From 9d464eb9085e84ebfcd95955d307af74e98dcbc5 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Damir=20Jeli=C4=87?= <poljar@termina.org.uk>
Date: Fri, 12 Jul 2024 14:47:01 +0200
Subject: [PATCH] tests: Add a snapshot of a SQLite database to perform
 regression tests

The test database was created using a slightly modified `oidc-cli`
example, to turn of the database encryption, on commit
d6dca91df86413b0cbf193a4be191835dd81862e
---
 Cargo.lock                                    |   1 +
 Cargo.toml                                    |   3 +
 crates/matrix-sdk-sqlite/Cargo.toml           |   1 +
 crates/matrix-sdk-sqlite/src/crypto_store.rs  | 100 +++++++++++++++++-
 .../data/storage/matrix-sdk-crypto.sqlite3    | Bin 0 -> 122880 bytes
 5 files changed, 104 insertions(+), 1 deletion(-)
 create mode 100644 testing/data/storage/matrix-sdk-crypto.sqlite3

diff --git a/Cargo.lock b/Cargo.lock
index 88786c928..7ed150cb4 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -3510,6 +3510,7 @@ dependencies = [
  "rusqlite",
  "serde",
  "serde_json",
+ "similar-asserts",
  "tempfile",
  "thiserror",
  "tokio",
diff --git a/Cargo.toml b/Cargo.toml
index e481a4ea1..fd50365c1 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -10,6 +10,9 @@ members = [
     "uniffi-bindgen",
     "xtask",
 ]
+exclude = [
+    "testing/data",
+]
 # xtask, testing and the bindings should only be built when invoked explicitly.
 default-members = ["benchmarks", "crates/*", "labs/*"]
 resolver = "2"
diff --git a/crates/matrix-sdk-sqlite/Cargo.toml b/crates/matrix-sdk-sqlite/Cargo.toml
index b38e92e6d..8e4f9045a 100644
--- a/crates/matrix-sdk-sqlite/Cargo.toml
+++ b/crates/matrix-sdk-sqlite/Cargo.toml
@@ -39,6 +39,7 @@ matrix-sdk-base = { workspace = true, features = ["testing"] }
 matrix-sdk-crypto = { workspace = true, features = ["testing"] }
 matrix-sdk-test = { workspace = true }
 once_cell = { workspace = true }
+similar-asserts = { workspace = true }
 tempfile = "3.3.0"
 tokio = { workspace = true, features = ["rt-multi-thread", "macros"] }
 
diff --git a/crates/matrix-sdk-sqlite/src/crypto_store.rs b/crates/matrix-sdk-sqlite/src/crypto_store.rs
index 83696f5c9..6c1cdf012 100644
--- a/crates/matrix-sdk-sqlite/src/crypto_store.rs
+++ b/crates/matrix-sdk-sqlite/src/crypto_store.rs
@@ -1323,8 +1323,14 @@ impl CryptoStore for SqliteCryptoStore {
 
 #[cfg(test)]
 mod tests {
-    use matrix_sdk_crypto::{cryptostore_integration_tests, cryptostore_integration_tests_time};
+    use std::path::PathBuf;
+
+    use matrix_sdk_crypto::{
+        cryptostore_integration_tests, cryptostore_integration_tests_time, store::CryptoStore,
+    };
+    use matrix_sdk_test::async_test;
     use once_cell::sync::Lazy;
+    use similar_asserts::assert_eq;
     use tempfile::{tempdir, TempDir};
     use tokio::fs;
 
@@ -1332,6 +1338,98 @@ mod tests {
 
     static TMP_DIR: Lazy<TempDir> = Lazy::new(|| tempdir().unwrap());
 
+    struct TestDb {
+        // Needs to be kept alive because the Drop implementation for TempDir deletes the
+        // directory.
+        #[allow(dead_code)]
+        dir: TempDir,
+        database: SqliteCryptoStore,
+    }
+
+    async fn get_test_db() -> TestDb {
+        let db_name = "matrix-sdk-crypto.sqlite3";
+
+        let manifest_path = PathBuf::from(env!("CARGO_MANIFEST_DIR")).join("../..");
+        let database_path = manifest_path.join("testing/data/storage").join(db_name);
+
+        let tmpdir = tempdir().unwrap();
+        let destination = tmpdir.path().join(db_name);
+
+        // Copy the test database to the tempdir so our test runs are idempotent.
+        std::fs::copy(&database_path, destination).unwrap();
+
+        let database =
+            SqliteCryptoStore::open(tmpdir.path(), None).await.expect("Can't open the test store");
+
+        TestDb { dir: tmpdir, database }
+    }
+
+    /// Test that we didn't regress in our storage layer by loading data from a
+    /// pre-filled database, or in other words use a test vector for this.
