431 lines
28 KiB
JavaScript
431 lines
28 KiB
JavaScript
import * as plugins from '../../plugins.js';
|
|
import * as paths from '../../paths.js';
|
|
import { DKIMCreator } from '../security/classes.dkimcreator.js';
|
|
/**
|
|
* Manager for DNS-related operations, including record lookups, verification, and generation
|
|
*/
|
|
export class DNSManager {
|
|
dkimCreator;
|
|
cache = new Map();
|
|
defaultOptions = {
|
|
cacheTtl: 300000, // 5 minutes
|
|
timeout: 5000 // 5 seconds
|
|
};
|
|
constructor(dkimCreatorArg, options) {
|
|
this.dkimCreator = dkimCreatorArg;
|
|
if (options) {
|
|
this.defaultOptions = {
|
|
...this.defaultOptions,
|
|
...options
|
|
};
|
|
}
|
|
// Ensure the DNS records directory exists
|
|
plugins.fs.mkdirSync(paths.dnsRecordsDir, { recursive: true });
|
|
}
|
|
/**
|
|
* Lookup MX records for a domain
|
|
* @param domain Domain to look up
|
|
* @param options Lookup options
|
|
* @returns Array of MX records sorted by priority
|
|
*/
|
|
async lookupMx(domain, options) {
|
|
const lookupOptions = { ...this.defaultOptions, ...options };
|
|
const cacheKey = `mx:${domain}`;
|
|
// Check cache first
|
|
const cached = this.getFromCache(cacheKey);
|
|
if (cached) {
|
|
return cached;
|
|
}
|
|
try {
|
|
const records = await this.dnsResolveMx(domain, lookupOptions.timeout);
|
|
// Sort by priority
|
|
records.sort((a, b) => a.priority - b.priority);
|
|
// Cache the result
|
|
this.setInCache(cacheKey, records, lookupOptions.cacheTtl);
|
|
return records;
|
|
}
|
|
catch (error) {
|
|
console.error(`Error looking up MX records for ${domain}:`, error);
|
|
throw new Error(`Failed to lookup MX records for ${domain}: ${error.message}`);
|
|
}
|
|
}
|
|
/**
|
|
* Lookup TXT records for a domain
|
|
* @param domain Domain to look up
|
|
* @param options Lookup options
|
|
* @returns Array of TXT records
|
|
*/
|
|
async lookupTxt(domain, options) {
|
|
const lookupOptions = { ...this.defaultOptions, ...options };
|
|
const cacheKey = `txt:${domain}`;
|
|
// Check cache first
|
|
const cached = this.getFromCache(cacheKey);
|
|
if (cached) {
|
|
return cached;
|
|
}
|
|
try {
|
|
const records = await this.dnsResolveTxt(domain, lookupOptions.timeout);
|
|
// Cache the result
|
|
this.setInCache(cacheKey, records, lookupOptions.cacheTtl);
|
|
return records;
|
|
}
|
|
catch (error) {
|
|
console.error(`Error looking up TXT records for ${domain}:`, error);
|
|
throw new Error(`Failed to lookup TXT records for ${domain}: ${error.message}`);
|
|
}
|
|
}
|
|
/**
|
|
* Find specific TXT record by subdomain and prefix
|
|
* @param domain Base domain
|
|
* @param subdomain Subdomain prefix (e.g., "dkim._domainkey")
|
|
* @param prefix Record prefix to match (e.g., "v=DKIM1")
|
|
* @param options Lookup options
|
|
* @returns Matching TXT record or null if not found
|
|
*/
|
|
async findTxtRecord(domain, subdomain = '', prefix = '', options) {
|
|
const fullDomain = subdomain ? `${subdomain}.${domain}` : domain;
|
|
try {
|
|
const records = await this.lookupTxt(fullDomain, options);
|
|
for (const recordArray of records) {
|
|
// TXT records can be split into chunks, join them
|
|
const record = recordArray.join('');
|
|
if (!prefix || record.startsWith(prefix)) {
|
|
return record;
|
|
}
|
|
}
|
|
return null;
|
|
}
|
|
catch (error) {
|
|
// Domain might not exist or no TXT records
|
|
