From 4fca9b2a366325e4da99836233c9fdacb213fa87 Mon Sep 17 00:00:00 2001 From: Allen Houchins <32207388+allenhouchins@users.noreply.github.com> Date: Wed, 10 Jun 2026 23:07:32 -0500 Subject: [PATCH] Add PPPC Utility as a macOS FMA (#47400) Add Jamf PPPC Utility to maintained apps: create input metadata (homebrew token), add app entry to apps list, and provide darwin output with version 2.0.0, installer URL, sha256, and installer/uninstaller script refs. Also add frontend SVG icon, update icon index, and include the app PNG asset. This integrates PPPC Utility into the installer catalog and UI under the Developer tools category. --- .../inputs/homebrew/pppc-utility.json | 8 +++++++ ee/maintained-apps/outputs/apps.json | 7 ++++++ .../outputs/pppc-utility/darwin.json | 22 ++++++++++++++++++ .../components/icons/PppcUtility.tsx | 14 +++++++++++ .../SoftwarePage/components/icons/index.ts | 2 ++ .../images/app-icon-pppc-utility-60x60@2x.png | Bin 0 -> 14749 bytes 6 files changed, 53 insertions(+) create mode 100644 ee/maintained-apps/inputs/homebrew/pppc-utility.json create mode 100644 ee/maintained-apps/outputs/pppc-utility/darwin.json create mode 100644 frontend/pages/SoftwarePage/components/icons/PppcUtility.tsx create mode 100644 website/assets/images/app-icon-pppc-utility-60x60@2x.png diff --git a/ee/maintained-apps/inputs/homebrew/pppc-utility.json b/ee/maintained-apps/inputs/homebrew/pppc-utility.json new file mode 100644 index 0000000000..7c8ebb8982 --- /dev/null +++ b/ee/maintained-apps/inputs/homebrew/pppc-utility.json @@ -0,0 +1,8 @@ +{ + "name": "PPPC Utility", + "unique_identifier": "com.jamf.opensource.pppcutility", + "token": "pppc-utility", + "installer_format": "zip", + "slug": "pppc-utility/darwin", + "default_categories": ["Developer tools"] +} diff --git a/ee/maintained-apps/outputs/apps.json b/ee/maintained-apps/outputs/apps.json index 909548ded6..48d0caed64 100644 --- a/ee/maintained-apps/outputs/apps.json +++ b/ee/maintained-apps/outputs/apps.json @@ -3634,6 +3634,13 @@ "unique_identifier": "PowerToys", "description": "PowerToys is a set of utilities from Microsoft for power users to tune and streamline their Windows experience for greater productivity." }, + { + "name": "PPPC Utility", + "slug": "pppc-utility/darwin", + "platform": "darwin", + "unique_identifier": "com.jamf.opensource.pppcutility", + "description": "PPPC Utility is an open-source tool from Jamf for creating configuration profiles that contain Privacy Preferences Policy Control (PPPC) payloads." + }, { "name": "Prisma Browser", "slug": "prisma-browser/windows", diff --git a/ee/maintained-apps/outputs/pppc-utility/darwin.json b/ee/maintained-apps/outputs/pppc-utility/darwin.json new file mode 100644 index 