From a3a1654030191a6db226c1075635881fddcd61f9 Mon Sep 17 00:00:00 2001
From: noe <git@kat.cafe>
Date: Wed, 26 Mar 2025 21:08:15 -0700
Subject: [PATCH] wtf auth??

---
 authmiddleware/authmiddleware.go          | 130 ++++++++++++++++++++++
 authmiddleware/authmiddleware_test.go     |  80 +++++++++++++
 authmiddleware/const.go                   |  10 ++
 discord/clientmock/discord_client_mock.go |   4 +
 discord/discord_client.go                 |  14 +++
 interactions/cmd_roleypoly_test.go        |   5 +
 roleypoly/fiber.go                        |  38 ++++++-
 static/embed.go                           |   9 ++
 static/favicon.ico                        | Bin 0 -> 103665 bytes
 static/main.css                           |   3 +
 static/robots.txt                         |   1 +
 templates/index.html                      |   6 +
 templates/layouts/main.html               |   7 ++
 testing/testing.go                        |  31 ++++++
 14 files changed, 337 insertions(+), 1 deletion(-)
 create mode 100644 authmiddleware/authmiddleware.go
 create mode 100644 authmiddleware/authmiddleware_test.go
 create mode 100644 authmiddleware/const.go
 create mode 100644 static/embed.go
 create mode 100644 static/favicon.ico
 create mode 100644 static/main.css
 create mode 100644 static/robots.txt

diff --git a/authmiddleware/authmiddleware.go b/authmiddleware/authmiddleware.go
new file mode 100644
index 0000000..0146d54
--- /dev/null
+++ b/authmiddleware/authmiddleware.go
@@ -0,0 +1,130 @@
+package authmiddleware
+
+import (
+	"errors"
+	"fmt"
+	"time"
+
+	"slices"
+
+	"git.sapphic.engineer/roleypoly/v4/discord"
+	"git.sapphic.engineer/roleypoly/v4/types"
+	"github.com/gofiber/fiber/v3"
+	"github.com/gofiber/fiber/v3/middleware/session"
+)
+
+type AuthMiddleware struct {
+	Client discord.IDiscordClient
+
+	supportIDs   []string
+	superuserIDs []string
+}
+
+type Session struct {
+	Permissions Permission
+	User        *types.DiscordUser
+	AccessToken string
+	LastRefresh time.Time
+}
+
+var SessionKey uint8
+
+func New(discordClient discord.IDiscordClient, supportIDs []string, superuserIDs []string) func(fiber.Ctx) error {
+	am := AuthMiddleware{
+		Client:       discordClient,
+		supportIDs:   supportIDs,
+		superuserIDs: superuserIDs,
+	}
+
+	return am.Handle
+}
+
+var DefaultSession *Session = &Session{Permissions: PermAnonymous}
+
+func (am *AuthMiddleware) Handle(c fiber.Ctx) error {
+	sc := session.FromContext(c)
+	sess := am.Init(sc)
+
+	am.validateAccessToken(sess) // this will remove AccessToken if its no good
+	am.setPermissions(sess)      // this captures this
+	am.Commit(sc, sess)          // and save our first bits?
+
+	return c.Next()
+}
+
+func (am *AuthMiddleware) Init(sess *session.Middleware) *Session {
+	session, ok := sess.Get(SessionKey).(*Session)
+	if !ok {
+		am.Commit(sess, DefaultSession)
+		return DefaultSession
+	}
+
+	return session
+}
+
+func (am *AuthMiddleware) Commit(sc *session.Middleware, sess *Session) {
+	sc.Set(SessionKey, sess)
+}
+
+func SessionFrom(c fiber.Ctx) (s *Session) {
+	sess := session.FromContext(c)
+	s, _ = sess.Get(SessionKey).(*Session)
+
+	return s
+}
+
+func (am *AuthMiddleware) isSupport(userID string) bool {
+	return slices.Contains(am.supportIDs, userID)
+}
+
+func (am *AuthMiddleware) isSuperuser(userID string) bool {
+	return slices.Contains(am.superuserIDs, userID)
+}
+
+func (am *AuthMiddleware) setPermissions(sess *Session) {
+	sess.Permissions = PermAnonymous
+
+	if sess.AccessToken != "" {
+		sess.Permissions = PermUser
+	}
+
+	if am.isSupport(sess.User.ID) {
+		sess.Permissions = PermSupport
+	}
+
+	if am.isSuperuser(sess.User.ID) {
+		sess.Permissions = PermSuperuser
+	}
+}
+
+func (am *AuthMiddleware) validateAccessToken(sess *Session) {
+	if sess.AccessToken == "" {
+		return
+	}
+
+	if sess.LastRefresh.Add(time.Hour).Before(time.Now()) {
+		user, err := am.GetCurrentUser(sess.AccessToken)
+		if err != nil {
+			if errors.Is(err, discord.ErrUnauthorized) {
+				sess.AccessToken = ""
+				return
+			}
+		}
+
+		sess.User = user
+	}
+}
+
+func (am *AuthMiddleware) GetCurrentUser(accessToken string) (*types.DiscordUser, error) {
+	req := discord.NewRequest("GET", "/users/@me")
+	am.Client.ClientAuth(req, accessToken)
+
+	resp, err := am.Client.Do(req)
+	if err != nil {
+		return nil, fmt.Errorf("authmiddleware.GetCurrentUser: request failed: %w", err)
+	}
+
+	var user types.DiscordUser
+	err = discord.OutputResponse(resp, &user)
+	return &user, err
+}
diff --git a/authmiddleware/authmiddleware_test.go b/authmiddleware/authmiddleware_test.go
new file mode 100644
index 0000000..292389e
--- /dev/null
+++ b/authmiddleware/authmiddleware_test.go
@@ -0,0 +1,80 @@
+package authmiddleware_test
+
+import (
+	"bytes"
+	"net/http"
+	"testing"
+
+	"git.sapphic.engineer/roleypoly/v4/authmiddleware"
+	"git.sapphic.engineer/roleypoly/v4/discord"
+	"git.sapphic.engineer/roleypoly/v4/discord/clientmock"
+	"github.com/goccy/go-json"
+	"github.com/gofiber/fiber/v3"
+	"github.com/gofiber/fiber/v3/middleware/session"
+)
+
+func TestAnonymous(t *testing.T) {
+	dc := clientmock.NewDiscordClientMock()
+	app := getApp(dc)
+
+	setSession(app, dc, authmiddleware.Session{
+		Permissions: authmiddleware.PermAnonymous,
+	})
+}
+
+func getApp(dc discord.IDiscordClient) *fiber.App {
+	app := fiber.New(fiber.Config{})
+	sessionMiddleware, sessionStore := session.NewWithStore()
+	sessionStore.RegisterType(authmiddleware.Session{})
+
+	app.Use(sessionMiddleware, authmiddleware.New(dc, []string{}, []string{}))
+	app.Get("/", authState)
+	app.Post("/updateSession", updateSession)
+
+	return app
+}
+
+func setSession(app *fiber.App, dc *clientmock.DiscordClientMock, sess authmiddleware.Session) error {
+	body := bytes.Buffer{}
+	json.NewEncoder(&body).Encode(sess)
+
+	// do mocks here
+
+	req, _ := http.NewRequest("POST", "/updateSession", &body)
+	_, err := app.Test(req)
+	return err
+}
+
+func authState(c fiber.Ctx) error {
+	s := authmiddleware.SessionFrom(c)
+
+	permList := []string{}
+
+	if s.Permissions >= authmiddleware.PermAnonymous {
+		permList = append(permList, "anonymous")
+	}
+
+	if s.Permissions >= authmiddleware.PermUser {
+		permList = append(permList, "user")
+	}
+
+	if s.Permissions >= authmiddleware.PermSupport {
+		permList = append(permList, "support")
+	}
+
+	if s.Permissions >= authmiddleware.PermSuperuser {
+		permList = append(permList, "superuser")
+	}
+
+	return c.JSON(permList)
+}
+
+func updateSession(c fiber.Ctx) error {
+	var newSession *authmiddleware.Session
+	c.Bind().JSON(&newSession)
+
+	sc := session.FromContext(c)
+	sc.Set(authmiddleware.SessionKey, newSession)
+
+	return c.SendString("ok")
+}
diff --git a/authmiddleware/const.go b/authmiddleware/const.go
new file mode 100644
index 0000000..ea4b93c
--- /dev/null
+++ b/authmiddleware/const.go
@@ -0,0 +1,10 @@
+package authmiddleware
+
+type Permission uint8
+
+const (
+	PermAnonymous Permission = 1 << iota
+	PermUser
+	PermSupport
+	PermSuperuser
+)
diff --git a/discord/clientmock/discord_client_mock.go b/discord/clientmock/discord_client_mock.go
index c0a640d..6d6f523 100644
--- a/discord/clientmock/discord_client_mock.go
+++ b/discord/clientmock/discord_client_mock.go
@@ -42,6 +42,10 @@ func (c *DiscordClientMock) BotAuth(req *http.Request) {
 	c.Called(req)
 }
 