console.log(`No matching TXT record found for ${fullDomain} with prefix ${prefix}`);
|
|
return null;
|
|
}
|
|
}
|
|
/**
|
|
* Verify if a domain has a valid SPF record
|
|
* @param domain Domain to verify
|
|
* @returns Verification result
|
|
*/
|
|
async verifySpfRecord(domain) {
|
|
const result = {
|
|
record: 'SPF',
|
|
found: false,
|
|
valid: false
|
|
};
|
|
try {
|
|
const spfRecord = await this.findTxtRecord(domain, '', 'v=spf1');
|
|
if (spfRecord) {
|
|
result.found = true;
|
|
result.value = spfRecord;
|
|
// Basic validation - check if it contains all, include, ip4, ip6, or mx mechanisms
|
|
const isValid = /v=spf1\s+([-~?+]?(all|include:|ip4:|ip6:|mx|a|exists:))/.test(spfRecord);
|
|
result.valid = isValid;
|
|
if (!isValid) {
|
|
result.error = 'SPF record format is invalid';
|
|
}
|
|
}
|
|
else {
|
|
result.error = 'No SPF record found';
|
|
}
|
|
}
|
|
catch (error) {
|
|
result.error = `Error verifying SPF: ${error.message}`;
|
|
}
|
|
return result;
|
|
}
|
|
/**
|
|
* Verify if a domain has a valid DKIM record
|
|
* @param domain Domain to verify
|
|
* @param selector DKIM selector (usually "mta" in our case)
|
|
* @returns Verification result
|
|
*/
|
|
async verifyDkimRecord(domain, selector = 'mta') {
|
|
const result = {
|
|
record: 'DKIM',
|
|
found: false,
|
|
valid: false
|
|
};
|
|
try {
|
|
const dkimSelector = `${selector}._domainkey`;
|
|
const dkimRecord = await this.findTxtRecord(domain, dkimSelector, 'v=DKIM1');
|
|
if (dkimRecord) {
|
|
result.found = true;
|
|
result.value = dkimRecord;
|
|
// Basic validation - check for required fields
|
|
const hasP = dkimRecord.includes('p=');
|
|
result.valid = dkimRecord.includes('v=DKIM1') && hasP;
|
|
if (!result.valid) {
|
|
result.error = 'DKIM record is missing required fields';
|
|
}
|
|
else if (dkimRecord.includes('p=') && !dkimRecord.match(/p=[a-zA-Z0-9+/]+/)) {
|
|
result.valid = false;
|
|
result.error = 'DKIM record has invalid public key format';
|
|
}
|
|
}
|
|
else {
|
|
result.error = `No DKIM record found for selector ${selector}`;
|
|
}
|
|
}
|
|
catch (error) {
|
|
result.error = `Error verifying DKIM: ${error.message}`;
|
|
}
|
|
return result;
|
|
}
|
|
/**
|
|
* Verify if a domain has a valid DMARC record
|
|
* @param domain Domain to verify
|
|
* @returns Verification result
|
|
*/
|
|
async verifyDmarcRecord(domain) {
|
|
const result = {
|
|
record: 'DMARC',
|
|
found: false,
|
|
valid: false
|
|
};
|
|
try {
|
|
const dmarcDomain = `_dmarc.${domain}`;
|
|
const dmarcRecord = await this.findTxtRecord(dmarcDomain, '', 'v=DMARC1');
|
|
if (dmarcRecord) {
|
|
result.found = true;
|
|
result.value = dmarcRecord;
|
|
// Basic validation - check for required fields
|
|
const hasPolicy = dmarcRecord.includes('p=');
|
|
result.valid = dmarcRecord.includes('v=DMARC1') && hasPolicy;
|
|
if (!result.valid) {
|
|
result.error = 'DMARC record is missing required fields';
|
|
}
|
|
}
|
|
else {
|
|
result.error = 'No DMARC record found';
|
|
}
|
|
}
|
|
catch (error) {
|
|
result.error = `Error verifying DMARC: ${error.message}`;
|
|
}
|
|
return result;
|
|
}
|
|
/**
|
|
* Check all email authentication records (SPF, DKIM, DMARC) for a domain
|
|
* @param domain Domain to check
|
|
* @param dkimSelector DKIM selector
|
|
* @returns Object with verification results for each record type
|
|
*/
|
|
