From 61f64e69c6648b9487085ab05b1e3b3c70a2e5bc Mon Sep 17 00:00:00 2001
From: ilkergzlkkr <guzelkokarilker@gmail.com>
Date: Sat, 5 Apr 2025 15:52:52 +0300
Subject: [PATCH 1/2] webauthn

---
 bun.lockb                                  | Bin 255216 -> 256800 bytes
 packages/openauth/package.json             |   3 +-
 packages/openauth/src/provider/webauthn.ts | 327 +++++++++++++++++++++
 packages/openauth/src/ui/webauthn.tsx      | 194 ++++++++++++
 packages/openauth/tsconfig.json            |   1 +
 5 files changed, 524 insertions(+), 1 deletion(-)
 create mode 100644 packages/openauth/src/provider/webauthn.ts
 create mode 100644 packages/openauth/src/ui/webauthn.tsx

diff --git a/bun.lockb b/bun.lockb
index 7f4b865820733fdfc374b2177bd115d17dacfb6e..18e78c7b2a2272774e8ec7fcdd088713c752dcbd 100755
GIT binary patch
delta 41220
zcmeIb33N?Y{|0>TNiMl+h&dubC}IjB6NzhR5-~+kM2rz3Awni%Ok#{#da;QyO3gz|
zF%>b7EmbXw3Z<wjRV}LZJ<mD&Bze8s_x=CZ|NGYZ*6LlJJp1?T-=2rF&vBCb<aDW(
zUzM8YR;TFWfLo7G{*h5N-u%s}JCW&`b)S}Pe?KxZCfBP$i3=+a&3kBL;3qAkM^)vI
z(b>s+Y|Mex4F<Epkm_!2YFjns(;5bYJ*=(ZlHhLdYupxG9QJDH?}2r{H!cQ4CD?bs
zOsDI5`r9?Nbi%0lxzyH5i;oPCNJLE{r9Cn_F%qUV$F_9JtGWh*GxE9#b^;#*JA&6r
zeGZsqjsRBycL1Y$srA9tz;@DpSVxOL2}ZS3*MQO3)T!XA;K7pHf|*YPFv?3wEh!^@
zcGW8IHMlYy&VWmRM+{F$j7Uf@jBBjfvEi}9qX(if2?LU%V+I<WJq?C3@GAx`3;xx^
zU?>Ov4ov-mwD*B4z+MZc-vTv0#gLjN9fnGW9@1_Jt_a7vQm+VRLK_+Xw24;04RAT=
zC&4UWC%7zl1-LwTCYbR_V8(|_yA!xf3Iux$OKEUqLQHgQqQTJHVlWhgeF)59j)@!@
zi{UctlKLvio4{to4~&c)(I7g(&=Gbi*#1)A+ETO2w$k!5fjP~55YOpV7F+~VCe_Yj
zJyXOjW%CExbbHZUE7#($r5h9zo|qUp&@eP|^hnm@A#_g52k>KgkqJqO(J=`ak+`JD
z_|b;D0b07qgc0$Pm}p<YuPprf2Ws^Vj~E`$2AzS<dQ5Ah>Ncsnn_I^et&*}UNULX5
zctQh|J$M6bmN&kwHUrLq*+1b!)an?zwbQ0-E3n$p@zD*2Bp3`Ml43_k3?CS|8s%^%
z%mXt%9$W<+3FZu2)<I(#pOV^DCRkNVE9e8*9EgV<wT28yXfQf_Sd1Y&e(;F!_=L!t
z(AkiewvvOj4AVPl4IUgbd_Xul$Q$|4uLhVEnG~YUkYcd8#vb{xVwjS8j}3)T4G~?y
zbg0=?TYRxyv_(|{wgdD4*v$Ctk)I8n={tj+!Of5l{rzBb=I9lBj)rp0T?bd<lstt1
zYgj5&Ysnuyv@W#msjZ1a&{^Oi*j(kS!OY+>bk6ZBlF!QYmysUpIdwIdL-|v0gTV#7
zq>nZf)4^q6j|ZnP<12l&j3N^v!ehb*MxKSuvC09nVjIEqOGE;;WOR5;Omsq`At7?u
z$jEqu;Q|Wawlg4H+f_!x=3HF_=347LKuebnn?w5oHhXwf1p1#X=^vrBG!GHn1(LDl
za5WD}K$S3ghsX@|F5C~B@$12CNpCP0+u+F9gwe4Ph9L>VW3fXS{^+Gm)~)CXbaLt*
z{9pw(f!Uyl1nWn|Dx~y_*4zRl*9WtH<-iW$*HIeZ1+#jegW2)>!R()esPOm^C@u*L
zjRVvT%$eW?X1_RqtAJk()A$D18Fnt%iQDoTEs#1B%<Dk{m<9I+v%o+w3v490GMMcz
zBKhYSts*xipOL&5%mMf<Q5%p%Y<lQo!xreA84<%{hQ}K|G#KtBX&urSi@YQvCWGm)
z3N0)SUMP7Mn7cvhC@p>xY%^^Ax-lRrVZiXw2E)Q+>#O&wwC;x>`#S{83DFwN>^;FH
zz^;-jOD;23^D7Ew@riw`Va2`bem+jCMZ(C)7+y?Ij@P31gIT+cU>37tymepkDrGWY
zvXp6HR(8~Q>%-!;>h3@;=<U=YY1(862ea<HKo3IuhsH!EVKN&&8E0))qDsn^Nm^<*
zF#E7Fm>cWB$dTbONs)$#;lqbUqcSC-vn}(GJ;w+Gt`2^9LSp=IgoCGPlW9PBLSzFk
z4}+()oxvRA!0FnUFPo}0!VNa`CaLx_w2TixU@INKEWm%JW}9HMLchUg1p;STi<PXB
zavLV+M&4|#7cNOY1m<Mj1!k|f&(*T41ZF+HM!NUFHd04BV}@f^4~&dU3dekTmaeU}
zq}b>|(YQdNbxDIU{9`k;>O>|dM#c`rf*uea4R?c~F(SA)b3W1rbt9PVh>uK!ufZ_I
zsx^2tn7Z?PtpcgwO0WlkxfnVv(Asw!72rU;hRp`v2bTkX0iC1&dLiSnp^q6Aofv_d
z%@tY&nl92ZbOE!a<E1`(vDSf;!0eGIFn6O}nOXrWC8vX#?!*$Uz|QdFsvIiw=>cX%
zA|i$-#ik@8grVdFJcgQ)N5n@b48uh-2X+bA8^LVxq~)?gE3{)=IG8i^8T4x4uU2Xe
zXawCIc5Sd3JY|*EGag{hh@sMM2TpN;;EVukXbY|c?zl$FxIUQi_R@a2TJyUt`8e1a
z@h`Hp3VyRzE3hmIW(%`WarV^dby}BKU$0dl6U?bNYd!j(E#3|XR-olZZLL)WvtR|x
z0&Z+D7;1t)1+%3Kz^>rcNXPW6wrGBHz$`d!tER`pW)JlOGk-sDRq(glw4vMGJVi?&
z(zTj?m#uYqlkHj!6QZJrMq_eT-JxZ85<17W2yFJ$BiNjDeRpb;Hdk_mU78&qIXE&I
z>32Xc$%5g}AvI$)v!c&aF!l`G2D3{X@PlJE2sRxrfXjf#497JNpM%mKxJQeRPG~SH
z0qf^`*i7FG%=7~jA`|I9FlHpl5E0!VI(E=-!)B!Cs+a>V1x`sofCb&!r!6PF;4tW%
zbitBGMMXzMH5f6h{Q<2dul8#_Fk<N71_Ptx4Ub^6g{`H(H<<fFeaSVzteB(Z#Ds|9
zv4bM4E6P+#S$Rn7eSJ$E(Ex{4?3uj|YiWYPtmB9VG10@K6Ak)dSUvn=Q`K)b^t%H6
zZb830&`<yRDPKSR%iEEZ{QHnJ4{bE`+YJ47LcfjBZx_OwXny*Ajeg&v--hV78T$Q?
ze!rvL*BDau+Y|LRgL_bXWYp*pkvO@W(s~^?Rq9bjziJE^o*WsAVO)4x>yc;ZTCS|7
z7$WjW=p3!3XS9lCfZ6-{@q8xYX-|~the?iz3Xd6zm1P(xg)ng83?0sED<|X3j<9l7
zY^#MFHE-#1>g5Lyi`4&g$j$H8-V-H#k0n=n<aNO7e2qFz?RF$PJgFyUT`;;@L;UTm
zi~Q{ij4Oo=hX5I4pKiAH3@D|!&2zOgcCs!GXkkpTUd7LS)=Ggb6s3kWEYM<XX<Z!H
z!Z^ZuHL!*Gd<}!4B^qS3=GE~wmw4Y`@Kdd<I^K2>(h_lfjg73x(ryJ5AH?S?=C7f6
zK`~hK>LWe6fVshH=xyw1T^!`CrduU-E!~9=%|-u3nD>dfXf3Ve{G9EEKq)BeLXd;j
zvI{57cC`%#UzAeT>e9s9919E6NVAlz+Sbgr7W4NI8$m2$4fpg`f?chS?JUXyS8G^1
zi>YEggQ1tTPdi^zJVHIy&{>4KsiA81_1Lipbyc;`5bC3b>NPMJqSerRgu>O(^L(wZ
zo9?$Cp}}fw^@g~OS3}bf>ZgY8<%a@LNiFA92x)cs9U;vx3|Ajb+ksFIrZpF9tTo<f
zb*byE1T?m0cCwhKLu`%a8m-}Vyp^kst&SlU#i5BcEW~1J=xH$cTl<9gni3ESR6~0a
z3Q|Kx44xJnfRLumMyP`tdlexqMOAOzF9IRWZzDpQ-*5R^3k+GXnszoqG8cqoE=~2c
zgAvlo-I%XELr6=}qM4pz3PSDF{60rWE4LyBU-OGVNY(`*H9zGiUu$M}i<0AKy#^X&
zu{!p!m_N6`5gnwk*US}LXtP6|rlvNq{H)8G`<f>)l;4eqT3EwEEy~Ll*33|gxgq9t
zpc<Fe+}oT43-w90vF7#n!Ga3wX)!yu(o!3&SUl#Qu>4hjmwMjjWw5v~Y^`~I-sT&y
z;<dc$c$+$5<Sf=@p}ywX3_&kqMH<stSYB4=Ccb9l2l@I2A6pncsyqrI3=k?2?(SnJ
zeGFEY#j3&P+Nmof2=!pIY*{hWWLU`7%U9XwZ*}ZrQJ(u-GwWE)O#-wA+E}w1d7DPV
zf>)ZKF~I8B*JAz&HuEr9v#`$Vp(ikfQj4ipG^}7Xf9?S}u-G*wtBaSnQm&0Pte?f)
zrj6EqJ9V3w2a7JK5E7h$6{1>P&W@-zW;5f^&mCZ4@nPIhDRXi`Tmx_OQCRHZqH3N+
z+iKf|t<`0Nj~xtlq*lNTSm;Y;f`R!8mfYh)y_GWUtYHHz=Hcz|NJ@3dgUeZ1tdTlD
z%$3_447i>lGi++6POyBe%g}w(+FLUtEavkNFrL!6WCv^{u#7BAiRfSr8)#8Bbg*U)
zw3xp`oaUK@o~hZ<>KJKJqC0Y)nwNLfI>^TA669kGBiMSQuCJ**`qj&NqmHjR4Iyra
zS|j$t;(Wqjp$Cg}(q|WYFc21-t5(6B0ZYzQwhR{5YHCSN3`GgCUK?yNHA7q5T9*y<
zH7!D@oz=OiuW~!Yni*v=*XwLBbb-Ixc4bj#t7EjqbPr;8>$2{?rsIeUQbTRK8Vr5a
z&{~8(R71Zb6v&Xd)rVRIv1vtno6}&iN@i<#Q*ZNrSX@|Y!%RkWo|bnHghI3&5z_Mc
z5h12T)0%rLwYyuxVk}C(?$*p0i}_%8gCPuYCSJ*u-aV|2!z_wds5J~UI@Fp8s@&6h
z4K$>u)iKth<n^?M#ac{lkSNsJC)QV45oWyx{l_q?<8X_qQ!mUDt8=WcX(mGP^e|P#
z9Kqnb`<m?g;99S0dlBlZ#r9=AkwWRy*LrP)#rzloT8HZ9Vb^KjPa8q(8TGxDN&T#u
zaTeu7KkGG6#r{^uc#FAjf31CJLtSsvB3Kywy1wSm5b{7qMXZ=PCMDcp=&#md0zzSG
z-LHgOGZV1q53pWKu$UtUX!&3<H1RgAfYn;9SLq0AW}?OXQG_<CxLmaIHh%{T6P|Mk
ztIBPlW?>%*@ixzf#lcZ8EavO5xHi!OY$PQkF{o<c!I9RmkrvZb2pFgOzUFfXVX|XP
zIn5jfSu@=&O7}t5uu&HCvO!uViZ!pPk1dSuYUkA)Y%s(!WVRy2`HRatcFxPNIOJv3
z1yw4_dM!CP|BPeq5~baul~Ru{-$&yr317{!3@L0afQ8v3;~v7o?9?n%^P#-b-x%#@
zhX5wGbjpK;^&+iCF$M#cI;{;p#u#hnSc^%-s+aj@zNSABim>)UD15kjFhJ-CLb#A4
z<T64Jr6Pn2KC~MM;TY1)&n^xDWQ;y;>TR;Z3big9>udS}AuJ?>TEt_#)KCUOSQOCm
z@<Z+k+%2f3<cH29)IrrMCF&vG$Y@$NLKvvAzUCrH+D3^5g)PZH$$Bl-Vjd|)g@-5e
zPFNgtYynuUKf~h2gDE}O+uU-bwgqFO4D>e7g~eSLQwN!yA88GnXfc~dY3CJO6&s<1
zQPyh^_dwJ<u}hkMh2?2=9_wdJwq{PUm<A+cwp*S1`YNlEt&WrBaI44Q$?~v^!>ICO
zvh~_zi;2&@f~+?t`<ikP3RFXXAmp!xT8-h{XY3?Bq#Pe(4V!8)yNuQ5wu#L&4Tfd0
z-oWHtgAivNuEJP6-@?L$u)m*ioHcWrMF|{dy*4dSOum34F{)%5XTZI<NV{Ncq8-%J
z3u<Wo0g>!1T!uou&8^347foD3hk2X7fW<CA&o}T^>?c?=r(4WjCTPbLTm`U^XToA~
zT;Fksy*9xbHp5~ro`U+Q>DcA1VKst<#e@wb9u}I7tHo}F{Ge+W;h$5inKLbB-&D;R
zW0&e}9x5#~6MOO!SiHR0s$+hsz?$x3mxeW}=EdnS4;B^=+l1@MD_HC+SlF06CUW2~
zxy`c>(k6{dQ*Y(+M62T*i)q9ply6;D$Jew6A?%~5=o5svvuQiU`;)DXb1h2vWNX-5
zi)rIz^)d*rmk6=Z>b_`hI7Lf?dDhq490AK0ahkOpRy(yqon0GRFU*s74VW+H`-ozl
z&?h)u4W7oW)486nT`oe*Jpb0i{2LT*1DMvX-sYfmZ5z<$L;vYGDe(AZI)zY>dJuD-
zfi(+%Y|rSEBv`Fgi-VX03+GyG5Y10ueV88?GE<8~r#JI9PltueI=X`WY&%QK1zR|F
z!3bCb5T|bF=Hsx~67}xJ{2MHGVNo9b&GlyI4<z>X2v}VZhl3z;`3aUkEbR=@WR7O3
z^WQuQR*04-(w&6G`D0esK%2STiEga&vqOLl)vECfmNzWSPgK9|JgsS3^(Vk$rL_CX
z?b2eLj~$E-YBJWzKSRspJ$3h+2Fru1(6k?+mg-#ooto;O_py)dN1Q_#Hgi9Om`xG&
z_;&&pFH~C1id(gg)#?%eiy4@$d6>;GaB!54H(<5Qw_N9IYqF@i{1(FsL!7o4pTX*#
z@7a5SHac2QE{D}li^I$+y^y;#&+QQih2-b30~XGnJTzmRN(e0t4nY|0ELf}}DvYkY
z42w<E=0%r9h3l~i7KZ>U9=X^qHW)g>Dq+o=>O&(~otlpk!YvI}PTfqLPE>amdIlD!
zgH~;)C55e6STbWAR<6Nf)iuw$OSL7S9Ro(gk^_hdejJu;WPcyKWqLbUTw7S$eB(-(
z4T}p^JO7+oW_4U;F~5QM0mS#zBU0<-+6nnRb=oa~6{?Q)$`v>q<kzO;N}PZ4tyow%
z1z@IeS>K1%foV)0Sq8%lHT6M+<R*nmtyrZW_1W>i!}>5kuTCH9ajgDESVQvT%CFY8
zLA6IrLt&}ghdFvp;o6*rRgk91Cxzpzu)62x_uyZw7HhQyuI8>}t+i&ZwJ6`MwO(6m
zF*~f&dRUv=QLy}wi)LMg#Yv_1nAvB2erp<dn>NG3Z3Je)?+9@q)PtM3#Rjb&+Qc5T
z(O^haYsCq54VG4a4w?TZy;h9-1Xg^$r^9Bg-?fRD3M)B3?gcEZJmzv}i=GQDm#zBD
zqLl(m^W?-o3QHSV#?{!S_ZO|vum-6mU~EjUVBvlP*OJg|<fksTbqKL%wB`F0R%=*T
z^{9K`c5QRj?uh5ZYJxcIP9wa{4R&bhG%FfbCp8@|Y34n!xMH-pVmr0|RV~vnSU5&C
z^fg~#2wv*_rm5yGRmV|cC_;^)tCt+RWw6**?Lrf>&uj;Q6I08)@@{>YdABfBT3B*N
zeC%K_e;gff8(b|Xe?Bkvv4w%deLY`gX^u5)yT$YXLPKkx?Y?G*J=)q*7o0f`7W)H*
z_42WU;Q>RP5O%L%1;Z-10tW5XiqNLWL|BbfZ=Pee!*WwI;)(9oUTbD!K484I(_#+Y
zr_~c{v5&WDIjq*!Wet4IKOkg567`s3uCrgOiF&Rv4~5kVaplz=U=ysCu(a7-_JDrN
z#2L^N7W)sEW!yk5J79Ipv6x>#^imT*v~&Bka2NBc9}k5YYK3iw#fqR4aFh7tQ)}2B
zJlZ*!KMcrs^g-)2h({p$sOi||SJJ{M7DwC0hpd@<E#@JIw4%`}91}Lc;_Oq8@#cH5
zIPzMt4u>^QJ9X<H2#dpx;{rx=IV_F~#uoGRmh?niV;{TR{Muqhd<cszMcwh_Z$_@w
z@qopY3lV$%0bf(8BkInFP_O*Z+WgS7{7{RdxbUbcrXz#{3{qUo4^=v*YvK8!_4%Qv
z`JtxAb-%Ry&}oEl|I50Z&_mtwLrd~Qc?kKdel<_(q3Hb3=KRo8J!JMgr5&A1sK=O*
zuv(%c%xaGvhNVqq%n{|6Q`T!oEN0i!TK8)mz5*6ITs_U0ufpO$;kgkyy!;u>!Z89?
