From b5d1c8e02af3a4b30e7a9f3ca8a264a1b20a96bc Mon Sep 17 00:00:00 2001 From: Allen Houchins Date: Tue, 14 Jul 2026 13:52:54 -0500 Subject: [PATCH] Add Mozilla VPN as a macOS and Windows FMA --- .../inputs/homebrew/mozilla-vpn.json | 8 ++++++ .../inputs/winget/mozilla-vpn.json | 10 ++++++++ ee/maintained-apps/outputs/apps.json | 14 +++++++++++ .../outputs/mozilla-vpn/darwin.json | 22 +++++++++++++++++ .../outputs/mozilla-vpn/windows.json | 23 ++++++++++++++++++ .../components/icons/MozillaVpn.tsx | 14 +++++++++++ .../SoftwarePage/components/icons/index.ts | 2 ++ .../images/app-icon-mozilla-vpn-60x60@2x.png | Bin 0 -> 2746 bytes 8 files changed, 93 insertions(+) create mode 100644 ee/maintained-apps/inputs/homebrew/mozilla-vpn.json create mode 100644 ee/maintained-apps/inputs/winget/mozilla-vpn.json create mode 100644 ee/maintained-apps/outputs/mozilla-vpn/darwin.json create mode 100644 ee/maintained-apps/outputs/mozilla-vpn/windows.json create mode 100644 frontend/pages/SoftwarePage/components/icons/MozillaVpn.tsx create mode 100644 website/assets/images/app-icon-mozilla-vpn-60x60@2x.png diff --git a/ee/maintained-apps/inputs/homebrew/mozilla-vpn.json b/ee/maintained-apps/inputs/homebrew/mozilla-vpn.json new file mode 100644 index 00000000000..3b8817c0c0f --- /dev/null +++ b/ee/maintained-apps/inputs/homebrew/mozilla-vpn.json @@ -0,0 +1,8 @@ +{ + "name": "Mozilla VPN", + "slug": "mozilla-vpn/darwin", + "unique_identifier": "org.mozilla.macos.FirefoxVPN", + "token": "mozilla-vpn", + "installer_format": "pkg", + "default_categories": ["Security"] +} diff --git a/ee/maintained-apps/inputs/winget/mozilla-vpn.json b/ee/maintained-apps/inputs/winget/mozilla-vpn.json new file mode 100644 index 00000000000..a35edf183ba --- /dev/null +++ b/ee/maintained-apps/inputs/winget/mozilla-vpn.json @@ -0,0 +1,10 @@ +{ + "name": "Mozilla VPN", + "slug": "mozilla-vpn/windows", + "package_identifier": "Mozilla.VPN", + "unique_identifier": "Mozilla VPN", + "installer_arch": "x64", + "installer_type": "msi", + "installer_scope": "machine", + "default_categories": ["Security"] +} diff --git a/ee/maintained-apps/outputs/apps.json b/ee/maintained-apps/outputs/apps.json index 7b0cb82098e..279c24da0dd 100644 --- a/ee/maintained-apps/outputs/apps.json +++ b/ee/maintained-apps/outputs/apps.json @@ -5370,6 +5370,20 @@ "unique_identifier": "io.mountainduck", "description": "Mountain Duck is a mounts servers and cloud storages as a disk on the desktop." }, + { + "name": "Mozilla VPN", + "slug": "mozilla-vpn/darwin", + "platform": "darwin", + "unique_identifier": "org.mozilla.macos.FirefoxVPN", + "description": "Mozilla VPN is a virtual private network service from the makers of Firefox that encrypts your device's internet connection