+    #[async_test]
+    async fn open_test_vector_store() {
+        let TestDb { dir: _, database } = get_test_db().await;
+
+        let account = database
+            .load_account()
+            .await
+            .unwrap()
+            .expect("The test database is prefilled with data, we should find an account");
+
+        let user_id = account.user_id();
+        let device_id = account.device_id();
+
+        assert_eq!(
+            user_id.as_str(),
+            "@pjtest:synapse-oidc.element.dev",
+            "The user ID should match to the one we expect."
+        );
+
+        assert_eq!(
+            device_id.as_str(),
+            "v4TqgcuIH6",
+            "The device ID should match to the one we expect."
+        );
+
+        let device = database
+            .get_device(user_id, device_id)
+            .await
+            .unwrap()
+            .expect("Our own device should be found in the store.");
+
+        assert_eq!(device.device_id(), device_id);
+        assert_eq!(device.user_id(), user_id);
+
+        assert_eq!(
+            device.ed25519_key().expect("The device should have a Ed25519 key.").to_base64(),
+            "+cxl1Gl3du5i7UJwfWnoRDdnafFF+xYdAiTYYhYLr8s"
+        );
+
+        assert_eq!(
+            device.curve25519_key().expect("The device should have a Curve25519 key.").to_base64(),
+            "4SL9eEUlpyWSUvjljC5oMjknHQQJY7WZKo5S1KL/5VU"
+        );
+
+        let identity = database
+            .get_user_identity(user_id)
+            .await
+            .unwrap()
+            .expect("The store should contain an identity.");
+
+        assert_eq!(identity.user_id(), user_id);
+
+        let identity = identity
+            .own()
+            .expect("The identity should be of the correct type, it should be our own identity.");
+
+        let master_key = identity
+            .master_key()
+            .get_first_key()
+            .expect("Our own identity should have a master key");
+
+        assert_eq!(master_key.to_base64(), "iCUEtB1RwANeqRa5epDrblLk4mer/36sylwQ5hYY3oE");
+    }
+
     async fn get_store(
         name: &str,
         passphrase: Option<&str>,
diff --git a/testing/data/storage/matrix-sdk-crypto.sqlite3 b/testing/data/storage/matrix-sdk-crypto.sqlite3
new file mode 100644
index 0000000000000000000000000000000000000000..8795136ed64b1bc3605c4e2444c0505aa6ae9b15
GIT binary patch
literal 122880
zcmeI534D{)vcS8yv~)q17FwW`wFKIxZITArk|u4Mrdzf)WeI8WW#5{$DF_w?uL~}S
zB5vSSc11+d>w+NH6-K#$TLt$Om+OKeipram7Fu6XdiA~cdv=0tzI@-Ab7uZCbIyD@
z{eCLyWELNjZFG4YI$w5CL|Q~tRK)D;?1+enDEt|PKV7dhJc#M~fbWsrj?Z@(6_MBK
zPEI`;krgvJBGsOHIAvYxjFkL=za)P!a9)ySU|Ql8Nz)Uj3|KPYRKl(SWeHOgu8A*?
