oracle-ads 2.13.9rc0__py3-none-any.whl → 2.13.10__py3-none-any.whl

ads/opctl/operator/lowcode/feature_store_marketplace/operator_utils.py

@@ -0,0 +1,386 @@
+#!/usr/bin/env python
+
+# Copyright (c) 2024, 2025 Oracle and/or its affiliates.
+# Licensed under the Universal Permissive License v 1.0 as shown at https://oss.oracle.com/licenses/upl/
+
+import ast
+import base64
+from typing import TYPE_CHECKING, Dict, List, Optional
+
+import oci
+import requests
+
+try:
+    from kubernetes.client import (
+        V1LoadBalancerIngress,
+        V1LoadBalancerStatus,
+        V1Service,
+        V1ServiceStatus,
+    )
+except ImportError:
+    if TYPE_CHECKING:
+        from kubernetes.client import (
+            V1LoadBalancerIngress,
+            V1LoadBalancerStatus,
+            V1Service,
+            V1ServiceStatus,
+        )
+
+import click
+from oci.resource_manager.models import AssociatedResourceSummary, StackSummary
+
+from ads import logger
+from ads.common import auth as authutil
+from ads.common.oci_client import OCIClientFactory
+from ads.opctl import logger
+from ads.opctl.backend.marketplace.marketplace_utils import (
+    Color,
+    print_heading,
+    print_ticker,
+)
+from ads.opctl.operator.lowcode.feature_store_marketplace.const import (
+    APIGW_STACK_NAME,
+    LISTING_ID,
+    NLB_RULES_ADDRESS,
+    NODES_RULES_ADDRESS,
+    STACK_URL,
+)
+from ads.opctl.operator.lowcode.feature_store_marketplace.models.apigw_config import (
+    APIGatewayConfig,
+)
+from ads.opctl.operator.lowcode.feature_store_marketplace.models.db_config import (
+    DBConfig,
+)
+from ads.opctl.operator.lowcode.feature_store_marketplace.models.mysql_config import (
+    MySqlConfig,
+)
+
+
+def get_db_details() -> DBConfig:
+    jdbc_url = "jdbc:mysql://{}/{}?createDatabaseIfNotExist=true"
+    mysql_db_config = MySqlConfig()
+    print_heading(
+        "MySQL database configuration",
+        colors=[Color.BOLD, Color.BLUE],
+        prefix_newline_count=2,
+    )
+    mysql_db_config.username = click.prompt("Username", default="admin")
+
+    mysql_db_config.auth_type = MySqlConfig.MySQLAuthType(
+        click.prompt(
+            "Is password provided as plain-text or via a Vault secret?\n"
+            "(https://docs.oracle.com/en-us/iaas/Content/KeyManagement/Concepts/keyoverview.htm)",
+            type=click.Choice(MySqlConfig.MySQLAuthType.values()),
+            default=MySqlConfig.MySQLAuthType.BASIC,
+        )
+    )
+    if mysql_db_config.auth_type == MySqlConfig.MySQLAuthType.BASIC:
+        basic_auth_config = MySqlConfig.BasicConfig()
+        basic_auth_config.password = click.prompt("Password", hide_input=True)
+        mysql_db_config.basic_config = basic_auth_config
+
+    elif mysql_db_config.auth_type == MySqlConfig.MySQLAuthType.VAULT:
+        vault_auth_config = MySqlConfig.VaultConfig()
+        vault_auth_config.vault_ocid = click.prompt("Vault OCID")
+        vault_auth_config.secret_name = click.prompt(
+            "Name of the secret having password"
+        )
+        mysql_db_config.vault_config = vault_auth_config
+
+    mysql_jdbc_ip = click.prompt(
+        "IP address using which the database can be access inside the Kubernetes cluster"
+        " (example: 10.0.0.1:3306)"
+    )
+    db_name = click.prompt(
+        "Database name (will be auto created if it doesn't already exist)",
+        default="FeatureStore",
+    )
+    mysql_db_config.url = jdbc_url.format(mysql_jdbc_ip, db_name)
+    logger.debug(f"MySQL jdbc url generated is: {mysql_db_config.url}")
+    db_config = DBConfig()
+    db_config.mysql_config = mysql_db_config
+    return db_config
+
+
+def get_latest_listing_version(compartment_id: str) -> str:
+    try:
+        marketplace_client = OCIClientFactory(
+            **authutil.default_signer()
+        ).create_client(oci.marketplace.MarketplaceClient)
+        listing: oci.marketplace.models.Listing = marketplace_client.get_listing(
+            LISTING_ID, compartment_id=compartment_id
+        ).data
+        return listing.default_package_version
+    except Exception as e:
+        logger.error(f"Couldn't get marketplace listing.\n{e}")
+        raise e
+
+
+def get_region() -> Optional[str]:
+    try:
+        return authutil.default_signer()["config"]["region"]
+    except Exception as e:
+        logger.debug(f"Unable to get region with error: {e}")
+        return None
+
+
+def _create_new_stack(apigw_config: APIGatewayConfig):
+    resource_manager_client: oci.resource_manager.ResourceManagerClient = (
+        OCIClientFactory(**authutil.default_signer()).create_client(
+            oci.resource_manager.ResourceManagerClient
+        )
+    )
+    print("Creating new api gateway stack...")
