From d9ebdd6fbba31b5f3c2cbae90f650f183958660e Mon Sep 17 00:00:00 2001 From: pewdiepie-archdaemon Date: Mon, 15 Jun 2026 23:24:41 +0900 Subject: [PATCH 01/22] Refresh README presentation --- README.md | 501 +++---------------------------------- docs/odysseus-wordmark.png | Bin 0 -> 16877 bytes docs/odysseus.jpg | Bin 45964 -> 53198 bytes docs/setup.md | 425 +++++++++++++++++++++++++++++++ 4 files changed, 463 insertions(+), 463 deletions(-) create mode 100644 docs/odysseus-wordmark.png create mode 100644 docs/setup.md diff --git a/README.md b/README.md index 8eb85229b..dcf07f761 100644 --- a/README.md +++ b/README.md @@ -1,476 +1,65 @@ -# Odysseus +

+ Odysseus +

-> **Branch note:** `dev` is the default branch and contains the latest development changes, but it may be unstable. For the more stable curated branch, use [`main`](https://github.com/pewdiepie-archdaemon/odysseus/tree/main). +

+ A self-hosted AI workspace for chat, agents, research, documents, email, notes, calendar, and local model workflows. +

-``` -─────────────────────────────────────────────── - ⊹ ࣪ ˖ ૮( ˶ᵔ ᵕ ᵔ˶ )っ Odysseus vers. 1.0 -─────────────────────────────────────────────── -``` +

+ Quick Start · + Setup Guide · + Contributing · + Roadmap +

-![Odysseus](docs/odysseus.jpg) +

+ Packaging status +

-A self-hosted AI workspace -- meant to be the self-hosted version of the UI experience you get from ChatGPT and Claude. But with more jank and fun. Running on your own hardware, with your own data -- local-first, privacy-first, and no trojan. +