z|2FQj_<^yZxM?xB#R^f7UPOQh{2vo=WyPmwW=6Jge7Yt(<7M<7#^>#P8(AtB3zXt)
zr9dbXXXkXD&B>mWn2oQ_&swL>!Q^BMWi`U=>KbKswMr(Na;AYn=hOY_N@8x?xDoN`
zW5-4=P3;)b&gi_1*6z~Vyxk5ndyd@g%GuFvOeiN?DQ-|^*UBrZ1aeJwrC9T84a_dP
zf$?;<`;~S~i`(MS`7AD{*5}R1MpI>H#S?QmnQ`eAV<RIhP6N~8ZMNfds@3^@u8z;z
zZVGAH-9BWs&CG~T=WrsIj_$C|VDT_|pEhXmnazydptU%SuHMcK?`dyuP0kwbWxU?7
z(iTG}+uyL?<8nF9HT)HTUfokZJT83>=X`eerkIx9+u0Fqal_)%Cr*rPtLz}rp^2CA
z`7BP8x5tO{9=7+m)EQ_!t@sUdd$ow49+zG<@q8Bb7*EUY@iC)q@{suS@#7<xrgzwY
zA*b~)&3?w~^L9TT+QWjJ?w8JbtyAutGk(JiFXQxSU4CCqc15*PTrQTMjmzIkEZ)$#
z^vdz)v$MNWT6XtO!{%KSpFVPAWLt8FkuJMKYu0%&bI!aE?rB`t>9dA)W8RxdiMjcM
z<I+n<o=>l?{<Q3_qakf^X&uztYC071d31UkW6=7&jHmnYpq`3#zjRi)u*?M^?`B0;
zmL%r#2K^S%?gMJs-9KH_nsSC{d4~ZO1NzhA3w6Dx_Efy<^q-`3e(G=G?ix(X?m9}-
zB*&%a4v$>YF|!$%fJM)AutsiYKBaW(TTv|%H)QAZY?9M4)z?&aokuHjx~S*26(+@}
z4<8=6bXEt5Gm>Y159|ry%*pd0=<-Nc^q<l3?ELrZ%m01VnUdI{W%u|zr{$C`)x&|3
zo0!WQ7?(b4`1#_s(|Y!q_vE&51LD*9{Kz)_ndI^Nnp}RTL2L53{BCXMRE??J%h|-9
z1bT0DmdGEQ11l5b(zX2a+0^^cn328eozyleAwIo^7ui<Y5i%BMFUDy*^+l#Fy*3!o
zGpKrP)4h{(an@_oaM*Pr%5Brf#i#RlkxQ8~`PZ9*z4j8{(<QyOIqQ)>Z5?jvoZsAi
zo9`>)<I?Bx&gau!b;qpljYWbh7K0dz!1OcKPG^CE%Mcb%+VEO|UhFhCuBYF+AoOf|
z&RLz;!|plPBqz6RM07{lxiqQ6L!GTU-(q@t;anG8W#@(0Ki$T>@CtQmOkBDk^L$`C
z)zPv$4`P|f`1C=8x+-W}z!r$=X@D(oHfE6J?-#8Bo!$TIiaIfOY*bu2Z_xR)vITHa
z4@Be5L_+w6A{l?85_2O`kK-?T5dk7V1c(3;AOb{y2oQlT0$XQA#bmzf)9Lki+v@w<
z#?D*!_Uzeis}H~Dn&u5Tb#5;+)nzg0^B6nh!0$5h@aA`O=Z&z%uq9BeY&Plr6%y_S
zw?%KWGna4mT1-y-qAz^!(6*sEybEQ2I(xk4>G?A%SB^|@oUCkb95Fe0=?8B$sJ~zz
zd(0fo-?rwl9R`chXkoPYO{v|XbB2YFMr6Zo?IqE$9KNq#1Yg6K3fSp_gYYo?1Ac~O
z_LBKaTB2d~CGeI(3BTmP@%vm(M(eXUn6S9_vaL?0#n*WYQ@GXbZ?aqT9ar9pD2%|~
z=X+qI6fT`G6nlKa4-awF6GkZD$GPyMt`H7Qp9;^xdusRwJ}jHBhzx7<B)kvr!mbHI
zHEhm=RbJTPg5!-=_&9eooQ4&6ZN<bHdGHe+KB$0IbD~hl0{6f#s>!fN49~#JgW*Ql
z-Wr8H?~=fdde}4pcEHC@`*^rp4!dDROJQ_)pd$%NSk(%*!*j#n2s{S+W!Z3YIDi0F
z!MA8A9IGo3PQ&*v;g#&g))<r#Ccv{=cm-~TO+yBl7FK!Tv?`{y5FUp;ng&>BfET7V
zMNUM4=c8h=dGaDy%^o2441{-P=5qnyg}mwb`!Q#_9oa5T%gTYLax(33wIMF7(3?hh
zRa~ELgr&7oxEx-Foij|>*OhR<1Y6)pPCUxK2e-m~GvK-`*fu^sEOb>aY@G|A!%qH`
zVTkd`Aq(LeI0hSGnXar}0gnc1;f7`$?UPh^1AfpZgk>Iud&{CT)$mV%g+99kRt}6c
z!D0Af8tl(?WWpX;8O2Su!bZD%05+eIjUIWU8Lmr3Fzey@Sr{wZrzqe6V)zVhgLUw4
zCA@AKJGsQE6~g_K62n7WH<)X}Xu3>Zj_Rx}8D|!u)Q8y(qhJlJhA+njf~ewQc%pnJ
zKz0&Jh&|}K1F&v(1?<+9;z-+B@+Elc=Y><yk&ldlt5NQLI0`SINA}Hw%gY9$R3bbA
zuMUGR;32pU&AC2la=7)&k?;|$kAoBNoeg{1wjiSp1LWsqxNXAR<gj+9V__%aSUuE)
zmv6JfcI0{*zR1znUxWtjor&@P5eCsyb(wH4dSK%MS4vpyhDIF!UvLWEfn&+=@(84l
z<~#wbr_F$;=M2q5p<@ZKEf(IycCX9fuAEd9TMQ?W_z#7!306*q9aYBK(eMDg(+uy$
z!L``*H8?uA0<Llok<1q+O-VxuAG~UY)4>Vw)qqHN3EDYusB#R(@Xzo8e%u6?jV>vM
zyJ64B1V+ix3<|6Eq^QgYE27{wE!;O7-kNGCV~NoI6*%@L1)Lb(gmjL;>bW)qc4Xv5
zVUbtViBA0xG<D77JoNC3@G(5e&Wcz9U%25;SO(j;BRuG$<#0^}Y|a`S7WsCP9rnQ?