+    response = requests.get(STACK_URL)
+    source_details = oci.resource_manager.models.CreateZipUploadConfigSourceDetails()
+    source_details.zip_file_base64_encoded = base64.b64encode(response.content).decode()
+    stack_details = oci.resource_manager.models.CreateStackDetails()
+    stack_details.compartment_id = apigw_config.root_compartment_id
+    stack_details.display_name = APIGW_STACK_NAME
+    stack_details.config_source = source_details
+    stack_details.variables = {
+        "nlb_id": "",
+        "tenancy_ocid": apigw_config.root_compartment_id,
+        "function_img_ocir_url": "",
+        "authorized_user_groups": apigw_config.authorized_user_groups,
+        "region": apigw_config.region,
+    }
+    stack: oci.resource_manager.models.Stack = resource_manager_client.create_stack(
+        stack_details
+    ).data
+    print(f"Created stack {stack.display_name} with id {stack.id}")
+    return stack.id
+
+
+def _print_stack_detail(stack: StackSummary):
+    print(f"Detected stack :'{stack.display_name}' created on: '{stack.time_created}'")
+
+
+def detect_or_create_stack(apigw_config: APIGatewayConfig):
+    resource_manager_client: oci.resource_manager.ResourceManagerClient = (
+        OCIClientFactory(**authutil.default_signer()).create_client(
+            oci.resource_manager.ResourceManagerClient
+        )
+    )
+    stacks: List[StackSummary] = resource_manager_client.list_stacks(
+        compartment_id=apigw_config.root_compartment_id,
+        display_name=APIGW_STACK_NAME,
+        lifecycle_state="ACTIVE",
+        sort_by="TIMECREATED",
+        sort_order="DESC",
+    ).data
+
+    if len(stacks) >= 1:
+        print("Auto-detected feature store stack(s) in tenancy:")
+        for stack in stacks:
+            _print_stack_detail(stack)
+    choices = {"1": "new", "2": "existing"}
+    stack_provision_method = click.prompt(
+        "Select stack provisioning method:\n1.Create new stack\n2.Existing stack\n",
+        type=click.Choice(list(choices.keys())),
+        show_choices=False,
+    )
+    if choices[stack_provision_method] == "new":
+        return _create_new_stack(apigw_config)
+    else:
+        return click.prompt(
+            "Enter the resource manager stack OCID of the stack to use",
+            show_choices=False,
+        )
+
+
+def get_admin_group(tenant_id: str) -> Optional[str]:
+    identity_client = OCIClientFactory(**authutil.default_signer()).create_client(
+        oci.identity.IdentityClient
+    )
+    groups: List[oci.identity.models.Group] = identity_client.list_groups(
+        compartment_id=tenant_id,
+        name="Administrators",
+        sort_order="ASC",
+        sort_by="TIMECREATED",
+    ).data
+    if len(groups) > 0:
+        return groups[0].id
+    else:
+        return None
+
+
+def get_api_gw_details(compartment_id: str) -> APIGatewayConfig:
+    apigw_config = APIGatewayConfig()
+    apigw_config.enabled = click.confirm(
+        "Do you want to setup API gateway for feature store to enable secure access over the internet with authN/Z?",
+        default=True,
+    )
+    if not apigw_config.enabled:
+        return apigw_config
+    if "tenancy" in compartment_id:
+        apigw_config.root_compartment_id = compartment_id
+    else:
+        apigw_config.root_compartment_id = click.prompt(
+            "Please enter the tenancy id where the stack will be deployed", type=str
+        )
+    apigw_config.region = get_region()
+    if apigw_config.region is None:
+        apigw_config.region = click.prompt(
+            "Please enter the region where the stack is being deployed", type=str
+        )
+
+    apigw_config.authorized_user_groups = click.prompt(
+        "Please enter the user group ids authorized to access feature store (separate each ocid by a comma)",
