $ \eve -> withXFTPServer $ do createChannel1Relay "team" alice bob cath dan eve - + -- the roster arrives as a file before this one; Postgres assigns it a new id and does not + -- reuse it on delete (SQLite does), so the received message file is id 2 here, 1 on SQLite. +#if defined(dbPostgres) + let rcvFileId = 2 :: Int +#else + let rcvFileId = 1 :: Int +#endif -- owner sends file as channel message alice #> "/f #team ./tests/fixtures/test.jpg" alice <## "use /fc 1 to cancel sending" alice <## "completed uploading file 1 (test.jpg) for #team" bob <# "#team> sends file test.jpg (136.5 KiB / 139737 bytes)" - bob <## "use /fr 1 [/ | ] to receive it" + bob <## ("use /fr " <> show rcvFileId <> " [/ | ] to receive it") concurrentlyN_ [ do cath <# "#team> sends file test.jpg (136.5 KiB / 139737 bytes) [>>]" - cath <## "use /fr 1 [/ | ] to receive it [>>]", + cath <## ("use /fr " <> show rcvFileId <> " [/ | ] to receive it [>>]"), do dan <# "#team> sends file test.jpg (136.5 KiB / 139737 bytes) [>>]" - dan <## "use /fr 1 [/ | ] to receive it [>>]", + dan <## ("use /fr " <> show rcvFileId <> " [/ | ] to receive it [>>]"), do eve <# "#team> sends file test.jpg (136.5 KiB / 139737 bytes) [>>]" - eve <## "use /fr 1 [/ | ] to receive it [>>]" + eve <## ("use /fr " <> show rcvFileId <> " [/ | ] to receive it [>>]") ] -- all members receive the file concurrently src <- B.readFile "./tests/fixtures/test.jpg" concurrentlyN_ - [ receiveFile bob "bob" src, - receiveFile cath "cath" src, - receiveFile dan "dan" src, - receiveFile eve "eve" src + [ receiveFile bob "bob" rcvFileId src, + receiveFile cath "cath" rcvFileId src, + receiveFile dan "dan" rcvFileId src, + receiveFile eve "eve" rcvFileId src ] where - receiveFile cc name src = do + receiveFile cc name fileId src = do let path = "./tests/tmp/test_" <> name <> ".jpg" - cc ##> ("/fr 1 " <> path) + cc ##> ("/fr " <> show fileId <> " " <> path) cc - <### [ ConsoleString ("saving file 1 from #team to " <> path), - "started receiving file 1 (test.jpg) from #team" + <### [ ConsoleString ("saving file " <> show fileId <> " from #team to " <> path), + ConsoleString ("started receiving file " <> show fileId <> " (test.jpg) from #team") ] - cc <## "completed receiving file 1 (test.jpg) from #team" + cc <## ("completed receiving file " <> show fileId <> " (test.jpg) from #team") B.readFile path >>= (`shouldBe` src) testChannelMessageFileCancel :: HasCallStack => TestParams -> IO () @@ -10754,33 +11329,37 @@ testChannelMessageFileCancel ps = withNewTestChat ps "dan" danProfile $ \dan -> withNewTestChat ps "eve" eveProfile $ \eve -> withXFTPServer $ do createChannel1Relay "team" alice bob cath dan eve - +#if defined(dbPostgres) + let rcvFileId = 2 :: Int +#else + let rcvFileId = 1 :: Int +#endif -- owner sends file as channel message alice #> "/f #team ./tests/fixtures/test.jpg" alice <## "use /fc 1 to cancel sending" alice <## "completed uploading file 1 (test.jpg) for #team" bob <# "#team> sends file test.jpg (136.5 KiB / 139737 bytes)" - bob <## "use /fr 1 [/ | ] to receive it" + bob <## ("use /fr " <> show rcvFileId <> " [/ | ] to receive it") concurrentlyN_ [ do cath <# "#team> sends file test.jpg (136.5 KiB / 139737 bytes) [>>]" - cath <## "use /fr 1 [/ | ] to receive it [>>]", + cath <## ("use /fr " <> show rcvFileId <> " [/ | ] to receive it [>>]"), do dan <# "#team> sends file test.jpg (136.5 KiB / 139737 bytes) [>>]" - dan <## "use /fr 1 [/ | ] to receive it [>>]", + dan <## ("use /fr " <> show rcvFileId <> " [/ | ] to receive it [>>]"), do eve <# "#team> sends file test.jpg (136.5 KiB / 139737 bytes) [>>]" - eve <## "use /fr 1 [/ | ] to receive it [>>]" + eve <## ("use /fr " <> show rcvFileId <> " [/ | ] to receive it [>>]") ] -- owner cancels file alice ##> "/fc 1" alice <## "cancelled sending file 1 (test.jpg) to bob" - bob <## "team cancelled sending file 1 (test.jpg)" + bob <## ("team cancelled sending file " <> show rcvFileId <> " (test.jpg)") concurrentlyN_ - [ cath <## "team cancelled sending file 1 (test.jpg)", - dan <## "team cancelled sending file 1 (test.jpg)", - eve <## "team cancelled sending file 1 (test.jpg)" + [ cath <## ("team cancelled sending file " <> show rcvFileId <> " (test.jpg)"), + dan <## ("team cancelled sending file " <> show rcvFileId <> " (test.jpg)"), + eve <## ("team cancelled sending file " <> show rcvFileId <> " (test.jpg)") ] testChannelMessageQuote :: HasCallStack => TestParams -> IO () @@ -10797,6 +11376,9 @@ testChannelMessageQuote ps = bob <# "#team> hello from channel" [cath, dan, eve] *<# "#team> hello from channel [>>]" + -- promote cath to member (observer default) so it can post + promoteChannelMember "team" alice bob cath [dan, eve] + -- member quotes channel message cath `send` "> #team (hello from) replying to channel" cath <# "#team > hello from channel" @@ -10808,10 +11390,12 @@ testChannelMessageQuote ps = alice <# "#team cath> > hello from channel [>>]" alice <## " replying to channel [>>]", do + dan <### [EndsWith "updated to cath"] dan <## "#team: bob introduced cath (Catherine) in the channel" dan <# "#team cath> > hello from channel [>>]" dan <## " replying to channel [>>]", do + eve <### [EndsWith "updated to cath"] eve <## "#team: bob introduced cath (Catherine) in the channel" eve <# "#team cath> > hello from channel [>>]" eve <## " replying to channel [>>]" @@ -10925,43 +11509,47 @@ testChannelOwnerFileTransferAsMember ps = withNewTestChat ps "dan" danProfile $ \dan -> withNewTestChat ps "eve" eveProfile $ \eve -> withXFTPServer $ do createChannel1Relay "team" alice bob cath dan eve - +#if defined(dbPostgres) + let rcvFileId = 2 :: Int +#else + let rcvFileId = 1 :: Int +#endif -- owner sends file as member (not as channel) alice ##> "/_send #1(as_group=off) json [{\"filePath\": \"./tests/fixtures/test.jpg\", \"msgContent\": {\"type\": \"file\", \"text\": \"\"}}]" alice <# "/f #team ./tests/fixtures/test.jpg" alice <## "use /fc 1 to cancel sending" alice <## "completed uploading file 1 (test.jpg) for #team" bob <# "#team alice> sends file test.jpg (136.5 KiB / 139737 bytes)" - bob <## "use /fr 1 [/ | ] to receive it" + bob <## ("use /fr " <> show rcvFileId <> " [/ | ] to receive it") concurrentlyN_ [ do cath <# "#team alice> sends file test.jpg (136.5 KiB / 139737 bytes) [>>]" - cath <## "use /fr 1 [/ | ] to receive it [>>]", + cath <## ("use /fr " <> show rcvFileId <> " [/ | ] to receive it [>>]"), do dan <# "#team alice> sends file test.jpg (136.5 KiB / 139737 bytes) [>>]" - dan <## "use /fr 1 [/ | ] to receive it [>>]", + dan <## ("use /fr " <> show rcvFileId <> " [/ | ] to receive it [>>]"), do eve <# "#team alice> sends file test.jpg (136.5 KiB / 139737 bytes) [>>]" - eve <## "use /fr 1 [/ | ] to receive it [>>]" + eve <## ("use /fr " <> show rcvFileId <> " [/ | ] to receive it [>>]") ] -- all members receive the file src <- B.readFile "./tests/fixtures/test.jpg" concurrentlyN_ - [ receiveFile bob "bob" src, - receiveFile cath "cath" src, - receiveFile dan "dan" src, - receiveFile eve "eve" src + [ receiveFile bob "bob" rcvFileId src, + receiveFile cath "cath" rcvFileId src, + receiveFile dan "dan" rcvFileId src, + receiveFile eve "eve" rcvFileId src ] where - receiveFile cc name src = do + receiveFile cc name fileId src = do let path = "./tests/tmp/test_" <> name <> ".jpg" - cc ##> ("/fr 1 " <> path) + cc ##> ("/fr " <> show fileId <> " " <> path) cc - <### [ ConsoleString ("saving file 1 from alice to " <> path), - "started receiving file 1 (test.jpg) from alice" + <### [ ConsoleString ("saving file " <> show fileId <> " from alice to " <> path), + ConsoleString ("started receiving file " <> show fileId <> " (test.jpg) from alice") ] - cc <## "completed receiving file 1 (test.jpg) from alice" + cc <## ("completed receiving file " <> show fileId <> " (test.jpg) from alice") B.readFile path >>= (`shouldBe` src) testChannelOwnerFileCancelAsMember :: HasCallStack => TestParams -> IO () @@ -10972,34 +11560,38 @@ testChannelOwnerFileCancelAsMember ps = withNewTestChat ps "dan" danProfile $ \dan -> withNewTestChat ps "eve" eveProfile $ \eve -> withXFTPServer $ do createChannel1Relay "team" alice bob cath dan eve - +#if defined(dbPostgres) + let rcvFileId = 2 :: Int +#else + let rcvFileId = 1 :: Int +#endif -- owner sends file as member (not as channel) alice ##> "/_send #1(as_group=off) json [{\"filePath\": \"./tests/fixtures/test.jpg\", \"msgContent\": {\"type\": \"file\", \"text\": \"\"}}]" alice <# "/f #team ./tests/fixtures/test.jpg" alice <## "use /fc 1 to cancel sending" alice <## "completed uploading file 1 (test.jpg) for #team" bob <# "#team alice> sends file test.jpg (136.5 KiB / 139737 bytes)" - bob <## "use /fr 1 [/ | ] to receive it" + bob <## ("use /fr " <> show rcvFileId <> " [/ | ] to receive it") concurrentlyN_ [ do cath <# "#team alice> sends file test.jpg (136.5 KiB / 139737 bytes) [>>]" - cath <## "use /fr 1 [/ | ] to receive it [>>]", + cath <## ("use /fr " <> show rcvFileId <> " [/ | ] to receive it [>>]"), do dan <# "#team alice> sends file test.jpg (136.5 KiB / 139737 bytes) [>>]" - dan <## "use /fr 1 [/ | ] to receive it [>>]", + dan <## ("use /fr " <> show rcvFileId <> " [/ | ] to receive it [>>]"), do eve <# "#team alice> sends file test.jpg (136.5 KiB / 139737 bytes) [>>]" - eve <## "use /fr 1 [/ | ] to receive it [>>]" + eve <## ("use /fr " <> show rcvFileId <> " [/ | ] to receive it [>>]") ] -- owner cancels file alice ##> "/fc 1" alice <## "cancelled sending file 1 (test.jpg) to bob" - bob <## "alice cancelled sending file 1 (test.jpg)" + bob <## ("alice cancelled sending file " <> show rcvFileId <> " (test.jpg)") concurrentlyN_ - [ cath <## "alice cancelled sending file 1 (test.jpg)", - dan <## "alice cancelled sending file 1 (test.jpg)", - eve <## "alice cancelled sending file 1 (test.jpg)" + [ cath <## ("alice cancelled sending file " <> show rcvFileId <> " (test.jpg)"), + dan <## ("alice cancelled sending file " <> show rcvFileId <> " (test.jpg)"), + eve <## ("alice cancelled sending file " <> show rcvFileId <> " (test.jpg)") ] testChannelReactionAttribution :: HasCallStack => TestParams -> IO () @@ -11163,14 +11755,19 @@ testChannelMemberMessageUpdate ps = withNewTestChat ps "eve" eveProfile $ \eve -> do createChannel1Relay "team" alice bob cath dan eve + -- promote cath to member (observer default) so it can post + promoteChannelMember "team" alice bob cath [dan, eve] + -- member sends a message cath #> "#team hello" bob <# "#team cath> hello" concurrentlyN_ [ alice <# "#team cath> hello [>>]", - do dan <## "#team: bob introduced cath (Catherine) in the channel" + do dan <### [EndsWith "updated to cath"] + dan <## "#team: bob introduced cath (Catherine) in the channel" dan <# "#team cath> hello [>>]", - do eve <## "#team: bob introduced cath (Catherine) in the channel" + do eve <### [EndsWith "updated to cath"] + eve <## "#team: bob introduced cath (Catherine) in the channel" eve <# "#team cath> hello [>>]" ] @@ -11194,14 +11791,19 @@ testChannelMemberMessageDelete ps = withNewTestChat ps "eve" eveProfile $ \eve -> do createChannel1Relay "team" alice bob cath dan eve + -- promote cath to member (observer default) so it can post + promoteChannelMember "team" alice bob cath [dan, eve] + -- member sends a message cath #> "#team hello" bob <# "#team cath> hello" concurrentlyN_ [ alice <# "#team cath> hello [>>]", - do dan <## "#team: bob introduced cath (Catherine) in the channel" + do dan <### [EndsWith "updated to cath"] + dan <## "#team: bob introduced cath (Catherine) in the channel" dan <# "#team cath> hello [>>]", - do eve <## "#team: bob introduced cath (Catherine) in the channel" + do eve <### [EndsWith "updated to cath"] + eve <## "#team: bob introduced cath (Catherine) in the channel" eve <# "#team cath> hello [>>]" ] diff --git a/tests/ProtocolTests.hs b/tests/ProtocolTests.hs index d76c86495f..2592420d01 100644 --- a/tests/ProtocolTests.hs +++ b/tests/ProtocolTests.hs @@ -155,7 +155,7 @@ decodeChatMessageTest = describe "Chat message encoding/decoding" $ do "{\"v\":\"1\",\"msgId\":\"AQIDBA==\",\"event\":\"x.msg.new\",\"params\":{\"content\":{\"text\":\"hello\",\"type\":\"text\"}}}" ##==## ChatMessage chatInitialVRange (Just $ SharedMsgId "\1\2\3\4") (XMsgNew (mcSimple (MCText "hello"))) it "x.msg.new chat message with chat version range" $ - "{\"v\":\"1-18\",\"msgId\":\"AQIDBA==\",\"event\":\"x.msg.new\",\"params\":{\"content\":{\"text\":\"hello\",\"type\":\"text\"}}}" + "{\"v\":\"1-19\",\"msgId\":\"AQIDBA==\",\"event\":\"x.msg.new\",\"params\":{\"content\":{\"text\":\"hello\",\"type\":\"text\"}}}" ##==## ChatMessage supportedChatVRange (Just $ SharedMsgId "\1\2\3\4") (XMsgNew (mcSimple (MCText "hello"))) it "x.msg.new quote" $ "{\"v\":\"1\",\"msgId\":\"AQIDBA==\",\"event\":\"x.msg.new\",\"params\":{\"content\":{\"text\":\"hello to you too\",\"type\":\"text\"},\"quote\":{\"content\":{\"text\":\"hello there!\",\"type\":\"text\"},\"msgRef\":{\"msgId\":\"BQYHCA==\",\"sent\":true,\"sentAt\":\"1970-01-01T00:00:01.000000001Z\"}}}}" @@ -266,13 +266,13 @@ decodeChatMessageTest = describe "Chat message encoding/decoding" $ do "{\"v\":\"1\",\"event\":\"x.grp.mem.new\",\"params\":{\"memberInfo\":{\"memberRole\":\"admin\",\"memberId\":\"AQIDBA==\",\"profile\":{\"fullName\":\"Alice\",\"displayName\":\"alice\",\"image\":\"data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAgAAAAIAQMAAAD+wSzIAAAABlBMVEX///+/v7+jQ3Y5AAAADklEQVQI12P4AIX8EAgALgAD/aNpbtEAAAAASUVORK5CYII=\",\"preferences\":{\"reactions\":{\"allow\":\"yes\"},\"voice\":{\"allow\":\"yes\"}}}}}}" #==# XGrpMemNew MemberInfo {memberId = MemberId "\1\2\3\4", memberRole = GRAdmin, v = Nothing, profile = testProfile, memberKey = Nothing} Nothing it "x.grp.mem.new with member chat version range" $ - "{\"v\":\"1\",\"event\":\"x.grp.mem.new\",\"params\":{\"memberInfo\":{\"memberRole\":\"admin\",\"memberId\":\"AQIDBA==\",\"v\":\"1-18\",\"profile\":{\"fullName\":\"Alice\",\"displayName\":\"alice\",\"image\":\"data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAgAAAAIAQMAAAD+wSzIAAAABlBMVEX///+/v7+jQ3Y5AAAADklEQVQI12P4AIX8EAgALgAD/aNpbtEAAAAASUVORK5CYII=\",\"preferences\":{\"reactions\":{\"allow\":\"yes\"},\"voice\":{\"allow\":\"yes\"}}}}}}" + "{\"v\":\"1\",\"event\":\"x.grp.mem.new\",\"params\":{\"memberInfo\":{\"memberRole\":\"admin\",\"memberId\":\"AQIDBA==\",\"v\":\"1-19\",\"profile\":{\"fullName\":\"Alice\",\"displayName\":\"alice\",\"image\":\"data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAgAAAAIAQMAAAD+wSzIAAAABlBMVEX///+/v7+jQ3Y5AAAADklEQVQI12P4AIX8EAgALgAD/aNpbtEAAAAASUVORK5CYII=\",\"preferences\":{\"reactions\":{\"allow\":\"yes\"},\"voice\":{\"allow\":\"yes\"}}}}}}" #==# XGrpMemNew MemberInfo {memberId = MemberId "\1\2\3\4", memberRole = GRAdmin, v = Just $ ChatVersionRange supportedChatVRange, profile = testProfile, memberKey = Nothing} Nothing it "x.grp.mem.intro" $ "{\"v\":\"1\",\"event\":\"x.grp.mem.intro\",\"params\":{\"memberInfo\":{\"memberRole\":\"admin\",\"memberId\":\"AQIDBA==\",\"profile\":{\"fullName\":\"Alice\",\"displayName\":\"alice\",\"image\":\"data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAgAAAAIAQMAAAD+wSzIAAAABlBMVEX///+/v7+jQ3Y5AAAADklEQVQI12P4AIX8EAgALgAD/aNpbtEAAAAASUVORK5CYII=\",\"preferences\":{\"reactions\":{\"allow\":\"yes\"},\"voice\":{\"allow\":\"yes\"}}}}}}" #==# XGrpMemIntro MemberInfo {memberId = MemberId "\1\2\3\4", memberRole = GRAdmin, v = Nothing, profile = testProfile, memberKey = Nothing} Nothing it "x.grp.mem.intro with member chat version range" $ - "{\"v\":\"1\",\"event\":\"x.grp.mem.intro\",\"params\":{\"memberInfo\":{\"memberRole\":\"admin\",\"memberId\":\"AQIDBA==\",\"v\":\"1-18\",\"profile\":{\"fullName\":\"Alice\",\"displayName\":\"alice\",\"image\":\"data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAgAAAAIAQMAAAD+wSzIAAAABlBMVEX///+/v7+jQ3Y5AAAADklEQVQI12P4AIX8EAgALgAD/aNpbtEAAAAASUVORK5CYII=\",\"preferences\":{\"reactions\":{\"allow\":\"yes\"},\"voice\":{\"allow\":\"yes\"}}}}}}" + "{\"v\":\"1\",\"event\":\"x.grp.mem.intro\",\"params\":{\"memberInfo\":{\"memberRole\":\"admin\",\"memberId\":\"AQIDBA==\",\"v\":\"1-19\",\"profile\":{\"fullName\":\"Alice\",\"displayName\":\"alice\",\"image\":\"data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAgAAAAIAQMAAAD+wSzIAAAABlBMVEX///+/v7+jQ3Y5AAAADklEQVQI12P4AIX8EAgALgAD/aNpbtEAAAAASUVORK5CYII=\",\"preferences\":{\"reactions\":{\"allow\":\"yes\"},\"voice\":{\"allow\":\"yes\"}}}}}}" #==# XGrpMemIntro MemberInfo {memberId = MemberId "\1\2\3\4", memberRole = GRAdmin, v = Just $ ChatVersionRange supportedChatVRange, profile = testProfile, memberKey = Nothing} Nothing it "x.grp.mem.intro with member restrictions" $ "{\"v\":\"1\",\"event\":\"x.grp.mem.intro\",\"params\":{\"memberRestrictions\":{\"restriction\":\"blocked\"},\"memberInfo\":{\"memberRole\":\"admin\",\"memberId\":\"AQIDBA==\",\"profile\":{\"fullName\":\"Alice\",\"displayName\":\"alice\",\"image\":\"data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAgAAAAIAQMAAAD+wSzIAAAABlBMVEX///+/v7+jQ3Y5AAAADklEQVQI12P4AIX8EAgALgAD/aNpbtEAAAAASUVORK5CYII=\",\"preferences\":{\"reactions\":{\"allow\":\"yes\"},\"voice\":{\"allow\":\"yes\"}}}}}}" @@ -287,7 +287,7 @@ decodeChatMessageTest = describe "Chat message encoding/decoding" $ do "{\"v\":\"1\",\"event\":\"x.grp.mem.fwd\",\"params\":{\"memberIntro\":{\"directConnReq\":\"simplex:/invitation#/?v=1&smp=smp%3A%2F%2F1234-w%3D%3D%40smp.simplex.im%3A5223%2F3456-w%3D%3D%23%2F%3Fv%3D1-4%26dh%3DMCowBQYDK2VuAyEAjiswwI3O_NlS8Fk3HJUW870EY2bAwmttMBsvRB9eV3o%253D&e2e=v%3D2-3%26x3dh%3DMEIwBQYDK2VvAzkAmKuSYeQ_m0SixPDS8Wq8VBaTS1cW-Lp0n0h4Diu-kUpR-qXx4SDJ32YGEFoGFGSbGPry5Ychr6U%3D%2CMEIwBQYDK2VvAzkAmKuSYeQ_m0SixPDS8Wq8VBaTS1cW-Lp0n0h4Diu-kUpR-qXx4SDJ32YGEFoGFGSbGPry5Ychr6U%3D\",\"groupConnReq\":\"simplex:/invitation#/?v=1&smp=smp%3A%2F%2F1234-w%3D%3D%40smp.simplex.im%3A5223%2F3456-w%3D%3D%23%2F%3Fv%3D1-4%26dh%3DMCowBQYDK2VuAyEAjiswwI3O_NlS8Fk3HJUW870EY2bAwmttMBsvRB9eV3o%253D&e2e=v%3D2-3%26x3dh%3DMEIwBQYDK2VvAzkAmKuSYeQ_m0SixPDS8Wq8VBaTS1cW-Lp0n0h4Diu-kUpR-qXx4SDJ32YGEFoGFGSbGPry5Ychr6U%3D%2CMEIwBQYDK2VvAzkAmKuSYeQ_m0SixPDS8Wq8VBaTS1cW-Lp0n0h4Diu-kUpR-qXx4SDJ32YGEFoGFGSbGPry5Ychr6U%3D\"},\"memberInfo\":{\"memberRole\":\"admin\",\"memberId\":\"AQIDBA==\",\"profile\":{\"fullName\":\"Alice\",\"displayName\":\"alice\",\"image\":\"data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAgAAAAIAQMAAAD+wSzIAAAABlBMVEX///+/v7+jQ3Y5AAAADklEQVQI12P4AIX8EAgALgAD/aNpbtEAAAAASUVORK5CYII=\",\"preferences\":{\"reactions\":{\"allow\":\"yes\"},\"voice\":{\"allow\":\"yes\"}}}}}}" #==# XGrpMemFwd MemberInfo {memberId = MemberId "\1\2\3\4", memberRole = GRAdmin, v = Nothing, profile = testProfile, memberKey = Nothing} IntroInvitation {groupConnReq = testConnReq, directConnReq = Just testConnReq} it "x.grp.mem.fwd with member chat version range and w/t directConnReq" $ - "{\"v\":\"1\",\"event\":\"x.grp.mem.fwd\",\"params\":{\"memberIntro\":{\"groupConnReq\":\"simplex:/invitation#/?v=1&smp=smp%3A%2F%2F1234-w%3D%3D%40smp.simplex.im%3A5223%2F3456-w%3D%3D%23%2F%3Fv%3D1-4%26dh%3DMCowBQYDK2VuAyEAjiswwI3O_NlS8Fk3HJUW870EY2bAwmttMBsvRB9eV3o%253D&e2e=v%3D2-3%26x3dh%3DMEIwBQYDK2VvAzkAmKuSYeQ_m0SixPDS8Wq8VBaTS1cW-Lp0n0h4Diu-kUpR-qXx4SDJ32YGEFoGFGSbGPry5Ychr6U%3D%2CMEIwBQYDK2VvAzkAmKuSYeQ_m0SixPDS8Wq8VBaTS1cW-Lp0n0h4Diu-kUpR-qXx4SDJ32YGEFoGFGSbGPry5Ychr6U%3D\"},\"memberInfo\":{\"memberRole\":\"admin\",\"memberId\":\"AQIDBA==\",\"v\":\"1-18\",\"profile\":{\"fullName\":\"Alice\",\"displayName\":\"alice\",\"image\":\"data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAgAAAAIAQMAAAD+wSzIAAAABlBMVEX///+/v7+jQ3Y5AAAADklEQVQI12P4AIX8EAgALgAD/aNpbtEAAAAASUVORK5CYII=\",\"preferences\":{\"reactions\":{\"allow\":\"yes\"},\"voice\":{\"allow\":\"yes\"}}}}}}" + "{\"v\":\"1\",\"event\":\"x.grp.mem.fwd\",\"params\":{\"memberIntro\":{\"groupConnReq\":\"simplex:/invitation#/?v=1&smp=smp%3A%2F%2F1234-w%3D%3D%40smp.simplex.im%3A5223%2F3456-w%3D%3D%23%2F%3Fv%3D1-4%26dh%3DMCowBQYDK2VuAyEAjiswwI3O_NlS8Fk3HJUW870EY2bAwmttMBsvRB9eV3o%253D&e2e=v%3D2-3%26x3dh%3DMEIwBQYDK2VvAzkAmKuSYeQ_m0SixPDS8Wq8VBaTS1cW-Lp0n0h4Diu-kUpR-qXx4SDJ32YGEFoGFGSbGPry5Ychr6U%3D%2CMEIwBQYDK2VvAzkAmKuSYeQ_m0SixPDS8Wq8VBaTS1cW-Lp0n0h4Diu-kUpR-qXx4SDJ32YGEFoGFGSbGPry5Ychr6U%3D\"},\"memberInfo\":{\"memberRole\":\"admin\",\"memberId\":\"AQIDBA==\",\"v\":\"1-19\",\"profile\":{\"fullName\":\"Alice\",\"displayName\":\"alice\",\"image\":\"data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAgAAAAIAQMAAAD+wSzIAAAABlBMVEX///+/v7+jQ3Y5AAAADklEQVQI12P4AIX8EAgALgAD/aNpbtEAAAAASUVORK5CYII=\",\"preferences\":{\"reactions\":{\"allow\":\"yes\"},\"voice\":{\"allow\":\"yes\"}}}}}}" #==# XGrpMemFwd MemberInfo {memberId = MemberId "\1\2\3\4", memberRole = GRAdmin, v = Just $ ChatVersionRange supportedChatVRange, profile = testProfile, memberKey = Nothing} IntroInvitation {groupConnReq = testConnReq, directConnReq = Nothing} it "x.grp.mem.info" $ "{\"v\":\"1\",\"event\":\"x.grp.mem.info\",\"params\":{\"memberId\":\"AQIDBA==\",\"profile\":{\"fullName\":\"Alice\",\"displayName\":\"alice\",\"image\":\"data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAgAAAAIAQMAAAD+wSzIAAAABlBMVEX///+/v7+jQ3Y5AAAADklEQVQI12P4AIX8EAgALgAD/aNpbtEAAAAASUVORK5CYII=\",\"preferences\":{\"reactions\":{\"allow\":\"yes\"},\"voice\":{\"allow\":\"yes\"}}}}}" @@ -300,7 +300,7 @@ decodeChatMessageTest = describe "Chat message encoding/decoding" $ do #==# XGrpMemConAll (MemberId "\1\2\3\4") it "x.grp.mem.del" $ "{\"v\":\"1\",\"event\":\"x.grp.mem.del\",\"params\":{\"memberId\":\"AQIDBA==\"}}" - #==# XGrpMemDel (MemberId "\1\2\3\4") False + #==# XGrpMemDel (MemberId "\1\2\3\4") False Nothing it "x.grp.leave" $ "{\"v\":\"1\",\"event\":\"x.grp.leave\",\"params\":{}}" ==# XGrpLeave From 117ed75d4012e0695ca7acf060c24627b5dcd02a Mon Sep 17 00:00:00 2001 From: spaced4ndy <8711996+spaced4ndy@users.noreply.github.com> Date: Mon, 22 Jun 2026 12:53:05 +0000 Subject: [PATCH 54/81] ui: allow to change member role in channel (#7096) --- apps/ios/Shared/Views/Chat/ChatView.swift | 2 +- .../Chat/Group/AddGroupMembersView.swift | 2 +- .../Views/Chat/Group/ChannelMembersView.swift | 2 +- .../Views/Chat/Group/GroupChatInfoView.swift | 2 +- .../Views/Chat/Group/GroupLinkView.swift | 2 +- .../Chat/Group/GroupMemberInfoView.swift | 18 ++++++----- .../Views/Chat/Group/MemberSupportView.swift | 2 +- apps/ios/SimpleXChat/ChatTypes.swift | 28 ++++++++++++----- .../chat/simplex/common/model/ChatModel.kt | 23 +++++++++----- .../simplex/common/views/chat/ChatView.kt | 2 +- .../views/chat/group/AddGroupMembersView.kt | 2 +- .../views/chat/group/ChannelMembersView.kt | 10 +++--- .../views/chat/group/GroupChatInfoView.kt | 8 ++--- .../common/views/chat/group/GroupLinkView.kt | 2 +- .../views/chat/group/GroupMemberInfoView.kt | 31 +++++++++---------- .../views/chat/group/MemberSupportView.kt | 6 ++-- .../commonMain/resources/MR/base/strings.xml | 5 ++- 17 files changed, 85 insertions(+), 62 deletions(-) diff --git a/apps/ios/Shared/Views/Chat/ChatView.swift b/apps/ios/Shared/Views/Chat/ChatView.swift index 49643745b0..ded0019692 100644 --- a/apps/ios/Shared/Views/Chat/ChatView.swift +++ b/apps/ios/Shared/Views/Chat/ChatView.swift @@ -1999,7 +1999,7 @@ struct ChatView: View { let (name, role) = if ci.meta.showGroupAsSender { (groupInfo.chatViewName, NSLocalizedString("group", comment: "shown on group welcome message")) } else { - (member.chatViewName, member.memberRole.text) + (member.chatViewName, member.memberRole.text(isChannel: groupInfo.isChannel)) } Group { if #available(iOS 16.0, *) { diff --git a/apps/ios/Shared/Views/Chat/Group/AddGroupMembersView.swift b/apps/ios/Shared/Views/Chat/Group/AddGroupMembersView.swift index b59fd51fe8..336b4adfd1 100644 --- a/apps/ios/Shared/Views/Chat/Group/AddGroupMembersView.swift +++ b/apps/ios/Shared/Views/Chat/Group/AddGroupMembersView.swift @@ -183,7 +183,7 @@ struct AddGroupMembersViewCommon: View { private func rolePicker() -> some View { Picker("New member role", selection: $selectedRole) { ForEach(GroupMemberRole.supportedRoles.filter({ $0 <= groupInfo.membership.memberRole })) { role in - Text(role.text) + Text(role.text(isChannel: groupInfo.isChannel)) } } .frame(height: 36) diff --git a/apps/ios/Shared/Views/Chat/Group/ChannelMembersView.swift b/apps/ios/Shared/Views/Chat/Group/ChannelMembersView.swift index 50144e2bc5..44fc302aff 100644 --- a/apps/ios/Shared/Views/Chat/Group/ChannelMembersView.swift +++ b/apps/ios/Shared/Views/Chat/Group/ChannelMembersView.swift @@ -66,7 +66,7 @@ struct ChannelMembersView: View { } Spacer() if showRole { - Text(member.memberRole.text) + Text(member.memberRole.text(isChannel: groupInfo.isChannel)) .foregroundColor(theme.colors.secondary) } } diff --git a/apps/ios/Shared/Views/Chat/Group/GroupChatInfoView.swift b/apps/ios/Shared/Views/Chat/Group/GroupChatInfoView.swift index b62939fd36..5563d79e61 100644 --- a/apps/ios/Shared/Views/Chat/Group/GroupChatInfoView.swift +++ b/apps/ios/Shared/Views/Chat/Group/GroupChatInfoView.swift @@ -581,7 +581,7 @@ struct GroupChatInfoView: View { } else { let role = member.memberRole if [.owner, .admin, .moderator, .observer].contains(role) { - Text(member.memberRole.text) + Text(member.memberRole.text(isChannel: groupInfo.isChannel)) .foregroundColor(theme.colors.secondary) } } diff --git a/apps/ios/Shared/Views/Chat/Group/GroupLinkView.swift b/apps/ios/Shared/Views/Chat/Group/GroupLinkView.swift index 22253c4808..43d23878f5 100644 --- a/apps/ios/Shared/Views/Chat/Group/GroupLinkView.swift +++ b/apps/ios/Shared/Views/Chat/Group/GroupLinkView.swift @@ -84,7 +84,7 @@ struct GroupLinkView: View { if !isChannel { Picker("Initial role", selection: $groupLinkMemberRole) { ForEach([GroupMemberRole.member, GroupMemberRole.observer]) { role in - Text(role.text) + Text(role.text(isChannel: isChannel)) } } .frame(height: 36) diff --git a/apps/ios/Shared/Views/Chat/Group/GroupMemberInfoView.swift b/apps/ios/Shared/Views/Chat/Group/GroupMemberInfoView.swift index 2f37e3d822..c87f97089c 100644 --- a/apps/ios/Shared/Views/Chat/Group/GroupMemberInfoView.swift +++ b/apps/ios/Shared/Views/Chat/Group/GroupMemberInfoView.swift @@ -178,15 +178,15 @@ struct GroupMemberInfoView: View { let label: LocalizedStringKey = groupInfo.useRelays ? "Channel" : groupInfo.businessChat == nil ? "Group" : "Chat" infoRow(label, groupInfo.displayName) - if !groupInfo.useRelays, let roles = member.canChangeRoleTo(groupInfo: groupInfo) { + if let roles = member.canChangeRoleTo(groupInfo: groupInfo) { Picker("Change role", selection: $newRole) { ForEach(roles) { role in - Text(role.text) + Text(role.text(isChannel: groupInfo.isChannel)) } } .frame(height: 36) } else { - infoRow("Role", member.memberRole.text) + infoRow("Role", member.memberRole.text(isChannel: groupInfo.isChannel)) } if let link = member.relayLink { infoRow("Relay link", String.localizedStringWithFormat(NSLocalizedString("via %@", comment: "relay hostname"), hostFromRelayLink(link))) @@ -727,15 +727,17 @@ struct GroupMemberInfoView: View { private func changeMemberRoleAlert(_ mem: GroupMember) -> Alert { Alert( - title: Text("Change member role?"), + title: Text("Change role?"), message: ( mem.memberCurrent ? ( - groupInfo.businessChat == nil - ? Text("Member role will be changed to \"\(newRole.text)\". All group members will be notified.") - : Text("Member role will be changed to \"\(newRole.text)\". All chat members will be notified.") + groupInfo.isChannel + ? Text("Role will be changed to \"\(newRole.text(isChannel: groupInfo.isChannel))\". All subscribers will be notified.") + : groupInfo.businessChat == nil + ? Text("Role will be changed to \"\(newRole.text(isChannel: groupInfo.isChannel))\". All group members will be notified.") + : Text("Role will be changed to \"\(newRole.text(isChannel: groupInfo.isChannel))\". All chat members will be notified.") ) - : Text("Member role will be changed to \"\(newRole.text)\". The member will receive a new invitation.") + : Text("Role will be changed to \"\(newRole.text(isChannel: groupInfo.isChannel))\". The member will receive a new invitation.") ), primaryButton: .default(Text("Change")) { Task { diff --git a/apps/ios/Shared/Views/Chat/Group/MemberSupportView.swift b/apps/ios/Shared/Views/Chat/Group/MemberSupportView.swift index 0263a39a90..da9d56a699 100644 --- a/apps/ios/Shared/Views/Chat/Group/MemberSupportView.swift +++ b/apps/ios/Shared/Views/Chat/Group/MemberSupportView.swift @@ -205,7 +205,7 @@ struct MemberSupportView: View { } else if member.memberPending { return member.memberStatus.text } else { - return LocalizedStringKey(member.memberRole.text) + return LocalizedStringKey(member.memberRole.text(isChannel: groupInfo.isChannel)) } } diff --git a/apps/ios/SimpleXChat/ChatTypes.swift b/apps/ios/SimpleXChat/ChatTypes.swift index d7478e5c3b..8b186f168d 100644 --- a/apps/ios/SimpleXChat/ChatTypes.swift +++ b/apps/ios/SimpleXChat/ChatTypes.swift @@ -2981,8 +2981,16 @@ public struct GroupMember: Identifiable, Decodable, Hashable { public func canChangeRoleTo(groupInfo: GroupInfo) -> [GroupMemberRole]? { if memberRole == .relay || !canBeRemoved(groupInfo: groupInfo) || memberStatus == .memRemoved || memberStatus == .memLeft || memberPending { return nil } + if groupInfo.useRelays && !groupInfo.isOwner { return nil } let userRole = groupInfo.membership.memberRole - return GroupMemberRole.supportedRoles.filter { $0 <= userRole } + if groupInfo.useRelays { + // TODO [relays]: for now owners can only set observer/member in channels. + // Restore the full Owner-excluded picker when moderator/admin promotion is supported: + // return GroupMemberRole.supportedRoles.filter { $0 <= userRole && $0 != .owner } + return [.observer, .member] + } else { + return GroupMemberRole.supportedRoles.filter { $0 <= userRole } + } } public func canBlockForAll(groupInfo: GroupInfo) -> Bool { @@ -3070,12 +3078,16 @@ public enum GroupMemberRole: String, Identifiable, CaseIterable, Comparable, Cod public static var supportedRoles: [GroupMemberRole] = [.observer, .member, .moderator, .admin, .owner] - public var text: String { + public func text(isChannel: Bool) -> String { switch self { case .relay: return NSLocalizedString("relay", comment: "member role") - case .observer: return NSLocalizedString("observer", comment: "member role") + case .observer: return isChannel + ? NSLocalizedString("subscriber", comment: "member role") + : NSLocalizedString("observer", comment: "member role") case .author: return NSLocalizedString("author", comment: "member role") - case .member: return NSLocalizedString("member", comment: "member role") + case .member: return isChannel + ? NSLocalizedString("contributor", comment: "member role") + : NSLocalizedString("member", comment: "member role") case .moderator: return NSLocalizedString("moderator", comment: "member role") case .admin: return NSLocalizedString("admin", comment: "member role") case .owner: return NSLocalizedString("owner", comment: "member role") @@ -5596,7 +5608,7 @@ public enum RcvGroupEvent: Decodable, Hashable { case .userAccepted: return NSLocalizedString("accepted you", comment: "rcv group event chat item") case .memberLeft: return NSLocalizedString("left", comment: "rcv group event chat item") case let .memberRole(_, profile, role): - return String.localizedStringWithFormat(NSLocalizedString("changed role of %@ to %@", comment: "rcv group event chat item"), profile.profileViewName, role.text) + return String.localizedStringWithFormat(NSLocalizedString("changed role of %@ to %@", comment: "rcv group event chat item"), profile.profileViewName, role.text(isChannel: isChannel)) case let .memberBlocked(_, profile, blocked): if blocked { return String.localizedStringWithFormat(NSLocalizedString("blocked %@", comment: "rcv group event chat item"), profile.profileViewName) @@ -5604,7 +5616,7 @@ public enum RcvGroupEvent: Decodable, Hashable { return String.localizedStringWithFormat(NSLocalizedString("unblocked %@", comment: "rcv group event chat item"), profile.profileViewName) } case let .userRole(role): - return String.localizedStringWithFormat(NSLocalizedString("changed your role to %@", comment: "rcv group event chat item"), role.text) + return String.localizedStringWithFormat(NSLocalizedString("changed your role to %@", comment: "rcv group event chat item"), role.text(isChannel: isChannel)) case let .memberDeleted(_, profile): return String.localizedStringWithFormat(NSLocalizedString("removed %@", comment: "rcv group event chat item"), profile.profileViewName) case .userDeleted: return NSLocalizedString("removed you", comment: "rcv group event chat item") @@ -5650,9 +5662,9 @@ public enum SndGroupEvent: Decodable, Hashable { func text(isChannel: Bool) -> String { switch self { case let .memberRole(_, profile, role): - return String.localizedStringWithFormat(NSLocalizedString("you changed role of %@ to %@", comment: "snd group event chat item"), profile.profileViewName, role.text) + return String.localizedStringWithFormat(NSLocalizedString("you changed role of %@ to %@", comment: "snd group event chat item"), profile.profileViewName, role.text(isChannel: isChannel)) case let .userRole(role): - return String.localizedStringWithFormat(NSLocalizedString("you changed role for yourself to %@", comment: "snd group event chat item"), role.text) + return String.localizedStringWithFormat(NSLocalizedString("you changed role for yourself to %@", comment: "snd group event chat item"), role.text(isChannel: isChannel)) case let .memberBlocked(_, profile, blocked): if blocked { return String.localizedStringWithFormat(NSLocalizedString("you blocked %@", comment: "snd group event chat item"), profile.profileViewName) diff --git a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/model/ChatModel.kt b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/model/ChatModel.kt index ecfb58fdb0..c5dd81fec7 100644 --- a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/model/ChatModel.kt +++ b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/model/ChatModel.kt @@ -2617,8 +2617,15 @@ data class GroupMember ( fun canChangeRoleTo(groupInfo: GroupInfo): List? = if (memberRole == GroupMemberRole.Relay || !canBeRemoved(groupInfo) || memberStatus == GroupMemberStatus.MemRemoved || memberStatus == GroupMemberStatus.MemLeft || memberPending) null + else if (groupInfo.useRelays && !groupInfo.isOwner) null else groupInfo.membership.memberRole.let { userRole -> - GroupMemberRole.selectableRoles.filter { it <= userRole } + if (groupInfo.useRelays) + // TODO [relays]: for now owners can only set observer/member in channels. + // Restore the full Owner-excluded picker when moderator/admin promotion is supported: + // GroupMemberRole.selectableRoles.filter { it <= userRole && it != GroupMemberRole.Owner } + listOf(GroupMemberRole.Observer, GroupMemberRole.Member) + else + GroupMemberRole.selectableRoles.filter { it <= userRole } } fun canBlockForAll(groupInfo: GroupInfo): Boolean { @@ -2696,11 +2703,11 @@ enum class GroupMemberRole(val memberRole: String) { val selectableRoles: List = listOf(Observer, Member, Moderator, Admin, Owner) } - val text: String get() = when (this) { + fun text(isChannel: Boolean): String = when (this) { Relay -> generalGetString(MR.strings.group_member_role_relay) - Observer -> generalGetString(MR.strings.group_member_role_observer) + Observer -> generalGetString(if (isChannel) MR.strings.group_member_role_observer_channel else MR.strings.group_member_role_observer) Author -> generalGetString(MR.strings.group_member_role_author) - Member -> generalGetString(MR.strings.group_member_role_member) + Member -> generalGetString(if (isChannel) MR.strings.group_member_role_member_channel else MR.strings.group_member_role_member) Moderator -> generalGetString(MR.strings.group_member_role_moderator) Admin -> generalGetString(MR.strings.group_member_role_admin) Owner -> generalGetString(MR.strings.group_member_role_owner) @@ -5094,13 +5101,13 @@ sealed class RcvGroupEvent() { is MemberAccepted -> String.format(generalGetString(MR.strings.rcv_group_event_member_accepted), profile.profileViewName) is UserAccepted -> generalGetString(MR.strings.rcv_group_event_user_accepted) is MemberLeft -> generalGetString(MR.strings.rcv_group_event_member_left) - is MemberRole -> String.format(generalGetString(MR.strings.rcv_group_event_changed_member_role), profile.profileViewName, role.text) + is MemberRole -> String.format(generalGetString(MR.strings.rcv_group_event_changed_member_role), profile.profileViewName, role.text(isChannel = isChannel)) is MemberBlocked -> if (blocked) { String.format(generalGetString(MR.strings.rcv_group_event_member_blocked), profile.profileViewName) } else { String.format(generalGetString(MR.strings.rcv_group_event_member_unblocked), profile.profileViewName) } - is UserRole -> String.format(generalGetString(MR.strings.rcv_group_event_changed_your_role), role.text) + is UserRole -> String.format(generalGetString(MR.strings.rcv_group_event_changed_your_role), role.text(isChannel = isChannel)) is MemberDeleted -> String.format(generalGetString(MR.strings.rcv_group_event_member_deleted), profile.profileViewName) is UserDeleted -> generalGetString(MR.strings.rcv_group_event_user_deleted) is GroupDeleted -> generalGetString(if (isChannel) MR.strings.rcv_channel_event_channel_deleted else MR.strings.rcv_group_event_group_deleted) @@ -5139,8 +5146,8 @@ sealed class SndGroupEvent() { val text: String get() = text(isChannel = false) fun text(isChannel: Boolean): String = when (this) { - is MemberRole -> String.format(generalGetString(MR.strings.snd_group_event_changed_member_role), profile.profileViewName, role.text) - is UserRole -> String.format(generalGetString(MR.strings.snd_group_event_changed_role_for_yourself), role.text) + is MemberRole -> String.format(generalGetString(MR.strings.snd_group_event_changed_member_role), profile.profileViewName, role.text(isChannel = isChannel)) + is UserRole -> String.format(generalGetString(MR.strings.snd_group_event_changed_role_for_yourself), role.text(isChannel = isChannel)) is MemberBlocked -> if (blocked) { String.format(generalGetString(MR.strings.snd_group_event_member_blocked), profile.profileViewName) } else { diff --git a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/ChatView.kt b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/ChatView.kt index a020f8c1fe..6f7c746691 100644 --- a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/ChatView.kt +++ b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/ChatView.kt @@ -2035,7 +2035,7 @@ fun BoxScope.ChatItemsList( val tailRendered = style is ShapeStyle.Bubble && style.tailVisible Text( - member.memberRole.text, + member.memberRole.text(isChannel = chatInfo.isChannel), Modifier.padding(start = DEFAULT_PADDING_HALF * 1.5f, end = DEFAULT_PADDING_HALF + if (tailRendered) msgTailWidthDp else 0.dp), fontSize = 13.5.sp, fontWeight = FontWeight.Medium, diff --git a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/group/AddGroupMembersView.kt b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/group/AddGroupMembersView.kt index 4717321f63..7223f69f98 100644 --- a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/group/AddGroupMembersView.kt +++ b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/group/AddGroupMembersView.kt @@ -228,7 +228,7 @@ private fun RoleSelectionRow(groupInfo: GroupInfo, selectedRole: MutableState Divider() @@ -55,7 +55,7 @@ fun ChannelMembersView( minHeight = 54.dp, padding = PaddingValues(horizontal = DEFAULT_PADDING) ) { - ChannelMemberRow(member, user = false, showRole = member.memberRole >= GroupMemberRole.Owner) + ChannelMemberRow(member, user = false, showRole = member.memberRole >= GroupMemberRole.Owner, isChannel = groupInfo.isChannel) } } } @@ -71,7 +71,7 @@ fun ChannelMembersView( minHeight = 54.dp, padding = PaddingValues(horizontal = DEFAULT_PADDING) ) { - ChannelMemberRow(member, user = false, showRole = false) + ChannelMemberRow(member, user = false, showRole = false, isChannel = groupInfo.isChannel) } } } @@ -81,7 +81,7 @@ fun ChannelMembersView( } @Composable -private fun ChannelMemberRow(member: GroupMember, user: Boolean, showRole: Boolean) { +private fun ChannelMemberRow(member: GroupMember, user: Boolean, showRole: Boolean, isChannel: Boolean) { Row( Modifier.fillMaxWidth(), verticalAlignment = Alignment.CenterVertically, @@ -112,7 +112,7 @@ private fun ChannelMemberRow(member: GroupMember, user: Boolean, showRole: Boole } if (showRole) { Text( - member.memberRole.text, + member.memberRole.text(isChannel = isChannel), color = MaterialTheme.colors.secondary ) } diff --git a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/group/GroupChatInfoView.kt b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/group/GroupChatInfoView.kt index b2c25bf06c..2b1c7bcd09 100644 --- a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/group/GroupChatInfoView.kt +++ b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/group/GroupChatInfoView.kt @@ -731,7 +731,7 @@ fun ModalData.GroupChatInfoLayout( } } SectionItemView(minHeight = 54.dp, padding = PaddingValues(horizontal = DEFAULT_PADDING)) { - MemberRow(groupInfo.membership, user = true) + MemberRow(groupInfo.membership, user = true, isChannel = groupInfo.isChannel) } } } @@ -765,7 +765,7 @@ fun ModalData.GroupChatInfoLayout( val selectionOffset by animateDpAsState(if (selectedItems.value != null) 20.dp + 22.dp * fontSizeMultiplier else 0.dp) DropDownMenuForMember(chat.remoteHostId, member, groupInfo, selectedItems, showMenu) Box(Modifier.padding(start = selectionOffset)) { - MemberRow(member) + MemberRow(member, isChannel = groupInfo.isChannel) } } } @@ -1057,7 +1057,7 @@ private fun AddMembersButton(titleId: StringResource, tint: Color = MaterialThem } @Composable -fun MemberRow(member: GroupMember, user: Boolean = false, infoPage: Boolean = true, showlocalAliasAndFullName: Boolean = false, selected: Boolean = false) { +fun MemberRow(member: GroupMember, user: Boolean = false, infoPage: Boolean = true, showlocalAliasAndFullName: Boolean = false, selected: Boolean = false, isChannel: Boolean = false) { @Composable fun MemberInfo() { if (member.blocked) { @@ -1065,7 +1065,7 @@ fun MemberRow(member: GroupMember, user: Boolean = false, infoPage: Boolean = tr } else { val role = member.memberRole if (role in listOf(GroupMemberRole.Owner, GroupMemberRole.Admin, GroupMemberRole.Moderator, GroupMemberRole.Observer)) { - Text(role.text, color = MaterialTheme.colors.secondary) + Text(role.text(isChannel = isChannel), color = MaterialTheme.colors.secondary) } } } diff --git a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/group/GroupLinkView.kt b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/group/GroupLinkView.kt index b68f0efaf5..f6f19e9d72 100644 --- a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/group/GroupLinkView.kt +++ b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/group/GroupLinkView.kt @@ -308,7 +308,7 @@ private fun RoleSelectionRow(groupInfo: GroupInfo, selectedRole: MutableState Unit) { private fun RoleSelectionRow( roles: List, selectedRole: MutableState, - onSelected: (GroupMemberRole) -> Unit + onSelected: (GroupMemberRole) -> Unit, + isChannel: Boolean ) { Row( Modifier.fillMaxWidth(), verticalAlignment = Alignment.CenterVertically, horizontalArrangement = Arrangement.SpaceBetween ) { - val values = remember { roles.map { it to it.text } } + val values = remember { roles.map { it to it.text(isChannel = isChannel) } } ExposedDropDownSettingRow( generalGetString(MR.strings.change_role), values, @@ -956,12 +953,14 @@ fun updateMemberRoleDialog( AlertManager.shared.showAlertDialog( title = generalGetString(MR.strings.change_member_role_question), text = if (memberCurrent) { - if (groupInfo.businessChat == null) - String.format(generalGetString(MR.strings.member_role_will_be_changed_with_notification), newRole.text) + if (groupInfo.isChannel) + String.format(generalGetString(MR.strings.member_role_will_be_changed_with_notification_channel), newRole.text(isChannel = groupInfo.isChannel)) + else if (groupInfo.businessChat == null) + String.format(generalGetString(MR.strings.member_role_will_be_changed_with_notification), newRole.text(isChannel = groupInfo.isChannel)) else - String.format(generalGetString(MR.strings.member_role_will_be_changed_with_notification_chat), newRole.text) + String.format(generalGetString(MR.strings.member_role_will_be_changed_with_notification_chat), newRole.text(isChannel = groupInfo.isChannel)) } else - String.format(generalGetString(MR.strings.member_role_will_be_changed_with_invitation), newRole.text), + String.format(generalGetString(MR.strings.member_role_will_be_changed_with_invitation), newRole.text(isChannel = groupInfo.isChannel)), confirmText = generalGetString(MR.strings.change_verb), onDismiss = onDismiss, onConfirm = onConfirm, @@ -977,9 +976,9 @@ fun updateMembersRoleDialog( AlertManager.shared.showAlertDialog( title = generalGetString(MR.strings.change_member_role_question), text = if (groupInfo.businessChat == null) - String.format(generalGetString(MR.strings.member_role_will_be_changed_with_notification), newRole.text) + String.format(generalGetString(MR.strings.member_role_will_be_changed_with_notification), newRole.text(isChannel = groupInfo.isChannel)) else - String.format(generalGetString(MR.strings.member_role_will_be_changed_with_notification_chat), newRole.text), + String.format(generalGetString(MR.strings.member_role_will_be_changed_with_notification_chat), newRole.text(isChannel = groupInfo.isChannel)), confirmText = generalGetString(MR.strings.change_verb), onConfirm = onConfirm, ) diff --git a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/group/MemberSupportView.kt b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/group/MemberSupportView.kt index 7ca277df94..b685d20fb9 100644 --- a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/group/MemberSupportView.kt +++ b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/group/MemberSupportView.kt @@ -150,7 +150,7 @@ private fun ModalData.MemberSupportViewLayout( ) { Box(contentAlignment = Alignment.CenterStart) { DropDownMenuForSupportChat(chat.remoteHostId, member, groupInfo, showMenu) - SupportChatRow(member) + SupportChatRow(member, isChannel = groupInfo.isChannel) } } } @@ -163,7 +163,7 @@ private fun ModalData.MemberSupportViewLayout( } @Composable -fun SupportChatRow(member: GroupMember) { +fun SupportChatRow(member: GroupMember, isChannel: Boolean) { fun memberStatus(): String { return if (member.activeConn?.connStatus is ConnStatus.Failed) { generalGetString(MR.strings.member_info_member_failed) @@ -174,7 +174,7 @@ fun SupportChatRow(member: GroupMember) { } else if (member.memberPending) { member.memberStatus.text } else { - member.memberRole.text + member.memberRole.text(isChannel = isChannel) } } diff --git a/apps/multiplatform/common/src/commonMain/resources/MR/base/strings.xml b/apps/multiplatform/common/src/commonMain/resources/MR/base/strings.xml index 4ea07d4608..71c0bf98a4 100644 --- a/apps/multiplatform/common/src/commonMain/resources/MR/base/strings.xml +++ b/apps/multiplatform/common/src/commonMain/resources/MR/base/strings.xml @@ -1850,8 +1850,10 @@ observer + subscriber author member + contributor moderator admin owner @@ -2043,9 +2045,10 @@ Change role Change Switch - Change group role? + Change role? The role will be changed to "%s". Everyone in the group will be notified. The role will be changed to "%s". Everyone in the chat will be notified. + The role will be changed to "%s". Everyone in the channel will be notified. The role will be changed to "%s". The member will receive a new invitation. Connect directly? Сonnection request will be sent to this group member. From 59fce95d3cd08897b4ef742447b785cf2e56c7ce Mon Sep 17 00:00:00 2001 From: SimpleX Chat Date: Mon, 22 Jun 2026 11:15:55 +0000 Subject: [PATCH 55/81] 6.5.6: android 358, desktop 148, ios 337 --- apps/ios/SimpleX.xcodeproj/project.pbxproj | 56 +++++++++---------- apps/multiplatform/gradle.properties | 8 +-- packages/simplex-chat-nodejs/package.json | 2 +- .../simplex-chat-nodejs/src/download-libs.js | 2 +- .../src/simplex_chat/_version.py | 4 +- .../flatpak/chat.simplex.simplex.metainfo.xml | 22 ++++++++ 6 files changed, 58 insertions(+), 36 deletions(-) diff --git a/apps/ios/SimpleX.xcodeproj/project.pbxproj b/apps/ios/SimpleX.xcodeproj/project.pbxproj index 0739e9522d..0e585fbe15 100644 --- a/apps/ios/SimpleX.xcodeproj/project.pbxproj +++ b/apps/ios/SimpleX.xcodeproj/project.pbxproj @@ -184,8 +184,8 @@ 64C3B0212A0D359700E19930 /* CustomTimePicker.swift in Sources */ = {isa = PBXBuildFile; fileRef = 64C3B0202A0D359700E19930 /* CustomTimePicker.swift */; }; 64C8299D2D54AEEE006B9E89 /* libgmp.a in Frameworks */ = {isa = PBXBuildFile; fileRef = 64C829982D54AEED006B9E89 /* libgmp.a */; }; 64C8299E2D54AEEE006B9E89 /* libffi.a in Frameworks */ = {isa = PBXBuildFile; fileRef = 64C829992D54AEEE006B9E89 /* libffi.a */; }; - 64C8299F2D54AEEE006B9E89 /* libHSsimplex-chat-6.5.5.0-57WEoB2fiWaFgCB1XksYmP-ghc9.6.3.a in Frameworks */ = {isa = PBXBuildFile; fileRef = 64C8299A2D54AEEE006B9E89 /* libHSsimplex-chat-6.5.5.0-57WEoB2fiWaFgCB1XksYmP-ghc9.6.3.a */; }; - 64C829A02D54AEEE006B9E89 /* libHSsimplex-chat-6.5.5.0-57WEoB2fiWaFgCB1XksYmP.a in Frameworks */ = {isa = PBXBuildFile; fileRef = 64C8299B2D54AEEE006B9E89 /* libHSsimplex-chat-6.5.5.0-57WEoB2fiWaFgCB1XksYmP.a */; }; + 64C8299F2D54AEEE006B9E89 /* libHSsimplex-chat-6.5.6.1-AHNtWMpWy1qCojVTgyCNik-ghc9.6.3.a in Frameworks */ = {isa = PBXBuildFile; fileRef = 64C8299A2D54AEEE006B9E89 /* libHSsimplex-chat-6.5.6.1-AHNtWMpWy1qCojVTgyCNik-ghc9.6.3.a */; }; + 64C829A02D54AEEE006B9E89 /* libHSsimplex-chat-6.5.6.1-AHNtWMpWy1qCojVTgyCNik.a in Frameworks */ = {isa = PBXBuildFile; fileRef = 64C8299B2D54AEEE006B9E89 /* libHSsimplex-chat-6.5.6.1-AHNtWMpWy1qCojVTgyCNik.a */; }; 64C829A12D54AEEE006B9E89 /* libgmpxx.a in Frameworks */ = {isa = PBXBuildFile; fileRef = 64C8299C2D54AEEE006B9E89 /* libgmpxx.a */; }; 64D0C2C029F9688300B38D5F /* UserAddressView.swift in Sources */ = {isa = PBXBuildFile; fileRef = 64D0C2BF29F9688300B38D5F /* UserAddressView.swift */; }; 64D0C2C229FA57AB00B38D5F /* UserAddressLearnMore.swift in Sources */ = {isa = PBXBuildFile; fileRef = 64D0C2C129FA57AB00B38D5F /* UserAddressLearnMore.swift */; }; @@ -563,8 +563,8 @@ 64C3B0202A0D359700E19930 /* CustomTimePicker.swift */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.swift; path = CustomTimePicker.swift; sourceTree = ""; }; 64C829982D54AEED006B9E89 /* libgmp.a */ = {isa = PBXFileReference; lastKnownFileType = archive.ar; path = libgmp.a; sourceTree = ""; }; 64C829992D54AEEE006B9E89 /* libffi.a */ = {isa = PBXFileReference; lastKnownFileType = archive.ar; path = libffi.a; sourceTree = ""; }; - 64C8299A2D54AEEE006B9E89 /* libHSsimplex-chat-6.5.5.0-57WEoB2fiWaFgCB1XksYmP-ghc9.6.3.a */ = {isa = PBXFileReference; lastKnownFileType = archive.ar; path = "libHSsimplex-chat-6.5.5.0-57WEoB2fiWaFgCB1XksYmP-ghc9.6.3.a"; sourceTree = ""; }; - 64C8299B2D54AEEE006B9E89 /* libHSsimplex-chat-6.5.5.0-57WEoB2fiWaFgCB1XksYmP.a */ = {isa = PBXFileReference; lastKnownFileType = archive.ar; path = "libHSsimplex-chat-6.5.5.0-57WEoB2fiWaFgCB1XksYmP.a"; sourceTree = ""; }; + 64C8299A2D54AEEE006B9E89 /* libHSsimplex-chat-6.5.6.1-AHNtWMpWy1qCojVTgyCNik-ghc9.6.3.a */ = {isa = PBXFileReference; lastKnownFileType = archive.ar; path = "libHSsimplex-chat-6.5.6.1-AHNtWMpWy1qCojVTgyCNik-ghc9.6.3.a"; sourceTree = ""; }; + 64C8299B2D54AEEE006B9E89 /* libHSsimplex-chat-6.5.6.1-AHNtWMpWy1qCojVTgyCNik.a */ = {isa = PBXFileReference; lastKnownFileType = archive.ar; path = "libHSsimplex-chat-6.5.6.1-AHNtWMpWy1qCojVTgyCNik.a"; sourceTree = ""; }; 64C8299C2D54AEEE006B9E89 /* libgmpxx.a */ = {isa = PBXFileReference; lastKnownFileType = archive.ar; path = libgmpxx.a; sourceTree = ""; }; 64D0C2BF29F9688300B38D5F /* UserAddressView.swift */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.swift; path = UserAddressView.swift; sourceTree = ""; }; 64D0C2C129FA57AB00B38D5F /* UserAddressLearnMore.swift */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.swift; path = UserAddressLearnMore.swift; sourceTree = ""; }; @@ -733,8 +733,8 @@ 64C8299D2D54AEEE006B9E89 /* libgmp.a in Frameworks */, 64C8299E2D54AEEE006B9E89 /* libffi.a in Frameworks */, 64C829A12D54AEEE006B9E89 /* libgmpxx.a in Frameworks */, - 64C8299F2D54AEEE006B9E89 /* libHSsimplex-chat-6.5.5.0-57WEoB2fiWaFgCB1XksYmP-ghc9.6.3.a in Frameworks */, - 64C829A02D54AEEE006B9E89 /* libHSsimplex-chat-6.5.5.0-57WEoB2fiWaFgCB1XksYmP.a in Frameworks */, + 64C8299F2D54AEEE006B9E89 /* libHSsimplex-chat-6.5.6.1-AHNtWMpWy1qCojVTgyCNik-ghc9.6.3.a in Frameworks */, + 64C829A02D54AEEE006B9E89 /* libHSsimplex-chat-6.5.6.1-AHNtWMpWy1qCojVTgyCNik.a in Frameworks */, CE38A29C2C3FCD72005ED185 /* SwiftyGif in Frameworks */, ); runOnlyForDeploymentPostprocessing = 0; @@ -820,8 +820,8 @@ 64C829992D54AEEE006B9E89 /* libffi.a */, 64C829982D54AEED006B9E89 /* libgmp.a */, 64C8299C2D54AEEE006B9E89 /* libgmpxx.a */, - 64C8299A2D54AEEE006B9E89 /* libHSsimplex-chat-6.5.5.0-57WEoB2fiWaFgCB1XksYmP-ghc9.6.3.a */, - 64C8299B2D54AEEE006B9E89 /* libHSsimplex-chat-6.5.5.0-57WEoB2fiWaFgCB1XksYmP.a */, + 64C8299A2D54AEEE006B9E89 /* libHSsimplex-chat-6.5.6.1-AHNtWMpWy1qCojVTgyCNik-ghc9.6.3.a */, + 64C8299B2D54AEEE006B9E89 /* libHSsimplex-chat-6.5.6.1-AHNtWMpWy1qCojVTgyCNik.a */, ); path = Libraries; sourceTree = ""; @@ -2077,7 +2077,7 @@ CLANG_TIDY_MISC_REDUNDANT_EXPRESSION = YES; CODE_SIGN_ENTITLEMENTS = "SimpleX (iOS).entitlements"; CODE_SIGN_STYLE = Automatic; - CURRENT_PROJECT_VERSION = 335; + CURRENT_PROJECT_VERSION = 337; DEAD_CODE_STRIPPING = YES; DEVELOPMENT_TEAM = 5NN7GUYB6T; ENABLE_BITCODE = NO; @@ -2102,7 +2102,7 @@ "@executable_path/Frameworks", ); LLVM_LTO = YES_THIN; - MARKETING_VERSION = 6.5.5; + MARKETING_VERSION = 6.5.6; OTHER_LDFLAGS = "-Wl,-stack_size,0x1000000"; PRODUCT_BUNDLE_IDENTIFIER = chat.simplex.app; PRODUCT_NAME = SimpleX; @@ -2127,7 +2127,7 @@ CLANG_TIDY_MISC_REDUNDANT_EXPRESSION = YES; CODE_SIGN_ENTITLEMENTS = "SimpleX (iOS).entitlements"; CODE_SIGN_STYLE = Automatic; - CURRENT_PROJECT_VERSION = 335; + CURRENT_PROJECT_VERSION = 337; DEAD_CODE_STRIPPING = YES; DEVELOPMENT_TEAM = 5NN7GUYB6T; ENABLE_BITCODE = NO; @@ -2152,7 +2152,7 @@ "@executable_path/Frameworks", ); LLVM_LTO = YES; - MARKETING_VERSION = 6.5.5; + MARKETING_VERSION = 6.5.6; OTHER_LDFLAGS = "-Wl,-stack_size,0x1000000"; PRODUCT_BUNDLE_IDENTIFIER = chat.simplex.app; PRODUCT_NAME = SimpleX; @@ -2169,11 +2169,11 @@ buildSettings = { ALWAYS_EMBED_SWIFT_STANDARD_LIBRARIES = YES; CODE_SIGN_STYLE = Automatic; - CURRENT_PROJECT_VERSION = 335; + CURRENT_PROJECT_VERSION = 337; DEVELOPMENT_TEAM = 5NN7GUYB6T; GENERATE_INFOPLIST_FILE = YES; IPHONEOS_DEPLOYMENT_TARGET = 15.0; - MARKETING_VERSION = 6.5.5; + MARKETING_VERSION = 6.5.6; PRODUCT_BUNDLE_IDENTIFIER = "chat.simplex.Tests-iOS"; PRODUCT_NAME = "$(TARGET_NAME)"; SDKROOT = iphoneos; @@ -2189,11 +2189,11 @@ buildSettings = { ALWAYS_EMBED_SWIFT_STANDARD_LIBRARIES = YES; CODE_SIGN_STYLE = Automatic; - CURRENT_PROJECT_VERSION = 335; + CURRENT_PROJECT_VERSION = 337; DEVELOPMENT_TEAM = 5NN7GUYB6T; GENERATE_INFOPLIST_FILE = YES; IPHONEOS_DEPLOYMENT_TARGET = 15.0; - MARKETING_VERSION = 6.5.5; + MARKETING_VERSION = 6.5.6; PRODUCT_BUNDLE_IDENTIFIER = "chat.simplex.Tests-iOS"; PRODUCT_NAME = "$(TARGET_NAME)"; SDKROOT = iphoneos; @@ -2214,7 +2214,7 @@ CODE_SIGN_ENTITLEMENTS = "SimpleX NSE/SimpleX NSE.entitlements"; CODE_SIGN_IDENTITY = "Apple Development"; CODE_SIGN_STYLE = Automatic; - CURRENT_PROJECT_VERSION = 335; + CURRENT_PROJECT_VERSION = 337; DEVELOPMENT_TEAM = 5NN7GUYB6T; ENABLE_BITCODE = NO; GCC_OPTIMIZATION_LEVEL = s; @@ -2229,7 +2229,7 @@ "@executable_path/../../Frameworks", ); LLVM_LTO = YES; - MARKETING_VERSION = 6.5.5; + MARKETING_VERSION = 6.5.6; PRODUCT_BUNDLE_IDENTIFIER = "chat.simplex.app.SimpleX-NSE"; PRODUCT_NAME = "$(TARGET_NAME)"; PROVISIONING_PROFILE_SPECIFIER = ""; @@ -2251,7 +2251,7 @@ CODE_SIGN_ENTITLEMENTS = "SimpleX NSE/SimpleX NSE.entitlements"; CODE_SIGN_IDENTITY = "Apple Development"; CODE_SIGN_STYLE = Automatic; - CURRENT_PROJECT_VERSION = 335; + CURRENT_PROJECT_VERSION = 337; DEVELOPMENT_TEAM = 5NN7GUYB6T; ENABLE_BITCODE = NO; ENABLE_CODE_COVERAGE = NO; @@ -2266,7 +2266,7 @@ "@executable_path/../../Frameworks", ); LLVM_LTO = YES; - MARKETING_VERSION = 6.5.5; + MARKETING_VERSION = 6.5.6; PRODUCT_BUNDLE_IDENTIFIER = "chat.simplex.app.SimpleX-NSE"; PRODUCT_NAME = "$(TARGET_NAME)"; PROVISIONING_PROFILE_SPECIFIER = ""; @@ -2288,7 +2288,7 @@ CLANG_TIDY_BUGPRONE_REDUNDANT_BRANCH_CONDITION = YES; CLANG_TIDY_MISC_REDUNDANT_EXPRESSION = YES; CODE_SIGN_STYLE = Automatic; - CURRENT_PROJECT_VERSION = 335; + CURRENT_PROJECT_VERSION = 337; DEFINES_MODULE = YES; DEVELOPMENT_TEAM = 5NN7GUYB6T; DYLIB_COMPATIBILITY_VERSION = 1; @@ -2314,7 +2314,7 @@ "$(PROJECT_DIR)/Libraries/sim", ); LLVM_LTO = YES; - MARKETING_VERSION = 6.5.5; + MARKETING_VERSION = 6.5.6; PRODUCT_BUNDLE_IDENTIFIER = chat.simplex.SimpleXChat; PRODUCT_NAME = "$(TARGET_NAME:c99extidentifier)"; SDKROOT = iphoneos; @@ -2339,7 +2339,7 @@ CLANG_TIDY_BUGPRONE_REDUNDANT_BRANCH_CONDITION = YES; CLANG_TIDY_MISC_REDUNDANT_EXPRESSION = YES; CODE_SIGN_STYLE = Automatic; - CURRENT_PROJECT_VERSION = 335; + CURRENT_PROJECT_VERSION = 337; DEFINES_MODULE = YES; DEVELOPMENT_TEAM = 5NN7GUYB6T; DYLIB_COMPATIBILITY_VERSION = 1; @@ -2366,7 +2366,7 @@ "$(PROJECT_DIR)/Libraries/sim", ); LLVM_LTO = YES; - MARKETING_VERSION = 6.5.5; + MARKETING_VERSION = 6.5.6; PRODUCT_BUNDLE_IDENTIFIER = chat.simplex.SimpleXChat; PRODUCT_NAME = "$(TARGET_NAME:c99extidentifier)"; SDKROOT = iphoneos; @@ -2393,7 +2393,7 @@ CLANG_CXX_LANGUAGE_STANDARD = "gnu++20"; CODE_SIGN_ENTITLEMENTS = "SimpleX SE/SimpleX SE.entitlements"; CODE_SIGN_STYLE = Automatic; - CURRENT_PROJECT_VERSION = 335; + CURRENT_PROJECT_VERSION = 337; DEVELOPMENT_TEAM = 5NN7GUYB6T; ENABLE_USER_SCRIPT_SANDBOXING = YES; GCC_C_LANGUAGE_STANDARD = gnu17; @@ -2408,7 +2408,7 @@ "@executable_path/../../Frameworks", ); LOCALIZATION_PREFERS_STRING_CATALOGS = YES; - MARKETING_VERSION = 6.5.5; + MARKETING_VERSION = 6.5.6; PRODUCT_BUNDLE_IDENTIFIER = "chat.simplex.app.SimpleX-SE"; PRODUCT_NAME = "$(TARGET_NAME)"; SDKROOT = iphoneos; @@ -2427,7 +2427,7 @@ CLANG_CXX_LANGUAGE_STANDARD = "gnu++20"; CODE_SIGN_ENTITLEMENTS = "SimpleX SE/SimpleX SE.entitlements"; CODE_SIGN_STYLE = Automatic; - CURRENT_PROJECT_VERSION = 335; + CURRENT_PROJECT_VERSION = 337; DEVELOPMENT_TEAM = 5NN7GUYB6T; ENABLE_USER_SCRIPT_SANDBOXING = YES; GCC_C_LANGUAGE_STANDARD = gnu17; @@ -2442,7 +2442,7 @@ "@executable_path/../../Frameworks", ); LOCALIZATION_PREFERS_STRING_CATALOGS = YES; - MARKETING_VERSION = 6.5.5; + MARKETING_VERSION = 6.5.6; PRODUCT_BUNDLE_IDENTIFIER = "chat.simplex.app.SimpleX-SE"; PRODUCT_NAME = "$(TARGET_NAME)"; SDKROOT = iphoneos; diff --git a/apps/multiplatform/gradle.properties b/apps/multiplatform/gradle.properties index 61c744bf86..d0cc299697 100644 --- a/apps/multiplatform/gradle.properties +++ b/apps/multiplatform/gradle.properties @@ -24,13 +24,13 @@ android.nonTransitiveRClass=true kotlin.mpp.androidSourceSetLayoutVersion=2 kotlin.jvm.target=11 -android.version_name=6.5.5 -android.version_code=355 +android.version_name=6.5.6 +android.version_code=358 android.bundle=false -desktop.version_name=6.5.5 -desktop.version_code=146 +desktop.version_name=6.5.6 +desktop.version_code=148 kotlin.version=2.1.20 gradle.plugin.version=8.7.0 diff --git a/packages/simplex-chat-nodejs/package.json b/packages/simplex-chat-nodejs/package.json index 40ef106103..e5360df2b4 100644 --- a/packages/simplex-chat-nodejs/package.json +++ b/packages/simplex-chat-nodejs/package.json @@ -1,6 +1,6 @@ { "name": "simplex-chat", - "version": "6.5.5", + "version": "6.5.6", "main": "dist/index.js", "types": "dist/index.d.ts", "files": [ diff --git a/packages/simplex-chat-nodejs/src/download-libs.js b/packages/simplex-chat-nodejs/src/download-libs.js index 4fad0f45a9..8fbed9efe0 100644 --- a/packages/simplex-chat-nodejs/src/download-libs.js +++ b/packages/simplex-chat-nodejs/src/download-libs.js @@ -4,7 +4,7 @@ const path = require('path'); const extract = require('extract-zip'); const GITHUB_REPO = 'simplex-chat/simplex-chat-libs'; -const RELEASE_TAG = 'v6.5.5'; +const RELEASE_TAG = 'v6.5.6'; const BACKEND = (process.env.SIMPLEX_BACKEND || process.env.npm_config_simplex_backend || 'sqlite').toLowerCase(); if (BACKEND !== 'sqlite' && BACKEND !== 'postgres') { diff --git a/packages/simplex-chat-python/src/simplex_chat/_version.py b/packages/simplex-chat-python/src/simplex_chat/_version.py index 77acd0e8b3..0b25146728 100644 --- a/packages/simplex-chat-python/src/simplex_chat/_version.py +++ b/packages/simplex-chat-python/src/simplex_chat/_version.py @@ -5,5 +5,5 @@ Bump both together for normal releases. For wrapper-only fixes use a PEP 440 post-release: __version__ = "6.5.2.post1", LIBS_VERSION unchanged. """ -__version__ = "6.5.5" # PEP 440 — read by hatchling for wheel metadata -LIBS_VERSION = "6.5.5" # simplex-chat-libs release tag (no 'v' prefix) +__version__ = "6.5.6" # PEP 440 — read by hatchling for wheel metadata +LIBS_VERSION = "6.5.6" # simplex-chat-libs release tag (no 'v' prefix) diff --git a/scripts/flatpak/chat.simplex.simplex.metainfo.xml b/scripts/flatpak/chat.simplex.simplex.metainfo.xml index 0d93315435..b527720e5b 100644 --- a/scripts/flatpak/chat.simplex.simplex.metainfo.xml +++ b/scripts/flatpak/chat.simplex.simplex.metainfo.xml @@ -38,6 +38,28 @@ + + https://simplex.chat/blog/20260430-simplex-channels-v6-5-consortium-crowdfunding-freedom-of-speech.html + +

New in v6.5.6:

+

Public channels - speak freely!

+
    +
  • Reliability: many relays per channel.
    • +
  • Ownership: you can run your own relays.
    • +
  • Security: owners hold channel keys.
    • +
  • Privacy: for owners and subscribers.
    • +
+

Easier to invite your friends: we made connecting simpler for new users.

+

Safe web links:

+
    +
  • opt-in to send link previews.
    • +
  • use SOCKS proxy for previews (if enabled).
    • +
  • prevent hyperlink phishing.
    • +
  • remove link tracking.
    • +
+

Non-profit governance: to make SimpleX Network last.

+ + https://simplex.chat/blog/20260430-simplex-channels-v6-5-consortium-crowdfunding-freedom-of-speech.html From 514bfc8519c350bbcbcc4c94d6c6a457881cefb3 Mon Sep 17 00:00:00 2001 From: Evgeny Poberezkin Date: Mon, 22 Jun 2026 16:48:01 +0100 Subject: [PATCH 56/81] core: 7.0.0.4 --- .../xcshareddata/swiftpm/Package.resolved | 66 ------------------- simplex-chat.cabal | 2 +- 2 files changed, 1 insertion(+), 67 deletions(-) delete mode 100644 apps/ios/SimpleX.xcodeproj/project.xcworkspace/xcshareddata/swiftpm/Package.resolved diff --git a/apps/ios/SimpleX.xcodeproj/project.xcworkspace/xcshareddata/swiftpm/Package.resolved b/apps/ios/SimpleX.xcodeproj/project.xcworkspace/xcshareddata/swiftpm/Package.resolved deleted file mode 100644 index 978e1d9630..0000000000 --- a/apps/ios/SimpleX.xcodeproj/project.xcworkspace/xcshareddata/swiftpm/Package.resolved +++ /dev/null @@ -1,66 +0,0 @@ -{ - "originHash" : "60aeecb7917535a5e44ade0dbb5411ab112a959283e565a04c212c8af4e7dee9", - "pins" : [ - { - "identity" : "codescanner", - "kind" : "remoteSourceControl", - "location" : "https://github.com/twostraws/CodeScanner", - "state" : { - "revision" : "34da57fb63b47add20de8a85da58191523ccce57", - "version" : "2.5.0" - } - }, - { - "identity" : "elegant-emoji-picker", - "kind" : "remoteSourceControl", - "location" : "https://github.com/Finalet/Elegant-Emoji-Picker", - "state" : { - "branch" : "main", - "revision" : "71d2d46092b4d550cc593614efc06438f845f6e6" - } - }, - { - "identity" : "ink", - "kind" : "remoteSourceControl", - "location" : "https://github.com/johnsundell/ink", - "state" : { - "revision" : "bcc9f219900a62c4210e6db726035d7f03ae757b", - "version" : "0.6.0" - } - }, - { - "identity" : "lzstring-swift", - "kind" : "remoteSourceControl", - "location" : "https://github.com/Ibrahimhass/lzstring-swift", - "state" : { - "revision" : "7f62f21de5b18582a950e1753b775cc614722407" - } - }, - { - "identity" : "swiftygif", - "kind" : "remoteSourceControl", - "location" : "https://github.com/kirualex/SwiftyGif", - "state" : { - "revision" : "5e8619335d394901379c9add5c4c1c2f420b3800" - } - }, - { - "identity" : "webrtc", - "kind" : "remoteSourceControl", - "location" : "https://github.com/simplex-chat/WebRTC.git", - "state" : { - "revision" : "34bedc50f9c58dccf4967ea59c7e6a47d620803b" - } - }, - { - "identity" : "yams", - "kind" : "remoteSourceControl", - "location" : "https://github.com/jpsim/Yams", - "state" : { - "revision" : "9234124cff5e22e178988c18d8b95a8ae8007f76", - "version" : "5.1.2" - } - } - ], - "version" : 3 -} diff --git a/simplex-chat.cabal b/simplex-chat.cabal index f1effc2e6a..64ec8dcf13 100644 --- a/simplex-chat.cabal +++ b/simplex-chat.cabal @@ -5,7 +5,7 @@ cabal-version: 1.12 -- see: https://github.com/sol/hpack name: simplex-chat -version: 7.0.0.3 +version: 7.0.0.4 category: Web, System, Services, Cryptography homepage: https://github.com/simplex-chat/simplex-chat#readme author: simplex.chat From 54e4404627dcdba64f02e430edc0eb7eea949f48 Mon Sep 17 00:00:00 2001 From: Evgeny Date: Mon, 22 Jun 2026 18:16:01 +0100 Subject: [PATCH 57/81] ui: translations (#7112) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit * Translated using Weblate (Hungarian) Currently translated at 100.0% (2392 of 2392 strings) Translation: SimpleX Chat/SimpleX Chat iOS Translate-URL: https://hosted.weblate.org/projects/simplex-chat/ios/hu/ * Translated using Weblate (Arabic) Currently translated at 100.0% (2768 of 2768 strings) Translation: SimpleX Chat/SimpleX Chat Android Translate-URL: https://hosted.weblate.org/projects/simplex-chat/android/ar/ * Translated using Weblate (Italian) Currently translated at 100.0% (2768 of 2768 strings) Translation: SimpleX Chat/SimpleX Chat Android Translate-URL: https://hosted.weblate.org/projects/simplex-chat/android/it/ * Translated using Weblate (Italian) Currently translated at 100.0% (2392 of 2392 strings) Translation: SimpleX Chat/SimpleX Chat iOS Translate-URL: https://hosted.weblate.org/projects/simplex-chat/ios/it/ * Translated using Weblate (Hungarian) Currently translated at 100.0% (2768 of 2768 strings) Translation: SimpleX Chat/SimpleX Chat Android Translate-URL: https://hosted.weblate.org/projects/simplex-chat/android/hu/ * Translated using Weblate (Chinese (Simplified Han script)) Currently translated at 100.0% (2767 of 2767 strings) Translation: SimpleX Chat/SimpleX Chat Android Translate-URL: https://hosted.weblate.org/projects/simplex-chat/android/zh_Hans/ * Translated using Weblate (Hungarian) Currently translated at 100.0% (2767 of 2767 strings) Translation: SimpleX Chat/SimpleX Chat Android Translate-URL: https://hosted.weblate.org/projects/simplex-chat/android/hu/ * Translated using Weblate (Arabic) Currently translated at 100.0% (2767 of 2767 strings) Translation: SimpleX Chat/SimpleX Chat Android Translate-URL: https://hosted.weblate.org/projects/simplex-chat/android/ar/ * Translated using Weblate (Russian) Currently translated at 100.0% (2392 of 2392 strings) Translation: SimpleX Chat/SimpleX Chat iOS Translate-URL: https://hosted.weblate.org/projects/simplex-chat/ios/ru/ * Translated using Weblate (Russian) Currently translated at 99.9% (2765 of 2767 strings) Translation: SimpleX Chat/SimpleX Chat Android Translate-URL: https://hosted.weblate.org/projects/simplex-chat/android/ru/ * Translated using Weblate (Russian) Currently translated at 99.9% (2765 of 2767 strings) Translation: SimpleX Chat/SimpleX Chat Android Translate-URL: https://hosted.weblate.org/projects/simplex-chat/android/ru/ * Translated using Weblate (Czech) Currently translated at 91.1% (2523 of 2767 strings) Translation: SimpleX Chat/SimpleX Chat Android Translate-URL: https://hosted.weblate.org/projects/simplex-chat/android/cs/ * Translated using Weblate (Hungarian) Currently translated at 100.0% (2392 of 2392 strings) Translation: SimpleX Chat/SimpleX Chat iOS Translate-URL: https://hosted.weblate.org/projects/simplex-chat/ios/hu/ * Translated using Weblate (Hungarian) Currently translated at 100.0% (2767 of 2767 strings) Translation: SimpleX Chat/SimpleX Chat Android Translate-URL: https://hosted.weblate.org/projects/simplex-chat/android/hu/ * Translated using Weblate (Italian) Currently translated at 100.0% (2767 of 2767 strings) Translation: SimpleX Chat/SimpleX Chat Android Translate-URL: https://hosted.weblate.org/projects/simplex-chat/android/it/ * Translated using Weblate (German) Currently translated at 100.0% (2767 of 2767 strings) Translation: SimpleX Chat/SimpleX Chat Android Translate-URL: https://hosted.weblate.org/projects/simplex-chat/android/de/ * Translated using Weblate (German) Currently translated at 100.0% (2392 of 2392 strings) Translation: SimpleX Chat/SimpleX Chat iOS Translate-URL: https://hosted.weblate.org/projects/simplex-chat/ios/de/ * Translated using Weblate (Czech) Currently translated at 94.6% (2619 of 2767 strings) Translation: SimpleX Chat/SimpleX Chat Android Translate-URL: https://hosted.weblate.org/projects/simplex-chat/android/cs/ * Translated using Weblate (Spanish) Currently translated at 100.0% (2392 of 2392 strings) Translation: SimpleX Chat/SimpleX Chat iOS Translate-URL: https://hosted.weblate.org/projects/simplex-chat/ios/es/ * Translated using Weblate (Spanish) Currently translated at 100.0% (2767 of 2767 strings) Translation: SimpleX Chat/SimpleX Chat Android Translate-URL: https://hosted.weblate.org/projects/simplex-chat/android/es/ * Translated using Weblate (Hungarian) Currently translated at 100.0% (2392 of 2392 strings) Translation: SimpleX Chat/SimpleX Chat iOS Translate-URL: https://hosted.weblate.org/projects/simplex-chat/ios/hu/ * Translated using Weblate (Hungarian) Currently translated at 100.0% (2768 of 2768 strings) Translation: SimpleX Chat/SimpleX Chat Android Translate-URL: https://hosted.weblate.org/projects/simplex-chat/android/hu/ * Translated using Weblate (Hungarian) Currently translated at 100.0% (2783 of 2783 strings) Translation: SimpleX Chat/SimpleX Chat Android Translate-URL: https://hosted.weblate.org/projects/simplex-chat/android/hu/ * Translated using Weblate (Italian) Currently translated at 100.0% (2783 of 2783 strings) Translation: SimpleX Chat/SimpleX Chat Android Translate-URL: https://hosted.weblate.org/projects/simplex-chat/android/it/ * Translated using Weblate (Chinese (Simplified Han script)) Currently translated at 100.0% (2783 of 2783 strings) Translation: SimpleX Chat/SimpleX Chat Android Translate-URL: https://hosted.weblate.org/projects/simplex-chat/android/zh_Hans/ * Translated using Weblate (German) Currently translated at 100.0% (2783 of 2783 strings) Translation: SimpleX Chat/SimpleX Chat Android Translate-URL: https://hosted.weblate.org/projects/simplex-chat/android/de/ * Translated using Weblate (Arabic) Currently translated at 100.0% (2783 of 2783 strings) Translation: SimpleX Chat/SimpleX Chat Android Translate-URL: https://hosted.weblate.org/projects/simplex-chat/android/ar/ * Translated using Weblate (Turkish) Currently translated at 89.6% (2145 of 2392 strings) Translation: SimpleX Chat/SimpleX Chat iOS Translate-URL: https://hosted.weblate.org/projects/simplex-chat/ios/tr/ * Translated using Weblate (Hungarian) Currently translated at 100.0% (2783 of 2783 strings) Translation: SimpleX Chat/SimpleX Chat Android Translate-URL: https://hosted.weblate.org/projects/simplex-chat/android/hu/ * Translated using Weblate (Hungarian) Currently translated at 100.0% (2392 of 2392 strings) Translation: SimpleX Chat/SimpleX Chat iOS Translate-URL: https://hosted.weblate.org/projects/simplex-chat/ios/hu/ * Translated using Weblate (Hungarian) Currently translated at 100.0% (2793 of 2793 strings) Translation: SimpleX Chat/SimpleX Chat Android Translate-URL: https://hosted.weblate.org/projects/simplex-chat/android/hu/ * Translated using Weblate (German) Currently translated at 100.0% (2392 of 2392 strings) Translation: SimpleX Chat/SimpleX Chat iOS Translate-URL: https://hosted.weblate.org/projects/simplex-chat/ios/de/ * Translated using Weblate (German) Currently translated at 100.0% (2793 of 2793 strings) Translation: SimpleX Chat/SimpleX Chat Android Translate-URL: https://hosted.weblate.org/projects/simplex-chat/android/de/ * Translated using Weblate (Chinese (Simplified Han script)) Currently translated at 100.0% (2793 of 2793 strings) Translation: SimpleX Chat/SimpleX Chat Android Translate-URL: https://hosted.weblate.org/projects/simplex-chat/android/zh_Hans/ * Translated using Weblate (Hungarian) Currently translated at 100.0% (2795 of 2795 strings) Translation: SimpleX Chat/SimpleX Chat Android Translate-URL: https://hosted.weblate.org/projects/simplex-chat/android/hu/ * Translated using Weblate (Chinese (Simplified Han script)) Currently translated at 100.0% (2795 of 2795 strings) Translation: SimpleX Chat/SimpleX Chat Android Translate-URL: https://hosted.weblate.org/projects/simplex-chat/android/zh_Hans/ * Translated using Weblate (Italian) Currently translated at 100.0% (2795 of 2795 strings) Translation: SimpleX Chat/SimpleX Chat Android Translate-URL: https://hosted.weblate.org/projects/simplex-chat/android/it/ * Translated using Weblate (German) Currently translated at 100.0% (2795 of 2795 strings) Translation: SimpleX Chat/SimpleX Chat Android Translate-URL: https://hosted.weblate.org/projects/simplex-chat/android/de/ * Translated using Weblate (Arabic) Currently translated at 100.0% (2795 of 2795 strings) Translation: SimpleX Chat/SimpleX Chat Android Translate-URL: https://hosted.weblate.org/projects/simplex-chat/android/ar/ * Translated using Weblate (Spanish) Currently translated at 100.0% (2795 of 2795 strings) Translation: SimpleX Chat/SimpleX Chat Android Translate-URL: https://hosted.weblate.org/projects/simplex-chat/android/es/ * Translated using Weblate (Czech) Currently translated at 97.1% (2716 of 2795 strings) Translation: SimpleX Chat/SimpleX Chat Android Translate-URL: https://hosted.weblate.org/projects/simplex-chat/android/cs/ * Translated using Weblate (Russian) Currently translated at 99.0% (2769 of 2795 strings) Translation: SimpleX Chat/SimpleX Chat Android Translate-URL: https://hosted.weblate.org/projects/simplex-chat/android/ru/ * Translated using Weblate (Italian) Currently translated at 100.0% (2800 of 2800 strings) Translation: SimpleX Chat/SimpleX Chat Android Translate-URL: https://hosted.weblate.org/projects/simplex-chat/android/it/ * Translated using Weblate (German) Currently translated at 100.0% (2800 of 2800 strings) Translation: SimpleX Chat/SimpleX Chat Android Translate-URL: https://hosted.weblate.org/projects/simplex-chat/android/de/ * Translated using Weblate (Chinese (Simplified Han script)) Currently translated at 100.0% (2800 of 2800 strings) Translation: SimpleX Chat/SimpleX Chat Android Translate-URL: https://hosted.weblate.org/projects/simplex-chat/android/zh_Hans/ * Translated using Weblate (Hungarian) Currently translated at 100.0% (2392 of 2392 strings) Translation: SimpleX Chat/SimpleX Chat iOS Translate-URL: https://hosted.weblate.org/projects/simplex-chat/ios/hu/ * Translated using Weblate (Hungarian) Currently translated at 100.0% (2800 of 2800 strings) Translation: SimpleX Chat/SimpleX Chat Android Translate-URL: https://hosted.weblate.org/projects/simplex-chat/android/hu/ * Translated using Weblate (Hungarian) Currently translated at 100.0% (2800 of 2800 strings) Translation: SimpleX Chat/SimpleX Chat Android Translate-URL: https://hosted.weblate.org/projects/simplex-chat/android/hu/ * Translated using Weblate (Arabic) Currently translated at 100.0% (2800 of 2800 strings) Translation: SimpleX Chat/SimpleX Chat Android Translate-URL: https://hosted.weblate.org/projects/simplex-chat/android/ar/ * Translated using Weblate (Hungarian) Currently translated at 100.0% (2800 of 2800 strings) Translation: SimpleX Chat/SimpleX Chat Android Translate-URL: https://hosted.weblate.org/projects/simplex-chat/android/hu/ * Translated using Weblate (Hungarian) Currently translated at 100.0% (2392 of 2392 strings) Translation: SimpleX Chat/SimpleX Chat iOS Translate-URL: https://hosted.weblate.org/projects/simplex-chat/ios/hu/ * Translated using Weblate (Hungarian) Currently translated at 100.0% (2392 of 2392 strings) Translation: SimpleX Chat/SimpleX Chat iOS Translate-URL: https://hosted.weblate.org/projects/simplex-chat/ios/hu/ * Translated using Weblate (Hungarian) Currently translated at 100.0% (2800 of 2800 strings) Translation: SimpleX Chat/SimpleX Chat Android Translate-URL: https://hosted.weblate.org/projects/simplex-chat/android/hu/ * Translated using Weblate (Hungarian) Currently translated at 100.0% (2392 of 2392 strings) Translation: SimpleX Chat/SimpleX Chat iOS Translate-URL: https://hosted.weblate.org/projects/simplex-chat/ios/hu/ * Translated using Weblate (Hungarian) Currently translated at 100.0% (2800 of 2800 strings) Translation: SimpleX Chat/SimpleX Chat Android Translate-URL: https://hosted.weblate.org/projects/simplex-chat/android/hu/ * Translated using Weblate (German) Currently translated at 100.0% (2392 of 2392 strings) Translation: SimpleX Chat/SimpleX Chat iOS Translate-URL: https://hosted.weblate.org/projects/simplex-chat/ios/de/ * Translated using Weblate (Japanese) Currently translated at 50.8% (1216 of 2392 strings) Translation: SimpleX Chat/SimpleX Chat iOS Translate-URL: https://hosted.weblate.org/projects/simplex-chat/ios/ja/ * process localizations --------- Co-authored-by: summoner001 Co-authored-by: jonnysemon Co-authored-by: Random Co-authored-by: 大王叫我来巡山 Co-authored-by: Skyward Copied Co-authored-by: slrslr Co-authored-by: mlanp Co-authored-by: zenobit Co-authored-by: Isaac ALejandro Lopez Co-authored-by: echoloji Co-authored-by: No name Co-authored-by: Андрей Абрамов Co-authored-by: Ghost of Sparta Co-authored-by: Sarfaraz Ahmed Co-authored-by: Ikko Eltociear Ashimine --- .../bg.xcloc/Localized Contents/bg.xliff | 175 ++++++++++++--- .../cs.xcloc/Localized Contents/cs.xliff | 175 ++++++++++++--- .../de.xcloc/Localized Contents/de.xliff | 178 +++++++++++---- .../en.xcloc/Localized Contents/en.xliff | 211 ++++++++++++++---- .../es.xcloc/Localized Contents/es.xliff | 176 +++++++++++---- .../fi.xcloc/Localized Contents/fi.xliff | 175 ++++++++++++--- .../fr.xcloc/Localized Contents/fr.xliff | 176 +++++++++++---- .../hu.xcloc/Localized Contents/hu.xliff | 176 +++++++++++---- .../it.xcloc/Localized Contents/it.xliff | 176 +++++++++++---- .../ja.xcloc/Localized Contents/ja.xliff | 182 ++++++++++++--- .../nl.xcloc/Localized Contents/nl.xliff | 176 +++++++++++---- .../pl.xcloc/Localized Contents/pl.xliff | 176 +++++++++++---- .../ru.xcloc/Localized Contents/ru.xliff | 176 +++++++++++---- .../th.xcloc/Localized Contents/th.xliff | 175 ++++++++++++--- .../tr.xcloc/Localized Contents/tr.xliff | 176 +++++++++++---- .../uk.xcloc/Localized Contents/uk.xliff | 176 +++++++++++---- .../Localized Contents/zh-Hans.xliff | 176 +++++++++++---- .../SimpleX SE/de.lproj/Localizable.strings | 3 - .../SimpleX SE/es.lproj/Localizable.strings | 3 - .../SimpleX SE/fr.lproj/Localizable.strings | 3 - .../SimpleX SE/hu.lproj/Localizable.strings | 3 - .../SimpleX SE/it.lproj/Localizable.strings | 3 - .../SimpleX SE/nl.lproj/Localizable.strings | 3 - .../SimpleX SE/pl.lproj/Localizable.strings | 3 - .../SimpleX SE/ru.lproj/Localizable.strings | 3 - .../SimpleX SE/tr.lproj/Localizable.strings | 3 - .../SimpleX SE/uk.lproj/Localizable.strings | 3 - .../zh-Hans.lproj/Localizable.strings | 3 - apps/ios/SimpleX.xcodeproj/project.pbxproj | 8 +- apps/ios/bg.lproj/Localizable.strings | 23 +- apps/ios/cs.lproj/Localizable.strings | 23 +- apps/ios/de.lproj/Localizable.strings | 27 +-- apps/ios/es.lproj/Localizable.strings | 25 +-- apps/ios/fi.lproj/Localizable.strings | 23 +- apps/ios/fr.lproj/Localizable.strings | 25 +-- apps/ios/hu.lproj/Localizable.strings | 25 +-- apps/ios/it.lproj/Localizable.strings | 25 +-- apps/ios/ja.lproj/Localizable.strings | 46 ++-- apps/ios/nl.lproj/Localizable.strings | 25 +-- apps/ios/pl.lproj/Localizable.strings | 25 +-- apps/ios/ru.lproj/Localizable.strings | 25 +-- apps/ios/th.lproj/Localizable.strings | 23 +- apps/ios/tr.lproj/Localizable.strings | 25 +-- apps/ios/uk.lproj/Localizable.strings | 25 +-- apps/ios/zh-Hans.lproj/Localizable.strings | 25 +-- 45 files changed, 2443 insertions(+), 1044 deletions(-) diff --git a/apps/ios/SimpleX Localizations/bg.xcloc/Localized Contents/bg.xliff b/apps/ios/SimpleX Localizations/bg.xcloc/Localized Contents/bg.xliff index 89d5014c95..3c83ee7bf3 100644 --- a/apps/ios/SimpleX Localizations/bg.xcloc/Localized Contents/bg.xliff +++ b/apps/ios/SimpleX Localizations/bg.xcloc/Localized Contents/bg.xliff @@ -35,6 +35,10 @@ #тайно# No comment provided by engineer. + + %1$@ supported SimpleX Chat. The badge expired on %2$@. + badge alert + %@ %@ @@ -85,6 +89,10 @@ %@ изтеглено No comment provided by engineer. + + %@ invested in SimpleX Chat crowdfunding. + badge alert + %@ is connected! %@ е свързан! @@ -110,6 +118,10 @@ %@ сървъри No comment provided by engineer. + + %@ supports SimpleX Chat. + badge alert + %@ uploaded %@ качено @@ -743,6 +755,10 @@ swipe action Добави профил No comment provided by engineer. + + Add relay + No comment provided by engineer. + Add relays No comment provided by engineer. @@ -766,6 +782,10 @@ swipe action Добави членове на екипа No comment provided by engineer. + + Add this code to your webpage. It will display the preview of your channel / group. + No comment provided by engineer. + Add to another device Добави към друго устройство @@ -846,6 +866,10 @@ swipe action Разширени мрежови настройки No comment provided by engineer. + + Advanced options + No comment provided by engineer. + Advanced settings Разширени настройки @@ -953,6 +977,10 @@ swipe action Позволи No comment provided by engineer. + + Allow anyone to embed + No comment provided by engineer. + Allow calls only if your contact allows them. Позволи обаждания само ако вашият контакт ги разрешава. @@ -1125,6 +1153,10 @@ swipe action Отговор на повикване No comment provided by engineer. + + Any webpage can show the preview. + No comment provided by engineer. + App build: %@ Компилация на приложението: %@ @@ -1333,6 +1365,10 @@ swipe action Лош хеш на съобщението No comment provided by engineer. + + Badge cannot be verified + badge alert title + Be free in your network @@ -1538,11 +1574,6 @@ in your network Разговорът вече приключи! No comment provided by engineer. - - Calls - Обаждания - No comment provided by engineer. - Calls prohibited! Обажданията са забранени! @@ -1734,6 +1765,10 @@ alert subtitle Channel temporarily unavailable alert title + + Channel webpage + No comment provided by engineer. + Channel will be deleted for all subscribers - this cannot be undone! No comment provided by engineer. @@ -1775,6 +1810,10 @@ alert subtitle Конзола No comment provided by engineer. + + Chat data + No comment provided by engineer. + Chat database База данни @@ -2321,6 +2360,10 @@ This is your own one-time link! Connections No comment provided by engineer. + + Contact + No comment provided by engineer. + Contact address chat link info line @@ -2404,6 +2447,10 @@ This is your own one-time link! Копирай No comment provided by engineer. + + Copy code + No comment provided by engineer. + Copy error No comment provided by engineer. @@ -2437,6 +2484,10 @@ This is your own one-time link! Създаване група с автоматично създаден профил. No comment provided by engineer. + + Create a webpage to show your channel preview to visitors before they subscribe. Host it yourself or use any static hosting. + No comment provided by engineer. + Create file Създаване на файл @@ -3005,20 +3056,15 @@ alert button Details No comment provided by engineer. - - Develop - Разработване + + Developer + Инструменти за разработчици No comment provided by engineer. Developer options No comment provided by engineer. - - Developer - Инструменти за разработчици - No comment provided by engineer. - Device Устройство @@ -3499,6 +3545,10 @@ chat item action Въведи името на това устройство… No comment provided by engineer. + + Enter webpage URL + No comment provided by engineer. + Enter welcome message… Въведи съобщение при посрещане… @@ -4425,6 +4475,10 @@ Error: %2$@ Group profile was changed. If you save it, the updated profile will be sent to group members. alert message + + Group webpage + No comment provided by engineer. + Group welcome message Съобщение при посрещане в групата @@ -4449,6 +4503,10 @@ Error: %2$@ Помощ No comment provided by engineer. + + Help & support + No comment provided by engineer. + Help admins moderating their groups. No comment provided by engineer. @@ -4909,6 +4967,10 @@ More improvements are coming soon! Изглежда, че вече сте свързани чрез този линк. Ако не е така, има грешка (%@). No comment provided by engineer. + + It will be shown to subscribers and used to allow loading the preview. + No comment provided by engineer. + Italian interface Италиански интерфейс @@ -5011,7 +5073,7 @@ This is your link for group %@! Learn more Научете повече - No comment provided by engineer. + badge alert button Leave @@ -5516,6 +5578,10 @@ This is your link for group %@! Очаквайте скоро още подобрения! No comment provided by engineer. + + More privacy + No comment provided by engineer. + More reliable network connection. По-надеждна мрежова връзка. @@ -6076,6 +6142,10 @@ Requires compatible VPN. Само вашият контакт може да изпраща гласови съобщения. No comment provided by engineer. + + Only your page above can show the preview. + No comment provided by engineer. + Open Отвори @@ -6477,11 +6547,6 @@ Error: %@ Previously connected servers No comment provided by engineer. - - Privacy & security - Поверителност и сигурност - No comment provided by engineer. - Privacy for your customers. No comment provided by engineer. @@ -6941,6 +7006,10 @@ swipe action Премахване на паролата от keychain? No comment provided by engineer. + + Remove relay + No comment provided by engineer. + Remove relay? alert title @@ -7207,6 +7276,10 @@ chat item action Запази и уведоми членовете на групата No comment provided by engineer. + + Save and notify members + No comment provided by engineer. + Save and notify subscribers No comment provided by engineer. @@ -7271,6 +7344,10 @@ chat item action Запази сървърите? alert title + + Save webpage settings? + alert title + Save welcome message? Запази съобщението при посрещане? @@ -8275,9 +8352,8 @@ Relay address was used to set up this relay for the channel. Subscriptions ignored No comment provided by engineer. - - Support SimpleX Chat - Подкрепете SimpleX Chat + + Support the project No comment provided by engineer. @@ -8483,6 +8559,10 @@ It can happen because of some bug or when the connection is compromised.Опитът за промяна на паролата на базата данни не беше завършен. No comment provided by engineer. + + The badge is signed with a key that this version of the app does not recognize. Update the app to verify this badge. + badge alert + The code you scanned is not a SimpleX link QR code. QR кодът, който сканирахте, не е SimpleX линк за връзка. @@ -8638,6 +8718,10 @@ your contacts and groups. Това действие не може да бъде отменено - вашият профил, контакти, съобщения и файлове ще бъдат безвъзвратно загубени. No comment provided by engineer. + + This badge could not be verified and may not be genuine. + badge alert + This chat is protected by end-to-end encryption. Този чат е защитен чрез криптиране от край до край. @@ -9001,6 +9085,10 @@ To connect, please ask your contact to create another connection link and check Unsupported contact name alert title + + Unverified badge + badge alert title + Up to 100 last messages are sent to new members. На новите членове се изпращат до последните 100 съобщения. @@ -9204,6 +9292,10 @@ To connect, please ask your contact to create another connection link and check Use web port No comment provided by engineer. + + Used chat relays do not support webpages. + No comment provided by engineer. + User selection No comment provided by engineer. @@ -9397,6 +9489,14 @@ To connect, please ask your contact to create another connection link and check WebRTC ICE сървъри No comment provided by engineer. + + Webpage code + No comment provided by engineer. + + + Webpage settings were changed. If you save, the updated settings will be sent to subscribers. + alert message + Welcome %@! Добре дошли %@! @@ -9605,9 +9705,8 @@ Repeat join request? Можете да активирате по-късно през Настройки No comment provided by engineer. - - You can enable them later via app Privacy & Security settings. - Можете да ги активирате по-късно през настройките за "Поверителност и сигурност" на приложението. + + You can enable them later via app Your privacy settings. No comment provided by engineer. @@ -9666,6 +9765,10 @@ Repeat join request? You can still view conversation with %@ in the list of chats. No comment provided by engineer. + + You can support SimpleX starting from v7 of the app. + badge alert + You can turn on SimpleX Lock via Settings. Можете да включите SimpleX заключване през Настройки. @@ -9857,11 +9960,6 @@ Repeat connection request? Your channel No comment provided by engineer. - - Your chat database - Вашата база данни - No comment provided by engineer. - Your chat database is not encrypted - set passphrase to encrypt it. Вашата база данни не е криптирана - задайте парола, за да я криптирате. @@ -10045,6 +10143,10 @@ Relays can access channel messages. accepted you rcv group event chat item + + acknowledged roster + No comment provided by engineer. + active No comment provided by engineer. @@ -10496,6 +10598,10 @@ pref value часове time unit + + https:// + No comment provided by engineer. + iOS Keychain is used to securely store passphrase - it allows receiving push notifications. iOS Keychain се използва за сигурно съхраняване на парола - позволява получаване на push известия. @@ -10955,11 +11061,6 @@ last received msg: %2$@ v%@ No comment provided by engineer. - - v%@ (%@) - v%@ (%@) - No comment provided by engineer. - via %@ relay hostname @@ -11360,8 +11461,8 @@ last received msg: %2$@ Wrong database passphrase No comment provided by engineer. - - You can allow sharing in Privacy & Security / SimpleX Lock settings. + + You can allow sharing in Your privacy / SimpleX Lock settings. No comment provided by engineer. diff --git a/apps/ios/SimpleX Localizations/cs.xcloc/Localized Contents/cs.xliff b/apps/ios/SimpleX Localizations/cs.xcloc/Localized Contents/cs.xliff index f7beecf4ba..46a4171039 100644 --- a/apps/ios/SimpleX Localizations/cs.xcloc/Localized Contents/cs.xliff +++ b/apps/ios/SimpleX Localizations/cs.xcloc/Localized Contents/cs.xliff @@ -35,6 +35,10 @@ #tajný# No comment provided by engineer. + + %1$@ supported SimpleX Chat. The badge expired on %2$@. + badge alert + %@ %@ @@ -85,6 +89,10 @@ %@ staženo No comment provided by engineer. + + %@ invested in SimpleX Chat crowdfunding. + badge alert + %@ is connected! %@ je připojen! @@ -110,6 +118,10 @@ %@ servery No comment provided by engineer. + + %@ supports SimpleX Chat. + badge alert + %@ uploaded %@ nahrán @@ -736,6 +748,10 @@ swipe action Přidat profil No comment provided by engineer. + + Add relay + No comment provided by engineer. + Add relays No comment provided by engineer. @@ -759,6 +775,10 @@ swipe action Přidat členy týmu No comment provided by engineer. + + Add this code to your webpage. It will display the preview of your channel / group. + No comment provided by engineer. + Add to another device Přidat do jiného zařízení @@ -837,6 +857,10 @@ swipe action Pokročilá nastavení sítě No comment provided by engineer. + + Advanced options + No comment provided by engineer. + Advanced settings Pokročilá nastavení @@ -940,6 +964,10 @@ swipe action Povolit No comment provided by engineer. + + Allow anyone to embed + No comment provided by engineer. + Allow calls only if your contact allows them. Povolte hovory, pouze pokud je váš kontakt povolí. @@ -1110,6 +1138,10 @@ swipe action Přijmout hovor No comment provided by engineer. + + Any webpage can show the preview. + No comment provided by engineer. + App build: %@ Sestavení aplikace: %@ @@ -1308,6 +1340,10 @@ swipe action Špatný hash zprávy No comment provided by engineer. + + Badge cannot be verified + badge alert title + Be free in your network @@ -1502,11 +1538,6 @@ in your network Hovor již skončil! No comment provided by engineer. - - Calls - Hovory - No comment provided by engineer. - Calls prohibited! Volání zakázáno! @@ -1698,6 +1729,10 @@ alert subtitle Channel temporarily unavailable alert title + + Channel webpage + No comment provided by engineer. + Channel will be deleted for all subscribers - this cannot be undone! No comment provided by engineer. @@ -1736,6 +1771,10 @@ alert subtitle Konzola pro chat No comment provided by engineer. + + Chat data + No comment provided by engineer. + Chat database Chat databáze @@ -2225,6 +2264,10 @@ Toto je váš vlastní jednorázový odkaz! Connections No comment provided by engineer. + + Contact + No comment provided by engineer. + Contact address chat link info line @@ -2308,6 +2351,10 @@ Toto je váš vlastní jednorázový odkaz! Kopírovat No comment provided by engineer. + + Copy code + No comment provided by engineer. + Copy error No comment provided by engineer. @@ -2338,6 +2385,10 @@ Toto je váš vlastní jednorázový odkaz! Create a group using a random profile. No comment provided by engineer. + + Create a webpage to show your channel preview to visitors before they subscribe. Host it yourself or use any static hosting. + No comment provided by engineer. + Create file Vytvořit soubor @@ -2895,20 +2946,15 @@ alert button Details No comment provided by engineer. - - Develop - Vyvinout + + Developer + Nástroje pro vývojáře No comment provided by engineer. Developer options No comment provided by engineer. - - Developer - Nástroje pro vývojáře - No comment provided by engineer. - Device Zařízení @@ -3373,6 +3419,10 @@ chat item action Enter this device name… No comment provided by engineer. + + Enter webpage URL + No comment provided by engineer. + Enter welcome message… Zadat uvítací zprávu… @@ -4277,6 +4327,10 @@ Error: %2$@ Group profile was changed. If you save it, the updated profile will be sent to group members. alert message + + Group webpage + No comment provided by engineer. + Group welcome message Uvítací zpráva skupin @@ -4301,6 +4355,10 @@ Error: %2$@ Pomoc No comment provided by engineer. + + Help & support + No comment provided by engineer. + Help admins moderating their groups. No comment provided by engineer. @@ -4746,6 +4804,10 @@ More improvements are coming soon! Zdá se, že jste již připojeni prostřednictvím tohoto odkazu. Pokud tomu tak není, došlo k chybě (%@). No comment provided by engineer. + + It will be shown to subscribers and used to allow loading the preview. + No comment provided by engineer. + Italian interface Italské rozhraní @@ -4842,7 +4904,7 @@ This is your link for group %@! Learn more Zjistit více - No comment provided by engineer. + badge alert button Leave @@ -5332,6 +5394,10 @@ This is your link for group %@! Další vylepšení se chystají již brzy! No comment provided by engineer. + + More privacy + No comment provided by engineer. + More reliable network connection. No comment provided by engineer. @@ -5887,6 +5953,10 @@ Vyžaduje povolení sítě VPN. Hlasové zprávy může odesílat pouze váš kontakt. No comment provided by engineer. + + Only your page above can show the preview. + No comment provided by engineer. + Open Otevřít @@ -6273,11 +6343,6 @@ Error: %@ Previously connected servers No comment provided by engineer. - - Privacy & security - Ochrana osobních údajů a zabezpečení - No comment provided by engineer. - Privacy for your customers. No comment provided by engineer. @@ -6730,6 +6795,10 @@ swipe action Odstranit přístupovou frázi z klíčenek? No comment provided by engineer. + + Remove relay + No comment provided by engineer. + Remove relay? alert title @@ -6991,6 +7060,10 @@ chat item action Uložit a upozornit členy skupiny No comment provided by engineer. + + Save and notify members + No comment provided by engineer. + Save and notify subscribers No comment provided by engineer. @@ -7055,6 +7128,10 @@ chat item action Uložit servery? alert title + + Save webpage settings? + alert title + Save welcome message? Uložit uvítací zprávu? @@ -8040,9 +8117,8 @@ Relay address was used to set up this relay for the channel. Subscriptions ignored No comment provided by engineer. - - Support SimpleX Chat - Podpořte SimpleX Chat + + Support the project No comment provided by engineer. @@ -8245,6 +8321,10 @@ Může se to stát kvůli nějaké chybě, nebo pokud je spojení kompromitován Pokus o změnu přístupové fráze databáze nebyl dokončen. No comment provided by engineer. + + The badge is signed with a key that this version of the app does not recognize. Update the app to verify this badge. + badge alert + The code you scanned is not a SimpleX link QR code. No comment provided by engineer. @@ -8401,6 +8481,10 @@ your contacts and groups. Tuto akci nelze vzít zpět - váš profil, kontakty, zprávy a soubory budou nenávratně ztraceny. No comment provided by engineer. + + This badge could not be verified and may not be genuine. + badge alert + This chat is protected by end-to-end encryption. E2EE info chat item @@ -8751,6 +8835,10 @@ Chcete-li se připojit, požádejte svůj kontakt o vytvoření dalšího odkazu Unsupported contact name alert title + + Unverified badge + badge alert title + Up to 100 last messages are sent to new members. No comment provided by engineer. @@ -8948,6 +9036,10 @@ Chcete-li se připojit, požádejte svůj kontakt o vytvoření dalšího odkazu Use web port No comment provided by engineer. + + Used chat relays do not support webpages. + No comment provided by engineer. + User selection No comment provided by engineer. @@ -9131,6 +9223,14 @@ Chcete-li se připojit, požádejte svůj kontakt o vytvoření dalšího odkazu WebRTC servery ICE No comment provided by engineer. + + Webpage code + No comment provided by engineer. + + + Webpage settings were changed. If you save, the updated settings will be sent to subscribers. + alert message + Welcome %@! Vítejte %@! @@ -9324,9 +9424,8 @@ Repeat join request? Můžete povolit později v Nastavení No comment provided by engineer. - - You can enable them later via app Privacy & Security settings. - Můžete je povolit později v nastavení Soukromí & Bezpečnosti aplikace + + You can enable them later via app Your privacy settings. No comment provided by engineer. @@ -9383,6 +9482,10 @@ Repeat join request? You can still view conversation with %@ in the list of chats. No comment provided by engineer. + + You can support SimpleX starting from v7 of the app. + badge alert + You can turn on SimpleX Lock via Settings. Zámek SimpleX můžete zapnout v Nastavení. @@ -9571,11 +9674,6 @@ Repeat connection request? Your channel No comment provided by engineer. - - Your chat database - Vaše chatovací databáze - No comment provided by engineer. - Your chat database is not encrypted - set passphrase to encrypt it. Vaše chat databáze není šifrována – nastavte přístupovou frázi pro její šifrování. @@ -9759,6 +9857,10 @@ Relays can access channel messages. accepted you rcv group event chat item + + acknowledged roster + No comment provided by engineer. + active No comment provided by engineer. @@ -10200,6 +10302,10 @@ pref value hodin time unit + + https:// + No comment provided by engineer. + iOS Keychain is used to securely store passphrase - it allows receiving push notifications. iOS klíčenka slouží k bezpečnému ukládání přístupové fráze – umožňuje přijímat push notifikace. @@ -10645,11 +10751,6 @@ last received msg: %2$@ v%@ No comment provided by engineer. - - v%@ (%@) - v%@ (%@) - No comment provided by engineer. - via %@ relay hostname @@ -11046,8 +11147,8 @@ last received msg: %2$@ Wrong database passphrase No comment provided by engineer. - - You can allow sharing in Privacy & Security / SimpleX Lock settings. + + You can allow sharing in Your privacy / SimpleX Lock settings. No comment provided by engineer. diff --git a/apps/ios/SimpleX Localizations/de.xcloc/Localized Contents/de.xliff b/apps/ios/SimpleX Localizations/de.xcloc/Localized Contents/de.xliff index 822c13649e..be4a0ce46f 100644 --- a/apps/ios/SimpleX Localizations/de.xcloc/Localized Contents/de.xliff +++ b/apps/ios/SimpleX Localizations/de.xcloc/Localized Contents/de.xliff @@ -35,6 +35,10 @@ #geheim# No comment provided by engineer. + + %1$@ supported SimpleX Chat. The badge expired on %2$@. + badge alert + %@ %@ @@ -85,6 +89,10 @@ %@ heruntergeladen No comment provided by engineer. + + %@ invested in SimpleX Chat crowdfunding. + badge alert + %@ is connected! %@ ist mit Ihnen verbunden! @@ -110,6 +118,10 @@ %@ Server No comment provided by engineer. + + %@ supports SimpleX Chat. + badge alert + %@ uploaded %@ hochgeladen @@ -765,6 +777,10 @@ swipe action Profil hinzufügen No comment provided by engineer. + + Add relay + No comment provided by engineer. + Add relays No comment provided by engineer. @@ -788,6 +804,10 @@ swipe action Team-Mitglieder aufnehmen No comment provided by engineer. + + Add this code to your webpage. It will display the preview of your channel / group. + No comment provided by engineer. + Add to another device Einem anderen Gerät hinzufügen @@ -868,6 +888,10 @@ swipe action Erweiterte Netzwerkeinstellungen No comment provided by engineer. + + Advanced options + No comment provided by engineer. + Advanced settings Erweiterte Einstellungen @@ -978,6 +1002,10 @@ swipe action Erlauben No comment provided by engineer. + + Allow anyone to embed + No comment provided by engineer. + Allow calls only if your contact allows them. Erlauben Sie Anrufe nur dann, wenn es Ihr Kontakt ebenfalls erlaubt. @@ -1153,6 +1181,10 @@ swipe action Anruf annehmen No comment provided by engineer. + + Any webpage can show the preview. + No comment provided by engineer. + App build: %@ App Build: %@ @@ -1362,6 +1394,10 @@ swipe action Ungültiger Nachrichten-Hash No comment provided by engineer. + + Badge cannot be verified + badge alert title + Be free in your network @@ -1574,11 +1610,6 @@ in Ihrem Netzwerk Anruf ist bereits beendet! No comment provided by engineer. - - Calls - Anrufe - No comment provided by engineer. - Calls prohibited! Anrufe nicht zugelassen! @@ -1781,6 +1812,10 @@ alert subtitle Der Kanal ist vorübergehend nicht erreichbar alert title + + Channel webpage + No comment provided by engineer. + Channel will be deleted for all subscribers - this cannot be undone! Der Kanal wird für alle Abonnenten gelöscht. Dies kann nicht rückgängig gemacht werden! @@ -1825,6 +1860,10 @@ alert subtitle Chat-Konsole No comment provided by engineer. + + Chat data + No comment provided by engineer. + Chat database Chat-Datenbank @@ -2386,6 +2425,10 @@ Das ist Ihr eigener Einmal-Link! Verbindungen No comment provided by engineer. + + Contact + No comment provided by engineer. + Contact address Kontaktadresse @@ -2476,6 +2519,10 @@ Das ist Ihr eigener Einmal-Link! Kopieren No comment provided by engineer. + + Copy code + No comment provided by engineer. + Copy error Fehlermeldung kopieren @@ -2511,6 +2558,10 @@ Das ist Ihr eigener Einmal-Link! Gruppe mit einem zufälligen Profil erstellen. No comment provided by engineer. + + Create a webpage to show your channel preview to visitors before they subscribe. Host it yourself or use any static hosting. + No comment provided by engineer. + Create file Datei erstellen @@ -3120,9 +3171,9 @@ alert button Details No comment provided by engineer. - - Develop - Entwicklung + + Developer + Entwicklertools No comment provided by engineer. @@ -3130,11 +3181,6 @@ alert button Optionen für Entwickler No comment provided by engineer. - - Developer - Entwicklertools - No comment provided by engineer. - Device Gerät @@ -3646,6 +3692,10 @@ chat item action Geben Sie diesen Gerätenamen ein… No comment provided by engineer. + + Enter webpage URL + No comment provided by engineer. + Enter welcome message… Geben Sie eine Begrüßungsmeldung ein … @@ -4652,6 +4702,10 @@ Fehler: %2$@ Das Gruppenprofil wurde geändert. Wenn Sie es speichern, wird das aktualisierte Profil an die Gruppenmitglieder gesendet. alert message + + Group webpage + No comment provided by engineer. + Group welcome message Gruppen-Begrüßungsmeldung @@ -4677,6 +4731,10 @@ Fehler: %2$@ Hilfe No comment provided by engineer. + + Help & support + No comment provided by engineer. + Help admins moderating their groups. Helfen Sie Administratoren bei der Moderation ihrer Gruppen. @@ -5162,6 +5220,10 @@ Weitere Verbesserungen sind bald verfügbar! Es sieht so aus, als ob Sie bereits über diesen Link verbunden sind. Wenn das nicht der Fall ist, gab es einen Fehler (%@). No comment provided by engineer. + + It will be shown to subscribers and used to allow loading the preview. + No comment provided by engineer. + Italian interface Italienische Bedienoberfläche @@ -5267,7 +5329,7 @@ Das ist Ihr Link für die Gruppe %@! Learn more Mehr erfahren - No comment provided by engineer. + badge alert button Leave @@ -5819,6 +5881,10 @@ Das ist Ihr Link für die Gruppe %@! Weitere Verbesserungen sind bald verfügbar! No comment provided by engineer. + + More privacy + No comment provided by engineer. + More reliable network connection. Zuverlässigere Netzwerkverbindung. @@ -6441,6 +6507,10 @@ Dies erfordert die Aktivierung eines VPNs. Nur Ihr Kontakt kann Sprachnachrichten versenden. No comment provided by engineer. + + Only your page above can show the preview. + No comment provided by engineer. + Open Öffnen @@ -6888,11 +6958,6 @@ Fehler: %@ Bisher verbundene Server No comment provided by engineer. - - Privacy & security - Datenschutz & Sicherheit - No comment provided by engineer. - Privacy for your customers. Schutz der Privatsphäre Ihrer Kunden. @@ -7400,6 +7465,10 @@ swipe action Passwort aus dem Schlüsselbund entfernen? No comment provided by engineer. + + Remove relay + No comment provided by engineer. + Remove relay? alert title @@ -7695,6 +7764,10 @@ chat item action Speichern und Gruppenmitglieder benachrichtigen No comment provided by engineer. + + Save and notify members + No comment provided by engineer. + Save and notify subscribers Speichern und Abonnenten benachrichtigen @@ -7765,6 +7838,10 @@ chat item action Alle Server speichern? alert title + + Save webpage settings? + alert title + Save welcome message? Begrüßungsmeldung speichern? @@ -8880,9 +8957,8 @@ Die Relais-Adresse wurde zur Einrichtung dieses Relais für diesen Kanal verwend Nicht beachtete Abonnements No comment provided by engineer. - - Support SimpleX Chat - Unterstützung von SimpleX Chat + + Support the project No comment provided by engineer. @@ -9108,6 +9184,10 @@ Dies kann passieren, wenn es einen Fehler gegeben hat oder die Verbindung kompro Die Änderung des Datenbank-Passworts konnte nicht abgeschlossen werden. No comment provided by engineer. + + The badge is signed with a key that this version of the app does not recognize. Update the app to verify this badge. + badge alert + The code you scanned is not a SimpleX link QR code. Der von Ihnen gescannte Code ist kein SimpleX-Link-QR-Code. @@ -9277,9 +9357,13 @@ in dem Sie Ihre Kontakte und Gruppen besitzen. This action cannot be undone - your profile, contacts, messages and files will be irreversibly lost. - Ihr Profil, Ihre Kontakte, Nachrichten und Dateien gehen unwiderruflich verloren. Diese Aktion kann nicht rückgängig gemacht werden! + Ihr Profil, Ihre Kontakte, Nachrichten und Dateien gehen unwiderruflich verloren. Diese Aktion kann nicht rückgängig gemacht werden. No comment provided by engineer. + + This badge could not be verified and may not be genuine. + badge alert + This chat is protected by end-to-end encryption. Dieser Chat ist durch Ende-zu-Ende-Verschlüsselung geschützt. @@ -9671,6 +9755,10 @@ Bitten Sie Ihren Kontakt darum einen weiteren Verbindungs-Link zu erzeugen, um s Unsupported contact name alert title + + Unverified badge + badge alert title + Up to 100 last messages are sent to new members. Bis zu 100 der letzten Nachrichten werden an neue Mitglieder gesendet. @@ -9901,6 +9989,10 @@ Bitten Sie Ihren Kontakt darum einen weiteren Verbindungs-Link zu erzeugen, um s Web-Port nutzen No comment provided by engineer. + + Used chat relays do not support webpages. + No comment provided by engineer. + User selection Benutzer-Auswahl @@ -10106,6 +10198,14 @@ Bitten Sie Ihren Kontakt darum einen weiteren Verbindungs-Link zu erzeugen, um s WebRTC ICE-Server No comment provided by engineer. + + Webpage code + No comment provided by engineer. + + + Webpage settings were changed. If you save, the updated settings will be sent to subscribers. + alert message + Welcome %@! Willkommen %@! @@ -10328,9 +10428,8 @@ Verbindungsanfrage wiederholen? Sie können diese später in den Einstellungen aktivieren No comment provided by engineer. - - You can enable them later via app Privacy & Security settings. - Sie können diese später in den Datenschutz & Sicherheits-Einstellungen der App aktivieren. + + You can enable them later via app Your privacy settings. No comment provided by engineer. @@ -10393,6 +10492,10 @@ Verbindungsanfrage wiederholen? Sie können in der Chat-Liste weiterhin die Unterhaltung mit %@ einsehen. No comment provided by engineer. + + You can support SimpleX starting from v7 of the app. + badge alert + You can turn on SimpleX Lock via Settings. Sie können die SimpleX-Sperre über die Einstellungen aktivieren. @@ -10599,11 +10702,6 @@ Verbindungsanfrage wiederholen? Ihr Kanal No comment provided by engineer. - - Your chat database - Chat-Datenbank - No comment provided by engineer. - Your chat database is not encrypted - set passphrase to encrypt it. Ihre Chat-Datenbank ist nicht verschlüsselt. Bitte legen Sie ein Passwort fest, um sie zu schützen. @@ -10806,6 +10904,10 @@ Relais können auf Kanalnachrichten zugreifen. hat Sie angenommen rcv group event chat item + + acknowledged roster + No comment provided by engineer. + active Aktiv @@ -11278,6 +11380,10 @@ pref value Stunden time unit + + https:// + No comment provided by engineer. + iOS Keychain is used to securely store passphrase - it allows receiving push notifications. Für die sichere Speicherung des Passworts wird der iOS Schlüsselbund verwendet - dies erlaubt den Empfang von Push-Benachrichtigungen. @@ -11770,11 +11876,6 @@ Zuletzt empfangene Nachricht: %2$@ v%@ No comment provided by engineer. - - v%@ (%@) - v%@ (%@) - No comment provided by engineer. - via %@ via %@ @@ -12225,9 +12326,8 @@ Zuletzt empfangene Nachricht: %2$@ Falsches Datenbank-Passwort No comment provided by engineer. - - You can allow sharing in Privacy & Security / SimpleX Lock settings. - Sie können das Teilen in den Einstellungen zu Datenschutz & Sicherheit / SimpleX-Sperre erlauben. + + You can allow sharing in Your privacy / SimpleX Lock settings. No comment provided by engineer. diff --git a/apps/ios/SimpleX Localizations/en.xcloc/Localized Contents/en.xliff b/apps/ios/SimpleX Localizations/en.xcloc/Localized Contents/en.xliff index bd498d53e3..d375d20396 100644 --- a/apps/ios/SimpleX Localizations/en.xcloc/Localized Contents/en.xliff +++ b/apps/ios/SimpleX Localizations/en.xcloc/Localized Contents/en.xliff @@ -35,6 +35,11 @@ #secret# No comment provided by engineer. + + %1$@ supported SimpleX Chat. The badge expired on %2$@. + %1$@ supported SimpleX Chat. The badge expired on %2$@. + badge alert + %@ %@ @@ -85,6 +90,11 @@ %@ downloaded No comment provided by engineer. + + %@ invested in SimpleX Chat crowdfunding. + %@ invested in SimpleX Chat crowdfunding. + badge alert + %@ is connected! %@ is connected! @@ -110,6 +120,11 @@ %@ servers No comment provided by engineer. + + %@ supports SimpleX Chat. + %@ supports SimpleX Chat. + badge alert + %@ uploaded %@ uploaded @@ -766,6 +781,11 @@ swipe action Add profile No comment provided by engineer. + + Add relay + Add relay + No comment provided by engineer. + Add relays Add relays @@ -791,6 +811,11 @@ swipe action Add team members No comment provided by engineer. + + Add this code to your webpage. It will display the preview of your channel / group. + Add this code to your webpage. It will display the preview of your channel / group. + No comment provided by engineer. + Add to another device Add to another device @@ -871,6 +896,11 @@ swipe action Advanced network settings No comment provided by engineer. + + Advanced options + Advanced options + No comment provided by engineer. + Advanced settings Advanced settings @@ -981,6 +1011,11 @@ swipe action Allow No comment provided by engineer. + + Allow anyone to embed + Allow anyone to embed + No comment provided by engineer. + Allow calls only if your contact allows them. Allow calls only if your contact allows them. @@ -1156,6 +1191,11 @@ swipe action Answer call No comment provided by engineer. + + Any webpage can show the preview. + Any webpage can show the preview. + No comment provided by engineer. + App build: %@ App build: %@ @@ -1366,6 +1406,11 @@ swipe action Bad message hash No comment provided by engineer. + + Badge cannot be verified + Badge cannot be verified + badge alert title + Be free in your network @@ -1578,11 +1623,6 @@ in your network Call already ended! No comment provided by engineer. - - Calls - Calls - No comment provided by engineer. - Calls prohibited! Calls prohibited! @@ -1787,6 +1827,11 @@ alert subtitle Channel temporarily unavailable alert title + + Channel webpage + Channel webpage + No comment provided by engineer. + Channel will be deleted for all subscribers - this cannot be undone! Channel will be deleted for all subscribers - this cannot be undone! @@ -1832,6 +1877,11 @@ alert subtitle Chat console No comment provided by engineer. + + Chat data + Chat data + No comment provided by engineer. + Chat database Chat database @@ -2395,6 +2445,11 @@ This is your own one-time link! Connections No comment provided by engineer. + + Contact + Contact + No comment provided by engineer. + Contact address Contact address @@ -2485,6 +2540,11 @@ This is your own one-time link! Copy No comment provided by engineer. + + Copy code + Copy code + No comment provided by engineer. + Copy error Copy error @@ -2520,6 +2580,11 @@ This is your own one-time link! Create a group using a random profile. No comment provided by engineer. + + Create a webpage to show your channel preview to visitors before they subscribe. Host it yourself or use any static hosting. + Create a webpage to show your channel preview to visitors before they subscribe. Host it yourself or use any static hosting. + No comment provided by engineer. + Create file Create file @@ -3130,9 +3195,9 @@ alert button Details No comment provided by engineer. - - Develop - Develop + + Developer + Developer No comment provided by engineer. @@ -3140,11 +3205,6 @@ alert button Developer options No comment provided by engineer. - - Developer - Developer - No comment provided by engineer. - Device Device @@ -3656,6 +3716,11 @@ chat item action Enter this device name… No comment provided by engineer. + + Enter webpage URL + Enter webpage URL + No comment provided by engineer. + Enter welcome message… Enter welcome message… @@ -4664,6 +4729,11 @@ Error: %2$@ Group profile was changed. If you save it, the updated profile will be sent to group members. alert message + + Group webpage + Group webpage + No comment provided by engineer. + Group welcome message Group welcome message @@ -4689,6 +4759,11 @@ Error: %2$@ Help No comment provided by engineer. + + Help & support + Help & support + No comment provided by engineer. + Help admins moderating their groups. Help admins moderating their groups. @@ -5174,6 +5249,11 @@ More improvements are coming soon! It seems like you are already connected via this link. If it is not the case, there was an error (%@). No comment provided by engineer. + + It will be shown to subscribers and used to allow loading the preview. + It will be shown to subscribers and used to allow loading the preview. + No comment provided by engineer. + Italian interface Italian interface @@ -5279,7 +5359,7 @@ This is your link for group %@! Learn more Learn more - No comment provided by engineer. + badge alert button Leave @@ -5831,6 +5911,11 @@ This is your link for group %@! More improvements are coming soon! No comment provided by engineer. + + More privacy + More privacy + No comment provided by engineer. + More reliable network connection. More reliable network connection. @@ -6455,6 +6540,11 @@ Requires compatible VPN. Only your contact can send voice messages. No comment provided by engineer. + + Only your page above can show the preview. + Only your page above can show the preview. + No comment provided by engineer. + Open Open @@ -6903,11 +6993,6 @@ Error: %@ Previously connected servers No comment provided by engineer. - - Privacy & security - Privacy & security - No comment provided by engineer. - Privacy for your customers. Privacy for your customers. @@ -7417,6 +7502,11 @@ swipe action Remove passphrase from keychain? No comment provided by engineer. + + Remove relay + Remove relay + No comment provided by engineer. + Remove relay? Remove relay? @@ -7713,6 +7803,11 @@ chat item action Save and notify group members No comment provided by engineer. + + Save and notify members + Save and notify members + No comment provided by engineer. + Save and notify subscribers Save and notify subscribers @@ -7783,6 +7878,11 @@ chat item action Save servers? alert title + + Save webpage settings? + Save webpage settings? + alert title + Save welcome message? Save welcome message? @@ -8899,9 +8999,9 @@ Relay address was used to set up this relay for the channel. Subscriptions ignored No comment provided by engineer. - - Support SimpleX Chat - Support SimpleX Chat + + Support the project + Support the project No comment provided by engineer. @@ -9127,6 +9227,11 @@ It can happen because of some bug or when the connection is compromised.The attempt to change database passphrase was not completed. No comment provided by engineer. + + The badge is signed with a key that this version of the app does not recognize. Update the app to verify this badge. + The badge is signed with a key that this version of the app does not recognize. Update the app to verify this badge. + badge alert + The code you scanned is not a SimpleX link QR code. The code you scanned is not a SimpleX link QR code. @@ -9299,6 +9404,11 @@ your contacts and groups. This action cannot be undone - your profile, contacts, messages and files will be irreversibly lost. No comment provided by engineer. + + This badge could not be verified and may not be genuine. + This badge could not be verified and may not be genuine. + badge alert + This chat is protected by end-to-end encryption. This chat is protected by end-to-end encryption. @@ -9694,6 +9804,11 @@ To connect, please ask your contact to create another connection link and check Unsupported contact name alert title + + Unverified badge + Unverified badge + badge alert title + Up to 100 last messages are sent to new members. Up to 100 last messages are sent to new members. @@ -9924,6 +10039,11 @@ To connect, please ask your contact to create another connection link and check Use web port No comment provided by engineer. + + Used chat relays do not support webpages. + Used chat relays do not support webpages. + No comment provided by engineer. + User selection User selection @@ -10129,6 +10249,16 @@ To connect, please ask your contact to create another connection link and check WebRTC ICE servers No comment provided by engineer. + + Webpage code + Webpage code + No comment provided by engineer. + + + Webpage settings were changed. If you save, the updated settings will be sent to subscribers. + Webpage settings were changed. If you save, the updated settings will be sent to subscribers. + alert message + Welcome %@! Welcome %@! @@ -10351,9 +10481,9 @@ Repeat join request? You can enable later via Settings No comment provided by engineer. - - You can enable them later via app Privacy & Security settings. - You can enable them later via app Privacy & Security settings. + + You can enable them later via app Your privacy settings. + You can enable them later via app Your privacy settings. No comment provided by engineer. @@ -10416,6 +10546,11 @@ Repeat join request? You can still view conversation with %@ in the list of chats. No comment provided by engineer. + + You can support SimpleX starting from v7 of the app. + You can support SimpleX starting from v7 of the app. + badge alert + You can turn on SimpleX Lock via Settings. You can turn on SimpleX Lock via Settings. @@ -10622,11 +10757,6 @@ Repeat connection request? Your channel No comment provided by engineer. - - Your chat database - Your chat database - No comment provided by engineer. - Your chat database is not encrypted - set passphrase to encrypt it. Your chat database is not encrypted - set passphrase to encrypt it. @@ -10831,6 +10961,11 @@ Relays can access channel messages. accepted you rcv group event chat item + + acknowledged roster + acknowledged roster + No comment provided by engineer. + active active @@ -11303,6 +11438,11 @@ pref value hours time unit + + https:// + https:// + No comment provided by engineer. + iOS Keychain is used to securely store passphrase - it allows receiving push notifications. iOS Keychain is used to securely store passphrase - it allows receiving push notifications. @@ -11795,11 +11935,6 @@ last received msg: %2$@ v%@ No comment provided by engineer. - - v%@ (%@) - v%@ (%@) - No comment provided by engineer. - via %@ via %@ @@ -12250,9 +12385,9 @@ last received msg: %2$@ Wrong database passphrase No comment provided by engineer. - - You can allow sharing in Privacy & Security / SimpleX Lock settings. - You can allow sharing in Privacy & Security / SimpleX Lock settings. + + You can allow sharing in Your privacy / SimpleX Lock settings. + You can allow sharing in Your privacy / SimpleX Lock settings. No comment provided by engineer. diff --git a/apps/ios/SimpleX Localizations/es.xcloc/Localized Contents/es.xliff b/apps/ios/SimpleX Localizations/es.xcloc/Localized Contents/es.xliff index 60de758c9c..8ed8087d1b 100644 --- a/apps/ios/SimpleX Localizations/es.xcloc/Localized Contents/es.xliff +++ b/apps/ios/SimpleX Localizations/es.xcloc/Localized Contents/es.xliff @@ -35,6 +35,10 @@ #secreto# No comment provided by engineer. + + %1$@ supported SimpleX Chat. The badge expired on %2$@. + badge alert + %@ %@ @@ -85,6 +89,10 @@ %@ descargado No comment provided by engineer. + + %@ invested in SimpleX Chat crowdfunding. + badge alert + %@ is connected! %@ ¡está conectado! @@ -110,6 +118,10 @@ %@ servidores No comment provided by engineer. + + %@ supports SimpleX Chat. + badge alert + %@ uploaded %@ subido @@ -765,6 +777,10 @@ swipe action Añadir perfil No comment provided by engineer. + + Add relay + No comment provided by engineer. + Add relays No comment provided by engineer. @@ -788,6 +804,10 @@ swipe action Añadir miembros del equipo No comment provided by engineer. + + Add this code to your webpage. It will display the preview of your channel / group. + No comment provided by engineer. + Add to another device Añadir a otro dispositivo @@ -868,6 +888,10 @@ swipe action Configuración avanzada de red No comment provided by engineer. + + Advanced options + No comment provided by engineer. + Advanced settings Configuración avanzada @@ -978,6 +1002,10 @@ swipe action Se permite No comment provided by engineer. + + Allow anyone to embed + No comment provided by engineer. + Allow calls only if your contact allows them. Se permiten las llamadas pero sólo si tu contacto también las permite. @@ -1153,6 +1181,10 @@ swipe action Responder llamada No comment provided by engineer. + + Any webpage can show the preview. + No comment provided by engineer. + App build: %@ Compilación app: %@ @@ -1362,6 +1394,10 @@ swipe action Hash de mensaje incorrecto No comment provided by engineer. + + Badge cannot be verified + badge alert title + Be free in your network @@ -1574,11 +1610,6 @@ en tu red ¡La llamada ha terminado! No comment provided by engineer. - - Calls - Llamadas - No comment provided by engineer. - Calls prohibited! ¡Llamadas no permitidas! @@ -1781,6 +1812,10 @@ alert subtitle Canales no disponibles temporalmente alert title + + Channel webpage + No comment provided by engineer. + Channel will be deleted for all subscribers - this cannot be undone! El canal será eliminado para todos los suscriptores. ¡No puede deshacerse! @@ -1825,6 +1860,10 @@ alert subtitle Consola de Chat No comment provided by engineer. + + Chat data + No comment provided by engineer. + Chat database Base de datos de SimpleX @@ -2386,6 +2425,10 @@ This is your own one-time link! Conexiones No comment provided by engineer. + + Contact + No comment provided by engineer. + Contact address Dirección de contacto @@ -2476,6 +2519,10 @@ This is your own one-time link! Copiar No comment provided by engineer. + + Copy code + No comment provided by engineer. + Copy error Copiar error @@ -2511,6 +2558,10 @@ This is your own one-time link! Crear grupo usando perfil aleatorio. No comment provided by engineer. + + Create a webpage to show your channel preview to visitors before they subscribe. Host it yourself or use any static hosting. + No comment provided by engineer. + Create file Crear archivo @@ -3120,9 +3171,9 @@ alert button Detalles No comment provided by engineer. - - Develop - Desarrollo + + Developer + Herramientas desarrollo No comment provided by engineer. @@ -3130,11 +3181,6 @@ alert button Opciones desarrollador No comment provided by engineer. - - Developer - Herramientas desarrollo - No comment provided by engineer. - Device Dispositivo @@ -3646,6 +3692,10 @@ chat item action Nombre de este dispositivo… No comment provided by engineer. + + Enter webpage URL + No comment provided by engineer. + Enter welcome message… Deja un mensaje de bienvenida… @@ -4652,6 +4702,10 @@ Error: %2$@ El perfil del grupo ha cambiado. Si lo guardas, el perfil actualizado se enviará a los miembros del grupo. alert message + + Group webpage + No comment provided by engineer. + Group welcome message Mensaje de bienvenida en grupos @@ -4677,6 +4731,10 @@ Error: %2$@ Ayuda No comment provided by engineer. + + Help & support + No comment provided by engineer. + Help admins moderating their groups. Ayuda a los admins a moderar sus grupos. @@ -5162,6 +5220,10 @@ More improvements are coming soon! Parece que ya estás conectado mediante este enlace. Si no es así ha habido un error (%@). No comment provided by engineer. + + It will be shown to subscribers and used to allow loading the preview. + No comment provided by engineer. + Italian interface Interfaz en italiano @@ -5267,7 +5329,7 @@ This is your link for group %@! Learn more Más información - No comment provided by engineer. + badge alert button Leave @@ -5819,6 +5881,10 @@ This is your link for group %@! ¡Pronto habrá más mejoras! No comment provided by engineer. + + More privacy + No comment provided by engineer. + More reliable network connection. Conexión de red más fiable. @@ -6441,6 +6507,10 @@ Requiere activación de la VPN. Sólo tu contacto puede enviar mensajes de voz. No comment provided by engineer. + + Only your page above can show the preview. + No comment provided by engineer. + Open Abrir @@ -6888,11 +6958,6 @@ Error: %@ Servidores conectados previamente No comment provided by engineer. - - Privacy & security - Seguridad y Privacidad - No comment provided by engineer. - Privacy for your customers. Privacidad para tus clientes. @@ -7400,6 +7465,10 @@ swipe action ¿Eliminar contraseña de Keychain? No comment provided by engineer. + + Remove relay + No comment provided by engineer. + Remove relay? alert title @@ -7695,6 +7764,10 @@ chat item action Guardar y notificar grupo No comment provided by engineer. + + Save and notify members + No comment provided by engineer. + Save and notify subscribers Guardar y notificar suscriptores @@ -7765,6 +7838,10 @@ chat item action ¿Guardar servidores? alert title + + Save webpage settings? + alert title + Save welcome message? ¿Guardar mensaje de bienvenida? @@ -8880,9 +8957,8 @@ La dirección del servidor se usó para establecer el servidor para el canal.Suscripciones ignoradas No comment provided by engineer. - - Support SimpleX Chat - Soporte SimpleX Chat + + Support the project No comment provided by engineer. @@ -9108,6 +9184,10 @@ Puede ocurrir por algún bug o cuando la conexión está comprometida. El intento de cambiar la contraseña de la base de datos no se ha completado. No comment provided by engineer. + + The badge is signed with a key that this version of the app does not recognize. Update the app to verify this badge. + badge alert + The code you scanned is not a SimpleX link QR code. El código QR escaneado no es un enlace de SimpleX. @@ -9280,6 +9360,10 @@ y los contactos son tuyos. Esta acción es irreversible. Tu perfil, contactos, mensajes y archivos se perderán irreversiblemente. No comment provided by engineer. + + This badge could not be verified and may not be genuine. + badge alert + This chat is protected by end-to-end encryption. Este chat está protegido por cifrado de extremo a extremo. @@ -9671,6 +9755,10 @@ Para conectarte pide a tu contacto que cree otro enlace y comprueba la conexión Unsupported contact name alert title + + Unverified badge + badge alert title + Up to 100 last messages are sent to new members. Hasta 100 últimos mensajes son enviados a los miembros nuevos. @@ -9901,6 +9989,10 @@ Para conectarte pide a tu contacto que cree otro enlace y comprueba la conexión Usar puerto web No comment provided by engineer. + + Used chat relays do not support webpages. + No comment provided by engineer. + User selection Selección de usuarios @@ -10106,6 +10198,14 @@ Para conectarte pide a tu contacto que cree otro enlace y comprueba la conexión Servidores WebRTC ICE No comment provided by engineer. + + Webpage code + No comment provided by engineer. + + + Webpage settings were changed. If you save, the updated settings will be sent to subscribers. + alert message + Welcome %@! ¡Bienvenido %@! @@ -10328,9 +10428,8 @@ Repeat join request? Puedes activar más tarde en Configuración No comment provided by engineer. - - You can enable them later via app Privacy & Security settings. - Puedes activarlos más tarde en la configuración de Privacidad y Seguridad. + + You can enable them later via app Your privacy settings. No comment provided by engineer. @@ -10393,6 +10492,10 @@ Repeat join request? Aún puedes ver la conversación con %@ en la lista de chats. No comment provided by engineer. + + You can support SimpleX starting from v7 of the app. + badge alert + You can turn on SimpleX Lock via Settings. Puedes activar el Bloqueo SimpleX a través de Configuración. @@ -10599,11 +10702,6 @@ Repeat connection request? Tu canal No comment provided by engineer. - - Your chat database - Base de datos - No comment provided by engineer. - Your chat database is not encrypted - set passphrase to encrypt it. La base de datos no está cifrada - establece una contraseña para cifrarla. @@ -10806,6 +10904,10 @@ Los servidores tienen acceso a los mensajes del canal. te ha admitido rcv group event chat item + + acknowledged roster + No comment provided by engineer. + active activo @@ -11278,6 +11380,10 @@ pref value horas time unit + + https:// + No comment provided by engineer. + iOS Keychain is used to securely store passphrase - it allows receiving push notifications. iOS Keychain se usa para almacenar la contraseña de forma segura. Esto permite recibir notificaciones automáticas. @@ -11770,11 +11876,6 @@ last received msg: %2$@ v%@ No comment provided by engineer. - - v%@ (%@) - v%@ (%@) - No comment provided by engineer. - via %@ mediante %@ @@ -12225,9 +12326,8 @@ last received msg: %2$@ Contraseña incorrecta de la base de datos No comment provided by engineer. - - You can allow sharing in Privacy & Security / SimpleX Lock settings. - Puedes dar permiso para compartir en Privacidad y Seguridad / Bloque SimpleX. + + You can allow sharing in Your privacy / SimpleX Lock settings. No comment provided by engineer. diff --git a/apps/ios/SimpleX Localizations/fi.xcloc/Localized Contents/fi.xliff b/apps/ios/SimpleX Localizations/fi.xcloc/Localized Contents/fi.xliff index c818fdc472..d1300df5ed 100644 --- a/apps/ios/SimpleX Localizations/fi.xcloc/Localized Contents/fi.xliff +++ b/apps/ios/SimpleX Localizations/fi.xcloc/Localized Contents/fi.xliff @@ -35,6 +35,10 @@ #salaisuus# No comment provided by engineer. + + %1$@ supported SimpleX Chat. The badge expired on %2$@. + badge alert + %@ % @ @@ -82,6 +86,10 @@ %@ downloaded No comment provided by engineer. + + %@ invested in SimpleX Chat crowdfunding. + badge alert + %@ is connected! %@ on yhdistetty! @@ -105,6 +113,10 @@ %@ servers No comment provided by engineer. + + %@ supports SimpleX Chat. + badge alert + %@ uploaded No comment provided by engineer. @@ -692,6 +704,10 @@ swipe action Lisää profiili No comment provided by engineer. + + Add relay + No comment provided by engineer. + Add relays No comment provided by engineer. @@ -714,6 +730,10 @@ swipe action Add team members No comment provided by engineer. + + Add this code to your webpage. It will display the preview of your channel / group. + No comment provided by engineer. + Add to another device Lisää toiseen laitteeseen @@ -784,6 +804,10 @@ swipe action Verkon lisäasetukset No comment provided by engineer. + + Advanced options + No comment provided by engineer. + Advanced settings No comment provided by engineer. @@ -880,6 +904,10 @@ swipe action Salli No comment provided by engineer. + + Allow anyone to embed + No comment provided by engineer. + Allow calls only if your contact allows them. Salli puhelut vain, jos kontaktisi sallii ne. @@ -1041,6 +1069,10 @@ swipe action Vastaa puheluun No comment provided by engineer. + + Any webpage can show the preview. + No comment provided by engineer. + App build: %@ Sovellusversio: %@ @@ -1231,6 +1263,10 @@ swipe action Virheellinen viestin tarkiste No comment provided by engineer. + + Badge cannot be verified + badge alert title + Be free in your network @@ -1408,11 +1444,6 @@ in your network Puhelu on jo päättynyt! No comment provided by engineer. - - Calls - Puhelut - No comment provided by engineer. - Calls prohibited! No comment provided by engineer. @@ -1592,6 +1623,10 @@ alert subtitle Channel temporarily unavailable alert title + + Channel webpage + No comment provided by engineer. + Channel will be deleted for all subscribers - this cannot be undone! No comment provided by engineer. @@ -1629,6 +1664,10 @@ alert subtitle Chat-konsoli No comment provided by engineer. + + Chat data + No comment provided by engineer. + Chat database Chat-tietokanta @@ -2112,6 +2151,10 @@ This is your own one-time link! Connections No comment provided by engineer. + + Contact + No comment provided by engineer. + Contact address chat link info line @@ -2195,6 +2238,10 @@ This is your own one-time link! Kopioi No comment provided by engineer. + + Copy code + No comment provided by engineer. + Copy error No comment provided by engineer. @@ -2225,6 +2272,10 @@ This is your own one-time link! Create a group using a random profile. No comment provided by engineer. + + Create a webpage to show your channel preview to visitors before they subscribe. Host it yourself or use any static hosting. + No comment provided by engineer. + Create file Luo tiedosto @@ -2782,20 +2833,15 @@ alert button Details No comment provided by engineer. - - Develop - Kehitä + + Developer + Kehittäjätyökalut No comment provided by engineer. Developer options No comment provided by engineer. - - Developer - Kehittäjätyökalut - No comment provided by engineer. - Device Laite @@ -3259,6 +3305,10 @@ chat item action Enter this device name… No comment provided by engineer. + + Enter webpage URL + No comment provided by engineer. + Enter welcome message… Kirjoita tervetuloviesti… @@ -4161,6 +4211,10 @@ Error: %2$@ Group profile was changed. If you save it, the updated profile will be sent to group members. alert message + + Group webpage + No comment provided by engineer. + Group welcome message Ryhmän tervetuloviesti @@ -4185,6 +4239,10 @@ Error: %2$@ Apua No comment provided by engineer. + + Help & support + No comment provided by engineer. + Help admins moderating their groups. No comment provided by engineer. @@ -4630,6 +4688,10 @@ More improvements are coming soon! Näyttäisi, että olet jo yhteydessä tämän linkin kautta. Jos näin ei ole, tapahtui virhe (%@). No comment provided by engineer. + + It will be shown to subscribers and used to allow loading the preview. + No comment provided by engineer. + Italian interface Italialainen käyttöliittymä @@ -4726,7 +4788,7 @@ This is your link for group %@! Learn more Lue lisää - No comment provided by engineer. + badge alert button Leave @@ -5216,6 +5278,10 @@ This is your link for group %@! Lisää parannuksia on tulossa pian! No comment provided by engineer. + + More privacy + No comment provided by engineer. + More reliable network connection. No comment provided by engineer. @@ -5768,6 +5834,10 @@ Edellyttää VPN:n sallimista. Vain kontaktisi voi lähettää ääniviestejä. No comment provided by engineer. + + Only your page above can show the preview. + No comment provided by engineer. + Open alert action @@ -6153,11 +6223,6 @@ Error: %@ Previously connected servers No comment provided by engineer. - - Privacy & security - Yksityisyys ja turvallisuus - No comment provided by engineer. - Privacy for your customers. No comment provided by engineer. @@ -6610,6 +6675,10 @@ swipe action Poista tunnuslause avainnipusta? No comment provided by engineer. + + Remove relay + No comment provided by engineer. + Remove relay? alert title @@ -6871,6 +6940,10 @@ chat item action Tallenna ja ilmoita ryhmän jäsenille No comment provided by engineer. + + Save and notify members + No comment provided by engineer. + Save and notify subscribers No comment provided by engineer. @@ -6935,6 +7008,10 @@ chat item action Tallenna palvelimet? alert title + + Save webpage settings? + alert title + Save welcome message? Tallenna tervetuloviesti? @@ -7918,9 +7995,8 @@ Relay address was used to set up this relay for the channel. Subscriptions ignored No comment provided by engineer. - - Support SimpleX Chat - SimpleX Chat tuki + + Support the project No comment provided by engineer. @@ -8123,6 +8199,10 @@ Tämä voi johtua jostain virheestä tai siitä, että yhteys on vaarantunut.Tietokannan tunnuslauseen muuttamista ei suoritettu loppuun. No comment provided by engineer. + + The badge is signed with a key that this version of the app does not recognize. Update the app to verify this badge. + badge alert + The code you scanned is not a SimpleX link QR code. No comment provided by engineer. @@ -8276,6 +8356,10 @@ your contacts and groups. Tätä toimintoa ei voi kumota - profiilisi, kontaktisi, viestisi ja tiedostosi poistuvat peruuttamattomasti. No comment provided by engineer. + + This badge could not be verified and may not be genuine. + badge alert + This chat is protected by end-to-end encryption. E2EE info chat item @@ -8625,6 +8709,10 @@ Jos haluat muodostaa yhteyden, pyydä kontaktiasi luomaan toinen yhteyslinkki ja Unsupported contact name alert title + + Unverified badge + badge alert title + Up to 100 last messages are sent to new members. No comment provided by engineer. @@ -8822,6 +8910,10 @@ Jos haluat muodostaa yhteyden, pyydä kontaktiasi luomaan toinen yhteyslinkki ja Use web port No comment provided by engineer. + + Used chat relays do not support webpages. + No comment provided by engineer. + User selection No comment provided by engineer. @@ -9005,6 +9097,14 @@ Jos haluat muodostaa yhteyden, pyydä kontaktiasi luomaan toinen yhteyslinkki ja WebRTC ICE -palvelimet No comment provided by engineer. + + Webpage code + No comment provided by engineer. + + + Webpage settings were changed. If you save, the updated settings will be sent to subscribers. + alert message + Welcome %@! Tervetuloa %@! @@ -9198,9 +9298,8 @@ Repeat join request? Voit ottaa käyttöön myöhemmin asetusten kautta No comment provided by engineer. - - You can enable them later via app Privacy & Security settings. - Voit ottaa ne käyttöön myöhemmin sovelluksen Yksityisyys & Turvallisuus -asetuksista. + + You can enable them later via app Your privacy settings. No comment provided by engineer. @@ -9257,6 +9356,10 @@ Repeat join request? You can still view conversation with %@ in the list of chats. No comment provided by engineer. + + You can support SimpleX starting from v7 of the app. + badge alert + You can turn on SimpleX Lock via Settings. Voit ottaa SimpleX Lockin käyttöön Asetusten kautta. @@ -9444,11 +9547,6 @@ Repeat connection request? Your channel No comment provided by engineer. - - Your chat database - Keskustelut-tietokantasi - No comment provided by engineer. - Your chat database is not encrypted - set passphrase to encrypt it. Keskustelut-tietokantasi ei ole salattu - aseta tunnuslause sen salaamiseksi. @@ -9631,6 +9729,10 @@ Relays can access channel messages. accepted you rcv group event chat item + + acknowledged roster + No comment provided by engineer. + active No comment provided by engineer. @@ -10072,6 +10174,10 @@ pref value tuntia time unit + + https:// + No comment provided by engineer. + iOS Keychain is used to securely store passphrase - it allows receiving push notifications. iOS-Avainnippua käytetään tunnuslauseen turvalliseen tallentamiseen - se mahdollistaa push-ilmoitusten vastaanottamisen. @@ -10517,11 +10623,6 @@ last received msg: %2$@ v%@ No comment provided by engineer. - - v%@ (%@) - v%@ (%@) - No comment provided by engineer. - via %@ relay hostname @@ -10918,8 +11019,8 @@ last received msg: %2$@ Wrong database passphrase No comment provided by engineer. - - You can allow sharing in Privacy & Security / SimpleX Lock settings. + + You can allow sharing in Your privacy / SimpleX Lock settings. No comment provided by engineer. diff --git a/apps/ios/SimpleX Localizations/fr.xcloc/Localized Contents/fr.xliff b/apps/ios/SimpleX Localizations/fr.xcloc/Localized Contents/fr.xliff index 4d1616df20..2d180fd51e 100644 --- a/apps/ios/SimpleX Localizations/fr.xcloc/Localized Contents/fr.xliff +++ b/apps/ios/SimpleX Localizations/fr.xcloc/Localized Contents/fr.xliff @@ -35,6 +35,10 @@ #secret# No comment provided by engineer. + + %1$@ supported SimpleX Chat. The badge expired on %2$@. + badge alert + %@ %@ @@ -85,6 +89,10 @@ %@ téléchargé No comment provided by engineer. + + %@ invested in SimpleX Chat crowdfunding. + badge alert + %@ is connected! %@ est connecté·e ! @@ -110,6 +118,10 @@ Serveurs %@ No comment provided by engineer. + + %@ supports SimpleX Chat. + badge alert + %@ uploaded %@ envoyé @@ -743,6 +755,10 @@ swipe action Ajouter un profil No comment provided by engineer. + + Add relay + No comment provided by engineer. + Add relays No comment provided by engineer. @@ -766,6 +782,10 @@ swipe action Ajouter des membres à l'équipe No comment provided by engineer. + + Add this code to your webpage. It will display the preview of your channel / group. + No comment provided by engineer. + Add to another device Ajouter à un autre appareil @@ -846,6 +866,10 @@ swipe action Paramètres réseau avancés No comment provided by engineer. + + Advanced options + No comment provided by engineer. + Advanced settings Paramètres avancés @@ -953,6 +977,10 @@ swipe action Autoriser No comment provided by engineer. + + Allow anyone to embed + No comment provided by engineer. + Allow calls only if your contact allows them. Autoriser les appels que si votre contact les autorise. @@ -1125,6 +1153,10 @@ swipe action Répondre à l'appel No comment provided by engineer. + + Any webpage can show the preview. + No comment provided by engineer. + App build: %@ Build de l'app : %@ @@ -1332,6 +1364,10 @@ swipe action Mauvais hash de message No comment provided by engineer. + + Badge cannot be verified + badge alert title + Be free in your network @@ -1532,11 +1568,6 @@ in your network Appel déjà terminé ! No comment provided by engineer. - - Calls - Appels - No comment provided by engineer. - Calls prohibited! Les appels ne sont pas autorisés ! @@ -1727,6 +1758,10 @@ alert subtitle Channel temporarily unavailable alert title + + Channel webpage + No comment provided by engineer. + Channel will be deleted for all subscribers - this cannot be undone! No comment provided by engineer. @@ -1768,6 +1803,10 @@ alert subtitle Console du chat No comment provided by engineer. + + Chat data + No comment provided by engineer. + Chat database Base de données du chat @@ -2312,6 +2351,10 @@ Il s'agit de votre propre lien unique ! Connexions No comment provided by engineer. + + Contact + No comment provided by engineer. + Contact address chat link info line @@ -2400,6 +2443,10 @@ Il s'agit de votre propre lien unique ! Copier No comment provided by engineer. + + Copy code + No comment provided by engineer. + Copy error Erreur de copie @@ -2435,6 +2482,10 @@ Il s'agit de votre propre lien unique ! Création de groupes via un profil aléatoire. No comment provided by engineer. + + Create a webpage to show your channel preview to visitors before they subscribe. Host it yourself or use any static hosting. + No comment provided by engineer. + Create file Créer un fichier @@ -3029,9 +3080,9 @@ alert button Détails No comment provided by engineer. - - Develop - Développer + + Developer + Outils du développeur No comment provided by engineer. @@ -3039,11 +3090,6 @@ alert button Options pour les développeurs No comment provided by engineer. - - Developer - Outils du développeur - No comment provided by engineer. - Device Appareil @@ -3542,6 +3588,10 @@ chat item action Entrez le nom de l'appareil… No comment provided by engineer. + + Enter webpage URL + No comment provided by engineer. + Enter welcome message… Entrez un message de bienvenue… @@ -4524,6 +4574,10 @@ Erreur : %2$@ Group profile was changed. If you save it, the updated profile will be sent to group members. alert message + + Group webpage + No comment provided by engineer. + Group welcome message Message d'accueil du groupe @@ -4548,6 +4602,10 @@ Erreur : %2$@ Aide No comment provided by engineer. + + Help & support + No comment provided by engineer. + Help admins moderating their groups. No comment provided by engineer. @@ -5017,6 +5075,10 @@ D'autres améliorations sont à venir ! Il semblerait que vous êtes déjà connecté via ce lien. Si ce n'est pas le cas, il y a eu une erreur (%@). No comment provided by engineer. + + It will be shown to subscribers and used to allow loading the preview. + No comment provided by engineer. + Italian interface Interface en italien @@ -5120,7 +5182,7 @@ Voici votre lien pour le groupe %@ ! Learn more En savoir plus - No comment provided by engineer. + badge alert button Leave @@ -5645,6 +5707,10 @@ Voici votre lien pour le groupe %@ ! Plus d'améliorations à venir ! No comment provided by engineer. + + More privacy + No comment provided by engineer. + More reliable network connection. Connexion réseau plus fiable. @@ -6230,6 +6296,10 @@ Nécessite l'activation d'un VPN. Seul votre contact peut envoyer des messages vocaux. No comment provided by engineer. + + Only your page above can show the preview. + No comment provided by engineer. + Open Ouvrir @@ -6648,11 +6718,6 @@ Erreur : %@ Serveurs précédemment connectés No comment provided by engineer. - - Privacy & security - Vie privée et sécurité - No comment provided by engineer. - Privacy for your customers. Respect de la vie privée de vos clients. @@ -7136,6 +7201,10 @@ swipe action Supprimer la phrase secrète de la keychain ? No comment provided by engineer. + + Remove relay + No comment provided by engineer. + Remove relay? alert title @@ -7411,6 +7480,10 @@ chat item action Enregistrer et en informer les membres du groupe No comment provided by engineer. + + Save and notify members + No comment provided by engineer. + Save and notify subscribers No comment provided by engineer. @@ -7476,6 +7549,10 @@ chat item action Enregistrer les serveurs ? alert title + + Save webpage settings? + alert title + Save welcome message? Enregistrer le message d'accueil ? @@ -8540,9 +8617,8 @@ Relay address was used to set up this relay for the channel. Inscriptions ignorées No comment provided by engineer. - - Support SimpleX Chat - Supporter SimpleX Chat + + Support the project No comment provided by engineer. @@ -8755,6 +8831,10 @@ Cela peut se produire en raison d'un bug ou lorsque la connexion est compromise. La tentative de modification de la phrase secrète de la base de données n'a pas abouti. No comment provided by engineer. + + The badge is signed with a key that this version of the app does not recognize. Update the app to verify this badge. + badge alert + The code you scanned is not a SimpleX link QR code. Le code scanné n'est pas un code QR de lien SimpleX. @@ -8919,6 +8999,10 @@ your contacts and groups. Cette action ne peut être annulée - votre profil, vos contacts, vos messages et vos fichiers seront irréversiblement perdus. No comment provided by engineer. + + This badge could not be verified and may not be genuine. + badge alert + This chat is protected by end-to-end encryption. Cette discussion est protégée par un chiffrement de bout en bout. @@ -9296,6 +9380,10 @@ Pour vous connecter, veuillez demander à votre contact de créer un autre lien Unsupported contact name alert title + + Unverified badge + badge alert title + Up to 100 last messages are sent to new members. Les 100 derniers messages sont envoyés aux nouveaux membres. @@ -9511,6 +9599,10 @@ Pour vous connecter, veuillez demander à votre contact de créer un autre lien Use web port No comment provided by engineer. + + Used chat relays do not support webpages. + No comment provided by engineer. + User selection Sélection de l'utilisateur @@ -9710,6 +9802,14 @@ Pour vous connecter, veuillez demander à votre contact de créer un autre lien Serveurs WebRTC ICE No comment provided by engineer. + + Webpage code + No comment provided by engineer. + + + Webpage settings were changed. If you save, the updated settings will be sent to subscribers. + alert message + Welcome %@! Bienvenue %@ ! @@ -9928,9 +10028,8 @@ Répéter la demande d'adhésion ? Vous pouvez l'activer ultérieurement via Paramètres No comment provided by engineer. - - You can enable them later via app Privacy & Security settings. - Vous pouvez les activer ultérieurement via les paramètres de Confidentialité et Sécurité de l'application. + + You can enable them later via app Your privacy settings. No comment provided by engineer. @@ -9992,6 +10091,10 @@ Répéter la demande d'adhésion ? Vous pouvez toujours voir la conversation avec %@ dans la liste des discussions. No comment provided by engineer. + + You can support SimpleX starting from v7 of the app. + badge alert + You can turn on SimpleX Lock via Settings. Vous pouvez activer SimpleX Lock dans les Paramètres. @@ -10187,11 +10290,6 @@ Répéter la demande de connexion ? Your channel No comment provided by engineer. - - Your chat database - Votre base de données de chat - No comment provided by engineer. - Your chat database is not encrypted - set passphrase to encrypt it. Votre base de données de chat n'est pas chiffrée - définisez une phrase secrète. @@ -10381,6 +10479,10 @@ Relays can access channel messages. accepted you rcv group event chat item + + acknowledged roster + No comment provided by engineer. + active No comment provided by engineer. @@ -10837,6 +10939,10 @@ pref value heures time unit + + https:// + No comment provided by engineer. + iOS Keychain is used to securely store passphrase - it allows receiving push notifications. La keychain d'iOS est utilisée pour stocker en toute sécurité la phrase secrète - elle permet de recevoir les notifications push. @@ -11308,11 +11414,6 @@ dernier message reçu : %2$@ v%@ No comment provided by engineer. - - v%@ (%@) - v%@ (%@) - No comment provided by engineer. - via %@ relay hostname @@ -11758,9 +11859,8 @@ dernier message reçu : %2$@ Mauvaise phrase secrète pour la base de données No comment provided by engineer. - - You can allow sharing in Privacy & Security / SimpleX Lock settings. - Vous pouvez autoriser le partage dans les paramètres Confidentialité et sécurité / SimpleX Lock. + + You can allow sharing in Your privacy / SimpleX Lock settings. No comment provided by engineer. diff --git a/apps/ios/SimpleX Localizations/hu.xcloc/Localized Contents/hu.xliff b/apps/ios/SimpleX Localizations/hu.xcloc/Localized Contents/hu.xliff index 11b447dc2b..c0ddfedc0b 100644 --- a/apps/ios/SimpleX Localizations/hu.xcloc/Localized Contents/hu.xliff +++ b/apps/ios/SimpleX Localizations/hu.xcloc/Localized Contents/hu.xliff @@ -35,6 +35,10 @@ #titok# No comment provided by engineer. + + %1$@ supported SimpleX Chat. The badge expired on %2$@. + badge alert + %@ %@ @@ -85,6 +89,10 @@ %@ letöltve No comment provided by engineer. + + %@ invested in SimpleX Chat crowdfunding. + badge alert + %@ is connected! %@ kapcsolódott! @@ -110,6 +118,10 @@ %@ kiszolgáló No comment provided by engineer. + + %@ supports SimpleX Chat. + badge alert + %@ uploaded %@ feltöltve @@ -765,6 +777,10 @@ swipe action Profil hozzáadása No comment provided by engineer. + + Add relay + No comment provided by engineer. + Add relays No comment provided by engineer. @@ -788,6 +804,10 @@ swipe action Munkatársak hozzáadása No comment provided by engineer. + + Add this code to your webpage. It will display the preview of your channel / group. + No comment provided by engineer. + Add to another device Hozzáadás egy másik eszközhöz @@ -868,6 +888,10 @@ swipe action Speciális hálózati beállítások No comment provided by engineer. + + Advanced options + No comment provided by engineer. + Advanced settings Speciális beállítások @@ -978,6 +1002,10 @@ swipe action Engedélyezés No comment provided by engineer. + + Allow anyone to embed + No comment provided by engineer. + Allow calls only if your contact allows them. A hívások kezdeményezése csak abban az esetben van engedélyezve, ha a partnere is engedélyezi. @@ -1153,6 +1181,10 @@ swipe action Hívás fogadása No comment provided by engineer. + + Any webpage can show the preview. + No comment provided by engineer. + App build: %@ Alkalmazás összeállítási száma: %@ @@ -1362,6 +1394,10 @@ swipe action Hibás az üzenet kivonata No comment provided by engineer. + + Badge cannot be verified + badge alert title + Be free in your network @@ -1574,11 +1610,6 @@ a saját hálózatában A hívás már véget ért! No comment provided by engineer. - - Calls - Hívások - No comment provided by engineer. - Calls prohibited! A hívások le vannak tiltva! @@ -1781,6 +1812,10 @@ alert subtitle A csatorna ideiglenesen nem érhető el alert title + + Channel webpage + No comment provided by engineer. + Channel will be deleted for all subscribers - this cannot be undone! A csatorna az összes feliratkozó számára törölve lesz – ez a művelet nem vonható vissza! @@ -1825,6 +1860,10 @@ alert subtitle Csevegési konzol No comment provided by engineer. + + Chat data + No comment provided by engineer. + Chat database Csevegési adatbázis @@ -2386,6 +2425,10 @@ Ez a saját egyszer használható meghívója! Kapcsolatok No comment provided by engineer. + + Contact + No comment provided by engineer. + Contact address Kapcsolattartási cím @@ -2476,6 +2519,10 @@ Ez a saját egyszer használható meghívója! Másolás No comment provided by engineer. + + Copy code + No comment provided by engineer. + Copy error Hiba másolása @@ -2511,6 +2558,10 @@ Ez a saját egyszer használható meghívója! Csoport létrehozása véletlenszerű profillal. No comment provided by engineer. + + Create a webpage to show your channel preview to visitors before they subscribe. Host it yourself or use any static hosting. + No comment provided by engineer. + Create file Fájl létrehozása @@ -3120,9 +3171,9 @@ alert button További részletek No comment provided by engineer. - - Develop - Fejlesztés + + Developer + Fejlesztői eszközök No comment provided by engineer. @@ -3130,11 +3181,6 @@ alert button Fejlesztői beállítások No comment provided by engineer. - - Developer - Fejlesztői eszközök - No comment provided by engineer. - Device Eszköz @@ -3646,6 +3692,10 @@ chat item action Adja meg ennek az eszköznek a nevét… No comment provided by engineer. + + Enter webpage URL + No comment provided by engineer. + Enter welcome message… Adja meg az üdvözlőüzenetet… @@ -4652,6 +4702,10 @@ Hiba: %2$@ Csoportprofil módosítva. Ha menti, akkor a frissített profil el lesz küldve a csoport tagjainak. alert message + + Group webpage + No comment provided by engineer. + Group welcome message A csoport üdvözlőüzenete @@ -4677,6 +4731,10 @@ Hiba: %2$@ Súgó No comment provided by engineer. + + Help & support + No comment provided by engineer. + Help admins moderating their groups. Segítsen az adminisztrátoroknak a csoportjaik moderálásában. @@ -5162,6 +5220,10 @@ További fejlesztések hamarosan! Úgy tűnik, már kapcsolódott ezen a hivatkozáson keresztül. Ha ez nem így van, akkor hiba történt (%@). No comment provided by engineer. + + It will be shown to subscribers and used to allow loading the preview. + No comment provided by engineer. + Italian interface Olasz kezelőfelület @@ -5267,7 +5329,7 @@ Ez a saját hivatkozása a(z) %@ nevű csoporthoz! Learn more Tudjon meg többet - No comment provided by engineer. + badge alert button Leave @@ -5819,6 +5881,10 @@ Ez a saját hivatkozása a(z) %@ nevű csoporthoz! Hamarosan további fejlesztések érkeznek! No comment provided by engineer. + + More privacy + No comment provided by engineer. + More reliable network connection. Megbízhatóbb hálózati kapcsolat. @@ -6441,6 +6507,10 @@ VPN engedélyezése szükséges. Csak a partnere küldhet hangüzeneteket. No comment provided by engineer. + + Only your page above can show the preview. + No comment provided by engineer. + Open Megnyitás @@ -6888,11 +6958,6 @@ Hiba: %@ Korábban kapcsolódott kiszolgálók No comment provided by engineer. - - Privacy & security - Adatvédelem és biztonság - No comment provided by engineer. - Privacy for your customers. Saját ügyfeleinek adatvédelme. @@ -7400,6 +7465,10 @@ swipe action Eltávolítja a jelmondatot a kulcstartóból? No comment provided by engineer. + + Remove relay + No comment provided by engineer. + Remove relay? alert title @@ -7695,6 +7764,10 @@ chat item action Mentés és a csoporttagok értesítése No comment provided by engineer. + + Save and notify members + No comment provided by engineer. + Save and notify subscribers Mentés és a feliratkozók értesítése @@ -7765,6 +7838,10 @@ chat item action Menti a kiszolgálókat? alert title + + Save webpage settings? + alert title + Save welcome message? Menti az üdvözlőüzenetet? @@ -8880,9 +8957,8 @@ Az átjátszó címe ennek az átjátszónak a beállítására szolgált a csat Mellőzött feliratkozások No comment provided by engineer. - - Support SimpleX Chat - SimpleX Chat támogatása + + Support the project No comment provided by engineer. @@ -9108,6 +9184,10 @@ Ez valamilyen hiba vagy sérült kapcsolat esetén fordulhat elő. Az adatbázis jelmondatának módosítására tett kísérlet nem fejeződött be. No comment provided by engineer. + + The badge is signed with a key that this version of the app does not recognize. Update the app to verify this badge. + badge alert + The code you scanned is not a SimpleX link QR code. A beolvasott QR-kód nem egy SimpleX-hivatkozás. @@ -9280,6 +9360,10 @@ a saját kapcsolatait és csoportjait. Ez a művelet nem vonható vissza – profiljai, partnerei, üzenetei és fájljai véglegesen törölve lesznek. No comment provided by engineer. + + This badge could not be verified and may not be genuine. + badge alert + This chat is protected by end-to-end encryption. Ez a csevegés végpontok közötti titkosítással védett. @@ -9671,6 +9755,10 @@ A kapcsolódáshoz kérje meg a partnerét, hogy hozzon létre egy másik kapcso Unsupported contact name alert title + + Unverified badge + badge alert title + Up to 100 last messages are sent to new members. Legfeljebb az utolsó 100 üzenet lesz elküldve az új tagok számára. @@ -9901,6 +9989,10 @@ A kapcsolódáshoz kérje meg a partnerét, hogy hozzon létre egy másik kapcso Webport használata No comment provided by engineer. + + Used chat relays do not support webpages. + No comment provided by engineer. + User selection Felhasználó kiválasztása @@ -10106,6 +10198,14 @@ A kapcsolódáshoz kérje meg a partnerét, hogy hozzon létre egy másik kapcso WebRTC ICE-kiszolgálók No comment provided by engineer. + + Webpage code + No comment provided by engineer. + + + Webpage settings were changed. If you save, the updated settings will be sent to subscribers. + alert message + Welcome %@! Üdvözöljük %@! @@ -10328,9 +10428,8 @@ Megismétli a csatlakozási kérést? Később engedélyezheti a beállításokban No comment provided by engineer. - - You can enable them later via app Privacy & Security settings. - Később engedélyezheti őket az „Adatvédelem és biztonság” menüben. + + You can enable them later via app Your privacy settings. No comment provided by engineer. @@ -10393,6 +10492,10 @@ Megismétli a csatlakozási kérést? A(z) %@ nevű partnerével folytatott beszélgetéseit továbbra is megtekintheti a csevegések listájában. No comment provided by engineer. + + You can support SimpleX starting from v7 of the app. + badge alert + You can turn on SimpleX Lock via Settings. A SimpleX-zár az „Adatvédelem és biztonság” menüben kapcsolható be. @@ -10599,11 +10702,6 @@ Megismétli a kapcsolódási kérést? Saját csatorna No comment provided by engineer. - - Your chat database - Csevegési adatbázis - No comment provided by engineer. - Your chat database is not encrypted - set passphrase to encrypt it. A csevegési adatbázis nincs titkosítva – adjon meg egy jelmondatot a titkosításhoz. @@ -10806,6 +10904,10 @@ Az átjátszók hozzáférhetnek a csatornaüzenetekhez. befogadta Önt rcv group event chat item + + acknowledged roster + No comment provided by engineer. + active aktív @@ -11278,6 +11380,10 @@ pref value óra time unit + + https:// + No comment provided by engineer. + iOS Keychain is used to securely store passphrase - it allows receiving push notifications. Az iOS kulcstartó a jelmondat biztonságos tárolására szolgál – lehetővé teszi a leküldéses értesítések fogadását. @@ -11770,11 +11876,6 @@ utoljára fogadott üzenet: %2$@ v%@ No comment provided by engineer. - - v%@ (%@) - v%@ (%@) - No comment provided by engineer. - via %@ a következőn keresztül: %@ @@ -12225,9 +12326,8 @@ utoljára fogadott üzenet: %2$@ Érvénytelen adatbázis-jelmondat No comment provided by engineer. - - You can allow sharing in Privacy & Security / SimpleX Lock settings. - A megosztást az Adatvédelem és biztonság / SimpleX-zár menüben engedélyezheti. + + You can allow sharing in Your privacy / SimpleX Lock settings. No comment provided by engineer. diff --git a/apps/ios/SimpleX Localizations/it.xcloc/Localized Contents/it.xliff b/apps/ios/SimpleX Localizations/it.xcloc/Localized Contents/it.xliff index 876cdb10bb..ae720efdeb 100644 --- a/apps/ios/SimpleX Localizations/it.xcloc/Localized Contents/it.xliff +++ b/apps/ios/SimpleX Localizations/it.xcloc/Localized Contents/it.xliff @@ -35,6 +35,10 @@ #segreto# No comment provided by engineer. + + %1$@ supported SimpleX Chat. The badge expired on %2$@. + badge alert + %@ %@ @@ -85,6 +89,10 @@ %@ scaricati No comment provided by engineer. + + %@ invested in SimpleX Chat crowdfunding. + badge alert + %@ is connected! %@ è connesso/a! @@ -110,6 +118,10 @@ %@ server No comment provided by engineer. + + %@ supports SimpleX Chat. + badge alert + %@ uploaded %@ caricati @@ -765,6 +777,10 @@ swipe action Aggiungi profilo No comment provided by engineer. + + Add relay + No comment provided by engineer. + Add relays No comment provided by engineer. @@ -788,6 +804,10 @@ swipe action Aggiungi membri del team No comment provided by engineer. + + Add this code to your webpage. It will display the preview of your channel / group. + No comment provided by engineer. + Add to another device Aggiungi ad un altro dispositivo @@ -868,6 +888,10 @@ swipe action Impostazioni di rete avanzate No comment provided by engineer. + + Advanced options + No comment provided by engineer. + Advanced settings Impostazioni avanzate @@ -978,6 +1002,10 @@ swipe action Consenti No comment provided by engineer. + + Allow anyone to embed + No comment provided by engineer. + Allow calls only if your contact allows them. Consenti le chiamate solo se il tuo contatto le consente. @@ -1153,6 +1181,10 @@ swipe action Rispondi alla chiamata No comment provided by engineer. + + Any webpage can show the preview. + No comment provided by engineer. + App build: %@ Build dell'app: %@ @@ -1362,6 +1394,10 @@ swipe action Hash del messaggio errato No comment provided by engineer. + + Badge cannot be verified + badge alert title + Be free in your network @@ -1574,11 +1610,6 @@ nella tua rete Chiamata già terminata! No comment provided by engineer. - - Calls - Chiamate - No comment provided by engineer. - Calls prohibited! Chiamate proibite! @@ -1781,6 +1812,10 @@ alert subtitle Canale non disponibile temporaneamente alert title + + Channel webpage + No comment provided by engineer. + Channel will be deleted for all subscribers - this cannot be undone! Il canale verrà eliminato per tutti gli iscritti, non è reversibile! @@ -1825,6 +1860,10 @@ alert subtitle Console della chat No comment provided by engineer. + + Chat data + No comment provided by engineer. + Chat database Database della chat @@ -2386,6 +2425,10 @@ Questo è il tuo link una tantum! Connessioni No comment provided by engineer. + + Contact + No comment provided by engineer. + Contact address Indirizzo di contatto @@ -2476,6 +2519,10 @@ Questo è il tuo link una tantum! Copia No comment provided by engineer. + + Copy code + No comment provided by engineer. + Copy error Copia errore @@ -2511,6 +2558,10 @@ Questo è il tuo link una tantum! Crea un gruppo usando un profilo casuale. No comment provided by engineer. + + Create a webpage to show your channel preview to visitors before they subscribe. Host it yourself or use any static hosting. + No comment provided by engineer. + Create file Crea file @@ -3120,9 +3171,9 @@ alert button Dettagli No comment provided by engineer. - - Develop - Sviluppa + + Developer + Strumenti di sviluppo No comment provided by engineer. @@ -3130,11 +3181,6 @@ alert button Opzioni sviluppatore No comment provided by engineer. - - Developer - Strumenti di sviluppo - No comment provided by engineer. - Device Dispositivo @@ -3646,6 +3692,10 @@ chat item action Inserisci il nome di questo dispositivo… No comment provided by engineer. + + Enter webpage URL + No comment provided by engineer. + Enter welcome message… Inserisci il messaggio di benvenuto… @@ -4652,6 +4702,10 @@ Errore: %2$@ Il profilo del gruppo è stato cambiato. Se lo salvi, il profilo aggiornato verrà inviato ai membri del gruppo. alert message + + Group webpage + No comment provided by engineer. + Group welcome message Messaggio di benvenuto del gruppo @@ -4677,6 +4731,10 @@ Errore: %2$@ Aiuto No comment provided by engineer. + + Help & support + No comment provided by engineer. + Help admins moderating their groups. Aiuta gli amministratori a moderare i loro gruppi. @@ -5162,6 +5220,10 @@ Altri miglioramenti sono in arrivo! Sembra che tu sia già connesso tramite questo link. In caso contrario, c'è stato un errore (%@). No comment provided by engineer. + + It will be shown to subscribers and used to allow loading the preview. + No comment provided by engineer. + Italian interface Interfaccia italiana @@ -5267,7 +5329,7 @@ Questo è il tuo link per il gruppo %@! Learn more Maggiori informazioni - No comment provided by engineer. + badge alert button Leave @@ -5819,6 +5881,10 @@ Questo è il tuo link per il gruppo %@! Altri miglioramenti sono in arrivo! No comment provided by engineer. + + More privacy + No comment provided by engineer. + More reliable network connection. Connessione di rete più affidabile. @@ -6441,6 +6507,10 @@ Richiede l'attivazione della VPN. Solo il tuo contatto può inviare messaggi vocali. No comment provided by engineer. + + Only your page above can show the preview. + No comment provided by engineer. + Open Apri @@ -6888,11 +6958,6 @@ Errore: %@ Server precedentemente connessi No comment provided by engineer. - - Privacy & security - Privacy e sicurezza - No comment provided by engineer. - Privacy for your customers. Privacy per i tuoi clienti. @@ -7400,6 +7465,10 @@ swipe action Rimuovere la password dal portachiavi? No comment provided by engineer. + + Remove relay + No comment provided by engineer. + Remove relay? alert title @@ -7695,6 +7764,10 @@ chat item action Salva e avvisa i membri del gruppo No comment provided by engineer. + + Save and notify members + No comment provided by engineer. + Save and notify subscribers Salva e avvisa gli iscritti @@ -7765,6 +7838,10 @@ chat item action Salvare i server? alert title + + Save webpage settings? + alert title + Save welcome message? Salvare il messaggio di benvenuto? @@ -8880,9 +8957,8 @@ L'indirizzo del relay è stato usato per impostare questo relay per il canale.Iscrizioni ignorate No comment provided by engineer. - - Support SimpleX Chat - Supporta SimpleX Chat + + Support the project No comment provided by engineer. @@ -9108,6 +9184,10 @@ Può accadere a causa di qualche bug o quando la connessione è compromessa.Il tentativo di cambiare la password del database non è stato completato. No comment provided by engineer. + + The badge is signed with a key that this version of the app does not recognize. Update the app to verify this badge. + badge alert + The code you scanned is not a SimpleX link QR code. Il codice che hai scansionato non è un codice QR di link SimpleX. @@ -9280,6 +9360,10 @@ i tuoi contatti e i tuoi gruppi. Questa azione non può essere annullata: il tuo profilo, i contatti, i messaggi e i file andranno persi in modo irreversibile. No comment provided by engineer. + + This badge could not be verified and may not be genuine. + badge alert + This chat is protected by end-to-end encryption. Questa chat è protetta da crittografia end-to-end. @@ -9671,6 +9755,10 @@ Per connetterti, chiedi al tuo contatto di creare un altro link di connessione e Unsupported contact name alert title + + Unverified badge + badge alert title + Up to 100 last messages are sent to new members. Vengono inviati ai nuovi membri fino a 100 ultimi messaggi. @@ -9901,6 +9989,10 @@ Per connetterti, chiedi al tuo contatto di creare un altro link di connessione e Usa porta web No comment provided by engineer. + + Used chat relays do not support webpages. + No comment provided by engineer. + User selection Selezione utente @@ -10106,6 +10198,14 @@ Per connetterti, chiedi al tuo contatto di creare un altro link di connessione e Server WebRTC ICE No comment provided by engineer. + + Webpage code + No comment provided by engineer. + + + Webpage settings were changed. If you save, the updated settings will be sent to subscribers. + alert message + Welcome %@! Benvenuto/a %@! @@ -10328,9 +10428,8 @@ Ripetere la richiesta di ingresso? Puoi attivarle più tardi nelle impostazioni No comment provided by engineer. - - You can enable them later via app Privacy & Security settings. - Puoi attivarle più tardi nelle impostazioni di privacy e sicurezza dell'app. + + You can enable them later via app Your privacy settings. No comment provided by engineer. @@ -10393,6 +10492,10 @@ Ripetere la richiesta di ingresso? Puoi ancora vedere la conversazione con %@ nell'elenco delle chat. No comment provided by engineer. + + You can support SimpleX starting from v7 of the app. + badge alert + You can turn on SimpleX Lock via Settings. Puoi attivare SimpleX Lock tramite le impostazioni. @@ -10599,11 +10702,6 @@ Ripetere la richiesta di connessione? Il tuo canale No comment provided by engineer. - - Your chat database - Il tuo database della chat - No comment provided by engineer. - Your chat database is not encrypted - set passphrase to encrypt it. Il tuo database della chat non è crittografato: imposta la password per crittografarlo. @@ -10806,6 +10904,10 @@ I relay hanno accesso ai messaggi del canale. ti ha accettato/a rcv group event chat item + + acknowledged roster + No comment provided by engineer. + active attivo @@ -11278,6 +11380,10 @@ pref value ore time unit + + https:// + No comment provided by engineer. + iOS Keychain is used to securely store passphrase - it allows receiving push notifications. Il portachiavi di iOS viene usato per archiviare in modo sicuro la password; consente di ricevere notifiche push. @@ -11770,11 +11876,6 @@ ultimo msg ricevuto: %2$@ v%@ No comment provided by engineer. - - v%@ (%@) - v%@ (%@) - No comment provided by engineer. - via %@ via %@ @@ -12225,9 +12326,8 @@ ultimo msg ricevuto: %2$@ Password del database sbagliata No comment provided by engineer. - - You can allow sharing in Privacy & Security / SimpleX Lock settings. - Puoi consentire la condivisione in Privacy e sicurezza / impostazioni di SimpleX Lock. + + You can allow sharing in Your privacy / SimpleX Lock settings. No comment provided by engineer. diff --git a/apps/ios/SimpleX Localizations/ja.xcloc/Localized Contents/ja.xliff b/apps/ios/SimpleX Localizations/ja.xcloc/Localized Contents/ja.xliff index ff0d085c08..4c5970f087 100644 --- a/apps/ios/SimpleX Localizations/ja.xcloc/Localized Contents/ja.xliff +++ b/apps/ios/SimpleX Localizations/ja.xcloc/Localized Contents/ja.xliff @@ -35,6 +35,10 @@ シークレット No comment provided by engineer. + + %1$@ supported SimpleX Chat. The badge expired on %2$@. + badge alert + %@ %@ @@ -85,6 +89,10 @@ %@ ダウンロード済 No comment provided by engineer. + + %@ invested in SimpleX Chat crowdfunding. + badge alert + %@ is connected! %@ 接続中! @@ -110,6 +118,10 @@ %@ サーバー No comment provided by engineer. + + %@ supports SimpleX Chat. + badge alert + %@ uploaded %@ アップロード済 @@ -738,6 +750,10 @@ swipe action プロフィールを追加 No comment provided by engineer. + + Add relay + No comment provided by engineer. + Add relays No comment provided by engineer. @@ -761,6 +777,10 @@ swipe action チームメンバーを追加 No comment provided by engineer. + + Add this code to your webpage. It will display the preview of your channel / group. + No comment provided by engineer. + Add to another device 別の端末に追加 @@ -835,6 +855,10 @@ swipe action ネットワーク詳細設定 No comment provided by engineer. + + Advanced options + No comment provided by engineer. + Advanced settings 詳細設定 @@ -936,6 +960,10 @@ swipe action 許可 No comment provided by engineer. + + Allow anyone to embed + No comment provided by engineer. + Allow calls only if your contact allows them. 連絡先が通話を許可している場合のみ通話を許可する。 @@ -1105,6 +1133,10 @@ swipe action 通話に応答 No comment provided by engineer. + + Any webpage can show the preview. + No comment provided by engineer. + App build: %@ アプリのビルド: %@ @@ -1302,6 +1334,10 @@ swipe action メッセージのハッシュ値問題 No comment provided by engineer. + + Badge cannot be verified + badge alert title + Be free in your network @@ -1480,11 +1516,6 @@ in your network 通話は既に終了してます！ No comment provided by engineer. - - Calls - 通話 - No comment provided by engineer. - Calls prohibited! No comment provided by engineer. @@ -1667,6 +1698,10 @@ alert subtitle Channel temporarily unavailable alert title + + Channel webpage + No comment provided by engineer. + Channel will be deleted for all subscribers - this cannot be undone! No comment provided by engineer. @@ -1705,6 +1740,10 @@ alert subtitle チャットのコンソール No comment provided by engineer. + + Chat data + No comment provided by engineer. + Chat database チャットのデータベース @@ -2207,6 +2246,10 @@ This is your own one-time link! Connections No comment provided by engineer. + + Contact + No comment provided by engineer. + Contact address chat link info line @@ -2290,6 +2333,10 @@ This is your own one-time link! コピー No comment provided by engineer. + + Copy code + No comment provided by engineer. + Copy error No comment provided by engineer. @@ -2320,6 +2367,10 @@ This is your own one-time link! Create a group using a random profile. No comment provided by engineer. + + Create a webpage to show your channel preview to visitors before they subscribe. Host it yourself or use any static hosting. + No comment provided by engineer. + Create file ファイルを作成 @@ -2881,9 +2932,9 @@ alert button Details No comment provided by engineer. - - Develop - 開発 + + Developer + 開発ツール No comment provided by engineer. @@ -2891,11 +2942,6 @@ alert button 開発者向けの設定 No comment provided by engineer. - - Developer - 開発ツール - No comment provided by engineer. - Device 端末 @@ -3082,10 +3128,12 @@ chat item action Download errors + ダウンロードエラー No comment provided by engineer. Download failed + ダウンロード失敗 No comment provided by engineer. @@ -3099,14 +3147,17 @@ chat item action Downloaded + ダウンロード済 No comment provided by engineer. Downloaded files + ダウンロード済ファイル No comment provided by engineer. Downloading archive + アーカイブをダウンロード中 No comment provided by engineer. @@ -3147,6 +3198,7 @@ chat item action Empty message! + メッセージが空です! No comment provided by engineer. @@ -3360,6 +3412,10 @@ chat item action Enter this device name… No comment provided by engineer. + + Enter webpage URL + No comment provided by engineer. + Enter welcome message… ウェルカムメッセージを入力してください… @@ -4262,6 +4318,10 @@ Error: %2$@ Group profile was changed. If you save it, the updated profile will be sent to group members. alert message + + Group webpage + No comment provided by engineer. + Group welcome message グループのウェルカムメッセージ @@ -4286,6 +4346,10 @@ Error: %2$@ ヘルプ No comment provided by engineer. + + Help & support + No comment provided by engineer. + Help admins moderating their groups. No comment provided by engineer. @@ -4731,6 +4795,10 @@ More improvements are coming soon! このリンクからすでに接続されているようです。そうでない場合は、エラー(%@)が発生しました。 No comment provided by engineer. + + It will be shown to subscribers and used to allow loading the preview. + No comment provided by engineer. + Italian interface イタリア語UI @@ -4827,7 +4895,7 @@ This is your link for group %@! Learn more さらに詳しく - No comment provided by engineer. + badge alert button Leave @@ -5318,6 +5386,10 @@ This is your link for group %@! まだまだ改善してまいります！ No comment provided by engineer. + + More privacy + No comment provided by engineer. + More reliable network connection. No comment provided by engineer. @@ -5871,6 +5943,10 @@ VPN を有効にする必要があります。 音声メッセージを送れるのはあなたの連絡相手だけです。 No comment provided by engineer. + + Only your page above can show the preview. + No comment provided by engineer. + Open 開く @@ -6257,11 +6333,6 @@ Error: %@ Previously connected servers No comment provided by engineer. - - Privacy & security - プライバシーとセキュリティ - No comment provided by engineer. - Privacy for your customers. No comment provided by engineer. @@ -6714,6 +6785,10 @@ swipe action キーチェーンからパスフレーズを削除しますか？ No comment provided by engineer. + + Remove relay + No comment provided by engineer. + Remove relay? alert title @@ -6975,6 +7050,10 @@ chat item action 保存して、グループのメンバーにに知らせる No comment provided by engineer. + + Save and notify members + No comment provided by engineer. + Save and notify subscribers No comment provided by engineer. @@ -7039,6 +7118,10 @@ chat item action サーバを保存しますか？ alert title + + Save webpage settings? + alert title + Save welcome message? ウェルカムメッセージを保存しますか？ @@ -8016,9 +8099,8 @@ Relay address was used to set up this relay for the channel. Subscriptions ignored No comment provided by engineer. - - Support SimpleX Chat - Simplex Chatを支援 + + Support the project No comment provided by engineer. @@ -8221,6 +8303,10 @@ It can happen because of some bug or when the connection is compromised.データベースのパスフレーズ変更が完了してません。 No comment provided by engineer. + + The badge is signed with a key that this version of the app does not recognize. Update the app to verify this badge. + badge alert + The code you scanned is not a SimpleX link QR code. No comment provided by engineer. @@ -8374,6 +8460,10 @@ your contacts and groups. あなたのプロフィール、連絡先、メッセージ、ファイルが完全削除されます (※元に戻せません※)。 No comment provided by engineer. + + This badge could not be verified and may not be genuine. + badge alert + This chat is protected by end-to-end encryption. E2EE info chat item @@ -8722,6 +8812,10 @@ To connect, please ask your contact to create another connection link and check Unsupported contact name alert title + + Unverified badge + badge alert title + Up to 100 last messages are sent to new members. No comment provided by engineer. @@ -8919,6 +9013,10 @@ To connect, please ask your contact to create another connection link and check Use web port No comment provided by engineer. + + Used chat relays do not support webpages. + No comment provided by engineer. + User selection No comment provided by engineer. @@ -9102,6 +9200,14 @@ To connect, please ask your contact to create another connection link and check WebRTC ICEサーバ No comment provided by engineer. + + Webpage code + No comment provided by engineer. + + + Webpage settings were changed. If you save, the updated settings will be sent to subscribers. + alert message + Welcome %@! ようこそ %@! @@ -9295,9 +9401,8 @@ Repeat join request? あとで設定から有効にできます No comment provided by engineer. - - You can enable them later via app Privacy & Security settings. - あとでアプリのプライバシーとセキュリティの設定から有効にすることができます。 + + You can enable them later via app Your privacy settings. No comment provided by engineer. @@ -9355,6 +9460,10 @@ Repeat join request? You can still view conversation with %@ in the list of chats. No comment provided by engineer. + + You can support SimpleX starting from v7 of the app. + badge alert + You can turn on SimpleX Lock via Settings. 設定からSimpleXのロックをオンにすることができます。 @@ -9542,11 +9651,6 @@ Repeat connection request? Your channel No comment provided by engineer. - - Your chat database - あなたのチャットデータベース - No comment provided by engineer. - Your chat database is not encrypted - set passphrase to encrypt it. チャット データベースは暗号化されていません - 暗号化するにはパスフレーズを設定してください。 @@ -9729,6 +9833,10 @@ Relays can access channel messages. accepted you rcv group event chat item + + acknowledged roster + No comment provided by engineer. + active No comment provided by engineer. @@ -10054,6 +10162,7 @@ pref value duplicates + 重複 No comment provided by engineer. @@ -10170,6 +10279,10 @@ pref value 時間 time unit + + https:// + No comment provided by engineer. + iOS Keychain is used to securely store passphrase - it allows receiving push notifications. iOS キーチェーンはパスフレーズを安全に保存するために使用され、プッシュ通知を受信できるようになります。 @@ -10615,11 +10728,6 @@ last received msg: %2$@ v%@ No comment provided by engineer. - - v%@ (%@) - v%@ (%@) - No comment provided by engineer. - via %@ relay hostname @@ -11016,8 +11124,8 @@ last received msg: %2$@ Wrong database passphrase No comment provided by engineer. - - You can allow sharing in Privacy & Security / SimpleX Lock settings. + + You can allow sharing in Your privacy / SimpleX Lock settings. No comment provided by engineer. diff --git a/apps/ios/SimpleX Localizations/nl.xcloc/Localized Contents/nl.xliff b/apps/ios/SimpleX Localizations/nl.xcloc/Localized Contents/nl.xliff index a7670a4475..26dec5caf6 100644 --- a/apps/ios/SimpleX Localizations/nl.xcloc/Localized Contents/nl.xliff +++ b/apps/ios/SimpleX Localizations/nl.xcloc/Localized Contents/nl.xliff @@ -35,6 +35,10 @@ #geheim# No comment provided by engineer. + + %1$@ supported SimpleX Chat. The badge expired on %2$@. + badge alert + %@ %@ @@ -85,6 +89,10 @@ %@ gedownload No comment provided by engineer. + + %@ invested in SimpleX Chat crowdfunding. + badge alert + %@ is connected! %@ is verbonden! @@ -110,6 +118,10 @@ %@ servers No comment provided by engineer. + + %@ supports SimpleX Chat. + badge alert + %@ uploaded %@ geüpload @@ -741,6 +753,10 @@ swipe action Profiel toevoegen No comment provided by engineer. + + Add relay + No comment provided by engineer. + Add relays No comment provided by engineer. @@ -764,6 +780,10 @@ swipe action Teamleden toevoegen No comment provided by engineer. + + Add this code to your webpage. It will display the preview of your channel / group. + No comment provided by engineer. + Add to another device Toevoegen aan een ander apparaat @@ -844,6 +864,10 @@ swipe action Geavanceerde netwerk instellingen No comment provided by engineer. + + Advanced options + No comment provided by engineer. + Advanced settings Geavanceerde instellingen @@ -951,6 +975,10 @@ swipe action Toestaan No comment provided by engineer. + + Allow anyone to embed + No comment provided by engineer. + Allow calls only if your contact allows them. Sta oproepen alleen toe als uw contact dit toestaat. @@ -1121,6 +1149,10 @@ swipe action Beantwoord oproep No comment provided by engineer. + + Any webpage can show the preview. + No comment provided by engineer. + App build: %@ App build: %@ @@ -1329,6 +1361,10 @@ swipe action Onjuiste bericht hash No comment provided by engineer. + + Badge cannot be verified + badge alert title + Be free in your network @@ -1529,11 +1565,6 @@ in your network Oproep al beëindigd! No comment provided by engineer. - - Calls - Oproepen - No comment provided by engineer. - Calls prohibited! Bellen niet toegestaan! @@ -1724,6 +1755,10 @@ alert subtitle Channel temporarily unavailable alert title + + Channel webpage + No comment provided by engineer. + Channel will be deleted for all subscribers - this cannot be undone! No comment provided by engineer. @@ -1765,6 +1800,10 @@ alert subtitle Chat console No comment provided by engineer. + + Chat data + No comment provided by engineer. + Chat database Chat database @@ -2312,6 +2351,10 @@ Dit is uw eigen eenmalige link! Verbindingen No comment provided by engineer. + + Contact + No comment provided by engineer. + Contact address chat link info line @@ -2400,6 +2443,10 @@ Dit is uw eigen eenmalige link! Kopiëren No comment provided by engineer. + + Copy code + No comment provided by engineer. + Copy error Kopieerfout @@ -2435,6 +2482,10 @@ Dit is uw eigen eenmalige link! Maak een groep met een willekeurig profiel. No comment provided by engineer. + + Create a webpage to show your channel preview to visitors before they subscribe. Host it yourself or use any static hosting. + No comment provided by engineer. + Create file Bestand maken @@ -3030,9 +3081,9 @@ alert button Details No comment provided by engineer. - - Develop - Ontwikkelen + + Developer + Ontwikkel gereedschap No comment provided by engineer. @@ -3040,11 +3091,6 @@ alert button Ontwikkelaars opties No comment provided by engineer. - - Developer - Ontwikkel gereedschap - No comment provided by engineer. - Device Apparaat @@ -3543,6 +3589,10 @@ chat item action Voer deze apparaatnaam in… No comment provided by engineer. + + Enter webpage URL + No comment provided by engineer. + Enter welcome message… Welkom bericht invoeren… @@ -4530,6 +4580,10 @@ Fout: %2$@ Group profile was changed. If you save it, the updated profile will be sent to group members. alert message + + Group webpage + No comment provided by engineer. + Group welcome message Groep welkom bericht @@ -4555,6 +4609,10 @@ Fout: %2$@ Help No comment provided by engineer. + + Help & support + No comment provided by engineer. + Help admins moderating their groups. Help beheerders bij het modereren van hun groepen. @@ -5033,6 +5091,10 @@ Binnenkort meer verbeteringen! Het lijkt erop dat u al bent verbonden via deze link. Als dit niet het geval is, is er een fout opgetreden (%@). No comment provided by engineer. + + It will be shown to subscribers and used to allow loading the preview. + No comment provided by engineer. + Italian interface Italiaanse interface @@ -5136,7 +5198,7 @@ Dit is jouw link voor groep %@! Learn more Kom meer te weten - No comment provided by engineer. + badge alert button Leave @@ -5671,6 +5733,10 @@ Dit is jouw link voor groep %@! Meer verbeteringen volgen snel! No comment provided by engineer. + + More privacy + No comment provided by engineer. + More reliable network connection. Betrouwbaardere netwerkverbinding. @@ -6271,6 +6337,10 @@ Vereist het inschakelen van VPN. Alleen uw contact kan spraak berichten verzenden. No comment provided by engineer. + + Only your page above can show the preview. + No comment provided by engineer. + Open Open @@ -6695,11 +6765,6 @@ Fout: %@ Eerder verbonden servers No comment provided by engineer. - - Privacy & security - Privacy en beveiliging - No comment provided by engineer. - Privacy for your customers. Privacy voor uw klanten. @@ -7190,6 +7255,10 @@ swipe action Wachtwoord van de keychain verwijderen? No comment provided by engineer. + + Remove relay + No comment provided by engineer. + Remove relay? alert title @@ -7479,6 +7548,10 @@ chat item action Opslaan en groep leden melden No comment provided by engineer. + + Save and notify members + No comment provided by engineer. + Save and notify subscribers No comment provided by engineer. @@ -7545,6 +7618,10 @@ chat item action Servers opslaan? alert title + + Save webpage settings? + alert title + Save welcome message? Welkom bericht opslaan? @@ -8617,9 +8694,8 @@ Relay address was used to set up this relay for the channel. Subscriptions genegeerd No comment provided by engineer. - - Support SimpleX Chat - Ondersteuning van SimpleX Chat + + Support the project No comment provided by engineer. @@ -8834,6 +8910,10 @@ Het kan gebeuren vanwege een bug of wanneer de verbinding is aangetast. De poging om het wachtwoord van de database te wijzigen is niet voltooid. No comment provided by engineer. + + The badge is signed with a key that this version of the app does not recognize. Update the app to verify this badge. + badge alert + The code you scanned is not a SimpleX link QR code. De code die u heeft gescand is geen SimpleX link QR-code. @@ -8999,6 +9079,10 @@ your contacts and groups. Deze actie kan niet ongedaan worden gemaakt. Uw profiel, contacten, berichten en bestanden gaan definitief verloren. No comment provided by engineer. + + This badge could not be verified and may not be genuine. + badge alert + This chat is protected by end-to-end encryption. Deze chat is beveiligd met end-to-end codering. @@ -9380,6 +9464,10 @@ Om verbinding te maken, vraagt u uw contact om een andere verbinding link te mak Unsupported contact name alert title + + Unverified badge + badge alert title + Up to 100 last messages are sent to new members. Er worden maximaal 100 laatste berichten naar nieuwe leden verzonden. @@ -9599,6 +9687,10 @@ Om verbinding te maken, vraagt u uw contact om een andere verbinding link te mak Gebruik een webpoort No comment provided by engineer. + + Used chat relays do not support webpages. + No comment provided by engineer. + User selection Gebruikersselectie @@ -9798,6 +9890,14 @@ Om verbinding te maken, vraagt u uw contact om een andere verbinding link te mak WebRTC ICE servers No comment provided by engineer. + + Webpage code + No comment provided by engineer. + + + Webpage settings were changed. If you save, the updated settings will be sent to subscribers. + alert message + Welcome %@! Welkom %@! @@ -10016,9 +10116,8 @@ Deelnameverzoek herhalen? U kunt later inschakelen via Instellingen No comment provided by engineer. - - You can enable them later via app Privacy & Security settings. - U kunt ze later inschakelen via de privacy- en beveiligingsinstellingen van de app. + + You can enable them later via app Your privacy settings. No comment provided by engineer. @@ -10080,6 +10179,10 @@ Deelnameverzoek herhalen? Je kunt het gesprek met %@ nog steeds bekijken in de lijst met chats. No comment provided by engineer. + + You can support SimpleX starting from v7 of the app. + badge alert + You can turn on SimpleX Lock via Settings. Je kunt SimpleX Vergrendeling aanzetten via Instellingen. @@ -10277,11 +10380,6 @@ Verbindingsverzoek herhalen? Your channel No comment provided by engineer. - - Your chat database - Uw chat database - No comment provided by engineer. - Your chat database is not encrypted - set passphrase to encrypt it. Uw chat database is niet versleuteld, stel een wachtwoord in om deze te versleutelen. @@ -10473,6 +10571,10 @@ Relays can access channel messages. heb je geaccepteerd rcv group event chat item + + acknowledged roster + No comment provided by engineer. + active No comment provided by engineer. @@ -10936,6 +11038,10 @@ pref value uren time unit + + https:// + No comment provided by engineer. + iOS Keychain is used to securely store passphrase - it allows receiving push notifications. iOS-keychain wordt gebruikt om het wachtwoord veilig op te slaan, het maakt het ontvangen van push meldingen mogelijk. @@ -11418,11 +11524,6 @@ laatst ontvangen bericht: %2$@ v%@ No comment provided by engineer. - - v%@ (%@) - v%@ (%@) - No comment provided by engineer. - via %@ relay hostname @@ -11870,9 +11971,8 @@ laatst ontvangen bericht: %2$@ Verkeerde database wachtwoord No comment provided by engineer. - - You can allow sharing in Privacy & Security / SimpleX Lock settings. - U kunt delen toestaan in de instellingen voor Privacy en beveiliging / SimpleX Lock. + + You can allow sharing in Your privacy / SimpleX Lock settings. No comment provided by engineer. diff --git a/apps/ios/SimpleX Localizations/pl.xcloc/Localized Contents/pl.xliff b/apps/ios/SimpleX Localizations/pl.xcloc/Localized Contents/pl.xliff index a60b5891d4..17c56468d0 100644 --- a/apps/ios/SimpleX Localizations/pl.xcloc/Localized Contents/pl.xliff +++ b/apps/ios/SimpleX Localizations/pl.xcloc/Localized Contents/pl.xliff @@ -35,6 +35,10 @@ #sekret# No comment provided by engineer. + + %1$@ supported SimpleX Chat. The badge expired on %2$@. + badge alert + %@ %@ @@ -85,6 +89,10 @@ %@ pobrane No comment provided by engineer. + + %@ invested in SimpleX Chat crowdfunding. + badge alert + %@ is connected! %@ jest połączony! @@ -110,6 +118,10 @@ %@ serwery/ów No comment provided by engineer. + + %@ supports SimpleX Chat. + badge alert + %@ uploaded %@ wgrane @@ -743,6 +755,10 @@ swipe action Dodaj profil No comment provided by engineer. + + Add relay + No comment provided by engineer. + Add relays No comment provided by engineer. @@ -766,6 +782,10 @@ swipe action Dodaj członków zespołu No comment provided by engineer. + + Add this code to your webpage. It will display the preview of your channel / group. + No comment provided by engineer. + Add to another device Dodaj do innego urządzenia @@ -846,6 +866,10 @@ swipe action Zaawansowane ustawienia sieci No comment provided by engineer. + + Advanced options + No comment provided by engineer. + Advanced settings Zaawansowane ustawienia @@ -954,6 +978,10 @@ swipe action Pozwól No comment provided by engineer. + + Allow anyone to embed + No comment provided by engineer. + Allow calls only if your contact allows them. Zezwalaj na połączenia tylko wtedy, gdy Twój kontakt na to pozwala. @@ -1126,6 +1154,10 @@ swipe action Odbierz połączenie No comment provided by engineer. + + Any webpage can show the preview. + No comment provided by engineer. + App build: %@ Kompilacja aplikacji: %@ @@ -1335,6 +1367,10 @@ swipe action Zły hash wiadomości No comment provided by engineer. + + Badge cannot be verified + badge alert title + Be free in your network @@ -1542,11 +1578,6 @@ in your network Połączenie już zakończone! No comment provided by engineer. - - Calls - Połączenia - No comment provided by engineer. - Calls prohibited! Połączenia zakazane! @@ -1738,6 +1769,10 @@ alert subtitle Channel temporarily unavailable alert title + + Channel webpage + No comment provided by engineer. + Channel will be deleted for all subscribers - this cannot be undone! No comment provided by engineer. @@ -1779,6 +1814,10 @@ alert subtitle Konsola czatu No comment provided by engineer. + + Chat data + No comment provided by engineer. + Chat database Baza danych czatu @@ -2329,6 +2368,10 @@ To jest twój jednorazowy link! Połączenia No comment provided by engineer. + + Contact + No comment provided by engineer. + Contact address chat link info line @@ -2418,6 +2461,10 @@ To jest twój jednorazowy link! Kopiuj No comment provided by engineer. + + Copy code + No comment provided by engineer. + Copy error Kopiuj błąd @@ -2453,6 +2500,10 @@ To jest twój jednorazowy link! Utwórz grupę używając losowego profilu. No comment provided by engineer. + + Create a webpage to show your channel preview to visitors before they subscribe. Host it yourself or use any static hosting. + No comment provided by engineer. + Create file Utwórz plik @@ -3053,9 +3104,9 @@ alert button Szczegóły No comment provided by engineer. - - Develop - Deweloperskie + + Developer + Narzędzia deweloperskie No comment provided by engineer. @@ -3063,11 +3114,6 @@ alert button Opcje deweloperskie No comment provided by engineer. - - Developer - Narzędzia deweloperskie - No comment provided by engineer. - Device Urządzenie @@ -3568,6 +3614,10 @@ chat item action Podaj nazwę urządzenia… No comment provided by engineer. + + Enter webpage URL + No comment provided by engineer. + Enter welcome message… Wpisz wiadomość powitalną… @@ -4567,6 +4617,10 @@ Błąd: %2$@ Profil grupy został zmieniony. Jeśli go zapiszesz, zaktualizowany profil zostanie wysłany do członków grupy. alert message + + Group webpage + No comment provided by engineer. + Group welcome message Wiadomość powitalna grupy @@ -4592,6 +4646,10 @@ Błąd: %2$@ Pomoc No comment provided by engineer. + + Help & support + No comment provided by engineer. + Help admins moderating their groups. Pomóż administratorom moderować ich grupy. @@ -5073,6 +5131,10 @@ Wkrótce pojawią się kolejne ulepszenia! Wygląda na to, że jesteś już połączony przez ten link. Jeśli tak nie jest, wystąpił błąd (%@). No comment provided by engineer. + + It will be shown to subscribers and used to allow loading the preview. + No comment provided by engineer. + Italian interface Włoski interfejs @@ -5177,7 +5239,7 @@ To jest twój link do grupy %@! Learn more Dowiedz się więcej - No comment provided by engineer. + badge alert button Leave @@ -5720,6 +5782,10 @@ To jest twój link do grupy %@! Więcej ulepszeń już wkrótce! No comment provided by engineer. + + More privacy + No comment provided by engineer. + More reliable network connection. Bardziej niezawodne połączenia sieciowe. @@ -6326,6 +6392,10 @@ Wymaga włączenia VPN. Tylko Twój kontakt może wysyłać wiadomości głosowe. No comment provided by engineer. + + Only your page above can show the preview. + No comment provided by engineer. + Open Otwórz @@ -6758,11 +6828,6 @@ Błąd: %@ Wcześniej połączone serwery No comment provided by engineer. - - Privacy & security - Prywatność i bezpieczeństwo - No comment provided by engineer. - Privacy for your customers. Prywatność dla Twoich klientów. @@ -7257,6 +7322,10 @@ swipe action Usunąć hasło z pęku kluczy? No comment provided by engineer. + + Remove relay + No comment provided by engineer. + Remove relay? alert title @@ -7549,6 +7618,10 @@ chat item action Zapisz i powiadom członków grupy No comment provided by engineer. + + Save and notify members + No comment provided by engineer. + Save and notify subscribers No comment provided by engineer. @@ -7616,6 +7689,10 @@ chat item action Zapisać serwery? alert title + + Save webpage settings? + alert title + Save welcome message? Zapisać wiadomość powitalną? @@ -8703,9 +8780,8 @@ Relay address was used to set up this relay for the channel. Subskrypcje zignorowane No comment provided by engineer. - - Support SimpleX Chat - Wspieraj SimpleX Chat + + Support the project No comment provided by engineer. @@ -8926,6 +9002,10 @@ Może się to zdarzyć z powodu jakiegoś błędu lub gdy połączenie jest skom Próba zmiany hasła bazy danych nie została zakończona. No comment provided by engineer. + + The badge is signed with a key that this version of the app does not recognize. Update the app to verify this badge. + badge alert + The code you scanned is not a SimpleX link QR code. Kod, który zeskanowałeś nie jest kodem QR linku SimpleX. @@ -9095,6 +9175,10 @@ your contacts and groups. Tego działania nie można cofnąć - Twój profil, kontakty, wiadomości i pliki zostaną nieodwracalnie utracone. No comment provided by engineer. + + This badge could not be verified and may not be genuine. + badge alert + This chat is protected by end-to-end encryption. Ten czat jest chroniony przez szyfrowanie end-to-end. @@ -9481,6 +9565,10 @@ Aby się połączyć, poproś Twój kontakt o utworzenie kolejnego linku połąc Unsupported contact name alert title + + Unverified badge + badge alert title + Up to 100 last messages are sent to new members. Do nowych członków wysyłanych jest do 100 ostatnich wiadomości. @@ -9707,6 +9795,10 @@ Aby się połączyć, poproś Twój kontakt o utworzenie kolejnego linku połąc Użyj portu internetowego No comment provided by engineer. + + Used chat relays do not support webpages. + No comment provided by engineer. + User selection Wybór użytkownika @@ -9907,6 +9999,14 @@ Aby się połączyć, poproś Twój kontakt o utworzenie kolejnego linku połąc Serwery WebRTC ICE No comment provided by engineer. + + Webpage code + No comment provided by engineer. + + + Webpage settings were changed. If you save, the updated settings will be sent to subscribers. + alert message + Welcome %@! Witaj %@! @@ -10128,9 +10228,8 @@ Powtórzyć prośbę dołączenia? Możesz włączyć później w Ustawieniach No comment provided by engineer. - - You can enable them later via app Privacy & Security settings. - Możesz je włączyć później w ustawieniach Prywatności i Bezpieczeństwa aplikacji. + + You can enable them later via app Your privacy settings. No comment provided by engineer. @@ -10192,6 +10291,10 @@ Powtórzyć prośbę dołączenia? Nadal możesz przeglądać rozmowę z %@ na liście czatów. No comment provided by engineer. + + You can support SimpleX starting from v7 of the app. + badge alert + You can turn on SimpleX Lock via Settings. Możesz włączyć blokadę SimpleX poprzez Ustawienia. @@ -10392,11 +10495,6 @@ Powtórzyć prośbę połączenia? Your channel No comment provided by engineer. - - Your chat database - Twoja baza danych czatu - No comment provided by engineer. - Your chat database is not encrypted - set passphrase to encrypt it. Baza danych czatu nie jest szyfrowana - ustaw hasło, aby ją zaszyfrować. @@ -10592,6 +10690,10 @@ Relays can access channel messages. przyjął cię rcv group event chat item + + acknowledged roster + No comment provided by engineer. + active No comment provided by engineer. @@ -11058,6 +11160,10 @@ pref value godziny time unit + + https:// + No comment provided by engineer. + iOS Keychain is used to securely store passphrase - it allows receiving push notifications. iOS Keychain służy do bezpiecznego przechowywania hasła - umożliwia otrzymywanie powiadomień push. @@ -11544,11 +11650,6 @@ ostatnia otrzymana wiadomość: %2$@ v%@ No comment provided by engineer. - - v%@ (%@) - v%@ (%@) - No comment provided by engineer. - via %@ relay hostname @@ -11996,9 +12097,8 @@ ostatnia otrzymana wiadomość: %2$@ Nieprawidłowe hasło bazy danych No comment provided by engineer. - - You can allow sharing in Privacy & Security / SimpleX Lock settings. - Możesz zezwolić na udostępnianie w ustawieniach Prywatność i bezpieczeństwo / Blokada SimpleX. + + You can allow sharing in Your privacy / SimpleX Lock settings. No comment provided by engineer. diff --git a/apps/ios/SimpleX Localizations/ru.xcloc/Localized Contents/ru.xliff b/apps/ios/SimpleX Localizations/ru.xcloc/Localized Contents/ru.xliff index 22df6680f6..4574aa5ec1 100644 --- a/apps/ios/SimpleX Localizations/ru.xcloc/Localized Contents/ru.xliff +++ b/apps/ios/SimpleX Localizations/ru.xcloc/Localized Contents/ru.xliff @@ -35,6 +35,10 @@ #секрет# No comment provided by engineer. + + %1$@ supported SimpleX Chat. The badge expired on %2$@. + badge alert + %@ %@ @@ -85,6 +89,10 @@ %@ загружено No comment provided by engineer. + + %@ invested in SimpleX Chat crowdfunding. + badge alert + %@ is connected! Установлено соединение с %@! @@ -110,6 +118,10 @@ %@ серверы No comment provided by engineer. + + %@ supports SimpleX Chat. + badge alert + %@ uploaded %@ загружено @@ -765,6 +777,10 @@ swipe action Добавить профиль No comment provided by engineer. + + Add relay + No comment provided by engineer. + Add relays No comment provided by engineer. @@ -788,6 +804,10 @@ swipe action Добавить сотрудников No comment provided by engineer. + + Add this code to your webpage. It will display the preview of your channel / group. + No comment provided by engineer. + Add to another device Добавить на другое устройство @@ -868,6 +888,10 @@ swipe action Настройки сети No comment provided by engineer. + + Advanced options + No comment provided by engineer. + Advanced settings Дополнительные настройки @@ -978,6 +1002,10 @@ swipe action Разрешить No comment provided by engineer. + + Allow anyone to embed + No comment provided by engineer. + Allow calls only if your contact allows them. Разрешить звонки, только если их разрешает Ваш контакт. @@ -1153,6 +1181,10 @@ swipe action Принять звонок No comment provided by engineer. + + Any webpage can show the preview. + No comment provided by engineer. + App build: %@ Сборка приложения: %@ @@ -1362,6 +1394,10 @@ swipe action Ошибка хэша сообщения No comment provided by engineer. + + Badge cannot be verified + badge alert title + Be free in your network @@ -1574,11 +1610,6 @@ in your network Звонок уже завершён! No comment provided by engineer. - - Calls - Звонки - No comment provided by engineer. - Calls prohibited! Звонки запрещены! @@ -1781,6 +1812,10 @@ alert subtitle Канал временно недоступен alert title + + Channel webpage + No comment provided by engineer. + Channel will be deleted for all subscribers - this cannot be undone! Канал будет удалён для всех подписчиков - это нельзя отменить! @@ -1825,6 +1860,10 @@ alert subtitle Консоль No comment provided by engineer. + + Chat data + No comment provided by engineer. + Chat database Архив чата @@ -2386,6 +2425,10 @@ This is your own one-time link! Соединения No comment provided by engineer. + + Contact + No comment provided by engineer. + Contact address Адрес контакта @@ -2476,6 +2519,10 @@ This is your own one-time link! Копировать No comment provided by engineer. + + Copy code + No comment provided by engineer. + Copy error Скопировать ошибку @@ -2511,6 +2558,10 @@ This is your own one-time link! Создайте группу, используя случайный профиль. No comment provided by engineer. + + Create a webpage to show your channel preview to visitors before they subscribe. Host it yourself or use any static hosting. + No comment provided by engineer. + Create file Создание файла @@ -3120,9 +3171,9 @@ alert button Подробности No comment provided by engineer. - - Develop - Для разработчиков + + Developer + Инструменты разработчика No comment provided by engineer. @@ -3130,11 +3181,6 @@ alert button Опции разработчика No comment provided by engineer. - - Developer - Инструменты разработчика - No comment provided by engineer. - Device Устройство @@ -3646,6 +3692,10 @@ chat item action Введите имя этого устройства… No comment provided by engineer. + + Enter webpage URL + No comment provided by engineer. + Enter welcome message… Введите приветственное сообщение… @@ -4652,6 +4702,10 @@ Error: %2$@ Профиль группы изменен. Если Вы сохраните его, новый профиль будет отправлен членам группы. alert message + + Group webpage + No comment provided by engineer. + Group welcome message Приветственное сообщение группы @@ -4677,6 +4731,10 @@ Error: %2$@ Помощь No comment provided by engineer. + + Help & support + No comment provided by engineer. + Help admins moderating their groups. Помогайте админам модерировать их группы. @@ -5161,6 +5219,10 @@ More improvements are coming soon! Возможно, Вы уже соединились через эту ссылку. Если это не так, то это ошибка (%@). No comment provided by engineer. + + It will be shown to subscribers and used to allow loading the preview. + No comment provided by engineer. + Italian interface Итальянский интерфейс @@ -5266,7 +5328,7 @@ This is your link for group %@! Learn more Узнать больше - No comment provided by engineer. + badge alert button Leave @@ -5818,6 +5880,10 @@ This is your link for group %@! Дополнительные улучшения скоро! No comment provided by engineer. + + More privacy + No comment provided by engineer. + More reliable network connection. Более надёжное соединение с сетью. @@ -6440,6 +6506,10 @@ Requires compatible VPN. Только Ваш контакт может отправлять голосовые сообщения. No comment provided by engineer. + + Only your page above can show the preview. + No comment provided by engineer. + Open Открыть @@ -6887,11 +6957,6 @@ Error: %@ Ранее подключенные серверы No comment provided by engineer. - - Privacy & security - Конфиденциальность - No comment provided by engineer. - Privacy for your customers. Конфиденциальность для ваших покупателей. @@ -7399,6 +7464,10 @@ swipe action Удалить пароль из Keychain? No comment provided by engineer. + + Remove relay + No comment provided by engineer. + Remove relay? alert title @@ -7694,6 +7763,10 @@ chat item action Сохранить и уведомить членов группы No comment provided by engineer. + + Save and notify members + No comment provided by engineer. + Save and notify subscribers Сохранить и уведомить подписчиков @@ -7764,6 +7837,10 @@ chat item action Сохранить серверы? alert title + + Save webpage settings? + alert title + Save welcome message? Сохранить приветственное сообщение? @@ -8879,9 +8956,8 @@ Relay address was used to set up this relay for the channel. Подписок игнорировано No comment provided by engineer. - - Support SimpleX Chat - Поддержать SimpleX Chat + + Support the project No comment provided by engineer. @@ -9107,6 +9183,10 @@ It can happen because of some bug or when the connection is compromised.Попытка поменять пароль базы данных не была завершена. No comment provided by engineer. + + The badge is signed with a key that this version of the app does not recognize. Update the app to verify this badge. + badge alert + The code you scanned is not a SimpleX link QR code. Этот QR-код не является SimpleX-ccылкой. @@ -9279,6 +9359,10 @@ your contacts and groups. Это действие нельзя отменить - Ваш профиль, контакты, сообщения и файлы будут безвозвратно утеряны. No comment provided by engineer. + + This badge could not be verified and may not be genuine. + badge alert + This chat is protected by end-to-end encryption. Чат защищён сквозным шифрованием. @@ -9670,6 +9754,10 @@ To connect, please ask your contact to create another connection link and check Unsupported contact name alert title + + Unverified badge + badge alert title + Up to 100 last messages are sent to new members. До 100 последних сообщений отправляются новым членам. @@ -9900,6 +9988,10 @@ To connect, please ask your contact to create another connection link and check Использовать веб-порт No comment provided by engineer. + + Used chat relays do not support webpages. + No comment provided by engineer. + User selection Выбор пользователя @@ -10105,6 +10197,14 @@ To connect, please ask your contact to create another connection link and check WebRTC ICE-серверы No comment provided by engineer. + + Webpage code + No comment provided by engineer. + + + Webpage settings were changed. If you save, the updated settings will be sent to subscribers. + alert message + Welcome %@! Здравствуйте %@! @@ -10327,9 +10427,8 @@ Repeat join request? Вы можете включить их позже в Настройках No comment provided by engineer. - - You can enable them later via app Privacy & Security settings. - Вы можете включить их позже в настройках Конфиденциальности. + + You can enable them later via app Your privacy settings. No comment provided by engineer. @@ -10392,6 +10491,10 @@ Repeat join request? Вы по-прежнему можете просмотреть разговор с %@ в списке чатов. No comment provided by engineer. + + You can support SimpleX starting from v7 of the app. + badge alert + You can turn on SimpleX Lock via Settings. Вы можете включить Блокировку SimpleX через Настройки. @@ -10598,11 +10701,6 @@ Repeat connection request? Ваш канал No comment provided by engineer. - - Your chat database - База данных - No comment provided by engineer. - Your chat database is not encrypted - set passphrase to encrypt it. База данных НЕ зашифрована. Установите пароль, чтобы защитить Ваши данные. @@ -10805,6 +10903,10 @@ Relays can access channel messages. Вы приняты rcv group event chat item + + acknowledged roster + No comment provided by engineer. + active активный @@ -11277,6 +11379,10 @@ pref value часов time unit + + https:// + No comment provided by engineer. + iOS Keychain is used to securely store passphrase - it allows receiving push notifications. iOS Keychain используется для безопасного хранения пароля - это позволяет получать мгновенные уведомления. @@ -11769,11 +11875,6 @@ last received msg: %2$@ v%@ No comment provided by engineer. - - v%@ (%@) - v%@ (%@) - No comment provided by engineer. - via %@ через %@ @@ -12224,9 +12325,8 @@ last received msg: %2$@ Неправильный пароль базы данных No comment provided by engineer. - - You can allow sharing in Privacy & Security / SimpleX Lock settings. - Вы можете разрешить функцию Поделиться в настройках Конфиденциальности / Блокировка SimpleX. + + You can allow sharing in Your privacy / SimpleX Lock settings. No comment provided by engineer. diff --git a/apps/ios/SimpleX Localizations/th.xcloc/Localized Contents/th.xliff b/apps/ios/SimpleX Localizations/th.xcloc/Localized Contents/th.xliff index 11d6b28091..c6a57fb777 100644 --- a/apps/ios/SimpleX Localizations/th.xcloc/Localized Contents/th.xliff +++ b/apps/ios/SimpleX Localizations/th.xcloc/Localized Contents/th.xliff @@ -32,6 +32,10 @@ #ความลับ# No comment provided by engineer. + + %1$@ supported SimpleX Chat. The badge expired on %2$@. + badge alert + %@ %@ @@ -78,6 +82,10 @@ %@ downloaded No comment provided by engineer. + + %@ invested in SimpleX Chat crowdfunding. + badge alert + %@ is connected! %@ เชื่อมต่อสำเร็จ! @@ -101,6 +109,10 @@ %@ servers No comment provided by engineer. + + %@ supports SimpleX Chat. + badge alert + %@ uploaded No comment provided by engineer. @@ -684,6 +696,10 @@ swipe action เพิ่มโปรไฟล์ No comment provided by engineer. + + Add relay + No comment provided by engineer. + Add relays No comment provided by engineer. @@ -706,6 +722,10 @@ swipe action Add team members No comment provided by engineer. + + Add this code to your webpage. It will display the preview of your channel / group. + No comment provided by engineer. + Add to another device เพิ่มเข้าไปในอุปกรณ์อื่น @@ -776,6 +796,10 @@ swipe action การตั้งค่าระบบเครือข่ายขั้นสูง No comment provided by engineer. + + Advanced options + No comment provided by engineer. + Advanced settings No comment provided by engineer. @@ -872,6 +896,10 @@ swipe action อนุญาต No comment provided by engineer. + + Allow anyone to embed + No comment provided by engineer. + Allow calls only if your contact allows them. อนุญาตการโทรเฉพาะเมื่อผู้ติดต่อของคุณอนุญาตเท่านั้น. @@ -1033,6 +1061,10 @@ swipe action รับสาย No comment provided by engineer. + + Any webpage can show the preview. + No comment provided by engineer. + App build: %@ รุ่นแอป: %@ @@ -1223,6 +1255,10 @@ swipe action แฮชข้อความไม่ดี No comment provided by engineer. + + Badge cannot be verified + badge alert title + Be free in your network @@ -1400,11 +1436,6 @@ in your network สิ้นสุดการโทรแล้ว! No comment provided by engineer. - - Calls - โทร - No comment provided by engineer. - Calls prohibited! No comment provided by engineer. @@ -1584,6 +1615,10 @@ alert subtitle Channel temporarily unavailable alert title + + Channel webpage + No comment provided by engineer. + Channel will be deleted for all subscribers - this cannot be undone! No comment provided by engineer. @@ -1621,6 +1656,10 @@ alert subtitle คอนโซลแชท No comment provided by engineer. + + Chat data + No comment provided by engineer. + Chat database ฐานข้อมูลแชท @@ -2103,6 +2142,10 @@ This is your own one-time link! Connections No comment provided by engineer. + + Contact + No comment provided by engineer. + Contact address chat link info line @@ -2186,6 +2229,10 @@ This is your own one-time link! คัดลอก No comment provided by engineer. + + Copy code + No comment provided by engineer. + Copy error No comment provided by engineer. @@ -2216,6 +2263,10 @@ This is your own one-time link! Create a group using a random profile. No comment provided by engineer. + + Create a webpage to show your channel preview to visitors before they subscribe. Host it yourself or use any static hosting. + No comment provided by engineer. + Create file สร้างไฟล์ @@ -2770,20 +2821,15 @@ alert button Details No comment provided by engineer. - - Develop - พัฒนา + + Developer + เครื่องมือสำหรับนักพัฒนา No comment provided by engineer. Developer options No comment provided by engineer. - - Developer - เครื่องมือสำหรับนักพัฒนา - No comment provided by engineer. - Device อุปกรณ์ @@ -3245,6 +3291,10 @@ chat item action Enter this device name… No comment provided by engineer. + + Enter webpage URL + No comment provided by engineer. + Enter welcome message… ใส่ข้อความต้อนรับ… @@ -4146,6 +4196,10 @@ Error: %2$@ Group profile was changed. If you save it, the updated profile will be sent to group members. alert message + + Group webpage + No comment provided by engineer. + Group welcome message ข้อความต้อนรับกลุ่ม @@ -4170,6 +4224,10 @@ Error: %2$@ ความช่วยเหลือ No comment provided by engineer. + + Help & support + No comment provided by engineer. + Help admins moderating their groups. No comment provided by engineer. @@ -4613,6 +4671,10 @@ More improvements are coming soon! ดูเหมือนว่าคุณได้เชื่อมต่อผ่านลิงก์นี้แล้ว หากไม่เป็นเช่นนั้น แสดงว่ามีข้อผิดพลาด (%@). No comment provided by engineer. + + It will be shown to subscribers and used to allow loading the preview. + No comment provided by engineer. + Italian interface อินเทอร์เฟซภาษาอิตาลี @@ -4709,7 +4771,7 @@ This is your link for group %@! Learn more ศึกษาเพิ่มเติม - No comment provided by engineer. + badge alert button Leave @@ -5199,6 +5261,10 @@ This is your link for group %@! การปรับปรุงเพิ่มเติมกำลังจะมาเร็ว ๆ นี้! No comment provided by engineer. + + More privacy + No comment provided by engineer. + More reliable network connection. No comment provided by engineer. @@ -5747,6 +5813,10 @@ Requires compatible VPN. ผู้ติดต่อของคุณเท่านั้นที่สามารถส่งข้อความเสียงได้ No comment provided by engineer. + + Only your page above can show the preview. + No comment provided by engineer. + Open alert action @@ -6132,11 +6202,6 @@ Error: %@ Previously connected servers No comment provided by engineer. - - Privacy & security - ความเป็นส่วนตัวและความปลอดภัย - No comment provided by engineer. - Privacy for your customers. No comment provided by engineer. @@ -6587,6 +6652,10 @@ swipe action ลบรหัสผ่านออกจาก keychain หรือไม่? No comment provided by engineer. + + Remove relay + No comment provided by engineer. + Remove relay? alert title @@ -6848,6 +6917,10 @@ chat item action บันทึกและแจ้งให้สมาชิกในกลุ่มทราบ No comment provided by engineer. + + Save and notify members + No comment provided by engineer. + Save and notify subscribers No comment provided by engineer. @@ -6912,6 +6985,10 @@ chat item action บันทึกเซิร์ฟเวอร์? alert title + + Save webpage settings? + alert title + Save welcome message? บันทึกข้อความต้อนรับ? @@ -7891,9 +7968,8 @@ Relay address was used to set up this relay for the channel. Subscriptions ignored No comment provided by engineer. - - Support SimpleX Chat - สนับสนุน SimpleX แชท + + Support the project No comment provided by engineer. @@ -8097,6 +8173,10 @@ It can happen because of some bug or when the connection is compromised.ความพยายามในการเปลี่ยนรหัสผ่านของฐานข้อมูลไม่เสร็จสมบูรณ์ No comment provided by engineer. + + The badge is signed with a key that this version of the app does not recognize. Update the app to verify this badge. + badge alert + The code you scanned is not a SimpleX link QR code. No comment provided by engineer. @@ -8249,6 +8329,10 @@ your contacts and groups. การดำเนินการนี้ไม่สามารถยกเลิกได้ - โปรไฟล์ ผู้ติดต่อ ข้อความ และไฟล์ของคุณจะสูญหายไปอย่างถาวร No comment provided by engineer. + + This badge could not be verified and may not be genuine. + badge alert + This chat is protected by end-to-end encryption. E2EE info chat item @@ -8597,6 +8681,10 @@ To connect, please ask your contact to create another connection link and check Unsupported contact name alert title + + Unverified badge + badge alert title + Up to 100 last messages are sent to new members. No comment provided by engineer. @@ -8792,6 +8880,10 @@ To connect, please ask your contact to create another connection link and check Use web port No comment provided by engineer. + + Used chat relays do not support webpages. + No comment provided by engineer. + User selection No comment provided by engineer. @@ -8975,6 +9067,14 @@ To connect, please ask your contact to create another connection link and check เซิร์ฟเวอร์ WebRTC ICE No comment provided by engineer. + + Webpage code + No comment provided by engineer. + + + Webpage settings were changed. If you save, the updated settings will be sent to subscribers. + alert message + Welcome %@! ยินดีต้อนรับ %@! @@ -9168,9 +9268,8 @@ Repeat join request? คุณสามารถเปิดใช้งานในภายหลังผ่านการตั้งค่า No comment provided by engineer. - - You can enable them later via app Privacy & Security settings. - คุณสามารถเปิดใช้งานได้ในภายหลังผ่านการตั้งค่าความเป็นส่วนตัวและความปลอดภัยของแอป + + You can enable them later via app Your privacy settings. No comment provided by engineer. @@ -9227,6 +9326,10 @@ Repeat join request? You can still view conversation with %@ in the list of chats. No comment provided by engineer. + + You can support SimpleX starting from v7 of the app. + badge alert + You can turn on SimpleX Lock via Settings. คุณสามารถเปิด SimpleX Lock ผ่านการตั้งค่า @@ -9413,11 +9516,6 @@ Repeat connection request? Your channel No comment provided by engineer. - - Your chat database - ฐานข้อมูลการแชทของคุณ - No comment provided by engineer. - Your chat database is not encrypted - set passphrase to encrypt it. ฐานข้อมูลการแชทของคุณไม่ได้ถูก encrypt - ตั้งรหัสผ่านเพื่อ encrypt @@ -9599,6 +9697,10 @@ Relays can access channel messages. accepted you rcv group event chat item + + acknowledged roster + No comment provided by engineer. + active No comment provided by engineer. @@ -10039,6 +10141,10 @@ pref value ชั่วโมง time unit + + https:// + No comment provided by engineer. + iOS Keychain is used to securely store passphrase - it allows receiving push notifications. iOS Keychain ใช้เพื่อจัดเก็บรหัสผ่านอย่างปลอดภัย - อนุญาตให้รับการแจ้งเตือนแบบทันที @@ -10484,11 +10590,6 @@ last received msg: %2$@ v%@ No comment provided by engineer. - - v%@ (%@) - v%@ (%@) - No comment provided by engineer. - via %@ relay hostname @@ -10885,8 +10986,8 @@ last received msg: %2$@ Wrong database passphrase No comment provided by engineer. - - You can allow sharing in Privacy & Security / SimpleX Lock settings. + + You can allow sharing in Your privacy / SimpleX Lock settings. No comment provided by engineer. diff --git a/apps/ios/SimpleX Localizations/tr.xcloc/Localized Contents/tr.xliff b/apps/ios/SimpleX Localizations/tr.xcloc/Localized Contents/tr.xliff index b673b609b9..f92ebbde0e 100644 --- a/apps/ios/SimpleX Localizations/tr.xcloc/Localized Contents/tr.xliff +++ b/apps/ios/SimpleX Localizations/tr.xcloc/Localized Contents/tr.xliff @@ -35,6 +35,10 @@ #gizli# No comment provided by engineer. + + %1$@ supported SimpleX Chat. The badge expired on %2$@. + badge alert + %@ %@ @@ -85,6 +89,10 @@ %@ indirildi No comment provided by engineer. + + %@ invested in SimpleX Chat crowdfunding. + badge alert + %@ is connected! %@ bağlandı! @@ -110,6 +118,10 @@ %@ sunucular No comment provided by engineer. + + %@ supports SimpleX Chat. + badge alert + %@ uploaded %@ yüklendi @@ -753,6 +765,10 @@ swipe action Profil ekle No comment provided by engineer. + + Add relay + No comment provided by engineer. + Add relays No comment provided by engineer. @@ -776,6 +792,10 @@ swipe action Takım üyesi ekle No comment provided by engineer. + + Add this code to your webpage. It will display the preview of your channel / group. + No comment provided by engineer. + Add to another device Başka bir cihaza ekle @@ -856,6 +876,10 @@ swipe action Gelişmiş ağ ayarları No comment provided by engineer. + + Advanced options + No comment provided by engineer. + Advanced settings Gelişmiş ayarlar @@ -963,6 +987,10 @@ swipe action İzin ver No comment provided by engineer. + + Allow anyone to embed + No comment provided by engineer. + Allow calls only if your contact allows them. Yalnızca irtibat kişiniz izin veriyorsa aramalara izin verin. @@ -1135,6 +1163,10 @@ swipe action Aramayı cevapla No comment provided by engineer. + + Any webpage can show the preview. + No comment provided by engineer. + App build: %@ Uygulama sürümü: %@ @@ -1343,6 +1375,10 @@ swipe action Kötü mesaj karması No comment provided by engineer. + + Badge cannot be verified + badge alert title + Be free in your network @@ -1548,11 +1584,6 @@ in your network Arama çoktan bitti! No comment provided by engineer. - - Calls - Aramalar - No comment provided by engineer. - Calls prohibited! Aramalara izin verilmiyor! @@ -1744,6 +1775,10 @@ alert subtitle Channel temporarily unavailable alert title + + Channel webpage + No comment provided by engineer. + Channel will be deleted for all subscribers - this cannot be undone! No comment provided by engineer. @@ -1785,6 +1820,10 @@ alert subtitle Sohbet konsolu No comment provided by engineer. + + Chat data + No comment provided by engineer. + Chat database Sohbet veritabanı @@ -2334,6 +2373,10 @@ Bu senin kendi tek kullanımlık bağlantın! Bağlantılar No comment provided by engineer. + + Contact + No comment provided by engineer. + Contact address chat link info line @@ -2423,6 +2466,10 @@ Bu senin kendi tek kullanımlık bağlantın! Kopyala No comment provided by engineer. + + Copy code + No comment provided by engineer. + Copy error Kopyalama hatası @@ -2458,6 +2505,10 @@ Bu senin kendi tek kullanımlık bağlantın! Rasgele profil kullanarak grup oluştur. No comment provided by engineer. + + Create a webpage to show your channel preview to visitors before they subscribe. Host it yourself or use any static hosting. + No comment provided by engineer. + Create file Dosya oluştur @@ -3056,9 +3107,9 @@ alert button Detaylar No comment provided by engineer. - - Develop - Geliştir + + Developer + Geliştirici araçları No comment provided by engineer. @@ -3066,11 +3117,6 @@ alert button Geliştirici seçenekleri No comment provided by engineer. - - Developer - Geliştirici araçları - No comment provided by engineer. - Device Cihaz @@ -3571,6 +3617,10 @@ chat item action Bu cihazın adını gir… No comment provided by engineer. + + Enter webpage URL + No comment provided by engineer. + Enter welcome message… Hoşgeldin mesajı gir… @@ -4564,6 +4614,10 @@ Hata: %2$@ Grup profili değiştirildi. Eğer kaydederseniz, güncellenmiş profil grup üyelerine gönderilecektir. alert message + + Group webpage + No comment provided by engineer. + Group welcome message Grup hoşgeldin mesajı @@ -4589,6 +4643,10 @@ Hata: %2$@ Yardım No comment provided by engineer. + + Help & support + No comment provided by engineer. + Help admins moderating their groups. Yöneticilere gruplarını yönetmelerinde yardımcı olun. @@ -5067,6 +5125,10 @@ Daha fazla iyileştirme yakında geliyor! Bu bağlantı üzerinden zaten bağlanmışsınız gibi görünüyor. Eğer durum böyle değilse, bir hata oluştu (%@). No comment provided by engineer. + + It will be shown to subscribers and used to allow loading the preview. + No comment provided by engineer. + Italian interface İtalyanca arayüz @@ -5171,7 +5233,7 @@ Bu senin grup için bağlantın %@! Learn more Daha fazlası - No comment provided by engineer. + badge alert button Leave @@ -5712,6 +5774,10 @@ Bu senin grup için bağlantın %@! Daha fazla geliştirmeler yakında geliyor! No comment provided by engineer. + + More privacy + No comment provided by engineer. + More reliable network connection. Daha güvenilir ağ bağlantısı. @@ -6316,6 +6382,10 @@ VPN'nin etkinleştirilmesi gerekir. Sadece karşıdaki kişi sesli mesajlar gönderebilir. No comment provided by engineer. + + Only your page above can show the preview. + No comment provided by engineer. + Open Aç @@ -6748,11 +6818,6 @@ Hata: %@ Önceden bağlanılmış sunucular No comment provided by engineer. - - Privacy & security - Gizlilik & güvenlik - No comment provided by engineer. - Privacy for your customers. Müşterileriniz için gizlilik. @@ -7246,6 +7311,10 @@ swipe action Anahtar Zinciri'ndeki parola silinsin mi? No comment provided by engineer. + + Remove relay + No comment provided by engineer. + Remove relay? alert title @@ -7538,6 +7607,10 @@ chat item action Kaydet ve grup üyelerine bildir No comment provided by engineer. + + Save and notify members + No comment provided by engineer. + Save and notify subscribers No comment provided by engineer. @@ -7605,6 +7678,10 @@ chat item action Sunucular kaydedilsin mi? alert title + + Save webpage settings? + alert title + Save welcome message? Hoşgeldin mesajı kaydedilsin mi? @@ -8687,9 +8764,8 @@ Relay address was used to set up this relay for the channel. Abonelikler göz ardı edildi No comment provided by engineer. - - Support SimpleX Chat - SimpleX Chat'e destek ol + + Support the project No comment provided by engineer. @@ -8910,6 +8986,10 @@ Bazı hatalar nedeniyle veya bağlantı tehlikeye girdiğinde meydana gelebilir. Veritabanı parolasını değiştirme girişimi tamamlanmadı. No comment provided by engineer. + + The badge is signed with a key that this version of the app does not recognize. Update the app to verify this badge. + badge alert + The code you scanned is not a SimpleX link QR code. Taradığınız kod bir SimpleX bağlantı QR kodu değildir. @@ -9076,6 +9156,10 @@ your contacts and groups. Bu işlem geri alınamaz - profiliniz, kişileriniz, mesajlarınız ve dosyalarınız geri döndürülemez şekilde kaybolacaktır. No comment provided by engineer. + + This badge could not be verified and may not be genuine. + badge alert + This chat is protected by end-to-end encryption. Bu sohbet uçtan uca şifreleme ile korunmaktadır. @@ -9461,6 +9545,10 @@ Bağlanmak için lütfen kişinizden başka bir bağlantı oluşturmasını iste Unsupported contact name alert title + + Unverified badge + badge alert title + Up to 100 last messages are sent to new members. Yeni üyelere 100e kadar en son mesajlar gönderildi. @@ -9687,6 +9775,10 @@ Bağlanmak için lütfen kişinizden başka bir bağlantı oluşturmasını iste Web portunu kullan No comment provided by engineer. + + Used chat relays do not support webpages. + No comment provided by engineer. + User selection Kullanıcı seçimi @@ -9886,6 +9978,14 @@ Bağlanmak için lütfen kişinizden başka bir bağlantı oluşturmasını iste WebRTC ICE sunucuları No comment provided by engineer. + + Webpage code + No comment provided by engineer. + + + Webpage settings were changed. If you save, the updated settings will be sent to subscribers. + alert message + Welcome %@! Hoşgeldin %@! @@ -10105,9 +10205,8 @@ Katılma isteği tekrarlansın mı? Daha sonra Ayarlardan etkinleştirebilirsin No comment provided by engineer. - - You can enable them later via app Privacy & Security settings. - Daha sonra uygulamanın Gizlilik ve Güvenlik ayarlarından etkinleştirebilirsiniz. + + You can enable them later via app Your privacy settings. No comment provided by engineer. @@ -10169,6 +10268,10 @@ Katılma isteği tekrarlansın mı? Sohbet listesinde %@ ile konuşmayı görüntülemeye devam edebilirsiniz. No comment provided by engineer. + + You can support SimpleX starting from v7 of the app. + badge alert + You can turn on SimpleX Lock via Settings. SimpleX Kilidini Ayarlar üzerinden açabilirsiniz. @@ -10368,11 +10471,6 @@ Bağlantı isteği tekrarlansın mı? Your channel No comment provided by engineer. - - Your chat database - Sohbet veritabanınız - No comment provided by engineer. - Your chat database is not encrypted - set passphrase to encrypt it. Sohbet veritabanınız şifrelenmemiş - şifrelemek için parola ayarlayın. @@ -10567,6 +10665,10 @@ Relays can access channel messages. seni kabul etti rcv group event chat item + + acknowledged roster + No comment provided by engineer. + active No comment provided by engineer. @@ -11032,6 +11134,10 @@ pref value saat time unit + + https:// + No comment provided by engineer. + iOS Keychain is used to securely store passphrase - it allows receiving push notifications. iOS Anahtar Zinciri parolayı güvenli bir şekilde saklamak için kullanılır - anlık bildirimlerin alınmasını sağlar. @@ -11517,11 +11623,6 @@ son alınan msj: %2$@ v%@ No comment provided by engineer. - - v%@ (%@) - v%@ (%@) - No comment provided by engineer. - via %@ relay hostname @@ -11969,9 +12070,8 @@ son alınan msj: %2$@ Yanlış veritabanı parolası No comment provided by engineer. - - You can allow sharing in Privacy & Security / SimpleX Lock settings. - Gizlilik ve Güvenlik / SimpleX Lock ayarlarından paylaşıma izin verebilirsiniz. + + You can allow sharing in Your privacy / SimpleX Lock settings. No comment provided by engineer. diff --git a/apps/ios/SimpleX Localizations/uk.xcloc/Localized Contents/uk.xliff b/apps/ios/SimpleX Localizations/uk.xcloc/Localized Contents/uk.xliff index 3c0c6ef8de..a356858ecd 100644 --- a/apps/ios/SimpleX Localizations/uk.xcloc/Localized Contents/uk.xliff +++ b/apps/ios/SimpleX Localizations/uk.xcloc/Localized Contents/uk.xliff @@ -35,6 +35,10 @@ #секрет# No comment provided by engineer. + + %1$@ supported SimpleX Chat. The badge expired on %2$@. + badge alert + %@ %@ @@ -85,6 +89,10 @@ %@ встановлено No comment provided by engineer. + + %@ invested in SimpleX Chat crowdfunding. + badge alert + %@ is connected! %@ підключено! @@ -110,6 +118,10 @@ %@ сервери No comment provided by engineer. + + %@ supports SimpleX Chat. + badge alert + %@ uploaded %@ завантажено @@ -743,6 +755,10 @@ swipe action Додати профіль No comment provided by engineer. + + Add relay + No comment provided by engineer. + Add relays No comment provided by engineer. @@ -766,6 +782,10 @@ swipe action Додайте учасників команди No comment provided by engineer. + + Add this code to your webpage. It will display the preview of your channel / group. + No comment provided by engineer. + Add to another device Додати до іншого пристрою @@ -846,6 +866,10 @@ swipe action Розширені налаштування мережі No comment provided by engineer. + + Advanced options + No comment provided by engineer. + Advanced settings Додаткові налаштування @@ -953,6 +977,10 @@ swipe action Дозволити No comment provided by engineer. + + Allow anyone to embed + No comment provided by engineer. + Allow calls only if your contact allows them. Дозволяйте дзвінки, тільки якщо ваш контакт дозволяє їх. @@ -1123,6 +1151,10 @@ swipe action Відповісти на дзвінок No comment provided by engineer. + + Any webpage can show the preview. + No comment provided by engineer. + App build: %@ Збірка програми: %@ @@ -1331,6 +1363,10 @@ swipe action Поганий хеш повідомлення No comment provided by engineer. + + Badge cannot be verified + badge alert title + Be free in your network @@ -1534,11 +1570,6 @@ in your network Дзвінок вже закінчився! No comment provided by engineer. - - Calls - Дзвінки - No comment provided by engineer. - Calls prohibited! Дзвінки заборонені! @@ -1730,6 +1761,10 @@ alert subtitle Channel temporarily unavailable alert title + + Channel webpage + No comment provided by engineer. + Channel will be deleted for all subscribers - this cannot be undone! No comment provided by engineer. @@ -1771,6 +1806,10 @@ alert subtitle Консоль чату No comment provided by engineer. + + Chat data + No comment provided by engineer. + Chat database База даних чату @@ -2320,6 +2359,10 @@ This is your own one-time link! З'єднання No comment provided by engineer. + + Contact + No comment provided by engineer. + Contact address chat link info line @@ -2408,6 +2451,10 @@ This is your own one-time link! Копіювати No comment provided by engineer. + + Copy code + No comment provided by engineer. + Copy error Помилка копіювання @@ -2443,6 +2490,10 @@ This is your own one-time link! Створіть групу, використовуючи випадковий профіль. No comment provided by engineer. + + Create a webpage to show your channel preview to visitors before they subscribe. Host it yourself or use any static hosting. + No comment provided by engineer. + Create file Створити файл @@ -3040,9 +3091,9 @@ alert button Деталі No comment provided by engineer. - - Develop - Розробник + + Developer + Інструменти для розробників No comment provided by engineer. @@ -3050,11 +3101,6 @@ alert button Можливості для розробників No comment provided by engineer. - - Developer - Інструменти для розробників - No comment provided by engineer. - Device Пристрій @@ -3555,6 +3601,10 @@ chat item action Введіть назву пристрою… No comment provided by engineer. + + Enter webpage URL + No comment provided by engineer. + Enter welcome message… Введіть вітальне повідомлення… @@ -4546,6 +4596,10 @@ Error: %2$@ Профіль групи було змінено. Якщо ви збережете його, оновлений профіль буде надіслано учасникам групи. alert message + + Group webpage + No comment provided by engineer. + Group welcome message Привітальне повідомлення групи @@ -4571,6 +4625,10 @@ Error: %2$@ Довідка No comment provided by engineer. + + Help & support + No comment provided by engineer. + Help admins moderating their groups. Допоможіть адміністраторам модерувати їхні групи. @@ -5049,6 +5107,10 @@ More improvements are coming soon! Схоже, що ви вже підключені за цим посиланням. Якщо це не так, сталася помилка (%@). No comment provided by engineer. + + It will be shown to subscribers and used to allow loading the preview. + No comment provided by engineer. + Italian interface Італійський інтерфейс @@ -5153,7 +5215,7 @@ This is your link for group %@! Learn more Дізнайтеся більше - No comment provided by engineer. + badge alert button Leave @@ -5692,6 +5754,10 @@ This is your link for group %@! Незабаром буде ще більше покращень! No comment provided by engineer. + + More privacy + No comment provided by engineer. + More reliable network connection. Більш надійне з'єднання з мережею. @@ -6294,6 +6360,10 @@ Requires compatible VPN. Тільки ваш контакт може надсилати голосові повідомлення. No comment provided by engineer. + + Only your page above can show the preview. + No comment provided by engineer. + Open Відкрито @@ -6723,11 +6793,6 @@ Error: %@ Раніше підключені сервери No comment provided by engineer. - - Privacy & security - Конфіденційність і безпека - No comment provided by engineer. - Privacy for your customers. Конфіденційність для ваших клієнтів. @@ -7220,6 +7285,10 @@ swipe action Видалити парольну фразу з брелока? No comment provided by engineer. + + Remove relay + No comment provided by engineer. + Remove relay? alert title @@ -7512,6 +7581,10 @@ chat item action Зберегти та повідомити учасників групи No comment provided by engineer. + + Save and notify members + No comment provided by engineer. + Save and notify subscribers No comment provided by engineer. @@ -7579,6 +7652,10 @@ chat item action Зберегти сервери? alert title + + Save webpage settings? + alert title + Save welcome message? Зберегти вітальне повідомлення? @@ -8661,9 +8738,8 @@ Relay address was used to set up this relay for the channel. Підписки ігноруються No comment provided by engineer. - - Support SimpleX Chat - Підтримка чату SimpleX + + Support the project No comment provided by engineer. @@ -8883,6 +8959,10 @@ It can happen because of some bug or when the connection is compromised.Спроба змінити пароль до бази даних не була завершена. No comment provided by engineer. + + The badge is signed with a key that this version of the app does not recognize. Update the app to verify this badge. + badge alert + The code you scanned is not a SimpleX link QR code. Відсканований вами код не є QR-кодом посилання SimpleX. @@ -9049,6 +9129,10 @@ your contacts and groups. Цю дію неможливо скасувати - ваш профіль, контакти, повідомлення та файли будуть безповоротно втрачені. No comment provided by engineer. + + This badge could not be verified and may not be genuine. + badge alert + This chat is protected by end-to-end encryption. Цей чат захищений наскрізним шифруванням. @@ -9432,6 +9516,10 @@ To connect, please ask your contact to create another connection link and check Unsupported contact name alert title + + Unverified badge + badge alert title + Up to 100 last messages are sent to new members. Новим користувачам надсилається до 100 останніх повідомлень. @@ -9658,6 +9746,10 @@ To connect, please ask your contact to create another connection link and check Використовувати веб-порт No comment provided by engineer. + + Used chat relays do not support webpages. + No comment provided by engineer. + User selection Вибір користувача @@ -9857,6 +9949,14 @@ To connect, please ask your contact to create another connection link and check Сервери WebRTC ICE No comment provided by engineer. + + Webpage code + No comment provided by engineer. + + + Webpage settings were changed. If you save, the updated settings will be sent to subscribers. + alert message + Welcome %@! Ласкаво просимо %@! @@ -10076,9 +10176,8 @@ Repeat join request? Ви можете увімкнути пізніше в Налаштуваннях No comment provided by engineer. - - You can enable them later via app Privacy & Security settings. - Ви можете увімкнути їх пізніше в налаштуваннях конфіденційності та безпеки програми. + + You can enable them later via app Your privacy settings. No comment provided by engineer. @@ -10140,6 +10239,10 @@ Repeat join request? Ви все ще можете переглянути розмову з %@ у списку чатів. No comment provided by engineer. + + You can support SimpleX starting from v7 of the app. + badge alert + You can turn on SimpleX Lock via Settings. Увімкнути SimpleX Lock можна в Налаштуваннях. @@ -10339,11 +10442,6 @@ Repeat connection request? Your channel No comment provided by engineer. - - Your chat database - Ваша база даних чату - No comment provided by engineer. - Your chat database is not encrypted - set passphrase to encrypt it. Ваша база даних чату не зашифрована - встановіть ключову фразу, щоб зашифрувати її. @@ -10538,6 +10636,10 @@ Relays can access channel messages. прийняв(ла) вас rcv group event chat item + + acknowledged roster + No comment provided by engineer. + active No comment provided by engineer. @@ -11003,6 +11105,10 @@ pref value години time unit + + https:// + No comment provided by engineer. + iOS Keychain is used to securely store passphrase - it allows receiving push notifications. iOS Keychain використовується для безпечного зберігання пароля - це дає змогу отримувати миттєві повідомлення. @@ -11486,11 +11592,6 @@ last received msg: %2$@ v%@ No comment provided by engineer. - - v%@ (%@) - v%@ (%@) - No comment provided by engineer. - via %@ relay hostname @@ -11938,9 +12039,8 @@ last received msg: %2$@ Неправильна ключова фраза до бази даних No comment provided by engineer. - - You can allow sharing in Privacy & Security / SimpleX Lock settings. - Ви можете дозволити спільний доступ у налаштуваннях Конфіденційність і безпека / SimpleX Lock. + + You can allow sharing in Your privacy / SimpleX Lock settings. No comment provided by engineer. diff --git a/apps/ios/SimpleX Localizations/zh-Hans.xcloc/Localized Contents/zh-Hans.xliff b/apps/ios/SimpleX Localizations/zh-Hans.xcloc/Localized Contents/zh-Hans.xliff index 9001375615..d2558bf6d8 100644 --- a/apps/ios/SimpleX Localizations/zh-Hans.xcloc/Localized Contents/zh-Hans.xliff +++ b/apps/ios/SimpleX Localizations/zh-Hans.xcloc/Localized Contents/zh-Hans.xliff @@ -35,6 +35,10 @@ #秘密# No comment provided by engineer. + + %1$@ supported SimpleX Chat. The badge expired on %2$@. + badge alert + %@ %@ @@ -85,6 +89,10 @@ %@ 已下载 No comment provided by engineer. + + %@ invested in SimpleX Chat crowdfunding. + badge alert + %@ is connected! %@ 已连接！ @@ -110,6 +118,10 @@ 服务器 No comment provided by engineer. + + %@ supports SimpleX Chat. + badge alert + %@ uploaded %@ 已上传 @@ -743,6 +755,10 @@ swipe action 添加个人资料 No comment provided by engineer. + + Add relay + No comment provided by engineer. + Add relays No comment provided by engineer. @@ -766,6 +782,10 @@ swipe action 添加团队成员 No comment provided by engineer. + + Add this code to your webpage. It will display the preview of your channel / group. + No comment provided by engineer. + Add to another device 添加另一设备 @@ -846,6 +866,10 @@ swipe action 高级网络设置 No comment provided by engineer. + + Advanced options + No comment provided by engineer. + Advanced settings 高级设置 @@ -954,6 +978,10 @@ swipe action 允许 No comment provided by engineer. + + Allow anyone to embed + No comment provided by engineer. + Allow calls only if your contact allows them. 仅当您的联系人允许时才允许呼叫。 @@ -1126,6 +1154,10 @@ swipe action 接听来电 No comment provided by engineer. + + Any webpage can show the preview. + No comment provided by engineer. + App build: %@ 应用程序构建：%@ @@ -1335,6 +1367,10 @@ swipe action 错误消息散列 No comment provided by engineer. + + Badge cannot be verified + badge alert title + Be free in your network @@ -1542,11 +1578,6 @@ in your network 通话已结束！ No comment provided by engineer. - - Calls - 通话 - No comment provided by engineer. - Calls prohibited! 禁止来电！ @@ -1738,6 +1769,10 @@ alert subtitle Channel temporarily unavailable alert title + + Channel webpage + No comment provided by engineer. + Channel will be deleted for all subscribers - this cannot be undone! No comment provided by engineer. @@ -1779,6 +1814,10 @@ alert subtitle 聊天控制台 No comment provided by engineer. + + Chat data + No comment provided by engineer. + Chat database 聊天数据库 @@ -2327,6 +2366,10 @@ This is your own one-time link! 连接 No comment provided by engineer. + + Contact + No comment provided by engineer. + Contact address chat link info line @@ -2416,6 +2459,10 @@ This is your own one-time link! 复制 No comment provided by engineer. + + Copy code + No comment provided by engineer. + Copy error 复制错误 @@ -2451,6 +2498,10 @@ This is your own one-time link! 使用随机身份创建群组. No comment provided by engineer. + + Create a webpage to show your channel preview to visitors before they subscribe. Host it yourself or use any static hosting. + No comment provided by engineer. + Create file 创建文件 @@ -3050,9 +3101,9 @@ alert button 详细信息 No comment provided by engineer. - - Develop - 开发 + + Developer + 开发者工具 No comment provided by engineer. @@ -3060,11 +3111,6 @@ alert button 开发者选项 No comment provided by engineer. - - Developer - 开发者工具 - No comment provided by engineer. - Device 设备 @@ -3565,6 +3611,10 @@ chat item action 输入此设备名… No comment provided by engineer. + + Enter webpage URL + No comment provided by engineer. + Enter welcome message… 输入欢迎消息…… @@ -4563,6 +4613,10 @@ Error: %2$@ 群资料已修改。如果你进行保存，修改后的群资料将发送给其他群成员。 alert message + + Group webpage + No comment provided by engineer. + Group welcome message 群欢迎词 @@ -4588,6 +4642,10 @@ Error: %2$@ 帮助 No comment provided by engineer. + + Help & support + No comment provided by engineer. + Help admins moderating their groups. 帮助管理员管理群组。 @@ -5068,6 +5126,10 @@ More improvements are coming soon! 您似乎已经通过此链接连接。如果不是这样，则有一个错误 (%@)。 No comment provided by engineer. + + It will be shown to subscribers and used to allow loading the preview. + No comment provided by engineer. + Italian interface 意大利语界面 @@ -5172,7 +5234,7 @@ This is your link for group %@! Learn more 了解更多 - No comment provided by engineer. + badge alert button Leave @@ -5714,6 +5776,10 @@ This is your link for group %@! 更多改进即将推出！ No comment provided by engineer. + + More privacy + No comment provided by engineer. + More reliable network connection. 更可靠的网络连接。 @@ -6320,6 +6386,10 @@ Requires compatible VPN. 只有您的联系人可以发送语音消息。 No comment provided by engineer. + + Only your page above can show the preview. + No comment provided by engineer. + Open 打开 @@ -6752,11 +6822,6 @@ Error: %@ 以前连接的服务器 No comment provided by engineer. - - Privacy & security - 隐私和安全 - No comment provided by engineer. - Privacy for your customers. 客户隐私。 @@ -7250,6 +7315,10 @@ swipe action 从钥匙串中删除密码？ No comment provided by engineer. + + Remove relay + No comment provided by engineer. + Remove relay? alert title @@ -7541,6 +7610,10 @@ chat item action 保存并通知群组成员 No comment provided by engineer. + + Save and notify members + No comment provided by engineer. + Save and notify subscribers No comment provided by engineer. @@ -7608,6 +7681,10 @@ chat item action 保存服务器？ alert title + + Save webpage settings? + alert title + Save welcome message? 保存欢迎信息？ @@ -8694,9 +8771,8 @@ Relay address was used to set up this relay for the channel. 忽略订阅 No comment provided by engineer. - - Support SimpleX Chat - 支持 SimpleX Chat + + Support the project No comment provided by engineer. @@ -8917,6 +8993,10 @@ It can happen because of some bug or when the connection is compromised.更改数据库密码的尝试未完成。 No comment provided by engineer. + + The badge is signed with a key that this version of the app does not recognize. Update the app to verify this badge. + badge alert + The code you scanned is not a SimpleX link QR code. 您扫描的码不是 SimpleX 链接的二维码。 @@ -9084,6 +9164,10 @@ your contacts and groups. 此操作无法撤消——您的个人资料、联系人、消息和文件将不可撤回地丢失。 No comment provided by engineer. + + This badge could not be verified and may not be genuine. + badge alert + This chat is protected by end-to-end encryption. 此聊天受端到端加密保护。 @@ -9469,6 +9553,10 @@ To connect, please ask your contact to create another connection link and check Unsupported contact name alert title + + Unverified badge + badge alert title + Up to 100 last messages are sent to new members. 给新成员发送了最多 100 条历史消息。 @@ -9695,6 +9783,10 @@ To connect, please ask your contact to create another connection link and check 使用 web 端口 No comment provided by engineer. + + Used chat relays do not support webpages. + No comment provided by engineer. + User selection 用户选择 @@ -9895,6 +9987,14 @@ To connect, please ask your contact to create another connection link and check WebRTC ICE 服务器 No comment provided by engineer. + + Webpage code + No comment provided by engineer. + + + Webpage settings were changed. If you save, the updated settings will be sent to subscribers. + alert message + Welcome %@! 欢迎%@！ @@ -10116,9 +10216,8 @@ Repeat join request? 您可以稍后在设置中启用它 No comment provided by engineer. - - You can enable them later via app Privacy & Security settings. - 您可以稍后通过应用程序的 "隐私与安全 "设置启用它们。 + + You can enable them later via app Your privacy settings. No comment provided by engineer. @@ -10180,6 +10279,10 @@ Repeat join request? 您仍然可以在聊天列表中查看与 %@的对话。 No comment provided by engineer. + + You can support SimpleX starting from v7 of the app. + badge alert + You can turn on SimpleX Lock via Settings. 您可以通过设置开启 SimpleX 锁定。 @@ -10379,11 +10482,6 @@ Repeat connection request? Your channel No comment provided by engineer. - - Your chat database - 您的聊天数据库 - No comment provided by engineer. - Your chat database is not encrypted - set passphrase to encrypt it. 您的聊天数据库未加密——设置密码来加密。 @@ -10576,6 +10674,10 @@ Relays can access channel messages. 接受了你 rcv group event chat item + + acknowledged roster + No comment provided by engineer. + active No comment provided by engineer. @@ -11041,6 +11143,10 @@ pref value 小时 time unit + + https:// + No comment provided by engineer. + iOS Keychain is used to securely store passphrase - it allows receiving push notifications. iOS钥匙串用于安全地存储密码——它允许接收推送通知。 @@ -11526,11 +11632,6 @@ last received msg: %2$@ v%@ No comment provided by engineer. - - v%@ (%@) - v%@ (%@) - No comment provided by engineer. - via %@ relay hostname @@ -11978,9 +12079,8 @@ last received msg: %2$@ 数据库密码错误 No comment provided by engineer. - - You can allow sharing in Privacy & Security / SimpleX Lock settings. - 您可以在 "隐私与安全"/"SimpleX Lock "设置中允许共享。 + + You can allow sharing in Your privacy / SimpleX Lock settings. No comment provided by engineer. diff --git a/apps/ios/SimpleX SE/de.lproj/Localizable.strings b/apps/ios/SimpleX SE/de.lproj/Localizable.strings index 1d2e5a4b01..eeb8c67842 100644 --- a/apps/ios/SimpleX SE/de.lproj/Localizable.strings +++ b/apps/ios/SimpleX SE/de.lproj/Localizable.strings @@ -106,6 +106,3 @@ /* No comment provided by engineer. */ "Wrong database passphrase" = "Falsches Datenbank-Passwort"; -/* No comment provided by engineer. */ -"You can allow sharing in Your privacy / SimpleX Lock settings." = "Sie können das Teilen in den Einstellungen zu Datenschutz & Sicherheit / SimpleX-Sperre erlauben."; - diff --git a/apps/ios/SimpleX SE/es.lproj/Localizable.strings b/apps/ios/SimpleX SE/es.lproj/Localizable.strings index 5bb42b4f0a..1cbb00e694 100644 --- a/apps/ios/SimpleX SE/es.lproj/Localizable.strings +++ b/apps/ios/SimpleX SE/es.lproj/Localizable.strings @@ -106,6 +106,3 @@ /* No comment provided by engineer. */ "Wrong database passphrase" = "Contraseña incorrecta de la base de datos"; -/* No comment provided by engineer. */ -"You can allow sharing in Your privacy / SimpleX Lock settings." = "Puedes dar permiso para compartir en Privacidad y Seguridad / Bloque SimpleX."; - diff --git a/apps/ios/SimpleX SE/fr.lproj/Localizable.strings b/apps/ios/SimpleX SE/fr.lproj/Localizable.strings index 6b492ee882..525549b116 100644 --- a/apps/ios/SimpleX SE/fr.lproj/Localizable.strings +++ b/apps/ios/SimpleX SE/fr.lproj/Localizable.strings @@ -106,6 +106,3 @@ /* No comment provided by engineer. */ "Wrong database passphrase" = "Mauvaise phrase secrète pour la base de données"; -/* No comment provided by engineer. */ -"You can allow sharing in Your privacy / SimpleX Lock settings." = "Vous pouvez autoriser le partage dans les paramètres Confidentialité et sécurité / SimpleX Lock."; - diff --git a/apps/ios/SimpleX SE/hu.lproj/Localizable.strings b/apps/ios/SimpleX SE/hu.lproj/Localizable.strings index dae06b1d73..b6f0ef30fa 100644 --- a/apps/ios/SimpleX SE/hu.lproj/Localizable.strings +++ b/apps/ios/SimpleX SE/hu.lproj/Localizable.strings @@ -106,6 +106,3 @@ /* No comment provided by engineer. */ "Wrong database passphrase" = "Érvénytelen adatbázis-jelmondat"; -/* No comment provided by engineer. */ -"You can allow sharing in Your privacy / SimpleX Lock settings." = "A megosztást az Adatvédelem és biztonság / SimpleX-zár menüben engedélyezheti."; - diff --git a/apps/ios/SimpleX SE/it.lproj/Localizable.strings b/apps/ios/SimpleX SE/it.lproj/Localizable.strings index 3b27092f24..f053a3afca 100644 --- a/apps/ios/SimpleX SE/it.lproj/Localizable.strings +++ b/apps/ios/SimpleX SE/it.lproj/Localizable.strings @@ -106,6 +106,3 @@ /* No comment provided by engineer. */ "Wrong database passphrase" = "Password del database sbagliata"; -/* No comment provided by engineer. */ -"You can allow sharing in Your privacy / SimpleX Lock settings." = "Puoi consentire la condivisione in Privacy e sicurezza / impostazioni di SimpleX Lock."; - diff --git a/apps/ios/SimpleX SE/nl.lproj/Localizable.strings b/apps/ios/SimpleX SE/nl.lproj/Localizable.strings index 050cb1a735..ad1dfaf162 100644 --- a/apps/ios/SimpleX SE/nl.lproj/Localizable.strings +++ b/apps/ios/SimpleX SE/nl.lproj/Localizable.strings @@ -106,6 +106,3 @@ /* No comment provided by engineer. */ "Wrong database passphrase" = "Verkeerde database wachtwoord"; -/* No comment provided by engineer. */ -"You can allow sharing in Your privacy / SimpleX Lock settings." = "U kunt delen toestaan in de instellingen voor Privacy en beveiliging / SimpleX Lock."; - diff --git a/apps/ios/SimpleX SE/pl.lproj/Localizable.strings b/apps/ios/SimpleX SE/pl.lproj/Localizable.strings index 0755e1e374..4711006d33 100644 --- a/apps/ios/SimpleX SE/pl.lproj/Localizable.strings +++ b/apps/ios/SimpleX SE/pl.lproj/Localizable.strings @@ -106,6 +106,3 @@ /* No comment provided by engineer. */ "Wrong database passphrase" = "Nieprawidłowe hasło bazy danych"; -/* No comment provided by engineer. */ -"You can allow sharing in Your privacy / SimpleX Lock settings." = "Możesz zezwolić na udostępnianie w ustawieniach Prywatność i bezpieczeństwo / Blokada SimpleX."; - diff --git a/apps/ios/SimpleX SE/ru.lproj/Localizable.strings b/apps/ios/SimpleX SE/ru.lproj/Localizable.strings index 90a5841738..cade4afe9a 100644 --- a/apps/ios/SimpleX SE/ru.lproj/Localizable.strings +++ b/apps/ios/SimpleX SE/ru.lproj/Localizable.strings @@ -106,6 +106,3 @@ /* No comment provided by engineer. */ "Wrong database passphrase" = "Неправильный пароль базы данных"; -/* No comment provided by engineer. */ -"You can allow sharing in Your privacy / SimpleX Lock settings." = "Вы можете разрешить функцию Поделиться в настройках Конфиденциальности / Блокировка SimpleX."; - diff --git a/apps/ios/SimpleX SE/tr.lproj/Localizable.strings b/apps/ios/SimpleX SE/tr.lproj/Localizable.strings index 69b122832d..7f810f260d 100644 --- a/apps/ios/SimpleX SE/tr.lproj/Localizable.strings +++ b/apps/ios/SimpleX SE/tr.lproj/Localizable.strings @@ -106,6 +106,3 @@ /* No comment provided by engineer. */ "Wrong database passphrase" = "Yanlış veritabanı parolası"; -/* No comment provided by engineer. */ -"You can allow sharing in Your privacy / SimpleX Lock settings." = "Gizlilik ve Güvenlik / SimpleX Lock ayarlarından paylaşıma izin verebilirsiniz."; - diff --git a/apps/ios/SimpleX SE/uk.lproj/Localizable.strings b/apps/ios/SimpleX SE/uk.lproj/Localizable.strings index 7574470d01..5814def4f4 100644 --- a/apps/ios/SimpleX SE/uk.lproj/Localizable.strings +++ b/apps/ios/SimpleX SE/uk.lproj/Localizable.strings @@ -106,6 +106,3 @@ /* No comment provided by engineer. */ "Wrong database passphrase" = "Неправильна ключова фраза до бази даних"; -/* No comment provided by engineer. */ -"You can allow sharing in Your privacy / SimpleX Lock settings." = "Ви можете дозволити спільний доступ у налаштуваннях Конфіденційність і безпека / SimpleX Lock."; - diff --git a/apps/ios/SimpleX SE/zh-Hans.lproj/Localizable.strings b/apps/ios/SimpleX SE/zh-Hans.lproj/Localizable.strings index fc046ab087..5f01ca2d87 100644 --- a/apps/ios/SimpleX SE/zh-Hans.lproj/Localizable.strings +++ b/apps/ios/SimpleX SE/zh-Hans.lproj/Localizable.strings @@ -106,6 +106,3 @@ /* No comment provided by engineer. */ "Wrong database passphrase" = "数据库密码错误"; -/* No comment provided by engineer. */ -"You can allow sharing in Your privacy / SimpleX Lock settings." = "您可以在 \"隐私与安全\"/\"SimpleX Lock \"设置中允许共享。"; - diff --git a/apps/ios/SimpleX.xcodeproj/project.pbxproj b/apps/ios/SimpleX.xcodeproj/project.pbxproj index 0b07f89096..f75a41c8a3 100644 --- a/apps/ios/SimpleX.xcodeproj/project.pbxproj +++ b/apps/ios/SimpleX.xcodeproj/project.pbxproj @@ -59,7 +59,6 @@ 5C7505A227B65FDB00BE3227 /* CIMetaView.swift in Sources */ = {isa = PBXBuildFile; fileRef = 5C7505A127B65FDB00BE3227 /* CIMetaView.swift */; }; 5C7505A527B679EE00BE3227 /* NavLinkPlain.swift in Sources */ = {isa = PBXBuildFile; fileRef = 5C7505A427B679EE00BE3227 /* NavLinkPlain.swift */; }; 5C7505A827B6D34800BE3227 /* ChatInfoToolbar.swift in Sources */ = {isa = PBXBuildFile; fileRef = 5C7505A727B6D34800BE3227 /* ChatInfoToolbar.swift */; }; - CE11BADE0000000000000002 /* NameBadge.swift in Sources */ = {isa = PBXBuildFile; fileRef = CE11BADE0000000000000001 /* NameBadge.swift */; }; 5C764E89279CBCB3000C6508 /* ChatModel.swift in Sources */ = {isa = PBXBuildFile; fileRef = 5C764E88279CBCB3000C6508 /* ChatModel.swift */; }; 5C8F01CD27A6F0D8007D2C8D /* CodeScanner in Frameworks */ = {isa = PBXBuildFile; productRef = 5C8F01CC27A6F0D8007D2C8D /* CodeScanner */; }; 5C93292F29239A170090FFF9 /* ProtocolServersView.swift in Sources */ = {isa = PBXBuildFile; fileRef = 5C93292E29239A170090FFF9 /* ProtocolServersView.swift */; }; @@ -170,7 +169,6 @@ 648679AB2BC96A74006456E7 /* ChatItemForwardingView.swift in Sources */ = {isa = PBXBuildFile; fileRef = 648679AA2BC96A74006456E7 /* ChatItemForwardingView.swift */; }; 6495D7042F48CFC50060512B /* ChannelMembersView.swift in Sources */ = {isa = PBXBuildFile; fileRef = 6495D7032F48CFC50060512B /* ChannelMembersView.swift */; }; 6495D7062F48CFFD0060512B /* ChannelRelaysView.swift in Sources */ = {isa = PBXBuildFile; fileRef = 6495D7052F48CFFD0060512B /* ChannelRelaysView.swift */; }; - E5E418022F83D2CA00252B9E /* ChannelWebAccessView.swift in Sources */ = {isa = PBXBuildFile; fileRef = E5E418032F83D2CA00252B9E /* ChannelWebAccessView.swift */; }; 6495D7082F48D0000060512B /* AddGroupRelayView.swift in Sources */ = {isa = PBXBuildFile; fileRef = 6495D7072F48D0000060512B /* AddGroupRelayView.swift */; }; 649BCDA0280460FD00C3A862 /* ComposeImageView.swift in Sources */ = {isa = PBXBuildFile; fileRef = 649BCD9F280460FD00C3A862 /* ComposeImageView.swift */; }; 649BCDA22805D6EF00C3A862 /* CIImageView.swift in Sources */ = {isa = PBXBuildFile; fileRef = 649BCDA12805D6EF00C3A862 /* CIImageView.swift */; }; @@ -228,6 +226,7 @@ B728945B2D0C62BF00F7A19A /* ElegantEmojiPicker in Frameworks */ = {isa = PBXBuildFile; productRef = B728945A2D0C62BF00F7A19A /* ElegantEmojiPicker */; }; B73EFE532CE5FA3500C778EA /* CreateSimpleXAddress.swift in Sources */ = {isa = PBXBuildFile; fileRef = B73EFE522CE5FA3500C778EA /* CreateSimpleXAddress.swift */; }; B76E6C312C5C41D900EC11AA /* ContactListNavLink.swift in Sources */ = {isa = PBXBuildFile; fileRef = B76E6C302C5C41D900EC11AA /* ContactListNavLink.swift */; }; + CE11BADE0000000000000002 /* NameBadge.swift in Sources */ = {isa = PBXBuildFile; fileRef = CE11BADE0000000000000001 /* NameBadge.swift */; }; CE176F202C87014C00145DBC /* InvertedForegroundStyle.swift in Sources */ = {isa = PBXBuildFile; fileRef = CE176F1F2C87014C00145DBC /* InvertedForegroundStyle.swift */; }; CE1EB0E42C459A660099D896 /* ShareAPI.swift in Sources */ = {isa = PBXBuildFile; fileRef = CE1EB0E32C459A660099D896 /* ShareAPI.swift */; }; CE2AD9CE2C452A4D00E844E3 /* ChatUtils.swift in Sources */ = {isa = PBXBuildFile; fileRef = CE2AD9CD2C452A4D00E844E3 /* ChatUtils.swift */; }; @@ -265,6 +264,7 @@ E5DDBE6E2DC4106800A0EFF0 /* AppAPITypes.swift in Sources */ = {isa = PBXBuildFile; fileRef = E5DDBE6D2DC4106200A0EFF0 /* AppAPITypes.swift */; }; E5DDBE702DC4217900A0EFF0 /* NSEAPITypes.swift in Sources */ = {isa = PBXBuildFile; fileRef = E5DDBE6F2DC4217900A0EFF0 /* NSEAPITypes.swift */; }; E5E418012F83D2CA00252B9E /* OnboardingCards.swift in Sources */ = {isa = PBXBuildFile; fileRef = E5E418002F83D2CA00252B9E /* OnboardingCards.swift */; }; + E5E418022F83D2CA00252B9E /* ChannelWebAccessView.swift in Sources */ = {isa = PBXBuildFile; fileRef = E5E418032F83D2CA00252B9E /* ChannelWebAccessView.swift */; }; /* End PBXBuildFile section */ /* Begin PBXContainerItemProxy section */ @@ -415,7 +415,6 @@ 5C7505A127B65FDB00BE3227 /* CIMetaView.swift */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.swift; path = CIMetaView.swift; sourceTree = ""; }; 5C7505A427B679EE00BE3227 /* NavLinkPlain.swift */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.swift; path = NavLinkPlain.swift; sourceTree = ""; }; 5C7505A727B6D34800BE3227 /* ChatInfoToolbar.swift */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.swift; path = ChatInfoToolbar.swift; sourceTree = ""; }; - CE11BADE0000000000000001 /* NameBadge.swift */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.swift; path = NameBadge.swift; sourceTree = ""; }; 5C764E88279CBCB3000C6508 /* ChatModel.swift */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.swift; path = ChatModel.swift; sourceTree = ""; }; 5C84FE9129A216C800D95B1A /* nl */ = {isa = PBXFileReference; lastKnownFileType = text.plist.strings; name = nl; path = nl.lproj/Localizable.strings; sourceTree = ""; }; 5C84FE9329A2179C00D95B1A /* nl */ = {isa = PBXFileReference; lastKnownFileType = text.plist.strings; name = nl; path = "nl.lproj/SimpleX--iOS--InfoPlist.strings"; sourceTree = ""; }; @@ -550,7 +549,6 @@ 6493D667280ED77F007A76FB /* en */ = {isa = PBXFileReference; lastKnownFileType = text.plist.strings; name = en; path = en.lproj/Localizable.strings; sourceTree = ""; }; 6495D7032F48CFC50060512B /* ChannelMembersView.swift */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.swift; path = ChannelMembersView.swift; sourceTree = ""; }; 6495D7052F48CFFD0060512B /* ChannelRelaysView.swift */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.swift; path = ChannelRelaysView.swift; sourceTree = ""; }; - E5E418032F83D2CA00252B9E /* ChannelWebAccessView.swift */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.swift; path = ChannelWebAccessView.swift; sourceTree = ""; }; 6495D7072F48D0000060512B /* AddGroupRelayView.swift */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.swift; path = AddGroupRelayView.swift; sourceTree = ""; }; 649BCD9F280460FD00C3A862 /* ComposeImageView.swift */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.swift; path = ComposeImageView.swift; sourceTree = ""; }; 649BCDA12805D6EF00C3A862 /* CIImageView.swift */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.swift; path = CIImageView.swift; sourceTree = ""; }; @@ -606,6 +604,7 @@ B70CE9E52D4BE5930080F36D /* GroupMentions.swift */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.swift; path = GroupMentions.swift; sourceTree = ""; }; B73EFE522CE5FA3500C778EA /* CreateSimpleXAddress.swift */ = {isa = PBXFileReference; fileEncoding = 4; lastKnownFileType = sourcecode.swift; path = CreateSimpleXAddress.swift; sourceTree = ""; }; B76E6C302C5C41D900EC11AA /* ContactListNavLink.swift */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.swift; path = ContactListNavLink.swift; sourceTree = ""; }; + CE11BADE0000000000000001 /* NameBadge.swift */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.swift; path = NameBadge.swift; sourceTree = ""; }; CE176F1F2C87014C00145DBC /* InvertedForegroundStyle.swift */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.swift; path = InvertedForegroundStyle.swift; sourceTree = ""; }; CE1EB0E32C459A660099D896 /* ShareAPI.swift */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.swift; path = ShareAPI.swift; sourceTree = ""; }; CE2AD9CD2C452A4D00E844E3 /* ChatUtils.swift */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.swift; path = ChatUtils.swift; sourceTree = ""; }; @@ -690,6 +689,7 @@ E5DDBE6D2DC4106200A0EFF0 /* AppAPITypes.swift */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.swift; path = AppAPITypes.swift; sourceTree = ""; }; E5DDBE6F2DC4217900A0EFF0 /* NSEAPITypes.swift */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.swift; path = NSEAPITypes.swift; sourceTree = ""; }; E5E418002F83D2CA00252B9E /* OnboardingCards.swift */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.swift; path = OnboardingCards.swift; sourceTree = ""; }; + E5E418032F83D2CA00252B9E /* ChannelWebAccessView.swift */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.swift; path = ChannelWebAccessView.swift; sourceTree = ""; }; /* End PBXFileReference section */ /* Begin PBXFrameworksBuildPhase section */ diff --git a/apps/ios/bg.lproj/Localizable.strings b/apps/ios/bg.lproj/Localizable.strings index 68f2cfe502..d68157f42d 100644 --- a/apps/ios/bg.lproj/Localizable.strings +++ b/apps/ios/bg.lproj/Localizable.strings @@ -888,9 +888,6 @@ marked deleted chat item preview text */ /* call status */ "calling…" = "повикване…"; -/* No comment provided by engineer. */ -"Calls" = "Обаждания"; - /* No comment provided by engineer. */ "Calls prohibited!" = "Обажданията са забранени!"; @@ -1655,9 +1652,6 @@ alert button */ /* No comment provided by engineer. */ "Desktop devices" = "Настолни устройства"; -/* No comment provided by engineer. */ -"Develop" = "Разработване"; - /* No comment provided by engineer. */ "Developer" = "Инструменти за разработчици"; @@ -2628,7 +2622,7 @@ server test error */ /* No comment provided by engineer. */ "Large file!" = "Голям файл!"; -/* No comment provided by engineer. */ +/* badge alert button */ "Learn more" = "Научете повече"; /* swipe action */ @@ -3216,9 +3210,6 @@ alert button */ /* No comment provided by engineer. */ "Preview" = "Визуализация"; -/* No comment provided by engineer. */ -"Your privacy" = "Поверителност и сигурност"; - /* No comment provided by engineer. */ "Private filenames" = "Поверителни имена на файлове"; @@ -3886,9 +3877,6 @@ chat item action */ /* No comment provided by engineer. */ "Submit" = "Изпрати"; -/* No comment provided by engineer. */ -"Support SimpleX Chat" = "Подкрепете SimpleX Chat"; - /* No comment provided by engineer. */ "System" = "Системен"; @@ -4235,9 +4223,6 @@ server test failure */ /* No comment provided by engineer. */ "v%@" = "v%@"; -/* No comment provided by engineer. */ -"v%@ (%@)" = "v%@ (%@)"; - /* No comment provided by engineer. */ "Verify code with desktop" = "Потвърди кода с настолното устройство"; @@ -4451,9 +4436,6 @@ server test failure */ /* No comment provided by engineer. */ "You can enable later via Settings" = "Можете да активирате по-късно през Настройки"; -/* No comment provided by engineer. */ -"You can enable them later via app Your privacy settings." = "Можете да ги активирате по-късно през настройките за \"Поверителност и сигурност\" на приложението."; - /* No comment provided by engineer. */ "You can give another try." = "Можете да опитате още веднъж."; @@ -4583,9 +4565,6 @@ server test failure */ /* No comment provided by engineer. */ "Your calls" = "Вашите обаждания"; -/* No comment provided by engineer. */ -"Your chat database" = "Вашата база данни"; - /* No comment provided by engineer. */ "Your chat database is not encrypted - set passphrase to encrypt it." = "Вашата база данни не е криптирана - задайте парола, за да я криптирате."; diff --git a/apps/ios/cs.lproj/Localizable.strings b/apps/ios/cs.lproj/Localizable.strings index 0b74ef9504..295dcbb0b7 100644 --- a/apps/ios/cs.lproj/Localizable.strings +++ b/apps/ios/cs.lproj/Localizable.strings @@ -758,9 +758,6 @@ swipe action */ /* call status */ "calling…" = "volání…"; -/* No comment provided by engineer. */ -"Calls" = "Hovory"; - /* No comment provided by engineer. */ "Calls prohibited!" = "Volání zakázáno!"; @@ -1302,9 +1299,6 @@ alert button */ /* No comment provided by engineer. */ "Description" = "Popis"; -/* No comment provided by engineer. */ -"Develop" = "Vyvinout"; - /* No comment provided by engineer. */ "Developer" = "Nástroje pro vývojáře"; @@ -2097,7 +2091,7 @@ server test error */ /* No comment provided by engineer. */ "Large file!" = "Velký soubor!"; -/* No comment provided by engineer. */ +/* badge alert button */ "Learn more" = "Zjistit více"; /* swipe action */ @@ -2577,9 +2571,6 @@ alert button */ /* No comment provided by engineer. */ "Preview" = "Náhled"; -/* No comment provided by engineer. */ -"Your privacy" = "Ochrana osobních údajů a zabezpečení"; - /* No comment provided by engineer. */ "Private filenames" = "Soukromé názvy souborů"; @@ -3130,9 +3121,6 @@ chat item action */ /* No comment provided by engineer. */ "Submit" = "Odeslat"; -/* No comment provided by engineer. */ -"Support SimpleX Chat" = "Podpořte SimpleX Chat"; - /* No comment provided by engineer. */ "System" = "Systém"; @@ -3404,9 +3392,6 @@ server test failure */ /* No comment provided by engineer. */ "Using SimpleX Chat servers." = "Používat servery SimpleX Chat."; -/* No comment provided by engineer. */ -"v%@ (%@)" = "v%@ (%@)"; - /* No comment provided by engineer. */ "Verify connection security" = "Ověření zabezpečení připojení"; @@ -3542,9 +3527,6 @@ server test failure */ /* No comment provided by engineer. */ "You can enable later via Settings" = "Můžete povolit později v Nastavení"; -/* No comment provided by engineer. */ -"You can enable them later via app Your privacy settings." = "Můžete je povolit později v nastavení Soukromí & Bezpečnosti aplikace"; - /* No comment provided by engineer. */ "You can hide or mute a user profile - swipe it to the right." = "Profil uživatele můžete skrýt nebo ztlumit - přejeďte prstem doprava."; @@ -3659,9 +3641,6 @@ server test failure */ /* No comment provided by engineer. */ "Your calls" = "Vaše hovory"; -/* No comment provided by engineer. */ -"Your chat database" = "Vaše chatovací databáze"; - /* No comment provided by engineer. */ "Your chat database is not encrypted - set passphrase to encrypt it." = "Vaše chat databáze není šifrována – nastavte přístupovou frázi pro její šifrování."; diff --git a/apps/ios/de.lproj/Localizable.strings b/apps/ios/de.lproj/Localizable.strings index 80246b727b..a0853abb32 100644 --- a/apps/ios/de.lproj/Localizable.strings +++ b/apps/ios/de.lproj/Localizable.strings @@ -1022,9 +1022,6 @@ marked deleted chat item preview text */ /* call status */ "calling…" = "Anrufen…"; -/* No comment provided by engineer. */ -"Calls" = "Anrufe"; - /* No comment provided by engineer. */ "Calls prohibited!" = "Anrufe nicht zugelassen!"; @@ -2058,14 +2055,11 @@ alert button */ "Details" = "Details"; /* No comment provided by engineer. */ -"Develop" = "Entwicklung"; +"Developer" = "Entwicklertools"; /* No comment provided by engineer. */ "Developer options" = "Optionen für Entwickler"; -/* No comment provided by engineer. */ -"Developer" = "Entwicklertools"; - /* No comment provided by engineer. */ "Device" = "Gerät"; @@ -3464,7 +3458,7 @@ servers warning */ /* No comment provided by engineer. */ "Large file!" = "Große Datei!"; -/* No comment provided by engineer. */ +/* badge alert button */ "Learn more" = "Mehr erfahren"; /* swipe action */ @@ -4532,9 +4526,6 @@ alert button */ /* No comment provided by engineer. */ "Previously connected servers" = "Bisher verbundene Server"; -/* No comment provided by engineer. */ -"Your privacy" = "Datenschutz & Sicherheit"; - /* No comment provided by engineer. */ "Privacy for your customers." = "Schutz der Privatsphäre Ihrer Kunden."; @@ -5818,9 +5809,6 @@ report reason */ /* No comment provided by engineer. */ "Subscriptions ignored" = "Nicht beachtete Abonnements"; -/* No comment provided by engineer. */ -"Support SimpleX Chat" = "Unterstützung von SimpleX Chat"; - /* No comment provided by engineer. */ "Switch audio and video during the call." = "Während des Anrufs zwischen Audio und Video wechseln"; @@ -6054,7 +6042,7 @@ server test failure */ "This action cannot be undone - the messages sent and received in this chat earlier than selected will be deleted." = "Dieser Vorgang kann nicht rückgängig gemacht werden - die in diesem Chat früher als ausgewählt gesendeten und empfangenen Nachrichten werden gelöscht."; /* No comment provided by engineer. */ -"This action cannot be undone - your profile, contacts, messages and files will be irreversibly lost." = "Ihr Profil, Ihre Kontakte, Nachrichten und Dateien gehen unwiderruflich verloren. Diese Aktion kann nicht rückgängig gemacht werden!"; +"This action cannot be undone - your profile, contacts, messages and files will be irreversibly lost." = "Ihr Profil, Ihre Kontakte, Nachrichten und Dateien gehen unwiderruflich verloren. Diese Aktion kann nicht rückgängig gemacht werden."; /* E2EE info chat item */ "This chat is protected by end-to-end encryption." = "Dieser Chat ist durch Ende-zu-Ende-Verschlüsselung geschützt."; @@ -6455,9 +6443,6 @@ server test failure */ /* No comment provided by engineer. */ "v%@" = "v%@"; -/* No comment provided by engineer. */ -"v%@ (%@)" = "v%@ (%@)"; - /* relay test step */ "Verify" = "Überprüfen"; @@ -6758,9 +6743,6 @@ server test failure */ /* No comment provided by engineer. */ "You can enable later via Settings" = "Sie können diese später in den Einstellungen aktivieren"; -/* No comment provided by engineer. */ -"You can enable them later via app Your privacy settings." = "Sie können diese später in den Datenschutz & Sicherheits-Einstellungen der App aktivieren."; - /* No comment provided by engineer. */ "You can give another try." = "Sie können es nochmal probieren."; @@ -6941,9 +6923,6 @@ server test failure */ /* No comment provided by engineer. */ "Your channel" = "Ihr Kanal"; -/* No comment provided by engineer. */ -"Your chat database" = "Chat-Datenbank"; - /* No comment provided by engineer. */ "Your chat database is not encrypted - set passphrase to encrypt it." = "Ihre Chat-Datenbank ist nicht verschlüsselt. Bitte legen Sie ein Passwort fest, um sie zu schützen."; diff --git a/apps/ios/es.lproj/Localizable.strings b/apps/ios/es.lproj/Localizable.strings index e0611c0afc..964b407ac0 100644 --- a/apps/ios/es.lproj/Localizable.strings +++ b/apps/ios/es.lproj/Localizable.strings @@ -1022,9 +1022,6 @@ marked deleted chat item preview text */ /* call status */ "calling…" = "llamando…"; -/* No comment provided by engineer. */ -"Calls" = "Llamadas"; - /* No comment provided by engineer. */ "Calls prohibited!" = "¡Llamadas no permitidas!"; @@ -2058,14 +2055,11 @@ alert button */ "Details" = "Detalles"; /* No comment provided by engineer. */ -"Develop" = "Desarrollo"; +"Developer" = "Herramientas desarrollo"; /* No comment provided by engineer. */ "Developer options" = "Opciones desarrollador"; -/* No comment provided by engineer. */ -"Developer" = "Herramientas desarrollo"; - /* No comment provided by engineer. */ "Device" = "Dispositivo"; @@ -3464,7 +3458,7 @@ servers warning */ /* No comment provided by engineer. */ "Large file!" = "¡Archivo grande!"; -/* No comment provided by engineer. */ +/* badge alert button */ "Learn more" = "Más información"; /* swipe action */ @@ -4532,9 +4526,6 @@ alert button */ /* No comment provided by engineer. */ "Previously connected servers" = "Servidores conectados previamente"; -/* No comment provided by engineer. */ -"Your privacy" = "Seguridad y Privacidad"; - /* No comment provided by engineer. */ "Privacy for your customers." = "Privacidad para tus clientes."; @@ -5818,9 +5809,6 @@ report reason */ /* No comment provided by engineer. */ "Subscriptions ignored" = "Suscripciones ignoradas"; -/* No comment provided by engineer. */ -"Support SimpleX Chat" = "Soporte SimpleX Chat"; - /* No comment provided by engineer. */ "Switch audio and video during the call." = "Intercambia audio y video durante la llamada."; @@ -6455,9 +6443,6 @@ server test failure */ /* No comment provided by engineer. */ "v%@" = "v%@"; -/* No comment provided by engineer. */ -"v%@ (%@)" = "v%@ (%@)"; - /* relay test step */ "Verify" = "Verificar"; @@ -6758,9 +6743,6 @@ server test failure */ /* No comment provided by engineer. */ "You can enable later via Settings" = "Puedes activar más tarde en Configuración"; -/* No comment provided by engineer. */ -"You can enable them later via app Your privacy settings." = "Puedes activarlos más tarde en la configuración de Privacidad y Seguridad."; - /* No comment provided by engineer. */ "You can give another try." = "Puedes intentarlo de nuevo."; @@ -6941,9 +6923,6 @@ server test failure */ /* No comment provided by engineer. */ "Your channel" = "Tu canal"; -/* No comment provided by engineer. */ -"Your chat database" = "Base de datos"; - /* No comment provided by engineer. */ "Your chat database is not encrypted - set passphrase to encrypt it." = "La base de datos no está cifrada - establece una contraseña para cifrarla."; diff --git a/apps/ios/fi.lproj/Localizable.strings b/apps/ios/fi.lproj/Localizable.strings index 36b516374e..2f631380b1 100644 --- a/apps/ios/fi.lproj/Localizable.strings +++ b/apps/ios/fi.lproj/Localizable.strings @@ -488,9 +488,6 @@ swipe action */ /* call status */ "calling…" = "soittaa…"; -/* No comment provided by engineer. */ -"Calls" = "Puhelut"; - /* No comment provided by engineer. */ "Can't invite contact!" = "Kontaktia ei voi kutsua!"; @@ -978,9 +975,6 @@ alert button */ /* No comment provided by engineer. */ "Description" = "Kuvaus"; -/* No comment provided by engineer. */ -"Develop" = "Kehitä"; - /* No comment provided by engineer. */ "Developer" = "Kehittäjätyökalut"; @@ -1764,7 +1758,7 @@ server test error */ /* No comment provided by engineer. */ "Large file!" = "Suuri tiedosto!"; -/* No comment provided by engineer. */ +/* badge alert button */ "Learn more" = "Lue lisää"; /* swipe action */ @@ -2231,9 +2225,6 @@ new chat action */ /* No comment provided by engineer. */ "Preview" = "Esikatselu"; -/* No comment provided by engineer. */ -"Your privacy" = "Yksityisyys ja turvallisuus"; - /* No comment provided by engineer. */ "Private filenames" = "Yksityiset tiedostonimet"; @@ -2778,9 +2769,6 @@ chat item action */ /* No comment provided by engineer. */ "Submit" = "Lähetä"; -/* No comment provided by engineer. */ -"Support SimpleX Chat" = "SimpleX Chat tuki"; - /* No comment provided by engineer. */ "System" = "Järjestelmä"; @@ -3040,9 +3028,6 @@ server test failure */ /* No comment provided by engineer. */ "Using SimpleX Chat servers." = "Käyttää SimpleX Chat -palvelimia."; -/* No comment provided by engineer. */ -"v%@ (%@)" = "v%@ (%@)"; - /* No comment provided by engineer. */ "Verify connection security" = "Tarkista yhteyden suojaus"; @@ -3178,9 +3163,6 @@ server test failure */ /* No comment provided by engineer. */ "You can enable later via Settings" = "Voit ottaa käyttöön myöhemmin asetusten kautta"; -/* No comment provided by engineer. */ -"You can enable them later via app Your privacy settings." = "Voit ottaa ne käyttöön myöhemmin sovelluksen Yksityisyys & Turvallisuus -asetuksista."; - /* No comment provided by engineer. */ "You can hide or mute a user profile - swipe it to the right." = "Voit piilottaa tai mykistää käyttäjäprofiilin pyyhkäisemällä sitä oikealle."; @@ -3292,9 +3274,6 @@ server test failure */ /* No comment provided by engineer. */ "Your calls" = "Puhelusi"; -/* No comment provided by engineer. */ -"Your chat database" = "Keskustelut-tietokantasi"; - /* No comment provided by engineer. */ "Your chat database is not encrypted - set passphrase to encrypt it." = "Keskustelut-tietokantasi ei ole salattu - aseta tunnuslause sen salaamiseksi."; diff --git a/apps/ios/fr.lproj/Localizable.strings b/apps/ios/fr.lproj/Localizable.strings index 98cdb4aec8..8939fa18e3 100644 --- a/apps/ios/fr.lproj/Localizable.strings +++ b/apps/ios/fr.lproj/Localizable.strings @@ -879,9 +879,6 @@ marked deleted chat item preview text */ /* call status */ "calling…" = "appel…"; -/* No comment provided by engineer. */ -"Calls" = "Appels"; - /* No comment provided by engineer. */ "Calls prohibited!" = "Les appels ne sont pas autorisés !"; @@ -1739,14 +1736,11 @@ alert button */ "Details" = "Détails"; /* No comment provided by engineer. */ -"Develop" = "Développer"; +"Developer" = "Outils du développeur"; /* No comment provided by engineer. */ "Developer options" = "Options pour les développeurs"; -/* No comment provided by engineer. */ -"Developer" = "Outils du développeur"; - /* No comment provided by engineer. */ "Device" = "Appareil"; @@ -2964,7 +2958,7 @@ servers warning */ /* No comment provided by engineer. */ "Large file!" = "Fichier trop lourd !"; -/* No comment provided by engineer. */ +/* badge alert button */ "Learn more" = "En savoir plus"; /* swipe action */ @@ -3741,9 +3735,6 @@ alert button */ /* No comment provided by engineer. */ "Previously connected servers" = "Serveurs précédemment connectés"; -/* No comment provided by engineer. */ -"Your privacy" = "Vie privée et sécurité"; - /* No comment provided by engineer. */ "Privacy for your customers." = "Respect de la vie privée de vos clients."; @@ -4696,9 +4687,6 @@ chat item action */ /* No comment provided by engineer. */ "Subscriptions ignored" = "Inscriptions ignorées"; -/* No comment provided by engineer. */ -"Support SimpleX Chat" = "Supporter SimpleX Chat"; - /* No comment provided by engineer. */ "Switch audio and video during the call." = "Passer de l'audio à la vidéo pendant l'appel."; @@ -5183,9 +5171,6 @@ server test failure */ /* No comment provided by engineer. */ "v%@" = "v%@"; -/* No comment provided by engineer. */ -"v%@ (%@)" = "v%@ (%@)"; - /* No comment provided by engineer. */ "Verify code with desktop" = "Vérifier le code avec le bureau"; @@ -5447,9 +5432,6 @@ server test failure */ /* No comment provided by engineer. */ "You can enable later via Settings" = "Vous pouvez l'activer ultérieurement via Paramètres"; -/* No comment provided by engineer. */ -"You can enable them later via app Your privacy settings." = "Vous pouvez les activer ultérieurement via les paramètres de Confidentialité et Sécurité de l'application."; - /* No comment provided by engineer. */ "You can give another try." = "Vous pouvez faire un nouvel essai."; @@ -5600,9 +5582,6 @@ server test failure */ /* No comment provided by engineer. */ "Your calls" = "Vos appels"; -/* No comment provided by engineer. */ -"Your chat database" = "Votre base de données de chat"; - /* No comment provided by engineer. */ "Your chat database is not encrypted - set passphrase to encrypt it." = "Votre base de données de chat n'est pas chiffrée - définisez une phrase secrète."; diff --git a/apps/ios/hu.lproj/Localizable.strings b/apps/ios/hu.lproj/Localizable.strings index 362d9157fd..11e3c54118 100644 --- a/apps/ios/hu.lproj/Localizable.strings +++ b/apps/ios/hu.lproj/Localizable.strings @@ -1022,9 +1022,6 @@ marked deleted chat item preview text */ /* call status */ "calling…" = "hívás…"; -/* No comment provided by engineer. */ -"Calls" = "Hívások"; - /* No comment provided by engineer. */ "Calls prohibited!" = "A hívások le vannak tiltva!"; @@ -2058,14 +2055,11 @@ alert button */ "Details" = "További részletek"; /* No comment provided by engineer. */ -"Develop" = "Fejlesztés"; +"Developer" = "Fejlesztői eszközök"; /* No comment provided by engineer. */ "Developer options" = "Fejlesztői beállítások"; -/* No comment provided by engineer. */ -"Developer" = "Fejlesztői eszközök"; - /* No comment provided by engineer. */ "Device" = "Eszköz"; @@ -3464,7 +3458,7 @@ servers warning */ /* No comment provided by engineer. */ "Large file!" = "Nagy fájl!"; -/* No comment provided by engineer. */ +/* badge alert button */ "Learn more" = "Tudjon meg többet"; /* swipe action */ @@ -4532,9 +4526,6 @@ alert button */ /* No comment provided by engineer. */ "Previously connected servers" = "Korábban kapcsolódott kiszolgálók"; -/* No comment provided by engineer. */ -"Your privacy" = "Adatvédelem és biztonság"; - /* No comment provided by engineer. */ "Privacy for your customers." = "Saját ügyfeleinek adatvédelme."; @@ -5818,9 +5809,6 @@ report reason */ /* No comment provided by engineer. */ "Subscriptions ignored" = "Mellőzött feliratkozások"; -/* No comment provided by engineer. */ -"Support SimpleX Chat" = "SimpleX Chat támogatása"; - /* No comment provided by engineer. */ "Switch audio and video during the call." = "Hang/Videó váltása hívás közben."; @@ -6455,9 +6443,6 @@ server test failure */ /* No comment provided by engineer. */ "v%@" = "v%@"; -/* No comment provided by engineer. */ -"v%@ (%@)" = "v%@ (%@)"; - /* relay test step */ "Verify" = "Ellenőrzés"; @@ -6758,9 +6743,6 @@ server test failure */ /* No comment provided by engineer. */ "You can enable later via Settings" = "Később engedélyezheti a beállításokban"; -/* No comment provided by engineer. */ -"You can enable them later via app Your privacy settings." = "Később engedélyezheti őket az „Adatvédelem és biztonság” menüben."; - /* No comment provided by engineer. */ "You can give another try." = "Megpróbálhatja még egyszer."; @@ -6941,9 +6923,6 @@ server test failure */ /* No comment provided by engineer. */ "Your channel" = "Saját csatorna"; -/* No comment provided by engineer. */ -"Your chat database" = "Csevegési adatbázis"; - /* No comment provided by engineer. */ "Your chat database is not encrypted - set passphrase to encrypt it." = "A csevegési adatbázis nincs titkosítva – adjon meg egy jelmondatot a titkosításhoz."; diff --git a/apps/ios/it.lproj/Localizable.strings b/apps/ios/it.lproj/Localizable.strings index 8d4fa3532b..57fba78693 100644 --- a/apps/ios/it.lproj/Localizable.strings +++ b/apps/ios/it.lproj/Localizable.strings @@ -1022,9 +1022,6 @@ marked deleted chat item preview text */ /* call status */ "calling…" = "chiamata…"; -/* No comment provided by engineer. */ -"Calls" = "Chiamate"; - /* No comment provided by engineer. */ "Calls prohibited!" = "Chiamate proibite!"; @@ -2058,14 +2055,11 @@ alert button */ "Details" = "Dettagli"; /* No comment provided by engineer. */ -"Develop" = "Sviluppa"; +"Developer" = "Strumenti di sviluppo"; /* No comment provided by engineer. */ "Developer options" = "Opzioni sviluppatore"; -/* No comment provided by engineer. */ -"Developer" = "Strumenti di sviluppo"; - /* No comment provided by engineer. */ "Device" = "Dispositivo"; @@ -3464,7 +3458,7 @@ servers warning */ /* No comment provided by engineer. */ "Large file!" = "File grande!"; -/* No comment provided by engineer. */ +/* badge alert button */ "Learn more" = "Maggiori informazioni"; /* swipe action */ @@ -4532,9 +4526,6 @@ alert button */ /* No comment provided by engineer. */ "Previously connected servers" = "Server precedentemente connessi"; -/* No comment provided by engineer. */ -"Your privacy" = "Privacy e sicurezza"; - /* No comment provided by engineer. */ "Privacy for your customers." = "Privacy per i tuoi clienti."; @@ -5818,9 +5809,6 @@ report reason */ /* No comment provided by engineer. */ "Subscriptions ignored" = "Iscrizioni ignorate"; -/* No comment provided by engineer. */ -"Support SimpleX Chat" = "Supporta SimpleX Chat"; - /* No comment provided by engineer. */ "Switch audio and video during the call." = "Cambia tra audio e video durante la chiamata."; @@ -6455,9 +6443,6 @@ server test failure */ /* No comment provided by engineer. */ "v%@" = "v%@"; -/* No comment provided by engineer. */ -"v%@ (%@)" = "v%@ (%@)"; - /* relay test step */ "Verify" = "Verifica"; @@ -6758,9 +6743,6 @@ server test failure */ /* No comment provided by engineer. */ "You can enable later via Settings" = "Puoi attivarle più tardi nelle impostazioni"; -/* No comment provided by engineer. */ -"You can enable them later via app Your privacy settings." = "Puoi attivarle più tardi nelle impostazioni di privacy e sicurezza dell'app."; - /* No comment provided by engineer. */ "You can give another try." = "Puoi fare un altro tentativo."; @@ -6941,9 +6923,6 @@ server test failure */ /* No comment provided by engineer. */ "Your channel" = "Il tuo canale"; -/* No comment provided by engineer. */ -"Your chat database" = "Il tuo database della chat"; - /* No comment provided by engineer. */ "Your chat database is not encrypted - set passphrase to encrypt it." = "Il tuo database della chat non è crittografato: imposta la password per crittografarlo."; diff --git a/apps/ios/ja.lproj/Localizable.strings b/apps/ios/ja.lproj/Localizable.strings index b88eb10414..e7a442c879 100644 --- a/apps/ios/ja.lproj/Localizable.strings +++ b/apps/ios/ja.lproj/Localizable.strings @@ -692,9 +692,6 @@ swipe action */ /* call status */ "calling…" = "発信中…"; -/* No comment provided by engineer. */ -"Calls" = "通話"; - /* alert title */ "Can't change profile" = "プロフィールを変更できません"; @@ -1264,14 +1261,11 @@ alert button */ "Desktop devices" = "デスクトップ機器"; /* No comment provided by engineer. */ -"Develop" = "開発"; +"Developer" = "開発ツール"; /* No comment provided by engineer. */ "Developer options" = "開発者向けの設定"; -/* No comment provided by engineer. */ -"Developer" = "開発ツール"; - /* No comment provided by engineer. */ "Device" = "端末"; @@ -1350,15 +1344,33 @@ alert button */ /* No comment provided by engineer. */ "Downgrade and open chat" = "ダウングレードしてチャットを開く"; +/* No comment provided by engineer. */ +"Download errors" = "ダウンロードエラー"; + +/* No comment provided by engineer. */ +"Download failed" = "ダウンロード失敗"; + /* server test step */ "Download file" = "ファイルをダウンロード"; +/* No comment provided by engineer. */ +"Downloaded" = "ダウンロード済"; + +/* No comment provided by engineer. */ +"Downloaded files" = "ダウンロード済ファイル"; + +/* No comment provided by engineer. */ +"Downloading archive" = "アーカイブをダウンロード中"; + /* No comment provided by engineer. */ "Duplicate display name!" = "表示の名前が重複してます！"; /* integrity error chat item */ "duplicate message" = "重複メッセージ"; +/* No comment provided by engineer. */ +"duplicates" = "重複"; + /* No comment provided by engineer. */ "Duration" = "間隔"; @@ -1371,6 +1383,9 @@ alert button */ /* No comment provided by engineer. */ "Edit group profile" = "グループのプロフィールを編集"; +/* No comment provided by engineer. */ +"Empty message!" = "メッセージが空です!"; + /* alert button */ "Enable" = "有効"; @@ -2055,7 +2070,7 @@ server test error */ /* No comment provided by engineer. */ "Large file!" = "大きなファイル！"; -/* No comment provided by engineer. */ +/* badge alert button */ "Learn more" = "さらに詳しく"; /* swipe action */ @@ -2532,9 +2547,6 @@ alert button */ /* No comment provided by engineer. */ "Preview" = "プレビュー"; -/* No comment provided by engineer. */ -"Your privacy" = "プライバシーとセキュリティ"; - /* No comment provided by engineer. */ "Private filenames" = "プライベートなファイル名"; @@ -3061,9 +3073,6 @@ chat item action */ /* No comment provided by engineer. */ "Submit" = "送信"; -/* No comment provided by engineer. */ -"Support SimpleX Chat" = "Simplex Chatを支援"; - /* No comment provided by engineer. */ "System" = "システム"; @@ -3320,9 +3329,6 @@ server test failure */ /* No comment provided by engineer. */ "Using SimpleX Chat servers." = "SimpleX チャット サーバーを使用する。"; -/* No comment provided by engineer. */ -"v%@ (%@)" = "v%@ (%@)"; - /* No comment provided by engineer. */ "Verify connection security" = "接続のセキュリティを確認"; @@ -3458,9 +3464,6 @@ server test failure */ /* No comment provided by engineer. */ "You can enable later via Settings" = "あとで設定から有効にできます"; -/* No comment provided by engineer. */ -"You can enable them later via app Your privacy settings." = "あとでアプリのプライバシーとセキュリティの設定から有効にすることができます。"; - /* No comment provided by engineer. */ "You can hide or mute a user profile - swipe it to the right." = "ユーザープロファイルを右にスワイプすると、非表示またはミュートにすることができます。"; @@ -3575,9 +3578,6 @@ server test failure */ /* No comment provided by engineer. */ "Your calls" = "あなたの通話"; -/* No comment provided by engineer. */ -"Your chat database" = "あなたのチャットデータベース"; - /* No comment provided by engineer. */ "Your chat database is not encrypted - set passphrase to encrypt it." = "チャット データベースは暗号化されていません - 暗号化するにはパスフレーズを設定してください。"; diff --git a/apps/ios/nl.lproj/Localizable.strings b/apps/ios/nl.lproj/Localizable.strings index 1c776a7bbe..10c55356e4 100644 --- a/apps/ios/nl.lproj/Localizable.strings +++ b/apps/ios/nl.lproj/Localizable.strings @@ -882,9 +882,6 @@ marked deleted chat item preview text */ /* call status */ "calling…" = "bellen…"; -/* No comment provided by engineer. */ -"Calls" = "Oproepen"; - /* No comment provided by engineer. */ "Calls prohibited!" = "Bellen niet toegestaan!"; @@ -1767,14 +1764,11 @@ alert button */ "Details" = "Details"; /* No comment provided by engineer. */ -"Develop" = "Ontwikkelen"; +"Developer" = "Ontwikkel gereedschap"; /* No comment provided by engineer. */ "Developer options" = "Ontwikkelaars opties"; -/* No comment provided by engineer. */ -"Developer" = "Ontwikkel gereedschap"; - /* No comment provided by engineer. */ "Device" = "Apparaat"; @@ -3040,7 +3034,7 @@ servers warning */ /* No comment provided by engineer. */ "Large file!" = "Groot bestand!"; -/* No comment provided by engineer. */ +/* badge alert button */ "Learn more" = "Kom meer te weten"; /* swipe action */ @@ -3928,9 +3922,6 @@ alert button */ /* No comment provided by engineer. */ "Previously connected servers" = "Eerder verbonden servers"; -/* No comment provided by engineer. */ -"Your privacy" = "Privacy en beveiliging"; - /* No comment provided by engineer. */ "Privacy for your customers." = "Privacy voor uw klanten."; @@ -4989,9 +4980,6 @@ report reason */ /* No comment provided by engineer. */ "Subscriptions ignored" = "Subscriptions genegeerd"; -/* No comment provided by engineer. */ -"Support SimpleX Chat" = "Ondersteuning van SimpleX Chat"; - /* No comment provided by engineer. */ "Switch audio and video during the call." = "Wisselen tussen audio en video tijdens het gesprek."; @@ -5509,9 +5497,6 @@ server test failure */ /* No comment provided by engineer. */ "v%@" = "v%@"; -/* No comment provided by engineer. */ -"v%@ (%@)" = "v%@ (%@)"; - /* No comment provided by engineer. */ "Verify code with desktop" = "Code verifiëren met desktop"; @@ -5776,9 +5761,6 @@ server test failure */ /* No comment provided by engineer. */ "You can enable later via Settings" = "U kunt later inschakelen via Instellingen"; -/* No comment provided by engineer. */ -"You can enable them later via app Your privacy settings." = "U kunt ze later inschakelen via de privacy- en beveiligingsinstellingen van de app."; - /* No comment provided by engineer. */ "You can give another try." = "Je kunt het nog een keer proberen."; @@ -5935,9 +5917,6 @@ server test failure */ /* No comment provided by engineer. */ "Your calls" = "Uw oproepen"; -/* No comment provided by engineer. */ -"Your chat database" = "Uw chat database"; - /* No comment provided by engineer. */ "Your chat database is not encrypted - set passphrase to encrypt it." = "Uw chat database is niet versleuteld, stel een wachtwoord in om deze te versleutelen."; diff --git a/apps/ios/pl.lproj/Localizable.strings b/apps/ios/pl.lproj/Localizable.strings index 9cc6eca252..90cb67436f 100644 --- a/apps/ios/pl.lproj/Localizable.strings +++ b/apps/ios/pl.lproj/Localizable.strings @@ -921,9 +921,6 @@ marked deleted chat item preview text */ /* call status */ "calling…" = "dzwonie…"; -/* No comment provided by engineer. */ -"Calls" = "Połączenia"; - /* No comment provided by engineer. */ "Calls prohibited!" = "Połączenia zakazane!"; @@ -1839,14 +1836,11 @@ alert button */ "Details" = "Szczegóły"; /* No comment provided by engineer. */ -"Develop" = "Deweloperskie"; +"Developer" = "Narzędzia deweloperskie"; /* No comment provided by engineer. */ "Developer options" = "Opcje deweloperskie"; -/* No comment provided by engineer. */ -"Developer" = "Narzędzia deweloperskie"; - /* No comment provided by engineer. */ "Device" = "Urządzenie"; @@ -3173,7 +3167,7 @@ servers warning */ /* No comment provided by engineer. */ "Large file!" = "Duży plik!"; -/* No comment provided by engineer. */ +/* badge alert button */ "Learn more" = "Dowiedz się więcej"; /* swipe action */ @@ -4130,9 +4124,6 @@ alert button */ /* No comment provided by engineer. */ "Previously connected servers" = "Wcześniej połączone serwery"; -/* No comment provided by engineer. */ -"Your privacy" = "Prywatność i bezpieczeństwo"; - /* No comment provided by engineer. */ "Privacy for your customers." = "Prywatność dla Twoich klientów."; @@ -5269,9 +5260,6 @@ report reason */ /* No comment provided by engineer. */ "Subscriptions ignored" = "Subskrypcje zignorowane"; -/* No comment provided by engineer. */ -"Support SimpleX Chat" = "Wspieraj SimpleX Chat"; - /* No comment provided by engineer. */ "Switch audio and video during the call." = "Przełączanie audio i wideo podczas połączenia."; @@ -5855,9 +5843,6 @@ server test failure */ /* No comment provided by engineer. */ "v%@" = "v%@"; -/* No comment provided by engineer. */ -"v%@ (%@)" = "v%@ (%@)"; - /* No comment provided by engineer. */ "Verify code with desktop" = "Zweryfikuj kod z komputera"; @@ -6134,9 +6119,6 @@ server test failure */ /* No comment provided by engineer. */ "You can enable later via Settings" = "Możesz włączyć później w Ustawieniach"; -/* No comment provided by engineer. */ -"You can enable them later via app Your privacy settings." = "Możesz je włączyć później w ustawieniach Prywatności i Bezpieczeństwa aplikacji."; - /* No comment provided by engineer. */ "You can give another try." = "Możesz spróbować ponownie."; @@ -6302,9 +6284,6 @@ server test failure */ /* No comment provided by engineer. */ "Your calls" = "Twoje połączenia"; -/* No comment provided by engineer. */ -"Your chat database" = "Twoja baza danych czatu"; - /* No comment provided by engineer. */ "Your chat database is not encrypted - set passphrase to encrypt it." = "Baza danych czatu nie jest szyfrowana - ustaw hasło, aby ją zaszyfrować."; diff --git a/apps/ios/ru.lproj/Localizable.strings b/apps/ios/ru.lproj/Localizable.strings index 042359dd7e..ea9c8373b0 100644 --- a/apps/ios/ru.lproj/Localizable.strings +++ b/apps/ios/ru.lproj/Localizable.strings @@ -1022,9 +1022,6 @@ marked deleted chat item preview text */ /* call status */ "calling…" = "входящий звонок…"; -/* No comment provided by engineer. */ -"Calls" = "Звонки"; - /* No comment provided by engineer. */ "Calls prohibited!" = "Звонки запрещены!"; @@ -2058,14 +2055,11 @@ alert button */ "Details" = "Подробности"; /* No comment provided by engineer. */ -"Develop" = "Для разработчиков"; +"Developer" = "Инструменты разработчика"; /* No comment provided by engineer. */ "Developer options" = "Опции разработчика"; -/* No comment provided by engineer. */ -"Developer" = "Разработчик"; - /* No comment provided by engineer. */ "Device" = "Устройство"; @@ -3464,7 +3458,7 @@ servers warning */ /* No comment provided by engineer. */ "Large file!" = "Большой файл!"; -/* No comment provided by engineer. */ +/* badge alert button */ "Learn more" = "Узнать больше"; /* swipe action */ @@ -4532,9 +4526,6 @@ alert button */ /* No comment provided by engineer. */ "Previously connected servers" = "Ранее подключенные серверы"; -/* No comment provided by engineer. */ -"Your privacy" = "Конфиденциальность"; - /* No comment provided by engineer. */ "Privacy for your customers." = "Конфиденциальность для ваших покупателей."; @@ -5818,9 +5809,6 @@ report reason */ /* No comment provided by engineer. */ "Subscriptions ignored" = "Подписок игнорировано"; -/* No comment provided by engineer. */ -"Support SimpleX Chat" = "Поддержать SimpleX Chat"; - /* No comment provided by engineer. */ "Switch audio and video during the call." = "Переключайте звук и видео во время звонка."; @@ -6455,9 +6443,6 @@ server test failure */ /* No comment provided by engineer. */ "v%@" = "v%@"; -/* No comment provided by engineer. */ -"v%@ (%@)" = "v%@ (%@)"; - /* relay test step */ "Verify" = "Проверить"; @@ -6758,9 +6743,6 @@ server test failure */ /* No comment provided by engineer. */ "You can enable later via Settings" = "Вы можете включить их позже в Настройках"; -/* No comment provided by engineer. */ -"You can enable them later via app Your privacy settings." = "Вы можете включить их позже в настройках Конфиденциальности."; - /* No comment provided by engineer. */ "You can give another try." = "Вы можете попробовать ещё раз."; @@ -6941,9 +6923,6 @@ server test failure */ /* No comment provided by engineer. */ "Your channel" = "Ваш канал"; -/* No comment provided by engineer. */ -"Your chat database" = "База данных"; - /* No comment provided by engineer. */ "Your chat database is not encrypted - set passphrase to encrypt it." = "База данных НЕ зашифрована. Установите пароль, чтобы защитить Ваши данные."; diff --git a/apps/ios/th.lproj/Localizable.strings b/apps/ios/th.lproj/Localizable.strings index 62bf4d3d59..7b8a0ebceb 100644 --- a/apps/ios/th.lproj/Localizable.strings +++ b/apps/ios/th.lproj/Localizable.strings @@ -464,9 +464,6 @@ swipe action */ /* call status */ "calling…" = "กำลังโทร…"; -/* No comment provided by engineer. */ -"Calls" = "โทร"; - /* No comment provided by engineer. */ "Can't invite contact!" = "ไม่สามารถเชิญผู้ติดต่อได้!"; @@ -942,9 +939,6 @@ alert button */ /* No comment provided by engineer. */ "Description" = "คำอธิบาย"; -/* No comment provided by engineer. */ -"Develop" = "พัฒนา"; - /* No comment provided by engineer. */ "Developer" = "เครื่องมือสำหรับนักพัฒนา"; @@ -1710,7 +1704,7 @@ server test error */ /* No comment provided by engineer. */ "Large file!" = "ไฟล์ขนาดใหญ่!"; -/* No comment provided by engineer. */ +/* badge alert button */ "Learn more" = "ศึกษาเพิ่มเติม"; /* swipe action */ @@ -2171,9 +2165,6 @@ new chat action */ /* No comment provided by engineer. */ "Preview" = "ดูตัวอย่าง"; -/* No comment provided by engineer. */ -"Your privacy" = "ความเป็นส่วนตัวและความปลอดภัย"; - /* No comment provided by engineer. */ "Private filenames" = "ชื่อไฟล์ส่วนตัว"; @@ -2700,9 +2691,6 @@ chat item action */ /* No comment provided by engineer. */ "Submit" = "ส่ง"; -/* No comment provided by engineer. */ -"Support SimpleX Chat" = "สนับสนุน SimpleX แชท"; - /* No comment provided by engineer. */ "System" = "ระบบ"; @@ -2950,9 +2938,6 @@ server test failure */ /* No comment provided by engineer. */ "Using SimpleX Chat servers." = "กำลังใช้เซิร์ฟเวอร์ SimpleX Chat อยู่"; -/* No comment provided by engineer. */ -"v%@ (%@)" = "v%@ (%@)"; - /* No comment provided by engineer. */ "Verify connection security" = "ตรวจสอบความปลอดภัยในการเชื่อมต่อ"; @@ -3088,9 +3073,6 @@ server test failure */ /* No comment provided by engineer. */ "You can enable later via Settings" = "คุณสามารถเปิดใช้งานในภายหลังผ่านการตั้งค่า"; -/* No comment provided by engineer. */ -"You can enable them later via app Your privacy settings." = "คุณสามารถเปิดใช้งานได้ในภายหลังผ่านการตั้งค่าความเป็นส่วนตัวและความปลอดภัยของแอป"; - /* No comment provided by engineer. */ "You can hide or mute a user profile - swipe it to the right." = "คุณสามารถซ่อนหรือปิดเสียงโปรไฟล์ผู้ใช้ - ปัดไปทางขวา"; @@ -3199,9 +3181,6 @@ server test failure */ /* No comment provided by engineer. */ "Your calls" = "การโทรของคุณ"; -/* No comment provided by engineer. */ -"Your chat database" = "ฐานข้อมูลการแชทของคุณ"; - /* No comment provided by engineer. */ "Your chat database is not encrypted - set passphrase to encrypt it." = "ฐานข้อมูลการแชทของคุณไม่ได้ถูก encrypt - ตั้งรหัสผ่านเพื่อ encrypt"; diff --git a/apps/ios/tr.lproj/Localizable.strings b/apps/ios/tr.lproj/Localizable.strings index 8dfc23078c..6ae56475d4 100644 --- a/apps/ios/tr.lproj/Localizable.strings +++ b/apps/ios/tr.lproj/Localizable.strings @@ -944,9 +944,6 @@ marked deleted chat item preview text */ /* call status */ "calling…" = "aranıyor…"; -/* No comment provided by engineer. */ -"Calls" = "Aramalar"; - /* No comment provided by engineer. */ "Calls prohibited!" = "Aramalara izin verilmiyor!"; @@ -1853,14 +1850,11 @@ alert button */ "Details" = "Detaylar"; /* No comment provided by engineer. */ -"Develop" = "Geliştir"; +"Developer" = "Geliştirici araçları"; /* No comment provided by engineer. */ "Developer options" = "Geliştirici seçenekleri"; -/* No comment provided by engineer. */ -"Developer" = "Geliştirici araçları"; - /* No comment provided by engineer. */ "Device" = "Cihaz"; @@ -3156,7 +3150,7 @@ servers warning */ /* No comment provided by engineer. */ "Large file!" = "Büyük dosya!"; -/* No comment provided by engineer. */ +/* badge alert button */ "Learn more" = "Daha fazlası"; /* swipe action */ @@ -4098,9 +4092,6 @@ alert button */ /* No comment provided by engineer. */ "Previously connected servers" = "Önceden bağlanılmış sunucular"; -/* No comment provided by engineer. */ -"Your privacy" = "Gizlilik & güvenlik"; - /* No comment provided by engineer. */ "Privacy for your customers." = "Müşterileriniz için gizlilik."; @@ -5219,9 +5210,6 @@ report reason */ /* No comment provided by engineer. */ "Subscriptions ignored" = "Abonelikler göz ardı edildi"; -/* No comment provided by engineer. */ -"Support SimpleX Chat" = "SimpleX Chat'e destek ol"; - /* No comment provided by engineer. */ "Switch audio and video during the call." = "Görüşme sırasında ses ve görüntüyü değiştirin."; @@ -5793,9 +5781,6 @@ server test failure */ /* No comment provided by engineer. */ "v%@" = "v%@"; -/* No comment provided by engineer. */ -"v%@ (%@)" = "v%@ (%@)"; - /* No comment provided by engineer. */ "Verify code with desktop" = "Bilgisayarla kodu doğrula"; @@ -6063,9 +6048,6 @@ server test failure */ /* No comment provided by engineer. */ "You can enable later via Settings" = "Daha sonra Ayarlardan etkinleştirebilirsin"; -/* No comment provided by engineer. */ -"You can enable them later via app Your privacy settings." = "Daha sonra uygulamanın Gizlilik ve Güvenlik ayarlarından etkinleştirebilirsiniz."; - /* No comment provided by engineer. */ "You can give another try." = "Bir kez daha deneyebilirsiniz."; @@ -6228,9 +6210,6 @@ server test failure */ /* No comment provided by engineer. */ "Your calls" = "Aramaların"; -/* No comment provided by engineer. */ -"Your chat database" = "Sohbet veritabanınız"; - /* No comment provided by engineer. */ "Your chat database is not encrypted - set passphrase to encrypt it." = "Sohbet veritabanınız şifrelenmemiş - şifrelemek için parola ayarlayın."; diff --git a/apps/ios/uk.lproj/Localizable.strings b/apps/ios/uk.lproj/Localizable.strings index ff2f64e2ed..872b3d9a4c 100644 --- a/apps/ios/uk.lproj/Localizable.strings +++ b/apps/ios/uk.lproj/Localizable.strings @@ -897,9 +897,6 @@ marked deleted chat item preview text */ /* call status */ "calling…" = "дзвоніть…"; -/* No comment provided by engineer. */ -"Calls" = "Дзвінки"; - /* No comment provided by engineer. */ "Calls prohibited!" = "Дзвінки заборонені!"; @@ -1800,14 +1797,11 @@ alert button */ "Details" = "Деталі"; /* No comment provided by engineer. */ -"Develop" = "Розробник"; +"Developer" = "Інструменти для розробників"; /* No comment provided by engineer. */ "Developer options" = "Можливості для розробників"; -/* No comment provided by engineer. */ -"Developer" = "Інструменти для розробників"; - /* No comment provided by engineer. */ "Device" = "Пристрій"; @@ -3097,7 +3091,7 @@ servers warning */ /* No comment provided by engineer. */ "Large file!" = "Великий файл!"; -/* No comment provided by engineer. */ +/* badge alert button */ "Learn more" = "Дізнайтеся більше"; /* swipe action */ @@ -4018,9 +4012,6 @@ alert button */ /* No comment provided by engineer. */ "Previously connected servers" = "Раніше підключені сервери"; -/* No comment provided by engineer. */ -"Your privacy" = "Конфіденційність і безпека"; - /* No comment provided by engineer. */ "Privacy for your customers." = "Конфіденційність для ваших клієнтів."; @@ -5130,9 +5121,6 @@ report reason */ /* No comment provided by engineer. */ "Subscriptions ignored" = "Підписки ігноруються"; -/* No comment provided by engineer. */ -"Support SimpleX Chat" = "Підтримка чату SimpleX"; - /* No comment provided by engineer. */ "Switch audio and video during the call." = "Перемикайте аудіо та відео під час дзвінка."; @@ -5695,9 +5683,6 @@ server test failure */ /* No comment provided by engineer. */ "v%@" = "v%@"; -/* No comment provided by engineer. */ -"v%@ (%@)" = "v%@ (%@)"; - /* No comment provided by engineer. */ "Verify code with desktop" = "Перевірте код на робочому столі"; @@ -5965,9 +5950,6 @@ server test failure */ /* No comment provided by engineer. */ "You can enable later via Settings" = "Ви можете увімкнути пізніше в Налаштуваннях"; -/* No comment provided by engineer. */ -"You can enable them later via app Your privacy settings." = "Ви можете увімкнути їх пізніше в налаштуваннях конфіденційності та безпеки програми."; - /* No comment provided by engineer. */ "You can give another try." = "Ви можете спробувати ще раз."; @@ -6130,9 +6112,6 @@ server test failure */ /* No comment provided by engineer. */ "Your calls" = "Твої дзвінки"; -/* No comment provided by engineer. */ -"Your chat database" = "Ваша база даних чату"; - /* No comment provided by engineer. */ "Your chat database is not encrypted - set passphrase to encrypt it." = "Ваша база даних чату не зашифрована - встановіть ключову фразу, щоб зашифрувати її."; diff --git a/apps/ios/zh-Hans.lproj/Localizable.strings b/apps/ios/zh-Hans.lproj/Localizable.strings index f3138230f9..a8ba88f8dc 100644 --- a/apps/ios/zh-Hans.lproj/Localizable.strings +++ b/apps/ios/zh-Hans.lproj/Localizable.strings @@ -918,9 +918,6 @@ marked deleted chat item preview text */ /* call status */ "calling…" = "呼叫中……"; -/* No comment provided by engineer. */ -"Calls" = "通话"; - /* No comment provided by engineer. */ "Calls prohibited!" = "禁止来电！"; @@ -1830,14 +1827,11 @@ alert button */ "Details" = "详细信息"; /* No comment provided by engineer. */ -"Develop" = "开发"; +"Developer" = "开发者工具"; /* No comment provided by engineer. */ "Developer options" = "开发者选项"; -/* No comment provided by engineer. */ -"Developer" = "开发者工具"; - /* No comment provided by engineer. */ "Device" = "设备"; @@ -3155,7 +3149,7 @@ servers warning */ /* No comment provided by engineer. */ "Large file!" = "大文件！"; -/* No comment provided by engineer. */ +/* badge alert button */ "Learn more" = "了解更多"; /* swipe action */ @@ -4106,9 +4100,6 @@ alert button */ /* No comment provided by engineer. */ "Previously connected servers" = "以前连接的服务器"; -/* No comment provided by engineer. */ -"Your privacy" = "隐私和安全"; - /* No comment provided by engineer. */ "Privacy for your customers." = "客户隐私。"; @@ -5236,9 +5227,6 @@ report reason */ /* No comment provided by engineer. */ "Subscriptions ignored" = "忽略订阅"; -/* No comment provided by engineer. */ -"Support SimpleX Chat" = "支持 SimpleX Chat"; - /* No comment provided by engineer. */ "Switch audio and video during the call." = "通话期间切换音频和视频。"; @@ -5813,9 +5801,6 @@ server test failure */ /* No comment provided by engineer. */ "v%@" = "v%@"; -/* No comment provided by engineer. */ -"v%@ (%@)" = "v%@ (%@)"; - /* No comment provided by engineer. */ "Verify code with desktop" = "用桌面端验证代码"; @@ -6092,9 +6077,6 @@ server test failure */ /* No comment provided by engineer. */ "You can enable later via Settings" = "您可以稍后在设置中启用它"; -/* No comment provided by engineer. */ -"You can enable them later via app Your privacy settings." = "您可以稍后通过应用程序的 \"隐私与安全 \"设置启用它们。"; - /* No comment provided by engineer. */ "You can give another try." = "你可以再试一次。"; @@ -6257,9 +6239,6 @@ server test failure */ /* No comment provided by engineer. */ "Your calls" = "您的通话"; -/* No comment provided by engineer. */ -"Your chat database" = "您的聊天数据库"; - /* No comment provided by engineer. */ "Your chat database is not encrypted - set passphrase to encrypt it." = "您的聊天数据库未加密——设置密码来加密。"; From 6d7de613269af4eca4a28c32f5e0e133c235de64 Mon Sep 17 00:00:00 2001 From: Evgeny Date: Mon, 22 Jun 2026 18:16:56 +0100 Subject: [PATCH 58/81] website: translations (#7033) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit * Translated using Weblate (Russian) Currently translated at 87.5% (324 of 370 strings) Translation: SimpleX Chat/SimpleX Chat website Translate-URL: https://hosted.weblate.org/projects/simplex-chat/website/ru/ * Translated using Weblate (Hungarian) Currently translated at 100.0% (370 of 370 strings) Translation: SimpleX Chat/SimpleX Chat website Translate-URL: https://hosted.weblate.org/projects/simplex-chat/website/hu/ * Translated using Weblate (Russian) Currently translated at 87.5% (324 of 370 strings) Translation: SimpleX Chat/SimpleX Chat website Translate-URL: https://hosted.weblate.org/projects/simplex-chat/website/ru/ * Translated using Weblate (Hungarian) Currently translated at 100.0% (370 of 370 strings) Translation: SimpleX Chat/SimpleX Chat website Translate-URL: https://hosted.weblate.org/projects/simplex-chat/website/hu/ * Translated using Weblate (Hungarian) Currently translated at 100.0% (370 of 370 strings) Translation: SimpleX Chat/SimpleX Chat website Translate-URL: https://hosted.weblate.org/projects/simplex-chat/website/hu/ * Translated using Weblate (Italian) Currently translated at 100.0% (370 of 370 strings) Translation: SimpleX Chat/SimpleX Chat website Translate-URL: https://hosted.weblate.org/projects/simplex-chat/website/it/ * Translated using Weblate (German) Currently translated at 100.0% (370 of 370 strings) Translation: SimpleX Chat/SimpleX Chat website Translate-URL: https://hosted.weblate.org/projects/simplex-chat/website/de/ * Translated using Weblate (French) Currently translated at 74.5% (276 of 370 strings) Translation: SimpleX Chat/SimpleX Chat website Translate-URL: https://hosted.weblate.org/projects/simplex-chat/website/fr/ * Translated using Weblate (French) Currently translated at 75.6% (280 of 370 strings) Translation: SimpleX Chat/SimpleX Chat website Translate-URL: https://hosted.weblate.org/projects/simplex-chat/website/fr/ * Translated using Weblate (Indonesian) Currently translated at 95.1% (352 of 370 strings) Translation: SimpleX Chat/SimpleX Chat website Translate-URL: https://hosted.weblate.org/projects/simplex-chat/website/id/ * Translated using Weblate (Hungarian) Currently translated at 100.0% (373 of 373 strings) Translation: SimpleX Chat/SimpleX Chat website Translate-URL: https://hosted.weblate.org/projects/simplex-chat/website/hu/ * Translated using Weblate (Italian) Currently translated at 100.0% (373 of 373 strings) Translation: SimpleX Chat/SimpleX Chat website Translate-URL: https://hosted.weblate.org/projects/simplex-chat/website/it/ * Translated using Weblate (Chinese (Simplified Han script)) Currently translated at 99.1% (370 of 373 strings) Translation: SimpleX Chat/SimpleX Chat website Translate-URL: https://hosted.weblate.org/projects/simplex-chat/website/zh_Hans/ * Translated using Weblate (German) Currently translated at 100.0% (373 of 373 strings) Translation: SimpleX Chat/SimpleX Chat website Translate-URL: https://hosted.weblate.org/projects/simplex-chat/website/de/ * Translated using Weblate (Persian) Currently translated at 60.5% (226 of 373 strings) Translation: SimpleX Chat/SimpleX Chat website Translate-URL: https://hosted.weblate.org/projects/simplex-chat/website/fa/ * website: fix translation errors found in review - id: why-p6 had a stray Devanagari word "चाहे" mid-sentence → "baik … maupun" - zh_Hans: "Community Credits" mistranslated as 社区声望 (reputation) → 社区积分 (x2) - fr: why-p1 used informal "Tu es né" in a formal vous block → "Vous êtes né" - hu: dropped added words not in source — "ismeretlen" (index-nextweb-p1), "kedvenc" (index-directory-p2) - ru: file-desc "с сквозным" → "со сквозным" (preposition); file-e2e-note restored "end-to-end" → "Сквозное шифрование" - it: index-token-p2 "gestione" → "governance" della rete Co-Authored-By: Claude Opus 4.8 (1M context) * Translated using Weblate (Russian) Currently translated at 87.5% (324 of 370 strings) Translation: SimpleX Chat/SimpleX Chat website Translate-URL: https://hosted.weblate.org/projects/simplex-chat/website/ru/ * Translated using Weblate (Hungarian) Currently translated at 100.0% (370 of 370 strings) Translation: SimpleX Chat/SimpleX Chat website Translate-URL: https://hosted.weblate.org/projects/simplex-chat/website/hu/ * Translated using Weblate (Hungarian) Currently translated at 100.0% (370 of 370 strings) Translation: SimpleX Chat/SimpleX Chat website Translate-URL: https://hosted.weblate.org/projects/simplex-chat/website/hu/ * Translated using Weblate (Italian) Currently translated at 100.0% (370 of 370 strings) Translation: SimpleX Chat/SimpleX Chat website Translate-URL: https://hosted.weblate.org/projects/simplex-chat/website/it/ * Translated using Weblate (German) Currently translated at 100.0% (370 of 370 strings) Translation: SimpleX Chat/SimpleX Chat website Translate-URL: https://hosted.weblate.org/projects/simplex-chat/website/de/ * Translated using Weblate (French) Currently translated at 74.5% (276 of 370 strings) Translation: SimpleX Chat/SimpleX Chat website Translate-URL: https://hosted.weblate.org/projects/simplex-chat/website/fr/ * Translated using Weblate (French) Currently translated at 75.6% (280 of 370 strings) Translation: SimpleX Chat/SimpleX Chat website Translate-URL: https://hosted.weblate.org/projects/simplex-chat/website/fr/ * Translated using Weblate (Indonesian) Currently translated at 95.1% (352 of 370 strings) Translation: SimpleX Chat/SimpleX Chat website Translate-URL: https://hosted.weblate.org/projects/simplex-chat/website/id/ * Translated using Weblate (Hungarian) Currently translated at 100.0% (373 of 373 strings) Translation: SimpleX Chat/SimpleX Chat website Translate-URL: https://hosted.weblate.org/projects/simplex-chat/website/hu/ * Translated using Weblate (Italian) Currently translated at 100.0% (373 of 373 strings) Translation: SimpleX Chat/SimpleX Chat website Translate-URL: https://hosted.weblate.org/projects/simplex-chat/website/it/ * Translated using Weblate (Chinese (Simplified Han script)) Currently translated at 99.1% (370 of 373 strings) Translation: SimpleX Chat/SimpleX Chat website Translate-URL: https://hosted.weblate.org/projects/simplex-chat/website/zh_Hans/ * Translated using Weblate (German) Currently translated at 100.0% (373 of 373 strings) Translation: SimpleX Chat/SimpleX Chat website Translate-URL: https://hosted.weblate.org/projects/simplex-chat/website/de/ * Translated using Weblate (Persian) Currently translated at 60.5% (226 of 373 strings) Translation: SimpleX Chat/SimpleX Chat website Translate-URL: https://hosted.weblate.org/projects/simplex-chat/website/fa/ * website: fix Indonesian why-p6 (replace stray Hindi word चाहे with 'entah') --------- Co-authored-by: Skyward Copied Co-authored-by: summoner001 Co-authored-by: Random Co-authored-by: mlanp Co-authored-by: Retis2025 Co-authored-by: N4TH4NOT Co-authored-by: Arif Budiman Co-authored-by: 大王叫我来巡山 Co-authored-by: Reg3xp Co-authored-by: Narasimha-sc <166327228+Narasimha-sc@users.noreply.github.com> Co-authored-by: Claude Opus 4.8 (1M context) --- website/langs/de.json | 13 ++++-- website/langs/fa.json | 6 ++- website/langs/fr.json | 32 +++++++++++-- website/langs/hu.json | 23 +++++---- website/langs/id.json | 95 +++++++++++++++++++++++++++++--------- website/langs/it.json | 13 ++++-- website/langs/ru.json | 8 +++- website/langs/zh_Hans.json | 12 ++--- 8 files changed, 149 insertions(+), 53 deletions(-) diff --git a/website/langs/de.json b/website/langs/de.json index 7c52be6498..9d465970e0 100644 --- a/website/langs/de.json +++ b/website/langs/de.json @@ -274,11 +274,11 @@ "index-publications-kuketz-title": "Überprüfung von Mike Kuketz", "index-publications-optout-title": "Podcast-Interview von OptOut", "worlds-most-secure-messaging": "Niemand kann sehen, mit wem Sie kommunizieren", - "index-messaging-p1": "Nicht einmal Server – alle Nachrichten sehen aus wie zufälliges Rauschen.", + "index-messaging-p1": "Alle Nachrichten sehen aus wie zufälliges Rauschen - auch für die Server.", "index-messaging-p2": "Täglich werden Dutzende Millionen Nachrichten privat zugestellt.", "index-messaging-cta": "Lernen Sie mehr über SimpleX-Messaging", "index-nextweb-h2": "Das Netzwerk
gehört Ihnen", - "index-nextweb-p1": "Jeder Kontakt und jede Gruppe liegt auf Ihrem Gerät, nicht in einer Server-Datenbank.", + "index-nextweb-p1": "Jeder Kontakt und jede Gruppe wird auf Ihrem Gerät gespeichert, nicht in einer Server-Datenbank.", "index-nextweb-p2": "Keine einzelne Instanz kontrolliert das Netzwerk – jeder kann Server betreiben.", "index-token-h2": "Finanziert von seinen Nutzern", "index-token-p1": "Um unabhängig zu bleiben, werden große Kanäle und Communitys für ihre Server bezahlen.", @@ -296,7 +296,7 @@ "index-roadmap-3-title": "Lassen Sie Ihre Communitys wachsen", "index-roadmap-3-desc": "Tools zur Förderung Ihrer Communitys", "index-directory-h2": "Treten Sie SimpleX-Communitys bei", - "index-directory-p1": "Mehr als 2 Millionen Menschen haben SimpleX-Apps heruntergeladen.", + "index-directory-p1": "Mehr als 2 Millionen Nutzer haben schon SimpleX-Apps heruntergeladen.", "index-directory-p2": "Finden Sie Kanäle und Communitys im Verzeichnis oder erstellen Sie Ihre Eigenen!", "index-directory-cta": "SimpleX-Verzeichnis anzeigen", "index-directory-users-group-title": "SimpleX-Nutzergruppe", @@ -368,6 +368,9 @@ "file-proto-p-2": "Der für die Dateiverschlüsselung genutzte Schlüssel befindet sich ausschließlich im Hash‑Fragment der URL — Ihr Browser sendet ihn niemals an einen Server. Es gibt drei Verschlüsselungsebenen: TLS‑Transport, empfängerbezogene Verschlüsselung (ein eindeutiger, flüchtiger Schlüssel pro Transfer) und Ende‑zu‑Ende‑Verschlüsselung der Datei.", "file-proto-h-4": "Unabhängig voneinander arbeitende Datenrouter", "file-proto-p-4": "Wenn die Datei in Fragmente aufgeteilt wurde, wird sie über Netzwerkrouter übertragen, die von unabhängigen Parteien betrieben werden. Kein Betreiber kann die tatsächliche Dateigröße oder den Dateinamen sehen. Selbst wenn ein Router kompromittiert wird, sieht er nur verschlüsselte Fragmente fester Größe. Die Fragmente werden von den Netzwerkroutern für etwa 48 Stunden zwischengespeichert.", - "file-proto-spec": "Lesen Sie die XFTP‑Protokollspezifikation durch →", - "send-file": "Datei senden" + "file-proto-spec": "Lesen Sie sich die XFTP‑Protokollspezifikation durch →", + "send-file": "Datei senden", + "links": "Links", + "links-title": "Community-Links", + "links-all-languages": "Alle Sprachen" } diff --git a/website/langs/fa.json b/website/langs/fa.json index 250d1800ca..9fe7656d51 100644 --- a/website/langs/fa.json +++ b/website/langs/fa.json @@ -257,5 +257,9 @@ "simplex-network-overlay-card-1-li-3": "P2P مشکل حملات MITM را حل نمی‌کند و بیشتر پیاده‌سازی‌های موجود از پیام‌های خارج از باند برای تبادل کلید اولیه استفاده نمی‌کنند. SimpleX از پیام‌های خارج از باند یا در برخی موارد، از اتصالات امن و مورد اعتماد پیشین برای تبادل کلید اولیه استفاده می‌کند.", "simplex-network-overlay-card-1-li-4": "پیاده‌سازی‌های P2P می‌توانند توسط برخی از ارائه‌دهندگان اینترنت (مانند BitTorrent) مسدود شوند. SimpleX مستقل از نوع حمل و نقل است — این امکان را دارد که بر روی پروتکل‌های وب استاندارد، مانند WebSockets، کار کند.", "directory": "دایرکتوری", - "about-and-contact-us": "درباره ما و تماس با ما" + "about-and-contact-us": "درباره ما و تماس با ما", + "navbar-token": "توکن", + "docs-dropdown-15": "بررسی و بازتولید ساخت‌ها", + "index-hero-h1": "آزاد
باش", + "index-hero-h2": "در شبکه شما" } diff --git a/website/langs/fr.json b/website/langs/fr.json index 765e3feec8..7424dbd31a 100644 --- a/website/langs/fr.json +++ b/website/langs/fr.json @@ -16,7 +16,7 @@ "simplex-explained-tab-2-p-1": "Pour chaque connexion, vous utilisez deux files d'attente de messages distinctes pour envoyer et recevoir des messages via des serveurs différents.", "simplex-explained-tab-2-p-2": "Les serveurs ne transmettent les messages que dans une direction, sans connaître la totalité de la conversation ou des connexions de l'utilisateur.", "simplex-explained-tab-3-p-1": "Les serveurs disposent d'identifiants anonymes distincts pour chaque file d'attente, et ne savent pas à quels utilisateurs ils appartiennent.", - "simplex-explained-tab-3-p-2": "Les utilisateurs peuvent améliorer davantage leur protection des métadonnées en utilisant Tor pour accéder aux serveurs, ce qui empêche la corrélation par adresse IP.", + "simplex-explained-tab-3-p-2": "Les utilisateurs peuvent améliorer davantage leur protection de leurs métadonnées en utilisant Tor pour accéder aux serveurs, ce qui empêche la corrélation par adresse IP.", "chat-bot-example": "Exemple de chatbot", "smp-protocol": "Protocole SMP", "chat-protocol": "Protocole de chat", @@ -71,7 +71,7 @@ "simplex-private-card-9-point-1": "Chaque file d'attente de messages transmet les messages dans une direction, avec des adresses d'envoi et de réception différentes.", "simplex-private-card-9-point-2": "Il réduit les vecteurs d'attaque, par rapport aux agents de messagerie traditionnels, et les métadonnées disponibles.", "simplex-private-card-10-point-1": "SimpleX utilise des adresses et des informations d'identification anonymes temporaires par paires pour chaque contact utilisateur ou membre de groupe.", - "simplex-private-card-10-point-2": "Il permet la distribution de messages sans identifiants de profil utilisateur, offrant une meilleure confidentialité des métadonnées que les alternatives.", + "simplex-private-card-10-point-2": "Il permet la distribution des messages sans identifiants de profil utilisateur, offrant une meilleure confidentialité des métadonnées que les alternatives.", "privacy-matters-1-title": "La publicité et la discrimination par les prix", "privacy-matters-1-overlay-1-title": "Protéger votre vie privée peut vous faire économiser de l'argent", "privacy-matters-1-overlay-1-linkText": "Protéger votre vie privée peut vous faire économiser de l'argent", @@ -291,5 +291,31 @@ "index-roadmap-3": "Déc 2027", "index-roadmap-3-title": "Faites grandir vos communautés", "index-roadmap-3-desc": "Outils pour promouvoir vos communautés", - "send-file": "Envoyer un fichier" + "send-file": "Envoyer un fichier", + "index-publications-optout-title": "Entretien avec le podcast OptOut", + "index-messaging-p2": "Des dizaines de millions de messages envoyés en privé chaque jour.", + "index-nextweb-p1": "Chaque contact et chaque groupe reste sur votre appareil, et non sur un serveur.", + "index-token-p1": "Pour rester indépendants, les grands canaux et les communautés paieront leurs propres serveurs.", + "index-token-p2": "Cela couvrira l'infrastructure, le développement logiciel et la gouvernance du réseau.", + "index-directory-h2": "Rejoindre les communautés SimpleX", + "index-directory-p1": "Plus de 2 millions de personnes ont téléchargé les applications SimpleX.", + "index-directory-p2": "Trouvez vos chaînes et communautés dans l'annuaire et créez-en les vôtres !", + "index-directory-cta": "Afficher le répertoire SimpleX", + "index-directory-users-group-title": "Groupe d'utilisateurs SimpleX", + "how-secure-comparison-title": "Comparaison de la sécurité du chiffrement de bout en bout dans différentes applications de messagerie", + "how-secure-repudiation-deniability": "Dénégation (possibilité de nier)", + "how-secure-break-in-recovery": "Sécurité après une compromission", + "how-secure-two-factor-key-exchange": "Échange de clés à deux facteurs", + "how-secure-post-quantum-hybrid-crypto": "Cryptographie hybride post-quantique", + "messengers-comparison-section-list-point-1": "Briar limite la taille des messages à 1 024 octets (arrondie à l'unité supérieure), tandis que Signal la limite à 160 octets", + "messengers-comparison-section-list-point-2": "La répudiation ne concerne pas la connexion client-serveur.", + "messengers-comparison-section-list-point-3": "Il semblerait que l'utilisation de signatures cryptographiques compromette la possibilité de nier l'auteur (déni), mais cela doit être clarifié.", + "messengers-comparison-section-list-point-4": "La mise en œuvre multi-appareils compromet la sécurité post-compromission de Double Ratchet", + "messengers-comparison-section-list-point-5": "L'échange de clés à deux facteurs est facultatif et peut être remplacé par une vérification par code de sécurité.", + "navbar-old-site": "Ancien site", + "why-p1": "Vous êtes né sans compte.", + "why-p2": "Personne ne surveillait vos conversations. Personne ne dressait de carte des endroits où vous étiez allés. La vie privée n’était pas une fonctionnalité, c’était un mode de vie.", + "why-p3": "Puis nous sommes passés au numérique, et chaque plateforme nous demandait de lui livrer une partie de nous-mêmes : notre nom, notre numéro, nos amis. Nous avons accepté que le prix à payer pour communiquer avec les autres soit de révéler à qui nous parlions. À chaque génération, tant sur le plan humain que technologique, cela s'est passé ainsi : le téléphone, les e-mails, les messageries instantanées, les réseaux sociaux. Cela semblait être la seule voie possible.", + "why-p4": "Il existe une autre solution. Un réseau sans numéros de téléphone, sans noms d'utilisateur, sans comptes, sans aucune forme d'identité d'utilisateur. Un réseau qui met les gens en relation et transmet des messages cryptés sans que l'on sache qui est connecté.", + "why-p5": "Ça n’est pas une meilleure serrure sur la porte de quelqu’un d’autre. Ça n’est pas un propriétaire plus aimable qui respecte votre vie privée, mais qui tient tout de même un registre de tous les visiteurs. Vous n’êtes pas un invité, vous êtes chez vous. Aucun roi ne peut y entrer : c’est vous le souverain." } diff --git a/website/langs/hu.json b/website/langs/hu.json index 67133b8b80..f098236531 100644 --- a/website/langs/hu.json +++ b/website/langs/hu.json @@ -20,7 +20,7 @@ "smp-protocol": "SMP-protokoll", "chat-protocol": "Csevegési protokoll", "donate": "Adományozás", - "copyright-label": "© 2020-2025 SimpleX Chat | Nyílt forráskódú projekt", + "copyright-label": "© 2020-2026 SimpleX Chat | Nyílt forráskódú projekt", "simplex-chat-protocol": "SimpleX Chat protokoll", "terminal-cli": "Terminál CLI", "terms-and-privacy-policy": "Adatvédelmi irányelvek", @@ -259,7 +259,7 @@ "directory": "Csoportjegyzék", "about-and-contact-us": "Névjegy és kapcsolat", "index-hero-h1": "
Legyen
szabad
", - "index-hero-p1": "Az első hálózat felhasználói azonosítók nélkül.
Az Ön névjegyei, csoportjai és csatornái az Öné.", + "index-hero-p1": "Az első hálózat felhasználói azonosítók nélkül.
A saját partnerei, csoportjai és csatornái felett Ön rendelkezik.", "index-hero-download-desktop-btn-title": "SimpleX számítógépes alkalmazásának letöltése", "index-security-assessment-title": "Biztonsági auditok", "index-security-review-2022-title": "Biztonsági audit 2022", @@ -275,15 +275,15 @@ "index-publications-optout-title": "OptOut podcast interjú", "worlds-most-secure-messaging": "Senki sem láthatja, kivel beszélget", "index-messaging-p1": "Még a kiszolgálók sem – az összes üzenet véletlenszerű zajnak tűnik.", - "index-messaging-p2": "Naponta több tízmillió üzenetet kézbesítünk bizalmasan.", + "index-messaging-p2": "Naponta több tízmillió üzenet kerül kézbesítésre privát módon.", "index-messaging-cta": "Tudjon meg többet a SimpleX üzenetváltó alkalmazásról", "index-nextweb-h2": "A hálózat
az Öné", - "index-nextweb-p1": "Minden névjegy és csoport az Ön eszközén van, nem egy kiszolgáló adatbázisában.", + "index-nextweb-p1": "Minden partnere és csoportja az Ön eszközén van tárolva, nem pedig egy ismeretlen kiszolgáló adatbázisában.", "index-nextweb-p2": "Egyetlen szervezet sem irányítja a hálózatot – bárki üzemeltethet kiszolgálókat.", - "index-token-h2": "A felhasználói finanszírozzák", + "index-token-h2": "A felhasználók finanszírozzák", "index-token-p1": "A függetlenség megőrzéséhez a nagy csatornák és közösségek fizetni fognak a kiszolgálóikért.", "index-token-p2": "Ez fedezi az infrastruktúrát, a szoftverfejlesztést és a hálózat irányítását.", - "index-token-cta": "Tudjon meg többet a Community Credits-ről", + "index-token-cta": "Tudjon meg többet a közösségi kreditekről", "index-roadmap-h2": "A SimpleX ütemterve a szabad internethez", "index-roadmap-now": "Most", "index-roadmap-1": "2026", @@ -291,13 +291,13 @@ "index-roadmap-1-desc": "Központosított platformok elhagyása", "index-roadmap-2": "2027. jún.", "index-roadmap-2-title": "Fenntartható közösségek és kiszolgálók", - "index-roadmap-2-desc": "Community Credits elindítása", + "index-roadmap-2-desc": "Közösségi kreditek elindítása", "index-roadmap-3": "2027. dec.", "index-roadmap-3-title": "Közösségek növelése", "index-roadmap-3-desc": "Eszközök biztosítása a közösségek népszerűsítéséhez", "index-directory-h2": "Csatlakozzon a SimpleX közösségekhez", - "index-directory-p1": "Több mint 2 millió ember töltötte le a SimpleX alkalmazásokat.", - "index-directory-p2": "Találja meg csatornáit és közösségeit a csoportjegyzékben, vagy hozza létre a sajátját!", + "index-directory-p1": "Több mint 2 millió ember töltötte le a SimpleX alkalmazások egyikét.", + "index-directory-p2": "Találja meg a kedvenc csatornáit és közösségeit a csoportjegyzékben, vagy hozza létre a sajátját!", "index-directory-cta": "SimpleX-csoportjegyzék megtekintése", "index-directory-users-group-title": "SimpleX felhasználók csoportja", "how-secure-comparison-title": "A végpontok közötti titkosítás összehasonlítása más üzenetváltó alkalmazásokkal", @@ -369,5 +369,8 @@ "file-proto-h-4": "Független útválasztók", "file-proto-p-4": "Amikor a fájl töredékekre oszlik, akkor a független felek által üzemeltetett hálózati útválasztókon keresztül kerül továbbításra. Egyetlen üzemeltető sem láthatja a fájl tényleges méretét és nevét. Még ha egy útválasztó biztonsága meg is sérül, csak a rögzített méretű titkosított töredékeket „láthatja”. A fájltöredékeket a hálózati útválasztók körülbelül 48 órán át tárolják a gyorsítótárban.", "file-proto-spec": "Olvassa el az XFTP-protokoll leírását →", - "send-file": "Fájl küldése" + "send-file": "Fájl küldése", + "links": "Hivatkozások", + "links-title": "Közösségi hivatkozások", + "links-all-languages": "Összes nyelv" } diff --git a/website/langs/id.json b/website/langs/id.json index c766929416..100e3db990 100644 --- a/website/langs/id.json +++ b/website/langs/id.json @@ -155,7 +155,7 @@ "join-the-REDDIT-community": "Bergabung dengan komunitas REDDIT", "join-us-on-GitHub": "Gabung dengan kami di GitHub", "donate-here-to-help-us": "Donasi untuk bantu kami", - "why-simplex-is-unique": "Mengapa SimpleX unik", + "why-simplex-is-unique": "Mengapa SimpleX unik", "simplex-unique-card-1-p-2": "Tidak seperti jaringan perpesanan lain yang ada, SimpleX tidak memiliki ID tetap kepada pengguna — bahkan nomor acak.", "simplex-unique-card-2-p-1": "Karena Anda tidak memiliki ID atau alamat tetap di jaringan SimpleX, tidak seorang pun dapat menghubungi Anda kecuali Anda membagikan alamat pengguna 1-kali atau sementara, seperti kode QR atau tautan.", "simplex-unique-card-3-p-1": "SimpleX menyimpan semua data pengguna pada perangkat klien dalam format basis data terenkripsi portabel — data tersebut dapat ditransfer ke perangkat lain.", @@ -171,7 +171,7 @@ "install-simplex-app": "Instal aplikasi SimpleX", "connect-in-app": "Hubungkan di aplikasi", "open-simplex-app": "Buka aplikasi SimpleX", - "tap-the-connect-button-in-the-app": "Ketuk ‘hubungkan’ di aplikasi", + "tap-the-connect-button-in-the-app": "Ketuk tombol \"connect\" di aplikasi", "scan-the-qr-code-with-the-simplex-chat-app": "Pindai kode QR dengan aplikasi SimpleX Chat", "scan-the-qr-code-with-the-simplex-chat-app-description": "Kunci publik dan alamat antrean pesan dalam tautan ini TIDAK dikirim melalui jaringan saat Anda melihat halaman ini —
keduanya terdapat dalam fragmen hash URL tautan.", "installing-simplex-chat-to-terminal": "Menginstal SimpleX Chat ke terminal", @@ -181,19 +181,19 @@ "the-instructions--source-code": "untuk petunjuk cara mengunduh atau mengompilasinya dari kode sumber.", "if-you-already-installed-simplex-chat-for-the-terminal": "Jika Anda sudah menginstal SimpleX Chat untuk terminal", "if-you-already-installed": "Jika Anda sudah menginstal", - "privacy-matters-section-header": "Mengapa privasi penting", - "privacy-matters-section-subheader": "Menjaga privasi metadata Anda — dengan siapa Anda berbicara — melindungi Anda dari:", + "privacy-matters-section-header": "Mengapa privasi penting", + "privacy-matters-section-subheader": "Menjaga privasi metadata Anda — dengan siapa Anda berbicara — melindungi Anda dari:", "privacy-matters-section-label": "Pastikan messenger Anda tidak dapat mengakses data Anda!", - "simplex-private-section-header": "Apa yang membuat SimpleX privat", + "simplex-private-section-header": "Apa yang membuat SimpleX privat", "tap-to-close": "Ketuk untuk tutup", - "simplex-network-section-header": "Jaringan SimpleX", - "simplex-network-section-desc": "SimpleX Chat memberikan privasi terbaik dengan menggabungkan keunggulan P2P dan jaringan terfederasi.", + "simplex-network-section-header": "Jaringan SimpleX", + "simplex-network-section-desc": "SimpleX Chat memberikan privasi terbaik dengan menggabungkan keunggulan jaringan P2P dan federasi.", "simplex-network-1-header": "Tidak seperti jaringan P2P", "simplex-network-1-desc": "Semua pesan dikirim melalui server, keduanya memberikan privasi metadata yang lebih baik dan pengiriman pesan asinkron yang andal, sekaligus menghindari banyak", "simplex-network-1-overlay-linktext": "masalah jaringan P2P", "simplex-network-2-header": "Tidak seperti jaringan terfederasi", "simplex-network-2-desc": "Server relay SimpleX TIDAK menyimpan profil pengguna, kontak dan pesan yang terkirim, TIDAK terhubung satu sama lain, dan TIDAK ada direktori server.", - "simplex-network-3-desc": "server menyediakan antrian searah untuk hubungkan pengguna, tetapi mereka tidak dapat melihat grafik koneksi jaringan — hanya pengguna yang dapat melihatnya.", + "simplex-network-3-desc": "server menyediakan antrean satu arah untuk menghubungkan pengguna, tetapi mereka tidak memiliki visibilitas terhadap grafik koneksi jaringan — hanya pengguna yang memilikinya.", "comparison-section-header": "Perbandingan dengan protokol lain", "comparison-point-3-text": "Ketergantungan pada DNS", "comparison-point-4-text": "Jaringan tunggal atau terpusat", @@ -201,7 +201,7 @@ "yes": "Ya", "see-here": "lihat disini", "comparison-section-list-point-4a": "Relay SimpleX tidak dapat membahayakan enkripsi e2e. Verifikasi kode keamanan untuk memitigasi serangan pada saluran out-of-band", - "comparison-section-list-point-4": "Jika server operator disusupi. Verifikasi kode keamanan di Signal dan beberapa aplikasi lain untuk mengatasinya", + "comparison-section-list-point-4": "Jika server operator dikompromikan. Verifikasi kode keamanan di Signal dan beberapa aplikasi lain untuk memitigasinya", "comparison-section-list-point-5": "Tidak melindungi privasi metadata pengguna", "comparison-section-list-point-6": "Meskipun P2P didistribusikan, mereka tidak terfederasi — mereka beroperasi sebagai jaringan tunggal", "comparison-section-list-point-7": "Jaringan P2P memiliki otoritas pusat atau seluruh jaringan dapat terkompromi", @@ -216,12 +216,12 @@ "simplex-chat-via-f-droid": "SimpleX Chat melalui F-Droid", "simplex-chat-repo": "Repo SimpleX Chat", "stable-and-beta-versions-built-by-developers": "Versi stable dan beta yang dibuat oleh pengembang", - "f-droid-page-simplex-chat-repo-section-text": "Untuk menambahkannya ke klien F-Droid Anda, pindai kode QR atau gunakan URL ini:", + "f-droid-page-simplex-chat-repo-section-text": "Untuk menambahkannya ke klien F-Droid Anda, pindai kode QR atau gunakan URL ini:", "signing-key-fingerprint": "Penandatanganan sidikjari kunci (SHA-256)", "f-droid-org-repo": "Repo F-Droid.org", "stable-versions-built-by-f-droid-org": "Versi stable yang dibuat oleh F-Droid.org", "releases-to-this-repo-are-done-1-2-days-later": "Rilisan ke repo ini dilakukan beberapa hari kemudian", - "f-droid-page-f-droid-org-repo-section-text": "Repositori SimpleX Chat dan F-Droid.org menandatangani build dengan kunci berbeda. Untuk beralih, silakan ekspor basis data obrolan dan instal ulang aplikasi.", + "f-droid-page-f-droid-org-repo-section-text": "Repositori SimpleX Chat dan F-Droid.org menandatangani build dengan kunci yang berbeda. Untuk beralih, silakan ekspor basis data chat dan pasang ulang aplikasi.", "hero-overlay-card-2-p-4": "SimpleX melindungi dari serangan ini dengan tidak memiliki ID pengguna dalam desainnya. Dan, jika Anda gunakan mode Samaran, Anda akan memiliki nama tampilan berbeda untuk setiap kontak, sehingga mencegah data dibagikan di antara mereka.", "hero-overlay-card-3-p-1": "Trail of Bits adalah konsultan keamanan dan teknologi terkemuka yang kliennya meliputi perusahaan teknologi besar, lembaga pemerintah, dan proyek blockchain besar.", "hero-overlay-card-3-p-2": "Trail of Bits meninjau kriptografi jaringan SimpleX dan komponen jaringan pada November 2022. Baca selengkapnya.", @@ -263,16 +263,16 @@ "index-hero-p1": "Jaringan pertama tanpa ID pengguna.
Anda pemilik kontak, grup, dan kanal Anda.", "index-hero-download-desktop-btn-title": "Unduh Aplikasi Desktop SimpleX", "index-testflight-title": "Pratinjau iOS publik di TestFlight", - "index-f-droid-title": "Repositori SimpleX F-Droid", - "index-security-assessment-title": "penilaian keamanan", - "index-security-review-2022-title": "Tinjauan Keamanan 2022", - "index-security-review-2024-title": "Tinjauan Keamanan 2024", + "index-f-droid-title": "Aplikasi SimpleX via F-Droid", + "index-security-assessment-title": "Audit Keamanan", + "index-security-review-2022-title": "Audit Keamanan 2022", + "index-security-review-2024-title": "Audit Keamanan 2024", "index-security-audits-label": "Audit
Keamanan", - "index-publications-privacy-guides-title": "rekomendasi perpesanan", + "index-publications-privacy-guides-title": "Rekomendasi messenger Privacy Guides", "index-publications-whonix-title": "Rekomendasi perpesanan Whonix", - "index-publications-heise-title": "publikasi", - "index-publications-kuketz-title": "tinjauan", - "index-publications-optout-title": "wawancara podcast", + "index-publications-heise-title": "Publikasi Heise Online", + "index-publications-kuketz-title": "Ulasan oleh Mike Kuketz", + "index-publications-optout-title": "Wawancara podcast OptOut", "worlds-most-secure-messaging": "Tidak Ada yang Bisa Melihat dengan Siapa Anda Bicara", "index-messaging-p1": "Bahkan server pun tidak bisa – semua pesan terlihat seperti derau acak.", "index-messaging-p2": "Puluhan juta pesan dikirim secara privat setiap hari.", @@ -300,7 +300,7 @@ "index-directory-p2": "Temukan kanal dan komunitas Anda di direktori dan buat milik Anda sendiri!", "index-directory-cta": "Lihat Direktori SimpleX", "index-directory-users-group-title": "Grup pengguna SimpleX", - "how-secure-comparison-title": "Seberapa amankah enkripsi end-to-end di berbagai aplikasi perpesanan?", + "how-secure-comparison-title": "Perbandingan keamanan enkripsi end-to-end di berbagai messenger", "how-secure-message-padding": "Lapisan pesan", "how-secure-repudiation-deniability": "Penolakan (penyangkalan)", "how-secure-forward-secrecy": "Forward secrecy", @@ -315,5 +315,58 @@ "messengers-comparison-section-list-point-6": "Kesepakatan kunci Post-quantum \"jarang\" — hanya melindungi beberapa langkah ratchet.", "navbar-token": "Token", "navbar-old-site": "Situs lama", - "send-file": "Kirim file" + "send-file": "Kirim file", + "docs-dropdown-15": "Verifikasi & reproduksi build", + "why-p1": "Anda lahir tanpa akun.", + "why-p2": "Tidak ada yang melacak percakapan Anda. Tidak ada yang membuat peta ke mana Anda pernah pergi. Privasi tidak pernah menjadi fitur — itu adalah cara hidup.", + "why-p3": "Lalu kita berpindah ke dunia online, dan setiap platform meminta sebagian dari diri Anda — nama, nomor, teman-teman Anda. Kita menerima bahwa harga untuk berbicara dengan orang lain adalah membiarkan seseorang tahu dengan siapa kita berbicara. Dari generasi ke generasi, manusia dan teknologi selalu seperti ini — telepon, email, messenger, media sosial. Tampaknya itu satu-satunya cara yang mungkin.", + "why-p4": "Ada cara lain. Sebuah jaringan tanpa nomor telepon. Tanpa nama pengguna. Tanpa akun. Tanpa identitas pengguna dalam bentuk apa pun. Sebuah jaringan yang menghubungkan orang dan membawa pesan terenkripsi tanpa mengetahui siapa yang terhubung.", + "why-p5": "Bukan kunci yang lebih baik di pintu milik orang lain. Bukan pemilik properti yang lebih baik yang menghormati privasi Anda, tetapi tetap menyimpan catatan semua pengunjung. Anda bukan tamu. Anda berada di rumah. Tidak ada raja yang bisa memasukinya — Anda berdaulat.", + "why-p6": "Percakapan Anda adalah milik Anda, seperti yang selalu terjadi sebelum Internet. Jaringan bukanlah tempat yang Anda kunjungi. Jaringan adalah tempat yang Anda ciptakan dan miliki. Dan tidak seorang pun dapat merampasnya dari Anda, entah Anda menjadikannya privat atau publik.", + "why-p7": "Kebebasan manusia yang paling tua — berbicara dengan orang lain tanpa diawasi — dibangun di atas infrastruktur yang tidak dapat mengkhianatinya.", + "why-p8": "Karena kami menghancurkan kekuatan untuk mengetahui siapa Anda. Agar kekuatan Anda tidak pernah bisa dirampas.", + "why-tagline": "Bebaslah di jaringan Anda.", + "why-footer-link": "Mengapa kami membangunnya", + "file-desc": "Kirim file dengan aman menggunakan enkripsi end-to-end — tanpa akun, tanpa pelacakan.", + "file-noscript": "JavaScript diperlukan untuk transfer file.", + "file-e2e-note": "Terenkripsi end-to-end — server tidak pernah melihat file Anda.", + "file-learn-more": "Pelajari lebih lanjut tentang protokol XFTP", + "file-cta-heading": "Dapatkan SimpleX Chat — messenger paling aman & privat", + "file-cta-subheading": "Transfer file yang baru saja Anda gunakan memakai protokol perutean data yang sama dengan SimpleX Chat. Aplikasi ini memiliki pesan terenkripsi end-to-end, panggilan suara dan video, grup, serta pengiriman file. Tanpa akun. Tanpa telepon. Tanpa email. Tanpa ID profil pengguna.", + "file-title": "Transfer File SimpleX", + "file-drop-text": "Seret & lepas file di sini", + "file-drop-hint": "atau", + "file-choose": "Pilih file", + "file-max-size": "Maks. 100 MB - aplikasi SimpleX Chat mendukung file hingga 1 GB", + "file-encrypting": "Mengenkripsi…", + "file-uploading": "Mengunggah…", + "file-cancel": "Batal", + "file-uploaded": "File terunggah", + "file-copy": "Salin", + "file-copied": "Tersalin!", + "file-share": "Bagikan", + "file-expiry": "File biasanya tersedia selama 48 jam.", + "file-sec-1": "File Anda dienkripsi di browser - router data tidak pernah melihat isi, nama, atau ukuran file.", + "file-sec-2": "Kunci enkripsi ada di fragmen hash tautan - tidak pernah dikirim ke server mana pun.", + "file-sec-3": "Untuk keamanan yang lebih baik, gunakan aplikasi SimpleX Chat.", + "file-retry": "Coba lagi", + "file-downloading": "Mengunduh…", + "file-decrypting": "Mendekripsi…", + "file-download-complete": "Unduhan selesai", + "file-download-btn": "Unduh", + "file-too-large": "File terlalu besar (%size%). Maksimum adalah 100 MB. Aplikasi SimpleX mendukung file hingga 1 GB.", + "file-empty": "File kosong.", + "file-invalid-link": "Tautan tidak valid atau rusak.", + "file-init-error": "Gagal menginisialisasi: %error%", + "file-available": "File tersedia (~%size%)", + "file-dl-sec-1": "File ini dienkripsi - router data tidak pernah melihat isi, nama, atau ukuran file.", + "file-workers-required": "Web Workers diperlukan — perbarui browser Anda", + "file-protocol-title": "Protokol XFTP: transfer file paling aman", + "file-proto-h-1": "Tidak memerlukan akun", + "file-proto-p-1": "Setiap fragmen file menggunakan kunci acak baru. Router data tidak memiliki \"pengguna\" atau \"file\" - mereka mentransfer fragmen file terenkripsi dengan ukuran tetap.", + "file-proto-h-2": "Dienkripsi tiga lapis di browser Anda", + "file-proto-p-2": "Kunci enkripsi file hanya ada di fragmen hash URL - browser Anda tidak pernah mengirimkannya ke server. Ada 3 lapisan enkripsi: transport TLS, enkripsi per penerima (kunci ephemeral unik untuk setiap transfer), dan enkripsi file end-to-end.", + "file-proto-h-4": "Router data independen", + "file-proto-p-4": "Saat file dipecah menjadi fragmen, file tersebut dikirim melalui router jaringan yang dioperasikan oleh pihak independen. Tidak ada operator yang dapat melihat ukuran atau nama file yang sebenarnya. Bahkan jika sebuah router dikompromikan, router itu hanya dapat melihat fragmen terenkripsi berukuran tetap. Fragmen file di-cache oleh router jaringan selama sekitar 48 jam.", + "file-proto-spec": "Baca spesifikasi protokol XFTP →" } diff --git a/website/langs/it.json b/website/langs/it.json index a3ced52c8e..6129863909 100644 --- a/website/langs/it.json +++ b/website/langs/it.json @@ -274,15 +274,15 @@ "index-publications-kuketz-title": "Recensione di Mike Kuketz", "index-publications-optout-title": "Intervista podcast di OptOut", "worlds-most-secure-messaging": "Nessuno può vedere con chi parli", - "index-messaging-p1": "Nemmeno i server – tutti i messaggi appaiono come rumore casuale.", - "index-messaging-p2": "Decine di milioni di messaggi recapitati privatamente ogni giorno.", + "index-messaging-p1": "Nemmeno i server: tutti i messaggi appaiono come rumore casuale.", + "index-messaging-p2": "Decine di milioni di messaggi recapitati in modo privato ogni giorno.", "index-messaging-cta": "Scopri di più sui messaggi di SimpleX", "index-nextweb-h2": "La rete
è tua", "index-nextweb-p1": "Ogni contatto e gruppo è sul tuo dispositivo, non nel database di un server.", - "index-nextweb-p2": "Nessuna singola entità controlla la rete – chiunque può gestire server.", + "index-nextweb-p2": "Non c'è una singola entità che controlla la rete: chiunque può gestire i server.", "index-token-h2": "Finanziato dai suoi utenti", "index-token-p1": "Per restare indipendenti, i grandi canali e le comunità pagheranno per i propri server.", - "index-token-p2": "Questo coprirà infrastruttura, sviluppo software e governance della rete.", + "index-token-p2": "Ciò coprirà infrastruttura, sviluppo software e gestione della rete.", "index-token-cta": "Scopri di più sui Crediti Comunitari", "index-roadmap-h2": "Tabella di marcia per un internet libero", "index-roadmap-now": "Ora", @@ -369,5 +369,8 @@ "file-proto-h-4": "Instradatori indipendenti di dati", "file-proto-p-4": "Quando il file è diviso in frammenti, viene inviato tramite instradatori di rete operati da parti indipendenti. Nessun operatore può vedere la vera dimensione o il nome del file. Anche se un instradatore venisse compromesso, potrà vedere solo frammenti cifrati di dimensione fissa. I frammenti di file restano in cache dagli instradatori di rete per circa 48 ore.", "file-proto-spec": "Leggi le specifiche del protocollo XFTP →", - "send-file": "Invia file" + "send-file": "Invia file", + "links": "Collegamenti", + "links-title": "Link della comunità", + "links-all-languages": "Tutte le lingue" } diff --git a/website/langs/ru.json b/website/langs/ru.json index ab968446af..f21b49e528 100644 --- a/website/langs/ru.json +++ b/website/langs/ru.json @@ -44,7 +44,7 @@ "guide-dropdown-9": "Установление соединений", "simplex-unique-1-overlay-1-title": "Полная конфиденциальность Вашей личности, профиля, контактов и метаданных", "hero-overlay-card-2-p-4": "SimpleX защищает от этих атак, поскольку он не использует никакие идентификаторы профилей пользователей. И, если Вы используете режим инкогнито, у Вас будет другое отображаемое имя для каждого контакта, что позволит избежать какого-либо пересечения между ними.", - "privacy-matters-overlay-card-2-p-2": "Чтобы быть объективным и принимать независимые решения, необходимо контролировать свое информационное пространство. Это возможно только, если Вы используете конфиденциальную коммуникационную сеть, которая не имеет доступа к контактам Вашей социальной сети.", + "privacy-matters-overlay-card-2-p-2": "Чтобы быть объективным и принимать независимые решения, необходимо контролировать своё информационное пространство. Это возможно только, если Вы используете конфиденциальную коммуникационную сеть, которая не имеет доступа к контактам Вашей социальной сети.", "hero-overlay-card-2-p-1": "Когда у пользователя есть постоянный идентификатор, даже если это просто случайное число, например Session ID, существует риск того, что провайдер или злоумышленник могут наблюдать за тем, как пользователи соединены и сколько сообщений они отправляют.", "feature-3-title": "Децентрализованные группы — известные только участникам", "glossary": "Глоссарий", @@ -325,5 +325,9 @@ "why-p8": "Потому что мы разрушили саму возможность узнать, кто вы. Чтобы вашу свободу невозможно было отнять.", "why-tagline": "Будь свободен в своей сети.", "why-footer-link": "Почему мы это строим", - "send-file": "Отправить файл" + "send-file": "Отправить файл", + "file-desc": "Отправьте файлы безопасно со сквозным шифрованием — без учётных записей, без отслеживания.", + "file-noscript": "JavaScript необходим для передачи файлов.", + "file-e2e-note": "Сквозное шифрование — сервер никогда не видит ваш файл.", + "file-learn-more": "Узнайте больше о протоколе XFTP" } diff --git a/website/langs/zh_Hans.json b/website/langs/zh_Hans.json index 70f87ca79e..03e27d9a05 100644 --- a/website/langs/zh_Hans.json +++ b/website/langs/zh_Hans.json @@ -75,7 +75,7 @@ "simplex-private-10-title": "临时匿名成对标识符", "simplex-private-8-title": "通过消息混合减少相关性", "simplex-private-card-1-point-2": "每个队列中的网络与密码学库加密盒(NaCL cryptobox)可防止 TLS 受到威胁时消息队列之间的流量关联。", - "simplex-private-card-10-point-2": "它让在没有用户标识符的情况下传递消息成为可能，并提供比替代方案更好的元数据隐私。", + "simplex-private-card-10-point-2": "它让消息能在没有用户标识符的情况下传递，并提供比替代方案更好的元数据隐私。", "privacy-matters-1-title": "广告和价格歧视", "privacy-matters-1-overlay-1-linkText": "隐私为您省钱", "privacy-matters-2-title": "对选举的操纵", @@ -121,7 +121,7 @@ "simplex-network-overlay-card-1-li-6": "P2P 网络可能受到 分布式反射拒绝服务攻击 。客户端有能力重新广播和放大流量，从而导致整个网络范围内的服务中断。 SimpleX 客户端仅中继来自已知连接的流量，因此不能被攻击者用来放大整个网络的流量。", "privacy-matters-overlay-card-1-p-2": "在线零售商知道收入较低的人更有可能在紧急情况下购买商品，因此他们可能会收取更高的价格或取消折扣。", "privacy-matters-overlay-card-1-p-3": "一些金融和保险公司使用社交图谱来确定利率和保费。 它通常会让收入较低的人支付更多—它被称为“贫困溢价”。", - "privacy-matters-overlay-card-1-p-4": "SimpleX 网络比任何替代方案都能更好地保护您人际关系层面的隐私，防止您的社交图谱被任何公司或组织使用。 即使人们使用 SimpleX Chat 应用预配置的服务器，服务器运营方也不知道用户数量或他们的连接数。", + "privacy-matters-overlay-card-1-p-4": "SimpleX 网络比任何替代方案都能更好地保护您人际关系层面的隐私，彻底防止您的社交图谱被任何公司或组织使用。 即使人们使用 SimpleX Chat 应用预配置的服务器，服务器运营方也不知道用户数量或他们的连接数。", "privacy-matters-overlay-card-2-p-1": "不久前，我们观察到几次大选被一家知名咨询公司操纵，该公司使用我们的社交图谱扭曲我们对现实世界的看法并操纵我们的选票。", "privacy-matters-overlay-card-2-p-2": "为了客观并做出独立的决定，您需要控制您的信息空间。 而这只有当您使用没有能力访问您的社交图谱的，注重隐私的通信网络时，这才有可能。", "privacy-matters-overlay-card-2-p-3": "SimpleX 是第一个没有设计任何用户标识符的网络，这样能比任何已知的替代方案都更好地保护您的连接图谱。", @@ -152,7 +152,7 @@ "invitation-hero-header": "您收到了一个连接 SimpleX Chat 的一次性链接", "contact-hero-subheader": "使用手机或平板电脑上的 SimpleX Chat 应用程序扫描二维码。", "contact-hero-p-1": "当您查看此页面时，此链接中的公钥和消息队列地址不会通过网络发送 ——它们包含在链接 URL 的哈希片段中。", - "open-simplex-app": "打开 Simplex 应用程序", + "open-simplex-app": "打开 SimpleX 应用程序", "to-make-a-connection": "要建立连接：", "see-simplex-chat": "查看 SimpleX 聊天", "install-simplex-app": "安装 SimpleX 应用程序", @@ -283,13 +283,13 @@ "index-nextweb-p2": "没有任何单一实体控制网络 – 任何人都可以运行服务器。", "index-token-h2": "由用户资助", "index-token-p1": "为保持独立性，大型频道和社区将为其服务器付费。", - "index-token-p2": "这将用于支付基础设施、软件开发和网络治理费用。", - "index-token-cta": "了解更多关于 Community Credits", + "index-token-p2": "这会承担基础设施、软件开发和网络治理费用。", + "index-token-cta": "了解更多关于社区声望的信息", "index-roadmap-h2": "SimpleX 通往自由互联网的路线图", "index-roadmap-1-title": "扩展到大型社区", "index-roadmap-1-desc": "逃离中心化平台", "index-roadmap-2-title": "可持续社区与服务器", - "index-roadmap-2-desc": "推出 Community Credits", + "index-roadmap-2-desc": "推出社区声望", "index-roadmap-3-title": "促进社区发展", "index-roadmap-3-desc": "用于推广社区的工具", "index-directory-h2": "加入 SimpleX 社区", From 864ceba0a8e2698a3de85fdb7bd6a45f949ca2ba Mon Sep 17 00:00:00 2001 From: Evgeny Poberezkin Date: Mon, 22 Jun 2026 19:35:48 +0100 Subject: [PATCH 59/81] ios: update core library --- apps/ios/SimpleX.xcodeproj/project.pbxproj | 16 ++++++++-------- 1 file changed, 8 insertions(+), 8 deletions(-) diff --git a/apps/ios/SimpleX.xcodeproj/project.pbxproj b/apps/ios/SimpleX.xcodeproj/project.pbxproj index f75a41c8a3..20311b3486 100644 --- a/apps/ios/SimpleX.xcodeproj/project.pbxproj +++ b/apps/ios/SimpleX.xcodeproj/project.pbxproj @@ -183,8 +183,8 @@ 64C3B0212A0D359700E19930 /* CustomTimePicker.swift in Sources */ = {isa = PBXBuildFile; fileRef = 64C3B0202A0D359700E19930 /* CustomTimePicker.swift */; }; 64C8299D2D54AEEE006B9E89 /* libgmp.a in Frameworks */ = {isa = PBXBuildFile; fileRef = 64C829982D54AEED006B9E89 /* libgmp.a */; }; 64C8299E2D54AEEE006B9E89 /* libffi.a in Frameworks */ = {isa = PBXBuildFile; fileRef = 64C829992D54AEEE006B9E89 /* libffi.a */; }; - 64C8299F2D54AEEE006B9E89 /* libHSsimplex-chat-7.0.0.1-7ImjE3hKkx0K479AGK5BI3-ghc9.6.3.a in Frameworks */ = {isa = PBXBuildFile; fileRef = 64C8299A2D54AEEE006B9E89 /* libHSsimplex-chat-7.0.0.1-7ImjE3hKkx0K479AGK5BI3-ghc9.6.3.a */; }; - 64C829A02D54AEEE006B9E89 /* libHSsimplex-chat-7.0.0.1-7ImjE3hKkx0K479AGK5BI3.a in Frameworks */ = {isa = PBXBuildFile; fileRef = 64C8299B2D54AEEE006B9E89 /* libHSsimplex-chat-7.0.0.1-7ImjE3hKkx0K479AGK5BI3.a */; }; + 64C8299F2D54AEEE006B9E89 /* libHSsimplex-chat-7.0.0.4-8XuHcEDddcyDWUwNmEyAgw-ghc9.6.3.a in Frameworks */ = {isa = PBXBuildFile; fileRef = 64C8299A2D54AEEE006B9E89 /* libHSsimplex-chat-7.0.0.4-8XuHcEDddcyDWUwNmEyAgw-ghc9.6.3.a */; }; + 64C829A02D54AEEE006B9E89 /* libHSsimplex-chat-7.0.0.4-8XuHcEDddcyDWUwNmEyAgw.a in Frameworks */ = {isa = PBXBuildFile; fileRef = 64C8299B2D54AEEE006B9E89 /* libHSsimplex-chat-7.0.0.4-8XuHcEDddcyDWUwNmEyAgw.a */; }; 64C829A12D54AEEE006B9E89 /* libgmpxx.a in Frameworks */ = {isa = PBXBuildFile; fileRef = 64C8299C2D54AEEE006B9E89 /* libgmpxx.a */; }; 64D0C2C029F9688300B38D5F /* UserAddressView.swift in Sources */ = {isa = PBXBuildFile; fileRef = 64D0C2BF29F9688300B38D5F /* UserAddressView.swift */; }; 64D0C2C229FA57AB00B38D5F /* UserAddressLearnMore.swift in Sources */ = {isa = PBXBuildFile; fileRef = 64D0C2C129FA57AB00B38D5F /* UserAddressLearnMore.swift */; }; @@ -563,8 +563,8 @@ 64C3B0202A0D359700E19930 /* CustomTimePicker.swift */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.swift; path = CustomTimePicker.swift; sourceTree = ""; }; 64C829982D54AEED006B9E89 /* libgmp.a */ = {isa = PBXFileReference; lastKnownFileType = archive.ar; path = libgmp.a; sourceTree = ""; }; 64C829992D54AEEE006B9E89 /* libffi.a */ = {isa = PBXFileReference; lastKnownFileType = archive.ar; path = libffi.a; sourceTree = ""; }; - 64C8299A2D54AEEE006B9E89 /* libHSsimplex-chat-7.0.0.1-7ImjE3hKkx0K479AGK5BI3-ghc9.6.3.a */ = {isa = PBXFileReference; lastKnownFileType = archive.ar; path = "libHSsimplex-chat-7.0.0.1-7ImjE3hKkx0K479AGK5BI3-ghc9.6.3.a"; sourceTree = ""; }; - 64C8299B2D54AEEE006B9E89 /* libHSsimplex-chat-7.0.0.1-7ImjE3hKkx0K479AGK5BI3.a */ = {isa = PBXFileReference; lastKnownFileType = archive.ar; path = "libHSsimplex-chat-7.0.0.1-7ImjE3hKkx0K479AGK5BI3.a"; sourceTree = ""; }; + 64C8299A2D54AEEE006B9E89 /* libHSsimplex-chat-7.0.0.4-8XuHcEDddcyDWUwNmEyAgw-ghc9.6.3.a */ = {isa = PBXFileReference; lastKnownFileType = archive.ar; path = "libHSsimplex-chat-7.0.0.4-8XuHcEDddcyDWUwNmEyAgw-ghc9.6.3.a"; sourceTree = ""; }; + 64C8299B2D54AEEE006B9E89 /* libHSsimplex-chat-7.0.0.4-8XuHcEDddcyDWUwNmEyAgw.a */ = {isa = PBXFileReference; lastKnownFileType = archive.ar; path = "libHSsimplex-chat-7.0.0.4-8XuHcEDddcyDWUwNmEyAgw.a"; sourceTree = ""; }; 64C8299C2D54AEEE006B9E89 /* libgmpxx.a */ = {isa = PBXFileReference; lastKnownFileType = archive.ar; path = libgmpxx.a; sourceTree = ""; }; 64D0C2BF29F9688300B38D5F /* UserAddressView.swift */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.swift; path = UserAddressView.swift; sourceTree = ""; }; 64D0C2C129FA57AB00B38D5F /* UserAddressLearnMore.swift */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.swift; path = UserAddressLearnMore.swift; sourceTree = ""; }; @@ -735,8 +735,8 @@ 64C8299D2D54AEEE006B9E89 /* libgmp.a in Frameworks */, 64C8299E2D54AEEE006B9E89 /* libffi.a in Frameworks */, 64C829A12D54AEEE006B9E89 /* libgmpxx.a in Frameworks */, - 64C8299F2D54AEEE006B9E89 /* libHSsimplex-chat-7.0.0.1-7ImjE3hKkx0K479AGK5BI3-ghc9.6.3.a in Frameworks */, - 64C829A02D54AEEE006B9E89 /* libHSsimplex-chat-7.0.0.1-7ImjE3hKkx0K479AGK5BI3.a in Frameworks */, + 64C8299F2D54AEEE006B9E89 /* libHSsimplex-chat-7.0.0.4-8XuHcEDddcyDWUwNmEyAgw-ghc9.6.3.a in Frameworks */, + 64C829A02D54AEEE006B9E89 /* libHSsimplex-chat-7.0.0.4-8XuHcEDddcyDWUwNmEyAgw.a in Frameworks */, CE38A29C2C3FCD72005ED185 /* SwiftyGif in Frameworks */, ); runOnlyForDeploymentPostprocessing = 0; @@ -822,8 +822,8 @@ 64C829992D54AEEE006B9E89 /* libffi.a */, 64C829982D54AEED006B9E89 /* libgmp.a */, 64C8299C2D54AEEE006B9E89 /* libgmpxx.a */, - 64C8299A2D54AEEE006B9E89 /* libHSsimplex-chat-7.0.0.1-7ImjE3hKkx0K479AGK5BI3-ghc9.6.3.a */, - 64C8299B2D54AEEE006B9E89 /* libHSsimplex-chat-7.0.0.1-7ImjE3hKkx0K479AGK5BI3.a */, + 64C8299A2D54AEEE006B9E89 /* libHSsimplex-chat-7.0.0.4-8XuHcEDddcyDWUwNmEyAgw-ghc9.6.3.a */, + 64C8299B2D54AEEE006B9E89 /* libHSsimplex-chat-7.0.0.4-8XuHcEDddcyDWUwNmEyAgw.a */, ); path = Libraries; sourceTree = ""; From a29ee24722ef48132cb06ac5dc6d725480eedd33 Mon Sep 17 00:00:00 2001 From: sh <37271604+shumvgolove@users.noreply.github.com> Date: Tue, 23 Jun 2026 11:25:03 +0400 Subject: [PATCH 60/81] fix(core): annotate ambiguous memberRole record update (#7120) The armv7a-android cross-compiler GHC refuses to disambiguate the bare record update m {memberRole = role} (the field is shared by many record types), failing the lib:simplex-chat build with "Record update is ambiguous, and requires a type signature". Annotate the updated record as (m :: GroupMember), matching the existing workaround already used a few lines below in the same function. --- src/Simplex/Chat/Library/Subscriber.hs | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/src/Simplex/Chat/Library/Subscriber.hs b/src/Simplex/Chat/Library/Subscriber.hs index a2ea9870cc..c3f61f83b0 100644 --- a/src/Simplex/Chat/Library/Subscriber.hs +++ b/src/Simplex/Chat/Library/Subscriber.hs @@ -3411,8 +3411,8 @@ processAgentMessageConn cxt user@User {userId} corrId agentConnId agentMessage = Just k | k /= pubKey -> pure (Left (memberId' m)) | memberRole' m == role -> pure (Right Nothing) - | otherwise -> updateGroupMemberRole db user m role $> Right (Just (m {memberRole = role}, memberRole' m)) - Nothing -> setGroupMemberKeyRole db m pubKey role $> Right (Just (m {memberRole = role}, memberRole' m)) + | otherwise -> updateGroupMemberRole db user m role $> Right (Just ((m :: GroupMember) {memberRole = role}, memberRole' m)) + Nothing -> setGroupMemberKeyRole db m pubKey role $> Right (Just ((m :: GroupMember) {memberRole = role}, memberRole' m)) -- TOFU apply: pin each member's key on first use, then update roles. processRosterEntries :: DB.Connection -> GroupInfo -> GroupMemberRole -> [RosterMember] -> ExceptT StoreError IO ([MemberId], [(GroupMember, GroupMemberRole, Bool)]) From ebaa13df0e55f89f7cbb133ad800dd72f1251c16 Mon Sep 17 00:00:00 2001 From: Evgeny Poberezkin Date: Tue, 23 Jun 2026 08:27:47 +0100 Subject: [PATCH 61/81] core: 7.0.0.5 --- simplex-chat.cabal | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/simplex-chat.cabal b/simplex-chat.cabal index 64ec8dcf13..b4487dcf73 100644 --- a/simplex-chat.cabal +++ b/simplex-chat.cabal @@ -5,7 +5,7 @@ cabal-version: 1.12 -- see: https://github.com/sol/hpack name: simplex-chat -version: 7.0.0.4 +version: 7.0.0.5 category: Web, System, Services, Cryptography homepage: https://github.com/simplex-chat/simplex-chat#readme author: simplex.chat From 96c662d06898c7549ad49bd778ab1f93a9e8d4d1 Mon Sep 17 00:00:00 2001 From: Narasimha-sc <166327228+Narasimha-sc@users.noreply.github.com> Date: Tue, 23 Jun 2026 11:00:37 +0000 Subject: [PATCH 62/81] android, desktop: fix crash on opening chat with extremely wide image (#7123) * android, desktop: fix crash on opening chat with extremely wide image An image with an extreme aspect ratio (e.g. 4000x1) made the chat unopenable: the framed item's Box clamped its aspectRatio only on the low side (coerceAtLeast(1f / 2.33f)), leaving very wide images unbounded. During an intrinsic measure pass Compose derives width = height * ratio, which for a 4000:1 image overflows Constraints and throws IllegalArgumentException on every render. Add the symmetric upper bound (coerceIn(1f / 2.33f, 2.33f)), matching the existing tall-image height cap in PriorityLayout (constraints.maxWidth * 2.33f). * docs: add plan justifying wide-image chat crash fix --- .../common/views/chat/item/CIImageView.kt | 2 +- plans/2026-06-23-wide-image-crash.md | 98 +++++++++++++++++++ 2 files changed, 99 insertions(+), 1 deletion(-) create mode 100644 plans/2026-06-23-wide-image-crash.md diff --git a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/item/CIImageView.kt b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/item/CIImageView.kt index ed9a0e6007..65dbe7cb02 100644 --- a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/item/CIImageView.kt +++ b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/item/CIImageView.kt @@ -176,7 +176,7 @@ fun CIImageView( .then( if (!smallView) { val w = if (previewBitmap.width * 0.97 <= previewBitmap.height) imageViewFullWidth() * 0.75f else DEFAULT_MAX_IMAGE_WIDTH - Modifier.width(w).aspectRatio((previewBitmap.width.toFloat() / previewBitmap.height.toFloat()).coerceAtLeast(1f / 2.33f)) + Modifier.width(w).aspectRatio((previewBitmap.width.toFloat() / previewBitmap.height.toFloat()).coerceIn(1f / 2.33f, 2.33f)) } else Modifier ) .desktopModifyBlurredState(!smallView, blurred, showMenu), diff --git a/plans/2026-06-23-wide-image-crash.md b/plans/2026-06-23-wide-image-crash.md new file mode 100644 index 0000000000..effe8695b6 --- /dev/null +++ b/plans/2026-06-23-wide-image-crash.md @@ -0,0 +1,98 @@ +# Fix crash on opening a chat containing an extremely wide image + +## Problem + +Sending/receiving an image with an extreme aspect ratio (reproduced with a +**4000×1** image) makes the chat **unopenable**: every render of the chat throws + +``` +java.lang.IllegalArgumentException: Can't represent a width of 4660000 and height of 1165 in Constraints + at androidx.compose.foundation.layout.AspectRatioNode.measure(AspectRatio.kt:117) + ... + at chat.simplex.common.views.chat.item.FramedItemViewKt$PriorityLayout$1$1.measure(FramedItemView.kt:482) +``` + +Because the exception fires during measurement on every frame, the chat cannot +be opened again without clearing it. Affects **Android and desktop** (the Compose +`apps/multiplatform` UI). iOS is unaffected (see below). + +## Cause + +The framed image preview Box sizes itself with `Modifier.aspectRatio(...)` driven +by the image's real proportions +(`apps/multiplatform/.../chat/item/CIImageView.kt`): + +```kotlin +// before +Modifier.width(w).aspectRatio((previewBitmap.width.toFloat() / previewBitmap.height.toFloat()).coerceAtLeast(1f / 2.33f)) +``` + +The ratio was clamped only on the **low** side (`coerceAtLeast(1f / 2.33f)`, +added in #6959 to stop very *tall* previews overflowing the caption). The **high** +side was left unbounded. For a 4000×1 image the ratio is `4000`. + +During Compose's intrinsic-measurement pass, `AspectRatioNode` derives a fixed +`width = height × ratio`. Compose `Constraints` pack each dimension into at most +18 bits, so the maximum representable value is **262142 px**. With the observed +intrinsic height of 1165 px, `1165 × 4000 = 4,660,000` — ~18× over the limit — +and `Constraints.fixed(...)` throws. Any ratio above roughly `262142 / height` +(≈ 225 at this height) overflows; tall images never hit this because the existing +lower bound already caps their ratio. + +The bitmap decoders (`Images.android.kt`, `Images.desktop.kt`) only made this +reachable: they reject pathologically *tall* images +(`outHeight > outWidth * 256`) and any dimension `> 4320`, but have **no +symmetric wide guard**, so a 4000×1 image (width 4000 ≤ 4320, not tall) decodes +and reaches the unbounded `aspectRatio`. + +## Fix + +Add the symmetric **upper** bound to the clamp, mirroring the existing lower +bound and the tall-image height cap already enforced in `PriorityLayout` +(`FramedItemView.kt`: `maxImageHeight = constraints.maxWidth * 2.33f`): + +```kotlin +// after +Modifier.width(w).aspectRatio((previewBitmap.width.toFloat() / previewBitmap.height.toFloat()).coerceIn(1f / 2.33f, 2.33f)) +``` + +This is the minimal one-line change. With the cap, the box width is pinned +(`≤ DEFAULT_MAX_IMAGE_WIDTH = 500.dp`) and the height-driven width becomes +`height × 2.33 ≈ 2714 px` — three orders of magnitude inside the 262142 limit — +so the measurement can never overflow at any screen density. `2.33` is the +project's single "most-extreme allowed image proportion" constant: an image is +now clamped to at most 2.33:1 in **either** direction, the same rule already +applied to tall images. + +## Why 2.33 (and not a larger cap) + +`2.33` is provably safe by construction because it ties the wide bound to the +same proportion the layout already guarantees for height, independent of density. +A larger cap (e.g. 50–200) would preserve the natural shape of genuine panoramas +but relies on an assumption about the maximum measured height and loses the +symmetry with the tall-image rule. The trade-off accepted here is that wide +images between 2.33:1 and the crash threshold now display at 2.33:1 (the very +wide remainder shown as a thin strip with `ContentScale.FillWidth`) rather than +at their natural ratio — a cosmetic change in exchange for a guaranteed-safe, +consistent fix. + +## Scope / non-goals + +- Only the `!smallView` framed Box uses a media-derived `aspectRatio`; it is now + clamped. The chat-list `smallView` preview is locked to a fixed `36.sp` square, + and all other image/video/link paths size with `.width(...)