z^uVS?Nc4E^9H|$z`l%RxfRA<YBVlb!oEM(4RwBGR<wH<JB#^*nguO2z6NBXnel~o9
zsdg#G^XDD`9&b)f8Peb!4qu@U4p)hWqR2pKhb=}}Q>PZs$QWgbgini8OJd<NINp+h
z>AQP8=KcZX_JwiM#9?8rPBkH$XE9Iq$PwsG<I&V*7?qob#nr&c^l5Wd<2A!!hXCHv
zg+v#pqlBs+4%%B_Rb$pD9u9UrnzDS16#HHofW7c3+yQUHe$1xP@Z5qS_9Yod!;|@_
zq{!&ZlmO!i?+qm+;+d$_V-cyxQork(>gk;b5CI}U1c(3;AOb{y2oM1xKm>>Y5%_;f
zASpUCvh&N^sKn^Z0i9m}g!ljPkN)XJ1c(3;AOb{y2oM1xKm>>Y5g-CYfC&7B3556m
z>HhyO>|ipD2oM1xKm>>Y5g-CYfCvx)B0vO)01}}4e+mO4Km>>Y5g-CYfCvx)B0vO)
z01+Spe|-Y<_y2!=ACrYdfCvx)B0vO)01+SpM1Tko0U|&IX#byLfCvx)B0vO)01+Sp
zM1Tko0U|&Ih`?W;0Nwxp^?ghh5&<GW1c(3;AOb{y2oM1xKm>>Y5um^Srx+jtM1Tko
z0U|&IhyW2F0z`la5CJ0a*C#;x|9^cSlZ8Zp2oM1xKm>>Y5g-CYfCvx)B0vPf`~R^K
z4@V?FlUN_WGG-he{y%svx5dWFnywMfc3XXn*Eh`@a_Zb(W~$3#(C0CB#=$s!c?KrX
z+ECT3VAZIqY({B)slTD3zKp}mm#|reIyGO+7+W|+8Xdn<#VOD)UvF_b8PBqfelO$E
zS`6*kzt{O@9KfPy!fjc77-);mZgP1nKC{ES@(D+t%kIbvu=DhOPk<@paM=8*I>tNI
zYt|J$<j8X{rq1hKC-1Q_A@9<5?z#5U`Y?8%6m2hJ3>_NvZG=Fnu!K>T%UO-iR&Rm0
zw#?wxxjo);Ye7l1#bT)7S32@rYS}7Nt!j(cVsh$yeh=eq`+eR^&neVokvJ_JuD8r8
zsP+3RJ-TW|b#rB{zTV&$)Qd~`tum*<?RVDb#IANVE2NRxBtf>cnQ1ie8;kQxiYpYs
z23K=qquyNIq^!u7SIX-Ac6}9JDXPxrJDLTOU{N`TXB9Nqf=ZF2)zet7mYTW7{F*YM
zqdwHcI7NbU%JhZ5Iw%qP>`Y^cqg3Un^|Y2a?ect%&5&PJ7?73M7MJS+4V8LfxzE}p
zW^oKwox$Yil?Y0l#j1+(LNhm1#;VaYxy==pIyuYCvD7qFO8J7|Mgs=Dk1_1s>ht)$
zKCRcM^D*mHPA}uz5yVh4Gj@Yk?=mo2FJ{Kx9Y%`>Tlp-G@CnAL^?46OL_}V{F=<KD
z0~m1HAY(9DoF=WsX<%9+mfK=3DBFDEa*wk`Xg0A*q&}a~(qJ&UN{jWpLa)oh3YG9`
zO5AF{S=k^gwEeMc>%%~Qdbagp>~>aP8lTO!z6i0n&8}dn!LF>SE%5sbYFRdsL+ER^
zitH_1vy^GJv<O8FtU4|uZ!P$bv(2q9EC~r(s<~2$jn9)bNGo_PW%4o^qfl!a+yyPw
z3bwtLU1P453fk2!VS|G!;W~V(fZf?*E3L0Aa0^;EN*-HPQCbu5RWzE}zSffFK&7=o
z!*^7;^`>gBx|yltO2smDi@2H1@hL<t9#5-K=czBKs<un@rNMLA))zWz8Q)e_RKc{i
zD%35W)>^AtRU$1=)C6n_eX&lg^tM*(^I3{Yb;y>lkyMsS3YB%jO1+}cpzs-lC3ONH