+func (c *DiscordClientMock) ClientAuth(req *http.Request, accessToken string) {
+	c.Called(req, accessToken)
+}
+
 func (c *DiscordClientMock) MockResponse(method, path string, statusCode int, data any) {
 	body := bytes.Buffer{}
 	json.NewEncoder(&body).Encode(data)
diff --git a/discord/discord_client.go b/discord/discord_client.go
index d3f832f..7eb7c8b 100644
--- a/discord/discord_client.go
+++ b/discord/discord_client.go
@@ -1,6 +1,7 @@
 package discord
 
 import (
+	"errors"
 	"fmt"
 	"net/http"
 	"net/url"
@@ -11,9 +12,14 @@ import (
 
 const DiscordBaseUrl = "https://discord.com/api/v10"
 
+var (
+	ErrUnauthorized = errors.New("discord: got a 401 from discord")
+)
+
 type IDiscordClient interface {
 	Do(req *http.Request) (*http.Response, error)
 	BotAuth(req *http.Request)
+	ClientAuth(req *http.Request, accessToken string)
 	GetClientID() string
 }
 
@@ -44,6 +50,10 @@ func (d *DiscordClient) BotAuth(req *http.Request) {
 	req.Header.Set("Authorization", fmt.Sprintf("Bot %s", d.BotToken))
 }
 
+func (d *DiscordClient) ClientAuth(req *http.Request, accessToken string) {
+	req.Header.Set("Authorization", fmt.Sprintf("Bearer %s", d.BotToken))
+}
+
 func NewRequest(method string, path string) *http.Request {
 	url, err := url.Parse(fmt.Sprintf("%s%s", DiscordBaseUrl, path))
 	if err != nil {
@@ -62,6 +72,10 @@ func NewRequest(method string, path string) *http.Request {
 }
 
 func OutputResponse(resp *http.Response, dst any) error {
+	if resp.StatusCode == 401 {
+		return ErrUnauthorized
+	}
+
 	// TODO: more checks?
 	return json.NewDecoder(resp.Body).Decode(dst)
 }
diff --git a/interactions/cmd_roleypoly_test.go b/interactions/cmd_roleypoly_test.go
index 869a369..c568332 100644
--- a/interactions/cmd_roleypoly_test.go
+++ b/interactions/cmd_roleypoly_test.go
@@ -2,6 +2,7 @@ package interactions_test
 
 import (
 	"fmt"
+	"net/url"
 	"testing"
 
 	"git.sapphic.engineer/roleypoly/v4/interactions"
@@ -28,6 +29,10 @@ func TestCmdRoleypoly(t *testing.T) {
 	button := ir.Data.Components[0]
 	assert.Equal(t, fmt.Sprintf("%s/s/guild-id", i.PublicBaseURL), button.URL)
 
+	u, _ := url.Parse(i.PublicBaseURL)
+	hostname := u.Host
+	assert.Equal(t, fmt.Sprintf("Pick roles on %s", hostname), button.Label)
+
 	// test the command mentions
 	tests := map[string]string{
 		"See all the roles": "</2:pickable-roles>",
diff --git a/roleypoly/fiber.go b/roleypoly/fiber.go
index b02463a..33a5706 100644
--- a/roleypoly/fiber.go
+++ b/roleypoly/fiber.go
@@ -1,15 +1,22 @@
 package roleypoly
 
 import (
+	"log"
 	"net/http"
+	"strings"
+	"time"
 
 	"github.com/goccy/go-json"
 	"github.com/gofiber/fiber/v3"
+	"github.com/gofiber/fiber/v3/middleware/csrf"
 	"github.com/gofiber/fiber/v3/middleware/session"
+	"github.com/gofiber/fiber/v3/middleware/static"
 	"github.com/gofiber/template/html/v2"
 
+	"git.sapphic.engineer/roleypoly/v4/authmiddleware"
 	"git.sapphic.engineer/roleypoly/v4/discord"
 	"git.sapphic.engineer/roleypoly/v4/interactions"
+	staticfs "git.sapphic.engineer/roleypoly/v4/static"
 	"git.sapphic.engineer/roleypoly/v4/templates"
 	"git.sapphic.engineer/roleypoly/v4/testing"
 )
@@ -24,11 +31,38 @@ func CreateFiberApp() *fiber.App {
 		ViewsLayout: "layouts/main",
 	})
 
-	app.Use(session.New(session.Config{}))
+	sessionMiddleware, sessionStore := session.NewWithStore()
+	sessionStore.RegisterType(authmiddleware.Session{})
+
+	app.Use(sessionMiddleware)
+	app.Use(csrf.New(csrf.Config{
+		Session: sessionStore,
+	}))
+
+	app.Get("/static*", static.New("", static.Config{
+		FS:            staticfs.FS,
+		Compress:      true,
+		CacheDuration: 24 * 8 * time.Hour,
+	}))
+	app.Get("/favicon.ico", oneStatic)
+	app.Get("/manifest.json", oneStatic)
+	app.Get("/robots.txt", oneStatic)
+	app.Get("/humans.txt", oneStatic)
 
 	return app
 }
 
+func oneStatic(c fiber.Ctx) error {
+	path := strings.Replace(c.OriginalURL(), "/", "", 1)
+	f, err := staticfs.FS.Open(path)
+	if err != nil {
+		log.Println("oneStatic:", c.OriginalURL(), " failed: ", err)
+		return c.SendStatus(500)
+	}
+
+	return c.SendStream(f)
+}
+
 func SetupControllers(app *fiber.App, dc *discord.DiscordClient, publicKey string, publicBaseURL string) {
 	gs := discord.NewGuildService(dc)
 
@@ -37,6 +71,8 @@ func SetupControllers(app *fiber.App, dc *discord.DiscordClient, publicKey strin
 	}).Routes(app.Group("/testing"))
 
 	interactions.NewInteractions(publicKey, publicBaseURL, gs).Routes(app.Group("/interactions"))
+
+	app.Use(authmiddleware.New(dc, []string{}, []string{}))
 }
 