+        type=str,
+        default=get_admin_group(apigw_config.root_compartment_id),
+    )
+    apigw_config.stack_id = detect_or_create_stack(apigw_config)
+    return apigw_config
+
+
+def get_nlb_id_from_service(service: "V1Service", apigw_config: APIGatewayConfig):
+    status: V1ServiceStatus = service.status
+    lb_status: V1LoadBalancerStatus = status.load_balancer
+    lb_ingress: V1LoadBalancerIngress = lb_status.ingress[0]
+    resource_client = OCIClientFactory(**authutil.default_signer()).create_client(
+        oci.resource_search.ResourceSearchClient
+    )
+    search_details = oci.resource_search.models.FreeTextSearchDetails()
+    search_details.matching_context_type = "NONE"
+    search_details.text = lb_ingress.ip
+    resources: List[oci.resource_search.models.ResourceSummary] = (
+        resource_client.search_resources(
+            search_details, tenant_id=apigw_config.root_compartment_id
+        ).data.items
+    )
+    private_ips = list(filter(lambda obj: obj.resource_type == "PrivateIp", resources))
+    if len(private_ips) != 1:
+        return click.prompt(
+            f"Please enter OCID of load balancer associated with ip: {lb_ingress.ip}"
+        )
+    else:
+        nlb_private_ip = private_ips[0]
+        nlb_client = OCIClientFactory(**authutil.default_signer()).create_client(
+            oci.network_load_balancer.NetworkLoadBalancerClient
+        )
+        nlbs: List[oci.network_load_balancer.models.NetworkLoadBalancerSummary] = (
+            nlb_client.list_network_load_balancers(
+                compartment_id=nlb_private_ip.compartment_id,
+                display_name=nlb_private_ip.display_name,
+            ).data.items
+        )
+        if len(nlbs) != 1:
+            return click.prompt(
+                f"Please enter OCID of load balancer associated with ip: {lb_ingress.ip}"
+            )
+        else:
+            return nlbs[0].id
+
+
+def update_resource_manager_stack(
+    apigw_config: APIGatewayConfig, nlb_id: str, authoriser_image: str
+):
+    print("Updating resource manager stack")
+    resource_manager_client: oci.resource_manager.ResourceManagerClient = (
+        OCIClientFactory(**authutil.default_signer()).create_client(
+            oci.resource_manager.ResourceManagerClient
+        )
+    )
+    update_stack_details = oci.resource_manager.models.UpdateStackDetails()
+    groups = ",".join(apigw_config.authorized_user_groups.split(","))
+    update_stack_details.variables = {
+        "nlb_id": nlb_id,
+        "tenancy_ocid": apigw_config.root_compartment_id,
+        "function_img_ocir_url": authoriser_image,
+        "authorized_user_groups": f'["{groups}"]',
+        "region": apigw_config.region,
+    }
+    response = requests.get(STACK_URL)
+    source_details = oci.resource_manager.models.UpdateZipUploadConfigSourceDetails()
+    source_details.zip_file_base64_encoded = base64.b64encode(response.content).decode()
+    update_stack_details.config_source = source_details
+    resource_manager_client.update_stack(apigw_config.stack_id, update_stack_details)
+
+
+def apply_stack(stack_id: str):
+    print("Applying stack")
+    resource_manager_client: oci.resource_manager.ResourceManagerClient = (
+        OCIClientFactory(**authutil.default_signer()).create_client(
+            oci.resource_manager.ResourceManagerClient
+        )
+    )
+    resource_manager_composite_client = (
+        oci.resource_manager.ResourceManagerClientCompositeOperations(
+            resource_manager_client
+        )
+    )
+    job_details = oci.resource_manager.models.CreateJobDetails()
+    job_details.stack_id = stack_id
+    job_operation_details = oci.resource_manager.models.CreateApplyJobOperationDetails()