zS6We^bh!Pkc13A3n{Bp;?ZW@zY+ELbj+JF!Rrq_$kBs3qid{CHQ}9QUY0J58{)|-F
z*==1q*K<3|)xZgqRkZSoB|#0ZjLWx{>1{Q|<sqR_neS42MU{p2DqGNJt#=4^bgeqw
z<(X1fwU1v@Ah1=H6owjwPHE7jR|G9)V@Tzbm9tbzoyyf>uBdmo`WWWD4X4($w91Nk
zwKi5sqf;$1s#F1AxrXZ#@cFi8iK;?bm)}%gEpD}!$O`OoW3|KXmD`<uyHnXzT8)#P
zy~I#e5)^Axey&qhU8bzg*9iQ=Zc9d=)-Q*~?XPT-8wyK>Y^TUmBy<T_a$UWuLC5u|
z`DUM9ZujT&0&KgeI8ay9+A0XzC2X-o*W~xtS6Q3YY=J^uZ*g#(R)<I4;Fg#g{dK~+
z|LG+o>VlSxvSyyKsY)#4bLC2<tWNE$Q8_B>r7pEgQe;%K{eEv#E#K}EJIm_+NR+p;
z`Y_O+kq12rv_6d8Cq>UqihUZPsYIg@>8nemb^fASt0L$SYHD1qN~5u=!dmFB^@wT%
zQnAKc&u9Mg0<A9!smoicI3)pt(^OZaY<6iX%Zi%o0%gsXs^U7iSl3#kanx6v)g{~p
zOKnYoQp73sHTl?5qaxT^(4gknZ3WeQUQKJD*5Ru1>SPAHwOk(%)}5o%r}axztmIVi
z8+bB>rP<Er1?A;_uA-sdQ!KGJiVXJR)=-6|CTP?#b+tj4&}#KnG#J<=W~Wpn@R${<
z7OT*%H&}gsT@_bXrVbPoHFK*3e`2=jdMVH@FNwq@<8PyWZ^;N0E1OMve}#nmN0MpF
zxo-Z9RO!BCoa?!rRjiQl8L`Ul4%I7E0ju3w%5ha$ZB9vDom9iCZ>)526zob_K1Z!O
zJBN3dXX#t)>~edN!OyYqRMMca-szHy3{IV~tc=y7F$gS5jmE5zc}l!}TQb^u8&2J9
zvdL<TLVQ7$v836lGt^m&3%CW2g8X_VTV^lj8pMS`K8q)|J6gFdu5y1!r|_HW>q~>S
z3a6q@D66*mLOy}Ivd|c8@iv=n^6Dndc?$bYYQ|$RS{Os$YWrcLUP33l{~w#OEh6>O
z)Y_EOsR!|pUPOQh5CI}U1c(3;AOb{y2oM1xKm`7e3Dm~Onj(MiTaG^L$HiVyhke*`
zh{=zUW&f^*=f2sFz90qq@NHUD9x5>4_Yj@?o}}acKUETudNlQs)Rn0YJfs&9AOb{y
z2oM1xKm>>Y5g-CYfCvx)B5)o8<DzB1d)ps-A&p`#q*3&RG>RG<E&JVX0>Xd)ADQ?;
z1pY@aB0vO)01+SpM1Tko0V431AaK?2$Qap;f#2H{YrDH9=<LJupIaO{uMeLU#V0Z^
zzwoC<*ZaLX6LZ6cGr}E@bGDuPQ*}$JO6(J|<v~F;(=69<7`MpNWS7~B9gHWxi0cj6
zgLNFUMpNVxx3l`txNm>q-0exrK8(?>R*H=xL%y)7rB$esSeoqS7I{c!*ENfp6*^C&
z#f*>X%IkQwUSEAdA=AW@6}ISG>&m4vm6ETvTDV+&kvU*$(h2-Qw<yTvNW5hhp6J{I
zK_0uLQrc8h<zTm~C9S2dU;(>KR$ry`YkXXhE$DZasr){r&D~V%GzV-IjYeUC-&yM}
z6;~JVtkoqAk^q~_vDZ}=S4xcjkWlS#nF`81Mt_ys=xyOPmI>>&dl|b?8-6M^{Pg30
z<k)+=ckyfYDy6N}{)z^^*O<?e>1^d@lc>^NQ03rp3q$1rvr^Q`$TXp*P>@&L&gw(s
zzPa~5j5oE@UoZ64N*fA1ETK<e)rA^7g=|Z{CZv~eiiNhKd`XEkUs@$q`c<YfXOXzH