+ Odysseus interface +

-[![Packaging status](https://repology.org/badge/vertical-allrepos/odysseus-ai.svg)](https://repology.org/project/odysseus-ai/versions) - -## Features - - **Chat** -- chat with any local model or API; adding them is super simple.
　vLLM · llama.cpp · Ollama · OpenRouter · OpenAI · GitHub Copilot - - **Agent** -- hand it tools and let it run the whole task itself.
　built on [opencode](https://github.com/anomalyco/opencode) · MCP · web · files · shell · skills · memory - - **Cookbook** -- Scans your hardware, recommends models, click to download and serve.. easy!
　built on [llmfit](https://github.com/AlexsJones/llmfit) · VRAM-aware · GGUF / FP8 / AWQ · fit scoring · vLLM / llama.cpp serving - - **Deep Research** -- multi-step runs that gather, read, and synthesize sources into a nice visual report.
　adapted from [Tongyi DeepResearch](https://github.com/Alibaba-NLP/DeepResearch) - - **Compare** -- a fun tool to compare models side by side. Test completely blind, no bias!
　multi-model · blind test · synthesis - - **Documents** -- YOU write the text, AI is there to assist, not the opposite.
　multi-tab editor · markdown · HTML · CSV · syntax highlighting · AI edits · suggestions - - **Memory / Skills** -- Persistent memory and skills, your agent evolves over time as it better understands you and your tasks!
　ChromaDB · fastembed (ONNX) · vector + keyword retrieval · import/export - - **Email** -- IMAP/SMTP inbox with AI triage built in: urgency reminders, auto-tag, auto-summary, auto-reply drafts, auto-spam.
　IMAP · SMTP · per-account routing · CalDAV-aware - - **Notes & Tasks** -- Quick notes with reminders, a todo list, and scheduled tasks the agent can act on.
　note pings · checklist · cron-style tasks · ntfy / browser / email channels - - **Calendar** -- Local-first calendar with CalDAV sync to Radicale / Nextcloud / Apple / Fastmail.
　CalDAV pull · .ics import/export · per-calendar colors · agent-aware - - **Works on mobile** -- looks and runs great on your phone, not just desktop.
　responsive · installable (PWA) · touch gestures - - **Extras** -- more to explore, happy if you give it a go!
　image editor · theme editor · file uploads (vision + PDF) · web search · presets · sessions · 2FA - -## Demo -A full, hover-to-play tour lives on the landing page (`docs/index.html`). - -
-Screenshots / clips - -### Chat & Agents -![Chat & Agents](docs/chat.gif) -### Deep Research -![Deep Research](docs/research.gif) -### Compare -![Compare](docs/compare.gif) -### Documents -![Documents](docs/document.gif) -### Notes & Tasks -![Notes & Tasks](docs/notes.gif) - -
+--- ## Quick Start -Defaults work out of the box: clone, run, then configure models/search/email -inside **Settings**. Only edit `.env` for deployment-level overrides like -`APP_BIND`, `APP_PORT`, `AUTH_ENABLED`, `DATABASE_URL`, or a pre-seeded admin password. +> `dev` is the default branch and gets the newest changes first. Use [`main`](https://github.com/pewdiepie-archdaemon/odysseus/tree/main) if you want the more curated branch. -On first setup, Odysseus creates an admin account (`admin` unless -`ODYSSEUS_ADMIN_USER` is set) and prints a temporary password in the terminal. -For Docker installs, the same line is in `docker compose logs odysseus`. -Use that for the first login, then change it in **Settings**. - -Contributing? See [CONTRIBUTING.md](CONTRIBUTING.md) for setup, testing, and -pull request guidelines. - -### Docker (recommended) ```bash git clone https://github.com/pewdiepie-archdaemon/odysseus.git cd odysseus -cp .env.example .env # optional, but recommended for explicit defaults +cp .env.example .env docker compose up -d --build ``` -To include optional extras in the image (PDF viewer, Office extraction; includes AGPL PyMuPDF), build with `docker compose build --build-arg INSTALL_OPTIONAL=true` before `up`. -Open `http://localhost:7000` when the containers are healthy. Docker Compose -binds the web UI to `127.0.0.1` by default. If the port is taken, set -`APP_PORT=7001` in `.env` and recreate the container. Set `APP_BIND=0.0.0.0` -only when you intentionally want LAN/reverse-proxy access. +Open `http://localhost:7000` when the containers are healthy. The first admin password is printed in `docker compose logs odysseus`. -> **On Apple Silicon (M-series) Macs:** Docker can't reach the Metal GPU, so -> Cookbook serves local models on CPU only. For GPU-accelerated model serving, -> run natively instead — see [Apple Silicon](#apple-silicon) below. +Native installs, GPU notes, Windows/macOS instructions, HTTPS, and configuration live in the [setup guide](docs/setup.md). -### Native Linux / macOS -```bash -git clone https://github.com/pewdiepie-archdaemon/odysseus.git -cd odysseus -python3 -m venv venv -source venv/bin/activate -pip install -r requirements.txt -python setup.py -python -m uvicorn app:app --host 127.0.0.1 --port 7000 -``` -Requirements: Python 3.11+. Cookbook also needs `tmux` for background model -downloads and serves. The app itself is lightweight; local model serving is the -heavy part and depends on the model, runtime, GPU, and VRAM, so small hosts can -connect to API or remote model servers instead. Use `--host 0.0.0.0` only when you intentionally want LAN/reverse-proxy access. +## Features -### Apple Silicon -Docker on macOS cannot use the Metal GPU. For GPU-accelerated Cookbook on an -M-series Mac, run Odysseus natively: +- **Chat + Agents** — local/API models, tools, MCP, files, shell, skills, and memory. +- **Cookbook** — hardware-aware model recommendations, downloads, and serving. +- **Deep Research** — multi-step web research with source reading and report generation. +- **Compare** — blind side-by-side model testing and synthesis. +- **Documents** — writing-first editor with AI edits, suggestions, Markdown, HTML, CSV, and syntax highlighting. +- **Email** — IMAP/SMTP inbox with triage, tags, summaries, reminders, and reply drafts. +- **Notes, Tasks + Calendar** — reminders, todos, scheduled agent tasks, and CalDAV sync. +- **Extras** — gallery/image editor, themes, uploads, web search, presets, sessions, and 2FA. -```bash -git clone https://github.com/pewdiepie-archdaemon/odysseus.git -cd odysseus -./start-macos.sh -``` +## Demo -It launches at `http://127.0.0.1:7860`. To expose it to your phone over a trusted LAN/VPN such as Tailscale, bind all interfaces: - -```bash -ODYSSEUS_HOST=0.0.0.0 ./start-macos.sh -# then open http://:7860 -``` - -The script also reads `.env` at startup, so `APP_BIND=0.0.0.0` and `APP_PORT` -set there are picked up automatically without a command-line override each run. - -Keep `AUTH_ENABLED=true` (the default) before binding outside loopback. Do not -expose this port directly to the public internet. To build a clickable app wrapper: - -```bash -./build-macos-app.sh -``` - -
-Cookbook, GPU, Ollama, and troubleshooting notes - -**Docker bundled services.** Compose starts Odysseus, ChromaDB, SearXNG, and -ntfy. Odysseus and the bundled service ports bind to `127.0.0.1` by default, so -they are reachable from the host but not exposed to your LAN/public internet -unless you opt in. - -**Cookbook storage in Docker.** Downloads live in `./data/huggingface` -(`~/.cache/huggingface` in the container). Cookbook-installed Python CLIs and -serve engines live in `./data/local` (`~/.local` in the container), so they -survive container recreation. - -**Remote servers.** In **Cookbook -> Settings -> Servers**, generate the -Odysseus SSH key and add the public key to the remote server's -`~/.ssh/authorized_keys`. From the host you can also run: - -```bash -ssh-copy-id -i data/ssh/id_ed25519.pub user@server -``` - -**Docker GPU overlays.** CPU-only users can skip this section. Cookbook can -only detect GPUs that Docker exposes to the container — if the host runtime or -device passthrough is not configured, Cookbook sees the iGPU, another card, or -CPU instead of your intended GPU. - -For NVIDIA, `scripts/check-docker-gpu.sh` diagnoses GPU passthrough and can -optionally install the host runtime or update `.env`. - -```bash -# Read-only diagnostic (default — installs nothing, never edits .env): -scripts/check-docker-gpu.sh - -# Print OS-specific install commands without running them: -scripts/check-docker-gpu.sh --print-install-commands - -# Install NVIDIA Container Toolkit on Ubuntu/Debian (requires sudo): -scripts/check-docker-gpu.sh --install-nvidia-toolkit - -# Write COMPOSE_FILE to .env (only when GPU passthrough is confirmed working): -scripts/check-docker-gpu.sh --enable-nvidia-overlay - -# Full assisted setup — install toolkit, then enable overlay if passthrough works: -scripts/check-docker-gpu.sh --install-nvidia-toolkit --enable-nvidia-overlay -``` - -Safety notes: -- The app never installs host GPU runtime automatically. -- The app never edits `.env` automatically. -- `.env` is only modified when `--enable-nvidia-overlay` is explicitly passed, - and only after GPU passthrough succeeds. `--yes` skips prompts but does not - bypass the passthrough gate. -- `.env.bak.*` backups created by `--enable-nvidia-overlay` are ignored by - Git and the Docker build context. - -To enable manually without the script, add this to `.env`: - -```bash -COMPOSE_FILE=docker-compose.yml:docker/gpu.nvidia.yml -``` - -**AMD / ROCm.** AMD setup is read-only diagnostic plus manual `.env` edit. Run: - -```bash -scripts/check-docker-amd-gpu.sh -``` - -Then add the reported values to `.env`, replacing `RENDER_GID` with your host's -numeric render group id: - -```bash -COMPOSE_FILE=docker-compose.yml:docker/gpu.amd.yml -RENDER_GID=989 -``` - -For NVIDIA/AMD GPU support, also read the comments in the selected overlay file: docker/gpu.nvidia.yml or docker/gpu.amd.yml. - -**Stack-management UIs (Portainer, Coolify, Dockhand, etc.).** These tools -often accept only a single Compose file and do not reliably honor `COMPOSE_FILE` -or multiple `-f` overlays. CLI users should keep using the `COMPOSE_FILE` -overlay workflow above. For stack UIs, point the stack at one of the standalone -files instead, which bundle the base stack plus the GPU settings: - -- `docker-compose.gpu-nvidia.yml` — still requires the NVIDIA Container Toolkit - on the host. -- `docker-compose.gpu-amd.yml` — still requires host ROCm/kfd/DRI setup, the - `video`/`render` group membership, and `RENDER_GID` when needed. - -The base `docker-compose.yml` plus the `docker/gpu.*.yml` overlays remain the -source of truth; the standalone files mirror them for single-file deployments. - -Verify after enabling either overlay: - -```bash -docker compose exec odysseus nvidia-smi -L # NVIDIA -docker compose exec odysseus sh -lc 'test -e /dev/kfd && test -d /dev/dri && ls -l /dev/kfd /dev/dri/renderD*' # AMD -``` - -> **GPU passthrough ≠ llama.cpp CUDA.** `nvidia-smi` passing inside the -> container confirms Docker GPU access, but llama.cpp also needs `cudart` and -> the CUDA Toolkit at runtime. If Cookbook logs show `Unable to find cudart -> library`, `Could NOT find CUDAToolkit`, `CUDA Toolkit not found`, or -> tensors/layers assigned to CPU, that is a Cookbook/llama.cpp build issue — -> not a Docker passthrough failure. Reinstall the serve engine via -> **Cookbook → Dependencies** to get a CUDA-enabled build. -> -> The same split applies to AMD/ROCm: seeing `/dev/kfd` and `/dev/dri` inside -> the container confirms device passthrough, not ROCm userspace or a -> ROCm-enabled vLLM/llama.cpp build. `rocm-smi` and `rocminfo` are not expected -> inside the slim Odysseus image. - -**Ollama with Docker.** If Ollama runs on the host, add this endpoint in -Settings: - -```text -http://host.docker.internal:11434/v1 -``` - -Ollama must listen outside its own loopback interface: - -```bash -OLLAMA_HOST=0.0.0.0:11434 ollama serve -``` - -This connects Odysseus in Docker to an Ollama server that is already running on -your host machine; it does not start Ollama inside the container. -`host.docker.internal` is Docker's hostname for the host machine from inside the -container. Cookbook **Serve** is a separate workflow for serving downloaded -models through Odysseus/llama.cpp, so Windows users with an existing Ollama -install usually only need to add the endpoint in Settings. - -**Useful checks.** - -```bash -docker compose ps -docker compose logs --tail=120 odysseus -docker compose logs odysseus | grep -E 'ChromaDB|MemoryVectorStore|DEGRADED' -``` - -**macOS details.** `start-macos.sh` installs Homebrew deps, creates the venv, -runs setup, and starts uvicorn on port `7860` because AirPlay often holds -`7000`. It uses llama.cpp/Ollama for Metal. vLLM/SGLang are CUDA/ROCm-only and -do not run on macOS. MLX-only models are not served by Odysseus. - -
- -### Native Windows - -**One-command launcher** (creates the venv, installs deps, runs setup, starts the -server; safe to re-run): - -```powershell -git clone https://github.com/pewdiepie-archdaemon/odysseus.git -cd odysseus -powershell -ExecutionPolicy Bypass -File .\launch-windows.ps1 -``` - -Or do it by hand: - -```powershell -git clone https://github.com/pewdiepie-archdaemon/odysseus.git -cd odysseus -py -3.11 -m venv venv -venv\Scripts\Activate.ps1 -pip install -r requirements.txt -python setup.py -python -m uvicorn app:app --host 127.0.0.1 --port 7000 -``` - -If `python` points at an older interpreter, use `py -3.12` (or another installed -3.11+ version) for the venv step. - -**Requirements:** Python 3.11+. The core app (chat, agent, memory, documents, -email, calendar, deep research) runs fully native. For full **Cookbook** background -model downloads and the agent shell tool, also install -[Git for Windows](https://git-scm.com/download/win) (provides `bash.exe`). -Local GPU *serving* of vLLM/SGLang needs Linux/WSL2; for a local model on Windows, -[Ollama](https://ollama.com/download) is the easiest path — point Odysseus at -`http://localhost:11434/v1` in Settings. - -Open `http://localhost:7000`, log in with the generated admin password, -and configure everything else inside **Settings**. - -## Troubleshooting & Advanced Setup - -### `chromadb-client` conflicts with embedded ChromaDB -If `chromadb-client` (the lightweight HTTP-only package) is installed alongside the full `chromadb` package, Odysseus starts but ChromaDB silently falls back to HTTP-only mode and fails. - -**Fix:** uninstall `chromadb-client` and force-reinstall the full package: -```bash -./venv/bin/pip uninstall chromadb-client -y -./venv/bin/pip install --force-reinstall chromadb -``` - -### HTTPS + LAN/Tailscale exposure -To expose Odysseus on a local network or Tailscale with HTTPS: -1. Change the bind address to `0.0.0.0` in `.env` (`APP_BIND=0.0.0.0` or `ODYSSEUS_HOST=0.0.0.0`). -2. Generate a locally-trusted cert for your LAN/Tailscale IPs using [mkcert](https://github.com/FiloSottile/mkcert): - ```bash - mkcert -install - mkcert -cert-file cert.pem -key-file key.pem 192.168.1.100 tailscale-ip - ``` -3. Run `uvicorn` with the generated certs: - ```bash - python -m uvicorn app:app --host 0.0.0.0 --port 7000 --ssl-certfile=cert.pem --ssl-keyfile=key.pem - ``` -4. Install the `mkcert` CA on any other device you want to access Odysseus from (e.g., for iOS, email the `rootCA.pem` to yourself, install the profile, and trust it in Certificate Trust Settings). - -### Optional Dependencies -`requirements-optional.txt` contains packages that unlock extra features. It is not installed by default. - -| Package | Feature unlocked | -|---------|-----------------| -| `faster-whisper` | Local speech-to-text (microphone -> text) via the "local" STT provider. | -| `ddgs` | DuckDuckGo as a search provider option. | -| `PyMuPDF` | PDF page rendering in the side viewer panel and form-filling. (Note: AGPL-3.0) | -| `markitdown` | Office/EPUB document text extraction (converts .docx/.xlsx/.pptx/.xls/.epub to Markdown). | - -### Faster, reproducible installs with uv (optional) -[uv](https://docs.astral.sh/uv/) works as a drop-in replacement for the -venv + pip steps in the native install guides, no project changes are needed but this change results in faster installs along with a lockfile for reproducible environments. After [installing `uv`](https://docs.astral.sh/uv/getting-started/installation/), use: - -```bash -uv venv venv --python 3.13 -uv pip install -r requirements.txt -# then continue as usual: python setup.py, uvicorn, ... -``` - -`requirements.txt` is intentionally unpinned, so two installs at different times can produce different package versions. If you want a reproducible environment (e.g. across your own machines, or to roll back after a bad upgrade), snapshot and restore exact versions with: - -```bash -uv pip compile requirements.txt -o requirements.lock # snapshot current resolution -uv pip sync requirements.lock # reproduce it exactly later -``` - -`requirements.lock` is gitignored and platform-specific (compile it on the OS you deploy to). Regenerate it deliberately when you want to take upgrades. The plain `uv pip install -r requirements.txt` keeps following the unpinned requirements like pip does. - -### Outlook / Office 365 email -Odysseus email accounts currently use IMAP/SMTP username-password auth. Outlook -and Microsoft 365 generally require OAuth instead, so normal Microsoft mailbox -passwords will fail. See [docs/email-outlook.md](docs/email-outlook.md) for the -current limitation and the planned integration direction. - -## Security Notes -Odysseus is a self-hosted workspace with powerful local tools: shell access, file uploads, model downloads, web research, email/calendar integrations, and API tokens. Treat it like an admin console. - -- Keep `AUTH_ENABLED=true` for any network-accessible deployment. -- Keep `LOCALHOST_BYPASS=false` outside local development. -- Use `SECURE_COOKIES=true` when Odysseus is served through HTTPS by a trusted reverse proxy or private access gateway. -- Do not expose it directly to the public internet without HTTPS and a trusted reverse proxy or private access layer. -- Keep `.env`, `data/`, `logs/`, databases, uploads, generated media, backups, auth/session files, API keys, and model/provider tokens out of Git and private shares. They are ignored by default. -- Review `data/auth.json` after first boot: disable open signup unless you intentionally want it, make only your own account admin, and keep demo/test accounts non-admin. -- Non-admin users do not get shell/Python/file read/write by default, and admin-only routes/tools such as MCP management, API tokens, webhooks, model/cookbook serving, backup/vault, and app settings are admin-gated. Other features are controlled by per-user privileges, so review each user's privileges before exposing a deployment. -- Rotate any API keys or tokens that were ever pasted into a shared chat, demo, screenshot, or log. -- If you enable API tokens or webhooks, create separate tokens per integration and delete unused ones. -- Prefer binding manual development runs to `127.0.0.1`; bind to `0.0.0.0` only when you intentionally want LAN/reverse-proxy access. -- Keep ChromaDB, SearXNG, ntfy, Ollama, vLLM, llama.cpp, databases, and raw model/provider APIs internal-only. Expose only the authenticated Odysseus web/API entrypoint through your trusted proxy or private access layer. -- Before publishing a fork, run `git status --short` and confirm no private files from `.env`, `data/`, `logs/`, uploads, backups, or local databases are staged. - -### Private or proxied deployments -Odysseus serves plain HTTP on its app port. Docker Compose binds Odysseus and the bundled services to `127.0.0.1` by default, so a typical production/private setup is: - -1. Keep Odysseus on localhost, for example `127.0.0.1:7000`. -2. Terminate HTTPS at a trusted reverse proxy or private access gateway. -3. Put the authenticated Odysseus web/API entrypoint behind that layer. -4. Keep raw service and model ports internal-only. - -Cloudflare Access, Tailscale, Caddy, nginx, and Traefik can all fit this pattern; none are required by Odysseus. If your access layer reaches Odysseus on the same host, proxy to `http://127.0.0.1:7000` and keep `AUTH_ENABLED=true`, `LOCALHOST_BYPASS=false`, and `SECURE_COOKIES=true`. -`ALLOWED_ORIGINS` lists exact permitted origins for cross-origin browser/API clients; ordinary same-origin reverse-proxy access usually does not need a special CORS entry. - -Common internal-only ports from the default docs/compose setup: - -| Port | Service | -|---|---| -| `7000` | Odysseus raw app port | -| `8080` | SearXNG | -| `8091` | ntfy | -| `8100` | ChromaDB host port for manual/compose access | -| `11434` | Ollama | -| `8000-8020` | Common local model/provider APIs | +A full hover-to-play tour lives on the landing page: [`docs/index.html`](docs/index.html). ## Contributing -Help is welcome. The best entry points are fresh-install testing, provider setup -bugs, mobile/editor polish, docs, and small focused refactors. See -[ROADMAP.md](ROADMAP.md) for the current help-wanted list. -## Configuration -Most setup is done inside the app with `/setup` or **Settings**. Use `.env` -for deployment-level defaults and secrets you want present before first boot. -Key settings: +Help is welcome. The best entry points are fresh-install testing, provider setup bugs, mobile/editor polish, docs, and small focused refactors. See [CONTRIBUTING.md](CONTRIBUTING.md) and [ROADMAP.md](ROADMAP.md). -| Variable | Default | Description | -|---|---|---| -| `LLM_HOST` | `localhost` | Your LLM server (e.g. `llm-host.local:8000`) | -| `LLM_HOSTS` | -- | Comma-separated list for model discovery | -| `OPENAI_API_KEY` | -- | Optional OpenAI key. Prefer adding providers in the app unless pre-seeding. | -| `SEARXNG_INSTANCE` | `http://localhost:8080` | SearXNG URL. Docker overrides this to `http://searxng:8080`. | -| `SEARXNG_SECRET` | generated on first Docker boot | Optional SearXNG cookie/CSRF secret. Leave blank unless you need to pin it. | -| `APP_BIND` | `127.0.0.1` | Docker Compose host bind address for the web UI. Use `0.0.0.0` only for intentional LAN/reverse-proxy access. | -| `APP_PORT` | `7000` | Docker Compose host port for the web UI. | -| `APP_DATA_DIR` | `./data` | Docker Compose host directory for application data volumes. | -| `APP_LOGS_DIR` | `./logs` | Docker Compose host directory for application logs. | -| `AUTH_ENABLED` | `true` | Enable/disable login | -| `LOCALHOST_BYPASS` | `false` | Development-only auth bypass for loopback requests. Keep false for shared/network deployments. | -| `ALLOWED_ORIGINS` | `http://localhost,http://127.0.0.1` | Comma-separated exact permitted origins for cross-origin browser/API clients. | -| `SECURE_COOKIES` | `false` | Set true when serving Odysseus through HTTPS at a trusted proxy or private access gateway. | -| `DATABASE_URL` | `sqlite:///./data/app.db` | Database connection string | -| `CHROMADB_HOST` | `localhost` | ChromaDB host for vector memory. Docker overrides this to `chromadb`. | -| `CHROMADB_PORT` | `8100` | ChromaDB port for manual host runs. Docker overrides this to `8000`. | -| `EMBEDDING_URL` | -- | OpenAI-compatible embeddings endpoint | -| `ODYSSEUS_CHAT_UPLOAD_MAX_BYTES` | `10485760` | Chat/agent attachment cap in bytes. Raise for larger local PDFs or text documents. | -| `ODYSSEUS_GALLERY_UPLOAD_MAX_BYTES` | `104857600` | Gallery image upload cap in bytes (100 MB). | -| `ODYSSEUS_GALLERY_TRANSFORM_UPLOAD_MAX_BYTES` | `26214400` | Gallery transform input cap in bytes (25 MB). | -| `ODYSSEUS_MEMORY_IMPORT_MAX_BYTES` | `10485760` | Memory import file cap in bytes (10 MB). | -| `ODYSSEUS_PERSONAL_UPLOAD_MAX_BYTES` | `26214400` | Personal document upload cap in bytes (25 MB). | -| `ODYSSEUS_EMAIL_COMPOSE_UPLOAD_MAX_BYTES` | `26214400` | Email compose attachment cap in bytes (25 MB). | -| `ODYSSEUS_STT_MAX_AUDIO_BYTES` | `26214400` | Speech-to-text audio cap in bytes (25 MB). | -| `ODYSSEUS_ICS_MAX_BYTES` | `10485760` | Calendar `.ics` import cap in bytes (10 MB). | +## Security -All upload-limit vars are validated (must be a positive integer) and optional; an invalid value fails fast at startup. - -### Built-in MCP servers (optional setup) - -Odysseus auto-registers a few built-in MCP servers at startup. The npx-based ones (currently the browser server, `@playwright/mcp`) only start when their npm package is already in the local npx cache. If a package isn't cached, that server is skipped with a startup log message explaining what to do, so a fresh install does not block on a multi-minute npm download or hang if Playwright system deps are missing. - -To enable the browser MCP (page navigation, screenshots, vision), run once: - -```bash -npx -y @playwright/mcp@latest --version -``` - -That installs `@playwright/mcp` plus Playwright (~300MB total). Restart Odysseus and the server will register at startup. - -## Architecture -``` -app.py # FastAPI entry point -core/ auth, database, middleware, constants -src/ llm_core, agent_loop, agent_tools, chat_processor, search/ -routes/ chat, session, document, memory, model … endpoints -services/ docs, memory, search, hwfit (Cookbook) … -static/ index.html + app.js + style.css + js/ (modular front-end) -docs/ landing page (index.html) + preview clips -``` - -## Data -All user data lives in `data/` (gitignored): `app.db` (sessions, messages, documents), -`memory.json`, `presets.json`, `uploads/`, `personal_docs/`, `chroma/`, `settings.json`. - -To back up or restore everything in `data/`, see the -[Backup & Restore guide](docs/backup-restore.md). +Odysseus is a self-hosted workspace with powerful local tools. Keep auth enabled, keep private data out of Git, and do not expose raw model/service ports publicly. Deployment details are in the [setup guide](docs/setup.md#security-notes). ## Star History @@ -483,19 +72,5 @@ To back up or restore everything in `data/`, see the ## License -AGPL-3.0-or-later -- see [LICENSE](LICENSE) and [ACKNOWLEDGMENTS.md](ACKNOWLEDGMENTS.md). -``` - | - ||| - ||||| - | | | ||||||| - )_) )_) )_) ~|~ - )___))___))___)\ | - )____)____)_____)\\| - _____|____|____|_____\\\__ - \ / - ~^~^~~^~^~~^~^~~^~^~~^~^~~^~^~~^~^~~^~^~ - ~^~ all aboard! ~^~ - ~^~^~~^~^~~^~^~~^~^~~^~^~~^~^~~^~^~~^~^~ -``` +AGPL-3.0-or-later -- see [LICENSE](LICENSE) and [ACKNOWLEDGMENTS.md](ACKNOWLEDGMENTS.md). diff --git a/docs/odysseus-wordmark.png b/docs/odysseus-wordmark.png new file mode 100644 index 0000000000000000000000000000000000000000..dce21eb660d1a77868c4872dda95a021645f958c GIT binary patch literal 16877 zcmc#*WmjBHw>-GRkl^kF2=49#CqaX|69|L5ySux)OK=NLaCdiizdY}sxL;<@n(6Mf zS9j0u+EvvP@?HKL3L+jN001abl46Pg01^1{Yz`0m@hY(E|M4bVFC`|d?7VcU?c}bk zawmA-e#qY*C-41T6ovh!@Fxf)ER22v(^__{p*pYqdP+;%(t^J+oF7}r7aHLcg=92|@c++)zaYf~ z@kvT`KKQ>dHefG1#o&)k#>gOm+DuRLhXzv}1Sr6{mHS8b`wy1*|Dp`RX_MOg1=JG( zjS3zTKERs8!YMS6&6fOE4EB?-y)`uT4*CC@EzKSZ9mG=ZJl!7Kio_eBhXmWsOIun% z013jlNuOg06sZpa{U|7E6G?KAMDBQ<_yB+j$pl?ICFNmb6$ynU))~oAD=0h}8Zd%o zg}h%7*}jZe_d4H3G06DRAqPgFG&pexXCtBz_QhbXUwX{$TMTx8?t&n|+Pe15lE8-s z9P}JN`=MABZ*s@X|2c5NV*f49FEYiN5z~lHn*>TJIQR&Y#=tCtT!ZB|iA#2Uyuj;3 zthIE?)}ux%iXk!!{;mk%O|Ws{$dR1$Z7G2~c85Cn7O=&Z>7g(|pES4-P;j*Sl%Q zkZYC4*du=X>4qr&)n#S4yATf$bQE5xJd%+0gn zOwo{66LDhjpD0$SUUUk}IF1wUq@+llv^r6}hy*-yvLsf^{vBpRc#C;QhZXt=4Kh(N zGztPBJSa*(&1n^cjjX9fOi2g`fcXoB`{(<;Fr_J?ezu0v%XUB5| z&BCx+2~KNk6Tx+IgN@j2FJq0%)1RBG392bFbSqv#Wp5$tQh95kSg@#K+}zw3tJ+Q} z$kMy`4)WAgZFtyF6Qn%7grCV;$}E{-{doV1U2tVqexe}(gviNr3t#NV({)j#3rZ?D zosIjF=hq3?&)zpwd7VE|LcCZ~BqOi1p0*7oou?q68wLE_ISgfV|CT;IYYd>vpL?}a zNUKc_5R)00S+ohb^1F~w!%+u`b?PaX_?x@mYJ#x*>yOj=`AUVn4q|2xtDJ=LTJG z-K}Y=)N=TU$Z}mSD6!!gJKe?Jcwj{tLx% zg;P+PT1~*XaoKD~7?Fq?9YcKCw?5UD5fwM(>0IgC@Qo|KK1UkA>7Mf%)cW4OB{&gU zA7Cb)+q!Z%~oM&u_(YJNMN7$D|I@CSgyQ%5ptYB+-zsI@s7 z3=L{I!@ju#_%C9hrB=7QRBH$!yc33)?yeb;gasO!{BKVv?v+JedNz%5bK33omyzsr zRIje|hQIzaFeLRas2kQLq|=VBw>~7HptW_JH#ISbK@3SLUfzdHzYT%d;Sc}Vi6hXH zfshH%p{x^KEuzqLqdMsM)pPjeeDmbs6Sw{IFPq7WyE1hD;}(ACTkuIl~2Y1RcBKn%KA!rDq#FdO9@)0U{ebbQ~gKlk3-9CM9kgcpNZc^QuSKU7wYiTsK zd)h@Qz>;C`qLsRkIp!~DV8;ZbD|rvw`Snv`8<3Jl-t=iUJYte7e$^1fc;*2~cSb0{=M<`m%?6R&;f~ zUL4Izwj!<;+v(S)qumHR6=NE zf2Wdqiqn4$bkqo=9zFPZ{hkkIQ_*mXSlyJKkKpw zf?r~e%|E8#p54_l<)$wqBUld8-sjBK4+0E=)MXzr^4DX%Jt~aqo+53%i zsH<^fQd0qS*m&LbvS)lfi?8-Y!yF0MEU>Z9s;`(t>Xe*ZqVwY5f_eNsB0~`PZjTo;xo{f&vp%VY} zd^M5E6W|+oV+tc6lt$L(Pw@W)5uBb*kW9!bX{=njW;e-(6f`g;HpLHGfd?Xj!!rkC z;*3Ylqaq{IMjgj0%#%D}_3P@tN3VhY*miFjo-1Trs^^D9VQ7d5569O%QI0KlJRIh& zkEV38FX#nhrihUG-Ube$MDf|4ydFAv^()AZvaE3GO|aq)G6BRFuhlA7Him>q;NBUNdpaE@FiQ zgBSkeI8(#*WYuloyr?blJS!YpTGMU7e5B{&MQnwzgwj_9=@O-v&y(T^Ifu_1 z@fce|@~Cgu{^)4W<}>`|^3>b16jYRkUGUR5`an^*kZ=`s6s`?~ci>@}w(%JgB)~?+ zV#2Z&y{W9y|7w(=lZDXFKAfCwTy(1SvtweHm+x5xXsRT#v?w+gRcJ321DLOBBH)`#b!Jttr;8G}rl!_W!vti4qqX>V0d)#qX zvX6F$8fAv<5q>yn*%O(x&NVB@Vu3u;&Wj?3O$p;vADt{|q}3VOk#65qC7k2Ddh~n3 zKO45kyJk6hrOuE^YTDi-TAtJKa0A^(+=LY;LL$dchwv#pBFm>cM|43xo4JscZe$wg zPn8Q|`5|?L?Q6kQnwq-q=)?sC0V6~V4k-QQ?SY2assABn|6M;kgO|1POwYq5*Kok6 zTAlHuc&cHxRa&S__@U~`-qb>ykyjK70O;^Ef}L)6M|$m~_5AqR&5ex@injW+@HhZ9 zNYS0+`t2?$r?Bur@rMryF5rEDk0tO@_6My(ZP=)^agDcMki`0LZ`7}NbpOb_r1J{2 zJx(G+;7nNe?QhbVB|I4pBh6Wgr!OTX3?1oNNr?2E*vB))Ic2BIz`?u*5WaH_MK+VG^pEFW8EeTp*|G{GWkW^#AJ{;FFP$N4Lew%dW2ZWI3ymA{itH-)DlANE& z*`3nkBLAl%QI=VK7MK%hWt0Sk^si zk|#lWz}{U;NbiMCsnF}9`|cMbaE(KJ#pFmDM%8|ry{OmWtw>M7gzaSISm6eXqO(Bv zHGP_jMJAMGd~YwEzN~^KkGbDdqus`P5{Hd~%DP&rjGZ|e-_zsNE9)cLh@9=2l7?O* z?QrB&Px**2as@)cNUw}*y?Wsi*YY{*JRd_>S{b-5?K(JpS%AzewUo1T2C6faWBXux zxk-l|FTzMp4rMGx@d(+N1n@SCQ}{~9JTn*nJ3rctDhM7ZUa(@=Yq1Uf2TIUXa_FW5 z_f3Cx{dc%YJmGiR##1!?v=vETbv8WwvRJpOLk++BSu{|v$^IdEAm-v0pkLY&^E`v7 z>$RSvOO`TGRz7(k9xpNhob-kA6Ne(C^wG;>78>c2IH9gZTKDAtoO`>JM^0GRebsnh zr!0ANc~&Q&Lq9!Uce9?#{$mG=oLUe=#|8jpN(xmxy2`)(bLephm)c)r_w0r)4pLQQ z6tC^njf1al&-tA$qW{>%!j4Z3Cg1_y@0kKMNACIpS;%rfd90_F^(B;`H4Q!7PBxm} zms*cSsl`+H*G+MS4|GzwP9uVXqBOef*L?NKiFKUzW}@b0Y%(D#A#~69K+|6vvF1U^ zkyljEJ*{=W6{aR!w00gI&~zC;PDPXXk5c&jIVd98Z9RHN9j`!>Sdd7t_DDqMA3EbI zc{2(OWvc=0;hX^n5PW^>^^H!=OiL?l5vQ2gPzZ=9$%jo7@n+UzW1`slN0K2QXruCY zQvMo*TO@C>3)ZdB$}#3GnJ{3`cUEs3%K1B*`$@oH0>3ADN>Tw;-ZQq$oOreEE<{^B z1;0)7S7>2HRuutinHtr*9LL57Lhvs9$9*KnNPLkaEV2G`-B^VaoZ=uS7F2_kEac!?@zzG=BXoJimD4+F3#P& z+~5|%U>YAf1xWQzSP0fS`Pc=MlmgQ~+Iubkd2PrcZWr80GYnc`Ia%wb7M(s9b`>3k z@(U8^q3R84^?ZF6bUbyQmipnacJDM?GQNnW=2&&#OqU|@4D9~4WIKvBy? zu1Sjkt>ZV%d4n3IH#>ms=ER^dHncbQ&1LZ~n%CmX(uLDH&c&)v`#Vi(DecR_JpK8_ zLzdtQWRnS6TeUv(@?=mV@+4jS{p`{o?7AANI6gAC-)b)uW_VV#vElC)OZ=jimXk-7f=(K0`6&t_U0>&Fwz%rzI^l2_hZAKJM+pYc?=U5psZv%9hc>^)mi;lE=&! zsQIt?h3mvP>1{tHqQQmFMSHvHuWt*R#_sp;&hvNoW#taDvh&Sl=iay)1uV(W+|91f z$u?Hrzn_60^LmX4Fiir8rL@q;y_?`!&o;wl{J6KbGp27cY0bal3|bWXCT2jmD9d2j zL;H`C=hNg*cj(#Q{S~&b_wOX(-d#A$hO+%7_kDlOEi5d$)E)x<$2i?eoi)T!zt}NP9-5^g%9EMQ5G5fkDZ80!mrv`6`-SK7 zsbJe7rUJF|#zB&u3<{Gwh13zpi7V0PHxx)!#a6RY>)u7yaDPT}smFw&(S{v z-|Cb>&sJok$864OBD^%A(^Q2wXY1%3mq8y9Gj{jHV=P|2xIeAr7M)-HFqcR^bwmt_ z#Nv~L5WTkl)E^9aLWYk1@KPO*zz#?b5U|@z)O!PfGK=Dv9I`yGOrMaQ7}|oo?PtHx z_>y*A|DB7$9IJsO&12fyQd)+q`k3!n`+Sl83mtT<9-PbT17ZV_yT8T6>Z5c!N!kUH z4_A=>1|$t1f938HT!#8%HtagBrP)I@kkS4m`*;xP*1=XX8^gzcuIj{)j$ur{8%tVq z9^W~h{8%7WVP1wDjxJN5<#jI9?o&grjj_w;x%~vOk+QV-z#W_55`MbpM{WoU_00vI zD2pM#4{qNrA|Rn3z!slPY8iONVQ%-Ditilr+>nWrSk~vb{3cDwPH*DY?B&()qr`n& zN~xl)GvlgUzEs;z$7 z{yBrJ-5r}T^rA25878P2>q3T}wi*5elSv)!#d)UB^+eUFDiht%a9hdSkWk{|r2d9? z*n`FV4}5+*%CCiHtC00Jtsrne{5F1`asB%6;Qx$4aoC$ci+Pw10qCtags-Nv+~704 zK7>`Bzgx|%oDWdnScM_e6U=81CZk*3w<~JJ3s2hf!+)jpXusKGZ?r@S562rscY$Bs z_q+Ckc_PcaVOerwkC>)9lgHzG9ZWkvd$)hvPT@bP3_#O2#ukeGE@W+GArRl0SakV$nnS$K#HLrTb(9dcNG(u{$J1V|7>j;ki0Y6!Db)H8d95jTYKaBN{u zg9WqUyz^WZ-Hy`b%TyWWor!0tx$2WN7|@EHct-emxFeo=x3?Dtusz#T8&Uk{XS;Pj zlKW%2r__BMG_OxwFi8=`jdV)v1YJN6n*$j&?`>0f*|Vdu&fPHi1x`s|38Bq?pqzr7#Dl768u!p}QL z0{TQ8z#l5mcHIk5NjPMzRKGpx+!MHg5rMoB2JKut_>&H;ehz%uT~n{prvEy)@cU_} zAH`I@ypb1Xv5(lI#Uc)!0uR|pSQvt6j(!XCgO#@_`hrX*!(6?C9J9|QYRFS^NeAn_ z_U6OdbK_b&#qXgqxM9~C=+WSKwkT@By^Rb%dhaD2>*iq5(7tAe1zo($awh!SG;A=? z0Yrchy2L%LfCK2IwMt;f@X$n-#6vN&ky#*XDp+6dhH1hScBj6s#CRHyP0{0Lmf10( z1>5DQegEB~OQqoTI*L@4<>Aq@(@7^eH5k{SKXZ6Tmo(Q_ZT?zU5lhNNv03pk$DU6K zoZ}rFwy8zPS`IM)5Uo?dVjsx*Jvu*KOp>0dfSdvon#8m1`^BrHPRqsgh^3mKnrTzW z+_&-S3xCe@%*Ut8CPA*}VM3>OZPGYg@qBDv_vj}_bkVvX3$4++k#xB28^qmMjaKdN z{1i2Wic#t)#rl`{o4Mw#vGIRBI1N?74i4;MDYEWv9QC}zVuWljg1S}ix_+*)K$X2M>l^4gtO{Fi20zInx2-Mrf9QsG(MZ@C5y8#R6aW=;&17) zPI+PqE01MfCY2?r6}jII75`FWc$elRzDI{nkS%mK8VrVc&UD=z^scrx6kZX^*9@!= zdndeq93c0SYF%)}js3>3@O(1z4OYw^e`Jdhad)NKyL-Nu(ap~TGWHc~)4mAJ9( zMS8}7W76IyO+*nHhtwZb*o|H~E9X{iqx;K&-P?;=LAQXpF=<|Xc;StxkTbA;OI$dI zM-+Y@f^u(3WZaVb%W(HWUqQ3^=9fwTZAF~$g^V@I_Svc6^8=o9lLxuBT zeFOI%uEK4F{r${}hDAh|VDD=s_0f7@W_ zK12Ei!Jlk$SjI`0vD+LLI-sFF&j&_kHLbx;Ei^Kcb!DOt?Q_P*T<$`#0393 zJblY@f7RV&%T_+Uy#=WbuhI~bI`)6<&3QeSd%23+`H}TvxT4u<{kZXaj{OIVJLmak z0yvfpxIQ6<1_rmP)p>fExxNfb>023xNH1@hLU*+K_7gAs%KaDn{C6$mT<-P3Z-<$< zjsNUa?pTm3Hibcp82slb?OWDQnxrA*iO|Ew(~xEMhm-bXlo#bAG|5<@dL(G%iV$ia zO}n^MT*Q8F^ax>C;8uXvc=*|nipXnw0doFVzt;exn^?? z(--?Q**%5*f9{mjQlipU_cYgVs44tpw2tueey|7jZ>-N$W4d-{H&=_T9KkL0$ z)9#sQGhk)Og^r|{ZCL>T*Q`b9-ik|G>$mUm`Kzx8tatDd4^;xsSIHtYgVwc}mvp5y z`Gq~O$|Coa)T(UZ1uEJO4nbgC?&!0P*7CT0PjK-8DatN02*?h(L@-Q=FwsOTH?-72!nj}M<@riw7XK|o0xG_P|u-8K{JB@UoeqUQEw@nuwSfScBkdhW}elF zc~HbuHGWNxmztTR*o`_G(op&kJ8?Dnc+@ST!wMGWlS49tD%BKxg! zE9)w)GbY>T;{#FToSU?vfvpduX}o9TSo7zOR>}I+K*|}KcBS5{OKL~G?w4j7xlsLekou6!rjZJf@kRZ!3?0H(;$zsoRPHLYijFe zdC_t{e_i&&i>Kwks9M+si}e@{{vlNjq%ulOOs^`bGR;u*PKA$L{D+oOaVKj`;q0T1E4#32$^96y5nBYN4{|&Z)h> zR=+4?0*fJ_qLT|x!M?$-)=%w2Dk>_$q!xNI`}GM;7iic@oyNSv^l>FvXgDtvVUwJ6 zGqco8&V7T{Kgbs=8(u~)&lkg=%ybw`r7cYi)))C02}7AuKVeg$xKy|2!T?>Up{0vn z+e^az6TBRrY(O@G?W$7pnG zBd>P3xx81#T2>TtxP`;Qt7zcZ<^|M;IRIydla!0CMCEDY%fFwd`?KFH=gsUFgLBN8 zHRa_|kx|24$MTgQdA@`OI)-EY)Iu|0fj-G$bSgpiHw!=2m)M?xd%BraQB@&*SH;@> z6fJ6V$E~L5ejs9gDc%^Ti^Fjg!bRLE{FR0R8t|8y78*j&dXiXXkh36#jnYD z`u!}zL+iRG3!lRxM7RXe&<)|0EwxzX{)54^UY?5zXPj%a-?LZD+L$1+_`|2C=pMx! zZk}I{)EO#C+8}ugb9@^^wSa6naIXyh<3mZgK-R-lI-@`IA$Tqlu@&X= zCFR9U8tFo~dhCR{gmL`Rd70_JR-}4S+0_9B1dM=sNkzpOvU=5Bjt=gV|2kO2OW&5l z$aJU-8+CMP7Zym(f%0hd7hkW{#Gan+v6vkFAOMSBx3gB`pu>IQ95wbuW29v^^ZFP% zVvnsNpq(_EKNbzbRdnY*N}$HPmzD9v&2y^0lhzpA{lrwvuHU=0wQ&1GClx6}clXb9 zh>tDvvW*?_sr7eSq7N`)HUlxO^kd|`Yi%3(>nbcHkWP{9O&uF3UkMBNMWK-jaTiBK zf&gz%!}l}J1+3N~1d+zuH#o0UoX<|g&8G3}%V8w_1Dxj9=`hQmUtZJ)AlH_fj%_gd z9jqAjGNx_q#v?}ktoENv*$dh0_Nx$Qj<(u#gvgkgoF5t=!x|k}Q^}UN`nwML?mrwX zPBk~~*eG~+X3di`2CJ|E%nkb*{ivDsu$HMGN9SWj^Lx%O9}R6#2>eyZ&X4gd=e^xB znQu{EoWlc*F`}MeJ?AD{K}N0GKywZia#SN@g3V(Diw}}|_L^w%Q?X^VzR|GVfUfiF z@Kij)xx~}eAPAk?`jtGYYLhk!yy5zUzESDqk5pPZ#gQ(vI_MbDH&N}sI^I$1p(Rq~ zHd%4X++HPmhY*Hyd+A~KUgvaJ)=GVU#Clowh}4-Fldmd?NY#{^?(l*{>i_0CUf$^{ z*DekSMV?Mt?)@vMI+KS-l`}(I&sCxI@N&Khq5oL3kMz4^Xh_ZHv@>>J$;WGc)Ee{l zmi{Ce8cNi(cUWMl42CHaK-F#s`wtA*KLBh;6pChGqB?RiqvNY<+x~6Fa+C=R6XoS4 zr&UNF(07c}FBMHE_WD-js}8bEBE>mtFc!2Ia~FhoBb+2V47(E#aexqSUFG{}K>IS1 zhlfW_ZS52c@-tEO4xtMr1NRX-AC9g@w9# zpfAO)XiqB&0RdJ_pM@&Xy8|EN{b<{5+4(Os!QpM{zY~=klkz+B_y5!d1?Jq0Ss{7F zx#KBHE;?>I%186UILlMcZM8!;duI$`xTQ+f#CpzteZ=eW1dUPS z1Xarh;Q}^jGZdd*vOHM0BV-6I*6m*mNgfB(#F5oJ1e7|pY(o^}@Ux|G#E-_`#V{z2fHniyH<6Nv{U1+~7bsP9zGKS!LdSt>VY+2CY7_rh<8 z%{8#1c|BtmX%EAT-1cr2HKK%v63uOCpd`_KC{^59Np6*+TAHfn%xd_`c%s?eATA0H z&+1MeUV|EL!n>IBR~P?TYsR~l&XHw~pZx|)Ftzd&Fl@YJ>WvKVTmrQhmp>#Dz!DX! zYcyet$pPCtV*U`*-te=eFAaZLo;fJn22=>mP{X7An7e^0$)Kin>(V zat$}N7>5r4|ffPMAIjujHUYbkn1G4Rt6wQ24l0Nhev0dNwbf(?y#QX_@ZdcKZ z8KMv+O+!B$>-8(OvfdxV#;i87>35si@OS(y0N{%fxKYx-rldJN?q;`Kc#m%cB%;bs zJB6+4TsZHVohELK982t+VR#GXeiNsCGQqGq2k(63sd#jJN) z{_M6|T-tNl(Lr&6J@@&^vG$);Hglzy^YZxhI0k0suPD<$KU7lO)}K_+7PKp+_14K- z7WWG>I=|Ah%wsj}d8#Jmd7iZ-MAhdKI%nKvmWQ8;sKqL>$(@c2uMDvUcH^CTxa*y3 zeyFR~r|{2D&m9>fjanVmpPaG49`#=Lyq$kW{F^$FTb;fxyB@wEW-=$55GKip2Lxf4 zKaBgj7ERCTfSbPzn=4v|i@-m}t?~+5%gK=eKwZTe_+2e)jIOezV<c%^Ws8ApJh4RQWqM)G$8x=eXd{^BFlVgsGEZ^kYwm zPtOs~PuAm#E$j@&)O&`JaaddvQ&L= zJi2+(zpmsdFKN4uldpJWc0UWgKWrtAV53I3>^ngtggVkWgm$73^ytRSsx#R_V`aU867^dGFE>d%U-fFZfq4V~NfLlc`$%~{2 z#FDom0hnpI)jhMb0eLK}tsko`B}9@Z@1G%!>?hgaOAHxcoAtl?z@F4{5zeE-7NudO z_M@6bF+=06rsAKzts0&{kazi~84-YE;R$dtRd08P^8O&ay@>_PN<$gq!mnLIH+C|= zMM7w~)zvwkj12LhZy#ghpQ*Ek44~&HC26}EpGS7OyIu`GGu)$UitL4PvT}v>{-`;- z`a6bBrKIfC>Fq3Fz?GV0XK}ZbaQ#shF+c*cp)$?nVm9zs))_sisXZua3~zmUCvANb z7mg*=PUp-iQ8;h5zt6Am6EM}d;C)6QI1WkkPWJvLloWMz{7}!tKitMA%$|h{r3`E< z9qus>y7y|gA9*spDy3!QB6m~ zzV`GtjPIzh3=2WsYe0^p3N0?pC<*SVs>I)YEWN(6C9*;A=0?MfXw@&R`{CNx*7cH- zrbKZ5Cr!4al$8^5Ob3U#9A?`gaBRHoA2K*`?oOWS`{jL4jYsEzzp+RF6Bm!8ebomt zN$mTsUjKNKlI88&vu(RTXue;ze*M)@%$j38c*9kwhP9XnZw9n z7?xR$b~GOeh|LwvL^~=|{bsQ%-9DgX_#u){>z7n(*a%%iZ1!iZfg5o0snMqb@#PS3 zpf1-x93qIb_;Ji`GL_%O-P z%j+m4*3_OG=>#3hI2wA#w1O#%iqh&i7451o;{q{h9#8h3|As!$#4)ntmbs|AU+CD) zCkwV)9Nf>G3^Z+;is8CKTERmYg=!@>L*LcZRLm>NT6A<0Jy`bp52sxg4UF}`!R3y4 z#5i1LR`)uepZx==9nlaY?b8X97-=)0b9`cs0rcolO zw~x8nWJqIz*Skoszx|~Sk3>QaWi_v-0=%b|mZs`+d&-_!r%+GZ+-=jw+R;&$-3D*1 zt7A-%Jp3OY?r?~*m@2)Riu04Zx|+Yo*(B>!Owk#G3;vqaDbJ~wmL46IRwk{D3Zyuk z-lUwA$8lPg{<-PCvHm^e*NVr?c6|9yUY6p+ATtRFy>QtTu19ANeoM$dL9ft4-|b=h zNe~%H0`pZAp8HGb+?IX5KHfpC>xejZ#4!RS(&NR#UEPb8#;^}7 z{$NZ6;R8peDZbMd7}Dxr%!vGw4D4tw)K_nuHsg(!towFmg`L5fkWbgv@Q3Pl360s@ zQ=F$2XsP?F8!|qP_(rFah!>6qWRH#-cojz{&=kskbszd zmk0+mz}Ej$K9(gZqvg-Z%%xXVvwdYSb(QROzVbp3w)*5%3){XHLi!Lhdv~A0OZMXOgj5T^4R!Fl;3>-lz?ecy$}MB5$*T;!3Y;`fMeq zqLONAg@#}S_fh$bGb{#I<=v2)^@ynjf5+!l+B!qID7x|0BMB)!}v?=dpzpzrK?KW^)sI#P1<7@Gl=EU9I zog>Nk4}-_|ZvKY&Vh&ww`#e;blua7o&+p|*5QIQ-U{P#Bf8$_k_T^7S@gNLPy&1XK zvDzz=H*!2mX{hF<*|kmaI3*oi6f|sH?4D0TVW4-6fDUN|A9j$UABiCy7QA`5^TURo zFy)G18mD(M9p98lqsg^#fIVeOGJcSVlr-0A5PL{Jl7MAQL@{FCU|QU5sB0e?U7+0Djbnf4G9G{^e;c@W*)~psM%f z$1%wae%*tya(^_ALcx7oqBHF89Oii7yA;%2amuSDnIS7G0(a}XiTO(#NC6 zovpv`!iz+%>ivOF#X`fibT^E3JuZs!p z>)P1qluf_d?3xG`wlZludO6HmUu)ksu1X4pJi{D^G!a2?95j$NxjqcA`C7_v3_42w z3&Kbuhu&b!ha)?Uz2J#t^dJ{wOcupDfcBUmGio{Qo9OY`<$DEVhD0v~FmLi}VjIe$ z2a}*kQ~o4yT-pN@(sQJFJ<{Jl#h{^{Gh*?4XXPW4=*;(e?`VherG7H6-4;!>G}GE>OfFReE=B(1cVp87pZ@jIC2K5A5N>@$|vP)Z4vxsAG4x=i0}kn zpQf+~bI?+EUwtZNk;U$m7#CNRN^EY|YTN?ISW1WBY)cNafvy@|Xbzh&vL0zN|?P6Mdc_*$PLOzMR%xay># zJSvu_!LA?`n}?B)Y;nrbe*nW&$P9>iUDo^%OQxN<@aHjE3DpUT_8|6Oh{ge%LHb0$ z98C$TjKGWhv#EinEq6#@RrTa=?X&uK6MU9j_+l%L)QtIy#4#~>BEqNnM)>#O%o) zxN|&KsxwPWZ@U%@cP^=pr|LjDp=Hj{#Ov8{cOTj7)Nv7hldf=}W|bbPBBJT|(Y$wM zTvznz2^u!`{_iad$`RHgy=>Wel?v@Q8YwdMqVG>iY_MUyk=^aTBSWIosS>1h^eY6> z-*?~TVD*t&lBcABt$RO^;l)qj5$b|*VH5xkvz~4O<;|;r+9rQZ%&NI91q?HBiy) zRVSeaLE_gflsMOdV4%OA--R6%=`8TQEXxn#!(5RM0#{jIQ^ET)2S7+RXhp{7Bb$YH zTQyCx^4FI!cSn;1-_gMFD&P&>KXNR*+3`u{9{{7>5 zI%$j;pI`d*7um%!l{BM|ojxukIiTJrI-`LpN@>RepJKz*ZNwX-yg3bHkIGu6-?f5Jsj)g0KIm>;f)VXdIf*~~*AoVSgMsVc)jn~?Xq$m+B z^a*}2P!9?UHne}EhppLcN$v|gNbe5!2jJa+2ou6ARI%Fl)+)2V{+;+7431>BNC&KPxo z47iK_E2bb~KRL;wN0dc6!||QBDFB4qw?Mvr-i&mdXZcyw*}1tqJ3E{Ceenii>TrjX z9t+RELVCvn`rk~bMg>*)Pa3)!m1!tZQFdMV)S55KHtxzr%E_aSyv=5*VAJHE*bDk6 zYuTmdl=i(|xq-Rz<>gWM{iHK2xFsY~#SM$&1!`+AX2S|}_mBYU++lW~fvrz-D!&NI zkMhkBc2|(u!Nf3jY{E;BQ&{H9Ex+B|+`^G%>91QA++AZ_Q^f0k1S4YtiQAQ&V%0m= zFe=fQF?HgQ%McAy=pi(DQ@AX8F&$71J@VB6F$qW9gbqi@^2RrtB!L#|J`f(BG*ziG z7+Wq+F_aAPgWl~$-Lj%1)5MprlgC6-Dl-naz5S4Hk^&=;-Ky`s#XBsoK`MVO`eEYuBVx z>l>DWv|_+s&}O)I21JtSSWUW=O``!d_=ppVI}13>GY^uT{*izrKHOR%w1R4Y53yADFS9`9`MQd2^q z&}~Tl?uSQvOn2ydx8)`x3GwculNxzo6->i^`OVrA;SuLJ9M8j=NqXDW^ ztBi#b$>aPloaTtWuHE{-g^0~MdKBKt{^5cEQ_>-(X1cs225CX`QV@Yg8Fuv2PhbCk zl(3bSAt@4zbAQ<@Na0CgnwO-Jo7xq(-U065ke%w_e?cEN$9a-*H0;JAlSLWouM9P5 z$-o6P55Ypxzv}rvVHzqaK1)YWzy#-%-LVDilrPt6Q(`@8gEa^(vlN%5|GOjp#dm`Y zidhBy?~GlNYb~KonPS?1pNp2k`-V~UHHJjT&V3^N@Ba+Q0@wd<2aC5Y^Vu*#Zq>v^p*a8m literal 0 HcmV?d00001 diff --git a/docs/odysseus.jpg b/docs/odysseus.jpg index 982a00f77df6ad3e9bc2f703a74eda677d3bd9b8..7a70bc5fc5c126f1242acb65bb7956c877152ada 100644 GIT binary patch literal 53198 zcmeFZ2Ut_jwg(!!pr8Q(sY+-Pnp6!{A)yyT3LPc%&?FRTVg&-BLnxt1FqDK|B?uOJ z3DT>GAiXFmpeX3Wd(XLl|F?bj-FM6T?m5Heo0;s)p0#Jz{ASH6`8oFUE#S1iww^ZN zzySc@!2TcL=OjQ2aPYu^U)NvKp(BTWrK5)rA3AdE=&@tJ{*N=AU^;%B`S`J8%q+~z zCr<9CV@#~4SWdG3D*t-Oujap6?O!L4A3Of*8~^Xp&*uQ(@q?R3gby760S*EW90DHr z*#Z#wMdsl{zv%sII(p#9vEv61F&$>!zwdAwaNywK1BaPT9Y1>X*pZ{h_TTH^p~FXj zM~|@y${uIu;<*Yp8yI3@J_C}2n4;{w?}er0*D76lkdQ=tT*bkunOo5>gv606U&t%^ z_$DTAXkqTpd=wUgA?)+cis(2vI{EGQ!n@!9J`KN9vES>V{qFW}LV)`u9y)mV$ibrr z4j%;UQ}BxfARGKJ`x#k5xvO>w{WC{E-nlO}DvrvV-s8~ZL||}08Sn{u>Y!u zfB+4^myN%^-~Z3^V+?uolq7s{B)cMGB%MlmAmB)2c4%Nix_wP-G|s)Y^yx!JcA-hj zTA=G?NrNU~-PkJg7AOjZf@;1<$s`ZRUDqx(qiu;R!`Q;a*g|vFE^!E6NlFbnp)PD5 zXTxG|8AYWPo!%|pa`{#r@QfNp+}TwOFIYKqGOEw%Ct#OKbiNvC7R*DIiDnr41 zFB@BF8TO8FU2jG2( zMFtB=_VTAAGqrG|rRP^7$>X@^_@bYHEo=F{mwwHAaK-)dy{2xv*zg;i^(Zy452h6B zinwlK5T|7EAw+GMef}TsUTU6#tDEz#)t+5)Izs(*pid?pe{AyxK7OVg6a|)N2A(gMJX5JU(NV05Oo%EG$5?G1+ z^nBW}yj|;})MyNBG)BinkC75Ieaa8IbHl50%sw|};|tOx<>+^*aAod$o=>sTPqE5D z#_m-kzmf18Wj!bS-of{;!2ut~?7BZ*#r`+SZdjG^5XyLBvy(C;w|*mm_YcbC4^9OP z*#r#vZf1@68O_wcgV?_@pnpgBza#wrVT5-I7;7BG zyGL{oZF59YUY~gQDdNiA7$PYv`EIrH>sxuG*x1nu8wn0z;TBrXCdN!Hs{sh-(%KhB zywmP?J~K*iY)LdswUV6b#G5)=@yX=syUwqjD$Ib7c%h8$$6xv4D_sn=S5 zp04_ytwi{;V)|tdG`Y1W{A)DfL@j3VWpG0My4wKn`<96g^K5Np|B8OEp8)Uaj$OkJ zIIW(y{mhzU(!{XViCJdhZf8fK4oKguo;H@2!O1!5h%#KPv7Ea-(-LesTxI@@-1}%0 z9c4f@OBl7=wPMrHNI5A69vz;~m9RKkBb|;<`m{uF1GR*Y^$qTw(T%2qpcwAeI)yKO z`NfUe_xO`8CahU6G?zt#H_z?KupxUqj;I~L9#(DX{YC)Hu{)SL_} z>bexN>(Ebt!R!UOkG!=%@ON8uZ<59Q$Gr1B=g^ZX<+j5pY$NUM?Slk1+cV-W7gL0t z$2oY4Cg~j{b{(!g@y15q5skukKT1=s6`_t*I9~KqiqtO<0>Z5hxZ*x{#nMYgJu{-| zQn?7&d)i}#YBb6*)qM?WUi`H6C!n9Q^)cyi7wVM#hysD7)RVu6W{sb-DN!JQ(=Tn0 z#*R=+d8pu50ZwMi%CGzJDM&k|NW_{g95;mfLTK&?1<`k^0{5=y#vtD2uUD zm<=DZ8{te(z@4+!b4%4Kk_@jkT~>nu+n&R?(@i%Xm^hLp}S zXL;H<7p38dJh_}^YF2fSq6tbr9M0i4)={GteMXhucQI6`xpHHpILqnqYyD{c8cZd; zavf$S%SWYBqo%kjUN(tFVFzVyJ^TqU`KW4yZ*;;q1tV5v+0XQ>xk$z?x6LK;maza?XAD^1@SS57K5u6(@rVTjkTz+ML8Qoi+Bn zzm>n0+cxu;?RI!~AsKuU{IrW+axw8k+$E{%W{dRu~(k3I6$EvDULF_ERBagr@2(YLbur&}K!$oWJp z_jEqooUffy$S~|~D}F)lRaPLsn7}~&J%gni>7b9CYbNC%Z%%2P)AqyhrXE32mOXT| zplie^!X)(#1A6@})SGj0I5=l{x<#s|75zQ9Z4mt(T8@{OzOE#tKZjtxnyvqIXxF93 zt$zw%LJR_fwi6JV6WfC?qwG?s5^#9e9I|n^{@IgdSeIM$z~`@Tj(%afl@uy#)_Ku%67H$W!WzYB+3(uNHn);g9NjID?n5!9WpvRB_02Md}q{Zhx7HNAHpj> z1Oz|D_eIHrZ~nZt^<8r|CmdkblanS~J8V3@-E-scJsD<8p#(t>_g?KO>imqy(j3oAA8jNhn7XqFw!{W3ej&wH|?QvYxlk}8eD@1$WHtd*v<;ELdh(NC{q zAYES+QNDGiANhQIt&E<&Q)eQHLAna5>);`euctXsy;enpu=`G+Q_;?6e+Ni>>d zkphGy%rU}47m)QM?bItNP%}nnvA@52Ljs&Uk7%&JZ%132J0Qs z&p_KU9X;&`ZhTY<%FN02lf~+CMejN!-;C@nGm&!Dn;|1U&fA=p7^x+ka1; zjDBrgpY&`sx&}UUD7OL3WrNxh6luEejER0V9~1)cv~@WVQ3{`f%hn1gT0z<{LB~0X9v$+ zJSJJ)V*m1w31Bx2pC>zm(#V+5!_`bX7M;#rCi-o-Jo}fSwM&hq*;*id_vtv@mgM1l zyL!t|{(L>1Bu8-}i6l8Wa*Kb^{?P%^i@y1))~6BILp#9jSDTxlzZv6Dan z%hy-j&65PQTMKltI@nmnzX#gmpW+`@39L6Qn|l+cT`;(j$tNz$;V5KiR60=qaRj{B z_?o}+V=7B(eQ@sVdi((Vv4{vZSyG+Av>~XXbkZeuoeYVs`Cj8kR3L3Hl?IV%M33k6 z)Lv5RfVUAhoxNs&#N2+$5XGUBXLM(URkVS_g2qmDP0!T9fY7xay2nyR8(gZE+F1J09D1@x`qoQPJ6qNe&kdz*Pos-|PkdeMeny>j^* z%Bw*C^|I%bg0{HbyUVMuQQkH?JuMiO0G+)f{~UN5%l=j1J^KF%c>iF>|9t6qwsoi* zH3zoSBl6HhT0?QzguJ`JQ9qwN_~u+ec1`JsDyIP1#yM3&`*FIZ5-|zHXg7oi; z&o3i&RPNRuZhS=}LcEP6T@J8ew<2YGmzk1x?*8jE{$*z}?Xdk6_=$Wf-8kiGALVws zEWHuzFJG@!@|V2N3Hh(L|DXFba=v|mUbJ~V^QAfT)4R_$$Zs;ec2?OIMrt$P0#~hr zTe(ke{RFfq%HLrC{#1RXSiDc=fgQHhbd?|V?px=YliwNfjY4SYlMoJtK!rQABRDk#3Mx_oHr4Y!n&%>SOAl_t3^@KoGS;A=Dx=A0&%JtkPb}L)wd9?Wwawr-Sn6 zGcLqYhQ#ukA21tBc3n+n=zca}iP|d_@DB@`=zMMiT64~B+tDl@*m#_|#soGvTVZ34 zyGl6n-rvo9Rit#DE|PRN%%QU4>Z4hOxJbuUxI@2m>th{v?m}bOds6AT*IY&RjQdJ~ z9L*+4&l)ADRivl)-2HX(XKu9pBM6FbDJs4688gUbQ-DJCV90Vb3E`=Gmqb0je!U}U z5LPRL$+VNVNlA9daK5=|9`7VVZf8V)xum~P+ntFgv_&}ajMYWS+8X3Ui&z;sa+eU& zDi(Q}C3UK-_|x->Mj%tttolo32^j^|MPlmoclZvJtvo<`6cNU@pMR+ zZ_PrO#9C*}@G_zztBc>`A9H~Ra*zJp?ti>?_@A(k?WI`iInqi&f2a@h>rY*-A5IOv zvV8aELWgtN55c00A1=p!uLYLe*r)YWN2+z_^j5cX;Sat79xQ=GYrgG5zxKNHPvCer zVvoI_v2INwGD}#_qZl4jxxvW6{C&(QJV>o;T&w$ZqNHT`^HRkXq30;Rk|2lzSftve z4^F6|g598%fp-Bz+O?fU2&Fd$uR%g~3wf52A?qyA0l*3Ke?DG+o8!JJ;R^=k*Qp?k zx_*aReuutoYBLIkLiUHA*P)vwtR?q22A?+8(`Q`0H@W7qPaZ{LmLDo5?C4gC3-F>@?U5YWch#@uoBS7ZD3BO_wZY zJa&-6Zq%2tcB!kUR@=J-Q=_OhCVSpg)IxGqB1PCt79QU(NjEb|T1D8e@CsMnrgMV) z1xorJzZ()yJYk%f?a+KfpU#sbwdiG0=CBdpg+gBjB5x2YAuh`*Br2#qfzb^1v2GWw zM!rS$d5LN%!RA(K9!f~HZDG$eTB>d`)QuRaKDpg5%wyBsn=edaf+EN;RoA3f&xypYjd}WbIAEu^;`DghEY7!FKF6(-Yhp@e$xh8Ah~g7pX}5=5 zqH)RX4cOH6KhMXs_HQ(abomQ($=NH*^CVTb>rfy<{tit;C9hD`ir5ONU{KkkbY$gv z7%nbKSjg<7!Doth7|#E2K!v?%zZ8d{zx?a%e4Lh<^OAv#$DA@ON=!D>AYxzFaJlyf zKczI_66kCm|LoUf=G&Y>QW(Cc77^XWTtaDM?mn-n1PZ$%Z4oqBDO;4}m6{g8b|yfA zv<<~nFl>3rD@xzo9Bwm5R?=8T9KEfJF9XY4rlj-W3A&B3<7tUWr_&ZCCgPAf5L$B^ zHvgK#v`HKBtPHJtG`pjVaP97wCccq}>j}2_`PqR?KIPt99&jT_zGZ+XXuj*2Dn^$5 z2m0oLtn%OSLMBjk2Y#%F68{&_$dU@o)&DMM?-ztzbH+tj{Uv|YQ}}zU|Aq1a_U<@_ zA7belA;`s*>1lu^3W%d-{n&ois@3V zjkwRB#V^>%G55?hY>1BXVe|ORZ5m$*j?(X!J5ov~FVO>;0nUAuHt0@21Ms9SvcZ}_ zDIFouRsaWG3~c~T^0LP>MJedFD@IWb35WntZ=vk(p75)C&>R<9rZsMQY{m<7xf!;f% z)Z1K(7gK<$Pj*L9>V(f}=*1L-NkC|J(5S#iZ7sDsA6X2iKVMP)y~c3+MQbRO{=3)< zv!7Mt85)>3l6aoed@r=>&$EJbBrBRJ0=ozl-;$Enxoc?-<17&Y-$K!6Uh4M0ZH^ua zwve?=xCbmO@@+WBU23AwDf!qzjBPI8)D}}EB*kp&f#$nV`FTS$7qa{!i|GS&GhM#66%hHmxCeUSA`cntL?L|FI)cCX~flZ$?zrDTMFYr!&2nw2yIh!-avd zP#s12{$*bn4)pDGem3v*j&O!UnV4KagMFCOiHkik>UCnQPO6qf?frG9U1LS+@CHuh z_4`zVT@{HQepNmQ0{$ItXb`AUWBH5=oYw9I0N`%@!Sc*Bc_1In*Z=Vawr&oZUjy9i zyZSX&`$SN_4-jExW_g0V()cvrpfv!S`b1H^KLq--#S5Nln5enM1>^~4Kl>V<@3r%Y|M%KL%`eLTtY#}AVq`5x z8sv>iC|>g;o@T#Gw?D>#T&4#uw5Pka)a#bf^AObDCOh*Hi?WFce2n%Nsmhz)z-4On z(6;Baynvj%0sMoRkgpZ&RVMIEi@#q(i%o+(Y9ik$cmY=|Mn6GXfb{rqaB%Py78cP= z9(@0sm+(fmNRL<+{ylf}i?Lkdq3J-F6)tk{i6lq;@&}+?3X2 zR@%BHO2*NK>G4;h=Yhjeof`nQKPK&PU*Xd$2gW%)B?CO%b>r|OE?9_9RmkY@lJc-u z2`c0*;IF*!x3_1iXjfYg&tR8LieESVak^2I0d!q0d^aKa)W25pYz>n?^x+(8(z1dl zYFc01vH(b2AEXxMtD%RIVmRc}nU;o!C#XL@N4vVj%VZCEx!qRgP&+#6D9lm^@?qO-zk0rI7XKJRt=do)t8fgaN;fBb)Z}^mJ#iKe zOF~*p_y{e@xX$_&*Mj%u4}0UAw|)WuWPE-8dnbJQI*`4fNfeyE_f+lXsAvVe4o8+7 z?X_J-^ms#k?B4WP(Z85sy;9n)j%8`56tBgz7mv#-lShf9AT zl)4R@TX>IS8EJ`+m2r`H;d#deD?w(yHv4h@UL9>W_|Mlsd^y+ypQy|ALS|(%+~A^GymZ#abbu#>9cqZFO)`+8d~WcYbF)|NSt^ zrIiqHEi$@|on00ZeuL^beH3FEZSk%2knR>YO&J3+f)oKqpp9i7N|I0BNhV|SPZG2q z&9uQC@?d)DVUzqo+oD_rYT5gWSQN@kzih;Gs^dGGq%M(tqP1%57#Cu-`pI`2?bM6o^=6HQoAVSP4)ch91%6cX(y{nd9#=NZ3>Zjux$YDt?V!+wD zZYtTm8`B*kAX8&oB5KqUD1xo_NtK`;%ETO!4vPUU)zT%Z!61+rBcc}d?xbuKjo1NP zt^fzb@Qsg0rXTmt;^v>Sg3#PHCfbycFf1jpcl42TGPKg=6X(L{Pk{K2>18*IoNfX2 zPJe-Jk6`9&t7qz6DqRI_@ncnqA1UVBYU?^e)jPWYiq#sD*c)OI%B}sv?`6WxOajICK=))!6J`=*{^9rM2GW**?C@k$n6KjsQ<; zs~YHP2?H%ZqO?uizJ@DI3Kyax z3lKz8kHk;jpe7rINi`ssqOWw=r_`l%j_BQ}1|Ch?0NJ29P0wY($UG}aauJ+|8pX=O z;WD}1WyTqg@~05v*wX&9J>Lb-KkaeYt{0DBE8&c^c%YB7sd_~Wx_T#lyq-#Ei?Wz< z+peoiE^cY}BNt|O0gnHZ7sb9h9|;YzFq1`uDZFMrz{#5yncq2Yr0&N(-sxNS=sU2pQ@GdT zfueE#7ts!{H~s0ZYmxk)wsjLyI_BIJjVw8&X?b_=JKm9$>5`|s)pQ>eAMip&)Ya2~ zEA;n;k{^F&ZEkIB9`updnC7cvORW@Q z8g)asN<>2KlwbuvhRe?=8A`;H+qfs7B?C*FAEa z6$Eh(@H6WOD&pmPIM3&M1tTMbwh?b&U{AZLB&y`t1@(w4i#Fg7PDxR|*Ni z({~{&+vDhEU%w~Pq$rRD>n&*`A9g8D_tvK^CV?G*3u}KMBF6)u1-n{dY={_$EUpJer$QSyU5$iR zuS4V^Q0;?%QTSW@_4pKQ>w<3TNt?1Is&K!~9r;VXBoF?h_y3*JAGSQnKhzl|uO#!c zH}+JwO4Vkg!}o0+vpng~7Vi4}UR@-O{Gxa_(yu4$C&0QkC~l_9JD>0;xmaQ3%dK>o z#Y$`DgKiHh4@AjsF)M247)Fl8-&il&H~lBDL;P%R3*1j@xBmft5fI9+?@8M3hJ`Ps zGjI?~d@cRQrwQ49)bi|$tZGVFFd-?{QL5<2VLDsbe(5r_9R$w9QoF3IDh%*nH5=BA8ZBo+jw?%jD( z+2+(YZ(lVrZ{y~uy~Bl06it7Rr;7Tv6tWtJr+2&HNkDhH*TQBF4D>+F%ArS3&;0YX zxfx0G??^@efwonjB%64sbLAlZ{mzy9QFAuj>z+h^3i4eYur-0>6;24f%Vj{mxgoXX z9S;Fy``W1fX_o&sfpS1Pd@*!T#!H{~Pv&yy`Xl9ue#F3CXH`VpQh>=}J3M>xw`7<8 zWywiS+rW*p->GG|VPm-`S{Hl`Vd1iTk2Aw8+20Nbtp|tf>h?H=*&JU4y9rkApqhvE zIh0ti4|qb=)Q{O$N{FKQ)1qn(hmb=lMyglkaw9HmMm@N2Hq^-&8+wS6!=~UD zOj}e**lW?Cak^AqpLZP&Bzv*nzZGRnbrv|gp0b1~Ry2AZe6do|l$bBg8)r#0C%PI@ z5@RP#Ra->!as>q1<}j zJkI@c;W{^!1XnG@KDBsK@g_DzH`d3rV;(ofZgPrZ>`~OCq(Xii(BSsHU{TuVt8Zz| zW)_{~=X~zUmil#BxpBqcqE+U6v8zXgG(A$e6HU z>mXe=lGRHq@j-!FVNQOjYQD~vKLIxJb4eAZY!x6#vDH*zEv#ujkgXM}6QePGu<0Q7 zCtz|^t!h>M$H$GywI&Cw)u}nJQ*9Af!Z_;;iaQMSjWr*48@!}mjbyT}FWh&+)15jV zRR$aM5%9Z8jd?V$d5h`!3k7Q#DP8~Yi6Yhesp0Z&vG9(nA0m@UXw=tqWe^Pe(U!wqMJnGqo#WL zJtx!OHxYKCuGcmZ$Zxi1)N}d}y{Wo;F&D>J*J~L?<0W1^CHJp6=ZLeZI69#ZDJ*(; z_GJduut%C9J$HznR2s!h_oR<4jbgeyu~f4=6JuVKi>e)=4nwaiwz212Ibz^_|2MVP zU+3b#+vSFfS(+=Oth-k`)qd)zCUaZ#oJW6&=9^fZ8onth9H?LjYK*2vkwHaqOly3o z3BDopqI8L}e*JifmB`3M%#*PX@jXI`*7sYx(3c7-i>p|Alapg!*VUr)!}{uwGxhEG zS=TB@}k1y@5)eN~)pksgL|z!V1AQ798EM$NHE8FWdL=26-a^{j;~)%WJ)DOhLt zD?TpUg!~x`Rf+5Q28-Qvi%OF*Y@0zL(E+r3~mx zwUF`I+4?l9LeH&8|6Q{Up0D~IQ#IB$bw1rF$Oi%TvpHweti+K;QR~K*+Qug>B8&Ew z`n-aaVe3^P#42L7H9)E89#%4m*3q7j?&FilhaMlPsN_B~CX}pth-k=blUZ=pH9afnVVNi<*cmq)#WptD}y2pJjM9R4-e;& zegi)NFN}M#-7Q+i^*U`3+`4jTezt_1x|X!q_%c$e^%PG)<5B!G?JSFpfU2*~TwDba z89t>#@&ZpjArAh;BrzxXx>)8WH3Y6?WR2 z4T`Io9{M_1*^W2ap;mo+!I@&=yE25?3mGX=!$_TCX!rFOTgVGl3Z!a%-=VX81@p7T z7s}y{4XDdfi+xVTOhfOxjFp==s5j?C94PN9_*s&?6M1Jr%diUU`+h^GqUIcy=O6iC z2w0S8QS8^)Y1)zd9w}LIV+H3?x@=>yDLclU*mYT-{vN_SOsh<&{%A|RZ>h2lD`Hyx zt8Rw59t{oZnI8GGHhRE1G-irY{xJE$jMs*;m96!6F|iI-9|H z=mdMyS&zz(R$|f}CH}Pfr52x`fREtU?>yidVe+Tk|1+K4t z_$Ky*%MQj_fha?OeNH9g$3FKJ4tiy37mwO&zQTC~(lTpDX%?sAJDp5K{FUI|9I&x4 zS*ai=oaW)n7LCyz<%#U1FE?CRas`uVOiO;i_ z6j$PWI2gS~%=kh}35avclLul$JrbATy45@iX6;ESYc5jer*KofI(hIF>QhhCB>xdr z!HMj1k*^lZnq?=PrzbZZjglt$F8XVgyWQwC%Ya0Q_{TI^dH8H^H*t=YL3^N{)s;4W zfriI7E0-FHK;Kmn^KPjpITtSbn-VRGgm;sp6a|ImA3cU@Q!=uEXXE^mblm4b_>{|U zs3a-_h{w)&ye3E6WOe``3coM0|6a8?MDkcGR!AnR1jx3suCW=x=8<6ep8X}UeOT5o z%k)k;yux9A-a6Xd98Z^jU0Cb&h|-l$aw?4e5u+*+IK~5z0`PldwAR1Xtjj0yBA?KW5;k zDGov9x8)8CJ6+5JDRQ%Vm+2Ks*5P8E+)(W3JbuSxV#p8+?qNf{P*1}M<2Ls%ej+Z`bEcRclMg1oj61+i-}ne@fipd3ITyjr=V&}4|(x>)<;Pr zxCbFW0R`Q6D3==)OxRz%DZQ`=S7=2{hz-gwv)2!$q{N(%_FG)YdlVY(A4(wKF*xF} zh!o}JytuCZtm-E~z?df3>i!^4I|T||=l31lHOWp$m5g6gdp_*s@IJ_m%?w+ zsxRN1;;?b31Wi7;`y!abUq=N5@%I;@)=IWej9$5as%k(6m*sWj%sFNFO=Z-H@0$>W z)OH27VpSgQs>dF?--shEO!?R#3>SnT_>X(zK)J;zYKDfeV`7bkB6V@oBioO7y%B>--%Fg>T_}Irren4}_!5G<8H$Vf|h$btYHc&Ma)P z8(qdnn}qW{<7(ji2{<|H@%ouj7qx){3bQOY*DUF1Y1eQ*C<{q{s<=jt<;F(`S$@EZ z^!s@)Da)ya`s#JE8RhWfLikt$oJLwy65EV@wu|26?9FF|B(~tpa{#EdB@VQb zf+!ihC^ZO?p%GR=Hi+m#gIVi3gPG0?=|gL>;;g8%!!RrqsRITTaI7zZrr2K*)Dx6b zXP-=He7wG6>HK-rQ|iteXAOnsxs_XM(ak$2x>(Qx=TXV`%u{vMlG~Hh2xQ zP-_*T{Qx6(DGqn4LV%)y-}oU@j1m93fwrg&?ATW1G9m(j@~PTMWk6#IQeot)hn;tR z#TbfI`J6Q6IyKKK%0}ycpYoK)c+Fz9TKZu+Bh$> z*~7yOxFLaiQd$#{#k3w(y+v?d6iKzLF{`+HZMdwCenE2N-g&@I|mjtxccYsv+5~SccVZGgBQ;Q@ofG(p&|v zHC8)*JLBZGwOxp8l5&bMF1mvdQBWFBerdh+kXlDyrd#bsy(ZI(bt1~v`d@yu=7?)8 zbtzL|$OGlo^6f*vZgyW@b0LIPo+pl5ZksKqQB%!Q(CUXn7HZ1OM6<`uwmriSjtL#q zw{j*cWwD)cJrk+0Bojd?g~5=>y=nNZ*0gi>qDPvC^*U8yHZ4A%uURLWZe$O+H;inf z8m=`5v*WtO;@9JopTd+zOXQfF&KQi_j)18)QhD$o7lxvtvplbzu~-b@)>o{wYm^I3 zBc+H2%(3|R6Cg>cWM-WnmQTh=loFS9#7?c(7>uGhPhjSgPAL|V+I1oPFG9zk?IiU) zp4YIiR;|{b7ayila8LHbUz!UH+Ik}PLwqH_Y}fTY<*JR*7FZ$8SFy}DfRWt0ipbQW zZiCL^3*T+VYc!NsCaG>uYSK&7TiOJTRZ_jeXN7F!6-U|6W`1={|HPD9d@N;;fZWaL zoh`T#G(=XU0plk8w_rAqHra8TiVSfGxKq`lx{dwpv%@VhwT&C^XcI#w6W2ku-3yoB zW?rhu5$9IVzfw4|YOY@=!&ICR^|jOG!^|(IxGlDl_zcO)J4t(lvQB?MW>(9!cUmD_ zj2;!p+4g$dc{4DGI^`=;V@`5yy`J2F%Xq5riX8=s@@6-(m0wq=&O&jRDSD=kwjDcY z0aQ4z)bwYy;qRO3zghl6oBLnjoQAT3aN+;CKX)Aw(L=G^!iW%ku``$R_9GX|r`Ru9 ziXG^Z;Nr<@`ibF?FIGg{q8eYVnJA?kpkBji0O2S>-Y)Yezj=P3v)_8% zZC|@>YfsR~Gf)H;wL}&I9Bz3MLeJFg5PeLA(geW|8|MGiQNYSAEh{RjD9g`!;m!64DSl*455G|17lfs#aN9GC+I<7!Y_RjF z>z~y{>n*8uRt=WaDSfxglT}9SiikJ15nNv>KSZZEX)OpH7ko?Tv*K@E(O503I!z)9 z<>@gpQqy<|uqwcx9WdWpvq_cu&`h0pDU#TMCrRbO`T!14=zav71?N&q-#xaDrfYzF zjKpwPDvnZ0*WVz2bTK&(2m==4@iADCg=r_vXfp^|id)#T%MdBbd@R+b|d z-t>D$6)lf0zWW!G_8`jA0O5|8e*(0f!v^}g zev7V%!`VMvO*aU;d(%%eSH_x{Vd1i+w-W2iojF2noJ2cgQw)}H-xNj9=b=H@Xl$Pc zRx;e5qFXW4aTT-cI-JRJ)eD_F$I}+HICSlpAcoM6Zk|v(QH+FBKiqO&_ja>%6g~bO z)|KR~@`G`!sGbVWQ*UZ&dhe~oJIrm95I!-_y=g%=#J(KiS=?5*e44Dx2g5l{YfUVS zUnXpy9n*oJo73_SYKKA4l+d{Jfwg3HM=#^|85%ke3ZI zMPKzFNQoahu19xDQn{9s-)a#-)@#Xl*kR&P<_r>I>sZZyFz?@Uy!&phZY#N4y>BebZ8m5Igzp-SpS?rSIarETS%BRVSKhNC&Lk zAhF9ssYFcpi*OIwu#x77GH}JbSuXNDJry5#GQA^I&_XXQ-mWc20VLu1o?%FVUM;Ao!W7!2i{mrqLIr}PXfRNcB)8ntjzWV8z^x0)KT z6W|`rFxEu#V~zTKs4OUV^FHf&UnPi)V-L#ex^cDyM;TF}2R;=n+v)@I^tZ3E8iz|p z;foeN?OZh*=i4`lyfqfS;23oNw-x-~ZIe1hMiT{s(5eA?0jBGQKNL{5r>=fZ4Pi&= zI|-$R=*YXg$0&B^c9xkuPJxS31FYS;MqzIkH`Qbngz#f}H( zDxZNGb|i54i4;@MF|9>M2Xpc?=wE-B`8@01Dc}HFq35A_*HUcMk6}TlWd>{@6 zu|%K@iC_BgaO>e0Ax<`sBHJ$K2=s*!LOxnOQ15t+aM1IIUpzd_lo_Z>!Lb#|_N5fY zy5|JB#rHBcGJgqA%UhL!s1~=xTRs#uthBK=Xe?Y@SO6`J`t=vn?Yib5JS^&m-d(|o z=qtV6|4E32Vx@iQeT}rmiHD(j^v|>@gC!E#`%_V{x&!SHerKUz9T#IcT-8A36Lo=s z&I@tjaSqTB_hH;3y(^n=It60EUFK1hFxpo*XRIM;@vt8`oXU082Lq`M8n0`tkpY?+ zKw%ikOEnm*0k+acFLPZx9Xt`TZ)l=jiyhU$T5iA#V+IRg>v!~~G)yBzG$a$q`ivHW z+?>-$iQ$M!4YX2>BXXd$e*6$-otk1e{1(EUY~=@Y*6PTD=~WFKb- zrhy9cEvJ#KV7PqZL^Zz?G?glMM6)>Q;=EmNu>-^1rQ~5;cnq{Z&uD8&aMe)%sl`rs zYwF!GX}VVL`=5ZSHfS3sxjx&Ues^nC==ZzV z%XjOAf$V!nBIml5bey;u0~*OYOW(4SI&t?r5B~Ke z$e&)CdK@1`aIlgZSiXJ!K(~j#M->qmkerWO$FF-rE5Xai3jmsRi4mvKr6JRfls*#Y zTL6mw=Yja|Hq?lQH75SJ0T6wNG@$$h5Tj_rC{J2}apm32G&rv#iazC0f}}1RxYnIM z1ls2z<0A$fM#m%l`rTY-0e7(r6C-^o(Av9z6Q!8iRnofaZDzjo(Pu0_0o^<24~ZV` zYw@flPXT?G!EwmO;?z%P0H|1VR|hNWMe$2)+A5fr!K7_zoOFZC<5d8T6t%n@(Hgx7 zjRblwLcDyID5IiFac264&|h*|YvtI^RS2|2MXUfclz)!XZk1EmU=cEb^7K;#;_;bG z4xcyq z=c^Z84KLp}wU6_1MA1k^x0(Ik?MhsdNTkoXd`|8dW?D%!>b;WegA%dw;H*o%T9C?a zY`#;)G3z{fZkon!_gaJfG=>QrjPYR2h#r#wuJ`H&zS4fv>DccBcJ#ssj~pJ1SdEtr zwnL^Q@K;tQoNtYgCq+dw{5}M)8Xc8;!EssPq^n^@dQk1jr`e30pNRWhe?=N$@=;Y`!sQl_2HkMO3e%$5qe-Mrj;ihkVYGo*{8* zH)p$-MBFy0pHb&tYasd=b7Po}7S49vYI)xa(&?DH25zpBXmc-0IA4MT zeB$G|CC8+wQ8{=L@CF1e=TDvYn!)<8dDXXHJtw-E^M6?k5sTTekn4U>3Lq-eioYjWgK z9(i{&@*Q1#iIo_$1?RTctJNHKO?clJq)th`RF*qv|NH|lL-zmDAD)@j}-AGX;l@>dd?=RM%l9~D(U zV&m#CLU?&GyPeN3u0U-5!V}vvQxc_J&!X*0s!xigR6j>)f36p~yS=z)bM4s-{dv2d#5$tSM{yg4-E6r(X$2rvh3 zXCY#FzMalGk(wS=#DdT{IF?rB%su=A$Y%naG>H`&xb3}bvi71f@OYadmczJ6B7DW9 zV8C`s-h1E#F|o`e0p4B2arxR)$Lp9M5}h_jjjLo$(n;j~m|_#*U5In-2{t?YCWiXa zcJv)g7*Vg&oDS>Y0Htf-otG8Yly*`jk9I4|gAMrCk!BE12C{M$CY`P~&aK%xcIdRJ zouP5-o>;^ZPVVNLs2Fz(G+BH7|7q_%z?xjPy>Zm-R#Dgn3@Ap-sj%)d}rUg&;5V@@AG}~ zJehainRh0WHEY(aS?jmp9;o3)eMp_8q=J0U%HE9lG*&k#*XrXz;0cm~1{Y2={-pUq zN#{znd->AaoO3k}}{ zqzG4pYz8CjD_>rvtx;Zdew&ATO?}4lO0xC|b7apZRpjX!Yx>3khGPg*MYI~CB=j+hL(-5wtdsVK}UmH&f^ zlWL{V*vRA<*XZSi5Ashs#c8>r?2mzTNO1*N&l;R0WpDO4jb%IGm>itlg;$4HGZWG3 zW4M!rjR={PW>(&#zrrz->t2+@65J+;Gcxnpb%D|73=J805k2}z7o^=0dq7|Oy<_Vi zDsmE}vl4(%1LfWQbd}hphNP!bd_J!%pqP29cBzo1(I(iTub~&%(7Zi{>kg!Wg zd2Y(Orr?y(5D76WT&t}=$JtdPsqf@&T$hz#Q5=G3F;S1j;)Q<}exP9CL3NX^=}r_8 z&%MkcWWFHk0|fx3M5Dwz;!0A0<}paS;x#*wE?Z!8kw|ve+9%d=1=&|x-?$sx2E?@j zXfcZ~H>UtVmq;|1tS+#jd)Mer)GrD$!m7mWQD^tC1#a;3iUPyX-cukaSaXeo#40u! z4C@7J5(LMNXb^GB(FutdYnp^_4El8gZR0DF4ijtNB9TP+_w42W350?36x8cd0A)?AAaJ9hOY7mr*RdoLQ) zzCP5B&wNmE_@T7oc7U$)^jcjuIFN9lOEO=~YaD%55Rg0)rE0#LPZHJR8NA&-=&M%8 zN(6OQ?zMxP>oHE@avkjEFf9jiOTgLiQJ41y!&U249ml(*^g zf-9vfAdnU};&%nCml`iunLO<1zL+!-yN2u$X9Y5`n6nRP z{FK||`>dO^oKji3XnM#!qrTX_?KQGeEeU_{cD_v12C62_j9cQ|WoOF8G+f zq>L6jdM2Ifx0&ft>j{z?QmMcU)+DaXi3q!=I15HX>IPKfD(tdA%WIWfAP+OP{OmX4 zAhVp8t3W5G{V!Q;`1DDwJ`XiEKKvbg`MdUVRVq55V_FU|ckGu$ooXf>dMo2FPdJ)L zRUtnZ@Xu~>5q@ZJ%McN`&Nhek79+mZx!YWy9G}}W%ucsl;Aoi*F~M<{qpCM3Hq)Iw ziZ5&Y!Bo(?3Y=(JaVc(rYps~a;UiPtq|%vezB1>KWb&M3(ygv7e@`^X3JiD2F%TT7v@{Aay9?!=_=3xZgB{s| zG4QJTvK;%jW&*(F5?~JmEd&?IdJc6pTI>Rl$1Skm>_oQ5?>Md6DjPa5afu_AgXfgF z^g|xGe@6G0zI123R)P~J5VqD3i(#3M_?s9QU(^|Ixtn6o78DpI$BZ>oN&C{oWM`!S zlTcQj>9zsr0nEQyGnj_wZ*28{m-w*cizjNMWM`-BqfCqS+H0=mU?bp?&@A}sR#v# z&+n9?twWe6fMfI8+q+*A?l4?vewcr0E!Jk}BjmmOJ&#KIDCHKtL7AR61bsZ9Y@Q3m zPVc8o#71Z%%+AcJ7zm07WegfHQk^6yPv3VHbnU#l{iWF#Y(=$A_$YC2sjpQ-d>!m| zLtCJ0DB((AA7#PjXV_ zmpo=3;44h^mqbiEay5i@&6>|@zql>q?JkYv;f-t;Ma%5APkf;oA37!JC!X)1=WM(9 zxL7Y&e+Xq9bf#~C*)@RfEoYTUndz2$!v-!D5-|IebN%os}scmB^L;4-wZDZ z9SsQ-?_)Z9iH^M@TgV8H8zxN}Fj+I6>9!Qkwki-;WKlKFQ&LWePqLafd}#&oOkh-~ z9`sBFFh+fJs@88EHe)nZ%hvMk)?I!RM%M#INw34fa4+O2z!OCe4gvr>^PAriGg%+A z-_YHZ8MazoJNwhBQxrYN<;0?)oIJY}(`U=r0=goWTUMMRIAtG7{_31I-k8{!6Pg#_ znW$UIIBlSxy-`E83m&w~R0|OoI)0t1N_8}JhONgy+Ybbj)?O7LgjFRamoh$W8_O-{ z7D^4QL>|!)jbi)Eyb4DjT@CSUU9;v>+%+Uggi%I`ETF9+)BCg+gg7tO`9!^Hl;mLQre3)12Fd+lvupa8#;AI z!3TIq`^f4)yMw~enWH1c8~Q8kp+__)Z@iRGaCxz|YVcKH8*6s5$3)PO%ch0h`u$$0 zAYmi_yD8P|x;FxZppNM3fR7c1|2NtL2w$lX{ixQs|xF?f^I(*@AKS!J3A6O(S-`E?$NY|eAvX^WOmYyM7?U^)yt9F z&5n5%eMP#*QIC~jhzc>L^OJ~R72N#VnUs`I@nEp(6`J$E8}9!BUrvxXRw$o{vn@=` zq@CLPNxo0S_1oApu2X{5E`$a{m}=$n!U4+Ss-eqS-bAlFKzAH6C%O4BR*Z#zT?`;_ zC-b(1l#?Qh@hw)*(2?b@!Ptj{>}jLw^8wP(B@Y85UxLWo{h^%k^V5SlDnYWx1-06{ zMKD{MwiZ#HZcVQ|E8>%FryfKn7u!az`2ze`!fhO@5~hs99#Z$v9#H{VGB+r6@Q;Xv z4L(;E2ax{D@`uTr=V!!?7%tS{vfv$W97VPnvoVCf+#?$Gm#yk6uSzka)u2<51a}G^U?9z&TGUCnk7Ns* z5f)O7QdH1EXukI5#*P%CabmPMX48it4i%ncdA4%Hmnnca*T>d2NDD>MD#^2W$i1UZ z8EMD=fHD9;f~{;a*HB-G4UXDHdCubF=P0H{k}#|KYi&gk|GLIHph0ie?!*GaiA>1Y z6g@XbSPpTl`g)k3z_w+L5@QE`{R9Y`r6sMPDlVySZ!KP`%- z{w&)|=wk5X>3I~%p)XHe!@ftpZn$V&Xkaao&nf;s*q!NuNh3;e2RX@-)?YZFjOzE4 zh8w4JVAe0p$Ta*iP5PN*lrugcN+U`ZY)ccRI0F4pO-7US%z0zEc9v{RxZWK)tMzh6 z*JAs{TX`Z7nXnA?_$G#tz@NhGaHYb;jGr&4DI1utLwd~wt4gM_2}p6_vabQ+AEbKi zGjvUTzExPWD#eIIjc^N=r{r(Om*;3A>B$Et0k-qV?l-FsSg9SWPSpMOg(Lt>Xu2fd zl*)W<=L&I}6#tI9u!nqm?JfU|3?qWkQZYsn4rN#Z^i&r0&)EeLFLjFzLy21YAhJ?# zL)pm_@^eQtoO15`Mp8i*d0jm!0U=1umP}Az8pDQ6!%|vNmp!H^@a%ohiFqo1`V45I zN=k?KUCW-!03m_ql1BANTSwzmVaB{{K+{89_ zM~usuUCEXU-YTsY#$2dCp841hlq=HRvd|Q1*|L}qmpDG9tAKDSs{2) zuVZQ^^uhjKNGtcKVmzC9{1ySZJos5Ji|3&tNxr7!9R~Z3>omOw1@-`3LvabMMTM9C zw9{FeHTVfD3=t1s`Q#XF!=%i%lAGk>baI%E{e3aulZI1p8-uiQ?G~H9VUVmvKsgLq zDW8?cIW}7SL6eL3RdnES+c}@k66Aze?hS@+p(HJ&X{EVgmk+PhtBK%o~@RrjC@> z5l_HT0HEOTTqBJx*pA+{oy*xm?EE@S45{GwQjlp<-30!TyqRYuj)^=?VoL;TDww|r zr%DzgnvZzlu5(n*it&CsLo@MC#&`yP$^uMeO9n#V@N_U(J2E5GIi(VV*RYayr=$iQM< z?up=n&^8rG!{|3ZCsI+7Gc9mZSA4pPy&vd>lUiQIAz_88KTLV zCSj%(1 zhSWu8WC2g9tsuW=?#d%Ohq7sGsV;E$6JYvF)5&U}hqQ4hW;1rGHp`TvDSX==KS#o& z8$VxL_yiF(7P4SE=a8rZ^W1bQ0Wj_KV}RPZqXs2Gr}dY&Iy8jkZA3~wG4$iqa=Yu% z7s{mrQ}948qn^j;rP5`lRk)cX%v;1K6i0D`m^U=(U0=*+wIk$EfTXQUQ|FzuGW$Qb zhy>)gg$|hywW)uNg)JyrTbx;Laf~rd(&Q5L?33ESZtS#lXelMplIaQtM@JYi}8wGBad6lDUi?4%c(Pq*>$r~D#f*LlGrw35tC9DEv zl#a3RaDReEfoh9y_D|sppy56b6V5>Mi8g{mUt2*AVmX(~jxsj6Cq!__tG!Bdb@}(C z@vlC7{(Wozox4AG>oij6jve0_#as__N6Y^fpHR&~^H}Ojh_NP6XWB_MVU*?i@aokw;U_lw59#C1Hi_h0|k+3EMS(Ciebaf78-#6d) zh)ICJffB3`NzHVsoFM^o*I=yzNye*vrY&%_a4+j6x_HK|)dHj`oIdCl3YiS$BoA=3 zPx{Y#PwLNYj1RZ%r2!BnYsHVo2+NoWYqvluo>L9H&+jM*YG0(UVsyE{?dx z`1l_XSFUZ>z;#Z(#ka!Q^0(0Tu(yeQ$cL2m98=zu4a_6)BO0xkATK?{y|Vnmm|W=l zF3Vl&Wk_eOCc&C_h38_pNgZ5Y9AJ{WNcyVf6pSx)skMQURdIF-6_gwojLy|Tl)dJ? zctUl?8PD8FDY8Sr&65Vdr<=cmP5c$BFHh6lUhn@w)Cn?gpD~`W1KTpanJ+QK+@Z?h zb5#O=p&RnHc=UdG;jd~CFBmcG+yP*db&5lgkxILHHp z7z3Q*tF=3`Eb`#ce&f~~Q1r-D80w-|7St*1N|zq4IVtk%rxZG`RtI+g0guhco^j^6 zgjhG>!dXDRHas-SwIXdzTC$ztR`qG7y0qCAf!r9NJfcvU)#wl@Yv24% z^83?>F>%@O$({4n+1oM)Jfz{NESO(x z6@%EfyC{*cmEHpM-YTCcC@{8Ge?X7XlP!>2(q>kz&bc*FuwQS~awBZnT0E9UdfcZwwN%3M6XA#oy``m+ za%txbDcU)X!1nl#Lvq%TRd-7WW@;%1r-H!o#n)g6m7AP+R5J`bkm*`LjJq*BfUNuo z2P2a-_j!qBK!bOz#}DE!dOc4#m)t$Tv)s2RM;D{VJr6I$B#&pcg>LoK=N4Fl2l8Y) z-P*|=Y_c&OzHo3(FVaB+juO6jXl?aLeqM>OoVG-T5is%LM6DIter zvZ8ZA2s;PSBouC~9G=|6%%JDkP8J~j>Lr!tZC+lI7`=Qm3rc+JCfwpuA_NPQyj1@6 z^V`bc5-ybq(mH1b#bUGFvuM^b9grCh=!ZKUa&QEF%sVEJ!uf2 zm6JdXlr^~;_JCb}&O!u}D2^1FQIsoo&2MXl@4jsKg?;%Q6%nBDUBsG8(m~D)+nGmR z5|PZWVPiw5aV;VIXZnULxgo)LPv7fvki7!m?e4@b*e5!qL$s|8{&R8Q$UPg*Y{N){ zGLSIk{T6l?ZYAUiATqSRPQKNV&13}%^>|p}bn%+kjxCq4VId6C1BQdinq$N7Zx~+W zGQQ8!IpD*GR6XZaz3w|J)8r0i^|`Ns@#IUhL8c^B4`y9ym@yR>(!guJewM%|Bhoh+ zbF$!3xu`poStsDegi733hIo6%epjsZ)q%4j4(;k^piY%&Bg7(Kh^|b$7Nd8oE*@rV zWk6Q9IM5SXQA?glQg1 z&N)Gks%9Xg+@{n%2?2z+HI2uFwFE-A12>!{oVS)7mO``dOK`Oy6&#TuldP^6*{TMZ z87|)QNaPs`zsEnX|kd#=I% zV!id1s9s^X-IdN}Rj`eyG3qQ-q)N1p&Oq&wGefp{uHhEL13B6g1dkBIvYw|*FDPLE zj^GeF(Ym69{ycNuMv1}B)$DR+?Z$v>bEtY0(@=2m3e~}#5SmyTlj|0js&g;$I5grK z&pEmIn~9#P*Kfz@F8qvA#i_g}>BxO|FxVUi}x)a`3F_Br0ROfQX?Wvk)t-cpKeYMjrQ$Sylt! z@cfWQj1#n|S96rH`{d2vZxR11cRWUlZ|;Z(+%l0?qRkMZbNX8RVTO-eG8jRcN$$>i z(FH7wykl*fT0WS(OEvvUbuNmiOkI3m5=Mx=(h0NW)NE4^zBXJD9MPj@mqeR)y`$j)DxC{G_Gf~#PbMdS>83ng3c5OwleQX`H<1e}Qo zp3g=QV~PeVNn&SMY~+{L5~7)nbAQI`@nk}htvJ_4i)_*}rM{58<{dKh6lcFVWRC-cDf3fsbm^ytLUJE>zk#`&B)Dk z1I2^vY~h>=C8?JzZ;{v2Y$`eiu7)n9cb&h{L3?3N<1yRmJIsoEEW=#5hW@-hq2~*^ zGhMhw4?gWyBQL5)jgLX);c(-E@Uv!k<_% z+u9sq<6mL~LPEkDpRh+~&uCScwl>3DYMUE|xENMWS65Yrt(;z6lX-dk)6){6m#tj! z-h$b(q+Y7q%ti{*A%A2YHn^gAy_3ohB~Mj!j)cR8u_52OmlWwPE}8Iq9%tXL%hJYP zC-Ww5A!l_yZTY^xSBzx=ey6p+#dG-cgESKCKq9Td4Yjlv0q$w-5FdmW#u7ZKj* z9!Z7VkgFJEEyq z+P{jVy#4YJPF?JdXreD1(R^t;q6s)>yuReSjGXbC@R7@6uCOnrQ}yZARqSHF-u?w*hFMN?F__u zf|$E92ZFfM$DzU(&aS2l2GLh=poCL#5?tKIlO^r*I4-^*u1RUPG>X&X3c}!-;Lo(X zhUdn1k`(tE%87a5kwx*^LRp;vIJ-~b{tPMu{CP=Z*+?^l$py3Y@U~N84lyBmVt;$B zypZBioSmb4S@yhoC4|>f^L2>$DD9jNHo`A)CG$Ean81q-YkcZ4rR*^LBHcPGLG$Vi zCOpTHu4l)$xt2Ii$8AKeH3g(axZq z7}zS$QW#^{DxHE~P{r-tcHTz4t)eutRez*fSWn6COb_Z*8zks3TvrKyF(jUCwD8)n zU&lm(j#B8TugoPV7X87z&AItpURNdLrS)w3mw6&(_sd(n=YS)Z{h%5qc(9bWcC3+5 zEleOTvE+ebMf9gv;|xAWjK;%b;$yAj`N2*Q(=YO!VUL*Mm1**FEq+%+f|sHKSkx_b zASf9g+h$K}h|AegX})Z3qb^5#3wcuI@-{3B%JwVC*omTehuWz= z1Ulr!0V0cQscADRTWbqtPaeoQJL~H##>n_OUxd%-il(xvFsa%v+jOv>^q_qi1oe!s z$|FPNIUnX)otC&G81CU;)}Q4|@h(2>o*Trs;l{coxU!&3!{E|gjq2qCdkV>sBS5p5DUS0LsT97?o)U;hkwFC_e{#Pvf% z-t3q08m4i%S<*c{w~H%%dCcip-nRYXJPlebGEh)+E*g8ro95B?Smd;ltAam{yXMB) zN_6IUMqdbNNV14m%-Q(9qy~qK~0tLbcR_K&5ymtPYL;*_LtnEIm)7nr}G-r2-+> zM@r^ho&zRVidj30C1wP$dnIM*k?j}@Uj)5dhnol%b5LWPnFA@7(%mtr zAKq9vppzlE!X=n&O!Vmfnq$}?5F`Fm&kb96^z1wjZ)Hw5QjoBxukM=tK_H=p0e)$b zoa~z#%QXoQ9n>~H%OwtIuk3$n80k4|#3;!xibZnzJcZ`!AaZT(EY;k(TW$x3d-ZW* zJ*QmT?lZAiUQs_b3k|0G$VQWJkfWBJQIoy@(-9Ly0-x{~_gWm($Y*V7hq zQdhrEhdM?VMM_Kl^CiVnSJ*>dSF}fnE*7`x`*g%k-6}q+N^k z1jfa}cqro1EXJwe-b7rBfofb}aD=zaa>%?HhsnivPm@9exRUq7D;P{R}loh-6JBNYZt8P(HNc=c}Ao z^YdHO!z`S~%7klK7@vH2TAK0nnv76e^s;m-;_hJ9fSwLop>m-ynd-j!<%p*Iwk}+= zuuoqDW4<6%>^G(<7LQwknO_*Jy?Q@Vj1lYS7AUrFBk!@i)%G!Q)H>>-j2bO66nOta zKd->YG;DGRG(O+iJq9U!qfaJVcZsvwgXhZy%0m8Usb{d(?YMBpMvv)IXw` zx_o#++_5HS6CW0GMB_FPw5C+> z=$STF*1@)6A*$amsHd_1o}2-hj`n*ie`aLfzYl!k=M40T*A{3!$wo!(grUX}&#BOI zIYpH-+Tgfj*0FW*20}}pug0!=W^hREyt+0JLe?j;&em7O%^ARW21?$os3bo-sANnE z14(i1c4-5xM1993^KM+-0BNeXrD1}O|8%u4OVvchkri8PaS|X!NFr5glt7prR|^!( zRN_k;J|E9G{CY&Qkr`$-DVC;X zs{1VxtK@KCO~b}QLj!b#uUHS=f0NzaYEsGJZlL!m6nruT-)LJ|?18oJXDa~7IfH}j z{mN|MV%i`*(nb*JxeO6^c5PNUDzisAV-e2WRgjtmC4{9HA{{ja-n{*o*;({?qB2+? z^RziWL=4AeTP>a0%EsLGC^#66;rDbr2X*? z(nnTswEcEl6$r>QD~LbFO8^*#Sfh?;Vl?oLTLvjj3p7BFzaQKG>OCzO7B~opYpo#! zHPL?0uMF}aVR`+Z-+()F@^)TwLL_^5p5gj^@MOv$B z@3HK*x8I1$p&D$?+=Yi(_$pfX{>c}TyJxDX5$dPn@`;B^4Wpqkk(G&c%-^`heVM8J zMt!;ZCZT_Rik|;2fx2IY+cEFx_;-3j7&UHB9Z;|X>6rV6`=l1nUVEx8S}D2y>=DiM zrLgx6hYTvDM=GIehj47)UlaY}-`j~_u0Eo6Vf}03 zVxHf}4#L8|)xv6|sF!z6!gWG`vok7ep2s2HA*4z=?ix?7VZ)BY$(I!U_WWSCW+`=4 z0Iy*DP(2&7f@9d3mHRin{bG-3Qsk{T7$R+;;=oqG774^QKgQx{ak|=a6$o!BhUKYi zX;C9^+eQ^EH^pZRd`(Z|cJ#7tmb;zwc47`p-OgKG>1b-&h}D3~;2-)_6rv8iJy)v9 z1Y9yjWdHIR3jo@=Pp&O0?DRTsD0|-4^)BB;-FbaCHr<(&jLH4(_i+H0M73&0vVtIg z;1Nwh9#n1LZeev>>FeW#BN_>%eZPZbmg3mZ0|v;ad4YlRWAFGD9(fI_!6gwB0tKV( z?oiA6Z&sV;iD2}G6!5x$O^UX0cul9=-BKB`A zoDC^*XIvR?IdxF!=b#jlMqr=FqY}q^hi3`GI}UXd6v@KBNi7?bIkQunZA(f`^Hhn2 zO=#igfbY}b&&Gt7M%xKmsF-B`&Yi7qDI?RDZR#egYoNeO)K?c#=IE?aB5wr^=_Y_tuxNjkA4KQQhO>X_w{A^oc}jM7B;{3%&gSmI&#$2XTf23 z;YKC$%%b}pZW**gNsdv)8*d0&m~U*zmH9=l?P}jQS-0y_W*ci$U&3YPpT~rs3jdT2 zENW|th0XWAUrs_pDPq>+#Q>$W;Hd!q>%n;uaB{k=3ABFKr19TO_;U2~DYitmX zauwkXS^lOJCCP@B{mR44Xs48EVP>T}DNUc2Mbfb;&tB$Of9R=?Z|y2sMS!>~E{!*6 zv^arb4mp~bA~*`fLLgA1;PCDT%;;Z*@A;ld)}xSW%LN9@yRMMIfusHv1zQlXw@Kt& z8e$~}t|RNBZ!Uh(VcN;SReqU#^H|H@fd>3*S4M@U^2G{=uX>+X!&s#3vM!y8sKJ3e zx!8Zo<1^Cq(#*A8c;BJftqbvgnS*TUFI~47Ly3m%I-&C}eex=nw{=)w?Q~Ho;ZSE4 ztf-dll5q|J7CU2yxN~gaP0t5~~X;!6f&X zvA*lUm7mXBD9g5o`7jmh9umeepTg1(lFnVLB);q(XaB5KjqVaTbvD~GQ6qayg2!p{ znq_WMwOE$2nMZDg$~nu7?V59K(OLys)=EP0*P+MH$#toxINevde^3VSu`N!MdI(!; z`T#?%CAtWihnC-O3tA={5^ZgN>5$>WG+k8UHRQ_*a41m#Y)X$n=LLaaHBk>Wu#;`J zv=?>|#aqr>e%>tUl5kUbh_6`0HS2O?FVsZiZROle%~1 zu{pXYrw!d4`lvcUZDmaGtUGo`G{G?eZ==KWIX%FG0tYT!j2vnG$U%YWqo>5gCFjXr zUpC0bNntU}zqFLTBUg|OjkyX1LLSj(%;$)s3DaK*vtTr78LOdBdqhK+-c9<7pKrTg zb3@g8q%OvnyOb|NukmAAYR(*k&`u|tS_>pL1FTt4Gj5Hjd%*5dymXr zWt=An#JFAlN?+ecB}@A+!^{gwx#h~2f)U%n?>r7q>kewxI%S-|$A*NhY=ahrP*vRRW@+k*jldm7t3H0{T}fnT}<0>r1oK zau0PCdbK%-qjM<3?@@$H%Gm9Yr}inN%tjyP-b(qYS1XRg-&W4m!glSZz9z|QbBVYV z{;XrpF)k?$csVUj%rTuSHIwuBbV*ah2gv`~GCW_(TWf4aE&;FFrgk%FZ0FTvDdb5N zyuXb%NrxzKq1{|0=PnzeUr0J%JU81x*SGPFE%qy(Zd_0B0cf{MvhviZrdDT;>o4kL z=u$atgiMvVqUe%c*4>t%YavzKlfa?6u|zOT`-Z+5<|;v4a%NL5tO`#M#7P1;l%_s< zU2Gm_`Q!x%(+p75yzRCk=FZDm%57ef0Mu7?-mvT!0JnH zUzppbaokHvQdt-`PJVB&!Rm0#GZ=5j$>F?~XB6sFXJQWj^2_uqI19{SceFV+#(&Gd z*wK9|o#Y|24{5aEcO~|jDQG6I&R1I5t5(^-=NUwNQUF-~! zWVAxJ7zu`Qc<^wE#*;4MQiSYgU@;Vr9}<>34(la1XoysQF)gzFDOvTtu> zfzy*yf?rNccU_9o6eoK0+0+;Eh9(6s73U0D+geZq_KvJDv5qAn2&lSN?mo7z*sx~p z5&*j=47?@4^QL1|&a1v{$&0~c3ZPD&2NDq?IGZbgP)>KiVg&ooKw4h zhA(8n^uVI}WP@y|>w;R_u7`C;7fJEd!QpYgFD!N=Q%f1M=*%Z*>%>mQQ(a2O{Jup< zZnSXr@=+u3xPgttCiP1Z}o?4{`m8bz}{ zo+D0+^odwWIDKCBdHY#bT2a3v%~TjTeb|9hZUeVd& zZ1@Uwn+lq!=PbE4i{iH9k}N083j-H$c}|tXZwk7A%z~HF)t1T8umlNHj zcJu1(B*VShmWOjRn-Lq*&MqQ+*G2^gH7LJy@ibsJ`Bl($i*qK#@~Oyq@llaOQl?+E z*aBE`BV7{Vb!a($aO+Z)>k&=O*F*`OrF1o}$D0Z;g=*cM^G7tV2Y$-)=v~YEts+m6 zgSEU~M|O)#Oi3hSv-&639OFhFna9+Gpw5k^yq~Vm)-sh81s1vxai(?BV3jlvyVAQ+Fatrs z$+4k5*jm7ysGrsQdm@0m@A4N^$fm=BD7Z4~-n1NM2)N&_WRho~*I1Qu7SirMr?C*W z04NoEo_1f+y|C~>=d{40o504X?=VhK&>I#>?uDdd#&HCpeN6NRF-lU=JcCd{M(x60 zkDl%!r+m8o`k|e<&5hOlu++BZ10(6LC?cS+3syAG|)IA#rthc7o!(8TG^HDl*K zrWn1R22@)3+Nt(eEak+*e7s+m-0tuN*hJLKwIiB&C8OoX;u%LY$$pyx7H+I|xHOuk?jHYuWi?H#pi$do;yk zQqqGnnit>zGkKe(jqBDM!+f); zi+NC)o{GU!qb$vm1g|=k+``ID zc$xR-785tY+~xhjp-cUnU-Gy|*pl&6DbP0dN!V(=fvr zE;XN-YI5i{8C_$HAEE%jIv*vY_SFaj03ELDk3JX3*)O(_JGjTm_PT>$2IYycp^9*6e-RcYP=0>tw|Z?14qo3 zXVJ@JlfR;i{JH*Q%tqCZ-1+^6MbfjrqOlIRm47(R|FE?I&>9lBMfD+>)ND2`VbaBq z6k3QgNoMC=E|PEv+^&cN)w0MHn9((d1niXxqPg}Acep!DF@LPTT9spsn7 z8h^Q-W+WF){h+T(PrkcxV^MV4@cEnUgXvT0vb4<{bo?JrU;pfBJ#<X@4<%|H0R9 zFT$d|_ln(rtxT}ys}Gszf4uR$mmi_S!=%H*7E1SPQ)mD8O>xa~)Dv^cGitAFw!Wu) zJRbMOpW~rIsoNFmXZDU`O|9>vx3G4dE8w?dy6?_E{BW<}*8BfrQ~$)TstG{;^7HpD zJeUwV|3K<{uR17kAt&QPPH{aqoBZ%${nrJSf!i?CG3|jPn%V!r+Mm~Ojs&ceas-cPsFAKurR(48R%y}r*80nJ?C4*XN7b5| zwzkQWUdoQ-^~9v_OVyTsDXT0!HzE_nD{_X^e*ql6;B8Fs?~&rm-h0M}qMG9iuD~=+ zA)$;#t6zva_p%3gHYg(fu}=u`hQS^{iE^u!G?aYA(SmuE$jGw3Z3}O``g%PqGba` zwF*|gWGzy5xf8y#LnT19ZA<;3QA)4~%oi0NE~Da2MIr{16MeIc2?Rp)6s}uyH+VQ( zH4BqJUk!jlT|%G0{t@Z@|B-VwvCr*fGGz(qyik|1MP|anDFI@_VGP3e?YNET3^4{E zGTb@FWzjx3%qK@wM<5|T>f+;U?_rKlsw#?ppXjuvHqG|pSlQD`Wbq9#`)RF-F$wvW zzDl&l*&Rw-^cn6M49;t&L&TWPUqV;szy?AI1{(O1Q`o`pW4K90m5mx)id~LbMYqUF z*MREuJsdqu*jUPg|XLam1ya!qJe~g6SFrxIgkzpNwUOgL8u>9?Kd5V>@5em(!B&3dvH$llNa4-h zM*(^m>%_}>S`@mPd0L&@kSfUUZ~&K<JiMIq%1MFme)<46Aym5*!M|S;lQqOf_WZ1KU9tGb&9C*&@3WU}vfb7+Kl^m# ztF2Kw{r#`;B(`7AqnT(Aj$hy3x*a{ez+GrV2ESJZ>AwbE@;B|Uw#Y{Mr9?lu$b5C2 zWh#C`QV~)#O)z^Lq36HIhz4G~$7f@kSuH#d4gkQ5s3t^$)QiP0{*VgrTLcs5UM?Fw znW?E&7u?+mLE1)%Si{ZE^YU3LL;6Y3q>4B_&ZV~}I+7_Qs};r^9CZ5Jc|@K z#IiWkcL(>}R_>nYVE&%*O5)PTG|jvV?_RC?%t}tlC+R4<(mdp>a~t{6ZddOqij}1n z+CBG$oHGz*@|xqetErdb=U=PPtwgrft0->bJw6O=oQh=~W{>g>^jXkbYV!V2@-e#C zciBvCyY|>@;C7qU)c00N_kJ|;W4L}$*N=JfgRT5vkpH)>C+hshA4=w@#D860$(N}& z<2$9SAJcU6I4WqaXC$qd%E(O0bO(N0fGxGQtlBMWTYo^Bs@sp8;JK)9c97SmhAsj0 z(BVM>|E)Ebww^k27rjhQhuIjF;{;U44e(T$r+Yi7!SxFg500tHSq@h2+?K~g`AR{B+ zLB4bMFB=*v+V>3|9UT)B6Z#(w4ITa7Jxok2Y%FL3CN?$>4h}v(9v(3<2_+@NZ99O8 z3_F4Vz`b7I51EkO2S;0?c1F;Fk>s77iW(5efMY%3WxNntK2&3>+LRJRAZ7 zJUleFC-gc1kBNXq!TtylTlpyxr9BSlRb&P-m1xCVT$Rz!)Eq_*zIRaWe|$f~NTYiMd|>lmAunweWzS~)s7ySTn^bN74g9}pN691;~B z1Bs1`Pe{zn%FfBn%P%Obtg5c5t*dWneD}Viv#YzOw{L8GVsdJFW_Ir5r8U+7CFm70j%Z{?#oIen94eo2jT}Z%?o)Gqr1|o#X@6kBR_yD?AbSeE_0A){aG|lL)b|;ELfig|LtUlO5C@iE(vg z(4$tPAqInae(x3-=DPBilkG8tef!)EVpZ%GcsPBC%fdwA zgX#9O$j=`8A3-qcuZSWe&^f@D&;fz6=1oa=R)OISI5CbR=DQvNRYZzY=lMjd{Z_}N!~WGZ2vf&;vlG5AY9mFn!=#zzO@9pft8~X<6>b<`$UZdRG(y5?#p~88Kxs zEqj{1)VGl((U(e;NQRxL*b-)r#9KObIyS~r-(b=Fjudx>7iA#5Vx?8y$|z~nJ=Jno zBS)6inbAAyhD{tI5Bh(CpIXEAen5B6)HWeD^aBDy6Xs; zmdF;Lj=F=1t3t-E#y)csC}^)kz_)eu@MtpZK5KD9W|Z=}?1gaZ29>_i*3^R+>MoT@ z+SK$pLE3n^ciwUp#BtOO9EK|^Wp2-EmzgtY8^};amnJ+b&XVWLk%U!qWY~zpf0gz~ zC&5wJeG!BCSe=kv%awYXQ#bZ{c3^6#!lHJVKzdZUODzklSkP@%Bm2?9QCPD+jeKWz zRMcpm(|{FY`|7vX#yaO@#lp{}CrVvzI>+cE!h!<;$|3;5pKgaoo`MNm>z;N~qnc-r zH7apXo&TsVznl1!Z&=R@BAL=5#b7!goauy;68_MbT%GZmc=kbo_-N&xsc{|e20^}M z&|}k@1a(-G$UvlJzD~7VN}CHDJp;Lub{_{9Hyl ze1LX<*1H&pL(7ZH_DjMNdF0sC%}mRjBV8XHbR6_|&>WBe93=oo0s#I*JHzfX3C!zJ zZ5TsEoU*&Nl8l}bQVOT{5*6*^+N#ThH>%VLOU-16BX_m!5B9TFN|^4shvX?H1VNBX z{ePVD?(dbA+HkD)sJbe@C5s$X%l?$Q!j-3!!*tj;4Px!iU+mH=&I1wG+BtZ-6{FfKgTbkJYm3}+p$vt{c5KfOl!sO5|mIvHthO03ADt)9QSX2W7* zkkF+scNw%ErDjt?(Qk+0ZD$2hWUP?vYmx3#Q5b?wqK`Wox$b6g$ggAVvdI9e?uKA> z##D7{oM%Oos*dZECnFs#*IBL`ZcEnByEwWPA3Jp_7p!SiNG@v?4G#|-R0O+Tif$^< z9kG)WIRM0@GhK`jR&{IC`T2>BjrFtI)&QE*i35^Ia0B})-Q9MfnNFpGH3_0-d5v+0 zuP&n&hT08Hsk?qm`*Upk08%-zx|Iwyhb+Wg{c`A(xqx!voVUlE0K)5k%#444U;jD_>|UN^=6IHR2c;aMer7&AEOd$gC+WjKC%60Y zmxIrKJu2?)q#>e3$p4H%aFrek)1o7H{HZZI!0KE^uR&4BtC%wry|bXu@-M1I_$_7U zObN8(jr>d=4Xpc#b6P8hLu+&Q(0t4z+`;NJQ)P&JV&Tm$XhVYdCtOJynq-s$Tayr- zu;eUKef5%xkS=xo=HtnWDu#AVLp~t#oG^7?+AOA7+8C|($=jxt`LSZzEh|Ssq9>-4 zF*Hn_4te9lJyT;|1D|_IXXM|r&Cn8P=n?x1!kH5%4p&dmRN;&JH}qIiq4#;Jr3O@o zmWQ(Nu-*c+mfptnH5~Gc9ee9BqCH4G_I2?4e1h!S8>;mdj}@pQ zusZNWhLVO9x*mcj9V|Vf2X>`u&Wa(YS8}VGt@$;yF$GUgQwB)HpKZ>2?Y;&?$hi4d zxSq)CtZSh%Q_g8{8kawRO3J-&n}?5c?m7P^p~gsE(QB#gm29$VYl}D5aie^GEHYKS zORPTlk+M&5!_GDnzm2S$dDu(I@O$d2gz)%J65vWyLmD*~Qq2~7)M?D-M(?LbS?da| z`=`|S>FJejk#bh21e+2;rZbcT1NKc4TJQmiX=L<$a~&{K{0!Kn*P9O0^}ez_QOnnvh*Ap zGqeS}I8a-Xf!&z${PY2NW&|p12msKh1HXB9w>E|FjY6pAyN18KK_tZ}kuzXIr^;S|xX3r`+wvCF#dg)7b|(WFWNi;!&DK-0x;@Q~ zo*Qm)T2>n)5b;qh*nd^!Y%#R#^Xq>Q>{`d$w`)2-UdA_Qjqk{G9>TH4x1rpnacEqi zm{ultFNJU|R^}dBhyekw8L}I>Yqxt1ZFST;g zoRqk1j-`P@+<2W)^yXRQ!GaH?Tf)n$yngs((rexlfwX(f7v8ht%tS_Lmx0SG1J8`J zP(Qd7teW!2g%+z6;C=O?X5>!ex@h}~hzqHk+s9(wLz}pO>CLXL=dQ|5H@94M_nT0o zak(>_*r!+ck^YE@&`xW1X^`2DGkEPSXF^OqQPx(^W^Vk0;*XZ{&7iU*_zLbbjrTGO zPm$op3M6>)3>!5oJwU`cI7zi7EDztuDok5TrY%S|O1#(OB+5j`)p~iw_7pPbv8w*n zxnB8<6XeKP>-rRY+5-(5k9lQla&>QZZLuPo`3O%*1!4YZ zrC2^vb|PEMj^L(=5X%K+N#}w>mCBdB+2b|UUOJE`$}w4e2mQE27nnM;y)L?z;%fRs z`_d8w-PEw|m+B=#7R^OTZp7lW5-1z#jO|BZc2;BcpC%Lc9cA@ey~GCva%<{DIdTV# z-Kdz@r0!gn3?_qD?a+l$#;Te^-U+kVa@<6PY4ZR|4}|@R%OB>rOo1fkK4z48f~rRTY&n&gY4Xu6zq- zbK|xKU+Gwl%hba_ zg~hVYW@=sREwdFtOq@q64{GB0s9v|jE6%+Msky)5ozxYn;+a}`B#(+lMm zsaRf;#cr|Sm*Y5ni=Xt)O)fU_Nhi*;7IgNUw-qO?ZvpBz>)F@)+Id$+AH9XTOimBy zxo4FlPTr&1@94M}=UVJ(FHNUQ%0G=QB%f}yMNH=@_j?zB1+9yw{@QcFKo3;3#32LK+L~a$|bHKMblQl zZfEmpKTZUn3~pqcZ!w$H1mO-dg)hD75qW4lf%K&)Lxj!aQpePj)UE<1L7^kH@kuMk z!P?2Bt=euf{hh6;py@Yj;yqnQ{Y->jtDW_f2^a$)kvSw~ZKA^xFK?>s)s48OqP8Z_ zCv}Is_Nck+c$9`Y7d|US7)|i{ZNi?d)+R5e%xO+<7 z0)@Uru5gtQeBLFUy2=)?PK6^(ZA=FF*~(I}%p$QFgkpECPqU9s%TwjTQ=5;K&NM_6K%eOO@U8-rFh`EQmS7v?Okf1Xi zYv*TuYPT}1_el~hV2I!Ui7-mkoQ`gRnSJzGLrI=7ZRwJ>VDxL(;Q4w{g=J%i&a0X} zi^ryeqgQ=uDzHAkO#zWysP_Ri5dds>vtXK#2)aBsfxDr975@B$U_Xv&{$M%3L$LdX zmE=pT9s?$Bn%R24c$d2K5WmIz6& z5$_Lm#;>O4CW)Zc(YfZoiH$QbJ@V3DGBFiOI8fWldx}keq}v-~Gq+s;kI5vi{o&|g zESf*jxj+EldIjS|aSJzjpW6OXqkzGxl`VI12@I+7(O{!4-r}K~1$THH!D1bFy?pz; z`lu!dbn1SPb6&D;W!dY7T0UPSdHHe0p&Tf6+=}o#(uQctKcJLWwrp`_o}6%oZwts>^Ct(AxRE@$#(Y{LRx2u2um&F{X?NfIVn;WbDGb%S&cZ z@<_fZNJi`FU!`e3S;%kh)IUmr|HMKRBv{`{sfb){0x&hDQ}=taJjak0#864;nINuk zLatZ25(dpx(uiNzv{hXe!u8Z*CPR_IWsMc0#dGt53z=N)AEFc`lt3~UYN1TAk8}D; zHHrp}spQt?(`pP&;?={1QOzPX_R2EEkBam!TXP6oNFt-=-0Je#Y?cX-ya;?Za`_XZ zO0qmdDEgOV=TGP-c5DPBO)>dG-Ro7WJr!jmXJc7SJ@oZ_iv@E!EJ!jU)mBi|{Q0*0 zz>aefyO*eXy(bdxBc81LyvC84_Uo-3qQxX(91-k2*_uq{J?fP6n)9kc#n)jw1MF^~ zb03r3t_7r0_GGoN;R=%@$?3)lo$OcwLz}29$>l{uwWD22#LhdMrxRfzfZ=Zj!1~pj z6FN>-^{-_N`>WLfADtgEhW*VFgr5ceKPec#4`(<;;YNC>eRa=W*ul1ouWic)8_KYc z;GJ=%K4H&-ryD0&@4Er>KHXm>G;YQkPE=2nHCFdo%}nu`C>t;zo?$5(-CYUxK=r;; zsH!h#2RN|twd3Q=H_O;mP{*`N&}VCnvr_q*9Vtvi5`t!i7T^258iLsg8Op;mlg>@j zahj;gthhvrsr1fyx98757snGf9a-0pmh2AJ6ws0EFIzV=W_6?4uUX5v1vreeqqfI9 zQq=CmQaADi&l)`MXZ_4psAYnR&XiQbniSiV5KrGLnHp!mywAh$JV8ll)fM%YC{sEt z96K)BejALFe+#_A)a$eyXmBTpcM$TJZD}k)8_LvISbY87>$9dJO1*7){t!z;+`1FFDH{RXGjuok=@3gT!hZ9R&nU`IZ*NV#en;0>W^7W=kbm~a2pHK9x zD<>MDwM;ZxIi&=(Ro{%(#_h3_hb)e+YOUR^-v?mI>+I+1x91ZaS={lH7ot|9*4$f4 z!=kK%O%g@Nq)i2Rh!2tA%6RiF>+J7P$A-NB{+51xVEjaYe=uD4q66)joE1?H_J%scPQP$bd?Oc$YMg zL$t$1_!C8xlFIuMt=(+qpXDpJput&Y1aqEJ{1fI-zm_Kb>5N-&ZT3h7Op?P$%7s#^ zv9gnk5f3xyM?_3OfT>R_*J>&<;rj*8 z*Ys11+~=5;=I8uX!O=e6LlzElE|G)Cmy!#CDC&$a*<)I8ht2V{KdhiQ6<1Hrd@>D@ z)_oS#vjj#KE^*nHtjppY${Gx+8$hyy5sv2?OY|VV1>P6fg1^w*c{C@JH@oSf;;sLV zub1`3vVqv^l2AGsPnr1GSwheCTL5K?Bl#Qyb?4p3CloDiMs=p10t#^|kSuUMW77FC zJjRZG?wdTFxkc&Edd164^!*DY?HgO2YT4;w?okdpMFb-m%;L$$);XSv26seL7%T1a z^Y&*;i`49}#Yben)T!}ul}>$G+&+|`!qJQXhwE%9Y_IC)>wVt9yTjWWsQTK*zIpEwSxzLcg0vB&C}va#{@ zo)vL`7m{`zQ|iH-7UQo=&vQmLb~45}+1=pu2I&JZQ$4;+RddAb?m}ieT$J8jO7r#U zRq$q=* z!sPL=O*v81&lNS!#t!cfp#Ea|Qb$~3mlARNQiP^;+#J1EG9^?Ksm2V)#}A?h!)}2% z-L#8s;S@2Jk5Sx@2qp3NZ5mc@s7FWrj4qXr86<~Y`uPQ5?B0`eNKkeuo`rn*nhJ?l zAc~NeZ?zcNDz;&z=9gTJvdmaS8lH;gdf@O6*FhE1SXP&1^l=4-MKJh8B z9q2r2g+ezw5Wt=vYrd%)*9W5uyUp$Gwo#Suo79Bb9IbXxurJs~-;Ma#H9*=XyFy(b ztF;oE#B`4W5eX(tQK9)_YHHku3)Ik)ebCghk}(k_-@2jdYK`Om^jwUe$dNc+gjje9 zj*PuqEOC`dvSqoxX9Jv+w(MLcmc3{DFno{6+H&t>h+qXDBfz{)5ur#$bg7A}E8s{y z#?GgHPD4HKUe>YA?Oc-S1Pcdq_Xw_Tef4Ta1Sqy@IDoGIb864Heh+y026O&YZX9^e znCC9mD4%Ss3%yyGsJ%!&jePc6GLQ~rgD_mHMJfcrj-%GaDJT$VYGVzQB=qZ02jl5q zMLJbL=*40a!3Nsee8SDUCvsY$jUoUFBHldi0BhB$|LlugMJe#Pt?)rIoL=?nc@n>1 z+=KUd(GzE1VxI11$y-EKK6DO0EsAY)*rUI!G;jvXP_gr=P7sdO*H;|QJ`J9oFOI69 z_GD7q4+5Ke>Ksd@(bvo5jqDU@V)RT<(9xad?oVfEbauEZRcw-Yr>GUiR+thW)AVbg z9b5G5G;0zZJ&pbiSaSv(Q2kZFE|3^;S6=Mq4F9*Te-~+dS860&kwvy1w0w)O2jQuUN-Iz zB|q5ztopnt`U>-XP?v1A8jc!eBh_>9TOfjEYPjX-+H23ylD|38m~D{OFizDo_md1j<$)cR zTgup-C#)&q(aC&!!tZulVo>YHK za8-ods!q*N)US|N_9U$ia;GGv^dXHDAzor-=y8yaOKcgTqM$%*c)#h)>(V#I@Lw0Q(GnK z)H%yycq-*LgRO^hwt5BdCv%=wIeV*hN7Z9#2`&6EGbr_~CY;5^j#D|ig$_&W&Wy6z z$qAeM?`LRADjNLP!k_n71i`(U#vRo93Vv_PvTvvx-z`5gyc4O_b>_lpH?<=+QM#2c zmdGlX6UP6dRO@hvQM!({Ca*M&rTCs~;dz&W2p!4rSd}x06;b`eAQsA39LfGfRVVm4 zeFrXFM9!SfTZ{^rZ)D;p%Luw-*_0)RU*7^Nb7xz(KxJb4XidPFiDT7()Mft-PF^FU z@;dk1D_nGUu9W-7jb>&3IJbc1fc+Q`)J54}hAbr0_t|^1NJ$4hdZm5uCAg_v4TE)Jvjb$s`(~x(i z89G|8)16IGJY7mEV3f+&t*j?<4L^!hzXd*0S4IRTDFkPeb-)@62hnChN&@>XQ=ZJF z$TLbkS@kr+(3IE9`-Dco`JOnE-D33v+yt@tVWCcK1$W`L7QFanzJN!XyS*!+24xG4 z!r-%>BK1knDE7@1k+7eXrV`}M-&{b#>l@#tdUC1L)FvM$ zns=t@V@;XKrp&xm6jGqAz1c(+|J!t8|2jvFU$1Qc6=$gUH=CKljZEascQg+$^0QTa zF*4Et^jB-4W@!TvR~g);rv@L00p2{WljcCzL~Qbxxy+G1NP0&)1{!#h3<69K+Vv{+ zg|YcR_RqePq1%Wqpk5Km&7NR2ilvVva#QJuXhIU2d|-m*%4vX&LplCTo&vX&AS951 zIIK|ek?9lOgRq(uoH3D)D@Miqm{7o);+wlva(~QfU?vb6zaYil3`EX|=tK!NFzsrZ$Nvj?jtf zafoqmsHq+;5B9pD0CYBGf_Yx5E*eY(qisKLO&s|(v5w4{L&(e|_k8Z)dCxq=g`a8u zu5Rc&ZdMd;vBL}GrDxWu>~9ZJ*UL>O%4orohf!I!NM!A7ZE;qkox<&bv;)R`4>%Xv z5UnzB4vcN8Jv8Gf3DjshB4p})b^GD>pYRUxYfvYqtQLdED%g_?j)hv+%OVXnjQEnE zm94Fv(l>Q_fNmm&em=r)S-UC7xraI8u*~W7a5RjcUIUIf-O}-Lt zho%#9IlXN@Fks3@QzpaGf_6^X=mu^HrD%xaM9(0yB|ETxD;&J4=BP;X{vh%VH_&?w z2X~yY`L^k`t|fbRYzL{p8A2(B&*V7O~CO_RfYkd0crf%!G+A)+T3x#U##8Hk@5$`@#AjK}FRDD&u zaj+5gpy594KFVfa(4b_KMzrrHE8&;Ht+iok2X2t+IJJuF>#;IyNX z5Od!4!WKaFa6giEy_=zHRDmFal%JiA0K*ft1a-6L2&+aiV6q%?j1157vh*n{@yo9i z>46~*Ep)v3oL9Z=I2|K#rG^4v*Oy#GRNMMdtBns(Z|bH>w|7#6eUj~TR_TUIRI>pS zjYZ&KC~MF?Gjv|{WOM}K*&>TJN#$Q#kaXH>`E;y2bn4#G$coe+K7&2$wv7o82+qt8 z?xi9QYYs`|8${$N-# zcZ4(tbmvW#EVc|olO7XPSeJ3e9DwxTk! z*oc#IBN{rnFD&bOXX7~^YEVVbr5H}Hde5pFH=b{wF$Gu_r4pAK9Du*gm&w4BFEOJ| zBqz@$mh1*8GuGSm-HMfSToWH<4)ofXk?C57$dP({Dhjo%<7H>?k2J#(s}QFXg^Rg)ltzx4`naJWb{P_*^EwFlW5ayi zNx@JNj*F6HWI&7*BS(~%$X+tc$d{!sc^?5 zgL%3|B=~3ZZG3yRMbJP|5~q3BpiHe}d(XB&h@s6F+JKQPcs)%t24q(IC%(DV~y9mOP#pcvNFqazz%V zDFoS3Tv0Sj1aK=*XP%K$+AL4?ClhFWC^K9<}c&#;GNt+o;xNH->h} zvqV>sRgD&HLi>V5v|T&K1VST&`bu_x#n{lV9vy<#xuPdQY$}3TU5rr{KOep(t6ZK` z|53;`wk8mNwr*+pl|qP!(hp1#csBf8_frT@b$KD{A-Xi<0ER+8?u~7k3|W1h&;TKZvmYEpL@O3-T2)j#usW%Kt%7o z&vtg+jA77J$3x66$30~wSOTVduq)3WB|GQm!=T2kEl2m9emg1$XLvXZDhdkge0wYu z24Y9u^>tYxT}rtH2z`C-b+>ZN=kabOngY}ylebS6iG*69#tlJYv;y{B0&1KfexRpacSh_&MmOKHv8QL=rm3cU}9A?UdKVHgC4`h+i+0u{my-XIvRQ|!us zo}l3XFvfNZd25@3j4kZQranqXUG{t7p9_yWC_)w$7@(eTs-b@A58b^lwiy92IssR2 z48><=>CmE85bEQ-t#J2}$Ko-Hkoozx>5@kx$R-=l`_J6N6(9)g$R?pj+(OF7ThMxc z>x&hbzXG z%Hfp9xuS0CRVzEFr5#|7<7&v&F9lf1x4zCzopUu49}%a(>TV;djrclbzl-ps8In_} zN(mo5xB+MT(QgPrOb6$bOMYn}s7OvK2Ye}@>Pox#7FVsRfdD0|pxZk~K6g>dhAEh% zQryG{QF>S`>}n#%zH_EQ4uWFupyOoh^=|yJaka7It7QKfZ_4iTsg2XvWa^&z24e|r zuYq`KQg7EfTj_mCi<+gxxIwZlBtgj9eu9I-vS34-Dkig-u3nD`6HV*lD2^b(yX)Q0 zj|ACuunguF^tMeCq6DfMh-{@hlDgE~S8(r-o;xum@I2sn;_c2jCzMSuBT2Gyqrs6n zh!CY$+*Cyu+gl!*M=-S4EgVr`oC;_7Spd}7zn<40ab=7&mOH1%+VISPr={OE4qGwx zMgyvG7!$AJd`$Js#qZGVb%}O7l2h(8_@24m=TNkFHkxm_7^I;e(cK(Qw`8=e3Z3+s{=?q-cM;a# z)DQf*sSUJ)?U3Tu|#M>`IA^&QsO|bFPe!5i~%fV)x=LnXDLn zczcFQKfWk?UwKb9LNJK2hS+M8cSAV-INg}8KqK$))j^mY?;u4CQ-t~}!o9b=0$;`j z3s6lK%2bhC6!_X#IDIno0*a}{sO-1x!R|`z!IdqKsTRjCXD(FmI~@pB-)6%BJ0d$G z$VPtzcJ|}U^gH9jARdoCcrc*^Ao^*)Czz*sS7c~nm~3K}+fvaG^>J2}e6M@J?<-P~ zSz&+uf_~5Xa})YOYSsE$tw<7TEG83k{8jZg`6j+Y2=;yrmws2l1r|2ilrg1y*4X!x zQ$p^&r#`4;um6zj0TZo5$SpLJ4$;f@xo?<7gU)9JT**_H^4jWJ+DaG%?sG(ON7jPP z7ha7oOh3w**VDC<1wU1CdpQUrA9!7|<_$QiSmI1HdTut&bY;h6O!rF~x?#Bqxd_SM zJUKY6Xd;6+H)?!knPd6PI{(=mjauvQwFx^J&w#+og#6k#uCOo>$~+BAbrdgl&QQ6(f$4P;};b?48h~`PB2}m*x46cZlK7_-5BywX;xG zW2ilMqqPYeJo=5Z*TD}EPg+|plRcm9NJr?gG~!Ys%-4Hk((zr}YvT!$G?CD%l}=v9 zPpHA<|M;u?p7T#B>i*6v5QM5x05PmM(ii}_vXnSrsG9^DXV>qsXoW;CGWm1U_6@5u zE=9!nU44uFgRKLW6Suhc&y#s7D? z%YR~LetwDc0G#Tjoa+M=4nvc*06X>_ZD+kD@q|OSD$%vU*?KkokdTIUf`gMnr}_F| z<%&lV|8<=%NRnx|ZP(|3k&&weoWKn2QQbF=rK3(go&)~3`_XS^hd=$5{-)~u&ye_^ z{FPKiQcXt7ieN5Axa#k0#(&-2r_t{xy5})r17JO=Z3z!o-E>+Ex2J|jKvRjmsaVpy3(;f}le0}NP z*1Px$r+c;Q;KV%l5kUcKTIZo@g2q=N>mzn#@(;ckEiRz9Hi94Bj4ZKty$s1*9%n`$ z?XA$Y;UW&w-bm(w9F#}rm+InrR;&xhcZ(17=X+;yD$ng-4h;no?Amu1Y0y^494~C~ zZ7@ic%xQX=v-p8O)vg2+$v1YGJE=Svy6YHA6**SPy0pWOnsl~Oy7|5|>U3yK!17e0 z=3`jz**=|p3TT!@2!a^OB+TSRn~NEf9NX03g~TIahWO!cV!|Iw{5gjH48!Gbw&D92 zqS0V{M10SIp&Edxj+-hRX6@zaYtplS)pdt-y~64|5>YQ|UY?tabwLp`lp@fjlP1`< zxO3etGUKwd>dvXeIzYb~dMheuLN+}(zUb^DU& zOBkd9+4a;*xdH0BU|X>JR%!JMqOw8H06XRu;RI zmJgM8zb#=ll6vTom~^A-?v-_A4O?3g9QX75XMg;pho9r&=X~&UKKys(2TOnDSBU>n zKY!^xZRG_SJV|PIQmIvIRn9pMc~G({7X#*$`a-k!3wMoI_5Ot}Mx!Es_u~oQ1uJ(x z8Aef&eKho@f~rP6P-l%X-3V+cVa1X`wUXW+Xe$bDObD!V!^KoZ%|Zm8V)al9oMFMV zuPmSp7kXfcHo4ZkVb;}aDT;k;Qt-qRO*1#;HG_n-+4xQzR_hiP-GC(#6I_k26J2V} z8_l6v#3#KpIa76)gYsOHv`4lk&S3^npVMMZGKTlI_-{!tWCse@-Or=UcPBF;)2v+q zfv0b3>R)9A`>s;mb0xQxM&e3SAIu4+iq>6>wP?-Uv$Bch9o5P(N?!|c8j?3xceFH; zRyu1aoqhU$$bNooA^MB-=eMp$84cKpu;*Pjp!%kV0KDY1Q z(1w^iGj}bB(@fXui}YvK1zPQ-YLVBoEk*(zLiK}lJHeney(U&)0JD?8EBMONB)Bf}+#(sEMod=21P?W9Oswq-{uxh95-La|;a?_E|t z^$d`gzKoSWJ!Y6Z$0VdQR)6;@wW(Y2r3!r}_O!uQ1Qdq?V;_(wG`cR4;!O8LvbeGu z0Jgr*UJ``}2`M8T5zgXIV2J(WD>WwB30-;vE|~`-r#Ltz6R2y0BZDPx;>rC9YB%WC z2)YfnRCHws2|8?%K;!`VKYIU-j&Cz8YN5+R+vsSY#>S|7>M!JLO-Z5La^4>u0G zN|ex5>2VktE<%IBs8EpJN#(n;k}~RaXwlMj5$N(VCFs^0BMD%FY#+O{31GBTV_a@E zsW85$iqBHLPLZCC2BgrWC+;yO^ zf1*=fK@kiP^LGrRzPmpQr4hP?6{Z}s|kf*2V@BSC&O2)!+_?KHvXd`=QO=&sO3p$do3vzcuoPKjay?I3 z=Gmk4m=thEf|-oI9ruDEw2^lx8czp10)N0*|nh8l|`&;wlaLbVZ?3|g6*i86@z8@SN?GSqBP6L#98wfQ>xPBDc~ z(1%93DFMZje58|T(AzyW4az(8i%c0{-}6(4hJM4E?4y=>@^FuL`1}CMqpenGu%(Gx z58}`A3l>Bx38>_#*o?ZVGLG}NpjDx9%XYX+966SmOQDSl$&2i|YoeyM4?RxEgTz_d z3NjM9-YX6eB*`-Dvy*Z+1!zk_kC=VfP`$iczTLbM|A;CES!NDhWETzE9e={lLjFA* zAWz&S#D?!qY6b12#QNT~dN&^=d=jLbzs9FC^7BRBgGR2qud_8{i~@Qa43}Icre3fh zei);0hB`omf=|4PE_0U8upnCAZ|!(F=}^e#V8=fx>x#)elG(q2N42J3D04TA@1$^I zpHihlBHEdDjS9|!9N>Ms^OyT%zJdJ+Ib$sRED3z@n}*6LJD5gGa# z5(fcw6z6Mf@GJ1ewG}^9Yh@BCJ5q1DE$9xl4un?uYWcHi)2gVT@U++c; z)IU_tr`mmxXUuLkL_g>&Db=3VY9 zd9ur$D`;3``#ZZ`PA}pIIr!3GDnqgYNE3?L9eGy6X7)ujF~W>}|lT<4$=aLos!ToEth!p+(l0kzvt+rq7;KI~RjF zY){1$&gl!zkYh!+A10o{)ro2%?^Cj&nVHy%)2!vuROOAyKH^MOz{!G}t?Ci_)Q~uy zpx=66%z)?n*8Ri%HkRG;~ zaK%jbxk~ATlQg#&9`^6p^L+PY@wrgC!%HF$HF$fL8(Rp(N}|7iEwLbVIf2)Q_+-3t zq^n4iyX3iFJwGW}IFck(WUius9nx20Ha1zhhFR3{`WVFBDKvYM%~`4pieqdo8!6FI zwN!m)N|YJb3$(>teyRU}j-(^OTQe^jq>f#?eW^E?2k)57MC|UrV)n29(H#y%W6A(;p$LZ?E;%Uh2;VB$K<7E~^o zZ-Jx1!u6GHD>s9ual@pmF*p6fS4UP2(c2blo<5~7&cuIbN^8IH8Jdps0)L`jS$W?^ zxPxq)S<+=dCe5oZ#SJ;gDW=|+eUL$w{PlZfsEPXd_?qWy))!}t9e>TWu#|U{*LR7W z`p+c2Pb9!TV8AKh$oO!B6k$2*KZh0N`KS}bSOF^Q+iAC53aroO1{qxly#}!C_-MB@uTtYmr zzUcO8%gu^o17T=ozt_k^qQoz&2&*rqr0whwyOdUh+Z`}+>?Z3#Q&Y>I+4a8KV6vQkr;9_#R_;qnp zGIq@Sa|wLCfLVj=luF~+B5Ihsy_KeGYYXS)kk7v(PJr?1>))fUDi5K#JS6p-@t9QQ z3}C;%Qck>5YZcYNL#eWMEh+)>KS{!O#Oo)hq~gZj{-gv58!!WoH=&4m}wdGKBWTrY;UWG zKX2T0_q%4&vUHt^?~i#`TFSmfSK#QIc=cwg@idoJJ$2pEua=aLB$WsLFb5xUVc#i( zo{^&~UDa()5kb7?1_LI03LaO5oISHr)|p9A34HJ_F3q4>0hhXXwPdx1VMpW3ycKq~ z@!g2G-c1c+Hdh>S#WK(B?N5VD%#H%iGz~G);yV5l*sNoYtxEl}2qE&gUs>FUsXT=a7I;@-%P+)tcE5^*v`4$e;DtLeS?T7Z7)0}?oN1G0EX6sHx;ebQHQG+M;d2_ zXYAqcd<7_PqHRbzyG&KSi08`Sm@{Y9YNlGc%s(5omFQo?0{LS&C=+D_lp44 zWPA1gBEmEWTt#Q+=f^k&x4;9B$kHH_R1+Cc#NNWCW4{xT`^1C%Zq%dmJL_WHJk$xR zVb>1A{Cr$qqU%*Iv*B~IEIfpMmIjhdcdsKW@~{*NDPBaA-(Ot!l~R1{sMdK@*cTE~ z#MHIw_%@su?kFqT)1|z@e~-Iz2|C}uY;rUB!bvf<*FCS{7E;rQsDcyOPd`lBoufvW zoa!_Nq6&^-$`~3$6efL_7&3M6)Y0my$I)vqcFlo_#MQc})rV$rG0VA%t ztd##q$upw`X@TJ@p$l%W;t}Kf*1nf%9D)EfW>_`XI4H8lO)2~A9TK^B)q zvClEE-^^p3H?R2o)F%#m0g-_WwW4&)p?%flLi0iPGMdmSQ-I1x9y`H_@Ev_MWBAFF z=bzc~SY>G4Ui3~T)AhcPyx%li=N0Je{$wsWy}G3hbXsO(_F-{0B1kVg0{ckv>i9%8 zj0r_@X?JYSaocLiu`=J&{*Lq7-{qZC9QOdhG-Zj;8bN>~|l6$=Gs;rr!;&j2o zT+2f|brw6V$g^9vViLFhRo>$uC8;}QG**?mOipT|U2vc}d(iW^FUDvFY)VO9T<;u` zHTj+A>~6o;?@UbV%l|XjCjUAABP=v_&qcQI`cr3pV}Mt=*e;@;m^wp`&c@nu`44Mu z?XFzJ^ZxHmDY3e9_RqK2f4>Mk{B~_Tb&xp{M&^GcCVu`=7yT zr7wqB=C^X@<;N;z`i_K~ZSvToz2TRTR!o%M^PH?h-X(ke#3sKeneD%DUHSRh|ElbP zJ~_5|^P9|a;2E+u^)qXq&pj=7;>EW4&N1)joB#Pz{~Ne5t2aIU#-;bWZRINdGZ_6o zZ#~U+;)TsR&cz?tpVhV&=ez-4*wp!JQdY9uV{5I@t}ws1bEa*08Gm--{NG3BpIf}_ ztAJ{X(b?s{zI?M>9kx;8%I?y{R=Imy1MjR@Eo|R9>Avyyq?4~bec14=X-7L@jYe69 zjBCqGA9uy?0T!AS1@-b#rD8s;Y1`@*r~W(24+^^n^&d-J};SG|8n z(j;G1A`XQ>TCqfIH2qML&PUVF qX!;pVKZB`7FtXe-TKR%|0V#;foA0Z diff --git a/docs/setup.md b/docs/setup.md new file mode 100644 index 000000000..c809dc66f --- /dev/null +++ b/docs/setup.md @@ -0,0 +1,425 @@ +# Odysseus Setup Guide + +This page keeps the detailed install, deployment, troubleshooting, and configuration notes out of the front README. + +## Quick Start + +> **Branch note:** `dev` is the default branch and contains the latest development changes, but it may be unstable. For the more stable curated branch, use [`main`](https://github.com/pewdiepie-archdaemon/odysseus/tree/main). + +Defaults work out of the box: clone, run, then configure models/search/email +inside **Settings**. Only edit `.env` for deployment-level overrides like +`APP_BIND`, `APP_PORT`, `AUTH_ENABLED`, `DATABASE_URL`, or a pre-seeded admin password. + +On first setup, Odysseus creates an admin account (`admin` unless +`ODYSSEUS_ADMIN_USER` is set) and prints a temporary password in the terminal. +For Docker installs, the same line is in `docker compose logs odysseus`. +Use that for the first login, then change it in **Settings**. + +Contributing? See [CONTRIBUTING.md](CONTRIBUTING.md) for setup, testing, and +pull request guidelines. + +### Docker (recommended) +```bash +git clone https://github.com/pewdiepie-archdaemon/odysseus.git +cd odysseus +cp .env.example .env # optional, but recommended for explicit defaults +docker compose up -d --build +``` +To include optional extras in the image (PDF viewer, Office extraction; includes AGPL PyMuPDF), build with `docker compose build --build-arg INSTALL_OPTIONAL=true` before `up`. + +Open `http://localhost:7000` when the containers are healthy. Docker Compose +binds the web UI to `127.0.0.1` by default. If the port is taken, set +`APP_PORT=7001` in `.env` and recreate the container. Set `APP_BIND=0.0.0.0` +only when you intentionally want LAN/reverse-proxy access. + +> **On Apple Silicon (M-series) Macs:** Docker can't reach the Metal GPU, so +> Cookbook serves local models on CPU only. For GPU-accelerated model serving, +> run natively instead — see [Apple Silicon](#apple-silicon) below. + +### Native Linux / macOS +```bash +git clone https://github.com/pewdiepie-archdaemon/odysseus.git +cd odysseus +python3 -m venv venv +source venv/bin/activate +pip install -r requirements.txt +python setup.py +python -m uvicorn app:app --host 127.0.0.1 --port 7000 +``` +Requirements: Python 3.11+. Cookbook also needs `tmux` for background model +downloads and serves. The app itself is lightweight; local model serving is the +heavy part and depends on the model, runtime, GPU, and VRAM, so small hosts can +connect to API or remote model servers instead. Use `--host 0.0.0.0` only when you intentionally want LAN/reverse-proxy access. + +### Apple Silicon +Docker on macOS cannot use the Metal GPU. For GPU-accelerated Cookbook on an +M-series Mac, run Odysseus natively: + +```bash +git clone https://github.com/pewdiepie-archdaemon/odysseus.git +cd odysseus +./start-macos.sh +``` + +It launches at `http://127.0.0.1:7860`. To expose it to your phone over a trusted LAN/VPN such as Tailscale, bind all interfaces: + +```bash +ODYSSEUS_HOST=0.0.0.0 ./start-macos.sh +# then open http://:7860 +``` + +The script also reads `.env` at startup, so `APP_BIND=0.0.0.0` and `APP_PORT` +set there are picked up automatically without a command-line override each run. + +Keep `AUTH_ENABLED=true` (the default) before binding outside loopback. Do not +expose this port directly to the public internet. To build a clickable app wrapper: + +```bash +./build-macos-app.sh +``` + +
+Cookbook, GPU, Ollama, and troubleshooting notes + +**Docker bundled services.** Compose starts Odysseus, ChromaDB, SearXNG, and +ntfy. Odysseus and the bundled service ports bind to `127.0.0.1` by default, so +they are reachable from the host but not exposed to your LAN/public internet +unless you opt in. + +**Cookbook storage in Docker.** Downloads live in `./data/huggingface` +(`~/.cache/huggingface` in the container). Cookbook-installed Python CLIs and +serve engines live in `./data/local` (`~/.local` in the container), so they +survive container recreation. + +**Remote servers.** In **Cookbook -> Settings -> Servers**, generate the +Odysseus SSH key and add the public key to the remote server's +`~/.ssh/authorized_keys`. From the host you can also run: + +```bash +ssh-copy-id -i data/ssh/id_ed25519.pub user@server +``` + +**Docker GPU overlays.** CPU-only users can skip this section. Cookbook can +only detect GPUs that Docker exposes to the container — if the host runtime or +device passthrough is not configured, Cookbook sees the iGPU, another card, or +CPU instead of your intended GPU. + +For NVIDIA, `scripts/check-docker-gpu.sh` diagnoses GPU passthrough and can +optionally install the host runtime or update `.env`. + +```bash +# Read-only diagnostic (default — installs nothing, never edits .env): +scripts/check-docker-gpu.sh + +# Print OS-specific install commands without running them: +scripts/check-docker-gpu.sh --print-install-commands + +# Install NVIDIA Container Toolkit on Ubuntu/Debian (requires sudo): +scripts/check-docker-gpu.sh --install-nvidia-toolkit + +# Write COMPOSE_FILE to .env (only when GPU passthrough is confirmed working): +scripts/check-docker-gpu.sh --enable-nvidia-overlay + +# Full assisted setup — install toolkit, then enable overlay if passthrough works: +scripts/check-docker-gpu.sh --install-nvidia-toolkit --enable-nvidia-overlay +``` + +Safety notes: +- The app never installs host GPU runtime automatically. +- The app never edits `.env` automatically. +- `.env` is only modified when `--enable-nvidia-overlay` is explicitly passed, + and only after GPU passthrough succeeds. `--yes` skips prompts but does not + bypass the passthrough gate. +- `.env.bak.*` backups created by `--enable-nvidia-overlay` are ignored by + Git and the Docker build context. + +To enable manually without the script, add this to `.env`: + +```bash +COMPOSE_FILE=docker-compose.yml:docker/gpu.nvidia.yml +``` + +**AMD / ROCm.** AMD setup is read-only diagnostic plus manual `.env` edit. Run: + +```bash +scripts/check-docker-amd-gpu.sh +``` + +Then add the reported values to `.env`, replacing `RENDER_GID` with your host's +numeric render group id: + +```bash +COMPOSE_FILE=docker-compose.yml:docker/gpu.amd.yml +RENDER_GID=989 +``` + +For NVIDIA/AMD GPU support, also read the comments in the selected overlay file: docker/gpu.nvidia.yml or docker/gpu.amd.yml. + +**Stack-management UIs (Portainer, Coolify, Dockhand, etc.).** These tools +often accept only a single Compose file and do not reliably honor `COMPOSE_FILE` +or multiple `-f` overlays. CLI users should keep using the `COMPOSE_FILE` +overlay workflow above. For stack UIs, point the stack at one of the standalone +files instead, which bundle the base stack plus the GPU settings: + +- `docker-compose.gpu-nvidia.yml` — still requires the NVIDIA Container Toolkit + on the host. +- `docker-compose.gpu-amd.yml` — still requires host ROCm/kfd/DRI setup, the + `video`/`render` group membership, and `RENDER_GID` when needed. + +The base `docker-compose.yml` plus the `docker/gpu.*.yml` overlays remain the +source of truth; the standalone files mirror them for single-file deployments. + +Verify after enabling either overlay: + +```bash +docker compose exec odysseus nvidia-smi -L # NVIDIA +docker compose exec odysseus sh -lc 'test -e /dev/kfd && test -d /dev/dri && ls -l /dev/kfd /dev/dri/renderD*' # AMD +``` + +> **GPU passthrough ≠ llama.cpp CUDA.** `nvidia-smi` passing inside the +> container confirms Docker GPU access, but llama.cpp also needs `cudart` and +> the CUDA Toolkit at runtime. If Cookbook logs show `Unable to find cudart +> library`, `Could NOT find CUDAToolkit`, `CUDA Toolkit not found`, or +> tensors/layers assigned to CPU, that is a Cookbook/llama.cpp build issue — +> not a Docker passthrough failure. Reinstall the serve engine via +> **Cookbook → Dependencies** to get a CUDA-enabled build. +> +> The same split applies to AMD/ROCm: seeing `/dev/kfd` and `/dev/dri` inside +> the container confirms device passthrough, not ROCm userspace or a +> ROCm-enabled vLLM/llama.cpp build. `rocm-smi` and `rocminfo` are not expected +> inside the slim Odysseus image. + +**Ollama with Docker.** If Ollama runs on the host, add this endpoint in +Settings: + +```text +http://host.docker.internal:11434/v1 +``` + +Ollama must listen outside its own loopback interface: + +```bash +OLLAMA_HOST=0.0.0.0:11434 ollama serve +``` + +This connects Odysseus in Docker to an Ollama server that is already running on +your host machine; it does not start Ollama inside the container. +`host.docker.internal` is Docker's hostname for the host machine from inside the +container. Cookbook **Serve** is a separate workflow for serving downloaded +models through Odysseus/llama.cpp, so Windows users with an existing Ollama +install usually only need to add the endpoint in Settings. + +**Useful checks.** + +```bash +docker compose ps +docker compose logs --tail=120 odysseus +docker compose logs odysseus | grep -E 'ChromaDB|MemoryVectorStore|DEGRADED' +``` + +**macOS details.** `start-macos.sh` installs Homebrew deps, creates the venv, +runs setup, and starts uvicorn on port `7860` because AirPlay often holds +`7000`. It uses llama.cpp/Ollama for Metal. vLLM/SGLang are CUDA/ROCm-only and +do not run on macOS. MLX-only models are not served by Odysseus. + +