async verifyEmailAuthRecords(domain, dkimSelector = 'mta') {
|
|
const [spf, dkim, dmarc] = await Promise.all([
|
|
this.verifySpfRecord(domain),
|
|
this.verifyDkimRecord(domain, dkimSelector),
|
|
this.verifyDmarcRecord(domain)
|
|
]);
|
|
return { spf, dkim, dmarc };
|
|
}
|
|
/**
|
|
* Generate a recommended SPF record for a domain
|
|
* @param domain Domain name
|
|
* @param options Configuration options for the SPF record
|
|
* @returns Generated SPF record
|
|
*/
|
|
generateSpfRecord(domain, options = {}) {
|
|
const { includeMx = true, includeA = true, includeIps = [], includeSpf = [], policy = 'softfail' } = options;
|
|
let value = 'v=spf1';
|
|
if (includeMx) {
|
|
value += ' mx';
|
|
}
|
|
if (includeA) {
|
|
value += ' a';
|
|
}
|
|
// Add IP addresses
|
|
for (const ip of includeIps) {
|
|
if (ip.includes(':')) {
|
|
value += ` ip6:${ip}`;
|
|
}
|
|
else {
|
|
value += ` ip4:${ip}`;
|
|
}
|
|
}
|
|
// Add includes
|
|
for (const include of includeSpf) {
|
|
value += ` include:${include}`;
|
|
}
|
|
// Add policy
|
|
const policyMap = {
|
|
'none': '?all',
|
|
'neutral': '~all',
|
|
'softfail': '~all',
|
|
'fail': '-all',
|
|
'reject': '-all'
|
|
};
|
|
value += ` ${policyMap[policy]}`;
|
|
return {
|
|
name: domain,
|
|
type: 'TXT',
|
|
value: value
|
|
};
|
|
}
|
|
/**
|
|
* Generate a recommended DMARC record for a domain
|
|
* @param domain Domain name
|
|
* @param options Configuration options for the DMARC record
|
|
* @returns Generated DMARC record
|
|
*/
|
|
generateDmarcRecord(domain, options = {}) {
|
|
const { policy = 'none', subdomainPolicy, pct = 100, rua, ruf, daysInterval = 1 } = options;
|
|
let value = 'v=DMARC1; p=' + policy;
|
|
if (subdomainPolicy) {
|
|
value += `; sp=${subdomainPolicy}`;
|
|
}
|
|
if (pct !== 100) {
|
|
value += `; pct=${pct}`;
|
|
}
|
|
if (rua) {
|
|
value += `; rua=mailto:${rua}`;
|
|
}
|
|
if (ruf) {
|
|
value += `; ruf=mailto:${ruf}`;
|
|
}
|
|
if (daysInterval !== 1) {
|
|
value += `; ri=${daysInterval * 86400}`;
|
|
}
|
|
// Add reporting format and ADKIM/ASPF alignment
|
|
value += '; fo=1; adkim=r; aspf=r';
|
|
return {
|
|
name: `_dmarc.${domain}`,
|
|
type: 'TXT',
|
|
value: value
|
|
};
|
|
}
|
|
/**
|
|
* Save DNS record recommendations to a file
|
|
* @param domain Domain name
|
|
* @param records DNS records to save
|
|
*/
|
|
async saveDnsRecommendations(domain, records) {
|
|
try {
|
|
const filePath = plugins.path.join(paths.dnsRecordsDir, `${domain}.recommendations.json`);
|
|
await plugins.smartfs.file(filePath).write(JSON.stringify(records, null, 2));
|
|
console.log(`DNS recommendations for ${domain} saved to ${filePath}`);
|
|
}
|
|
catch (error) {
|
|
console.error(`Error saving DNS recommendations for ${domain}:`, error);
|
|
}
|
|
}
|
|
/**
|
|
* Get cache key value
|
|
* @param key Cache key
|
|
* @returns Cached value or undefined if not found or expired
|
|
*/
|
|
getFromCache(key) {
|
|
const cached = this.cache.get(key);
|
|
if (cached && cached.expires > Date.now()) {
|
|
return cached.data;
|
|
}
|
|
// Remove expired entry
|
|
if (cached) {
|
|
this.cache.delete(key);
|
|
}
|
|
return undefined;
|
|
}
|
|
/**
|
|
* Set cache key value
|
|
* @param key Cache key
|
|
* @param data Data to cache
|
|
* @param ttl TTL in milliseconds
|
|
*/
|
|
setInCache(key, data, ttl = this.defaultOptions.cacheTtl) {
|
|
if (ttl <= 0)
|
|