+    job_operation_details.operation = "APPLY"
+    job_operation_details.is_provider_upgrade_required = False
+    job_operation_details.execution_plan_strategy = "AUTO_APPROVED"
+    job_details.operation = "APPLY"
+    job_details.job_operation_details = job_operation_details
+    job: oci.resource_manager.models.Job = (
+        resource_manager_composite_client.create_job_and_wait_for_state(
+            create_job_details=job_details,
+            wait_for_states=["FAILED", "SUCCEEDED"],
+            waiter_kwargs={
+                "wait_callback": lambda times_checked, _: print_ticker(
+                    "Waiting for stack to apply", iteration=times_checked - 1
+                ),
+                "max_interval_seconds": 1,
+            },
+        )
+    ).data
+    if job.lifecycle_state == "FAILED":
+        print(
+            f"{Color.RED}{Color.BOLD}Couldn't apply feature store apigw stack. Please check the error logs to debug issues. Re run the operator once the issues are resolved to complete deployment. For more help refer documentation: https://feature-store-accelerated-data-science.readthedocs.io/{Color.END}"
+        )
+        exit(1)
+
+
+def prompt_security_rules(stack_id: str):
+    if not click.confirm(
+        "Do you want to attach required security rules to subnets automatically?",
+        default=True,
+    ):
+        return
+
+    resource_manager_client: oci.resource_manager.ResourceManagerClient = (
+        OCIClientFactory(**authutil.default_signer()).create_client(
+            oci.resource_manager.ResourceManagerClient
+        )
+    )
+    associated_resources: List[AssociatedResourceSummary] = (
+        resource_manager_client.list_stack_associated_resources(stack_id=stack_id)
+    ).data.items
+    resource_map: Dict[str, AssociatedResourceSummary] = {}
+    for resource in associated_resources:
+        resource_map[resource.resource_address] = resource
+    nlb_subnet_id = ast.literal_eval(
+        resource_map[NLB_RULES_ADDRESS].attributes["freeform_tags"]
+    )["subnet_id"]
+    nodes_subnet_id = ast.literal_eval(
+        resource_map[NODES_RULES_ADDRESS].attributes["freeform_tags"]
+    )["subnet_id"]
+    add_security_list_to_subnet(
+        resource_map[NLB_RULES_ADDRESS].resource_id, nlb_subnet_id
+    )
+    add_security_list_to_subnet(
+        resource_map[NODES_RULES_ADDRESS].resource_id, nodes_subnet_id
+    )
+
+
+def add_security_list_to_subnet(sec_list_id: str, subnet_id: str):
+    network_client = OCIClientFactory(**authutil.default_signer()).create_client(
+        oci.core.VirtualNetworkClient
+    )
+    subnet: oci.core.models.Subnet = network_client.get_subnet(subnet_id=subnet_id).data
+    print(
+        f"Adding security list ({sec_list_id}) to subnet: '{subnet.display_name}'({subnet.id})"
+    )
+    if sec_list_id not in subnet.security_list_ids:
+        update_subnet_details = oci.core.models.UpdateSubnetDetails()
+        subnet.security_list_ids.append(sec_list_id)
+        update_subnet_details.security_list_ids = subnet.security_list_ids
+        network_client.update_subnet(
+            subnet_id=subnet_id, update_subnet_details=update_subnet_details
+        )

ads/opctl/operator/lowcode/feature_store_marketplace/schema.yaml

@@ -0,0 +1,160 @@
+kind:
+  allowed:
+    - operator
+  required: true
+  type: string
+  default: operator
+  meta:
+    description: "Which service are you trying to use? Common kinds: `operator`, `job`"
+
+version:
+  allowed:
+    - "v1"
+  required: true
+  type: string
+  default: v1
+  meta:
+    description: "Operators may change yaml file schemas from version to version, as well as implementation details. Double check the version to ensure compatibility."