and hides your location." + }, + { + "name": "Mozilla VPN", + "slug": "mozilla-vpn/windows", + "platform": "windows", + "unique_identifier": "Mozilla VPN", + "description": "Mozilla VPN is a virtual private network service from the makers of Firefox that encrypts your device's internet connection and hides your location." + }, { "name": "MQTTX", "slug": "mqttx/darwin", diff --git a/ee/maintained-apps/outputs/mozilla-vpn/darwin.json b/ee/maintained-apps/outputs/mozilla-vpn/darwin.json new file mode 100644 index 00000000000..513af4b4ea6 --- /dev/null +++ b/ee/maintained-apps/outputs/mozilla-vpn/darwin.json @@ -0,0 +1,22 @@ +{ + "versions": [ + { + "version": "2.38.0", + "queries": { + "exists": "SELECT 1 FROM apps WHERE bundle_identifier = 'org.mozilla.macos.FirefoxVPN';", + "patched": "SELECT 1 WHERE NOT EXISTS (SELECT 1 FROM apps WHERE bundle_identifier = 'org.mozilla.macos.FirefoxVPN' AND version_compare(bundle_short_version, '2.38.0') < 0);" + }, + "installer_url": "https://archive.mozilla.org/pub/vpn/releases/2.38.0/mac/MozillaVPN.pkg", + "install_script_ref": "751cc04c", + "uninstall_script_ref": "c4f6b4ee", + "sha256": "2803d4b4fa5bfc9ac3beb3c248aecf7185ef8aec83c169b4d0a566926723cda0", + "default_categories": [ + "Security" + ] + } + ], + "refs": { + "751cc04c": "#!/bin/bash\n\n# variables\nAPPDIR=\"/Applications/\"\nTMPDIR=$(dirname \"$(realpath \"$INSTALLER_PATH\")\")\n# functions\n\nquit_and_track_application() {\n local bundle_id=\"$1\"\n local var_name=\"APP_WAS_RUNNING_$(echo \"$bundle_id\" | tr '.-' '__')\"\n local timeout_duration=10\n\n # check if the application is running\n local app_running\n app_running=$(osascript -e \"application id \\\"$bundle_id\\\" is running\" 2>/dev/null)\n if [[ \"$app_running\" != \"true\" ]]; then\n eval \"export $var_name=0\"\n return\n fi\n\n local console_user\n console_user=$(stat -f \"%Su\" /dev/console)\n if [[ -z \"$console_user\" || \"$console_user\" == \"root\" || \"$console_user\" == \"loginwindow\" ]]; then\n echo \"Not logged into a non-root GUI; skipping quitting application ID '$bundle_id'.\"\n eval \"export $var_name=0\"\n return\n fi\n\n # App was running, mark it for relaunch\n eval \"export $var_name=1\"\n echo \"Application '$bundle_id' was running; will relaunch after installation.\"\n\n echo \"Quitting application '$bundle_id'...\"\n\n # try to quit the application within the timeout period\n local quit_success=false\n SECONDS=0\n while (( SECONDS < timeout_duration )); do\n if osascript -e \"tell application id \\\"$bundle_id\\\" to quit\" >/dev/null 2>&1; then\n if ! pgrep -f \"$bundle_id\" >/dev/null 2>&1; then\n echo \"Application '$bundle_id' quit successfully.