0000000000..625b7669e4 --- /dev/null +++ b/ee/maintained-apps/outputs/pppc-utility/darwin.json @@ -0,0 +1,22 @@ +{ + "versions": [ + { + "version": "2.0.0", + "queries": { + "exists": "SELECT 1 FROM apps WHERE bundle_identifier = 'com.jamf.opensource.pppcutility';", + "patched": "SELECT 1 WHERE NOT EXISTS (SELECT 1 FROM apps WHERE bundle_identifier = 'com.jamf.opensource.pppcutility' AND version_compare(bundle_short_version, '2.0.0') < 0);" + }, + "installer_url": "https://github.com/jamf/PPPC-Utility/releases/download/2.0.0/PPPC-Utility.zip", + "install_script_ref": "73b61e0f", + "uninstall_script_ref": "4e6a32b2", + "sha256": "acf3bf97f79f1a9cbd51b5bc13eb88e7608eb55a32b3e281042824b04a8a98c5", + "default_categories": [ + "Developer tools" + ] + } + ], + "refs": { + "4e6a32b2": "#!/bin/bash\n\n# variables\nAPPDIR=\"/Applications/\"\nLOGGED_IN_USER=$(scutil <<< \"show State:/Users/ConsoleUser\" | awk '/Name :/ { print $3 }')\n# functions\n\nquit_application() {\n local bundle_id=\"$1\"\n local timeout_duration=10\n\n # check if the application is running\n local app_running\n app_running=$(osascript -e \"application id \\\"$bundle_id\\\" is running\" 2>/dev/null)\n if [[ \"$app_running\" != \"true\" ]]; then\n return\n fi\n\n local console_user\n console_user=$(stat -f \"%Su\" /dev/console)\n if [[ -z \"$console_user\" || \"$console_user\" == \"root\" || \"$console_user\" == \"loginwindow\" ]]; then\n echo \"Not logged into a non-root GUI; skipping quitting application ID '$bundle_id'.\"\n return\n fi\n\n echo \"Quitting application '$bundle_id'...\"\n\n # try to quit the application within the timeout period\n local quit_success=false\n SECONDS=0\n while (( SECONDS < timeout_duration )); do\n if osascript -e \"tell application id \\\"$bundle_id\\\" to quit\" >/dev/null 2>&1; then\n if ! pgrep -f \"$bundle_id\" >/dev/null 2>&1; then\n echo \"Application '$bundle_id' quit successfully.\"\n quit_success=true\n break\n fi\n fi\n sleep 1\n done\n\n if [[ \"$quit_success\" = false ]]; then\n echo \"Application '$bundle_id' did not quit.\"\n fi\n}\n\n\ntrash() {\n local logged_in_user=\"$1\"\n local target_file=\"$2\"\n local timestamp=\"$(date +%Y-%m-%d-%s)\"\n local rand=\"$(jot -r 1 0 99999)\"\n\n # replace ~ with /Users/$logged_in_user\n if [[ \"$target_file\" == ~* ]]; then\n target_file=\"/Users/$logged_in_user${target_file:1}\"\n fi\n\n local trash=\"/Users/$logged_in_user/.Trash\"\n\n # If the target contains glob characters, expand it and move each match.\n if [[ \"$target_file\" == *[*?[]* ]]; then\n local file file_name\n local matched=false\n local i=0\n # compgen -G expands the (quoted) pattern itself, so paths containing\n # spaces glob correctly; reading line by line keeps each match intact.