+
+type:
+  required: true
+  type: string
+  default: feature_store_marketplace
+  meta:
+    description: "Type should always be `feature_store_marketplace` when using a feature_store_marketplace operator"
+
+spec:
+  required: true
+  schema:
+    helm:
+      required: true
+      type: dict
+      meta:
+        description: "Helm related details"
+      schema:
+        appName:
+          required: true
+          type: string
+          meta:
+            description: "Helm app name"
+          default: "feature-store-api"
+        values:
+          required: true
+          type: dict
+          meta:
+            description: "Values being provided to helm chart"
+          schema:
+            db:
+              type: dict
+              required: true
+              description: "Feature store metadata database configuration"
+              schema:
+               mysql:
+                  type: dict
+                  required: false
+                  description: "MySQL database configuration"
+                  schema:
+                    authType:
+                      type: string
+                      required: true
+                      default: VAULT
+                      allowed:
+                        - VAULT
+                        - BASIC
+                    jdbcURL:
+                      type: string
+                      required: true
+                      description: "The JDBC connection url to the database"
+                      default: "{Provide JDBC connection URL for MySQL database}"
+                    username:
+                      type: string
+                      required: true
+                      description: "The username to use to login to DB"
+                      default: "admin"
+                    basic:
+                      type: dict
+                      required: false
+                      description: Basic authentication details
+                      schema:
+                        password:
+                          type: string
+                          required: true
+                          description: "Plain-text password to the MySql database"
+                          default: "{Provide plain-text password for MySQL database}"
+                    vault:
+                      type: dict
+                      required: false
+                      description: The details of vault to retrieve mysql secret from
+                      schema:
+                        vaultOcid:
+                          type: string
+                          required: true
+                          description: The OCID of the vault to retrieve the secret from
+                          default: "{Provide ocid of the vault to retrieve the password from}"
+                        secretName:
+                          type: string
+                          required: true
+                          description: The name of the secret inside the vault containing the password
+                          default: "{Provide name of the secret containing password to mysql db}"
+              configuredDB:
+                type: string
+                required: true
+                default: MYSQL
+                allowed:
+                  - MYSQL
+    compartmentId:
+      type: string
+      required: true
+      default: "<Provide compartment ID here>"
+      description: Compartment id to use for marketplace export
+
+    clusterDetails:
+      required: true
+      type: dict
+      schema:
+        namespace:
+          type: string
+          required: true
+          default: "default"
+          description: "Namespace where we want to deploy the cluster to. Eg: 'default'"
+        dockerRegistrySecretName:
+          type: string
+          required: true
+          default: "fs-ocir-secret"
+          description: "The name of the secret in namespace having docker credentials"
+    ocirURL:
+      type: string
+      required: true
+      default: "iad.ocir.io/{tenancy_namespace}/{repository}"
+      description: "URL to the image where feature store images need to be cloned to"
+    version:
+      type: string
+      required: true
+      default: "latest"
+      description: "Version of the listing to deploy"
+    apiGatewayDeploymentDetails:
+      required: true
+      type: dict
+      schema:
+        enabled:
+          type: bool
+          required: true
+          default: false
+          description: "Whether to deploy API gateway or not"
+        rootCompartmentId:
+          type: string
+          required: false
+          description: "Root compartment ID of the tenancy where api gateway needs to be deployed. This is needed to setup certain tenancy wide policies"
+        region:
+          type: string
+          required: false
+          description: "Region to deploy API gateway in"
+        authorizedUserGroups:
+          type: string
+          required: false
+          description: "List of comma separated user groups authorized to access feature store"
+        stackId:
+          type: string
+          required: false
+          description: "Stack id to use for api gateway deployment"
+  type: dict

ads/opctl/operator/lowcode/forecast/MLoperator

@@ -0,0 +1,25 @@
+type: forecast
+version: v1
+name: Forecasting Operator
+conda_type: service
+conda: forecast_p310_cpu_x86_64_v4
+gpu: no
+jobs_default_params:
+  shape_name: VM.Standard.E4.Flex
+  ocpus: 16
+  memory_in_gbs: 256
+  block_storage_size_in_GBs: 512
+keywords:
+  - Prophet
+  - AutoML
+  - ARIMA
+  - RNN
+  - LSTM
+backends:
+  - job
+  - operator.local
+description: |
+  Forecasting operator, that leverages historical time series data to generate accurate
+  forecasts for future trends. Use `ads operator info -t forecast` to get more details about
+  the forecasting operator."