z%wgA*=GWDf=tY{sP(EX6Z7%on%S*kMpqNu{3^{^kk!gF!1J{3ydG{`U&0M2k7qA2Z
zUt^QVt}2zPrA{wLDwRkATw9AxRo`5c-)OUzmbseE$h;4Y|96=4%L5Xhys@#kRmv4s
zS*pq!ygVLTU~o4()GD9S%V(>&71BDVl2yQ0iDbfNRzpdhQC3i9vNH{4V|l5RZw<7B
zJOZD<$28Uld`*m6B-j+_e1c$ac>g~#^(gND|0Sk+GJ*&Y0U|&IhyW2F0z`la5CI}U
z1c*StBXFVn{}E~Z4h<Ph1c(3;AOb{y2oM1xKm>>Y5g-CYpkEQ7|NmdVayJ=E1c(3;
zAOb{y2oM1xKm>>Y5g-EnltB3Tf7<`=r_Lv{i2xBG0z`la5CI}U1c(3;AOb|7-w>ev
z|9<0YGL#4q0U|&IhyW2F0z`la5CI}U1o|-n+W+sz&L`7}01+SpM1Tko0U|&IhyW2F
z0z{zS5TO14e&cE~ln4+3B0vO)01+SpM1Tko0U|&I`Y{38|L@1nC)0@l5g-CYfCvx)
zB0vO)01+SpM4;agp#A@T<7zUL2oM1xKm>>Y5g-CYfCvx)B0vQCF#+2D@5jz3(}@5P
zAOb{y2oM1xKm>>Y5g-CYpx+Rn{r`UBYBH1v5CI}U1c(3;AOb{y2oM1xKm__R0owoX
z$Id6yi2xBG0z`la5CI}U1c(3;AOb|7-w>ev|9<0YGL#4q0U|&IhyW2F0z`la5CI}U
z1o|-n+W+sz&L`7}01+SpM1Tko0U|&IhyW2F0z{x+5y*y(aOcJF0bFW<pJ7WxBfJJT
z!E<m>4e#K;E8xi)b4&7*-~k@o4cq3Y!Do5Hk49v}Qn;!fzJYzkYTaCTLk=IZ;VO6l
zK8MxSuoJ$hnm=YLya87S;g}pQhgU8h5f*x{4xXF^Ti_Zv7=(?XOlX7q;NNgFc63ky
zpAB9Tt6u_d!7;ciW;Xn!j>|+LRWjTy9tQ6(fZY)#ut5T!!QYc%Z!NyRDS$OgD(B$Q
zKMDrGcG#cc$wCR+XiI2}Y_JL~S&9nX2;Z6T;7V9N89vv*J!W`aei1wu62QrLp?V|=
zNa5A8Ims!o0^9D!hL=V0(S{AMHDhkwBollTXOzi9uxbpv37=<<3LCOj53g3^$6c^H
zXBON6FZkgHcmZx6i058KP>{ueEfe5c4Qv)Ko;$s8bXe$_8n~%qW-tZ5hvPF%1|zIt
z#lRbt#l=?j5ZLFAn#S_N0|~j=;kKWoDB*dyNzI0L$C?n(gNW#1I1Ot;r8f9{Y_b;q
z2|q6sjDmGaSR)t{7Wqa}0PoF#D;wdh#c(1pQi6KyhffzMY)K-xmc!!0Ht7u5vjDD`
znG<e*I%BYW7<@Pko~RxUk4%RfMlFU<QMaS;<MbrhXJ~?#;CSN1TzC&&@s15kJYJXu
z*TQqC)Sg1P+6q_uW}?d<hkwM6aKZzVTc)MKL$i?j;TbuyabbZ6;gkj4y$d~b48DWq
zO(ysRk2k?%5gF+Fr&D0*xH>oqw_@mR=FGPa3ycqot+?0=U!yNprob94JO#^4;W&gZ
z(2Li@zsJMF4e4{?U60j_1FV$7Hwz}9RB|N7+4}-mJD)d>gGT&pl@w1dbhGBddny1p
z2+I~0rogKLS;9nYJsO$5!A>nGg{R?Gu@seS!@eJYBYb!ab$t`A^awKJF*d(N`#yua
zCZtaaYxWHMFc(hXsT1&XO+n?wBZf?c{mntR8n(f63GluNp3N$U>tG+;1Gi7A$_>kG