\n while IFS= read -r file; do\n [[ -n \"$file\" ]] || continue\n [[ -e \"$file\" || -L \"$file\" ]] || continue\n matched=true\n i=$((i + 1))\n file_name=\"$(basename \"$file\")\"\n echo \"removing $file.\"\n # The per-match counter keeps matches that share a basename from\n # overwriting each other in the trash.\n mv -f \"$file\" \"$trash/${file_name}_${timestamp}_${rand}_${i}\"\n done < <(compgen -G \"$target_file\" 2>/dev/null)\n if [[ \"$matched\" == false ]]; then\n echo \"$target_file doesn't exist.\"\n fi\n return\n fi\n\n local file_name=\"$(basename \"${target_file}\")\"\n\n if [[ -e \"$target_file\" ]]; then\n echo \"removing $target_file.\"\n mv -f \"$target_file\" \"$trash/${file_name}_${timestamp}_${rand}\"\n else\n echo \"$target_file doesn't exist.\"\n fi\n}\n\nquit_application 'com.jamf.opensource.pppcutility'\nsudo rm -rf \"$APPDIR/PPPC Utility.app\"\ntrash $LOGGED_IN_USER '~/Library/Application Support/com.apple.sharedfilelist/com.apple.LSSharedFileList.ApplicationRecentDocuments/com.jamf.opensource.pppcutility*'\ntrash $LOGGED_IN_USER '~/Library/Containers/com.jamf.opensource.pppcutility'\n", + "73b61e0f": "#!/bin/bash\n\n# variables\nAPPDIR=\"/Applications/\"\nTMPDIR=$(dirname \"$(realpath \"$INSTALLER_PATH\")\")\n# functions\n\nquit_and_track_application() {\n local bundle_id=\"$1\"\n local var_name=\"APP_WAS_RUNNING_$(echo \"$bundle_id\" | tr '.-' '__')\"\n local timeout_duration=10\n\n # check if the application is running\n local app_running\n app_running=$(osascript -e \"application id \\\"$bundle_id\\\" is running\" 2>/dev/null)\n if [[ \"$app_running\" != \"true\" ]]; then\n eval \"export $var_name=0\"\n return\n fi\n\n local console_user\n console_user=$(stat -f \"%Su\" /dev/console)\n if [[ -z \"$console_user\" || \"$console_user\" == \"root\" || \"$console_user\" == \"loginwindow\" ]]; then\n echo \"Not logged into a non-root GUI; skipping quitting application ID '$bundle_id'.\"\n eval \"export $var_name=0\"\n return\n fi\n\n # App was running, mark it for relaunch\n eval \"export $var_name=1\"\n echo \"Application '$bundle_id' was running; will relaunch after installation.\"\n\n echo \"Quitting application '$bundle_id'...\"\n\n # try to quit the application within the timeout period\n local quit_success=false\n SECONDS=0\n while (( SECONDS < timeout_duration )); do\n if osascript -e \"tell application id \\\"$bundle_id\\\" to quit\" >/dev/null 2>&1; then\n if ! pgrep -f \"$bundle_id\" >/dev/null 2>&1; then\n echo \"Application '$bundle_id' quit successfully.\"\n quit_success=true\n break\n fi\n fi\n sleep 1\n done\n\n if [[ \"$quit_success\" = false ]]; then\n echo \"Application '$bundle_id' did not quit.\"\n fi\n}\n\n\nrelaunch_application() {\n local bundle_id=\"$1\"\n local var_name=\"APP_WAS_RUNNING_$(echo \"$bundle_id\" | tr '.