zXIRWyd#1DvRtPMd(eaeUaMoaG0Snh}Jeg_%%K{5$FwCU!XRVG+EXw|~*0AFi^RI|w
zdD`k}bWYy{n9BfIj8iuv(^6R4h58CYELpqFYIwfz7Ci+P%Tm)QN6+sFJ9*6}rG&v?
zKvUGuyV!^rG(i23Z2)AXe#i>&xn`<N{|f;5qSOns3EEdu2dAhRT!Fv@SAmki_W(0~
z0Ps_oOTm7jsv4I^xC9gbuQ=s@oA7_0jy-2DE1J(K5F8NUDkJ{C=9K@-0y(w~(2yG7
z5O5K2ciAv9hcpySsi&q}OMPZC!_;i+k9oCA)9S6oYHW4>tYT@V?I+XrCtEw-u4txP
z1b!&iVYjQ+Vah?2Br`Zz+GLKv5ZcyHKdb1@9EZW85X&Eu85}NcGX3JfMyvDZ6**pp
zL>WuAg`F(z!c1wj)c=l|`&j8$m?@2uI+>j`#fbI74+3hnr%DGhGfI~>nZfDOF3gl>
z;0HTnwu~>#%xA9D$;DwW0T%_YGNOFeWFrJRZkCQ@2DeDwDtQ~2e%ryE4SOUX1oKmv
zDILNO@?rd-{|OqBIlIoX|EZnB4`%$CbSTV}K9}(q!L+}S_LpGpAa}sb@IE8oVh-se
z=<K1NWW3HPdY~}V=ZSPI%*^N)=&b0kV0PgjU}mg}l35WGoak4SKi*>c7t{0<J)klp
zO2`Cc21`ks%%Hk*{(>1_7C%_`a+1qa#D{DLb_Q1fH&JzrzZUr4F*9l_3;16#4v=aF
ztZ_SJL~bv+gXE5qgTYwpUsP2WZD*-=k=&KB_!MSJ-SC6l13#F1C=JQ9drF(kU@vJG
zW{yi===ATW$VH2QD)a|4%>eu;29BZeUovOZ2<cy#Sx}tR|D7>tbclxoeG>75i+DVk
zQ*ttxSKW^oDVhFOX_INsm%Kpgf5-G+DE&o>3@nnoSY|-x6w3m$Wox8PW(J=~o6HLC
z1hZ>%r2gM>%DWty$6ov(@5c{3R51JsX2HKve2dG%E{4(>RUFKUl#+I7Fw>QxD4D_X
znx0~)fB^S1ConUpqD2_0O4~)+)xrFb*)w&eO=i0K(k64)aF;fj6=*EEiPXvJMZ-f1
zWOlU=m}B2U>VL;{X^kH&-~-A2VCEA9#y>-Q$-!VY^g}THyMYy6w0a=G519#jF#_BN
zOvk=p{4<2($9v!y8j|T3EA7I}NjwTV(<jS#GJ|8KO=kJ3z>LPrh<7nFnjqr~GxZdy
zliBr?!E8u6nAgbpVEQeP`eJEk+Q{{ffa<UW%tOv5>9|em*^;+|S<#)6cZ2O=p8)ei
zX7DtAuma~LUzB_qjDLnJ_`wQYwNcy8fF@i6bBu0*@y~DvKiHLzz%2MNMai6mzrtpV
ze+M(e*U~nkbmmhOOutfKR;Vm~aBewDyGjZI%%BEiC9{lLQm-eu5tuF>{2`fs-mrO}
z;tyuV?ZGU#Gnf_b3g(AQyBnD4LM3<Xg#c^b8_W-xb{}bznPG&q3p1s`Qdik}<59&F
zR%5tS$;@qp<T$DSPnhZBWjZqL1Zk7moRLx=Ws4cbxUu-b_Kuek6DZ>IcTE3O=|^Tk
zY0@UMpvhqRO_h3Krk-vqXH>d$ATy)s(k{#up|6zs{~2>e@$-L{;os!PsMYwvo>?pX
zQuF|sbAPLJ*bZh-?2wLRCfqIUcQO5QWc=ST{q|`2l`-s>3G#VI+&3Hlxt&KB;ZuTL
z_5U(+RPALs`OK5%KezMf8TI!5pWAs(LiP5Z6Xl=V`G0Qbd3(>D<Dc7k_4fat+xdTP
z=l{8#S8wb8xt;&#cAjVYe{Scy%3B*UZ#VzBoku6&^RC-^_D`zpFEY=W|J=_1-D3fE
z*8d-F=X?HiwtkB3)%nq}H|}k_T>8k1dqZA7{Pop&QNDI)NTB<SCGYhtdE-~3+v)cn
zAGAr|-u3GuKe|n{OgSBJ#3%C32^as6$Oq+D^1r)`hCfUF37&+8>mS=u)r}Wx_e?##
zw@B%2Np;6<I_F<*MxFYbKB(O5X|)QgRux~j<dY#)2RVx72PfG#Sa|Nv!aA3}*x188
z@#~C}F@_c0Cq#-*os14CNxfeOx2+a_?YG^%-JNfKVNT0ldGqHL#<MnUZ_a#D_m_r~
z13DV(-SzwZk4Gyz<aRAzqE2eRJHuXn={LRevWzm__g*Sgy(xO#z_!LYGd~)Yy<_jM
zCsrtFk3PNo`KLcE2>dZ&bzUpyfJ*_#Mo%iSf5n|06Dz&mRzC1_(k*Xm!(x8DHVwTV
ze>}I<pgN~-bQHs!jTObY8^%^*b_L^m#%UtX$=E}<Rxy?kmz|95jnjpTv$2P9h8Rtn
zDK3&`i8@t4vqc(dj<`yiE8MGs=85T~43S6rNHnbmvWg7SeDQ#^K(ulJEfkAMLOdlc
z5^bx47K<!Wrg%wOB0ARqEfwoY%Y^ZL&~nj}v_fQqL{u$QwR}xfHA{roguY7bC4DSP
z*8;5;(WEsZm-LCKR2#Hb#F5sC)1>vn#TB$cj3#Xq7fG8$ojRb+B8{{~TqSK4?sY-i
z#B@@&$RlkRP3wVnhz!zB@qn~Tw5ku<Ef$k<#8c89(Y66-ugD_p6E8{oMQ1nA0kNL+
zsW3J~qxLjHqaqukQHMk}g(!EnvJr$_5#9)bLt_ZXDI680-65Q!kmL^GxX7iD+yp|+
z#t=@5xW*7%Js@1Ba9X%DfpCSwlqL|)ii;G|Jt25{KsYbbJRtaZLAXodbK&j@;XZ{0
zo)9jIJPM1vAq03qxFj;XAO!h9cuwK6Xypyz1%)-<5WW^qDXeP>p_>nct0Kz>LTEDx
zrlt_S5uKYtu=9nmi^2_IYzAQug~(<Qz7^RNqWmC~_l1xr!hIn)G>34U!W~iC55g%5
zNq!LSid+iG76>()L-=0AHHYBZ0>Whq4}^;a!W9ZrED(MW7b&E-gy7i%!jB@Y1q7c~
z5bjd=Nw~L!aG%10mJptbJPM0iLkMUE;hD&21tI7I2+t`z7p+=DctK%JYY4xIrxe!t
zL+JJagqI@g0|=o35KR6MeixnnA=m{%*hS$FVGMw<heBikgf}9aLR1?F<pYiF6{ArM
z2sCyV4na_kQ?W6MGHsxoqLS1GiA*B54H6}{g-|mHLQxSH1i`f(gv%7n!lf;QD-@=*
zh47xZNFlvF1kZL5N{F;}5PUiybeBRY;ocs?eF_WOLntlsC@ks-A)o_<vLd4cgrHyu
z&nc7_tvW(@L19ft2o=Rs3hO#S=oSp2lE?~%5E=r()Codm(YX@@yUq}HQE(Q<5D0rH
zM20}9DzYg=b%9X6GXxhA-Wh^JR|v-`)DWe+KsZGqsSAXfB9}t)hY)IZg-~0>b%o&C
z4Z>v#b%e`@5Ux;|@*#wJ;v$9g?hrh?L1-Y-x<T;i0pTu%hQhr&g!>d0bcf(B@+d3{
zg%HpKLKBhE142+w2+t{aidLZzUQk#Q3c*`ErLZmxLbsj}nu@HR5JG!FFoi+z6`jK%
z*!706i$Zf@>;+*Dg~(nIT8L~4QGFnk?+u}q2=5KSp)Z8v6h088`#?BFA*m090Fev9
z7$_?B1-0Rusy&QB;xwtPaOnqXCq|Rni;JWVqE3HMN0CMf7FS7~gnKwBL`)}j7I`4C
zC<2893_u}WMaBT=ABqR0ZlYBLqF)R|^qL4n_YhAZ7(+$dfuNou3nW4ZA=(s)=w708
zB=p{5J*kf{4g&QRJxTpUHmScb4+e#caMA#=mlPpNM}Y>4Xi}ue1&QP#$hKxQvK=hq
zq9M2rg>acdv~U>$;R=N*Lm&(l7b&F2K=2$2VVFo83c+U>gu4`m3-=fZ_lFsai}^9e
z4#qf<M`2McJOYNnBSB;gL+OcH$0lhsQY?;zI7&PvC5yJhL8C<$X^ePD8Y?=FKt^`)
z$Y|FHWHeqF;~?yz5E%y{MPyTmN<i7=;!$>*2#<&0kO+_C@$i_WmL^Um!ed-tcuWzw
z3Ghfxf=A6ncuW&<i4a^zLbyy}x^PK?aD~E@BnUIbMGEPoAb5_1Fk7UJgy545;Vy-_
z!hIBk`xF+8f{-EdC@dNcAs`uoRb(VX2pR+7IfVtH)o2JWD6AO`L5Qam){TYGZ489P
zB5MqU&~Xq<V<9XNoyS738xLU@g=NAx4#FM^k>en&5ZM%>CO{}Z9zvD~9}mGH1<gM;
z9?kz)l%4?LR0=$jCctBj$fb~+s&~*@5tjnNH4Pq@Q{b^)xTHe3LSafOgpJ}Nh4hIK
zJkua-7HMe^d?rD-OJS>Up9tYTg#{BKWQ#lsizY(|m;_;m$e08nXbObq6n2SLlOepI
zux2uZ9PyOGx~UMlO@XjiWKDq(It_wpDun%_^Hd0S=@52N_*59DLD)kfavFp~BAY_g
zbO`0sA>@kibO;VJARMP~RFs|$;S`0W=@5>KTnfoEA=I1!;iQP00l{?^gv%683zwM?
zu27gV6T(?>kwW@x2%fVboEK@cAo$FIaF@d8!hJS``xF+;hHz2jQCKt=Lckmdmqf-K
z2to58Jg0D3w3-Xy1%)+pA$%>KQdpM(q1!wNS4Gx52%#TAFl9jaMs&`AU}uG}i^2_I
z{0PDx3XvZ{_*P_7h?)<fycI&82)9CTSODQTg*&43d<dr~B+Z9#SL9MiUI?M)0tnxW
zxCIbg1%%5K9tf9(5Ux;|vJk=#;v$9gMG!m%gdatkfZ($j!d(hK3HL=1?o(K>2*Oj5
zM`2MWgn-2mo{5ab5Q3IKcuwKDXq5@!1%)-45PlO+DXd!xq1zG&FGbc82%*a$n3h8L
zU36Xw!EQN(T@?Nh#$^!pP>5Ux;f=_q5VZnA`Q<!LC}O~J9w$~pIZnk!5oK2JI6)<8
z1rnJ=?g}JI&Vo>LC4{0PZY2cQRS+&yFbkI~2v;af$%62nxJV)WV+fwBAe0bkt04HS
zM(8euQo{XX2=^&0_!vTIkw;<C8VCWaA(Ryvt04q^0^vD@@}kum2rnqCSp%V>cuHa2
zS_s`fflx_geF7nL9R$-_2$e<WwGiyqL)b;ZSs2$r*h3+59fYbPn?lqE2<6v9a1r6_
zAvkP=aGXL7QF;S}QxuXmK&UBlDI{-#P;(=M+9GZv1lP?FE>ox@TsA?tLSf1#2=&B8
z3h7%Qcy5N!K%{Mk;IkFNT?!3_`xXfIDJ<9m!CmB0ShNj7z*Y!NM8;MKLD>+VQ}7h6
zwn2D7Va+xO-r^~Rb=x6y%ZAWYWMxAL-2uV09fGguyd8qwP6)dwG#ADl5cW`r+ySA5
z$fgjr3qtvw5L$`woe&&$LpV<115tVxgi{ofc0mXbxfGIfAk^Fqp^b>!4Z(E}gv%7#
z3YQ!RS13%$fzV!Dq>#QBg6AFx9Yxw62tNBD+@;V-xbMX!5vL1MXOTzhBAV_4brl&T
z94$!QM63Ov?qV^ihj>cDx#9q*r^q6OiI=2aqVuO994bhCgz+E<hYC_Zkxjy(;t(iY
zgp+WnAVrAMhe0@0kRnAcX^^Ot3mPoqNKxW6DO$K30SytONkhd&kVrqqRvty8hKaPJ
zY~^vblEQG|ehk8W3JZ=wh!c4f7M*|)a2!H{$T$um=p=;a6p}=%6A)fdSaSlxDDjlS
zx>FFkorEx2WSxW%dK!Z16oj#&^C<{+XCUmNFkTo>qka=aPg07=CZ*<>&lpb@6Blk6
zL-2=&Y>Uai`fIpeTipE8SWB7enls@7`izk-`d`&Oi(kyaONps`0;m7Us}fD{@>)*X
z1><k3Z!!Jv)Nb(0d3?qAiDG)M4PLdP!+Q!d6OBGI+UM-KVf<22n)MQMZW%{b;2-wH
z`(&vRG0|@P+pNt0O5YsEJmW;8a%rGge%m<1WF3V6LKIoI(S%KRjCQ7gD7^H*e5cun
zm3c;!8GqoDpWDef!QUIbjK%c7!uZX&oH_T6nZ{xVC#r9srk<K8w&WS_<v9FcJXNgH
z_j~aA)?0<Ef5c2U=NTvEpobjPmX(lyFl^`!{7O?Pk)3C}Q{pc=LCkxF3hq9I;#k40
z#+=kL$`&Q3<qyWC#rU(9oq*#0)(_2#V{+{61X?ouMC5R#AoeGdng@k%6$V|Dk>hfH
z3Q!yyRcJYe{fJ*nn4obnzl8V*H&J<{(mbU(BtADSqk0$&x=qijQnN@O{@-miskMMc
zA3jms#{fR9q{jcv87Z|7z|5a-n2nQ~ztr#^S&AV+iUCsO3q_7n3zQoFa|FMnrheK;
zjc*U*SJBi@kkt6@<Zh|)zgSr?Ur!t-HT|V&zE6kAh!5W7;v3X#8DFvupoS0Mo@Qdc
zE&n6J{B)8UUq}2&Y9U|-`AXvvsp;=nvq!H=tt*)M@jcovrS>5;zDrgPcmS}A_yRUx
z8sjha43v(1N1BQG{`g@A@EImG`ZkbStkn1pj=R)`ORW+#52^9pX$BpE6#dtm_~JCh
z$^h1Z`Wh<VnWp9h@Bu2jlEX#K83+Q{m5EZTf^av0J((mm&LRDMG0q95tp;q=p4+Dw
zMoG~H;ucLbBtyeLLv?^J{_(>(%)~W-+YI0{R{Fh<@O7#2#cl>`0%=m?yl1c$utI9u
zd)es!+7LqkwkTCPx+2WC(OCO5sntPv7qn{NiBhYJa5gj-@Fc0#LwFoCe)x7d%c~D0
zL#qy+BDDqxf5&&G*rKUYbVIlwQ{XdAY7G(o1R86fE;YV8z&9UR*mSA6BitW;%wvYs
zuumJ@WMyVb4g0j(VCGR~mK0Ov-mo)W1dmZ_*<j|2;bWAVCJt~(kugRoYvRl=E$WO_
z5>mM2Im8@Njvz;DG{6zzGUqfY4^#ju0$kCR0VjaJ=yn~r0o(+>1#SVifkOaS`U!xm
z`y_x})_@&UUD+GJTe*2>Bd{G<CT@&Z+N7|}?59V_{~7Qzz=it|;9~s_$OWzg-veB%
zp8`*SlfWt9DDVsL8E_Ebi}8nm2f*jRU4RSv0&pL=1v~{V@|PTrA&>`L22KMvflI(`
zfGhqC@EkY}d<A?BTmyapP5|eCE5NtF9pD~t0C)_11LOeffi1vRU>mR;SPD#5#3$pF
zk}0zho&(GUG5{_G4lAenBXrI~;0J&kOEfSThyo&kK>&VnSp7|ystDHtY65kEdO&T!
