From 0df81246299cf9a33edf48f2878b0d9343133e38 Mon Sep 17 00:00:00 2001
From: xocko <xoseag@pm.me>
Date: Wed, 14 Oct 2026 19:38:37 +0200
Subject: [PATCH] Import minamp 1.0 source

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
---
 .gitignore                                    |   4 +
 AndroidManifest.xml                           |  62 ++
 README.md                                     |  91 +++
 ...371dbf31afaf7ded8c4817d515f8152ed5a6-0.der | Bin 0 -> 574 bytes
 ...97b4e8a522a943a90d3301b19f99a8e6fcaf-0.der | Bin 0 -> 735 bytes
 ...d0137e724ee890170d0a0797ca406897614d-0.der | Bin 0 -> 1505 bytes
 ...fcf05175b60e4914344f85fcf18b3f826fd8-0.der | Bin 0 -> 1095 bytes
 ...4ff6887b4722adb4859609e6a925212174e0-0.der | Bin 0 -> 1452 bytes
 ...bf716ef774bd28f3e2cd3949cc2eaa52316a-0.der | Bin 0 -> 1400 bytes
 ...799a38ebd57730aa49f89be555490ab47bf8-0.der | Bin 0 -> 592 bytes
 ...6f28d9038bfbf04a2093c205456baf4034b2-0.der | Bin 0 -> 1551 bytes
 ...f884650ebfb1564d3da153a0d7f1c7c670a8-0.der | Bin 0 -> 993 bytes
 ...d72a82ce8c8116af6a12f0701505259f816d-0.der | Bin 0 -> 480 bytes
 ...66add30938e8135505ffd08b5a70c488b73b-0.der | Bin 0 -> 1476 bytes
 ...6f8e064b971fdddfa11523e1aee502be2b1b-0.der | Bin 0 -> 969 bytes
 ...24a4280ef8840064866941b494f3f30de194-0.der | Bin 0 -> 1519 bytes
 ...44b97081f27eb2d32757ef0242567e51fed9-0.der | Bin 0 -> 546 bytes
 ...8437e3d9edafce3dc9904897b48fdeb436d3-0.der | Bin 0 -> 580 bytes
 ...769250bbe91e2178c18a2240319eaf17e365-0.der | Bin 0 -> 1415 bytes
 ...75b10d1adadd3525515deb67dda91edf2154-0.der | Bin 0 -> 887 bytes
 ...ea4e6a11200e3949b766237385489c2e8792-0.der | Bin 0 -> 1391 bytes
 ...348b4c3fe39c4b2f2a1919788781b2fde745-0.der | Bin 0 -> 657 bytes
 ...402c7b5dbe592758be81f8b1a0c89bd9db40-0.der | Bin 0 -> 601 bytes
 ...c2d60f82ea189edb13b0755d9b046e67f050-0.der | Bin 0 -> 1371 bytes
 ...c31bde81d32ad0d8ecacd40c3da4e71aeb38-0.der | Bin 0 -> 967 bytes
 ...d42b3fe752585a7c1435fd71b9763f2c7bd9-0.der | Bin 0 -> 723 bytes
 ...ae4363646a8c15060a3b4adff12e8c1809af-0.der | Bin 0 -> 574 bytes
 ...a277b57e01b32d31d926b4f7b4366493d235-0.der | Bin 0 -> 531 bytes
 ...1f8404085341117cfe8fc657667384b14135-0.der | Bin 0 -> 1389 bytes
 ...f24e274d52c0b46a58590043b883b4f6b096-0.der | Bin 0 -> 922 bytes
 ...8b71fe1d19b65fb3f1288f23bc04595c4395-0.der | Bin 0 -> 914 bytes
 ...55d3c9a93b24f8b4f95a07ae048c20cea42d-0.der | Bin 0 -> 582 bytes
 ...5b67500e9a2e2c0cdcba7a9247f773f77269-0.der | Bin 0 -> 1380 bytes
 ...0249061723abd565d5bce6f9562e79c7c8e8-0.der | Bin 0 -> 953 bytes
 ...562253e3c442d08ec17f32fb2d58f406ace3-0.der | Bin 0 -> 1525 bytes
 ...aa5ea487b4f18a25daaf86f22533b7ee39ab-0.der | Bin 0 -> 1038 bytes
 ...b7e6a82098efcfb77957c139770ef5df885f-0.der | Bin 0 -> 1374 bytes
 ...557ae1206403ecc941543a54504072f2c1df-0.der | Bin 0 -> 1494 bytes
 ...daf39dfbf67800700df49cd84af1531b0969-0.der | Bin 0 -> 1079 bytes
 ...c7d2704f8539cb63fb2d863f09b26393e823-0.der | Bin 0 -> 566 bytes
 ...3837a2d6eb46985ae7cc638568fdaced325b-0.der | Bin 0 -> 1414 bytes
 ...a39453cfb9559e7f6bd8c54da53da642b714-0.der | Bin 0 -> 837 bytes
 ...33b9a76ad7c55cbf4dc2d4769ce2bb50d20b-0.der | Bin 0 -> 1422 bytes
 ...e1fad8ea116388ec542a0110b63fb5c826e6-0.der | Bin 0 -> 1421 bytes
 ...03ec26723b65ec4b936600e5d1af9fa80fa9-0.der | Bin 0 -> 1491 bytes
 ...dcebfc1a5bb0aa6923e532de48a56851f8ec-0.der | Bin 0 -> 502 bytes
 ...1b686c5cd3be1691995789dfc41472163d03-0.der | Bin 0 -> 1500 bytes
 ...b4c96c7627f44989f56d3795e701ecff86ed-0.der | Bin 0 -> 1415 bytes
 ...ac18333cfe8ca49f61b4f2151d005ee86ce9-0.der | Bin 0 -> 442 bytes
 ...c98fa750327769f72ce76ccfd9ea956526f3-0.der | Bin 0 -> 626 bytes
 ...4bafb45c7a8423a7fb924545dff35aab46eb-0.der | Bin 0 -> 1448 bytes
 ...311aae93dc3feadb1abc64d44c38494b2940-0.der | Bin 0 -> 1560 bytes
 ...c3357b52a21924146518f9cb7d4dbe05a82f-0.der | Bin 0 -> 1390 bytes
 ...af3c2bea54342640b3ff78c70768e0fdfd68-0.der | Bin 0 -> 886 bytes
 ...80e92c15138ab8bef8cad0f2ed793ab3697c-0.der | Bin 0 -> 594 bytes
 ...9c5ecfe502b0b8bdccfe3aac3b0057a13809-0.der | Bin 0 -> 1384 bytes
 ...ba45ab521e8115a29d695c1fc06daee1671c-0.der | Bin 0 -> 1523 bytes
 ...4580524922e9a5b62e238cb16cd887402dde-0.der | Bin 0 -> 1373 bytes
 ...88bd141d71bbcfed90e833ca29c89162f156-0.der | Bin 0 -> 1373 bytes
 ...bcd4a06fa193dda974a7c6cf184c1fbb4f14-0.der | Bin 0 -> 1420 bytes
 ...ed24cfd532db5d6e66acee1149168947a20d-0.der | Bin 0 -> 1386 bytes
 ...ad1e1daeeb75e7ecc9ad1ec5f590f5b98461-0.der | Bin 0 -> 1049 bytes
 ...d26e80718923cd527a3315639bcabc82baac-0.der | Bin 0 -> 569 bytes
 ...671cc5fe6cef98a1dba2ad2bdd787607c611-0.der | Bin 0 -> 1425 bytes
 ...dde3ff2a744eb4370369af62cd497095e486-0.der | Bin 0 -> 1355 bytes
 ...b9be7c5fcf0311180cf2f1e3ecb9d5e36027-0.der | Bin 0 -> 1425 bytes
 ...a4445e67ea7c94774e43189c3ecee4c87312-0.der | Bin 0 -> 1011 bytes
 ...8d24845c923b512b1cd0ac0e7a64a33b4cf0-0.der | Bin 0 -> 543 bytes
 ...eaae98f84c6b1703fefce5ee0bc9afed2fa6-0.der | Bin 0 -> 617 bytes
 ...bca2fa8dd4f6a68eaf461bf2091e9aa77576-0.der | Bin 0 -> 1380 bytes
 ...f59059604b03df43780a8094a649cdb975f6-0.der | Bin 0 -> 895 bytes
 ...a55f7c274e0d3a10562231c60a406a8d98a6-0.der | Bin 0 -> 1349 bytes
 ...4462a2852855675a4a4f8a790c5e904cfa5a-0.der | Bin 0 -> 1370 bytes
 ...2813a1d464fed7792b0db6d29e5d8308bbf9-0.der | Bin 0 -> 1127 bytes
 ...ccde7d8296f32c79363127c7d366c7ccf94c-0.der | Bin 0 -> 2007 bytes
 ...0a63fba1d7069deb8931aef39c24ea7a5c47-0.der | Bin 0 -> 1398 bytes
 ...f064e2c8498d97481114eeaf435fe0cd3a39-0.der | Bin 0 -> 1374 bytes
 ...65196c3a9fffbf0bc4bfdb20299bf0d6df8f-0.der | Bin 0 -> 525 bytes
 ...42c83e15138e38e53cc701da3ab52d475144-0.der | Bin 0 -> 735 bytes
 ...f103f952a9ba8cd636012f4adfffe82b92af-0.der | Bin 0 -> 1449 bytes
 ...67427bbd6f1c2a429387154ec72447e68508-0.der | Bin 0 -> 1463 bytes
 ...c276adf4f0fa5b7b3606db53807f3cd79d09-0.der | Bin 0 -> 600 bytes
 ...38b989c88f14809cb8826da96b75cadeeb8d-0.der | Bin 0 -> 559 bytes
 ...8011e10133cb69cdf7f710e973cf9577abbf-0.der | Bin 0 -> 525 bytes
 ...77b2272de78e18d5a67e5b1297dce8c5dac1-0.der | Bin 0 -> 659 bytes
 ...1e6fe1b4e58b38cd4664dd9184b2eead11f6-0.der | Bin 0 -> 1471 bytes
 ...54aeb7c096b2c72835b60f7d423e851e811a-0.der | Bin 0 -> 1431 bytes
 ...d918696e6d071cafa898ed1bf22538e71ab2-0.der | Bin 0 -> 537 bytes
 ...8ae3f7eb508c94c1bae31e7cdc3a713d4437-0.der | Bin 0 -> 1415 bytes
 ...0f14569371822ea32fed5faa588deb9a03a2-0.der | Bin 0 -> 1438 bytes
 ...0d0305d965b2bf298a6c492a3b0bea8ba25f-0.der | Bin 0 -> 1349 bytes
 ...806f3b0ec8c5ac7df8fd9922dcc8b15bd0bf-0.der | Bin 0 -> 967 bytes
 ...620226764c614af7a3e7549b6b1dac6b0f55-0.der | Bin 0 -> 920 bytes
 ...0b343f6c16083e2a9e9be4f9ee2de35dd3d9-0.der | Bin 0 -> 1400 bytes
 ...fc3960063bc493f2540de8ccc3b47e59d84a-0.der | Bin 0 -> 605 bytes
 ...d24c343a82ab1f0570158ad7a107762992e9-0.der | Bin 0 -> 1506 bytes
 ...b99d14f558ddad1db1c0c87dd6b76685ff6b-0.der | Bin 0 -> 565 bytes
 ...43a2a0f778fed080dff8600e49515c1d05c2-0.der | Bin 0 -> 1380 bytes
 ...b47d649377b28a8d0620f4ffafe3444e309c-0.der | Bin 0 -> 1386 bytes
 ...4cebac21908f4f278d95db510429928526b9-0.der | Bin 0 -> 959 bytes
 ...7dfe40104bbb8a15f44c45067d6d9ca0117a-0.der | Bin 0 -> 1453 bytes
 ...e898b225382efd64f9f3c37486534fa9cbda-0.der | Bin 0 -> 1380 bytes
 ...6391a7eefac7df3e47972cdd9c04be806e9d-0.der | Bin 0 -> 553 bytes
 ...43c47af5f1bc86ab36437e021703f89ccf5c-0.der | Bin 0 -> 527 bytes
 ...cf8b8c3b46c10d3d5c407561eabeb57f8181-0.der | Bin 0 -> 1428 bytes
 ...78259c056c7f870c7b62f5b043d96fab7725-0.der | Bin 0 -> 711 bytes
 ...ceba6df839282ba96295895cca12e56e2cd6-0.der | Bin 0 -> 1412 bytes
 ...f2faacfba8533a5d58a04d4f76d1fa532b0b-0.der | Bin 0 -> 507 bytes
 ...d890fe2720f41d7d6ac15eef76cf62cfab78-0.der | Bin 0 -> 653 bytes
 ...bc9d472b7e0291771923f2a5f1c1c51e57b5-0.der | Bin 0 -> 579 bytes
 ...da4b2284f3860c68b18b916a064a520a9728-0.der | Bin 0 -> 551 bytes
 ...813c6ea2e5bbca921b4b884a50f107f0cbff-0.der | Bin 0 -> 1354 bytes
 ...fc731db5ec5a468e4ba9bc8ab856319ceda9-0.der | Bin 0 -> 1631 bytes
 ...f3e3718f19d130d9cc7a2dc303161cb29cd0-0.der | Bin 0 -> 891 bytes
 ...2ef9470df6a3ca848f278ea48015299c54f1-0.der | Bin 0 -> 541 bytes
 ...867f8a28dc57b3dfe2c74facf594b917520b-0.der | Bin 0 -> 1453 bytes
 ...2d4a785f7dab303cd2dc815d90dee6995f09-0.der | Bin 0 -> 572 bytes
 ...39270d6a2019f1683191887f7f3edb1f2013-0.der | Bin 0 -> 1355 bytes
 ...687f2418d62a790f7592330756ea85e94707-0.der | Bin 0 -> 867 bytes
 ...5660b8bbc206931faf24a7161c03980f6301-0.der | Bin 0 -> 586 bytes
 ...f300817f2b6cd6f5d220fd224155c466d35b-0.der | Bin 0 -> 664 bytes
 ...0538aed47baadb39e8710440f329a43a372a-0.der | Bin 0 -> 621 bytes
 ...191bc63ac8ff27f29ee542bf779ce0c298a1-0.der | Bin 0 -> 1463 bytes
 ...e143973af986f6b33251f56e17bbee86f58c-0.der | Bin 0 -> 1446 bytes
 build.sh                                      |  35 +
 res/drawable-hdpi/ic_launcher.png             | Bin 0 -> 5335 bytes
 res/drawable-hdpi/ic_stat.png                 | Bin 0 -> 1624 bytes
 res/drawable-ldpi/ic_launcher.png             | Bin 0 -> 2363 bytes
 res/drawable-ldpi/ic_stat.png                 | Bin 0 -> 732 bytes
 res/drawable-mdpi/ic_launcher.png             | Bin 0 -> 3371 bytes
 res/drawable-mdpi/ic_stat.png                 | Bin 0 -> 1235 bytes
 res/drawable/art_placeholder.xml              |   4 +
 res/drawable/bg_button_accent.xml             |   6 +
 res/drawable/bg_button_outline.xml            |   6 +
 res/drawable/bg_edit.xml                      |   5 +
 res/drawable/bg_play_circle.xml               |   6 +
 res/drawable/bg_pressable.xml                 |   7 +
 res/drawable/bg_pressable_round.xml           |   6 +
 res/drawable/bg_tile.xml                      |   6 +
 res/drawable/progress_mini.xml                |   6 +
 res/drawable/seek_progress.xml                |   6 +
 res/drawable/seek_thumb.xml                   |   5 +
 res/layout/activity_browse.xml                |  16 +
 res/layout/activity_home.xml                  |  57 ++
 res/layout/activity_now_playing.xml           | 145 ++++
 res/layout/activity_queue.xml                 |  15 +
 res/layout/activity_search.xml                |  29 +
 res/layout/activity_setup.xml                 | 120 ++++
 res/layout/row_choice.xml                     |  16 +
 res/layout/row_header.xml                     |  11 +
 res/layout/row_item.xml                       |  35 +
 res/layout/view_album_card.xml                |  19 +
 res/layout/view_detail_header.xml             |  45 ++
 res/layout/view_home_tile.xml                 |  21 +
 res/layout/view_miniplayer.xml                |  46 ++
 res/layout/view_status.xml                    |  20 +
 res/layout/view_topbar.xml                    |  28 +
 res/values/colors.xml                         |  14 +
 res/values/ids.xml                            |   4 +
 res/values/strings.xml                        |   4 +
 res/values/styles.xml                         |  80 +++
 signing/minamp.keystore                       | Bin 0 -> 2600 bytes
 src/com/minamp/App.java                       | 183 +++++
 src/com/minamp/BaseActivity.java              | 448 ++++++++++++
 src/com/minamp/BrowseActivity.java            | 163 +++++
 src/com/minamp/Glyph.java                     | 206 ++++++
 src/com/minamp/HomeActivity.java              | 428 +++++++++++
 src/com/minamp/ImageLoader.java               | 199 ++++++
 src/com/minamp/ItemAdapter.java               | 153 ++++
 src/com/minamp/MediaButtonReceiver.java       |  53 ++
 src/com/minamp/NowPlayingActivity.java        | 229 ++++++
 src/com/minamp/PlayQueue.java                 | 249 +++++++
 src/com/minamp/PlayerService.java             | 669 ++++++++++++++++++
 src/com/minamp/QueueActivity.java             |  95 +++
 src/com/minamp/SearchActivity.java            | 116 +++
 src/com/minamp/SetupActivity.java             | 290 ++++++++
 src/com/minamp/SquareImageView.java           |  22 +
 src/com/minamp/Ui.java                        |  71 ++
 src/com/minamp/net/CertVerifier.java          | 226 ++++++
 src/com/minamp/net/Http.java                  | 542 ++++++++++++++
 src/com/minamp/net/StreamProxy.java           | 207 ++++++
 src/com/minamp/plex/Item.java                 | 166 +++++
 src/com/minamp/plex/Library.java              | 225 ++++++
 src/com/minamp/plex/Plex.java                 | 144 ++++
 src/com/minamp/plex/Server.java               | 258 +++++++
 src/com/minamp/util/Json.java                 | 283 ++++++++
 test/NetTest.java                             |  57 ++
 test/PlexTest.java                            | 167 +++++
 test/QueueTest.java                           |  71 ++
 test/mock_plex.py                             | 226 ++++++
 tools/make_icons.py                           |  53 ++
 tools/make_roots.py                           |  27 +
 tools/setup_toolchain.sh                      |  62 ++
 tools/zipalign.py                             |  51 ++
 194 files changed, 7319 insertions(+)
 create mode 100644 .gitignore
 create mode 100644 AndroidManifest.xml
 create mode 100644 README.md
 create mode 100644 assets/roots/032d371dbf31afaf7ded8c4817d515f8152ed5a6-0.der
 create mode 100644 assets/roots/03eb97b4e8a522a943a90d3301b19f99a8e6fcaf-0.der
 create mode 100644 assets/roots/0c0ed0137e724ee890170d0a0797ca406897614d-0.der
 create mode 100644 assets/roots/0f4efcf05175b60e4914344f85fcf18b3f826fd8-0.der
 create mode 100644 assets/roots/0f5b4ff6887b4722adb4859609e6a925212174e0-0.der
 create mode 100644 assets/roots/108abf716ef774bd28f3e2cd3949cc2eaa52316a-0.der
 create mode 100644 assets/roots/1336799a38ebd57730aa49f89be555490ab47bf8-0.der
 create mode 100644 assets/roots/14146f28d9038bfbf04a2093c205456baf4034b2-0.der
 create mode 100644 assets/roots/14c0f884650ebfb1564d3da153a0d7f1c7c670a8-0.der
 create mode 100644 assets/roots/17a7d72a82ce8c8116af6a12f0701505259f816d-0.der
 create mode 100644 assets/roots/1ca566add30938e8135505ffd08b5a70c488b73b-0.der
 create mode 100644 assets/roots/1d236f8e064b971fdddfa11523e1aee502be2b1b-0.der
 create mode 100644 assets/roots/20dd24a4280ef8840064866941b494f3f30de194-0.der
 create mode 100644 assets/roots/220f44b97081f27eb2d32757ef0242567e51fed9-0.der
 create mode 100644 assets/roots/229a8437e3d9edafce3dc9904897b48fdeb436d3-0.der
 create mode 100644 assets/roots/254d769250bbe91e2178c18a2240319eaf17e365-0.der
 create mode 100644 assets/roots/262175b10d1adadd3525515deb67dda91edf2154-0.der
 create mode 100644 assets/roots/281aea4e6a11200e3949b766237385489c2e8792-0.der
 create mode 100644 assets/roots/2c7a348b4c3fe39c4b2f2a1919788781b2fde745-0.der
 create mode 100644 assets/roots/3053402c7b5dbe592758be81f8b1a0c89bd9db40-0.der
 create mode 100644 assets/roots/3091c2d60f82ea189edb13b0755d9b046e67f050-0.der
 create mode 100644 assets/roots/31e4c31bde81d32ad0d8ecacd40c3da4e71aeb38-0.der
 create mode 100644 assets/roots/322ad42b3fe752585a7c1435fd71b9763f2c7bd9-0.der
 create mode 100644 assets/roots/3366ae4363646a8c15060a3b4adff12e8c1809af-0.der
 create mode 100644 assets/roots/3582a277b57e01b32d31d926b4f7b4366493d235-0.der
 create mode 100644 assets/roots/36341f8404085341117cfe8fc657667384b14135-0.der
 create mode 100644 assets/roots/369df24e274d52c0b46a58590043b883b4f6b096-0.der
 create mode 100644 assets/roots/39d28b71fe1d19b65fb3f1288f23bc04595c4395-0.der
 create mode 100644 assets/roots/3f1855d3c9a93b24f8b4f95a07ae048c20cea42d-0.der
 create mode 100644 assets/roots/41655b67500e9a2e2c0cdcba7a9247f773f77269-0.der
 create mode 100644 assets/roots/41fc0249061723abd565d5bce6f9562e79c7c8e8-0.der
 create mode 100644 assets/roots/4264562253e3c442d08ec17f32fb2d58f406ace3-0.der
 create mode 100644 assets/roots/42aaaa5ea487b4f18a25daaf86f22533b7ee39ab-0.der
 create mode 100644 assets/roots/42d0b7e6a82098efcfb77957c139770ef5df885f-0.der
 create mode 100644 assets/roots/481f557ae1206403ecc941543a54504072f2c1df-0.der
 create mode 100644 assets/roots/4a7cdaf39dfbf67800700df49cd84af1531b0969-0.der
 create mode 100644 assets/roots/4b1ec7d2704f8539cb63fb2d863f09b26393e823-0.der
 create mode 100644 assets/roots/4e9b3837a2d6eb46985ae7cc638568fdaced325b-0.der
 create mode 100644 assets/roots/4f59a39453cfb9559e7f6bd8c54da53da642b714-0.der
 create mode 100644 assets/roots/538933b9a76ad7c55cbf4dc2d4769ce2bb50d20b-0.der
 create mode 100644 assets/roots/5588e1fad8ea116388ec542a0110b63fb5c826e6-0.der
 create mode 100644 assets/roots/55f003ec26723b65ec4b936600e5d1af9fa80fa9-0.der
 create mode 100644 assets/roots/5cd9dcebfc1a5bb0aa6923e532de48a56851f8ec-0.der
 create mode 100644 assets/roots/5e021b686c5cd3be1691995789dfc41472163d03-0.der
 create mode 100644 assets/roots/62fbb4c96c7627f44989f56d3795e701ecff86ed-0.der
 create mode 100644 assets/roots/6435ac18333cfe8ca49f61b4f2151d005ee86ce9-0.der
 create mode 100644 assets/roots/64f5c98fa750327769f72ce76ccfd9ea956526f3-0.der
 create mode 100644 assets/roots/69ad4bafb45c7a8423a7fb924545dff35aab46eb-0.der
 create mode 100644 assets/roots/6cf8311aae93dc3feadb1abc64d44c38494b2940-0.der
 create mode 100644 assets/roots/6f43c3357b52a21924146518f9cb7d4dbe05a82f-0.der
 create mode 100644 assets/roots/7036af3c2bea54342640b3ff78c70768e0fdfd68-0.der
 create mode 100644 assets/roots/704b80e92c15138ab8bef8cad0f2ed793ab3697c-0.der
 create mode 100644 assets/roots/71719c5ecfe502b0b8bdccfe3aac3b0057a13809-0.der
 create mode 100644 assets/roots/724dba45ab521e8115a29d695c1fc06daee1671c-0.der
 create mode 100644 assets/roots/72c74580524922e9a5b62e238cb16cd887402dde-0.der
 create mode 100644 assets/roots/79e688bd141d71bbcfed90e833ca29c89162f156-0.der
 create mode 100644 assets/roots/79eabcd4a06fa193dda974a7c6cf184c1fbb4f14-0.der
 create mode 100644 assets/roots/7e63ed24cfd532db5d6e66acee1149168947a20d-0.der
 create mode 100644 assets/roots/7f7fad1e1daeeb75e7ecc9ad1ec5f590f5b98461-0.der
 create mode 100644 assets/roots/81abd26e80718923cd527a3315639bcabc82baac-0.der
 create mode 100644 assets/roots/83cf671cc5fe6cef98a1dba2ad2bdd787607c611-0.der
 create mode 100644 assets/roots/83fcdde3ff2a744eb4370369af62cd497095e486-0.der
 create mode 100644 assets/roots/843eb9be7c5fcf0311180cf2f1e3ecb9d5e36027-0.der
 create mode 100644 assets/roots/887da4445e67ea7c94774e43189c3ecee4c87312-0.der
 create mode 100644 assets/roots/8a938d24845c923b512b1cd0ac0e7a64a33b4cf0-0.der
 create mode 100644 assets/roots/8aa2eaae98f84c6b1703fefce5ee0bc9afed2fa6-0.der
 create mode 100644 assets/roots/8df6bca2fa8dd4f6a68eaf461bf2091e9aa77576-0.der
 create mode 100644 assets/roots/8e88f59059604b03df43780a8094a649cdb975f6-0.der
 create mode 100644 assets/roots/9370a55f7c274e0d3a10562231c60a406a8d98a6-0.der
 create mode 100644 assets/roots/953e4462a2852855675a4a4f8a790c5e904cfa5a-0.der
 create mode 100644 assets/roots/96db2813a1d464fed7792b0db6d29e5d8308bbf9-0.der
 create mode 100644 assets/roots/9717ccde7d8296f32c79363127c7d366c7ccf94c-0.der
 create mode 100644 assets/roots/984a0a63fba1d7069deb8931aef39c24ea7a5c47-0.der
 create mode 100644 assets/roots/9b55f064e2c8498d97481114eeaf435fe0cd3a39-0.der
 create mode 100644 assets/roots/9bbd65196c3a9fffbf0bc4bfdb20299bf0d6df8f-0.der
 create mode 100644 assets/roots/9be242c83e15138e38e53cc701da3ab52d475144-0.der
 create mode 100644 assets/roots/a27cf103f952a9ba8cd636012f4adfffe82b92af-0.der
 create mode 100644 assets/roots/a4c867427bbd6f1c2a429387154ec72447e68508-0.der
 create mode 100644 assets/roots/a4d7c276adf4f0fa5b7b3606db53807f3cd79d09-0.der
 create mode 100644 assets/roots/a76e38b989c88f14809cb8826da96b75cadeeb8d-0.der
 create mode 100644 assets/roots/aab38011e10133cb69cdf7f710e973cf9577abbf-0.der
 create mode 100644 assets/roots/abf377b2272de78e18d5a67e5b1297dce8c5dac1-0.der
 create mode 100644 assets/roots/b0e31e6fe1b4e58b38cd4664dd9184b2eead11f6-0.der
 create mode 100644 assets/roots/b63a54aeb7c096b2c72835b60f7d423e851e811a-0.der
 create mode 100644 assets/roots/b7e7d918696e6d071cafa898ed1bf22538e71ab2-0.der
 create mode 100644 assets/roots/badf8ae3f7eb508c94c1bae31e7cdc3a713d4437-0.der
 create mode 100644 assets/roots/bece0f14569371822ea32fed5faa588deb9a03a2-0.der
 create mode 100644 assets/roots/c17e0d0305d965b2bf298a6c492a3b0bea8ba25f-0.der
 create mode 100644 assets/roots/c5c7806f3b0ec8c5ac7df8fd9922dcc8b15bd0bf-0.der
 create mode 100644 assets/roots/c90a620226764c614af7a3e7549b6b1dac6b0f55-0.der
 create mode 100644 assets/roots/c9770b343f6c16083e2a9e9be4f9ee2de35dd3d9-0.der
 create mode 100644 assets/roots/cc74fc3960063bc493f2540de8ccc3b47e59d84a-0.der
 create mode 100644 assets/roots/cd30d24c343a82ab1f0570158ad7a107762992e9-0.der
 create mode 100644 assets/roots/cf3ab99d14f558ddad1db1c0c87dd6b76685ff6b-0.der
 create mode 100644 assets/roots/d07c43a2a0f778fed080dff8600e49515c1d05c2-0.der
 create mode 100644 assets/roots/d422b47d649377b28a8d0620f4ffafe3444e309c-0.der
 create mode 100644 assets/roots/d83a4cebac21908f4f278d95db510429928526b9-0.der
 create mode 100644 assets/roots/db967dfe40104bbb8a15f44c45067d6d9ca0117a-0.der
 create mode 100644 assets/roots/dd8ae898b225382efd64f9f3c37486534fa9cbda-0.der
 create mode 100644 assets/roots/ddb36391a7eefac7df3e47972cdd9c04be806e9d-0.der
 create mode 100644 assets/roots/de1d43c47af5f1bc86ab36437e021703f89ccf5c-0.der
 create mode 100644 assets/roots/df22cf8b8c3b46c10d3d5c407561eabeb57f8181-0.der
 create mode 100644 assets/roots/e24e78259c056c7f870c7b62f5b043d96fab7725-0.der
 create mode 100644 assets/roots/e7e9ceba6df839282ba96295895cca12e56e2cd6-0.der
 create mode 100644 assets/roots/e9c6f2faacfba8533a5d58a04d4f76d1fa532b0b-0.der
 create mode 100644 assets/roots/eb25d890fe2720f41d7d6ac15eef76cf62cfab78-0.der
 create mode 100644 assets/roots/eb8ebc9d472b7e0291771923f2a5f1c1c51e57b5-0.der
 create mode 100644 assets/roots/ef58da4b2284f3860c68b18b916a064a520a9728-0.der
 create mode 100644 assets/roots/f026813c6ea2e5bbca921b4b884a50f107f0cbff-0.der
 create mode 100644 assets/roots/f180fc731db5ec5a468e4ba9bc8ab856319ceda9-0.der
 create mode 100644 assets/roots/f20ef3e3718f19d130d9cc7a2dc303161cb29cd0-0.der
 create mode 100644 assets/roots/f33f2ef9470df6a3ca848f278ea48015299c54f1-0.der
 create mode 100644 assets/roots/f4ee867f8a28dc57b3dfe2c74facf594b917520b-0.der
 create mode 100644 assets/roots/f5042d4a785f7dab303cd2dc815d90dee6995f09-0.der
 create mode 100644 assets/roots/f59639270d6a2019f1683191887f7f3edb1f2013-0.der
 create mode 100644 assets/roots/f59c687f2418d62a790f7592330756ea85e94707-0.der
 create mode 100644 assets/roots/f7025660b8bbc206931faf24a7161c03980f6301-0.der
 create mode 100644 assets/roots/f85cf300817f2b6cd6f5d220fd224155c466d35b-0.der
 create mode 100644 assets/roots/f9780538aed47baadb39e8710440f329a43a372a-0.der
 create mode 100644 assets/roots/fbb2191bc63ac8ff27f29ee542bf779ce0c298a1-0.der
 create mode 100644 assets/roots/fcc3e143973af986f6b33251f56e17bbee86f58c-0.der
 create mode 100755 build.sh
 create mode 100644 res/drawable-hdpi/ic_launcher.png
 create mode 100644 res/drawable-hdpi/ic_stat.png
 create mode 100644 res/drawable-ldpi/ic_launcher.png
 create mode 100644 res/drawable-ldpi/ic_stat.png
 create mode 100644 res/drawable-mdpi/ic_launcher.png
 create mode 100644 res/drawable-mdpi/ic_stat.png
 create mode 100644 res/drawable/art_placeholder.xml
 create mode 100644 res/drawable/bg_button_accent.xml
 create mode 100644 res/drawable/bg_button_outline.xml
 create mode 100644 res/drawable/bg_edit.xml
 create mode 100644 res/drawable/bg_play_circle.xml
 create mode 100644 res/drawable/bg_pressable.xml
 create mode 100644 res/drawable/bg_pressable_round.xml
 create mode 100644 res/drawable/bg_tile.xml
 create mode 100644 res/drawable/progress_mini.xml
 create mode 100644 res/drawable/seek_progress.xml
 create mode 100644 res/drawable/seek_thumb.xml
 create mode 100644 res/layout/activity_browse.xml
 create mode 100644 res/layout/activity_home.xml
 create mode 100644 res/layout/activity_now_playing.xml
 create mode 100644 res/layout/activity_queue.xml
 create mode 100644 res/layout/activity_search.xml
 create mode 100644 res/layout/activity_setup.xml
 create mode 100644 res/layout/row_choice.xml
 create mode 100644 res/layout/row_header.xml
 create mode 100644 res/layout/row_item.xml
 create mode 100644 res/layout/view_album_card.xml
 create mode 100644 res/layout/view_detail_header.xml
 create mode 100644 res/layout/view_home_tile.xml
 create mode 100644 res/layout/view_miniplayer.xml
 create mode 100644 res/layout/view_status.xml
 create mode 100644 res/layout/view_topbar.xml
 create mode 100644 res/values/colors.xml
 create mode 100644 res/values/ids.xml
 create mode 100644 res/values/strings.xml
 create mode 100644 res/values/styles.xml
 create mode 100644 signing/minamp.keystore
 create mode 100644 src/com/minamp/App.java
 create mode 100644 src/com/minamp/BaseActivity.java
 create mode 100644 src/com/minamp/BrowseActivity.java
 create mode 100644 src/com/minamp/Glyph.java
 create mode 100644 src/com/minamp/HomeActivity.java
 create mode 100644 src/com/minamp/ImageLoader.java
 create mode 100644 src/com/minamp/ItemAdapter.java
 create mode 100644 src/com/minamp/MediaButtonReceiver.java
 create mode 100644 src/com/minamp/NowPlayingActivity.java
 create mode 100644 src/com/minamp/PlayQueue.java
 create mode 100644 src/com/minamp/PlayerService.java
 create mode 100644 src/com/minamp/QueueActivity.java
 create mode 100644 src/com/minamp/SearchActivity.java
 create mode 100644 src/com/minamp/SetupActivity.java
 create mode 100644 src/com/minamp/SquareImageView.java
 create mode 100644 src/com/minamp/Ui.java
 create mode 100644 src/com/minamp/net/CertVerifier.java
 create mode 100644 src/com/minamp/net/Http.java
 create mode 100644 src/com/minamp/net/StreamProxy.java
 create mode 100644 src/com/minamp/plex/Item.java
 create mode 100644 src/com/minamp/plex/Library.java
 create mode 100644 src/com/minamp/plex/Plex.java
 create mode 100644 src/com/minamp/plex/Server.java
 create mode 100644 src/com/minamp/util/Json.java
 create mode 100644 test/NetTest.java
 create mode 100644 test/PlexTest.java
 create mode 100644 test/QueueTest.java
 create mode 100644 test/mock_plex.py
 create mode 100644 tools/make_icons.py
 create mode 100644 tools/make_roots.py
 create mode 100755 tools/setup_toolchain.sh
 create mode 100644 tools/zipalign.py