` + `ContentScale` + (no `aspectRatio`), so none of them can hit this overflow. +- Two follow-ups were identified but intentionally left out to keep the diff + minimal: (1) a **symmetric wide guard** in the bitmap decoders + (`outWidth > outHeight * 256`) for defense-in-depth across all consumers, and + (2) extracting the duplicated `2.33` literal (now in `CIImageView.kt` and + `FramedItemView.kt`) into a shared `MAX_IMAGE_ASPECT_RATIO` constant. + +## iOS + +iOS is **not** affected by the crash. It carries the same lopsided logic — +`heightRatio` (`apps/ios/SimpleXChat/ImageUtils.swift`) caps only the tall side +(`min(size.height / size.width, 2.33)`) — but SwiftUI lays out with `CGFloat` +frames and has no `Constraints` packing limit, so a 4000×1 image yields a valid +(sub-pixel height) frame instead of throwing. No iOS change is required for the +crash; bounding the wide side there would only be a cosmetic parity tweak. From 15ea3f83baca38d011c06def14d6e0371ad3183d Mon Sep 17 00:00:00 2001 From: SimpleX Chat Date: Tue, 23 Jun 2026 11:27:02 +0000 Subject: [PATCH 63/81] 7.0.0-beta.1: android 360, desktop 149, ios 338 --- apps/ios/SimpleX.xcodeproj/project.pbxproj | 36 +++++++++---------- apps/multiplatform/gradle.properties | 8 ++--- .../types/typescript/package.json | 2 +- packages/simplex-chat-nodejs/package.json | 4 +-- .../simplex-chat-nodejs/src/download-libs.js | 2 +- .../src/simplex_chat/_version.py | 4 +-- 6 files changed, 28 insertions(+), 28 deletions(-) diff --git a/apps/ios/SimpleX.xcodeproj/project.pbxproj b/apps/ios/SimpleX.xcodeproj/project.pbxproj index 20311b3486..f00f623e98 100644 --- a/apps/ios/SimpleX.xcodeproj/project.pbxproj +++ b/apps/ios/SimpleX.xcodeproj/project.pbxproj @@ -183,8 +183,8 @@ 64C3B0212A0D359700E19930 /* CustomTimePicker.swift in Sources */ = {isa = PBXBuildFile; fileRef = 64C3B0202A0D359700E19930 /* CustomTimePicker.swift */; }; 64C8299D2D54AEEE006B9E89 /* libgmp.a in Frameworks */ = {isa = PBXBuildFile; fileRef = 64C829982D54AEED006B9E89 /* libgmp.a */; }; 64C8299E2D54AEEE006B9E89 /* libffi.a in Frameworks */ = {isa = PBXBuildFile; fileRef = 64C829992D54AEEE006B9E89 /* libffi.a */; }; - 64C8299F2D54AEEE006B9E89 /* libHSsimplex-chat-7.0.0.4-8XuHcEDddcyDWUwNmEyAgw-ghc9.6.3.a in Frameworks */ = {isa = PBXBuildFile; fileRef = 64C8299A2D54AEEE006B9E89 /* libHSsimplex-chat-7.0.0.4-8XuHcEDddcyDWUwNmEyAgw-ghc9.6.3.a */; }; - 64C829A02D54AEEE006B9E89 /* libHSsimplex-chat-7.0.0.4-8XuHcEDddcyDWUwNmEyAgw.a in Frameworks */ = {isa = PBXBuildFile; fileRef = 64C8299B2D54AEEE006B9E89 /* libHSsimplex-chat-7.0.0.4-8XuHcEDddcyDWUwNmEyAgw.a */; }; + 64C8299F2D54AEEE006B9E89 /* libHSsimplex-chat-7.0.0.5-3gtbZllPEb75FgChAFCqhx-ghc9.6.3.a in Frameworks */ = {isa = PBXBuildFile; fileRef = 64C8299A2D54AEEE006B9E89 /* libHSsimplex-chat-7.0.0.5-3gtbZllPEb75FgChAFCqhx-ghc9.6.3.a */; }; + 64C829A02D54AEEE006B9E89 /* libHSsimplex-chat-7.0.0.5-3gtbZllPEb75FgChAFCqhx.a in Frameworks */ = {isa = PBXBuildFile; fileRef = 64C8299B2D54AEEE006B9E89 /* libHSsimplex-chat-7.0.0.5-3gtbZllPEb75FgChAFCqhx.a */; }; 64C829A12D54AEEE006B9E89 /* libgmpxx.a in Frameworks */ = {isa = PBXBuildFile; fileRef = 64C8299C2D54AEEE006B9E89 /* libgmpxx.a */; }; 64D0C2C029F9688300B38D5F /* UserAddressView.swift in Sources */ = {isa = PBXBuildFile; fileRef = 64D0C2BF29F9688300B38D5F /* UserAddressView.swift */; }; 64D0C2C229FA57AB00B38D5F /* UserAddressLearnMore.swift in Sources */ = {isa = PBXBuildFile; fileRef = 64D0C2C129FA57AB00B38D5F /* UserAddressLearnMore.swift */; }; @@ -563,8 +563,8 @@ 64C3B0202A0D359700E19930 /* CustomTimePicker.swift */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.swift; path = CustomTimePicker.swift; sourceTree = ""; }; 64C829982D54AEED006B9E89 /* libgmp.a */ = {isa = PBXFileReference; lastKnownFileType = archive.ar; path = libgmp.a; sourceTree = ""; }; 64C829992D54AEEE006B9E89 /* libffi.a */ = {isa = PBXFileReference; lastKnownFileType = archive.ar; path = libffi.a; sourceTree = ""; }; - 64C8299A2D54AEEE006B9E89 /* libHSsimplex-chat-7.0.0.4-8XuHcEDddcyDWUwNmEyAgw-ghc9.6.3.a */ = {isa = PBXFileReference; lastKnownFileType = archive.ar; path = "libHSsimplex-chat-7.0.0.4-8XuHcEDddcyDWUwNmEyAgw-ghc9.6.3.a"; sourceTree = ""; }; - 64C8299B2D54AEEE006B9E89 /* libHSsimplex-chat-7.0.0.4-8XuHcEDddcyDWUwNmEyAgw.a */ = {isa = PBXFileReference; lastKnownFileType = archive.ar; path = "libHSsimplex-chat-7.0.0.4-8XuHcEDddcyDWUwNmEyAgw.a"; sourceTree = ""; }; + 64C8299A2D54AEEE006B9E89 /* libHSsimplex-chat-7.0.0.5-3gtbZllPEb75FgChAFCqhx-ghc9.6.3.a */ = {isa = PBXFileReference; lastKnownFileType = archive.ar; path = "libHSsimplex-chat-7.0.0.5-3gtbZllPEb75FgChAFCqhx-ghc9.6.3.a"; sourceTree = ""; }; + 64C8299B2D54AEEE006B9E89 /* libHSsimplex-chat-7.0.0.5-3gtbZllPEb75FgChAFCqhx.a */ = {isa = PBXFileReference; lastKnownFileType = archive.ar; path = "libHSsimplex-chat-7.0.0.5-3gtbZllPEb75FgChAFCqhx.a"; sourceTree = ""; }; 64C8299C2D54AEEE006B9E89 /* libgmpxx.a */ = {isa = PBXFileReference; lastKnownFileType = archive.ar; path = libgmpxx.a; sourceTree = ""; }; 64D0C2BF29F9688300B38D5F /* UserAddressView.swift */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.swift; path = UserAddressView.swift; sourceTree = ""; }; 64D0C2C129FA57AB00B38D5F /* UserAddressLearnMore.swift */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.swift; path = UserAddressLearnMore.swift; sourceTree = ""; }; @@ -735,8 +735,8 @@ 64C8299D2D54AEEE006B9E89 /* libgmp.a in Frameworks */, 64C8299E2D54AEEE006B9E89 /* libffi.a in Frameworks */, 64C829A12D54AEEE006B9E89 /* libgmpxx.a in Frameworks */, - 64C8299F2D54AEEE006B9E89 /* libHSsimplex-chat-7.0.0.4-8XuHcEDddcyDWUwNmEyAgw-ghc9.6.3.a in Frameworks */, - 64C829A02D54AEEE006B9E89 /* libHSsimplex-chat-7.0.0.4-8XuHcEDddcyDWUwNmEyAgw.a in Frameworks */, + 64C8299F2D54AEEE006B9E89 /* libHSsimplex-chat-7.0.0.5-3gtbZllPEb75FgChAFCqhx-ghc9.6.3.a in Frameworks */, + 64C829A02D54AEEE006B9E89 /* libHSsimplex-chat-7.0.0.5-3gtbZllPEb75FgChAFCqhx.a in Frameworks */, CE38A29C2C3FCD72005ED185 /* SwiftyGif in Frameworks */, ); runOnlyForDeploymentPostprocessing = 0; @@ -822,8 +822,8 @@ 64C829992D54AEEE006B9E89 /* libffi.a */, 64C829982D54AEED006B9E89 /* libgmp.a */, 64C8299C2D54AEEE006B9E89 /* libgmpxx.a */, - 64C8299A2D54AEEE006B9E89 /* libHSsimplex-chat-7.0.0.4-8XuHcEDddcyDWUwNmEyAgw-ghc9.6.3.a */, - 64C8299B2D54AEEE006B9E89 /* libHSsimplex-chat-7.0.0.4-8XuHcEDddcyDWUwNmEyAgw.a */, + 64C8299A2D54AEEE006B9E89 /* libHSsimplex-chat-7.0.0.5-3gtbZllPEb75FgChAFCqhx-ghc9.6.3.a */, + 64C8299B2D54AEEE006B9E89 /* libHSsimplex-chat-7.0.0.5-3gtbZllPEb75FgChAFCqhx.a */, ); path = Libraries; sourceTree = ""; @@ -2081,7 +2081,7 @@ CLANG_TIDY_MISC_REDUNDANT_EXPRESSION = YES; CODE_SIGN_ENTITLEMENTS = "SimpleX (iOS).entitlements"; CODE_SIGN_STYLE = Automatic; - CURRENT_PROJECT_VERSION = 336; + CURRENT_PROJECT_VERSION = 338; DEAD_CODE_STRIPPING = YES; DEVELOPMENT_TEAM = 5NN7GUYB6T; ENABLE_BITCODE = NO; @@ -2131,7 +2131,7 @@ CLANG_TIDY_MISC_REDUNDANT_EXPRESSION = YES; CODE_SIGN_ENTITLEMENTS = "SimpleX (iOS).entitlements"; CODE_SIGN_STYLE = Automatic; - CURRENT_PROJECT_VERSION = 336; + CURRENT_PROJECT_VERSION = 338; DEAD_CODE_STRIPPING = YES; DEVELOPMENT_TEAM = 5NN7GUYB6T; ENABLE_BITCODE = NO; @@ -2173,7 +2173,7 @@ buildSettings = { ALWAYS_EMBED_SWIFT_STANDARD_LIBRARIES = YES; CODE_SIGN_STYLE = Automatic; - CURRENT_PROJECT_VERSION = 336; + CURRENT_PROJECT_VERSION = 338; DEVELOPMENT_TEAM = 5NN7GUYB6T; GENERATE_INFOPLIST_FILE = YES; IPHONEOS_DEPLOYMENT_TARGET = 15.0; @@ -2193,7 +2193,7 @@ buildSettings = { ALWAYS_EMBED_SWIFT_STANDARD_LIBRARIES = YES; CODE_SIGN_STYLE = Automatic; - CURRENT_PROJECT_VERSION = 336; + CURRENT_PROJECT_VERSION = 338; DEVELOPMENT_TEAM = 5NN7GUYB6T; GENERATE_INFOPLIST_FILE = YES; IPHONEOS_DEPLOYMENT_TARGET = 15.0; @@ -2218,7 +2218,7 @@ CODE_SIGN_ENTITLEMENTS = "SimpleX NSE/SimpleX NSE.entitlements"; CODE_SIGN_IDENTITY = "Apple Development"; CODE_SIGN_STYLE = Automatic; - CURRENT_PROJECT_VERSION = 336; + CURRENT_PROJECT_VERSION = 338; DEVELOPMENT_TEAM = 5NN7GUYB6T; ENABLE_BITCODE = NO; GCC_OPTIMIZATION_LEVEL = s; @@ -2255,7 +2255,7 @@ CODE_SIGN_ENTITLEMENTS = "SimpleX NSE/SimpleX NSE.entitlements"; CODE_SIGN_IDENTITY = "Apple Development"; CODE_SIGN_STYLE = Automatic; - CURRENT_PROJECT_VERSION = 336; + CURRENT_PROJECT_VERSION = 338; DEVELOPMENT_TEAM = 5NN7GUYB6T; ENABLE_BITCODE = NO; ENABLE_CODE_COVERAGE = NO; @@ -2292,7 +2292,7 @@ CLANG_TIDY_BUGPRONE_REDUNDANT_BRANCH_CONDITION = YES; CLANG_TIDY_MISC_REDUNDANT_EXPRESSION = YES; CODE_SIGN_STYLE = Automatic; - CURRENT_PROJECT_VERSION = 336; + CURRENT_PROJECT_VERSION = 338; DEFINES_MODULE = YES; DEVELOPMENT_TEAM = 5NN7GUYB6T; DYLIB_COMPATIBILITY_VERSION = 1; @@ -2343,7 +2343,7 @@ CLANG_TIDY_BUGPRONE_REDUNDANT_BRANCH_CONDITION = YES; CLANG_TIDY_MISC_REDUNDANT_EXPRESSION = YES; CODE_SIGN_STYLE = Automatic; - CURRENT_PROJECT_VERSION = 336; + CURRENT_PROJECT_VERSION = 338; DEFINES_MODULE = YES; DEVELOPMENT_TEAM = 5NN7GUYB6T; DYLIB_COMPATIBILITY_VERSION = 1; @@ -2397,7 +2397,7 @@ CLANG_CXX_LANGUAGE_STANDARD = "gnu++20"; CODE_SIGN_ENTITLEMENTS = "SimpleX SE/SimpleX SE.entitlements"; CODE_SIGN_STYLE = Automatic; - CURRENT_PROJECT_VERSION = 336; + CURRENT_PROJECT_VERSION = 338; DEVELOPMENT_TEAM = 5NN7GUYB6T; ENABLE_USER_SCRIPT_SANDBOXING = YES; GCC_C_LANGUAGE_STANDARD = gnu17; @@ -2431,7 +2431,7 @@ CLANG_CXX_LANGUAGE_STANDARD = "gnu++20"; CODE_SIGN_ENTITLEMENTS = "SimpleX SE/SimpleX SE.entitlements"; CODE_SIGN_STYLE = Automatic; - CURRENT_PROJECT_VERSION = 336; + CURRENT_PROJECT_VERSION = 338; DEVELOPMENT_TEAM = 5NN7GUYB6T; ENABLE_USER_SCRIPT_SANDBOXING = YES; GCC_C_LANGUAGE_STANDARD = gnu17; diff --git a/apps/multiplatform/gradle.properties b/apps/multiplatform/gradle.properties index 5cdd339440..37db0f2365 100644 --- a/apps/multiplatform/gradle.properties +++ b/apps/multiplatform/gradle.properties @@ -24,13 +24,13 @@ android.nonTransitiveRClass=true kotlin.mpp.androidSourceSetLayoutVersion=2 kotlin.jvm.target=11 -android.version_name=7.0-beta.0 -android.version_code=356 +android.version_name=7.0-beta.1 +android.version_code=360 android.bundle=false -desktop.version_name=7.0-beta.0 -desktop.version_code=147 +desktop.version_name=7.0-beta.1 +desktop.version_code=149 kotlin.version=2.1.20 gradle.plugin.version=8.7.0 diff --git a/packages/simplex-chat-client/types/typescript/package.json b/packages/simplex-chat-client/types/typescript/package.json index ec3dbd5b07..6c3e0a1ec5 100644 --- a/packages/simplex-chat-client/types/typescript/package.json +++ b/packages/simplex-chat-client/types/typescript/package.json @@ -1,6 +1,6 @@ { "name": "@simplex-chat/types", - "version": "0.10.0", + "version": "0.10.1", "description": "TypeScript types for SimpleX Chat bot libraries", "main": "dist/index.js", "types": "dist/index.d.ts", diff --git a/packages/simplex-chat-nodejs/package.json b/packages/simplex-chat-nodejs/package.json index 430bafc066..4474348798 100644 --- a/packages/simplex-chat-nodejs/package.json +++ b/packages/simplex-chat-nodejs/package.json @@ -1,6 +1,6 @@ { "name": "simplex-chat", - "version": "7.0.0-beta.0", + "version": "7.0.0-beta.1", "main": "dist/index.js", "types": "dist/index.d.ts", "files": [ @@ -24,7 +24,7 @@ "docs": "typedoc" }, "dependencies": { - "@simplex-chat/types": "^0.10.0", + "@simplex-chat/types": "^0.10.1", "extract-zip": "^2.0.1", "fast-deep-equal": "^3.1.3", "node-addon-api": "^8.5.0" diff --git a/packages/simplex-chat-nodejs/src/download-libs.js b/packages/simplex-chat-nodejs/src/download-libs.js index 15d8a9f2b0..7fbf62f047 100644 --- a/packages/simplex-chat-nodejs/src/download-libs.js +++ b/packages/simplex-chat-nodejs/src/download-libs.js @@ -4,7 +4,7 @@ const path = require('path'); const extract = require('extract-zip'); const GITHUB_REPO = 'simplex-chat/simplex-chat-libs'; -const RELEASE_TAG = 'v7.0.0-beta.0'; +const RELEASE_TAG = 'v7.0.0-beta.1'; const BACKEND = (process.env.SIMPLEX_BACKEND || process.env.npm_config_simplex_backend || 'sqlite').toLowerCase(); if (BACKEND !== 'sqlite' && BACKEND !== 'postgres') { diff --git a/packages/simplex-chat-python/src/simplex_chat/_version.py b/packages/simplex-chat-python/src/simplex_chat/_version.py index 9dfcf5a88e..e7ad6b625a 100644 --- a/packages/simplex-chat-python/src/simplex_chat/_version.py +++ b/packages/simplex-chat-python/src/simplex_chat/_version.py @@ -5,5 +5,5 @@ Bump both together for normal releases. For wrapper-only fixes use a PEP 440 post-release: __version__ = "6.5.2.post1", LIBS_VERSION unchanged. """ -__version__ = "7.0.0b0" # PEP 440 — read by hatchling for wheel metadata -LIBS_VERSION = "7.0.0-beta.0" # simplex-chat-libs release tag (no 'v' prefix) +__version__ = "7.0.0b1" # PEP 440 — read by hatchling for wheel metadata +LIBS_VERSION = "7.0.0-beta.1" # simplex-chat-libs release tag (no 'v' prefix) From 8d478b716752a1303fd88809ce8fea832774f65a Mon Sep 17 00:00:00 2001 From: spaced4ndy <8711996+spaced4ndy@users.noreply.github.com> Date: Wed, 24 Jun 2026 14:33:12 +0000 Subject: [PATCH 64/81] core: don't create member role change chat item in channels (#7124) --- src/Simplex/Chat/Library/Subscriber.hs | 19 ++++++++++++------- tests/ChatTests/Groups.hs | 14 +++++++------- 2 files changed, 19 insertions(+), 14 deletions(-) diff --git a/src/Simplex/Chat/Library/Subscriber.hs b/src/Simplex/Chat/Library/Subscriber.hs index c3f61f83b0..829319635f 100644 --- a/src/Simplex/Chat/Library/Subscriber.hs +++ b/src/Simplex/Chat/Library/Subscriber.hs @@ -3266,7 +3266,7 @@ processAgentMessageConn cxt user@User {userId} corrId agentConnId agentMessage = | membershipMemId == memId = applyAtRosterVersion gInfo m rosterVer_ $ let gInfo' = gInfo {membership = membership {memberRole = memRole}} - in changeMemberRole gInfo' membership False (\db -> updateGroupMemberRole db user membership memRole) $ RGEUserRole memRole + in changeMemberRole gInfo' membership False (\db -> updateGroupMemberRole db user membership memRole) (RGEUserRole memRole) True | otherwise = applyAtRosterVersion gInfo m rosterVer_ $ do defaultRole <- unknownMemberRole gInfo -- an owner-signed event with a key TOFU-creates an unknown member only for a roster role; else a plain lookup @@ -3276,11 +3276,11 @@ processAgentMessageConn cxt user@User {userId} corrId agentConnId agentMessage = -- just created (keyless, and allowCreate ensured the event carries its key): pin key + role | created, Just (MemberKey pubKey) <- memberKey_ -> let gEvent = RGEMemberRole (groupMemberId' member) (fromLocalProfile $ memberProfile member) memRole - in changeMemberRole gInfo member created (\db -> void $ applyMemberKeyRole db member pubKey memRole) gEvent + in changeMemberRole gInfo member created (\db -> void $ applyMemberKeyRole db member pubKey memRole) gEvent (not $ useRelays' gInfo) -- known member: apply the role (its key is established via roster/intro; the event's key is ignored) | otherwise -> let gEvent = RGEMemberRole (groupMemberId' member) (fromLocalProfile $ memberProfile member) memRole - in changeMemberRole gInfo member created (\db -> updateGroupMemberRole db user member memRole) gEvent + in changeMemberRole gInfo member created (\db -> updateGroupMemberRole db user member memRole) gEvent (not $ useRelays' gInfo) -- in relay groups the roster may deliver role update for previously-unknown privileged members _ | useRelays' gInfo -> pure Nothing | otherwise -> messageError "x.grp.mem.role with unknown member ID" $> Nothing @@ -3288,7 +3288,7 @@ processAgentMessageConn cxt user@User {userId} corrId agentConnId agentMessage = GroupMember {memberId = membershipMemId} = membership -- applyMember writes the change (role, or role + pinned key for a freshly TOFU-created member); -- the delivery scope (relay forwarding) is computed on the pre-change role - changeMemberRole gInfo' member@GroupMember {memberRole = fromRole} created applyMember gEvent + changeMemberRole gInfo' member@GroupMember {memberRole = fromRole} created applyMember gEvent createItem | senderRole < maximum ([GRAdmin, fromRole, memRole] :: [GroupMemberRole]) = messageError "x.grp.mem.role with insufficient member permissions" $> Nothing | useRelays' gInfo && (isRosterRole memRole || isRosterRole fromRole) && senderRole /= GROwner = @@ -3298,9 +3298,14 @@ processAgentMessageConn cxt user@User {userId} corrId agentConnId agentMessage = | useRelays' gInfo && not created && fromRole == memRole = pure $ memberEventDeliveryScope member | otherwise = do withStore' applyMember - (gInfo'', m', scopeInfo) <- mkGroupChatScope gInfo' m - (ci, cInfo) <- saveRcvChatItemNoParse user (CDGroupRcv gInfo'' scopeInfo m') msg brokerTs (CIRcvGroupEvent gEvent) - groupMsgToView cInfo ci + (gInfo'', m') <- + if createItem + then do + (gInfo'', m', scopeInfo) <- mkGroupChatScope gInfo' m + (ci, cInfo) <- saveRcvChatItemNoParse user (CDGroupRcv gInfo'' scopeInfo m') msg brokerTs (CIRcvGroupEvent gEvent) + groupMsgToView cInfo ci + pure (gInfo'', m') + else pure (gInfo', m) toView CEvtMemberRole {user, groupInfo = gInfo'', byMember = m', member = member {memberRole = memRole}, fromRole, toRole = memRole, msgSigned} pure $ memberEventDeliveryScope member diff --git a/tests/ChatTests/Groups.hs b/tests/ChatTests/Groups.hs index a32aa2d07c..d637328925 100644 --- a/tests/ChatTests/Groups.hs +++ b/tests/ChatTests/Groups.hs @@ -9515,6 +9515,8 @@ testChannelChangeRoleSigned ps = -- promote cath to member (observer default) so it can post promoteChannelMember "team" alice bob cath [dan, eve] + threadDelay 1000000 + -- other members discover cath cath #> "#team hello from cath" bob <# "#team cath> hello from cath" @@ -9540,14 +9542,14 @@ testChannelChangeRoleSigned ps = dan <## "#team: alice changed the role of cath from member to admin (signed)", eve <## "#team: alice changed the role of cath from member to admin (signed)" ] + -- chat item is not created for other members alice #$> ("/_get chat #1 count=1", chat, [(1, "changed role of cath to admin (signed)")]) - bob #$> ("/_get chat #1 count=1", chat, [(0, "changed role of cath to admin (signed)")]) + bob #$> ("/_get chat #1 count=1", chat, [(0, "hello from cath")]) cath #$> ("/_get chat #1 count=1", chat, [(0, "changed your role to admin (signed)")]) - dan #$> ("/_get chat #1 count=1", chat, [(0, "changed role of cath to admin (signed)")]) - eve #$> ("/_get chat #1 count=1", chat, [(0, "changed role of cath to admin (signed)")]) + dan #$> ("/_get chat #1 count=1", chat, [(0, "hello from cath")]) + eve #$> ("/_get chat #1 count=1", chat, [(0, "hello from cath")]) - -- change role of silent member; cath/eve don't know dan via xGrpMemRole, but the - -- subsequent roster apply emits the chat item with dan TOFU-created at the new role + -- change role of silent member threadDelay 1000000 alice ##> "/mr #team dan admin" alice <## "#team: you changed the role of dan to admin (signed)" @@ -9557,9 +9559,7 @@ testChannelChangeRoleSigned ps = cath .<##. ("#team: alice changed the role of ", " from observer to admin (signed)"), eve .<##. ("#team: alice changed the role of ", " from observer to admin (signed)") ] - -- cath/eve render dan by id hash (unknown to them, roster-TOFU); arrival verified above alice #$> ("/_get chat #1 count=1", chat, [(1, "changed role of dan to admin (signed)")]) - bob #$> ("/_get chat #1 count=1", chat, [(0, "changed role of dan to admin (signed)")]) dan #$> ("/_get chat #1 count=1", chat, [(0, "changed your role to admin (signed)")]) testChannelBlockMemberSigned :: HasCallStack => TestParams -> IO () From 4f855e6bbacb48f9e3e3767f459160a2b3677f7e Mon Sep 17 00:00:00 2001 From: spaced4ndy <8711996+spaced4ndy@users.noreply.github.com> Date: Wed, 24 Jun 2026 14:55:21 +0000 Subject: [PATCH 65/81] core: support connecting to channels via cli (#7131) --- src/Simplex/Chat/Library/Commands.hs | 21 +++++++++- tests/ChatTests/Groups.hs | 57 ++++++++++++++++++++++++++++ 2 files changed, 76 insertions(+), 2 deletions(-) diff --git a/src/Simplex/Chat/Library/Commands.hs b/src/Simplex/Chat/Library/Commands.hs index 004d790844..eada7e5a1b 100644 --- a/src/Simplex/Chat/Library/Commands.hs +++ b/src/Simplex/Chat/Library/Commands.hs @@ -2266,8 +2266,6 @@ processChatCommand cxt nm = \case CVRSentInvitation conn incognitoProfile -> pure $ CRSentInvitation user (mkPendingContactConnection conn Nothing) incognitoProfile APIConnect _ _ Nothing -> throwChatError CEInvalidConnReq Connect incognito (Just cLink@(ACL m cLink')) -> withUser $ \user -> do - -- TODO [relays] member: /c api to support groups with relays - -- TODO - possibly by going through APIPrepareGroup -> APIConnectPreparedGroup (ccLink, plan) <- connectPlan user cLink False Nothing `catchAllErrors` \e -> case cLink' of CLFull cReq -> pure (ACCL m (CCLink cReq Nothing), CPInvitationLink (ILPOk Nothing Nothing)); _ -> throwError e connectWithPlan user incognito ccLink plan Connect _ Nothing -> throwChatError CEInvalidConnReq @@ -4234,8 +4232,27 @@ processChatCommand cxt nm = \case case plan of CPContactAddress (CAPContactViaAddress Contact {contactId}) -> processChatCommand cxt nm $ APIConnectContactViaAddress userId incognito contactId + CPGroupLink (GLPOk (Just GroupShortLinkInfo {direct = False}) (Just gld) _) + | ACCL SCMContact ccl <- ccLink -> joinChannelViaRelays ccl gld _ -> processChatCommand cxt nm $ APIConnect userId incognito $ Just ccLink | otherwise = pure $ CRConnectionPlan user ccLink plan + where + joinChannelViaRelays :: CreatedLinkContact -> GroupShortLinkData -> CM ChatResponse + joinChannelViaRelays ccl gld = do + GroupInfo {groupId} <- prepareChannelGroup + processChatCommand cxt nm APIConnectPreparedGroup {groupId, incognito, ownerContact = Nothing, msgContent_ = Nothing} + `catchAllErrors` \e -> do + deletePreparedChannel groupId `catchAllErrors` eToView + throwError e + where + prepareChannelGroup = + processChatCommand cxt nm (APIPrepareGroup userId ccl False gld) >>= \case + CRNewPreparedChat _ (AChat SCTGroup (Chat (GroupChat gInfo _) _ _)) -> pure gInfo + _ -> throwChatError $ CEException "joinChannelViaRelays: unexpected response from APIPrepareGroup" + deletePreparedChannel groupId = do + gInfo <- withFastStore $ \db -> getGroupInfo db cxt user groupId + deleteGroupConnections user gInfo False + withFastStore' $ \db -> deleteGroup db user gInfo invitationRequestPlan :: User -> ConnReqInvitation -> Maybe ContactShortLinkData -> Maybe OwnerVerification -> CM ConnectionPlan invitationRequestPlan user cReq cld ov = do maybe (CPInvitationLink (ILPOk cld ov)) (invitationEntityPlan cld ov) diff --git a/tests/ChatTests/Groups.hs b/tests/ChatTests/Groups.hs index d637328925..b667459b6d 100644 --- a/tests/ChatTests/Groups.hs +++ b/tests/ChatTests/Groups.hs @@ -255,6 +255,8 @@ chatGroupTests = do describe "multiple relays" $ do it "2 relays: should deliver messages to members" testChannels2RelaysDeliver it "should share same incognito profile with all relays" testChannels2RelaysIncognito + it "should connect to channel via /c (CLI)" testConnectChannelCLI + it "should connect to channel via /c incognito (CLI)" testConnectChannelCLIIncognito describe "deliver member profiles via relay" $ do it "late joiner (no prior history) learns sender on first forward" testChannelLateJoinerReceivesProfile it "2 relays: deduplicate member announcement" testChannel2RelaysDeduplicateProfile @@ -8644,6 +8646,61 @@ testSupportPreferenceChannel ps = bob <# "#team (support) alice> yes [>>]" ] +testConnectChannelCLI :: HasCallStack => TestParams -> IO () +testConnectChannelCLI ps = + withNewTestChat ps "alice" aliceProfile $ \alice -> + withNewTestChatOpts ps relayTestOpts "bob" bobProfile $ \bob -> + withNewTestChatOpts ps relayTestOpts "cath" cathProfile $ \cath -> + withNewTestChat ps "dan" danProfile $ \dan -> do + (shortLink, _fullLink) <- prepareChannel2Relays "team" alice bob cath + relayNames <- mapM userName [bob, cath] + mName <- userName dan + mFullName <- showName dan + dan ##> ("/c " <> shortLink) + dan <## "#team: connection started" + concurrentlyN_ $ + [ dan + <### concat + [ [ ConsoleString ("#team: joining the group (connecting to relay " <> rName <> ")..."), + ConsoleString ("#team: you joined the group (connected to relay " <> rName <> ")") + ] + | rName <- relayNames + ] + ] + <> [ do + relay <## (mFullName <> ": accepting request to join group #team...") + relay <## ("#team: " <> mName <> " joined the group") + | relay <- [bob, cath] + ] + <> [alice <### [EndsWith ("introduced " <> mFullName <> " in the channel")]] + +testConnectChannelCLIIncognito :: HasCallStack => TestParams -> IO () +testConnectChannelCLIIncognito ps = + withNewTestChat ps "alice" aliceProfile $ \alice -> + withNewTestChatOpts ps relayTestOpts "bob" bobProfile $ \bob -> + withNewTestChatOpts ps relayTestOpts "cath" cathProfile $ \cath -> + withNewTestChat ps "dan" danProfile $ \dan -> do + (shortLink, _fullLink) <- prepareChannel2Relays "team" alice bob cath + relayNames <- mapM userName [bob, cath] + dan ##> ("/c i " <> shortLink) + danIncognito <- getTermLine dan + dan <## "#team: connection started incognito" + concurrentlyN_ $ + [ dan + <### concat + [ [ ConsoleString ("#team: joining the group (connecting to relay " <> rName <> ")..."), + ConsoleString ("#team: you joined the group (connected to relay " <> rName <> ") incognito as " <> danIncognito) + ] + | rName <- relayNames + ] + ] + <> [ do + relay <## (danIncognito <> ": accepting request to join group #team...") + relay <## ("#team: " <> danIncognito <> " joined the group") + | relay <- [bob, cath] + ] + <> [alice <### [EndsWith ("introduced " <> danIncognito <> " in the channel")]] + testChannels1RelayDeliver :: HasCallStack => TestParams -> IO () testChannels1RelayDeliver ps = withNewTestChat ps "alice" aliceProfile $ \alice -> do From aa9b147aa8ed1bd3cd34fe04bf5a46b35b7cf8cf Mon Sep 17 00:00:00 2001 From: spaced4ndy <8711996+spaced4ndy@users.noreply.github.com> Date: Thu, 25 Jun 2026 08:28:54 +0000 Subject: [PATCH 66/81] ui: show subsriber roles in list; contributor list for subscribers (#7126) --- .../Shared/Views/Chat/ChatInfoToolbar.swift | 9 ++++++++ .../Views/Chat/Group/ChannelMembersView.swift | 19 ++++++++++----- .../Views/Chat/Group/GroupChatInfoView.swift | 2 +- .../simplex/common/views/chat/ChatView.kt | 5 ++++ .../views/chat/group/ChannelMembersView.kt | 23 ++++++++++++++----- .../commonMain/resources/MR/base/strings.xml | 5 +++- 6 files changed, 49 insertions(+), 14 deletions(-) diff --git a/apps/ios/Shared/Views/Chat/ChatInfoToolbar.swift b/apps/ios/Shared/Views/Chat/ChatInfoToolbar.swift index 00c8d7070b..f825dbeca7 100644 --- a/apps/ios/Shared/Views/Chat/ChatInfoToolbar.swift +++ b/apps/ios/Shared/Views/Chat/ChatInfoToolbar.swift @@ -131,6 +131,15 @@ public func subscriberCountStr(_ count: Int64) -> String { : String.localizedStringWithFormat(NSLocalizedString("%d subscribers", comment: "channel subscriber count"), count) } +public func ownersContributorsCountStr(_ count: Int, withContributors: Bool) -> String { + if withContributors { + return String.localizedStringWithFormat(NSLocalizedString("%d owners & contributors", comment: "channel members count"), count) + } + return count == 1 + ? String.localizedStringWithFormat(NSLocalizedString("%d owner", comment: "channel owners count"), count) + : String.localizedStringWithFormat(NSLocalizedString("%d owners", comment: "channel owners count"), count) +} + struct ChatInfoToolbar_Previews: PreviewProvider { static var previews: some View { ChatInfoToolbar(chat: Chat(chatInfo: ChatInfo.sampleData.direct, chatItems: [])) diff --git a/apps/ios/Shared/Views/Chat/Group/ChannelMembersView.swift b/apps/ios/Shared/Views/Chat/Group/ChannelMembersView.swift index 44fc302aff..231054fd78 100644 --- a/apps/ios/Shared/Views/Chat/Group/ChannelMembersView.swift +++ b/apps/ios/Shared/Views/Chat/Group/ChannelMembersView.swift @@ -21,22 +21,29 @@ struct ChannelMembersView: View { let s = m.wrapped.memberStatus return s != .memLeft && s != .memRemoved && m.wrapped.memberRole != .relay } + .sorted { $0.wrapped.memberRole > $1.wrapped.memberRole } + let subscriberCount = groupInfo.groupSummary.publicMemberCount ?? Int64(members.count + 1) if groupInfo.isOwner { - let subscriberCount = groupInfo.groupSummary.publicMemberCount ?? Int64(members.count + 1) List { Section(header: Text(subscriberCountStr(subscriberCount)).foregroundColor(theme.colors.secondary)) { memberRow(GMember(groupInfo.membership), user: true, showRole: true) ForEach(members) { member in - memberRow(member, user: false, showRole: member.wrapped.memberRole >= .owner) + memberRow(member, user: false, showRole: member.wrapped.memberRole >= .member) } } } } else { - let owners = members.filter { $0.wrapped.memberRole >= .owner } + let contributors = members.filter { $0.wrapped.memberRole >= .member && $0.wrapped.memberStatus != .memUnknown } + let contributorCount = contributors.count + (groupInfo.membership.memberRole >= .member ? 1 : 0) + let withContributors = contributors.contains { $0.wrapped.memberRole < .owner } + || groupInfo.membership.memberRole >= .member List { - Section(header: Text("Owners").foregroundColor(theme.colors.secondary)) { - ForEach(owners) { member in - memberRow(member, user: false, showRole: false) + Section(header: Text(ownersContributorsCountStr(contributorCount, withContributors: withContributors)).foregroundColor(theme.colors.secondary)) { + if groupInfo.membership.memberRole >= .member { + memberRow(GMember(groupInfo.membership), user: true, showRole: true) + } + ForEach(contributors) { member in + memberRow(member, user: false, showRole: member.wrapped.memberRole >= .moderator) } } } diff --git a/apps/ios/Shared/Views/Chat/Group/GroupChatInfoView.swift b/apps/ios/Shared/Views/Chat/Group/GroupChatInfoView.swift index 5563d79e61..41e24a6ced 100644 --- a/apps/ios/Shared/Views/Chat/Group/GroupChatInfoView.swift +++ b/apps/ios/Shared/Views/Chat/Group/GroupChatInfoView.swift @@ -691,7 +691,7 @@ struct GroupChatInfoView: View { } private func channelMembersButton() -> some View { - let label: LocalizedStringKey = groupInfo.isOwner ? "Subscribers" : "Owners" + let label: LocalizedStringKey = groupInfo.isOwner ? "Subscribers" : "Owners & contributors" return NavigationLink { ChannelMembersView(chat: chat, groupInfo: groupInfo) .navigationTitle(label) diff --git a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/ChatView.kt b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/ChatView.kt index 6f7c746691..cc9e71354c 100644 --- a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/ChatView.kt +++ b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/ChatView.kt @@ -1547,6 +1547,11 @@ fun subscriberCountStr(count: Long): String = if (count == 1L) String.format(generalGetString(MR.strings.channel_subscriber_count_singular), count) else String.format(generalGetString(MR.strings.channel_subscriber_count_plural), count) +fun ownersContributorsCountStr(count: Int, withContributors: Boolean): String = + if (withContributors) String.format(generalGetString(MR.strings.channel_owners_contributors_count), count) + else if (count == 1) String.format(generalGetString(MR.strings.channel_owner_count_singular), count) + else String.format(generalGetString(MR.strings.channel_owner_count_plural), count) + @Composable fun ChatInfoToolbarTitle(cInfo: ChatInfo, imageSize: Dp = 40.dp, iconColor: Color = MaterialTheme.colors.secondaryVariant.mixWith(MaterialTheme.colors.onBackground, 0.97f)) { Row( diff --git a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/group/ChannelMembersView.kt b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/group/ChannelMembersView.kt index 9f13cf2b19..ef3d8805f4 100644 --- a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/group/ChannelMembersView.kt +++ b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/group/ChannelMembersView.kt @@ -14,6 +14,7 @@ import androidx.compose.ui.unit.dp import chat.simplex.common.model.* import chat.simplex.common.platform.* import chat.simplex.common.ui.theme.* +import chat.simplex.common.views.chat.ownersContributorsCountStr import chat.simplex.common.views.chat.subscriberCountStr import chat.simplex.common.views.helpers.* import chat.simplex.res.MR @@ -33,6 +34,7 @@ fun ChannelMembersView( && m.memberStatus != GroupMemberStatus.MemRemoved && m.memberRole != GroupMemberRole.Relay } + .sortedByDescending { it.memberRole } ColumnWithScrollBar { val title = if (groupInfo.isOwner) { @@ -42,8 +44,8 @@ fun ChannelMembersView( } AppBarTitle(title) + val subscriberCount = groupInfo.groupSummary.publicMemberCount ?: (members.size + 1).toLong() if (groupInfo.isOwner) { - val subscriberCount = groupInfo.groupSummary.publicMemberCount ?: (members.size + 1).toLong() SectionView(title = subscriberCountStr(subscriberCount)) { SectionItemView(minHeight = 54.dp, padding = PaddingValues(horizontal = DEFAULT_PADDING)) { ChannelMemberRow(groupInfo.membership, user = true, showRole = true, isChannel = groupInfo.isChannel) @@ -55,14 +57,23 @@ fun ChannelMembersView( minHeight = 54.dp, padding = PaddingValues(horizontal = DEFAULT_PADDING) ) { - ChannelMemberRow(member, user = false, showRole = member.memberRole >= GroupMemberRole.Owner, isChannel = groupInfo.isChannel) + ChannelMemberRow(member, user = false, showRole = member.memberRole >= GroupMemberRole.Member, isChannel = groupInfo.isChannel) } } } } else { - val owners = members.filter { it.memberRole >= GroupMemberRole.Owner } - SectionView(title = generalGetString(MR.strings.channel_members_section_owners)) { - owners.forEachIndexed { index, member -> + val contributors = members.filter { it.memberRole >= GroupMemberRole.Member && it.memberStatus != GroupMemberStatus.MemUnknown } + val contributorCount = contributors.size + if (groupInfo.membership.memberRole >= GroupMemberRole.Member) 1 else 0 + val withContributors = contributors.any { it.memberRole < GroupMemberRole.Owner } || + groupInfo.membership.memberRole >= GroupMemberRole.Member + SectionView(title = ownersContributorsCountStr(contributorCount, withContributors)) { + if (groupInfo.membership.memberRole >= GroupMemberRole.Member) { + SectionItemView(minHeight = 54.dp, padding = PaddingValues(horizontal = DEFAULT_PADDING)) { + ChannelMemberRow(groupInfo.membership, user = true, showRole = true, isChannel = groupInfo.isChannel) + } + Divider() + } + contributors.forEachIndexed { index, member -> if (index > 0) { Divider() } @@ -71,7 +82,7 @@ fun ChannelMembersView( minHeight = 54.dp, padding = PaddingValues(horizontal = DEFAULT_PADDING) ) { - ChannelMemberRow(member, user = false, showRole = false, isChannel = groupInfo.isChannel) + ChannelMemberRow(member, user = false, showRole = member.memberRole >= GroupMemberRole.Moderator, isChannel = groupInfo.isChannel) } } } diff --git a/apps/multiplatform/common/src/commonMain/resources/MR/base/strings.xml b/apps/multiplatform/common/src/commonMain/resources/MR/base/strings.xml index 71c0bf98a4..9262bd9dac 100644 --- a/apps/multiplatform/common/src/commonMain/resources/MR/base/strings.xml +++ b/apps/multiplatform/common/src/commonMain/resources/MR/base/strings.xml @@ -2976,9 +2976,12 @@ Subscribers - Owners + Owners & contributors %1$d subscriber %1$d subscribers + %1$d owner + %1$d owners + %1$d owners & contributors you From e49a5ec6b5f0df00d340f0f435593f911a9b0664 Mon Sep 17 00:00:00 2001 From: spaced4ndy <8711996+spaced4ndy@users.noreply.github.com> Date: Thu, 25 Jun 2026 11:42:01 +0000 Subject: [PATCH 67/81] core: XGrpMemNew checks (#7132) --- src/Simplex/Chat/Library/Internal.hs | 3 + src/Simplex/Chat/Library/Subscriber.hs | 13 ++- .../SQLite/Migrations/chat_query_plans.txt | 13 +++ tests/ChatTests/Groups.hs | 84 ++++++++++++++++++- 4 files changed, 103 insertions(+), 10 deletions(-) diff --git a/src/Simplex/Chat/Library/Internal.hs b/src/Simplex/Chat/Library/Internal.hs index 41f70afda4..c7f44d125d 100644 --- a/src/Simplex/Chat/Library/Internal.hs +++ b/src/Simplex/Chat/Library/Internal.hs @@ -1256,6 +1256,9 @@ redactedMemberProfile allowSimplexLinks Profile {displayName, fullName, shortDes isRosterRole :: GroupMemberRole -> Bool isRosterRole r = r == GRMember || r == GRModerator || r == GRAdmin +isPrivilegedRole :: GroupMemberRole -> Bool +isPrivilegedRole r = r >= GRMember + -- Drop non-privileged-role entries and de-duplicate by memberId, keeping the first. -- Runs on the parsed roster blob. validateGroupRoster :: [RosterMember] -> [RosterMember] diff --git a/src/Simplex/Chat/Library/Subscriber.hs b/src/Simplex/Chat/Library/Subscriber.hs index 829319635f..c964df2b3d 100644 --- a/src/Simplex/Chat/Library/Subscriber.hs +++ b/src/Simplex/Chat/Library/Subscriber.hs @@ -3071,8 +3071,7 @@ processAgentMessageConn cxt user@User {userId} corrId agentConnId agentMessage = xGrpMemNew :: GroupInfo -> GroupMember -> MemberInfo -> Maybe MsgScope -> RcvMessage -> UTCTime -> CM (Maybe DeliveryJobScope) xGrpMemNew gInfo m memInfo@(MemberInfo memId memRole _ _ assertedKey_) msgScope_ msg brokerTs = do - let fromRelay = useRelays' gInfo && isRelay m - unless fromRelay $ checkHostRole m memRole + unless (useRelays' gInfo) $ checkHostRole m memRole if sameMemberId memId (membership gInfo) then pure Nothing else @@ -3081,7 +3080,7 @@ processAgentMessageConn cxt user@User {userId} corrId agentConnId agentMessage = -- roster-established privileged member: the relay may update the profile only, -- never the role or key (those are owner-authoritative via the roster, and -- XGrpMemNew is unsigned) - | fromRelay && isRosterRole (memberRole' unknownMember) -> do + | useRelays' gInfo && isPrivilegedRole (memberRole' unknownMember) -> do -- a member's key is immutable per memberId and identical across relays; mismatch -- is unambiguous relay misbehavior (role can legitimately differ across relays -- under multi-relay skew, so we deliberately don't warn on role) @@ -3095,8 +3094,8 @@ processAgentMessageConn cxt user@User {userId} corrId agentConnId agentMessage = toView $ CEvtUnknownMemberAnnounced user gInfo' m unknownMember updatedMember memberAnnouncedToView updatedMember gInfo' pure $ deliveryJobScope updatedMember - -- asserted privileged but NOT roster-established: relay conjuring a moderator - | fromRelay && isRosterRole memRole -> + -- asserted privileged but NOT roster-established: relay conjuring a privileged member + | useRelays' gInfo && isPrivilegedRole memRole -> messageError "x.grp.mem.new: privileged role not established by roster" $> Nothing | otherwise -> do (updatedMember, gInfo') <- withStore $ \db -> do @@ -3114,8 +3113,8 @@ processAgentMessageConn cxt user@User {userId} corrId agentConnId agentMessage = | useRelays' gInfo -> logInfo "x.grp.mem.new: member already created via another relay" $> Nothing | otherwise -> messageError "x.grp.mem.new error: member already exists" $> Nothing Left _ - -- a privileged member absent from the roster is a relay conjuring a moderator - | fromRelay && isRosterRole memRole -> messageError "x.grp.mem.new: privileged member not established by roster" $> Nothing + -- a privileged member absent from the roster is a relay conjuring one + | useRelays' gInfo && isPrivilegedRole memRole -> messageError "x.grp.mem.new: privileged member not established by roster" $> Nothing | otherwise -> do (newMember, gInfo') <- withStore $ \db -> do newMember <- createNewGroupMember db cxt user gInfo m memInfo GCPostMember initialStatus diff --git a/src/Simplex/Chat/Store/SQLite/Migrations/chat_query_plans.txt b/src/Simplex/Chat/Store/SQLite/Migrations/chat_query_plans.txt index fb6166f8c9..eefcb8de57 100644 --- a/src/Simplex/Chat/Store/SQLite/Migrations/chat_query_plans.txt +++ b/src/Simplex/Chat/Store/SQLite/Migrations/chat_query_plans.txt @@ -7033,6 +7033,11 @@ Query: SELECT auth_err_counter FROM connections WHERE user_id = ? AND connection Plan: SEARCH connections USING INTEGER PRIMARY KEY (rowid=?) +Query: SELECT c.agent_conn_id FROM connections c JOIN group_members m ON m.group_member_id = c.group_member_id WHERE m.local_display_name = ? +Plan: +SCAN m USING COVERING INDEX idx_group_members_user_id_local_display_name +SEARCH c USING INDEX idx_connections_group_member_id (group_member_id=?) + Query: SELECT chat_item_id FROM chat_items WHERE user_id = ? AND contact_id = ? AND shared_msg_id = ? AND item_sent = ? Plan: SEARCH chat_items USING INDEX idx_chat_items_direct_shared_msg_id (user_id=? AND contact_id=? AND shared_msg_id=?) @@ -7233,6 +7238,10 @@ Query: SELECT max(active_order) FROM users Plan: SEARCH users +Query: SELECT member_id FROM group_members WHERE member_role = ? LIMIT 1 +Plan: +SCAN group_members + Query: SELECT member_pub_key FROM group_members WHERE local_display_name = ? Plan: SCAN group_members @@ -7253,6 +7262,10 @@ Query: SELECT member_role FROM group_members WHERE local_display_name = ? Plan: SCAN group_members +Query: SELECT member_role, member_pub_key FROM group_members WHERE local_display_name = ? +Plan: +SCAN group_members + Query: SELECT member_status FROM group_members WHERE local_display_name = ? Plan: SCAN group_members diff --git a/tests/ChatTests/Groups.hs b/tests/ChatTests/Groups.hs index b667459b6d..51fe8c54aa 100644 --- a/tests/ChatTests/Groups.hs +++ b/tests/ChatTests/Groups.hs @@ -3,6 +3,7 @@ {-# LANGUAGE NamedFieldPuns #-} {-# LANGUAGE NumericUnderscores #-} {-# LANGUAGE OverloadedStrings #-} +{-# LANGUAGE PatternSynonyms #-} {-# LANGUAGE PostfixOperators #-} {-# LANGUAGE QuasiQuotes #-} {-# LANGUAGE ScopedTypeVariables #-} @@ -16,30 +17,37 @@ import ChatTests.DBUtils import ChatTests.Utils import Control.Concurrent (threadDelay) import Control.Concurrent.Async (concurrently_) +import Control.Concurrent.STM (atomically) import Control.Monad (forM_, void, when) +import Control.Monad.Except (runExceptT) import Data.Bifunctor (second) import Data.ByteString (ByteString) import qualified Data.ByteString.Char8 as B import Data.Maybe (fromMaybe, isJust, maybeToList) -import Data.Time (UTCTime) +import Data.Time (UTCTime, getCurrentTime) import Data.Int (Int64) import Data.List (intercalate, isInfixOf, isSuffixOf) import qualified Data.Map.Strict as M import qualified Data.Text as T -import Simplex.Chat.Controller (ChatConfig (..), ChatHooks (..), ChatLogLevel (..), defaultChatHooks) +import Simplex.Chat.Controller (ChatController (ChatController, smpAgent), ChatConfig (..), ChatHooks (..), ChatLogLevel (..), defaultChatHooks) import Simplex.Chat.Library.Internal (uniqueMsgMentions, updatedMentionNames) import Simplex.Chat.Markdown (parseMaybeMarkdownList) import Simplex.Chat.Messages (CIMention (..), CIMentionMember (..), ChatItemId) +import Simplex.Chat.Messages.Batch (encodeBinaryBatch, encodeFwdElement) import Simplex.Chat.Messages.CIContent (publicGroupNoE2EText) import Simplex.Chat.Options -import Simplex.Chat.Protocol (MsgMention (..), MsgContent (..), msgContentText) +import Simplex.Chat.Protocol (ChatMessage (ChatMessage), ChatMsgEvent (XGrpMemNew), FwdSender (FwdMember), GrpMsgForward (GrpMsgForward), MsgMention (..), MsgContent (..), VerifiedMsg (VMUnsigned), msgContentText) import Simplex.Chat.Types import Simplex.Chat.Types.MemberRelations (MemberRelation (..), getRelation, setRelation) import Simplex.Chat.Types.Shared (GroupMemberRole (..), GroupAcceptance (..)) +import Simplex.Messaging.Agent (sendMessages, vrValue) import Simplex.Messaging.Agent.Env.SQLite import Simplex.Messaging.Agent.RetryInterval import qualified Simplex.Messaging.Agent.Store.DB as DB import Simplex.Messaging.Agent.Store.DB (Binary (..)) +import qualified Simplex.Messaging.Crypto as C +import Simplex.Messaging.Crypto.Ratchet (pattern PQEncOff) +import Simplex.Messaging.Protocol (MsgFlags (..)) import Simplex.Messaging.Server.Env.STM hiding (subscriptions) import Simplex.Messaging.Transport import Simplex.Messaging.Version @@ -295,6 +303,7 @@ chatGroupTests = do it "removed moderator drops from the roster cache" testChannelRemovedModeratorRefreshesRoster it "role transitions update the roster (mod <-> admin, admin -> non-roster)" testChannelRoleTransitionsUpdateRoster it "malicious relay cannot downgrade or re-key a roster-established moderator via XGrpMemNew" testChannelRelayCannotDowngradeRosterMember + it "malicious relay cannot forge a privileged member via XGrpMemNew forwarded as the owner" testChannelRelayCannotForgePrivilegedMember it "should add relay to channel with roster (relay caches roster before joinable)" testChannelAddRelayWithRoster it "roster blob spanning multiple chunks reassembles" testChannelRosterMultipartReassembly it "corrupted roster blob is rejected on digest mismatch" testChannelRosterDigestMismatchRejected @@ -9371,6 +9380,13 @@ testChannels2RelaysIncognito ps = frank <# ("#team " <> danIncognito <> "> > hi") frank <## " + 👍" + alice `hasContactProfiles` ["alice", "bob", "cath", T.pack danIncognito, "eve", "frank"] + bob `hasContactProfiles` ["alice", "bob", T.pack danIncognito, "eve", "frank"] + cath `hasContactProfiles` ["alice", "cath", T.pack danIncognito, "eve", "frank"] + dan `hasContactProfiles` ["alice", "bob", "cath", "dan", T.pack danIncognito] + eve `hasContactProfiles` ["alice", "bob", "cath", T.pack danIncognito, "eve"] + frank `hasContactProfiles` ["alice", "bob", "cath", T.pack danIncognito, "frank"] + testChannelUpdateProfileSigned :: HasCallStack => TestParams -> IO () testChannelUpdateProfileSigned ps = withNewTestChat ps "alice" aliceProfile $ \alice -> @@ -9906,6 +9922,68 @@ testChannelRelayCannotDowngradeRosterMember ps = [Only k] -> pure k _ -> fail $ "expected one row for " <> T.unpack name +testChannelRelayCannotForgePrivilegedMember :: HasCallStack => TestParams -> IO () +testChannelRelayCannotForgePrivilegedMember ps = + withNewTestChat ps "alice" aliceProfile $ \alice -> + withNewTestChatOpts ps relayTestOpts "bob" bobProfile $ \bob -> + withNewTestChat ps "cath" cathProfile $ \cath -> do + (shortLink, fullLink) <- prepareChannel1Relay "team" alice bob + memberJoinChannel "team" [bob] [alice] shortLink fullLink cath + threadDelay 1000000 + -- the forged attribution only resolves to a privileged author if the victim already holds the + -- owner at GROwner (established via the group link on join) - this documents and guards that premise + checkMemberRow cath "alice" (Just "owner") + ownerMemId <- ownerMemberId bob + connId <- relayConnIdToMember bob "cath" + -- the malicious relay forges the announcement, choosing the new member's role and signing key + g <- C.newRandom + kp <- atomically $ C.generateKeyPair g + ts <- getCurrentTime + let ChatController {smpAgent = bobAgent} = chatController bob + attackerPub = fst kp :: C.PublicKeyEd25519 + forgedMemId = MemberId "forgedadmin1" + forgedProfile = (aliceProfile :: Profile) {displayName = "forgery", fullName = "Forgery"} + memInfo = + MemberInfo + { memberId = forgedMemId, + memberRole = GRAdmin, + v = Nothing, + profile = forgedProfile, + memberKey = Just (MemberKey attackerPub) + } + chatMsg = ChatMessage chatInitialVRange Nothing (XGrpMemNew memInfo Nothing) + fwd = GrpMsgForward (FwdMember ownerMemId "alice") ts + body = encodeBinaryBatch [encodeFwdElement fwd (VMUnsigned chatMsg)] + sent <- runExceptT $ sendMessages bobAgent [(connId, PQEncOff, MsgFlags False, vrValue body)] + either (fail . show) (const $ pure ()) sent + -- secure: the victim rejects the forged privileged announcement instead of storing it + cath <##. "error: x.grp.mem.new: privileged member not established by roster" + forged <- forgedMemberRows cath "forgery" + forged `shouldBe` [] + where + ownerMemberId :: TestCC -> IO MemberId + ownerMemberId cc = do + rows <- withCCTransaction cc $ \db -> + DB.query db "SELECT member_id FROM group_members WHERE member_role = ? LIMIT 1" (Only ("owner" :: T.Text)) :: IO [Only ByteString] + case rows of + [Only mid] -> pure (MemberId mid) + _ -> fail "expected exactly one owner member on the relay" + relayConnIdToMember :: TestCC -> T.Text -> IO ByteString + relayConnIdToMember cc name = do + rows <- withCCTransaction cc $ \db -> + DB.query + db + "SELECT c.agent_conn_id FROM connections c JOIN group_members m ON m.group_member_id = c.group_member_id WHERE m.local_display_name = ?" + (Only name) :: + IO [Only ByteString] + case rows of + (Only connId : _) -> pure connId + _ -> fail $ "no relay connection to member " <> T.unpack name + forgedMemberRows :: TestCC -> T.Text -> IO [(T.Text, Maybe ByteString)] + forgedMemberRows cc name = + withCCTransaction cc $ \db -> + DB.query db "SELECT member_role, member_pub_key FROM group_members WHERE local_display_name = ?" (Only name) + testChannelRemoveMemberSigned :: HasCallStack => TestParams -> IO () testChannelRemoveMemberSigned ps = withNewTestChat ps "alice" aliceProfile $ \alice -> From 66e6233e78b54ac38ade99dbc66c5a630e9462f1 Mon Sep 17 00:00:00 2001 From: Evgeny Poberezkin Date: Fri, 26 Jun 2026 07:35:19 +0100 Subject: [PATCH 68/81] core: 7.0.0.6 --- simplex-chat.cabal | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/simplex-chat.cabal b/simplex-chat.cabal index b4487dcf73..f8c599c80b 100644 --- a/simplex-chat.cabal +++ b/simplex-chat.cabal @@ -5,7 +5,7 @@ cabal-version: 1.12 -- see: https://github.com/sol/hpack name: simplex-chat -version: 7.0.0.5 +version: 7.0.0.6 category: Web, System, Services, Cryptography homepage: https://github.com/simplex-chat/simplex-chat#readme author: simplex.chat From 17851326916b17f29fd39f0ad5a757d3bacebeec Mon Sep 17 00:00:00 2001 From: SimpleX Chat Date: Fri, 26 Jun 2026 08:05:16 +0000 Subject: [PATCH 69/81] 7.0.0-beta.2: android 361, desktop 150, ios 339 --- apps/ios/SimpleX.xcodeproj/project.pbxproj | 36 +++++++++---------- apps/multiplatform/gradle.properties | 8 ++--- packages/simplex-chat-nodejs/package.json | 2 +- .../simplex-chat-nodejs/src/download-libs.js | 2 +- .../src/simplex_chat/_version.py | 4 +-- 5 files changed, 26 insertions(+), 26 deletions(-) diff --git a/apps/ios/SimpleX.xcodeproj/project.pbxproj b/apps/ios/SimpleX.xcodeproj/project.pbxproj index f00f623e98..87e042be82 100644 --- a/apps/ios/SimpleX.xcodeproj/project.pbxproj +++ b/apps/ios/SimpleX.xcodeproj/project.pbxproj @@ -183,8 +183,8 @@ 64C3B0212A0D359700E19930 /* CustomTimePicker.swift in Sources */ = {isa = PBXBuildFile; fileRef = 64C3B0202A0D359700E19930 /* CustomTimePicker.swift */; }; 64C8299D2D54AEEE006B9E89 /* libgmp.a in Frameworks */ = {isa = PBXBuildFile; fileRef = 64C829982D54AEED006B9E89 /* libgmp.a */; }; 64C8299E2D54AEEE006B9E89 /* libffi.a in Frameworks */ = {isa = PBXBuildFile; fileRef = 64C829992D54AEEE006B9E89 /* libffi.a */; }; - 64C8299F2D54AEEE006B9E89 /* libHSsimplex-chat-7.0.0.5-3gtbZllPEb75FgChAFCqhx-ghc9.6.3.a in Frameworks */ = {isa = PBXBuildFile; fileRef = 64C8299A2D54AEEE006B9E89 /* libHSsimplex-chat-7.0.0.5-3gtbZllPEb75FgChAFCqhx-ghc9.6.3.a */; }; - 64C829A02D54AEEE006B9E89 /* libHSsimplex-chat-7.0.0.5-3gtbZllPEb75FgChAFCqhx.a in Frameworks */ = {isa = PBXBuildFile; fileRef = 64C8299B2D54AEEE006B9E89 /* libHSsimplex-chat-7.0.0.5-3gtbZllPEb75FgChAFCqhx.a */; }; + 64C8299F2D54AEEE006B9E89 /* libHSsimplex-chat-7.0.0.6-IDb07VxlHBtGmeucUQceZv-ghc9.6.3.a in Frameworks */ = {isa = PBXBuildFile; fileRef = 64C8299A2D54AEEE006B9E89 /* libHSsimplex-chat-7.0.0.6-IDb07VxlHBtGmeucUQceZv-ghc9.6.3.a */; }; + 64C829A02D54AEEE006B9E89 /* libHSsimplex-chat-7.0.0.6-IDb07VxlHBtGmeucUQceZv.a in Frameworks */ = {isa = PBXBuildFile; fileRef = 64C8299B2D54AEEE006B9E89 /* libHSsimplex-chat-7.0.0.6-IDb07VxlHBtGmeucUQceZv.a */; }; 64C829A12D54AEEE006B9E89 /* libgmpxx.a in Frameworks */ = {isa = PBXBuildFile; fileRef = 64C8299C2D54AEEE006B9E89 /* libgmpxx.a */; }; 64D0C2C029F9688300B38D5F /* UserAddressView.swift in Sources */ = {isa = PBXBuildFile; fileRef = 64D0C2BF29F9688300B38D5F /* UserAddressView.swift */; }; 64D0C2C229FA57AB00B38D5F /* UserAddressLearnMore.swift in Sources */ = {isa = PBXBuildFile; fileRef = 64D0C2C129FA57AB00B38D5F /* UserAddressLearnMore.swift */; }; @@ -563,8 +563,8 @@ 64C3B0202A0D359700E19930 /* CustomTimePicker.swift */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.swift; path = CustomTimePicker.swift; sourceTree = ""; }; 64C829982D54AEED006B9E89 /* libgmp.a */ = {isa = PBXFileReference; lastKnownFileType = archive.ar; path = libgmp.a; sourceTree = ""; }; 64C829992D54AEEE006B9E89 /* libffi.a */ = {isa = PBXFileReference; lastKnownFileType = archive.ar; path = libffi.a; sourceTree = ""; }; - 64C8299A2D54AEEE006B9E89 /* libHSsimplex-chat-7.0.0.5-3gtbZllPEb75FgChAFCqhx-ghc9.6.3.a */ = {isa = PBXFileReference; lastKnownFileType = archive.ar; path = "libHSsimplex-chat-7.0.0.5-3gtbZllPEb75FgChAFCqhx-ghc9.6.3.a"; sourceTree = ""; }; - 64C8299B2D54AEEE006B9E89 /* libHSsimplex-chat-7.0.0.5-3gtbZllPEb75FgChAFCqhx.a */ = {isa = PBXFileReference; lastKnownFileType = archive.ar; path = "libHSsimplex-chat-7.0.0.5-3gtbZllPEb75FgChAFCqhx.a"; sourceTree = ""; }; + 64C8299A2D54AEEE006B9E89 /* libHSsimplex-chat-7.0.0.6-IDb07VxlHBtGmeucUQceZv-ghc9.6.3.a */ = {isa = PBXFileReference; lastKnownFileType = archive.ar; path = "libHSsimplex-chat-7.0.0.6-IDb07VxlHBtGmeucUQceZv-ghc9.6.3.a"; sourceTree = ""; }; + 64C8299B2D54AEEE006B9E89 /* libHSsimplex-chat-7.0.0.6-IDb07VxlHBtGmeucUQceZv.a */ = {isa = PBXFileReference; lastKnownFileType = archive.ar; path = "libHSsimplex-chat-7.0.0.6-IDb07VxlHBtGmeucUQceZv.a"; sourceTree = ""; }; 64C8299C2D54AEEE006B9E89 /* libgmpxx.a */ = {isa = PBXFileReference; lastKnownFileType = archive.ar; path = libgmpxx.a; sourceTree = ""; }; 64D0C2BF29F9688300B38D5F /* UserAddressView.swift */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.swift; path = UserAddressView.swift; sourceTree = ""; }; 64D0C2C129FA57AB00B38D5F /* UserAddressLearnMore.swift */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.swift; path = UserAddressLearnMore.swift; sourceTree = ""; }; @@ -735,8 +735,8 @@ 64C8299D2D54AEEE006B9E89 /* libgmp.a in Frameworks */, 64C8299E2D54AEEE006B9E89 /* libffi.a in Frameworks */, 64C829A12D54AEEE006B9E89 /* libgmpxx.a in Frameworks */, - 64C8299F2D54AEEE006B9E89 /* libHSsimplex-chat-7.0.0.5-3gtbZllPEb75FgChAFCqhx-ghc9.6.3.a in Frameworks */, - 64C829A02D54AEEE006B9E89 /* libHSsimplex-chat-7.0.0.5-3gtbZllPEb75FgChAFCqhx.a in Frameworks */, + 64C8299F2D54AEEE006B9E89 /* libHSsimplex-chat-7.0.0.6-IDb07VxlHBtGmeucUQceZv-ghc9.6.3.a in Frameworks */, + 64C829A02D54AEEE006B9E89 /* libHSsimplex-chat-7.0.0.6-IDb07VxlHBtGmeucUQceZv.a in Frameworks */, CE38A29C2C3FCD72005ED185 /* SwiftyGif in Frameworks */, ); runOnlyForDeploymentPostprocessing = 0; @@ -822,8 +822,8 @@ 64C829992D54AEEE006B9E89 /* libffi.a */, 64C829982D54AEED006B9E89 /* libgmp.a */, 64C8299C2D54AEEE006B9E89 /* libgmpxx.a */, - 64C8299A2D54AEEE006B9E89 /* libHSsimplex-chat-7.0.0.5-3gtbZllPEb75FgChAFCqhx-ghc9.6.3.a */, - 64C8299B2D54AEEE006B9E89 /* libHSsimplex-chat-7.0.0.5-3gtbZllPEb75FgChAFCqhx.a */, + 64C8299A2D54AEEE006B9E89 /* libHSsimplex-chat-7.0.0.6-IDb07VxlHBtGmeucUQceZv-ghc9.6.3.a */, + 64C8299B2D54AEEE006B9E89 /* libHSsimplex-chat-7.0.0.6-IDb07VxlHBtGmeucUQceZv.a */, ); path = Libraries; sourceTree = ""; @@ -2081,7 +2081,7 @@ CLANG_TIDY_MISC_REDUNDANT_EXPRESSION = YES; CODE_SIGN_ENTITLEMENTS = "SimpleX (iOS).entitlements"; CODE_SIGN_STYLE = Automatic; - CURRENT_PROJECT_VERSION = 338; + CURRENT_PROJECT_VERSION = 339; DEAD_CODE_STRIPPING = YES; DEVELOPMENT_TEAM = 5NN7GUYB6T; ENABLE_BITCODE = NO; @@ -2131,7 +2131,7 @@ CLANG_TIDY_MISC_REDUNDANT_EXPRESSION = YES; CODE_SIGN_ENTITLEMENTS = "SimpleX (iOS).entitlements"; CODE_SIGN_STYLE = Automatic; - CURRENT_PROJECT_VERSION = 338; + CURRENT_PROJECT_VERSION = 339; DEAD_CODE_STRIPPING = YES; DEVELOPMENT_TEAM = 5NN7GUYB6T; ENABLE_BITCODE = NO; @@ -2173,7 +2173,7 @@ buildSettings = { ALWAYS_EMBED_SWIFT_STANDARD_LIBRARIES = YES; CODE_SIGN_STYLE = Automatic; - CURRENT_PROJECT_VERSION = 338; + CURRENT_PROJECT_VERSION = 339; DEVELOPMENT_TEAM = 5NN7GUYB6T; GENERATE_INFOPLIST_FILE = YES; IPHONEOS_DEPLOYMENT_TARGET = 15.0; @@ -2193,7 +2193,7 @@ buildSettings = { ALWAYS_EMBED_SWIFT_STANDARD_LIBRARIES = YES; CODE_SIGN_STYLE = Automatic; - CURRENT_PROJECT_VERSION = 338; + CURRENT_PROJECT_VERSION = 339; DEVELOPMENT_TEAM = 5NN7GUYB6T; GENERATE_INFOPLIST_FILE = YES; IPHONEOS_DEPLOYMENT_TARGET = 15.0; @@ -2218,7 +2218,7 @@ CODE_SIGN_ENTITLEMENTS = "SimpleX NSE/SimpleX NSE.entitlements"; CODE_SIGN_IDENTITY = "Apple Development"; CODE_SIGN_STYLE = Automatic; - CURRENT_PROJECT_VERSION = 338; + CURRENT_PROJECT_VERSION = 339; DEVELOPMENT_TEAM = 5NN7GUYB6T; ENABLE_BITCODE = NO; GCC_OPTIMIZATION_LEVEL = s; @@ -2255,7 +2255,7 @@ CODE_SIGN_ENTITLEMENTS = "SimpleX NSE/SimpleX NSE.entitlements"; CODE_SIGN_IDENTITY = "Apple Development"; CODE_SIGN_STYLE = Automatic; - CURRENT_PROJECT_VERSION = 338; + CURRENT_PROJECT_VERSION = 339; DEVELOPMENT_TEAM = 5NN7GUYB6T; ENABLE_BITCODE = NO; ENABLE_CODE_COVERAGE = NO; @@ -2292,7 +2292,7 @@ CLANG_TIDY_BUGPRONE_REDUNDANT_BRANCH_CONDITION = YES; CLANG_TIDY_MISC_REDUNDANT_EXPRESSION = YES; CODE_SIGN_STYLE = Automatic; - CURRENT_PROJECT_VERSION = 338; + CURRENT_PROJECT_VERSION = 339; DEFINES_MODULE = YES; DEVELOPMENT_TEAM = 5NN7GUYB6T; DYLIB_COMPATIBILITY_VERSION = 1; @@ -2343,7 +2343,7 @@ CLANG_TIDY_BUGPRONE_REDUNDANT_BRANCH_CONDITION = YES; CLANG_TIDY_MISC_REDUNDANT_EXPRESSION = YES; CODE_SIGN_STYLE = Automatic; - CURRENT_PROJECT_VERSION = 338; + CURRENT_PROJECT_VERSION = 339; DEFINES_MODULE = YES; DEVELOPMENT_TEAM = 5NN7GUYB6T; DYLIB_COMPATIBILITY_VERSION = 1; @@ -2397,7 +2397,7 @@ CLANG_CXX_LANGUAGE_STANDARD = "gnu++20"; CODE_SIGN_ENTITLEMENTS = "SimpleX SE/SimpleX SE.entitlements"; CODE_SIGN_STYLE = Automatic; - CURRENT_PROJECT_VERSION = 338; + CURRENT_PROJECT_VERSION = 339; DEVELOPMENT_TEAM = 5NN7GUYB6T; ENABLE_USER_SCRIPT_SANDBOXING = YES; GCC_C_LANGUAGE_STANDARD = gnu17; @@ -2431,7 +2431,7 @@ CLANG_CXX_LANGUAGE_STANDARD = "gnu++20"; CODE_SIGN_ENTITLEMENTS = "SimpleX SE/SimpleX SE.entitlements"; CODE_SIGN_STYLE = Automatic; - CURRENT_PROJECT_VERSION = 338; + CURRENT_PROJECT_VERSION = 339; DEVELOPMENT_TEAM = 5NN7GUYB6T; ENABLE_USER_SCRIPT_SANDBOXING = YES; GCC_C_LANGUAGE_STANDARD = gnu17; diff --git a/apps/multiplatform/gradle.properties b/apps/multiplatform/gradle.properties index 37db0f2365..9828121a8b 100644 --- a/apps/multiplatform/gradle.properties +++ b/apps/multiplatform/gradle.properties @@ -24,13 +24,13 @@ android.nonTransitiveRClass=true kotlin.mpp.androidSourceSetLayoutVersion=2 kotlin.jvm.target=11 -android.version_name=7.0-beta.1 -android.version_code=360 +android.version_name=7.0-beta.2 +android.version_code=361 android.bundle=false -desktop.version_name=7.0-beta.1 -desktop.version_code=149 +desktop.version_name=7.0-beta.2 +desktop.version_code=150 kotlin.version=2.1.20 gradle.plugin.version=8.7.0 diff --git a/packages/simplex-chat-nodejs/package.json b/packages/simplex-chat-nodejs/package.json index 4474348798..69be65a518 100644 --- a/packages/simplex-chat-nodejs/package.json +++ b/packages/simplex-chat-nodejs/package.json @@ -1,6 +1,6 @@ { "name": "simplex-chat", - "version": "7.0.0-beta.1", + "version": "7.0.0-beta.2", "main": "dist/index.js", "types": "dist/index.d.ts", "files": [ diff --git a/packages/simplex-chat-nodejs/src/download-libs.js b/packages/simplex-chat-nodejs/src/download-libs.js index 7fbf62f047..c29d6ec700 100644 --- a/packages/simplex-chat-nodejs/src/download-libs.js +++ b/packages/simplex-chat-nodejs/src/download-libs.js @@ -4,7 +4,7 @@ const path = require('path'); const extract = require('extract-zip'); const GITHUB_REPO = 'simplex-chat/simplex-chat-libs'; -const RELEASE_TAG = 'v7.0.0-beta.1'; +const RELEASE_TAG = 'v7.0.0-beta.2'; const BACKEND = (process.env.SIMPLEX_BACKEND || process.env.npm_config_simplex_backend || 'sqlite').toLowerCase(); if (BACKEND !== 'sqlite' && BACKEND !== 'postgres') { diff --git a/packages/simplex-chat-python/src/simplex_chat/_version.py b/packages/simplex-chat-python/src/simplex_chat/_version.py index e7ad6b625a..2bd7175802 100644 --- a/packages/simplex-chat-python/src/simplex_chat/_version.py +++ b/packages/simplex-chat-python/src/simplex_chat/_version.py @@ -5,5 +5,5 @@ Bump both together for normal releases. For wrapper-only fixes use a PEP 440 post-release: __version__ = "6.5.2.post1", LIBS_VERSION unchanged. """ -__version__ = "7.0.0b1" # PEP 440 — read by hatchling for wheel metadata -LIBS_VERSION = "7.0.0-beta.1" # simplex-chat-libs release tag (no 'v' prefix) +__version__ = "7.0.0b2" # PEP 440 — read by hatchling for wheel metadata +LIBS_VERSION = "7.0.0-beta.2" # simplex-chat-libs release tag (no 'v' prefix) From 3a38c39d3513361a121a4e0d3800302b61154fbc Mon Sep 17 00:00:00 2001 From: spaced4ndy <8711996+spaced4ndy@users.noreply.github.com> Date: Fri, 26 Jun 2026 15:42:47 +0000 Subject: [PATCH 70/81] desktop: fix remote desktop channel and connection issues (#7137) --- .../chat/simplex/common/model/SimpleXAPI.kt | 12 +++--- .../simplex/common/views/chat/ChatView.kt | 2 +- .../views/chat/group/AddGroupRelayView.kt | 8 ++-- .../views/chat/group/ChannelRelaysView.kt | 3 +- .../views/chat/group/ChannelWebPageView.kt | 2 +- .../common/views/newchat/AddChannelView.kt | 38 ++++++++++--------- .../common/views/newchat/NewChatSheet.kt | 2 +- 7 files changed, 37 insertions(+), 30 deletions(-) diff --git a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/model/SimpleXAPI.kt b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/model/SimpleXAPI.kt index 54986e1815..02353e2c8a 100644 --- a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/model/SimpleXAPI.kt +++ b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/model/SimpleXAPI.kt @@ -1607,7 +1607,7 @@ object ChatController { suspend fun apiPrepareContact(rh: Long?, connLink: CreatedConnLink, contactShortLinkData: ContactShortLinkData): Chat? { val userId = try { currentUserId("apiPrepareContact") } catch (e: Exception) { return null } val r = sendCmd(rh, CC.APIPrepareContact(userId, connLink, contactShortLinkData)) - if (r is API.Result && r.res is CR.NewPreparedChat) return r.res.chat + if (r is API.Result && r.res is CR.NewPreparedChat) return if (rh == null) r.res.chat else r.res.chat.copy(remoteHostId = rh) Log.e(TAG, "apiPrepareContact bad response: ${r.responseType} ${r.details}") AlertManager.shared.showAlertMsg(generalGetString(MR.strings.error_preparing_contact), "${r.responseType}: ${r.details}") return null @@ -1616,7 +1616,7 @@ object ChatController { suspend fun apiPrepareGroup(rh: Long?, connLink: CreatedConnLink, directLink: Boolean, groupShortLinkData: GroupShortLinkData): Chat? { val userId = try { currentUserId("apiPrepareGroup") } catch (e: Exception) { return null } val r = sendCmd(rh, CC.APIPrepareGroup(userId, connLink, directLink, groupShortLinkData)) - if (r is API.Result && r.res is CR.NewPreparedChat) return r.res.chat + if (r is API.Result && r.res is CR.NewPreparedChat) return if (rh == null) r.res.chat else r.res.chat.copy(remoteHostId = rh) Log.e(TAG, "apiPrepareGroup bad response: ${r.responseType} ${r.details}") AlertManager.shared.showAlertMsg(generalGetString(MR.strings.error_preparing_group), "${r.responseType}: ${r.details}") return null @@ -2172,8 +2172,8 @@ object ChatController { return null } - suspend fun apiGetGroupRelays(groupId: Long): List { - val r = sendCmd(null, CC.ApiGetGroupRelays(groupId)) + suspend fun apiGetGroupRelays(rh: Long?, groupId: Long): List { + val r = sendCmd(rh, CC.ApiGetGroupRelays(groupId)) if (r is API.Result && r.res is CR.GroupRelays) return r.res.groupRelays return emptyList() } @@ -2183,8 +2183,8 @@ object ChatController { data class AddFailed(val addRelayResults: List): AddGroupRelaysResult() } - suspend fun apiAddGroupRelays(groupId: Long, relayIds: List): AddGroupRelaysResult? { - val r = sendCmdWithRetry(null, CC.ApiAddGroupRelays(groupId, relayIds)) + suspend fun apiAddGroupRelays(rh: Long?, groupId: Long, relayIds: List): AddGroupRelaysResult? { + val r = sendCmdWithRetry(rh, CC.ApiAddGroupRelays(groupId, relayIds)) if (r is API.Result && r.res is CR.GroupRelaysAdded) return AddGroupRelaysResult.Added(r.res.groupInfo, r.res.groupLink, r.res.groupRelays) if (r is API.Result && r.res is CR.GroupRelaysAddFailed) return AddGroupRelaysResult.AddFailed(r.res.addRelayResults) if (r != null) throw Exception("${r.responseType}: ${r.details}") diff --git a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/ChatView.kt b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/ChatView.kt index cc9e71354c..765759d9e0 100644 --- a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/ChatView.kt +++ b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/ChatView.kt @@ -208,7 +208,7 @@ fun ChatView( withBGApi { setGroupMembers(chatRh, cInfo.groupInfo, chatModel) if (cInfo.groupInfo.membership.memberRole == GroupMemberRole.Owner) { - val relays = chatModel.controller.apiGetGroupRelays(cInfo.groupInfo.groupId) + val relays = chatModel.controller.apiGetGroupRelays(chatRh, cInfo.groupInfo.groupId) withContext(Dispatchers.Main) { ChannelRelaysModel.set(cInfo.groupInfo.groupId, relays) } diff --git a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/group/AddGroupRelayView.kt b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/group/AddGroupRelayView.kt index 1ed75bd2a2..95ce003caa 100644 --- a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/group/AddGroupRelayView.kt +++ b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/group/AddGroupRelayView.kt @@ -31,6 +31,7 @@ data class AvailableRelay( @Composable fun AddGroupRelayView( + rhId: Long?, groupInfo: GroupInfo, existingRelayIds: Set, onRelayAdded: () -> Unit, @@ -46,7 +47,7 @@ fun AddGroupRelayView( LaunchedEffect(Unit) { try { - val servers = ChatController.getUserServers(null) + val servers = ChatController.getUserServers(rhId) if (servers != null) { val relays = mutableListOf() for (op in servers) { @@ -80,7 +81,7 @@ fun AddGroupRelayView( if (relayIds.isEmpty()) return@AddGroupRelayLayout isAdding = true scope.launch { - addSelectedRelays(groupInfo, relayIds, selectedRelayIds, availableRelays, onRelayAdded, close) { newSelectedIds, newAvailableRelays -> + addSelectedRelays(rhId, groupInfo, relayIds, selectedRelayIds, availableRelays, onRelayAdded, close) { newSelectedIds, newAvailableRelays -> selectedRelayIds = newSelectedIds availableRelays = newAvailableRelays isAdding = false @@ -183,6 +184,7 @@ private fun AddRelaysButton(onClick: () -> Unit, disabled: Boolean) { } private suspend fun addSelectedRelays( + rhId: Long?, groupInfo: GroupInfo, relayIds: List, selectedRelayIds: Set, @@ -192,7 +194,7 @@ private suspend fun addSelectedRelays( updateState: (Set, List) -> Unit ) { try { - val result = ChatController.apiAddGroupRelays(groupInfo.groupId, relayIds) + val result = ChatController.apiAddGroupRelays(rhId, groupInfo.groupId, relayIds) if (result == null) { updateState(selectedRelayIds, availableRelays) return diff --git a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/group/ChannelRelaysView.kt b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/group/ChannelRelaysView.kt index d7ffde71c8..60cc19bb1b 100644 --- a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/group/ChannelRelaysView.kt +++ b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/group/ChannelRelaysView.kt @@ -37,7 +37,7 @@ fun ChannelRelaysView( LaunchedEffect(Unit) { setGroupMembers(rhId, groupInfo, chatModel) if (groupInfo.isOwner) { - val relays = chatModel.controller.apiGetGroupRelays(groupInfo.groupId) + val relays = chatModel.controller.apiGetGroupRelays(rhId, groupInfo.groupId) ChannelRelaysModel.set(groupId = groupInfo.groupId, groupRelays = relays) } } @@ -114,6 +114,7 @@ private fun ChannelRelaysLayout( val existingRelayIds = groupRelays.mapNotNull { it.userChatRelay.chatRelayId }.toSet() ModalManager.end.showModalCloseable(showClose = true, cardScreen = true) { close -> AddGroupRelayView( + rhId = rhId, groupInfo = groupInfo, existingRelayIds = existingRelayIds, onRelayAdded = { withBGApi { setGroupMembers(rhId, groupInfo, chatModel) } }, diff --git a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/group/ChannelWebPageView.kt b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/group/ChannelWebPageView.kt index 98067e49dd..262a78b3c8 100644 --- a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/group/ChannelWebPageView.kt +++ b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/group/ChannelWebPageView.kt @@ -81,7 +81,7 @@ fun ChannelWebPageView( } LaunchedEffect(Unit) { - val relays = chatModel.controller.apiGetGroupRelays(groupInfo.groupId) + val relays = chatModel.controller.apiGetGroupRelays(rhId, groupInfo.groupId) groupRelays.clear() groupRelays.addAll(relays) } diff --git a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/newchat/AddChannelView.kt b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/newchat/AddChannelView.kt index b5188178fa..639a5cc78e 100644 --- a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/newchat/AddChannelView.kt +++ b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/newchat/AddChannelView.kt @@ -38,7 +38,8 @@ import dev.icerock.moko.resources.compose.painterResource import kotlinx.coroutines.* @Composable -fun AddChannelView(chatModel: ChatModel, close: () -> Unit, closeAll: () -> Unit) { +fun AddChannelView(chatModel: ChatModel, rh: RemoteHostInfo?, close: () -> Unit, closeAll: () -> Unit) { + val rhId = rh?.remoteHostId val view = LocalMultiplatformView() val bottomSheetModalState = rememberModalBottomSheetState(initialValue = ModalBottomSheetValue.Hidden) val scope = rememberCoroutineScope() @@ -56,7 +57,7 @@ fun AddChannelView(chatModel: ChatModel, close: () -> Unit, closeAll: () -> Unit val gInfo = groupInfo.value if (showLinkStep.value && gInfo != null) { - LinkStepView(chatModel, gInfo, groupLink, closeAll) + LinkStepView(chatModel, rhId, gInfo, groupLink, closeAll) } else if (gInfo != null) { ProgressStepView( chatModel, gInfo, groupRelays, relayListExpanded, @@ -65,9 +66,9 @@ fun AddChannelView(chatModel: ChatModel, close: () -> Unit, closeAll: () -> Unit chatModel.creatingChannelId.value = null closeAll() withBGApi { - openGroupChat(null, gInfo.groupId) + openGroupChat(rhId, gInfo.groupId) ModalManager.end.showModalCloseable(showClose = true, cardScreen = true) { close -> - GroupLinkView(chatModel, rhId = null, groupInfo = gInfo, groupLink = groupLink.value, onGroupLinkUpdated = null, creatingGroup = true, isChannel = true, shareGroupInfo = gInfo, close = close) + GroupLinkView(chatModel, rhId = rhId, groupInfo = gInfo, groupLink = groupLink.value, onGroupLinkUpdated = null, creatingGroup = true, isChannel = true, shareGroupInfo = gInfo, close = close) } } } @@ -80,9 +81,9 @@ fun AddChannelView(chatModel: ChatModel, close: () -> Unit, closeAll: () -> Unit closeAll() withBGApi { try { - chatModel.controller.apiDeleteChat(rh = null, type = ChatType.Group, id = gInfo.apiId) + chatModel.controller.apiDeleteChat(rh = rhId, type = ChatType.Group, id = gInfo.apiId) withContext(Dispatchers.Main) { - chatModel.chatsContext.removeChat(null, gInfo.id) + chatModel.chatsContext.removeChat(rhId, gInfo.id) } } catch (e: Exception) { Log.e(TAG, "cancelChannelCreation error: ${e.message}") @@ -93,6 +94,7 @@ fun AddChannelView(chatModel: ChatModel, close: () -> Unit, closeAll: () -> Unit } else { ProfileStepView( chatModel = chatModel, + rhId = rhId, displayName = displayName, profileImage = profileImage, chosenImage = chosenImage, @@ -120,7 +122,7 @@ fun AddChannelView(chatModel: ChatModel, close: () -> Unit, closeAll: () -> Unit creationInProgress.value = true withBGApi { try { - val enabledRelays = chooseRandomRelays() + val enabledRelays = chooseRandomRelays(rhId) val relayIds = enabledRelays.mapNotNull { it.chatRelayId } if (relayIds.isEmpty()) { withContext(Dispatchers.Main) { @@ -130,7 +132,7 @@ fun AddChannelView(chatModel: ChatModel, close: () -> Unit, closeAll: () -> Unit return@withBGApi } val result = chatModel.controller.apiNewPublicGroup( - rh = null, + rh = rhId, incognito = false, relayIds = relayIds, groupProfile = profile @@ -138,7 +140,7 @@ fun AddChannelView(chatModel: ChatModel, close: () -> Unit, closeAll: () -> Unit when (result) { is ChatController.PublicGroupCreationResult.Created -> { withContext(Dispatchers.Main) { - chatModel.chatsContext.updateGroup(rhId = null, result.groupInfo) + chatModel.chatsContext.updateGroup(rhId = rhId, result.groupInfo) chatModel.creatingChannelId.value = result.groupInfo.id groupInfo.value = result.groupInfo groupLink.value = result.groupLink @@ -178,8 +180,8 @@ fun AddChannelView(chatModel: ChatModel, close: () -> Unit, closeAll: () -> Unit private const val maxRelays = 3 -private suspend fun chooseRandomRelays(): List { - val servers = getUserServers(rh = null) ?: return emptyList() +private suspend fun chooseRandomRelays(rhId: Long?): List { + val servers = getUserServers(rh = rhId) ?: return emptyList() // Operator relays are grouped per operator; custom relays (null operator) // are treated independently to maximize trust distribution. val operatorGroups = mutableListOf>() @@ -215,8 +217,8 @@ private suspend fun chooseRandomRelays(): List { return selected } -private suspend fun checkHasRelays(): Boolean { - val servers = try { getUserServers(rh = null) } catch (_: Exception) { null } ?: return false +private suspend fun checkHasRelays(rhId: Long?): Boolean { + val servers = try { getUserServers(rh = rhId) } catch (_: Exception) { null } ?: return false return servers.any { op -> (op.operator?.enabled ?: true) && op.chatRelays.any { it.enabled && !it.deleted && it.chatRelayId != null } @@ -226,6 +228,7 @@ private suspend fun checkHasRelays(): Boolean { @Composable private fun ProfileStepView( chatModel: ChatModel, + rhId: Long?, displayName: MutableState, profileImage: MutableState, chosenImage: MutableState, @@ -239,7 +242,7 @@ private fun ProfileStepView( createChannel: () -> Unit ) { LaunchedEffect(Unit) { - hasRelays.value = checkHasRelays() + hasRelays.value = checkHasRelays(rhId) } ModalBottomSheetLayout( @@ -553,6 +556,7 @@ private fun RelayRow(relay: GroupRelay, connFailed: Boolean) { @Composable private fun LinkStepView( chatModel: ChatModel, + rhId: Long?, gInfo: GroupInfo, groupLink: MutableState, closeAll: () -> Unit @@ -563,14 +567,14 @@ private fun LinkStepView( delay(500) withContext(Dispatchers.Main) { ModalManager.start.closeModals() - openGroupChat(null, gInfo.groupId) + openGroupChat(rhId, gInfo.groupId) } } } ModalView(close = close, showClose = false, cardScreen = true) { GroupLinkView( chatModel = chatModel, - rhId = null, + rhId = rhId, groupInfo = gInfo, groupLink = groupLink.value, onGroupLinkUpdated = { groupLink.value = it }, @@ -660,6 +664,6 @@ fun RelayProgressIndicator(active: Int, total: Int) { @Composable fun PreviewAddChannelView() { SimpleXTheme { - AddChannelView(chatModel = ChatModel, close = {}, closeAll = {}) + AddChannelView(chatModel = ChatModel, rh = null, close = {}, closeAll = {}) } } diff --git a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/newchat/NewChatSheet.kt b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/newchat/NewChatSheet.kt index af7f59496b..68f42f4186 100644 --- a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/newchat/NewChatSheet.kt +++ b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/newchat/NewChatSheet.kt @@ -64,7 +64,7 @@ fun ModalData.NewChatSheet(rh: RemoteHostInfo?, close: () -> Unit) { ModalManager.start.showCustomModal { close -> AddGroupView(chatModel, chatModel.currentRemoteHost.value, close, closeAll) } }, createChannel = { - ModalManager.start.showCustomModal { close -> AddChannelView(chatModel, close, closeAll) } + ModalManager.start.showCustomModal { close -> AddChannelView(chatModel, chatModel.currentRemoteHost.value, close, closeAll) } }, rh = rh, close = close From e979b7efdcfe74e30d4025102366ab29b6f25d81 Mon Sep 17 00:00:00 2001 From: Narasimha-sc <166327228+Narasimha-sc@users.noreply.github.com> Date: Fri, 26 Jun 2026 21:12:39 +0000 Subject: [PATCH 71/81] android, desktop, ios: remove left padding on consecutive received messages in channels (#7108) * android, desktop, ios: remove left padding on consecutive received messages in channels In channels, a received message that does not show an avatar (a consecutive post from the same sender) drops the avatar-sized left padding and sits flush-left. Applies to both owner broadcasts (ChannelRcv) and contributor posts (GroupRcv); the first message of each run still shows the avatar. Gated on ChatInfo.isChannel, so regular groups, business and direct chats, sent messages, and avatar-shown messages are unchanged. * docs: add plan justifying removing left padding on consecutive received messages in channels * ios: fix right gap on consecutive received messages in channels Removing the avatar-sized left padding from no-avatar received messages (this PR) shifted those bubbles ~44pt left, but maxWidth still reserved the avatar inset, so consecutive messages stopped ~44pt short of the first (avatar) message on the right. Widen maxWidth for no-avatar channel-received items so their right edge matches the avatar-shown first message. The no-avatar predicate reuses the exact shouldShowAvatar expression from the render path (lifted to a file-scope function so the maxWidth site can call it), so the width and the rendered layout can never disagree. Android is unaffected: Compose derives content width from padding, so reducing the start padding already widened the row there. * ios: increase left padding * kotlin: increase left gap --------- Co-authored-by: Evgeny Poberezkin Co-authored-by: Evgeny Poberezkin <2769109+epoberezkin@users.noreply.github.com> --- apps/ios/Shared/Views/Chat/ChatView.swift | 58 +++++----- .../simplex/common/views/chat/ChatView.kt | 4 +- ...channel-received-no-avatar-left-padding.md | 103 ++++++++++++++++++ 3 files changed, 137 insertions(+), 28 deletions(-) create mode 100644 plans/2026-06-20-channel-received-no-avatar-left-padding.md diff --git a/apps/ios/Shared/Views/Chat/ChatView.swift b/apps/ios/Shared/Views/Chat/ChatView.swift index ded0019692..283157864d 100644 --- a/apps/ios/Shared/Views/Chat/ChatView.swift +++ b/apps/ios/Shared/Views/Chat/ChatView.swift @@ -14,6 +14,29 @@ import Combine private let memberImageSize: CGFloat = 34 +private func shouldShowAvatar(_ current: ChatItem, _ older: ChatItem?) -> Bool { + let oldIsGroupRcv = switch older?.chatDir { + case .groupRcv: true + case .channelRcv: true + default: false + } + let sameMember = switch (older?.chatDir, current.chatDir) { + case (.groupRcv(let oldMember), .groupRcv(let member)): + oldMember.memberId == member.memberId + case (.channelRcv, .channelRcv): + true + default: + false + } + if case .groupRcv = current.chatDir, (older == nil || (!oldIsGroupRcv || !sameMember)) { + return true + } else if case .channelRcv = current.chatDir, (older == nil || (!oldIsGroupRcv || !sameMember)) { + return true + } else { + return false + } +} + // Spec: spec/client/chat-view.md#ChatView struct ChatView: View { @EnvironmentObject var chatModel: ChatModel @@ -896,8 +919,14 @@ struct ChatView: View { } else { let voiceNoFrame = voiceWithoutFrame(ci) let channelReceived = !ci.chatDir.sent && cInfo.isChannel + // consecutive (no-avatar) received messages in channels drop the avatar-sized + // left padding (see .leading padding below), so they get the full row width here + // too — otherwise the reserved avatar inset would leave a gap on the right + let channelReceivedNoAvatar = channelReceived && !shouldShowAvatar(mergedItem.newest().item, mergedItem.oldest().nextItem) let maxWidth = cInfo.chatType == .group - ? voiceNoFrame || channelReceived + ? channelReceivedNoAvatar + ? g.size.width - 26 + : voiceNoFrame || channelReceived ? (g.size.width - 28) - 42 : (g.size.width - 28) * 0.84 - 42 : voiceNoFrame @@ -1733,29 +1762,6 @@ struct ChatView: View { ) } - func shouldShowAvatar(_ current: ChatItem, _ older: ChatItem?) -> Bool { - let oldIsGroupRcv = switch older?.chatDir { - case .groupRcv: true - case .channelRcv: true - default: false - } - let sameMember = switch (older?.chatDir, current.chatDir) { - case (.groupRcv(let oldMember), .groupRcv(let member)): - oldMember.memberId == member.memberId - case (.channelRcv, .channelRcv): - true - default: - false - } - if case .groupRcv = current.chatDir, (older == nil || (!oldIsGroupRcv || !sameMember)) { - return true - } else if case .channelRcv = current.chatDir, (older == nil || (!oldIsGroupRcv || !sameMember)) { - return true - } else { - return false - } - } - var body: some View { let last = isLastItem ? im.reversedChatItems.last : nil let listItem = merged.newest() @@ -1979,7 +1985,7 @@ struct ChatView: View { } chatItemWithMenu(ci, range, maxWidth, itemSeparation) .padding(.trailing) - .padding(.leading, 10 + memberImageSize + 12) + .padding(.leading, chat.chatInfo.isChannel ? nil : 10 + memberImageSize + 12) } .padding(.bottom, bottomPadding) } @@ -2076,7 +2082,7 @@ struct ChatView: View { } chatItemWithMenu(ci, range, maxWidth, itemSeparation) .padding(.trailing) - .padding(.leading, 10 + memberImageSize + 12) + .padding(.leading, chat.chatInfo.isChannel ? nil : 10 + memberImageSize + 12) } .padding(.bottom, bottomPadding) } diff --git a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/ChatView.kt b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/ChatView.kt index 765759d9e0..4a3bfe4208 100644 --- a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/ChatView.kt +++ b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/ChatView.kt @@ -2084,7 +2084,7 @@ fun BoxScope.ChatItemsList( } Row( Modifier - .padding(start = 8.dp + (MEMBER_IMAGE_SIZE * fontSizeSqrtMultiplier) + 4.dp, end = if (voiceWithTransparentBack || chatInfo.isChannel) 12.dp else adjustTailPaddingOffset(66.dp, start = false)) + .padding(start = if (chatInfo.isChannel) 12.dp else 8.dp + (MEMBER_IMAGE_SIZE * fontSizeSqrtMultiplier) + 4.dp, end = if (voiceWithTransparentBack || chatInfo.isChannel) 12.dp else adjustTailPaddingOffset(66.dp, start = false)) .chatItemOffset(cItem, itemSeparation.largeGap, revealed = revealed.value) .then(swipeableOrSelectionModifier) ) { @@ -2167,7 +2167,7 @@ fun BoxScope.ChatItemsList( } Row( Modifier - .padding(start = 8.dp + (MEMBER_IMAGE_SIZE * fontSizeSqrtMultiplier) + 4.dp, end = if (voiceWithTransparentBack || chatInfo.isChannel) 12.dp else adjustTailPaddingOffset(66.dp, start = false)) + .padding(start = if (chatInfo.isChannel) 12.dp else 8.dp + (MEMBER_IMAGE_SIZE * fontSizeSqrtMultiplier) + 4.dp, end = if (voiceWithTransparentBack || chatInfo.isChannel) 12.dp else adjustTailPaddingOffset(66.dp, start = false)) .chatItemOffset(cItem, itemSeparation.largeGap, revealed = revealed.value) .then(swipeableOrSelectionModifier) ) { diff --git a/plans/2026-06-20-channel-received-no-avatar-left-padding.md b/plans/2026-06-20-channel-received-no-avatar-left-padding.md new file mode 100644 index 0000000000..13ee4ebc4f --- /dev/null +++ b/plans/2026-06-20-channel-received-no-avatar-left-padding.md @@ -0,0 +1,103 @@ +# Remove left padding on consecutive (no-avatar) received messages in channels + +## Problem + +In a channel, received messages show the sender avatar on the first message of a +run and hide it on consecutive messages, but those consecutive messages still +reserve the avatar-sized **left padding** so they line up under the first. For a +channel's feed-style layout this indentation wastes horizontal space — +consecutive received messages should sit flush-left where the avatar would be. +This applies to **both** the channel owner's broadcasts and contributors' posts. + +Desired behaviour: in channels, any received message that does **not** show an +avatar (a consecutive post from the same sender) drops the avatar-sized left +padding. The first message of a run still shows the avatar and keeps its layout; +when the run is broken (a different sender, or a time gap), the next message +shows the avatar again — this run logic is unchanged, only the no-avatar left +padding is reduced. + +## The two received directions in a channel + +Received items in a channel arrive as one of two directions +(`Subscriber.hs`, `saveRcvCI`): + +- **`ChannelRcv`** (no member) — the **owner's** broadcast, sent "as the channel". + The backend permits sending-as-group only to the owner, and a channel owner's + main-scope messages are always sent as group (`ChatInfo.sendAsGroup` is true + for `useRelays && memberRole >= Owner` in the main scope), so received owner + posts arrive as `ChannelRcv`. Shows the channel avatar. +- **`GroupRcv(member)`** (attributed) — a **contributor's** post, carrying the + member. Shows the member avatar. + +Both are received messages, and the change now applies to **both** when they hide +the avatar. (An earlier revision scoped this to `ChannelRcv`/owner only; it now +covers contributors too, per request.) + +## Change + +In channels — gated on `ChatInfo.isChannel` (the `useRelays` flag, which is +reliably present, unlike the optional group-type predicate) — the no-avatar +branches for **both** `ChannelRcv` and `GroupRcv` drop the avatar-sized left +padding down to the base inset where the avatar itself starts. In non-channel +groups the `GroupRcv` no-avatar layout is unchanged (`isChannel` is false). The +avatar-shown layouts, sent messages, and all other chats are unchanged. + +The same Row's `end` padding is already gated on `chatInfo.isChannel` (the merged +right-gap change #7106), so gating `start` on `isChannel` keeps each Row +internally consistent and the change precisely "in channels". + +### Android / desktop (`apps/multiplatform`, `ChatView.kt`, `ChatItemsList`) + +Both the `CIDirection.GroupRcv` and `CIDirection.ChannelRcv` `showAvatar == false` +rows: + +```kotlin +// before +.padding(start = 8.dp + (MEMBER_IMAGE_SIZE * fontSizeSqrtMultiplier) + 4.dp, end = …) +// after +.padding(start = if (chatInfo.isChannel) 8.dp else 8.dp + (MEMBER_IMAGE_SIZE * fontSizeSqrtMultiplier) + 4.dp, end = …) +``` + +### iOS (`apps/ios`, `ChatView.swift`, `chatItemListView`) + +Both the `.groupRcv` and `.channelRcv` no-avatar branches: + +```swift +// before +.padding(.leading, 10 + memberImageSize + 12) +// after +.padding(.leading, chat.chatInfo.isChannel ? 12 : 10 + memberImageSize + 12) +``` + +## Run behaviour (unchanged) + +`shouldShowAvatar(current, older)` shows the avatar on the first message of a +same-sender run and hides it on consecutive ones; a different sender or a gap +resets the run. For `GroupRcv` "same sender" is the same `memberId`; for +`ChannelRcv` consecutive channel broadcasts count as the same sender. Only the +no-avatar left padding is changed. + +## Scope + +- Affects: all received consecutive (no-avatar) messages **in channels** — owner + broadcasts (`ChannelRcv`) and contributor posts (`GroupRcv`). This includes a + channel's member-support sub-scope, which renders through the same + `ChatItemsList` with the channel's `isChannel`; treating it the same way is + consistent with the merged right-gap change (#7106), which also gates that + Row's `end` padding on `isChannel` without a scope filter. +- Unchanged: the first message of each run (avatar shown), sent messages, regular + groups, business chats and direct chats (`isChannel` false — the `else` branch + preserves the original avatar-inset value exactly), and any non-channel + `ChannelRcv` welcome item. + +## Verification + +- Android/desktop: `:common:compileKotlinDesktop` compiles clean. +- iOS: small, type-safe constant change; build/verify on macOS (Xcode) — not + compilable on the Linux build host used here. +- Visual (both platforms), in a channel: + - First message of a run (owner or contributor): avatar shown, layout unchanged. + - Following messages from the same sender (no avatar): now flush-left. + - A different sender / time gap resets the run — the next message shows the + avatar again. + - Regular groups, business and direct chats keep their existing indentation. From 894e44b8ed8ad7fb5383ad84518663f1996bfdad Mon Sep 17 00:00:00 2001 From: spaced4ndy <8711996+spaced4ndy@users.noreply.github.com> Date: Sat, 27 Jun 2026 11:12:47 +0000 Subject: [PATCH 72/81] ui: fix channel contributor being able to "send message" without relays (#7139) --- .../Chat/ComposeMessage/ComposeView.swift | 48 +++++++++++-------- apps/ios/SimpleXChat/ChatTypes.swift | 2 +- .../chat/simplex/common/model/ChatModel.kt | 6 +-- .../simplex/common/views/chat/ComposeView.kt | 48 ++++++++++++++----- 4 files changed, 68 insertions(+), 36 deletions(-) diff --git a/apps/ios/Shared/Views/Chat/ComposeMessage/ComposeView.swift b/apps/ios/Shared/Views/Chat/ComposeMessage/ComposeView.swift index e308a145b9..9c40b2b395 100644 --- a/apps/ios/Shared/Views/Chat/ComposeMessage/ComposeView.swift +++ b/apps/ios/Shared/Views/Chat/ComposeMessage/ComposeView.swift @@ -392,38 +392,31 @@ struct ComposeView: View { } let ownerState = ownerRelayState + let subscriberState = subscriberRelayState if let gInfo = chat.chatInfo.groupInfo, gInfo.useRelays, ![.memRejected, .memLeft, .memRemoved, .memGroupDeleted].contains(gInfo.membership.memberStatus) { if gInfo.membership.memberRole == .owner { if let s = ownerState, s.relays.isEmpty || s.activeCount < s.relays.count { ownerChannelRelayBar(relays: s.relays, activeCount: s.activeCount, failedCount: s.failedCount, removedCount: s.removedCount) } - } else { - let hostnames = (chatModel.channelRelayHostnames[gInfo.groupId] ?? []).sorted() - let relayMembers = chatModel.groupMembers - .filter { $0.wrapped.memberRole == .relay && ![.memRemoved, .memGroupDeleted].contains($0.wrapped.memberStatus) } - .sorted { hostFromRelayLink($0.wrapped.relayLink ?? "") < hostFromRelayLink($1.wrapped.relayLink ?? "") } + } else if let s = subscriberState { let showProgress = !gInfo.nextConnectPrepared || composeState.inProgress - let removedCount = relayMembers.filter { relayMemberRemoved($0.wrapped.memberStatus) }.count - let connectedCount = relayMembers.filter { !relayMemberRemoved($0.wrapped.memberStatus) && $0.wrapped.activeConn?.connStatus == .ready && $0.wrapped.activeConn?.connFailedErr == nil }.count - let failedCount = relayMembers.filter { !relayMemberRemoved($0.wrapped.memberStatus) && $0.wrapped.activeConn?.connFailedErr != nil }.count - let resolvedCount = connectedCount + removedCount + failedCount - let total = relayMembers.count > 0 ? relayMembers.count : hostnames.count - if total == 0 || removedCount + failedCount > 0 || resolvedCount < total { + let resolvedCount = s.connectedCount + s.removedCount + s.failedCount + if s.total == 0 || s.removedCount + s.failedCount > 0 || resolvedCount < s.total { subscriberChannelRelayBar( - hostnames: hostnames, - relayMembers: relayMembers, - connectedCount: connectedCount, - removedCount: removedCount, - failedCount: failedCount, - total: total, + hostnames: s.hostnames, + relayMembers: s.relayMembers, + connectedCount: s.connectedCount, + removedCount: s.removedCount, + failedCount: s.failedCount, + total: s.total, showProgress: showProgress ) } } } - let userCantSendReason = chat.chatInfo.userCantSendReason(allRelaysBroken: ownerState?.noActiveRelays ?? false) + let userCantSendReason = chat.chatInfo.userCantSendReason(allRelaysBroken: (ownerState?.noActiveRelays ?? subscriberState?.noActiveRelays) ?? false) let composeEnabled = ( userCantSendReason == nil || (chat.chatInfo.groupInfo?.nextConnectPrepared ?? false) || @@ -748,8 +741,25 @@ struct ComposeView: View { return (relays, activeCount, failedCount, removedCount, noActiveRelays) } + private var subscriberRelayState: (hostnames: [String], relayMembers: [GMember], connectedCount: Int, removedCount: Int, failedCount: Int, total: Int, noActiveRelays: Bool)? { + guard let gInfo = chat.chatInfo.groupInfo, gInfo.useRelays, + gInfo.membership.memberRole != .owner, + ![.memRejected, .memLeft, .memRemoved, .memGroupDeleted].contains(gInfo.membership.memberStatus) + else { return nil } + let hostnames = (chatModel.channelRelayHostnames[gInfo.groupId] ?? []).sorted() + let relayMembers = chatModel.groupMembers + .filter { $0.wrapped.memberRole == .relay && ![.memRemoved, .memGroupDeleted].contains($0.wrapped.memberStatus) } + .sorted { hostFromRelayLink($0.wrapped.relayLink ?? "") < hostFromRelayLink($1.wrapped.relayLink ?? "") } + let removedCount = relayMembers.filter { relayMemberRemoved($0.wrapped.memberStatus) }.count + let connectedCount = relayMembers.filter { !relayMemberRemoved($0.wrapped.memberStatus) && $0.wrapped.activeConn?.connStatus == .ready && $0.wrapped.activeConn?.connFailedErr == nil }.count + let failedCount = relayMembers.filter { !relayMemberRemoved($0.wrapped.memberStatus) && $0.wrapped.activeConn?.connFailedErr != nil }.count + let total = relayMembers.count > 0 ? relayMembers.count : hostnames.count + let noActiveRelays = connectedCount == 0 && (removedCount + failedCount) == total + return (hostnames, relayMembers, connectedCount, removedCount, failedCount, total, noActiveRelays) + } + private var disabledText: LocalizedStringKey? { - chat.chatInfo.userCantSendReason(allRelaysBroken: ownerRelayState?.noActiveRelays ?? false)?.composeLabel + chat.chatInfo.userCantSendReason(allRelaysBroken: (ownerRelayState?.noActiveRelays ?? subscriberRelayState?.noActiveRelays) ?? false)?.composeLabel } @ViewBuilder private func ownerChannelRelayBar(relays: [GroupRelay], activeCount: Int, failedCount: Int, removedCount: Int) -> some View { diff --git a/apps/ios/SimpleXChat/ChatTypes.swift b/apps/ios/SimpleXChat/ChatTypes.swift index 8b186f168d..7a20a8d4ba 100644 --- a/apps/ios/SimpleXChat/ChatTypes.swift +++ b/apps/ios/SimpleXChat/ChatTypes.swift @@ -1720,11 +1720,11 @@ public enum ChatInfo: Identifiable, Decodable, NamedChat, Hashable { if groupInfo.membership.memberActive { switch(groupChatScope) { case .none: - if allRelaysBroken && groupInfo.useRelays { return ("can't broadcast", nil) } if groupInfo.membership.memberPending { return ("reviewed by admins", "Please contact group admin.") } if groupInfo.membership.memberRole == .observer { return groupInfo.useRelays ? ("you are subscriber", nil) : ("you are observer", "Please contact group admin.") } + if allRelaysBroken && groupInfo.useRelays { return ("can't broadcast", nil) } return nil case let .some(.memberSupport(groupMember_: .some(supportMember))): if supportMember.versionRange.maxVersion < GROUP_KNOCKING_VERSION && !supportMember.memberPending { diff --git a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/model/ChatModel.kt b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/model/ChatModel.kt index c5dd81fec7..44361baa73 100644 --- a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/model/ChatModel.kt +++ b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/model/ChatModel.kt @@ -1660,9 +1660,6 @@ sealed class ChatInfo: SomeChat, NamedChat { if (groupInfo.membership.memberActive) { when (groupChatScope) { null -> { - if (allRelaysBroken && groupInfo.useRelays) { - return generalGetString(MR.strings.cant_broadcast_message) to null - } if (groupInfo.membership.memberPending) { return generalGetString(MR.strings.reviewed_by_admins) to generalGetString(MR.strings.observer_cant_send_message_desc) } @@ -1673,6 +1670,9 @@ sealed class ChatInfo: SomeChat, NamedChat { generalGetString(MR.strings.observer_cant_send_message_title) to generalGetString(MR.strings.observer_cant_send_message_desc) } } + if (allRelaysBroken && groupInfo.useRelays) { + return generalGetString(MR.strings.cant_broadcast_message) to null + } return null } is GroupChatScopeInfo.MemberSupport -> diff --git a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/ComposeView.kt b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/ComposeView.kt index 21290b99b8..c37aa0a77f 100644 --- a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/ComposeView.kt +++ b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/ComposeView.kt @@ -1203,8 +1203,9 @@ fun ComposeView( } val ownerRelayState = ownerRelayState(chat, chatModel) + val subscriberRelayState = subscriberRelayState(chat, chatModel) - val userCantSendReason = rememberUpdatedState(chat.chatInfo.userCantSendReason(ownerRelayState?.noActiveRelays == true)) + val userCantSendReason = rememberUpdatedState(chat.chatInfo.userCantSendReason((ownerRelayState?.noActiveRelays ?: subscriberRelayState?.noActiveRelays) == true)) val sendMsgEnabled = rememberUpdatedState(userCantSendReason.value == null) val nextSendGrpInv = rememberUpdatedState(chat.nextSendGrpInv) @@ -1575,18 +1576,12 @@ fun ComposeView( } } } else { - val hostnames = (chatModel.channelRelayHostnames[gInfo.groupId] ?: emptyList()).sorted() - val relayMembers = chatModel.groupMembers.value - .filter { it.memberRole == GroupMemberRole.Relay && it.memberStatus !in listOf(GroupMemberStatus.MemRemoved, GroupMemberStatus.MemGroupDeleted) } - .sortedBy { hostFromRelayLink(it.relayLink ?: "") } - val showProgress = !gInfo.nextConnectPrepared || composeState.value.inProgress - val removedCount = relayMembers.count { relayMemberRemoved(it.memberStatus) } - val connectedCount = relayMembers.count { !relayMemberRemoved(it.memberStatus) && it.activeConn?.connStatus == ConnStatus.Ready && it.activeConn?.connFailedErr == null } - val failedCount = relayMembers.count { !relayMemberRemoved(it.memberStatus) && it.activeConn?.connFailedErr != null } - val resolvedCount = connectedCount + removedCount + failedCount - val total = if (relayMembers.isNotEmpty()) relayMembers.size else hostnames.size - if (total == 0 || removedCount + failedCount > 0 || resolvedCount < total) { - SubscriberChannelRelayBar(hostnames, relayMembers, connectedCount, removedCount, failedCount, total, showProgress, relayListExpanded) + subscriberRelayState?.let { s -> + val showProgress = !gInfo.nextConnectPrepared || composeState.value.inProgress + val resolvedCount = s.connectedCount + s.removedCount + s.failedCount + if (s.total == 0 || s.removedCount + s.failedCount > 0 || resolvedCount < s.total) { + SubscriberChannelRelayBar(s.hostnames, s.relayMembers, s.connectedCount, s.removedCount, s.failedCount, s.total, showProgress, relayListExpanded) + } } } } @@ -2052,6 +2047,33 @@ private data class OwnerRelayState( val noActiveRelays: Boolean ) +private fun subscriberRelayState(chat: Chat, chatModel: ChatModel): SubscriberRelayState? { + val gInfo = (chat.chatInfo as? ChatInfo.Group)?.groupInfo ?: return null + if (!gInfo.useRelays || gInfo.membership.memberRole == GroupMemberRole.Owner || + gInfo.membership.memberStatus in listOf(GroupMemberStatus.MemRejected, GroupMemberStatus.MemLeft, GroupMemberStatus.MemRemoved, GroupMemberStatus.MemGroupDeleted) + ) return null + val hostnames = (chatModel.channelRelayHostnames[gInfo.groupId] ?: emptyList()).sorted() + val relayMembers = chatModel.groupMembers.value + .filter { it.memberRole == GroupMemberRole.Relay && it.memberStatus !in listOf(GroupMemberStatus.MemRemoved, GroupMemberStatus.MemGroupDeleted) } + .sortedBy { hostFromRelayLink(it.relayLink ?: "") } + val removedCount = relayMembers.count { relayMemberRemoved(it.memberStatus) } + val connectedCount = relayMembers.count { !relayMemberRemoved(it.memberStatus) && it.activeConn?.connStatus == ConnStatus.Ready && it.activeConn?.connFailedErr == null } + val failedCount = relayMembers.count { !relayMemberRemoved(it.memberStatus) && it.activeConn?.connFailedErr != null } + val total = if (relayMembers.isNotEmpty()) relayMembers.size else hostnames.size + val noActiveRelays = connectedCount == 0 && (removedCount + failedCount) == total + return SubscriberRelayState(hostnames, relayMembers, connectedCount, removedCount, failedCount, total, noActiveRelays) +} + +private data class SubscriberRelayState( + val hostnames: List, + val relayMembers: List, + val connectedCount: Int, + val removedCount: Int, + val failedCount: Int, + val total: Int, + val noActiveRelays: Boolean +) + private fun relayMemberRemoved(status: GroupMemberStatus?): Boolean = status in listOf(GroupMemberStatus.MemLeft, GroupMemberStatus.MemRemoved, GroupMemberStatus.MemGroupDeleted) From 6816e1a1ff1c4a71f8fbc428aead68deee5facf9 Mon Sep 17 00:00:00 2001 From: spaced4ndy <8711996+spaced4ndy@users.noreply.github.com> Date: Mon, 29 Jun 2026 08:48:00 +0000 Subject: [PATCH 73/81] desktop, android: improve custom relay and user address text fields design (#7155) --- .../simplex/common/views/helpers/Section.kt | 10 ++-- .../common/views/helpers/TextEditor.kt | 3 +- .../views/usersettings/UserAddressView.kt | 9 +++- .../networkAndServers/ChatRelayView.kt | 51 ++++++++----------- 4 files changed, 38 insertions(+), 35 deletions(-) diff --git a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/helpers/Section.kt b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/helpers/Section.kt index 9afcdd0b94..5196a144b1 100644 --- a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/helpers/Section.kt +++ b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/helpers/Section.kt @@ -1,4 +1,5 @@ import androidx.compose.foundation.* +import androidx.compose.foundation.interaction.MutableInteractionSource import androidx.compose.foundation.layout.* import androidx.compose.foundation.shape.RoundedCornerShape import androidx.compose.material.* @@ -27,7 +28,7 @@ import chat.simplex.common.views.onboarding.SelectableCard import chat.simplex.common.views.usersettings.SettingsActionItemWithContent import chat.simplex.res.MR -private val SectionCardShape = RoundedCornerShape(16.dp) +val SectionCardShape = RoundedCornerShape(16.dp) val CARD_PADDING = 18.dp val ICON_TEXT_SPACING = 8.dp @@ -113,15 +114,18 @@ fun SectionView( iconTint: Color = MaterialTheme.colors.secondary, leadingIcon: Boolean = false, padding: PaddingValues = PaddingValues(), + onIconClick: (() -> Unit)? = null, content: (@Composable ColumnScope.() -> Unit) ) { val card = LocalCardScreen.current Column { val iconSize = with(LocalDensity.current) { 21.sp.toDp() } + val interactionSource = remember { MutableInteractionSource() } + val iconClickable = if (onIconClick != null) Modifier.clickable(interactionSource = interactionSource, indication = ripple(bounded = false, radius = iconSize * 0.75f), onClick = onIconClick) else Modifier Row(Modifier.padding(start = if (card) DEFAULT_PADDING + DEFAULT_PADDING_HALF else DEFAULT_PADDING, bottom = 5.dp), verticalAlignment = Alignment.CenterVertically) { - if (leadingIcon) Icon(icon, null, Modifier.padding(end = DEFAULT_PADDING_HALF).size(iconSize), tint = iconTint) + if (leadingIcon) Icon(icon, null, Modifier.padding(end = DEFAULT_PADDING_HALF).size(iconSize).then(iconClickable), tint = iconTint) Text(title, color = MaterialTheme.colors.secondary, style = MaterialTheme.typography.body2, fontSize = if (card) 14.sp else 12.sp, fontWeight = if (card) FontWeight.Medium else FontWeight.Normal) - if (!leadingIcon) Icon(icon, null, Modifier.padding(start = DEFAULT_PADDING_HALF).size(iconSize), tint = iconTint) + if (!leadingIcon) Icon(icon, null, Modifier.padding(start = DEFAULT_PADDING_HALF).size(iconSize).then(iconClickable), tint = iconTint) } CardColumn(padding) { content() } } diff --git a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/helpers/TextEditor.kt b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/helpers/TextEditor.kt index cd40585cad..833f53f2af 100644 --- a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/helpers/TextEditor.kt +++ b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/helpers/TextEditor.kt @@ -31,6 +31,7 @@ fun TextEditor( modifier: Modifier, placeholder: String? = null, contentPadding: PaddingValues = PaddingValues(horizontal = DEFAULT_PADDING), + shape: Shape = RoundedCornerShape(14.dp), isValid: (String) -> Boolean = { true }, focusRequester: FocusRequester? = null, enabled: Boolean = true @@ -53,7 +54,7 @@ fun TextEditor( .fillMaxWidth() .padding(contentPadding) .heightIn(min = 52.dp) - .border(border = BorderStroke(1.dp, strokeColor), shape = RoundedCornerShape(14.dp)), + .border(border = BorderStroke(1.dp, strokeColor), shape = shape), contentAlignment = Alignment.Center, ) { val textFieldModifier = modifier diff --git a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/usersettings/UserAddressView.kt b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/usersettings/UserAddressView.kt index c55eaf6c10..36c74cceb6 100644 --- a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/usersettings/UserAddressView.kt +++ b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/usersettings/UserAddressView.kt @@ -1,6 +1,7 @@ package chat.simplex.common.views.usersettings import SectionBottomSpacer +import SectionCardShape import SectionDividerSpaced import SectionItemView import SectionTextFooter @@ -699,7 +700,13 @@ private fun AcceptIncognitoToggle(addressSettingsState: MutableState) { val autoReply = rememberSaveable { mutableStateOf(addressSettingsState.value.autoReply) } - TextEditor(autoReply, Modifier.height(100.dp), placeholder = stringResource(MR.strings.enter_welcome_message_optional)) + TextEditor( + autoReply, + Modifier.height(100.dp), + placeholder = stringResource(MR.strings.enter_welcome_message_optional), + contentPadding = PaddingValues(), + shape = SectionCardShape + ) LaunchedEffect(autoReply.value) { if (autoReply.value != addressSettingsState.value.autoReply) { addressSettingsState.value = AddressSettingsState( diff --git a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/usersettings/networkAndServers/ChatRelayView.kt b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/usersettings/networkAndServers/ChatRelayView.kt index ab63067226..9a2d7f8e61 100644 --- a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/usersettings/networkAndServers/ChatRelayView.kt +++ b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/usersettings/networkAndServers/ChatRelayView.kt @@ -1,6 +1,7 @@ package chat.simplex.common.views.usersettings.networkAndServers import SectionBottomSpacer +import SectionCardShape import SectionDividerSpaced import SectionItemView import SectionItemViewSpaceBetween @@ -10,9 +11,7 @@ import androidx.compose.foundation.layout.* import androidx.compose.foundation.text.selection.SelectionContainer import androidx.compose.material.* import androidx.compose.runtime.* -import androidx.compose.ui.Alignment import androidx.compose.ui.Modifier -import androidx.compose.ui.platform.LocalDensity import androidx.compose.ui.unit.sp import androidx.compose.ui.graphics.Color import dev.icerock.moko.resources.compose.painterResource @@ -230,43 +229,35 @@ private fun CustomRelay( } SectionView( - stringResource(MR.strings.your_relay_address).uppercase(), + stringResource(MR.strings.your_relay_address), icon = painterResource(MR.images.ic_error), iconTint = if (!validAddress.value) MaterialTheme.colors.error else Color.Transparent, ) { TextEditor( relayAddress, - Modifier.height(144.dp) + Modifier.height(144.dp), + contentPadding = PaddingValues(), + shape = SectionCardShape ) } SectionDividerSpaced(maxTopPadding = true) - Column { - val iconSize = with(LocalDensity.current) { 21.sp.toDp() } - Row(Modifier.padding(start = DEFAULT_PADDING, bottom = 5.dp), verticalAlignment = Alignment.CenterVertically) { - Text( - stringResource(MR.strings.your_relay_name).uppercase(), - color = MaterialTheme.colors.secondary, style = MaterialTheme.typography.body2, fontSize = 12.sp - ) - IconButton( - onClick = { if (!validName.value) showInvalidRelayNameAlert(relayName) }, - enabled = !validName.value, - modifier = Modifier.padding(start = DEFAULT_PADDING_HALF).size(iconSize) - ) { - Icon( - painterResource(MR.images.ic_error), null, - tint = if (!validName.value) MaterialTheme.colors.error else Color.Transparent - ) - } - } - Column(Modifier.fillMaxWidth()) { - TextEditor( - relayName, - Modifier, - placeholder = generalGetString(MR.strings.enter_relay_name), - enabled = relay.value.tested != true - ) - } + SectionView( + stringResource(MR.strings.your_relay_name), + icon = painterResource(MR.images.ic_error), + iconTint = if (!validName.value) MaterialTheme.colors.error else Color.Transparent, + onIconClick = if (!validName.value) { + { showInvalidRelayNameAlert(relayName) } + } else null + ) { + TextEditor( + relayName, + Modifier, + placeholder = generalGetString(MR.strings.enter_relay_name), + contentPadding = PaddingValues(), + shape = SectionCardShape, + enabled = relay.value.tested != true + ) } if (relay.value.tested != true) { SectionTextFooter(annotatedStringResource(MR.strings.test_relay_to_retrieve_name)) From 936e132c51d1720876196523cad722a6cfe9e03a Mon Sep 17 00:00:00 2001 From: spaced4ndy <8711996+spaced4ndy@users.noreply.github.com> Date: Mon, 29 Jun 2026 08:48:12 +0000 Subject: [PATCH 74/81] desktop: hide "Calls on lock screen" setting (#7154) --- .../simplex/common/views/usersettings/CallSettings.kt | 9 ++++++--- 1 file changed, 6 insertions(+), 3 deletions(-) diff --git a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/usersettings/CallSettings.kt b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/usersettings/CallSettings.kt index cb36e4ae1a..43863d5794 100644 --- a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/usersettings/CallSettings.kt +++ b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/usersettings/CallSettings.kt @@ -17,6 +17,7 @@ import androidx.compose.ui.unit.dp import chat.simplex.common.views.helpers.* import chat.simplex.common.model.* import chat.simplex.common.platform.ColumnWithScrollBar +import chat.simplex.common.platform.appPlatform import chat.simplex.res.MR @Composable @@ -38,12 +39,14 @@ fun CallSettingsLayout( ) { ColumnWithScrollBar { AppBarTitle(stringResource(MR.strings.your_calls)) - val lockCallState = remember { mutableStateOf(callOnLockScreen.get()) } SectionView(stringResource(MR.strings.settings_section_title_settings)) { SectionItemView(editIceServers) { Text(stringResource(MR.strings.webrtc_ice_servers)) } - val enabled = remember { mutableStateOf(true) } - LockscreenOpts(lockCallState, enabled, onSelected = { callOnLockScreen.set(it); lockCallState.value = it }) + if (appPlatform.isAndroid) { + val lockCallState = remember { mutableStateOf(callOnLockScreen.get()) } + val enabled = remember { mutableStateOf(true) } + LockscreenOpts(lockCallState, enabled, onSelected = { callOnLockScreen.set(it); lockCallState.value = it }) + } SettingsPreferenceItem(null, stringResource(MR.strings.always_use_relay), webrtcPolicyRelay) } SectionTextFooter( From 249c5495dac963370379f82f25fb053468382b57 Mon Sep 17 00:00:00 2001 From: spaced4ndy <8711996+spaced4ndy@users.noreply.github.com> Date: Mon, 29 Jun 2026 08:48:29 +0000 Subject: [PATCH 75/81] desktop, android: fix file chat item meta layout (#7156) --- .../common/views/chat/item/CIFileView.kt | 25 +++++++++++++------ .../common/views/chat/item/FramedItemView.kt | 2 +- .../common/views/chatlist/ChatPreviewView.kt | 2 +- 3 files changed, 20 insertions(+), 9 deletions(-) diff --git a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/item/CIFileView.kt b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/item/CIFileView.kt index 02bee37c24..b2b89ca041 100644 --- a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/item/CIFileView.kt +++ b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/item/CIFileView.kt @@ -15,7 +15,9 @@ import androidx.compose.ui.graphics.Color import androidx.compose.ui.graphics.painter.Painter import androidx.compose.ui.platform.LocalDensity import androidx.compose.ui.platform.LocalUriHandler +import androidx.compose.ui.text.buildAnnotatedString import androidx.compose.ui.text.style.TextAlign +import androidx.compose.ui.text.withStyle import androidx.compose.ui.unit.* import dev.icerock.moko.resources.compose.painterResource import dev.icerock.moko.resources.compose.stringResource @@ -30,7 +32,10 @@ import java.net.URI @Composable fun CIFileView( file: CIFile?, - edited: Boolean, + meta: CIMeta, + chatTTL: Int?, + showViaProxy: Boolean, + showTimestamp: Boolean, showMenu: MutableState, smallView: Boolean = false, senderProfile: LocalProfile?, @@ -202,10 +207,13 @@ fun CIFileView( ) { fileIndicator() if (!smallView) { - val metaReserve = if (edited) - " " - else - " " + val secondaryColor = MaterialTheme.colors.secondary + val encrypted = if (file?.fileSource == null) null else file.fileSource.cryptoArgs != null + val metaReserve = buildAnnotatedString { + withStyle(reserveTimestampStyle) { + append(reserveSpaceForMeta(meta, chatTTL, encrypted, secondaryColor = secondaryColor, showViaProxy = showViaProxy, showTimestamp = showTimestamp)) + } + } if (file != null) { Column { Text( @@ -213,8 +221,11 @@ fun CIFileView( maxLines = 1 ) Text( - formatBytes(file.fileSize) + metaReserve, - color = MaterialTheme.colors.secondary, + buildAnnotatedString { + append(formatBytes(file.fileSize)) + append(metaReserve) + }, + color = secondaryColor, fontSize = 14.sp, maxLines = 1 ) diff --git a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/item/FramedItemView.kt b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/item/FramedItemView.kt index 5c07fe3abf..2e1db8928e 100644 --- a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/item/FramedItemView.kt +++ b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/item/FramedItemView.kt @@ -201,7 +201,7 @@ fun FramedItemView( @Composable fun ciFileView(ci: ChatItem, text: String) { - CIFileView(ci.file, ci.meta.itemEdited, showMenu, false, ciSenderProfile(ci, chatInfo), receiveFile) + CIFileView(ci.file, ci.meta, chatTTL, showViaProxy, showTimestamp, showMenu, false, ciSenderProfile(ci, chatInfo), receiveFile) if (text != "" || ci.meta.isLive) { CIMarkdownText(chatsCtx, ci, chat, chatTTL, linkMode = linkMode, uriHandler, showViaProxy = showViaProxy, showTimestamp = showTimestamp) } diff --git a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chatlist/ChatPreviewView.kt b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chatlist/ChatPreviewView.kt index 2c7e443b4d..fbc4c7e336 100644 --- a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chatlist/ChatPreviewView.kt +++ b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chatlist/ChatPreviewView.kt @@ -342,7 +342,7 @@ fun ChatPreviewView( } } is MsgContent.MCFile -> SmallContentPreviewFile { - CIFileView(ci.file, false, remember { mutableStateOf(false) }, smallView = true, senderProfile = ciSenderProfile(ci, chat.chatInfo)) { + CIFileView(ci.file, ci.meta, cInfo.timedMessagesTTL, showViaProxy = false, showTimestamp = true, showMenu = remember { mutableStateOf(false) }, smallView = true, senderProfile = ciSenderProfile(ci, chat.chatInfo)) { val user = chatModel.currentUser.value ?: return@CIFileView withBGApi { chatModel.controller.receiveFile(chat.remoteHostId, user, it) } } From 4da6e99d38fc081fedaa2959680106acb421b27e Mon Sep 17 00:00:00 2001 From: spaced4ndy <8711996+spaced4ndy@users.noreply.github.com> Date: Mon, 29 Jun 2026 08:49:14 +0000 Subject: [PATCH 76/81] desktop, android: fix sections layout in Lock view and "connect to remote desktop" views (#7163) --- .../common/views/remote/ConnectDesktopView.kt | 14 ++-- .../views/usersettings/PrivacySettings.kt | 70 +++++++++---------- 2 files changed, 40 insertions(+), 44 deletions(-) diff --git a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/remote/ConnectDesktopView.kt b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/remote/ConnectDesktopView.kt index 81e1afd22c..86be99d1bf 100644 --- a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/remote/ConnectDesktopView.kt +++ b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/remote/ConnectDesktopView.kt @@ -148,7 +148,6 @@ private fun ConnectingDesktop(session: RemoteCtrlSession, rc: RemoteCtrlInfo?) { AppBarTitle(stringResource(MR.strings.connecting_to_desktop)) SectionView(stringResource(MR.strings.connecting_to_desktop), contentPadding = PaddingValues(horizontal = DEFAULT_PADDING)) { CtrlDeviceNameText(session, rc) - Spacer(Modifier.height(DEFAULT_PADDING_HALF)) CtrlDeviceVersionText(session) } @@ -257,7 +256,6 @@ private fun VerifySession(session: RemoteCtrlSession, rc: RemoteCtrlInfo?, sessC AppBarTitle(stringResource(MR.strings.verify_connection)) SectionView(stringResource(MR.strings.connected_to_desktop), contentPadding = PaddingValues(horizontal = DEFAULT_PADDING)) { CtrlDeviceNameText(session, rc) - Spacer(Modifier.height(DEFAULT_PADDING_HALF)) CtrlDeviceVersionText(session) } @@ -265,16 +263,15 @@ private fun VerifySession(session: RemoteCtrlSession, rc: RemoteCtrlInfo?, sessC SectionView(stringResource(MR.strings.verify_code_with_desktop)) { SessionCodeText(sessCode) + SectionItemView({ verifyDesktopSessionCode(remoteCtrls, sessCode) }) { + Icon(painterResource(MR.images.ic_check), generalGetString(MR.strings.confirm_verb), tint = MaterialTheme.colors.secondary) + TextIconSpaced(false) + Text(generalGetString(MR.strings.confirm_verb)) + } } SectionDividerSpaced() - SectionItemView({ verifyDesktopSessionCode(remoteCtrls, sessCode) }) { - Icon(painterResource(MR.images.ic_check), generalGetString(MR.strings.confirm_verb), tint = MaterialTheme.colors.secondary) - TextIconSpaced(false) - Text(generalGetString(MR.strings.confirm_verb)) - } - SectionView { DisconnectButton(onClick = ::disconnectDesktop) } @@ -312,7 +309,6 @@ private fun ActiveSession(session: RemoteCtrlSession, rc: RemoteCtrlInfo, close: AppBarTitle(stringResource(MR.strings.connected_to_desktop)) SectionView(stringResource(MR.strings.connected_desktop), contentPadding = PaddingValues(horizontal = DEFAULT_PADDING)) { Text(rc.deviceViewName) - Spacer(Modifier.height(DEFAULT_PADDING_HALF)) CtrlDeviceVersionText(session) } diff --git a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/usersettings/PrivacySettings.kt b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/usersettings/PrivacySettings.kt index cf34fd5a44..0b698b2c5d 100644 --- a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/usersettings/PrivacySettings.kt +++ b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/usersettings/PrivacySettings.kt @@ -665,46 +665,46 @@ fun SimplexLockView( } } } - if (performLA.value && laMode.value == LAMode.PASSCODE) { - SectionDividerSpaced() - SectionView(stringResource(MR.strings.self_destruct_passcode)) { - val openInfo = { - ModalManager.start.showModal { - SelfDestructInfoView() - } + } + if (performLA.value && laMode.value == LAMode.PASSCODE) { + SectionDividerSpaced() + SectionView(stringResource(MR.strings.self_destruct_passcode)) { + val openInfo = { + ModalManager.start.showModal { + SelfDestructInfoView() } - SettingsActionItemWithContent(null, null, click = openInfo) { - SharedPreferenceToggleWithIcon( - stringResource(MR.strings.enable_self_destruct), - painterResource(MR.images.ic_info), - openInfo, - remember { selfDestructPref.state }.value - ) { - toggleSelfDestruct(selfDestructPref) - } + } + SettingsActionItemWithContent(null, null, click = openInfo) { + SharedPreferenceToggleWithIcon( + stringResource(MR.strings.enable_self_destruct), + painterResource(MR.images.ic_info), + openInfo, + remember { selfDestructPref.state }.value + ) { + toggleSelfDestruct(selfDestructPref) } + } - if (remember { selfDestructPref.state }.value) { - Column(Modifier.padding(horizontal = DEFAULT_PADDING, vertical = DEFAULT_PADDING_HALF)) { - Text( - stringResource(MR.strings.self_destruct_new_display_name), - fontSize = 16.sp, - modifier = Modifier.padding(bottom = DEFAULT_PADDING_HALF) - ) - ProfileNameField(selfDestructDisplayName, "", { isValidDisplayName(it.trim()) }) - LaunchedEffect(selfDestructDisplayName.value) { - val new = selfDestructDisplayName.value - if (isValidDisplayName(new) && selfDestructDisplayNamePref.get() != new) { - selfDestructDisplayNamePref.set(new) - } + if (remember { selfDestructPref.state }.value) { + Column(Modifier.padding(horizontal = DEFAULT_PADDING, vertical = DEFAULT_PADDING_HALF)) { + Text( + stringResource(MR.strings.self_destruct_new_display_name), + fontSize = 16.sp, + modifier = Modifier.padding(bottom = DEFAULT_PADDING_HALF) + ) + ProfileNameField(selfDestructDisplayName, "", { isValidDisplayName(it.trim()) }) + LaunchedEffect(selfDestructDisplayName.value) { + val new = selfDestructDisplayName.value + if (isValidDisplayName(new) && selfDestructDisplayNamePref.get() != new) { + selfDestructDisplayNamePref.set(new) } } - SectionItemView({ changeSelfDestructPassword() }) { - Text( - stringResource(MR.strings.change_self_destruct_passcode), - color = MaterialTheme.colors.primary - ) - } + } + SectionItemView({ changeSelfDestructPassword() }) { + Text( + stringResource(MR.strings.change_self_destruct_passcode), + color = MaterialTheme.colors.primary + ) } } } From b3944af735569476a6daa272248be4b12ac4c566 Mon Sep 17 00:00:00 2001 From: Narasimha-sc <166327228+Narasimha-sc@users.noreply.github.com> Date: Mon, 29 Jun 2026 14:43:31 +0000 Subject: [PATCH 77/81] desktop: fix crash when opening a video full screen (#7167) Opening a video full screen could crash with NoSuchElementException from VLC native-library discovery. Each MediaPlayerFactory() runs a JDK ServiceLoader (not thread-safe), and the second preview factory added in #6924 let the render thread and preview thread construct factories concurrently. Serialize the two constructions behind a shared lock. --- .../common/platform/RecAndPlay.desktop.kt | 9 ++- ...6-29-fix-desktop-video-vlc-factory-race.md | 77 +++++++++++++++++++ 2 files changed, 84 insertions(+), 2 deletions(-) create mode 100644 plans/2026-06-29-fix-desktop-video-vlc-factory-race.md diff --git a/apps/multiplatform/common/src/desktopMain/kotlin/chat/simplex/common/platform/RecAndPlay.desktop.kt b/apps/multiplatform/common/src/desktopMain/kotlin/chat/simplex/common/platform/RecAndPlay.desktop.kt index 8d26f2f085..d59677b726 100644 --- a/apps/multiplatform/common/src/desktopMain/kotlin/chat/simplex/common/platform/RecAndPlay.desktop.kt +++ b/apps/multiplatform/common/src/desktopMain/kotlin/chat/simplex/common/platform/RecAndPlay.desktop.kt @@ -13,9 +13,14 @@ import java.io.File import java.util.* import kotlin.math.max -internal val vlcFactory: MediaPlayerFactory by lazy { MediaPlayerFactory() } +// Serialize the two factory constructions: each MediaPlayerFactory() runs VLC native discovery via +// a JDK ServiceLoader, which is not thread-safe. Building both factories concurrently (e.g. vlcFactory +// on the render thread while vlcPreviewFactory is built on the preview thread) corrupts the ServiceLoader +// enumeration and throws NoSuchElementException from CompoundEnumeration.nextElement. +private val vlcFactoryLock = Any() +internal val vlcFactory: MediaPlayerFactory by lazy { synchronized(vlcFactoryLock) { MediaPlayerFactory() } } // No hardware acceleration - more secure for previews -internal val vlcPreviewFactory: MediaPlayerFactory by lazy { MediaPlayerFactory("--avcodec-hw=none") } +internal val vlcPreviewFactory: MediaPlayerFactory by lazy { synchronized(vlcFactoryLock) { MediaPlayerFactory("--avcodec-hw=none") } } actual class RecorderNative: RecorderInterface { private var player: MediaPlayer? = null diff --git a/plans/2026-06-29-fix-desktop-video-vlc-factory-race.md b/plans/2026-06-29-fix-desktop-video-vlc-factory-race.md new file mode 100644 index 0000000000..f75b962a4b --- /dev/null +++ b/plans/2026-06-29-fix-desktop-video-vlc-factory-race.md @@ -0,0 +1,77 @@ +# Fix desktop crash when opening a video (VLC factory init race) + +## Problem (user-facing) + +Opening a video in full screen on desktop can crash the app with: + +``` +java.util.NoSuchElementException + at java.base/java.lang.CompoundEnumeration.nextElement + ... java.util.ServiceLoader ... + at uk.co.caprica.vlcj.factory.discovery.provider.DirectoryProviderDiscoveryStrategy.getSupportedProviders + at uk.co.caprica.vlcj.factory.MediaPlayerFactory. + at chat.simplex.common.platform.RecAndPlay_desktopKt.vlcFactory_delegate$lambda$0(RecAndPlay.desktop.kt:16) +``` + +The crash is intermittent and originates from the lazy initialization of the shared +`MediaPlayerFactory` while a video full-screen view is being composed. + +## Cause + +Each `MediaPlayerFactory()` constructor runs VLC native-library discovery, which iterates a +JDK `ServiceLoader` over `DiscoveryDirectoryProvider`. `ServiceLoader` and the underlying +`CompoundEnumeration` are **not thread-safe**: when two factory constructions run concurrently +on different threads, one enumeration reports `hasNext() == true` and then throws +`NoSuchElementException` from `nextElement()`. + +There are two factories on the desktop: + +- `vlcFactory` — used by the real audio/video players. Its lazy init is triggered on the + AWT/Compose render thread when a video is opened full screen + (`VideoPlayer.initializeMediaPlayerComponent` -> `RecAndPlay.desktop.kt:16`). +- `vlcPreviewFactory` (`--avcodec-hw=none`) — used by preview snapshot helpers, whose lazy init + runs on the dedicated `previewThread` (`VideoPlayer.getOrCreateHelperPlayer`). + +The single-factory invariant established by #6739 ("use shared VLC media-player factory") was +the original protection against concurrent factory construction. #6924 reintroduced a second +factory (`vlcPreviewFactory`) for hardware-acceleration-free previews, reopening the race: the +render thread can construct `vlcFactory` while `previewThread` constructs `vlcPreviewFactory`, +producing two concurrent `ServiceLoader` discoveries and the crash. + +## Fix + +Serialize the two `MediaPlayerFactory()` constructions behind a shared lock so their +native-discovery / `ServiceLoader` runs can never overlap: + +```kotlin +private val vlcFactoryLock = Any() +internal val vlcFactory: MediaPlayerFactory by lazy { synchronized(vlcFactoryLock) { MediaPlayerFactory() } } +internal val vlcPreviewFactory: MediaPlayerFactory by lazy { synchronized(vlcFactoryLock) { MediaPlayerFactory("--avcodec-hw=none") } } +``` + +Both factories are preserved, including the preview factory's `--avcodec-hw=none` option. The +lock guards only the one-time construction of each factory, so there is no steady-state +contention once both are built. + +### Why this approach + +- **Minimal and intent-preserving.** Keeps both factories (preview still needs + `--avcodec-hw=none`) and only adds serialization, restoring the no-concurrent-construction + guarantee that #6739 relied on. +- **Lazy-preserving.** Each factory is still built strictly on demand; the lock only matters in + the rare window where both initialize at the same time. A smaller diff (forcing + `vlcFactory` first inside the preview initializer) was rejected because it would eagerly + construct the main factory whenever a preview is generated and reads as dead code. + +### Known trade-off + +Because `vlcFactory` is initialized on the AWT/render thread, if `previewThread` is mid-construction +of `vlcPreviewFactory` the render thread can briefly block on the lock until native discovery +finishes. This replaces an intermittent crash with a rare, short stall — an acceptable trade. +A more thorough follow-up would either collapse to a single factory (passing `:avcodec-hw=none` +as a per-media option on preview prepare) or eagerly initialize both factories off the render +thread at startup. + +## Scope + +- `apps/multiplatform/common/src/desktopMain/kotlin/chat/simplex/common/platform/RecAndPlay.desktop.kt` From 1f2a7266afa0ca7328837af4be932843813d85c0 Mon Sep 17 00:00:00 2001 From: Evgeny Date: Mon, 29 Jun 2026 21:40:11 +0100 Subject: [PATCH 78/81] readme: github-banner (#7172) * readme: github-banner * update readme --- README.md | 4 +++- images/github-banner.jpg | Bin 0 -> 159335 bytes 2 files changed, 3 insertions(+), 1 deletion(-) create mode 100644 images/github-banner.jpg diff --git a/README.md b/README.md index 252fc95708..a515a25df6 100644 --- a/README.md +++ b/README.md @@ -6,7 +6,9 @@ | 30/03/2023 | EN, [FR](/docs/lang/fr/README.md), [CZ](/docs/lang/cs/README.md), [PL](/docs/lang/pl/README.md) | -SimpleX logo +SimpleX logo + +Invest in SimpleX Chat. [Register now](https://simplexchat.typeform.com/crowdfunding). # SimpleX - the first messaging platform that has no user identifiers of any kind - 100% private by design! diff --git a/images/github-banner.jpg b/images/github-banner.jpg new file mode 100644 index 0000000000000000000000000000000000000000..f7a0d730b8ec44489976a449f8e6983fe58e467b GIT binary patch literal 159335 zcmd42byQr-wl3Z=f`&9M0X7~WK%jBm!JR58VwGO1$RhrY21Pb zhsNFE$2s@?-hJ=gG0wh!oN>pVW2`mSs9CGlH)nmT)|^$f?ta}Z0w`p?Y#{)Eq9Qv0 z8}OfUw+#TwxLeqJ10Db#-xq5G0C&59XKyT>%&h>HKkiE&+|2+20S_PiL+;NHA3eN3 z9zDF5NB>KnJbHXDkDfevf`x_kg*w{~>;{HSM|F=B2umAYb<8Ca5sw}K0S|!>9swWRwLf@#4;%3G9@&3d^!N$ZQ*0dEdzkm751#yA zx_hMe%7+hdo&x|_5B>q@(NpYaMEF?5fP16v?*u-jCnCn?A;EdWK#Hqj#_P;j=}uNH z{3%+h%7a{xDnrxUr5q&f%4C(G>nT+BbNF)%xMGygEsmLAJ6?x^azAtAORVJ>i$JiR z$l`&8j8a$>#=DMnY4{b5b>&mb^A8TKL*X-sCTv_%E;!524yrI9wRKo-lp zX#oDC2lp;{1O!L|7JmPyC;o@8@O)-V_N1q2DiM~5(1r_`kvBF40z zlDtywa1Xl_2C>a#r07y#yRJ4LHNNnSlz+Lej9@Fo@7PG3E@V~agcYFYtmTTS7{9yih{f@LFPHh@kn5yzP zO^@aNfpJZdV!>whGa{|6B+4Av4y!J$JJcrbk4X7r!20rd_;|qBXr0&{z^sE{nC-)VJGL^#rwhlGVO~ zbxrwS5&MnJ)#6z%6{At0UiDY767sV5jYp&6_OYfD4 z3QO}O^JnpY9EYeaQ;2Kl5c%Bep8@)AiYDJv_rauN{5>f~^LEM!A8qYT+-mXHu)J&nZS4vqOw-V~q zhk1>=e(0kX@LA5#-);eWEPiQTRj|B>7CCEG4G& zN{gam9k<4Xd@Vq}kB8R7b#_3`Ic6@-FaMd=1?BB)JV*V6zu#4z++KUDs_G3 zbEa9^;G{qI!_~)g8h2C#@eq#g#EYtjzDhR7Ap-v~tsyZ z<-yA&kkW2zZgpW)KPCX@f)z;}PE*SmWk*u4j;e}(WNRLBQA`W=&#rDxoyp?pyYzP| z4os;qFUJYv>&R&ST7HyxRr2cMd3@1`!lbJD*K3{PNAIBtNmpX-|4n=U?bRM|_PJbp zVr2#}_N-)bf^qoS?0Lt~;U-#$%E1kCN~0Wfzq4#D67|-%1MMyGG`^5OxsJpzFVAS8 z8#V(fXY8JYdo}IqJ8@>!&a-1Oe>-bsXAhNbwv>U!YAKN)`2AiGw}B;MRvh;>7b`oi z4kD+fhHu49Bue|E&PAsOToddUMR;ZfVCKWc&G zAd;ENs7Zcct>dz_n($sN$_XUbGs;FEe|=Z|HHfooo374FgT zka@WcSJ!7sE**(*U%4-Wlh%|R7c)Chn0>S?aBncQ^3ylEZ-3!T!j}~pYRoCDUk?Pb z9NKJcP1*Z8SbMEA5JNBZ`VCs(Z7BBE4=F6HI2$Sa>fkvKOx8qb1k@z6;m2Pz{9n|M z3`l$G=1r3v-KveYmPI8iIlni9*Hpaq@mnQKXmK@7K$7`bM$qun2NfpSe&t3Un+?Sm zo(m)X{Lx)+*xgCn9$QoSYTLy!)5~YZ77)ciVh<+Le&Z^O>mhoR=4V-8P1eWoQDw4h)JL$GE87xBq=t%;rC)=jjGOOdL$BFpt6x0 zU{b7gYFk)nZ!C^J%c(W~X;d4!hoWVdvo)`aw~28weR7yyvvK3fGwPeyEo?#{qat_G zU!|UWcp$`@E_?(#l7Kj_6?PHoBo500hgG~GZUa+#jbAt!6xH(VP5CY*Kdz17KnBVHOg6hp^QCT?YC22uMEnP`_Z;2lnwl`DtLK5uYK@AA&ttv zcKugJh~fojuu7SOQ3Y8#_luh*dA||fs~}X%TXUm>&X$pLtC=z(U7iN@Djj$xPx?dk zFRPNoiMhz}5+BCHpYN-wSwtdgHy3oiZi7dM20w{KYJIuU9Ba|C+1;#NSQLu*h4P~w z4%v}QJlKTegJ>Z=*M`&wC2*GUZ5px3cmEpPf7KFLKpEIs?f{ozXASem+O?~)X|}`; zHnSh9lrokh*zyS2_eT?>e|&tu@?Y=$A1Fb?sw4p2mOE5wuPBb4{t)wZ5qAI37H4cf#0j?is8k=T!l{t8fFOsX=H{irl zN1nc7rlF(SbVRRa(hHp^kWuyPBk5RMB)pN`jXm4OS=ZM8NRcs!MxY9rsB%;;{7x-ElS zL)eVKc~a8eHkph{;_330X1;2-KsKY|;NRkO2ah^@h&v%dY5Ibi#au?Z0=XsGt6gu> zhtH}t4g92&g{SWT?MtNc8}0JL@YMO6&K2`6Zo@)+31;{4r9#&p6<#-U)#iWI$B0!y z$K}N1!cGemI68WaIQU6$q!K6gVB+A9s?psDj%4pGP*;9tc-*KgpUMC*3YkjfyfHPy=1=*v zcqJEtL?SoAL%9m2iDTzst8uL(TXvTuL9W2tI($hEWGS~ta-13|n1@H)S*TTWwYCJA z>#p*ymh+4zn*4bBy!X;u3lq=-qV|uv1VwM@)ksif4Zbq*R+{L=T#~ZP?%|{7k2fuK z-IR0lpxZ?gaff$+S8}o$bRlq9zc;ASr_o9999raf2@)L!@ld#J%*+%6J8B7pMGX&3 zMBG(4%Bm7a54xU@+PSw4<1lKZj~V@G=UOhDI_LZ2SAzXqr*R9ix$D%tD9VGg+R(4e z^_vBv3pZ6!5;kj6N2`_PedNqkt&u4{Ix2&Fj*s3pEQ`F@E*0$F;uXIG^a~>1Ihe_@ zixe*;_D{S~wn5jV`i;~nt2WRhrrg<948Ws&AI9QjKE`>-V;B=XtrkMu{PJckzHXM$ zE^PCNC?yMx(D_?cAkg|P%oj}M$__cq1m#lCV|mBr>~yjf@k{?njt9jH$>hhZj^xV` z%12?Z3Brd0e!Oid0^R2R$?yXJPVTq{TA7A!-vJ(ez{2+}qWd-qxdW80Nv55C6CeQq z9+})`H~se1PKQQ02xgr@kQP2>h_x}^8qp7)GQVZZ%St*kCE0=(!SX3e7U*sl;vR#E zFMLE_vo|w8s$iO^M1!Y&drLj41siYnQft4yqW|@4%rQ-aoV~+=p++1DHe=6u`^!