z6{ru?0bGFUfHP17sHWi8tG`DEhcN?lfg`|C;26Li$_;1;Gy=FgH37IIc>-R556~27
zCNjn=wIc%&Yy$)VZGm<`d!Pf*5eNqA0(Aga;3A6t0=NWx32<M-uW|GD-3^0*89*A)
z0q76(1^S3TQkBXnTsK@NTn}&16q5}u2tZNbci2YoYw#bypMWjwS70;P4v4|}8V1Ay
z-0Ic=8vt%`n}E##ceYqm^H-$f3&I}(O8_fhXU;@m4zLuM56l1-0CRz5zzSd?upAJ;
zOkf_c2$%&d1~P!zKsXvP0N`)Q@&7_60+Rr~rOa2ErvV8-A}|G5$=8{)5U`+T&457Q
z1E3Y)4+H?Mfgqp_;0^cz%>f^vCC~!!0(^m{Koh_d=!krSflfdOz<1Y+qsK}B)d248
zaeSS5C!BW!B>)q!2&j%0sPD3Ze@Ba60d@%g0WJnM0t)aa>^Fcd!bJcRP!xC%C=R?v
zoDJ9v@Uj^T3<pAizCcP({J4q88vw5?dB8Q`8-Q1pZ-K9Y%Rp)Po&lc%P6IQ5G+;8o
z-(VaAi~>diiNJ7R1TYkc0iu8bKp&tl5W^z~-xuu+bOS<wu0R)nU(m4tSP0AmGJvH3
zFJVz=)l8r#kN|K~$M0~fzrj%vUF!f;0(t^r0Dn8j6FuDz{0(p&xCu<*FGx&9APwLz
z$an%x0bjrmXb$it{~a7AAQpuT1J0om=K)^oI-^&*0v`h1VLKyDQG|KY;P3ny!1uu4
z19yR^z*K<0Gm6J>*pYw;fS0~7pcfF0bYTF0ji)A13vdPM04_jN6yyu|0WE+JfC%UV
zfk+@47y^`oULL3bR0JG=N&tV;<0l~H34S~Ueg>WazW_6US-@;y4loy(2V?;8Kmy<o
z1OS0ROJE-|9gYge0|{tAceFYbT2CMhcmVAo@B@$zL;^!N{%%Md0}KP);MfqT2Hb^x
z54aB$hg}R%09#-&H2yNp8el!p0f<AvJy2+G#6Lpjd!X$F_5%li!vKFVrZdn5=nm}Q
zpX3>Zgn_^Zz<Ffw1+W(2sdNCi3UC?Wvj7i=lYn*r4}fg}9{QqC=s+M6SPw)%n`|qN
zOj2s4R6=DOfy#gr;0#m&sshyj7oZ04K2Q^=1=I#&Q0`aY*#M`>Xy5|!-3x>QA(DAi
z<I!v@z~dN?THnF<4)B{1NBwCCd;)Y~Vnp&c6$l=om=S-WwLh>0V5Z?<cf`^ERyt~d
z&$%T$8C7>?K2rcL`AI+$z@^>>n3{8AvT{i=P86G`DP2=0AlZ0;|GhsMV87`a^%p<@
zlKBG_frGFsfXf5r0Q^%=LA-eJo;Dqr227XX)!-~(7QoHm&A)y`|8&Kv!kd*cb_IAj
zunbr#($bX{l|DugCq2U|fX6PL0QLcU#np7wzYHqCZIjzB>jui-Vr^h>`+W(G?f4D&
z1$YMh46Fp60z7!!1BwFQ0e65r;3jYb_y)KJ@KneP_vgT8Kzpu?^9ZyA&H<c!CjlM}
z4*_iJQSfo#7;ps01r7t$X_I+$JOi8tS^}Ivb%DYs22Sp;fv<ooz;)mj%2&^(tm!S_
zHoyqtF2L3CJ#Zg*2>by21h6HKfggb<z^}k_fR$r!uou{JBYF?5R4-_}z_D?!fY-nq
z;7^pV_Bp%J7S2par=kdRIGDIB!n{hdS2$cIpftd%pFN-t8;6nUc}3LYcoo&-8ONi3
zOTZf_iMSMItS3NF9W&Ytm%<Nrs~)dr0F9L>oH65z0IW=5odpxsp??5y58yuG0L*}n
zy&^^39Jonvv(PsXZXVo3xS0^uB)0}LGghP(*bQh2=sqnF_66Jl9y}WZ7N9x6gJ}(b
zY3c*DfSSBHe;<K*KwY2?P#bUsxM=9q0APlV09J|>V1d+F5kG0Ok}O;=n5SRn!8FYP
zy^=fydjj5o7q`5o3;+~$C)Qkdq{fW()^j@v1bB(ow-%V{_7Q}DzJ<gi90!a5Vu4{m
z48X>A210<2o$w==0iXlW9%u)&1^#ubdGlr(3Ss6^h~q>W3?2wX00V$<5jR_Dk<tZ0
zo^L(`x&hsR9zZD26Nm%`0bEegU@od5;Gt3<4rVbQ1MI+6057)O9*L0%PXtCHJPte-
z7z6Oqk<2MI3IV<DX$Z5ECjjGtRG@H146lK<1Xu`61EvD_$3NAj&QlJ|e838@LLY(Y
zhkxqS;^3`B_!f|1EUum8=0cof6#M2Vjw!kWnNDQ^R&W7qPN7WjVqg(49S{H)2n%7n
zUNLG+w;KA#z$#!ikOeRgrd<xOf-8Zg0Me$Y88Pt+2y|EmFcDkL9#{+ZP%zhlIS8kM
zdBSI!TL2H!dPSWO-VGlfvU%8MenY{W5o`qS3Rp3o7Wts;cW$yF2y_J60c`>OR)e<~
z+>3Zi!rPE}NazEbw<Wwq;cW?9#oH0yda&iZh2d=pd-wss+m*3Mvl(IDqPPM2JuL5M
zYxCxKBO*5d>i|yv^?=?I?##zwSAw4{@FT*HfQJAJ_!?m5UjoN~9RPbT8`uJD0=5D4
zA#Vk!>){jzwo5^GIt=>=uouVy*rhuG`tFj<Ftt4Z{b@7Jr@#S#Y4!vA0LIa#UoLP6
zpwB^$zn=Igg!8}|fGyT5a~ff0d<r-ToB){FIp8cnKZaQd`E%eifO+UXdiX*io&IOJ
z$$o*rMSz)7BrXAZ#lAxLveemq)QKwqGuHj?Bh1!)58MN80J4?p4c%4P*MV;UreUw&
z<@#sqZUNr{HvzUtugo2UZv%M}-+`I<2g%HY1+gMbL;Ep6KWenupr-)KvB4br1^f(n
z0;qpfg_$z}$ChChN(Y9S@Mjq|A~Bbmp4lttF9G`h3cLWAjurk1_zhsgo&$OrtOR|f
zouUU+k(FR(WW5jr3Vj2c1^o&90q6z3M)-F?FRXAu^wA5|EBWs>#-D|;R)rH34lAet
zyOFR**bMxLFrO6YU0kG4nB8p$o426sZdQ_A&0*ynU_P8jr4Uz=>%Rn09C!~X2Cy6T
zO1)k4ztZ(?Wnt`gy`|KdhPIv;hmFI+UQ1z1Y3K<!c`Be1<$-cQ8Gw%+*h1Ev8Pcb)
zT^4bLwZh@T{w$DraHUYM$VZo~07VC6!fx3DaE3d==8R^TU3wST3si=#FE4IRg;xwW
z8+I|%<N_?@0Dz4~-G~^+yGh2^0$1bT$Eb<`pCjrKWZmX-Muuww?*r9=8WOrc_kn8A
z=*PTPVukRTC7)gLipUEWFFag1ypZwY)fi|5H01cZOM%a>n3&JLS^&)f3&8(*aR(X!
z4FO(+T0*Y_M%n6>kp)$QQ5jeTtpnoQ1D$|ifX_&V0DSNo1q=oT0pi#~B`D=EQt@v0
zYcQuY?Hw{a4*FPN3@{o<0Fr@G0H3go1gOOU@jw!gC~fNFfvTtxTRH(ypBaPx<R50i
z2XBvyB|_mt8$(WxP%4$JbjJlN4Oe>oJ9Ziw`?|X|a%*G|pKnk+%f3N$B}C6SwAcQd
z>vyKO;zgE<8<izB9IC6A`c!vtc{qH0uI(vrvA$<@V@)VH{G<lrT?wUQ<<&K?+F&-1
zy#4K)@Psysv5{M2<c}FBnr~7nRsIwXtbzXRK8n%Z4OM_cTM-8byZ|t>5Pd2R(fXIT
zPWl(!>fZ>&JlF^ng4|0Ycl|qq3S!<>u9oIs@|MLr>EHcX!PL_^*m=@vS7YC%Ztk8a
zWK%6s{Ji3z?5QP6ZU&#Kg;zzC#>(|tqBrg5wZzEHN(aThwm7y~@i%dWl@=woD9(yY
zZBc&<Tq0|Wz%9xqrJ}3&WsA~G@pKi9wjzsGu43R;B~v-$x^SD)*h&8?-2LS$l<6~f
z@kCprhg)MGH%!={T}ALV#lcJe^4!juj~};OdGXHz5BdGNsb4kT|7P~jJ&Xl0ZR?1o
zNb973BkzuywtX7ipHjBKV`?37fw`~2GQjAj&Yb(l(wrKl9~O9=L=1X5^+n&s6Fiol
zc~cPcu#TvbjkNmr0{1x`7vSG+{1*it`ZouA*WT>Y`1cEe1u-4!iWsDI(!Xo?!<&b)
zru~xUSl}_Iu2{+3*Ve_RfbyNkbTZx@cR97dL;wEbiS1Vm{b7Bv4h1nc>x#!ntGuc!
z?6xZ%ob)dgu6Oz4_=`ig_g1(R8nbshH4!7WqZIusxK0%f5rOxI9kJzH_TW6zzvZio
z<w89t=hABnVrDiG2bos?{;%bg8|}OFAR?^5L;vEgMy)gZ<rFEU6vUitB8u-o`}MB^
zJ7Rd;rq%<cWr4@jCZZ)gylgyh2|@e6nKUTSec`p-0uTM`!B(xGFyygaP4v57=eizZ
z4%4<o+KNbfG0WchnCpX11s?iWlGQEa+Qc~XPF6w8P!DmPHPgSmY(RzA=2BJ5{aWC$
zz(d&YMDF_6l%?Blit1OoS#p7g{sqj9OONlKx39~9f|v^)qA%0xUtyMeH)CDdifw)?
z@X){1`P8qeRmZLFW-W**<|#HIt&{#WXkH!8?aumW=a>SIW`5!pJ@hZp9dxzD_HGS)
z?kYwsB_EFFP(M*_mr_@m=_gw5QXJl2>ZffY+V}C|yH5{v+qgw3^%OG%3y>*_H5cRH
z>7;*??@gCVWr{T~slcO=n|o8ZcsCc@;NhizcW~r{2czP9=B<TC6D^OocNoQp4aSSP
zcWo~IWLo_Tio>S4jA^>-*W+65UT$6n{VR-{xwrq&G40z;h~W;1xjV19=&&2J{EVwO
zcon?5xk%luq&n?xuFaS^S=+n)G5+&zNP(Hm(#|v&PC4-Ws=07GqBw})93@zJ&|EC1
z_@cSklcNk$>@1?%9&Abc&ghz$Jl!3GE>?ZI<8(p6J{A$X2Pyn5qRK&Zjs9)a<?XZg
zkC_|0NcB_~Pj8DjfV`Ad7V(66>fd91xa9Zi+w2&~ZstPt#HraLEPLUhe-n1{-sj$?
zW^FgZ1H*uRFlc!=IO*Sw?X$4Ke3zqTP_GG%+|<&fhu7AY>TP^#&qI$*OK<+@s+QvJ
zhTBk6D{Z)YbpEnqpPx_XsWEETlx-zS?o%?IHh-X9)Ecg}9KJVYz<79|v)OqTe{pOd
zHj{_`n#Zs@RR(OBKcJIhY@&?^z71Q{-;dVz4;20P7wTsJ{fd2Yd*jnUoX60i)7pqF
zh<4JyJbP&K`RQ?&uAf9vp4xmtMz@iXlm2~s!3~eBs&wXPIe2(zmDv>}8XZ7U<J$_$
zB@}h8t(XAYN&lkmN~bc+H>PZ3_ccKZ%$8Q|#JL0T?AA`)qo@8A*}q(?Q9f(^ofc|C
z(Gom6=pZ~kRdy;jJBo*&q6|6A%EOMr=OFBt!6Js7-bt*)@XLAUpiBx8UsBioG0UnS
z!de^OSp*+aswsY5#E3)i59lKP#O(W<X(QLMm;P<pdFkIIW(S|K)7sDR(!b_9Bj@PR
z=<4q21uHzZizt2=rOfUku7ic;uu?`}?p5{W{`Ll8Z`_RkCU6ifa&hS{(N)~aMGkM}
zq}1#xK08{lcPLB!gkP=_%l2-fziijr=|!0%N||DM$#UuGPNM%2#ZlSXQjBAd{PpyF
zt4`uJlj#M@?s~g|`DMz)PVe00)RiMU>+Kxa#B#@!#>E_Z;E4^U?&=;Q<QTRq{VT1{
z?x@<X#gMj>FfiV3jXm9(8uYLKu2rpqchzy-ZWP4)(L*dpTBTH|*mF#&Tg)j`TMmap
z#o-f5xrN6STPOWX#7lh;_)V$iKl*5?8)4~Q2^H0jqh$SS$D5z9bM0z(a+hMn`9S^H
z_S7zR&Kd1uBUV~R6~v%~Sf*VKkIHC8&EubRtzCJDZ9(1iFE_szGRCH3x5YVyVhU=f
z$b6Kuq2dYhgT3$!Mos^o@9_t^ruybiE7W9km*s?#T&z=X?MSUP)xqoC&Ey3^|1R-1
zw_^h8=H~3xD#Dl{y~T)gD0Fmh(daZdy|)NHqg1eMWLVT&^gfAt=-)^F!~M+6t__cN
zKw55{Ske1?i+S|Wzbd`wnAM*?FMo4OLGC~G7ROF1jlJ|QS$}eD{D`GrpTmEHVNX)`
z5B;^y;fp>mH6gu&Kn$*soITU~i2A1#havhmy#KH<a?SEDR_xYt=cLfT!oA5y5o2<f
zt;D9fysy?H`j@=_;2R!(x^b`>Y24jB-8|e4`CkL?aQym(3x9rx7`DdU2QQO~EvJ+Y
z<=(E5y|HyaQSvl)8rer)1H$nP5Ch)#>Jzu%m5$R3YV_9wjxn3S{*}|R2<tEN6K75<
z9{Q;N)fhI(A1Q5w9GvtoqHnkB&8?fgZ}EDJ#p31G*wA}`n0N*|=AoWqx60at`s=Lo
z28b$WF_T{m&~DyFKizfZn-&KqAj?K>IBa+t`bTK1pnuzl_o`3tb`3GS0ALb~iV!Q$
zDix}D7?KBScXoMyp5Nl?Q9`?3tH)u@2WNo+!jF@!a3^5aKStSq(HwS@tle9w9TYir
z|Kmb&P;kR_@EmTa-n#J;mh(z|d3QDZyyC6jU5Ufz6%VILQFxq$QQord*|aX1**Fm3
z=1pz#tSDjsnc@(ne}R19hBxb-vRjwpovOPVU$@Y|V*YIRh3CKca$-NmATbUk|2}88
zM2QifDb<|zqdcC-)7&p7maAtCwaqW@^C+<i<vHDj2hZJKPppt_zEt0~z~gn4xCIZd
za?!Zlz~k!gznv)d<DDr59`zB!`|_<RDfi2me_B)!6A&%jKF6T+ixxqjW7dq07UN($
zO-G6{NYQJXU1((V<d||?Lu&h%M2l_kDCbgJ>!Gm@zOSOEeK^S8xI0>0XI|i6KUbPL
zZHdtiHBm3erP{XGg?o8*wV{jl#)u9VP|6v2u+@*#)34jLiNhT#W?T~<-EPK+RCsv(
zEIrzfGPdjd?7Dq{M-lu_79S-Xc~Sqx)>A*ODu}5(Onk<)jo^VNG^t}B4R}&~()vOk
zfimXR%vLofTw0t|khb?Q;dBu-OMnOa(y8*xnRlC%`l`TV<}eWg4`t0T@#G75=E9Tv
z!R75y^A0X~U_swvOTkT&;l?nr9G+gU;86u0L9wg-{~T(2qrk%fFU>G!ckZg~US;mC
zDTwik6|u~{8$7DP!^O7L%5Oi+zFpvv6f3I1Ly`P9o-!}5zb@^sYbe|BH?5TYp!}97
zie17ClBY+ndr8`ZoqeXP)wZYCW@Gf--FRzbIM)_;Kxos&&<z*b{;~phQixHnDUC;p
zSv+}89w|OyUa6zRwM$A}yP2c#EDb3{we3npQR7R+`Q5kQxL3vhT_ua&Un>40@hhde
zIP#_9h+l2J@ugD9tMX{=`cSj$iY`BIS}|EMdb)Y3Bju{c^m~88i{KA~ZE^g@ip3au
zju!PVV;ow;gAaygFJEw}{PU_&1s)-zMSplG{YHy1mz6<I@3`9GQp<K19V=ebv&>jg
z;Vb2%_thsm$aCH}ZJyq=ah<g9c(?g@R)k9+Q+zT`ocjtXc8nAEzCwR|K2A7(t@s-q
zM8B``B0qN2iC-%pnd*(l)*!-<D&>XS6~)eLKaK`m8iqj!kNr3=?z+10)MNN4?BqPH
zyeu6#^iPlTi`A~@Qz-*(_+qZ0h*9Ik$}4E_G~~%a3R)Ap<x15eMd9g*s{#5XW4!qC
z3hwDvj2C{mMReK-PkVUw8|*ax`%%lc!jm^I$aDXAF#;Z5C*i?|di&>$zWVC%_KIq$
zxJTpl<8SJt-hj$0jCg!i+2a(RrtLZYUmaci-601S<)KwdE2^T6=a4jU{TgbAF7y9J
z>02ynBAySU?2?njrf;BEo+M)K;s{^=Iu5&9stTg-b;V0@n<N%qR~nbwf#KkSUa;!p
zis1)rrrR4^OcK|xqaA8LBS!yK7+2e9`!?oR$@a$nle9kA0%os`%g7BYdbrv$#kg{k
zsCxs?=w!LdC*yKbZz%CLPWrdZZ!A@F-x<T`47F3x#dtC{Rg}!bs81U&T=Os_^{0y7
zu$}bptIxZ;Y|`T+K67L@qN7_+74w)v_JXrV@KkN_b@=sZ?De@LkE$J|j!D>5ag(lE
ze>gY|f@cZT_()1{-tcet_k|}%57kJRD(c@xu^AXWPJO2rsqgJPv?)!^OT84NP8I#(
z;WY<&;J>(2Tds^bUFk*4bG2ePaN++PYrOrmR=<oan<_#~HV$5!k+w9_7VC62^~}l}
zUPy~m11oS4F}wshZf&)+REZI<cu%Z8JuzIEDqgc@x8YG19!J0Sf0Xw9*!Pi^7irY}
z`Bc&94r*qerd?p(c*F$<ZG31i>yBCMj2Le4#ZUQMtQJ;ehhmhg)ZjTyOh8&Cc$!#r
z2e+&OZ@zzryt43m0mrt%;dS4vspuZ9=B4)OM#S(L_LHA`bYHY8L*3A{9W5taEJa$U
zWAI=fzTE6*`SWgciGsGsK6Ls59$ZBqKN_&BefRA)$Q`}FXEL&<l-uc|3TCd?GkCIJ
zGCz4X<GB5cSa@>8u$oNMwf>m<*{iv=pSa;Ef_}l3v(L!^9=s$b?k|0)+u0j`!b3LO
zZMs;A+?@j9!3PS{r@THUqC@Jy1N#G4^MUCi^&$F2ua9oq&k!T-LDzC9Zz|-fN9nHq
zGsT6caMkTXSuOto`qwjseJL9UG4j4rzNk9IZqF1gzsKS2H^kg8lrnIZIQXoPt>>uu
zHP&;|OJa_WPP=AnBe>~Oh~1aHA9hCDa6w|*4$T(*f5NVC3~tJ$+2R(;a>|1{2d#YT
z3MbvVPIHspS<pUF{{h@(rJZc%YJEFu)VQ8Wvw!7|DQ}f3%@yMwpt7<Q#eJ^WMq8$2
zCE0xO`T=eQ8fS>c53%YC^$ogxkTNzy+<%Ck*!YpC_6Uh{J`y49Gu=<uWoEjc(`c(U
zIlo%?)2vy?OY`xVyt+)Wibp@7Bt50fQP@60t8~$MzDR#m$Vu;L>FhLUzBXTM?<_j<
zeyhp6xs%za&KK|hh?IH?ojWZMvwr;7)^lEY-Cv-s)f)-Phqu<T@J?D@M_wa_*R#8S
zeBa~Q`$xEn-<p&9MALgz=hq9x$j7LIZp%7|>yH&jufHC!9zv^1)`aWT+f1-!fwC$?