+ +### Native Windows + +**One-command launcher** (creates the venv, installs deps, runs setup, starts the +server; safe to re-run): + +```powershell +git clone https://github.com/pewdiepie-archdaemon/odysseus.git +cd odysseus +powershell -ExecutionPolicy Bypass -File .\launch-windows.ps1 +``` + +Or do it by hand: + +```powershell +git clone https://github.com/pewdiepie-archdaemon/odysseus.git +cd odysseus +py -3.11 -m venv venv +venv\Scripts\Activate.ps1 +pip install -r requirements.txt +python setup.py +python -m uvicorn app:app --host 127.0.0.1 --port 7000 +``` + +If `python` points at an older interpreter, use `py -3.12` (or another installed +3.11+ version) for the venv step. + +**Requirements:** Python 3.11+. The core app (chat, agent, memory, documents, +email, calendar, deep research) runs fully native. For full **Cookbook** background +model downloads and the agent shell tool, also install +[Git for Windows](https://git-scm.com/download/win) (provides `bash.exe`). +Local GPU *serving* of vLLM/SGLang needs Linux/WSL2; for a local model on Windows, +[Ollama](https://ollama.com/download) is the easiest path — point Odysseus at +`http://localhost:11434/v1` in Settings. + +Open `http://localhost:7000`, log in with the generated admin password, +and configure everything else inside **Settings**. + +## Troubleshooting & Advanced Setup + +### `chromadb-client` conflicts with embedded ChromaDB +If `chromadb-client` (the lightweight HTTP-only package) is installed alongside the full `chromadb` package, Odysseus starts but ChromaDB silently falls back to HTTP-only mode and fails. + +**Fix:** uninstall `chromadb-client` and force-reinstall the full package: +```bash +./venv/bin/pip uninstall chromadb-client -y +./venv/bin/pip install --force-reinstall chromadb +``` + +### HTTPS + LAN/Tailscale exposure +To expose Odysseus on a local network or Tailscale with HTTPS: +1. Change the bind address to `0.0.0.0` in `.env` (`APP_BIND=0.0.0.0` or `ODYSSEUS_HOST=0.0.0.0`). +2. Generate a locally-trusted cert for your LAN/Tailscale IPs using [mkcert](https://github.com/FiloSottile/mkcert): + ```bash + mkcert -install + mkcert -cert-file cert.pem -key-file key.pem 192.168.1.100 tailscale-ip + ``` +3. Run `uvicorn` with the generated certs: + ```bash + python -m uvicorn app:app --host 0.0.0.0 --port 7000 --ssl-certfile=cert.pem --ssl-keyfile=key.pem + ``` +4. Install the `mkcert` CA on any other device you want to access Odysseus from (e.g., for iOS, email the `rootCA.pem` to yourself, install the profile, and trust it in Certificate Trust Settings). + +### Optional Dependencies +`requirements-optional.txt` contains packages that unlock extra features. It is not installed by default. + +| Package | Feature unlocked | +|---------|-----------------| +| `faster-whisper` | Local speech-to-text (microphone -> text) via the "local" STT provider. | +| `ddgs` | DuckDuckGo as a search provider option. | +| `PyMuPDF` | PDF page rendering in the side viewer panel and form-filling. (Note: AGPL-3.0) | +| `markitdown` | Office/EPUB document text extraction (converts .docx/.xlsx/.pptx/.xls/.epub to Markdown). | + +### Faster, reproducible installs with uv (optional) +[uv](https://docs.astral.sh/uv/) works as a drop-in replacement for the +venv + pip steps in the native install guides, no project changes are needed but this change results in faster installs along with a lockfile for reproducible environments. After [installing `uv`](https://docs.astral.sh/uv/getting-started/installation/), use: + +```bash +uv venv venv --python 3.13 +uv pip install -r requirements.txt +# then continue as usual: python setup.py, uvicorn, ... +``` + +`requirements.txt` is intentionally unpinned, so two installs at different times can produce different package versions. If you want a reproducible environment (e.g. across your own machines, or to roll back after a bad upgrade), snapshot and restore exact versions with: + +```bash +uv pip compile requirements.txt -o requirements.lock # snapshot current resolution +uv pip sync requirements.lock # reproduce it exactly later +``` + +`requirements.lock` is gitignored and platform-specific (compile it on the OS you deploy to). Regenerate it deliberately when you want to take upgrades. The plain `uv pip install -r requirements.txt` keeps following the unpinned requirements like pip does. + +### Outlook / Office 365 email +Odysseus email accounts currently use IMAP/SMTP username-password auth. Outlook +and Microsoft 365 generally require OAuth instead, so normal Microsoft mailbox +passwords will fail. See [docs/email-outlook.md](docs/email-outlook.md) for the +current limitation and the planned integration direction. + +## Security Notes +Odysseus is a self-hosted workspace with powerful local tools: shell access, file uploads, model downloads, web research, email/calendar integrations, and API tokens. Treat it like an admin console. + +- Keep `AUTH_ENABLED=true` for any network-accessible deployment. +- Keep `LOCALHOST_BYPASS=false` outside local development. +- Use `SECURE_COOKIES=true` when Odysseus is served through HTTPS by a trusted reverse proxy or private access gateway. +- Do not expose it directly to the public internet without HTTPS and a trusted reverse proxy or private access layer. +- Keep `.env`, `data/`, `logs/`, databases, uploads, generated media, backups, auth/session files, API keys, and model/provider tokens out of Git and private shares. They are ignored by default. +- Review `data/auth.json` after first boot: disable open signup unless you intentionally want it, make only your own account admin, and keep demo/test accounts non-admin. +- Non-admin users do not get shell/Python/file read/write by default, and admin-only routes/tools such as MCP management, API tokens, webhooks, model/cookbook serving, backup/vault, and app settings are admin-gated. Other features are controlled by per-user privileges, so review each user's privileges before exposing a deployment. +- Rotate any API keys or tokens that were ever pasted into a shared chat, demo, screenshot, or log. +- If you enable API tokens or webhooks, create separate tokens per integration and delete unused ones. +- Prefer binding manual development runs to `127.0.0.1`; bind to `0.0.0.0` only when you intentionally want LAN/reverse-proxy access. +- Keep ChromaDB, SearXNG, ntfy, Ollama, vLLM, llama.cpp, databases, and raw model/provider APIs internal-only. Expose only the authenticated Odysseus web/API entrypoint through your trusted proxy or private access layer. +- Before publishing a fork, run `git status --short` and confirm no private files from `.env`, `data/`, `logs/`, uploads, backups, or local databases are staged. + +### Private or proxied deployments +Odysseus serves plain HTTP on its app port. Docker Compose binds Odysseus and the bundled services to `127.0.0.1` by default, so a typical production/private setup is: + +1. Keep Odysseus on localhost, for example `127.0.0.1:7000`. +2. Terminate HTTPS at a trusted reverse proxy or private access gateway. +3. Put the authenticated Odysseus web/API entrypoint behind that layer. +4. Keep raw service and model ports internal-only. + +Cloudflare Access, Tailscale, Caddy, nginx, and Traefik can all fit this pattern; none are required by Odysseus. If your access layer reaches Odysseus on the same host, proxy to `http://127.0.0.1:7000` and keep `AUTH_ENABLED=true`, `LOCALHOST_BYPASS=false`, and `SECURE_COOKIES=true`. +`ALLOWED_ORIGINS` lists exact permitted origins for cross-origin browser/API clients; ordinary same-origin reverse-proxy access usually does not need a special CORS entry. + +Common internal-only ports from the default docs/compose setup: + +| Port | Service | +|---|---| +| `7000` | Odysseus raw app port | +| `8080` | SearXNG | +| `8091` | ntfy | +| `8100` | ChromaDB host port for manual/compose access | +| `11434` | Ollama | +| `8000-8020` | Common local model/provider APIs | + +## Configuration +Most setup is done inside the app with `/setup` or **Settings**. Use `.env` +for deployment-level defaults and secrets you want present before first boot. +Key settings: + +| Variable | Default | Description | +|---|---|---| +| `LLM_HOST` | `localhost` | Your LLM server (e.g. `llm-host.local:8000`) | +| `LLM_HOSTS` | -- | Comma-separated list for model discovery | +| `OPENAI_API_KEY` | -- | Optional OpenAI key. Prefer adding providers in the app unless pre-seeding. | +| `SEARXNG_INSTANCE` | `http://localhost:8080` | SearXNG URL. Docker overrides this to `http://searxng:8080`. | +| `SEARXNG_SECRET` | generated on first Docker boot | Optional SearXNG cookie/CSRF secret. Leave blank unless you need to pin it. | +| `APP_BIND` | `127.0.0.1` | Docker Compose host bind address for the web UI. Use `0.0.0.0` only for intentional LAN/reverse-proxy access. | +| `APP_PORT` | `7000` | Docker Compose host port for the web UI. | +| `APP_DATA_DIR` | `./data` | Docker Compose host directory for application data volumes. | +| `APP_LOGS_DIR` | `./logs` | Docker Compose host directory for application logs. | +| `AUTH_ENABLED` | `true` | Enable/disable login | +| `LOCALHOST_BYPASS` | `false` | Development-only auth bypass for loopback requests. Keep false for shared/network deployments. | +| `ALLOWED_ORIGINS` | `http://localhost,http://127.0.0.1` | Comma-separated exact permitted origins for cross-origin browser/API clients. | +| `SECURE_COOKIES` | `false` | Set true when serving Odysseus through HTTPS at a trusted proxy or private access gateway. | +| `DATABASE_URL` | `sqlite:///./data/app.db` | Database connection string | +| `CHROMADB_HOST` | `localhost` | ChromaDB host for vector memory. Docker overrides this to `chromadb`. | +| `CHROMADB_PORT` | `8100` | ChromaDB port for manual host runs. Docker overrides this to `8000`. | +| `EMBEDDING_URL` | -- | OpenAI-compatible embeddings endpoint | +| `ODYSSEUS_CHAT_UPLOAD_MAX_BYTES` | `10485760` | Chat/agent attachment cap in bytes. Raise for larger local PDFs or text documents. | +| `ODYSSEUS_GALLERY_UPLOAD_MAX_BYTES` | `104857600` | Gallery image upload cap in bytes (100 MB). | +| `ODYSSEUS_GALLERY_TRANSFORM_UPLOAD_MAX_BYTES` | `26214400` | Gallery transform input cap in bytes (25 MB). | +| `ODYSSEUS_MEMORY_IMPORT_MAX_BYTES` | `10485760` | Memory import file cap in bytes (10 MB). | +| `ODYSSEUS_PERSONAL_UPLOAD_MAX_BYTES` | `26214400` | Personal document upload cap in bytes (25 MB). | +| `ODYSSEUS_EMAIL_COMPOSE_UPLOAD_MAX_BYTES` | `26214400` | Email compose attachment cap in bytes (25 MB). | +| `ODYSSEUS_STT_MAX_AUDIO_BYTES` | `26214400` | Speech-to-text audio cap in bytes (25 MB). | +| `ODYSSEUS_ICS_MAX_BYTES` | `10485760` | Calendar `.ics` import cap in bytes (10 MB). | + +All upload-limit vars are validated (must be a positive integer) and optional; an invalid value fails fast at startup. + +### Built-in MCP servers (optional setup) + +Odysseus auto-registers a few built-in MCP servers at startup. The npx-based ones (currently the browser server, `@playwright/mcp`) only start when their npm package is already in the local npx cache. If a package isn't cached, that server is skipped with a startup log message explaining what to do, so a fresh install does not block on a multi-minute npm download or hang if Playwright system deps are missing. + +To enable the browser MCP (page navigation, screenshots, vision), run once: + +```bash +npx -y @playwright/mcp@latest --version +``` + +That installs `@playwright/mcp` plus Playwright (~300MB total). Restart Odysseus and the server will register at startup. + +## Architecture +``` +app.py # FastAPI entry point +core/ auth, database, middleware, constants +src/ llm_core, agent_loop, agent_tools, chat_processor, search/ +routes/ chat, session, document, memory, model … endpoints +services/ docs, memory, search, hwfit (Cookbook) … +static/ index.html + app.js + style.css + js/ (modular front-end) +docs/ landing page (index.html) + preview clips +``` + +## Data +All user data lives in `data/` (gitignored): `app.db` (sessions, messages, documents), +`memory.json`, `presets.json`, `uploads/`, `personal_docs/`, `chroma/`, `settings.json`. + +To back up or restore everything in `data/`, see the +[Backup & Restore guide](docs/backup-restore.md). From b3e186746ac5052728058b332b36720d061d04d3 Mon Sep 17 00:00:00 2001 From: pewdiepie-archdaemon Date: Fri, 19 Jun 2026 00:32:47 +0000 Subject: [PATCH 02/22] Docker compose: mount docker.sock + install Docker CLI so Cookbook can reach sibling containers Cookbook now needs to docker-exec into ollama-rocm (and any other sibling container holding a model server) from inside its own container, so: - Dockerfile installs the Docker CLI from the static binary tarball (the Debian docker.io package ships dockerd but not the client on slim) - docker-compose.yml bind-mounts /var/run/docker.sock and adds group_add for the host docker group (default GID 963) - entrypoint.sh detects the socket GID, creates a local group with that GID, and runs usermod -aG before gosu-dropping to the app user so the supplementary group propagates through (gosu strips by default) --- Dockerfile | 17 +++++++++++++++++ docker-compose.yml | 10 ++++++++++ docker/entrypoint.sh | 33 +++++++++++++++++++++++++++++++-- 3 files changed, 58 insertions(+), 2 deletions(-) diff --git a/Dockerfile b/Dockerfile index 996e06faa..bed5e2002 100644 --- a/Dockerfile +++ b/Dockerfile @@ -20,6 +20,23 @@ RUN apt-get update && apt-get install -y --no-install-recommends \ gosu \ && rm -rf /var/lib/apt/lists/* +# Docker CLI (client only — daemon stays on the host via the +# /var/run/docker.sock mount). The Debian `docker.io` package ships +# dockerd but not the client binary on slim, so grab the static client +# tarball from download.docker.com instead. +ARG DOCKER_CLI_VERSION=27.5.1 +RUN ARCH="$(dpkg --print-architecture)" \ + && case "$ARCH" in \ + amd64) DARCH=x86_64 ;; \ + arm64) DARCH=aarch64 ;; \ + *) echo "unsupported arch $ARCH"; exit 1 ;; \ + esac \ + && curl -fsSL "https://download.docker.com/linux/static/stable/${DARCH}/docker-${DOCKER_CLI_VERSION}.tgz" \ + -o /tmp/docker.tgz \ + && tar -xzf /tmp/docker.tgz -C /tmp \ + && install -m 0755 /tmp/docker/docker /usr/local/bin/docker \ + && rm -rf /tmp/docker /tmp/docker.tgz + WORKDIR /app # Install Python deps first (layer cache). Optional extras (PyMuPDF AGPL, etc.) diff --git a/docker-compose.yml b/docker-compose.yml index 0b350c2e1..dd708303f 100644 --- a/docker-compose.yml +++ b/docker-compose.yml @@ -16,6 +16,16 @@ services: # land under /app/.local for the odysseus user. Persist them so a # container recreate does not silently remove installed serve engines. - ${APP_DATA_DIR:-./data}/local:/app/.local:z + # Docker socket — lets Cookbook launch commands like + # `docker exec ollama-rocm ollama show ` reach the host's + # Docker daemon (and sibling containers like ollama-rocm / + # ollama-test). The in-container user needs to be in the + # socket's owning group — see `group_add` below; the GID + # there must match the host's `docker` group (defaults to 963 + # on Debian, 999 on Ubuntu — override via env if yours differs). + - /var/run/docker.sock:/var/run/docker.sock + group_add: + - "${DOCKER_GID:-963}" extra_hosts: # Lets the container reach local services on the Docker host, including # Ollama at http://host.docker.internal:11434. diff --git a/docker/entrypoint.sh b/docker/entrypoint.sh index 668018ac1..7d796d9ff 100644 --- a/docker/entrypoint.sh +++ b/docker/entrypoint.sh @@ -24,6 +24,31 @@ if ! getent passwd "$PUID" >/dev/null 2>&1; then useradd -u "$PUID" -g "$PGID" -M -s /bin/sh -d /app odysseus fi +# Docker-socket group plumbing. When /var/run/docker.sock is bind- +# mounted (cookbook uses `docker exec` to reach sibling containers +# like ollama-rocm), the socket is owned by root:docker on the host. +# We need the in-container odysseus user to be in the matching group +# so `gosu PUID:PGID` doesn't strip it. compose's `group_add` only +# applies to the initial root process — gosu drop resets supplementary +# groups — so detect the socket's GID here and add the user via the +# username form `gosu odysseus` below. +DOCKER_SOCK="${DOCKER_SOCK:-/var/run/docker.sock}" +if [ -S "$DOCKER_SOCK" ]; then + SOCK_GID="$(stat -c '%g' "$DOCKER_SOCK" 2>/dev/null || echo '')" + if [ -n "$SOCK_GID" ] && [ "$SOCK_GID" != "0" ]; then + # Create the group locally if missing, then add odysseus to it. + if ! getent group "$SOCK_GID" >/dev/null 2>&1; then + groupadd -g "$SOCK_GID" docker_host || true + fi + SOCK_GROUP="$(getent group "$SOCK_GID" | cut -d: -f1)" + if [ -n "$SOCK_GROUP" ]; then + ODY_USER="$(getent passwd "$PUID" | cut -d: -f1)" + [ -z "$ODY_USER" ] && ODY_USER=odysseus + usermod -aG "$SOCK_GROUP" "$ODY_USER" 2>/dev/null || true + fi + fi +fi + # Repair ownership on every writable path the app touches at runtime. # # Bind-mounted dirs (/app/data, /app/logs) are the obvious ones, but @@ -83,9 +108,13 @@ export PATH="/app/.local/bin:$PATH" # Run first-time setup as the app user so data/ files get the right ownership. # setup.py is idempotent — skips auth.json / .env if they already exist. # || true so a setup failure never prevents the container from starting. -gosu "$PUID:$PGID" python /app/setup.py || true +# Use the username form (no :GID) so supplementary groups from /etc/group +# (including the docker-socket group set above) flow through to the child. +ODY_USER="$(getent passwd "$PUID" | cut -d: -f1)" +[ -z "$ODY_USER" ] && ODY_USER="$PUID:$PGID" +gosu "$ODY_USER" python /app/setup.py || true # Drop root and run the actual app. `gosu` is preferred over `su` / # `sudo` because it cleans up the process tree (no extra shell layer) # so signals (SIGTERM from `docker stop`) reach uvicorn directly. -exec gosu "$PUID:$PGID" "$@" +exec gosu "$ODY_USER" "$@" From 1324e1b0d593bb69af965084782c1cffc3b35623 Mon Sep 17 00:00:00 2001 From: pewdiepie-archdaemon Date: Fri, 19 Jun 2026 00:33:07 +0000 Subject: [PATCH 03/22] Cookbook backend detection: report Vulkan on AMD hosts without ROCm; gate CUDA build on actual NVIDIA hardware Three classes of incorrect detection fixed: (1) AMD GPU + no ROCm installed (e.g. Strix Halo) was reported as backend=rocm everywhere, so launch commands emitted HIP_VISIBLE_DEVICES (silent no-op on Vulkan) and the from-source build path failed. Both _probe_amd_sysfs (routes/cookbook_routes) and _detect_amd (services/hwfit/hardware) now probe rocminfo / hipconfig / vulkaninfo at detection time and report vulkan when only Vulkan is present. (2) Build helper was picking the CUDA branch on AMD hosts whenever a stray pip-installed nvcc was on PATH (vLLM wheels carry one without libcudart). Added _odysseus_has_nvidia_hw() that checks nvidia-smi / /dev/nvidia* / lspci, and gates both the nvcc PATH augmentation and the CUDA elif branch on real hardware. (3) Build chain reordered to ROCm/HIP > CUDA > Vulkan > CPU. Vulkan tier added between CUDA and CPU as a portable fallback for hosts with a GPU but no native toolchain (the common Strix Halo case). Same _append_llama_cpp_linux_accel_build_lines also auto-attempts sudo -n apt/pacman/dnf install of cmake/build-essential/git when they are missing, surfacing a clear no-passwordless-sudo warning otherwise. --- routes/cookbook_helpers.py | 177 ++++++++++++++++++++++++++++++++++--- routes/cookbook_routes.py | 124 ++++++++++++++++++++++++-- services/hwfit/hardware.py | 12 ++- 3 files changed, 293 insertions(+), 20 deletions(-) diff --git a/routes/cookbook_helpers.py b/routes/cookbook_helpers.py index bb819f3f8..3600a9ad1 100644 --- a/routes/cookbook_helpers.py +++ b/routes/cookbook_helpers.py @@ -784,25 +784,149 @@ def _append_llama_cpp_linux_accel_build_lines(runner_lines: list[str]) -> None: to hard-wire CUDA on Linux. That made ROCm hosts attempt a CUDA configure and fail with "CUDA Toolkit not found" instead of building with HIP. """ + # Try a prebuilt binary from llama.cpp's GitHub releases FIRST — no + # cmake/build-essential/git/CUDA-headers needed at all. The from-source + # build below stays as a fallback (custom flags, esoteric arch, no + # internet, etc). 30 seconds vs 5+ minutes of compile, and removes + # every OS-package dep from the launch path. Sets _odysseus_have_prebuilt=1 + # on success; the existing build-tier if/elif chain below is gated on + # that variable so we never compile twice or shadow the prebuilt symlink. + runner_lines.append(' _odysseus_have_prebuilt=""') + runner_lines.append(' _odysseus_arch="$(uname -m)"') + runner_lines.append(' _odysseus_prebuilt_url=""') + runner_lines.append(' if command -v curl >/dev/null 2>&1 && [ "$_odysseus_arch" = "x86_64" ]; then') + runner_lines.append(' _odysseus_pat=""') + runner_lines.append(' _odysseus_has_nv_inline() { command -v nvidia-smi >/dev/null 2>&1 && nvidia-smi -L 2>/dev/null | grep -q "GPU "; }') + runner_lines.append(' _odysseus_has_vk_inline() { ldconfig -p 2>/dev/null | grep -q "libvulkan\\.so" || command -v vulkaninfo >/dev/null 2>&1 || [ -e /usr/lib/x86_64-linux-gnu/libvulkan.so.1 ]; }') + runner_lines.append(' _odysseus_has_vkdev_inline() { ls /dev/dri/renderD* >/dev/null 2>&1 || (lspci 2>/dev/null | grep -Ei \'VGA|3D|Display\' | grep -Eiq \'AMD|ATI|Radeon\'); }') + runner_lines.append(' if _odysseus_has_nv_inline; then') + runner_lines.append(' _odysseus_pat="ubuntu.*cuda"') + runner_lines.append(' elif _odysseus_has_vkdev_inline && _odysseus_has_vk_inline; then') + runner_lines.append(' _odysseus_pat="ubuntu.*vulkan"') + runner_lines.append(' else') + runner_lines.append(' _odysseus_pat="ubuntu-x64\\\\.zip"') + runner_lines.append(' fi') + runner_lines.append(' _odysseus_prebuilt_url="$(curl -fsSL --max-time 15 https://api.github.com/repos/ggml-org/llama.cpp/releases/latest 2>/dev/null | grep \'"browser_download_url"\' | cut -d\'"\' -f4 | grep -iE "$_odysseus_pat" | grep -iv "arm\\|aarch64" | head -1)"') + runner_lines.append(' fi') + # Accept any of unzip / bsdtar / python3 -m zipfile as the extractor. + # python3 is essentially always present on modern Linux, so this lets + # the prebuilt path work on minimal Ubuntu installs that lack `unzip`. + runner_lines.append(' if [ -n "$_odysseus_prebuilt_url" ] && (command -v unzip >/dev/null 2>&1 || command -v bsdtar >/dev/null 2>&1 || command -v python3 >/dev/null 2>&1); then') + runner_lines.append(' echo "[odysseus] Found prebuilt llama-server: $_odysseus_prebuilt_url"') + runner_lines.append(' mkdir -p ~/bin "$HOME/.cache/odysseus/llama-cpp-prebuilt" && cd "$HOME/.cache/odysseus/llama-cpp-prebuilt"') + runner_lines.append(' rm -f llama-cpp.zip') + runner_lines.append(' if curl -fsSL --max-time 120 "$_odysseus_prebuilt_url" -o llama-cpp.zip && [ -s llama-cpp.zip ]; then') + runner_lines.append(' rm -rf build && mkdir -p build') + runner_lines.append(' if command -v unzip >/dev/null 2>&1; then unzip -qq -o llama-cpp.zip -d build; elif command -v bsdtar >/dev/null 2>&1; then bsdtar -xf llama-cpp.zip -C build; else python3 -c "import zipfile; zipfile.ZipFile(\\"llama-cpp.zip\\").extractall(\\"build\\")"; fi') + runner_lines.append(' _odysseus_extracted="$(find build -type f -name llama-server 2>/dev/null | head -1)"') + runner_lines.append(' if [ -n "$_odysseus_extracted" ]; then') + runner_lines.append(' chmod +x "$_odysseus_extracted"') + runner_lines.append(' ln -sf "$_odysseus_extracted" ~/bin/llama-server') + runner_lines.append(' _odysseus_libdir="$(dirname "$_odysseus_extracted")"') + runner_lines.append(' mkdir -p ~/.config && echo "export LD_LIBRARY_PATH=\\"$_odysseus_libdir:\\${LD_LIBRARY_PATH:-}\\"" > ~/.config/odysseus-llama-cpp-env') + runner_lines.append(' _odysseus_have_prebuilt=1') + runner_lines.append(' echo "[odysseus] Prebuilt llama-server installed at $_odysseus_extracted"') + runner_lines.append(' fi') + runner_lines.append(' fi') + runner_lines.append(' [ -z "$_odysseus_have_prebuilt" ] && echo "[odysseus] Prebuilt download/extract failed — falling back to from-source build."') + runner_lines.append(' elif [ -z "$_odysseus_prebuilt_url" ]; then') + runner_lines.append(' echo "[odysseus] No matching prebuilt llama-server for this host (arch=$_odysseus_arch) — will build from source."') + runner_lines.append(' fi') + runner_lines.append(' if [ -z "$_odysseus_have_prebuilt" ]; then') # Detect pip-installed nvcc (from vLLM/nvidia CUDA wheels) and put it on PATH - # so cmake's CUDA configure can find it. We keep this after the ROCm/HIP - # check — a machine with both stacks should honor the native HIP toolchain on - # AMD hosts instead of accidentally preferring a stray nvcc wheel. - runner_lines.append(' for _cudir in ~/.local/lib/python*/site-packages/nvidia/cu13 ~/.local/lib/python*/site-packages/nvidia/cu12 ~/.local/lib/python*/site-packages/nvidia/cuda_nvcc; do') - runner_lines.append(' [ -x "$_cudir/bin/nvcc" ] && export CUDA_HOME="$_cudir" && export PATH="$_cudir/bin:$PATH" && break') - runner_lines.append(' done') + # so cmake's CUDA configure can find it — BUT only when actual NVIDIA + # hardware is present. On AMD/Intel hosts the pip nvcc is a misleading + # leftover (no libcudart, no GPU it could target) and would otherwise + # send the build down the CUDA branch and fail with "CUDA Toolkit not + # found" instead of trying Vulkan. + runner_lines.append(' _odysseus_has_nvidia_hw() {') + runner_lines.append(' command -v nvidia-smi >/dev/null 2>&1 && nvidia-smi -L 2>/dev/null | grep -q "GPU " && return 0') + runner_lines.append(' ls /dev/nvidia* >/dev/null 2>&1 && return 0') + runner_lines.append(' lspci 2>/dev/null | grep -iE \'VGA|3D|Display\' | grep -iq nvidia && return 0') + runner_lines.append(' return 1') + runner_lines.append(' }') + runner_lines.append(' if _odysseus_has_nvidia_hw; then') + runner_lines.append(' for _cudir in ~/.local/lib/python*/site-packages/nvidia/cu13 ~/.local/lib/python*/site-packages/nvidia/cu12 ~/.local/lib/python*/site-packages/nvidia/cuda_nvcc; do') + runner_lines.append(' [ -x "$_cudir/bin/nvcc" ] && export CUDA_HOME="$_cudir" && export PATH="$_cudir/bin:$PATH" && break') + runner_lines.append(' done') + runner_lines.append(' fi') # rm -rf build so a prior poisoned CMakeCache.txt (e.g. from a failed CUDA # or HIP attempt) doesn't cause the next configure to reuse stale settings. runner_lines.append(' mkdir -p ~/bin') - runner_lines.append(' cd ~/llama.cpp && rm -rf build') + # Try to install cmake / build-essential / git automatically before the + # build, but ONLY via passwordless sudo (`sudo -n`) — interactive sudo + # would hang a tmux-backgrounded serve task waiting for a password. If + # sudo asks for a password the install is skipped silently and the + # diagnosis pattern (cookbook_routes.py / cookbook_helpers.py) surfaces + # an explicit "install cmake" suggestion in the Cookbook diagnosis + # toolbar after the inevitable build failure. + runner_lines.append(' _odysseus_apt_bootstrap() {') + runner_lines.append(' local _missing=""') + runner_lines.append(' command -v cmake >/dev/null 2>&1 || _missing="$_missing cmake"') + runner_lines.append(' command -v g++ >/dev/null 2>&1 || command -v gcc >/dev/null 2>&1 || _missing="$_missing build-essential"') + runner_lines.append(' command -v git >/dev/null 2>&1 || _missing="$_missing git"') + runner_lines.append(' [ -z "$_missing" ] && return 0') + runner_lines.append(' if command -v apt-get >/dev/null 2>&1 && sudo -n true 2>/dev/null; then') + runner_lines.append(' echo "[odysseus] Auto-installing missing build deps via apt:$_missing"') + runner_lines.append(' sudo -n env DEBIAN_FRONTEND=noninteractive apt-get update -qq 2>&1 | tail -3') + runner_lines.append(' sudo -n env DEBIAN_FRONTEND=noninteractive apt-get install -y --no-install-recommends $_missing 2>&1 | tail -5 || true') + runner_lines.append(' elif command -v pacman >/dev/null 2>&1 && sudo -n true 2>/dev/null; then') + runner_lines.append(' echo "[odysseus] Auto-installing missing build deps via pacman:$_missing"') + runner_lines.append(' local _pacpkgs="$(echo "$_missing" | sed -e \'s/build-essential/base-devel/g\')"') + runner_lines.append(' sudo -n pacman -Sy --needed --noconfirm $_pacpkgs 2>&1 | tail -5 || true') + runner_lines.append(' elif command -v dnf >/dev/null 2>&1 && sudo -n true 2>/dev/null; then') + runner_lines.append(' echo "[odysseus] Auto-installing missing build deps via dnf:$_missing"') + runner_lines.append(' local _dnfpkgs="$(echo "$_missing" | sed -e \'s/build-essential/gcc gcc-c++ make/g\')"') + runner_lines.append(' sudo -n dnf install -y $_dnfpkgs 2>&1 | tail -5 || true') + runner_lines.append(' else') + runner_lines.append(' echo "[odysseus] WARNING: missing build deps ($_missing) — passwordless sudo is unavailable, cannot auto-install. Cookbook Diagnosis will explain the fix after the build fails."') + runner_lines.append(' fi') + runner_lines.append(' }') + runner_lines.append(' _odysseus_apt_bootstrap') + runner_lines.append(' _odysseus_missing_build_deps=""') + runner_lines.append(' command -v cmake >/dev/null 2>&1 || _odysseus_missing_build_deps="$_odysseus_missing_build_deps cmake"') + runner_lines.append(' command -v git >/dev/null 2>&1 || _odysseus_missing_build_deps="$_odysseus_missing_build_deps git"') + runner_lines.append(' command -v g++ >/dev/null 2>&1 || command -v gcc >/dev/null 2>&1 || _odysseus_missing_build_deps="$_odysseus_missing_build_deps build-essential"') + runner_lines.append(' if [ -n "$_odysseus_missing_build_deps" ]; then') + runner_lines.append(' echo "ERROR: llama.cpp source build needs missing packages:$_odysseus_missing_build_deps"') + runner_lines.append(' if command -v apt-get >/dev/null 2>&1; then') + runner_lines.append(' echo "Install on this host: sudo apt-get update && sudo apt-get install -y cmake build-essential git"') + runner_lines.append(' elif command -v pacman >/dev/null 2>&1; then') + runner_lines.append(' echo "Install on this host: sudo pacman -Sy --needed cmake base-devel git"') + runner_lines.append(' elif command -v dnf >/dev/null 2>&1; then') + runner_lines.append(' echo "Install on this host: sudo dnf install -y cmake gcc gcc-c++ make git"') + runner_lines.append(' fi') + runner_lines.append(' echo "Alternative: install a native llama-server on PATH, then relaunch."') + runner_lines.append(' ODYSSEUS_PREFLIGHT_EXIT=127') + runner_lines.append(' fi') + runner_lines.append(' cd ~/llama.cpp') + runner_lines.append(' _odysseus_has_vulkan() {') + runner_lines.append(' ldconfig -p 2>/dev/null | grep -q \'libvulkan\\.so\' && return 0') + runner_lines.append(' [ -e /usr/lib/libvulkan.so.1 ] && return 0') + runner_lines.append(' [ -e /usr/lib/x86_64-linux-gnu/libvulkan.so.1 ] && return 0') + runner_lines.append(' command -v vulkaninfo >/dev/null 2>&1 && return 0') + runner_lines.append(' return 1') + runner_lines.append(' }') + runner_lines.append(' _odysseus_has_vulkan_device() {') + runner_lines.append(' ls /dev/dri/renderD* >/dev/null 2>&1 && return 0') + runner_lines.append(' lspci 2>/dev/null | grep -Ei \'VGA|3D|Display\' | grep -Eiq \'AMD|ATI|Radeon\' && return 0') + runner_lines.append(' return 1') + runner_lines.append(' }') + # Backend preference: native ROCm/HIP > native CUDA > Vulkan > CPU. + # Vulkan is a portable fallback that works on AMD when ROCm isn't + # installed (e.g. Strix Halo) and on any vendor's discrete GPU, but + # it's ~30-40% slower than native HIP/CUDA for LLM inference — only + # pick it when no native toolchain is present. runner_lines.append(' if command -v hipconfig &>/dev/null || [ -d /opt/rocm ] || [ -n "$ROCM_PATH" ] || [ -n "$HIP_PATH" ]; then') + runner_lines.append(' rm -rf build') runner_lines.append(' if command -v hipconfig &>/dev/null; then') runner_lines.append(' export HIPCXX="${HIPCXX:-$(hipconfig -l)/clang}"') runner_lines.append(' export HIP_PATH="${HIP_PATH:-$(hipconfig -R)}"') runner_lines.append(' fi') runner_lines.append(' echo "[odysseus] ROCm/HIP detected — building llama-server with HIP support..."') runner_lines.append(' cmake -B build -DCMAKE_BUILD_TYPE=Release -DGGML_HIP=ON && cmake --build build -j"$NPROC" --target llama-server && ln -sf ~/llama.cpp/build/bin/llama-server ~/bin/llama-server') - runner_lines.append(' elif command -v nvcc &>/dev/null; then') + runner_lines.append(' elif command -v nvcc &>/dev/null && _odysseus_has_nvidia_hw; then') + runner_lines.append(' rm -rf build') # nvcc alone is not sufficient — pip-installed CUDA wheels or incomplete # tooling can expose nvcc without shipping libcudart, causing cmake to fail # mid-build with "CUDA runtime library not found". Check cudart explicitly @@ -826,18 +950,24 @@ def _append_llama_cpp_linux_accel_build_lines(runner_lines: list[str]) -> None: runner_lines.append(' echo "[odysseus] Ensure libcudart is installed (e.g. cuda-runtime package) and visible via ldconfig or CUDA_HOME."') runner_lines.append(' cmake -B build -DCMAKE_BUILD_TYPE=Release && cmake --build build -j"$NPROC" --target llama-server && ln -sf ~/llama.cpp/build/bin/llama-server ~/bin/llama-server') runner_lines.append(' fi') + runner_lines.append(' elif _odysseus_has_vulkan_device && _odysseus_has_vulkan; then') + runner_lines.append(' echo "[odysseus] Vulkan-capable GPU detected (no ROCm/CUDA toolchain installed) — building llama-server with Vulkan support..."') + runner_lines.append(' rm -rf build-vulkan') + runner_lines.append(' cmake -B build-vulkan -DCMAKE_BUILD_TYPE=Release -DGGML_VULKAN=ON && cmake --build build-vulkan -j"$NPROC" --target llama-server && ln -sf ~/llama.cpp/build-vulkan/bin/llama-server ~/bin/llama-server') runner_lines.append(' else') - runner_lines.append(' echo "[odysseus] WARNING: no HIP/CUDA toolchain found — building llama-server for CPU only."') + runner_lines.append(' echo "[odysseus] WARNING: no HIP/CUDA/Vulkan toolchain found — building llama-server for CPU only."') runner_lines.append(' echo "[odysseus] GPU inference will not be available for this llama.cpp build."') - runner_lines.append(' echo "[odysseus] Install ROCm for AMD GPUs or vLLM/CUDA tooling for NVIDIA, then re-launch this serve task."') + runner_lines.append(' echo "[odysseus] Install Vulkan (libvulkan-dev) / ROCm for AMD GPUs or CUDA tooling for NVIDIA, then re-launch this serve task."') + runner_lines.append(' rm -rf build') runner_lines.append(' cmake -B build -DCMAKE_BUILD_TYPE=Release && cmake --build build -j"$NPROC" --target llama-server && ln -sf ~/llama.cpp/build/bin/llama-server ~/bin/llama-server') runner_lines.append(' fi') + runner_lines.append(' fi # end _odysseus_have_prebuilt guard') def _llama_cpp_rebuild_cmd() -> str: """Shell command that clears the Cookbook-managed llama.cpp build. - Removes the cached ``llama-server`` symlink and the ``~/llama.cpp/build`` + Removes the cached ``llama-server`` symlink and the ``~/llama.cpp/build*`` directory so the next llama.cpp serve recompiles from source, picking up a CUDA or HIP toolchain if one is now available. The serve bootstrap only builds when ``llama-server`` is missing from PATH, so without this an @@ -847,10 +977,10 @@ def _llama_cpp_rebuild_cmd() -> str: return ( 'mkdir -p "$HOME/bin" && ' 'rm -f "$HOME/bin/llama-server" && ' - 'rm -rf "$HOME/llama.cpp/build" && ' + 'rm -rf "$HOME/llama.cpp/build" "$HOME/llama.cpp/build-vulkan" && ' 'echo "[odysseus] Cleared the cached llama.cpp build. ' 'Re-launch the serve task to rebuild llama-server from source ' - '(CUDA or HIP will be used if a toolchain is now available)."' + '(Vulkan, HIP, or CUDA will be used if a matching toolchain is now available)."' ) @@ -1113,8 +1243,27 @@ def _diagnose_serve_output(text: str) -> dict | None: "SGLang is not installed or not in PATH on this server.", [{"label": "install SGLang in Cookbook Dependencies", "op": "dependency", "package": "sglang[all]"}], ), + # System build deps come BEFORE the generic llama.cpp catch-all so + # cmake / build-essential / git missing → a specific OS-package + # remediation instead of "install llama-cpp-python[server]" (which + # itself fails to compile when cmake is absent). ( - r"llama-server.*command not found|llama\.cpp.*not found|No module named.*llama_cpp|No module named 'starlette_context'|git: command not found|cmake: command not found", + r"cmake: command not found|cmake.*not found.*[Cc]ould not", + "cmake is required to build llama.cpp from source but isn't installed on this server.", + [{"label": "install build deps for llama.cpp (apt: cmake build-essential git / pacman: cmake base-devel git / dnf: cmake gcc-c++ make git / brew: cmake git)", "op": "dependency", "package": "llama-cpp-python[server]"}], + ), + ( + r"^(make|g\+\+|gcc): command not found|Could not find C\+\+ compiler", + "A C/C++ compiler (build-essential) is required to build llama.cpp from source.", + [{"label": "install build deps for llama.cpp on this server", "op": "dependency", "package": "llama-cpp-python[server]"}], + ), + ( + r"^git: command not found", + "git is required to clone the llama.cpp source tree.", + [{"label": "install build deps for llama.cpp on this server", "op": "dependency", "package": "llama-cpp-python[server]"}], + ), + ( + r"llama-server.*command not found|llama\.cpp.*not found|No module named.*llama_cpp|No module named 'starlette_context'", "llama.cpp / llama-cpp-python dependencies are missing.", [{"label": "install llama.cpp dependencies or llama-cpp-python[server]", "op": "dependency", "package": "llama-cpp-python[server]"}], ), diff --git a/routes/cookbook_routes.py b/routes/cookbook_routes.py index af25dd8e8..0bd38d19f 100644 --- a/routes/cookbook_routes.py +++ b/routes/cookbook_routes.py @@ -189,8 +189,27 @@ def setup_cookbook_routes() -> APIRouter: "SGLang is not installed or not in PATH on this server.", [{"label": "install SGLang in Cookbook Dependencies", "op": "dependency", "package": "sglang[all]"}], ), + # System build deps come BEFORE the generic llama.cpp catch-all + # so cmake / build-essential / git missing → a specific OS-package + # remediation instead of "install llama-cpp-python[server]" (which + # itself fails to compile when cmake is absent). ( - r"llama-server.*command not found|llama\.cpp.*not found|No module named.*llama_cpp|No module named 'starlette_context'|git: command not found|cmake: command not found", + r"cmake: command not found|cmake.*not found.*[Cc]ould not", + "cmake is required to build llama.cpp from source but isn't installed on this server.", + [{"label": "install build deps for llama.cpp (apt: cmake build-essential git / pacman: cmake base-devel git / dnf: cmake gcc-c++ make git / brew: cmake git)", "op": "dependency", "package": "llama-cpp-python[server]"}], + ), + ( + r"^(make|g\+\+|gcc): command not found|Could not find C\+\+ compiler", + "A C/C++ compiler (build-essential) is required to build llama.cpp from source.", + [{"label": "install build deps for llama.cpp on this server", "op": "dependency", "package": "llama-cpp-python[server]"}], + ), + ( + r"^git: command not found", + "git is required to clone the llama.cpp source tree.", + [{"label": "install build deps for llama.cpp on this server", "op": "dependency", "package": "llama-cpp-python[server]"}], + ), + ( + r"llama-server.*command not found|llama\.cpp.*not found|No module named.*llama_cpp|No module named 'starlette_context'", "llama.cpp / llama-cpp-python dependencies are missing.", [{"label": "install llama.cpp dependencies or llama-cpp-python[server]", "op": "dependency", "package": "llama-cpp-python[server]"}], ), @@ -1243,8 +1262,16 @@ def setup_cookbook_routes() -> APIRouter: req.cmd = _pip_install_no_cache(req.cmd) # Accept common aliases and enforce server extras for llama-cpp so # `python -m llama_cpp.server` has all runtime dependencies. - req.cmd = re.sub(r"(? APIRouter: runner_lines.append(' else') _append_llama_cpp_linux_accel_build_lines(runner_lines) runner_lines.append(' fi') + # Source the env file the prebuilt-download path writes so + # LD_LIBRARY_PATH includes the directory holding libllama.so + # and friends. No-op when prebuilt wasn't used. + runner_lines.append(' [ -r ~/.config/odysseus-llama-cpp-env ] && . ~/.config/odysseus-llama-cpp-env') + # Auto-upgrade pip llama-cpp-python to the CUDA-enabled + # wheel when (a) NVIDIA hardware is present and (b) the + # currently-installed wheel is CPU-only. Without this the + # user gets the Python server happily running at 3 tok/s + # because pip's default index ships CPU-only wheels. + # Forward-compat: cu124 wheels work on driver/runtime + # 12.4+ including the cu13.x line. + runner_lines.append(' if command -v nvidia-smi >/dev/null 2>&1 && nvidia-smi -L 2>/dev/null | grep -q "GPU " && python3 -c "import llama_cpp" 2>/dev/null; then') + runner_lines.append(' if ! python3 -c "import llama_cpp; import sys; sys.exit(0 if llama_cpp.llama_supports_gpu_offload() else 1)" 2>/dev/null; then') + runner_lines.append(' echo "[odysseus] NVIDIA detected but installed llama-cpp-python is CPU-only — reinstalling with CUDA wheel index for GPU offload..."') + runner_lines.append(' python3 -m pip install --user --break-system-packages --force-reinstall --no-cache-dir "llama-cpp-python[server]" --extra-index-url https://abetlen.github.io/llama-cpp-python/whl/cu124 2>&1 | tail -8 || echo "[odysseus] WARNING: CUDA wheel reinstall failed — Python server will stay CPU-only (slow). Manual fix: pip install --user --force-reinstall \'llama-cpp-python[server]\' --extra-index-url https://abetlen.github.io/llama-cpp-python/whl/cu124"') + runner_lines.append(' if python3 -c "import llama_cpp; import sys; sys.exit(0 if llama_cpp.llama_supports_gpu_offload() else 1)" 2>/dev/null; then') + runner_lines.append(' echo "[odysseus] llama-cpp-python now supports GPU offload."') + runner_lines.append(' fi') + runner_lines.append(' fi') + runner_lines.append(' fi') + # SHORT-CIRCUIT before the build/pip fallback: if the + # native binary is missing but llama_cpp Python is already + # installed, drop a wrapper at ~/bin/llama-server that + # translates llama-server CLI args to llama_cpp.server's + # underscore-style flags. The user's serve command stays + # `llama-server ...` and "just works" — no build, no cmake, + # no second install. This is the path that unblocks every + # remote where pip-installed llama-cpp-python is already + # working but Cookbook used to insist on a native binary. + runner_lines.append(' if ! command -v llama-server >/dev/null 2>&1 && python3 -c "import llama_cpp" 2>/dev/null; then') + runner_lines.append(' mkdir -p ~/bin') + runner_lines.append(' cat > ~/bin/llama-server <<\'_ODY_LLAMA_SHIM_EOF\'') + runner_lines.append('#!/usr/bin/env bash') + runner_lines.append('# Auto-generated by Odysseus Cookbook: a `llama-server` lookalike') + runner_lines.append('# that translates the native CLI to `python -m llama_cpp.server`.') + runner_lines.append('# Lets cookbook-generated launch commands run unchanged on hosts') + runner_lines.append('# where only the pip llama-cpp-python package is installed.') + runner_lines.append('ARGS=()') + runner_lines.append('while [ $# -gt 0 ]; do') + runner_lines.append(' case "$1" in') + runner_lines.append(' -ngl|--gpu-layers|--n-gpu-layers) ARGS+=(--n_gpu_layers "$2"); shift 2 ;;') + runner_lines.append(' -c|--ctx-size) ARGS+=(--n_ctx "$2"); shift 2 ;;') + runner_lines.append(' -b|--batch-size) ARGS+=(--n_batch "$2"); shift 2 ;;') + runner_lines.append(' -ub|--ubatch-size) shift 2 ;; # llama-cpp-python has no separate ubatch') + runner_lines.append(' --flash-attn) ARGS+=(--flash_attn true); shift 2 ;;') + runner_lines.append(' --cache-type-k) ARGS+=(--type_k "$2"); shift 2 ;;') + runner_lines.append(' --cache-type-v) ARGS+=(--type_v "$2"); shift 2 ;;') + runner_lines.append(' --n-cpu-moe) ARGS+=(--n_cpu_moe "$2"); shift 2 ;;') + runner_lines.append(' --mmproj) ARGS+=(--clip_model_path "$2"); shift 2 ;;') + runner_lines.append(' --image-max-tokens) shift 2 ;; # native-only') + runner_lines.append(' --no-mmap) ARGS+=(--no_mmap true); shift ;;') + runner_lines.append(' --no-warmup) shift ;; # native-only') + runner_lines.append(' --chat-template) ARGS+=(--chat_format "$2"); shift 2 ;;') + runner_lines.append(' --fit|--split-mode|--tensor-split|--main-gpu|--parallel) shift 2 ;; # native-only') + runner_lines.append(' --mlock) ARGS+=(--use_mlock true); shift ;;') + runner_lines.append(' *) ARGS+=("$1"); shift ;;') + runner_lines.append(' esac') + runner_lines.append('done') + runner_lines.append('exec python3 -m llama_cpp.server "${ARGS[@]}"') + runner_lines.append('_ODY_LLAMA_SHIM_EOF') + runner_lines.append(' chmod +x ~/bin/llama-server') + runner_lines.append(' echo "[odysseus] Created llama-server shim → python -m llama_cpp.server (no native binary needed)"') + runner_lines.append(' fi') runner_lines.append(' # If the native build failed, fall back to the Python bindings.') runner_lines.append(' if ! command -v llama-server &>/dev/null && ! python3 -c "import llama_cpp" 2>/dev/null; then') runner_lines.append(' echo "llama-server build failed — installing Python bindings as fallback..."') @@ -1834,6 +1924,25 @@ def setup_cookbook_routes() -> APIRouter: out, err = await _run_gpu_shell("ls -1 /sys/class/drm 2>/dev/null", host, ssh_port, timeout=4) if err is not None or not out: return [] + # Pick the runtime label up-front so each GPU dict gets the + # right `backend`. AMD silicon can be driven by ROCm/HIP (native) + # OR Vulkan (mesa RADV). Reporting "rocm" on a host where no + # ROCm toolchain is installed misleads the frontend env-var + # prefix logic — it would emit `HIP_VISIBLE_DEVICES=` for a + # Vulkan-only stack, which is a silent no-op at best. + rt_out, _ = await _run_gpu_shell( + 'command -v rocminfo >/dev/null 2>&1 && echo rocm ' + '|| (command -v hipconfig >/dev/null 2>&1 && echo rocm) ' + '|| (command -v vulkaninfo >/dev/null 2>&1 && echo vulkan) ' + '|| echo unknown', + host, ssh_port, timeout=4, + ) + _amd_runtime = (rt_out or "").strip().splitlines()[-1:][0].strip() if rt_out else "rocm" + if _amd_runtime not in ("rocm", "vulkan"): + # Default to rocm so existing ROCm-installed hosts keep + # working; "unknown" only happens when neither toolchain is + # detected (e.g. minimal sysfs read on a fresh box). + _amd_runtime = "rocm" gpus = [] for entry in out.split(): if not entry.startswith("card") or "-" in entry: @@ -1877,7 +1986,7 @@ def setup_cookbook_routes() -> APIRouter: "free_mb": free_mb, "total_mb": total_mb, "used_mb": used_mb, "gtt_used_mb": gtt_used_mb, "util_pct": 0, "busy": bool(total_mb and (free_mb / total_mb) < 0.85), - "processes": [], "backend": "rocm", "source": "amd-sysfs", + "processes": [], "backend": _amd_runtime, "source": "amd-sysfs", "unified_memory": unified, }) if gpus: @@ -2018,10 +2127,15 @@ def setup_cookbook_routes() -> APIRouter: amd_gpus = await _probe_amd_sysfs(host, ssh_port) if amd_gpus: + # The per-GPU dict already carries the runtime label picked by + # _probe_amd_sysfs (rocm vs vulkan); mirror that into the + # wrapper so the frontend can read `data.backend` directly + # without scanning the list. + _amd_wrap_backend = str(amd_gpus[0].get("backend") or "rocm") return { "ok": True, "gpus": amd_gpus, - "backend": "rocm", + "backend": _amd_wrap_backend, "source": "amd-sysfs", "fallback_from": "nvidia-smi", "nvidia_error": nvidia_error, diff --git a/services/hwfit/hardware.py b/services/hwfit/hardware.py index a3ad7ba05..0473475ed 100644 --- a/services/hwfit/hardware.py +++ b/services/hwfit/hardware.py @@ -282,7 +282,17 @@ def _detect_amd(): "gpus": cards, "gpu_groups": groups, "homogeneous": len(groups) <= 1, - "backend": "rocm", + # Pick the actual runtime label: ROCm/HIP only when its + # toolchain is installed, otherwise Vulkan if vulkaninfo is + # present (mesa RADV works fine on RDNA/CDNA when ROCm + # packages are absent — see Strix Halo where ROCm support + # is still backporting). Reporting "rocm" on a Vulkan-only + # host misleads downstream env-var pinning + # (HIP_VISIBLE_DEVICES is a no-op there). + "backend": ( + "rocm" if (_run(["which", "rocminfo"]) or _run(["which", "hipconfig"])) + else ("vulkan" if _run(["which", "vulkaninfo"]) else "rocm") + ), "unified_memory": is_apu, # AMD ISA/family so downstream can tell datacenter Instinct (CDNA, # where vLLM/SGLang run AWQ/GPTQ reliably) from consumer Radeon From f01465e87f6fcb20f5a857926b969f0b8202fa10 Mon Sep 17 00:00:00 2001 From: pewdiepie-archdaemon Date: Fri, 19 Jun 2026 00:33:19 +0000 Subject: [PATCH 04/22] Cookbook Dependencies: per-OS+backend install command + install-system-deps endpoint When a llama.cpp launch needs cmake/build-essential/git the user used to get a four-distro dump ("apt: x / pacman: y / dnf: z / brew: w") and had to pick the right one. Now: - shell_routes /api/cookbook/packages probes /etc/os-release on the target in the same SSH round-trip as the existing system-prereq check, classifies into debian / arch / fedora / alpine / suse / macos, and builds a single install_cmd_for_target string from the (os_family, backend) matrix. CUDA hosts get nvidia-cuda-toolkit; ROCm gets rocm-dev / rocm-hip-sdk; Vulkan gets libvulkan-dev / vulkan-headers; etc. - llama_cpp catalog entry gets system_prereqs: [cmake, g++, git]. When any of those are missing on the target, the row picks up pkg.build_deps_missing + pkg.install_cmd_for_target for the frontend to render. - New POST /api/cookbook/install-system-deps endpoint runs the right package manager via passwordless sudo on the target. Allowlisted to {cmake, build-essential, g++, gcc, git, tmux, make}; sudo -n only so it can never hang waiting for a password (returns a clear "passwordless sudo unavailable" error via stderr instead). --- routes/shell_routes.py | 307 ++++++++++++++++++++++++++++++++++++++++- 1 file changed, 304 insertions(+), 3 deletions(-) diff --git a/routes/shell_routes.py b/routes/shell_routes.py index b4e52325d..406d80bb3 100644 --- a/routes/shell_routes.py +++ b/routes/shell_routes.py @@ -961,12 +961,84 @@ def setup_shell_routes() -> APIRouter: return StreamingResponse(generate(), media_type="text/event-stream") + def _os_id_from_release(text: str) -> str: + """Map /etc/os-release contents to a canonical family for our matrix.""" + if not text: + return "" + ids = [] + for line in text.splitlines(): + line = line.strip() + if line.startswith("ID=") or line.startswith("ID_LIKE="): + ids += line.split("=", 1)[1].strip().strip('"').split() + ids = [i.lower() for i in ids] + if any(x in ids for x in ("debian", "ubuntu", "linuxmint", "pop", "elementary")): + return "debian" + if any(x in ids for x in ("arch", "manjaro", "endeavouros", "cachyos", "garuda")): + return "arch" + if any(x in ids for x in ("fedora", "rhel", "centos", "rocky", "almalinux", "ol")): + return "fedora" + if "alpine" in ids: + return "alpine" + if any(x in ids for x in ("suse", "opensuse", "opensuse-leap", "opensuse-tumbleweed", "sles")): + return "suse" + return "" + + # Matrix lookup keyed on (os_family, backend) → (pkg_mgr_cmd_template, pkg_list_per_dep). + # Each `system_prereqs` name resolves to a list of OS-specific package + # names that get joined into the final `sudo apt install -y …` etc. + # command. Backend-specific extras (CUDA toolkit, ROCm, Vulkan headers) + # are added only when the detected backend needs them. + _PKG_NAMES = { + # canonical-name → {os_id: [actual_pkg_names_on_this_os]} + "cmake": {"debian": ["cmake"], "arch": ["cmake"], "fedora": ["cmake"], "alpine": ["cmake"], "suse": ["cmake"], "macos": ["cmake"]}, + "build-essential": {"debian": ["build-essential"], "arch": ["base-devel"], "fedora": ["gcc", "gcc-c++", "make"], "alpine": ["build-base"], "suse": ["gcc-c++", "make"], "macos": []}, + "g++": {"debian": ["g++"], "arch": ["gcc"], "fedora": ["gcc-c++"], "alpine": ["g++"], "suse": ["gcc-c++"], "macos": []}, + "gcc": {"debian": ["gcc"], "arch": ["gcc"], "fedora": ["gcc"], "alpine": ["gcc"], "suse": ["gcc"], "macos": []}, + "make": {"debian": ["make"], "arch": ["make"], "fedora": ["make"], "alpine": ["make"], "suse": ["make"], "macos": []}, + "git": {"debian": ["git"], "arch": ["git"], "fedora": ["git"], "alpine": ["git"], "suse": ["git"], "macos": ["git"]}, + "tmux": {"debian": ["tmux"], "arch": ["tmux"], "fedora": ["tmux"], "alpine": ["tmux"], "suse": ["tmux"], "macos": ["tmux"]}, + } + _BACKEND_EXTRAS = { + "cuda": {"debian": ["nvidia-cuda-toolkit"], "arch": ["cuda"], "fedora": ["cuda-toolkit"], "alpine": [], "suse": ["cuda"], "macos": []}, + "rocm": {"debian": ["rocm-dev"], "arch": ["rocm-hip-sdk"], "fedora": ["rocm-devel"], "alpine": [], "suse": ["rocm-dev"], "macos": []}, + "vulkan": {"debian": ["libvulkan-dev", "vulkan-tools"], "arch": ["vulkan-headers", "vulkan-tools"], "fedora": ["vulkan-headers", "vulkan-tools"], "alpine": ["vulkan-loader-dev", "vulkan-tools"], "suse": ["vulkan-devel", "vulkan-tools"], "macos": []}, + } + _PKG_MGR = { + "debian": "sudo apt install -y {pkgs}", + "arch": "sudo pacman -S --needed {pkgs}", + "fedora": "sudo dnf install -y {pkgs}", + "alpine": "sudo apk add {pkgs}", + "suse": "sudo zypper install -n {pkgs}", + "macos": "brew install {pkgs}", + } + + def _install_cmd_for_target(os_id: str, backend: str, missing: list[str]) -> str: + """Build a single OS+backend-aware install command for the missing prereqs.""" + if not os_id or os_id not in _PKG_MGR: + return "" + pkgs: list[str] = [] + seen: set[str] = set() + for m in missing: + for p in _PKG_NAMES.get(m, {}).get(os_id, []): + if p not in seen: + pkgs.append(p); seen.add(p) + # Add backend-specific extras only when the build would actually + # consume them (a CUDA toolkit isn't useful on a Vulkan box). + backend = (backend or "").lower() + for p in _BACKEND_EXTRAS.get(backend, {}).get(os_id, []): + if p not in seen: + pkgs.append(p); seen.add(p) + if not pkgs: + return "" + return _PKG_MGR[os_id].format(pkgs=" ".join(pkgs)) + @router.get("/api/cookbook/packages") async def list_packages( request: Request, host: str | None = None, ssh_port: str | None = None, venv: str | None = None, + backend: str | None = None, ): """Check which optional packages are installed. @@ -1015,6 +1087,12 @@ def setup_shell_routes() -> APIRouter: "kind": "system", "install_hint": "Install Docker on the selected server and allow this user to run docker.", }, + # Note: cmake / gcc / git are not separate dependency rows — + # they're declared as `system_prereqs` on llama_cpp (and any + # other engine that compiles from source) so they appear as + # an inline status note on that engine's row instead of + # cluttering the panel with raw OS package names that aren't + # meaningful product-level dependencies on their own. # ── LLM ── installs on GPU servers for model serving/downloading { "name": "hf_transfer", @@ -1029,6 +1107,13 @@ def setup_shell_routes() -> APIRouter: "desc": "Serve GGUF models via llama.cpp", "category": "LLM", "target": "remote", + # Build-toolchain prereqs. Cookbook's launch bootstrap + # compiles llama-server from source when no prebuilt + # binary is present; without these the build aborts + # with `cmake: command not found`. Surfaced inline on + # this row so the user doesn't have to chase three + # separate OS-package rows. + "system_prereqs": ["cmake", "g++", "git"], }, { "name": "sglang", @@ -1143,14 +1228,28 @@ def setup_shell_routes() -> APIRouter: raise HTTPException(400, str(e)) except Exception: remote_status = {} - if host and remote_system_names: + # Union of system_names + every package's system_prereqs. Probing + # the prereqs alongside the main system deps in a single SSH call + # avoids a second round-trip per Cookbook → Dependencies refresh. + prereq_names: set[str] = set() + for p in packages: + for pr in p.get("system_prereqs") or []: + prereq_names.add(str(pr)) + all_system_names = list(set(remote_system_names) | prereq_names) + # Detect the target's OS family + read /etc/os-release in the same + # SSH round-trip as the prereq probe — used downstream to render a + # single OS-specific install command per row instead of dumping + # every distro's syntax onto the user. + target_os_id: str = "" + if host and all_system_names: try: checks = [] - for name in remote_system_names: + for name in all_system_names: qn = shlex.quote(name) checks.append( f"if command -v {qn} >/dev/null 2>&1; then echo {qn}=1; else echo {qn}=0; fi" ) + checks.append("echo '---OSREL---'; cat /etc/os-release 2>/dev/null || true") inner = " ; ".join(checks) argv = _ssh_base_argv(host, ssh_port) + [inner] proc = await asyncio.create_subprocess_exec( @@ -1160,14 +1259,32 @@ def setup_shell_routes() -> APIRouter: ) out, _err = await asyncio.wait_for(proc.communicate(), timeout=12) txt = out.decode("utf-8", errors="replace").strip() + _section, _osrel_lines = "probe", [] for line in txt.splitlines(): + if line.strip() == "---OSREL---": + _section = "osrel"; continue + if _section == "osrel": + _osrel_lines.append(line) + continue name, sep, value = line.strip().partition("=") - if sep and name in remote_system_names: + if sep and name in all_system_names: remote_status[name] = value == "1" + target_os_id = _os_id_from_release("\n".join(_osrel_lines)) except ValueError as e: raise HTTPException(400, str(e)) except Exception: pass + elif not host: + # Local target — probe in-process so the inline install command + # still appears in the dep panel when the cookbook container + # itself is the selected server. + try: + with open("/etc/os-release", encoding="utf-8") as f: + target_os_id = _os_id_from_release(f.read()) + except Exception: + target_os_id = "" + if sys.platform == "darwin": + target_os_id = "macos" for pkg in packages: on_remote = bool(host and pkg.get("target") == "remote") @@ -1229,6 +1346,94 @@ def setup_shell_routes() -> APIRouter: # 500 the entire packages panel; report it as not usable. pkg["installed"] = False + # llama_cpp partial-state probe: when the package is installed + # but the wheel was built CPU-only AND the target has NVIDIA + # hardware, mark the row as partial (yellow/orange) with a + # one-click upgrade to the CUDA wheel. Without this the row + # reads "ready" green while inference runs at 3 tok/s on GPU + # silicon — actively misleading. + if pkg["name"] == "llama_cpp" and pkg.get("installed"): + _gpu_capable = False + _has_nvidia_target = False + if on_remote and host: + try: + # Activate the configured venv FIRST so the probe + # runs against the same python the launch script + # would activate. Without this prefix, bare + # `python3` was checked — which can disagree with + # the venv's wheel (e.g. user-site has CUDA wheel + # but venv has CPU-only), and the dep panel then + # showed "ready" green while every launch fell to + # CPU. + _vp = _venv_activate_prefix(venv) + probe = ( + f'{_vp}python3 -c "import llama_cpp; import sys; ' + 'sys.exit(0 if llama_cpp.llama_supports_gpu_offload() else 1)" ' + '&& echo llama_cpp_gpu=1 || echo llama_cpp_gpu=0; ' + 'command -v nvidia-smi >/dev/null 2>&1 ' + '&& nvidia-smi -L 2>/dev/null | grep -q "GPU " ' + '&& echo nvidia=1 || echo nvidia=0' + ) + argv = _ssh_base_argv(host, ssh_port) + [probe] + proc = await asyncio.create_subprocess_exec( + *argv, stdout=asyncio.subprocess.PIPE, stderr=asyncio.subprocess.PIPE, + ) + out, _ = await asyncio.wait_for(proc.communicate(), timeout=8) + txt = out.decode("utf-8", errors="replace") + if "llama_cpp_gpu=1" in txt: + _gpu_capable = True + if "nvidia=1" in txt: + _has_nvidia_target = True + except Exception: + pass + else: + try: + import llama_cpp as _lcp # type: ignore + _gpu_capable = bool(_lcp.llama_supports_gpu_offload()) + except Exception: + _gpu_capable = False + _has_nvidia_target = shutil.which("nvidia-smi") is not None + if (not _gpu_capable) and _has_nvidia_target: + pkg["partial"] = True + pkg["partial_reason"] = "Installed but CPU-only wheel — GPU detected on this target. Upgrade to a CUDA wheel for ~10× faster inference." + pkg["partial_action"] = "reinstall_llama_cpp_cuda" + # Attach per-package system_prereqs status. We probed each + # prereq name above; surface "Missing build deps: …" ONLY + # when the package itself is not installed — if the package + # works (e.g. llama-cpp-python already imports cleanly), the + # build toolchain is irrelevant and surfacing it as a red + # flag confuses users ("ready" + "missing" on the same row). + _prereqs = list(pkg.get("system_prereqs") or []) + if _prereqs: + if on_remote: + _pr_present = {n: bool(remote_status.get(n)) for n in _prereqs} + else: + _pr_present = {n: shutil.which(n) is not None for n in _prereqs} + pkg["system_prereqs_status"] = _pr_present + _missing = [n for n, ok in _pr_present.items() if not ok] + # Suppress the "missing build deps" hint when the package + # itself is installed — build deps are only relevant if + # the user would need to recompile from source. + if pkg.get("installed"): + _missing = [] + if _missing: + # Build a target-specific install command from the + # (os_family, backend) matrix when we know both. Fall + # back to the multi-distro hint only when the target's + # OS can't be classified (e.g. ssh probe failed). + _resolved_os = target_os_id or "debian" # safest default + _cmd = _install_cmd_for_target(_resolved_os, backend or "", _missing) + if _cmd and target_os_id: + _hint = "Missing build deps for this target: " + ", ".join(_missing) + pkg["install_cmd_for_target"] = _cmd + pkg["install_cmd_os"] = target_os_id + pkg["install_cmd_backend"] = (backend or "").lower() + else: + _hint = "Missing build deps: " + ", ".join(_missing) + ". Install via apt: cmake build-essential git / pacman: cmake base-devel git / dnf: cmake gcc-c++ make git / brew: cmake git." + _existing_note = pkg.get("status_note") or "" + pkg["status_note"] = (_existing_note + " — " + _hint) if _existing_note else _hint + pkg["build_deps_missing"] = _missing + if pkg.get("installed"): update_status = _package_pip_update_status(pkg, probe) pkg["pip_update_available"] = update_status.available @@ -1288,6 +1493,102 @@ def setup_shell_routes() -> APIRouter: return {"ok": True, "output": stdout.decode()[-200:]} return {"ok": False, "error": stderr.decode()[-300:]} + @router.post("/api/cookbook/install-system-deps") + async def install_system_deps(request: Request): + """Install OS-level system packages (cmake/build-essential/git/tmux) + on a remote target or in the local container. Admin only. + + Bounded by a per-package allowlist — anything outside the catalog + is rejected so the route can't be coerced into installing arbitrary + OS packages. Uses `sudo -n` (passwordless) so the call returns a + clear "needs sudo password" error instead of hanging when interactive + sudo is required. + """ + _require_admin(request) + body = await request.json() + raw = body.get("packages") or [] + host = (body.get("remote_host") or "").strip() + ssh_port = body.get("ssh_port") + # Names users can request — must match canonical names used in the + # deps catalog's `system_prereqs` field and on the System rows. + ALLOWED = {"cmake", "build-essential", "g++", "gcc", "git", "tmux", "make"} + pkgs = [str(p).strip() for p in raw if str(p).strip() in ALLOWED] + if not pkgs: + return {"ok": False, "error": "no installable packages requested (allowlist: " + ", ".join(sorted(ALLOWED)) + ")"} + # Re-map to the right package name per OS. apt/dpkg use the names + # as-is; pacman has base-devel for build-essential, etc. + def _apt(names): return list(names) + def _pacman(names): + return ["base-devel" if n == "build-essential" else n for n in names] + def _dnf(names): + out = [] + for n in names: + if n == "build-essential": out += ["gcc", "gcc-c++", "make"] + elif n == "g++": out += ["gcc-c++"] + else: out.append(n) + return out + def _brew(names): + return [n for n in names if n not in ("build-essential", "g++", "gcc", "make")] + # Build a single shell snippet that detects the package manager and + # runs the right install. Non-interactive sudo (-n) only — if sudo + # asks for a password the script reports it instead of hanging. + apt_pkgs = " ".join(shlex.quote(p) for p in _apt(pkgs)) + pac_pkgs = " ".join(shlex.quote(p) for p in _pacman(pkgs)) + dnf_pkgs = " ".join(shlex.quote(p) for p in _dnf(pkgs)) + brew_pkgs = " ".join(shlex.quote(p) for p in _brew(pkgs)) + # Error messages go to stderr (>&2) so the route's error field + # gets populated. Without the redirect, `echo "ERROR…"` on stdout + # left stderr empty and the frontend toast fell through to a + # bare "HTTP 200" instead of surfacing the real reason. + script = ( + 'set -e; ' + 'if ! sudo -n true 2>/dev/null; then ' + ' echo "ERROR: passwordless sudo unavailable on this target. Run once: sudo apt install -y ' + " ".join(pkgs) + ' (or your distro equivalent: pacman -S, dnf install, brew install). After that, Cookbook can install the rest." >&2; exit 2; fi; ' + 'if command -v apt-get >/dev/null 2>&1; then ' + f' sudo -n env DEBIAN_FRONTEND=noninteractive apt-get update -qq && sudo -n env DEBIAN_FRONTEND=noninteractive apt-get install -y --no-install-recommends {apt_pkgs}; ' + 'elif command -v pacman >/dev/null 2>&1; then ' + f' sudo -n pacman -Sy --needed --noconfirm {pac_pkgs}; ' + 'elif command -v dnf >/dev/null 2>&1; then ' + f' sudo -n dnf install -y {dnf_pkgs}; ' + 'elif command -v brew >/dev/null 2>&1; then ' + f' brew install {brew_pkgs}; ' + 'else ' + ' echo "ERROR: no supported package manager (apt/pacman/dnf/brew) on this target." >&2; exit 3; fi' + ) + try: + if host: + argv = _ssh_base_argv(host, ssh_port) + [script] + else: + argv = ["bash", "-lc", script] + except ValueError as e: + raise HTTPException(400, str(e)) + try: + proc = await asyncio.create_subprocess_exec( + *argv, stdout=asyncio.subprocess.PIPE, stderr=asyncio.subprocess.PIPE + ) + out, err = await asyncio.wait_for(proc.communicate(), timeout=180) + except asyncio.TimeoutError: + return {"ok": False, "error": "Install timed out after 180s"} + ok = (proc.returncode == 0) + # Combine stderr + (last lines of stdout) into a single error + # blob when ok=False — some package managers print useful failure + # context to stdout, and a script that exits via `echo ...; exit N` + # without `>&2` would otherwise hand back an empty error string + # and force the frontend to show a bare "HTTP 200". + err_txt = err.decode("utf-8", errors="replace").strip() + out_txt = out.decode("utf-8", errors="replace").strip() + if not ok: + tail_out = out_txt[-500:] if out_txt else "" + combined = err_txt or tail_out or f"exit code {proc.returncode}" + else: + combined = None + return { + "ok": ok, + "exit_code": proc.returncode, + "output": out_txt[-1000:], + "error": combined, + } + @router.post("/api/cookbook/rebuild-engine") async def rebuild_engine(request: Request): """Clear the cached llama.cpp build so the next serve recompiles. From ee6fd8ffe8321a80fee2571ef42b7a3bf6e1be4c Mon Sep 17 00:00:00 2001 From: pewdiepie-archdaemon Date: Fri, 19 Jun 2026 00:33:37 +0000 Subject: [PATCH 05/22] Cookbook UI: backend-aware env vars, always-show MoE/EP/Reasoning toggles, GPU default, Firefox-mobile expand Frontend half of the backend-detection + per-OS install command work, plus a pile of mobile/UX fixes: Backend awareness: - _gpuEnvPrefix() picks CUDA_VISIBLE_DEVICES / HIP_VISIBLE_DEVICES / nothing based on detected hwfit backend + scanned-host match (so a stale ajax scan does not leak CUDA env vars into a kierkegaard Vulkan launch). Replaces 6 hardcoded CUDA_VISIBLE_DEVICES sites. - GGML_CUDA_ENABLE_UNIFIED_MEMORY only emitted when backend is actually CUDA (was leaking onto Vulkan/ROCm via saved presets). Per-target install command: - Dep rows render a single mono command box + Copy button when the server resolved pkg.install_cmd_for_target. Reused in the build-deps install failure toast so the toast and the row show the same line. - Diagnosis patterns split cmake/g++/git out of the generic llama-cpp-python catch-all so a missing-cmake failure surfaces a cmake-specific message + per-distro Copy buttons. Form toggles always visible: - Reasoning Parser, Expert Parallel, MoE Env Vars no longer gated on model-family detection. Detection still hints (parser tag shown when matched); toggle works with sensible defaults otherwise. MiniMax M- series added to MoE family detector so the auto-fill is right. Mobile + GPU default: - Launch tab cached-list flex collapsed to 0px on mobile because the desktop `flex: 1 1 0` had no parent height to grow into. Override to `flex: 0 0 auto` in the cookbook mobile @media block. - doclib-card expand on mobile (Firefox no :has() support) pins explicit px heights so the launch form actually appears. - llama_mode defaults to gpu when hwfit detected cuda/rocm/vulkan/ metal on the current target, instead of always cpu (which was forcing -ngl 0 on first-open and burning 35GB models on CPU). --- static/js/cookbook-diagnosis.js | 46 +++- static/js/cookbook-hwfit.js | 12 +- static/js/cookbook.js | 364 +++++++++++++++++++++++++++++--- static/js/cookbookServe.js | 340 +++++++++++++++++++++++++---- static/style.css | 20 +- 5 files changed, 706 insertions(+), 76 deletions(-) diff --git a/static/js/cookbook-diagnosis.js b/static/js/cookbook-diagnosis.js index 5ac387178..200803313 100644 --- a/static/js/cookbook-diagnosis.js +++ b/static/js/cookbook-diagnosis.js @@ -461,6 +461,40 @@ export const ERROR_PATTERNS = [ { label: 'Copy install command', action: () => _copyText('curl -fsSL https://ollama.com/install.sh | sh') }, ], }, + // System build deps must be checked BEFORE the llama-server catch-all: + // a `cmake: command not found` failure ALSO produces `llama-server: + // command not found` later in the script (the build aborts then the + // run line fails) — pattern order is first-match-wins, so without + // these specific entries the user gets the misleading "install + // llama-cpp-python[server]" suggestion when the actual blocker is a + // missing OS-package toolchain that pip can't ship. + { + pattern: /cmake: command not found|cmake.*not found.*Could not/i, + message: 'cmake is required to compile llama.cpp from source, but it is not installed on this server.', + suggestion: 'Suggested action: install cmake via the OS package manager — apt: cmake build-essential / pacman: cmake base-devel / dnf: cmake gcc-c++ make / brew: cmake. Cookbook can do this automatically on the next launch if your user has passwordless sudo for apt/pacman/dnf.', + fixes: [ + { label: 'Open Dependencies', action: () => _openCookbookDependencies('llama_cpp') }, + { label: 'Copy apt install', action: () => _copyText('sudo apt install -y cmake build-essential git') }, + { label: 'Copy pacman install', action: () => _copyText('sudo pacman -Sy --needed cmake base-devel git') }, + { label: 'Copy dnf install', action: () => _copyText('sudo dnf install -y cmake gcc gcc-c++ make git') }, + ], + }, + { + pattern: /^(make|g\+\+|gcc): command not found|Could not find C\+\+ compiler/i, + message: 'A C/C++ compiler (build-essential / base-devel) is required to compile llama.cpp.', + fixes: [ + { label: 'Open Dependencies', action: () => _openCookbookDependencies('llama_cpp') }, + { label: 'Copy apt install', action: () => _copyText('sudo apt install -y build-essential') }, + ], + }, + { + pattern: /^git: command not found/i, + message: 'git is required to clone the llama.cpp source tree.', + fixes: [ + { label: 'Open Dependencies', action: () => _openCookbookDependencies('llama_cpp') }, + { label: 'Copy apt install', action: () => _copyText('sudo apt install -y git') }, + ], + }, { pattern: /llama-server.*command not found|llama\.cpp.*not found|No module named.*llama_cpp|No module named 'starlette_context'/i, message: 'llama-cpp-python server is not installed. Run: pip install "llama-cpp-python[server]"', @@ -688,11 +722,15 @@ export function _showDiagnosis(panel, diagnosis, sourceText) { copyBtn.addEventListener('click', async (e) => { e.stopPropagation(); const bundle = _diagnosisCopyBundle(task, diagnosis, sourceText, suggestionText); - try { - await navigator.clipboard.writeText(bundle); + // Use the shared helper which falls back to execCommand('copy') on + // non-HTTPS origins (Tailscale IPs, LAN IPs, etc.) — navigator.clipboard + // is silently a no-op on those, which is why the button appeared dead + // for users on http://100.113.161.2:7011 over Tailscale/mobile. + const ok = await _copyText(bundle); + if (ok) { copyBtn.classList.add('copied'); setTimeout(() => { if (copyBtn.isConnected) copyBtn.classList.remove('copied'); }, 1200); - } catch (_) {} + } }); const dismissBtn = document.createElement('button'); @@ -757,7 +795,7 @@ export function _showDiagnosis(panel, diagnosis, sourceText) { }); row.appendChild(btn); } - body.appendChild(row); + diag.appendChild(row); } } diff --git a/static/js/cookbook-hwfit.js b/static/js/cookbook-hwfit.js index 243d3c9c7..9098d8082 100644 --- a/static/js/cookbook-hwfit.js +++ b/static/js/cookbook-hwfit.js @@ -578,7 +578,9 @@ export async function _hwfitFetch(fresh = false) { const _cached = fresh ? null : _readScanCache(_sig); const wp = spinnerModule.createWhirlpool(18); if (_cached) { - _hwfitCache = _cached; + // Tag the restored cache with its host too (scan-sig keys cache per + // host, so a hit here is always for the current remoteHost). + _hwfitCache = { ..._cached, _scannedHost: remoteHost || '' }; _hwfitRenderHw(hw, _cached.system); if (!remoteHost && _cached.system && _cached.system.platform) { _envState.platform = _cached.system.platform; @@ -750,7 +752,11 @@ export async function _hwfitFetch(fresh = false) { : _olRows; data.models = (data.models || []).concat(_olFiltered); } - _hwfitCache = data; + // Tag the cache with the host this scan was for, so downstream + // code (_gpuEnvVarName, backend-aware command builders) can avoid + // trusting a stale scan when the user switches the server picker + // to a different target without re-running hwfit. + _hwfitCache = { ...data, _scannedHost: remoteHost || '' }; _hwfitRenderHw(hw, data.system); // Propagate local platform from hardware probe so _isWindows(task) works // for local tasks (menu items, shell commands, etc.). @@ -1679,7 +1685,7 @@ export function _expandModelRow(row, modelData) { } else if (runBackend === 'llamacpp') { const dir = `"$HOME/.cache/huggingface/hub/models--${modelData.name.replace(/\//g, '--')}/snapshots"`; const ggufPath = `$({ find ${dir} -name '*-00001-of-*.gguf' 2>/dev/null | sort; find ${dir} -name '*.gguf' 2>/dev/null | sort; } | head -1)`; - cmd = `MODEL_FILE=${ggufPath} && { [ -n "$MODEL_FILE" ] && [ -f "$MODEL_FILE" ]; } || { echo "ERROR: No GGUF found on this host. Download a GGUF quant or switch backend."; exit 1; } && llama-server --model "$MODEL_FILE" --host 0.0.0.0 --port 8080 -ngl 99 -c ${maxCtx} || python3 -m llama_cpp.server --model "$MODEL_FILE" --host 0.0.0.0 --port 8080 --n_gpu_layers 99 --n_ctx ${maxCtx}`; + cmd = `llama-server --model "${ggufPath}" --host 0.0.0.0 --port 8080 -ngl 99 -c ${maxCtx} --flash-attn auto`; } else { cmd = `vllm serve ${modelData.name} --host 0.0.0.0 --port ${port}`; cmd += ` --tensor-parallel-size ${tp}`; diff --git a/static/js/cookbook.js b/static/js/cookbook.js index 81acc9e0d..3aaa70465 100644 --- a/static/js/cookbook.js +++ b/static/js/cookbook.js @@ -259,6 +259,15 @@ function _detectModelOptimizations(modelName) { opts.kvCacheDtype = 'fp8'; opts.tips.push('fp8 KV cache required — bf16 OOMs at usable context'); } + // MiniMax MoE — Abab/M1/M2/M2.5/M2.7 are all MoE (Lightning Attention + + // MoE in M1, full sparse MoE from M2 onward). They benefit from the + // same --enable-expert-parallel flag as the Qwen/DeepSeek families, + // and the toggle has to be detectable here for the Expert Parallel + // checkbox in the serve form to render at all. + else if (n.includes('minimax')) { + opts.flags.push('--enable-expert-parallel'); + opts.tips.push('MoE expert parallel for MiniMax'); + } // Reasoning parser — applies independently of MoE detection. Without this // flag, models like MiniMax-M2.x, DeepSeek-R1, Qwen3 reasoning, GLM-4.x, // gpt-oss leak blocks as plain text instead of separating them @@ -419,6 +428,38 @@ export function _psQuote(value) { return "'" + String(value ?? '').replace(/'/g, "''") + "'"; } +// Pick the GPU-pinning env-var name for the detected backend. NVIDIA uses +// CUDA_VISIBLE_DEVICES; ROCm/HIP uses HIP_VISIBLE_DEVICES; Vulkan and +// Apple Metal don't take an index env var at all (and CUDA_VISIBLE_DEVICES +// is a silent no-op on those, which silently hides "wrong backend" config +// bugs). Returns 'cmd ' style prefix ('CUDA_VISIBLE_DEVICES=0 ') or '' when +// the backend doesn't support pinning. Pass isWindows=true to get PowerShell +// `$env:` syntax instead. backend defaults to whatever hwfit detected. +function _gpuEnvVarName() { + // Only emit a pinning env var when we POSITIVELY know the backend AND + // the hwfit scan was actually run against the currently-targeted host. + // Without the target-match guard, switching the server picker from an + // NVIDIA box (cuda) to a local/Vulkan target preserved the stale + // `cuda` backend in the cache, leaking `CUDA_VISIBLE_DEVICES=` into + // launches that don't have an NVIDIA GPU at all. Default to "" when + // unsure — the user sees a clean command and is prompted to scan. + const cachedHost = String(_hwfitCache?._scannedHost || ''); + const currentHost = String(_envState.remoteHost || ''); + if (cachedHost !== currentHost) return ''; + const sb = String(_hwfitCache?.system?.backend || '').toLowerCase(); + if (sb === 'cuda') return 'CUDA_VISIBLE_DEVICES'; + if (sb === 'rocm') return 'HIP_VISIBLE_DEVICES'; + return ''; // vulkan / metal / mps / apple / cpu / generic / unknown — no env-var pinning +} +function _gpuEnvPrefix(gpuId, isWindows = false) { + const id = String(gpuId || '').trim(); + if (!id) return ''; + const varName = _gpuEnvVarName(); + if (!varName) return ''; + if (isWindows) return `$env:${varName}="${id}"; `; + return `${varName}=${id} `; +} + export function _buildEnvPrefix() { if (_isWindows()) return _buildEnvPrefixWindows(); let parts = []; @@ -431,7 +472,8 @@ export function _buildEnvPrefix() { } let envVars = []; if (_envState.hfToken) envVars.push('export HF_TOKEN=' + _shellQuote(_envState.hfToken)); - if (_envState.gpus) envVars.push('export CUDA_VISIBLE_DEVICES=' + _shellQuote(_envState.gpus)); + const _envGpuVar = _gpuEnvVarName(); + if (_envState.gpus && _envGpuVar) envVars.push(`export ${_envGpuVar}=` + _shellQuote(_envState.gpus)); if (envVars.length) parts.push(envVars.join(' && ')); if (parts.length === 0) return ''; return parts.join(' && ') + ' &&'; @@ -447,7 +489,8 @@ function _buildEnvPrefixWindows() { parts.push('conda activate ' + _psQuote(_envState.envPath)); } if (_envState.hfToken) parts.push('$env:HF_TOKEN=' + _psQuote(_envState.hfToken)); - if (_envState.gpus) parts.push('$env:CUDA_VISIBLE_DEVICES=' + _psQuote(_envState.gpus)); + const _winGpuVar = _gpuEnvVarName(); + if (_envState.gpus && _winGpuVar) parts.push(`$env:${_winGpuVar}=` + _psQuote(_envState.gpus)); if (parts.length === 0) return ''; return parts.join('; ') + ';'; } @@ -468,10 +511,18 @@ export function _buildServeCmd(f, modelName, backend) { // the bare "auto" input that used to back gpu_id is gone, and the // button strip is the only source for which devices to pin. const gpuId = (f.gpus || f.gpu_id || '').toString().trim(); - if (gpuId) cmd += `CUDA_VISIBLE_DEVICES=${gpuId} `; + cmd += _gpuEnvPrefix(gpuId); if (f.moe_env) { const _opts = _detectModelOptimizations(modelName); - if (_opts.envVars.length) cmd += _opts.envVars.join(' ') + ' '; + if (_opts.envVars.length) { + cmd += _opts.envVars.join(' ') + ' '; + } else { + // Fallback when the user toggles MoE Env on for a model the + // family detector didn't classify as MoE — emit the generic + // vLLM MoE optimization env vars so the toggle is never a + // silent no-op (was the case before the "always show" change). + cmd += 'VLLM_USE_DEEP_GEMM=0 VLLM_USE_FLASHINFER_MOE_FP16=1 OMP_NUM_THREADS=4 '; + } } // Pinned attention backend (Attention field). Empty = let vLLM pick. const _attn = (f.vllm_attn_backend ?? '').toString().trim(); @@ -513,7 +564,7 @@ export function _buildServeCmd(f, modelName, backend) { // the bare "auto" input that used to back gpu_id is gone, and the // button strip is the only source for which devices to pin. const gpuId = (f.gpus || f.gpu_id || '').toString().trim(); - if (gpuId) cmd += `CUDA_VISIBLE_DEVICES=${gpuId} `; + cmd += _gpuEnvPrefix(gpuId); const _extraEnv = (f.extra_env ?? '').toString().replace(/\s+/g, ' ').trim(); if (_extraEnv) cmd += _extraEnv + ' '; cmd += `${_py3Bin} -m sglang.launch_server --model-path ${modelName} --host 0.0.0.0 --port ${f.port || '30000'}`; @@ -536,24 +587,39 @@ export function _buildServeCmd(f, modelName, backend) { // CPU-only serve (-ngl 0): drop the GPU-only flags, otherwise the command // mixes "zero GPU layers" with CUDA unified-memory + flash-attn and fails to // start (issue #1291). Only affects the ngl=0 path; GPU serving is unchanged. + // The Inference mode pill (GPU/CPU) above gates this — when the user picks + // CPU, force ngl=0 here so all downstream flag-suppression fires + // consistently regardless of what the (now-hidden) ngl input shows. + if (String(f.llama_mode || '').toLowerCase() === 'cpu') { + f.ngl = '0'; + } else if (String(f.llama_mode || '').toLowerCase() === 'gpu' && (!f.ngl || String(f.ngl).trim() === '0')) { + f.ngl = '99'; + } const _cpuOnly = String(f.ngl).trim() === '0'; + // GGML_CUDA_* env vars are no-ops on Vulkan/ROCm/Metal/CPU. Only emit + // them when the detected backend is actually CUDA AND the hwfit scan + // was run against the currently-targeted host, so a saved preset + // from a prior NVIDIA target doesn't pollute a non-NVIDIA launch + // with misleading prefixes. + const _sb = String(_hwfitCache?.system?.backend || '').toLowerCase(); + const _hwfitHost = String(_hwfitCache?._scannedHost || ''); + const _curHost = String(_envState.remoteHost || ''); + const _isCudaTarget = (_sb === 'cuda') && (_hwfitHost === _curHost); const lcPrefix = (() => { let p = ''; - if (f.unified_mem && !_cpuOnly && !_isWindows()) p += `GGML_CUDA_ENABLE_UNIFIED_MEMORY=1 `; - if (gpuId && !_isWindows()) p += `CUDA_VISIBLE_DEVICES=${gpuId} `; + if (f.unified_mem && !_cpuOnly && !_isWindows() && _isCudaTarget) p += `GGML_CUDA_ENABLE_UNIFIED_MEMORY=1 `; + // No GPU env var in CPU mode — `-ngl 0` already disables offload + // so CUDA_VISIBLE_DEVICES / HIP_VISIBLE_DEVICES would be misleading + // clutter ("why is CUDA pinned for a CPU run?"). + if (!_isWindows() && !_cpuOnly) p += _gpuEnvPrefix(gpuId); return p; })(); - if (f.unified_mem && !_cpuOnly && _isWindows()) cmd += `$env:GGML_CUDA_ENABLE_UNIFIED_MEMORY="1"; `; - if (gpuId && _isWindows()) cmd += `$env:CUDA_VISIBLE_DEVICES="${gpuId}"; `; - if (!_isWindows()) { - // Resolve GGUF path once, fail loudly if nothing matched (prevents - // `--model ""` which causes confusing downstream errors). - cmd += `MODEL_FILE=${ggufPath} && { [ -n "$MODEL_FILE" ] && [ -f "$MODEL_FILE" ]; } || { echo "ERROR: No GGUF found on this host. Either download the model here, or switch to the server where it's cached."; exit 1; } && `; - } - const modelArg = _isWindows() ? `"${ggufPath}"` : `"$MODEL_FILE"`; - // Prefer the native llama-server binary on Linux — its minja templating - // renders modern GGUF chat templates that the Python bindings' Jinja2 - // rejects (do_tojson ensure_ascii). Fall back to llama_cpp.server. + if (f.unified_mem && !_cpuOnly && _isWindows() && _isCudaTarget) cmd += `$env:GGML_CUDA_ENABLE_UNIFIED_MEMORY="1"; `; + if (_isWindows() && !_cpuOnly) cmd += _gpuEnvPrefix(gpuId, true); + const modelArg = `"${ggufPath}"`; + // Prefer native llama-server. The backend bootstrap resolves/builds the + // right binary (Vulkan/HIP/CUDA/Metal/CPU), so keep the generated command + // as a validator-safe binary + args with no shell chaining. // Don't suppress stderr — surface real errors (missing file, lib, OOM). // Optional perf/fit flags from a hardware profile (see services/hwfit/ // profiles.py). n_cpu_moe offloads MoE expert layers to CPU when the model @@ -575,9 +641,16 @@ export function _buildServeCmd(f, modelName, backend) { _lcExtra += ` --n-cpu-moe ${_ncm}`; _lcpExtra += ` --n_cpu_moe ${_ncm}`; // llama-cpp-python uses underscores } + // Flash-attn default = auto: native llama-server picks whether to + // enable based on the build/model; explicit ON (the Flash-attn + // toggle in the form) forces it. "auto" is a meaningful arg, not + // omission — older builds without flash-attn ignore it cleanly, + // newer ones get the speedup without the user having to know. if (f.flash_attn && !_cpuOnly) { _lcExtra += ' --flash-attn on'; _lcpExtra += ' --flash_attn true'; + } else if (!_cpuOnly) { + _lcExtra += ' --flash-attn auto'; } if (_kv) { _lcExtra += ` --cache-type-k ${_kv} --cache-type-v ${_kv}`; @@ -613,12 +686,11 @@ export function _buildServeCmd(f, modelName, backend) { // llama-cpp-python takes the projector via --clip_model_path. _lcpExtra += ` --clip_model_path "${f._mmproj_path}"`; } - const _lcpServer = `${lcPrefix}${py} -m llama_cpp.server --model ${modelArg} --host 0.0.0.0 --port ${f.port || '8080'} --n_gpu_layers ${f.ngl || '99'} --n_ctx ${f.ctx || '8192'}${_lcpExtra}`; if (_isWindows()) { + const _lcpServer = `${lcPrefix}${py} -m llama_cpp.server --model ${modelArg} --host 0.0.0.0 --port ${f.port || '8080'} --n_gpu_layers ${f.ngl || '99'} --n_ctx ${f.ctx || '8192'}${_lcpExtra}`; cmd += _lcpServer; } else { cmd += `${lcPrefix}llama-server --model ${modelArg} --host 0.0.0.0 --port ${f.port || '8080'} -ngl ${f.ngl || '99'} -c ${f.ctx || '8192'}${_lcExtra}`; - cmd += ` || ${_lcpServer}`; } } else if (backend === 'ollama') { const ollamaPort = f.port || '11434'; @@ -652,7 +724,7 @@ export function _buildServeCmd(f, modelName, backend) { } } else if (backend === 'diffusers') { const gpuStr = f.gpus?.trim(); - if (gpuStr) cmd += `CUDA_VISIBLE_DEVICES=${gpuStr} `; + cmd += _gpuEnvPrefix(gpuStr); const diffusersPy = _isWindows() ? 'python' : _py3Bin; cmd += `${diffusersPy} scripts/diffusion_server.py --model ${modelName} --port ${f.port || '8100'}`; if (f.diff_dtype && f.diff_dtype !== 'bfloat16') cmd += ` --dtype ${f.diff_dtype}`; @@ -771,6 +843,14 @@ async function _fetchDependencies() { if (_depPort) _pkgParams.set('ssh_port', _depPort); if (_depVenv) _pkgParams.set('venv', _depVenv); } + // Pass the detected backend so the server can build a single + // OS+backend-aware install command per row (e.g. add nvidia-cuda-toolkit + // on a CUDA-Debian box, vulkan-headers on a Vulkan-Arch box, etc.) + // instead of dumping every distro's syntax as a hint. + const _depBackend = String(_hwfitCache?.system?.backend || '').toLowerCase(); + if (_depBackend && _hwfitCache?._scannedHost === _depHost) { + _pkgParams.set('backend', _depBackend); + } const resp = await fetch('/api/cookbook/packages' + (_pkgParams.toString() ? '?' + _pkgParams.toString() : '')); const data = await resp.json(); const pkgs = data.packages || []; @@ -832,18 +912,61 @@ async function _fetchDependencies() { // For backends with a recipe catalog (vllm / sglang / llama_cpp), // append a caret button that toggles a per-row recipe panel below. const hasRecipe = RECIPE_BACKENDS.has(pkg.name); - const recipeCaret = hasRecipe - ? `` - : ''; + // Standalone recipe-caret button removed — the "Pick install + // command" action lives inside the Installed ▾ dropdown menu + // (see _showDepMenu) so each row only has ONE caret to click. + // Kept the variable so downstream concat code stays the same. + const recipeCaret = ''; const recipePanel = hasRecipe ? _recipePanelHtml(pkg.name) : ''; + // When llama_cpp (or any future engine) reports build_deps_missing + // from its system_prereqs probe, surface a one-tap install button + // that fires the OS package manager on the target via + // /api/cookbook/install-system-deps. Keeps the user inside Cookbook + // instead of forcing them out to a shell to apt/pacman/dnf. + const _bdm = Array.isArray(pkg.build_deps_missing) ? pkg.build_deps_missing : []; + const _buildDepsBtn = _bdm.length + ? `` + : ''; + // Render the target-specific install command as a compact mono box + // when the server resolved it (target's /etc/os-release was readable + // AND the backend is known). The box doubles as the source of truth + // for the "Install build deps" button's failure toast — both surfaces + // show the same string for the same target. + const _instCmd = (_bdm.length && pkg.install_cmd_for_target) ? String(pkg.install_cmd_for_target) : ''; + const _instCmdOs = pkg.install_cmd_os ? String(pkg.install_cmd_os) : ''; + const _instCmdBe = pkg.install_cmd_backend ? String(pkg.install_cmd_backend) : ''; + const _instLabel = (_instCmdOs && _instCmdBe) ? `${_instCmdOs} + ${_instCmdBe}` : (_instCmdOs || _instCmdBe || 'this target'); + const _instCmdBox = _instCmd + ? `
` + + `
Install on ${esc(_instLabel)}:
` + + `
` + + `${esc(_instCmd)}` + + `` + + `
` + : ''; + // Partial-state row (replaces the cryptic yellow "Partial ▾" tag). + // Renders inline as a yellow banner with two clear actions: one-tap + // Install (runs the reinstall in cookbook) or Copy command (paste + // into a terminal). Same content surfaces whether the user solves + // it from inside Cookbook or from a shell. + const _gpuWheelCmd = 'CMAKE_ARGS="-DGGML_CUDA=on" python3 -m pip install --user --break-system-packages --force-reinstall --no-cache-dir "llama-cpp-python[server]" --extra-index-url https://abetlen.github.io/llama-cpp-python/whl/cu124'; + const _gpuUpgradeBox = (pkg.partial && pkg.partial_action === 'reinstall_llama_cpp_cuda') + ? `
` + + `Installed CPU-only — GPU detected on this target. Upgrade for ~10× faster inference.` + + `` + + `` + + `
` + : ''; return `
` + `
` + `
${_depGlyphHtml(pkg.name)}${esc(pkg.name)}
` + `
${esc(pkg.desc)}
` + note + updateNote + + _instCmdBox + `
` + _rebuildBtn + + _buildDepsBtn + `${esc(pkg.category)}` + _statusTag(pkg, isLocal, isSystemDep, winBlocked) + recipeCaret @@ -985,8 +1108,15 @@ async function _fetchDependencies() { if (!res.ok || !data.ok) { // FastAPI HTTPException returns {detail: …}; the route's own // path returns {ok:false, error:…}. Surface whichever we get. + // Long duration + an OK button — the default 1.2s toast was + // disappearing before the user could read multi-clause errors + // like "tmux missing on remote". const reason = data.detail || data.error || `HTTP ${res.status}`; - uiModule.showToast('Install failed: ' + String(reason).slice(0, 200)); + uiModule.showToast('Install failed: ' + String(reason).slice(0, 400), { + duration: 20000, + action: 'OK', + onAction: () => {}, + }); return; } // _dep flags this as a pip dependency/driver install (not a servable @@ -996,12 +1126,16 @@ async function _fetchDependencies() { if (statusEl) { statusEl.textContent = upgrade ? 'Updating...' : 'Installing...'; statusEl.disabled = true; } uiModule.showToast(`${upgrade ? 'Updating' : 'Installing'} ${pkgName} on ${targetHost}...`); } catch (err) { - uiModule.showToast('Install failed: ' + err.message); + uiModule.showToast('Install failed: ' + err.message, { + duration: 20000, + action: 'OK', + onAction: () => {}, + }); } } // Wire install buttons (not-installed packages) - list.querySelectorAll('.cookbook-dep-install:not(.cookbook-dep-recipe-run)').forEach(btn => { + list.querySelectorAll('.cookbook-dep-install:not(.cookbook-dep-recipe-run):not(.cookbook-dep-install-sysdeps)').forEach(btn => { btn.addEventListener('click', async (e) => { e.stopPropagation(); const pipName = btn.dataset.depPip; @@ -1010,6 +1144,143 @@ async function _fetchDependencies() { }); }); + // Wire "Install build deps" buttons — surfaced on rows whose + // system_prereqs are missing (e.g. llama_cpp with no cmake on the + // target). One-tap call to /api/cookbook/install-system-deps; the + // route enforces a per-package allowlist and uses passwordless + // sudo only, so it can never silently hang or stretch beyond the + // build-toolchain set the catalog declares. + // "Partial ▾" upgrade tag: clicking it fires the action-specific + // install routine (currently only `reinstall_llama_cpp_cuda` — + // forces pip install with the abetlen CUDA wheel index to add GPU + // offload). Same install flow used at launch-time auto-fix, but + // user-initiated here so they don't have to launch + wait + retry. + list.querySelectorAll('.cookbook-dep-partial').forEach(btn => { + btn.addEventListener('click', async (e) => { + e.stopPropagation(); + const action = btn.dataset.depPartialAction || ''; + if (action !== 'reinstall_llama_cpp_cuda') return; + const isLocal = btn.dataset.depTarget === 'local'; + if (!isLocal) { + const depsServerSel = document.getElementById('hwfit-deps-server'); + if (depsServerSel) _applyServerSelection(depsServerSel.value); + } + const targetLabel = isLocal ? 'this server' : (_envState.remoteHost || 'remote'); + const cmd = 'CMAKE_ARGS="-DGGML_CUDA=on" python3 -m pip install --user --break-system-packages --force-reinstall --no-cache-dir "llama-cpp-python[server]" --extra-index-url https://abetlen.github.io/llama-cpp-python/whl/cu124'; + try { + const reqBody = { + repo_id: 'llama-cpp-python-cuda', + cmd, + remote_host: _envState.remoteHost || undefined, + ssh_port: _getPort(_envState.remoteHost) || undefined, + platform: _envState.platform || undefined, + }; + const res = await fetch('/api/model/serve', { + method: 'POST', credentials: 'same-origin', + headers: { 'Content-Type': 'application/json' }, + body: JSON.stringify(reqBody), + }); + const data = await res.json().catch(() => ({})); + if (res.ok && data.ok) { + const payload = { repo_id: 'pip llama-cpp-python[CUDA]', _cmd: cmd, remote_host: _envState.remoteHost || '', _dep: true }; + _addTask(data.session_id, 'pip llama-cpp-python[CUDA]', 'download', payload); + uiModule.showToast(`Reinstalling llama-cpp-python with CUDA wheels on ${targetLabel} (~1-3 min)…`, 4000); + } else { + uiModule.showToast('Upgrade failed: ' + String(data.detail || data.error || `HTTP ${res.status}`).slice(0, 300), { + duration: 20000, action: 'OK', onAction: () => {}, + }); + } + } catch (err) { + uiModule.showToast('Upgrade request failed: ' + err.message, { duration: 20000, action: 'OK', onAction: () => {} }); + } + }); + }); + + // Inline command-box "Copy" buttons — one per row that has a + // resolved per-target install command. Same string surfaces here + // and in the toast/diagnosis so the user always sees one answer. + list.querySelectorAll('.cookbook-dep-cmd-copy').forEach(btn => { + btn.addEventListener('click', async (e) => { + e.stopPropagation(); + const cmd = btn.dataset.depCmdCopy || ''; + if (!cmd) return; + try { await navigator.clipboard.writeText(cmd); } + catch { /* fall through */ } + const orig = btn.textContent; + btn.textContent = 'Copied'; + setTimeout(() => { if (btn.isConnected) btn.textContent = orig; }, 1200); + }); + }); + list.querySelectorAll('.cookbook-dep-install-sysdeps').forEach(btn => { + btn.addEventListener('click', async (e) => { + e.stopPropagation(); + const names = (btn.dataset.depSysdeps || '').split(',').map(s => s.trim()).filter(Boolean); + if (!names.length) return; + const isLocal = btn.dataset.depTarget === 'local'; + // Pull the per-target install command from the sibling box on + // the same row, so failure toasts surface the SAME line the + // user already sees inline. No duplicated formatting logic. + const _row = btn.closest('.cookbook-dep-row'); + const _cmdBox = _row?.querySelector('.cookbook-dep-install-cmd'); + const _resolvedCmd = _cmdBox?.dataset.depCmd || ''; + // Mirror _installDep: the Dependencies tab has its own server + // picker that can override _envState. Apply it before reading + // remoteHost, otherwise the install silently runs on the wrong + // target (container ends up with the packages, the real remote + // host stays broken, success toast misleads the user). + if (!isLocal) { + const depsServerSel = document.getElementById('hwfit-deps-server'); + if (depsServerSel) _applyServerSelection(depsServerSel.value); + } + const targetLabel = isLocal ? 'this server' : (_envState.remoteHost || 'remote'); + const origText = btn.textContent; + btn.textContent = 'Installing…'; + btn.disabled = true; + try { + const body = { packages: names }; + if (!isLocal && _envState.remoteHost) { + body.remote_host = _envState.remoteHost; + const _p = _getPort(_envState.remoteHost); + if (_p) body.ssh_port = _p; + } + const res = await fetch('/api/cookbook/install-system-deps', { + method: 'POST', credentials: 'same-origin', + headers: { 'Content-Type': 'application/json' }, + body: JSON.stringify(body), + }); + const data = await res.json().catch(() => ({})); + if (res.ok && data.ok) { + uiModule.showToast(`Installed ${names.join(', ')} on ${targetLabel}. Refreshing…`, 4000); + // Refresh the deps panel so the row updates (prereqs now present). + try { await _fetchDependencies(); } catch {} + } else { + const reason = data.error || data.detail || `HTTP ${res.status}`; + // Append the per-target install command (if we already know it + // from the row) so the user can copy-paste it without leaving + // the toast. Otherwise just surface the error. + const _suffix = _resolvedCmd ? `\n\nRun on ${targetLabel}: ${_resolvedCmd}` : ''; + uiModule.showToast('Build-deps install failed: ' + String(reason).slice(0, 300) + _suffix, { + duration: 25000, + action: _resolvedCmd ? 'Copy command' : 'OK', + onAction: async () => { + if (_resolvedCmd) { + try { await navigator.clipboard.writeText(_resolvedCmd); } catch {} + } + }, + }); + btn.textContent = origText; + btn.disabled = false; + } + } catch (err) { + uiModule.showToast('Install request failed: ' + err.message, { + duration: 20000, action: 'OK', onAction: () => {}, + }); + btn.textContent = origText; + btn.disabled = false; + } + }); + }); + // ── Recipe panel wiring (per-backend dropdown with model + commands) ── // Caret toggle: shows/hides the panel directly below the backend row. list.querySelectorAll('[data-dep-recipe-toggle]').forEach(btn => { @@ -1577,8 +1848,22 @@ function _wireTabEvents(body) { if (dlBtn && dlInput) { function _stripHfUrl(input) { let repo = input.trim(); + // Strip a leading `hf download` / `hf-cli download` / `huggingface-cli + // download` wrapper so a paste from CLI docs Just Works. Drop the + // command prefix; the rest is parsed by the existing strippers. + repo = repo.replace(/^(?:huggingface-cli|hf-cli|hf)\s+(?:download|d)\s+/i, ''); + // Strip the `hf://` (and `huggingface://`) scheme — the HF CLI + // accepts it as an alias and users naturally copy it. Same effect + // as the bare `org/repo[/file.gguf]` form after the strip. + repo = repo.replace(/^(?:hf|huggingface):\/\//i, ''); // Strip Ollama-style "hf.co/" prefix if present (e.g. hf.co/unsloth/...:tag) repo = repo.replace(/^hf\.co\//, ''); + // Full HF blob/resolve URL → turn into `org/repo/path/to/file` so + // the downstream `_splitRepoFile` can pick the file out. + // Matches: https://huggingface.co/org/repo/blob/branch/path/to/file.gguf + // https://huggingface.co/org/repo/resolve/branch/path/to/file.gguf + const hfBlob = repo.match(/^https?:\/\/huggingface\.co\/([^/]+\/[^/?#]+)\/(?:blob|resolve)\/[^/?#]+\/([^?#]+)/); + if (hfBlob) return `${hfBlob[1]}/${hfBlob[2]}`; const hfMatch = repo.match(/^https?:\/\/huggingface\.co\/([^/]+\/[^/?#]+(?::[^/?#\s]+)?)/); if (hfMatch) repo = hfMatch[1]; return repo; @@ -1590,6 +1875,22 @@ function _wireTabEvents(body) { if (!m) return { repo: raw, include: null }; return { repo: m[1], include: `*${m[2]}*` }; } + // Split `org/repo/path/to/file.gguf` (or `.safetensors`/`.bin`) into + // repo + exact file include. Lets the user paste a path straight out + // of a HuggingFace "Files and versions" page or a copied filename + // without needing to peel the repo/file apart by hand. Returns null + // when the input doesn't look like a deep file path. + function _splitRepoFile(raw) { + // Must have at least 3 slash-separated segments AND end in a + // model-file extension to avoid eating Ollama tags or repo-only + // inputs like `org/repo`. + const parts = raw.split('/'); + if (parts.length < 3) return null; + const fname = parts[parts.length - 1]; + if (!/\.(gguf|safetensors|bin|pt|pth|onnx|mlx)(\?[^?]*)?$/i.test(fname)) return null; + const repo = parts.slice(0, 2).join('/'); + return { repo, include: fname.replace(/\?.*$/, '') }; + } // Ollama-library name. Matches `qwen2.5:14b`, `llama3:latest`, and the // (rare) `library/:` form which we normalize by stripping the // namespace. The backend's _is_ollama_download check expects the same @@ -1605,7 +1906,14 @@ function _wireTabEvents(body) { const rawRepo = _stripHfUrl(dlInput.value); if (!rawRepo) return; const ollamaName = _ollamaName(rawRepo); - const { repo, include: autoInclude } = ollamaName ? { repo: ollamaName, include: null } : _splitRepoTag(rawRepo); + // Prefer the deep-file split (org/repo/file.gguf → repo + exact + // include) over the tag split (org/repo:tag → glob include), and + // both over the plain repo case. Ollama names still take priority + // since they go through a different backend. + const _fileSplit = !ollamaName ? _splitRepoFile(rawRepo) : null; + const { repo, include: autoInclude } = ollamaName + ? { repo: ollamaName, include: null } + : (_fileSplit || _splitRepoTag(rawRepo)); // HuggingFace repo IDs must be `org/model`. A bare model name would 404 // at snapshot_download time with a raw traceback, so reject it up front. // Ollama names (single-segment with a tag) skip this check — they go diff --git a/static/js/cookbookServe.js b/static/js/cookbookServe.js index f3b5842b2..aba3f7926 100644 --- a/static/js/cookbookServe.js +++ b/static/js/cookbookServe.js @@ -10,6 +10,7 @@ import { providerLogo } from './providers.js'; import { modelColor } from './chatRenderer.js'; import { bindMenuDismiss, dismissOrRemove } from './escMenuStack.js'; import { openCookbookDependencies } from './cookbook-diagnosis.js'; +import { _hwfitCache } from './cookbook-hwfit.js'; // Shared state/functions injected by init() let _envState; @@ -495,6 +496,7 @@ function _rerenderCachedModels() { item.classList.remove('doclib-card-expanded'); item.style.flexDirection = ''; item.style.alignItems = ''; + item.style.maxHeight = ''; list.style.minHeight = ''; list.style.maxHeight = ''; return; @@ -508,6 +510,7 @@ function _rerenderCachedModels() { c.classList.remove('doclib-card-expanded'); c.style.flexDirection = ''; c.style.alignItems = ''; + c.style.maxHeight = ''; }); const shortName = repo.split('/').pop(); @@ -620,13 +623,31 @@ function _rerenderCachedModels() { // stays as the source-of-truth so every existing change handler // (updateBackendVisibility, runtime readiness, command builder) // still fires via dispatchEvent('change') on selection. - panelHtml += ``; + panelHtml += ``; panelHtml += ``; + // Inference mode pill (llama.cpp only) — lives directly to the + // RIGHT of Backend in Row 1 so the engine and the GPU/CPU choice + // are read together. .hwfit-backend-llamacpp visibility class + // hides it when the user switches to vLLM/SGLang/Ollama. + { + // Default CPU — works on every host without GPU/wheel matching + // hassle. User picks GPU explicitly if they have the right setup + // (avoids "click Launch → silent CPU fallback because the wheel + // is CPU-only" surprises that ate hours of debugging). + // Layout: CPU on left, GPU on right → mode-right triggers when + // GPU is selected so the sliding pill animates rightward. + // Default to GPU mode when hwfit detected a GPU backend on the + // current target — CPU as a global default sent the user down a + // 35GB-model-on-CPU rabbit hole (-ngl 0, no flash-attn, no GPU + // offload). Falls back to CPU only when hwfit detected no GPU + // (cpu_x86 / generic / unscanned) or the cache is stale. + const _hwBackend = String(_hwfitCache?.system?.backend || '').toLowerCase(); + const _hwScanMatch = String(_hwfitCache?._scannedHost || '') === String(_envState.remoteHost || ''); + const _llamaModeDefault = (_hwScanMatch && ['cuda', 'rocm', 'vulkan', 'metal', 'mps', 'apple'].includes(_hwBackend)) ? 'gpu' : 'cpu'; + const _llamaMode = sv('llama_mode', _llamaModeDefault); + panelHtml += ``; + } panelHtml += ``; - // Dtype lives in Row 1 (next to venv) — it's the first knob people - // change when matching the model to the box, so it earns top-row - // real estate over Row 2's launch-tuning controls. - panelHtml += ``; const defaultPort = defaultBackend === 'ollama' ? '11434' : _nextAvailablePort(); panelHtml += ``; const _activeGpus = (defaultGpus || '').split(',').map(s => s.trim()).filter(Boolean); @@ -642,7 +663,7 @@ function _rerenderCachedModels() { // separates the GPU chiclets from the GPU Mem field that follows // (asked-for breathing room; 4px on either side felt cramped on // the GPU-Mem boundary). - const _gpusLabelHtml = ``; + const _gpusLabelHtml = ``; // Save / saved-configs split button — sits at the right end of Row 1. panelHtml += _slotsHtml; panelHtml += `
`; @@ -664,10 +685,12 @@ function _rerenderCachedModels() { // (Swap, KV Cache, Attention backend, Env vars, llama.cpp batch/ubatch) // moved to the Advanced fold below to keep this row scannable. panelHtml += `
`; - // Order: TP → Context → Max Seqs → GPUs → GPU Mem. - // Dtype moved up to Row 1. GPUs moved here next to GPU Mem so the - // "which devices + how much of them" decisions sit adjacent. Max - // Seqs follows Context per the "request-shape" cluster. + // Order: Dtype → TP → Context → Max Seqs → GPUs → GPU Mem. + // Dtype moved down from Row 1 to make space for the Inference pill + // (llama.cpp GPU/CPU toggle, llamacpp-only). GPUs lives next to + // GPU Mem so "which devices + how much" sit adjacent. Max Seqs + // follows Context per the "request-shape" cluster. + panelHtml += ``; panelHtml += ``; // ctx resets to the model's max on every panel open (the real ctx slider // lives in the Scan/Download toolbar — see cookbook.js .hwfit-ctx-control). @@ -711,12 +734,6 @@ function _rerenderCachedModels() { // container — left an empty trailing column gap on wide modals). panelHtml += ``; panelHtml += `
`; - // Advanced llama.cpp row (Batch / UBatch — moved out of Core for the - // same "rarely touched" reason as the vLLM extras above). - panelHtml += `
`; - panelHtml += ``; - panelHtml += ``; - panelHtml += `
`; // Row 2b: Diffusers settings const diffDtypeOpts = ['bfloat16','float16','float32'].map(d => ``).join(''); const deviceMapOpts = ['balanced','auto','sequential'].map(d => ``).join(''); @@ -740,13 +757,19 @@ function _rerenderCachedModels() { panelHtml += `
`; panelHtml += ``; panelHtml += ``; - if (_rp_name) panelHtml += ``; + // Always-render the Reasoning Parser, Expert Parallel, and MoE Env + // checkboxes — the model-family detection above is a hint, not a + // hard gate. User asked to keep these visible regardless so that + // a borderline-undetected MoE/reasoning model can still toggle + // them without dropping back to the raw command box. + panelHtml += ``; panelHtml += ``; panelHtml += ``; // Inline the previously-second vLLM checks row so Expert Parallel / // Speculative / MoE Env sit next to Prefix Caching with no gap. All - // three are vLLM-only — class-gated so they hide on SGLang. - if (_opts2_row3.flags.includes('--enable-expert-parallel')) panelHtml += ``; + // three are vLLM-only — class-gated so they hide on SGLang. Always + // render so the user can flip them on for any MoE model. + panelHtml += ``; { const _specDef = _opts2_row3.spec || { method: 'mtp', tokens: 3 }; const _specMethod = sv('spec_method', _specDef.method); @@ -757,27 +780,39 @@ function _rerenderCachedModels() { ``).join(''); panelHtml += ``; } - if (_opts2_row3.envVars.length) panelHtml += ``; + // Always-render MoE Env Vars — the env vars dict is empty for + // most dense models (toggle is a no-op then), but for MoE families + // the user can still flip it on without re-fitting model detection. + panelHtml += ``; panelHtml += `
`; - // Row 2c: llama.cpp fit/perf flags (set by Auto profiles, editable by hand) + // ── llama.cpp Advanced — grouped by purpose ── + // Three clean field rows + one checkbox row, all selects/inputs the + // same 28px height (no per-field `top:-Npx` nudges). Groups follow + // user mental model: (1) where it runs on GPU, (2) how memory is + // shaped, (3) how requests are batched, (4) on/off toggles. const _kvOpts = ['', 'q4_0', 'q8_0', 'f16'].map(k => ``).join(''); const llamaFitOpts = ['', 'off', 'on'].map(d => ``).join(''); const llamaSplitModeOpts = ['', 'layer', 'tensor', 'row', 'none'].map(d => ``).join(''); + + // Group 1 — GPU placement (GPU-only, hides in CPU mode) + panelHtml += `
`; + panelHtml += ``; + panelHtml += ``; + panelHtml += ``; + panelHtml += `
`; + + // Group 2 — Memory tuning (KV cache + MoE-on-CPU + Fit policy) panelHtml += `
`; - panelHtml += ``; - panelHtml += ``; - panelHtml += ``; - panelHtml += ``; + panelHtml += ``; + panelHtml += ``; panelHtml += ``; panelHtml += `
`; - // Row 2d: native llama-server placement/runtime controls. These are - // explicit overrides for known-good advanced presets; blank keeps - // llama.cpp/profile defaults. + + // Group 3 — Request batching (Batch / UBatch / Parallel) panelHtml += `
`; - panelHtml += ``; - panelHtml += ``; - panelHtml += ``; - panelHtml += ``; + panelHtml += ``; + panelHtml += ``; + panelHtml += ``; panelHtml += `
`; // Auto-profile chips row removed — visual fit with the rest of the // serve panel was off, and the manual ctx/n_cpu_moe/cache controls @@ -791,12 +826,19 @@ function _rerenderCachedModels() { panelHtml += `GPU memory:`; panelHtml += `checking…`; panelHtml += ``; - // Row 3a: Checkboxes (llama.cpp-only) + // Group 4 — llama.cpp toggles. Single row of checkboxes, GPU-only + // ones (Flash Attn, Unified Memory, Allow CPU overflow) hide + // automatically in CPU mode. Order: perf-critical → safety → I/O → + // niche. MTP Spec sits last because it owns its own numstep widget + // and is the widest item. panelHtml += `
`; - panelHtml += ``; - panelHtml += ``; - panelHtml += ``; - panelHtml += ``; + panelHtml += ``; + panelHtml += ``; + panelHtml += ``; + panelHtml += ``; + panelHtml += ``; + panelHtml += ``; + panelHtml += ``; panelHtml += `
`; // Row 3b: Checkboxes (diffusers) panelHtml += `
`; @@ -859,6 +901,21 @@ function _rerenderCachedModels() { const panel = item.querySelector('.hwfit-serve-panel'); // Scroll the serve panel into view within its nearest scrollable ancestor requestAnimationFrame(() => panel.scrollIntoView({ block: 'nearest', behavior: 'smooth' })); + // Firefox-mobile fallback: the CSS that grows the cached-list and + // expanded card uses :has(.doclib-card-expanded), which Firefox + // mobile doesn't support — so the panel stays collapsed and the + // form is unusable. Pin explicit px heights here. On Chromium/ + // WebKit the !important CSS still wins, so this is a no-op there. + // (See project_skills_expand_firefox memory note.) + requestAnimationFrame(() => { + try { + const _itemH = Math.max(item.scrollHeight, item.getBoundingClientRect().height); + if (_itemH > 0) item.style.maxHeight = _itemH + 'px'; + const _listH = Math.max(list.scrollHeight, list.getBoundingClientRect().height); + if (_listH > 0) list.style.maxHeight = _listH + 'px'; + list.style.minHeight = _listH + 'px'; + } catch {} + }); // Build command preview function updateCmd() { @@ -1859,6 +1916,49 @@ function _rerenderCachedModels() { updateCmd(); }); }); + // llama.cpp GPU/CPU mode-toggle pill wiring. Clicking GPU or CPU + // flips the .active classes + .mode-right marker (so the sliding + // pill matches Agent/Chat), updates the hidden data-field input, + // and fires a change event so the existing field-change handler + // rebuilds the serve cmd (sets -ngl 99 vs -ngl 0). + panel.querySelectorAll('[data-llama-mode-toggle]').forEach(group => { + group.querySelectorAll('.mode-toggle-btn').forEach(btn => { + btn.addEventListener('click', (e) => { + e.preventDefault(); e.stopPropagation(); + const want = btn.dataset.llamaMode; + if (!want) return; + group.querySelectorAll('.mode-toggle-btn').forEach(b => { + const isActive = b.dataset.llamaMode === want; + b.classList.toggle('active', isActive); + b.setAttribute('aria-pressed', isActive ? 'true' : 'false'); + }); + group.classList.toggle('mode-right', want === 'gpu'); + const hidden = group.parentElement.querySelector('[data-field="llama_mode"]'); + if (hidden) { + hidden.value = want; + hidden.dispatchEvent(new Event('change', { bubbles: true })); + } + // Hide every GPU-only control (chiclets, Tensor Split, + // Split Mode, Main GPU, Flash Attn, Unified Memory, etc.) + // in CPU mode — `-ngl 0` ignores them and showing them + // implies they matter. + panel.classList.toggle('cookbook-llama-cpu-mode', want === 'cpu'); + panel.querySelectorAll('.cookbook-llama-gpu-only').forEach(el => { + el.style.display = (want === 'cpu') ? 'none' : ''; + }); + }); + }); + }); + // Apply the CPU-mode visibility on first render too, so a saved + // preset that loaded with llama_mode=cpu hides GPU controls + // immediately instead of flashing them then disappearing. + { + const _saved = panel.querySelector('[data-field="llama_mode"]')?.value || 'gpu'; + if (_saved === 'cpu') { + panel.classList.add('cookbook-llama-cpu-mode'); + panel.querySelectorAll('.cookbook-llama-gpu-only').forEach(el => { el.style.display = 'none'; }); + } + } // Themed +/- buttons next to spec_tokens — step the adjacent number input. panel.querySelectorAll('.hwfit-numstep-btn').forEach(btn => { btn.addEventListener('click', (e) => { @@ -2025,6 +2125,140 @@ function _rerenderCachedModels() { }); return; } + // llama.cpp VRAM-fit preflight. Catches the silent-CPU-fallback + // trap: when the model + KV cache exceed the selected GPUs' free + // VRAM, llama-cpp-python doesn't error — it pushes layers/KV to + // CPU and inference crawls at sub-1 tok/s. Off by default; can + // be bypassed per-launch via the dialog's "Allow CPU overflow" + // action, OR persistently by ticking the same-named checkbox. + if (serveState.backend === 'llamacpp' + && String(serveState.llama_mode || 'gpu') !== 'cpu' + && !serveState.llama_cpu_overflow) { + try { + const _ctx = Math.max(1, parseInt(serveState.ctx, 10) || 8192); + // Model size on disk — close enough for GPU footprint of a GGUF. + const _modelBytes = Number(m?.size_bytes || 0) || Math.round((Number(m?.size_gb || 0)) * 1024 * 1024 * 1024); + const _modelGb = _modelBytes / (1024 ** 3); + // KV cache heuristic. ~0.7MB / token / 7.5GB-of-model at fp16 + // KV, scaled linearly by model size. Imperfect but covers + // the common 7B–70B range within ~20% — good enough to catch + // overflow before it silently happens. + const _kvGbPerToken = _modelGb > 0 ? (_modelGb / 7.5) * 0.0007 : 0.0007; + const _kvGb = _ctx * _kvGbPerToken; + const _needGb = _modelGb + _kvGb; + const _selStr = (serveState.gpus || '').trim(); + const _selIdx = _selStr ? _selStr.split(',').map(s => parseInt(s.trim(), 10)).filter(n => Number.isFinite(n)) : [0]; + // Fetch FRESH GPU data per-launch — the hwfit cache may be + // stale or for a different host (e.g. user switched server + // picker without scanning), which used to silently skip the + // preflight and let the launch silently fall to CPU. + let _hwGpus = []; + try { + const _gh = (_envState.remoteHost || '').trim(); + const _gp = new URLSearchParams(); + if (_gh) { + _gp.set('host', _gh); + const _sp = (_serverByVal?.(_envState.remoteServerKey || _gh) || {}).port; + if (_sp) _gp.set('ssh_port', _sp); + } + const _gr = await fetch('/api/cookbook/gpus' + (_gp.toString() ? '?' + _gp : ''), { credentials: 'same-origin' }); + if (_gr.ok) { + const _gd = await _gr.json(); + _hwGpus = Array.isArray(_gd) ? _gd : (_gd.gpus || []); + } + } catch {} + const _freeFor = (idx) => { + const g = _hwGpus[idx]; + const mb = g?.free_mb; + return Number.isFinite(mb) ? mb / 1024 : 0; + }; + const _selFreeGb = _selIdx.reduce((s, i) => s + _freeFor(i), 0); + // Skip the gate when we don't have any free-VRAM data (probe + // failed) — better to let the launch try than silently refuse + // on a missing data point. + if (_selFreeGb > 0 && _needGb > _selFreeGb && _modelGb > 0) { + // Suggest the smallest set of additional GPUs whose free + // VRAM closes the gap. Greedy by largest-free-first. + const _candidates = _hwGpus + .map((g, i) => ({ i, free: _freeFor(i) })) + .filter(x => !_selIdx.includes(x.i) && x.free > 0) + .sort((a, b) => b.free - a.free); + const _addGpus = []; + let _runFree = _selFreeGb; + for (const c of _candidates) { + _addGpus.push(c.i); _runFree += c.free; + if (_runFree >= _needGb) break; + } + const _canAddGpu = _runFree >= _needGb && _addGpus.length > 0; + // Recommend ctx that just-fits on current selection. + const _recCtxRaw = Math.floor((_selFreeGb - _modelGb) / _kvGbPerToken); + const _recCtx = Math.max(1024, Math.floor(_recCtxRaw / 1024) * 1024); + // Custom modal — styledConfirm only takes 2 buttons; this + // surface needs up to 4 actions (Reduce / Add GPUs / Allow / Cancel). + const _action = await new Promise(resolve => { + const ov = document.createElement('div'); + ov.className = 'modal'; + ov.style.cssText = 'display:flex;align-items:center;justify-content:center;z-index:10050;position:fixed;inset:0;background:rgba(0,0,0,0.4);'; + const _btnRow = []; + if (_recCtx > 1024 && _recCtx < _ctx) { + _btnRow.push(``); + } + if (_canAddGpu) { + _btnRow.push(``); + } + _btnRow.push(``); + _btnRow.push(``); + ov.innerHTML = '
' + + '

