From 17d46bdcd5168a3d1a71f2cc7cc662a3e1dfbf29 Mon Sep 17 00:00:00 2001
From: John Shaver <john@jshaver.net>
Date: Wed, 15 Aug 2018 14:18:12 -0700
Subject: [PATCH 01/31] Partially implemented mobile break points.

---
 lib/extensions/admin/index.html               | 24 ++++++----
 .../admin/static-site-assets/styles/1200.css  | 27 +++++++++++
 .../admin/static-site-assets/styles/main.css  | 45 +++++++++++++------
 3 files changed, 75 insertions(+), 21 deletions(-)
 create mode 100644 lib/extensions/admin/static-site-assets/styles/1200.css
diff --git a/lib/extensions/admin/index.html b/lib/extensions/admin/index.html
index ea5cdc5..b668a23 100644
--- a/lib/extensions/admin/index.html
+++ b/lib/extensions/admin/index.html
@@ -2,9 +2,11 @@
 <html>
 	<head>
     <meta charset="utf-8" />
+    <meta name="viewport" content="width=900">
 		<title>Telebit&trade; Cloud</title>
     <link href="static-site-assets/styles/main.css" rel="stylesheet">
     <link href="static-site-assets/styles/vertical-slide.css" rel="stylesheet">
+    <link href="static-site-assets/styles/1200.css" rel="stylesheet" media="(max-width:1200px)">
     <link 
         href="https://fonts.googleapis.com/css?family=Source+Sans+Pro:400,700,900" 
         rel="stylesheet"
@@ -68,7 +70,7 @@
       </div>
     </div>
     <div class="content">
-      <div class="container">
+      <div class="container quickstart-container">
         <h2 class="use-it">Use it <div class="sliding-vertical">
           <!-- to add more of or remove some of these, you will also need to update
               ./static-site-assets/styles/vertical-slide.css
@@ -84,13 +86,17 @@
         </div></h2>
         <h2 id="download-section">Quickstart with bash</h2>
         <div class="quickstart-step">
-          <div class="quickstart-step-number">1</div>
-          <div class="quickstart-step-text">Install Telebit</div>
-          <pre class="quickstart-terminal qickstart-terminal-prompt">curl https://get.telebit.io | bash</pre>
+          <div class="quickstart-step-text">
+            <div class="quickstart-step-number">1</div>
+            <div class="quickstart-step-name">Install Telebit</div>
+          </div>
+          <pre class="quickstart-terminal qickstart-terminal-prompt">curl https://get.telebit.io/ | bash</pre>
         </div>
         <div class="quickstart-step">
-          <div class="quickstart-step-number">2</div>
-          <div class="quickstart-step-text">Claim your device via Email</div>
+          <div class="quickstart-step-text">
+            <div class="quickstart-step-number">2</div>
+            <div class="quickstart-step-name">Claim your device via Email</div>
+          </div>
           <pre class="quickstart-terminal">Hello!
 
 Want to use 'Jon's Macbook Pro' with Telebit?
@@ -99,8 +105,10 @@ Just confirm your email address:
     <u>Confirm Email Address</u></pre>
         </div>
         <div class="quickstart-step">
-          <div class="quickstart-step-number">3</div>
-          <div class="quickstart-step-text">Enjoy Anytime, Anywhere Access</div>
+          <div class="quickstart-step-text">
+            <div class="quickstart-step-number">3</div>
+            <div class="quickstart-step-name">Enjoy Anytime, Anywhere Access</div>
+          </div>
           <pre class="quickstart-terminal"><strong>For Local Development</strong>
 
   <code class="quickstart-input">~/telebit http 3000</code>
diff --git a/lib/extensions/admin/static-site-assets/styles/1200.css b/lib/extensions/admin/static-site-assets/styles/1200.css
new file mode 100644
index 0000000..339ee02
--- /dev/null
+++ b/lib/extensions/admin/static-site-assets/styles/1200.css
@@ -0,0 +1,27 @@
+.quickstart-step-text {
+  align-items: center;
+  justify-content: center;
+  margin: 0 0 1.5em;
+}
+
+.quickstart-step {
+    flex-direction: column;
+    justify-content: center;
+    align-items: center;
+}
+
+.quickstart-terminal {
+    flex: 0 0;
+}
+
+.container.quickstart-container {
+    padding: 0;
+}
+
+@media (max-width: 900px) {
+
+  .donate-section p {
+      margin: 1.77777778em 10%;
+  }
+
+}
diff --git a/lib/extensions/admin/static-site-assets/styles/main.css b/lib/extensions/admin/static-site-assets/styles/main.css
index 2b2737d..e347b9e 100644
--- a/lib/extensions/admin/static-site-assets/styles/main.css
+++ b/lib/extensions/admin/static-site-assets/styles/main.css
@@ -30,7 +30,7 @@ a:hover, u:hover {
 }
 
 .container {
-  width: 840px;
+  width: 788px;
   margin: auto;
 }
 
@@ -93,7 +93,7 @@ a.link-button.wide {
 }
 
 .demo-container {
-  margin: 1em 9.4444em 0;
+  margin-top: 1em;
   position: relative;
   height: 236px;
   width: 644px;
@@ -197,7 +197,7 @@ body {}
 
 .donate-section {
   background-color: #f7f7f7;
-  padding: 1.777778em;
+  padding: 1.777778em 0;
 }
 
 .use-it {
@@ -215,7 +215,7 @@ body {}
   height: 1.583333333em;
   width: 1.5833333333em;
   font-weight: bold;
-  display: flex;
+  display: inline-flex;
   align-items: center;
   justify-content: space-around;
   background-color: #f8f8f8;
@@ -226,24 +226,27 @@ body {}
 .quickstart-step {
   font-size: 1.33333em;
   display: flex;
+  flex-wrap: wrap;
   margin-bottom: 2em;
-  overflow: hidden;
+  justify-content: center;
 }
 
 .quickstart-step-text {
-  width: 7.833333333em;
+  min-width: 9.583336em;
   margin-right: 1.3333333em;
-  flex-shrink: 0;
+  flex: 1 1;
+  display: flex;
 }
 
 .quickstart-terminal {
-  flex: 1;
+  flex: 0 0 36.7em;
   background-color: #f7f7f7;
   font-family: monospace;
-  font-size: 0.625em;
+  font-size: 0.8em;
+  width: 36.7em;
   line-height: 1.33;
   margin: 0;
-  padding: 0.8em 0 0.8em 2em;
+  padding: 0.8em 1em 0.8em 2em;
 }
 .quickstart-line:before {
   content: "  ";
@@ -263,6 +266,7 @@ h3 {
 .install-badges {
   display: flex;
   justify-content: space-between;
+  margin: auto;
 }
 
 .install-badge {
@@ -307,7 +311,7 @@ h3 {
 }
 
 .feature-list {
-  margin: 4em;
+  margin: 4em 0;
 }
 
 .donate-section h2 {
@@ -347,7 +351,7 @@ input {
 
 .mailing-list-form {
   background-color: #d9d9d9;
-  padding: 1.77777778em;
+  padding: 1.77777778em 0;
 }
 
 .mailing-list-form li img {
@@ -365,7 +369,7 @@ footer .container {
 footer {
   background-color: #b3b3b3;
   color: white;
-  padding: 1.444444444em;
+  padding: 1.444444444em 0;
 }
 
 footer li {
@@ -410,3 +414,18 @@ a {}
 .install-badge:hover path {
   fill: #ababab;
 }
+
+input[type="submit"] {
+  appearance: none;
+  -webkit-appearance: none;
+}
+
+.quickstart-container {
+    max-width: 1025px;
+    width: auto;
+    padding: 0px 3.111111111em;
+}
+
+.quickstart-step-name {
+    display: inline-block;
+}

From 5e0b30f69e222ce59045af569e46d80adda0e13b Mon Sep 17 00:00:00 2001
From: John Shaver <john@jshaver.net>
Date: Fri, 17 Aug 2018 00:34:09 -0700
Subject: [PATCH 02/31] Hopefully fixed display issues with iOS safari.

---
 lib/extensions/admin/index.html                    |  2 +-
 .../admin/static-site-assets/styles/1200.css       | 14 ++++++++++++++
 .../admin/static-site-assets/styles/main.css       |  4 +++-
 3 files changed, 18 insertions(+), 2 deletions(-)

diff --git a/lib/extensions/admin/index.html b/lib/extensions/admin/index.html
index b668a23..831667a 100644
--- a/lib/extensions/admin/index.html
+++ b/lib/extensions/admin/index.html
@@ -2,7 +2,7 @@
 <html>
 	<head>
     <meta charset="utf-8" />
-    <meta name="viewport" content="width=900">
+    <meta name="viewport" content="width=830">
 		<title>Telebit&trade; Cloud</title>
     <link href="static-site-assets/styles/main.css" rel="stylesheet">
     <link href="static-site-assets/styles/vertical-slide.css" rel="stylesheet">
diff --git a/lib/extensions/admin/static-site-assets/styles/1200.css b/lib/extensions/admin/static-site-assets/styles/1200.css
index 339ee02..f778562 100644
--- a/lib/extensions/admin/static-site-assets/styles/1200.css
+++ b/lib/extensions/admin/static-site-assets/styles/1200.css
@@ -22,6 +22,20 @@
 
   .donate-section p {
       margin: 1.77777778em 10%;
+      font-size: 1.6em;
   }
 
 }
+
+
+h2 {
+    font-size: 1.9em;
+}
+
+.quickstart-step-name {
+    font-size: 1.2em;
+}
+
+h3 {
+    font-size: 1.5em;
+}
\ No newline at end of file
diff --git a/lib/extensions/admin/static-site-assets/styles/main.css b/lib/extensions/admin/static-site-assets/styles/main.css
index e347b9e..efc1af6 100644
--- a/lib/extensions/admin/static-site-assets/styles/main.css
+++ b/lib/extensions/admin/static-site-assets/styles/main.css
@@ -3,6 +3,8 @@ body{
   font-size: 18px;
   line-height: 1.3333;
   margin: 0;
+  -webkit-text-size-adjust: none;
+  text-size-adjust: none;
 }
 
 a {
@@ -191,7 +193,7 @@ a.link-button.wide {
   content: ">";
 }
 
-h2 {text-align: center;font-size: 1.777778em;margin: 0 0 1.25em 0;}
+h2 {text-align: center;font-size: 1.77778em;margin: 0 0 1.25em 0;}
 
 body {}
 

From d755b94bcdeb34ba4ca207081fe4882afda0cb04 Mon Sep 17 00:00:00 2001
From: John Shaver <john@jshaver.net>
Date: Fri, 17 Aug 2018 01:15:40 -0700
Subject: [PATCH 03/31] More mobile tweaks.

---
 lib/extensions/admin/index.html               |  4 +--
 .../admin/static-site-assets/styles/1200.css  | 30 +++++++++++--------
 2 files changed, 20 insertions(+), 14 deletions(-)

diff --git a/lib/extensions/admin/index.html b/lib/extensions/admin/index.html
index 831667a..1f0e3a2 100644
--- a/lib/extensions/admin/index.html
+++ b/lib/extensions/admin/index.html
@@ -2,7 +2,7 @@
 <html>
 	<head>
     <meta charset="utf-8" />
-    <meta name="viewport" content="width=830">
+    <meta name="viewport" content="width=900">
 		<title>Telebit&trade; Cloud</title>
     <link href="static-site-assets/styles/main.css" rel="stylesheet">
     <link href="static-site-assets/styles/vertical-slide.css" rel="stylesheet">
@@ -46,7 +46,7 @@
                 <div class="demo-browser-address-bar">
                   <img src="static-site-assets/images/green-secure.png">
                   <div class="demo-browser-url">
-                    https://test-app.telebit.cloud
+                    https://jondoe.telebit.io
                   </div>
                 </div>
               </div>
diff --git a/lib/extensions/admin/static-site-assets/styles/1200.css b/lib/extensions/admin/static-site-assets/styles/1200.css
index f778562..117466b 100644
--- a/lib/extensions/admin/static-site-assets/styles/1200.css
+++ b/lib/extensions/admin/static-site-assets/styles/1200.css
@@ -25,17 +25,23 @@
       font-size: 1.6em;
   }
 
+  .quickstart-terminal {
+      width: 100%;
+      box-sizing: border-box;
+      font-size: .95em;
+  }
+
+
+  h2 {
+      font-size: 1.9em;
+  }
+
+  .quickstart-step-name {
+      font-size: 1.2em;
+  }
+
+  h3 {
+      font-size: 1.5em;
+  }
 }
 
-
-h2 {
-    font-size: 1.9em;
-}
-
-.quickstart-step-name {
-    font-size: 1.2em;
-}
-
-h3 {
-    font-size: 1.5em;
-}
\ No newline at end of file

From 22e3730c4cbe05471c51d9afbdb4605593ce8f50 Mon Sep 17 00:00:00 2001
From: AJ ONeal <coolaj86@gmail.com>
Date: Sat, 1 Sep 2018 05:58:44 +0000
Subject: [PATCH 04/31] update web copy

---
 lib/extensions/admin/index.html         |  5 +++--
 lib/extensions/admin/sclient/index.html | 25 ++++++++++++++++++++++---
 2 files changed, 25 insertions(+), 5 deletions(-)

diff --git a/lib/extensions/admin/index.html b/lib/extensions/admin/index.html
index 1f0e3a2..b46bb86 100644
--- a/lib/extensions/admin/index.html
+++ b/lib/extensions/admin/index.html
@@ -31,7 +31,8 @@
     </header><div class="hero">
       <div class="container">
         <div class="spiel">
-          <h1>Work from 127.0.0.1</h1>
+          <h1>Build a Better Web
+            <br>Work from 127.0.0.1</h1>
         </div>
         <div class="hero-download">
           <a class="link-button wide" href="#download-section">Download</a>
@@ -312,7 +313,7 @@ Just confirm your email address:
             <div class="input-error email js-inactive"></div>
             <input type="email" name="email" id="email" placeholder="Email">
           </span>
-					<input class="link-button" type="submit">
+					<input class="link-button" type="submit" value="Join">
 				</form>
 				<ul>
           <li><img src="static-site-assets/images/done.svg" />Get exclusive invites to try new features</li>
diff --git a/lib/extensions/admin/sclient/index.html b/lib/extensions/admin/sclient/index.html
index ca09e72..c041bb4 100644
--- a/lib/extensions/admin/sclient/index.html
+++ b/lib/extensions/admin/sclient/index.html
@@ -14,7 +14,7 @@
     (think <code>telnet</code>, <code>netcat</code>, <code>ssh</code>, <code>openvpn</code>, etc).</p>
 
   <h2>Usage</h2>
-  <pre><code>$ sclient [-k] &lt;remote> &lt;local></code></pre>
+  <pre><code>$ sclient [-k] &lt;remote&gt; &lt;local&gt;</code></pre>
   <h3>Flags</h3>
   <ul>
     <li><kbd>-k, --insecure</kbd> ignore invalid tls certificates</li>
@@ -25,15 +25,34 @@
     <li><kbd>&lt;local&gt;</kbd> the local address and port to bind to (default bind address is 127.0.0.1 or ::1)
       <ul>
         <li><code>-</code> may be used to read from stdin (like netcat)</li>
-        <li>may be omitted when piping <code>printf "GET / HTTP/1.1\r\n\r\n" | sclient telebit.cloud</code></li>
+        <li>may be omitted when piping. Example: <code>printf "GET / HTTP/1.1\r\n\r\n" | sclient telebit.cloud</code></li>
       </ul>
     </li>
   </ul>
 
-  <h2>Example</h2>
+  <h2>Examples</h2>
+  <h3>SSH</h3>
+  <pre><code>$ ssh -o ProxyCommand="sclient %h:443" jon.telebit.io</code></pre>
+
+  <p>This is useful to be able to connect to SSH even from behind a corporate packet-inspection firewall.
+  It can also be used to multiplex and relay multiple ssh connections through a single host.
+  </p>
+
+  <h3>Telnet </h3>
   <pre><code>$ sclient example.com:443 localhost:3000
 &gt; [listening] example.com:443 &lt;= localhost:3000</code></pre>
   <pre><code>$ telnet localhost 3000</code></pre>
+  <h3>stdin/stdout</h3>
+  <pre><code>$ sclient whatever.com -
+&gt; (connected to whatever.com:443 and reading from stdin)</code></pre>
+  Use just like netcat or telnet. A manual HTTP request, for example:
+  <pre><code>&gt; GET / HTTP/1.1
+&gt; Host: whatever.com
+&gt; Connection: close
+&gt;  
+</code></pre>
+  
+  </code></pre>
 
   <h2>Downloads (standalone) <small>v1.1</small></h2>
   <ul>

From 0fa68eef1e77f0e4f93623723f688548f763231e Mon Sep 17 00:00:00 2001
From: AJ ONeal <coolaj86@gmail.com>
Date: Sat, 1 Sep 2018 06:03:42 +0000
Subject: [PATCH 05/31] don't fail vhost renewals

---
 bin/telebit-relay.js | 75 +++++++++++++++++++++++++-------------------
 1 file changed, 42 insertions(+), 33 deletions(-)

diff --git a/bin/telebit-relay.js b/bin/telebit-relay.js
index 684b86f..93f3a2f 100755
--- a/bin/telebit-relay.js
+++ b/bin/telebit-relay.js
@@ -2,6 +2,10 @@
 (function () {
 'use strict';
 
+var fs = require('fs');
+var path = require('path');
+var os = require('os');
+
 var pkg = require('../package.json');
 
 var argv = process.argv.slice(2);
@@ -67,54 +71,59 @@ function applyConfig(config) {
     state.config.greenlock.configDir = require('os').homedir() + require('path').sep + 'acme';
   }
 
+  // The domains being approved for the first time are listed in opts.domains
+  // Certs being renewed are listed in certs.altnames
   function approveDomains(opts, certs, cb) {
     if (state.debug) { console.log('[debug] approveDomains', opts.domains); }
-    // This is where you check your database and associated
-    // email addresses with domains and agreements and such
 
-    // The domains being approved for the first time are listed in opts.domains
-    // Certs being renewed are listed in certs.altnames
-    if (certs) {
-      opts.domains = certs.altnames;
-      cb(null, { options: opts, certs: certs });
-      return;
-    }
-
-    if (!state.validHosts) { state.validHosts = {}; }
-    if (!state.validHosts[opts.domains[0]] && state.config.vhost) {
-      if (state.debug) { console.log('[sni] vhost checking is turned on'); }
-      var vhost = state.config.vhost.replace(/:hostname/, opts.domains[0]);
-      require('fs').readdir(vhost, function (err, nodes) {
-        if (state.debug) { console.log('[sni] checking fs vhost', opts.domains[0], !err); }
-        if (err) { check(); return; }
-        if (nodes) { approve(); }
-      });
-      return;
-    }
-
-    function approve() {
+    function allow() {
       state.validHosts[opts.domains[0]] = true;
       opts.email = state.config.email;
       opts.agreeTos = state.config.agreeTos;
       opts.communityMember = state.config.communityMember || state.config.greenlock.communityMember;
       opts.challenges = {
         // TODO dns-01
-        'http-01': require('le-challenge-fs').create({ webrootPath: '/tmp/acme-challenges' })
+        'http-01': require('le-challenge-fs').create({ webrootPath: path.join(os.tmpdir(), 'acme-challenges') })
       };
       opts.communityMember = state.config.communityMember;
       cb(null, { options: opts, certs: certs });
     }
 
-    function check() {
-      if (state.debug) { console.log('[sni] checking servername'); }
-      if (-1 !== state.servernames.indexOf(opts.domain) || -1 !== (state._servernames||[]).indexOf(opts.domain)) {
-        approve();
-      } else {
-        cb(new Error("failed the approval chain '" + opts.domains[0] + "'"));
-      }
+    function deny() {
+      cb(new Error("[bin/telebit-relay.js] failed the approval chain '" + opts.domains[0] + "'"));
+      return;
     }
 
-    check();
+    // 1) If the host was already allowed => allow
+    if (!state.validHosts) { state.validHosts = {}; }
+    if (state.validHosts[opts.domains[0]]) {
+      allow();
+      return;
+    }
+
+    // 2) If the host is in the config => allow
+    if (state.debug) { console.log('[sni] checking servername'); }
+    if (-1 !== state.servernames.indexOf(opts.domain)
+      || -1 !== (state._servernames||[]).indexOf(opts.domain)) {
+      allow();
+      return;
+    }
+
+    // 3) If dynamic vhosting is allowed
+    //    & a vhost folder exist for this domain => allow
+    if (state.config.vhost) {
+      if (state.debug) { console.log('[sni] vhost checking is turned on'); }
+      var vhost = state.config.vhost.replace(/:hostname/, opts.domains[0]);
+      require('fs').readdir(vhost, function (err, nodes) {
+        if (state.debug) { console.log('[sni] checking fs vhost', opts.domains[0], !err); }
+        if (err) { deny(); return; }
+        if (nodes) { allow(); }
+      });
+      return;
+    }
+
+    // 4) fallback => fail
+    deny();
   }
 
   state.greenlock = Greenlock.create({
@@ -196,7 +205,7 @@ function applyConfig(config) {
   //});
 }
 
-require('fs').readFile(confpath, 'utf8', function (err, text) {
+fs.readFile(confpath, 'utf8', function (err, text) {
   var config;
 
   var recase = require('recase').create({});

From e6e8113ccaf6629b86c0fc526847b0491358a0fe Mon Sep 17 00:00:00 2001
From: AJ ONeal <coolaj86@gmail.com>
Date: Sat, 1 Sep 2018 06:40:43 +0000
Subject: [PATCH 06/31] separate server from relay

---
 lib/relay.js  | 549 +------------------------------------------------
 lib/server.js | 552 ++++++++++++++++++++++++++++++++++++++++++++++++++
 2 files changed, 553 insertions(+), 548 deletions(-)
 create mode 100644 lib/server.js

diff --git a/lib/relay.js b/lib/relay.js
index fdaeb59..ffb8dd7 100644
--- a/lib/relay.js
+++ b/lib/relay.js
@@ -1,555 +1,8 @@
 'use strict';
 
-var url = require('url');
-var sni = require('sni');
 var Packer = require('proxy-packer');
-var PortServers = {};
-var PromiseA;
-try {
-  PromiseA = require('bluebird');
-} catch(e) {
-  PromiseA = global.Promise;
-}
-
-function timeoutPromise(duration) {
-  return new PromiseA(function (resolve) {
-    setTimeout(resolve, duration);
-  });
-}
-
 var Devices = require('./device-tracker');
-var pipeWs = require('./pipe-ws.js');
-
-var Server = {
-  _initCommandHandlers: function (state, srv) {
-    var commandHandlers = {
-      add_token: function addToken(newAuth) {
-        return Server.addToken(state, srv, newAuth);
-      }
-    , delete_token: function (token) {
-        return state.Promise.resolve(function () {
-          var err;
-
-          if (token !== '*') {
-            err = Server.removeToken(state, srv, token);
-            if (err) { return state.Promise.reject(err); }
-          }
-
-          Object.keys(srv.grants).some(function (jwtoken) {
-            err = Server.removeToken(state, srv, jwtoken);
-            return err;
-          });
-          if (err) { return state.Promise.reject(err); }
-
-          return null;
-        });
-      }
-    };
-    commandHandlers.auth = commandHandlers.add_token;
-    commandHandlers.authn = commandHandlers.add_token;
-    commandHandlers.authz = commandHandlers.add_token;
-    srv._commandHandlers = commandHandlers;
-  }
-, _initPackerHandlers: function (state, srv) {
-    var packerHandlers = {
-      oncontrol: function (tun) {
-        var cmd;
-        try {
-          cmd = JSON.parse(tun.data.toString());
-        } catch (e) {}
-        if (!Array.isArray(cmd) || typeof cmd[0] !== 'number') {
-          var msg = 'received bad command "' + tun.data.toString() + '"';
-          console.warn(msg, 'from websocket', srv.socketId);
-          Server.sendTunnelMsg(srv, null, [0, {message: msg, code: 'E_BAD_COMMAND'}], 'control');
-          return;
-        }
-
-        if (cmd[0] < 0) {
-          // We only ever send one command and we send it once, so we just hard coded the ID as 1.
-          if (cmd[0] === -1) {
-            if (cmd[1]) {
-              console.warn('received error response to hello from', srv.socketId, cmd[1]);
-            }
-          }
-          else {
-            console.warn('received response to unknown command', cmd, 'from', srv.socketId);
-          }
-          return;
-        }
-
-        if (cmd[0] === 0) {
-          console.warn('received dis-associated error from', srv.socketId, cmd[1]);
-          return;
-        }
-
-        function onSuccess() {
-          Server.sendTunnelMsg(srv, null, [-cmd[0], null], 'control');
-        }
-        function onError(err) {
-          Server.sendTunnelMsg(srv, null, [-cmd[0], err], 'control');
-        }
-
-        if (!srv._commandHandlers[cmd[1]]) {
-          onError({ message: 'unknown command "'+cmd[1]+'"', code: 'E_UNKNOWN_COMMAND' });
-          return;
-        }
-
-        console.log('command:', cmd[1], cmd.slice(2));
-        return srv._commandHandlers[cmd[1]].apply(null, cmd.slice(2)).then(onSuccess, onError);
-      }
-
-    , onmessage: function (tun) {
-        var cid = Packer.addrToId(tun);
-        if (state.debug) { console.log("remote '" + Server.logName(state, srv) + "' has data for '" + cid + "'", tun.data.byteLength); }
-
-        var browserConn = Server.getBrowserConn(state, srv, cid);
-        if (!browserConn) {
-          Server.sendTunnelMsg(srv, tun, {message: 'no matching connection', code: 'E_NO_CONN'}, 'error');
-          return;
-        }
-
-        browserConn.write(tun.data);
-        // tunnelRead is how many bytes we've read from the tunnel, and written to the browser.
-        browserConn.tunnelRead = (browserConn.tunnelRead || 0) + tun.data.byteLength;
-        // If we have more than 1MB buffered data we need to tell the other side to slow down.
-        // Once we've finished sending what we have we can tell the other side to keep going.
-        // If we've already sent the 'pause' message though don't send it again, because we're
-        // probably just dealing with data queued before our message got to them.
-        if (!browserConn.remotePaused && browserConn.bufferSize > 1024*1024) {
-          Server.sendTunnelMsg(srv, tun, browserConn.tunnelRead, 'pause');
-          browserConn.remotePaused = true;
-
-          browserConn.once('drain', function () {
-            Server.sendTunnelMsg(srv, tun, browserConn.tunnelRead, 'resume');
-            browserConn.remotePaused = false;
-          });
-        }
-      }
-
-    , onpause: function (tun) {
-        var cid = Packer.addrToId(tun);
-        console.log('[TunnelPause]', cid);
-        var browserConn = Server.getBrowserConn(state, srv, cid);
-        if (browserConn) {
-          browserConn.manualPause = true;
-          browserConn.pause();
-        } else {
-          Server.sendTunnelMsg(srv, tun, {message: 'no matching connection', code: 'E_NO_CONN'}, 'error');
-        }
-      }
-
-    , onresume: function (tun) {
-        var cid = Packer.addrToId(tun);
-        console.log('[TunnelResume]', cid);
-        var browserConn = Server.getBrowserConn(state, srv, cid);
-        if (browserConn) {
-          browserConn.manualPause = false;
-          browserConn.resume();
-        } else {
-          Server.sendTunnelMsg(srv, tun, {message: 'no matching connection', code: 'E_NO_CONN'}, 'error');
-        }
-      }
-
-    , onend: function (tun) {
-        var cid = Packer.addrToId(tun);
-        console.log('[TunnelEnd]', cid);
-        Server.closeBrowserConn(state, srv, cid);
-      }
-    , onerror: function (tun) {
-        var cid = Packer.addrToId(tun);
-        console.warn('[TunnelError]', cid, tun.message);
-        Server.closeBrowserConn(state, srv, cid);
-      }
-    };
-    srv._packerHandlers = packerHandlers;
-    srv.unpacker = Packer.create(srv._packerHandlers);
-  }
-, _initSocketHandlers: function (state, srv) {
-    function refreshTimeout() {
-      srv.lastActivity = Date.now();
-    }
-
-    function checkTimeout() {
-      // Determine how long the connection has been "silent", ie no activity.
-      var silent = Date.now() - srv.lastActivity;
-
-      // If we have had activity within the last activityTimeout then all we need to do is
-      // call this function again at the soonest time when the connection could be timed out.
-      if (silent < state.activityTimeout) {
-        srv.timeoutId = setTimeout(checkTimeout, state.activityTimeout - silent);
-      }
-
-      // Otherwise we check to see if the pong has also timed out, and if not we send a ping
-      // and call this function again when the pong will have timed out.
-      else if (silent < state.activityTimeout + state.pongTimeout) {
-        if (state.debug) { console.log('pinging', Server.logName(state, srv)); }
-        try {
-          srv.ws.ping();
-        } catch (err) {
-          console.warn('failed to ping home cloud', Server.logName(state, srv));
-        }
-        srv.timeoutId = setTimeout(checkTimeout, state.pongTimeout);
-      }
-
-      // Last case means the ping we sent before didn't get a response soon enough, so we
-      // need to close the websocket connection.
-      else {
-        console.warn('home cloud', Server.logName(state, srv), 'connection timed out');
-        srv.ws.close(1013, 'connection timeout');
-      }
-    }
-
-    function forwardMessage(chunk) {
-      refreshTimeout();
-      if (state.debug) { console.log('[ws] device => client : demultiplexing message ', chunk.byteLength, 'bytes'); }
-      //console.log(chunk.toString());
-      srv.unpacker.fns.addChunk(chunk);
-    }
-
-    function hangup() {
-      clearTimeout(srv.timeoutId);
-      console.log('[ws] device hangup', Server.logName(state, srv), 'connection closing');
-      Object.keys(srv.grants).forEach(function (jwtoken) {
-        Server.removeToken(state, srv, jwtoken);
-      });
-      srv.ws.terminate();
-    }
-
-    srv.lastActivity = Date.now();
-    srv.timeoutId = null;
-    srv.timeoutId = setTimeout(checkTimeout, state.activityTimeout);
-
-    // Note that our websocket library automatically handles pong responses on ping requests
-    // before it even emits the event.
-    srv.ws.on('ping', refreshTimeout);
-    srv.ws.on('pong', refreshTimeout);
-    srv.ws.on('message', forwardMessage);
-    srv.ws.on('close', hangup);
-    srv.ws.on('error', hangup);
-  }
-, init: function init(state, srv) {
-    Server._initCommandHandlers(state, srv);
-    Server._initPackerHandlers(state, srv);
-    Server._initSocketHandlers(state, srv);
-
-    // Status Code '1' for Status 'hello'
-    Server.sendTunnelMsg(srv, null, [1, 'hello', [srv.unpacker._version], Object.keys(srv._commandHandlers)], 'control');
-  }
-, sendTunnelMsg: function sendTunnelMsg(srv, addr, data, service) {
-    srv.ws.send(Packer.pack(addr, data, service), {binary: true});
-  }
-, logName: function logName(state, srv) {
-    var result = Object.keys(srv.grants).map(function (jwtoken) {
-      return srv.grants[jwtoken].currentDesc;
-    }).join(';');
-
-    return result || srv.socketId;
-  }
-, onAuth: function onAuth(state, srv, rawAuth, grant) {
-    console.log('\n[relay.js] onAuth');
-    console.log(rawAuth);
-    //console.log(grant);
-    //var stringauth;
-    var err;
-    if (!grant || 'object' !== typeof grant) {
-      console.log('[relay.js] invalid token', grant);
-      err = new Error("invalid access token");
-      err.code = "E_INVALID_TOKEN";
-      return state.Promise.reject(err);
-    }
-
-    if ('string' !== typeof rawAuth) {
-      rawAuth = JSON.stringify(rawAuth);
-    }
-
-    // TODO don't fire the onAuth event on non-authz updates
-    if (!grant.jwt && !(grant.domains||[]).length && !(grant.ports||[]).length) {
-      console.log("[onAuth] nothing to offer at all");
-      return null;
-    }
-
-    console.log('[onAuth] check for upgrade token');
-    //console.log(grant);
-    if (grant.jwt) {
-      if (rawAuth !== grant.jwt) {
-        console.log('[onAuth] new token to send back');
-      }
-      // TODO only send token when new
-      if (true) {
-        // Access Token
-        Server.sendTunnelMsg(
-          srv
-        , null
-        , [ 3
-          , 'access_token'
-          , { jwt: grant.jwt }
-          ]
-        , 'control'
-        );
-        // these aren't needed internally once they're sent
-        grant.jwt = null;
-      }
-    }
-
-    /*
-    if (!Array.isArray(grant.domains) || !grant.domains.length) {
-      err = new Error("invalid domains array");
-      err.code = "E_INVALID_NAME";
-      return state.Promise.reject(err);
-    }
-    */
-    if (grant.domains.some(function (name) { return typeof name !== 'string'; })) {
-      console.log('bad domain names');
-      err = new Error("invalid domain name(s)");
-      err.code = "E_INVALID_NAME";
-      return state.Promise.reject(err);
-    }
-
-    console.log('[onAuth] strolling through pleasantries');
-    // Add the custom properties we need to manage this remote, then add it to all the relevant
-    // domains and the list of all this websocket's grants.
-    grant.domains.forEach(function (domainname) {
-      console.log('add', domainname, 'to device lists');
-      srv.domainsMap[domainname] = true;
-      Devices.add(state.deviceLists, domainname, srv);
-      // TODO allow subs to go to individual devices
-      Devices.alias(state.deviceLists, domainname, '*.' + domainname);
-    });
-    srv.domains = Object.keys(srv.domainsMap);
-    srv.currentDesc = (grant.device && (grant.device.id || grant.device.hostname)) || srv.domains.join(',');
-    grant.currentDesc = (grant.device && (grant.device.id || grant.device.hostname)) || grant.domains.join(',');
-    //grant.srv = srv;
-    //grant.ws = srv.ws;
-    //grant.upgradeReq = srv.upgradeReq;
-    grant.clients = {};
-
-    if (!grant.ports) { grant.ports = []; }
-
-    function openPort(serviceport) {
-      function tcpListener(conn) {
-        Server.onDynTcpConn(state, srv, srv.portsMap[serviceport], conn);
-      }
-      serviceport = parseInt(serviceport, 10) || 0;
-      if (!serviceport) {
-        // TODO error message about bad port
-        return;
-      }
-      if (PortServers[serviceport]) {
-        console.log('reuse', serviceport, 'for this connection');
-        //grant.ports = [];
-        srv.portsMap[serviceport] = PortServers[serviceport];
-        srv.portsMap[serviceport].on('connection', tcpListener);
-        srv.portsMap[serviceport].tcpListener = tcpListener;
-        Devices.add(state.deviceLists, serviceport, srv);
-      } else {
-        try {
-          console.log('use new', serviceport, 'for this connection');
-          srv.portsMap[serviceport] = PortServers[serviceport] = require('net').createServer(tcpListener);
-          srv.portsMap[serviceport].tcpListener = tcpListener;
-          srv.portsMap[serviceport].listen(serviceport, function () {
-            console.info('[DynTcpConn] Port', serviceport, 'now open for', grant.currentDesc);
-            Devices.add(state.deviceLists, serviceport, srv);
-          });
-          srv.portsMap[serviceport].on('error', function (e) {
-            // TODO try again with random port
-            console.error("Server Error assigning a dynamic port to a new connection:", e);
-          });
-        } catch(e) {
-          // what a wonderful problem it will be the day that this bug needs to be fixed
-          // (i.e. there are enough users to run out of ports)
-          console.error("Error assigning a dynamic port to a new connection:", e);
-        }
-      }
-    }
-    grant.ports.forEach(openPort);
-
-    srv.grants[rawAuth] = grant;
-    console.info("[ws] authorized", srv.socketId, "for", grant.currentDesc);
-
-    console.log('notify of grants', grant.domains, grant.ports);
-    Server.sendTunnelMsg(
-      srv
-    , null
-    , [ 2
-      , 'grant'
-      , [ ['ssh+https', grant.domains[0], 443 ]
-          // TODO this should be account-specific
-        , ['ssh', 'ssh.' + state.config.sharedDomain, grant.ports ]
-        , ['tcp', 'tcp.' + state.config.sharedDomain, grant.ports ]
-        , ['https', grant.domains[0] ]
-        ]
-      ]
-    , 'control'
-    );
-    return null;
-  }
-, onDynTcpConn: function onDynTcpConn(state, srv, server, conn) {
-    var serviceport = server.address().port;
-    console.log('[DynTcpConn] new connection on', serviceport);
-    var nextDevice = Devices.next(state.deviceLists, serviceport);
-
-    if (!nextDevice) {
-      conn.write("[Sanity Error] I've got a blank space baby, but nowhere to write your name.");
-      conn.end();
-      try {
-        server.close();
-      } catch(e) {
-        console.error("[DynTcpConn] failed to close server:", e);
-      }
-      return;
-    }
-
-    conn.once('data', function (firstChunk) {
-      if (state.debug) { console.log("[DynTcp]", serviceport, "examining firstChunk from", Packer.socketToId(conn)); }
-      conn.pause();
-      //conn.unshift(firstChunk);
-      conn._handle.onread(firstChunk.length, firstChunk);
-
-      var servername;
-      var hostname;
-      var str;
-      var m;
-
-      if (22 === firstChunk[0]) {
-        servername = (sni(firstChunk)||'').toLowerCase();
-      } else if (firstChunk[0] > 32 && firstChunk[0] < 127) {
-        str = firstChunk.toString();
-        m = str.match(/(?:^|[\r\n])Host: ([^\r\n]+)[\r\n]*/im);
-        hostname = (m && m[1].toLowerCase() || '').split(':')[0];
-      }
-
-      if (servername || hostname) {
-        if (servername) {
-          conn.write("TLS with sni is allowed only on standard ports. If you've registered '" + servername + "' use port 443.");
-        } else {
-          conn.write("HTTP with Host headers is not allowed on dynamic ports. If you've registered '" + hostname + "' use port 80.");
-        }
-        conn.end();
-        return;
-      }
-
-      // pipeWs(servername, servicename, srv, client, serviceport)
-      // remote.clients is managed as part of the piping process
-      if (state.debug) { console.log("[DynTcp]", serviceport, "piping to srv (via loadbal)"); }
-      pipeWs(null, 'tcp', nextDevice, conn, serviceport);
-
-      process.nextTick(function () { conn.resume(); });
-    });
-  }
-, addToken: function addToken(state, srv, rawAuth) {
-    console.log("[addToken]", rawAuth);
-    if (srv.grants[rawAuth]) {
-      console.log("addToken - duplicate");
-      // return { message: "token sent multiple times", code: "E_TOKEN_REPEAT" };
-      return state.Promise.resolve(null);
-    }
-
-    return state.authenticate({ auth: rawAuth }).then(function (validatedTokenData) {
-      console.log('\n[relay.js] rawAuth');
-      console.log(rawAuth);
-
-      console.log('\n[relay.js] authnToken');
-      console.log(validatedTokenData);
-
-      // For tracking state between token exchanges
-      // and tacking on extra attributes (i.e. for extensions)
-      // TODO close on delete
-      if (!state.srvs[validatedTokenData.id]) {
-        state.srvs[validatedTokenData.id] = {};
-      }
-      if (!state.srvs[validatedTokenData.id].updateAuth) {
-        // be sure to always pass latest srv since the connection may change
-        // and reuse the same token
-        state.srvs[validatedTokenData.id].updateAuth = function (srv, validatedTokenData) {
-          return Server.onAuth(state, srv, rawAuth, validatedTokenData);
-        };
-      }
-      state.srvs[validatedTokenData.id].updateAuth(srv, validatedTokenData);
-    });
-  }
-, removeToken: function removeToken(state, srv, jwtoken) {
-    var grant = srv.grants[jwtoken];
-    if (!grant) {
-      return { message: 'specified token not present', code: 'E_INVALID_TOKEN'};
-    }
-
-    // Prevent any more browser connections for this grant being sent to this srv,
-    // and any existing connections from trying to send more data across the connection.
-    grant.domains.forEach(function (domainname) {
-      Devices.remove(state.deviceLists, domainname, srv);
-    });
-    grant.ports.forEach(function (portnumber) {
-      Devices.remove(state.deviceLists, portnumber, srv);
-      if (!srv.portsMap[portnumber]) { return; }
-      try {
-        srv.portsMap[portnumber].close(function () {
-          console.log("[DynTcpConn] closing server for ", portnumber);
-          delete srv.portsMap[portnumber];
-          delete PortServers[portnumber];
-        });
-      } catch(e) { /*ignore*/ }
-    });
-
-    // Close all of the existing browser connections associated with this websocket connection.
-    Object.keys(grant.clients).forEach(function (cid) {
-      Server.closeBrowserConn(state, srv, cid);
-    });
-    delete srv.grants[jwtoken];
-    console.log("[ws] removed token '" + grant.currentDesc + "' from", srv.socketId);
-    return null;
-  }
-, getBrowserConn: function getBrowserConn(state, srv, cid) {
-    return srv.clients[cid];
-  }
-, closeBrowserConn: function closeBrowserConn(state, srv, cid) {
-    if (!srv.clients[cid]) {
-      return;
-    }
-
-    PromiseA.resolve().then(function () {
-      var conn = srv.clients[cid];
-      conn.tunnelClosing = true;
-      conn.end();
-
-      // If no data is buffered for writing then we don't need to wait for it to drain.
-      if (!conn.bufferSize) {
-        return timeoutPromise(500);
-      }
-      // Otherwise we want the connection to be able to finish, but we also want to impose
-      // a time limit for it to drain, since it shouldn't have more than 1MB buffered.
-      return new PromiseA(function (resolve) {
-        var timeoutId = setTimeout(resolve, 60*1000);
-        conn.once('drain', function () {
-          clearTimeout(timeoutId);
-          setTimeout(resolve, 500);
-        });
-      });
-    }).then(function () {
-      if (srv.clients[cid]) {
-        console.warn(cid, 'browser connection still present after calling `end`');
-        srv.clients[cid].destroy();
-        return timeoutPromise(500);
-      }
-    }).then(function () {
-      if (srv.clients[cid]) {
-        console.error(cid, 'browser connection still present after calling `destroy`');
-        delete srv.clients[cid];
-      }
-    }).catch(function (err) {
-      console.warn('failed to close browser connection', cid, err);
-    });
-  }
-, parseAuth: function parseAuth(state, srv) {
-    var authn = (srv.upgradeReq.headers.authorization||'').split(/\s+/);
-    if (authn[0] && 'basic' === authn[0].toLowerCase()) {
-      try {
-        authn = new Buffer(authn[1], 'base64').toString('ascii').split(':');
-        return authn[1];
-      } catch (err) { }
-    }
-    return url.parse(srv.upgradeReq.url, true).query.access_token;
-  }
-};
+var Server = require('./server.js');
 