 // func getStorageDirectory() string {
diff --git a/static/embed.go b/static/embed.go
new file mode 100644
index 0000000..0085f72
--- /dev/null
+++ b/static/embed.go
@@ -0,0 +1,9 @@
+package static
+
+import "embed"
+
+//go:embed *
+var FS embed.FS
+
+// hi :3
+// dont look its rude :c
diff --git a/static/favicon.ico b/static/favicon.ico
new file mode 100644
index 0000000000000000000000000000000000000000..99cefdbd2a9b1242f61fd7b83f862f4eefceb28a
GIT binary patch
literal 103665
zcmeHQ2V4|a6F;npv0&`N0T$rspn&wIqKJSX_5$|UK!b{c$^jZ<H^dTqEX1zSSYpM*
zs9!WT#1a*;x2S*#7DV^^&))5_oWOB-An5V?{n>lBxBF(^%$wI{-V=$mL{&uerzJ8F
z#n%#v2II3-DoaZ~(-J+zcOD+{w3kR!yP=lI+FF)gZzvKu_QaD0^0c-{bTdXvq>U@R
z@2g58(e!y*qUoLd+tsMnxEfwv!>4_lAi7KVjI!?i^?Kx4tAkG)&*1S_o}`9++xz~6
z<C$sErysjN*}60Pmn#dp4&ShAx#^7C`;LxmEqU@^Q|(bEcUCt!*x^Cj&n+rdTh(Cb
zcH_z+Q+Do2y!23CGJn2pgBq*m?`*C;(`Z*~^KIrPjjrxEu*2}w)}7avC*6N?^m5p5
z|GNEh<=o?0&tFaU=r;Fy#NZ+Ka|YK+pODtB0tga`^ri$Ri9)Y!3AWVz?!PZKMAe^>
z_WiB&wU5O0Vs?vrbqmUx-C^v2VE1138|zeT=vqNEYL-Z(+e{=n{+Z~o4U(H}A2kro
zy3*mU*F4*$8>eXpbjaNBU+r7X66yzC=y>y7>%ZHqkTlRqJ{tJuaV62&H@+{ok8zyb
zV#><{Hj}-RgEuy;d*}zVlrQftTzh8Dv#M2Z)YTF>c#A}HYKx=;Dv54D01n5#4*j*0
z*`ff6&67T^DT}l3FIevGH@nZ$@D&GtJ^OO!=$8qPO|mwwjaq%NTC#ql0j)w}o<B1?
z5*0GOrl_xOx5z_pTmLlEI`Y7RNp5zdHhdS*eu>_VYxigM?3HXhD|>jtH}yr=D&)zJ
z%ig7`wBo9+mR22{5;hK*@OIhSmIsGT4UUT5`2DgO`<<><OY1$k)vgsG+fMHec1^kd
zkMG=szAYZPht<1zW_I?)s6iu#Z!^B{DAKLlIpN-{>~@B(S2oS_>9_Yg<84#71g%Q+
zewKYH>!E8%PS6YAm&*b}7QLzN)u-Z(`tKAlmG^B&kxSiScb~=0dbq><Oj7fQEsr(1
zXLz@9T==rR>tgy`@xQpK<;V;F{(9+1+Pqtlv$I>JjemY2JU#11PUUxsli1tdSbG3i
zdolE!cwxQYJ0EMZaA3@eY4&#yo;{KEKmY8MaKFglODooC85>&YWF7fpLBz!~sei8z
z{@&PFWNrC%4~u=RCDXK5v^=)dV&Alf-JbeCn!mmG%SR)8mnQb#HqE`s)PVtUk~i(2
zw|HPNc8^~A^j<PmQP7-OLp>hrY-$_%SwH(J8B_1v(4HLl{OPaFUYqL=9du$qwoUx`
ztc1qXw_RDkUg!LB*OkugH%0XO{gGwP@81Ob*85!acwO7X`;X?DPC279pz6qTuC~*z
zF0QHL9KS6k!fwa)Gq>s{duSO9wd?$Ig&Xx6X&ttZDHA7LPPc3g^nU2McVbZT&EPi&
z>!<oof427Vpe?nY)PJ5dc8GVt^?wfP{#tMK<eg_5-pOdt|FfCiZ>}cvrR-hWzv($9
zWZupt>nn@Tp1Iw><@r_q={duux`x+%cBt8o7oOHH+7}?r=&$Z~-OfOqfj&bzXF;Ck
z4;$Uqo_06GcZjpq{2wX@x15=s8qzCZ&d91mhoo;gTF)!<Z<n1`KRtRnxsm8?t#@n4
zID>8>{lc?%KRCUkbHa)iHMdLLI_oDi>h;Z{)wXH=F|}Ila5!rlI;-EIH6xl#cpI4H
z*wC!bj-F$DS5|8>@#uQ}pvXS%Z&yBSDi%HQa!RuMZgbjV$(ZOJd+$fIdzjgD@SoT3
z6i`DtR&?rYwy1&O-GjrLOgS>C=NNa({jI|-udVxWLDZk?cc<U(?kfHw@Z^T3S~t$D
zPL9a(#ZLl;b?i09eRJH}^I2oU?0?bPQ)8}^(NN<q_wv{L0gW@H8y1}OO}IxT#RMg1
zw%HpJ8M6C3{kYa`v!lmvZ1~vOsgj>>lfB0)YK_Y1c=FJ<E9dQ;zkblImfN?*t-W^H
z`i@r4^c5#xF8}(Ae5-=Z-GApHgX4x<etOhnMNHe|b+cOkI^vw`?$tYYeBZa`fxt)A
z$K`1I`z-NU@X8=xJJGS?oW(u&F57T*(4KYk2CW;k=YgB$>lY^y`c9OJ8oCdj`P9I5
zjrO4tv(~k3HEwo6RpD^$^$SiKFZe7?`}gf`7W>Z3te;x7-OtXVJ>TTi^ApWF=98HA
zx=YV7uakeSU{L+C-ho<STD%Ds)~lbiru_(;b@IX4rFUQb`zY*8>d9G;pB|d>T<c52
z)FmCm-yG~=TE+FZktT<}H?1Q&a&BAO7sn07ekos_don9a*TY%oKS$~1`N08QUfF92
z%{-UK4`Em0QD3~07YDnZ{P%wI1+!c0)_(nO>!9G2E4|Hn#6%DK`T32&n?2`mO?*^<
z@v*6K`G{rDF)Po7TI`Fhb*<&XoTt?fH16b_usf)&+uDPEe}<iV(`agj;eedY`$itp
z>RfxETh+4-twmlbV~>uq>vBJTMTu~((cNs(qWRqubi5q?UI(@YMm{j?o*8>;y4RCG
zZlw>dKX%)|$JMSSIgfgMFvg@+^Ddp+?$P=&Z06GgLky?1d%g3)iZ3npZTHnl^vXK$
zV(PUMt6v$MwcI&q#Op0T>RejcYtv6BCU({mwo9BTsXDIl&s{B721WJ=3xEdsrFOk`
z@UI#5Q^$Ms?Y{n>!TqDtpWj$|B+2NgnfIjgjVFdy^w>ZA-13e0oi3->cz*85pI-k=
z7fGtrl8*G*GizVgJngiB(jjv5#ASix<<`y@x}X*8;Iy1tqXTOL8c+MNZ7aQR_a}Pw
zI=19(jQjRACy!lBtC+pA`@onXDd9ciUwx5pW1@3)=waxq*}>i~-qcUUYaE<TyX)7S
zb87m3!`yv_)p%~#tNpOXS<wmhv-a(6JZhQMyvY{(VnUisJl8N_X4vDID^J^Hy&3Ru
z`QG7mmcMqmGR=12nY$qe`}T+)y{&2i!qItX`{UoMolp8#Hc4I8YD&mL{BMvU8nK{S
zpOyXrcl)duzWC&%$Q_3)4q4clyj>R<Gjd-1+-yhbpu|geR-)b<`>m_qF8f83>kk>Z
zHF4L?EibnDWJY_x$?~juI)A%vpF%uN?3uiZ)HJC@-y;XUIyZZgwqfdG^MtH!_j_hv
zOdhx6?Xg*V?;Kj`H6zXLk(F=uoWQikckUdSTr<@BdE1<|YyWIByMF5B27y6G#&;iL
zX7%5_F;_R&8lOFO&7rr)e(82GGWzG&NB2nBK8iq4)Mc?hYkRfB-QN?|cHWSEW#-XK
z_pjc382sk1IrSf$nf)f?bnvRK4_q(oS>EnVW}Wor$1nc!m7DR;UxaVie=ySO)PesU
z8a6An(Y@EdhvfEw1n>XBvBs}Kdqej;sCl$mg4@E4Nw#U-9j>29xZi!my$%+?S4%Le
zX7u@X=PdJ$gEl|dKW=^E6Bnan^@lYcaP>`+(aaZb6MJ{vH#M?XP-?^ByQ=7SPr5G}