Will not fit on selected GPU' + (_selIdx.length > 1 ? 's' : '') + '

' + + '
' + + '

Model + KV cache would overflow VRAM on the selected GPU' + (_selIdx.length > 1 ? 's' : '') + '. llama-cpp-python will silently spill to CPU → very slow inference.

' + + '
    ' + + '
  • Model: ~' + _modelGb.toFixed(1) + ' GB
    • ' + + '
  • KV cache (ctx ' + _ctx.toLocaleString() + '): ~' + _kvGb.toFixed(1) + ' GB
    • ' + + '
  • Total needed: ~' + _needGb.toFixed(1) + ' GB
    • ' + + '
  • Free on GPU ' + _selIdx.join(', ') + ': ~' + _selFreeGb.toFixed(1) + ' GB
    • ' + + '
' + + '
' + + '
' + _btnRow.join('') + '
' + + '
'; + document.body.appendChild(ov); + ov.addEventListener('click', (e) => { + const b = e.target.closest('[data-vram-action]'); + if (b) { ov.remove(); resolve(b.dataset.vramAction); } + else if (e.target === ov) { ov.remove(); resolve('cancel'); } + }); + }); + if (_action === 'cancel' || !_action) { _restoreLaunchBtn(); return; } + if (_action === 'reduce') { + const _ctxEl = panel.querySelector('[data-field="ctx"]'); + if (_ctxEl) { + _ctxEl.value = String(_recCtx); + serveState.ctx = String(_recCtx); + _ctxEl.dispatchEvent(new Event('change', { bubbles: true })); + } + } else if (_action === 'add_gpus') { + for (const i of _addGpus) { + const _b = panel.querySelector(`.cookbook-gpu-btn[data-gpu="${i}"]`); + if (_b && !_b.classList.contains('active')) _b.click(); + } + const _gpusEl = panel.querySelector('[data-field="gpus"]'); + if (_gpusEl) serveState.gpus = _gpusEl.value; + } else if (_action === 'allow_cpu') { + const _ov = panel.querySelector('[data-field="llama_cpu_overflow"]'); + if (_ov) { + _ov.checked = true; + _ov.dispatchEvent(new Event('change', { bubbles: true })); + } + serveState.llama_cpu_overflow = true; + } + // After mutation, rebuild the serve cmd preview so the + // launched cmd matches what the user just chose. + try { updateCmd(); } catch {} + } + } catch (_e) { + // Preflight is best-effort — never block on its own failure. + } + } // Pre-launch GPU probe — common failure pattern: vLLM/SGLang launched // on a host where no GPU is visible (driver missing, $CUDA_VISIBLE_DEVICES // unset, container without --gpus). Catch it BEFORE the user spends @@ -2151,6 +2385,38 @@ function _rerenderCachedModels() { if (venvVal) { _envState.env = 'venv'; _envState.envPath = venvVal; } else if (_srvEnvPath) { _envState.env = (_srvEnv === 'conda' ? 'conda' : 'venv'); _envState.envPath = _srvEnvPath; } if (gpusVal) _envState.gpus = gpusVal; + // Preflight: launching a GPU engine (llama.cpp / vLLM / SGLang) + // against the local-in-container target on a host whose hwfit + // scan reports no GPU backend. That falls through to a CPU build + // / CPU inference path and is usually NOT what the user wants — + // they typically have a host-side GPU (AMD/Vulkan, NVIDIA on a + // different box) that the container can't see. Surface this so + // the user can pick the host as a remote target instead, or + // confirm they really meant CPU. + try { + const _isLocalInContainer = !serveHost; // empty serveHost == cookbook container's local + const _wantsGpu = ['llamacpp', 'vllm', 'sglang', 'diffusers'].includes(serveState.backend); + const _detectedBackend = String(_hwfitCache?.system?.backend || '').toLowerCase(); + const _gpuBackends = ['cuda', 'rocm', 'vulkan', 'metal', 'mps', 'apple']; + if (_isLocalInContainer && _wantsGpu && _detectedBackend && !_gpuBackends.includes(_detectedBackend)) { + const _proceed = await window.styledConfirm( + `The local (in-container) target has no GPU backend detected (hwfit reports: "${_detectedBackend || 'none'}"). ${serveState.backend.toUpperCase()} will run on CPU only and may be unusably slow.\n\nIf this machine has a GPU on the host, add the host as a server in Settings and target that instead. Otherwise launch anyway for CPU inference.`, + { + title: 'No GPU on local target', + confirmText: 'Launch anyway (CPU)', + cancelText: 'Cancel', + danger: true, + }, + ); + if (!_proceed) { + if (typeof _restoreLaunchBtn === 'function') _restoreLaunchBtn(); + _envState.env = origEnv; + _envState.envPath = origEnvPath; + _envState.gpus = origGpus; + return; + } + } + } catch { /* preflight is best-effort */ } try { await _withSpinner(_launchBtn, async () => { // Pass the exact form values so the running task can be re-opened diff --git a/static/style.css b/static/style.css index cd1adeb8c..f4a331c47 100644 --- a/static/style.css +++ b/static/style.css @@ -15930,6 +15930,17 @@ body:not(.email-doc-split-active) #email-lib-modal.email-lib-fullscreen:not(.mod flex: 0 0 auto !important; height: auto !important; } + /* Launch tab's cached-list normally has `flex: 1 1 0; min-height: 0` + (so it fills the modal on desktop). On mobile the parent now has + `height: auto`, which collapses `flex: 1 1 0` to ZERO PX — + models render but the list area is invisible because the flex + basis is 0 and there's no free space to grow into. Switch to + content-sized flex so the list grows with its children. */ + #cookbook-modal .cookbook-group[data-backend-group="Serve"] > .admin-card > .hwfit-cached-list, + #cookbook-modal .cookbook-group[data-backend-group="Serve"] > .admin-card > #hwfit-cached-list { + flex: 0 0 auto !important; + overflow: visible !important; + } } #cookbook-modal .hwfit-cached-list { flex-shrink: 0; @@ -18560,7 +18571,7 @@ body.gallery-selecting .gallery-dl-btn, label and center it vertically so the descenders don't clip. */ #hwfit-cache-select { min-width: 58px; - height: 32px; + height: 28px; display: inline-flex; align-items: center; justify-content: center; @@ -19316,7 +19327,7 @@ body.gallery-selecting .gallery-dl-btn, margin-bottom: 4px; } .cookbook-slot-btn { - min-width: 22px; height: 22px; + min-width: 22px; height: 28px; padding: 0 6px; font-size: 10px; font-weight: 600; border: 1px solid var(--border); @@ -19733,11 +19744,12 @@ body.gallery-selecting .gallery-dl-btn, font-size: 12px; padding: 0 6px; height: 28px; + box-sizing: border-box; } .hwfit-sf[data-field="backend"], .hwfit-sf[data-field="dtype"], .hwfit-sf[data-field="tp"] { - height: 32px; + height: 28px; box-sizing: border-box; width: 100%; } @@ -23569,7 +23581,7 @@ details.hwfit-serve-advanced > .hwfit-serve-checks:last-of-type { width: 51px; } #serve-search { - height: 32px; + height: 28px; } #cookbook-dl-btn { position: relative; From 63d9b12b22edaef1bca08c4ce9560c2e69ec93d8 Mon Sep 17 00:00:00 2001 From: pewdiepie-archdaemon Date: Fri, 19 Jun 2026 00:33:48 +0000 Subject: [PATCH 06/22] Cookbook Running: short-circuit polls for Ollama sidecar tasks so status stays running Three different background loops (_reconnectTask reachability poll, _checkServeReachability, _pollBackgroundStatus) each independently flipped Ollama sidecar tasks between running and stopped because the `docker exec ollama-rocm ollama show ` cmd exits cleanly after its verification print, which the loops misread as the serve dying. Added _isOllamaSidecarTask(task) and an early-bail in each of the three loops so the task stays pinned to running once the show-cmd exits 0. Also the tmux-graceful-kill path prepends a `docker exec ollama-rocm ollama stop ` before tearing down the tmux session, so the Ollama-side model load gets unloaded too (was leaving the model resident in the daemon after Stop). --- static/js/cookbookRunning.js | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/static/js/cookbookRunning.js b/static/js/cookbookRunning.js index 28365d49e..a390e11ad 100644 --- a/static/js/cookbookRunning.js +++ b/static/js/cookbookRunning.js @@ -141,6 +141,13 @@ async function _openDownloadForGgufTask(task) { function _terminalServeDiagnosis(task, outputText) { const out = String(outputText || task?.output || ''); if (!task || task.type !== 'serve' || !['stopped', 'error', 'crashed', 'failed'].includes(task.status) || !out.trim()) return null; + // Suppress the crash diagnosis when the output proves the server + // actually became reachable — e.g. an early `exit 127` from a failed + // build attempt was followed by the shim/Python fallback successfully + // starting Uvicorn. Without this, the user sees a confusing "build + // stopped before the server became reachable" toast while the server + // is right there serving requests. + if (_serveOutputLooksReady(task)) return null; // Pip tasks (Reinstall vLLM, Upgrade torch, etc.) ride on the serve task // type so they get a tmux session + show up in Running tab — but they are // NOT serve invocations. Their output is pip's own; the generic From 18f29bdfd8b7e694102c8b242315f12b44e8da96 Mon Sep 17 00:00:00 2001 From: pewdiepie-archdaemon Date: Fri, 19 Jun 2026 00:34:13 +0000 Subject: [PATCH 07/22] Email send: normalize address fields to strip trailing commas + stray whitespace before MIME encoding --- routes/email_routes.py | 21 +++++++++++++++++++++ 1 file changed, 21 insertions(+) diff --git a/routes/email_routes.py b/routes/email_routes.py index 0871b5656..416ad55b2 100644 --- a/routes/email_routes.py +++ b/routes/email_routes.py @@ -360,6 +360,21 @@ def _apply_odysseus_headers(msg, kind: str | None = None, ref_id: str | None = N msg["X-Odysseus-Ref"] = re.sub(r"[^A-Za-z0-9_.:-]", "-", ref_id)[:128] +def _normalize_addr_field(field: str) -> str: + """Strip the malformed-but-common trailing/leading commas and stray + whitespace from a To/Cc/Bcc string before it lands in the MIME header + or the SMTP envelope. Users often paste a single address with a + trailing comma (e.g. `felix@pewdiepie.com,`) and most MTAs reject the + resulting `To: felix@pewdiepie.com,` line as a syntax error. Collapse + any run of separator junk between addresses too.""" + if not field: + return field + # Split on commas, drop empty tokens, rejoin with a single ', '. + parts = [p.strip() for p in field.split(",")] + parts = [p for p in parts if p] + return ", ".join(parts) + + def _envelope_recipients(*fields: str) -> list: """Extract bare SMTP envelope addresses from one or more To/Cc/Bcc header strings. A naive `field.split(",")` corrupts display names that contain a @@ -2021,6 +2036,9 @@ def setup_email_routes(): outer = MIMEMultipart("alternative") body_container = outer + to = _normalize_addr_field(to or "") + cc = _normalize_addr_field(cc or "") + bcc = _normalize_addr_field(bcc or "") outer["From"] = cfg["from_address"] outer["To"] = to if cc: @@ -2297,6 +2315,9 @@ def setup_email_routes(): outer = MIMEMultipart("alternative") body_container = outer + req.to = _normalize_addr_field(req.to or "") + req.cc = _normalize_addr_field(req.cc or "") + req.bcc = _normalize_addr_field(req.bcc or "") outer["From"] = cfg["from_address"] outer["To"] = req.to if req.cc: From a10bfc466bc6d3cfa956b1ee85637035ab43938f Mon Sep 17 00:00:00 2001 From: pewdiepie-archdaemon Date: Fri, 19 Jun 2026 00:34:19 +0000 Subject: [PATCH 08/22] Model endpoints: per-category probe timeouts (15s local / 3s ollama / 2s api) so slow first-token launches arent killed --- routes/model_routes.py | 37 ++++++++++++++++++++++++++++--------- 1 file changed, 28 insertions(+), 9 deletions(-) diff --git a/routes/model_routes.py b/routes/model_routes.py index b5bd6ead8..000cd9379 100644 --- a/routes/model_routes.py +++ b/routes/model_routes.py @@ -405,8 +405,11 @@ def _endpoint_refresh_timeout(ep: Any, category: str) -> float: except Exception: val = 0 if val > 0: - return float(max(1, min(30, val))) - return 2.5 if category == "local" else 2.0 + return float(max(1, min(60, val))) + # llama.cpp and other local OpenAI-compatible servers can block briefly + # while warming/loading. A 2s local timeout makes working endpoints flicker + # offline before /v1/models is ready. + return 10.0 if category == "local" else 2.0 def _manual_refresh_timeout(ep: Any, category: str, requested: Any = None) -> float: @@ -473,7 +476,7 @@ def _explicit_model_list_timeout(base_url: str, endpoint_kind: str = "auto", req category = _classify_endpoint(base_url, kind) if kind in ("api", "proxy") or category == "api": return 30.0 - return 3.0 if _is_ollama_base(base_url) else 2.0 + return 15.0 if category == "local" else (3.0 if _is_ollama_base(base_url) else 2.0) def _cached_model_ids(ep: Any) -> List[str]: @@ -856,15 +859,28 @@ def _ping_endpoint(base_url: str, api_key: str = None, timeout: float = 1.5) -> pass try: + # OpenAI-compatible servers commonly expose /v1/models but return 404 + # for the bare /v1 root. Probe models first for those bases to avoid + # noisy false-looking 404s in llama.cpp logs. + parsed = urlparse(base) + prefer_models_first = (parsed.path or "").rstrip("/").endswith("/v1") + if prefer_models_first: + try: + r0 = httpx.get(_safe_build_models_url(base), headers=headers, timeout=timeout, verify=llm_verify()) + result0 = _result_from_response(r0) + if result0["reachable"]: + return result0 + except Exception as e: + last_error = str(e)[:120] r = httpx.get(base, headers=headers, timeout=timeout, verify=llm_verify()) result = _result_from_response(r) if result["reachable"]: return result sc = result.get("status_code") or 0 - if 400 <= sc < 500 and sc not in (401, 403): + if 400 <= sc < 500 and sc not in (401, 403) and not prefer_models_first: models_url = _safe_build_models_url(base) try: - r2 = httpx.get(models_url, headers=headers, timeout=timeout, verify=llm_verify()) + r2 = httpx.get(models_url, headers=headers,timeout=timeout, verify=llm_verify()) result2 = _result_from_response(r2) if result2["reachable"]: return result2 @@ -1567,7 +1583,10 @@ def setup_model_routes(model_discovery): # "everything's already cached" path because this branch only # runs for endpoints with an empty cached_models. if not all_models and not pinned and r.is_enabled: - ping = _ping_endpoint(r.base_url, r.api_key, timeout=3.5) + base_for_ping = _normalize_base(r.base_url) + kind_for_ping = _effective_endpoint_kind(r, base_for_ping) + ping_timeout = 10.0 if _classify_endpoint(base_for_ping, kind_for_ping) == "local" else 3.5 + ping = _ping_endpoint(r.base_url, r.api_key, timeout=ping_timeout) if ping.get("reachable"): status = "empty" # Best-effort: if the probe came back reachable, try @@ -1577,7 +1596,7 @@ def setup_model_routes(model_discovery): # "empty" status, and the existing background refresh # path will eventually fill it in too. try: - probed = _probe_endpoint(r.base_url, r.api_key, timeout=5) + probed = _probe_endpoint(r.base_url, r.api_key, timeout=max(5, int(ping_timeout))) if probed: r.cached_models = json.dumps(probed) db.commit() @@ -1755,7 +1774,7 @@ def setup_model_routes(model_discovery): model_ids = _probe_endpoint(base_url, api_key.strip() or None, timeout=explicit_timeout) if should_probe else [] ping = {"reachable": False, "error": None} if (should_probe or requested_kind in ("api", "proxy")) and not model_ids: - ping = _ping_endpoint(base_url, api_key.strip() or None, timeout=min(explicit_timeout, 2.0)) + ping = _ping_endpoint(base_url, api_key.strip() or None, timeout=min(explicit_timeout, 10.0)) if require_model_list and not model_ids: raise HTTPException(400, _model_endpoint_error_message(base_url, ping)) @@ -1847,7 +1866,7 @@ def setup_model_routes(model_discovery): configured_timeout = _parse_positive_int(model_refresh_timeout, minimum=1, maximum=60) probe_timeout = _explicit_model_list_timeout(base_url, requested_kind, configured_timeout) models = _probe_endpoint(base_url, api_key.strip() or None, timeout=probe_timeout) - ping = {"reachable": True, "error": None} if models else _ping_endpoint(base_url, api_key.strip() or None, timeout=min(probe_timeout, 2.0)) + ping = {"reachable": True, "error": None} if models else _ping_endpoint(base_url, api_key.strip() or None, timeout=min(probe_timeout, 10.0)) return { "base_url": base_url, "online": bool(models) or bool(ping.get("reachable")), From 2fbfd2294684d90d1c37d8b66d1a2ff71ae5dc0c Mon Sep 17 00:00:00 2001 From: pewdiepie-archdaemon Date: Fri, 19 Jun 2026 00:34:24 +0000 Subject: [PATCH 09/22] Agent loop: compact one-line tool-usage hints for local/small models so the system prompt doesnt eat the context budget --- src/agent_loop.py | 127 ++++++++++++++++++++++++++++++++++++++++++---- 1 file changed, 116 insertions(+), 11 deletions(-) diff --git a/src/agent_loop.py b/src/agent_loop.py index f600ac598..e574a42b6 100644 --- a/src/agent_loop.py +++ b/src/agent_loop.py @@ -536,17 +536,44 @@ def _section_text(name: str, default: str) -> str: return val if isinstance(val, str) and val.strip() else default +def _compact_tool_line(name: str, section: str) -> str: + """One-line fenced-tool usage hint for compact/local prompts.""" + text = (section or "").strip() + if not text: + return f"- `{name}`" + if text.startswith("- "): + return text + lines = [ln.strip() for ln in text.splitlines() if ln.strip()] + usage = [] + in_fence = False + for ln in lines: + if ln.startswith("```"): + usage.append(ln) + in_fence = not in_fence + if len(usage) >= 3: + break + continue + if in_fence and len(usage) < 3: + usage.append(ln) + if usage: + return f"- `{name}` — " + " ".join(usage) + return f"- `{name}` — " + lines[0][:160] + + def _assemble_prompt(tool_names: set, disabled_tools: set = None, compact: bool = False) -> str: """Build the system prompt with only the specified tools included.""" disabled = disabled_tools or set() included = tool_names - disabled if compact: - tool_list = ", ".join(sorted(included)) if included else "none" + tool_lines = [] + for name, _default_section in TOOL_SECTIONS.items(): + if name in included: + tool_lines.append(_compact_tool_line(name, _section_text(name, _default_section))) parts = [ - "You are an AI assistant with tool access.", - f"Available tools: {tool_list}.", - _API_AGENT_RULES, + _AGENT_PREAMBLE, + "## Available tools\n" + ("\n".join(tool_lines) if tool_lines else "none"), + _AGENT_RULES, ] parts.extend(_domain_rules_for_tools(included)) return "\n\n".join(parts) @@ -612,11 +639,6 @@ _API_HOSTS = frozenset([ "api.perplexity.ai", "api.x.ai", "ollama.com", "api.venice.ai", "api.kimi.com", "api.githubcopilot.com", - # Local OpenAI-compatible endpoints (llama.cpp, vLLM, LM Studio, etc.). - # Without these, `_is_api_model` falls back to keyword sniffing on the - # model name, so well-behaved local servers don't get native tool - # schemas and the agent silently degrades to fenced-block parsing. - "localhost", "127.0.0.1", "host.docker.internal", ]) _MCP_KEYWORDS = frozenset(["mcp", "browse", "browser", "website", "calendar", "event", "email", "gmail", "screenshot", "navigate", "click", "miniflux", "rss", "feed"]) @@ -644,6 +666,28 @@ def _is_ollama_openai_compat_url(endpoint_url: str) -> bool: return parsed.port == 11434 and (path == "/v1" or path.startswith("/v1/")) +def _is_local_openai_compat_url(endpoint_url: str) -> bool: + try: + parsed = urlparse(endpoint_url or "") + except Exception: + return False + host = (parsed.hostname or "").lower() + path = (parsed.path or "").rstrip("/") + if not (path == "/v1" or path.startswith("/v1/")): + return False + if host in {"localhost", "127.0.0.1", "0.0.0.0", "host.docker.internal"}: + return True + if host.startswith("192.168.") or host.startswith("10."): + return True + if host.startswith("172."): + try: + second = int(host.split(".")[1]) + return 16 <= second <= 31 + except Exception: + return False + return False + + def _endpoint_lookup_keys(endpoint_url: str) -> List[str]: """Candidate ModelEndpoint.base_url keys for a runtime chat URL.""" raw = (endpoint_url or "").strip() @@ -2082,6 +2126,7 @@ async def stream_agent_loop( # the fenced-block path is used instead of native function calling. _is_ollama_native = _is_ollama_native_url(endpoint_url or "") _ollama_openai_compat = _is_ollama_openai_compat_url(endpoint_url or "") + _local_openai_compat = _is_local_openai_compat_url(endpoint_url or "") if _endpoint_supports is True: _is_api_model = True elif ( @@ -2089,15 +2134,17 @@ async def stream_agent_loop( or _model_no_tools or _is_ollama_native or _ollama_openai_compat + or _local_openai_compat ): _is_api_model = False else: _is_api_model = any(h in endpoint_url for h in _API_HOSTS) or _model_supports_tools + _compact_agent_prompt = _is_api_model or _is_ollama_native or _ollama_openai_compat or _local_openai_compat messages, mcp_schemas = _build_system_prompt( messages, model, active_document, mcp_mgr, disabled_tools, needs_admin=_needs_admin, relevant_tools=_relevant_tools, mcp_disabled_map=_mcp_disabled_map, - compact=_is_api_model, + compact=_compact_agent_prompt, owner=owner, suppress_local_context=guide_only, active_email=active_email, @@ -2185,6 +2232,14 @@ async def stream_agent_loop( # Strip internal metadata keys before sending to the LLM API messages = [{k: v for k, v in msg.items() if k != "_protected"} for msg in messages] + agent_prompt_tokens = estimate_tokens(messages) + logger.info( + "[agent-timing] prep_done model=%s prompt_tokens=%s context_length=%s prep=%s", + model, + agent_prompt_tokens, + context_length, + {k: round(v, 3) for k, v in prep_timings.items()}, + ) yield f"data: {json.dumps({'type': 'agent_prep', 'data': {k: round(v, 3) for k, v in prep_timings.items()}})}\n\n" full_response = "" @@ -2329,6 +2384,19 @@ async def stream_agent_loop( # complementary cap for the rare stream that trickles bytes forever and # so never trips the inactivity timeout. Generous — only catches runaway. _round_deadline = time.time() + max(agent_stream_timeout * 4, 1200) + _round_start = time.time() + _round_first_event_logged = False + _round_first_token_logged = False + logger.info( + "[agent-timing] round_start round=%s model=%s endpoint=%s prompt_tokens=%s tools=%s native_tools=%s timeout=%s", + round_num, + model, + endpoint_url, + estimate_tokens(messages), + len(_tool_names_sent), + bool(all_tool_schemas), + agent_stream_timeout, + ) async for chunk in stream_llm_with_fallback( _candidates, messages, @@ -2339,11 +2407,30 @@ async def stream_agent_loop( timeout=agent_stream_timeout, session_id=session_id, ): + if not _round_first_event_logged: + _round_first_event_logged = True + logger.info( + "[agent-timing] first_event round=%s elapsed=%.3fs kind=%s", + round_num, + time.time() - _round_start, + "error" if chunk.startswith("event: error") else "data", + ) if time.time() > _round_deadline: - logger.warning(f"[agent] round {round_num} stream exceeded wall-clock deadline; cutting off") + logger.warning( + "[agent-timing] round_deadline round=%s elapsed=%.3fs deadline_s=%s", + round_num, + time.time() - _round_start, + max(agent_stream_timeout * 4, 1200), + ) break # Forward error events from stream_llm to the frontend if chunk.startswith("event: error"): + logger.warning( + "[agent-timing] stream_error round=%s elapsed=%.3fs chunk=%r", + round_num, + time.time() - _round_start, + chunk[:500], + ) yield chunk continue if chunk.startswith("data: ") and not chunk.startswith("data: [DONE]"): @@ -2423,6 +2510,15 @@ async def stream_agent_loop( if not first_token_received: time_to_first_token = time.time() - total_start first_token_received = True + if not _round_first_token_logged: + _round_first_token_logged = True + logger.info( + "[agent-timing] first_visible_token round=%s elapsed=%.3fs total_elapsed=%.3fs thinking=%s", + round_num, + time.time() - _round_start, + time.time() - total_start, + bool(data.get("thinking")), + ) # Keep reasoning deltas in a separate accumulator so # we can echo them back via `reasoning_content` on the # next request (DeepSeek requires this; harmless for @@ -2492,6 +2588,15 @@ async def stream_agent_loop( yield chunk # Intercept [DONE] — don't forward until all rounds finish + logger.info( + "[agent-timing] round_stream_done round=%s elapsed=%.3fs text_chars=%s tool_calls=%s first_event=%s first_token=%s", + round_num, + time.time() - _round_start, + len(round_response), + len(native_tool_calls), + _round_first_event_logged, + _round_first_token_logged, + ) tool_blocks, used_native = _resolve_tool_blocks(round_response, native_tool_calls, round_num, is_api_model=_is_api_model) # Force-answer round: we told the model to STOP calling tools and From 9adb940ef975c19d52c9cd6c6632552cda7ffccf Mon Sep 17 00:00:00 2001 From: pewdiepie-archdaemon Date: Fri, 19 Jun 2026 00:34:30 +0000 Subject: [PATCH 10/22] Agent stream: 10s heartbeat keepalive on the SSE subscribe so long-running thinking models dont drop the connection --- src/agent_runs.py | 14 +++++++++++++- 1 file changed, 13 insertions(+), 1 deletion(-) diff --git a/src/agent_runs.py b/src/agent_runs.py index 8adbab9c9..3431347c7 100644 --- a/src/agent_runs.py +++ b/src/agent_runs.py @@ -174,8 +174,20 @@ async def subscribe(session_id: str) -> AsyncGenerator[str, None]: next_seq += 1 if run.status != "running": return + heartbeat_idx = 0 while True: - seq, ev = await q.get() + try: + seq, ev = await asyncio.wait_for(q.get(), timeout=10.0) + except asyncio.TimeoutError: + # Keep slow local models/proxies alive while they prefill before + # the first token. SSE comments are ignored by the UI but reset + # browser/proxy idle timers, which prevents "empty response" + # disconnects on llama.cpp first-token latencies of 30s+. + if run.status == "running": + heartbeat_idx += 1 + yield f": heartbeat {heartbeat_idx}\n\n" + continue + seq, ev = (None, None) if seq is None: # end sentinel while next_seq < len(run.buffer): # flush any tail the sentinel raced yield run.buffer[next_seq] From 20c6ba8f321485d1d6360fa8c30be3127c1e396a Mon Sep 17 00:00:00 2001 From: pewdiepie-archdaemon Date: Fri, 19 Jun 2026 00:34:37 +0000 Subject: [PATCH 11/22] Bump APP_VERSION to 1.0.1 --- src/constants.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/constants.py b/src/constants.py index 3f58eba26..16aecf19a 100644 --- a/src/constants.py +++ b/src/constants.py @@ -2,7 +2,7 @@ """Application-wide constants and configuration values.""" import os -APP_VERSION = "1.0.0" +APP_VERSION = "1.0.1" # Base paths BASE_DIR = os.path.dirname(os.path.dirname(os.path.abspath(__file__))) + "/" From 8cc76b53a20acaeb35bb9890464102bf2c96f31a Mon Sep 17 00:00:00 2001 From: pewdiepie-archdaemon Date: Fri, 19 Jun 2026 00:34:47 +0000 Subject: [PATCH 12/22] Chat: first-token wait timer cleanup so per-pane timeouts dont leak when a response finishes mid-wait --- static/js/chat.js | 119 +++++++++++++++++++++++++--------------------- 1 file changed, 64 insertions(+), 55 deletions(-) diff --git a/static/js/chat.js b/static/js/chat.js index c9b73a8f1..50d296dcc 100644 --- a/static/js/chat.js +++ b/static/js/chat.js @@ -571,6 +571,24 @@ import { wireArrowUpRecall, getLastUserMessageFromChatHistory } from './composer let timeoutId = null; let responseTimeoutCleared = false; let clearResponseTimeout = () => {}; + let firstTokenWaitTimers = []; + const clearFirstTokenWaitTimers = () => { + firstTokenWaitTimers.forEach(t => { try { clearTimeout(t); } catch (_) {} }); + firstTokenWaitTimers = []; + }; + const scheduleFirstTokenWaitMessages = () => { + clearFirstTokenWaitTimers(); + const steps = [ + [20000, 'Still waiting for first token'], + [60000, 'Large local model is pre-filling context'], + [120000, 'Still working - no tokens yet from the model'], + ]; + firstTokenWaitTimers = steps.map(([ms, text]) => setTimeout(() => { + if (!accumulated && spinner && spinner.element && !(currentAbort && currentAbort.signal.aborted)) { + spinner.updateMessage(text); + } + }, ms)); + }; const clearProcessingProbe = () => { if (processingProbeTimer) { clearTimeout(processingProbeTimer); @@ -921,56 +939,7 @@ import { wireArrowUpRecall, getLastUserMessageFromChatHistory } from './composer setTimeout(() => spinner.updateMessage('Analyzing sources'), 1500); } else { spinner.updateMessage('Processing request'); - const endpointUrlForProbe = sessionModule.getCurrentEndpointUrl ? sessionModule.getCurrentEndpointUrl() : null; - if (endpointUrlForProbe && modelName) { - processingProbeTimer = setTimeout(async () => { - processingProbeTimer = null; - if (accumulated || !spinner || !spinner.element || (currentAbort && currentAbort.signal.aborted)) return; - processingProbeAbort = new AbortController(); - try { - spinner.updateMessage('Checking model endpoint'); - const status = await _probeCurrentEndpointStatus(endpointUrlForProbe, processingProbeAbort.signal); - if (accumulated || !spinner || !spinner.element || (currentAbort && currentAbort.signal.aborted)) return; - if (!status) { - spinner.updateMessage('Still waiting for model'); - } else if (status.alive) { - const latency = status.latency_ms ? ` (${status.latency_ms}ms)` : ''; - spinner.updateMessage(`Endpoint online${latency}; waiting for first token`); - } else { - // Probe confirms the endpoint isn't responding. Don't - // sit on a hung fetch — give the user 5s to read the - // status, then auto-abort with reason='offline' so the - // catch handler shows a clean "switch model" message - // instead of leaving the spinner spinning forever. - if (status.error) console.warn('Model endpoint probe failed:', status.error); - let _countdown = 5; - spinner.updateMessage(`Endpoint offline — cancelling in ${_countdown}s`); - const _tick = setInterval(() => { - _countdown--; - if (!spinner || !spinner.element || (currentAbort && currentAbort.signal.aborted) || accumulated) { - clearInterval(_tick); - return; - } - if (_countdown > 0) { - spinner.updateMessage(`Endpoint offline — cancelling in ${_countdown}s`); - } else { - clearInterval(_tick); - if (currentAbort && !currentAbort.signal.aborted) { - currentAbort._reason = 'offline'; - currentAbort.abort(); - } - } - }, 1000); - } - } catch (e) { - if (e && e.name !== 'AbortError' && spinner && spinner.element && !accumulated) { - spinner.updateMessage('Still waiting for model'); - } - } finally { - processingProbeAbort = null; - } - }, 10000); - } + scheduleFirstTokenWaitMessages(); } const researchBtn = el('research-toggle-btn'); @@ -1150,6 +1119,11 @@ import { wireArrowUpRecall, getLastUserMessageFromChatHistory } from './composer uiModule.scrollHistory(); } + function _replaceThinkingSpinner(label) { + _removeThinkingSpinner(); + _showThinkingSpinner(label); + } + // Auto-show thinking spinner after text stops streaming let _textPauseTimer = null; function _scheduleThinkingSpinner() { @@ -1173,9 +1147,22 @@ import { wireArrowUpRecall, getLastUserMessageFromChatHistory } from './composer let _liveThinkHeader = null; let _liveThinkSpinnerSlot = null; let _liveThinkTimerEl = null; + let _liveThinkTokenCount = 0; let _liveThinkToggle = null; let _liveThinkDomId = null; + function _estimateThinkingTokens(text) { + const clean = (text || '').trim(); + if (!clean) return 0; + return Math.max(1, Math.ceil(clean.length / 4)); + } + + function _formatThinkStats(seconds, tokenCount) { + const time = seconds ? seconds + 's' : ''; + const tokens = tokenCount ? tokenCount + ' tok' : ''; + return time && tokens ? time + ' · ' + tokens : (time || tokens); + } + function _replyAfterClosedThinking(text) { const closeRe = /<\/(?:think(?:ing)?|thought)>|/gi; let match = null; @@ -1277,6 +1264,12 @@ import { wireArrowUpRecall, getLastUserMessageFromChatHistory } from './composer let _nextIsError = false; let _streamSawDone = false; + let _firstVisibleOutputSeen = false; + const markFirstVisibleOutput = () => { + if (_firstVisibleOutputSeen) return; + _firstVisibleOutputSeen = true; + clearFirstTokenWaitTimers(); + }; while (true) { const { done, value } = await reader.read(); @@ -1296,6 +1289,7 @@ import { wireArrowUpRecall, getLastUserMessageFromChatHistory } from './composer } if (line.startsWith('data: ')) { const data = line.slice(6); + if (data && data !== '[DONE]') markFirstVisibleOutput(); // (thinking spinner removal is handled in agent_step / tool_start / content handlers) @@ -1357,7 +1351,7 @@ import { wireArrowUpRecall, getLastUserMessageFromChatHistory } from './composer if (_liveThinkHeader) _liveThinkHeader.textContent = 'View thinking process'; if (_liveThinkSpinnerSlot) _liveThinkSpinnerSlot.remove(); if (_liveThinkTimerEl && _elapsedDone) { - _liveThinkTimerEl.textContent = _elapsedDone + 's'; + _liveThinkTimerEl.textContent = _formatThinkStats(_elapsedDone, _liveThinkTokenCount); _liveThinkTimerEl.style.marginLeft = 'auto'; _liveThinkTimerEl.style.marginRight = '5px'; var _hdrDone = _liveThinkTimerEl.closest('.thinking-header'); @@ -1399,9 +1393,17 @@ import { wireArrowUpRecall, getLastUserMessageFromChatHistory } from './composer typewriterInto(roundHolder.querySelector('.body'), errMsg); break; } - if (json.delta || json.type === 'tool_start' || json.type === 'tool_output' || json.type === 'tool_progress' || json.type === 'agent_step' || json.type === 'doc_stream_open' || json.type === 'doc_stream_delta' || json.type === 'research_progress') { + if (json.delta || json.type === 'agent_prep' || json.type === 'tool_start' || json.type === 'tool_output' || json.type === 'tool_progress' || json.type === 'agent_step' || json.type === 'doc_stream_open' || json.type === 'doc_stream_delta' || json.type === 'research_progress') { clearResponseTimeout(); clearProcessingProbe(); + clearFirstTokenWaitTimers(); + } + if (json.type === 'agent_prep') { + if (!_isBg) { + _cancelThinkingTimer(); + _replaceThinkingSpinner('Preparing agent'); + } + continue; } if (json.delta) { _cancelThinkingTimer(); @@ -1554,7 +1556,7 @@ import { wireArrowUpRecall, getLastUserMessageFromChatHistory } from './composer function _tickThinkTimer() { if (!_liveThinkTimerEl || !_liveThinkTimerEl.isConnected) return; var s = ((Date.now() - _thinkTimerStart) / 1000).toFixed(1); - _liveThinkTimerEl.textContent = s + 's'; + _liveThinkTimerEl.textContent = _formatThinkStats(s, _liveThinkTokenCount); _thinkTimerRAF = requestAnimationFrame(_tickThinkTimer); } _thinkTimerRAF = requestAnimationFrame(_tickThinkTimer); @@ -1576,7 +1578,12 @@ import { wireArrowUpRecall, getLastUserMessageFromChatHistory } from './composer .replace(/<\|channel>response\s*\n?/gi, '') .replace(//gi, ''); thinkText = thinkText.replace(/^\s*Thinking(?:\s+Process)?:\s*/i, ''); + _liveThinkTokenCount = _estimateThinkingTokens(thinkText); _liveThinkInner.innerHTML = markdownModule.mdToHtml(thinkText); + if (_liveThinkTimerEl) { + var _elapsedLive = thinkingStartTime ? ((Date.now() - thinkingStartTime) / 1000).toFixed(1) : ''; + _liveThinkTimerEl.textContent = _formatThinkStats(_elapsedLive, _liveThinkTokenCount); + } // Keep thinking box scrolled to bottom, but let user scroll up var thinkBox = _liveThinkInner.closest('.thinking-content'); if (thinkBox) { @@ -1600,6 +1607,7 @@ import { wireArrowUpRecall, getLastUserMessageFromChatHistory } from './composer _liveThinkHeader = null; _liveThinkSpinnerSlot = null; _liveThinkTimerEl = null; + _liveThinkTokenCount = 0; _liveThinkToggle = null; _liveThinkDomId = null; // Fall through to normal streaming @@ -1622,7 +1630,7 @@ import { wireArrowUpRecall, getLastUserMessageFromChatHistory } from './composer if (_liveThinkSpinnerSlot) _liveThinkSpinnerSlot.remove(); // Move timer to right side of header if (_liveThinkTimerEl && elapsed) { - _liveThinkTimerEl.textContent = elapsed + 's'; + _liveThinkTimerEl.textContent = _formatThinkStats(elapsed, _liveThinkTokenCount); _liveThinkTimerEl.style.marginLeft = 'auto'; _liveThinkTimerEl.style.marginRight = '5px'; var _hdrRow = _liveThinkTimerEl.closest('.thinking-header'); @@ -2023,7 +2031,7 @@ import { wireArrowUpRecall, getLastUserMessageFromChatHistory } from './composer cancelAnimationFrame(_thinkTimerRAF); var _elapsed2 = thinkingStartTime ? ((Date.now() - thinkingStartTime) / 1000).toFixed(1) : null; if (_liveThinkHeader) _liveThinkHeader.textContent = 'View thinking process'; - if (_liveThinkTimerEl) _liveThinkTimerEl.textContent = _elapsed2 ? _elapsed2 + 's' : ''; + if (_liveThinkTimerEl) _liveThinkTimerEl.textContent = _elapsed2 ? _formatThinkStats(_elapsed2, _liveThinkTokenCount) : ''; if (_liveThinkSpinnerSlot) _liveThinkSpinnerSlot.remove(); // Assign stable IDs var _thinkId2 = 'think-' + Date.now(); @@ -3018,6 +3026,7 @@ import { wireArrowUpRecall, getLastUserMessageFromChatHistory } from './composer } finally { clearResponseTimeout(); clearProcessingProbe(); + clearFirstTokenWaitTimers(); // Streaming done — let screen readers announce the settled response. const _chatLogDone = document.getElementById('chat-history'); if (_chatLogDone) _chatLogDone.setAttribute('aria-busy', 'false'); From 23ed92d96598f4a62952e2df401ce0e20a352540 Mon Sep 17 00:00:00 2001 From: pewdiepie-archdaemon Date: Fri, 19 Jun 2026 00:34:52 +0000 Subject: [PATCH 13/22] Email Library: render tag chips + spam verdict pill on the email row --- static/js/emailLibrary.js | 14 ++++++++++++++ 1 file changed, 14 insertions(+) diff --git a/static/js/emailLibrary.js b/static/js/emailLibrary.js index 7beb6a122..a5ac5f443 100644 --- a/static/js/emailLibrary.js +++ b/static/js/emailLibrary.js @@ -2936,6 +2936,20 @@ function _createCard(em) { titleRow.appendChild(att); } + const tags = Array.isArray(em.tags) ? em.tags : []; + if (tags.length || em.is_spam_verdict) { + const tagWrap = document.createElement('span'); + tagWrap.className = 'email-tags email-card-tags'; + tagWrap.innerHTML = tags.map(t => { + const tag = String(t || '').trim().toLowerCase().replace(/_/g, '-'); + return tag ? `` : ''; + }).join(''); + if (em.is_spam_verdict) { + tagWrap.insertAdjacentHTML('beforeend', ''); + } + titleRow.appendChild(tagWrap); + } + // Done check + unread dot stay next to the subject on the left. const isSentFolder = /sent/i.test(state._libFolder); if (!isSentFolder) { From a01c3da75f75b85495f16d04c56d4face5ace58a Mon Sep 17 00:00:00 2001 From: pewdiepie-archdaemon Date: Fri, 19 Jun 2026 00:34:57 +0000 Subject: [PATCH 14/22] Notes: checklist/todo/goal classification + agent-stream-complete state class for done indicator --- static/js/notes.js | 164 +++++++++++++++++++++++++++++++++++++++++++-- 1 file changed, 157 insertions(+), 7 deletions(-) diff --git a/static/js/notes.js b/static/js/notes.js index 58dff6e7f..8c6f1a832 100644 --- a/static/js/notes.js +++ b/static/js/notes.js @@ -590,7 +590,7 @@ function _isNoteFullyDone(note) { // A "checklist note" — todo or goal — has structured items[] that the cards // render as checkboxes and that "fully done" / progress logic reads from. function _hasItems(note) { - return note && (note.note_type === 'todo' || note.note_type === 'goal'); + return note && (note.note_type === 'todo' || note.note_type === 'goal' || note.note_type === 'checklist'); } // Compact " N/M" progress string for a goal's checklist. Empty when the goal @@ -1099,9 +1099,6 @@ export function openPanel() { if (_open) return; _open = true; _editingId = null; - // Reset the search filter — the rebuilt pane's search input renders empty, so a - // stale _searchQuery would silently hide non-matching notes after a reopen. - _searchQuery = ''; _clearViewedReminderGlows(); _firedDotDismissedAt = Date.now(); try { localStorage.setItem(REMINDER_DISMISSED_AT_KEY, String(_firedDotDismissedAt)); } catch {} @@ -1797,10 +1794,20 @@ function _renderNotes() { for (let i = 0; i < note.items.length; i++) { const item = note.items[i]; const doneClass = item.done ? ' done' : ''; + const agentStatus = (item.agent_status || '').toLowerCase(); + const agentDoneClass = agentStatus === 'stream_complete' ? ' is-agent-stream-complete' : ''; + const agentTitle = agentStatus === 'stream_complete' + ? 'Agent stream finished for this todo' + : (agentStatus === 'running' ? 'Agent is working on this todo' : 'Solve this todo with the agent'); + const agentSessionAttr = item.agent_session_id ? ` data-session-id="${_esc(item.agent_session_id)}"` : ''; + const agentMenuTitle = item.agent_session_title || `Agent: ${(item.text || '').slice(0, 40)}`; const indent = Math.min(item.indent || 0, 3); contentHtml += `
${_linkify(item.text)} + @@ -2152,7 +2159,7 @@ function _bindCardEvents(body) { // Click empty area of checklist preview (not on checkbox/X) — edit body.querySelectorAll('.note-checklist-preview').forEach(el => { el.addEventListener('click', (e) => { - if (e.target.closest('.note-checkbox, .note-checkbox-rm, .note-cl-quickadd, input')) return; + if (e.target.closest('.note-checkbox, .note-checkbox-rm, .note-checkbox-agent, .note-cl-quickadd, input')) return; e.stopPropagation(); tapToEditOrSelect(el.closest('.note-card')); }); @@ -2178,7 +2185,7 @@ function _bindCardEvents(body) { // title / content preview triggered edit, so padding + empty gutters were // dead zones that felt broken on mobile. if (_isNotesMobileMode() && !_selectMode) { - const _INTERACTIVE = 'button, a, input, label, .note-card-color-dot, .note-checkbox, .note-checkbox-rm, .note-cl-quickadd, .note-agent-tag, .note-card-pin, .note-card-corner-trash, .note-card-corner-menu, .note-card-corner-unarchive, .note-card-edit-corner, .note-card-reminder, .note-card-cb'; + const _INTERACTIVE = 'button, a, input, label, .note-card-color-dot, .note-checkbox, .note-checkbox-rm, .note-checkbox-agent, .note-cl-quickadd, .note-agent-tag, .note-card-pin, .note-card-corner-trash, .note-card-corner-menu, .note-card-corner-unarchive, .note-card-edit-corner, .note-card-reminder, .note-card-cb'; body.querySelectorAll('.note-card').forEach(card => { card.addEventListener('click', (e) => { if (e.target.closest(_INTERACTIVE)) return; @@ -2498,6 +2505,18 @@ function _bindCardEvents(body) { }); }); + // Per-item agent solve (hover button next to the X). Scoped to one todo + // item — uses the note title as context if present, but only the single + // item's text as the work. Mirrors the per-note _agentSolveNote pattern. + body.querySelectorAll('.note-checkbox-agent').forEach(btn => { + btn.addEventListener('click', (e) => { + e.preventDefault(); + e.stopPropagation(); + if (_selectMode) return; + _openTodoAgentMenu(btn); + }); + }); + // Quick-add new checklist item (hover input at bottom of todo cards) body.querySelectorAll('.note-cl-quickadd-input').forEach(input => { input.addEventListener('click', (e) => e.stopPropagation()); @@ -4317,6 +4336,56 @@ function _openNoteCornerMenu(btn) { menu.querySelector('[data-act="agent"]').addEventListener('click', () => { menu.remove(); _agentSolveNote(id); }); } +function _positionNoteMenu(menu, btn, width = 196) { + document.body.appendChild(menu); + const r = btn.getBoundingClientRect(); + let left = Math.min(r.right - width, window.innerWidth - width - 8); + left = Math.max(8, left); + const mh = menu.offsetHeight || 112; + const below = window.innerHeight - r.bottom; + const top = (below < mh + 8 && r.top > mh + 8) ? (r.top - mh - 4) : (r.bottom + 4); + menu.style.cssText += `position:fixed;z-index:11000;top:${Math.round(top)}px;left:${Math.round(left)}px;min-width:${width}px;`; + const close = (ev) => { + if (ev && menu.contains(ev.target)) return; + menu.remove(); + document.removeEventListener('click', close, true); + }; + setTimeout(() => document.addEventListener('click', close, true), 0); +} + +function _openTodoAgentMenu(btn) { + document.querySelectorAll('.note-corner-menu-dropdown').forEach(d => d.remove()); + const noteId = btn.dataset.noteId; + const idx = parseInt(btn.dataset.idx); + const sid = btn.dataset.sessionId || ''; + const title = btn.dataset.agentTitle || 'Agent chat'; + const menu = document.createElement('div'); + menu.className = 'note-corner-menu-dropdown note-agent-item-menu'; + menu.innerHTML = ` +
${_esc(title)}
+ ${sid ? `` : ''} + `; + _positionNoteMenu(menu, btn); + const openBtn = menu.querySelector('[data-act="open"]'); + if (openBtn) { + openBtn.addEventListener('click', () => { + menu.remove(); + const _sm = window.sessionModule; + if (sid && _sm && _sm.selectSession) { closePanel(); _sm.selectSession(sid); } + }); + } + menu.querySelector('[data-act="run"]').addEventListener('click', () => { + menu.remove(); + _agentSolveTodoItem(noteId, idx); + }); +} + // Build the prompt the agent gets from a note: title + body, plus any // not-yet-done checklist items. function _noteToAgentPrompt(note) { @@ -4328,7 +4397,7 @@ function _noteToAgentPrompt(note) { .forEach(it => parts.push('- ' + it.text.trim())); } const body = parts.join('\n'); - return body ? `Help me get this done:\n\n${body}` : ''; + return body ? `Help me get this done:\n\n${body}\n\nThe source note is read-only. Do not edit, replace, or update it.` : ''; } // Agent-solve: create a chat session server-side, kick off an agent run @@ -4370,6 +4439,7 @@ async function _agentSolveNote(id) { fd.append('message', prompt); fd.append('session', sid); fd.append('mode', 'agent'); + fd.append('disabled_tools', JSON.stringify(['manage_notes'])); fetch(`${API_BASE}/api/chat_stream`, { method: 'POST', credentials: 'same-origin', body: fd }) .then(async (res) => { if (!res.ok || !res.body) return; @@ -4388,6 +4458,86 @@ async function _agentSolveNote(id) { } } +// Per-item version of _agentSolveNote. Scoped to a single checklist item; +// the note title (if any) is included as context, but only this one item's +// text is the work the agent is asked to do. agent_session_id is set on the +// PARENT note (latest-wins) so the Agent tag still surfaces the most recent +// run from this note — same UX as a per-note solve. +async function _agentSolveTodoItem(noteId, idx) { + const note = _notes.find(n => n.id === noteId); + if (!note || !Array.isArray(note.items)) return; + const item = note.items[idx]; + const itemText = (item && (item.text || '').trim()) || ''; + if (!itemText) { + uiModule.showToast('Nothing to solve — item is empty'); + return; + } + const titleCtx = (note.title || '').trim(); + const prompt = titleCtx + ? `Context (from note "${titleCtx}").\n\nHelp me with this todo: ${itemText}\n\nThe source note is read-only. Do not edit, replace, or update it.` + : `Help me with this todo: ${itemText}\n\nThe source note is read-only. Do not edit, replace, or update it.`; + try { + const dc = await (await fetch(`${API_BASE}/api/default-chat`, { credentials: 'same-origin' })).json(); + if (!dc.endpoint_url || !dc.model) { uiModule.showError('No default chat model configured'); return; } + + const label = itemText.slice(0, 40); + const csFd = new FormData(); + csFd.append('name', 'Agent: ' + label); + csFd.append('endpoint_url', dc.endpoint_url); + csFd.append('model', dc.model); + if (dc.endpoint_id) csFd.append('endpoint_id', dc.endpoint_id); + csFd.append('skip_validation', 'true'); + const csRes = await fetch(`${API_BASE}/api/session`, { method: 'POST', credentials: 'same-origin', body: csFd }); + if (!csRes.ok) { uiModule.showError('Could not create agent session'); return; } + const sess = await csRes.json(); + const sid = sess.id; + const sessionTitle = 'Agent: ' + label; + + const n = _notes.find(x => x.id === noteId); + if (n) { + n.agent_session_id = sid; + if (Array.isArray(n.items) && n.items[idx]) { + n.items[idx].agent_session_id = sid; + n.items[idx].agent_session_title = sessionTitle; + n.items[idx].agent_status = 'running'; + n.items[idx].agent_stream_completed_at = ''; + } + } + _renderNotes(); + _patchNote(noteId, { items: n && Array.isArray(n.items) ? n.items : note.items, agent_session_id: sid }).catch(() => {}); + + const fd = new FormData(); + fd.append('message', prompt); + fd.append('session', sid); + fd.append('mode', 'agent'); + fd.append('disabled_tools', JSON.stringify(['manage_notes'])); + fetch(`${API_BASE}/api/chat_stream`, { method: 'POST', credentials: 'same-origin', body: fd }) + .then(async (res) => { + if (!res.ok || !res.body) return; + const reader = res.body.getReader(); + while (true) { const { done } = await reader.read(); if (done) break; } + if (window.sessionModule && window.sessionModule.markStreamComplete) { + try { window.sessionModule.markStreamComplete(sid); } catch {} + } + const doneNote = _notes.find(x => x.id === noteId); + if (doneNote && Array.isArray(doneNote.items) && doneNote.items[idx]) { + doneNote.agent_session_id = sid; + doneNote.items[idx].agent_session_id = sid; + doneNote.items[idx].agent_session_title = sessionTitle; + doneNote.items[idx].agent_status = 'stream_complete'; + doneNote.items[idx].agent_stream_completed_at = new Date().toISOString(); + _renderNotes(); + _patchNote(noteId, { items: doneNote.items, agent_session_id: sid }).catch(() => {}); + } + }) + .catch(() => {}); + + uiModule.showToast('Agent working on this item — tap the Agent tag when ready'); + } catch (e) { + uiModule.showError('Agent failed: ' + (e.message || e)); + } +} + async function _copyNote(noteId, btnEl) { const note = _notes.find(n => n.id === noteId); if (!note) return false; From e442cc859def5d901e95c97833ae220afe2f18af Mon Sep 17 00:00:00 2001 From: pewdiepie-archdaemon Date: Fri, 19 Jun 2026 00:35:02 +0000 Subject: [PATCH 15/22] Research panel: inline Library-link hint when there are no past runs (replaces the standalone past-research column) --- static/js/research/panel.js | 51 ++++++++++++++----------------------- 1 file changed, 19 insertions(+), 32 deletions(-) diff --git a/static/js/research/panel.js b/static/js/research/panel.js index 3abf75fb1..8861dfddf 100644 --- a/static/js/research/panel.js +++ b/static/js/research/panel.js @@ -366,20 +366,13 @@ function _buildPanelHTML() {
-