+logo: data:image/svg+xml;base64,PHN2ZyBpZD0ic3ZnIiB2ZXJzaW9uPSIxLjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgeG1sbnM6eGxpbms9Imh0dHA6Ly93d3cudzMub3JnLzE5OTkveGxpbmsiIHdpZHRoPSI1MCIKICBoZWlnaHQ9IjUwLjYyNTczMDk5NDE1MjA0IiB2aWV3Qm94PSIwLCAwLCA0MDAsMzgzLjYyNTczMDk5NDE1MjA0Ij4KICA8ZyBpZD0ic3ZnZyI+CiAgICA8cGF0aCBpZD0icGF0aDAiCiAgICAgIGQ9Ik0zOS45NjAgMi4wMDQgQyAyMC43MzUgNi4yMTcsMy43MTIgMjMuMzIxLDAuODI1IDQxLjMyNiBDIC0wLjk3NiA1Mi41NTAsLTAuMjQxIDMzOC4zNjYsMS42MDYgMzQ1LjYwMiBDIDUuMTYwIDM1OS41MTksMTYuNDk5IDM3My43MzcsMjguMTU5IDM3OC44OTUgQyAzNy41OTIgMzgzLjA2NywyOC4wNDEgMzgyLjg0OSwxOTkuNTc5IDM4Mi44MTMgTCAzNTguMjg1IDM4Mi43ODAgMzYzLjQ3MyAzODAuOTk3IEMgMzgwLjMyOSAzNzUuMjA1LDM5My4wMDEgMzYxLjIyOSwzOTYuNTA2IDM0NC41NjggQyAzOTguNjQzIDMzNC40MTIsMzk4LjIwOCA0My43MDIsMzk2LjA0NyAzNy4yMDIgQyAzOTAuMzgwIDIwLjE1OSwzNzIuMzYwIDQuMzQwLDM1NS40OTYgMS42MDQgQyAzNDcuMTg5IDAuMjU2LDQ2LjE5NSAwLjYzOCwzOS45NjAgMi4wMDQgTTM1NC41NTUgMzIuMTY0IEMgMzU5Ljk2MiAzNS4wMTQsMzYzLjg5MCAzOS4wNzIsMzY2LjM3OCA0NC4zNzcgTCAzNjguNDIxIDQ4LjczMyAzNjguNDIxIDE5Mi41OTMgTCAzNjguNDIxIDMzNi40NTIgMzY2LjczNiAzNDAuMDk4IEMgMzY0LjQ3NSAzNDQuOTkxLDM1OS40MTUgMzUwLjMzNSwzNTQuOTM1IDM1Mi41NjIgTCAzNTEuMjY3IDM1NC4zODYgMTk5LjYxMCAzNTQuMzg2IEwgNDcuOTUzIDM1NC4zODYgNDMuNTQ5IDM1Mi4zMjEgQyAzOC4xODQgMzQ5LjgwNiwzMy42NTEgMzQ1LjQxNSwzMS4xMjkgMzQwLjI5MSBMIDI5LjI0MCAzMzYuNDUyIDI5LjAyMiAxOTguNDQxIEMgMjguNzk4IDU2LjY4OSwyOC45NTYgNDcuOTgzLDMxLjgzOCA0Mi4zOTYgQyAzNC41MjEgMzcuMTk2LDQwLjcwMSAzMi4yMTUsNDYuNzc5IDMwLjM1NCBDIDQ3Ljg1MyAzMC4wMjUsMTE2LjYyOCAyOS44MTUsMTk5LjYxMCAyOS44ODggTCAzNTAuNDg3IDMwLjAxOSAzNTQuNTU1IDMyLjE2NCBNMTE1LjY0NSA2NC4yOTkgQyAxMDcuNTM4IDY3LjgyNSwxMDkuMDMyIDc0LjI3NSwxMjAuNjEwIDg1LjczNSBMIDEyOS42MzkgOTQuNjcyIDEyMC41OTUgMTAzLjQzNiBDIDExMS4wNDcgMTEyLjY4NywxMTAuMDIxIDExNC40MjQsMTExLjQ4MyAxMTguODU1IEMgMTE0LjI1NCAxMjcuMjUyLDEyNi41MzkgMTI2LjYxNiwxMjkuMzA3IDExNy45