-' '__')\"\n local was_running\n\n # Check if the app was running before installation\n eval \"was_running=\\$$var_name\"\n if [[ \"$was_running\" != \"1\" ]]; then\n return\n fi\n\n local console_user\n console_user=$(stat -f \"%Su\" /dev/console)\n if [[ -z \"$console_user\" || \"$console_user\" == \"root\" || \"$console_user\" == \"loginwindow\" ]]; then\n echo \"Not logged into a non-root GUI; skipping relaunching application ID '$bundle_id'.\"\n return\n fi\n\n echo \"Relaunching application '$bundle_id'...\"\n\n # Launch the app in the logged-in user's GUI session. Apps launched by root\n # won't register with the user's Dock/GUI, so run 'open' as the console user.\n # Use 'launchctl asuser' to bootstrap into the console user's Mach namespace\n # and GUI session — 'sudo -u' alone doesn't do this, which can cause\n # LSOpenURLsWithRole() failures even when 'open' exits 0.\n local open_status=0\n if [[ $EUID -eq 0 ]]; then\n local console_uid\n console_uid=$(id -u \"$console_user\")\n /bin/launchctl asuser \"$console_uid\" sudo -u \"$console_user\" open -b \"$bundle_id\" >/dev/null 2>&1 || open_status=$?\n else\n open -b \"$bundle_id\" >/dev/null 2>&1 || open_status=$?\n fi\n\n if [[ $open_status -eq 0 ]]; then\n echo \"Application '$bundle_id' relaunched successfully.\"\n else\n echo \"Failed to relaunch application '$bundle_id'.\"\n fi\n}\n\n\n# extract contents\nunzip \"$INSTALLER_PATH\" -d \"$TMPDIR\"\n# copy to the applications folder\nquit_and_track_application 'com.jamf.opensource.pppcutility'\nif [ -d \"$APPDIR/PPPC Utility.app\" ]; then\n\tsudo mv \"$APPDIR/PPPC Utility.app\" \"$TMPDIR/PPPC Utility.app.bkp\"\nfi\nsudo cp -R \"$TMPDIR/PPPC Utility.app\" \"$APPDIR\"\nrelaunch_application 'com.jamf.opensource.pppcutility'\n" + } +} diff --git a/frontend/pages/SoftwarePage/components/icons/PppcUtility.tsx b/frontend/pages/SoftwarePage/components/icons/PppcUtility.tsx new file mode 100644 index 0000000000..a5e41440d3 --- /dev/null +++ b/frontend/pages/SoftwarePage/components/icons/PppcUtility.tsx @@ -0,0 +1,14 @@ +import * as React from "react"; + +import type { SVGProps } from "react"; + +const PppcUtility = (props: SVGProps) => ( + + + +); +export default PppcUtility; diff --git a/frontend/pages/SoftwarePage/components/icons/index.ts b/frontend/pages/SoftwarePage/components/icons/index.ts index 543ab78a34..225c2d01ff 100644 --- a/frontend/pages/SoftwarePage/components/icons/index.ts +++ b/frontend/pages/SoftwarePage/components/icons/index.ts @@ -413,6 +413,7 @@ import PowerBi from "./PowerBi"; import PowerMonitor from "./PowerMonitor"; import Powershell from "./Powershell"; import Powertoys from "./Powertoys"; +import PppcUtility