 module.exports.store = { Devices: Devices };
 module.exports.create = function (state) {
diff --git a/lib/server.js b/lib/server.js
new file mode 100644
index 0000000..b22d260
--- /dev/null
+++ b/lib/server.js
@@ -0,0 +1,552 @@
+'use strict';
+
+var url = require('url');
+var sni = require('sni');
+var Packer = require('proxy-packer');
+var PromiseA;
+try {
+  PromiseA = require('bluebird');
+} catch(e) {
+  PromiseA = global.Promise;
+}
+
+function timeoutPromise(duration) {
+  return new PromiseA(function (resolve) {
+    setTimeout(resolve, duration);
+  });
+}
+var Devices = require('./device-tracker');
+var pipeWs = require('./pipe-ws.js');
+var PortServers = {};
+var Server = {
+  _initCommandHandlers: function (state, srv) {
+    var commandHandlers = {
+      add_token: function addToken(newAuth) {
+        return Server.addToken(state, srv, newAuth);
+      }
+    , delete_token: function (token) {
+        return state.Promise.resolve(function () {
+          var err;
+
+          if (token !== '*') {
+            err = Server.removeToken(state, srv, token);
+            if (err) { return state.Promise.reject(err); }
+          }
+
+          Object.keys(srv.grants).some(function (jwtoken) {
+            err = Server.removeToken(state, srv, jwtoken);
+            return err;
+          });
+          if (err) { return state.Promise.reject(err); }
+
+          return null;
+        });
+      }
+    };
+    commandHandlers.auth = commandHandlers.add_token;
+    commandHandlers.authn = commandHandlers.add_token;
+    commandHandlers.authz = commandHandlers.add_token;
+    srv._commandHandlers = commandHandlers;
+  }
+, _initPackerHandlers: function (state, srv) {
+    var packerHandlers = {
+      oncontrol: function (tun) {
+        var cmd;
+        try {
+          cmd = JSON.parse(tun.data.toString());
+        } catch (e) {}
+        if (!Array.isArray(cmd) || typeof cmd[0] !== 'number') {
+          var msg = 'received bad command "' + tun.data.toString() + '"';
+          console.warn(msg, 'from websocket', srv.socketId);
+          Server.sendTunnelMsg(srv, null, [0, {message: msg, code: 'E_BAD_COMMAND'}], 'control');
+          return;
+        }
+
+        if (cmd[0] < 0) {
+          // We only ever send one command and we send it once, so we just hard coded the ID as 1.
+          if (cmd[0] === -1) {
+            if (cmd[1]) {
+              console.warn('received error response to hello from', srv.socketId, cmd[1]);
+            }
+          }
+          else {
+            console.warn('received response to unknown command', cmd, 'from', srv.socketId);
+          }
+          return;
+        }
+
+        if (cmd[0] === 0) {
+          console.warn('received dis-associated error from', srv.socketId, cmd[1]);
+          return;
+        }
+
+        function onSuccess() {
+          Server.sendTunnelMsg(srv, null, [-cmd[0], null], 'control');
+        }
+        function onError(err) {
+          Server.sendTunnelMsg(srv, null, [-cmd[0], err], 'control');
+        }
+
+        if (!srv._commandHandlers[cmd[1]]) {
+          onError({ message: 'unknown command "'+cmd[1]+'"', code: 'E_UNKNOWN_COMMAND' });
+          return;
+        }
+
+        console.log('command:', cmd[1], cmd.slice(2));
+        return srv._commandHandlers[cmd[1]].apply(null, cmd.slice(2)).then(onSuccess, onError);
+      }
+
+    , onmessage: function (tun) {
+        var cid = Packer.addrToId(tun);
+        if (state.debug) { console.log("remote '" + Server.logName(state, srv) + "' has data for '" + cid + "'", tun.data.byteLength); }
+
+        var browserConn = Server.getBrowserConn(state, srv, cid);
+        if (!browserConn) {
+          Server.sendTunnelMsg(srv, tun, {message: 'no matching connection', code: 'E_NO_CONN'}, 'error');
+          return;
+        }
+
+        browserConn.write(tun.data);
+        // tunnelRead is how many bytes we've read from the tunnel, and written to the browser.
+        browserConn.tunnelRead = (browserConn.tunnelRead || 0) + tun.data.byteLength;
+        // If we have more than 1MB buffered data we need to tell the other side to slow down.
+        // Once we've finished sending what we have we can tell the other side to keep going.
+        // If we've already sent the 'pause' message though don't send it again, because we're
+        // probably just dealing with data queued before our message got to them.
+        if (!browserConn.remotePaused && browserConn.bufferSize > 1024*1024) {
+          Server.sendTunnelMsg(srv, tun, browserConn.tunnelRead, 'pause');
+          browserConn.remotePaused = true;
+
+          browserConn.once('drain', function () {
+            Server.sendTunnelMsg(srv, tun, browserConn.tunnelRead, 'resume');
+            browserConn.remotePaused = false;
+          });
+        }
+      }
+
+    , onpause: function (tun) {
+        var cid = Packer.addrToId(tun);
+        console.log('[TunnelPause]', cid);
+        var browserConn = Server.getBrowserConn(state, srv, cid);
+        if (browserConn) {
+          browserConn.manualPause = true;
+          browserConn.pause();
+        } else {
+          Server.sendTunnelMsg(srv, tun, {message: 'no matching connection', code: 'E_NO_CONN'}, 'error');
+        }
+      }
+
+    , onresume: function (tun) {
+        var cid = Packer.addrToId(tun);
+        console.log('[TunnelResume]', cid);
+        var browserConn = Server.getBrowserConn(state, srv, cid);
+        if (browserConn) {
+          browserConn.manualPause = false;
+          browserConn.resume();
+        } else {
+          Server.sendTunnelMsg(srv, tun, {message: 'no matching connection', code: 'E_NO_CONN'}, 'error');
+        }
+      }
+
+    , onend: function (tun) {
+        var cid = Packer.addrToId(tun);
+        console.log('[TunnelEnd]', cid);
+        Server.closeBrowserConn(state, srv, cid);
+      }
+    , onerror: function (tun) {
+        var cid = Packer.addrToId(tun);
+        console.warn('[TunnelError]', cid, tun.message);
+        Server.closeBrowserConn(state, srv, cid);
+      }
+    };
+    srv._packerHandlers = packerHandlers;
+    srv.unpacker = Packer.create(srv._packerHandlers);
+  }
+, _initSocketHandlers: function (state, srv) {
+    function refreshTimeout() {
+      srv.lastActivity = Date.now();
+    }
+
+    function checkTimeout() {
+      // Determine how long the connection has been "silent", ie no activity.
+      var silent = Date.now() - srv.lastActivity;
+
+      // If we have had activity within the last activityTimeout then all we need to do is
+      // call this function again at the soonest time when the connection could be timed out.
+      if (silent < state.activityTimeout) {
+        srv.timeoutId = setTimeout(checkTimeout, state.activityTimeout - silent);
+      }
+
+      // Otherwise we check to see if the pong has also timed out, and if not we send a ping
+      // and call this function again when the pong will have timed out.
+      else if (silent < state.activityTimeout + state.pongTimeout) {
+        if (state.debug) { console.log('pinging', Server.logName(state, srv)); }
+        try {
+          srv.ws.ping();
+        } catch (err) {
+          console.warn('failed to ping home cloud', Server.logName(state, srv));
+        }
+        srv.timeoutId = setTimeout(checkTimeout, state.pongTimeout);
+      }
+
+      // Last case means the ping we sent before didn't get a response soon enough, so we
+      // need to close the websocket connection.
+      else {
+        console.warn('home cloud', Server.logName(state, srv), 'connection timed out');
+        srv.ws.close(1013, 'connection timeout');
+      }
+    }
+
+    function forwardMessage(chunk) {
+      refreshTimeout();
+      if (state.debug) { console.log('[ws] device => client : demultiplexing message ', chunk.byteLength, 'bytes'); }
+      //console.log(chunk.toString());
+      srv.unpacker.fns.addChunk(chunk);
+    }
+
+    function hangup() {
+      clearTimeout(srv.timeoutId);
+      console.log('[ws] device hangup', Server.logName(state, srv), 'connection closing');
+      Object.keys(srv.grants).forEach(function (jwtoken) {
+        Server.removeToken(state, srv, jwtoken);
+      });
+      srv.ws.terminate();
+    }
+
+    srv.lastActivity = Date.now();
+    srv.timeoutId = null;
+    srv.timeoutId = setTimeout(checkTimeout, state.activityTimeout);
+
+    // Note that our websocket library automatically handles pong responses on ping requests
+    // before it even emits the event.
+    srv.ws.on('ping', refreshTimeout);
+    srv.ws.on('pong', refreshTimeout);
+    srv.ws.on('message', forwardMessage);
+    srv.ws.on('close', hangup);
+    srv.ws.on('error', hangup);
+  }
+, init: function init(state, srv) {
+    Server._initCommandHandlers(state, srv);
+    Server._initPackerHandlers(state, srv);
+    Server._initSocketHandlers(state, srv);
+
+    // Status Code '1' for Status 'hello'
+    Server.sendTunnelMsg(srv, null, [1, 'hello', [srv.unpacker._version], Object.keys(srv._commandHandlers)], 'control');
+  }
+, sendTunnelMsg: function sendTunnelMsg(srv, addr, data, service) {
+    srv.ws.send(Packer.pack(addr, data, service), {binary: true});
+  }
+, logName: function logName(state, srv) {
+    var result = Object.keys(srv.grants).map(function (jwtoken) {
+      return srv.grants[jwtoken].currentDesc;
+    }).join(';');
+
+    return result || srv.socketId;
+  }
+, onAuth: function onAuth(state, srv, rawAuth, grant) {
+    console.log('\n[relay.js] onAuth');
+    console.log(rawAuth);
+    //console.log(grant);
+    //var stringauth;
+    var err;
+    if (!grant || 'object' !== typeof grant) {
+      console.log('[relay.js] invalid token', grant);
+      err = new Error("invalid access token");
+      err.code = "E_INVALID_TOKEN";
+      return state.Promise.reject(err);
+    }
+
+    if ('string' !== typeof rawAuth) {
+      rawAuth = JSON.stringify(rawAuth);
+    }
+
+    // TODO don't fire the onAuth event on non-authz updates
+    if (!grant.jwt && !(grant.domains||[]).length && !(grant.ports||[]).length) {
+      console.log("[onAuth] nothing to offer at all");
+      return null;
+    }
+
+    console.log('[onAuth] check for upgrade token');
+    //console.log(grant);
+    if (grant.jwt) {
+      if (rawAuth !== grant.jwt) {
+        console.log('[onAuth] new token to send back');
+      }
+      // TODO only send token when new
+      if (true) {
+        // Access Token
+        Server.sendTunnelMsg(
+          srv
+        , null
+        , [ 3
+          , 'access_token'
+          , { jwt: grant.jwt }
+          ]
+        , 'control'
+        );
+        // these aren't needed internally once they're sent
+        grant.jwt = null;
+      }
+    }
+
+    /*
+    if (!Array.isArray(grant.domains) || !grant.domains.length) {
+      err = new Error("invalid domains array");
+      err.code = "E_INVALID_NAME";
+      return state.Promise.reject(err);
+    }
+    */
+    if (grant.domains.some(function (name) { return typeof name !== 'string'; })) {
+      console.log('bad domain names');
+      err = new Error("invalid domain name(s)");
+      err.code = "E_INVALID_NAME";
+      return state.Promise.reject(err);
+    }
+
+    console.log('[onAuth] strolling through pleasantries');
+    // Add the custom properties we need to manage this remote, then add it to all the relevant
+    // domains and the list of all this websocket's grants.
+    grant.domains.forEach(function (domainname) {
+      console.log('add', domainname, 'to device lists');
+      srv.domainsMap[domainname] = true;
+      Devices.add(state.deviceLists, domainname, srv);
+      // TODO allow subs to go to individual devices
+      Devices.alias(state.deviceLists, domainname, '*.' + domainname);
+    });
+    srv.domains = Object.keys(srv.domainsMap);
+    srv.currentDesc = (grant.device && (grant.device.id || grant.device.hostname)) || srv.domains.join(',');
+    grant.currentDesc = (grant.device && (grant.device.id || grant.device.hostname)) || grant.domains.join(',');
+    //grant.srv = srv;
+    //grant.ws = srv.ws;
+    //grant.upgradeReq = srv.upgradeReq;
+    grant.clients = {};
+
+    if (!grant.ports) { grant.ports = []; }
+
+    function openPort(serviceport) {
+      function tcpListener(conn) {
+        Server.onDynTcpConn(state, srv, srv.portsMap[serviceport], conn);
+      }
+      serviceport = parseInt(serviceport, 10) || 0;
+      if (!serviceport) {
+        // TODO error message about bad port
+        return;
+      }
+      if (PortServers[serviceport]) {
+        console.log('reuse', serviceport, 'for this connection');
+        //grant.ports = [];
+        srv.portsMap[serviceport] = PortServers[serviceport];
+        srv.portsMap[serviceport].on('connection', tcpListener);
+        srv.portsMap[serviceport].tcpListener = tcpListener;
+        Devices.add(state.deviceLists, serviceport, srv);
+      } else {
+        try {
+          console.log('use new', serviceport, 'for this connection');
+          srv.portsMap[serviceport] = PortServers[serviceport] = require('net').createServer(tcpListener);
+          srv.portsMap[serviceport].tcpListener = tcpListener;
+          srv.portsMap[serviceport].listen(serviceport, function () {
+            console.info('[DynTcpConn] Port', serviceport, 'now open for', grant.currentDesc);
+            Devices.add(state.deviceLists, serviceport, srv);
+          });
+          srv.portsMap[serviceport].on('error', function (e) {
+            // TODO try again with random port
+            console.error("Server Error assigning a dynamic port to a new connection:", e);
+          });
+        } catch(e) {
+          // what a wonderful problem it will be the day that this bug needs to be fixed
+          // (i.e. there are enough users to run out of ports)
+          console.error("Error assigning a dynamic port to a new connection:", e);
+        }
+      }
+    }
+    grant.ports.forEach(openPort);
+
+    srv.grants[rawAuth] = grant;
+    console.info("[ws] authorized", srv.socketId, "for", grant.currentDesc);
+
+    console.log('notify of grants', grant.domains, grant.ports);
+    Server.sendTunnelMsg(
+      srv
+    , null
+    , [ 2
+      , 'grant'
+      , [ ['ssh+https', grant.domains[0], 443 ]
+          // TODO this should be account-specific
+        , ['ssh', 'ssh.' + state.config.sharedDomain, grant.ports ]
+        , ['tcp', 'tcp.' + state.config.sharedDomain, grant.ports ]
+        , ['https', grant.domains[0] ]
+        ]
+      ]
+    , 'control'
+    );
+    return null;
+  }
+, onDynTcpConn: function onDynTcpConn(state, srv, server, conn) {
+    var serviceport = server.address().port;
+    console.log('[DynTcpConn] new connection on', serviceport);
+    var nextDevice = Devices.next(state.deviceLists, serviceport);
+
+    if (!nextDevice) {
+      conn.write("[Sanity Error] I've got a blank space baby, but nowhere to write your name.");
+      conn.end();
+      try {
+        server.close();
+      } catch(e) {
+        console.error("[DynTcpConn] failed to close server:", e);
+      }
+      return;
+    }
+
+    conn.once('data', function (firstChunk) {
+      if (state.debug) { console.log("[DynTcp]", serviceport, "examining firstChunk from", Packer.socketToId(conn)); }
+      conn.pause();
+      //conn.unshift(firstChunk);
+      conn._handle.onread(firstChunk.length, firstChunk);
+
+      var servername;
+      var hostname;
+      var str;
+      var m;
+
+      if (22 === firstChunk[0]) {
+        servername = (sni(firstChunk)||'').toLowerCase();
+      } else if (firstChunk[0] > 32 && firstChunk[0] < 127) {
+        str = firstChunk.toString();
+        m = str.match(/(?:^|[\r\n])Host: ([^\r\n]+)[\r\n]*/im);
+        hostname = (m && m[1].toLowerCase() || '').split(':')[0];
+      }
+
+      if (servername || hostname) {
+        if (servername) {
+          conn.write("TLS with sni is allowed only on standard ports. If you've registered '" + servername + "' use port 443.");
+        } else {
+          conn.write("HTTP with Host headers is not allowed on dynamic ports. If you've registered '" + hostname + "' use port 80.");
+        }
+        conn.end();
+        return;
+      }
+
+      // pipeWs(servername, servicename, srv, client, serviceport)
+      // remote.clients is managed as part of the piping process
+      if (state.debug) { console.log("[DynTcp]", serviceport, "piping to srv (via loadbal)"); }
+      pipeWs(null, 'tcp', nextDevice, conn, serviceport);
+
+      process.nextTick(function () { conn.resume(); });
+    });
+  }
+, addToken: function addToken(state, srv, rawAuth) {
+    console.log("[addToken]", rawAuth);
+    if (srv.grants[rawAuth]) {
+      console.log("addToken - duplicate");
+      // return { message: "token sent multiple times", code: "E_TOKEN_REPEAT" };
+      return state.Promise.resolve(null);
+    }
+
+    return state.authenticate({ auth: rawAuth }).then(function (validatedTokenData) {
+      console.log('\n[relay.js] rawAuth');
+      console.log(rawAuth);
+
+      console.log('\n[relay.js] authnToken');
+      console.log(validatedTokenData);
+
+      // For tracking state between token exchanges
+      // and tacking on extra attributes (i.e. for extensions)
+      // TODO close on delete
+      if (!state.srvs[validatedTokenData.id]) {
+        state.srvs[validatedTokenData.id] = {};
+      }
+      if (!state.srvs[validatedTokenData.id].updateAuth) {
+        // be sure to always pass latest srv since the connection may change
+        // and reuse the same token
+        state.srvs[validatedTokenData.id].updateAuth = function (srv, validatedTokenData) {
+          return Server.onAuth(state, srv, rawAuth, validatedTokenData);
+        };
+      }
+      state.srvs[validatedTokenData.id].updateAuth(srv, validatedTokenData);
+    });
+  }
+, removeToken: function removeToken(state, srv, jwtoken) {
+    var grant = srv.grants[jwtoken];
+    if (!grant) {
+      return { message: 'specified token not present', code: 'E_INVALID_TOKEN'};
+    }
+
+    // Prevent any more browser connections for this grant being sent to this srv,
+    // and any existing connections from trying to send more data across the connection.
+    grant.domains.forEach(function (domainname) {
+      Devices.remove(state.deviceLists, domainname, srv);
+    });
+    grant.ports.forEach(function (portnumber) {
+      Devices.remove(state.deviceLists, portnumber, srv);
+      if (!srv.portsMap[portnumber]) { return; }
+      try {
+        srv.portsMap[portnumber].close(function () {
+          console.log("[DynTcpConn] closing server for ", portnumber);
+          delete srv.portsMap[portnumber];
+          delete PortServers[portnumber];
+        });
+      } catch(e) { /*ignore*/ }
+    });
+
+    // Close all of the existing browser connections associated with this websocket connection.
+    Object.keys(grant.clients).forEach(function (cid) {
+      Server.closeBrowserConn(state, srv, cid);
+    });
+    delete srv.grants[jwtoken];
+    console.log("[ws] removed token '" + grant.currentDesc + "' from", srv.socketId);
+    return null;
+  }
+, getBrowserConn: function getBrowserConn(state, srv, cid) {
+    return srv.clients[cid];
+  }
+, closeBrowserConn: function closeBrowserConn(state, srv, cid) {
+    if (!srv.clients[cid]) {
+      return;
+    }
+
+    PromiseA.resolve().then(function () {
+      var conn = srv.clients[cid];
+      conn.tunnelClosing = true;
+      conn.end();
+
+      // If no data is buffered for writing then we don't need to wait for it to drain.
+      if (!conn.bufferSize) {
+        return timeoutPromise(500);
+      }
+      // Otherwise we want the connection to be able to finish, but we also want to impose
+      // a time limit for it to drain, since it shouldn't have more than 1MB buffered.
+      return new PromiseA(function (resolve) {
+        var timeoutId = setTimeout(resolve, 60*1000);
+        conn.once('drain', function () {
+          clearTimeout(timeoutId);
+          setTimeout(resolve, 500);
+        });
+      });
+    }).then(function () {
+      if (srv.clients[cid]) {
+        console.warn(cid, 'browser connection still present after calling `end`');
+        srv.clients[cid].destroy();
+        return timeoutPromise(500);
+      }
+    }).then(function () {
+      if (srv.clients[cid]) {
+        console.error(cid, 'browser connection still present after calling `destroy`');
+        delete srv.clients[cid];
+      }
+    }).catch(function (err) {
+      console.warn('failed to close browser connection', cid, err);
+    });
+  }
+, parseAuth: function parseAuth(state, srv) {
+    var authn = (srv.upgradeReq.headers.authorization||'').split(/\s+/);
+    if (authn[0] && 'basic' === authn[0].toLowerCase()) {
+      try {
+        authn = new Buffer(authn[1], 'base64').toString('ascii').split(':');
+        return authn[1];
+      } catch (err) { }
+    }
+    return url.parse(srv.upgradeReq.url, true).query.access_token;
+  }
+};
+
+module.exports = Server;

From c2165578e1a25b5d11f49e599d03a7a99fc32088 Mon Sep 17 00:00:00 2001
From: AJ ONeal <coolaj86@gmail.com>
Date: Mon, 3 Sep 2018 22:27:45 +0000
Subject: [PATCH 07/31] sclient: updated docs for v1.2

---
 lib/extensions/admin/sclient/index.html | 14 +++++++++-----
 1 file changed, 9 insertions(+), 5 deletions(-)

diff --git a/lib/extensions/admin/sclient/index.html b/lib/extensions/admin/sclient/index.html
index c041bb4..df3c924 100644
--- a/lib/extensions/admin/sclient/index.html
+++ b/lib/extensions/admin/sclient/index.html
@@ -14,10 +14,13 @@
     (think <code>telnet</code>, <code>netcat</code>, <code>ssh</code>, <code>openvpn</code>, etc).</p>
 
   <h2>Usage</h2>
-  <pre><code>$ sclient [-k] &lt;remote&gt; &lt;local&gt;</code></pre>
+  <pre><code>$ sclient [flags] &lt;remote&gt; &lt;local&gt;</code></pre>
+  <pre><code>$ sclient example.com:443 localhost:3000</code></pre>
   <h3>Flags</h3>
   <ul>
     <li><kbd>-k, --insecure</kbd> ignore invalid tls certificates</li>
+    <li><kbd>--servername &lt;string&gt;</kbd> spoof SNI
+      (to disable use IP as &lt;remote&gt; and do not use this option)</li>
   </ul>
   <h3>Arguments</h3>
   <ul>
@@ -25,7 +28,7 @@
     <li><kbd>&lt;local&gt;</kbd> the local address and port to bind to (default bind address is 127.0.0.1 or ::1)
       <ul>
         <li><code>-</code> may be used to read from stdin (like netcat)</li>
-        <li>may be omitted when piping. Example: <code>printf "GET / HTTP/1.1\r\n\r\n" | sclient telebit.cloud</code></li>
+        <li>may be omitted when piping (see pipe example below)</li>
       </ul>
     </li>
   </ul>
@@ -51,10 +54,11 @@
 &gt; Connection: close
 &gt;  
 </code></pre>
-  
-  </code></pre>
 
-  <h2>Downloads (standalone) <small>v1.1</small></h2>
+  <h3>pipe</h3>
+  <pre><code>$ printf "GET / HTTP/1.1\r\nHost: telebit.cloud\r\n\r\n" | sclient telebit.cloud</code></pre>
+
+  <h2>Downloads (standalone) <small>v1.2</small></h2>
   <ul>
     <li>Windows 7/8/10
       <a href="dist/windows/amd64/sclient.exe">Download</a>

From 883f8a55b18753d76ed0355cde69b9ba226d5948 Mon Sep 17 00:00:00 2001
From: AJ ONeal <coolaj86@gmail.com>
Date: Tue, 11 Sep 2018 02:35:31 +0000
Subject: [PATCH 08/31] reduce pairing copy

---
 lib/extensions/admin/login/index.html | 39 +++++++++++++--------------
 1 file changed, 19 insertions(+), 20 deletions(-)

diff --git a/lib/extensions/admin/login/index.html b/lib/extensions/admin/login/index.html
index ff442e7..94dd721 100644
--- a/lib/extensions/admin/login/index.html
+++ b/lib/extensions/admin/login/index.html
@@ -1,14 +1,14 @@
 <!DOCTYPE html>
 <html>
 <head>
-  <!--meta http-equiv="refresh" content="5;url=https://' + tokenData.domains.join(',') + '/?serviceport=' + tokenData.ports.join(',')" /-->
+  <title>Telebit - Pair Device</title>
 </head>
 <body>
   <script>document.body.hidden = true;</script>
 
   <div class="js-error" hidden>
-    <h1>Invalid Magic Link</h1>
-    <div class="js-magic-link">'{{magic_link}}' isn't a valid magic link code.
+    <h1>Invalid Pairing Link</h1>
+    <div class="js-magic-link">'{{magic_link}}' isn't a valid pairing link code.
       <br>Links are only valid for a limited time, so you gotta act fast.
     </div>
   </div>
@@ -18,7 +18,7 @@
     <h2>Pair <span class="js-hostname">Device</span></h1>
 
     <p>Enter your device pairing code:
-      <input type="text" name="pair-code" placeholder="ex: 000 000">
+      <input type="text" name="pair-code" placeholder="ex: 0000">
     </p>
 
     <ul>
@@ -35,26 +35,25 @@
 
   <div class="js-authz" hidden>
 
-    <h1>Telebit Authorized</h1>
+    <h1>Telebit</h1>
 
-    <h2>Waiting for your device to connect...</h2>
-    <p>Check your device to complete the pairing.</p>
+    <ul>
+      <li><label><input type="checkbox" checked disabled> Authorized</label></li>
+      <li><label><input type="checkbox" checked disabled>
+        Generated <span class="js-domainname">xxx-xxx-xxx.example.com</span> just for you</label></li>
+      <li><label><input type="checkbox" disabled> Waiting for your device to pair</label></li>
+      <li><label><input type="checkbox" disabled>
+        Securing your new domain</label></li>
+    </ul>
 
-    <h2>🔒 <span class="js-domainname">xxx-xxx-xxx.example.com</span></h2>
-    <p>When your device is paired you will be redirected to
-      <a class="js-new-href">{{js-new-href}}</a>.
-    </p>
+    <p><strong>Check the command line on your device to finish pairing.</strong></p>
 
-    <h2 class="js-serviceport">xxxxx</h2>
-    <p>When your device is paired you will be able to use <span class="js-serviceport">xxxxx</span>
-    for SSH, and other TCP protocols.</p>
-    <pre><code>telebit ssh auto
+    <h2>Debug Info</h2>
+    <p><a class="js-new-href">{{js-new-href}}</a></p>
+    <p class="js-serviceport">xxxxx</p>
 
-ssh <span class="js-domainname">{{servername}}</span> -p <span class="js-serviceport">{{serviceport}}</span></code></pre>
-</code></pre>
-
-    <h2>Authorization Token</h2>
-    <small><pre><code class="js-token">{{js-token}}</code></pre></small>
+    <p><small>Authorization Token:
+      <pre><code class="js-token">{{js-token}}</code></pre></small></p>
 
   </div>
 

From 6e1320fe9b7fc832e8b3328ddb3fc56fbcacb80a Mon Sep 17 00:00:00 2001
From: AJ ONeal <coolaj86@gmail.com>
Date: Tue, 11 Sep 2018 02:39:40 +0000
Subject: [PATCH 09/31] update telebit homepage

---
 lib/extensions/admin/index.html | 11 ++++-------
 1 file changed, 4 insertions(+), 7 deletions(-)

diff --git a/lib/extensions/admin/index.html b/lib/extensions/admin/index.html
index b46bb86..888d5d3 100644
--- a/lib/extensions/admin/index.html
+++ b/lib/extensions/admin/index.html
@@ -31,11 +31,8 @@
     </header><div class="hero">
       <div class="container">
         <div class="spiel">
-          <h1>Build a Better Web
-            <br>Work from 127.0.0.1</h1>
-        </div>
-        <div class="hero-download">
-          <a class="link-button wide" href="#download-section">Download</a>
+          <h1>Access your devices
+            <br>Share your stuff</h1>
         </div>
         <div aria-hidden="true" class="demo-row">
           <div class="demo-container">
@@ -58,12 +55,12 @@
           
             <div class="demo-terminal">
               <div class="demo-terminal-input">
-                ~/telebit http 3000
+                telebit http 3000
               </div>
               <div class="demo-terminal-line">&nbsp;
               </div>
               <div class="demo-terminal-output">
-                Forwarding https://jondoe.telebit.io => localhost:3000
+                Forwarding https://jondoe.telebit.io =&gt; localhost:3000
               </div>
             </div>
           </div>

From 682557dc867cf09bfe8b44d1cbd97a19d97cb337 Mon Sep 17 00:00:00 2001
From: John Shaver <john@jshaver.net>
Date: Tue, 11 Sep 2018 10:55:18 -0700
Subject: [PATCH 10/31] Added fonts to login site.

---
 lib/extensions/admin/index.html               |  29 +++++++++++++++---
 lib/extensions/admin/login/css/main.css       |  13 ++++++++
 .../6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2    | Bin 0 -> 15908 bytes
 ...6xKydSBYKcSV-LCoeQqfX1RYOo3ig4vwlxdu.woff2 | Bin 0 -> 15480 bytes
 .../HI_SiYsKILxRpg3hIP6sJ7fM7PqlPevW.woff2    | Bin 0 -> 13172 bytes
 5 files changed, 38 insertions(+), 4 deletions(-)
 create mode 100644 lib/extensions/admin/login/css/main.css
 create mode 100644 lib/extensions/admin/static-site-assets/fonts/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2
 create mode 100644 lib/extensions/admin/static-site-assets/fonts/6xKydSBYKcSV-LCoeQqfX1RYOo3ig4vwlxdu.woff2
 create mode 100644 lib/extensions/admin/static-site-assets/fonts/HI_SiYsKILxRpg3hIP6sJ7fM7PqlPevW.woff2