zg{Y5-;xrx}T!e!M*bg}O{h0mmaMxVk9^|<~%>M~@!7hum4JT}<@%_e)C-z4QIX#*p
zhNttBsT(gZ%3jm3pftVO`nu`7STuTq=0q(Px1OU5CoL8eo}f0f7i$auaSPAW$);W5
z$U%0HHaiLiAw6>;7NFD0Osz+~+WhwM*DtFsEvU?{OtI}(WUcdwC8FBPg3%J0PYb5J
zqStG@5D%YXZtC`=<>HoN<DkgIVnZn#$NWfr9z0tvTK<Ar|LA9oMcEZvkDqg?)YAFH
zupm@OPNUk0F{5_^H%^S1mVAOwv1Lr76~YgDfKxa;c)?CMKJokQTibEs$eta)LX6-p
z@pfbM-9y*4UQuL*`R=lYPG7Cm2D^dNl)j7R9@cMUuo37PyvP!Be!;*LZj+PkDs5cj
zzH4>s@RHrd3+m;(O4xJ!WVs%zgwqR{?N*7tl=X)F^(e`PISoY-+^vuKv<<FeyvHk`
zY`Q*0rmPannYUh349Sz1sHt9NAzdBkw{6`|p9iwax>>lv%JJ1A^*0R2?bX_?YIw6Z
zZJK|5^L#<A^oGA&Ek2{C{TglP_716AD%CKN&(3B2-|CwBYefIoXhz31B81KP&mHiN
zhN}&f8Nc05y=MR8Xtg*0BGq5W->emfU!f8Da?yG9I#Kd>?1bCbY5lh|V(^V3RT7iX
zD{}k!>yyUmb)xt07*{>7>g&aZ!nRy>PP5i)7qzu@D)-60+_Q8+-kIw~eRQ$YUoS;D
z2!FHS<i$vAdW~H|uZq4oFW4Ynvw%-GX!o?2TSq(@Gj<6NFmljuY!Hq9KnExrwf~>p
z*6jU5ju);BD)6X^7#B?VuBo*LwfOPwtb&-98^r{q&0j?NME?&1`=8zZWx42G@Yf5k
z(8N+x>MKRp|Fu4Uvq|VHSl`6tWYT3lKRtiB=X&{VQQzuF{WJZ|@j3ewe=X>tUWnln
zB)?~0_&;3P*i;Y`zeN-`+Bi7Pfd`+*G)!NYyA=QRSKzT~i)cxY>X<$}K>GH&{QKsE
z?cXc#kfSYT8L`*P%KW$Paa)BwuNVJyvj5(b^^s@E|D3zt)p}b3ZEQT0Z?}nYHmIEJ
ze;N0#{}GkfTz$S5IuPp@^6#=mV_TblJC7*Zh225Xj=K&@lkMU&Ta+n}8wxJ4ipi$&
ze{rGDn=P6ZDJa4I?L&?@{D<=Xznw(&R42EK*di!bt8e+LxP|+6yLN;4aLr1uP2X5>
z^Nu@rJf+9muG_^tJIsk9JGARuiKXq2t}0q>Xn{x79pVYIdn;QLvel)xUHa}6vx*{#
zuJ70>4i`nsb9ZX@m~(y}?4Da^GB2jQ^~W{1!Y)w~)lhWSb1u||*9*0q%t@67pF2~#
zpCc0U;Ex+c*#^D1ziA5|klbW3gQkiXb~gSB{z8+*Y?H3^+9Mhj!#&F_Gv@ukJ>s<)
zU84WVh=7cN`$s2u^GG5eaY=WlTl);^Gm(1ZR;_Xl8&F$aNa}xz=mkC6FD4*k<<)+%
zs2E1H{Q+^Vn9VIE`k>hIo=r3Uj}e}oSFrUk6g*M)FpO&~suV|mtvsaN>#X`=OufY3
z&!)*5c;cnA!y=|Q>e%bBcCcFa?X&Nn?s?)44=>z3V_-LbAXdV|s}nkihuoVt4=vl+
z_|v9*2-+C`m4a75WlZ#5zjYo(hTSWO!HXP^nf9G8W2kB0`KpB)v$KitD}kE5^CcA3
zW37i60S~WYs6$!Q%&xSh-X7!pa|PwU^Q9X#Enlr++IPMlqk6pawHP&~hleO$5;c40
z3oNP!UP5UJ53hH=YNC3)^OYVoCaH;-!?Y*StK3{mRP=wae9Op_1+A)!6~mZ~fzf^9
zThv}!5W`n%ShIJ&mZRn__a3Jqr?eZv&hMZ6sN<l7${25X_xnY<@Gn)cXDFuW;v?8j
zVW+h@w7=;g|M0l|b&-PS5Ij8@cv{?|$1r%9Q7?DD#eXX2=NqI4R^`ak!p$CSnkYST
z%lJO;*WshH@WAH5d;6J);Zs4=wci7VZ9BgWF>(W4cv_4@+IPLGfdAoQ`N(~ny-f!t
z<Ba$dp32fQ!l5);py>|eL9jzJ&S+&k8W`5?hTmbV+P-*Yhr5QudF^7jX}J5&n8y*z
z3u+$3Uz5e>lw|F%qD03gB!<VtxFtjm8yOido|U$#C90LNNiFt5y8UoBXG0kqb9MWc
z!xLhL4@qb^Dsn)0QesqW&JGWotu{h<+tjF|YYiLZM>kM62Dik)WAua(1BS<o>{d2T
zqJ_6jQL)X-rh>R#*QSPMKJl_CC%&s|<D#0S=#1P*%t`e2v6+(d$j9dPC&gU(JEHi^
zyC<%EYg1$4Et{zKuShNEffo0!#^t2nvavT>`{PgX;P1uQ;cw^I%(J>iyYlbO94?kD
hQ{H;OTx*G-JIL1cp)5-ByRsFR@1PC8-LZN3{{UvAUJd{N

delta 40701
zcmeIbcU)9g+ci9MV3e_AMS}$s><v^v!LciLQL$h}90Wy>rl=^OqS(cwZpDg5#aOXn
zSL`i`#F!{nVr+>TOH54e#C&U=!f^X&?)&{c@ArNGWPU8xzSh2WFQ;&Zv-X>k&(D`!
z*r4|6E;;K<9}SrJqHap(F2A3eTRZh)&8G9Glnxp8XD>gOiT#FsZ)f0Va%#V-l6hQa
z+<rT=M|Fe2Y%nCc$j$7l_S*Kb!B7g;8gL14`%hGE1}+ABG4!Hf-R~zCgP|g9VN}_<
zhMHTHH83a!B@L?~U$C!|@Vd6aP#JF5!Oq}g;7Z_inm!B6Y(|5tfIEUwVq#5jHL#s#
z->;>{p8%sKiEF{Ae_|52DtNfY?ZC{Z78vCvB$~B|r#00Id<Fgp4yVDz!DAz$V}hci
z4ddNZJ3KHvB6NhoV2vIg8yYsk;MBxmC=EXoxD5D3V}qeA_zsx*Ma|v|E)RPhxD0q9
zxU?a`kQk2u69j|l&`Yzu!4+V;YI<pK8Q5>#RsSbo7I00oPk@<z2bg|o;Bw#@TKrfo
zevoE&2A58Ng8?Js2)0Itg@(r%4E<Ud3`Jlc1arj0tmDEtH+E|JDvdXR&4?diwT`VH
z8g1}}T@rRnP5-Q=YL{rG=4SwN<}^k;XG{rjAy)+KTF5^XYLJl8Mx8;geAIHAwN=vv
zhXuyOSVtH}TPKWTJ?=y2O#2>wEYBJp8xtB9jS-2AwMI=a+-;|(vqq1NvRVy>9Qd(A
z2DVr08yFN3#Ri>*&U#Gkpy+mqnLct_;VKC`JF4{z35>3fvPW)!&GO=W)fsRW%>D@+
zrBuhzvy(byeZU;Z*r?F@qoNIlv9aM3f+9v(*Pxuz(C2^|KL*SxI1J1gwycZFT6{uc
zcP+spbPfx$z~(^Q@2WOrRCN6bfn&l9fl(vJ21Z3&uR~`;ezRBk=Wc3-)4Hn-9vK!f
zJP;k^j(q4>1<Z;}>7mXL6Kt-rhu*9hrlj6u!4Rq;q8peF)q1ImFVs(6R1UD6ptpj}
zjNcvk6zELf6<itI6#3BK6E<g#Ua|XV=tr<Gfh%%K?ni(%EYeSH$(z1v7ybpCYvLf7
z1s?3LuJSctX7Cs~*T5Bx&w$y*mysUpJaG+}L;1r%gTV#7bdWj})4?2~IB)_pzA{+N
z$Qm6K7#29fdImN#+689CHiGFFfdp*Hgut+{(C8RLv~|olYm~uo5e0DD89YqgRbpUs
zuF7CXaKAt`-89%7+E=jI!%@T0{~sYRaJbsin~10YJ32@mt5MOY5+<)z%TVvaeXzOO
zKLxWT{lHvoBdy`l6T*WGqoO0in<Cwt0Clo{hMvH>Ps~71vjQu@Y*0|NysJq0gn$s$
zt(C?#!K`0NFh}s$kt*K>vw9c6?D&0P_D^(3VANO?H+GCVKs~|Lpu2(DFJ-`71FyqW
zz6P!g`!Lv<+wxj9kT?U(<3Tu>1@{B9z}8?ESXblnV7A|=@zc?2MXqanTH`%n4!}z+
zP!328Ha&E;VKeliu!ADPBBBg^42HZIwL|L1svVgCro$?<uoyU1<C$PC(n;gg_$jbC
zBlP3O@Yv|#5fcoC)bVnqVpZA%#Hsz=1<dkWfH_W$z{SBIYg}IA;uBRr3C!Xn2FVkP
zdDOWuNv%cnIBQsp)nGUguSV|!vvwQ79M-gWIk#Aq(sN<5l&N4=HY#2&QoKf;?a0L$
zrZrKW41>U|`?$~;YcSe7I?Ni2$!tiUBnK3)lCXKInz}ZaeOMmMjdg@|TwqwN)esaB
zF*+2LF+*ot<{*2H5e8ft{J`j#s0f5R%}^)P@W5zmeUB!FMw;yec7lKF6m`s(C9937
z4I6sn#G<p*jI$uHm1V#zpyh1UHo#_uUczPtTF;T|l&F$$3nu5r&ADnXe4+6{FemFy
zFngumd^NkWVAkU+q+_4Iou}$(XIKPg^$2TZY+#td@NA~K)?&j$gF|tELhE8jh8PUv
z7OK^;#>H5}M_@q@4-AF7!B8I&T%5a7)j{0|E(SZw8UtSh7O4%60aJI9)e1}kbM*y+
zxfnVxR@-+A72rVp3Y!hQ2QCZ#96Cq;*CmX{hCXq8XiN}lHhZaBfhI!D&>75@#%X%W
zGPMJzfY~EK;E%vNm#YP=(0Ce{>9W(*0=vSGt1?*2rx%zN2?~mc4Nr(M7$#vTIRTHM
zX5_I^q0wV-klY2EBefCC7Ef8FRcN((8aD{c8Tt%*HE_-vwE=aZyTPsw=8R2DS9_)*
zxIFA&&2A4)aDm{20BiWyTD9fApQ;(x1T(&<X8*ii^}D6<aWFTgS4hVSezQ?6umlQb
z3s<7z?5R_m)Gn`_p;llCm{W0P2Kt{Z-UbI&!22_GtyKcE;6FF31zZEW!rl*NOBaG`
zf!81%)34g5`pp8f;IQqgJ_a^>s4tlLdxE*c=I&63F4HGLO|VF->7AWwmp8~%YZx68
zIy%&V?%Snicmg`d)(D%E?jdYWx&gb@Nqbmh$33bYWgTgaL;CH|S<zhh7YEy8HM646
z6EOA++yb*pobbyG4unm|i{R4Wi4h}^jlpn0vxjD>@uAW6$47@54Bx?K`o3VM9}#Vh
zq5p`maU?@fX#LRe;0Qwo(mNu47MNRXLO22}=*9tcIq3!aL+6-w(s+DGXi!M~v12+M
zQd{!+pxOgtM~|#OA~eeI5H?%bLi2YAbAPC*aTPEtR!-xX=%9%3;2`-}>52&}j;ixS
z-%`ic$H^-8%)ZCeG@Zb#<JkIPp<_a04Eo8ia`KB!RlnTOuL|_51^wzkKl|6u^7XTS
z?Q$d`|2jm!+|VyG^venTGD5#x&@U78>l*#KMZXNuFEjM(AN_hqy{<7N>X#?VWd`@4
zC~L@su~wY9oK<@r7gfrsjDFM@9ua2^$1tXzQ+wnUx|S=e8HR`)37w-Q&a2aDE||Tq
zpPtV^JnhL^`VftSLIT4^yCUPEn&1yEm|>Yq>dKjWe)q((RqS`~cY0per4VNnK4fgI
z`JbJmIzImcD=I=h->&L^^cpLh+y7^;NV(I0;T0v%YG2juKh-N*tEr@MOZj^Hmc|IV
zVuzN-&*T9eT1qdg%V`}f#zyjWNW<ic9b1}@d~7hZLf08(mpY#2KVkVOR$gsShu)v4
zmhcNin#;8u92P+FLcFT<Y-x6Y-~quP=LLJwU|t5<rIDwxg?!!DQ!drnNq$t@$wlwH
zq<1RmTEk%QMw&9ROJ`4WD6Gc1C9SL>=XSQ3zk}EaVj(%bsi)MbrX0}4A}y>br**NI
zO4l(M2Fk0tc$>x`G(ZWRLC9YTeN<PE9fweFMLUnsU?o(ep1}~RgccwasDz&9YXj=*
ze)|v_sl--pfH|y$rXn;{3FYO7S~b*DtU^ew%P$D2e*S2Js%=N8AJdvmZffI=a$p@#
zsg;|Y+tXs64zUfIYn0P#drDus$pL;Asf@dv=4Ub0X<{(6lUMn9o5B(5poI1y<g0}K
z$d7H+RM%1v>Z-(kjgXq65=KnTWe7rQ+KmXQelPR2=AH&acO`8KLRu~eX}Mq`sA-2I
zq~^CVUwej-nxc6#Jw+lyot6A9Af%=(-CXw@f{<1hgp~ZGADYX#{VdWhZ@E%`ixk*G
z4(M+&UuXeGbdbbeGnclgvqPD5rZ%vA<XbJg%~Kf4@5X}`Ic<PN`q?7q4zQT(v_zGZ
zxV#pg=CQC)Vxpa#SKm`Q&{9qdu$Y}Nk(nG5ySAsf53F`dg21|-=4G((lV~ryAo(=}
zqm(#!nmV^O7%cLw0p8{mhM*UcndS^EbZnwYndg7x$8pv-$8e*&w74i(^t6)$_jozL
zU?ylC+WG<(TkfD_(zdNyMSD5Dk(WIT4|%YMx3ssd95BQpJ#Q=L*0z`%pxSII8rR6v
z90QAaOUhFEteqS%)MEYtBAaTG^Xhq;YqU2QFjEqXDAovA-C?1r^*znIV6mr6a-fH&
zRI-DdHq2sfgY4NGs1#i0z@m%2lKeERo@#Qmvs_1m!Cj3*zjcI#)rPvTX3_a^fdO6)
zFi@$)!b+ABn#}G&9oSj0*duBI$*|BV%ml-f154Y!26#%vJIQH57W1f12E!o5g<W_C
z7HgzT7jyZ}1_Krivu=d3gXJaPLLW};Ea#4}n9o7LNNLXIF4$LK8CjMzq>G$pwMZMf
z$hlUF`3~Y#&ph-@wXSkNutgftmDAR|ysO$lc5IF54Xo~R<+|Rc4&69pmFsw$;}K#D
z)mH3*#SX=gVLXiJer>X$^{rvCy-FR-b78Twku#eH3#&7+1p7()v%6d=)M9Gd0~cNL
zEvvUlMyRtqxS6+ftB0H$YBAS9KlFmX(s)VkDF=+QnDQX@m2dU)HXZlldSs{_yoM;D
zbqMuQLcbu?fg!U`Z?%Hh#723V<6*H%W;wl?r+FVN&OW7Kraxe*dH3prQBZS4NX_RF
zLQILKweXax`^#x#EK-2KoIA#1K7f7?Kpa*NHp+f|<$!RD<knA41I6@{b3x_%%atN5
zlC{4a0J_;<PK&UZ+6*ul`pc^#yrr}Oa;32r>Cpf=V64T|8JYRWgCo36GZ2cRhpF^H
zW%S*=O+_(XMkv}IgodcGgIQ0ckopgnD@9q%k0GGOsICi^cZVVB2r6SNO&KERMp>ln
zA#$Z?i&T2391v|W4;ZSp4{fOHX_8@K@auY;&m+_X85NQ-bxeQ48YbUDEhY>@o0Ym>