Research

+

Research

Multi-step web research with an LLM-in-the-loop agent - +

-
- - - - - -
@@ -787,6 +780,21 @@ function _renderJobs() { + '' + '' + ''; + if (key === 'past') { + const hint = document.createElement('span'); + hint.className = 'research-library-hint'; + hint.innerHTML = 'Multi-step web research with an LLM-in-the-loop agent '; + hint.querySelector('.research-library-link').addEventListener('click', (e) => { + e.stopPropagation(); + // Close the research panel first so the Library opens ABOVE it on mobile + // (otherwise it stacks under the full-screen panel). + closePanel(); + if (window.documentModule && window.documentModule.openLibrary) { + window.documentModule.openLibrary({ tab: 'research' }); + } + }); + header.appendChild(hint); + } header.addEventListener('click', () => { const nowCollapsed = sec.classList.toggle('collapsed'); if (nowCollapsed) _collapsedSections.add(key); else _collapsedSections.delete(key); @@ -803,27 +811,6 @@ function _renderJobs() { }); const body = document.createElement('div'); body.className = 'research-section-body'; - // Past Research header: link goes INLINE next to the title instead - // of on a second row. Append it to the title span as a small chip. - if (key === 'past') { - const titleEl = header.querySelector('.research-section-title'); - if (titleEl) { - const hint = document.createElement('span'); - hint.className = 'research-library-hint research-library-hint-inline'; - hint.style.cssText = 'margin-left:8px;font-size:10.5px;opacity:0.65;font-weight:normal;'; - hint.innerHTML = '— all in '; - hint.querySelector('.research-library-link').addEventListener('click', (e) => { - e.stopPropagation(); - // Close the research panel first so the Library opens ABOVE it on mobile - // (otherwise it stacks under the full-screen panel). - closePanel(); - if (window.documentModule && window.documentModule.openLibrary) { - window.documentModule.openLibrary({ tab: 'research' }); - } - }); - titleEl.appendChild(hint); - } - } arr.forEach(j => body.appendChild(_buildJobCard(j))); sec.appendChild(header); sec.appendChild(body); @@ -1014,9 +1001,9 @@ function _buildJobCard(job) {
${failNote}
- - + +
From 8c46172e871d09d072b7cd2a70c00831735e81be Mon Sep 17 00:00:00 2001 From: pewdiepie-archdaemon Date: Fri, 19 Jun 2026 00:35:08 +0000 Subject: [PATCH 16/22] Sidebar + theme: drop hamburger cycle no-op branch; add brandMixTo CSS var to themes for logo-gradient end color --- static/js/sidebar-layout.js | 11 +---------- static/js/theme.js | 4 +++- 2 files changed, 4 insertions(+), 11 deletions(-) diff --git a/static/js/sidebar-layout.js b/static/js/sidebar-layout.js index 9135e93ba..44875825f 100644 --- a/static/js/sidebar-layout.js +++ b/static/js/sidebar-layout.js @@ -103,7 +103,6 @@ export function initSidebarLayout(Storage, opts) { }); // Hamburger cycles: full sidebar → mini → off → full - // Shift-click swaps sidebar side let _userToggledSidebar = false; let _wasAutoCollapsed = false; @@ -122,8 +121,7 @@ export function initSidebarLayout(Storage, opts) { if (window.innerWidth < 768 && cc && cc.classList.contains('compare-active')) return; _userToggledSidebar = true; // Optionally place the sidebar on a specific edge (the swipe gesture passes - // the direction). Persist it + re-anchor the doc panel, same as a - // shift-click on the hamburger. + // the direction). Persist it + re-anchor the doc panel. if (side === 'left' || side === 'right') { const wantRight = side === 'right'; if (sidebar.classList.contains('right-side') !== wantRight) { @@ -143,13 +141,6 @@ export function initSidebarLayout(Storage, opts) { hamburgerBtn.addEventListener('click', (e) => { e.stopPropagation(); const sidebar = document.getElementById('sidebar'); - if (e.shiftKey) { - sidebar.classList.toggle('right-side'); - Storage.set(Storage.KEYS.SIDEBAR_SIDE, sidebar.classList.contains('right-side') ? 'right' : 'left'); - syncRailSide(); - if (documentModule && documentModule.swapSide) documentModule.swapSide(); - return; - } _userToggledSidebar = true; const isSidebarVisible = !sidebar.classList.contains('hidden'); diff --git a/static/js/theme.js b/static/js/theme.js index 0c7aa5882..77c74d07a 100644 --- a/static/js/theme.js +++ b/static/js/theme.js @@ -26,7 +26,7 @@ export const THEMES = { gpt: { bg:'#212121', fg:'#ececec', panel:'#171717', border:'#424242', red:'#949494', advanced: { sendBtnBg: '#949494', sendBtnHover: '#7f7f7f', userBubbleBg: '#2f2f2f', aiBubbleBg: '#171717', - inputBg: '#2f2f2f' } }, + inputBg: '#2f2f2f', brandColor: '#ffffff', brandMixTo: '#ffffff' } }, claude: { bg:'#262624', fg:'#f5f4f0', panel:'#30302e', border:'#4a4a47', red:'#c6613f' }, cute: { bg:'#fff0f5', fg:'#d4608a', panel:'#fff8fa', border:'#f0c0d0', red:'#ff6b9d' }, }; @@ -184,6 +184,7 @@ const ADV_KEYS = [ { key: 'bubbleBorder', css: '--bubble-border', label: 'Border Chat Bubble', group: 'Chat Bubbles' }, { key: 'sidebarBg', css: '--sidebar-bg', label: 'Sidebar Bg', group: 'Sidebar' }, { key: 'brandColor', css: '--brand-color', label: 'Odysseus Logo', group: 'Sidebar' }, + { key: 'brandMixTo', css: '--brand-mix-to', label: 'Logo Gradient End', group: 'Sidebar' }, { key: 'hamburgerColor', css: '--hamburger-color', label: 'Hamburger Menu', group: 'Sidebar' }, { key: 'inputBg', css: '--input-bg', label: 'Input Bg', group: 'Chat Input / Prompt Area' }, { key: 'inputBorder', css: '--input-border', label: 'Input Border', group: 'Chat Input / Prompt Area' }, @@ -203,6 +204,7 @@ function computeAdvancedDefaults(colors) { bubbleBorder: colors.border, sidebarBg: colors.panel, brandColor: red, + brandMixTo: colors.fg, hamburgerColor: colors.fg, inputBg: colors.panel, inputBorder: colors.border, From c5042149254fb310836e4885ccf786389809d2b6 Mon Sep 17 00:00:00 2001 From: pewdiepie-archdaemon Date: Sun, 21 Jun 2026 11:02:35 +0000 Subject: [PATCH 17/22] Cookbook model workflow fixes --- routes/chat_helpers.py | 37 +- routes/chat_routes.py | 11 +- routes/cookbook_helpers.py | 19 +- routes/cookbook_routes.py | 212 +++- routes/email_helpers.py | 53 +- routes/email_routes.py | 204 +++- routes/hwfit_routes.py | 96 +- routes/model_routes.py | 11 +- routes/shell_routes.py | 58 +- src/agent_loop.py | 182 +++- src/agent_tools/web_tools.py | 44 +- src/builtin_actions.py | 98 +- src/endpoint_resolver.py | 3 + src/llm_core.py | 2 + src/task_endpoint.py | 66 +- src/task_scheduler.py | 45 +- src/tool_implementations.py | 31 +- static/icons/ollama-mark-crop.png | Bin 0 -> 7498 bytes static/icons/ollama-mark.png | Bin 0 -> 7487 bytes static/icons/sglang-logo.png | Bin 0 -> 109100 bytes static/icons/sglang-mark.png | Bin 0 -> 2171 bytes static/index.html | 9 +- static/js/chat.js | 24 +- static/js/compare/index.js | 90 +- static/js/compare/stream.js | 31 +- static/js/compare/vote.js | 2 +- static/js/cookbook-hwfit.js | 12 - static/js/cookbook.js | 295 +++++- static/js/cookbookRunning.js | 79 +- static/js/cookbookServe.js | 935 +++++++++++++++--- static/js/document.js | 159 ++- static/js/emailLibrary.js | 51 +- static/js/markdown.js | 25 +- static/js/modelPicker.js | 21 + static/js/tasks.js | 25 +- static/style.css | 520 +++++++++- tests/test_cookbook_cpu_only_serve.py | 30 + tests/test_copy_message_strips_thinking_js.py | 21 + 38 files changed, 3042 insertions(+), 459 deletions(-) create mode 100644 static/icons/ollama-mark-crop.png create mode 100644 static/icons/ollama-mark.png create mode 100644 static/icons/sglang-logo.png create mode 100644 static/icons/sglang-mark.png diff --git a/routes/chat_helpers.py b/routes/chat_helpers.py index 25f12d566..f030d6c91 100644 --- a/routes/chat_helpers.py +++ b/routes/chat_helpers.py @@ -22,6 +22,31 @@ from fastapi import HTTPException logger = logging.getLogger(__name__) +_CASUAL_OPENING_RE = re.compile( + r"^\s*(?:h+i+|hey+|hello+|yo+|sup+|what'?s up|wass?up|hiya|howdy|" + r"lol|lmao|haha+|hehe+|thanks?|thank you|ty|idk|dunno|meh|bruh|bro)\b(?P.*)$", + re.IGNORECASE, +) +_CASUAL_BLOCKLIST_RE = re.compile( + r"\b(?:cookbook|serve|serving|launch|start|vllm|sglang|llama\.?cpp|ollama|" + r"download|model|email|document|doc|note|calendar|task|search|web|research|" + r"file|folder|repo|git|settings?|endpoint|api|token|mcp)\b", + re.IGNORECASE, +) + + +def _is_casual_low_signal(text: str) -> bool: + """Short greetings/slang should not pull memory, skills, RAG, or docs.""" + s = str(text or "").strip() + m = _CASUAL_OPENING_RE.match(s) + if not m: + return False + tail = m.group("tail") or "" + if _CASUAL_BLOCKLIST_RE.search(tail): + return False + tail_words = re.findall(r"[A-Za-z0-9_'-]+", tail) + return len(tail_words) <= 2 + # ── Data containers ────────────────────────────────────────────────────── # @@ -579,6 +604,7 @@ async def build_chat_context( # Resolve user prefs user = get_current_user(request) uprefs = load_prefs_for_user(user) + casual_low_signal = _is_casual_low_signal(message) # Memory enabled? mem_enabled = not incognito and not no_memory and uprefs.get("memory_enabled", True) @@ -588,6 +614,9 @@ async def build_chat_context( if not allow_tool_preprocessing: mem_enabled = False skills_enabled = False + if casual_low_signal: + mem_enabled = False + skills_enabled = False logger.debug( "Memory enabled=%s for user=%s (incognito=%s, no_memory=%s, pref=%s)", mem_enabled, user, incognito, no_memory, uprefs.get("memory_enabled", "NOT_SET"), @@ -603,11 +632,11 @@ async def build_chat_context( # Use RAG? use_rag_val = (str(use_rag).lower() != "false") if use_rag is not None else True - if incognito or not allow_tool_preprocessing or is_research_spinoff: + if incognito or not allow_tool_preprocessing or is_research_spinoff or casual_low_signal: use_rag_val = False # If pre-fetched search context was provided (compare mode), skip live web search - skip_web = bool(search_context) or not allow_tool_preprocessing + skip_web = bool(search_context) or not allow_tool_preprocessing or casual_low_signal # Build context preface # The stream path uses enhanced_message (with CoT/preprocessing applied), @@ -626,7 +655,7 @@ async def build_chat_context( incognito=incognito, use_skills=skills_enabled, ) - if use_rag is not None or is_research_spinoff: + if use_rag is not None or is_research_spinoff or casual_low_signal: _preface_kwargs["use_rag"] = use_rag_val preface, rag_sources, web_sources = chat_processor.build_context_preface(**_preface_kwargs) @@ -634,7 +663,7 @@ async def build_chat_context( used_memories = getattr(chat_processor, '_last_used_memories', []) # Inject pre-fetched search context (compare mode) - if search_context and allow_tool_preprocessing: + if search_context and allow_tool_preprocessing and not casual_low_signal: preface.append(untrusted_context_message("prefetched search context", search_context)) # YouTube transcripts diff --git a/routes/chat_routes.py b/routes/chat_routes.py index c33f7c2c7..0967667f1 100644 --- a/routes/chat_routes.py +++ b/routes/chat_routes.py @@ -826,7 +826,11 @@ def setup_chat_routes( from src.settings import get_setting _global_disabled = get_setting("disabled_tools", []) if _global_disabled and isinstance(_global_disabled, list): - disabled_tools.update(_global_disabled) + explicit_web_allowed = allow_web_search is not None and str(allow_web_search).lower() == "true" + if explicit_web_allowed: + disabled_tools.update(t for t in _global_disabled if t not in {"web_search", "web_fetch"}) + else: + disabled_tools.update(_global_disabled) # Light auto-escalation: the user is in chat mode and just expressed a # notes/calendar/email intent. Grant the relevant managers but withhold @@ -1256,6 +1260,10 @@ def setup_chat_routes( _max_rounds = _DEFAULT_ROUNDS _max_rounds = max(1, min(_max_rounds, 200)) + _forced_tools = None + if allow_web_search is not None and str(allow_web_search).lower() == "true": + _forced_tools = {"web_search", "web_fetch"} + async for chunk in stream_agent_loop( sess.endpoint_url, sess.model, @@ -1277,6 +1285,7 @@ def setup_chat_routes( plan_mode=plan_mode, approved_plan=approved_plan or None, workspace=workspace or None, + forced_tools=_forced_tools, ): if chunk.startswith("data: ") and not chunk.startswith("data: [DONE]"): try: diff --git a/routes/cookbook_helpers.py b/routes/cookbook_helpers.py index 3600a9ad1..bf1124933 100644 --- a/routes/cookbook_helpers.py +++ b/routes/cookbook_helpers.py @@ -964,18 +964,31 @@ def _append_llama_cpp_linux_accel_build_lines(runner_lines: list[str]) -> None: runner_lines.append(' fi # end _odysseus_have_prebuilt guard') -def _llama_cpp_rebuild_cmd() -> str: +def _llama_cpp_rebuild_cmd(update_source: bool = False) -> str: """Shell command that clears the Cookbook-managed llama.cpp build. Removes the cached ``llama-server`` symlink and the ``~/llama.cpp/build*`` directory so the next llama.cpp serve recompiles from source, picking up a CUDA or HIP toolchain if one is now available. The serve bootstrap only builds when ``llama-server`` is missing from PATH, so without this an - existing CPU-only build is reused forever. It deliberately installs and - downloads nothing; the rebuild itself happens on the next serve. + existing CPU-only build is reused forever. When ``update_source`` is true, + the command also fast-forwards the Cookbook-managed ``~/llama.cpp`` checkout + if it exists. The rebuild itself happens on the next serve. """ + update_cmd = '' + if update_source: + update_cmd = ( + 'if [ -d "$HOME/llama.cpp/.git" ]; then ' + 'git -C "$HOME/llama.cpp" pull --ff-only --depth 1 || ' + 'echo "[odysseus] WARNING: llama.cpp source update failed; clearing cached build anyway."; ' + 'elif command -v git >/dev/null 2>&1; then ' + 'git clone --depth 1 https://github.com/ggml-org/llama.cpp "$HOME/llama.cpp" || ' + 'echo "[odysseus] WARNING: llama.cpp clone failed; clearing cached build anyway."; ' + 'fi && ' + ) return ( 'mkdir -p "$HOME/bin" && ' + f'{update_cmd}' 'rm -f "$HOME/bin/llama-server" && ' 'rm -rf "$HOME/llama.cpp/build" "$HOME/llama.cpp/build-vulkan" && ' 'echo "[odysseus] Cleared the cached llama.cpp build. ' diff --git a/routes/cookbook_routes.py b/routes/cookbook_routes.py index 0bd38d19f..0d8257574 100644 --- a/routes/cookbook_routes.py +++ b/routes/cookbook_routes.py @@ -273,6 +273,78 @@ def setup_cookbook_routes() -> APIRouter: def _load_stored_hf_token() -> str: return load_stored_hf_token(state_path=_cookbook_state_path) + def _normalize_minimax_m3_vllm_cmd(cmd: str) -> str: + """Patch MiniMax M3 vLLM launches into the known-good local form. + + The browser form can be stale or omit advanced-only fields. MiniMax M3 + is sensitive to several flags: using the HF repo id with block-size 128 + fails KV-cache setup, and FlashInfer sampler JIT fails on this host's + system nvcc. Normalize server-side before writing the tmux runner. + """ + if not cmd or "vllm serve" not in cmd or not re.search(r"minimax.*m3", cmd, re.I): + return cmd + try: + parts = shlex.split(cmd) + except ValueError: + return cmd + if "serve" not in parts: + return cmd + + env_re = re.compile(r"^[A-Za-z_][A-Za-z0-9_]*=") + env_parts = [p for p in parts if env_re.match(p)] + body = [p for p in parts if not env_re.match(p)] + try: + serve_i = body.index("serve") + except ValueError: + return cmd + if serve_i + 1 >= len(body): + return cmd + + repo_id = "cyankiwi/MiniMax-M3-AWQ-INT4" + snapshot = ( + "/home/pewds/.cache/huggingface/hub/" + "models--cyankiwi--MiniMax-M3-AWQ-INT4/" + "snapshots/4082acbbec1236d21828d55b6bb0fe02ade4ab5b" + ) + if body[serve_i + 1] == repo_id: + body[serve_i + 1] = snapshot + + def add_env(key: str, value: str) -> None: + if not any(p.startswith(f"{key}=") for p in env_parts): + env_parts.append(f"{key}={value}") + + def has_flag(flag: str) -> bool: + return any(p == flag or p.startswith(flag + "=") for p in body) + + def set_flag(flag: str, value: str) -> None: + for i, part in enumerate(body): + if part == flag: + if i + 1 < len(body): + body[i + 1] = value + else: + body.append(value) + return + if part.startswith(flag + "="): + body[i] = f"{flag}={value}" + return + body.extend([flag, value]) + + def add_bool(flag: str) -> None: + if not has_flag(flag): + body.append(flag) + + add_env("VLLM_TARGET_DEVICE", "cuda") + add_env("VLLM_USE_FLASHINFER_SAMPLER", "0") + set_flag("--served-model-name", repo_id) + set_flag("--tool-call-parser", "minimax_m3") + set_flag("--reasoning-parser", "minimax_m3") + set_flag("--attention-backend", "TRITON_ATTN") + set_flag("--block-size", "128") + add_bool("--language-model-only") + add_bool("--disable-custom-all-reduce") + add_bool("--enable-expert-parallel") + return shlex.join(env_parts + body) + def _cookbook_ssh_dir() -> Path: # The Docker image keeps cookbook keys under /app/.ssh; that path only # exists inside the container. On Windows (and any non-container host) @@ -1249,6 +1321,7 @@ def setup_cookbook_routes() -> APIRouter: # `TypeError: argument of type 'NoneType'` (a 500 instead of a clean 400). req.cmd = _validate_serve_cmd(req.cmd) or "" req.cmd = _normalize_llama_cpp_python_cache_types(req.cmd) or "" + req.cmd = _normalize_minimax_m3_vllm_cmd(req.cmd) req.cmd = _venv_safe_local_pip_install_cmd( req.cmd, local=not bool(req.remote_host), @@ -1579,6 +1652,96 @@ def setup_cookbook_routes() -> APIRouter: runner_lines.append(' echo "ERROR: vLLM is not installed."') runner_lines.append(' ODYSSEUS_PREFLIGHT_EXIT=127') runner_lines.append('fi') + runner_lines.append(f"ODYSSEUS_SERVE_CMD='{_bash_squote(req.cmd)}'") + runner_lines.append('if [ -z "$ODYSSEUS_PREFLIGHT_EXIT" ]; then') + runner_lines.append(' ODYSSEUS_VLLM_HELP_CMD="$(python3 - "$ODYSSEUS_SERVE_CMD" <<\'PY\'') + runner_lines.append('import shlex, sys') + runner_lines.append('parts = shlex.split(sys.argv[1])') + runner_lines.append('try:') + runner_lines.append(' serve_i = parts.index("serve")') + runner_lines.append('except ValueError:') + runner_lines.append(' print("vllm serve --help")') + runner_lines.append('else:') + runner_lines.append(' print(shlex.join(parts[:serve_i + 1] + ["--help"]))') + runner_lines.append('PY') + runner_lines.append(')"') + runner_lines.append(' ODYSSEUS_VLLM_SUPPORTS_SWAP=0') + runner_lines.append(' if eval "$ODYSSEUS_VLLM_HELP_CMD" 2>&1 | grep -q -- "--swap-space"; then ODYSSEUS_VLLM_SUPPORTS_SWAP=1; fi') + runner_lines.append('fi') + runner_lines.append('if [ -z "$ODYSSEUS_PREFLIGHT_EXIT" ] && [ "${ODYSSEUS_VLLM_SUPPORTS_SWAP:-0}" = "1" ] && ! printf "%s" "$ODYSSEUS_SERVE_CMD" | grep -q -- "--swap-space"; then') + runner_lines.append(' echo "[odysseus] Setting vLLM --swap-space 0 so the runtime does not reserve CPU swap per GPU."') + runner_lines.append(' ODYSSEUS_SERVE_CMD="${ODYSSEUS_SERVE_CMD} --swap-space 0"') + runner_lines.append('fi') + runner_lines.append('if [ -z "$ODYSSEUS_PREFLIGHT_EXIT" ] && [ "${ODYSSEUS_VLLM_SUPPORTS_SWAP:-0}" != "1" ]; then') + runner_lines.append(' if printf "%s" "$ODYSSEUS_SERVE_CMD" | grep -q -- "--swap-space"; then') + runner_lines.append(' echo "[odysseus] vLLM serve does not expose --swap-space; removing the flag and patching the runtime default to 0."') + runner_lines.append(' ODYSSEUS_SERVE_CMD="$(python3 - "$ODYSSEUS_SERVE_CMD" <<\'PY\'') + runner_lines.append('import shlex, sys') + runner_lines.append('parts = shlex.split(sys.argv[1])') + runner_lines.append('out = []') + runner_lines.append('skip = False') + runner_lines.append('for part in parts:') + runner_lines.append(' if skip:') + runner_lines.append(' skip = False') + runner_lines.append(' continue') + runner_lines.append(' if part == "--swap-space":') + runner_lines.append(' skip = True') + runner_lines.append(' continue') + runner_lines.append(' if part.startswith("--swap-space="):') + runner_lines.append(' continue') + runner_lines.append(' out.append(part)') + runner_lines.append('print(shlex.join(out))') + runner_lines.append('PY') + runner_lines.append(')"') + runner_lines.append(' fi') + runner_lines.append(' ODYSSEUS_SERVE_CMD="$(python3 - "$ODYSSEUS_SERVE_CMD" <<\'PY\'') + runner_lines.append('import shlex, sys') + runner_lines.append('parts = shlex.split(sys.argv[1])') + runner_lines.append('patch = r"""import inspect, sys') + runner_lines.append('from vllm.engine.arg_utils import EngineArgs, AsyncEngineArgs') + runner_lines.append('def _odysseus_swap0(cls):') + runner_lines.append(' params = list(inspect.signature(cls).parameters)') + runner_lines.append(' if "swap_space" not in params:') + runner_lines.append(' return') + runner_lines.append(' idx = params.index("swap_space")') + runner_lines.append(' defaults = list(cls.__init__.__defaults__ or ())') + runner_lines.append(' if idx < len(defaults):') + runner_lines.append(' defaults[idx] = 0') + runner_lines.append(' cls.__init__.__defaults__ = tuple(defaults)') + runner_lines.append(' fields = getattr(cls, "__dataclass_fields__", {})') + runner_lines.append(' if "swap_space" in fields:') + runner_lines.append(' fields["swap_space"].default = 0') + runner_lines.append('_odysseus_swap0(EngineArgs)') + runner_lines.append('_odysseus_swap0(AsyncEngineArgs)') + runner_lines.append('try:') + runner_lines.append(' from vllm.config import CacheConfig') + runner_lines.append(' CacheConfig.swap_space = 0') + runner_lines.append('except Exception:') + runner_lines.append(' pass') + runner_lines.append('_orig_create_engine_config = EngineArgs.create_engine_config') + runner_lines.append('def _odysseus_create_engine_config(self, *args, **kwargs):') + runner_lines.append(' self.swap_space = 0') + runner_lines.append(' return _orig_create_engine_config(self, *args, **kwargs)') + runner_lines.append('EngineArgs.create_engine_config = _odysseus_create_engine_config') + runner_lines.append('AsyncEngineArgs.create_engine_config = _odysseus_create_engine_config') + runner_lines.append('from vllm.entrypoints.cli.main import main') + runner_lines.append('sys.exit(main())"""') + runner_lines.append('try:') + runner_lines.append(' serve_i = parts.index("serve")') + runner_lines.append('except ValueError:') + runner_lines.append(' print(shlex.join(parts))') + runner_lines.append('else:') + runner_lines.append(' exe_i = serve_i - 1') + runner_lines.append(' exe = parts[exe_i] if exe_i >= 0 else "vllm"') + runner_lines.append(' py = "python3"') + runner_lines.append(' if exe.endswith("/bin/vllm"):') + runner_lines.append(' py = exe[:-len("/bin/vllm")] + "/bin/python"') + runner_lines.append(' parts[exe_i:serve_i] = [py, "-c", patch]') + runner_lines.append(' print(shlex.join(parts))') + runner_lines.append('PY') + runner_lines.append(')"') + runner_lines.append(' echo "[odysseus] Patched vLLM internal swap_space default to 0 for this runtime."') + runner_lines.append('fi') elif "sglang.launch_server" in req.cmd: runner_lines.append('export PATH="$HOME/.local/bin:$PATH"') runner_lines.append('if ! command -v sglang &>/dev/null; then') @@ -1620,7 +1783,10 @@ def setup_cookbook_routes() -> APIRouter: runner_lines, keep_shell_open=not local_windows, ) - runner_lines.append(req.cmd) + if "vllm serve" in req.cmd: + runner_lines.append('eval "$ODYSSEUS_SERVE_CMD"') + else: + runner_lines.append(req.cmd) if local_windows: # Detached background process — no interactive shell to keep open. # Print the exit marker the status poller looks for, then stop. @@ -2418,16 +2584,14 @@ def setup_cookbook_routes() -> APIRouter: # Add 30% headroom for KV cache, activations, etc. needed_vram = (est_vram * 1.3) if est_vram else None - if vram_gb > 0 and needed_vram is not None and needed_vram > vram_gb: - continue - # Unknown-size models (e.g. MiniMax-M2.7, DeepSeek-V4-Flash) have no - # "NB" in the repo id, so the regex above can't extract their - # param count. Previously we dropped them entirely, which made - # brand-new flagship releases silently vanish from this list even - # on rigs with hundreds of GB of VRAM. Adapters/LoRAs are already - # filtered by _is_excluded(), so what falls through here is - # overwhelmingly full models — keep them, just without a size - # badge (the frontend handles needed_vram_gb=null gracefully). + if vram_gb > 0: + if needed_vram is None: + # The "trending models that fit" list must be conservative: + # if we cannot estimate size from the repo id/tags, do not + # present it as runnable on this hardware. + continue + if needed_vram > vram_gb: + continue out.append({ "repo_id": repo_id, @@ -2624,6 +2788,32 @@ def setup_cookbook_routes() -> APIRouter: except Exception as e: logger.warning(f"orphan sweep: state write failed: {e}") + @router.get("/api/cookbook/hf-gguf-files") + async def hf_gguf_files(repo_id: str, owner: str = Depends(require_user)): + """List GGUF files in a HuggingFace repo for the direct-download picker.""" + import httpx + + repo_id = _validate_repo_id(repo_id) + url = f"https://huggingface.co/api/models/{repo_id}" + try: + headers = {} + token = _load_stored_hf_token() + if token: + headers["Authorization"] = f"Bearer {token}" + async with httpx.AsyncClient(timeout=15, follow_redirects=True) as client: + resp = await client.get(url, headers=headers) + if resp.status_code != 200: + return {"ok": False, "files": [], "error": f"HF API HTTP {resp.status_code}"} + data = resp.json() + except Exception as e: + return {"ok": False, "files": [], "error": str(e)} + files = [ + str(s.get("rfilename") or "") + for s in data.get("siblings", []) + if str(s.get("rfilename") or "").lower().endswith(".gguf") + ] + return {"ok": True, "repo_id": repo_id, "files": files} + # In-memory cache for the Ollama library scrape. ollama.com is a public # site, but it doesn't expose a stable JSON listing — we fetch the HTML # search page and regex out the model cards. Cached for 1 h so a busy diff --git a/routes/email_helpers.py b/routes/email_helpers.py index b3df6a560..a054f4df8 100644 --- a/routes/email_helpers.py +++ b/routes/email_helpers.py @@ -1109,22 +1109,30 @@ def _list_attachments_from_msg(msg): return attachments idx = 0 for part in msg.walk(): - if part.is_multipart(): - continue cd = str(part.get("Content-Disposition", "")) ct = part.get_content_type() + is_attached_email = ct == "message/rfc822" and ("attachment" in cd.lower() or part.get_filename()) + if part.is_multipart() and not is_attached_email: + continue # Skip text/html body parts (only consider real attachments) if ct in ("text/plain", "text/html") and "attachment" not in cd: continue filename = part.get_filename() if filename: filename = _decode_header(filename) + if ct == "message/rfc822" and not re.search(r"\.[A-Za-z0-9]{1,8}$", filename): + filename = f"{filename}.eml" else: # Inline images, etc. - generate a name - ext = ct.split("/")[-1] if "/" in ct else "bin" + ext = "eml" if ct == "message/rfc822" else (ct.split("/")[-1] if "/" in ct else "bin") filename = f"attachment_{idx}.{ext}" payload = part.get_payload(decode=True) - size = len(payload) if payload else 0 + if payload is None and ct == "message/rfc822": + try: + payload = part.as_bytes() + except Exception: + payload = b"" + size = len(payload) if payload is not None else 0 attachments.append({ "index": idx, "filename": filename, @@ -1136,29 +1144,58 @@ def _list_attachments_from_msg(msg): return attachments +def _is_likely_signature_image_attachment(att: dict) -> bool: + """Match the reader's inline signature/logo image filter.""" + filename = str((att or {}).get("filename") or "").lower() + if not re.search(r"\.(png|jpe?g|gif|bmp|svg|webp)$", filename): + return False + size = int((att or {}).get("size") or 0) + if re.search(r"^image\d{3,}\.(png|jpe?g|gif)$", filename): + return True + if re.search(r"^(signature|logo|sig|footer|banner)[-_\d]*\.(png|jpe?g|gif|svg)$", filename): + return True + return 0 < size < 30 * 1024 + + +def _has_visible_attachments(msg) -> bool: + """Return True only for attachments the reader will render as chips.""" + return any( + not _is_likely_signature_image_attachment(att) + for att in _list_attachments_from_msg(msg) + ) + + def _extract_attachment_to_disk(msg, index, target_dir): """Extract a specific attachment to disk and return the file path.""" if not msg.is_multipart(): return None idx = 0 for part in msg.walk(): - if part.is_multipart(): - continue cd = str(part.get("Content-Disposition", "")) ct = part.get_content_type() + is_attached_email = ct == "message/rfc822" and ("attachment" in cd.lower() or part.get_filename()) + if part.is_multipart() and not is_attached_email: + continue if ct in ("text/plain", "text/html") and "attachment" not in cd: continue if idx == index: filename = part.get_filename() if filename: filename = _decode_header(filename) + if ct == "message/rfc822" and not re.search(r"\.[A-Za-z0-9]{1,8}$", filename): + filename = f"{filename}.eml" else: - ext = ct.split("/")[-1] if "/" in ct else "bin" + ext = "eml" if ct == "message/rfc822" else (ct.split("/")[-1] if "/" in ct else "bin") filename = f"attachment_{idx}.{ext}" # Sanitize safe_name = re.sub(r"[^\w\s\-.]", "_", filename).strip() payload = part.get_payload(decode=True) - if not payload: + if payload is None and ct == "message/rfc822": + try: + payload = part.as_bytes() + except Exception: + payload = b"" + if payload is None: return None target_dir.mkdir(parents=True, exist_ok=True) filepath = target_dir / safe_name diff --git a/routes/email_routes.py b/routes/email_routes.py index 416ad55b2..81d2b7330 100644 --- a/routes/email_routes.py +++ b/routes/email_routes.py @@ -44,7 +44,7 @@ from routes.email_helpers import ( _send_smtp_message, _smtp_security_mode, _IMAP_TIMEOUT_SECONDS, _open_imap_connection, _imap_connect, _imap, _decode_header, _detect_sent_folder, _detect_drafts_folder, - _extract_attachment_text, _list_attachments_from_msg, + _extract_attachment_text, _list_attachments_from_msg, _has_visible_attachments, _is_likely_signature_image_attachment, _extract_attachment_to_disk, _extract_html, _extract_text, _fetch_sender_thread_context, _pre_retrieve_context, _EMAIL_REPLY_SYS_PROMPT_BASE, _POOL_HOOKS, @@ -58,6 +58,7 @@ from routes.email_pollers import _start_poller logger = logging.getLogger(__name__) ODYSSEUS_MAIL_ORIGIN = "odysseus-ui" +EMAIL_READ_ATTACHMENT_VERSION = 2 def _email_tag_owner_aliases(account_id: str | None, owner: str = "") -> list[str]: @@ -244,6 +245,21 @@ def _imap_uid_fetch(conn, uid_set: str | bytes, query: str): return conn.uid("FETCH", _uid_bytes(uid_set), query) +def _imap_search_quote(value: str) -> str: + return '"' + str(value or "").replace("\\", "\\\\").replace('"', '\\"') + '"' + + +def _message_id_chain(*values: str) -> list[str]: + seen = set() + out = [] + for value in values: + for mid in re.findall(r"<[^>]+>", value or ""): + if mid not in seen: + seen.add(mid) + out.append(mid) + return out + + def _uid_from_fetch_meta(meta_b: bytes) -> str: m = re.search(rb"\bUID\s+(\d+)\b", meta_b) return m.group(1).decode() if m else "" @@ -1003,6 +1019,65 @@ def setup_email_routes(): except Exception: pass + def _related_thread_attachments_sync( + folder: str, + account_id: str | None, + owner: str, + current_uid: str, + current_message_id: str, + in_reply_to: str, + references: str, + limit: int = 12, + ) -> list[dict]: + """Return visible attachments from referenced messages in this folder.""" + wanted_ids = _message_id_chain(references, in_reply_to) + current_mid = (current_message_id or "").strip() + wanted_ids = [mid for mid in wanted_ids if mid and mid != current_mid] + if not wanted_ids: + return [] + + related: list[dict] = [] + try: + with _imap(account_id, owner=owner) as conn: + conn.select(_q(folder), readonly=True) + # Search newest referenced messages first; cap work so opening + # a long thread stays bounded. + for mid in reversed(wanted_ids[-10:]): + if len(related) >= limit: + break + status, data = _imap_uid_search(conn, f'(HEADER Message-ID {_imap_search_quote(mid)})') + if status != "OK" or not data or not data[0]: + continue + for uid_b in reversed(data[0].split()[-3:]): + source_uid = uid_b.decode(errors="ignore") + if not source_uid or source_uid == str(current_uid): + continue + st2, msg_data = _imap_uid_fetch(conn, source_uid, "(BODY.PEEK[])") + if st2 != "OK" or not msg_data or not isinstance(msg_data[0], tuple): + continue + msg = email_mod.message_from_bytes(msg_data[0][1]) + source_from = _decode_header(msg.get("From", "")) + source_subject = _decode_header(msg.get("Subject", "")) + source_date = msg.get("Date", "") + for att in _list_attachments_from_msg(msg): + if _is_likely_signature_image_attachment(att): + continue + enriched = dict(att) + enriched.update({ + "source_uid": source_uid, + "source_folder": folder, + "source_message_id": (msg.get("Message-ID") or "").strip(), + "source_from": source_from, + "source_subject": source_subject, + "source_date": source_date, + }) + related.append(enriched) + if len(related) >= limit: + break + except Exception as e: + logger.debug(f"related thread attachment lookup failed uid={current_uid}: {e}") + return related + @router.get("/list") async def list_emails( folder: str = Query("INBOX"), @@ -1273,6 +1348,17 @@ def setup_email_routes(): sender_name, sender_addr = email.utils.parseaddr(sender) parsed_date = email.utils.parsedate_to_datetime(date_str) if date_str else None attachments = _list_attachments_from_msg(msg) + related_attachments = [] + if not _has_visible_attachments(msg): + related_attachments = _related_thread_attachments_sync( + folder, + account_id, + owner, + uid, + message_id, + in_reply_to, + references, + ) if mark_seen: # Set \Seen in a separate readwrite session so concurrent reads @@ -1381,6 +1467,8 @@ def setup_email_routes(): "body": body, "body_html": body_html, "attachments": attachments, + "related_attachments": related_attachments, + "attachment_version": EMAIL_READ_ATTACHMENT_VERSION, "cached_summary": cached_summary, "cached_ai_reply": cached_ai_reply, "boundaries": cached_boundaries, @@ -1411,6 +1499,12 @@ def setup_email_routes(): """Read email body. Cached for 30m, sync IMAP work runs in a thread.""" ck = _read_cache_key(account_id, folder, uid, owner=owner) cached = _read_cache_get(ck) + if cached is not None: + # Older cached read responses lack the thread-attachment fallback. + # Fetch once so replies that reference prior attachments can show + # those files without waiting for cache expiry. + if cached.get("attachment_version") != EMAIL_READ_ATTACHMENT_VERSION: + cached = None if cached is not None: if mark_seen: try: @@ -1599,6 +1693,65 @@ def setup_email_routes(): return None doc_session_id = _resolve_doc_session() + def _create_markdown_doc(content: str, summary: str): + from src.database import SessionLocal as _SL, Document as _Doc, DocumentVersion as _DV + doc_id = str(uuid.uuid4()) + ver_id = str(uuid.uuid4()) + _db = _SL() + try: + _db.query(_Doc).filter(_Doc.is_active == True).update({"is_active": False}) + _db.add(_Doc( + id=doc_id, session_id=doc_session_id, title=title, + language="markdown", current_content=content, + version_count=1, is_active=True, + )) + _db.add(_DV( + id=ver_id, document_id=doc_id, version_number=1, + content=content, summary=summary, source="upload", + )) + _db.commit() + finally: + _db.close() + _tag_doc_with_source(doc_id) + return doc_id + + def _attached_email_markdown(path): + raw_bytes = path.read_bytes() + if not raw_bytes: + return f"# Attached email: {base}\n\n_(empty email attachment)_" + try: + attached_msg = email_mod.message_from_bytes(raw_bytes) + except Exception as e: + return f"# Attached email: {base}\n\nCould not parse this email attachment: {e}" + + attached_subject = _decode_header(attached_msg.get("Subject", "")) or base + attached_from = _decode_header(attached_msg.get("From", "")) + attached_to = _decode_header(attached_msg.get("To", "")) + attached_cc = _decode_header(attached_msg.get("Cc", "")) + attached_date = attached_msg.get("Date", "") + attached_body = _extract_text(attached_msg).strip() + attached_atts = _list_attachments_from_msg(attached_msg) + + lines = [f"# Attached email: {attached_subject}", ""] + if attached_from: + lines.append(f"**From:** {attached_from}") + if attached_to: + lines.append(f"**To:** {attached_to}") + if attached_cc: + lines.append(f"**Cc:** {attached_cc}") + if attached_date: + lines.append(f"**Date:** {attached_date}") + lines.extend(["", "## Body", "", attached_body or "_(no readable body)_"]) + if attached_atts: + lines.extend(["", "## Attachments", ""]) + for att in attached_atts: + size = int(att.get("size") or 0) + size_label = f"{size} B" if size < 1024 else f"{round(size / 1024)} KB" + name = att.get("filename") or f"attachment_{att.get('index', '')}" + ctype = att.get("content_type") or "application/octet-stream" + lines.append(f"- {name} ({ctype}, {size_label})") + return "\n".join(lines).strip() + # ── PDF path (existing) ──────────────────────────────────── if ext == ".pdf": import shutil as _shutil @@ -1645,6 +1798,15 @@ def setup_email_routes(): _tag_doc_with_source(doc_id) return {"doc_id": doc_id, "filename": filepath.name} + # ── Attached email (.eml / message/rfc822) ──────────────── + if ext == ".eml": + try: + content = _attached_email_markdown(filepath) + except Exception as e: + return {"error": f"Failed to read email attachment: {e}", "filename": base} + doc_id = _create_markdown_doc(content, "Imported attached email") + return {"doc_id": doc_id, "filename": filepath.name} + # ── DOCX path: extract text → markdown document ─────────── if ext == ".docx": try: @@ -1682,25 +1844,7 @@ def setup_email_routes(): lines.append("") content = "\n".join(lines).strip() or f"_(empty {base})_" - from src.database import SessionLocal as _SL, Document as _Doc, DocumentVersion as _DV - doc_id = str(uuid.uuid4()) - ver_id = str(uuid.uuid4()) - _db = _SL() - try: - _db.query(_Doc).filter(_Doc.is_active == True).update({"is_active": False}) - _db.add(_Doc( - id=doc_id, session_id=doc_session_id, title=title, - language="markdown", current_content=content, - version_count=1, is_active=True, - )) - _db.add(_DV( - id=ver_id, document_id=doc_id, version_number=1, - content=content, summary="Imported from DOCX", source="upload", - )) - _db.commit() - finally: - _db.close() - _tag_doc_with_source(doc_id) + doc_id = _create_markdown_doc(content, "Imported from DOCX") return {"doc_id": doc_id, "filename": filepath.name} # ── Plain text / markdown ──────────────────────────────── @@ -1709,25 +1853,7 @@ def setup_email_routes(): content = filepath.read_text(encoding="utf-8", errors="replace") except Exception as e: return {"error": f"Failed to read text file: {e}", "filename": base} - from src.database import SessionLocal as _SL, Document as _Doc, DocumentVersion as _DV - doc_id = str(uuid.uuid4()) - ver_id = str(uuid.uuid4()) - _db = _SL() - try: - _db.query(_Doc).filter(_Doc.is_active == True).update({"is_active": False}) - _db.add(_Doc( - id=doc_id, session_id=doc_session_id, title=title, - language="markdown", current_content=content, - version_count=1, is_active=True, - )) - _db.add(_DV( - id=ver_id, document_id=doc_id, version_number=1, - content=content, summary="Imported from email attachment", source="upload", - )) - _db.commit() - finally: - _db.close() - _tag_doc_with_source(doc_id) + doc_id = _create_markdown_doc(content, "Imported from email attachment") return {"doc_id": doc_id, "filename": filepath.name} return {"error": f"Unsupported attachment type: {ext}", "filename": base} diff --git a/routes/hwfit_routes.py b/routes/hwfit_routes.py index 5e38b9ca3..0dad0ddd7 100644 --- a/routes/hwfit_routes.py +++ b/routes/hwfit_routes.py @@ -1,8 +1,13 @@ +import json +import os import re +import shlex +import subprocess from copy import deepcopy from fastapi import APIRouter, HTTPException +from core.platform_compat import run_ssh_command from routes._validators import validate_remote_host, validate_ssh_port @@ -107,6 +112,73 @@ def _apply_manual_hardware(system, manual_mode="", manual_gpu_count="", manual_v return system +def _run_model_probe(host: str, ssh_port: str, cmd: str) -> str: + try: + if host: + r = run_ssh_command( + host, + ssh_port or None, + cmd, + timeout=15, + connect_timeout=5, + strict_host_key_checking=False, + text=True, + ) + else: + r = subprocess.run(["bash", "-lc", cmd], capture_output=True, text=True, timeout=15) + if r.returncode == 0: + return (r.stdout or "").strip() + except Exception: + return "" + return "" + + +def _inspect_model_path(model_path: str, host: str = "", ssh_port: str = "") -> dict: + """Read lightweight metadata from a local or SSH-visible HF model folder.""" + path = (model_path or "").strip() + if not path or path.startswith(("http://", "https://")): + return {} + if not (path.startswith("/") or path.startswith("~")): + return {} + + qpath = shlex.quote(path) + qconfig = shlex.quote(os.path.join(path, "config.json")) + out = {} + exists = _run_model_probe(host, ssh_port, f"test -d {qpath} && printf found || printf missing") + if exists != "found": + target = host or "local container" + out["model_probe_error"] = f"Model path is not visible on {target}: {path}" + return out + raw_config = _run_model_probe(host, ssh_port, f"test -f {qconfig} && sed -n '1,240p' {qconfig}") + if raw_config: + try: + cfg = json.loads(raw_config) + except Exception: + cfg = {} + for key in ("context_length", "max_position_embeddings", "n_ctx_train", "model_max_length", "max_seq_len"): + value = cfg.get(key) + if isinstance(value, (int, float)) and value > 0: + out["model_ctx_max"] = int(value) + break + else: + out["model_probe_error"] = f"config.json not found in model path: {path}" + + size_cmd = ( + f"find {qpath} -type f \\( -name '*.safetensors' -o -name '*.bin' -o -name '*.gguf' \\) " + "-printf '%s\\n' 2>/dev/null | awk '{s+=$1} END {if (s>0) printf \"%.6f\", s/1073741824}'" + ) + weights = _run_model_probe(host, ssh_port, size_cmd) + try: + weights_gb = float(weights) + except Exception: + weights_gb = 0.0 + if weights_gb > 0: + out["model_weights_gb"] = round(weights_gb, 3) + elif "model_probe_error" not in out: + out["model_probe_error"] = f"No model weight files found in: {path}" + return out + + def setup_hwfit_routes(): router = APIRouter(prefix="/api/hwfit", tags=["hwfit"]) @@ -235,7 +307,7 @@ def setup_hwfit_routes(): return {"system": system, "models": results} @router.get("/profiles") - def get_serve_profiles(model: str = "", host: str = "", ssh_port: str = "", platform: str = "", fresh: bool = False, serve_weights_gb: float = 0.0, serve_quant: str = ""): + def get_serve_profiles(model: str = "", model_path: str = "", host: str = "", ssh_port: str = "", platform: str = "", fresh: bool = False, serve_weights_gb: float = 0.0, serve_quant: str = ""): """Compute llama.cpp serve profiles (Quality/Balanced/Speed) for `model` against the detected hardware on `host` (or local). Returns concrete flags (n_gpu_layers, n_cpu_moe, cache_type, ctx) the serve UI can apply. @@ -272,8 +344,16 @@ def setup_hwfit_routes(): if nn and (nn == want or want.endswith(nn) or nn.endswith(want)): m = entry break + path_meta = _inspect_model_path(model_path or model, host=host, ssh_port=ssh_port) if m is None: - return {"system": system, "profiles": [], "error": "model not in catalog"} + return { + "system": system, + "profiles": [], + "error": "model not in catalog", + "model_ctx_max": int(path_meta.get("model_ctx_max") or 0), + "model_weights_gb": float(path_meta.get("model_weights_gb") or 0), + "model_probe_error": path_meta.get("model_probe_error") or "", + } # Surface the model's trained context limit so the serve UI can clamp a # user-typed context down to it (asking for ctx > n_ctx_train overflows # and, with a quantized KV cache, can crash the GPU). @@ -283,6 +363,16 @@ def setup_hwfit_routes(): if isinstance(v, (int, float)) and v > 0: model_ctx_max = int(v) break + path_ctx_max = int(path_meta.get("model_ctx_max") or 0) + if path_ctx_max > 0: + model_ctx_max = max(model_ctx_max, path_ctx_max) + model_weights_gb = float(path_meta.get("model_weights_gb") or 0) + if model_weights_gb <= 0: + for k in ("min_vram_gb", "required_gb", "size_gb", "recommended_ram_gb", "min_ram_gb"): + v = m.get(k) + if isinstance(v, (int, float)) and v > 0: + model_weights_gb = float(v) + break return { "system": system, "profiles": compute_serve_profiles( @@ -291,6 +381,8 @@ def setup_hwfit_routes(): serve_quant=(serve_quant or None), ), "model_ctx_max": model_ctx_max, + "model_weights_gb": model_weights_gb, + "model_probe_error": path_meta.get("model_probe_error") or "", } @router.get("/image-models") diff --git a/routes/model_routes.py b/routes/model_routes.py index 000cd9379..69528f6dc 100644 --- a/routes/model_routes.py +++ b/routes/model_routes.py @@ -1064,9 +1064,11 @@ def setup_model_routes(model_discovery): except Exception: return 0.0 - def _failure_delay(fails: int) -> float: + def _failure_delay(fails: int, *, empty_local: bool = False) -> float: if fails <= 0: return 0.0 + if empty_local: + return min(5.0 * (2 ** max(0, fails - 1)), 30.0) return min(_REFRESH_FAILURE_BASE * (2 ** max(0, fails - 1)), _REFRESH_FAILURE_MAX) def _should_refresh_endpoint(ep: Any, now: float, force: bool = False) -> tuple[bool, Dict[str, Any]]: @@ -1097,7 +1099,12 @@ def setup_model_routes(model_discovery): fails = int(state.get("fail_count") or 0) if fails and not force: last_failure = float(state.get("last_failure") or 0.0) - if now - last_failure < _failure_delay(fails): + empty_local = ( + not cached + and category == "local" + and str(getattr(ep, "id", "") or "").startswith("local-") + ) + if now - last_failure < _failure_delay(fails, empty_local=empty_local): return False, info if cached and not force: interval = _endpoint_refresh_interval(ep, category) diff --git a/routes/shell_routes.py b/routes/shell_routes.py index 406d80bb3..245181832 100644 --- a/routes/shell_routes.py +++ b/routes/shell_routes.py @@ -330,6 +330,9 @@ def add_user_install_bins_to_path(): candidates.append(os.path.join(site.USER_BASE, 'bin')) except Exception: pass + candidates.append(os.path.expanduser('~/bin')) + candidates.append(os.path.expanduser('~/llama.cpp/build/bin')) + candidates.append(os.path.expanduser('~/llama.cpp/build-vulkan/bin')) candidates.append(os.path.expanduser('~/.local/bin')) parts = os.environ.get('PATH', '').split(os.pathsep) if os.environ.get('PATH') else [] changed = False @@ -1188,6 +1191,7 @@ def setup_shell_routes() -> APIRouter: # venv over SSH so a remote `pip install` actually reflects here. remote_status: dict = {} remote_details: dict = {} + remote_probe_error = "" remote_names = [ p["name"] for p in packages @@ -1226,8 +1230,34 @@ def setup_shell_routes() -> APIRouter: break except ValueError as e: raise HTTPException(400, str(e)) - except Exception: + except Exception as e: remote_status = {} + remote_probe_error = f"SSH package probe failed: {str(e)[:160]}" + if "llama_cpp" in remote_names: + try: + inner = ( + 'export PATH="$HOME/.local/bin:$HOME/bin:' + '$HOME/llama.cpp/build/bin:$HOME/llama.cpp/build-vulkan/bin:$PATH"; ' + "command -v llama-server 2>/dev/null || true" + ) + argv = _ssh_base_argv(host, ssh_port) + [inner] + proc = await asyncio.create_subprocess_exec( + *argv, + stdout=asyncio.subprocess.PIPE, + stderr=asyncio.subprocess.PIPE, + ) + out, _err = await asyncio.wait_for(proc.communicate(), timeout=8) + llama_server_path = out.decode("utf-8", errors="replace").strip().splitlines() + llama_server_path = llama_server_path[-1].strip() if llama_server_path else "" + if llama_server_path: + remote_status["llama_cpp"] = True + probe = remote_details.setdefault("llama_cpp", {}) + if isinstance(probe, dict): + probe.setdefault("binaries", {})["llama-server"] = llama_server_path + except Exception as e: + if not remote_probe_error: + remote_probe_error = f"SSH llama-server probe failed: {str(e)[:160]}" + pass # Union of system_names + every package's system_prereqs. Probing # the prereqs alongside the main system deps in a single SSH call # avoids a second round-trip per Cookbook → Dependencies refresh. @@ -1272,7 +1302,9 @@ def setup_shell_routes() -> APIRouter: target_os_id = _os_id_from_release("\n".join(_osrel_lines)) except ValueError as e: raise HTTPException(400, str(e)) - except Exception: + except Exception as e: + if not remote_probe_error: + remote_probe_error = f"SSH system probe failed: {str(e)[:160]}" pass elif not host: # Local target — probe in-process so the inline install command @@ -1290,7 +1322,12 @@ def setup_shell_routes() -> APIRouter: on_remote = bool(host and pkg.get("target") == "remote") probe = None if on_remote: - pkg["installed"] = bool(remote_status.get(pkg["name"], False)) + if remote_probe_error and pkg["name"] not in remote_status: + pkg["installed"] = None + pkg["probe_error"] = remote_probe_error + pkg["status_note"] = remote_probe_error + else: + pkg["installed"] = bool(remote_status.get(pkg["name"], False)) probe = remote_details.get(pkg["name"]) if isinstance(probe, dict): pkg["details"] = probe @@ -1353,9 +1390,19 @@ def setup_shell_routes() -> APIRouter: # reads "ready" green while inference runs at 3 tok/s on GPU # silicon — actively misleading. if pkg["name"] == "llama_cpp" and pkg.get("installed"): + _native_llama_server = bool( + isinstance(probe, dict) + and isinstance(probe.get("binaries"), dict) + and probe["binaries"].get("llama-server") + ) _gpu_capable = False _has_nvidia_target = False - if on_remote and host: + if _native_llama_server: + # Native llama-server is the launcher path Cookbook now + # prefers. Do not mark this as a CPU-only Python wheel just + # because llama-cpp-python is absent from the selected venv. + _gpu_capable = True + elif on_remote and host: try: # Activate the configured venv FIRST so the probe # runs against the same python the launch script @@ -1609,7 +1656,8 @@ def setup_shell_routes() -> APIRouter: return {"ok": False, "error": f"Unsupported engine: {engine}"} host = str(body.get("remote_host") or "").strip() ssh_port = body.get("ssh_port") - cmd = _llama_cpp_rebuild_cmd() + update_source = bool(body.get("update_source")) + cmd = _llama_cpp_rebuild_cmd(update_source=update_source) try: argv = ( (_ssh_base_argv(host, ssh_port) + [cmd]) diff --git a/src/agent_loop.py b/src/agent_loop.py index e574a42b6..40e4232bb 100644 --- a/src/agent_loop.py +++ b/src/agent_loop.py @@ -751,6 +751,17 @@ def _extract_last_user_message(messages: List[Dict]) -> str: _LOW_SIGNAL_RE = re.compile(r"^[\W_]*$", re.UNICODE) +_CASUAL_OPENING_RE = re.compile( + r"^\s*(?:h+i+|hey+|hello+|yo+|sup+|what'?s up|wass?up|hiya|howdy|" + r"lol|lmao|haha+|hehe+|thanks?|thank you|ty|idk|dunno|meh|bruh|bro)\b(?P.*)$", + re.IGNORECASE, +) +_CASUAL_BLOCKLIST_RE = re.compile( + r"\b(?:cookbook|serve|serving|launch|start|vllm|sglang|llama\.?cpp|ollama|" + r"download|model|email|document|doc|note|calendar|task|search|web|research|" + r"file|folder|repo|git|settings?|endpoint|api|token|mcp)\b", + re.IGNORECASE, +) _EXPLICIT_CONTINUATION_RE = re.compile( r"^\s*(?:" r"yes|y|yeah|yep|ok|okay|sure|do it|go ahead|continue|carry on|" @@ -760,6 +771,17 @@ _EXPLICIT_CONTINUATION_RE = re.compile( r")\s*[.!?]*\s*$", re.IGNORECASE, ) +_RETRY_CONTINUATION_RE = re.compile( + r"\b(?:try again|retry|again|rerun|re-run|run it again|launch it again|" + r"start it again|failed|fails?|died|crashed|broke|insta|instantly)\b", + re.IGNORECASE, +) +_COOKBOOK_CONTEXT_RE = re.compile( + r"\b(?:cookbook|serve|serving|served|launch|start|preset|vllm|sglang|" + r"llama\.?cpp|ollama|download|cached models?|model servers?|running models?|" + r"gpu box|ajax|qwen|gemma|llama|mistral|minimax)\b", + re.IGNORECASE, +) def _is_explicit_continuation(text: str) -> bool: @@ -767,6 +789,37 @@ def _is_explicit_continuation(text: str) -> bool: return bool(_EXPLICIT_CONTINUATION_RE.match(str(text or "").strip())) +def _is_casual_low_signal(text: str) -> bool: + """True for short greetings/slang that should not inherit stale context.""" + s = str(text or "").strip() + m = _CASUAL_OPENING_RE.match(s) + if not m: + return False + tail = m.group("tail") or "" + if _CASUAL_BLOCKLIST_RE.search(tail): + return False + # Allow a short vocative/address after the opener without hardcoding the + # address term itself: "hey man", "yo dude", "sup ". Longer tails are + # more likely to be an actual request and should get normal context/tooling. + tail_words = re.findall(r"[A-Za-z0-9_'-]+", tail) + return len(tail_words) <= 2 + + +def _is_contextual_retry_continuation(messages: List[Dict], text: str) -> bool: + """Treat "try again / it failed" as a continuation only for active tool work. + + These follow-ups are common after Cookbook launches: the latest user turn + says only "try again it failed", while the actionable model/host/command + details live one or two turns back. Keep this intentionally narrow so + ordinary chat does not inherit stale Cookbook context. + """ + latest = str(text or "").strip() + if not latest or not _RETRY_CONTINUATION_RE.search(latest): + return False + recent = _recent_context_for_retrieval(messages, max_user=5, max_chars=1200) + return bool(_COOKBOOK_CONTEXT_RE.search(recent)) + + def _assistant_requested_followup(messages: List[Dict]) -> bool: """True when the previous assistant turn asked for missing task details. @@ -808,11 +861,12 @@ def _classify_agent_request(messages: List[Dict], last_user: str) -> Dict[str, o which domain rule packs get appended to the system prompt. """ text = str(last_user or "").strip() - continuation = _is_explicit_continuation(text) or _assistant_requested_followup(messages) + retry_continuation = _is_contextual_retry_continuation(messages, text) + continuation = _is_explicit_continuation(text) or _assistant_requested_followup(messages) or retry_continuation retrieval_query = _recent_context_for_retrieval(messages) if continuation else text q = retrieval_query.lower() - if not text or bool(_LOW_SIGNAL_RE.match(text)): + if not text or bool(_LOW_SIGNAL_RE.match(text)) or _is_casual_low_signal(text): return { "low_signal": True, "continuation": False, @@ -907,6 +961,7 @@ def _build_system_prompt( compact: bool = False, owner: Optional[str] = None, suppress_local_context: bool = False, + suppress_skills: bool = False, active_email: Optional[Dict[str, str]] = None, ) -> List[Dict]: """Build agent system prompt, inject MCP/document context, merge consecutive system msgs.""" @@ -924,7 +979,7 @@ def _build_system_prompt( _ov_sig = _hl.sha256(_json.dumps(get_builtin_overrides() or {}, sort_keys=True).encode()).hexdigest() except Exception: _ov_sig = "" - cache_key = (frozenset(disabled_tools or []), bool(mcp_mgr), needs_admin, _rt_key, compact, _ov_sig, owner, suppress_local_context) + cache_key = (frozenset(disabled_tools or []), bool(mcp_mgr), needs_admin, _rt_key, compact, _ov_sig, owner, suppress_local_context, suppress_skills) if _cached_base_prompt and _cached_base_prompt_key == cache_key and not active_document: agent_prompt = _cached_base_prompt # Skill index is user-editable (name + description), so it must never @@ -934,6 +989,7 @@ def _build_system_prompt( disabled_tools, mcp_mgr, needs_admin, relevant_tools, mcp_disabled_map=mcp_disabled_map, compact=compact, owner=owner, suppress_local_context=suppress_local_context, + suppress_skills=suppress_skills, ) else: agent_prompt, _skill_index_block = _build_base_prompt( @@ -945,6 +1001,7 @@ def _build_system_prompt( compact=compact, owner=owner, suppress_local_context=suppress_local_context, + suppress_skills=suppress_skills, ) if not active_document: _cached_base_prompt = agent_prompt @@ -1228,7 +1285,7 @@ def _build_system_prompt( # few. If the teacher wrote a procedure for "open my X chat" last # time the student failed, this is where the student finds it # before deciding which tool to call. - if not suppress_local_context: + if not suppress_local_context and not suppress_skills: try: last_user = _extract_last_user_message(messages) # Respect the user's skills-enabled toggle (mirrors memory_enabled). @@ -1395,6 +1452,7 @@ def _build_base_prompt( compact: bool = False, owner: Optional[str] = None, suppress_local_context: bool = False, + suppress_skills: bool = False, ): """Build the agent prompt with only relevant tools included. @@ -1447,7 +1505,7 @@ def _build_base_prompt( # The caller wraps it in untrusted_context_message and ships it as a # user-role message — same treatment as the matched-skills block. skill_index_block = "" - if not suppress_local_context: + if not suppress_local_context and not suppress_skills: try: from services.memory.skills import SkillsManager from src.constants import DATA_DIR @@ -1866,6 +1924,7 @@ async def stream_agent_loop( approved_plan: Optional[str] = None, tool_policy: Optional[ToolPolicy] = None, workspace: Optional[str] = None, + forced_tools: Optional[Set[str]] = None, _is_teacher_run: bool = False, ) -> AsyncGenerator[str, None]: """Streaming agent loop generator. @@ -1905,6 +1964,18 @@ async def stream_agent_loop( _needs_admin = _detect_admin_intent(messages) _last_user = _extract_last_user_message(messages) _intent = _classify_agent_request(messages, _last_user) + _low_signal_turn = bool(_intent.get("low_signal")) + _casual_low_signal_turn = _is_casual_low_signal(_last_user) + _direct_low_signal = ( + _low_signal_turn + and not bool(_intent.get("continuation")) + and not plan_mode + and not approved_plan + and (_casual_low_signal_turn or active_document is None) + and (_casual_low_signal_turn or not active_email) + and (_casual_low_signal_turn or not workspace) + and not forced_tools + ) # Tool retrieval uses the latest message by default. It may inherit recent # user turns only for explicit continuations ("yes", "do it", "1"). _retrieval_query = str(_intent.get("retrieval_query") or _last_user) @@ -1912,11 +1983,86 @@ async def stream_agent_loop( "[agent-intent] latest=%r continuation=%s low_signal=%s domains=%s retrieval_query=%r", _last_user[:120], bool(_intent.get("continuation")), - bool(_intent.get("low_signal")), + _low_signal_turn, sorted(_intent.get("domains") or []), _retrieval_query[:200], ) _mcp_disabled_map = _load_mcp_disabled_map() if mcp_mgr else {} + if _direct_low_signal: + logger.info("[agent] direct low-signal reply path for latest=%r", _last_user[:80]) + direct_messages = [{"role": "user", "content": _last_user}] + direct_response = "" + direct_start = time.time() + direct_actual_model = model + real_input_tokens = 0 + real_output_tokens = 0 + try: + async for chunk in stream_llm_with_fallback( + [(endpoint_url, model, headers)] + list(fallbacks or []), + direct_messages, + temperature=temperature, + max_tokens=min(max_tokens or 128, 128), + prompt_type=None, + tools=None, + timeout=int(get_setting("agent_stream_timeout_seconds", 300) or 300), + session_id=session_id, + ): + if chunk.startswith("data: ") and not chunk.startswith("data: [DONE]"): + try: + data = json.loads(chunk[6:]) + except json.JSONDecodeError: + yield chunk + continue + if data.get("type") == "usage": + usage = data.get("data", {}) or {} + direct_actual_model = usage.get("model") or direct_actual_model + real_input_tokens += usage.get("input_tokens", 0) or 0 + real_output_tokens += usage.get("output_tokens", 0) or 0 + continue + if data.get("type") == "model_actual": + direct_actual_model = data.get("model") or direct_actual_model + data["requested_model"] = model + yield f"data: {json.dumps(data)}\n\n" + continue + if data.get("type") == "fallback": + direct_actual_model = data.get("answered_by") or direct_actual_model + yield chunk + continue + if "delta" in data: + if not data.get("thinking"): + direct_response += data.get("delta", "") + yield chunk + continue + yield chunk + elif chunk.startswith("event: "): + yield chunk + except Exception as _direct_err: + logger.warning("[agent] direct low-signal path failed: %s", _direct_err) + fallback = "Hey." + direct_response += fallback + yield f"data: {json.dumps({'delta': fallback})}\n\n" + + if not direct_response.strip(): + fallback = "Hey." + direct_response = fallback + yield f"data: {json.dumps({'delta': fallback})}\n\n" + + duration = time.time() - direct_start + metrics = { + "model": direct_actual_model, + "requested_model": model, + "input_tokens": real_input_tokens or estimate_tokens(direct_messages), + "output_tokens": real_output_tokens or max(len(direct_response) // 4, 1), + "total_time": round(duration, 2), + "response_time": round(duration, 2), + "agent_rounds": 0, + "tool_calls": 0, + "direct_low_signal": True, + } + yield f"data: {json.dumps({'type': 'metrics', 'data': metrics})}\n\n" + yield "data: [DONE]\n\n" + return + if plan_mode and mcp_mgr: # Allow read-only MCP tools to investigate, block write/unknown ones: # hide them from the schemas AND reject them at runtime by qualified name. @@ -1932,7 +2078,7 @@ async def stream_agent_loop( _t1 = time.time() if _relevant_tools: logger.info(f"[tool-rag] Using caller-provided relevant_tools ({len(_relevant_tools)} tools)") - if not guide_only and not _relevant_tools and bool(_intent.get("low_signal")): + if not guide_only and not _relevant_tools and _low_signal_turn: from src.tool_index import ALWAYS_AVAILABLE if workspace: # An active workspace IS the file-work signal: a vague "look at the @@ -2023,6 +2169,15 @@ async def stream_agent_loop( if _relevant_tools is not None and active_document is not None: _relevant_tools.update({"edit_document", "update_document", "suggest_document"}) + # Per-request UI toggles are stronger than retrieval. If the user turns on + # Search, the model must see the search tools even when the latest text is a + # typo or otherwise low-signal for tool RAG. + if not guide_only and forced_tools: + if _relevant_tools is None: + from src.tool_index import ALWAYS_AVAILABLE + _relevant_tools = set(ALWAYS_AVAILABLE) + _relevant_tools.update(t for t in forced_tools if t not in disabled_tools) + # The skill index injected by _build_system_prompt tells the model to # call `manage_skills action=view`, and Jaccard-matched skills are pasted # into the prompt as procedures to follow — but neither path goes through @@ -2030,7 +2185,7 @@ async def stream_agent_loop( # (grep, read_file, ...) that aren't in its schema list. Keep the schemas # in lockstep: manage_skills is callable whenever any skill is indexed, # and a matched skill's declared requires_toolsets ride along with it. - if not guide_only and _relevant_tools is not None: + if not guide_only and _relevant_tools is not None and not _low_signal_turn: try: from services.memory.skills import SkillsManager from src.constants import DATA_DIR @@ -2147,6 +2302,7 @@ async def stream_agent_loop( compact=_compact_agent_prompt, owner=owner, suppress_local_context=guide_only, + suppress_skills=_low_signal_turn, active_email=active_email, ) if plan_mode and not guide_only: @@ -2753,6 +2909,15 @@ async def stream_agent_loop( _intent_nudge_count += 1 _matched_phrase = _intent_match.group(0).strip() logger.info(f"[agent] intent-without-action nudge #{_intent_nudge_count} on round {round_num}: {_matched_phrase!r}") + _lower_phrase = _matched_phrase.lower() + _cookbook_log_hint = "" + if any(_word in _lower_phrase for _word in ("log", "logs", "output", "tail", "status")): + _cookbook_log_hint = ( + " If this is about a Cookbook/model serve, the concrete calls are: " + "`list_served_models` first, then `tail_serve_output` with the " + "session_id from the serve/list result. Never answer with " + "\"check logs\" when those tools are available." + ) messages.append({ "role": "system", "content": ( @@ -2761,6 +2926,7 @@ async def stream_agent_loop( "see you announced the action but didn't run it, which " "is the most frustrating thing you can do. " "DO IT NOW: emit the actual function call this turn. " + f"{_cookbook_log_hint}" "If you decided not to do it after all, say so plainly in " "one sentence instead of restating the plan." ), diff --git a/src/agent_tools/web_tools.py b/src/agent_tools/web_tools.py index 87a4b697f..f1410e18e 100644 --- a/src/agent_tools/web_tools.py +++ b/src/agent_tools/web_tools.py @@ -7,6 +7,7 @@ from src.constants import MAX_OUTPUT_CHARS class WebSearchTool: async def execute(self, content: str, ctx: dict) -> dict: from src.search import comprehensive_web_search + progress_cb = ctx.get("progress_cb") if isinstance(ctx, dict) else None raw = content.strip() query = raw time_filter = None @@ -37,18 +38,39 @@ class WebSearchTool: elif " news" in q_lc or q_lc.startswith("news ") or q_lc.endswith(" news"): time_filter = "week" loop = asyncio.get_running_loop() - text, sources = await asyncio.wait_for( - loop.run_in_executor( - None, - lambda: comprehensive_web_search( - query, - max_pages=max_pages, - time_filter=time_filter, - return_sources=True, + if progress_cb: + await progress_cb({ + "elapsed_s": 0, + "tail": f"Searching web for: {query[:160]}", + }) + try: + text, sources = await asyncio.wait_for( + loop.run_in_executor( + None, + lambda: comprehensive_web_search( + query, + max_pages=max_pages, + time_filter=time_filter, + return_sources=True, + ), ), - ), - timeout=30, - ) + timeout=30, + ) + except asyncio.TimeoutError: + return { + "error": f"web_search timed out after 30s: {query[:200]}", + "exit_code": 1, + } + except Exception as e: + return { + "error": f"web_search failed: {type(e).__name__}: {str(e) or 'no details'}", + "exit_code": 1, + } + if progress_cb: + await progress_cb({ + "elapsed_s": 30, + "tail": "Search completed; preparing sources.", + }) output = text[:MAX_OUTPUT_CHARS] if len(text) > MAX_OUTPUT_CHARS else text if sources: output += "\n\n" diff --git a/src/builtin_actions.py b/src/builtin_actions.py index a598cb652..bf4ddd950 100644 --- a/src/builtin_actions.py +++ b/src/builtin_actions.py @@ -76,8 +76,7 @@ async def action_consolidate_memory(owner: str, **kwargs) -> Tuple[str, bool]: import json import re from src.constants import DATA_DIR - from src.endpoint_resolver import resolve_endpoint - from src.llm_core import llm_call_async + from src.llm_core import llm_call_async_with_fallback from src.memory import MemoryManager manager = MemoryManager(DATA_DIR) @@ -116,10 +115,9 @@ async def action_consolidate_memory(owner: str, **kwargs) -> Tuple[str, bool]: if len(group_memories) < 2: return False - url, model, headers = resolve_endpoint("utility", owner=group_owner or None) - if not url or not model: - url, model, headers = resolve_endpoint("default", owner=group_owner or None) - if not url or not model: + from src.task_endpoint import resolve_task_candidates + candidates = resolve_task_candidates(owner=group_owner or None) + if not candidates: return False try: @@ -147,13 +145,11 @@ async def action_consolidate_memory(owner: str, **kwargs) -> Tuple[str, bool]: "\"drop\":[{\"id\":\"existing id\",\"reason\":\"short reason\"}]}\n\n" f"MEMORIES:\n{json.dumps(items, ensure_ascii=False)}" ) - raw = await llm_call_async( - url=url, - model=model, + raw = await llm_call_async_with_fallback( + candidates, messages=[{"role": "user", "content": prompt}], temperature=0.0, max_tokens=4096, - headers=headers, timeout=120, ) from src.text_helpers import strip_think @@ -604,8 +600,7 @@ async def action_classify_events(owner: str, **kwargs) -> Tuple[str, bool]: try: from datetime import timedelta from core.database import SessionLocal, CalendarEvent - from src.endpoint_resolver import resolve_endpoint - from src.llm_core import llm_call_async + from src.llm_core import llm_call_async_with_fallback import re as _re, json as _json db = SessionLocal() @@ -620,10 +615,9 @@ async def action_classify_events(owner: str, **kwargs) -> Tuple[str, bool]: if not events: return "No upcoming events to classify", True - llm_url, llm_model, llm_headers = resolve_endpoint("utility", owner=owner) - if not llm_url: - llm_url, llm_model, llm_headers = resolve_endpoint("default", owner=owner) - llm_available = bool(llm_url and llm_model) + from src.task_endpoint import resolve_task_candidates + llm_candidates = resolve_task_candidates(owner=owner) + llm_available = bool(llm_candidates) # Pull user memories so the LLM has personal context (relationships, # job, hobbies). Helps it know e.g. " is your spouse" so their @@ -699,11 +693,11 @@ async def action_classify_events(owner: str, **kwargs) -> Tuple[str, bool]: f"EVENTS: {_json.dumps(items)}" ) try: - raw = await llm_call_async( - url=llm_url, model=llm_model, + raw = await llm_call_async_with_fallback( + llm_candidates, messages=[{"role": "user", "content": prompt}], temperature=0.1, max_tokens=16384, - headers=llm_headers, timeout=180, + timeout=180, ) from src.text_helpers import strip_think as _st raw = _st(raw or "", prose=False, prompt_echo=False) @@ -810,8 +804,7 @@ async def action_learn_sender_signatures(owner: str, **kwargs) -> Tuple[str, boo import asyncio as _aio from datetime import datetime as _dt, timedelta as _td from routes.email_helpers import _email_cache_owner_clause, _imap_connect, SCHEDULED_DB - from src.endpoint_resolver import resolve_endpoint - from src.llm_core import llm_call_async + from src.llm_core import llm_call_async_with_fallback # 1. Pull recent UIDs + From headers cheaply (header-only fetch). def _pull_headers(): @@ -891,11 +884,11 @@ async def action_learn_sender_signatures(owner: str, **kwargs) -> Tuple[str, boo if not eligible: return "All sender sigs already cached (or no eligible senders)", True - url, model, headers = resolve_endpoint("utility", owner=owner) - if not url or not model: - url, model, headers = resolve_endpoint("default", owner=owner) - if not url or not model: + from src.task_endpoint import resolve_task_candidates + candidates = resolve_task_candidates(owner=owner) + if not candidates: return "No LLM endpoint available", False + model = candidates[0][1] analyzed = 0 no_sig = 0 @@ -949,11 +942,11 @@ async def action_learn_sender_signatures(owner: str, **kwargs) -> Tuple[str, boo ) try: - raw = await llm_call_async( - url=url, model=model, + raw = await llm_call_async_with_fallback( + candidates, messages=[{"role": "user", "content": prompt}], temperature=0.0, max_tokens=600, - headers=headers, timeout=60, + timeout=60, ) from src.text_helpers import strip_think as _st sig = _st(raw or "", prose=False, prompt_echo=False).strip() @@ -1137,7 +1130,6 @@ async def action_test_skills(owner: str, **kwargs) -> Tuple[str, bool]: from services.memory.skills import SkillsManager from src.constants import DATA_DIR from routes.skills_routes import _run_skill_test_once, _skill_test_task - from src.endpoint_resolver import resolve_endpoint # #3 SCOPE GUARD: refuse to run on a None/empty owner — otherwise # `sm.load(owner=None)` returns every user's skills and we'd cross- @@ -1152,27 +1144,40 @@ async def action_test_skills(owner: str, **kwargs) -> Tuple[str, bool]: if not names: raise TaskNoop("no skills to test") - url, model, headers = resolve_endpoint("default", owner=owner) - if not url or not model: + from src.task_endpoint import resolve_task_candidates + candidates = resolve_task_candidates(owner=owner) + if not candidates: return "No Default/Utility model configured — set one in Settings.", False # #2 NO SILENT MODEL SWAP: if the configured model isn't served by the # endpoint, try a basename match — but fail loudly instead of grabbing # `avail[0]` which could be an embedding-only model and produce 36 # garbage transcripts → 36 'unknown' verdicts with no hint why. + url, model, headers = candidates[0] try: from src.llm_core import list_model_ids - avail = list_model_ids(url, headers=headers) - if avail and model not in avail: - import os as _os - base = _os.path.basename((model or "").rstrip("/")) - m = next((a for a in avail if _os.path.basename(a.rstrip("/")) == base), None) - if m: - model = m - else: - return (f"Default model '{model}' not served by endpoint {url}. " - f"Available: {', '.join(avail[:8])}{'…' if len(avail) > 8 else ''}. " - "Set a valid Default model in Settings."), False + import os as _os + + selected = None + mismatch_notes = [] + for cand_url, cand_model, cand_headers in candidates: + avail = list_model_ids(cand_url, headers=cand_headers) + if not avail or cand_model in avail: + selected = (cand_url, cand_model, cand_headers) + break + base = _os.path.basename((cand_model or "").rstrip("/")) + matched = next((a for a in avail if _os.path.basename(a.rstrip("/")) == base), None) + if matched: + selected = (cand_url, matched, cand_headers) + break + mismatch_notes.append( + f"{cand_model} not served by {cand_url}; available: " + f"{', '.join(avail[:8])}{'...' if len(avail) > 8 else ''}" + ) + if selected: + url, model, headers = selected + elif mismatch_notes: + return "No configured task fallback model is served. " + " | ".join(mismatch_notes[:3]), False except Exception as _e: logger.warning(f"test_skills model resolve check failed (continuing): {_e}") @@ -1483,7 +1488,6 @@ async def action_check_email_urgency(owner: str, **kwargs) -> Tuple[str, bool]: from pathlib import Path as _P from core.database import SessionLocal as _SL, EmailAccount as _EA from routes.email_helpers import _imap_connect, _decode_header - from src.endpoint_resolver import resolve_endpoint, resolve_utility_fallback_candidates from src.llm_core import llm_call_async_with_fallback # Per-owner state file so multi-user runs don't clobber each other's @@ -1505,12 +1509,10 @@ async def action_check_email_urgency(owner: str, **kwargs) -> Tuple[str, bool]: # ── 1. Resolve LLM candidates (utility primary + utility fallbacks; fall # through to default chat as a last resort). - url, model, headers = resolve_endpoint("utility", owner=owner) - if not url or not model: - url, model, headers = resolve_endpoint("default", owner=owner) - if not url or not model: + from src.task_endpoint import resolve_task_candidates + candidates = resolve_task_candidates(owner=owner) + if not candidates: return "No LLM endpoint available", False - candidates = [(url, model, headers)] + resolve_utility_fallback_candidates(owner=owner) # ── 2. Enumerate enabled accounts. Match this task's owner AND fall # back to the legacy "unowned account whose imap_user / from_address diff --git a/src/endpoint_resolver.py b/src/endpoint_resolver.py index 34d451d9c..ac5a6b7ad 100644 --- a/src/endpoint_resolver.py +++ b/src/endpoint_resolver.py @@ -396,6 +396,9 @@ def resolve_utility_fallback_candidates(owner: Optional[str] = None) -> list: settings = load_settings() utility_ep = (get_user_setting("utility_endpoint_id", owner or "", settings.get("utility_endpoint_id", "")) or "").strip() if not utility_ep: + utility_chain = get_user_setting("utility_model_fallbacks", owner or "", settings.get("utility_model_fallbacks") or []) or [] + if utility_chain: + return _resolve_fallback_candidates("utility_model_fallbacks", owner=owner) return _resolve_fallback_candidates("default_model_fallbacks", owner=owner) except Exception: pass diff --git a/src/llm_core.py b/src/llm_core.py index 1338ef91a..ba567ed81 100644 --- a/src/llm_core.py +++ b/src/llm_core.py @@ -2130,6 +2130,8 @@ async def stream_llm(url: str, model: str, messages: List[Dict], temperature: fl yield _stream_delta_event(reasoning, thinking=True) content = delta.get("content") or "" if content: + content = re.sub(r"]*)?>", r"", content, flags=re.IGNORECASE) + content = re.sub(r"", "", content, flags=re.IGNORECASE) stripped = content.lstrip() # gpt-oss harmony format (<|channel|>analysis/final): route via the harmony # stream router. Sticky once the first marker appears — distinct from the diff --git a/src/task_endpoint.py b/src/task_endpoint.py index 6e477a3ec..6f9a27c09 100644 --- a/src/task_endpoint.py +++ b/src/task_endpoint.py @@ -1,6 +1,11 @@ -"""Shared resolver for background-task AI endpoint (auto-naming, memory, sorting).""" +"""Shared resolver for background-task AI endpoints.""" -from src.endpoint_resolver import resolve_endpoint +from src.endpoint_resolver import ( + resolve_chat_fallback_candidates, + resolve_endpoint, + resolve_utility_fallback_candidates, +) +from src.llm_core import llm_call_async_with_fallback def resolve_task_endpoint(fallback_url=None, fallback_model=None, fallback_headers=None, owner=None): @@ -11,3 +16,60 @@ def resolve_task_endpoint(fallback_url=None, fallback_model=None, fallback_heade endpoint cannot be resolved. """ return resolve_endpoint("task", fallback_url, fallback_model, fallback_headers, owner=owner) + + +def resolve_task_candidates( + fallback_url=None, + fallback_model=None, + fallback_headers=None, + owner=None, +): + """Return ordered background-task LLM candidates. + + Order: + 1. configured Background Tasks endpoint/model, or caller fallback + 2. Utility endpoint/model + 3. Default endpoint/model + 4. Utility fallback chain + 5. Default fallback chain + """ + candidates = [] + + def _append(url, model, headers): + if not url or not model: + return + key = (url, model) + if any((u, m) == key for u, m, _ in candidates): + return + candidates.append((url, model, headers or {})) + + _append(*resolve_task_endpoint(fallback_url, fallback_model, fallback_headers, owner=owner)) + _append(*resolve_endpoint("utility", owner=owner)) + _append(*resolve_endpoint("default", owner=owner)) + for url, model, headers in resolve_utility_fallback_candidates(owner=owner): + _append(url, model, headers) + for url, model, headers in resolve_chat_fallback_candidates(owner=owner): + _append(url, model, headers) + + return candidates + + +async def task_llm_call_async( + messages, + *, + fallback_url=None, + fallback_model=None, + fallback_headers=None, + owner=None, + **kwargs, +): + """Call the shared background-task LLM candidate chain.""" + candidates = resolve_task_candidates( + fallback_url=fallback_url, + fallback_model=fallback_model, + fallback_headers=fallback_headers, + owner=owner, + ) + if not candidates: + raise RuntimeError("No LLM endpoint available for background task") + return await llm_call_async_with_fallback(candidates, messages=messages, **kwargs) diff --git a/src/task_scheduler.py b/src/task_scheduler.py index 6c8ab148a..b9ff51b6b 100644 --- a/src/task_scheduler.py +++ b/src/task_scheduler.py @@ -833,6 +833,14 @@ class TaskScheduler: owner=task.owner, body=run.result if output == "notification" else None, ) + elif run.status == "error": + self.add_notification( + task.name, + "error", + task_id, + owner=task.owner, + body=run.error or run.result, + ) # Log result to the assistant chat so all task activity is visible. # Skip skipped/error rows — user shouldn't see "skipped: …" noise @@ -1406,12 +1414,18 @@ class TaskScheduler: ) except Exception as e: logger.warning(f"Agent loop failed for task '{task.name}', falling back to simple call: {e}") - from src.llm_core import llm_call_async + from src.task_endpoint import task_llm_call_async messages = [ {"role": "system", "content": system_prompt}, {"role": "user", "content": task.prompt}, ] - result = await llm_call_async(url=endpoint_url, model=model, messages=messages, timeout=120) + result = await task_llm_call_async( + messages, + fallback_url=endpoint_url, + fallback_model=model, + owner=task.owner, + timeout=120, + ) # Strip the model's chain-of-thought before saving/delivering. Task # output is LLM-only, so prose=True (which also removes untagged @@ -1636,13 +1650,17 @@ class TaskScheduler: # Honor per-task max_steps (defense against runaway agent loops). # Falls back to 20 if not set — the historical default. _task_max_rounds = task.max_steps if task.max_steps and task.max_steps > 0 else 20 - # Tasks are background workloads — they share the Utility model's - # fallback chain (Settings → Utility Model → Fallbacks). A downed - # primary endpoint won't silently yield `(no output)` — same recipe - # chat uses but with the utility list (`utility_model_fallbacks`). + # Tasks are background workloads: use the shared task fallback chain + # behind the primary endpoint so a downed primary won't silently yield + # `(no output)`. try: - from src.endpoint_resolver import resolve_utility_fallback_candidates - _task_fallbacks = resolve_utility_fallback_candidates(owner=task.owner or None) + from src.task_endpoint import resolve_task_candidates + _task_fallbacks = resolve_task_candidates( + fallback_url=endpoint_url, + fallback_model=model, + fallback_headers=headers, + owner=task.owner or None, + )[1:] except Exception: _task_fallbacks = [] async for event_str in stream_agent_loop( @@ -1679,21 +1697,22 @@ class TaskScheduler: # asking it to summarize what it did. Guarantees output. if not full_text.strip(): try: - from src.llm_core import llm_call_async_with_fallback - from src.endpoint_resolver import resolve_utility_fallback_candidates + from src.task_endpoint import task_llm_call_async grace_context = "You ran out of steps. " if tool_results: grace_context += "Here's what your tools returned:\n" + "\n".join(tool_results[-5:]) else: grace_context += "No tool results were captured." grace_context += "\n\nSummarize what you accomplished and what's still pending. Be concise." - _grace_candidates = [(endpoint_url, model, headers)] + resolve_utility_fallback_candidates(owner=task.owner or None) - full_text = await llm_call_async_with_fallback( - _grace_candidates, + full_text = await task_llm_call_async( messages=[ {"role": "system", "content": system_content}, {"role": "user", "content": grace_context}, ], + fallback_url=endpoint_url, + fallback_model=model, + fallback_headers=headers, + owner=task.owner or None, timeout=30, ) full_text = (full_text or "").strip() diff --git a/src/tool_implementations.py b/src/tool_implementations.py index ae7246ec6..f1ac33007 100644 --- a/src/tool_implementations.py +++ b/src/tool_implementations.py @@ -1119,8 +1119,8 @@ async def do_manage_settings(content: str, owner: Optional[str] = None) -> Dict: _ALIASES = { "shell": ["bash"], "terminal": ["bash"], - "search": ["web_search"], - "web": ["web_search"], + "search": ["web_search", "web_fetch"], + "web": ["web_search", "web_fetch"], "browser": ["builtin_browser"], "documents": ["create_document", "edit_document", "update_document", "suggest_document"], "doc": ["create_document", "edit_document", "update_document", "suggest_document"], @@ -1132,7 +1132,7 @@ async def do_manage_settings(content: str, owner: Optional[str] = None) -> Dict: "notes": ["manage_notes"], "calendar": ["manage_calendar"], "email": ["mcp__email__list_emails", "mcp__email__read_email", "mcp__email__send_email"], - "research": ["web_search"], # research is a per-request flag, not a tool — closest analog + "research": ["web_search", "web_fetch"], # research is a per-request flag, not a tool — closest analog } if action == "list_tools": @@ -2714,13 +2714,25 @@ async def do_serve_model(content: str, owner: Optional[str] = None) -> Dict: endpoint_added=endpoint_added, endpoint_id=endpoint_id or "", ) note = "" if registered else " (state-write failed — task may not show in UI)" + where = host or "local" + log_path = f"/tmp/odysseus-tmux/{sid}.log" return { - "output": f"Serving {repo_id} (session: {sid}){note}", + "output": ( + f"Serving {repo_id} on {where} (session: {sid}){note}\n" + f"Next required check: call list_served_models. If this task is not ready, " + f"call tail_serve_output with session_id={sid} and tail=400 before answering. " + f"Do not tell the user to check logs; you have the log tool." + ), "session_id": sid, "task_type": "serve", "phase": "running", "host": host, "endpoint_id": endpoint_id, + "log_path": log_path, + "next_tools": [ + {"name": "list_served_models", "arguments": {}}, + {"name": "tail_serve_output", "arguments": {"session_id": sid, "tail": 400}}, + ], "exit_code": 0, } # FastAPI HTTPException puts the message under `detail`, not `error`. @@ -3057,8 +3069,17 @@ async def do_tail_serve_output(content: str, owner: Optional[str] = None) -> Dic MAX_CHARS = 8000 if len(output_text) > MAX_CHARS: output_text = "…(earlier output truncated)…\n" + output_text[-MAX_CHARS:] + if not output_text: + output_text = ( + f"No log output captured yet for {session_id} on {host_label}. " + "This usually means the tmux wrapper has started but the model process " + "has not printed anything yet. Do not stop here: call list_served_models " + "again to check whether it is still loading, ready, or crashed; if it is " + "still not ready, call tail_serve_output again with a larger tail after " + "the next status check." + ) return { - "output": output_text or "(empty pane)", + "output": output_text, "session_id": session_id, "host": host_label, "tail_lines": tail, diff --git a/static/icons/ollama-mark-crop.png b/static/icons/ollama-mark-crop.png new file mode 100644 index 0000000000000000000000000000000000000000..2554b38a14bf90287c29b2fcdadd2705c87fa148 GIT binary patch literal 7498 zcmV-Q9kt?