CJAWKUDfb`4E7rYj@pO@N6V@d<%b< z+{IP-YC+}M;@H5GXq^>L0Wwl*KcsCD+grWF<>L16mm_kSHeWw0HroB3v3$4+UGpq# zoRO{;f?LqUD`-GJpOK2|={(%lO*NZlA7MCeI)ZmyE#rjK$aiD>*3kW9(Z_Lr@^)42 z#Fgy~*37C~?v^(+uH6A>OCh8QX2>a(>blzGjvn4srL^S|WGyDn_DxX_&M?j}8^Z&W zkN>pbKTcImyPl8Kr}JzKV`q(*Q4lgZxPdXf4FkV-uz7w~jtJ5j+!=_Ndk`7G1!*_l zM&yt^a89H`q&re4h$cg~x>vk4c`23RqB7EnB|ZtZ|FC}je>DC-a7lg%uJ?=$bCB7T)PxTm1b=%FvS4OFk-#ocDj0#<2oPBF|y@LGAplU0K4XsWLIX8 ztmloQ>k-ox4QcC}%*z$@t>uY06Zz1X%VT^Av9J;vm)u>d6gDkfu+vf!uqBt6I~=_U z>$CiF>2*|KfH=zH?>S@ZAm{NBACba`pL8lF?9%RC&$i2321I;wI;-)p-aZ_rsaigkkx!MGhj#8c zgu%+Tp(R8@8;pW5cK))b^w0|)2A)zH%{)A8kJ6$ z6ddIj;wKEaTprE4NatO#PSg;>kJikg^EzRCU?5G>bAJ8YNDUm$pvDeNjP65;$3{x?u`ScY7=Nf?9uF)frEPhZ7nHg=`Arlvq!{|~u3 zqc~PYK{l3frw5_yyY?o(G8m#Mo$64v2g@fB9Fi0{HYIGqCq674aQq!QN9S?AgjBoF zb?eU;K9$J0^%%gnG!yJ3i@JDSY5K2kHgCM)WN^^2X@g4X;yIR5%InT?{(vg#dH3Px zMZfb34c7Pn!SmK^AK915qc7*#+BbSMnnWP(QkUkn@hmh3 z+LgsFjGyW;wY8X*1cRoQmFJkWM}1Q!gyx)9o2>!^(|Nhphp=B0Q?n=Nai8(QFP0uG z=FSknc(C_oEQV*(qDeo*r8!LC#9P;?E;Z(`ak5%v)tDmuyXQQDk?uPq@$?3{YE*}-%gdHntz-+H0pJ7$9Uc}f=-vKpk#XtCgwKi z_~79+ZiB9ZVOFGz2y|>n6`R3eJWaG z$RFL^4ocn-ja0wTFbL#oEvdH>v6xo+=;)K5Fb7T7@+47WnOo7%kx2vNg)hJ@LpH@X zgJx;hppwgH{Ni1!Wf)FgLm4CE6;Btjs_5L2O$3*vvhP})u*(aBWDOguF(vQVcFwch zfV_}z++J~dAqwrnIlI#6OwA9 z&FTZ0gU2cD_`XGUa6G57g+AV@O zHC940OX!g!=lT+Ikx;STaXE-tlwbA^UG~#_iB|BL`AV3Mj5-rmO4Tu#SLsYhBG_8i?pi?x6i!Ss#^ zM%b17k7%>-6>S$wL8F^E+4|X>KQ)OawNk{j?A19e1HXMPy!dbjICI}O?YIiPm~?sc zqS-V+xwz)!@p0&nHP1~mCxpi;nTfpN#~pX=)d}%G#~_EHnydQynV+?E*HvBmPzvAy zY6rd<%Rr(?ySK)3Q9n7wDVnSWTE5T0d$@}HBz(d$TB4(NPGzmwry98#yBJEK<9f%d zwTBFiqqc9d#~_f!q<*8&*VM)jf+bKUv9S#sJ>R3&8(aofc3AVDjk9$)+%8GkqrW?+ zX+~nUD7tQVMS2{8AH;F&nd#d(6<$|R(`|v~N^L}kBTwO5$m-#J{8-kQIaZd{ZB z{q$~xi@5jGwqB=vh8^0T)(I#_^B{kgCBg_h8&y}%#xO<(U+tL+*fbUT;^6U$c&l~( zA7^l8Jsq6R9?Y)E##!Fx5^bdQ=*??ck?*ezuRN2}j`OfBv`|rfulIa~QlO8`TJwGL zg7DGDT9fdbsoivFTF80zxs%`Loii&feF;fVXL_T(L6;cI>1xa7V(k7&#`5VDjRQ^e z_|Aji7VeguiJ8mKP?_JZqQ~EB`WjrqxfzRpc+{f~w`jlFfxKl3T#AZ@->`EW<z2w^MdY6zEVN#K7`pdCv1)(F6F5dBWp}WiDilIFI{XBW}a5VjIq9X9ZCNNA{w%} zwaGls>U6Q5m3A~@{GM!S?W;hWrw29ZEW}l$hQTz+qAa?M=877JCq1k(9TW`ZH0C2p zR?JVJW;;Q&HE0ir^9p{>YTT4H{k}8Qoy^srP2cmih!H8Ocm237gI!;hB{a@HbIkI~ znbtf0hQoeCE5o*VHQU;>Oz9;%NBIpC*O^&oVzSF`lM&cnlVb! zxSmDX$gB29@ozjwHFp4nbY;ukkt?<1PHb&X; zWV4A#iIlbHIOecBJhfG`a_M2j&U!`r+0U)gg{WS~`2IM@p-B#`S?kmAYPCR*nr z7Noo9?(dq=6wlBAL*(=0F93a$Xt~ip_`@2z$G2gBN8bdW#49uEpVT?>6`L!IXKM%w`;OZrW7=G zpWRr!rR^D|v{U|ifUA##kigR;fMHZ?ph&+iYG?z@w3FvxWu* zlL~#8V1vR73x%1K@HxWg%O_xCxBdojE+14|UPWdDc4JrRCR4QzI{SiHtevR{>MJWf zw%tjs7^kHSMm2<-Xzp^?ZXuF9rp~>3@QwDygw5{SzE9X-d>s{5pGxk(ht-&a(OJv`aP2c`? zQ~tOtib0H|omFc1U+12AHJajFX6EGrIbgaZJ9{40SboVv!F{zD;T9V zb3hDC|6_@Q^@-~D8oFl#;3w8u;3Vfr!nRaNKlNi4QxwQ?vlg*!(R7tJ6u7lrFZq3>)FsmxfL^EB?pRigPAqOk=B%vY0&$Ayft-Rl`2IJBpa@D89vD6 z>eor@fVkd)%Cj>kAH|X%`qNDW2b*0uj4!Tm*1Iz>l?W}TyQOzw|}v65KK z8!FB6cN00BS!zv;d`}24hV#LA^K>qAFk_Esm|D=(3xdm^mU4r|Hdf0(Uh1BS@AFY% z3S{p)61E|k#Nkk-L}hz0OxaE&2a2T#4ZEMjA@O*6-r^p>PxByIe8m$iKNZ}qurOOn z)ztd|Gd2F*k={&ucY0bj)QtZ*LiqJBE>Ef`N8+d$uNZ7}6)#hwZOxdpcawm)IycXY znW5?^zm`HDO4(P_O+RNMr0F|irAEUwS5NHJiU)z$Zb= zuz=rXmw3}ZzMN)MB3Wm1rBXnnVS_)gYMbAi4yD$bM)7bDy!;`+{pJqvKt@SzAiJvA*D=U&s26?Wwfh60x?&K+Y@&8;v6>P4eX$oGC;RYvCy&MlsAh;ruMG zy4AwNy}>MI^)2&gfB&IM8hr(W@5`7TE>vADJUXLI5m=0~lw}a}%Yg}t$+LKiV@5D9 z>K0U)I;~-qcsr$(UE2L?4tnj;xlClcIibm+R&Ny6E^?(A^PV^`uCknuqdmSi9*gL* z#Ivb9t+6S;W1DcKHDSxsRi%M3M?2WxtLjFMBdAQ9r!JO7y`m-Ld9wQ}&X;@w@h@lG zx~nu}f}Zr9TxI!C^fWx|%vLn&+N#-e`dwn!30cONO-u`tKp@ck(Sm~q!Y8Enq2&*1>aS8;reyoNt#;#bqdq<<=`sF6J>Lm3s7{1~696%m{knv0gVLu!grKKebIl z=W1M+zp`3YMEN=e;W%a|sz8(wBW@Tm6IE+O7@bp}eYN=~{^|}#J!j6IdJVpGJtsUZ znV<@7KV9{?T$5zQ6TiRU^$HPw4|k^@huPTHZZR(RJ3Q*G_$e%J4C!Wc9ZmI)NQ_Sf zbH3ntyR}werd80Z)1qPQv8AEFlsLXz&77Ap@h{_ivAdtd?BuOUY#*x44{fizo(SiX zV}K8dwY{J9_)A+Q=)X#aIlKGu@96$%s7Al!pjI1*N*Q$`76;+0 z1c<`_RaOVig+PJPHYV*sx<`+i8pJElvK*d57)9;?H-ZB5l8(V$vI`s+S_5FL;!v&z z8kQ{6pT(AZfpqW+(}x5<-LcDPvE{$P@<7vMA4kKoW9& zU=Rp&0D4XO7WYy8vvm*Cil(TRUAll0Waf;R2k)8+f?jrD3D$hthJE0?uATWj@V+ty z^+s3u%+Gl`XJlRpxre)bLGRf^?v>`=CD-ScYvO^gH;)&1^~s`?hvLyDOm@1TyI}(6 z|Msx=Uo`mWz+T!$@CC23EhGQSK`90<76?S5-CX7O_&TbkXwHO&$YW^x#gRzW$vefW z&+AO#x_DY5v%27dDpCnNuiDa|FN6wFSEyZ6iag|6gF916@`0wlNr8TK(r@XiR8dGK$FpNUQErg z2a?1f8rSGDCr-K5+ExkV7INm|-6+C>yh=4Jq7P|WdW@qNVP@u%!b)l(%VV#kZmh03 zCcF0X=Ppv4)J3b9PlAEvgabuNY82&mcr);j>qLk{F7EKv7f${gGc#j$1gn&Aft{j# zX~_3lJnsw|=m%N(ltm;{{0T*tcCE}@iAhgV#bQbGJe`|YvQ79&3+W%|?h`um1j)og znT!=h4RS(4pk|WZgiB2dqqwU4kFG)(UVadg%8i~fStBH!UCUSfL=Kdcv-g5{mOdf= z>l>R`bXB+QtS%%RQIpLJVTo#=ZF#jZQ^z{PK^MoPQZ`7C!{WqhC<>)Q+elyIO6ZgThp7Fxe_vt&Ie40&&s=mFDkmH zXz?g!@}O(en91K$Djr@CQ?C$;rsQF*MRggwI{?X{pD(pS_!rAwy5L2d>N!O=7Sj)% z8p%D={f5b&wqYBo&O8x}#m1;P4Q)_hmsEIU*|@g8uS!&y=C2@{5kCzwqib+`Ob~J_ zfJ3KObd(pA#MY?`>?Fv(6pu2AYA)BKNDo8!{$;yq;XGoED$_)gm{S zKYg>?$@zV!uf&H#J6JScSEZmLOw*N`O(l7lwR*H0!?&c9W|>f+LHU9ALFym>>uF5X z#m}swCM~N@b~rEg#`SpH@N<-%yU2mIO3&jk_lZIV(CcHHX~L+@nW^~=wMUlySp!9N zTMbv;cCik{uC_66?f{!2`h5+GESk z1^>vY%v-p`R^!PP?zURBicQQ;s@aQGGSLwF2@{$r~>ossxTQk{?l z;jgm~BQ<4M*Dt@8>~HYvwI$%Y0&~#u;Iy#B&g}G8fz{dhm3+|{gCNC?(O;7vZW`t0 zO7?uFR48t?JPD%(kyc}I12rsM!ukYxRQZ`I!CJX#MluqcY@K7a;)-H@tC*Ld_y2_X zIGKCaxOry7+AM8;QsalBYr&OwSw^)Yw=GI)$N)h*l&ruatdSp+qYmGi&`cKm&Q$?aBEunIfazIRf491L-mkRfs$q_ zHVjtD@CWU;|M2Jk%$a|AD;lG$J5z$kSo5CUyDI)y`;oUBES$k#-1qaUc~cen6x4dV zslXooxw|jRCt`OEbTUZN4?fjd$8#3R&7agY(m;vWpBi+fUxXEEP>O;!CutE{ZeH$# zy7tn@XTKL5pDEnxf2|udV>(v01#Oo1deJ9zUlYaL1Q64FL6l;{B7qlv;+&Gku*}!; z+CBW)5pe0r>u7FsXF1cXC&~(oX(7Lviy2B%Vdd!7RNRt+w$ZMT;U)S~ zDNN{40sHL!*zG5BD5*`{8b=b)PjUs1YH@daL%w=3EnO~V+C2x*Vk}zwF&OGqR<@XLe7L5-Kl0btbiUB)kM7C#qL5x>I+M|B0 zERLMr7;jr{GoQy2F75>??Gkl3p~&X51SJZPugZ6dglxLRM>yOi?;DY|}LgS6Wym6*uB?|)N667f|Q z2cbF5KRM52Bj>A91p?ts&UjjiXL5q2uI;s|xA*+k##t<<$f&`rqzOkDV~0zP!ul^P zVz!p5*LJjbHHd?YAl4g06EAk=wVNM7d5;ax5iAVWl&uV`Iz7nrKC(~ZRswM6P1j#n z_cO6pAna_n25sN>aSqw0iMufZY79xr@ zYl{0|Kc&7vcJYUyQ8BT{8r!E1UiF8|OAM~=Hu@dyuX1%eaQ08}<;6L|-ATuGMb@=P z&cq~kvxo-dxDgdRz(7HZsfpFwE5Gu^y229oS4Jfel2uAfR{T>vb!1vz`@~c_CdzhA zEPb(J(k9aISC{4H(eImAyQT1eB9~ju>j8dWq1;kCxRiBU13bv}G2^?Bf5D5tx0=5n zQyRNM(ei;+lqPXS(MlV~sGrid6qId{V`(cnPCt4xXvJx|*ige3mbIk4=1K^y?7Ezg zJl;I2Jiy?@tWc`D`vuGLZ;mRB#&ap^3bMWM)?s7lQ~4o z=$ZgeeD}*po{#){Joiu(ji!UsT@j{!$*!Ab=KG8Nb!Z zj!AnV#&@GZjjTVA6+&TZu@zZ0mw!mj*EVD(2FdH1q+wYd(*Y@=OHF)v8fHxBy6_M< z;UpR9tZ#!7f4+iRD8rdTB?-$C`?VAs44ZMu$Uj=H5SF|TlaWCpfp)%pmrsO?fr*h$ zRdR1=vrU-49W{SMg99aKqSC)X!xAT4QsH`>WH4X)w68f_az}-GV~$2+w)B2g{ie5Zz+zALV(@lO!Xr&|RpLFg<)HKqU@s(M zceZQ0&me3)Svqyp+PmzKbRm&Bc5~;4tEt9Le08}l3J+8y?|A~A%??<;Uzuk=5=JzsuhU(*T}*rJeUdA3e7fu) zc}4kiR5+E)cAx&@KZw$A5yed9p9ib$?Y#pCQxvinC^AJO2*f`_I~1r-$C<^B#v;(l zh9hB3O6A|Gco~MyxAHJ}ulnO(7CtdmcMGyDh(>H-8=jJDO@^WJ>*NCE{ApkKeP%cb z>gWHR{-(la#K@hV+GPyELd?Qi)hnlTCR?ntN)64n2N_C;>|eF$WoXyQE)?v}2HIvI zKhUe$N<--64)MdKFGKpro|(Ie&H6E!h$*!6&}JrplJg8Puj0rNOj9;0b2=!V} zxlpSMw7jh<2@3MaH363(PM<^R#{M{p4$CPj&)>qws9yALwk`$sje{VAV1-b{t+`31jz6k--Fw^0Bk-|F3)jPmdymw09 zeBKfKrrvi))U(q1LJ%;x9e=+Xe?KhQ3tlDpV*Bf#6rTF-mshH9C~|s*A)zsKC~afI za1Ex|9eRFqXDJAq)>x5PG2zq>v5tilBhTx?d~+dLwDs;eMgqbSlx-WYZ8Y5-Bjc+) zv$({-)m!|!0OQV-my9`BVsPTh&k_At!S(d_E3P*#d@RvASrWLH=iwrY)c(Lop|!>y ziN{hA?F^-vNnaN?td?H(zlOC?*!q!lY5F#c*hx4_;k~}_a1Gic4^Cf!mpM{QI9!pL z_x(7B#}9?nIRblP*4bE3?f^!5Ym8D8HX&Iu@d(g*mJBp~ga^G#vgK7Mm#YZXo*5(e zKA&an+l!K`QnBDZUMg`rkvs~_ywS)P?P=lP@2ecWtUYy-b~q!jOY$z{(1z~Ug*dgA zqGw*OAvW^=!t;M~^&ZMS1mw~@o+emw!)@Ww*)n&a{P`BqwBVlP1;mt zFgf|IrFps={hy=ygLB~D(k@-arq*d>rnK+lGmy@b*56@1easc^?}|2)xuif`v_C}? zg2j=k>?LvGYP6Eq4CcMG+l9F1^6YM$cps~qvt&@v&Y@yH9%2t&fpKP6$@}g5U&9)7 z;@j<1%`2f~X~VY0>Vno%;(^@80pOFMD$S^-m$@V@k2w8WirBP58#LMCksK#t;>`~u z--fnuXX!Td|CV_71+5kmK0waOl_Fnn7758^F?Dw5M^f77!H0i%7n3`aAtqvmV!OJ) zr!e20ZAPhin~=6WvCLIQ3hU=hyeFzWxHHvro#_=mGZDK*mPrFKKSSYs>Ew(tb#!k6 z#75%M$EofBk*kb?kkx|AVV>pd>CqRD;Nw5Nf+AK$AmeW1Au2NW|JPX1k{uS5aJW#x zYQ_dxWMw7{5u~SsTD5)Mtk26Ozl~U0Ah``tBns&fxneLIQ&71Q5ZhVlx1k{9w_-74?# zlk<@Rw$!n{6N%r6<)KX!O5d~G`f+sOcL0i<#Gpp@`n(8q_~!Go0wco|D=qC>W8R^2 z+jbd~NRC7`a}KR&#KV0u{1-3slP#U_c&u3&zXdlM) z(q6Y{^-y9RKIP{Y%*qQ6Y72p#sH#{CYO>S|J_2#xW%{Qx~djhW(3Iw*1bJFdFZU| zR<#UK?)^eCXb-R!TIP0e+*0r7+_S&vlE1ln!l_7OvuVKpWylTnmqMSfx2AO7x=8fR z<{dyVy&-R46ycp$!tr?YH0*w=@2Q*H090Z?4BKBXlHW(dOTV6!HuO^b%Y-p!a**-c zFT9MzbzXl$n6*aoq!>@nal#c0r^nq1AG6-Kwnz)Y^NM6I$vb6=U2KDeG?vPslCl_W z;3l*S6F~B+k^(g|pLPSp0}JP+Lo4zhH<=TaR>xrLJgn@Ob=pr6dkZK}n(`w@#9t>Zy6Ohw66# z{yz>D51ei%?#blu|4%Ya>RMiyS#Jm{e6`)b1N^3SsmNeWo-V{B$b7z(IW>OZr#V_0 za`D-2n&GxeUuu&I&-C3zVo;I2w)-=t9@g#O=CsEg!|bRGO9e$g28Ls1LS51Bl>bb?1+L#l(+AtPHj2RaU7SQB^jWuvApi zOk;ugV#EG~6oi>WAPn>tfsdloPbt-SY-Yy= zriGomNe^3*vR>Dv1#cn<6kxTi;8nGK;Z~vIy)O{|*3jY0(M#j>tmT=kW5L>z&48T4 zisb%Lx`-yKfX(4j7fA#6NpT(^Rar_H)#lJ&^v>U1O<)P_p(HyK?t=eZ3b-fF?Q-*f zkf-7QCy&~Jaysy{_5DaxdqekYAPTWWo9*@dx}v0{=dg8Pm|G_M8t)qZ&MHevogcTP z%sRs_U=0UdkH>=>lPX`}pPOF7@*X3-MyiUNGS=NZIKly8lD0aM>XTJVyX#R4n%HjlBdz8<*qhGFhELmhyw(jHFK%0qw-uddw|k8ks{?!#m3 zY7!_VdDQ1fh48%!kQ6}|e$13JKgTDsbiKpiCOgzRt~tcolB>GQqfOLPD`Z_y7?*cU zCRh))74-@pLjGb^D&TG0>jAU1UyH*$syv`k5QSHk`Y2xCi|}?=+BmDV6*pfc&T~{^ zX$N1I-N8y4(v#$^l8R{0bIV$pT&1N4q6F64>+vR4oR0%0@ZZ%*oMi6kX*(t@pRgyQ zBq7Dbw_~q_5bTD1?Q(Vl7ObEsQtbx+u>rJwO@lU1RNZW0nO(X6f}pDtuZ>>E4ab0L zxm(tlq>+gWXBhfI5oiKO$LHSx;(nK(W(QlvuK6Z-jO)Iv1Cq$`%bG-LU1^A9m8ycu zt%466-wv*#GTE}0H9S7l7`Lc}ty99nAQIJZ9dq``%C>jnu+s>P};p30odIfcI4Y|n+HZ7@<*E^#;1fJa| zi{ta~Bk!yGWKqP^x5QV33VtiVa0l474pBNF)Dgpu(uW(~&tVO|{RT&vI&EFa&k)}a zobkq*pNB=fz9xU~IwC4S5w|x-J%kLj^Pgx-E!5kc;vz#0I;-?Gr+|M%G=Cz1YHw<5 zV{>VqA_!Mt;Uo1KqJc3(l?T8xT1OV=uLd^03MZrLwVZZw?&m{Mk#tc(zXM8_I57pJ zP(H5HHjj*iJz7b#S`Sx)E{}wwRIS3ENVe5(LrI6)_rSb-tKW9~L<;B5;tJo>EY>;1 zcy}nFw#hYHZMX~{+GxO9n{By_ILIhit8NM_!hVT=5!9e!pH`CNUSV9c7(FZJkjOdZ z9`0J86V4B!kr}3|uaNRTjn!}-otKbcq+M=Y@VEFq-I|ms&N*wXE+=vwp({L~;{}1b zG)l4w7x%OlbXus(sK{XM0K+NC{HisHj!Ye?oT6xDXC|9i=1QUIK6SDbd#%mOPT@O1 zlqq`6NtJgEX1cy8`ieJh=0o6>016xU$h$giu$cm9toK}cQG-Z^%lb{tnHTK$xk z$?EJ$PDGACgI*rV8uiqyx%F^rG7)sNrn3m_4(rw8VB$!ZVlY&e0IN4oS1Im;IDOqD z9-i*5UV3tkHqohn)|-4*m%J!=2LQJ1_9rKs^Ns3OscfXpIhUKc?)xuc){04~KM!jg zq}L-uK|+q{M_nBik{L!4WueZ`^h#3f%S4Zl{cNsp35mbeNw=spUF30hoKo-HdCd^2gp z+udM?(A!dtJ4hWX1-z}g11vwETr`N+ep{?5MSIP)p`PKaq+L3`4V=VFinR$n3*Wp9 zN_BxZs0CtzlT>$#3|>lXU+k4ViTA_%iqTiR%_!6`L$;9Fpz5o@#Gv018Z`_IEY@1K z2eyzJ=b6~B_w&74+XKAAL?nG044qs!Dth&`k*7xW^ zqhpWv8!){U@0tBZ-c^hR^`zZgrT|#QJ{@bIS}1O3bRaj2DWXm}gmk08-&|+uc^gOE z3_A-tB2~5~W+926_Oec$l8nMvE zOgPVnxvf5)&Y4e;rM%&UB;G2Q+9~oXTrRqNOACedT7u*welT^F+xC8$zufKO`8rmT z!#ex5iK*78X({ls>H^it>~@f{PS&3&_)SDHPPQ;8gSkDx$o{%=pCZ^PWWINRR1Ti? zQ^MBm?BP<%(^Ss>c}kC$O~L#Ig|ZqmYQJvmoTK9U&j-HC>#l0Gzx(aO35ti+${n7YEpUNXZzM3=U%y73ttNK|8dE zmobz%+PeL{GA4AVHY|siZ}o%Z!TlMwi$B!#BHm7(lz0rhZ{Bk}UM`tVF_~dXky8Y_ zX^*T^@sIVTEYr)R;YiYbyZuDdd44J%Jld4h;yC8tq&2$K`TsHZo>5J$QM)MHuAm4A zNLQ+efT4G`O0UwTORotXq-MKCIz&35N=qQ2NC_cSl}_lPha$Zu^iJ?*fBW3~o%@|J z&X0S~kMGYKfn==pu9bJr%=ye`KJ$Ig?qw&a>;)cyA-#j{iy+-dETmU8j>%8Axl5nY zFeO88hChxG)ybAo+MF9bT0q=ssVb2|hgqOfp;3L8>Ld-zc zP`aa4!16LFq*R=?e?`#Is%a~`+7Q2$|mxhtVNnpi1#&=y}iWuzWoi z(l1o7TuEdgJnA%w$DbafLe!$>A+9+_{+;x|!(uNad}R6MuuRS&GwX#MV%0?z{!yTV z??~Y6`r}5>N+#MZdYD|2;*Q2AJF!lSKrOTK4 z^O)nzTJ4NpX(NIMENq!cUTUUmeA4GElLs9)pm)ZUI|PL8si)V*HQjUzKosgrO12Rk z3-2wp)yeYcFW~#L-gicsgiL%G@f9>KIEaIvrRLpC486B>6jgR|4ZC_cd`!mL8Wry6 zQqw7{fQ~-23NLtwCU^+4i5}N>8JQv53d$ABDVrmmCMyDO4=i~nZ6?D_KL4t&wbr=r)MG zXck+iSKsUWY%pDAyvZ9@4A+keo08#a-Ju95cRtU_9p{h%SE4Nj<6l})Iw7vrH|Rc) z_5 ziO!GqEc@?dn&Y#*t#e?ZT5@3b*cb-oZ8Pe>V~H`6`-j%>drKTxTeoyfdXy(?yQ7GS zE6Qp{+=z|dK<0TuX+pn1YNQ9yA%?~zB_A-WaHANS?Z+{an%6W%!r`_a*9HG&qFU^x zo8EyM%PyTKpX?Bqwq(56F{|gT7$7rt1rXerRbMAzW*bc=Z{9$9<- zxzjK6eE2N%{>Sz+6+)(hgjGqSt8aT}4x5aamcN{sh=PG2RXr2O+24gUZMGae(#)=c zo9q?>Y4s>xk$6hs28Tse0@p8FczaA~ra%+|Iwc_dQyV$DDsnXDdL)B{d1hSh;phtd zku#$8!S@Q49alsLS(``kZLc;K77x^SFG?1U9(MW6)MyWC3d?|1LU5~jEI!_qVUqhF zOqay$bV{0)f)7#H$?^Vk__T5l!ENXDoZbELnPOe1MD%59-GI5t!ED+gvS4HaHJZ{UZp z8IUDO9A@a!h+gJ3kV267V5ZDvu2tMcAOY(rYdpP4%AU-8b|@w2t@fqecXK;ZD=M8+ zvv;g3*DABrO;q$ETuBNH@ww#_x9ZxrO4JT`j+ZHr;S^U=>5jiY_GRJN+qhsBVVh~U z-x=g!9_6t9&(pYOlmlMZ9>`TtvHrFB|Jd&z{az5t{?PtG?{{m}1llSW%DpSB^=9Zs zRn6%(sWw<4(2FsEp>+>;lDr%V@#;^K;Nue&R4aHwu9x!{vY%ObElPw|id8E(qa*JO zkbNjI82K=qkw5e&%L9kA6K$ENJ4^~^9HabW0*#M0f}x=b*D{GV`!46V%dB|Qe|}L> zScHr5NmT?VE>dbd!HiXKjV{VLlD{9RuxE;x^PgSPZRL)k&Od|f21h1YA#;(8D`tx# z6Ov_1u(1#QbW?TEEqEJkLq_iUl5{>Ncd`VquXaPmJ{`4tLVs)_yi9uYaKJMbV+nxe z6}Am+63y1Gtk>Sf04{~R!-@@P;;zcgklVv1`X3JI^V$4$k&Nx*5T}Ely{8=7eZD%; z7JCU6eYvt|9V=+e3MoT@3s6jnaT++P7Oa!%1G0rMTxY4i&=+}!P?_p3;_ zKSNKCiyw8=PF3Eo)i6f6(Tss#E|8KH^UXqWkJBHnAkzxmYGlb(=w`Mm^!Ig;?hcwS z7m?jc1K&ljsfa2%7+#fIn^c#{z)bEw*BH@I-%MUqvAP9-M(n~$GCIW-U;Q7Z?EY^I z?Em{)f9$Q=ok93Ub+fpSf-E`)yPdH8*dR1l(*Z*=k@z5=eAP?Ch>pi)D3axH4s@17(>75)R8MPdHve zGuLnq?8_mu9G;B#8!0*OR9H+w#u$w8Gw< z8hwkg{P*^FOb4&RXTY`OFs0;~6wMBlrL$;O6@~{K)yS#KKL{feAn4<#d=jjzETW+22%t>|4fxNr`n!vSSuNGb-Lqjc&a!$|h142yFr_~X8UKm>dw9jlX1MnklI zQ{Y(k)JYC)#5hgSl;$+#y+YL$gnxs1^oe^f(NMVe5sSW`1*D5IL z2m_=WDQvd%b{}c9EPN@{_A)NI1&)~SnZWo%VPVnRDRLQ!E44t4SAw^{_b5HbS>UAF z3o2Kfo3(J3QtdFQgupDqNYa=<3z(hj1hM+8FUk5cHro(_X>Z8~<}6Hw5HpwjTSp*r z!2Kh5pi_2z>kBP|w8|xiB}>GbVOX)5V{X6L6@uIqSQSIO_CW3?LVS}Fx_PFg7O1EW zpR6UhC^mlmS)YEZIT>f1>2Ji`+V*o}Ky!yL(uW&l21SQ)ji9Vz3M(Xx*nIo8yY3E^ zwrl=3CLG_gS1vuJXxG`3?K!P321<-*kdZ!3Xl!i8=2hOd;fGD#ZTT3}(8_BkexkE- ziQV(m0pgkPkqK?lnu?%vE=LRw`4_kzOl0=~(|y`?%X5NdO_b)D!)7rMWHq92e2hIo z)MUabXN9-2m!Lo(ll_9_Cl4n?=t+FX{E(-r7u2@KV5je=&JG7TXDo{zj@7m2W}7gH zBisaz#ji6btQDO{$2lk-BkgphH_uke8;5Vr}K95Esu%g;{gQ4hUBeb%a>o zB#UQ$870dCV!kX}M0PZO?(6VUyf>64S?EEhPHzck_IP>rY`KS zpOX`$_>l>ngluWBi4}+|Z1BbM8sDk*V9mJ~=>=G`@(1$G!GqirDUw_;$!Cx5vPj+0QDBc`k6JFIA2d1C?avQkBA z`uo2g=s%D5t%Ak`(gSl8339sYGi<;a#qO?u{A)lE&2Ng-e^8|27K`P4b3(%dCPqE6 zv1JVrLABKP3s4$T5aSl*Jkb{1y`pej>CeRHTeUHJY}bo_ztl@* z!j#*6dyxD8`njE|$o?p`iLL?ZtD?!NrXT;hIT7Od%Whq?g4&xC@wWHgWN@#2_|)Jv zoc}k4NEIQlShAnIw&;HYlu4ccd`)7tk`;Rr*4y3jGxAShm2KMuNAMH(1~@# z-wIqrVY)ZV!(Yi>ZRAYk{Psi~M?@0fXw_!7h{Uz6kz?4hfXy=Hr$btq)0rCWn;*@T^;iB2F2%fiS#Ow znmZkf$-nIFmUWI{f|ey!qV%f8EHboM$%k-!4vj0sz9%`Z$3`XcVZpA5$f6KIB^qY; zILAvS<2S{_3f=|~9^s5pTGBQgpjSF<|GDj6cgRKl@#&Y#QTGtFk?S^fPSJ8v5P0>0 z7JIBt(qCAJ^djCowML;~)7uWb2(L+4G|!byqvRB2k-TP5koDyg+wh+PXuzo8!X4uNB=lvM`Xo@g2=k!n=GPGqf{R;{4Y`E5<&`Y+ zRF%GOJ*o_=0MhuZ`{10*=m-9LxahD_XL}W{)4Y2%?JxSXMwhfs7lZ5yY?AgN5^HBp ziYmce-p-AxF(r6yy*enK{qav*UJ1eKtP~;A8G+3x7PeGS4_k`-B?wS^zX8&V3`eeDq;iEe3qhx zkBw~Ea{lW!77y4my%cFY&E+@*JwOv#mhE=P4EM%n>eZSP-?PzHZ2F}PD19+#r)`EY zZ>Foq;XmA@ub6m;noG05k`7rJ*O+jAN;}h+u;x2ra!xeoHIP~^6Y~(R5_^!L*iWC|6 zdUxD3lCdf^w-7j3k0JKw%Fk5QfLz_ z=0#gtW&6IqGX_V0H(jeq+fNf{_8Ei8`Bck^^kEoNYUFx4UM!28ddwoJoQwc8@kY8v zV(kMgen1CpYDaTM6T=MSqaCx!{Uoa#A;Xkf~M|r(#;8y~+G_NMfUyj*QEMvZav$BG~UxV`nKV z3$m7R2GjYnvqa-ltXlarSWJ;#!s)zJad|1W)+Wh+H@riy%R=_iDDC43jmo# z8_jns$1j~~+|+&p*^lPoY2Bq*pVMYmx1}}84{4%s$wT- zF&s3eXGE{kTi8#oZfn`mVl885KbZeO?^XNKhi^pD(a~?~Lt#p1NO);tj&ruYeuZkh zx;P({r_U_H=HF|>0}KL=^K5r9=84UL;>J(W-)av6pyJ^g-Bi#-DDASgIWRFdGM~Br zueP$SRpY}~_@>lt{ofQ}Zp&sb)5g)xCDqt^N1Z3xy4=&QJpf~S)%K)?Ox=&`_V(Ad z{Lx!~Y^2V8?l%_1`ybk+Pj#$WAOIKWmp zwc>vMPtn8pj;pnp>U+yyCm$jH26Y(`zkbYWr43jq-uiirWOXdXJe&$Vd9+mpDpF7r z`&NGc1sO%Uc6_Uw{17#LSg{ZBO*&Zl8OnFQ@5IHN%7{W0_Eq<8Jod_xv`XaFN_`5; z1pYHeMvqnvB|3Do8+;e?6d>8xB+EN5CDRoHc*{u~*%5?eXv?I*K-6PCU`cV0hKDdtyEQZmb+ ze1o1VY{?BqK_>{EV;%#u_V`H9PAVe5>%iT$v(s$`){_0<+e-aG%nFzM!({n8H`mC6 z*c=+OjvjAo)<`Q-5hMM*vW1_nBW(H030$ejIG&n-oQ73x?{Sr+lRz^CI}y&&zNj{~ zszGS$5T3s!GJf2n*0GFFCaMhM5a&3yr;n!ZRXM~Qz36gbJ}vJk=C;u4{>uU4AwO~4 zGYbQ7i4bBHzYbQFfF8MwRLQ>cSEgCv%g#*7KY{?w+Ellw{fiHj{BO=t ze|UW2AnOtZqGB8EabH>5br*K6>U7OYyq})urPIi;`DXc(=Dnejp4d1(Io~AXQaFbo4oly*2 z3ka`}+e4!ULr+gw(%0mgR=tO{n@IJCu49ax3dP{vu_Hg-LL|jbX@yrXREqe9sXO4y zi~(&yOR{EseKI-!>QZ&s!S|WRrma4Qm2~ooYbn00&!g<~yzB@J>7WA;yd+`+$kzM0b;r}-dOlZl#SBPy9tO+|8pR&{2eqGwGO*zBHrs1RO1(>|j>P-0Pm_h=b zj$LA6T5&t%dnY7dMn}MF2J9`B?(wcNw@M7#=TNL{pr7iDHnfmQaOn`_zSPD4vQW|M zy(|xoo129Xqjk$oR1JOm4nH`Q%Hnr?xVq1TqkSl$S&54G#${adMvw(jIX-AZm$6Fs z-xOZe&4axwj?nC4&8D<+!x}QL+uETH_bY|Fp61~O=>LuaWovPVM}u0}eRw9OP`)p4 z3pzvS!T2w4})aX_RR}^u2y6aCZ$~wjQ*|pmU|?M7*TkYnK9yjKUy>Vd!MEiREt!k9qv8g*QT~ zlA*wkpBaeH321nZkT5?X<(Z2!yOa=kB52iYZm7L}sHCo;R?EpLbVKRQn=!+_C7Jnx zaRN@6%nPNVd90*Tk`NV24SD}xHtK!Lpb7S@Zerfvekv9k>^ zfrk%XC>GFg{HCy%c|HX}}8Bz28sj81y%mshX=430ph+^xiU#mBu@clQFV7 z%3Xav-SPv25<8Y4z9-mCk!| zf}QCA?;ctpI;OJuVcW_qB*QT}vA(McfZ=v@XaF0Y1lqIfa(ElAIumoqjO5+bHRVAx zA=d~%r(aITM(xc-VS(0Afraz{w@&vlg%sbgTE8wFvkb4?N&hT^b#}F=WqpijT|pRI z5W4PCW(_Fro>!`n;@rtcJ)-|`DUnaC{#b7u#@!Xjo6hWqVrKYUbedSKWN+uMLq{Vv z006{kxn|_(U)B#S6CFTft^`qSUoD)GXo0P*XGX>pK!)eso>D!s=WA$(j&n$+R&3Py z-pfl7lFiYg&3@6=um1=o3tA4D?k2OIS?UxYF>zey!c97S52?tgc$vC$XAzpf2rU#% zCvyPk;&jvaV7y}FjAq)~2h{UOgjFxORFYG$ZM0v3cb;R#SMfsZ5nQ-1_`$@VKB?G{ z{-40Tkk*}NQ80q6=UCifKV2c4k5>D(if>?jWz=5N@H{1(Tk^EOKasi-_*UISNHK}8 zM@sdWEM_I%Wj&0DH4JsM2UvM83}^Lddu>hQE<`Kjm@jEJbO{03&llu^DmW}i3H~{3 zH2zW0Xc7Vty^&Fzwxp$~@{biTyPlETT~z%iep7@yw`NIv&O!Q3asm%72Z$g85`3*n|+K%a-**F{Op3sx|FWvEbg#&PO!0YVFZds%KV%jGEX z@Z3cYN)GEsp3J_dpcL4on{2@aL5{PMkK>#6d0(~di^LrGr)<6E{hoDApSL4v(CGQ= z_y=_sJ$g+1ybf)aY5`uTbDCzLI^ zCJ=o|7UgwL?cINQP0a-OWUiWBejfn@$w#O+{EdwmF>qye{3O6JcqAC*80;{uDV>f@w&UaJ-WM>Gz#jXL zOu33e=%}FiX(QPC65%vRr6QDmilZabe==LHLm+QBaAfyIMymwor!OejKK(^Ov0GDC z(NLbK4Qlg7IMgn?=oLK`5<3to8mb%r?5d%Wz!ZX-=r#PYQ-og?!UoOCw&l!k)aOTirWSRRx7s{XD#!b`#3o2Vw6e zr&kC>ZBEz_WN}{by8?UD_IHuErzWvxwOjb9G8cmP=bFQA^K1)b17!cuukFasrIGPmfMW7>S z-_9+8xNkny#qqcMTymDHXmD#Ri%8B3z1ZrGXI(Y0DR0$=q`Qskjs?*+Mxnk8&{s=V z%G;N>4bG%|-_BYE z$>KxmG7K6*Q{}Qhx^i!|Wn_t-H~%GieP#Uc9noj_#2Y=04i#MAf59Q4Bb2Rj@;H%4 zl_xWRaNYuX(P`!_+br!~GNiJ2r>{pyKwC=;yl!_6KF&LF2)?j>fBl>1KgL4A+R(RM=62K&RJ(a_ z_;iOaME3GP%(&NqVX(xge{J>LZrlB_Ks<(kiaVq_* z@5z5$^8e_8!KBe@cti3SYRW66{d4vmaD!QIJ#96grxfr6d-SFC(ZvUx68R=ar zM4ev^mS^1;!`q9ZVfhR zq{?c5SgqBt8{;E6B;Wpf;%j<&;B}sfi`PzMrbv?{nd#+wW^=y}j6LA+vu=FhJxM3N zK%G}JAp1`R=CbF2X1goRBB1xtLNW<+AQxPy2Oi!L6xrM7IelXbf7W%S(}h}1X=RBg za%5e^=5Ch>-uPQmn~$vHE+OQY^MJ0^ZTR!N{iN#8Gl@ zDuMmws=)lE8Tsek%(CK`R%0?yU6ESe{M7aqQ#V=7HxWKnIh(Heo5FjZq;oPy{v3u% zKlzqe_iB3zZI;MTH&(CS8AA@Kg!|62nS`fucc)iU=_IfMq52-B4w{LPS-k` zQ4RO_P=9V1QJ9W`Yymbo9S;2Mxiqkbxkb#m&tcXPkgouPOpaS`aP4io*p1szO%Yd= zRz!4FYLCLb7;^z(+LfVE>uxU6tF5I=8CU37v5Pg|FS+yF}2)XTc1Zyl~ae4aBGW_0pyH7=){lHs9AUGm#48;hGQr#Ed> z_PP*PA_3w=ml#_kQ|-j3l);Y~^y~)TA8}pGL?rEhfa@#VJAUBPzp{y)t(Z02K-dP` zdWQ9^?BIfC#c_y|=!Bj)J+cENBOb8I9LQk+5PYfeG$JFT*Q{9mUY_W*{aPjUq;_( zZU`BbjA&}ydC7|%U0bC({6KW+W5KZQi0UkK?BigIEI-_Y$ujN{>R!(bomSOTrkBdb zi%O@@_{Y?TCi>!OS)z_;jtq%i!SZ+Zbd5Q*Lds|8cs>hJ%^c@61i76sMR{j`MTHm5 z{!CKe_kRxj87K&cCW+@Y*xS=ur$WXxF@ySd@Z~kl8!IloCxr|~j@l5@96vVwnc@tM zPdtCetJAVL>Mhqz$Gd98oiD4{D=A&~pygJLX7er<6jXM3?$yPr$8+bkrh$IkDGiO6 z=u6gd0=yE8By&y_k?mIFjepJ#_T(IMZn_J0Rqid;W>&kSj$g-o#QuF zY{@`dwAJfonxxME&ei;8$r-v?3-F9IM6h~;0TE_nHNp^n53DWGMmWxfEeOw~5kVKO z6w!CYErk~tlc9NrO}W{ANIFX;sRZ97b~oxA`JN`cLciQ*`r4bC`X@-pG)Az!E^Rfr z?~=Fsf-T)_^75!+i0{+tHP=5{M1~#tYU9t|I7)aA_!1VH5kucu3f&RPG<=c zyHjQ8)KeCj1LQ7L(C1oJxba@PtL7;1EGiTj5OV>%U=7><#0V5@`A|1p-%n{cl%1^^ zgP9T~uM^GStnp}Zr8e@ez{=~lZff^(v#8G+QpISzl=P-+j zsV{qV*$Fw!r@1GgSYnr7x#X7|sx#d@Jxjc(I2vucfXoTT5w0o$!8jqSXYI0Qs9-)BE?5xQ>vmgs!vHjiqZ_XV(OiJe3PVNhfA2vsZ%GOWtJN}t5 zz!X!JKKNYKLB(4m)tdAE-}+N>5#j+wD#=5b*sM1XlCCUrm*lNvKmQCc_CN}T=~*Wl z4HUTDeX({Y{&Ri(U=_e1LDXwYAmj(_&;$S~oc__(Z0~+5MMs|bgC%rct%qj(EKwAV z%pfJt>u(BuHryPm zM>EyM{y;hdq9Et>;P<^=$n(pdq|8u@(YLnzAw58z!iWMvDVO$}fCJT_ALp^>z5zby zMw_X+#W24^0}v=Eu&h$%k+J`#%v@#UaTD!VYZpdRFtw99ZIWVE}mh-et7~s z;67LO$T5QZ$wt;^Tv@tL4OT>FE<0r`F}TAtI09knJ;vhq^bJ#r+eHfeY6Wz?1O(p{ zC@KjXy6zYYb!`RgkF&a#uN9}Q^4C8aYu~i3@}ZBIms~79(C?K?vjnbok5;@9m+UKi zl|l9WkJl%!YV?BR2!&pw10F7+cmfC zP#07p*w{BfX#!8Bk0(aIYdIaRgyWqZotN1rDm~FRN;S==4BR+ zVw(rGXIrMS2Cy|A-B_*aF0SaXogeGKOWa$oSKcy#9yWa%(vS8BjeB^5_9kBc@r696 zha-U0eloc6G3JD3R)RcEsL9wEbAt)Z{<<1n(#~RH_cBjdk6p}r1;}kyTrIjMuXXEd zBknAw`K_$i5qO|ZoHQp>FwI2B4*)Uue6#Lpz#w_WxbY)mIV*6IbNd`f-Q?E1*10nF5--m z2s_*1w~3Vx4{4t($<1aPtf>p#w4V|J*NPj1MnLS;m;y$d-2 z#i>p1WhnI`l*SMfY7UH?M^++rE?08u&u{8Yf`{ktdc74w^Tzubja1~CYrHCFn4(Nv zdhMXW!|GeRXziIiy2`1b6wxZ8s4tvhJ-matwfA7T=5kIbY`C)u%rKkf!jvjl%bQZ` z+*VW6=in~gS1Z^pLK~Eh=XuKeWn%)T+oB~q8c^*{*LW!-+@{GNUQiEPlMG|>x_R`Y zDne6Vzc?Qw_#(@+C?2?ve7!n!Tfwq0WQe`sv=Z!>7(6^jKe&CIJ8~4LEf!)x?XdCk z$?J^e4`t2P#(foqkh&3?-c7AhdzEsk@0NmVMB&wzdn-j3(r=~Gh z!wc0#fAVRMJEWq@dbiYFeZN=?ysUnY{aasM@8FjBwn;@-d1VpY`*W@QqQx@QA(T4> zE`Tpz2)wwv(-GQU59c%=*zA8*S}mHe$?o-uYa-QU=r6z9)9F64CUd%=46x6Iz{^!a zg_A``zxPD1t_X-Ge|@l+*FL?lDYbf2ZBV%gYegX~eFz{aUg%y_HAy5HQY`FrJW-gm5i{I#X_IDM#R&vX5- z-ndU+t<@9_1?!IN2)Ax~W%zP@Tzgnl$=+Y(Cp#{K%pg1+D@Ic#fnIKbo{p#4tGJl( zU-albG?>F!Wr!)1lA`CfkAk()tx^k>0(ebHV_>pLVupSQ5~+K1H=a4eTB0af-(qNV z`cG%!mBu4eyAg0>9Nu2GButqDbY`f&y#jzIm-@%@bQX4pM#@m?dDri7eVci$H-IWF zAbosz J>JnsQDANQX3L~9jwOygNNdi#i)8iC`_UanK~l%x#jjz&L_86gjX;F`!7 zJ>lOkyKP!;#S%jp=P*K_3I@}^(`J<#qo?=$qOBTzkA**>?fz3a+Hi>^4b4fVYmV2Z zPV#0R3609C&J3)qNsfEm=mb@#6(-VT?MzHyo<^v}b)&pSi*J@DdM#d0Y*lF)c9%CH z&(YCtoxeTT&`EUPM$`E?wp44@EVStp9E-=eqmHup)odJ-xP(ffF0dlDWW5msJF#zj zP2OBD0h`CnpRQ3!3}I=OzDui2g-!#*Z{ z`jF#Sj{aHAny@+8Q|F=P_w1v5-IT-4#ifc;LAU|um~v^N>w5{Nmf*Dm^B~mXK!E6U zg>VY6%W1p_sU?$jy%pXLYkW67UcZw96@5ReBWXT#hQGiz-LIu#a%H%Vb6V9r;@Eyu z-#d%ic_Yv~bN^GU+b$J(=dC7pqr9#eTL8CeFqWjfn#% z!W@M)dd6+FJ=K%=kFUlz3p7jvX?ZQiYxmM%{6>BpOxulh<9`fLsMAi@SEA2x>N!^FgYzD& zioZknc1}CN^5lR7XQ7MWMC?JX^&V4*;97ZCp>atC*QUvDiu-08+irNSg64K%2RkM) zlPB{(z4TU;zvP;*cqwo@TqcQ-;hOpfX}zn0t3aGLd1e5;3IKpQOYV@;v5Qz0z&bi- z1pxax4Et;VfHUVD17^F|RJrsgdKZ-=A3|m&t&7${Euhw*w$-iGExwEA+nAZNZak_H z5dT<2E4LK!p;nfTYfPvi`6~aAar-w#&V^Zeo-|P;c*>&O+6{py+&og<3T`HY9`ziA zs}JqN9UsacJJ@MAl3U0m3lN2;p)^M%h`A&Su+CibMN!g-T2e|;R8$n%FgcI!-xd{> z!X9$QaAuIzCZ8TE$p0_jf#RbAb=UW2qMwZBYL5kyo9kZGD@7C<{RzB%i54+lfNq`m zvVmum%V$2*;k+xwq~T3jjhAN2zIs}rkIO5uXP9!E(2+GUk)+QiQ%mjVqlLpR7P1o2 z+<8v4fo8ksHy|gJ$#E0ZH2{TF$)?)D)d=0$&?&TcO9NN$Osaf;==P&YV<{a~y-Y1^ z$8%v?k>kfpn&Yl0V}cpJA!f0plje2uzluNC^y*n(%GQwCsJvkhs)F0XZ0FIsX%8>k zE?WU7MiHMY^g^N~A1A$!QbaLT9Nl!cUk;1t<>Q?fwDjxg5(>0=wY zcVx1(SC6a&j=ivQ(bx+DcRRMMt~I_0`3l}yRSNr2T_d*cNxBG&6YjF36!)kdISzS1 z{`j%4Ud6=^$fciRFgrmf{R&swmf->3b0cFVE+2wN1^u7vUId|c+o`z7F_#+c13$;;bEd8w|}v~tbyWtd;n(oHBJ-}T zicQdIzq3>7jQ;7lo}<}1hvM?jV&v?@?w}0b556L?4yGuBrZ1R zh38Q~{KR?{s1bEutJHU@D0`5eUVrlnkXMsbMI$L}^2i{e1e)VBMiVz^D1yI7P<7bT zF#bAaQ03#P#+hp4JSB(DCM88vifT|=UsLxKhPS)Kk=vWr4j6e6AngW!1FeN{|E)aA zLu_i}rQ{*VtkLea zcRH%`@fauw7M*QZ7ab?VXTa(sC;0*&m)NH&9pxoNvs1h1XBa4W!DiFO$pb&*4xx(b z9O_;xTLUWN#XStrFunpi`!jzj*&J!csQni2GFZ^uiWj+jh_eVwrMKBoCATM*L=UB9 zs#)5$@uv3_VTsi5O8bSG;{9x8ruKNAI^)ikGr`!q@Sv9))}Gm8rWRw!+5tLp&+!Oq z_8ZZ!#WHewyy>$aay!Q%S0+z=^~+gU^=Q72E=4YzYm7j4s7FDm2k6W@_)Y3Iv%e{3v5K`cf4YgT{vb&N$DYDzFY!^=;nq3>vvmh3_Rix< z8;KS!FMt`9YjL50w%ABNaY(hP z==9gu_XS`pc4O2{ua*!bCunyObc>= zzsv3ksOhK+ z+PF>Hv{y|QbyVZfMSSUyxl@^%$S|M+^;h0cC41%3Cg*$^d# zL&ucL&mBs>{2=b8M~>G&94X3B7aiTVAnP??W*?^vWrDcX5=&klPdTK$)vm)ktGp&l zy(MvSat=k^Dh{(HPb}|iHaR)CIiEXLr3GQ_+1TJ-3iNFnA&M7tyH< zobg3a4w)YQJ$W_p&~?hKNQ3o`9H&N~Rw?n%S3|2FKP;!6acprhxxHWKAc)7`4DL52 zzd>qDd5!l!=M>QkZnqh6vYkU(hMz->$Gn$5JQD?Lil3ZHcPoMr6n@VsuHOl>ryhc~ z=EbTcg}!p<6x=V|+z*+2)B>m|WY z+r8aEiwSy(eq6231Afd6Tgf3Ig7yx-obpc-DcUO&(JwGzaEunin_go@`fY}3?ohh! z(P*_s$W!|uAJ^KKJznzibL>MbM-+dAE0oWD3e7pM(L?g}Pg}9fTt17u7VBLC)lAY4 z-*d^5im1cqu-*QZS}Mei;+=WLw8^@Cagc|L$ z!~oAq?22v7Y9*4y>uV2bi)m^1`)*+s$lMxex~JrUxAVpQBf4r3)~jMXv%h7gqjof4 z+p$!27+L@3?i-bZ&xP)48v0~{p9PPgJYY_342C zsp-RQ#oXcxAY))?5Zc(6iKcCrj!b{2`{su;UTd2<17MZ5|o)pd<6?Iz>EEO@mSkH*8F*%))u+_!x zhJbl67UU{+cQ&-{(X5kn*hqhrAa~#Cy3+NaJYhbM$BdvB$c2DqxDqgW%I^{IM{8O* z94Rr#>0ZXL)yoafz`Fpy<%B$(HYnXFp`tsRt(#}a!awLC9#olMl5_YMRdswc&O3=U zrG^t`qQZ}ko<3Es{J2GSHVxLi4BB3y8*fsKOfiG^lD&7f1d`#0^+dbFwCB24%$hNz zx6C|;Qv@Ux@nT%mqcL#CzlYS)I$$pyc;8+_tDe5H)s6RgkA<|gt4yZJ=vTIaKR@28 zpcGGyLo?TjI@`+mKTMl;fsK&)RpB%|{2Jt$U9qp9Fw36dg9E>>`mfcpO^DOn2LVB9 z$Mf>i)!Z1~>VXQQMxcyChZ1(k5V&<56npjV=HS`O028i0l86YQp~-i)tgWW;neTKW zjp&0;#Qh|wFovfq`!|Kcbseh+ML3!7{hPwyq!o2cAwhl6;xVU>$J0+A-sPU7-3J|P zz5Cqj8s@`0rX3tJisE!Z^Uyd4alAd+ee!?t_Lfm`J#CwBCnQ860fJlb;6WOfe+aID zMuG=u+&y@N;O^eRx^aRw&`5$y1Hs+h8f_dhJJ0(*=bU%enmIFT&N}?BQzNevF<%_lFV*>KEUg{^5%*@F3F=QWcHD|)Lu%tyz^bCnz=+Rb8?H5A4=;s_O;jn3`5R%`cd z&0fz2JD~`B+37SL9SrFj2dR3%yz%}WzN%lbTomW7(r?(_K2o^q(eKKpaDV5<0m31? z@iZMs-aMWa)oQnV`D2Df3vmhYEfd}2-nItzG0#5XJ-p7)sm9Wj#k23uDY@Fe<_Np* zO#+qO4OA^l%R?9wZT?uU^LhBwT^h*B4wqD=nRTYw^D{l&NACT6>-a%uYA3ug*@)2&Sm{w7AXzHh}w=av zKB8$hj}4g+<%X1bZ7~GtZ5P6?H&S{n2KTj&`vTgUD*u4q&pyK{g2*?H;J1O)B>))+NCh&he%b+bvwvT> zY@V!UuyNmaoR}Pvif?Ui6p3ggm*XH^hNU?&GXp1i%b zZE!cak@BDUhL_e89H6=AO!nGo-KeTcN|rdNQ=APmtOvvHd~6h)P0Pq!>c()@5D_&< zZwND5m4hnZnm2BkK{;1wMZrCaObUDTiBc0`l!H`?C$}FrBU<)kMvq-lBOT|zB1(CL=cJ>wWjD`fO#JP#(8wydS_tF9j|&-KQg z{?GAfzVDDbg{NRHH_sciQ4(5 zVP=5$)4rP#h1+Is0HbvL10saws~uMSF09pAKiT8+5sW9CN;53%%bqo#0Do*(h|3$H z$CTaNiSnz@kTf|moix>*cM9~xuNDq(+tiJA;1l@hY&|pc~ zg;>>ihhX>_aXmpPo6)O;M+uiH$5RgRhG%YtY%w9!Rs$LKOX3YUT#G-WBU-S z+5GHRs6aVxa|fnkTadS&$mKyXFwauLXzo;h30fW->}QM)waz9BS)rx{gl^|Ic1Mj0F~J z3%5*?iVOdfmU?Sp1T)-Rn$PyjUKU?md~s~$Ox3cSr2$`3<}#yw+>j{0p{||)A585I z)3x%))jK3Z5O!Z^)8b(rdmcmd zoPpj9YiaN9LQXg(jSHp2j~xP4-O{#{YEsr%>$a#Iv#(Az=aKFZ6?Mvrs6=*T&aCwZ z$-mSjevagO|FkXeh ztmrnDP9b;9H^#fR2UW!VcxpustZ1&T(t3~mjaQ~x=e=jW!8T#b68V0{x!Mhu#bjnl z#F?f(kzxM~IO*fs^H2&v*zTR%GF2Zd0%Gd}UI|>e_K1jxkZw0|KuM^qr3}QE|Nb{x zcl-iC>oy)2rnH&{a6*azv`)o4cYeFg{ZjRS_OX&fe z>VPqiTbK!q(6YK;;^xz%hQO4W7-i7`$|d68bygm+@lPcYq!Q| zXWw?cDw;8U)~M8D+3`p7q#q3==c?b4_OGsq5jcy!zK&kS3Ht|1Gd14Y+gO{e?X1wK=%+8Q z3id4-1}-E+ZFi4f_#cf9@Tu)UL<9>me6&6@kz9cOa-}dK#mg&+P)7=r zHi`{$>(9c|Y!OtZY+cd=jm*s8bG_pfuV>sHj=nbVBHLDai`T8DU^AlMUDT0#kXo)^ zm7-!(=pe0HXP)@L(Xht;#+Eg@?w#xn(;f_gC`!xsTj zRwdi+v;eR`Jc@&;z~sAY=~Qf~v#F_>M0};`)R7MSr6V(x22H1pjdG<~4vhBhTd!v= z-o^2qrfwC&hRxnP7YRB*qUsTY9Jwq;Ct70?Rz}%R8~>vb6waRf0sZ4BNs7KEH$4mT z?Qd~_anK8YUFG{1_-D0uVR`ZV7T7-xQvCrz{+XWbpLvZcr9+=zp@wYn@@Ye(Slr0fDuQy2m@XMxvq0bBJbqKRu~QrM(wWqMW}TA$3u(< z+F)w?XFN}Mnb@Lqfy8Rop=Z~h%S79O@1j6 zhwl$)Ypf;c zUXnbCDI3c+7~GmW4;?BZ7gKeSGB zoKPW>))K7>;)x1v)8-kyA+L|AaKVyp=cLw4D?>Ef9U;WFA(_qqHb{`;6yg5Le{0L3 zk~*-Ptzt830I6qMH~YRokXjckoSfVZgr74q4oa=Ged-pLx(&f7|3wAB~DpD zkfjW10ZRQDBHD!Z+CecF9sCU=QemG-K(XEAuqLEDqS=*eNJOy$=V>i+Q>`U2TA8SG zkP&^_o6cOxHX%YtnCV5LM;NnW;j8jQAucZ9%?*Rk+Ofc~Kw*=Ob532S*rB+y2-Af^ zzi(CA+V#zBluhPLZBeT?i=7s2v8IWpyK3euGx?Iv1FwcJYvOVR$;FzNZl_&|)>n@r zMk-t%P%BUjNeDBfPZhI`LNgBe)LNr5_c=sdo1Qoymbi7)9arL;%CEfY3$-rzxj8=S z)!;v%Yd$j{{NtlU7H#~=LQOv&7~O)dlJs$%Pu@l{{{g+~x#=i(N&G-Z{t{TEs2GdV zZephYfDR%_k1a;;m9NGDTM_Doo7t+XH!pCjBbDU$U4KB2#sku-KfIRQxVwvKt8G!|Fl(Z2U}0xP zS~L~z4}L;Uxd>=Q5ItY;!WV$5u&S$4hVqk>mn4;fN6})<=8jqgnOCPP(^=CW%JWB! zOe@YjdA}0v7s|f*koX(?JYhb6H0;EBlRwsWKdIp(XhAY}-~8#N-=)i5fZYhWl5mGT z#AC`UZ?w!VXim-?YS7D=7B_+^OdyY?r6>CN$t4$c@(}?wLVAwPb(>Xi))qgQL#&&> zznSy(k=K6z3)*ZyY#{v58JQld*X+h5FRmcdW&{$cZfoN6qZfQaR5JM5XudXV;YmYS zN4`p_KTfbD2~=2x2;JOQ+R9)0L<*>J1GxM>Eku4Yke=)_K4DmI&mmH*d{{M(UkSwE9YLam~GosNYH8xA3l{dkYOS> z>NGt4@v8Sy8JE}dY}0tFbX%0(LapUJk=9HT&ts{oU2rSBTO??zHrdE4fi+a=jdkDp z)W>isPJT|1E9Z9b6#nid-eugxl0HivA*`h+631EKn75q%n=Q$UdKc3lv(*ANjwRD8 zA|rvuKJHX1_Y%{g)C_0rEuPe)z710wE~!uXCsuXWTMgEdUZ;ucn`*)FcaguRQb`I} zNPH35PQP(uZ&gUAY{%exNbQ8uIaK%aX-%kX4RMF!i2`ltQQlzik5BGg|62#t9{$0S zIYda~Suo3D``xzd$(C$Urxq$x;|%prAG*3nfI8?I_{I#_IFE7vbR)d0R_Ap~S$%$g zeG3ErszvD&sng%hU7DX7|Gc<3m&>3KKTUoxwl*feSnA*jrnD6{s?w(NPGM%22doe&1}frunPsB^JHJIHr;8Flnof-n+Z4-G(e^BgoksI}Cm^L5bgz}nhDHWLAhwq{tQ1)BLp%rCztDKw_ zxZt$B(IQBnZY&ercTl~9{6JCpr-#$uJvuK#!GFI;e@Q`hF@>u5N%K=6xl+WdAhB+% zCcvfKpuG*wP+Q4zD)p4$+ImM< zeIJ1?nt}XPAtOGCtyTF7e?NozXUZYSxwkQyZx!4Xc{S4X+{c)uDM|l;iadw={(vkp zi-43`FTfCZ^(9;Xx4kEo4)c}lV(B$E<*l!MYuc%q`h)IA{vJ_+K<#^l;tUI;MuPNC zX19RzwM20-kTq=m7#ncTBqh!v>WidDW+icY2Kl+pUlFJ!NmCHBw&3{8#nOqy9uZlK zYt+O%nL0|jd{;5OZ{u>cFkcji@I{7EP~=7mCnfATkl3)KyszhNeiibRPYA1}kPBG&>qS@6XKf2Rx9x%3gYiTINNeR=*t5*$+yGOw< zup8oU;m?%R-bL191$R+I7}&innTD*vw#sdi3_)U*7-=bp2w|jjB87siDt|8hhPAx* zx3WNT{JRMYep&5T-=?VAOkAtoUzdz0jS$z$W^}D_nh4)tQE*z8cS6^le_Ek@)O{6k zB9E1ccDKC4x}Xx@lNHU|{H8SIG^W3%!;94@OkM6rnQuSxVf4O3Tu8(N!)BO&u3yPz zlAVgf#pzHCA2@l+Zl9-Kl|Q_Q93HpbRuPg&k*-JlGfA&@$qGK2mrDNa?2f{+&t4Td zW)12i`gM&snKCyR`RKYVtjvrzeP|;_R_;chJ)uBa>+;aXp17J zVmQCr`MH+;LQ$k@oH(Vp-m4q^Q^Eyz+XHOopjVa4#@w!x#Xa2GH&%Ndll*LU zpgVMPYKv`**E%NW^c_kPjUH{Q+fF4Sc(@?YcJNvdmh2A*j{FcS;3$^4F1TXR%f)0p zZp?T5sy~-ax2rG}Hm|Q~PM(@t7_WX)NfDebWVz%jdeW6^1jC;^KG#UqPaj>XrDP_n zTm>{Sy)5Y5ZD4<-_UxUK7~g};_1Xv4z5}EYZaV1p`pu8cJf@Lg1#Die3Y~)ZixJL( zMr8*Y?WKUgKIt)- z7SeRQB=vl#8So6^Kp@vA$A12az5BB?l2>L>fi5QBjK5}67OoQqU??xP0O(Ylz2NzX zBgRg>^qA>T`?|0Eg=`AjvVf0Lch|3a$+s=3lDOTD`1brAP9WS3^@)R#q-MW*kChl@LDa3!?aTfo_pAnhglF zl1vxG0k1lyl~2MrIF7SQJnAbc6{tWvI%^3x4=I`cfXZlL6AUV@#>Y=!RhU+N&h58i zK_b8@@84_q4`?9zmURYvRSLUOt;lrY-Y@gvS<|(2f1CNaN`3KPKZGCXuQ<5K?$<(V zwor2vRI|}CueS^1VC2=yN11%){)hHibGtSvo5t|0#ju0WO3+`dVRSTC;-0h-GXYNK zev0cllWPF6>mYsTDS~y zTvKr`L@Pnv+y{;0k(wT6JW(OmsAp*2rsm!q*AkLm6$xuKrgXMqy@`xyF2*_xQK?v8 zDLLm8sqRQNhS3O1V!&HRqNOO%fvA&cuvZL3~as6EMiwbkuaE&F^hy&swUs&$(?K{5Nm^}8*CYq#JG&JBA2(d=D0 zVc)(XpHRk{;k7Rb&$HH@XFT1&{b4aeP;Jh;s1{P@k!kIZE4M5w_p|$i7q}Sce%Mc_ z{7t$gOWvR*TGEZ8PATV3$+7?I9j3e!dR?Ph7|D|j-g)Lzj5o0*{{5oiqM;Ylg<2C6 zRu}N}V%iCzM{;7IM^7nayn(O=)Z36f8NI)=*w3ce`TlDtIzvC2Z!(jGD*nH0QM zE^)l@e0}#u7rmzE4pH{5hE%4R^@*&z_39u|vB~xh`a}Y)%xolY@C^FvqFD9R_5_yI zzQp7#T1((^ox`3~!K$>R&U&-`kyM zwm_sS>Ut}z*3ar=IfU3JT2VVWWLWN(5xv9oH)WmBD&eFfOPem9dvrm1YI^SBTM`i# z5ho11YQ#WvFB8+s9xtb|p~^XutT$n1KFQXD$nb&f>x(OPm&+Eml%&0Iakn_JQBO)K z75lB9=t!2rk11}qftA&)SuK@PNa=r-{Muks$h?rXU z)EiiLj#{g;imqo-ZD!dTp+-vWcd$ zjGwaz+7Ihf*i!QL*#nI(`glD6obA4j5W+zs>Vn;5B|D4Ep4#ouWZc3w3(V{PD#Z5V)+vChYh;bV+ESWk-_1>BBJki66uEiJs zKBRM%^f7MY9-V&|A*2eya9$-89X|YPNJlYvk<%n`g~F2T_TfxN^&isqQQaoj+-fe1SVKcZ&DO?nNeGKp0lPGY5*Sjhm7y|;U%$mp=ZZ-bebpm^!oU%rrlVL zhbUq5%2D$3(rpxOoS5*VqtkKcJeJr|R*}L=2Eb>e?$aiz^%f^jW=UrSsF90uI%F3MD1cAgJL zYS--g7ZK9#XecK2x_k2#u4(ibVH&KU7Q|<0;jN0)%d|@mfVt`)7qp$V;Iw@3`WGFF zO^ln5=c}f$x>$RcuF1U9yQmk5hFYDL5x^0P4wCpZHU7i>4KS}GPe665V`_m{A4L;gb#J;MtML7%^ zeTB?j%cCcZNA*x^>_-La>LXG4@{Fl`-~sI_|w)q26vKh0Z zX*H!RgalP5cAKWbo;y0dGL7FSFUhW7b@=ewMh{O>>50N2nB3TI*& zv-i=OSzC~n+rp|{r)$oQ5A|_Sue{B;BPAg`62x7215wlqS0$)CgC9rjgg~KEm|_f0 zF4aVBX$jg#zh?KU8;;*IZ942RS!|jV8m&N|ubJ0pEXU~Xg1~^*JjG8Ov4ba}n2t>J z-q)wS(OSUf%>9#P2?Fr8dXst$JI6woEpJ>?0Bt@s_U}h5vv` zWOqMMM%PP}DI3c)Rrr5v#1+t2(Tb7?QAP?5Y(aEsC{onx;PsK~gf*nxp#)ZxRCmH9 zYN_k?B|RmQDN!>pN6m!<%Dx1he?n!{))#*rb5(fan}r^esPRx!@DGm_%_=yJbV=R$ z^asSYkhdRjn?8eR6lU=zd$wxM1<{hh{k9)vmUL@1Bmb(h$~IR?~UJ=zTB| z^4M%W>ckgIiY3KtIC@G}*`uy2eiaL-o|3n;P6PvWZ&+%{p{s^eUTtsXhs~&4B--y)c zIjDm>QFOSgg;piq{y2Uf{^)|F({zAlUZ_0MZ2Z<)%N8kYp8sMhXhAt2e8ZP)Hex~cDB~SHGR(Y?^Pm4VJc8h#xhYyk)*ht9&j3^ zMySYUyaY(ty75HyBIrhptE}u4LfCJc3tn4@^{bd78rFd(X~W+;7o5-LP1acnCgFDx2X6`bGLau5%*p&=Wzbz#y&6fwS4f5dGfGN}v zXd7Nmw;^UICC3Tpg|^@Wq{?R3RTq}Z1$8t??kzsfQ0uNiUL~!h9m-Y3HLovS(Cfn9 zd~7cV3E5yQFMt}rN!!*7PWty z$^#~D>FPA0PUyyGZ|@Xlt={0==vMs!>7#D3DC?+-Ayh@k#Ze7YzAGUfOMf;^9`p^;Sa}XM>#!g$R;y+v=#5&UM1(AT#E8d? zU4&FN<_A6oWTlqnkGkHw#t5n=hqbjuPXPW zrhlE6GO0;D`<36mjdf&dw>I{3XI)c_G;kkLQNFjc7O=~XqE(&$<#Lm-Px|6IdUi(T zXHD;iabMM}iDDfVD)^_78yf|UDK)+!8a1{gMJ_|-YF<8k=d1gBO854|$Mn8d&-Ep; z;gV)R$??Pru{KiXGRAQkSA-PX1bL$~{n@@noW$_ppFiy$xV?s@I}XQH_?7MY)tYB{ ztZC;%mIcqbgmtpArw3%*M8rRmXk$0+DZZz9!d1u#_4(vfWJz|a)RK0_JV*QL+V=+w z-s-%^on7d&*Z`wF?;MG>4ka?on-W8F4U!gCr6?5o?BP=iv2i**!>_k?tUb!_OwRr2 zI<>Xg(L>Dm>NPXrQ5$Fs75vWTP1&tA8X02cR6b8VlwiimY*AGE2S~wnn7;WSaMqx* zGadb9SA|B!-r3scLM>Q%^KCr7nTqh*2R(6CgI@RhIeL7YACqzJG|{TV)NW$2ulIm@ zLXG{gy}icNkt!S&lE7xq*>0+n@FQ~Y=jc?ya9(OGXALVZRPi;{e zl@g-6Oe~sTNVv0CXs@#5d-H`rQr?Ix(}0HBtbU|8v3*`&x)z~V2p6z2xn93nhP>a4 zkf)4=+!@Ud)nG9>pP!b@s}}m@#+g4c+^9z?Py~3FI$da5#IL=kG(S1n(;0m>yfHMq zVrM!eJ(u+dmuplsr0}LxR@S6YqW@Mm zK+9-V{4FceY>XDqrP#dGAX7^fUzqF#yTuqzBwF`u1IM&3WY)w zQru?l-lM4F7}w^VwVCYC4mq5Z(zk}E|3!iUE4_SHKsUnq@RLb&Icff?nkJ^5OQ4)2 zVi*oW0P8~~h%T5nSFfHhS88zgIiA}!5J~J`Z-qUr4 zvNSfUGW;d=ay=-b?NO5E2t&5wHy5;g(m=z~cl5Lu=gU#}SRrA;G@(gz42bN`j@c&B zkF2tfqjs1|@7G3{%}Hf8gQbFbQ?X5X-8!w)!{2$V>*1+}EQC4E`84_HO#OFOIPOh2 zH*TU22lCcM{gCw>TVn>1Qs`PmpVRVg2kl7mc85soT19t0#UAGvsI(35>X0lEhpm}} zwf|CH3o^P3!({;Gby zSkT`82c^#(Gj>nzmj`n+b8TI9(=`GhhUt2OdEgmGKR9U;%FIQ+3~`btH7b4n1WZkz zo6Q4co+#Q=aeBC=g5{^~D6V}}WrHS0y zq`1 zq2^&4g;ytxFdh*4?TI3`5DT7C`GxTui^Fs=&iC5sjklPchRGy~YfQv7p_42XO-r4& z7PE2n0Lubo#K;(b?G)3`CS&$zd58i*1pc{0r^&p>!maE|J(yU_o-sPg%wyg{*%~9U zE&OUjNl*A)j<~k8-0o}gN5>qOZyW-OqHXK?CmixAey_(%AUaKl; z(1vpFXHJsMq)UWixQ=9!v}`|xYufZ1F+jQApPhpD8`$6cy@m(-ceW+Hs%IdPm!5le zYtr4v=RhTm{P-}*%3WxOP_zA&2qK!JM@0xBCO+<^rdiT$>6_TPyylux#1F|4^%(pj zR?IPnX7Hfe$4iL@8R1X+NnTCv6XPrHMcW>63}hx|cr#PjIVyT=S0>?mo1nGI9e;D3{>1m1hHX-d^a z&9}7FS5SdSfwS&s(hM~oF8MmFRWY^Nl$6{bu)<}i?8qlQn|a+-F5{SAVwzkI%Z zodn^;!_uCdOkldMbO^2oN-3ignxz)@e1=2&y^kgidR~w^{!lyIn^K!wr@Lr-q3g_@ zT)(Tenq2H(?SZnRAQk|DVlapUlQ@6&AJ+t?`7k3LQC3krWg1&=5^)Zu`hC2fTa6H{88=vy)^$9Hq7vJ}n zQSSY%nXUZ*uVB?9)E^Mc{dL6iG#&QCRW$T^EslTLNR^v+xb$i0h+XvF)2~VAmMgA2 zL^R(-Ec)|C#`BlW*Mu4pjjoKRcl6?;f!e8{p?U70uQsT12&rmlh2&?$1A|!ICUQqDtnP z(xxKHnPx=uIJeV#y;FJV`s@+O)Hc?mBw_TutV#^=4*;e#y_A!v$6O;Aj`&;Td8C~@lLxlCAmDZ zB7x^e7%*C~-SY=jHSY|Br7HpO;j{nv;Qw1sAzhEsPXp#itx%$kZcPJ=ot0fUd7SBgylDJGud56oUk>?g9Laz&5 zIb|&*1X_yuidf3afjlgkW(&47H{o}bpI?AdOua1BKd%u_)e@O8=kgT9^(PwU+YZPj z5^8!r8aFauk4XBK4F%5rfwhyEjFOLZS+~Tipx2dV447bglaW>@7tgmwX~;uLBD;&}!0A4fkF0>n zz8FcK>Vd?4*ASimTKXZXS6ve2A0;QjkZewA{Mz1(wLUO~*Q-RFqBb+Zo z|5f^7l$I7G(P4Mwbl{wcU=38!Qh`Jiym2}Q%?I@LZPCt0Da;t&-eBBY5A8F0mf;pN zOUX}5<||`tm4fZcT$!XJj-{;}rBj;El0;nK|N*YjtR|jdi4V;NBIXO{v;~u_oj%&}tkZt52hF!hmvH;8AG} z;sW>IX)=NqYG7NiO?qunSOMUC9odrn`+9zPmX@!L5BwiKs{jn1=`5L)k}|{t=YJ{E z&LyZmQ$FnZ>7v1*vZW&Hk~px8xqqLrN}D8C+1obt@#qfvoGExTU{pL*{U#dc%zq$b z{{d>D!_nd>;RfDN7+pF+TRK9kk2E$o!&^Wf)aQP4);sLmM!E#7oj^1JonDSVyzoTa zU|Z_<@}o|4!gNSNA|sZ8VOdu8Eexm&)%?3IR74vf2yDSN9=g6pXRaqSTNK;sse6T% z$J)sMtqKM6Mt@P-`5paoZNLESoB?3q6cRQ6!GSMO-rIlDC>Hz*$^uR=CeJVpV;Ha3 zk#>{Y(ke>XNeLYf!tO^ow+OdgbUOS2@qgQ%6|zrF_~_h?1q?(6Ka*BpE1$y%#ta@L zA6+wWlh}1eR@D}6!TMwi{0)v5#5OLfB(+_IwfRI?;o^F%Qz|?|BS3v#`elm@a0CzmukG7_!uQm^H|_dqoA2~8-Js}BmE0Xl4oW4zgnWx! zFhNp-b(b+>0eqxGu;}p$l~pB>(}1+@v`$TJBOf9Xl3MxZJX`BskKi`Y2{aQj+Xyko zx3BH89D(W8yzMdJ$PDHw)mTwwJa^{)(8ggrJ0xNXNgQe-Yb}^=8gXUOs8Ftd6q?nc zwm^Bs*(ViH%=ZVh#4>euzuA$serp7tdMT>p$ulG}_T$H2Ne~F6fP8T>vomr#p#m`J zR{)b<{+CIw+wU>HYPgv)-EiC)x$guZTX5l}l^aeR2Uo^`l)sS&Yg|T%>y|yW)Qj1i znn|jkb+lKrTZgxGpU)D_{(zX0Pgiu7iS3kCwa&=b|giRfxuFv!>lWOhk?InudG8CoH3Tw~TN(U1 z!7|PWq<3bxc(Ztx`FUaF^g(Dk!81?=;1^>kVB3G#a6)njku+CqK`Ll|s@VMv=3Ga3EK zP9ZY5I&-KXY;p z7KHjW07l6M&;{2Q{quHQ5Q2UQ?47ACzEd`W1c1|Ks-%D=a`%@pn0ng)Or!14F>0sT zpHkH)@#D9KTHT@+yq4-{coI3UEc{*NX)NBBHga{Xmw%Ir+YNh2`=Nr?`fr^pzJmW~ zVy)A1ML+;?M*gnP>v+6sN+)r&X?5hZ*6HT{jkDg5r2yVsic1D%uz+`TRg%8PrJfzv zbK~j90n_V2DeK1T!my@t07d6!m8D{5JrlU;)>TL*?O`&09PCc@}ciePdcEN~mCH0uzl`qoe zmvc-3JI%b4Sb*Ev74FQ_O7&kIm11Agf(C3f6@(5sIP^k}^YWdzq&db4Z|(+Jtj-{{ z)XV5CJDyc{^5M@5wAh}WnG0ajt!s0#IB{oIhRBQIh*E2g&T!(uqwI%@0R{l?whbtG zEcmH+#te&Wikwp?SnB}KE21S8EX%;@)txyGBUOU>YWE8gQn0viBI%En!N5!9>NO9s zYR(#x;6-a5%-nS80G5wOoG1IpjHE*RAAe2!4$;J~f;@ZT4tC=Q97#Ls#Tu)#M*3a* zE=>kU7b~#`3RF5kL_1Af^rt={N1=5N6H@eh9+lE6jv|apd}(yd&8y%49zK^k zq@C9AV~j>z;^D`>we_@$q#aq@CZMNWT#w)Qr`=5c0og1|rjF%0A0>C|-;{f+3zr+| z-ICLP**kr7D~@8lYHXJjG7aZqIyw^%YmCD>jz>+{f0cs&1f&V0w@-Q1Iy`8z?iexW&Bcc`OK zJ4UQ$i%?)w->xXQKz+NV@jQ|>Z@`6Di+(mz7*f35#Z1GfWgXw*%*T!1G>Gd$G=W=9ni_B&<285GhoW65X zrsKbO_y;sYNmnb(zPd33V`SjVYWZADmt3k&9B`1~xKsKEB>Q%Cn|dM2OZC&M`9)Fx zDa@8Y(6OoKdJvaF&D2x(*2K&aldnz7`wY8bowl8`zDBo zgtVR|LWpGvR|H3is%IQJMTckoNA~i#Or83Ii+47}q?66HB?9})00#(ZX{1TxNErR1 ztcA=^M=r{Yh`BJXuJLGu<8V;D>>lKa5O)^2+GgggVY%&m;T3EBJ6Z^_%h7wG%z?0> z$0gmf=Pz=dqCe+9j31+yoMMcqi+$)Xo)~^1ns8f!_UMH1mWCm1gP}O`%>TbZc=(OC zhULH8DvZPS0)$y2InfK^p0#2z$$ghG{crA;{O6SNy9=#!w3E)_wXpDkU$4?n-@a?c zJIH@9JbGsI_0Y$UMbd7h`0Q`2(Q%U*Rp{vweQG>W)(&aFxRRir;FD3@KBxqc3cF)|@Klm&k zoJU`imihZbrC=U$T4O;sf*Zhm1;^iOE5-a^J$jYy~3*fNkD6v6*B^Pr+;P>&d?+3){L-vWlG%`2yB!EX<1Y~W&aD6Wa#shPM7+vr6TC+zBNmG;#=?QK!xr#yjjAdnKZ3E8CY0@AerHAv#bZOzMgE`XQw*41bH zUtN7Qc&2vm1ucaqi?vHBnG|^StF{Pu_QH|+*ol-;{XBl*E8*N%meom%<-=X#+``)6 zq6#Uzu_Djedi+?l@}8nUtEEDrm}|1DBurq>UY?k~Rtsppw$`Ivr9m-`yZ2hu7zT`_ zUA@!l3j;l6)eBt8!#1aN406Sx=4|>B*fz1DYZ$*k>865Y!RE~C=uM4 zO9kn^z@ndud*I!btM-Se?nvT1yB(wt>|g}RkV?BhGGYtev0x+r#qahMXHYN+Z@4pEIuj?@nn z&k|2_&z5$brDY7SG&e8p>b29L6TpqogGPeXWlx!A{O91!AoR8>h?=d+0qt+#!x62c zLq90)oaXUdOG{5ik3KnB!kLp%IBY*p;n$Q%o%2ml5rC%Tc^Kv@w1u53w=IVvkr_~! z5$ed5Eul8CRyAF)n_@jI!X~VPkx5oo79J-1Soy!yHTO%dot}$uc~g#^Xmvs^Jrztn z@4DFhlLQy)!!XEp8w59>d>&NUdYPYiX>%I{r+2d&pullj>-)9ew>ZPW_%EHXH>X->s*Zp|QZ+yx^SyoEmc5!e%fvck;XGxUTfCGc{QMVP(NSF^ zxo%y>I7c6FQ15Ru-m$7`bXf&pm$A!IX}N)}QNGDPt{w#{1sbk%ij^i4w>zprR4DLv zB?dLbzxL!G@hQ`0!Um|*A1^>OIN@p-BdA~%&|18 z%4=KkHL7P3J(AOpEAx4Qgj=p}2K)?dl@AJ72MfxbwA;?r^S4+;*qxb$a_COg)lGh)u@5LIK$l> z?~h4`lAP^oB4tC!CG8uV&FuT&f{Wk#j92#XHkIW1NcL9Z4FjY_Kvo7sDJvpRL5(!W zG|KtwxJ(;*j$9a9`B8X-4trEbqC$K*r^^(~f_vH)W0?bS>+zpmBSPX`9L?6J3*C;< zX2gq#?0cDkjV5Nbi9a>s=K%Ond1|M_3Mn~ODzzI7_=B;`Ux%G1<~5A+>$X8^ZP<(l zWO5f>77}ZZp%<^B9Ws_oG;$oq;pbi0Ddhp2iQe(XvIta7zH__*piUR;RW9%&^8 zu&2N-E`fMEhe3Mz;R!}y%J(h5nR0l_P%z_TIKB1ktISUWh=u2^G{UHKEdjx-tU<4* z9leaJ2aN-q5yi+^A=zEog7A2nuI3Rg75RLFAX)=resgB#A zI9IHK2e=373Gduo%CTv7Rjh40bA7y+-{)6*nN$%qj5ylc?mAXzRYv#*=MmcX`MLwj zal^pi+0Ab*0On-e^nIxf-uV2geNJOn=7_JA=%&7_{j9!yXRO1k7{WbyEh~a`Ei{cg z<-joYGri2N|1-Z@O@w17mUHAp&@%0+G|?a>GrITYC>L->SY4gdCuI$^eBF%MU%xao z8O{u#g=_=QDBk+IHFUt@PP7viwE3c*yJ_dDX2OoSy@m`JybluaptI5c82d17I#Hq~ zdU*TGPbEQ|UjME#{@WjS%jU+~^a8#$OYh#J-!-)7zy6-tl#0!0`9R>mQ!aX}70=3l zNXRmtJKF2_L($)W#Doc_#Z49hF=Vyi7 zZgKSa(KH{S&zl`RIv;uZK0+DQP^0C$Fs91VMuEeyQ zz5;p(yoji~My6Q>W~{+*Z-XRqO5Uo=4AJ&`I?Cr{jW88MFWT*?x(UZ}XW946+Vj@r zYAG>lYA1|E#fF1G50muPf4xA2Y5~@K7}I8k9V3N9@frtd&GRRLwYy4eLR%=)PUbhp zZQmii^;Qti)X=r38dhCxCTo>?@g`*#BU3wHt+fHpl1x+f_YlRi^3FZEh-81SozVWV zg|}|hPXPyaQb3gS=W*$D<7;!8L$OoR8qCa9^320BSCCZfq-c=z8lzXShLN(%C%LY% zNw#ljnf*B$&~~l1KfsQxJU{l*v74DGp){|p(>WCy+1X@p&{3%yVdYNUQjV6y6tm=X z@!Yq}FJ}F<$}%cIN*Yv1MRQ2y6CH@X-q?43@F;sl;{6OB=vt0aP>fuT)i)RVOfoE# z$q}v3axeKrN1`H=MNO9kz^(Mb)c;Js3|Ac-v~avC^2-1n{f@}J1IwFFbZEebUKJ?D z*+V)E;ZdkxO`205&+2{MsmJ`+9omkodD8-y=F!5tK=Rq^$~}h71`nN zb%8tLJ??$&ZH?Q#NmiLyLXZ1{3V(_3oO_nqP99lK)MfeCi0XJW6(}o$0@naahFR+9 z)gbBFR%_*QP@U;mh>f2vK#|R_1zs10^V|m>I>QmzzwaC+x9wVZ!hK*`iR<5S!nL>8Ub`eA@Tf>MZD-+}qeF#E#3Z zWX?tMOMG5~TGb(+pp5|#ObUqoeSIiRdfQyi@bD<}*BRu5myWBz7GRS{^K|KQ@5OC&h5ts`$vq5K#b6{cwmDt9ze1x5>tEtX6$ki0MeT=b>i}N;fC{1J-<5+ z%_|G%9+r+=N13OmJM#A1n*=4s?bBQGH9F_XF#<4aRB-W2-p5u+l=EjCaw9)7zn!Ne z+9-s%)eGv%W4>%{WM(#1xSadBp>jOZ?15}Y4rcxj%sG!3fv2>Vl{NWI#()`MiE*cR zwPq~&qbvd`zHH#|WA_Jz>XdkhpZ|`G5CpWs+qS?O`f<@9Ip6z~>9Bk5fu~Cgyi)r@ z`zW9mfcqf*w5YY(=+|6kmXgns_v$n2>4SYaV}Dc-xE-lA!Bi|r!QvxmuuArw{=$XE zL=mn7gHuAuhWICPIaa-s#UPNirKJxDIO1ZEKyn?7N6TmMA0Yd=*OKLW$|{cP=VTTo zqJjtUpOv4(uC4HBQYsZ|WuJ~MchJ9cj*Fw`%;J|zJ7Pagyw2#hee~WWT&-+07IYu3 ztV)7De{%8+)9hz*&fmq#NJxRo6I&^i$4q9t@dAtAIpJ57MSr zTV9;;*>8IdvkLfj#UHbNvzCsQ#t8p>!8p_!tC5@bkZX>Mt(sw!PWEwQ1j*GOItPYp)3D2e^mzoCp`5yzW&oDfbxNM%Vt z918V79qDl-)+W`emS}gAX%LfPh=XK-7`!m-voNy%ito8YV0bb0_noIP0c_#dG#|@- zgU+cg2U>=lb|L4b*FXZEz`+uI^HP&(1lPYqmLW`u|AZ`$1sv@D3c#bQH=yXKB)Pf5 zHM6&nZ$rLx8+v-WsTCojzs4Dx*G#HdAe(KIUwP%oeYe&CTu_ zRcmbD6VuS0Y3_G@OAYGei=JhhNy>HoeJ6_-;^tr84T=^%(iu5VTrAF$-PDP*>dvGi zSrAPzFKq+>B1(!WW0p+FLYoXW*%H~sBYM+6?~oYxO9^iRN>*)k`|oet7fgk0r-7{J zA&~>mHhjCs+oI{I_QSiK5F*iCqQkH~novXlR4Vnb(ephf#Pp=#bjBj6EEFvkxLAL@ zbTz7w^)~h@#&kOP!~-%gf14F;E-b;M;D(zpE$MvOBp|r%GHwpcJ&*<0wCW7+LR-~> zL%(;6+Z+?`?e9ZAzr`v=d*o~mjLr1enKd-jjf|=FCILhD)nt>$_FW(jw&S>1a(Tf) z0U*4%ArmZBS$i?D&g9Y0l72tOYto37>Spel!s3lttZ59QIK!|#GHcE5cvV1Y(a2}K zb@am`nS3a%mcP84UMOdxT<<#dy${g8@7&F*b!q5yY3N0QJN(o~%RPVoeP?TiNGPcm zEC75h0IOz*C>zX(KlBKYA^sT-H$#uo=vB$)QPM7 zL94BL?QRV)SX4zVJUrT2%9(SiJ~Xj>q4KxvI_>PKje88M@W6dUEL3XKP^KZ$nHCp! zvISgG&dCx-K6WAR0_B9Ve>xC|pxV*ENWoj7mFNfW;oo;I=86BlvpDznoqDau&lv#P z(DAc*5h=y9PU5GSeyQz^RjvgjLADhXWfa z-14*{JPb#-rLrvlKL(Ls_u>D6f9~e1r^k*SzLf2nnQU;??Mm;H z`DwOdkpTa6$$k$^(>VptoA2>)s`S3`HfYp0oF1g?_rNs-m?3>Z-*0%AJ$$QEJw~t< zoUZkk_A^{XYc8It&Etf{BKxa#7)at;6OO%&msUd9~B;eiVPb z^INDpuPL`_n`T#T{SQ1*z@{`h%_^T-S;Y_0#X3S54Jx(oYQze0{`= zV9SfswbX$}#ke~uS=QAvmMNTQZe)i)`>>RuWbiyPa6Zy5eF51?Ar%IdjIL+0Bg zmSj5dw3V%5hSbCu_k5I`ASU?eA)(n~;KyoW(hWUPg)BefBQ)3B`gW-|9WSMG{|8)Y zbB#6*--Ap0KBYW^!oG!t%XRr>%2Wd%{|SFyAT%UuS{=Vc{r8=Lo=9Ns0N`Qox1Ycc zSp#^aUIdPJZg>J|+0dy#Pb%DvF2nj{`%l~r`o>}rgLy(QAB(o%sGg!9omiHDWnu7b z2W6q8G3KeXC-(Yr+@qG0=&v6f}QYY=}@53L1%I;L9IIIi+%Y< ztwuy)DlRgqY-f)9w83~`Km_Mzb-vS$+F@Px)C_CXY)n|@RBj0yJAb338?NXCu)`ak zO;7rgP3ER?0FfEQKjpBZL!3sselQs7{Zw#~JAG-h(?Yk%*Rp1R-}FGH6vR`;u+eP- z_XXs33P{}lK5U!nR1n6*mrzkyAulO@6Qy%7=BP)fR@Z}2z9aPH5D^g5+5lug{0J0w zxNqAxFJxLN{Z@ZX>g|rJrEt9H-SG+($Hg;Ypj|M6K+5IQR@+x8A+Xt?I>WIL@2BoY zzrMik0)kg2!v6r5cjHvHbW)uLG!-do<&1>t{bRQM{t(Td7bNL zK|6mSwxiX>Ln` z+t9+os)#Bn9&V3CZCQKbCHa`3Iv~X?OFQS0T9B-)0r9idC%BSUBb?Eoj*cjL2w*@~ zT@wtf*jtrp!LeXDGFdsnE;C}{Tt-GAS;pUmz5#E;e~x>)H+A!!q`}ukq5rStGWcNe zzm&^?t_=UKmRrYe{;8IG=|$e$>#?MOGAW3Pnp)ZHKgUNVC@=T0YsGK#AJp};bn7*# zZ6MW6&BMCw`$|;B=RE6_zn9vCIb>|xEJYM#^G~U_b%q}2O$6#Y)2|5#$x|}Xw^l%i z2*5d1GaD+Gb=+y{*Fu>_fFsm!jt|R+C4F$!@G~9rSsF1ee8SwwAwDqJmc*C`_AL@5|df!xAOZH39YB@zExdAv$HJkc&!7k zc6N!1;uyY&@ChiKr=D00t@0A7Q3S$Gt~=S2zMj9gHkyANccT&ESIuxv+g|@lix)){cmy=KP)^~i-D1VNfc*O5js;51msuB%oV-rTmWK{rKIqT9Y`{+ z+8>edmt0fw?1NnJves!YOjqn*MS^7|wUM)pzrl{E_65t3^)HS^9*sxW?kgr|zu6BV zsZaOOH=H;*mmhGJ-NwJ#vd$IydV=i#!jvB~for(n)k_ z+llVd4pV7&e*yeBS~9k^H|;dM1yfKgyxDG5?DFLd5w{83O%_|^AKyT&=0d|pR5c21 zV#1>;DHP2BhCDtwlIv#DW7UPk4B!{{RIScvjpjQfkP0@KbznIxr~J<7Y?XMi~h z9dVQjdVQosx2_HkYcdgvTcr^z9XBZvKDfjP=u$&%kYN!{h`Hm+9ziqeqfW-ttD^}t z&~Me$1-@?(iUrt6FHqMj^he^&EyFjBU4dt~Tk-dC|6^Hsl<7nY(Ytw^%~8R*l+T!| zW`tp}a}x2M)bCVLEJ}kdyjnX7$rQ2GL>~2Qj6bcwF^*T%AvVJ%t=Uk&ubcRNo+TGt zwY1L8r(E_ShV4g>Z%bQpaG``jHAH<91+F6v>0Yq9&iQg(VQqb5abuQxId#1ekm!Ot zn5myNJT=pOXbEtle>r;@{IAD-{5{k|9M-J8^_F864553Ks3$}rT2t<}SvfUnbv}9; zR)U!(F;k84AM^->exPGnS4PEm6@Clsm z{C(#Vau>LnzZeGQhN6Lcf8UuaIV=q%HC4);CQ1t(hu!UOlS*2v1+|*07wsA4k@rpn z4`O99)%-k!EXy6V(;!7Q19=OB1Noz^10d?9hlMs<;n~vQBk3M^gTva0I?mJjTHkux zS*lf?>om6-~FNN^?c6juAF`$tjZJtTX^1AjmVtlT$ym~lc5o;w;@?O zr7pt0K-5~JXjXx(x%#YvcmcaCVv`0_$WyTm-^Nk9A002o)H*Ed6^!;_H=f=3ou$op zzk0UD-aqSTcTR?gd z=NH70GU3f}yET!f9b6!5X#-#?W8Z(eB>ig?hfEpJdyl_f$vVAo)PL0}0D`;N?bJ32 z)xUhc!XQ3Wu4QAeKpkrgG9Vi-%GDly@-ovYzy&!Y2MSBeJIXT+Evh$#58$=v1Z&>U z!p!KFPF}{BP~r0&fH(U7LM6R_kd{liL8P%?L6n6H%?-m?=9}RIKlvUwxYkH#W#9HK z&H?G(@goukj7xvlsq$TD_HS?qmOrvHc_~6UOU;JiFJCQKvO3WOp@kf*C#d)|Lb=nK&c)c z{QbiA)Z)4%>;|SA-8*3V-0`G!Lw2>*+xE;d;z|7k+u6x>5&rPm)j|Y!Lkeod%T$4%6D!5(x-pi?)9&+Jjb|cPvQB_F5W<7F{9DXRd zk(?laRW{6*%l+L!eK9)>b;VgUTA%m5y1S(7JgvT2SBghJsukWaTYGBQ)|$6mf9}y? zA|dCSU~x*tgF@SuU`3o;T7rmy%E*RarmQq7n(#R%-(B0Z{%N$VoO6^cP^?I48DWYY z&7RaBsfBhW-zN>XWcFC+Z zZJGpbV_P5`vnJXHsxPd*I(AL!?T{`}t^R!{uB1+~B&wo< zu=IYm(qFeHz3?0_885MxVn6w~P}^q6gr8@MTKqaAqz1}K1f`pj)og%x8lp?1;^XTehkU>})YtQ$4@;_&^U zT6s-8qf^-UBxOqwJj-&WaX@9ZmTEfF`2wR11%yYFk%}O|M9=D6hQzQChvt)SfqW z%DCNgs3c_HG^R3U*aC%@XvTh2%MR}qkbZEjem-Aa*xZ9(+uzr9`7q<@Gd1m2I{6*tRu->xWvpuUIbb1y-F2qSb8Mbw9`Wh%V*O|TKic3VG z9GDHvN)U{?nQVDi)j)cv!sBh`bV87?PoA_m+E)gM^nBkamJ31OpuJ~iJ1n;S_#^T6 z<|azJTHK2hVMVdO#YITgU-j~xeriVdp8L*wnl^Lu_T=xY6?G=Y9=p*@3n^z*71QhKo+gEoqGmPLV^-YUTa8-Ec%%f`RFXD7ait{AZ%m1+ zSY~yY2ycWHZE5Yu+Fe_ZU_LfA*X>p_^{yB8I3Vqy$7TY-OZ-+f$*^ zC+$9_c~^~8PFL--8u*TqXB$Atb3eBYu&a!Gug_j!tv@tbhx$byx?hs66xiIZP_muB z0K6=o?(Lp(moFdstYsteCJs@n%Gj*&j%%f6=AGWwwlP9#!5ykF3|M z6vZV)GGc|vib!m2?0Mw~RCN@1gUOg&x>0eIaVq3I04%}MYGS9+qHMo?q&xvNW5 z3gt0kQfNt&&P;1<3OfXZ%X955FCA(gI~uAv z&-rZAFlbtV(}G(jepIKTr8>e|AtF%`D>LL9e@I~tuh-TiuGT)QId^6s#E2gWWA$N% zo`&?RX)>A{D>XA;;ujlI^u1FwmF;_GUZ!c^j==$BBb8gvlRA-$xQogY{|)=UItMP} z>ioCcer8-{bb?RPQ@m|Pf7Vl5b=OVXeLmyBB?sAli^ArrsfRd4o?q14_k`gDkPzNz zxF>HnaX}e7;4PTLaXAsznL3VtnQE&V)#F)-ql7#6vs#;W64r9NrqwVhWd4YZ1#jf6 zX!WItfX^yhM}iiXdKq%;&n9}ccO?UbYs@cYs5e@%%gPob?SHeMmf zrz%7Hu(TLHq55KD8LDZcrPdUDR-mL7@|?$|4&HpMe`JodpoP)03RzIeB8Q-~+5#`?gYQ7jCVn*e0T{F>ESF`;5d!%AvUU zX5o@lM3fL5GySZ@p`jcc!sAhUDCog3+v|}EAho9*!(m_RAxu?CGWY#wO(X{mm}RZj zl8cNZoi3L@vg+g%BuKgaH0igS=YsN|uwLtEH4~HO!sw(4+mbk41+lu+`qeW1O zghPhAYtD_dMuza>XKJd|8E^qj?DskTQaUPsPW|+Ku;7lF0;+fG_i2Uva>b^4x}K3`oJKV; zGlVBDyg(LmBz-ONbl5vMJVxSxh$8Q7oB+S^zsy;azx=PH|fHr zxJ|iEV~egcdvx@Cs8QDt)jGDQ?l}|CW>a;7S{0A+?n3#%QZUoG3XFK+q3=g%*lW(*j zMEh+tQ^s4pE}I{WY3!6A^3e#TlSvdx{+YQ}yGQ(hIL*a1g3 z$7vs_n5|{=Cy7l=6EvR;&)~Z~gR6yTfaQy1IU2U9<{IjSiOw~pPm7|WT_MKIO{l?= z57W*Zn(AF4ptOM*6i(16iZgijcJKAYe0v3grgB&-c1%IM{Pt+0;VfW&e?=PjO*9{G1o~TUfaW&T<(a8{G-bykKF%F ztI4J9QA$o{75x(Xf$bOlnn)@g#SSwp+EBUFKGaz3cbN1e<|rT;`V+Q1v^+y7c|nqT z_ZbptkCxxIC}I#)N}8^8G?>-*>$=HulL{L>-A!!uRSmWx<+0gU;UA#AH&C{!)#kj+ z685R^bxd-)e z$-gEu3pX3$n=Lp)j@$oC*Qjd`E^n<98*6=}c-X`og-*=lA@uPkSzU!th%~*(kn~zQ zV!sgvk4-CB8RI=RHh=$meBJHQ@4g@PFWZ=oPh%lT)b4((f^0d1QEM%jzOh&}4o#Kh zkD6pj^fXz0vjaxyo=lH|vEb^%}X5(6$>7f-ISr&={CMNaz}?tE?b6}V$r}3<*t0Sa&(jdldsZC5#q)Lzx?wl6M!=dS|GWKSWLqJMB zu`y;^qF+A}Ea32^oawtXkEt>i)C4mL8LEc_It@1LOkFlM6&w8}S<14H7g;W)ZBc%i0|0C?_Bgl1WS>c;sGQSjt4fc;R~0c^&7I z?n&rhz3l-(XgEB=4)#$63Y6!EKRWqbmfwW3EvrdeXdc)VBd$|iQEFY3dbrw9#ADiL zc$PFMK(&wy8-AAO2v&6s0y^e_9h-%AA%(&@*O_ZaTfsy``wBsw+R*P$*o++{y)Ksf zYB&oE&qK;7nFcuEEb;v@4l=j|lY8tHiLTm{>D7V@WV>cjOCeN8wtHoHLMlT9$xn@4 zaBZu8{jHHZMSfLM5Os2TZ&Brs|7oiS?D)5$c`whyc?E^ERKDO9+03>ce zpWz}QS()0Hd?hc~Em5tD$Z(2%km)FvW?nYlabNTw1L1!s#ZpK5d-ylc z#v8`QXh^wAQ{gJGX$YA(swW(Z!gK%iXkgHNsfQ!{sz?xK=kLG1UZRev*mzUIBWFmxjIUVknWYxCGW9TP zepYo~Q^`5X)yb^9N{`bkp4iGjy=oEr(`aN$t<#tI981N<*B_Fm8_)#Qd5fIHkO#?05MMv+8&hq7W-6zKLB)8P zEJW0fk+~Jz9zC@M9;=y7)r;rLcPkl^<{J%LKOEb4I<4jxw+Of_O#Z~#+2XlpLYmp1 ztO#H-3cGEXD@c?QVCMqsCPe2VA07KGt@5o91fJP!95n*^%KkoeM$@KW?#`m7pmoGgdOx3!p-o||E+p?50 zHM_4#Ha)W3>on;x4UWbhGwc=^}=fb;kEN^b#z!TdaP=6O|y z1g7R@jjSw}f>7fl=EV_SA+Vf`5;0>@ySPB%4bbI7^xHMjq^NugkA|4CHXcVeLuA>T zb%ha&l`m5_-zvByQt@?`lDp09K?uPgxzE+!SP&tcJot<`jEZeeq-$7svX5$9iA8;I zF^4+ded!*Rg>!R=s}aCioBL|WfE^<~twHr+{m%b?Lfz)l56arMNrBPN_o$A1THV3W_LE4m{m|X$A66;__SG;&1^xR5 z&o)(`D49eIP{;yAz&HjHdR}Nbj!MT^i_VoTPJnG|Ld(>yaUPF=2<$fc$ za=@@1fJ#9T-Jes~4WvUa#uyshI&Ihd6@nU>AK zJH_BOl56xA#>T3cNJxuZwyOusR4|{iyGoR^o10Z%BfSf&G@O&Y|0qJax5-WpJz++j z7B4ptvQ6><+Y|Z94UirE^VxI`*?816p*vrCX0~ES02~UVGGFQ(K(H~Ta@oFf*Zwjc z@9KDI`Yk1SW$TdAMJ%nb(8>})nyqM?3y6+2oAR{?>-YzLs% z_Ei9~79@NMC0{Q?t<8c!*_@;mvjSsi;P7~GXXUE?0ZPlfTU3jB%^on)c%ZMT^JET9 zGsK#u(2bjih=KZ&Ok(0qjM{)rbR4}{#_a;ScFJ2-he~_guHnl=_e1xSHT{o@k_j)1 znQP+1P}*N=nRxs|Bzs7UH%qkC8or;Y6E#=RRLp(7%^^UUe3!WKv^5Q{rWxj*nN}cE z(Kc*@7U*y&LJs41TksLYs`v*qTs!*Ko4)aUKJRWs zZN1O}T-MdO5oHweXJ#j?&={W z+|6yWE#xe84#$vE7cy9&e%yZX{QJ1|IAnLyWQQ*X%C2u^ElA5tA5;ir_zvFKLOj(o zm9H8CJ7YF(*vqe^zPnzdu9Ee3;iqQtr#hFYHng{)6RpqeAGZ(nkVEv^D43?$G5>sj z^Mzk%1+M7cwI=yG8mBg6QMPE`Yth?3|80rjsNb^v9k9*Tek51Su=VV;-Jum=O{^8r z!S(zO?%7%%oRp>-c|TCKOgyA0){LRcfblt>(QImGA=iY_RvEd4>4^1qPoD1h+ znG7&MAvD~H&{vuk;=aLUc(eLRD%KD*4<+?6nZH zmYS=~ja8mrHU5c%K@mMua_mLoxt`~GMCoko1+c5v@l?K>#L#{$D_roofv>W5T=ZpT zZLRb&5lqOmMMZwPp>mcJ5D=9E+Ya z*8o=dT&6KbDB?$sajj{DW5|iwr#70%71yQlI1*xdnXu%Lz6N4pEs`~kK#9*mLoPQm zLb}J(WGY8p4olO`A<`7K9lnE0SG=*I7Gf^!lcZoH1?ZJd=zE^Vetx5>iG!yDJ#w{E z37A8H3=y(K;?36zl^kPNB(ksYJ-Xv2v7ykg+^n!D$njn!y;#p-hRMq+|KJLg>Ls?(JiZ}}d zEv-6DolW2NdG|OYan-y9YwJBL<-lm6nnP}RR^UcMK5$*dtj6cZxY!ii!q}i{1dp%` z0bg!R(cb-#uvLatQ0y%aW4(e;9`y8=Du{fx;q>3Bf~6Jm45_3yU!r3MPGG0`*L&?8 zyMY`xEaw_~d^|U&)emw;&a`g=Hza2O;tfWPI;tY(0Cy2RQL*T-Kn3r$8&+{Evs;y> zHT$sR*$iwZ6>J*UCevk{MAz_|RjiJf7PY|W5fb2j?swu-5h`z4D1MWUr-LDQ5ie>F zY;zM9xm_fSQu=U|jz)74?iRt|7_{3!fj6=wiVX!-z##2Yk|nNL^?xqYKlNYGrIq--JUIWkm!J$w9~ff=qy3G_0=e?tScz zMZHaP8>($Q@4S9l&1tA2f=PF5SdDved)A_*W9CVlmgKV-0v?VFZkTG(^-k z!(x3?yE3JaqsIc26n~y4MboS>IXBMeIXpGQqF0a5m9Y6&0%u^B0pp>NUpIMeV#i+O)CT{k*6q{lFxWllf!JX9<}x~N!ZnQ z?Aoih6B#I8sM%t(ZKLdbV83|$^Ei_8tj>WEx^B6q7$e4>Y_GBCl(>jkHdFc$!DGwm zZLOApcP-iBM#GYe^MWkFo!BDK7Ba9`!F&MffScOjGnXQ0jp2KAL)r8H)NUa5;mP`$dG<W3n+>P(9XQ`CY*)X>dq4X#GJPU+ih=}#3uJv5xpij+oq1? z``S@SFn~uWNY>K}d;Y8LWS~w%T~pt_=~A{OZ2ziJVAQ#;FQs_1+(LsqRAB$8;;qZJgz;XTj)3glULI(gnocfIiTK|FrkzKmxqqk0L!G;_#X)c|G_TV}{;_#F$E314A-#DUX}1G0@2 z24*Y-bj@eOOSbnispR_*xDbfayZ}745Zx=bYW(4;f7wO`{RQ z;#v|vd5-U8xbDMBo%6W}3lNs73m#33k>=LZgYsysf8|^G>j*kAclO7M@#bmZ8-3l$ zHwJv*S-luMgcA8U|M3D_60~b!(u|rWQzgX2#UjYJ|Kx3CVb#GUZr|pzM~Sz>2yqX-vWF6CJnd6J{&F{e;32!MTeO zQ7<+I=5yUf@gp=h-=N3^te$A!gyX#N+3N$(zFxa?6M=wc^MC|XK8kOrW|iQ}gJb1T z5hu?Q&mVJErm>l2-LljX;X4UGypwdVY`ENe$dck!htgFKgcE%WVNuQwR*lIOKdoRM zkv`xKR;YzZL+aH94zRLnJL(i#)tZb*Kqkt2gv}w2{`I=8sx>d5YE@;$3H&O+l5`1( zGx<=pFRh-LgHDbe^<{C)V52Cnh5+a;Y9ydRA~vjDM>itT2UFB43Sj!(=MtZgBE zU+t=cKBD#0^o1`}s>frup6X=Q5jycoGMPDpzMTB2^5bz!;SwrL?zk|9h#_Uoxt{E! zfi8epVNqg=SQ(N^EfP?r9C2^!~Rf(-5{}*#_9o5#>um5(}Tc8v# zzHtHtiaYEU3dM^Amlk)5L$JNu;#OP(#UVg&f>Vk^&=4#HclY4EtKIvY_dR3WbI%yR zdw=)d{6R7jk}6Y@e7SRAdU zU3VdsAkpb+ftV)m1HY#noLWkQHa?)OF`shuQ-6H!%2o;zj^ZRQZ9-ZS z=N{Gu4aYHG=V(MKN(N-EO3a!rqsh>+_FsPw7S@~7v^b>aMps%dVga5!!H?N{N( zpIitK#QK>OiH3Nu=tVIMD#h`}1#+jMJCT|TN0ed*p;18%K1QMZqn@i2*=;3{dg@k5 z>IoO@^cr&byPYy!Qi||2&I+R%T^gx%Hi`J7 zlvrgB&mHRQbSy=gVMUn-6a94eKyV~UBQKF=#ZJVo6Djsdzq9Io36%B4Ws^|rhXN7b z&~@_`aOX8%sX4K{L3tLaQ6~(KNLp!f^Ado?6d!E~#`U+Fi7S zg%samJI>2tbOI;`bFkyJ@32t%P{R-6j~ug>wHlrH7GXbV-AJiQuaXS)(wvWUJ(iE8 zO^m!aaJvxHQ2uB2^nY>pTUkJI8QPBd7`a1NOV^_(_@DuK1K~WNFtiC}Gr8Z~wW2o( zmxwQ|$zvCgS9l&#pTRWT%PPaN5=BV4g=(b>AolB-46LK*x_Da0aHqe@XNh1pUzdqRe%AeyN4Y4kTr z>Ge`N-%M@eSxhOD=)JU&x@@&*g?d?p+AfKCsjM1Z@)hk&fE*Yomzv)GYQ5a^zmvu7 zu(dpR&Da=u^MvijRWpJ!!(ThvQ6lzl3YmcISX@e38X+nTh;d)+*kf~?ck>AFir+fD zzH5zqUd!=tHTT?$ZLp@FxkgfJP50`dgR$yjCS7+M%#TCRM_fX`=?xOwJYBJ2>t?B> zGvl?_??+^srP}8%i*cxx%i~g%d<6Pw9sCv&+?)QulOU5ADOL-Ht-^JgRUn<-_B6E|ZwZWHYV*@PFheqyangV=xP55CPGaWBZo{x>mjaiQ9 z>mNrX&S;jgWorQ#|iY<%=aR4Gc|AvpT0CZ;=r;knO!eR-9Ox_^nTopop~mauQ4F&)Py;ax}0=Q9FNwc z!C(zyIc51C9-GbmD+k9g9eQ5E{^D~08h-63y&iDXzgL?UT6==OaX?5xS6lcVK*gAQ z6`if~v^eYI6(N(j&aF~#A1eIa{PYW~v`*Yq2M3I+D1H4n^lxjZu-d3wXV06PnU&E0 z$ymg_Tai}i%__{hc@@;Wn*S~H5xRm=Ac$PG`iQ&QyqXK|C%uFTpp1FLfGz?BWX#N@ zxmCjKJ^w^R^^^VWWcVI2-fOC$i)6>~3Ed2QrpIqLRq=etHR)xkQBv#!e3O1G^TraT z1sZ}S{jy1;ma^VDAeShs=v9BR!tco^FsN2{hLyR)W`yMn?tP!{y)KE0POEH?mH(n( zZUL^zw|kc7Rv3WB-#??$k+jOSOwWYRq}3ft%W4_)3<%`N61zqL`Oiq?P(>Xf&q|$? zetL^>Iw;b$wg|&7ZW-`hKw8+lG4-ga7g{EqRt9OPkw@qM!w3@r-i9pV^HSceh@9Av zkaBEstc)x7|89@lZHq)`}V#Ol*LR=UtxSyl7qZIsqENzqekv?^lJO^yfF z3#5YvT)d*8k^FG>P>gix2({o~Pe$;rS-nAer%U=NB&C2&c|B6o!_3@GonF7Rr4*or zxg0gZyZ7mqJ_s?IA?0&t^mSLL=`-5RQFr@a@5=ZQP#i~_x^WpuffiukJa3-NBMA~- zeizG?w75uT{)i>9%?N*l+J-GOj#hj&!1bKYx>r*LW>b}1rAiJ9`TinOdo$z$`phQB z(7KCFM|71a$sx)}{NCW#dZYLW5qrh3b88#EMMZ_g+}y%yfx-yDn$&Yl>(pKs7;&BI zGzsI#F6?5J<|3gsGgJ-r_i)a5l)4}aJFJJXVll3tJ8tw%-8;H~NXje_+w0wj%@Z49 zQjTdQHQNuy9$n|hP*{3qXh5gew3N~MO_q6MT=H2$3z;MlKxoRR8_#xSTnx6_`B|}O zTmjxeKFn2}F257u)%(jHebZWMaPB zVsS#jczW{*#LFs;MZ$zOVcCu;a;PqFc!*E4k-}o(&OwXF|m#ZxU z)<|Djr4~@uZ1)$6o@Q1f01&Y2s>ti#Mkk_G0($=FD2!GV*YB2;pXwK?Y{UC)yc%MO!IMQ-$Bc1BWZnOcsZ=X zQnY2J0PPfnJ#gVbNr^HHJwM1DMTO(OR5F7U1#=8CjF(0_vh7VmQp@+jv`}7jRmJLc zbnu48bZb9mi+!%>=9>~`XC=1XXz3jnUj#J&Z6cAU?!vLzO!=sr0#&?`=%be|Sp$T! zc^%9ZPt50CzcfZlHx}#Y=&Ww;!z*!!rP6}AG>v;r(mHmJ$mOh_XtPDO8q3Mbs`nzM z)X6iX{bfE0E*C|&-He?l{;YdwX)eF|I@UaRI`@|+b+jkT@`h^@B$GS(?*47x#r)~! zqFE!=#6O}e1RSYIeTx?5zct+pvV-P#_LUAm1(4mPBO?CcSWyWx8vj7|D+OtQ{{Wzg ztW0hy!ssVjj{^Yw!-3xwg~>2LfKmYpz-?Nhv4u{nAUv0(x>(nSV5=9K>`(rj7d225 zjaAgp=D!G9Xpx5(qLMIW_&yQNttXtdn=@GKNEvPOm%19Og^rER+_FUC3EJY5g6Y`S zjkr;>6<)iBZ;nxl z!D2tv!9ja&?(NSBS83^qK15zeFbV4y)9yn#vZc!u^aa7yR=%OKR|aua9ulqdm4kyJ z<^_E|7xcV9P%*d4ne#)q)A{BlQ}5$?6Ah|2$8WAB#KD*44Oh3l2G8~m`eCw;_3s1RPDgr;p%<9v5#YxJ}k`+xJ;9EzCwvWk3anf{(h0Mx)C(!Bp=9{O=QFj|+#ad4L?!3MmLV^N7jP0(&&lzU*+M+@U6z&~iZV0#*VdJ>ds}DGYk9ie-fC+*HxrGV5feqv zZ=bUPV5+UU=+hv|v)6S!=QwaCK-dX%ik)th7L&m96jz@r7E->sJ*fAtBYs_ko2?9zHk6$OQG~v?pboL$Q-}glV0_I`j2i3{@G1?GL;Au1^rX7Yi8G2CSO7U6&fYo$K6U#&ZLt$#n#>((X>V& zS2ofhSerj6eXyRfOM$}+ID7or^X_>+P`C_M zn$0~GusU?TiTAC#qBiz-)*$#aL=RF!&?zQTN*jFZf@4aHU+|bTX?K4>^^>>yPCB+} zXeh3?=(WCqx)$d{*_0El7WHin-@IA1Nj)>{l>QE+upCKfX0HWK%%eb-AjtCU$Wlv; z-#4`$8kx5=9ae1)YV5IbaRMVxINl7MD*BDFu8*N^zv!mu^MzPdlUxldkuL+L?1qHljioE;M9ynY?sp~ zI{MMJZo6tD+Cwx7=>?CoAv$rZG$$O_KW<4rYqZMy#9M8dhNWs0>@(%XjWU~|cMzgE zCKW997vAo}L-_$OzeKM@QS4XYtSp*Lfy(>!PECGSDyC9bzxU02RMSq0WsV-xmGs;` z<=ad3epT-4BizUuLD?SV(dr|&L2z2E7KG?}PjjIN&-g)S3mYk{9_{)Jb+Z@Cuz6C# zwJ=-rBO;q!k`ZYn>_c-efKvNXZ9ElV`hi zcv%F%gC%KkJrL_6Cr~fPSPi#}!oC8*)Hg4yd6%&fsp^g5+5n+k$;-48(++2W+~emgJ-sP&j#_YPh^6x!<8YnWbcnuXCAlkaU>_rV@~9ao zJA@fLnIufZjTPI^SEw}|C+9DJw-14qmzVjcqOp?sJL07>T>gchD3OQS+N-IoFbR=v zRKbR!W;#r8!=x}koK-I5?##^$lekrW(2*#rRB+(<82zTk=EOB*V_BpdHwWxeo^$vM z7lmhh4G<{sgKj&xw{*@YkcsP6;|{R!Mpd!pB8299si?FO!-{wtMJi`j8=codW7+%) z#qr3`tpqDHE!uVPqSVbu-OU4kZ;kp?SYf-S-X~6jTS69xxu-?mtx`o`pT1=<&#h_2 ze*Ek{#aPRs%<`}uL3>x7icT&Z{YxK(1iw3^Yxv80eJa#;$#g#!@=Rnt?zLA~oSRHR^eIHuZNc~u|ZdkOb?nL37Sqj3Q ze8Z**_FcI1#U<#jzRvR7hjV2CX)*#?O6Vlzx-=y{AKA=@izKl~O&3AAmO5xak|Gr2 zb3DI1?U^@J;i9Ndif1j!YV=TKNiM)1iUGD*CI*kWIpnp6m_p|(6c}6A> z^b1sks{`K#ys1}=WY$(9qt%eu1+2PRyu zR`1_+q|lQ!CV8}YOme?kHmrJSv&|??6zVLciGa3(r{Jcx?Q%qwj1v86-bL9j+8_Z@ zNi#TH0)W6+F>pG%7k$ihiZtWU+dF9r!*4hN;0WzsE0m<~ki2b z*lHw04v1KP7c(W}vdnMDe&HDZE`0cZ41sgtEC)tTCI8E(JDm7CoW#?8c-x-%k*uT! zKGb;R=Do^k54H(Z8Df{2Sfp$gwi!YW=+qHu&A$%L)MvMM4T#iKGkglqvkkwY0B=K+ z8*nX9hpQLxO7Dinm>qIue@x%4wCe+eLH@XPSc*9R>-v$^*-vEr|H=#ep2MvZ6Q0fb z;z9kjCLi`6`zlsZcZ1`3g%a(jxSKZg@MEEPR`@@}P1#2sdrUtdhw zu4dlX9MLh8{=xy@RO##e#}_jf<2#;tPevHSLh;QdXIFR)J@GrR8j;D!)cEesk_$^k zW$hWo(1%Pc64j~1e+z0f|5Z?%{VAx4`y%>1#N)By1BY{*y`rp}=CL~Oot@vcSQ)$P zGlzsSE67+Y5K}wcRe1F#HkLUCFy8q#|82aBd>aNUf;lI!asoL2q{F?dhA0cTI&N?7 znu7axBWk|}Ot@v;kkpe32gmlnw&;7jv=+EQJUtidgsmIPRlgZ~U8oogCgd)kp;PbM zB9)+W1C(P2ehdGLh~UGQTh_Q$mUEBr508&pGujG|hx&^h>KffOCayq>OQ-1PLMGc~ zWK!Ri_L{UmZo0AnE0RR-G*>)|H943q6sn0H5f>NKUFAEw(5k=um$YX79FW#*;0^~E zuloDapmpJ4V_S2|VXOfkQx9N9RjuB#RC+aB`JWLCML_u@idana_}zH~H{z&ftBI|V zBc;}_>m9FI1s-c44e9}h18Tiub@mm+d9^^*s?K`x;rPc@^c|uKY~C(QdYB8U(bkG8 z-#^#;V2W1k*v53`U{*>kp;FU_cf$}$s!p|)DIh;yZ0?5aP+@5HS<1xyR!5AZcFw0s zD`M;EXGilc$}6N~OSn;Ha@tJ%<@I+!jGy#3?*Oj0!!bbITu`=yR*73$*$!b{aFlYwlrN~VnoKo%>KDo??h`IOBTo_|{1;%Js`yi+k(zwOwy zRlaPL9I+;#3tM%-BmsEOcuH#vT2=t>c^ZvXt40-E_UzGR5Gk*?RFNbnqr?_x)UJ$( zstmV7*Bw`VlFE`f3nVl0ZF*5+Oj_9FDOyswDaNSM?8eeIrOVO{iQGwo=vKT=1!aesrrH2t&j?0F z0a;nO!pJYDbY$A{O*j1qPc{#Dcxf=D*s#?xEgWkGo*J3Ao?(;LX!N(URQwYzzvW`7 zWn-V#eq4FF-A{1qk6WE;uhkcmN5okLc_7VWE8eYK5$~M@Wg%q8H+g;nLs2OxYEyT; zx@W9rH7TFB@gzU4cz_KTDmXY-I-)z`gen~uNL>M7N&BKh$yQiiv2CBy@-qZe(6pIq{`LM3!4b*6>m6T zYgcZxJ9lbNnTxl1$7eh$4VWFpm4i@7I4mCGttp8YdI{rW-hzLU!8P`#sD08Q%7!`2 zghsAIiCpQTCl0$rHao}ZF|FPbulNP_eX79_WXAvrmF1W`u=P%8wTbMIYofkGGrjZ2 zzvh7V;gUb)G5|IZx@dC~*)}2h-8aH-#n?&&2fZ5i-^~e(cneO4nm48*m^1puF2Y@mloH{lZPEB^Vc8a%OZIZc{6^$1R-zBLheU53=2ntrxGz$Fy(~27X%&AAA@zryr2*V+@@-6p!5D|a6}#bR+y{eI6y7Wb-9i^ApI%3)g?8$Q0tJ)o2H`xU!$^Q z>_HNl^93NUIe_cpWi*sWeY;`G5t^x_MKytL3n)5Wh0{lmErb;W*8Myp`ZsV|uW-q0 z^ubfy>1)&e<8v0q;I`DNL++#_yoH+&UBZr%>^pYc3{KmdR^;8}X`I0^UcSV|`}e!0 zj~)!I{wfvzD)IP5&*Wu;*K-7a~GOSIpx#c3AwOm=;F>W?fy%pHbqG z`{NcX{aMs5Vt2jOnt{;p=t#ha&fB*aQZ+q21Xd)kF&v${_C|#sH zEY3Z!P14tMmMMK6yJW`=(pPxh5yX&$)G=KV1VVz8m+%^Xj)*Rv?j#L_Njd0<34Pmy z_;*6ASE`=0kq@{!N(7nn+7&3>Ryw7?KClf5s1jI6<^xKoZd^$03PYb-^X zp4MHC+=##F2p(9=isMg2@g=Y6Cyszt$EH#Wl80@Wm7QlbuPk~SZ42{@CP-kAW82L8 z37n$Pp6~Ab{67A!v%{PF-PoOWTYfxjyM|UW(sDB|8}4A48>@}5UDcPUWKNB@VMP_i zuqD?=DtxNwL9CWl!;_;*Ed7(CIjYxerU>F7c22VkIGahSNl%idl1|lmD**=+OxGt$ z^#vA9L;c=bN_SQERMr9J3=8%FG0Gx2ORKPh=gp$NogN!#6-}afLrgIwImMM=Q+^8P zOc#=oPhj2%N!mELxNIL1aspW(o{+*;*+>)3Tnh)dxj`V_6}~)Mb8}m6d16}(4X3zW z*ov?%O2iRO?YyzS6}qu4XO!)rlT{;`dp_v%DyfE-#i?a{^{H?hK9$wCju<7W&?$Dg z&$Skly0Wp;G&*!(dA+Z7t~@GgM9n=Di}f?`l!CHnnWVDkI_l5@0$wf)$dD(|tVto- z7_@27`fTAn;4C4roNts4Ed>hP{wT8tfK3T?7zHn=dqq#U3-z2PjJR!vPsmm3j*?izn~fIjS0RtSb3oNO1qqx>X0p1+8#|dD4QEGpie~L+Fze)Z{>j2F8OfK(G3mo zhi~v z@a4T6@x?2~A&MFmfCzG}--JRh>*+TN6+CkI*uBPoyl+P(3Kn;&D_f;y9ed0Csw+8o zTv9CL$Qt23sC6)6M48CFCVD2upiW7R;!4^K3*e-c3pf^}XKX&(=W zAU84MLL9n{2aFauWvNcbLyq)|O`1n8zYm>@FPqi+7C)bZZ;G1*{3RiMz@j!!K%nF~ zo-vlr5uFmW0?jYabjKz9Llmv$mXZpzn4FdbZ0hAZdObLFS_XUO_G@ePaL{oK0-Tej}W<&mw4=>7T+^4u6%|WK5BNid1Xp8*KMjr zvwQPr+?8CDW*Jq(66OsNYENKJ#xT~x=(}!%{2vpxyE{gnVjlEIZipsaSbOAI#XF_T zW#eAfN6XgsEC^-0yPcFz>*=6NJ5s)4?PuL5B56b?dSRh=bK1|-BIF>)j*$3Y$fsKF z!&3y4YQ1KF5S!huQ(0aIbh7aMM5SL*V_Dy*dM~S$5wFSpbVa76p4iyng#M1uW?w-v zQ5oTV*BIqZIIG0LaTgs05-l<^IVztUM3fHsc=4x4?{uyDcwCLR9jh!VY;KOyHviuC z_ADe_@p_Cj7<#xV?O1fWPdP^oOV7~1o;-oSr2o7IHmLF%1*17>dBJd9>?=Vg{gLOxaJJ5S1)*C_8&!^t@vDsf z@Mp&zNVT+$S4+Iq&5m{AR^KZEfC98P7h>BPk26cAkhfLU;$@00@WnaY9#1$q3{-m& z&&E4(g6Tsytri6aEmsU>MER+9f$-o75&7^}#>q1|l~lXO_2-42{mpbY*5W3!1JyY& zjQy$0rn8N1PNH2^kx%y4&eh9a$A+;E}Bk}zz)0`=(?n^-= zQzJ_WH6>$cZ4!bhd@{(tX2So?qe|l(qXs8JkL$QydWSTU#EQ?3QWn}P%s%H8vtRnm zTB_p<``5WR9r$v9$mfpO$VYlWFa{$-!1p69iz-q>ICMSVx&3f`{J|+d_GCgQn-}kOQE_R!Q_c7$IE}e=|9;O?RKb#T-N#Rs1lQc|h9!cGC{cyvTG>D3X zWn1Ogdr7m)>e#{rOPA$KrpO6GRgt`DkIc)3d# zViDAHp6=ex%pjrM6WC%W=)@yC;qoD$-X`BRonai8Q?lpu)IZ~E zl7ansOH}myYpaU?c0i3YJ#urT?p$e^>t>>vJ$<5#D*!*{rN`ynAGheR@z=Aa^y$2> zlZelKfO)+F1hFM=SKF4Q`3_h=YzEw?Wc#&#;Ltl+s-A`!nX@UgR5B_~u2kXY;Q&E5ZXWQ>b&O~JS;sL66srdJ)rc6=-u-mT z@xgNM_3z>-H-zRlF5n2Z41fJ-r-8rU9TNlx-Ypt<-qNbL;<-yme_c^YZ5G?2>Q{gG zieGf=j0ymNpoxIUl}BAS4RgolQmR?lv$goY(}8Z?dD|+Qw7!Lj-j956WI1oy6nO*& z*gSz5z@GGkkcs)P!59tNkcpRR1n0gxAJf*TAFCpdXN*gf} zh>_?m43z~SkNO(9{rmpBuE8_21uFb-v4HMuE%h%e@&!a3^y+ zpwVs1b}>HljdbsojEw7V3FOL$htTVOxT3X}k#rn^!m$QJ_^*CSKc%++K(1!o3) z{Tp1THZ9Zh_}5V|N2E70O!F3OHv`IrSA?NohcvEZ!I>^>l5;CtXR3m_fRQv{u^_wfK-n4^N0rko zwZ+$jP3U@&^Ha9@ajVTlg?|YEeNRF)c3JPFI7nHD-@3keV;M$(U}eh=a%d zjk>jshH_8O3B#l>f2i&vIjGgN5FVEEEcvQh*&!4~e6_peizoQq6};lAr9xqy&dSzL z%PY2MCfk*)T&rn`yAy!8O^4a(;7{;jKTmho&kHGG?n#efFqiL{7F_gag%A;?#L$+} zEu}aTCKmH17e6-Z=C5QF0u;%J1tPxY6-TYXqbD8_`5KX%n-k)o$Qm%viN5ouggB(t zIHHAs><#-zB7@Iklj8cBMLoSXAMp(Qa@j>PBhR18XL)77`1zNNKdj*oy|DCW!IElj zs#6t3OAJn7(9dL!of=zqD-HAF&V-l%o1IF39F<+BAn%FI6as(;Hrye$|1}`}{pY9r zBPhA(x_%}hy^f`IoniYYaMF8j!0KnS;c22<#57ZmA%EL_QWVh4QlZG`YVihXqmcD6yxHx1xfgSMy01SU+8-+d5Tj#Ga}Haj(TIwG#D z`S@9mK;L+=CNa+Dgz2MK(lBU1q_h|j#!>{*PA|v~p9FywryF@JXHmP+B#Hn3^(I zJ|CoGD{yW;<*>W2-U3DLZ=8gk027L%Fg?L8#lx>dyboP8t%!^H3*e1G9UTI-Bn$v5 z-MhL$rJt`-Q|8o+80qg4_iA(A#-qvr z?3hraz|rwhxfr(m#D>8tT@<@PdZ?mzyc~px;x9tPkucAoFh^U=T~^%)C=j$XK~i_XRsd8)xxFGReumZ$!D@ymc*Ke7wg3Nneut^b&OU6C;458PQL^Oj(-hzu;`t ze)c{`)+^_Bnt&#ZQWxV;J*{uUoER$`pU09#1i;K0i5|l!JZm)(+}rzlX*SKtD|7*W z3NlZnfZeHBay?kP)G1@~zMH754yh54#uyJ=CUVSXTc&J862>WmOCuXS4^J)xcKj{9 zR|P9bN1X_hFDOa3Fc*8?V@&~j4#!g;T1MZ5?@5rrl(76v@r}rot@z!6srKTBnKZI$ zqj{7NCNr?KNSTMYbMhYf_$jzHjkwrZ+u zV->`lj538NQ-a@OARu+PhLP!60smZh{ZA&3atsdS$YL&N@kcV`-(X{{1np%c{Nl zt+-d#sNDxdj#UY3)XD6E_)S~6CbAQ$zjXG(gv6M}-;O&9py98R^*Yp3Rm8-J`$ov`)>BhxRFkbg-WOKT{ z%E3QR&*+Fpk?_9#oH}0SZO6B&e!$Pa$lzoGKQTa~1(kPFy1?0t0n2WHl0OcX+3_ zqBN{H&eQ=Wt;Sf>3m{x!`r1}2JO%yH12Co6Zs#F2jFR|0%RH{!kmdKnR&7M|%Cbrw z7VD7_Eo~oYNbD-uMV?HJe(V0AUmHVQnHWan^_20&luK4V(`!X4AWd*MHa_NQV7&`$ z71%bi^yn**!vpNO!5*S5DY=n7v)Gh2SK5x`pwuM41XC^Yah|N8-o)7Dq5~su+0V?e zv4S5M8M$w-4n0Nc6?lXvXwnjCb@&k<32i`~@$&BDbJQu1Yx9MiR160(b-#b)P@Cq! z49t9960v|7f!lD19&+*YW~LSfsJX7%T7EM5xEEQy~@=7f|PCoRf)Pdg?vqb@?e_}TOt-=htYf)WX3X8axj-2JFx$`|k2{SG>49X|XFG>}2RdV! z@t(g9kJ6L1Wu>0|2!BV^TC8{aQJOac(N-jCf2}Avcp>ZFj zwS&K;zl1h=#k#l%4!u0*^J(Z@Zsx4r8S6Z}Fi%aK@y!;D5*0x$zEO~S9rswL3M}$b znvU)cTfgf-YOD8at<(3?DNfn|jgQeid^s zeJz#oMU^b_7@e~oJ@k0Yyucp8HMy1#__mFqB9Hf_&@a}<6yxJrXD?o+H#UNqLOJYl zC*J0YW1~})LZA4TU&#@4h~!=E7);o9XA8-j^H?KDZB2OTPJuH!91ZNX_2V`r=hTWU zeP-62#;U7?a(*|Xx2=60xh$eV3fuOewYx$#?ydecX zEC*Bg^A?L9TDgClaW$+iRGZ{oe@Gj9FSDa0tx9gh(6<`i-I)a~HG}1Pw;K+^65%UM zw{!