z87Ak(;201nSBkZmhXtznD9gc=2CI!yuVTaHTtv?su8t}WAFVyjcVJ->b1q?V)(%oF
zgB<ARX-<K~!BGx0=5JxSE1u|LlX(ONRVlpF2sv%M#gqgA<5bVvd=??hVT@^dmY2~g
z=ek)WKdYP;XE86cs(DDVOLI@t1z3HR&Z`z|FoZK?o{tdcZy9A%ybP<kVsS+k87Wtq
z*xiW3eDezV=L>C&2IV8EWau_hz4|MuO!@CZa41Cvie+jR$^+}INj?q;aHUfAqJfF0
z`k1{&6}0BS!Zg>?--OjeUNzmvVYI=31+B``xY2TMyv4L=jB*;#+}rdULP7E>ga(Bx
zCk_Z5K?nzWgq$Pv&?JO#ssZg9LO4xn?rm;779nJfPH*OEnh&eLd@J7D^Z+5OEQFdz
zVgQxUT!gSnpxw+5)r;cxL2Y7w=o~^_6|HQv9vYS(+KLcHF5cU0j8V5vtT1d+Eo0<L
zQ!S=QigM+lJ`M<Q0$^S>_cT9+)k>+SOQ@&WJ67G0v1@kpG|z^m9+Y?(I2S9YO|zKo
z$EoKsIAAtH=Hui_(=F!R5LHiZ&o5v#&F|J4<K^7x7SrJInEvwMq2AJ}@p3>i$3L)c
zg(CX-VuVq?kX%I-E9v6ccP7On++dqwF^!7jj#YVvw`mtb9hA@;gxV<~p9x$kjGdx~
zq~jChw3!yO^F(zen0Qz;4~NA{W7AsW<p6_Iw2*S}$%Vz^r?U2>Qj_G|6pPe)l3Zz4
zhXk*t`=3v@$26@TsIXQ?ZQkN<DB9)26fFYBD&-T8-{q0#f15txo%Ah{zM{b(-<f5`
znRX-dgGu@UBX5AGxdpOkpX1;j?rHuU7Mq3{Fwe_4S<anpF?XA+o>XA#!U1LptXA-_
zQ_c{sPL|W=Sj>f|sLjS+hv9Dls}WqV%CV7+frSpnQ7jW7AEhWxi>FiM+_@IBM}q2%
zq*Fc3!J36J#<5~4EFSi70)uY<BH!XxRVWdghmslN=D@<@geT|GYgil;SlBTeCUF9B
zZOueToxy?4Jf+J?a=-$MY4lW7K)zMm+q4@Y9Nuetn}0;82{J$naHOm{O%7OSkp@kZ
z(-vAx8>cD9XSC;MggDsBhHb7hT}^|%bEv0z2rOQ<sMc~=os|lu)@mr1TI9q{tZ7YN
zGMVooj+MeW6MAd-3~uU!>v}sJMu@rRUtF1ALh)1bbU`EA&ctQ}OPzQFQ`D0f_4M&1
zEKDEP3`6EL3!8}I$<7%It4)5oU9g(LQijv~Bdk98ab0Gsap-<5`02240>Nz^9sU<A
z=3=kx(?jMM48s+R<sFB`7Ae<b=9jS8mxXz`Vy-bae@Jok83L;p;vAG*et^{umU@=c
zV4iBJYc2{_Pc=`ZI{}L`$;|ed+RW$Hh(0qfMTjj`mY?|<ES~S6ZK%KN0<~>w{U^X;
zt<=lfZJMRV<-y_s3@6w)a<^Ql=2BGIkf*|GB3G{OZQh3v7Xo@<u$Ken{3LZ!^B2Hw
zF9#UR4daAqn+>ajl8QZ5c#+z}YPqdoF%zX#=7q30hH6``!BR_Ox{qabnd1Bx)?!!z
z@KhJ*GgyQ4bf$ibxvAZ1>EnQaItAINVoTJHS0~62SUvMI*bb``ES%tDz#NvU>2SV=
zVP6T0RYZl+rI%r`Y3c;&CJI(#6D$q|mQWo`7g*h36<0c8#WHm&DW#hp!@?yQmYwTz
zoJ}cdSn_FDz4EOJX$7rNSX%CA%~e>ezdCVTSEvg^J#C4Br4A;$>NqT0OG~ZPTf_3&
z!BVFmJyT$D0jno$Cs)b=>n-NrA-08BR5_<>u}VFshlN?V6jpz^@-iQX)i{~SuZ?*P
z&e!s-P*@?ba4w8`--E@vp*PdK?APKRyfTXqAk-YPx|yY=>z5}SfL~zs$<MCyIz5gJ
z*a&M>eq5>b>ISKvS_i{Y_7(GpPYYJ)6f9es1{(^-&4<-DKfmw)&1$|;UGYlp(#nl;
zZiYp=vr(?J*<voUN$q5H<_5v?QCh=p{Tdc0m(pkE#u@po!P>}x)m`!Aih{w>K>uU@
zG~cXNMV;b-pBW4>h*Rg*Raj~h(uaFFY|-n*Wa+S?@*T@;RXZQu9q(liBTgRN!p8vt
ztsvCz;I{nqu$;H+6N`192ut<k<Ua~a9azRy*`fCptr%FrO1T&p(`#6`Ji-L;y;IFk
zU3TkXv1im(`~+4TSXljaa2=Pa_Jw*SzW`Qa#9_CJ@-)}lrKVG@5wLnF>2R<!?}pVY
z-_x{P?O(;y6aot;dJVnJ7a4+=a*b@Nwnx!%>K=@cJ9On(<gg4D+iN=l-GsuKsg_)R
zZ~i!AG6!pxdgZwf7E8cs1uot{+NaNG9^?FB;gY1Tw<Pw-X}c|^?;$jlSMByTm&sBW
zn6m23VX)XGC=Ok+9aa-q%8YP$4U3b-R=KwO)k4%cG8tAQ#hYh2+h8?Nazb@XH()6j
z){^4^xzaw1x%UCJwpf-!JWb1CVb8=K{{SHik|}30=1&f))lrX?!LV8*uAH(LY=YGa
zmOAH49Lm4i!))jSi~Wd`W86Plc1RA`Z!y1u=%FU4@99wc@Vi|-1`0D&3)=>Z6;XOZ
z`th)wb^v#&j^vL9@{KtnS2}1hAA#tlq+`2ZYZgwramrQysGJKI>ru66v<kb%23VYh
z$_0lx4;E*DT5OqPs;7f;C>RQhqmK(wjOlV%92|@=a=D>-;wXoqay*`2UCfLgu-H^o
zzOJW~d|VDVVlf?t*j*lc#M@LP8@r$q>YE>0mmhkTA8LLAM<T^<Izqlm=u&>D>`7f4
zlpp#uKlCI&)Z~=z7oQ(Gg%GaYS(np#sAqm?X@2M?LhTg4YG?G&i2P7Se&~rFGB-M_
zo?RDL_WMX!98(-icX>I$(55raF@HKMS2|@ee|%2uezn8XV6ns16N0Z{aiFkWpo>eL
zS1q-}yTW45>J70iuzJG6Qp63Sf5B=A3&(TZRcn4h9U7dRVc6m{OWBa5eHY}kGZym;
zh%8oJNOdpjdjc~X42yBfzGM=x)I;|bgjfO0f9#EQE*0Fa6Jc@kDruynmv*O}%eCX9
zGzPRt`Mi&fh(XPj57`btM#_gQ0bi)5!u0<VAYaz>f?NXHZGh?S;xE4-C6Lc05&B87
zR4#|GJ#+hih1K%^uN1(ZDXdkrAUi>?s_FlO^{d4H5%Hk}|CjZI|C54EXvrt2z{lW@
z;6mVTT7}3Q(;i?-JvIIB7%trne)!FVy|o1Y4b!!cmaZ?Dc0aOw>x&9<u`iwEuJ;_=
zAQ}cU>K&#uMAOL}xIo(S;4dqfS(g#8jPm3!t5&2HLJJ(qUm6?b&+k>}WDhGsQwuUB
z{pQEtF>{Zivt0ag1!XEm!!kpN*K#E@I9apFOr_5oGNTf;_<~F+3BTCB=~{e2W<E1C
z9h|_w-5M4_C=6Z>W<}P4>G-MUNM>+@#v3)>1g76+Fz3Y%jrW52Dae%e;TJgzzvzF&
zs4c}K5IE6JXbvaA%=k2zpMp&3j23?mO#8fMUj%b6$ptgNJB)mXIezz`vxgq&UHU+C
zd>=FFp%!0|nbD8XS<$Cp_TbN8X8fz>Pi95_0MqZSrt6%*023G)`wmmL*K{(2g*2PY
zpo3<=j~P`2zgT8bjf-jiWCw1=Wf3S3hdNrs|Av`QD=nY@jxql4b7YNMBO`JfjoWJ6
zPUH4qe#rFepxI>F9X0mVxRb`6!Tcy(N()fyieHla`IV~5r0huxYA^nJhdD6*&{<4h
zEuKufADGer{3-$tqVZocXVgeZJ3b<ye8|i=M6=(=j1NUTT}I;<7jX=jQ*siR2jE$Z
z)R_LWHJeO(j>dB(ZBfqE9Nx!FFi%S`U*iQDFVxbJF~tnaz--w{O(!$`D$ORdf?L4s
z+3g8h#P<IMGwDwJBJaX4+)pq(1+(C16yM=8u#G64Q3-YkuqK5x!2!&KW{Mg!SWMH4
zgSnrT0W*VgnqFSBoiw{5m>)8G#znKqO!u*BCny1K8?`hCGAmG9<2ss7re0UG$?WQe
zV2-_qrvDw&r5S!PpXLf<{JjxiMlHekF|^URJ(w-+0%n4)VAi}lm>)9J_0se{VEXxk
z@nh(ZUq!(|G&E*<t7a?A`NsffaX6S6L}(6V2BS2)ATy&FO@ALVpI9xvAX6Ww>Er}<
z{Uij~k_0f1k#oRwoU7>zH9Hl|51H|cz>eVcV5Z-s=@}Yt2D74DG~Nd0E_4LU4>&<-
z;c*De;FQMaG`<AJkKs%FVu6=wXiPf?Hizh2Fr#wui#>S{%!2Pz)R>d-DQq_QC79`7
z*`fa_yn(=s-h$~^2(@8_ir^O~m!oEv1Jl0}BQ-`6LuE~`u5nE;UF!0e#`J3dyExbz
z%zWD<Ai#os!K`s-Fh6A4UBOJ)L*rgx*1R{EA2RJenoVYY0h(QqDGkwdon0AV21B(7
zGHVvB*<_<!KUY0{3(?fSW9AmB`H^Xl(rhxDGe*<H!HkN+FE%$u(_<;(Q-IZ-x`3c0
z7_T{!Sx}s2lUdLtFf*R4=>?fO`=6hJ%zP3x-Nq=t0wRPK@&7sNHT>Tc%(}0@FZRr8
ztsw=OQ-7ltzZuM)_)PN)Wq=8{X~O%M3AStTf5-IOq2;$r^UvqqIXAcbbK#C2!pELH
z^}l2eT461pg8a{gJA3wh7x3t;e=gkrxo}sGr2kyF|8wE~&xJd8O7#MtN9%ts-2b_7
z|L4N}p9^=xahzLnL-^;yy|Z=|L;mN&{hteW+l_+%zc1Vq{y)2L*OmZoqm|VE=!3ms
z_fOCF))Vz|jjcs-Cu33LG~rj(*iZOYF%}nls~Wo)lZCMwgf~@;#l(ne#;(ShB9lT!
zRd|$hfyXQn=wj?=oGlKJ<_O2?pt&NHG*4uc=8K9SgBFNL(n4{blqy_40WA^}NV3Qw
zEf%$1K}$puX{oqQ62h$pXqlKrS}yWPX`)$8&<c@CS}7irR*BZNK&!=a(i-ssBp%g7
zRsCzDs_7!VHuQDkH`03HR|oW|*i70WjCDa9#Q@SKkx9xB=6aybB9Qc%I6&GW9P5L&
zicr!vkxkkzDmDP^5Rs&v;yfu+xHJUq5)(+fMGk3?sND#(S0s`4iR+{+;pPU~FJ_Sr
zh&<9k(aarmNTiYui^rrRqIF|5%F7*%+Rzw{IwoFFctpX!350Bs-UPz3#t=+RA)FL`
zO(FO;fv}gtX<_t$@P>lb1HxI6Ng<;tgmRt`&Wk`#2>m@EoThM5IC?>F@PrWS1>tj%
zO<_L;*JcpD6p_s!gm^)?N+CzMG>72S3_@~q2v<Z7g>w{|dPBG>lDr|rHHUDY!neZB
z2SP1x2upk*To-v1u2E>;0>TZE+5$p~4}{kgZi&_w2wp89Y_LGMBVJH=M8Ur$gglYn
z62dYI1XC*r_k>?72)->L?4@vD7+XVlL&4e_!b6csA)^(9a%~_y7J+Rb^luH}G=(39
zV_OIgZ6L(9h455lQ`k?zwH<_?L}WV%A#EXCrSL+yw1?o-4nlH!2(LsAg>w{|c7X6&
zBz1rg*B-)s3cm`sju2{ffUu+^gx^FSg=-Yr`$G7aNcDw~(h<UI2-2Sh(WaBJukiAP
zvY``{zYO9fl}A+kJ0p=%q<2Q5Wt||Hx<IfKeqA8=c80K*f=OVhqem!MyFw@|GAU$q
zfl#g+1hWY22BCjf2&X9&6^`8@ICO&$+Z{r2kxgMg1=k)BN{YxH5JI{`xJtoMxb%eJ
z)B{3tPY7j14ux|Rn)*Q~CzAXi#Px)5pF#!U)(b){KL|^DL8vJ5C|sk^zBh!AL~3sc
zDZL=Prchb5?gPQAH-rs+AXF7EC_JLz?+?L6r29iy)(3*AFNBYUUtb8m{t)(3a1~g3
z=no3keh_MkObQu&A(ZP6p|%L@521fQ2&XC36^;WSIP`}QI{-p`kxgMg1=j!w4Mk)C
zgpdIcu2OIlE(0Mr1wcq12%)jap>U2u(?JlLiljjh;s!#vPr*~T4Tex_5QHUzAv6<t
z6s}QdKLmoeNF4$pWiW)-6k3SZLm_w#fv{mHgqGq3g+~<phe2p9(uYA<HWY#>5JFo%
zVu}7324OFS_QE(EJ<>r8AaxX(Bwt|;0(BCBq|V|1sf%zN0qQD3N!>&?sk^9X1@#b-
zq@LnD$xpZhqYx)63P}z|A-zQo1Y;jjdnCwTB!NU+Frx2|M07vl76QG$m_-^O@<8I+
zNJO^}Mf5<C8VY@ocuX2BT8{z^5z9$K#S79f(P=a&P^6QFi{D5=!Y>RoLTn~kg>ekB
zeKQ)_TE`&Uks^~qMi_*0;SfSaU^s;SV<4QSFj_c9KyV0$5E}tujL4?2pMvXH2oWN3
zEQF8<98?DdVx>i@{p&Oq9?6mLh!#1KC_P5hjsnGsB+@u>oitv!MT6qREYbv#N17;_
z#egP>RFFuCMn<n=kkMq(Iu?Rg41^7_5E9g)9>wToCyDfN@K_cL57T&fOcQ?NA^47i
z$DZ-1U9vF7L3lF`9@aQ`%oLdvGR8wFHvz&d5jX)t|2PPzDa;X$6CpTEfDk(o!aR{p
zVLt`eNe~u@$Vm`FCPKJMAyv4<LvWe|Avqp`EOIEEqtJ9Rge4+rGK9Ez2=^%n;Wh<A
zt;rCUOo6am<Waarp?v~`6(ThOLdp~fuPLk&trH=5B|zAa2w{zQLE#Yv|0D?MB0UMh
zvP8Xu)(gL>5PXy1v3DvwHVET12yc?$F=84zXp_jKkTDe=<)*`9vk06Hq5m`przva^
zj>!-lrbCELhOkX!Q`k?zbq0hTB60?VkYor~DP#(lnGl?2KuDemVYkSkaE?OL6bO4o
zQVN8)nGo(%$P#X|Ak<2Muw)j510s*YH45!#LpUT-XG2Jt1>rS?Bck;j2wt-xY?uS#
zn0P_q5e5Ib5VA%3TnNkNKrqdNa8mfqgWx+C!d?oeg>gQFHx#V%A)FPN6f)*PD7OH@
zc@ek(LjU;?PE)uj92Y`xSO6h*A%xFGHii8ZTvH)@DI!xLge-(`l|qhiSp>l;6+-eN
z2v<Z7g>w{|$`G!KBpE{7A_(^>d@I}*L#QP~Sh5(xb&*Hm8in>tAlwkCOCY2yhVYug
zEzx=@1g|9!HY|m3N4%i$h=RX>kSEe{Fc8a@LNG0Za8LLxgWxM5?4@vD7?(qML&3Tn