\"\n quit_success=true\n break\n fi\n fi\n sleep 1\n done\n\n if [[ \"$quit_success\" = false ]]; then\n echo \"Application '$bundle_id' did not quit.\"\n fi\n}\n\n\nrelaunch_application() {\n local bundle_id=\"$1\"\n local var_name=\"APP_WAS_RUNNING_$(echo \"$bundle_id\" | tr '.-' '__')\"\n local was_running\n\n # Check if the app was running before installation\n eval \"was_running=\\$$var_name\"\n if [[ \"$was_running\" != \"1\" ]]; then\n return\n fi\n\n local console_user\n console_user=$(stat -f \"%Su\" /dev/console)\n if [[ -z \"$console_user\" || \"$console_user\" == \"root\" || \"$console_user\" == \"loginwindow\" ]]; then\n echo \"Not logged into a non-root GUI; skipping relaunching application ID '$bundle_id'.\"\n return\n fi\n\n echo \"Relaunching application '$bundle_id'...\"\n\n # Launch the app in the logged-in user's GUI session. Apps launched by root\n # won't register with the user's Dock/GUI, so run 'open' as the console user.\n # Use 'launchctl asuser' to bootstrap into the console user's Mach namespace\n # and GUI session — 'sudo -u' alone doesn't do this, which can cause\n # LSOpenURLsWithRole() failures even when 'open' exits 0.\n local open_status=0\n if [[ $EUID -eq 0 ]]; then\n local console_uid\n console_uid=$(id -u \"$console_user\")\n /bin/launchctl asuser \"$console_uid\" sudo -u \"$console_user\" open -b \"$bundle_id\" >/dev/null 2>&1 || open_status=$?\n else\n open -b \"$bundle_id\" >/dev/null 2>&1 || open_status=$?\n fi\n\n if [[ $open_status -eq 0 ]]; then\n echo \"Application '$bundle_id' relaunched successfully.\"\n else\n echo \"Failed to relaunch application '$bundle_id'.\"\n fi\n}\n\n\n# install pkg files\nquit_and_track_application 'org.mozilla.macos.FirefoxVPN'\nsudo installer -pkg \"$TMPDIR/MozillaVPN.pkg\" -target /\nrelaunch_application 'org.mozilla.macos.FirefoxVPN'\n", + "c4f6b4ee": "#!/bin/bash\n\n# variables\nLOGGED_IN_USER=$(scutil <<< \"show State:/Users/ConsoleUser\" | awk '/Name :/ { print $3 }')\n# functions\n\nexpand_pkgid_and_map() {\n local PKGID=\"$1\"\n local FUNC=\"$2\"\n if [[ \"$PKGID\" == *\"*\" ]]; then\n local prefix=\"${PKGID%\\*}\"\n echo \"Expanding wildcard for PKGID: $PKGID\"\n for receipt in $(pkgutil --pkgs | grep \"^${prefix}\"); do\n echo \"Processing $receipt\"\n \"$FUNC\" \"$receipt\"\n done\n else\n \"$FUNC\" \"$PKGID\"\n fi\n}\n\nforget_pkg() {\n local PKGID=\"$1\"\n expand_pkgid_and_map \"$PKGID\" forget_receipt\n}\n\nforget_receipt() {\n local PKGID=\"$1\"\n sudo pkgutil --forget \"$PKGID\"\n}\n\nquit_application() {\n local bundle_id=\"$1\"\n local timeout_duration=10\n\n # check if the application is running\n local app_running\n app_running=$(osascript -e \"application id \\\"$bundle_id\\\" is running\" 2>/dev/null)\n if [[ \"$app_running\" != \"true\" ]]; then\n return\n fi\n\n local console_user\n console_user=$(stat -f \"%Su\" /dev/console)\n if [[ -z \"$console_user\" || \"$console_user\" == \"root\" || \"$console_user\" == \"loginwindow\" ]]; then\n echo \"Not logged into a non-root GUI; skipping quitting application ID '$bundle_id'.