from "./PppcUtility"; import Prisma from "./Prisma"; import Pritunl from "./Pritunl"; import Privileges from "./Privileges"; @@ -1087,6 +1088,7 @@ export const SOFTWARE_NAME_TO_ICON_MAP = { "power monitor": PowerMonitor, powershell: Powershell, powertoys: Powertoys, + "pppc utility": PppcUtility, prisma: Prisma, pritunl: Pritunl, privileges: Privileges, diff --git a/website/assets/images/app-icon-pppc-utility-60x60@2x.png b/website/assets/images/app-icon-pppc-utility-60x60@2x.png new file mode 100644 index 0000000000000000000000000000000000000000..7bd58d13b1526de465cf9b64cfee922d5e8482cb GIT binary patch literal 14749 zcmV;OIbz0%P)Px#L}ge>W=%~1DgXcg2mk?xX#fNO00031000^Q000001E2u_0{{R30RRC20H6W@ z1ONa40RR91fS>~a1ONa40RR91fB*mh07#AmcK`r62T4RhRCodHod3A}-i5=io5CQ}edQJGKCIo}AO>;M{xZ#3( zk*loU?)&`r-n~AO)htW0TvorMbM85N_U!J=&dkot&Kh$f9oIeJJI-2f+Zzl9D{QvU zcTjg!oUy{UkItJ1wfN|4Mwwds!T?s=?6GXwGQV=<<>dwE&!2C)ckdqjKB1 z`*m;7ph5OnyLPRwPoF-vK;_@Re}6DDGc!mT!QcGmH(rGBUfcXf;o{q zv17;j$Bi53d+MpD3?sROJf-FGmH!#wh8Kv+@BLjqf7HMK{cnF_Vxq5Q%a)}eO6kQH zUtH>;8dbepzN|*``=~?!Mz}_ zGmUA=`Ec9Fr-NA>-+&aW3kwUEf+X|StXZ>k;J|^K_=b>ADSFzpX@R7qq>}gEd+(@3 zhEOva*ME&N|Gatgq9MN`*)~1TyMz@@gPSuzfT}SxKpY+S-{iT>M)z&tt}wCH!{*c z1u*4-u2C(Z@aO=b`CVlaP{9 zNRR+U5JER9L})Z*i5^tP1Yp@k>a-m@c63WkO}!4Deg*g1>0UUA=lYdjVz;HO<=A{l zu+(G~4LUZ8yuZcABO6`^+i;zPtu1wIMokR~5k>{32^ z0LSn78=q`?Cp9-cnzl3@lbV^fiK!+IgmI|?WKdPD+yWxxfe5c5tUlJO zSFicpkDfGXQZ)L9LJ&bnqr6J)9QxG&|BomFASgvi$-?xi1i-gu#NW<{zX8A}h1;%C z0?>mfcNq2_pk)EvHG8(3g}XMH&vtJz({lHiZy4PIayv$ID}TTwa6|)aHPZF6dRXJO zd`~Nna)!Y;ArEMU_oSu+sMy0hg1Dka)T~b>?AspN1TU6HK zoAId#A+Mcog9zY3{_`OG!$XD)Svg|Fi1-_BxFLAWHP?vhg{sCy_&Rh|&;O4I0)X{? zlqgZ*Q6GTE-^7Uj1%PiIZf^we>K5+X+XamD)qA#?ncLQy_jZ0`-pSj;eV^$bh&C&|p+~V^^r6uN*jVsKb*Un|c?=?f|ye7VY$w%;Vy`Y{r8j_$I z2UWq^S8ggQrp zdPM;7`>>(LK=SWH(EE89cmjTuXC#PIMM$?zz~&bq`4>=QH;^N|UUT@jR?jz=ubXSy(owyl;sCrx{Lv2j zvhWc_(6n@IQGr=kT4bJ0A7n1>HpDbRrg2CBRR}@})kguQi__nJ`|WEkyX>-Uu!QKl z?z$^4+<)qrI_sQzK>*qjO+$*9a*L2al)@o^JKOhb^RLeP+5vyho;~Tw$;lsLd+$cYG+~bBS!7Nx zUVq{8X(pa~J)+}GHYD`QH1Co1s!3JN<-f1>vt~aN& z=wuRO;w%!-hZ>~Cu+rq#ty`ZtVZwxuF1_^9oe~VEOqn7qIV=ir*a)C`{yFEIQvwA@ zK&7dX-=9hqd4azpH_QCb+;`2(IlIhw$iAjThlRGGemiFVt1pBEJW{;MgEV}-d-wK9$%7{Abx74k z)S?W}&jk24&Uu@LWi!Q#H95yA$*&1?G?Wt<@EcGkXD~f{ap;AnO=5~g0#Q-dw6FLyJE)Phz?qgFgQR@Ldnp?CdB(Uk1)g$W4D(G}*`(LIcY>vxMB|O!MZ= z|1f9HoKXP3=*~Ou)H;Vlo*5i60*LQF{`ljd;K zBkEqGOrH9S#M{x2a^ja%;P*VU$_mH#Ki#y_j9vU+GXd3ZHk6>EB$KHeDh~DI6_wT4 z?`fpSS*5mSExn(F*6`!JEHk<9Y36h^hOVzwG)ENf@_)yV@(u=P3`b7*evPJxhXey> z-NS+5WTenpd`LoxoaTK}UTnzPWk$?;-E^eF0ZF$D zq$X)r%~fUX%2oDg`>8>Yhr;WN{h8)%oK{ES*doneZIX;gTZ)U!=q9P=Z^JGyO`>D0 zJitFKQ1#o3d%+^5U)eLo!`l`l0lf9*Ba3~Sxl#K!qX=?6uXt4(~!->zM| z5*!#?VBvcejI;jwj`XkIyWNal@{t*fYqaLE<*^DQftih;+`IkHG$Yz}H35G}PEo$& z;fM(YOs}-IW&lj^!OXR$8x-2jE}YB+G3peKFg}ilPhPM7UT+n zzAUndbj?R6@EcT{Lt1B8tQFMP?