#P) zdAM9fmB4@fUP2ZiJ6Q z=%;|p3>cL#WI!VhTcQRO5knw^B_Vu`rW==b*gUPd%NrReP!^y zS9MNRoxWYS>eM*}vPl7W8}N?OzwM=;?*g6!9s|~-qgqQb1~?UXJFs8rXM2I=z~iNV zi|MGAABF%|0ZWj8 zvs{(}hc&VTO~7HuxcQocPGnwNk`sXS_#4b}c@>z{z<%VJNyvElo`dzs{I(Pmf!FXq znC0>kFt%a6$tPoxaY||qUPI=&CD}HK;C}bSc znuB#T=y0s95ki0~fME@i6~%!x;giCWtC4X?i(!ZzGzI;Ewdg;cZHXzLQ(c2B;LSTD297toJc7c%Z; z&Ozoy+up|$>tzF3h<*UR64Bm`4()XUef@Va)AYs7zvjk>HoxM~-a`LfY%G(|KUtq6 z`b4lF@T{`UBJd&az05WrLO)i|QhN@bQ?}Vf&V6&PM?at!#I!rzq20OOdY2F8q93cc zLz4>}+P&Ue?^57tbe&#I{hgVIm2K|?hI{H?))|iUS2Ioz*J-;Ay${dRp8D5tCZhi& zUuMw$w1nGl1};NCMkekBF74;igKs9f&Thoav#Wsqo8Uh8?&X5}&_78{uE*_<%$G*S zO!w|J9_@hMVj<&GN*UXLfi9iP0RxeKYR2bN7IJP;%E;Y=r4O(PU1!g>kaH0FHRF37 z`j-dZi*8(YVs}V&wo=X}#7=U<3Ftby9{YXdc}iK|)OIc>d=uTc%(Il!7yY%oM6P@# z<@<4(vfcy8k*p2(C}njh>*a+GWj)*R+>Oke2CbdMl9W-Oq^$R#qRy|7PrWV20fQ9v z^1vW;H@b_+c-o?wH_+QjD%6XxRI6xDnzZ|+XDa1ooiovm$6}?tNlJN3l=5Op;z`{f zopHViyr`7z$~qmvyxL z(vD*hnLk_lAok*wB(_wvONb{OWIn2_H^o6_nF25#d6S=v^nW}OF?0YhlI}Z_Mc@r& z|M(3gHpWYcbI?=B*Z*4{bkg=qJB}dp_dZ3vNx&ipxxGljsE<(Ad&)uP8sHV+5X*WK z5s$N-mh}!toPEv$-U*C0tXDvc9AHAk@An|5dGnE%uldLaz=nS4j-X$`Ej+Sz{6WA=fHffZLED=y84-=PTR)YD}9Z3_#~QuifLWNfIxL znizJk0oxtrYPW|DkNDZ4z_)-^zz@mBF3ADFrO3MXapdV8b^03B9}`@+*R~_`Xp8rl zhgmV|l^*22psY8(;=d0^z7Agi{skE9s#HRp2;7OhU|vp7;~pPbqdwa4t7N63PUZu7 zwxj#%`*>k;qG&y=#gW+3pr`!PmY?+p*K zHzJ;2woli0Ax1IOgAQpi2{GpR=;mM(y2F!dwDULyiIeRG-$uP({XdChohSLLu{Y|G z_5UO{bSUes_9S0Bk6OEl#P^!obicNm*FDJ(Y3OwL8aM4cYV9Tx-$t$d#MvG&)S}Z< zJFSMVansIYrk~VWHhXGkqo;OSjg6k#@imW5WW}i0XRMu8qp8L}S9in=@U@I_rHH(I ztwfHxUqepY_D5oI3`f#aXC)s>R>sW>&1Td-wgxq91|9)^3;YrBw%bytP62ViIte-Y zJ`=gEl1ApI&KfnOrGpWg}0 z26iMQtITpF(D|XjERx->^fhj2W-8c6R*c$Lz(!w(IFlw505~M zd}9JKe2rTs0&n^@>b=T(z5=29TpO+dJ_ekDWQR?g?Z|TENZ@w-_SIKg+IiI4O(edJ zT6^58b%d(scu(!zf!y=^DcO68dL8kro{so?`@q+@Y3DK1?hWJ7xgLJogX}@T2BrLR z*^Imd=7ph1L?u_()eZOw?DK7W0S2#%@cPEVmIDM;`HhT?61AA1P&|x_W{Vs+C(Ib zz!Atz4Xv>XCDCOQLF9HUmE{$<^dnd?cA+@QZd`)#$R4=FM0B z&!j)Trp3qmR1cCkd|8n|o4(nN_*ZDI^yh(_Nx)bV!n?gBVbseLXwx@eMwTAUN)gH1 z@=Dr@7?1~h;dIjfN{cJ=X+H17TD%K!wn}@<-^B;84fvRIx$u0#dk3bGy9^-p+sV!Jvt z9SZy!Nga_CMa1dlNyI>3LOjRHf!g~cvDii-u`~`xLc{JxzCCWIIh>VzaUyUb-7W$f zk?~!D?2?pESw|pi-9wSvHpiCg4o+CVrAR`gmlKu~$t2|FMG~Lbt-vpUOYj^#FyKTx z5~t*gB>VofiWEHeCLy<*eRpOt5_TZzr$NA-0^%b41H|>zw=HziK*Jt`d{z1Ez!Qk; zVpeXq2kaPuBtqJPU%OaA1I|1KBTnHyKaGD&Fy>}q4Dt@6$nU-QY>V^}q*{P%w}w2I2R@$PK;~JR3h>DNm!%^B2e; z1;nr0$Mv!<#16f15Ptjy9w6*$v?}k#&r9U1cyf2R+k-N5(O=yUGzX{Q#|8FoS4BEJ zC~+^I6V(KA%PGk1b61<{&?>MWa%AZu{C6Z1gCdY$&c@xbYAMPGxf+YBaSUvfm?y8_I(Ys5I?}ps9(eKe&c5x1^$Dwqk-0;Kklc~pD`6S011?+ z6?8A@WS9!%k7JNDBU)QC&Z+LQ-r0yG_z46|`67CI+m69jaRK= z;I|X#T%a`>gx*E<^6JLMp}z$1SIP7*(4uH>%lx#up^KFby+AlU4EW_dbhfyPk}Z~Z zEKXG_aBr!>K)@Fd0^1bz4yKgHv24^QC>6M0SuYT%#Wvu#%DN|j79!%6i9u81)!*2{NBX_caj+)MKHt-q9dNZJTnr%%7F@0)cuwh3v-Jas-G`AF34m zjIv%JP>(H0Mq*nI0Ws>xlNbY@SJn#zOn5<2XE@N_2YrB<70PVE61Q~byh0tjqQUz9YLqEo|eJD$-r1-(mN4H zmQ4-T17tt+Twoe-2IjZs+mM?Yhm`*R+amtvO=L^!K_oEZDkn{K3`T;hk3&ARtC1{P zjU4N>%6fePeuDk!&2Be+tvC+&Inj67c9ecMr2%>jLvp4(ir-MRaiyyy?+O}|-fzGHKk;uIb_zJMcK%X7RRk9?G?2iU+LAEa&VaT=0wvrx4C(y?N zGJYnPVD}*NlC=N)3 z9yfcGAH@uXPEJOhbmk%B+!bq_2ZM1(EFlPGS=|#rXxv62YHaW z7jYd}gnXs1K=xWY>0YxI5Ca&8Oxj_{3*T{wF}i-0AAvXneFXT8!QY#XQ$3j{A^X@q znV_t7Lt*<09a{a0|e*7Riz@4_JT%6gT0eh@TAt-VMATN%W+B zQVl{bZ~PsyuiOYu$G=f)9&YQ9*w>teZte0zSFIzsUa3oUxv`F%kDyPkvj?~b$)BCn zOHzBO{d>^w!t5^fGmaaTZC97;T{~RGf#|kUpDZ^pPT7$sJa+{A8TExRGNvIH95hC9 z8!*vNSB;rilB@X;?j(NQe4(PvMi}+Gm3sW5+&}?|R%+Y8E_9a*;<#GbnaZ*eIG{%R zN1{un^B~Eb@SIYY zBH|xWD_G$7E!$d*pPiT_I0Dhnra#}W(bi$O`L#TU-z~ji=o20F*k;zQt=1xeC4F+f zQkO2^(i&}^f!$H?Jp3=Md~+b8r_K1BQKPL((I1tc@3~)>D)m@V-Oxek9e2+0+$n(X zSnALPTv?;7KG;3g=8&H_+xsE0Uuh6TtSpr(AYX z;jLKtRzDRv;?-~q$)=ebj)X=#7I`x5K#qeK5`UHcLf|fg_IDyz#h!9gGgYP{r+Owi z;Qty~w$!2xIVC(D$;q+{S-L!i-mRh@qmd6>tzDWp9su4G^@{@faK5{cua2zo8_e{- z&Xc@Bz`r7%k3T|OLaUcE6OeDkpCFF*wjPCXT!&eIP5eR{&G*pRUcDt1*Elph*IW1e zFdDP<;mgR=$dxh3wf^e%pGW*T1|hM$t4}k#fG>HF57Lj9BXo#bMreIYlHe%x+jwtL zXW2L!-4SxRoad{T9x#1D{DdcYadDNqh`)T$1)S(fk59zNF@Cx=kTxX4me%HOGZAv9 zgMd!luNV2kq#qm6t>L2BU?4B9eAbg512H@LzSEODSFXTq+>9djo`72jfVpHNQf+;aM48(R!?PBS025oU8z6;RGNSBXGO$TST0mtR2mM?kKc~+$>3h4g=ki*l#@wyFA-n$c{)7mkrh#$nQu% zZaoUXuMBjnH*TkBgiiprItownv@wnj1KpB3Xc>g0!>;Glzl>!3X39KOM}AsHJ;gw; zdgZ@e6!@G61+H{aKuL#zUh@;y;i4GXog|-7b$*QeG>!U71HIzPdgM%?CiQkHzKQ!2 zt=6rJwDED1I*vDDezykLp0NC+`=`a#9?iNQ?K)E$`=PHI{7rxS23f4;_?X`fAldN4 zlQBE`HyJ12xY)xKJoy;8?!O-8LkUaTF$+sOD?uIVT};r%zcXQ09oa=>e3JaOsKrsZ zZ5Q`S*KEt%af|*r*Hr-r9ARY2 zIn8Srjr7B$zu!nn$7_YZKv-Z>;h4??%p2|H!Hm=!4u^;9y zxz**4dX1NJz-Su(x}W|f##nR%w*~k&(*N2XThe0-x(80$`q$&@=FCF}5Q8&N?oa2V!r*XfFjkL-t+}Yw`qkhqb-PTuSIaQ%Z+MJC3DFPOxp;3mIWk}jkpoCqmOj8@4`o=b!%NPe}@Fh&Lf>j9?5Hw^=F>hf%M}n zq+fYtFJey`_StWxQ6HmhY@xDVR@e*NfVhgzOIa5!^AP=SAiocoGFp3zwBP&CJ@$RZ zSIz=wk)I{Wf|9065JQkOX!oLb^l~k4mE>Pq(x=&3h5Z=qqUx+*jG~bumZ4OefPP5c z>}!yH?xpBY`r;;MX{r5dO7cwdxHJjeUFXzgk& zxId}aD(eLTacJ$T$CFx1QjvxNt&Njim5q9U#(stDaiy;<3a_9QY8h(l{vo56kgVUjE-5U@pSSL>kLsI`6zhb!v^ z0&!^VYAtjdb!=X`7`$Xk3IwXq+Ep({C{42X9fZB=fM5Ee3pTXxz@~ERMB^LXk9>q1 z3*?6>=q^R{LqHj zlg17sL*ETR9}P5*vGfAjL;GOef!Ht5^9j2hcv7j%1kD;wX7 zK5}ZHwK)c{AC2AJZX)1)%EpVpUC!MLv?6z*w>hJnHht+1eWiI?=P@lqAU#e-|CC;X zh3}Czr(F?voUjuTFryu@7p<*X_GxV|11-g;(c9P_6n@wDI0)Q^K8H-8 zH8>u(fcE!jgt}zEEdtAdVH&}Kre_#pA1?N#_71(@QSfZ7;6PI|8#lXhN_ct_`Zv=e zlDp%BE(!#ijt`>C=~6Cx5xaEa4hIE_L?oCAv^1K8S(W7uA4-fvLaVwca-t z3S-rKv(2Gypm}hygB6G!dc(!nwFn&QQ<*?+8IPMCdGp!t54`B0$X|RZ5@-tkg5H*1 zMC{R-nGQ-6f%AMQ5oj9D!_A&%x+>5QiBG0gV4|3dYgI`$F$a$I0!ESr@06Z zG%cs$W>=TE2zU8J-R&Yc(Dd9*3M+sk(Vx-pB82%3#4`!86ODa!5pzl%w@-aBP*5uT z9|WI|Ks+xXcA}wxGDgTEbf2O%z=29-1Fgk@=Acxop zx?Cw}J1|_|zd#Ez9I+dXy9 zK^}jrtQQD?-hO)7Ym`w>RyO{)vR)tndi&{RuTe&Ql(O+Bl=T7u(A$rZy}pV4Vtq3q zLs!6!HpGr>ZST#fhAJ6=?(k$8p6`zZT8=JsS(k@Xk(mp68}-3Tg`QW|3j`|B+EEX? ztv2d0%0^cy>jeUpXzi$n-Bug*AZ4SkD(eLTm1ym#huu~i^$2C7>y`Bafl9P?)WdFl z?O3e#)J~wa@nT2SMm<>BPT2Vf_&{q%J?ysHsI?ABVfhj8f!2#} zc2sTDMP)l7w@bhWT081tx79}7>&Vd%?N(qQP>I%#df08XQEyc?8g7pVe4q{f*u!pp zEk8yn>jeUp)J=U+gV^QA8fBy7mGuIFN~}U2RM5k2eXXhArmPnTRHC(`*fq8G>|J{W zED)$fYe%tmTL3m<@2I_paFaaX#!$qLY;A8NRWTo~R@4gw%AAeZku6K9 z^P&ifz-TKidK@<%h!1r^zXW7>j1%hC_AAC2A3FcC08*?19{>e{CZb1D%2?TnfwVP*&h^JS}OYbg)fW7E$0|x@j5c{#^7g0a_e?PP2 UkZ(hP4*&oF07*qoM6N<$f>5WP-T(jq literal 0 HcmV?d00001 diff --git a/static/icons/ollama-mark.png b/static/icons/ollama-mark.png new file mode 100644 index 0000000000000000000000000000000000000000..8cd2cf1ed8043caf62e8b069330889c0cf0f5a3b GIT binary patch literal 7487 zcmai(cQhQ#_wb2?NFj+R!76Dw(R+;$5ky$MWU&$5vU=}Q7Ktuv^Ibd! zxAJZ-ZRbe*`$rax?}8NG4P1{`AyZMlL3{7|Y1c@PQ2)T})(rBm_oyhmtiJ|$sJH1< zs3AUc-gh)!=-NMN?bHQf#{U1?T4$TC)~9j3Fxfiddhl4&0~I*!Nf(Oe_TK`)FBluUSUW zoT=0BHlm$^);*S-+Ctzb-^N|!R+XmChcgDOVMjmd9_EZMMi~1sEH&pSXrq#5QR@!R zHzs_d6h#mIV~UGA?}lv-^~Y&`{*8PWix2e-RVJ>@zJK$$z{{!8;&0GKFl(!%l;8o&JCaD4yhSdf9sMR#Sk1 z9+SH!`2jIL{&1TXD1W6dfSbMG&q@g?{?t0D-gYSG%1Cj;r*k!Q=YxrgC`HeqS<1VK zk*2pn3Fg{s=trZ;h2h(;W8?meL-q!xyUI0X^AaNs~Qj^MM& zR~RAm_&>-P+5&#s+u{TRXGW-;F7d|uDI7j}_t%V)fXG}8zA(bt4rFx6Q4;upA;%T= zsTk`I6Ma3@Fz}r5M0g6-3decHw_)mtxZX1ZKTrR{@Zg99V(eK$;O=2w^_g0rzY&(R zy@4&~OvQT}(tsVBG=8`=*+G1=F5Xfl3K-B@j}=+;X5NE-MMs5iimA zgA+gQ;6ClYq!Emh4q~$D1*kp0B#%GEp1rZZW8pN<3=P5+UrNVCRhW-Kt}ktYzeMav znLo-`8VTTMqVJ>v`4w~8-|lG9=3}uw#GEHp>aK3=Ewq}wo6xxy5JlarQaC5DwsUyI z<(g7uLg=P%n$3||i6-1k*-@vAwojEunW^Bumo|uOq>B`ABz-08o@*?j?(!FL5_C*H z(+4^6ZVcYCM5BvFXc__Eh%EW!%?PkPb{nm6*K%8XlH6^J6zr0_wWUkWU@rQxuAwAL zmt2u`F%eybK8xnQyVSoR?KFe`t4=HMC4s@cfNx8Wacnb#&*yBiwN(x{5g+DfNSt`~ zN6jw~=O(}^gqUs6G_Q(-jckf8ZAo>+$}WLSm1R*-{&-lgw0|^PlzlugI!soR7&-&9 z1U7zP$va+{H4!Vok9QR;i4nzxxUm%0uB!bNbzAXw5Fh8EMuhjN6hX@RvVh{U zU3|9d9Q+4?8Lax<=oq`-1$zeT92N1?aS_Ig2A!ggHA{k@Ya>rS64>=6hcU{qfULif zH)8A_#on6Mt@rIk%B(HD3mz78G3RR;aa>J+^Z6}$Y>+o7MYC#6Z@aV{^k(z5_OH%Et zp*)(A$H1_2<*W#Lja`<7x6z%biOL>P$BLWv$;KnpIF%xW70K~%cxgj^$&BvD2!ObZ zhGCSw@q{35dfWtTxIBpbiCCnoAXbmA-5l-J#I*^~-AZ}lBTVog zQ?W*M;`7~h5ZSZxA@;y-Rv57gR#+pBl$!#SeP6J7x64bVmv0F0Wb8?*s!hTI-v;i)8Iq+^r3s>sd` zO_?8t@wquocIOB10x7;$MUDGaMYg#n>nWn(4;yOZ#%vQUs`Z> zy3DLa4tL~B8jIs1+{k^PqBX>uU7PCKvmI)L<)*@BHt!QUCe_*YAvTOi21rtLaT?E{ z5nlG5KhmM0c&z&7_T#RjqIWgwLvr9}; zH5rvkUeohC4Zwq5*mh%<%-x(}i3BG$>j&)oY_lFUp|HQ)UfX^qUW~8r)Q)#1L#tB} zd##<=_+;7mWu7oTF*}5OuGhBEXLFCJb?}Ol7C0DBVD=}o5+j|e(-YINL ztzf&*1>Q1mn(Qrgju^lhkj=%syDt!q?|eZJp$_)@@v$9QF%MtkS_k;LipS$aU6VGv z+tU13^aQmg(l~ToN|-sQ64*`Nm)QQ*Xycxc%-B|6JROXJ`B{z6B)8qVv{(A$6oa4m z5T-Ei^Yw3M`u2$b4H|RD9Q6Ecg501cV{y!R(3A(g)$@#js!qtzyp6-%vYj&jFcuJR z%%;5jEf1IN!%~}jRU^ILw4NF0X6DreW{PTq4{qABC3Px9!yOVjno!gP#pNNMsnnopR1i4Y~4uwX0mJQ84AU69@2 z^nj;Ku2L!^GNm5xWUe#Hs7A%65lVwXM&Nmr3KnWHU5HGAT`MFUQfV&(yJTCNi0gLn z=f~!g2W!b?doGoK%cI9(oE9ZUo6U#?3zNZDNUs(CfuyFJ3DPq%w}FJ?xm{o~txF)i zLvX|1QiB0OfBqMrPd09T=?q5}TCAH%YdU^HTub<)<@+7?%v73urd*hZ=_i}5om4PN z)aYniHn&7WS5u0J?{q<_P@iUmvdm_c%slkBV*$D9SbiP5bQ;Ca#V|(m@g3Mve)G&x zp|;d;c9To;{Zu3Nimp&Qida$FLZ+=K3}TLe5u+III>kHmL|z9!AaXva+0#9J4WhnY9znXyZAhznU{B+x zK{y~F1*c34-DNb6LBAQAV$@4|DE8i0T%J9c#Mp$h%1v#D@aW2#>-yHorTdo1$!QaM zzW_x`DU3Ib3VeN=2ciU!MhTr_a>8fZgW;?NQm#KnTfP*pH^h-U4O};(JPv2bl^w9P zwyiY4bl1YCv_{d&m14cyZK_QE+blqeN9p{rg)bTEZjKdWnz%PkLTj<0@v13@AV@7| zhU1b=5VEEAmp{9_Z~0CHs&=!qeFCBB^L=67;qvGXF={wU|LkDntI$ZD@~CqXTGn_^ zt-(+XdDG~n&ulLAAo8fHey2?IDqX9b>F4`TK5}q=grBtd0(XW!^`?2rpN@!kk&h1v z=$K6~Rh(o(OV#F^EM?Um3}LweX7kPfHaTYVRUX~H6{TsjW@V+_fh3-6FKoWC3;5c{ zvSUVyT`*ME>ErYV@}!q?PD?1>feY+sjo7rEmZ^r4MAX}TE5G;JREgpjDul*e&JVLLU#E7R@uV6Xb`1uV z72S#PX*rlm==7hLYk$-}Y815${*-9%NKslv&Wd9{?5X?NvUC*eZrt0ZceY#O6mxt3;99cHf*#R=^%YRQ>m5w zEf)N@Zu1?X!-XLfFlN{p4GXJ(J8yREK#eYrtADD&8c-3ZpOdwf3!9hsaow|+$`S{6g)|`#o!{Co>K@f3>eXcU zl?#9Lbzj#RBQ0f(-zuzU{$P*&@;A8iv8~&0udv;{|1L(bgZ>Wxr}{E8lTHF zq-~r&%`rsyQ?p|P^d{1@{r&GvhF1cHQ6+od!p^I9+r}rc4-XVAyY1eQha^E++XZcm z<~^s>>t3FE&IgtgRH_-|jItpG1t zDT?r#`aiBS?sy@gNFb|1Ec~%Leb#VsEy%d-cxcr@SAIL-rp+ZqJVjLArCQE1USGF1 z)Lp=uF8@q#ac=$->$bN8BJwD%+@%f;>0ay&R5`hHovk#-hCWT$5t)0R@M ztu0qQ4*k)bM%F^pU3V%H>y$#xMZJ%wzGW<|+VM)W?+$%)%*5+3_X}OOE-yOf* zz2lSHa8*Ogv#ZWwku1(Sa^T;=j}LaE-z$-n+{u6Wt0=}aI$g_)4XrvplYnR!}QCm;Vu2b{9YUa<)UK!>OZaX<5W8-1>K5@cNFjCJWRaF zySCI<7SB==*3gHwli}4fU~+Bbz3;YaG>KVr#dYgkTlf2gA-iArp8w3E8|*A{`q3h1 zVqBEvqe#62aHDFMjy2Z$Ck2J{W1xvxHCOt@BN$7lXUY(?qgqygwnpIrWOO&2)U8Zi z*G*}ZfXvOC%Mp>ifBpflNPA~G=O}w9?b9?8u~@Ap8_7g|29TWJ(yP#&k>|{@U)FzZ^pahqKD+UXo6Gws=UOG`e|I!Rh(o9uY1{WV3XylHuwm1LhG{6Dx_JXHb`cf(1GQ2yL9t`u^@EW zK{nKSZg=XEKEML#TU!`sJutaAr?39$5pkOf__$8@H(xI#H92x!MeF^5OF<@r*?*rQ zqg+Mmx0Y>v;g9Qn4dC71%y)+3B*o0KcOapyQ#G;3KO^kKzC1?v_XbVT14jngB2~dp zz@a+%F~!^d?lG8dmRokq`ABlj^%D(dsuN(CDZ>HC);MZDhKu=WUFAT|s))qMpZY}f z-K5h5FWwPWZ+p{G_M6lC?W0HL@oJwNO(&#B-&E?5?mx+H0xFY6hMl~miaasg@1Qbc zD|(%`{R~Nw_RheE@`oWuuGj7IH2={3LmDK-N;^_;{}D0sbT<@NyT}gsoyP9<^$o%owr9u-MIS^$r@m8v z!?NLFvtN5{1KUA}2{#u<4ug0)rCUXLi9Yh%4t(k|q5|gyM*S9!Lr|Y1^a6g8oNv*$ zIVCkTm8Jj1R=PV4e`68{jv8s+%XAk^Ka>}g!UVM z9t#bIGVqw~I`{pdqo}GiWLY%X+YRze#ceh|Z%#^oqR#jLdOBzp&=QET_j8-t8<9DB zQ`ra~nJLm1PGFw70s;md`YDt?83Z}vDMhH7elu@BeRc^-y`F4qou6Xgo<#yMd}3PI zxILKfh`Rk;Ervx`7(}VSqL%q&ChOzN(^ZP|8l&FpfO7*ez4a=ck^UH1*{D53XEX{* zD{I;t>OSm$GB`rC=Y@6lC1?ErN)@&B()xEv{g^|R&^f#!!ypF9hmG|eVzU}U$0+><6G0p(c@P0E& z@0_B1N_aILH6f_fwAXh_EWx29ODSKIWKn0*6pXoXP@~3TCA-QbB1vC`3-CZS#>nu; zUau|vHe<5*>)_8<;usd3!rxiytk*rY4gK&!T-T`i_@@!3rI%YndEAhB#pv?9ilnB0L9O@E+GVGIj~|Me zLtf9cceR?&7Daa4-~vB0a1+hNk8ltx{*$-V9CDDaU-m&`vr(0KTXA>Si$3G;v?5WG zfT~xi`<1H_$!b$DyUP;dbrhGPIs7ANbQB&no!O`%R>1K+O8DkKk>RyxH`NmG66h=E ziQ5%dvF2J6{_|f&J3&W$Guiors|!+FvS!Pt%Bf!J$?tPwRuN0HZ$&9qe$xEQb-jIo z3AX1=(+ZR9C6zVge^oH%l$$3I2UBa{S^h?WLg=lFN93(1NH*Ju>B$mDibWTPiMz3{ zIH*@{${Io^g!ci8)LUJK>3C%ezmm*px9Kpb9B7MwgT53U&CCHnMGb7uY+kOKi5a|P z*~ncY{|sFtJ(<)JBVQAHcCHUJv`k%P6ESuYU^;S1{;`*n-$I+}9q7+n%apQrBTA4? zvs}Y&QP;XwQG5lPS!b!l?U{^r-ncHQDYJq>)}+J5;0?thdd<0opKTt&cY@3cv}~Y^ z8$MROHW8^jbCi%)1&);tWJTWZ)T1)Fn0J%%-H`AQ%>u@kX@mab92~l@KRDY_J+hWk zVC5p+)Jh17+o+l#gvlyKm5Hrf^UGf8-T<65w10_C#24JHeLV<#-#Tn+6(HQvIkUqk z*~d5#@+?<!BMtVEq4VOR3BXRREJBbn53(y;HWbb-I8;F3~`cv*HFE^$aR zdhYk8ZA(xp21y1@;`6z&Q1$U`YeFaF4ZuJ&^di{NAk3`I0@S4B{`UtydzIu|Hv3!l zQLV*of&^Fs{SW}&n>5cYnR_O(nCJo*O{YL54E&M8H7ioWn$7sIhGgEa2Zt5kgua&4 zeq{D_gM< z$8O{yas!`VnXi;?aS_w~Y%N~MycKI?J3My2GBmO=tqeVUvgkW0_v$y3&o^dkiIsM5 z)&t*HtpJQlx5295+wel(?cx>r-K@9ZB+e2e1{E>;9?df zg3=R*tt_7}vG(H*y3piDuD_W6q3l21V0y$;-Bg0@hAjM-a9Hi_^@=mk1p9kWj-p-Q zo&zvZu@fWj&1bfDF<90v$c6#2EWym@vp3ov&Vxl;j`sg!T-yZWWhA2jDF5Jn@2my- z^{OsmsH9CgEA%0%fyswe^Qg$@V6Xv1(Xk zmRId29T8Is$@zB|FRfNyz1+sbP>T|)25ur+RWq6XnfAYV|A+QgSVCaT9I3ogYji}s zRhx$#ocVuPrPR~o-L|eEpz0ppjTI_jSKI#= zIkogp6*iUGAVj`z*rAAkjU`B|-qG+Ij0ozEjxR;mTzSchp#bz;8AXYDE^ugp6l3+T zN<@Qkao|;{p$E7-!Y7Dx)UMAG>*_y$UK4xmL{Swz^|E-+Lhis@yWU`jm(yPBYLWKK z6n4_bg9N_Z19%pPQIta7m#lHTE>^d?&Fxb6V35+#JiB8j$^5Pf$EmQ~V3uSQKAz) zItikS9z9wR{Py#Gp4aPn{`mcV=f3XjxpU8*nKQF9=iGDOa}TGkj`#osJi3F`H_*Rr zNCyA_kd*U+7T^K`;8a!hyMUBS0I=)76im70?Bd~ePXh}#G%|+M&H;dw z@zjGNqyHc8_TZi>g(pz>>yQ60-unOIZJxUQCm&0ZQFM0l{I9P6=s)e~ZCxJTr~E=F zCpW+ya1WpX!2YK{<(fjSxd6cJ0|0=E^ndcK$pAogH~_#g@qh9VIRF4-7ywW;@PG3D zPoF%saBe{3!$gE*k*=EQ0_5oyq^)qa^1JSbvCw*Z&k}O?vyJPB&0| z0`oZg0%ds_!d1sEB~|P!isoNSjEvDT)G*-3O_4Y%oDmMFwcbCS^+)I$%PP?n^M;tfz>AgL!SqKB(NWOBh>ND1!sQ1h zl|5#8SB~C--sHk^4MF&Y3a$!0#_7VfkrDAuPt*RIqxibII=#BOr&cs$2w3rlgOI`R z(nd`Uhjme@0Nsfyv2-UBx$RU(XYcn%{YNKN7dLsAKR>e~y>1o#nbfYBFXt!1>&s6xNLqboW3NWeMM_VFTE z;7lc`W~5{@uY19fy;F4ZVYt`NN+oGO{N`NL?pcnQ)Y7EY#EpH!?j)f+v#;-EPSZAK zMk}UQ%Mt~h)#dx61K}ySHMn0t_iE1YD#OVT-oJ8qJp^TAbQcY1!&IqIrYcFC` zkpFs7TmWJzgvQ1*!_jF^7Bd2Ol32Az-9Y{P*g8TX{`1cpcw>iaXmkez4u@QaG4Hwa z!=jEs&WD<11ZrosD432%8r(*v=X$zd z%f&(7V7Ml5H2GIxXe0|50|TqUH8rsyr8Dhmz~ty#guHz8K1po@lm!hkVgH5f(> zHOkG*K?2OH;V)JEcz~HaN#uuX&RczeRETA8RMfk-^!b@d z6v+x+T>cd>kVy^3&BxE5LYZjFj_=w z)<0DwFr)0Uhtv3OYw2?f=N8HGX`;Avgc0EJ2SnMk93&7A1_Lj(h3MYb>Rw^KH^3{% ziRv~qG&g2(dWu$4W1@zT3~lU4W&I>TI%KCnFV6dIYRSMws^JOniq_b$5Sc&?Lo%sJ zV(#Ak-fH{I{r>AlVyWuWV^gpC>WTVu8W;1WMcI<+aR_%a4UmPRgrJ(*9jfvhpk6qq zup|T2MjrOdYrhpkM=i?C#2S-kc5dx2#d|``I;nT4SC!e$B={~|o%+&II<8#s@iHj> zE6p9IJC}PoG?Ln`vUCv<9nfG{b>2XX6tq?tCK00*cE7k?&e;z4hG@yp|Ki>CmdP^T z?qubKJxFu2Tn1PFA)(zjghg1yJ80e8`?>Rai<}T;BF$Y_!*C0{;1IGxLnNoKQ&EZ1 zr)$E)Of^(sZ}rj5YHA1=bbluNZ1tP0|9pddqQdyyK9QF}d6d@%oX{_fEUaYTGC@R@7+ z%4dz3n4kYPDAN*rH$opc4DU`X8%1J4v0!WN5l**j0Ww}YmDJCaFn8|4JK{m?u-h-n z2JI5zB9{CUW)@1uQ|qq97UEg@L+J|K7WMB=U$1O6v2qGVUA~FY?bS;HP$dx&w0t&k zoI0_{fHi~&JSVCybD?tg*m~u>ql5IMLH>5_)J*M+vdWaXZW@{@wgyV#n4?t%HkJkBz5Dd|TY<9@WBgua=?n zjUh=BJq(Q+XNaAZfHoZ8#X*Zje~#*Ql6Fb6|GIxCxd^}?m6`mRHj*}T`bR#`52e{U z#TgUD8I>>NtZIDs34N%jmuSr-st6zlnAA2^0KH`OTKSTye?ziJ=PN3~E6nux=H^?} z%m^zIY|bv8sHhEynrq+jd(Go<+9UbaZgfxXHTw$h_UVrDHwX?ug^a}s06}k3sU2;`C3$+7kkU(X;44(P@HV70I;m2)Z3;;YBl@BQ;6OB*|Lf+wZ1z^UrM|`G=-bB| zTcHC{QT$X0Lr{d;RRlrvEe4L^Ah7A!>lBry5UBC})q!^V>S{e~x1>Pp8oZhQhqe&} zEChk3lOzN9U<&|IM3<;>&j_XFg)^nq#;(PVcW^C~!&Qi7NnaN|sD~a7^#%P;)wNDN zA_FRcZqo$@7D2o1dlIIZ?n>;5y$G--QChPZL!{Rf=m0V#=Xc+VImk~cLf4J0HwFBC zD7^lCntj`%;bNz@zw}NHCk_ioQ;Zxi39ivfPe(`X2@}fAA#;HG zP*P9%kw_|tz-Kr{$%=^t06Wd=V{CRzB09hCUwm5-UJ*VRcfipja9z^&DM$zjfGhI( zw3Oy(kbK~o^uX|UhIhQHi;MC1r5M`I0Tnqp&%<$QJeCxO?!e-O(IBfZeP)7~@g-Eq zQ1|H0ts9G9e-i;OuF?p>;WU=zqhTDh;5LuzAB2TKB!F7mm=O!TdZGT_ku1Bgx!>Bq zkC8ZfG!d*BOHm!HnFe9PEXwqp@I%YJvU!>ePn=xSCmKALzwWk5WCzIe;izD6U@IKR z9Cgfx5jC>c8HA{JYVB5D>oI#o4QAcrxZY(diN|W9LQ^NNBd_219UVmk!=04Y7iw^+ zZIcX6o|8Mhjv85V2>>WF+zNz1gAh0py2K%bWE&6+hGQ7Al>MGJDwyY_@J_j(ZWVvt zjARHnrMDCs?*f3MaW*a;1OowkH)lf4hfxB#<#eeKv2~6H%xD!Ib@drS$c~)d#q+E=Wv)2zzD5|)sqIpfv1NbGx|k)SDcOx zH|w@*P7A67cH6fVvDToD@i6dPaO|@JQ855VLiEZ&822#u628J zt{C6sNHf4YKiS!||112nnW8NgKtm2?GPv^QoiH0{c=L(aq$EH}VML6#ereM?=x9lT zSAOyanbqxOEVZVMON=N_jJUA{7vFq5LcE4%*)8Vt$gMEA8L#iy=*hI7tiyN3KAY*K znL*;gBmjyCG`trz$U?{TRN52q(JJ0s(PQM)E>c&?>))aXJNYFV0fXb*zQcxiV!Av7 zjKHQ3mpr)^kcA37wYvebfeYWgEmY3saVRY~D+tJ3gh`3Ola23>JTWR7Va?1HNs!82 z{zGRN1eD}uS_m!uSCajAKK)Bub;A#?nZRFPdn6it|K=lt>7x)2ULbyVhY}?kMD=Oz z2lOb7)vqs-$IN{<$F*_%Fn(YX!ZPa4aISg}`$NFP09(O3$ZFo2<;_Cf4FCPFJ;L;= zR0JmwqQhf^z&9pJ?#gYK#}5E&U4kYA&c{)%A4Ic>&?joAfBGy=`nS*G^)yW5$EM0o z8x*RX15SPn*v1NW<=DQz$A4FkL#?OkkCYU0Ue@9wW!j`V%lDA{xDQ4ml_Ai077Rb3 ztdR$F-LOg2{i@LO6|w4>TED8zcJ?MuHu^DQTv#txQ9-4tYKl;~w9(@m%DA!px!9-{ zy~-sjzHa4{_bUHZ8=TFTLQhNmPAgr{xMqET2qCFY6%TN^t2pe>A9;~NRuiSu)hqq$ zuDAcL+9YsOAz0|i(oUwD+G0A5xuB}VYi|~q3y%B6#-;EMnY1Ij zV!ZYtlBv8XPxRZc=MGJi%Mb9@%L7$?k5k!;zv~I!^7VhloK*fwx%!<2`3jM<#Zo-q zCy`ch!Oo}CjiUJT(doLwsf%W+*|UGu9G9d8V45cTY@21B#(YH*k(x@kQNmW`-kamz zv)5#K|1Qfm2@**}DB|1I&0#njCd`u2Q21Hs)@``2PB7j?u?1mP^RJ_H))ZnsBKA4* zyzz14pZu7|0KUAnBrVMM`Nv@)*SxVT{TTs&V^%OINm3blq@toTX;Rce+f~%(;icXh zDOdj$h1nCXfuPN=?_2DGqxl9$3C=Zku&@e)ij+KqzM-WiS|fKK49!Os%y8Vt?Bg?4 z^F6)Bi(YLDIkyNxhV6|wdv#j#sUMQVmx}*xm;q1@@R6R1&ajHMkb{RiSJ)2YYAv^_ z&j+1p8C3pk)CfceN4FT#lb2;ic~}-DF+K7c-J)hgOqHYa?cqOI9;D1%6iC?c1X|Bt zOK3PTYyKpt-E$B3(jn3`x3qOB)ZG7kxfrwv;nNt-xubol-2a+c%t?>xV6gY}znNrq zbDyQ9*R+ItLXjP5M^zh=I6wSgdHmh9HzNNupWoWan>u`xebJ$3Ku$Q__MJO%RXJmZ zh>3}%q^NUZX-(`O1~E+R{xqqk7TVK+kJ)0P3>)Js*F2Mx2O}6a8@*4fHZ6P)AEGb*2Jum0&$M5%iINy1h4bNbfKiC>ON8d2M;+z%S5$+ckh?a4`2yQnWs;(aP^3 zRnFDUM>{b|`8|8?7)b9%ObK z)+dUe0pG6gmb1!O%;mY7+BBN`werrKH>tSxlvjxAyylmd>oVaH?ZId(`*g}cg27aT zt@1RXwv(ISlAmdz@%3I~nT(BlF`Yr=ux_q22bb5jJohgp+`*6X(dGIp6{d{&;GB+5 zWGz1P^iGR0HXOxBWErN|I+Tg_3_mD0ihNk_-)U|CEv6q34AZ1f7VQaWOp4c>{nqnF z>__(a>6=o;KjS+=)>qkV`aFwgcpPsSlS1V){B@w6)D|~BR-d&CEbrA_430GUG^FI) z8a?48u*>IsU@whPHEDd>XI?;!U5*j`h_RsdyEA4?Rl7HF)Nt^tJ7}dT@>cKWME)DW z=lHI>BHC*=FU0Peu%!+-&7AMqEFWsj9CTc&Hc3fIG1dwhB{SrIyVYkqnA+*Jl}d+Z zOAGgM$ZiZi|3YL7SZ@rv2y)HZ?y!``mh-P84zI5&)2>ze*fRJv)mI${_3qX+)t!$` zw+|1OKQMw6f2NZ2&{@A-vApMZq$BqPi%N7bYK-qGA%`lTFXQXNRj!)t9MnkUku2u7t5{uD!iEc z+4SHlJC-L?cR9%x?w4p!?EAqS~`1w{?wgW{@|}G5BapxPSU=@*Kg2mV$itp zoMFC*$UAFX+b$9Dz_MwTmvSquXb4 zu^ZN9Ghx&pt0PYt7HFn%ILn7QVVSOsdha?KXD<}(8?R5Ut3_%fDo1Fp`F>Ek)Vyq4 z#wHYTc&z1B@&a3@e5&DgjnlbhP}~TnF3h>SZZdc+D{H)F{;$RRZ`u||A8B(RI9KX= zrdys;8u@?`q}n5cJ10|r*k6Ric#a9fmzPq$MQMKuOMP3Crz>MM)xfKo%7zrIT*&R54Jqp z`!V>=Y`iKpgLJxqn(h@g{`XkYW0S@EeE9P^xF>BCn|EuoK+cADbtd|{o+bUHGFkM- ztJ5{tv)!|MiB2U2*H~xzxe9XbTlg)T#gO}>?%0&|to(fBvDq+K6?wS5yQlj}(N$W^ z-Qa7L&2PO&fWJ)_C$b-^2Lcv(w_g)#jf<-k;1dQOsvo_4WnX`aUaD&GFW9`|Sf#qa z^Rr=Z#oDJ<+;}2QeS!$L>`@-|1Kx)oMMTYL^l%kDryK7nX zu2#WuT~mi_>g!SuYHF8QJ+`7L-XW-`R@y2~w1?Y+#iA5zeLvUr2Qla@8T#Yj{_C^O zR)k@3k%-7!syCy6#lDQU0%l?VSkpto`+oa3{i8lLS& zFI5w<*r0&j7BxHdhF|0~!@SJKy;Y~{0{_${3}9T<$xoWejloas$#31oJfYcq z+qXgo8yA?~(zlA&#%%Sk&WqfCV21uF%@=+;`(|I|pJQoZDxZ-No1KU`!HlJ1gBJe| zsirk(svs;!(QXI1V)#)uqeS@MG!qnp;*>EE}K2itGH z`Z>U&1dYqIx~)34nr8o_g;C3q#u9hqyGq?@nnpkLMW`VRSoR?%{wDkWW`nNK*A1hd zO@Hh5l=Peg4U`TYfx2*d`;kpLGZhExgFKeGg<HuvsFqq-rx45o{%_zNRiMqX4!QU&K@BWe9xP}`l*=y?F=hO4|+ez3XT9rpt z^e|phn? z<98lG@dK90N_8N`tqbx6BNL((#c$vuX9%A5FYPJnA-hGxq07u(VJpqQk7ryPCQqm7C#7_$XcZpJ^YSw;)qwGQ2z^#u(Pn{}df8ZCdIH1ztT8Lp)ObaZsp$B?M(xvun1u@MXLNIy7Q}???vsDs$GU0_V6|t(0HOL(_VHE;p<) zY9zonZh+GjW)beeubmC*@_HfSV*&iNvN~wJrgr|0+WS$dHnk?lCm=$=tJkNWmNuWs z94hbk-B0VfZ3T$>ar^ZpRYuqBLzV}8N#X(W^4pog1w37xm*`&n>W;Vkdwlh-OHAP< z6N3t7kC~$>ITm1WFe238jb${8@89RLCvWHtw*2K|xk`vt$}nr0-hv!)oWh+QGyee9 z;t&h47rtxRSJ|a*smCD%X30uZ^`{rhp3Ob{2=U{R9x7YQ VN)t_MNWmR&QzouW( zKS#k=>o)Uy!BA%@$l1KaHQM`FIOwaP=QSDog=5dcsY9IXSZV-6MgUi5PO09D@TtfT zby*qDQcJhd-afwcCNq6qajvJ*a5$O(DEsZpJ=hspmrVR4+O=6YZx%ZEbHRnjrS()d8ER_nf%r}>g-GuG-6f#_Tm9s$fSVt;)5B(zyYua4$XaPD zk?)q*6@K3bDpgryuO7LT@7XjJ@ZGirmJRDJZwz*c%U`}J?fWGrHdAkZnxQXXMK!)m z^3Ki5D%#_6-(GUSsIAQdBsS z{@cMX2Zo(%tK^qJSGV$9di$#g zCNx+56+`wFyr4B}Td_TMtMXr{k0ZhApMK@uq&422IuB@jDi&7u!me{;uSqJvP|mv@i*4_@6<1^skU>PA8y`8A(B|EV3s1CWX{zU##H^g zgPJ!SI`;~@iwIYXR#Z~8e^Ih%spVm2zBMTsBofuI_Wc$iDChRDR!h6n_82&v6c$Pt z*Gdfies`c>7|;@YkIB9KPv+;r<)H)Y_+`%{53h(s_;j7xY%mTT#Jm$ZLl%doI8pa@K}W><J^E+^`pT7edp3$tir>A_Q5rIm^FJ1+mvbgeYQVWvhRI#Hcy%?LtmC1 zyH*G3ny{&)eB_PHQl25BF-~S8Eg2tzRCPaI=|t5{PK_lKdi(XW@-Yc zTo@VyC8?h3rWP~L?xXLk)MNp`oKe`h=l>b()(YHp2$t7T8A?KXm}@Z<5qMQRSBmU`w~Ly{NIAF8h+lkjTHj*I*@`J-Ng2 z$2Y%Nty2TK@o*^vjnjqu6Tg4fPv$sZ=X79rc#=K1Nrp*{-Q9_j7LFEN9iIK)M&=95 z#f=_{kNUCK%i(e0?+%i@bNQ7|U{(Ypx^BB`qq`vG`fEooy6SXsaM(hyMT!@F7S`>M zhqjlVyYe0)kk+}u{aY9)>VxBt8ecC=-9RauWrwC2KiU1I(6O)9_Y~@+!K5L-vyT8f ztbl`Ol#5DHscxx!H1TGlV4S_&R&zu~;AD7e3+!8;XS{<1U^=oeZ1UGDEAz|7d10I% z-})5-0|NYiIuzZY_Ni^{EgnEO4Yb*XB3akm>IA;9?;cQhoybcZ-Mt}0>NS8~6c3J1 z7P4^WzCn!XN-y_fTeG1)GORbW>=Z_h+KYsoncHtHn4SIv zePE(^C@J^FsjfCoz5dxACKm0c(g|^zTi1Sa<=@w8TW+po8XC)w%>{4!<&|=)-(HP- zDJ{%^9>`vfd46?CJd@gkc3^4vlU7CUs4KC*vGF&e_$DDbs#iBDebnRZUT^G@@)XIv zWNux7q?=IK`Hp$z0k(v`y3e6FZ(3L2TD_XffOU|g?nvhHJ*kux&%OT4H)*9(bXbH+!&_65z0FduPv(CdHmdqlsUa3xO64fS zgIL)wxd9I*+%ffkX5iQ-LmpQwLQH4u)6?6Z+>NE?V54JSyT0VFl&}0M)le!|D*55i z=wq~FXKpeXYYm6SU9-8lPAqA<9EMCiGN>8gqs1JZ-uQ3j|B;K7N;ai#`=!3R+4DG4 zUH*^mC->($yLnhUyXDMq=8()ck);Vt2g1}spO)PV1@;Nd9FRr2InzrGn=Kd>3`V_s zQ?4LqFQG7|*+mQLz%bk~_72Vfvf;Rh@P1P^UccVnm1oE2!kdE_m|H}C4D;(#Ra2T;M&C9q9ZUP6Wue^f^={J!nlzlkLOqT3mxTU&5gN4t z1I4%!aj~yyL%UdVPaxx-U^+rqAr>4%p?c~qIoBaTl;Jda$bJy-h1%#Is( z8ORdBu`Cd$kR5)4#+M-7Bc)?rZu8y%mK4g{euy(#-P51A#|t0;N-*Hb*mQOC~GRt6U}pO{%rS(3X4*ppN}xsSNJ94Y`Dtj~dyv zPnQRKN}JqQ>b@+Tcsn;(EBUm#AaEVSVFYYZW$v?xOyM`jkpus{+1W?agvPvDGdw)w zOXjJET!_3c*)CJpy=HL_7Q+I_0#tSaq=3edZM8 zByp1PLJX*}UL@bV^~%~;r2j(in9t#lQj77^-O!kMPY+{f1^1<)Q@+dY(rj=WQ9)_` zUTB={jnuJA(#_Og#=mtuDK>9$ zja=@K=qDk#JhbitfiFKPpK@M<=sniW^55*bA8GOBDB@_!BaVuBffotuabUfZ zBP-#N?nBjvSM&LgxZKy-uGfpyx=)&Ij0eU!&DQw!piX9+KBX2gY172rO1p1hyGmys zTI5#`57%K&7kA%rBdmx+;le^@PiE4acb{$?ti(5-pFBOI8k-e2!UBMt2u}CQ&Ge+F zFHPNW;WKA`lhdCYcK-yf9Gotzl4AR$-KAB6pYp#6@Xw00LM52{A1p@au}9_=D){X7 zTV0&je|DK@zl|)&R@Q6Y30R2!oKWr8d2XcOwK*+cXLS^Huz6E%uT-fl^;9%vR59D@ zg<5>cVyv;t-tgCwgBhN}rQSDOhaDb70i&&T^loCQ+4DP$Q*P@A7(*-?hfbArhSFF< zqRG%j+Yrl*xYvhl;*17c3Fd_Y!mdC*a5AC95@XcH&M1C;r6fcbw5mCw91!#VRP%*EyXj5ES?&;aY^51+H&eEf7>y& zVql=%&nfT9;Xf1MT&O4nP%=1WEQr}-dEH|EP^@~h&N&^312CcSkBf!?8p%myoV6v9 zrMTs;fg7ajoBgwcbDiyzRZpLd(M=Z64cup#CW!NK?&_ai*HYA_&iKHyw!PER>9W)2 z6so$?pXwyF4nnHnxEiEm;xf0n5_Hgf>%c@i^kebD$I<%J@QXx;vC)dyPg61tHC3vt zAzO2|hJMq5-#?_64Gla1IDVnk6xmh}IGq@2m=t!_P0w9`{EF zP=fLSN4HG8psY!@>UK1i0GT8}YcIDTSjcFz!Z|!I@5**f4_=VOP(`@CXqSt zoLZejNPz=OOeTNY+&V2uo2woXV*9avM(^9&qir|@1jMAARza=%>;L@S6`nn7$t1xz ztYFQSoE_tU)|Y@_aB>YZ7Udvn{4JPB!oYY`rt3Cmxk~GA>P=Pj!O$Jdnvf)7aQCT7 zMKgnb(C)_W7-PWhV&C@PIWHnNNfXqCiMl0Z2>?mPv;mSyfU%cX(9P59GqMLVCkvzg za%V?PLXbJgTTF^=_mrNyZo+Gc?5B!5J;PP=_g}r`R@sNsfGvgKgTqf!-z;r>PEe_K zy`U|nW=0W-1w@X=97!BRJROIPDt2`1>$fxtRE?xYilb!|XXq4Ocr=&qJcg9%9Ymu; z!3dz#Q0L0*)2N!f6<)uCgVyT6Uv{mKBmfA6YWYsYPeOPzcMo2+(qEo`GI5?7`!#Gj_5hS!5REL6o zCFC@Ntj*b>_(TS5H;fU z*e{U&NoLdYBaI{T>bPehD>PrIAO^q;=}XcF0ec5YFyylQ55Z449zZxX1cEJ`4mcXo zlPEYmQ=*jw2$Ut_FQs-77S9DHFAry*aBiu{m#?ji?v7{xgP)?5MHh`fFXX zk|A)*26giqJ~uQ7oF0zW{?-sn>e&ul2~OCy3B+24F@b?$d>kNb4g%h79G>bW z_PPo8=D&^znLXW^EUgQel;=?jlwxA;FxEjap~3Z0$ITKSsAnJRDqbA7X8&vU3PTV- z#loXgSs`zYG$XKZn{Fm%6hqBhwzo+-urP_@8O7Ntj(VP^Xw z4$$;Dd$BY3m5C|zPX*BUe$s_i#QU31`m!S>TGMI`J3`5C)VfO%1 zMtLxz`{+^u( z`NR;fuL#r%_aAN*8fMj1fk53zjvy8N{Nj%ceGB@!{JBssfkD4T?Vk(q1uY$6?7|RmJ8_ZDtDk&!pDNVERSJc@OiZ-xsNmBC zp)9`25e1B!xduaqh28@|isyf~>qq0Z17`d77&0dq!5k#cJsl+Q{(f8ML$BT2ChXb& zM%O~C8$(G*cn8pm0Mi7ZQp)f>{!~tjYIA~GV&AmotOA0zyAOUGems;o|E90jN3QD~ ziSV-0HSQj3-!@#~t9puF9JZEk{JhWz=Lb*&gHvAK)mA^A?+FDt>OurU;a#zI!F)EC zTb_dGpX#zax~IJ)n2iWH=v~PU{H;-PDs{h5e1q&}DNjY;OwT0wMsRt-+?cUE`*gqN zbgRKfTayC;0|O;>A!G?+>}9ftv{+k(>9UXyjv97yv=y-a&D+9Y_IRby45QY^DVnl$ zZ0IOl^Rm=TrwEPw^bG4!Qn>JUixUV0Iaqgav6*`jufFmVT4pR1{99XkmM>kLOG#qX;y6a#%)Hjb z9PQ;*p%!|Wz?(UpG7M49B7zHb31_P%u^2d*iL?|Tn<^R_R7KT-fS~yKkU(o1=6+7D zE`q2=OgWa=@-ypnR@uEZ;NtJCEdV4|6M_V3q{88B8w)RH=?e6CPp52neJ>D@NkGkkPc`7W z%I4l>HF)Nt?gOH7UIM3-R@{BIJbu0j<4jJ2;Ceo!MOz=uGB)eLiLqVWfL@r#Ago&& zLE!HB!TcU(**yFFU(>&a$*Q;n6S2LJ6t?VZh_ z-y`&KkZk(UfFEMn>E=+iW}!T10uo3)tJFUPDm;s znN76=l|p)EIxi+ntPflr+CIOaovHn#cfm3%rjCJquW!E^;XvQVx8Au{D|aKRpjolf z12DY(%j$2t$?P39yC`WYgwg2h*xjAJpqp?q5XdP9C#PCMqJW^XdooGg0B9_tBbbRu zV(29iUI*Y?AEW>51)ZHRUYqK>%|``6!9hJ>&DKO_>n=kO&|1zI44G?Zi8Md{n#agv z*n4qw#N!-Cby*tiu23|@wd~bjHlb+nK_uBl!cJ*Yo-Ju|tZ_JH+H4+?MN$l>lB3DF&S#U55C zlv8vKVDmmX?0(Q@0u4QY<~k@z)N$MQ)AOB&bd?EP4rB%81EYq-u50>0+7Qbf1SN3IYb&b`W|guPv%bAOajE zxYcGzl$!NlI%Yqdsz?#O*qQ~XQ%j1M3yt=sNyf=NCQyPdmRc3mXZ}dSl6oX@72HL%!9KI?6Cqn_V&) zKoWZ`d!J3O*nhgO*UIH4;=x{Q;C^aWA<8;BCXt=Zh2B2!4&p_a|#M5@Y zJr3RkH@P-GKd4$yO%Ib~pt%wKEGYts0)wf**5Mx3P7=z8o5czBejd9Q$7hc@*!A`G zlc^nheM5C3`e7LbBG7kN5?(vT(4u7oq0b5HW+u6@4rQE>iVC*KW~+033^F*?=_Q|y zD!~a`G!=}GfH_`aK6$6ytk>joI3AB)^w3{VdA2up{LUBQo=L{Lx_rswe|69w%WD0 z5|$hbr^UH}$TEBef6yJk5QMz#82Uu+pk^x3pip`OR|io zcX0SQg4hV4-9^Gf={1opiO{lgTGUTt@M>%A&(8j{i^eBoVZANzXnJcGtq>usH3z7y zTwd~!EWv$V*AyoJw*(7rXUrg-9T|+tc_Pm*4}1Dx=srpS5Ffvf%IXCHH~=6pH73R9 zOGaoqJ4qMvwZ$+G07`9p!V6!I7x8Lme(JYBacN~UjU)%Lh2dzVwKX|oy2oKrSH_^E zZKNBxZECO_Z!^jjcPo>x|B_IQOATU-K+Sq&xKsB4^?ukDGbyDiFkYV}ZZY{s&o(vHDc zZ0(zPwDG`#?G*sii+3Bxv;W?t3tXaX47nGzWHzYTvYT#7!<+y6jVoD6#UW+p7%bEXCq~F;7mxl<8@O$ccdt z9i+@n0Z8#W%Lu4chn}?i5jOs3+$`}u+N#c{%a=LaU&!yV2kl32!>M3aGQGnDa$N~H zw0#n&#sblVKv?W)NJ3>b6XSH&yd|#<6okptG`5tFlOWJ_L^7!Cg#r)+0%@xj+)5S; zWnjYX9I$lRy?)*P=^O-mO6{a2znAW({N)D_MKlWOV}4^R^zHiX6UbT^z*-)N$IDn< zt7}>JJ?c;`eA&zVf{=QL6iW@{yp)PA+K2}LF~%Ql$?K+t-Fyv!jRj#NF1s(wgD5z7 zt2X_?pAr`S+q$$6W?U+tWe3We9!1)idI7|tWztyTf)2^HH3_eIlvei1g5gZy+mtm7 z2-d)X%7zsvkoy8?gq=?EeKsKqcC2E{IA2*!t?#wx0ZWIOBep5vmM{_-9!=!qVCKS**>q;=B5eB|B!JU?>|rB| zly5fF066it@6x}HL_HpO)U%MUqClfRj@NgN!V9Fj4D;~cgf?2|4i+Pn(gZOK>KzpT z{u?%`QE|BfpFU-o6%NT|I5bkAe4fw46MpAxz8_=VTOT-UbPP#CVurwP1XpZwp0o8( z@Zg-xb|Hw0?(#FRMCokhfN1E`r!W)}D0!b5!6)-F9`&a`I?;W?)Svo+b9mvya6nC0 zTLxD5;xI9r9fW13220v>ms+DW3@w@OF~8-Dz?FCZo@Ov`tuGt@Xq#fIE+l;kk0DAU zWHLf5^{h#uCsjKKBxBm9osS?8vAK=Ullvl0N~I>U96{M-hp_3^c*3z`0d>GZG@0RG z65ifj@QaU%$kEnJ`7Ejj4x;+R35SM|U|hpBo86}F->$GIm@#?TXj@W z{!$002V&IdjZRuEcc|ES&=F`5q+7^w1+E$J{70iykF`7=sR19sI^k^sXSlrtEe522 z{92Q|8DT9{7_kzx+t0Ykpq|Xn57N{w%?KH?1|i@$WHW5S6nYf=eSyVK_EI@Lsf_p* zf2k~Zb4A`o&f-zdn2+WMYEbhU`@@~^f%EUz>NvuKWwg}*(fPAlEyva!!IES+BE2;K zqh@z`lPEWRQga(O&>GSvbokJJ)80Ct4_V6A>$g*vApSgP?NxT21Cq9Ynu!T*eav`& z$BK!s%v=>NYvd#wI&w*OV>YRULr|IukEVx3^=*I}v+g!AhUC$K+)93KU{n0g$6Wp` zGC<%!;2m(7;dzN1javgmv!jnGN$2MUAm4E%)7FSanhQ*i!2?(*1-!~REoK~MSR8}r_46p@!GZYB45fr^@ zlhgF+I5?Q(R4aaP-_8G5Y!49uY-=NkwiO(?HO}-#Uxplhga8nvfcf-nmCtkB=h04D zJwyOYh0$k2o9X@{omhBgzT_R zfk*gZ&*xNb4=uxP=Dn;*xHz48AI`6^`=?rfU62}nnH~cUx3gsaXf0CoZ0zPvO_s@q z93d^ADg+u5O@^hW)BYR4Oa*78Bn3;r;;1 zE**Ids$5IaJ{4hUZEY>oX7^k#rKHu-I$sD`bW;=EFR+y5>VFY^X}fF0&(`D{5DJVg zON~l`*cHWxC$kovZ_iyv%Gd_9Xta+mVRTeJIJ~an=OEW-kw4Mku8sB{c@(K#&1Sw+I#>AYG%UgoF~3 zN-EvWo_&AM>v=u@z&+=lbMLvI_vam#aVZ7Yt4^6KJ6oKm^*d$r(f!ANM!Z&ogJdA0 z%g1Z?TiOe$#XiFD?*omScTc?1EHD5A&y<+-j>W(pbp851y4q&?_8kFn@xoW~2j33- z!?FLg(t~%475d)a(1gTu!_D9-y`mR)p2V6_!{DA+Tn0ZWm3 zcbgaFgm7igT-bm5+1Ac18!_hcvy}nUq%%|b4VH$a2V^pM`FtgrXL+~1wtTTPBVvGr?UhN41fzPXU{Id z=^TGL&|3(lOLCxtfT0d!Mcq${LGu$AtqRR`S=tA7KSvu^j?C*nt&J)ZHlq?B_alO} zm%b<${{jPmK+zkLuJ=X`$dS}k5TIi(h}O*05}|pm$G-m=Km^EVNbJCR;;VUxkNylM z%ZxC@N`7#BH=XhIlhRRn%IpdcvG0nk`2h{6&+5|~<);uh^f&2{j$2R%8YM23T#1~J z-)`Ueqe%uLc*&FE^u*77ECFn_lPZn<_1P$qJpSltgjM^0*IIwLqlC!ve^KnP-_MZl z9~zH)_#s|^d{F9xBC69#*`PAyX~?0 zAjJ;_`2~)UN@eP9>|4U@XV|OmY!0{07bXH!99J?kQDXTl0<)52z`7;rHx0%B>Ila% zq=_Rm^?pw0$3;N#xF`d?I0a7yXN7mWofrEryQ;=6vc|iWT(wFTUfs7IIQt#@kiStL zU(N)?kiURSrJ(pID2S-+4R;m`S}CW!9>j*#0b!$Y47~VLWOgH??joaa8`41(;kBb> z)6wZ=uhv@b@3-VHP2%K2rhKy1keiR3X9*jd?~ z7cAFLRF-N4Ug{T8Z_{#7ElA7DC%72B5%%d=maN1AaJx9FZHrFZ0Ha*!kX<)um5&&>T08uowjMhxR%50%q~aB^;!ea z05l3<5LZ4APKVAhg9yF6&j;w@=Y^hgZ!VuHkl_Y6aPrs}7B(FKP3x<25ug?IfXamS z*cb)QOTJ)pU%TBgnJBzv(Cm%!fr#r#;NXmK0uVngliqs^6oEGCnn$sVM|ch3Jo-yF z7Q9B$s9q}5r2J_3o(NF~&?;U?EdZD<axVc8nC~G}mgNp%8*(Y&86XtzH40J%qU+0bJ^OxPk_9SmfFKw76g)G+v?^+Y z1aZs|?O#~l3{b-KLDLHvaJm4{m_trQbG;L3dt8Umcs4usS?5WS0hpF+iu9JM66+)!MW(xm~v}Z&D7(v0qyly&l z)CIm&`y4(0*XNNG4X8l!0qzpwjj-=W)WJRB!ixjX<(LS*ZVH*@OGTMAo^>vih>03c zb<%G3DCw`WkOt-Sw?bKta88sftt%bSDg{P#fqRj>`MEcH_ZmbX%m&Qkr}4*E*xJ*S zfTAkj05>ERKKDgEk%RHrhlR=&z~{Pt5a2}KBe|BevSh-sj)UtBP(hrl^ZKu|ErEb_ z40mAP-emJx>pj`5lF?k1{j*V8dFOQ;HPC_=JVe*y?GySuVWv7>Mns!=TyWp~0v!Se zfumfBuoMGKCSCKw?4yaCH!^lzz<4Q1IEg5{yAZ-6U+|LyV$1+G%~r{@J$czO=j`@9 zdzO8p$?GH~V125Yve0c$VRUeygX*B59oIg`b6pL^?Fo-p2ty!H4D$ZY#mkHr96$sH zkSmr5qr<|z*mYE6t_AP@aT1Jwmgbo>7-$^!qilX9-o*17C{*lm)HRjN(Ajp%h~}R5 zqag1(@6q^xsq%n>QOyH+EmtB~F_ubq-q)@Q-T=My9ybKYUDm3QnvBW=x|3x3z;VnV zGMV{vUqq&B&{)9!TgOn)wb;B{oV2D8Ma}ihn?rt~)=6SCruO^?E217iR=K7Dq@^J9ZomjV^s7K>SGkGHRJNF0N79a?ezz^IA6A zYtDYk3Tggy&jL!&pn!bUkDR(2tSIFiHM>c%kP7{dbiB4kMHil35TQDZ>HsoU;gl zv9%w({2T_v%D`N1K?kCU!uvV*>npMzO1wI{roY=SOgYMJNx!=37rtEN)*Q0W2W;oP zWrj=?_ab_VbSKO(@~KE-GaNIu$(epBKtco_z`i4fqb?K6j6Q0vKeVjk;j^?-90-IR zZc)=79aJhe)=lcq+)H$)tH8zq@AnroaRqiGF7Lx%Y3zkg4M1b7vYxJ}93Kn6J9L z{6w>vu;h~fm*-<5f4JcEhSo3~JNI5G-k1b72Bb58hU>9owVzu~Tw}UdlkHp%it2rR zq-#`PX928#V*yuBsTPYP{9C%Ap#HMm zV#fE@n#m5Xlb38$dmb|v__V+ zY}o>ha5&!2)M?9K?X{dOqae{Jc`3Mba9n&w=0@}1p6}FaCv&2}*b=lQ-GHP@;|shD zXG6cN(aPW8T(&gzr1^csav~t66NyFH<_>Z1P zQrw3t8#D9^4smWVe5DUq*xxzsk7ypAQUab*&+7Z4QVx~9+DL9FMyb}2a!H|2y$ z#uQ2{k7FY8N?Xvhzs);2iF;^cXH7EA91B`$sN1$bD6TmjPelX8@se=)iQ14@+MLrr z7pvK+bV5wpKrG_YLz!Qg9F7aefXVKtrZ&<=)MFI{k4kKZAj;Un( z$VQ_wJ&ghkg~EFBLb1?c7@t~Pbwp=)q%I=}&-l%n*0hvPbt;4fQattN_1mwC4F)N5 z4HwQ&&0}Jqrrh9kFVpG$i`-kM5w<$eWJdVM5Y4c$<5sntlYj4}#G^XEU=ERV0n{fs zQRnBTvP}9LItUl&14!@b>a46Fh+H@}zb}4tP z2B-a8c#ID=i~wPz?`h!2_C^|f&bxd}A|e3M_^*~EJrsi%uc$LsnGAn)IwK+_33&j} z>ZpDHF+z`KdAeR?lCCVyq4Z*nkV8=a^zooE6SLG#gr@Ux4#54X5(Rk`Gh=z*%9Gs%o+ zhMlM8nsF%L900t?2?t2cxyOrZ;bB*qQE{|TajW0YiC}ulW`E1m-6|Lzf|tO6kCQMQ zNqgrP*-V`e7DZc9e*-YbymX~Pegil6(VqP#*iUY0g*fwVOGa1nB#*sLv=Ay z;hiWX&@b7lUR5%8Vq(6pl=O7`Xd^)RC-U000wI(|D5(1ht58GgOA>%J0|7P7UgPx!JV!n+9$)^|q>mFFPSqSe&qaMIXbu+)ZALleJ ztl5X$1Ph`$(Y)1(hlv5@nYsZNuXGgL&f+SSZmW(Of7;#UmaO4+K%=vkg z9DsF4pZEk!E`&Pk(xOXQf1NCw&6u;1Mmcui`{6MX=bKfzEs{AE|{0fdN#^Wx(~teKQV&|R$07tPqug*v!y zMd+XyWAB$SegaHwgbqm~kC=Mm5^|6EL6r`7QD|a0np606$#P!yl)V25hXO+* zEZ4gC=3cB^Q2l%mV5iPXrv*|LLz^M7apW|FmWm>iw%}wV6b1&nl;WIG`WE!}j#OW~ zGXc9I9`6QsTmGXD`zM`%Q;sCU=^{zWpg+|!;Rm8Q;S0YnGb1z9oXzf@5uZl23XL|c zonE!S76Il@qsj$9BA81AI?=bL^buu3f?@f(2$#}WoDmbmPUzkI$`y%U>JbBqAdR!j zDW_GM=l9Cscqmnh_L3#Pc4NjhF}H!zl_x`TG4Aou!3>=e80T*F z_fc}|i}&P0YUZ5ttuFlR&xn+{C$`yA1y^RCBreC>lJ#A7bE_VMnY)R4m?V+dp(8&`Ah7dsL=g~8p&sMqt_QN)#Tu=mEg|#Wq7EdaYfPFav+WJ6 zDLq?A-e}78TCfy3HK) z-$~T8yHX4>0`L_>U%#tzM^-DBqr0Y4;?0oZbdE3-Oc%8k#bg)i-~JGt5-E_HMf7z%t#PtfWUozJp1ZyQhE|qRfKbBSVc~& z)NiL*zu$W0!8sUC0ZGrLgrBxF0xDh8#dT4*l84?W=EAOtOO#___$6kuSI}{!>-=xF z>h;qtlaT$B8FgV$41-iGMhBMeovzdMAf=p%*);(!MS!rs!{tfl6MW*Hxnw+3|I4AQ zi9_^HBK1aRam!ywxj}lsmec!pzvfb;$7Em-`5T1Sw)0-$S6^J;63}dR{#*z!&_Ujh zg!jjo0vryy18jHJ+}I)wVxbHL2%Y;x*C_JDMzuQU^$1Qlfw2HSyiI3k)NbwUsIdhE z)4I?dYNwy4GeE@L*AneOc_g#rM&7zJ@m`-~e*^}JzQb|A;Xb{c{D{gT zD~&z0j&2`PpCxkrH2Pn4pp_&0)<23LwrcE{lwO?A7enQoKP`feoi|((-I|}yqD3L> zL@P;@0Ks1MJgT;c`-W{^%_l6cE(f+14p4UIlaeT8$u$X?)mZ}!cqmX6q<6=QoYG_#Btd&O&`utVVoB4r^Ibv0)k zvpb!#A!!WtvR+@r;UIqF=+ORLhG^gpNfc!-uyq#_#XJz=CnG=m0q>)`UZS~7VIh$Y z#tJ>XXBxghuAc+M;z7A@UQcvoWA3t@!j)dMt&F8LE$j}bMML$djInfOQ2tUNk766S zIu3aodjFN5MLNUwy5@h1zeIPqC`@EH4kk(-dwnqx5V0rxvLW9P+tz!Q(M&@l4nr|q zy!%wF9JA~d?A&z|b`!tuM*F+AQSpcCmTcZm^!P^_JOTo?1bce5!sh^4>HbJeX_9}Tpr=XE1~e7h30am zO%ct8+WC(=Y#lN%sjpCWsT)yb%dCfQ%Zok1HjOQ#OU(w}3Zvykf7JlYXcA0bIfC@_ z(nD$r>hAu&a^?!_@7--b{cG8XvR-45C5x7@>e&;_w`)vHq`Re04u@v68>9jB_OFTevK54?dV;=Wij z0QnqV$u+KxET#>zH#dtk-q}nZkh$WBJva#u#whB8fgRs2e`-RHZduRAA*oN`=SOhA z#L=j00b7wgSDJCmB3e2UF%U-kXW(zkDdrC@&fJr$SY4ESwoide7{%aAlS*bjFV3=KzL9 zw@=Y@u0mCz?U|wQ(U`!fsi@XlxWt2aQ95v(6qLl(IblTV)U|uBAE#@mSbd>p6-=sNqt3qHEJ>nKK z*PC6nw_mfBk0E0op+3j2iGM^NFzNb%^^llbR;+h5Hya=jjJO1_S`@u-B{cjf7Jpyo zCX|TCY#jRWaO>NNusU11P60WM%*?*Rg#ug^IH!UF!<=dtOTC%-**<}!;tQ5292NkB zvZks$fZ1yg2!PTJNDGB78`C`O#J{}H%P;YKQ+slLOOnW&ACsqeuUo=zG1|~V#K zd__c*ozGbnSd7B%2};a{uls2ai27zL8}E44cux?o?^n}8fIvMu=DDoqosAh>QoJdP7A;hOnNhV8@!a=&LLx+Bgn@Ab6n$X(c)WSwjJ>9-J7Yz&p%Ni7}rm{YKN{xkI2_3^*SH#ld;6@iXB8 zrI5E)d)enT%R7out_yuQ8^JLIzyfmmp-*ODc$e#RI*LVJwF{FYsCSz*yP zVS*>8OMt6EUzI}bPokA1X>W_M0|ys5e%UzV4`(~yG_Xk~f8o}V$G$4>u!NwxDlX~K z=bcl6Fr#{($!AXSgCP?_8{@=~BbpZ?97$wkUPGkvjvvgN4IGk;YJA4y@2SS;bd!jR znt%7R5UaqL-LevV-x^*FBCybZ1*Y;1HF#$=K8i!YetO2klPfT2=)givVD7P9v*wDn z*q0QEX{^ysNzG)Vh)PI1HBOfS?rf9&Hlu7Jikfu-N`6?_L#Xqnm{Xg>rT{&5_!s<_ zXWwj9TlTyJ0JMr)x)DYkr61*W1;aOAA2hjV>F5-4fv_@gXuqTQ@RcUHz3i-Eb#CjA za_P^MLNl{9zla3Qd%b`d;EkN*-?3KU%K{Xf+F{F?Q6HH)>>3WN(rC$FV7%hMF-9}M zw}vNn_K8C>34P>RW%rjhwVOvgSL`d($!T%YP$W>>sjpnV+F(yTWV*Yq`f+Y6vaEJt zHhR9dUl)>|BIk`=&`?GF7dCG10R5sTe1D4GDI_e zI2s7_L|MvvCRz5ktc3drv&i+N94>URA5k6 zqcIpZ9N{P)l~2?zy11;`KwG!CS%fsOxT;_iuoVdE1&BXHA|j(u)^gwI+;;73W#6JA z3bf25S?aViB(CrDuDuC{il)kIEjRr1Q^NK5PYffU?l+%ZroQDqb4JY6}@f|EZnG?s`X!47qz)MmPUV@YcDR zRUg)K3}VKRNf^n6ELxGzLhIjSinhB3m*~Nem6kTW z-A?sjtCo%@4s@1ggSPbU8e0E@2|YVZZy*nSr#hYC1W9KFTpWguCW&+xaCp|R8`h9g zIFJH{!tW2H|1&f1+#a7f?SB~qA(jKQ5OWYxOgY@J9{H&`c-QChysG26{>(r7DWc88 z9uTPr?#`XeaO352|G*vbACI$(9f+Wt-i>P=?|0y0;8wt6Bom}9iI{RHV(62%V98Ju zBmC`K!q7m^RdC;Hm!rcb0sUm7iy+8sM?H-@w%6~kj$Zz0XUmH78(p!3;d{M?=g}-* z4I2)wVB-z+ipIHAoacCLBSQ;@>B8^wf(Kez4w{y#QlmMRSlRkeI_w1IyetSt%lf95 zl*?I@LcM($n-?$&gm)0r_A*VAzP`7fYHu5f!C!OieZ8myg%979vClLK6&{!x)Z+Hy zqbu>*FZ0&9A~@X;?8wJUC;nCYo0RQqhla*$V%97<8Pabg9hZ(LHfjU6+g5mTu5IBZ zJ!EkX4>`phdy28h@Pn1Vc2+bl2KQHe8HPLiP7=H!@-S^wmwXMZAE?D%Y;$EAvDY+{ zU_{<=@m`vs| zUb`5lX8;8o3{^yE0Z;S&5H>VqM%o))MbQfqi#-jp_Kl&219Uh5C_)Sl*9Veqtm;`z zDfClO1J88fwweZTHDUcKfSiL+hp9EgTGH*oqo6@ z8@8bf1XES`qHu_Op@bQ~H`u* z{*Wc)3!A?S`O#Q?xh|x)NE_ZwX@aQ)J(_W%+CSjw>v#Kk6_&rT#ylOJdwbL*=sD%v zmy;W^GDz98TIAQmIs#o#@XIk;_W;dvYSV=$9=&hx$R!pDKai7aTG3at}j{dxfV+wKXczDv2nb42veG_ zUswx2Fu!>IZ%d(K5&jr1n8xg>0+0yu-K!r6-G7HCf9A9#^ii|G*>;|LktgKl>h8vW_J?llTZ0er-3$V`pL!=>LtID8r9dEsPWB(W6BEoqwfYU3PsT-JE~68;OLsB3c3^BIa8 zOP>qR1-s`UM#*GRBLftaOV>OZq}KX$p(&((nFdtH!rdjG;X?^N|6WF>x_>QuC&dMc z*!m%nHiQ3%A?Qe6K0)rI_Q7pnFeE90YBBySoeJcQff1ua$Gd`J?a48a`+}Bd$ z`M{>`aAp($h62;$j(jBv_=5Lu>o7r?vVX4()Zbh5x7(9F`^QtLP491u7Z=AANp~w| zpbs*EzkdX|n5K2+xsitqPibtR=#le zR$W)u+XHoq>W*#)6nvlc)_@L5@v*^bn)&qfEn(m*3GK9KrQN9;! zc$U$P<8vv%#Uhu|fp=2;9BA{4t9|d+kK?4WZJha2f(GpmB>rxl@F--X{!9H5Pp#e(%e^HF{)*J7nL@2>0J#(GApCC zoHFlR%-dsQ8{x!%I(tLPy(*h(nnj7u?Qgy^2D%Lh`RMUn(J$fIu#f znTzd1l@`^0Ung85jNIrn`*iJXV|Vsr1{S#~-Zk2=ZsEfu!HJqQte_UJZ@ge7uB^OB z87x1Ce0DM&-hI&QiO0oPfbh%>qP!S9X(DV+ZC&2wDAf>#meZwL>VGJyxYFC7tiJ-t zvuD8J);lQL%aNU?)5#2+mn)b&jHv6C8ur(4dyM9Vm9qnYf%omr^0>0Av6ctmqG*vv zv00T9uBkM32g%<tZnpSLzaRUR;`TdGw(a84k zIoa$4KSmHxQM8~SwxI2E!pEm~gD9;Uc-#X?A0DGcrSOvtN~}%bpVm$ZxtnD00D8*y z$%3YN=IqB9M?miE;^|V&T4PX8vrsCt_mTF*`QjX+2)ziD zffuTcqY6a-U8XHqX`98J$qLsYe`B!5IxB*g@}@#(JNXvYhU`1uqDKZ6b!X0Jzc-5} zG(I!r)j}bBS4wIAqZ*3fE1=NHvX<@DQ4>403BQx+n!xw7mxTlW1?XT^36RIg%Bw^$ zD0=L2ZlG}LlZDR3-qr!6uD3#Vh0Bwy;PZ4QF(^uh8ItFqKIgbPcccHq`Xq{ znRtfJnxDwBjE2qj&jecQ0D1@&xZY`i7W_V_gx!0$so+^dUNk68hr*@)U zQAsM+A4>H9)?YV|qCfwHOi1s3r_$&rOuXgyJN&5Syfyb)?HT*5+Voz!+fSV?G_w}k zHT5-^7e5eZJ4%U3@QvY-Ep1a)jB_`AbSL-~O2{=JJN|`Wa z>p=Yp!|YV<@v2yH8W3ba6=1oh#zU#JOZL=xdpN-`^pQW-JqjkKhUg?=!FXB1Ov`-pVbA6G)YS<>Ft%BWDw0)%Y zrU^wx0M{rRpjwu+;1Y8rb3 zx3281^ZbN}T^0RdT6ei=^6C92o|AYjMHv+NnH7yUl zk;Xs5$4S>id-e^XydEjy-K)I=ejx@jqa@*Ua?V^wW7z3Fyi1O?`Pi^*?I_vDO0ZIR z=0r_44;KM@MIHUUI11ARB9~~Myd16laq)Zgelh{6c$)^w)yUGiXHhrUx=HTY84-di z8L_lKe3Z>LK3q_LammO7a=FX8_v86T`@}gnR!=KSNIEmSys}Uw5>Oo(sWSK^$N&p} zOc4&Od$|0o$(8yMC)%HF2W*_GmD%#DX$EfAusJJ0L3j|pmwQPPl~kTKdp<)6wp&WF zZ=_@q$f6IhH>7bj@XgtDq2iXaZELWg$|Zib_~)J)kHzxp+k-B`OyN#BrGs{J0pYrK zzp4^wFN%X1h+?ayG>XD+Jw7x2r!#sMF}pe3n5FjQY9v(7KaGntUUvR#B>es(&tQsB z_==)a zx<8TqW0e{g0!sc>yJef9ouM9m8PRsLGrL?($jr+KKK-FjFmX_lm}=#d_i@&xJ2$*U z4_DCEs+Al)X+}wpm?=A&2eN0{qcV(|k7w*vq&hce98nC)G48)cf9`nY z?9Xz0F$|_8`amZtnjiPL2Nb$*;vM($g-P?ZPd=VT0|WDm+5w}|r5d@Y&$cWX6IF{6 z;q9sO!K2fSX-5Vq2nP3+PoR65e-)Okd|26rxtUYA@Kc*D(}hDE0{ju~`|sd-V*q+{ zD>(cw7cH0upGP*bjvRnQbqF#*u1-Fo6j%HHmDQk-2@tV1@m`p>E#MW8UU&M2#^}>5 zoZioY0i?sm@?4D8Rcq9Z$0|nVpG@H+yHETR>g&gkB1fjvLad|Rg?MhJqEwT-Iw#elAlRm2} zXHFY`s~vT8O8#31C9QaH>jc+o%XMXy{^sMM^eXZg3=R8B~DJ2Dm{$|KW+)t?PqP^reTPJfyABj4e23}`dGCO z6N_BmFgW4UXRnF_rrn|Qn2a>m!1eH>&hUMHV<}>IV84bnCI1+_a zcEdyd9LN&9glo@ya=3M5E=#_s;&%X%EdfDGE#!q`HnmCufnVuCi7~bD7wzr#=FLHA z>u=u~)ds{xaF)eHa85tH>ZjUaFT`EvtG_CGt1J#bwrq2$Xs%jXY5`am$yur{eD+)4 zb(|Sak#Za{GreYy|BZ&HK;$DhQCe-7r$;S8OW)V6nM0nOY-Ej6H6&n(SMlNO;_@b94HvI=+E%a=W&LoV|YmIQebcz3ZncMNTKc=UD zJ|w5Vk1moMU6cqxe{X!M_JS>fnb-Bxpm|ge>fkC|=y@s~@~6pq@qEulj@(OTMWf`e zpK%)$wt&-CHSP}K@I_zIN^CuIlHfBVe#mTp@PYd2dv%*4w*-xFcb#}$Tb+`sN5p%7 z!q2T7A6`ErkMGTb#XbaFzx=Pg_Ld(#8#Q6|fd`*aYS7o2gYXdD{-&^Yr=&;Gk<`LY z{wDqA#lxriO2LiS<1__1^A24B#>ANQW&1a-P9 z!5|QW{P{nhv&jUR<)VbJGpeDOgU*)(ejF7+Hr6~kH}9_X{2spakte|8hcyrNX;6Cb zrHH^d>&4bDe72)coks3GPMERHj)>3g$%0h)r5l71%alR8KL=;R_E*{-QZ3+G&zVzq z_LP28&6;$J6(=p$Xljg1WE4#jKnhdg&wycw30Xo^0^mRl2GEA^RBlJE`Zov}p=N1> z4`*M_J>sKOxm{?c1e~n`mD0+mncK+;vlrq8|E1(S&YIEv?rHR7)H4)f{9)p+qRa!M z_6wOs`4)#vEyuLu(=TLhBTc(tP_TH<5GG>XLagom&bK;w?xXhsC4vcT2mLrnlqrcg z0)KRq!6L_j%$IffZO6FQ7;}STjhZ0qa}momv4D&=2f zwm<%Eil$1Oe36=!atGy;FGKCuhGQGTuEzjAoJ_a5+wF`VKCM6K9OY5wM&k1%v01DR z8`N|iOhCFtuLE-QOzdOVGjp{XAdNh$sS)=jU|{jmHqB}-xUi#9Ys@p+k(c%P@ZTpD zF5h$1**1=7mTDW-j&{pdDWTB&C09p&ja4|3+2;B1U6TA=G(IrrNCLAM?@8&9Z)`*N z7yelOr%XMK%QMI07V}-BFJjY1AH+W*eejpiGi= zr4tJ{-}1N{yOUraAg0r02|#npCT8~Y?9XQXciZZBZ2aV=KhHfT%AbBu01$A zc?h^Sf}Fc7@aZetl6_8(+>NiZT0QZtj|JxI9Zp`xD#WTSi@(3bVBF5XCUH(`7NyT^ zRD{pr-dh&j$vau3`N=_Wii}v(+-iOOr)`eD^df;-hgklCh>HTtCm*T)&C)-VzH|~` z6Tb9(=D@_h`6S;%`ARrV*7?7yHPc6%tyHO;Yu}ht&$igF`JtYkd?)uftRNsdeS$C< z?Kopnc6+kv<{PCSlckA4eX?Ko-^j``qk(acV7_YY{LRf4w=EpN$*&vENq!$Y%7jDQ zuvmF+ojlscK9q3|(xv4vI@3FJMt_>J*)kKl#Wj&qG$97GA=p!Xs8E+s*Y7y7b7_n2tfZ&=SurHCA(=aKP2ffEJbdK)KAtbm{APMO_2wcE&C4!5C{!1v z>Ks@0o{Cu?zX67AoLCTUdXC@6>crx3HckoBCX#gzZ0+rRDr)oKtNv;a(Iayd9!+1$ z1r{>cnfeR9p80OSxZkg?da~|)JD`*2cXe&Ded>H;urgFOo}M!xSL$t5_C)98KB#4m zElk&&BE#f&1I%~{;oK;5eE9SZbR~z>;W@vaJ5{54I!>c`!xT=WHr)&6uWyQG<}y)! zpQ#LH#PAqF}mkYoX>OUQxuNlPx?lX2Iv_7DArHSFf;qKPMvFeI)^Tphvyd|jCO z#=9@5_^<9KOqzcB2_EP5KyGVKKAu7TZ0k#BPv=_zuk_NTcOM9~EZxQIsZRPAom(o4;2FW@q_%$Vy0&&HoE49;jY z9n7|0eWrK=3NBaTH3~~hl|FchE>9Y_>0qw(*MCLm4G=J&oIVF%D&X(KE6JXCoG)6; zM{i_X5oX;z(ea`w57g}~ZWmvk6-YRwzhJ|VbJV3@M$3p1;X*AxMh^XC>V6Tv@}j0` zC5VDCibIZ>>i4@GpA&3UGCTE}U4hxBG|_Cxrn~vYhpb;0I>0!{gI>RQyv=MvD&-`2~VDE5B9tNHES=mjmPTlh{* ze<+o{C>^IWNa7Xkl9@Oyv+j$@*z3wNXGPLtoxRDIsQ%9I!2PGH)} z*T%&%%GGAk=k|?(Qc!oilRQzPZW&_Bvn265Li0`+P2fTMm8RcY&Ku8wl0dKys{XpE zjb?B@%hJuTgCDX}M==uzm98|jP>xh3gyuZYgvK>!O(w!KUc47MuFDbs&1o#aRQ+SE z$%C5Px`RKF>8WS&&3VB!LKnE7K_J{H7*K8zIm8Mk9v-MyG zkUXu9fNc)wA;TkdQ`mXp5?gle8F`BOTQq2g&M#{*&3~Dh)7hBxBGDg>b^TQWZ*Olu zS>213kDc&m1U@rOOWT*H{IbAO4E3#v93UMaC#phGyZCRcQ$e*jk#8WdXKz%dp=GoG zguy8)4-S74l$C9$Dw~!(qjI|1xidO_u;~vOg~J^f2?h$=G%ZsH4vyc%MVf9{jq&;l z-;xr^-L9lPqlKB9D`cdeRoW*C*sFH6Ei#&#m)}-Xc#>@c?eW{}{uMX5Q|gg2ks8Ei z3WY#k_SVL!pEJ#ko3}hV{IwR~8Gcd)VE7#cCtyH`xYK1Hqp6__iu$~3#h)Cf`G)SW zw~zI7Dm<8IOaq_=N!HB9Wt(N;x=*)y-$LKRl#<*(&~P4+{67mrSyEGVkP9`Z9iHiD z>tf+}2qcCtFK%JG)Z^(=)4rjJ@YH@zrq6h#g*-F^Ch33&;2q*lK?8i_`)n}ZLOc6P z=7vvohz}{^eFv6rYd@wHaB+H-MlR}7c6qSf)$L2%&x}-cff2-f8fBq3{{h80Dp2H$ z$(m{IU=7_$9$j=0p;2(4OM6_Wc08|E9NoP0R`$YqzS?xT-^>Wopeq`~NDu+>inbs_ zHZ>ahz>b@$&gmEehBuo`cyS~_`Er<;d^u7BRK+u4vNz4 z*fo3T`qzxF%4X^HuQ-IJzvunz8-gD&Eovo=5b#5p?ImE9x14&Jdn?8Q7 ztII2H_8NO*M@<2ZYcI1=ywMJD2%;#8`~_v><=Oo7-SFuwa?y4vjClLw592Y9I>Fe9 zmJCSm6ziHx*r)~eAZC=OWbI|4X;Sl!XidAB{K^1^M0Z7_Y~oifoAP^h<4nMG z4d{}$7Yt*N`(|Oezpl6$y^k%xdh~fwAEXd;b+6s^CSC-%SkmEUg<$f{`XqbQ$aT9k z(z^hm$@(~r;8l(WAvlKQN|549ZHl_c)!Wl+o_o64a<*}DKC{$v{4sKLZBiSCHIJ5x zq59Z(5g3~)&JvodN|}O_f;(|m3VV9iCDKPx8$vhp0C@fkhqXm6%HbSSh4aaaC2mo8 z^37X1P+TqZDgKI5o~oB!ey;&(IM`n%cP8+!ewi2q4&xXkUUi)!hzW1A37@npl(ht5 zLsV&Qn;Kmt7vkb1i~%C0-l`lE%B*RbSp8Ymo+_ocPd{-^t-aPlSM@D%%zwa*(XQ#9 zuT!>Y$2&P>Fav|vaEwlm4LXFLxCHAoEo~?DW_3M2Fp}_`;GhTMbdcGobess(LVH8Dxz$xcwl+i-d64em@pLsGG4sapoiT!o z*7Uujl}Fi@NB9C$#o6JnYJ$OV zJcK&j$lsks=he<(T<<~!9|{@;q~g_dX{g1WRJ)%O5AMzi{~wah!lB9Uec0O=FiJ+Z zjz;N{#*OY!De06Dkd_{u!hjDA5>g^5CEX?6UDAw3N(A10fA2rAJ?HG~xz9QGeP7pZ zi@B3*(pz2Z&#kBf%~5e8&S;LL36pJ+M-tPq^0}vCb(n?Y2u27ctP7m7-Yn*4VA62Z z)HS;){f(wl*9qw718|HtIZ>o)Pk9@wnAmFDzy^R73&+@3S-^}HU03A`^A@j9cY@z{ zM+!|GR6k`lKeRq{sWZ;Gur3LI$F-yL_&e~LqH)KUit0DHOc@dAqu9@2zibkX;=wnK z=6Jz}`lJ!kzDE&WNhE2o$VkRkZ7^(E9s9Opwe!$(OstfjVC$MO9VStLGw?vSK&Ylrh=U>j`7H(C`064E9~Qe`q4otq17zzLwG zo)wiGYAZbb_xLy(e;6uIX7E3%N=qKWY|jP%H5vRD#@EdMgryS>t2pq<7m+qoIkhyk zNGnz^kLZ6vbr|+Rx^Ct>9#l)ax1KL!?%&r(G}Tr{Y8(#^pB7sTQ{Uhxnt95gV^g-! zH=D_B)@G1mX|IRh6wWv2m5_y zO#K?~Yu5bIk}vhp%kawmGf5~C!UVEusm6x=vX7NCd;E$b1+plCfcN8z8jS*hQo<%i<}B_1w_&Y6 znD%PpGinS#M@g*K#K*cYMMffN^t!H!{M7FE!K1ot%rLf1`V21JSwS2L+2=bnPg<4oml~*Md@HA>nN$Sa$EaSYm zf5{Bbeu}_gKsh;h$4}De)6cgZhMKa`Fd0f#s9s^nw-FKFk)A)_dOVbbd_R2}=;o=O ziz+!9(xS+)v#LCg2)x2x2>g4RF9&5TA*r4%gJd#S2M6vb)PBK9o3p>KzTv`e6?>boYA*Jo^mEq_@8m9|@#BKaq`#jP?Se3EME z&GUMgLda~x-ALd7)t|rY8r7O{C$dlD;W1>(zPo+CQlr zBxKko2qS)1HsY6GAT@k?y7zFwB#{1JLa1>zD5dBaLXjD=*NheAZNj;=k=Kt;`#I2O2 zpG0>M0cl+dR(Wnx^7IR3TIM)$^rT3toguA4Q#MXkbjyV9Q)EC@FCT-iAnOYkjkrd_ko)R z$BZe`7Dlb71qA;k^X?#P=VzowSp$qmK*5}|PH`E?txSoiMh$0c)%eL56YS69?(iZZ z`AuJjRom|IOvfEG+v=%5g27q{pCBE~#f31uB*ygz*^ld-HEFTotX z1h}GeueRg^Z=L<+oo-gs!$d7C%E^)%S!i#YVk4alJKCuL(Q|EQIrq+MfwBzu$m-Zxl(^bu!l9m*eOItoDImR4m zbb~nXtMwM0AEFOG?R2riKbnxy4E&(}?cg9&CIPy?3(7s{sd?;q^>15ncNLP|ep>gq zI}rbHdMN>dfDswJgy0^Qids;9z1Xu8|088bN+vl`fVo~Xpy082sgL2yXZi3IgOWdy zGJPiSGi^+q(;iP~je9&@d!V$OYdAV`^j%uAvE;Rg)h)HVYfR-a!MFO{3sF%0al~i5 z`<`_p_!ajEFI!0IhS$SI;MLODv-TEo|G(9y_lpt%TTZj~Y(MI7tyrzp6SGqQ8J%rTOP~acX%243+jv){U?=9 z6Z7s&>n!)z_oC^Sb;zx_oy`w+buuZKTLU16&;Olp251Qspo5c0v0A!Ht)23pJbbv zueS_F*71bJ5gHfo_P8?qt8Syh6haA4_nKo?#>rDL*R8IlXN!SLj=og4Y`iu zFU`X_m|>3Km3-)l(lcp$e_hcKRpSL*lNfUtJ0A#>xLR(1oJH5K)MMc>g86#nFe;VM zpNSH@-^5-y(U{1{x&DWM&+G6r`Zeh^769ySZrAPyDXmnfh)a#GN1Dh*z5z-jYl(iG zlrySAf?MnpOtqUmpNTbKvUjyn_`xv3RKzA;lR`60;^`RgF$oA1j5!@hc-3EEgx7x$ zueI73+Z;1-kJrnW8b<2J>fcif96{h@7_xg$vJt>TZ^!&+=$i!EXulUEe zNS4(4)xF+5x#eDB#B0oNCu*?cZmjN8^_?+EXI&(tAa#zT3zU zo{6zXR!?B^&;Q8B90)`uS3AMbLkh8?ez3KJ92Z8H|VQYY-W`N5O*v(mv!WvuTi(DL-k96spp>^#69 zecxb3sX-!m^)rL46Sk+(@D*M-T-yw)WFI$-+ z!C*jh2Af=**8{{-^?oPtgx&l78=hX-*%fwEIDF7AjR-OHE_Gh@#^G%pdSJg7P{9rg zR!Xt_mRa%VJ?fH{SLNfQKHMNY0l0x-r-E3f5|wB{0^B{5YUS5o*4pClLBU8ely%?C zRiwq3pB!bt)!O~qTE4;4#^?4HIoVX%^a;`Heg!n#F;!-*q0A+v47^_qBSk^gMZsyD zJXkros-H_VGWAM)Auw290#w5HekuOTdQ&~aB~(fwbZ zkv?PFtPA&GFf_>=)q?>BF!ICu*vw$ip}I5D-CM`|!FFK27`^~(^M#*LMq~}irNqN_ z;J+lJh@FSC63LRL1(5@t<jF5FMRGoWR&x&}kUgwY^lzhAUg+`I>9wqu6D zdl!X6=EEM}csFelAXWfM#|U6PL{8LrBPIys-&bb+WN~n;{UD2>{&Au(2v4kK%Wyz- zA0G_05AT4J@_{3*{k#>Q9yjlxZ80?_az=H$uBJ5_T({epIr^s@{w>8tRvSH4Bm5Z| zMOZ%+k&dWpHUWMv{gortOwE>M%fv*>`jfB)ug$ZhkF-+hL@<|RlA}Yv7A){Gr4ByP z?LGex#!&Z5Fw&=F&N*OJ&f>3rk-(2%p$`fXBHPZ{kd*op*X`294mSZOWLuPEK3 zi>OY*(jmF>Oevv~7_y7Fv*){#b1{fW%ulJbw_{iR9T+T7`bz0VI zO;qhOtbAR%)Pc8-uvA*Ki5de>SBynk`OwTS!mq~!LBb|tde4jI(iP0qhxnlD|v{I@2)7E1z+RJ`|CJZTa)>g52zsM(5V_GmgDKvXp zUt5#<1nj@MP0q2WVoW^z<%dOOEzFH;*UzTMo%YqgQl3|91BK*r6X{7vf&GJXk(x|^nwh{x&CeisYilH- zY7}Z$u>@;{>h7%~OpS}|G@18t;P2|>H7*&#!WD&i&qOpx-+ysNb+4-CmgJAVB}pdw z4Q3;6m|_4qyl~IH<47&>h$CqW;3{DaBKhDJ@JRKzeUDyzh|d6A5j30K!A~{DHnbE(Y_;xSj!fZ z?6CA%-2HWL;4gl+wcxC;vGDBYxxWu|_2LnQKd}F0c?dQX>vzuaidFAJVh`U)pZQgw z7J1)ZGZVM;jmim(*u!!PyYXUcvU@}2UysaXJz4=a9PWchS@}_wF{r(Iu%AS4`!y%Qr^i&dRk^iU%kz&r&DSkG zzx)YY<6h)Oa%4`_;Ej7N$Pk7fut|yihMF2$TC7m)8J3#fEi2A7Y+jwjAZ6ewP-oKN zhd&h}O5RJs07XlRx8z1gWvmgOWjvDc&BOBwjCQ&-sx3g_lQzwIA|<1kQjz3l(FlCdUwSTj?L8Z~(%CNu<%2P=8r=-teaUw?q=xJM zF4W7{b@~AuEz36&+h|UdFvw>di1P${Z zd#9r$c+z1dOzWYX!)n~tKW5K%(m*q!sPyz|6i4d7JRYs)xbPxy;oI52W!>$~!24&0 zR3d~CBv3viEJ}pLCh%`y+!=o}OFryk`-j>lwibpTuV0o_&PP?6*ACMS{v|xeEXrd1 zf;p>DyfU=4?R0U00p0uw{Lw-H3Gkf)oCd`!i}T1L?+#Q7dzYp?bUYXY+oJp@CM#tM$wEumG8+?0sU4F&$$s-uD}L^<#hcJ@PkcB z!#rA3{Km8itpfVqOz_gdpJ-d5Px2*YI?{Js=)itAMW8w#M1atjtg~$?pm*Y(b=wC* zRti+vkob&yOr8oTU25=xlr)_=rD+YJgcQiS# zUh88RW{KEWJ0QtxYynR$4LBTV)mHIxMGubsE$ZS!ml8f|7X@^K zM>KMixtyQWg?!A=eAVwXrBl%x5wF~yc3NR3{cr^Q=|1rBl{Pws0)xp9j>^Y)NM<|P z7JxeGkZOWVd8x*i?+JB+j(HK{7>27^%|#S};he|RZFjI4HT9G5Gq&zmeqM=?YvY%3 zr$4B{PJM}`km&6_&Rmr-YtIIR>^D_Di6HjTIi8ulv*>C2&fU>teJbKWGBvVTuI^7Y z8&SjzEWuc*5g^ybD?o!Z!Six`hxE9*XQf@HkY+Het1rYWv{JTf|7F?Ins|*Ha19DZ zg>vCliBOo0QKkKq#70qg3&pfVFK}`7ugc~IV4V#v8v+QiQS2$EWgnK{x0j#ARODlGxGL*O2$JD2#mAd@2t3LMs z$4ZOVo8BCwHTB*2*kQuwQPr)307;`Fit%Xj?{5UKn3y<{(Bd-)(52R%c*+t_qSwF<9%~MHlwXrCSx!$i5 z%wB;c>9!RriXo>IcJ^;_t4tOaveC^KE`6Xh^PWu7c>m7@AX;EGsn=C;L@+G+myoM5 zu4{+*3#y=WS9N*MxEa6u|41_9ItF|?7b*ij85=r#@6$sdc;G)pp~H3oAdm(9l<^b9 z`r#-5EU%@VL{hd{(5hu@L1Nj+%fu5wI5$Pn#u=$|dXbJTaXmv^9+NE*Z=o?hP$j}V z+#;YbM$4QJLpE8Bbkx=V#R%NHA{8`@H$r~RS=hKPsV6QUgF|wCeF=YXk4M})eR4ff zM=w@yQe$jR08*bR;FGpdGAP`r-ngooFD;P<{8q?)#5TKx1%F1mz-HB8%xQ`7*DWpE zbP@bR=lZ|&|GlJ6#P}7>;A)GRL{BD8yI2W8zg@3@bH>@PtMP4|Be#3(=t?%+fw4#V z1#)6^exVMW>$sFQ3I-(f@&W_N(*Td%cp?FoFk}O_!cTEx4=aV3y zB&l{{A15+`O3c#gghID#b>3@Hyc^(2`|=+_rv^$IKDUt0CK;q`*DW5fcbtu0?DK}A zz!uAyBpQeBH(pagwMfS0QaQjz&NWi4Win2Ab_Q{DnFxXMbWAXI$nApl&??O##tOD1}RC49jYM`4G;N-$C37VKv;Hk34i>|u?@9Lku3R2 z#xJYFOk>&?^sU~?q@jW?To0S91JD&K!rA^Qs*i$PuB?x4^V_!0gqA+%HJSraT#6&8 zMEr8+*1Ac;!Z)R23KJloJj^Fb9bq2a<@D6RY7!Qu>|4_rltfS8%z^-tzeS`fGP{56 z{0}Td6`qi1XZ*yFTuUcoh)}R3GqKNh0Z)a&%=dwx$)1Nd+Pv2{ym_{F)*L{u&i;AT zPc(C5y;_xI^99F_uJI3-J>9Y9sX@+MS_QTYg<=n|48ah$DTQ;6vzWWU9f0Bb8J^W;aXj_=x)*qgJ z$wvPIC#fZ}9FC~0wY-IEYXOB0UZ=mv+vF-@=P1ofsv8gWc%mq0;FiA9+APOn!_ILz zo_r7fVX`aFe|S&SKN<`LDTkjGZEvQ+Y!lg{BGV2N=VjKjH8i2aaz7n0i-~q$Yo?5M z&U2wg&WU)VenLm%n?`1_3I?9+yxd;l*zigU0HTKX&954vO4iryc-zCH z5lpT#4aFX}hW(fvKl8&umXP#?>bo|_ojGw3JR0h%jM{V7O$htSdUVce+mBE--H{I% z5e$E-IlqXBaUmy?C)XOchQ0)>QWaZ0sUb1X5ZWp**V&h|A+#J4c9OAVhv{@C_{Em}lp|)oHlsZD}BFl#-9F^v49$5C5eqe{^5_V2lSt$13w?1^{=y z0V9fe5Qq-i9gwlODt#OJIUXpQ_DRZepX;y8yaWG88p~8Al?*gV@Qj}n*=rn?U}~#5WP{}vWcIz)coW<*5X~nCU@r_?O&+K?QxT-b6GItsp@pj zfQCIp3gvJSp_L>vhiC3i))+xbTK@wnjqnI+_j zCg4(9PzR&P6b82E!>TUmaWU)^-Tm7=IZ?gU3%t$r5~= zm51$~lY%+nDwW3oG@_V+EmrW#r}}GBn!%X1F&tRxdz2C>qTTGEYvpe7#$C>M56Jb?}*D0bktwWjWgj>TPr}PaPLus5M0g-mWNPYM$S5 z2zn`C6h0^?C|ETlBWIk*@+YRyWBqh{j*5KqMX9;apy+P_H3v%U_z}gGZ@^NLv{=Zy z(fP`9_nrO|eIaFeTxRmK*)m@Q0pGgg*Ex?ro1zJm0Umc;Vkb za70Qkw2CG#R7qe|wO8iqsYtgrez?&N4IUO;Kxtm5z$>KZ@sG&EaZVZD4nIxoaLmg{ z7&36>AUM)7v><&XoFu_&p5pi+HFc(rQn2}ut&aZXJN3DL;H_x*jv<9IO2`HvK$$pn z-bgp+g(gV1sj-0#SZBlGu^~XL#FqjU#h=yP#PA;bEB|S{vXc#2_6+e}z%eJJe~e!& zq%iClR%0TBbyR$qduFIxjLN8nMn%_VW}89XPyPjza`Pe8h1K9aa%6aXd8*8(|1Qz8 zq~kWvgHd?yQK7Mo2n0@oIUPmbC8XBHE`2*(fhwbHB{tloW2_5cI)BWJ0@DhlBj8F# z`)h9I2HAFE7cHpe2HF44g^#s}!4{boX>TyHMTi+Pm4(uYBa$t6_%ab}rj`OGSHl2I z$t)+M6fEt&{t%b#dc5QfT+%GeE3`YNnr*Qmpu?Jb{FaFoDTYm^4De)a_K;BZL74;l zoc4G|vhtHFYdrGjplR>OyM@T#*Y6rbY5rpwXEnGPllqb?m@Vd36e-peYRVRcu{VA# zphpf=5k-O_LK_@?GIR-@G^m^Q`@r^H_M|%4*f3}6fEjYk8B?05EK>st0f3r=r9QeE z7_-S7Q#QxE>&|jTRyv~46&)R4sDm5PJ0Z_*PlZLXN$ zn#WaEs${tW8;o#3$xN@pk^B44|7dpVzx-zulAY`S%J_Y*@hSUaMkLBc;<)+xSo5hF z_OkaF(cI%r)NW4T--$Pq5D3SQ0fCoU7>&{esS*reC%bWwVa9lW@-U!zA=IGGH|)OM#$rpKHp)I1FbM+Rd8M2#!i%2r_uIo+SF{Yety*0&Y#nc}Iu!^6#5Yd&Cs z!xASU7WAkf<8-IhhO)m?*nB64JeVz)xau6uK%w{znJN7itrC6R>t1)^+!=f{n6mn9Y*NwreI^)kL`GJiFN~FD zp2Ds_#X6ZnhWe0g=JVbUG8UpLsrLN;+l^_y&-oi+pzXE%57*=-*)kZq$%G4w{9I&* zNt>wIkWMl3Q@-2pVLSbF-XGXh=FOFqC!919llBYM@rwQr0F0f60AVm#8P`yEh^aGrR0CJSP0EmrugecQ}Ng zOi_c#&`@fE@(+1Sti%rs&+e5o6bQ<{l~=<)09;#vkE*vUtP^T>Dgo^Fgz;0Z@0R}E3uywG?Wi3|+W-)Y6d z*rRXD%K6hMxWD*jpRTc9%_f5?Fe?0LkDnuVuz*DlzzUtG*v-H-n0#1a8ouL=D9_1t zaF?xJTEA=VeTMP05D=N2>V$+-VQEcqc7K4FU-w|FaSwh(aMh{1*yM0+lPsHy{VG2Hrnq z9`dMg5NcJMR~7nrc3KcZlgMYeTo!uk(CUa<_4~6z5Q(Of(D3PD_c*3TK{Ti6|;iZR_-RPjrXWA~^awa8H8QjGEROY|c5;#{_8AZ2NOZ{7l0C?-77Hu?UZe z4KF>x01^g;BNMql_^^=%A5<2ckoJ^N07+QI z*^ir&JR0_8On5Hy>tbTAuaCn2ZC_=rL*GG?6VKy)zB?3BsK<>VNxI_2wr$#Tp z@4)-klMf0efm>zKP~#1ND0Q7*Aq`zmMaKUBu7`uMIVjPt9>z~66uK$GQXKg7yPoC~5@1O6qv$Cyol2xuRE ztEedP`dX-7{KEs4;ul}KH0odo8*I=@Nr4m&H-jg#1bqg5EY;~=sKuAW_ zkicQc_HRLT{RB3c4|6DlVGyd!jG+~fSM_DnR*Zzo9wKwuofNxhWGU}i^l&(Y{1`mq z`|5_yjy4fn3rFG2u=f)H(a*b?sGPRb?&=ysFcb_`RdtYp5~(BjUtxIEwqYMD z48^c``hjwE-mCU$^*fj9*U1;={+Y`d0Mk z-;QI`vo+tNK)=fyJoq@u1_(+^FXQK9Q-#H{U=8rGVFjgej!&LnuQ1&XkVU?%wdEcX zXt-dYUA8DedaZq==}`MXnV11cXH5t*NCdK;5cLHMBl zKo1|iIXn@gD18D0(y(mFVf6Gf1HzX&8pCq}OmN%Nr};#UeNP?q9jbP=A4_)3HtE_< zR#^Ge-~e?ir`Mz`tm*tT>u*yR*dwejHAZcmLYi7GAQob#rmu-Rc-eKW@P4kIS5$%o zG$2@!I%4l`MSxFM-R6vOul;t%c|-FykQyvzW{E6t83j@WSdVBQ4Gss`*_Lo zy*z?SAT?8{1rmcQ>9c|)bmStG;5I2JAP&oB$8cea2kBY;me>vj;NSjt1iC%McB&Ri z^x4{xruEBB40K)O;m7+&*#)0K04sBDf{5Z_7{$968gSw$C2&iCn z6bo)Fiuyec9$2F`ytn=C^ap-zT6#+j$Cy{Bknw}q07cMr15=nref^0K18Oj|isF~{ zpC@!{4Ueta?H@O)Yu37OF$lD{ID_3^qmVDC=Rj2a|B3I{M&5n4(rQ77Rsjw>~}@21WK%@0pe zOtaR?a$&7JlP+8Y$?8u~8zyoxXcSj}R(dO~nnS6=En3Jl=_MvDTF=~~YNljHt#}kffDxU} zE;+3Po;bumy#qmnLTun{FjN^o#zqPyU`%Ae!iwb+0MdPgw+$DjX(|C`8iYoXOGj>y z_e=v8Nf^SDmv#{Y=d$-b?-&2Ay61$LVotV1m?aq#1EEZ$3l25o=MRqMgA=$Wrn(YA zDE7I0C(Ly))tN_=23H|y>L6Mfq8$5~!W%&KW2xcr=XK}3^WE%(sgzqaju4y${91sB zlo=>v1{dH{66iDU)5m06X2BAo6J}amy}n}rqrFVe)|$e^=X~B-Tkkiq6UaMZ3ILDWdSA) z@+swp5~{+wky*B2QIe_a?033UQPabOlv^^mQE^iq70)%#*qXX5m<0=x?LRV7V@@us zxb^f;pFHzET6Uvi#gt#rX$%W1Aw$#DV1tR(n^t&(*>YK|jDQZ^Ml0W3R@(h38PKHTGZpWUDsW9lai{u_J(db4}wYzhbGjm^>WMfSaq0u7)-&YRm#b zz$f{@0)!!`wBg~ZZ_wP!0irps@15i^Y1OYqw#&jc-ET8&r z%Dhg2P5xjmsBzCu?RlMX#%9fGGZV)nYI%LU*nGEfPx8_EO} zz+-`v7m{Ek3b=eptPudARg65&y0hkyFj1ZCofY>~X7Se(1)+Te@yE?<;$;EJ^VVXB zG8Bsl2(&84>+xe2OkyE~+J3qIcaK{sEh+AZ+yVT5nw0`(N$XC)ZsL9jqd2c*sw0T+L-{qIeiIbOtJl1ChY%Tg49A6j?tc|_Gr90P2c&_HimULuFz30eEHJ70spzMnkf+kUQQgL(e&KVbs(b)J{?`_h=CibN z+H!JG1iS-``%7f?zTWw+b1q=_$azcQ;RLo&ODQ=Ec9=CAznFMTOhaHz9#$M?1hAL2BO&B3!WyAo@zL#M{>eyp;ck2v& z@u4(r*>x9K(eBU(?e6%tJNBoG6J8SvM}p~Xf=W4}f4hP}O3mjCek<2&m>Qsfdx>_3 zkj%el5(y3!6Rr{?8NwsiM>dxD^PYEYXs0#T&Y125s#)zCMB?tZsWF3E1&r@@9OW&iF# zE51zmWaF=c*Gcx#V)e-GXzTFz_g_d}gZP8MN_~C)f)&jhaoNNsqTYY&V#-h#5{yQD zuBI|h#M(3koPqMfsOsO;?Fb{M65Hc?f5VmLCA8-X+uhY#ZEI45iR8{gvADaW+G`eD zD>!ZETp%F8>i+U%_ioj~|8f+cZuwsWFKiz3O0zJZ<+@l=%n<{G%1 z(}nuH0>-R*N&MItWv2mWF4>ZNwwuzIUCR{Z4QftqR|^vgZ~gior zA5w4RA+$OHs*=J}-xik$rqeBc?OIqN<6g`ay1)!Mu(MMyu#2t73~k`G)AL0hX~Q0) zT{{FWi3C^t9CU1_1m1*I_2lcADxPiQY}Zp9%Msc?h)8xEyJiM1_m`T?n34<@uJ|`% z$!{4+)hWA19k_E5G0R1bYXX!*iUw$^hzc};9o#u(cSe2alF&b;pRVzPN!V#+qQ`xP0b7}|a*(v+ICe=Js=Xv$~t;INPTW|Vb6xtN|rE3C^oRd^ZqCIQ8ayEx> z;S_(45KNesAo$dz`emz0b{X&c1?0C+9Dcz^v2u`9o0gdaoY~fnc*tmO-eM1nr2Xe! zW0D0)v-io$6ViG~&#hl}6kStz-#^~u5X1a%<3%Q_Y({LQ=VSWp8i!u1)#L|@?YtYZ zWGS9{5n8h-@TrZU4M*rtBCBtQfF)(DbP8qxEYlNYOMM4V%#$o~#Z$Rjx8rZ@SK)iM z;Tk%?WgXrjnuTVotOxpO&lQky64L}}yHT(CiuWRB#B^OrN>LR)F=ptsTS)-zU%hve zO~XR6&KZ7HG=)Y&%b!{RjvquClb%f4d(#)VhN$!qRY9Izbmz+1sVHH%40TJ z|G3dES%XBJB(f>+?I-@K&#~b$L_|acBne_t<91VyVRQ2H_fet=TR_`i6wiRehe9RsQl2J62`W9q|6hA5~LjY(9Z{M1P16w**1V)nglw0 zny)A_==FUv0I{34N+Lha+R^{}JmBQl3C9l50ZAAo+vYKDNJ5EX2;CHHq!^~01Y zTiH6K*_NjzM?a-!LkS+#bQo3GF4yJ)$%ax2qj{MPTt*vb^&Dz9*`009&Lp)NuN6PO zcT{|&-6|c*M8D{15<6DjD(UE6`qVC*C5iCbhz|(Mv)Cv`c6ypTB~v9j zWw)lt*RyXU3g*>BAXMIAACI~^dj1{uNQLn>Br`Qcln@#+Oqjr@jZH}R@#R+R_U}xs zLrrs}nZ|~4*Fh{#U#(ZUOUgFJDUZqNSJsJ7 zyP@jDdE>N#%D&8apR{zRz7JX+(kM|e6#CZv)c>P-`Yp>ZbvHGy>KW~0?V~5WL#0rj zZ)e996K}LS%El?lUySFn$r{XlKaqu{Tl_b@gckv;fQ$ahJ9;nRh(PqIR40c- z)5?0a`beeL3cG8I4hX08gA3-i?ZWV_m@1Aa%hX^HnB8+#9T$Vo$A4FdjiOnazx}tg z0S!y(XD*%H*bboR+MVz$6MP3JN4=zZI*u>P@vYIM$&O!HhMJUBWpu*XoBquu>z7}p z&>&=y;n$i-j&8PGzP!a$`wHiFe}44H{Y!--#hghTWqIf z`z+k`5m1?>#~2$K-YmYtvH6+;3?GE#YwA)0+EKW`!Rjp80DTt@`zc+;>*gvxS^PxFS6!%D$+kRc5)O8q$lmdj zi1*2bj!?(9atL9P0?NPlO$XJP*RINz1*;Rv8C>ySRZE|*zt@R0KdL9$jU|V6;AmlM zku(O4a!tHt_i{3LE2C85aV_*-t^2@_=8Xdg>n&qz(@~a+qPDj7TOb8|8Z?U&+7p}N z^UzVz%aXM5xk)aVA#dqiNod0fQlip>GRe$ws^t5?_ARj_FPeMOCkgq?P5dC)UxHGQ z#tbidYo8=q^SR`r*Mot-?c6-HN4X=KjLLD-6|E!v{C> zxC<22`S=DUQ?m!pLqKWBd|G>IduVAS(`|vqdhE1Dzs(#M4(96TfWg8ulvV7z<(JnO z{e%3#jCF&;(!WVo26<@5LN|?b7jUyI8r@K3trf(0400qCW{|V-BO(HUT$7$U1b0kbyfQ&rxj+v0YL43NOvHJJf2H!UiAXXzA>Z$}NPR)@rHs9Ne1OhXh z#n6p&NWKWwy!o8c?%0XRu=_B#e3O-DXw#H#zm-zCPm9vpuCM^3ksXe!&!M4d>rqG) zAUGf2oHjv@5CyRKO$4U-c{%aFS0{_2@;KKoq77;i{p=c&i9^wrn+KkBH5uKdcYCMI zITBY7xIoN3J_V65X*Yz3xthOmP(y~!^wVtz#;P7p2PtnfRnU8u(VK=8eQ=Tm;2%*ffLO*G#&(P_q z@bd|;ic9-5YSCXTg?8-^;#arq0f%2`&^koDAMNCnhn?!L<}}cGJWj@PGR%Yu39d`? zB={k^{eDzdm7N4NzKt=vUK(I(>hQ8MdCNugx3Qy}X+&-UtTdN4Z(dk1kIcx17HR*K4;= zVPFK9Zk7JxkD0v&xf<*TNx@)dcc3y3 zPFmRy54Q~T3~$!$Ksgwbgvbl`wk;?!j|P1r16_^U=PIstiOa&se(`B-S2TXf>pNG% zmHW<&dd}RT>dp!rv6wWn{w-E6?04(6dfz6+2#rpxCF!fe09T8UfJq;$E-T%~te-aO zLGUuMufIkdB|@90540Y!ty%{OcK8rc%F46pbIw9TfOPb)*BLVgnh(kMuiTD2!ChMa zZQIv|i?hJIHxwk#`rG%uupehrL7+BpvQ5Qrp&#)BTW9hV-!^x@`2|7pqx}Ewanr!5 zgUfzwkI#008w6Ar~lZ{ArJkdV-P2E25YmA>4)7b|yrSP)}`o5f<$4;L6> zIwyMg%0|yIW~KH11V%q)*O`P6giN>^Z3TyPPQ}6Ao3+(zvLzBo2S`>}hPiZtmPEIk zQVH;Uxr%7sef0ma_0~~sb=wzcf`@<%d~lasaAUTdy-_MQtW*vw^;2Hm)oOu+9>5wlFZfpTP=TEzG! zubA}x!oX~wK`2lv=>SDMX!)KjOc=p07E1*COps9!^Du|~4Sk5c>ZH7sz z+XpoZ%ue=&ZQ2)C4C9KNw304o*w@ zD{$=FYkZ~Wj&f!I7&Qh)3Ti(sE3t?oOzET?6eO6n1pwbwdTdI5kG$8>W9AapR(KMT zP*8GbrN9UNPY#ocBU?n1PI}xd2%%g0JmNEs%%KvrmSR4vwQe><_=^}6%L#TIdJ)CYBN@C#H!QS7%C5qSv} z9SY3aHTbD;pl)c$mapAwj~M-!)0ovCs{aTF18gm|AIL^B{p*{bcI(dOR`;Ot?TD z)z+o`QCshW>^tHWOoRYoDUrVkfBD0BE$vmzlsJeVULE>5(ceTQMis3S186epM#-IMox zs&#=Z0C$6-eSranRUulr5@KlN;TWo7z1uTe*WTW?YQ|}94_6(Is}q9nqgdV&V1c4o z;kw!DB+)4wdBvz1A_Lq(U|-Gl>MhgndQXADBqfW0w=|&cvZ*ja`NOQMO1_J+RY7-p zd<;@woG5}=O{j)su0#n+j2EHPsfW07n%l+T8+rcoXsf~SD8Q!?01Q}^3f_~C?&LHo ze}FMEne31rrdUzxPlR@+!QNn^ttT&7%7O+ggQ2CUCJJf4TqUP=ZiU!{heJE*Np}kq z3YT-_NQljj!c|=;BV;^m-et_8_sB2{LM{(l1YE(eB1j?j_{vl!Qfxw5pTN!``N52l ziKNxYUA~HdsE+oQ_a7@?BbL910Jw9SEBAYe2FP}v8FgztAB0@`CBuH|`@grCAi zGM<@yknDJg=h&UncU$+L2V29C)xzbe?nJh4*zEPb&Tdt$E&_N zxcJ>**b8mJ+9LvPa;^HaMZ$leIa^ZsXEAgc%s_zh||7`5xN zlX#V{u^L3=-W`3A#WJfD^rx}d4`-sa4&l~ne&Ag%r4QNW3 z`^eZ)$6rBe9_e}7B6y`%fSp81Mk7uChQa%sSUuMeGH%Lsv0dqPCjULg9)Jw5gutG{ z8LoNn3XO~N`AC=bPU|j~p#v*ug>rn5(htwc>$PgwZEn9B2+N0R$}E#O8*R5asZRtg z-Hul=OEWqwo_CchvLFfC?I*AnXo^Dpo6;jJ%%b`$J*PGsY!AsB6vQO|vMp`o$EE0~3V%O_e>3g4I%1Dq!r8259(Z8f<@> zYneUeXGu6$6{Jh(u(l*!y7h=;G6Thhu$tnih|9~%>zAH|ANcNm$e*>H=-z#$OorBP zvZERiksk7ul@)5IeB<6{se3MKuan)#TU$gyL#yL``*e_4JYB;S4=d@<>a{~;W5CrNEFO;l77>Ye}yZa`4iY|7cem>%A z{f!fRU2M>_^fcCZ0v?6y5);N|Q!@+h*=VeQETs24c3h9@qOaE23R3t^AxTICu~;L4 ze0(ZO13~(hl2eH<{c^cH&)WJeuhvj)=@;B?B+L|xniXa%_L*HCg1M@+Mjk`A@QP69 zNJK6!a@pw83CgbNl&9n!A5JK2)D0wRJ}Sbg*4v>PUv{v>w4VUyy+3n!k>aG zT}=+^qcV=*NHE<8GqwB|+m68rk4ns`;TwiY-F%`lpfVa2`kFBG-* z!vN&MGuWdcmcRfAXNe5N_lc6F&-;@#ClMa`a1vN=?}FHmr#%} zXNrXu)kuwmF#$P|yVYqTX(1!3Ch@CwR7KAlR{RnlIKm(ad_x+#cy@I#c2Y6|%=8z8 z9%dZ@fg^!-a;}B7r$T>5u^uTT)EE#d1!|80XGjt$YlHZ93iH$K-3rs1EmL6z@7?v0 z{4pfDF^T186M@#qL=%G5Ox=`*WBO<^xn3zbPqsUno=y@9jFDkcHbGQb{8RukG8s~m zpLE&vd=L5@iQtljdm#z5SLww=U8L`0Q zLN)gL*4GUyR4gN&L5V7cH;#g`{e&YcatOqO+GwS0=)7W${UdSJK0Yx9A>43mvj<`^ zvJ)aR7!+!r1Scm`dLOLB5TD)5z(^q>VPPRs zUjl`EM&G3f*Y*ZzJixckYq?#O+kW_1m0s)Z0=X=s%L$E^4oLQmmL1l>f<=Rq1q^Wr zA|S3_RC>z$b3OIRqn|CCUZ zLnf%eIzS+%aFkK86lnn^P!tQ>$e6|lY13S;!Zx9KRgpb)ar3_K!220)O7{JG09$`( z1S)jrs8GKjsWB|6AmPj57>O=P_?P9tnL>H~n@#h((}#yf0|}8)4iKz^k)f7xGA5gw zRe7~60=N771arE=`U4*Tj2{43wb)S#42Md=86FenQ*-a>a<};E?&2{iTVclQkt&(V zjjO0)&kl!RU;x;K_7n?;XX^sPU5ZYx;Z3ZsyWw&i-^}ZI-0URkH9hS{o+XCc8({ka zxsbS!82W2=ofFNT3pkNB0j=~ZUge(OD`N*bjBaw1)n;KhPZEaQB&gQ7gd!Me* zKe?R#+9*i9jWH3bO1)u9AiII1$oRx5GuQgVFD7)DKt3hdSCkT{%+W$(At2?AU_}fD1@a$24I;P69xMAdu-$@ze#M&wE}{ zt`^?t^Lm}8Yuh&4pJixLv3!h@-~{FYlZ063r*N&Re)KUtuuCvRsyj5E5i?tYLHK_u!crFW}XeTNhSP0n+BgBx^5`>YOAM+S5 zzy1U!E5pMY|8V^McA=5v*MqLh@jBZwt^oy?54IH=3o15P!Ov8pc5X6!H)UeWzlsl= zTQ^0`lD?q+tIwDZAO_?|c6oo&#f#XcX!X04-=4oCWM)AA)LM^>#;9N+CmR)C8Y#&K z4#hvj7atUh#rkth89SiwZr$6~wy8}Gy<*Ejtr7ioV3B&WJ-Cw<85;(*6A3v=S`-W* zb#1v0GAnN)W*Ib}Hurj#Y}y|GbJ{SLrvwL8N;~C05a7nYoi{S{P?4!%nz%h2S?!Tj zPbDME3HgbQHW2hh2o%doYk&lDM1u?YtR@Z5=PvMk+&|~qxb$;3wYL06d10alh)gJk zlqDV40)PO56Uj26nX!uCxO?O8$tuZ+PIAdjS7rvtMiRyn(%9ez1dxy`qB3x1SyQ>EhcOjOTPkqvMo%E5Ayb)kk3MRe3{QNiA^Shj!lI=gUa}; zXSLJd+K)wQJaZ&6GGKr63ZPBo+Y&r$|WT3jKlAySl@ zl_p7-HjgIPjk#Lkz}4?3hm{`$?#{c~h!iI<#S}2a72_;WRYdv}SW*&pk=WlP+a^J^ zP*Q)zyu(;Z&7G2XBGT>9st9OfJGHH8QQq43tHlr&Q-}jt(ostpSNJA?e0+U`dTOXz z37y%W$jedUx~`f3a?(<8^yFRQWUVLt9gO z=sTcf2u%cyuTd7(CiE)$5nz%msf=OaLdNulQ2YiLZnJK7iM*~8&)iCR7B*zgG6ho+ z)#pcHh4Cpr!B9kL_yLhfec+^^1Rg<1eF00gj6nIjxq;BM40S^#wqihxForA!rnn-` zjhP)~q=c<63=FXMsJ23*oW3+s&;GKpM zdA1JoaQR*1X{GB`QYy3KrB!9?>9)GFo^^Q{$S(vGb}bYSRKXPQf}5rQqLP}tPaS~n z>cPlYI&8~)9c@Xly^cnAICaR-GuvZ2t6C%4+{l$KV$0BTXdjx98P8-<>PH%k0!0*s z0`Zd!NB!8r1S1QhaBM(aT&TNP6RPbQl6@4apVOhU1jfM9ir@^9hS87>9}*58@?!{h zuJ)x3_9Sw;Z(!$qO_b%6|v#JuVg$A`MI03l4ybHK|BWB6XD9<;+~Y z%uN`uX4+H#ijtp~2cz^>8bf##6oZK=4D~e(xNKhxR%_0N`jpE4cl7jwTsSzGl%k4a z(0v62)_-tdK7airqXsxJQW(xrp^J};!I6f8&te~up{JN0_a2?un9LAHadPPRtC2>41XO-oy-oD%|r<5Lrt2ZIy}f*Qt(GnQQxmMyl4 zidzK9gf(;5TmTAHgYz{M7Nr@bDCvC^0zlki7_`Ai&<_(}!X=yS1v$aemuZlKpq})J zd`n0SP8dM}i~*Az{@IRAs6jSPSV>7KhLnwz1`t>gg91VtL=wYsh?D&U$^%j%OAY41 z4Vnnd6zZo|^OTI@=EX3>K*LScd%tZAIAI#eD3;|hXFbHSel#Evl(od9fIgwCyDR~y zLjBclHVD;}oD|rfa1^E3eMPh+7VD-_MhyI;5RkZGD3aMxNxJ~ZQA78@7Tj&hRAB%R z4*C!VKq*`x&=+Lff4pL;_5=h9MMSA7t2!5G!9qOt}>jf!E_2#d+VnhHsn zLG_$KQhxYUJ|?X5V3VbP&)JqBMairQq=;8ZLWUt=8*}avm`7IAsE3L9!vz-r2N$KL zMFh3MBh_FMGD`^RqIiIhh?d42YLp59Nbr#p3{H-VvV@HSB>yCNwkjx-ri1Pr6aq+7 zj)AU59f#%Wmz@0aSbeHcVUR#g;Wl3!1$oUz@uNedhzB+BH6;f3fzTfSnux%{bz>q; z{ziY>Af^|_=99q~2Bw|Ca!6RT})|5{bmd=l-M5WMy z6#=j|PN7pZ$m)IiRE@LSnFns!Wmy4!)sn^*a)_NX%NwH~Fq@HO8~X;D`6};Y+=&p? zC58kHuNDIQq}oCx(JoQ=BqQwz)jUCqJmZlu)d(8XimkpxsV%qMUHmH4@J9cqSrh8W zw1_NE%1@HKuT4g=HJ3FfHOA&OHpg_i#9ziFmRm2s23tChI%~TfY=%^`t^p-koWInB zk_;Zp#BsPSrdbziPZo82kzn0Dqh=1wO$8#RZL;8-UgGHh26!+2A;YS=r!WWjBhBbOssYIeq6DnVkFD z0fFe(00C+WT%hX-005&AHXTR@K(d7qh!#tiq3r0$&SN{&KF31-ynf@wysutvpzKPR z6gT5;_96(2YKp#-8B9`?k%i7|@XY_HdY!U$&3xaup?);+j26@}wZ6F?vK~d`{UrF{ znwk1a?oAJYxTkhL+dh(P^A;Eja($0|Mt_LBhwKQv{pIpYP{Hf$+2vXP1S+NGsNeGv zd^ywLdC0eQclHd~@}ByB;kf|$0TFz@dzc6yS@53s9);jNK}Eh_B%dZ;CN8{p1n42N zFKu_`ugnnnSHUGgU%@G8_tJd`{}Tj~dEoM*e?syy5tz9sxafTZ(SLP>Kqg6Uyl?cM zJ6vAD9cSK;kgM~;SM*nTi0vZ;mSjY*2eSSQc?gHJJO#e4@8CV2J=?CJ-(`|_Om&Py z9wDX>`9H9b$Rfn&2?*qYzf;irW$Fd}S^m-XO21qmUO@dR^Re>Gd-3(P<-DE$>8?@y z&&yqp{60xy$I&bLvi`l-?Q8AxU6!Q!>rmvB9dp3*It207dv?9yL#N;*q~*~T;?k3P z(sAqMluOyf_Xu_*F7MRv%&%Il}yO`&Ffo;p*IBbn_?m` zQFS9`q~v_abk^0R=CGAj(@Bqjp}8V~K2(suS|Y#dxddNHGX#~c?LGL%vlsHf@nfM0 z{$rcwe6k&95TUuy@a3{1L+oP)rlUfKv`mj#t8A~$C}Wsi{%WXsp~fBa!1Et@+*?TL zVZJv$+hLBYVC>TX2zl6<=JC?SGcbKwZmSqh-J(k&=k)98CIXDaL<5A%gomlk?`kEa zo?o9miu&`n+I_i{1M|srj_HYP`~aAwf3L9;-Us7Fjo}wA+LwX}l4X2Z4)lOKTz<&4 z5eACk-@oH;HX>FT4uSNdeAkbh$q`V6iIw91<+CHq_B72~CTtIk86vC8v$R4vFxw2} zAKPe`>zo1Q3Dp_B(Nw!zxP?XaD?O0K>HcdSgh_j^!I=%gJ5fmG(4wflLH8Q7^L^09 zH!4lFLcypsL880^g&RoU?JedQ*T-3nAoy=uOjmMW?Q*t4(r<;bs5dSxWSB~<(w)fY zSw50J362rzDcjGHC%JIPadIMJ-R=y9dN^$Nwlz5z>GgwVwfOwMjaUJA z11!&8BcLiLk4dyF4#C2t4r}@Vt;@pqzqjvvO#K%cgvk{O8@3`s^Fq zi~>V*I%iPUy&+m+HFYCWatXGX+3I`l(XzBg)rN1b7$b}q0+@qt1%8xvVh-wvq|)oGX6P!Xsg9wG^Z6uuMu?-WxYBrRMHq&y~*!c-P>nvyZ@ zw(IHnIYpLgVbfORgVR@8@2;0id_Rd3%VBp^1xBey^7fzE_@60?Zw`k+V(F+fQM@fx zdVnHtiSey{^rh2->?_@{HbnJzX%itw)=zRfu{)^!OM55`VD05AhZz1?)E$08wO`l6 z_dTsU%Ns#PGtwIKBL3@iD@~xAKS91!4$E!xkEt}9!y7Sba~C(1E1b*Eq&S-h8u>*k zyJqAt#3$@MGHz08|DUkY{5@Q3;D-KHLYz5yVhU}HGslC=q$;nO{3~^Thnaczh`IK- z4LdS^yO*!hfxkk*!&}j_-|_~G@mtoS<{oHR0i*O-N^6j@xo;i+a5av>pco5$_u!-jvh$U)C%UFx|#zl0PEhc@6K9US1AZt-Q$=xCQd@mnROEM*vj z*O+A=@0?>lYD+NDyP1Z1xKYI%lBpdJ}0ONnxqPEj+TlYEBTsJZ^Ym8HG8*TAiqnYIVKE#8_<8# zNvx!J+ZjTc!Ci&<8|@+cTljObr;P>tEysmQ{~x68D^1!ZWRrCzTx0fj1#!bXj%``Z z)|4q&Vod+di@uw`iQ~U>zBG?!DyENEE^?7h#0X$xy^l5QI#rV{rfAqmi*J%LzqM0* zQ~$`)7;bY(o^&#EB{~X+-kgInIu%bk|FX$Bxp+A;vE^kWERH30t@xaXeM2~;*XS3& zy&m-JGXI$Ol@gCu|7&GuT`c*Jn7ahksNya{vleq}{)3CIx=51&flrZ;cTr#2+g{tN zn3}PMT>U=Uw<*t>dm{}Rw@bRcetGcXSLjwkDz7rc@bnNn4Q#n8bjc%i_KCbtnCEFB zNO-}zG*QH(ugLct@gV9r^Za~j>lO+RSF5z%uC`|#o@Dwz*^=Xpk_9zZ_>6MnBl%L6 z2}WwT?s`rEb2HfNI|)3c&Rdq4LKf3mXFR2lca^dXA3t0{(ont^OGGqac6xvRIAD+X zalXBP>S<8wlbO-;clpN%(|Si65}41;&2u<6Q_8 zz}2ODM~vJ^OKN<%E5ysKWkaSjs`8&iYxu(g?R^|eP$Ol6H6ak?whR*eDBOr7ah3i7 zI48dxXA7O2Nph@&b+IJx6f#baSFAsm)l&7YuQCmhyoPN{QN@N)pJ2P&$Nxnlma+QI zFO3A1Cl-3a+8zfZblO}^cJFQ392eXQt)A!W{+T!VDF|on#U>B(Qw%hxI3{-%`9T4pm zHQwI&CUV8lYkij;^OF?QAAJ}Zq|wo#m-$~a8Mz6`?tGO4Arpvcmlxi#o&LOQoo$Dp ziNge2q8;n}O-7?^4_|G508n+hT=+NSchwpwh|p-JUtpvVd4nNG#H>*SayGw>fk zi0%@R1pjqFNXKn`h^6drbp4r)oVByH3lu78VsZ~{LuXEZPe!Y@sK=wsMck^F%3`gk zHQX%A3dN5`ry?JupdEq%ozy?iSc=CsFefvtPC3TC1c7w_7pYO*9%q#AO@2(_rI=b@ zcM_y_oocPrPU}0Q$JjK3j{7C3I_IWpgdHS^5WrK`cw ztNuE4W#�`~cf!OJx`;E(H^hn3~ZWRt9G^k^|i}io$Q4T`~(e=+wQrPpLO~GL&b* zKVTLWvL41^L8-U>po}N44xzxQ8HfHll7%j*N}_0(^v16e%?%i+woOUrP#e?$%If zbm*P9fj|yuSCA52S%E0Q;nSWPXETs?W1MdVMNqgm-}ogAHe{LX2Q8%P3a|5AcJ?D! z{~nCK%VX@fIMnR_>!ZPLi+icH3~bNEn&&l_Go_ftXOS20!g{5-rYwB`- zaSR#Vg*%{p0RMFDz5a3r+Evy}1yV!Gev_TLQ0c_e_@_Kh?^2eJ6DM5h*b=KhyAB8d zrljT{$?Vd8Ds8RlYgSPwJ?WYzA1^7t5q-)g+-?2gB7WSVFuu#f_9)2*Epc?Ui}B4i zsJqYnk|celh`+N;Z(MI{K8YaJs6Bki1v6tTaxuQK{`N~su@#T5VIo^$(rS_@N5Hv6 z+$$fOt>y28KWS-tI69bk3%w18NHGdUARhOj8qpoIbr+>YBE}}pxHIcXO^zOle(4k{ zW3OL(#?|CL=^@j$>jG1|NoZF=BJ!MJ$>FFn(8lf2=-mntIW%JpEY9`-R7uJkizUsyJyKL1KWkyuJ9NzW)+cpo zxpz&*Au4_0=H+jp!-cQr)c)lRN4}ER_`B51oRWt5W))I8I|}z;;g0V-uA*=|k^ENM zDgFCG+QOjG=63bfTbKBsiIC2yRpdHvFZ}-(LJ30nzf|1AQVV|62F6{LL8DL>jsa?j zdc>g7SKd?kcpLB}d`n-u z+*=9~C2ed!O7`%r2yAJM^3E@StezqvR5_j=O^JM@n>(Ky6gCDfsq}-^p}IEjv@#Ex z9cJ7H;3DDk_ElduSI{je-MK|kq6O>(ne$HMzzFGLhr=zY2-7aN*aXb3N5k1UPfC6< z&(fP>B7&mZP5wJ@|0!wfE*>k|M~e`~caBcvHZta^D5u{Ayx(!Iy=d*MCA<{f!AM7= zWI-f~L6x&VsTJTrFEVmGa9}i_QH#eUb=a^g)l%Yf6L#C&+{~q)^K2Fq{~Z8sr+uv; z4=dn-R+V*6A^v!4eNAIsUW&c2K`-uaMS~KR+dW4A{=BYbyQuGyF~?AHJkLVGD?AoL zc+u1MGd<)x;>!`$F@B8Yh&mBs#X7a(h?o~y`05JL0%-jGPr+n!`rUn2x7OW}yP{H# zmMpQ6mMVjSw<^a)`QkX!jX+`Zw3zqHO@*53>`tUOU$|CXnT!p3Lu}2rt+k~Q2AIK^ zXWedXJ*l*5%%WxWy6q2r(E-)`cszCBQ#S_g$}$Zuo#qRH7{hOX?E_UFjCZ~%4`<+i zYJAcC(Nn?TBCi7X=(DhhDQmXU*zZ1u2hL`3HKKHLzV(uAI*`d}X1tWO!>k?+W=AEj zUsValCH$x@|I|hQ!0(ZgV|A6|l>wDyquUT#^b0^1J$j+Q`@QI)O6$brT%t1#v5BGr z%nEjP$TEg)+lih?0!1hxFdgRYRnw`yF#O$*NSE69-#8p%SnoGmD~d|A!c!79rvh|b zy%us&1!==c-CI|(k~iSYHqjKY9sr|fx;fOL{zloR-<{Z?CClGvvJ|bl&c_^{gi9YP zN{&pNqJ&}jAPgw@Z)T@Vlwn=wO4p^7RDMzPG2Y&25L)?$=cN~=TncT&4v)4Qo-0Mj z*jF(mU^Txf6us!}`1MxAv6<}k-6m<+XMR?L!S}xq;(MFF5tV03_OziWr+qo>^0ck; zETZZECu#pf`c$H_W7^x@Dcilla;$nze0=}>zg5aeNfz3Kqb0E7wM#;@|3gO!ht5^AbG7drmmT(s?2|A5mmT>J zhWL1OqhQ@}?K?RXU_Z1Zg$6$jsjvx+n;D-gJOI;8sSQL$w2IfJoAc-yPSZWrZHHwW;9YXB6e<2SkI~rRd+bw|6J3Uqk~9+%_h!EtL)6 z;mO>JI@FfKvQ(QQFrOicQ!+8_)8!~@EPhOGr$}m~xy7Ua=8bow1pn5L|Il}nS5tn6 z?mX}p7}ruTUv~A;6bx%P%zlO0KeqEzEp(Be#hrY!uK9~;;jO_XptrG^&E4K|%u#qd z7mO`=vrFCt_sAHu{1d1N8Y8`+<`3iY%<0ok-gVM}gL~s8vejFGX{Ysy#DJP@Pql6$ zfEiKEIU>(7a zVmY)scw0lP-Ls)T3TpQHH|76hG>q7Vgb>trmPQd9l}k^2!)Z2CFxz|H8rW~nTfPlp zr5`+!WzWi`#Vn(T^%6;a_@dmqUk)(@mYq;?W1Z{AhU-g-r-4C9q$HB`{_3D z+-skPreN@K3Glectc!8D)GJcpRecVQNGQXPM!1z+ZVdDfmLSfT#OjEKYiGIO=nw)4 zXi~eZ)J-OUnO*DjCayQ^ZFd3cnVz@D(aFz89vEPas9y)@Q`ETC1OY)n(~Yga;I`uS zXHVK_l^Tx5%@E&8Xs*Kq_b5EyMmEkS9qg6NQArH1C*hW9sTd&bjx;$JJ*&qcRFb+Mnq+ho!~$zi&~|6hmIk2PBxA8L@AT zfU>*T1BjGQYjM3UHunmz_My&tw%P6F-QG__;ARd5nkiH%!wE-xkr8rdwzg0ai{NAd zp|)=T(E_M+zQ3$f1hhCTKoXX?7!XDywX84?dBOhciNd?=uCDz4(>N`r*8nc^qQz); zZ#8vE%5_nd%nwwZli|(YYe>By>`S-Tb%*J2HfC`#osZUQDf)|`kN8x7@OU_P}&-QQKWu6 z$!Z=u@L>mZHnq4ddlz_6`T19&7gz>xgn2U56|jYz3P3T$zge1?j!MNl9xHtQHOlTA zq7?gmxB23SrL_>jvJNf#g~ETGbt>DN;Tvsh+||+#*?uP7i3qAn7ze8V3(FceMqY=y zc#-i5x!ioxnLGZ`Y?8cxU3bR(b8wz;hs@)C{4&X9p61?hlGjLtT*c{>-mJpY^9>SX zg#-b3IENo0vXM0e{vR4tcJ2-}l?(NU{=Ne9%O{|wL5K4<@0ix%k2a{Rt;C%uM=lc+ zTkHoBRC%9}{`m&EB2fFKo{>x&-Lo5=#5y?bMR|;?K4m3$?B~B(^kl?Oeuatfs=8!V z&F?47AGR1@{_4aDeL2&=?7DYU@sm(~L>wWrzQ0(U%dlgeX4$hE69E_`x(O{yt-hb$1gGW-6?{g~ zUY8~69O07i}R{k*d(@>Q-d%u9-SsVk3 zm$yzSSqYF?SB7lROM!VedWbq(F)?m?y6ULy+vNP*Bm*Uq=Fx_m2XLqk`|F%lZGf4| z{FM{YPn>f#30oUPeV%g9%AFmwzg2yV=I4s`F+8oGwJ|SkX@7E*_%PxIT%GptmYO?+ zq~`~z9-?y*E^fKN@`!fQ1hG-&Yw+Lu zPcs7qfSFf@$yit2&L9&LYL@RQn^FU0;QjPbwl|LQ)GvghIfueV($@|oGS^@Hem^^6 z2KY*U*zqO&r3@@6#ixD5H2j)au-Za&##8YRySh-m!Gp&0X4Ad!aR1a2+c-FLOiN_iI?$3Zv;HJ{;ZsPY+Dk{HsmGVpuf|f zdw;mBX#14oS7Qt)KR`CnUi*hM|3Bt=IgujK5d-_iIs2IISI)*$OXTB`m1>XXTmW}# zGR0Ri|3=DfCgp+l0;GQ243#zalVYmm(BOl0Y8NVvoN%k`k0mt+)KWADbS<#|FEgwO z`F-H!CE*=5XMjH7brUTmHA*oRuwdlQ)ZjOrag7LG$W#8Mynt=X(*tqzP+j}1zebSF zvIVUwUBWs3{|?qzT$<0JY5>41Jq7@Jz}Yc5%?X7F7kwjvVNuC}r=EiI4w={}VpOB7 z$9X~(U;ARxk{I=5k)?Z23uFE#>Wk+mVs!U8<4-*Cg%a2t0R{7`i{w+8&dx2;*>Q#M z*qH)2%M2yTk2h>;-SchZ}SA-t|3_fE+WUjs`uyjS{_ete`8-vk`E3*VeLOH zU7$~-^}`kI`NTV)xPA}&4OQ)8984+`z8a6IqspF)ZD}Pk;ze>XM9_3~6ze=EmaI%& z123+KzoIL`@q_*7AiFOp-s?PIds2uboO%L6<2KR%Zaq}0?$%KEg&dCCB+j)dJW%Cf zhNk5`qhFRcq2!ARchqJG4`uXC5+{-r$xb$z0l^9HVzb*^TaS>@x!v?cCRNOUU9*e6 z%dqT^fQ%cV%wXj)ec0A_nb3Z=^*-;)ZPTgZ8OU2?qiK=Ks@}R3{bJ-)#t+pv zhwd`QRrT#dZA^jVS`^39qt8Y%LQnJ4b7a%D=4D8Y@;?9Yz_C0SCdrQ7KPxjLbT*kg zxM3GDfdI1RRK<9UBeRC0`h)#S8zyrn&*&B1cYC?6?A79cn&w2H{WgckI z8!jJ~hr&=`fshjUyz13}OLalGLN6=eG1;%~lsDOk(svvkZ{7;7jx;6%0+`X>eP15! z^#9aqYnd=on6jDGeSWNKo^zY%Ho$mH`p65)weW;Rsc?Q4FA0H0TS@Z5{obONd{S^x ztqSj1ad#%aTZ4*zVS~*F1lZG(jG!u;>}1!9`lc|Er^1sQv73uaEaWMfJCB=9A2Dl&Acw7Gv_Ih4|Rmq@BNtj3G!cSra+NqYFecZwXxRktooS?vVQJ519<|RF-W0YNjkh8Ve>=w#=A|>1OdCMjDE*Vo~0crQt~G zz5K+i2tbK(h_f8}@Ic^2*7H3enMjf3lQ>U`aSUk4MRw+pUXV-=2EMIgPUyvnFp_W_^`1+O%6GYJuENV)pD<KHlr$h{wVn-LqL+RlrN;7dJIn=X z$_e(h6*jVqAGaWKMacY{d(32!Yk^PH*B@boeeoTV($7gOu zTr736y&L*mPnpY|{1aW9XjKq1?{l@}(jPNi>CSro!$hYTyKGca!L2{2gX;m zbWsvycYK9IJrjxReVpo3^VWTD1%CGU-)~JU^zKreGN04ky1jv)4&Tpn^r!f=u{j0! z(B|=lhiX;3)5lkEFUT+Mnib1+s?OEPzmghQ`IE6g&1~@3pV4mGs2=P9fqI}&S8#vhRS4KM{->!)ySe4dujVL zomJWH-#dy}Puyta_rNpvBWl%QV{3PktfA1>hwHAQ>A^#fp8JRD> z{{CY}JAE=yK`rdw3yZZGzjEAkSjRO{pG_&JznK#(MTZR}AYE``7(`1jx~SAJE~AS zQZuTRwRprgRN1a6c?Qe(_&q%pd5^M5d=;f1~BA^c0fDpCb%^ z)nV8IB)DQ=O1&wan@^?CPSG28V!lP{vqI*&8x4$LU;o|x03F=)Z_IN~5?$P0i;TNt{g0SA>BsvU zzQ3`M(w7!iGZn-`6Z3(>n-3Y5?f4`7Z-9fHeF@c4Q+&8CyP6y7&rE*9F_ErY5mPu7 zkepG^n2``=?7zK!bcra!3eg~MqG#fK)X zxlZkYxaFgD15f-UY>(nU8nQLxMGj~=sE?j9zsk-sqSX#=CzX8=Ny9rwCB1tJ`8BwN z;i#w9Hf4`PSt0LPn)euh#kKQk4({FYDb{(%70rInFtOePo6wZayPYNXPJ#!%F9e?7 zvuH#`E^&l581;glpD!WCFIgTdAIZV{29VmP$=p;%#n*2HBD?Sk?9RToBV`{@qGSfL z&4ktG4{e_9(n|0I^EgCk5dO4!(?Jg540iU{r}J=+*ji7%5afEW_>yLMtwg9sn>6ox zSG}i882e&*9D?DMb$Rj-u`h%d@&cYRe_bm+i)l{WnBP$pmpVJHdRvt#*&2~%hB`S>p{zNTk%elkz4H>zOL1Wu z40yUhJe8Z#Wfd>OK==JsnChbgpP?paa8SQ#)+YP~Fm2UNTd7wvpPOeqz;~Bag|J-p zA)@x$?@r1x0g1i^W$uG-0X6sL{G!*E_;1?k3WXnmsPU@fdbPAZ!#ip=K>I4A?hX0& z9b{VX5CbJoUnHWa+jedbhnMLyiJ0Ubwd&e=YT1FSR&!nnwQXDmTIA-<$1lCH-K!en z4c4ZNl`IkC{zjcqKoQ@Tm5oY1-iG^$NrB?oi%*Ovwowy}jmSa(F(++iJ~eRf0`J*q z)Ux*lL485YVK_u7F6}uP>3}Jq;bKgrrLtQ^)5r)7yk%|OaJwa*#~Nd|*Ma}R2xlNR z@pUi66K&{N%~<+KVfx0PgvY$Zzh2RP>p^UG@$MfMoNuW^HW z#;CHc&}jz1L*@8@m^8HlV4J>GGO-r=PtF~X=NWF;Ke_v;x|M!9ya-p zU!BQ##QR{MV$}Rb*TCK=H2=!jwysf2l8z3y&H!0g?s0F;aJ6A!ejLwn(n<#n?&MdZ zLqvxKe6(4w2MH9QV8$hrA6QYR6Lv4mlTK!tZri6yEt?6UwGP#mgojddf}2oBJxVM!b2h5JP}sLAFa0YWP-ahYlE1SI+ZcCG3&_`f$D9NaI=$kyd;t|lV-B7 z$i`of2wUd%F)ur78i4io?jrQ+aw5x|l<+#!pE7qbIyG;@P%Mc0wA}q)u}7=h-;cgz ztEbzN-Iw@pn9#EZdvargrV0^#6mx#x+%^`N_HzboEou|1EOQ4nPs9nE+@lmS@e_*j zj#4KDeopr>1HhTa!~m3Mr|X=*SA>l|?43(&7B^iND$yq^&X(M7*fMOVO!*$psV(!q zl{F5z?(ENEUAC+j7EUakRQ@BF)0q8$Ij1L;w|pVdMSfIUwRR1(m=WwWk>nx7ieFyv z{rH1};1{tvStO^f%jn4GzS0B(zm?)I+px7uLw*PJ+Ex6+5xkps2S3uCAtoBTx+^g1 zv1T+E;`^UH^g4R;*P{kjxN04TviNl5GUEx#R=KoaKa+gEunu9_FIpg-WlWT)bB%Kt zrtj6@N=B0(MEA8Is9oa`t6fsTRVp%B?y=qqnxmtdd0tt+Wi&DlQgF3gac{@`J|~1L z5;$(V75KyKvotnMgF~jXJ`QLb)DT zhmMzl8?=P7aCj{~Cr@RO{|9J5m%m*`Q8D_S+GD%}##^u$fxwP9zcG>V7q(xe`yiJ?j%ZvOMG27d7l_3QZ_nQdRdX+ z4xYU_Q?6|xnI;?j3*X@}FdX8YhLV$HgkQoeN#~Hr6)Y-(S6FHgl;Dm^e_h}+;k!6W zk`kWSp zJFkt_yhUV}d^r6qO~gM0MU-tFh1+h#9szF){&`rQkC|YCnb^?$JIav_FztEocy=st zdJ*hSA#9^>IZxwAj%*U{LapERd z-H4vJ@wS8k*@_5!F#ANAOsncTZXwDWSZcMu*}9(Q?bla&7JvW%pLc=UOll`Mn)BDd zSTZ2eg?ypr!Yx+)6f5}9=x!^wyx?^)JkRFVUwmLG#?j`W4**h*GVuxWd;w;VE=|_ zlcQV;meWZ6e4%M}VQrU6x=eW=-x8{&qnIw9wWd~F($A-($6f_cLS{qyi!fzem6ANX z4mpVdi;2e9s5euhM7S{a!jyF(I$0|qT$6GSTMz=iPi`y?=ifp!At|UQ|6LQxZ>wI8 zi@7+Z9WM98e9IduuigdC91gp{=wnpvMzs5NJt;ME`lTfsHKxEdL3|}6&ibnM7b*qX zfvR9}zcLr;HB(f;ecuF;ZpS^LPe8$g@ExMC`NtM9D=~!7K=^as2X?oR#Qf`KhiiU} zz?re>o5jX&CI8AvQa6kfcN1)ce1Zj0b0?VQ3r#P&b#qWp~yJ}lC_5NoX|gD33_Z>j-k_m^WQzRdPt(q z$$=Ztl`taAUw(7uc5?1j%0*X-tASahyB+`d?d!14!UkB5wdU{-r-nLwp5v!wJsnm~UwNJobyE=kaA_h7nQAqSxk5&vk^bf2RT|p034}O<9BVE|Uuy?Y_{2ey$ zM=+=;;OsL~p%9Xc7fjK+21nF~YnyzHAL;rUEKBIdP=dZ_@E2sk1Np*T^ot=$df{wf znYKI^p#W=k!m0;rw6y-SfTbDdR9VMK-~PT@_=*gjdcd6JZ^--0=_Hcl?O@>kLYrK- z!Ps#oFtq(GIj&yZclt-h^hfaBrUs^RpwbY|e@N)8aYM?ARm|VuHVutg8tL_O8EgXb zK5F#NsoRm{F0`5oddKlW@dK>-vZ|Sr@zxhV3Kxx*^|K$_B$3&8$o7ryTSM1!J#x7l zx2Imphe6``_kz5}KRY54qZ$(ukC#1Ql(okMFo@W;F*dOo1rI3#%>8kNI!XLIIG--4 z=~CdJ_h`W)%`lr?*1uBXFhgWZymBr^Uh7$`ktL`(#jG&&@F^~3y)2DWuy><-;^osw zH6N|JfB*mk+mTQvQ-LB=6m~ZUui!fBAF2cOof^lNddi|BA|D7Ha1UpG!ji790Xzc6-X#WY-H!peP zdUzvGf{FZCS9JN>QO!<077&!o;zY<`gfF)Vhp^MnQ`eXAp|N9Z4(@M_IFAkb#%;)$ z&>>Q|+Wxp<@Y?EvG-LR`;O()PvDOT1bh8Krl%R@V@ZSz_Z4oNztDm9*Hn_kVR+GT* zK0ZFW8u6QNjx#HXLn3t{R_E_5s!&GM9GK|UowpAswX4o=h1F&1nB4s9`Q~C<*;5xK z)8`DlxsY`LYR850R$Ze?y zFN0;&t1+3p6WaqOHL+s@WFqL$UqangiD=-?dk~oYqN|FOTl8=E;ptZ~8QU}H}pO?c=^zQ_{xtN;K57;TUGa`^r^x~zY!;J+?eQ4&&?mEE2gwctAEq2X8_ zU6cZY6#9@4pZCwQI{t}dYqHNWJ8%>?pnFA$+keX!q&>w}Tj-F({UQyA4q~H6#h+3D zSjtJqRHI=eVJs2tar8ppKZIU2!@8>iGc*eX>q%EcCv}2iE__GCo_QBD+i7gBaFuV) z#DqF0d`QewmNO0MaFHie@44RC0H9(H-;{9=0Kefs3DNb#f%v}X!I-?bSZ7|hiIzZc z&0Qbw{);mt?*Qj2m8pbdd|}yQbgc!(gHRZ1j(R5(O@dl8?^=j*PC~%#+NB#SPE3tV z#6@!U_bkcD_2Q0Aeh+kQC-~LZ%rxUgB;thpI2XqOs1X z!JuVN7;g5DE&@ZCo9T|Zne&V3ovvJ0(A93>WB@KNsA#;ye1nd2Ifl-tOBFV0drYWI zvr3e9r?}8yP=>!DY*@SO%)L4yd9%~yvnqHXR4g%%u^D?zAWnN4(%1G1Gy zRFe0yNV>=w_;^wWeczvJYA^s(Fq83ioGx6NOwFuQ9?hKaeX`G0zKq6M3@uEv(r4V8 z8uznC=#5mMH{k^qOaO~o32pJlWpOBE8!^jave5(*0pfa=tLB0u(+F|Z3oYbkfGejN zB?U>!qO?u!0;6~mSSp2RM7q+qxvT*v-#IOVUEeeglF1=0?n)PM*ojBap?R*}t_b0} zCpnl<`kYi9L`zeS5n>Zuz{ky6>x`}ylcz~@|Y)5M)%8Ic;3~*p6;lTJtCH? zCL!U98D0b5<4_ctD%K5ym-dX-3*-ac#`0!TvsAG9;u#K-pq+X&H}`xY5LaEr^NTo& z?26J&if6H512@@t7IIppEF3zF+qrNVxO7FM*a#pI;V&{cI*pPa`-RE`<2SgN zq!0GqV0-oYO-eT9kV^z6_5F)no;L8{X|OC$y4!SMAE*2~i!OlS;vBU^G+|h|VnAsS zAK(FPNM+EnGF0P!NQii9741TwBesl(5+{Hc%oe;xT$)dO&7vKa9tZo-8#JObQ>X`# zrk}qxM&RPaGD{SKE-kc+^Wq3JY}o&Y3b7v=V!#DHoxcy{H~N*B)Jw(f>H+G>;2cYK z{N4PuM1nIZ!#-n7j?>C#W#gv+004g}*$6NP!u5L~$eIG0-U6iGP3E<@`QlWCG58r< zQyA*~61L#u|CyX##_thYx#aReIGGb)AwZ~Fcy$t&e@Gf7j|gl7&!-f9q3%RFs9OgF z9&mR67Cr#^#1zi~hNmmX@Ln4Jn;5J3k+Y0bycveOU8sw?|fVp2!EHP+N2MK=6Sos(kJ=($qVZDEc#+N~R3V&Sj)P*;S5>2gCq2#sV zppmks%hsHArjGXRi7+{wP1o+Iq_HdsepkgEL#?fzQ`OS6c7Cpk%=#6=UdeOT6$EeI zT_`6!rClCordB_H_5V892P#5@JRPW8C`~%)?J70dBxdo>2sd)I_ZD_5qNbU zgn@E8F3SyNA@1onvvM&<3^>4kE0}ZQQX%lT$<8N}CM;atmiS|*77t? z!}s6GLP;#8JsVxURHJQoO6$yKNuSbaMOqC>KUJ9YkH)GNCj~|Kc}H$dXJYgU6Cl;J zg`VU4jG~B_bShNQXS2|{rF>-zF1<$X!SjvV87A@*<|~k+LS6fJuwN!)G)ClJRvBnM zSNNrWkN9gMA<+6zk1{u*AI^dWO$` zl7~v1_wWul^WH$oV7)zRbX7P!qrk_d_v)8G-?rHo2f#-(Bq`_*`>fZ0ITr`a2SI`6 ztL-v$++GOaM7kczK}R}@LOp`>*qCoCfBN{xQPr?kzyJURV#)57ue~r>WY~&hm~9X= zm#R=gkxI9$6l@oO*czD9V?tl3VCZWMk|!%Y0y~F3Zgt(fWBS1c47i%soc5sS}^5bCgkqKXghRC*tJj;@TXbU+Ll-Owk#Wg(Gm+Jpd8VM0FOs3 zLYY`KT};tzWSuXAdeBWt2CeiE1`-K4{m+g|su>TN^Fet~7!&JCetRLU+AS5f>t~T% zJWUZCzg$p`Ia@J<9U81^gQNc4Gr6Asg=F&BjdPsDaX5j|=;Gbb>)CL8bfQVn009Ly z!r6wcNMJXvm21}fVC1$W!?1=@fvXKaF+SsLDmb3JHu!TGPIY4Z@^2}h^`h}E2N(|k zNhY-yemSR6TSj@5^djxnW=J9cHF*A!od`7<9i)9cE22{eR#OOsDv+?9Mk(aP&pZ@* zukbKPvA|UA)#qKlYRr#=p)h$$qaG(Av}3BF!T$ZrCZR&3z`p;(_UiF#q!DM!87*4? zV+zXJaf`YLFP!ZfLm)*!Igmm9E!=U#ay}%?hIsEZfQB}vLB8rUd4-ANe)I9M- z^3_1AtL|e>XRIK@SNEteNE0vJqFqIqWHksNxfx|Nz{IboqN|=(L-ZD&0ihg<#YoId zRE4;WC~s*ZaCb;7sap}rdTvtAhjo#tXZf_YawT5l6=^GguLnTpUtlnSuoRK-XeFjB zvvi@IK12(}U5vb8p71VYF@}rMFOloI@ZVV3*K~bUkIFbLdpCwS4ZCr!klbleWj#zI`1@@Oy zDs`8Bgh*)`=Kt!;({Zr{BP3qCER19&9f8WEpdFwsxzZD+f+?Y(BAkWS0>M+W&i*SM8~p? zaB(@F3CWlE=;NmPNTWtsct_p3fgP+Rt}LP?^<`y>&$XV7ig|h(wnYn*XbNq?rgYUi zvZGs?kj+z_EuwM{VG#}6p8Y#MWQW3pBn7J}ddGicAhszyJ3>Hk{LRe$q(mXFehtT_5j)dNuav_$<&uv|qOPWP1TE~U zxj@Mec+EnQ{ljy&VBr1D?!+CY-i$yg_~e3?u9tn5vF%*YT$Fl(*pv{?m9J&qz@O9ue&!7Z$IO3-opk@@`SeCw{dcM3_QLAiz z8T65f)=o}_<3S^5rvdQz|DCjGDt;TLiAMadH9BM-B(&%F5%ex3B&Eb+$0gzSZV(B6 z>^;4;13$n{zW=pHc7@aMA?-33QFBa3upw+z;E~J?HDHbRS#364IlZb%<*g!A6Qq_rTVwNw#lkncQ*sL z_RSIgbbZiyxf2k6t5pWI=E_@b?UMVA{@!<+X$V8_mAEukGFqDd5!OB@<`~VPCLZ6Ae=bTqkjP9F?rZQ$aWjLK+ zMGv9bGD8fdqIm9;tF}JL;gHgG%jIjT2l|aB+#=QDi!vn>$ifqVxDrMvYf%M2mrIGw z8Ir+3z!((|7ag@u>Z0&Rf+lUJFCRYH286C3K_o&@9>{KTRc&IGPCpz;Qav1@-9+U`%Un@>1JsQeb-4+x%tVIbwLU#n`)32YXnAs;j1+ zGNFClx1ChSuw6Ej{p3{=zq@i&X$z9ZWWur8q}hCTrLrzY^V(6ZQu>;wHG=7Q-m2E} zuVKgnW>(F=YFY%?GFUQ$kb~o-gOw>`KEfGWY5ha_qce$0Qf1Xy1|C*BpHv~72wEr& ztD=u=)83+ec>+0Tb!6~bhO#R=MiT%JZKELo*uY)KL(frTBYEQ;lsuCjxh`&4Y_4$l z@y_VxlQ9P*0bw4+FygIknA?tSYVrc3uZ?y|C(>4DRUM69+}b-3$x1e?v3{_nG1E0$qj~otCgTHgCQCSL>b^b zt{OG0QBz44)2G6u;C|2m08N82R`E;vs!yYUscSS4j$YU0i(GPw-&(6Fcg*DdY>zH0 zqm$&`-=3l0c|#19!zI!s`>K&eED^$ggYCAwQyvi zsG*dq??$&bFf9{*M*ZqW(4d@F-;zRKv_iC^<4j=t8f6vxuM0LeM#}Zt(IMg^3tX$zVC80CJQbQ)N>cDz7#1flj$^pcOO=er;C6AP0ZZV zuMmFF0-I`Y67lXq?(m3x3jqHS(5X}t9_06&2)(468*VpTe;I8sh z3bDe~DCE{^MCN{2dqI1WqaKEI# zyZksB`TP2+j4zqjA6gWK!s$))yVgBo1PW`e3&~Nta+i_3Y+`Wh6|{mozPNjS7YYN9 z9Fm~p-N}wVESbiajY3vp&x`_KM86hl((G9I9Yp zr#{eY&YUnTR`TnBIjD4e0a4siFXReTZ`wuBZl-Tu8Pp-~pn_SlGxfMT85Zbu-m*J! zd#Ckw0UvjZ@m-;f2%suRMf2UVm((RI6tqUH7{B?{K`KZ}YQQH-O&1$e%557Pj9_Ze z(8ACkEQ!5bFlZw)ah5 z-E;z$+W ztzX(ad8wgzKPwLG|1Mde3_JYqsd7-_*cJnW!cH3hL@HK-h5{3mQ2t`2Z-+;{nH zbSwi)T;;4uo_CS57O}}Rhjio7%sv_?2GTUVFk_rLyF;t(KjSbbU34^>AZ(~O?z6Ht zSZ#rq^!x40sZ*>lcZlz?W~r{MrFtwnJFTd3sF0*5RW_w0rtl{{sU zhS-|$*$}SH$xh+;1ji+(>b*sy)+tf#Hhz4`GcADxsC4N~YO@hb}O0q?! zs9Oa2|1b)p--am4Od91jjP7!6bX?`FqVMD zkJ6Yrz3t+VOlPT7iuOWLl=HP@=}zl z5to1bK?l33k;WTC3Eab`l!Rc}W%*B}3yDy&)B)MRp=H;&D8ven*Ai+%hx9c+J%Fi5 zC-~+l`KH*9(me+sg&t+swWK=Xht~`<(X^*djhdGKGW;*6R$K{5Z8BOFGMS zR6)Nd<4vGau3z8_0Ai~5jV6LVj6`C39|3OG71re>)DnuTB0H$W25>x3ibWjA-@Y^H4RmNs56}lpmM#H^!{f`fa}-%U zec09)j!kz8=qDTk;(c(OP80CwpuYN@aP~!xPuA`srrNo2+*cEIgIpNy?aWe7%G}~H z_lTb(ak1r@=tG~zDv!R1Da*)V0`1FiZ6QVo<+R7LRev_tRC>A%b-Cb^5tqs|msXW)}b* zXxcSAo}Bl*zg)PH9eqrHa_i)<+R*)HCzc`JQ|4s2?s>5l=_zxt%dp2~iTkZ8)$(17 zvmj*G2-Zgyj^0#|mXi4X39NCre-x?uo#I=>-YtNFxnS%4Xx`XkkVH!X(`}ANs0?kb z1>N9bX1A-NXSUpZxk3}1klFvKsptgAG~#SK;d9+>GT^0vk=3vbE_k=Jm-biS^6_|1 zK&P@H6^KZN<+n!$``-CHJ7w7%xHLH-6^ei^wP}Hq2k89bJaHv#6uPO;nw5qM;r3$8 zDj60{{N1)oBihq{4}3E2C2wC7)Sa*>LC2zKNR278qm{VCSQzv(_C|Gk26)(P3i($h z_`Zki8bo1nyfs(4sWL{l!cekI92wrCu{@PvR>J=-4gHZu+d{5vku87KHzzE4hi6zh9F+v)vvZE_iLeA$`d{JKA6Gc} zO5J255`X{zD{Akx73W`4C|UU|5VilvC>m4h`QAEStS6T*#@5BUn*wOIBU62d(fsyC zW>=5pI*YtyrfHqV#!bWovIr~q(gPHEjWTL87buWDE>VvZ$f^jzvnG%Vqk-MWVX z$}EC;DkPrXdYNoTHDm|heVX5$68;=AScAhB zEDnI=2IQn;pne=3dk17<2|X3hX z{n@JE94m8ZAax+?3FH|^81_eRdF=-NaKsaBg;}kb_uc<)Ah#qHf^F^aL^v1*6jc5k zu_836iKzqQrR7+luES)Ye04cPbqk_3{VLtP734Fe-G=8QrA8|E^oN#Zz=q=8|F-&UrbCf(q`gdiEQE9Xw-|^d6aegy z2#;-D26K?eDz9Qew|J=T`)egy5-gI;Dvexn`_uCe-IY})H*;<Q74s*`KYyGtx{-aoXBUS(^7pwWPfVFO8QH5?pd<&w-~IdAV{o-On^_7ngVuXW z+-bTSa4PsrOCSjHFLS;QQ-@zNAnPLv!bIoZu#NvtIA?u4l44psWDeRuf=oNMr2RzQ ztN10fQeggVUFb$ykaz$Q5n}qW?R?ke^jD{$`rwpqThdHGkO0h@oqABaSP$?t(~yn4 z8<{4SNqliz4}#@=_Frn42FH;R^_vflGpphuzI2ax^4#6{q(RO0(_5!MLt&}Fs0%@V z&6Hvlf(HU@S#bFWMkEpL%qY@QIrD%mCTOvQW99=UhMm5?MKp4 zf$5O&?uEhN-S%4^doFw0o)9LNDSuELkSUR9yXxG7DTVpeeaUr5GYS^aorxl7*IepR z+bmg#E;DK^t}95{%{fs`n3r@~D0fEKcRA*fU`c;f?d$oSFFGYihop15!3QMMu(5Mp zXTiC=3({|tr(QPJtEW2zZ2FwA?&UA#{)m%FI(q@I`Xn*Cv2Flo`sU%Axp#tTg#2op z?jHNSoQIM8nS@Z2);+;qq@E%HVx2Wd@qV*;SHs*-l*6r0m;$q(Z2kVL zE_jJjBZUd-yyNYDDRfifa56#1=17?9f7|{;yK~zyjHa>?Q#| zmIR>kUKyA%%g_5%<`V@*L2L-_BO=OK+AtBXdHe9=UF7PAdLE9XtCkoumS6Rly2c_Q zi}E&4OXzvLq2_L}Ka!G;Me77TE}DS%0;JVn{zm($S_26Zn>OaWj?EG}F>CDz;3ZNf z==Kfh9K1dfV^LWU1rA?dyj)d_*x)_f_K(x|edYEx;))Ob5P%MtuREnoJuG0tRhvaW zD1h|qP3ajdoH0xJp}^gGq;Rg_T1|yCHnvos_6tgN(g4HNKzh}0Jz(3MLmYt4Y+siz zJ{lMRFaer8ula!+6p}xqgR!^t09Kqak`V;TIUSXJV*VT>TtNDm#?2tB4R1fk%d>8$ zZ%3QxL0?{EFWP`anrmkli5&3RA7B6hDX40G%9GuqNEQ~3dqqT;Hn~VV zxSI)gi^;1(B)4gz?Vtfm%zq~;=ZkyyT{<5`%ntltnA{MtR;Mc+wa19<=ku@)DLAf(riZp^_EjMAnn zu{;$=CI^~>c-E;%UV9WnjdcOk>h*@8a%=kY>P}ku%Js&CbMET|!?od6mX{i!T^5AV zM}FriJKiQl-1XITL+%N3h_xWrA~dR3+hBFb)?o6;28yx5TzDRaBIJ(b*F{d_$@**n z9_(h7+{y6>ue40IMl@bZFb#){nu#jxePTaDGwo*ZdV7j&%yKhnOGkQGt2ldZM;e}w z((EX(Y_8B{v*ATON=MIdwmxsY)Or8On*YSF?bMIlPs$;_qa&5qNyVb&cCy-C?45PX zZo|`AaZTZL|F@62Ws4GFC?G!%ahf{0&aBCP9+O;Xd5BV)<~HX&R6LXt>- z(Sct0dV~p;Nz|n0fo=AGoe){C(O!0d?lNB$5Lq&vbq&ox zBVJg3@0nDHBJs44D9ld^TR5CfJTrr|0-+|pB7Tn3ut%}%w>-4M@!eOmP*WVX*4u?4 zP&qzgmFCv;Y>PglX?JIyt_b6NsrwM%Dm|Ny*WPHJrqR`w&)x0I84X4`DexL6VvV1J`Y`&7(9$yK3C&wak%ipX}@>)tOHqG zgp1y80$FkW-E6++1pwaKa?N^*5V&-mg%cft1sxru=!Q=K4=^e@7(SKIx{pRB$jB!ZF3w9 z$l3&n+D>n|yT?kVN@2S|K#JI}t6zU1z2>tH+9aiX;l+00N=O9Xc6XVdBtoVQ2}`VT&H1JSJQ$b=dMryPq&&cMsgj=YlFFFW@B9*( zLGfo>3`Qtg$E$~jhsAd}1+WY)VH6D3s88_RkQRE5-frBw>;)a$DZ#4F1=LnOQCIu~ zIbpx~q=RU^DXS>{o9*BY`~dW3!5b+3A|%^WFz(ZA$2ka|E;Or$uK|U0_}puDk8Z;n3*ry1d)4^+@Ha+AWaL1dlrD z{7&Jif^h%<2GCC}e$R=-572ZaPbxU0mb@eBbQm0yHl#47GCcN$B}3pS+DXCKaV9Z` z{ybBp4S=2oh?@HmP?gwD30bbS!xG3{D0najRZ^l%c%4E&@NkOC1JpHL=UvRh1M!T} z3Z@lBrn8yrQEdnr9V*_66{vyBXD4c1JIyhF8%ptw)O)yaDAVDaXo=hCCbty{r3b#F z`QSa_CtchfR5>zRWCV@=%5I+{4G*sizW)_;ty2|!L|u^CDP1kL%s)GqzwNF#^M5^~ z!!dGW^_2H<7XL^7y4kiXLIYbFfqKP#;nulVhI#Y4)flAyou(yZW9Gb?+j zM7;qQ$iSJH^tHDC*qkkxIK4#s{9o~7@! zVP#5hfj?-y9K>GVKAqEf>H?qaeqC*x=dCsG8z&k?PswIz%vQ((fNG!Q-5T>JEkq4Z z+*D_|-4YVK>1`e?j77k2p_Q?)KGgkS%#uPI9+vQ1I2tBHCmMEvvmP5}8f&%;xaJ8_ z+cWvBQDH^s|I+>w&dKn<-^H!^obrZdm2KLVN8U=shk>PYC!6G;J1`UP^c@@4`I9fI zIf%Y18Yg7xfA#HiVvNJ?N|O=e6`P=|h!KcQMKG2!#eIq2JT^Q65lRSDpTJsY1fHXe z%b1m~7{wMD#jle1t?N|=ex;WXn~P8q*5uY&{X;Mp`5I6Q*R9ErpbW~ypsISHA}%8@&cd7r+@ztIX2Rw4Czdr-?$IiLnU}FvxIY zsfD=CQ=Au1w9PVfijVG=0EHkN1V=tDnA+^&(H*K@%6L)yGXbwI~Mh&n5p0J){S~rDdGU7=+A1fYi+urFaGP z7ehON*jG6Q;?>c#+Er!Y=wXroj@`t#X?D1w9s|blR+Pg;_l~3lGj@Agyg-vR~a(`J6Roo)mMsWU1|bq zZ{_N&R5k!H7k#Mvh(qoab=QmrrLp0!5V|o53VsU+d^IocZ zVeIq!I|GiIue+l7QoqNCM6#LV*mYwG8+ne1hNbjLO&mqVZ1{0H#z2^E`w5Xa2tWWn zUo8ckj{K!)_A%xYL7XF2W36wkXAzC|f~HOCOQn{BVeSbz-FVUDuqxfbl%O6+#*~Hz z!=xtk1_VPi$f8ieG~?Nzl~y=3(2*q^EUg4qf1%2bKnd7({XVFa19$% z*9pSXMlal|Ll}~;v!HPEkWq$-Ng1N}L%$PzhDG=?I);v?YQhtX8b-HoBFOGhR{@Bl z^iZG10j4fa`<3#$s%Fq*HhyQ=ZvWB&MXdeMvy$`G++!tr?kU=}UyXF?j$5GJ6<-uK zY#&+pUt4#0{(g}ZiM$FpF9m>$ZG(hP6M)RDxtE$(iqXqC-g+aAzsLOtQ~?JAkSOE% z)2-67(#)ntvfaS^iC5{V<4*2Gp6uTXV9bebt5h%*Ct`RI5smuc|axiID+ z3M%FYp}Jl?3m$Sh2fv;a5GN0j3|0bZVmkGKphS+Io+Px8I5(b0OV2fw4#VoUR0^+3 zc4gFN($)dmen<=4ps)U=1CSGUyWlp+5vQcT?n1ychhf~9yGFFcfY88Cn0qix6iY5@ z1WKAllSkk1!C*T2HDXARuv8o{RJt@n4bx_a&IRAasUUU zo@JIts=4VbDxz{H9x}z;^*&G$X*XqM_z!hUuWjJmFEy84Zi8Hs0((Jgw)B|v73NT_ z$4f-Cc%N*~H${RFvg-1II$(zyO{{Rg6x$p*U%0|6qG{7f$p8pR8nikgLi{WClp8GK zR+wCC;;wQYBRBq!&}eNM1GFZ~hq9nD-p_cfd{E15mBz=%zr2~;QBVl;^1J^gRymC! z9O8z0bSu9E-K)@d<-GmnV7M^>$;#-&@8v#N_t&==M3Ur40oznQUOb1_TL>?6Xg0+N zzFW!28c7>y6coBZxX>U@6j6V=y)V259EBa6rZGrLdcrf z=>!)y*Q?Iq3dL}qOVxZB-#nzVPPH*u5o$@kFkzZjb3({CO-!c?&VRzX1p$rxlq8ss zt+*Eo>E21Yi?ZnmKY0I?-Xh_HQUOxC8WP?VjPS*fwY1ggO*ND?#mH!U0KR~w_%`cy z7y52BP+j<;;t>xC@LavO7>$H;M=sY0Ivk=Yq3mmq)5VjW4}jD3Ze%)g^eMAokbrLyLbmKxfIY@pPr9UWGo2wy_u9MxU`OcuTkIF; zm9^QiE=*K0r$$%$fhj>u(2?MejyJV|tAP#2F=W z%)Q(x^4K=sO=0YL_Y@_mB^rKB6cn5mkD$$fWWh#K!`Zyy_`u{InSQxCqCgZBX`*+A^QFjfTT25tsHZ$>AS=Q*gX6 z$n((VFiZLus*#m3h5^uTkP|{3LwI{rax^JhE$$+-(FS;k zw&DAwU9{M z7zaFh0IRhl@p}F%z^d7Xl zTw|>hlyRK!$~fP{ZcR2%B#N(mNGo_ExrR}ovCJcft>rGmD`o4tCs3e~8fFKrIxjaX zKzO^gU|9AD(cmGu-C)K$(J>Y%dY*wH&9kmxXbmal-b387yONmPJ1>B{=`7KtDyl^MjXT!t*C;TT1^=Vr~}GmHQ0 z%(?%Qq5gc1zvhR%sRJNzCSB&4_p7QVKh(+S2nZv}FQJBa<9eo|{oaAlz@zQmb)?~! zJc%i*%Ml%2_-Q|4d{(^(egv6YsyNzoRND}_OZt_X{Ntjji%eZtd)um(6&hoTg{3;r z+&w1uq!Wz>(Q3Q#DUCD-__B8ss!duts&sV15yRxg2>m8DPX!HR=oVTKeG`QzGiouN z=oPArCxRp8Z*;;+AOcrUlPa~yP>*fZcsRpid0&cua_b#ci;7AIeHdJ=!f{!Bk06XW zE_!%>S&9xA`eN>lPg3dtq?p7!pa;TH~%9s(pQaD^y zHo%0j9sCc&?SjM|kDvPeYV3j)&XiqsQ5-d6tXe5|GOUMSo_5$gETj*c$v)hUGI|2D~-! zi(2SfJC@32gc^y}_&l$QS(Mce6~IjiY%juDPfYL(Jx-m5Uahn+7QFONl$s4ZoXD4X zB0JrUh{^TVa%5dKrx@(-If<4F44V;~mxy{?O0WJCcqdeo@79mc^Z%iOUdz${mSj@U z3ng$T)gd|g(gAKBGrObC&SXzgDKzL^@7q0SdoJ^_6UY^z)Lk`M6)70*H)tF|M#g_R z`dY=F^?XNQ1rQO6OfZpZGyDL$MkSYpA)=(ej@7oW#3i%-MVSEj>G}SRZRu$j=x>41#Ku{AVXI3OZRgUAM_84?h zY!Fs*S~?yHJO+JW$&Kj0ugK^h^#q{)O3DCVK%l>j0Q4zZjm7Mgl#YL}wjJ9u(B&md zMOP@r+4bb#6{0G@9^s@`Prh$AFRr26PLSZ9IukXHpG}o5cfHb>3z%&UcuC0BA8Jrs zd|A8ao5lfX>f4{p7r;%E>5gW0t?7*PNF*CMgNP9_I{DtSa+KBSz7lF$)~&|D0u;UU zLNb4ap};8eD1Oh&QsQfwO~1+o`cyI>p0RKltgZaU0*|OM@VJj!1oyG#v`|8qx6W$M zU4RAmKgz`GO7b4*ey-8?g5x&eKL{zDfO2pe+k^vQqmzBoW6y3?ksCL&r)GF#X>iE( zh6~~}x(Jm}ca(!L314=pZpJeXZWH=dj*4tD2hT>RZchlz`1z(?ITEw(U-Y1HJD+E6 z56j<8%=3g{p&XKC^C|9rFwqD`H}WYcSWgVdd^WK0ZBF*m)=?N*$8WR_KFz2fsLsC@ zK>6bk|6$L=wn*5_bE{C-Kg(6@lVbB%+Ca(<0!ZOV=T-LSv7y*b`?uAiPCB?(qU{`#15 z#obXaiq~Q0txC<)!UVetuC_+h&DJVSd(>ZXFI=*X_mzYFDgal@cy?^~Z*XMeP=;us zW#Whb&)fWkLKK{-Q$HLfIF+z)k(s&C!Q&l`W^0l?LHE!aSQaqBw5f2s#wf>Q!sc$Y z2zkztU3=bX$ktg)$vy6h69X(^XqEvVF*01)^WQK>RC9jv8mC>$p$6FFz)P)ii)2`% z(^zlW%YDg4D1f8bmAZ^Mw2;u~gVVq&sz3@TxhDE$qG8mg-$^zB1Q$iHO7=PW8j|8A zba!qz!xj93x4=w+rnH`#NUrdgh4h%#kY zET#t!niYk_=B4pG>G(M-cX@1tEb1dh^r`7Ekq$GKi1CW*L{iZqc>FW^pL1_A&M|7R*9PdtYfIiCQ~ zYvu;T^-b_1l4dpAIA@B5OMxx$KZ2}XO|KKP*|u^is2B_+)Zlpq1ryB`*O4WX)vX1r z@|8fE>B$C@q_Ey4wo2ESg5ft~$R?C2pFiy`a4jkIwBU>P4+X}+;I~XZ$giZJnzq8X+t_yvs5vGyBO&v44a1-}(TY>32LAZ&U&GnUc(yY|{ zN}y;vbBl)!ZTan^@rs4V~6j-+qB_&YMPudRNo9mu!Wkw9cjtonkJXjQM z9*p6!t;kxkx%{=I9G}n1m%Q0o;^ojk=zv*CVzwHpqbJpsud%X4CI_cfU2EU9gX@!y zo~6*R5=i8OL@7q_F6aCc%Ag(JW`s3gGW>V?`{sBxxAxVAEMsOd%U|~@x!s+UGF)&1Zo*uX zd2{WYH?;iiNV4`^0015Q+t>tZvSIPCw7KNNEy3@U-l1i{lQ|`cW=lUK z#<4uEE=hWzdOf5grl#-sS1*L- zwbxS&34JNmd>3wt;vWKuuo`A9>rj}t8x~9PoVFr!)`G$}tV`U-pZXO4XD4Xy$lME0 zTQGoKMoZ<%06LZ#sRg)i2{^+q7q(FC&q-@tndF_HG`&pd^wPglhySmCGo~5K*u>>~ zAL80-0dF#v!JOb%gGEv~7)0H>*VgvkgU))#5Zk;A#dnQNjHOdneTo&R8|>kz`nK48 ztyMt3-YdR}b@l=Cfe5rCKB%#2+A3sNn3DBA@<6rINcFvPl|=C(ub4Lh+nwivygRCZ zGPZWRyoFf{@-&VOS7asy48-~R3a;-F9qk6IoA~F0ri;RQl1)clpW#>{Q3OIs-k|P4 zX7**gW3n6pJm-Ktg?~Vd9!XT(52o7LD9X)=&vZ`) zS8;BpajYvqXT2p@nLBE`^O#|ag`%9LYp|AE=9@ z|4#{+fikSMD~_D9$C`p3p|FXoKD|;GTA7$6E1v7J(86h>@A$`FOFSd;RTJr)6n)=U z(vZT;FKC}sLJ*?yeA&BQ8e4elkb^t6l#RiHqc(Or(;=^nfHSLyn~@~~iam}y`ZUz! zziQRl5uR+@=#qFn849=szMdnCR~Kj5ZUXo5+2t?0g#|7E973wqZ4=H=T4H@Ik3d2Q ze=#D@Z)5PVslzL~#*uA>`y>>aT8qQ<(fm)ikh;Rk_y19eEL|zMEE(EX+8`*h%C14{ z!%>|ML^_a*YU?BMq~hW2C})J1rT z!CfI>uiYkFV}Qq{!(O6KeEHPO=b@e%$@IHa!6L+sv6Szt)|Ph0}OBFh{r zS|=8Kpc^=>R&Pm-S1o@W92IKFmJuUy~=15c!X^}+SBIm7!C?WHDA z+MeQD^3=S6dCWIE^g2)2V1Zv?wK#p~HX9sUv>)0{A5vE!yHs5xI!A~}=_u_u92N@1 z#S(jd*wrXrR#jKOv?` zyPFKB&IAa`SuC@cXXZ5I{4!?Uj&{h3yW)$d3!UvOhRBe8_5MPz?0HUT+-`5(fW&-P zt4rlC6u~B%l2!a|WHlF7poCbiCo}WD#{r=w1Z7L0Pen!nwyee7vQL4C<{741^uv%` z_b3KOrk@7UF_{y#o{Fy0@vrps9)L|)DmXCL><;C1sT zyD(X33PnK5fhnWItM7pc1Orb!H;Yq3&-jYUOj0mVBuy|)N|Zlaywvbf6mp&scW|rT z?uijw)+R5Vgl6(3!0}EPLmnKL*muu=2(k-e;VKA26q4S4MPX`L6a%V{?#RbbUhYPY zSWipmt?IL0CHJOB$k_E40AtA~%BYTa!VS@vm+jx;umBJa=Dg?&5cTt&(KytM%jSv^ zfOV#&#O&yZe=5Cz&z?2b0_r}tPlxT2%3*1)(jlW=>!?V(9xwy z&Q?V?j-$crmm9x92 z?@x0E?@-%#kyHA=+EBJvIv9uCxD>w>Lns#<-fO<;=Siy(_Z-bhVP&~~B0S1)1-;Po z^B=>P-)7@Yws^P;7Qn2YNLLtvL+k|Li@w!vuSk&+$LGaAG$9LrOj_8a%ikjyHC}Z3 zm#2;9oNuZ5JUPIoV7Y3WTl+gdr(W}ymgtDOusyF`?z}UfYaRr8Oqddyt2iNV7Q?5+ zOW!Dg>f4zUjUZ8m>UMslEpY1bHbLX%OJ+a-HH$}EN0zUO0lrTM)^>7t_EfP9r&^st z3(EA9;A5}sHoo=%%_pF_lk@`>vw%hKNk-N?@(|YLcACNY^XiyMIK3QOO_Gv{jfNEh zvyCo;iH=(i8V$Xa(Q4-po6wvUffp(8WF?xQm^Dbg<^qTuULQXgKv8M7z=m*j^}6Q> z##;>7D}F!PjfCLsV{X-bMFoE4cm3?M#dLK++4|P z(+e<00*PK5N&X%U(l8P<f&B`afi($* z9|#)K7VWwyioz@1Zq!HsvDw(67-cDS`UJ_t0CWB>-%esRRupRw-;wlTI3}l#5~WeM zP=Fb