\"\n return\n fi\n\n echo \"Quitting application '$bundle_id'...\"\n\n # try to quit the application within the timeout period\n local quit_success=false\n SECONDS=0\n while (( SECONDS < timeout_duration )); do\n if osascript -e \"tell application id \\\"$bundle_id\\\" to quit\" >/dev/null 2>&1; then\n if ! pgrep -f \"$bundle_id\" >/dev/null 2>&1; then\n echo \"Application '$bundle_id' quit successfully.\"\n quit_success=true\n break\n fi\n fi\n sleep 1\n done\n\n if [[ \"$quit_success\" = false ]]; then\n echo \"Application '$bundle_id' did not quit.\"\n fi\n}\n\n\nremove_pkg_files() {\n local PKGID=\"$1\"\n expand_pkgid_and_map \"$PKGID\" remove_receipt_files\n}\n\nremove_receipt_files() {\n local PKGID=\"$1\"\n local PKGINFO VOLUME INSTALL_LOCATION FULL_INSTALL_LOCATION\n\n echo \"pkgutil --pkg-info-plist \\\"$PKGID\\\"\"\n PKGINFO=$(pkgutil --pkg-info-plist \"$PKGID\")\n VOLUME=$(echo \"$PKGINFO\" | awk '/volume<\\/key>/ {getline; gsub(/.*|<\\/string>.*/, \"\"); print}')\n INSTALL_LOCATION=$(echo \"$PKGINFO\" | awk '/install-location<\\/key>/ {getline; gsub(/.*|<\\/string>.*/, \"\"); print}')\n\n if [ -z \"$INSTALL_LOCATION\" ] || [ \"$INSTALL_LOCATION\" = \"/\" ]; then\n FULL_INSTALL_LOCATION=\"$VOLUME\"\n else\n FULL_INSTALL_LOCATION=\"$VOLUME/$INSTALL_LOCATION\"\n FULL_INSTALL_LOCATION=$(echo \"$FULL_INSTALL_LOCATION\" | sed 's|//|/|g')\n fi\n\n echo \"sudo pkgutil --only-files --files \\\"$PKGID\\\" | sed \\\"s|^|${FULL_INSTALL_LOCATION}/|\\\" | tr '\\\\\\\\n' '\\\\\\\\0' | /usr/bin/sudo -u root -E -- /usr/bin/xargs -0 -- /bin/rm -rf\"\n sudo pkgutil --only-files --files \"$PKGID\" | sed \"s|^|/${INSTALL_LOCATION}/|\" | tr '\\n' '\\0' | /usr/bin/sudo -u root -E -- /usr/bin/xargs -0 -- /bin/rm -rf\n\n echo \"sudo pkgutil --only-dirs --files \\\"$PKGID\\\" | sed \\\"s|^|${FULL_INSTALL_LOCATION}/|\\\" | grep '\\\\.app$' | tr '\\\\\\\\n' '\\\\\\\\0' | /usr/bin/sudo -u root -E -- /usr/bin/xargs -0 -- /bin/rm -rf\"\n sudo pkgutil --only-dirs --files \"$PKGID\" | sed \"s|^|${FULL_INSTALL_LOCATION}/|\" | grep '\\.app$' | tr '\\n' '\\0' | /usr/bin/sudo -u root -E -- /usr/bin/xargs -0 -- /bin/rm -rf\n\n root_app_dir=$(\n sudo pkgutil --only-dirs --files \"$PKGID\" \\\n | sed \"s|^|${FULL_INSTALL_LOCATION}/|\" \\\n | grep 'Applications' \\\n | awk '{ print length, $0 }' \\\n | sort -n \\\n | head -n1 \\\n | cut -d' ' -f2-\n )\n if [ -n \"$root_app_dir\" ]; then\n echo \"sudo rmdir -p \\\"$root_app_dir\\\" 2>/dev/null || :\"\n sudo rmdir -p \"$root_app_dir\" 