zJaE^8n%T?hGS*#~tG`6v|7pfNm*Z9={f0Gte&~P3Gk>h(S3$HtB4Xp3J;vvwUofZs
z_S+JWwY5P)SPlC#X`P~0gfw}y?U#m=mq?Be8#MB(lapTG%)g47E#I`vciiPCQ=V`1
zdOr2PjF+2QIQ{qZj?M7Kwf~)K*6YNVr($dEiCb}fS%*1&w%+f#<(Huup0y2k%{p^p
z`SdwkPyOVaameLT@;}F(UkmpeyR*w9*Gu{r_DqUw67BYO>W>)-fz00IGg`BPeU4Su
zjqAE*^@Y{ZR~n~H%4quL-rFM`qJ01Te)hGTT`u*EK9^QJc4bNQq>XFR_5IwfB1W%T
zb@IsYbE)5D{_NlBWxuWinSryI3A?@?+H1hK`P=Kw&DR_pH7lyij1b>BHE*^ue6xFW
zPNT8=bFS~1J>4s<r~jE{IXAlZVRqz%?RcxBbH3-+bpdat&mOuU+n>2L*|y~dadP;h
zT5~RbKm3_akCd2Y?bD@`wgop|^zWe%eUJHL&aY4Uvj59(0-5P+H+dgiWz%J2*NuO!
zGwy1pzt?!^sfNt2ahvZwh(7ekk{-6bT7)l*yKZwaW?PEy4!1g~)7&qI-|#f8d%@;<
z^3u-YRKJ{{M-x(fr=7p#<J{i))!8qdPh6jWyKDVl8qCg~J?w7sLOrhn+V+a4;vp_{
zaOQ1{-0^a(Pk_!e2j>UFFK^mAuKkMfTbDn))G9f;_OcOooc4d;cgDoc3x*&2p;q*W
zXs^US#y#jUf3S0OjPJ0-IgWjHcbV~LjmJwDyVl#|cHvy&tA&B#!v{2VeUTleXScCy
zEt>~P3nt$iv_IwZnEut%wsyUEUGJ2czUA8rc}5vr^HU|Y>z<I|w-=?ob~m}0aNu*F
z<F5}qcTIZh-+tw<i`)LvYlQLtmYv?0YH2$(XWEwOKa7~UqV3Qq>E0b%4p>KCN<Dpk
zY3QD~zqag3?^yTVj;r2A5q6=vBdS?%-0vLz?5@wg;VCiwQ*?H?A8&m%Y<!CMKE3CE
zbvwgMO>U4mUHewcV;Rj7=FEAPH6UbHbHi5BZ<CYSK3r|{Ha%_P^JiNE8SUHO<gY9v
zQl5-ud>?8rSv1h^s=4Vf!yYxFyq-r?YWK(P!>^zCCEicDny|IefN<Y^{Zp)bqEgq-
z9Ta&zQ0M9wH+tXAnGX{Z)ntqJ!*h4EcD$^b;MRZHt=gFl&K{cK*<isTZKzM=teY1$
ze>L&U`t)G43)@p;VtS9(%D11gW^&EL$q75dQikuiKQ+euVW*7^`@dYDyyfJ&dbeJs
zT$U{FWWB<3Uj5a#c8-4feTQk`gAYFKv;O4u_?vwa_uIEh9B<-kd+m#aU9QjT9UZgu
zNyGnsdFmKtn$qWd_?zBct6q=Ij*qt6eMYPL)x9UC&NZtoviW0g!x;nJ<1Zh4sqcHS
zUIW8ZKRs&lO_#(Y#@~+_FV!E}>*36fkHThrx3Bx7pqy1UyX)6YsC9M9`Ub75cNvhg
z^umcNv8lap_xmGX`_7JBMY^MyFMJpKyQP|ipQLYm+WNQI>J=I%!DlIbfsr>2&1HXD
zqB>uQSjfN7Tr?%1DFIChe2@|_l^R$9)&vu&fxU5@-Y5Yk8OMva39!#7UiXXu*Nx-E
z=>ojOXQmK56a1E*y8)!han&eJyi$OL0y>DM?h>hifdF5AkOKS2GS$fcBNM2K>}ce#
zVu6+MpTj;@04n7|TumYsSLXm*+X&F*U=pj}9_T=j#OepY&c+Ea2eyB&0KdcbU*Ldu
z+yXKMc!ke}+5i6pzoqBy0Jr710o%VxfVBcTh^CRov3f2%;`A(x<8>S6Li{CuQ<H;X
zoL&_Jl!X9gTyp9m4|1;q2--<;0AwG^0cHIcz_qz_eG3#Ov$A^c4rHH{3-Nr&p6|Or
z{??Gawg45?Q^IBYEgJdDbU-72&IV}ezuX3Vl=WW{tE&wda6tR$3Utbac)TQ5{4EFA
z`oDqu0+d(#{|{{c86I&Mr^e|~8^FRSPOl%(o`Z3muAy<94*ESjJ_>z++}!{v2gr3F
zAZ*{CBVAV8@RFp9`kI2d3Ei2HJ^BYc$Th0m|7ql3pl)mAFS7%h`p?>d@>&1UpRWjD
z{4N99HzU}!U;(7~{IdWl`23Fm+4x+rosDhE7|S7%HfPKxIOk%#J7W<Mz{B$EAjWD`
z4<6QGA&kw4uW~Vb7}H|d$O2(Kau8!ZazHM^`ZCtxGFXN8W-P{b;9)+lEn_;-hKI={
zbDmBay#@vIB;%LnqO)?LyBmFgpLoRUc0%8wy&T?L`O2?lrfmQ{p8@=M9`YXqp3(%M
zHcnYt6nI}U*_7d6GSQl`88(7Piy@JWL(f$_9J_5~T!IepaQ8dSc(uF3qjlSVnAWW`
z3xtQyHO9TeB_3}6Cm1*XKV=9w#@P3r&%>_&w+!hU2lH{>Je@4P(AD?h8*)DiaPtTI
zgk_A+I%TC}ppm~!2Q>1R*#J%bm)on4wEi1O#gzdG2jf_=JM7%I0&Kx&!MH~JqA)us
zi7{eKVB<Mhj_SrxyUoF_-z>(y-y9i2zhj)bZR6qGWhdhn0Q<}V_TIzy5)aSzHyGCD
zlieq@d0L?Dr*^^9`yS(o_JT+IRL0Xs1`nUBjBDT#9xg!#8OL6$d9>=Yn6Vo$jYo^2
zqxrUh+6dDqM~3<@9E@Z2m9-DFc9AB>HC(A5#bFfI#Tp7wyR_N^$h{iSiAStB5_AdW
zO??_=yz%#`O*f5d#lt@2JH9=qw!L+m^g?A;SbJWo_u4$+`x(^dApNlG4}Flsa&&N>
z{(*696TS?JP+l|##_0lG|A6dSp9uLCfkvhCr;&dF{YQ=bIUAs<{~uZX$NEGy4u-LM
z`mjI02=E6!)4Do`*Z5qZZKH8B*S6EORo_L7Q}<0g-26^4?j6tbXx%!aeAs`Yv+ZLZ
z)NkPXCFq|xciq7_^j^WE#jtS3YIHXqCX-DHEHim|{);Pz2l%{BfH<@RdIG4`_e`)x
ztqu8`Az!Yp)0JpaMmvAsD!dQhCQ{qz?we9h<XeE<FJwMJ*#Gcq`zTNUz@hhYrsd!$
z9yFJvLOH%skimY1{(xAWy#bB<-%s|W2O9ayY=ox%%jP4?S^cjB8^FRSR$L2fdZ9ex
z#PRYrfNh&FzI|Z=TgJg=_;ALl#|9p*o&Mm*=QLKQdLguvAMIxv$I|?R9PC`Ppr7N|
zb2a)x^Ldy~aN^65#>fh71C0l%pT&XJQ<4Ojgn8M90#sL5dtfTnsRCf^DFgJNFY@L4
z1CkiyEa7<GZot&M^7g*}X~?^X{Q^$kT?3Bu>lU<zVLq-kKPO@uWv?iI#Wd*wF9UpD
z4%zc-GWd+mSJd;Tk^lSm1vr@tuNwK6Ot}inxGaAzNAlN_+W=|@s+h#;)(7CDFN1ym
zX;WQ-k}^5C`(Av>wRy7n_wq8HFI|1~YV%k&Mxb#b;MVClzt-Ryl*E`u+wv%&KR{zb
z4m3Y-T!3)20lEUH&3^zoP#xg=15Q2Hj&<*tlFq@i-R&1;x!#pk+B`b^&G(z!J0=VI
z0$3}FZmHP*E2b%qF--vK4+{GO>g*3{<ga31uP8dFk$>sh-=fH*G=EcG<gYlY@bE~l
z4OnyV^2(fza!VKBRcV&v$B|bC-xkoE3ELkKteNN2A5d%$P7C7JDTduiQEuu=Yvf-N
zc1t7wkE0$JS2xO){A<Amm~w#qpA6Yu65uI5zY*XqK5OO#3oQf4zrz(Cu7Q7Gey|M>
znkz<Mzc8c-;?^mK-P<ruTwQ<?i#3BDGywSi0A#%u5cUUNYviw*{(H8&%Q*Cc-@6<w
z2Tv+Y_V3(-{FgxXp#n5eSNpH{9*z7}lWkGzf=2%8FVmuwds+ESIg>w)2b*(18O8xg
z0{nx|)CO?S^al#<3&5Ae`vK$JWfu?o(C_#-H1Z=-=1T_qzZH-Qps#4RODYXL5Cg*g
zz<$VH*dL(2p{75mLK(REpW<WUC_c_2!tb3nU!i|U{sL(N*q4;N72m6ozxs7sBY*Xm