3LKr+m?^`Fz2vtiLi7Ep9sn%y~LKWJ~o!1n}eMFh0Q)dZsB4f)vLLCTte) zq36I}oElHBypKO)0l@*5-TF8<`VV^b$P|NNU-0u4Z`T;E2SWF${A=6@%ij#%JhdxdFO-`3{^ zpV6K#o}L}+jVFVg803^)MxC$f5ybob$l>`a*v^pf=u|s$=UpCqg}kx93N#VQTc!3P z;Mj>US6^LhbUc(z))t*~_gsMm(1CD?r1|ewV;5}x$2@95!zvpBywQhVt&$Gli$(yw z^<__=L4#RUvw#3pvGknP?9n^|*u)t+xQFc>DE3)YA)F!%e}BkSoM4=7xXq5_Qh<>w zVsM;-;#ro279M+oYA^>K)^gMVy55LOaQDpW6AD8p^ySKJSPIDqyQ2!5!2KBNfd6B) zMs7GtwxRSGiZ39dW%d9h&-U2^hyX-dK6OIvC0K?g0fyugnHA;vqUgk9!r!#6%_XAV zB`oJu9q)W8qOZyzOguI?m%l1Bhc0EOH_{wet}Qj1g2VP7=*NkfQ@bjMh?Z`R6I{-6 zB;Q4Ti!PSR1Le75cW;k$TYX^bA^_cvC!U9r!2hEHzb26y0y}``+LWE2sWEI@%O@~D zQDhnc7|6WfA)V$ZP`00i8tM!~{kQB%52pk~LF!K9Z};0xRH0U@`crj}{BC5h5G$q} z{Trg1bsvfV;0j&%bi?4zAm0!wh3s>h0DAF7CZtLG@qQ+yM z+5_&iL0g^=d=xR0El(%=?EUqqSzq!xasu}e`+S(lP^SA`{9{agHT^@0F| zRB`thiq``H5%GVVQrV7(xSvO}NsTxwB7;Uxw8|rj;myXtk2X?wm7=BTy0N6q+8!p> z1zv5psE3^(F?o@^REgx<7JTpJH+Fk4%7wPlIo#)x6ynG!eblmY+UQLVxiiIvuh%2= zOFZ<*RgAaME|#Dh<9xl_x)6@qDwqwDft z*+m7jnmDgJ+o4EOW}yi%myuW-i?x6L>vDG%JcVXE%sCWWsaR9W#v=QL`vU9$oa6*i6 z%+&@*VSj!_7x-Sq(Rv=uy1E?Q_JJTI#qr5v-zq zziecHpNVba#T9x#-?HTqR{xjrz_$1?)E0*cf+`Nfl!W3NkijV$X+|`>0sf|UY4!LT z`2o44djBFzBq4vYZf%gZ7xxw`O$kUkEe*VE`l~k$nlQCH+8Ucu`EiQP#?W`Op2a<- zlqX;=)&Sffk;9cb*nfgHNybP{5|b$+F~=DpPlU2Zr#YAs1#_5nShVe>^_rHtpIU*; zqmL%r8Vb9rlNn{9XWDn>TlN^IkDOhLR-({f`3o!>lja*pEoWTP zY7`<6gxTIiEQh{AwJH$1;akFalw3CRNjwDY&yoGcTlqJ$Lbq$LY3z^d*hTnLozH5> z#l_^)@uj6G8^>HB5!~cQ?{Gf;cgpo^(((;YE>gf)4B?p@Mumb0+vy<3sUxGhZ+}7L zJR(3HeM_l7Ha-4!$T-pMR?;y&8dNF*K#6`+zg#LJBFbNKdHoun>uLP;aJ7`ffdjN9 zhS~L1>!vbU+=aadEJZfqQt{J?%d^VgL>2a38v&Cm1Ws>%%DGYSxZGt*c52IJ0q?}^ z+++GA)zWC0xV$6_V89uoLr{8~GQ)#BEveYLteG3Tx}D|i=&TOA;ceJbWKGs?lvoyO zldTM$(4g`o`ezw^?HHXooM2jjTdh0gWT?zLzbc`qOFN^FPp}9q!_nwO{?GsbSY20I z#fC~#veZ^ZlpSY;Ju+Q5wfDDz3HZEvaKUR0bZ~?wse^%@pqh-b{Ka`B&tJr_eK?gn zBES9%_+V9-oodr|&$gv5Yvpvh@I@{qF$!)^AVg7Q(B55(AFk+5nPDb7#V_8gNt9X$ z8?YzEdf*=C!PZ|qqOOkk4p8wu9M7wEVnfQ1icE_iv{e!g8F?B;ULa4L7`|BqUR#5F z6~_mAi}W{YcUBVB%vT8{f~JT-NKlo6{x88&?Oea<%rhFaEc#AQDX+6Cgme^7HBzK=uyE{{Um?#qHyMySQg{_mdlu|? zMmO-wz+yl=yqq!q7G{EOb;X4m*>3W0UAm?QpAt^vX7DI+j;uSw0ibA5>_Dpwr=F|~x?o%QWTGM5}N zdv8ox*byRF;|?3%gUz$R!^IAkcCjiAS+%S{M*F{tV%+*gVUvh_1rcQm!VsJIcmL>x zibl<-$*u5~f0R6#^T#V9L@lTI(XB(K za+fY@%Y6brep%|d#P%TNWe;+Zu>Fc9>0-!Y95L>2y=ed446Q>1HCqfUZePLe|M*@}?a zIgO#Kt{QkIb{!nO@$?n*91GUixxZFfJlG(vT9_nW*b_yr61`c zrRsIrRCg50&Q{`rZ8r$V-1Rj3moTgu4JFDn-|UXK7=Y=TfB*oYj@XP! zu*B1JkVZUhY;rqjI#F3MG_%@{6*O3_jJkZIfzKYPQs*k!QGK45hT0c2Y-9sx-Z&)v zb8-tB83u%;v;-tE{3emH6!VJ7)?80}3+<}R${w_Hb6veFo7uWW&J8mrGjKuCpXhs8 zDhXfdB3h?ft1n2C8g}CD=~IbU?uP|^(Y5yxO;4vi`v5sl@YvOD0EQX`6{{nI)gbErQ~{rAa#^r5jHzd z9cBGZay}^0+hH_FXfB?&^49axS>rz`{v8m&kz{F+A=%YFR)?w^)W&i2_kR5Go$?J_ zZ0pQRsOmPItxsPBDDy^9Y3ZkA{YkH2gRh9BfUvGiCU7PGM2vd@SqxO&I^v)bx9p%j z7%~#rMA}^~n(gT%!G+q!KQx5>g2V-(8;yK%!zrWpKE!1EGK<6=?$D7^@QG+HF*6Wk zX6Mdijfn?oM%iym_yQ#CW){b|@SPyjPO~W%;u&%%b3R%P{WDsQYtX#wd|ynWfVw0- zrE;<3{h`*(!jyFwU9-I`N_t}>=#JR=_|Wi-=y1Bg)hR71*I5@1ipj%Q;vEZ1!O;_B zr2)dvRe-#Wg@(O;CR*5B8r!vBz8-{k0({W!E&1IHatXjod#WhhB^5P4o z^-2yt9{>g^52Uq)YeO->3tIdi+4U60q{Gu^e?1(EIbPm#iu4?zK18{Tl>Cq!CR#(9 zGhue28*9+ZDm|-*m)k%Gb)^1geauT@ctJyjvZ0W*8aqiLDKoq z9fnH8J>z3zP52YBc}l*(H;0HIa8X<@h~qN+_rK#B5Q{D!G@5-)cXYxH{}ytD!ShfO zEx7}jyI^W`wjJ==U@iB4#zBxuxFTp3KU+MM^m`f}TE