#K0I>V~YDv7+0;hD?r!9gXw}cLcb~Bo!e?1+ypHNG1xC8;=up6bbPt2N{N5{~A zwC$E}=yp)pIx@N<}AVqr7VD zy6Hau0F4h%MwJRMD>p51>!N0HPOJcvL?Ad`xX%O1%iN2ktfayRg=PM4aX)U=+J=Q< zTn0Hcqq(*WlFR9izN{*Hj~!>=>J@l$WKJV+iS?hjV*3Xg<3#q9H@mYek}JUOX86zk z{TqDwaZ7g@V%5n(|G9MQ!HV3;CsR9~`Y1D~02iKiieSKB>=E6)Ycxs9XSr7_j`>~L zivNr*f(J)57alm?P0gtr+A6=&m!G6X@{p#>sMOkw0Uw2rXqL}pAa3bzXmsqy6>c$G z|F+n}R+5^SRe{T@5AM&d~oYLR51IQkXQ{Ol&Wnv}0 z0)9Qq_TTl1%zy98^y8v*DF+H?ibIQEFWLhJnp`gn$_Te;qJMo0tAn?G?^{=AMXym4 z!6#Aj`Mw(d#8qd7Qsr|;PBb?gTkRL!OeiUk^dkdSNm_qnLXBBuvw}x!J@haqH@rr- zq*0Xo@OKlLB!-6xuleryM%3(a>KMPI%NS&2i#!t25lnz%NyJe>RAP(Z=PR4}g(+@N z1sneOt#mJi9wpxpph^1~18v>Wzx(K%RWN{ib%gx%xefzw23*TLl^mEa(2Jfu?GrT! zo9dZ?7gzC;JhP7QD6JC8uZy7i^WTqD+TVwSQ|7KXXsT!CfnD{$k`I8J904e2w4DhYNZ=9*i^K{)f{Lj#hpU9Ku!C4@nOT9ebA}OF56fvnR{-N;>h|LD+$qQ38y_>&_P~t zeIMh9J!K5HgnMp$fX!Iq=TE(7IH69Avl9+EGT?;sRk9N`WTQ%Jd-fQRKY_J= z&RnwmaAxgQru)Wa`6Omigxo1fkIEJKnt&Zs%Rc|Vx_W&udiHUhWTS(HQ;A{<|Y z93YQ}435@PyrYG?tK2QCz)m{ag;UD*`N>m6H~bOEzU-}MEm*TlfDH%K5`I2j+F7z~ zjF?5`VU;XX%Svp7hz{B{()>5x@Cynh>~p7?8x9hyrT3hXr}wE=@5!W8rBg7pCLs6) z2e&8STqg@Cv7(d_k}_2y@ql`N#f7WRPANK%<<~+>5U$O%I=hgJkO?i>J!RXGh_30a zt$D3)rts3BC2cteeEF#F#26KUX$2sM{3D~HhODgY>#V0soJkz@T4*gK8fffBN(zQ& zxL?S+Mphk2%0mGf<}+DY+mOf@K*9uc7eK_k9NMmWygNjw08$xugu37tIe7~X*Q_3n zDo7npso%f|!~Akfa53J8K;7XS#we^{H0Oo`!Vyi{6*|RREIzc`$T=|Oka#2@pXEx3 zv)#z|bsJ2^kcjW7)u^=Ys5!-iEf#_F1hQoiNl{;8uhvFQihD){`CdIdW?Y06A_v>k zMcet2l$qh4uZcDRYu^!a2imMoM8t{R^Q`CA?ClIEYIZ4MUFnS!{CQrhx3^MK(z1EU zeg7Fqf8C+GOEdR7))u`2f827M--`MV44(Mle`4@5+Y>kZ*#HaJh&x~bi~5DZi}U=) z0_OA|7`$7z9tU_3s+9Dqt-~s=h)k6}`L1L(70d<(lb##20GmDUGwp!r%U#n2^3?MU zy3rf;JKjgW0cp{e61$K-NCu^vXZgvL#L%RLf;q&mr|N81*7A+X6noVrd9amC!+=Oyf@G5NDr z6cc>~)V4GMWH^t1X@QDA`{X~j-@dkLMty6B)N+n>yIzhS?>JuKDhF8*j{TQ@-b8-p z!f$6-cr6sT#;A9ha&zPbJT>HO1UNHQga{ukN(k+0go{Q97mehz70{AUH90TpVi7JJ zDS4*5jo;225u>~g_M4HDAJO$NBE`U3=L0gtgpEB_)FKNPB*!`-B`%nO1~wuKp!`5; zZ66GzG6bxzy^GhooDV>IvrsBuMI1_JUL^XZ>5g* zVlG#Gtf|-$u!?SH^0swXOQDKYcr^qSYSKx6j>&dd$)Rk2nEoPUJF?CmOXDyq%y z+Z&}`>PTtvB7q`-lHl6nfdIvew|D}T9yX$+>|GW3O z*x$MM&N$yVxkyHCR`MkCnQN{&f3h(HY}&fxu(V~o*e&9DvuRP9BIjLjBec76mjITO z?=QT*`>!5IvyP``XtDcrSu zM0avZu!yo}h^s*rRGa86f?q`<$2m`--IMtfb`v?)1xVtf(bP-}U!JvkzV=vda#PH} zxw1guhHt7s&UeH75{E(9um(%kCyD^M+_2dF_G4Gpy*r)~6O(_md(3z#bo6nX@oa9| z!)F2>?5Y$J^Hc2JF;y{>7S5WKRvh7NRb+>_mD~f|4$%=dF@*;GpBnssL;_9KVae6= z*pp=T1H16bEs6!RZO(m>rrPbL!N0CW6`di4+w;{5ms$BlP^|mE8PVpiFzDZmi1#$G zr}LP4{qLH@jEGXnX-A!Fnw`*o{$Deq6XZ$!$sng^GBV+c-UGMS{Lf+U0?I6LvBHdt^+;tvc2|5*~)=|l&AQ} z>3s2&tms4DaWckhwUt)n9lOd>v>Z-6>J<-N4z;1HSZ^2A_L#tV@jC*ITNmQZRcZNg zYsu|l6n}=xZsNNYLs1$>-wUf_`DSVJpMh#LUxZNcCa?w;CX@}po);)daoriaGu zNDWc05&7{M(hMx;Y0(4aIpNXDplEqn{{jwe;->ICjm8I!M{PaN%}j2?kY}24}?o zxKKqhT!u==Y%qMJvS;wfsW(58xF<0FyC-y_E{NOR-#x)$NA2JF5Du^OzaiH2KZ5`N zpSRbnYkqCtxAT@E44YR;4+`tUQ}5HS@;2YS+hGm$6p%vYL${1jk%U z{M!ZhcXdOCD7u&p+7q5MEs+Qv?6k$waM#yVSl?fpdt#oYHu$eRtMYH29i_N;YS=tk z_BYYO3NZh7qAgtAUZa(poC1s4RPhSj@cSUpEV*twSvujWx!YFC>=IPwSbXIvxs{PD zxy@T6mUwSr3A8I<0Z$%Jvob&Q3o|Ai4Cr+|R-T?JFsq<89BLNnFe~Pf^@aNz{8ygM zq(S~aF1A+#86{BXym=KIht$Hzol%HEO&UtRPV9s0RLV#U7OE;R3!Md1Zibqg$%E7BUJX=q@3%hcSk7Yis!FR2YO#EkP9170RIW-9 z4kn}bSTXedMF^{!PUPE=aj-F+o-OH9UTIS@e6!E4CEAH3>R7N0bG?ZS!G{L&HhExe zzRrY{bLC8RxV40j#Sw@o2zFcclW&hYcWJ@!Lo%c4aEOJD_eJbDFD8r6I zpibA;Epk(pi?-^!xm~6rkL&Lk7&A`^Yz}QLJ0~1VnH`dQ%AT<4Or;NR6A$P#<8^cr4_ z1AnDah&t4kdNggQPc}`5&79c=K8$~>^Lul+23~tUHhnI1)Omxo*>M&P$IfZewVvHD zf?wCEdh8?2up;POLWqB7Hs>*3y@(;vt;xvh<+;d)?F|d5PkG9_K$AbfaJ%^#3IA=b z<4gh_?ZU?8l;j4dBYEWiKY8{4^{41v?TNJ!3VO>o_Mm7;QlhF7p>_9Y1mb1Z&cmg* z%MbbjB8ofxClOOuu^oF2b#22zn^#E`Iqa&W-60@+0kwGOs;k$MXBnRXqC`M|INhqnyiAKCCKHD)ilB2 ztw%S0fod6nss=#SP0Eucx2~S?q>?{j&t*P(hQxt=oP~^S1dI<|J<|RIg&Jr03x!gO zN;A93K(xb*le8-V584m<*_|mP>uG1mY;8O5v%}Y>08E_~PYO#5Z@kQ~Ao7^4{um1I zrHc)0%O_K)=y9XfMUW_^>|r~pOTVqE!2r?w)eI|~^8%X5y@Px)$d-63*-4^1*_Y{I z8orqR)Fz}6SSpy-HZ;^-ruFQl1w=uk$ky2J*;JQ!=~+Et@E zRgD;={M$JQkhKm98h_~L6>|o|L|@I-I2RswCR?h7G%BDr5)(*EpP`VI*eM_+CQ z?EDqm4^3|?a7>7+dL+g%CiK%tHrtswUq!sLJ3EFr0|J56sp0a{;bvTRm(}@`L{a?g zMpG9&ejWMMw(J~Z6FpU?HE0B;pr8oAx8RVg2>ZdBA*I-=4$JaZ=VbV!%QrUP#$gFq z1JxYgfS3R^GAg3pQ7`+{P*kh$(y@i}CtZ=mQWZV@ta3!xM#}IdO)W(hY4Y+`Y+Zs+ zvmK}k7wqiPYHk>GHgr|7syQ3>yjetx|J?oK{|s3H_x1NCmt%=io8oFKll1nJy#EbL zYUs}T7nVd_>sI=4tZ&d>`GoLp^{;or=`MA0;yGc3O389ygXZ4GQNr{y@8d-HVSj0%7P^80r~ zx^veHHBj+lIQbkU4PODq2{n4927$dt%5gX%r6`?`Z)Gx!BD}58LOmRbIY<*wZEoOl zu6O=Cs=}u=Y(>wn8rNhycm_Uzt_OCWqsQ~St5v5r9kggDFQc`_%}RzMuUdX0=sh&Z z;d64`sa#E3G*N#nMKsYKi__QeD-BuqIHw9kVM$Ll=Y~hg#OT?(5@}{=W)H{v#rnf2 z`gN+U_79;gBk4Bmio$0q(s9Y-I28anBqOPo42Z%q< zXKzG7!N-T?|4>eLx1Eb15IH%T`Fog*26+ct{j&3u!D3Xt+w!#FC#^-xJU%5Ao2ZFIqHgW*x8eDV?*n(KxFN)nTV$DL0r&Ts>Fz zjohzszFdyFg!QgG@ak;MqW}2|9DSL1BuHJ{@M{`y5>vQC)ynUumiz-Oi*kWuh*r0x<~PB$*cxEr&82? zs~~b9JgU%UtFi#0kt7`Pob)>hDL~Rw-92IIy}E&?5T#0^pFud_X2+n!eFO9H$S`?x zl@vi7Z|+-)pX8I?EEhkVem5|I9ycx4m~@*G6^#xC(5~~zSv?(9rAn1>a~~4u$G>-> z5-4%|S(B=m?f@mGxEq3e#6=G1^y$;j&7@(b^E8i?WQ)c;E4^8HY{rNV>urDeL2sPi zrW+q+#87M_NU!jaj)KPNxn2aIQ9U^xR@iqvo4DpRRzluhy0b%@NcVkvu%-kLFlGsG z*8^Fh)xJ*w*H;c!`>pWnX3t0uJ-|F9eYD=-QI52 z(S8anynDGv@qT7OA?5^ye;gOF*e-rCLG5gl^~gx1Y!+KfqA+Oiy8##G{?10*rM#c% ztLR`}9>Gz(9gJAWgbks7%gSHZj@YuK4$(^s?@DbGOl)Yot8uW#U!gucL$NPD#1VW%bO&oyVG%PBmNORNP$hkdGBk^A)dCXDl6D?%vGO`W1=bq8wnP|ePVwkN~rhpAFQM_vl z-`!lmp8F|=X<3ApeT$>l{s4fE*G#|}pE|XD5`NG}+m$f^Hm&X=x-wZhaYV~CWF z0(k-?uk){A44EVN8h2^W8mDu7e#3V{M^&Y%d0S8FOF@kw!z5`(`80Lv!}}`a{>C5K zU;m9f5^=7L_58W$3EabuK)8YVfjjw}NCL5>-ha_mrbILvAG7%J*nxzEL6Bm0__bfp z??(7d%aQY~+>KOXm}sEZn1QdAeu|IRUPVyTajt%cnFAjG^1`RTSo}HX*|%?PF-jGk z9U6*kRH{57N&5Jok0d_DEPAppWU4jS26Xb)moRo}6)iEI?`MokvEh!%3PC92oAU3O zY)aO=#g97e;t+E+xnWd3-*loW?%C<(zhr$G4HtOEw4S59756wF-;*Oac>iZlp@HW_ z@JRbIAt;(-k#$7zn6#OR%`0~z?V5-*5(bF<6w^>}tLl6)c=%X0=E$3B>P#MCrkdEEmxJ&=dc3NQ-P4c`QktipfSyRc&i(^m{ zsr~X(Bs5O+(u2|o2w^o;JOp@OG&P9T*EMcA)cCJf%4Lr->T?nr&ZfW>@(kgRd!~2y zF7#)f)?DF2r;{`fEt3*baQ(FGbiUj=UvkU@e}CF)@M>CGt?rgmQBy%C%(F3^+vmv@ zmDuJbXJ>naJu=F_LzHK|t*+QfRFu@(;dR%PAe+wea@onw1w`i3;a769hwXEuOr|zn z?zs5&^*+lKgEs2pSjS9bSR0W?9XN+YBob-DLl!vQ?$*dPekq$F9vD{Vp+Rt|v5U2W=ol zdrUj?d%4_V=7GcIodJcy>)pGy2@(%ND={k&7BKVkUcuci6lvS2yGQ^bE^aE3%?5+g zVRoIL3mO!qR%6>+@(;Dz9B-R{#%!9u(!v~sJX|ui-I(p4k>}N7n{#tOHWU?Y zX)UJW=W?J)=UArlb{7D3e@MjKrU=8Mc3~ZCxVS7jcT+1_Gf}I% z{UHb6m@F4_Db?K?kVgD?Z5=Y&K{BjE7+L6QqW~N8xZD2>*x}`T{~dfo`k!5?bO+Z4 zhXxi#PhCt8{j$G6N=;TzX1!rJ?QFH&W%gfL0?*4XpK#6pSTnh+|J#AJC3axn|GVft zXOG9RFekL{Qz`{wHD*VuO1fVzxrg$iGE`nH@Funf0*ro$D^Ccl&hL@}<_kBT2yKgL z2D(WE?Uyp>OFX`pKkZB$S}`Ts{6ivCAQf?~=}GPVzg1xNajJgy0oM`du?22J+PJL0 zba$of3M*5zU+Sgp){D;FlK-l9T_=ZmRL=XRN(a?>wE^frXY2YSmC{lAN<(o-ha(5C zfi|dQ?oc3MX)o-ip9D4Bk#q1@3@XDZ#hC*07 z;aNTDGU^zP&hh2a40RpUnm^DEm-v}lr&%K~)ig~y)r-h94E;h{5kgrkTo#5q9WKrt zgG&3Pr|Z&vXn7K*Qmmc|0joPDXMT5==@sGqHQ40*v^h6gTP#XzR>e_k`$Jt0XE4@v zmV$zeBJ_Q0P1nLkcUQL_fwJ3Wn5>Qr3yTX1br|L23(RvE41dySVB@j3>lyyDw6Y_; zE{%vRyyR}Xko;7?F&1yHN%35jZxN=H-49&Z{I&xNzvBLM!g*)8mFl#ne#%(St@qKX zw_mrUB3#*d2frw>xJaw4*zi(UWMSg@_KT41TOT|SGy}#Av%;2!5?@LxRlRpE?)AVc zr%ycfZQ@p^Do}%8B2OwFg|^bx#9|$0y0q0S4?TRJmk*Z{bUz{(o;|iNKgtiD)S-Y` zRBogKdQ+|KMDqn4;kz1W9A=lV#YZ>P(j)AwaHarWfNQ1RQ;?N!3wyH8K;O7`O3Oc9 zBC9FKmm^*>2rjpR=4Cl0CwTMK<@$5{zWX!3*I7HKB{P7Iniv_a?=$))x-N6yr1oYi z`~ml9Z!1eR{w(vqXpTE8Q_EBW9u7^0rG)Hv?gU7`8Xd~;l6k6I{3 zMdR4(3?9}_mCXn#)Cw3I-;8}2ygqhMD;U?o3}!7QN-?QCqEYO{u4&W>fLNG^TzIc7 zaii!e1QxkkO!;z<{YDZ+P^ z*{^zovTmJj`>w*172_{yM}u&zm}g&XMlY|$Rdx;@MNIq#$LyvVP>yR1TJ91FBidKj z$Cgwj_D8Sw8oZ3Y{JzrYEmEtw7blzXnuLUExjN-fn1AT1KO*j$*o%^ZT|}M=sYo({mEHS z=aHz#O*aZeC2hCS2aL8k&-?)ZWPVT4f%&y}Ql&keUujd~V5fRMo@>gM&@VYC$;u#% zkCvH9>Ww}q|C5?C=?f=9g?N>uxFHI|CU4utak~=Gkk{lBQ{yQ{Rl=EaY%1WFEyd5w zrQ>nKVG5xW9USejw#YPm`1r0G)zJL64s-u^kLhCFDsDHxg_Hrv5AE*ZMvy|Rf9ms# zTDN}6fpBd>m~r4-WnSpX$q7lEWz6~Sz{R*sEkh)T7zrs(#m*W(@GEaz`7Sz=zxK=6 zIVfpCl-Hfd3w|(1RF2=CSfVxt$G(&BRZ)`;t*67N$XewO#E!JYXdNmdX3G4}3+bQr|Zi4qO_V{ZPM z)A||hSM+wd_SYhhMK@{{nq*~Q6Y7=*>8eU)8Eax>XJ%Wy%+eAhPlPC>~D(36rCF&Q6+5py|iE^u+He;5AzA`ue~rGC`=A?r!0 zs4@bgX(Opkm0|7`%SeLJo3y+AreVK)uVA+$PgHyvnxvGk{z< z0mHfTN7mBvdJ2BKqL8~0RKtOhLRaCj6Phw!ly}9;d350Qr9+CaMjmWNvW`j}KX?>H z5>hgG`MVP#SXL`-+*o-p)vM z;Mj=g{TLvRk2Q!pIgEyOThSBR97@P>Yyy%ey@dgxU8OIc-LZA%uDAQsgJ0qq8NIjn zvgn(qw=#3)Qby)gND-Ay2w9eZQe-KO0WoEuj0CRPV!mjEE$TE;=DS@ZWU8>8y1w7+ z`>m?Y`}T4gBXK;fmNmIMbQ?laZj>E~aO<92`&CtZetw_2f|olacLeTSlmJth?;uz! zX{21|C1LPwFSENWpDB{wV;45I#>*jPswJP ziqkCem;Vs2m+ch7=tn2hrFiqd3@Q_#P9cfQat9^O3EmHz+Y-|DkJZUJYHZ3-qkFm0 zifE;vuYmSt=C_Jy*etO|P-Cc9t~a!B*jtbLNep)$E9$p9PA7H=rXa)vRb%md_W(zb@H(~jy0pZnHg%gD)PV`(p=&& zVV030XqVk*wMYu2&J<U89#fC3Aw z1AWN{r9mKP)YFuQ*WZooEa_z$O{>dU*c*ZPF-1jZIbD{B&}UJk&7c$!z!Q^Y&D=NZ z{ho9IUXGww6wnga;*}mVisEJLY@9%*ZgOcU>Q+T^2)qCjE!1NMdeTVBmcHazFABq1 zzkhMum@_hvg;)Ydx5a-e7RA#3{5Wg^ITW7!ng*BLS@Q}=zLlC_HQzq_Lp!2aJgven zw|w@T-O{Wf%85H=A1KRiOtc+RAJ`kF$F`v&=frexo`AF@Ok{y@;(UX=m}EWAqZ zELL%pE_~?}hh&2BL;54#F^X?i5Wt&;!qjV)PtoOwXiGwfUWIVnc0}fHez6MMUYQ0naf|Q~f&|*UYGEn`YK}v6g7wX8bik~|g$^S!Qs=w#Y zjVAdv$!QyVd`dXeuW{Ej)gBFsvIoQ!C<%si;*^wV5tR$GI}k>-=vq&;Uw6{ai_n`P zHJ|j*%G&3`rO(}6ol@XpxbjiW9$YEH3;pZ4a?k=kCmB<)}M&J_@W}T)3x+Na0&hbgaHK)T4=N z!w#e`g3c`pez2?wT_2gD?Z5VeF(MI-9`bw8&4Ri%ZS{^##2UOn0y^u0_UQjI#P=IlVpj z+S6$9JA^?hRyqa(wWw`07u#~mOO#n-;T>E3^VIM74f;bVhE|=e?v`~y{90mg+?vKf zP_6)fA&7um)N_!yi_ZEKv3pH+a6!b6zI^O9JxX7Ui=~s|9=GR6Xp=sdX~jDYW444~ z!p(Xu7Wwubvms(jJDw!DtFFs!&~dlcX=!o&!i3F9>xOoy2T%zK3|a=1F}ZFkNGIq4 zApE%7#LltM&pUx_26hZChxH24#+9zxqcOt{xuz|j33e@EOe!xjDzRF#@gC$}@Hach zVfs7w3Y~an`{w=ZeD@qjsP>^guL%~T&`Al>axx~aH63-#&9C~%M8ORxKqdcX1_sDRytY?&#qaexxyL^BcI4b+fB8Wv3RtbQ67fRvHy^puT*eX| zHqjNXp8y6S5Gx9)j&s*l*nNr#Q?+<7$L+&MVDp8QQ;TjxDe>y%ANlH$ippVa(lo9I zTr&o6)|dbvwYL5KL-&c-y74=QDo__a68Q(Yx&2_>|d z6(TMfV+1q6t@2IMj8|2BS(!KlZGI`lHc=IerXiR05q@&7P<)D(b<4)v!UWWqQvh(* z8KGFoVXTOsM^$4n7Nr$b28b8P+nGQ_axJN-<16x%83p$SfZwylyt4+{6NN>oh0SjX zCkoN~lHRk^CdP$Q(`73Mhx45q*F1myd(Qqp@~q#p>8(UC-WDA0q7||4oNitA3OB1@;vLeKJg_V${enXoypIs^aBu#n>GCr*FpL3tdg7ITc%h9a>DPBj$?Fb8@uI#~d4tbUK z(AfxQCVk%l3B|V1&~MIrqo76MEsew;{XAHbV>yPPqF!vaI{F-6NgFR>BJ>OFYT>Lk zs|8O&%Xi?CiX?@Th@-P6_DlXt@WQt9&hd<28Zayw2Jwr>%<+r3l`>?^2Y6A-vG7(e zmrTuh#nu@grhk>w;|?RvAp5n|b7r*s8fpl+4#$uw%3WBNR0`INm&Q8Hb#gsr=(t8; zlao~uy-V}yS_a>(06>hM1#2JyajS#qa`f-?kuJo@*|1w%6)b9LWm9aO7S9n33nhwW z%4dK3vG=z(I9h?r!h-T7StjifeNrWtr&W?%4;cr2bQZ>d=|_H}G|b19IB{2&Rl7B@ zvB}BV3+a5C{K=#w%25f%be(R^bg0v^_f)U__AUdhe3Cm5Z?jquv`Wwxb8R7BxkRHyPO$~MO1x2EIMyluz?^A{VSxa*nzkMmNh43SdydKLu zW&v5795+oU0<$X%OM2wKXsp$}f7>asKtB==C0Az_CjG{@0+RNJxAiivH^_^bf{TTbWeNDfMS*Ued&@j|R z0opS@Dxn^r;OnHuYJO_PK?T|k)5KOUj}&-WrLkCuril{0&Q~5l;y(V*U>5LPH@e{C z-IY~aNu)JxAWys=rgoM@M$W&enA5{w*NilaDYeOI4Pywe_k@_*Iod)VOhl=IN$Z$m1( zOI{sqtHE-W)*kcipxp2d%*y&;Z8L>SZlPwH{lj;-E1q>2c385|y0&z?bis3y ztF3gQW)x`_EWc06u4v=1m$(DmE>TEhEoFCPG8Qf|Yx@t0dmP9qtR@C(-v9k`T?-aS zT9oT)_>iaE1Xd#9Nw1o%=fO}N;jk>cC+{5#W_--2%CCkq^eSuB+DMMKg1UVG4<*)g zRoU@b`3=o#c@6bcTlLaY53`XrPW?C+{@s_kZ5=n+^n-qLpGK<`e@2L=lpZkU7f$CKy6Wmw zV=cX{l=(~Gz<$b>>>w0{=3}DZ)m1vM zDMt;LEn|DiWh1PXbjj1J8Y6w7n{R0#cyP-wH;@vsqG$(K5BF15O?=^?JUHrEYROAXhwCdoiLg2Ycg4 zyB~iZo`Y906kM2`8kO^q(+r$|hjJwP%R3|^V=#+b$JRAEOI|_g^xB%C#KsTStekHn z@cp#Lrh=n^@u3_lvi+#y1*)^BDXcAwDbrCoOtd{Ym?$Nb&nAy19=6T-lZ~&OKQGNy zyXVbRh?$WhSK^YQ%GqUGkbQ(_8x|e~`qsH_o4FAL3VKa?S~h#?V}RPU2?BN_%F$GA-t=kX$J)!1ouZbI0v@)yWCtl_@XKGe)9ydC0n$0aQ) z6?3^beP`qNfr&->CdX#r)5P?R<)Wggn5#Q{y!c^%A`ssj!I@X2%pwU8|)!XxPFf$3-_a zvR{sAWD*dSh=(jL490%HS|K$fXrj&CqjeI#c{6kfigC?3P+Tu*tKSGH#YQ^Oi}13x zA@$=8WX!GRo1{r{ClX5@`ZY34nm^PvJ<>2P(xN_`_H<;3EN~B}&18yv!yyl6t^9Tu zHJ)|jF?YfTo4xka+@ld5O1c($SFec=X)+P2b&tq(RB57>mo(ZA7J>YO;XlMjORDmF zR6-UoeoFYlcK7HDkMEqd2_RB+G~Lj$cx<#PLxxvIJF6k-t%4ttJZ?AU#(3<%`WR%L zT9_U-VD@UK)$(E}1{c<1HC0jJxZRyuJm-T>y9O>NLldU`WRpERgQznJo~*bvIYT>D zJC{9JcR@8{|BuJ_C9(^vCzZJ;#`nB(211Kq0+#&|w8kGsV@h0N&si&Bi;HK6*B*aE zEX~gTd@;8Ra!YB<4a24j9_rB}@#bw2^iJV#N-f$9Yn$oNSrx`F*o3cUeC|6r0UP&y zO;9BUjO_@pWI(Ciq&3eM1ERS)~(c|;lYeF)%YAd*$SM3T+Y>d$rTw~8xG zSL~L1!qPrE0#}PtR#oF=YCTIb_7gqiAB+u5e!;|NlzV~s(ed))9}<(j$d-|r+`fgq z8494NPwm?B!kH`3@AEbL;?V1(R6R%T*D}fl5pX6WS<~Lmh}34e!tf-+aGSZW5!4*w zXDdFG3aK9}?+zJ1I-^D?JA3)iOzb^E6v>Z zQIYf9O-^vi>|MTV2d1k?$T(KbXVQEnmeH}vkw@Mj7$8_G(w4CwksKfK{T?QVzS|Ak zobVu!$rxfjRv2*`2W<_Sjfj0W?xor3Xi@m78Z!Imy6V-hxvh-}x3G$suYz)b+;9yM zNQrWiQ%XT~Lf~<&-!b{IYu_yk2+aV!_`6sqO~G00_el(*tWUWIz^ddBzhuJ8w>ubj za1ByYhPln)PQD~+)#K7YyDaMnXI{u(1W&K4d$I| z64eDKb>h{@ekt)5W0xu-RbD~-HrUL9_{$d@P-nZ6JeK=u_*d&E`4#F9pKj-L;GFa$ zt(jS?qrt#$w7NHDht#e8Xm+oG3G}rEga<0m>zq3xj#nwn6&*Pg)KAqojvoTkr=&g6 zX&T124pN>xDHn5x8~m7Fnvdab{(c|`2Qqa9RYCl~Ang}nnW;xASrUiraqX~qT*kpQ z-pq--n!B+Uw07I`zwsNHV&<+#0y*)OC`C#4i`=&8-vCbacq9)|8tf1*Pm%XI#1SCg zyD)t4uJ58DCVDu@Bxy~o@L8X2dss(0(cuKZzIG;^V*G2QkpT53X|;VuV+vGOUSD|hYc;9nk0UyS z`g`_s-gw75QRlX9lEe(!q8bISO@*AKXy)Fwuxb{s;7LZ<@us8>NtF!kEYD{lNzTd% zu3)t0wCS_Fku9L>2Q6U?)U(`5m&v@a9>+L40 zg{d+=ewmwq0Ja!bZi-f5!lP+|z7H5mL#v|At?*rk*Yvi+XZ%iv$a0^@IRJmCesebA zo?!2r%vPi5P6(rk==m}yZ`geN+C!|utz2(ftn!%~Py_)X_jxuRLS|b6(5&`5BW<11 zG*3<$2OC$Pe1CjjB|fX6-6_H5xJOP<(}+ACdb46sQ!!YLET1P5rKzi{ajY!EYyB81 z^Ki1(F^Fnsx1l7@KAko&e-wXsa9zm2U~a3(#uOq*fv$I zkH9rX_7C$}_I#m|*tYqpxni@4HzjT&;)D`?rS?`vR8P36t13`lwwPFtnkdT6(;9pq z*-8u>Zr>&|gE8mxe@daX36YYDAxIwK`wJm-2+F`eTaO^XX+BNN{KZ0A;308I5KNF63fU ztF%^&^K>$XV5lQe*a-p9nJ~#2VYB`sAT~m2KiOvfXn?nL)upz)1bG>Md0<;_Yhb|joKEWo zPDcZAtK7bmP{=FMi`q-6R~_-oi^HO;-39S6KR5`!KTHSjwHA$V8zLjkZjp85#%;1B zJ#I!VhAF|C)M@DCGfHVHBTjaP?qs@6PQSD01FPUmO$P>&c-hh!A1O&AMONta6~4mLM%*5Do1OeP~_ab&5w5gf)rwqRGj~ zO+mMjw`L-S}q#Y3PWz~5WE5i?72V|2mM@MJ!)(kqH zav6juK}6#ZnE%LLe^de6r;``&ps#JG&2IwKA7E2E3ij=PiSW=CGSe_IDiKNay}xd{h7T@6w~_+aOm#OKf2KSF z!q=BZa||_Qoi)N#DV(0`qjTz}wb^6CYw_=2Y*kxSl zkhTe-Uo#>no{R%HmchKRIMNp7avcrlcjsYW^_g>d>=+v@PP4xWvbJR`Ym>T0i#DEq z&sX784)Af2Q2u!LACgaY?7zGiqaXNbd7{8eSI><#vpTb4_on=^*lJzZi5L$4>p%YI zx&Hsl`)e}W_I9+uNv(Swo3m-Ai@`{hv0s{#?FM#CvY9MNB>-AgGBV-u6wVNQB^Bll z$r4fj^;S-GajfO!D0EO55uPY&X1*Sl@NWCnUdrS7=zdkFA;S>oJWn5#lvTOimz~H|Qn$7-PQEo~9@)=oX@$)Jix>l1 z_I;!iT$Xr-4fV6!60PW1(xfD7nOU@?*#jNuQXb_j>UnDs63Xm#`JUUWL9Y<+x_X{> z<-DPc`CorQ`2I-6iK)q4P)dKLD526m;vbU9+^(go{e}d!zaG3ZJnFD|gRDYSBUi&? z7ZW14Pl_e_KOVewL;rg467J9oz593J>+#d}fBd;F)T~Y@KI?w+IYiZ_Pk$w<2iyEr z4}L#td0T0`mC~=18cu$$(e5h~Qy`j_cT zbg@13o4es;UDOFWYuH?>0u?g595Xl5B%1kqX;#L3I>Lw6_I`KT=)}YtH?@tx&$zO@ z{n#8^T-JsIyIu{CW`3J$JzB3z`ecu%$>K3aIUou;A9q`89X#y{{u*T$gVYGCFc4r( zHXka*aIkL!WQFXx_9bN!g_c6dbG z;Hs;f@ccoED$6wE{myp@(MBQY4{7m^EmmnRUJ@QB#M&?MM;}b0 zjB1l0rJO1g0EnK=pJ?(Si^C^t^?Z${9@-n3asAX@M8|FygSf0FVTG?flR`nzT`|vu zl7d5lVTm%?PM7mwd2e4Y2vD0yq9F4~IRdrbb?C*EZ4NGeGqh@OG%1mk58Z_XIejL7 z+PV#d5!oP2XQYYg_t8X@7hY2}Q0?rUUAfW6V{N^1tvwxY|F|-V1kN&`0zD|L$;lZ^ zYrl~>Q%4I24PrRw3prhe>b4!cMS30^TUMe%OkweGLclO(H(1O}m9L*K-LTx=HPQIU z1gRN|JQpj{;VXHLg(Ji3p1b0YKqio1%NIWz<;5~s!l&g1#cR{Y zoBCT6$OG2odVjU54a>v{rl+ZB7~3Z_VOULa(x?sz{k&xIahriMcGtZ;uS>+2rtCp& zRB44Lb}HCGtyv1@xJ2~jOE#+NmCpF9TuXpc>1C!w(c*{G9KJLIwsAjNG2|6n?!~R5 zPI33;!plX!gX+S7)>8xHW=Tb@MvfQ6`#eo7u)|4Q%66)=9gd;j@LyO@@ABY}XZ}-54)2M)K*>@U<&%@>B)2^E)i+ z0ok$D5$7aY)Koj0OI&8m1#>pZa5BN%TXNq74PGG!Sl)Dcv8W3Ere0G+Sl_S`H-4q1Yyn6)uuGq}Cn(GV* zYKO+&Iw@hUZGt;vjkJ_tCDLV=!KFI!4Dr;@AJdObvhUne{Hjh52CXAQ2L|x2@-eYI z^0m31kYglvAWFZh?rYY=*B;Hk-Cx$`jgQxs=`oEMW2ocL0)DyPRi_PODpSx30GR9B zjDmr#L$@RX6?@(93wF&mpx^0?Xy{)E-qasEs6|?J@E_OWzNZi))(Ss#eM#1$t)C`* zzw`UPwG!1ieq4Aqqf{U}UWp8MlESH2|M>-FcgrE7jI!Nfxz`a=sH@ZheW#fz8(91Y z7R3qX`jE~G16pL2-V$o4`QB~tyzZePt}VZzBoG;8J^xNT%SNlS7e|(NT) zig*u_LZ^pAzkaT+r^$m5aZzMs=yS!`7S)M?x^qL@c9gFxl*ACd(XR(88b zaMtk&LG{9_aLmY)jR56EoBVX8aCAg`q(z4@Czx3kYyO&vx}ljzh${7H(>8quQV?^X z^lSn{4&EKuBcI=HiR^gDld4bd+0CAs9AJUJ2{yuS-Z)%#Xig8;NNwh0c6Q*_rU3_e zjPZAPa=VNjhkVn93=xYr^Y`rI#=gi|sGK)b?4Xm=*%Px?*r|qjRhAGJ*&I`=VP9nm zr<(NcHSSjMX6_{P=d312m1h~Pl1D$!gFv>|vgxZp(N5TXnDS!3;-7r}q0+uvI@hNW zf%ArJDSXIEjoRiG7Bi75a+Pw75LbJH7m zNrp>zux-!>9rYgD!Fx~)aj+dqf|kv;hW}tAz^ci)j$*!WP2oDkQ(gc%!=47^x=9Z* zDfz}c54)D`+9R(bih0pHVR;?q8L!&CbDvatc34!La`8?i*I9ONkX6#a}T6DGi2H?$^e zX-x9Jf4`-NvGI>}cLmNF2kvRCtCpr|PE8e)LQ0VO zWXpj@eE_ieWo6`Bd8-4GZ<$l#Trb>gl}2Yy%A6&gjBMj5=HCIr9<<||B0E^QQ7ZQ% z?%;NS&|eTY1J8)+pkg~&2pJZiB*{fHI{xZ+OUR2j+mVZy$kBIghnhb4wD}xmnQK}L z;|K<(r#N>Tm&o&griZd&Y-U@PFaf93I3m}ik_@wweDnJ4ESDYH9NGslfMA1coMxCl zr;WXg6U~GgXy6>wN65!Kqo<4<9lNgQUR8M|_if>!8LzVCG|;fBn@5(G=5Wu2O40Lc zC#=9}iRYee?>PP@&)Ak6_rr=`KP=oHNyIHYb$A4}fg+tU#TLHL7ZhUAh0$fhcD%AN zwa}X?b`~G!vb#Wfx`P1S;VvPbL8-3VVKZd-cmm&d6|#d`aTDSJx(b4fy z{OG-4fcr9c%pN}8?%FxTuQ81@d1QO6 z_r6!!b>TN`5OLeT*f`)iJ85sx!xo&=@x6G=;X}y{KpWx_fZh^{G*3>`?2;?IMU~;# z^oo*dcR7#Ul`p?4?hx;TSlX~8u!RE#7`|hvZ9187PZ5V&0SVYFQKE(?Ghp@4hj-I< z$)w1!LWU&3alUD3tOeh7`ma$D@%(G(c3~B9L_}720X5w4wXgnG&*Z@W#oJp3wblOp zzEFoMQYc;^K^tfiTw6SlAi;_k3j_!*MN0*@5+D$?KyYhur^TH@kfJT_P~3Z;+|U0x zXU@!iv-ixNCoeOZtYlr+TI-VE_w!l!;udk&lP1(aqW_gAC^^mCQAI1~hP`b(45ZRM zU`XvQ4G%=vx>8K=C-P$lM`tZ=uZ%ViYj0i(uYcB^P?6#v`b!KZUMH2_R zhUADU1$e~jJ#a&HG!*NznfHh$)rqUH_cz~QYR0}og>8ZWpcd6ct-2zI5}Cq%0MbRk z7&U&{e5NqfXb@9k6Ht(x$N_5pNJKR-R`(iFeIguSGkiE72u-@~joAq>zfhW6tql;B z8`N-lO?1cB2Ovh>NK1!H2O>#pR`E4DSqre240y7Th`LjFIK$bqF#8W0dOoiNri2QY zyT$;O2UXJ5sR9;St{06S^ZB=A>uNn!H@8WBftw*lYNPn`P}$4Q(Z1rKA!|Yjv&;y* z`-b#`z3n+Q8@jAQ*UOoG!=eN(z|Z0VE@FQf&t+~3`iiD&S5^Ok44D*QH+@nm(cCnw ztmkWi|4*FD=4NrOB!dG1S0xr2DMqMPC|eIU4)%#XI+!#U{(ZC(cmYaTC@CGW{Xx&ZHbhd$>}%iu*k zJ=9LS1FBzt8uKonm^XgCRbX>_Yl$dMIq;z3lf;&4B9nZf{Lq&mP-lF(2ERQF(3j8# z+fXuc6*iG zLn1l7-gSLzZ}j$mt7QJydG!D7ckWRgnQTo2oK$ex%T7_cb+e0;*PqO{d3;p0?$oKW zC;Hn0feKkaMo>O~h;639J6`E;yzW+sK)qy`JKS{O?ekzUOlT^1RnEot<$K3o;tUbA zyF{UOxI!lw9NjZPGaBau^kkcHviGKQsk=BrM*0^A3rX}A<`JG>j?sEQkXjtfL z*`)$R`E_-@qf4Ig+MauOZ*hG8%rC*sZGKEwSNCIwgaro&xE1B&Zay(AI=c#5sdd*k zwMd&?3k~gJ7_O0jy_jkw^q+G>4&T-IBaRE;s=U1Uo&Q^aPuHB*uG~=QWz!I<4Ddyx zJn!DIbqB+S8Fgab*iOyigWy$CiH0<5yZ4l+AZz4tk^hEUqD93r8}&20!@hOWyp9!2 z{>}0qGWLXv&45eknHaei6bb%e+s;)quXWdy)g)T>gm87e&aL`NqQRzjLYJ7SJptz+ z#gZTH-#|>!eO13-<0Isi_-=KYUUzCvTRKVddr0*XV=Yn-H)anHp5LqH_ zxDndmq@ZwR=h5DUDu^!DoNLq_3z?p~?{|Pc?RO}k;%v4uUPmE>#u`azV_hZ{s9+B8 zkg{dEY3d)c(E}lcbEqXlbZwmy&F@Y>*Q#CAfUp%tH#n*8qbEYxaw)js*wX&wVL%O6 zneA~kBlpU9=e!bn71?$N6Fjh*?mcD)!`$J7LO5lwaX=yLL@BR`JDdS2be4=8o2^1IN8UZfR5Z4NywwYC?(!$L@IFBy~WqQWvLQ{=vy=j6ASD83vJ-a#+Dj}i;?>~ zZb1_b0bzM8+NJodG}HV3sxRjvyGxb4OydfWv$3zYIF=k6EuqW_r~7JXz&vZRn_FH7msms-t5#9qp6UtbU3!## zjpTDYQ3FGhUE%53R&d6a#Jf<(h$`q@rlOr-a*5In7)5V)ihzw8%wSDD(+x(TZ`<$6 zdO@`wU0keBl@L?o>?lXxd{q}?EFOm6e>xxllmOHRlN>KxUOfqe!-~;BS;|8N<#tj+ z3|xeHtUgJE4?-nN%m@4@<|=gc%T3c5ZQM4s$JlaMsLFKEY5XSZ-@%xZ?f0W}S*HHvFL{;GtuVqjrV zA24VHo_zb;i{=uce|pz4{&aW9?4tK--9wP_zZVR$cmqh+e)a56NSLJ9q1SzdX`E2E zR&@@$f@<~am;@Dw7TXUipHCE+CZYRLv%NFphUqEqO>>@H5O;vGG6<;-e*6bVo#onn z%Vr}Rsp~R zQC8M{na)pXZ0x}U*@M-87aS5}(Dv&n?H6^G5P(A5(@7(KY=s)yKED@nBL@iFk|tA{ z7gv%^^fGd?kE})V^)ZBwpep0mRFMv;P?toZWe;X=?-7(Cp*tp!V(w}&5j)xC*670@ zx3W+jWz=03Z9JqBj424a(fihFL9^K^ul?{xZ4yPi^x5R}&5o#t9Kp+kF0IGmhYiI$ z72!*&^fc=A56xJu=+b}CnoeNmeytcq)Dm6K`7R8iOydyJ)|5gCnXHNlt~nZ+N{R)W znPiQ3(Dxzm=L*wk7&`@widyAg7u9?wS%t4;`s)j$O6wYAQS(XG(>KDC4)Rn>TfX$9j#{f4Z&avbDH zE7?VZsK2Y*Z|}ao$zP+zkzvhntAud=X}^Yf47dw|J4l@2;I({Wbh8n!2$T{Bj8u#^na6{=bkOX3WrC1%a zLWS4QoScu2t9*+aRnz$3(jy_aqE6JbRRJ$kgO|jtOxb=4;O&pdyg2o(qgEpqYa2Z{ z9xUp0wi%0EQWN*`s=o5cqhS_P#wfn* z>V(S9Qr`RQ8jLZDVm{6g4k)>k^U8C0ZosbMpa1~z9mvALWzsDVo<;g)@XBQH^kJ~n z<(zWoez{m6Lw*&MVphomJ2_!ptI@fLdZhyofR96x5S4L`aw$fph!c(ityzQ5bw^6U zX5|8aYs%BbtyATnGwQ4~y88GEEf?$LQ<`Mt zWQ5)_)b0IhAQbk4lF316#-sSq1yRDMfsn|r`a@1L6`#v(Ar4q8E|sz=x9>8FKCrXy z#MS|_C>aGStY_XpBvTa-`VeGV2Ryl*Q|D;9Sb9d>rVEFW-naM!tP*K| zaeT7Xpq7122?Y?6=SI{kzeHApFD{QkO*$|YHmiFahAXkuHSSGhXphZ= z3+oASCzgJOTw`JUPUr8fxwkkm%MnlEa9u>9Ubwi3Kb zZkAG-C2M`>iV^DIajXfD*VXtXFEEo42C##`7&cz>JYyVZ>2jqzcsf_c@p_K~HtD`l z!=lPhqYtoFz}zuHul&vyPS3UO_pyC>lTpa?O1j=w4#sxFsGf>0b>*yX;KaLj^Dr>Y zNq9T`ht=408@!d!;H9@C2+Sq++kahWF03kAUvb9`<1c7m2ndXugSO{>jV;_LCFB>! z_PsfTdTJMn62wquef2r~M=y{+uOl*Cr-SzhQA@2|)CsnRvAkiotdtK~gU-M4Y>5DL zJpI$CnPAi{{LCcaw;e&^3~=gy1AFzFMj}Nl$#lVDIyS9d>q}2kJfH3Oi2u)6?v$QS z3#QIjol#4S-Z~|B&frzQ$;~-rtW#HwBEtB~-gDEM@Z+BCMM?OgE~8O;rkfv$s(^z$ z z)U?-Db9i3}*YD+EhKKgW+SAD~8S42hy+?XiO~}uGRxrk-NkzriR8I55=)Evgf?_4* zDZ>}r1pP<*=Q6rD#wD*@LL!GZeB7oq_?pv~xVSpHlaxP|py#FWW4eqioMZJ<`$BkJ z%Q{wPAtvNYpz)Xg+q32Wt?#4lJW5Xy#$^nvp-=C=HwwJ`&-Qc%6-jP8K-!-6B4vOb zvie&Vd9D8;vwJtpe8sj(%Kl|Ys=SI(ZY}ltssaj{xvzl$M=W01)kIoeUOywj)weJH zoR}5pSLio@_!hKf=ibnoHDgv?Yye!Nc0tNr>a*7SHR>2ZJkC*v_ zu(QIoepB>ek=G?H1NSj0_{l0I)08;cF(GZJusS{*oyX8B1fN&mmH?+|_JDNT&)(O& zUL3f&a#?U$D%f?}I4MCRONa9GSW=E#HasG?J^vvamyANWzMdXejuJ)`Uu`yS{0dM4A^sQhnUEl$P9EpGP7m2Dur4%)?x zW3*}^kx4(C8Dq$MS3O)clm!1}_V`}gX%mF9?O!fR7SIxF@4}LZW27?{Mg7ZIp50y& zRV0d@%gS%H+#ds%d#Wk;ehAf=D(USJ$z4!RF7E^tyR4$9T#p8u4Hton9Dg=|fD-BC zm>+XYX?da64lDVQ97px`ZP`9asZvjVFUbJ0sks)*_*7JQZmN%SDp*&#?u5P0ztr&~ z=I2zGk#0EE^0STQ0_z7O)Cv9hBNWVPF^yB*kv~d-1&rAIXq#n+JhonSeJD+^7?G5c z&^^~7DL!-=h16;28?Q(Inr8@YLiyx!>uL?lyh_7P%c8ITI^6dB!&uhNeaY=MGNI?m z?o1H2nBeu@u#5o&N1S;^9)iTfxWBpNiF>)U*LfBcZc84!v@zHEsmBa|-&^Q3M4t24UkJ5$J4kaM zZmobyG_z`YKI_>J{*X$}lDhX@jw_G5 z62e!cVGbvxi~QY;#-8xM5K#DH%YPuCqf-3K7+=~mc4TPIzYdRUM*dj8TNnpfc8F6u zAzq;Pmc&5ESe5t~wnQzq#Y^2$3Lbi+`zAx9WKi68pL^We>y9r`HkPbmKSzFf@`bJU zab?#greGFSktNfmbyv?2z@tbnj+4=K+vpZ!-l6 zMzNAo=$M@B&JY~BPDE;m%#HWkAm@l5vIxkB_iN~zJa;Bgq;gI ztYOEzc5jZM*3z#G5eNNAeXfX&%2AtDIQ2W$)-KZz_=*loPOjX6&Hf4L8F_Zw-ZsbP3VbtEoz;HsTC z9z7=YVhVN5V-M!Vrl3v|{dgR?I7Qmk$8#xmV;b8aLJ(;WPKTp&l^bynzPswIR-7nH zd4jE6Erb!*ZrY`JO7S4-U1{UImxS{4YBaR9s?+X-h6d{BdxN+nmgpQ=*CnlikH275 zTu@sf)Hyjf5IKgv`C9n&j|#@{8)_oDBV0{JEXNa;Pf~P3*9>(QN$7}a;mj%?fFn}fENjRX`PMb%+D8>ehPTnq35ph0 zqvDS@DWdBWrugMN|ebq=KlxVM=>dqYt{zF#FHJ|YhS@OwhS%t>OW=odeRR560 z_WED71SG)nhKnYPdO++8dN({Cbq~cP#w=c;Ihzmuvs(VmK2MHNmX;OTeKjleL(zmZ zWC5#NB33wrPJLytbi&ifLLrFS$ZCD6QI+HN#(_zzKb6STIc=)yamUbCa+0F}80N_E zMkMSWy8!=p9tGg@ zeLR!OQ_6);kFjtOubT8lQM;6NOmVUebz%sa0iVJcd&(@4F$pcHhmGf6qR{xkLw`FtecI{xD_> z?xLI@cQ7t}{uPyMS7ei^k)yB9$mPoz6E;f{6b>4b==n?u{q2~;JO$5c;VRbPX<>Tu za3f-z$-vC&Byh;{z0MntJvKv?f!cp_l?Eby;Sxfb+pCvn8S)^sji z>cS>HHvP3Toi;<9=G3B9Rk*`h*e}5+M_zI5so_>FPVk7(pO=}x1n(_^|3F+zaXf*SB zT~nJh>b53oaryq;n=bZ!Mpob4>I|XvykCz(gfG;fbeCf@P7j7AL?Kn`dUeDGswPLD z1#nm%YeBLP2kR-f4?};NBtASq7+mPmT6S-}tL@2QuhHDwf>Mv!L9W4{TAFz@Q;Yru zIF}imHfmBpGEGl&;|D3F9bb&Ccu5_l%5hQ&daxPmo8Py;yxu?IwP@CAfuEhtO|_&* zibSCbA}v{{sG!*_VDo_)QgAkM@|0HV&-P;EdZ%5Ro&*Pn$UKqp=Mk%g6t!Q#yYh|9 z5>&jE_>F>R7Z3A)QU9%#3vype@7b48Ku3?8JFUCB+A3~|=#avsyHpoS*yRC{!fi~m zc^)ylwT8j1<*Y(VTO9j zJ9yTR+z=AYA~1NMyvD&ag3v=Z1$P^ z01QGAN_F1cm!&kmQMoJ0{Wy5UR;Vr$*lG})Nb{UJecBe3xr86BqmQ$G-l--7{c7e| zn~YtJj|?y;q9DxNV(ZylmP_h!Hk#N++Q}g<}QD`jRT++I(gR zj=f2rUYv^;JJYo6e6RF9yuBUCv=o6hMPtw62NIicPaiY8M&m!v zXaPdU(J!ghv==j-$>EOCFHKZ6pJc?BF&$94e+q>w#)=qZ-Y8*E$hC4-4zIMm^ivDG zi{bXI=scEm7U0nEFp%K~YZhTvUch1M<=NJqV;s!EMykf7aHg~&j4g(jtgx)4hTEy^ zE0bgdv7)S{+%9_jtBZLROCnIoWqc+$*GO$00BX9I=He53^;BkWx^dUjH4;B%-{o>? z#P-FPCAj^`4^vNgZAqq+G*H{ncV@+mPxBZ1nwh;OD@#tUtH`*|v+IdT3yeH+jX{x$7mMWIGGGMx#LqvBh6`Np<8S7JN z)7jJzXhZj4`P3W^D73DV;IajqL5o#A}1Bd;l zQrXep3lv%tU*lPgQ@Hx0Db?hch}wd-6zwJ(70ordjRn4mkHR9l`^y%qgQGNfM`>Js zt{5UzgbE(A)mwK+y>Whi8D-w6=S!li*t4(wsx$Sb5j!_;)z$ivzY3}?LZ%#`vR`5m zt$ww8%f!Hk;!IH~tG*$@y5`5Kc^weA|MXcH&tAr-U!sb(BJt;RSQlw^vp4ZEG(s6< zG*Ze72L3Dd?NQ|nBU~C+}?9KJN0b?r1h)pq#Yw}-h%on6s{-F{)uB{9Piy_*Js_aMyfhNoJhG0 z=h3){FuKoteEf~8p8F07LW$9fKND`8xUA)vFw%?=`Xfi^E{6ENC;mWSQ8Q89h_-wlg0mC`I;#qit0~M~10l_c+N{?PGWTihlhn+Kf_M zam@Z6;vy2OInPzE;E{RPrP&ICM6PEV9>g^^&fVeo{Q{4$ahbLDThl+L!pB9*z8)4D zGe~i`M8s@aY;>5-jg{uw6dwICpeLh8ZK$#ndvRO2zpJMOo~^X>jYPvOgXGiF4bY^#AtZA1jmta~J$_}S_5q2(Z%MjV(8;Y`Wf{b5|U%`AvS zR4UX_QC%gI203wqSsO*UrpM{)q=;Gc%Y>y8r!kqE4=j>8SCKyl{7EI}st5O)iJ01i z+8~}NK=zO3o(q+4Fki>ast>YYJl}>x_x6(Kus)rdM-O`9&J+||5yMbJ(e?+T8pbB~ z0$x)l)(yUEr>D<{5SZ=ZRju#gU*NF(GCrc|z^ zhb{g*+9(AsjR12P6nJjF-jfSYfEiAO=@CO+MwIz|a+;CSI)qrN*xPf088&yCnzJ^h zCKrlz#4#rRzA9JR{rzaAsfDs4YEFR-r9`UUVP{Uxi5Jwjpi%S1+Y1!|Tl>PW8g!^9 z4R0^)jh6|JyRai8*=h>sCPMrv_y;*s9hrd88zZaCwF$HB@)m#n9Q_>OggDSR8-g(P zJT5Z5Quk_Gd6%I`ck_3-0GYs_yO??vDQ%zUn0ALKFjoWT!*ZniNt`r`?Z>xTDo$sz zDtF($sH&Y}XcE^Eudv4sbexKtkeP-nT#~{Ih9E zkEq@vgzrGPlh6T)#230=qF^gjJf1aLn?#x6U9kyjYNPB8%bn}tRtrPC3Ik-n&QbSE zl1p2H$S7>sK{!F~KW-rC#BrA8%$41)d0W5FyrkNoS^Cf0H0%=M2Ke|9ARZWX=*Ysv zx4+{#1wnOj4SG6wJ)RXwTu-l^V~IgdIeMy-sRYm~cV-*`0qBh+u&a!I%9{}e94#p3 zQ*_+88XOW874Kr|VJYa$UuuhbrO7@~$Ic&c-6WL)tReKZf``EgG(<%6AB59qNOuIoV+88<`GGD)Zd6E)- z#F2sS+@yd~^fp`N?5GrI(OCI#6KtjL&Iz+UqNjHTEetQX76WH$UX1vlPqWw2t)%Ki zHHFMw4>c{{0?@;-#Or^^ot_WOrd@Y`_ElV;26B(LUbI}vW=fxn7MB{r{!D6G6(yvU zj)9pH2%is00+DNO)%G)K9i4VwB7N+xbqz96aXOk=FO31;4bQ`@$C^i$3OXu|afwKU z?BD5(Pu?uhi_h%~EOO+xc(HYwYv2*ujLpyJaeJ+9Sq0Q%(s_|RYMjIO_iZyK?b~nM zQmhvhNl9>eCv1b((vK0oU$bHvj|5q%r3lF4W!!kQ4bTL3*sv5KhasaWlMH9;q(do3VPTLYE z(}qr0FQ8sMe)x0cr8q)K2RCc(jJM{R+)qXbP)9a;Jg0X21>PjVy3@O3eI>NPjsuB5 z{p&{@4adk!Sl&#A2VoY%PP}^B6bVR3iOpX7NEnKZQ_n5YEv-+YEdC!~pdcf=32K(W z^`dT>%HF8DB>yf*!gb0fUQ9`^8M-{2F+R5Gd3Jrv+;A(R_xKWt3bx)_c5r|D2K*1% zrx?to+0Ld&_VBS&bJ#!{*Lh309O*zJR7dB3Jk)_u~1#toY0dUrh^vnbZ%_9>KiHa|zS*xWIk56_GcJLTo#kv1%|* zt^Cmb2<>N*DQ{LZ5+VAvQJZh(8)zC3U=ufJ5LnneFOM{OQ~NG7U*vb!~MscE=^2O=_52w`YDcK2`i43Liy552&Oc+i79d@{NO0 z3JLi14{S?=`?VU-&K1+Ttm9OS{zv_6VMor4-Hk{h7qRZv@$8u7v9kYH zb2#ldbXWbD{gS$1_`a3)V6ga5_0h-V_-xtFp;c_DB5TPTB=i`{=8lK1t|AyJk%_tR z*k!9O-TVwo`7&v2)HT1Cc;m+FJ`d8iB zBAvBD{Ki}^D%H}#GSZzxOyjxLX}re#j-oc>B3vWfIaT5aROTCyYy_J{IP?!uqa%%K zg+9+l#46gyM%+ebc%+5mXe7|lDQ+^w zU2EqR)g12aw}oA0j3Ts!hp7~=5**SCvz;7kH=}3@95R^tL{6SpPS5(z9-3MvdaLonNB}=0jgv0Z$x=fqrQ9)wE>{xx;BSTKezf<|XH|@t7u`4{p zc~p%{*GNy%fGIbN_2J*{Mqx&#gu|(_s%o)+$jUTA`m4O-8f%M>{K0dO^X6kqk}qjm zdzw`bjE|A?Wzw3AmXr?5I8Ltk!`1b4@7I51GwY@F`{PaFexC{ykfiloa)cvpF5pZD z%qz8u-LHOxsc#af5ygH=Jojr{Bc>pPCqjO_mZ=zMxvZ}0dUp9M;WDE_afn;3U}7nH zkww~@*mngrahH8aM!RPrXnxE<_cF*jmhUUWNZQxN7!e4UH$xGOHspzKzYtERi9#t+ zvmEF`j1J^2Nt;4@>$O@qTlad>$2F)Mw&p-by-&9d8^H0k#sm8W55F%Vsw=vy}aeYqepY&?6g1mxavA%G-H~ zDFw&1>v``2uNtS9Om?J20=BSf9^hyEV>jUkam%tfg;A(1Vq(sGug~TdIeSn=oyP-- zzrPl|A?6q&Vey%=Yh%XO5SC>|Tt7OTv{|YWkA7L(Isn|3zH@tL@%Z9p3T8lkX1G`P z8Kt#QDDsuE?r0a!X7GXG!RNo{ec`YoGgdC8>%Vw^o;Sw1e(k@a9u(pO0Q2mA4D;5R z8l^cO8RXYVJP^yFulGq$XSBO!^G>~g+o>FV#;uinLFq{hGbver0X-P*IH_Ri#}6&j+gWgsfKTybd4!O>THSriB4*00LNLxwXCf zMCq|JgX;edh0AoY>)_8KmnP-tg&WBMt4qPbaImJ+1&LryGH*2 zr#?T*anMehK%QA2WYa{jGTqcMw{gau`0YlCq)FW38KP=s?w6>6mft#}ybMpaO3lSc zO~hIh6Cj8ZG|Wy-Eo`)ks7}Ty;^old(Wz z3|-S(RPHpsy?#nJZ)NZ+dE?T*e!Q_vEiv=YajKJPfaS{ShW)V`Li#hiTUrBYXxwYO z$?%obS8^1(2lyNm2OG(XlRR8H@W6)@fzu_`}5dP(48!$?vmSlk$>evY-GlT9NN~_!+_&aW9 zCJ+NOSumX00QMNst-X(Vw&{ArZCOWCsN}G}A4{*FRHt%QHQFyFO4sl_s6xD`&Oe(D zLRyGi%eqJNz73G{Aa*~ei&UpmqGoFIuSoVcJBJ}YrfNI(WZpaN!Vw+E%H0ZjXfH-s70y{d}P6v%AzNmirb;4^yI>V2pp zlmlvPO)=nQe%x<;7#oeT3T!wN#sEHu21gZo`C%CRw&f{Zq&}%*63p$1j z{uP{@eBeD+!m8rDIu=5oCtdi3QqUx9bERG* zoX_^n3I6ekptj?7h#zBWy$A#6#>GJfDes8hKSO5>MBnf9)Zn z<6EH@|6^ae8kf#TRiq-r+Co4RquK+S{>Di>gBuXdxnRf^NMRh+G5|4TdZzDO_VY_u z@l%yTB!7|LhprVWqUfxPD}WjYn~;;!OoJbB{#KyYKb8bnIXw>gWVO|x6{a3!{y<2z zOmKyU;?@ZDc>?c%eyJu3Rd zlr-b>eK-3|^!!oa)zsGQlj;sxE~#H>e|ys;%SP7zA*(=%3nnJw-`Zp(n!H&rdr0@oh ztm(H6IWz?6VQe* zW0lI^*LOT8mL5UT;(u?tj(IGnP%WBNSl`sn8qiT-a%du2pBBl7!PX1)GZVku6r5oJ zo$t*&Nba3d86TfG5}#vS098%auaO76xjpy4324&Ss;C)2iQ=1Ke)!{w1lw#Q`1k#O zB>>0{2#NFVaP|F%%vu#Xp}n%0c@5Ql))eSu@t3===Vtg&xHraQ4aC2?<{{nK%=`~o z;Wg!%U^cT_22+NRb`Q*wHn7Lh9AaIV@54OK>lMZTMBzr1=liX$ZB`N;s&NJ|_IN5F zFN|aYqx+~ps>Q$lKbGD5|4qejLYuS*@X5w%fDjXQHn$R!`@^t6O^2Qu%W)2GFC#DI z9eRZyrg9|-uIko0J4oW$WoBswVrQk86B z7n-J>-IZm$t}j>HR(|*1ZJ@)??lnLUA-ye?cKQ#SjwrSD5$KjY2|U~j70GXLbjex< z8*AulHL)pti5$b{)@OMXGHxnlTKAT+4&^J&mX{Ykmi8}@nB+HOvkhyoq41uCFAh#< z5IS=7=C~MOYZvuNos;JuUXL^Qee5WxRm43TP1J#5>Tt2%7C@!9>t)qAwX>X0qyEQ# zd?$Ad`-yho!l=GDCR8%_$euP-=SZQvS-F4MGHg1zQt=gWK52L{?f#nePaHITVO&hz z=4OhN>XhWzxbDFtbubrnO=Jeso^f3ji&B!6ff!8Jsg0Ue=nT7tg%=bG!Qtqz=q`EF z3dIes@I^+uNG@&%HH8$!$M2I5ky}paI9?5%1>cO@tQJPAg{d(QIpME14E`Z|X1lZ^ zi;np*2+b%8-_O|^-+64>qifvmkX&LZ=3yDlqHfo{%-idd3{qIjx>SD8|Gn|*$9y%O zRAyn%{g?9V*->kN<3x=Hj)gPrYJk+b%sZH44exMC4V;B1wH@UAc+%%)iE)TUU*x=q zVn4AzSuc&0c>U4$ZbSZXBFq}J!m(Ubscll9Yk@B0KqqxMsD~XmxJsu~O_uW4=n!@6 zl2W;(Kv_P9K3R@j7mjyXD!gbNh6V`j0eYedN@(zGdOqSPBSIV(n!M@m;qpKPrW(e_ z31grt!b;BW#PPSf65HPd2u+7)@z+2jwVT8gb>Qo>T?$08et0JhxX9C0RLW$?B(l^7 z;YQP-L&6(FX)2gS*2YExkGi(&uc7mOYdT+XZJRfC^5S^Qf24;1?N0p?)-SlM*p$s^ zxK(1_tB^=)PM1WztGUOnF1h(Bxbwmo)1>2q!v=IZ-oUHqTUL>~4Nnw!ZES+3(2pj& zjphEEuaZ-KD()S6Q^G8i27GE#c?+9nJuVz`%Z%LRejk-^?p{)*(Ygj@*Tr_wf5SL4 z#MKbV7e+?Woxf_kKRK8I8r$fl!Idr z`rG&gZ13vlcUL3a*Nrm`=$i|>I66=~@7N9u&8$;RBb{4cKr#wMxeGi6S<@m4W}1Jy zI;03@#|d;sIZx-TW>-0+sCmp`j(Su%3AhDZ_IfTU`A_X*<%7%Abcpu44zBO1U=FuV z=4$^^Wt|~2+sK!c;5^4=1j{_Ex|0UT!}~3daSGdKQmsA4NjD@t&~g|6!fRAJk#vXD zcuIF6xV&|Lj-sn2qWX;5f7=jQO9JPRn>4&)X@1E~mmj~?u!bBn5Dxv4C%K#fqq@36 zRH8Ar%Wl(IeSkoKcFLdmy_~Mq)jHw|jmqjb`+`SvGu3tI*&Gu3N4RNBbyWqlf2-Sn zyIs1vvb{Zi8=b@(0%)Ry?tbZe2J?&GbSP-2NjJDFB!Wt#t+I_zq=Ar=2k*?@9G_Mk zDi?ih#GI|@>06Nn5A2b-P|=EG^`H=aWUtS6|5ld%HBKlwQ}j+cO}sHTTj{3*(LUQ{ zVamaK8>_R{+?lmR&-;)ZLgZ<(O81Sj+CC#y>8PIVb*qL4<5Kj@7CQQL#FFC3N+jJR zHuP`#bGA1t2d}A93iAWL4@rxIlp-Js2Kga;%Is8`_`yo8G=n1KumA)8&mOs^{_@YG zQkZ4vi`dcbLM?{PJ6EFGBMR*W@C*s8iawa#%xVZBws!56QBw_Sf$20jxWQuq4UOT6 z+e003M%sxSa*kF48TRp~41vk7NOxsZMYFJh*q%>Qx$<8ushJIGLkocQ*+^vqrU-p85CXl2E`S@^4g>glq^i%m|U%D!hn$Jz=GY3h&oz~GSDpCov@ zscD^E#7lB@QQ>JWz;`1`htSbP#^hj94jvw{9j9P@3PM6Ppjk@cbO&LA8k)vdZNAD6~5meni9*w zF8~>-f{dmbpts3|v-EqhE!pQ#oKg7LdT+@%={|ktL zpa=*^3u7QHDUA|?ZG?=HQ6f3g(XC&VlH5k8~~$~ah-GS zom>Cw&K|q9JrSMFh(=>EXLxWqLAz zvASD3((KU->+jVcZTW=|(mdZ|3)_dsk( z_eaW8+R)6+Pe7@*+sI9 zs#3WT5^xB2>rQGo?t9UQwP9m({8zdSd2a!vz%EX^ z(o%d9Osd!0sdIVeVp)NWuH02gM^6$6ILTMj>e<#SDX0#pt@Mm*DOy~>c~X7p+F`Tb zXQhyL`eKGc)BZz6r8TY$w)+0Ps%XH~Wv27U488ST(ViRj_K>lJr>XlBTVL=T!Gc2X z*}N)xbnBRJvRfSV=QKo!-=sZ znJX9Z+u#i7=0lzr1kaBOA6~tPcM=>}Q2-hnC$Y{1xndX_be>FH!ctXF?VSedWem6l zsKh^>%&=joZNN?5*zi2_r0lFQ zYI7Hm543$8-BS_6=+-DMwUmN3a_>NNNPJ|*@yB+@7!AD*X`dIX&o;L}vUexjxXYI; zicX_3=l^6x6)1+wK^*#F4h4ldYCdl@t-z!S@6v!&H<0xL#KUk@amBhk3I7A^d8n*o zh(`linsDT`XO?0rfaE~6%GXNApHdl7%wGJ`l#O?b9OIkUiSG~kei!2_&OGfBUto4 z#U}hTjZ&f4SfIM;d)CTLH7~WRB$CVix0B8e!_9f&7Rbh5hwHSAm`SYH6A}mYfC>O> z{OR{-c8fO`lX^Zx4-n78-)jqt1v5_=49damL3KZD!@=r0gBr2~I1dF=hU>?jccm(G z8rkq39cZ5dv5*~|KUN3nPSQR`q1Y%Qx@vZUg@ZaivT^ylI5e8Pw0dGVk~G4&M7mls z>d!aDkduBq_ZZFUyIhu+>H_hZ_H{8<$|cFQT#gXNBb*@JD6zN){5PpWA*yaPGTMc~ zxVh}Z3Zv*l(=ULflh~vl-$RidfSv$dY)|J>w*!3>W~e(3FJiP{sT*}27{2ddy1Hnt z(MU5;6m4A=k@Y!}YDBW@9~#i4xsYuAA_tj$iS%3b%sI~!+L&KqsdX9!L zlFRO6IEVXIZlKFBa93*V?epg3W+#z5-@P9lu8ye(18|Ouo|3kv;WZ5&t(SMChGw!} zo+HKWMGVLn`q$N8h;4_xkq29mb9%>qM5DxYjm+!IFUPwLc$we`sAp!RqRwa)o*Gzu zwEIOibKH;RHn`I#ADR}0vHXYaghxW}q5@x1@hIUR^eg~yFmxS8m4u(4!xv+K>9w=+ zL#A#6S?xlD-##vipmf4q=_;jNAPtXF7TI{NkqILc%TLVRKfaRWe<5q=t5P=&E{t(p zPI#v4pCeGvQ|S&_gAZA@6PrHdDBn7v6r63|u|D#tzEjoUu^8a?V9+819+}8F-seED zh**RozREbxSd+z~RmNrSKLW>(_uHO*UP3NJw@&LY9=(0 z=f%fxJS@gYMYn|_WNdGqGNmPh2u7PmySJ9qqHcUIsVXXD&oT~-mol7{L9t!MsL_|) zi~wf5Jl~rfwbH83^^Vg~e^6DEHr6vCoz&_em`+IFu5bjaZIO>n+B6R<7DK#3awUVp zn1%7gH1Cq!>a)z-(ATC*cih1m288^D!t}ycG^Hwu#%o7zk~>#r{HwxcH@)%^QMO?@ z=3}@J1Xd?4Ej`xv`>FP`PGnOr!fd?mpn$yAb5#4nw)iKC2p23}fNb%^$i`!?W5c*)a@;`B})0m)eQm7Trl{_?rF$=$v7q}ftezg^or zo7&jQpj9Eo^j}xKE>|CU$2j-X;(0OM>zkvjV*S#j{3_+He~OOeRPPWsHqs9lx@F{2 zx|6i_UE4I+XPlUCB&m2Pd1aEY!FN5GMZ@%J=8T0eBJX9hyBxgJkgM+dmm&pz!JiuO zMPu|^SAhTZewl-u>uieayES2vmZU7l*>eE9ngeU6SMyH8R%UZy)s z0zifht+DaD0U1q^?cO$u|5A7aas&K4UvHyQN^!>}X&DtK{qjM^!HS4!j?YuSSzBB$ zT>PbFe(S^;F@;-m=gfu5fBu&Oc~&ntt9R7>WF;c;D}ex*!^d!OWo8S zV<=Mt_I8GER)&|%Wl6k+_q@I`XUo3w+ttFQUygMs)ylhdN)FeuT+1FXc_VB6N`<|& z(q$(LdC7InO@Gh!3+Z%HyJ>2suezLAm~y0764za&JlvJa27;sH+u8}q$3g;Xau<>B zey$FP_=|X{D6z`;=xQ$OStWy*xL}*H5nl0tq~cY@N~5JN&8~OIh>uDUyQu-qDzi8J zssc)XMnrIVi2P>D>0cAXgzvlUU73 zebwZ~Y@c!VWtvXDD$@$2xYM#Fy=0rGUNgQAF{~sUpO#CsbJ@Ox_B>J1IGwKjwPnQ} zxny(kMaFjS$S_iLT}kX;in%PN5t253Y(rHd6A;`FNM^f z!274hHgGG1fWoz=mJZXv1c1zLv!3ehFKm|r7HwIgqy7<&d~ej9+Su(jBN74qDzpg+ zpZ!-&XDdvE!b5%>A&wcP?=tU2bYTR2X8E_gHkH?<`$ z;OxJtEk2QS7q0&|<~4+Tyw`tepD;+)POz%un)WeH9iMz6S&*k+@x0)K2D(}Bv8N6v z&W2dX4t)z$7%++5o40%aW9Fi7)}W%^mXyt(5}atPwL|8Qz|)~*#;AThpr)pM z(7AKa+Y)CBl1f)MvTL}3sj8yPL13Z@3o({&+o{24I6SeT#AbjWj$t5UXz9h}Pc*5X zu{AOMooFy$sJZ2ekiGRm5d(l78p(a5V07mRBQ1tkv^ zxd?kaqSXUMb!O&oY;<>Zab-~5Ze#w|-hSSWbcO~HK9@JRQ+t6b>)V0%TwKlLv#?5w*K(83kcV-s`^SZ`xOiue7>^(|nbS zC;6C!za6V8JBVPbhNfud&nFk93PuNe4*5Df7a*2RN?4X3>@Lrw3dO_&Yvk@j)MFdX z@^U|av)CaXA)g335+{b@9YXIyY1YM^^Har&WLO#N2IE+s>8M{ASGwOyc`w6;VtY+# zvh@7)Ony-4Fr)mhsS#>ST5L*`(B#DC&=|`k9{8>-f{4L+r2{)yTdXvB zCu7WH-HECu`ms9#nShVh5|2{egNxY9tl25@km@d7ujHy>a4GlMjVw89gZsJdJNGs7 z)esM8vzz{{Br9fm+($-GY`DE7TE~PTUV=xBwTCun28$PHB2$#)B1*VMI z7Zo-#90vY1}3 zkcgGe@ncr*{74rm5su#jrgkEt&KoO+q}K3B73QW%V^7gW+$$-}YrJVVt|V$Ol97@g zALturjkF<5yoP=v7oDR zCVr<$7`nBcnKnFxH7zl`{7`f}++ja6mP&{JrQiCEF>778)8A9_`=Wcunup*7sV-R6 z*DgA=#AFxbOAlPPkcQmftPtXVbdf-oA1Kum%=Pw`x*M*A%A%G_<)m=l!i?n6R~?bFrr}+hc>)EOQPgs)`$~@o9|YfR`iJ9M zGe%e?!rF1H`*lmR@^0M#Q~-v}I#WogV9NV7`Rx%q?qDbPC(Y~K?B>`tl{;F_SB5jX z?}c$VSsBAjM4cSmD^F7!$2wyc{h_yheQKr`vi5{Cnxx!x2f2I!Z90@E+RC|)N!a)% z*R>CUhqA@hobi-mq;5R(3t;i&UXJGz&hD0uELWGCOrYsr&1vzH?6|dsM&My+9SWUT zm(xP4cPmPQ+>PYm=n&Z`yT22a$S29DxXR``r$L8tenK~r8>*>QMYX*1@WEfUEVxP zqiOwN{iQ`g=Fd^qkE!@H6p~oXWgt}7{ek#dg+74|vblXMcWtzp=JBHK)K2e>WWH+( zvVf}3qmGBO?oxLk>K0(OlD-&qFe?uQw|Tr_{9f_;%M+5XSeZF93%wOw?`?iyiJ{@0 zi96UVPnh}~yoY}}_sL!0r`tFE>LI=I)3c2&RS)$XK{IP@`t&zsywgaA^ZasNEkC$I zNOHZU*n4`|Xy^Q2kIT+p?U@c4be$2K6j$(njMDlscLcNMkjMcmL^>!jVvj$IlFixhJs@!<|elkr?$Df@2oT&}Ro0-y)%3i2SwZ# zqf4;4L;svvi#FJ);o`3RHgI7?@7qIhnCy>JeUf{lbX#b#=%Zw@Pkld1k~;I0!>E(&$;SM&eh%n(Y?`anP=b zh0wz&t=uEPZ_?aPKn6)q75m=#IIck6+2?PH+4NP-^GTgWB}BXCz5PTulj=PEDn5w( zJpop4Ne?<%b$dd)f3!r5_%8RFBoTPxO>To(0HjoJP(^>sZ~+bMWY|0tQcHr^2uCGo z0S3hc&&amb>-~f?rII3;yilJ@53SUK3&af|#Qz4&kW)w%-&Ili$*ps9;mAR1!oIih z!@6+F)@?(OPZpeKlkF(e1&Gx`dF8Y|1XSlP(mTKL8vT0h169jU_~ryjB6(s0k6r&_ zqChZrtAmXp|6_U@RkNk2Z|r;)<0#KP(WosYns_e-7|3${p-UvfPu+5 zJBS`TSHOzS>#-I4FO)q7Og&}_Vz&*qLg?Sp{!77_ZIaez%xoZ$qioz3d$nGcL73E| zHAk^>Q#<8R;G3Ot78+POWC_!l?u494O^lTqN3cy46kXSV5dfrAsu~Evi=2TBsO_rw zf0kLfTiZAMj5vEvL^ix(eMw@LM0YJi0I2W$&%0q|`PU0nWj$)0!7RVEz0Y-@-v^l| z*aw>Uoh_edu$;@Z0NbdWCOP3x!;GDppL>kQ$)hwHt1UKy4zM{j6V&0&|8H+o>Gt6nmWp z3gwbjzxpKA4&hbVH>mEGh6D?q{jgMW@>o_#&@hCnj`?985=&k5^zJ*(xa*~4l^8N? zX`Lo7*#`Ngo(p%rxjz|pW9s(X|6^6+|L2Wv(EA_6iPUp%Nm}nM$~k|l9157X$Mg4# z5td*xIcA?5pGRa%Y(q}de*T$V`#N#1@|Riql<-H%%A5W5LBH|eF(27|*_AM^sW0rM z!zy1d16hHZ;rvO{=xIYnG@gy!7(<3o_f9#q$G#eB|NPyt`Cw<8VLz8}6&ll>t;ref znCYf};868rZyBh?b~F^*UxZE?ZMW2`f^dwjH zw$UU*Eo&2>aCE+}LF$n{?qEBLEWJrtQVOrJi1EY+H^O(tSC`Rd=18+gcngDvQ9WR_ z>x3n`6jJoK$TM_QUu;<7ufM!0OVbvC)oEd1as*wWBKfcR8Enm*qPba$Na@-Z#@?n|tUfMI#v zXj(^|UsCahAIg7x!~$aA6}W!U>EoyqvGD0r2Y^$3JUG>TS~*v)aSdX=JTU+i%lg8E zyD&p1VOBIlKJvY8@Rc3ra->tO*Gq$V4X8W8wGxF^$_2+TXJ82%<7r|^Ki@FZkVPn7cldcTg zSS7BF&AQM=|Mz;cm1C1Xm=8I7B9@_$fVQl`i7z*Dy!5gpaWqZRpUPrW*Ea5TNnvO{Kh zV<20aiTzUMSofsrW=Y=RDQ`3OUy8Ntp9>-n4E)so#PFV-{@F0_);`?nnj2qn4pUxQ z6*DkCCl7m7%RFABb?{KxauzEXe4kJohy54iM6mnlevskJRHXlw+~MWBe-HqJ@5$?XO08G=xUpP~=7*ZEUiqv^jgvKVxclbhHm*__aVqjxJEH${C;|b_O!$ zHhJ}r(+#9!R>5V-G^ZuULou6_cjB!6!k%lk9-?0c643urple+7gmPX@qSj7SO<3`D zl$;b);PCZiwvjys7^y#7EGdJ{+ToFbauiNIrTF50#dG_bp+SwyxBA~GAhkTbvPMF& z%nWyTm*tvHB@{=ILxqo;dZ4;Z9zw!HJvWKkzpE*ZNIOz@=NEma9K1gUDc=AWsV*{z zt<&{;H04W7i#fWem4DMGe_<40$(_RjeqvSiEwPpuW#8^{Jqz43nL21JEYY3a*hPxJ zOk<62`S|>8baRg?EyCPvMF4u9*&DaUD>?p35CGbT!A`_8==EVL^wB7a*jL0>W9&jl zXuUwEOj3#k+?WuDSObgk2Vr4L@bko5E}SVC0S}`wPv4nH;N|q~6(n^!Lvr`lty!?Q zS6Kw^Km2b>ZmOqiOU3}%&)-N1KoW6lZJ%>fE}Xa13fYM!1xcjMuDPAF>$J$fO z3x|Ukq8M05UIN)b3$Rz-j}`}@Rou^HnV(yJ)T^N0j;%PZa4f>ku98!PM&utj;J?n- zRA7S~W2?2Z7xzu)^*Wed=cX)2Ka;`_s!vSI*%uh5GdcB_Lbt|l66`J?|L!Wih>C z(pc*XSl+LFl15{_x8Qei%>D?!N9Go#Ci|oBLdf%=d-lGT5Cz5xQ*vtYSfa4|I-G(E z)%UqPQkhtqR)5&%exgk90E;Ov*I*&>aWC8_l141t33IApcSXmEmW))D6qG>xz?QIg zM#a}e60x!2m3{X>-Xl3!lx4O$5|nSqc0#Mi_{RFJ;M4zKU>FLp{kkuM{|#|c1F0)e zoc46L39S7z-FD@1Ar4gOVF&9~=ikKQsW&L76PN~ZM;xw1m(F<)6Y9b6KBG-_Sbfl= zH>Pp74Ko5wt@*Xd4$xmWW0i!ruPaB<6D|wnk%demkbW#0ZAfS}QZ-?C6x)4%Knd*d zzx!3XA(!gieJrAEK8&_r_^{_gqhSg;T2-^{JBE;!THEw`trq;8`M-X>TTs%B+pD~* z-w{U7aj&pAKI7yf0!hEg#l`HdKoILl2!&4B8OF0*u(MJ@icd{ebCy+1q}+8HT_6Ta z;m&H)lXtYH4(D!>IiNKDuNVAZdMK>#bwY+-&TNwnU5VP}_QQGgjj$r^P}L)YhskZm zA{wJJaMUkJ>0a{v)2)6|-^@u#wv{A7kf5eGs)E7Fy10+mZ)Br?Sd*k%Qe6%&xYG8c zv-H}#F48)Rl%0B<;3I*`wTo)A_5_($ZZ-uyKlvb-PC%gZV(JhfCFj5#_R2Je)d=oh-E6TbR!Z8`<29*;6S@k$kB-?b}! zqd&X#vB}QFF#mOyfXZxs%-G)KLT+zwZKaIN_gMosuFg}N4D9tiLC&xgjb001vpYQL z*gAFkOM9ArR&YO5i=95X9hEA@7;@9st6u(Bt5fws&68IxfRSP!Gi?*&fwbLmdFS*9 z>Fh<{nJhcs?C8hQ$w%xt2DQhJAMIjCr~X@j*+BhbPFn8IrP8c@6g)8f)f^Fnw`Bzsu#H># znlOEEA*1OUB%~eBt!$i3W!#H>y3PY0Z@XjgKh0YQuM$ffZy-GeNPGYAw~Pze2t^%m zT4(7qXJ(;tL9NsU8o5w=c~Vw$%yI~0V`+b5zxlLPLwc!7S&&O{@Dto0gopT@K{n14 zc{5{pm79sY_PYwBV*?oJviUM$ht{fo&Tq4pO_{FD>qubOOyR}vVyBMsGK*+0BQ!rq z77z8!mm|mTpM2@hW1uT&wBBw=I)H{~C^$CDx#=H!wvWnAM%?d^l-FlaO&WOM+-8~A zxSZiNj4AENSZdmHK6ZK#MT+f=Q~dm^PKz7yCtq!xcWT_iIisM6$4375>>JyYG(M@n zEhu-dp9LzI6`{Dt(-MJSgZhMMH71E_xHmuVDY&A1rW$v((H7FN+E@eoixeK^5LCp} zzZ4>?xl0a!Es>&Q}d`Lh3!s%!lEnOgrJsk%O& z*(VALTEtvkNMk0C%Q0fG-922(D7H)2PV=4d8VvmUC!&Lae=x1_jvx*xEl$B#W6@WC zXIABF8(Ar;+B&aSYnq_%coPnJQ0WB)8+OP_hMBp%^a>G3`qm?mxULk*XY;2ON zX@)a-qNBdDGRi->?8mfNhPGhH4J_KwCgNp^_{o68AhzJAaHF}{UxYGBqBvG3QUm#5 z#lf6>0$5dHu(lGmzXUr>SU@Y;&?)ZhMtK1)RO{}?6Fb!}P9>|DP~So(R$T3irSvA^ zoQROaXbn)|AB;?%GW1*Qb&=cuQaqlWYwwZV5=q^V%yQ^HnH>Ur57O;Pcnsr&lcT&t zDMJtlSm+sB4z|yl;!zfpLbqSD+Zoltd|bpU^H|~pi?fm8T)OCzmPVPn3GQK>CC1D5P6!u{#frw zT*(yKVq+GmO65t`5wAjh7$F4;4mG06Fuqa_!N7QiKNzU zON}UI&YH!F3_f{fI={@~F}yrBejr+2tn~^|%M%t@K8>i&Ano$fsLL82lQpgS+z)}x zw0HMz?Ce=8e|+UcdLmaOl9qxVG~uB&&>i~_Tv$o&1E;D>k99{iP~>_<*r4nh*X}^| z00kCE2R<%Ls9frV!#&GDp>c$)pjKgmar%SXPWA`QQO&)%t$%)Bh-p@TNT+L^Gv`B8 z7PXqFy0xoE4dc9yV>m_C)=VaN>As5SsH3hUmsHSZ0B0UYZ3U{At}RU?^svRBv2uDp`(t$kUfYh zI#){X4U*0B++`)D6Tq;Rn#UtNEDl2liNI9ozI=N4tAB71L+@78lJX|K)2rkSZ9TY} z4PQKd8q%)aqn9TDTFlcsM4r4$xtdNJGhJ=0u*-I#w$Nxh2) z4D=q-?;-|`ejB&nHug*6`DXcQ4NgSKpPfvD*IPy$rX&04sawdmUm3T%mj_SS|tL-azk^y914-W%UUH*InS7(3B+6d=61wXEFNJ{g37wK`2y8F}LyYwCqo> z#vM4+UufaJ@O21^CasbPyQDuxzt14`1JztJP5TBTA}pVpH1npc1e!{!s=~MUSME;` zj2Q)FX5hNHfQKY#OZ2dite~Dwj9v&uh=(K8#@v&oRNsm(!Xmcfv<$b{k!dTK9MZBv zI#?|q#vP(~^QFzG)LzoZ|E%rp|Nf2H2`y5Fyz8@twdbJyh$Zre%cQdW7)h2Z64bX( zXNjz$`b8;L*Dxy@*+4_`HwjqP=U_(zO9wce^&vucp}x6a#4W@NqsjTfHAn+16+q=F zWPLAt9-M9e;&-q`kPG}~X6eT!&M>WJv;&4FaMHdh3N{0|HKD18MS-*`i*OW|2~DKz z;Mm20+VX6c6$dFN^>isqL3U&36KCXPVI7Mt13Fus(OHmIeQinm)2%gke-7rKGs?Hy zc>R9T)l_`Wa?WJA=GAmCHUrI`a;w3By@Ojy45E+7Te&H$4HwzQBJE$&3@yz3NzyF6zMJ=7SWYEk+v6)hmq3Z*bsV<-T^A)F+&e(bj7_8C=31hTe zE&dQf0V3H=90k`!G@KnR17|&S@l5{@prrgifRgrpc$Lj{)N9HkLEoywoo4>N@bwpbg!^92{JF*ZwO7)h z*97$7e(J+oV~~DD+9>p0j+qcaAE=pBW(1%-vNAx!{LRc6Pv?5mu<NMmSZ##l7SXW3`kTHK4 zY=}x{DcV`0x+Ymacv>^c*_0cy+OP7ZT$om#aY@~Q5FePS6U3KKAmLWL^8@1VN-^(iO-g{qqey3h#s8tIFv%ZJe*-H;ntW!>!kFam@8SxEog@vi18cS;ff*D#jtV-Z5AtG%@)3 zCA=y3papxHDk*Wl5;dO8QWzmcA=D>kR+$R*85^65vje;~s7@#dnRs`SXV~m3zoPyG z#oaHZY38|ln~8k9hK(`b`ft>U){*x|F+ruS;-?Ax|9GI~ZSJI zW@{v`I*kb_sqAJZcjT9?FLhG)c@bxcmB2QbN@O?Zg@0;Qp9u#!E+>-jvysgt$y8t( z9X)L9oQ=5`;`H7q8~b3`(j`~sFZ{tjQU00fJDo2oKJNQ9Zt2d@6iX{0Y75N~YQD4? zB!2t%W|!V@!dE8#xXJ7l3r^VJa)2z-YYy%>uZYGReAY=7`H*(Ir=w zNmXcfJ4+3hfl3W8;X?lG1Ocg$ZT&p0?>fj@nUaJp$*R9}Go^@90pU2LqJYvXV*y7Q zU|_sZl!q#hw1>ZX28&+3pAf%6;g{Ii?gR!NDP59JY&2METv+TrW(fomuL&%hRvP=+ zJ6k$F<7=YZryF4Br0bGhWjra#$ zG7M^%?QZHM?Qy1<Y>AtFDXwDeNLTs)hLb zG_KKBAMsrw(j!s^D56EnzO!&3vy|TX`PXDLD;_?H&@W}WbxMtAH|x0B7N5bhMGLQZ zStJ8kBB~p8Pcz=LrhYf{^+os>AEAZ#IOWkc8y|~t_q9@_ZW$Ik08$A!A(x4!I(5yS z!(^5vv_tOCBe(T0bxeWDEV&Mb{K&}}{f7;SD|^pk-KgZ3SD~XU8|kA^ z`kwmY?!!6pHz2o5Jft3GVZr9~K|{<%#&&>AElsp-vTbnH0j=Clw|x%8eCsx`S8M zZqhXz02W>fSlHFSCJb`o8kb(jN6 z1J7LkKJ~ltK~h{fG6Uvc|O~u;6 zEmq9LHGREnaPh(#D>dp-$;25BfEqU^g&s1r^>^khU4i0Js3%d&tcrNtsQfiCdevur zT{Y}Y-6_=IuIfX6p5r&~)|drZP>ze{zdiIV%$&Fi2`fUCy~f3{iA7=}E9){jP2Obu zCZ&?Zg zt9xC&sH3~bjhh~Gj-UqjvFUn6cC1E5+YJ{7h(rByg*Y!n<$kI%y#|2tgb-}5MA==V zoHDTJcgn_b;HZo($a{}KE+5|kjvAs02X|7!iP^XMLGUz?V{_nzZIYdWVAkQk6c`Lw z^~P~ij$IiW@Z6oCcPN1#Je8dnR;q`Y6C%Q=KA6oQZV3@Li;bO=*Rbh z9qN&UrF=J;9)%P?@4~qkJ)1=-lfvexszRck<_8A;C=Bi#DJ@NTN6EEiFBF*-xMve% z^d$bmI{u4zW@Y2V`ntG#P?OhTYGl-{n|@kYKh?W~zqM0*T^TsSy$pNPanG}$ece!j z+9l|-;FiDaDW6pA-TYJ}obq??M~h=5IUL-k>+@@$qQV$z(e<%N@Mz3&OaB ziv+g_-2d;xXsD4D6|#&*zZ(_^b{$R1UY*RGuA*RUw2)1;eAP_~Ne~nY_DHH{n=rE0 zgX=_1WL3{+P8vC4`1s(7Ka3rA0b}2E58Z2OF&R&1=~((pV?S~NN1DbOoa8v8gw2&B z#zsB0;d*z;KJQf84YI74Prq%H%PrKY zLj@uVkx#=l&PTWDfL2-}`?^CaR}L*M7fqT+EeS`zz*d8(IY| z8aWy`39><0&bD&S%3j{0uGw~zqMAi0VZtq?tq`hAvZi!{Z*l!N0;f@2!ytduT6n5t zDz|-Z-9x_974grpoa+1IGY3FJ>kr+jeQk)YrnI{lY| z=z*UbI0~8fs*!zy+C=oMu8@gMMrDIt*2NiKzed}s>-wv@H)^4lT^`~uD$duz+wd#M z$rQ*kB~kBwM3dC3in@$j(OP}>VTvx4SqnCtkx!3j-+tQDGEP=8@FJuem}XdLbmT6Wx1F)C@4`YoVWvVBaQiDCDHz-wZr&*0fqCx9`@=8A z$mo@@9V2hkB|jTbto27?4P0I%t#=bZc{{tZr@Ez*1Rz-yi`ZH>8I^ClZBM@J%3g)K zBz~_G5FRQj0`@^<8FIO9QR`a~3<0Cn|`(#HFNyCZ7BgL~| z795bjSAFPjVtC<9Y;^Xxou5?9%3z&K-Im>Z@~GnD2gOSsARZFBiv38RmPEESpQ9M= z(Kz{`e$V%*-OsWB?S?Cbni?dxd&56l_DD}^NH9{$noinJ-*{$%Xh^M?88d9nygl`J z`*(tJ=SZO}AH4r8y5m!lqvi)fj)!vVw|gvqTGgAeeM0Nz<*1}-$pBK^XSBRWr+^+l zUC2ccnvIqo!{E4cU))L|6g;k(4S9n+q6<$)msn)AJ%2forL!$mjuEI?M_-P#QoBgQ zqK^6a47k+o-tUeV-$YsVR8%8oL2EvlT`yG_!Voz0g zvq7@ps%uGUe2yJRcS%PL8P3NaM-#I~GRF0t2`LWwUz(6&^iO$e2(@CwoQjx6vz-~c zWG{HN2dD5)zD6%VS$48662=2W-`A`(9hzo4C(meIV|LG0<`*2;CNsCgV8UO*%!+ze ze}6C#!Kx`79sQ}Qfd?QDDDTAVdalfh5_od9!;GhN32PgNfu2v;8s=0K26I!fm92YC zn`F}C;MAZ>^*uSGrL0zP(^{+GYTf!FV+N*5yAd9U5gqan->A74c6Y58CP9wSfgjCPp)AaDCBf!}mc%A$=Uvf}*S-jWmG0El{Xe>2Bu9#l81WiURDPMRDD1w3@pu_0AmOZ% zGD$A*R4P?Uwk-Fuv(w{1kdVUt3w>qJ`s-bM7ilqZLU{bKzg=FZ?uh+|j6h3pVeeZS zE$bdj**8fmXJ>zdehO81rFBLtL%%0lL%H z%XnqIn|(70yZqhuoVESR&{WUg9y~$reV1d~`Cnb4hgF&c}pcPUZM+l!SW$!Lw%+U;;l~;?(=h} zdxnR*nOf^#im?Bwc-}Z8%yLdOl-^3Gg~Fh$(vQj6&CbrJI)B2RX;Hw(Pk3u`t+)$4W_WJai)YpjFrj`^sXhH1nfD}UucLrmE zIULyXp`ap3D&)l#MC3rA%H44|iL?uG8*h;ng_OY*lI zOL%7~Ej>9y<(;(W#};WIoS9B9PRjRYW^Cmo-6X|>5Zm%&H*(+{W3i1%n((WqdXM&n z4&iBMQ@>Nzj3CdHxOIIQhw!;~bb2>bZ&M09Z&X?vKjHv& zp;M@h7ZIM+=I0d179fX>gBpo&H!MKPc9 z*fESa?7%Rc(N~&}qI%9!9G3>oSSjrPto}3F`XfnDl!XN0uW-6fxC?_}q{hakovA#v z0?pB5lEJ!*&E`NAkSSpn0fKMt^NtlEq@;#=G(k`K(?R`Lcw48q(vNR$bGY)hOd{dk$`i`H}7H082@&NsrjUu8S4>_Rv)E9SSr)I)Vuq7 z+7DBj%B+}hZ_nC~ew)cDxGx{F;1chrtZSum>ncc&;g1T+xb55((S{5ex}$kl6c!bi zKVzR+JVSAFc>-fTeBKFQsRm4G$KoCtxdsCJ6hPRZ zm5-vKhA2SVpeCwhaE~0VH{psek6hd3(5ij;?~yg z0f-WM5%;klLfJ7ax{>oWWFu7VjaIsgQRU|FQY%Ym-KN8PL5R{3tt$F^H~pPFroYe5 zde^!K*g>J<{Rn!6?xml)uhcW$1r{G=8S;0J;(~oBAGh`*cO0#J$Utx!(-8>ai^>z$ zadh$6Cctzg-=OKeib>w<14_|^<|*pg91w?%*tEF}Sm+-qejTG+V}E0?lu>7|Fx35O z^{j&p&^5mhL_H`$hH21qzY!*`1VV0gj@TqRBL|EE$37?cCgHS8C$zqOO{6ljXtD5j z^=A1fx?1dZ1ar+oF}eke>Rs=1U@_X|jch<(&5W1O>&Ey#jj3L0V*BkPi* z4lc8TK4mOd_vl<2mov8(v7+Y+r%%q*Hi0!cq56q<;KWbcNZsVV92@`W+&j8Ai{=;q zujbw|s;#E|7lta7Qi`^CkzgfIf>Wf$gO&s-UJ3*P1PBluN(Cz(G-z>xdvLgmy9C$b zMO)n4llytkyVkqbd;XuFGi$H?A#3)`UbAP<&NbIh-qq_hbIEhd7L3p$OoKPZK#&3l4N!{&7pY zdght|5zu)!u;1C)6MK){fcj+_*ql6iGUz)dbT)}~ zj!W23{CARS@LJia=u3Bq9fB1JTUJ`Z`9zPsOq#sHH=jhooj~OH{UIf52fc=*+UFVy z#@M(xHn5J^C(&#Sc+`v`gNVwZ%uP)2nO#3q-&k1E2^C#u@e@8SLw1g0&V+mx1myx} zCTHm*dKb^1C8}+j?-%#D=HCsh>2BUCx)Y0cXD^&a)LQXr(_I1;wMv2Bzd1R_KfHRN zel`>p=fNDQV~NibH%e|);kV1JlDgIKB~LSvB~*x9ux&U-O$DEM9)Nw3T1A}IW^EO* z2H}1mlRL;uhZ~k~6x&jRFujYrWHjJox|)Nt{~if@L(O11++Jom5KB43UvoD~j(bJ) z^f8T2wa&>K%s_Q+_JS-A$1@hUm$*-B9^me0s?igx;e}S7laKkIl`4?P(A2GqCN$)j zEfQEe&v^G5mPi^y(N;+VNmXp!rEzu68GQZv6j@23UiQ&DyJ&h>sI0DFycq*QIP}XD z)!>VV_I7ra+EJ}?6vl{}M;q&o^&pG7DmBUakzoCmsE?E!Nq+*UrEOfwuNwxpr7(|h ze$02SYEEBl81!+4_k@0b@1s$dV`pX35ep>1UD9h8_rhB8z4Q;EmXTdCW67)WuDOaK z*KnpUE{W@tbN3P<%JEWg0j3UbB*9PKI5=db^I-`mwpZ*fd~^2+5Kz#@TfFOWDNUAi=p{!9PCmlEv&#l|Pk2PUnW0(P&rBq7w4hH8xP zT?^A=Wo5o)q1SljgYsfz`6&6}aoV`lNi&rt<;HRBQ0sHR2D*KgJ8E&Vl!!A)|3WCi zFsBA`$) z*eN=IM>051TG{GjwF=oegn<$P*DVX-jEtDybCMK=gZx~sqZa>U2%R5Hl}7eBG713W ze#;6_sRvLPlMnu5U+~S!@onaI3RKOWmh@4-%lo*`&auo%SmYE%T==n?MjMn7+d7ft zKdCm1gs~<{QgBi8_m@;7fXy4m7T@CnMFOk()W<`Iv@A!^Fxaj7tmeR&$-K#CD#ou> z5U}uy`lnN@423?d7N2AOI@$AzNcq1Pl>OUtxy;lh^7LrI%44te-8GquzA|D>k3^o? z=vsBHCX;RDa#+dl0b9kz%jQSi{YNyT1|3zGw01X`DeYJ+X-6G-_@Z#oo~h90)?qnb zsJn6I_##^GD%-52ZSST^U8nSYNjFpYWFDBa$B;4Nxx8R=i*lMLK*7t()#P@nr4P_x zxe8i}`Oa=LGa*yGHTR;eE{dczHbYG)KTq^SaBy1#qe9D-VatSy1+JF!Bn%Ab$HplR zelbLn0wLrh3#LWco!RzsByyIl9>o8KZCjIxz?u!EUd#9$J)kv zGE0|UXVB@6nz?;FBS&}N`K|WhgPcaLG^<=HV_qxki7zYlA@!{690qrQ-gYl# znIlLb3vbIxIl^A&vF$;Lu#@&u%cqT-L^8g83rH{#(zaf5gJ9Vz2JEPxJ3o z=Qm&`rr}~@!I>$$&If-=W8mKZL1rd?wLQ+PmHnd|w=uo!t%dCzT|~&8 zJvjJFlriAd1LFhQVC1bq#$Z(Qo748O{Ay1ia^|k4TT%;C$OR zbLBy?KOz(&iz=kG1X!p#7GCGV5|kaeGQL2amhGdFI`R2sv1493>KjW*Yqzj3}x3P+`8>}lEWFi;~>u=`Xw_n0Nf`tlp^ z?ip)K55D<)pKC0w#uu9~50k~W{xTMjj>~D%tsS#I#{4EeYh^5|txuT3PgDwAnSBXyup@HMSe{Cqc3K;qXWMj=LwsQE~1y&R16R(sa5BDTB}Gw2u37>pms) zYpJ4aks6qzL!N|K06cTs=;?zDlw}1g%vtxvC;6u}9haPF_N~JnYe4_8t%(FtLQ2H) z)dHqIW&P0k6gdA;s?_3|xgge3{9)1>FWo4sfO|sx6E^-P)X2&B-Hw?in#a z*U$CUZkHFxff<8$O7p(4rWojfl#j$~sf<85bNPFl-O#`?5Mn%DKgL$kY|SH`U9M=G zSZ#lQ%h2ZPesoVih~{;_rW0tN{1*QQVe0-NPBzfsaU(}u^e5+e0gNlXt^XYhm!n3z z0fV|?C{LeNjd^6VrnN~JX(?OMCNDuw+DP041O|dRKpe8NZ8Upi2hJs(gZ8ewefrE6 zmJWMOw_SfkD3=H905jvOZ;Hj^YQ+0&MF7Jd+LcD>nU9MVo^~8Ir*t9nm(n6s;ytg$ zcS9Qb)#HcN)Z!H96io^Z8nejc*@@pcQ8{ln&C)@_JHzE%p9buD4h{bl;Gcf(nUJSH z5DS*f#&V3-p!-i$?;2FsYpEpf4QfFX+RhynL}T3*<<&#fG!k-h;p#1ykQLPgumKgv z$az2wX8-5(+T)`pSH2#~C>ay%32J)aZAEHDWk^znceEK&kheosl%-j$2mR?vsq>Yb zka9|_NBQ$;v{8)GyXxfgpIO;o6|D)AM$u^VC#lrXmtz;iBd?Ha{V`*R#-KgB;I|VH z@dvxsA9YKUDSrY2-g@wCa=eV0{cfo9zH%R$L{%576oobOnqJ3xG9A0MtOV$Jo+>ES zT(u{w&i59NXI=ahhVK@qs#97iy{CNPka-rtvkA8_}+Ox>7(92Z~rGu~O?NH6l- zsfe|yCd^5bCfO}Dx`VdUBotU#39#L&%;gR$WS?s5xpU-lrf_#ySO#ZFR$(`K-**6K z_Qg+sn&Z<202h}A#!;l0C0FZz@s%J-b5I9zJ9_{R!PI>%YBbFf$xz~0cHzqimCGM; zK5c8V3x~Im_f~x;<_B|XM4xn8ZlgIaU#WYj2y}X=$qEG`iU|Oxo`#}I6Hjl(8sxX; zNv|0m?WY@GD8Hdw^yo8qA5&vv^fjAkhm9QFXt}@=e3gi1rlT5iwPd8NZ3QP`=zV<d0lKrL997I;t66k2vI|&?X3{mOh947eS;SZ-)t(?0 zhTg1LPKt;1Xs3C$9MP(CQE5pn|3*mB=S+H2y4u=w-02NH5KbHE$5B%ng8#8xl_S=R zWwO*vO-x5;TYo<@Jt%3*2Oz?8|Ggy^m?AnBdXtb564dQNHY3hCJ?+VBz z=R9Gy>TKPTdsQlpgDXY>^^K;QpWklM8J@mO0QdcxcqC&|uV!kuk{j26OXe&sef|(@ zRf_N|=!sGw*ai}5;>22*7D>nNzTLM8gZYiG99BpI zr(eO6XKD-;MyE>)=4~$#s>%h&g*R$c9or5NfL#Z+VoNQ>gP}y&X zQjNq^8Y_NA+_8fgA{BFORWgzI0J4m{At8-TC#&8h1Vr4GaEu{jp> zgw%jNlXQ)3>NwSC}QblM)&jojyS4_R3t-eb38(NZ<-*L3AfkUIj z9rhMVTtmIt88Ni{!cP}%2Wv_kZCm7pMbIeFGpdNpFnWSkcmWhHB6|v*|B!Mk2j}NQC+dLKZ{dJq~`HzOlM;%S#EfiLyYtY- z5G+rx;}mG`P{PE;(f{d9iZ!{&RaYDX2BI6Q+>p>j(sP$L-rz0wdvR_asFqNq*&_Q` zT7Goi_?oqP$Y>8Ie<+wcA&@7eC%iwZ`rd1zZt3oGvc+EuG{Ywn&jbX{RNg;tbk~Va z=q*mKNvJ0Yi>V3(aK&x?P*%zdcvj&<64ywuxYn(OGL$v7C<({$#H|>a48T6H0O6p8= z2!4bqh+V$W1x11hpX&((FIVhq{%XNH=Sd_xOoDJEKP#=Gbmum`-XZsJm&!KGT`ya zadEt)Iv7ffPo8yK&)to0JqOpN6;IxF{5%!er_Zf_V}>}5gUiq;)`s^J6ubrK_Oorj7wC*-nTF*={xGh zuLe2Qw8misZT$iv4MXkzR1|EHRD>!#Gs9nED*aTuY*u><<&sV#7W!n4H!9uy8AI^r zVbobL=j1G@gHeNE?HwUAK;P;9s$Pb2X+*}4Zl_CSrz!gjbz|ejA#p(2v~u6K>UhQi z@Zkxa#?6MjuP9Vm?GgeLb2{#Rv^r@c{7;$U@f>Di;^|hNcj4$LKZj^sePWUOo-p-= z=hQH5-vO}gn?28We#_a_vV@ZUpk*K@%qUsk9L^_br>kgvO#UIYcd>Uq#h@Vhc|uSc6DAy6P??J9Zed@s^-w%(;yTX2$PgL}_|7i;M?0joIqn~e7X?L5BxB0) z&T_Wljfv1?>TMslQeVa55Ye!VV9V)N*7I) z@KuzEM0VrbZb6^f{9gW}knUU-I^lh{`1HlOofV`N^72wytc*1Oda%__x*)9j5;(Ez zwNqK=bt4jQ9v~(mmn8c^=&a^yY%x`CeeX)-f=!ns@CV_QxTTJ^K|O6zQ3`)6cDT7l z(fo*NMvc507_yDdb{o&ZQ08(eWwJh|{zj<#_%zoJg?HCOt3PV20y> z*yY*u)J%1Lk-4J+kI{_Lw2_ILiNl5dXAw*cgZ9V7^84k49*HRE_>0!n{2v<3xj0yY z!PYgo>b8^VR_HO6LX-fYER^W<-&%x1%rSR;nSuOi5ItIZ^d^Q&_qIlL=JRbuKb=W$ zvD`#nEO$ODg$0o{{fR8VPbunc?cv56mB~kP4ZyuG5_1otVOv-*NSjZ)jUYEi@Yhsb z|4Y;nJ?LBKWYFi{EJtm-nx#`6SCDR@G(6B(Uk%vWm1QCVJBJIhMJ3Me%Q_?bxhw2s z+}=hrqfVdw6K-cH7MzZV2Wm-F84c%USisw%5328n_w!wzfH1#mzvoCK?Naxvk$3AV z!{sHzYjl2kQzD7)8M4&FSN!EI;E#)Cxg0*cV<~fMxO3Wy|6tvpKeJju8vQ`sxBR8w zz#JJ9UtpJEO+uYLqSwyIh&@UY%eNsmR)bWBDP{S-();$GG5OC4P+QOX{g*vY)0bX3 zYUt0Sn77+Xp(FN1#rdKF7{T4_kK3h098W9D;(5=7%n`j65dc8KWIQn2$P29wX2Fiv zCA4tfp8mI~fsh*6JFleeckTBwv%Z&{uC;kU5$8MV5yc_LvU<-3qC(+qgs1l4!|i#A zm!ZsaMo&Sp;jX+dN^)qdx>Hq=n!Flp0@yzgh;~>+Hi5z){U4E(`yIit^npEQc|l|L zAVFp-!cxuG=4w>Z*=~R2t-N5D*PDfIcOfhiaTttkB|;s{O7TAYevJV5AjMvaAZ^6m z&g>|MN$v)R`YDGldKQgehG;eAdD8{A-RU8^6H7MCC!9Oao{LM7GUgQlHTAto_o9RZ z0yPhLjlT6-XQl_A5TynDXQckCrx-`E>An5^_rEMsFxqs#p2pmO0H47q&Jq#8x8X(k zu<0BOz0X5c=N2Glc`EDFXkC9NqC&#+(z4Kv2L_t_g>N)b>^8pZ(KwdxF2;ALynD*( zdr1NH*5{TSPhNO!myLMf@e4wke@h`pP4Inqx4iSCbC9pmytU^-!OyT5hK5aYkzrFQ zsrPJwNEZFVaJveLZpEG7ZUr*+zsw4LP1H7b>(zhW|6)x8Crg?ud1buFAXswNvte`H zg8gG_Wde;ZI{y%|eA4xPU@M%9t5~Xh)Znu=l)7FK|FTB0)0D6xPB;H0^74uUTZ3JM zbF@Tu>;P=G22>E;G=iectO7BfT1bkE<-IlceE4n0vy6MOH7WS0fBMB1&7W)wV7OD% zszqXp1wThfq2*9rZ8rH>3<1K8}^Vz^p|{SNnd$cL$kRFwk#uNklT!*=WG+4DbO- zx3f^uRWM&<(3QpQ;@7}IpXUurg>UCkUZhhh?TOf?NA;V3Cf&xoV_ILU(+3Mu4D77q zttU#EeE3pq_d8N(#|{)m*8l>~{%raEGp27>m0F`YCyIAj&X_DyBua9YQ}>H?q~5?aWZf5HfgN_)R;u=}l_T~_LY zmaTIz>eA(`xzHCqn!K34jLOmPCQCNmVaSmG@G-}1$ zhe)TsRwnU{lk9BX_RUV;6u0)O1p~EU^`%|f_(%cyi_Zwf57w%pl!>z-86vF%vhZJ? zTAS>JEj}z+pDo0a3;9XPS;c+Pmt5C1TJZJfnC~)=XK-1bc7zBoNZZ*<%6&3t>9tUX zcH@V~7y(X6YGdmjEeQ-&Qs~oEWV_hh1PQyG=lM2zg__A;dR}7YOY(!Lu(hNkLbkFq zC3>`{z(pq9MIhB$%6S=7yEuM)CP|>fzG7(vq-qc3cD@`al|Kr~W+b@fej#y=r#)g< zYamY{@8cBP$Q^K$h`p?NMsq3@|4Z}FKQm6ZXC!f`xB7?6?TQS4iGXa$Gulr$n+?Su z4gwiSW})76LEh#G!q}Y@O zmgXqF;_)BF7QcUoF6J~=kEhi4cu4bP^iGl*-fEe#!=XHw!2QC+6yrON!OkOm%-sW( z@^5z+ZG2{xxko z9<&J>Iikq@Ig;$0!mj=$CsTGm2j<@vQ`IP3BwP%Um5b}|6S~?eEJ=qH(Zi^uDkhH{ z6%*+=cqaH%j%%b=BDhqpM<_JYbF1d*&LEM=#JB{)u zIggy2C%49`DU3W4=1W0Fy42OxAMlgFO#c!6l}u`@#O}`pi0Xc?y6B{Iq=v zW3xzQRTpD{?0DtRqOO@LZS|VcC{hlein@s;H|d5A7v|6it1)DF1)|%UeDD(_@|JZ* z18g=0GG~aER6W0vAS&UjZ2HW(xFhXd`Z}AW`(61&nBtr=1jx;5NV?6-RmqjaF3gER z8rt1HLJ3Ppma%oYUr{0{367c&hL=xLxWDqh6^exJDAFC$X2#7Q!q-Vt$89z%NU_fA|3pHnHv;hFCAi0GKM+ThTivf{5}l?em(370abKAt z+^~*|YejFv=&1MVvdWQax>ZT|A{~YkcCNSxDl;ydHd)hQ&V7$xqG_7e{Ms4TKnR1q z8Af{k{)}sE3Upoc*+7jP5%m*XnP67?(Hw3vwDtr8swljdfgpkBwCEUF3%G%~ax$HG zVKCqB<+1>hwDu3~Vw3tDys0%iJPEiH-N{{z&u>3LA!#5(6^UIoRd5VFJB$PAo;7m=-?rW#ZBN%hV{d-9d4SsEu{Lki`azM~#YH~tY- zVML&cB%;$OZYf2S;UU_Qdc8YJAeG49XkQG0+3@kX|DZz3*XcPH<0`|=A{`w4rGokN z5_YJoxZ)jz7M_qsi4@5{qaLj7sjL-$!aXOQ)v3Ryi!--0wPZ`$?G@wB{0`NoQ4|?X zrklF0ZjEJq%+i>av=)6hZ|`vM1o~i=LwCxo8d=?hWH+cxG!>h3U4Vu`#^R1BW01le z#H5VR2AnnL^XINVP4v$@afV6$q{^$H#Kc$|03Ou^@{u`+)K1Qx`|XB@H)-4vcT8jq zOt&~VY8pG}y@M6g!F=lQ1cFxiHQl9XE^^Z|OSnF>Z20W{}n#bEZ&roA<9&C+O7;~ul zLDKIOo-tUH&PAG@s}8!hKP5#ABFkW(`J3Y5(3I@#UC3I3A=%Wpt3xJ!PCkR`Hs`F3 zU{+!lAGJn_bR@k`DeoY3Zz}YQjP%~qSca$7H7 z=FKwP$xH3BISmO3xhsC(Rs55aB9=v@jDOqIxTN&8#4KhqKEUk=ka0wwvV5ZTSJqO=c#fKa&ZmgrpgdYr|EHihq9@suS6$u<(?)i1_eJ(*M}@o36I|~mHllk zDN>SO5xMgIdq1UUe?dtt!QM_-xBgBXwj+5A>?M`R8*}w=Ai#4sT^#wu%k^xjH3LwP z@FJEiaju9{Q*<2Hmp_;kqQf96U>5VOjxNU+^}xLqiOVgWo?g1}Vl{sjqL#33l=(`7 z7nzcdjG#!S=MIIXX=8G~g?)stz-V(LPM7!oz(Yi%7nqA5CM(3dzc66n;8%)9J^_#g z9Vo8Qb=GmLm2F_4@;5ptyp zseX|>HM3DT080B-*Br|xv}3WLZwB}}u8qLWqw)=ryix1%zeF=x6{F&Y=Q5*TsupID zSqfc@Ijjvta51XEnBv;ig-D;9VXdaEaT@VuELoGj67cRfN$Xx(P@hJj(=fVZ6ypT`TqEx5DI%F#@kpYa!RfEI@5~NWAUXPo?N;c1opMP+>8oCw=|CI5}A_O?3 zi0aj~G4i_CmxWcVcGdwI<<+JN4aMjY z?Ew4kf|`s+_e@Zvr5jex_GM2CJzm7CNFoO}3b7VS8Ir5pF4TGWiaZHhf*%c)F^90g z{as>tmJ>(o#coS4QR%#F7#<`sJ%G{bWVe%-eO3p{=V(Gh{p7(6Xp=$?0-*n$o=g7z zJwSu#Q~rU#9lq4`yO~w&x^GGR?@aR`z9TdE`&FT^LuL!X_w^%LK3_g)k3JA>ADn_dr#=?}d zIVtJ#SKC4Y-lk6O#zhO0iRg-KN*|cB?iG~&B^>cRay+g89nbxBLF5L! ziVeV)d5DV#8#Y#QXs!D^k=Il7d%C$EzD@ajHtNH#Ae&!Dek??C4wW*a?LzYk&H{oH z@ARwq-kCxRnYfmZ_sD?^*}Qppw&w_SjtQ+~z0BW&MAUB$E`m1pxxi66Catf-R|Ql` zH$JkEjlnd$K1HugV)taf)P90Mz-lA|C$jH<6W^WP5sO)d?V2`)iuLpZb=Vbnw%8_O zg?c7c$1hL^crzk_kpF6M_`f?Rv!3^`H6~vWeNZU=KE9sLRz4-vl_oTWWOnNYc$|=z zes{k(F81=CLErUGhv(hF>yqBDNW8{Yo{#15Q*9$Tx$nChs}EMSwWi-CthxIv2EQwl ziQesqcVuXOSyiG&A}4i=~gQzDiB&azTSyAw|s8 zvXj`|BGMVEw(~^6rM|6veD>Dw?sRG1$=)-I>Z>1`iTuh%+%KG zUPB%veMB15_m;5PmzPE_yHdk-Fr}bLWw0p28Ch>nmxV0+ zn#Y?)Gew!r@-<6jh!PZ5|Id57uO&l57Y{!fI%L zPMG;yQkt}!0jHx>C#eA!v7Fv+=IEn0MLSxYHeVI>RCF+sfRott16FaNguqPB8e!u7 zuBmm;=D_6I$&2I$Mw^B5m|K3xA)dn=q}OzqVh|})-&wtWe11w~vNQ4e^LGbpKTt`2 z{N2lQ&_T^LvRrD%-sdb?X~;8(m8$uh$t)u`_K{Np&Q`^dskqX^R`G{ocn+(KgOlDQq>;2qJ8U^h{rJ${_ zHa#ktoMUL=DQzNFiH*VQ+g6*qzd9NgQDL^Nl!w<%88oOfuLc=~sr*U2mdlhjtm#%^ z7xpg^H{of1z)l_tB?V8euWkOU);x0A_O{P!uzSbJXpN&wv8z83a!8I3?2Q-bViN5z z0(84u-k@?J;1jkE%H(Q+P=cMnuol~1+TK`YkklVEOPn_CMw3j@Z7Y>&;<7ig;M1KL|lwvwVTQP*d9A>z9P{q)C{dY=cuau0|mb)v#3~zpLz_&AKHcEas?NN1dV=r6 z`^w}*I)1)ZzR)}4D3z;&QuX}tQ4^XpDy6deZV2gw*8JNMN9Hb5y?4WF`|^3LwMFsd zjt!0#)P1=cs_H-0NEN}N0ED3Fzl2(MV2xqdUEQ}qPtaAY_u!p{G+y!kFb8E5w}qcI z+yj|aY8uDdI)U_0s?Tj{b30A!`$BcA$dw*h3Us>7$?CaCeMXq%@5&Hlt6^tOk`D7y zQBIrdnk?K=;Lm)`btj7WeH`&|-JDCRB%j(qbUFkIcZzDV@+W%E^uej+ZoMSkvR6x4 z_e@FD+NDV|MR4u5=(cNyxE$2H(uiOM$X?xsEPi4y>^T!&-Pa|+THlnME28O^l2Me# zc?2}+2me;9qc74V3BTX!=xJI@U*k+2%j*c!Po6iCI?Y+`jYAWJC(juXXh!@+G_~LN zxpCMMc~x0*LsLV->p^UlHK|8VO|3)2TtsnC!dwI<7fw(zr6&q3m`e$zk25)Q=AW%; zDS@9)JZuXppk$}X$rY^Ath-L6Ss6oXgHlJrK2q8jklqulWc(OtS#_Xc^Fl%76q2Xu z<)lZAwq)uaU-`m|9%rbkG#bZnwl{_vdab?Zn6f(o#+;<1sEZaMMM>2zn$!I%LA!##H1% z=1oE`+gq!iP7uwjZV)a}tTWNRPqE7!^~nMs!Cm?Vz^A7EY1S;&4K($JwYAA|^z;{1 z$MX`%!XK7n!}wDtMR9rp0;S|Lw_N?PQvCIV z8*T(3PV)dSe@Ao2rdL|&v(vmo6-~7zhhc^h|6rgjHRKHFyqwIu(d?jRh-PjUP*U4G zCqNPULymO5v83b3Pdi-c@p(9t6FTtf%=9{d?Z6`VYjFP6p)WW8* z_-^yUN(HzV@MLaF8b44lrX{lCwxJEuhH!8Ii4=79It#1xabz#69H%%#nR{p>zK0aN zSP{F3Y0447h`w5(TK4l6Aa%=O(EpAq@eIA%10kP2oni~-^v`xa{De0UvA^1Qja zWe5pB-&mO!=j|nnye6d?iER2IM>|yIBs%F28MLb8m{7+DCELPo4-QuJxfq^=%{O)d z;ah9M)>KRnRs)vddzr9;u+MO2@pPTsMU zNxFG|hoYI8Bg%EBcd#@tp8%G~h$wF{#|7>RcA_@JkLA8zn2PLxbt4^v4Q2-OQh#te zpDy(|W_bt?9l4CvL|h0&W{hnxmExcob7g{pf>UMX_lMYO&C%iOK(8gC3r%Z*RkJAW zgd>814F1Y)bA4;4j2!iwn7gZ%_0U`PR(GfOQuJ0rgfEUe?dZ)E^^M4-Z`1rzsx6M|#eQ3+dz6dXb>N$*&JMX8d_gULmSIknncPPdys zo#SRLkp94RU&-~<(tq!{Odw6WY@7HE>ZjS8Rl8U|iS%B`fyCPD{3SeD9Zo4FnO zHKRtZrHRxn5suI>E3wl#C(lll(puomaA{?!$uYZq4j6U5ldE!;*0zwS(HIvx9vPw0|5TC-55bzd2hAduVVBL!bx=_P2-0q z0-Upv_42l$#z>uW!-= zArMFhu2IBSA&B2*LW^Hwv&fo%%+5Z zkzdUs_O$MAH2wNM&C}wPKf3)hTh=iHbm8kO8Ga{k*uGNYD%7&hQ)x~Q@5tWu5!UgO z#j`qeKvR+)>=&8b%Lh6Og$u91iFpe5CiIeMl^++?$QBlVEH2(?q^VyL+vIan0;_*f zv>EKP=eWG^3*c+|eEWQV*|L5qdCQl$k*ldpJ*Dj6UW${M|NHf|t({YCQ@;Qn2W`@i zuJeBsF#5$45qPm)VBFTo%Pk~iAeg$pZ9F7I-e7OT9A7|I!W$(_+cSH3@;Jv8UYgpO z*FaQzzUf%lZimEGFlGSK-n{s_Mb}A9=32F4JIrl!=lZ7T@)cD!$VWoc-08Di%w1v_SE>zc6h>O8UkrNGjM% zQWD=k+?&^sP9R@<`B=v2ZPIy_E}4qHE$XN^@D%>Ww87;4(vL>fCgyw_F@&MghC;OE zg~3TA(sHoMaB8~x+^)l5Y9A-J4f#f|7jON>b5BGktq~=rq6}j*iIP-q8$Zw^ciaAN zh>8fg-w3~1?{^LquHX+`1y&WnDIM&ZnXVWZv042CD>MdI8%_x=;flYp`5~6U3BFCTX#LOBt4ys)%hbZjA$du2 z437asx+1I&Fwl-ODCDdiN zgy~YbF%nGhfzH{js3J`XCyPrxji3329Q0d(hJB0KFzU&A<`{PXVs2xhzk9zV5gubY zE$I_&4hF}f*XqWevcn&&_QZ)9F+_!8k~%N0nxrI#>{8;4zw+P|b(AOzlR`0g8DZh7 z3d!&1cW1Ybo1dmh{INZ%l%t(XRiQ|}X_i)u-_4tg;POeo4yLynn6pp4ejKZV0Z4H} zh4D~f8Pn7ik1CN)(TSfO104>bX|BN<$3v;?9J&f3eO5s0?2!oJQuq8%GXIY{`u~4g zeX8v`nA^-&ZT`q$|2y^Q@f0v99s20pwc3#~S??qv=$6R8*W8Z?MEO;7KS#WE)O79a zIih-;$Y|sr2q1U}o~hnxWo#=q5p|RdfwUDO$JSAL<*QwyiIHE$sM368zHznv+rs}; zWLYgjH3ax`06jyTb4VOXTs%N2Ggr~~VR)13{Xifymn4DeDnlMZ3$z~#Bh8z(W=PNP z3kpG-_}PFVRHI)j{iDB9)BDKL)O>9j!jvqQ94_ z{bfEhyBvKu_Gc{+UmxBcZtGtC^Q8TBI1ewdPUUAC@mu=nAR;Miz+^p|KZ!m|6rxIb%deLZe@`S`{`Zb5Bbj;xj8 ztk%h^)@v&K-PVu)Y5eZ@H=ALOMRxqVGfYJz2b zcf{;==yHLe$T0P)Ifd^M|G!w0|8u*y*IQ}}w+|0@_FZ;P-A;G*hzYt||DSUE@67)K D-wq=1 literal 0 HcmV?d00001 From 8714e2e023a0ebf7cdcf7bb8cb062f8e393b33fd Mon Sep 17 00:00:00 2001 From: Evgeny Date: Mon, 29 Jun 2026 21:40:11 +0100 Subject: [PATCH 79/81] readme: github-banner (#7172) * readme: github-banner * update readme --- README.md | 4 +++- images/github-banner.jpg | Bin 0 -> 159335 bytes 2 files changed, 3 insertions(+), 1 deletion(-) create mode 100644 images/github-banner.jpg diff --git a/README.md b/README.md index 252fc95708..a515a25df6 100644 --- a/README.md +++ b/README.md @@ -6,7 +6,9 @@ | 30/03/2023 | EN, [FR](/docs/lang/fr/README.md), [CZ](/docs/lang/cs/README.md), [PL](/docs/lang/pl/README.md) | -SimpleX logo +SimpleX logo + +Invest in SimpleX Chat. [Register now](https://simplexchat.typeform.com/crowdfunding). # SimpleX - the first messaging platform that has no user identifiers of any kind - 100% private by design! diff --git a/images/github-banner.jpg b/images/github-banner.jpg new file mode 100644 index 0000000000000000000000000000000000000000..f7a0d730b8ec44489976a449f8e6983fe58e467b GIT binary patch literal 159335 zcmd42byQr-wl3Z=f`&9M0X7~WK%jBm!JR58VwGO1$RhrY21Pb zhsNFE$2s@?-hJ=gG0wh!oN>pVW2`mSs9CGlH)nmT)|^$f?ta}Z0w`p?Y#{)Eq9Qv0 z8}OfUw+#TwxLeqJ10Db#-xq5G0C&59XKyT>%&h>HKkiE&+|2+20S_PiL+;NHA3eN3 z9zDF5NB>KnJbHXDkDfevf`x_kg*w{~>;{HSM|F=B2umAYb<8Ca5sw}K0S|!>9swWRwLf@#4;%3G9@&3d^!N$ZQ*0dEdzkm751#yA zx_hMe%7+hdo&x|_5B>q@(NpYaMEF?5fP16v?*u-jCnCn?A;EdWK#Hqj#_P;j=}uNH z{3%+h%7a{xDnrxUr5q&f%4C(G>nT+BbNF)%xMGygEsmLAJ6?x^azAtAORVJ>i$JiR z$l`&8j8a$>#=DMnY4{b5b>&mb^A8TKL*X-sCTv_%E;!524yrI9wRKo-lp zX#oDC2lp;{1O!L|7JmPyC;o@8@O)-V_N1q2DiM~5(1r_`kvBF40z zlDtywa1Xl_2C>a#r07y#yRJ4LHNNnSlz+Lej9@Fo@7PG3E@V~agcYFYtmTTS7{9yih{f@LFPHh@kn5yzP zO^@aNfpJZdV!>whGa{|6B+4Av4y!J$JJcrbk4X7r!20rd_;|qBXr0&{z^sE{nC-)VJGL^#rwhlGVO~ zbxrwS5&MnJ)#6z%6{At0UiDY767sV5jYp&6_OYfD4 z3QO}O^JnpY9EYeaQ;2Kl5c%Bep8@)AiYDJv_rauN{5>f~^LEM!A8qYT+-mXHu)J&nZS4vqOw-V~q zhk1>=e(0kX@LA5#-);eWEPiQTRj|B>7CCEG4G& zN{gam9k<4Xd@Vq}kB8R7b#_3`Ic6@-FaMd=1?BB)JV*V6zu#4z++KUDs_G3 zbEa9^;G{qI!_~)g8h2C#@eq#g#EYtjzDhR7Ap-v~tsyZ z<-yA&kkW2zZgpW)KPCX@f)z;}PE*SmWk*u4j;e}(WNRLBQA`W=&#rDxoyp?pyYzP| z4os;qFUJYv>&R&ST7HyxRr2cMd3@1`!lbJD*K3{PNAIBtNmpX-|4n=U?bRM|_PJbp zVr2#}_N-)bf^qoS?0Lt~;U-#$%E1kCN~0Wfzq4#D67|-%1MMyGG`^5OxsJpzFVAS8 z8#V(fXY8JYdo}IqJ8@>!&a-1Oe>-bsXAhNbwv>U!YAKN)`2AiGw}B;MRvh;>7b`oi z4kD+fhHu49Bue|E&PAsOToddUMR;ZfVCKWc&G zAd;ENs7Zcct>dz_n($sN$_XUbGs;FEe|=Z|HHfooo374FgT zka@WcSJ!7sE**(*U%4-Wlh%|R7c)Chn0>S?aBncQ^3ylEZ-3!T!j}~pYRoCDUk?Pb z9NKJcP1*Z8SbMEA5JNBZ`VCs(Z7BBE4=F6HI2$Sa>fkvKOx8qb1k@z6;m2Pz{9n|M z3`l$G=1r3v-KveYmPI8iIlni9*Hpaq@mnQKXmK@7K$7`bM$qun2NfpSe&t3Un+?Sm zo(m)X{Lx)+*xgCn9$QoSYTLy!)5~YZ77)ciVh<+Le&Z^O>mhoR=4V-8P1eWoQDw4h)JL$GE87xBq=t%;rC)=jjGOOdL$BFpt6x0 zU{b7gYFk)nZ!C^J%c(W~X;d4!hoWVdvo)`aw~28weR7yyvvK3fGwPeyEo?#{qat_G zU!|UWcp$`@E_?(#l7Kj_6?PHoBo500hgG~GZUa+#jbAt!6xH(VP5CY*Kdz17KnBVHOg6hp^QCT?YC22uMEnP`_Z;2lnwl`DtLK5uYK@AA&ttv zcKugJh~fojuu7SOQ3Y8#_luh*dA||fs~}X%TXUm>&X$pLtC=z(U7iN@Djj$xPx?dk zFRPNoiMhz}5+BCHpYN-wSwtdgHy3oiZi7dM20w{KYJIuU9Ba|C+1;#NSQLu*h4P~w z4%v}QJlKTegJ>Z=*M`&wC2*GUZ5px3cmEpPf7KFLKpEIs?f{ozXASem+O?~)X|}`; zHnSh9lrokh*zyS2_eT?>e|&tu@?Y=$A1Fb?sw4p2mOE5wuPBb4{t)wZ5qAI37H4cf#0j?is8k=T!l{t8fFOsX=H{irl zN1nc7rlF(SbVRRa(hHp^kWuyPBk5RMB)pN`jXm4OS=ZM8NRcs!MxY9rsB%;;{7x-ElS zL)eVKc~a8eHkph{;_330X1;2-KsKY|;NRkO2ah^@h&v%dY5Ibi#au?Z0=XsGt6gu> zhtH}t4g92&g{SWT?MtNc8}0JL@YMO6&K2`6Zo@)+31;{4r9#&p6<#-U)#iWI$B0!y z$K}N1!cGemI68WaIQU6$q!K6gVB+A9s?psDj%4pGP*;9tc-*KgpUMC*3YkjfyfHPy=1=*v zcqJEtL?SoAL%9m2iDTzst8uL(TXvTuL9W2tI($hEWGS~ta-13|n1@H)S*TTWwYCJA z>#p*ymh+4zn*4bBy!X;u3lq=-qV|uv1VwM@)ksif4Zbq*R+{L=T#~ZP?%|{7k2fuK z-IR0lpxZ?gaff$+S8}o$bRlq9zc;ASr_o9999raf2@)L!@ld#J%*+%6J8B7pMGX&3 zMBG(4%Bm7a54xU@+PSw4<1lKZj~V@G=UOhDI_LZ2SAzXqr*R9ix$D%tD9VGg+R(4e z^_vBv3pZ6!5;kj6N2`_PedNqkt&u4{Ix2&Fj*s3pEQ`F@E*0$F;uXIG^a~>1Ihe_@ zixe*;_D{S~wn5jV`i;~nt2WRhrrg<948Ws&AI9QjKE`>-V;B=XtrkMu{PJckzHXM$ zE^PCNC?yMx(D_?cAkg|P%oj}M$__cq1m#lCV|mBr>~yjf@k{?njt9jH$>hhZj^xV` z%12?Z3Brd0e!Oid0^R2R$?yXJPVTq{TA7A!-vJ(ez{2+}qWd-qxdW80Nv55C6CeQq z9+})`H~se1PKQQ02xgr@kQP2>h_x}^8qp7)GQVZZ%St*kCE0=(!SX3e7U*sl;vR#E zFMLE_vo|w8s$iO^M1!Y&drLj41siYnQft4yqW|@4%rQ-aoV~+=p++1DHe=6u`^!