2>/dev/null || :\n fi\n}\n\ntrash() {\n local logged_in_user=\"$1\"\n local target_file=\"$2\"\n local timestamp=\"$(date +%Y-%m-%d-%s)\"\n local rand=\"$(jot -r 1 0 99999)\"\n\n # replace ~ with /Users/$logged_in_user\n if [[ \"$target_file\" == ~* ]]; then\n target_file=\"/Users/$logged_in_user${target_file:1}\"\n fi\n\n local trash=\"/Users/$logged_in_user/.Trash\"\n\n # If the target contains glob characters, expand it and move each match.\n if [[ \"$target_file\" == *[*?[]* ]]; then\n local file file_name\n local matched=false\n local i=0\n # compgen -G expands the (quoted) pattern itself, so paths containing\n # spaces glob correctly; reading line by line keeps each match intact.\n while IFS= read -r file; do\n [[ -n \"$file\" ]] || continue\n [[ -e \"$file\" || -L \"$file\" ]] || continue\n matched=true\n i=$((i + 1))\n file_name=\"$(basename \"$file\")\"\n echo \"removing $file.\"\n # The per-match counter keeps matches that share a basename from\n # overwriting each other in the trash.\n mv -f \"$file\" \"$trash/${file_name}_${timestamp}_${rand}_${i}\"\n done < <(compgen -G \"$target_file\" 2>/dev/null)\n if [[ \"$matched\" == false ]]; then\n echo \"$target_file doesn't exist.\"\n fi\n return\n fi\n\n local file_name=\"$(basename \"${target_file}\")\"\n\n if [[ -e \"$target_file\" ]]; then\n echo \"removing $target_file.\"\n mv -f \"$target_file\" \"$trash/${file_name}_${timestamp}_${rand}\"\n else\n echo \"$target_file doesn't exist.\"\n fi\n}\n\nquit_application 'org.mozilla.macos.FirefoxVPN'\nremove_pkg_files 'org.mozilla.macos.FirefoxVPN'\nforget_pkg 'org.mozilla.macos.FirefoxVPN'\ntrash $LOGGED_IN_USER '/Library/Application Support/Crash Reporter/Mozilla VPN_*'\ntrash $LOGGED_IN_USER '/Library/Logs/DiagnosticReports/Mozilla VPN_*'\ntrash $LOGGED_IN_USER '~/Library/Application Support/CrashReporter/Mozilla VPN_*'\ntrash $LOGGED_IN_USER '~/Library/Application Support/Mozilla/Mozilla VPN'\ntrash $LOGGED_IN_USER '~/Library/Application Support/mozillavpn.txt'\ntrash $LOGGED_IN_USER '~/Library/Caches/Mozilla VPN'\ntrash $LOGGED_IN_USER '~/Library/Saved Application State/org.mozilla.macos.FirefoxVPN.savedState'\n" + } +} diff --git a/ee/maintained-apps/outputs/mozilla-vpn/windows.json b/ee/maintained-apps/outputs/mozilla-vpn/windows.json new file mode 100644 index 00000000000..0e95ea4a13a --- /dev/null +++ b/ee/maintained-apps/outputs/mozilla-vpn/windows.json @@ -0,0 +1,23 @@ +{ + "versions": [ + { + "version": "2.38.0", + "queries": { + "exists": "SELECT 1 FROM programs WHERE name = 'Mozilla VPN' AND publisher = 'Mozilla Corporation';", + "patched": "SELECT 1 WHERE NOT EXISTS (SELECT 1 FROM programs WHERE name = 'Mozilla VPN' AND publisher = 'Mozilla Corporation' AND