diff --git a/lib/extensions/admin/index.html b/lib/extensions/admin/index.html
index 888d5d3..2aa066a 100644
--- a/lib/extensions/admin/index.html
+++ b/lib/extensions/admin/index.html
@@ -7,10 +7,31 @@
     <link href="static-site-assets/styles/main.css" rel="stylesheet">
     <link href="static-site-assets/styles/vertical-slide.css" rel="stylesheet">
     <link href="static-site-assets/styles/1200.css" rel="stylesheet" media="(max-width:1200px)">
-    <link 
-        href="https://fonts.googleapis.com/css?family=Source+Sans+Pro:400,700,900" 
-        rel="stylesheet"
-    >
+    <style>
+      @font-face {
+        font-family: 'Source Sans Pro';
+        font-style: normal;
+        font-display: block;
+        font-weight: 400;
+        src: local('Source Sans Pro Regular'), local('SourceSansPro-Regular'), url(/static-site-assets/fonts/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2) format('woff2');
+        unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+2000-206F, U+2074, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;
+      }
+      @font-face {
+        font-family: 'Source Sans Pro';
+        font-style: normal;
+        font-weight: 700;
+        font-display: block;
+        src: local('Source Sans Pro Bold'), local('SourceSansPro-Bold'), url(/static-site-assets/fonts/6xKydSBYKcSV-LCoeQqfX1RYOo3ig4vwlxdu.woff2) format('woff2');
+        unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+2000-206F, U+2074, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;
+      }
+      @font-face {
+        font-family: 'Source Code Pro';
+        font-style: normal;
+        font-weight: 400;
+        src: local('Source Code Pro'), local('SourceCodePro-Regular'), url(/static-site-assets/fonts/HI_SiYsKILxRpg3hIP6sJ7fM7PqlPevW.woff2) format('woff2');
+        unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+2000-206F, U+2074, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;
+      }
+    </style>
 	</head>
 	<body>
     <header>
diff --git a/lib/extensions/admin/login/css/main.css b/lib/extensions/admin/login/css/main.css
new file mode 100644
index 0000000..0179c2f
--- /dev/null
+++ b/lib/extensions/admin/login/css/main.css
@@ -0,0 +1,13 @@
+/*
+ * main.css
+ * Copyright (C) 2018 jshaver
+ *
+ * Distributed under terms of the MIT license.
+ */
+
+
+
+
+body {
+    font-family: SourceSansPro, sans-serif;
+}
\ No newline at end of file
diff --git a/lib/extensions/admin/static-site-assets/fonts/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 b/lib/extensions/admin/static-site-assets/fonts/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2
new file mode 100644
index 0000000000000000000000000000000000000000..efa300c564386e75fa0762d6a8b798442aa03711
GIT binary patch
literal 15908
zcmV+<KHI@}Pew8T0RR9106ruD5dZ)H0Gk8=06oG00RR9100000000000000000000
z0000QMjNtV9EKnUU;vF42r3DJa}fv%fy@wrvJDG_8UO({0we>7E(9P2g)#?;8w^$(
zxQZ9pHtmC9w*%n*yWbRMgK4(|B})85BN2KWV67^%|Np-yCu0;~$F^x&-@_Eh>YU4*
z$hbKJOWatZE(mFpEjArYJT0yLsz4}XDNlWL@yi}~-YxR_2O)MKL}do$Ur`EEA;>}9
zUzKh2iENRGy=2+EFxxn_r!q{7EKXq~X{yE}65;MNQZ)I8{j-z*dB^9A%r^VN8)XWs
z^mur*VYSF~Q_|~AU#DS;!Vytv(fZDTIeG@Rjr>VYUig2q?d#mC>PGaNH;kHPE3t}4
z&YyM3%%Ta`6nKBmy)PL7rx_uni0KERc2jN=P>cPjv%V*>Wl2UEWJv5dfU}d#%+7uw
zsOW$y#1^n<uO%q&n(pe)1N{E_&YO}KcVQ+7$%v3Ygx!!t4bT5`h~D>pIAGfYnr$1C
zE-Lm^a0=A5V*LcfrELme#?MnZ*0|IH)`-KQP@<vdAO8;Y12ng8Y~+yw>$q)f4Fi_N
zU`>ZXsi0sMW`X}0Xg>xR74OUImsRhFy)|8~!ZW+_EH`cCw2T?qGPi{DFHtJE;LwJn
zoZ74vAIw<6G8jq#3$|2*$LEft@9OI!8>no8A_OMqa%yVcO-;C|NdV->mQzT+O#v@=
z8(MQ_p{OMY5klVvwU9;RP2{8i{(1c8o?VH1S>PWAt_kk=1WWKge~|BQAFR75!5(H5
zh;B<csRk4PxcvXy^mBJZ?`ksnqeV@Kb#j~|hZk%A08mF<zj^P;GjHCE*g2BMAj`Wx
zw!9$tBsn0@*gvuyVi0`LUtlPM6##cowA_?bHVa+CeYzA)lQJQUo$vvM;oM$F7zT!M
z{+FuR^8HT;(m7&axyQh%DM?e~qOrSzTzql|Tw?YD?lSFMU5K3%gk4erybwd>qI2b<
zDeeFNshXeH+nuq*3z&;vO93rdPHDcb2{gq&V6kX*sL7a;7nC^SDz9|Yi1Fw4)mIab
z%2>MD)^Qzq>sVGHcx&T7HqPc2)+O89t9wmEBuJ1UWa}|Ds*C<gH_F07kV(qT-_Zz=
z2LL#EuyM$oImn)U$gNw5LV?&ENJ0XVl!pELDuMu6XSmFwY3~f`=WU@4-RmaBf{{Zh
zcVR&$05bu_Kr|4ejCW#R8M;vKCjg@V(vt}Tf?`jRcY734E)x(m>osEyk|{@xQLkW<
zCbCYMm`b7|l5w&n*fYWlLI$RUWSMLk4*dxV^w2$=R#nhuwTAI3)?JDr(WmZPSi$zd
zu1I}}W?&fh1*)C9oB`u@Tdp2GP%wtVf(s+OB(mV#%gMkmwA+gVf2V)JuAXW%k{4tc
z+kHdVWen|;$q?pu{@{=P<S%eA(Qq*jm-6r;{^U>n%e*7lBUp;^Brnv8c_}ZKag;)+
zWK<$G$4fK{ZI*g-wLxVhO&Uvqo!UX|O6P&zHSNs0$lZwD=HSlbQcoW5Wp6I`Tiz9V
z4-)VH5kB;h(#Jlp_61+o_?oY)ebaaJzUzD97woG1!Y}(9Kz^SX;$7!@5jXJMC~y<c
z%^A4Gt;B5-w~M($;?9h@%e{s?`_ji1%LOPt_`WgTM3`BQ6K4tB=I8#S3o7Y6G-(g;
z{^S!Q&^5$NY5T??Nra65#QNezu1n&#<gyn;wt#ZTT+<SH(#>Kh1kUFzDUe(fSz->A
z5fhWnbh6ud0xmrzvtrF4_VpBfeq$j#%S`dKMpB8aMUE5%=64rxOc^j(913igI42@X
zDMu!{#-1jCtOs=K^9EI_vhZr0A7v(6&Yc$MRR!3qjxa|eqL4%7@u6z0#Wp+y%oNR>
zX^MfK?A{23xb0g<sPX316R@@<1F0fh&Ej(vQ)ZSvtfI)#fc!;Q&2slFPhC%T4D(0j
z`;%Z28^Y!A1WB~*C(@&b2hmdJ(nY;wKI#I+#;F9zCbK1kOud(X(xmxXxSE-L%|B$p
zy0$f^9fS%LqONrvF-r$+n$doHaNI&AM%UYHVA2dCGKEjeRV4uf)vk??aoz_@z&zLm
z2RYUnYk#>GwSlQ*{q6T*hPgR=R+t7J^0dqmegZ|A1oGLr>-|}#Chd>cy=z3ur4k4f
ze&R2?nEq}G_E|Gq61Az>YS=<{RBFysU4`s;uw<AkRv0Q6d%%yzvh=F4sjJ3VlBY8*
zrb~?XY3=<#U#~C*S>7xjoYT!oDxD_0gB_3IW4D5ycQO2QKwPdzTlb!>3MjDnLp_-h
zu^;KB>Z*@M0$J{k$>>rdIn#5`^wgMW_KmQ)X3J18`&=v<Jq6z?K2K}YOAuxoXE6>7
ziNlo5^z!5v757xU#Ld&$EzraIv_Wc~N}EEZxtK?aYJjvO5!qc3U2XI_OHtbU{N9Mw
zk>B8FicXEP7Nd`r$tx3V;HSa-$epR{ZP?t;OWEpH`uieVvev9CmI~4g+i^6QvSak&
z<xzaBo-25giJX)r73WEM6l+r5n5Sb-jK%TRpRX{>&N|iR4~30v?#&qki=AR;);%X_
z7zuV1S+-O_15z)|b(w4xd$-wK$PI79qxW~(1|aFn|GzxqS9!g$r=P7nW{=vZweS$d
z&ENP(rh+bynE^Z_Xb&S|e!kHjU1{SDvt}I})cdZcsNQkA7dc#w=(&Vlb@Xjmq$7|c
zAvQB5cjzo4C}LW0W!-1FF*6cIbCufor#mnsYg(~0c4JRE!T0;O6e$x?%tWgIsO%cy
z*E#3Z&ih$$osGln<|TEpDbgAgK}pBm2l{&GW7v~~AKhqZaVR%G#a8Ip6ZY(H#5@v!
zgN_FCA<AF*!lmr{e@{n*V-P@shJdLAMWq%6Mr+fsJRsPQAQ<IvQb;qbSW45Jf>ZH2
zGlPYtwJm@g0l)}K1^^(E$YgT4Ua8jV&5b528)((XQCv26uDL64v)5m98s38;7|CGu
zNp<RD0zIrk0dhi1OMTw|Fn*sM#yW7!Hllwe0;F4ksb~Q6>87k1fV~L-z_zgGJQG8b
zJl?ibS~7h9cOtNSB&QFX0RYe;;XK%5+dW?eNKgXUt_7eFOqI3!$~_L(#6SfOj}}x6
zoj3$`Mac$00|`L;e+potOyJzR0Pdd=%8`Jr5y*rGbiC<Y`*e`$g-y@x{5%p(KC7ns
z`@g*Z_)@?Moze`%2i6)>AZ7RjacwW}abpZw9ET`Ed^AnCi1?TJ|8a!-@E9aMbN9hP
z_)<r!nzgmePd@CcJ2H*5^|6f)W)(L9Tl({UBkAsyPm2cXDtxz|tp9bt&)&wrzAXmK
z!gkXMc;6?0?Ai}fE^C?Xh`H2Ncu5HH^u1C%IICSAR=YjAee2YaU#Q_IdW~<3HUmjE
zB;YWdY|;;64`8(vs#vZjoGKKmRH{m)YPFj2D$%I9Rus5xWUpH@wIx*|8(TdIhK)?`
zKq_-odneVqQn_n2a8^SXHFcvJx7(k&^SIIz!o75rq#zxsxPIm<zN#1OMe9H#HKKVX
zEw!R!DVD4hNmh!!`o`b<4TS(G{|IgSv?3j(r<T3LB!6D3I(z7d6seCJ7KnKTlCz9t
zQ=#uAyJ__8WG{p(2_@064>;o+4yBxS=Zuyqbl=>Zkt_9P3i$PSI>6xX`k(D~2g8X+
z`M1p~flK#un(g7nqxk#daD{vO2tYW%BRl~jg2WjkQk2nUnQ2Xk$_4{O8WD3H7-D4g
zC-2xOmUo?X&UqJHbjf8`Ty?`u*IbW+>d$k{L5B<&bl4F`9dq0%r=4(82#&MO0Pvt5
z(J7^Q>f^%BNKc-r+~9~-F!})qh;fK_T?HT<Ql@+0+MuK6^z0w}CKiu-d5yss4WtQW
zm6K9yjx$lXX$M8@4p7thpKKXY8#omLV}wvKRtQtT5Eb)pbhP+HEy<4D1vH)T9FtT;
zzs85Agm+n8FBIIB4FcGZ9Y!4{4h_KNBJYEDE&yZvDG$K1d%pu3<nxU2deZ^_WfBsA
z-3I_2>k<G7I1m6Za&`dy1dhVX!O5x!efY6H9~pvP0ty;=O0?^A)Kw3?@g3Hdr)PS<
z4^ES?hz^#ph8~6};^g4zx@on;B9I|VPT$ng)yumd|DlPScb&wfJL$h^^M1)4MEpGQ
za)>V{zKnQ#{-^G*X?S>1p~&hVJ<+fI)RTlnx}pUz0oWJ;aFgZ@e*ivwQ2(d4kgeKn
zig|2}1tv{d25dB>*1UQRpx55oZo{-iGc>1}W-XYbhXUJB?zrWybSqqIz8!`QTjz;*
zr_e5oVbz$xwjW3Eo_c17OeSU)RyKA|4U)wrTMjp`5n5HLR-;y(de6)?(kP9ZG#jmj
z({KxQ>d~cJuMCK?y*C49AV7c!pbpf5t*8riVHfH_J;+0Ss1LW%02;t!G=zq*292N*
z>_lT|0%y<^nnDJeK{I%c=Fl8Aq6M^oqi6{&VFOx0D@Z|W=mKle6}rJDbcgQn20fq$
zyhcyx32)I0dck(|MsMVz4<;Z6FcA}xfJvByG)%^1Bw`At;60{dDo$e>rr|TDV>N2P
z8mvJQ)?zJEu@38yjP+QL4>*NWM3Fd+)7XYHID`8*i?g_c1SH@V5|N0zNJ0|Qk&I+y
zA_Xb<j#Q)~8)-<xRiq;whmnB{d_*QPaSU0=LJqQ#jUUKC4sIeBxp;>><f9M;D8LsK
zq7a`@gd$|27{xe=5|rQ<N>Pdel%WjQP>ymOK?SPt1l6d<4xGaUbcBnzh>^I2>lla|
zxPh0riJKUNTeycIxR3i7g$H<m`FMyA7>$qkh-LVM@0f!h_<>jWiJzE@U-*Xw_>ccs
zjyU32N+co@VK$MQ$c@279wHCs5j#Wd489V(PwYN^5_>@G0lpF15Zd85p&OwGb`yFL
zdSO4IA7KFY5(W_l;Q*nEP=!;3(Fmhq3t=9@d^kv0Nmz*ogp&y;qnPkC;c48XZY%1x
z!VBtlpl$~|6r-S|VT|^YH;HH+6YXO1ZZXmBT+!}&(e8cGHNeCNA#&^6N3d((Mc=2@
zz;N^>5`W}NU4TtYFxrHyk_#bZVhz~%N?m|YOk(zo)%|IiP$zobTqiNElQ{>5(_Xe&
z=zUFOJZ~FW-TS6^DVcw37DQfMKuAad8!-*xmMv|ylK*$4Lnm&a1L>Jtr@bkkADX;0
zBvUDj`1R~3^m;}S8KPk-wK($J<n=;$JZyYvMF<!>ys@<0mE1p92D!50^Zlf$N05I(
z!m;^n6(DPpf>@<ztP)Lptv4pZG#y?s$H+YW5*5~k$cY;U(<n5RqB;P`zAJ$80InN=
zp8+k$0CXM#gl_?UCt&msLIH<II5fir&ef!U3sWzBqA!(Qe0R0S3@)-}c{Ss<3wIk|
zS+B?XLJVjpu3}h8>ZL9!P0qVZ3&L#^bbF-~p&2gfABJsQ{K(cYU&sm0@&LQ%vl@U9
z$KGE)CG#K{!$7NzritNwp65}JFXG@vdOP}9wYrQ)7j;2#AE%D$Ser*|s45c|rDyNT
zv#?V<_F<R>kx7DcBxs}5HW&AkE0gWv>Fvo{otpk8RO`V;8ynj}r(AR0&MkPF3PCB&
zDHWtV-_Xq(QG8ELp7)H?gY{C>Qmun#AM!=3qfr~({<EA9ay_px=BHzSCuZ9OHCic6
zRmJ(^QnqEn=%k9{kQwT|bIg<yxgw=dgq1vLaGR5Sf+pb$2p^_{nArq*$%UUA04#vl
zaK+Px&>|Nz2O+lk^ihovU=G%d>A;%AGuOM)06J})n7y_PB-l+aBR5K36MPVeNwLVu
zyrQt64qYbl(08GPCnZ+xF%4=%!{@n`w+Vf|J6+0F806^%_10QCO+11Yhq-C~u8rJ)
zW9b=>w^@eM7vm_5mP921brb~MMNCjj;m%xBR=;{fdUFts1J7R-^AYr~@~sciW9)CK
z<NXXFujET}+#93u4e9oE<lz&efhn?f`jhVEiB<b6@M>o&QJf|pYSkyq;lG-&R{E(M
zAmfFp;z3$rw}PbtnF$#7K|QlFtfb`TH8-KY&W9-S7|tag&$sEowa`0oBE93ub<Ih2
z0Ii#796o?CVX`d}SICicPmfj<j-b5Cjlvsd1Sh8UzX4|wjmLKe(s>^<;fx7F+uBJv
zPnjZW;Gb98>`xoYPC^Apw_eVIzIUlH<x!1-xP{XMyyWmL^OlmyUf~GhDcq2@Wl}dA
zcI88B^I$gC)*%f@Mr}9=e-@dX&Hl2Eb0^^6Y4~P{4`IFM#(-ry2(?nqk%3J08s)^P
za~_sr45UaXUozwVa`v^R?dc5RLpX%uP#VK0SiqF~P)pOIKR_k$--Pq2&vNDDtri{X
z20X@}N4k;{&72JP1%|~40;Cb(HQyX`!|_lTD?Ez^c@AlfIXby2P=ql(|H5ZK#WOFp
zRgHh&Phsy<Na9_>Yc($2SA8*jV)TOy5|qW{wqvJ{j{c(`U6<C~<aHp>9Q6F_2`^2g
zpc#1RWtR!CLzgR-K%vSo71Q<b1eVff6YFU7b=K_ji(jb09EazYt&hXRu%+rR@nYJ;
ztV%Vh+D8PSteXLT<Ikr)NGqiCafi1PZ!CC8MIo#1b;<o6KJmWLI?SN!@p|?7ZKK38
zAWI$=hp*M&S5JdmSJKY~P>3i9{WVM-POcw6-a05<L8EI9TxZJfh}nevOu{Cd=44>s
ziSs(RA)k;R)#rSb%6!}XOs(W;R~lC9j6D5AN$iNQ>^ADecQY^zWWqT{ULn{E+DsYB
zJBo(*N`56Uo1<FW0(0Z4v@S6=`wwpzXO?`AY=vfG?hz(tebU6q)mPs}kvO4<IwrvE
z+d8TTdzPsLS10!`<#Ah_BfA=EOQ7TVkHZz1Jxg<+&bRbD?1kqf65_0nryv=piXVz~
zo~~sXkP86HdYO#>IZ}S^kpjPkOaAU{%pc48etz{c@1j+Fmin@7eE|m4O#U76<9EZV
zs8Y&|!d4!{UkP~f4VeadP)uI210!wmQXE(G+KB6C?jd6fABHgN5#ETPsfA=VWGu!g
z<JVpJaANdh%9?}(Sj)9w@9T{lBlV6bT((vV;gWHV_^j%a|1n&d#gh*n_%(%eDu02N
zmBFE2cH|>Hn`I7#+KI@zLRGXb?*Ot;fEI&fOu9mk5EUgQL2Nf`zQogMihz`%UkL{N
zt7^=-`?2RyOawwlABrpM<LNM09Y97zOwF#Vw9fn-1&6jkGA#boXEGl<-4+OtV?HuR
zlT|lD;-cW^>Y(_S*(Tu5M{;an{BVsrQYJVl$b)1jR(5Cs%;@i@ZJR3n@xICA&Xb-v
z)0y@e2FaRgh*WF{JW$gRocYveCH>)M<EYg8uwB^?i}H~@U3qUmnzM@uRY~O{5t!%m
z!9jIUVeINCObcx#hV9p90z=Fy`QxGsk%DA(Z%<j0c$l}pO=VL=9J;lFy2(GS)f{@|
z#J?)bj{N1z_1yX>OCtjtbK~goB}aH=x@>*El_@Y)xh*AeZr`fJ+h^t-c+~3tW6vu2
zEV`ionDgK3AOIzqTFQl5rsQ$~ictU)b!4@cV6>TxcvbN<AYyr;3vo0_wYAW4gxCg~
zq}=WYLeMe{1cGHm2aSFax?|4!ty|2wOT0kl%E@ax@u{{a0=$v{JIqXh2fs4J>w-ol
zUAldWpU%FxmINh^s5oN$PLFoxM$kg+GI+f4bkJU6&rtkLe~4e{m!p5tpSD4s1K~8W
zmnk`3C=zNc7fYnwYrgLfJffLneHjSeCn6fn+AUoL>%+j8W|m=IwACff;kTfL`L52A
zE05CkGG1!4(D{_1?6py8UbYOZD5c03?B9kSni(tX7M%pvDvCT0SN$M>sdX%b6H^4r
zG=kCWuQt$?@pY<k_)|oGzdABD>N`Ipy|pdE>fG|VeU_RJsjGkTfO2V*lxKf!MSLqj
z1r@hnx`+$;!gfPN1?k3wzj6(?vdC&M;GC_0^Zz=6X07)8Oohy?dmu$g)`vnYq=7Nz
zc?*dAD`LoWHI1Z83i&ut*?{bjpjy)&m%hnW(+gWyy!9~|pE~2BG$eU#;Yp&LpEst+
zf5)YJcnY13<0h1WF`=a~%<)4E^U2c7{-rmu*bpeV2d|xfCzCX2lb{s&(K_A%Q@MKR
zu7{Rlp|xqVFNl=Es{E}daI#7+%GckC=BASCmkO}6RxCRPXWjA!Z^Dd3zpwKn#yzq*
z3Z!YXD2LTm>cvDdW!584wj2)PPcq3pW#H2``W?xtT*MfRwdTB_AP*dzOKMeg6EdR;
zafLLCtvat(sl?bqNUj#Og5FUpd4XNz7b|2ek<^Kj-4QNR)WtG3T@dWWcLZm8=6GLd
zWMU1mpEC#=`*Wo=0i=&fogAonmD#ka(z#IjI+DilmRrgD!6fYTFM8gQ$L0x;_q2#;
zGYQB28!<1N1e-Job+&rYpXWQaUI}*%2>7BC0lg;$0`T-zfwSL0{>0lx_^DgDuzt3g
zsoR9l`*?^M(tDAs-F!<5c<aHMz`_i6rmcs0Rlu*#60^Qc|Mf;5s>Zy_?@D<YtQ_!q
z0iQ1b3j|<(Kdcm(26(~F2XmvI7$|tFXCFG`NyZN2;H3RGAWGh%92O0W2`Tn_e4(G-
zSELH$lxT|rpfByn;D1K(TPj<(R`lUbt9y28w6O)JFWpHpuGr9bK=&PT(54<yP2P9F
zxZze2ECx7qtc_qXuO>6}k!Rcly8g7^vYsq+5Kzt8hPI;3Q*kfx>_An1NFD&aKOKC?
z-NFNzyX3)=kqVe)ilho5tCF2U2n)5NUz~c6ZR-51^GV?Hm5wKk7e)}vPZvc<Qp5j<
zr#$uZ4?_!za1oWOJo`p<)|=OLQtVFnA(|@^X1zunvN{bynprEzN2PX*E%jOzVueHC
ztc-5*6{>W~{Ioz*AO}=c^BsPuGuy@Oa0Y5q)R}q0tEX3MDUiTUml^P-N)^6LVze;?
zLNoLI&4yBuBCl)HinYCKvsmp;ZzIp<)!Un!W_5HlO=-5v^19khtScYQA76{i&Vy6z
z*H5NTOnpA6ZQwio+|Fzlufr7>k)ox}d+hl2_AD(;EOyaT4aEP_TW-u|$Y_6xw#_l#
zO?q1mIh%H#L{Xx*%PSMftaQ-37&pOjikgG|CYns5v7hx`g_3N&1`=1_TPr-?QgrF#
z%cX@Uy`!dHt1QP!W@%B;QMemv*p1ko^rq*y!pg3!T3&c97a>_P&XekKpGI)Ql2~ow
zt`pP$a<yp&f)Z9I^|-qHuhy8RBSc|U(m=i)R8<MAL3XFh#U5|<SMgO6l4A3-$7iKG
zZ9)A&C@nk_Lu|s8sg$@<vED@I!JtQciz!tp*06pu$nv@dQu7kO(5!MP)&4GsmNy_Q
zWq!BDWcJJbMS6SMjqj@&SD`l44m(U=(+@*@2lD*6>;8aD6`+i^9L2v+naM4gexE$8
z-UG>zh@0P^Rrb8D%VO`aixi{8>B`r~|41lWn=~dlcZ4%XrP1a{oFfY2Kx3<<4?{2F
zNwns4AtvNpb6p|3_H$q~o$+Rb4a3hU=h03-u#i(ybz(l6{J%T3fHgo&GtpT@{h}Pa
z^>^DD(<9Rvn?whS{dkp*R_~hRnUaBWEodQATGpdn8B?++xoGt&oewX$aeYB<O(_;z
z&Ou;s<xw@IzN-r~-Ln_?4HeT8tEVA;K-Fx@t8nC1>_yf7gqW64v&2x5J!3&d+3abt
zmR3Y-yrs2d_UO1H?%kOM!QL}<FA)!H{r=wI9?g-gg5q6gyT2la7VR(Em4E8nsfD@T
z1Ah~Y2n2#+{KIn~aBAT<4PP8YrJK4%xu`<3@i?f=HtVwIc~{4y=HyfmAuH+R|H-B7
zj9gbkK4hqc^IYs?E$y0M##whVzX}B<HnKsgh5Q9xsypXC0SiPsnH+(cD%7C!(o~dE
zh2Bn0H4q_9l9|tr(Y}tPW|*|!KZEuJQ0Sp#YN$n-N=A`d>!k>Uddjk;x+ermdn3{S
zLCN}(b_#WFxjfoMR{RGRG)!sFpcW~#b{Yf?eT2IQJm(BG@QXG!+CbfP{o9M_L;{qZ
ztcQZe(sm>$@={eAT481;y(m-bq(Uhc5{U6gV<ONNgwvmAqHWr6`fn%U0s~=FITYAG
z{4;V&dUPr+!f7}7tf-k`#BF#(k+WJ~-Q)k~A>SIWy-Fqp!VuW$1QLOVXlCko?5lVk
zijl;;wMAV4l#^ITK50;lVZrbV*d&xvT;%i0l~nxKJZ##oWY^_SIQbzi_mCX->9UJF
zhBmR?lSst~y|E!57PTd_Z2TGSbM6x%<z#z`#AzxnlDav@K_PRgp(N;j?0(F$qGM3#
zXf!$+jf#<x?x9jo#Y}FAp*QjgZh|c%0MpZ2eW>#;!+kF2cled>6T43wpythcmRCEm
zax*9xBd>BdBt48ogqLn__Hf;g4Pi$3ds_-G?a_-|hnR1-q%5SQ>TD%@pTL^c>lsoV
zs#@m9g8XcXQbRAwREC&Rdo%eV()yK|NYjI-C#7o=^$?V3(5921Y7-3yU$04*<y_ip
zsD^`CEUv&z6==|T3KgXUfRoPxqUs13n0M3YP`rHAq~FxvLDV_z(sp>@l8p%g;RE~<
z9nzuOdnFVBX6LFutpf0QCK*JijWh3+#F2EOd1=;bptO*|oBmNp;t4;K6Epstkh(%X
zaW#ohw&@lt#X;&XpBx~kY{4g>Z;UXnG<NNz63fr(kk;oQ%N+R&J;tK4BO+%QXHL;i
ziRA-O%-wxo<<DIY!7R@p59-S<gK}rSK(oV9Hi2hg$6vnu#2%!%8_}I??#WNg+4h%a
z{q(=QW^_}GwiMAAr<-I$XWP+}<F$>5#u#mr37s|RuL>h#a;$zTq9x9-NDt4CUH5g-
zlUz+*&)AcQo?uUUoqy5WwI6a#qfW2Bg*esTuN`I0y_T?VU!0~<8VT86_MCX^D~sNV
zHf=;~NHnkaM`!oPocuc2W+w5zkN#8dSkBl8y^%5|v$fBGkk+|=4=h-1LSA`le)^hh
zZaI3T?8x{mu*RfOyKfrvUQ$|Ab-gual`{K=A^4fnWRdvweD@3E-QP(q42Lp5=D1Ds
zkDxH#^_|#?>S(mL@N&FRd)C_C-j(ZT`EGXWg%QFrZBsfr+h+R68g3SxoIqb@v)29P
z>#6r(sbFbtUYBRYXnAhpE2>2<r8?dPQS#Bt?l<_|YO~oR^ED{Wfhzez%R|PMdWmfF
zR77$yTi%}H@;6tr<zl{p^aACT;wc%S^Tq{8w9y;x{cR_Rl{xag_zFHsOLZ~fO-n$`
z@@#eM2!H$VUwgVMO=5AcCgO$}v7l=g=#Xg^;JtFxmod%gbNI~LLw-5(dkw<$!*7R}
z(@3`LWW$1|>pqqw={fq&TkxuB;UF)Ik|BHti&m7Oby0X}h04_jf*LvBNcxQ47E&v7
zs$m&&u1is<K9DwcjGl-Uaw#ps5^t91{r^cq?E9flcBLy#Vs+O}1|dD>apY1u0a{Nc
zoE~5wy+ot#1P_y$6CruJBkO}3UQ{`%h;?SUfyms)J%B}DJ;2#}noagC|FJe2gq);7
znqMv<x$A5s9@9u#I3&;a&9#i})TAEuNQ~T1^DJX0Y6tDTV={?lX{Ib@ik^y3jJNP&
z!DvuRpi)vZAS$z<4po?QX{q}J;QnZ*vxOF_h~SSfO^b^J_Ek*i=(*VAmf^39#$gLM
z(9cjY4`}ozq3WV6FF9GS*S9BfhGFJZ{nS`~JTWa4X<xM+J?$k%7e4m<%iVLa=Vs2H
zm2Qrftr5om`{6^3!viaWUkoOR<D)~jZ~8F_nyU#}XW+33@1p5pBoe;(3COo#U3eXv
zVpKk!n1*!FDS@^zRHfdWPF}js((~S5`1oE*@l$7_CbhL3`LH)x&#}|T<rJ_hVsMc|
zMe`peAqf{KjGrVQsK1>17%XFOUovr-f=6@z2TSX>ZQNMjTUrvdc)_}@Sc|_x)+AJz
zObO+&m+|<a*o1P^TtlbKWmt5lMYdmqT(3@_YS6PqX7k8qdl}2kO3g4T*?Qj5*W+@f
z>fFjIAD@|LC@HF$y|5W`(5!s{GGC`Hc(?SjgRe-ps^s{rcg_TbT4G4piNgqfkg#>M
zOM7)eo&qu^vj<q|YO4fs1{*X|AhLeG9qkeBBFW>I7t9Ul0=tsmojZsPF<}t>tMBAK
zbAKta=D%$nba2xMbf1r+vszV@KTZrJiPh%+;s@)82plsin`o0tX|8?;-U)&N7bD$4
zX>yjZrt7_arci2Q_T7-z5h()?aaDl*mJ4Ee%1X;q2sW9Xz|^3dZ-tQ63UemO%zO}D
zXe!a~hUcP|Leq5}DO#0zwIt1Kn!=emYz4d^^&`l4U`Bjrk_=HB>Je<2Nx~TTq(!kH
zE&Anr1}0|4o9767=VJ<)K2&JO0M%avG@(Kx<1ZHw#xAhL$kGf-F=^oKb3(4zz{A-!
z38l|vWE1OUc%iviiJEc?PEsq(1g*ruSaVZePoxg;HMnZPaofdZdrH@<Fbt~+vKi?P
zvUNZE`tcx!iX%`lXet3mMeDYxyT65#!_hoEPK6=s`C4N!y7_ce8?4X+D~xKxU6&e}
z#aHdGnu?ALn~P~lt%4(*QtMCqV{Z+|567`1gp?h1&;RzOq&o7vc1o*Y1Pm>vT*nN<
z5r$#<k3x4&dh{-1HGMnu6^_8N{}WNx)_r>K6+o$?Yd~c?;(iRt51#OPqJv|$5o36n
zvVd}QFbI*uk|HtK2Qj`Kl|c)a9Gd(QjU7S}h`da>KW3kH#wr!oRJN{eT?+=a+y-A_
z{F%=kLH2$1V|5JsSH*k<p({np=c7iw!A({8*NrITq}TZCk$N)`1Uph6q{iIdsVp}R
zO`U3dpsZjiiqq~lH;*_zFBsez7%Uy<wET%a1QsqY*ehuL)+#^|mkV0HwFveUp#E5%
zvD}Fx^ZA&#b_M|>#SrM@VkHrQROid1%NO7{TSO_L9*Jnr|A_zh3MHYQ6wwwAPQWED
z7hoMi_=P=J>lR56ClOY_BMx4^!Agw?NC>KUDJDkN9*5!c$vD=H%Y#I2<ofu%Rhgj%
zo&WJ^`cn`cN*U+p)QjmC75HoE*T7jl<I@UDSg$J45%r>ox+>JG5>{$qgUOfFl22*B
zYQq0^`7a7}+%6ODx2yk+J|qt?9^q%KX0y){@Y61v@#p8J@V<NBgk!NO<t<F1gL0;&
zIhO(%u(&BhCc^!>DZ=NzYyV=2jXj%C<6MutkG6{B1!$d=k)z0<WoyKNWGQb4qd7|3
zniB9!+MNzbTfo=K*J@k%L7$|};gqxo{VgdPj-s4nb8zc)T7=l_<!prlM@)XL?o4u&
zb2NoaEp`~rBH$8@6di^RZ5YFpOvR?^Y#BO@Lr(tR{qz27h8rrD9#12fc|3xd){n7R
zh8@QFa0RKVt&UEsYp*7e19f#YdR?u5{6z=(0ezS%l<!WV8abvaESDOWfWikBt+Gwv
z7v;&P1uAqsP0h<xUdLF0*UxXW>F8w&oryx_Of!be{g)y!n2l_#Tck5_c-YbRLV8n~
zX9+D{^ot6VLzGFaGFq!S27QOTv^;%Y(8_CcIUCrTlpJ(owpZK^CSP2KUw7w567dZT
z#0%TX^UxQw6@i4szVrfQzwC77X{df#A}75ZQxt6AyV%94OPYk3Iv(h$tM`M3?D~rG
z>^g%!r>?vrr(P#!3bLl0z`<k%E&jQiMemdPpwK-k>2$J`an7i@-HBw5qhY$j-K9DX
zJHw<_;XM`RH$SBE_JTqyRI&j}B$01YsqYmWNi`8)N=CNBOV^y>U@l|j7+TR#IGKgZ
zD-vWrsM$m5`C@sSo|0a(dFe<Kya6G~w)KNj3skZJ`bMQ)WwM9pD9YEz2?Mv&HbfQO
z{yzcxh$18rb96M}Nzj;6U6_i=x&1Spx*J^cb4(IXX+qd~Q!`YCG`yPj#|d%+jh4?q
zHdR|c3a3!xd^i{6xOYA^fu70p;Jnd6D*Gpp6t7H0GR_=Bbp204F`|xOWM;WAVH--j
z3=v;KLtC8jVb8OrN!UUhR)r=efM>{e@WaA)D^rU_*p-I9qbT974AOWStv>o9^*Gq4
z0h#5^lZk)hOh?&UxFV~MH^JxSb@rXkBaheVLs35H%la!n#`HS;b&~hjTwbTw$DIHM
z!;@AfBUdIR%|a&6!U~%|+(+Tbp$YqvlMf_f_R;wwJ$J@rzMCs6l2=E?t)O8mGVA6W
zu&hkEQGH5Wfe>Mjv3h-u@H2SqUD;2QNmZ*l*zC^Ll_XN->P|MhV^!7f5MLveKZKw+
za%qYN^+O-#I9Wv?swl@XnBx=`k)R?UpGR3sW2~i6)-q^oQO2r4wI+;1qd{S6?V#TH
zK}}dxsy7a5v|;Hqnj%c28Pprf77;XmjX<Ki|0WZO<iESo=so@~*FEf^;pHE4p)bMD
z4rWSPwSYbKj)n5ee33pYsEw@5EdQY6^zAz2<fM3b^m#Wd<X_naxy7Atj;x#_7jxxB
zir931g;WP0wmzB+VfAr(3?#Qf>%TF-QsrqHDf#(=^=XR;P@Ifp{1t&Q=U-jdE$r5I
z3+8pJ{m!kA@VfVi5WMb@bE~&UJzvnH?Gg5@t5<=12l*&FZ?=Zp6EQ3@B0fBW_hB}t
zK&5e0M0_W&E7lrM*11Zf{oh0(VX+ZWi4pgOx1+s|Vilu&5eRyOjq_!CWniwWK^+*q
zqUMy9ZpV9MQesZNmA<r2TD|*SWwYq?!r;4fk>tFYQdXV%BUsy;R@;ldTYa)$)qhg!
zH$k94s_m+n!j8dJ>sGBTm6hw1wX2+!>%sb|+ZRw@(ege~s8=ZTD`fRS5#`F{zFr+d
z%r~6VL<qb-PcmgPaq~u-<hz}_`&Io%v`3bfyZ`M}ZC9mb;FeFao{on_vr{+~A)2b$
ziFE<QXA5$Zkp*$rc4|3fhprz9Hg|6I$$HgxSWHajnib3D{)mo0u)OK<yb0*WSmF7y
z%CNfP$LLjo#yRfOl?AP%5FyawTQ#HnS5^!!K<qta*5Go#pHEQv!^)zMHyf}{Ns)o_
z=wtgRw4K7YMx7p(xKPl{mTCEPaM|J7W{ylFoElU_DZpYIaxgi05Sjd2+9r}KQ@E-N
z$pcs8(5Z4OGI`qp<hGr02x|_oAxSS6>XkGH3gY(C(EtGtpwR%H03;4TB^&_Mic_*U
z=>-=1A_@5m9{%sYB>I0F^XDC8Qt}VnJQ-fcDkkx~5US=!r`2E*0;Kp~aS(8W%$7JH
z7DSfT9t{(B@!$qopx{SU`JXA=APW>UPNS^W_{6S*xIt!12#OSNb>IeBprBaA@>=kp
z|0xVyr=~5~BNAekQd!C3ZX~!)%|PB%e#QKE)}mZ5HGA^P(Iz7mO6bNpu2a(%@G2B=
z<H2=m2J*hNLY?<L`FIS|N9sgjT<TrcX7uF<fOL}vc&S|n{Cokj>+F(+xIq?~8xz2#
z-az9GSeXeoyJ~|hzujhCysSuWx9%2m7i+9xQhMky(hN_pia3gw@Up3yEQWCuFX3gp
zf>-exUdJ1F6K~;ddFK}Mxytz$yXFsj#%LI1jE89iaI58fQ*m&gN&c{xvsO&m(HtxW
z06H;t-uIy0pQsnMw3l^t=96jcQExN@0S||$W*)Tz;1?I*|6c3g&%f~xz>j}701ScK
z7hjTo0KkJA@a2$AvQ_5y8b!Lq;@lc}0DW(DgKR40+ZO=C8aRzC{QJh}$|?IoQC|=8
z0B(}ElJ19A7H*JDgHZVdAjJi;X+^$$N8fQ@L3U3Jw(6fFdwV^!cVhc*q%1Kz^B&^`
zT$mVa(?3gh?n?mAYGQ>IwP25o&RobU02O9&1N23&#~N?pl5NvJ<?HHBc76qOu}%NP
z2u7PAXDPHtLrZNO$S(xzcZQ52I*8M(Np^N7*gX{KOMMSe7wN_hp#P3?+<5*pZl6z=
zG3h6Vi6<?`FNsqx+Q6x05<P(DyH6l<yqpBsnG?+rpk+eT1&0vGo`e$L<m?&?it@J$
zMPbk;P$NjuRtm0<z~?3c@gRZ5X3_Sw2At^-7WB2}CWK2<iej0rV*89t3FK}eqO4tP
z)_(BWtx?eYgG8Eb`U*Y*4Za+7s^htuTioj`N{>yfQs#-_ivrf2_a`?^Tl=T7YBSjD
zI%?0x?lil(S<*!|7E(vw=wD*W!KndOy$P@>eP3X-T+-GD1OR@)v!0^RKN0}?>{l;`
zl|U!c(KifZn<C7DeBU|VG8=`RAtgvgH^`FhcWEpUF2`YH#BVa4zXdWpoglD#%Fofn
zoueH3TXC?3F938Elcaj9!A5?cu^z<D><%@00MIv*N>|XqPeR*rR7Ttaz{L*?&28sl
zX1e#QBZZNt*@F|RTpcQCNPY(Em*@YHH8T6U)eilgM68L8(;q2l2Lb6{Qh^BqH4iL+
z%)?2?1tVQ3(u}+h!jrZsc=xU~1h$~<@V1n6Tc?Z`*vRbc?nW+nxj_9#YY+hw#J8&)
zPK(Y3)l~n>;{hy3A7yX|&?hXQ)a`r55mpo}5;-DCAdwO;749MlMQOLj?uz^(-Ze&0
zCyfC3Wq)S4eWxw&V<NrDK@bOYEBKy>FT$6dn6A%!$lO5TB4LmMKDV*t7IvtkYI8Mt
z_Wo$hshT@=AO;Wyt_hX*3>3HHRRQNYUmR^#Pf{IAw1KithyEv^hE{Sa1wKG^a1{fT
z-b*St08aY=M;e9DGQ_*ehTkO>fVAB}%mYGYW(_#zmD$L28WMLGvc(e$z=&uY#)uyb
zSc*#+9-y!gdmE?7vuF@^L)3{#S~*B>-($ULNCL!&zf1r~c1XBF$Tei|);-H=MwMC2
za)FF{sI7xBN+_w>*R~mfz_Jx07Z9x^H|a0kmZ}~ViS!CUb@VEFC)Y{>SKc|EmCAyA
zmErp&c5kIX^b^{Kfo?lk@iTz#S4eaULTf{@0MPryr2^2VEX(i#O@Tb}4{4xUj=FzV
zE0my*@bLqRVLDgv+r#`z2OyVnG-vP6JJ@^8LgEDoBN!T>-KJa-y?`Hk6&XaNinC$C
zl@-VZxrp;s$ehs7mGBaoon=yHd<1!eO`kbj2d?HGiLqMgR7g@nln}x+Tkby`%+w%X
zc&VZqGtG>GhcWg+Q7bkW3^Ju1VC;aovau|Y+0ZbQX4Y(tjZlr+ox^+pag92fL!WNc
z<DW5Y>%jsaqUOO-aMcJbb1tw2prM`|YYUX9#}pu8T~MO{MAsO_Us@pMm;d;6y)yvH
z-Sa9U{HkkW)v(0*He~Q|S%C>;K&<4HfcVaF1qtazwdP5^53QUR=u)5lIXv&qY`z|a
zsGgf)LY#O_?lVlKp9ow(C1C08LY#&BfaP?bO~6eG=?2V9k4!GcjJS0tTM|ZycBNAW
z5gj7*ihg!p8)G@Jw5~jEf-9a@toUT8Mk+4hac5nUc|O@}Cl*fO*P66O5c^~|iANX_
zcYyW6QKD{~W03PM>NPoQAwkr?fS{gd=31Mz?mSe73l0ZSC988)4vx>4FI%{@&faFU
z=23&WeJ+h(>x-o+5hC^Y=pCd-00zh9t_cRvsS|VD0o!Ay==T-Ji~@6U7%jL7(Y$hE
zVf)F70<Ph0(WyZ>H7(jpcE(TT7k%@y?x68rN14bUS4N-;!B~tK%4S;8|GrNS0LEU$
zrK!w9Meky;F-&*M@y5xfRqE@fJJiEm(?Y_93a%Vwm^%Z|A6x~&okOF(BjWd<p63wK
zoth|7;UHwlpraHrvVs%U&6`*@VM0FKFrdUTM^vsFV}o2T;9EryFsz`2q;k+v5@}IP
zUv9e<02WtVB;TO&9!uGB<nQQZjB5p6azXRW^BXjEPIR7}t-!?hJ0CUR2|Nh|T(K-K
zFWedIy1v6YKP!{HJ>#D{r}--sdPTwt=0{t|oC|0<1cEN+(7n7)`J#8~{YV9Ec=I1R
zd*sP;_52ynrRI8^jGr^sHzy~1owf##`oI&@Jl#_Ncv0`jYEf+}pzbq(u*S9uu{gV?
z3Zr;)Je<0A$IT^G3kk$EwGR#VK8UiwrJ)s0j}9l_l58c?`qN!=l<X1&(LzgvWAfJ|
z*9%S+6UhAC7?8bLwiy<K-8$1p($pmdpADkMw)Sz8rr~tt9xiGJrYsqRYSu>C-7`^C
zOrMg0<4>J7Q6t`XD(yXGgUp_`)O|<G&L!E2wF|%<mds%T=h(%S`7lmwF@4`N06xo@
zbFOz{YA5Zckg$4Fdl)C65#zuF$AA$nDajzlq<lL3Kl(}s1<yJVk)M~SfD+*UQH8<T
z`<DOW20LWH`ZaJDk-NHhcm;2o1{Ov=k`x)XZZs<6K44*{ZmBj|xTCuGDM0=YcT?iT
zvlXD^7zbSZa$b!;lZ<oG4LvIW=jCQa-@fzo7aKgCjX&)+*d_M2SL6)&?g2fN%ATTI
zyR&hL9^OtKc<3UdcAwi{WIeM9&oJO6+xXSI*+Aj$5Slsv)RY>Fr~2ZB#=KOjN}S|Z
z^VOwzZPV*3zU`uV!z~KyGX!xKs6p$2WCmG={SOfs5>RA7fkO?77HrbTl&kQ}oYC3v
zx-Dz(CFIE;X<LfPv%gKX6x2fcp{WM~Y+!!-5p#5F$%19FaXnZReZC~MblJvqlE|nl
z%X6Cb?J46?4v7eGKCQPdXNwLCBvax}J*pg!?$X+wu}qF4o1j9z+B`439j?H(Fb9W5
z<|A94&jGu#@Tx9Iw@|Avk7FL)DCAQB1_8VM=o10>YygxRG|n|WdoZJ9m_xzWpEJiH
zZZKjdRUr<QKIAq#b`c^pm3-<Zc2Jr^oORC!$t9}X31;eOq|Y?laZ@1f1KFb|{1d<0
zHUx(N>@{DqWY6A&Rg7Tgs$<2(1)xaa8HF=C7z}?71~L=}2o&HbLEwSW%$kQOlU8yd
zX99~v<zhi6n`bM%umi&$fUE4#kun8=6dG=J;ssK4My_FM2}7u&nKIA{HE^W!YGE){
z@bXCki|hI^Q7&$Qpg6md-2vJb^|bU{jhtm+oH13CQK=o6R(cT-^V#)?+(@(ZG7fsT
zj1*;c_XXL;^d-?2B^tU)+DCsO>U*s%b1#2cwzs^9#jw{<bX!eHU+5s4T&-PeqJDuz
zqMy%%;B|c@C;(*!sn^X&P^09j!se-<&Io5c0)Ss7E|%QAWxg_iKV1O+kJZP30KjKg
z1)rw(x9O2{4nPJ6fWUwGUk6Cvo<Z}UAB>BGtem?>u5$pF0CyYZH3Mm@V=#{WdChAd
z(OiGRryn6z5B^x=cLU7eD{{8nf#R$}0u>Fu(*z0!-wLWQO8R#HYr@a}q~+kwIVt5L
z$Xh9)Lv#Ut$vymw-hUR!8*bm7GD?4Gf*32@@kYL@N)LS8(CBQ>P0{XC=o}GS<n;uS
z70>GlKbr`9Qk;$}C)~a$Z1UTi=nGpOD2T^JYHbcE%3mlo%d_W6`AHz%@-xU=<o#<1
z7=B}rQfJo_%9!)jaNC{(0(v(%6=Zi)wHC2%#2Fd6__4GUIq&cSxPT5=NC1p2YzEFW
z+efsB2(nqTPf;lNpl-qBLdUZSvblnS>TIE~)dhwc$E3{cY<IBTNreOSNEtGbZ5tu%
zd=RZExB*Nk0+OJ*{zanrl>#aD%H7hlX?}%p`jjZWP~##=P1@Zzo{<6$*g&%(=jniN
zi!sgeiq-{LcH=&ED4f-EF)|#HM(j9uF-SpXquh0s{F~cm(x6QYONU)#@X&HL6(GJ@
zRLBInL#_B}0u$jbv_Khj@Y#Tk!G3@>LK~ce3s4CS-~ktmgAq^zi(tL9@w~hM;4%Op
zP@d~VbE;4TKo%T22^;}wjsr&_1N;am`oy3|eU2i{KF`ub_XQ@$(HC)Y+WTV0=XGU~
znMI=?f&|)*NZ1)PI<D0SY8W+$fg^m(S1*%!L<;(!N{evrNcUFTToO;nUkKJbBWu+w
z&AC=NLm)_AjuA{q5Y~)C(3h-#l7Z8wPbeZk5=yw>29I0b>Hy>D_$~w$obtp%5+%R@
z38_xb>=5yzRCt0vElteEghmk5h+(sqtyytsmaQ+?qR9{zlBQYfQd}5uB8G*<t%;2z
z=oOWsT!+I+aXi7&@H8=Hf-4=2Md_ZcB5Vec%g6DNG-1>jYQl!wgM<wrapN(_MF=-~
zK_1%gGmYTThCLVn*z?XVgx<9ewN72S_2|{7-+)0w2;nJ4Rl@jJKWWOe8MEe4lahgP
zXq`KEaGus4UOs*SLAmneD^O^=^Um6#Ot~%<E~<3S1y_f@va1&VD%z>qLc82?%WXAY
zc;=NlwdxJmV1x}uYBWldX02L`HpX3JwQDm@hw(PrZI%f-O*F|%hdlQ>A@T}}$j~N9
zG9(l<3@jYH1aS-?+6KWxsJcZF@q+#K`N=7#9dXnaTg4}gXY6&-3_2ir7SkwFVwhrT
zPsMPlndX>{CQK=%l~GnX<yBBoC6$$+VM<hzl7$pXXkmmEPIwVS6iH-JL={bRF~k&$
zwbq3#4pST!&Lx%wVyeM##Up}0`M|%#^0T)bKt@8bm{zGx;iEUtJwKc8z9GLRMFI&W
zl2{T+C6ipKN|QqA%21}1Qc3Nr@L#M3g=c9zE9Wu7ppxhG%R?x9){wPHX=$=@Pa_o4
z-0DZU_c7jF<d0s2F3r42jnNsIk{LOv8|h8=1QZO^GqBB2Z6fCKx7rl_(Pz}rDV)*m
z<&U+lRXmAOGHwxiD3wG*SOp^|VcfyVb6$+8BBysFpnC!e2I?v3hJu2CZWyR%prD`|
z9jvwvEDVDd40MysPHs0V`!+Q*M;lD;_D&<>>s!^_z#^TT`i|Wfspn+(4ZhgnVz<+m
zO8u&QJ@8sS4?N44ffxG*+uVos&Gxf2;92GTkdY3&l@vyeJB1$W^AsM-4m!Ts`%nnp
zhxYj2>)-DUa%jjQH~u`(<kfyvVwqzW@WN=D;7#;cKB5S*zZ>GE#{TE?wX3%b=#sr>
GJ^%n7S96yD