diff --git a/.gitignore b/.gitignore
new file mode 100644
index 0000000..5979b45
--- /dev/null
+++ b/.gitignore
@@ -0,0 +1,4 @@
+build/
+toolchain/
+.DS_Store
+._*
diff --git a/AndroidManifest.xml b/AndroidManifest.xml
new file mode 100644
index 0000000..18a875a
--- /dev/null
+++ b/AndroidManifest.xml
@@ -0,0 +1,62 @@
+<?xml version="1.0" encoding="utf-8"?>
+<manifest xmlns:android="http://schemas.android.com/apk/res/android"
+    package="com.minamp"
+    android:versionCode="1"
+    android:versionName="1.0"
+    android:installLocation="auto">
+
+    <uses-sdk android:minSdkVersion="8" android:targetSdkVersion="10" />
+
+    <supports-screens
+        android:smallScreens="true"
+        android:normalScreens="true"
+        android:largeScreens="true"
+        android:anyDensity="true" />
+
+    <uses-permission android:name="android.permission.INTERNET" />
+    <uses-permission android:name="android.permission.ACCESS_NETWORK_STATE" />
+    <uses-permission android:name="android.permission.ACCESS_WIFI_STATE" />
+    <uses-permission android:name="android.permission.WAKE_LOCK" />
+    <uses-permission android:name="android.permission.READ_PHONE_STATE" />
+    <uses-permission android:name="android.permission.WRITE_EXTERNAL_STORAGE" />
+
+    <application
+        android:name=".App"
+        android:label="@string/app_name"
+        android:icon="@drawable/ic_launcher"
+        android:theme="@style/AppTheme">
+
+        <activity
+            android:name=".HomeActivity"
+            android:label="@string/app_name"
+            android:screenOrientation="portrait"
+            android:launchMode="singleTask">
+            <intent-filter>
+                <action android:name="android.intent.action.MAIN" />
+                <category android:name="android.intent.category.LAUNCHER" />
+            </intent-filter>
+        </activity>
+
+        <activity android:name=".SetupActivity"
+            android:screenOrientation="portrait"
+            android:windowSoftInputMode="adjustResize" />
+        <activity android:name=".BrowseActivity"
+            android:screenOrientation="portrait" />
+        <activity android:name=".SearchActivity"
+            android:screenOrientation="portrait"
+            android:windowSoftInputMode="stateVisible|adjustResize" />
+        <activity android:name=".NowPlayingActivity"
+            android:screenOrientation="portrait"
+            android:launchMode="singleTop" />
+        <activity android:name=".QueueActivity"
+            android:screenOrientation="portrait" />
+
+        <service android:name=".PlayerService" android:exported="false" />
+
+        <receiver android:name=".MediaButtonReceiver">
+            <intent-filter android:priority="1000">
+                <action android:name="android.intent.action.MEDIA_BUTTON" />
+            </intent-filter>
+        </receiver>
+    </application>
+</manifest>
diff --git a/README.md b/README.md
new file mode 100644
index 0000000..9b191cd
--- /dev/null
+++ b/README.md
@@ -0,0 +1,91 @@
+# Minamp
+
+A small Plexamp-style music player for Plex, built for the Samsung Galaxy Mini (GT-S5570:
+Android 2.2/2.3, 240×320 ldpi screen, 600 MHz ARMv6, 384 MB RAM). Runs on any Android 2.2+ phone.
+
+## Install
+
+1. On the phone: **Settings → Applications → Unknown sources** (tick it).
+2. Copy `Minamp.apk` to the SD card (USB cable, or download it in the browser) and open it
+   with a file manager, or from a computer: `adb install Minamp.apk`.
+3. The app can live on the SD card (Settings → Applications → Manage → Minamp → Move to SD card),
+   which helps with the Mini's tiny internal storage.
+
+## Sign in
+
+Open Minamp → **Sign in with Plex**. It shows a 4-character code; on any other device go to
+**plex.tv/link** and type it in. Minamp then lists your servers (owned and shared) and music libraries.
+
+*Connect to a server address* is the manual fallback: an IP/hostname plus an optional X-Plex-Token.
+
+## Streaming from anywhere
+
+After sign-in Minamp knows every address Plex advertises for your server and picks the best
+working one, re-checking whenever the phone switches network:
+
+| Order | Connection | When it's used |
+|---|---|---|
+| 1 | Home network, HTTPS (`*.plex.direct`) | On your Wi-Fi |
+| 2 | Home network, plain HTTP | Same, if your router blocks plex.direct DNS (rebind protection) |
+| 3 | Remote, HTTPS | Away, if Remote Access is set up on the server |
+| 4 | Plex Relay | Away, when the server isn't reachable directly (bandwidth-capped; Minamp caps itself at 192 kbps) |
+
+For the best remote experience enable **Settings → Remote Access** on your Plex Media Server.
+Without it, Relay still works.
+
+Android 2.x can't do modern TLS, so Minamp bundles its own TLS 1.2/1.3 stack (Bouncy Castle,
+renamed to `com.minamp.bc` so it doesn't clash with the old copy inside Android) and verifies
+certificates against Mozilla's root store (from `certifi`). A tiny loopback proxy feeds the
+phone's media player, so HTTPS streams and relay work the same as local ones. If the phone's
+clock has been reset to before 2024 the certificate date check is skipped rather than failing.
+
+## Playback and quality
+
+* MP3, AAC (M4A) and Ogg Vorbis play directly. FLAC, ALAC etc. are transcoded to MP3 by the
+  server (Android 2.2/2.3 can't decode FLAC).
+* **Menu → Settings**: separate quality for home Wi-Fi (default *Original*) and for away/mobile
+  data (default *192 kbps MP3*); 320/256/192/128/96 kbps available.
+* Seeking in a transcoded track restarts the transcode at the new position.
+* If a stream fails, Minamp re-picks the connection and resumes; if it fails again it downloads
+  the whole track first and plays from the SD card. "Download tracks before playing" forces that
+  mode (useful on flaky mobile data).
+* Plays are reported to Plex (Now Playing in the Plex dashboard, play counts, resume position).
+
+## Features
+
+* Home: Library radio, Loved radio (rated 4★+ / loved), Time-travel radio (pick a decade),
+  Random album, Recently added and Recently played shelves.
+* Artists / Albums (5 sort orders) / Playlists tabs with paging and fast scroll; Search.
+* Artist page with *Play all* and *Artist radio*; album and playlist pages with *Play*/*Shuffle*.
+* Long-press anything: Play next, Add to queue, Go to album/artist, Love.
+* Now Playing: big art on a backdrop coloured from the cover, seek bar, shuffle, repeat
+  (queue/track), love, sleep timer (15–90 min or end of track), where it's streaming from.
+* Up Next queue: jump, play next, remove, clear; the queue and position survive restarts.
+* Wired headset button: 1 click play/pause, 2 next, 3 previous; Bluetooth media keys;
+  pauses for calls and when headphones are unplugged.
+
+## Building (no Android SDK needed)
+
+```
+tools/setup_toolchain.sh      # once: fetches aapt2, the API 8 android.jar, builds dx, renames Bouncy Castle
+./build.sh                    # -> build/Minamp.apk
+```
+
+`build.sh` runs `aapt2` (resources), `javac` (Java 8 bytecode checked against the API 8
+`android.jar`), `dx` (dex 035), `jarsigner` (v1 signature with SHA-1, which Android < 4.3 requires)
+and `tools/zipalign.py`. The debug key in `signing/` (password `minamp123`) is what this APK is
+signed with, so rebuilt APKs install over it.
+
+Tests (desktop JVM, no device):
+
+* `test/PlexTest.java` + `test/mock_plex.py`: PIN sign-in, server discovery, connection
+  picking/fallback, TLS with a wildcard plex.direct-style certificate (ECDSA leaf, RSA root),
+  untrusted-root rejection, browsing, search, artwork, and the stream proxy (Range requests over
+  TLS, de-chunking transcodes, aborting).
+* `test/QueueTest.java`: shuffle/unshuffle, repeat modes, play next, remove, move, clear.
+
+## Limits
+
+* No gapless playback (Android 2.2/2.3 have no API for it).
+* Notification has no playback buttons (pre-Android 3 can't); tap it to open Now Playing.
+* Downloads for offline listening aren't implemented.
diff --git a/assets/roots/032d371dbf31afaf7ded8c4817d515f8152ed5a6-0.der b/assets/roots/032d371dbf31afaf7ded8c4817d515f8152ed5a6-0.der
new file mode 100644
index 0000000000000000000000000000000000000000..47bfc6ff7db9fe972841f2b269717a1d5e866d63
GIT binary patch
literal 574
zcmXqLVzM%5Vmz>bnTe5!NkD}8>+0X;-Qo_>kDNCxy?Dfci;Y98&EuRc3p2BUpCPva
zCmVAp3!5-gXt1G#ff$Ix#ls&Q?4#hEUsRA^lvt9PpJ%9QpbU~>=8*x)=q2apDunn1
zE4Vs4D+J}|mnb+pDi|3U85zil^8!f=BU3{&V`CGGC~;mBGXo1lOEA|wit6^283?ek
zgMGuq$i}MO$ikq+oW#K5s%cvM>(CD6b0W1XHu^4zHhZU~6MQ&<({z(cnp)<8%~P+%
zPI8dsJGNA~;LCfVK#kbvXZHTIX+3y;%7l~J=O#HtM5h0pqArlq<Il3u*YioW|Lm{N
zIesvAd|!TelDA|?<Kkq4L<4?cfXE6nGX7^_HDCr(2J#>QWfou{Hi&fg>o0zxy+9<S
z`g7P0wfJ-k?l~6>WI+n}Sj1ScOY?!G`9TJ<0HdxAIii>|7z|RG3_>3(g}uB!NhQKx
zZi*2<50lxUziUd2{2u<6Y3Nvd=J)m2+W*aKKfJv@uQbcFEXef%lOe<L-h3y8{(akg
tBj1+$Y93Kga7}5m3OIITt?uNn617EdSDrtzCfrPeBlW&bWm?^WR{(nxxvc;I

literal 0
HcmV?d00001

diff --git a/assets/roots/03eb97b4e8a522a943a90d3301b19f99a8e6fcaf-0.der b/assets/roots/03eb97b4e8a522a943a90d3301b19f99a8e6fcaf-0.der
new file mode 100644
index 0000000000000000000000000000000000000000..cb9a58666de26fe7c8e0c4515b71bfe39a0f904d
GIT binary patch
literal 735
zcmXqLV!Cb6#FVgrnTe5!Ng$rd@p@HzjSutUHPd>3|G!|s#m1r4=5fxJg_+sF!;ss6
zlZ`o)g-w{r#nn*MKp4c~66SHy4Jj%uE>UpLP4X~QGEe{sGYd-sg@ZzaLlj)Y6oT^e
zOB9?P6$}-O42%p6<ivS_q>-Vap#ca)iSrtpg182jra%})MVrbD1lZWYK44;GW7TeC
zVNhaDVqp2meYee7LGu3e))z`%v(L|+v40Dz+R4+8mtE>VI<KPIuybYST6LRLfu=wA
z56|`cV61%PlF?V04fl=3V~>8=*!A=M&g~+nG`$Y-udFXk_0%#*|B~|knpF9%!-u9P
zI#qkFUEIXTYtY2VX}}K*3t3@C#{Vp=2FyUpKo%sx$0EieQZK+LW^T1a<4M4eCEwp<
z8*TgdvfF?UB+U;}&jO4QHiO1vAOU%n#(f5jyAA9X*etMWv&bkZDX`MlPcF*QOVKR>
z1-)KgY6*z159P<Fmc<tV!#qAYG2Sp96y|zBS%b<2<qJyNigQvDLHbiNi&B$I@{1}_
zOmX(Jg+`pJk%4O%kN`y<kaBhe5{5twf;#>nRUoT@0-$);akh1FwNFkhD#=XCOinCG
zElMrR2hy4Oc{!QICCCYhIg`O4jmePVl+7`%(nE2jNtR{|2~ph#C(k@{^R}b4b^A<l
z>#Jw{Pbqz0&~W<amW|S3UyCmNk-P}hGV!~?WP1TO?ZPD&tX*aw&}3rW<X9f~xiV^A
bpU46~r%Ta|pG~rupDS4eM8B2vcNPNxnMm;3

literal 0
HcmV?d00001

diff --git a/assets/roots/0c0ed0137e724ee890170d0a0797ca406897614d-0.der b/assets/roots/0c0ed0137e724ee890170d0a0797ca406897614d-0.der
new file mode 100644
index 0000000000000000000000000000000000000000..1dd645cc4cdb3e5b9559e20346922dc459a2eac8
GIT binary patch
literal 1505
zcmc&zSyYk<7-e%sCC5UPP{dFZbAG_BCQ{1MmZ1_UEz^j>JyC>QGDRoIYNk{)_2j;e
zX=7??B9pllsnar^(rWN%S|(_=Xl_U&^VGw<&(nAAz280OJKwn%NYj!7Y0%yhC<F|F
z=$>`BK8O^M@&Q9_J$sS2Xu%K+hHHU<BqAKp(}pr&+9nVNooECYXn?MPmM=S=8B1IT
z7-_JMfsQwaAIsxJ5m5kA!{{3z==1~FT^w#Shs)%Jttmv{dyN7$uv=3cS)9{Y9}b6y
z-Noke!h*wC|1M#vd|oJr8^%k(`p~I>g{dLY1t1YgL|5`w^44RfhEBw9;QxGG8U*+4
zyTDo?Xc`0o0@5J*kTeJww1kkC6VCNNu~$!r2&*O?(UQ2a@%j3S>E(SVGJB4CMWEs$
z&U{)GPf!qD$Rc=f_mS)()1QTpj?8{Su7Xa@<Me#ru}x{zw$X!oa&MqzccM-OhBXAe
zvWFzABKtm5hi9I=Q@Jy}XKq2)W7Zk%HydrIO^euHT|NhfK;VTU26HvhZASgt4Ajag
zJ#>oC+g`FP!)M)&O2j=_v?v{KlxGra2^iSd%6%}`DPaYfu=@Hr!zszEVqfTk#@_~8
z`%1;>%FbNrFH4vgxbvHM4`7t=n$6+?<(=bW>LC0LCqG%IwQnIh&$!#IAekbHtVDQ-
zk|1*dkb`#pzsD3Kw#mq9W4yCMCFwm$d69&A)>t#hkB4$`ecQS%XC2-+)+`q}v>e{E
zS`U4$I2o!CB3&YcQx^A{<UO1I7TBj!PiOCtjXq4Jf{Fq=QhIgs%1{nFJ(`v{Znpbr
zf;md6*Jyf@V&kJ`e!yYJjf50)uH7W4`6=)I&_wY~9dQfY*;(Z}(f#EF@~&0vNS6L$
z2`gNBEh~J-qLj_JJ~D53(FUf%n^)n(`nyi|CB60!%B@q*I?AL&X#eemflp>KafB_)
z?6GRfX0b2kdWu->6mp)HuT(X~>ye`+!BuBw(6LJMO2ZzU2{!wPKFuML*0B1xKu=Oe
zp1A;lf<fSN7Qh5BYr)4D!H}@^a+sb@*?i(TANqG$Iq%&Bc*81x0HKjhz~HYiEdaVU
z080&F4O{Dy;J+Q3)?pAD2W+jsqHklk*4nigf<ai6arWjFo5GD27SYU)Ib3nfrkkN+
zzbmAAbW=1`g(vWY8I<_&xwgxdxj!_cGTSYxmpqPVE-~`!EsUQ8V5)=18?to_NL#BE
z=vxWHn1X1}@k{car5wvkZoAyU!b-1d%AQ8)8(iqZ*@9t*9r{+XE#$h6-qd^|uah6s
zd$-|(_3pXC2$dPDuv`kekAmad=@$`Af<q&_-+QLiX2<`OH~7U)eqlJ8&08^QGf`F}
zm^Gwp10(G-tOKa_8jpn%-zaQ)3?HRPyzRstwYH55Xvt8B@E*0ZWJG^)+TAkj%9rLX
z=5M=%4Lrn(j18&q0ei{!;yOEql@WExBhxJMhE{9ctM?JVQjf{6^tN4nv)euXmE<q9
zM}s=%NB7axGD+a==?$Y|xvpjM7$YBUH6kw3UwK=;_YW69JsH<n!q08qlA3PH#xA_f
z02M#<86fpJC(Tn3!-S!Eo5+XSPS=o%Xn%83LIS)cJq6+8P3ednF7tGJN^9l%4PG?K
zQG3=d4qZk^6-XUQjz0?r)d#tbJzHJ}&npm3+FX6~VLIy4QMh27)_AXk#mtZ}LS1>`
zEm^OMOGUUAwyn{0OYzQ=6CqvAFRAdJ!OKjvblEbKFyyHdDA`>1qIYVR?tM%t_-N;6
V_2(^Z#)_>wJtMjXW^vTE?H>b?c2xiX

literal 0
HcmV?d00001

diff --git a/assets/roots/0f4efcf05175b60e4914344f85fcf18b3f826fd8-0.der b/assets/roots/0f4efcf05175b60e4914344f85fcf18b3f826fd8-0.der
new file mode 100644
index 0000000000000000000000000000000000000000..c4347d3f5249399da3622cbe92e6efac8511c503
GIT binary patch
literal 1095
zcmXqLVsSQTV%A>3%*4pV#LU_J#ekQMQ>)FR?K>|cBR4C9L4YB*0Vf-CC<~h~lZ&gN
zsDUtu!^Oknq8n0FT3n*wo}1)hsAZr55@zO61PTX*28SpF<>!|uIOil57b_SmI6EpB
zDY%9y7#SE?8pw(B8dw?{8kibbm>QUvMTzqoA#-V9V-uqivbPvn8JL?G`56qF7`d35
z7#SI6erz!**rmVSU_syB8kY0>lJ?B}+cf=B6<7K+3(ju>ep8i-XZGF_)qT$TN3vLH
zd*2L(JvO#$7UulER;lW}_QRQ!TOD?qJNP*-o7^@2nso8uS;?30B>a6M);*HD#uF_X
zb;D}M5s4JJ$Htqsc9#3`?7ulBTX=fD(BgkHSF)TDeUp%3_Lif1``7)G-=-Nh_Z%xU
zY4;O<wZ3~|uS}TZIwkWs^G~ujFY5B@X9h0cm$t0SN^9?Nsf`asKJ2rS-FZHGW7fYd
z8{HHZ{g$&Xct3eYZBOyEPe<Rk7Od4&`y<C<C$r!N|LLISq?&i#!BZ!!3}5srk@dz;
z-y`b3^47lnc|GuZ_EIKhMh3>kO^hnQ5K%DT2ganVFeBrC7FGjhAY~v665wMIV-dML
zrOPKtSW8mx%=)6PTC?l3WbULJ@PVZHLF!q6sff*>@h(U}o~7}sLE|NZ#`Xn`EejeO
z+v;;t5(}*K^;0s7Qj<&aiz@X}bW1=fNG~t7MBmxZ7MgNYjSN6(2S|Za50Ewnu^oYg
z5fHnEff&Gaq~j0L0Wtt607`^9&bBVD_Q|P5C7EfN$%!SYMX6=^Ksqx&FDJ9O#K3KV
z%L1o1hm4XEkTc55%TXMVT$G~^bx?c}(Ej*jP}+?*j!#aEH;PX!iwD`M2ULZel7JZm
zn35P7Ox{*U*({mT@m@->lwE)GKbv22foiYYziHlk@bStq70#Cj&xcBHF}Qh7>K|L+
zGSMZv?>BkxSI|)PytvG)+~h^d{h*D4$BV1ZTFyJPwx>|>Q&jf)`!;@|>o>KeigfNQ
zKdoiB@BHH2^Z6cAjNI~{7xpYz)*@-n{)yR@Q@gFS=6-x;IK%C{8_SB6yaTS3&Ir4|
zUE;s9bHKVPm+B9df!CdFmtStY{Nbek&RfT(w_RvD{KP5u--bsietc@r9Zb}=a&%tj
zNKUp;FO@TXmAB&V{F(kGzKxv?-gjqB*NoBM*XX#j=l`qP1h#o+uiIYMTP(U~#WS_1
S`G@c9U{-uJU+kk!$W{P-<e4P^