CJAWKUDfb`4E7rYj@pO@N6V@d<%b< z+{IP-YC+}M;@H5GXq^>L0Wwl*KcsCD+grWF<>L16mm_kSHeWw0HroB3v3$4+UGpq# zoRO{;f?LqUD`-GJpOK2|={(%lO*NZlA7MCeI)ZmyE#rjK$aiD>*3kW9(Z_Lr@^)42 z#Fgy~*37C~?v^(+uH6A>OCh8QX2>a(>blzGjvn4srL^S|WGyDn_DxX_&M?j}8^Z&W zkN>pbKTcImyPl8Kr}JzKV`q(*Q4lgZxPdXf4FkV-uz7w~jtJ5j+!=_Ndk`7G1!*_l zM&yt^a89H`q&re4h$cg~x>vk4c`23RqB7EnB|ZtZ|FC}je>DC-a7lg%uJ?=$bCB7T)PxTm1b=%FvS4OFk-#ocDj0#<2oPBF|y@LGAplU0K4XsWLIX8 ztmloQ>k-ox4QcC}%*z$@t>uY06Zz1X%VT^Av9J;vm)u>d6gDkfu+vf!uqBt6I~=_U z>$CiF>2*|KfH=zH?>S@ZAm{NBACba`pL8lF?9%RC&$i2321I;wI;-)p-aZ_rsaigkkx!MGhj#8c zgu%+Tp(R8@8;pW5cK))b^w0|)2A)zH%{)A8kJ6$ z6ddIj;wKEaTprE4NatO#PSg;>kJikg^EzRCU?5G>bAJ8YNDUm$pvDeNjP65;$3{x?u`ScY7=Nf?9uF)frEPhZ7nHg=`Arlvq!{|~u3 zqc~PYK{l3frw5_yyY?o(G8m#Mo$64v2g@fB9Fi0{HYIGqCq674aQq!QN9S?AgjBoF zb?eU;K9$J0^%%gnG!yJ3i@JDSY5K2kHgCM)WN^^2X@g4X;yIR5%InT?{(vg#dH3Px zMZfb34c7Pn!SmK^AK915qc7*#+BbSMnnWP(QkUkn@hmh3 z+LgsFjGyW;wY8X*1cRoQmFJkWM}1Q!gyx)9o2>!^(|Nhphp=B0Q?n=Nai8(QFP0uG z=FSknc(C_oEQV*(qDeo*r8!LC#9P;?E;Z(`ak5%v)tDmuyXQQDk?uPq@$?3{YE*}-%gdHntz-+H0pJ7$9Uc}f=-vKpk#XtCgwKi z_~79+ZiB9ZVOFGz2y|>n6`R3eJWaG z$RFL^4ocn-ja0wTFbL#oEvdH>v6xo+=;)K5Fb7T7@+47WnOo7%kx2vNg)hJ@LpH@X zgJx;hppwgH{Ni1!Wf)FgLm4CE6;Btjs_5L2O$3*vvhP})u*(aBWDOguF(vQVcFwch zfV_}z++J~dAqwrnIlI#6OwA9 z&FTZ0gU2cD_`XGUa6G57g+AV@O zHC940OX!g!=lT+Ikx;STaXE-tlwbA^UG~#_iB|BL`AV3Mj5-rmO4Tu#SLsYhBG_8i?pi?x6i!Ss#^ zM%b17k7%>-6>S$wL8F^E+4|X>KQ)OawNk{j?A19e1HXMPy!dbjICI}O?YIiPm~?sc zqS-V+xwz)!@p0&nHP1~mCxpi;nTfpN#~pX=)d}%G#~_EHnydQynV+?E*HvBmPzvAy zY6rd<%Rr(?ySK)3Q9n7wDVnSWTE5T0d$@}HBz(d$TB4(NPGzmwry98#yBJEK<9f%d zwTBFiqqc9d#~_f!q<*8&*VM)jf+bKUv9S#sJ>R3&8(aofc3AVDjk9$)+%8GkqrW?+ zX+~nUD7tQVMS2{8AH;F&nd#d(6<$|R(`|v~N^L}kBTwO5$m-#J{8-kQIaZd{ZB z{q$~xi@5jGwqB=vh8^0T)(I#_^B{kgCBg_h8&y}%#xO<(U+tL+*fbUT;^6U$c&l~( zA7^l8Jsq6R9?Y)E##!Fx5^bdQ=*??ck?*ezuRN2}j`OfBv`|rfulIa~QlO8`TJwGL zg7DGDT9fdbsoivFTF80zxs%`Loii&feF;fVXL_T(L6;cI>1xa7V(k7&#`5VDjRQ^e z_|Aji7VeguiJ8mKP?_JZqQ~EB`WjrqxfzRpc+{f~w`jlFfxKl3T#AZ@->`EW<z2w^MdY6zEVN#K7`pdCv1)(F6F5dBWp}WiDilIFI{XBW}a5VjIq9X9ZCNNA{w%} zwaGls>U6Q5m3A~@{GM!S?W;hWrw29ZEW}l$hQTz+qAa?M=877JCq1k(9TW`ZH0C2p zR?JVJW;;Q&HE0ir^9p{>YTT4H{k}8Qoy^srP2cmih!H8Ocm237gI!;hB{a@HbIkI~ znbtf0hQoeCE5o*VHQU;>Oz9;%NBIpC*O^&oVzSF`lM&cnlVb! zxSmDX$gB29@ozjwHFp4nbY;ukkt?<1PHb&X; zWV4A#iIlbHIOecBJhfG`a_M2j&U!`r+0U)gg{WS~`2IM@p-B#`S?kmAYPCR*nr z7Noo9?(dq=6wlBAL*(=0F93a$Xt~ip_`@2z$G2gBN8bdW#49uEpVT?>6`L!IXKM%w`;OZrW7=G zpWRr!rR^D|v{U|ifUA##kigR;fMHZ?ph&+iYG?z@w3FvxWu* zlL~#8V1vR73x%1K@HxWg%O_xCxBdojE+14|UPWdDc4JrRCR4QzI{SiHtevR{>MJWf zw%tjs7^kHSMm2<-Xzp^?ZXuF9rp~>3@QwDygw5{SzE9X-d>s{5pGxk(ht-&a(OJv`aP2c`? zQ~tOtib0H|omFc1U+12AHJajFX6EGrIbgaZJ9{40SboVv!F{zD;T9V zb3hDC|6_@Q^@-~D8oFl#;3w8u;3Vfr!nRaNKlNi4QxwQ?vlg*!(R7tJ6u7lrFZq3>)FsmxfL^EB?pRigPAqOk=B%vY0&$Ayft-Rl`2IJBpa@D89vD6 z>eor@fVkd)%Cj>kAH|X%`qNDW2b*0uj4!Tm*1Iz>l?W}TyQOzw|}v65KK z8!FB6cN00BS!zv;d`}24hV#LA^K>qAFk_Esm|D=(3xdm^mU4r|Hdf0(Uh1BS@AFY% z3S{p)61E|k#Nkk-L}hz0OxaE&2a2T#4ZEMjA@O*6-r^p>PxByIe8m$iKNZ}qurOOn z)ztd|Gd2F*k={&ucY0bj)QtZ*LiqJBE>Ef`N8+d$uNZ7}6)#hwZOxdpcawm)IycXY znW5?^zm`HDO4(P_O+RNMr0F|irAEUwS5NHJiU)z$Zb= zuz=rXmw3}ZzMN)MB3Wm1rBXnnVS_)gYMbAi4yD$bM)7bDy!;`+{pJqvKt@SzAiJvA*D=U&s26?Wwfh60x?&K+Y@&8;v6>P4eX$oGC;RYvCy&MlsAh;ruMG zy4AwNy}>MI^)2&gfB&IM8hr(W@5`7TE>vADJUXLI5m=0~lw}a}%Yg}t$+LKiV@5D9 z>K0U)I;~-qcsr$(UE2L?4tnj;xlClcIibm+R&Ny6E^?(A^PV^`uCknuqdmSi9*gL* z#Ivb9t+6S;W1DcKHDSxsRi%M3M?2WxtLjFMBdAQ9r!JO7y`m-Ld9wQ}&X;@w@h@lG zx~nu}f}Zr9TxI!C^fWx|%vLn&+N#-e`dwn!30cONO-u`tKp@ck(Sm~q!Y8Enq2&*1>aS8;reyoNt#;#bqdq<<=`sF6J>Lm3s7{1~696%m{knv0gVLu!grKKebIl z=W1M+zp`3YMEN=e;W%a|sz8(wBW@Tm6IE+O7@bp}eYN=~{^|}#J!j6IdJVpGJtsUZ znV<@7KV9{?T$5zQ6TiRU^$HPw4|k^@huPTHZZR(RJ3Q*G_$e%J4C!Wc9ZmI)NQ_Sf zbH3ntyR}werd80Z)1qPQv8AEFlsLXz&77Ap@h{_ivAdtd?BuOUY#*x44{fizo(SiX zV}K8dwY{J9_)A+Q=)X#aIlKGu@96$%s7Al!pjI1*N*Q$`76;+0 z1c<`_RaOVig+PJPHYV*sx<`+i8pJElvK*d57)9;?H-ZB5l8(V$vI`s+S_5FL;!v&z z8kQ{6pT(AZfpqW+(}x5<-LcDPvE{$P@<7vMA4kKoW9& zU=Rp&0D4XO7WYy8vvm*Cil(TRUAll0Waf;R2k)8+f?jrD3D$hthJE0?uATWj@V+ty z^+s3u%+Gl`XJlRpxre)bLGRf^?v>`=CD-ScYvO^gH;)&1^~s`?hvLyDOm@1TyI}(6 z|Msx=Uo`mWz+T!$@CC23EhGQSK`90<76?S5-CX7O_&TbkXwHO&$YW^x#gRzW$vefW z&+AO#x_DY5v%27dDpCnNuiDa|FN6wFSEyZ6iag|6gF916@`0wlNr8TK(r@XiR8dGK$FpNUQErg z2a?1f8rSGDCr-K5+ExkV7INm|-6+C>yh=4Jq7P|WdW@qNVP@u%!b)l(%VV#kZmh03 zCcF0X=Ppv4)J3b9PlAEvgabuNY82&mcr);j>qLk{F7EKv7f${gGc#j$1gn&Aft{j# zX~_3lJnsw|=m%N(ltm;{{0T*tcCE}@iAhgV#bQbGJe`|YvQ79&3+W%|?h`um1j)og znT!=h4RS(4pk|WZgiB2dqqwU4kFG)(UVadg%8i~fStBH!UCUSfL=Kdcv-g5{mOdf= z>l>R`bXB+QtS%%RQIpLJVTo#=ZF#jZQ^z{PK^MoPQZ`7C!{WqhC<>)Q+elyIO6ZgThp7Fxe_vt&Ie40&&s=mFDkmH zXz?g!@}O(en91K$Djr@CQ?C$;rsQF*MRggwI{?X{pD(pS_!rAwy5L2d>N!O=7Sj)% z8p%D={f5b&wqYBo&O8x}#m1;P4Q)_hmsEIU*|@g8uS!&y=C2@{5kCzwqib+`Ob~J_ zfJ3KObd(pA#MY?`>?Fv(6pu2AYA)BKNDo8!{$;yq;XGoED$_)gm{S zKYg>?$@zV!uf&H#J6JScSEZmLOw*N`O(l7lwR*H0!?&c9W|>f+LHU9ALFym>>uF5X z#m}swCM~N@b~rEg#`SpH@N<-%yU2mIO3&jk_lZIV(CcHHX~L+@nW^~=wMUlySp!9N zTMbv;cCik{uC_66?f{!2`h5+GESk z1^>vY%v-p`R^!PP?zURBicQQ;s@aQGGSLwF2@{$r~>ossxTQk{?l z;jgm~BQ<4M*Dt@8>~HYvwI$%Y0&~#u;Iy#B&g}G8fz{dhm3+|{gCNC?(O;7vZW`t0 zO7?uFR48t?JPD%(kyc}I12rsM!ukYxRQZ`I!CJX#MluqcY@K7a;)-H@tC*Ld_y2_X zIGKCaxOry7+AM8;QsalBYr&OwSw^)Yw=GI)$N)h*l&ruatdSp+qYmGi&`cKm&Q$?aBEunIfazIRf491L-mkRfs$q_ zHVjtD@CWU;|M2Jk%$a|AD;lG$J5z$kSo5CUyDI)y`;oUBES$k#-1qaUc~cen6x4dV zslXooxw|jRCt`OEbTUZN4?fjd$8#3R&7agY(m;vWpBi+fUxXEEP>O;!CutE{ZeH$# zy7tn@XTKL5pDEnxf2|udV>(v01#Oo1deJ9zUlYaL1Q64FL6l;{B7qlv;+&Gku*}!; z+CBW)5pe0r>u7FsXF1cXC&~(oX(7Lviy2B%Vdd!7RNRt+w$ZMT;U)S~ zDNN{40sHL!*zG5BD5*`{8b=b)PjUs1YH@daL%w=3EnO~V+C2x*Vk}zwF&OGqR<@XLe7L5-Kl0btbiUB)kM7C#qL5x>I+M|B0 zERLMr7;jr{GoQy2F75>??Gkl3p~&X51SJZPugZ6dglxLRM>yOi?;DY|}LgS6Wym6*uB?|)N667f|Q z2cbF5KRM52Bj>A91p?ts&UjjiXL5q2uI;s|xA*+k##t<<$f&`rqzOkDV~0zP!ul^P zVz!p5*LJjbHHd?YAl4g06EAk=wVNM7d5;ax5iAVWl&uV`Iz7nrKC(~ZRswM6P1j#n z_cO6pAna_n25sN>aSqw0iMufZY79xr@ zYl{0|Kc&7vcJYUyQ8BT{8r!E1UiF8|OAM~=Hu@dyuX1%eaQ08}<;6L|-ATuGMb@=P z&cq~kvxo-dxDgdRz(7HZsfpFwE5Gu^y229oS4Jfel2uAfR{T>vb!1vz`@~c_CdzhA zEPb(J(k9aISC{4H(eImAyQT1eB9~ju>j8dWq1;kCxRiBU13bv}G2^?Bf5D5tx0=5n zQyRNM(ei;+lqPXS(MlV~sGrid6qId{V`(cnPCt4xXvJx|*ige3mbIk4=1K^y?7Ezg zJl;I2Jiy?@tWc`D`vuGLZ;mRB#&ap^3bMWM)?s7lQ~4o z=$ZgeeD}*po{#){Joiu(ji!UsT@j{!$*!Ab=KG8Nb!Z zj!AnV#&@GZjjTVA6+&TZu@zZ0mw!mj*EVD(2FdH1q+wYd(*Y@=OHF)v8fHxBy6_M< z;UpR9tZ#!7f4+iRD8rdTB?-$C`?VAs44ZMu$Uj=H5SF|TlaWCpfp)%pmrsO?fr*h$ zRdR1=vrU-49W{SMg99aKqSC)X!xAT4QsH`>WH4X)w68f_az}-GV~$2+w)B2g{ie5Zz+zALV(@lO!Xr&|RpLFg<)HKqU@s(M zceZQ0&me3)Svqyp+PmzKbRm&Bc5~;4tEt9Le08}l3J+8y?|A~A%??<;Uzuk=5=JzsuhU(*T}*rJeUdA3e7fu) zc}4kiR5+E)cAx&@KZw$A5yed9p9ib$?Y#pCQxvinC^AJO2*f`_I~1r-$C<^B#v;(l zh9hB3O6A|Gco~MyxAHJ}ulnO(7CtdmcMGyDh(>H-8=jJDO@^WJ>*NCE{ApkKeP%cb z>gWHR{-(la#K@hV+GPyELd?Qi)hnlTCR?ntN)64n2N_C;>|eF$WoXyQE)?v}2HIvI zKhUe$N<--64)MdKFGKpro|(Ie&H6E!h$*!6&}JrplJg8Puj0rNOj9;0b2=!V} zxlpSMw7jh<2@3MaH363(PM<^R#{M{p4$CPj&)>qws9yALwk`$sje{VAV1-b{t+`31jz6k--Fw^0Bk-|F3)jPmdymw09 zeBKfKrrvi))U(q1LJ%;x9e=+Xe?KhQ3tlDpV*Bf#6rTF-mshH9C~|s*A)zsKC~afI za1Ex|9eRFqXDJAq)>x5PG2zq>v5tilBhTx?d~+dLwDs;eMgqbSlx-WYZ8Y5-Bjc+) zv$({-)m!|!0OQV-my9`BVsPTh&k_At!S(d_E3P*#d@RvASrWLH=iwrY)c(Lop|!>y ziN{hA?F^-vNnaN?td?H(zlOC?*!q!lY5F#c*hx4_;k~}_a1Gic4^Cf!mpM{QI9!pL z_x(7B#}9?nIRblP*4bE3?f^!5Ym8D8HX&Iu@d(g*mJBp~ga^G#vgK7Mm#YZXo*5(e zKA&an+l!K`QnBDZUMg`rkvs~_ywS)P?P=lP@2ecWtUYy-b~q!jOY$z{(1z~Ug*dgA zqGw*OAvW^=!t;M~^&ZMS1mw~@o+emw!)@Ww*)n&a{P`BqwBVlP1;mt zFgf|IrFps={hy=ygLB~D(k@-arq*d>rnK+lGmy@b*56@1easc^?}|2)xuif`v_C}? zg2j=k>?LvGYP6Eq4CcMG+l9F1^6YM$cps~qvt&@v&Y@yH9%2t&fpKP6$@}g5U&9)7 z;@j<1%`2f~X~VY0>Vno%;(^@80pOFMD$S^-m$@V@k2w8WirBP58#LMCksK#t;>`~u z--fnuXX!Td|CV_71+5kmK0waOl_Fnn7758^F?Dw5M^f77!H0i%7n3`aAtqvmV!OJ) zr!e20ZAPhin~=6WvCLIQ3hU=hyeFzWxHHvro#_=mGZDK*mPrFKKSSYs>Ew(tb#!k6 z#75%M$EofBk*kb?kkx|AVV>pd>CqRD;Nw5Nf+AK$AmeW1Au2NW|JPX1k{uS5aJW#x zYQ_dxWMw7{5u~SsTD5)Mtk26Ozl~U0Ah``tBns&fxneLIQ&71Q5ZhVlx1k{9w_-74?# zlk<@Rw$!n{6N%r6<)KX!O5d~G`f+sOcL0i<#Gpp@`n(8q_~!Go0wco|D=qC>W8R^2 z+jbd~NRC7`a}KR&#KV0u{1-3slP#U_c&u3&zXdlM) z(q6Y{^-y9RKIP{Y%*qQ6Y72p#sH#{CYO>S|J_2#xW%{Qx~djhW(3Iw*1bJFdFZU| zR<#UK?)^eCXb-R!TIP0e+*0r7+_S&vlE1ln!l_7OvuVKpWylTnmqMSfx2AO7x=8fR z<{dyVy&-R46ycp$!tr?YH0*w=@2Q*H090Z?4BKBXlHW(dOTV6!HuO^b%Y-p!a**-c zFT9MzbzXl$n6*aoq!>@nal#c0r^nq1AG6-Kwnz)Y^NM6I$vb6=U2KDeG?vPslCl_W z;3l*S6F~B+k^(g|pLPSp0}JP+Lo4zhH<=TaR>xrLJgn@Ob=pr6dkZK}n(`w@#9t>Zy6Ohw66# z{yz>D51ei%?#blu|4%Ya>RMiyS#Jm{e6`)b1N^3SsmNeWo-V{B$b7z(IW>OZr#V_0 za`D-2n&GxeUuu&I&-C3zVo;I2w)-=t9@g#O=CsEg!|bRGO9e$g28Ls1LS51Bl>bb?1+L#l(+AtPHj2RaU7SQB^jWuvApi zOk;ugV#EG~6oi>WAPn>tfsdloPbt-SY-Yy= zriGomNe^3*vR>Dv1#cn<6kxTi;8nGK;Z~vIy)O{|*3jY0(M#j>tmT=kW5L>z&48T4 zisb%Lx`-yKfX(4j7fA#6NpT(^Rar_H)#lJ&^v>U1O<)P_p(HyK?t=eZ3b-fF?Q-*f zkf-7QCy&~Jaysy{_5DaxdqekYAPTWWo9*@dx}v0{=dg8Pm|G_M8t)qZ&MHevogcTP z%sRs_U=0UdkH>=>lPX`}pPOF7@*X3-MyiUNGS=NZIKly8lD0aM>XTJVyX#R4n%HjlBdz8<*qhGFhELmhyw(jHFK%0qw-uddw|k8ks{?!#m3 zY7!_VdDQ1fh48%!kQ6}|e$13JKgTDsbiKpiCOgzRt~tcolB>GQqfOLPD`Z_y7?*cU zCRh))74-@pLjGb^D&TG0>jAU1UyH*$syv`k5QSHk`Y2xCi|}?=+BmDV6*pfc&T~{^ zX$N1I-N8y4(v#$^l8R{0bIV$pT&1N4q6F64>+vR4oR0%0@ZZ%*oMi6kX*(t@pRgyQ zBq7Dbw_~q_5bTD1?Q(Vl7ObEsQtbx+u>rJwO@lU1RNZW0nO(X6f}pDtuZ>>E4ab0L zxm(tlq>+gWXBhfI5oiKO$LHSx;(nK(W(QlvuK6Z-jO)Iv1Cq$`%bG-LU1^A9m8ycu zt%466-wv*#GTE}0H9S7l7`Lc}ty99nAQIJZ9dq``%C>jnu+s>P};p30odIfcI4Y|n+HZ7@<*E^#;1fJa| zi{ta~Bk!yGWKqP^x5QV33VtiVa0l474pBNF)Dgpu(uW(~&tVO|{RT&vI&EFa&k)}a zobkq*pNB=fz9xU~IwC4S5w|x-J%kLj^Pgx-E!5kc;vz#0I;-?Gr+|M%G=Cz1YHw<5 zV{>VqA_!Mt;Uo1KqJc3(l?T8xT1OV=uLd^03MZrLwVZZw?&m{Mk#tc(zXM8_I57pJ zP(H5HHjj*iJz7b#S`Sx)E{}wwRIS3ENVe5(LrI6)_rSb-tKW9~L<;B5;tJo>EY>;1 zcy}nFw#hYHZMX~{+GxO9n{By_ILIhit8NM_!hVT=5!9e!pH`CNUSV9c7(FZJkjOdZ z9`0J86V4B!kr}3|uaNRTjn!}-otKbcq+M=Y@VEFq-I|ms&N*wXE+=vwp({L~;{}1b zG)l4w7x%OlbXus(sK{XM0K+NC{HisHj!Ye?oT6xDXC|9i=1QUIK6SDbd#%mOPT@O1 zlqq`6NtJgEX1cy8`ieJh=0o6>016xU$h$giu$cm9toK}cQG-Z^%lb{tnHTK$xk z$?EJ$PDGACgI*rV8uiqyx%F^rG7)sNrn3m_4(rw8VB$!ZVlY&e0IN4oS1Im;IDOqD z9-i*5UV3tkHqohn)|-4*m%J!=2LQJ1_9rKs^Ns3OscfXpIhUKc?)xuc){04~KM!jg zq}L-uK|+q{M_nBik{L!4WueZ`^h#3f%S4Zl{cNsp35mbeNw=spUF30hoKo-HdCd^2gp z+udM?(A!dtJ4hWX1-z}g11vwETr`N+ep{?5MSIP)p`PKaq+L3`4V=VFinR$n3*Wp9 zN_BxZs0CtzlT>$#3|>lXU+k4ViTA_%iqTiR%_!6`L$;9Fpz5o@#Gv018Z`_IEY@1K z2eyzJ=b6~B_w&74+XKAAL?nG044qs!Dth&`k*7xW^ zqhpWv8!){U@0tBZ-c^hR^`zZgrT|#QJ{@bIS}1O3bRaj2DWXm}gmk08-&|+uc^gOE z3_A-tB2~5~W+926_Oec$l8nMvE zOgPVnxvf5)&Y4e;rM%&UB;G2Q+9~oXTrRqNOACedT7u*welT^F+xC8$zufKO`8rmT z!#ex5iK*78X({ls>H^it>~@f{PS&3&_)SDHPPQ;8gSkDx$o{%=pCZ^PWWINRR1Ti? zQ^MBm?BP<%(^Ss>c}kC$O~L#Ig|ZqmYQJvmoTK9U&j-HC>#l0Gzx(aO35ti+${n7YEpUNXZzM3=U%y73ttNK|8dE zmobz%+PeL{GA4AVHY|siZ}o%Z!TlMwi$B!#BHm7(lz0rhZ{Bk}UM`tVF_~dXky8Y_ zX^*T^@sIVTEYr)R;YiYbyZuDdd44J%Jld4h;yC8tq&2$K`TsHZo>5J$QM)MHuAm4A zNLQ+efT4G`O0UwTORotXq-MKCIz&35N=qQ2NC_cSl}_lPha$Zu^iJ?*fBW3~o%@|J z&X0S~kMGYKfn==pu9bJr%=ye`KJ$Ig?qw&a>;)cyA-#j{iy+-dETmU8j>%8Axl5nY zFeO88hChxG)ybAo+MF9bT0q=ssVb2|hgqOfp;3L8>Ld-zc zP`aa4!16LFq*R=?e?`#Is%a~`+7Q2$|mxhtVNnpi1#&=y}iWuzWoi z(l1o7TuEdgJnA%w$DbafLe!$>A+9+_{+;x|!(uNad}R6MuuRS&GwX#MV%0?z{!yTV z??~Y6`r}5>N+#MZdYD|2;*Q2AJF!lSKrOTK4 z^O)nzTJ4NpX(NIMENq!cUTUUmeA4GElLs9)pm)ZUI|PL8si)V*HQjUzKosgrO12Rk z3-2wp)yeYcFW~#L-gicsgiL%G@f9>KIEaIvrRLpC486B>6jgR|4ZC_cd`!mL8Wry6 zQqw7{fQ~-23NLtwCU^+4i5}N>8JQv53d$ABDVrmmCMyDO4=i~nZ6?D_KL4t&wbr=r)MG zXck+iSKsUWY%pDAyvZ9@4A+keo08#a-Ju95cRtU_9p{h%SE4Nj<6l})Iw7vrH|Rc) z_5 ziO!GqEc@?dn&Y#*t#e?ZT5@3b*cb-oZ8Pe>V~H`6`-j%>drKTxTeoyfdXy(?yQ7GS zE6Qp{+=z|dK<0TuX+pn1YNQ9yA%?~zB_A-WaHANS?Z+{an%6W%!r`_a*9HG&qFU^x zo8EyM%PyTKpX?Bqwq(56F{|gT7$7rt1rXerRbMAzW*bc=Z{9$9<- zxzjK6eE2N%{>Sz+6+)(hgjGqSt8aT}4x5aamcN{sh=PG2RXr2O+24gUZMGae(#)=c zo9q?>Y4s>xk$6hs28Tse0@p8FczaA~ra%+|Iwc_dQyV$DDsnXDdL)B{d1hSh;phtd zku#$8!S@Q49alsLS(``kZLc;K77x^SFG?1U9(MW6)MyWC3d?|1LU5~jEI!_qVUqhF zOqay$bV{0)f)7#H$?^Vk__T5l!ENXDoZbELnPOe1MD%59-GI5t!ED+gvS4HaHJZ{UZp z8IUDO9A@a!h+gJ3kV267V5ZDvu2tMcAOY(rYdpP4%AU-8b|@w2t@fqecXK;ZD=M8+ zvv;g3*DABrO;q$ETuBNH@ww#_x9ZxrO4JT`j+ZHr;S^U=>5jiY_GRJN+qhsBVVh~U z-x=g!9_6t9&(pYOlmlMZ9>`TtvHrFB|Jd&z{az5t{?PtG?{{m}1llSW%DpSB^=9Zs zRn6%(sWw<4(2FsEp>+>;lDr%V@#;^K;Nue&R4aHwu9x!{vY%ObElPw|id8E(qa*JO zkbNjI82K=qkw5e&%L9kA6K$ENJ4^~^9HabW0*#M0f}x=b*D{GV`!46V%dB|Qe|}L> zScHr5NmT?VE>dbd!HiXKjV{VLlD{9RuxE;x^PgSPZRL)k&Od|f21h1YA#;(8D`tx# z6Ov_1u(1#QbW?TEEqEJkLq_iUl5{>Ncd`VquXaPmJ{`4tLVs)_yi9uYaKJMbV+nxe z6}Am+63y1Gtk>Sf04{~R!-@@P;;zcgklVv1`X3JI^V$4$k&Nx*5T}Ely{8=7eZD%; z7JCU6eYvt|9V=+e3MoT@3s6jnaT++P7Oa!%1G0rMTxY4i&=+}!P?_p3;_ zKSNKCiyw8=PF3Eo)i6f6(Tss#E|8KH^UXqWkJBHnAkzxmYGlb(=w`Mm^!Ig;?hcwS z7m?jc1K&ljsfa2%7+#fIn^c#{z)bEw*BH@I-%MUqvAP9-M(n~$GCIW-U;Q7Z?EY^I z?Em{)f9$Q=ok93Ub+fpSf-E`)yPdH8*dR1l(*Z*=k@z5=eAP?Ch>pi)D3axH4s@17(>75)R8MPdHve zGuLnq?8_mu9G;B#8!0*OR9H+w#u$w8Gw< z8hwkg{P*^FOb4&RXTY`OFs0;~6wMBlrL$;O6@~{K)yS#KKL{feAn4<#d=jjzETW+22%t>|4fxNr`n!vSSuNGb-Lqjc&a!$|h142yFr_~X8UKm>dw9jlX1MnklI zQ{Y(k)JYC)#5hgSl;$+#y+YL$gnxs1^oe^f(NMVe5sSW`1*D5IL z2m_=WDQvd%b{}c9EPN@{_A)NI1&)~SnZWo%VPVnRDRLQ!E44t4SAw^{_b5HbS>UAF z3o2Kfo3(J3QtdFQgupDqNYa=<3z(hj1hM+8FUk5cHro(_X>Z8~<}6Hw5HpwjTSp*r z!2Kh5pi_2z>kBP|w8|xiB}>GbVOX)5V{X6L6@uIqSQSIO_CW3?LVS}Fx_PFg7O1EW zpR6UhC^mlmS)YEZIT>f1>2Ji`+V*o}Ky!yL(uW&l21SQ)ji9Vz3M(Xx*nIo8yY3E^ zwrl=3CLG_gS1vuJXxG`3?K!P321<-*kdZ!3Xl!i8=2hOd;fGD#ZTT3}(8_BkexkE- ziQV(m0pgkPkqK?lnu?%vE=LRw`4_kzOl0=~(|y`?%X5NdO_b)D!)7rMWHq92e2hIo z)MUabXN9-2m!Lo(ll_9_Cl4n?=t+FX{E(-r7u2@KV5je=&JG7TXDo{zj@7m2W}7gH zBisaz#ji6btQDO{$2lk-BkgphH_uke8;5Vr}K95Esu%g;{gQ4hUBeb%a>o zB#UQ$870dCV!kX}M0PZO?(6VUyf>64S?EEhPHzck_IP>rY`KS zpOX`$_>l>ngluWBi4}+|Z1BbM8sDk*V9mJ~=>=G`@(1$G!GqirDUw_;$!Cx5vPj+0QDBc`k6JFIA2d1C?avQkBA z`uo2g=s%D5t%Ak`(gSl8339sYGi<;a#qO?u{A)lE&2Ng-e^8|27K`P4b3(%dCPqE6 zv1JVrLABKP3s4$T5aSl*Jkb{1y`pej>CeRHTeUHJY}bo_ztl@* z!j#*6dyxD8`njE|$o?p`iLL?ZtD?!NrXT;hIT7Od%Whq?g4&xC@wWHgWN@#2_|)Jv zoc}k4NEIQlShAnIw&;HYlu4ccd`)7tk`;Rr*4y3jGxAShm2KMuNAMH(1~@# z-wIqrVY)ZV!(Yi>ZRAYk{Psi~M?@0fXw_!7h{Uz6kz?4hfXy=Hr$btq)0rCWn;*@T^;iB2F2%fiS#Ow znmZkf$-nIFmUWI{f|ey!qV%f8EHboM$%k-!4vj0sz9%`Z$3`XcVZpA5$f6KIB^qY; zILAvS<2S{_3f=|~9^s5pTGBQgpjSF<|GDj6cgRKl@#&Y#QTGtFk?S^fPSJ8v5P0>0 z7JIBt(qCAJ^djCowML;~)7uWb2(L+4G|!byqvRB2k-TP5koDyg+wh+PXuzo8!X4uNB=lvM`Xo@g2=k!n=GPGqf{R;{4Y`E5<&`Y+ zRF%GOJ*o_=0MhuZ`{10*=m-9LxahD_XL}W{)4Y2%?JxSXMwhfs7lZ5yY?AgN5^HBp ziYmce-p-AxF(r6yy*enK{qav*UJ1eKtP~;A8G+3x7PeGS4_k`-B?wS^zX8&V3`eeDq;iEe3qhx zkBw~Ea{lW!77y4my%cFY&E+@*JwOv#mhE=P4EM%n>eZSP-?PzHZ2F}PD19+#r)`EY zZ>Foq;XmA@ub6m;noG05k`7rJ*O+jAN;}h+u;x2ra!xeoHIP~^6Y~(R5_^!L*iWC|6 zdUxD3lCdf^w-7j3k0JKw%Fk5QfLz_ z=0#gtW&6IqGX_V0H(jeq+fNf{_8Ei8`Bck^^kEoNYUFx4UM!28ddwoJoQwc8@kY8v zV(kMgen1CpYDaTM6T=MSqaCx!{Uoa#A;Xkf~M|r(#;8y~+G_NMfUyj*QEMvZav$BG~UxV`nKV z3$m7R2GjYnvqa-ltXlarSWJ;#!s)zJad|1W)+Wh+H@riy%R=_iDDC43jmo# z8_jns$1j~~+|+&p*^lPoY2Bq*pVMYmx1}}84{4%s$wT- zF&s3eXGE{kTi8#oZfn`mVl885KbZeO?^XNKhi^pD(a~?~Lt#p1NO);tj&ruYeuZkh zx;P({r_U_H=HF|>0}KL=^K5r9=84UL;>J(W-)av6pyJ^g-Bi#-DDASgIWRFdGM~Br zueP$SRpY}~_@>lt{ofQ}Zp&sb)5g)xCDqt^N1Z3xy4=&QJpf~S)%K)?Ox=&`_V(Ad z{Lx!~Y^2V8?l%_1`ybk+Pj#$WAOIKWmp zwc>vMPtn8pj;pnp>U+yyCm$jH26Y(`zkbYWr43jq-uiirWOXdXJe&$Vd9+mpDpF7r z`&NGc1sO%Uc6_Uw{17#LSg{ZBO*&Zl8OnFQ@5IHN%7{W0_Eq<8Jod_xv`XaFN_`5; z1pYHeMvqnvB|3Do8+;e?6d>8xB+EN5CDRoHc*{u~*%5?eXv?I*K-6PCU`cV0hKDdtyEQZmb+ ze1o1VY{?BqK_>{EV;%#u_V`H9PAVe5>%iT$v(s$`){_0<+e-aG%nFzM!({n8H`mC6 z*c=+OjvjAo)<`Q-5hMM*vW1_nBW(H030$ejIG&n-oQ73x?{Sr+lRz^CI}y&&zNj{~ zszGS$5T3s!GJf2n*0GFFCaMhM5a&3yr;n!ZRXM~Qz36gbJ}vJk=C;u4{>uU4AwO~4 zGYbQ7i4bBHzYbQFfF8MwRLQ>cSEgCv%g#*7KY{?w+Ellw{fiHj{BO=t ze|UW2AnOtZqGB8EabH>5br*K6>U7OYyq})urPIi;`DXc(=Dnejp4d1(Io~AXQaFbo4oly*2 z3ka`}+e4!ULr+gw(%0mgR=tO{n@IJCu49ax3dP{vu_Hg-LL|jbX@yrXREqe9sXO4y zi~(&yOR{EseKI-!>QZ&s!S|WRrma4Qm2~ooYbn00&!g<~yzB@J>7WA;yd+`+$kzM0b;r}-dOlZl#SBPy9tO+|8pR&{2eqGwGO*zBHrs1RO1(>|j>P-0Pm_h=b zj$LA6T5&t%dnY7dMn}MF2J9`B?(wcNw@M7#=TNL{pr7iDHnfmQaOn`_zSPD4vQW|M zy(|xoo129Xqjk$oR1JOm4nH`Q%Hnr?xVq1TqkSl$S&54G#${adMvw(jIX-AZm$6Fs z-xOZe&4axwj?nC4&8D<+!x}QL+uETH_bY|Fp61~O=>LuaWovPVM}u0}eRw9OP`)p4 z3pzvS!T2w4})aX_RR}^u2y6aCZ$~wjQ*|pmU|?M7*TkYnK9yjKUy>Vd!MEiREt!k9qv8g*QT~ zlA*wkpBaeH321nZkT5?X<(Z2!yOa=kB52iYZm7L}sHCo;R?EpLbVKRQn=!+_C7Jnx zaRN@6%nPNVd90*Tk`NV24SD}xHtK!Lpb7S@Zerfvekv9k>^ zfrk%XC>GFg{HCy%c|HX}}8Bz28sj81y%mshX=430ph+^xiU#mBu@clQFV7 z%3Xav-SPv25<8Y4z9-mCk!| zf}QCA?;ctpI;OJuVcW_qB*QT}vA(McfZ=v@XaF0Y1lqIfa(ElAIumoqjO5+bHRVAx zA=d~%r(aITM(xc-VS(0Afraz{w@&vlg%sbgTE8wFvkb4?N&hT^b#}F=WqpijT|pRI z5W4PCW(_Fro>!`n;@rtcJ)-|`DUnaC{#b7u#@!Xjo6hWqVrKYUbedSKWN+uMLq{Vv z006{kxn|_(U)B#S6CFTft^`qSUoD)GXo0P*XGX>pK!)eso>D!s=WA$(j&n$+R&3Py z-pfl7lFiYg&3@6=um1=o3tA4D?k2OIS?UxYF>zey!c97S52?tgc$vC$XAzpf2rU#% zCvyPk;&jvaV7y}FjAq)~2h{UOgjFxORFYG$ZM0v3cb;R#SMfsZ5nQ-1_`$@VKB?G{ z{-40Tkk*}NQ80q6=UCifKV2c4k5>D(if>?jWz=5N@H{1(Tk^EOKasi-_*UISNHK}8 zM@sdWEM_I%Wj&0DH4JsM2UvM83}^Lddu>hQE<`Kjm@jEJbO{03&llu^DmW}i3H~{3 zH2zW0Xc7Vty^&Fzwxp$~@{biTyPlETT~z%iep7@yw`NIv&O!Q3asm%72Z$g85`3*n|+K%a-**F{Op3sx|FWvEbg#&PO!0YVFZds%KV%jGEX z@Z3cYN)GEsp3J_dpcL4on{2@aL5{PMkK>#6d0(~di^LrGr)<6E{hoDApSL4v(CGQ= z_y=_sJ$g+1ybf)aY5`uTbDCzLI^ zCJ=o|7UgwL?cINQP0a-OWUiWBejfn@$w#O+{EdwmF>qye{3O6JcqAC*80;{uDV>f@w&UaJ-WM>Gz#jXL zOu33e=%}FiX(QPC65%vRr6QDmilZabe==LHLm+QBaAfyIMymwor!OejKK(^Ov0GDC z(NLbK4Qlg7IMgn?=oLK`5<3to8mb%r?5d%Wz!ZX-=r#PYQ-og?!UoOCw&l!k)aOTirWSRRx7s{XD#!b`#3o2Vw6e zr&kC>ZBEz_WN}{by8?UD_IHuErzWvxwOjb9G8cmP=bFQA^K1)b17!cuukFasrIGPmfMW7>S z-_9+8xNkny#qqcMTymDHXmD#Ri%8B3z1ZrGXI(Y0DR0$=q`Qskjs?*+Mxnk8&{s=V z%G;N>4bG%|-_BYE z$>KxmG7K6*Q{}Qhx^i!|Wn_t-H~%GieP#Uc9noj_#2Y=04i#MAf59Q4Bb2Rj@;H%4 zl_xWRaNYuX(P`!_+br!~GNiJ2r>{pyKwC=;yl!_6KF&LF2)?j>fBl>1KgL4A+R(RM=62K&RJ(a_ z_;iOaME3GP%(&NqVX(xge{J>LZrlB_Ks<(kiaVq_* z@5z5$^8e_8!KBe@cti3SYRW66{d4vmaD!QIJ#96grxfr6d-SFC(ZvUx68R=ar zM4ev^mS^1;!`q9ZVfhR zq{?c5SgqBt8{;E6B;Wpf;%j<&;B}sfi`PzMrbv?{nd#+wW^=y}j6LA+vu=FhJxM3N zK%G}JAp1`R=CbF2X1goRBB1xtLNW<+AQxPy2Oi!L6xrM7IelXbf7W%S(}h}1X=RBg za%5e^=5Ch>-uPQmn~$vHE+OQY^MJ0^ZTR!N{iN#8Gl@ zDuMmws=)lE8Tsek%(CK`R%0?yU6ESe{M7aqQ#V=7HxWKnIh(Heo5FjZq;oPy{v3u% zKlzqe_iB3zZI;MTH&(CS8AA@Kg!|62nS`fucc)iU=_IfMq52-B4w{LPS-k` zQ4RO_P=9V1QJ9W`Yymbo9S;2Mxiqkbxkb#m&tcXPkgouPOpaS`aP4io*p1szO%Yd= zRz!4FYLCLb7;^z(+LfVE>uxU6tF5I=8CU37v5Pg|FS+yF}2)XTc1Zyl~ae4aBGW_0pyH7=){lHs9AUGm#48;hGQr#Ed> z_PP*PA_3w=ml#_kQ|-j3l);Y~^y~)TA8}pGL?rEhfa@#VJAUBPzp{y)t(Z02K-dP` zdWQ9^?BIfC#c_y|=!Bj)J+cENBOb8I9LQk+5PYfeG$JFT*Q{9mUY_W*{aPjUq;_( zZU`BbjA&}ydC7|%U0bC({6KW+W5KZQi0UkK?BigIEI-_Y$ujN{>R!(bomSOTrkBdb zi%O@@_{Y?TCi>!OS)z_;jtq%i!SZ+Zbd5Q*Lds|8cs>hJ%^c@61i76sMR{j`MTHm5 z{!CKe_kRxj87K&cCW+@Y*xS=ur$WXxF@ySd@Z~kl8!IloCxr|~j@l5@96vVwnc@tM zPdtCetJAVL>Mhqz$Gd98oiD4{D=A&~pygJLX7er<6jXM3?$yPr$8+bkrh$IkDGiO6 z=u6gd0=yE8By&y_k?mIFjepJ#_T(IMZn_J0Rqid;W>&kSj$g-o#QuF zY{@`dwAJfonxxME&ei;8$r-v?3-F9IM6h~;0TE_nHNp^n53DWGMmWxfEeOw~5kVKO z6w!CYErk~tlc9NrO}W{ANIFX;sRZ97b~oxA`JN`cLciQ*`r4bC`X@-pG)Az!E^Rfr z?~=Fsf-T)_^75!+i0{+tHP=5{M1~#tYU9t|I7)aA_!1VH5kucu3f&RPG<=c zyHjQ8)KeCj1LQ7L(C1oJxba@PtL7;1EGiTj5OV>%U=7><#0V5@`A|1p-%n{cl%1^^ zgP9T~uM^GStnp}Zr8e@ez{=~lZff^(v#8G+QpISzl=P-+j zsV{qV*$Fw!r@1GgSYnr7x#X7|sx#d@Jxjc(I2vucfXoTT5w0o$!8jqSXYI0Qs9-)BE?5xQ>vmgs!vHjiqZ_XV(OiJe3PVNhfA2vsZ%GOWtJN}t5 zz!X!JKKNYKLB(4m)tdAE-}+N>5#j+wD#=5b*sM1XlCCUrm*lNvKmQCc_CN}T=~*Wl z4HUTDeX({Y{&Ri(U=_e1LDXwYAmj(_&;$S~oc__(Z0~+5MMs|bgC%rct%qj(EKwAV z%pfJt>u(BuHryPm zM>EyM{y;hdq9Et>;P<^=$n(pdq|8u@(YLnzAw58z!iWMvDVO$}fCJT_ALp^>z5zby zMw_X+#W24^0}v=Eu&h$%k+J`#%v@#UaTD!VYZpdRFtw99ZIWVE}mh-et7~s z;67LO$T5QZ$wt;^Tv@tL4OT>FE<0r`F}TAtI09knJ;vhq^bJ#r+eHfeY6Wz?1O(p{ zC@KjXy6zYYb!`RgkF&a#uN9}Q^4C8aYu~i3@}ZBIms~79(C?K?vjnbok5;@9m+UKi zl|l9WkJl%!YV?BR2!&pw10F7+cmfC zP#07p*w{BfX#!8Bk0(aIYdIaRgyWqZotN1rDm~FRN;S==4BR+ zVw(rGXIrMS2Cy|A-B_*aF0SaXogeGKOWa$oSKcy#9yWa%(vS8BjeB^5_9kBc@r696 zha-U0eloc6G3JD3R)RcEsL9wEbAt)Z{<<1n(#~RH_cBjdk6p}r1;}kyTrIjMuXXEd zBknAw`K_$i5qO|ZoHQp>FwI2B4*)Uue6#Lpz#w_WxbY)mIV*6IbNd`f-Q?E1*10nF5--m z2s_*1w~3Vx4{4t($<1aPtf>p#w4V|J*NPj1MnLS;m;y$d-2 z#i>p1WhnI`l*SMfY7UH?M^++rE?08u&u{8Yf`{ktdc74w^Tzubja1~CYrHCFn4(Nv zdhMXW!|GeRXziIiy2`1b6wxZ8s4tvhJ-matwfA7T=5kIbY`C)u%rKkf!jvjl%bQZ` z+*VW6=in~gS1Z^pLK~Eh=XuKeWn%)T+oB~q8c^*{*LW!-+@{GNUQiEPlMG|>x_R`Y zDne6Vzc?Qw_#(@+C?2?ve7!n!Tfwq0WQe`sv=Z!>7(6^jKe&CIJ8~4LEf!)x?XdCk z$?J^e4`t2P#(foqkh&3?-c7AhdzEsk@0NmVMB&wzdn-j3(r=~Gh z!wc0#fAVRMJEWq@dbiYFeZN=?ysUnY{aasM@8FjBwn;@-d1VpY`*W@QqQx@QA(T4> zE`Tpz2)wwv(-GQU59c%=*zA8*S}mHe$?o-uYa-QU=r6z9)9F64CUd%=46x6Iz{^!a zg_A``zxPD1t_X-Ge|@l+*FL?lDYbf2ZBV%gYegX~eFz{aUg%y_HAy5HQY`FrJW-gm5i{I#X_IDM#R&vX5- z-ndU+t<@9_1?!IN2)Ax~W%zP@Tzgnl$=+Y(Cp#{K%pg1+D@Ic#fnIKbo{p#4tGJl( zU-albG?>F!Wr!)1lA`CfkAk()tx^k>0(ebHV_>pLVupSQ5~+K1H=a4eTB0af-(qNV z`cG%!mBu4eyAg0>9Nu2GButqDbY`f&y#jzIm-@%@bQX4pM#@m?dDri7eVci$H-IWF zAbosz J>JnsQDANQX3L~9jwOygNNdi#i)8iC`_UanK~l%x#jjz&L_86gjX;F`!7 zJ>lOkyKP!;#S%jp=P*K_3I@}^(`J<#qo?=$qOBTzkA**>?fz3a+Hi>^4b4fVYmV2Z zPV#0R3609C&J3)qNsfEm=mb@#6(-VT?MzHyo<^v}b)&pSi*J@DdM#d0Y*lF)c9%CH z&(YCtoxeTT&`EUPM$`E?wp44@EVStp9E-=eqmHup)odJ-xP(ffF0dlDWW5msJF#zj zP2OBD0h`CnpRQ3!3}I=OzDui2g-!#*Z{ z`jF#Sj{aHAny@+8Q|F=P_w1v5-IT-4#ifc;LAU|um~v^N>w5{Nmf*Dm^B~mXK!E6U zg>VY6%W1p_sU?$jy%pXLYkW67UcZw96@5ReBWXT#hQGiz-LIu#a%H%Vb6V9r;@Eyu z-#d%ic_Yv~bN^GU+b$J(=dC7pqr9#eTL8CeFqWjfn#% z!W@M)dd6+FJ=K%=kFUlz3p7jvX?ZQiYxmM%{6>BpOxulh<9`fLsMAi@SEA2x>N!^FgYzD& zioZknc1}CN^5lR7XQ7MWMC?JX^&V4*;97ZCp>atC*QUvDiu-08+irNSg64K%2RkM) zlPB{(z4TU;zvP;*cqwo@TqcQ-;hOpfX}zn0t3aGLd1e5;3IKpQOYV@;v5Qz0z&bi- z1pxax4Et;VfHUVD17^F|RJrsgdKZ-=A3|m&t&7${Euhw*w$-iGExwEA+nAZNZak_H z5dT<2E4LK!p;nfTYfPvi`6~aAar-w#&V^Zeo-|P;c*>&O+6{py+&og<3T`HY9`ziA zs}JqN9UsacJJ@MAl3U0m3lN2;p)^M%h`A&Su+CibMN!g-T2e|;R8$n%FgcI!-xd{> z!X9$QaAuIzCZ8TE$p0_jf#RbAb=UW2qMwZBYL5kyo9kZGD@7C<{RzB%i54+lfNq`m zvVmum%V$2*;k+xwq~T3jjhAN2zIs}rkIO5uXP9!E(2+GUk)+QiQ%mjVqlLpR7P1o2 z+<8v4fo8ksHy|gJ$#E0ZH2{TF$)?)D)d=0$&?&TcO9NN$Osaf;==P&YV<{a~y-Y1^ z$8%v?k>kfpn&Yl0V}cpJA!f0plje2uzluNC^y*n(%GQwCsJvkhs)F0XZ0FIsX%8>k zE?WU7MiHMY^g^N~A1A$!QbaLT9Nl!cUk;1t<>Q?fwDjxg5(>0=wY zcVx1(SC6a&j=ivQ(bx+DcRRMMt~I_0`3l}yRSNr2T_d*cNxBG&6YjF36!)kdISzS1 z{`j%4Ud6=^$fciRFgrmf{R&swmf->3b0cFVE+2wN1^u7vUId|c+o`z7F_#+c13$;;bEd8w|}v~tbyWtd;n(oHBJ-}T zicQdIzq3>7jQ;7lo}<}1hvM?jV&v?@?w}0b556L?4yGuBrZ1R zh38Q~{KR?{s1bEutJHU@D0`5eUVrlnkXMsbMI$L}^2i{e1e)VBMiVz^D1yI7P<7bT zF#bAaQ03#P#+hp4JSB(DCM88vifT|=UsLxKhPS)Kk=vWr4j6e6AngW!1FeN{|E)aA zLu_i}rQ{*VtkLea zcRH%`@fauw7M*QZ7ab?VXTa(sC;0*&m)NH&9pxoNvs1h1XBa4W!DiFO$pb&*4xx(b z9O_;xTLUWN#XStrFunpi`!jzj*&J!csQni2GFZ^uiWj+jh_eVwrMKBoCATM*L=UB9 zs#)5$@uv3_VTsi5O8bSG;{9x8ruKNAI^)ikGr`!q@Sv9))}Gm8rWRw!+5tLp&+!Oq z_8ZZ!#WHewyy>$aay!Q%S0+z=^~+gU^=Q72E=4YzYm7j4s7FDm2k6W@_)Y3Iv%e{3v5K`cf4YgT{vb&N$DYDzFY!^=;nq3>vvmh3_Rix< z8;KS!FMt`9YjL50w%ABNaY(hP z==9gu_XS`pc4O2{ua*!bCunyObc>= zzsv3ksOhK+ z+PF>Hv{y|QbyVZfMSSUyxl@^%$S|M+^;h0cC41%3Cg*$^d# zL&ucL&mBs>{2=b8M~>G&94X3B7aiTVAnP??W*?^vWrDcX5=&klPdTK$)vm)ktGp&l zy(MvSat=k^Dh{(HPb}|iHaR)CIiEXLr3GQ_+1TJ-3iNFnA&M7tyH< zobg3a4w)YQJ$W_p&~?hKNQ3o`9H&N~Rw?n%S3|2FKP;!6acprhxxHWKAc)7`4DL52 zzd>qDd5!l!=M>QkZnqh6vYkU(hMz->$Gn$5JQD?Lil3ZHcPoMr6n@VsuHOl>ryhc~ z=EbTcg}!p<6x=V|+z*+2)B>m|WY z+r8aEiwSy(eq6231Afd6Tgf3Ig7yx-obpc-DcUO&(JwGzaEunin_go@`fY}3?ohh! z(P*_s$W!|uAJ^KKJznzibL>MbM-+dAE0oWD3e7pM(L?g}Pg}9fTt17u7VBLC)lAY4 z-*d^5im1cqu-*QZS}Mei;+=WLw8^@Cagc|L$ z!~oAq?22v7Y9*4y>uV2bi)m^1`)*+s$lMxex~JrUxAVpQBf4r3)~jMXv%h7gqjof4 z+p$!27+L@3?i-bZ&xP)48v0~{p9PPgJYY_342C zsp-RQ#oXcxAY))?5Zc(6iKcCrj!b{2`{su;UTd2<17MZ5|o)pd<6?Iz>EEO@mSkH*8F*%))u+_!x zhJbl67UU{+cQ&-{(X5kn*hqhrAa~#Cy3+NaJYhbM$BdvB$c2DqxDqgW%I^{IM{8O* z94Rr#>0ZXL)yoafz`Fpy<%B$(HYnXFp`tsRt(#}a!awLC9#olMl5_YMRdswc&O3=U zrG^t`qQZ}ko<3Es{J2GSHVxLi4BB3y8*fsKOfiG^lD&7f1d`#0^+dbFwCB24%$hNz zx6C|;Qv@Ux@nT%mqcL#CzlYS)I$$pyc;8+_tDe5H)s6RgkA<|gt4yZJ=vTIaKR@28 zpcGGyLo?TjI@`+mKTMl;fsK&)RpB%|{2Jt$U9qp9Fw36dg9E>>`mfcpO^DOn2LVB9 z$Mf>i)!Z1~>VXQQMxcyChZ1(k5V&<56npjV=HS`O028i0l86YQp~-i)tgWW;neTKW zjp&0;#Qh|wFovfq`!|Kcbseh+ML3!7{hPwyq!o2cAwhl6;xVU>$J0+A-sPU7-3J|P zz5Cqj8s@`0rX3tJisE!Z^Uyd4alAd+ee!?t_Lfm`J#CwBCnQ860fJlb;6WOfe+aID zMuG=u+&y@N;O^eRx^aRw&`5$y1Hs+h8f_dhJJ0(*=bU%enmIFT&N}?BQzNevF<%_lFV*>KEUg{^5%*@F3F=QWcHD|)Lu%tyz^bCnz=+Rb8?H5A4=;s_O;jn3`5R%`cd z&0fz2JD~`B+37SL9SrFj2dR3%yz%}WzN%lbTomW7(r?(_K2o^q(eKKpaDV5<0m31? z@iZMs-aMWa)oQnV`D2Df3vmhYEfd}2-nItzG0#5XJ-p7)sm9Wj#k23uDY@Fe<_Np* zO#+qO4OA^l%R?9wZT?uU^LhBwT^h*B4wqD=nRTYw^D{l&NACT6>-a%uYA3ug*@)2&Sm{w7AXzHh}w=av zKB8$hj}4g+<%X1bZ7~GtZ5P6?H&S{n2KTj&`vTgUD*u4q&pyK{g2*?H;J1O)B>))+NCh&he%b+bvwvT> zY@V!UuyNmaoR}Pvif?Ui6p3ggm*XH^hNU?&GXp1i%b zZE!cak@BDUhL_e89H6=AO!nGo-KeTcN|rdNQ=APmtOvvHd~6h)P0Pq!>c()@5D_&< zZwND5m4hnZnm2BkK{;1wMZrCaObUDTiBc0`l!H`?C$}FrBU<)kMvq-lBOT|zB1(CL=cJ>wWjD`fO#JP#(8wydS_tF9j|&-KQg z{?GAfzVDDbg{NRHH_sciQ4(5 zVP=5$)4rP#h1+Is0HbvL10saws~uMSF09pAKiT8+5sW9CN;53%%bqo#0Do*(h|3$H z$CTaNiSnz@kTf|moix>*cM9~xuNDq(+tiJA;1l@hY&|pc~ zg;>>ihhX>_aXmpPo6)O;M+uiH$5RgRhG%YtY%w9!Rs$LKOX3YUT#G-WBU-S z+5GHRs6aVxa|fnkTadS&$mKyXFwauLXzo;h30fW->}QM)waz9BS)rx{gl^|Ic1Mj0F~J z3%5*?iVOdfmU?Sp1T)-Rn$PyjUKU?md~s~$Ox3cSr2$`3<}#yw+>j{0p{||)A585I z)3x%))jK3Z5O!Z^)8b(rdmcmd zoPpj9YiaN9LQXg(jSHp2j~xP4-O{#{YEsr%>$a#Iv#(Az=aKFZ6?Mvrs6=*T&aCwZ z$-mSjevagO|FkXeh ztmrnDP9b;9H^#fR2UW!VcxpustZ1&T(t3~mjaQ~x=e=jW!8T#b68V0{x!Mhu#bjnl z#F?f(kzxM~IO*fs^H2&v*zTR%GF2Zd0%Gd}UI|>e_K1jxkZw0|KuM^qr3}QE|Nb{x zcl-iC>oy)2rnH&{a6*azv`)o4cYeFg{ZjRS_OX&fe z>VPqiTbK!q(6YK;;^xz%hQO4W7-i7`$|d68bygm+@lPcYq!Q| zXWw?cDw;8U)~M8D+3`p7q#q3==c?b4_OGsq5jcy!zK&kS3Ht|1Gd14Y+gO{e?X1wK=%+8Q z3id4-1}-E+ZFi4f_#cf9@Tu)UL<9>me6&6@kz9cOa-}dK#mg&+P)7=r zHi`{$>(9c|Y!OtZY+cd=jm*s8bG_pfuV>sHj=nbVBHLDai`T8DU^AlMUDT0#kXo)^ zm7-!(=pe0HXP)@L(Xht;#+Eg@?w#xn(;f_gC`!xsTj zRwdi+v;eR`Jc@&;z~sAY=~Qf~v#F_>M0};`)R7MSr6V(x22H1pjdG<~4vhBhTd!v= z-o^2qrfwC&hRxnP7YRB*qUsTY9Jwq;Ct70?Rz}%R8~>vb6waRf0sZ4BNs7KEH$4mT z?Qd~_anK8YUFG{1_-D0uVR`ZV7T7-xQvCrz{+XWbpLvZcr9+=zp@wYn@@Ye(Slr0fDuQy2m@XMxvq0bBJbqKRu~QrM(wWqMW}TA$3u(< z+F)w?XFN}Mnb@Lqfy8Rop=Z~h%S79O@1j6 zhwl$)Ypf;c zUXnbCDI3c+7~GmW4;?BZ7gKeSGB zoKPW>))K7>;)x1v)8-kyA+L|AaKVyp=cLw4D?>Ef9U;WFA(_qqHb{`;6yg5Le{0L3 zk~*-Ptzt830I6qMH~YRokXjckoSfVZgr74q4oa=Ged-pLx(&f7|3wAB~DpD zkfjW10ZRQDBHD!Z+CecF9sCU=QemG-K(XEAuqLEDqS=*eNJOy$=V>i+Q>`U2TA8SG zkP&^_o6cOxHX%YtnCV5LM;NnW;j8jQAucZ9%?*Rk+Ofc~Kw*=Ob532S*rB+y2-Af^ zzi(CA+V#zBluhPLZBeT?i=7s2v8IWpyK3euGx?Iv1FwcJYvOVR$;FzNZl_&|)>n@r zMk-t%P%BUjNeDBfPZhI`LNgBe)LNr5_c=sdo1Qoymbi7)9arL;%CEfY3$-rzxj8=S z)!;v%Yd$j{{NtlU7H#~=LQOv&7~O)dlJs$%Pu@l{{{g+~x#=i(N&G-Z{t{TEs2GdV zZephYfDR%_k1a;;m9NGDTM_Doo7t+XH!pCjBbDU$U4KB2#sku-KfIRQxVwvKt8G!|Fl(Z2U}0xP zS~L~z4}L;Uxd>=Q5ItY;!WV$5u&S$4hVqk>mn4;fN6})<=8jqgnOCPP(^=CW%JWB! zOe@YjdA}0v7s|f*koX(?JYhb6H0;EBlRwsWKdIp(XhAY}-~8#N-=)i5fZYhWl5mGT z#AC`UZ?w!VXim-?YS7D=7B_+^OdyY?r6>CN$t4$c@(}?wLVAwPb(>Xi))qgQL#&&> zznSy(k=K6z3)*ZyY#{v58JQld*X+h5FRmcdW&{$cZfoN6qZfQaR5JM5XudXV;YmYS zN4`p_KTfbD2~=2x2;JOQ+R9)0L<*>J1GxM>Eku4Yke=)_K4DmI&mmH*d{{M(UkSwE9YLam~GosNYH8xA3l{dkYOS> z>NGt4@v8Sy8JE}dY}0tFbX%0(LapUJk=9HT&ts{oU2rSBTO??zHrdE4fi+a=jdkDp z)W>isPJT|1E9Z9b6#nid-eugxl0HivA*`h+631EKn75q%n=Q$UdKc3lv(*ANjwRD8 zA|rvuKJHX1_Y%{g)C_0rEuPe)z710wE~!uXCsuXWTMgEdUZ;ucn`*)FcaguRQb`I} zNPH35PQP(uZ&gUAY{%exNbQ8uIaK%aX-%kX4RMF!i2`ltQQlzik5BGg|62#t9{$0S zIYda~Suo3D``xzd$(C$Urxq$x;|%prAG*3nfI8?I_{I#_IFE7vbR)d0R_Ap~S$%$g zeG3ErszvD&sng%hU7DX7|Gc<3m&>3KKTUoxwl*feSnA*jrnD6{s?w(NPGM%22doe&1}frunPsB^JHJIHr;8Flnof-n+Z4-G(e^BgoksI}Cm^L5bgz}nhDHWLAhwq{tQ1)BLp%rCztDKw_ zxZt$B(IQBnZY&ercTl~9{6JCpr-#$uJvuK#!GFI;e@Q`hF@>u5N%K=6xl+WdAhB+% zCcvfKpuG*wP+Q4zD)p4$+ImM< zeIJ1?nt}XPAtOGCtyTF7e?NozXUZYSxwkQyZx!4Xc{S4X+{c)uDM|l;iadw={(vkp zi-43`FTfCZ^(9;Xx4kEo4)c}lV(B$E<*l!MYuc%q`h)IA{vJ_+K<#^l;tUI;MuPNC zX19RzwM20-kTq=m7#ncTBqh!v>WidDW+icY2Kl+pUlFJ!NmCHBw&3{8#nOqy9uZlK zYt+O%nL0|jd{;5OZ{u>cFkcji@I{7EP~=7mCnfATkl3)KyszhNeiibRPYA1}kPBG&>qS@6XKf2Rx9x%3gYiTINNeR=*t5*$+yGOw< zup8oU;m?%R-bL191$R+I7}&innTD*vw#sdi3_)U*7-=bp2w|jjB87siDt|8hhPAx* zx3WNT{JRMYep&5T-=?VAOkAtoUzdz0jS$z$W^}D_nh4)tQE*z8cS6^le_Ek@)O{6k zB9E1ccDKC4x}Xx@lNHU|{H8SIG^W3%!;94@OkM6rnQuSxVf4O3Tu8(N!)BO&u3yPz zlAVgf#pzHCA2@l+Zl9-Kl|Q_Q93HpbRuPg&k*-JlGfA&@$qGK2mrDNa?2f{+&t4Td zW)12i`gM&snKCyR`RKYVtjvrzeP|;_R_;chJ)uBa>+;aXp17J zVmQCr`MH+;LQ$k@oH(Vp-m4q^Q^Eyz+XHOopjVa4#@w!x#Xa2GH&%Ndll*LU zpgVMPYKv`**E%NW^c_kPjUH{Q+fF4Sc(@?YcJNvdmh2A*j{FcS;3$^4F1TXR%f)0p zZp?T5sy~-ax2rG}Hm|Q~PM(@t7_WX)NfDebWVz%jdeW6^1jC;^KG#UqPaj>XrDP_n zTm>{Sy)5Y5ZD4<-_UxUK7~g};_1Xv4z5}EYZaV1p`pu8cJf@Lg1#Die3Y~)ZixJL( zMr8*Y?WKUgKIt)- z7SeRQB=vl#8So6^Kp@vA$A12az5BB?l2>L>fi5QBjK5}67OoQqU??xP0O(Ylz2NzX zBgRg>^qA>T`?|0Eg=`AjvVf0Lch|3a$+s=3lDOTD`1brAP9WS3^@)R#q-MW*kChl@LDa3!?aTfo_pAnhglF zl1vxG0k1lyl~2MrIF7SQJnAbc6{tWvI%^3x4=I`cfXZlL6AUV@#>Y=!RhU+N&h58i zK_b8@@84_q4`?9zmURYvRSLUOt;lrY-Y@gvS<|(2f1CNaN`3KPKZGCXuQ<5K?$<(V zwor2vRI|}CueS^1VC2=yN11%){)hHibGtSvo5t|0#ju0WO3+`dVRSTC;-0h-GXYNK zev0cllWPF6>mYsTDS~y zTvKr`L@Pnv+y{;0k(wT6JW(OmsAp*2rsm!q*AkLm6$xuKrgXMqy@`xyF2*_xQK?v8 zDLLm8sqRQNhS3O1V!&HRqNOO%fvA&cuvZL3~as6EMiwbkuaE&F^hy&swUs&$(?K{5Nm^}8*CYq#JG&JBA2(d=D0 zVc)(XpHRk{;k7Rb&$HH@XFT1&{b4aeP;Jh;s1{P@k!kIZE4M5w_p|$i7q}Sce%Mc_ z{7t$gOWvR*TGEZ8PATV3$+7?I9j3e!dR?Ph7|D|j-g)Lzj5o0*{{5oiqM;Ylg<2C6 zRu}N}V%iCzM{;7IM^7nayn(O=)Z36f8NI)=*w3ce`TlDtIzvC2Z!(jGD*nH0QM zE^)l@e0}#u7rmzE4pH{5hE%4R^@*&z_39u|vB~xh`a}Y)%xolY@C^FvqFD9R_5_yI zzQp7#T1((^ox`3~!K$>R&U&-`kyM zwm_sS>Ut}z*3ar=IfU3JT2VVWWLWN(5xv9oH)WmBD&eFfOPem9dvrm1YI^SBTM`i# z5ho11YQ#WvFB8+s9xtb|p~^XutT$n1KFQXD$nb&f>x(OPm&+Eml%&0Iakn_JQBO)K z75lB9=t!2rk11}qftA&)SuK@PNa=r-{Muks$h?rXU z)EiiLj#{g;imqo-ZD!dTp+-vWcd$ zjGwaz+7Ihf*i!QL*#nI(`glD6obA4j5W+zs>Vn;5B|D4Ep4#ouWZc3w3(V{PD#Z5V)+vChYh;bV+ESWk-_1>BBJki66uEiJs zKBRM%^f7MY9-V&|A*2eya9$-89X|YPNJlYvk<%n`g~F2T_TfxN^&isqQQaoj+-fe1SVKcZ&DO?nNeGKp0lPGY5*Sjhm7y|;U%$mp=ZZ-bebpm^!oU%rrlVL zhbUq5%2D$3(rpxOoS5*VqtkKcJeJr|R*}L=2Eb>e?$aiz^%f^jW=UrSsF90uI%F3MD1cAgJL zYS--g7ZK9#XecK2x_k2#u4(ibVH&KU7Q|<0;jN0)%d|@mfVt`)7qp$V;Iw@3`WGFF zO^ln5=c}f$x>$RcuF1U9yQmk5hFYDL5x^0P4wCpZHU7i>4KS}GPe665V`_m{A4L;gb#J;MtML7%^ zeTB?j%cCcZNA*x^>_-La>LXG4@{Fl`-~sI_|w)q26vKh0Z zX*H!RgalP5cAKWbo;y0dGL7FSFUhW7b@=ewMh{O>>50N2nB3TI*& zv-i=OSzC~n+rp|{r)$oQ5A|_Sue{B;BPAg`62x7215wlqS0$)CgC9rjgg~KEm|_f0 zF4aVBX$jg#zh?KU8;;*IZ942RS!|jV8m&N|ubJ0pEXU~Xg1~^*JjG8Ov4ba}n2t>J z-q)wS(OSUf%>9#P2?Fr8dXst$JI6woEpJ>?0Bt@s_U}h5vv` zWOqMMM%PP}DI3c)Rrr5v#1+t2(Tb7?QAP?5Y(aEsC{onx;PsK~gf*nxp#)ZxRCmH9 zYN_k?B|RmQDN!>pN6m!<%Dx1he?n!{))#*rb5(fan}r^esPRx!@DGm_%_=yJbV=R$ z^asSYkhdRjn?8eR6lU=zd$wxM1<{hh{k9)vmUL@1Bmb(h$~IR?~UJ=zTB| z^4M%W>ckgIiY3KtIC@G}*`uy2eiaL-o|3n;P6PvWZ&+%{p{s^eUTtsXhs~&4B--y)c zIjDm>QFOSgg;piq{y2Uf{^)|F({zAlUZ_0MZ2Z<)%N8kYp8sMhXhAt2e8ZP)Hex~cDB~SHGR(Y?^Pm4VJc8h#xhYyk)*ht9&j3^ zMySYUyaY(ty75HyBIrhptE}u4LfCJc3tn4@^{bd78rFd(X~W+;7o5-LP1acnCgFDx2X6`bGLau5%*p&=Wzbz#y&6fwS4f5dGfGN}v zXd7Nmw;^UICC3Tpg|^@Wq{?R3RTq}Z1$8t??kzsfQ0uNiUL~!h9m-Y3HLovS(Cfn9 zd~7cV3E5yQFMt}rN!!*7PWty z$^#~D>FPA0PUyyGZ|@Xlt={0==vMs!>7#D3DC?+-Ayh@k#Ze7YzAGUfOMf;^9`p^;Sa}XM>#!g$R;y+v=#5&UM1(AT#E8d? zU4&FN<_A6oWTlqnkGkHw#t5n=hqbjuPXPW zrhlE6GO0;D`<36mjdf&dw>I{3XI)c_G;kkLQNFjc7O=~XqE(&$<#Lm-Px|6IdUi(T zXHD;iabMM}iDDfVD)^_78yf|UDK)+!8a1{gMJ_|-YF<8k=d1gBO854|$Mn8d&-Ep; z;gV)R$??Pru{KiXGRAQkSA-PX1bL$~{n@@noW$_ppFiy$xV?s@I}XQH_?7MY)tYB{ ztZC;%mIcqbgmtpArw3%*M8rRmXk$0+DZZz9!d1u#_4(vfWJz|a)RK0_JV*QL+V=+w z-s-%^on7d&*Z`wF?;MG>4ka?on-W8F4U!gCr6?5o?BP=iv2i**!>_k?tUb!_OwRr2 zI<>Xg(L>Dm>NPXrQ5$Fs75vWTP1&tA8X02cR6b8VlwiimY*AGE2S~wnn7;WSaMqx* zGadb9SA|B!-r3scLM>Q%^KCr7nTqh*2R(6CgI@RhIeL7YACqzJG|{TV)NW$2ulIm@ zLXG{gy}icNkt!S&lE7xq*>0+n@FQ~Y=jc?ya9(OGXALVZRPi;{e zl@g-6Oe~sTNVv0CXs@#5d-H`rQr?Ix(}0HBtbU|8v3*`&x)z~V2p6z2xn93nhP>a4 zkf)4=+!@Ud)nG9>pP!b@s}}m@#+g4c+^9z?Py~3FI$da5#IL=kG(S1n(;0m>yfHMq zVrM!eJ(u+dmuplsr0}LxR@S6YqW@Mm zK+9-V{4FceY>XDqrP#dGAX7^fUzqF#yTuqzBwF`u1IM&3WY)w zQru?l-lM4F7}w^VwVCYC4mq5Z(zk}E|3!iUE4_SHKsUnq@RLb&Icff?nkJ^5OQ4)2 zVi*oW0P8~~h%T5nSFfHhS88zgIiA}!5J~J`Z-qUr4 zvNSfUGW;d=ay=-b?NO5E2t&5wHy5;g(m=z~cl5Lu=gU#}SRrA;G@(gz42bN`j@c&B zkF2tfqjs1|@7G3{%}Hf8gQbFbQ?X5X-8!w)!{2$V>*1+}EQC4E`84_HO#OFOIPOh2 zH*TU22lCcM{gCw>TVn>1Qs`PmpVRVg2kl7mc85soT19t0#UAGvsI(35>X0lEhpm}} zwf|CH3o^P3!({;Gby zSkT`82c^#(Gj>nzmj`n+b8TI9(=`GhhUt2OdEgmGKR9U;%FIQ+3~`btH7b4n1WZkz zo6Q4co+#Q=aeBC=g5{^~D6V}}WrHS0y zq`1 zq2^&4g;ytxFdh*4?TI3`5DT7C`GxTui^Fs=&iC5sjklPchRGy~YfQv7p_42XO-r4& z7PE2n0Lubo#K;(b?G)3`CS&$zd58i*1pc{0r^&p>!maE|J(yU_o-sPg%wyg{*%~9U zE&OUjNl*A)j<~k8-0o}gN5>qOZyW-OqHXK?CmixAey_(%AUaKl; z(1vpFXHJsMq)UWixQ=9!v}`|xYufZ1F+jQApPhpD8`$6cy@m(-ceW+Hs%IdPm!5le zYtr4v=RhTm{P-}*%3WxOP_zA&2qK!JM@0xBCO+<^rdiT$>6_TPyylux#1F|4^%(pj zR?IPnX7Hfe$4iL@8R1X+NnTCv6XPrHMcW>63}hx|cr#PjIVyT=S0>?mo1nGI9e;D3{>1m1hHX-d^a z&9}7FS5SdSfwS&s(hM~oF8MmFRWY^Nl$6{bu)<}i?8qlQn|a+-F5{SAVwzkI%Z zodn^;!_uCdOkldMbO^2oN-3ignxz)@e1=2&y^kgidR~w^{!lyIn^K!wr@Lr-q3g_@ zT)(Tenq2H(?SZnRAQk|DVlapUlQ@6&AJ+t?`7k3LQC3krWg1&=5^)Zu`hC2fTa6H{88=vy)^$9Hq7vJ}n zQSSY%nXUZ*uVB?9)E^Mc{dL6iG#&QCRW$T^EslTLNR^v+xb$i0h+XvF)2~VAmMgA2 zL^R(-Ec)|C#`BlW*Mu4pjjoKRcl6?;f!e8{p?U70uQsT12&rmlh2&?$1A|!ICUQqDtnP z(xxKHnPx=uIJeV#y;FJV`s@+O)Hc?mBw_TutV#^=4*;e#y_A!v$6O;Aj`&;Td8C~@lLxlCAmDZ zB7x^e7%*C~-SY=jHSY|Br7HpO;j{nv;Qw1sAzhEsPXp#itx%$kZcPJ=ot0fUd7SBgylDJGud56oUk>?g9Laz&5 zIb|&*1X_yuidf3afjlgkW(&47H{o}bpI?AdOua1BKd%u_)e@O8=kgT9^(PwU+YZPj z5^8!r8aFauk4XBK4F%5rfwhyEjFOLZS+~Tipx2dV447bglaW>@7tgmwX~;uLBD;&}!0A4fkF0>n zz8FcK>Vd?4*ASimTKXZXS6ve2A0;QjkZewA{Mz1(wLUO~*Q-RFqBb+Zo z|5f^7l$I7G(P4Mwbl{wcU=38!Qh`Jiym2}Q%?I@LZPCt0Da;t&-eBBY5A8F0mf;pN zOUX}5<||`tm4fZcT$!XJj-{;}rBj;El0;nK|N*YjtR|jdi4V;NBIXO{v;~u_oj%&}tkZt52hF!hmvH;8AG} z;sW>IX)=NqYG7NiO?qunSOMUC9odrn`+9zPmX@!L5BwiKs{jn1=`5L)k}|{t=YJ{E z&LyZmQ$FnZ>7v1*vZW&Hk~px8xqqLrN}D8C+1obt@#qfvoGExTU{pL*{U#dc%zq$b z{{d>D!_nd>;RfDN7+pF+TRK9kk2E$o!&^Wf)aQP4);sLmM!E#7oj^1JonDSVyzoTa zU|Z_<@}o|4!gNSNA|sZ8VOdu8Eexm&)%?3IR74vf2yDSN9=g6pXRaqSTNK;sse6T% z$J)sMtqKM6Mt@P-`5paoZNLESoB?3q6cRQ6!GSMO-rIlDC>Hz*$^uR=CeJVpV;Ha3 zk#>{Y(ke>XNeLYf!tO^ow+OdgbUOS2@qgQ%6|zrF_~_h?1q?(6Ka*BpE1$y%#ta@L zA6+wWlh}1eR@D}6!TMwi{0)v5#5OLfB(+_IwfRI?;o^F%Qz|?|BS3v#`elm@a0CzmukG7_!uQm^H|_dqoA2~8-Js}BmE0Xl4oW4zgnWx! zFhNp-b(b+>0eqxGu;}p$l~pB>(}1+@v`$TJBOf9Xl3MxZJX`BskKi`Y2{aQj+Xyko zx3BH89D(W8yzMdJ$PDHw)mTwwJa^{)(8ggrJ0xNXNgQe-Yb}^=8gXUOs8Ftd6q?nc zwm^Bs*(ViH%=ZVh#4>euzuA$serp7tdMT>p$ulG}_T$H2Ne~F6fP8T>vomr#p#m`J zR{)b<{+CIw+wU>HYPgv)-EiC)x$guZTX5l}l^aeR2Uo^`l)sS&Yg|T%>y|yW)Qj1i znn|jkb+lKrTZgxGpU)D_{(zX0Pgiu7iS3kCwa&=b|giRfxuFv!>lWOhk?InudG8CoH3Tw~TN(U1 z!7|PWq<3bxc(Ztx`FUaF^g(Dk!81?=;1^>kVB3G#a6)njku+CqK`Ll|s@VMv=3Ga3EK zP9ZY5I&-KXY;p z7KHjW07l6M&;{2Q{quHQ5Q2UQ?47ACzEd`W1c1|Ks-%D=a`%@pn0ng)Or!14F>0sT zpHkH)@#D9KTHT@+yq4-{coI3UEc{*NX)NBBHga{Xmw%Ir+YNh2`=Nr?`fr^pzJmW~ zVy)A1ML+;?M*gnP>v+6sN+)r&X?5hZ*6HT{jkDg5r2yVsic1D%uz+`TRg%8PrJfzv zbK~j90n_V2DeK1T!my@t07d6!m8D{5JrlU;)>TL*?O`&09PCc@}ciePdcEN~mCH0uzl`qoe zmvc-3JI%b4Sb*Ev74FQ_O7&kIm11Agf(C3f6@(5sIP^k}^YWdzq&db4Z|(+Jtj-{{ z)XV5CJDyc{^5M@5wAh}WnG0ajt!s0#IB{oIhRBQIh*E2g&T!(uqwI%@0R{l?whbtG zEcmH+#te&Wikwp?SnB}KE21S8EX%;@)txyGBUOU>YWE8gQn0viBI%En!N5!9>NO9s zYR(#x;6-a5%-nS80G5wOoG1IpjHE*RAAe2!4$;J~f;@ZT4tC=Q97#Ls#Tu)#M*3a* zE=>kU7b~#`3RF5kL_1Af^rt={N1=5N6H@eh9+lE6jv|apd}(yd&8y%49zK^k zq@C9AV~j>z;^D`>we_@$q#aq@CZMNWT#w)Qr`=5c0og1|rjF%0A0>C|-;{f+3zr+| z-ICLP**kr7D~@8lYHXJjG7aZqIyw^%YmCD>jz>+{f0cs&1f&V0w@-Q1Iy`8z?iexW&Bcc`OK zJ4UQ$i%?)w->xXQKz+NV@jQ|>Z@`6Di+(mz7*f35#Z1GfWgXw*%*T!1G>Gd$G=W=9ni_B&<285GhoW65X zrsKbO_y;sYNmnb(zPd33V`SjVYWZADmt3k&9B`1~xKsKEB>Q%Cn|dM2OZC&M`9)Fx zDa@8Y(6OoKdJvaF&D2x(*2K&aldnz7`wY8bowl8`zDBo zgtVR|LWpGvR|H3is%IQJMTckoNA~i#Or83Ii+47}q?66HB?9})00#(ZX{1TxNErR1 ztcA=^M=r{Yh`BJXuJLGu<8V;D>>lKa5O)^2+GgggVY%&m;T3EBJ6Z^_%h7wG%z?0> z$0gmf=Pz=dqCe+9j31+yoMMcqi+$)Xo)~^1ns8f!_UMH1mWCm1gP}O`%>TbZc=(OC zhULH8DvZPS0)$y2InfK^p0#2z$$ghG{crA;{O6SNy9=#!w3E)_wXpDkU$4?n-@a?c zJIH@9JbGsI_0Y$UMbd7h`0Q`2(Q%U*Rp{vweQG>W)(&aFxRRir;FD3@KBxqc3cF)|@Klm&k zoJU`imihZbrC=U$T4O;sf*Zhm1;^iOE5-a^J$jYy~3*fNkD6v6*B^Pr+;P>&d?+3){L-vWlG%`2yB!EX<1Y~W&aD6Wa#shPM7+vr6TC+zBNmG;#=?QK!xr#yjjAdnKZ3E8CY0@AerHAv#bZOzMgE`XQw*41bH zUtN7Qc&2vm1ucaqi?vHBnG|^StF{Pu_QH|+*ol-;{XBl*E8*N%meom%<-=X#+``)6 zq6#Uzu_Djedi+?l@}8nUtEEDrm}|1DBurq>UY?k~Rtsppw$`Ivr9m-`yZ2hu7zT`_ zUA@!l3j;l6)eBt8!#1aN406Sx=4|>B*fz1DYZ$*k>865Y!RE~C=uM4 zO9kn^z@ndud*I!btM-Se?nvT1yB(wt>|g}RkV?BhGGYtev0x+r#qahMXHYN+Z@4pEIuj?@nn z&k|2_&z5$brDY7SG&e8p>b29L6TpqogGPeXWlx!A{O91!AoR8>h?=d+0qt+#!x62c zLq90)oaXUdOG{5ik3KnB!kLp%IBY*p;n$Q%o%2ml5rC%Tc^Kv@w1u53w=IVvkr_~! z5$ed5Eul8CRyAF)n_@jI!X~VPkx5oo79J-1Soy!yHTO%dot}$uc~g#^Xmvs^Jrztn z@4DFhlLQy)!!XEp8w59>d>&NUdYPYiX>%I{r+2d&pullj>-)9ew>ZPW_%EHXH>X->s*Zp|QZ+yx^SyoEmc5!e%fvck;XGxUTfCGc{QMVP(NSF^ zxo%y>I7c6FQ15Ru-m$7`bXf&pm$A!IX}N)}QNGDPt{w#{1sbk%ij^i4w>zprR4DLv zB?dLbzxL!G@hQ`0!Um|*A1^>OIN@p-BdA~%&|18 z%4=KkHL7P3J(AOpEAx4Qgj=p}2K)?dl@AJ72MfxbwA;?r^S4+;*qxb$a_COg)lGh)u@5LIK$l> z?~h4`lAP^oB4tC!CG8uV&FuT&f{Wk#j92#XHkIW1NcL9Z4FjY_Kvo7sDJvpRL5(!W zG|KtwxJ(;*j$9a9`B8X-4trEbqC$K*r^^(~f_vH)W0?bS>+zpmBSPX`9L?6J3*C;< zX2gq#?0cDkjV5Nbi9a>s=K%Ond1|M_3Mn~ODzzI7_=B;`Ux%G1<~5A+>$X8^ZP<(l zWO5f>77}ZZp%<^B9Ws_oG;$oq;pbi0Ddhp2iQe(XvIta7zH__*piUR;RW9%&^8 zu&2N-E`fMEhe3Mz;R!}y%J(h5nR0l_P%z_TIKB1ktISUWh=u2^G{UHKEdjx-tU<4* z9leaJ2aN-q5yi+^A=zEog7A2nuI3Rg75RLFAX)=resgB#A zI9IHK2e=373Gduo%CTv7Rjh40bA7y+-{)6*nN$%qj5ylc?mAXzRYv#*=MmcX`MLwj zal^pi+0Ab*0On-e^nIxf-uV2geNJOn=7_JA=%&7_{j9!yXRO1k7{WbyEh~a`Ei{cg z<-joYGri2N|1-Z@O@w17mUHAp&@%0+G|?a>GrITYC>L->SY4gdCuI$^eBF%MU%xao z8O{u#g=_=QDBk+IHFUt@PP7viwE3c*yJ_dDX2OoSy@m`JybluaptI5c82d17I#Hq~ zdU*TGPbEQ|UjME#{@WjS%jU+~^a8#$OYh#J-!-)7zy6-tl#0!0`9R>mQ!aX}70=3l zNXRmtJKF2_L($)W#Doc_#Z49hF=Vyi7 zZgKSa(KH{S&zl`RIv;uZK0+DQP^0C$Fs91VMuEeyQ zz5;p(yoji~My6Q>W~{+*Z-XRqO5Uo=4AJ&`I?Cr{jW88MFWT*?x(UZ}XW946+Vj@r zYAG>lYA1|E#fF1G50muPf4xA2Y5~@K7}I8k9V3N9@frtd&GRRLwYy4eLR%=)PUbhp zZQmii^;Qti)X=r38dhCxCTo>?@g`*#BU3wHt+fHpl1x+f_YlRi^3FZEh-81SozVWV zg|}|hPXPyaQb3gS=W*$D<7;!8L$OoR8qCa9^320BSCCZfq-c=z8lzXShLN(%C%LY% zNw#ljnf*B$&~~l1KfsQxJU{l*v74DGp){|p(>WCy+1X@p&{3%yVdYNUQjV6y6tm=X z@!Yq}FJ}F<$}%cIN*Yv1MRQ2y6CH@X-q?43@F;sl;{6OB=vt0aP>fuT)i)RVOfoE# z$q}v3axeKrN1`H=MNO9kz^(Mb)c;Js3|Ac-v~avC^2-1n{f@}J1IwFFbZEebUKJ?D z*+V)E;ZdkxO`205&+2{MsmJ`+9omkodD8-y=F!5tK=Rq^$~}h71`nN zb%8tLJ??$&ZH?Q#NmiLyLXZ1{3V(_3oO_nqP99lK)MfeCi0XJW6(}o$0@naahFR+9 z)gbBFR%_*QP@U;mh>f2vK#|R_1zs10^V|m>I>QmzzwaC+x9wVZ!hK*`iR<5S!nL>8Ub`eA@Tf>MZD-+}qeF#E#3Z zWX?tMOMG5~TGb(+pp5|#ObUqoeSIiRdfQyi@bD<}*BRu5myWBz7GRS{^K|KQ@5OC&h5ts`$vq5K#b6{cwmDt9ze1x5>tEtX6$ki0MeT=b>i}N;fC{1J-<5+ z%_|G%9+r+=N13OmJM#A1n*=4s?bBQGH9F_XF#<4aRB-W2-p5u+l=EjCaw9)7zn!Ne z+9-s%)eGv%W4>%{WM(#1xSadBp>jOZ?15}Y4rcxj%sG!3fv2>Vl{NWI#()`MiE*cR zwPq~&qbvd`zHH#|WA_Jz>XdkhpZ|`G5CpWs+qS?O`f<@9Ip6z~>9Bk5fu~Cgyi)r@ z`zW9mfcqf*w5YY(=+|6kmXgns_v$n2>4SYaV}Dc-xE-lA!Bi|r!QvxmuuArw{=$XE zL=mn7gHuAuhWICPIaa-s#UPNirKJxDIO1ZEKyn?7N6TmMA0Yd=*OKLW$|{cP=VTTo zqJjtUpOv4(uC4HBQYsZ|WuJ~MchJ9cj*Fw`%;J|zJ7Pagyw2#hee~WWT&-+07IYu3 ztV)7De{%8+)9hz*&fmq#NJxRo6I&^i$4q9t@dAtAIpJ57MSr zTV9;;*>8IdvkLfj#UHbNvzCsQ#t8p>!8p_!tC5@bkZX>Mt(sw!PWEwQ1j*GOItPYp)3D2e^mzoCp`5yzW&oDfbxNM%Vt z918V79qDl-)+W`emS}gAX%LfPh=XK-7`!m-voNy%ito8YV0bb0_noIP0c_#dG#|@- zgU+cg2U>=lb|L4b*FXZEz`+uI^HP&(1lPYqmLW`u|AZ`$1sv@D3c#bQH=yXKB)Pf5 zHM6&nZ$rLx8+v-WsTCojzs4Dx*G#HdAe(KIUwP%oeYe&CTu_ zRcmbD6VuS0Y3_G@OAYGei=JhhNy>HoeJ6_-;^tr84T=^%(iu5VTrAF$-PDP*>dvGi zSrAPzFKq+>B1(!WW0p+FLYoXW*%H~sBYM+6?~oYxO9^iRN>*)k`|oet7fgk0r-7{J zA&~>mHhjCs+oI{I_QSiK5F*iCqQkH~novXlR4Vnb(ephf#Pp=#bjBj6EEFvkxLAL@ zbTz7w^)~h@#&kOP!~-%gf14F;E-b;M;D(zpE$MvOBp|r%GHwpcJ&*<0wCW7+LR-~> zL%(;6+Z+?`?e9ZAzr`v=d*o~mjLr1enKd-jjf|=FCILhD)nt>$_FW(jw&S>1a(Tf) z0U*4%ArmZBS$i?D&g9Y0l72tOYto37>Spel!s3lttZ59QIK!|#GHcE5cvV1Y(a2}K zb@am`nS3a%mcP84UMOdxT<<#dy${g8@7&F*b!q5yY3N0QJN(o~%RPVoeP?TiNGPcm zEC75h0IOz*C>zX(KlBKYA^sT-H$#uo=vB$)QPM7 zL94BL?QRV)SX4zVJUrT2%9(SiJ~Xj>q4KxvI_>PKje88M@W6dUEL3XKP^KZ$nHCp! zvISgG&dCx-K6WAR0_B9Ve>xC|pxV*ENWoj7mFNfW;oo;I=86BlvpDznoqDau&lv#P z(DAc*5h=y9PU5GSeyQz^RjvgjLADhXWfa z-14*{JPb#-rLrvlKL(Ls_u>D6f9~e1r^k*SzLf2nnQU;??Mm;H z`DwOdkpTa6$$k$^(>VptoA2>)s`S3`HfYp0oF1g?_rNs-m?3>Z-*0%AJ$$QEJw~t< zoUZkk_A^{XYc8It&Etf{BKxa#7)at;6OO%&msUd9~B;eiVPb z^INDpuPL`_n`T#T{SQ1*z@{`h%_^T-S;Y_0#X3S54Jx(oYQze0{`= zV9SfswbX$}#ke~uS=QAvmMNTQZe)i)`>>RuWbiyPa6Zy5eF51?Ar%IdjIL+0Bg zmSj5dw3V%5hSbCu_k5I`ASU?eA)(n~;KyoW(hWUPg)BefBQ)3B`gW-|9WSMG{|8)Y zbB#6*--Ap0KBYW^!oG!t%XRr>%2Wd%{|SFyAT%UuS{=Vc{r8=Lo=9Ns0N`Qox1Ycc zSp#^aUIdPJZg>J|+0dy#Pb%DvF2nj{`%l~r`o>}rgLy(QAB(o%sGg!9omiHDWnu7b z2W6q8G3KeXC-(Yr+@qG0=&v6f}QYY=}@53L1%I;L9IIIi+%Y< ztwuy)DlRgqY-f)9w83~`Km_Mzb-vS$+F@Px)C_CXY)n|@RBj0yJAb338?NXCu)`ak zO;7rgP3ER?0FfEQKjpBZL!3sselQs7{Zw#~JAG-h(?Yk%*Rp1R-}FGH6vR`;u+eP- z_XXs33P{}lK5U!nR1n6*mrzkyAulO@6Qy%7=BP)fR@Z}2z9aPH5D^g5+5lug{0J0w zxNqAxFJxLN{Z@ZX>g|rJrEt9H-SG+($Hg;Ypj|M6K+5IQR@+x8A+Xt?I>WIL@2BoY zzrMik0)kg2!v6r5cjHvHbW)uLG!-do<&1>t{bRQM{t(Td7bNL zK|6mSwxiX>Ln` z+t9+os)#Bn9&V3CZCQKbCHa`3Iv~X?OFQS0T9B-)0r9idC%BSUBb?Eoj*cjL2w*@~ zT@wtf*jtrp!LeXDGFdsnE;C}{Tt-GAS;pUmz5#E;e~x>)H+A!!q`}ukq5rStGWcNe zzm&^?t_=UKmRrYe{;8IG=|$e$>#?MOGAW3Pnp)ZHKgUNVC@=T0YsGK#AJp};bn7*# zZ6MW6&BMCw`$|;B=RE6_zn9vCIb>|xEJYM#^G~U_b%q}2O$6#Y)2|5#$x|}Xw^l%i z2*5d1GaD+Gb=+y{*Fu>_fFsm!jt|R+C4F$!@G~9rSsF1ee8SwwAwDqJmc*C`_AL@5|df!xAOZH39YB@zExdAv$HJkc&!7k zc6N!1;uyY&@ChiKr=D00t@0A7Q3S$Gt~=S2zMj9gHkyANccT&ESIuxv+g|@lix)){cmy=KP)^~i-D1VNfc*O5js;51msuB%oV-rTmWK{rKIqT9Y`{+ z+8>edmt0fw?1NnJves!YOjqn*MS^7|wUM)pzrl{E_65t3^)HS^9*sxW?kgr|zu6BV zsZaOOH=H;*mmhGJ-NwJ#vd$IydV=i#!jvB~for(n)k_ z+llVd4pV7&e*yeBS~9k^H|;dM1yfKgyxDG5?DFLd5w{83O%_|^AKyT&=0d|pR5c21 zV#1>;DHP2BhCDtwlIv#DW7UPk4B!{{RIScvjpjQfkP0@KbznIxr~J<7Y?XMi~h z9dVQjdVQosx2_HkYcdgvTcr^z9XBZvKDfjP=u$&%kYN!{h`Hm+9ziqeqfW-ttD^}t z&~Me$1-@?(iUrt6FHqMj^he^&EyFjBU4dt~Tk-dC|6^Hsl<7nY(Ytw^%~8R*l+T!| zW`tp}a}x2M)bCVLEJ}kdyjnX7$rQ2GL>~2Qj6bcwF^*T%AvVJ%t=Uk&ubcRNo+TGt zwY1L8r(E_ShV4g>Z%bQpaG``jHAH<91+F6v>0Yq9&iQg(VQqb5abuQxId#1ekm!Ot zn5myNJT=pOXbEtle>r;@{IAD-{5{k|9M-J8^_F864553Ks3$}rT2t<}SvfUnbv}9; zR)U!(F;k84AM^->exPGnS4PEm6@Clsm z{C(#Vau>LnzZeGQhN6Lcf8UuaIV=q%HC4);CQ1t(hu!UOlS*2v1+|*07wsA4k@rpn z4`O99)%-k!EXy6V(;!7Q19=OB1Noz^10d?9hlMs<;n~vQBk3M^gTva0I?mJjTHkux zS*lf?>om6-~FNN^?c6juAF`$tjZJtTX^1AjmVtlT$ym~lc5o;w;@?O zr7pt0K-5~JXjXx(x%#YvcmcaCVv`0_$WyTm-^Nk9A002o)H*Ed6^!;_H=f=3ou$op zzk0UD-aqSTcTR?gd z=NH70GU3f}yET!f9b6!5X#-#?W8Z(eB>ig?hfEpJdyl_f$vVAo)PL0}0D`;N?bJ32 z)xUhc!XQ3Wu4QAeKpkrgG9Vi-%GDly@-ovYzy&!Y2MSBeJIXT+Evh$#58$=v1Z&>U z!p!KFPF}{BP~r0&fH(U7LM6R_kd{liL8P%?L6n6H%?-m?=9}RIKlvUwxYkH#W#9HK z&H?G(@goukj7xvlsq$TD_HS?qmOrvHc_~6UOU;JiFJCQKvO3WOp@kf*C#d)|Lb=nK&c)c z{QbiA)Z)4%>;|SA-8*3V-0`G!Lw2>*+xE;d;z|7k+u6x>5&rPm)j|Y!Lkeod%T$4%6D!5(x-pi?)9&+Jjb|cPvQB_F5W<7F{9DXRd zk(?laRW{6*%l+L!eK9)>b;VgUTA%m5y1S(7JgvT2SBghJsukWaTYGBQ)|$6mf9}y? zA|dCSU~x*tgF@SuU`3o;T7rmy%E*RarmQq7n(#R%-(B0Z{%N$VoO6^cP^?I48DWYY z&7RaBsfBhW-zN>XWcFC+Z zZJGpbV_P5`vnJXHsxPd*I(AL!?T{`}t^R!{uB1+~B&wo< zu=IYm(qFeHz3?0_885MxVn6w~P}^q6gr8@MTKqaAqz1}K1f`pj)og%x8lp?1;^XTehkU>})YtQ$4@;_&^U zT6s-8qf^-UBxOqwJj-&WaX@9ZmTEfF`2wR11%yYFk%}O|M9=D6hQzQChvt)SfqW z%DCNgs3c_HG^R3U*aC%@XvTh2%MR}qkbZEjem-Aa*xZ9(+uzr9`7q<@Gd1m2I{6*tRu->xWvpuUIbb1y-F2qSb8Mbw9`Wh%V*O|TKic3VG z9GDHvN)U{?nQVDi)j)cv!sBh`bV87?PoA_m+E)gM^nBkamJ31OpuJ~iJ1n;S_#^T6 z<|azJTHK2hVMVdO#YITgU-j~xeriVdp8L*wnl^Lu_T=xY6?G=Y9=p*@3n^z*71QhKo+gEoqGmPLV^-YUTa8-Ec%%f`RFXD7ait{AZ%m1+ zSY~yY2ycWHZE5Yu+Fe_ZU_LfA*X>p_^{yB8I3Vqy$7TY-OZ-+f$*^ zC+$9_c~^~8PFL--8u*TqXB$Atb3eBYu&a!Gug_j!tv@tbhx$byx?hs66xiIZP_muB z0K6=o?(Lp(moFdstYsteCJs@n%Gj*&j%%f6=AGWwwlP9#!5ykF3|M z6vZV)GGc|vib!m2?0Mw~RCN@1gUOg&x>0eIaVq3I04%}MYGS9+qHMo?q&xvNW5 z3gt0kQfNt&&P;1<3OfXZ%X955FCA(gI~uAv z&-rZAFlbtV(}G(jepIKTr8>e|AtF%`D>LL9e@I~tuh-TiuGT)QId^6s#E2gWWA$N% zo`&?RX)>A{D>XA;;ujlI^u1FwmF;_GUZ!c^j==$BBb8gvlRA-$xQogY{|)=UItMP} z>ioCcer8-{bb?RPQ@m|Pf7Vl5b=OVXeLmyBB?sAli^ArrsfRd4o?q14_k`gDkPzNz zxF>HnaX}e7;4PTLaXAsznL3VtnQE&V)#F)-ql7#6vs#;W64r9NrqwVhWd4YZ1#jf6 zX!WItfX^yhM}iiXdKq%;&n9}ccO?UbYs@cYs5e@%%gPob?SHeMmf zrz%7Hu(TLHq55KD8LDZcrPdUDR-mL7@|?$|4&HpMe`JodpoP)03RzIeB8Q-~+5#`?gYQ7jCVn*e0T{F>ESF`;5d!%AvUU zX5o@lM3fL5GySZ@p`jcc!sAhUDCog3+v|}EAho9*!(m_RAxu?CGWY#wO(X{mm}RZj zl8cNZoi3L@vg+g%BuKgaH0igS=YsN|uwLtEH4~HO!sw(4+mbk41+lu+`qeW1O zghPhAYtD_dMuza>XKJd|8E^qj?DskTQaUPsPW|+Ku;7lF0;+fG_i2Uva>b^4x}K3`oJKV; zGlVBDyg(LmBz-ONbl5vMJVxSxh$8Q7oB+S^zsy;azx=PH|fHr zxJ|iEV~egcdvx@Cs8QDt)jGDQ?l}|CW>a;7S{0A+?n3#%QZUoG3XFK+q3=g%*lW(*j zMEh+tQ^s4pE}I{WY3!6A^3e#TlSvdx{+YQ}yGQ(hIL*a1g3 z$7vs_n5|{=Cy7l=6EvR;&)~Z~gR6yTfaQy1IU2U9<{IjSiOw~pPm7|WT_MKIO{l?= z57W*Zn(AF4ptOM*6i(16iZgijcJKAYe0v3grgB&-c1%IM{Pt+0;VfW&e?=PjO*9{G1o~TUfaW&T<(a8{G-bykKF%F ztI4J9QA$o{75x(Xf$bOlnn)@g#SSwp+EBUFKGaz3cbN1e<|rT;`V+Q1v^+y7c|nqT z_ZbptkCxxIC}I#)N}8^8G?>-*>$=HulL{L>-A!!uRSmWx<+0gU;UA#AH&C{!)#kj+ z685R^bxd-)e z$-gEu3pX3$n=Lp)j@$oC*Qjd`E^n<98*6=}c-X`og-*=lA@uPkSzU!th%~*(kn~zQ zV!sgvk4-CB8RI=RHh=$meBJHQ@4g@PFWZ=oPh%lT)b4((f^0d1QEM%jzOh&}4o#Kh zkD6pj^fXz0vjaxyo=lH|vEb^%}X5(6$>7f-ISr&={CMNaz}?tE?b6}V$r}3<*t0Sa&(jdldsZC5#q)Lzx?wl6M!=dS|GWKSWLqJMB zu`y;^qF+A}Ea32^oawtXkEt>i)C4mL8LEc_It@1LOkFlM6&w8}S<14H7g;W)ZBc%i0|0C?_Bgl1WS>c;sGQSjt4fc;R~0c^&7I z?n&rhz3l-(XgEB=4)#$63Y6!EKRWqbmfwW3EvrdeXdc)VBd$|iQEFY3dbrw9#ADiL zc$PFMK(&wy8-AAO2v&6s0y^e_9h-%AA%(&@*O_ZaTfsy``wBsw+R*P$*o++{y)Ksf zYB&oE&qK;7nFcuEEb;v@4l=j|lY8tHiLTm{>D7V@WV>cjOCeN8wtHoHLMlT9$xn@4 zaBZu8{jHHZMSfLM5Os2TZ&Brs|7oiS?D)5$c`whyc?E^ERKDO9+03>ce zpWz}QS()0Hd?hc~Em5tD$Z(2%km)FvW?nYlabNTw1L1!s#ZpK5d-ylc z#v8`QXh^wAQ{gJGX$YA(swW(Z!gK%iXkgHNsfQ!{sz?xK=kLG1UZRev*mzUIBWFmxjIUVknWYxCGW9TP zepYo~Q^`5X)yb^9N{`bkp4iGjy=oEr(`aN$t<#tI981N<*B_Fm8_)#Qd5fIHkO#?05MMv+8&hq7W-6zKLB)8P zEJW0fk+~Jz9zC@M9;=y7)r;rLcPkl^<{J%LKOEb4I<4jxw+Of_O#Z~#+2XlpLYmp1 ztO#H-3cGEXD@c?QVCMqsCPe2VA07KGt@5o91fJP!95n*^%KkoeM$@KW?#`m7pmoGgdOx3!p-o||E+p?50 zHM_4#Ha)W3>on;x4UWbhGwc=^}=fb;kEN^b#z!TdaP=6O|y z1g7R@jjSw}f>7fl=EV_SA+Vf`5;0>@ySPB%4bbI7^xHMjq^NugkA|4CHXcVeLuA>T zb%ha&l`m5_-zvByQt@?`lDp09K?uPgxzE+!SP&tcJot<`jEZeeq-$7svX5$9iA8;I zF^4+ded!*Rg>!R=s}aCioBL|WfE^<~twHr+{m%b?Lfz)l56arMNrBPN_o$A1THV3W_LE4m{m|X$A66;__SG;&1^xR5 z&o)(`D49eIP{;yAz&HjHdR}Nbj!MT^i_VoTPJnG|Ld(>yaUPF=2<$fc$ za=@@1fJ#9T-Jes~4WvUa#uyshI&Ihd6@nU>AK zJH_BOl56xA#>T3cNJxuZwyOusR4|{iyGoR^o10Z%BfSf&G@O&Y|0qJax5-WpJz++j z7B4ptvQ6><+Y|Z94UirE^VxI`*?816p*vrCX0~ES02~UVGGFQ(K(H~Ta@oFf*Zwjc z@9KDI`Yk1SW$TdAMJ%nb(8>})nyqM?3y6+2oAR{?>-YzLs% z_Ei9~79@NMC0{Q?t<8c!*_@;mvjSsi;P7~GXXUE?0ZPlfTU3jB%^on)c%ZMT^JET9 zGsK#u(2bjih=KZ&Ok(0qjM{)rbR4}{#_a;ScFJ2-he~_guHnl=_e1xSHT{o@k_j)1 znQP+1P}*N=nRxs|Bzs7UH%qkC8or;Y6E#=RRLp(7%^^UUe3!WKv^5Q{rWxj*nN}cE z(Kc*@7U*y&LJs41TksLYs`v*qTs!*Ko4)aUKJRWs zZN1O}T-MdO5oHweXJ#j?&={W z+|6yWE#xe84#$vE7cy9&e%yZX{QJ1|IAnLyWQQ*X%C2u^ElA5tA5;ir_zvFKLOj(o zm9H8CJ7YF(*vqe^zPnzdu9Ee3;iqQtr#hFYHng{)6RpqeAGZ(nkVEv^D43?$G5>sj z^Mzk%1+M7cwI=yG8mBg6QMPE`Yth?3|80rjsNb^v9k9*Tek51Su=VV;-Jum=O{^8r z!S(zO?%7%%oRp>-c|TCKOgyA0){LRcfblt>(QImGA=iY_RvEd4>4^1qPoD1h+ znG7&MAvD~H&{vuk;=aLUc(eLRD%KD*4<+?6nZH zmYS=~ja8mrHU5c%K@mMua_mLoxt`~GMCoko1+c5v@l?K>#L#{$D_roofv>W5T=ZpT zZLRb&5lqOmMMZwPp>mcJ5D=9E+Ya z*8o=dT&6KbDB?$sajj{DW5|iwr#70%71yQlI1*xdnXu%Lz6N4pEs`~kK#9*mLoPQm zLb}J(WGY8p4olO`A<`7K9lnE0SG=*I7Gf^!lcZoH1?ZJd=zE^Vetx5>iG!yDJ#w{E z37A8H3=y(K;?36zl^kPNB(ksYJ-Xv2v7ykg+^n!D$njn!y;#p-hRMq+|KJLg>Ls?(JiZ}}d zEv-6DolW2NdG|OYan-y9YwJBL<-lm6nnP}RR^UcMK5$*dtj6cZxY!ii!q}i{1dp%` z0bg!R(cb-#uvLatQ0y%aW4(e;9`y8=Du{fx;q>3Bf~6Jm45_3yU!r3MPGG0`*L&?8 zyMY`xEaw_~d^|U&)emw;&a`g=Hza2O;tfWPI;tY(0Cy2RQL*T-Kn3r$8&+{Evs;y> zHT$sR*$iwZ6>J*UCevk{MAz_|RjiJf7PY|W5fb2j?swu-5h`z4D1MWUr-LDQ5ie>F zY;zM9xm_fSQu=U|jz)74?iRt|7_{3!fj6=wiVX!-z##2Yk|nNL^?xqYKlNYGrIq--JUIWkm!J$w9~ff=qy3G_0=e?tScz zMZHaP8>($Q@4S9l&1tA2f=PF5SdDved)A_*W9CVlmgKV-0v?VFZkTG(^-k z!(x3?yE3JaqsIc26n~y4MboS>IXBMeIXpGQqF0a5m9Y6&0%u^B0pp>NUpIMeV#i+O)CT{k*6q{lFxWllf!JX9<}x~N!ZnQ z?Aoih6B#I8sM%t(ZKLdbV83|$^Ei_8tj>WEx^B6q7$e4>Y_GBCl(>jkHdFc$!DGwm zZLOApcP-iBM#GYe^MWkFo!BDK7Ba9`!F&MffScOjGnXQ0jp2KAL)r8H)NUa5;mP`$dG<W3n+>P(9XQ`CY*)X>dq4X#GJPU+ih=}#3uJv5xpij+oq1? z``S@SFn~uWNY>K}d;Y8LWS~w%T~pt_=~A{OZ2ziJVAQ#;FQs_1+(LsqRAB$8;;qZJgz;XTj)3glULI(gnocfIiTK|FrkzKmxqqk0L!G;_#X)c|G_TV}{;_#F$E314A-#DUX}1G0@2 z24*Y-bj@eOOSbnispR_*xDbfayZ}745Zx=bYW(4;f7wO`{RQ z;#v|vd5-U8xbDMBo%6W}3lNs73m#33k>=LZgYsysf8|^G>j*kAclO7M@#bmZ8-3l$ zHwJv*S-luMgcA8U|M3D_60~b!(u|rWQzgX2#UjYJ|Kx3CVb#GUZr|pzM~Sz>2yqX-vWF6CJnd6J{&F{e;32!MTeO zQ7<+I=5yUf@gp=h-=N3^te$A!gyX#N+3N$(zFxa?6M=wc^MC|XK8kOrW|iQ}gJb1T z5hu?Q&mVJErm>l2-LljX;X4UGypwdVY`ENe$dck!htgFKgcE%WVNuQwR*lIOKdoRM zkv`xKR;YzZL+aH94zRLnJL(i#)tZb*Kqkt2gv}w2{`I=8sx>d5YE@;$3H&O+l5`1( zGx<=pFRh-LgHDbe^<{C)V52Cnh5+a;Y9ydRA~vjDM>itT2UFB43Sj!(=MtZgBE zU+t=cKBD#0^o1`}s>frup6X=Q5jycoGMPDpzMTB2^5bz!;SwrL?zk|9h#_Uoxt{E! zfi8epVNqg=SQ(N^EfP?r9C2^!~Rf(-5{}*#_9o5#>um5(}Tc8v# zzHtHtiaYEU3dM^Amlk)5L$JNu;#OP(#UVg&f>Vk^&=4#HclY4EtKIvY_dR3WbI%yR zdw=)d{6R7jk}6Y@e7SRAdU zU3VdsAkpb+ftV)m1HY#noLWkQHa?)OF`shuQ-6H!%2o;zj^ZRQZ9-ZS z=N{Gu4aYHG=V(MKN(N-EO3a!rqsh>+_FsPw7S@~7v^b>aMps%dVga5!!H?N{N( zpIitK#QK>OiH3Nu=tVIMD#h`}1#+jMJCT|TN0ed*p;18%K1QMZqn@i2*=;3{dg@k5 z>IoO@^cr&byPYy!Qi||2&I+R%T^gx%Hi`J7 zlvrgB&mHRQbSy=gVMUn-6a94eKyV~UBQKF=#ZJVo6Djsdzq9Io36%B4Ws^|rhXN7b z&~@_`aOX8%sX4K{L3tLaQ6~(KNLp!f^Ado?6d!E~#`U+Fi7S zg%samJI>2tbOI;`bFkyJ@32t%P{R-6j~ug>wHlrH7GXbV-AJiQuaXS)(wvWUJ(iE8 zO^m!aaJvxHQ2uB2^nY>pTUkJI8QPBd7`a1NOV^_(_@DuK1K~WNFtiC}Gr8Z~wW2o( zmxwQ|$zvCgS9l&#pTRWT%PPaN5=BV4g=(b>AolB-46LK*x_Da0aHqe@XNh1pUzdqRe%AeyN4Y4kTr z>Ge`N-%M@eSxhOD=)JU&x@@&*g?d?p+AfKCsjM1Z@)hk&fE*Yomzv)GYQ5a^zmvu7 zu(dpR&Da=u^MvijRWpJ!!(ThvQ6lzl3YmcISX@e38X+nTh;d)+*kf~?ck>AFir+fD zzH5zqUd!=tHTT?$ZLp@FxkgfJP50`dgR$yjCS7+M%#TCRM_fX`=?xOwJYBJ2>t?B> zGvl?_??+^srP}8%i*cxx%i~g%d<6Pw9sCv&+?)QulOU5ADOL-Ht-^JgRUn<-_B6E|ZwZWHYV*@PFheqyangV=xP55CPGaWBZo{x>mjaiQ9 z>mNrX&S;jgWorQ#|iY<%=aR4Gc|AvpT0CZ;=r;knO!eR-9Ox_^nTopop~mauQ4F&)Py;ax}0=Q9FNwc z!C(zyIc51C9-GbmD+k9g9eQ5E{^D~08h-63y&iDXzgL?UT6==OaX?5xS6lcVK*gAQ z6`if~v^eYI6(N(j&aF~#A1eIa{PYW~v`*Yq2M3I+D1H4n^lxjZu-d3wXV06PnU&E0 z$ymg_Tai}i%__{hc@@;Wn*S~H5xRm=Ac$PG`iQ&QyqXK|C%uFTpp1FLfGz?BWX#N@ zxmCjKJ^w^R^^^VWWcVI2-fOC$i)6>~3Ed2QrpIqLRq=etHR)xkQBv#!e3O1G^TraT z1sZ}S{jy1;ma^VDAeShs=v9BR!tco^FsN2{hLyR)W`yMn?tP!{y)KE0POEH?mH(n( zZUL^zw|kc7Rv3WB-#??$k+jOSOwWYRq}3ft%W4_)3<%`N61zqL`Oiq?P(>Xf&q|$? zetL^>Iw;b$wg|&7ZW-`hKw8+lG4-ga7g{EqRt9OPkw@qM!w3@r-i9pV^HSceh@9Av zkaBEstc)x7|89@lZHq)`}V#Ol*LR=UtxSyl7qZIsqENzqekv?^lJO^yfF z3#5YvT)d*8k^FG>P>gix2({o~Pe$;rS-nAer%U=NB&C2&c|B6o!_3@GonF7Rr4*or zxg0gZyZ7mqJ_s?IA?0&t^mSLL=`-5RQFr@a@5=ZQP#i~_x^WpuffiukJa3-NBMA~- zeizG?w75uT{)i>9%?N*l+J-GOj#hj&!1bKYx>r*LW>b}1rAiJ9`TinOdo$z$`phQB z(7KCFM|71a$sx)}{NCW#dZYLW5qrh3b88#EMMZ_g+}y%yfx-yDn$&Yl>(pKs7;&BI zGzsI#F6?5J<|3gsGgJ-r_i)a5l)4}aJFJJXVll3tJ8tw%-8;H~NXje_+w0wj%@Z49 zQjTdQHQNuy9$n|hP*{3qXh5gew3N~MO_q6MT=H2$3z;MlKxoRR8_#xSTnx6_`B|}O zTmjxeKFn2}F257u)%(jHebZWMaPB zVsS#jczW{*#LFs;MZ$zOVcCu;a;PqFc!*E4k-}o(&OwXF|m#ZxU z)<|Djr4~@uZ1)$6o@Q1f01&Y2s>ti#Mkk_G0($=FD2!GV*YB2;pXwK?Y{UC)yc%MO!IMQ-$Bc1BWZnOcsZ=X zQnY2J0PPfnJ#gVbNr^HHJwM1DMTO(OR5F7U1#=8CjF(0_vh7VmQp@+jv`}7jRmJLc zbnu48bZb9mi+!%>=9>~`XC=1XXz3jnUj#J&Z6cAU?!vLzO!=sr0#&?`=%be|Sp$T! zc^%9ZPt50CzcfZlHx}#Y=&Ww;!z*!!rP6}AG>v;r(mHmJ$mOh_XtPDO8q3Mbs`nzM z)X6iX{bfE0E*C|&-He?l{;YdwX)eF|I@UaRI`@|+b+jkT@`h^@B$GS(?*47x#r)~! zqFE!=#6O}e1RSYIeTx?5zct+pvV-P#_LUAm1(4mPBO?CcSWyWx8vj7|D+OtQ{{Wzg ztW0hy!ssVjj{^Yw!-3xwg~>2LfKmYpz-?Nhv4u{nAUv0(x>(nSV5=9K>`(rj7d225 zjaAgp=D!G9Xpx5(qLMIW_&yQNttXtdn=@GKNEvPOm%19Og^rER+_FUC3EJY5g6Y`S zjkr;>6<)iBZ;nxl z!D2tv!9ja&?(NSBS83^qK15zeFbV4y)9yn#vZc!u^aa7yR=%OKR|aua9ulqdm4kyJ z<^_E|7xcV9P%*d4ne#)q)A{BlQ}5$?6Ah|2$8WAB#KD*44Oh3l2G8~m`eCw;_3s1RPDgr;p%<9v5#YxJ}k`+xJ;9EzCwvWk3anf{(h0Mx)C(!Bp=9{O=QFj|+#ad4L?!3MmLV^N7jP0(&&lzU*+M+@U6z&~iZV0#*VdJ>ds}DGYk9ie-fC+*HxrGV5feqv zZ=bUPV5+UU=+hv|v)6S!=QwaCK-dX%ik)th7L&m96jz@r7E->sJ*fAtBYs_ko2?9zHk6$OQG~v?pboL$Q-}glV0_I`j2i3{@G1?GL;Au1^rX7Yi8G2CSO7U6&fYo$K6U#&ZLt$#n#>((X>V& zS2ofhSerj6eXyRfOM$}+ID7or^X_>+P`C_M zn$0~GusU?TiTAC#qBiz-)*$#aL=RF!&?zQTN*jFZf@4aHU+|bTX?K4>^^>>yPCB+} zXeh3?=(WCqx)$d{*_0El7WHin-@IA1Nj)>{l>QE+upCKfX0HWK%%eb-AjtCU$Wlv; z-#4`$8kx5=9ae1)YV5IbaRMVxINl7MD*BDFu8*N^zv!mu^MzPdlUxldkuL+L?1qHljioE;M9ynY?sp~ zI{MMJZo6tD+Cwx7=>?CoAv$rZG$$O_KW<4rYqZMy#9M8dhNWs0>@(%XjWU~|cMzgE zCKW997vAo}L-_$OzeKM@QS4XYtSp*Lfy(>!PECGSDyC9bzxU02RMSq0WsV-xmGs;` z<=ad3epT-4BizUuLD?SV(dr|&L2z2E7KG?}PjjIN&-g)S3mYk{9_{)Jb+Z@Cuz6C# zwJ=-rBO;q!k`ZYn>_c-efKvNXZ9ElV`hi zcv%F%gC%KkJrL_6Cr~fPSPi#}!oC8*)Hg4yd6%&fsp^g5+5n+k$;-48(++2W+~emgJ-sP&j#_YPh^6x!<8YnWbcnuXCAlkaU>_rV@~9ao zJA@fLnIufZjTPI^SEw}|C+9DJw-14qmzVjcqOp?sJL07>T>gchD3OQS+N-IoFbR=v zRKbR!W;#r8!=x}koK-I5?##^$lekrW(2*#rRB+(<82zTk=EOB*V_BpdHwWxeo^$vM z7lmhh4G<{sgKj&xw{*@YkcsP6;|{R!Mpd!pB8299si?FO!-{wtMJi`j8=codW7+%) z#qr3`tpqDHE!uVPqSVbu-OU4kZ;kp?SYf-S-X~6jTS69xxu-?mtx`o`pT1=<&#h_2 ze*Ek{#aPRs%<`}uL3>x7icT&Z{YxK(1iw3^Yxv80eJa#;$#g#!@=Rnt?zLA~oSRHR^eIHuZNc~u|ZdkOb?nL37Sqj3Q ze8Z**_FcI1#U<#jzRvR7hjV2CX)*#?O6Vlzx-=y{AKA=@izKl~O&3AAmO5xak|Gr2 zb3DI1?U^@J;i9Ndif1j!YV=TKNiM)1iUGD*CI*kWIpnp6m_p|(6c}6A> z^b1sks{`K#ys1}=WY$(9qt%eu1+2PRyu zR`1_+q|lQ!CV8}YOme?kHmrJSv&|??6zVLciGa3(r{Jcx?Q%qwj1v86-bL9j+8_Z@ zNi#TH0)W6+F>pG%7k$ihiZtWU+dF9r!*4hN;0WzsE0m<~ki2b z*lHw04v1KP7c(W}vdnMDe&HDZE`0cZ41sgtEC)tTCI8E(JDm7CoW#?8c-x-%k*uT! zKGb;R=Do^k54H(Z8Df{2Sfp$gwi!YW=+qHu&A$%L)MvMM4T#iKGkglqvkkwY0B=K+ z8*nX9hpQLxO7Dinm>qIue@x%4wCe+eLH@XPSc*9R>-v$^*-vEr|H=#ep2MvZ6Q0fb z;z9kjCLi`6`zlsZcZ1`3g%a(jxSKZg@MEEPR`@@}P1#2sdrUtdhw zu4dlX9MLh8{=xy@RO##e#}_jf<2#;tPevHSLh;QdXIFR)J@GrR8j;D!)cEesk_$^k zW$hWo(1%Pc64j~1e+z0f|5Z?%{VAx4`y%>1#N)By1BY{*y`rp}=CL~Oot@vcSQ)$P zGlzsSE67+Y5K}wcRe1F#HkLUCFy8q#|82aBd>aNUf;lI!asoL2q{F?dhA0cTI&N?7 znu7axBWk|}Ot@v;kkpe32gmlnw&;7jv=+EQJUtidgsmIPRlgZ~U8oogCgd)kp;PbM zB9)+W1C(P2ehdGLh~UGQTh_Q$mUEBr508&pGujG|hx&^h>KffOCayq>OQ-1PLMGc~ zWK!Ri_L{UmZo0AnE0RR-G*>)|H943q6sn0H5f>NKUFAEw(5k=um$YX79FW#*;0^~E zuloDapmpJ4V_S2|VXOfkQx9N9RjuB#RC+aB`JWLCML_u@idana_}zH~H{z&ftBI|V zBc;}_>m9FI1s-c44e9}h18Tiub@mm+d9^^*s?K`x;rPc@^c|uKY~C(QdYB8U(bkG8 z-#^#;V2W1k*v53`U{*>kp;FU_cf$}$s!p|)DIh;yZ0?5aP+@5HS<1xyR!5AZcFw0s zD`M;EXGilc$}6N~OSn;Ha@tJ%<@I+!jGy#3?*Oj0!!bbITu`=yR*73$*$!b{aFlYwlrN~VnoKo%>KDo??h`IOBTo_|{1;%Js`yi+k(zwOwy zRlaPL9I+;#3tM%-BmsEOcuH#vT2=t>c^ZvXt40-E_UzGR5Gk*?RFNbnqr?_x)UJ$( zstmV7*Bw`VlFE`f3nVl0ZF*5+Oj_9FDOyswDaNSM?8eeIrOVO{iQGwo=vKT=1!aesrrH2t&j?0F z0a;nO!pJYDbY$A{O*j1qPc{#Dcxf=D*s#?xEgWkGo*J3Ao?(;LX!N(URQwYzzvW`7 zWn-V#eq4FF-A{1qk6WE;uhkcmN5okLc_7VWE8eYK5$~M@Wg%q8H+g;nLs2OxYEyT; zx@W9rH7TFB@gzU4cz_KTDmXY-I-)z`gen~uNL>M7N&BKh$yQiiv2CBy@-qZe(6pIq{`LM3!4b*6>m6T zYgcZxJ9lbNnTxl1$7eh$4VWFpm4i@7I4mCGttp8YdI{rW-hzLU!8P`#sD08Q%7!`2 zghsAIiCpQTCl0$rHao}ZF|FPbulNP_eX79_WXAvrmF1W`u=P%8wTbMIYofkGGrjZ2 zzvh7V;gUb)G5|IZx@dC~*)}2h-8aH-#n?&&2fZ5i-^~e(cneO4nm48*m^1puF2Y@mloH{lZPEB^Vc8a%OZIZc{6^$1R-zBLheU53=2ntrxGz$Fy(~27X%&AAA@zryr2*V+@@-6p!5D|a6}#bR+y{eI6y7Wb-9i^ApI%3)g?8$Q0tJ)o2H`xU!$^Q z>_HNl^93NUIe_cpWi*sWeY;`G5t^x_MKytL3n)5Wh0{lmErb;W*8Myp`ZsV|uW-q0 z^ubfy>1)&e<8v0q;I`DNL++#_yoH+&UBZr%>^pYc3{KmdR^;8}X`I0^UcSV|`}e!0 zj~)!I{wfvzD)IP5&*Wu;*K-7a~GOSIpx#c3AwOm=;F>W?fy%pHbqG z`{NcX{aMs5Vt2jOnt{;p=t#ha&fB*aQZ+q21Xd)kF&v${_C|#sH zEY3Z!P14tMmMMK6yJW`=(pPxh5yX&$)G=KV1VVz8m+%^Xj)*Rv?j#L_Njd0<34Pmy z_;*6ASE`=0kq@{!N(7nn+7&3>Ryw7?KClf5s1jI6<^xKoZd^$03PYb-^X zp4MHC+=##F2p(9=isMg2@g=Y6Cyszt$EH#Wl80@Wm7QlbuPk~SZ42{@CP-kAW82L8 z37n$Pp6~Ab{67A!v%{PF-PoOWTYfxjyM|UW(sDB|8}4A48>@}5UDcPUWKNB@VMP_i zuqD?=DtxNwL9CWl!;_;*Ed7(CIjYxerU>F7c22VkIGahSNl%idl1|lmD**=+OxGt$ z^#vA9L;c=bN_SQERMr9J3=8%FG0Gx2ORKPh=gp$NogN!#6-}afLrgIwImMM=Q+^8P zOc#=oPhj2%N!mELxNIL1aspW(o{+*;*+>)3Tnh)dxj`V_6}~)Mb8}m6d16}(4X3zW z*ov?%O2iRO?YyzS6}qu4XO!)rlT{;`dp_v%DyfE-#i?a{^{H?hK9$wCju<7W&?$Dg z&$Skly0Wp;G&*!(dA+Z7t~@GgM9n=Di}f?`l!CHnnWVDkI_l5@0$wf)$dD(|tVto- z7_@27`fTAn;4C4roNts4Ed>hP{wT8tfK3T?7zHn=dqq#U3-z2PjJR!vPsmm3j*?izn~fIjS0RtSb3oNO1qqx>X0p1+8#|dD4QEGpie~L+Fze)Z{>j2F8OfK(G3mo zhi~v z@a4T6@x?2~A&MFmfCzG}--JRh>*+TN6+CkI*uBPoyl+P(3Kn;&D_f;y9ed0Csw+8o zTv9CL$Qt23sC6)6M48CFCVD2upiW7R;!4^K3*e-c3pf^}XKX&(=W zAU84MLL9n{2aFauWvNcbLyq)|O`1n8zYm>@FPqi+7C)bZZ;G1*{3RiMz@j!!K%nF~ zo-vlr5uFmW0?jYabjKz9Llmv$mXZpzn4FdbZ0hAZdObLFS_XUO_G@ePaL{oK0-Tej}W<&mw4=>7T+^4u6%|WK5BNid1Xp8*KMjr zvwQPr+?8CDW*Jq(66OsNYENKJ#xT~x=(}!%{2vpxyE{gnVjlEIZipsaSbOAI#XF_T zW#eAfN6XgsEC^-0yPcFz>*=6NJ5s)4?PuL5B56b?dSRh=bK1|-BIF>)j*$3Y$fsKF z!&3y4YQ1KF5S!huQ(0aIbh7aMM5SL*V_Dy*dM~S$5wFSpbVa76p4iyng#M1uW?w-v zQ5oTV*BIqZIIG0LaTgs05-l<^IVztUM3fHsc=4x4?{uyDcwCLR9jh!VY;KOyHviuC z_ADe_@p_Cj7<#xV?O1fWPdP^oOV7~1o;-oSr2o7IHmLF%1*17>dBJd9>?=Vg{gLOxaJJ5S1)*C_8&!^t@vDsf z@Mp&zNVT+$S4+Iq&5m{AR^KZEfC98P7h>BPk26cAkhfLU;$@00@WnaY9#1$q3{-m& z&&E4(g6Tsytri6aEmsU>MER+9f$-o75&7^}#>q1|l~lXO_2-42{mpbY*5W3!1JyY& zjQy$0rn8N1PNH2^kx%y4&eh9a$A+;E}Bk}zz)0`=(?n^-= zQzJ_WH6>$cZ4!bhd@{(tX2So?qe|l(qXs8JkL$QydWSTU#EQ?3QWn}P%s%H8vtRnm zTB_p<``5WR9r$v9$mfpO$VYlWFa{$-!1p69iz-q>ICMSVx&3f`{J|+d_GCgQn-}kOQE_R!Q_c7$IE}e=|9;O?RKb#T-N#Rs1lQc|h9!cGC{cyvTG>D3X zWn1Ogdr7m)>e#{rOPA$KrpO6GRgt`DkIc)3d# zViDAHp6=ex%pjrM6WC%W=)@yC;qoD$-X`BRonai8Q?lpu)IZ~E zl7ansOH}myYpaU?c0i3YJ#urT?p$e^>t>>vJ$<5#D*!*{rN`ynAGheR@z=Aa^y$2> zlZelKfO)+F1hFM=SKF4Q`3_h=YzEw?Wc#&#;Ltl+s-A`!nX@UgR5B_~u2kXY;Q&E5ZXWQ>b&O~JS;sL66srdJ)rc6=-u-mT z@xgNM_3z>-H-zRlF5n2Z41fJ-r-8rU9TNlx-Ypt<-qNbL;<-yme_c^YZ5G?2>Q{gG zieGf=j0ymNpoxIUl}BAS4RgolQmR?lv$goY(}8Z?dD|+Qw7!Lj-j956WI1oy6nO*& z*gSz5z@GGkkcs)P!59tNkcpRR1n0gxAJf*TAFCpdXN*gf} zh>_?m43z~SkNO(9{rmpBuE8_21uFb-v4HMuE%h%e@&!a3^y+ zpwVs1b}>HljdbsojEw7V3FOL$htTVOxT3X}k#rn^!m$QJ_^*CSKc%++K(1!o3) z{Tp1THZ9Zh_}5V|N2E70O!F3OHv`IrSA?NohcvEZ!I>^>l5;CtXR3m_fRQv{u^_wfK-n4^N0rko zwZ+$jP3U@&^Ha9@ajVTlg?|YEeNRF)c3JPFI7nHD-@3keV;M$(U}eh=a%d zjk>jshH_8O3B#l>f2i&vIjGgN5FVEEEcvQh*&!4~e6_peizoQq6};lAr9xqy&dSzL z%PY2MCfk*)T&rn`yAy!8O^4a(;7{;jKTmho&kHGG?n#efFqiL{7F_gag%A;?#L$+} zEu}aTCKmH17e6-Z=C5QF0u;%J1tPxY6-TYXqbD8_`5KX%n-k)o$Qm%viN5ouggB(t zIHHAs><#-zB7@Iklj8cBMLoSXAMp(Qa@j>PBhR18XL)77`1zNNKdj*oy|DCW!IElj zs#6t3OAJn7(9dL!of=zqD-HAF&V-l%o1IF39F<+BAn%FI6as(;Hrye$|1}`}{pY9r zBPhA(x_%}hy^f`IoniYYaMF8j!0KnS;c22<#57ZmA%EL_QWVh4QlZG`YVihXqmcD6yxHx1xfgSMy01SU+8-+d5Tj#Ga}Haj(TIwG#D z`S@9mK;L+=CNa+Dgz2MK(lBU1q_h|j#!>{*PA|v~p9FywryF@JXHmP+B#Hn3^(I zJ|CoGD{yW;<*>W2-U3DLZ=8gk027L%Fg?L8#lx>dyboP8t%!^H3*e1G9UTI-Bn$v5 z-MhL$rJt`-Q|8o+80qg4_iA(A#-qvr z?3hraz|rwhxfr(m#D>8tT@<@PdZ?mzyc~px;x9tPkucAoFh^U=T~^%)C=j$XK~i_XRsd8)xxFGReumZ$!D@ymc*Ke7wg3Nneut^b&OU6C;458PQL^Oj(-hzu;`t ze)c{`)+^_Bnt&#ZQWxV;J*{uUoER$`pU09#1i;K0i5|l!JZm)(+}rzlX*SKtD|7*W z3NlZnfZeHBay?kP)G1@~zMH754yh54#uyJ=CUVSXTc&J862>WmOCuXS4^J)xcKj{9 zR|P9bN1X_hFDOa3Fc*8?V@&~j4#!g;T1MZ5?@5rrl(76v@r}rot@z!6srKTBnKZI$ zqj{7NCNr?KNSTMYbMhYf_$jzHjkwrZ+u zV->`lj538NQ-a@OARu+PhLP!60smZh{ZA&3atsdS$YL&N@kcV`-(X{{1np%c{Nl zt+-d#sNDxdj#UY3)XD6E_)S~6CbAQ$zjXG(gv6M}-;O&9py98R^*Yp3Rm8-J`$ov`)>BhxRFkbg-WOKT{ z%E3QR&*+Fpk?_9#oH}0SZO6B&e!$Pa$lzoGKQTa~1(kPFy1?0t0n2WHl0OcX+3_ zqBN{H&eQ=Wt;Sf>3m{x!`r1}2JO%yH12Co6Zs#F2jFR|0%RH{!kmdKnR&7M|%Cbrw z7VD7_Eo~oYNbD-uMV?HJe(V0AUmHVQnHWan^_20&luK4V(`!X4AWd*MHa_NQV7&`$ z71%bi^yn**!vpNO!5*S5DY=n7v)Gh2SK5x`pwuM41XC^Yah|N8-o)7Dq5~su+0V?e zv4S5M8M$w-4n0Nc6?lXvXwnjCb@&k<32i`~@$&BDbJQu1Yx9MiR160(b-#b)P@Cq! z49t9960v|7f!lD19&+*YW~LSfsJX7%T7EM5xEEQy~@=7f|PCoRf)Pdg?vqb@?e_}TOt-=htYf)WX3X8axj-2JFx$`|k2{SG>49X|XFG>}2RdV! z@t(g9kJ6L1Wu>0|2!BV^TC8{aQJOac(N-jCf2}Avcp>ZFj zwS&K;zl1h=#k#l%4!u0*^J(Z@Zsx4r8S6Z}Fi%aK@y!;D5*0x$zEO~S9rswL3M}$b znvU)cTfgf-YOD8at<(3?DNfn|jgQeid^s zeJz#oMU^b_7@e~oJ@k0Yyucp8HMy1#__mFqB9Hf_&@a}<6yxJrXD?o+H#UNqLOJYl zC*J0YW1~})LZA4TU&#@4h~!=E7);o9XA8-j^H?KDZB2OTPJuH!91ZNX_2V`r=hTWU zeP-62#;U7?a(*|Xx2=60xh$eV3fuOewYx$#?ydecX zEC*Bg^A?L9TDgClaW$+iRGZ{oe@Gj9FSDa0tx9gh(6<`i-I)a~HG}1Pw;K+^65%UM zw{!#K0I>V~YDv7+0;hD?r!9gXw}cLcb~Bo!e?1+ypHNG1xC8;=up6bbPt2N{N5{~A zwC$E}=yp)pIx@N<}AVqr7VD zy6Hau0F4h%MwJRMD>p51>!N0HPOJcvL?Ad`xX%O1%iN2ktfayRg=PM4aX)U=+J=Q< zTn0Hcqq(*WlFR9izN{*Hj~!>=>J@l$WKJV+iS?hjV*3Xg<3#q9H@mYek}JUOX86zk z{TqDwaZ7g@V%5n(|G9MQ!HV3;CsR9~`Y1D~02iKiieSKB>=E6)Ycxs9XSr7_j`>~L zivNr*f(J)57alm?P0gtr+A6=&m!G6X@{p#>sMOkw0Uw2rXqL}pAa3bzXmsqy6>c$G z|F+n}R+5^SRe{T@5AM&d~oYLR51IQkXQ{Ol&Wnv}0 z0)9Qq_TTl1%zy98^y8v*DF+H?ibIQEFWLhJnp`gn$_Te;qJMo0tAn?G?^{=AMXym4 z!6#Aj`Mw(d#8qd7Qsr|;PBb?gTkRL!OeiUk^dkdSNm_qnLXBBuvw}x!J@haqH@rr- zq*0Xo@OKlLB!-6xuleryM%3(a>KMPI%NS&2i#!t25lnz%NyJe>RAP(Z=PR4}g(+@N z1sneOt#mJi9wpxpph^1~18v>Wzx(K%RWN{ib%gx%xefzw23*TLl^mEa(2Jfu?GrT! zo9dZ?7gzC;JhP7QD6JC8uZy7i^WTqD+TVwSQ|7KXXsT!CfnD{$k`I8J904e2w4DhYNZ=9*i^K{)f{Lj#hpU9Ku!C4@nOT9ebA}OF56fvnR{-N;>h|LD+$qQ38y_>&_P~t zeIMh9J!K5HgnMp$fX!Iq=TE(7IH69Avl9+EGT?;sRk9N`WTQ%Jd-fQRKY_J= z&RnwmaAxgQru)Wa`6Omigxo1fkIEJKnt&Zs%Rc|Vx_W&udiHUhWTS(HQ;A{<|Y z93YQ}435@PyrYG?tK2QCz)m{ag;UD*`N>m6H~bOEzU-}MEm*TlfDH%K5`I2j+F7z~ zjF?5`VU;XX%Svp7hz{B{()>5x@Cynh>~p7?8x9hyrT3hXr}wE=@5!W8rBg7pCLs6) z2e&8STqg@Cv7(d_k}_2y@ql`N#f7WRPANK%<<~+>5U$O%I=hgJkO?i>J!RXGh_30a zt$D3)rts3BC2cteeEF#F#26KUX$2sM{3D~HhODgY>#V0soJkz@T4*gK8fffBN(zQ& zxL?S+Mphk2%0mGf<}+DY+mOf@K*9uc7eK_k9NMmWygNjw08$xugu37tIe7~X*Q_3n zDo7npso%f|!~Akfa53J8K;7XS#we^{H0Oo`!Vyi{6*|RREIzc`$T=|Oka#2@pXEx3 zv)#z|bsJ2^kcjW7)u^=Ys5!-iEf#_F1hQoiNl{;8uhvFQihD){`CdIdW?Y06A_v>k zMcet2l$qh4uZcDRYu^!a2imMoM8t{R^Q`CA?ClIEYIZ4MUFnS!{CQrhx3^MK(z1EU zeg7Fqf8C+GOEdR7))u`2f827M--`MV44(Mle`4@5+Y>kZ*#HaJh&x~bi~5DZi}U=) z0_OA|7`$7z9tU_3s+9Dqt-~s=h)k6}`L1L(70d<(lb##20GmDUGwp!r%U#n2^3?MU zy3rf;JKjgW0cp{e61$K-NCu^vXZgvL#L%RLf;q&mr|N81*7A+X6noVrd9amC!+=Oyf@G5NDr z6cc>~)V4GMWH^t1X@QDA`{X~j-@dkLMty6B)N+n>yIzhS?>JuKDhF8*j{TQ@-b8-p z!f$6-cr6sT#;A9ha&zPbJT>HO1UNHQga{ukN(k+0go{Q97mehz70{AUH90TpVi7JJ zDS4*5jo;225u>~g_M4HDAJO$NBE`U3=L0gtgpEB_)FKNPB*!`-B`%nO1~wuKp!`5; zZ66GzG6bxzy^GhooDV>IvrsBuMI1_JUL^XZ>5g* zVlG#Gtf|-$u!?SH^0swXOQDKYcr^qSYSKx6j>&dd$)Rk2nEoPUJF?CmOXDyq%y z+Z&}`>PTtvB7q`-lHl6nfdIvew|D}T9yX$+>|GW3O z*x$MM&N$yVxkyHCR`MkCnQN{&f3h(HY}&fxu(V~o*e&9DvuRP9BIjLjBec76mjITO z?=QT*`>!5IvyP``XtDcrSu zM0avZu!yo}h^s*rRGa86f?q`<$2m`--IMtfb`v?)1xVtf(bP-}U!JvkzV=vda#PH} zxw1guhHt7s&UeH75{E(9um(%kCyD^M+_2dF_G4Gpy*r)~6O(_md(3z#bo6nX@oa9| z!)F2>?5Y$J^Hc2JF;y{>7S5WKRvh7NRb+>_mD~f|4$%=dF@*;GpBnssL;_9KVae6= z*pp=T1H16bEs6!RZO(m>rrPbL!N0CW6`di4+w;{5ms$BlP^|mE8PVpiFzDZmi1#$G zr}LP4{qLH@jEGXnX-A!Fnw`*o{$Deq6XZ$!$sng^GBV+c-UGMS{Lf+U0?I6LvBHdt^+;tvc2|5*~)=|l&AQ} z>3s2&tms4DaWckhwUt)n9lOd>v>Z-6>J<-N4z;1HSZ^2A_L#tV@jC*ITNmQZRcZNg zYsu|l6n}=xZsNNYLs1$>-wUf_`DSVJpMh#LUxZNcCa?w;CX@}po);)daoriaGu zNDWc05&7{M(hMx;Y0(4aIpNXDplEqn{{jwe;->ICjm8I!M{PaN%}j2?kY}24}?o zxKKqhT!u==Y%qMJvS;wfsW(58xF<0FyC-y_E{NOR-#x)$NA2JF5Du^OzaiH2KZ5`N zpSRbnYkqCtxAT@E44YR;4+`tUQ}5HS@;2YS+hGm$6p%vYL${1jk%U z{M!ZhcXdOCD7u&p+7q5MEs+Qv?6k$waM#yVSl?fpdt#oYHu$eRtMYH29i_N;YS=tk z_BYYO3NZh7qAgtAUZa(poC1s4RPhSj@cSUpEV*twSvujWx!YFC>=IPwSbXIvxs{PD zxy@T6mUwSr3A8I<0Z$%Jvob&Q3o|Ai4Cr+|R-T?JFsq<89BLNnFe~Pf^@aNz{8ygM zq(S~aF1A+#86{BXym=KIht$Hzol%HEO&UtRPV9s0RLV#U7OE;R3!Md1Zibqg$%E7BUJX=q@3%hcSk7Yis!FR2YO#EkP9170RIW-9 z4kn}bSTXedMF^{!PUPE=aj-F+o-OH9UTIS@e6!E4CEAH3>R7N0bG?ZS!G{L&HhExe zzRrY{bLC8RxV40j#Sw@o2zFcclW&hYcWJ@!Lo%c4aEOJD_eJbDFD8r6I zpibA;Epk(pi?-^!xm~6rkL&Lk7&A`^Yz}QLJ0~1VnH`dQ%AT<4Or;NR6A$P#<8^cr4_ z1AnDah&t4kdNggQPc}`5&79c=K8$~>^Lul+23~tUHhnI1)Omxo*>M&P$IfZewVvHD zf?wCEdh8?2up;POLWqB7Hs>*3y@(;vt;xvh<+;d)?F|d5PkG9_K$AbfaJ%^#3IA=b z<4gh_?ZU?8l;j4dBYEWiKY8{4^{41v?TNJ!3VO>o_Mm7;QlhF7p>_9Y1mb1Z&cmg* z%MbbjB8ofxClOOuu^oF2b#22zn^#E`Iqa&W-60@+0kwGOs;k$MXBnRXqC`M|INhqnyiAKCCKHD)ilB2 ztw%S0fod6nss=#SP0Eucx2~S?q>?{j&t*P(hQxt=oP~^S1dI<|J<|RIg&Jr03x!gO zN;A93K(xb*le8-V584m<*_|mP>uG1mY;8O5v%}Y>08E_~PYO#5Z@kQ~Ao7^4{um1I zrHc)0%O_K)=y9XfMUW_^>|r~pOTVqE!2r?w)eI|~^8%X5y@Px)$d-63*-4^1*_Y{I z8orqR)Fz}6SSpy-HZ;^-ruFQl1w=uk$ky2J*;JQ!=~+Et@E zRgD;={M$JQkhKm98h_~L6>|o|L|@I-I2RswCR?h7G%BDr5)(*EpP`VI*eM_+CQ z?EDqm4^3|?a7>7+dL+g%CiK%tHrtswUq!sLJ3EFr0|J56sp0a{;bvTRm(}@`L{a?g zMpG9&ejWMMw(J~Z6FpU?HE0B;pr8oAx8RVg2>ZdBA*I-=4$JaZ=VbV!%QrUP#$gFq z1JxYgfS3R^GAg3pQ7`+{P*kh$(y@i}CtZ=mQWZV@ta3!xM#}IdO)W(hY4Y+`Y+Zs+ zvmK}k7wqiPYHk>GHgr|7syQ3>yjetx|J?oK{|s3H_x1NCmt%=io8oFKll1nJy#EbL zYUs}T7nVd_>sI=4tZ&d>`GoLp^{;or=`MA0;yGc3O389ygXZ4GQNr{y@8d-HVSj0%7P^80r~ zx^veHHBj+lIQbkU4PODq2{n4927$dt%5gX%r6`?`Z)Gx!BD}58LOmRbIY<*wZEoOl zu6O=Cs=}u=Y(>wn8rNhycm_Uzt_OCWqsQ~St5v5r9kggDFQc`_%}RzMuUdX0=sh&Z z;d64`sa#E3G*N#nMKsYKi__QeD-BuqIHw9kVM$Ll=Y~hg#OT?(5@}{=W)H{v#rnf2 z`gN+U_79;gBk4Bmio$0q(s9Y-I28anBqOPo42Z%q< zXKzG7!N-T?|4>eLx1Eb15IH%T`Fog*26+ct{j&3u!D3Xt+w!#FC#^-xJU%5Ao2ZFIqHgW*x8eDV?*n(KxFN)nTV$DL0r&Ts>Fz zjohzszFdyFg!QgG@ak;MqW}2|9DSL1BuHJ{@M{`y5>vQC)ynUumiz-Oi*kWuh*r0x<~PB$*cxEr&82? zs~~b9JgU%UtFi#0kt7`Pob)>hDL~Rw-92IIy}E&?5T#0^pFud_X2+n!eFO9H$S`?x zl@vi7Z|+-)pX8I?EEhkVem5|I9ycx4m~@*G6^#xC(5~~zSv?(9rAn1>a~~4u$G>-> z5-4%|S(B=m?f@mGxEq3e#6=G1^y$;j&7@(b^E8i?WQ)c;E4^8HY{rNV>urDeL2sPi zrW+q+#87M_NU!jaj)KPNxn2aIQ9U^xR@iqvo4DpRRzluhy0b%@NcVkvu%-kLFlGsG z*8^Fh)xJ*w*H;c!`>pWnX3t0uJ-|F9eYD=-QI52 z(S8anynDGv@qT7OA?5^ye;gOF*e-rCLG5gl^~gx1Y!+KfqA+Oiy8##G{?10*rM#c% ztLR`}9>Gz(9gJAWgbks7%gSHZj@YuK4$(^s?@DbGOl)Yot8uW#U!gucL$NPD#1VW%bO&oyVG%PBmNORNP$hkdGBk^A)dCXDl6D?%vGO`W1=bq8wnP|ePVwkN~rhpAFQM_vl z-`!lmp8F|=X<3ApeT$>l{s4fE*G#|}pE|XD5`NG}+m$f^Hm&X=x-wZhaYV~CWF z0(k-?uk){A44EVN8h2^W8mDu7e#3V{M^&Y%d0S8FOF@kw!z5`(`80Lv!}}`a{>C5K zU;m9f5^=7L_58W$3EabuK)8YVfjjw}NCL5>-ha_mrbILvAG7%J*nxzEL6Bm0__bfp z??(7d%aQY~+>KOXm}sEZn1QdAeu|IRUPVyTajt%cnFAjG^1`RTSo}HX*|%?PF-jGk z9U6*kRH{57N&5Jok0d_DEPAppWU4jS26Xb)moRo}6)iEI?`MokvEh!%3PC92oAU3O zY)aO=#g97e;t+E+xnWd3-*loW?%C<(zhr$G4HtOEw4S59756wF-;*Oac>iZlp@HW_ z@JRbIAt;(-k#$7zn6#OR%`0~z?V5-*5(bF<6w^>}tLl6)c=%X0=E$3B>P#MCrkdEEmxJ&=dc3NQ-P4c`QktipfSyRc&i(^m{ zsr~X(Bs5O+(u2|o2w^o;JOp@OG&P9T*EMcA)cCJf%4Lr->T?nr&ZfW>@(kgRd!~2y zF7#)f)?DF2r;{`fEt3*baQ(FGbiUj=UvkU@e}CF)@M>CGt?rgmQBy%C%(F3^+vmv@ zmDuJbXJ>naJu=F_LzHK|t*+QfRFu@(;dR%PAe+wea@onw1w`i3;a769hwXEuOr|zn z?zs5&^*+lKgEs2pSjS9bSR0W?9XN+YBob-DLl!vQ?$*dPekq$F9vD{Vp+Rt|v5U2W=ol zdrUj?d%4_V=7GcIodJcy>)pGy2@(%ND={k&7BKVkUcuci6lvS2yGQ^bE^aE3%?5+g zVRoIL3mO!qR%6>+@(;Dz9B-R{#%!9u(!v~sJX|ui-I(p4k>}N7n{#tOHWU?Y zX)UJW=W?J)=UArlb{7D3e@MjKrU=8Mc3~ZCxVS7jcT+1_Gf}I% z{UHb6m@F4_Db?K?kVgD?Z5=Y&K{BjE7+L6QqW~N8xZD2>*x}`T{~dfo`k!5?bO+Z4 zhXxi#PhCt8{j$G6N=;TzX1!rJ?QFH&W%gfL0?*4XpK#6pSTnh+|J#AJC3axn|GVft zXOG9RFekL{Qz`{wHD*VuO1fVzxrg$iGE`nH@Funf0*ro$D^Ccl&hL@}<_kBT2yKgL z2D(WE?Uyp>OFX`pKkZB$S}`Ts{6ivCAQf?~=}GPVzg1xNajJgy0oM`du?22J+PJL0 zba$of3M*5zU+Sgp){D;FlK-l9T_=ZmRL=XRN(a?>wE^frXY2YSmC{lAN<(o-ha(5C zfi|dQ?oc3MX)o-ip9D4Bk#q1@3@XDZ#hC*07 z;aNTDGU^zP&hh2a40RpUnm^DEm-v}lr&%K~)ig~y)r-h94E;h{5kgrkTo#5q9WKrt zgG&3Pr|Z&vXn7K*Qmmc|0joPDXMT5==@sGqHQ40*v^h6gTP#XzR>e_k`$Jt0XE4@v zmV$zeBJ_Q0P1nLkcUQL_fwJ3Wn5>Qr3yTX1br|L23(RvE41dySVB@j3>lyyDw6Y_; zE{%vRyyR}Xko;7?F&1yHN%35jZxN=H-49&Z{I&xNzvBLM!g*)8mFl#ne#%(St@qKX zw_mrUB3#*d2frw>xJaw4*zi(UWMSg@_KT41TOT|SGy}#Av%;2!5?@LxRlRpE?)AVc zr%ycfZQ@p^Do}%8B2OwFg|^bx#9|$0y0q0S4?TRJmk*Z{bUz{(o;|iNKgtiD)S-Y` zRBogKdQ+|KMDqn4;kz1W9A=lV#YZ>P(j)AwaHarWfNQ1RQ;?N!3wyH8K;O7`O3Oc9 zBC9FKmm^*>2rjpR=4Cl0CwTMK<@$5{zWX!3*I7HKB{P7Iniv_a?=$))x-N6yr1oYi z`~ml9Z!1eR{w(vqXpTE8Q_EBW9u7^0rG)Hv?gU7`8Xd~;l6k6I{3 zMdR4(3?9}_mCXn#)Cw3I-;8}2ygqhMD;U?o3}!7QN-?QCqEYO{u4&W>fLNG^TzIc7 zaii!e1QxkkO!;z<{YDZ+P^ z*{^zovTmJj`>w*172_{yM}u&zm}g&XMlY|$Rdx;@MNIq#$LyvVP>yR1TJ91FBidKj z$Cgwj_D8Sw8oZ3Y{JzrYEmEtw7blzXnuLUExjN-fn1AT1KO*j$*o%^ZT|}M=sYo({mEHS z=aHz#O*aZeC2hCS2aL8k&-?)ZWPVT4f%&y}Ql&keUujd~V5fRMo@>gM&@VYC$;u#% zkCvH9>Ww}q|C5?C=?f=9g?N>uxFHI|CU4utak~=Gkk{lBQ{yQ{Rl=EaY%1WFEyd5w zrQ>nKVG5xW9USejw#YPm`1r0G)zJL64s-u^kLhCFDsDHxg_Hrv5AE*ZMvy|Rf9ms# zTDN}6fpBd>m~r4-WnSpX$q7lEWz6~Sz{R*sEkh)T7zrs(#m*W(@GEaz`7Sz=zxK=6 zIVfpCl-Hfd3w|(1RF2=CSfVxt$G(&BRZ)`;t*67N$XewO#E!JYXdNmdX3G4}3+bQr|Zi4qO_V{ZPM z)A||hSM+wd_SYhhMK@{{nq*~Q6Y7=*>8eU)8Eax>XJ%Wy%+eAhPlPC>~D(36rCF&Q6+5py|iE^u+He;5AzA`ue~rGC`=A?r!0 zs4@bgX(Opkm0|7`%SeLJo3y+AreVK)uVA+$PgHyvnxvGk{z< z0mHfTN7mBvdJ2BKqL8~0RKtOhLRaCj6Phw!ly}9;d350Qr9+CaMjmWNvW`j}KX?>H z5>hgG`MVP#SXL`-+*o-p)vM z;Mj=g{TLvRk2Q!pIgEyOThSBR97@P>Yyy%ey@dgxU8OIc-LZA%uDAQsgJ0qq8NIjn zvgn(qw=#3)Qby)gND-Ay2w9eZQe-KO0WoEuj0CRPV!mjEE$TE;=DS@ZWU8>8y1w7+ z`>m?Y`}T4gBXK;fmNmIMbQ?laZj>E~aO<92`&CtZetw_2f|olacLeTSlmJth?;uz! zX{21|C1LPwFSENWpDB{wV;45I#>*jPswJP ziqkCem;Vs2m+ch7=tn2hrFiqd3@Q_#P9cfQat9^O3EmHz+Y-|DkJZUJYHZ3-qkFm0 zifE;vuYmSt=C_Jy*etO|P-Cc9t~a!B*jtbLNep)$E9$p9PA7H=rXa)vRb%md_W(zb@H(~jy0pZnHg%gD)PV`(p=&& zVV030XqVk*wMYu2&J<U89#fC3Aw z1AWN{r9mKP)YFuQ*WZooEa_z$O{>dU*c*ZPF-1jZIbD{B&}UJk&7c$!z!Q^Y&D=NZ z{ho9IUXGww6wnga;*}mVisEJLY@9%*ZgOcU>Q+T^2)qCjE!1NMdeTVBmcHazFABq1 zzkhMum@_hvg;)Ydx5a-e7RA#3{5Wg^ITW7!ng*BLS@Q}=zLlC_HQzq_Lp!2aJgven zw|w@T-O{Wf%85H=A1KRiOtc+RAJ`kF$F`v&=frexo`AF@Ok{y@;(UX=m}EWAqZ zELL%pE_~?}hh&2BL;54#F^X?i5Wt&;!qjV)PtoOwXiGwfUWIVnc0}fHez6MMUYQ0naf|Q~f&|*UYGEn`YK}v6g7wX8bik~|g$^S!Qs=w#Y zjVAdv$!QyVd`dXeuW{Ej)gBFsvIoQ!C<%si;*^wV5tR$GI}k>-=vq&;Uw6{ai_n`P zHJ|j*%G&3`rO(}6ol@XpxbjiW9$YEH3;pZ4a?k=kCmB<)}M&J_@W}T)3x+Na0&hbgaHK)T4=N z!w#e`g3c`pez2?wT_2gD?Z5VeF(MI-9`bw8&4Ri%ZS{^##2UOn0y^u0_UQjI#P=IlVpj z+S6$9JA^?hRyqa(wWw`07u#~mOO#n-;T>E3^VIM74f;bVhE|=e?v`~y{90mg+?vKf zP_6)fA&7um)N_!yi_ZEKv3pH+a6!b6zI^O9JxX7Ui=~s|9=GR6Xp=sdX~jDYW444~ z!p(Xu7Wwubvms(jJDw!DtFFs!&~dlcX=!o&!i3F9>xOoy2T%zK3|a=1F}ZFkNGIq4 zApE%7#LltM&pUx_26hZChxH24#+9zxqcOt{xuz|j33e@EOe!xjDzRF#@gC$}@Hach zVfs7w3Y~an`{w=ZeD@qjsP>^guL%~T&`Al>axx~aH63-#&9C~%M8ORxKqdcX1_sDRytY?&#qaexxyL^BcI4b+fB8Wv3RtbQ67fRvHy^puT*eX| zHqjNXp8y6S5Gx9)j&s*l*nNr#Q?+<7$L+&MVDp8QQ;TjxDe>y%ANlH$ippVa(lo9I zTr&o6)|dbvwYL5KL-&c-y74=QDo__a68Q(Yx&2_>|d z6(TMfV+1q6t@2IMj8|2BS(!KlZGI`lHc=IerXiR05q@&7P<)D(b<4)v!UWWqQvh(* z8KGFoVXTOsM^$4n7Nr$b28b8P+nGQ_axJN-<16x%83p$SfZwylyt4+{6NN>oh0SjX zCkoN~lHRk^CdP$Q(`73Mhx45q*F1myd(Qqp@~q#p>8(UC-WDA0q7||4oNitA3OB1@;vLeKJg_V${enXoypIs^aBu#n>GCr*FpL3tdg7ITc%h9a>DPBj$?Fb8@uI#~d4tbUK z(AfxQCVk%l3B|V1&~MIrqo76MEsew;{XAHbV>yPPqF!vaI{F-6NgFR>BJ>OFYT>Lk zs|8O&%Xi?CiX?@Th@-P6_DlXt@WQt9&hd<28Zayw2Jwr>%<+r3l`>?^2Y6A-vG7(e zmrTuh#nu@grhk>w;|?RvAp5n|b7r*s8fpl+4#$uw%3WBNR0`INm&Q8Hb#gsr=(t8; zlao~uy-V}yS_a>(06>hM1#2JyajS#qa`f-?kuJo@*|1w%6)b9LWm9aO7S9n33nhwW z%4dK3vG=z(I9h?r!h-T7StjifeNrWtr&W?%4;cr2bQZ>d=|_H}G|b19IB{2&Rl7B@ zvB}BV3+a5C{K=#w%25f%be(R^bg0v^_f)U__AUdhe3Cm5Z?jquv`Wwxb8R7BxkRHyPO$~MO1x2EIMyluz?^A{VSxa*nzkMmNh43SdydKLu zW&v5795+oU0<$X%OM2wKXsp$}f7>asKtB==C0Az_CjG{@0+RNJxAiivH^_^bf{TTbWeNDfMS*Ued&@j|R z0opS@Dxn^r;OnHuYJO_PK?T|k)5KOUj}&-WrLkCuril{0&Q~5l;y(V*U>5LPH@e{C z-IY~aNu)JxAWys=rgoM@M$W&enA5{w*NilaDYeOI4Pywe_k@_*Iod)VOhl=IN$Z$m1( zOI{sqtHE-W)*kcipxp2d%*y&;Z8L>SZlPwH{lj;-E1q>2c385|y0&z?bis3y ztF3gQW)x`_EWc06u4v=1m$(DmE>TEhEoFCPG8Qf|Yx@t0dmP9qtR@C(-v9k`T?-aS zT9oT)_>iaE1Xd#9Nw1o%=fO}N;jk>cC+{5#W_--2%CCkq^eSuB+DMMKg1UVG4<*)g zRoU@b`3=o#c@6bcTlLaY53`XrPW?C+{@s_kZ5=n+^n-qLpGK<`e@2L=lpZkU7f$CKy6Wmw zV=cX{l=(~Gz<$b>>>w0{=3}DZ)m1vM zDMt;LEn|DiWh1PXbjj1J8Y6w7n{R0#cyP-wH;@vsqG$(K5BF15O?=^?JUHrEYROAXhwCdoiLg2Ycg4 zyB~iZo`Y906kM2`8kO^q(+r$|hjJwP%R3|^V=#+b$JRAEOI|_g^xB%C#KsTStekHn z@cp#Lrh=n^@u3_lvi+#y1*)^BDXcAwDbrCoOtd{Ym?$Nb&nAy19=6T-lZ~&OKQGNy zyXVbRh?$WhSK^YQ%GqUGkbQ(_8x|e~`qsH_o4FAL3VKa?S~h#?V}RPU2?BN_%F$GA-t=kX$J)!1ouZbI0v@)yWCtl_@XKGe)9ydC0n$0aQ) z6?3^beP`qNfr&->CdX#r)5P?R<)Wggn5#Q{y!c^%A`ssj!I@X2%pwU8|)!XxPFf$3-_a zvR{sAWD*dSh=(jL490%HS|K$fXrj&CqjeI#c{6kfigC?3P+Tu*tKSGH#YQ^Oi}13x zA@$=8WX!GRo1{r{ClX5@`ZY34nm^PvJ<>2P(xN_`_H<;3EN~B}&18yv!yyl6t^9Tu zHJ)|jF?YfTo4xka+@ld5O1c($SFec=X)+P2b&tq(RB57>mo(ZA7J>YO;XlMjORDmF zR6-UoeoFYlcK7HDkMEqd2_RB+G~Lj$cx<#PLxxvIJF6k-t%4ttJZ?AU#(3<%`WR%L zT9_U-VD@UK)$(E}1{c<1HC0jJxZRyuJm-T>y9O>NLldU`WRpERgQznJo~*bvIYT>D zJC{9JcR@8{|BuJ_C9(^vCzZJ;#`nB(211Kq0+#&|w8kGsV@h0N&si&Bi;HK6*B*aE zEX~gTd@;8Ra!YB<4a24j9_rB}@#bw2^iJV#N-f$9Yn$oNSrx`F*o3cUeC|6r0UP&y zO;9BUjO_@pWI(Ciq&3eM1ERS)~(c|;lYeF)%YAd*$SM3T+Y>d$rTw~8xG zSL~L1!qPrE0#}PtR#oF=YCTIb_7gqiAB+u5e!;|NlzV~s(ed))9}<(j$d-|r+`fgq z8494NPwm?B!kH`3@AEbL;?V1(R6R%T*D}fl5pX6WS<~Lmh}34e!tf-+aGSZW5!4*w zXDdFG3aK9}?+zJ1I-^D?JA3)iOzb^E6v>Z zQIYf9O-^vi>|MTV2d1k?$T(KbXVQEnmeH}vkw@Mj7$8_G(w4CwksKfK{T?QVzS|Ak zobVu!$rxfjRv2*`2W<_Sjfj0W?xor3Xi@m78Z!Imy6V-hxvh-}x3G$suYz)b+;9yM zNQrWiQ%XT~Lf~<&-!b{IYu_yk2+aV!_`6sqO~G00_el(*tWUWIz^ddBzhuJ8w>ubj za1ByYhPln)PQD~+)#K7YyDaMnXI{u(1W&K4d$I| z64eDKb>h{@ekt)5W0xu-RbD~-HrUL9_{$d@P-nZ6JeK=u_*d&E`4#F9pKj-L;GFa$ zt(jS?qrt#$w7NHDht#e8Xm+oG3G}rEga<0m>zq3xj#nwn6&*Pg)KAqojvoTkr=&g6 zX&T124pN>xDHn5x8~m7Fnvdab{(c|`2Qqa9RYCl~Ang}nnW;xASrUiraqX~qT*kpQ z-pq--n!B+Uw07I`zwsNHV&<+#0y*)OC`C#4i`=&8-vCbacq9)|8tf1*Pm%XI#1SCg zyD)t4uJ58DCVDu@Bxy~o@L8X2dss(0(cuKZzIG;^V*G2QkpT53X|;VuV+vGOUSD|hYc;9nk0UyS z`g`_s-gw75QRlX9lEe(!q8bISO@*AKXy)Fwuxb{s;7LZ<@us8>NtF!kEYD{lNzTd% zu3)t0wCS_Fku9L>2Q6U?)U(`5m&v@a9>+L40 zg{d+=ewmwq0Ja!bZi-f5!lP+|z7H5mL#v|At?*rk*Yvi+XZ%iv$a0^@IRJmCesebA zo?!2r%vPi5P6(rk==m}yZ`geN+C!|utz2(ftn!%~Py_)X_jxuRLS|b6(5&`5BW<11 zG*3<$2OC$Pe1CjjB|fX6-6_H5xJOP<(}+ACdb46sQ!!YLET1P5rKzi{ajY!EYyB81 z^Ki1(F^Fnsx1l7@KAko&e-wXsa9zm2U~a3(#uOq*fv$I zkH9rX_7C$}_I#m|*tYqpxni@4HzjT&;)D`?rS?`vR8P36t13`lwwPFtnkdT6(;9pq z*-8u>Zr>&|gE8mxe@daX36YYDAxIwK`wJm-2+F`eTaO^XX+BNN{KZ0A;308I5KNF63fU ztF%^&^K>$XV5lQe*a-p9nJ~#2VYB`sAT~m2KiOvfXn?nL)upz)1bG>Md0<;_Yhb|joKEWo zPDcZAtK7bmP{=FMi`q-6R~_-oi^HO;-39S6KR5`!KTHSjwHA$V8zLjkZjp85#%;1B zJ#I!VhAF|C)M@DCGfHVHBTjaP?qs@6PQSD01FPUmO$P>&c-hh!A1O&AMONta6~4mLM%*5Do1OeP~_ab&5w5gf)rwqRGj~ zO+mMjw`L-S}q#Y3PWz~5WE5i?72V|2mM@MJ!)(kqH zav6juK}6#ZnE%LLe^de6r;``&ps#JG&2IwKA7E2E3ij=PiSW=CGSe_IDiKNay}xd{h7T@6w~_+aOm#OKf2KSF z!q=BZa||_Qoi)N#DV(0`qjTz}wb^6CYw_=2Y*kxSl zkhTe-Uo#>no{R%HmchKRIMNp7avcrlcjsYW^_g>d>=+v@PP4xWvbJR`Ym>T0i#DEq z&sX784)Af2Q2u!LACgaY?7zGiqaXNbd7{8eSI><#vpTb4_on=^*lJzZi5L$4>p%YI zx&Hsl`)e}W_I9+uNv(Swo3m-Ai@`{hv0s{#?FM#CvY9MNB>-AgGBV-u6wVNQB^Bll z$r4fj^;S-GajfO!D0EO55uPY&X1*Sl@NWCnUdrS7=zdkFA;S>oJWn5#lvTOimz~H|Qn$7-PQEo~9@)=oX@$)Jix>l1 z_I;!iT$Xr-4fV6!60PW1(xfD7nOU@?*#jNuQXb_j>UnDs63Xm#`JUUWL9Y<+x_X{> z<-DPc`CorQ`2I-6iK)q4P)dKLD526m;vbU9+^(go{e}d!zaG3ZJnFD|gRDYSBUi&? z7ZW14Pl_e_KOVewL;rg467J9oz593J>+#d}fBd;F)T~Y@KI?w+IYiZ_Pk$w<2iyEr z4}L#td0T0`mC~=18cu$$(e5h~Qy`j_cT zbg@13o4es;UDOFWYuH?>0u?g595Xl5B%1kqX;#L3I>Lw6_I`KT=)}YtH?@tx&$zO@ z{n#8^T-JsIyIu{CW`3J$JzB3z`ecu%$>K3aIUou;A9q`89X#y{{u*T$gVYGCFc4r( zHXka*aIkL!WQFXx_9bN!g_c6dbG z;Hs;f@ccoED$6wE{myp@(MBQY4{7m^EmmnRUJ@QB#M&?MM;}b0 zjB1l0rJO1g0EnK=pJ?(Si^C^t^?Z${9@-n3asAX@M8|FygSf0FVTG?flR`nzT`|vu zl7d5lVTm%?PM7mwd2e4Y2vD0yq9F4~IRdrbb?C*EZ4NGeGqh@OG%1mk58Z_XIejL7 z+PV#d5!oP2XQYYg_t8X@7hY2}Q0?rUUAfW6V{N^1tvwxY|F|-V1kN&`0zD|L$;lZ^ zYrl~>Q%4I24PrRw3prhe>b4!cMS30^TUMe%OkweGLclO(H(1O}m9L*K-LTx=HPQIU z1gRN|JQpj{;VXHLg(Ji3p1b0YKqio1%NIWz<;5~s!l&g1#cR{Y zoBCT6$OG2odVjU54a>v{rl+ZB7~3Z_VOULa(x?sz{k&xIahriMcGtZ;uS>+2rtCp& zRB44Lb}HCGtyv1@xJ2~jOE#+NmCpF9TuXpc>1C!w(c*{G9KJLIwsAjNG2|6n?!~R5 zPI33;!plX!gX+S7)>8xHW=Tb@MvfQ6`#eo7u)|4Q%66)=9gd;j@LyO@@ABY}XZ}-54)2M)K*>@U<&%@>B)2^E)i+ z0ok$D5$7aY)Koj0OI&8m1#>pZa5BN%TXNq74PGG!Sl)Dcv8W3Ere0G+Sl_S`H-4q1Yyn6)uuGq}Cn(GV* zYKO+&Iw@hUZGt;vjkJ_tCDLV=!KFI!4Dr;@AJdObvhUne{Hjh52CXAQ2L|x2@-eYI z^0m31kYglvAWFZh?rYY=*B;Hk-Cx$`jgQxs=`oEMW2ocL0)DyPRi_PODpSx30GR9B zjDmr#L$@RX6?@(93wF&mpx^0?Xy{)E-qasEs6|?J@E_OWzNZi))(Ss#eM#1$t)C`* zzw`UPwG!1ieq4Aqqf{U}UWp8MlESH2|M>-FcgrE7jI!Nfxz`a=sH@ZheW#fz8(91Y z7R3qX`jE~G16pL2-V$o4`QB~tyzZePt}VZzBoG;8J^xNT%SNlS7e|(NT) zig*u_LZ^pAzkaT+r^$m5aZzMs=yS!`7S)M?x^qL@c9gFxl*ACd(XR(88b zaMtk&LG{9_aLmY)jR56EoBVX8aCAg`q(z4@Czx3kYyO&vx}ljzh${7H(>8quQV?^X z^lSn{4&EKuBcI=HiR^gDld4bd+0CAs9AJUJ2{yuS-Z)%#Xig8;NNwh0c6Q*_rU3_e zjPZAPa=VNjhkVn93=xYr^Y`rI#=gi|sGK)b?4Xm=*%Px?*r|qjRhAGJ*&I`=VP9nm zr<(NcHSSjMX6_{P=d312m1h~Pl1D$!gFv>|vgxZp(N5TXnDS!3;-7r}q0+uvI@hNW zf%ArJDSXIEjoRiG7Bi75a+Pw75LbJH7m zNrp>zux-!>9rYgD!Fx~)aj+dqf|kv;hW}tAz^ci)j$*!WP2oDkQ(gc%!=47^x=9Z* zDfz}c54)D`+9R(bih0pHVR;?q8L!&CbDvatc34!La`8?i*I9ONkX6#a}T6DGi2H?$^e zX-x9Jf4`-NvGI>}cLmNF2kvRCtCpr|PE8e)LQ0VO zWXpj@eE_ieWo6`Bd8-4GZ<$l#Trb>gl}2Yy%A6&gjBMj5=HCIr9<<||B0E^QQ7ZQ% z?%;NS&|eTY1J8)+pkg~&2pJZiB*{fHI{xZ+OUR2j+mVZy$kBIghnhb4wD}xmnQK}L z;|K<(r#N>Tm&o&griZd&Y-U@PFaf93I3m}ik_@wweDnJ4ESDYH9NGslfMA1coMxCl zr;WXg6U~GgXy6>wN65!Kqo<4<9lNgQUR8M|_if>!8LzVCG|;fBn@5(G=5Wu2O40Lc zC#=9}iRYee?>PP@&)Ak6_rr=`KP=oHNyIHYb$A4}fg+tU#TLHL7ZhUAh0$fhcD%AN zwa}X?b`~G!vb#Wfx`P1S;VvPbL8-3VVKZd-cmm&d6|#d`aTDSJx(b4fy z{OG-4fcr9c%pN}8?%FxTuQ81@d1QO6 z_r6!!b>TN`5OLeT*f`)iJ85sx!xo&=@x6G=;X}y{KpWx_fZh^{G*3>`?2;?IMU~;# z^oo*dcR7#Ul`p?4?hx;TSlX~8u!RE#7`|hvZ9187PZ5V&0SVYFQKE(?Ghp@4hj-I< z$)w1!LWU&3alUD3tOeh7`ma$D@%(G(c3~B9L_}720X5w4wXgnG&*Z@W#oJp3wblOp zzEFoMQYc;^K^tfiTw6SlAi;_k3j_!*MN0*@5+D$?KyYhur^TH@kfJT_P~3Z;+|U0x zXU@!iv-ixNCoeOZtYlr+TI-VE_w!l!;udk&lP1(aqW_gAC^^mCQAI1~hP`b(45ZRM zU`XvQ4G%=vx>8K=C-P$lM`tZ=uZ%ViYj0i(uYcB^P?6#v`b!KZUMH2_R zhUADU1$e~jJ#a&HG!*NznfHh$)rqUH_cz~QYR0}og>8ZWpcd6ct-2zI5}Cq%0MbRk z7&U&{e5NqfXb@9k6Ht(x$N_5pNJKR-R`(iFeIguSGkiE72u-@~joAq>zfhW6tql;B z8`N-lO?1cB2Ovh>NK1!H2O>#pR`E4DSqre240y7Th`LjFIK$bqF#8W0dOoiNri2QY zyT$;O2UXJ5sR9;St{06S^ZB=A>uNn!H@8WBftw*lYNPn`P}$4Q(Z1rKA!|Yjv&;y* z`-b#`z3n+Q8@jAQ*UOoG!=eN(z|Z0VE@FQf&t+~3`iiD&S5^Ok44D*QH+@nm(cCnw ztmkWi|4*FD=4NrOB!dG1S0xr2DMqMPC|eIU4)%#XI+!#U{(ZC(cmYaTC@CGW{Xx&ZHbhd$>}%iu*k zJ=9LS1FBzt8uKonm^XgCRbX>_Yl$dMIq;z3lf;&4B9nZf{Lq&mP-lF(2ERQF(3j8# z+fXuc6*iG zLn1l7-gSLzZ}j$mt7QJydG!D7ckWRgnQTo2oK$ex%T7_cb+e0;*PqO{d3;p0?$oKW zC;Hn0feKkaMo>O~h;639J6`E;yzW+sK)qy`JKS{O?ekzUOlT^1RnEot<$K3o;tUbA zyF{UOxI!lw9NjZPGaBau^kkcHviGKQsk=BrM*0^A3rX}A<`JG>j?sEQkXjtfL z*`)$R`E_-@qf4Ig+MauOZ*hG8%rC*sZGKEwSNCIwgaro&xE1B&Zay(AI=c#5sdd*k zwMd&?3k~gJ7_O0jy_jkw^q+G>4&T-IBaRE;s=U1Uo&Q^aPuHB*uG~=QWz!I<4Ddyx zJn!DIbqB+S8Fgab*iOyigWy$CiH0<5yZ4l+AZz4tk^hEUqD93r8}&20!@hOWyp9!2 z{>}0qGWLXv&45eknHaei6bb%e+s;)quXWdy)g)T>gm87e&aL`NqQRzjLYJ7SJptz+ z#gZTH-#|>!eO13-<0Isi_-=KYUUzCvTRKVddr0*XV=Yn-H)anHp5LqH_ zxDndmq@ZwR=h5DUDu^!DoNLq_3z?p~?{|Pc?RO}k;%v4uUPmE>#u`azV_hZ{s9+B8 zkg{dEY3d)c(E}lcbEqXlbZwmy&F@Y>*Q#CAfUp%tH#n*8qbEYxaw)js*wX&wVL%O6 zneA~kBlpU9=e!bn71?$N6Fjh*?mcD)!`$J7LO5lwaX=yLL@BR`JDdS2be4=8o2^1IN8UZfR5Z4NywwYC?(!$L@IFBy~WqQWvLQ{=vy=j6ASD83vJ-a#+Dj}i;?>~ zZb1_b0bzM8+NJodG}HV3sxRjvyGxb4OydfWv$3zYIF=k6EuqW_r~7JXz&vZRn_FH7msms-t5#9qp6UtbU3!## zjpTDYQ3FGhUE%53R&d6a#Jf<(h$`q@rlOr-a*5In7)5V)ihzw8%wSDD(+x(TZ`<$6 zdO@`wU0keBl@L?o>?lXxd{q}?EFOm6e>xxllmOHRlN>KxUOfqe!-~;BS;|8N<#tj+ z3|xeHtUgJE4?-nN%m@4@<|=gc%T3c5ZQM4s$JlaMsLFKEY5XSZ-@%xZ?f0W}S*HHvFL{;GtuVqjrV zA24VHo_zb;i{=uce|pz4{&aW9?4tK--9wP_zZVR$cmqh+e)a56NSLJ9q1SzdX`E2E zR&@@$f@<~am;@Dw7TXUipHCE+CZYRLv%NFphUqEqO>>@H5O;vGG6<;-e*6bVo#onn z%Vr}Rsp~R zQC8M{na)pXZ0x}U*@M-87aS5}(Dv&n?H6^G5P(A5(@7(KY=s)yKED@nBL@iFk|tA{ z7gv%^^fGd?kE})V^)ZBwpep0mRFMv;P?toZWe;X=?-7(Cp*tp!V(w}&5j)xC*670@ zx3W+jWz=03Z9JqBj424a(fihFL9^K^ul?{xZ4yPi^x5R}&5o#t9Kp+kF0IGmhYiI$ z72!*&^fc=A56xJu=+b}CnoeNmeytcq)Dm6K`7R8iOydyJ)|5gCnXHNlt~nZ+N{R)W znPiQ3(Dxzm=L*wk7&`@widyAg7u9?wS%t4;`s)j$O6wYAQS(XG(>KDC4)Rn>TfX$9j#{f4Z&avbDH zE7?VZsK2Y*Z|}ao$zP+zkzvhntAud=X}^Yf47dw|J4l@2;I({Wbh8n!2$T{Bj8u#^na6{=bkOX3WrC1%a zLWS4QoScu2t9*+aRnz$3(jy_aqE6JbRRJ$kgO|jtOxb=4;O&pdyg2o(qgEpqYa2Z{ z9xUp0wi%0EQWN*`s=o5cqhS_P#wfn* z>V(S9Qr`RQ8jLZDVm{6g4k)>k^U8C0ZosbMpa1~z9mvALWzsDVo<;g)@XBQH^kJ~n z<(zWoez{m6Lw*&MVphomJ2_!ptI@fLdZhyofR96x5S4L`aw$fph!c(ityzQ5bw^6U zX5|8aYs%BbtyATnGwQ4~y88GEEf?$LQ<`Mt zWQ5)_)b0IhAQbk4lF316#-sSq1yRDMfsn|r`a@1L6`#v(Ar4q8E|sz=x9>8FKCrXy z#MS|_C>aGStY_XpBvTa-`VeGV2Ryl*Q|D;9Sb9d>rVEFW-naM!tP*K| zaeT7Xpq7122?Y?6=SI{kzeHApFD{QkO*$|YHmiFahAXkuHSSGhXphZ= z3+oASCzgJOTw`JUPUr8fxwkkm%MnlEa9u>9Ubwi3Kb zZkAG-C2M`>iV^DIajXfD*VXtXFEEo42C##`7&cz>JYyVZ>2jqzcsf_c@p_K~HtD`l z!