literal 0
HcmV?d00001

diff --git a/lib/extensions/admin/static-site-assets/fonts/6xKydSBYKcSV-LCoeQqfX1RYOo3ig4vwlxdu.woff2 b/lib/extensions/admin/static-site-assets/fonts/6xKydSBYKcSV-LCoeQqfX1RYOo3ig4vwlxdu.woff2
new file mode 100644
index 0000000000000000000000000000000000000000..52b6d6916a9faccb1cfbe604ce146443fd0ebefa
GIT binary patch
literal 15480
zcmV-;Jcq+~Pew8T0RR9106cgA5dZ)H0GYG^06Y}{0RR9100000000000000000000
z0000QMjNtV9EKnUU;vF42r3DJa}fv%fyr2buy+fD8UO({0we>7E(9P2g&GHm8w^$(
z3W_Dnv%Z7gtSVtZ_TIaKjjP3OCq#MKPme-!x+Nt0|F6l3jKMS*pY|T9u;HSU6`IZj
z{h&krHr)93j6;oN5;UIOYm+3=kA~0nyp`cf7rH)0<0sQIFA@mG-+f|U&q751HQ~VZ
zrckHY)GnoR>8ex;D$F{%t7SfLz1#N+QACzhOO;gU6Ap$CRDJz%M`-MmTrLk!cKvs5
zRnK_oUO>!XhkjZj0uX&-YJgwoKRkKIjN>B1oVrLCsSl^m)aFEP&BBtgh_Gh+t8Ck^
z;-CL6_U<gnY!G2!oHgp5v=4!e>9u(%@&L#$^9oQHVo%;4Pyas#>&`qxJ<?qojck_4
z98w}At&LDO?e}@-{{P#dLYg#%q~)9*;0yQx*bbo@32aA6LUryj>Mj3-oi##E`~QuD
z|H~~uMVq=3FUq76k#DAPhl?mV@L43e$70K#7|+w+n`d{EP<ycjPq|>Jpj88cA24>u
zABMu!{=9AWCA*%yxoM{(T3r)CMppE4-?`3S$E8p+5}>r@OQB)`d_P_9OZG$E^+^v{
zbb0AgF$s1(K`0s^yPavn_=&Iqu>ceoz(0ahMy~4Q|7@D=eBJG{9F&5-?i92`RAYru
zr%IK2c4oZ0v!nHjF43;fs0&CT$;VPatCbU(LPV8yXb3P@$Q@SH0ToS(I&DQ&DxjjO
zQyvj@6JEf#!gFipr6YU@GRjhq^Xtb_d;eZGe6WG>hy{Nu3#el2*dNf&&X!UAi7EgI
z7hPK;2~}l<tdSA^Y+Cr||I`c`>v$Mq`rm!&98|&$;0<UE$_1wK5C8Xm>f3APtaYa}
z;GvHLI!dLK^yR@&a|@?)C;%J~9{*FdZ1q0GBkvr!VR{Y6O|RrsU(va#NboOZ2*P3m
z?W|Gd5VA;6k#tJh(lHiQ@?}3IUxLt~7R*_?sAYtH{N47OZ)u*~*trbOsa)OzSEz$J
zD2f=wR4C_PcIh5_-P>sQ@;!Hyl?CArI7UYO?+>&<ACPn;8w;?NWC8YK5#UI90-UT&
zfV0#HaET@XF4Zc~6u$@%=sHLPaHn0&ZUFVNwZ0mly{#{+0z{vR8ft-5Ae8^%X~nVP
zgz|Yf^W^$k05v86!u(H9C808}<7VN3J^>a4qOvRoIgJ37mc@u|7U)EyoP+>$JeXpj
z6LFN%2z0$@Gerw>JfaeOrT7Bl1t6jd|KS|52qM!2dPYvp#cJVEdL|1l!ptLY^Rj5*
zG!rp<YX~#zOB6OAP^ggF`R2A?6gDvU^VQ@GWS&Pv{5|}kQ+eIw9#RP1<;D4DIt*4I
za_!cWZ=wEz&amUuVaK_{PVr#=<WK!e*b~&tr~=oCbP|J1r_ixVj#Nq1w1&}gI=NnD
z$eK54%{3MxE4{VYLF+>6+USONOSzM}XFbR~<~%?$Nn)fd6g|s!w{n0u07i5D6Y5}j
z;5@vLij+dDPy?w>JsiIV(FHpYx^(v@2ykl#y4`%i?iA!Mpt}XRCqeh>7vO#bi-mX)
z!P4{w5_cZW`S~)X*dRdTb@vmSwjquh6I{hTe`K1J=Y-7e60ZFr45!j#T48r0G{ya)
zdV~9pa!aGZ1pCQCs9_u-2{~CJ1HIt(v!@A40d$=p8s~Cp`dMk>!X;Z2WxbF@S?WSe
z-U^<a4m1`9JwryAP(Qj*Tnf0c`Gs!11wmcNFJdaK#L}6N)T<t#(kgVEFlp9^NCGGv
zc1gDukHI$`+q7d~1aOfJ<(vS)Ubhh#SvT(x0ETH=$OXnZS`y3zWO17QTIPp%6c&2a
zwoyovlCumu>ov>7(`0A8cHDaw1fy;_xbaIUGXVqJ3(wTiLZ&F{1^QDxKr0Zrpn%}8
zf>D9k-PU2+5b3JSdUnB}YXTKN{-*Yex#t`~gP6(L#7ZGJAjAUNP~ol<J@LJW56f*9
zjLwKiR&b*h+~eVQ6BVw&gD@oAuve_EtY9oR`;8uE97osk+oK^>JupVs>6L%4{g(Y;
zIp7_QCwew2Ga8dzsc-(L7f8~l=09pBYsD!Y8JYqOG<&^?QlT}HPMWh|GCfQq$u-qw
zVT^XBr=*3wyAzNyuJZ%nTK`M~tkvoggt8AwLYRu>twrq4JR4QY3KVZ`q@0oNSSv~s
zjJ6ZpIpxMd_De#+3VqH@^k+t?!2F3|^im+oio_wUI6@Ifo%ZaOx#dNv%xOq$b$?M7
zO|x`C!Vda6NNu>u8x^9Pm5#=tRFcDMCI!O)DTSNS$xS;2x0jvi%^_7OdTmV@Dr{*`
zGrOWXK6FGbVuh`FZH0^W)9oxo>c-iNa-i=9xD`sxBD8uhrTnPMN5$HF;#dTnZ#b8B
zm}9$t)zY;48zzi=nFwReQI9*iCA7)Slv9cwNpkBbC4JCW*SlqEn98}Zc8)2VK}os}
zB<KlaIXYX+3M;8no11-fvEd`l2)*4&8>{Q>q2Zu8CgKV|JEfzFL#?VcEeyrhc!usr
z8-#}OeK}EuptqeFgp8@MVq_J;j-l-ZvqIlhGh<dWY8V=4Qmjr*XU389h+KFU8}(Fb
ziJ<ywc=-*wEj24?w;CisVv_471=eCY;0M?>hEj{2rDjHoOt>{?bm5(wM~TE16M>Q~
z;fY6Iv|n7U#79q9S-JFW0NiH*)i#f%PEDlb)81icCDZh{h{nCqRFkkp@(u#uS>;g0
zk?gf<dpjKHMlnS{<LO$IKzYDqX|(ZOb3gJ^-}H08@)HF0O9aI^fk;BpQkjCHI2EVS
z8O_Wst!?cA76S+&sRRH<u2ixtuhtrPlZBOy9dfx~fD0tOPQ}d~m~Hl!)5C%SBP19;
zsDcHBn1@YGzzPjlMo|B;1Ec`hrVi%pI=4q<7*4grK*8YG#;G5z0Knd!H}Bpc=5mFS
zv#{$o{UC*vrc%bD>ZnlRr6cTD>gNXL-~dDPssTudg-lN}0MxK6;XoJc$r5TV0to=-
z8cW{-8bAbq_PPQ`bo&ekK>r^VATa^HD(pQ5h?94hdx`0DZw2^!XLWk%i~7~0#nEtR
z-F`>1DmbbFv76fJ=&1_s1wwoWhOCQcn<)}$rD;G%8`pj8*`S?hDf782>dW4zANYys
zx!51_{dD`@S$NOwr`vX}bS-}W(tP-lsH1tmVRN5U-zn|?oz#nKYD2AVi`!;Zc#b+*
z`4J~l+0u1)k;JJhd`cKne3W?&JoL_1ZTw+wi}<}3-A6vh_pr=DRJ=B-%@)8}-$&h`
zTuYd;oO2wiI8w9Ju+nm=W2R?ouu5-V6`!|S`$_9bVy6=&V?sBgcj4m6moD`xaOau>
zw;a3U#61@tSbLm1^MY5^UNiTpD<Wf`x1yRT{K$`a6Q8u^YV_8BCXK;HgA6GQQkWCH
zzXj*tt!(*^T;l?7w0u=g`QlWwwtXUEw0}m$GMx&$|GJi7_4t#U;Nj^f6Ty4SS2I$s
zpJ~HQO%$AAbwMdr#$r8N+E&e*g&AJe*3|$%-9Gw%yKOLVa*uzittbL6Z&O!N4cy$r
zUs`JFf&1SC2nkupDq{`6w?oVPD6D2!9vu5t4(-CPMQL&0O6!eJ_7deI=bU%JMVDN5
z#Z}kbbjx)&oWcsrdC0Is4*SUwM;&wA38$TL(kX$Gt8@cAWgTcpY|bwTS;+d<ljZec
zK>?O#&Q0meN3O+pE~2xXyIWr}<jmc_c_B)c%IjQ!Rgj2F(TyGz4>?gL4Y#~vR89c5
z<;Ko0UaKI><7*aZc`X91D?nI2`nRqkIuV0d7fJ!)mf2?^l=ufXW<EKswSE#zx~bU!
zds;_$hQu*MVFsjLE9WYwRAE(s0NDP%$_5Y+&N=#ZO(1`t(HjAe1BeOj1E>X|LdHq}
z6){ebz)FI2iE+UA3}6ccpe6AoQpn}iW`bj`dFGq{0}i;-**@&!Gq9<f{Ir-h(<{?^
zga*R)b1@6||Gd-$<dpIhX}8*O*F859A*bJF?9@!db}zr*3s6qT?BM`Plg9r>Nx<MT
z9OSkD{QgZjNjXM&_;<Ck{!>R{3Ic2aa0tM00H>)1cnRPmfIk6%pM3}Tt#GsX_IT)}
zcJqY!{MhcTZp(DpY=)UW`RKDbc3W?&4Zd3AhmE$_<Xghs;;Ba-cx;;;ezVJMON>}<
z(C_a1V!s1^_T5ga{Ar&%mU`v2H|BED(K9egXY!tzm5rT)lUuDu<tq488mr0&)#{8h
zUOm4i4J>Lbu+SpC`t*ZB^#TB#08kszWF?v%$^6LnMDZ}Hm(jFGHxC2T+E}*7_BM|0
zxR%A!72jq8i8{z7nNhM&rTAE?&!w4@!fr~r0?V^LkFDj~P=T)%T9elgMcQC$x3Lae
z>a?i|zRj;50r3j3Mo()!ZJkH0_n-|Px6!sX+0kadwZ*Qsy4^NQ+HRyBmbcSjyZqju
z`|b9{9((O?pP$?Bdk5_7pj8d|vtj!><W7ez^^>Dsb<AAHT_fu{mmBWVb<g|mGkf3(
zYfrg*rq*-cWHh4DcfTp`cOUxWvN|sRs=Flp04}La7cIy7!^z8Wz_9mn95|f4oIV<+
zY@{C@&_AS~F=HyA-oNz#0FMIdBh%60&gJ^pjC%p~iRt8U_i}w|xNoCAhXZ*&)R!>h
zCO~~<x;osyQQrp+Qu0uL#qh>P{nJ4TA6D3h;lGU)4q`ube+uI_L9ZnM{UQz;|AM9_
zY~vbtOrQMAA;4PCh6>;Bu-yV~dvW|f{m`5o7A_xq40lMtT6=oGQZvZ=@?qdwN5C5Q
z;je<$+8+#F)R%JuW|MOWv(DrvrLz{UCHRU;2gj)W?#Hi`%^L9u8Lld)kKGXmZ|9&N
zzbMPek#iLw#oXAAa)%xXW4-6b?wZqo8(s!;O!S*Wvu8W92RjXV@U|ugO<b7&bnpxN
z+w{dN;#!X4I)vqJeAiit;4Abtgk=^N3?tB7R$FdH$$6eNlZlz{c58G#KN=5Bar}5S
z14xSK5VFy0s&<Gc**9yGp!+*~#V)jlUeh()A>ka8BBa$Mc>F%&c3=QmO8}5#0HAvS
z|4a4(xG#Wz0($~B??3=3hM>r$L|wNjw<ddVxUVcJU8fB$t;dj2#{$EC$wO!1+X-89
z@-f*Hi$LvImlv^rjUn$TZ<~9%6hfe#aNb3QWJK+l3g@8{>aN69`_L^)*q#hOtpEW0
zC}2!RO&ra%R&u3yp@W6B%0z0O#dlGWF1kz(vQEZY4`KVLjN__Mx>z`?>ZI1?ZRZ+#
z8D*GtapZLF@8;-Mg}jfVy$WAmnL4??em{7v5^MEzlgRZtHH#!wYn2BoP<|XZD2g!T
zoLiozQS|V@5i)7Kn%Y`#GaY}Z2X0l;?2}+Q$X-lwpXYOP7h4r3F;iEU{x0-f9c3vg
z6_-sA)0dVgs+%3#JVmoC5r*Fr=^)%i1F;mnI28Rzt!W`%eCRI9Ia}R_J>sGmM{%4Q
z=#CSyWx65BEWj8;ElL;mHj)Yj_8lY#vTJ;>_vGfX@2YI0+^90pIZY#@#$*H?M&xnN
z^xV61D=rd@H#7hM0vhn_6t&W4Bjt(7P^9`q-oylmF{!2E(3t5b{3u=}xR|i6*&XY>
znM8$z;YeDgS9<en;?a$)4@Y@_>Wg!K<$Li9r{XR*E(QT=Q-+5w6nl=X%L50rMd^bk
zSlLEV?vSHz4MMd>N)KJv|7G9T=f0B><zDU2!R-1Tf8vXg_^Z01Uajxq!<MoJ><{Hq
zz;9_KM<qi&Pe}m|q~eNM4j6KVa6|IgS5y!39Q4fb9`Ig_9yklQ@|F_bec-rsdD7l>
zXXThp4{>T?rqV-;<@{!DO7=68iaA^Jjx&QZZ*C9*JT~Bl4mV`k?pn5Zw}Nux4OhGP
z$pjTzEHNe)HOj07I_b~sMr2+d2kFZO#pamrkW|!oLs+Sv&%UTZQy726w!&^FRd!4+
z-R5NGeQG%#9bABaZ<^Q9*A*EpTnonm%&hw>dW&)bfY1AgdF_-X^3$y~A7xnxbg$#9
z0J3ueWLga6z~ya#V3d~Y>*J$U&M6Jh*PH{Dc9U<%p92=|<$VJxRQD;Al~9FiRC{v;
z_69CGpz*mh9y>R<q%C#uD*L^LBH0(vh^vMtNL|8ljCB%C=Kl%XF5nuAAblUte%^%n
z&L5@L*?hZTjd;eOV*6~f9Wjt>WN|#tIBem?QipaNGH?yU+lTC%G2OjIx%Gl^)87hW
z;Sx7(<=ax=DXr*PbS+I0EgN)`ctZ57uI1+3x(iu20s$h`>A2jvjlp9aB`eivv$(u+
zbYjzS;J7qGe2WyoC8ZbCq_`oJ7|G|`F*&5+pChpCE3CyZCr7)yA?TQ*mRHz6ry7!A
zHmv~^J&*<Uc<t>De3-rpm0{h5FGbjzCXY5dBqJKk<F^i?KIyGD=g@aHIO;I7_u6Qb
z-c3N}3`7#EF1g~Hv1ecZtonuCbS#7>^V}~C7BzZvcDAPq(N**wSkLZ2{%-l!RWEsE
z)2eTm_r~&tY&`rXrd0Z~Xf+*Q0bB6zO8*lY!S+i*-)d=3Jxeg;ve2iuVG&9s5R(W*
zd>Z=`4Ord#Xodg#Nj;v@KoIB6;Pp>%H*b!=M31Ov_xVZ3>~6C<<wz}+&;*6>acW>7
zjv_)zLC6{i%=@>3)b=xz_=k+4A3Yzs&Abjsfd@?rWkLR-pip<hF`wyXyS!lpU;9IJ
zNVN8aq7{1Ky!o;>hYb7RiM667_pJ}udUxXc*nqu^vbI*<{>Xjqc>-t$j7U8HhNpD6
zfmpFMD`D<e>U-~PJeH>U-^~J2t{rldZD_ywoo5g6BHP4!Avr}w?kRN<mxt<+wYP4B
z+^}>j`+~mZ$ZoL_9&kcs4E?B?bbm@x1)yQ`0Of0+J?a|`3HPkb%u-{4q{5Qt*=lV5
zT3o$hq)<%7na|wGN;mj_U*qEeH}uamxdYkl)M4+v%`_@7p2QnO9HKJU;{a+C<0Yvb
zc%DhJH%jyQ{{|>mBShcXjl_Y4i)wgFmt#r+U5pNJRjtPPJg|KYap{Au$NSI2S=s6^
z>XK{cB(@G6>h-gYgpsu;De>-A+Hf31>l8gwdmmFvBz$~CH3bH4O-|wDJW;d(5>gLg
z8k3i`;SSZ5TRMigM5%&n5o*kh8P$ZBQOshU>(@E9sKwUsZAQTmXwWQ?vlw6AP=l7|
zj^5z8A^T5a)c#35w)y{%iV9H?H*F)2fs8YpC?+(coq3iQ4d=UZ{75?mX=Nrzwqig}
zvib@YYfSus@X?T>xofNWI+w<ffIBKYDDBv@OsWlC7h?OsU-}1n$j;%kO=7~%;!K+O
zZplhp!@~mM{2JJ1PhHZoRz8M(%C-X^tbtJUm5iV^P(oKv;fQUm#B$ng;&1#nLBrP3
z#xd67vRjDER2$f1rY<gjEEVZ)`*wKyp-gGCOlpcXHfpH5QDhq*k?pl<Xc-`@TR$-h
z0p2h)6EC!*5$(D*okF=YE74wg-In+;2ksvL7wi&7#EWKH+m?7V4&Ba`#5sUN_{Yr9
znMu47c0!~my}tFD&4^WNE?RB)p{V<dULzC!%*QA22*_()Ms#pz2umaqT8KpA&xLM~
zDj$S;-HuJ}j6T+VlDt^UPxQ@J8n}>PFGq85h;oG_GBQuGu1A-Znq~gl9easR(J6Ar
zz++)LQk_RRy{rpkjdy9GJ37AS`RdOLZ0HlF&39zmGzEJz$Z`@Jp+4-ycG@!C)LzAe
zm)n>C2oIP@;DeMKDbWI&#~ulAJ5Yec&81Iv)I;-(Gm7!A)vaWk&zsrp56yFeQ9`_0
zv)MkXe3m)-Oxc){EqX-I$2We4NM1n9Xe<}&K9X6a48NP;dkQWGZBLb&bf_q=<wk-Z
z_qzOSxJC3`pPjb#?-cFhWAe+e?Vq~V$sL?WvDjNd)+`lo&F{HyO?P6Ij^_~4Fy8&#
zq5%3xCr{Y~_^}83-SKhU`_0oyk)TQ=C%$4Gc3ML;0<2Ac&@2vo;Fqh)l(UQ=yzc5I
z>^CQF=A+3cDH6nd<PHBfb{%oir^D=x&Uuv!)is{g(Ps76y9m}`f$C13uo!!VxKlVD
zpBc{d6#TdcN*YMzv{c8Ybp3h4zYp>uQYF(}5=XE*A0RofKa~<jGLcW|p-d^ki^<d)
zAtY>Hp5LnMZys<{?e(yIKRkO|0=B(}{DIBdzAwG9jA9<oD@n(-WQ?5)$Nl3me&dFw
zE~WUnsEv5sb68RkLT1O1UHW)hDgEh^%`JZDyBV(q)^~M%!NXqXn}fYCrY|>lJ<ZH0
z0@u5U@hiwI_-paU)}n%;f?;#LKYw`q8{^-zKV3)GoCNnGs{d@eG<)|@wVb~6+^?eB
z((_E58Kt0F`0<A`zR1Aoi+_zFifDQbFE3tN(501ylWBN~ZnLX3o4qf^mF0n?*07u|
zeuvW`oZ!l;<EEyShypD6UDagb_6-P&uq>n2z<Ake$#WDYT6%^|&D0Dlx7F?Dw!7>N
zbOWae!&1kMplnHUl=VM#EDIyG^epZOp8B-?Y5%AWi=}5-N7%s2j+g(ct0C$JR)$NU
zX5h>$KUb+Q6OWklr+2bwpYOcrC%4uE%NZV5-SU+aUB~^dT<_m6{_gAPi+&Mpe7PAt
z)E5v_X(GDB82vwzF-f_pcP}5|;#$e<Lcb93M8w+DLGQcQtc)?0>?(V=q60gYhi8qC
zxE!+rTmfBPPF&s7^$n4jn@tBLOFe%$Jb#Fng7oa%M8vmzOV7X-b=o{o4V@@|+ru|W
zlQsv`Lfhr<@-iT*YMv#F)oHi0IxOyLjw-Fjv1G71Y+7dy=bs?u1hu8Uq}WoUR$FR{
zODy$LOV4vzK1?fM*pm_&F0C{VDRDe;8d`kfKa(};j4HLoUwN-q`TP(fiIOaojwe+F
z%iXf14E#84Bfnjz)om$26<aW@IPGoZSj2XdrRS3*H&)G~TjYjRkFFQo(DBjn$!nG$
z7YNSC%>}U##RMMCRmyc!nY<I&QD-Lc3~utwZ|T_-22pq0jTI->vX`WL{`hN4yNVh0
zdUdM7MLei+X_*AW+dP8ta`fJgzdH6ti!G3e(-*BT=&SK2ni3L{Ox~Kg1?#6Q5+6N1
zd%1=GCcg9ycn4m3$IS0PHCxf$GJAj{a7LE9z}}ehg<3(UR<IzZybmmemKAdZbNsW1
z)98&*vl?_k&5g<QCdfYPmgMzg+BQ0$f;(0H;<go=)qC~p71M@`pMX1@Tau^c9eICx
z-O9v8w-K5<;2o6awtUgj)9c<VC^`58!5xRTf7r+!+9MEBdA62dotm{UDw@V5ypu@0
z|M<vB-qLD6rez`cx0Vz-9w`-PSt5q9h_~Z45Tc534czBH(z`v#bU}q7bM<7A0_90m
zkV@p5bh5FTCe>KFGC4h$gq>{&h$Ne&R8qaEsZ6g<nNJe)bl3x$0uDizVp1woO#;N}
z)Wkwt1}gD8gqKd1s4#^oDWt+Ns&q1)l{XM<+R}TZWj?q>OA2U4lprn%SHQ?pl|G%P
zZo@&Oc_g)pT9}$l_bOB_GFNIP+mM-Jm>9uaq!Edvc0qQI2fH+JFU!RxTO7Hasv0GT
zrpIXaYOx|bI~Y|p3`bw5;d1;rotfWna?+#b{7+2Q(ZS>aJbGjtxPYPJaEYoOV;qA6
z*<WQFI~m4)YS6_pu^$E|M#cuP>>jUNO{XdJyfT#JJl4me`>@yw2Fu5&7X3iM>!@PX
zk3E}^n4h|pM|!u1WDglxVuzu!K+;Q;og-jcnrzw1k=_yG80udn(w|h?2NLO{lza-`
z{RUaJFcyL>V}0-a!i?5WSK}rB)O)FaKGuIFDUZxs2rfUpddH<h<W+UYQ*~`+=ODC%
zkB@2OUM4&sJUG-bx_Y0EtsH4t1%B0Xgi-~I9$*lN?CE3k8?LARZ~N0iduE&2a%wBV
ze@&d0^_mw4;b)OlO1d{SRWRe{!TJ2mLyUA@6PIgJD#haRI1yt|sp8<~migcX1BuSn
zlZ8r9c#3z<ARJl@S{GQ!*r;SLe;p_I4h{sHx|KMR-7gLE@ilPJzxfq;#9x**%8{1v
zOmMA<Pm5c>9zNlgKN@pRL@?fj2+OGj$~@!)0`U$E8h9<4?z`ulfG2H%Yvb988MNP(
zS?i>zF?8t24i2s5ZP7RqX^Gr~F#Zpo0zElK$G)JcF$G6YZJXBYZ$8JOV4>4{<Ht(#
zY<D2$K=*#H<ai9dBP|h{pkECv*WQia`qDo1#hClSt{8Kl;=`OZ-xPiA-xl)UxWn}s
zU>VdnMfPT5!kcN4`bMxUOkc`-Go$I-cFvi4h_(W(h|m_Z&*Vi71kC-il5OitUk^5*
z8i=;V^Zr{rvXbxESG5nECZA4o7@JSPe|e3pD~b)H`j=N8ec7kGy=Jtw53G;YO-Z^v
zXWK70nvSP{>uI)Y++qJX>owjzzm`|R^mN99X|#O%T<Pq09e+)|)qblV>=;<ITiw@@
z2`SL=Q_QABO~ysS_<%X}a)U(aFv(5%i!nYWJx_eojVW?JiWW*tWPSowe}{9Y-i<(a
zHtL$_S$1K&+bwL(wzg4?+d6)qdcFO6e?Z5!CiqG?TNleiTauE{c7hI;f#j%6AR+-C
z>v8VF{crkR)2Z*wvGnwo<Vig+jewqwGMq_ZSYG>x^BH_T$(eWpLdwk6;%$?&7ewJh
zSh(LMV(&ktWEoFOcmAxUafL>TK!L~-!vqMNUn%5bVs{A(ay(eh7$@_GF^g1>dL!OR
z0u2!lu!y%`k8k28Fv-9=N1P@#4w8OwedUK$xJ()1v&ib$ll#Yhn19T^^sx}a7~41O
zB=Mx_CHJ{MZgCoO?4se4=@Afti<GJ)ds9=X-ZZ6~#FtvR=N~vYt&xNh9*I!?6u2(V
zhmTgaxQXdSekPNRB^G+PMKdxr*AT82E)kUk@lY4zVwaZR_bw-5b2en7u_1UKS0%r@
z;GF>DSe8Rf7Msz$WdzE&yW?U<_m@2=?W2*ZK53AZ(Gb3q_%9_pK}K}VG~npidL7cd
zX^xJn@F%8R=t;{aYMEhk^;AW3@;1}jamj?TWMdXn*u;_;tkC!f-**(JGCAo=q2gd;
z@Ae>V|DPm&I$5kl`}L+!D*A(rqfPAZ+|t<_Za*gAG?@B?4kISyhM=nVErOu{a=isb
z!QGoe&|R$Y%sPtW9^WOMZMkZ8S3y5zy`5V+Zz%@X^b)1#3CIp{Y9A!1AkY)w!Xw7R
zMg>P#|K=n3;7*WY(Zu|51cS$LnT6jWQaiR7t)h`=kaZJCFb$qO=cxk4OwX`s2&L7*
zla8s96X#JaN4n6GYUj6UQ%OzTF5<w-Qj+!0m`%Nue~IusI5M8RjXASGtv)4agi|d&
zp%Af)C3g|p9S%aP-05P7(*Q&6B(!SnIh_BmOEf<A$9Skqsf0Qwe2<O!J|WVnR7SeS
z|B&jMXVo?5CF;?!)nIe8n(97ZT5QN<q?7m~EOKV6&HAE9q~V(}4Ok<OL3ECB8k`mN
z>*13+ls_QWDgi_7xuhX8`Aw9#7nw?^#K)dZ`x;AZppj}G7<2Y}SxG{Be9!+ZkxWAc
z>vZN+4psAC2Es*K99#CTbD!Th&bT-#w5tLiWXFQTiyr3u2C-I&GL)VRDhgA$Kqx5U
zMmhCW_m#}i3SY;Eh$eUljA?*R#2dv@s^bqg)`EcWGRZ0vy~&-!nyhnq7^1X1&Qo(%
zKrRM#ix+2#KlVp7ViZ#Y=cA1x5z*3Z#&Bzh&t>BG6eLHe6|VfOUKM18O{29W`>$X-
z4&};Jss>8OsJTI&gb;|pj@U7ZE>AU{15JFLn1NN~r^7jHJpzMP(0M{#FnB-Bl1BS~
z=TE4J&T0X*hl1^;(hoye)ZZ9!+%dtA)qAn5l|_GNAUVYFbRUT@A`|}sElTrnpIEZK
z=VH*ec(8PM`@DFJUr4kHc8@9;-$3;u2#rE#P-rv?gHA!1PGBwmRl#B8Tm~(lCK4M|
zuDqtm*0(SrIIRzy1{3ms+-hSAcbw|pny7K)y`X)#FELBrD&HNW|DuY;+i;jIV!M&y
z6(%t>u}qADgSUt4KH#{DA2b-90h5woy&Gn3J>0F|^SG0EXD-B^d`y9m`;YYPST#kM
zv)#ehTLI~F@Ohe4y|zkE`v0uWC4>^rl4yt7<%I{HkiNE&czku5URM=)AYuAE-x{x~
z9WeEf>V!YM>V1+B)_LD=zDU-Uf>{M0(Z#!DTN~yVsSt+~Nq)g#K#2&46G}k{WVY+E
zEArBw)N;*}Y11s`3G%42BH^8?Dq!G>w&zt!z=WU5El&|h=78sxwd{DA70w;7mLD&-
z-txdd4yYbG&`cQ(5jj%=9hW%{Dw!FHpvjnM$75BRH5Tt-GJ{OKL{T=FElT7CnfUzk
z;A5?9?!e{lrb)|WLsvn2%e^uIBID2Z-uI9<DXfEaH!<OW_ducWtoJOW*K<i;Q6-4i
z`{B?=3$&>o0oNORdA47&Wy4n65hJMcS79{7NW{6TH0!wp9|Pr14@}0Ni;b;XqQNe&
z<I`9w-Lv;7jmMoK&t<$*<(0IfWb~M}LpuCV6S*9gqGH#6IBDjedN^Z-?Q!qpA24Y?
zMk{AzCZ^Hd8i^-P!Z}B63R5+6b2BAvR;#2n*WJufk&lz(MwWP6PG-J0WpY9xO{-^=
zq^3wUt*(%okbooR%9K=1&rg;rouxyQFa|CMuTyGKG~UhT>X8vEfO5rX7E;9HtIz(U
zc`IWYuo*Zbhl4X_7_dyH{v*DpO-i#lbvpSqO(RGv^klNWLK=D|hy090B{0m%kFd$5
zaig9?AYVttWo_GLn!)wur}TI$^;_Fo*C{=YDdM~W;S{TuS+3OBiFEew{y?*uf=|}l
zwLDywRAXeak(n0*ALMZ#!7|kGn{lx!rVLx8Os`-Y6|Is&Z{iGhI<LmA_mPw6_P7ze
z?S5f=N<#E22E6Mt9?qV5B3@mR8FwhXAS1HIR*(l<?~YyXdn0o*w8mY~8ak9w(<(Sl
zL{wb*^sPP&As^lVHw%Su)B3~Yr*A#N)Ca=6;V{X8r0aB4B$7(cM>=H#GDjtPx1@R~
zvx~r$r>7JaP_fU@FhuaVBwLQss!2mYFPU^rxtw8$*uhw&5b*`@P`Efhm9h~DTLh1N
zbN$Q@C7y?l%F9OLAMScImyGV2Ta<h^Yp<;5kFF1LojhyTayv7)0i>JL4?(1M{uwPs
zCJOljf#o1ZZ+-ME`o!nFfsB(=!cf-<sW_}-YN_A?#GX-?&x4!asjwVYYZO!U@IM%P
zKq2HODwK&hrG`Ru#13JkV%%Y)SkTCcG9h&oP5;hZnmn9ofm<Tn1jb<qv8Xc(PCB&{
zT<{kTsZYmYu()(R62q<muT7=GvpXHpe|Do{8)8P6M8}1M9*%zmgHOK_Pl~&&*?))J
zVHCy34q;GRU$QHk9xAv=ZVHz1cu|~*$48j%sj-43Id*)!8e-ydA?dMiyxoddw@%d%
z+p&=P92*`xR%xcHTXn?^kPfDaAr+x$F$OI~ug^V<7$upUndgUq$O0_NfhH;WiD@>}
z<XV0%Q<{}n90n^#z^->t)IkO~U7<6Yj<^<pqwfV<N7Y<PfO$saq{Fp@{>wX=%w3lU
z2!w&lyO_+Km;3P!>>!i18;f1TVy=cCn1j=ly9ju9xdwNyD#a5@t~pkVGY|;|95$Ok
z%!YfM2ICd1k`VIik^fn~`45={agpDvVHCvp->wX%)m0^-67H2+C@?M;MyZ~yjJq|Z
z`@A%MTCqoip|Fa`sFKxc!j2kly4|abtSBn`P0zk+bZtfuDETCWcZV9kgQgG|EajGH
z-&8@~sbs4x6dF>RsRlzzx?z00X_^JYALC@k+iaj4!T2JGaVh)qCWk=7DC#yasH5;`
z?-JdT1bY?Q7E%U8(+1(nXW((T@|tj3-`lorx}^zA@$BravO@}H)W_GQYF#1F(9p<W
zndbIEex@cV11I8U(0_GUN!=*+oT0nv&*H+OLJpX=-<`?AZcDVAlJj`uFN(Mn1@Eu4
zH2sXiU@JXAfy<If@fj;EjCVzj{F2X^s+@akqt&8Ma?g1+23DA`6;ik^!{j1v<PQz{
z28XKO^@SzI`7Zk+Tj~tPIdkXC8~k(U&Bb?|kk<loE$7W;@<S5oA^F$dNfmo(fL(EE
zuzao7x+}4Z2jc6&;)oR+-dZRVcVoqjLEqr!>djlPGteu1mwjV|qnFNZTC25kCvv(#
zd>vfk`G&t&MUR7}{B4pO(z&#QS>m`ig*`cc$m_dIhzw8Kx4hW9WIrN&(}5;S!PeQ3
zT}ZFDc$O)oG!mvX$br(TDgA4ezatN<mayekPVMTd-zr>SZ&+nALj7(kbW}K}uw8&9
z%_!fGVKZO8k96H$^!Q&FK%=Crf{-ASRxO?2DyM5T^j=#&BOg*dhR}k?wGaqC9Nu?m
z!%yTxEt6?M*B-`K;BXaqlpaGmTB1@WaX6EqvN=jw%&hqMSutG!|NGcs@f$ApwOIU`
z%Y8!|-3^0vjUL?vgLTK2eciftZ``QYclbq_XhpVzATAf={@@#aL1_h|Wp>a3GdWk3
zH6vt2O@Q6)IL1TBL7<SwAWAB#WW;>4^~<@Uq@was9I>}Y2Sz4EKW0Q(GlD9QCwSEi
zIaicaRE}~&2r!FhB^Gjy7_1p&rUr1`tyt0t<cK1|V-SN><Yd`=v&@on#2^(J%x<xf
zvjV>w2RTO!)(n(gK=3LSa*i0JBD=)tl?Zf1&aPV54r3=Fu1j3sYLyea0s8~VMWS`6
z8%CRl?%RFF0=g3mlXq!~Qvh@SLl2?hb6$ag{A545V=+JAr&CQ2d&TPjCL~xX4g=!S
zNFy{#V__&XX_!W6l*Z^ydW+tscj#SukKU&b@L_EF7GUvR^KXZ(%Ar8N^DLbJEkk($
zu&UwpZ7AK^Sau_$dn9*y4=>*4YQtHJ?=%S6TIbZSkb%eNwQQRPsX&<$HS&%Z3;1^-
zPhUU(8=v<60l)t^JzzOO<sbi?={SJ$7a;AJCxF!CCd20@;H|<XSc_QzF+P0~NS)XA
zodf)NF&z+;eE^8<R0Z#u4SCGnE4%R)>4Ya(Qj?nvjB2Yr0Zr;W#*_pgEs|ipA-6}4
zRNvDpKabl%E3HCD@(=RR7uv^7s_${OIlq1epxRamh}}^+hk@<W`}Hs17B!WCB>iQP
zhH9J!qZZO%zE32F^9P*3V32D8Xi4=ig`6%uWf9-<9ghRh%(zL@X9shN<8pUOh%;_<
z8-2X-vcssks{Lj+3>ixo8k4O#P6oSfKHG&52}|+Xx2zxq_^mgY(;PADU+BSa&Efv4
zaPSqu$K^6n{z_q5tbq{dK_N16G=T%ia2^47Mxbyvfd~$(qq)>#;xyZR=sRSFE9IH~
zvndndO|yGgIyQBoNEaZGX9dd&Nkn?U3spG^;7ddx0}_~5pJZLW<_F~}N|qRr)nx80
z@BRRHCRbRYD}67!DL`Q(P}D@1?!PIu$JXw!uo6p4;yK_CEBAA7CwTvD2uc5h$Zx)O
z<be+m*N5Q9Hx&WMdGYdDvXgrf<B6{M2lO*rZ2Z!*)0<n!rer-)Mmh5Ah*C=9bCk&?
zK^8%D_=V+F?*X$%TLezFnL655`=Tce^4*L3CiD(qJ|~joV3`z>R+}@4c5#jBlmX-x
zX?P1hqoTe%5#>qH1K|CS1+8M>X?5sHcrh(*9bYQhWw>c#2}A>ApFXM(2fo~<M_5%B
ziCV#z9Z@`q+wHOV9)*P1lgq#Y*fO;AR7kT8g^K3NOP)!4*7)5o=n?1w_oH%8NwrlZ
zD6uhO7eWg6?=s7Hd5^lDT8#*3n|bPH#ZG;FA4*yzZ4y0#B!B1NU^A^cXuO0KnR=rM
zZkunAORI-D?R0JGns#`U1`UBOX*{B#AEWj<BNH3UVt|2sQ4tJ^coW_%;-vi5<3wv>
z0e|8O0kAY)a*ZACs9A5Mr_~b~r`hcqAqo&BTC`SW1(db3!w^;0y$?!kQA$<wQ{0Y4
zct&b6X$RQ|k6<Ee5kSR7g}6Bx$o(QF6k&n{$WH6ZB*cJ%DO(S9s=139qLK~ib*+rT
zi$i7O5eMkUL{G%&CP~BoqJ|a&r1qbPJ7dpqF_Qsd0VZ}~S9`hIm!JxuxT6vvQHl<F
zt#A3l6)W+}yo^}C661Dhc(UD=B&5SV5+%2lK@_rMQi;78)ire+DU2=v^-~vl@?rM3
zf8oPurG{V?@u*DHtJCMz<D_et%glpXzq$i9-);ki-64@?1XlYYK-tjt;JqagBJRA0
z4e}>>PGpM(*T=L<8@VeP_=x+i(G;=;*AP}#JoF<JTs=^}`()_FhS&%Q^Dv(P8U7P#
z#bO+@9y9Fy3Js5f@L=!b)CyJ!1vO`1k1g(HGs1SSc?Y&pp5PjBsX7bBvZd2do)W@b
zm~@Uj&4yIwv;LM0nIdM`5KmBo5gru`q09sa2O(-pNysnAtW@uLI=jA^3!xURyI{Ev
z5iQzqLJqguGyK-EHXG1a@k<r=B9J>qp$aCX+cEmYhv7PIKFslKoP;u5C;;;bOw8q`
zgT;%TYPaqNNU5%xsFN|4In80iU5%Jm(V3?H!ou>b(*k6>&s+vVs;LTbJimvM+Vj+3
zRO6(o;oW6Se=>+rv@??D6~3U7O6hc7WbGn=<)<p5`y>h&Q3fVf$JgCCn$uJ%+x98V
zdOZ<y=Np*QVrG(v5e9x!FCk!=Xj&uRO$ndXeom@IbEc~QV~O8ZU|6_tpS0|ZfT@ND
z6HOQsOgY7~I4bvY(%>;IQ1W_DhWXi8HRz)ZesKpwv+6SS<k%V<j%+~H><;G|GcTRQ
zty<-yD?p>Ja`vH&)i3Taw{OJnPx^M<l^C&doD7bmJwRh0jO|ds7;_|yU_Ex=_0H4x
zwcWI|<7WK$WLbqUd%bOuVp{!(y%~tXEOS9zGg0docIrC6{<2PJ*<_h%Ab5(3Er)fO
zS=wbmpkanY-jK6P!16Bhu$xmt)!-^Aq@`Ad_;J?lNui)yxMo9|EmqOqyL4q??&P0s
zT=~FmiYI(WvLBXHgs5y$vsIQ*s1TE9c(uYKks60%F2sU#V8Wyv)aHo|IvfKs@{2}X
z)NZ040cmh4zkn1bScc~zww2Fav1q<@*ciU1LD?M5cFvT3w>4fI@MGGnZ;t5DeV~^n
zFZBWk@y5xU6}*FYK@9Z)kz)`GL;HnG{ZepA`!oKXb{g%&1^Er{7o8sAdDSV55fBMo
z&*yE5nbJ^Md6j~8?cF;^N9^M4&AI%)znPQUNl9<IMXc?1ot2}JN!EKY240y`uho<j
z&ATzVb)AQL6$a2bY|jX$?ZOO<vh|FeX6+e9hFn%wATx1Qytlc@RcABE4n&5TX|mSP
z$jYa7^(OUo2trLyR8BW$KPEXefve~^*oOj2C-&95d8pZ3=gVfb0I`_0xPzS@aV#Jn
zs9R5s-0Vzt5V9wUa1K`>%X$+VqenTIM-P*6f4cAp&e@|yaW1yoLEzX*o48hBLlyMc
zFKk5s<&};>jDsR9?&>5cQ9ivU@i(Y>g6Ac(3i3pY&d+T@4#`fwZ6$$LSS2dd0$9P5
z;?m(0v5TZ%>;^Axr+tA!kg^lwr%Rl13RM4e@tM5)3ul4At_T8Qd;sms`06n~hg)%v
zL5~$u=<&G(I+eOIZq&NkVXZf}Mast7o#xqyf-G_!+_}V33U0P7tWLXuEw0K%Z#A)g
z!w4d@0T0Q5hvm5f{F8T+c=;sB<IR*mze%*mjk09{wMo!H%1rp+#-<g0ciK6+bCq(X
zsSO*vlxo_43m=LeOa1v45-;3;(yM$)sajvoJ+ZOW3&n@HK#fmWeBGzv#XY^Qv_e84
z6jv_Uc;FxfYC@hDEmuq#e2x2q790Z#cs)x!yU8e%`b|Ejnoa8m#z8zLqz<~!y|ns(
zo6$;XT{}cujs_?%;UJ^ix#st%IrVRj8o?*%yJb<RC#@}{>}#z?N7+ad+u_>i-u*d?
z2nJ{m2wiEUb=sV-Yjc_5!o8el>@VEUTKCbSbvkOMeTi8CP$_>{LsB?uPA8@;1UdQS
zh4q;0)X+7jvL)B?b>8y$S->m0EJJJnI}P}7OO89eliYTVFD4fONOa{1Xq><VGcjye
zNt|4_BSK_KL@PY|4v7kcv+fZQKcg{jMk6i3_e{_Bd~@>vO(J$TrLswx*{EaN+`?)n
zR04wnN%o+H$10!q;`$;>q?ls&V>ca)0Rrg(nj&7r?5m~}XR7r@)P~KkK-YUUWQVY~
zr`XY8*6q6N^kjC?Osc#MwhF4_BL$-n91IbAo^h0g9t?wx9$Y)BG1<<AMrO2O0B}V1
zE-u)SKQK@;=iqy4!_~x=sMr+a6S~Th(&V|}42KZ{+1zM#RccuX2;^z7(9aJ;(PVlm
z47gk`q-$t_<-RVDv!`O@f-cYiAL%dw@RG0>CTe+xuUyAlVK9z?P^r!h&DEQ2wxwB?
zHuo4s2Wuz`ofk@8M^WiG49Tpo@|sD-O*DP@34k7c_rGa#mO=xaCI7<0^Zx+8+=lo9
z0N>p5?Eb&*OuHt37oa17Ab<bA186@`K?#QxV7l7TOE0rK4@g^2s`)I{;k7+-$_1c&
zLW<Ug!^P7772R@{hQMF2gm14IZVP1=Co*wlUNh3ooaAteN}C2r^OQe|jnYxpXiCc5
zLK%GYhTKcZfM|TACZ!B4Y2qhRO3L6;P7Y<0Q<m+jE8WAH%eVHhxJ)#<V@fVWKesL3
zK=Y=Ketdxzi`#W#EX9uxDEX)gch0?~R}PqJTrNm4rUEZE2PoS1LA8=4K39{NnD{Yw
z5`wD0hViDXoI`Y+7q2V4BTKY}GHwTCPz2XYZ(0{XbP(S89Ii9XTn5?br~n<{ARb}?
z4ou(xD?kdTlscZxnH$V;bHINMle2Pua}gG&1O)U&lwjzelKM~*A|T6i!ue$}W25KZ
zAyC?KIT-l`G!A0`2p|i10&i=&L`L5sLooFh(D)D5f!?pUxr#8|gnWr?tQKaG&_M1A
zwGL>YfM^KKg4z~=6<x>NYw$kfSHPwb!Y;c8z0tuM4FZ5d+>Xh-tHPAYIZ(rlKh{Br
za%7MIf>k1cNMN6YQznoF_n{E7p@>fbEKF_$6eWWTPQpGgLMEs{4%LzgI$&;k%=??y
z0d58$h`u{Ooh?{^E=gP{NTBT$L89v5cL0XMvYrnmZG)j~i-ZhSR*Pb&;iCA8#o>=}
z^}IGJV8@+(gw|N8g3nz}AR-`?eVi^=q!PMasZ^a}Wf<$y%CA9d;=2iqYL%!{Z(MIh
z+qKjhgIXJ=6LS23=5stnM8@-4sKLh!Hnv%%2EOQ2#&6HmYwG%R>eM!tz^X`%GK4b?
zT<SEcSEB3;61;htrxxjhe>vLKtD{n<S}7480TH1jN*XFQNq*J7-0$P!IjHv$2Fv7q
z%CC~~>x5uxM|F(_1nPq}*rJ;@IS3=q7&3QtjUrXbmhUddQ>{|5@6wmzkr9&+ka2%J
z8--dZ(aKaCp3LLde5uCE;g40|v(YgN1j_zIre*wd9&II5G;|D1ENmQHJbWp^FOz<s
zV2ng^Ns^_|(C)0JZ)W+li(7_FS+eEGmB%CB4i}uWQ?U~BmAa(Nc^6&Vnbf+x{}=62
zVSzz+-FAo1Cm(z<R;4O6s?}Pp&UoY0^J~<gNwa%ev}x6@Q-?Knn`xp6CYkKBLq7V7
zR0$)T2*gU3Q>isto!%g4j6CMH0X>amtq2XTJ7}N%PCMhMW472TIw4-R*D2jpAo{kU
zP{1ojp)~JBy3P!<&GITsNl2xQbzIMvE0ip!Qfst2y}`&cBRm2k5;6)Z8hR_N3<I;N
zjtF(F{;-<nr?7DfGu1DC6J@*+LkRGQdMOoIA8u-M-1op-4?XcTJbVH|B4QF!G6}{=
zB$p&vid1P=`LX5FHUtNE720@Cr9k|SdU#XtwkEi8ore0Vu)1@~c>cz5{;-Bi>yDQZ
z`vbzT2tQ0Pe(4~`^fPJvHunL*U^IMoKE27M^Pk?r|4~NAL6LEOu08#at)dP~RC@x#
z^J3Jt-mD<|B4Xdk;b^92r5{WK+y?-I5pV{8z?tFE5CCUWc;gE^p8#J&IEECxY^#u$
zbOG+auhM?{pG2bDN9jMS$nWF*m>j<r`8(3rCcc}bf9UE5MdQ}J+wNQMuKUir@4hz=
zxbCH7e!F?wbiEziy~t*SxO6Uv*prj=Z~X$a_Jn8uI2hZW1g16ZncM$AIJDiC3TUtS
u*+6-CZ3n}9`X<ANsEo&8U%Y2ySZmF<ou<6bG?e#w_Mly)-2c~H0001j0^Y{}