%82-Knknjq7lbjqTTRH>j&6ADa|(TjP!oy!p+Og zO00j$zNlIWhN2!BcuPHs_talfziZ-IB|Zq2_L>)-yrov`r&uN7H<;o&&30#Pt%agKV_MPJJy?l zbKjs8dH5cKz_%ShPe2X30-&iQE-@WgO_YFocVtov^Tv)nW=wRnUAy4ztD0Pk3UrQ+ zMaQzmoV#I}IXh#3V+EF)L!mE4Sbq^$ytzOA@sFdKvP)^?z;aM$SBn6hJ9ienE@{%F z$t|2yIEqn5L}~PEbkmL-Aqm%gg**o(@4C93s5iBO=PdLDImfUgh*}^fMKmsT8sGSFTq4up-kIAEG8V0rx5H7FiiHE&~2_GXdML&m#CIc}Y&-YLP zJran@RKaPD^zfj>;zdhV;QiO~P>f8Y-_H4WvD)@AoEV0n>dmVL_@ROipobS34*KXZ zcZ1f}gN!4JJDk3MWYbc!J!hW;L48MS&`L1O#hrB0NmtO7KB$0KMSM{2R*C>96a4b( zUB7;PDh0aH&$8@L8J})mX{P4yH%W}X75Z0B-062L_qg09m!g*jyuS=ZAzSrH zWf(}9+@w(sRR6+JnnV1)IRiwavp$ljzz|^Y^yX!D<&l*ILe^MOfiz|W=knc$@Y#^G zEm^>g)dH6YodzrLSH4!&vaZ@s&Dg=x8XhX?;0JC>Q_ks@7T1tJ?xF+R|f&3m?*0WCU)AWPgN;1%f9snZ#B@f7R>(OtWCEm*yJbp-h8`hx@mk$=Ux<5?7Z zH0Ht!FKmS{s2PD~b!9+z5CstV zNBAp&{P&}bfhv$>%gaHf``?}GOkYTjG*UH5E>|AbLM5>gMfsS6Hc*GOa4^O_m@p(9s_TzCjqG*`uWg{lwPJV z$1K2pFYjJA7!JLls^1V(PevI0fFK&H_in@H(zy&9Xy3m57_v;kR4jN4FD>vnA0!0& z6dhX+z@V`@D><66WY=ari2M#cJ@o%F1)I1Ob2eT>QfnToNl`;);|LO^>25tI3pA+f zf}I;J0)$~^Pb}8a;@sqg3m4`x8}K6xR*V3UexKI!6RAQ$m4~R#6b#i4NwYJE#+7cR zfBU&wHwomjBVQUsnU9avq?YYrnrz!!&y5sI?g?zZ*t5l4iQ`CoD1@Cw0N6mEr=Nbh z!*$nPw;aF0GIBsfxKsUp{p(-b7g*ub8=$wdbw()ES?b1Vc&N5v^eO_^iB$6*upLK#xxg&V-D}!YIQHNMPqqaO{?()J zgObf!0;45N2lt{6Py$@G`=ILW&pYqD7P^J+U8yo@rv)?}&{)yQqV1QbVwN@}wa)X#boq+Hszr514 zw6s825ImsbZP7w*oiK^`cpW_uA?XGXg(>r)<^;Od$z2H@w0j0K?zrF+16CL8&1-U6@=5u+JsLY73kmPiooG zygKB&rXBW!t@sn1KmrSrgZ|k$pC2lKx0aG1$e^~@@P5evewOs>c3A|lIYR%GsZ81> z3edo#F4T|!q2brqy09G0bV_b!o*Qz$HGiH!f-)eA{0M>CZ*mDXWm9Mj+e_pCIVME2 zg2A!A0v9S|Ke}c8 z3Sn3HX# zB4rRDQX(U*jOj}JLqVIHfJqHG1#}gXv1mekQvyrQsT2veArmOLQbQxCtK*@Z8={U1 zS1&_b1YRKmAWERwoga&@kGM{{8({&FdWqM1lgNNp_m;iu%~Ai?T6CgS$CV*L8Z|7jObcE6pC4i9hJ`^NFt%0G_aiJoKN@qY2np06v4a-~ zqSOcW_6>Z`DUKRbTUOw!r=+Rb-0V!#3xsXxEpGIECksI3BLiL}p?r#9haS+!jDEtt zmCtnqejh-B*;XFVk|+gI6cRki?BE8Xl5Iv{6(wj4HVb)84FfUnVEyD$Jasmpotv4v z&(31x#^pw8U3aAbsInta4nx$*0^aXAxJL4V9r78AB>C`Z*Nz;Db9#Zu!y|B^;1g%D zW!sgjJ~MB#&w!Sf%kN$;S3hXq$1Gq|2D_?s;)XqgSnFte?H+|<_tdHEFW@#8J&<~ zrsFRtU%t9blGk+(rR@rS|~M-ES_raBTj)9Nz~M1*}hy)|5RTYuVg@* zLRgm{rM5K>4>`~DZr^#Pu(lcec+&2^2Xk0+qw4lLa{lkVHQyX%L5nKSOvQ z8$62D!)E8so%)>Juh(W|H_Pz5!I0;Ny&L-1oB+?V1so{~V1ds_nF{c4NN#C?-z+Y) zC!Y;UxoC>Hi#-KT4SOpesd~CDQ+=BNRLKCMR?lY)HTMDVH0ms1=+I81zZra%`B&GG zW*QMgvS4F+=WvlA1jJI)gvg>cc?x83%U7%zTR@QgjO~*M1t0*iy#bjBiL6i#_inSe zkZ$Nmbgb&2weV9hN8bqW9~g8FVN*lfv?@H!LjeEh0AC^K6_>Dl9o4`?Im*9pJF$lU zR9D$BETy8psW{Ng8hEbxL9dY}CQRzJE>cLVq|Gue=|0qadGh(}hZqYYF1iG!`01I&L;H(C62oOOI?VK%@K|?!mtA>{6R{(r%Huc8^ zA4Gt!5#$A)DzDgjlD2DdD1@EV&m!Bk@jKABg{Z2>)PgMYKL8*WE?dZ*s7Cxam2-DV%y%9V(jL*7JWtlK-o1-7OJolEe`P{+cg-0ENmI< zCF$wudK_68;?pM1y2HcGxDne;i^9T#F9jCRSHcw?q>^k#Wv<7hZ)o2=JM!7F+dJ|F z{QCg@?