zX?e0i<xKux!UpJZKsi%?V4VO@@R{a_IcVAfC2fI6hs(U*82OM{j~JxP{?q!PFb3aO
zBGrYz7>^R056GuIXr|B~NQUf%{Q-^qmB^p`1%z>r6fddJ-WQ&Z6^B9g9s+!(D5sK2
zL-rc^E0HhiL!os*Bmct7M_Kum_xt5s{xm<(kOS5WCIRy}KsNsY<U>Sw2^3lvKFRwE
zv8Rqb6R|eXmPZlRhZ7LTKT3d_C1vlGy%&050tn{^9zv#Ee<0(Nl&^|9PqF91eR9Z`
zys-WN=7Dwt!oBV5D3eo3-Pg$f{q37Z{_kIg<=M`ZbNQ410L>Aw@bbzS3yhZ`Gahou
z5`g*yn*M-78Nm0NaqO{<hjmzJq4pnb1MM$!PJl)wW#3hOFZ93)VEY4}o*AByH`f=S
z>obk~-_?K5_P4P20QRnvgZ3gSto_G5iro~(kEu0&TveG1f3K1MyYf}0^BVc9US`V5
zv^?Ga$mCxgHh=}}e_iwgLUWNB1G)SwfTlk{eF2&eK%6xPyZ+M!vE(-F9&`%rK@QSf
zEct81bo*c~*qVdT9)HNs(1S``Ux2RAgC3B*us=X^MVkJgLK)DWdcv4|+H+As{&~`n
ze>cHefX9cFxiD{y{EMgC8u=Hm+&&gt@)5~j3pSt%2kH+1?Kxo0Knj^<3ZUr^pe=Ch
zzJc`#Ain?twFQOQf9yd&5$BK$;~=!bW$82Ypc=rh6`(&b3bGgW2cCZ{b@+YwaO$=>
z&w7BF(s&V_Siw0oqso%Zg|ukoU$k~jBmbh6)BDu1vi$7FDu1CZpwF-e+Iic9%xRE|
zus!%B{RdnEf8)<Bp)*X($F?uD{l{7`#R&52!HVTvR?`~!=WpjU^5<=Urv882^}i-;
zfH3xa0_^`K0m!%flZ!of?R11`)n^e8I>)TA@gHnI#fPooP*&}|GP<A(^@aTb$bJPN
z><?rk{n5`CyZN1AoVw!N969Jbn!@C79FM)@;<2Bs9LmbMtlrniU#8m{`OD^rH1%I*
z13sbpPvb#8_MCjnp#w<*kZ&;;cTU%jGWOiP<2l5N@8Dtib>~mQ{wuai&;?zE{=hEC
zT-YDTLHeWX4`2`8JbR1Nxig<a`>&C|OqVtCmuZ5g{>#or{)Fp4#hUT4=jabihP@ZY
zo<BmGi#w<5N6{8&>c3)3z}tf+3jKk<Aah}V;G^gdYUHnxKb<MV;ZwE$idulWuc`m}
z?Hl@$%>OCMTQLp!E5@EjadGE#MO#3=WaLA}p<MO{+%f;_jC0dDD4qX_6Ys^`?=}vK
z<@T|rp%2Ci{ejzp{y@2nJ$DQEAI_;?#lvz;;rqj3-KSix|G%$ZYUD55Ls}z$e!W0b
z|KSJpzV)iSJdgUX7<)b%KE+(@c?{Zuav6J0XRfyDvzSK_*8f)<#_BHQP+sJxZaSe4
z7F>V8(=**g&=;UNf^rjkuB!hR<h~r3$3flYT3+6#k-tm_%8R_zO{YfwpS=9PfDXuG
z&(mw?#+_3PdS*1*fN~Lg?$m9IO7TC2ak`TY<8(%FP<Op5kMDyXR0M>vW}OxK17$Y$
z+_A?`j8#|&57TJ7Lf8L|;&dY*dz=p=LwS^!x@p$PU)?2IzTT&ifBBM^x~YZyDZWe?
zd;TRCcTQJ%f1pgno_k^c7teP0c-Zy-R@we9dD?^K@p_(3<MoX>sJkpbhW9}iJ_m&T
zfnf^$fe#jY?$!1&WPgW;?SLtaWU?s_<JhKo<gMrn*gRg}smYWk`W!w6d8wNRjr`SJ
zqUGy-8u^zmd6hJ^&<9#O5VQxGu?p=$sl}dp_*`RLI>X;b4x8b_3bpsJ|7CXn&ytp#
zy56smzq(4Ye7;8`|MDp}bx{rZ*8qgE=Mk{~!r1f2NS8|NIh_UN1b;6M)*}Zhv;Pm!
z2HX@tM_uLeslErgP#56)1Cad>3jKi+i#>Plx`QDfKMu<FdozmFTM0-7(Ee2ArY^oU
z@>f?$me2QS<X=AJrY@=>e;N-8W6x<Xnj``4<Fk5V&)NCj-1$Dm^S?|dS{K^>8^wxe
z00RZ6uC8*>yhm07(1pf;us^U(p+8XU*mKWzxB0O?jrnZ{PbyU2iu1ijaXK9gq}tj7
zRM5yxy(OTLzk18FyuD2$|MDg=_0kLZYXidA^C;MVVeI(>q=m8PMUFkD_+I<axjd{#
z_E%>AX}o`x1MI&mY=1QYwA9PJ=52~409`Nug#CeI3jKj1%ilHdcmAwbI`>t%f0y`o
z#Q5<0yW+F4B7K^4$(Ddd{v}(!W&Q0M`ImJGl`MUbKlKNM=bn#Kh&_Lb_JE5!rz;<O
z?&bXed%5lA!Jh9j(S|XV!(_6FV*5{Ld%X}~5qx|@1!z#R+-lygtOTG7Mu4zCa9yE4
zz{}sWeHznpa1;;guzrg2R!o!Z1?PL}4wpz98VK;2GWs<4OSS|w@-Nx)E$eUB$iJ*h
zsATDb{Aurc;koBweC&DaC(+Jbc4cvJ?78}d`FIb8gK3n#qP<s4pN9SaQ2;O4{^|l$
zELrX}Z&$ShpbO>z+aGXmbIaa7bWS=4+d&gEAxlLW7na^-9H%!*025W|(fq!2OF$$4
z(k<_@mYYWYWlbWbOAqAF$DX_ToUdgwVn8Sd%Lu=5u>a(<&EdI1dvG7=BLa+s?bj8c
zTIq75$?bhgz*MTE1z2-1iPiOkYz5<aRu6>je;V#@6QIlc<ga=5!<K+X{vWpdKXmRI
z`G05$eAxUUe-TiH1MI&x(4K=NR(H5@EY9rWp*yX4Y{TXP)c&v>XmVF)2|y330(^e}
z^6v)OC*?vnO5n>!etnwxeRT@p1HVfn{|_vH51hS5{vTKXn(Q?t@ClUwqx|nJTO1Yn
zA1X=T;7ZS3_JoRQ+1u$IvK&=R=l)zIstN*BP4m<e1u+bxYMLJ7|3Co$nLenR1_3wn
zyg=1-)ja$Y0mAagFP%3-5S)hqWoZzcHv`qvc{5a10w6FC0mVq?App;-oE8#5&#RIa
z;rGm8fy|4O&QW+?Sz4GO<)?C5kOBL=s%b%n?DHz8b2F4ZuWC9sL)r5xr}+%!&#Rhd
zq;i?bpI15kQsH@JX?X^upRzw00Yy*CGRXbCs%aSkxzDSdW;2Z8$Y&T;(`<%<=T%N4
zLjn0L0V<`@HVCt)wnDXZhQjZarE|+F_mc#A;{lNPwL}K^k3SEQsLmHMuxZV|_bLHX
zsX+t4S`w?@nf23%7cZpqmyF_d{{YTlE$5zm%_j#};aX3I{CisSNtMTSES39u43tO>
z;OA-3=)H(j<HMju3#cHG>Q$6T#Z@q8^*QLSX%ee%2)Ih(^!kGK3E+J>uoJxh4@kyu
zC}xRxRpg(1Vd#6>za$O(CjzV3cf{$1p*$@CW8-+;>cAKHzA8}J0CW)4$XbzJ1>UOx
zkcnO^@E;2P7ZTk7t>+2ls?N`u;5`Z00N%+Ds1ta{yr4m;tpj6@vJ#*ziPh7EJRETK
zm&A(4fd4h%`!=AePm?O;^DlTm4(tT)aljzMSUq#YSh0a|oK8)k#OFuByFMTVmV;N4
z_dkFtJgD=x*~pvp?I3uEKIpg>NqJTHk-VOxe(TjhKBhn$@csj?v@U%YcnS!3(qoKc
z^%+Tw5o0ph9I*^75XWZEm_<1<W)qxczK)Szh;wU`C)Uk8QsxI~Hr|yXm`1l`pOwTI
zv+tsJvdEK{nBpOx0e>3D>COatLpPek-qZ!%Re<;Qhr~N70S4f|HS!^OlTU_#Uxm-o
zX6*i~77_mJUj25Vvlxe-s}SSy3wv&-M~A-|uXcBs)@`2haR3w(;_mY|<KE#C<L3V-
zaGbI4JD;%&ox|?^V=<<qY|mGeMWK1eiEn{_*az`Qq8X^Ef~fQS)JQ7U0_tKf30?3W
zjJg&s=lw|@8c5dC=8VZCE6B}_AzH1%dowMDL?VuLHsjbMk#P>*#kh7l!tzEj4_@B)
z!GC%l{yp%$NBirHyYG3%y<;-t*liP@T_=l;_-ZU;HL3?&7G_ZnY<!GytU-SI@DTi;
z0e!PUb0^p)6ST$Efl7IpD?$RiR|YzP{{eU()iKhucgmmioc3k19x;%Wvn$T%6UO+c
z<ul5PbjIE9EMwPy8uThmt`A1<&?Bdj=uJZ#97TN*K&5p<v?rCDQ+<yW#{u*3uK$2M
zzDZOsN#2%U2Qn>&j%Msb<}uEl_d$La)X#tG4Cu@Q#-qbk#<BZ)rd8jC4DE$xIl3!s
ziW94Qa=y9pAbKAHtDplT02`D+EueA{L@%N?wOOpb9-gOi%(p!w8%45k>bA86_|1(G
z%U6G}PYmgUYv6Be{jeO}h2vZCN-|3a|6}EPP^*aiSA+cP;@Ne;cHk9kZ#K!CVv?;#
z4q)?j>bi|_4LJS*_(y&4eh52pp0yFQFFM%=bF?dLdy%^@_AAhy1tg*j#se0xiSU<K
z-Y#HmrXsD)Vr{-1o==xZn?9p@ZWZ2_p?&#0ebP#wZ$a#!P%qehVsS3C?LaAOi)fE<
z&@2R%0d!d}MBXka?I(fv3V;syH^Z|_A@|KKhfH{BAM$;+XZu?+8(siCLfT5>v#0l6
zw%u^*wwbXVG>NrIk{Agi$*Tuc7cicpzN(%vwT(s81M=6fwi`6DvwO#sbl4y|E2zxK
zUPy~qySuDz+6|a0(*u+N_!WX|VjB4Om+L_lW%dBPQ$1*C-*1|wdxyX0dA7f~0eMm!
zEA4Snrpm#q?LVwtbndc~u^TXr)dLgSFF#igs9hkN9%mG%hqzh2BDah1<7LkYKrByR
z@J;6imf3TH=*$4JQ7s2Y%k>~{KLO+F-SYVbu`>B{_rZT9pdR?QMtt)W@c$D)XCstR
zJ-Ej>_FRL$Nd)=`F2XuMpVNQ~D1*+1abkO*D#xd?E6RY*5knbdaOXtOS)ygC9&q%y
z1|DG?a9*@U0p~=6|4HB-=R=8$yic55555HdHo$n~l?YH7lsP@{Y=498BiIg#VQ4&N
zGRa&~4-P>OwgL5&$zAb2%7NV{9%V2VypuinVCRG&??Uy@q4zR&ESk@LGBkdtx}c-T
zpRzRguS{hi*MkwDf$Ra<#4@J`ZvH3PJr*p+_$tbu;_0(6pV3Al)inoHo-aTd)CR~V
za_0o(+2cW(Y)a!k)dOk|tO^(>fd6jb-2+g0oDANnU8oK{Ae$HperPW&>LZodzQ`(<
z8I70FH?T#&$ZAw~%uAW&(F54Qg}^jGX}`FjdVw-v_lbrc%m#gA4@&Kvh@zGU%_-Ro
z8-X*V^6n!FzBd81k5sYek>z^uInL0sfF1;cri}odtz2gGz%Aee;}ZNU#)+--$R9S~
z4sZh~_Iw$q7bu4YfHnB$_6aXD_Rs_S%TXCvjBBUJKh1GazgQjo)A^cJpa-UOo*K$w
zD?sO|eRw^<oGYEFWgQlZc??_3A2#92;SG3y1N%qqfCDGX_qn1B*nMKb_gaAL!H4Hx
z-cO*pGn&f~jEmTE0Ph_EkN4r5dlvjx04n0VbtCzi>pM{f8365-Txfr#r0?7Ho59!&
zANo!^fc2Acz(|e<bzD&fVu0+yHh}b?4Ddfo)($ANgW!DvFiIVKE4~9|!0wX>{`bqv
zq1gK*<N5c}A6i?Wwvg7CQ15x5{i8MKm5Q{hBMts(&rl1{z8$y?Q2(IFdqd*4@5Qt5
zc}L8X*<%hpAO6>Y|5fVXx1e{R44MH{AGm!o=`0ns@m7>~xdbLLG<R)^wIreZv2Jz*
zNGgbSb$k!r^#N1RxdXTa(0HL#%fKb@F!<k&HQCbVpDRO@0lQBccuxk%E|ywdpfy$(
z%$L*JQEAIxz(47MG597uI0=wFC>5Jn7WfyGg9*xk>;bn=UWwa+GR8mYL38j=?Lrbj
z<AoCKBe-_@gI$v+p9}^4-w*q@hm%cdUQq_@K1tyHAwc$^#PopH2OKdksyH83lI_2;
zvIPIsKWGBJsh_wDpz%V9j2WC^`yF~OmyLn)_J4jv87xsoYf0Wm8CU`K;GJ}U#tUlK
zgM#{hhOxSffO#d!pR#v@cN#A=1>ZD}M!G=uK&^Vvs`pZ+CDw|`XGd87!TUGBWMwp#
z^nLKJ1z2PLz!SWa9?<-O+VsG7U>su=76Kody!-1K#_0?LLQ9%IW$%~suLJ(6f3Osw
zHCO5%yw_Y3ohMK8pf*Fp8S}C2;kRX&SN?Ij0nOud+bE;2wC<xEXl|MGzz@8W9?*PZ
zvGss_h-hupa&$M=e@fAxuvxr;1)Y^%TKp-?2fWi9N<;8(N_$F!cUo&J_S(BghbycP
z8LbDB&mR0iIQhSX9eB|^USALVm$@?oQ3h2>4=}IX1N@U76w3$0&Hpd<d?oY9HXPsF
zRc-U1%4Axc`{14CRO>+x%;jtEYfuI%uf5ZHIO`(>A1<NY$LD<j`FSA{r0o8o464cX
zV4z$NXuYw>_JHg@oux@WAwvFfUgli+nVH32|0#`91Mg%HY3<z-7!Tf80ZP~2$v=#I
zM`?d?+FM?6-q$ErHwf*%6QJ_?Uup2Im<P&$&gdn3FiNfmR0aj=fxF)sw%!-y2Vof7
z$U?r)N~y<@DDqa6v|JBp?Va?1*4{}Es4nE&KX5>QkIs%~*E|IMebj+J(ceFaK93Ig
zM=VX5GyR1Y2g-rYUZA!2Xz)($LcTs2wgaZHu?C9gDS-E%0b2L0Q)otI^rl=7XziWW
zTxso{+68JGSv_zGI>fZ<^8;fU(TVkoWqsyl@+V(N>^Z56xFsDApiJ96WyOzjs3X^d
zY2cmofc3#3e^5GK!EC&H9(yn29qXO3I^OcL6Uv3%E2tdgdO&OMX3&FR#9Jg{Z}Df=
z;eB73OtM5@ubCqMiRk-%i*nEd|A>=mST5{dLHu*yqa5m!9ys(`o<MtS!{3McwTiqW
zt@k}Z@pE;#XFrB3cxTt%t;4%XtRj5dOJWQWC&<PxP@EW*1MMHb7ib0E5ih5wvcFS#
zC@1(UHzJ>H@VNpYzXpl}ApVa7<nL!%9{4COjo_Vp_bZx6b(#Y%h~Y^9ju^%2_%(~I
z*BDUh_g&n)%hGcw16@`RV#PDTe-ij_EAQu(YkObPWz6pwfZa^AC?Q3TwB3RH%5HLk
z8{G8<Zi__v40n}M5)W`!Hi<Xoy^3OF_xY>-4cQO)>q~iBeyz&phZl2KJ_Ff{v>4e7
za<8%nwPf2xfB@Np+!gz;$R5nS%3dJfUjp}KFW|Oy$-T-Rl$QwY<H9~DxUvr-&0X1?
zk>;*!Ss=|{4~s<nelYZXhP>#xD>fNnMZsP1Ae-i|hvgeoaMuiZn!DyeK=j958E!)f
z?s_<ey^ntq&|(dQ0$L&i{KsGO_uD4|@n@BQ>S%KsV~wd9V2=F&TEZ4P04{)s9PaY8
zBd#scH<#cU#Nz4IL(Ix&zz6B8fcDye4d@sO+GhhlgMMmH$!{<Np!S78`x;Q2L$UCu
zX?%fa;8&y9Ssrs!Ds3+Es)M}=5a%SOJ;p%;_7z3U13>#L&>jp#BgKVL+bG<N;jKJP
z-_!la0QpB=1CkM6OZz!Y1V3Gy%Jv>mYg+<e<j(+e*z3-~C}0uty$a+Te~a&_%!`hA
z-M{gB#LJ6UKsJa061&6asTm;C^Y{D@+8Y2;y#FXb<y>^yRQoN-33{iy5ws5iid`?D
zE7-%sK#ccI2S}%BJ~Xdh#5Q5qORU2BU`#cE^`CO;zL9ao7?b8#Xl|LEUxtsV3u3)p
z5DV<oeFI~Q7+EXKx6>F*w%)?eIa9fi-zAMjA3(1*;o1pwsC0%QVzlc36r&go9079c
zB4WfT4v=C$tVayS+-EFev{xe*U?<|ykFv2LY&?3~N4axH@DcTFcZ>1xNoC{EU4jlG
zhGqq0-)}Y>Peo&CcHLasR47;4hk$f+G3rHs*ok_8(t3e7V~Vl2lE;`6-BjkX_p*B^
zNKkIBh^_vPA)g(LYm1LIkJ;F`Rw3UbezzZdz_IoRnSx#+AO9f#-$1)PpbZqNQ=q>V