literal 0
HcmV?d00001

diff --git a/lib/extensions/admin/static-site-assets/fonts/HI_SiYsKILxRpg3hIP6sJ7fM7PqlPevW.woff2 b/lib/extensions/admin/static-site-assets/fonts/HI_SiYsKILxRpg3hIP6sJ7fM7PqlPevW.woff2
new file mode 100644
index 0000000000000000000000000000000000000000..68170193153df9f171da35e9de8809b4c28593b9
GIT binary patch
literal 13172
zcmV-)GmFf3Pew8T0RR9105fy|5dZ)H0C#u*05cT;0RR9100000000000000000000
z0000QIvZphgFXge0E2D_A_;<X5eN!_$UuRvGz)|j00A}vBm;yP1Rw>3TnC8(3_%+z
zXC>^IQGoLRC3JjufQ&@gs6FZ@qmZ1A`ON<Rb8;eMuwMpK&5Fcop-GZ$B$F}Qum&?m
z8iCj$8-mV8Pp%u`QA0&9Urj?#kv*OA?8AQeWw9%*ep$QE#Zld=1ns<wH>DPy9}OA*
z6u(+Xsf{X69qkB>eUjwD|MPi$zxKJoOFekjNDHne^r@Mpk&sdbXl@Odh|*&$^0wwy
z#b6uDVhz2~VdPtd(f?o;Hewf6y?z+|`fXALx1D>ohysO3qyFPS_da+s6Z05Hq6IE$
z!HW70byj1cg|;P`IDiY;9CCL>dqva#7q~z1-yiIECa9TedL=;=Ke%8C2ZVjGGkyd=
zs5)1br8=O%)S*vVgxki|&CPoKw^`l8YB#J~;;f0hHytu}$Fg%(+!iOFqVSvinyz6n
zgXp>pLjno_9KW9<FGLdFp(M3dw@jVucc1#ZcZr*mo4UEXQ#!MM-j$*NuqQ*{%ok0l
zdf=ktn%BE~mR2htNaq+7^sz5w`M?nH#g`xF9++E}gO9)!RzMwa(X><ncF*(1%{S<-
zsXPor=%O)vj4gP+RMVF4fAT<w$dTEagHh8%u}($lrU4gUgrUVA6ex$3rzfzmhIb(4
zP${)eoyV<<(p7EW-_Jg80%QtUrXe;gM9=%(-@WfQ?FJ%7yh@Bx*eo!xqDcFDueK~_
zlkeSo=2Q$?G$GJTsv@9**>lGT@#rUtp;V%n!X=8eszk9xlPLBXE{Z?+10f(ocY4vI
z$7W}dv}yUSEnq;woutM=VU;Q*>7fWv2t5cayYvix=__t53da{7`I-Jk`)hAPfOkN{
zJ72nR_ynuAY~2h!O#N#JEnyGy*}ZuOQZGmYC<Twhvm&1g`f4_*SX`gIk(I>rPC4z2
zv(7p1f{QM>YQSYzGQpN#<Ol7uU!Mc|9dyWHM;v#;QO87M955M#YpjycbTgnonszsd
zjdoPfou@g~>qOB6gr7AH@w`iJ+ovFX^zjbkK_>!V_?cJaFdE=Q(H4M$3Wb-+O*#TX
zRTz+)a<XluG<b?vxIu)NyB&wnAEf}-h-#e8)!YVwowE=SCOut4EkPI%#LE51dCtrO
z!t!WvuZ(z)9D^F9<s<rC8Vl|d)xJbs8U*x>T^58`Vw|vFgBa8fs?T06Ljj;P1EG>`
z<ka$&8fmPfu6pdf?@>K??Tme9U&IXn1|R@rfDU8<`nWybN_OP*@2P-FVtiRN3WSZa
z(lG;`_(K97(th;-3c!si&nEpFm<W=de1pR-VZ#B30qLV%>a<-r3kZDkBcjmKZ`8P7
zz4z5CL;)}mggGEA17V#;5N-qEB@n(d+YG+&#Kk$zHb<{J9vfk{p8Xcz>^GAwGs${W
zO!dNZFU_>WY8$Qb+6wQjwZS@X3OL6Dcinc+CR_Z;ovvBpt>w1+ix0iB%Wi-0tF5~I
z!@aIs>WN?cY8F2;3o9Etho_v}a(Q_91T-6_T8&zD>NR+#QHxe>+I1MNlS`8>b1g8>
zd<((p1wg1sMJ4Db5^QJ*c7z1Gs04e3ghzr<c$w5k<PPnWE|}k^bTSx?KR^W8l44FD
zVgrDoM&GMtoIZ@*hd>gi561?Ky{?VX6Qbk+GvXN&%4ftzpgLUM>$Q1ut!Am1F`ozY
zGBZ@;YtIUidWYv>UlS_w^0GL6cr-*0DG_;rT4J%*W!TpOzt6VO6?ARgq1;gKv7gx9
z;rcu*i3AvWpK&k1GXYXwo+2+m>57xa)S&Rfupj`9Rz^YbI%T*iX8w$G&ZbgGy~kW>
zJEK)zbWnXfGhSOE4LACr7VX*?`gCmCZRHqLY>0kH^7F7SJ3Xh5h;8$R4Eh<e_cupw
z2n40y4L}iq)dk^qsQH6H8vlWKgM+xyK-vcJ+ZcyKSel(=>5}A!Joh3er=^scZa2N9
z*frM4xPa;2xoJa48+4^nhbZF{rFF`o%*ie{6w{KY>Eg6}k}1LwXP;Vb`V!r%dT$rV
z{RQ)ZhT6T<ljg$6m26-1WHDnh4nizSXnD{&7&e3u5)o#R-s2`+np7^f%$CxQqICDP
zWV+BMo68W&q_qB_%k9$ilBY^FUKo>!M`4)KO*n}6`L;}~z35b%=`PjLuBkOUyK1ks
zX4Zbtoo3E)PDmhS;W&Q(o&+&T`j(gw2Dvk>cqKZbwWzmD4Z2N@o^)-kc8v@==sDa@
z!;O!GXa#yUjpLAP*pUJn^|HD_ws)R${|wRGdzNYVJSt$Cq?9E>T8GU6x`{f-cBM&C
zkiWlYtA-Cx067i0+#S(!DONQilmdasZ^aNURYckG^oA@zP=L{*FK#<AK@<v1BPXvU
z)n){J;Dv)b_8LUzsK(js(&;=)KN7N$q!w%VJUoLuUc(N;GYNeVX7EaPp^3O&^chj|
z`JL>fvEeYQ097iWi8`Y&3kNidl{-JyXl+)LQe>LcSgTB!QiAs>-o2vIq<fI7p%OjV
z$Q(v=H><b#>F!5zRZ0GVT}BSd^~K<nZdh+L!0-0ot<mDaP;-Q;y1Nb~o#htit#P-K
z44Qf0N)?bvxE(8`$BNDPVrpQ})la0?=E(6hB?;iO*&_XDKG_c}xWJ<k!udcmD9A<>
zCf}gOaypO8Eb@PKQ7nOe*ul-*2wMCd50=piYq=fQ3+or0bOS4!>Z_=sx}t)tO4g11
zN^TZc3s(flY*Na_A+1nk58e%1xEHtm@PH)ZMIZd+1Fyt}`Mflhd)|^{|IWnn-77A@
zWKxEZi>U#L_EN)KJcf?*x+}<_rul+#S`N~NNLC@#XS`9TsO;ges34@mXW>g@zdLpA
z119ne+LYui7Ug;WaBM-&9y>F1E&*hhcw6NU>yC$ZWCC`KmRKhG*8CoyFga@sWRQnY
zFm^`&(RcFWc<&4aWUqy>EW@eT@DRoYMD=5OAf#;943v_A^xjcK6=zP&*+6(yJC7w;
zG}N+^T>zRNg2_{Qf|i*mHOTT6>$j@{3&OAuJWJ(;$8SOLu1908+xq}hu_Xw0BQq|#
z=05Ehnw7g$gIK)rdbjG&k(Pwa9=y#@M`y8S6pM=P$~>L$<c)l^r<^@Y8fYeOym48o
z1+%&nDx_vyu+AtL1$<Va7pb^$p->t6plltsrwJc>>_I$W)shVWbb&3T_gBp#6k%W>
zh}OEZ+-b><p~UE?E`DT^#t`ek6;qD&d6q4pbnq2qS;in0WVX?DTT9j`60@1oO@mdC
zTcNIPagW>9S8|}yru3EwQ|Lw{Y$ou>s}c54AK9)#;6+jt@c|*7B&oR<DY@I3Uih8K
zx8ZJH&iqsdrN^C2{g4CJBbUi0GkDn;zL``-7@&Dvvpk`h4iseYV|kEbF(ig^-@f7t
zcXlFozqa>VxPD?R*iV~o$qsSxt?Uciv3k##Z~`joyQ<ro>Z?{cj^27@QaMmwxHTQs
z0JW9jR5J#=UO#v%9rJSQfJC7`n{;;&hdN*!fj&naU{&42jzJ8K3C`F~Gi~F#zlo4m
zg2he0<%wskE=_cSUN*)V_3~4^RYDgM#@<e8P{njFGPqI<lZ|v@V%d}nI1?aGz6ol)
zhIBtvu*G$cs;!dV96XhU1F}WaY$vt{jT17#P8+v$_EYp^GP0tzl?k`EeFq3d(OuW%
zrT)>yV@~^fp4hv897cVS?@RmPNG}$!;~f8RAyicfDpT`^s#(iKt?Pj9+X_!`0l$G4
z*+cj$U&1qlJo!o(rAJXV`Vvx!DYvXJr7r#2+`>nfrW)V%W)x30`_S(_4;_y9{wCPi
z+*nNw-U<~WAoOCG4VGFv`=a&XgQV8k{)3heyd}7c!(_#8$I9(=!j?(7oaNLr6fW)a
zQbN6qtFMafs19Z?Nu48wx9;8yk>qY0^*4%f!4e$fVBV*ygZ+XnN;N+|4OinaSI#=9
z#$)P42-;Uc*Olgka$zf~=L+<@d_hf;cum^v%w2Eo5{b_^VzR0rwHP|2Nh}sBx3ILS
z)6+_+9(dp6s$ZIzs25pDrrWL8p)RoR28AP3c@8u^xQ^QLf+j0Pkqp^TPd5JnL9xcM
z0Kc%m2thfb^kLgPra>JQTiBWp^XzszM;qOiRQU^dF(ewKCi;giaIIeG9M7@B6CARs
zq5j)do8?6vYqYl``SeSg>S<>)g0p-)&j+{gDA@wK$KYvrF(9o3rPPbWX>@Ermx}G>
z!*lrZ>F;6?DW_jjkgFlv4=@*eRijQIP-?wrK<0`BHT}&Io<%|alOk-8emQwW%=KFM
zs;*Ufzp3m*hy)+q@`oPqKjbVwg<tubp>gSMe{IQgwAy;DZ}8Ur_%!->s7^pc8`aAq
zgUM7EvG-?nnY8ar`-#8>M9~`c8BdGK4%actOFWyfrF8Ms4eMd5O=w5WhAIC|WhbRn
zh9nzw3pJU(9I$}#!f(SM)sdZnlA~@f{($~185^VYi6c+?LdOw8KD1!f0;m}YvuqtV
zWZtYEy3vb>K;I@DHA~nasinfWN^8Z@&aHZ7;U*?Z8AuxEj}Q`@2b|h<$=1##SXbUZ
z@`0^cZ4^>UJC?qL!eFFq0;@wdmy`<*miR;RUa+7wc2X;C^`)*|yxY*}7C0$6MAf`T
zb`iJZ;4?oVLs!)2tRacsF)1I97iazw1#+ePaI#e_EWtQqvYn&N3wnis%iqlmiQgDY
zp8~yUroSyH<*LIs3m#fl#g74Id492&;H@JQtS&#Y|Ep`S1g{^Q7X0i-kA2BWj4c8^
z(2ZbpBE&zccn$cAAp5NtN|Qj&3b!W0FhuL35ys&f+LQ33<5>1c``6eLXh%<26s~fn
z)Dw&c?a6M|8=0-zOZ7V_lD6q`zj;hg--}-4h#ItpO7&s06w9lUsN6kQdvy)B^D$Oe
zUpUT;jHHAW@N>D`lTxkDZXkT=c7-I$58ReNRkkq0i(FYdl=v=>oDxct5)y~3mmM}U
zK%(T84AkhIGlQQh=x~NgUgd*P`I~pkViKOKOCX8mJ<(TV%jFM~Hp&OynmC9rC5=9!
z>fz^XH_zxKy4(>vy2|^IVR&73Jna-4iKSoUfQqPt5-vpJ0<qt#6fuu!XK0!#EEg)P
z%nG5Yrhj}VHr$2~+zH=C8}DF<22@264$voYoh+=XJp{0HI(t`NaP$MUA=2C4W15Iw
zt3PTn$EUY>*g}<*Tf+bHjSpiEHc_97Cq(1-?yaOC`!)3L5g}pMsG6VaHF=&b*goX;
zT4(Mhw?rfpOP*1rs-2D_*j+(sZCj~F1?+0;4>FufZCobD^-A(Y)Ew-M-BG(EHly?y
zZ1~oW7g<5rW<Egp>kgRC**Qfe?7tZGLqGlM1}hglT=?*qcii(Uc~{0h&qbRjiYlR!
zO3TEFW`2>T^YzPKP^6qSlu#B+tp5-CpD3|I>|O0U)mi_;u44L?4rwa8_6R+x>k?Rk
zOlJ?&G}PtL^C>1ZFCQs8xo()xESE{`TzlYlMB*<{>6Cey!Lt8?8j}kg;|SJq)rvgc
z)!&!@0rKori5?eLs&EmB!A|3G4786Q>%)Q^RW-*RV2zdgx>hb)zM<PmA8GS7u`O$t
z>zW&<j~UZAvDq9aZ|z!S)Lcn6CBL(oRyd|~%`>WgPBbRcy*jbU1&*}`YPo7s(HYjy
zzmK@a=UR)o%P|q5!A9d#_K>zrGz`GMm-*GIDvm9XG1lSi@}<Gjd~<ygn8ar(Hm-?T
zV_d#@Vw#p~rp&)+%AlLn*4)-KW93n9x|`)8D>JJ_C`q`>XNgHO7hn1R*`lJuzLrS?
zzPia>9*e=WgyrrkEJOe`P-0C1qHwOM1)ff)rp16W^S*HC7O-Z<#E7No@D`)P)8)U}
zt(hF15?3qsx#phSAXr?bDCo*##b*}qv?1zPmy0@D8z|sp$_lv=J@TEd9Bn;S3wcsA
z?G|W6MpQ~<7}VXQ(NBRoWLT*}MnL0fNk!LrX<phJvPCK;+dhO)(oU%Nuqo(K8%;i`
zziyCevQ>#F1C3|sv@@U)QKnQPBB1^h1x26!7quGqw+s=i52Ccs?NVs~-(hl5Mr#5E
z+)P;kR}-L&aT;-LqJUL)ZiodGB~PAc+ZSqZxK(P6TjXef*}LH#>E5}QgkIQ1l0oEf
z6=+k|<Gt;3^kKHtXv^ZGVgId}QN)~%ow}Gx`##5s=BcXKqP<`2fIwjoa!~5HdFBGf
z17~$5l|j_)^5dlD;i5~HD9c?V)OgqG6FIwl%SCXbHH|<>%ZD39%X62SfN+l+%jf4}
zw*z652<!^ggok3w(9l_b{q}Tpb=ZHkD=Zo^*DL-J9p_}mY=pa(>OW-bKTL(YH$s_%
zT};7`uF|=MR#^Q(draZM(I!~F<A2XSMPb2)Gb6u1A6ob2Z3yjCpL7;Rdhe`Ggg%;o
zHryL3ihB8AT_|#bMzPAEGMbH6d_3@A-7BA3Eoel!jC+Mm$PUwerF%?9y^l2+TQoTC
z!9Wa!AEd(n#m1FA1j<Y63qW10CZ;RG5tDbFnD3&e<4#nkgKp~l@s2^&>F*YgFFflx
z5miJAFjxW`S*S+mXR0V+h0aB0QQTy1OocYLg=<7(fc)lk6Nj0sNs?0mGuc1U^+5?1
zTQm`pOcBU<IO(1mPX`T{D6Ad?F*=BT709uYUy9oz45_@7WKuJV<=G#ysl^J7i^AgQ
zNVw>{gPwExrkI~SY!2T}lBw}UK4r)n)|=Jlk4Y~9pmsb`H&OpVkx{JIgvdN`E-(}C
z6(z=@M#o-`*CLrLBNBdET0qK{7L$!?X3^9#i_M`Yl<m8t({V>UVglMst%7|?cWF)T
znwhE@(2Ts|x(c%n8<^v!yLnDfm-2aH8l@_;BwhO#d7}}BpIQmcx<y0|?1E0<vYGD{
zdK82C`FzfVsNDeLGN?x|(l%xW0lbypP@FGPk&6tRGOVhu-EhB_r&dbP=ttv`$nlTR
zXo*I-i=%gPOlx&eA`iMFVXlW_5NQ<%tHf>adMfgsil2Gb{2H|$ufgNBc$^21&&^)>
zfPCbnS)V!Z*>n@^^46bb<ES5Yt|acw^2E^8ob~()9rV5U$*~92!d)L*8z*@h+-Lt|
zNx5vM)Db_I>2wE!zpj^LKUFuyqz(bCsb0S_LnO6Z3SIty1mmNXYGYd&Mtn}V))YR~
z$9kZlD%xj%P|}MvngEH<50HSy0;OUuse#(gmkp-t#?PQoW{f8Vq~`h`lpk<$lI_g3
zp56L}7-A@cBe1FzkPD@6lTCI4i3F|zjn;ZA3X~~THQuKN5-+AgyW6unCiu+_{`*Oo
z_f#L-8k66s(_`<}!i-B9cv-oMWy5=XO&zm~C|d1j0H<e#(nDG_>>dU`pK6B-WmVM7
z_J15$4*CAB14)Ejx+W!pD$dCy?5=Vn#OC4bE0)Wvr>kZ{hfdW`d#`){oYcGX4+>?}
zGHkpng()%N*1{|t$N#!mAJiI<$U{s6-WZ`)3F^Q(x#rhj_|)5!_B+OS0(t^v{Jkm7
zb?#}QV(?R67Ag|2(LlqA+Lo-(#_Z3niJBH@c&Nscg>u$BEtCHpiPyJ7OX79YWq(E5
z|NFf8Wr4l+<oVyAHx8aOR|mKLap13fU(@f2e?gz#f97fmRd^@QFN+s_!u|H^GjC_Y
zV}j*Z=n0Iuw<f`PEAfUBr$%Q`52UCIj4XR6Q`f_GbcS@7m5L~Pj0CKfa5@+Dn_x$K
z%twMTT{`38%L_~k-d7%Nv(y7_zgk|`bIWMbXs(hSwn-Q8t>&&_xw8B(V(0gvg_j5&
zmiFVvRQN{Xd_M-T_RQKa24g&Nb)jkDyGtg9s+6tsQAYY5W4+S?>2c`+?*v!A+6G#o
zz^aAIH*|L|-!`uU{xx{m#q0X&E${L*c1rWo-jdByG1>khgp_tJ_8qww^yHXKK8e2$
zDo+`285I}>8${RhFltoO^BXQAhri+8SiO)>E3>D%I7w(+bhItIFdO%a{q%S>nl3T%
zM$U3_=n8}N+il{otT+@eGZ$+9V=iMD8FOQPM|nbAL9$c6&N#0C?_9y;EXvIB>3WcK
z@60Vy8h+CDhjha{cg~23JBT5fEtGrTgLcQFT~Ml&G=I#-1V4fa`nd%dgl%r39t0D0
z^Q;I={=5X8Jwu5p=BYo>czT6Qs#fyJI##NilN3w*5Mz@UN-?F%)1{jzd{brsY$~FE
z;Hojj&=TS>%v}VB=NV+09gO8-Z4wKP$2_}KPoVF?_F+(u`z^a~GJuK=`)Hs6`PY!$
zLOghdh`)6y^VmZQxfgc?p!I?>mDTpylh2Ydx0b_9?0CdbZZ3_%JUi1$rvKExe`JP6
z;o3Yx0YsF>AYI1u6EzBYKq?}6E_jGSo;PD}qFzycXOX>nqHca~inrC0fu5qTuG@ae
zv&eHkDnRmgAVXpD<tl1vJk>@@fLP63y=z<BjEHcnBNo8qUI-($V->^!4DrV$|NF|)
zKmTN4WB-5TbRPQ)f!|D`_-mx<G?P>qU}UmQ7#>c`1SITzEoOw1LNZxQB&Eib1xy@^
zTJX_RbY?%Z_^v%wE$R>*R?lU{*Nxb^a@B|pb#?FjRV&8}sP&S@FxBZ1!*t&dIvw(-
z8-V7sj{&r3EkOJrs}P5O*=)%={dWD{+tVZr8{)AtOKIl2O{3d<r7SN~rZbp0cJ}*s
zTOwjT-;QzP3?K*0ca+vutFw-u#9ucZ*F`3N4RKVY=GnDa+?<wRYEF*anM$lf^Nf;g
zj*IeTcWVV(#j&SP`^?C)S$0GJnb9|y1X6VGyePi6NlNxMeK<1&haU8d@XywJJ({v!
zXRk%3S{#~HmRCCdYt|YYKwi6dGD+*Rn3-*`gK%Mu2}n6~&_Uz6kSj@6v6$}CNPRdi
zOP^GACB?56<I==hKx@!z>0bJrxI$malSflD7%JU>bph27yDnz)*=Cd)XAyA8)<t$a
zOB|wU?9^6ADQk+wS4tOW2k2jdzsBUF7YZiZ$4Ir!rYj<qDR-h^TKbacqJU`5W@$iY
zHQSUz(wh=9s{5r<Juu!SH}W;=9H~ae!!Lb&?%$K7w!EYtp~ExHBHBf(3CZG_QS9wB
zPNs7d^ruJZWHR+_w+}6o2GB>6gD45jOYa_1<S8-XW5hb5R<93T=+t0obUjwACRRn+
zD+*Zxwi(4o+?Hfr*9jEoLAFo=Xb;VO6a5{T{Ekk4OD4ZXom%-o>BOqX4+3t|Y5xEm
zwmv&lINU>s|3;pM#}6lyM&R+&PXiH{2B(8FjfY>s5yn9|QAO^kq9MUd_BzT&0%0SC
zx{1p+adPvLny;rer&7KYxDU_0NY4JsWf-thMpqLyC%_6gS)eXGZX=bny7sJ1>#CrE
z6#Q$}Zp+bNM_>HrFVTe|U%A&jshKU{SFWe_QJ(z(_>VfOq49MCQBN}CN6mO8c2f2x
z5vu^oGJwIA+iaaWa{S%d|E~dRQ=qcja)3!}+M&IGQ#ag8S476H9lI_ZpZhr~k(uj`
z{PlJb`^<fbX+*x6pU7$@_@;D_NF7srgvkZPWA&ydro`SIRqo-x&71dju5zC*_Z6QV
zHxBtDo{t|f`79;<i5LINNjU$;mm7RIQe5@rIv-vL=Oe$vumFdHPVWDEHe1Y|{da#d
zKdw;B@H{dk@RWQpeaPDRDAu5So*<G5&5Q^{gS=eS{Ix^qV!o1R${%@Hi>d(j48|Sg
z6$w0pcm%vb`7E#pilF|43~^i`pLzwF!vU~X&|f}l>k2D;Vx<)o`_}rx8Xq}*c7-ll
zE%pKHK-%<Kb!%4{zOI+X9pb;xPx(4Q3xD^pp6*4?Yd!jvMkdc3FylVFHxo%So|v)T
z+65yhpbvvx@Yalf^%IvLKl$-9454MgTB@vo_6KgsMKI$m9=GU`1$XZ!E{E6tI2ME9
zdfVwjH|e%(L09gRT!{dX<e@ZTYOXw+;{Mg2E@aX0T03*3*%#r+<q?kA#~f*QJlX{!
z+_qeEz>Z_r5^J;Uo(!Qdpom6A%Z{2Xn}?||3DE;&(6BIuYnw=vp(4cBCvdLJnynSv
zIT&x^y|OGidGjum*}+mV^f(I6#Af466g`f?&<Vr?Jn}zN<;2RGS}LWswu%S@N7hoP
zwIc$|!FJ#c73Lho@o>q83}c420^XdOOhV#xN>Z7y23lauU|@eC@d=Kpj&aFJ)a0C*
z3{Gx_%0nIPbyG$w{a&_!qeYxPRGW(xX4eQ^5$=N0Qg)ZCq?WG|+bBd-K=geFWdkj9
z+}NtbpfqRQMVCAPTj0+sK<<+u_Dy>5=Vk?$@d0@e@}d-VaWeAnLhB2doVs8pD_-dc
zx||NLGWfkt*BE;oxT{dy1c00T=lL#^^wa}FyKF*14q+d~k>zoau<!Bk!1dCa)l}(C
zA)FrDH+h=mJ^P~jmpCkzh8C65!8#;-F&@_X?iS@7g|~$%Yx}o?$T9Fl6fJhT!qJu)
zlN-ZUOU#!*p+#<4O<Zu!bXb^q(H(V;fOlZ=3L^aCtKU+VAC}G>Vi*Mouk-l^xfDFO
zNiU<}9-@(liEy6Kzq9f3{fBT?785v*6^X(0L2q`TvmI_zz?W|z?Bp1~A`;Xi<zqKV
z{-k~!J9dZ;siD7c!E14tY4D_9N56zV4P<BkpA0*TMc+<E>~CoR%7275yu-o>&wfM-
z)m$15k_BC^C&75g%UIl_!9>Ngo5({%IG1GDjlsUf^xl6B2T_^4;}{VYWPcVF+Z2Do
z_H~a<+L$_Ui4n=p_WnzcQ)YU6-F54f$IS*(6Ti|C%i!>3i1df29_CNy1v)-uQ0l4l
z^u9FA9x6wuJH}ccl2pj*hbBH?;KhYAdQ2E*j>434Qml_|oer>ezC$6<$h8rVJ5EcL
z&tA*y**paRru5HYGUxQaJW)3HXc&@Y7AsjI=BrsOz8cBeiarjg@B|g<I2wH|)k(lR
zQ?AV>cT;HHWKuVc(v6gl^ZH^lC=^Vr$A2i0_g9Vzirat4>yHH~l#E!f?@%xlnLtnt
z3WQvL6M#Qgqfo2=1PJgO6nWxJ!taD(Xwg<W?l&Vo7jMjX%>|~sP-DvGE9SMAvDnr5
z`AoUu7@hdSK=j}Z%opsOkjp%Hl44@HCF7w9W;C4^zE%{=F{3-gk(eEJ0L1H>>}bBq
z2VVVFxee6n)nWkLaX52ZK3+mK6hnj4#}sUa09rB>M$)DfZ1x<;S<Tz8+0WnK<LTMU
z->ccnTh*6SFL4(X@Kup1<6#|Y)|xojkhqk=+3dey9kV9Yih}Hcq-87V*1T|HfG%Lg
zCdCa+i;LlZP4opz3@kO}dV~Do=$xQdrwYzG8h6h`id2cJPgy8-oL3?ycnU0(MYW=;
zogXUN1gGbPK4fVMvG#oj6W3pON1i3e4+ZzB_MOz83@!xktKP2Ko>;MYS<kZWLk9E+
z-O7sFY#FSx$hRm9k)^1&cEO9QDOmaHLM&}qZTlA&`vQ~|SAU@F$LzDXp}c*neMhuM
z>S;T*d)1}3`oZ1ir9YT8JNT2JFZ8=oX1XmMZ7@mcgqK}4=?O+{>U7h*k>rVm{2_+n
ztKJ@^Jz1Y<f9j>^M0$BzC|E00c%vfGS3>ab@nmrLFau8)TVnooi+Pl_IrQu_7~b2~
zH;|vVASZt40%38m$q=8R$T8*l@yg={V^<s>H()GXkfV)2UxVhL*Bmcta(C5fb<hh%
zcWYf+nXrM0%?ZTGJm<CnPP*hNJVw<S`1ds{l9KY|T<0O`_=@Idavg_Rz4QK&|C4yp
zhI))dK1LzmBj*Tgf=F^@hre|Ju_Ya`8Ij(PrU#cG=KXWqEqE3_LkNO`j10loNjM39
z7=u0xw?ktNBU$|!stjfhe`UFt8P2w}el+r68vGy<-H${?OC}BD5fS4$?7N1y$HL*z
zJ9zI;U9|K%{O5U7qXz{7{)gC{1xi<`UB{k&w~D**e{*vbM#_ZpO)w!7%G^{e6(o#I
zn6M{4N-vE>1)@YHDr@4>oACLsDmF1s@haLHIK7TVzVTnR3HcFQ6-0M1AwObSSgLN>
zWI<qJp5llVLKMJ+{D_hgbRqGYiNtnI0?`^`pHd@!ntt=yzs=A8@~%+4P@D@d0-+5^
z@mXuv+|6N?bJ%9KZBaVEJgc}EUV*-?f55|%SbcyG!ACkgEULpJAkw4oK~FY|l$Ek#
zmV)${^tkkd^rZ9@d>Uq?XQXGv=gffj@$nB<O}<EM*WQidfPSWeh)+ovbKkfh?eMUv
zjr%fQ*(`1QT^)WDE<Q~_UojE$LeUVhm~w+jUcmO7Nii)X`BLFXF}D8)2xK4Pz6rlo
zDF9*+>wm&X5=op3szbXya6i=sVs)DOz;?r_1VqUR1Dw2Y_Fb>|``eiH0ZG)3lZy>O
zdT<>%=pfb;<{pw5dl#g8q{p&-jC*@n9~%RP*3=`Iy}x`AT}cF_x212`p8!P>R&MvC
z&@vp-hcdM7&(T!>*9Q<Bf^{2%LZH6~h#zAyyf~IwxbTye>bBioNyU0^k5^T}e@DGH
zqDhTb1^;#S68E1|gqvOL$o^Q1(fSL2P^iP|ZJ<Yl?Iqi*wQkto-O*NS1APu`MXpM%
z{hO|VSvUsT;dH1*fLq}Ke9ksS*vqyN+z&U4I}mxc1*5)kq={S9Em)uZo1(QqVgBNZ
z%BxW~_@e$fnFB9u9S(4cH4n1CO}QCEf!MH(g@Yl3&87?YJAO_daNv|0>>97}ZCSxa
zdjG$k)2V;GEk3(W*kkRyJZ;$gu3j_KcZWw~=_H0nK*o&kUtnGX*Uv5lJ&oZ1juic)
z3#>nG_EB2CAg9=@6(dG|o<KHM>ED<|mfQka5HJ2!HvKzre}w5~=<<9aZFGi4+sY@l
z8}}5NrP52k+*y{QU!`Y?zF0(xY&E}<w1>|nDx*BEddev<<)Z|(M|>v{XAq}~{*9M4
zv#MqF6{NitrN1LX&E7`T2chUYuzpBZcf&<3WSHFL^+3Kr>h=LF!M4aPA}b^vr-~6f
z@~Zc*LU|!^9oKG#aaYd+z61=Ml>!NrGALjVgvdHDPjefbk^qhPUI{k#bzy~>NVH2d
zISVABR@(M-w7i(Dg{DOABHvbn+IFRi%t`@)w-YSk90svsU4t_Vexau?l}<;?GGvq8
zNK-e;;aSV32`tryN!;ac;~`$kI+H4fy`~0$`Ku%j!i=+}6xl+a<Y{G{Df6V57R&dS
zi%H>WqZC0|BwTn-Afktc>X?LaXt@3DY@U~7oFsH-tx+=7lj`YIGAUap(X1*&Kgp`^
z0Hu=ZRiO9CzC7ExCFq(;mKZ9MN%(QP-^cjiN28*G!4cPA4GS2;BT>TDAO{*dld>*r
zUQk}?{DQ$&BXNkm>+S2(UJ_}o<g5CClZEZ0XB!bVXSl$Fz|BLp&35J6W=xs}DHeho
z=804rm~Oy>d!*T)V{LySTW)q+T-J#m>oi8W)N&|J8?1K3+C$Gg#RClc#HfeXi+J1d
zBGMk>EjG!HaRH4cVKHqSk?r=j1UYOU&San6%Z~^DK$}c{ph?zwd@k?b;nu|OSM$pG
zn<T4OD!S_6^~hdNY$tysS{K*Lav8^{8OF@alH}ANkOe_w1PC$AyxPb$F4hjRBf5%)
zfF=l2WIG|d5<4rU9VZbd5pcN>oXpD)OGU;bC8fX~sV6XjNP7p40X-6w+q%5!{@WAq
z&OQdkl~Xh^kT)zc2kkwCs@q~9pwktC;tm~$x~6tv)^1{%aKSZRwo{W%&8w+je_iln
zn-)CL6hSoc2wkA(ux(FW+#8Cygh9`goO>bw^mAaz4zsbCXCN`8eeqFF$DAUi*@?$%
zb8_UJ9*oX}v`wXj&jAP45Sb_iNoQo+J+_g4Cs<$$jPOi;Cnw8zgXQR%OW(d?CF~?z
z=3VB<BW1ulFdFqj9q{aJd{R?K-0ErkE%g`{gsIqI8va)X#7={b)G$m5F|`@YRa-%n
z#+`Rw<_Iytws$vT03h>(ClnFKQzGTZMU01>vu7E`Lz)|$LoU5$7-%DJBT<~Oc0o~r
zXL1F@nzP8Yt(rc3%_O#EV9PwAtZdkxRXT5FffZ0{AdR<9a$wIgO|kOGFjg|<N~jz}
zUssl0b|;tmQZA3Q^ty3T@fuI>Vfj{?+A-BG*D*Qbx#x+CegNOe@6@IJtX#4e8D(@B
zb7FKcGhv*di!a7gFO!m)VzQBkwgpCN-Z+!n{07UL`i(UC$bPv|=I4{z`JHeJ64fo&
zbMlID@Ea^9iM*S?gQb<$z||q(j9Q@nzW(c0>+Ub){@}Z09)`WDst54>oZR(ga?-fT
zFMaN8#pV%j2A)!2P2xdNq6b7M*cb7|EauXj6DN7%&Nh~phkRk+Lb|$JhI!H)t(eVT
z-pIT_$Ro1#Il9G**2D}=W&_m__*H#=SKavQe?kRMtK`tI#1RNVYi5D|$K9|L%!k!X
zw&FEJ_kTt+N7xQ9Ln<IUMVO$I|1*hUS==>iTbj(SiVsSS-qX|!*0f5Cu$zb4C{Hr7
zsISH<kSPhkRe9_1mRyj!Tiagd;<8TGdM%Y&4J*`nn)%9+9q(dpx$bf;kvORnm|Ry7
zQ(Z$QD{;S%e!zvcSz<ZPkCc2o<s(PDWB*QIJ|~{9KToI|3?G}?8p=qu2W!2Xfa}xz
zYE{g7EL+BA_pjo*{`G$}2JicJCOLW3g>Q&eilz8FwtQY`@Fp;7Lwj1@KHym*`>j15
zBbOTvOmfu}#5jx`NX^(X*6l!_K}fN`9HlNm*qDCyzept3{<q~@5<CHnqayxYRq-5W
zps=pW08g($4kBLkPVJi=%FAhA>`AIDtZ!(1xnl1R&!yVIK8_70mstcwIe|lTA6mSp
zSUq>c&b46kKO!MzHiSI1v%N-pIOK_+-gk`KDwlozr^nS|a#M`dD-@<56>inXY~Pr|
zjZ8P9@2iq@ho~!Z^=ZBMHsgKKdV&Jd4?A9SGwk75-8_#3?)CG)8Fb5|4{P2k;{(<-
zFg(tDl+AX4_^~QW7*erGJ1sN!0r{vd81yaJ6peC7@w5)>!Wi5%QV--(FRFy$3_OQ)
zd+ik{P(EmP4C7e^l;n2<jmbQoDM<2!AT|P_c+rZ9POoOgNR@#w#*hLH`^*;MXh}%T
z1Q5%kvboA-b>KnD4<eB$uUWfHu8clF@e{q(wKW#cmjI{KQxNVXnDzo&_07G5Z!>pW
zdu9vwP%W(rFuCj4yfwp2-6TbDXmAj9+diOTo#;*zhw+EZ19i;}(NkVAlConur=C&b
z4<~!2)C5XjTtjL@H~@CqqsLE<_sQQ}*5?ucBPKV>Qq@o<%Igr5W%x3)b4QwUs?$yt
z6D84BG^!}`qzd2-PA{meTjGc<j?Nv*9#%g*Kvj53-Yh~i3-=Y8=b1Wk*W7m3jO3EH
zr_aj$!NCG=Ccim<UYA22AF*g+X|08pCg%&mJZ#h?l~iwU;X!D04zts)VJe1IY(!!(
zQ{B*{qPNPy<O2*MvTz6UQAZ<K{|qG@=D#h_l$XeD;GPsH;o9)yODL@VDv3AqJ^?5P
zrYN7IxyW=<0vzEL-G;&nG5FcR<vHk{e`<3l#*<7*1C~L68BJ`h4R42{?hRDQc=%Xa
z$_-3mv`yoHC&XuHQYv>$+`FfC#l6`<8Fv}qCp2R=k#>}^={|u{;jT~`aOeIK2(-KT
zCWQ9ZtOwgD7@GuZewA1)_LgsyUdBb^{Af0sKckg=LVb8H5;-=kNYLmd&LDXZ?pWLp
zEZ5w5p`E=~vj_?(Bb%xs<rd1}jhiESMgj5`3_ZG9msBhMc!>K22)y~YX53TqvljCG
zUa5H}k{l5Rb^`ZF={*pechEFld=Nyj9n9H0R9p-p&$d_<Ex$HXNw}2A6){CFFTP3w
z<#a$UEJNvwP9s+lHwA+#W<~PJ)XJq$v<b{-=F4#qiDNhc6ToV?r5<fkNf$4Ee-0AY
z*3+e^klR0%o1sZQE-?lA$1{%u3NRuE$Ru*{atxUqjP!IKI2{E5ztO|jV3fZ(>6&{=
zRJo_hX*YO<`T4oQJ+OqrfRTPxX1FqC4TdW-O93;2W&%M2w%ZD}D#2|SDthg=V;23!
zE#LS%d3?5;H=A>a-yw^igCriX1#ZO|czESQyW#50CiZL>cED>J^;m4Ds~*kSCSm^z
zTPyHKv<cTCnR&-`5WSg85p$$yQ2x0g1BQ0GxnLP<Ugq*5;2e-?f6>g0{zetI^mk<K
z%k<Lw`<y7ce?Z43-5*tqZ+kjTnvKw^MwM#q0785Md~9Gsj@KyHB%%U?dyUYhoi+GK
zfJLLS1G820iicNbIW7sS@1_7e)Op((tB9;Z=jog<?<LkDyo@@=#LHg-Zmj}6tm-Ja
zURWyuZrDyH`^@yT46=#k37s^=0ZPDKQyxGNXj7v(a3g?jz|EVbPbE79R-K#e$`bQB
zrzV$d8r>kQPDMJa<j8t8B81?Q1D8|SX)qJcA*pDVh1ZG0rf`L&!nr5{4S0c#(7*~_
zPYlDHJ7EpUh-SOZ(!B{m5ch&2kjdd_jfReaDFcXwjf0D)5udM!n1qx}Cb=xx6qNJ~
zj7<M;e#1^K=9i~mP)MG91qv0}=Df4EizqW!xr-{CbHP=YTy{mJ8wOmnLzQ`Y-FDM0
z)n0q)ty(qe8kO8=r6w(!rS+dlhjyKYxnsDIMi^y`(N@`Mx^c!D?+0)6d*z)W)PqZh
zfP{jEfrXPQnWhM~fO0*u)rR8pkp1@9>y*=uIBJv4Qi5`y-A<ZHE1n95QY%&prbLbx
z5;?;(GtEE|D_?;^l_^q2<*HDns#L8SsbJE;r9(hMLBqhp!6P67kdRSO>(&zuy@?JR
z%xQ~bG|8cuGK%9L{^nn*_{|?Y0zgEvfJWHbz;tH2>z+C8d*tUjVdLQ9;S&%N5tERT
z$t0I0o8l4T^xN&xI?v#a#u`3fqmOH9tl+kFG`GdI4{LhnL%&0XOw}P@u0lunr(xso
z{lM=g&lm_$AQ1(+@YZx@>DX2?oP75T4arx@(51Jr=5AWjpSi%_o<dH=<h<5Ei~s%>
zO6vX-535pC_?t&CkY@}8D3FK%Sr8zAfh;JHhynouWFZ5+nF91Y2S`kTER5JN+q77g
zs?gs&gE_u9p-><h+EyQKtLA=p3KfE(l{_gT@x((3w=CRzEeS>!NW#&Dl4x|1M+~0K
z<k2%dnqV|dQ=yCoGN3(!KlIygNL3Gz&=@&cY~)@#fvi&$d$<bQa4ATFLt;TTSuLa@
aS5;jYcIxE|7p%74Wu8#4zFi^Ms|x@}S6XlY

literal 0
HcmV?d00001


From f34f78cbfb052ae2538c471b44c9a12314289502 Mon Sep 17 00:00:00 2001
From: AJ ONeal <coolaj86@gmail.com>
Date: Wed, 12 Sep 2018 06:08:02 +0000
Subject: [PATCH 11/31] simplify the sclient params

---
 lib/extensions/admin/index.html         | 2 +-
 lib/extensions/admin/sclient/index.html | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/lib/extensions/admin/index.html b/lib/extensions/admin/index.html
index 888d5d3..593b1f8 100644
--- a/lib/extensions/admin/index.html
+++ b/lib/extensions/admin/index.html
@@ -128,7 +128,7 @@ Just confirm your email address:
   <code class="quickstart-output">Forwarding ssh+https (openssl proxy) =&gt; localhost:22</code>
 
   <code class="quickstart-input">ssh -p 5050 jondoe.telebit.io</code>
-  <code class="quickstart-input">ssh -o ProxyCommand="sclient %h:443" jondoe.telebit.io</code>
+  <code class="quickstart-input">ssh -o ProxyCommand="<a href="sclient/">sclient</a> %h" jondoe.telebit.io</code>
 
 <strong>For Debugging with TCP</strong>
 
diff --git a/lib/extensions/admin/sclient/index.html b/lib/extensions/admin/sclient/index.html
index df3c924..130ea96 100644
--- a/lib/extensions/admin/sclient/index.html
+++ b/lib/extensions/admin/sclient/index.html
@@ -35,7 +35,7 @@
 
   <h2>Examples</h2>
   <h3>SSH</h3>
-  <pre><code>$ ssh -o ProxyCommand="sclient %h:443" jon.telebit.io</code></pre>
+  <pre><code>$ ssh -o ProxyCommand="sclient %h" jon.telebit.io</code></pre>
 
   <p>This is useful to be able to connect to SSH even from behind a corporate packet-inspection firewall.
   It can also be used to multiplex and relay multiple ssh connections through a single host.

From cde0525f63eca31f29766fb50d54fcd8d4553938 Mon Sep 17 00:00:00 2001
From: John Shaver <john@jshaver.net>
Date: Wed, 12 Sep 2018 09:30:50 -0700
Subject: [PATCH 12/31] Started on styling for first page.

---
 lib/extensions/admin/login/css/main.css |  57 ++++++++++++-
 lib/extensions/admin/login/index.html   | 109 ++++++++++++++++++++----
 2 files changed, 146 insertions(+), 20 deletions(-)

diff --git a/lib/extensions/admin/login/css/main.css b/lib/extensions/admin/login/css/main.css
index 0179c2f..22e5baf 100644
--- a/lib/extensions/admin/login/css/main.css
+++ b/lib/extensions/admin/login/css/main.css
@@ -9,5 +9,58 @@
 
 
 body {
-    font-family: SourceSansPro, sans-serif;
-}
\ No newline at end of file
+    font-family: Source Sans Pro, sans-serif;
+    font-size: 18px;
+    color: #1a1a1a;
+}
+
+svg.icon-computer {width: 4em;fill: #1a1a1a;}
+
+.container {
+    text-align: center;
+    width: 17.777777778em;
+    margin: auto;
+}
+
+.checkbox-array {
+    display: flex;
+    flex-direction: column;
+    padding: 1em 0;
+}
+
+.checkbox-array input[type=checkbox] {
+    opacity: 0;
+    position: absolute;
+}
+
+.checkbox-array input[type=checkbox] ~ .icon-checked-box {
+    display: none;
+}
+
+.checkbox-array input[type=checkbox] ~ .icon-unchecked-box {
+    display: initial;
+}
+
+.checkbox-array input[type=checkbox]:checked ~ .icon-checked-box {
+    display: initial;
+}
+
+.checkbox-array input[type=checkbox]:checked ~ .icon-unchecked-box {
+    display: none;
+}
+
+.checkbox-array input[type=checkbox]:focus ~ .icon-checked-box, .checkbox-array input[type=checkbox]:focus ~ .icon-unchecked-box {
+    background: #DDDDDD;
+}
+.checkbox-array .icon-checked-box, .checkbox-array .icon-unchecked-box {
+    width: 1.333333333em;
+    fill: #1a1a1a;
+    margin-right: 0.666666667em;
+}
+
+.checkbox-array label {
+    display: flex;
+    height: 1.333333333em;
+    font-size: 0.833333333em;
+    margin: 0.4em 0;
+}
diff --git a/lib/extensions/admin/login/index.html b/lib/extensions/admin/login/index.html
index 94dd721..988cf48 100644
--- a/lib/extensions/admin/login/index.html
+++ b/lib/extensions/admin/login/index.html
@@ -2,9 +2,61 @@
 <html>
 <head>
   <title>Telebit - Pair Device</title>
+  <link href="./css/main.css" rel="stylesheet">
+  <style>
+    @font-face {
+      font-family: 'Source Sans Pro';
+      font-style: normal;
+      font-display: block;
+      font-weight: 400;
+      src: local('Source Sans Pro Regular'), local('SourceSansPro-Regular'), url(/static-site-assets/fonts/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2) format('woff2');
+      unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+2000-206F, U+2074, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;
+    }
+    @font-face {
+      font-family: 'Source Sans Pro';
+      font-style: normal;
+      font-weight: 700;
+      font-display: block;
+      src: local('Source Sans Pro Bold'), local('SourceSansPro-Bold'), url(/static-site-assets/fonts/6xKydSBYKcSV-LCoeQqfX1RYOo3ig4vwlxdu.woff2) format('woff2');
+      unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+2000-206F, U+2074, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;
+    }
+    @font-face {
+      font-family: 'Source Code Pro';
+      font-style: normal;
+      font-weight: 400;
+      src: local('Source Code Pro'), local('SourceCodePro-Regular'), url(/static-site-assets/fonts/HI_SiYsKILxRpg3hIP6sJ7fM7PqlPevW.woff2) format('woff2');
+      unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+2000-206F, U+2074, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;
+    }
+  </style>
+
 </head>
 <body>
   <script>document.body.hidden = true;</script>
+  <!-- let's define our SVG that we will reuse -->
+  <svg xmlns="http://www.w3.org/2000/svg" width="0" height="0" viewBox="0 0 24 24">
+    <defs>
+      <g id="svg-check">
+        <path fill="none" d="M0 0h24v24H0z"/>
+        <path d="M9 16.2L4.8 12l-1.4 1.4L9 19 21 7l-1.4-1.4L9 16.2z"/>
+      </g>
+      <g id="svg-checked">
+        <path d="M0 0h24v24H0z" fill="none"/>
+        <path d="M19 3H5c-1.11 0-2 .9-2 2v14c0 1.1.89 2 2 2h14c1.11 0 2-.9 2-2V5c0-1.1-.89-2-2-2zm-9 14l-5-5 1.41-1.41L10 14.17l7.59-7.59L19 8l-9 9z"/>
+      </g>
+      <g id="svg-unchecked">
+        <path d="M19 5v14H5V5h14m0-2H5c-1.1 0-2 .9-2 2v14c0 1.1.9 2 2 2h14c1.1 0 2-.9 2-2V5c0-1.1-.9-2-2-2z"/>
+        <path d="M0 0h24v24H0z" fill="none"/>
+      </g>
+      <g id="svg-download">
+        <path d="M19 9h-4V3H9v6H5l7 7 7-7zM5 18v2h14v-2H5z"/>
+        <path d="M0 0h24v24H0z" fill="none"/>
+      </g>
+      <g id="svg-computer">
+        <path d="M0 0h24v24H0z" fill="none"/>
+        <path d="M20 18c1.1 0 1.99-.9 1.99-2L22 6c0-1.1-.9-2-2-2H4c-1.1 0-2 .9-2 2v10c0 1.1.9 2 2 2H0v2h24v-2h-4zM4 6h16v10H4V6z"/>
+      </g>
+    </defs>
+  </svg>
 
   <div class="js-error" hidden>
     <h1>Invalid Pairing Link</h1>
@@ -12,30 +64,51 @@
       <br>Links are only valid for a limited time, so you gotta act fast.
     </div>
   </div>
-
-  <div class="js-magic" hidden><form class="js-submit">
-    <h1>Telebit</h1>
+  <div class="container js-magic" hidden><form class="js-submit">
+    <h1 class="logo">Telebit</h1>
+    <svg class="icon-computer" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24">
+      <use xlink:href="#svg-computer"></use>
+    </svg>
     <h2>Pair <span class="js-hostname">Device</span></h1>
 
-    <p>Enter your device pairing code:
-      <input type="text" name="pair-code" placeholder="ex: 0000">
-    </p>
+    <div>
+      <label>Enter your device pairing code:
+        <input type="text" name="pair-code" placeholder="ex: 0000">
+      </label>
+    </div>
 
-    <ul>
-      <li><label><input name="telebit-agree" type="checkbox" required> Agree to Telebit Terms of Service</label>
-      </li>
-      <li><label><input name="letsencrypt-agree" type="checkbox" required> Agree to Let's Encrypt Terms of Service</label>
-      </li>
-    </ul>
-
-    <p>
-    <button type="submit">Claim Device</button>
-    </p>
+    <div class="checkbox-array">
+      <label>
+        <input name="telebit-agree" type="checkbox" required>
+        <svg class="icon-checked-box" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24">
+          <use xlink:href="#svg-checked"></use>
+        </svg>
+        <svg class="icon-unchecked-box"  xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24">
+          <use xlink:href="#svg-unchecked"></use>
+        </svg>
+        Agree to &nbsp<a target="_blank" href="/legal/">Telebit&trade; Terms of Service</a>?
+      </label>
+      <label>
+        <input name="letsencrypt-agree" type="checkbox" required>
+        <svg class="icon-checked-box" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24">
+          <use xlink:href="#svg-checked"></use>
+        </svg>
+        <svg class="icon-unchecked-box" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24">
+          <use xlink:href="#svg-unchecked"></use>
+        </svg>
+        Agree to Let's Encrypt&trade; Terms of Service
+      </label>
+    </div>
+    <div>
+      <button type="submit">Claim Device</button>
+    </div>
   </form></div>
-
   <div class="js-authz" hidden>
 
-    <h1>Telebit</h1>
+    <h1 class="logo">Telebit</h1>
+    <svg class="icon-computer" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24">
+      <use xlink:href="#svg-computer"></use>
+    </svg>
 
     <ul>
       <li><label><input type="checkbox" checked disabled> Authorized</label></li>

From e77468106d5b347ae37232419cc6bf27dcdafc13 Mon Sep 17 00:00:00 2001
From: John Shaver <john@jshaver.net>
Date: Wed, 12 Sep 2018 21:32:39 -0700
Subject: [PATCH 13/31] Added button and input styling

---
 lib/extensions/admin/login/css/main.css | 32 +++++++++++++++++++++++++
 lib/extensions/admin/login/index.html   | 12 ++++------
 2 files changed, 36 insertions(+), 8 deletions(-)

diff --git a/lib/extensions/admin/login/css/main.css b/lib/extensions/admin/login/css/main.css
index 22e5baf..69414f2 100644
--- a/lib/extensions/admin/login/css/main.css
+++ b/lib/extensions/admin/login/css/main.css
@@ -64,3 +64,35 @@ svg.icon-computer {width: 4em;fill: #1a1a1a;}
     font-size: 0.833333333em;
     margin: 0.4em 0;
 }
+
+input[type=text] {
+    font-size: 1em;
+    padding: 0.444444444em 0.888889em;
+    width: 100%;
+    border: solid 1px #d9d9d9;
+    border-radius: 2px;
+    box-sizing: border-box;
+    margin: 0.888888889em 0;
+}
+
+button {
+    width: 100%;
+    background-color: #1a1a1a;
+    border: none;
+    font-size: 1em;
+    color: white;
+    padding: 0.44444em;
+    margin: 1em 0;
+}
+
+button[disabled=true] {
+    background-color: #d9d9d9;
+}
+
+h1.logo {
+    font-size: 1.555555556em;
+}
+
+h2 {
+    font-size: 1.777777778em;
+}
\ No newline at end of file
diff --git a/lib/extensions/admin/login/index.html b/lib/extensions/admin/login/index.html
index 988cf48..1b1485a 100644
--- a/lib/extensions/admin/login/index.html
+++ b/lib/extensions/admin/login/index.html
@@ -70,13 +70,9 @@
       <use xlink:href="#svg-computer"></use>
     </svg>
     <h2>Pair <span class="js-hostname">Device</span></h1>
-
-    <div>
-      <label>Enter your device pairing code:
-        <input type="text" name="pair-code" placeholder="ex: 0000">
-      </label>
-    </div>
-
+    <label>Enter your device pairing code:
+      <input type="text" name="pair-code" placeholder="ex: 0000">
+    </label>
     <div class="checkbox-array">
       <label>
         <input name="telebit-agree" type="checkbox" required>
@@ -100,7 +96,7 @@
       </label>
     </div>
     <div>
-      <button type="submit">Claim Device</button>
+      <button type="submit" disabled>Claim Device</button>
     </div>
   </form></div>
   <div class="js-authz" hidden>

From 27ae2aeb488de6aeff1654c28399e6315b231570 Mon Sep 17 00:00:00 2001
From: John Shaver <john@jshaver.net>
Date: Thu, 13 Sep 2018 00:39:33 -0700
Subject: [PATCH 14/31] Fixed disabled button

---
 lib/extensions/admin/login/css/main.css |  2 +-
 lib/extensions/admin/login/js/app.js    | 14 ++++++++++++++
 2 files changed, 15 insertions(+), 1 deletion(-)

diff --git a/lib/extensions/admin/login/css/main.css b/lib/extensions/admin/login/css/main.css
index 69414f2..cf705ec 100644
--- a/lib/extensions/admin/login/css/main.css
+++ b/lib/extensions/admin/login/css/main.css
@@ -85,7 +85,7 @@ button {
     margin: 1em 0;
 }
 
