j) UdZddlZddlZddlZddlZddlZddlZddlmZddl m Z ddl Z ddl m Z mZmZmZddlmZddlmZddlmZmZdd lmZmZdd lmZdd lmZmZm Z m!Z!m"Z"m#Z#m$Z$m%Z%m&Z&dd l'm(Z(m)Z)m*Z*dd l+m,Z,ddl-m.Z.ddl/m0Z1ddl2m3Z3m4Z4ddl5m6Z6ddl7m8Z8m9Z9m:Z:m;Z;mZ>m?Z?e.ejdZAejddZCejdZEdzdZFdzdZGede fdZHe ddeHe$rdndde$rdnd ZIddlJZKddlLZMddlNZNeIjeKjeIjeMjeIjeNjeIjee#d!gd"gd#$Gd%d&ZReIjeReIjd'd(efd)ZTGd*d+eZUeIjd,d-.d/eUd(efd0ZWeIjeYd(ed1eYfd2ZZGd3d4eZ[Gd5d6eZ\Gd7d8eZ]d9e^de^fd:Z_d9e^fd;Z`deaebdeaebfd?ZdeIjd@dAZfeIjdBedCdDdEFfd(ed9e^fdGZgeIjdHedCedCedIdJKfd9e^dLe^dMehdNe^dOe^f dPZieIjdQedCedCfdO>OQWQ`Q`a+s )A??Bcddl}tttfD]}|j ddt t |jtjddl m }|jy)uCrée dossiers et tables, migre les anciennes installations. Idempotent. Appelé au démarrage (lifespan) et par les tests.rNT)parentsexist_ok) shoot_service) adminrrrmkdirrr8 init_admin_dbr&init_photographer_tableservicesr<init_shoot_tables) admin_moduledr<s r7init_allrERsa!*l 3- t,- IL 002&##%appc>Kt}|r@trtddj|z|D]}tj d|t g}tjrddl m }ddl m }ddl m}|jt!j"t%d|d |jt!j"t%d |d |jt!j"t%d |d tj&r6ddlm}|jt!j"t%d|d tj-dtj.t0 d|D]}|j3t!j4|ddid{tj-dy7#|D]}|j3t!j4|ddid{7tj-dwxYww)Nz*Configuration de production invalide : - z - z*Config (non bloquant hors production) : %sr)run_cleanup_loop)run_backup_loop)run_monitor_loopcleanupzleader-cleanup)namebackupz leader-backupmonitorzleader-monitor)run_all_organizers organizerzleader-organizerz+Meeconic Portal API ready (env=%s, port=%d)return_exceptionsTz#Meeconic Portal API stopped cleanly)r r RuntimeErrorjoinr1warningrErBACKGROUND_TASKS_ENABLEDservices.cleanup_servicerIservices.backup_servicerJservices.monitor_servicerKappendasyncio create_taskrORGANIZER_ENABLEDservices.organizer_servicerPr2APP_ENVrcancelgather) rGproblemsptasksrIrJrKrPts r7lifespanrfbs)+H Lw||\dOeef f IA KKDa H I J "E &&=;= W((yBR)SZjkl W((x)QXghi W((yBR)SZjkl  # # E LL,,];HZ-[btu vHH :FNNDQ8  A HHJ nneH?HHzMeeconic Portal API2.0.0z/docsz /openapi.json)titleversionrfdocs_url redoc_url openapi_urlT)GETPOSTPATCHPUTDELETEOPTIONS) Authorizationz Content-TypezX-School) allow_originsallow_credentials allow_methods allow_headersc eZdZdZdZdZdZy)_SelectiveGZipzbGZip for JSON/SVG/text only: photos and zips are already compressed, gzipping them just burns CPU.)z /api/media/z/api/portal/downloadz/api/admin/cards.zipz/api/admin/exportc6||_t|d|_y)N) minimum_size)rGr gzip)selfrGs r7__init__z_SelectiveGZip.__init__s"3T: rFcK|ddk(r:|dj|js|j|||d{y|j|||d{y7!7w)Ntypehttppath) startswith_SKIPr}rG)r~scopereceivesends r7__call__z_SelectiveGZip.