z_C~`SOQ2l~$IIZ_nHR%{gJ3y)<br1<@FCm=KQ$*xhYp2jX2VsD@sq<6KbYX2V)%OG
zcuzI#m^lYlW0oAl$oyo`JoM@HT6F7Y?l@SHk8GZw7RL(9oEQ`f-vr=|=@=-_C%}mi
z>>SCR2W#L+7F;<f6UW&N56*;7)5XvZJ5r~hj5DDH4mC`=1a41NToRHZ%&U0tH?;9l
zOwbqL+AJQ*yfrv=Q66HO8Xjb;Z1((t@OnM`I1D|u0d8!9OJS1*9+Az0uVrvZ84riY
z@!$aB{1%=U=Y?giuN3JgNh)W+XK2_Ws|MD=)*-Xu#K2mNgD2p!k?;`gfY;r=#gp=}
zJp)gTm=7zRn7EgRu{OYyi{a>Wowg3H&72MYg7%SSbjx;}ww{?Lsw@Z(@xX{n2F-;P
zS==&DTEZpckkv2nm>-@lbPa&5tf{ap3+@>XU%@RY>~QnvVYLba>g$WqX?t*zdK^y2
zk3+N9jF?=q2>U*g%PpJ^Zx3-#$rxL9uiIk@=zNUU#)Q0YMHEJ057Wy7Cba)>^r)l}
z7r`?NG<=IS6T|o*Z;V-*2umwrH!lfZg!Pf(;r7AnII}#Xi1i!c@7YbTAyd9+#6{Wg
zvJ+>_y}5401;yyKm1%HV5fzp=GAoJ$2ghW=qpb>fu9d@rAIp-x@FPykpTS3^a4@S(
z4cE)z&LOZP8U@@K6;EOy-vO(Q*yh85@JckSolq@=J#(dS9FE4=;Nj$peRJ!pFmRX0
zpvV|5+^@}mk1UvI>qb@k;1t}Y*16ya+yLKk;NE!==-ET?uzhMhtci_93Dacwco7bC
z)51o0Rue$}Kg33-!Lboz5ZNv*98UAVdN?^1uByfb<n6eyA#E-8d~pbtVQ4+#w<Gwk
zV7UpCao;=v{Di@~iOGa7LwN8~TshnV$K%67x2D0Pjd0&WA5#GTz!~WWHum?rJ{`03
z`U-d%4v&X-holY0RGkXn$0VRgeQIRH_;@t`X1Fm5?wMbmlLGt4!B?St_%JRGN7^5Y
zvGzSSSgx8mAUwue_&dBm0&RGx0%wMU7;3xY7o}lT-7yyZ^%=&`D%c7~E*Tz^iy5&U
zmd+oNh;kaFvlnOKTj6ci2s}QtcpCmb0ar+{_oqbg@GMmFR*dj(J$g;jG@P#<NeT~l
zXd&E%)A!D?*mkw8W<1;ryCm_EIEOzt1vU<<!4$X|J6efeH~`xxz)y~WVX+tMB17|G
zS2hB=S`4q?+YhMuV@=rEJ(xQ0!s&@{Su3nBFBylc=3Z4~GD_*-P#heb1rKMdVGk#e
zf+_RvG@Qd9#0dvBm-ujmT}?VzXOYAE7_+NV!XtgHgJs2VA5N{gaHSuk;KlhWCZ)I(
zZk+;8=T5+E-UQE-B%=m5!R4aVu*mHJ_?u@4yvu=)aC+J~DI1}kgbnc?SP=)Gj7D?+
z6+0askAa646?%rIg+(sKDfZ|>_<qs=72FTk%!gm5W%}o0;I3C|7z~~xaHs^n%)&9=
zgLlO<2cb+5@vnu~oJl@-cqBYwOldWmuq<iERpz0o7<k(-an|Nfg4bsv!xLlS%8SAS
z-JN9gVeGsDdxoc>Czp+!iPOoQ6{%{tGgsb#4!l_$1v^V8E(yVlgHb?+K{;l2vLFlI
zkMrTg2fyT~;g=9j)5p-U8*xdvdgxeao7|FF3GG8rz$(TopA_mEJ@dk|?T*^v)dO(a
zd=%%~qdxd&CajWYpogwv8oco3P!vcUjC1NKv~j~wIH^PnuS1sC!b^3Qd9Z^c#{^jk