-button[disabled=true] {
+button:disabled {
     background-color: #d9d9d9;
 }
 
diff --git a/lib/extensions/admin/login/js/app.js b/lib/extensions/admin/login/js/app.js
index fdd4537..9751129 100644
--- a/lib/extensions/admin/login/js/app.js
+++ b/lib/extensions/admin/login/js/app.js
@@ -129,6 +129,20 @@ function init() {
     console.log(pair);
     submitCode(pair);
   });
+
+  var formElements = document.querySelector('.js-submit').elements;
+  for(var i = 0; i < formElements.length; ++i) {
+    var tosCheck = document.querySelector('[name=telebit-agree]');
+    var leCheck = document.querySelector('[name=letsencrypt-agree]');
+    var pairCodeInput = document.querySelector('[name=pair-code]');
+    formElements[i].addEventListener('input', function(ev) {
+      if(tosCheck.checked && leCheck.checked && pairCodeInput.value.length) {
+        document.querySelector('.js-submit button').disabled = false;
+      } else {
+        document.querySelector('.js-submit button').disabled = true;
+      }
+    });
+  };
 }
 
 window.fetch('https://' + location.hostname + '/_apis/telebit.cloud/index.json', {

From 137bf18c4eb0c41979500534373376d742165dbd Mon Sep 17 00:00:00 2001
From: John Shaver <john@jshaver.net>
Date: Thu, 13 Sep 2018 16:44:38 -0700
Subject: [PATCH 15/31] All but the final page

---
 lib/extensions/admin/login/css/animations.css |  18 +++
 lib/extensions/admin/login/css/main.css       | 110 +++++++++++++++++-
 lib/extensions/admin/login/index.html         | 101 +++++++++++-----
 lib/extensions/admin/login/js/app.js          |  20 +++-
 4 files changed, 213 insertions(+), 36 deletions(-)
 create mode 100644 lib/extensions/admin/login/css/animations.css

diff --git a/lib/extensions/admin/login/css/animations.css b/lib/extensions/admin/login/css/animations.css
new file mode 100644
index 0000000..ec3b1ac
--- /dev/null
+++ b/lib/extensions/admin/login/css/animations.css
@@ -0,0 +1,18 @@
+
+.spinner .spinner-ball {
+  animation: pulsing 2s ease infinite;
+}
+
+.spinner .spinner-ball:nth-child(2) {
+  animation-delay: 0.2s;
+}
+.spinner .spinner-ball:nth-child(3) {
+  animation-delay: 0.4s;
+}
+@keyframes pulsing {
+  0% {transform: scale(1);}
+  35% {transform: scale(1);}
+  60% {transform: scale(1.3);}
+  75% {transform: scale(1.3);}
+  100% {transform: scale(1);}
+}
diff --git a/lib/extensions/admin/login/css/main.css b/lib/extensions/admin/login/css/main.css
index cf705ec..09dad1b 100644
--- a/lib/extensions/admin/login/css/main.css
+++ b/lib/extensions/admin/login/css/main.css
@@ -12,9 +12,12 @@ body {
     font-family: Source Sans Pro, sans-serif;
     font-size: 18px;
     color: #1a1a1a;
+    letter-spacing: -0.022222222em;
+    line-height: 1.33;
+    margin: 0;
 }
 
-svg.icon-computer {width: 4em;fill: #1a1a1a;}
+svg.icon-computer {width: 4em;height: 4em;}
 
 .container {
     text-align: center;
@@ -53,8 +56,6 @@ svg.icon-computer {width: 4em;fill: #1a1a1a;}
     background: #DDDDDD;
 }
 .checkbox-array .icon-checked-box, .checkbox-array .icon-unchecked-box {
-    width: 1.333333333em;
-    fill: #1a1a1a;
     margin-right: 0.666666667em;
 }
 
@@ -91,8 +92,111 @@ button:disabled {
 
 h1.logo {
     font-size: 1.555555556em;
+    margin-bottom: 1.777777778em;
 }
 
 h2 {
     font-size: 1.777777778em;
+    margin: 0;
+}
+
+svg {
+    width: 1.333333333em;
+    height: 1.333333333em;
+    fill: #1a1a1a;
+}
+
+svg.authorized-check {
+    fill: #63f794;
+    margin-right: 0.666666667em;
+}
+
+.progress .row {
+    display:  flex;
+    justify-content: left;
+    margin: 0.6666em 0;
+}
+
+.spinner-ball {
+    width: 4px;
+    height: 4px;
+    border-radius: 5px;
+    background: #1a1a1a;
+    margin: 2px;
+}
+
+span.spinner {
+    display: flex;
+    align-items: center;
+    margin-right: 0.666666667em;
+}
+
+.important-text {
+    font-weight: bold;
+}
+
+.progress {
+    padding: 0.666666667em 0;
+    display: inline-block;
+}
+
+.debugging-info-container {
+    text-align: center;
+    position: absolute;
+    bottom: 0;
+    width: 100%;
+    background: white;
+    /* overflow: hidden; */
+}
+
+.debugging-info-container pre {
+    word-break: break-all;
+    white-space: pre-wrap;
+}
+
+.debugging-info {
+    max-width: 65em;
+    margin: 0 auto;
+}
+
+span.debugging.button {
+    display: inline-flex;
+}
+
+span.js-debugging-button.debugging-button {
+    display: inline-flex;
+}
+
+.debugging-button {
+    display: inline-flex;
+    padding: 0.5em;
+    position: absolute;
+    bottom: 100%;
+    transform: translateX(-50%);
+}
+
+.debugging-info-container.visible .debugging-button svg {
+    transform: rotate(180deg);
+}
+
+.debugging-button svg {transition: transform 0.3s;}
+
+.debug-drawer {
+    /* position: relative; */
+    transform: translateY(100%);
+    transition: transform 0.3s;
+    padding: 0.1em 0;
+}
+
+p {
+    margin: 0;
+}
+
+.debugging-info-container.visible .debug-drawer {
+    transform: translateY(0);
+}
+
+.debugging-info-container {
+    padding-top: 3em;
+    overflow: hidden;
 }
\ No newline at end of file
diff --git a/lib/extensions/admin/login/index.html b/lib/extensions/admin/login/index.html
index 1b1485a..22a3af7 100644
--- a/lib/extensions/admin/login/index.html
+++ b/lib/extensions/admin/login/index.html
@@ -3,6 +3,7 @@
 <head>
   <title>Telebit - Pair Device</title>
   <link href="./css/main.css" rel="stylesheet">
+  <link href="./css/animations.css" rel="stylesheet">
   <style>
     @font-face {
       font-family: 'Source Sans Pro';
@@ -32,8 +33,8 @@
 </head>
 <body>
   <script>document.body.hidden = true;</script>
-  <!-- let's define our SVG that we will reuse -->
-  <svg xmlns="http://www.w3.org/2000/svg" width="0" height="0" viewBox="0 0 24 24">
+  <!-- let's define our SVG that we will use later -->
+  <svg width="0" height="0" viewBox="0 0 24 24">
     <defs>
       <g id="svg-check">
         <path fill="none" d="M0 0h24v24H0z"/>
@@ -55,6 +56,14 @@
         <path d="M0 0h24v24H0z" fill="none"/>
         <path d="M20 18c1.1 0 1.99-.9 1.99-2L22 6c0-1.1-.9-2-2-2H4c-1.1 0-2 .9-2 2v10c0 1.1.9 2 2 2H0v2h24v-2h-4zM4 6h16v10H4V6z"/>
       </g>
+      <g id="svg-circle-check">
+        <path d="M0 0h24v24H0z" fill="none"/>
+        <path d="M12 2C6.48 2 2 6.48 2 12s4.48 10 10 10 10-4.48 10-10S17.52 2 12 2zm-2 15l-5-5 1.41-1.41L10 14.17l7.59-7.59L19 8l-9 9z"/>
+      </g>
+      <g id="svg-arrow-down">
+        <path d="M7.41,8.59L12,13.17l4.59-4.58L18,10l-6,6l-6-6L7.41,8.59z"/>
+        <path fill="none" d="M0,0h24v24H0V0z"/>
+      </g>
     </defs>
   </svg>
 
@@ -66,30 +75,30 @@
   </div>
   <div class="container js-magic" hidden><form class="js-submit">
     <h1 class="logo">Telebit</h1>
-    <svg class="icon-computer" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24">
+    <svg class="icon-computer" viewBox="0 0 24 24">
       <use xlink:href="#svg-computer"></use>
     </svg>
     <h2>Pair <span class="js-hostname">Device</span></h1>
     <label>Enter your device pairing code:
-      <input type="text" name="pair-code" placeholder="ex: 0000">
+      <input type="text" name="pair-code" placeholder="ex: 0000" autofocus>
     </label>
     <div class="checkbox-array">
       <label>
         <input name="telebit-agree" type="checkbox" required>
-        <svg class="icon-checked-box" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24">
+        <svg class="icon-checked-box" viewBox="0 0 24 24">
           <use xlink:href="#svg-checked"></use>
         </svg>
-        <svg class="icon-unchecked-box"  xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24">
+        <svg class="icon-unchecked-box"  viewBox="0 0 24 24">
           <use xlink:href="#svg-unchecked"></use>
         </svg>
         Agree to &nbsp<a target="_blank" href="/legal/">Telebit&trade; Terms of Service</a>?
       </label>
       <label>
         <input name="letsencrypt-agree" type="checkbox" required>
-        <svg class="icon-checked-box" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24">
+        <svg class="icon-checked-box" viewBox="0 0 24 24">
           <use xlink:href="#svg-checked"></use>
         </svg>
-        <svg class="icon-unchecked-box" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24">
+        <svg class="icon-unchecked-box" viewBox="0 0 24 24">
           <use xlink:href="#svg-unchecked"></use>
         </svg>
         Agree to Let's Encrypt&trade; Terms of Service
@@ -99,33 +108,61 @@
       <button type="submit" disabled>Claim Device</button>
     </div>
   </form></div>
-  <div class="js-authz" hidden>
-
+  <div class="container js-authz" hidden>
     <h1 class="logo">Telebit</h1>
-    <svg class="icon-computer" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24">
+    <svg class="icon-computer" viewBox="0 0 24 24">
       <use xlink:href="#svg-computer"></use>
     </svg>
-
-    <ul>
-      <li><label><input type="checkbox" checked disabled> Authorized</label></li>
-      <li><label><input type="checkbox" checked disabled>
-        Generated <span class="js-domainname">xxx-xxx-xxx.example.com</span> just for you</label></li>
-      <li><label><input type="checkbox" disabled> Waiting for your device to pair</label></li>
-      <li><label><input type="checkbox" disabled>
-        Securing your new domain</label></li>
-    </ul>
-
-    <p><strong>Check the command line on your device to finish pairing.</strong></p>
-
-    <h2>Debug Info</h2>
-    <p><a class="js-new-href">{{js-new-href}}</a></p>
-    <p class="js-serviceport">xxxxx</p>
-
-    <p><small>Authorization Token:
-      <pre><code class="js-token">{{js-token}}</code></pre></small></p>
-
+    <h2>Pair <span class="js-hostname">Device</span></h1>
+    <div>
+      <div class="progress">
+        <div class="row">
+          <svg class="authorized-check" viewBox="0 0 24 24">
+            <use xlink:href="#svg-circle-check"></use>
+          </svg>
+          Authorized
+        </div>
+        <div class="row">
+          <span class="spinner">
+            <div class="spinner-ball ball-1"></div>
+            <div class="spinner-ball ball-1"></div>
+            <div class="spinner-ball ball-1"></div>
+          </span>
+          Waiting for device to pair
+        </div>
+      </div>
+    </div>
+    <div class="important-text">
+      Check the command line on your device to finish pairing.
+    </div>
+  </div>
+  <div class="js-debug-container debugging-info-container" hidden>
+    <div class="debug-drawer">
+      <span class="js-debug-button debugging-button">
+        Debugging info <svg class="debugging-arrow" viewBox="0 0 24 24">
+          <use xlink:href="#svg-arrow-down"></use>
+        </svg>
+      </span>
+      <div class="js-debug-info debugging-info">
+        <p><a class="js-new-href">{{js-new-href}}</a></p>
+        <p class="js-serviceport">xxxxx</p>
+        <p><small>Authorization Token:
+          <pre><code class="js-token">{{js-token}}</code></pre></small></p>
+      </div>
+    </div>
+  </div>
+  <div class="container js-finish" hidden>
+    <h1 class="logo">Telebit</h1>
+    <svg class="icon-computer" viewBox="0 0 24 24">
+      <use xlink:href="#svg-computer"></use>
+    </svg>
+    <h2>Success!</h1>
+    <div>You've successfully paired 
+      <span class="js-hostname">your devied</span>
+      with Telebit.
+    </div>
+    <button class="js-finish-button">Finish</button>
+    <script src="js/app.js"></script>
   </div>
-
-  <script src="js/app.js"></script>
 </body>
 </html>
diff --git a/lib/extensions/admin/login/js/app.js b/lib/extensions/admin/login/js/app.js
index 9751129..150ceeb 100644
--- a/lib/extensions/admin/login/js/app.js
+++ b/lib/extensions/admin/login/js/app.js
@@ -18,6 +18,7 @@ function checkStatus() {
         return;
       }
       if ('complete' === data.status) {
+        successScreen();
         setTimeout(function () {
           //window.document.body.innerHTML += ('<img src="https://' + domainname + '/_apis/telebit.cloud/clear.gif">');
           // TODO once this is loaded (even error) Let's Encrypt is done,
@@ -33,6 +34,15 @@ function checkStatus() {
   });
 }
 
+function successScreen() {
+  document.querySelector('.js-authz').hidden = true;
+  document.querySelector('.js-finish-button').addEventListener('click', function(e) {
+    window.location.href='https://' + domainname;
+  });
+  document.querySelector('.js-finish').hidden = false;
+
+}
+
 function submitCode(pair) {
   // TODO use Location or Link
   document.querySelector('.js-magic').hidden = true;
@@ -63,6 +73,7 @@ function submitCode(pair) {
       setTimeout(checkStatus, 0);
 
       document.querySelector('.js-authz').hidden = false;
+      document.querySelector('.js-debug-container').hidden = false;
 
       /*
       document.querySelectorAll('.js-token-data').forEach(function ($el) {
@@ -113,7 +124,9 @@ function init() {
         return;
       }
       document.querySelector('.js-magic').hidden = false;
-      document.querySelector('.js-hostname').innerText = data.hostname || 'Device';
+      document.querySelectorAll('.js-hostname').forEach(function(ele) {
+        ele.innerText = data.hostname || 'Device';
+      });
       //document.querySelector('.js-token-data').innerText = JSON.stringify(data, null, 2);
     });
   });
@@ -143,6 +156,11 @@ function init() {
       }
     });
   };
+  document.querySelector('.js-debug-button').addEventListener("click", function(e) {
+    //var info = document.querySelector('.js-debug-info');
+    //info.hidden = !info.hidden;
+    document.querySelector('.js-debug-container').classList.toggle("visible");
+  })
 }
 
 window.fetch('https://' + location.hostname + '/_apis/telebit.cloud/index.json', {

From 408a049da29b7d84864fd40938a6466c2e66c6af Mon Sep 17 00:00:00 2001
From: John Shaver <john@jshaver.net>
Date: Thu, 13 Sep 2018 16:48:49 -0700
Subject: [PATCH 16/31] Removed uneccessary extra css file

---
 lib/extensions/admin/login/css/animations.css |  18 ---
 lib/extensions/admin/login/css/main.css       | 105 ++++++++++--------
 lib/extensions/admin/login/index.html         |   1 -
 3 files changed, 58 insertions(+), 66 deletions(-)
 delete mode 100644 lib/extensions/admin/login/css/animations.css

diff --git a/lib/extensions/admin/login/css/animations.css b/lib/extensions/admin/login/css/animations.css
deleted file mode 100644
index ec3b1ac..0000000
--- a/lib/extensions/admin/login/css/animations.css
+++ /dev/null
@@ -1,18 +0,0 @@
-
-.spinner .spinner-ball {
-  animation: pulsing 2s ease infinite;
-}
-
-.spinner .spinner-ball:nth-child(2) {
-  animation-delay: 0.2s;
-}
-.spinner .spinner-ball:nth-child(3) {
-  animation-delay: 0.4s;
-}
-@keyframes pulsing {
-  0% {transform: scale(1);}
-  35% {transform: scale(1);}
-  60% {transform: scale(1.3);}
-  75% {transform: scale(1.3);}
-  100% {transform: scale(1);}
-}
diff --git a/lib/extensions/admin/login/css/main.css b/lib/extensions/admin/login/css/main.css
index 09dad1b..5db94a5 100644
--- a/lib/extensions/admin/login/css/main.css
+++ b/lib/extensions/admin/login/css/main.css
@@ -1,13 +1,3 @@
-/*
- * main.css
- * Copyright (C) 2018 jshaver
- *
- * Distributed under terms of the MIT license.
- */
-
-
-
-
 body {
     font-family: Source Sans Pro, sans-serif;
     font-size: 18px;
@@ -17,8 +7,47 @@ body {
     margin: 0;
 }
 
+p {
+    margin: 0;
+}
+
+h2 {
+    font-size: 1.777777778em;
+    margin: 0;
+}
+
+svg {
+    width: 1.333333333em;
+    height: 1.333333333em;
+    fill: #1a1a1a;
+}
+
 svg.icon-computer {width: 4em;height: 4em;}
 
+button {
+    width: 100%;
+    background-color: #1a1a1a;
+    border: none;
+    font-size: 1em;
+    color: white;
+    padding: 0.44444em;
+    margin: 1em 0;
+}
+
+button:disabled {
+    background-color: #d9d9d9;
+}
+
+input[type=text] {
+    font-size: 1em;
+    padding: 0.444444444em 0.888889em;
+    width: 100%;
+    border: solid 1px #d9d9d9;
+    border-radius: 2px;
+    box-sizing: border-box;
+    margin: 0.888888889em 0;
+}
+
 .container {
     text-align: center;
     width: 17.777777778em;
@@ -66,45 +95,12 @@ svg.icon-computer {width: 4em;height: 4em;}
     margin: 0.4em 0;
 }
 
-input[type=text] {
-    font-size: 1em;
-    padding: 0.444444444em 0.888889em;
-    width: 100%;
-    border: solid 1px #d9d9d9;
-    border-radius: 2px;
-    box-sizing: border-box;
-    margin: 0.888888889em 0;
-}
-
-button {
-    width: 100%;
-    background-color: #1a1a1a;
-    border: none;
-    font-size: 1em;
-    color: white;
-    padding: 0.44444em;
-    margin: 1em 0;
-}
-
-button:disabled {
-    background-color: #d9d9d9;
-}
 
 h1.logo {
     font-size: 1.555555556em;
     margin-bottom: 1.777777778em;
 }
 
-h2 {
-    font-size: 1.777777778em;
-    margin: 0;
-}
-
-svg {
-    width: 1.333333333em;
-    height: 1.333333333em;
-    fill: #1a1a1a;
-}
 
 svg.authorized-check {
     fill: #63f794;
@@ -188,9 +184,6 @@ span.js-debugging-button.debugging-button {
     padding: 0.1em 0;
 }
 
-p {
-    margin: 0;
-}
 
 .debugging-info-container.visible .debug-drawer {
     transform: translateY(0);
@@ -199,4 +192,22 @@ p {
 .debugging-info-container {
     padding-top: 3em;
     overflow: hidden;
-}
\ No newline at end of file
+}
+
+.spinner .spinner-ball {
+  animation: pulsing 2s ease infinite;
+}
+
+.spinner .spinner-ball:nth-child(2) {
+  animation-delay: 0.2s;
+}
+.spinner .spinner-ball:nth-child(3) {
+  animation-delay: 0.4s;
+}
+@keyframes pulsing {
+  0% {transform: scale(1);}
+  35% {transform: scale(1);}
+  60% {transform: scale(1.3);}
+  75% {transform: scale(1.3);}
+  100% {transform: scale(1);}
+}
diff --git a/lib/extensions/admin/login/index.html b/lib/extensions/admin/login/index.html
index 22a3af7..1b114da 100644
--- a/lib/extensions/admin/login/index.html
+++ b/lib/extensions/admin/login/index.html
@@ -3,7 +3,6 @@
 <head>
   <title>Telebit - Pair Device</title>
   <link href="./css/main.css" rel="stylesheet">
-  <link href="./css/animations.css" rel="stylesheet">
   <style>
     @font-face {
       font-family: 'Source Sans Pro';

From bba44656f708721ccd2fe6354b3aa4139fad6737 Mon Sep 17 00:00:00 2001
From: John Shaver <john@jshaver.net>
Date: Thu, 13 Sep 2018 17:11:57 -0700
Subject: [PATCH 17/31] more style changes

---
 lib/extensions/admin/login/css/main.css | 12 ++++++++++--
 1 file changed, 10 insertions(+), 2 deletions(-)

diff --git a/lib/extensions/admin/login/css/main.css b/lib/extensions/admin/login/css/main.css
index 5db94a5..fcdfd13 100644
--- a/lib/extensions/admin/login/css/main.css
+++ b/lib/extensions/admin/login/css/main.css
@@ -141,7 +141,6 @@ span.spinner {
     position: absolute;
     bottom: 0;
     width: 100%;
-    background: white;
     /* overflow: hidden; */
 }
 
@@ -165,10 +164,14 @@ span.js-debugging-button.debugging-button {
 
 .debugging-button {
     display: inline-flex;
-    padding: 0.5em;
+    padding: 0.3em;
     position: absolute;
     bottom: 100%;
     transform: translateX(-50%);
+    background:  white;
+    border: solid #eee 1px;
+    border-radius: 5px 5px 0 0;
+    border-bottom: none;
 }
 
 .debugging-info-container.visible .debugging-button svg {
@@ -182,6 +185,10 @@ span.js-debugging-button.debugging-button {
     transform: translateY(100%);
     transition: transform 0.3s;
     padding: 0.1em 0;
+    background: white;
+    pointer-events: initial;
+    border-top: solid #eee 1px;
+    padding-top: 1em;
 }
 
 
@@ -192,6 +199,7 @@ span.js-debugging-button.debugging-button {
 .debugging-info-container {
     padding-top: 3em;
     overflow: hidden;
+    pointer-events: none;
 }
 
 .spinner .spinner-ball {

From 40878066d141f7d43fd4bbeffcc8000305fa3565 Mon Sep 17 00:00:00 2001
From: John Shaver <john@jshaver.net>
Date: Thu, 13 Sep 2018 17:14:25 -0700
Subject: [PATCH 18/31] fixed scrolling of debug tray button

---
 lib/extensions/admin/login/css/main.css | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/lib/extensions/admin/login/css/main.css b/lib/extensions/admin/login/css/main.css
index fcdfd13..7bdd00d 100644
--- a/lib/extensions/admin/login/css/main.css
+++ b/lib/extensions/admin/login/css/main.css
@@ -5,6 +5,8 @@ body {
     letter-spacing: -0.022222222em;
     line-height: 1.33;
     margin: 0;
+    padding-bottom: 4em;
+    box-sizing: border-box;
 }
 
 p {
@@ -138,7 +140,7 @@ span.spinner {
 
 .debugging-info-container {
     text-align: center;
-    position: absolute;
+    position: fixed;
     bottom: 0;
     width: 100%;
     /* overflow: hidden; */

From 07468b41b2c3339d437b1d85e009f91a6b5b19ab Mon Sep 17 00:00:00 2001
From: John Shaver <john@jshaver.net>
Date: Thu, 13 Sep 2018 22:06:04 -0700
Subject: [PATCH 19/31] More styling tweaks and word changes.

---
 lib/extensions/admin/login/css/main.css | 11 ++++++++---
 lib/extensions/admin/login/index.html   | 13 ++++++-------
 lib/extensions/admin/login/js/app.js    |  3 +++
 3 files changed, 17 insertions(+), 10 deletions(-)

diff --git a/lib/extensions/admin/login/css/main.css b/lib/extensions/admin/login/css/main.css
index 7bdd00d..c3b0c8c 100644
--- a/lib/extensions/admin/login/css/main.css
+++ b/lib/extensions/admin/login/css/main.css
@@ -15,7 +15,7 @@ p {
 
 h2 {
     font-size: 1.777777778em;
-    margin: 0;
+    margin: 0 0 1em 0;
 }
 
 svg {
@@ -112,7 +112,7 @@ svg.authorized-check {
 .progress .row {
     display:  flex;
     justify-content: left;
-    margin: 0.6666em 0;
+    margin: 0 0 0.6666em 0;
 }
 
 .spinner-ball {
@@ -134,8 +134,8 @@ span.spinner {
 }
 
 .progress {
-    padding: 0.666666667em 0;
     display: inline-block;
+    margin-bottom: 1.111177778em;
 }
 
 .debugging-info-container {
@@ -221,3 +221,8 @@ span.js-debugging-button.debugging-button {
   75% {transform: scale(1.3);}
   100% {transform: scale(1);}
 }
+
+
+.finish-button {
+    margin-top: 2.222222222em;
+}
\ No newline at end of file
diff --git a/lib/extensions/admin/login/index.html b/lib/extensions/admin/login/index.html
index 1b114da..67e2b2d 100644
--- a/lib/extensions/admin/login/index.html
+++ b/lib/extensions/admin/login/index.html
@@ -78,7 +78,7 @@
       <use xlink:href="#svg-computer"></use>
     </svg>
     <h2>Pair <span class="js-hostname">Device</span></h1>
-    <label>Enter your device pairing code:
+    <label><span class="important-text">Enter your device pairing code</span>
       <input type="text" name="pair-code" placeholder="ex: 0000" autofocus>
     </label>
     <div class="checkbox-array">
@@ -90,7 +90,7 @@
         <svg class="icon-unchecked-box"  viewBox="0 0 24 24">
           <use xlink:href="#svg-unchecked"></use>
         </svg>
-        Agree to &nbsp<a target="_blank" href="/legal/">Telebit&trade; Terms of Service</a>?
+        <div>Agree to <a target="_blank" href="/legal/">Telebit&trade; Terms of Service</a></div>
       </label>
       <label>
         <input name="letsencrypt-agree" type="checkbox" required>
@@ -100,7 +100,7 @@
         <svg class="icon-unchecked-box" viewBox="0 0 24 24">
           <use xlink:href="#svg-unchecked"></use>
         </svg>
-        Agree to Let's Encrypt&trade; Terms of Service
+        <div>Agree to <a target="_blank" href="https://letsencrypt.org/documents/LE-SA-v1.2-November-15-2017.pdf"> Let's Encrypt&trade; Terms of Service</a></div>
       </label>
     </div>
     <div>
@@ -156,11 +156,10 @@
       <use xlink:href="#svg-computer"></use>
     </svg>
     <h2>Success!</h1>
-    <div>You've successfully paired 
-      <span class="js-hostname">your devied</span>
-      with Telebit.
+    <div>
+      <span class="important-text js-new-domain">______</span> is paired and ready to use for accessing your device and sharing your stuff.
     </div>
-    <button class="js-finish-button">Finish</button>
+    <button class="js-finish-button finish-button">Take Me There</button>
     <script src="js/app.js"></script>
   </div>
 </body>
diff --git a/lib/extensions/admin/login/js/app.js b/lib/extensions/admin/login/js/app.js
index 150ceeb..cbeda1a 100644
--- a/lib/extensions/admin/login/js/app.js
+++ b/lib/extensions/admin/login/js/app.js
@@ -39,6 +39,9 @@ function successScreen() {
   document.querySelector('.js-finish-button').addEventListener('click', function(e) {
     window.location.href='https://' + domainname;
   });
+  document.querySelectorAll('.js-new-domain').forEach(function(ele) {
+    ele.innerHTML = domainname;
+  });
   document.querySelector('.js-finish').hidden = false;
 
 }

From 7f2bd0a591509930ed5fac5c69f10517b608b5fa Mon Sep 17 00:00:00 2001
From: John Shaver <john@jshaver.net>
Date: Thu, 13 Sep 2018 23:34:40 -0700
Subject: [PATCH 20/31] Added preloading of font files.

---
 lib/extensions/admin/login/index.html | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/lib/extensions/admin/login/index.html b/lib/extensions/admin/login/index.html
index 67e2b2d..55cfe8f 100644
--- a/lib/extensions/admin/login/index.html
+++ b/lib/extensions/admin/login/index.html
@@ -28,6 +28,8 @@
       unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+2000-206F, U+2074, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;
     }
   </style>
+  <link rel="preload" href="/static-site-assets/fonts/6xKydSBYKcSV-LCoeQqfX1RYOo3ig4vwlxdu.woff2" as="font" crossorigin="anonymous">
+  <link rel="preload" href="/static-site-assets/fonts/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2" as="font" crossorigin="anonymous">
 
 </head>
 <body>

From 8046018dba12ac2e6469a00f1201ac09d2ba9423 Mon Sep 17 00:00:00 2001
From: John Shaver <john@jshaver.net>
Date: Fri, 14 Sep 2018 01:40:03 -0700
Subject: [PATCH 21/31] Removed unecessary font from login page

---
 lib/extensions/admin/login/index.html | 7 -------
 1 file changed, 7 deletions(-)

diff --git a/lib/extensions/admin/login/index.html b/lib/extensions/admin/login/index.html
index 55cfe8f..a48b685 100644
--- a/lib/extensions/admin/login/index.html
+++ b/lib/extensions/admin/login/index.html
@@ -20,13 +20,6 @@
       src: local('Source Sans Pro Bold'), local('SourceSansPro-Bold'), url(/static-site-assets/fonts/6xKydSBYKcSV-LCoeQqfX1RYOo3ig4vwlxdu.woff2) format('woff2');
       unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+2000-206F, U+2074, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;
     }
-    @font-face {
-      font-family: 'Source Code Pro';
-      font-style: normal;
-      font-weight: 400;
-      src: local('Source Code Pro'), local('SourceCodePro-Regular'), url(/static-site-assets/fonts/HI_SiYsKILxRpg3hIP6sJ7fM7PqlPevW.woff2) format('woff2');
-      unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+2000-206F, U+2074, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;
-    }
   </style>
   <link rel="preload" href="/static-site-assets/fonts/6xKydSBYKcSV-LCoeQqfX1RYOo3ig4vwlxdu.woff2" as="font" crossorigin="anonymous">
   <link rel="preload" href="/static-site-assets/fonts/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2" as="font" crossorigin="anonymous">

From f0fda13b162e0cef25b21911f16ec6157e8251e7 Mon Sep 17 00:00:00 2001
From: John Shaver <john@jshaver.net>
Date: Fri, 14 Sep 2018 01:40:51 -0700
Subject: [PATCH 22/31] Added back serviceport when taking user to their new
 domain.

---
 lib/extensions/admin/login/js/app.js | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/lib/extensions/admin/login/js/app.js b/lib/extensions/admin/login/js/app.js
index cbeda1a..cde3ac8 100644
--- a/lib/extensions/admin/login/js/app.js
+++ b/lib/extensions/admin/login/js/app.js
@@ -4,6 +4,7 @@
 var meta = {};
 var magic;
 var domainname;
+var port;
 
 function checkStatus() {
   // TODO use Location or Link
@@ -37,7 +38,7 @@ function checkStatus() {
 function successScreen() {
   document.querySelector('.js-authz').hidden = true;
   document.querySelector('.js-finish-button').addEventListener('click', function(e) {
-    window.location.href='https://' + domainname;
+    window.location.href='https://' + domainname + "/#/serviceport=" + port;
   });
   document.querySelectorAll('.js-new-domain').forEach(function(ele) {
     ele.innerHTML = domainname;
@@ -85,6 +86,7 @@ function submitCode(pair) {
       */
       document.querySelectorAll('.js-new-href').forEach(function ($el) {
         domainname = data.domains[0];
+        port = data.port;
         $el.href = 'https://' + data.domains[0] + '/';
         $el.innerText = '🔐 https://' + data.domains[0];
       });
@@ -160,8 +162,6 @@ function init() {
     });
   };
   document.querySelector('.js-debug-button').addEventListener("click", function(e) {
-    //var info = document.querySelector('.js-debug-info');
-    //info.hidden = !info.hidden;
     document.querySelector('.js-debug-container').classList.toggle("visible");
   })
 }

From 7c5a451a9adfb0201fed296dee0b280348c6ebf3 Mon Sep 17 00:00:00 2001
From: AJ ONeal <coolaj86@gmail.com>
Date: Mon, 17 Sep 2018 05:38:23 +0000
Subject: [PATCH 23/31] update contact form

---
 lib/extensions/admin/js/app.js | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/lib/extensions/admin/js/app.js b/lib/extensions/admin/js/app.js
index 5783b4a..d05e434 100644
--- a/lib/extensions/admin/js/app.js
+++ b/lib/extensions/admin/js/app.js
@@ -4,9 +4,11 @@
 document.body.hidden = false;
 
 function formSubmit() {
+  // to be used for good, not evil
   var msg = {
-    address: document.querySelector('.js-list-address').value
-  , comment: 'telebit.cloud: ' + (document.querySelector('.js-list-comment').value || '')
+    name: document.querySelector('.js-list-comment').value
+  , address: document.querySelector('.js-list-address').value
+  , list: 'telebit@ppl.family'
   };
 
   window.fetch('https://api.ppl.family/api/ppl.family/public/list', {

From 2bbfaeda2f1454478f280621adcbb3b6d43cdcc3 Mon Sep 17 00:00:00 2001
From: AJ ONeal <coolaj86@gmail.com>
Date: Mon, 8 Oct 2018 01:07:43 +0000
Subject: [PATCH 24/31] partial for #1: adjust font size and media query

---
 lib/extensions/admin/index.html                         | 5 +++--
 lib/extensions/admin/static-site-assets/styles/main.css | 2 +-
 2 files changed, 4 insertions(+), 3 deletions(-)

diff --git a/lib/extensions/admin/index.html b/lib/extensions/admin/index.html
index 15f6b61..0eb625b 100644
--- a/lib/extensions/admin/index.html
+++ b/lib/extensions/admin/index.html
@@ -6,7 +6,7 @@
 		<title>Telebit&trade; Cloud</title>
     <link href="static-site-assets/styles/main.css" rel="stylesheet">
     <link href="static-site-assets/styles/vertical-slide.css" rel="stylesheet">
-    <link href="static-site-assets/styles/1200.css" rel="stylesheet" media="(max-width:1200px)">
+    <link href="static-site-assets/styles/1200.css" rel="stylesheet" media="(max-width:1075px)">
     <style>
       @font-face {
         font-family: 'Source Sans Pro';
@@ -53,7 +53,8 @@
       <div class="container">
         <div class="spiel">
           <h1>Access your devices
-            <br>Share your stuff</h1>
+            <br>Share your stuff
+          </h1>
         </div>
         <div aria-hidden="true" class="demo-row">
           <div class="demo-container">
diff --git a/lib/extensions/admin/static-site-assets/styles/main.css b/lib/extensions/admin/static-site-assets/styles/main.css
index efc1af6..9f980b2 100644
--- a/lib/extensions/admin/static-site-assets/styles/main.css
+++ b/lib/extensions/admin/static-site-assets/styles/main.css
@@ -1,6 +1,6 @@
 body{
   font-family: Source Sans Pro, sans-serrif;
-  font-size: 18px;
+  font-size: 17px;
   line-height: 1.3333;
   margin: 0;
   -webkit-text-size-adjust: none;

From 04e399cf37a446d4c873113ae00ee768862be311 Mon Sep 17 00:00:00 2001
From: AJ ONeal <coolaj86@gmail.com>
Date: Mon, 8 Oct 2018 01:09:29 +0000
Subject: [PATCH 25/31] add optify (conceptual)

---
 lib/extensions/admin/optify/index.html | 18 ++++++++
 lib/extensions/admin/optify/install    | 58 ++++++++++++++++++++++++++
 lib/extensions/admin/optify/latest     |  1 +
 3 files changed, 77 insertions(+)
 create mode 100644 lib/extensions/admin/optify/index.html
 create mode 100644 lib/extensions/admin/optify/install
 create mode 100644 lib/extensions/admin/optify/latest

diff --git a/lib/extensions/admin/optify/index.html b/lib/extensions/admin/optify/index.html
new file mode 100644
index 0000000..7cff42b
--- /dev/null
+++ b/lib/extensions/admin/optify/index.html
@@ -0,0 +1,18 @@
+<!DOCTYPE html>
+<html>
+  <head>
+  <title>Optify - Containerize without the container</title>
+  </head>
+
+  <body>
+
+  <h1>Optify</h1> 
+  <p>containerize without the container</p>
+
+  <p>Holds your hand without being so hands on.
+  Like brew and Docker had a baby that <em>did</em> care about versions and <em>didn't</em> care about port numbers.
+  Only for the masters of their domain.
+  Be wise and be bold.</p>
+
+  </body>
+</html>
diff --git a/lib/extensions/admin/optify/install b/lib/extensions/admin/optify/install
new file mode 100644
index 0000000..747a3e8
--- /dev/null
+++ b/lib/extensions/admin/optify/install
@@ -0,0 +1,58 @@
+#!/bin/bash
+#<pre><code>
+set -e
+set -u
+
+# minimal os detection
+my_os="$(uname -s | tr '[:upper:]' '[:lower:]')"
+
+# https://github.com/golang/go/wiki/GoArm#supported-architectures
+# minimal cpu arch detection
+my_arch="$(uname -m)"
+if [ "x86_64" == "$my_arch" ]; then
+  my_arch="amd64"
+elif [ "i386" == "$my_arch" ]; then
+  my_arch="386"
+elif [ -n "$($my_arch | grep arm)" ]; then
+	if [ -n "$(uname -a | grep aarch64)" ]; then
+		my_arch="arm64"
+	elif [ -n "$(uname -a | grep armv8l)" ]; then
+		my_arch="arm64"
+	elif [ -n "$(uname -a | grep armv7l)" ]; then
+		my_arch="armv7l"
+	elif [ -n "$(uname -a | grep armv6l)" ]; then
+		my_arch="armv6l"
+	else
+		echo "could not determine arm cpu architecture" >&2
+		exit 1
+	fi
+else
+	echo "could not determine cpu architecture" >&2
+	exit 1
+fi
+
+# get optify for this cpu and arch
+if [ -z "${OPTIFY_VERSION:-}" ]; then
+  latest_version="$(curl -fsSL https://telebit.cloud/optify/latest)"
+  OPTIFY_VERSION=$latest_version
+  echo "Installing optify-$OPTIFY_VERSION (latest)"
+else
+  echo "Installing optify OPTIFY_VERSION=$OPTIFY_VERSION"
+fi
+
+# download to a tmp folder
+#my_tmpdir="$(mktemp -d /tmp/optify.XXXXXXXX)"
+my_tmpdir="$(mktemp -d -t optify.XXXXXXXX)"
+my_url="https://telebit.cloud/optify/dist/${my_os}/${my_arch}/optify-${OPTIFY_VERSION}"
+if [ -n "$(type -p curl || true)" ]; then
+  my_out="$(curl -fsSL -o "$my_tmpdir/optify-${OPTIFY_VERSION}" "$my_url" || true)"
+elif [ -n "$(type -p wget || true)" ]; then
+  my_out="$(wget -q -c "$my_url" -O "$my_tmpdir/optify-${OPTIFY_VERSION}" || true)"
+else
+  echo "found neither wget nor curl" >&2
+  exit 1
+fi
+
+# check for downloader success
+chmod a+x "$my_tmpdir/optify-${OPTIFY_VERSION}"
+"$my_tmpdir/optify-${OPTIFY_VERSION}" --install
diff --git a/lib/extensions/admin/optify/latest b/lib/extensions/admin/optify/latest
new file mode 100644
index 0000000..5c314e5
--- /dev/null
+++ b/lib/extensions/admin/optify/latest
@@ -0,0 +1 @@
+v0.0.5

From 285ee714860cb30418b5b2b2c3b6bf8b4a5358c1 Mon Sep 17 00:00:00 2001
From: AJ ONeal <coolaj86@gmail.com>
Date: Mon, 8 Oct 2018 01:12:49 +0000
Subject: [PATCH 26/31] ignore dist (binary) files

---
 .gitignore | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/.gitignore b/.gitignore
index 4cfd0fe..e1e5f2d 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,4 +1,6 @@
 emails
+lib/extensions/admin/sclient/dist/
+lib/extensions/admin/optify/dist/
 node_modules.*
 include
 bin/node

From dbe3088908de6a4d60ff5cb39bcb9d402d77a4bf Mon Sep 17 00:00:00 2001
From: AJ ONeal <coolaj86@gmail.com>
Date: Mon, 8 Oct 2018 01:13:25 +0000
Subject: [PATCH 27/31] add changelog as notes.txt

---
 lib/extensions/admin/dist/notes.txt | 86 +++++++++++++++++++++++++++++
 1 file changed, 86 insertions(+)
 create mode 100644 lib/extensions/admin/dist/notes.txt

diff --git a/lib/extensions/admin/dist/notes.txt b/lib/extensions/admin/dist/notes.txt
new file mode 100644
index 0000000..a4b26cd
--- /dev/null
+++ b/lib/extensions/admin/dist/notes.txt
@@ -0,0 +1,86 @@
+Release Notes
+=============
+
+Table of Contents
+
+* v0.20.6 - protocol upgrade
+
+Re: v0.20.6
+===========
+
+Saturday, Sept 29, 2018 
+
+This version is a required update. I had to make some changes to the network
+protocol that were easy enough to make backwards-compatible in the client, but
+not worth the effort to do so on the server.
+
+Mac, Linux, Raspberry Pi Users:
+-------------------------------
+
+    curl -fsSL https://get.telebit.io | bash
+
+That should be quick and easy, but you may need to reboot your computer.
+
+Windows & npm users
+-------------------
+
+    npm install -g npm
+
+Note that on Windows the upgrade will **NOT** work while Telebit is
+running. `telebit restart` should kill it but, on Windows, won't actually
+restart it.
+
+This is not well tested, so please contact me (aj@ppl.family) if you have any
+trouble.
+
+Upgrading *really* old versions
+---------------------
+
+If you have a version of telebit prior to v0.18.1 (which may not even list its
+version in `telebit help` yet), it'll probably be easiest to manually remove
+the old telebit files first:
+
+    sudo rm -rf ~/Applications/telebit* ~/.config/telebit*
+    sudo rm -rf /opt/telebit* /etc/telebit* /etc/systemd/system/telebit*
+
+You'll lose your current domain. If that's an issue, contact me and we can work
+it out.
+
+Rationale
+---------
+
+> "If it ain't broke, don't fix it" - Ancient Redneck Proverb
+
+> "When is broke, is most right time to fix" -  Ageless Chinese Adage
+
+There's a delicate balance between the two and in my infinite wisdom I've
+decided that now is the right time to fix.
+There are some rather disruptive bugs in the network protocol and fixing them
+means breaking most existing clients.
+
+If you've been using telebit on a daily basis, especially with ssh, I believe
+that'll you see benefit immediately and even moreso once the server is updated.
+It's worth it.
+
+Additional Notes
+----------------
+
+A number of good fixes are in here:
+
+
+### `telebit help`
+
+The in-app cli help is now correctly documented. Not everything _works_ as
+documented, however. Feel free to poke around and give me feedback.
+
+
+### `telebit ssh none`
+
+Previously `telebit ssh none` behaved identically to `telebit ssh auto`.
+
+The output correctly showed the actual behavior, but it didn't make sense.
+
+Bascially this was happening: `telebit.ssh = telebit.ssh || 22`. So when it
+it was `false` it became `true`
+
+It was changed to this `if (!('ssh' in telebit)) { telebit.ssh = 22; }`.