=lPhqYtoFz}zuHul&vyPS3UO_pyC>lTpa?O1j=w4#sxFsGf>0b>*yX;KaLj^Dr>Y zNq9T`ht=408@!d!;H9@C2+Sq++kahWF03kAUvb9`<1c7m2ndXugSO{>jV;_LCFB>! z_PsfTdTJMn62wquef2r~M=y{+uOl*Cr-SzhQA@2|)CsnRvAkiotdtK~gU-M4Y>5DL zJpI$CnPAi{{LCcaw;e&^3~=gy1AFzFMj}Nl$#lVDIyS9d>q}2kJfH3Oi2u)6?v$QS z3#QIjol#4S-Z~|B&frzQ$;~-rtW#HwBEtB~-gDEM@Z+BCMM?OgE~8O;rkfv$s(^z$ z z)U?-Db9i3}*YD+EhKKgW+SAD~8S42hy+?XiO~}uGRxrk-NkzriR8I55=)Evgf?_4* zDZ>}r1pP<*=Q6rD#wD*@LL!GZeB7oq_?pv~xVSpHlaxP|py#FWW4eqioMZJ<`$BkJ z%Q{wPAtvNYpz)Xg+q32Wt?#4lJW5Xy#$^nvp-=C=HwwJ`&-Qc%6-jP8K-!-6B4vOb zvie&Vd9D8;vwJtpe8sj(%Kl|Ys=SI(ZY}ltssaj{xvzl$M=W01)kIoeUOywj)weJH zoR}5pSLio@_!hKf=ibnoHDgv?Yye!Nc0tNr>a*7SHR>2ZJkC*v_ zu(QIoepB>ek=G?H1NSj0_{l0I)08;cF(GZJusS{*oyX8B1fN&mmH?+|_JDNT&)(O& zUL3f&a#?U$D%f?}I4MCRONa9GSW=E#HasG?J^vvamyANWzMdXejuJ)`Uu`yS{0dM4A^sQhnUEl$P9EpGP7m2Dur4%)?x zW3*}^kx4(C8Dq$MS3O)clm!1}_V`}gX%mF9?O!fR7SIxF@4}LZW27?{Mg7ZIp50y& zRV0d@%gS%H+#ds%d#Wk;ehAf=D(USJ$z4!RF7E^tyR4$9T#p8u4Hton9Dg=|fD-BC zm>+XYX?da64lDVQ97px`ZP`9asZvjVFUbJ0sks)*_*7JQZmN%SDp*&#?u5P0ztr&~ z=I2zGk#0EE^0STQ0_z7O)Cv9hBNWVPF^yB*kv~d-1&rAIXq#n+JhonSeJD+^7?G5c z&^^~7DL!-=h16;28?Q(Inr8@YLiyx!>uL?lyh_7P%c8ITI^6dB!&uhNeaY=MGNI?m z?o1H2nBeu@u#5o&N1S;^9)iTfxWBpNiF>)U*LfBcZc84!v@zHEsmBa|-&^Q3M4t24UkJ5$J4kaM zZmobyG_z`YKI_>J{*X$}lDhX@jw_G5 z62e!cVGbvxi~QY;#-8xM5K#DH%YPuCqf-3K7+=~mc4TPIzYdRUM*dj8TNnpfc8F6u zAzq;Pmc&5ESe5t~wnQzq#Y^2$3Lbi+`zAx9WKi68pL^We>y9r`HkPbmKSzFf@`bJU zab?#greGFSktNfmbyv?2z@tbnj+4=K+vpZ!-l6 zMzNAo=$M@B&JY~BPDE;m%#HWkAm@l5vIxkB_iN~zJa;Bgq;gI ztYOEzc5jZM*3z#G5eNNAeXfX&%2AtDIQ2W$)-KZz_=*loPOjX6&Hf4L8F_Zw-ZsbP3VbtEoz;HsTC z9z7=YVhVN5V-M!Vrl3v|{dgR?I7Qmk$8#xmV;b8aLJ(;WPKTp&l^bynzPswIR-7nH zd4jE6Erb!*ZrY`JO7S4-U1{UImxS{4YBaR9s?+X-h6d{BdxN+nmgpQ=*CnlikH275 zTu@sf)Hyjf5IKgv`C9n&j|#@{8)_oDBV0{JEXNa;Pf~P3*9>(QN$7}a;mj%?fFn}fENjRX`PMb%+D8>ehPTnq35ph0 zqvDS@DWdBWrugMN|ebq=KlxVM=>dqYt{zF#FHJ|YhS@OwhS%t>OW=odeRR560 z_WED71SG)nhKnYPdO++8dN({Cbq~cP#w=c;Ihzmuvs(VmK2MHNmX;OTeKjleL(zmZ zWC5#NB33wrPJLytbi&ifLLrFS$ZCD6QI+HN#(_zzKb6STIc=)yamUbCa+0F}80N_E zMkMSWy8!=p9tGg@ zeLR!OQ_6);kFjtOubT8lQM;6NOmVUebz%sa0iVJcd&(@4F$pcHhmGf6qR{xkLw`FtecI{xD_> z?xLI@cQ7t}{uPyMS7ei^k)yB9$mPoz6E;f{6b>4b==n?u{q2~;JO$5c;VRbPX<>Tu za3f-z$-vC&Byh;{z0MntJvKv?f!cp_l?Eby;Sxfb+pCvn8S)^sji z>cS>HHvP3Toi;<9=G3B9Rk*`h*e}5+M_zI5so_>FPVk7(pO=}x1n(_^|3F+zaXf*SB zT~nJh>b53oaryq;n=bZ!Mpob4>I|XvykCz(gfG;fbeCf@P7j7AL?Kn`dUeDGswPLD z1#nm%YeBLP2kR-f4?};NBtASq7+mPmT6S-}tL@2QuhHDwf>Mv!L9W4{TAFz@Q;Yru zIF}imHfmBpGEGl&;|D3F9bb&Ccu5_l%5hQ&daxPmo8Py;yxu?IwP@CAfuEhtO|_&* zibSCbA}v{{sG!*_VDo_)QgAkM@|0HV&-P;EdZ%5Ro&*Pn$UKqp=Mk%g6t!Q#yYh|9 z5>&jE_>F>R7Z3A)QU9%#3vype@7b48Ku3?8JFUCB+A3~|=#avsyHpoS*yRC{!fi~m zc^)ylwT8j1<*Y(VTO9j zJ9yTR+z=AYA~1NMyvD&ag3v=Z1$P^ z01QGAN_F1cm!&kmQMoJ0{Wy5UR;Vr$*lG})Nb{UJecBe3xr86BqmQ$G-l--7{c7e| zn~YtJj|?y;q9DxNV(ZylmP_h!Hk#N++Q}g<}QD`jRT++I(gR zj=f2rUYv^;JJYo6e6RF9yuBUCv=o6hMPtw62NIicPaiY8M&m!v zXaPdU(J!ghv==j-$>EOCFHKZ6pJc?BF&$94e+q>w#)=qZ-Y8*E$hC4-4zIMm^ivDG zi{bXI=scEm7U0nEFp%K~YZhTvUch1M<=NJqV;s!EMykf7aHg~&j4g(jtgx)4hTEy^ zE0bgdv7)S{+%9_jtBZLROCnIoWqc+$*GO$00BX9I=He53^;BkWx^dUjH4;B%-{o>? z#P-FPCAj^`4^vNgZAqq+G*H{ncV@+mPxBZ1nwh;OD@#tUtH`*|v+IdT3yeH+jX{x$7mMWIGGGMx#LqvBh6`Np<8S7JN z)7jJzXhZj4`P3W^D73DV;IajqL5o#A}1Bd;l zQrXep3lv%tU*lPgQ@Hx0Db?hch}wd-6zwJ(70ordjRn4mkHR9l`^y%qgQGNfM`>Js zt{5UzgbE(A)mwK+y>Whi8D-w6=S!li*t4(wsx$Sb5j!_;)z$ivzY3}?LZ%#`vR`5m zt$ww8%f!Hk;!IH~tG*$@y5`5Kc^weA|MXcH&tAr-U!sb(BJt;RSQlw^vp4ZEG(s6< zG*Ze72L3Dd?NQ|nBU~C+}?9KJN0b?r1h)pq#Yw}-h%on6s{-F{)uB{9Piy_*Js_aMyfhNoJhG0 z=h3){FuKoteEf~8p8F07LW$9fKND`8xUA)vFw%?=`Xfi^E{6ENC;mWSQ8Q89h_-wlg0mC`I;#qit0~M~10l_c+N{?PGWTihlhn+Kf_M zam@Z6;vy2OInPzE;E{RPrP&ICM6PEV9>g^^&fVeo{Q{4$ahbLDThl+L!pB9*z8)4D zGe~i`M8s@aY;>5-jg{uw6dwICpeLh8ZK$#ndvRO2zpJMOo~^X>jYPvOgXGiF4bY^#AtZA1jmta~J$_}S_5q2(Z%MjV(8;Y`Wf{b5|U%`AvS zR4UX_QC%gI203wqSsO*UrpM{)q=;Gc%Y>y8r!kqE4=j>8SCKyl{7EI}st5O)iJ01i z+8~}NK=zO3o(q+4Fki>ast>YYJl}>x_x6(Kus)rdM-O`9&J+||5yMbJ(e?+T8pbB~ z0$x)l)(yUEr>D<{5SZ=ZRju#gU*NF(GCrc|z^ zhb{g*+9(AsjR12P6nJjF-jfSYfEiAO=@CO+MwIz|a+;CSI)qrN*xPf088&yCnzJ^h zCKrlz#4#rRzA9JR{rzaAsfDs4YEFR-r9`UUVP{Uxi5Jwjpi%S1+Y1!|Tl>PW8g!^9 z4R0^)jh6|JyRai8*=h>sCPMrv_y;*s9hrd88zZaCwF$HB@)m#n9Q_>OggDSR8-g(P zJT5Z5Quk_Gd6%I`ck_3-0GYs_yO??vDQ%zUn0ALKFjoWT!*ZniNt`r`?Z>xTDo$sz zDtF($sH&Y}XcE^Eudv4sbexKtkeP-nT#~{Ih9E zkEq@vgzrGPlh6T)#230=qF^gjJf1aLn?#x6U9kyjYNPB8%bn}tRtrPC3Ik-n&QbSE zl1p2H$S7>sK{!F~KW-rC#BrA8%$41)d0W5FyrkNoS^Cf0H0%=M2Ke|9ARZWX=*Ysv zx4+{#1wnOj4SG6wJ)RXwTu-l^V~IgdIeMy-sRYm~cV-*`0qBh+u&a!I%9{}e94#p3 zQ*_+88XOW874Kr|VJYa$UuuhbrO7@~$Ic&c-6WL)tReKZf``EgG(<%6AB59qNOuIoV+88<`GGD)Zd6E)- z#F2sS+@yd~^fp`N?5GrI(OCI#6KtjL&Iz+UqNjHTEetQX76WH$UX1vlPqWw2t)%Ki zHHFMw4>c{{0?@;-#Or^^ot_WOrd@Y`_ElV;26B(LUbI}vW=fxn7MB{r{!D6G6(yvU zj)9pH2%is00+DNO)%G)K9i4VwB7N+xbqz96aXOk=FO31;4bQ`@$C^i$3OXu|afwKU z?BD5(Pu?uhi_h%~EOO+xc(HYwYv2*ujLpyJaeJ+9Sq0Q%(s_|RYMjIO_iZyK?b~nM zQmhvhNl9>eCv1b((vK0oU$bHvj|5q%r3lF4W!!kQ4bTL3*sv5KhasaWlMH9;q(do3VPTLYE z(}qr0FQ8sMe)x0cr8q)K2RCc(jJM{R+)qXbP)9a;Jg0X21>PjVy3@O3eI>NPjsuB5 z{p&{@4adk!Sl&#A2VoY%PP}^B6bVR3iOpX7NEnKZQ_n5YEv-+YEdC!~pdcf=32K(W z^`dT>%HF8DB>yf*!gb0fUQ9`^8M-{2F+R5Gd3Jrv+;A(R_xKWt3bx)_c5r|D2K*1% zrx?to+0Ld&_VBS&bJ#!{*Lh309O*zJR7dB3Jk)_u~1#toY0dUrh^vnbZ%_9>KiHa|zS*xWIk56_GcJLTo#kv1%|* zt^Cmb2<>N*DQ{LZ5+VAvQJZh(8)zC3U=ufJ5LnneFOM{OQ~NG7U*vb!~MscE=^2O=_52w`YDcK2`i43Liy552&Oc+i79d@{NO0 z3JLi14{S?=`?VU-&K1+Ttm9OS{zv_6VMor4-Hk{h7qRZv@$8u7v9kYH zb2#ldbXWbD{gS$1_`a3)V6ga5_0h-V_-xtFp;c_DB5TPTB=i`{=8lK1t|AyJk%_tR z*k!9O-TVwo`7&v2)HT1Cc;m+FJ`d8iB zBAvBD{Ki}^D%H}#GSZzxOyjxLX}re#j-oc>B3vWfIaT5aROTCyYy_J{IP?!uqa%%K zg+9+l#46gyM%+ebc%+5mXe7|lDQ+^w zU2EqR)g12aw}oA0j3Ts!hp7~=5**SCvz;7kH=}3@95R^tL{6SpPS5(z9-3MvdaLonNB}=0jgv0Z$x=fqrQ9)wE>{xx;BSTKezf<|XH|@t7u`4{p zc~p%{*GNy%fGIbN_2J*{Mqx&#gu|(_s%o)+$jUTA`m4O-8f%M>{K0dO^X6kqk}qjm zdzw`bjE|A?Wzw3AmXr?5I8Ltk!`1b4@7I51GwY@F`{PaFexC{ykfiloa)cvpF5pZD z%qz8u-LHOxsc#af5ygH=Jojr{Bc>pPCqjO_mZ=zMxvZ}0dUp9M;WDE_afn;3U}7nH zkww~@*mngrahH8aM!RPrXnxE<_cF*jmhUUWNZQxN7!e4UH$xGOHspzKzYtERi9#t+ zvmEF`j1J^2Nt;4@>$O@qTlad>$2F)Mw&p-by-&9d8^H0k#sm8W55F%Vsw=vy}aeYqepY&?6g1mxavA%G-H~ zDFw&1>v``2uNtS9Om?J20=BSf9^hyEV>jUkam%tfg;A(1Vq(sGug~TdIeSn=oyP-- zzrPl|A?6q&Vey%=Yh%XO5SC>|Tt7OTv{|YWkA7L(Isn|3zH@tL@%Z9p3T8lkX1G`P z8Kt#QDDsuE?r0a!X7GXG!RNo{ec`YoGgdC8>%Vw^o;Sw1e(k@a9u(pO0Q2mA4D;5R z8l^cO8RXYVJP^yFulGq$XSBO!^G>~g+o>FV#;uinLFq{hGbver0X-P*IH_Ri#}6&j+gWgsfKTybd4!O>THSriB4*00LNLxwXCf zMCq|JgX;edh0AoY>)_8KmnP-tg&WBMt4qPbaImJ+1&LryGH*2 zr#?T*anMehK%QA2WYa{jGTqcMw{gau`0YlCq)FW38KP=s?w6>6mft#}ybMpaO3lSc zO~hIh6Cj8ZG|Wy-Eo`)ks7}Ty;^old(Wz z3|-S(RPHpsy?#nJZ)NZ+dE?T*e!Q_vEiv=YajKJPfaS{ShW)V`Li#hiTUrBYXxwYO z$?%obS8^1(2lyNm2OG(XlRR8H@W6)@fzu_`}5dP(48!$?vmSlk$>evY-GlT9NN~_!+_&aW9 zCJ+NOSumX00QMNst-X(Vw&{ArZCOWCsN}G}A4{*FRHt%QHQFyFO4sl_s6xD`&Oe(D zLRyGi%eqJNz73G{Aa*~ei&UpmqGoFIuSoVcJBJ}YrfNI(WZpaN!Vw+E%H0ZjXfH-s70y{d}P6v%AzNmirb;4^yI>V2pp zlmlvPO)=nQe%x<;7#oeT3T!wN#sEHu21gZo`C%CRw&f{Zq&}%*63p$1j z{uP{@eBeD+!m8rDIu=5oCtdi3QqUx9bERG* zoX_^n3I6ekptj?7h#zBWy$A#6#>GJfDes8hKSO5>MBnf9)Zn z<6EH@|6^ae8kf#TRiq-r+Co4RquK+S{>Di>gBuXdxnRf^NMRh+G5|4TdZzDO_VY_u z@l%yTB!7|LhprVWqUfxPD}WjYn~;;!OoJbB{#KyYKb8bnIXw>gWVO|x6{a3!{y<2z zOmKyU;?@ZDc>?c%eyJu3Rd zlr-b>eK-3|^!!oa)zsGQlj;sxE~#H>e|ys;%SP7zA*(=%3nnJw-`Zp(n!H&rdr0@oh ztm(H6IWz?6VQe* zW0lI^*LOT8mL5UT;(u?tj(IGnP%WBNSl`sn8qiT-a%du2pBBl7!PX1)GZVku6r5oJ zo$t*&Nba3d86TfG5}#vS098%auaO76xjpy4324&Ss;C)2iQ=1Ke)!{w1lw#Q`1k#O zB>>0{2#NFVaP|F%%vu#Xp}n%0c@5Ql))eSu@t3===Vtg&xHraQ4aC2?<{{nK%=`~o z;Wg!%U^cT_22+NRb`Q*wHn7Lh9AaIV@54OK>lMZTMBzr1=liX$ZB`N;s&NJ|_IN5F zFN|aYqx+~ps>Q$lKbGD5|4qejLYuS*@X5w%fDjXQHn$R!`@^t6O^2Qu%W)2GFC#DI z9eRZyrg9|-uIko0J4oW$WoBswVrQk86B z7n-J>-IZm$t}j>HR(|*1ZJ@)??lnLUA-ye?cKQ#SjwrSD5$KjY2|U~j70GXLbjex< z8*AulHL)pti5$b{)@OMXGHxnlTKAT+4&^J&mX{Ykmi8}@nB+HOvkhyoq41uCFAh#< z5IS=7=C~MOYZvuNos;JuUXL^Qee5WxRm43TP1J#5>Tt2%7C@!9>t)qAwX>X0qyEQ# zd?$Ad`-yho!l=GDCR8%_$euP-=SZQvS-F4MGHg1zQt=gWK52L{?f#nePaHITVO&hz z=4OhN>XhWzxbDFtbubrnO=Jeso^f3ji&B!6ff!8Jsg0Ue=nT7tg%=bG!Qtqz=q`EF z3dIes@I^+uNG@&%HH8$!$M2I5ky}paI9?5%1>cO@tQJPAg{d(QIpME14E`Z|X1lZ^ zi;np*2+b%8-_O|^-+64>qifvmkX&LZ=3yDlqHfo{%-idd3{qIjx>SD8|Gn|*$9y%O zRAyn%{g?9V*->kN<3x=Hj)gPrYJk+b%sZH44exMC4V;B1wH@UAc+%%)iE)TUU*x=q zVn4AzSuc&0c>U4$ZbSZXBFq}J!m(Ubscll9Yk@B0KqqxMsD~XmxJsu~O_uW4=n!@6 zl2W;(Kv_P9K3R@j7mjyXD!gbNh6V`j0eYedN@(zGdOqSPBSIV(n!M@m;qpKPrW(e_ z31grt!b;BW#PPSf65HPd2u+7)@z+2jwVT8gb>Qo>T?$08et0JhxX9C0RLW$?B(l^7 z;YQP-L&6(FX)2gS*2YExkGi(&uc7mOYdT+XZJRfC^5S^Qf24;1?N0p?)-SlM*p$s^ zxK(1_tB^=)PM1WztGUOnF1h(Bxbwmo)1>2q!v=IZ-oUHqTUL>~4Nnw!ZES+3(2pj& zjphEEuaZ-KD()S6Q^G8i27GE#c?+9nJuVz`%Z%LRejk-^?p{)*(Ygj@*Tr_wf5SL4 z#MKbV7e+?Woxf_kKRK8I8r$fl!Idr z`rG&gZ13vlcUL3a*Nrm`=$i|>I66=~@7N9u&8$;RBb{4cKr#wMxeGi6S<@m4W}1Jy zI;03@#|d;sIZx-TW>-0+sCmp`j(Su%3AhDZ_IfTU`A_X*<%7%Abcpu44zBO1U=FuV z=4$^^Wt|~2+sK!c;5^4=1j{_Ex|0UT!}~3daSGdKQmsA4NjD@t&~g|6!fRAJk#vXD zcuIF6xV&|Lj-sn2qWX;5f7=jQO9JPRn>4&)X@1E~mmj~?u!bBn5Dxv4C%K#fqq@36 zRH8Ar%Wl(IeSkoKcFLdmy_~Mq)jHw|jmqjb`+`SvGu3tI*&Gu3N4RNBbyWqlf2-Sn zyIs1vvb{Zi8=b@(0%)Ry?tbZe2J?&GbSP-2NjJDFB!Wt#t+I_zq=Ar=2k*?@9G_Mk zDi?ih#GI|@>06Nn5A2b-P|=EG^`H=aWUtS6|5ld%HBKlwQ}j+cO}sHTTj{3*(LUQ{ zVamaK8>_R{+?lmR&-;)ZLgZ<(O81Sj+CC#y>8PIVb*qL4<5Kj@7CQQL#FFC3N+jJR zHuP`#bGA1t2d}A93iAWL4@rxIlp-Js2Kga;%Is8`_`yo8G=n1KumA)8&mOs^{_@YG zQkZ4vi`dcbLM?{PJ6EFGBMR*W@C*s8iawa#%xVZBws!56QBw_Sf$20jxWQuq4UOT6 z+e003M%sxSa*kF48TRp~41vk7NOxsZMYFJh*q%>Qx$<8ushJIGLkocQ*+^vqrU-p85CXl2E`S@^4g>glq^i%m|U%D!hn$Jz=GY3h&oz~GSDpCov@ zscD^E#7lB@QQ>JWz;`1`htSbP#^hj94jvw{9j9P@3PM6Ppjk@cbO&LA8k)vdZNAD6~5meni9*w zF8~>-f{dmbpts3|v-EqhE!pQ#oKg7LdT+@%={|ktL zpa=*^3u7QHDUA|?ZG?=HQ6f3g(XC&VlH5k8~~$~ah-GS zom>Cw&K|q9JrSMFh(=>EXLxWqLAz zvASD3((KU->+jVcZTW=|(mdZ|3)_dsk( z_eaW8+R)6+Pe7@*+sI9 zs#3WT5^xB2>rQGo?t9UQwP9m({8zdSd2a!vz%EX^ z(o%d9Osd!0sdIVeVp)NWuH02gM^6$6ILTMj>e<#SDX0#pt@Mm*DOy~>c~X7p+F`Tb zXQhyL`eKGc)BZz6r8TY$w)+0Ps%XH~Wv27U488ST(ViRj_K>lJr>XlBTVL=T!Gc2X z*}N)xbnBRJvRfSV=QKo!-=sZ znJX9Z+u#i7=0lzr1kaBOA6~tPcM=>}Q2-hnC$Y{1xndX_be>FH!ctXF?VSedWem6l zsKh^>%&=joZNN?5*zi2_r0lFQ zYI7Hm543$8-BS_6=+-DMwUmN3a_>NNNPJ|*@yB+@7!AD*X`dIX&o;L}vUexjxXYI; zicX_3=l^6x6)1+wK^*#F4h4ldYCdl@t-z!S@6v!&H<0xL#KUk@amBhk3I7A^d8n*o zh(`linsDT`XO?0rfaE~6%GXNApHdl7%wGJ`l#O?b9OIkUiSG~kei!2_&OGfBUto4 z#U}hTjZ&f4SfIM;d)CTLH7~WRB$CVix0B8e!_9f&7Rbh5hwHSAm`SYH6A}mYfC>O> z{OR{-c8fO`lX^Zx4-n78-)jqt1v5_=49damL3KZD!@=r0gBr2~I1dF=hU>?jccm(G z8rkq39cZ5dv5*~|KUN3nPSQR`q1Y%Qx@vZUg@ZaivT^ylI5e8Pw0dGVk~G4&M7mls z>d!aDkduBq_ZZFUyIhu+>H_hZ_H{8<$|cFQT#gXNBb*@JD6zN){5PpWA*yaPGTMc~ zxVh}Z3Zv*l(=ULflh~vl-$RidfSv$dY)|J>w*!3>W~e(3FJiP{sT*}27{2ddy1Hnt z(MU5;6m4A=k@Y!}YDBW@9~#i4xsYuAA_tj$iS%3b%sI~!+L&KqsdX9!L zlFRO6IEVXIZlKFBa93*V?epg3W+#z5-@P9lu8ye(18|Ouo|3kv;WZ5&t(SMChGw!} zo+HKWMGVLn`q$N8h;4_xkq29mb9%>qM5DxYjm+!IFUPwLc$we`sAp!RqRwa)o*Gzu zwEIOibKH;RHn`I#ADR}0vHXYaghxW}q5@x1@hIUR^eg~yFmxS8m4u(4!xv+K>9w=+ zL#A#6S?xlD-##vipmf4q=_;jNAPtXF7TI{NkqILc%TLVRKfaRWe<5q=t5P=&E{t(p zPI#v4pCeGvQ|S&_gAZA@6PrHdDBn7v6r63|u|D#tzEjoUu^8a?V9+819+}8F-seED zh**RozREbxSd+z~RmNrSKLW>(_uHO*UP3NJw@&LY9=(0 z=f%fxJS@gYMYn|_WNdGqGNmPh2u7PmySJ9qqHcUIsVXXD&oT~-mol7{L9t!MsL_|) zi~wf5Jl~rfwbH83^^Vg~e^6DEHr6vCoz&_em`+IFu5bjaZIO>n+B6R<7DK#3awUVp zn1%7gH1Cq!>a)z-(ATC*cih1m288^D!t}ycG^Hwu#%o7zk~>#r{HwxcH@)%^QMO?@ z=3}@J1Xd?4Ej`xv`>FP`PGnOr!fd?mpn$yAb5#4nw)iKC2p23}fNb%^$i`!?W5c*)a@;`B})0m)eQm7Trl{_?rF$=$v7q}ftezg^or zo7&jQpj9Eo^j}xKE>|CU$2j-X;(0OM>zkvjV*S#j{3_+He~OOeRPPWsHqs9lx@F{2 zx|6i_UE4I+XPlUCB&m2Pd1aEY!FN5GMZ@%J=8T0eBJX9hyBxgJkgM+dmm&pz!JiuO zMPu|^SAhTZewl-u>uieayES2vmZU7l*>eE9ngeU6SMyH8R%UZy)s z0zifht+DaD0U1q^?cO$u|5A7aas&K4UvHyQN^!>}X&DtK{qjM^!HS4!j?YuSSzBB$ zT>PbFe(S^;F@;-m=gfu5fBu&Oc~&ntt9R7>WF;c;D}ex*!^d!OWo8S zV<=Mt_I8GER)&|%Wl6k+_q@I`XUo3w+ttFQUygMs)ylhdN)FeuT+1FXc_VB6N`<|& z(q$(LdC7InO@Gh!3+Z%HyJ>2suezLAm~y0764za&JlvJa27;sH+u8}q$3g;Xau<>B zey$FP_=|X{D6z`;=xQ$OStWy*xL}*H5nl0tq~cY@N~5JN&8~OIh>uDUyQu-qDzi8J zssc)XMnrIVi2P>D>0cAXgzvlUU73 zebwZ~Y@c!VWtvXDD$@$2xYM#Fy=0rGUNgQAF{~sUpO#CsbJ@Ox_B>J1IGwKjwPnQ} zxny(kMaFjS$S_iLT}kX;in%PN5t253Y(rHd6A;`FNM^f z!274hHgGG1fWoz=mJZXv1c1zLv!3ehFKm|r7HwIgqy7<&d~ej9+Su(jBN74qDzpg+ zpZ!-&XDdvE!b5%>A&wcP?=tU2bYTR2X8E_gHkH?<`$ z;OxJtEk2QS7q0&|<~4+Tyw`tepD;+)POz%un)WeH9iMz6S&*k+@x0)K2D(}Bv8N6v z&W2dX4t)z$7%++5o40%aW9Fi7)}W%^mXyt(5}atPwL|8Qz|)~*#;AThpr)pM z(7AKa+Y)CBl1f)MvTL}3sj8yPL13Z@3o({&+o{24I6SeT#AbjWj$t5UXz9h}Pc*5X zu{AOMooFy$sJZ2ekiGRm5d(l78p(a5V07mRBQ1tkv^ zxd?kaqSXUMb!O&oY;<>Zab-~5Ze#w|-hSSWbcO~HK9@JRQ+t6b>)V0%TwKlLv#?5w*K(83kcV-s`^SZ`xOiue7>^(|nbS zC;6C!za6V8JBVPbhNfud&nFk93PuNe4*5Df7a*2RN?4X3>@Lrw3dO_&Yvk@j)MFdX z@^U|av)CaXA)g335+{b@9YXIyY1YM^^Har&WLO#N2IE+s>8M{ASGwOyc`w6;VtY+# zvh@7)Ony-4Fr)mhsS#>ST5L*`(B#DC&=|`k9{8>-f{4L+r2{)yTdXvB zCu7WH-HECu`ms9#nShVh5|2{egNxY9tl25@km@d7ujHy>a4GlMjVw89gZsJdJNGs7 z)esM8vzz{{Br9fm+($-GY`DE7TE~PTUV=xBwTCun28$PHB2$#)B1*VMI z7Zo-#90vY1}3 zkcgGe@ncr*{74rm5su#jrgkEt&KoO+q}K3B73QW%V^7gW+$$-}YrJVVt|V$Ol97@g zALturjkF<5yoP=v7oDR zCVr<$7`nBcnKnFxH7zl`{7`f}++ja6mP&{JrQiCEF>778)8A9_`=Wcunup*7sV-R6 z*DgA=#AFxbOAlPPkcQmftPtXVbdf-oA1Kum%=Pw`x*M*A%A%G_<)m=l!i?n6R~?bFrr}+hc>)EOQPgs)`$~@o9|YfR`iJ9M zGe%e?!rF1H`*lmR@^0M#Q~-v}I#WogV9NV7`Rx%q?qDbPC(Y~K?B>`tl{;F_SB5jX z?}c$VSsBAjM4cSmD^F7!$2wyc{h_yheQKr`vi5{Cnxx!x2f2I!Z90@E+RC|)N!a)% z*R>CUhqA@hobi-mq;5R(3t;i&UXJGz&hD0uELWGCOrYsr&1vzH?6|dsM&My+9SWUT zm(xP4cPmPQ+>PYm=n&Z`yT22a$S29DxXR``r$L8tenK~r8>*>QMYX*1@WEfUEVxP zqiOwN{iQ`g=Fd^qkE!@H6p~oXWgt}7{ek#dg+74|vblXMcWtzp=JBHK)K2e>WWH+( zvVf}3qmGBO?oxLk>K0(OlD-&qFe?uQw|Tr_{9f_;%M+5XSeZF93%wOw?`?iyiJ{@0 zi96UVPnh}~yoY}}_sL!0r`tFE>LI=I)3c2&RS)$XK{IP@`t&zsywgaA^ZasNEkC$I zNOHZU*n4`|Xy^Q2kIT+p?U@c4be$2K6j$(njMDlscLcNMkjMcmL^>!jVvj$IlFixhJs@!<|elkr?$Df@2oT&}Ro0-y)%3i2SwZ# zqf4;4L;svvi#FJ);o`3RHgI7?@7qIhnCy>JeUf{lbX#b#=%Zw@Pkld1k~;I0!>E(&$;SM&eh%n(Y?`anP=b zh0wz&t=uEPZ_?aPKn6)q75m=#IIck6+2?PH+4NP-^GTgWB}BXCz5PTulj=PEDn5w( zJpop4Ne?<%b$dd)f3!r5_%8RFBoTPxO>To(0HjoJP(^>sZ~+bMWY|0tQcHr^2uCGo z0S3hc&&amb>-~f?rII3;yilJ@53SUK3&af|#Qz4&kW)w%-&Ili$*ps9;mAR1!oIih z!@6+F)@?(OPZpeKlkF(e1&Gx`dF8Y|1XSlP(mTKL8vT0h169jU_~ryjB6(s0k6r&_ zqChZrtAmXp|6_U@RkNk2Z|r;)<0#KP(WosYns_e-7|3${p-UvfPu+5 zJBS`TSHOzS>#-I4FO)q7Og&}_Vz&*qLg?Sp{!77_ZIaez%xoZ$qioz3d$nGcL73E| zHAk^>Q#<8R;G3Ot78+POWC_!l?u494O^lTqN3cy46kXSV5dfrAsu~Evi=2TBsO_rw zf0kLfTiZAMj5vEvL^ix(eMw@LM0YJi0I2W$&%0q|`PU0nWj$)0!7RVEz0Y-@-v^l| z*aw>Uoh_edu$;@Z0NbdWCOP3x!;GDppL>kQ$)hwHt1UKy4zM{j6V&0&|8H+o>Gt6nmWp z3gwbjzxpKA4&hbVH>mEGh6D?q{jgMW@>o_#&@hCnj`?985=&k5^zJ*(xa*~4l^8N? zX`Lo7*#`Ngo(p%rxjz|pW9s(X|6^6+|L2Wv(EA_6iPUp%Nm}nM$~k|l9157X$Mg4# z5td*xIcA?5pGRa%Y(q}de*T$V`#N#1@|Riql<-H%%A5W5LBH|eF(27|*_AM^sW0rM z!zy1d16hHZ;rvO{=xIYnG@gy!7(<3o_f9#q$G#eB|NPyt`Cw<8VLz8}6&ll>t;ref znCYf};868rZyBh?b~F^*UxZE?ZMW2`f^dwjH zw$UU*Eo&2>aCE+}LF$n{?qEBLEWJrtQVOrJi1EY+H^O(tSC`Rd=18+gcngDvQ9WR_ z>x3n`6jJoK$TM_QUu;<7ufM!0OVbvC)oEd1as*wWBKfcR8Enm*qPba$Na@-Z#@?n|tUfMI#v zXj(^|UsCahAIg7x!~$aA6}W!U>EoyqvGD0r2Y^$3JUG>TS~*v)aSdX=JTU+i%lg8E zyD&p1VOBIlKJvY8@Rc3ra->tO*Gq$V4X8W8wGxF^$_2+TXJ82%<7r|^Ki@FZkVPn7cldcTg zSS7BF&AQM=|Mz;cm1C1Xm=8I7B9@_$fVQl`i7z*Dy!5gpaWqZRpUPrW*Ea5TNnvO{Kh zV<20aiTzUMSofsrW=Y=RDQ`3OUy8Ntp9>-n4E)so#PFV-{@F0_);`?nnj2qn4pUxQ z6*DkCCl7m7%RFABb?{KxauzEXe4kJohy54iM6mnlevskJRHXlw+~MWBe-HqJ@5$?XO08G=xUpP~=7*ZEUiqv^jgvKVxclbhHm*__aVqjxJEH${C;|b_O!$ zHhJ}r(+#9!R>5V-G^ZuULou6_cjB!6!k%lk9-?0c643urple+7gmPX@qSj7SO<3`D zl$;b);PCZiwvjys7^y#7EGdJ{+ToFbauiNIrTF50#dG_bp+SwyxBA~GAhkTbvPMF& z%nWyTm*tvHB@{=ILxqo;dZ4;Z9zw!HJvWKkzpE*ZNIOz@=NEma9K1gUDc=AWsV*{z zt<&{;H04W7i#fWem4DMGe_<40$(_RjeqvSiEwPpuW#8^{Jqz43nL21JEYY3a*hPxJ zOk<62`S|>8baRg?EyCPvMF4u9*&DaUD>?p35CGbT!A`_8==EVL^wB7a*jL0>W9&jl zXuUwEOj3#k+?WuDSObgk2Vr4L@bko5E}SVC0S}`wPv4nH;N|q~6(n^!Lvr`lty!?Q zS6Kw^Km2b>ZmOqiOU3}%&)-N1KoW6lZJ%>fE}Xa13fYM!1xcjMuDPAF>$J$fO z3x|Ukq8M05UIN)b3$Rz-j}`}@Rou^HnV(yJ)T^N0j;%PZa4f>ku98!PM&utj;J?n- zRA7S~W2?2Z7xzu)^*Wed=cX)2Ka;`_s!vSI*%uh5GdcB_Lbt|l66`J?|L!Wih>C z(pc*XSl+LFl15{_x8Qei%>D?!N9Go#Ci|oBLdf%=d-lGT5Cz5xQ*vtYSfa4|I-G(E z)%UqPQkhtqR)5&%exgk90E;Ov*I*&>aWC8_l141t33IApcSXmEmW))D6qG>xz?QIg zM#a}e60x!2m3{X>-Xl3!lx4O$5|nSqc0#Mi_{RFJ;M4zKU>FLp{kkuM{|#|c1F0)e zoc46L39S7z-FD@1Ar4gOVF&9~=ikKQsW&L76PN~ZM;xw1m(F<)6Y9b6KBG-_Sbfl= zH>Pp74Ko5wt@*Xd4$xmWW0i!ruPaB<6D|wnk%demkbW#0ZAfS}QZ-?C6x)4%Knd*d zzx!3XA(!gieJrAEK8&_r_^{_gqhSg;T2-^{JBE;!THEw`trq;8`M-X>TTs%B+pD~* z-w{U7aj&pAKI7yf0!hEg#l`HdKoILl2!&4B8OF0*u(MJ@icd{ebCy+1q}+8HT_6Ta z;m&H)lXtYH4(D!>IiNKDuNVAZdMK>#bwY+-&TNwnU5VP}_QQGgjj$r^P}L)YhskZm zA{wJJaMUkJ>0a{v)2)6|-^@u#wv{A7kf5eGs)E7Fy10+mZ)Br?Sd*k%Qe6%&xYG8c zv-H}#F48)Rl%0B<;3I*`wTo)A_5_($ZZ-uyKlvb-PC%gZV(JhfCFj5#_R2Je)d=oh-E6TbR!Z8`<29*;6S@k$kB-?b}! zqd&X#vB}QFF#mOyfXZxs%-G)KLT+zwZKaIN_gMosuFg}N4D9tiLC&xgjb001vpYQL z*gAFkOM9ArR&YO5i=95X9hEA@7;@9st6u(Bt5fws&68IxfRSP!Gi?*&fwbLmdFS*9 z>Fh<{nJhcs?C8hQ$w%xt2DQhJAMIjCr~X@j*+BhbPFn8IrP8c@6g)8f)f^Fnw`Bzsu#H># znlOEEA*1OUB%~eBt!$i3W!#H>y3PY0Z@XjgKh0YQuM$ffZy-GeNPGYAw~Pze2t^%m zT4(7qXJ(;tL9NsU8o5w=c~Vw$%yI~0V`+b5zxlLPLwc!7S&&O{@Dto0gopT@K{n14 zc{5{pm79sY_PYwBV*?oJviUM$ht{fo&Tq4pO_{FD>qubOOyR}vVyBMsGK*+0BQ!rq z77z8!mm|mTpM2@hW1uT&wBBw=I)H{~C^$CDx#=H!wvWnAM%?d^l-FlaO&WOM+-8~A zxSZiNj4AENSZdmHK6ZK#MT+f=Q~dm^PKz7yCtq!xcWT_iIisM6$4375>>JyYG(M@n zEhu-dp9LzI6`{Dt(-MJSgZhMMH71E_xHmuVDY&A1rW$v((H7FN+E@eoixeK^5LCp} zzZ4>?xl0a!Es>&Q}d`Lh3!s%!lEnOgrJsk%O& z*(VALTEtvkNMk0C%Q0fG-922(D7H)2PV=4d8VvmUC!&Lae=x1_jvx*xEl$B#W6@WC zXIABF8(Ar;+B&aSYnq_%coPnJQ0WB)8+OP_hMBp%^a>G3`qm?mxULk*XY;2ON zX@)a-qNBdDGRi->?8mfNhPGhH4J_KwCgNp^_{o68AhzJAaHF}{UxYGBqBvG3QUm#5 z#lf6>0$5dHu(lGmzXUr>SU@Y;&?)ZhMtK1)RO{}?6Fb!}P9>|DP~So(R$T3irSvA^ zoQROaXbn)|AB;?%GW1*Qb&=cuQaqlWYwwZV5=q^V%yQ^HnH>Ur57O;Pcnsr&lcT&t zDMJtlSm+sB4z|yl;!zfpLbqSD+Zoltd|bpU^H|~pi?fm8T)OCzmPVPn3GQK>CC1D5P6!u{#frw zT*(yKVq+GmO65t`5wAjh7$F4;4mG06Fuqa_!N7QiKNzU zON}UI&YH!F3_f{fI={@~F}yrBejr+2tn~^|%M%t@K8>i&Ano$fsLL82lQpgS+z)}x zw0HMz?Ce=8e|+UcdLmaOl9qxVG~uB&&>i~_Tv$o&1E;D>k99{iP~>_<*r4nh*X}^| z00kCE2R<%Ls9frV!#&GDp>c$)pjKgmar%SXPWA`QQO&)%t$%)Bh-p@TNT+L^Gv`B8 z7PXqFy0xoE4dc9yV>m_C)=VaN>As5SsH3hUmsHSZ0B0UYZ3U{At}RU?^svRBv2uDp`(t$kUfYh zI#){X4U*0B++`)D6Tq;Rn#UtNEDl2liNI9ozI=N4tAB71L+@78lJX|K)2rkSZ9TY} z4PQKd8q%)aqn9TDTFlcsM4r4$xtdNJGhJ=0u*-I#w$Nxh2) z4D=q-?;-|`ejB&nHug*6`DXcQ4NgSKpPfvD*IPy$rX&04sawdmUm3T%mj_SS|tL-azk^y914-W%UUH*InS7(3B+6d=61wXEFNJ{g37wK`2y8F}LyYwCqo> z#vM4+UufaJ@O21^CasbPyQDuxzt14`1JztJP5TBTA}pVpH1npc1e!{!s=~MUSME;` zj2Q)FX5hNHfQKY#OZ2dite~Dwj9v&uh=(K8#@v&oRNsm(!Xmcfv<$b{k!dTK9MZBv zI#?|q#vP(~^QFzG)LzoZ|E%rp|Nf2H2`y5Fyz8@twdbJyh$Zre%cQdW7)h2Z64bX( zXNjz$`b8;L*Dxy@*+4_`HwjqP=U_(zO9wce^&vucp}x6a#4W@NqsjTfHAn+16+q=F zWPLAt9-M9e;&-q`kPG}~X6eT!&M>WJv;&4FaMHdh3N{0|HKD18MS-*`i*OW|2~DKz z;Mm20+VX6c6$dFN^>isqL3U&36KCXPVI7Mt13Fus(OHmIeQinm)2%gke-7rKGs?Hy zc>R9T)l_`Wa?WJA=GAmCHUrI`a;w3By@Ojy45E+7Te&H$4HwzQBJE$&3@yz3NzyF6zMJ=7SWYEk+v6)hmq3Z*bsV<-T^A)F+&e(bj7_8C=31hTe zE&dQf0V3H=90k`!G@KnR17|&S@l5{@prrgifRgrpc$Lj{)N9HkLEoywoo4>N@bwpbg!^92{JF*ZwO7)h z*97$7e(J+oV~~DD+9>p0j+qcaAE=pBW(1%-vNAx!{LRc6Pv?5mu<NMmSZ##l7SXW3`kTHK4 zY=}x{DcV`0x+Ymacv>^c*_0cy+OP7ZT$om#aY@~Q5FePS6U3KKAmLWL^8@1VN-^(iO-g{qqey3h#s8tIFv%ZJe*-H;ntW!>!kFam@8SxEog@vi18cS;ff*D#jtV-Z5AtG%@)3 zCA=y3papxHDk*Wl5;dO8QWzmcA=D>kR+$R*85^65vje;~s7@#dnRs`SXV~m3zoPyG z#oaHZY38|ln~8k9hK(`b`ft>U){*x|F+ruS;-?Ax|9GI~ZSJI zW@{v`I*kb_sqAJZcjT9?FLhG)c@bxcmB2QbN@O?Zg@0;Qp9u#!E+>-jvysgt$y8t( z9X)L9oQ=5`;`H7q8~b3`(j`~sFZ{tjQU00fJDo2oKJNQ9Zt2d@6iX{0Y75N~YQD4? zB!2t%W|!V@!dE8#xXJ7l3r^VJa)2z-YYy%>uZYGReAY=7`H*(Ir=w zNmXcfJ4+3hfl3W8;X?lG1Ocg$ZT&p0?>fj@nUaJp$*R9}Go^@90pU2LqJYvXV*y7Q zU|_sZl!q#hw1>ZX28&+3pAf%6;g{Ii?gR!NDP59JY&2METv+TrW(fomuL&%hRvP=+ zJ6k$F<7=YZryF4Br0bGhWjra#$ zG7M^%?QZHM?Qy1<Y>AtFDXwDeNLTs)hLb zG_KKBAMsrw(j!s^D56EnzO!&3vy|TX`PXDLD;_?H&@W}WbxMtAH|x0B7N5bhMGLQZ zStJ8kBB~p8Pcz=LrhYf{^+os>AEAZ#IOWkc8y|~t_q9@_ZW$Ik08$A!A(x4!I(5yS z!(^5vv_tOCBe(T0bxeWDEV&Mb{K&}}{f7;SD|^pk-KgZ3SD~XU8|kA^ z`kwmY?!!6pHz2o5Jft3GVZr9~K|{<%#&&>AElsp-vTbnH0j=Clw|x%8eCsx`S8M zZqhXz02W>fSlHFSCJb`o8kb(jN6 z1J7LkKJ~ltK~h{fG6Uvc|O~u;6 zEmq9LHGREnaPh(#D>dp-$;25BfEqU^g&s1r^>^khU4i0Js3%d&tcrNtsQfiCdevur zT{Y}Y-6_=IuIfX6p5r&~)|drZP>ze{zdiIV%$&Fi2`fUCy~f3{iA7=}E9){jP2Obu zCZ&?Zg zt9xC&sH3~bjhh~Gj-UqjvFUn6cC1E5+YJ{7h(rByg*Y!n<$kI%y#|2tgb-}5MA==V zoHDTJcgn_b;HZo($a{}KE+5|kjvAs02X|7!iP^XMLGUz?V{_nzZIYdWVAkQk6c`Lw z^~P~ij$IiW@Z6oCcPN1#Je8dnR;q`Y6C%Q=KA6oQZV3@Li;bO=*Rbh z9qN&UrF=J;9)%P?@4~qkJ)1=-lfvexszRck<_8A;C=Bi#DJ@NTN6EEiFBF*-xMve% z^d$bmI{u4zW@Y2V`ntG#P?OhTYGl-{n|@kYKh?W~zqM0*T^TsSy$pNPanG}$ece!j z+9l|-;FiDaDW6pA-TYJ}obq??M~h=5IUL-k>+@@$qQV$z(e<%N@Mz3&OaB ziv+g_-2d;xXsD4D6|#&*zZ(_^b{$R1UY*RGuA*RUw2)1;eAP_~Ne~nY_DHH{n=rE0 zgX=_1WL3{+P8vC4`1s(7Ka3rA0b}2E58Z2OF&R&1=~((pV?S~NN1DbOoa8v8gw2&B z#zsB0;d*z;KJQf84YI74Prq%H%PrKY zLj@uVkx#=l&PTWDfL2-}`?^CaR}L*M7fqT+EeS`zz*d8(IY| z8aWy`39><0&bD&S%3j{0uGw~zqMAi0VZtq?tq`hAvZi!{Z*l!N0;f@2!ytduT6n5t zDz|-Z-9x_974grpoa+1IGY3FJ>kr+jeQk)YrnI{lY| z=z*UbI0~8fs*!zy+C=oMu8@gMMrDIt*2NiKzed}s>-wv@H)^4lT^`~uD$duz+wd#M z$rQ*kB~kBwM3dC3in@$j(OP}>VTvx4SqnCtkx!3j-+tQDGEP=8@FJuem}XdLbmT6Wx1F)C@4`YoVWvVBaQiDCDHz-wZr&*0fqCx9`@=8A z$mo@@9V2hkB|jTbto27?4P0I%t#=bZc{{tZr@Ez*1Rz-yi`ZH>8I^ClZBM@J%3g)K zBz~_G5FRQj0`@^<8FIO9QR`a~3<0Cn|`(#HFNyCZ7BgL~| z795bjSAFPjVtC<9Y;^Xxou5?9%3z&K-Im>Z@~GnD2gOSsARZFBiv38RmPEESpQ9M= z(Kz{`e$V%*-OsWB?S?Cbni?dxd&56l_DD}^NH9{$noinJ-*{$%Xh^M?88d9nygl`J z`*(tJ=SZO}AH4r8y5m!lqvi)fj)!vVw|gvqTGgAeeM0Nz<*1}-$pBK^XSBRWr+^+l zUC2ccnvIqo!{E4cU))L|6g;k(4S9n+q6<$)msn)AJ%2forL!$mjuEI?M_-P#QoBgQ zqK^6a47k+o-tUeV-$YsVR8%8oL2EvlT`yG_!Voz0g zvq7@ps%uGUe2yJRcS%PL8P3NaM-#I~GRF0t2`LWwUz(6&^iO$e2(@CwoQjx6vz-~c zWG{HN2dD5)zD6%VS$48662=2W-`A`(9hzo4C(meIV|LG0<`*2;CNsCgV8UO*%!+ze ze}6C#!Kx`79sQ}Qfd?QDDDTAVdalfh5_od9!;GhN32PgNfu2v;8s=0K26I!fm92YC zn`F}C;MAZ>^*uSGrL0zP(^{+GYTf!FV+N*5yAd9U5gqan->A74c6Y58CP9wSfgjCPp)AaDCBf!}mc%A$=Uvf}*S-jWmG0El{Xe>2Bu9#l81WiURDPMRDD1w3@pu_0AmOZ% zGD$A*R4P?Uwk-Fuv(w{1kdVUt3w>qJ`s-bM7ilqZLU{bKzg=FZ?uh+|j6h3pVeeZS zE$bdj**8fmXJ>zdehO81rFBLtL%%0lL%H z%XnqIn|(70yZqhuoVESR&{WUg9y~$reV1d~`Cnb4hgF&c}pcPUZM+l!SW$!Lw%+U;;l~;?(=h} zdxnR*nOf^#im?Bwc-}Z8%yLdOl-^3Gg~Fh$(vQj6&CbrJI)B2RX;Hw(Pk3u`t+)$4W_WJai)YpjFrj`^sXhH1nfD}UucLrmE zIULyXp`ap3D&)l#MC3rA%H44|iL?uG8*h;ng_OY*lI zOL%7~Ej>9y<(;(W#};WIoS9B9PRjRYW^Cmo-6X|>5Zm%&H*(+{W3i1%n((WqdXM&n z4&iBMQ@>Nzj3CdHxOIIQhw!;~bb2>bZ&M09Z&X?vKjHv& zp;M@h7ZIM+=I0d179fX>gBpo&H!MKPc9 z*fESa?7%Rc(N~&}qI%9!9G3>oSSjrPto}3F`XfnDl!XN0uW-6fxC?_}q{hakovA#v z0?pB5lEJ!*&E`NAkSSpn0fKMt^NtlEq@;#=G(k`K(?R`Lcw48q(vNR$bGY)hOd{dk$`i`H}7H082@&NsrjUu8S4>_Rv)E9SSr)I)Vuq7 z+7DBj%B+}hZ_nC~ew)cDxGx{F;1chrtZSum>ncc&;g1T+xb55((S{5ex}$kl6c!bi zKVzR+JVSAFc>-fTeBKFQsRm4G$KoCtxdsCJ6hPRZ zm5-vKhA2SVpeCwhaE~0VH{psek6hd3(5ij;?~yg z0f-WM5%;klLfJ7ax{>oWWFu7VjaIsgQRU|FQY%Ym-KN8PL5R{3tt$F^H~pPFroYe5 zde^!K*g>J<{Rn!6?xml)uhcW$1r{G=8S;0J;(~oBAGh`*cO0#J$Utx!(-8>ai^>z$ zadh$6Cctzg-=OKeib>w<14_|^<|*pg91w?%*tEF}Sm+-qejTG+V}E0?lu>7|Fx35O z^{j&p&^5mhL_H`$hH21qzY!*`1VV0gj@TqRBL|EE$37?cCgHS8C$zqOO{6ljXtD5j z^=A1fx?1dZ1ar+oF}eke>Rs=1U@_X|jch<(&5W1O>&Ey#jj3L0V*BkPi* z4lc8TK4mOd_vl<2mov8(v7+Y+r%%q*Hi0!cq56q<;KWbcNZsVV92@`W+&j8Ai{=;q zujbw|s;#E|7lta7Qi`^CkzgfIf>Wf$gO&s-UJ3*P1PBluN(Cz(G-z>xdvLgmy9C$b zMO)n4llytkyVkqbd;XuFGi$H?A#3)`UbAP<&NbIh-qq_hbIEhd7L3p$OoKPZK#&3l4N!{&7pY zdght|5zu)!u;1C)6MK){fcj+_*ql6iGUz)dbT)}~ zj!W23{CARS@LJia=u3Bq9fB1JTUJ`Z`9zPsOq#sHH=jhooj~OH{UIf52fc=*+UFVy z#@M(xHn5J^C(&#Sc+`v`gNVwZ%uP)2nO#3q-&k1E2^C#u@e@8SLw1g0&V+mx1myx} zCTHm*dKb^1C8}+j?-%#D=HCsh>2BUCx)Y0cXD^&a)LQXr(_I1;wMv2Bzd1R_KfHRN zel`>p=fNDQV~NibH%e|);kV1JlDgIKB~LSvB~*x9ux&U-O$DEM9)Nw3T1A}IW^EO* z2H}1mlRL;uhZ~k~6x&jRFujYrWHjJox|)Nt{~if@L(O11++Jom5KB43UvoD~j(bJ) z^f8T2wa&>K%s_Q+_JS-A$1@hUm$*-B9^me0s?igx;e}S7laKkIl`4?P(A2GqCN$)j zEfQEe&v^G5mPi^y(N;+VNmXp!rEzu68GQZv6j@23UiQ&DyJ&h>sI0DFycq*QIP}XD z)!>VV_I7ra+EJ}?6vl{}M;q&o^&pG7DmBUakzoCmsE?E!Nq+*UrEOfwuNwxpr7(|h ze$02SYEEBl81!+4_k@0b@1s$dV`pX35ep>1UD9h8_rhB8z4Q;EmXTdCW67)WuDOaK z*KnpUE{W@tbN3P<%JEWg0j3UbB*9PKI5=db^I-`mwpZ*fd~^2+5Kz#@TfFOWDNUAi=p{!9PCmlEv&#l|Pk2PUnW0(P&rBq7w4hH8xP zT?^A=Wo5o)q1SljgYsfz`6&6}aoV`lNi&rt<;HRBQ0sHR2D*KgJ8E&Vl!!A)|3WCi zFsBA`$) z*eN=IM>051TG{GjwF=oegn<$P*DVX-jEtDybCMK=gZx~sqZa>U2%R5Hl}7eBG713W ze#;6_sRvLPlMnu5U+~S!@onaI3RKOWmh@4-%lo*`&auo%SmYE%T==n?MjMn7+d7ft zKdCm1gs~<{QgBi8_m@;7fXy4m7T@CnMFOk()W<`Iv@A!^Fxaj7tmeR&$-K#CD#ou> z5U}uy`lnN@423?d7N2AOI@$AzNcq1Pl>OUtxy;lh^7LrI%44te-8GquzA|D>k3^o? z=vsBHCX;RDa#+dl0b9kz%jQSi{YNyT1|3zGw01X`DeYJ+X-6G-_@Z#oo~h90)?qnb zsJn6I_##^GD%-52ZSST^U8nSYNjFpYWFDBa$B;4Nxx8R=i*lMLK*7t()#P@nr4P_x zxe8i}`Oa=LGa*yGHTR;eE{dczHbYG)KTq^SaBy1#qe9D-VatSy1+JF!Bn%Ab$HplR zelbLn0wLrh3#LWco!RzsByyIl9>o8KZCjIxz?u!EUd#9$J)kv zGE0|UXVB@6nz?;FBS&}N`K|WhgPcaLG^<=HV_qxki7zYlA@!{690qrQ-gYl# znIlLb3vbIxIl^A&vF$;Lu#@&u%cqT-L^8g83rH{#(zaf5gJ9Vz2JEPxJ3o z=Qm&`rr}~@!I>$$&If-=W8mKZL1rd?wLQ+PmHnd|w=uo!t%dCzT|~&8 zJvjJFlriAd1LFhQVC1bq#$Z(Qo748O{Ay1ia^|k4TT%;C$OR zbLBy?KOz(&iz=kG1X!p#7GCGV5|kaeGQL2amhGdFI`R2sv1493>KjW*Yqzj3}x3P+`8>}lEWFi;~>u=`Xw_n0Nf`tlp^ z?ip)K55D<)pKC0w#uu9~50k~W{xTMjj>~D%tsS#I#{4EeYh^5|txuT3PgDwAnSBXyup@HMSe{Cqc3K;qXWMj=LwsQE~1y&R16R(sa5BDTB}Gw2u37>pms) zYpJ4aks6qzL!N|K06cTs=;?zDlw}1g%vtxvC;6u}9haPF_N~JnYe4_8t%(FtLQ2H) z)dHqIW&P0k6gdA;s?_3|xgge3{9)1>FWo4sfO|sx6E^-P)X2&B-Hw?in#a z*U$CUZkHFxff<8$O7p(4rWojfl#j$~sf<85bNPFl-O#`?5Mn%DKgL$kY|SH`U9M=G zSZ#lQ%h2ZPesoVih~{;_rW0tN{1*QQVe0-NPBzfsaU(}u^e5+e0gNlXt^XYhm!n3z z0fV|?C{LeNjd^6VrnN~JX(?OMCNDuw+DP041O|dRKpe8NZ8Upi2hJs(gZ8ewefrE6 zmJWMOw_SfkD3=H905jvOZ;Hj^YQ+0&MF7Jd+LcD>nU9MVo^~8Ir*t9nm(n6s;ytg$ zcS9Qb)#HcN)Z!H96io^Z8nejc*@@pcQ8{ln&C)@_JHzE%p9buD4h{bl;Gcf(nUJSH z5DS*f#&V3-p!-i$?;2FsYpEpf4QfFX+RhynL}T3*<<&#fG!k-h;p#1ykQLPgumKgv z$az2wX8-5(+T)`pSH2#~C>ay%32J)aZAEHDWk^znceEK&kheosl%-j$2mR?vsq>Yb zka9|_NBQ$;v{8)GyXxfgpIO;o6|D)AM$u^VC#lrXmtz;iBd?Ha{V`*R#-KgB;I|VH z@dvxsA9YKUDSrY2-g@wCa=eV0{cfo9zH%R$L{%576oobOnqJ3xG9A0MtOV$Jo+>ES zT(u{w&i59NXI=ahhVK@qs#97iy{CNPka-rtvkA8_}+Ox>7(92Z~rGu~O?NH6l- zsfe|yCd^5bCfO}Dx`VdUBotU#39#L&%;gR$WS?s5xpU-lrf_#ySO#ZFR$(`K-**6K z_Qg+sn&Z<202h}A#!;l0C0FZz@s%J-b5I9zJ9_{R!PI>%YBbFf$xz~0cHzqimCGM; zK5c8V3x~Im_f~x;<_B|XM4xn8ZlgIaU#WYj2y}X=$qEG`iU|Oxo`#}I6Hjl(8sxX; zNv|0m?WY@GD8Hdw^yo8qA5&vv^fjAkhm9QFXt}@=e3gi1rlT5iwPd8NZ3QP`=zV<d0lKrL997I;t66k2vI|&?X3{mOh947eS;SZ-)t(?0 zhTg1LPKt;1Xs3C$9MP(CQE5pn|3*mB=S+H2y4u=w-02NH5KbHE$5B%ng8#8xl_S=R zWwO*vO-x5;TYo<@Jt%3*2Oz?8|Ggy^m?AnBdXtb564dQNHY3hCJ?+VBz z=R9Gy>TKPTdsQlpgDXY>^^K;QpWklM8J@mO0QdcxcqC&|uV!kuk{j26OXe&sef|(@ zRf_N|=!sGw*ai}5;>22*7D>nNzTLM8gZYiG99BpI zr(eO6XKD-;MyE>)=4~$#s>%h&g*R$c9or5NfL#Z+VoNQ>gP}y&X zQjNq^8Y_NA+_8fgA{BFORWgzI0J4m{At8-TC#&8h1Vr4GaEu{jp> zgw%jNlXQ)3>NwSC}QblM)&jojyS4_R3t-eb38(NZ<-*L3AfkUIj z9rhMVTtmIt88Ni{!cP}%2Wv_kZCm7pMbIeFGpdNpFnWSkcmWhHB6|v*|B!Mk2j}NQC+dLKZ{dJq~`HzOlM;%S#EfiLyYtY- z5G+rx;}mG`P{PE;(f{d9iZ!{&RaYDX2BI6Q+>p>j(sP$L-rz0wdvR_asFqNq*&_Q` zT7Goi_?oqP$Y>8Ie<+wcA&@7eC%iwZ`rd1zZt3oGvc+EuG{Ywn&jbX{RNg;tbk~Va z=q*mKNvJ0Yi>V3(aK&x?P*%zdcvj&<64ywuxYn(OGL$v7C<({$#H|>a48T6H0O6p8= z2!4bqh+V$W1x11hpX&((FIVhq{%XNH=Sd_xOoDJEKP#=Gbmum`-XZsJm&!KGT`ya zadEt)Iv7ffPo8yK&)to0JqOpN6;IxF{5%!er_Zf_V}>}5gUiq;)`s^J6ubrK_Oorj7wC*-nTF*={xGh zuLe2Qw8misZT$iv4MXkzR1|EHRD>!#Gs9nED*aTuY*u><<&sV#7W!n4H!9uy8AI^r zVbobL=j1G@gHeNE?HwUAK;P;9s$Pb2X+*}4Zl_CSrz!gjbz|ejA#p(2v~u6K>UhQi z@Zkxa#?6MjuP9Vm?GgeLb2{#Rv^r@c{7;$U@f>Di;^|hNcj4$LKZj^sePWUOo-p-= z=hQH5-vO}gn?28We#_a_vV@ZUpk*K@%qUsk9L^_br>kgvO#UIYcd>Uq#h@Vhc|uSc6DAy6P??J9Zed@s^-w%(;yTX2$PgL}_|7i;M?0joIqn~e7X?L5BxB0) z&T_Wljfv1?>TMslQeVa55Ye!VV9V)N*7I) z@KuzEM0VrbZb6^f{9gW}knUU-I^lh{`1HlOofV`N^72wytc*1Oda%__x*)9j5;(Ez zwNqK=bt4jQ9v~(mmn8c^=&a^yY%x`CeeX)-f=!ns@CV_QxTTJ^K|O6zQ3`)6cDT7l z(fo*NMvc507_yDdb{o&ZQ08(eWwJh|{zj<#_%zoJg?HCOt3PV20y> z*yY*u)J%1Lk-4J+kI{_Lw2_ILiNl5dXAw*cgZ9V7^84k49*HRE_>0!n{2v<3xj0yY z!PYgo>b8^VR_HO6LX-fYER^W<-&%x1%rSR;nSuOi5ItIZ^d^Q&_qIlL=JRbuKb=W$ zvD`#nEO$ODg$0o{{fR8VPbunc?cv56mB~kP4ZyuG5_1otVOv-*NSjZ)jUYEi@Yhsb z|4Y;nJ?LBKWYFi{EJtm-nx#`6SCDR@G(6B(Uk%vWm1QCVJBJIhMJ3Me%Q_?bxhw2s z+}=hrqfVdw6K-cH7MzZV2Wm-F84c%USisw%5328n_w!wzfH1#mzvoCK?Naxvk$3AV z!{sHzYjl2kQzD7)8M4&FSN!EI;E#)Cxg0*cV<~fMxO3Wy|6tvpKeJju8vQ`sxBR8w zz#JJ9UtpJEO+uYLqSwyIh&@UY%eNsmR)bWBDP{S-();$GG5OC4P+QOX{g*vY)0bX3 zYUt0Sn77+Xp(FN1#rdKF7{T4_kK3h098W9D;(5=7%n`j65dc8KWIQn2$P29wX2Fiv zCA4tfp8mI~fsh*6JFleeckTBwv%Z&{uC;kU5$8MV5yc_LvU<-3qC(+qgs1l4!|i#A zm!ZsaMo&Sp;jX+dN^)qdx>Hq=n!Flp0@yzgh;~>+Hi5z){U4E(`yIit^npEQc|l|L zAVFp-!cxuG=4w>Z*=~R2t-N5D*PDfIcOfhiaTttkB|;s{O7TAYevJV5AjMvaAZ^6m z&g>|MN$v)R`YDGldKQgehG;eAdD8{A-RU8^6H7MCC!9Oao{LM7GUgQlHTAto_o9RZ z0yPhLjlT6-XQl_A5TynDXQckCrx-`E>An5^_rEMsFxqs#p2pmO0H47q&Jq#8x8X(k zu<0BOz0X5c=N2Glc`EDFXkC9NqC&#+(z4Kv2L_t_g>N)b>^8pZ(KwdxF2;ALynD*( zdr1NH*5{TSPhNO!myLMf@e4wke@h`pP4Inqx4iSCbC9pmytU^-!OyT5hK5aYkzrFQ zsrPJwNEZFVaJveLZpEG7ZUr*+zsw4LP1H7b>(zhW|6)x8Crg?ud1buFAXswNvte`H zg8gG_Wde;ZI{y%|eA4xPU@M%9t5~Xh)Znu=l)7FK|FTB0)0D6xPB;H0^74uUTZ3JM zbF@Tu>;P=G22>E;G=iectO7BfT1bkE<-IlceE4n0vy6MOH7WS0fBMB1&7W)wV7OD% zszqXp1wThfq2*9rZ8rH>3<1K8}^Vz^p|{SNnd$cL$kRFwk#uNklT!*=WG+4DbO- zx3f^uRWM&<(3QpQ;@7}IpXUurg>UCkUZhhh?TOf?NA;V3Cf&xoV_ILU(+3Mu4D77q zttU#EeE3pq_d8N(#|{)m*8l>~{%raEGp27>m0F`YCyIAj&X_DyBua9YQ}>H?q~5?aWZf5HfgN_)R;u=}l_T~_LY zmaTIz>eA(`xzHCqn!K34jLOmPCQCNmVaSmG@G-}1$ zhe)TsRwnU{lk9BX_RUV;6u0)O1p~EU^`%|f_(%cyi_Zwf57w%pl!>z-86vF%vhZJ? zTAS>JEj}z+pDo0a3;9XPS;c+Pmt5C1TJZJfnC~)=XK-1bc7zBoNZZ*<%6&3t>9tUX zcH@V~7y(X6YGdmjEeQ-&Qs~oEWV_hh1PQyG=lM2zg__A;dR}7YOY(!Lu(hNkLbkFq zC3>`{z(pq9MIhB$%6S=7yEuM)CP|>fzG7(vq-qc3cD@`al|Kr~W+b@fej#y=r#)g< zYamY{@8cBP$Q^K$h`p?NMsq3@|4Z}FKQm6ZXC!f`xB7?6?TQS4iGXa$Gulr$n+?Su z4gwiSW})76LEh#G!q}Y@O zmgXqF;_)BF7QcUoF6J~=kEhi4cu4bP^iGl*-fEe#!=XHw!2QC+6yrON!OkOm%-sW( z@^5z+ZG2{xxko z9<&J>Iikq@Ig;$0!mj=$CsTGm2j<@vQ`IP3BwP%Um5b}|6S~?eEJ=qH(Zi^uDkhH{ z6%*+=cqaH%j%%b=BDhqpM<_JYbF1d*&LEM=#JB{)u zIggy2C%49`DU3W4=1W0Fy42OxAMlgFO#c!6l}u`@#O}`pi0Xc?y6B{Iq=v zW3xzQRTpD{?0DtRqOO@LZS|VcC{hlein@s;H|d5A7v|6it1)DF1)|%UeDD(_@|JZ* z18g=0GG~aER6W0vAS&UjZ2HW(xFhXd`Z}AW`(61&nBtr=1jx;5NV?6-RmqjaF3gER z8rt1HLJ3Ppma%oYUr{0{367c&hL=xLxWDqh6^exJDAFC$X2#7Q!q-Vt$89z%NU_fA|3pHnHv;hFCAi0GKM+ThTivf{5}l?em(370abKAt z+^~*|YejFv=&1MVvdWQax>ZT|A{~YkcCNSxDl;ydHd)hQ&V7$xqG_7e{Ms4TKnR1q z8Af{k{)}sE3Upoc*+7jP5%m*XnP67?(Hw3vwDtr8swljdfgpkBwCEUF3%G%~ax$HG zVKCqB<+1>hwDu3~Vw3tDys0%iJPEiH-N{{z&u>3LA!#5(6^UIoRd5VFJB$PAo;7m=-?rW#ZBN%hV{d-9d4SsEu{Lki`azM~#YH~tY- zVML&cB%;$OZYf2S;UU_Qdc8YJAeG49XkQG0+3@kX|DZz3*XcPH<0`|=A{`w4rGokN z5_YJoxZ)jz7M_qsi4@5{qaLj7sjL-$!aXOQ)v3Ryi!--0wPZ`$?G@wB{0`NoQ4|?X zrklF0ZjEJq%+i>av=)6hZ|`vM1o~i=LwCxo8d=?hWH+cxG!>h3U4Vu`#^R1BW01le z#H5VR2AnnL^XINVP4v$@afV6$q{^$H#Kc$|03Ou^@{u`+)K1Qx`|XB@H)-4vcT8jq zOt&~VY8pG}y@M6g!F=lQ1cFxiHQl9XE^^Z|OSnF>Z20W{}n#bEZ&roA<9&C+O7;~ul zLDKIOo-tUH&PAG@s}8!hKP5#ABFkW(`J3Y5(3I@#UC3I3A=%Wpt3xJ!PCkR`Hs`F3 zU{+!lAGJn_bR@k`DeoY3Zz}YQjP%~qSca$7H7 z=FKwP$xH3BISmO3xhsC(Rs55aB9=v@jDOqIxTN&8#4KhqKEUk=ka0wwvV5ZTSJqO=c#fKa&ZmgrpgdYr|EHihq9@suS6$u<(?)i1_eJ(*M}@o36I|~mHllk zDN>SO5xMgIdq1UUe?dtt!QM_-xBgBXwj+5A>?M`R8*}w=Ai#4sT^#wu%k^xjH3LwP z@FJEiaju9{Q*<2Hmp_;kqQf96U>5VOjxNU+^}xLqiOVgWo?g1}Vl{sjqL#33l=(`7 z7nzcdjG#!S=MIIXX=8G~g?)stz-V(LPM7!oz(Yi%7nqA5CM(3dzc66n;8%)9J^_#g z9Vo8Qb=GmLm2F_4@;5ptyp zseX|>HM3DT080B-*Br|xv}3WLZwB}}u8qLWqw)=ryix1%zeF=x6{F&Y=Q5*TsupID zSqfc@Ijjvta51XEnBv;ig-D;9VXdaEaT@VuELoGj67cRfN$Xx(P@hJj(=fVZ6ypT`TqEx5DI%F#@kpYa!RfEI@5~NWAUXPo?N;c1opMP+>8oCw=|CI5}A_O?3 zi0aj~G4i_CmxWcVcGdwI<<+JN4aMjY z?Ew4kf|`s+_e@Zvr5jex_GM2CJzm7CNFoO}3b7VS8Ir5pF4TGWiaZHhf*%c)F^90g z{as>tmJ>(o#coS4QR%#F7#<`sJ%G{bWVe%-eO3p{=V(Gh{p7(6Xp=$?0-*n$o=g7z zJwSu#Q~rU#9lq4`yO~w&x^GGR?@aR`z9TdE`&FT^LuL!X_w^%LK3_g)k3JA>ADn_dr#=?}d zIVtJ#SKC4Y-lk6O#zhO0iRg-KN*|cB?iG~&B^>cRay+g89nbxBLF5L! ziVeV)d5DV#8#Y#QXs!D^k=Il7d%C$EzD@ajHtNH#Ae&!Dek??C4wW*a?LzYk&H{oH z@ARwq-kCxRnYfmZ_sD?^*}Qppw&w_SjtQ+~z0BW&MAUB$E`m1pxxi66Catf-R|Ql` zH$JkEjlnd$K1HugV)taf)P90Mz-lA|C$jH<6W^WP5sO)d?V2`)iuLpZb=Vbnw%8_O zg?c7c$1hL^crzk_kpF6M_`f?Rv!3^`H6~vWeNZU=KE9sLRz4-vl_oTWWOnNYc$|=z zes{k(F81=CLErUGhv(hF>yqBDNW8{Yo{#15Q*9$Tx$nChs}EMSwWi-CthxIv2EQwl ziQesqcVuXOSyiG&A}4i=~gQzDiB&azTSyAw|s8 zvXj`|BGMVEw(~^6rM|6veD>Dw?sRG1$=)-I>Z>1`iTuh%+%KG zUPB%veMB15_m;5PmzPE_yHdk-Fr}bLWw0p28Ch>nmxV0+ zn#Y?)Gew!r@-<6jh!PZ5|Id57uO&l57Y{!fI%L zPMG;yQkt}!0jHx>C#eA!v7Fv+=IEn0MLSxYHeVI>RCF+sfRott16FaNguqPB8e!u7 zuBmm;=D_6I$&2I$Mw^B5m|K3xA)dn=q}OzqVh|})-&wtWe11w~vNQ4e^LGbpKTt`2 z{N2lQ&_T^LvRrD%-sdb?X~;8(m8$uh$t)u`_K{Np&Q`^dskqX^R`G{ocn+(KgOlDQq>;2qJ8U^h{rJ${_ zHa#ktoMUL=DQzNFiH*VQ+g6*qzd9NgQDL^Nl!w<%88oOfuLc=~sr*U2mdlhjtm#%^ z7xpg^H{of1z)l_tB?V8euWkOU);x0A_O{P!uzSbJXpN&wv8z83a!8I3?2Q-bViN5z z0(84u-k@?J;1jkE%H(Q+P=cMnuol~1+TK`YkklVEOPn_CMw3j@Z7Y>&;<7ig;M1KL|lwvwVTQP*d9A>z9P{q)C{dY=cuau0|mb)v#3~zpLz_&AKHcEas?NN1dV=r6 z`^w}*I)1)ZzR)}4D3z;&QuX}tQ4^XpDy6deZV2gw*8JNMN9Hb5y?4WF`|^3LwMFsd zjt!0#)P1=cs_H-0NEN}N0ED3Fzl2(MV2xqdUEQ}qPtaAY_u!p{G+y!kFb8E5w}qcI z+yj|aY8uDdI)U_0s?Tj{b30A!`$BcA$dw*h3Us>7$?CaCeMXq%@5&Hlt6^tOk`D7y zQBIrdnk?K=;Lm)`btj7WeH`&|-JDCRB%j(qbUFkIcZzDV@+W%E^uej+ZoMSkvR6x4 z_e@FD+NDV|MR4u5=(cNyxE$2H(uiOM$X?xsEPi4y>^T!&-Pa|+THlnME28O^l2Me# zc?2}+2me;9qc74V3BTX!=xJI@U*k+2%j*c!Po6iCI?Y+`jYAWJC(juXXh!@+G_~LN zxpCMMc~x0*LsLV->p^UlHK|8VO|3)2TtsnC!dwI<7fw(zr6&q3m`e$zk25)Q=AW%; zDS@9)JZuXppk$}X$rY^Ath-L6Ss6oXgHlJrK2q8jklqulWc(OtS#_Xc^Fl%76q2Xu z<)lZAwq)uaU-`m|9%rbkG#bZnwl{_vdab?Zn6f(o#+;<1sEZaMMM>2zn$!I%LA!##H1% z=1oE`+gq!iP7uwjZV)a}tTWNRPqE7!^~nMs!Cm?Vz^A7EY1S;&4K($JwYAA|^z;{1 z$MX`%!XK7n!}wDtMR9rp0;S|Lw_N?PQvCIV z8*T(3PV)dSe@Ao2rdL|&v(vmo6-~7zhhc^h|6rgjHRKHFyqwIu(d?jRh-PjUP*U4G zCqNPULymO5v83b3Pdi-c@p(9t6FTtf%=9{d?Z6`VYjFP6p)WW8* z_-^yUN(HzV@MLaF8b44lrX{lCwxJEuhH!8Ii4=79It#1xabz#69H%%#nR{p>zK0aN zSP{F3Y0447h`w5(TK4l6Aa%=O(EpAq@eIA%10kP2oni~-^v`xa{De0UvA^1Qja zWe5pB-&mO!=j|nnye6d?iER2IM>|yIBs%F28MLb8m{7+DCELPo4-QuJxfq^=%{O)d z;ah9M)>KRnRs)vddzr9;u+MO2@pPTsMU zNxFG|hoYI8Bg%EBcd#@tp8%G~h$wF{#|7>RcA_@JkLA8zn2PLxbt4^v4Q2-OQh#te zpDy(|W_bt?9l4CvL|h0&W{hnxmExcob7g{pf>UMX_lMYO&C%iOK(8gC3r%Z*RkJAW zgd>814F1Y)bA4;4j2!iwn7gZ%_0U`PR(GfOQuJ0rgfEUe?dZ)E^^M4-Z`1rzsx6M|#eQ3+dz6dXb>N$*&JMX8d_gULmSIknncPPdys zo#SRLkp94RU&-~<(tq!{Odw6WY@7HE>ZjS8Rl8U|iS%B`fyCPD{3SeD9Zo4FnO zHKRtZrHRxn5suI>E3wl#C(lll(puomaA{?!$uYZq4j6U5ldE!;*0zwS(HIvx9vPw0|5TC-55bzd2hAduVVBL!bx=_P2-0q z0-Upv_42l$#z>uW!-= zArMFhu2IBSA&B2*LW^Hwv&fo%%+5Z zkzdUs_O$MAH2wNM&C}wPKf3)hTh=iHbm8kO8Ga{k*uGNYD%7&hQ)x~Q@5tWu5!UgO z#j`qeKvR+)>=&8b%Lh6Og$u91iFpe5CiIeMl^++?$QBlVEH2(?q^VyL+vIan0;_*f zv>EKP=eWG^3*c+|eEWQV*|L5qdCQl$k*ldpJ*Dj6UW${M|NHf|t({YCQ@;Qn2W`@i zuJeBsF#5$45qPm)VBFTo%Pk~iAeg$pZ9F7I-e7OT9A7|I!W$(_+cSH3@;Jv8UYgpO z*FaQzzUf%lZimEGFlGSK-n{s_Mb}A9=32F4JIrl!=lZ7T@)cD!$VWoc-08Di%w1v_SE>zc6h>O8UkrNGjM% zQWD=k+?&^sP9R@<`B=v2ZPIy_E}4qHE$XN^@D%>Ww87;4(vL>fCgyw_F@&MghC;OE zg~3TA(sHoMaB8~x+^)l5Y9A-J4f#f|7jON>b5BGktq~=rq6}j*iIP-q8$Zw^ciaAN zh>8fg-w3~1?{^LquHX+`1y&WnDIM&ZnXVWZv042CD>MdI8%_x=;flYp`5~6U3BFCTX#LOBt4ys)%hbZjA$du2 z437asx+1I&Fwl-ODCDdiN zgy~YbF%nGhfzH{js3J`XCyPrxji3329Q0d(hJB0KFzU&A<`{PXVs2xhzk9zV5gubY zE$I_&4hF}f*XqWevcn&&_QZ)9F+_!8k~%N0nxrI#>{8;4zw+P|b(AOzlR`0g8DZh7 z3d!&1cW1Ybo1dmh{INZ%l%t(XRiQ|}X_i)u-_4tg;POeo4yLynn6pp4ejKZV0Z4H} zh4D~f8Pn7ik1CN)(TSfO104>bX|BN<$3v;?9J&f3eO5s0?2!oJQuq8%GXIY{`u~4g zeX8v`nA^-&ZT`q$|2y^Q@f0v99s20pwc3#~S??qv=$6R8*W8Z?MEO;7KS#WE)O79a zIih-;$Y|sr2q1U}o~hnxWo#=q5p|RdfwUDO$JSAL<*QwyiIHE$sM368zHznv+rs}; zWLYgjH3ax`06jyTb4VOXTs%N2Ggr~~VR)13{Xifymn4DeDnlMZ3$z~#Bh8z(W=PNP z3kpG-_}PFVRHI)j{iDB9)BDKL)O>9j!jvqQ94_ z{bfEhyBvKu_Gc{+UmxBcZtGtC^Q8TBI1ewdPUUAC@mu=nAR;Miz+^p|KZ!m|6rxIb%deLZe@`S`{`Zb5Bbj;xj8 ztk%h^)@v&K-PVu)Y5eZ@H=ALOMRxqVGfYJz2b zcf{;==yHLe$T0P)Ifd^M|G!w0|8u*y*IQ}}w+|0@_FZ;P-A;G*hzYt||DSUE@67)K D-wq=1 literal 0 HcmV?d00001 From 2f10e057e22734389a6e3ea035c07d70c455ce77 Mon Sep 17 00:00:00 2001 From: Evgeny Date: Wed, 1 Jul 2026 13:42:26 +0100 Subject: [PATCH 80/81] feat(directory): harden group member admission (#7180) * feat(directory): harden group member admission Default new registered groups to requiring a captcha and advise owners of recommended public-group settings at registration submission. Add CLI flags to override per-group admission policy directory-wide: - --prohibited-to-observer: delete a member's message and demote them to observer when they post content prohibited by the group's settings - --always-captcha: require a captcha from joining members in all groups - --knocking: require admin review before admitting members in all groups * fix(directory): reword recommended settings notice Address review: replace the enumerated settings list with a concise recommendation and reference the group's filter command by id. --------- Co-authored-by: shum --- .../src/Directory/Events.hs | 8 +- .../src/Directory/Options.hs | 21 ++ .../src/Directory/Service.hs | 46 +++- .../src/Directory/Store.hs | 11 + tests/Bots/DirectoryTests.hs | 238 +++++++++++------- 5 files changed, 226 insertions(+), 98 deletions(-) diff --git a/apps/simplex-directory-service/src/Directory/Events.hs b/apps/simplex-directory-service/src/Directory/Events.hs index bfbc025a49..3bff611a28 100644 --- a/apps/simplex-directory-service/src/Directory/Events.hs +++ b/apps/simplex-directory-service/src/Directory/Events.hs @@ -27,7 +27,7 @@ import qualified Data.Attoparsec.Text as A import Data.Char (isSpace) import Data.Either (fromRight) import Data.Functor (($>)) -import Data.Maybe (fromMaybe) +import Data.Maybe (fromMaybe, isNothing) import Data.Text (Text) import qualified Data.Text as T import Data.Text.Encoding (encodeUtf8) @@ -38,6 +38,7 @@ import Simplex.Chat.Messages import Simplex.Chat.Messages.CIContent import Simplex.Chat.Protocol (LinkOwnerSig, MsgChatLink, MsgContent (..)) import Simplex.Chat.Types +import Simplex.Chat.Types.Preferences (GroupFeature) import Simplex.Chat.Types.Shared import Simplex.Messaging.Agent.Protocol (AgentErrorType (..)) import Simplex.Messaging.Encoding.String @@ -52,6 +53,7 @@ data DirectoryEvent | DEGroupLinkCheck GroupInfo | DEPendingMember GroupInfo GroupMember | DEPendingMemberMsg GroupInfo GroupMember ChatItemId Text + | DEGroupItemProhibited GroupInfo GroupMember ChatItemId GroupFeature -- a member posted content prohibited by the group's settings | DEContactRoleChanged GroupInfo ContactId GroupMemberRole -- contactId here is the contact whose role changed | DEServiceRoleChanged GroupInfo GroupMemberRole | DEContactRemovedFromGroup ContactId GroupInfo @@ -84,8 +86,10 @@ crDirectoryEvent_ = \case CEvtJoinedGroupMember {groupInfo, member = m} | pending m -> Just $ DEPendingMember groupInfo m | otherwise -> Nothing - CEvtNewChatItems {chatItems = AChatItem _ _ (GroupChat g _scopeInfo) ci : _} -> case ci of + CEvtNewChatItems {chatItems = AChatItem _ _ (GroupChat g scopeInfo) ci : _} -> case ci of ChatItem {chatDir = CIGroupRcv m, content = CIRcvMsgContent (MCText t)} | pending m -> Just $ DEPendingMemberMsg g m (chatItemId' ci) t + -- only moderate prohibited content in the main group, not in member-support/onboarding scope + ChatItem {chatDir = CIGroupRcv m, content = CIRcvGroupFeatureRejected gf} | isNothing scopeInfo -> Just $ DEGroupItemProhibited g m (chatItemId' ci) gf _ -> Nothing CEvtMemberRole {groupInfo, member, toRole} | groupMemberId' member == groupMemberId' (membership groupInfo) -> Just $ DEServiceRoleChanged groupInfo toRole diff --git a/apps/simplex-directory-service/src/Directory/Options.hs b/apps/simplex-directory-service/src/Directory/Options.hs index 5d51023781..23115ec7c7 100644 --- a/apps/simplex-directory-service/src/Directory/Options.hs +++ b/apps/simplex-directory-service/src/Directory/Options.hs @@ -44,6 +44,9 @@ data DirectoryOpts = DirectoryOpts searchResults :: Int, webFolder :: Maybe FilePath, linkCheckInterval :: Int, + prohibitedToObserver :: Bool, + alwaysCaptcha :: Bool, + knocking :: Bool, testing :: Bool } @@ -177,6 +180,21 @@ directoryOpts appDir defaultDbName = do <> help "Interval in seconds to check public group link data (default: 1800)" <> value 1800 ) + prohibitedToObserver <- + switch + ( long "prohibited-to-observer" + <> help "Set a member to observer (and delete the message) when they post content prohibited by the group's settings" + ) + alwaysCaptcha <- + switch + ( long "always-captcha" + <> help "Require a captcha from joining members in all groups, regardless of per-group filter settings" + ) + knocking <- + switch + ( long "knocking" + <> help "Require admin review (knocking) before joining members are admitted in all groups, regardless of group preference" + ) pure DirectoryOpts { coreOptions, @@ -199,6 +217,9 @@ directoryOpts appDir defaultDbName = do searchResults = 10, webFolder, linkCheckInterval, + prohibitedToObserver, + alwaysCaptcha, + knocking, testing = False } diff --git a/apps/simplex-directory-service/src/Directory/Service.hs b/apps/simplex-directory-service/src/Directory/Service.hs index 63e1a0ff69..bedcb87da3 100644 --- a/apps/simplex-directory-service/src/Directory/Service.hs +++ b/apps/simplex-directory-service/src/Directory/Service.hs @@ -271,7 +271,7 @@ directoryService st opts cfg = do acceptMemberHook :: DirectoryOpts -> ServiceState -> GroupInfo -> GroupLinkInfo -> Profile -> IO (Either GroupRejectionReason (GroupAcceptance, GroupMemberRole)) acceptMemberHook - DirectoryOpts {profileNameLimit} + DirectoryOpts {profileNameLimit, alwaysCaptcha, knocking} ServiceState {blockedWordsCfg} g GroupLinkInfo {memberRole} @@ -280,7 +280,8 @@ acceptMemberHook when (useMemberFilter img $ rejectNames a) checkName pure $ if - | useMemberFilter img (passCaptcha a) -> (GAPendingApproval, GRMember) + | knocking -> (GAPendingReview, memberRole) + | alwaysCaptcha || useMemberFilter img (passCaptcha a) -> (GAPendingApproval, GRMember) | useMemberFilter img (makeObserver a) -> (GAAccepted, GRObserver) | otherwise -> (GAAccepted, memberRole) where @@ -294,6 +295,11 @@ acceptMemberHook groupMemberAcceptance :: GroupInfo -> DirectoryMemberAcceptance groupMemberAcceptance GroupInfo {customData} = (\DirectoryGroupData {memberAcceptance = ma} -> ma) $ fromCustomData customData +recommendedSettingsNotice :: UserGroupRegId -> Text +recommendedSettingsNotice userGroupId = + "We recommend allowing direct messages, media, voice, and SimpleX links only for group moderators and admins. Use group preferences to set them.\n\ + \Captcha verification is enabled. Use /'filter " <> tshow userGroupId <> "' to change it." + useMemberFilter :: Maybe ImageData -> Maybe ProfileCondition -> Bool useMemberFilter img_ = \case Just PCAll -> True @@ -311,7 +317,7 @@ readBlockedWordsConfig DirectoryOpts {blockedFragmentsFile, blockedWordsFile, na pure BlockedWordsConfig {blockedFragments, blockedWords, extensionRules, spelling} directoryServiceEvent :: DirectoryLog -> DirectoryOpts -> ServiceState -> User -> ChatController -> DirectoryEvent -> IO () -directoryServiceEvent st opts@DirectoryOpts {adminUsers, superUsers, serviceName, ownersGroup, searchResults} env@ServiceState {searchRequests} user@User {userId} cc = \case +directoryServiceEvent st opts@DirectoryOpts {adminUsers, superUsers, serviceName, ownersGroup, searchResults, prohibitedToObserver, alwaysCaptcha} env@ServiceState {searchRequests} user@User {userId} cc = \case DEContactConnected ct -> deContactConnected ct DEGroupInvitation {contact = ct, groupInfo = g, fromMemberRole, memberRole} -> deGroupInvitation ct g fromMemberRole memberRole DEServiceJoinedGroup ctId g owner -> deServiceJoinedGroup ctId g owner @@ -319,6 +325,7 @@ directoryServiceEvent st opts@DirectoryOpts {adminUsers, superUsers, serviceName DEGroupLinkCheck g -> deGroupLinkCheck g DEPendingMember g m -> dePendingMember g m DEPendingMemberMsg g m ciId t -> dePendingMemberMsg g m ciId t + DEGroupItemProhibited g m ciId gf -> when prohibitedToObserver $ deGroupItemProhibited g m ciId gf DEContactRoleChanged g ctId role -> deContactRoleChanged g ctId role DEServiceRoleChanged g role -> deServiceRoleChanged g role DEContactRemovedFromGroup ctId g -> deContactRemovedFromGroup ctId g @@ -404,7 +411,7 @@ directoryServiceEvent st opts@DirectoryOpts {adminUsers, superUsers, serviceName processInvitation :: Contact -> GroupInfo -> Maybe GroupReg -> IO () processInvitation ct g@GroupInfo {groupId, groupProfile = GroupProfile {displayName}} = \case - Nothing -> addGroupReg notifyAdminUsers st cc ct g GRSProposed joinGroup + Nothing -> addGroupReg notifyAdminUsers st cc user ct g GRSProposed joinGroup Just _gr -> setGroupStatus notifyAdminUsers st env cc groupId GRSProposed joinGroup where joinGroup _ = do @@ -436,7 +443,7 @@ directoryServiceEvent st opts@DirectoryOpts {adminUsers, superUsers, serviceName Left e -> sendMessage cc ct $ "Error: getDuplicateGroup. Please notify the developers.\n" <> T.pack e where askConfirmation = - addGroupReg notifyAdminUsers st cc ct g GRSPendingConfirmation $ \GroupReg {userGroupRegId} -> do + addGroupReg notifyAdminUsers st cc user ct g GRSPendingConfirmation $ \GroupReg {userGroupRegId} -> do sendMessage cc ct $ "The group " <> groupNameDescr p <> " is already submitted to the directory.\nTo confirm the registration, please send:" sendMessage cc ct $ "/confirm " <> tshow userGroupRegId <> ":" <> viewName displayName @@ -488,6 +495,7 @@ directoryServiceEvent st opts@DirectoryOpts {adminUsers, superUsers, serviceName \Please add it to the group welcome message.\n\ \For example, add:" notifyOwner gr' $ "Link to join the group " <> displayName <> ": " <> groupLinkText gLink + notifyOwner gr' $ recommendedSettingsNotice (userGroupRegId gr') Left (ChatError e) -> case e of CEGroupUserRole {} -> notifyOwner gr "Failed creating group link, as service is no longer an admin." CEGroupMemberUserRemoved -> notifyOwner gr "Failed creating group link, as service is removed from the group." @@ -650,6 +658,19 @@ directoryServiceEvent st opts@DirectoryOpts {adminUsers, superUsers, serviceName "Captcha is generated by SimpleX Directory service.\n\n*Send captcha text* to join the group " <> displayName <> "." <> if canSendVoiceCaptcha g m then "\nSend /audio to receive a voice captcha." else "" + -- gated by --prohibited-to-observer at the dispatch above + deGroupItemProhibited :: GroupInfo -> GroupMember -> ChatItemId -> GroupFeature -> IO () + deGroupItemProhibited GroupInfo {groupId} m@GroupMember {memberRole} ciId gf = + when (memberRole == GRMember) $ do + let gmId = groupMemberId' m + logInfo $ "Member " <> tshow gmId <> " posted prohibited content (" <> tshow gf <> ") in group " <> tshow groupId <> "; deleting and setting to observer" + sendChatCmd cc (APIDeleteMemberChatItem groupId [ciId]) >>= \case + Right CRChatItemsDeleted {} -> pure () + r -> logError $ "deGroupItemProhibited: unexpected delete response: " <> tshow r + sendChatCmd cc (APIMembersRole groupId [gmId] GRObserver) >>= \case + Right CRMembersRoleUser {} -> pure () -- empty members = already observer (idempotent), still success + r -> logError $ "deGroupItemProhibited: unexpected set observer response: " <> tshow r + sendMemberCaptcha :: GroupInfo -> GroupMember -> Maybe ChatItemId -> Text -> Int -> CaptchaMode -> IO () sendMemberCaptcha GroupInfo {groupId} m quotedId noticeText prevAttempts mode = do s <- getCaptchaStr captchaLength "" @@ -776,7 +797,7 @@ directoryServiceEvent st opts@DirectoryOpts {adminUsers, superUsers, serviceName memberRequiresCaptcha :: DirectoryMemberAcceptance -> GroupMember -> Bool memberRequiresCaptcha a GroupMember {memberProfile = LocalProfile {image}} = - useMemberFilter image $ passCaptcha a + alwaysCaptcha || useMemberFilter image (passCaptcha a) sendToApprove :: GroupInfo -> GroupReg -> GroupApprovalId -> IO () sendToApprove GroupInfo {groupId, groupProfile = p@GroupProfile {displayName, image = image', publicGroup = pg_}, groupSummary} GroupReg {dbContactId, promoted} gaId = do @@ -982,7 +1003,7 @@ directoryServiceEvent st opts@DirectoryOpts {adminUsers, superUsers, serviceName sendChatCmd cc (APIPrepareGroup userId ccLink False groupSLinkData) >>= \case Right (CRNewPreparedChat _ (AChat SCTGroup (Chat (GroupChat gInfo _) _ _))) -> do let gId = groupId' gInfo - addGroupReg notifyAdminUsers st cc ct gInfo GRSProposed $ \_ -> pure () + addGroupReg notifyAdminUsers st cc user ct gInfo GRSProposed $ \_ -> pure () sendChatCmd cc (APIConnectPreparedGroup gId False (Just ownerContact) Nothing) >>= \case Right CRStartedConnectionToGroup {groupInfo = gInfo'} -> withDB "getGroupMember" cc (\db -> withExceptT show $ getGroupMemberByMemberId db (storeCxt cc) user gInfo' mId) >>= \case @@ -1007,7 +1028,7 @@ directoryServiceEvent st opts@DirectoryOpts {adminUsers, superUsers, serviceName | contactId' ct `isOwner` gr -> sameOwnerReregistration gr gt | otherwise -> sendMessage cc ct $ "This " <> gt <> " is registered by another owner." Left _ -> - addGroupReg notifyAdminUsers st cc ct g (GRSPendingApproval 1) $ \gr -> do + addGroupReg notifyAdminUsers st cc user ct g (GRSPendingApproval 1) $ \gr -> do void $ setGroupRegOwner cc groupId ownerMember sendToApprove g gr 1 | role < GROwner -> sendMessage cc ct $ "You must be the " <> gt <> " owner to register it." @@ -1045,6 +1066,7 @@ directoryServiceEvent st opts@DirectoryOpts {adminUsers, superUsers, serviceName in if role >= GROwner then setGroupStatus notifyAdminUsers st env cc groupId (GRSPendingApproval 1) $ \gr' -> do notifyOwner gr' $ "Joined the " <> gt <> " " <> displayName <> ". Registration is pending approval — it may take up to 48 hours." + notifyOwner gr' $ recommendedSettingsNotice (userGroupRegId gr') sendToApprove g gr' 1 else do setGroupStatus notifyAdminUsers st env cc groupId GRSRemoved $ \_ -> pure () @@ -1484,12 +1506,16 @@ setGroupStatusPromo sendReply st env cc GroupReg {dbGroupId = gId} grStatus' grP logGUpdatePromotion st gId grPromoted' continue -addGroupReg :: (Text -> IO ()) -> DirectoryLog -> ChatController -> Contact -> GroupInfo -> GroupRegStatus -> (GroupReg -> IO ()) -> IO () -addGroupReg sendMsg st cc ct g@GroupInfo {groupId} grStatus continue = +addGroupReg :: (Text -> IO ()) -> DirectoryLog -> ChatController -> User -> Contact -> GroupInfo -> GroupRegStatus -> (GroupReg -> IO ()) -> IO () +addGroupReg sendMsg st cc user ct g@GroupInfo {groupId} grStatus continue = addGroupRegStore cc ct g grStatus >>= \case Left e -> sendMsg $ "Error creating group registation for group " <> tshow groupId <> ": " <> T.pack e Right gr -> do logGCreate st gr + let d = toCustomData $ DirectoryGroupData newGroupJoinFilter + withDB' "setGroupCustomData" cc (\db -> setGroupCustomData db user g $ Just d) >>= \case + Right () -> pure () + Left e -> sendMsg $ "Error setting default captcha for group " <> tshow groupId <> ": " <> T.pack e continue gr setGroupStatus :: (Text -> IO ()) -> DirectoryLog -> ServiceState -> ChatController -> GroupId -> GroupRegStatus -> (GroupReg -> IO ()) -> IO () diff --git a/apps/simplex-directory-service/src/Directory/Store.hs b/apps/simplex-directory-service/src/Directory/Store.hs index 89c5178f7d..a9a9788e0f 100644 --- a/apps/simplex-directory-service/src/Directory/Store.hs +++ b/apps/simplex-directory-service/src/Directory/Store.hs @@ -52,6 +52,7 @@ module Directory.Store basicJoinFilter, moderateJoinFilter, strongJoinFilter, + newGroupJoinFilter, groupDBError, logGCreate, logGDelete, @@ -164,6 +165,16 @@ strongJoinFilter = makeObserver = Nothing } +-- Default applied to newly registered groups: a captcha challenge is required +-- from every joining member unless the owner changes it with /filter. +newGroupJoinFilter :: DirectoryMemberAcceptance +newGroupJoinFilter = + DirectoryMemberAcceptance + { rejectNames = Nothing, + passCaptcha = Just PCAll, + makeObserver = Nothing + } + type UserGroupRegId = Int64 type GroupApprovalId = Int64 diff --git a/tests/Bots/DirectoryTests.hs b/tests/Bots/DirectoryTests.hs index cd6d549581..438a3f9802 100644 --- a/tests/Bots/DirectoryTests.hs +++ b/tests/Bots/DirectoryTests.hs @@ -74,6 +74,9 @@ directoryServiceTests = do describe "list and promote groups" $ do it "should list and promote user's groups" $ testListUserGroups True describe "member admission" $ do + it "should require captcha by default for new groups" testCaptchaByDefault + it "should require captcha in all groups with --always-captcha" testAlwaysCaptcha + it "should require admin review in all groups with --knocking" testKnocking it "should ask member to pass captcha screen" testCapthaScreening it "should send voice captcha on /audio command" testVoiceCaptchaScreening it "should retry with voice captcha after switching to audio mode" testVoiceCaptchaRetry @@ -133,6 +136,9 @@ mkDirectoryOpts TestParams {tmpPath = ps} superUsers ownersGroup webFolder = searchResults = 3, webFolder, linkCheckInterval = 0, + prohibitedToObserver = False, + alwaysCaptcha = False, + knocking = False, testing = True } @@ -169,6 +175,8 @@ testDirectoryService ps = bob <## "Please add it to the group welcome message." bob <## "For example, add:" welcomeWithLink <- dropStrPrefix "'SimpleX Directory'> " . dropTime <$> getTermLine bob + bob <# "'SimpleX Directory'> We recommend allowing direct messages, media, voice, and SimpleX links only for group moderators and admins. Use group preferences to set them." + bob <## "Captcha verification is enabled. Use /'filter 1' to change it." -- putStrLn "*** update profile without link" updateGroupProfile bob "Welcome!" bob <# "'SimpleX Directory'> The profile updated for ID 1 (PSA), but the group link is not added to the welcome message." @@ -396,6 +404,14 @@ testSetRole ps = cath ##> ("/c " <> groupLink) cath <## "connection request sent!" cath <## "#privacy: joining the group..." + cath <## "#privacy: you joined the group, pending approval" + cath <# "#privacy (support) 'SimpleX Directory'> Captcha is generated by SimpleX Directory service." + cath <## "" + cath <## "Send captcha text to join the group privacy." + captcha <- dropStrPrefix "#privacy (support) 'SimpleX Directory'> " . dropTime <$> getTermLine cath + cath #> ("#privacy (support) " <> captcha) + cath <# ("#privacy (support) 'SimpleX Directory'!> > cath " <> captcha) + cath <## " Correct, you joined the group privacy" cath <## "#privacy: you joined the group" cath <#. "#privacy 'SimpleX Directory'> Link to join the group privacy: https://localhost/g#" cath <## "#privacy: member bob (Bob) is connected" @@ -428,12 +444,18 @@ testJoinGroup ps = cath ##> ("/c " <> groupLink) cath <## "connection request sent!" cath <## "#privacy: joining the group..." + cath <## "#privacy: you joined the group, pending approval" + cath <# "#privacy (support) 'SimpleX Directory_1'> Captcha is generated by SimpleX Directory service." + cath <## "" + cath <## "Send captcha text to join the group privacy." + captcha <- dropStrPrefix "#privacy (support) 'SimpleX Directory_1'> " . dropTime <$> getTermLine cath + cath #> ("#privacy (support) " <> captcha) + cath <## "contact and member are merged: 'SimpleX Directory', #privacy 'SimpleX Directory_1'" + cath <## "use @'SimpleX Directory' to send messages" + cath <# ("#privacy (support) 'SimpleX Directory'!> > cath " <> captcha) + cath <## " Correct, you joined the group privacy" cath <## "#privacy: you joined the group" - cath - <### [ "contact and member are merged: 'SimpleX Directory', #privacy 'SimpleX Directory_1'", - "use @'SimpleX Directory' to send messages", - Predicate (\l -> l == welcomeMsg || dropTime_ l == Just ("#privacy 'SimpleX Directory'> " <> welcomeMsg) || dropTime_ l == Just ("#privacy 'SimpleX Directory_1'> " <> welcomeMsg)) - ] + cath <#. "#privacy 'SimpleX Directory'> Link to join the group privacy: https://" cath <## "#privacy: member bob (Bob) is connected" bob <## "#privacy: 'SimpleX Directory' added cath (Catherine) to the group (connecting...)" bob <## "#privacy: new member cath is connected" @@ -788,7 +810,7 @@ testNotSentApprovalBadRoles ps = bob `connectVia` dsLink cath `connectVia` dsLink submitGroup bob "privacy" "Privacy" - welcomeWithLink <- groupAccepted bob "privacy" + welcomeWithLink <- groupAccepted bob "privacy" 1 bob ##> "/mr privacy 'SimpleX Directory' member" bob <## "#privacy: you changed the role of 'SimpleX Directory' to member" updateProfileWithLink bob "privacy" welcomeWithLink 1 @@ -811,7 +833,7 @@ testNotApprovedBadRoles ps = bob `connectVia` dsLink cath `connectVia` dsLink submitGroup bob "privacy" "Privacy" - welcomeWithLink <- groupAccepted bob "privacy" + welcomeWithLink <- groupAccepted bob "privacy" 1 updateProfileWithLink bob "privacy" welcomeWithLink 1 notifySuperUser superUser bob "privacy" "Privacy" welcomeWithLink 1 bob ##> "/mr privacy 'SimpleX Directory' member" @@ -1019,14 +1041,14 @@ testDuplicateAskConfirmation ps = withNewTestChat ps "cath" cathProfile $ \cath -> do bob `connectVia` dsLink submitGroup bob "privacy" "Privacy" - _ <- groupAccepted bob "privacy" + _ <- groupAccepted bob "privacy" 1 cath `connectVia` dsLink submitGroup cath "privacy" "Privacy" cath <# "'SimpleX Directory'> The group privacy (Privacy) is already submitted to the directory." cath <## "To confirm the registration, please send:" cath <# "'SimpleX Directory'> /confirm 1:privacy" cath #> "@'SimpleX Directory' /confirm 1:privacy" - welcomeWithLink <- groupAccepted cath "privacy" + welcomeWithLink <- groupAccepted cath "privacy" 1 groupNotFound bob "privacy" completeRegistrationId superUser cath "privacy" "Privacy" welcomeWithLink 2 1 groupFound bob "privacy" @@ -1050,7 +1072,7 @@ testDuplicateProhibitConfirmation ps = withNewTestChat ps "cath" cathProfile $ \cath -> do bob `connectVia` dsLink submitGroup bob "privacy" "Privacy" - welcomeWithLink <- groupAccepted bob "privacy" + welcomeWithLink <- groupAccepted bob "privacy" 1 cath `connectVia` dsLink submitGroup cath "privacy" "Privacy" cath <# "'SimpleX Directory'> The group privacy (Privacy) is already submitted to the directory." @@ -1069,14 +1091,14 @@ testDuplicateProhibitWhenUpdated ps = withNewTestChat ps "cath" cathProfile $ \cath -> do bob `connectVia` dsLink submitGroup bob "privacy" "Privacy" - welcomeWithLink <- groupAccepted bob "privacy" + welcomeWithLink <- groupAccepted bob "privacy" 1 cath `connectVia` dsLink submitGroup cath "privacy" "Privacy" cath <# "'SimpleX Directory'> The group privacy (Privacy) is already submitted to the directory." cath <## "To confirm the registration, please send:" cath <# "'SimpleX Directory'> /confirm 1:privacy" cath #> "@'SimpleX Directory' /confirm 1:privacy" - welcomeWithLink' <- groupAccepted cath "privacy" + welcomeWithLink' <- groupAccepted cath "privacy" 1 groupNotFound cath "privacy" completeRegistration superUser bob "privacy" "Privacy" welcomeWithLink 1 groupFound cath "privacy" @@ -1100,14 +1122,14 @@ testDuplicateProhibitApproval ps = withNewTestChat ps "cath" cathProfile $ \cath -> do bob `connectVia` dsLink submitGroup bob "privacy" "Privacy" - welcomeWithLink <- groupAccepted bob "privacy" + welcomeWithLink <- groupAccepted bob "privacy" 1 cath `connectVia` dsLink submitGroup cath "privacy" "Privacy" cath <# "'SimpleX Directory'> The group privacy (Privacy) is already submitted to the directory." cath <## "To confirm the registration, please send:" cath <# "'SimpleX Directory'> /confirm 1:privacy" cath #> "@'SimpleX Directory' /confirm 1:privacy" - welcomeWithLink' <- groupAccepted cath "privacy" + welcomeWithLink' <- groupAccepted cath "privacy" 1 updateProfileWithLink cath "privacy" welcomeWithLink' 1 notifySuperUser superUser cath "privacy" "Privacy" welcomeWithLink' 2 groupNotFound cath "privacy" @@ -1194,6 +1216,100 @@ checkListings listed promoted = do map groupName gs `shouldBe` expected groupName DirectoryEntry {displayName} = displayName +testAlwaysCaptcha :: HasCallStack => TestParams -> IO () +testAlwaysCaptcha ps = + withDirectoryServiceOpts ps (\o -> o {alwaysCaptcha = True}) $ \superUser dsLink -> + withNewTestChat ps "bob" bobProfile $ \bob -> + withNewTestChat ps "cath" cathProfile $ \cath -> do + bob `connectVia` dsLink + registerGroup superUser bob "privacy" "Privacy" + -- disable the per-group captcha filter; --always-captcha must still force it + bob #> "@'SimpleX Directory' /filter 1 off" + bob <# "'SimpleX Directory'> > /filter 1 off" + bob <## " Spam filter settings for group privacy set to:" + bob <## "- reject long/inappropriate names: disabled" + bob <## "- pass captcha to join: disabled" + bob <## "" + bob <## "/'filter 1 name' - enable name filter" + bob <## "/'filter 1 captcha' - enable captcha challenge" + bob <## "/'filter 1 name captcha' - enable both" + bob #> "@'SimpleX Directory' /role 1" + bob <# "'SimpleX Directory'> > /role 1" + bob <## " The initial member role for the group privacy is set to member" + bob <## "Send /'role 1 observer' to change it." + bob <## "" + note <- getTermLine bob + let groupLink = dropStrPrefix "Please note: it applies only to members joining via this link: " note + cath ##> ("/c " <> groupLink) + cath <## "connection request sent!" + cath <## "#privacy: joining the group..." + cath <## "#privacy: you joined the group, pending approval" + cath <# "#privacy (support) 'SimpleX Directory'> Captcha is generated by SimpleX Directory service." + cath <## "" + cath <## "Send captcha text to join the group privacy." + captcha <- dropStrPrefix "#privacy (support) 'SimpleX Directory'> " . dropTime <$> getTermLine cath + cath #> ("#privacy (support) " <> captcha) + cath <# ("#privacy (support) 'SimpleX Directory'!> > cath " <> captcha) + cath <## " Correct, you joined the group privacy" + cath <## "#privacy: you joined the group" + cath <#. "#privacy 'SimpleX Directory'> Link to join the group privacy: https://" + cath <## "#privacy: member bob (Bob) is connected" + bob <## "#privacy: 'SimpleX Directory' added cath (Catherine) to the group (connecting...)" + bob <## "#privacy: new member cath is connected" + +testKnocking :: HasCallStack => TestParams -> IO () +testKnocking ps = + withDirectoryServiceOpts ps (\o -> o {knocking = True}) $ \superUser dsLink -> + withNewTestChat ps "bob" bobProfile $ \bob -> + withNewTestChat ps "cath" cathProfile $ \cath -> do + bob `connectVia` dsLink + registerGroup superUser bob "privacy" "Privacy" + bob #> "@'SimpleX Directory' /role 1" + bob <# "'SimpleX Directory'> > /role 1" + bob <## " The initial member role for the group privacy is set to member" + bob <## "Send /'role 1 observer' to change it." + bob <## "" + note <- getTermLine bob + let groupLink = dropStrPrefix "Please note: it applies only to members joining via this link: " note + cath ##> ("/c " <> groupLink) + cath <## "connection request sent!" + cath <## "#privacy: joining the group..." + cath <## "#privacy: you joined the group, connecting to group moderators for admission to group" + cath <## "#privacy: 'SimpleX Directory' accepted you to the group, pending review" + bob <## "#privacy: 'SimpleX Directory' added cath (Catherine) to the group (connecting and pending review...), use /_accept member #1 3 to accept member" + +testCaptchaByDefault :: HasCallStack => TestParams -> IO () +testCaptchaByDefault ps = + withDirectoryService ps $ \superUser dsLink -> + withNewTestChat ps "bob" bobProfile $ \bob -> + withNewTestChat ps "cath" cathProfile $ \cath -> do + bob `connectVia` dsLink + registerGroup superUser bob "privacy" "Privacy" + -- the owner never ran /filter; captcha is on by default for new groups + bob #> "@'SimpleX Directory' /role 1" + bob <# "'SimpleX Directory'> > /role 1" + bob <## " The initial member role for the group privacy is set to member" + bob <## "Send /'role 1 observer' to change it." + bob <## "" + note <- getTermLine bob + let groupLink = dropStrPrefix "Please note: it applies only to members joining via this link: " note + cath ##> ("/c " <> groupLink) + cath <## "connection request sent!" + cath <## "#privacy: joining the group..." + cath <## "#privacy: you joined the group, pending approval" + cath <# "#privacy (support) 'SimpleX Directory'> Captcha is generated by SimpleX Directory service." + cath <## "" + cath <## "Send captcha text to join the group privacy." + captcha <- dropStrPrefix "#privacy (support) 'SimpleX Directory'> " . dropTime <$> getTermLine cath + cath #> ("#privacy (support) " <> captcha) + cath <# ("#privacy (support) 'SimpleX Directory'!> > cath " <> captcha) + cath <## " Correct, you joined the group privacy" + cath <## "#privacy: you joined the group" + cath <#. "#privacy 'SimpleX Directory'> Link to join the group privacy: https://" + cath <## "#privacy: member bob (Bob) is connected" + bob <## "#privacy: 'SimpleX Directory' added cath (Catherine) to the group (connecting...)" + bob <## "#privacy: new member cath is connected" + testCapthaScreening :: HasCallStack => TestParams -> IO () testCapthaScreening ps = withDirectoryService ps $ \superUser dsLink -> @@ -1209,16 +1325,6 @@ testCapthaScreening ps = bob <## "" note <- getTermLine bob let groupLink = dropStrPrefix "Please note: it applies only to members joining via this link: " note - -- enable captcha - bob #> "@'SimpleX Directory' /filter 1 captcha" - bob <# "'SimpleX Directory'> > /filter 1 captcha" - bob <## " Spam filter settings for group privacy set to:" - bob <## "- reject long/inappropriate names: disabled" - bob <## "- pass captcha to join: enabled" - bob <## "" - bob <## "/'filter 1 name' - enable name filter" - bob <## "/'filter 1 name captcha' - enable both" - bob <## "/'filter 1 off' - disable filter" -- connect with captcha screen _ <- join cath groupLink cath #> "#privacy (support) 123" -- sending incorrect captcha @@ -1307,16 +1413,6 @@ testVoiceCaptchaScreening ps@TestParams {tmpPath} = do bob <## "" note <- getTermLine bob let groupLink = dropStrPrefix "Please note: it applies only to members joining via this link: " note - -- enable captcha - bob #> "@'SimpleX Directory' /filter 1 captcha" - bob <# "'SimpleX Directory'> > /filter 1 captcha" - bob <## " Spam filter settings for group privacy set to:" - bob <## "- reject long/inappropriate names: disabled" - bob <## "- pass captcha to join: enabled" - bob <## "" - bob <## "/'filter 1 name' - enable name filter" - bob <## "/'filter 1 name captcha' - enable both" - bob <## "/'filter 1 off' - disable filter" -- cath joins, receives text captcha with /audio hint cath ##> ("/c " <> groupLink) cath <## "connection request sent!" @@ -1376,15 +1472,6 @@ testVoiceCaptchaRetry ps@TestParams {tmpPath} = do bob <## "" note <- getTermLine bob let groupLink = dropStrPrefix "Please note: it applies only to members joining via this link: " note - bob #> "@'SimpleX Directory' /filter 1 captcha" - bob <# "'SimpleX Directory'> > /filter 1 captcha" - bob <## " Spam filter settings for group privacy set to:" - bob <## "- reject long/inappropriate names: disabled" - bob <## "- pass captcha to join: enabled" - bob <## "" - bob <## "/'filter 1 name' - enable name filter" - bob <## "/'filter 1 name captcha' - enable both" - bob <## "/'filter 1 off' - disable filter" -- cath joins, receives text captcha with /audio hint cath ##> ("/c " <> groupLink) cath <## "connection request sent!" @@ -1437,15 +1524,6 @@ testVoiceCaptchaVoiceDisabled ps@TestParams {tmpPath} = do bob <## "" note <- getTermLine bob let groupLink = dropStrPrefix "Please note: it applies only to members joining via this link: " note - bob #> "@'SimpleX Directory' /filter 1 captcha" - bob <# "'SimpleX Directory'> > /filter 1 captcha" - bob <## " Spam filter settings for group privacy set to:" - bob <## "- reject long/inappropriate names: disabled" - bob <## "- pass captcha to join: enabled" - bob <## "" - bob <## "/'filter 1 name' - enable name filter" - bob <## "/'filter 1 name captcha' - enable both" - bob <## "/'filter 1 off' - disable filter" -- disable voice messages in the group bob ##> "/set voice #privacy off" bob <## "updated group preferences:" @@ -1504,15 +1582,6 @@ testVoiceCaptchaOldClient ps@TestParams {tmpPath} = do bob <## "" note <- getTermLine bob let groupLink = dropStrPrefix "Please note: it applies only to members joining via this link: " note - bob #> "@'SimpleX Directory' /filter 1 captcha" - bob <# "'SimpleX Directory'> > /filter 1 captcha" - bob <## " Spam filter settings for group privacy set to:" - bob <## "- reject long/inappropriate names: disabled" - bob <## "- pass captcha to join: enabled" - bob <## "" - bob <## "/'filter 1 name' - enable name filter" - bob <## "/'filter 1 name captcha' - enable both" - bob <## "/'filter 1 off' - disable filter" -- disable voice messages in the group bob ##> "/set voice #privacy off" bob <## "updated group preferences:" @@ -1543,20 +1612,24 @@ testVoiceCaptchaOldClient ps@TestParams {tmpPath} = do cath <## " Correct, you joined the group privacy" cath <## "#privacy: you joined the group" -withDirectoryServiceVoiceCaptcha :: HasCallStack => TestParams -> FilePath -> (TestCC -> String -> IO ()) -> IO () -withDirectoryServiceVoiceCaptcha ps voiceScript test = do +withDirectoryServiceOpts :: HasCallStack => TestParams -> (DirectoryOpts -> DirectoryOpts) -> (TestCC -> String -> IO ()) -> IO () +withDirectoryServiceOpts ps modOpts test = do dsLink <- withNewTestChatCfg ps testCfg serviceDbPrefix directoryProfile $ \ds -> withNewTestChatCfg ps testCfg "super_user" aliceProfile $ \superUser -> do connectUsers ds superUser ds ##> "/ad" getContactLink ds True - let opts = (mkDirectoryOpts ps [KnownContact 2 "alice"] Nothing Nothing) {voiceCaptchaGenerator = Just voiceScript} + let opts = modOpts $ mkDirectoryOpts ps [KnownContact 2 "alice"] Nothing Nothing runDirectory testCfg opts $ withTestChatCfg ps testCfg "super_user" $ \superUser -> do superUser <## "subscribed 1 connections on server localhost" test superUser dsLink +withDirectoryServiceVoiceCaptcha :: HasCallStack => TestParams -> FilePath -> (TestCC -> String -> IO ()) -> IO () +withDirectoryServiceVoiceCaptcha ps voiceScript = + withDirectoryServiceOpts ps (\o -> o {voiceCaptchaGenerator = Just voiceScript}) + testRestoreDirectory :: HasCallStack => TestParams -> IO () testRestoreDirectory ps = do testListUserGroups False ps @@ -1729,7 +1802,7 @@ registerGroup su u n fn = registerGroupId su u n fn 1 1 registerGroupId :: TestCC -> TestCC -> String -> String -> Int -> Int -> IO () registerGroupId su u n fn gId ugId = do submitGroup u n fn - welcomeWithLink <- groupAccepted u n + welcomeWithLink <- groupAccepted u n ugId completeRegistrationId su u n fn welcomeWithLink gId ugId submitGroup :: TestCC -> String -> String -> IO () @@ -1740,8 +1813,8 @@ submitGroup u n fn = do u ##> ("/a " <> viewName n <> " 'SimpleX Directory' admin") u <## ("invitation to join the group #" <> viewName n <> " sent to 'SimpleX Directory'") -groupAccepted :: TestCC -> String -> IO String -groupAccepted u n = do +groupAccepted :: TestCC -> String -> Int -> IO String +groupAccepted u n ugId = do u <### [ WithTime ("'SimpleX Directory'> Joining the group " <> n <> "…"), ConsoleString ("#" <> viewName n <> ": 'SimpleX Directory' joined the group") @@ -1751,7 +1824,10 @@ groupAccepted u n = do u <## "" u <## "Please add it to the group welcome message." u <## "For example, add:" - dropStrPrefix "'SimpleX Directory'> " . dropTime <$> getTermLine u -- welcome message with link + welcomeWithLink <- dropStrPrefix "'SimpleX Directory'> " . dropTime <$> getTermLine u + u <# "'SimpleX Directory'> We recommend allowing direct messages, media, voice, and SimpleX links only for group moderators and admins. Use group preferences to set them." + u <## ("Captcha verification is enabled. Use /'filter " <> show ugId <> "' to change it.") + pure welcomeWithLink completeRegistration :: TestCC -> TestCC -> String -> String -> String -> Int -> IO () completeRegistration su u n fn welcomeWithLink gId = @@ -1885,15 +1961,6 @@ testCaptchaTooManyAttempts ps = bob <## "" note <- getTermLine bob let groupLink = dropStrPrefix "Please note: it applies only to members joining via this link: " note - bob #> "@'SimpleX Directory' /filter 1 captcha" - bob <# "'SimpleX Directory'> > /filter 1 captcha" - bob <## " Spam filter settings for group privacy set to:" - bob <## "- reject long/inappropriate names: disabled" - bob <## "- pass captcha to join: enabled" - bob <## "" - bob <## "/'filter 1 name' - enable name filter" - bob <## "/'filter 1 name captcha' - enable both" - bob <## "/'filter 1 off' - disable filter" cath ##> ("/c " <> groupLink) cath <## "connection request sent!" cath <## "#privacy: joining the group..." @@ -1932,15 +1999,6 @@ testCaptchaUnknownCommand ps = bob <## "" note <- getTermLine bob let groupLink = dropStrPrefix "Please note: it applies only to members joining via this link: " note - bob #> "@'SimpleX Directory' /filter 1 captcha" - bob <# "'SimpleX Directory'> > /filter 1 captcha" - bob <## " Spam filter settings for group privacy set to:" - bob <## "- reject long/inappropriate names: disabled" - bob <## "- pass captcha to join: enabled" - bob <## "" - bob <## "/'filter 1 name' - enable name filter" - bob <## "/'filter 1 name captcha' - enable both" - bob <## "/'filter 1 off' - disable filter" cath ##> ("/c " <> groupLink) cath <## "connection request sent!" cath <## "#privacy: joining the group..." @@ -2003,6 +2061,8 @@ testRegisterChannelViaCard ps = ] -- owner sends a message to trigger member introduction bob <# "'SimpleX Directory'> Joined the channel news. Registration is pending approval — it may take up to 48 hours." + bob <# "'SimpleX Directory'> We recommend allowing direct messages, media, voice, and SimpleX links only for group moderators and admins. Use group preferences to set them." + bob <## "Captcha verification is enabled. Use /'filter 1' to change it." superUser <# "'SimpleX Directory'> bob submitted the channel ID 1:" superUser <## "news" superUser <##. "Link to join channel: " @@ -2101,6 +2161,8 @@ testDeleteChannelRegistration ps = bob <## "#news: relay introduced 'SimpleX Directory_1' in the channel" ] bob <# "'SimpleX Directory'> Joined the channel news. Registration is pending approval — it may take up to 48 hours." + bob <# "'SimpleX Directory'> We recommend allowing direct messages, media, voice, and SimpleX links only for group moderators and admins. Use group preferences to set them." + bob <## "Captcha verification is enabled. Use /'filter 1' to change it." superUser <# "'SimpleX Directory'> bob submitted the channel ID 1:" superUser <## "news" superUser <##. "Link to join channel: " @@ -2145,6 +2207,8 @@ testReregistrationAlreadyListed ps = bob <## "#news: relay introduced 'SimpleX Directory_1' in the channel" ] bob <# "'SimpleX Directory'> Joined the channel news. Registration is pending approval — it may take up to 48 hours." + bob <# "'SimpleX Directory'> We recommend allowing direct messages, media, voice, and SimpleX links only for group moderators and admins. Use group preferences to set them." + bob <## "Captcha verification is enabled. Use /'filter 1' to change it." superUser <# "'SimpleX Directory'> bob submitted the channel ID 1:" superUser <## "news" superUser <##. "Link to join channel: " @@ -2204,6 +2268,8 @@ testLinkCheckUpdatesCount ps = do bob <## "#news: relay introduced 'SimpleX Directory_1' in the channel" ] bob <# "'SimpleX Directory'> Joined the channel news. Registration is pending approval — it may take up to 48 hours." + bob <# "'SimpleX Directory'> We recommend allowing direct messages, media, voice, and SimpleX links only for group moderators and admins. Use group preferences to set them." + bob <## "Captcha verification is enabled. Use /'filter 1' to change it." superUser <# "'SimpleX Directory'> bob submitted the channel ID 1:" superUser <## "news" superUser <##. "Link to join channel: " From 10958d447dc4592e5a1f3394f26da9ccf8159c0e Mon Sep 17 00:00:00 2001 From: Evgeny Poberezkin Date: Thu, 2 Jul 2026 07:46:12 +0100 Subject: [PATCH 81/81] ios: restore resolved packages --- .../xcshareddata/swiftpm/Package.resolved | 66 +++++++++++++++++++ 1 file changed, 66 insertions(+) create mode 100644 apps/ios/SimpleX.xcodeproj/project.xcworkspace/xcshareddata/swiftpm/Package.resolved diff --git a/apps/ios/SimpleX.xcodeproj/project.xcworkspace/xcshareddata/swiftpm/Package.resolved b/apps/ios/SimpleX.xcodeproj/project.xcworkspace/xcshareddata/swiftpm/Package.resolved new file mode 100644 index 0000000000..978e1d9630 --- /dev/null +++ b/apps/ios/SimpleX.xcodeproj/project.xcworkspace/xcshareddata/swiftpm/Package.resolved @@ -0,0 +1,66 @@ +{ + "originHash" : "60aeecb7917535a5e44ade0dbb5411ab112a959283e565a04c212c8af4e7dee9", + "pins" : [ + { + "identity" : "codescanner", + "kind" : "remoteSourceControl", + "location" : "https://github.com/twostraws/CodeScanner", + "state" : { + "revision" : "34da57fb63b47add20de8a85da58191523ccce57", + "version" : "2.5.0" + } + }, + { + "identity" : "elegant-emoji-picker", + "kind" : "remoteSourceControl", + "location" : "https://github.com/Finalet/Elegant-Emoji-Picker", + "state" : { + "branch" : "main", + "revision" : "71d2d46092b4d550cc593614efc06438f845f6e6" + } + }, + { + "identity" : "ink", + "kind" : "remoteSourceControl", + "location" : "https://github.com/johnsundell/ink", + "state" : { + "revision" : "bcc9f219900a62c4210e6db726035d7f03ae757b", + "version" : "0.6.0" + } + }, + { + "identity" : "lzstring-swift", + "kind" : "remoteSourceControl", + "location" : "https://github.com/Ibrahimhass/lzstring-swift", + "state" : { + "revision" : "7f62f21de5b18582a950e1753b775cc614722407" + } + }, + { + "identity" : "swiftygif", + "kind" : "remoteSourceControl", + "location" : "https://github.com/kirualex/SwiftyGif", + "state" : { + "revision" : "5e8619335d394901379c9add5c4c1c2f420b3800" + } + }, + { + "identity" : "webrtc", + "kind" : "remoteSourceControl", + "location" : "https://github.com/simplex-chat/WebRTC.git", + "state" : { + "revision" : "34bedc50f9c58dccf4967ea59c7e6a47d620803b" + } + }, + { + "identity" : "yams", + "kind" : "remoteSourceControl", + "location" : "https://github.com/jpsim/Yams", + "state" : { + "revision" : "9234124cff5e22e178988c18d8b95a8ae8007f76", + "version" : "5.1.2" + } + } + ], + "version" : 3 +}