__call__s\ =F "5=+C+CDJJ+O))E7D1 1 1((5'40 0 0 2 0s"=A%A!A%A#A%#A%N)__name__ __module__ __qualname____doc__rrrrFr7ryrysl `E;1rFryrrequestcK||d{}|j}|jdd|jdd|jdd|jdd|jd dtr|jd d |jjj d r|jd d|S7w)NzX-Content-Type-OptionsnosniffzReferrer-Policyz same-originzX-Frame-OptionsDENYzPermissions-Policyzzclient_error..sSXXaggi(rFzBrowser error on %s: %s | %sN,)rate_limit_enforcerr1rUrrr)rrflats r7 client_errorrs`y'9&:;RF (DKK.TXXT\\@RTXY]YcYcTdeifiTjkA)A+exccfKtjd|j|jjt j d|jjd|jd|jjt|jd|tdddi Sw) NzUnhandled error on %s %sz http-500:zErreur 500 sur r: rdetailzErreur interne du serveur.rcontent) r1 exceptionmethodrrr#notifyrrr )rrs r7unhandled_exceptionrsMM,gnngkk>N>NO9W[[%5%5$67?7>>JZZ[\c\g\g\l\l[m9n I../r#79 C(NS> A"=IS= Jc>!Q3?Nc?&+DS&IhsmI(-r(JEd9oJrFrceZdZUeed<y)ConsentRequestrN)rrrrrrrFr7rrsrFrcodecddj|xsdjjS)u[Mayúsculas y sin espacios: lo que la familia teclea ('tst 1001') no siempre es lo impreso.r)rTrupper)rs r7 _norm_coders' 77DJB%%' ( . . 00rFc&tj|s tddt5}|j d|t j ||fj}dddr |dr|ds tdd|S#1swY$xYw)u9Famille connue en base + son école (ou 404 générique).u+Code introuvable — vérifiez votre carte.rzSELECT f.*, s.active AS school_active FROM families f LEFT JOIN schools s ON s.id = f.school_id WHERE f.code=? OR REPLACE(f.code,'-','')=? ORDER BY (f.code=?) DESC LIMIT 1N school_id school_active)r$ valid_coderrr/r% norm_codefetchone)rr6fams r7 _get_familyrs  # #D )C(UVV DTll Z=**40$ 7 9:B D c+&c/.BC(UVV JDDs 7BBrcHt5}|jd|fj}dddDcgc]R}|dd|d|d|dxs|d|dxs|d|dt|d |d rd |d |dd |d nddTc}S#1swYgxYwcc}w)z`Catalogue items the family can add next to prints and digital files (with their example visual).zTSELECT * FROM school_products WHERE school_id=? AND active=1 ORDER BY sort_order, idNidproduct-name_frname_enname_espricephysical has_imagez/api/portal/product-image//z.webp?v=)rrrrrrr image_url)rr/fetchallr)rr6rowsrs r7_active_productsrs 5T||r&L**2(* 5   ghqwi$8Qy\Y</1Yzget_photos..<s!Gq}'?'?'F!Gs##ai_max_per_family school_name rgpd_days ai_enabledtrue) rr$photosphotos_pendingpricingproducts consent_givenr%r& ai_remaining protection)rrcore.rate_limitrrr" log_eventrrr) get_settingsrr$list_family_photossumrpricing_from_settingsrmaxr' public_viewget_protection) rriprrkeyrrsettingsr,r(ai_usedai_maxs r7 get_photosr=%s} d D 7 B7 2$ C#Bs; >2Xb9;s(S UC(PQQ$ v;DK I**95H\*+MBO] - -i >UWFGVGGG -. /F"=1 '6J(>>xH*95'";/"<0F:Ivza'!12-889K9Z9Z[d9ef  3 sAE E&CEEEz$/api/media/preview/{code}/{filename}fullz^(full|thumb)$)patternrexpsigsizec:Ktj||||s tddtjt j |d{}|r tj||||d{nd}| tddt|dddi S7G7'w) NLien expiré ou invalide.rrzPhoto introuvable. image/webprzprivate, max-age=3600 media_typer) r$check_preview_signaturerr[ to_threadr)school_id_for_familyrender_previewr )rrr@rArBrrs r7 media_previewrMOs  0 0xc JC(CDD''(K(KTRRIR[--ixN N NaeD |C(<== !02I J LL S Ns$A BB!B1B2&BBzC/api/media/admin-thumb/{school_id}/{photographer}/{code}/{filename} photographerc Ktjtj||||||d{}| t ddt |dddiS7#w)NrDrErrFrzprivate, max-age=600rG)r[rJr$admin_thumb_pathrr )rrNrrr@rArs r7media_admin_thumbrQ\s_""=#A#A9l\`bjloqtu uD |C(CDD Qg?h ii vs-AA$Az/api/portal/consentc Ktt|j}|d}t|}t }t 5}|j d|||f|j d|fj}|jdddtjd|d|d|d d d d S#1swY/xYww) z]Enregistre le consentement RGPD explicite. Idempotent : le premier consentement fait foi.rzkUPDATE families SET consent_at = COALESCE(consent_at, ?), consent_ip = COALESCE(consent_ip, ?) WHERE code=?z,SELECT consent_at FROM families WHERE code=?Nz consent.givenfamilyr2r)r resource_type resource_idrrTr)r,r) rrrrr!rr/rr0r"r0)rrrrr8nowr6rows r7 give_consentrXes j!1!12 3C v;D 7 B ,C T y "dO llID7S\\^  O(`d%+s;7GI!\1B CCsACAB: .C:C?Cz/api/portal/classescLKtt|}t5}|jd|dfj }|jd|dfDcgc]}|d }}dddddlm}td D| }|d Scc}w#1swY-xYww) zZClasses of the family's school, for the checkout dropdown (typed once in the back-office).z1SELECT name FROM school_classes WHERE school_id=?rz?SELECT class_name FROM students WHERE family_code=? ORDER BY idrrNr)class_sort_keyc3&K|] }|d yw)rMNr)r!rs r7r"zget_classes..s,!AfI,s)r9)classesfamily_classes)rrrr/rr=rZsorted)rrr6rrminerZnamess r7 get_classesraxs j& 'C `T||ORUVaRbQdennp)- MPSTZP[~*_`A,```% ,t,. AE 55 ```s.B$=B B*B,'B$BB!B$z/api/portal/orderscb Kt|j}t|}td|ddt |}|d}|ds t dd t j|d }|d d k7r t dd |jj}tj|s t dd dj|jj}t5}|j!d|d |fj#} ddd s t dd t%|d D cic]} | d|  } } |j&D]} | j(j+dr| j-| j(} | t dd t/| j0t3| dz dkDr t dd | j4r t dd t7j8|d || j:t dd| j: t j<j-| j(}|t dd| j( t/| j0t3||z dkDr t dd | j4| j(t j>vk7r t dd | j4r(| j:j+ds t dd t7j8|d || j:t dd| j: tAd|j&D}t/||jBz dkDr t dd tEtGjH}tK}|j&D cgc]} | jM}} d}d}tNro tQjRtTjVjXtNt[|d!zd"|||d d#|d$d%i&d{}|j\}|j^}ntbjkd,t5}|j!d-||d.|||jlt[|d/d0tojp|d12|d3||d f |jsdddtbjud4|||twjxd5|d6||d ||t{|j&d7d89||d%d:S#1swYxYwcc} wcc} w7 #t`$rH}tbjed'|tgjhd(d)tE|t d*d+ d}~wwxYw#1swYxYww);Nz order-create:rrrrrrDz5Le consentement RGPD est requis avant toute commande.rronline_paymentr'u9Le paiement en ligne n'est pas activé pour cette école.zAdresse e-mail invalide.rz9SELECT 1 FROM school_classes WHERE school_id=? AND name=?u"Classe inconnue pour cette école.rru(Produit inconnu ou retiré du catalogue.rgMbP?u-Les tarifs ont changé — rechargez la page.uFormat incohérent.zPhoto introuvable : zFormat inconnu : r uAUne photo magique doit être générée avant d'être commandée.c3NK|]}|j|jzywN)rr)r!rs r7r"zcreate_order..sD22==2;;.Ds#%g{Gz?uTotal incohérent.deur)order_idrrenabledT)api_keyamountcurrencymetadata receipt_emailautomatic_payment_methodszStripe PaymentIntent error: %szstripe-intent-failedu.Stripe : création de PaymentIntent impossibleiu7Le service de paiement est momentanément indisponible.uOSTRIPE_SECRET_KEY missing — order created without payment (development only).zINSERT INTO orders (id, family_code, customer_name, class_name, customer_email, shipping_address, total, status, items_json, created_at, payment_status, stripe_payment_intent_id, school_id) VALUES (?,?,?,?,?,?,?,?,?,?,?,?,?)rrpendingF) ensure_asciiunpaidz&Order created: %s family=%s total=%.2fz sale.createorder)rrrr2)rrTrUrrr)ri client_secretsuccess)>rrrrrrr)r1rstrip _EMAIL_REmatchrTrrrr/rrrrrrabsrrrr$safe_photo_pathrFORMAT_PRICE_KEY MAGIC_FORMATSr3rruuiduuid4r! model_dumprr[rJstripe PaymentIntentcreateroundrurr r1errorr#rrUrjsondumpsr0r2r"r0len)rrrr8rr:emailrr6knownrc cataloguerproduct price_keycomputedrirV items_datarupayment_intent_idintentes r7 create_orderrsK d&& 'D 7 Brd+"TR d C v;D | C(_``**3{+;+G+GG H,AB B ;;r00;;EB,op p  ( ([)94ARAR S [.B2CTCTBU,VW W-X0DDDH 8djj !D(C(<==4::< H ,C,0JJ7b"--/7J7M g",,$$++)X^,&.tRUVaRbc#+4d*;F#00M &  ef T  5tRUD4I4I5QY[\K]_h ZZ  7hHY[^_j[k m   HH 5xxP"G]`al]m $x#djj/R]ce!=T RR[HHP>8 g II6 :  !79iknopkq r,ef f gsC0V/2&T5'V/? U G*V/8BV/ U# V/0AUU U V/=AV#AV/5T?:V/ U V AVV  V/#V,(V/c^eZdZUedeej dzdz dzZee d<y) ScanRequestrrrgrimageN) rrrrrrSCAN_MAX_IMAGE_BYTESrrrrrFr7rrs0"V5P5PST5TWX5X1Y\_1_`E3`rFrgatvalue _prefix_cachec `ddl}ddlm}|j}|tdz dkDr}t }t jdD]C}||jt j|dtj|dz}Etj|| td S) uPrefijos de código de todos los colegios activos (config + carpetas en disco) para el OCR del escaneo. En caché 60 s: recorrer el disco en cada fotograma sería absurdo.rN qr_detectr<F)include_inactiverrr) timerAr monotonicrrr) list_schoolsvalid_prefixescode_prefix_forr% school_rootupdate)rrrVprefixesss r7_known_prefixesrs" .. C ]4  2%,,eD ~A  001O1OPQRVPW1XZgZsZstuvzt{Z|} }H ~84  !!rFz/api/portal/scancKtdt|ddtjtd{}tjt j |j|d{S7;7w)uFotograma de la cámara del móvil → código de familia (OpenCV completo + OCR del código impreso). Misma idea que `/api/scan/frame` de hec-photo-app: el navegador prueba antes con jsQR (gratis, en local) y solo manda aquí los fotogramas que no ha podido leer. Devuelve únicamente el texto leído en la tarjeta; no consulta la base, así que no revela si el código existe. Limitado por IP.z portal-scan:rrrN)rrr[rJrr( scan_framer)rrrs r7 portal_scanrs`i&8%9:]`a&&77H""<#:#:DJJQ QQ8 Qs!7A9A56A90A71A97A9z /r/{code}cKddlm}ddlm}|j |}|s t dd|j jdd}|tjd |d |d Sw) uDPunto de entrada de las URLs embebidas en el QR (`https://dominio/r/CÓDIGO`) → portal con el código. El esquema es HTTPS por defecto: tras un proxy inverso `request.url.scheme` llega como http (la conexión interna), y no todos los vhost de :80 redirigen a HTTPS (QR_REDIRECT_SCHEME lo cambia si hiciera falta).rr)RedirectResponserzCode introuvable.rhostrz://z/?code=i.)rr) rArfastapi.responsesr extract_coderrrrQR_REDIRECT_SCHEME)rrrrcleanrs r7 qr_redirectr sk #2  " "4 (E C(;<< ??  vr *D 6#<#<"=SgeW Ucf ggrz/api/stripe/webhookc K|jd{}|jjdd}tr' tj j ||t}n>tr td d tjd  tj|}d"d}||d}|||dd}||d} |dk(r't!|||dxs ||dd{n|dk(rt#|d{d d!iS7#t$r?