z!b6csA!8YYa%m7Ai@-Dp{g*>HP2or3xB`Mh8id#t5T1%`3i~Ozu7vQDh+GLFWCet)
z6kZ6IRS=w3LP%Z(;g!gtaE?OL)ev5bq}34ORzbK=;aB0d212dX5SFZg@SDh^aE(Iy
zwGjR#QrALASp(rU1nEzsXp_#<iM3ERr1NybC|*)|M8$s{5*bDMIwV?_4#Bh@f}QYN
z55adGguN6@!uTnKHx#U&LMSXUDP*jNP;LVRvk2S(q5r24PE#l<95+I6*Z?7RBZT52
zo5FqyuA3l~6p@=CglvRxm4c&i$$;Rr2|{uPgfb$B!Z`{}H$x~Vk~Tw#%Ybm7LIvUW
z8H8G!AuRa}LPe2B;TnbZTOfQSQnx@z`3%Bq3YA6ctq{DnK-jPqLRImC!Xpa)+aS1z
z^lcE9ZG~Xk4&h_rw;h7-HVAtuxC-MA2yZA@cR;8qGAU$ihfr=OgxVr-CxrexAe^R9
zS2$)uaM%eUHWNa9kxgMg1=n2=8j8qW5JEB`T&3V9Ty{fn+65tbH-yF_hr&4uP4_@(
zDw6g<h}#X}J_S$VwiiOJJrI`ch0sjoQMg8-{XPiZB6S~xl)VsMQ)nStXF>4V2Vp}N
zgqGq3g+~<p_d{qc()UAHmIc9d076^gcL0L#eh7Ohv=_#M5Z+L*9)!?QWKzgD0HNF=
z2%SXWAqf2sLO4yKi*P&)!Ql{u*uxOIiEIk{DYzbi&_hHX!66Z67bHL7aun1{Od$0Z
zIV7A~90U1_BvM~-ozzdb9S7mOf;2$nkpe`sY|ucFO2SD6X|QO00)&$a(ope&gp-Ps
zpg@sM!bt@wNcf!s;iQ6O6~@z`U@?F+Qe=`sg!v38R0NVni36n3!tpFyd4{b#i$;wR
z*%bCua6JbhLPVZ}5ONm6RSJ>9<vawZa}bixLx>hR6wXm-dI3VLNV)(a?mUG16vhj;
zix6sEfUx8ugb5;#!Zix*FF}|jQZGSBxo9k&_4<<WP!W7@)xHS-5g=|N7{09`N?bG6
zkdkU<4Y^`GYGkB~{-1Eq;8|!qR+q>dZ~DKfa=`aXie?2~G5)If7SaE=>;~_wDmRTA
zB~zgecvy%IMI~k?O63?!Wj(rU{92Nl28g5gjN{7lpK;=WsKlVK&<6Z}s?7h&;H=Ky
z8>bqjFM`Au_l>hn^HIMdBIiC%du~23I+$9G#4|q3ccz`vf@u6xPJV8U&zkZBE{coj
z|2grSNm)mKG^QDg97s~0pG-WNByN9ie30e)%y_OyMg5<R6)ar&$77<~_r_^ijdG1n
zO3R9C|Kw}*c6<w`q{#c;c(3>eIzb%&6BW!ni{e<p9mcGk<)kRPtYJN+w~k_G2WhzS
zi|TgC7MI{+3)eMe!OzXk963q-r)>DnPwj@xp>`pgSEm}KeaEr4@cosEDi`q)WhP23
z61-vZVT4RoHqd5}7^7(|!1Uph3(=Zp(KOy<8l`D1HI0vCIci!fP2*Eg`v89Q=WFp`
zQv(0doAS{gw&g=FRW(h2@RkpeRns&+gv-47gzNWOA^L;2e7^62rga3f(tLvMfTrmW
z<no!X%Zi4_i1ep(`5@@mnj@dkWnw<jeNof8Xc`}xy9=;4_~0%dL*iq112sQBcFVME
z7#}z1XN0ElS<g>2%}R}rQI!R1X=1SE$giQ))inJvTt4G`9^i+M;xd|r<9lt&pT_wZ
zE;T+#5)bghp`lh0=tu#d(a>1=N<cz;D)@wJjvpbcKZ6vZY0l8rX?GLHYFcGz8#FBv
z8h-fyTa`!2K*~H}!5qr#4B*4(g6UTcxT0za2F^={U4S@MG>q4@>d=;ITAZeR3~d^~
zR!-2gPZ0J6*h<cCCUFJ)0k)D4B2%jY@Hr?pGG5Wp|21K3g~(P;)*NdgoB@rkoT6#9
z5srq&51$iehIN1lXl!|+rqxCG1|r$=Bu%S_Fuys%&s0sTkMJsf3!pjz(=@RG!aadc
zfa#jn5Me%v#|k8CS|fz}AuThWp=taEimO(^nVN=OSILigq-fe$Z3|e80>tqYshVgt
zQL@JslT<B%D~&6QD~T(ID}@V#3xN}#6P;T{7{Kj;(}vT8(;^Ds_P{w;3@8qi0Js&D
z2Fd`Jk^TzsHE<R92KW}Z4jks!0kCNrjsmBFGr(D3pEx~5icWZf^!I=tfX4t=e;&XU
ze*@SLTmfzaT=9E=hrm(b7;q5y5jYL(1^96GKHx5J2Dk}uS2zpY0lozu0q1~2d^Y|X
z0+#^p632n7zy;tsz+EC6I1GFad;#PD-vLK}lfak2H$X0M3)l_Z2fhNf18ac|z(!yb
zumq3+PTzQ`usS^xgfU4flfbnU3vl_|Lm%Y<-vPs54*`Y(gMh)nK;RJKih?Tx&VUP0
z9jF3S1wIC<0p$TFpdwHfs0361_$4~-X8VByMtouaAOeQ~ZfCAQ4WK5#ovaSP-K!o@
zA7}_P0^9(1pb5|v@BlmkFQ6IF9PkEw#PuYprmG8r)qtwN1(eUtFAMk#*a2h$yF_+^
z)G>kcyD6&a2DAX0173hP-~%)RS^^fJ0niv|0yG3X0S}-);0`nb>HzhCUw}V=-+{Nl
zOW+Og3iug#4g8C9;{^iTRsRA9VG)i1tiT|E`{^1W9pFB?9{3dC{%J+qo+3>m!n1%y
zz-%BDNCsqJ4v+-Q1!e$?fu+DaU<oka9^2Sd1ZDyYfN8)&AO+w*p9w_Wh65u2e#MKA
z<4yo30>RMuH!(hnI|Ud8j0WNXKHRztXa}?hIshGkHh>)(YY$Wa#xMguguDeU*#_7H
z{Nm99a78emoBS08y#!tWe*r%OM(A(AzX7j-Ux0rBe*%91ZvhEDcEBrye+RhnjzGRv
zAQ<QYB>3Z3Pv9ydzXo{7xd!9_UjaPad;@#|Tml^6n+-k&90!sB9(^VOe9|rw2nWUh
zqk&*xB)~nEdn)(e;jn{%p+@|VjR6SoJA(c|7$W%`qc6}E=m>NMIsx;6xxhSNCXfQi
z01tDQknVHQZK_luVIYEifqp=1zyh=Yd{OVtKo@{tBq#xt1WExt0Y8A>6{&~8=nMV|
zxB^@S;(^IP9Kf$@)B_p;?m%Op3Bc#e@dwHT!xjX>QQ#QhB<gkw2tk-fz-~ZUIP<TH
zBT*54_3T&R7H}K52|NP$?LmG|F$8Fgv`v742nPT>8uGiCy?{B;2QY776zp#N9uU7^
z;tW&<sshyjew(Ec3U>z@10FzgAOQM6U=T122n32kF9s9`N&qE+QUJe%@BnxSJOUmA
zKL9@hNx(E<I=_0649oy#0x3W!Fbd!oRD6IIfG3cNOe0Y9C?FK*0lO#Q2i!$#@__FE
z9_j}H0r2ULUUNm-AYcUG3f~$)1>h#^gj@J^2e5-+1b##KU%*0u-}6`rtOeQvk;rfq
z&>MdDP{0moJAqxmZXgTbS2lcsPCz%{6e@5YSPk4o+5zBl0M8|N^Hgy>0v&+1z))m7
z5LgQY!5#_lN&dnp%mFY1MS!9}F`zh50w`$|U(J+iBveB9BfuG`3{(MvP}t|->A*OE
z-&_3>`5pkK0i6M!(scrO8pqQ%o~3OBcxJ}4t{X^`3p@j+0IPuh@a+kZcftqH&3p2f
zat1|_-?QYI(*~fI?u>9P_|QH+9W}!zMTny*QuWH~5Xapi5#SJVXJBR90#md8Op&fg
z;_Eq5&u-k$T0?9FlmQOHE)8}BN&)y$S~mk6155|l(qt{X7Q6~b0cMKSxl%*ZN+o!8
zuGF&PTm-pJW&^W;H9$#VwWvQ&>YeZ@g6n~GKsvzgHv!yuSrL%3ks1-;=F5$h8!ju&
zjrBS36YvaRsZW7Nz;^&nJd`<d2Yd_21$e&pEx_|PoW~_7Cw3QMTmZTNJXW^?&H-nE
zlfVgp=OKULa}1mf90!g9M*y4v8mQAIp90PRJQr*QaDS`=d=7j8aK7XKS5Us;D+Im<
zt^qfJ8vtv{@NIxPkq6ud?g8He4}gcjj{sU?_yKqfJON$;JY2DI?2WqsTmC1&M*ary
zuyzvVE61)kU>?7I2mS!qjqLloAohSA!W<4JE{QN#4ts^e#i8NK;i}>)q8~^Z#=Bsy
zG(E0Rfq2Fx6vwYtfG5DE$c*&_2r4~6n_(_fcB>wL7h(Fd5(P76yacc^1$9=8;4*Fr
zU`Zz!${|n|n1P52V6Jtpd9MBP05zToIB8+shin0u*<GY<0j>l10J@Ji!k$2Vpb^jj
zXbv<3c$!(2m(fgA3#bmb0M&q+Kn=hZ_!#&E;G&^VZGaip16V0mfCW-xMZ7ed4PoJW
z!915`9!%o_D3#>K&;)P;8UyYCPjJc96eloiuKQ7A#(L|yceDY<AajOW0r*k&igpO-
z`$agyV}LMV6c7rSLh!4mn4BtADDI13N1y}HUZkc<WgMp=8zvtCi8CcgoKBTmR`!G0
z6X*eS*T66}KVe*i%Zxw-hXY(CR`5e`FnFY<^W2CzuL0OAtAPk;+~9~Pgr@-G5RL<n
zXBdbDVt{CX+W|k55uOB01SSCSM*L6Af*CQKjtBuP0;T~|0sI)^0M0%3_CjC*zzWR=
z(+@w&eBp?!MEIsbl#r!L2{U2O0Fr^}fF4ig)=>sv<x*kaMR+NA39uMo8lJncT$aIj
zy<XIqZY}gRz-nL?z+)8iVA?b;99D28unZ`ec!lbq{AUCvVx!ps>%qK2sSV6VI3CQa
z7#7G1k4E?|n1%2{ZWnkIn0JRzpmM^-IlxA^@kEO?<2f|XNw}GH1$P2E0PTTxKwE&9
zP~2X4qpmeD7wNoUw?bIIv|_7x*~LpLww#w$yv&+|@O^-nU6YVzGs3*os*`|UwE$P(
z6M&bYn-IAX_!Q^{Yyk9@u!7mJd9Gpr9wYn+cmS|~D*!XU3>*h`0PMYOz-K@Puoa*W
zIbjQaF@gre<n0>kPKRM11@;2F0e0z5fWDa;GfZs{K!4gya{$;6FijS)4`3W^_$A;!
zQK;9^bULVtio-F4&jV)wwpg#sX@r^aDc~e<0$^t6fU^Mo7-k{li@*hddFVcR_!2ix
z-CzP{@CEQWz)YzTUjllozCt)h)7fLxiLU|XrTcx4FdKId_zt)Z=#Bga;j6$kZk*o&
zOvG-_1K7HozzrZ5V2kw1+(Gy@a7)8oFw;KNn0c@uR)lG2{{YaB8f`Y{DZp|P{=%>4
zz)!#v;75R&GXckzVHV1GhMDl07XA}_7xPfh>=)Rt0s6lLeg>G16=uG#05<Fepp}uJ
z)Pl~Mkk8au31&vt3;6@#e*rA$ci=ZbFYpb*zXEz;1qxDp^fL5H-s1Q(bDN;r>>6gO
zCny+x3!U9a6vGlUY0J<E*1K3L5N3DV!?pwdLYS3gPjgtWCg2w{;zZ)@sUm<G;PrW7
zpb)@rWF=XtcPsiKoxbcr7RGMZ8$z9FXfv+_wv6M(abdU7W>`<a$x|AY;7!a@Knb8Y
zz!tLN%#c0>?UINqs1*zs^hbFKN+w(?j3|SItN=6S%{TVSXTV{AH|BO}VRk83%3gps
z=k(>p&8gsu;bwCcVEQ8f%g~pg8i(=c9X>i#2lLM0M*#2s={i}rdH0ZE-aV`a=ywmR
zBCPv!A7DQ8V_rPk)&$o8ctqrZi?`{xavE{}=h2Jz<aocWF2MV6w3`A<%=>w~kJk)n
z4wQ$+`!Ku*(-7c6$On3DFv?brj4a3*Mg@T9B)o6Z5#W6j-aqLE1Oviph2)#i8=+o+
zAHcgv?2Zud6)>kX?HyV;4*Gat91sgc05L!`5C%j6)W!heKqN3$v#C!2s-i}dz!QP}
zf_HZDx#TFmSs~Tfw^DK{BiwgLP0IY_f?mXx=j>w#O5M15FS!;TJejaVTJf<%b>%!R
z(FI%%4(l&<I_D`i52$V|2c;Mk58=5}>h{s%kFl&^wy=J8=dZx%j*_ua1NR2(xHV$U
zPO0KY+u%?N4nGvCcVyJ<?>9+Cw+3#CLo;zCQ>uu+)4wP{+k^`&X_2cawo7u7R=Nty
zSKtg+(TetdR}rvFa+fZ-iuttfyNZlm5>6;;h+lR|?M#j}P#xiTRVpLC_)01wIoA+F
zcEfL24Lpz_ZIw#b6gBop&80>)#qd4I$ET)Px<^WrPS+IfdnI>g{Z*`o%9bxZc){|i
z_Qoa++`SrLGCZv*68B0@9{S5${nDO2Yqd7#t<6JwziZ+*?uY)G_p+bS7Spbl_=0Km
zH^T0AwIAH*QF0lZM^Y_i%o4qxPwG*k)XW@P%-UMQd7tFud;%Wm%EUKAmQQK2^1@#>
zkNdSmPk4Cf@1-4lKC*qg&Xd2gdDO(jt%kIoHMe=W|LbxGTTI8=Vl~t1@4D@C`&jzS
zpOY%tJoLBWwk+%y9F=l@ge_)WZSjOP)8C&vwac2(KW;A4)#h=%wy2hc-hW+NG|$2)
zjdv409qr0hMR%(2Xfh<;zI|-f7WX5~>^X0ma9#{@7l)C^S%0lmFU#e+&XpZE**s>r
zi|6q0&|f&U`lCh%uRIP4uzBcjifYs*ZD>}Zl9DavguAfpM_T>eQzs11I@WkBwX%8W
zZ;=W;;FHm$(3l6dn78g?F48*d@1t6`dCI6~4zB2Ez3#4!#c}4YzcMQ)y;S8>wI27d
zdFb!Js#CgFW8<8A>9&~Q#-hXlq}AV+HN5;E=8{#*{$lgc-*feFY0S&?mcJab#jI;A
z1|hAp{>EQ-$H{&34)z*u^SIbpEM)HbJF~Lyr)HF?(D7HBhyE7fbH5~3jsMhNw#As5
zh}+CvfA5w@*Gv1-7wws7^JwZVo}a=%ck>qY4uXTdMTdh@9chNQSa?oy`b2o+xP}R+
zzU~$8>OAbfWxG`Jg=8Fp^~F&)`H1aE>7l<U_O?sK(nVU7kl@j%fm<`U=&zEkSg7A8
zAJrPSSczeT!QvzSKw4-0<+bHa11fi~Jng(>Y}UZdgC5;|M59B<eVC8Btp&_<nb>Ua
zFQ?VqJsNlz^f%--ck9xpQqrBRh`}z!g+IqfOhH<15zlXf*Z7DhCnYCw;gA&KoQVv}
zqG9vXclrN0`AdH!!z5;rr+q~C!*I{>5yQ^HJ@K&AUHaZfT&DQSNBnSD3YP3zh+apq
z?eM+CuE?fuCEuK?FLtBmdg+Z@h_y$MqGb!w6Qw%qZ#*tnD)Z391>wsSPi5WoYayN?