literal 0
HcmV?d00001

diff --git a/assets/roots/0f5b4ff6887b4722adb4859609e6a925212174e0-0.der b/assets/roots/0f5b4ff6887b4722adb4859609e6a925212174e0-0.der
new file mode 100644
index 0000000000000000000000000000000000000000..7031f880679bd310f3a39ef7c48a20f9a5cf4cfa
GIT binary patch
literal 1452
zcmchW`#0MM7{>EWLMKI3inb%mXcwcLZxZUZQgw+UL(<5|Sg9a1O+@Nc>0yz^a%xQ?
ziAyh2f?3_A?xoVIOH?=0y0qG|RI8@5x*QBOep>&6{q&yC`@H8p?|IMjfP9?_kPnmG
zgh2r))CfJCulL>9Z55G&zSWuGqXG?d^=yQG!W9Dm(AR;04BT!|PZvgo>!P4k3JwjL
z?*Ia2LSmlgvXj}dJd78c%VBe)cue+L+!4@WM~9*8{?o}6PYjvO-X3IddCXYm=_nop
z<9Uu3&*n0DsTe$na{|$31~?ZS9_Nh5JL2&8a5Do3Jm|EI1Q5g%!vC)`_)yD_9{}h;
zV0<VN0`j2<C?5(yH1tk6A?Hhl)D)rUAV#Z2i-kvC`bzrC-knci6Q%L1*tlSVMREE1
z<g}Mk0HpyD*Zq$1DMokh_PWJOn)r6pON`$hvi3hztff`?%c~7v1bA6w@5)6<GP7bF
zUEmwjZ_lWjJ`0vRGlIW0^KEUq)M(ylHZ$ULW31teI!!mnzvfiwbJh6VhT9Vw_l`$j
zf5VG_#8s;^ur8erMeks;TWn^G_CS^W8c}CKx9M8)@_7Qiw|E_EQ+)fXG)Fq@%6CsW
zc6*Q<6~eLhc<>;6p+DzD`(8S!Z!3-zXq;EQ{Na2>e)i~QBqnpBIKXoKv8cN35iy@g
zO%wa{#aRm!=JDYC{E11&w3s&qb@HdAOK$GeZtGgw;!mh&zStskNu+mHX_@8;N)_PI
zt-beJ7*$FJTQ6XO*hpu}06`yRD;~MpVbf<<Z+<Z#L_-|%!*V0C|9s-}+K+LgmMm$b
zm+WKEjEmx1ADbk~yP1{+ON7aHYav%WgZmwVQY2Ly&g!wLv{tQFKIO|CFhm3=qS~sE
zPT|eQjgs%tp*1v1;duY=L!%+uO1B>BCfabAhZuT#YnIuPZ!Pxg-nB~ha$V9;9S_%)
zCv;t3Tljv;IHAjDJWlm!%c?|#IQe*Qt4+n|+*;+}p>Oc1VhO##rTY_IbybGpQAimS
z20#GiNstU0Zrj`f2>@Gg_;!$lAaaLMJFEl3whL&n(=dda!uRS8gk=aDIN}5MU9?@}
zZ|}B~8mvGgT|HY}01oh-On{vYkdJ-09lUMd0g$R%_lSFY@<dmZZ*oWSO<GVT<;U%z
zgQhxRSPf>Tt!3uG9H}Bdw1(kTFNRzr4^jsyF0AOl%Lepxd+)nhM&d;ZKl6T&Ywy`T
z9<Q~gQo%Y)km10q7XAFFb#$~y5R==fD6ZC{5T5^qnDr02!lqWXHOhT!ax%tBf)6oH
zW%@oNz-!Jl7Vu6UnvlI()lyB4wy^FaN{!XbOJ`rkyr&dS`JcnwP#|B8Ou*iU?VBNr
z8ffA2reDU)Y|Tzgrwph=3tgS+x0r{eQrXnYK&4X(skmsBg|-;}XKsDT#{$LrbtP=t
z63ev}F4Ee;cLzxm7em{Xs#S+nk$Q3g8nsfsfowN7+g;;1p5B2~ZrZyJ$>jCP76&ia
z(lMgy=D66@W!IkaJi-S`Zl7=c9%)ZuhPZzu7KiaP%C^%VQP(;YXkxO~QM4iT-(OwG
zDN}DMKEIiymc=C*&x(IQF!#q4T7|Ax+1PVBW4rYQ^V63XWx#5JL>3p&5U*^E7Qgk#
zx!@Lwe3R4ClRodX$@`-(h`^nayRbTpYdiJ7=A?hh{!xXOC3~B)W|mea6`A6^2<OtJ
z$`=SQTQ)|5Bt`pR16+>_=oyUWI0v%bb<@OK6=P}2<AF)N`WpAFSLO4~02mpfOkL(M
S%RRl3!n(uKo};rhNWs5k+;U6+

literal 0
HcmV?d00001

diff --git a/assets/roots/108abf716ef774bd28f3e2cd3949cc2eaa52316a-0.der b/assets/roots/108abf716ef774bd28f3e2cd3949cc2eaa52316a-0.der
new file mode 100644
index 0000000000000000000000000000000000000000..a0cd3ec44f13a7fa3d5e42b15a32a6204d831746
GIT binary patch
literal 1400
zcmXqLVl6RfVvbqB%*4pVBoLaP`gqID30cyd7jx_m<R}>MvT<s)d9;1!Wn|=LWiSXa
z<Tl`BV-96u6J~PuGgLEB0dcr^WSv|+y*&Ng6`WmzLOk6(ogG756&yoDJp6+^Lm~}j
z4WvQpn0Z8;yqp~s+;j4i5_1%S^7Bg+oE;4f<ivRmEe(wfEe(tf%?!<>#Cc6jfLtRe
zmqxZWF)1N?kCByuxrvFN!JvtWi>Zl;k>O(+$KIPqMH5fAusANwG%uGuxS{&j;c|}&
z!bK?;chpQUohwn<@pw9;jeFxKzC|;5=h>S-klZxklbg(>jaG^0er<P~$J}<^IPdLu
z*Pb%-dwJ6)e!pI)-7bE$+w@(_#G>#!35O5we11G#McF@@EBRYmt#{~h`-&9LOrhxy
ze0VQ&E-*5%`ZfQ+r#VN3wDe@QvKZf5Vj-Ay@0i3lcPk~wcBMZ@IyFLW^ei>t`XMfM
zYK{5d%H<QqD=cQNjd;81-kHu?<~f@?Q=dP!-l){p&z4)k{&%8K{f2CrPTrq8PM1Wp
zA3E{H^kPbK)yuqD8rKZ=K9jyHy1wProa3jy^1b>LtJ&V4S!}saPbJ?~am~>ynW}8f
zYpXn3g>`t@cH~rs{aKuD)c7@g>8Wt1%$G4LiSHj7Ncg$T2+glLH2H?)wtF@1U4nj|
z?zc6jFmX@u()lTL!T*I}T~5{hW%jczZJERtOKeVG6K${4tetMz7_+l(%GH#+^ZN7F
zy{L)aay`r4<9glZE4qDQWq#)~KjyjQTv2(|tFlmH|K9L_D`%Q+y)96_!`5ThwS&(;
zD%)MZ-#S;_=8D5!E}p$#pZBU>Yb<GZyP{dT$SLQ0ap&{e{Z(G_mz7S6hMvElUlV#^
zNjJNod3^ISweV$((RKeKGT2wXth%}L#s2{L)rYnmIQQb!U;e$lzB~35GBGnUFfMj7
za4?VsCSF-S7BLo)qwn9IxzVe5%;U-9>mqu~#U?+U!Dzq_k``uU{LjK_zzn1e_&@^u
zAORL&wqiq0Wxz}XOl6D=K}~BEP2`n7ExPe@$9i)!h0crS%-1sK??@Ebwa9Qrr2C7D
zysC1djyw;vLa&Ago&NFUc;;eR-$JIictzI)j~LEAPl1ChcUC54GktJA;WyX9v*e^v
zK}haF_dk7G%;sI0v-hsTwcwKyE4PO2EbE?{p7w6<jDPFi@5}q0@a=EpF)e9(Wv?kJ
z2I?m|_q=vdnRVKBpa0dWbA95clMddzC&yRy-?_~sXiuWOP5kbgWm|&xOyB&k%ST90
z`}6g44;THvTV3$mdZF)<WTw9s)2G_A7A(lVpVa8wy(N;@t0!d6(cO*n&(<z|&#fwF
zrEpv3kNk{uCax>RF2c71Tckpn!yYiym9YJ{I8r2gd4+w3VeDnj<9a>O$q!!Kk-PLJ
zQSQ^dr|-YbEKAUpn^IJGj9bg-_$0rpZr5dhu9W0D@oVb2T;&<7xGmPs3ggZ1{b<P0
zaZr5DSxGa~f1$w(9@rSiPm6nG^zy#(ZZ@x#H(H9%m0voxrto3RVp*QuT=(N2EiSxq
z%RFj9h4z;#wXe(Geo8D@nmX%pr-{Vs-$i!Ux7b$3+>l>rTz#`CfM>G!s+>EAnszgV
zo2{Rru4NhUa6{);)#-Ka83J406rb8W{i4d9Z%GR@E^l4DBV~I>lGFLQ!DnagOUdZ>
pmlN{%eo6E242@HtjJPNFX!_eE7@cLEmiXq=`hS}Xbo7>e0s!()QGWmc

literal 0
HcmV?d00001

diff --git a/assets/roots/1336799a38ebd57730aa49f89be555490ab47bf8-0.der b/assets/roots/1336799a38ebd57730aa49f89be555490ab47bf8-0.der
new file mode 100644
index 0000000000000000000000000000000000000000..ae5ae3529cda00160f9576745bfb0168ae9309f5
GIT binary patch
literal 592
zcmXqLV)8L)V!XJ3nTe5!iIbtRO6PsQa+Qk#7aNCGo5wj@7G`FHC_`=oPB!LH7B*of
zuK+_e0~HX5OISA8)!E-yA*86ZxI`hivbZEQw^+eBUr$HDrzAzsP}x8cq>fow3aZX0
zSi#lVSs^GtzeK^=QNhT-$izTSoEJzM8XFpzni?6KM2Yj7SQ;1_nn1ZUwY$tffQ=pO
zOD0A(R_#U>1|{Ys29`H>jvC$GTW%umabfGtZ?h-+w@uND?<y#F-+C*p^J3uLEg2Eh
zEO+Ob2y_QdnLl}nID=m$o1yr|5_^+;qo5UY;;i+)c{6JlMY1t$(0Q8p`sD}JlJ}eX
z?+V!;3vB#3Lp)<~vO%JOEHG$f`B=nQM6AmMt2Ij=`LX$gH91^R)UVon@~VM6NLrai
z!a%G6y8=Ft0)9ru|12!PsADtW2l0hLd{zTyAcY)(%$W=ZX-tL;cOT^+e{^lK#1`hq
zMw*UK-_^^%uH@KjXtRG#`Yd7J*^{`e9Og&=7XRw7{@Br@tOphYwX9|gdF#LtRlUi_
s*zSA&6<3L;>uujAcKdfm|J?CWgmu&OGt7mPVh^O%FJb(+J%IBX0Hcq%O8@`>

literal 0
HcmV?d00001

diff --git a/assets/roots/14146f28d9038bfbf04a2093c205456baf4034b2-0.der b/assets/roots/14146f28d9038bfbf04a2093c205456baf4034b2-0.der
new file mode 100644
index 0000000000000000000000000000000000000000..96e02ca8d4c522b0f0b31433a56bc34a52fd3a38
GIT binary patch
literal 1551
zcmXqLV&gVwV*b2<nTe5!iIKs8myJ`a&7<u*FC!y2D}zDfGDB_yPB!LH7B*of_aH-l
zpaLL=U6{?WBqKGi*wDqm2_(QJZ0(Vnlard4nXKTLoS2fD3uGkbr6>fY7N;f_C1)sj
z<`tJ@mXwxc=I0eFIHwks=qWgsmSp4?WtLPLIvCi2Okox_C&iSY{QMGUM+GATLsJ7e
zab6&4ZeVU`U}$J$7$weYVqjoqYyjmB9gj3IDIrG!BP#=Q6B9p!K@$@fQxh<T4*ghZ
zFWvda#)c)<c7oZ4iB^?1X;JTUEg3zfwroFN@2ecVeFDQ{VJ(eih94&~Jl1%#PSNq4
z{H?#WLeY%P{5v<q&wThvsJX$H&F=o1_0Jb}WE-yk(0xI|c*kwmER!!x4JsO3Orlfc
z%CvZAT8Tt|JAFEMkFYOehxrs$X{S9(H~JP&i?h0EbldL52Z7YLB@gwN*Q{4J*{xYS
zd)s-=6HhO5{pm<eE#bOTEE99qVWZ5IZ7n@M0p~ONRz$8lr0&<W$n>tr7y192%CENT
zuga@cQGb5ywA!<$|I*o$Z@BW_wTeu&jHsG4v&eQ%OI(NIj;mjE{@g4G@~_yj*G9X0
z>Wr_OFJ_!q5UKNtiGSYx^s8y3r1^D0j_qmtE_<D84rj1B-1tNM^dz&`i;HiRN<ZvY
ze^uq-_}5jEZLRuDzk>ztcel=O3>JF2vBx9U&{_O(&#|iHY2KO!el31Ul5sZYrcYQ}
z&-i-ogCE_UcU5QDPTE%Y{^rNPz*=3k6Pb~T57uPu&@vNbsS4O@)Ur?iPSMrtvSRK}
z+|v~7zf3#2zK^kLDSuVUS6+$so9jBR{%SdBbs$qi_Y-eM;Ht+<%a1LYz_-x6+fdp4
zAScJ`yzdpWuQ&Z^QJCo|xlPDz<8Rkcv6YKc*UVw(f0cblUXQKlO<RZ16W!bKtolzr
zFke<Pe%^5CtkXhq6K*DEMh3>kP6iGJ{J<<DE6m9FpM}+c8AuuMfdu$L0xZDn%w`}9
z;`6bHv4|9krk^-*a&KvD(FF^Mtht{HRYJItQyDO;15+6zL+S3^5bsq25pE`*lCF!H
z#d5@5%{kG&cZ;6eC&M2#ubj3{77M+zkVk02t;9P1h=}5pqT?@I`|hm#q-KAtvS(v3
zhjHVEFyVdA0%LB>=JNNR6Bf+$(*GN8!Yf~=&=)n*ii($|t<IEx+A-l{#_^v~|9<Iy
z*?;n@tMoYw0WI^c%EenAbLO<RP5$3GO}(PAKmD;=Nl4#K-pof{UwliLfr;kr)b#03
zHXdEQKTG+=l_`&0G?I>ZKl*Uvk!H43L7htC<Z6FrBUN5k742zT+_Lt2aetrHe{hY|
z(e%&xCYOE{C-=M;+puDZo7RulLT`$;y#JwH*AsN0yCvkOzTM-{6?f7$-h3E;V{=cW
zN#v5%{yDqlC2p6lzHxfe*(nx@eC%xU-fjXPMfdf###no4H&*g*$(-*QFx~e%Us&vc
zsac224ohd8{Hk@web&BB=Z>nr_{F^Q)=#m#i7j7cG*0|cJ9AxTLfG>7d@GhcXDd3n
z`}p-2ukv3cEo3Xk;lTgV&FA{6YL0_kUvt&(G4-E1yjA<u%hx9qgDsYxvA$7mZm`Jz
zX8y%b4r?8&#E)L{GVR>%c(tajKGe6_YiY5<0ju>BKF(6<yV+NGs(MG;txf$i?PP^{
zg#_PSS^eRqXc^O!2lrPg$VDf%rZ}veFr9a8@TDl(_AG|!sYzS*<!3Gbs^j$5Xzez|
IdHePN0K<fSApigX

literal 0
HcmV?d00001

diff --git a/assets/roots/14c0f884650ebfb1564d3da153a0d7f1c7c670a8-0.der b/assets/roots/14c0f884650ebfb1564d3da153a0d7f1c7c670a8-0.der
new file mode 100644
index 0000000000000000000000000000000000000000..cf6588c801db52a03751774b92da032ff0c00fa8
GIT binary patch
literal 993
zcmXqLV!mt8#B_84GZP~d6C;BGFB_*;n@8JsUPeZ4RtAH{enV~pPB!LH7B*p~&|pIW
z13nOkLzvyMD6=X*FVRrgKoBItF3c62oL^E>oRXN6YN%?U3=-rLmI*FNEK18v%}G%R
zNlnhk%g@PA&rB`WQSi)5)-yCRFaRlI7S=>43(C(gQE*NzD#=XCOinCGRd6gV$;dCt
zEU8q`Rd6>lkQ3)MumnOw12BjZ=QTDrG%^MvQ%h6Js6puBCPpRXU}a=wU~XdMXE11D
z<YH=KWMtU;_8{}0Z~cFmHs(jq_qaK?^3kI0%!y$VhuybbKV@sG*XjIyVdm_6T~dFA
z73OU5EH}~&`@8c^&t0WoMR(K_r@#9a)$%4!a%ZQ`otEgUCBL)dk9IB<2<mhT{j#G}
z=2`udkagZaLW{zgB!7q(M!uHQU@tj3*JEGKmM=>-d`>a1oOIxgTU`Ca++d%i^=IX|
zlXqLq{r#tsVMb!fd9@~o<j<RmvLtzDp1Q(UddB>Bcjv*#k4g3Mo8warek|YaTNWi(
z7H4wc#k8=QU7J7DFFCvSj*(%_#Pbj01%G6(@{GASbIQd<kCUT0%eICkJ@hV-opwd-
z3I|K%g&BN&&+h#>{6>DlM<!-Q2FArs1`Y=Nz|<fs%*gnkh1Gx=NP!cZEI&wq1(-nD
z3}itH_*lePL~3}9<d@$xs6SGhu{deP!gH(Hqt%f^8JKv1q0Go282L-ppE-ZZOzT<l
zO|6z!%2=nwJ=B<-n-t4=Xu*mr8%ixcnq<v=GQX=$E%2Gn#bdg8Qx&`>F}~T+m0oT5
zC|$2-DzloN^IR{(Z+u&Mc5i=VUaz!^VKHBI(C_Ts)<-T^2Kt?y@FksH@`R0B6)$7$
z(TL}{&sq({XQ><!c);@g!KeBwtGNC<$(p~N@-!t<NTJ-~vXPxdW9hWwUm5)yPoI-N
z`sUZ1y7P4#KeFp?`?LSllKmH^vwH1$C85DIVQ)wUr()sdi?y;h#Wt)=w7tN^p!DZ>
z^=Zx&S8i*E#_zQ?Mqg)~is-A=dN(1mIOV5VNu27!uW77$^_HS5wSEV5_qAqz0RZW3
Bb(jDE

literal 0
HcmV?d00001

diff --git a/assets/roots/17a7d72a82ce8c8116af6a12f0701505259f816d-0.der b/assets/roots/17a7d72a82ce8c8116af6a12f0701505259f816d-0.der
new file mode 100644
index 0000000000000000000000000000000000000000..f63cc7f924172a45ebf672c6576a7e9e4a9ac88a
GIT binary patch
literal 480
zcmXqLV!UI}#Mr!mnTe5!iI<7_Y28=*$$yt}DsEb4z{SR))#h=|mW7$gAiz+?K#7ex
zl!aSZ+C3*fDKRHFGd)ki)!A7gC_leM!P!wkS0Tv6P}o2aq>4+J3!w@o$c!v#AScdi
zXk=(;XlwumQR2MD76yifmIlU#CI;qFG_Wz!K$wjk>?0;dsMnYo*_oXfSauw%yxgCo
z$~RxnQc{L_$+}rjE!jE6P9<;L+4iF={9yPwr(eYjzo$C=mpjO?DX*CC|8d2q5=&Oy
zEVN&7W#_pb*~Lx<4hDQckIV8iGX7@)1{h<T0Y8W@4C1pIFas$AS&#r9ix`VY$cE~*
zt~(w%)c@wn`@PTjq|M@%tH{C4?9O1|!la<&UsAL)Vg1Kva~6oP2E-qZv(8H_dB2bG
w$UX^=$iyZiCIz**A;}K+%o766pSbaMZqqvR8G9D@`}nLh(aw4Qd+Ka80AMAQivR!s

literal 0
HcmV?d00001

diff --git a/assets/roots/1ca566add30938e8135505ffd08b5a70c488b73b-0.der b/assets/roots/1ca566add30938e8135505ffd08b5a70c488b73b-0.der
new file mode 100644
index 0000000000000000000000000000000000000000..d1531f6b71365c0191bf906512a9b889187a9a4b
GIT binary patch
literal 1476
zcmXqLVm)Bc#JpkwGZP~dlYrd*$bcOu8_a#!zP}Fj-}=^omyJ`a&7<u*FC!x_D}zCm
zA-4f18*?ZNn=n&=kD;Q0Jcz?3Ea6yOoSK}k;F4I9s1RIPT#}kwtPrf{sAs5dpbApL
zEiC7pT2xY+s{o=h(=wA2OEUBG6dX%SGV+TuODYZJ4P-$InT5rm3PXxYf##$r1m)+K
zC^$PB$cghBS{N7`ni(1y8W<W!iSwEmBXI}RZB0x{$U()(%D~*j#Lr;R#Kgta#Kg#O
zQMYgRcC%Nx<`d`pO<vCWM3Y(doJ`aAnwj$*+0MRQyz9ViPMw1__ciOhQ}rh=zrvW!
ztRb=Z#$48eS~pxjPP}*D`a%O!&v^^}SIc861eY8<(Hf(A`SPacs^<kmrmr?VAXg^y
zo*{U?<sFfwI!daWi;DjAZhmUVAt$0`&fQ^iYQvWkhZe5eb8w$#dg!A+Ya?U+?G4x2
zFroL*Tk~x-Gds3kWu9d#%4=)2VukC6seY=FvS(*x?!J7+=w$Ev#(!&TJ9qC&5I&VU
zHGRQn$#2YISF$dvKU%o9`Gc2`Qn?Ik@gvDXrvq<F-DXXQc#zenz0}QsrB8B`_~U&m
zch!e|RAIipNl~MW&&<H5@~Y#kSu1v!?&7if<RY!m@%^akb=zZ)?VRtn|2y*PYp|V9
z>VIpm(-l$K;_<x45BvMg(pvO3+*j$5+bnzji6$zwp^tl}nqQXsz^Scs>16K~UWV1_
zni@A4ze=)fligSLuPEk7>#0i(j`vwtEWX+@!Jqr{1N+&Mm&`luKUD|G^n82x-G+U7
z58tB5MxIR*Y%f2KbbHIca{0Z6?5I`j+ayo#3I9A@v5IG-c8T5VTg%gReU8kSXU18U
zmi9-={*_0F%szv?4FUUWww`17#*=vSxeD`x$Bd19dvCOwbnM+^wxT+Q<EcwSPyP@6
ztBR*&WiI?avbFu9mEZBQt)?DZnV1<F7#BMkI2iB)6S=G~BjbM-Rs&`r1y1#{d@N!t
zB0axlO7}2bp6{pUar0+F$f_fo{eKzofz<PZ)UyDyC>wGr17=8IDr02uSag+vTknGX
z9+|6KLp<f8vcEj}^uWRV!5NY2ohN^pZY>p`oW+{iI_IpvWJR=O<L6|%!{?&=zv{;^
zmI>SIFzh@#Ey&U{m&NbsOa3<Ahrc$*Hwk^TI+w<#Vxs-x%&F&@ciQJ3GPz!P@pAc&
zRgn?@=BoX&XtSH!)t(amRNU&(&)%JnjVlgLxUu8z_U6DRN6si;Wvh7>c=@b};el^%
zySdl?u@zv|vi6#&`mX0nOM8RX9?qUsR>JWwOezBo3P}FEtRZ*hVxWQM=5-U&ugP;I
zZ#=s4n3G|$_>}jVr}cmJh}0f&mgv0s!N}oR!y~u&r;iUZM6USxLSav*4xhUT_p9(j
z!DfG!Us-Q>_8-&J(qB8(Ie&isYJIA9{z|3O9Vb^^bhkAtUlEy-t$zN!`oYI4Tid>`
zt26T5P?>Sj^2LOR!_9m6b*@c+eU9g$!tq<%?GD@T*S}-3<hQos+4O$zFOOecv48Hr
zYv<C*t}<!zioa6g@*k8<F*;rPHSg)S{^L8AoLMogHs!ZUloxYOw#Bg*%+9mEhwt31
znK{|w3-hPlznikz6)pzJ&q`sco{@Gt#y5)pLd(<zHX_b!r%v78;b?X%%O$;i{rbnQ
zf})umoA!xWPFKkna=n-y%emsD=&fIumc<Jv%I|Movt{jC)+rp#a;4&z3#}&yC`T@M
RYcnxqZW+VT!#gZ)0{~~|aA^Pl

literal 0
HcmV?d00001

diff --git a/assets/roots/1d236f8e064b971fdddfa11523e1aee502be2b1b-0.der b/assets/roots/1d236f8e064b971fdddfa11523e1aee502be2b1b-0.der
new file mode 100644
index 0000000000000000000000000000000000000000..3cdad66612f4e8cc4818c314745d0fd7e5429ef7
GIT binary patch
literal 969
zcmXqLVm@ln#I$w+GZP~d6C;BGFB_*;n@8JsUPeZ4RtAH{W<zcRPB!LH7B*p~&|pIW
z13nOkLzvyMD6=X*FVRrgKoBItF3c62oL^E>oRXN6YA9tO0TSdA7Ie>dNlZzp)Jx9K
z)lu-wOV%?qG|&ghF$-(B=PQ6E6@v2fOB9?_i%K%nGLsWaQWYFaOEU6{GD|8IbQRo<
z4CKUl4J?7s&;Sgg#CeU)4ULR}$kfu*GHQ^xvWZa%Irtb^8JL?G`56qF7`d357#SJ%
z7bbCh{1s{PUHYWN;_nTf5igaRg_j*waAve_`S`5WbH4hkZ!OY(3%1-Ym~q^QaU-i8
zyWhJnzx?$h4V0d*mJG{&)WH7dvsh_^WnlHwpQhVN{8sih2|w9pzmmE6*P?x0qFMF#
zxDRiW6k$E}>hKDdDb{W^M!cUH(v(j0X6Bmp2uf_fyh$cui^VUdo^zM)y0PEmvU?p{
zbE4+=2JPS_laew6Raq0ITpD|HRyt2pzQ4w*aTcHEQJIx5W97EZn`gjfdG2FJ!*B1{
zGe&P(lblsen8MT<CvLGW(6Z0l_+m~6W9|GaKW_);Cd}Qh^E_hpj(E2}=Z;7-+i<@2
zG>pk~+x)<tiJ6gsaj}zug8@G<0muq7GX7^_HDCr(;6x?M4-#MjCPX#^S&#xg7BLnP
zt68n=0_hst-hbQ6>X@f+aLO(Id&r>-Or*e2W@MOoJGS!b&*_or%!wcCtl11pbr&l1
z`KPvT`Mzw<o*OUqFWioLcfO>jc#DP8E!OHEOr<;iF5P&2-M8!agii+x)OERCoc?RO
zp0?oX2^-WKe!iF=_0oL)>L>SeHn)n;wY{n0UpdkAT0G0^hUV3?m~^)ae7P~<I7_j^
z+alEkE9bwNw>m>;X85swAuG-$dtLsriJBjr{lsYTTZ<PrQa<a{iTq)DHUI2?_6+gc
zN)s$}t9mbne9U|tZ+xoCwwmklsrq=!r;kc^9W9eEKBx0R-)HUjjnB{duQ)Q>D}?Q6
ueeG2a{zo$Z>cn@fiTid%Y?Cu5kMFnT*;{6|q@Jqkc=X6+U(EMcGG75Um}y7=

literal 0
HcmV?d00001

diff --git a/assets/roots/20dd24a4280ef8840064866941b494f3f30de194-0.der b/assets/roots/20dd24a4280ef8840064866941b494f3f30de194-0.der
new file mode 100644
index 0000000000000000000000000000000000000000..75084805caf9a934724bfc907024692a58955f06
GIT binary patch
literal 1519
zcmXqLVtsAU#C&-HGZP~d6GzxK&9f$ZD!v);vT<s)d9;1!Wn|=LWiV)LGUPVkWMd9x
zVH0Kw4L0O6-~n+scvwSHD-w$h1q}E=e0CmokNnc&lKebF2?H^Z2p123aIlYpbAC}l
zeo<mcCQ!!Qz!W6I%%caC(M!(HRd5Yc2+GedQE*NzD#=XCOa`k{a4ap!$S=w)sZ<CG
zc2o#5GLRGJ1!*=mG_)`@F*c79=QS|`at)x|!QsdzCMD#+V`ODuZerqRFlb`pVrpVy
zWau|bb$EEq_rUcnFWqiszcO||>+`d=cHdrI+Yh%Z9=0vLxr;MA<88Rzf(smu&CfL)
zRpcKRiC$oo`W;uGyy^6O%g5)B`W>5;t9Gn<_vTybbGh1HHkz~k`%qZ;=CI7m<VE5l
zbKgs+Uv3R$V!Gye@=Vmjjo<T)=AXP`-Ql=m&fe3jZ|7EX$}jRMns7^-<Ij1UkaOw$
zE6&GGljJ_~xajrTi?y=q?<c($*dP7cdj0u^y9X~#V~MV+Te8x|qHIZ0-vZ0HSLNqp
z86x}BbnMs{EoM~{%$)wJbvyqwZtoKg4+D1Tb)EjsKTGL({Va3gv!8s0vlTBMIHUAw
zq1!i?%sHnLP1zapuO)H_zS_0p+sn-fPknd3nJ<!dGCbn;+4jsIU2Q_l?)%e(%hr_F
zny9okpS`|n&IGCXiaPZb+f#Pjc(LqD#pck{EtiarRIFRvpLq8iNATJ=9e+fh%;J4E
zU#k3^PyY@PQQM?BZ5C_{X+lpT%c6o0FwIybpq=4T-B)?e*sE++bfcK`)~*{D7^>rv
zws2l+OXgd~I@NQRMt8^LO(rromW1YQm$`6nW~jCD7o`V3HPh7IC<K(>_Tui}_mnB2
zz%lO1x&TWh5w+8stcy!R-PtP}Ems%_yF6v-S~pEt)ro&+@R8Yn&OVX3XY*_IH8wB#
z^kp*)WbW$Rz9TU;Jnh*3nC`Hz<xI?s42+AD4H6Cbfw@3dn33^63#$P$kTQ@52`IAw
zb54WE&xGAq9$z*2w&N>XgX;3)+isaF<{8L>6!5W#v0#@5WkFefkbx|~+}wto41swV
zm<$;i!Z!Dv=9=r-w|~iziM!LpSp#R3{(c&uQ#J3S$gkCxyX^i?)a+00zOiLx2qW*l
z$!+>Sy>gGoeGUJ4DpW>jpF6+V(fe83Z<ii&SFPXqG5JS^ZYayePrVzKoZn*;CtvY=
z=>mm<4J=2ue=k~oPl<Q0v8r27$|SYNc6!OvZq4qo{UO15o%u{{ThoJ6EbM^+*Z)tt
z%JcqK+x(f=UvFQZ@yJqb%C3y<`<pMns!F#_N?)h?wCKg7CvVmXee>3~ng4Qw!)J?-
z&40INoVazYKhS2=?}>M0p3k29a64~N|Dz>GR#yCcEwbjAGwY#LOAQI8!%ds!vhGWL
zJ1su7#O61rsb2LQ;lI-SvBz^8t-|=vSU+6Pq_4Eb?Ub9%0vVrcE?eUCVnow8AF65o
zI~J6<Yh&^M!#s1I=44H=7dho1Hnrt*<jOViK8cfaFIt~jG?hnbS$evQ-p-qsx*RvB
zaYy~GRbKi@YQz6~vzw>rU9`VHY5T<Wtk$W=7vyX_n<R92g7jn6b0&N8%gZ(j9RAKK
zb>Q0ik|YoD@=2K!5@qg9Z72!pmykL9nfb#0CC;U7!4g$mdYm$5^C$jo>QeH)$QPh`
z_cSw)_{nAl4nI@huI{%Vn5LxZxYVDXsy<D8EvLbnZH3}_-QwS5IIrkh&sbV`IYjto
e!soBvY5u=HzEcqD-LfWpqigcQHDxOg{RRMDgnO?5