}tjd|tjdddtdd d}~wwxYw#t$rtdd wxYw77q#t$r_}tj%d|tjdd|dd|dt'|j(d|tdd d}~wwxYww)#Nzstripe-signaturerz/Stripe webhook rejected (invalid signature): %szstripe-webhook-signatureu+Webhook Stripe rejeté (signature invalide)uTVérifiez que STRIPE_WEBHOOK_SECRET correspond à l'endpoint configuré dans Stripe.rdzSignature invalide.rruWebhook non configuré.uLSTRIPE_WEBHOOK_SECRET missing — signature not verified (development only).zPayload invalide.c`t|tr|j||St|||Srf) isinstancedictrgetattr)objr9rs r7gzstripe_webhook..g0s,(23(=swwsG$]73PSU\C]]rFrdataobjectrzpayment_intent.succeededamount_receivedrlzpayment_intent.payment_failedzWebhook %s processing failedzstripe-webhook-processingzWebhook Stripe u en écheczpayment_intent=z : rru,Traitement en échec — Stripe réessaiera.receivedTrf)rrrrrWebhookconstruct_eventr r1rUr#rrrrloads_mark_order_paid_mark_order_failedrrr) rpayload sig_headereventrr event_type data_objectpi_ids r7stripe_webhookrsLLN"G$$%7RS < KKGrRbOc d   T 5= HH[]acic}c} ~I dii&' ( LrFr amount_centscKt5}|jd|fj}|s tj d| dddy|`t |t |ddzk7rCtjd|ddd|dd t |ddzd |d  dddy|jd |df}|j|jd kD}dddsyd|d}}tj|d}tjd|||dtjdd||d||dddt rd dlm} m} |drt)j*|dni} | j-dd} | r| j/dsd| z} t1|} t3j4t6|dxsd|| d{}t3j8| |dd||||dt;| | | t3j8| |||dxsd|d||d| j-dd yy#1swYoxYw7w)!N5SELECT * FROM orders WHERE stripe_payment_intent_id=?z4Webhook succeeded pour un payment_intent inconnu: %srrgzstripe-amount-mismatch:ru3Paiement Stripe : montant différent de la commandez commande z attendu u centimes, reçu u,. La commande n'a PAS été marquée payée.zUPDATE orders SET payment_status='paid', status=CASE WHEN status='cancelled' THEN 'pending' ELSE status END WHERE id=? AND payment_status != 'paid'rr items_jsonz#Order paid: %s family=%s total=%.2fz sale.paidrtr)rrr2)rTrUrrr)send_order_confirmationsend_company_notification portal_urlrrhttps://r) torMrirrr has_digitalr attachmentsrnotification_email)rir customer_namerrrr)rr/rr1rUrrr#rr0rowcountrrr2r"r0r+services.email_servicerrr)r1rrrr[rJrr\r)rrr6rWcur newly_paidrirrrrr:rrrs r7rr[s &TllRUfThirrt KKNPa b  &&  #L(9U3w ? &&ll 68;D |E \\A% & YM 2dH JJs<( )EHH 2HdCLQKwH`cdo`p483w<$P[ac]DG DT>..s;/?@Z\\\,3 j33F;#j0J%e,#--.BC DTDZXZ\`bjkk 3#$2ds7|hT^#% & 54sDG DT>..s;/?@Z\\\,3 j33F;#j0J/4D0Er3t9V`ab (}s( D-D  D.D 1BD DDcKt|}tdt|ddt5}|j d|fj }dddg}D]}t j|d}g}|ddk(rs|d d k7rkt|D]]}|j|d |jd xs|jd xs|d tj|d|d d_|j|d|d|d|dxsd|d|d |d|||dt|dkDrtj|dndd d|iS#1swY xYww)Nzorders-lookup:rrrzCSELECT * FROM orders WHERE family_code = ? ORDER BY created_at DESCrrrr  cancelledrrrr)rlabelrrrrrr created_atr) rrrrrr rr downloadsrzip_urlorders)rrrrr/rrrrrZrr$ download_urlrdownload_zip_url) rrr6rrrWrrrs r7 get_ordersrs d D '(:';<2^ab wT||adhcjkttvwF  3|,-  F *s8} /K(/   "#3 4VVK0bBFF>4JbbQaNb(55c$iDTAUV"   d)C ,>!"233|CTCZXZ\S]cRbNc#lBSDG