zFKJZ^ar7t(Y<^U#<gC9i`FM$kn>+3v!47vrhd0HgL<=$YD2mo!xg2-kwWq0hr!DZn
zfS^YVT1L+LOPIZu)?e&$vNS3;rBMT=NX<j~tfeS+43#sqQir*p-`Cv+zdWC(H3Pj-
zqLpZM4Et<G8*vk!QnR+=mt#^_=lgBd!^fD~Rfd1Icz6%V*jVj#yi!>VIga}2uTWmL
zxYenz_xE=~o=qDxZs3kf1g&RJ9hXWMdD0%|2k6169mL(^sLI`T%Ac7NN4Hp<5_#q3
zStXe=(~xo5Y-Fsz#I1Y76YDBoI9V1RP1GaP&W>U@Jft{ZG4>iNd)8O%q^*u#Ilev1
zr;~V_ji{cTgwqK`VUlz`0ee{&5qv`0BVF$*oKHg6hE2NPRg9wjb2qUX?5w{h`Nv|_
zDi)pU>W;$MaP*Wmy`(8UM4?j!azJbQoWhcd>nRdXN!6V77aE@$(CF79bN4Mk4sPnG
zwDJ>;u;~6~s%XpA!-Uz(!+&1NjhM{t7aY_sU^VpDC#PneJQ-TuEk!coAn3*Vh58B0
zX|y!OPn0-=X*Tw>R9au>RrPhQzr8v5ddpq@^}X(wGG_SU5?e%`kt#duuW(Mi(aE?g
zXV}aS<}Fq0we-Ag7m<Xw2tOl*vr})QXi0DAf6P#{JBulzS5BKZl0z>s@ho~6vv)gI
zsK<wA?|&|!>^Z5DULQ%{4gbCR`J3Q}b9?A5E@9;KzI{*oJDiu?KPl4}_e?Ns`m3e)
z{8lA*VdCoj7(UMi?%eP`>nm2C#}v?CLS3U;dC#ix{<l<*rVW}I-t-lh;UN|2Cw@R5
z7pc%sT|Wo=i7FSMpXn#6<w#|#HEQ5#&|hs`Y*G6@j?=H<9FO<N`FY$=gu&Zce@S-b
z)Xw2SYvu7a59GHN9v=GZvRzMa>|OJtQTDc)=r7cM&~u_)H~-~X1!A<iXn8p6uhuTv
zw!@8*EuMNQp31o-JbW&q)^7sD;T-UqzGCb}DejZb1J(Ure|dNLG7q}eO7YEB%V1Aw
z?G)86N%qeA8>~Bi7uLQ`cGdx#n{}XQbqNiPL58^Lmssh|n5Ub&RG)3D?6iR*@k^<^
zeItWBP|Sy~hyGsdA0MTq^=^2wD}1@LVh!nU&Nc)eJ@s^9<V__;*_<v86gQDp`eC5>
z<&xy?p}*|=`KifcSAKix3Ot))lfn+9KdKn9?8}l<Qo0Jn;84nKdHNtR<a3m-ziIr(
zE!GXIzgn{o9+(~+eEn78jTZ$?%wDy2vSeI7Sna4?gT+>)b=F@#p5=7<=H<(8zgKFA
z!=V=*hZJ`|m%5gHxBODZ7DGg<FR(LxxQ_-86Y*al_YV&_25zU~f$7MrjDH_6);(sR
z`2Gu=OX@?e58$vbC3{I5CP^I(CrKTO^7ihAet}}omssov`-?{kYcuBGlHUvzJujp8
zUj>Tr9I1SjriOvTafOF^4C@qBwE8UnT=YX@^&k;7T&#w#b99h;g_QU9^X;{o6ju+(
z?i?Z2gEK<S5AFV7tJG>ZIqNTL@4WY~ySE43<@tm*X8&Hd59P%vt#`t|F9zjW>Uj=&
z?wxBYG4?B|o_67s{*~mZUo(l9Ur9|o^mmJI&v-SnS6U_x{%)Lrn8f;9$fb?XF9e6|
zuPYfDf%67K>PRu@isUp(e{cE4zDqy<>g%aPd2I+EoP7Mx3AlNrIsx^!xPNnJ)1~=;
zt@zEJ=YNeG<BUar&wG;F)tIt%<^J~hHMuZS+(vmG`kUduomxKAe5Ibf%|m~8{KDrM
zmpY8Q^sz0bWQeHuHHJ}t+x(7%gh!>#KP|I)v<eZ!;2{Nsh>2fg2E~Mk?XZ2PhbT{A
zCJx-`(BB$5J*+Gbz)H_7Ma)N-G)?wxSbDc=si?B~`=v83PtAy#<mCN(=*&LBrHq*&
zqQq6?4z6`oYVNGR6h7p)_(c1bd$HFln?_^Y_Z=;!z|%v2t^Bi;l$#D6BXNnUb&x@S
z@qE&kQqA7eq{+6Jr=!Isq;)oisgw1@n|g0{oO`;?=21Ru={Lw+f4BXlC&Ql?o3^=t
zLu(|(eUZf9=d}KK%9Z7@wxs>SM0chQhldk9oIm<)&i%$Ezp;7DKnzdLe(HZ~Nr}#T
zE7)SzhKZF(>wFj<&hWUpD`er(6^||Ger%OZFqy7}iObCWH9V@o!#DiXc5g@9-?Dj>
z!QZnOvoCwyE|1dpH`rp_#)!4wBKMx~s0I%g`;u$#^vV3r<}r4R2!n^D@!xoAd3k)e
zv=7%%Ys25PQtJolWwh|QhDoNKdV1vH4>HA2^Mj`JPwmfd%EWYVYoJ{8ob^>taC7>9
zcDd8fYwjyC%F(5MtT@Wk)`VDbjd@KPCyHI?Y1BC3bsbY|JoYC1eI~K))%8(1qjwF`
zQsRs{b-b8=J^wDsmK#!K@$+@5lF>ty%#|v7l#f#ry7pev>*dxp)4Ae3ltKDfj~V*O
zlsDb`bhpQ8JXSh}uTh*Bl8fPM0S{gQ&Rf0YO1alnLu?*h5W_?2`cl?D;lCeRXp0Gm
z6I*koVCVN71hLO?50WN|1~<^u;uD4M4QbIQ*ejF^lR1;r$$Hza*0h7C{TJ8Dzbs3i
zB;GQ`_DRC&COYTBB+>Pz)XwN2Qg2Ew`pz#d+?3)?HR7@Pi-zZ=a$?vm$-(2jhi#m;
zbE{WZ{BMrd(Qli4zFg_jri@Xq8q0~@w{Yegg$zrfslglLvo0ULpQgCsqNA~4YP@)I
z3)Pw%FACkpg<)E}2*<^y$3`v1(2>rQAC6zW11YrYgnfwN%vidw%X$aTQ@<hx`v4Bn
zZYSc!VWf5bPnB|#v?G+Lc1POpF(^^po7#PIa{2eioLE#7TxeksKUh>#YoaJ|7u7{?
zj=L)jDH4=~KeC}x=BeT~_3~52>K|~CFeDGB$NS>N#5^2-YEKpC@+9}N+c8Maa9*-*
zeTBfocC$(un@<%bzC){(jz^6CU65M#p`|*Se~&9=95_|&!Oh?z@Q6>%4k&!Q+A7Jo
zVyYPQ9q#ODMM~+DvUYuk?>ac^uSVZe()Hj4!-Q0&({TxjO(R*fdVo$x=LbB%T&S5W
z=EL^TU$UNef7P^SC%on>DU_XEe+_%woR}kJp8P%!F&qx$g~r`PT4(*m?p=R*5q@*Q
zxRXjRDs$C8S(JK+($v0ja@Jo7e<GoKUc{Y4Lu`44CyOEQ^q7kw=9+PSlUQ`mv8_o;
zUP?VCC95&tz8G}SZu7Cth|x|hXC;fRNbCGRZ@cP8r)A0FE_2u4Szn~b#l#D1Z+R$r
zxUn$@kb7yATWLq@l_iUh{hb%(%Gs&mVzOxP2x)J@1An(pJo#<ACrJ+{eS)++_@f`5
zBZfCbqIP}xV0N<>NQ-in`zZD^L_E?uJK^uhPVgvp&MT){K%w1|QCrN0Ml-}tcu1XQ
zhzpN!5xr=pNPLXaR?buhyZ-Tv8yhOPg(6R^a;~n8h~Xl5{<2@+W$RLvO_0SkGVGcu
zzF^v8@L(VQw#~=#_I_w_TU$Qdho8?B&X~25)>G20nW86bk7vk>{gSrv)$G%y-h`tb
z9DQt@e58u~vEYl}7u0;-0Jkypqqa63oy)+3htHTpj>r5j-g*lUt=Y9xL?g4Ea#x{s
zig?0;vr@$K9}84Kvz?31Qa9j{-VQtBBa)lFn@N7kzwy-bZaG_&GTP;*$Zss-FF!}w
zU(FVlCs-7>W{apNShX)_i{noU)UEX#@%&8zThCYX69G@L<kd`+LKZ&7ZI7LE)sftK
zrKiK!gMRQs18^|oNFJOkZqwrncyPR&e%w`}$JibN;emaW9yjNTde3YHiXqQz1vtN*
zr*`l7@$my<=lxO`$+QJgcD~roWNHCUQoZ?N>(8(YRE_Nw4StfENc9(r5kH~P`p9dI
z5*L2L&AV|6MWyHHiH)gZ?F;0vD^-M%b!T1Idr-5TV-~5C^qZwW&7FJNk@w)V>6^Gn
zRC$5o^pt9jHrq)S2MfmQeXN%pC<~vLsKF#z^nHnZ^mv^+FBV4`U!bkZyt=no6nllG
z`0HZzbnyP45Bt6P<U}c3XKOk9%{<cc)cMyXBI6b6pxaswqQuWqC65mePp_rwevv-q
zX7!F!>{$iv02jPe4B<e<Efvncg5Mp$*-OQlpK*!oEY$rZV6^cQclW8oY(w7!F}%HX
zHgU_<Wtkfq+Va*bsV{=A%fuzKos*dO8uv_tmZ=BxF{3BG7`MCMMO%hbmWiFO(Qhg6
z;BtS~vg!Fa)80UMXp>Z%3*rxCls_EPmWyg8EVUKOMb}@@lAX&%VnNPM6T|*x8zyn-
z7u(F1^eU>|&^6zlvPwK>rdnd*@dAl-XMF-ZTP3Fafj%mMzff{lzT{G|Rpm2dd{JR-
z3RXu9uShy<nHn}T?hNmUYcX|Ki*PRRL94}9ZWM8=#qHk<)LyT(z7goH(p#&i*LAfn
zxFNnq%>AuEKCjk_<G*3zXmxe|YpptJk>9tzdwj*dVz%ygN*7^oky0<AVY=x4C+zm=
zVj*j$m#Fu%R%4IgboKJ%lvk(jRg4dKw9+<*4-a)>y12}|_1degb(i!q|6PCA&ne$e
z?<Kv?x~;eN_<B6vi2m>1xpkey?iYDVsMYP(dU5Fw)Ie|b&+C_>Le51$RnM9ZjH**I
z(J+<w*tG<D5qcGCekyv}+u=U2mg3XM5p9Ym<Yd@VXdUGI;SPF#H`s>Y-EPn;tJmfK
zEZ#kTXx~luf&84m*{Dw6_ECMRZtU+p)pp}iUkW;}*|emUos-A5P3jGuJwYRH6{->w
zi_XyYn-8B$oZ7Txz8&u6Ye&q=8B1;!F!il+W`=s?+En|a!I@VFINEYvk|Bm*1v!6s
z6>3A3zt;3^<hIc+e^LL<Uc7L#Xdt0+`!}oCxmVi+J)byf1y4}4xp56Ku9#-~%Q|nX
zP${FmE#}Y7A|7d-D}9ECF5uBSv1V|~r}yXDJiI>>JK>SP%=D%3pT_#X^Rq1}eZGEp
zHvappaM$;~{6+dsjXXZQm3(;N>)V_*<NoGo@b9&8lC&M!!*iSZxBRy$f1RFxDCQSi
zPxeI&?<V@Z`l{UzYu!z@m@(Ugr4UAN7Cg97H%!UMUioPY-qqDca1~;>QItrWGGxb{
zA%|@-%6!CM2-WE+juyh4(T@)AiE|Fyu1-|*lGmlZmv{LJIcZDa{i*&YvvP%%%aM1|
z>0O8#4Rf&TD&_7F+Z`~0^hK;Mq)hzX7W&^zZ1vpOb^>!}rx;<z+S8BU`f*M>emmcq
zt)9?))1s$y=iz?*3jzLU#k0o-nM;eH3h$g$h^|HKD*d;IbDV&N6)jNs+j+vC_PZx0
zy5EURv9>76L}lj}M>BIX)wA~>Hmvp7dc#tIPr~4aJuV*}W{PL<bT;l%4}HZ~b~(AO
zaJA7kk4n45P2?fHlV`sDZv24V;%G7W>-zTH;$<;Acjv>q)tfEzUygLku05RxS6<|!
zgB<sWRxCm1cS>^pbqRbh|E5(OdFevUp_P!5r|!7q(`v7m^*61+&5%+hP)1;~s8hnO
zo%F|EF}8$Viqtnt{9Xb*IW$W&D2Y{||0jg@sUr?ei1xHcS?X1tLHU0Os72hP^^2>%
zebpE-+T6WyK*S?0|4grx@$jJ7N&EFdaiJvg?r=!FEopaG8gWG2EoIkS`vX_`DoqR@
zx+~wrpgynS?!4ltdfBq>$BA`g2ED>xES37;Ms}xTVznb`-1nGz9Ll)!>fww1&)wkR
zfeT`cZAKgQFWe0`S&lzQ9*)1YC>P?mt<u?DJV9FL_damq#=p@oY%HpkM(*!@XhZRM
z?;{yX%no-E&b04+SVi$zhq2>XY>NHXkfDyv<9JurU5UX1ABU0Fc@XN)-RNB5o}$B}
zF(+&ud<2KNzxOd3C6BjS+8fh?JGd>)&9<fO)mT`{Ankh}bWze?M9o;P?EU29QS;JL
zY-wLK7ITr-`Mr<+C~3#Ki{s4w1j^?Hckv4C9<Sa$?yM~jSLDu^EgeD!N42cE(iX!<
zaLOY0_ddR(<gRZ#*0W*|JSE&J7+1Eyo`5fPor3M`e@>k-hngL07Z`b{jy6v*>O;?o
z(&gY00uP>eyZJ1CD}BBg--FR-a^yKNtQ=Y}S@Xy)?frUa*G0Sz!EV6~cLrkk(48sw
zU+u^2{Cp>3wCj)5b7DKvzVG1%58T5+`N(}rd0guJUe2zGH21t{1Va+%Md$Kph89U)
zMjP>$5Z}7YCH26yHNtIA*t4M3w#s6D;`Rrg#n-rqPqcN+IBQgc_Hi-RsPMqB-Z4?3
z;Uh)$3U)OLE1q~H(zk+LVv);QilcY3zN%nnuAcQ{GrJvjBF$o#P;`7m)adB3fkD>h
zb+Rh9wEJ#j5yM@zoRGW1^uX?88luJnyHV9Lv<RnrszZJS`dXu+LnFeo_B^mFWfb@i
zCl2EBL%W5d=jTRyd1v!#0{>9uR1se-+0J`Pz9ROq-ROpIG;!GX@8sEAX`9-l1}a&q
Rd5Jp}>?(>{KiIwbe*kh67eD|2

diff --git a/packages/openauth/package.json b/packages/openauth/package.json
index a5e3276b..01b8d93d 100644
--- a/packages/openauth/package.json
+++ b/packages/openauth/package.json
@@ -32,7 +32,8 @@
   },
   "peerDependencies": {
     "arctic": "^2.2.2",
-    "hono": "^4.0.0"
+    "hono": "^4.0.0",
+    "@oslojs/webauthn": "^1.0.0"
   },
   "dependencies": {
     "@standard-schema/spec": "1.0.0-beta.3",
diff --git a/packages/openauth/src/provider/webauthn.ts b/packages/openauth/src/provider/webauthn.ts
new file mode 100644
index 00000000..62c29910
--- /dev/null
+++ b/packages/openauth/src/provider/webauthn.ts
@@ -0,0 +1,327 @@
+/**
+ * Configures a provider that supports webauthn authentication. This is usually
+ * paired with the `WebAuthnUI`.
+ *
+ * ```ts
+ * import { WebAuthnUI } from "@openauthjs/openauth/ui/webauthn"
+ * import { WebAuthnProvider } from "@openauthjs/openauth/provider/webauthn"
+ *
+ * export default issuer({
+ *    passkey: WebAuthnProvider(
+ *      WebAuthnUI({
+ *        // options returned to the browser for navigator.credentials.get()
+ *        options: {
+ *          userVerification: "required",
+ *          rpId: "myapp.com", // optional, defaults to the domain of the issuer (auth.myapp.com)
+ *        },
+ *        async getCredential(id) {
+ *          const credential = await authService.getPasskeyCredential(id);
+ *
+ *          if (!credential) return null;
+ *          return { credential, claims: { userId: credential.userId } };
+ *        },
+ *      }),
+ *    ),
+ *   },
+ *   // ...
+ * })
+ * ```
+ *
+ * Behind the scenes, the `WebAuthnProvider` expects callbacks that implements request handlers
+ * that generate the UI for the following.
+ *
+ * ```ts
+ * WebAuthnProvider({
+ *   // ...
+ *   rpId?: string;
+ *   request: (req: Request, state: WebAuthnProviderState, form?: FormData, error?: WebAuthnProviderError) => Promise<Response>
+ *   getCredential: (credentialId: Uint8Array) => Promise<{ credential: { id: Uint8Array; algorithm: number; publicKey: Uint8Array }; claims: Claims } | null>
+ *   verifyAuthn?: (data) => Promise<WebAuthnProviderError | undefined>
+ * })
+ * ```
+ *
+ * This allows you to create your own UI.
+ *
+ * @packageDocumentation
+ */
+
+import type { Provider } from "./provider.js"
+import type { Context } from "hono"
+
+import { generateUnbiasedDigits, timingSafeCompare } from "../random.js"
+import { getRelativeUrl } from "../util.js"
+import {
+  decodePKIXECDSASignature,
+  decodeSEC1PublicKey,
+  p256,
+  verifyECDSASignature,
+} from "@oslojs/crypto/ecdsa"
+import { sha256 } from "@oslojs/crypto/sha2"
+import {
+  ClientDataType,
+  createAssertionSignatureMessage,
+  parseAuthenticatorData,
+  parseClientDataJSON,
+} from "@oslojs/webauthn"
+
+export type WebAuthnProviderConfig<
+  Claims extends Record<string, string> = Record<string, string>,
+> = {
+  /**
+   * The request handler to generate the UI for the webauthn flow.
+   *
+   * Takes the standard [`Request`](https://developer.mozilla.org/en-US/docs/Web/API/Request)
+   * and optionally [`FormData`](https://developer.mozilla.org/en-US/docs/Web/API/FormData)
+   * ojects.
+   *
+   * Also passes in the current `state` of the flow and any `error` that occurred.
+   *
+   * Expects the [`Response`](https://developer.mozilla.org/en-US/docs/Web/API/Response) object
+   * in return.
+   */
+  request: (
+    req: Request,
+    state: WebAuthnProviderState,
+    form?: FormData,
+    error?: WebAuthnProviderError,
+  ) => Promise<Response>
+  /**
+   * The relying party ID to use for the webauthn flow.
+   */
+  rpId?: string
+  /**
+   * Callback to get credential and claims for the user.
+   */
+  getCredential: (credentialId: Uint8Array) => Promise<{
+    credential: {
+      id: Uint8Array
+      algorithm: number
+      publicKey: Uint8Array
+    }
+    claims: Claims
+  } | null>
+  /**
+   * Callback to verify the credential for the user.