literal 0
HcmV?d00001

diff --git a/assets/roots/220f44b97081f27eb2d32757ef0242567e51fed9-0.der b/assets/roots/220f44b97081f27eb2d32757ef0242567e51fed9-0.der
new file mode 100644
index 0000000000000000000000000000000000000000..fed8dab45f4189d92f2ea62a549206841bd10c3b
GIT binary patch
literal 546
zcmXqLVv;jxVqCI-nTe5!NiZSO^MRV)?$DoH<z0n8y>8?faItY{wRxPgWnpGE2ryJJ
zP-0^aW#JZ<cF)OAO3Vq)OwUtrb#_(=%Fi!RaCTJCRR}UQ6gCh9sp1mmLa2fXG9wEb
z$cghB8W|cI8XJH?lsK=kg@K`=rGc@biGg_(4Qwnk5MW~m`-q8=ja9pmg+YlqiGju4
zm2cYb+SvUsEiWqmn9sfKYPH-XE00K-4@ri)2dXswNiC1ryzR{N=dM>GeqAijbzXF!
zJ=KIuzUuC48{>sX=lU+mcbsZbe^RdH^~HIfliH`W^H{ZdrOlrkIoWr5B3ql+VkZL!
z13qA=$nrBX{%2tU1~;1lKZq|3;<Fks11SSpkN_Wx7>kJQGfj`#uh>s1x_GJG%e!}}
z`NI52<hWqYU@%B!GGus~DReUL_A$d<oQ@Bt|M>lP)}vaXlW%KME}v#q?GC%S;CWoE
zA9wSd=rYX(oN9_$NlXTXm$vrDys~~+!P&Z^bdvRnn7<zHc}tX5a6HO8>Ur)s&z|Lp
SnIFGfKh!$?Q~Pt;1akl<_O(j@

literal 0
HcmV?d00001

diff --git a/assets/roots/229a8437e3d9edafce3dc9904897b48fdeb436d3-0.der b/assets/roots/229a8437e3d9edafce3dc9904897b48fdeb436d3-0.der
new file mode 100644
index 0000000000000000000000000000000000000000..6eb01cc84d343fbdcef5934f70abecd93db5593b
GIT binary patch
literal 580
zcmXqLVsbEOVtl%QnTe5!iH9-7<GteF>5;r&S-1?i*f_M>JkHs&Ff$nx8gd(OvN4CU
zun9AHgc=GO@Pjz)JRDA?DTxKC#U+Mf1|lFKE*@Ur%;ci{;?!gXpOO?kLvaI9ka!{w
zUzlTvN2somv8jcLiKV%roPi8Tf|*A&RX4aQGd(X~At*n;M8Vln!N|bS+(1s87f4zd
z85tTGm>ZZyiSwEmA#n%7Ns$J^Z0z7LVPb>^4l^S=vl9c$v^%z4H#St~A5-7wGGXK9
zFwyEhXO&v1mdJO>8Jmv9wO<hRkXtcf?cU%;x9(X@Se6i<VYIc)@qT->PW91$HC4A3
zCmSS!!&Fw7k?}tZs{u2RGT;LSkSsq)02l|1YzDF*J|Bx1i%7emD96QB2P=3su0MC|
z<b?P84Ok8s$b+PnStJa^8n7!sicw}y1_L)HMTV{6cdvJaa+^JDbNO}UW=8LhJIY;M
zyjS#VUlqUE@0+s%sO0q0EkeJZZ+&sTZt|bcrv3STQ8iok_-*=Av?@CC=kq&;07Bxf
Ar2qf`

literal 0
HcmV?d00001

diff --git a/assets/roots/254d769250bbe91e2178c18a2240319eaf17e365-0.der b/assets/roots/254d769250bbe91e2178c18a2240319eaf17e365-0.der
new file mode 100644
index 0000000000000000000000000000000000000000..354b34647652cde4cc2211846d3c95630d4626ce
GIT binary patch
literal 1415
zcmXqLVr@2PV$NQ`%*4pVBoMmvX8IJ3V{dtWso#xe^p!B+W#iOp^Jx3d%gD&X%3$Da
z$Zf#M#vIDRCd}mQVJK-J4&rd}2>5#jhqx-Z<(KBAB$j06=NT#*$b+Pqc_biG!Kp=M
zsYMDw`S~RZLBWm+?uG_(;=D%22ByY_h9<`5hGtRXye1X~rbZ@Uu4xo?Eo)*@LiP+J
zD+6;A6F-AN6B8Fx6B8rDs&!vhH=Y0e)SUbI)oE)dyzth%6Pob&%%07AbSLe6vbgGF
z<Cb|vMb7u_S97avc~>o!`CH>cQH)n^=FAVtay*wd{=e2^a^c<WH6A-(Z4l|Z!M;*u
z#@&~k`&KAPM_OJ~Z@(jR_Q&tduU}5Cc*}pzyhg1&Z{ZCcMV}{K{>O!F@{V5>p1x_t
zZI#UCu*;dJn}l}HmHza@<kJjotv;6YZ;#s-%C5~jXI8=&XKa1?cHs0WSyOG!Nkrv&
zAN#}JuP3$B>wAic=AC7|0S|k-y`OqW=jk;F*gu&sooX+*<yCm*{4ETxTUBPNd{vw~
zebsN1dZujA32S%Hi;}Eg(sSciuErmW<BxsTW}Um~H+fRu8J_h0+}_j9rKJaFoE8`C
zi~PQ3j`YsH443T^>z_U4PrWmhbHikzt@3tLmLBgYRor-wQ$@??(VjOx>F$R#J9cvI
z`gySAT#tlW>aFkj$9k$WVz}QWABgk*=yztmKL5iPv#KV4d~o9Se)VUmn$>0xj75t-
z&CPD%$j~-p*H%AMaU-jp&%NZ!ss+NaDRp0Ni>&)?^+f+*>f@bN4mls#wpVM+zWy-Y
zqIk-hn+20~@3gFUlUY=yW8bLe^!&<=qd6^Ug5BlWAu@}%-Vpe(PV;*@M~8UKj_H->
zUukQ-i!gqg`%-gNDkE=`@EcX`SRIEVQO(N}biPYDU(NcE$;8aaz_>WsAklyym~Lf-
z85#exuo^G}DR4rTRc4Ve5Ni<mbn+lSZ!*K~H?DkM@>@4<HapALYak2K!N(%Tf?b*q
zB+U;pkOi2_+K`hWFi!!KAtQrHdgUgoV^3|rD;MqLd_QTey8Hq^u1#NWiSsOKy;L_T
z@ULj<^_c7wv3Fgrr+A#rTug7)|Esi;d2#HCZFcz;MS;iPJ}daG+}HV8X3om{dkn0^
zFB&;tSk+Y|6R6>H*X+a--Spat?J{%s{8_CrEiN%;hmx^`hgiU?Q~EELdfutGSt7Z|
zZ0)2+JHL2eea*4<dBs2R1F`MpFVf5X8Pe8&*~o0QPpHPx^y!yn((c`-E5BdcFP`U@
z`r*f|@PkttpH_wO?sluspZK@-nfQ}N_1&x;VRsdlexIQ`Q8Lpoezw7<nQMz2rk%M_
zo;G{SRlZFE|3p?DZYZ2<+xwzcBquSY&28EBkfYnKPY`ok+Ini9)#GQvV%tQO&#cr8
z`pa<a+l0Qb{!Wg&(^fsZoVBve^xIX}3MVhOKg=iMZlry4O;y>lue~}{Vea?2Tebe|
zOp-jEW4-=zu0_u3>Sc1he_qb}mo2*UcGIlWGwv5JoUmZQ(FZRWS1cBpbK>BvHKGB=
zy>Dx@x{IeeIII0>T%r|kIbpl{>A><I(<aNE|5RQp?>2c+q})`Oqq?Oj8?OC)V3YZZ
zWvdMLBR3acXY1*ng@SukwjEkq6vFl|TjFQ=ZB3n^dAa4)Nq_l$`(_v!7!(R!Q#E}&
s|406ut*^7B*S-?CJWZ^KO;Poj&z}B*-8@g?l$v!f?fcgnz2(VX0P=HU&;S4c

literal 0
HcmV?d00001

diff --git a/assets/roots/262175b10d1adadd3525515deb67dda91edf2154-0.der b/assets/roots/262175b10d1adadd3525515deb67dda91edf2154-0.der
new file mode 100644
index 0000000000000000000000000000000000000000..5a3dc5093cf825f6172ccf9b5862018079b598ec
GIT binary patch
literal 887
zcmXqLVlFmlVv1hC%*4pV#LckoJj1Rd=Z$_iZ!+Lz<J4;NX#38~$jHsgU=U`=ZNSOK
z9LmBb%oG}IC~P1I;&2OdrRD}_rspXHczYU(7zlv`xrDh>eM?g^iV_t(^O6l^45UD!
z%)-J@r9t`mB?``t3c3o;h6ZxtyoMGAMurxK7RCk!22tX?CdNoyn%UdLsD$iAMpg#q
zCPsb+gC<5UrY1&4hV!pi?)*5D^~?<oMX%4rCV?$s0$&&S>j*vmB|J<0!ug+-QYG=S
zm6m^^e-!jRm=yH=iR#ag=9{vYPeira#~t6s{?6{exmoMiggI$hsuo<^zqQ(I?V4}J
zcg|jy?P^~7TYG}2dA5w2`yFe|u*q4Q4`x}-wf%Z<x<v$Qw~XN9CtG&Jw#qjDtBB`z
z&5-a|>Q-!G{g3}d+3w>KpII-qeQtgGeCJK0wV@s7mTjB3!GBGisPeRL_8$~X#O`q&
zJHp~xS-<@6zDp~YuAg&MS?jxvV$R<6{eDNSHhne``g6ZQ%5%w;l~cdZ>x^5}xn|1g
z6&bVFccrSI?R<B)XKS`*f%Ae)?k79>nV1<F7#BMkI2gzRV^5ZkMT|w{-@*q4a$3xm
zK~YZoVkWj$Nv!hSYQP7Q=4WL5&%y#sL~I89Aigk&&uYL7q>w`yn2>;>%*b%aE9{r3
zVztJimrrGX|Ij^RInB|>T3zQzj)Z8#u{G=6BlXp|ADeA>Z~f1Cx~I`hA<^jjf|~zV
z2mjc8u!4WhoZ$80doy}$GmSqiUZ9+8oszEPvi54>=`gK|NsIl349(0Q-TTLIWN`w&
z`q~8>y0)5C1ufjG{zXAO>4onU72zjbEH7<V>z#1s^g5Qv^3>C$?(&fnU-=KLdbukk
z?sKxXzkk4$e><yZ_ShcK+ry-N`G~`lE_Oq?+2_<|3jY>-HA{&{Q1W=3bYp<QiD^Q4
z&rdtnPqbd-zCENt`VPaHSrc9zJ{-W7#A9$k)MNRI$eM@ilombWs^b5Zv^vP=;m7-@
J_BHc50RZ~-O#J`=

literal 0
HcmV?d00001

diff --git a/assets/roots/281aea4e6a11200e3949b766237385489c2e8792-0.der b/assets/roots/281aea4e6a11200e3949b766237385489c2e8792-0.der
new file mode 100644
index 0000000000000000000000000000000000000000..9d2132e7f1e352fabac7eafb231488b5da91ffb2
GIT binary patch
literal 1391
zcmXqLV$C*aVh&!w%*4pVB*@StaDKxjhsTjF$q#lXH+3@@@Un4gwRyCC=VfH%W@Rw&
zH{>?pWMd9xVH0Kw4K~y?PzQ0igcUsVN>YpRQcDzqQ<F=JGD|8If>Mi96N{2F6x@sQ
zOA8D|4TM2TnT2^ggM-`^g7WiA6e0`_<ivRmO%2QpObiVTOpGm}#CeU8xzx9?iAf3B
zQ;e((%uP)E3<gb1Tue<&j0|gEs1$z@G5<V!o_4r~O#8k&+wWUU=*hEr7QUe3d+DJ?
z|GsABePi&~xP339Eyrc@wvEYuMTD~V%U^nBI9svqqOr{`kFR$t?{D7mU+AOaEboI|
zZH1X$X=yqAbv6b2*J>)UeSUJ_S;M+V-u>HW)=goaf7yL{%}fvF;1?F_{JHX*^)7mb
z_cWAjyQP1@qPLp4KvBB%lYz~z{&jb6C9i%h=6|S9(7WzD_ly5q%k{o&s`h%|Bc#ex
z(95j3;9;=J8{wPpB=-w!_Uf_kT$~tqZ%sS<lrPDJZ}cAJN6%<{*coF|nN#-OdO}j=
zv)fB%>8l;RAn=gy-c5l%vESRjulRoaDHHpQelw1#&mWmj<25Ut_nWV1qwMTG%s)L@
zZ#3Rz-J*5P@#PxEvZ-ABH|}5ED<p5KuOXguX~w}7oGImb?&iDBt%;1wm|I_Tt@9|G
zqo!S?-Ceb>DklY(M=kbokat@+bL(=ez`Qo=d9_8$g;*;h-`WLMh;lRc_g>Iv-DFqo
zCF5PpD)i^rs|NwXHO`YuHlHea-Y3t<alzn9bfMW6_FV@J3}QUCH(AeER-4eZXt8F~
znO%FES)>;=GdnK4#`;nE(6$dNYTB&bR(NQ2+$oz?wqHJLsjX!HYm3h*_fBZ@a%uek
ze*2NA(-ox)>ah<i|4BSA=veFb>}I#svAgPldH?sMd^L9VXJTe#U|j5E;9$T9Os}&1
zjEw(TSb({M&43@o7Y6ZJ4VZzHfh<UXk420{q;gB-v+8Y6pD-3TaCDrIium?&b{=vn
z17;myDq~~_m5*4tXVZ#+3p^WdNM$OhYjUhfERE^P`_c3?Q~&C>Fz=l^iUlGsD^9O_
z?o;@C)1`#9mMgeli7SS+ehlD?e0}ag<jY+rMc=p0?Qd!L_T=Tn33tS2CrP`0NSk`8
zCjZbY>-X~KPhVT7{&D4o6YKug*3J5*#Pa(8&H7gpwUsuC^Ywq~GKr43@rUtb$j%*V
zXSzC!JAHIpY?|)Bn-<QxOK11@BioPrSvT!7JfT!vJn7=0h9#Dk0>;WsJ~s2)HigcR
z-KW{sqcnToqipMNtEK|qJDkTmPjj*R=DdjQJNf?H>f^h&YWulf^SYpR=4sI>j;y6q
zAB!&hzU1vmo%p4{|F6+t(%W~vdiUeP>Iq_(+2h=TYs}f5dM+QCHs|Whty&MJN;P<_
z^RZ+<cgB55&{XYRJASXdWE@=kRMt25>cWl3o${YKsGG(t*4WP8`@Gk9!gJ;MzXRq}
z=D1zmBD#56Ufpb-X;wRebnUN2Km5&csO6u^ip8C`)?_`D(Av1dIWhXO{2lAwvQN4%
zdQ0z%8|T;t|E@mm82|syq6>)@52x)|6WeWmz4WT_ftiBq<~klMDs9=v<meQiuHrG}
z;%xPO?Dji%_&1gWKCIgQcCPZHeGjf`un5~2GS9nPmD7KWUE)~%J@-C)jd?6==a+_<
hl<$4hIs2u!^Zn@C@&Eed!WW%&m|K^mbnBjkIsk}=Sg-&9

literal 0
HcmV?d00001

diff --git a/assets/roots/2c7a348b4c3fe39c4b2f2a1919788781b2fde745-0.der b/assets/roots/2c7a348b4c3fe39c4b2f2a1919788781b2fde745-0.der
new file mode 100644
index 0000000000000000000000000000000000000000..2913bb06fb98e842ac0361867582aac63e9f7932
GIT binary patch
literal 657
zcmXqLV(K+$ViH-v%*4pV#8LX}{^^4m(JKtN*f_M>JkHs&Ff$p{7;+nMvN4CUun9AT
z1{?Aj@PIfRJggz96^X@$0tS2_K06P)M}BE>Nq(N8gn<}Hgo}qiIM_$QIlrhNzbLUJ
z6DVV7pbwH^=FtGk=q2apDg@={mnb-=7L{bCWhR3aDL9svWaJlRmQ*UZIy)Q4iSrto
z85kKF8Cn>c7#K&1^O_hUaR=CSWd;Il?BI}MVq|00Ze(FlVoqXUam`y9aAcXX*}Qm-
zUh&h@lv3>PRQ1W8;n=*WP-R!2=S~)B_h}KUb*G+qJCDQkg!=2wp5TbrNnQUwMDu4G
z1|>UMcb<LoW?Qf1WfS&0yN|KeA99`g=5+lE<p-QE8-IOvzq~lvAkjb;7?iSnEMhDo
zO&42>4W65_T<&9<^!w?Oi$@e+oHgJFNeeSF{%2t|U<OhK@*n|a7GUf&VAlbPM_GQ5
z4q&u1wjn11=5z*w6effG=dU9Lmn57|+%T>BE$dHx;fZ(NKK&DrE$HU9Sw@i|Y4^Uv
z&tIHnpZSxQJGRK~$SNiS`8~V19~r3puE}i(<(g^Nz-#<8ZSm&CyO&<=?&s857F+k|
S13O1X?xmW{y!iW1vr+;2{@4uw

literal 0
HcmV?d00001

diff --git a/assets/roots/3053402c7b5dbe592758be81f8b1a0c89bd9db40-0.der b/assets/roots/3053402c7b5dbe592758be81f8b1a0c89bd9db40-0.der
new file mode 100644
index 0000000000000000000000000000000000000000..45ac9386a87a42ecad26979a2aa0125bdd837b04
GIT binary patch
literal 601
zcmXqLVhS~AV!X3}nTe5!NyJ|{Wk=ui<ax(}8xNNGoz^N5y>{Jzi;Y98&EuRc3p2Ap
zlp(hPCmVAp3!5;Lv!9`=fij50#Um3^R9al(Se%)t5R#glk(Zy7pPrdotfSzWm#k-~
zVxR<4#>^v)Q0AVKpOl!R5R{)^qTuYP;BI0dC(dhRXkcn&U;w0yjH1MOP0S2T4K1Nu
zn%Z4vAi%~B_9YV|8>@CB3xg7K5(CS}&1Ws1s5(ErC&{_Hv2u}Uyl67xy+f<-ZeAvx
z?%mM5e&*>l;<vS@ovH~6eI)hJHtd7G7{@QsJ+pVaKeK<g;-OE^*UM%<En-&}%yQ>_
z)ac0e+VkfI&AY~L0+!ZSYVJ^&u{hZv(SRQqHnPHujQ?3!4VZzHfjme+nMJ}ttU+Yy
zZm;R*Hfz@}F}yduIkI_Ke&OkR2C^Upd@N!t*roYE()=I;S%A^Xh8%&+=?n%bOa^hE
zUbCI?G@S3ikh{Ik?1QhM|L4=4Ryq|E0~SXgI900lY5#;+?xvmujrqq4W@SA2$Yc-`
z!53C`KH~6ofu3D`>mKh(DRn;@I^pr(U7@epj|8taU-?dPlVWs2zpc^7tIAWZMF0T#
CiO)X(

literal 0
HcmV?d00001

diff --git a/assets/roots/3091c2d60f82ea189edb13b0755d9b046e67f050-0.der b/assets/roots/3091c2d60f82ea189edb13b0755d9b046e67f050-0.der
new file mode 100644
index 0000000000000000000000000000000000000000..e193a059ee8b42a0b5ae782f31d5fec71e18908c
GIT binary patch
literal 1371
zcmXqLVhuNFVzytv%*4pV#LL9|baKAo24T;R>_y@Rylk9WZ60mkc^MgbSQ!l54Y>_C
z*_cCF*o2uvgAJ7o6hIs<VM+J={Pdhug^;4s;u3}6)S|M?<kVsXA0KB!5d$HR8fIZ`
z_mE(Pp#1z2g&;!%IdNV?GXpatBLgsq66ZBW=2Fk1CMG3hPcX7FFgG#rGZ-{6aWOS9
zF*0luWa^fCys&(>^_~4w?6yx`?qIX<Z`03OBetf(Z{K?Af4{iBCrfYo^u;~iKefMY
z{CTcLcH_^Z)9=0C`DyXXJwlyv%U1=h{-LaXddbE)$+xf1toy(f_c~+Qmt#@xyuJd)
zkNq|ZFFqlW<Nf9j=Y;!nQ#4hT*%xlPWUH6(;QS@d_T6VaKKLFwRMpY7d)N6$$!qKT
zH?VJ*XZW${;DP&k%W`uh`L^DuQ<HLKw%t&<WQxXG{(7~iD>(j5dts9?CHP&lRfo3d
zG|o*As(SQFug!VAJS?Sunt#SR+v$f|`VZ`JIKUmV_gnjB)0{OD0rf2pe9lg~tnku!
zPteTuMq4#Et7>iW_*wMuRLb{fO#;0y<{s+m_+^pS^(Xl!<Ijq})iLG2%G!UuxxbOG
za%%XNy=w2TF<yKv#<jbTd+X7oU7@QluX#1mTl0+M5+hYVt&gcL7nshiI_J6N)%=>~
z4Gz`MomVf<S=?XS+4#$6>Hn*JhtGLG*m`4gpX>Ru18*I){|57KSbo)-cVpKg=6i-~
z&y>H)ueQ5(f1;AmvwgpA82u4Q76~l67kf=?@?Omh<M&o+Z`ixk?h9WJPpweD7w0L$
zu!y04)(XXKD>qKvuyiM{nBcABIUY6+59)ZM&W71soX)!QwD(&}?>R^8FNF%{scg7b
z`0LBTU1#1(fBo0!c!Obvt<{NjRWr;bSf?^EGcqtPb~11<-~%R8S$;;w|12!PoX}>#
z58?}h_^bxZK*~TCB*4ca#v<}$y|!ARl(vU@tA0?L&ifCY!i9FosSKD^fT@g;Vg4#7
zwcFgY_x+cfHc8KJQL0zgj9p5nYY$r8XyRf!_HF6C1Agskl?#6^i<q<O=hkNl&mX+l
zDCgv8%x!LauCqY&)K--h=d-t7a!{OcUdiOV^--mk2S@q3YGON{n5vwcZ6_5Xmv?(p
z`|>}Ze>H}RBymNqRAM!>Yr6LCcDTtN<EfX$rC+Eo>aO-vld6hJ*>-V_`NzKtK3lvg
z`XE?3_q0h+@3XRO@niSfR;%}UYL})p3MejnW%p&B>i-(id*^yo?N22YaDCV3Ok+P`
zFZ1WaZC8W)NgW5b^3Ody-|Jpvr2El!C9`Ku%inVCe8j$>x4O#9rts1u=7sV`?02P~
zIGy8Ra7}F3%B>KoS+VzL=;`F6Ha=gr{lA?RZ<sxEp3cGSfF;+TNr>!iwNGE|Hh;l?
zr{z}lF{fiU6v%3ue7#b}$@99xCzAEEvD4v1Q32_4-*ZYmS6V;0)@~1e_1+<B3RjFm
zyq`mCl2Y0I|K}3-_9$0eGG}_wckiO0dFQwNZ#~(Q)=hfjAhlkE^X3J=O^d$od-v|f
z|2tB;_jZ^SKKfI+eTwQukK*Wsrq4IeOfNksX{GJ%ciE}$ui*)?v|E>WY;JGvJGqdz
zfxlX;Tx9?M+niH2P2QsrA^P%mq4Vc^0*4vytk9ae?a(#*3E5@0bN==0`BY%ab7!Wc
V>7DB*+>)=F6|M{ay}c>-4gj1STZjMv

literal 0
HcmV?d00001

diff --git a/assets/roots/31e4c31bde81d32ad0d8ecacd40c3da4e71aeb38-0.der b/assets/roots/31e4c31bde81d32ad0d8ecacd40c3da4e71aeb38-0.der
new file mode 100644
index 0000000000000000000000000000000000000000..f81b63aa1e1b222d41e2b079e2088f3680dbd977
GIT binary patch
literal 967
zcmXqLVm@rp#I$+=GZP~d6C<MmFB_*;n@8JsUPeZ4RtAH{CPQumPB!LH7B*of7gs}V
z15FTzi$^I$H@LF6BsI5K!8NZWwWy#dvp7{DIJKxOGdZ<b!96$0!%*Hp7NnS)M+~7j
zq^PvGM8P=~q{mRzKpCWfnMWo>HzYMDH8?d{!96EGDKRG~KOd+nC$YF#!Pr1foY%m@
z(7?dZ(7?#j)GSJz*Vq`uH8M7}G_{Nx9FA;aR6-6sMpg#qCPsb+gC<5UrY1&4hP|be
zKO`yTtE_uaRko&f?@g7fJGTEh`@!kK>xz!BxY@HpWPN$MzFj_F@Fi&Ljma#J-P#Hr
zy|h1Q>4Y+0^Emv#(&Fu>7#n++J(Fz{SNomi-S<I3J%Z1ro<*vC>Gf$MW)m)WRxd35
zEtOro@yEH9oI0O^uO1e0+0nN2Ter65t;NP6H-8mLeOD5d>6n;ZpZ4@{R>KCB&-dG0
zJN`=6m$u8xZ<OXLR*Bx3`amb-M8f4Xar=j7LX3+iGFdIFuP(D(BtLDN#k#F0CYQ+0
z+qvaw!d(5Ziw|DMMf(U9@Z`8CtQNfSMe^IFIYH*ne{DNtXzg`HWairAQeR`^f3feV
z;g!GEEVr47nUR5Uv6F#=0Y5O#WrZ0T|Ff_fFas$AK9B%ENPq>H4B5b`MwX97j74NC
z^Y=3A#HK8vRT9CknH8t(|99>bawr3nC@_>68NzJePr17HR`I5Yed{KyouNMcALGUi
zK@2;5pGYf~NY@>B7niA}x<2Nb?5#_cCqGZue9+c@k0p}-W8{^TR_~eXRaxXtx~-gk
zuW6HX!TdSj))yMyt!7=Sb9v_}_iv{@eS5xkr-%I>vF!(Qzr5mH|K{`7=dAOV$#n$>
zUYp!_reyNBowt^$vX)dv)j8NTd8-K;<UO=^Jnqh5diCq&?;&=LwzoX9W^H~iVEgQK
z{>2kY?x)Y3XEdC2Q{u7GK2A9)yQoc1vUx(PYMuRdbS|yFzQ}f3+nG;lCc0UZ=FXD3
sVDKo`k7YxAw?bX{LEEWK7u{xA+f?kxUwDBxWl@Ekrr+elOF~4V0eot3SpWb4