{=)QBflcxD?afyj)6?WYBu2tTEH*I@m0iAfgNiyl@yTN{(w{A_1`7_;gfwQ z*l1|3dnAm_*z&cxXz3I)m=!!u8RSN$RJN&5*;@ykW=6N_VkWMdVO~XFpnVfH0K`ga zs)&;StR2s_?Y$=v*CA-w&1Hw~;R_&7VGBm52M8hq*c)tdzNKHkej*jECHX@?Od96c z?!@z1g;`iqYfU=F^YL0;N};1|SZ`|D%KUNA*%7jT0QhSw1ilbdlqv}TKHKj!(97YAmp0~4_BlV@$+w|_cuxG_Mr|J zfE7pSrIoYIPc|*G8$zT)>fP+hl_~^LevPidL{j@lv$p1v4PTjuzgYl9*l&?Ih4zR- zRfPybM(uR2?e0_J!)!Y=1Mm^rH-{a_wvolp=9DEY5-o!OS`!eQK7D%Bz4zX`m&g)p zUiWE`rN#uJCn!O))9}(G_y)5t(ZReKDTC!15+b~Dr1JNX5ce!s^~s@hOf zI*!VaAi%Tjd}DNC^GKh$L5%Ky3r@cp*oK%-D#A7_!e&$f0t)$A99oF9xJnsmDAY+> zK%ePBc(XmswZ$JBBH7w8!q&03pi(xZ`F{B4?{;Y9R}6gRlZv$us@Bihr(o&MP1dO- zk4T+)AXAkGdE|hycHa*35i6kjGg1ZQ@=2|i^JOw*c52|rss%Y20{eKpkQX*6ltbErJe_kK<-6BW=%ICsH&Y)zMR5XtrC z_g)LR7XdJRyG123fcX7%M*fQ(hY`8EpZ9e(#>z1tLAvi>ztAj1B`v_qDld6Nz^Q3c zP7O%QD!{?yn0Rw4dk$-L_IWEmAu>ynEwg-i7BTo%H)JLyp|ATYCg896na|3g(s1+_ zi``BJP=3P>6c#h!7YoAJV*^3!SqHpv24GH>K%znq9vjM4cPUhPpJ@$WzB_Y`=?Or_ zKmu#B`GjPEWcat#L|@_>RZ|tV_oKKbMmA%Jhef(6StZ?x}+6;v&e0mi~xwlK0ZPi?3qU<&ZfAi0{( z)#S^{BVbBcl{B9UP-}8DBd>Zz?^X95=WL;Vm`7lS%a?rw%P4_DDQF|Y7sdo30lqfoQ?*dQJd~rN&ONxDgui8m;!-@U$`C9w zno+7zU$ZjY+tr^PGVVu?fj3lGzGh7;fz2rdk&a`qh=Oz2sxa+aL6C^er=NbhVdb~R zl&j(aRj{iD>jLcekOMw-_gwCN&Dw)Q_~y9>$Kl!b1)Z%B@GjYS2ST(^f4kdte$J}G zH`4-*%AM4_gZ-}Ri5y|8%lv-o-0}8)UHwzv3Fw*3P{d|JUp-K|B9SZrCg%Vf&-QXQ8`HnFcinZ@ zGIIOA{`%{pO`A4VjQ|>z=bwMR5TlUU!299PM7}wk_%o)GDbj%|9egEwy-S@i>I{f$ zYIf0KMKrFU(H{hRqK;Z^H@7Iyq|xD<0EYAiN-5~wGtj<;j8XN00t^}k%sMQK+K>20kGvhW&eDO)oTpa{y4cC;_PM>MmV? zD1esdtp({)%c-YDkv1Zb-jLkdbW05_>I$QvU*vz$qD51wP06lZy9${KI{vQ;+FDkG z0KswN#+9&9L=1}v7c+(U6vM%{c%c-`3&@0dcH5q860zR&mbR=K=m|m6$@j?KE#^$- z%4ec0S4zY9krr8kU~e52|IX=hl6jT+{=c!TYDe^TNvU>@-YcoO*^b+n_D8O+PY$V} z0uvD3mAfAWRIZ&8YgXivT)@{r{{Pmlmx+Z9i8?T-l)=vcUh?g4e|zEZ;luq*?Iq8Z z8T~4wA_TC)8N#5R2eA&mg1eXyK=Ox8gIZ;n3)VI>tErHzRhnj1l~m!8@X7O5er8@^ z$YWecz zlZZ9D4rkE}NRg<3U)HW4wC`)qw`$4i14gShLcL*ZkAB(O*=E?r#ilov7G_t2J7j1a zNgb=v^%;ROT7U>mkb@TDgLtkPXq%Cas{CZ+0OfOZNG&Z( z#et@kW+gK3TGVo7dR|}sFcbOAc#`Py#N0Dfnmdj?ZT1Z zMSKMQm;BoK%_8~ecHPZs=)CtzF~m&)xT>TtiZr?)lb_}8t}1(@d?vuQ0`S7zo*0~_ zXKgn>VdIQun9H?;*I6lT%%iY@{>TJ%;g_gB(>Jr2{(Xwf)!!p?>Atj$gHSn-Z{L$& zkt9$A;P)RO{jX(4SNhabPl@~s0V05Rxhq2e`y8v05Y9(nq2~!S{8O+i4Ju%F3Kb9k zX{VDSR6xNSRH^Ecvn8~m18sF`@=|q$HpKIA*NNTfPks^8urqv3*xP3DY=y@lI29@U zUhEdpxReyufmR?qq6yHw-MoW2*bN>vSB|9eH+;3raMLQheOy>y6JYk1kLveLvX!9r zl_#*^D8x`J${;~iEGx(^p{49V6^jOGEt7jA5P5&nkzw#wcY z=KW`|m#|V8B$f~(@lU?`>Z_MxqF#*yG1j=n1A3@+ys@Vxj^j z5mI+cm!W1UbK}OgF3;P@`nZ-4;RxKjo+o(rmT+K3`QcsDt~dK6=GuiB4q&zUzEDjA zEi-Swc@@{Up%}y@Osh=ow4!g^(Rr}t{ep!kGmioc)PgBfro7B`(eB;5=4osU)DQqAajIe^UJD+53ZPw8�&O#k_SWu zB%S|g<07`i-C+5)diY0u#+V;5Eu4a~OaMF}KI&=ZNmNxpU9o$Mxr*>OW8_cBH^gpM zL;7!M+SXjyb#SPF1EfE|jBQ!BZrxr{{J+mW`z(hHqS|imU+D*Hf&h9sC_gfSNea`7 z5D4!C_yr<6dZtQi<;(4T$Fn#y+Rjf8hyUq=M^lozTf3?4O|em5=vJxk$_hBw(4#s9AXu*9m@D`JO-Hj59vH_S$QMZ@&4acl1|E`du9=u8n(I