zem@m>1du-R@3KL8Q@PQaix=`%jQ1}dFNgz|^C63Gi(=<>1o;vTREGBu>l+ICn-o@^
zLH}p?tv`VAp!fx1`E$r8$aavFjq7&vKUMtlE=*ReAM!)gk^PWu0y{THdu1TTn97fM
zpmFQZkj-e+huTy>3*rO)+lGkIb;0jb;m`IAzRhphJtnZuSG+P-O~*X2XN7a{POK-k
z!+NrXa8Cw`wLFMDVp;$cb6p`n9zZ|siC!6KiTSEc?!K4aYmKj1JY!wdqvHj{3XVd(
zXu<0+=%@DY8scSf&YD4ia|NKC##>*y`Tf<|qus4Jpn>M2OU0K<#xL!Ua36Bm!^XXm
z93*VrX500D(Z*41OS}BaU-%v74;o?q$Q$oG4Uq3esrn^)w!6*lX<$CqC(qhEXg>su
zL!4r5AYVP=_y7-VoGxf5KjUJp6XLmI*Bxp*DCW{U(o?8M^!cbf*79?X*8HxZpVoY9
zLJt0z*PaDhXkNe6<Ul?Gw9f|3o0^aH7V<#*mhA_M6f+GT8iNN~w?6>ToNOu9hfH?g
z8Jpq5h4jn%8L?tR#5fcx15PgBfn8?;?SBD<t})?$v2`ZDXFYwcBYt_Ukbd?v`j&y9
zzZpkkVOO~>eNJ^6x<qklWLrze&lY+_eJrc+K8khu2h?T1!su4K2R_Iy1%dWW0Qmxy
ziY~dMFN=9(b{{I}JtvFbLH}Sy8kMEN1I3B90PR<SeAlV)y;^n1%ljT1@1+p`PW{X{
zW%MfEm+MkxtTDKN&hG${Lka6r2KtRp*nNHkvD?%?N<<xSQlwE?8a#-AhR~&8(7p^H
z+gjqfL@}4tj~D3B4y-+ORYq??_rXJb#8f$e_WJ<&g{f6<6yHbdrxp<b0{V3iVZ1r2
zAo_~(y<DFxk=GAEiTHVPd^lhaGK%*Sl>d3u;gv<9v!LIAe)3VI{V+NsAF2;jr%Oba
zC|0AzS6>V1zlu4S?FG@M%J<-b{L83LrvfF?K2WR$?L{Ief9zAIzBn83!1@V-elF%%
zt@Xh*;22`Z<4Tf#>hslxE_IUk`P4doC~5jReFG2FPPc^|D4vD-d}`^p(mrRjhlfCa
z(x5+kxqQ`m1rKT;KR9>$ncX8#K>vH&pMrP>{iI7ZAO~OQ(hSIe#z5~S2ikK_*q4Uw
zJPlv5`32FSj_>8V)Dg7r1>S4?(5la3*58{ef6#vn^vA1%&cfb7asaGB|9g!eWMi>B
zG5dQ;!%rQwlP-OR_Mr`QX(sqkt$m=mRP;eDzYfM2Aa~CVl>drm@%p8<1`i&{E_DL^
z6jMPw6seu|YD;?zUXaZ(=Faz$FU5E8lP*=CG4Md+2P@D{<A)-RMQJXA=Hbnv^29mP
zx=(CjdRr3rKs)J@O5+DN?4?S3$(jiEv4fxP0>HN<Xe`P*!9xS+QV?XY1R&d*uP)KL
zf>XCG>{@|*UYBjZFxTH3`&FA1C9jhD4S0YrdAc2Fr<hCP;hk}uYo}xEng?eyaiz7I
z*EoyP5Iz(i)L#(vQ{S8Ve72x{DL`Y<Jbk{F*ne1I%td?ZuLf$B1wU6g4|SnSfv~M}
zK|kB)^TZyGw5KfXt1IwRr}cmXMsd2`fe%{tiaH5C8lZh}1^t)3+CIu~?|AMl&7&*$
z8q=QHOW<cH1`1ruP<(f3rNIO3Wo89m*^MoSjL&DCS#Ji`VwBFGmlnN>`G9t^t=hJO
z$NO824yH9+TDPDzeOkvo3A6$IW#;S%Mf$lk)=(N^eiO8c{|AuHTmt3-jk({H^(%Pz
z9I%Gp!Vkb)xxZPN)A@qR5wz1<R&~&B1T+Wzm4JNLf#LOpbKBszB)^h#lRMJn^i)f5
zJ&bfkq@}ouaAp5u6t4R6`?Yefhv_Fs!v_j4kiA!UWu2)&8T(4%^)P-<=^KJ8K9W-v
z{lN!Hc4c3HG<W6w!4Avr%a4X)y|M63u0I%YNNL%FaG8>)`RifXeNaGjkbju$`ci()
zQMkS(zR3SdD!(2E-<0OA87Lo0zZ6`_Ps;%C0C+zwZPom=utr`5=e0C}eelAVx(|Gs
zMxwrvF9rFqz|RN!CC7<F&~COyykrxsgDUlF06B&J(R#K-st-RIv8OzrpKv9AnKa-j
z!1*ha4Wo5r@>x0t(C;PyzJ~B4!}`6-^$Paob07%sm=92%^nT&og0jy<-zi`Pd~dp8
z9<)g7Vc=N{>)_;LGaEPu$nu4s2l-;q9`3Y{z8&UTX@7f%K1*@M84&QFY4KHreE(AN
z*}%C6GJ479<O2L=zQxrP?=R4&6+R{v07v|e{K4h<8nEYaw8Vbd)K6voVX)poYp~qe
z6tosdduw}ixD5Z3->{~(o<aL4+czbb4l0jL@V9V)F6Fzwe$!ZeZT#i{z{-_;a)?*w
z;Jxs(xt6Ejrr3|mlg4<Gd>iO24Js4XhecKvFX;WyW5@hxz+V33Q-*!N^|NR##Ia{0
z_6xsQ^n4ZimQ+6Ee?tB(Y#g<0t)1j?80BC|`Yo&gu%{yUVb?K>Y88RLT^7Y)=iy87
z{Y6aEn!gLmkd150rC~Sp%mg&#Stkb#S}lisUDw0=_SeX}NaM$%&`AC`<RiuIttzA8
zC2YkU;GI2%(MQojUy=H}qt!_Rtr0o&ULiXdM5Yf<u-4uKct;;giU#Vpw-_>37H1`+
z;V<aJJ7qw6QBpLx`=4g_^+Ud7BeJnZ2EP^EJbJ+CWr@&$dO_nZ#GSA<3OcX^D9|p+
zX{ZBzP@7KDoB_qS%FEy(u7&RHEu$fwXoygYPU5T<Is-?(x4>JH0axY)T|oos1kL}C
zQ3nmQ)*_4VCq2-KC@5dW??HpMTo&()r;B0>xZgPR`jPd!BpE>dYZUV-EG?rUb1dHV
z6nJM|g3F_@t8?dHbH~o{;@=9(FTZ;-S!6~ckH^KK!L`%xxqC|%BY&a^G$779a{}_G
z{g6~D2UqNG$M10*FFu$bk45=TPD2#(r*-Bc)8N!&1M-*ctpfS~Sd_d9`VDA6-OQYb
z{O=W&2KzpXcsq=F{+R{6yQtsGX_$ok?<l1K^`Cr=xfpvx^bw1iPhr0U4QMwri3Zv`
zvOrmo-?Gf#gZ1lujXh2D3VW|A_vAE8E{q1J?we$Opt3gTJZ!*wj~9eA3TU_mI`XV*
zQQy^SR8P+Lk-=Q+5Fk%qO!%(iepaA?mj(H23HDUFiMi4SB{kP5pn=r~H^0+toVR>W
z<80KsiI^)awCyV{|J-wO8YW@R@3zgbk#FhjC3(C1ha^^~X=%h26AgC#r%Z&sqZk$P
z4Z>Ja592#Mwdx(mbADI!t?Ni+V`k{PZY0V*-+o_y&#LP?q5<<Yow1iiJ;nK&x0sE|
z5V2u#G{fPJJTZ$vGb<v}kBU;@Fs2Z005nBHvl}!;LbDqT;V^Imz)gy1qxln>`e5gN
z@J2dBoTfNvo&+-#h)c@>-ePWup{T)WG*5wP33jf6pQk{tu%L5?F*ktoCdDlv%LstR
z{0D(wfdqiY?u{sR0<X;ThcS-`_bdR!lIT69eeT)w2uJl|$JcBOinJ+>)Bc8>M&mbm
z_Pc?t@WQ=&v@amexnj?<W6vt2^XF(Rj5QrvPow?AVc+RJi5PS8<A01Xn`5o>lCrTS
z=E>Q!0->{{uj?^hW9guAqI-vn#;|J_0VQL^40aqVkv4mSx;`Fb9kx7BA4KTG74049
zuiK3Hit218Xy^Ug<?k>84VRSBLH%ucUvr>P7)5_a277KBXxJ=#p8E`53_-(%!swvA
zP4N6>?is}^-a)*aFX$aDhm51=(-fZ*rtuC5o=?v29kic1WN<?G`}{uR9VU4GobVmA
zAH6B|;l%UH@_R<{JNY}#a_?{s-p%zj0u_H-P#W)`{fEy|Y>s6_An|^od2Az<)|H43
z_$8dhd=$;S1i;o8lwE<}L+2!@=Oc~cbl5hU<~n5-30HaTmg3`K;06HGlh-auVS^3>
JH-Jo$=>PH{+42AY