literal 0
HcmV?d00001

diff --git a/assets/roots/322ad42b3fe752585a7c1435fd71b9763f2c7bd9-0.der b/assets/roots/322ad42b3fe752585a7c1435fd71b9763f2c7bd9-0.der
new file mode 100644
index 0000000000000000000000000000000000000000..a8b2d8e5d6f8b3e1b60c743bcdf2645ebac9c624
GIT binary patch
literal 723
zcmXqLVmfco#ALXDnTe5!iI?F;zC`sk%j_9mo-?=%xY#(f+C0wLvM{q4lp1myaI!In
zvaks=d4w7Y8t{WS>^vM!r74L8sl_FRVg@20Aub+X-^}Eq{NmJP1)q`>JwtH=QIL2d
z4_}yLh)1Zdk+G?TiHW7Tp^||DNP?M1GF3OYDl<JVUm?UNSRp7szeK^=QNhT-$k;$m
zoEJ!%8=4!M7yv<(IIpn<5_h1S)i~QgfQ=m-I82OetlEt%49d)nZ44|78T|Jb)!3{m
z=}6@2J>;{LQAy;=_k?n%Ib0SA3wzS-HYdOQHE~0?_cP1;Oot2@gBbST?|B=!)+lu~
zXJo)u$wL`33=df2Zw08y9A3ksbkxfC{mbwOv&9D`g9W%Qp0$7PZ7Sv5?<DNAQ%7pf
zK7(yX?%na8`(%mDX}z0k@87TGystOu|H8$|28rP4krifS{LjK_zzn1e_<&(8%MTJ@
z0me0(fh>s6$0Eie64}C(6y;X&HTF(Fmw<-yovYV=yBf%Yq?K7D48$6+D?myd%#Ga)
z2951ZPK>&@)_v8h*p{|q{<ebpw3730`fC0iV62>VE{N&*;fp*~xu>_ry%S$D`!-A2
zJ59|O>wm9Z6ZGY}_O<dBfxSmBX=Io%IhvM5m42So#_@HN9M`v0?ptNYgZ^{NH54cr
u95%i!@wVl9_nWtuS0p!X4XbfK9%e8lqd5DL-pZXfb!0U6^6c7~+6@5ge(V(h

literal 0
HcmV?d00001

diff --git a/assets/roots/3366ae4363646a8c15060a3b4adff12e8c1809af-0.der b/assets/roots/3366ae4363646a8c15060a3b4adff12e8c1809af-0.der
new file mode 100644
index 0000000000000000000000000000000000000000..02ab364a27c534d68b230d7f332e2d9dc356a437
GIT binary patch
literal 574
zcmXqLVzM%5Vm!EjnTe5!Nx<pTnOoAC<}UG~|4KCkc6>45V&l+i^EhYA!pv+CZ^&)H
z$;KSY!Y0h*?qn!oAO_-a3G)Z1CYNNU=PUSR=4O_prWl$Tn1E!Mg>_*v0i{VfnaK*l
zsYPX}MGB6kB^jxCC7H>IC7Jno3PJh#B?_)4W(IQNyherw#zsa4U=StF3luaqGBh$a
zwKTPiqP+vk3<TKN!Tx1pWMkECWMNQZPGVpw`!#cAp2FLo*UKNXTd%ln8*lMqb?CA%
z|7#wv-qh=^I=ty<<(rv_^#Ya0nWBEOn13}f)h<6*uh1W~n4$B{)#ZzFqaS-un!KRl
zE8~<qA2QhG&c6Gn8njixSw{NbYsquYix)c?I2gzRgG`o>MT|w{qS7s&$dBIfY8I>J
zUVHbN_wetPi3WTiX?{k=|12!PsA@Cd2l0hLd{zTyAcY)L%;^jUDNF|H@0LWZP~82}
zefpHnr6mfvmHsF8PL7L^_^m6&kacp0?S&=&F78tp!xsH8R^@TJzlzB~_SHkZ4!wsz
um&-C4`F)z76I$|k-MZgPrQW^0^yd(>;A_{I1OeNa`kBnpxgj2mUBv*44Z{Zj

literal 0
HcmV?d00001

diff --git a/assets/roots/3582a277b57e01b32d31d926b4f7b4366493d235-0.der b/assets/roots/3582a277b57e01b32d31d926b4f7b4366493d235-0.der
new file mode 100644
index 0000000000000000000000000000000000000000..62d354adf604f533673bdf931722df75b41ae872
GIT binary patch
literal 531
zcmXqLV&XSwVw}2wnTe5!NhB|8PvolLeKRc67hTF;V*M;v=GrX-E;bIWHji_*EX>RX
z?uOh3oNUaYENsF|&VGh622vmnm#}bVNKt9Ab4F%fqJne2o{mpRik_jAfdojFSy-?P
zB&*=+?5q%!pI@Tj>}Vh-&TD94U~X(^U~Xh)ViG0JYhsMVrJhA)1_EsCVD~dIvaxD6
zvM?wyCo!<326(OOshsAuN`~X`;zeiwMTR++|5cmfv|IKp$L-=x(WRfy&+%*evj0b-
zT5Ha=*65;wOMh=CZMh%Zy?3KaM3NKd@n7}P0?+?B{5^2vu(r|jf@Ry6DTK;aH^h4P
zr~7;qSnOorU?2<hzAPV$7>mdZ%d`7#Z0h;GY4yXkD(kCj7T%UWZ@>?d7G`Ap&%$cJ
z45SSBKmz<A0Ty6<upx&$a|VM!Dw9F@+`C~Pk3W97!!sazcIM&yH-~FgpM*~pc9<P>
z+4{4C<Q}!-x@_~dR-4WLs(K|kn}NxY;pOFH^TK9nomqIx{zRJg<%l^7t-n@J>?$Y_
cv`9$dPU4&x!SK`fw@Jn=&b5kc5>w6r028>g(f|Me

literal 0
HcmV?d00001

diff --git a/assets/roots/36341f8404085341117cfe8fc657667384b14135-0.der b/assets/roots/36341f8404085341117cfe8fc657667384b14135-0.der
new file mode 100644
index 0000000000000000000000000000000000000000..e5e2343aa815011b5044128b849639f2971c30be
GIT binary patch
literal 1389
zcmXqLV$C#YVh&uu%*4pV#K|yeN5}0AT?dm5c-c6$+C196^D;7WvoaV28FCwNvN4CU
zun98-dm9QH2!c55!dy;8i6xoEIf-S7FhMS1E|<*W%yflBy<$B>Nds|^N@igJXGaBy
zcu;<Ri9(Q(ft)z6p^<^Pp{0SPp{cP!lsK;mGM6THHZdt7dySEmfw_r^pTVGsiHoU;
ziIHK^;v)>4*IHwBb49)#I$S)@^iW}FUE}Z7ZUGMt)_7JtTU{ApbL)SN%={bEnJVnE
z9a&yF?%l_%<N8fM<;v>V#qPE#vtMS+I(A0de%HQD-6l+WGeRZ*^yIIKzvXkzmsxS~
zjY}qz!=|0~;b9Q7iI+Ni;&{%owU-T-?|Jd`VcNAzznQl<rk)g7$H$s{tRXAY;P0h(
z6W;Tx-=9CV_{&4pTRCF)94$;<b^p2ef<+`z*RgKR@p8Y@fg!)+CP_%ML}eU1dF0o2
z;RQ3c3u<q_7JjB?p7_Pns{h*jRP@4lDtzZL3N6!K&X}54lO)^Ha{twV?5#_+rZyiA
z7UU_G<=*5r;i8k(IfuNdYyTgcvNmseOJ8mNysidb&)nii)sy57e?Iv6wH|B!P3iOI
zWh^JQL_HB-e)?{i`~}If7dot)ugx*JG3`!b`$X0!E*!=OZ|&qry|QkT8Sm>|7Q1+!
z&Yt(WH|_4s^Vd2Zzp+f}($vh&wvu^XTFX?(_xZr{y{9Gb&P~{KC@o>zMwWLcpSA6r
zmFBSGx!~JISLW_->5(rEvI*|Jd%l6mKh>ck#y#M~>}T?g)lXbjM7Pd*bT8`a@t;;M
zY2HtaLTaAm%-PImE52xxiO{vWO)ETiU#!w_*tbYb{{9nldBNh}6Sz{H7xC8oU}Fq5
zuHC@9<IC4|OP#`N%mjO?<Bl-T?Wvs0#LURRxY)_S!GIr_Y-NQR8UM4e8ZZMX13r)d
zKS+QDm|55iWI=pB7BLo)tuueD-!SFtV})y6YtQ+GEz!$!dW)ROfEfsw$`~2c*y0MF
zry8GV%DXv7+)BDCZ4=|S3hT@`{a63}erg<^p_S;fMMbEqHdj#O`<$((p6!{Z-sdBE
zV&&ed1J}*?a$Ae?RvcTD`|Ve8a{ZpXN)DO1UGt^7f|uRcebY2_qu|k%%$vikceYGc
zimN;LO(>}Ql}`Gee`Y>kcbvbt*>jThWlg@B($l^t?yx?hy{#f=i*o*lzn3?~mCDbY
zx?;_@TMv&KR{y@}w)xVY^esstyEwlmZ<xGj*3Xwgdff>^tN(mW2zxIO(|ttB=}vQW
z3g79id#?E(tg*@K70&%#{o3Hd9pCjwuWnoF6J2=nh2g#z7Hl31r5?SybWg}KLh645
zUsLI`?I+oD_}>4w_&B5R$o6_Z(F>}XdzI#Dzh(XA=Dz0bfe%-#AH8`uEqa2mpIn&L
z>kaRx?VhGAxa*U1TS>~)6B?!WWleWoGH<pBwlK3kpY!r(Hs6KcEHC`auctCrwDDBg
zDJFfaPcGy+Ip5{>3iU;$`|=v?t{-?UJ%hg>#$;31nFFm7uk)%le~((ozJI0Dq|XUT
z)1QbeWS{L<cA&5J?-JGH?r;Cg7q2;Uc<IZ0uD;o+hXPu+E?y8UbSAVt@pI!k0k_1x
zE{Z!2*_NEIQ!)J|!_GI`R_WAxL;apLLVMpkX#CMkpT9}iKTYLGu;fcQP0{zyayQiL
UrvLq%BVFpY_^Frp%O%&j0cm?wX#fBK

literal 0
HcmV?d00001

diff --git a/assets/roots/369df24e274d52c0b46a58590043b883b4f6b096-0.der b/assets/roots/369df24e274d52c0b46a58590043b883b4f6b096-0.der
new file mode 100644
index 0000000000000000000000000000000000000000..40db2f333a839819fc315dc43e7fb5c5fe6a9b80
GIT binary patch
literal 922
zcmXqLVxDHu#8kI{nTe5!Nq~E@jMX*E^jGQ1`wy?5^~KwOmyJ`a&7<u*FC!y2D}zC*
zA-4f18*?ZNn=n&ou%W1dFo?q?%;S=op6Q%gRHERSmux6$APy4d78WQkFV{-}N+koO
z^pf*)4OI-3KvK-Y(r_J)#l@vXsVNGcE($^U`6UYOMh0@?yoSaG76yifMg~9-CC+OM
z;+R6Y^m0ZMqY`oeFtRc*H!<=v7&I|*F*PwVGTeNwp&w*#R^-_++2r$&EIGrFhWTql
z9JjjPpSI%4`Uc&dT<1&wb}p?|`Sn<dM|;myac<-NlD>{?6BzdL_zL`E-}+o8Pbt(e
zb^6}R;+N!-KHq+o6VPMd!ZYps_S4J{PUS8X@saMl`<7utP|f;@IU6m6FTNDwIKZ$$
zMqBV!d4bvNb>}ME?=%%W<18r%&0N1YWB&fT+bTDInp>b5`epV1sfnLYI^@e<+&6jm
z<qoagbN3fTg%w)cU-^8I>z~H^#qVy;T+e*DKVkc)Neegb?d+5{ID2@RUXt-TF{W~t
zsOODbHp^Y~DtFkk?1@>>{!n^-VBgs{I=_DW%l%+gv#R?^`c%VSCT2zk#>Gws4hH<d
zNR<_4Wc<&<YQPMn4ER6-{2&1qV9IJUkOlGiSj1RF&K>sJIWzRrj@t?QSJv$f+dAEB
z`8DKF1|~CLC^IsgS{mB(_=IC#ruy<y!S^<8X8D)q9;>jB&78JqQl_3o&g@#2E1gR>
z8k%>VR6Mgf=WMsktZVx{E*YgA>^ksS-|GE=$5$q{T?}~4e7m?j-^()i?LD>QTWi;A
zJ6$YIdhDgmbUeWOLFS`rIeac@0xtb)SzrICT(eC2g}KSx;FF1~76q;MDiCWsWOZVr
zaDmy4^Y6ZJnOu$b`O7|M(XN|}MKPa!58mb5D8qXsdEeSEBELJ|EOO-YIddZ1;X)qs
zs<S+Ooik_Ve6TTCZ*f0=&*FWW3hJv%{tGKr+?yU0D%ZR<M1lF;x&!`U_sq{6u3yEX
azWZ|dj-=b-HFGqSgo|^|t9|X#d=3EAg=Dq>

literal 0
HcmV?d00001

diff --git a/assets/roots/39d28b71fe1d19b65fb3f1288f23bc04595c4395-0.der b/assets/roots/39d28b71fe1d19b65fb3f1288f23bc04595c4395-0.der
new file mode 100644
index 0000000000000000000000000000000000000000..1e927a7afe06c270670d6bc25c4d465db2e0a7e8
GIT binary patch
literal 914
zcmXqLV(v3&Vk%p}%*4pVB*1L-@!4|0l?!%jq->Ps{Pom;myJ`a&7<u*FC!y2D}zCz
zA-4f18*?ZNn=n&ou%W1dFo?q?%;S=op6Q%gRHERSmux6$APy4d78WQkFV{-}N+koO
z^pf*)4HXRJKvK-Y;&2`AIr&M6ISN7f`6UYOMh0@?yoSaG76yifMg~9-CC+OM;+R6Y
z^l(BGqY|>m8Ce;an;7{S44N3Zn3@<F8FrhWHMvureR5OAgtcC!|J`;ea&h#2l?*xg
zyW{rfb)T#{C)!j!Tg@hweSVGZi#Sddmt9G->aHzbQTHIERDpF(!1g)GQaJ{9Zplk-
zye@a|@AU_#r!<?ddn51cceh&S(q6r#`cGEwSZj4<=8|oyFK1^nBuq;9@2}`7@jZRQ
z>O{6V{hxNd-12ggQTEo);V)vP&-Tc!p2{-S^Rub$w8x&gcgr9D_VnJeCX{_;|J2P}
zlz02&x_<b!a?@0UEq{GNd(^$cMQWPno-LkqS<H)#rzhZIzZ~a2@rBP6PyKCvDzK+{
zDc6y7jc>&wBDQX2hucLu6-|8C^Skma^IW)V_ne~}jhi)FnV1<F7#BMkI2iB)BU4tG
zk?}tZs{u2RGT;LV@Ph<cfGMiYKo-R3V-aH!@ly&>keK@Hao#ijU%z$=y=4>cw?qzQ
zVDbWnG9yDmy2g}zK9A(rhIe13OI+=&wK>}DRsV9|ZEf-U8{&)0wTy%<8`GUyls~zq
zo4)DT|D%6HB9F<EbqYQ$$8P^HeOPw${xYZC$6Ywu>di`2qHg8zibR_3{p5LfoBYYm
zyzW}IGxc}J?B04s;o;2qU^mg*8M8lpHn?hM_^7vK-s7%Yx2D;d3NMZS@UtMGz}-<W
zT+;7A|2noKQ-#I#rB&ybe%jbKb78*lM#sW`9a<;+1r$QBe-?3l`oQJOtM;izlllGy
zyZzFc`@dUhr}s@x*CqFs?3fjCSGqQ6eqW?>N8^%tYFG2u-sL@JUi+4LlJwK^__B94
Uy+>lhq8Hsv%iC;f{?uq20B`eLrT_o{

literal 0
HcmV?d00001

diff --git a/assets/roots/3f1855d3c9a93b24f8b4f95a07ae048c20cea42d-0.der b/assets/roots/3f1855d3c9a93b24f8b4f95a07ae048c20cea42d-0.der
new file mode 100644
index 0000000000000000000000000000000000000000..2f6e59f424ac5d56f689780d408b70d37135710d
GIT binary patch
literal 582
zcmXqLVsbKQVm!HknTe5!Nx;l%TF=RtO%Z1=FvcEz8qQ$A#m1r4=5fxJg_+qP*^t|S
zlZ`o)g-w{r#nn*VKo!K{;*oPnEiEZd&PY`VNzF;k&d*f{PE9T?$}Fi=aL-NhFw{2C
z1Sw?ZQNoZ9@d;LNb#_(=%Fi!RFfuSQFpv}H1(Fs<rUvFF7Dfh9;=CrNAg+<Isimo9
z6nz{~W+1@E4)!+_BO9xBBMXBPa}oo~x&8mbSM0yK>bt<KvwJQIF4~*!bY{Y9QHcpR
z7oFwNQhjabe{Soge*Vv<x176~8usM}s>t$ZYoD5bC_ljHsky>7h5sGA{JEaHZ?i3F
zpD=047tRak>rXUrADq5<x2gKcL(+?#3>*w(fng=f$0Eie^0??s-qe}y8=q}X^tpI?
z_2XS<@69*h2T2PvGX7^_HDCr(27Dj^evkkQFb>&}V~jbS!61dnpfsp^`w{{FbzTD9
zn_8ls9zN4DW4g5<Ptsm>|E)-)z9+vY+?kwmZtWIF_k>61m!FnnGB9`SNxScueXW_n
s@vnZ=_kb<w7j;$?UUxn<M_pxNvj^|_v)@A+*T1QMl74%~gm-sU0X_J~-v9sr

literal 0
HcmV?d00001

diff --git a/assets/roots/41655b67500e9a2e2c0cdcba7a9247f773f77269-0.der b/assets/roots/41655b67500e9a2e2c0cdcba7a9247f773f77269-0.der
new file mode 100644
index 0000000000000000000000000000000000000000..3e49eba74782a8bcac1c87f76f3809872b98ddd0
GIT binary patch
literal 1380
zcmXqLVofk;V)j_T%*4pVB;pcoq7vQMIotHpxgFZp(aY67lxi68vT<s)d9;1!Wn|=L
zWiaqC<Tl`BV-96u6J~PqHIy_E2XVNB1p-U+!xB?6ixqq_b2Cd)Qw-${WI$5P!lH1g
zp#1z21!qSEBL#P3137VCLn8x2LnA{AQ%hr`C~;mBWG)qLYGP7C_68#>19KA-KZ8LN
z6Bknx6C=aIb*h^fCGLcG*t@;{x&F~><-$j^E+(ca#;;nh9{4m*TI`B$ZNP@$^1T&S
z36D~kX4kaMz9!YT_P@Mn{ne>*LZ_dJw6Gk!Z?;)%e%IrZw`Z7~yJ0M@;r3_w$q$#d
zT=nHF^8ER!{qf3MwF_&rH(9B!%nfo`^J8D$?>oziCr(IQ#w?=n>3RF&j<stS^!#7O
zts12IT#WJR=^dtxJd3SAJbd^kD)wAMVeSvl)ppjqc3f{@{Jr#b^yZ^+30j5=)|<aj
zu$sTZNQdVPr|ji<eX)CdX1qHpl~MgBc-c!4)5Z7CHq7Vo_$~A0<9@FlzpnNadL5Tv
z`_FOK=H}Q>En)AMhC83rT-&ocbpMgx(TsPM6&FS@^c}vCCHz+Sv5<Ddo%Cl@H=UJJ
z%G3Jcc;(Y65%%7$P@!X)Uw5=+=m*DbxU@>~;EZPmkJCes&(2#TxgvC#E87KStJ|+r
zW3>bYKUn*p%Kc(;r0~gqhNy2b>y#5(i$6XQ*r>Yh>ZIMm2YDV?-r8arzIC<fsv<?}
zX4B_}_p221b{KKg${I}+^-3x_|G0eNo~we=WsK<@4;;A<zZT8=u|)FbqSfmksRxB=
zGj-{RsQldT#I#@S#IgPdc^0+7x=-KE*gQ2kqyDGqm-`(@6HF%^sL7N`oGNzV^*!$O
zb}Ry}sSyDd>peb2ZWH@t!#jcLSb-knS{u>pOw5c7jEkKN91Qq@DOOgPk?}tZs{u2R
zGT;LV@Ph<cfO&+?Ko-R3V-aH!dHX!SENXwk8_(!tOUri`i51R1VvC&0fSCoD$`~0Y
z-fysX=Bz6`^!@ebj{b*%oA%h2{?v#)v1jJ&>ey9JPd()N{$kVR`FGO|>vl1&I-ccd
zJ>d#R%%+5_2_H_JV@~?n{q}dB)*Uuq8%_RBv91Uo5B?V|iLY#mmX$woTGz4IIij*|
z-KnL)yen-B_9{pwF3GX@<81Wsp!@$HZ$1ht8BLpW=v#E=v}y$&XUAF5-y$VD?uB-k
z2Xa@$aLFxp`g?qC2mgUj6-+82lh=2)cbxQUkbQL_&n{8VY_}<&`n11kCf12X#UI6D
z+}T1r8LA?LHgLUf{kw68acS0M8KGwharv_KC*_q-w<OM&YjXJ+zcwjUWmeFPw}H<W
z)=js1rY|peE4V?Yb>3=If!j*)Sx4ih2Y)hR;xt$s@qw4|YSFQcHJR0iznZz8Nz9A$
znQ}C4-3z|B?)~4-K6ty3Pulohh{Qkseedg9vYj6n%(xv}x`{WEy;W4%^4iDyE7ka~
zc^u!oOzEq!dDK+*`PI85MDzb&6G>_Iyu_8Rc$?oeIYC3|@y4mmXIq!u)#rbn9+bCR
zzqRJ8SMl?sb_ez<3bES%+0N|A6n#SV*`pAPua)gRvca4DTC3SCj_dsRv7x9}^=Wy~
z7iJlcWdZRW3I=(fnw(eLPH%Z0{9Ey$KfltfwjGgL-`s5_J9J;PKAiWal_P6oj>$>c
UHy+y76>rmy^i^gy->dHd0ROW{V*mgE

literal 0
HcmV?d00001

diff --git a/assets/roots/41fc0249061723abd565d5bce6f9562e79c7c8e8-0.der b/assets/roots/41fc0249061723abd565d5bce6f9562e79c7c8e8-0.der
new file mode 100644
index 0000000000000000000000000000000000000000..616047950db54c16921f77495aeae1e84a603d16
GIT binary patch
literal 953
zcmXqLV%}=d#58vSGZP~dlR()<g`koTt?h1`e<(|RJ9NN+myJ`a&7<u*FC!y2D}zC<
zA-4f18*?ZNn=q5JhoOK0ABe*x%pUF;oa&ugX{cnN021LAmh|@w4slg*%P-AKNi50C
z&r@*COUW-PPE9e?Fi-=jVHTE$sDbKLaL>t4O3YCR%Fi!RaCcI0b~KO^=QT7jG%_$W
zG&L|VHi{DGHMWFs4GoM9qv-9NCPpRX0AXZhU~XdMXE11D<YH=KWMsG@zFo#kMeEx1
zji(;T{jRlmKjZ5r%Nc&^I|O5^FR4!HXcAS+k~ZAEB3e;V`v$+?{HTu`qn=b=Gg8)m
z7<^`?YfQEO+CBT*y|}%nN3Hng@us$#_pBn@{duB)9lJcXD|}g4B^`bxHsJrR^c%`E
z<xki@zV|;rx_o1H-j0(g-yfcGbmP-3ys%UG&&kGkzwi0?_qVJqPT9TPsW0=}l``47
zxyyHicLk;wUB9wo$J7vqV&-qJzP$dY;Z$xvS6O<~Hroafb{{?e?^n6Rc=x6`o7X8j
zR~~j~`|6{4t8dm?-lZ(<9dfOYUj|>DeWIH=x#IN$Nw2)!`q{=Q5tG+u?(dg=-{f(e
ziJ6gsadDu5zX3Nef@S$xSb(Xj&43@o5oTok&%$cJ45SQXK>~a%Vk{!2{3pzk;~p)3
z^V2#_^ju)j<B79u4FuRYwb>Y17@N#R89^p6AO|`y6#@gDk-@>|cl)N9jT7qT9^J4(
z?QBQ2woz~14#mQV>9y<3Mb_Ir|32$c?YF`iGg($SmsBi%?3rj++~Ygt!Oy}Y+r;>S
zE99>&YS(A7Y}B+_FFHff;Gf0>hMtQLPydQL@%M*-oAsg!r-|Yvp<MR@(tXn|F8}}c
z=7Fs%7I&RX`^xWpcDZ(Vb+TL5D!rf^U*0~<U8^~v!eiG%<yDJ2-)vny?Z6iAMY7Z9
zRej2HD7>HXG1d264eR~j)Rjv=Y@E(gAnL|E<I1J|AzKzi)CT3>3R6qEa^rTVVZO`<
zr9+pKWK7TcWQvAJO_*`-wOstE^5dubY@IXb%!;_6VtrrQVOpK(+Q#F4g}XY00Rez#
AKL7v#

literal 0
HcmV?d00001

diff --git a/assets/roots/4264562253e3c442d08ec17f32fb2d58f406ace3-0.der b/assets/roots/4264562253e3c442d08ec17f32fb2d58f406ace3-0.der
new file mode 100644
index 0000000000000000000000000000000000000000..71f9f88dd2a915982047b7b447940d2665519a9b
GIT binary patch
literal 1525
zcmbu8c{tPw7{~qQde$+9WJHc3jcU#8?}tIdBZD#HOraRt;h5IcxCUVyYbIws<lNBa
z78N2Sl4Be>id3%guz8R~azvZNj@{?kr)U4&=l$b-KHukgzt8)}_Y3loD<B^}mJf#k
zFqn*3RXqbsKi4wVw|;Fz@oglCMu{JZqsM(l1Art_3^ar!L2(q^8G(|6Q5~VZ;GSKO
zkdm}wQ0*P4I7cFd2+4u6yDD5t!ivlE^=A@2{d_=G1vF>?=|H-WE@-G@$WTD*{*59q
z&>=DYhch3h@%@_sQVh<AVZ=Z_OajJ-0b)I`xV;$F^3u3>SmwoQ!G5YvK<3!CjN7yO
zb0uNG^~CnxRp)@uA<ZEfYn)<ji_zS)n|sLxbDAj<5~q?oNAVd`WArJ4iBN(wQIst&
z<Q2w$3iri_B)U`#FGxM0a07jP#<`)C`5zMYM8y*?$a=D!z8c@+v^EiU1oac>%hTkM
z&$Zsoh3nHi-!@CXGf8jkx}2O7m2@GA>eCHHSF_p|jr2M*DXgeqfibSrz3~JsAD5C|
zkYclD9}!D+${9rBDOGiLD!R=b@a}^VZT{m%pTr4HTJ-XtraH<^y8F^>9gi9uSbPP1
zc_VINXXn*Ag=WNSG*#>`+Q!$(ua$1aD9$eyB-C24Vy>(u4hEs_Jd+$2OlrkC;CmGw
z^>E`)X)6J$>}I(NnesZ#b;HzxVH@Gf<Cl}Px|Js0hU=vPMaTIh`9ABuJAM|k`zZrc
zaizU4F6K4aCZTj0g|V|Kq<oK`vG&W;g`04tTJ3-u7wyS#$#Esj!lb$yDg*_u>iL+x
z)!J}eGVaj!%ZB&U!jg6xYtNhU<qgGaAHw}dV8b8c_Z`wkXxfI%(61_W8Rfjj^lk>f
z1WXx8VJ+7NYzFRP+cIY=Y_FOqq`t29nB~t#BZ}csNiD)(3o$p2OT9vW9T}YEL@9TN
z?6~D%>MN0!vnyrTMOv`}3=W6^MZ67=w+8a6M9EZ<Mexc%UI`Dw^1a|^%KA5?#k^FI
zmkiNB>OZMA`7YHs0?ypZ5=Q|cU0nkmeUNa{j>+*Po?-?0aaisIntNanlf}h3K_H2Q
zv((qYIT}LdAZ6D`T#8J&?B$O0VzO~|OfOatlf!ZMW%}W$qFWD^7t<XF>52S7NHn<r
zID(knkL3Vh2Z03Pq6JFt3Yc91Au25jRM}-|1QxMZMVTpGwt6tUHg#a8y87)C=O8xn
z`)Y_9EUE?|7J6F>Yn^ACKyK}mF2P3THPFxPyN>qI-*~Qgsr=s1Mrvebz}m4I>Co7l
znZ;V_G&Ac6I(eNMQ6rUnBD6eHZnEoJ<RhgN+k0v7rytCKe#~g~W?|aYd7nz|CGopm
zhnKvqegUI3xe)fKThxj&ae^&gu?n^E?He9{X>K_Zd#u&8i0r!MYGZszbG%kQxDuVv
zNDOR!;u1e=wz_b3Nfp${?lTzdP-pWNn|<(am1oRwxwNYCE3W?9q~ZJedbQ7u{?sY^
zI31e!HHoS%{QXgssj~Z=Nnx6{&Fb^btcQnp)>gyss1ftiPyaX>3;)70=*tbgh^*~|
zLK7FcrLj{D;l`8As$ntxdH&L_0unLh2sAcB<x+}?ayRv)FN9m&^SbfEvOVk;$HDV<
zmK*8`-DmXZ75{gnW#r)9rs?r+*!zfYe4)VYB&jlsT+v8MKTxVhpCDOgJ&^I9DS-qM
zE<{D1OpinG)_VrFUv^~aqeBA0edm~2ATq;zDB0K^AS;%rS=xuZI5W%BP><ivh>RIc
zuNd|=r#~292-KWQ{ne@XVYJDuB4b;Q;B-g+>t}{q{X?kSLi*TzUO(SoKRw6jkKfd%
zUF)TUsRqm6Tp2al-7K~_9w2$1cTR+pgGU>!$DDSSCZk6QgN8$A36fcnChYMoe8SVe
E04K$QhyVZp