version_compare(version, '2.38.0') < 0);" + }, + "installer_url": "https://archive.mozilla.org/pub/vpn/releases/2.38.0/windows/MozillaVPN.msi", + "install_script_ref": "8959087b", + "uninstall_script_ref": "500bade7", + "sha256": "11a270b3ee858a7e10cd49f59fb9452fa30c87b15ffaa35af6cf3851d60876f0", + "default_categories": [ + "Security" + ], + "upgrade_code": "{ABD1AA2B-11D7-4C4D-85EE-CC987D82A443}" + } + ], + "refs": { + "500bade7": "# Fleet uninstalls app by finding all related product codes for the specified upgrade code\n$inst = New-Object -ComObject \"WindowsInstaller.Installer\"\n$timeoutSeconds = 300 # 5 minute timeout per product\n\n# MSI exit codes that indicate success. 3010 = ERROR_SUCCESS_REBOOT_REQUIRED,\n# 1641 = ERROR_SUCCESS_REBOOT_INITIATED. Treat these as success rather than failure.\n$successCodes = @(0, 3010, 1641)\n\nforeach ($product_code in $inst.RelatedProducts('{ABD1AA2B-11D7-4C4D-85EE-CC987D82A443}')) {\n $process = Start-Process msiexec -ArgumentList @(\"/quiet\", \"/x\", $product_code, \"/norestart\") -PassThru\n\n # Wait for process with timeout\n $completed = $process.WaitForExit($timeoutSeconds * 1000)\n\n if (-not $completed) {\n Stop-Process -Id $process.Id -Force -ErrorAction SilentlyContinue\n Exit 1603 # ERROR_UNINSTALL_FAILURE\n }\n\n # If the uninstall failed, bail\n if ($successCodes -notcontains $process.ExitCode) {\n Write-Output \"Uninstall for $($product_code) exited $($process.ExitCode)\"\n Exit $process.ExitCode\n }\n}\n\n# All uninstalls succeeded; exit success\nExit 0\n", + "8959087b": "$logFile = \"${env:TEMP}/fleet-install-software.log\"\n\ntry {\n\n$installProcess = Start-Process msiexec.exe `\n -ArgumentList \"/quiet /norestart /lv ${logFile} /i `\"${env:INSTALLER_PATH}`\"\" `\n -PassThru -Verb RunAs -Wait\n\nGet-Content $logFile -Tail 500\n\nExit $installProcess.ExitCode\n\n} catch {\n Write-Host \"Error: $_\"\n Exit 1\n}\n" + } +} diff --git a/frontend/pages/SoftwarePage/components/icons/MozillaVpn.tsx b/frontend/pages/SoftwarePage/components/icons/MozillaVpn.tsx new file mode 100644 index 00000000000..a0df50718b3 --- /dev/null +++ b/frontend/pages/SoftwarePage/components/icons/MozillaVpn.tsx @@ -0,0 +1,14 @@ +import * as React from "react"; + +import type { SVGProps } from "react"; + +const MozillaVpn = (props: SVGProps) => ( + + + +); +export default MozillaVpn; diff --git a/frontend/pages/SoftwarePage/components/icons/index.ts b/frontend/pages/SoftwarePage/components/icons/index.ts index a122c9c37da..f804a0fe85a 100644 --- a/frontend/pages/SoftwarePage/components/icons/index.ts +++ b/frontend/pages/SoftwarePage/components/icons/index.ts @@ -633,6 +633,7 @@ import Moonlight from "./Moonlight"; import Morgen from "./Morgen"; import Mos from "./Mos"; import MountainDuck