MzMgQyAxMzAuMDg1IDExNS40OTEsMTMxLjc1NiAxMTMuNDI5LDEzNS45MjEgMTA5Ljc2OSBDIDE1MS4yODEgOTYuMjc1LDE1MS4zMjMgOTUuNDA3LDEzNy4yODcgODEuNDk2IEMgMTMyLjI1MiA3Ni41MDUsMTI5LjQzNSA3My4xMjAsMTI5LjQzNSA3Mi4wNjAgQyAxMjkuNDM1IDY1LjkxOSwxMjEuODAwIDYxLjYyMiwxMTUuNjQ1IDY0LjI5OSBNNzkuMjkyIDY2LjIxNSBDIDU0LjY0NCA3Ni4xMDksNTIuNzUwIDExMC45ODQsNzYuMjMzIDEyMi41NTAgQyA4Mi4wNzEgMTI1LjQyNSw5My40NDggMTI1LjIzMSw5Ni40NzQgMTIyLjIwNCBDIDEwMS45NjAgMTE2LjcxNyw5Ni44NjQgMTA2LjgyMyw4OC41NTEgMTA2LjgyMyBDIDg2LjMwMyAxMDYuODIzLDgxLjUzMiAxMDIuOTE5LDc5Ljg4MiA5OS43MjggQyA3Ni4xNDQgOTIuNTAwLDgxLjgzNCA4My42NTUsOTEuNjE4IDgxLjQ4MyBDIDk3Ljk5OCA4MC4wNjYsMTAwLjU3OSA3MS4zODIsOTUuOTg2IDY2Ljc4OSBDIDkzLjYxOSA2NC40MjIsODQuNTM2IDY0LjExMCw3OS4yOTIgNjYuMjE1IE0zMDQuNDgzIDY5LjQzMCBDIDI4MS40NzcgNzEuNzM3LDI3NS4wMzggNzIuNDc1LDI3My4zNDMgNzMuMDAxIEMgMjY1Ljg3NyA3NS4zMTQsMjYxLjY2NiA4NS4xMjgsMjY1LjAyMSA5Mi4zOTggQyAyNjguMjgyIDk5LjQ2MiwyNzEuMjEzIDEwMC41ODUsMjg2LjM5NCAxMDAuNTg1IEwgMjk4LjIyMyAxMDAuNTg1IDI4OC4wOTggMTEwLjc3NiBDIDI4Mi41MjkgMTE2LjM4MSwyNjcuODcxIDEzMC44MjIsMjU1LjUyNSAxNDIuODY4IEwgMjMzLjA3NyAxNjQuNzcwIDIxNi45MjggMTQ4Ljc2OSBDIDE5MS42NzUgMTIzLjc0OCwxOTMuMDg1IDEyMy41NzIsMTU5LjY5OSAxNTUuOTE0IEMgODIuMjU1IDIzMC45MzgsNzUuOTE1IDIzNy4wNTUsNjkuNTE3IDI0Mi45MjMgQyA1OS43MTQgMjUxLjkxNCw2MC4xNzMgMjYzLjk3NSw3MC41MDkgMjY4Ljk3OCBDIDc4LjkyNiAyNzMuMDUzLDgxLjg4NiAyNzEuNDc3LDEwMC45NzUgMjUyLjc1MiBDIDEwNy44MzYgMjQ2LjAyMSwxMjQuMTQ4IDIzMC4xNzAsMTM3LjIyMyAyMTcuNTI4IEMgMTUwLjI5NyAyMDQuODg2LDE2Ny44ODYgMTg3Ljc4OCwxNzYuMzA3IDE3OS41MzIgQyAxODQuNzI5IDE3MS4yNzcsMTkxLjkyNiAxNjQuNTI5LDE5Mi4zMDEgMTY0LjUzNyBDIDE5Mi45NzYgMTY0LjU1MiwxOTguNTY4IDE2OS43NzYsMjE2LjA1NyAxODYuNzMzIEMgMjI2LjE0NiAxOTYuNTE1LDIyOS4xMzYgMTk3Ljk2OCwyMzYuOTYxIDE5Ni44OTIgQyAyNDIuMzI3IDE5Ni4xNTMsMjQyLjEwNSAxOTYuMzQ5LDI3OS41MTkgMTU5LjYzMiBMIDMxMy4wNjAgMTI2LjcxNyAzMTMuNDg1IDEzMC42MTAgQyAzMTUuMDEyIDE0NC42MTMsMzMwLjI4