literal 0
HcmV?d00001

diff --git a/static/main.css b/static/main.css
new file mode 100644
index 0000000..c0c10b1
--- /dev/null
+++ b/static/main.css
@@ -0,0 +1,3 @@
+body {
+  font-family: "Atkinson Hyperlegible", sans-serif;
+}
diff --git a/static/robots.txt b/static/robots.txt
new file mode 100644
index 0000000..2b10c71
--- /dev/null
+++ b/static/robots.txt
@@ -0,0 +1 @@
+# Hi cutie
\ No newline at end of file
diff --git a/templates/index.html b/templates/index.html
index e69de29..774fc13 100644
--- a/templates/index.html
+++ b/templates/index.html
@@ -0,0 +1,6 @@
+<h1>roleypoly!</h1>
+<div>put a role here</div>
+<div>put a role here</div>
+<div>put a role here</div>
+<div>put a role here</div>
+<div>put a role here</div>
diff --git a/templates/layouts/main.html b/templates/layouts/main.html
index 450456d..679194f 100644
--- a/templates/layouts/main.html
+++ b/templates/layouts/main.html
@@ -1,7 +1,14 @@
 <!DOCTYPE html>
 <html>
   <head>
+    <meta charset="utf-8" />
     <title>{{ .HeadTitle }}</title>
+    <link rel="preconnect" href="https://fonts.bunny.net" />
+    <link
+      href="https://fonts.bunny.net/css?family=atkinson-hyperlegible:400,400i"
+      rel="stylesheet"
+    />
+    <link rel="stylesheet" href="/static/main.css" />
   </head>
   <body>
     {{embed}}
diff --git a/testing/testing.go b/testing/testing.go
index 607ce0e..8c68c4f 100644
--- a/testing/testing.go
+++ b/testing/testing.go
@@ -5,6 +5,7 @@ import (
 
 	"github.com/gofiber/fiber/v3"
 
+	"git.sapphic.engineer/roleypoly/v4/authmiddleware"
 	"git.sapphic.engineer/roleypoly/v4/discord"
 	"git.sapphic.engineer/roleypoly/v4/types"
 )
@@ -15,8 +16,14 @@ type TestingController struct {
 
 func (t *TestingController) Routes(r fiber.Router) {
 	r.Get("/picker/:version?", t.Picker)
+	r.Get("/index", t.Index)
 	r.Get("/m/:server/:user", t.GetMember)
 	r.Get("/g/:server", t.GetGuild)
+	r.Get("/auth", t.AuthState, authmiddleware.New(t.Guilds.Client(), []string{}, []string{}))
+}
+
+func (t *TestingController) Index(c fiber.Ctx) error {
+	return c.Render("index", fiber.Map{})
 }
 
 func (t *TestingController) Picker(c fiber.Ctx) error {
@@ -54,3 +61,27 @@ func (t *TestingController) GetGuild(c fiber.Ctx) error {
 
 	return c.JSON(g.DiscordGuild)
 }
+
+func (t *TestingController) AuthState(c fiber.Ctx) error {
+	s := authmiddleware.SessionFrom(c)
+
+	permList := []string{}
+
+	if s.Permissions >= authmiddleware.PermAnonymous {
+		permList = append(permList, "anonymous")
+	}
+
+	if s.Permissions >= authmiddleware.PermUser {
+		permList = append(permList, "user")
+	}
+
+	if s.Permissions >= authmiddleware.PermSupport {
+		permList = append(permList, "support")
+	}
+
+	if s.Permissions >= authmiddleware.PermSuperuser {
+		permList = append(permList, "superuser")
+	}
+
+	return c.JSON(permList)
+}