literal 0
HcmV?d00001

diff --git a/assets/roots/42aaaa5ea487b4f18a25daaf86f22533b7ee39ab-0.der b/assets/roots/42aaaa5ea487b4f18a25daaf86f22533b7ee39ab-0.der
new file mode 100644
index 0000000000000000000000000000000000000000..db0e85a5da32a3aef203bc6279821cd6441d21f0
GIT binary patch
literal 1038
zcmXqLV&O7qV*0dznTe5!iId?_oimG{yS=0VFB_*;n@8JsUPeZ4RtAH{CPQumPB!LH
z7B*ofk5EHF1AY*PorlAzG$pYhwYbDk%s>Pr#Kptwo0(jcU!0n(;8T*KXQ*zV3KD1L
zk%Nn;>IPS3rsw4=1m)+KC^$PR7#SE?8p<2U!Y$=w6cfnIOUrji)hz}q)ypU~kQ3)M
zurx3;G&3|bHZZh^66ZCtG&BM-A>6^?$R<W5<iKNOWngY%<YzEwV&r0KVq|1^`J?}H
z^4eQ%H<mwe`h9-ly=7`YW-d)GSUY>&DPxD)+-Z3W`CQ&T6rMZ9DQMQ-($*546@0Rj
zw@Ga8(OGf+cTC~VTW|iosOx{CFS}_)Y5R@s3!hq_pXudxp;@x_z(OIJskvTXZX93g
zYpmC5=}=lHQqv$bBjC7W`i=z+i6P5!{Nx|Z<zs(&a+mS*e+NP}beI~JOMabqCp4IO
zdNsSp|CztdyHt)uo(T|0?pw7|YD0@u+t2vj8w2u|T;w`)wXjZpxpd9f;5?=H)7sCj
z)Woj4cIcSTQ&z^CZ^Qo_RIdE<>x4@4)X!V90vRuqUwbLE@TXMs?<VP;8>W9LV>5R4
zT=1WJ>#wa$%!~|-iyIpZ>cB}zR+y3TKMSh?GmtXi111z%evkkQFg>yX(*uyt$0Eie
za+?3xeJAHLwx_pxC@++%TBfzzB*Q=+B(2OMVIbCkU4b-6fgp>Bflwo6YC=unz(`_b
zIC+sTPVefO%{6wX|JeTL)tEY&<;4D5XDfF&Px!E8-}_JR6=&?ZawV4S+dHQ>2005>
ztvvN{eb+C0?&2)FS9%V0^6NqpD_`qzm|s`^+%tcl?8b*nN^dWC6e6;5myG5TiEl!?
z7Kw;FHZ(oq@PGRQ*0S(}GLfHt?0@oBH7Ta$LtUNx=6yf6D+-=rW(+G>E-*<>+N4o#
z?HsAYEH-bM60gazeU7(k|D^rVwf(8>nv2K7TlQwJyL02`HtD1SZd<dHPM?gfS0z5X
zbldj)iIpd3-?<&(ay{Q-eSO8{#cQQXcgY+ytLc}^l{sAMw$7Aw*|!*5#dl#JPBtm&
QR)wrCI9#ig+Eg$N0NJLBLjV8(

literal 0
HcmV?d00001

diff --git a/assets/roots/42d0b7e6a82098efcfb77957c139770ef5df885f-0.der b/assets/roots/42d0b7e6a82098efcfb77957c139770ef5df885f-0.der
new file mode 100644
index 0000000000000000000000000000000000000000..e7ad80617e015875eb96b96faf0690c16dfdd770
GIT binary patch
literal 1374
zcmXqLVvRCrVs=`<%*4pVBqVrg_s;9e67wA5x#sF#xUZUi(SVnYQ>)FR?K>|cBM&Qs
zftw+>0Vf-CC<~h~las5Vq=7hy!zC=>o|B)Hm=m0to~Mvkrdyn7C}SW6l42GXMv@B3
z&o5C3GBGod6X!LwG%z+YfPg4*UZ5a?OEr6%n3Rycz{twL+{DDsV9><G#ni;a$gpNj
ziP4MAsZV#kbykyI*2(L-OS5Cs64~Utmk;W2hId*n41JkyQqGh2Bvdv?^^$OQ+(X%w
z+iN?G;(6!I*QrWQaFAcNVOvH2%#dju5$m3??MY%~65GFig);NDDg1l#at@uox@<Sk
z%Wnsnek<NfyDPrB#OeKq5`EP#ud+j<C)}QUKdzn2;rCj}?BCx{C3M`ob+G^1x~uh9
zY?|L)7xQU$HO^MQ&~`yaH~aJI+K;U(ziM1s`~Gu_w@mvV;l)-(i=qUzuc;TRzirgb
zO>3OgzC}8s>Wn?tFE@YRikKhT9*<dCPRD-RlC?SYkJG$BHD!g<wjw_p-=>N&_)Dcs
zPvbb>Q~g-`z}%lApQJyAWr^+AX>C1QVKM8qQx=nnM6<Zxl&~M$nznwPcGvdvzIugn
zyJ|`0Y@I7b#m?ci4}M(F^cOc{`FUVMg1PIxXFNAbde_Zalv@((w2$rU&6GSQfi;~Q
ze5~1h9qLq$cFkz2>|3(DNugKymwMsJ`^Owh7WjUfD0auKCtfqzFtU*6M*g8~Mzz16
z#Re~{6aBNhv?lh=k8k2KZ;oe6p8j0@L7RQ)&78`RvYfdx%kubMR`RS+&RTq5+Q4xB
z#*pfNS*O!h-ATQ$Xr9+BcE#+*{@X_)f8A3$z%u9Ys%W#xFKqW#Eu70;wvqez+`s2%
ztYACzLu>KE<^|hTi<UAyW@2V!U|j5E;9$T9Os%r~jEw(TSb&+K&43@o7Y6ZJ4VZzH
zfh<UXk420{ggIt)abx?6GaHs&o$|<Rn&*GknL5a+446@Xsf>}KrsB;vCY{~Ub(6GX
zE${5RA-l-Q*!SoAC0f=lnR07xx-Ry!S$;z$a8roPWWOWtt0%W6sJ-I!c<^=i@s}Bw
zc4rwDo~c|XxZ=aizfa}&=&v{v{<`dl;xhN(P~VLGtV`ZqS6iKQ%h}xf(Xp*hH#JLI
z9lw0rcOFO8=XdArl76pwk#OeX@r5zXu18$Yd=}3ZImyCgcS&Vg<x9D9i=H2h6rC^o
z$a|LE{4x&R>>InnMQ$~}`qvZs@`B&WGv$UGT?DIQHriblaTS$FQW3s%+V@;c^Fgyu
z0$ceya(6roo8NhFTAHPMicX&Ix}@s;2_=#{!q!Y$BWCn=ZAR$78M`i<-1~Ae@i1T8
zH}95&cf8eGjUp;1hUzprZ!VFqTBSNq_WHu^ooAi&SeB$U`*xac%UNOORjF8^birxQ
zMF+zP3-_^{Kb8LW>xYKR2`8JilvppYTL<munYT*&=k90n{i?fKd&T9L{>28cgrEPX
zyXSq(0jbs7=BpgLU!37FK}Y0^eUQ|XOQ%H+CuW|1^i$&KF5~$ki&<iK7JlD4<;FMT
zgHZ=fx@%_Noow}7cu_&({Pq2>ZyYWCVVriQB;Crqe9rT`OZdy2)4H5L&Hv5gRFQn~
z5r2O5m4&t?(_6QDSUO%)_;bN(^RE~AN4j<un(ynLzOlm4fAjNg%);kF=B`tXJX3EP
N&+*;C)v!XV3IMhJQ)2)C

literal 0
HcmV?d00001

diff --git a/assets/roots/481f557ae1206403ecc941543a54504072f2c1df-0.der b/assets/roots/481f557ae1206403ecc941543a54504072f2c1df-0.der
new file mode 100644
index 0000000000000000000000000000000000000000..d46aa38fd937d6cb86c99eba2dd0c38d1e6229cc
GIT binary patch
literal 1494
zcmXqLV!dS0#Jp<(GZP~dlYrv23ts-J{3ngf|E!7=>V0Xz%f_kI=F#?@mywZ|mBFB~
z!I0a4lZ`o)g-w_#z{gO@Kmo+z5|#|j%dAQ*$yW$TP0q;6&&f~EOf6Oj)^pS|R5wrs
zso@rub51QPDa};?QJHC($%!SI`FRSCr6n2pMVTd)hAIY1Acf4r(olsVMWw|hsVNG6
zsU_w4McE3@jtWKwN)r4=28M=)1_ovZ7RHvQW>Fvk6Eh@%!Qjj$CMD#+V`ODuZerqR
zFlb`pVrpVyWZ3(&;>WYA4Lm7x+oY$Zq}wZ5$(1tJzW*JQ-gELyO!mr&&vrUJRq&pD
zYj*X{nXxx#H+WxfanM%3{9>2EZaYq?<(^aDYdfeMntpuwyV<JmS8y>*Z;e_t_m1Yt
zN2ctr3w*t<9o!tYW1*wP?2Eq*>-!(XKip`~-zVmoaGkAJ;^!(gfz?`<FI-ITm3G_b
zZg5qv=;G1jThEg#UFy7(RXW@BOzbs%g1WVqA9yrTqjTqh=%2DTpR2F^KZ|Ml!D9iF
zW;5yRUAfaFl52m9*Z=$fHqU>3bKZj)%5Rosmy2oLKC{+ZW=Z=Ux8gX-qzu>aCli{S
zb~|1Bkoe%>V%xOEv0o(Kb)4)Kch#I}RLW%dPE+kfHq*1MNv`$gqEX5jomcGc`KfRC
z;J~xTSNyc^qRny_*rM)!n|waJbmrGzZBpqKoA*!qXL4un^PsS&o1d0eUw53ydM7sX
z@l;;toqw9ASx&9aX^8R{E;@F-R<p`wSI`oztB!7*3jdTAY>PJN-P6f)^?JdN_MpGF
z-meMNW8due?*iwog7-6ig+0r?y*1qX&Ql##(G&CZD*S%jnlrCW=T!J-si!9<bxSo(
zt2(?VKq&JDUzA(7)oZn1$|tvNXx!(-u;j<Je+GKTFS&ht+E@Db)0v$Y+M~~~2_)=p
zHr*bVe$V~QOplLC7K;8`+mqC18R~B-wsT|h-2dB|m>C%u7dsg^81MrVy{s@J<9`-b
z17;v)APW-UV-aH!*|spmlIidQ`@XI{zpng{S$5Hi@2>$LNSYs{o&}g`*^pBiFpC0H
z86!jCQoeIfUhcQIxY`+Ygemd2&ruO^-ERNjYyt5<sV&C^JSW_{eOzsFhgyEYHKsVr
z1>gHuPusdwIHpk~m#?u&P`b<SnE%qdNpddtIU~PBmvfuH>{dATgUe4ZLguych4XC*
zCvW|3(4Xg%&{AQmm~!p6qr3$F^OL28d-ulNGikST+`#v3=QVpy;b|iJ_h!jP?F>6-
zYPBK0z&Gx(=0|0XqR4Hl5A~#}$&~A;m6>*HEYDo<)B3CO-By8;lM|T3CO%)k%l(Sb
zbU~%Zi#(^~Jl{UWdzbE#TgKf!%Uu3P*&LHixv|yo$ugU&72({s-zG|({&=pqJb6ib
zzE7aVwI}h%=WlD&deZ7q84+jw<2F-M`a#RvhfBO|&E$S+PVUHvUg09C_+j~rMqZs4
zlg+l6Z#uO>TCHl9s{E{34fDLU?0+ww^{?2d@X)+tMGw0&)IUDq-*UufY2xG`(*@YI
z3{+R{JW;sgea0Exx~~uF_?uSbZ`+mA>|B1fYm)fFdC?VOwyuwii|#&5J2mt2$)jq2
zc{5nt)@{2vyJw%|zKzE|Nj{EYI;C?X-;4d`Nz+>nrJs&0m&~8%Brv1&+0^cYJ#UW+
zUGF+~bw*6sH0Go4%Gpf+pMUbsUO4gH?OVF7AI`3uyGer6_3)&HMdE+lw=Lk-`FP}>
ba|TCNy!D5&<lkr5be0`^#J6?lK9zm|c{PD@

literal 0
HcmV?d00001

diff --git a/assets/roots/4a7cdaf39dfbf67800700df49cd84af1531b0969-0.der b/assets/roots/4a7cdaf39dfbf67800700df49cd84af1531b0969-0.der
new file mode 100644
index 0000000000000000000000000000000000000000..1449f866336129f369b7dad1050d28facc41f037
GIT binary patch
literal 1079
zcmXqLVlg&oVwPUO%*4pV#LU_J*?^agQ>)FR?K>|cBR4C9fv+LA0Vf-CC<~h~lZ&gN
zsDUtu!^Oknq8n0FT3n*wo}1)hsBWMN5@zO+0}2O)28SpF<>!|uIOil57b_SmI6EpB
zDHs_TSQ^NQ^BPzh8XA}ySQwj{T11KS8X<G3ZCw+i60(OFSs9p{82K3tni#p5niv@w
zE^qQWU*-P3bhh#@EB$K$uAQb<$Fgt#yUmcX;sLXuta$*(d|$7ODW;o)FHT8bt`N5V
zUSP!=E!)o?9szb-_uWFf)pHLE`0`E+a=y|2AlA=ptKzA6O9z(t=(;nDk7=)Tkh^Kt
za?RuOBsmi|1(kzK0{gtA-Urxc#!A+^9zM?4A9zyvMbWw~d%`&Dg-*+CT(3ES>tyH|
z{>xjW-nyGcdA*%e%%XT<)m|RqtqiBsa*ky4Oo^I0<yOF~kN=lyrx`9eX|dqGto#m6
zz0b>EqzA2@D*wRE?#7bCr=pG;HoWkdHGfLxKgqi{ifbBAO}p3kcC!&{YKzIUXMe*5
zw#Jw3*WVz(dz6Wpk%4h>6QdL`M8pjEfpI7+%*gnkh1Gx=NEyh21o&9QSVaEb5;-#8
z;GW`MIVa0MtCN*IAAD>v-~&nXgVeJC(+`_L<7JS5JWJzggT@mEjSUOx7Syy=<)kDQ
zSn2DhWEQ0+m*f{!>ZRzGfKrZLUTTTHv!5+A#i$w?fYJ<*0;d`vZ46>N0tq7!2Bsbz
ze~@C3UZ4Od-RU^ny13dWrxulDre!84mZTP?mgNKK%>2BZ%;FLQ=LL=n?AvTJN=iU3
zC@(KZu{*gaM<42z_#&Xy@yVd%8gCq*oEUEu53*1Xs02Cv05b$I{V+1rPrq$&;{K93
zwTe{@1?NPBGCM@3Cb%%J+4R!De|Es3v>SE323rdZUp~q_{<+|`f@s?X-VgiMFqXEQ
ztDEn;e|v)UoX@9ZAH`+dSUh+7Q-_30W{UqVY}p}xt7LKgmHQiJFs;eY&el;?DO#BN
zPBrT3Go$C9?yvUz^?5?3@@<xz&toF~q+Xf6@5~=Pt~07yrYt`aCW@BYI{sIdmpqa4
zx+$1t*%Kcn-`<{G=c0?>q=W?IUYry9JM*yF;hsG<t;@2x)Oa6Eo{_Mw?wHE-uEh9>
zeQA?8+s)2)&(^j37I-D#N~Ff#=1*rds)O5dZ>V(?Tz@t3tliF22PWi29g8bTy&m&#
G@go3thmqj`

literal 0
HcmV?d00001

diff --git a/assets/roots/4b1ec7d2704f8539cb63fb2d863f09b26393e823-0.der b/assets/roots/4b1ec7d2704f8539cb63fb2d863f09b26393e823-0.der
new file mode 100644
index 0000000000000000000000000000000000000000..70a9ec9829df763ea8ee09dfa1b31e8ec996233c
GIT binary patch
literal 566
zcmXqLVlpylV%)xfnTe5!iJ!6il2S;rFH3jMQ+N4GTMf9_IJDY4&e^gsGaGmravN~6
zF^96S2{Q$|8cG_7gE(9~0wJk6nTZO{`MCv&d6f!|PKF8wav&*Y9&w12tFuCgPq0Ez
zetwC9v!g<pv4Na8uaU8#p`odPg{i5LS(G@hiG_hFNXP&PqNr+DnSlTsJJ=UYjBKph
zjVugG%t;I^2Tx2Bb=KY4s_7MWNohyftWW;SmnA%(bU(=dVCFTuOfk0&D!!YqKlT==
zDYBh4rP_6;?(WJ5%}e*Oh)nl<uDIpEa<<gz{U4>mBBwq*X4+%hzR>(3EAN5KQ%)v_
zPHH!2rY=r4NHmZKhJ&m!i-dt#gUFSX7tS44#rhYd3Y*Nh<67?>zvpZq3sS(xBF2JU
znhzw+&&c?ng#{QvYzF)wzA%W-YQPMnkRymWlffX3$&g_>qkGW*Yq!-8n5wq5)qlIT
z{kOI6T8-^fRp<5d^(sfWrf^Kv(+$mx-D@Dqyd%yc0;pxZ)_%M6l=L4DvY$GBp2pyp
lH*M~f-5X3zVoGj^s0)c@URUXU%BbV9^$)9{W?Wi%G62LOusQ$$

literal 0
HcmV?d00001

diff --git a/assets/roots/4e9b3837a2d6eb46985ae7cc638568fdaced325b-0.der b/assets/roots/4e9b3837a2d6eb46985ae7cc638568fdaced325b-0.der
new file mode 100644
index 0000000000000000000000000000000000000000..3bbe4a913acecfaa269480665671716094f7f5a2
GIT binary patch
literal 1414
zcmXqLVr?>LV$NE?%*4pV#Lw7$DPXlzsE&Ko-i3FhjvDZ?acZ@Bw0-AgWaMFGFz`0y
zHsEAq4rO5zW(sySlr#_rakzK{LQ-=w6BV5Ea|;slDis`^3>6LJK~l^-5)i4NU`K@z
zpJ0Wc{QMFHXGeuHV*@#HUL#{eLqk&oOA~VwqbPA+6AJ@VkdOfoL{ZnWCMG3h&oHtw
zFgG#rGZ-{6aWOS9F*0n7x7En4ZBhT>9hg7)z;}OzBW{v&_RF)rSvmV*g7EQ*#nlmW
z?=1Z2;w!9`&da$$;Q6-qGJz7=9f7xEw}hESmH1>?=5L#Nzt(W0lJ$#=A#eV%?(se{
z^O-cmD&+_9J1riEiZ>rSlkD{40o#G48SmfBp0WE<Wn^LE#4Vlr5k}ihZVEq@E{HvU
z?!%R%VbiXxw438*q<pW_AuptEs`wAlKRXvcv8`S9IH^AJtDe%f-7QlOvesXEJbC+v
zQkyyczuv3n7yOYuc606Pi~m2zT%Nk_5o6Ipt7R@LHcem(PCNEE{f5@IGk;Q-FW<dy
z`Niz>9k<N6q8~QC6MV9VZQEMY!++w}E{^GbuThh_;lN3*vLC^RibWp130}FPHO%sZ
zc;vbtTcrF$tX?f^YTQ+Jl6{f4a;l}*>wy1CHP3_^Oi!?JikKE{GAZPBUibBY0mHRd
zv)28NX!L#|m7d0$Wp`O#dJXRfsmq$zR_@ab-Plt3MKD3>fGEqEY$^F^KiTzXOq(Ax
zL1<rqw$@j-8$lM`iy!HkH2VAR5??5ww@s_^^91ql2TfdW|Ejp+>@p>6gVvThi61Wx
zDSzAXXHvkjIdN5KF+g!I2_@wTJkJHsJ=2*LwB>O^o$*nhzx{7r1vec3FO{=xZ$gaB
zl1;N${t^k!m@duyRC>v*wUIOLGJKC!%dSe8Vpr<>lJ7keGb01z;$(wFaJrRMW|1%u
zYY^FReC4IPn>50TS*G-e#CYVJ2TfXGAPY>`vV1IJEZC*_K+^n-jQ?3!fO(3|fFHyc
z2Ju-9n1K{>G6d!+U@~N6h)p)kF-f>MdE3Q59D-WwcfPK>vE%8!!>boAYuOT3)DtwP
zotsnd^9q-JE7oT@zpcwmd$_S+`};Nd|M}vMHm<sUJLXuUiOJ3BM=u)8?v8l6O>Nt$
zi82qQ-5Uc>zsbC~b={8WnX_i>3BAQQdH3R$yOwi4wg^;8JP?a4C|7)S%j6&D>zYrC
zZ~l>5W4>X6+vE0S&!i-J#P8d`eA&5Y&9rJ&H$Cpxf^RrG{@X75XB9QuK%r{?YhjM<
zElMv1!>t6rF0ptvk?ZZ;0Jf4fIZP9_oi<Tf@VETu^y|IHuZ#Eh{0NSV{;8s=xc0<9
zPmSUW|LX**#Hv^BovzAa(VBi~SKY~=Fw>oz`2Jp<%vdO+>#$Tsr%_{BPm0B%TfYi5
zSFF8eI5B?W;*)*~9f6aMo<Ct}_KtOzlBqbCo7Zx|<OzEpcZkgSsA)K#VcOOTo8!y{
zC8547Nr$)|rEe;q5ohGP+9WIR6x(5Ieen{dzcY^q+&<xXef=~hhM0X~`}Rbw`XzNa
zhVe(j{LS+&`XpNTePC-@?6vDW*FBNoD<Uhqc+M!wTsn4vZ{6avuk8OjYEJw5pR=f3
zySw9Cm&nSnjUgAV`%X9!S;4fZ)X;ykz*MoPJD4gqzq49&c(&L!vkU7&x7?qxS;5s}
rV~@ZBUEkv_>rcPz@fBP2-077lf5Y{UuU-ot=ebkO(QjU!dt^NTu|QsS

literal 0
HcmV?d00001

diff --git a/assets/roots/4f59a39453cfb9559e7f6bd8c54da53da642b714-0.der b/assets/roots/4f59a39453cfb9559e7f6bd8c54da53da642b714-0.der
new file mode 100644
index 0000000000000000000000000000000000000000..86b7dcd0b416fcbfd1636f5c019403ede4ddb413
GIT binary patch
literal 837
zcmXqLVs<oWV$xi|%*4pVB+QmG|NPATJzSQLK2&r$KbvM2eae8BjZ>@5qwPB{BO^B}
zgMp<Xw*e;`b0`a&FjHu-AwN(a$l(%ZbIeVw%Fi>DG!O>~FbfMn1Qdeu^Gg(*9Tf}>
z<ivRmO$|(q%nZOFN}Si&!obkb9LlA{=q5%bWQQ`cGB7tW@-rATF>*0AF)}i2s%R)Y
zRdMxk;d=LmfRft08`nF^zRb+{9-)}<v!sPle+`pv+vNq$Reqb6Trk_kxUcuN#|d_E
zGoLT-I+Tywy*B^4Rq}^t#)f;>ca~YmCeB;(ugPrbQ?IZmt`C3y-6Hm@<kp<ork47@
zHYfzJ<y2j0*tG2D`Zw;9{Q(y2cNVo<M*P@yb>&Zwbc1Q{rc}h`cP<V*V9=Jf&^2vW
z$m_+2C;s%f^Z()t1KnEPk^<A~9V*}F9f{1_UED7I$;eG(hx4!Pva3#Q`7~dJPuKf<
zVN6`+|5sC)PFr-X3$Vz){aZIl`si`FkcZ_D(ogWuX;;2x@1Rhx&~T)|$Ie<st&e40
z&a4xwc$t_P85kEk88{g517k;4n33^63#$P$kTT!{3GjmiSb&M3%|I5!=VK9L5owV)
z(`xc&56_e-dK{5+j&Bn1<KjRLWngjuhB70=j8EoKjuRG29W4vgP%u;GTlY+3_o^RL
z)_E*3sF(hu((AqD#KP&{wtcKBI1xPg42Q<!8LH=%m;Ah^c)6yPbFJU3QmaGUS)CPS
zF76VkIlYd3*7dVaf7!Y`;5w_0`3q+6wJ#GFFy(#y^x^2Hx6#}0{F)L|K2LaQebCye
zpMFfXzSkWSeJUy_I$^!YcklO$f6sTAnrj&H$LaEMH+ki?H~BpZX5B2UD7;wYY*LyR
z9(jl<MlC_}yt1TNUx)M3D^E^y{8kope&MWHl(cYVY#hgx3F~&;I45%GLg=TqZ$~CO
rm!~Bj*!jZo`t*tf<~*;WbxSYS?h=^SmLuJ@Gt&6S>mw8PecTBE+ObT9

literal 0
HcmV?d00001

diff --git a/assets/roots/538933b9a76ad7c55cbf4dc2d4769ce2bb50d20b-0.der b/assets/roots/538933b9a76ad7c55cbf4dc2d4769ce2bb50d20b-0.der
new file mode 100644
index 0000000000000000000000000000000000000000..603c65ed6e7bcfb421405f44c86666b82224418e
GIT binary patch
literal 1422
zcmXqLV(l_$VlG<1%*4pVBv9J>w|iX;JHxM)s>>f9Un^q3%f_kI=F#?@mywZ&mBAq1
zklTQhjX9KsO_<5u$xy;T48-9Q<_}IyF3C*KSMbTq%`8bxF*GwU0m(26>%wFLN|SOj
zlNEwfi^@`q6dX%SGE(zOGLsWaGV}8kg7WiA6oO354CKUljSLNpjf@PyAWEDUC}?bC
zXk=_^X=)iodj~WzDIt5Bk(GhDiHV=Vpoxi#sfme^Ve-DKW<jMl7?l^uxI1~iOWw9!
z@$ZqTS3R`VYD9tsZdLx(-mbgkiq5ZBMt40A?cB@nVOt$FBV_%&Si=&3_CEoNcbA;c
z@Rt@!&Q+c1qc!uhhe6`6#u~Zh9A0<qv}NQad<s{Y_N@Jp_rlui=F=%m*E(B-SLL4Y
zH$D?E&3uyao%oLD^FwZWe3;>UE$#1oaSP|8jDg(OA1m{V#72ue_uhB+%ZXde<`=J7
zE>sLOXx@-}-N0{J^u!MZDy#RqHl{f9?p3tXw|O~__q4)RC-pP8@@KzGF_>U^c5-T?
zqTyEM0Aq8d#};pY7#f^${g?FfVysc6Q~Uj_GhvbrzUNl${<*cxbIM2c9}|~0KV{pT
z%-3+|flz3}GV8Q0mhHMHK3upc^709<FW<M=@S>yEGVWn>A6@<3nAmg1w_$=w^!Do_
zrFU+yc+5X=P@`kZOPN#4H+~G;UhU}<`BXu4MGKSWFN-Oevpm`Q&&pSdhzs#FSKX7}
zIQ`wv=@lAFPPj~ZS*ymnETU+3rSJ{G_;p7ul1wr-wHfsNn2<QnDCaA?+1W)td2hPR
z-hO&EQ`Dv4aLt}MmIt;x%>Lf2svLe(sNt#Shf@Ccy{~0vhiGh3wE0uR_5Xc!cIp3a
z*#(lUtAG8_ZghHKv1|A5Rex<Cd_HyGZ~Ao2x1S}#UM`)sX7Aw%Gd4Z=x#-F=cjubi
z^GwW)42+AN3>*w(feBoek420{B&;|hW$MpKQX7P{SduCiI*4{CdK&P7r1=>c|Ff_F
z^H!SyKZq|3;<Fks11aQG2FzN(RL01lA2ZYD4_jQ%6up91my8U1w|oe^x`*p?%6#^?
zs|SlSQmPj1<a_ZmwpDk9x$7#8FVk295>|TF&3`o0OjFp!J!@{Lg3XQDADNAI-Evr1
z{Hl53c9&&*GZ|+;*;BtycuL)=WpZT=X0|PC-NtIExu@#p{gdyBu&9=5-pId4TyXa@
zwlm4U8b3Aq+~O9<Uij;(#?td_4r2eSYbD|=g_Z=*t21&ESf)5}rHr3=P0OD7Jr`fx
ze-^mY%-w#%&f|NS?nKM@^LZRpZJxtrKW`(mv5=Jdn(s<EDi;|Ye?&0<Q_WD4pA}_O
zlQXZ><8$N3wDdfmrUUPGh4V?g*PHcS=*EKVm#j+{zRdWs$H!hs&h<smfyMiU)GK$M
zF|;}S%}Pm(dBMs4v?bAte6KaCvb`)@!oX#B`mE{f2M;YyCj_@?I62C=guhs^cD3tc
zRe?RX?NS|oOD~(w|9WRh<xjaivf;e$>ksSCZ+Bb%S}lq{EO~2ELLS5K$LfMg&;QNr
zH~G5r#o>uXdv6?;+o|_yqD$a~@UuK7S3MN>-xmIurs^DYsX)o>?EE7#r3!14i;~&+
z`P9!{%HrL#)l%x^#j>i4F;AX*dg_LnXMB*dnqe0r-X8LDnR-BHwSvC=|NRTQz1(N~
t*RJ-oJFMxJAmOyySaa6_&7H!Xmpi&F9j#CPUG`S~OG5JfOS++q-2kabP%!`i