NUVDV}55c$i@\`    " f +wws0E*"ED E*E'"E*z*/api/portal/download/{order_id}/{filename}ric Ktj||||s tddt5}|j d|fj }dddr|ddk7s|ddk(r tdd t j|d }|t|Dchc]}|d  c}vr tdd tj|d xsd|d|} | tddtjdt|d|d|id|d t| | jddiS#1swYxYwcc}ww)NrDu/Lien expiré — rechargez « Mes commandes ».rSELECT * FROM orders WHERE id=?rrr ruCommande non payée.rruBCette commande ne comprend pas le téléchargement de cette photo.rrrruAPhoto indisponible (supprimée après la durée de conservation).zphoto.downloadrtfiler2rrTrUrrrrprivate, no-store)rr)r$check_download_signaturerrr/rrrrr{r"r0rr rM) rirrr@rAr6rWrrrs r7download_originalrsV  1 1(Hc3 OC(YZZ VTll?? JJs<( )E7I%7PQ+,QQC(lmm  ( ([)9)?R]ASU] ^D |C(kll,79K[b(068:LW]&)+&68 tyy?L_:` aaVV Rs*0E"D2A E! D>-BE2D;7 Ez#/api/portal/download-zip/{order_id}c  Ktj|||s tddt5}|j d|fj ddd r ddk7s dd k(r tdd t ttj d Dchc]}|d  c}} fd |DDcgc]}|s| }}|s tddddl } ddl } ddl m } | jdddj| j!j"d| j$5} |D]}| j'||j"! dddt)j*dt-|d|dt/|id dt1j"d dd |dd!dd"d#i| fd$%S#1swYyxYwcc}wcc}w#1swYxYww)&zoAll purchased originals of one paid order in a single ZIP (JPEGs are already compressed: stored, not deflated).rDu(Link expired — reload “My orders”.rrNrrr rzOrder not paid.rrc3`K|]%}tjdxsdd|'yw)rrrN)r$r{)r!nrWs r7r"z%download_order_zip..s2ujk66s;7G7M2sS`Oacdeus+.rz8Photos unavailable (deleted after the retention period).r)BackgroundTaskzmeec-z.zipF)prefixsuffixdeletew)arcnamezphoto.download_ziprtrr2rrz meeconic-r-rrcBtjjSrf)osunlinkrM)tmpsr7rz$download_order_zip..s"))CHH:MrF)rr background)r$check_download_zip_signaturerrr/rr^rrrtempfilezipfilestarlette.backgroundrNamedTemporaryFilecloseZipFilerM ZIP_STOREDwriter"r0rrr )rirr@rAr6rr`rcpathsrrrzfrWr s @@r7download_order_ziprs  5 5hS IC(RSS VTllY]+^!02E F#12M#N PP'VVf {((sU/G/"G AG/$ G0G/G GA*G/:%G# A,G/ GG/#G,(G/__main__UVICORN_RELOADWEB_CONCURRENCY1zmain:appr)rportreloadworkers)r-N)rr[rr loggingrer~ contextlibrtypingrrfastapirrrrfastapi.middleware.corsr starlette.middleware.gzipr rr r pydanticr rcorer core.configrrrrrrrrrcore.dbrrr core.leaderrcore.logging_setuprr/rr core.securityrr core.timeutilr!rAr"r#r$r%r&r'r(r) getLoggerr1_boolr+compilerxr8rErfrGr=rCia ia_module shoot_apiinclude_routerrouteradd_middlewarery middlewarerrpostrexception_handlerr rrrrrrrrrrrrrr=rrMrQrXrarrrrrrrrrtuplebytesrrrset_payment_reconcilerrrrrruvicornrgetenvr runrrFr7rBs   * ::248%<;%,9?$ g # _g6 BJJ4 5 b2 & 888<)7X,t'T_lW[sBC<&&'9##$9##$F?  1 1 >" G   )))  3/l[l7l0ly![w[Y["[I IY 1S1S1 c   T d4jT$Zll 38WY3Z&g&S&&R /0=B3ZTYZ]T^$)&:J$K Lc LS Ls Lc L! L1 L NO',SzeCjjsj#jSjTWj!$j8;jPj  D^DgD!D$ "'b"I 6C 6  6 ]S/]S']S ]SDa)a!351 t1 " " RKR'RR hC h' h h   &'&!&RCsd4jTRWX[]bXbRcMd.)8c)8#)8SW)8X%&&&'78ccc( 38WY3ZgS6 56',SzeCjbcbSb7b!$b8;b7b( ./INs`efi`jPsPWP3PZ]P0P< z  V\\*G 4F)"))-s34GGKK DfZab rF