from "./MountainDuck"; +import MozillaVpn from "./MozillaVpn"; import Mqttx from "./Mqttx"; import MullvadBrowser from "./MullvadBrowser"; import MullvadVpn from "./MullvadVpn"; @@ -1747,6 +1748,7 @@ export const SOFTWARE_NAME_TO_ICON_MAP = { mos: Mos, "mountain duck": MountainDuck, "mozilla firefox": Firefox, + "mozilla vpn": MozillaVpn, mqttx: Mqttx, "mullvad browser": MullvadBrowser, "mullvad vpn": MullvadVpn, diff --git a/website/assets/images/app-icon-mozilla-vpn-60x60@2x.png b/website/assets/images/app-icon-mozilla-vpn-60x60@2x.png new file mode 100644 index 0000000000000000000000000000000000000000..2e075bb17b3ae81b1ee699f27faad0a4cc02fb15 GIT binary patch literal 2746 zcmai0XH*l|5>5yuASElSAc6$NuoQt%q-Y>C2@r~)6s1Oxwjf1hSrScvMd=}75y2>E zmLf`VRR~=W2qG{ zka0lSx(gA%D`0Wq+GP>cF9cw`yS+7_W>EQ~aAO2l)8hh)tTRbEI(!f(-abNg*y``mal!| z8K^v^5v09uys9HcELJPVJjR{yn!u7;I1{*hY3B)7YyOa(b`SspBD{KK20r>zhxD4t zJRCqNhr>msfi@iw{r?RF_>s>m_?!|X_vi5R%W0RhH=6t8m0oS&H&Tp#43>Z z3_Zok+WPQVl|RwL#qsLLhf#7}cscq3#%xIL{yO+6tde+YLYgM3-EjVIvu&9=_3~8W zeosdH&BDhRBsvszw*SCG!}$a_wC8MQeyx*WDfKKxzAkdYXxQS@`;oT{8FUa`qz|Q+ z1%zvGByOJf4qQ+bPi?mO+tOrRZcPx1yIsomM;cGLsY1m4Ig*^6oDC8q*V0|;QU9x0 zN{uCRF$PRbO?vR%0?`4zyWJPeKv%rJc)Y~e-rj!T%a_=%8yim?XWDR1-Cu?m4+R2} z2^fa;>o`!|8TEe}CC-$^Czg-$kC@EG0Jj8bCFmCMyhUn^9RJSumKP ztE>AU`fD-ymO0-|KR~;BFC>?Fu9Igw5ET%g>eNVm0W6;zy*ZR|tF4%kr)v3Nlu|YS zL2b4compKe-rq2)6kw44X-hAl%_uJ~ulnJo>6Y-}?yL|WOONg^DPa=Cx`~9Dxn8Yi z>zcWvUvd@)&8ogdIQT^JgA{0|6(nTNn&V&G$rIE#zj`k(PJ%c;e7qF~`f)P~#Miv* zWs(RKx8?)z4To;BRh;}$O>)OCVt*MJ_OQvWcP)6)J8|q!W3}zrne9$oT0K2X8PIR3 zry(aNH_b0Gp_whn_r1f0L^hi!Nf7aig8`K-EiGvmRj_R%rg+(kCV4DW><^JIy36I+(zjO{=`Fq1^&w9Sp0Bd zkzYH6U**JW1;yRhl~sCd2C#yS*Y9=Ix-Mb9NAkOX7hjk9$20io_F#=0g1}Q=uM&o= zBMaI4TSh|mfPjxIH;mb`ygRhx1b0my+g9fAMLZ~XZdBX&C&Ug9Gl5j%Cs@AbU2gu} zt}AczUvFo-Afw-OTiNJI&?TpJmxp1Nz2x?&M7o6?U~S=)pR$qq2|(`!=Mh-I>+OP| zu&g~lo<&l@i-t>Tq^nov;oRR9NJfSw`!rAk8rdY`bNwHCjx8$%5Z+~#nLq)8>eXg)jm3j$#_#Ijc-YR0?p=K!}JlB%nEfK(ew ziSx+Hyh*}~tGV?7FRPQvgPQ%im7%d{=Cj02M5y11ed>a7mM`pQL|A@=GPInT)puTM z>NZ=Y;PPjTEHoim==J7doQJCm-$^#MTg2+upApG3-+BOhZlV|l5Iz{A@303sV|%<} zizyLsT;);vknAZ@y?4jIrt8dLPh3zd(Jv;H?&Ta2DNbW4h5qxu*#$xl8%~OO#gFPl7kzah9l8i$~GAe-Y`#W z?qeSXjr7ZyV|*JXZE!gzhjdTE+WHu%sQSj7u*Z1Webew!bS&)bV{RTP9FD1cr+}Lr zROM5C>TS3*bDWvqi{luoURScK;v&IHDuOpl^b;HRmopSi3p|94&aN+elv_e_b)n}p znTA!q1)3g;bTnD=%G~7|hWY%o=O#Vd2b;&(zNg%tn8Vw4Pnbb?D8d!eVh0TuHTlEUa5Tz&i!p&v57uFMxY<8qUHAKuqB9aAO;_2IdE^GS z=D#{lqeTtQgqCAvH*NdEU{vJPmU|*-VJ7cE9>{8q0GU6uiOz+ zqzm!SuBT?sEWfcZW#r+gc)pjl^UEw=+L`XawLBqTbuE@@IR1`^makZ#FK2BtJ_8c> zD|*7dE@XD->BY|^DO^x}3uE0mF2$xjkqFfG!mO5&Fw~w8Bn;566b~n?wSo%gmLbbQ zNlSV4RWbe&xRp4d%xDV4F?d-T?sdqon#QUdP^;=!R(c?oa@zdZoM-$%)b%J~bl;Y> zABbCLE?1bM=oZ#ujZaoqZJtw8(lcdIopF6gx&~~a{Dw}co%-BxQk3< z_i2%@jmM@e@}OCC{99G++i1_0PYrvL