literal 0
HcmV?d00001

diff --git a/assets/roots/5588e1fad8ea116388ec542a0110b63fb5c826e6-0.der b/assets/roots/5588e1fad8ea116388ec542a0110b63fb5c826e6-0.der
new file mode 100644
index 0000000000000000000000000000000000000000..ecd8c9d212139600c4a68fd2be12a6c50275a4df
GIT binary patch
literal 1421
zcmXqLV(m0&VlG_3%*4pVB#^)F*4pB|91f4VefM4Y9zD^3myJ`a&7<u*FC!y2D}#Zb
zA-4f18*?ZNn=n&ou%U#37>L8g!yg>%qu`uhRFGekSdy8aXQ*nR43c5ykpar+CFkcV
zg!lw21O+=P1m)+KC^$PR7#SED8OVwA0!a%aQ$sUj6C<N2ab6QM0}De-FxN1O>h?7;
zDIt4_k(GhDiHV=Vpoxi#sfme^;ldKmB7cVtp+q}V<$3SEm7LeFj<7vv!z-XML4W%9
z9*-LfZm4eb*&yg6UL0^i$t!tx<7Lgft6Mqk)FkRR3Dr-Yv3>mqv;CjmNz9vL9dy)P
zGPdM%O4`-f;~87_OUtk=-qY`(yiM*{%ih2v(v}COUebKyy{=k!zvbU8N%y8zJ06>}
z-~n6F?+@(LIV~GY)_*sN6b$D&6n#+Ti(#=r)3Ld`n7-T9xWqT}e*Sn@AybSq;L(-P
zZ4VlX%JO{Nx0i-SZV4{AIpvt++K4X0G=8~7(wYu_`uD4!iRtM6+5hJAmS6iMzRmW$
z@{Tp{rpf0yAKx%`UsO28zhLVgaX*jhz(apt#$=kir)|#oA*%6V=jA1$XQKRf1r;n7
za=m+Om*4M07rw6uQqRq++}iV}y62#n&%1{DeILs9IR*<EuZyy9T78}0&at<Q-RSD-
z&ToF{H#a(!D(8JZ>$K@l=-1$Oaq9!d5g&st{cKqB;l&5*Zi_QZj!mfNpYyl-;^OnS
znwMvu3^2PI!+MF!vE+8Lp!vb23#NI?^@s_TubX00Emwaijp50v=2u-4)}AwS@x2)M
za*zDyEY`mVO5{}~9Rl-SH3d4{pS_bqi;d~3vW)Pxm$z>p+fa47T7CBK2Up!x-U@gp
zdoN|}-?c+ld)cpvk0u4}ee*hfdhRUU`He=b=|;ajIP7n#?qE^XXJTe#U|gJRkZ8aU
zOun+hjEw(TSPhtglz}`*K$!)Y<QqhO>zTiM+)|~kcUIDLqjAmuD=tnu4P-$I_*leP
zuuJoSr1?PxvH<g18*(xP<}6?`WMt^=%x!U%_~^fR!TXFQ2V~b6>`71CFzf8L)k>0S
zm#rPQ3d|MQRg|Zxq9DUKGwJfQ2akU9I9-1jb!3`v$l3l=&cT1RcD(wLdW!MT+Jp?Y
z`Ib_FHy`w>{p9vr8mwBSyhP?4hxC2-j!kRr9;ml>d-lk$bdRW>_NhZwV%_G8%ebce
zx_$Yn1y^>ZknwM?NOLg<zTNk}cJh48x%@paJI?g$?E`ABgo^!EPMokz{BVxG#g)ZH
zQ=D~@9{R-?+3xkJm2_Wp*z@@``~F#%t)B?q=w`n2ZCgU9#InY~&kt9KX1#vE{XxX=
z+Rh$Vs}%w_KI~L~{rz;+d)A_9TaWZlD?aifta#3z%)sP5@6%<RrQ*va<t2W|sA~T7
zoT<5OlI@~q^Nk7<SIjnenU%9ed2%YtYQfKZvcW2z!LkeO=Xy*Md{oQp|MmLbMG<xt
zbLHf<|0(X465h5^BjxV~CWhlV4U6`Q1t{<rHO8Nr@_+ZtXS*hxe)aPh&!KfkCC?cz
z%#PVzS7Q<`zV?Ity0fp=&wQg3QrB}%Pbkdey|}f#S6srSJ0)g&mO3Y&=8s;?6vjDE
zMdx8#W6!_U;yS-hJTj89`rpcNvU&a|FAsr`a`U%~_BiZ&B2e=EN%ZcWpF4l{JKi|{
vBw&JRgPqI{-wBtmd_TNlVO`6q@=1m|J0@&wsw(lDEv&ZXYCu{@#kvFlO9NVa

literal 0
HcmV?d00001

diff --git a/assets/roots/55f003ec26723b65ec4b936600e5d1af9fa80fa9-0.der b/assets/roots/55f003ec26723b65ec4b936600e5d1af9fa80fa9-0.der
new file mode 100644
index 0000000000000000000000000000000000000000..91d8e47bc5096b56a9f08bf4c263551c2bc465c0
GIT binary patch
literal 1491
zcmXqLVm)ur#Jqh0GZP~dlL&`ce3#GCHw-5yJKR5VY@PBBnW!ZOylk9WZ60mkc^MhG
zSs4uS4Y>_C*_cCF*o2upybXm61V9`PVNQ?yymSR`AORC&M-~$^5CN&<66OV|%Lb_p
z$S*E2R4|YOi8Bj}qlha6<>!|uI6EpB8_0?C8k!rJ85kQF8CjZ`MTzs87$I@#@1Q0o
zCFDS1WMyD(V&Z2oXky}GYGPt!*xYgb)j56zzkScHG3UOE{BtP$zGlY4W<I-&;~5ci
zWD>kPoq2X%5#99epkL|Bt;^p(eQ7%L$r+jF-toQ01`5W(H<#_cYA4+HQoh}DZGdjT
zDT#fI5sQQirtR+R2y2M>u~*0Dp-*_n?#nx;zCV5Z+bzQqjb+b5I=?y^o_eY#b++k2
z!7Xde-B+2v&fFFHHRWOg-{wxw9bNjYms(skYWgz*gev}UZw)?uXogJ7;&~hPDKEKo
z=Y+Q0tvpw`&Kb9UGU&0r<gqTe8lc)S^Yq!`gzs1Xo2DOKxF>G)S+5<guTNyi@$!ne
z2|d1)lGNoiW6zdj92`IXuJB2jQ^vSge`Ss_{|$SM9X6SaPHlCW2T!t{dRpa{`ts1V
z07pIh?N8q3T;H$8D7Z*W(<|GAZNeMjOWS^Dm0hxV`{A1I-G`!Y7SGn#IccZ;B-8qT
zk?KaXw&>&a+1;ViUPl!YZP%R+c*tS3Z$p2wW3T~7q|FT3@?FUjt4;|7B<%lieb3bP
z{^>{mP0wPSvbZL?RaVQ=>O#oEi<X6R|0@36TK(bC1E&7GX)3BZ3*>ZG9O+#C{_RXQ
z{cT)6{<jyMF_&8J-m2Rbf5gPZhvBcp<aFVS=FdE~bh8}|ua<1%syxkbGHAWifAju_
zi{+|p16C)qJr~_-zs=QriuuO6PacQskCy(M-s{>gwOp!5L&|}liJ6gsadEOiq5(fJ
zY0C;TGX7^_HDCr(27Dj^evkkQFvqbO$b<OGED{D{4I<)m&&qXQv(zrQ9CKyC4*3lX
ze~u;^$buB`v52u?mqyK-z+}kC5O%dX@0k+gC8yaESNX1|DaSnix8V4sOE0Ia^<H%B
zjZjU=RgX)NA~O%X-g)u$7Y~EzwadecXRf^bbo)iUNR@~?8G3q2H?p1-aO)}rC@e9W
zdXZtq?#q9_8-4OzcdY7x`@Xz$rxzDl>1M{BKJmiU^2#r#gMvQgv6Fsh{f}^Y`nqx6
z`UNxB?pw*2cG^PL=DxH17vH=syTsl8)c$R6tjyvy=KrPtLu6;e=2+iV(;xnPB60M`
zRf`@qo4=nl9=(h5?9jPiY1=n%g3Vq>FRQ!J-)3z&XRm5dZ&bU8dCG-5RSSde<xTFD
zQ2QIYW^e!OOXt@=Z__y~&zZkCe`U*+;{Co0OQijj6F!~cTUEbgj*se!O=;E^|8Gt)
z_*T@iFC$cd|5&k(SmtE*e;Zxj?p_p{wc*xQFD6y>*6Z81x4DRQ<}_&AO<y_ZYF(($
zv3srpGOu1*&u0#P_pXYONvz_^i$nX|$~uJYm3Dgw$p$fOVX9M<lAELY<+E*^+$EWx
zn{~H+H;*}XTG4OA_nGbztp~Mtg|1_Jb%A};oz)kbrj?$%6!356^Yi-ipO;-s)cUQs
z+wj7w`R+?LDV-9t3J5<E?VNrzHHq1i@wM~K8$af)J-;!T&-KfKD4p55N0%K~yTbj8
vx{n2~p0uZR(3ck-&DtRvS3a2rZ82(2%1q&zIA{L!S0!S9<ptSh&He%a7XNQn

literal 0
HcmV?d00001

diff --git a/assets/roots/5cd9dcebfc1a5bb0aa6923e532de48a56851f8ec-0.der b/assets/roots/5cd9dcebfc1a5bb0aa6923e532de48a56851f8ec-0.der
new file mode 100644
index 0000000000000000000000000000000000000000..10ef4413d71f2d7bea1f20618459f1eb18311119
GIT binary patch
literal 502
zcmXqLV*F&##8|O_nTe5!Nti8X{`G^q1$;D}pB7eE>zt4}$Y;RC#-Y{ban6>7nc2Y7
zklTQhjX9KsO_(V(*pT0V7sTNbW^>F<tjf<blr#_r2`~!_Km-(m^7Bg+oE;TR4CKUl
z4NVP9jm!+dAWEFq!~ls)iP2>S0&MJHH!?A@v1&K6Feou6F|b@(-DU2-IGFd}!LDlW
z71eIu$s3Zs=}O<`C{(<}@FIEdEcM?XEc0St*)BcVxN32<!VK3~vD<%N2;@GV^WgE`
z_?D#41u4c0POIn_?CMykwV?Dz<GLiaBaOE$^E5Ze{nCqB>}23zzz_7VtS}?ve->5)
zW*}w22NK{139taew9P;k#OGrXV-dOh=D1aA-kFED%4UWAp7XgaH~eWMa_BN=Fc_pV
z8CZ2Ie%xCpxc0*Ph-v!QUeB$Y(5rnuE%dO?V~v#sT<&}y%p-;V>&~2_;iu(q>T4Xu
zWXSNUl)=yXh}9IKi6<l6<|+yoE$^7q^~A^P_OvT&y0f!Ag@TROUVpMr<<C~GvMWpX
G2mk;n{iXK+

literal 0
HcmV?d00001

diff --git a/assets/roots/5e021b686c5cd3be1691995789dfc41472163d03-0.der b/assets/roots/5e021b686c5cd3be1691995789dfc41472163d03-0.der
new file mode 100644
index 0000000000000000000000000000000000000000..83fdeb776b5d848d48813c0e7346b1c9a2562b91
GIT binary patch
literal 1500
zcmXqLV!dI|#C%`@GZP~dlYq~vpQmmo=Rc7D?sp@axoxfiFB_*;n@8JsUPeY9RtAH{
zRzq$BPB!LH7B*ofcPB$>14$5vLs-bYC^fMpwMfA?F)ukIwHU}W6foceNwN#G2PfvF
z<rk$GN*PFiM7V?no&A0NUHlcC9Tj{sb2Cd)Qw+5YG(mFA!b(uNpkPM@=hUK-%(Tqp
z#FEVXJO#(nl8pSK%#un2IdNV?0|P@tO9L>766ZCx0CFvij7=>~Eu#jFJDZr4kb{ts
zm4Ug5iJ!rsiHVD;iHVV6;){?;m$<?<uHjX=d-S|ZddW;}^ToBw1q_9Ig6|*sr6ttw
zT`v%}cYZ<9_Qd*=-u&XrZ69x7NqqNTaQg8tZFXG0>|%aSer8g2QzZNOoXxEZnySjy
z7f!hT<}dHBIXS=XZ)o}=QulM;k!AY+^)u_Y{z-Q(+RMXmt@CxZ&gHlLGh{?o*FAll
z_vglnCzDieIcF#B2>tu&;GUdq-Jkh-XFZvnlR5K8g@=Lb)wK_KZCn%n7)=XQ-;;j$
zl-{=NS8m6TD=gS3pL)-OW7iVDm7kj3%v)Z+IMe9iobFeoH9KankF-Wtj8gTM)iZ9s
zdl1-snA6QK*KX#osp7Y4jKdvmdIR5bZ;M&4lPq;V{Dl3Um$64?uXmmKXmOOvmR&2u
zY|rPf`tKRB@574!Uv{j0Y5sfHjxXF+KVLXI$#vdnIW7G0=I)1`2|Ic;!q$k$&f$7q
z`1(BGUE7t@7JBTp`M!QDuaeIJ!NxaX*558KdKA5V6N^&N)P~8KFZz5^KTc%UEhu4n
z)txS?nHj{i`}+NWtWdZ83l?i6))!njyl9n<;wtxZ8gtlO%l0=(sBgKtZp-O_XW3tT
z+6oO`F1s(*_Ta{Uhr7QoICa!7Hn!4>k#iJmOg<-3n63S0S=V;M7^^Jz2Zt*ouPI2a
z|CBXjRneYsuS?!@cMJU4;N$r8t*mXF#@sn)_HPcnwcPz_OE42NBLm}NCj$oqSzzLq
z<zo?J5!t=Ij>-1dvX3?`eQV!Y%y@It$mj|<C&}_NGX7^_0p?UT1AdTlVGy6yfEh?3
zr!rth1*S4a2Ck1+-CDM<3*4Qv$=6YYVY1Jh(@zhCoL`{Y$Mo~>hDE$z6=v87>#hk~
zwBcHv;G~y&yXNW5D%!YL(j_O+bkVFWVnUfwJrA$jEs=Vm&-`UwqO5?l){^e3qyJc!
zJv?yj#J_p#`n7l2&irwsm@~pHZ`qtL*VQjiy=C59By+j=!6NsW%oed%Ju4YBWsbj@
ztsuj$k{MpH$?}g?%Yv<QYI^tUO-@qZZh1>wV%=UF&W!&pvu&<k<7R#wK2PNP#n=8P
z_O>f;-{$FD*&4I!^(5|v$6jQt@DbZ6HIwT_u+F623ppi9c~VzYpH|*3bx5Q2u=M{6
z+DY%1RC7+8k=`T1cs7GAD_OCWxuK&gukl#xr<F@|pMP1ZBH-S9>g<=^%7~3@v!6?8
z-JHvKeM;?HX0KBpZogQ`X!kX2=1I9ePuty3Id?wr_nc%a*5q*JOysd=R&Ry$GHr6E
zZv4ASwz|G;pB$f&+wb4P{iXFj-QI4={}@ah3JxCLx$y3?f=4Wy9rwI!nD{DXPSryt
z=9P2u^7&HzbK2YEKIbj?S-Nz#!;9ce>T|tz9w=Ar{onrS-kzTK;`g_Ea$o$EXTUAR
z=U4Vt@XyzmVVi3AAJ65Q+_Ut;fo-z;to)`dx}KNAeW<JEm%`^GPoAFTU2%Hiq>VML
jZ?=kLrtvjBKYQ+k?y|so#e=57t!!Sg^VjZ{jxPZK<&}cn

literal 0
HcmV?d00001

diff --git a/assets/roots/62fbb4c96c7627f44989f56d3795e701ecff86ed-0.der b/assets/roots/62fbb4c96c7627f44989f56d3795e701ecff86ed-0.der
new file mode 100644
index 0000000000000000000000000000000000000000..3492b9555d8a927fc048accbdfd510d973a4bf8a
GIT binary patch
literal 1415
zcmXqLVr@2PV$NQ`%*4pV#OL~KH*>S`;nq}-Xa8LT4S3l&wc0$|zVk9N@~|=(_!ue}
z$gwepvTzHFyXWL5CFTTYrspXH<>!|uI6ErnDg>Ds3L6N5RB#D%AymKwnUMtz<ivRm
zO$?0;4Im&&oYxqcOJ&=dn3Ryc!^q0O+{DDsV9><G#ni;a$S{@tMe(V$pKnA?Roi^$
z<@mV8m0PE2i^s9o(KhRvcQ{Tm7Fm*C|5EGBu?-#BN4IreJhth-$hklf#W!AerK65r
zYk%i!CCc_TC5?Mh!zq`0#Z&w~FYm1PuSn)NArz47l&0^yvr@x1NUBS!VY_4_U)_<e
zJt;nlGR_&-ZEd=aZc4j4Vb*p-wxjzV<r=Xqll!^z^{T}?_U~&-4!H0^qVxU}{>rbf
z7RhT}D$uKbzGw38+~7wZH9Z3C7XQ;Wl_%Ccc-3RGYRi&upQm~WvFHBn+0=Rd!h*!|
z6A>jFt|(i5kF`3r==NOBd$BIM6FxSc4WIO@ZchM9vdR7I$rAgr%{Ey+S)*dM{loih
zGQ#1Lx82+H<5BDO;zc`5SGj(AFxPBhen{8HqOd%@j-!E2E}~Q3Ek0^7ZML6Z6u0|l
zHZ#w1gFS`jPnW$><S6~~EK$t9{OZk#(_6T5t}ywQ91wZ?*YbDsr#O*?EE~9A{(IN|
zFpql^$L7Q|&a91WR;kk>4}38Fd-9e>uasbWK_l0SS*5b`tlC%^=G|_%ruy>^>pb;H
zpEAqnS3j37ywS{m@&A1T!Jn<?jXl1e%1sf`sfzHw?9JhMbZUxJGGC?b*UderBG%4v
za;?ncYnO}(*_gU*f6weY!Y_IAcj(<o&pX*IxV1&3i$SuWxpLz4iC3i5_nXTZvEL9$
zw$boe&&15gz_>WsAklyin0{sX85#exumCd!n*l$FFAU<d8ZZMX16hy&ABz}^$hsWX
z#gl~}Eqeawy3DoXAL>t}2QM&?2T3clNEnDUU{`>etANRnk)c`j?Td?lrv{y!cYtNV
z#LQ<g7h3M!S-Z&pg?q)d)EO(ISJ<@IFm+wb+b&l8EdD^qjH@O44xW7^IB~7Agzepj
zMK05}OpQBG-8ZvB%vm@reDk8s)?3T(I25f}{Cc*j-9`?@h0l*Tn^zj`+xmQtj?W%v
z&6#}$m)9shcr5$t2D@=t2!oQ=PG1GRf{a^Fga0(gT%P;szYC8`+NVp8_qs7i<udJ3
zjqP1%7<f0tO~&{3%xUkXWLRRBiN3FRQ28(Rw%sb9(7&@pSLQ!l_WOQ;!OO$%oZQ|X
zn#|hyt2VjX{z7464a18W>-Z{64y*oN&oy5m`>wTczfjL3M=6i0;sxcI$G64QH=U6C
z7a^^oy&`9AT<!tZOV!(7H~dpI|Hm{tV~tbn;dfup-1!htddVzv&a-Nk`+01c+wO63
zdPKIrt`<qCN?DcZ{C?tbpEnYBbKVE*_RM@3_o>M4e8`Et>2H?s`?&tUywgCL-KSq*
zf7`U1Go!Z543}AQX18c(@Gc!z{wGJ~Np6%dx#}}_*W2&%>s6+*RIFg${jTxpt@xU5
zuZ0szRF`kI^FE;yw)gmn_ZE+0CVi;<KBr|@iEbjJLS5a(PyXzY@!h)4L9g9-rab(b
z=3ZHTH6&Vot%~_+*C@XQE*>XtY?ygew1xBAHBZk2sXLxY73M8i@v-TJt6k1Drt4hk
L&8$%;mk0m=(y?My

literal 0
HcmV?d00001

diff --git a/assets/roots/6435ac18333cfe8ca49f61b4f2151d005ee86ce9-0.der b/assets/roots/6435ac18333cfe8ca49f61b4f2151d005ee86ce9-0.der
new file mode 100644
index 0000000000000000000000000000000000000000..7a991b766c37179da1de553d53c9b6d9b0c0190b
GIT binary patch
literal 442
zcmXqLV%%oX#2CGRnTe5!Nti8X{?(G{W@+};+_P@Jm{-R9$;*I?jYF%=<D4xEGn0X(
zA-4f18*?ZNn=n&oupz$zFNnh>%;uPzSe2h=C}|)L5?~e<fCwlA<>!|uI6EpB8_0?C
z8k!oI8kre@L6kVJi2)Lq5~CvxgxT1^Ze(JFI+mG{o!N<jMRWS{V~+I)cxS(0lny)g
zDQM{~-AzI-F6mwWb@J$qRk`xTjn>vPvMp<jmmc+N>uV6tNOBFYb%~JOZ2mNz<8|7-
z#ZCqe2K+!T$qF+v{%2t|U<OhKd>{dSkN_}D7~2eFL3}<IF&2^4+iqWHn`gepppAWE
z!SOjqBsW$ZKn_4=PX+@wCPjt^t&<juZ}0u7&9-#%8mSo>iABF2F1+wtrXpdP^UR|=
qjsTU+VS4{@%AC#9e!f1Y^<$gPKdT8MV%K|;RXk+w8`NISum%7{D~MeH

literal 0
HcmV?d00001

diff --git a/assets/roots/64f5c98fa750327769f72ce76ccfd9ea956526f3-0.der b/assets/roots/64f5c98fa750327769f72ce76ccfd9ea956526f3-0.der
new file mode 100644
index 0000000000000000000000000000000000000000..fa25f67b95edf5b89eae8022b0f367de2e636cbb
GIT binary patch
literal 626
zcmXqLV#+gUV*I>-nTe5!Ng(N)QO?sNk27MVlkU#Zn>*Eji;Y98&EuRc3p2Apg(0^A
zCmVAp3!5;LYp|i90Y8Yt#lzv|=NqCM<m_w6XTSpz;^tv>PAy6;Hk2?B1Mw4i_`@7S
zT!VE3jVz4J3=B-X40Q~&Kr+lc%8t$oL5`kL3NS+yf?b2cJYD>QT!Vp3_s}5!U;{aE
zUPB8*BO?O?OJj3m<0x@n6JsRq0J^NqK!A-M970TtY^>UiEDTD_NenFCc7+F@IJNq|
znOBhFlj)b5)8~Ci4ZIN7e%yUy<fm}=*$hmRUBokQJ00J+$x4E6OKi{PwAh6vKh1PJ
zZ+~|Cv)LunML6y6^`n2+oB5t&_GK?Tzdnog(jw<5uAqEIX1~7f#ZCqe;NX`PW@P-&
z!fL<_qzw3gK`P4+5?}#FC!2vRh|k9&#v;PFQ~&*b!M21?{udncRu{`Zzm(^R9JkDw
z3<haTh79Yx9&0-sE)o1Rb*-54JwG0)XR%9F;<8<;|5!ZoKRw4)T+l~ET`knI)QkCy
z@Pzr3fLeZe<s@_ze}1=PM$*c2+J|m-Eh{jTUB6+9&ujl<k1u{sT5j`yvL1VkCu4f1
J5L40q=KxH-x$gh~

literal 0
HcmV?d00001

diff --git a/assets/roots/69ad4bafb45c7a8423a7fb924545dff35aab46eb-0.der b/assets/roots/69ad4bafb45c7a8423a7fb924545dff35aab46eb-0.der
new file mode 100644
index 0000000000000000000000000000000000000000..a59a90b072dc830c123a22f83412119711f2d562
GIT binary patch
literal 1448
zcmXqLVqId;#N4xhnTe5!Nx<^dWSRHQpO5uTKK>=8)1uCRmyJ`a&7<u*FC!y2D}zCf
zA-4f18*?ZNn=q4mkfFJODTu?xqvw&Dlard4nXKTLoS2fD3uGkbr6>fY7N;f_C1)sj
z<`tJ@mXwxc=I0eFI6E4u7$|`>GV@4#I0kt-J1T_u1S<puJ1PX_=a&E#C>R+S85+om
z^8!gDLrX&gQ&VG$C~;mBQy|wE%r%dqvum1|l#qjik(GhDiHV=Vpoxi#sfme^q5IJD
z^{KO2)2E%}RoQugFXhj<M=BCJE%oJrr&$EecEr8SEL=YCi7Myx^n>n)&QBCGOR}|K
zc^KIAf6b*WnRoTx2rhPgmz{0xv%jZziQHVloi8nZR`K!7c%&?Q(J%SR^Bs;Zzq8k8
z-;%$4bYe&JlFmsN8=v)9Ml86N>AZ67jG&0T+g!i1&u9F4yd=)bwRi^mt9YiOdpt`w
z&tJDvcDwB6KV6Z}^NLc}el?h)%>KDa%-eLvoZ#L1r=CRJJl-q&XU5FmI!l_eKWNGK
zamN?N#H@3w*6eIN&AfQ#sg8Nv4xEn0x1U8+{arV+;6N1rHQ}~G{j$tI6Yk#D&Aa$%
z_E)LwdHJF}RUf=H7ARRXsN|R}vHoN*@pFan`GfYRt3S#LDsOdGn#VY4y9Coy!HZ3|
zMH$W{njh4vnf36(uFU~%@0!-kHT>~g`4KaNN5NuFwMx<8gwGZ+Yb{<iG9-)aG>*H=
zeS3i`yOc5K58o}znU-aKITXp-k=h!z&inL(dp5PYQYT*imS3FcbxlinZMlz>#O#Uu
z5jWUEj!yrv%3h&sS?jX$Z_ED3JbITm#aOF3poQzHf7_1$*9wNl*U=e|)q2lV#{_;6
z(Q()(l^|PHlqf5otlP2b+#=Tr9DlO+Z4S_i`n$qI!tL4whe;E-TH-Pcf4qLnds+5a
z?M#W#F!fZuUe}{4Z_YhtVrFDuT<m1vV89Pd+p@xpjQ?3!4VZzHfh<UXk420{gv&#D
zS;CS@T*j{^M;{G;rRuv^=$!!{NSYs{o&}f<+mKTkFw+5386$(;1dmmDNusK0)jU^w
zx;y7yf9uEoe$EAv__%<*8Pg^#5fNOKk;`dn>A-pG3#X3B((1?-PtEBiC)nlOb3dJv
z2~c}H&(<N>{(JqjGJ&IROD`yR2YfNLmiQ8y<tXjWmSMA-lOyS7e5li^HNmZGriPh?
zt$xDVb9BWm`Nf%ggZYpAzjNww-6x-pHg`9v&kSE1CN8?;>@;Pz!iS4zH@(&gJ``Nx
z<<Bz3aaO;&(ZQ#llKVe?I@G;_%hFI|OKp;wj_(_J<85{2xpe^_=JQ<_>_0DY^s)Ls
zwfC%Z&!0CxdZGH3^#-vP9;?aM_KDx-x8swn;5@#PsYuEDyLs8J(j%?RQOQ>~ma-n&
zxp&Ii9?_Z0C)a*E`gv8!d6w2GGZ?-+`guwvb^n8;^(T)0+H`VWn8&TkzthS@_bu)V
zJF?m2&p!7r2e+*FbJd_D<K5|XCzFqq?OS6Z@h~pt{5mV8z}FYMH-FYPW)ErqwPllV
z^{!x+B*wWP5BR@(XmzDqLEslt__Oy1xwlVnn<J^&b0>d+S7zpv?JB7Y{;#n=$M{=O
z?{CJB*`Jo4H?)WmUG;1_!@>JeOP5=&df8HM6S%_a=9K83{r((<Pj9b?xpHaQKZeD}
z#E$d7XgDXMky0YbaoOqdIfmH!jdz4MJY+q6QDIeE$vn&F6aW5?zV?0XGJR(5+{fV|
NugiiZdIe|f0su{<VORhF