z@8wN5VuF1zYzcf)GYo|$#*Bh5ak778A?(YCM{&tk!1IZ4J4Vr!aBcOXMmSJ~`Fl?i
zmT#xw$_m(>j#98A9W!k$UmXu0&w}L{$(V54;T^eqLRAJ{_yu-Fp_+H(FRZJd3#T$r
zV$9U}7*H!lPRX9y+PE+tGw~~tZ0G=71KMHjbd1uEYca0h!p}E(wH?*pQyFO}@fybC
z&N;(j&5W6Y;g-cX<NbiaaA^Y@b7$Wmoc6w~#F4+xQ^Nj^@~<7E=mVSsmL*_jyoeU>
zhx^6wL~A{^zY~dkfG3}Zb#k2JH0gNpmmpkM9j*b9+rzUleD8r>sHv63RbFIR+z<!b
ztK(f!u%Z+L@DNrjFTsY%TurzHOvs-;4wiE4SbCg-y^-TF2<}3CK9n~>TLx;mQHMUg
zaxhx89@pRp;q!6fIuPUc06fQ}Bcmfx3*gv5k6Rt7ABEm}qd`+1j_xe9;C{^2*T+jr
zI|{*@;xu~9_v=PfsL|BRj10#8HBz`-C5L?zZSeL8_;CcR9qER5QdHq0a57Fdn{mzg
z7dm<s#@BVYimo!lE11DwOn`T%is6?4!ucmoGuzN3tz+OuM@K>UH$lcM`1eBClYr~h
zT^Z>1moYW=#;{qf=$G4Y&N>o=$6`Zs;iDjyT%UK8ge&u~&HXH_hHe<2iQqp@g~u19
zTG52pGH^NhdP<czT!d{vwBO-~H;?Wp4AJRM9o#h^PL;#mF>u@nhvBphd%7L2#;PL+
zPF@tm$T$&B^ivh7u)m`?d}<Z~I&=y8Xa}-=X-QN(?3cr;giJf~xff22FM#J;QbcI?
z3+b4_Yr_R%2s`<pd=Wa~v-)gYix0suDL@2TxCu7pqF?UAp}(9d!>D)zLw?<eARG@@
zh|aKCWr?WvF1T#*LPZAb8$X*HC{E4BIqmOQwLEzVY~*3L&jcEoaB+x%g`vlTpR(b&
z4wk3lQg9HCC69wc<B;BZWbqmf|2#SbE3@z&!>|Ff?BP1GJQ~)`lr2EK*TE;LI2G*A
z!dZWDoH_u@({RfE0B$j0+Hb>b-aHs?O$=9wd_^)U{w92k9^Qac*}vw%q0vc5;RpD{
z32(ZJTF{nz6<8J?h$+p0>%&zdA1^-%S2st)@nZNc+E|u`I(-iZa%4l{#gPc@WjL8`
zfrCi{ki`p&!ewGP>ijbT{1hIGK}dN6GE}qR^|T4_WPYJq&Kouq?_pNJzEVRpd=V}Y
zS@6y!OGdIAF#c|V+lp&&y#3R0&V4BlU4PqXq;MzvXhw~<V6MD92T48>t`hM+<+=zs
zS_V7u_F_>XM)@8k28|tymmd-9EAW#Zw#Q)n{3F*q4jw4#C=`##;cY~@AtMBLi$=|e
zjKk|6!_xzxjf1iJQiMYZd$nlQajQECCkPw{j@7`nA}hw&BTB^cF}&1bhr958BM**G
zlHsZ@!%5<H_=b0J=FoIl7cLdyntAYrGaqj$4#V1bjL5@q#}N2r_Hfv~Ff<x&m!g8(
z<nZZ)NcgD`J$OsFSd`4cUQXd6{jv&v9#_O0Kcy7f7oZu>!qXM-P8NJS12&o*S)Rxt
za79PC_-RIM5dJ;^_70qf9=sFoFO7xvsY}o!Z@~2;^x_))_vRR!Wsl*2Ct%BcMxEW>
zq|@6vYR1bpVCAT_7$WZNetOSNw}%N>Tz;>%$LS4Tv(Cd9_HHpS=8(aIg{NWfqkgyD
zr86)Ft=D35;#;^wz02?PMLekYFgl;b<<#0;dYxVCvpARo5fPEsZ%i5{+TFcp?b(*$
LHeR33;okFKoR24+

literal 0
HcmV?d00001