From dad775fcf6f45db1ed8ecd5a3d1683c917bef22c Mon Sep 17 00:00:00 2001
From: AJ ONeal <coolaj86@gmail.com>
Date: Mon, 8 Oct 2018 01:14:55 +0000
Subject: [PATCH 28/31] output emails as list as well

---
 lib/extensions/data-files-to-json.js | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/lib/extensions/data-files-to-json.js b/lib/extensions/data-files-to-json.js
index cb7bded..de245ee 100644
--- a/lib/extensions/data-files-to-json.js
+++ b/lib/extensions/data-files-to-json.js
@@ -39,4 +39,9 @@ files.forEach(function (fname) {
       , os: mdata.os_type, arch: mdata.os_arch });
   });
 });
+console.log('');
 console.log('[\n' + Object.keys(emails).map(function (k) { return JSON.stringify(emails[k]); }).join(',\n') + '\n]');
+console.log('');
+console.log('');
+console.log(Object.keys(emails).join(', '));
+console.log('');

From 6b619c81217f19c793e0ddf5ba0769632be562c9 Mon Sep 17 00:00:00 2001
From: AJ ONeal <coolaj86@gmail.com>
Date: Mon, 8 Oct 2018 01:18:48 +0000
Subject: [PATCH 29/31] add utahjs conf 2018 links

---
 lib/extensions/admin/utahjs2018/index.html    |  47 ++++++++++++++++++
 .../admin/utahjs2018/thenamesrex.jpg          | Bin 0 -> 30463 bytes
 2 files changed, 47 insertions(+)
 create mode 100644 lib/extensions/admin/utahjs2018/index.html
 create mode 100644 lib/extensions/admin/utahjs2018/thenamesrex.jpg

diff --git a/lib/extensions/admin/utahjs2018/index.html b/lib/extensions/admin/utahjs2018/index.html
new file mode 100644
index 0000000..c6217cf
--- /dev/null
+++ b/lib/extensions/admin/utahjs2018/index.html
@@ -0,0 +1,47 @@
+<!DOCTYPE html>
+<html>
+  <head>
+    <meta http-equiv="refresh" content="0;url=https://docs.google.com/presentation/d/e/2PACX-1vRQ1YyZcTDKYINLvUe8OdaDn_mIoCc0v8XSK-rgI3-b8EldgqpwbZEGmPn7J9pN1vnEJ1-pOcl_T-QP/pub">
+    <style>
+      body, html {
+        height: 100%;
+        margin: 0%;
+        padding: 0%;
+        background-color: black;
+      }
+      .bg {
+        background-image: url("http://www.tshirtvortex.net/wp-content/uploads/thenamesrex.jpg");
+        height: 100%;
+        background-position: center;
+        background-repeat: no-repeat;
+        background-size: cover;
+      }
+      a {
+        color: white;
+      }
+    </style>
+  </head>
+  <body>
+    <div class="bg">
+    <center>
+      <br>
+      <br>
+      <br>
+      <br>
+      <br>
+      <br>
+      <br>
+      <br>
+      <br>
+      <br>
+      <br>
+      <br>
+      <br>
+      <br>
+      <br>
+      <br>
+      <h1><a href="https://docs.google.com/presentation/d/e/2PACX-1vRQ1YyZcTDKYINLvUe8OdaDn_mIoCc0v8XSK-rgI3-b8EldgqpwbZEGmPn7J9pN1vnEJ1-pOcl_T-QP/pub?start=false&loop=false&delayms=3000">Access Ability (look ma, no cloud) [slides]</a></h1>
+    </center>
+    </div>
+  </body>
+</html>
diff --git a/lib/extensions/admin/utahjs2018/thenamesrex.jpg b/lib/extensions/admin/utahjs2018/thenamesrex.jpg
new file mode 100644
index 0000000000000000000000000000000000000000..0b744a5c6d955123c99b6e2d8bceafa75c48fc42
GIT binary patch
literal 30463
zcmeFYbx>SiyDr#xf`;IpV8IE&Jp^}m3BjRpYa9Xrf?I&lKocAq8g~l>58im=4vhzg
z0K<2G=hS>tXU<g3y|?DCd3V*`tG2AQ_q%pI>y_tyoO@gayik%;lmnokpa4ETZGguG
zfHVLd6%7py75!<4{v;UBF)^M5=h-vN=Xf}Hcz8ItxcD!K3GoSt2yk&<lD{M(AtfUt
z!zZMmq9COtCM6^NS0^a{dJ+Qz8xs?olmM52^#8Ryb^-{Wp`4={prOzMPzh1c2vHt;
z05kv;017%93gG_~3^a61EELpd&z~-9z5t-0p`l<rop~A@6CLa6c2qQU3_?t-m#=xG
zh%`UBJtL-n_c`e~$p@|6>MjOe3-?e)KI!BMQtg_x6DAo;kFY#4a-Cny`~tGpo~KV;
zQa`B%?MXjRhyN55G;~x9Osr>5S49W`s3@rDs92bosHmuD|GEPO6^#)6U!!SaU=qFi
z<W^1pIVrbm0*jb|ckSeZmPM%hX-dtnM+5-(=`&CX(Fg&O065Fn4wGGadcfDOsPwO%
zeGU2loB!YIp=sb4CvB@A4`W%Hg|y{WbQvp<R?=2h^YxLV4D{5H`^+tVOo-;si|L^(
zy@PrA{ObBgfJ5xo7KP*^fC<cXCBk0c+<GxHm}k4Pz4Be}WJ;c!A#72n^i3^GWhCrF
zV78smP>QN#m;yAMP*LN5*CfY$eV*N0cRI)$$wP(nlgWz)dcks^3NGI%%V@o+Fv)AQ
zi53!54YY%QYs-JLo8cI(gvV2A^9Z=SUZ=ZG0aUV{tDasTI@sl1HxEUcB`?dD$wTjj
zjhnyZbO>D7eU?p?{;|VwdF3kkXYCQ7Rk1d%H*tqV4hBG|ZZM2{;U?-v2^u0@`hH3h
z?$PJX;aoUi;U<FUIUc)qiLOJf!8bA6Zibu^!%Sg{*=i#^I8K~)u25flbX(9XA_y>N
zRO%p89OK#z{$l7RR#wQyp1t8{1tYKZgs<P8)|K}8iLmac&^*gKO8d<RgDB%WwS(og
zkGT%@rnmxgB`gcCJ%p7&!XW^IzqkPvgxyq|9ud+EpWGw?O=&!3{-TgHf|C^jBkh=e
z=G8-v>iJ{a3~&pi*Ef?YZLd?@L@=1&mo&Lu$a+GW?o5I7bgnRZx<nw71bnZ~yP8Zv
zU_)!^>MtkfcXeX8JnZQW4w|mF$*HW9(#1momKY0j9enq1I^7m70M2BCYg()NywuC?
zso1J|l*+f%u$@PF)VK^iy;qkzu+q&Z1j%rRbk)W<QbCvzw%4;{benNboV<CJMiGZ@
z#f|;MIy3WDB)VSQixGh5+kRR2Qo7R!>{E*>sUT}r68MB>90Ey!^BwMk8`gt+q0@35
zQQ19kD`KjPjH5j59yD`CD7pL9d)C#o8WnmX<|#+<NPy0wiVlnqZR`Vl_3_+y--FNE
zQr|{Lnw2f9+!~1+>?(;5Gm4+8&uo1ojWLmIZJbQFf2%v}Dn)m+7WeaaCy9)1v*OX1
zUK$aevXbWp9ZTVEqKqtNSY&<0Cm@&_{#J?t0~lAh*K}BeQ-~(bTIkIf>mJviM2q1V
zPE@f<A|luEZZYY(&j~|xOSt^=GCJOw<;YyPDT%I{#3KC`SubDawWwibby*1`cMSSw
zy}lml?7F$ciT*x968!6b2MA(o%g(7jKouRRw>7j|y}F7q^+C3+?b7;UH5ok~n+?vN
zi>w6_b1eav8;8{XgX^^x&?afs`Abu|T_qZJcv=tpWKk{u$nu~h4)O-klTE_OPmM}x
zzz`u2i&@=-4W<7><>GNm`68A+AH%9aS@zGfuaQ!OFEH9KO*qpf<>vP)KY%o}G8VL0
z9|1n(vyuK1>@plHQisp%+cDfH)$1s`Ts^-i*(?!8)_R`w(_RG8x_yB-m5*ia%ge9x
z%!#;lGw)C)ro}NQ`_(Ovyz#I-*f!<#nis!aDzM+r&5IZQzCF{*?Xg7bE+)hROE%u!
zy{9W|Sztr5R1l?$)O19DSJx%osBY@ZS=(DznrRiC1qD($R^&Bk!&QF&!Hvi*I9e-g
z1Bmw;?9mvP@YTUP`aJ^~Y(?R+A-jwIL+ZHKWqS0qL%=XIGx;ce=-kc?)D!CeuJn07
zU&T(Uk&>T;s2QhSC23r~L|*;UWov#VF==Kh2VCLSaGz~Y6vYVV?K2t^g6*P1CxK(7
z%x}(AaZN^4tjj`!fZ#m1QG$Vk^42fx1=vxZeW~eB73nZ^to9IBtX}O4CuQGq$8E^*
zN6puZj)lqMqe!au>$ML(z`Tye8`3doWzCRQ`6n_Z9YkwtrPyGpGUt@9p^qVh%bqAK
z9@1!RCz|R>dQ(;grBfBFKov%h+iD+r^?*%!;rRnDisAhg+N^2feBtcx&n7HW-TCYO
zARV7N5@lJhC4bT=v?aO-iX*F21#ce79(8%K9oyU_rf9eRezU-HCNc0>Sxavrr&U)M
zL`;!-XoWW<2v*#IIFK0DThkJ(4q1;kVUv&;HN|wPWfjyl+CMWCI9k-!Y&E(TB_Egd
z3iy#W?OWO~y1Hj?#navuZ^sD20=UBT^vVOX-ca<aaqS`7*DS%48a2};=ZD$Jm?NOd
zMTSb7ndBf_Pmb6`6vkD2YkO6FvGg3}OnxFpW_BGFZ>-l5!bdlooIWCK<y)Cnnb+LS
z>z<DQ1$C^*qS7m<&KI%{rAGkc$jsN6*GJ(W_Q=8W+RyJ?n}2@Rjd=p=fLWd}p2fI|
zL<qU1a_t|j?2KL`2hT0CTGasUkJ@tMu{u?>k=TkxV>qS9wVm5(-;4bf7|_jAJ=?dS
zlF7wb&xIuLD#L)ggoKI%GBPNHFVJP)6A}Xc=b9)VHty$c!fOS*1fB9()O_m0BUcrS
zW~y7KMrjuHd}~-i=NSq2)6)H$dSVXuqB*%ilzM}cTE!3J>4Uu)O7z?u_p9`)&G{K<
z>-iU|2r2<^lj%xiG^OoG>(y5Zw4HDsHC3iop;94uF<Z(6<H8@M<ME{T&o@b9=Q|cC
z<a3WmZd=M{7R9}OMT40`uId_vj({j@Dc3OHI=l)Xp2p5EplVB0&pJ3Z4OKE~ak1UV
z6fY`Uo-EHKXmKpEFX*+W932k!cv~@(7X}b^H)h=!(}*^i-u|%=M!?bRK;^~TFCgM-
zB7qh?!bfv#k$$IQ8qpZhf^>4%Q<Ot&zelfbjYac8RnF}B<ipip=%ss6WGt86x@hE+
z4xdnDkt7W*op(&-_iIU4pHW)SRk=_t^4JIOE~s6-KuL)(LSYaS;?|<Ul4D&41szMT
zx&4fyVfbpVT~yjD@e%|~@jjQIWH}!V54{2v9hh=>BUvin3QuNGF=9$OXK%U=_)`0p
z18vFtF<RA@n494mif$yH@CkvUocdw^m3m8gZcw|bpX9AL^6*WK&7P@Yr7;7N>7A~$
z6rIDbWsKNE)6iAnD^~G>UDNb~NvRp+JutYXVd=v-{swsdP2yd(+_+G4fBNtrGqICt
zQDtq#<70^!f|;NwA7Ks~`h53+!$W}@n0C<bOUR{nBaM-s4rQe+sX{%O6YFh9LtZhS
z7dcN27Vo9Az0gv3^G>>Kp+M?h(3q{t!TPMWM|oOwd}_TH@AuVcADR?KCv=x5^Pll^
z_|APXFiy3B(}6>TSADkI1#F7I;bh3s<O>s{VGp^?UKz|kHNKm81dK~`K*^o&jM_U8
z{dGcyFc<uibzx=JA;Wb{_2`Qd^G|XV)tn!bANK#q_j~pmlvuD^cgm@Wm}%P&&NJoJ
zYEE#PE-*HHEcIG49WB${4^(9O)3CZ{Q`E44%*N{oRm7ydtl@eoN-dP-Tj8BiM<Z1m
zn4mj7iJ;I_aP~ZVtEbiKI+8^I4Cy;k6C<l=2+Zf}`wG_)0jkXJ?H<nT-U(3}(LVSx
zjft78D>A}@_tpxSXO^Q|@|Ki--Ih73v}jl7$HZd!b`p@1aX3WUf7L4G<gSMmGx+VB
z(cw+}={7&fu!8$$Ekdm7(#pJG4S)EYhc9#|ov(&^`?}P1y<m;s!yV)CVlkUOeQ~?;
zAv`g>pzZfM*jZ?VPsZOs7jCV6KkmX2d?G|}fwTqp(icV-I?VGLJFR$D1>0nF`+#7r
zThHyZrn=Y{uKETYam8vCN5jW>*OBn(FZRE(`P0?*7b4PYYQ|3=0fo%r9gh3v`b*lb
ztr~Kd4I&2gA<bg}$*rE|tN3VdR_m^Q9DQ@131s0Gq$n$jhz^~)S<$3^pS6}$W&UT3
zq*@}q{fBVAnqyzQ3Em{A8Q`0e_F?j5Me;?BWFD20U&P=AS2dVJ(YN_sJXX>ui*egQ
zu<;`Rqb7|qo0>YiJ`J+-2*~g3zsN7-x&H0tpfiKVZ<VZSHj3D<Bmzx1N-9W)Y3qAJ
z#ihQ#rAyQhNjwmhKeSanSYLAvRLh$h?d6oX+j=30UVr9xDgE`8uWj;z5#-c)vc+bj
z#QE%*(<M}q4GB?u+sBtIHuid5KRS^1IO5C=Az#EbZoiPJY*jq@Liw&*!?>A>T;wRU
z57)~hdQ2WmNpY~>MZc=&BE5)BRGmaTcyk7_PdivJ0hUXh4^u(R$$!+x|2tJr!bHQ6
ziJa1@ib#~VMKexFG)T`MxzcvXj@-*uF1IL-z5wNt=;9W~)S3eaIWGNZMi$El-B<Gv
z)uBaf?bd#&Ox(hP$oaD!IBghmOd;D)fvQEKE?F-DE97|ElHJM=s70x+*jk?1MB;fq
znLyni8jJy(Vi+ia2|U4k=l>kG|ND|4mbQH^I)BGM5`W+B$H%;2NTp(d_vhqtM|cch
zS*7y*Jq>?*TJ`iyjgPu4hO&H&nNje%i5eleu0fnOdJk6(jf`53($FSFf8wZqc^7dm
z`fT#_^M3l!x1AD8L-Ko_cG7-6YVvm)x>HFHx21EEDB%#8b;adPZ97>5SUkfa`gf~!
zUkg|`uM)zciN*{f-`Qahx~dNGd6`FU<b-(Jd_23auBvmqUU=kvuJGGVAUMzNbk05|
zNZyd#Ecj*H?0K>iNOq4id(m6o{6~I@rkO=t{dO8Nf5V($Sfknd(YwwoKeXibHw}J=
z+Q50Pye7M7BGZ!9M)8>@a<rH&hA^<OP>6B}^8H8tK>7xzk_O)zW72j6-b|jUak=xm
z4&#7g-}CAS7c!Nzp5N<o?^nfU4oI-o9MqO^dQRQiU&lgWS_OqWtde>b4>A6)S`I7i
z58!$Wsr>axlM)pb72fI3az6o%>fAiyPXMlGAEhqYceAUPAo3(KX;P&}<z4)<MNyPA
z%LDRNEAdKaZzizhtQU%MVcn<7#gN5#v&C}iAmv@7pEO2!rAgwr-~HU&h9`Qd4CU44
zSk~jym~jP!7zpe0JNW<|?tvV2p2W*3o?bdmmTdcup70q=KHLH7%SdVurXOx6ALYdp
zpZg>F_{hYMgz)Uv6~#N<KECq~)8{U5Dc-P$;qxw(RT64WipAsQ6|e5xkX9dELr>VI
zsjnH;7+R9f6J#l}^EjMKg)?TL+OLm67K@caft>EzjT0S{)b-i1l~cHHyP9(hdep{f
zGk@%?x62t*y&Z^PFvm5gp~M8-0NTXQ`_1U~MTpe-mpenD^@pciK$IKQvR@q2>mWl!
z<~xGiy*jS>hKlU8-*P6bM~VFxVHPy4>j74m)_<?0oLxm{tH{1dM9q~Pbi^5@Yb-)b
zcS{*N($#e}S>lB<s5vP-5&%M}P2S3TD7Bo0K#_a?Laslm+A^oqT2p*7Lt#yu+Myr_
zz@Bjx*G)S*w$R9llaLs!p_nP`y4`mvB5diHGyorDa2@bh=)&p@)n}<mr(+i9X)x8T
zzHc`v_q@+{swcR(<6E`#%ic^2@t<>_{9CqS7HaHLxF9f`n^&2UgdD=voLqXnyrI<<
zQB&A~-$%1}%<r++Sj{3ZQ4=|-Ay36Go+yzw#M|UuOc5xW;BngB+{vA>AToX1Z!Icg
zeWtEEWyI}0NQWEe@3uVK&p^O4{32L(UzWp^DmeM!@38Z^Z4mCzy%4|eOvg9BhJ!)D
zz10dnz9wN*7I_<<Q+r90bI|yeVymp*JG*`2a@-PuHA5|)SViG?F9O0sKE7?hDPp@!
zY8(+Qj!~&Gb3O&<$KFxh{b_nKRNe1zjj4U&Nh5m6apUq+jQ%xeW&QQ!ACezVM7qlc
z2hQ~2wm}^~Z7DshZ*874H|_72*)Pu3w(aJ7DA-_qxZ=yfEXRTKDhU{m4z|DW43{%6
zB%F0%WuSg8>`@RTCaQmW>~P6<Das#I*s#10^Q<SM(nzW!ahJpWmb*cKD{1S4`?76+
zSGJ(?D!c3u%UR@ir~><OIxB1@ViZnCjq6LmiS^Z)vJY+66UwTqS^Nk{7-=W#JaTPo
zyC+c8(w>}vOUo;C{`ND-z~!W~j<W;G4`65#T5*f{pGRo=b<8_9zIe;-cxW%al}va;
zQmCK*kaSB+DT1ULydWNx+;Y9w&mv~P@N$Tyr%(Rzza9f@cm({2bAjG|X!(|f69@J=
zT{e=A+^k0(y(eYws5noCdk{s8X)^J)<xqvvOnQUG*V~Tw;vD80W-9WnuI`N;Yn(8n
za~f-BbQ;~NguCe>ifWWb4_F?;)X&VmGEkF7o!6Y3!u{<_$!`6w?C-Vuo-MgrnHK0e
zqTx9X4+x`$xNfYZdOerpRa0ALMn*NwGhm;;n7vc02HuXzAC}CQ<rrEP1k4Pjbb%~!
zgn8iZ$#2loBqeAK$R_DLxqjLivw)uMLZOSi({TR$hnMZ#yBRh2sx^TS)#7@I2Jd39
z;?>@wrS~DRxn-^8vht8RT39Eol+WFsH;mWsgJDVS0o;Dq2ShgbS~71|s?VpjC(phw
zE<^HM_(MOi-AzMk#kwdvPW-Kn@ZZoY@G05&3R-m~vN5xDenLLJc{%ZKdfq)p!;0lx
z#8^i|nWI<ZLYT=AXI1MJoZys^x<?i12SL$|iGeWniSB}AOW>{ik#OTi@;a`uoZ4(r
zGt7c1*P~hT>_d$SA-BOh?v%v+)|4skw}I5Rye1AG6_mXely!9$oEi+N_>o)W-Nu;i
z=40B-f*}7WaZ;*U7*idA!cy}XF|S0;KB&aY6uu$h&n7f@S>U@nF2vvN1L(+e6t%f^
zv8EErn`p6MK%PG=scIw8>nC&k40)!`X)sYIv^2Xl4`yoo9|3{b>)D3e{tVo{_`aM}
zKe9eAb_4{zB{3~R)Qylc+)3o%_j{jLO6J|-cDUbj)?PxAr(SHJ(uk_?uB0pI1)$!0
zZ4U9!HTd49YXjLEQhv-I()6uq+B;bm7S?HR));Owa4ou!HLY3-_sgCW>^_`3Q*qVw
zS9ry-QvP1U$;9Iwl`X=;=ajszpnlk0TW-D;5|GR-r=qGld`IO1L;5ei6rY|p2rjJ?
zA6fd`meJ`3k|f#l=-Dje@hP7z#v`L60`oc9E6~%QjlA{|+;f=_VH*jm0^(R%BxoVY
zesl4i0vMq2ZviE)yMGhmerMZcZHVWt0IQUcj!%J1i2eKOb4as>whH5q$rm-#>Mic@
z%R8;s^((@Ab{kaAnU+<}ufW&E4aTr~+A;nSd>A}+J9^J0=v>P=lE3rB!-PN}DN)|-
zqq_LZ``3I83!V#>apQ;!T@J%0!<hR6k2Ku7iE9rRvx}{0$q)OG{B!e3@T`))81fdu
zV5)0h>gwp_Cf?IGmlZgV#?yJ??Z?e;xPRe1;vI$O#R{u-pd!(G?~m)=#h^~wT%5Zp
zwJLSQ9%!J|`zG~H`R;`Gmv+I$e2%R?7gImu7Vr@u*AAU)Xs<!wDLcT50=p7<(!ngF
zbh6qBj-<4&3r_7fr3`ORt;t9y7Z<?}PZ@<!Rf6;I@!P(>L$9@FKEb9x{$X>*x7<vX
zj<@#XepmTk=bzKH6xFrF1g$9kVxPVvuf|zul96HgUk^`X8{2vnE!5rfxVeb<kBD|)
ztkR9hR3xj}JFu2fy4pi6zR@1ehTXnqonO4Q*5c7PkvKIaQ?l>XWh7A*Ci*ofb-ZjR
z2|bD|B49d`+|w-K^)s63QIi!fisxCo6MHDz`@Gp<8pz~jR=*cn+UJ2hEcz0x!tn^u
zZOxzE_m91XtY!G&I8`b-%6}3;T=;l;HI{|<J%b5+9c3!@uy9-Pz2iY$OF5y|%lUlw
z{ygbCq`0`esb4>MieEg-rR1AD2A|~{uOB&2Xf9;8?lzSgxob)X<u8OAJEv65nz5}G
z2g+1U{Ic?3up7#HzngCn_-n%3F{z~}q9tC#Xsw;PYG86K*B-+!`kT%c%T-3wU|q`G
z?dk4bjVf<73?f^^cmBaBiiZileraKJQ{CHNV!k<ZPRlNC#&m9UzFI`ghX6X3r`JV=
z3VG4+`ERYd(pHnNtDiO|_?Y!iAX3zj3%pziqdS+j@qwl7F<Fgy0PQO``;%APFWcFw
zQoJOXZ#}}y2AMlN@3}Nc{p5{yx=@`&)%$-EBy#5s{mN0%%PFxbobW46+6Mbkl+d2S
z<s<{p?zttIY%mZlS6S<1dyv#~$^e3M+3|?%LKx{Re`mbQOHrS{QynYbBR?*MZHizs
z`p;!9Hlx`C8PHSt0UoZ-a{E}E8zF6z)dY%5Z)$?2?uF5oXjXK4Zd)9vgo2x+6dh}m
zj`{?f@SXRjDw!OpI>rT->T|UXZigNUI&_}>h<K~^F7W%@vWlg=+Iu%~r518Qk>qdZ
zar4F%`RMu0M@#B^1c8W%8JIuY9BbG28sKGdz^B99kWX*{j!pkpN9hpf)#Z!59n7$n
zU&`_T)8XqJlF~r@26mUZq9KO*_C(c^BdOYt?1ufmj{qA|(IejUs6k_E%ks5=s`-GS
z)k5HqJC$8aa*Eu+?M)dl`zuG<9&~BlXtD(>${Y2DwR(it716f>BgG<<2$Tj9lqGH+
zRgZC}_FN14RQlYr-nJt^6NL@r%!?({WGs7Mv7#cl5t6G4=0>)=UnYWD>uBUFq4rl#
z!2)bbMFPcbi5W3z%HZLKwV%oaB5lDxwW2$gWQmrirq0hjt0pG;7>bJGsyaL0Quc++
zBqZYK-^$*KAM7}8rGmlnexk!~zvs3t3|L+F*D#`6yce-eh(_48U5{$|<{gZ1v6k^}
zb4_@AG;qtn3gO6Brhw#yFW(E>CaU|=U>O^D(h`GWF*GOa^N{GE6eDiOsR=~k!GQ>@
zoCXH<mD^J6C({<Y>%Jza6VuynGv4KziO$qTM1VU&t0P3BjlO?LQkk3>5yL)RUJ1m?
z5hzN~JkYzq%icDdo@qg*ztt9_j+A<f{uvU#E<#dUUu<erk-T%oGAQDFGVLz@-G`dk
zprKc;Il;!e#k4?5VMJMxu53nCQG+?YTrkXL01e-@Pd><hMys0N*5dpqRucX)cJ|<n
zz7~IL?@Uw{R?K_QZbvX&vaT@h5#Ss0fU`$iR6vHu?fJuX0Qv*M0Xmjj?EoUWGjM)@
zgiH+M52%Bpg)*wyZA|j$DL(u^rx%1$6Oc5(;)6de6wuhSy0wY-f?p-xBpNJFc@@Nh
zmGP1`f2(bt_4n)?@%Fbt?}X<QAt?I(pU+fIlT_Oy`Xpnot~uTEpGntM95lV&G?_dU
zRUdrin5ZZ7{3-?oZBtLzu4#OU6+^WHD)MzqkCtKB1N--3tujTP2aT<xG+q1W9p5sv
zwmqtcZ)LZ$YSYS^I6|$i{!TQbE{NykYh~=(sX6goOU_Pw1`^*9svRW)kc;PeC9Ak`
z=zZ$G$mz_!OGPTHxI=&1ce8w(LZHx+QYFu&g3rI{+5UUa-FV5k-Q^p;e?eLJj9WX-
z!ZJMMmZFC85dafVFX9rNzlaeRjXK2zJSfu}&5qyx+$WG*;`-xmznc905g-#!mprfF
z=LU+lRRTvVi5LRekrsso#h=phe9g!QzE7kJkBR}%px1YMtgu1^^AbN-Wl|zfBlguL
zJzAQ#$|bqfep(&%b!C1~vXQ#UVQ#{Fdj!ZHMm-4j!nn=-GUVpr6YXHoL{>%1<=d^;
zxsH0XvS*xoNF}&1{WSVqVQE_E1f!cQr}F1y>G}HJ(SCeJ2#Q}e9eL5k?5=fB!|dlH
z^*nIDw9~nD;3c+@MP=*K4$(CK_cVj`ZUgv{|BuZOAva@NU@OVI_oTrUkmj|lw%%Go
zIcsFubi%!yc@FY-Pe(kGL3-D>pbOn^5L&YCajbHDZd_^s6J~=a2Pm(R%omIiI(dxa
zaHrMU_zf1gaW<OGx5$Utn0H;*ablU)x+s{2B1?|zW<>8Hc}aJ}O$$<x?A5>>UQUky
znyx@Y(+ma#e5NS^Vwro*o*Q41S_l<Nqvh7k-7pRH^EBEjh!|@S<yY-koow0f?a1L#
zT(k=NY=6u-aDrohD{FY3UNDyLHM&&WuISKV!eZs*RW~^*m?4UF1euJKGlLuV;0qZ?
zUlg5BuT?m$sLq#lN6_pGT<7FOIqTBU<$FR>4@Xns4Vm2K8;t_D0>7;LIoGjBbfA+X
z5W?CU8kXNPDJ>GJ_D+#bE*cI+d;39S$G;lu4p#Pw)gy$eT$Kxa@BpB#K!S6jbN8wP
zrQVA;<Fytb_HHA)GbcrSYGl@1+r+!k?PEY=R*iadl$DRmsVLg1=0!SC^%XO8Um8Gt
zr<6u8?e&pLB<c6L%=oWmvtRB(*bh<ZU#nXVf9yu9Tp}Q03<WOSk|7$?3s&RbZU|@p
z72erSos%RA51%e-Ocsw8e-2Om>4GQt2++S!I7^r$v4@zx&OMIhemglmttEzb5Gf4v
zkq8<zZX7qZ-LN%_BgOGN@di<~O4K)Pep)K{LCW_C;PB7&J)X=oTWBb(7tgkf@uG2U
zfKN-btWp2q`;8Of7H`%~Ep!Dt)@>{WqkB?nJ=?I9W^hckI;z7(>GT9}l2m)HMHXXT
zwO)NxFZITOX7j{U>euF%)9QmrY^@H<HfLr9jkqQC4*T_$bM$iSwQbW6vi?X|OV2ue
z{HSaDu=oNEj_oZ-7utDRmo_VYD;e3&D{=QFU@KV0&yK%8Me&-era4LQ-M~P<|1#B0
z<s1EdJVWCgqp5UZlx++tyT8P`vZ}gL%z4l}i{NFIogizy)1fcwS_x|~&|TB_N|r|C
z#J*qaeMGuMbwERJ>##^^mLv(m$GSi~IfZm>O`-TC7lmLzTkU**j@wVB0f0Mzi&n&h
za8K*6Ko|F7kLnFeW%Di)R%fRKx+9vMMoE;>DX<D~ZF^&|%lLC~yAYrFkKXTH>E?*^
zWZn~FGE=j>T0=(f>x&GqAsTN_%IpBAwX?mGg!;>k)M7j>FQRV=Vf&4;=eDx5h2dQd
zJ2pEY|Bo#Vdj3DzNhV&niIJwPqwb4UOW_oO^<=3qO|Du20eXUE{3GB&#&2tV6|gK^
zP5&QPWbQb4P7+WAo=>tP+!%aBfi5%l`Z9V_9gme`^3rl7jIH^QPEBjnB5In%xNV8(
z?aF7dS)kg4=a%Erw;EN2je+46tH1J09z_Dy*3r0>f{S#Qg;{Gq0YY5hpVn!6PDgy6
z9r>bih78muzx=Z#b!Qw&9n*t?J8KsQ>HQg_YUD246DWXScWN>0gL>M8DSb{V-$3vM
zF{FepvU*YFW8diM4Xhr$dJK&@{4iOVlDfa{#8q6^Yga@a?EltVM)v)GvAU~GOOc;H
z)!)L{KUbF7<30j@xzKNHEEd;ejDp8(Asade@;L68KJ81CV!x-1yyF{9fFO0F9rB@8
zrAT}g^UaAHj7l6?rHeO9GQ6B~%<+LHD<Adydl&7m`dmeR4*$XN>LPaSVTj6wVgH&S
zVS>&QyKqEu(vG?IqnzNhHAa)#z7)Q`gPG}Z)vKuLGuEw|66e)(Psy%NckJkBt%_#m
z(*&d*^7q9DU=CAm3|6e_!iOl-vMQ@5l@w+hGfDFHaMmjufBjhtJ?WfHpcmS*Xt<o&
zRj%`#_TnzB(*5Z!Y&x2{lja|}+OV`ehe)*ff;lqf8T@yK$169qA=wD~8a+ut&?;`@
zp-LYX*~===KJE6=B15j%TnZ5SjNw&$Ny&nJhOA3OykPsm=g+a8kzAcy$z@z-w=e$N
z9Hey5Cqk6{<NV9IsRMckj%25+jE#O*S77MURy-QQ87l!}mFDZd|4e2XtZIB22|J&C
zE|Z%$*h0rbzV1KpH_hMBr%g9&+H`+=OaflGb7APP?k{ZZCMk_v(cYRQXNroT=h3$>
z6PPr)P}YT>h`SiNH);#=>x&3U%U`GBk^j{n3NBF4YK8CUOl!_`>tk5{$WH!svVEsf
z8zJw8GoE1QJJff2>^8RDHoqrt(PSbph)W8kfEL4k#0^K2x{z7EI-ymzm9^wur#7mo
z<=U6j(w9B=>(PcHmHBjQ7X1G>9r=4qP}%!&tNC%+m6_`5s>8Gwf?aU=M%@VB2|?aO
zQkNrYoxw&t_uzT25(y3<*1A4ez{{zm)=pHmq8vq2QJ&g8#8;GBzDuR@U57w^8An6?
zO6jF3-4uS*-+EzvZFe`-@|l_6$U%=&L4NP$emX7qgPh;biCh_dr%9cmBxT3?Nzlt#
z1^Ho^d6Pf5D_s~y`vym}XC`>lU#BH^oX_iTOYn`bq#;GG_bmT~+LP&!MVqM2-*mGj
ztq*kiWSC<(HTwo_qBbp|%VL^L)Di8n{(SiC8@sTVY^VfCNb$(o^ag_r#^thZI`8F=
z(UMQ_z>i#bgLEdNOgJW^9Q3$C(gy1~7{J}vQkH$ngPed?=9hRf#n-PTq4nveleRAw
zpfu}On0ehZ>DM*TY)9k+jq#brBcS5vy@j<o$^f9*K<0M4>S28eEg144n8{kA>Zd|r
zq*m|WYTGlm-Z1Djt*J|oT1fFyR^b-bMKw53`MsC^-G|+)vhX+1>YWsZWiFvp#!_6)
zPXf79FKGq!8*dow^ipO`itjJr)ekh)XeW9PY6UQ`d>nVrXiQ;dRk!L=!(DZ2fLUcy
z17orPZu_C#sVg=-@7N(E2(h6w4Ejx48ldVs9G@)x*M-UT)tBHeV}B~rFx--M^!{p>
zKLTvA)3Y+q73TRVf2wtl?of?+P@3MdvtC?;Lsp?FHx~WdRhrb6DO7(<jv9{=k`K*G
zVMo6FKVRND1P=U?yl|P3Gt{he;Q57PE&bQ*WSY*njy<+I4Xz=Llki5kcQZhkMSSLd
z;?H})Cg7T#lr(wO*C4*_BBI8A{ax`xb@a`AO}KO!7k>n_!*<}x!()sZgfh;y3IL!1
zxHQd@jTpAx2v22ZEjS?;rhf{MzJYP+<D?GTJ4rHcDMws5DF_iC9F6%6VWF0n&p_D?
zvL<=@lrnHrexIceD2@>=t-^{~dbb^pKM&FrdB&xUsLVv$A)&&9nxfKK8><AbYVO2g
z)3}bw_@jhJAw2C{izLRJWdQ<tr5$4eRTrmhuDG};A;N%a3pXw2!KE|NSfSdlh?%!M
zad>u{Sh9nFSi(f#(2{B0N$nG`P2GkN5@zU|%NV-T*i&z*kyWoyv-|6EI&Y(OK3h|s
zN>)W;>J4>(A!K8+*L;Cy>Zmx&zBMIA%8ht57_Z;!(>>|gMKs&o5}J)=V?S4!^kKiM
zBCsuUnnBqzSw+3IyEY}iLlS&>E71tViYz-~12>c)o>jMhNAi?#yjMHjulw=NZF(dB
zK@vPjMillX%eqDQ+1I9jXIEemg~SjcI*Oc<NA31<?pvzA@M6WPAde+JgVeI1igK^I
zFGqp}MHig-l3gY>vqV8(1KI;lhqh~B-wlF(Ovb)!B=Isx3%G}D|CQvgY>+L^_W2oo
z8<C>;Vf8BIa%EWXg5518CAE=^NsaA`kn;!8DP_hp3TyAP1l<Wj-#vrG0#1EJ`>*j@
zR$n2-F#+HFxU5N-Y?QotNrfxT{i&&EaYIE)mZaX#=X$9~UzSry_7DfAts~_x-Curk
zTbI~7#-T?S{_zCjkzWm%C^WMt92^w7lT4QO+Kt)|(B?sPEA+7RA5TH7!Y?vf|1BGo
zv+R{eHbOpot^ae^84g3$epwu~YUq}d!`#H@SE7~I=WHZoM8y<kinQr+o_&&e$d)FN
zc)a6YNxt*oC6yM_JPpi;(FL6y&`Z>QE^t!4$a<u<6mYRLuOKZ07Vzb`ev|ryM(FQ!
z9@~>iho^aHaeF-3R8leuRpgt_CxK3jLwb5zjvfK8?o(+vf<(VOSR0K%y;L3nSADX7
zlj_)sP1%UkCd6)+Z1-B0{+isw8}nrCxyUje0d1zpCCH~5=Y%c|pLf)QjLEcDZ8^gg
zng;nKHDb`Ya#<&bsc&tYD`mEt#FpQjZn!#82IyIN=h0<8{1^X~Rb2f2{GtOhg(W_v
z#Hr>44_skx?%fVGpys!NvAW8D@n9IOwQY~i5EbYABFVg_^m0XEg_k%h1vSkp$q?m>
zfx4EotkpkB_sb|Bpu0~f$V$ZOD$m6<%H_rgv4XIFk*z96l|rW`>>-@cnDVS%;hZM+
z>i4bZSoEmwp^Y47+l`U;YU1;PKpW+N?(;R`W@@9}=gGW}0It{0Nc+6fqWC<B6r)z1
za01q640B_b$<fk6>)X_fKv8M7_teUMqHBY42Oc^tU@438Ad95=B9DZYBiQu=5MD{U
z91WwH*`!i@@j_0XK4ygR-?-7$Qy?XOaR@M6v76onWxD?dj>5oxTG_O8Rw{q;r~G`Z
zU4Ws$LgjM3r&C(?O+-2(lg>fyI7GXZc=9l>j%r#a7{S){V$(nA>TfX9-h?uN)O6rZ
z<JGoQs(q#^fBX<$%Qt_X*!FuXkUj~!qN1kOuWNd4px?P3$*7yhr%zoV{uH?WgqC5x
zqZ-Dr4Z0;HKtIK(;7aK*TlP&esvJJS+nDs1J7lz0n-yeMPrN8n*<v<-2in2@g~-V6
zynbE(K<zy?nevT^?l!hE?J+7hk(gSh3mvH`m2}!ky4Y(H)Z$8#7t@AxjNJHL=<)dp
z8b9=ffSa|<{$FJDv;HAk4UE2vDUSvAQNL@|mM0Hl0&6Uvp!^avC;TWd%UFF3A0s|I
z5t3wb;pbF&bD5~H==Ez$joU^wLza+C=ARz^n{>YEdW3y2h-hhZ$`37%efN-GHuKNX
zhvg#qPewDcXo26MA73L^7X??Fv}3%DQf##U^&$ms^^pvWS1HM@6$Afi%s%JjCi-Z$
z(_~xgEdN>CYq9~HbS89{9~rfq$5)#{SFXqqW&{{~6Pg=PdC@H6_OKNhc}jZ`@42Kj
zvl>HGr%cw=yfrG!CHz1B!l%hEixx>y-bW=Pzw6&FVO^l<Ly>!xy%xa}VmjERucsB=
zraKs|ihQpyupK_3Ff&LU$LX*BV%0aiKp?VsYtk>w`{l9Tx65xe_~y3h-;JT}1I`JA
zw$({Jbs&~QFN+ur`#rnGiG?b%$)87U1OtDJT~qH^_iGoo(x|wmEbgopGrDJ4Lmcyu
z@#C+{v+ZDbKACC`5z1V~v{%+z-B%uAe~jUR4GIekPY@Wgoiq?yOeSAbS~Se?O~z31
zADzIs>n9dCruqN)*PW8xK*F{wW=I+-H!#z!8PxDpI_X~b-;;dHh2$l?1-A1_Nfb_>
zO1);B8n((_8W}awyNs)rqIw;R$rHj8M+2Znon1h$kI<SiV{{>Ft@;WHadZ2dHU>Y(
ztt<(2dOyq~>Mansv0S-Fxu>>BPhTOU(<IPdAr?V0_bN6N`}=enQeIQQrf+T&*eGS!
z_aU^n*img6-%T>KTg}0(g{kaa4L#R?OyzUxc-|4rcf5mShNG|DPTtGzQN=c5J5&o}
zoKGirLrw??x|BJzZPn;^d_!pI3?(DK;|MexZ{=~Uc$m=*#9vJ7lTQuZ&tp{EMQ3xI
zPQ7OiUl?W#35droY5r$n^PpOxy86C83knMlRP}+yge}fzE}r&pmlJxh$QkEp11-!=
z4pY%cz7_FaHM&cDa$m4+DR<GFPI$F?+zpN}HR&VDGQWz)(4DJaOp)2%juMICGzr??
z4C`DiV=YC#7D^*)9A+f(I)4N-!BWr;ej@0i+an$U23^t73Pm)^G%Z20+(u$Vv_lL@
zO7||dIpMkt>u<{P*UoTSS<6#DF6~po{hmvH$gXdlu(RGA@YH^3VB*uQHA_JF5WTF-
z4-6ddzY+E<(+-f+lh12P3$2m#1FMJp&bt)vIHO(>NVQ1z=gp+iBvg17lU6@^Wu%_?
z-Zi?;)63oe+aJ0;eL@6#&Zt1+O;)o<=u(P}L0(#PH_!d%f!zs(>5_B(B<{3cJPl5#
zZp-<#Xi940P@U%B>mIlE{!Ui)a!0<M7cw@kcS-3%Or9wk%CTDGnD`O;mM7Svh8+h%
z^g}VM+6Z>*9rD;<LVc%NDICx~TerN~>-<yA+C^uNSc%G7I&adW2eIjDbFO7ykEP{5
zCc(r*dd983IQ>cd``$`sFXR{6ynr6p5bQYFqrwgEXY)8g)^d5NA4J;&`fPL{zD2@d
zeX&OXq0R)!ps{7*KZ)$fH2-v<wCq5SeHM;2Rabu+VJmx;;WD&cX+m2MQ-w!(mG*>8
zRah)l51TC`yPad4|5$?2+UQU-A$L-c1*eNXV^Q8D;Rf2Gg1Lv3BdA4_T*IliRe!g0
zPOZq1Who|_MCke-<^h{W50lMv2AU73%doC#&4{cch>*U2r;wnSZ%9QQtR?&6D4@HJ
zr;*cs3vv+%<<xA6ozbe2=R@;}_~YRRwKn2`=y~QLn)5CftcfYZ8(ECM0=qn_gq~wb
z=J10ZLl2z&<b(>mZSurp+KeyN2Xzsq&5dyc8b*slYN9@OUDW+U?AUX<ZlR9=Z8^my
z2+e^{-6LSc@9=U?6_ju_zPiBjwQc>M)teTLUC#+#(oqzVBWeAIE~@iy+Gx4=A#Xx3
zM#&|7-HS=oPaw7FCbbf^($s&zrhA+(FY^6(-$dxOsJ>+>h$MB7>Kk9fm6VVW0hhhq
z@9@df2zvy13${W3!*~-XIAgOmMrqKDtpMU|RqUi#*6R!V?i@OoaTGS&YY62#lTi1g
z7xQBq`ra#Rh<QXv==qNd6DM7xoJB|NJQ(cXFhuB>?i~_|m#@;i?h~!4!Ip~&44)LT
zP?Ynzf=F4Ux~!D$bhVMZ^(|y|o!cv8j19Jpd<66~<~{=cNdGY=GSjVzA6saO?U_|f
z08GO!&5xFg_Kn05F)>#JJ}3%@YU|hM*}&NFF;9zEipY)FfHd$_?K;Dni;R1AitKWj
z$5KH_EaWVIMRH2{r!H4{-GM}<RbdSIQh3-2_Jz#S=G?Qd{{bBT`1+p7<T=MY#jCA(
zs9BC_4By#`Vg|QN<Xu~Pk7ixscN*EiTqYJ*AGQwk7xE>2iC+f%s#ubKeSi2<^7o03
z5f=@%%jX%};S{gi@cx$zR#-PEQhs$ClKMX-Z$8P<$N!?0B+N+uXtn?jjB)((2-pf=
zxX<mpPi^iV>13%>`;|kdnUQ|>@rY}UgoESMBT5gx#Qo9(Y85=tD@&%7%3s64yY2OD
zdgShQZ)L4Lq@@NznstQgKlTzzf5_PI3IJFoe8PqQOX=6z(b6Z7t6nB~*&$1~SOwKN
zTp0^O8!QWYHT3Klhj6?eGhJ(iC5oY@{7^o`=MkXM;yR`T96BJXZRT%eh~XT21nega
zGk*`_{8ldMkn#O&346t!Gr3ZEHa5Ne{K(t?wEtYkGg~1?Z2@WE+d1}~Tr&B4dELv+
zhtI9Gf-S%L4NGmKLNMcIUr0(u$7mb*p3WE*<ok}{CNMk#_zBo)s4L>S@$I_|OGO2-
zI*}%$C0{F^+?1#4HB=ah%(r?@u!PgLXutcnX0y^2$JFZj`}{dMY9ZVbVaT>1=O<8d
zT|mm%0p=<Q!(>lRRX{04R@sA!i9Oe6h$by*`Pr|@TlR+$gt2`jX4GcbT2FA^;(7Jg
z?=$g#lk0lT4+I)cmec7*hTvWMlu0MTHrqu(fAQRQVo5ZOjhDI(j)e8upTGVebaZ2r
zgoF3T>^g@P;tLlX?R2UMN$d_LH*bAmpax_B+!z^hWpX`u)@4+s)$sboNO;i-Vh{0L
z;)28W5n!iviFghK-3jvNhDCw2s@t=suwevFDZ-qQt~YgSYTbO*SkDSP(E4b?Mr_Ip
z3K<)JPNlAUGN6ZzuMraetDukFALdAkWYE{{cx@Tt4_-V%b!!X2(lryTQOIO;0nVMK
zH5b3`?kugX@A{38B|a3{45M%Z_>|crJIQ0Bj@eLr16q_dX6o;L)VTtE2}q)W?3tV*
z?nR}eJqh;lgwtaT=i9AF<3o(JoW{!U>220Yf-#$q0IBt=XO*5;_e#I_?~UzCSn<zw
zI>}r>04&LumEE7R+ROaecUHq}d~<h~9O37lJM)SC2*s7QBPMx=vAd6&3!a<!%S+#N
zW-L=Eh0z`XroU%u4OQK<#_jzm9N6f(8<UzGEq~G>Ys4{%Wx-&j=nPT6+x&L1ov1fW
zK3w2bVUbkPG3%Y4uvc~{Kc4(<E=^L4|Khj&n<@W)-{fG|vUuWRbGc{#7A-LSQn}k7
zFY|!IuSc0St?FB+EUh!LE#}IQss2Gs_uFRP#r$s92MxxrU2jN*NRw9ONO@|b6ZD*%
zAzADG0Y@BIhjQvXPhX;20P^oha&25;-7L?wUka^|^ugcAc_O!3`!uM!hH1=kF|+Mf
z&0BcjDE9}u9lf?Ij!aRbDz07g+8YQ18Uk~aMU_oM32^^NV3_Ht-Gb9qPSCQ)-3@3H
zrt8QWY9Jq2%c}d{&{^+XtMAr8{fc?#6JKJP<yvJ6s(B~ZGH)Tdss{!!4OaEdpYQ%a
z*Q*0j8nqy!jchYal|Qp1-t{%zXI)*h7jp79J^T6t!yEZLyiV_!uj<T2gCy^GL3z$w
zJik?J$3u+l-AG}So=D>|El^p^Z+X@<q25ibjo@$EE*CDwPKum*mwkH<!AFELvN@u|
zu=cEfyK#-yKqvk4kU)F;3W8enSG(pp)}6w2DMt9qf54}%Il=X&T-$*!uUJk;l)_6i
zljUS1?3yIqB*Gl4sU)-gZF$|a79j*d_SSbJ6q!|{6Wjb&=76iR0seB5C`DCEPK=uO
zp^VR{(R?}rXUnTbC5+E_6(k&)u&M{w-(X0qYx8<WPd|*>>Qqxd-k{gpHj5i8WNpL&
z8NLpxj27Ak4jK1jMHkg8N-@XhrSLS{7cO})75mzgdzcJ|ibnUBc?LRK!}nScL&n)X
zzs5hJwSfayLJ@Q%Gm4gR%>i+Cr)*7@wzNo*gIQj!Zrho0nuTx#J#Xg|$4x#5&;raH
zs=H5|YIu7a*;@NmH0@F-xq<mdvoybOaSRv55JVm&eyi|uMSDSKT=Q-66`6vOm>TLz
zc)MTHA%jITV*`hyk=|Zuf!Fex-nC^;47J?HH;KE`qEfX(99)=r4&an4cXCO5cBY2+
z_D-Ht{aJ78BZo0qUB2>X=Te&vb+W&SDPx{8P5(^F>6ivq!gizK=kPp@SFv<e&p;MT
zklHLvClkJKV?ph&M69SG3V0L^_g}`lO~(E8g(#CD%!(?TmmUH0P7?Es9y#+$pVn`3
zuCPLo6}x=SnQ)a52cM$$6(}Vg2{`eNV~lH}yLh!;F7`Dsa{1V*@!^HimYqPpWk7C?
zre5FVWqV3Ogr2&22f{@&-55y0gT|GRvak)$1#+$zWyTL2evYS>5yYDZoMD0cxm)Nr
zfOVpJ_5(+JACevc2o`8&)ZWji3Tj5%gb_6pvGb!2%AyXL`AlKdS%DGg2Nv>$@EZB4
zx=*9wtNaf_VyVLXTtzb%p+iNSf3yYEmj`Cu@Qyuh_*niH>Ml=kaa-Vh)^%@~RGgn$
zWVHxh3iv@{2DWpcKV;pGw+Y-`q?W{}bZO;)%+CEfF0a(5j37(X_=V1MepwKF%i@Q}
zRL9PwjXa!zUi;H4XHtb-gI*BOC4ZmD6<X#e`>77=R;BVHWvYeQa8HUXeFPL&#ueO&
zQE>^M?8>_j>G^%zQZuwdrRVy0g8F~@#ANudVO$<zM#9OisF5?b(V40US)Ji`L##^?
zFWfo;)Zde$X}Tbon~O=RjG;Ln&hD6N340T8liIf{i>2R<Fz3@cQgJr=D;FMQdggP#
zp~~~#GQ)rM!kvI#1op{lKHKV|YT;O5zrDhK^uX(bz=#@6LVb(-#Cio6AEMhv_jA4U
zKD$cfd{V*pvz?Ln6VnzxYmRR_zV17lm!$rgG#br%6AOE)s$MFdrv#0!J0;NC&AS~M
z9(r=14x%cqG$l)KM&#xkXAcYXbxn_m2Gt$&&|7O_+v3}^RPNMd!`;+$+rL*Hg#||4
zMNIPjeVL}+tE+=@g&3c>hF-?y?fssoq8<asjf&xpTn2s8tTlX{AL*WMU0xdN4mmVI
zuRP_XrrK=LpXUp_EitO_R^$s@{%DhCu!7JU^~3%1JN+iGrq!b*nDIz8_BX_!IJ{Ph
zohfdE)1M|Wh`nX%Tzlmb2vw~(CCXN0sM!unQ&@cX!@KebkaaThwSYi`*L(uB>cr!z
zvk2&+FnK00C}utpBqOW9SwWmM)wA6pASU!_*k{Oeo0JAL?#-4#y)Da6HMm98o|9w<
zFV-ecqZc`6Z_>%4Sv|lr^qt?FI*;&I1@1t2+ZcS7-rOi43k85B$RjOf`{q!G((lSv
z4EV0p&p=;~4P94{#Ia}fh7p&&jPBVpW9$e5j>y=AUWaf+3)WG7etT1oS0fdqhpPP2
zBSmY}Qr&ZLQ>~*e7wAuwjcJ8VQ)JNj+<kSG(P7Dv?s!tuBH+9dsK9>7A7mmgkXR$c
zW}eX;Z<7;`eO4S@rmWCwoE^VGeEmJJVSxsZ-QLcwl{{lG_R|gIY`rqKL0{?JD^9u|
z*P7tyea57|r9DQVye~U%@5n*D$Uy7|xip1s(M&b$HBbp22?1`<9Vnh=xrMW&{K*Ux
z)t~l@PixY(#S{Tq4#yIV07s&<wk|Gu+)%3dZcZih2E7+dkuAK_pD)Xpff8s@_au<P
zJv@N~t9WuRm5P+Lfgok8z*xqdJ5j=(-@B4+jq3#@srAjNqes{m7Bc@tW<}JNu1%It
z@};_K7YlW~ECt^%<gOFHb@)9`QzTHjZ(>Z~%(ylqc=mT}&{?3l!p`Fvr|SSiiP3`N
z%qU_WV@6=>{ODkd;RqtX8qA;U2tML!kz*FWo16&hQ#tFOm*gIFuDt#BN!N8E(Q4pp
z^-D4W?+xWnPz`UynS^q!lt<Wm#*`2&T^{F}Kgmy7kiCSdiZ@zs^^;fyEGi<kmuwdE
zO9T)>C!&VgJD0}S6>N1RCa^=cqsFM^ph=*h+X*%4uLz-ab1M}fr3j#vjaJ0|?l~i9
zzJeJOA#d#DROo@UTD%19c%O}BAnQqM(>mtsB+Dy^*KHa!896~sm-z2}gMbs1+2fg(
z`RN#A46a^hM*F(+_LTyAENp;finoI^f}Rql``$RjwYK1i-BBj0clAXrIH@g^x3)yY
zhszY(1R4P!vcA^!!IuqI>ur8J6KR+^cpf?%ne31wf`;R^B^dq~3oQQaF`O<`^)pSC
zr==GA%0=i|lE(7dbMp5<zROc>MJF9e^vY$7`43=*!qx1s@UsYtQ@4Avw}ry3vL+M`
zU6(Nx_N=VT_4C`jvkHQ^)u)bzJ7LqyN-x=#K$V4FOwgoL&8D^O*Ud!orvp#)xLFLy
zZXB68oaY@#K(ufzpE>t%Sc7gA>x}J+(vuG9ul2;Wya+(m7rB+#!!qPd{^&xy&K~FT
zj7sn)vFWu~OhP}7aOjB4LU|*rrB%H)fQHo^{qq3J^UY*?Q;tfH<&9)T{crk4U?24N
z{A+D7%{SbVFUoW>O9MX^Gt@IxCq-1lR%b%Q-jcLUPrV{l6mv#5uRBEt`Lf_IKP8`k
z`?MNGF$!7npn7bg=H$<hmX{O}QL^NYF{{1>b|{5MMjsC}5SD6RuFn@;jE+5&wM*O-
zZWR0<?VVLrT*11nNeF=i3+@smIKf?l2MF$s2Y08@Kp?mUhsF}DX`u0j#vwo&Cs^a|
z?k>6Pv(FyqoP8hfeY^K<je1yPJ*=v~YX0+^1s@ac8L1y!*y0uIlDdlU77F97Rnc-T
zvDoG~ht}y<eVP5vC+JV55R|xD&p0l<Tl(5VEDb#PJH*H?mw|&?CVF!Aaz??kp5h^2
zw`M~ct9t0w8m)^!bN74A938;x9EC3=cV`!@5LM457;#*fvM-3$hJRzM*SG_I{0u;m
zvs+&yV)%q{|E`hQ*HW*IJYfp9rCKkSppwz>7*E?dIJr!{60AwXP+-y)I=uh7+L}<~
zlsKjD?T_|*fP&S5=f$aW{33MdDp$lg!Up@;fK^L7=X7E3bbdUntLbPqH6Q+fOXy^1
zlO<PUoK-F#(E?cG#7%M?WfN6vO|!|^tn>z!?;M@f$JcseCMyu1IxcdY9Gfb8J3(ej
zN~oNhWGI|HjoyWS{LO$Ger-pIv92Ju`4>ekNM6~izt0$E3>vMU3xrio8XeRn9wH1W
ze41=Q;xptz--U!wC!LD`M9V+Lg(V9}W7)v((oyB}5tl9{L9<j6@3K5~#&d^%;D8IN
zS8LF6U0su77D#{5aenw$rTym_Ue5kNMhXmFtkpl*p~?MCoM$g{i%SIbs|=a4D|uSU
z6;yw%N}Oy<Fj}^K%R)_e76}2{HcRmeD$VVRlG_X5kGrP0ao3$kwFpM8DkA*a;+X5U
zBzAAE2}m17=@qBX9~)<lFWFK6-fb%~1l5tG^ifcB(VvGMXKYTG&gHNVbd5Xyuu@Vw
zw8|9*EVGs1OMLX6K<wI`Azt%Zf#?OR2K7Ihh_4jpww6w)i2Nx~%*O#>;I9iym|s{M
z^T1m8XAk3eP7kt6fC8;=X|+(M3d4``dca?l?eiV85*33!@Q88%F2%U90~t-Vy2%vI
zixUmdxK5{IP2-g>Xxnmm8ub}3^**)znk{>>+JXIvWr>3Yc*Rs2@CVtJxh90-I-n}u
z>G=)M-r+$N(v-+3MnDQZZlAYxp;{Fa3eX<=sq$Eu7Ckb2NA2~oKYN~fPg-KGu<QaF
z;AN_-u`?%QoI6qLt%x4Hxps=_X*cay@9^ZPo?&ns9~Z<XTV0#%zF;)iVMANf{xI7t
zPO-~k<jR^Y^Z8on?3z6sY&DxCgt?j)0!%ob5qNdl`>TvdufEQPjj`+KK3%hGD#b$@
zyP!asdSUYrPF)bM6Sq6$(%3-{DUR!@z_DXTf8ow5up{F;4qMG_dsVVQ&w+DgB8E%X
zOtGPr-(^V32w$WD^_FPIsAdT{50B|uaTM*8c*!T^&d?VmHNCq`ac>FU>=p5)mb2%`
z+l{Jg{nP~1l+i%7NXB~aLhdnvcNLH}%Gfj4(+$tw64Rklu&dq$;VGA})bdg^V|&Wr
z_iTRobIkUIIxvMwBzMA;V=8?b3ZsYd{h83J_wzMiS0i(ncE{}j0{S<=7j3~g7sQCB
zrU}(!5b<TAP!NIdlbDCpPRp6~sxK5^YvtWxShq}=jlCBR^Y0R7pUAaZxfGuB5S4Rs
zfUD0#?)(Fdbnq^?n}yCOe?iqxC^>-<XgS3>8SJbvSVtVRf?|prtGY$VbU}M6!#8!~
zIoFZVB(+N^p`A-R%QX+BCfE&Xx8?8Y{8sfbHj%hK_r9FXT;nHm9G~FBgGe1-+Pvdw
z-)F17sg=0)d<%BY=dxsRk*c<Hg!eZ4bF;*5m(>UwB6%uw_8JjyBbQJ9@yGsU9}%6F
zv&=F$cT`R9d|nVtby{K$Kw=<Ds@&|c1bY1I^*K7WKAw7d$PVEy{ds&b1{eBGq65A$
zwKoCP$^@OAmJvb{=!uvDw0I%U&@)&CR&2r@+fZjDoA>k1H7Gx)2O6Bo!ri&gby&@l
zaxDm<3$EJ8l%rBMjOf`5W1^aI4cF|Il#}#-v^<L5Eqvz>pRK@Yw1;yLZuw{i58~7a
zojefxIu$!n)#oO{yYcw5#n6c=yd9Jo_Y8)-ODR^L+xUu`sMSdBH98_gwt|I|U>4*d
zaYS8{-(%)H1kD#EZOg*Cov_Sow@KLE{!{xQYW*#~9f}ZmR9bOe#-KfA#!wDp=bs?Z
z80ID1X9tG+K|OvtfX4tQm$wM#PPV&OX9HxHrZ)k|k(_X0Wi?ghmvh+Z4TV;_FYjD~
z`-4Rq3fd^s$|)xoSe)K#VrTd~*_iuW+KqP7x<t=(WFpu5RyQBgzvQ8%l(I_wQhooG
zaWef$0ygU%sjCT#_<f~7>;DSJu9rSPXMFN>BE3s^(L-LQdXQZR<aDR})sp79itOV1
zb8QY+9DL!H>lNr3E5i24bUkF9(f8I4dtktKtw144pOH8dZjV9VY%jyd=T6xvMG*r)
zmp+>)rokjr5Ld9;Wt6~ZZ{5q1*`wTzf$^FSc#E}rJ_(5v<lzHuCHp%Su6=Bc{0PrH
zP{Rc8PRxr>g-$gj18*Nv`M4tb-kv@vg~M%g<RIjIPPg1?-&GC8Y9sroIsT#~ov$dx
zo7$fk&FNkTMqfC_&N7(lIN`)^kW|l+Zn&MGzqn89fG?En*LmpaenkF8T9x-Mem_U?
zDc5PHLZ+HSp>TCrbu90fqLGEul}^*~eWep|E$jgetqjlyH#7gG=6RlSh~6tkG}f}2
zjX=c#PI*E5ACsc06F7MA9tFJ1#r;T@xrNoEZfIulrE&g#u%asv>4i<kS>jEW_Y!yV
zQ+;l9r(JlbWkOXkn0ki#Y~DAWy6{5R`E3EG5Y>itSyY(;0GC0CvArdS&O~>Lq?-kz
zKWqQ-nui%g&b>~Q73rWThGJB1W3&ja)B8jDRfRp?vimQ}TMioj9uc7LXZIOi89;wi
z9|hLep{Sk&)Pe{#ewWh2<5?$nZRO;6Y>U7hN?$&oRO}kE9EnWJQ&Apez6#$X#u+UU
z@)>H#dGz=tsES6x#iD|s+b6>L`AS}-eFI(WdQqKAklO;YNV2+-!49shc=G(59Y2ue
zlb&eG6M-PXGb=PgtR*jcGI$|&jn?p9H%mTomj8wOC{OXYA&Nz&&=Q9?P`RbE^SXS_
zn)v$QmiilidmY54{L{XhM-JljSMd4QqNVW({tkcb3&U?$=(rb{M6&b#3T=N;I*-Oc
zIz*&9RC;GyZgtoMj)H7~#)M8kLJR@{KRV`L3NNl_JUXIowixe})eH<HU|4|RIq9X6
z_b^;ATn3jEP0CJmh{htoa;=5voHc_7fFao7Z%lw&$D91M$3ap>g^jrS+z=_yNIIpg
z{K1*8XUSS0=US3><pfZ563YtiJbJjv*qcaI5@v+9w|Ab!j3)g|^|u~H?g(|M8MAkS
z(@yN@H-g)W_n|j48zo;K@otWYP7TdT>>Y5X>xPgeX<7)t@7}}ZRe;*##)aW$y-3#c
zsfppYFx~w-$uB(aloCFykKYa4@J>v%vRT{kbywd1RJN<{JDB{lXUJ};I|}z(ccgrm
zkjUWc%EtQx64JJS{n3nT@)xE4p|C?%H_g|#I<7c&4#BjsZ~VfLq!!`CJp`zvo#Az^
zC_uD0`5{<$jSgjg@`4`?m-ke`UzBT^9doa7&*l1Y&+h{tMKIPGhiJz36Bt>2D2eJG
zQ^keF_`R`zj(1}^HArea0dH3n^zQyO7=RN{_>vC6yIkb)41gNrS=S3I(?|#thU(Pv
z!&2uaGFpdx?uLF;QJ_KflTU=Kn*T@RITg#SE1d(fje~?qtAljHDR|}kD8gvdUHx2M
zA_wDBwz6`58f%}C4#>gI8JPiLv>Z}trB^-(;&#CiG;eb=arsozX7Ex^=|?|ea=6{G
z(@d1|^k@g}(7OzRozxz}^?GCEIN4>toI*pF;a+W1xJQRi>wpku?qc3cRbAQqWX~pd
zT)!_9SI>>$Br&o!gvc8Paa?Qk&73lSx!AUM@L5ltsRsp%QGqIBE$`B}=7O^9<=-}4
zQEa=!1AKAKANE%V@()y=gNEe$T|cbRpQN{3H+H8k)5x=F&#sMgr~BB+uz1#CLlO&Z
zfF9U1R9ksTw<5=)(gC{tHTG}74tBt&?P;h9HH*|hcSITZc6Tjmam6`5iz<@z0-~S?
ztOkQMi>?|H>gGc`641IGEhw6P2lJ>tU-kVQf<7V!jb;WJU9~Lp;S{N-!uSLhBZk`x
zb#X5(9FW!u`*2Mi=~amdRbcI36#Ncxf^)ewN59Rf+9r~==n*9Z(quQQ<MP>z>qxxJ
zhZ6(IF&)S@jB{}(zhKd|ppc@gg3?_=^aoA!VxFu(N_dRbY@R`zz-`a$dOwEggd71d
z^15+ty_MCTtCPjhgoeaI+$)dxXeB5_up(^+nN?@cDoR!Q6$;ZYnKh*d2V6CWlEr^O
z;Y}dorUI)P^Q-(C9-yMIJ2>W3y;Nx0QhF46;l4l<J)r;l6=o;^vv-l!4G2Q;q0z54
z+LO-+Pa0E`tBLVFyRBsGe3#lFcv+L=)SA@LJt>iR$JFp7YO;LxlHr(?SU>Q#Y8Vzr
zM0h#--<+WNEQZ+MS?9y;vepc##wNL=e+Y(Jxy+>I{aOh<F;%T3benhL=fgid)b6%m
z99l#bcUx`?^7Glrs7sqECjsdtS^CybD#nrpqtxYvwxg66V5)S5&UHe+*cK3`+6yoF
zN%G&5rXmX_?e2h*?n0d&Bd)Ju?1Q;42guMWP(nn?*!DuplhT74zXbK`lGXY@=*U0?
zeoOjRk1Ov{Eu))9tV81jnT0uNEczO2nc0{MlKn{hnHJ4grviwc^7-Vpp(=Q}`QaiW
z5TPc3jkgPWx4R@`|1xpX2in9T&DDuosk)nj!Xc}QI_$qF(u4240W+*6`pbcz-$wMT
z&?{j1oElKaPjcI{vH9yM5P7ODfN0%X=Qrb5YyFLFKA*j~PD)cZV0R(2L(fACvyY4M
zzVc=B+?Zum^2NEM%@E~I9<87fO-qdm`?%iSEP-GDh?U(iN$TBXgKSnUsuw!q4i}11
zP^~Z+LT)+2g4v!(RLTs5XuMbm!d^hQ+`Q}p<d8#HbB2H01v<(k)25v%u7n}U`{!Pe
zR42H>GVg`(E3&I5=?P2A7#k#`h7H_#L{wZX9HH|q(v-N*FB3zz!m_5ltcW~ScqDjm
zud9WGBSt9G;I&5V@$f(mk1ByFU3qbnVw68e8w@Puarg)&2hZ*#bzSb}x!5(V(8eJH
z2lWCDMz7U_-S#9c2MY)J%a0wGLc$fR7*8(uDysBdpb7(W@0%(Z^7StHS5Q}wwB)z)
zu@miGC3<?4_e@@m>tcH8y5ArZy?{bcBSo2H%P;OrT$<=89abCA&$~0R)($h9{Ne_!
zm{>vsEg%rn&}r;id8JBARII23A@-2=SSB_h$n1Cth)G#@?ihp>-VHw;|Lk+}<~An)
zH4d#`OeuN1#|Zk4m}XoafE?HQC5v_S36KF^aa5bzEY%*&->ggz<%=)kQJ0D3oUPA`
zwvvPRWukz-tV$q>;Wvw|x{8X!s%qYf3;%4_{RbP?0GDf}zNR$1VcyO7TvD8r>y6&S
zrc6CPLBvx~y0%|T>n<jp@W#H`WA`7tdg8DbTRf!#%Uhr+_f1$My+1=-jr{Va7&?Df
zB6^}e@g$T+-|omLDl<1?cKHeFu~->0-q$?d3(pE{v#~bx4+SW0k!_p`V|uwD^Gi<v
zJXk}<v%7M%AoHWN!z!PvGC5z1Vj{tpur+qGMOTwRWh>zHj<a@g)%XIIm!7R5FBxrW
zTyj|i6H%Ofj*eUV{6^JwG`b$SM<b(6vl?deS?}6oO|d|nxEFFqu7Jb63DwmuZAE?9
zRZB2~s%Jh;!3<`&pO$fuR%$&yF4tF(m7phd!PKfXTf(Smf3Oc{9C{#WO|xo?44K)C
zDj0Y2ax%(a@yUz5sKH9hYZ^SIW@8a%Vv5q`p8@~^U|?8~hc7Nqerd%;QWEJ3fj{WU
zKgmf{HXs&mi;$u7pYBX=eR6}p{#A3N{Kmt=Ep;vJi2bJAPoYi0Mf}iBT(N(}kdj@`
zcYb5&SlB-%*Jv$iElFFTu2E#lItiNSo&V%3pI@8leQ{4%Bs&<@;*;FVJiFZAn@6OK
zx|SH0;3ADH2jv5`A<z!$OUa{!Hsa+QE6qGqeM5Uo7R(*MEpvtW*}*d(7JOFqS9;3@
z($@3}IP<66aY5s3QAK%V+zB^cn7oC#uS=~bGza_gpJF+1q;ysB3nvO1UP?voCpAuJ
zP44WbJ5P-FZ^@5eHVNUT>Gqww$F<-8Nn}|d&|k-v+(4&^?ttZ{gVx-vX2&&I9M*oT
z0%dyF-GzxLEGGa3GEQ`ek|P2Iw(a!=SBqI=2By$iH$<WsG6G|2aCve)H&=4PIJ^Xc
z{I=MaXKed9{xt?|%$1uglD8Knzdp=b@PJXr*}NN!FC7%u^5ObK-@iWMlYm_T%$P{V
zx}c)v&!36Lc+vn5YpyR=VU7)TunlmQA|{T}pJSUM;OktL6kCgZTeFCS{Z$8{YZO9>
zi4`JI_DRA+lqg59INHA`>y4@(HxUHuzStJzMyq}(JZin{Y7Tk;n|%`P#qCluMm~^p
zh0i;?OOq+-gDG6GihP)yyC3h`cp1G{W{P#TceRqG<;wgAp#it!{)?rb)Jx#<wz>0%
z`vho-IaXnwPeS=;RGhe*zbH>-@Ce~|hV0z7voCB^)KSD*i8HfH{W?AD5nC1*WSJ+w
z%PKBoo_Wlr{fd@D%x=SO5yc1iUXOrWXMJ0o0jAcC2=7*kJ?cDcEZEz~Zvt&OhOEdx
zT(go=cTM$P$1APa<H{ZY6-w$2vHN`u33<kNTHtxs;z!o<*XC;{hCvl#BniZ`QyzaH
zL}YyRD;phuOcjg7`Pw1{pJc!EF1LatI-fU><77AZEulr!mSf1RT<5}sQ<LwvnqFS)
zx$($mt2Q?V;NCZv*n|_*R}TQa9LI^rGV8+P-=d_XUB}OCUCv3e&gCgJ>!uQ20pmkI
z?nz``Fl9U4utq|73A^$5HlQ4*44fSw#rvbOHr^U1KI;fH+c4F5w3@50KwRClIegPd
zbw}v~_|7x^Md4ZFO+1*K5FM6ol<jYPp7qnBb#==Z{sa8YJ*u5igD|vAzq2on25lkt
z_{@mYup=aR_Nfd~;;Gbe6i-Re?trH0aOs8YQg3L2O(skTZh7Co9N1wiud9n+aN3Nh
zj{`&E=5B6;D%}Blb`=8K4%-{};}e2@g7K<k^k-<MkwD0yN#v5;7Z4j9R{oF9*dIlv
z?^JsOUox`-i^sgxS-91A<_(;FctkpBfdU~#2&&FMUWQxtSG~4%sa70fYsh!sHQUi+
z4ZD129`l9*T4r<lYwi8LD?OMzZ0$BY3AZxBLA>$QOi^d7O?;{LX?fnPN854ukZFwr
z65s8%@?VF5w3<B#r{LXh2WJxOQ%nCU(k<6sYSduN?WIwNHwmNUam!dke&uf0#0jH5
z>2?Ba#?3Z7Ju*@RD%{rlS;6fT^NK(Twpmj-IfZgRmT1@IEiKbhgJ55mm!cPjdlPY=
zBy7vrijKu@v76Fu3eowMl0dB1z0+TxD;l%aUS+%MDH{h;^`}nq@nhw_`*dw|Nf~@8
z>UD7T;!OofmW9)=<E1g%O>I*S>;$we_3%0`p;#+FBv@B~qtd8c&CQ8FSw+FEWbH_i
zeb@oLFYgJP*zv766q$07Ua~BS`ZYv9N0EI3-;JQ`Jru(c;tOJ}k7d}CpXYp336xzg
zkajv5-wOJPUFYA-0s8En{+0iOr@A17Df1f5rKTB^BQ0as>hTPKx@g1=A2x3<jcc$I
zZ4KNM4KJy1TqQ{RMb+B6GXH#V7==^F;lrvL%Jaj*0@XY#bpOK#ybXMp)HpIuY7}M_
zNna<g%M}$0sqoZ;*nS+~qHjXTZ!d`wP-&I^`P5}}WBlGOSvPOH=c7&jQ^0Hu8)GT!
z$4HOPr8JpG`Vk&@s@V6IEC2VE(`0m+b;dvAGpn>+o)15p?tN=<4x>}Eny0!c-4k0O
zE8{Jk<+-*FSI5$<?zkdaF#qx0{S|tr@wm~R`SLqX)Pn2snqTcFHueF19Ohsr0BB;D
zqWsytq}5X%+gsqG-2-t;aicv|_I#E~P>5kznLnP9`6^H}R}}GJ<*39q!SiM|{8II9
zezwwqWyhKDJ-8$;xs%sbY869EwY;QaxX^{9YroG<SzAV8#<qnY6#nOJ0E{bmX6BL2
zKOs`PxHO=CTv=GW@I6}Nrh=O~((e`D%ZlP3;50?Phl8FthZ{}pGZY{?T9SRKHEa;#
z;A#XkP3Sbp&$jUI*&{i>eS=JYJ4)zW*%ZT>RSG|TAC(bHT`Bf_oV1ZI(V(&(;ghuY
zB|=Rd|FYwlnmq7E4J&|HukZkGhCNZe_NAJiO+ww-$g(iIsHH9fX>9*KRVJv0L4GR`
zLN$1gzFALCZgf04m|8}{_@YF?sy!3UKfrLzC0Au*voc*jgFcqe(>U#a&;kX<)c3-u
zF+O1iZ}4y(7%U1Bn+N@sjYK;)VZT!{XBF%!@>8daGaq82b`fq4?Tj_M6pg%Df2c8^
z&B?XSrKH<t_2gB5Psmc+gqf|^Ho4CN-VEjYP_j@7Yhm-t7TbhJ@O~8!Am+{IjBBy8
zS6Y_xwO%i1JXqGQ)W|hht(gS3FnH$V^zBihQn;11iY1G8LS69g;B(o0zFVxbHy)k|
zUgDxvot-0;3oGkorVg@vgN0waIG=Vs+mjeIW8loKboilWeIy;-gf0ob5O)~jJ7%h#
zdvc1*;13Ry)va{uB54P41r_iPxlt#-cEP3k7R`izNOF^|luLt(vF5%Us$kCAJbIMA
z{I~opja`vAMNhK;jrKRyT^yX-=%Lb0VM2AgYE5k}iRgrWU+zj5=fZBQ&+CTQu%uet
z?m4!_lxj=HL6xeL5{9xh132z9s)rWW8TAIj!puVMy6leQurw3hKl)Et`hj(gV}43R
zRNj6axr>7YC6Qk%iBImho_CW@GJtGW03SHNER>xaK}FopkenQ%Kp)Q*j~*H>wXEQy
zbu-xBKt%nyJFQb7!6=Zznf!C<&k<s5WxMiXPPaifQ1R(8x+MSkFcAIIR=k>M*IG}2
zYpt9s?BLn0N#=EN(>%*+X2!$Xiy?mr1<XC&K^I9AgW175Psiw7=`Y95uWnEpdrE%W
zFKu|YDS+jgQqJ6Kf<*BEzmL3Nj$5`<Y}4_q{+2{FhE@)>t)J|q%*7D_aC6%O_|x%3
zBF3L^D2oUXs`iv}atUt^uvSYZ-|*OBtEZ4JIhUH%2_)Qn?Uz+nt{V=29D~Lt#s&oA
zsBq#Uf=$fNdyz1HKU14Ks{GEP(R!a3oe@_s&EMnQo*Z_F3nFW3P)bt31O8opDYT^F
z*J3$BfI@0_R!IqgYhUwO;j|(6-o5Y=qD-Y5T8WRtRj1T7FQo}`j!HX_RFEE4mqz9h
zOr7+@riO4w1?BS|Gkdgmt-EcE9*gOH0x2t<3#Ru$pNk>KJdjD<!%^@owwq%xF15qN
zoZ_VCt%K!kvX01yX{dJcp-^tQ^Y-=ndjdZ!`^fY70s6`WcjY+MA6#<~<*MB%EGJ5I
zab$?m+8?xZKl1|tQRkrp0C8K<LR`O%vM#AlQ%;Rb|JmwV_>&I!q~@|}k1eY01VIi<
zn56j)XWm2G!lCD>6GY?{SG9q7>BI)?-;uf@9#M=Bkdcl@Hi)pW{$fO+)!~i@vO#yX
z;*6WC;bGzlkr3lTp+;d(G|*F)Nv}9MI27}{5LJp-Hj9k@x5zL|4%Cvo+7Tse#`04+
zs!zY-YbnJe9*34fzh1w0zGdGvEw5J#fJvzA=Fs~>8`_y7&3u!1AN9~y;=F8bk5ts;
zJMX;XkvR)8i1&Gn*|(GjAbarwZA1HYjy&yA0Z^0RvBTcmSVZ#bb%*fX5bF+D!~l7s
z8x$1w`0}1|+&Fpb=Z=fw&5x=bhmA!L<Wyosk$-ZK>6@$;#&0p4XC^PEv3aqn`djC%
z0^(wrn#m-iFTxl26_5a4^_}LJIVvm8^yCTDoCuv?<iHq@p+PYWDlWY=ftT}kAVlD9
z`{SPi+;_(pj6;Z(&%=rFa;lV-yH+Ai5qlim#&Sq~s^<Hy$osUNTZ#)UwL8O~)?cV+
z%$mlla@S`15+1_r-9{1^Bla<kCinHm(w0ihP)4H*(6lIBXIQM4_irqpO!zAgO<Le1
zleLk;1HKV&KW<ZpJ#Xv^mB{EUSgnr9YGK^)%52l;>rU~-v4xbJs-MByX2Wl7oZ=1d
z3jAp(E8pF6?6Nvx0_P^<(<+2Zp;z?&^&MNTB^I++&zHCWtt8-!h2py!W!*m<VViRv
zMd6UIYjd_hbgua0{e+PG)|4#6z%lDvx8$1o_P$LurPlnRBJZE|ubaqbnZPvwj^h?;
z_SDX9!DS=kW0Ut|x0<!;0DI2d#+hL&@x<f=`$K2O1)&Q=rt#<v4+_`TG1$6PkQJll
z0pf@n2^UNVSK2GymaFMfl;+OJr+DNPQ(M)|nDDe^O<dHyX0Yk02hRjS9|id@<n9b+
zEQ$Lg#Cki!NxG>&9s{)l1sWzY;@vdgiruNr$crJcpgFll=s2?R%1Mfwibh}DI4o3{
z2Ky|YrAr$@s}u~Zn@IFzc{UR)e6IK&BS6WcAlSuZySB;O3%|=8Bs^~PEfvOg5PvGW
zmc1^op$mzhz~`ETSzoiu+|H>%4~^ITwS9*1Bk9Lj(2t|NG$=<d&#P6?{YeH0tiC4z
zLa|DywhG!<zeKAJn<sb9zaC<SEB-djS0t2Gf8Gq!>r<emG{%z{_ivG|lf#crs(m%x
zTUkeVHNaBLV_xCG82y1q|1vuS$_c9;v2|2+J?IMd7meK1p^`MR+j{dc$m;FNJ)?SS
zcue`+H@sE^)gC(wOsvwXl-<3l(H>U6P*IWOXNV@;*PEs;0zbBW&_$%l%Mlc%c9zE#
zjWGS7RGI)-_-i@wIAlW?!-c7YM`+PsCiMAD%O-nKkDBrn+lT;W=j1{_-~6AV6(d@=
zqO^3UuQM?=I@nAYu2WesW#}9fKGX;cEA}OM|IZdV-Wy`UcZpm;X+n8OJ_(hu!AHQW
z0EXI|2)rAXy-*;e?+(n`;dLsR^lpve4_D6D`RrNHoJ?QW?7LVXUdJQp4Mzq{wYy6d
z4t4u2i;K7knH@0UXEd1W_=cxZT7u_KAJg2NuB6Ba(%hot^Td41*w6V2#WEYsNkdnB
zx_vOXOiT2$i&*myjl(BCkcpw<6~lUVQvOBYE+$dVg__5wL$tb+To+)__m4fpN^Gtc
z6spkNoq*zTLYzg><w114+z&T6Y`k@UI-TmJq*PJjUpj9cQG-`?nQF3RD-OJfd_2Gq
z25I9F^u-`V(r_Wz!wlbRS2Qj5Q;KF0Rl(CHhwz^u)i0RrUld)ZkWLS~1@_!0MmtUF
z_Pz7oLxIlzl|@r=+Y)bn86*z+(?fiX_w+Zcjmak<J^Zqie8JE<@!BCUXNwy3*@}yC
z$$_bi&R)N51qt)+zKF7SRp%$*k~jS2s?f}MZ9){M7*8Fth&4JksWrJB;qnCm35H;d
zLdf{bblclay*I_{+2R_c9RH$x*rph^PD>!k>c$eYN{*SMXa^}!UO$Ja#>O}6?D;Ji
z`@GYW_&MG<ynbWkj&kg>P1FXiY;`iUOT7(&<V2RG`))DRfVex$(JRmg%P&V|R2&=R
zWIhf}=aZ6cu1)0OS7zz^8AuKttpI@!$K0z9m$mldlMP9_rc3yr7az8{)QD4+H9Bsg
z;>Iczz&sA#+0jMUrn$VR7(XGll_B$(+E2q4CXu(5Qg(pZyNcRI9j$q%Q87b$PpcFD
zN*dU_?FLH+r5|&SoPpcy<s>UiB>;bXCgX$>Pw3c@<H~|+{Y-)Z(zHMXX07CGRFi3?
zzi#8&m)`;=E`rUXnQ1M#e)q1$n#Y=T*dAjV?Tu@BndMqTD{<*|J~OehrlXymiOT<0
zps<Mh8f%8_0N^4=rzK&IdHeC-e{Qs3CnmKib(6P~O|B9mAUi|8d>Y?MyWa1(LpIw&
zY%DsS8=24Q#Y?xb1FMxB!c>fPh%546XlZFxMId;?_cOn6nY;GUgSrJ6)fmVb6zP>^
zFL3;MgyT^qL)x3Sp~7xZC+!LG?5}ep`^IpFGn#Gik7yyYr>~!0i~Ct_A&>fDn<(D1
zK%o}wFBs_KL$`aeWum0DH1X-6H~VlIwu#)2uc#N;Q5_um$jwZ-Koitaez|@xO>q@n
zO-q~xf71M3P|E^YA(Nh)g>b^02a3xC8G*@t)n>7p{5>ZD(X6GzLBp?VEaL0t5xqd@
z-S!%U)7$tN<WkrxbvRkYM6d*OnBp$f`)g^1p^|j3l~?0)r4w?pefQ_efk)sj5H<05
zgswq6!ReB`IV{~+RgUU5`sExy(W?!&LNRdUg+JASbFL7hZIAi^eQtcI@-lJ}8i1>Z
z79G=If1&!g)!u3#85Qpb80Mr-o;bHW;z@h0ALAb{n6O!~)Poq3I%r#QYPr?ybFI_u
zG*(c*rlCA;_pPLge7fbPAU{iN(kl(1{nX?lz+u_!R=KW<jN$&EN*Vcr`UQ1K=~#!A
z+xF<>GiV{sXtOj9nNw5423+kgik%@r1eX+gBz=kcoK*FLn?(|F?VXN<W$;xl^g4{B
zX70HB2eBXGaB?hex~s7@6r5qm`US?Q;anFaFO{P)@%#@W8?QIFbVIf*+WyH;A5^#0
z&7RKCCWjP+t#P=r=9ni|NBnkc@(H6Yk4ENJ`p(s$@J_H5zT~K<NNm_{v@oYrnu?U7
znqRm^!>pdgQ!8FC_i(*!RK+z$9^ao<3Y;QySU#-{!HgvPb%saUABbF59?AZqL_*^>
zI?LQF-QMkFwTjA%K=^GOUFx>3u-JN{{?jr4-?)WUsaA>z9}TCgs(_Tzm<;Fsm3eJ0
z`&JIXf^eO1n6rhA?X}4f{MGUir?QjZe5IMEe^H^OaEnZfE`4QP*87aILJvBqS?A*N
zjKT;1gy`-$uoslTpP5XXbWxf$!Dgk$k3jo`MNLF=W<D;ict0I~fBmc<LU<IH1x4{$
zvA1_pE-mNvCdw%bmTWFFm!uy#(Oa|QpKEbS>ApH@)IBC@|2^azlSQpaeU=VS?Rate
z0_wmy`X2v|OMR>=SKrR<ev(_DX#ySVqFCXczS?Fa<coYh(ur}C)4B<)WytP^#}{Is
z?az1eBu@IFMeW>Kbs3mEHZ^b5aW`X|EmNXTyF~cvH936X5f0P2G#5R~?Tqhby3Uze
zu5BV$*GF>4#S>%kLrGD9DDg!iEWgugwl2~A14UiO$SEjLuxv?Da6b63?Kg-vk{!wi
zBZFU}7%5UPQ2#j<m+n=xF+jHl&K>4;8kX(QrN)XTxd>9qq(+B7r(=F8To)**@#P2j
zLSh8TvKV+}Mw}ZE@GG?1apP`Pxz!Lb`bbErc;-GmswI5v5{me7q>Vwl9Q&rOi%9oP
zAIVQ*<~az9E%S_`0;YLbHfXVpsim|xM%1afMyW1n(Qva+C#=Q#2laC0C`x4Xzxmbv
z>$(fHobg4QMBUQUP4Vz%_=-V^*-D3S(UaTNh->p738MPm1v3v+S_|T(F4~FnpVY__
zo|xoJy2Bj1F<@vFR}N~yA#v7qC7cxa+2Wgd!XhIg{ELA>O(hZU5}EHxSMZTGA+k)Q
zW{4IKPy2PsiHP2^E0xlBibVOBG9R9RW@ygnXCCq~pWM<G&q4I}j9WcQXyiX;;_s!p
z8!}NtI_e{e!Tge@Gg4Nc6u#K5Ei2MEwTZ7den%mF2GG^|{wXnmizua3DZ5sdR5bxP
z0en}Jwz)ZmbYBvqPk9Wp@(~)5={?sUhK_oY*oYK=ua7T3VGx}DejOjt&2Bcw-<Ef|
zlc#>2`MB{=;CA1B3J_)Ghk@BElW*TRZZ-}H+tFULw$-wjJ4CwDQ%X;c?j1;}?CXqm
zT;T*3%7y7tC_)hw#@yoK4NU87$EMsKpUWb*a(-Z0;vB=ozrZI1Y4*=QISB)?w5rnc
z5{O3A;yg4vl$|Lm@6Hl$A@{NQt&I$vN(ZH9Xhv0lRiC7f)RrlA>s)Kk+8j8>2#*TK
z>Ti9?0hb+^U$@n0CO<a`N)MrR!lr7;_J_}C9U5YC7S|S*Yir!y8@p9O-|VCo=L4h}
zm|wC)MD>?9X~j*GijjDw{3p=*Ux?mofik+EH%FREixnBY2bXVf)%^<4qFH}~T$-;d
z!~rgi*A<Sh33!AJ8u=U(TSshN?{%IzH=rNI1ae*leO@}(s|eQ^7Nmchig?a@qM2p*
ze36+pc2mU1;J*6nEo&kCxQ}&{RnWsf`1tiEb0%pQKx|wO&H;gVL?{j%meoH^kPgh0
ze`I5b^xZZ15)l`cE;OpHEp;$YVxcX*gpIv~i-leZS3IS95KsWK#S5;P(Jm+nlVRmx
zs0H;)QQ<lG(K&0_;kcd}9>i0kD{zZ%-M50lf|~0xL`-^<SL_pec(E>b7uvTYz683T
zkYmejIl2R8?8FX>uiK4a2P)AQ@$<28mu9jKO(~#rf;Y$6&{7gyvsz=O)Rl#8Ry3<c
zk}hc)jLQ89kwE<#W<nw8!dqS*E$78wUoYW#NZ;C`(>#4iDIV{VrBkZm&%-`kk}1dV
zzlRbSRadxm0oK;vP|`JqFBvj5tKI{fLz=@8nk$(M7U)B+yPeK`8jg`AHg=d<E1mMx
z=xA0+h6gDH{9Xs7n}WgWBuDD}bI7MGDvrw<T=W1v)<VnuP!(dO$03K(igzD>az=sC
z5W!51`YafMmSa3LhKW^Qe+f|Huz|C_l9OC$Pn=ua8GEw3{zbu&bXubQX@5u0;z_6S
z%ZDV^%0xkp07r)B3FK_nmS>D?NC$?b<Pl?Z8?{zg#29f&uRIHKdE6K4uYfuw3{VcQ
zrFu3!(eA_-e9)k}5vzrT*EOylRH5IcQ;o!-K3yP;6Ad$2rQVH)eU0{;jMqQz0vjJ6
z+ES;F!rHfstP0R$oe^KP8NjLSW_b+FhR<g)XoELj`{Xl~(PQ7I%FWBMY*4f*H<YPd
zNfJ(mB(b(Z1?TT|^jWA{u)d*)yr|+_dzcFd+4y(T^uJZHe?4+=Ixi#db@G!SVYPhE
zT@~n>IzROeKSc>>>r*lBT)AGwi=(?Y{zo(mI|Ddn@Pi#~E}HRpH(dfSQ>?!v^0i9{
z)7@x;`1QxNq$d{FI`S_H=F{+)e@Kg<a<>?o79-Ud?}Z-L1iuq0<VU>JMD@~7U5rvs
zyS5jb0ev);?5Ek<>a7u#Rk-WTH7cSSJ++rM@FYSl&=l4iTu||@kMS^9LAA2=R7>_q
zln{p}er%_S(COt@Bat4KwI`N;lMt^kW<Oo9w_>!1J*c@fvrY9=D)HD2W`%6+ekych
zrnzrgJI|rg<@&|V8=Z15LFR|q8;nOrb)$*{N><R3Kv5Ydvp*AOez}W?T~I&#LaFi*
zWO_=}+q!7@xPSkA|9!)ka+_Y3Rukn-@#K<%GBHTeUli7o0V|L8!$WFIw9%=7MoRL|
zQ|$%s7Wm__;J_=tHX82z^w=6?b4Fa7vyS2Ctb+;pCE5aPtI@T&a@SMs!i!8vU!Aua
zX|=0u&rjA>9-b0C9$H;#-jL|=bm5XrxU5}Asmo{3_$f56HWF4P)Tm{u4y*ZcXS%;L
z_NkG&D|I>*1xf0t+-95>HQe9_jmp=PX7vl)r@M8EVz^CMTlu;OX0}fCU_26^=qCHk
z|3z73v;N}eV#XR-t{y#u=iSd<6b2S;Mzmy?h6@lA9|q&P8Yg;6(Qxp^eIXxP`4bk1
zsZ8gf#zkWJbjQ;(rBXaL|7>9*>dVG>4%g1tI-Ve6CGnq#7UnAU5*${A1T@+bt#JXS
iBNu!>*4_VWS04VK2ju_%H~de~{9kka|DDmlGye<c)iOE&