NCAxNDkuNzI5LDMzOC45OTkgMTM5LjE1NiBMIDM0MS4yOTYgMTM2LjM2OSAzNDEuODYxIDEwOC4wNzYgQyAzNDIuNzE3IDY1LjIwNywzNDMuMDU5IDY1LjU2MSwzMDQuNDgzIDY5LjQzMCBNMzA2Ljk0NCAxODUuOTMzIEMgMzAyLjE1NyAxODcuNjM5LDI5OC40MDUgMTkxLjkwNywyOTcuNTI1IDE5Ni42NDUgQyAyOTcuMzQyIDE5Ny42MzIsMjk3LjE2NiAyMjAuNDU4LDI5Ny4xMzQgMjQ3LjM2OCBMIDI5Ny4wNzYgMjk2LjI5NiAyODMuMDQxIDI5Ni4yOTYgTCAyNjkuMDA2IDI5Ni4yOTYgMjY5LjAwNiAyNjYuODE4IEwgMjY5LjAwNiAyMzcuMzQwIDI2Ny4wODcgMjM0LjczOSBDIDI2MC41MjkgMjI1Ljg1MCwyNDguNzMwIDIyNS40ODYsMjQyLjgzNCAyMzMuOTkxIEwgMjQwLjU0NiAyMzcuMjkxIDI0MC4zMjQgMjY2LjI5NiBMIDI0MC4xMDIgMjk1LjMwMCAyMzUuMzM2IDI5NS43OTggQyAyMzIuNzE1IDI5Ni4wNzIsMjI2LjU4NyAyOTYuMjk2LDIyMS43MTggMjk2LjI5NiBMIDIxMi44NjUgMjk2LjI5NiAyMTIuODY1IDI1OS40MTUgTCAyMTIuODY1IDIyMi41MzQgMjEwLjcyOCAyMTkuMjM4IEMgMjA1LjQ0NiAyMTEuMDkyLDE5My40NzIgMjEwLjg0NywxODcuNDM0IDIxOC43NjIgTCAxODUuMTg1IDIyMS43MDkgMTg0Ljc5NSAyNTguODA4IEwgMTg0LjQwNSAyOTUuOTA2IDE3MS4zNDUgMjk2LjEyMCBMIDE1OC4yODUgMjk2LjMzNCAxNTguMjg1IDI5MC41OTEgQyAxNTguMjg1IDI4Ny40MzMsMTU4LjA1MiAyNzkuNDY3LDE1Ny43NjcgMjcyLjg4OSBMIDE1Ny4yNDkgMjYwLjkzMCAxNTQuNDUzIDI1Ny44MzEgQyAxNDcuOTYzIDI1MC42MzksMTM2Ljk0OCAyNTEuMDIwLDEzMS43NzQgMjU4LjYxNiBDIDEyOS44NzUgMjYxLjQwNCwxMjkuODE0IDI2MS45MjMsMTI5LjQzNSAyNzguNjkyIEwgMTI5LjA0NSAyOTUuOTA2IDk4LjE4NCAyOTYuMjk2IEwgNjcuMzIzIDI5Ni42ODYgNjQuMzk0IDI5OC45MjEgQyA1NS44NzQgMzA1LjQyMiw1Ny4wNzEgMzE4LjU1OCw2Ni41NzYgMzIyLjg3NSBDIDY5LjY3MCAzMjQuMjgwLDc0LjUyMiAzMjQuMzMzLDIwMC43ODAgMzI0LjM0NiBMIDMzMS43NzQgMzI0LjM2MSAzMzQuNDIxIDMyMi43NDcgQyAzNDYuODIyIDMxNS4xODcsMzQzLjAxMCAyOTYuMjk2LDMyOS4wODQgMjk2LjI5NiBMIDMyNS45MjYgMjk2LjI5NiAzMjUuOTI2IDI0Ni4wNTUgQyAzMjUuOTI2IDIxMi4zNjAsMzI1LjY1MiAxOTUuMDkwLDMyNS4wOTQgMTkzLjYxOCBDIDMyMi40OTkgMTg2Ljc2OSwzMTQuMzE2IDE4My4zMDQsMzA2Ljk0NCAxODUuOTMzICIKICAgICAgc3Ryb2tlPSJub25lIiBmaWxsPSIjMjk0NDY1IiBmaWxsLXJ1bGU9ImV2ZW5vZGQiPjwvcGF0aD4KICA8L2c+Cjwvc3ZnPg==