return; // Don't cache if TTL is disabled
|
|
this.cache.set(key, {
|
|
data,
|
|
expires: Date.now() + ttl
|
|
});
|
|
}
|
|
/**
|
|
* Clear the DNS cache
|
|
* @param key Optional specific key to clear, or all cache if not provided
|
|
*/
|
|
clearCache(key) {
|
|
if (key) {
|
|
this.cache.delete(key);
|
|
}
|
|
else {
|
|
this.cache.clear();
|
|
}
|
|
}
|
|
/**
|
|
* Promise-based wrapper for dns.resolveMx
|
|
* @param domain Domain to resolve
|
|
* @param timeout Timeout in milliseconds
|
|
* @returns Promise resolving to MX records
|
|
*/
|
|
dnsResolveMx(domain, timeout = 5000) {
|
|
return new Promise((resolve, reject) => {
|
|
const timeoutId = setTimeout(() => {
|
|
reject(new Error(`DNS MX lookup timeout for ${domain}`));
|
|
}, timeout);
|
|
plugins.dns.resolveMx(domain, (err, addresses) => {
|
|
clearTimeout(timeoutId);
|
|
if (err) {
|
|
reject(err);
|
|
}
|
|
else {
|
|
resolve(addresses);
|
|
}
|
|
});
|
|
});
|
|
}
|
|
/**
|
|
* Promise-based wrapper for dns.resolveTxt
|
|
* @param domain Domain to resolve
|
|
* @param timeout Timeout in milliseconds
|
|
* @returns Promise resolving to TXT records
|
|
*/
|
|
dnsResolveTxt(domain, timeout = 5000) {
|
|
return new Promise((resolve, reject) => {
|
|
const timeoutId = setTimeout(() => {
|
|
reject(new Error(`DNS TXT lookup timeout for ${domain}`));
|
|
}, timeout);
|
|
plugins.dns.resolveTxt(domain, (err, records) => {
|
|
clearTimeout(timeoutId);
|
|
if (err) {
|
|
reject(err);
|
|
}
|
|
else {
|
|
resolve(records);
|
|
}
|
|
});
|
|
});
|
|
}
|
|
/**
|
|
* Generate all recommended DNS records for proper email authentication
|
|
* @param domain Domain to generate records for
|
|
* @returns Array of recommended DNS records
|
|
*/
|
|
async generateAllRecommendedRecords(domain) {
|
|
const records = [];
|
|
// Get DKIM record (already created by DKIMCreator)
|
|
try {
|
|
// Call the DKIM creator directly
|
|
const dkimRecord = await this.dkimCreator.getDNSRecordForDomain(domain);
|
|
records.push(dkimRecord);
|
|
}
|
|
catch (error) {
|
|
console.error(`Error getting DKIM record for ${domain}:`, error);
|
|
}
|
|
// Generate SPF record
|
|
const spfRecord = this.generateSpfRecord(domain, {
|
|
includeMx: true,
|
|
includeA: true,
|
|
policy: 'softfail'
|
|
});
|
|
records.push(spfRecord);
|
|
// Generate DMARC record
|
|
const dmarcRecord = this.generateDmarcRecord(domain, {
|
|
policy: 'none', // Start with monitoring mode
|
|
rua: `dmarc@${domain}` // Replace with appropriate report address
|
|
});
|
|
records.push(dmarcRecord);
|
|
// Save recommendations
|
|
await this.saveDnsRecommendations(domain, records);
|
|
return records;
|
|
}
|
|
}
|
|
//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiY2xhc3Nlcy5kbnNtYW5hZ2VyLmpzIiwic291cmNlUm9vdCI6IiIsInNvdXJjZXMiOlsiLi4vLi4vLi4vdHMvbWFpbC9yb3V0aW5nL2NsYXNzZXMuZG5zbWFuYWdlci50cyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiQUFBQSxPQUFPLEtBQUssT0FBTyxNQUFNLGtCQUFrQixDQUFDO0FBQzVDLE9BQU8sS0FBSyxLQUFLLE1BQU0sZ0JBQWdCLENBQUM7QUFDeEMsT0FBTyxFQUFFLFdBQVcsRUFBRSxNQUFNLG9DQUFvQyxDQUFDO0FBbUNqRTs7R0FFRztBQUNILE1BQU0sT0FBTyxVQUFVO0lBQ2QsV0FBVyxDQUFjO0lBQ3hCLEtBQUssR0FBZ0QsSUFBSSxHQUFHLEVBQUUsQ0FBQztJQUMvRCxjQUFjLEdBQXNCO1FBQzFDLFFBQVEsRUFBRSxNQUFNLEVBQUUsWUFBWTtRQUM5QixPQUFPLEVBQUUsSUFBSSxDQUFDLFlBQVk7S0FDM0IsQ0FBQztJQUVGLFlBQVksY0FBMkIsRUFBRSxPQUEyQjtRQUNsRSxJQUFJLENBQUMsV0FBVyxHQUFHLGNBQWMsQ0FBQztRQUVsQyxJQUFJLE9BQU8sRUFBRSxDQUFDO1lBQ1osSUFBSSxDQUFDLGNBQWMsR0FBRztnQkFDcEIsR0FBRyxJQUFJLENBQUMsY0FBYztnQkFDdEIsR0FBRyxPQUFPO2FBQ1gsQ0FBQztRQUNKLENBQUM7UUFFRCwwQ0FBMEM7UUFDMUMsT0FBTyxDQUFDLEVBQUUsQ0FBQyxTQUFTLENBQUMsS0FBSyxDQUFDLGFBQWEsRUFBRSxFQUFFLFNBQVMsRUFBRSxJQUFJLEVBQUUsQ0FBQyxDQUFDO0lBQ2pFLENBQUM7SUFFRDs7Ozs7T0FLRztJQUNJLEtBQUssQ0FBQyxRQUFRLENBQUMsTUFBYyxFQUFFLE9BQTJCO1FBQy9ELE1BQU0sYUFBYSxHQUFHLEVBQUUsR0FBRyxJQUFJLENBQUMsY0FBYyxFQUFFLEdBQUcsT0FBTyxFQUFFLENBQUM7UUFDN0QsTUFBTSxRQUFRLEdBQUcsTUFBTSxNQUFNLEVBQUUsQ0FBQztRQUVoQyxvQkFBb0I7UUFDcEIsTUFBTSxNQUFNLEdBQUcsSUFBSSxDQUFDLFlBQVksQ0FBeUIsUUFBUSxDQUFDLENBQUM7UUFDbkUsSUFBSSxNQUFNLEVBQUUsQ0FBQztZQUNYLE9BQU8sTUFBTSxDQUFDO1FBQ2hCLENBQUM7UUFFRCxJQUFJLENBQUM7WUFDSCxNQUFNLE9BQU8sR0FBRyxNQUFNLElBQUksQ0FBQyxZQUFZLENBQUMsTUFBTSxFQUFFLGFBQWEsQ0FBQyxPQUFPLENBQUMsQ0FBQztZQUV2RSxtQkFBbUI7WUFDbkIsT0FBTyxDQUFDLElBQUksQ0FBQyxDQUFDLENBQUMsRUFBRSxDQUFDLEVBQUUsRUFBRSxDQUFDLENBQUMsQ0FBQyxRQUFRLEdBQUcsQ0FBQyxDQUFDLFFBQVEsQ0FBQyxDQUFDO1lBRWhELG1CQUFtQjtZQUNuQixJQUFJLENBQUMsVUFBVSxDQUFDLFFBQVEsRUFBRSxPQUFPLEVBQUUsYUFBYSxDQUFDLFFBQVEsQ0FBQyxDQUFDO1lBRTNELE9BQU8sT0FBTyxDQUFDO1FBQ2pCLENBQUM7UUFBQyxPQUFPLEtBQUssRUFBRSxDQUFDO1lBQ2YsT0FBTyxDQUFDLEtBQUssQ0FBQyxtQ0FBbUMsTUFBTSxHQUFHLEVBQUUsS0FBSyxDQUFDLENBQUM7WUFDbkUsTUFBTSxJQUFJLEtBQUssQ0FBQyxtQ0FBbUMsTUFBTSxLQUFLLEtBQUssQ0FBQyxPQUFPLEVBQUUsQ0FBQyxDQUFDO1FBQ2pGLENBQUM7SUFDSCxDQUFDO0lBRUQ7Ozs7O09BS0c7SUFDSSxLQUFLLENBQUMsU0FBUyxDQUFDLE1BQWMsRUFBRSxPQUEyQjtRQUNoRSxNQUFNLGFBQWEsR0FBRyxFQUFFLEdBQUcsSUFBSSxDQUFDLGNBQWMsRUFBRSxHQUFHLE9BQU8sRUFBRSxDQUFDO1FBQzdELE1BQU0sUUFBUSxHQUFHLE9BQU8sTUFBTSxFQUFFLENBQUM7UUFFakMsb0JBQW9CO1FBQ3BCLE1BQU0sTUFBTSxHQUFHLElBQUksQ0FBQyxZQUFZLENBQWEsUUFBUSxDQUFDLENBQUM7UUFDdkQsSUFBSSxNQUFNLEVBQUUsQ0FBQztZQUNYLE9BQU8sTUFBTSxDQUFDO1FBQ2hCLENBQUM7UUFFRCxJQUFJLENBQUM7WUFDSCxNQUFNLE9BQU8sR0FBRyxNQUFNLElBQUksQ0FBQyxhQUFhLENBQUMsTUFBTSxFQUFFLGFBQWEsQ0FBQyxPQUFPLENBQUMsQ0FBQztZQUV4RSxtQkFBbUI7WUFDbkIsSUFBSSxDQUFDLFVBQVUsQ0FBQyxRQUFRLEVBQUUsT0FBTyxFQUFFLGFBQWEsQ0FBQyxRQUFRLENBQUMsQ0FBQztZQUUzRCxPQUFPLE9BQU8sQ0FBQztRQUNqQixDQUFDO1FBQUMsT0FBTyxLQUFLLEVBQUUsQ0FBQztZQUNmLE9BQU8sQ0FBQyxLQUFLLENBQUMsb0NBQW9DLE1BQU0sR0FBRyxFQUFFLEtBQUssQ0FBQyxDQUFDO1lBQ3BFLE1BQU0sSUFBSSxLQUFLLENBQUMsb0NBQW9DLE1BQU0sS0FBSyxLQUFLLENBQUMsT0FBTyxFQUFFLENBQUMsQ0FBQztRQUNsRixDQUFDO0lBQ0gsQ0FBQztJQUVEOzs7Ozs7O09BT0c7SUFDSSxLQUFLLENBQUMsYUFBYSxDQUN4QixNQUFjLEVBQ2QsWUFBb0IsRUFBRSxFQUN0QixTQUFpQixFQUFFLEVBQ25CLE9BQTJCO1FBRTNCLE1BQU0sVUFBVSxHQUFHLFNBQVMsQ0FBQyxDQUFDLENBQUMsR0FBRyxTQUFTLElBQUksTUFBTSxFQUFFLENBQUMsQ0FBQyxDQUFDLE1BQU0sQ0FBQztRQUVqRSxJQUFJLENBQUM7WUFDSCxNQUFNLE9BQU8sR0FBRyxNQUFNLElBQUksQ0FBQyxTQUFTLENBQUMsVUFBVSxFQUFFLE9BQU8sQ0FBQyxDQUFDO1lBRTFELEtBQUssTUFBTSxXQUFXLElBQUksT0FBTyxFQUFFLENBQUM7Z0JBQ2xDLGtEQUFrRDtnQkFDbEQsTUFBTSxNQUFNLEdBQUcsV0FBVyxDQUFDLElBQUksQ0FBQyxFQUFFLENBQUMsQ0FBQztnQkFFcEMsSUFBSSxDQUFDLE1BQU0sSUFBSSxNQUFNLENBQUMsVUFBVSxDQUFDLE1BQU0sQ0FBQyxFQUFFLENBQUM7b0JBQ3pDLE9BQU8sTUFBTSxDQUFDO2dCQUNoQixDQUFDO1lBQ0gsQ0FBQztZQUVELE9BQU8sSUFBSSxDQUFDO1FBQ2QsQ0FBQztRQUFDLE9BQU8sS0FBSyxFQUFFLENBQUM7WUFDZiwyQ0FBMkM7WUFDM0MsT0FBTyxDQUFDLEdBQUcsQ0FBQyxvQ0FBb0MsVUFBVSxnQkFBZ0IsTUFBTSxFQUFFLENBQUMsQ0FBQztZQUNwRixPQUFPLElBQUksQ0FBQztRQUNkLENBQUM7SUFDSCxDQUFDO0lBRUQ7Ozs7T0FJRztJQUNJLEtBQUssQ0FBQyxlQUFlLENBQUMsTUFBYztRQUN6QyxNQUFNLE1BQU0sR0FBMkI7WUFDckMsTUFBTSxFQUFFLEtBQUs7WUFDYixLQUFLLEVBQUUsS0FBSztZQUNaLEtBQUssRUFBRSxLQUFLO1NBQ2IsQ0FBQztRQUVGLElBQUksQ0FBQztZQUNILE1BQU0sU0FBUyxHQUFHLE1BQU0sSUFBSSxDQUFDLGFBQWEsQ0FBQyxNQUFNLEVBQUUsRUFBRSxFQUFFLFFBQVEsQ0FBQyxDQUFDO1lBRWpFLElBQUksU0FBUyxFQUFFLENBQUM7Z0JBQ2QsTUFBTSxDQUFDLEtBQUssR0FBRyxJQUFJLENBQUM7Z0JBQ3BCLE1BQU0sQ0FBQyxLQUFLLEdBQUcsU0FBUyxDQUFDO2dCQUV6QixtRkFBbUY7Z0JBQ25GLE1BQU0sT0FBTyxHQUFHLHlEQUF5RCxDQUFDLElBQUksQ0FBQyxTQUFTLENBQUMsQ0FBQztnQkFDMUYsTUFBTSxDQUFDLEtBQUssR0FBRyxPQUFPLENBQUM7Z0JBRXZCLElBQUksQ0FBQyxPQUFPLEVBQUUsQ0FBQztvQkFDYixNQUFNLENBQUMsS0FBSyxHQUFHLDhCQUE4QixDQUFDO2dCQUNoRCxDQUFDO1lBQ0gsQ0FBQztpQkFBTSxDQUFDO2dCQUNOLE1BQU0sQ0FBQyxLQUFLLEdBQUcscUJBQXFCLENBQUM7WUFDdkMsQ0FBQztRQUNILENBQUM7UUFBQyxPQUFPLEtBQUssRUFBRSxDQUFDO1lBQ2YsTUFBTSxDQUFDLEtBQUssR0FBRyx3QkFBd0IsS0FBSyxDQUFDLE9BQU8sRUFBRSxDQUFDO1FBQ3pELENBQUM7UUFFRCxPQUFPLE1BQU0sQ0FBQztJQUNoQixDQUFDO0lBRUQ7Ozs7O09BS0c7SUFDSSxLQUFLLENBQUMsZ0JBQWdCLENBQUMsTUFBYyxFQUFFLFdBQW1CLEtBQUs7UUFDcEUsTUFBTSxNQUFNLEdBQTJCO1lBQ3JDLE1BQU0sRUFBRSxNQUFNO1lBQ2QsS0FBSyxFQUFFLEtBQUs7WUFDWixLQUFLLEVBQUUsS0FBSztTQUNiLENBQUM7UUFFRixJQUFJLENBQUM7WUFDSCxNQUFNLFlBQVksR0FBRyxHQUFHLFFBQVEsYUFBYSxDQUFDO1lBQzlDLE1BQU0sVUFBVSxHQUFHLE1BQU0sSUFBSSxDQUFDLGFBQWEsQ0FBQyxNQUFNLEVBQUUsWUFBWSxFQUFFLFNBQVMsQ0FBQyxDQUFDO1lBRTdFLElBQUksVUFBVSxFQUFFLENBQUM7Z0JBQ2YsTUFBTSxDQUFDLEtBQUssR0FBRyxJQUFJLENBQUM7Z0JBQ3BCLE1BQU0sQ0FBQyxLQUFLLEdBQUcsVUFBVSxDQUFDO2dCQUUxQiwrQ0FBK0M7Z0JBQy9DLE1BQU0sSUFBSSxHQUFHLFVBQVUsQ0FBQyxRQUFRLENBQUMsSUFBSSxDQUFDLENBQUM7Z0JBQ3ZDLE1BQU0sQ0FBQyxLQUFLLEdBQUcsVUFBVSxDQUFDLFFBQVEsQ0FBQyxTQUFTLENBQUMsSUFBSSxJQUFJLENBQUM7Z0JBRXRELElBQUksQ0FBQyxNQUFNLENBQUMsS0FBSyxFQUFFLENBQUM7b0JBQ2xCLE1BQU0sQ0FBQyxLQUFLLEdBQUcsd0NBQXdDLENBQUM7Z0JBQzFELENBQUM7cUJBQU0sSUFBSSxVQUFVLENBQUMsUUFBUSxDQUFDLElBQUksQ0FBQyxJQUFJLENBQUMsVUFBVSxDQUFDLEtBQUssQ0FBQyxrQkFBa0IsQ0FBQyxFQUFFLENBQUM7b0JBQzlFLE1BQU0sQ0FBQyxLQUFLLEdBQUcsS0FBSyxDQUFDO29CQUNyQixNQUFNLENBQUMsS0FBSyxHQUFHLDJDQUEyQyxDQUFDO2dCQUM3RCxDQUFDO1lBQ0gsQ0FBQztpQkFBTSxDQUFDO2dCQUNOLE1BQU0sQ0FBQyxLQUFLLEdBQUcscUNBQXFDLFFBQVEsRUFBRSxDQUFDO1lBQ2pFLENBQUM7UUFDSCxDQUFDO1FBQUMsT0FBTyxLQUFLLEVBQUUsQ0FBQztZQUNmLE1BQU0sQ0FBQyxLQUFLLEdBQUcseUJBQXlCLEtBQUssQ0FBQyxPQUFPLEVBQUUsQ0FBQztRQUMxRCxDQUFDO1FBRUQsT0FBTyxNQUFNLENBQUM7SUFDaEIsQ0FBQztJQUVEOzs7O09BSUc7SUFDSSxLQUFLLENBQUMsaUJBQWlCLENBQUMsTUFBYztRQUMzQyxNQUFNLE1BQU0sR0FBMkI7WUFDckMsTUFBTSxFQUFFLE9BQU87WUFDZixLQUFLLEVBQUUsS0FBSztZQUNaLEtBQUssRUFBRSxLQUFLO1NBQ2IsQ0FBQztRQUVGLElBQUksQ0FBQztZQUNILE1BQU0sV0FBVyxHQUFHLFVBQVUsTUFBTSxFQUFFLENBQUM7WUFDdkMsTUFBTSxXQUFXLEdBQUcsTUFBTSxJQUFJLENBQUMsYUFBYSxDQUFDLFdBQVcsRUFBRSxFQUFFLEVBQUUsVUFBVSxDQUFDLENBQUM7WUFFMUUsSUFBSSxXQUFXLEVBQUUsQ0FBQztnQkFDaEIsTUFBTSxDQUFDLEtBQUssR0FBRyxJQUFJLENBQUM7Z0JBQ3BCLE1BQU0sQ0FBQyxLQUFLLEdBQUcsV0FBVyxDQUFDO2dCQUUzQiwrQ0FBK0M7Z0JBQy9DLE1BQU0sU0FBUyxHQUFHLFdBQVcsQ0FBQyxRQUFRLENBQUMsSUFBSSxDQUFDLENBQUM7Z0JBQzdDLE1BQU0sQ0FBQyxLQUFLLEdBQUcsV0FBVyxDQUFDLFFBQVEsQ0FBQyxVQUFVLENBQUMsSUFBSSxTQUFTLENBQUM7Z0JBRTdELElBQUksQ0FBQyxNQUFNLENBQUMsS0FBSyxFQUFFLENBQUM7b0JBQ2xCLE1BQU0sQ0FBQyxLQUFLLEdBQUcseUNBQXlDLENBQUM7Z0JBQzNELENBQUM7WUFDSCxDQUFDO2lCQUFNLENBQUM7Z0JBQ04sTUFBTSxDQUFDLEtBQUssR0FBRyx1QkFBdUIsQ0FBQztZQUN6QyxDQUFDO1FBQ0gsQ0FBQztRQUFDLE9BQU8sS0FBSyxFQUFFLENBQUM7WUFDZixNQUFNLENBQUMsS0FBSyxHQUFHLDBCQUEwQixLQUFLLENBQUMsT0FBTyxFQUFFLENBQUM7UUFDM0QsQ0FBQztRQUVELE9BQU8sTUFBTSxDQUFDO0lBQ2hCLENBQUM7SUFFRDs7Ozs7T0FLRztJQUNJLEtBQUssQ0FBQyxzQkFBc0IsQ0FBQyxNQUFjLEVBQUUsZUFBdUIsS0FBSztRQUs5RSxNQUFNLENBQUMsR0FBRyxFQUFFLElBQUksRUFBRSxLQUFLLENBQUMsR0FBRyxNQUFNLE9BQU8sQ0FBQyxHQUFHLENBQUM7WUFDM0MsSUFBSSxDQUFDLGVBQWUsQ0FBQyxNQUFNLENBQUM7WUFDNUIsSUFBSSxDQUFDLGdCQUFnQixDQUFDLE1BQU0sRUFBRSxZQUFZLENBQUM7WUFDM0MsSUFBSSxDQUFDLGlCQUFpQixDQUFDLE1BQU0sQ0FBQztTQUMvQixDQUFDLENBQUM7UUFFSCxPQUFPLEVBQUUsR0FBRyxFQUFFLElBQUksRUFBRSxLQUFLLEVBQUUsQ0FBQztJQUM5QixDQUFDO0lBRUQ7Ozs7O09BS0c7SUFDSSxpQkFBaUIsQ0FBQyxNQUFjLEVBQUUsVUFNckMsRUFBRTtRQUNKLE1BQU0sRUFDSixTQUFTLEdBQUcsSUFBSSxFQUNoQixRQUFRLEdBQUcsSUFBSSxFQUNmLFVBQVUsR0FBRyxFQUFFLEVBQ2YsVUFBVSxHQUFHLEVBQUUsRUFDZixNQUFNLEdBQUcsVUFBVSxFQUNwQixHQUFHLE9BQU8sQ0FBQztRQUVaLElBQUksS0FBSyxHQUFHLFFBQVEsQ0FBQztRQUVyQixJQUFJLFNBQVMsRUFBRSxDQUFDO1lBQ2QsS0FBSyxJQUFJLEtBQUssQ0FBQztRQUNqQixDQUFDO1FBRUQsSUFBSSxRQUFRLEVBQUUsQ0FBQztZQUNiLEtBQUssSUFBSSxJQUFJLENBQUM7UUFDaEIsQ0FBQztRQUVELG1CQUFtQjtRQUNuQixLQUFLLE1BQU0sRUFBRSxJQUFJLFVBQVUsRUFBRSxDQUFDO1lBQzVCLElBQUksRUFBRSxDQUFDLFFBQVEsQ0FBQyxHQUFHLENBQUMsRUFBRSxDQUFDO2dCQUNyQixLQUFLLElBQUksUUFBUSxFQUFFLEVBQUUsQ0FBQztZQUN4QixDQUFDO2lCQUFNLENBQUM7Z0JBQ04sS0FBSyxJQUFJLFFBQVEsRUFBRSxFQUFFLENBQUM7WUFDeEIsQ0FBQztRQUNILENBQUM7UUFFRCxlQUFlO1FBQ2YsS0FBSyxNQUFNLE9BQU8sSUFBSSxVQUFVLEVBQUUsQ0FBQztZQUNqQyxLQUFLLElBQUksWUFBWSxPQUFPLEVBQUUsQ0FBQztRQUNqQyxDQUFDO1FBRUQsYUFBYTtRQUNiLE1BQU0sU0FBUyxHQUFHO1lBQ2hCLE1BQU0sRUFBRSxNQUFNO1lBQ2QsU0FBUyxFQUFFLE1BQU07WUFDakIsVUFBVSxFQUFFLE1BQU07WUFDbEIsTUFBTSxFQUFFLE1BQU07WUFDZCxRQUFRLEVBQUUsTUFBTTtTQUNqQixDQUFDO1FBRUYsS0FBSyxJQUFJLElBQUksU0FBUyxDQUFDLE1BQU0sQ0FBQyxFQUFFLENBQUM7UUFFakMsT0FBTztZQUNMLElBQUksRUFBRSxNQUFNO1lBQ1osSUFBSSxFQUFFLEtBQUs7WUFDWCxLQUFLLEVBQUUsS0FBSztTQUNiLENBQUM7SUFDSixDQUFDO0lBRUQ7Ozs7O09BS0c7SUFDSSxtQkFBbUIsQ0FBQyxNQUFjLEVBQUUsVUFPdkMsRUFBRTtRQUNKLE1BQU0sRUFDSixNQUFNLEdBQUcsTUFBTSxFQUNmLGVBQWUsRUFDZixHQUFHLEdBQUcsR0FBRyxFQUNULEdBQUcsRUFDSCxHQUFHLEVBQ0gsWUFBWSxHQUFHLENBQUMsRUFDakIsR0FBRyxPQUFPLENBQUM7UUFFWixJQUFJLEtBQUssR0FBRyxjQUFjLEdBQUcsTUFBTSxDQUFDO1FBRXBDLElBQUksZUFBZSxFQUFFLENBQUM7WUFDcEIsS0FBSyxJQUFJLFFBQVEsZUFBZSxFQUFFLENBQUM7UUFDckMsQ0FBQztRQUVELElBQUksR0FBRyxLQUFLLEdBQUcsRUFBRSxDQUFDO1lBQ2hCLEtBQUssSUFBSSxTQUFTLEdBQUcsRUFBRSxDQUFDO1FBQzFCLENBQUM7UUFFRCxJQUFJLEdBQUcsRUFBRSxDQUFDO1lBQ1IsS0FBSyxJQUFJLGdCQUFnQixHQUFHLEVBQUUsQ0FBQztRQUNqQyxDQUFDO1FBRUQsSUFBSSxHQUFHLEVBQUUsQ0FBQztZQUNSLEtBQUssSUFBSSxnQkFBZ0IsR0FBRyxFQUFFLENBQUM7UUFDakMsQ0FBQztRQUVELElBQUksWUFBWSxLQUFLLENBQUMsRUFBRSxDQUFDO1lBQ3ZCLEtBQUssSUFBSSxRQUFRLFlBQVksR0FBRyxLQUFLLEVBQUUsQ0FBQztRQUMxQyxDQUFDO1FBRUQsZ0RBQWdEO1FBQ2hELEtBQUssSUFBSSx5QkFBeUIsQ0FBQztRQUVuQyxPQUFPO1lBQ0wsSUFBSSxFQUFFLFVBQVUsTUFBTSxFQUFFO1lBQ3hCLElBQUksRUFBRSxLQUFLO1lBQ1gsS0FBSyxFQUFFLEtBQUs7U0FDYixDQUFDO0lBQ0osQ0FBQztJQUVEOzs7O09BSUc7SUFDSSxLQUFLLENBQUMsc0JBQXNCLENBQUMsTUFBYyxFQUFFLE9BQXFCO1FBQ3ZFLElBQUksQ0FBQztZQUNILE1BQU0sUUFBUSxHQUFHLE9BQU8sQ0FBQyxJQUFJLENBQUMsSUFBSSxDQUFDLEtBQUssQ0FBQyxhQUFhLEVBQUUsR0FBRyxNQUFNLHVCQUF1QixDQUFDLENBQUM7WUFDMUYsTUFBTSxPQUFPLENBQUMsT0FBTyxDQUFDLElBQUksQ0FBQyxRQUFRLENBQUMsQ0FBQyxLQUFLLENBQUMsSUFBSSxDQUFDLFNBQVMsQ0FBQyxPQUFPLEVBQUUsSUFBSSxFQUFFLENBQUMsQ0FBQyxDQUFDLENBQUM7WUFDN0UsT0FBTyxDQUFDLEdBQUcsQ0FBQywyQkFBMkIsTUFBTSxhQUFhLFFBQVEsRUFBRSxDQUFDLENBQUM7UUFDeEUsQ0FBQztRQUFDLE9BQU8sS0FBSyxFQUFFLENBQUM7WUFDZixPQUFPLENBQUMsS0FBSyxDQUFDLHdDQUF3QyxNQUFNLEdBQUcsRUFBRSxLQUFLLENBQUMsQ0FBQztRQUMxRSxDQUFDO0lBQ0gsQ0FBQztJQUVEOzs7O09BSUc7SUFDSyxZQUFZLENBQUksR0FBVztRQUNqQyxNQUFNLE1BQU0sR0FBRyxJQUFJLENBQUMsS0FBSyxDQUFDLEdBQUcsQ0FBQyxHQUFHLENBQUMsQ0FBQztRQUVuQyxJQUFJLE1BQU0sSUFBSSxNQUFNLENBQUMsT0FBTyxHQUFHLElBQUksQ0FBQyxHQUFHLEVBQUUsRUFBRSxDQUFDO1lBQzFDLE9BQU8sTUFBTSxDQUFDLElBQVMsQ0FBQztRQUMxQixDQUFDO1FBRUQsdUJBQXVCO1FBQ3ZCLElBQUksTUFBTSxFQUFFLENBQUM7WUFDWCxJQUFJLENBQUMsS0FBSyxDQUFDLE1BQU0sQ0FBQyxHQUFHLENBQUMsQ0FBQztRQUN6QixDQUFDO1FBRUQsT0FBTyxTQUFTLENBQUM7SUFDbkIsQ0FBQztJQUVEOzs7OztPQUtHO0lBQ0ssVUFBVSxDQUFJLEdBQVcsRUFBRSxJQUFPLEVBQUUsTUFBYyxJQUFJLENBQUMsY0FBYyxDQUFDLFFBQVE7UUFDcEYsSUFBSSxHQUFHLElBQUksQ0FBQztZQUFFLE9BQU8sQ0FBQyxpQ0FBaUM7UUFFdkQsSUFBSSxDQUFDLEtBQUssQ0FBQyxHQUFHLENBQUMsR0FBRyxFQUFFO1lBQ2xCLElBQUk7WUFDSixPQUFPLEVBQUUsSUFBSSxDQUFDLEdBQUcsRUFBRSxHQUFHLEdBQUc7U0FDMUIsQ0FBQyxDQUFDO0lBQ0wsQ0FBQztJQUVEOzs7T0FHRztJQUNJLFVBQVUsQ0FBQyxHQUFZO1FBQzVCLElBQUksR0FBRyxFQUFFLENBQUM7WUFDUixJQUFJLENBQUMsS0FBSyxDQUFDLE1BQU0sQ0FBQyxHQUFHLENBQUMsQ0FBQztRQUN6QixDQUFDO2FBQU0sQ0FBQztZQUNOLElBQUksQ0FBQyxLQUFLLENBQUMsS0FBSyxFQUFFLENBQUM7UUFDckIsQ0FBQztJQUNILENBQUM7SUFFRDs7Ozs7T0FLRztJQUNLLFlBQVksQ0FBQyxNQUFjLEVBQUUsVUFBa0IsSUFBSTtRQUN6RCxPQUFPLElBQUksT0FBTyxDQUFDLENBQUMsT0FBTyxFQUFFLE1BQU0sRUFBRSxFQUFFO1lBQ3JDLE1BQU0sU0FBUyxHQUFHLFVBQVUsQ0FBQyxHQUFHLEVBQUU7Z0JBQ2hDLE1BQU0sQ0FBQyxJQUFJLEtBQUssQ0FBQyw2QkFBNkIsTUFBTSxFQUFFLENBQUMsQ0FBQyxDQUFDO1lBQzNELENBQUMsRUFBRSxPQUFPLENBQUMsQ0FBQztZQUVaLE9BQU8sQ0FBQyxHQUFHLENBQUMsU0FBUyxDQUFDLE1BQU0sRUFBRSxDQUFDLEdBQUcsRUFBRSxTQUFTLEVBQUUsRUFBRTtnQkFDL0MsWUFBWSxDQUFDLFNBQVMsQ0FBQyxDQUFDO2dCQUV4QixJQUFJLEdBQUcsRUFBRSxDQUFDO29CQUNSLE1BQU0sQ0FBQyxHQUFHLENBQUMsQ0FBQztnQkFDZCxDQUFDO3FCQUFNLENBQUM7b0JBQ04sT0FBTyxDQUFDLFNBQVMsQ0FBQyxDQUFDO2dCQUNyQixDQUFDO1lBQ0gsQ0FBQyxDQUFDLENBQUM7UUFDTCxDQUFDLENBQUMsQ0FBQztJQUNMLENBQUM7SUFFRDs7Ozs7T0FLRztJQUNLLGFBQWEsQ0FBQyxNQUFjLEVBQUUsVUFBa0IsSUFBSTtRQUMxRCxPQUFPLElBQUksT0FBTyxDQUFDLENBQUMsT0FBTyxFQUFFLE1BQU0sRUFBRSxFQUFFO1lBQ3JDLE1BQU0sU0FBUyxHQUFHLFVBQVUsQ0FBQyxHQUFHLEVBQUU7Z0JBQ2hDLE1BQU0sQ0FBQyxJQUFJLEtBQUssQ0FBQyw4QkFBOEIsTUFBTSxFQUFFLENBQUMsQ0FBQyxDQUFDO1lBQzVELENBQUMsRUFBRSxPQUFPLENBQUMsQ0FBQztZQUVaLE9BQU8sQ0FBQyxHQUFHLENBQUMsVUFBVSxDQUFDLE1BQU0sRUFBRSxDQUFDLEdBQUcsRUFBRSxPQUFPLEVBQUUsRUFBRTtnQkFDOUMsWUFBWSxDQUFDLFNBQVMsQ0FBQyxDQUFDO2dCQUV4QixJQUFJLEdBQUcsRUFBRSxDQUFDO29CQUNSLE1BQU0sQ0FBQyxHQUFHLENBQUMsQ0FBQztnQkFDZCxDQUFDO3FCQUFNLENBQUM7b0JBQ04sT0FBTyxDQUFDLE9BQU8sQ0FBQyxDQUFDO2dCQUNuQixDQUFDO1lBQ0gsQ0FBQyxDQUFDLENBQUM7UUFDTCxDQUFDLENBQUMsQ0FBQztJQUNMLENBQUM7SUFFRDs7OztPQUlHO0lBQ0ksS0FBSyxDQUFDLDZCQUE2QixDQUFDLE1BQWM7UUFDdkQsTUFBTSxPQUFPLEdBQWlCLEVBQUUsQ0FBQztRQUVqQyxtREFBbUQ7UUFDbkQsSUFBSSxDQUFDO1lBQ0gsaUNBQWlDO1lBQ2pDLE1BQU0sVUFBVSxHQUFHLE1BQU0sSUFBSSxDQUFDLFdBQVcsQ0FBQyxxQkFBcUIsQ0FBQyxNQUFNLENBQUMsQ0FBQztZQUN4RSxPQUFPLENBQUMsSUFBSSxDQUFDLFVBQVUsQ0FBQyxDQUFDO1FBQzNCLENBQUM7UUFBQyxPQUFPLEtBQUssRUFBRSxDQUFDO1lBQ2YsT0FBTyxDQUFDLEtBQUssQ0FBQyxpQ0FBaUMsTUFBTSxHQUFHLEVBQUUsS0FBSyxDQUFDLENBQUM7UUFDbkUsQ0FBQztRQUVELHNCQUFzQjtRQUN0QixNQUFNLFNBQVMsR0FBRyxJQUFJLENBQUMsaUJBQWlCLENBQUMsTUFBTSxFQUFFO1lBQy9DLFNBQVMsRUFBRSxJQUFJO1lBQ2YsUUFBUSxFQUFFLElBQUk7WUFDZCxNQUFNLEVBQUUsVUFBVTtTQUNuQixDQUFDLENBQUM7UUFDSCxPQUFPLENBQUMsSUFBSSxDQUFDLFNBQVMsQ0FBQyxDQUFDO1FBRXhCLHdCQUF3QjtRQUN4QixNQUFNLFdBQVcsR0FBRyxJQUFJLENBQUMsbUJBQW1CLENBQUMsTUFBTSxFQUFFO1lBQ25ELE1BQU0sRUFBRSxNQUFNLEVBQUUsNkJBQTZCO1lBQzdDLEdBQUcsRUFBRSxTQUFTLE1BQU0sRUFBRSxDQUFDLDBDQUEwQztTQUNsRSxDQUFDLENBQUM7UUFDSCxPQUFPLENBQUMsSUFBSSxDQUFDLFdBQVcsQ0FBQyxDQUFDO1FBRTFCLHVCQUF1QjtRQUN2QixNQUFNLElBQUksQ0FBQyxzQkFBc0IsQ0FBQyxNQUFNLEVBQUUsT0FBTyxDQUFDLENBQUM7UUFFbkQsT0FBTyxPQUFPLENBQUM7SUFDakIsQ0FBQztDQUNGIn0=
|