z_G}@FrLdHb#SwUT#xH*Hi_xqf=u9@PB(kedo`@byQIMgakdH z0xz+mCm|=x48vX`M@|`NPHEHCjA5O1kdJXReI{eD`EJ)imX(D0zVtDc^y9nnD?GY$5!SOnihR}pdPhHBs5~7C z1+dghtRN#J!?FS#41NsxQE+-YD{$I~i|}Q?k9BS$eOlvI71^u2YDd=-0n$b=iAgl~ zY+Gr5H~)Q;6^_;CV-QT}*vGs#>U-wi?jsKj2<|)JXXEmH-H-d5y|9Nea4&K zEcNmx0o`_Dm`zHZeBW2o&9hLC3DK;3z+*~fEI{bH2pMAH(C?I4Zbn&FG+d&0gbht+ao_!)6~ z-pt-@2BXQUsl9+Qj_Radm#$t*!B(Ia{zr!a=3M+Bq_g*?Ol3{Z zab`bcUmJ3-!p1)mw($f3uw-mpd?MLs`IM>PAp9Y&ZPm?;ZXGflea>2f=eDmhGx72n&1xs*m#SAIel%Dul6 z8@W}J6+_%h) z8yB)6BRT|xJ(-SmXsS3DvOk)U|6~OCIGMmIV6E!wC}v+@-*nSWqPF`P^*I1vWZ%vC z4+;3Zci4l`vNEiG zMX$W_%06Bd@HP4+6dv;E=bgi*0Nyg(%%JegFTdw*G!%W*S{t!&g(Sq&y%j9IBw> zCCO;E5`Lcte}ALbcucz?w=Pc~S>TK8Gum&~$PWWwWM5|9TJwExA0LV$$opRTYsYs= znHJ_h_~3&vNT};3O`3Ejg5fMOOE8p701AMv{2$S_tC>t-q$@F)NYf?vX032>1(pB6 zvG7}M(<07z4z>9_f^N(oez668UT@fvPL1{uX^N>N3Qn*pQ&G+0bhMuR}?^H zDY^3eD2ifH6qTYfPJHdP*Pb9a;YB>R@aODzWUdfl@IPx8nhRKL(Uhly&=*KJI+kPu zHCo28c*wgPNEE#4m5d=)wX2o9t}g(*v}nriXR7x(y8U|)^tLjn3emY}4;aVu4~y(m zP9!;iMQ+r=g)7rPapJ_7+itr}RHhVj<^MKm(&Xpi@-2CD4cEPO`!dZ_D`%Mdak1(L z610$25#*4}a5N`%hFrLIqZC?**VL`VAG)c>$jB-lPag=V);5E2=Oq?#KE&_ru(a=h zuYRjD;8Rv)#Ok^(Qv?Z65=CP^j(+BuXYw{~-1xmVZQ4A70V$1-sWED>0ub1_u9jDS zj(gQ#*32<)V-1rhjP&862-PhQhuWjkj}LhXlH}A3ykyH!d@euU}+7%HM~deY`cdD&9_Y zYZ3MSkxbJ55vG}dT1Dvc^U(4onp-*!FyHFf*RI@E-8^lLjCv^KQhfM+hdT`;+dY)He_Sg3;h^d#Jgd9Oo_tKCa9;;(Ms+l*tx zE83S*1n?ngPXN{WeXZJkwqwVRf9LmZB>hsRd5+|3)H~pFX+NQJoh1jLIxDb}g7h5= zVB~^mb|{NRsgVnYk7Uiky=-VWI{cm*8xV06i45DlEk#hwy-Ax_n2CEg(~~8p4~QT+ zL4}Gkh6MHFSwCfA{f)!{Wy zl@_N~xHL)f;_Z@2wkf8d;sk*R7ZaH2EEa_f2k2c=TUj2juZ93`-{&&K=XIZ{@h%)V zp8@$_<>y{Ty(N3QSX56&U(F0lLJbf7FtDN?t41>5fEco#S-=CqmSlcPe{Mu zf(w4cOyN2Z!P!l*rvyb|%OHZvSIoR`m^m!owaI+J@j1w_NTZOX$Y6?>E6bWlvw)@^ zEPEWF7@r+lSC4jV_uTig0g%6E-Z&h8f^>PliyMw_t#mOW+jKVyVs8A+Vom`9oU3aF0hEA#BomItWx#?Fvmu0-+S`+fX#G6W!;bX zJ3WX2(2eLOa(k0)--Uoz+0;v?P{LbYILi+Uc%=Ir5dA;2?PW&$67B~vp2>AP7yj=x z<~ZQ198ZDzSwHDOFV;`_Rh8<#t+StwiR#(2XY9{^{&RIg37ypoM7W%(&?QiW4z3_N zTC)bp2sXr!UiKn`@@WK$LMVX4UUoj0B~tqz@8T#Ty4OCCLbms8Mzr9T92I3Fm!!f< zqKJ!}#$t~aSmP9LCzXXBsR(ge2Ip9jr!E#s;W`M*B0yIjboe_2c&wyvqSRT&trAx2 z1|jvin9{}mH0o`8IqO|_aC!VB+kZ4yqb2&*TW^iO|Ni^M0unjm{`R-Ob!U{^jKj&N zkWkF#Ws+D#F#wk^9mKw_i!vE1`$0}#3>~_z$y?>Vp>HC4233bhqK?IQNX;Xz!f$b! z9YY&Badd>rbtGCx3$Bwn6wF_CrKWle}&F|J|ul6Q8-ufTprSfYd?!=idLqemQH*X$=eBgtJ3K`U)@mL?*@vIwD z$pILh`Vh?|9SYG23X#eoAl5o*bd&b6GI}FCeIo%hS0KqRMSxrV%U}L-D+Nn}H%RmT zi!QpTlwcZ#c#`hg{d8@S0bu(;-!r0e0X>^ z0N(?kGr8V|LS_eZ^d0~B$3J%QEota9qLqA1TYVimbSNcHk&Z9E_(B4mtBX4;uLHO{ z>t3Ts-VSaQ6{?~VuCCs*rjdTuECyJc5I~(8fDilOw?2$20)RT)b-Lb@ps7Q$gZr(s z@+vur+`X%3I{dI9A0E&KgerjoX!&(9!f6R)-T~UZ>&_~_(IqwRXiVOEJ0RIJ z2;l<}d`utxLJE=}7ivFpf)5gI4*(}^oDXEN9%d# z6kop-eqTzc)gb&m2#GHbaP^}X*xu_#+sEFHY_yfErefvW;C}0DM=kP#y#_fnH@D9r z`#wgs{mmkapnk&=>~2~B*M5@x3ZCr%sk1v=mE1G^_FlW^js9#qqtVy0<`q