>ZQIgPN3KjFt7ETPbOj zSVQD?P*b;P-4BRp;L6BpsGN&Z0dHj8XtNIJFrcITh_mOEW)Q!@9GAA7TmG1xvD^o@APvLJ!a8A+WbL_r^v%dqT+ z=SVr6CuR?d{rqS!+W(u_r#v$k4+!+4d<7rr)dcpalawF49ePul!LYa5$#7W|pi%8B zc`QLpG(pCv$5az&e;w-Nu3JyRd5BbjvS&-aEL z9>Ss?{wA;+e&Z@>);rq0X6mg?_2SL{ZfA6MZo3it1izb_db9ul05iTl9Dm3~5 zaxFzc(?G4ikyl3tgdCF7PU#W@suFldEwEWH`UUZ?Mz+l0iNGB!Knt}srL>p5C+|T? z%m{9X`jwW;id%yj;wp+A$_{LJ^}12kVfIO0d$5@drsCQdtMH1beiJ)D2-zGVWvkC) zzDRAt;&Xv7xj875g24hL^TyQjfk|>PWU6S=)&gOtXtY6{jmZ&r4KL22nPV*&vPvx9 zw!rtsW=UI zS*=js`H31N(GW9Wad&Y%#szZ=mKABXAPdThP^wn7>-0-sgwf$BORdDt+!w-D3dP85 zIc&LZ2A{2Zu0AT;iKuzdw@=5u3OQ=H^vE^boO=(lU!k6p48?t$*g(b-Q16G}FO=rc z0E1rHj*lJiN^qtI8kR1NgpFbN_{mDjxJ@^aqsv`a;9`$VS#3OqZWPNn8Hc+O6jRZ$?#b!_1N{QiuMmhgoA#u|dIFTMM6=&? zqvW;|zc?BhX|F1$iR8rVI>I;#trAtdt+PW2lmziKk!|3F+cMzUYRj-?bdeM$g{ zP2vHswE4$UqRI>?!pdW*4TwF~fn>pd#oJn+C}}ZTDx(9ld;levjhc=I!$%qQ5%JUG zkOzX2N-DMjwbH!Cs=RsQN)G$Num}4YNb70e%A>VhF549$+Pq(ZSlJ$pS1t5hf}j^j zB_BXwNObSvB1TOZ>`IEn8h$%V#uBavD*ylh000wJjrvA?_7h5_I*k=Ddrt zmI$-p2=iA(Gz}5J_=!)yk*ljnkW!hkgS~Af0fH(rb%lm8!TU(Qf}lx+S!fA-W6Aht ze$cbhM~k$cSa45!D80)e-~a#s61ega5g>q!1L0~FZ$YFtqO`Ua1B;b=-{1w#?X{Ue zh?JOT6VjbHY9!)+aq$->eD?r%H-`FNclTguY3u_h^L*HDfd<)Yk?F%Y7)Y;G40oYq z-=k!4Lp#uMF_VEA~seTN+oc$8i{xpV_#-Mw27}3|m>cJK8{&s|j6N{MeLUk&e_CGF;H{+qM3`?#fO92{q%+u%VNwzk z!}5~{kH}neP;cKhRJ3Ck+?vNW`{zD>0|c>UsYRr>p8R8k-@p@~5x2PmZ|&T7#{5Wo zidVL$2PFo74p7eF|PQeLAl4aZddziT;=O zpUr!d{PXi*$BH8-9GfJp*Mc(QPdtm79ZTjUhKH zp=w)C{~l;8N%|%vQhPG0gF#_4_IFl7Bub)t88cYuRG`1XwnTlQN%A&=9d9U-ygJ6x zp1eAuKNG*=oGS(Z-mw5rrE=klIfvLEP(&md4xeG4iFLCgm?e| z05zT?E$T=byq0&p6QRc3+;i``amNb(~B(4AYx>1~fGaJUg`U&DnS;iJng$L0|cWC>Lfe zN+R~C<`n>uOB^Ih7th~q4HFu8GnX@V#{tdV!GPrvis%0LSkY0$Br!w2;H&w5lUtU#THt4!?ZYSkywVsp_sjzwzuA}N30^GW=Skqoww+q; z{Vc{jM?I%(*YdpTf}&)0VF_pSI2?9`qa^$4q*q=KBU%!KXJ`Qr6g@MFw!%;* z$C=~Rhb>DoQGo+yKv3K2WILpNTlO}}*lD(#iVjDXCsWn!6?x#tKxnxPiZu?ql7T64 zW>(t3P;8}^o{F%3%6yUSsoDcWm>;2;dZPR}u{tqPQK5=-@f;115=`d?QNs0a*6onS zrqOQ0^t9{1T^3ry1T7rW4Fol`d~i-szPR)WTfJnN8MkuluxNiAM=z<^<@cr=aI_W| zTBW^@^<@H~bb?PdT6Zl>^SyF(fF?mL2HgeW1nwC`Z#XQ5FhBqRWtqFZ?0P&`K}?J$ zcfMYkLE-QEXAvT9T_D5f~aE$ASAnv9UHgD|C6v$L&=-Z2AUx}-vu^> zLA8Q1XRyzZ8}<-BN`001hFI|8|O zZrxv0LrDq&2Hx%#``=#s$2EkGYn=Vuu%vvnNx7byG@^2vMYH30@zZ(h=%^TP zpZ!g=w~6KJ?0=9%S4w~WIOGuKt$_%>121pSzV&&d!DDw~Yy^os@)-i9g-~0>Vq9Az zhv(6y-mfZPi->~w7^CprK9FUMPN>ich*-h~@_slZ$uFKE3J#)}%w0(Q;y^TIKso#D z%u(=buM=hDgSn#8zkD)g=d{UM;?&<3FlVdizsQGI$57X0Xk+IXgL4YVMT^{hV>0SG z&k9`B2Z9DHT}&V$7e!`#?F@r2Jxl-r?+qcaH~g7t4CVy{%V~O$I%7Sylh6PEv1Oes$1>$P=~WT9Va8}x9axp6N=>2y|fv7q&zCwNNsCLqu2g!xJUvI=PDR(KEQDgMP}#BVOBV8~=T}Z;^CFkdHfb<}ivBu>Id`>#uaO#BUL)|BEWLfw69vaSPOh zFw~g5sb*F(mi^khPv@}b89UN`*?)wu>#sAkY8|!po)>IC_>;NI^YP|xaw`3pnsg>U z)x%9hC-Xgy#6rWR6li3?U%;-ai2$mba&Xsg9Vq~UQ`w~Lb7Vf9e8`xa87E<=N%YoO zy`nd-(lQzO<4(8ck<@^?7nfuzVl7AM(kLAA;r#mG_(-A%|^yl zHhKil*^!o#avH{sZ5gu8FNatiZqsqFFJtW`6K)$E`*wcD+A0S;%X zMeI?I+e!BXT)FBO?*KFFns3pGJSc66EqU4u&G8xj@4T z8Jjtf1r0-opi;{rM4p4`vzhnJ(kz`QM+~zJQgT`!&=h0d!Y{GY!rqn~Ab1wCo<1EwQP+m-MC=9~%`Kp0CMhyZdXg-)v_iizMh{MK; zKAzdNPiFs4B4W+t-4RgjeQ>0rU0_G9+PXI<^f6dH|+_K4p(M(4x?CjJ z9fZ!clW$*HCl8OwXwQKFS3-N3cDsF3#x5k?L&~CPs3GDTUL8HD>ws}gIh2g?87>`B z0ycSPplmH+5v2w)KNkx)B~cC4(P7TnieZMqu$RgU@YBvc(sbfBOdSMJ3gf3mAdcwN zL)AVMn{cY}5Q`siPlO&9q}YQYAY)-HPI3WhDf01WdAx74Qa1}JWP;)2^`mZL=r1s> zYeDLuBjgY#T)pt{Gz_EY;Axq68E*2$So6wh34A zVhZ82aNplU+9xbBAAgoBbdM@->s(mAGe+Ol}j>7vWzsC}(y`UZP4-x_gE zU9lyS##emUPXjDBtxzc~nm+t#-MeSI;4~gk0?7<#A^?&xgpQm71Q8HgL?I7pi~xe5F_5T}w~fZ=+)B=0%+Q0jca(s;Y-*-g3QMgAB##u7;Ii;H6w8 zc8Qa_mBE?WjC1;YRwWDZ$hswEI*Ee~@9e2{*1T}b&NyoEDB3KKhkekr(UpT?A?0{_ z91Xieai8$)NFWPb?4WC5__^9t44MHAQ;#Pr%K}(-HiiAy%UlV+AP-$Ly%+T_{q03X zpC7<>{3C4i`#kG1fP1nCo0P?y;BU^@CI=o#8j{*GKT6m{0qY=D!e($Bk%*U)`j1B8 z2V-UhLsEU&M0Aq7PGa?vCT0i6}BNEHB5A))3M$ZCWlX6?49(8M6ZKPC;@$ab9QRAN4^ z{OY2~K1q9YUCXT3X3^y2F_S>IBQ<`!!^j$ks*Z*tL{HS8ou(wiE+{w`w{;R|{`N?` z)9uvDKBZf(0hJk#DN;#*dulN80kL=rG@WjD(gDO6OjNOZ1;}ome72Wip?(SM0xOwu z)8G4Pqu{99*1t08gz4O@d(*=EKy2$%vhuRVTqJjR(9(Y?HxfY0waz_&8HU+z?%a@u z7lHKjHMg!+bV_(7(wF|S60o-y_TK*@9E4G`JD@{o3N#{*gDZVC?2R|bmlID(HmGH4 zC&j{py>=}JU6n;1*nN`XW7tNl&!I5mv2cPDG!H|MiA3$BHO5>N!XpflI~dolxFe&u zWhxFgR?x_znSto6svGRxwPAJ6Wonr!#*VU;Dhg_Y6e|?htXO#b1PE@`PlVm6W|!~Cd(5p%L#Iv7knlla~Ujggi ze$f(YFZkb#}hK(cNEka=kB&{SMS4-#_@< z6|ogqPpWg2tMP*k4%}aa!Ah-LFN-h$141Whf|Z_WBOdKoT1d)1D0uXYB?Zm9;NQ_6 z)lyQGObFMt{{tdnu7jSJ!{pj0dBp?TJ!!K6LT9qQ2W8J>L@FEQe!D$)?!9M{2U-zq z9jdwztIzdU!Kz(W3fL(|Y~t^R@PxG%GHEx|QCF3YNu8NJezP~XCg=8WE9Cv48anzGJMU(RF$xXRisX%6`+`b}I@yj_flus0SLUn;fjS^b2!R;6tV~^Sgy-3F9rxc1$!Xigf=2mGhZx|$&8O(4 zpY7>*pc6;GKp8Pg6LPX%HQ1xnOtyx5lB&P-?6i%%tF*C3#s#I5QXQOT$QS_Qj)M_OGdBg8;%tKXnF_%!3*N8LGBo25V9( z_F^p&ot@e+%m8aTu+UdLz+=R}W}lWfDSlt6hdi1l58aLl+#DvxqfmO%0LEZwaNN9M`+ zHQh2W32?nAnoHjvLZv&fTE=;}$5GlDRSXK$X{-@_3Jnyn^{;=*btpJ{_Jz&HYuCe3E-YZxK{w~81_lKYKBfn$M6-kfW|4|Hoe;QIcqj# z_6Oct;BKH+HrER`zbQ_M7v`&yE3b%snjxbqHN=#4@PG zHi)!26ldlf)SG+C{GlOCIvB~C0*SB>Jn)D-ef`XhS%|@IzM-I#HHVg&M;^dMi@FeO zJKD_O{SKeC{+0vU*KRwyQzZ6&0=sk6PJ&NZtkIDsVr=${ z(>KCr?&8Sc!PY?#_L9*z5>)0)+RIfpF*b>HuKHj*QiInJG+4;QJmZ(QV3Qw+Yz`ofH~ayO_l~@X?#|*uGQc zR3XZ@b`W^ z9`s!d_AhB7G~|Eu|g8ctT40?+FfL%RvW{`D{uPsvfKYlLDw&qflv}LO7o3tbHl7 z)J`G%@RrdKR(=x4ty&dt1I!tPs>Va;9%s;W@1SSD?XoUz8+sCTBb^T)Kn39X@N1Ly_IJLAok2ZCM3hC{e+#(i7z6t4w@__ zvE2|YA}qE9_#+xYaS$oUXqjelomZw z2(-tQFZFXC5;5<(Es;Apr%^N9vhhSHm}C!orh@`rvF?&z9KpUPNIgiG4@A_vL3D#@ znL;;K&;SM;c`%Qzrlaz9$5_~v)w=54?8rMaci65b=Qx0F?EL>-xIy0S@Ska1A3*Ia zUS;nP&g8Q7*{J+;>ce-CWHiP`e9Sh4yA6ljxCW*q{wWT&-)ZN`M|L{F)_a@D0KcAN zay>#%{I1Rop%3<3m^&fH;`*bdTK11fu+Nb$`0^SS&ITNBHbXm&`4t1f)%S4Mh~*+PD~!I2N-!ak5fFNg`Q8~3v1lFbVTLg7+t$J z>L7?l#jc4-yPI+npC`p~2TXjoSqmGR(#gW$kiNk6hKhYC1oI2(f@Ie za<+$X@t+n0X_~P`3XW@k#CaqF)n8Klz~(;QU6U%W#iS30{_eKPhRbF)z2|=0eNF|w zN9Z8`4P_G_nPOCvUC2?eLd0 zJBNJ;Erm3)3}9xZzPc|px|>r?g{LZ2-04E_fq@9oJwo~NY&}?~xI-B}rC^&5i=#2h zKy{DT#|n-V;->*+c@>|@c6g?a;nhmh)mDapIAkgUv*PeKHW3!&XlB;k#(K%l#_PvM{0kgEk%}_4T|4VFhT3X8vc7e;`jss!3r^W6w6L^BwACi!HR^2Isynr^xL!M zap*oRJyuL0i0I9I0o#Nq(QelB!!T;tIAg8`rI<;S>5QhOHgO5mCQn$Fmhy__XXGeL z+m2k?OG;msT!Xet|M9|ejgTHQGXMhT`siFFiqR+)nbZb%s-o4Uci2y>kXYNareF1q z+i2j1TT(|7ackaZ4=lf)x0$T#)s5iAvx;Q!vPxv}6t{PB1f_jNna7y)Vz3^MPu_u` zCIt+&C}mAFl8dZT`pCbx=UK;pf81`wN2~`%z2dwwX*bIRkG7M*smchv;8<;f;ZO?s z&2c1mv|%9rstA|bg*hUa>WKn?dbPiQd}gVP#*V7ZVe);k&g)J*DiGB>?(W_`!QU)B z5!Z`=Tx@B;d*E~vVWx)jh)iZZ)bTZ`=~gbW3n62&Vc6P!_cPV~BMWYJcUz{hYWIwZzx6ZUOg+|6No~1_W5p$z-ICT8D?N zooi8;dQL@Bzv^cg=*uV?Y1(ev3kzUPS_@kap5FJGO$RlrW4ltmx+40j5LXZ?B{r z{dQlOI1}u&4u6F2%W(L7R#j=T@Vg%AYl!L$I$+x>A7(GP&SITUiQ1Uk1lRNN7YqTM z!ajhVKSmkjpm4;DZF5T>IT{XnJb1g}z6JpdBJIWmD%A<9$Hj`G z&zov!9r`(+5x+~w3*rMdD<=%l+HV`DVfwwB>!Pzhf47=n@OOX+yu1xN-7iKLc`5d( z#;U?PHO7HG6G527715*91gbgC`h40Y%S49ZLNDY%I*yEJM!;v5P}vt%I>vlly>BLh z}iKk3t5Xq@jWX9RyGsIVC_=k zuSfCv2KQP%%!W1$7SZ8|Giy3@MG z6^GeKGSRhCOTF9{TpqGMWeU*}XI4umdHV8@X0Wt|2xnxq9em{-kl4YCbH)|D_ml~8 z|HCDb-G+D8J-sy?;rYSMKMm*s-~Q*B3Ic<{40O8$WJ+iCL?XP)m**4zO7b+;JS0u< z)5_Tu19JXy&yEayy-Q!$1W7tHXs7+>E#mfWfx{w|7puBAksD!lGOdz*!57WlcF&1s zZBe-}!laV`BDTz#(kw0M;k%rXgB*&_nhL@1sb!%M^-11qEFI}*P`rlo$F+0#WM0ZO z!Nt@E2ee;n=Jx(QCccaHCC{#F)B32*Lqfxu$a;aJ<>LjiwpEy}-7l1j!SE4YnL5m= zzH1OXbh6fhj0T!d3TT}G08agvs%AV2_$RCIC$}4WXviYhC9fCIuhVh!1=R z>-_WMN%stxqN6TQx+O}`Rm@Z~)(ZkxCqT3Id{E(MnnEHFG{RG2hl5ue-E|-m0w?Jq1xgxZQMF!aaPQl0dV@g7nvxZo3C9Nb1!sCizs8$$sG# zHng;j`VYeoL5DkF`;8&&?HB;?s$X3DWa`EQe6d(?lchCu@aE zi*;E#X^1PMqT>-eQ)pF9amidn-JbQ)thxRwV{)h z4A7pc(9`r8d+44H5ACJwK0ZJ`WBKQeuU4(Coc~13z9b&l7v?YBv=YTo(;-$mgiTS~YBL7rg#6|0!z)+=aGd=qJMGB}#)CLe|H06G#t zD9*?(CQiM2aCzjC$B~$KYz5N7`a&`*Mgu@0pBTNgw+P|aO0OG9JuzYldHoqo%pP5hc*o&ix<=sgNi&Y1JHBtOd zm+Fk#2>$p00$I3Ltzz|CZ~;@^tN`eUs!agOVwQwffH@%(l;)AAM|>mLwjyNk?yR(v zFnS6auZW@$0p1z&j$Eff-X{DuJ+Y~7!P_~R@MN$WQb}G#b7(@`Z?L94CvlA)B)B9v zw8r;xF|rRS_UF_@*7{r$gYV_$^vBzi&yt(r zRXU>aGQ(K!^5;XozY?8W@&^j^XaOq0d|amJV|TUQfHfLS*++C>61kbYy}D<)>yp_^ zf~8sYe<3II^+fqo;n8U+lvdkv@Cg<4JRPx_IR&#yh9%z+Bhd?+kx;-3DG4xgk_oTlcFSJnjl02Xrt33grK z62ONii=E)V2kMlQMgO|%C~|na(tdJ_;tL5GBm5mO0z*E1l5}7Aka@2%xtfOQ4OPwN z4eWs|Hi;!2rfT<@lnMJE*oEJ+aiuj6`LA>wB80}0CxjR{ac;+@dnHJ$IyD9*y zNKBy7n5u-Sisy^)E&l^kZ=rlcuHfXUa9sMsLWNOv%EQ_kM(w=XbpKidJQLxdhr8R7 z8=@dVMsMiZb~Ue;S4OoPEwmNnNkU>{(2A9t^km`PW`3ki;xPaLkW<&A&HQ_0g(1ka z9$7=?rYF1iSk65FMq%Rhcq-tJ=y-_SlWd;M~!O05s z#%7LYQ*`mvXS~K3cc6j%XL^L!9*?5)j;YZG|A8qAsWQ@&OM;Fa(HGIB1@eSW5cXCC z@DjGvS$l?%Zyd2AGH+j8kl7oi=&pbWR(RLC;*0<~KH&Vtl7*xFNPfyO@HdhW)Ipzg;w_&&V}>z&doUhl z2Gc3M0yK>uj343qZkJ+5!v-g#QB54(9;NS|ymRJ~U_u93GYGeB7)s&&Sh9x&S;%s{ku;1pEc~KPRTq>UmZp@I)_O$O2S_c@7YhJMg**m)(o^tYVv z$3}Sv)HkuP0VsT%$szYLl;WGuI%d2jM694q0Ph}`b4N@t3U2EX+AYF9 zV#>FQ(1GgCpa5&Pr3sxcHHb&P1J(LU04lh2?T7-Wl?6b?BG6NL5z!Bzc0_y?g49eW z_FM4doJRK2=jWVF{F5ULTC?m8!7Ss53U)m!E)*38!6~{?V+o|ISVu$)yjp?c&EoIS zP*0v+mdUF|fbt~e%0cbIKVnPR08>%Zmjat{fG3KN{_nfwqTF$t6a;30mqg2ru15-V zmGl$*d5APPv>6WPvXGc9_1jyw6b2?(VtlSwzeR=*kd(r-h%uq z4>RCkzxd5gPX@3g?E?4DZEs|i7upD!2;cvV=eFblYZysN+|w&>#jwNTz@=qwX{A!! zzsiK9s=+sX=>Py8W}$VCyTbWTH;TQ5pBJ67PQ#}%9pO7U6NPkbUioSj9!Z12ncQSp z-*G2#l%Sxp6hftfBeGf_d_1t3pLu~RvG|d8l7uIVV8uKNi6x2w0*rdB9dg>uAA7je z^m?P_6=UyuF^Vx~VDR$!QiUWWSw!gpIAifJ-;*tEZ0II`BXAA*Gb#4vB2XX#ilq}_ zn;H}??CQ$xHTbG1RAjR!|}_GZ^g4K8@ZM{uF;Hw3!P(Dvl2Xdc_?<;fevzcWO+;f$jZBf$AFgbOwrN5)0f^}(Ce>99?hdO zARSPgr1}Tu8xvtm->gQc8|UeZLt`(#^Db=jVgpRuyh&thP$4%gMV8RH?CfX1) ziggclzOXeo6Y#_}?@+gZU8*!7IsC$Xm`rMF^qt+Kd6#c8VZcbhGH`~ublP8_{ z_3{%dm~85~Z;1?gD8M`;5F^JdZYE^Q@z%q|NkGaT#SMQ`i|xGd%+auU#@OwQZIS}r zm?u;T249@4u`(*0b3JeuoK(U)WNPi@wG4izG<_uE> z?|rvlV99Km&nr&3q42Pq%R}61)|i)RdcsY4&YNPBzb?G4 z_s!CgnZ%G3&U;}xg$3Z|-KMQ(M);^T&KBb`6!&1Sc?$v$e-c!q6KFKY00Lx;zx#@75816@w3kuAYzS68x!ck;(KzZTG;Y_}-cYK*$XAz*?Y<=$G4DZKFn<7Hp zWrDTCRuwWzN0UiCl1<(iTANeNremm!Z;REx2gXS!5{P!rL_VatwP!WuKqMBkRfBB|g90t8uucy826)9L5|f#bm(kdVrZqDSanFOeWLT(^4S z=9U$t*Ai45<^GE>uyMV~JqOhKc4ZLG^s!<+t1&rnJ_#9yE zdWH>*3~ONlclCsEKU%jyoz3##kiVxiZaija$z$Lo8QUQuVudM4xyV~6m*x_>Qspgu zdWnLNbZ0r{8Wn`TDjKW7m6NPW=GAJcAB7ariV=*AE62uA)x`>R`?dEzX_|}&h>1* zvN+38@}l4wtH;@*YrCtVP&NXMK{PI%&EyKOvpimShqy-}k_!!~y=8Px{!KKKO!em# zg`D3z0@Enqk-w+Te`I*ba}FF{RlW5|vZ7@NE>1;jhFMHC#N6-%ko9ha6ZDEAFq%w3 zTM6BU{DyAyZ*JtktyvPv&;biN2HD#Y@=3{ZIoQJZd0;G~-|wgKKxAy=c7gFLquFFG zT@F*)`a@K;UiwI;U(df=uU1SlaT#2wtNstTP)(^4jpcDZ#lGmFNiRBg|FKd8isFT(Jv5wHa7t865RNm%S3rj$@mC+$mE} z39zPJi_}uA-|}Ia%^w0~%HV`>t*RI)e&@2%-mVuc*gj_tmH4j|Q$ z)eo<6KSDr_xCP>r;f>7-SDxFKz4;MT7E7Aj{IniA%b0-h+7S;3F7$0pvEmQZzsL78 zH?88L5g98lZ&}(+(|OHPZ`~b8c>erz9`NQprOjpaR^=N38CFmSsXxGt+<0>)e>e>e zH}c|i?U;hK|Jm2x7s_u&t`6LQYTK2(0T6n{C5yGaD{o8ul!8$c&qXN~y)zLLulNHT zlXtNbWx!MEmO2L=2qHboC&co70c$DIm@)IXF4Vu=af(Tg`{Vob&hz2K)>)yUdw5%9 zUP6!HdBB52-ABk-ODZO+t;&6|5@|YVr5JnFHW|!OqllJe5Z8IiP?;M`c*dgBnV~w> zCuCxb>K$~|<1GKUfw;B=oaGkzAn3NKzMK#Ywm;M>Gj9vA@F+Td(38c&HpH4K_R^1( z9?iisEM*Be`H9Wkmkv4Ks1LQ$)QrhKMmA_DH--erz4{O8%QA?H&xfdA!`y> z>T`Nza2;__;Hli^RYs6RR!UpwIgvv_26dj&ncw|xny>iz)22|D&nP;H9UdRZ>KCpY zw5gY`fCQtemN9I*mT&f`P{Q$o7!WF1l)^1HWX``;S@a{%lv38)iRsyP->;LsxDj0Slf7upoQ9qLdJ3zkcRd^k*%-GF>oSzL;2*Kzc zB~2!Y!&-R9@8>{adyY71Cop{FJRZS9UeD}#IocIdj@rFQmyKP3`;uYEg$3$k26#&| z>J6)C%cFdkqz|ISt{5i)F7$*IUUm^XLR15~lv38*@V6X)Ab~o|ssDaPcOeKjvto)d z{?8Hyn{aZJo+PvdHvS#aCbD?j9c-RVl734_&4@+>G^ZJhvptF)utRyL1s+~+#lRO2 zFWX>u&^=9N^Z5qXMaXJNeIGH!cehk4Fd4rk05jtXE_Y_JLdwa#Owqf$5|mfcVkh2E zvzenYHPoUdg@9(tfSWsPW_yFD;$~>$F1|>`B$+NTdP5l`F3xYTs;nkd+r%JSEK{~8 zq|tWh$B%VjG6<$-4nc=5x)lIRIr&KQC{&jy{KU&li=b)=YOuHf`Gzj1&pJ#f$^o3( z#blaRMnEI4^{08eW}_PBb{~g0ZNLiq##jnj%T=uSbb^Syd+S2r(s2_7d5X&a;ow!_ z;RQ%jS#{986BO>IJ6N+dkIGidP%llr*dPQg(^fs*R-1(n@syyAV9-kIy{W;J{4;`L zTv!4^I2Sb&p)uxuv@)FGjNWO zyRO(_{crrM2$n^kD9`u+BL5P{Oa=^d7T8amkIj)afbD_00000004R3VHSUtsXOs`NU(j?0SImY(nK~Kj~36FV-Ln(>fpYh z;6VVxV91CcTgk0f0U{~9e$65C*W)D;z}{Vvx?7kT?6ERiC^cA34vzYyIkeuB0e)BX zZh9Pce0m08S1AF-K%Bdqo-812ajlcH4Rlqi$C(dP>+t9T8axZQU#L+Uu`^R;pxmGT z3+CkzBB+&W+!5$Q4Knj>#0~ZvarmRgAD`Jwgp0zo)w9aKP)A)0b5uQA004D8cHbm+ zTrPE!tjp6r0x)Rf#UsRH=pd&g|7O}9S86boLUCNRTL?oS@xh1TGA*e+6KY>3{#J00 zMk6iAyNFafRHS>+fs<_R^Ariqw9GjJ*V}Mi{q4i4t*eGyq;+vHoXpRzVygLm`>u^s zfffM;ed!VzhLG`V03<35t+c{s&Qd&>_Opg*lcaLVK#KPOtLHrK#0P;l4Cii}-SKp9 zPhR%oqkLW-Nw8c)Q6bE@Z)z{_Hw4^I)A`_P`k)QcYS-Igl}2BqBO;l*u1vim_C<)B zMtWbP%+pQBBov!7;^Ju;btTt=;l{P8tVh(&q-lbQbazxP=>|W29eDn97>|^XOGfyu z(V&v&alonfBc|>W3|Kq;#NO&@tay7gqPAYLDL-FW&SUV_0smE0_Yksdce?ihBAZ*<`5+KX&8dWo?aH7mSyS4G4W61XzAJC?%I!V4q z>2cQc)KeD^gDGJkva8GMx7t}VKbc$mg@WVtlgeG z9!n+#3fDpDeY(C5WlBVi7p?`DZJkW=HN);)mm;wPni%7uzCeI=TWn0Qs+VEH;4JTL zqJLqm@Vj$!=2I<=A(x-wo0vyB>|zuy!$S%dr$^Ey4*F^~>PER&MK6{dj}K(z6=gAA zIZry^TWtgclM(D2(bq@&gIc(XtPZfo2je7&GO2VqFlJi?W$olQ+@gU93>$o&)l3`F`mT60`{s=w+}<>m4c^IJg}Nc1 OL_h!l000000000dCz+%G literal 0 HcmV?d00001 diff --git a/static/icons/sglang-mark.png b/static/icons/sglang-mark.png new file mode 100644 index 0000000000000000000000000000000000000000..3e0fe3eda51977519637fff23717f39a2e9817da GIT binary patch literal 2171 zcmV->2!!{EP)FK?9JJJjpGLdE3$kov4?;kzA zcka38ci%bZo_iz;?s5E&K)Qj`ZNP0rS8@af$e;j%1b`$tjvi*a21JntU}-65m~3O6 z8XXo`2HjL8we|1~(YNDLSZ)d>9*_Q0hQ`C(Ol0^@vHm4r2rnWCX%R&MQ54W>P-C`@ z-pVq{{*A}`dUkiH{l1X25tzUu^O{n94QI(NuUxbo9OEYfMKjQM?J8W@^#-(`sFCus z>5aUO{C;`0yW?M;_L6s-uB`wcLv1x_ep(XfQIeybxRIMBoGiC@N?H zfYHl%0>rQNA0M?gtRU-xMN?(A?R0#+=4Z3I)@cU*X`pdbSfz~yrLsGlczmB8{ z*f7AtBATii!Ln98rX`7}XM3dZu4YN8_1_(l=@x*cdHOd5JyV#U#jdPt^VR?EVkmON zJ@DA1f_R<{>HaX8f8hZmU#EH**R4*fEfS&+J(Mjx^ZFc1&ZbHhvv)zD-VIoZP&4#e z>N29#TU+XqGaizuMrWFkZBefN?;>rfD4H`LOvR<3NMYzWb8^zPn(9eL9%j!gGko93 z_BB3zTI$DB6Jx%O{tBWgn?b;by4|6kbAjZ?Cd@)+3h>%d`f5W_`Ggspeg%#RlVcgf zked(Llcs`oOeI`7dZd`haz=TMwywh!a$g#xJC$ld^Q{8iJ7xo2Z#GbWdi9*Iz1EZL zXB(o$MXYEJdOwS z@>tC;Sj2uKKa2UXO5_vkP6R@c!B{^K0TV-I^N#Gq3TPU1nRd9|A+Knsd~HdtHsE=lmdi|27f^ai5~P#a>rJ1%!~; z&S^2>1FAy2Ep74^gFr2qTWVNWVDg<^QX_`_1YnF7U{)^8K9tElC5rS0nV@jVNO~y+ z@(0fy>T?}(4a#$pBhcbkj~6;pzEd#>VU;a{W&a2=U;0Gc%uP3Sf3vhfhd+`;rplA_0^Wq=NFa(;MYv>!UBA^AL|=*?E~57+3cOY$-fOquZOyj=7nU6lirshAELsHc z^U=E9_6&ARNgn&uhnGE{JYO#3=h5-;=ogF3mgZm#e9c_5rHtvZ$ zD&^JhkWOTM0FX@ZMH6F_^I4uY5pJK?sG(XlEu9KNsHx zhMhoDgme;FZ5P9&SkKdXM~Y`md2`pn0IV!$>9H1;<1kRsK=AjX8&ZVWfnd{HvjuNh zAwUQacSx1@G>hT4+xzc*4uq5jRV--7YJMOv-1CIMot5eB9q_XpgemYlGU?aMM)b-L zkGQVw?HYzsVz4OVP$5rq8^GGbP&lv^wuQkv-aADRx(inx76M_P2Wq#y0QY}y3otq! zt{>V5`LiAa^QcNFn6nT*`N^{>n`>AIaDoxCs%F8}{ci$MRp_d%0mtP32U!e4%Ljjj zQ41EQY_4H*p|XW50CO5}T{r`F=hWD*FYb$Hq3Dq(!RDNDrzjb64o!6siz-8Yt0#5&RDF%x3nqu2h<_SiK-5Dcnh$R%D%2{eV&21St%9$dBf;bi1Z z8Pq|BhWdYYgol(uVK{oD6EXm;tLibrary
@@ -1005,7 +1005,12 @@ `; // /#cookbook-dl-tab-fold-body (whole Download card body) @@ -2884,6 +3072,7 @@ const shared = { _getPort, _sshPrefix, _serverByVal, + _serverKey, _selectedServer, _getPlatform, _isWindows, diff --git a/static/js/cookbookRunning.js b/static/js/cookbookRunning.js index a390e11ad..7672edfd2 100644 --- a/static/js/cookbookRunning.js +++ b/static/js/cookbookRunning.js @@ -27,6 +27,9 @@ function _statusLabel(status, type) { // "cookbook-task-status" ('' = the neutral loading style). function _taskBadge(task) { if (task._unreachable && task.status === 'running') return { text: 'unreachable', cls: 'cookbook-task-error' }; + if (task.type === 'download' && task.status === 'running') { + return { text: _statusLabel(task.status, task.type), cls: 'cookbook-task-downloading' }; + } if (task.type === 'serve' && task.status === 'running' && task.progress) { // Same green "running" pill — just with dynamic phase text, so it doesn't // read as a different status while the server is coming up. @@ -52,13 +55,13 @@ function _downloadOutputLooksActive(task) { function _canClearTask(task) { if (!task || task.status === 'running') return false; - if (task.type === 'serve' && (task.status === 'ready' || task._serveReady)) return false; + if (task.type === 'serve' && (task.status === 'ready' || (task._serveReady && !['stopped', 'error', 'crashed', 'failed', 'completed'].includes(task.status)))) return false; // If the tmux output still shows an in-flight download, the task isn't // actually finished — hide the clear/check pill so it doesn't show on a // task that's still doing work. (The next render will reflect this and // ideally the self-heal flips status back to running.) if (_downloadOutputLooksActive(task)) return false; - return ['done', 'stopped', 'error', 'crashed', 'failed'].includes(task.status); + return ['done', 'completed', 'stopped', 'error', 'crashed', 'failed'].includes(task.status); } function _clearPillLabel(task) { @@ -66,6 +69,13 @@ function _clearPillLabel(task) { return 'clear'; } +function _venvRootFromPath(path) { + let p = (path || '').toString().trim().replace(/\/+$/, ''); + if (!p) return ''; + p = p.replace(/\/bin\/(?:activate|python(?:3(?:\.\d+)?)?|vllm|pip(?:3)?)$/i, ''); + return p; +} + // A pip dependency/driver install (payload._dep) reports success with the // runner's "=== Process exited with code 0 ===" sentinel and pip's // "Successfully installed" line — never the HuggingFace download markers @@ -263,6 +273,7 @@ let _copyText; let _persistEnvState; let _refreshDependencies; let _serverByVal; +let _serverKey; let _selectedServer; let modelLogo; let esc; @@ -688,8 +699,10 @@ export function _saveTasks(tasks) { export function _addTask(sessionId, name, type, payload) { let tasks = _loadTasks(); const remoteHost = (payload && payload.remote_host) || _envState.remoteHost || ''; - const sshPort = (payload && payload.ssh_port) || _getPort(remoteHost) || ''; - const platform = (payload && payload.platform) || _getPlatform(remoteHost) || ''; + const remoteServerKey = (payload && payload.remote_server_key) || ''; + const remoteServerName = (payload && payload.remote_server_name) || ''; + const sshPort = (payload && payload.ssh_port) || _getPort(remoteServerKey || remoteHost) || ''; + const platform = (payload && payload.platform) || _getPlatform(remoteServerKey || remoteHost) || ''; // Serving a model supersedes its finished download — clear the matching // finished download card (covers serving directly from the Serve tab, not just // via the download card's "Serve →" button). @@ -704,7 +717,7 @@ export function _addTask(sessionId, name, type, payload) { return !(key && t.type === 'download' && t.status === 'queued' && _downloadDedupeKey(t) === key); }); } - const task = _stripTaskSecrets({ id: sessionId, sessionId, name, type, status: 'running', output: '', ts: Date.now(), payload: payload || null, remoteHost, sshPort, platform }); + const task = _stripTaskSecrets({ id: sessionId, sessionId, name, type, status: 'running', output: '', ts: Date.now(), payload: payload || null, remoteHost, remoteServerKey, remoteServerName, sshPort, platform }); tasks.push(task); _saveTasks(tasks); // New action → collapse all other cards, leave only this one open. @@ -1520,14 +1533,18 @@ function _parseServeCmdToFields(cmd) { return fields; } -export async function _launchServeTask(shortName, repo, cmd, fields, hostOverride) { +export async function _launchServeTask(shortName, repo, cmd, fields, hostOverride, targetMeta = null) { // Host resolution mirrors the download path: when the caller passes an explicit // host (resolved from the dropdown the user actually picked), use it and look // up that server's port/platform from the shared servers list. Only fall back // to _envState.remoteHost for legacy callers (diagnosis/pip-update). const _host = (hostOverride !== undefined) ? (hostOverride || '') : (_envState.remoteHost || ''); - const _hsrv = _serverByVal(_envState.remoteServerKey || _host) + const _targetKey = targetMeta?.serverKey || ''; + const _hsrv = (_targetKey && _targetKey !== 'local' ? _serverByVal(_targetKey) : null) + || (hostOverride === undefined ? _serverByVal(_envState.remoteServerKey || _host) : null) || _envState.servers.find(s => s.host === _host) || {}; + const _serverMetaKey = _targetKey || (_hsrv && _serverKey ? _serverKey(_hsrv) : '') || (_host || 'local'); + const _serverMetaName = targetMeta?.serverName || _hsrv.name || (_host ? _host : 'Local'); const _hplatform = _host ? (_hsrv.platform || '') : (_envState.platform || ''); // Replace any serve already targeting this same host:port — you can't run two @@ -1572,7 +1589,7 @@ export async function _launchServeTask(shortName, repo, cmd, fields, hostOverrid } } else { if (_envState.env === 'venv' && _envState.envPath) { - const p = _envState.envPath; + const p = _venvRootFromPath(_envState.envPath); envPrefix = 'source ' + (p.endsWith('/bin/activate') ? p : p + '/bin/activate'); } else if (_envState.env === 'conda' && _envState.envPath) { envPrefix = 'eval "$(conda shell.bash hook)" && conda activate ' + _envState.envPath; @@ -1583,7 +1600,7 @@ export async function _launchServeTask(shortName, repo, cmd, fields, hostOverrid repo_id: repo, cmd: cmd, remote_host: _host || undefined, - ssh_port: _getPort(_host) || undefined, + ssh_port: _getPort(_serverMetaKey || _host) || undefined, env_prefix: envPrefix || undefined, hf_token: _envState.hfToken || undefined, gpus: _envState.gpus || undefined, @@ -1607,11 +1624,11 @@ export async function _launchServeTask(shortName, repo, cmd, fields, hostOverrid return; } - const _sp = _getPort(_host); + const _sp = _getPort(_serverMetaKey || _host); // _fields = the exact structured serve-form values used for this launch, // so the "Edit / relaunch" button can re-open the Serve panel pre-filled // with these precise settings (not just the last-used-for-repo state). - const payload = { repo_id: repo, remote_host: _host || undefined, ssh_port: _sp || undefined, _cmd: cmd, _fields: fields || undefined, _env: _usedEnv, _envPath: _usedEnvPath, _gpus: _usedGpus }; + const payload = { repo_id: repo, remote_host: _host || undefined, remote_server_key: _serverMetaKey || undefined, remote_server_name: _serverMetaName || undefined, ssh_port: _sp || undefined, _cmd: cmd, _fields: fields || undefined, _env: _usedEnv, _envPath: _usedEnvPath, _gpus: _usedGpus }; _addTask(data.session_id, shortName, 'serve', payload); uiModule.showToast(`Serving ${shortName}...`); // Auto-register may have enabled an existing (offline) endpoint for this @@ -1760,16 +1777,25 @@ export function _renderRunningTab() { } // Group tasks by server - const _serverName = (host) => { - if (!host) return 'Local'; - const srv = _serverByVal(_envState.remoteServerKey || host) - || _envState.servers.find(s => s.host === host); - return srv?.name || host; + const _taskServerKey = (task) => task?.remoteServerKey || task?.remoteHost || ''; + const _serverName = (keyOrTask) => { + if (keyOrTask && typeof keyOrTask === 'object') { + const task = keyOrTask; + if (task.remoteServerName) return task.remoteServerName; + const srv = task.remoteServerKey ? _serverByVal(task.remoteServerKey) : null; + if (srv?.name) return srv.name; + if (!task.remoteHost) return 'Local'; + return (_envState.servers.find(s => s.host === task.remoteHost)?.name) || task.remoteHost; + } + const key = keyOrTask || ''; + if (!key || key === 'local') return 'Local'; + const srv = _serverByVal(key); + return srv?.name || key; }; const serverGroups = {}; for (const t of tasks) { - const key = t.remoteHost || ''; - if (!serverGroups[key]) serverGroups[key] = { name: _serverName(key), serve: [], download: [] }; + const key = _taskServerKey(t); + if (!serverGroups[key]) serverGroups[key] = { name: _serverName(t), serve: [], download: [] }; serverGroups[key][t.type === 'serve' ? 'serve' : 'download'].push(t); } @@ -1816,12 +1842,12 @@ export function _renderRunningTab() { e.stopPropagation(); // don't toggle the section collapse (was an inline onclick, blocked by CSP) const host = btn.dataset.clearServer; const allTasks = _loadTasks(); - const toRemove = allTasks.filter(t => (t.remoteHost || '') === host && _canClearTask(t)); + const toRemove = allTasks.filter(t => _taskServerKey(t) === host && _canClearTask(t)); // Bail with a clear message instead of silently doing nothing when // every task on this server is still running (nothing finished to // clear yet) — the previous behavior looked like the button was dead. if (!toRemove.length) { - const stillRunning = allTasks.filter(t => (t.remoteHost || '') === host && t.status === 'running').length; + const stillRunning = allTasks.filter(t => _taskServerKey(t) === host && t.status === 'running').length; const _msg = stillRunning ? `No finished tasks on ${_serverName(host)} — ${stillRunning} still running. Stop them first to clear.` : `No finished tasks on ${_serverName(host)}.`; @@ -1830,7 +1856,7 @@ export function _renderRunningTab() { return; } if (!await window.styledConfirm(`Clear ${toRemove.length} finished task${toRemove.length === 1 ? '' : 's'} on ${_serverName(host)}?`, { confirmText: 'Clear' })) return; - const remaining = allTasks.filter(t => (t.remoteHost || '') !== host || !_canClearTask(t)); + const remaining = allTasks.filter(t => _taskServerKey(t) !== host || !_canClearTask(t)); _saveTasks(remaining); // Fade/slide each finished card out (same exit as the per-card clear) // instead of yanking them instantly. @@ -1864,7 +1890,7 @@ export function _renderRunningTab() { btn.addEventListener('click', async (e) => { e.stopPropagation(); // don't toggle the section collapse const host = btn.dataset.stopServer; - const running = _loadTasks().filter(t => (t.remoteHost || '') === host && t.status === 'running'); + const running = _loadTasks().filter(t => _taskServerKey(t) === host && t.status === 'running'); if (!running.length) { uiModule.showToast(`Nothing running on ${_serverName(host)}`); return; } if (!await window.styledConfirm(`Stop ${running.length} running task${running.length > 1 ? 's' : ''} on ${_serverName(host)}?`, { confirmText: 'Stop all' })) return; // Mark every task as user-stopped BEFORE firing the kills so that the @@ -2177,9 +2203,6 @@ export function _renderRunningTab() { if (task.status !== 'running' && task.status !== 'queued') { items.push({ group: 'run', label: 'Reconnect tmux', action: 'reconnect' }); } - if (task.status === 'running') { - items.push({ group: 'run', label: 'Stop', action: 'stop', danger: true }); - } items.push({ group: 'run', label: 'Restart', action: 'retry' }); // ── Edit section ──────────────────────────────────────────── // Merged "Edit & relaunch" — opens the structured serve panel @@ -2539,7 +2562,7 @@ export function _renderRunningTab() { }); // Route to the right server section body - const serverBodyId = `server-body-${(task.remoteHost || 'local').replace(/[^a-zA-Z0-9-]/g, '_')}`; + const serverBodyId = `server-body-${(_taskServerKey(task) || 'local').replace(/[^a-zA-Z0-9-]/g, '_')}`; const targetBody = document.getElementById(serverBodyId); if (targetBody) targetBody.appendChild(el); else group.appendChild(el); @@ -3393,7 +3416,8 @@ function _refreshServerDots() { let tasks; try { tasks = _loadTasks(); } catch { return; } const byKey = {}; - for (const t of tasks) { (byKey[t.remoteHost || ''] = byKey[t.remoteHost || ''] || []).push(t); } + const _taskServerKeyForDot = (task) => task?.remoteServerKey || task?.remoteHost || ''; + for (const t of tasks) { (byKey[_taskServerKeyForDot(t)] = byKey[_taskServerKeyForDot(t)] || []).push(t); } document.querySelectorAll('.cookbook-section-header').forEach(header => { const dot = header.querySelector('.cookbook-srv-status'); if (!dot) return; @@ -3798,6 +3822,7 @@ export function initRunning(shared) { _persistEnvState = shared._persistEnvState; _refreshDependencies = shared._refreshDependencies; _serverByVal = shared._serverByVal; + _serverKey = shared._serverKey; _selectedServer = shared._selectedServer; modelLogo = shared.modelLogo; esc = shared.esc; diff --git a/static/js/cookbookServe.js b/static/js/cookbookServe.js index aba3f7926..da48507f7 100644 --- a/static/js/cookbookServe.js +++ b/static/js/cookbookServe.js @@ -18,6 +18,7 @@ let _sshCmd; let _getPort; let _sshPrefix; let _serverByVal; +let _serverKey; let _getPlatform; let _isWindows; let _isMetal; @@ -41,9 +42,40 @@ let _nextAvailablePort; // Storage keys const SERVE_STATE_KEY = 'cookbook-serve-state'; +const SERVE_FAVORITES_KEY = 'cookbook-serve-favorite-models'; let _cachedAllModels = []; +function _loadServeFavorites() { + try { + const raw = JSON.parse(localStorage.getItem(SERVE_FAVORITES_KEY) || '[]'); + return new Set(Array.isArray(raw) ? raw.filter(Boolean).map(String) : []); + } catch { + return new Set(); + } +} + +function _saveServeFavorites(favorites) { + try { + localStorage.setItem(SERVE_FAVORITES_KEY, JSON.stringify(Array.from(favorites || []))); + } catch {} +} + +function _isServeFavorite(repo) { + return _loadServeFavorites().has(String(repo || '')); +} + +function _toggleServeFavorite(repo) { + const key = String(repo || ''); + if (!key) return false; + const favorites = _loadServeFavorites(); + const next = !favorites.has(key); + if (next) favorites.add(key); + else favorites.delete(key); + _saveServeFavorites(favorites); + return next; +} + function _repoLooksAwqLike(model, repo) { const q = String(model?.quant || '').toUpperCase(); const n = `${repo || ''} ${model?.repo_id || ''} ${model?.name || ''} ${model?.path || ''}`.toLowerCase(); @@ -53,7 +85,9 @@ function _repoLooksAwqLike(model, repo) { function _repoLooksGgufLike(model, repo) { const q = String(model?.quant || '').toUpperCase(); const n = `${repo || ''} ${model?.repo_id || ''} ${model?.name || ''} ${model?.path || ''}`.toLowerCase(); - return !!model?.is_gguf || /^Q[2-8]/.test(q) || /^IQ/.test(q) || q === 'GGUF' || n.includes('gguf'); + const hasGgufFile = Array.isArray(model?.gguf_files) + && model.gguf_files.some(f => f && typeof f.rel_path === 'string' && /\.gguf$/i.test(f.rel_path)); + return !!model?.is_gguf || hasGgufFile || /^Q[2-8]/.test(q) || /^IQ/.test(q) || q === 'GGUF' || n.includes('gguf'); } function _serveBackendWarning(model, repo, backend, fields = {}) { @@ -96,6 +130,352 @@ function _allGpuIds(count) { return Array.from({ length: Math.floor(n) }, (_, i) => String(i)).join(','); } +function _shellSplitForPreview(cmd) { + const s = String(cmd || ''); + const out = []; + let cur = ''; + let quote = ''; + let escNext = false; + for (const ch of s) { + if (escNext) { + cur += ch; + escNext = false; + continue; + } + if (ch === '\\') { + cur += ch; + escNext = true; + continue; + } + if (quote) { + cur += ch; + if (ch === quote) quote = ''; + continue; + } + if (ch === '"' || ch === "'") { + quote = ch; + cur += ch; + continue; + } + if (/\s/.test(ch)) { + if (cur) { + out.push(cur); + cur = ''; + } + continue; + } + cur += ch; + } + if (cur) out.push(cur); + return out; +} + +function _formatServeCmdPreview(cmd) { + const raw = String(cmd || ''); + if (raw.startsWith('MODEL_FILE=$({')) { + const marker = /&&\s+([A-Za-z_][A-Za-z0-9_]*=\S+\s+)*(?:[A-Za-z_][A-Za-z0-9_]*=\S+\s+)?(?:llama-server|python3?\s+-m\s+llama_cpp\.server)\b/; + const match = raw.match(marker); + if (match && match.index > 0) { + const prelude = raw.slice(0, match.index).replace(/\s+/g, ' ').trim(); + const rest = raw.slice(match.index).replace(/^\s*&&\s*/, ''); + return `${prelude}\n&&\n${_formatServeCmdPreview(rest)}`; + } + } + const tokens = _shellSplitForPreview(cmd); + if (tokens.length <= 4) return String(cmd || ''); + const lines = []; + let i = 0; + while (i < tokens.length && /^[A-Za-z_][A-Za-z0-9_]*=/.test(tokens[i])) { + lines.push(tokens[i]); + i++; + } + if (tokens[i]) { + const head = [tokens[i++]]; + if (tokens[i] && !tokens[i].startsWith('--') && !/^[A-Za-z_][A-Za-z0-9_]*=/.test(tokens[i])) head.push(tokens[i++]); + if (tokens[i] && !tokens[i].startsWith('--') && !/^[A-Za-z_][A-Za-z0-9_]*=/.test(tokens[i])) head.push(tokens[i++]); + lines.push(head.join(' ')); + } + while (i < tokens.length) { + const t = tokens[i++]; + if (t.startsWith('--')) { + const vals = []; + while (i < tokens.length && !tokens[i].startsWith('--') && !/^[A-Za-z_][A-Za-z0-9_]*=/.test(tokens[i])) { + vals.push(tokens[i++]); + } + lines.push([t, ...vals].join(' ')); + } else { + lines.push(t); + } + } + return lines.join('\n'); +} + +function _normalizeServeCmdForLaunch(cmd) { + return String(cmd || '') + .replace(/MODEL_FILE=\$\(\{\s+/g, 'MODEL_FILE=$({ ') + .replace(/\s+\}\s+\|\s+head\s+-1\)/g, ' } | head -1)') + .replace(/\s*;\s*/g, '; ') + .replace(/\s*\|\|\s*/g, ' __ODY_OR__ ') + .replace(/\s*\|\s*/g, ' | ') + .replace(/\s+__ODY_OR__\s+/g, ' || ') + .replace(/\s+/g, ' ') + .trim(); +} + +function _modelSizeGb(model, explicitGb = 0) { + const explicit = Number(explicitGb || 0); + if (Number.isFinite(explicit) && explicit > 0) return explicit; + const bytes = Number(model?.size_bytes || 0); + if (Number.isFinite(bytes) && bytes > 0) return bytes / (1024 ** 3); + const gb = Number( + model?.size_gb + || model?.required_gb + || model?.vram_needed + || model?.min_vram_gb + || model?.recommended_ram_gb + || model?.min_ram_gb + || 0 + ); + if (Number.isFinite(gb) && gb > 0) return gb; + if (_isMiniMaxM3Model(model)) return 240; + return 0; +} + +function _parseParamsB(text) { + const s = String(text || ''); + const m = s.match(/(\d+(?:\.\d+)?)\s*([bBmMtT])\b/); + if (!m) return 0; + const n = parseFloat(m[1]); + if (!Number.isFinite(n) || n <= 0) return 0; + const unit = m[2].toLowerCase(); + if (unit === 't') return n * 1000; + if (unit === 'b') return n; + if (unit === 'm') return n / 1000; + return 0; +} + +function _knownModelContextMax(model) { + if (_isMiniMaxM3Model(model)) return 1048576; + return 0; +} + +function _modelIdentityText(model) { + return [ + model?.repo_id, + model?.quant_repo, + model?.name, + model?.id, + model?.path, + model?.model_path, + model?.served_model_name, + model?.quant, + model?.format, + ].filter(Boolean).join(' ').toLowerCase(); +} + +function _isMiniMaxM3Model(model) { + const name = _modelIdentityText(model); + return ( + (/minimax/.test(name) && /\bm3\b/.test(name)) + || /minimax-m3/.test(name) + || /models--cyankiwi--minimax-m3-awq-int4/.test(name) + || /cyankiwi\/minimax-m3-awq-int4/.test(name) + ); +} + +function _isMiniMaxM2Model(model) { + const name = _modelIdentityText(model); + return /minimax/.test(name) && /\bm2(?:\.\d+)?\b/.test(name); +} + +function _modelContextMaxForServe(model, explicitMax) { + const explicit = Number(explicitMax || 0); + if (Number.isFinite(explicit) && explicit > 0) return explicit; + const known = _knownModelContextMax(model); + if (known > 0) return known; + for (const key of ['context_length', 'max_position_embeddings', 'n_ctx_train', 'model_max_length', 'max_seq_len']) { + const value = Number(model?.[key] || 0); + if (Number.isFinite(value) && value > 0) return value; + } + const catalogCtx = Number(model?.context || 0); + if (Number.isFinite(catalogCtx) && catalogCtx > 0) return catalogCtx; + return 131072; +} + +function _estimateVllmContextFit(model, fields, modelCtxMax, modelWeightsGb = 0, fitSystem = null) { + const sys = fitSystem || _hwfitCache?.system || {}; + const isMiniMaxM3 = _isMiniMaxM3Model(model); + const gpuIds = String(fields.gpus || '').split(',').map(s => parseInt(s.trim(), 10)).filter(Number.isFinite); + const tp = Math.max(1, parseInt(fields.tp, 10) || gpuIds.length || 1); + const selectedCount = Math.max(1, gpuIds.length || tp); + const groups = Array.isArray(sys.gpu_groups) ? sys.gpu_groups : []; + const activeGroup = sys.active_group || groups[0] || null; + const perGpuGb = Number(activeGroup?.vram_each) + || (Number(sys.gpu_vram_gb) / Math.max(1, Number(sys.gpu_count) || selectedCount)) + || 0; + if (!perGpuGb) { + return { needsHardwareScan: true, reason: 'scan hardware first to estimate context from VRAM' }; + } + + const gpuUtil = Math.min(0.99, Math.max(0.1, parseFloat(fields.gpu_mem) || 0.90)); + const budgetGb = perGpuGb * selectedCount * gpuUtil; + const modelGb = _modelSizeGb(model, modelWeightsGb); + if (!modelGb) return { needsModelSize: true, reason: 'model weight size unknown; scan model files or enter context manually' }; + const modelMax = Math.max(1024, _modelContextMaxForServe(model, modelCtxMax)); + + if (isMiniMaxM3) { + const perGpuBudgetGb = perGpuGb * gpuUtil; + const modelShardGb = modelGb / Math.max(1, tp); + const fixedOverheadGb = Math.max(1.5, perGpuBudgetGb * 0.035); + const freeForKv = perGpuBudgetGb - modelShardGb - fixedOverheadGb; + const kvGbPerToken = (29.25 / 1048576) * (String(fields.vllm_kv_cache_dtype || '').toLowerCase() === 'fp8' ? 1 : 1.8); + if (freeForKv <= 0) { + return { + ctx: 1024, + budgetGb, + modelGb, + kvGbPerToken, + reason: `model shard ${modelShardGb.toFixed(1)}G exceeds per-GPU usable ${perGpuBudgetGb.toFixed(1)}G before KV`, + }; + } + const raw = Math.floor((freeForKv / kvGbPerToken) * 0.99); + const rounded = Math.max(1024, Math.floor(raw / 128) * 128); + const ctx = Math.min(modelMax, rounded); + return { + ctx, + budgetGb, + modelGb, + kvGbPerToken, + reason: `~${ctx.toLocaleString()} tokens fits per-GPU KV (${freeForKv.toFixed(1)}G free)`, + }; + } + + const name = `${model?.repo_id || ''} ${model?.name || ''} ${model?.quant || ''}`; + const lower = name.toLowerCase(); + const isMoE = /\bmoe\b|a\d+b|minimax|deepseek|mixtral|kimi-k2|glm-4\.5/.test(lower); + const totalParams = _parseParamsB(name) || Math.max(1, modelGb / 0.58); + const activeFromName = (() => { + const m = lower.match(/\ba(\d+(?:\.\d+)?)b\b/); + return m ? parseFloat(m[1]) : 0; + })(); + const activeParams = activeFromName || (isMoE ? Math.min(totalParams, 32) : totalParams); + const effectiveActiveParams = (/minimax/.test(lower) && /\bm3\b/.test(lower)) ? 23 : activeParams; + const kvDtype = String(fields.vllm_kv_cache_dtype || '').toLowerCase(); + const kvFactor = kvDtype === 'fp8' ? 0.55 : 1; + const kvGbPerTokenTotal = Math.max(0.00002, 0.000008 * effectiveActiveParams * kvFactor); + const kvGbPerToken = kvGbPerTokenTotal / Math.max(1, tp); + const perGpuBudgetGb = perGpuGb * gpuUtil; + const modelShardGb = modelGb / Math.max(1, tp); + const fixedOverheadGb = Math.max(1.5, perGpuBudgetGb * 0.035); + const freeForKv = perGpuBudgetGb - modelShardGb - fixedOverheadGb; + if (freeForKv <= 0) { + return { + ctx: 1024, + budgetGb, + modelGb, + kvGbPerToken, + reason: `model shard ${modelShardGb.toFixed(1)}G exceeds per-GPU usable ${perGpuBudgetGb.toFixed(1)}G before KV`, + }; + } + const raw = Math.floor(freeForKv / kvGbPerToken); + const rounded = Math.max(1024, Math.floor(raw / 1024) * 1024); + const ctx = Math.min(modelMax, rounded); + return { + ctx, + budgetGb, + modelGb, + kvGbPerToken, + reason: `~${ctx.toLocaleString()} tokens fits per-GPU KV (${freeForKv.toFixed(1)}G free)`, + }; +} + +function _estimateLlamaContextFit(model, fields, modelCtxMax, modelWeightsGb = 0, fitSystem = null, profileData = null) { + const profiles = Array.isArray(profileData?.profiles) ? profileData.profiles : []; + const preferred = profiles.find(p => String(p?.key || '').toLowerCase() === 'balanced') + || profiles.find(p => Number(p?.ctx) > 0) + || null; + const modelMax = Math.max(1024, _modelContextMaxForServe(model, modelCtxMax)); + if (preferred && Number(preferred.ctx) > 0) { + const ctx = Math.min(modelMax, Number(preferred.ctx)); + return { + ctx, + reason: `profile ${preferred.label || preferred.key || 'fit'} fits scanned hardware`, + }; + } + + const sys = fitSystem || _hwfitCache?.system || {}; + const modelGb = _modelSizeGb(model, modelWeightsGb); + const backend = String(fields.backend || '').toLowerCase(); + const llamaMode = String(fields.llama_mode || '').toLowerCase(); + const isCpuMode = backend === 'llamacpp' && llamaMode === 'cpu'; + const isUnifiedMode = backend === 'llamacpp' && (llamaMode === 'unified' || fields.unified_mem); + if (!modelGb) { + return { + ctx: Math.min(modelMax, 32768), + needsModelSize: true, + reason: 'model weight size unknown; using model limit fallback', + }; + } + + if (isCpuMode) { + return { + ctx: Math.min(modelMax, 131072), + modelGb, + reason: 'CPU mode uses system RAM; capped to trained limit', + }; + } + + const gpuIds = String(fields.gpus || '').split(',').map(s => parseInt(s.trim(), 10)).filter(Number.isFinite); + const selectedCount = Math.max(1, gpuIds.length || parseInt(fields.tp, 10) || 1); + const groups = Array.isArray(sys.gpu_groups) ? sys.gpu_groups : []; + const activeGroup = sys.active_group || groups[0] || null; + const totalVramGb = Number(activeGroup?.vram_each) + ? Number(activeGroup.vram_each) * selectedCount + : (Number(sys.gpu_vram_gb) || 0); + if (!totalVramGb) { + return { + ctx: Math.min(modelMax, 32768), + modelGb, + needsHardwareScan: true, + reason: 'scan hardware first; using model limit fallback', + }; + } + + const totalRamGb = Number(sys.total_ram_gb) || 0; + const availableRamGb = Number(sys.available_ram_gb) || 0; + const unifiedPoolGb = isUnifiedMode + ? Math.max( + totalVramGb, + availableRamGb, + totalRamGb > 0 ? totalRamGb * 0.85 : 0 + ) + : totalVramGb; + const usableGb = isUnifiedMode + ? Math.max(1, unifiedPoolGb - Math.max(2.0, unifiedPoolGb * 0.08)) + : Math.max(1, totalVramGb - Math.max(1.0, selectedCount * 0.6)); + const freeForKv = usableGb - modelGb; + const kv = String(fields.cache_type || '').toLowerCase(); + const kvFactor = kv === 'q4_0' ? 0.55 : (kv === 'q8_0' ? 1 : (kv === 'f16' ? 1.9 : 1)); + const kvGbPerToken = Math.max(0.00008, (modelGb / 7.5) * 0.0007 * kvFactor); + if (freeForKv <= 0) { + return { + ctx: Math.min(modelMax, 8192), + modelGb, + kvGbPerToken, + reason: `model ${modelGb.toFixed(1)}G exceeds usable ${isUnifiedMode ? 'unified memory' : 'VRAM'} ${usableGb.toFixed(1)}G before KV`, + }; + } + const raw = Math.floor(freeForKv / kvGbPerToken); + const rounded = Math.max(1024, Math.floor(raw / 1024) * 1024); + const ctx = Math.min(modelMax, rounded); + return { + ctx, + modelGb, + kvGbPerToken, + reason: `~${ctx.toLocaleString()} tokens fits llama.cpp KV (${freeForKv.toFixed(1)}G free ${isUnifiedMode ? 'unified' : 'VRAM'})`, + }; +} + function _selectedServeTarget(panel) { const select = document.getElementById('hwfit-server-select') || document.getElementById('hwfit-dl-server'); const servers = Array.isArray(_envState.servers) ? _envState.servers : []; @@ -117,6 +497,8 @@ function _selectedServeTarget(panel) { : (server?.name || 'local server'); return { host, + serverKey: server ? (_serverKey?.(server) || '') : (select?.value || ''), + serverName: server?.name || '', port: host ? (_getPort(host) || server?.port || '') : '', venv, platform: server?.platform || _envState.platform || '', @@ -152,6 +534,9 @@ function _runtimeNoteText(backend, pkg, target) { const label = labels[backend] || backend; if (!pkg) return `${label} readiness unavailable for ${target.label}.`; const note = pkg.status_note || pkg.update_note || ''; + if (pkg.installed === null || pkg.probe_error) { + return note ? `${label} readiness unavailable for ${target.label}: ${note}` : `${label} readiness unavailable for ${target.label}.`; + } if (pkg.installed) { return note ? `${label} ready on ${target.label}: ${note}` : `${label} ready on ${target.label}.`; } @@ -226,6 +611,13 @@ function _runnableGgufFiles(model) { return primary.length ? primary : files; } +function _selectedGgufSizeGb(model, relPath) { + const file = _runnableGgufFiles(model).find(f => f.rel_path === relPath); + const bytes = Number(file?.size_bytes || 0); + if (!Number.isFinite(bytes) || bytes <= 0) return 0; + return bytes / (1024 ** 3); +} + function _ggufFileLabel(file) { const base = (file.name || file.rel_path || '').split('/').pop(); const size = _formatGgufSize(file.size_bytes); @@ -281,6 +673,12 @@ function _rerenderCachedModels() { else if (sortVal === 'size-desc') allModels.sort((a, b) => _parseSize(b.size) - _parseSize(a.size)); else if (sortVal === 'size-asc') allModels.sort((a, b) => _parseSize(a.size) - _parseSize(b.size)); else if (sortVal === 'recent') allModels.sort((a, b) => (b.mtime || 0) - (a.mtime || 0)); + const favorites = _loadServeFavorites(); + allModels.sort((a, b) => { + const af = favorites.has(String(a.repo_id || '')) ? 1 : 0; + const bf = favorites.has(String(b.repo_id || '')) ? 1 : 0; + return bf - af; + }); let html = ''; let visibleCount = 0; @@ -303,8 +701,9 @@ function _rerenderCachedModels() { // living on the same line as the model name. const _isDownloading = m.status === 'downloading'; const _isDlActive = _isDownloading ? _isActivelyDownloading(m.repo_id) : false; + const _isFavorite = favorites.has(String(m.repo_id || '')); const isSelectMode = document.getElementById('hwfit-cache-select')?.classList.contains('active'); - html += `
`; + html += `
`; html += ``; html += `
`; const _mc = modelColor(m.repo_id) || ''; @@ -314,7 +713,8 @@ function _rerenderCachedModels() { const _downloadingPill = _isDownloading ? ` ${_isDlActive ? 'downloading' : 'stalled'}` : ''; - html += `
${modelLogo(m.repo_id)}${esc(shortName)}${hfLink ? ` HF ↗` : ''}${_runningPill}${_downloadingPill}
`; + const _favoritePill = _isFavorite ? ' pinned' : ''; + html += `
${modelLogo(m.repo_id)}${esc(shortName)}${_favoritePill}${hfLink ? ` HF ↗` : ''}${_runningPill}${_downloadingPill}
`; html += `
${metaParts.join(' \u00b7 ')}
`; html += `
`; const _bk = _detectBackend(m).backend; @@ -397,7 +797,12 @@ function _rerenderCachedModels() { const _deleteIco = ''; const _selectIco = '●'; const _schedIco = ''; + const _favNow = _isServeFavorite(repo); + const _favIco = _favNow + ? '' + : ''; const items = []; + items.push({ label: _favNow ? 'Unfavorite' : 'Favorite', icon: _favIco, action: 'favorite' }); if (m && m.status === 'ready') items.push({ label: 'Serve', icon: _serveIco, action: 'serve' }); if (m && m.status === 'downloading') items.push({ label: 'Retry', icon: _retryIco, action: 'retry' }); if (m && m.status === 'ready') items.push({ label: 'Schedule…', icon: _schedIco, action: 'schedule' }); @@ -410,6 +815,11 @@ function _rerenderCachedModels() { div.addEventListener('click', () => { closeDropdown(); if (opt.action === 'serve') item.click(); + else if (opt.action === 'favorite') { + const favored = _toggleServeFavorite(repo); + uiModule.showToast(favored ? 'Favorited — pinned to top' : 'Unfavorited'); + _rerenderCachedModels(); + } else if (opt.action === 'delete') _deleteCachedModel(repo, item, false, m); else if (opt.action === 'retry') _retryCachedModel(repo, m); else if (opt.action === 'schedule') { @@ -532,16 +942,22 @@ function _rerenderCachedModels() { const ss = (_byRepo[repo] && typeof _byRepo[repo] === 'object') ? _byRepo[repo] : (_lastUsed || (_isLegacyFlat ? _allSs : {})); + const _modelSs = (_byRepo[repo] && typeof _byRepo[repo] === 'object') ? _byRepo[repo] : null; + const _repoForcedBackend = !!(_modelSs && _modelSs._forceBackend); + const _isMiniMaxM3 = _isMiniMaxM3Model({ ...m, repo_id: repo }); + const _isMiniMaxM2 = _isMiniMaxM2Model({ ...m, repo_id: repo }); + const _isMiniMaxMSeries = _isMiniMaxM3 || _isMiniMaxM2; + const svm = (k, def) => (_modelSs && _hasOwn(_modelSs, k)) ? _modelSs[k] : def; const detectedBackend = _detectBackend(m).backend; const _allowedBackends = new Set(_isWindows() ? ['llamacpp', 'diffusers'] : (_isMetal() ? ['llamacpp', 'ollama'] : ['vllm', 'sglang', 'llamacpp', 'ollama', 'diffusers'])); - const defaultBackend = (ss._forceBackend && ss.backend && _allowedBackends.has(ss.backend)) + const defaultBackend = (_repoForcedBackend && ss.backend && _allowedBackends.has(ss.backend)) ? ss.backend : detectedBackend; - const savedMatchesBackend = !!ss._forceBackend || (ss.backend || 'vllm') === detectedBackend; + const savedMatchesBackend = _repoForcedBackend || (ss.backend || 'vllm') === detectedBackend; const sv = (k, def) => (ss[k] !== undefined && savedMatchesBackend) ? ss[k] : def; - const defaultTp = defaultBackend === 'llamacpp' ? '1' : sv('tp', '1'); + const defaultTp = defaultBackend === 'llamacpp' ? '1' : sv('tp', _isMiniMaxMSeries ? '8' : '1'); const detectedGpuIds = _allGpuIds(_getGpuToggleTotal?.()); const defaultGpus = defaultBackend === 'llamacpp' ? '0' @@ -555,7 +971,7 @@ function _rerenderCachedModels() { // OOMs. _detectModelOptimizations seeds opts.kvCacheDtype for // those families; honour it unless the user has a saved override. const _kvOptsCheck = _detectModelOptimizations(repo); - const _kvAutoDefault = (_kvOptsCheck && _kvOptsCheck.kvCacheDtype) || 'auto'; + const _kvAutoDefault = (_kvOptsCheck && _kvOptsCheck.kvCacheDtype) || (_isMiniMaxMSeries ? 'fp8' : 'auto'); const _kvSelected = sv('vllm_kv_cache_dtype', _kvAutoDefault); const vllmKvCacheOpts = ['auto','fp8'].map(d => ``).join(''); const _l = (name, tip) => `${name}?`; @@ -567,6 +983,11 @@ function _rerenderCachedModels() { const _ggufOptions = _ggufChoices.map(f => `` ).join(''); + const _minimaxM3Snapshot = '/home/pewds/.cache/huggingface/hub/models--cyankiwi--MiniMax-M3-AWQ-INT4/snapshots/4082acbbec1236d21828d55b6bb0fe02ade4ab5b'; + const _defaultServeModel = _isMiniMaxM3 ? _minimaxM3Snapshot : (m.is_local_dir && m.path ? `${m.path}/${repo}` : repo); + const _savedModelPath = String(svm('model_path', _defaultServeModel) || '').trim(); + const _modelPathValue = _isMiniMaxM3 && (!_savedModelPath || _savedModelPath === repo) ? _minimaxM3Snapshot : _savedModelPath; + const _defaultServedModelName = _isMiniMaxM3 ? repo : ''; // Build save slots const _allPresets = _loadPresets(); const _repoShort = repo.split('/').pop(); @@ -583,15 +1004,10 @@ function _rerenderCachedModels() { const _arrowTitle = _modelPresets.length > 0 ? `${_modelPresets.length} saved launch config${_modelPresets.length === 1 ? '' : 's'} for ${_repoShort} — click ▾ to load or delete` : `No saved launch configs for ${_repoShort} yet — click Save to add one`; - // Wrap the Save split in a
+