+   *
+   * @example
+   * ```ts
+   *  {
+   *    async verifyAuthn(data) {
+   *      const clientData = parseClientDataJSON(data.raw.clientDataJSON);
+   *
+   *      if (clientData.type !== ClientDataType.Get) {
+   *        return { error: "rejected" }
+   *      }
+   *      // ... other checks
+   *
+   *      // decode & verify signature
+   *    }
+   *  }
+   * ```
+   */
+  verifyAuthn?: (data: {
+    credential: {
+      id: Uint8Array
+      algorithm: number // (ES256)
+      publicKey: Uint8Array
+    }
+    claims: Record<string, string>
+    raw: {
+      credentialId: Uint8Array
+      signature: Uint8Array
+      authenticatorData: Uint8Array
+      clientDataJSON: Uint8Array
+    }
+  }) => Promise<WebAuthnProviderError | undefined>
+}
+
+/**
+ * The state of the webauthn flow.
+ *
+ * | State | Description |
+ * | ----- | ----------- |
+ * | `start` | The user is asked to use their credential to start the flow. |
+ */
+export type WebAuthnProviderState = { type: "start"; challenge: string }
+
+export type WebAuthnProviderError =
+  | { error: "invalid_challenge" }
+  | { error: "invalid_rp_id" }
+  | { error: "invalid_origin" }
+  | { error: "invalid_cross_origin" }
+  | { error: "invalid_signature" }
+  | { error: "invalid_client_data_type" }
+  | { error: "credential_not_found" }
+  | { error: "unresolved" }
+  | { error: "rejected" }
+
+function decodeBase64(str: string): Uint8Array {
+  return new Uint8Array(
+    atob(str)
+      .split("")
+      .map((c) => c.charCodeAt(0)),
+  )
+}
+
+export function WebAuthnProvider<
+  Claims extends Record<string, string> = Record<string, string>,
+>(config: WebAuthnProviderConfig<Claims>): Provider<{ claims: Claims }> {
+  return {
+    type: "code",
+    init(routes, ctx) {
+      async function transition(
+        c: Context,
+        next: WebAuthnProviderState,
+        fd?: FormData,
+        err?: WebAuthnProviderError,
+      ) {
+        await ctx.set<WebAuthnProviderState>(c, "provider", 60 * 60 * 24, next)
+        const resp = ctx.forward(
+          c,
+          await config.request(c.req.raw, next, fd, err),
+        )
+        return resp
+      }
+
+      async function transitionToStart(
+        c: Context,
+        fd?: FormData,
+        err?: WebAuthnProviderError,
+      ) {
+        const challenge = generateUnbiasedDigits(32)
+        return await transition(c, { type: "start", challenge }, fd, err)
+      }
+
+      routes.get("/authorize", async (c) => {
+        return await transitionToStart(c)
+      })
+
+      routes.post("/authorize", async (c) => {
+        const fd = await c.req.formData()
+        const state = await ctx.get<WebAuthnProviderState | undefined>(
+          c,
+          "provider",
+        )
+
+        const credentialId = fd.get("credentialId")?.toString()
+        const signature = fd.get("signature")?.toString()
+        const authenticatorData = fd.get("authData")?.toString()
+        const clientDataJSON = fd.get("clientDataJSON")?.toString()
+
+        if (
+          state?.type !== "start" ||
+          !credentialId ||
+          !signature ||
+          !authenticatorData ||
+          !clientDataJSON
+        ) {
+          return await transitionToStart(c, fd, { error: "unresolved" })
+        }
+
+        const credId = decodeBase64(credentialId)
+        const sig = decodeBase64(signature)
+        const authData = decodeBase64(authenticatorData)
+        const clientDataJson = decodeBase64(clientDataJSON)
+
+        const clientData = parseClientDataJSON(clientDataJson)
+        const challenge = new TextDecoder().decode(clientData.challenge)
+
+        if (!timingSafeCompare(state.challenge, challenge)) {
+          return await transitionToStart(c, fd, { error: "invalid_challenge" })
+        }
+
+        const res = await config.getCredential(credId)
+
+        if (!res) {
+          return await transitionToStart(c, fd, {
+            error: "credential_not_found",
+          })
+        }
+
+        const url = new URL(getRelativeUrl(c, "/"))
+        const origin = url.origin
+        const rpId = config.rpId || url.hostname
+
+        const verifyError = config.verifyAuthn
+          ? await config.verifyAuthn({
+              credential: res.credential,
+              claims: res.claims,
+              raw: {
+                credentialId: credId,
+                signature: sig,
+                authenticatorData: authData,
+                clientDataJSON: clientDataJson,
+              },
+            })
+          : verifyWebAuthn({
+              rpId,
+              origin,
+              credentialPublicKey: res.credential.publicKey,
+              signature: sig,
+              authData,
+              clientDataJSON: clientDataJson,
+            })
+
+        if (verifyError) {
+          return await transitionToStart(c, fd, verifyError)
+        }
+
+        await ctx.unset(c, "provider")
+        return ctx.forward(c, await ctx.success(c, res))
+      })
+    },
+  }
+}
+
+/**
+ * @internal
+ */
+export type WebAuthnProviderOptions<
+  Claims extends Record<string, string> = Record<string, string>,
+> = WebAuthnProviderConfig<Claims>
+
+/**
+ * Default implementation of the `verifyWebAuthn` function.
+ * This function verifies the webauthn signature and checks if the user is present and verified.
+ * Reference: https://webauthn.oslojs.dev/examples/authentication
+ */
+function verifyWebAuthn(input: {
+  rpId: string
+  origin: string
+  credentialPublicKey: Uint8Array
+  signature: Uint8Array
+  authData: Uint8Array
+  clientDataJSON: Uint8Array
+}): WebAuthnProviderError | undefined {
+  const authenticatorData = parseAuthenticatorData(input.authData)
+  if (!authenticatorData.verifyRelyingPartyIdHash(input.rpId)) {
+    return { error: "invalid_rp_id" }
+  }
+  if (!authenticatorData.userPresent || !authenticatorData.userVerified) {
+    return { error: "rejected" }
+  }
+
+  const clientData = parseClientDataJSON(input.clientDataJSON)
+  if (clientData.type !== ClientDataType.Get) {
+    return { error: "invalid_client_data_type" }
+  }
+
+  if (clientData.origin !== input.origin) {
+    return { error: "invalid_origin" }
+  }
+  if (clientData.crossOrigin !== null && clientData.crossOrigin) {
+    return { error: "invalid_cross_origin" }
+  }
+
+  // Decode DER-encoded signature
+  const ecdsaSignature = decodePKIXECDSASignature(input.signature)
+  const ecdsaPublicKey = decodeSEC1PublicKey(p256, input.credentialPublicKey)
+  const hash = sha256(
+    createAssertionSignatureMessage(input.authData, input.clientDataJSON),
+  )
+  const valid = verifyECDSASignature(ecdsaPublicKey, hash, ecdsaSignature)
+
+  if (!valid) {
+    return { error: "invalid_signature" }
+  }
+}
diff --git a/packages/openauth/src/ui/webauthn.tsx b/packages/openauth/src/ui/webauthn.tsx
new file mode 100644
index 00000000..d319636d
--- /dev/null
+++ b/packages/openauth/src/ui/webauthn.tsx
@@ -0,0 +1,194 @@
+/** @jsxImportSource hono/jsx */
+
+import { Layout } from "./base.js"
+import { FormAlert } from "./form.js"
+
+import type { WebAuthnProviderOptions } from "../provider/webauthn.js"
+import { html } from "hono/html"
+
+const DEFAULT_COPY = {
+  invalid_challenge: "Invalid Challenge.",
+  invalid_rp_id: "Invalid RP ID.",
+  invalid_origin: "Invalid Origin.",
+  invalid_cross_origin: "Invalid Cross Origin.",
+  invalid_signature: "Invalid Signature.",
+  invalid_client_data_type: "Invalid Client Data Type.",
+  credential_not_found: "Credential not found.",
+  unresolved: "Unresolved.",
+  rejected: "Rejected.",
+  verify: "Verify",
+  code_info: "Please verify your identity.",
+}
+
+export type WebAuthnUICopy = typeof DEFAULT_COPY
+
+export type WebAuthnUIOptions = {
+  /**
+   * The request options for navigator.credentials.get.
+   *
+   * Sent to the client via JSON.
+   *
+   * See [`Request Options`](https://developer.mozilla.org/en-US/docs/Web/API/PublicKeyCredential/parseRequestOptionsFromJSON_static)
+   */
+  options?: Omit<PublicKeyCredentialRequestOptions, "challenge">
+  /**
+   * Custom copy for the UI.
+   */
+  copy?: Partial<WebAuthnUICopy>
+  /**
+   * Callback to get the webauthn credential for the user.
+   */
+  getCredential: WebAuthnProviderOptions["getCredential"]
+  /**
+   * Callback to verify the credential for the user.
+   *
+   * @example
+   * ```ts
+   *  {
+   *    async verifyAuthn({
+   *      authenticatorData,
+   *      clientDataJSON,
+   *      credentialId,
+   *      signature,
+   *    }) {
+   *      const clientData = parseClientDataJSON(clientDataJSON);
+   *
+   *      if (clientData.type !== ClientDataType.Get) {
+   *        return { error: "rejected" }
+   *      }
+   *      // ... other checks
+   *      // checkout oslo/webauth
+   *
+   *      const credential = await getCredentialFromDB(credentialId)
+   *
+   *      // decode & verify signature
+   *
+   *      return { claims: { userId: credential.userId } }
+   *    }
+   *  }
+   * ```
+   */
+  verifyAuthn?: WebAuthnProviderOptions["verifyAuthn"]
+}
+
+function stringToBase64Url(from: string): string {
+  return btoa(from).replace(/=/g, "").replace(/\+/g, "-").replace(/\//g, "_")
+}
+
+export function WebAuthnUI(props: WebAuthnUIOptions): WebAuthnProviderOptions {
+  const copy = {
+    ...DEFAULT_COPY,
+    ...props.copy,
+  }
+
+  return {
+    rpId: props.options?.rpId,
+    getCredential: props.getCredential,
+    verifyAuthn: props.verifyAuthn,
+    request: async (req, state, _form, error): Promise<Response> => {
+      const options = JSON.stringify({
+        ...(props.options ?? {}),
+        challenge: stringToBase64Url(state.challenge),
+      })
+
+      const jsx = (
+        <Layout>
+          <form data-component="form" method="post" action="/passkey/authorize">
+            {error && <FormAlert message={copy[error.error]} />}
+            <input type="hidden" name="action" value="request" />
+            <input type="hidden" name="options" value={options} />
+            <input type="hidden" name="credentialId" value="" />
+            <input type="hidden" name="signature" value="" />
+            <input type="hidden" name="authData" value="" />
+            <input type="hidden" name="clientDataJSON" value="" />
+
+            <button type="button" data-component="button" onclick="start();">
+              {copy.verify}
+            </button>
+
+            <PasskeyLoader />
+          </form>
+          <p data-component="form-footer">{copy.code_info}</p>
+        </Layout>
+      )
+
+      return new Response(jsx.toString(), {
+        headers: {
+          "Content-Type": "text/html",
+        },
+      })
+    },
+  }
+}
+
+// in order to trigger the passkey flow, we need to use onclick in <button />,
+// but hono server cannot ship with a react runtime, instead returns html.
+
+function PasskeyLoader() {
+  return html`
+    <script>
+      function select(input) {
+        return document.querySelector("input[name=" + input + "]")
+      }
+
+      const options = JSON.parse(select("options").value)
+
+      async function loadPasskey() {
+        const publicKey = parseRequestOptionsFromJSON(options)
+
+        const credential = await navigator.credentials.get({ publicKey })
+
+        if (!(credential instanceof PublicKeyCredential)) {
+          throw new Error("Failed to get credential")
+        }
+        const r = credential.response
+        if (!(r instanceof AuthenticatorAssertionResponse)) {
+          throw new Error("Unexpected error")
+        }
+
+        select("credentialId").value = encode(new Uint8Array(credential.rawId))
+        select("signature").value = encode(new Uint8Array(r.signature))
+        select("authData").value = encode(new Uint8Array(r.authenticatorData))
+        select("clientDataJSON").value = encode(
+          new Uint8Array(r.clientDataJSON),
+        )
+
+        const form = document.querySelector('form[data-component="form"]')
+        form.submit()
+      }
+
+      function encode(buffer) {
+        return btoa(String.fromCharCode(...buffer))
+      }
+
+      function decode(base64) {
+        return new Uint8Array(
+          atob(base64)
+            .split("")
+            .map((c) => c.charCodeAt(0)),
+        ).buffer
+      }
+
+      function parseRequestOptionsFromJSON(options) {
+        // this is kinda ponyfill of PublicKeyCredential
+        // since API does not work on safari <18.4
+        // https://developer.mozilla.org/docs/Web/API/PublicKeyCredential/parseRequestOptionsFromJSON_static
+
+        const challenge = decode(options.challenge)
+        const allowCredentials =
+          options.allowCredentials?.map((cred) => {
+            return { ...cred, id: decode(cred.id) }
+          }) ?? []
+        return { ...options, allowCredentials, challenge }
+      }
+
+      function start() {
+        const footer = document.querySelector('p[data-component="form-footer"]')
+
+        loadPasskey().catch((err) => {
+          footer.innerText = err.message
+        })
+      }
+    </script>
+  `
+}
diff --git a/packages/openauth/tsconfig.json b/packages/openauth/tsconfig.json
index b6e6b8c5..8a269911 100644
--- a/packages/openauth/tsconfig.json
+++ b/packages/openauth/tsconfig.json
@@ -1,6 +1,7 @@
 {
   "extends": "@tsconfig/node22/tsconfig.json",
   "compilerOptions": {
+    "lib": ["DOM", "DOM.Iterable", "ESNext"],
     "outDir": "dist",
     "declaration": true,
     "skipLibCheck": true,

From 0ae3d97f13e2e4bef39c9a65f49f960b1b3c6439 Mon Sep 17 00:00:00 2001
From: ilkergzlkkr <guzelkokarilker@gmail.com>
Date: Mon, 7 Apr 2025 09:50:13 +0300
Subject: [PATCH 2/2] document optional dependency

---
 packages/openauth/package.json             |  5 +++
 packages/openauth/src/provider/webauthn.ts |  8 +++-
 packages/openauth/src/ui/webauthn.tsx      | 52 ++++++++++++++++------
 3 files changed, 51 insertions(+), 14 deletions(-)

diff --git a/packages/openauth/package.json b/packages/openauth/package.json
index 01b8d93d..ea1d2aa3 100644
--- a/packages/openauth/package.json
+++ b/packages/openauth/package.json
@@ -30,6 +30,11 @@
       "types": "./dist/types/ui/index.d.ts"
     }
   },
+  "peerDependenciesMeta": {
+    "@oslojs/webauthn": {
+      "optional": true
+    }
+  },
   "peerDependencies": {
     "arctic": "^2.2.2",
     "hono": "^4.0.0",
diff --git a/packages/openauth/src/provider/webauthn.ts b/packages/openauth/src/provider/webauthn.ts
index 62c29910..f092c47a 100644
--- a/packages/openauth/src/provider/webauthn.ts
+++ b/packages/openauth/src/provider/webauthn.ts
@@ -1,6 +1,12 @@
 /**
  * Configures a provider that supports webauthn authentication. This is usually
  * paired with the `WebAuthnUI`.
+ * 
+ * This provider requires `@oslojs/webauthn` to be installed.
+ * 
+ * ```bash
+ * npm i @oslojs/webauthn
+ * ```
  *
  * ```ts
  * import { WebAuthnUI } from "@openauthjs/openauth/ui/webauthn"
@@ -122,7 +128,7 @@ export type WebAuthnProviderConfig<
   verifyAuthn?: (data: {
     credential: {
       id: Uint8Array
-      algorithm: number // (ES256)
+      algorithm: number
       publicKey: Uint8Array
     }
     claims: Record<string, string>
diff --git a/packages/openauth/src/ui/webauthn.tsx b/packages/openauth/src/ui/webauthn.tsx
index d319636d..14f66f80 100644
--- a/packages/openauth/src/ui/webauthn.tsx
+++ b/packages/openauth/src/ui/webauthn.tsx
@@ -1,3 +1,39 @@
+/**
+ * Configure the UI that's used by the WebAuthn provider.
+ *
+ * This provider requires `@oslojs/webauthn` to be installed.
+ * 
+ * ```bash
+ * npm i @oslojs/webauthn
+ * ```
+ * 
+ * ```ts
+ * import { WebAuthnUI } from "@openauthjs/openauth/ui/webauthn"
+ * import { WebAuthnProvider } from "@openauthjs/openauth/provider/webauthn"
+ *
+ * export default issuer({
+ *    passkey: WebAuthnProvider(
+ *      WebAuthnUI({
+ *        // options returned to the browser for navigator.credentials.get()
+ *        options: {
+ *          userVerification: "required",
+ *          rpId: "myapp.com", // optional, defaults to the domain of the issuer (auth.myapp.com)
+ *        },
+ *        async getCredential(id) {
+ *          const credential = await authService.getPasskeyCredential(id);
+ *
+ *          if (!credential) return null;
+ *          return { credential, claims: { userId: credential.userId } };
+ *        },
+ *      }),
+ *    ),
+ *   },
+ *   // ...
+ * })
+ * ```
+ *
+ * @packageDocumentation
+ */
 /** @jsxImportSource hono/jsx */
 
 import { Layout } from "./base.js"
@@ -45,25 +81,15 @@ export type WebAuthnUIOptions = {
    * @example
    * ```ts
    *  {
-   *    async verifyAuthn({
-   *      authenticatorData,
-   *      clientDataJSON,
-   *      credentialId,
-   *      signature,
-   *    }) {
-   *      const clientData = parseClientDataJSON(clientDataJSON);
+   *    async verifyAuthn(data) {
+   *      const clientData = parseClientDataJSON(data.raw.clientDataJSON);
    *
    *      if (clientData.type !== ClientDataType.Get) {
    *        return { error: "rejected" }
    *      }
    *      // ... other checks
-   *      // checkout oslo/webauth
-   *
-   *      const credential = await getCredentialFromDB(credentialId)
    *
    *      // decode & verify signature
-   *
-   *      return { claims: { userId: credential.userId } }
    *    }
    *  }
    * ```
@@ -85,7 +111,7 @@ export function WebAuthnUI(props: WebAuthnUIOptions): WebAuthnProviderOptions {
     rpId: props.options?.rpId,
     getCredential: props.getCredential,
     verifyAuthn: props.verifyAuthn,
-    request: async (req, state, _form, error): Promise<Response> => {
+    request: async (_req, state, _form, error): Promise<Response> => {
       const options = JSON.stringify({
         ...(props.options ?? {}),
         challenge: stringToBase64Url(state.challenge),