literal 0
HcmV?d00001


From a4b39215eaec0eea13351c55e05ba164084e19cc Mon Sep 17 00:00:00 2001
From: AJ ONeal <coolaj86@gmail.com>
Date: Mon, 8 Oct 2018 01:19:24 +0000
Subject: [PATCH 30/31] add perms to email

---
 lib/extensions/perms-to-email.js | 12 ++++++++++++
 1 file changed, 12 insertions(+)
 create mode 100644 lib/extensions/perms-to-email.js

diff --git a/lib/extensions/perms-to-email.js b/lib/extensions/perms-to-email.js
new file mode 100644
index 0000000..80bc9ac
--- /dev/null
+++ b/lib/extensions/perms-to-email.js
@@ -0,0 +1,12 @@
+'use strict';
+
+var perms = require('./permissions.json');
+var emails = {};
+perms.forEach(function (p) {
+  p.nodes.forEach(function (n) {
+    if ('email' === n.type) {
+      emails[n.name] = true;
+    }
+  });
+});
+console.log(Object.keys(emails).join(', '));

From 4d3be3904321e4a90e99947105d622d08572f5c8 Mon Sep 17 00:00:00 2001
From: AJ ONeal <coolaj86@gmail.com>
Date: Mon, 8 Oct 2018 01:28:29 +0000
Subject: [PATCH 31/31] ignore permission files

---
 .gitignore | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/.gitignore b/.gitignore
index e1e5f2d..73586b6 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,4 +1,6 @@
 emails
+lib/extensions/permissions.json
+lib/extensions/permissions.json.bak
 lib/extensions/admin/sclient/dist/
 lib/extensions/admin/optify/dist/
 node_modules.*