literal 0
HcmV?d00001

diff --git a/assets/roots/6cf8311aae93dc3feadb1abc64d44c38494b2940-0.der b/assets/roots/6cf8311aae93dc3feadb1abc64d44c38494b2940-0.der
new file mode 100644
index 0000000000000000000000000000000000000000..aac1822eaed76ecd6a988a5180a3b250403f795b
GIT binary patch
literal 1560
zcmcIjdo+}39R9v<F4PP|E-?(>qLSNu<2tTuXoz;*N+Oq-ab3(96RIs{Dz}z#j8Gz_
zu&hf`ibyBr(kdmFrtMIhOC=?&Sz&f`I(s_%|Nilw=Y5{v?|0tkJ?Hlze5^9UN3E2j
zAP|CNHP~;SNa|w~5IO7ygY=#0OL8EH!vKgk1&3_FqI}U<C5XP8;)FP^6BOQ>c96^B
zL^DH~Ff$x>4(D*ABcd6hjA&Lo>=Mn13uSXy5#fna8X5~bySczLOH)fTbHtL0Xl<6G
zm?PGvW)urkQ^YD@vz(bFVu4tErT@p1d`RcpkAWBf#fJz0!iP3Od<X>k3V+IdEB-up
z(PBLH2hsRlpOK^26?&lHtIh^po-s{*nnC(!Qxu8O{(cSDV5iro2$N&`D^dC6Ma9=)
zBc=(|XJ~vvt-bd#g3K5L6ZqzK0qf3oerL1DyYY@)Tb-4AVBg#>OL@K8+jmbSuU304
zT$#F0eq!vOb9kdiVYClaV_7`2vaEa@Z>8OvZ<RX2GoI+WIqqP-7P;UM@py2-@lkM?
zIf0FJfYkyXE^#!r#0t5}!ivNz@--O>y8a<BM&0#&RBryJzMz$1!=`*Y_|eOd2Dqa<
zDK%+ghL|2|<}h`n`TKH0?!}uiteY8IS+v;9O0U%z25wQPs-Z4udS6n~o3{w!$JFf!
z4piM<vH<@WTGQ|y_87>qYw)}@zt&(dh$%fJd*Oi}rTJV>UQ^_PnyS!d#dY*?N+CtN
z)es*Nbf%7x6`%(vjgGC>dQ|Gvlm<_3%RU;ly<#f+hDfn(v+<cyB|Vp=d#^^%=caZG
zxN!kZ)11ZMX7v>6$jTy#@mZGy*AAz#Ht_jE>Y%=W;=g~e7piRb>5DJ=?0iplD=T}U
zZS}l<joc7@Ude_u+L<DtMcQc<Fzb)t?oB@fGp&h5=}g*?Z3aGmnQ*^-r}Ay<AD@=d
zt_uoDj6&hF)7TVBRGAglHZ6-DYOUL?v7<s|LQ|ZNv_U8k04sPO5Z(+zk}fz&9<7R2
z4)1?gYoP@=92??xYBndj$`hGnWYc<C2?Ql*Sp+Ku2m}#c<+=!?d1VN%1mP89(NYE=
zJOM(+${J!p3`Pb5Rdu7dT(%9FoSd9&67ipim@rszWClAC3H)~eLcFv*052dENCd(G
z761cGDZ)UkRDl5}sS+=}#Y-{ii((E~ebGY!4#1Fh#(wRP8Ud)%LjkN1`E{R!b@OOx
z?6KcwLK=2yCP09jp${1*Ye!@;-wU`VE}CuCVlj?%{JKrmG(B6UW!wRN@KW}<lB`(&
zf<;r>Rh)O{;NG)2W^}g(w~yoYGKc9(0g|4g(Lpt%qlMxZ7sH*|!aSAMys>HZ#^*-a
z2M8^!0vRn*W$($q+Rep|DPan1n~tNqta-mGJT0WPi9<ATB-u|_8nX_6S}Gs!5}Zo8
zX1njQZmy^Anx*YHzNOCqp~1~*{q-wJ5sB6H@h^WCp{5JqNu7!T?Ytm(xAIm$(Vn6)
z)g20;R%V2NLlwS&Tg*E~=4KhWu7~uoEA#&JEeCYWG%7->TMa}+`+mo_zszD(P7hr+
zg2`3I`m^+vxf_{)k-$mhJ#=nDDJp^Pe5wrho!zcL%pb(_#krz(oia{;-NpyMS45WR
zbGu4Lh<50GmHg7W?jtNoTHzaUPE5O69!cUx%=57llI@@%eiF`mO10ZhO#Qp6zeH!x
z2S%ex-0pCcd$4<XQ&p}T;7=XuUPxmu#-H}Op?FM%O?7Wf9q2M;cdAQzsm97i5erT`
zCVi7M(p3B;omEve)-|Jp>;aS3cLg!aA?E2*Vb@l(KO!d!dK>g0GHdun<l3K&zMkk}
z&r7tuuY?0J)5G(h!^a;U?4tPNXZbz&17_~(ttTS45pFpJwd?JXn<25WA(w6~!$14}
E0~k_n_y7O^

literal 0
HcmV?d00001

diff --git a/assets/roots/6f43c3357b52a21924146518f9cb7d4dbe05a82f-0.der b/assets/roots/6f43c3357b52a21924146518f9cb7d4dbe05a82f-0.der
new file mode 100644
index 0000000000000000000000000000000000000000..5aea734c15d8aeef5e3da2972def9f5dfe4c5f6e
GIT binary patch
literal 1390
zcmXqLV$CvWVh&os%*4pVB%phD&AFuMQx-bE*l@NiD=xu+myJ`a&7<u*FC!y2D}#Z*
zA-4f18*?ZNn=n&IxS_IvB8bDqBjub?nwOqYo~RI#nv<HGpR3@UucxEnQ<9=*C~Y7K
zQpC(7<dGTR?WquypI@Tj?5Lot;BIIjC(dhVX<%ezWMFAxW?&K}&TDLLXk=_?XliO{
zY8gd+3!9jfkUho7%D~*j#Lr;R#Kgta#Kg$(MXo-m*ode2$zI`-#a9egTv+FQW83{w
z_p~oH&n;QxvI-O~MY$KHhkjZ5V(wKr#f2Zzcb!qp*yj?wzxU^(JNls~%<biu9GJ8D
zNqNiyw}0ioq!w7bdONG=p7!1;;a0oeR6dWdbxN_UQZxIm^5LrfuBkHw)7DNmy;jQD
z@L>Iymc$-jx%is)X>pG0U$?*d5&KcEgVoMQY4<I8t-C>PDVCp|&fT2Hvw1`L^prUV
zzAV<0pUS>L{Jz0$28n4t3md)fvg8IYw*AAt=E_m?rq@rVa!6`4U2?Kod?WZxWoLp%
z!il0u0e6`Do9#C_g-6}adMP;lZmY%~1E1B84{daHahHG4CB{DOk|KZbfwwE`uK2x~
z&G}}%(;9<o`!5Q(K3FEUY3b3+{>4*_3z-&XExu+v-Cr?TF1r8b!8q5#a{k8Hc*R+3
zo6r1;yVk25FKz3%UZFHC%In+w->W6Q7arIqYxu@m;q~c9JHD=)wCVf97Vl4sK24sb
zH1D!VzFEj#`M5~Yoy98-*5p?wy%fuFk4pW_Cpg>f=HJ{q*XA79QoD4+UHh>7g+ISN
z5%T!URxcF3ZKbk*H1pvHg<8tnzi-%Ry=TVWYcp2xWPj@uN?-PAQ^XS{PGOssy9Ksf
zGI0I)<~xJn{nQ_Kw4Foui%mbme^n>3WmQqzzh_o;hwN+L{m~b(d)9h4Ab-2(TP9{k
z2FArs1`Y=Nz*H+M%*gnkh1Gx=NEyh21o&9QSVTURi~ovS@$Z{$;nj>?C*61~Zmi#6
zzz34%2dQTPW~MgeR0hmCz*NS_5D@sG^iBcG<NvEluM{piJ+FVo%FF9ZkB6MMl3|&t
zwC0H5qxZ&M%ampLc-?Q9AJ1QJQt#iGZR-EBXsO|&is#?`rbt9P)Sk~)3~75dwd(h=
zQ?KTD_=R)E>aY2-bjx((h^uQVSDuOg+4?K!Xz!1SBCoA@#V-UMs(yT^xX-PE%|hoz
z%&oK|UzU6blQh<hN}a^&?&h_+<*=OkLV3YSGu2Bc^Y1aUo*v$>7R|GJ4*!)r1NJL-
z;>|MBESsmPt96|?V)<{DV*b^lwwLuuPpA7`P`Ti+;X)}#-`<RO9M|(|1Pa`wYaVoL
znpe~|lkxHX`JR$nRQH9Yt`kpwDtG_IfA^*PAF8poJlSwy{d10)D|q768eFgZ$k3nG
zzwVKj%p5Tu;e3nsZ@W*J#7|-ltSne||Mb_HzLjVF_Jq%O_RH4OmiUoX+_USb>3hp8
zN4fKbD;8~PV~@5v`S87cDocaAkxRi;Kg0B_l4t?f(pMYiUwCHv&u@PB8SP1~(Rr!~
zt!`&8uG&zRHo1J-zUF-v+f@A2xX-+;3X^*9GU`~$TAwNg4;THN4!ecz_K8-^ZEf_@
z3cq(%()rfyQ_=2i&D{3ec*`n^E0y9lHprjfchNpfV21Y8_J#6uQ$!Lhbv84E>OJ|o
rnJ@gvL`Q}>_Ai#+fA#JEi4SXYgI0*Io}KtdDA4qY>fiONvf3;G#O+h+

literal 0
HcmV?d00001

diff --git a/assets/roots/7036af3c2bea54342640b3ff78c70768e0fdfd68-0.der b/assets/roots/7036af3c2bea54342640b3ff78c70768e0fdfd68-0.der
new file mode 100644
index 0000000000000000000000000000000000000000..316a530a8126dfde6b2a51cf3bf0a21ff3308aee
GIT binary patch
literal 886
zcmXqLVlFahVv1V8%*4pVBx2VU%l;<xlF`-ekGI7$zSh0-<k}MhUN%mxHjlRNyo`+8
ztPBQ$hTI06Y|No7Y{E<dK86|wY9J05kGywLVpe{6qJn2tQldgoepOCpa#d<xCP*k)
z&r#1%!axk9l9`7;ILgt@Ge{xG-#<jb+0n>APMp`!)X>1t(!kur*w`RSoYxqcOA9NT
z7?qGc#>mRR+{DPwV9><K#ni;e$gq8nUBC+OvkqI&B|e{aYRke~JW3mWZLKb2DDUAu
zU%R61j9TCm1>07hYY~s1f6<bdd+XvlwRf+B?|hkXP1uWPg3aMCw=VVZPO`eQapQlB
zdxv-F#y9L_+Uqq}nt#jTLkH8D@7|G~W4n37JqEcIChoguz5d57ve&HT7O%qoU(u&m
ziYctMOn9eXy6yS&IX~_G*7@f9>c8*c&H8osqivqT(gi|Wd<%A-yIy47IeB?Qi;TKw
zk>}R`)>G#lJadBa%?rLRu4&IVFKd5#?I)`??{tR(n_X*4qvl-ooy){^$$NI1w;Q{7
z>e~4^9SnDrIv+etxstxeurkqR_bJD-F<A^JY%KaB)-y3PGB7T7GH@{92S%E#FeBrC
z7FGjhAZ5S@65t03umDpHn}IBd&&MLhBBCd@(o16N=`&yR13oLq|A>9Q=EDi(PzEL+
zU??*(Y%Tu5d?zwmw(R9%t?CIHn|u!#`>&d{@yd=T>i<_xn|aRdL2ixDB8w$#1s}dR
z3cj&-@3k*#|7rbqNxpV4!-M~pJG0pNUdzgSTU0dRbd#-MQ}?Ca^R?D1K1*(!TPgYe
z`)(f735UDh`tyH1BXo0#-R=c{6sE@etLY0WH~W>c^Y5R1af|Fr0hWKK68abU>{xsL
z;ROD(>$r}`R&NiubS3fERngnm=eGxjyk7eF^~u%+stV@6`_A#0v^=zF+*I!8ytE^}
zEq$Twvn?@++w5-t+pckR5&OEWr%v^13B8~G_K?AnlUh~3Kl>_6&onk!p!anpxBZpa
Uhv!@7KaxBY-*rtv?s4&U0COv1=l}o!

literal 0
HcmV?d00001

diff --git a/assets/roots/704b80e92c15138ab8bef8cad0f2ed793ab3697c-0.der b/assets/roots/704b80e92c15138ab8bef8cad0f2ed793ab3697c-0.der
new file mode 100644
index 0000000000000000000000000000000000000000..235e1868581921cf51a8c6a0ef2eb6b70e80804b
GIT binary patch
literal 594
zcmXqLV)8R+V!XV7nTe5!iOc32`^t<0zFXZb23%|$T5TTZY+0C@4YCcn4LI4DLs{5_
znLParg$)Ej9ByH*)ZF0A^gM+CZ%;#217(mPm#|E#Z)r+KQKCXfYH~(ieolURW@@p5
zPiAgrNotCrf`J@J8MClBRIjVEvqDgQeu;v!qk^u2yRm_sIIp3Ffsvtwp@p%5fkBiw
zuZb}dm%ffEGZ0{72ZsX_BO9xBBMXBPa}ooK@=~51x<X$yK5yJ~_Ysp&!#vA)Pv7|`
zRZSvG-t1<Rd48a1{fl+_4;@3=MOJuidQsE#EIMoJoz11^y4fzYDerf?+Q)Ct^5weB
zq`GfQlMj83@6+>NC?UzDZN$}-QY$w3;$kNQ2LoAPK*{p4h_Q&&#4@!AUpdn?yYZa3
zjGm_49FJrt13r*6KO^IR78YRSu^I4#_`)DQs{u2RLXJV^Oa_BACPRjOpA*kB3CN~Q
zW#1u@*U`$V-^?LC;go!r&kJ7Zs*P)}HgdYZw_d}+QWG<C<6C$3OF%7icZL30>Gk66
u+h=8rPSq!VB;4!`><+d5-BbNKmGkhAX=mM6G<^~aEmx@%5}3-OvlsvcthZ|b

literal 0
HcmV?d00001

diff --git a/assets/roots/71719c5ecfe502b0b8bdccfe3aac3b0057a13809-0.der b/assets/roots/71719c5ecfe502b0b8bdccfe3aac3b0057a13809-0.der
new file mode 100644
index 0000000000000000000000000000000000000000..22d99a48c2907f0ddca24589b046a8bc17329a21
GIT binary patch
literal 1384
zcmXqLVofn<V)j|U%*4pVBoKV{{4>eP+`qM1g>D?uTC~J~myJ`a&7<u*FC!xlD}#ZL
zp`L*b8*?ZNGmolcNq(_HNKt8VNoq<^etwApm~eJf2nu#o2=NJ4FfuSQG~_kl2C3)b
zVF9T(<Tl_0aoL2KTwD$0#CeSj4NQ!T3@m{v4Wh((O@LfOa}d|SGK$K!H8Ck6dxw#g
zfw_r^pTVGsiHoU;iIHJj1K*L#y{tX88y3&?Rq{Rk!Ew58<b#X<!g{8Ey1utRXS;HL
z{M92j98Z5@k}G`r@>|?#4y`zYPr7NxTclIME#{W$h8@#Sd_V1vg4^ELSE}vpYuqhZ
zR!Xl5x-V>gSya?-Z+y-AwaLdT?{HLKUGVgKbm^Lg(3z7GXP?y)uf5&>Woy<eajz7O
zG*QhQrjOZIcP%!)6P3Q4_0j&+ZDJb)-kuFGK3Nd(MzU|i@lPeu*)GRwr|q1<5t(*R
zlX3PJt=!9^Rui()KW@oRyQ%p4)Xk(CH-VUYrJm{YoPPc*UAcJe|1z$0hsQ_1_a1MZ
z6*(_yR@PhB_8IA$u6o&A-(t<cd!S$bp~I1NIf{2Y>*`Kz>doD@f3p6<7`y&cZyWj|
z9^MW=-)d&Dsc;Er&!kR{4v&ux$r78Qd!im6zAV0Kwd7(Q=_gl@JxZ&(-XyuqT1-d3
zusz;&-qhmBhnyM}g{NJgyL)nm=&!j;WP3g}K8Rr3dve?3Z=JE7Ki9Y{Je~bZ?BnqO
zTa{bi4?k(Y8urnDg269W&d6IP=N<^lu+%VInccR;Vb9GwKH+uiwi|DYD|?vQop!(X
z)b$zb&za5WnbSOzx#08qlDEhB%%1OkbFg^%l&I5_Qks@A94uIvr=$5WBK%EM&CG1o
zB@?U~z9`I{b?&(C&rRN%Q=4C!_AdAISkCVwIq|~R{Q?gPnV1<F7#BMkI2iB)lc=mP
zBjbM-Rs&`rWgrU@;A0VE5h?MUdGY_2stniC!*yHkoH=J{e2c??4<yYGQqKa+Ms3Kc
z447$vsf>|9**RDxDJJ)?-J$cL3^_-`I(G8iwR)t=JJoCYsfNyXT4z&#+!lMlIq8AK
z@roI{KfiGb`n_^V({<k)U4NeV{arobh()PU%l!YFH)t~%n;j6CkS{xD{lm=3Zx*}i
zi_HJ(qm}Ah#Pj{|kEz`vpIa4@?uG>4)wv@vHPgS@y}-dZqFjh)(d!^XIiHg&&K-S!
z_~P0J*~|<kYFk1SO{X*7iI@IZ^E~vIZbo_a<;*je`LcKUmbqLzBsxp&&4#02cVDb3
zIh1qu=+?MzKF^|c8*gvkZZ&=0+w*Rl0&H6nW)^NW-Wu-u%*nkpi*Ex5&$_+$zVGIb
zu<d6yd|}%Za7sUpCw9y9eF`S*UycYpe0P1r%}CwM?}jX2KK)$%Q`qnaV>zF#ld{^G
zSw-oAidAQ9T35VM%(A{6WwX>|-mC*U_Z#MDKDb{#<>I0Sr~g?#(SjGgo?WzW-I>6c
z!&gJ9dDdOq$yVO*=smks#+k^#wRJJ+**kAPVt0z(!N?k6>HB2&jKv#`-rQV#Eq{vg
zf9vg<sn6J7zTYPK>iHoHS)+~#Hp1F@XWp+aXEP~p@h^JP*z$8{iOIb(|4CZG8&xfD
z+x&lOw~X&;_PqbM-{_Y#-|yS9dF4G3-~Wb-U5izIP1QUjG@WIU#kSrJAI$%pP^`D#
htRijOop;7}gBb5L*=BjS1GD!!&wPGln%=qilK^IlV2J<#

literal 0
HcmV?d00001

diff --git a/assets/roots/724dba45ab521e8115a29d695c1fc06daee1671c-0.der b/assets/roots/724dba45ab521e8115a29d695c1fc06daee1671c-0.der
new file mode 100644
index 0000000000000000000000000000000000000000..63ce66e99ffbe872e5924b5951664d971a25cf2f
GIT binary patch
literal 1523
zcmXqLVtsGW#C&}LGZP~d69@0*$9r;qW^Xj$W#iOp^Jx3d%gD&h%3#pgVkl%Fz{VWP
z!Ya(^Zf0y`VQy+@V90I22@+!yW^xTSR5wrsakzx#9R1uB97{{`i!xIZQxsBC6`WIx
zN;1<jlM|CO^YaWv41_=mxrMnw3Y{Glf)X>U43!KNK%&gTk|5FG)a25lR3KGUmRh6`
zl%HP$RA?Y4&TD9CU}<1tXkcJqY!M~SYiwy?VQc{94i;xNF)1MjAR{XSa}yIkgFzD$
z7gG}xBg5_2+1k%iLZ&uNSX{J3l5y@F?#B3H&t1#cd}i^hp2qz~@Imx4nRC*Yc$;Ok
zcg&Nmb2UofXMb59Q8z#9M55m|wSzvr|9#$@Y?4pCv9sdq+LeVn-}^_%F1=TxFn!_M
z44-?G#J%^d{+~K)-f#Dt;YFW07p^OF5zd>V>tea*=W**L5w?zdw;b|Ze1iAVbba>J
zAcp06C)Q`Y`64oHTey7KVaxg2xlcaZeKSqD#Urz@#arLo`;m^y+}z0yueU1q8J)^^
zy}Y8cTJF5uuW0A)vu9WEXPx4S+d0p@|HI8~T-*_<;>J6bpOj11p7zq4RPC=XP`<HO
zKVwePnFj$s-b`E`;uFq!wJiDQi&VLHxmo8q=l-hkUz@=3H*6-qs803DhSfcZ{a);4
zPWNoT+})&N9KB=fVwaO^>dS3pmESb2T=wV$n-9~!H8C@1a_b9pE&Eb`wY`Kl($n?Z
zhr$?3&1?I;l)JyiGbUeZFV@)V&Gq%i>L#7KVpStq?qn|UMuz{}%Hp1H+30Xearf1R
zz^5KT={lDZJK1^p&pDMJa4DYS60qR50GIAmna1@`WS)x1eKd1qWYVuKUVhK%jL*wX
z-mvfUCthJbmUFWI_6?Z_4l`oYX3l8H)BVqQ^xSDT`87<(oS&^*)M9hgPtG>?q=?UB
zJ;&XrEcct)Xi2VeZ1-Dw&fBQ+?gY<zCT2zk#>L47i3ak(BrmJXB4HrbATlTZLQeAH
z_{pax&)`_w)4o(E=AgNOEJy(#ix>-bX+DrNKO^IR78YOzZZqHq@r6NrRs&`rg`5n5
z`52fC85#WKc6J?GFvC9YaOQ!m7|)<Jr?q1%EDl}`X_-IyL%XD{PFm+{UZ+22K9siF
zcYkS!t$Zq;zSp$r(I=a}+Gw-WQ4I{5pU!FPeC%J9%Q`uy=y=%c`vJ-tPhACUU!*Ty
z&lk!+fivm7cjTgP!5<HpKG8p@vbR#-PeIB0uav@uC44#sZ%gcV2v21TJn^Dk?bMR!
zEHTANcZ(C|2}s<tX?*oU;&4spr|tl|y@HQKnOB(A8Z+j2h+glQFq7rznP==@_I#P}
zR`}7Y?!*0yjrk91`Uv~o5)CUXE@}$+Hp{qX(Z&^0CMBsc=Ptfp9sEG5;l?W~&nIdI
zv!BXztyn2))HZVxmw<AZ(1UO1d>-xIce{5|F=Lv3lHH~vbyu^uzG082&-`y?YPU4R
zD=5-C;r6?K6@v9%cSI@^wq>U<-xh6txM<%u<>>(*IE~Gg7fw_Cywj=nwuQY;#F`gQ
z5BY9fw)W9$dfBX(ZFuvpdz*jm^oe@@k2DHR#V&p-{->(V?yi!oe&WZso7sPa48u4M
z1Us#tbHTXo58DSr7iN)<5wAXF@vaoy)V%Mg)PD9?k#`n%n7*G=W@O{brgTp9>D_rZ
z`fuI4bj0$hc;k5s_t*6uxslTM=R1k4t2@79Lt5%B^Y!yr*}l@)cJHcTgjiGbtKE{N
cOvO^CJfsvSPvGjC+_JpZT3KRJ=Yrlf05a}k{{R30

literal 0
HcmV?d00001

diff --git a/assets/roots/72c74580524922e9a5b62e238cb16cd887402dde-0.der b/assets/roots/72c74580524922e9a5b62e238cb16cd887402dde-0.der
new file mode 100644
index 0000000000000000000000000000000000000000..47d3400beb8045c2698e334efc202e160d3b205f
GIT binary patch
literal 1373
zcmXqLVvRItVs>1>%*4n9L<YQUoLX%jZQpqr8M#>*4Ezka4LI4DLs{5_nf&|>Weuc3
z94;Oar_#!T#NuKF$6#Gc3u8kwV`C$8Lj?mlkTf%oI853(2c*bIAt*n;M8Vn7Ku(<3
z(7@2Z$jrdP*uua#N}SgOnM-y1nwXT3y~N1Mz}&>d&tTBR#KqLa#K>^{c-;4c>{rTv
zJ1c(q@-_3xJ0r&1i`(R%MDp%>UfLY=`jt$gsK;(u_ESCUHr$yu_toKqNo`FU#dE^g
z{(Gl<;L$So-1_u9PtCiJUb~A8Qa@kSZ{Ak-`1#j)s}p`+{y2A1N!JsZX=|bzUT*zj
z*uFUM&+)p2`F+9VSEe5fHJ)TAp<jAsZJX!msp~`7a&E8*_eTGJs3sYCKxJ2BVdVsu
zfDDx>@jEsPe$;eKT<myS+3f1Uk46Cke)V74CckO9+_%Sje+;7^yX_s3t|?qgUKRi5
z4tycZF7b=+qxQuR(OR2_-?vCQr6<LeKUfs{X4}n7@vBzrUEX>fo%f_lz2<4@^;M@;
zpWn~sy3Ox9*>A;yv(<W^A{n!`^X_18tn0Rrws^)BKGXJ{;)}&!dBpB^zcJ~Xqb0*2
zD&CvXe5qi*1jkvyjH@TJgU%jt>%X)0^NsLgxtCKcS@vJPXK`;!@S9ATMRiB|pGX(1
z{j})k@9$zMX_@mq0~b9Kl}Kmvs=u1E)pxV;gT&Xd`(DoAH@YtCZKD^(7&MXd)BRVy
zH`pAKR|!7(ci4QMNRa)PM`u1IPQLgzJ^Omly8Rie9h?`0n+8{W2>y}i#GZ2Odj4!5
z3*O{4N$btJ7Zr2yepTFCvdZ^W5wqv*<MFad$;bcRo%qK1-PhbLc?KExPFz#lP#Rag
zg<WCB!ZM>BzB&F(%!~|-i=7M{4ETX5S5}yj@jnZz0W**?kOc|wv52vVoNOq6kTj|3
ztJ|E<yT1DzzPDrXT1x{ykTgF?Jqs}Jupy^1V8#KaGDe2rc*U=~HdqB&>P*^@!*KHb
zIfeIZpQg=wxum4NO6<?}uiJi$O53kqcAzL$U}NFCJ^qi^u3^sAE7V(m<nh|YdwB$x
zZ~5=FsailletEd#rUUD~=tN#~7wGt`7^rD*Dxqz?+iKajR?!=#+;e&C$g$|)8`*1r
z{kL6nzaYYW>e;ES)#Y`L@^Q__xAj;~+h9Mf(J?<^!lM^Ie=8N<tlezuwtq{@`Ux`p
z{X$vm-@lWqTF2zoC9YleZ%s(2ijKeiwoS|ZdR9!F{#)}{b&T%L(`nnbuZR{3Y~9LP
zmsC;kZ)H}(Hd($(p1-GFsWcQFo^JoCe6_O@*YVfecv_lt8nPX`I1apCntgw!(CMzL
zaSc2ZAE<Gdc^v&^A!zzvwORL5)&5(5`~EFG?W!Yxq$7A;Ip57$Wk>sTWEbzc`o?J8
zfmLh1U##+deTDsz$9JW^4NK-{o$K4QDdEdvr3=chr$kj{-sRu#5WXfmGT`RonGf^+
z^)gnfD~sNnG`E`5H|n{!he4FYGp^ic{SPkfes;emPqFD>hNbV884+noXS^oF9sZ@x
zvawRMWagQDYZdOPCCI!E3tYDN)sw~c%l{|d`55J!W2Ef-Zq15!@4SRKZDI=#?W_EC
zs69iL`)^F<8MX_vYC~pfowSsaT<@*r{5d%`D&mp;W7#JwuU+7}FmM0$M$V5XkE`*n
JnIRUo008NES5E){

literal 0
HcmV?d00001

diff --git a/assets/roots/79e688bd141d71bbcfed90e833ca29c89162f156-0.der b/assets/roots/79e688bd141d71bbcfed90e833ca29c89162f156-0.der
new file mode 100644
index 0000000000000000000000000000000000000000..24e5adbb0d859d830f2c27e62342850b2b35399a
GIT binary patch
literal 1373
zcmXqLVvRItVs>1>%*4n9L<YQUoLX%jZQpqr8M#>*4Ezka4LI4DLs{5_nf&|>Weuc3
z94;Oar_#!T#NuKF$6#Gc3u8kwV`C$8Lj?mlkTf%oI853(2c*bYAt*n;M8Vn7Ku(<3
z(7@2Z$jrdP$imbjN}SgOnM-y1nwXT3y~N1Mz}&>d&tTBR#KqLa#K^Gp7S~j<fX7om
z#my}<WHYLo{ZXK72g9tbL1t%F+&9dZNZB*%+pnvYHzp+cDCys`u)X$R#Y-8T+ZBQ@
z`!WJWi;jObZhx{MmOJJ_IJ=g?*Rw~=%Qbu@CO+GLHRx}lZh_tNV@J9kf6(CmQZ{2@
zcYEk2E8#!e?bOZtlpe3}*Lt6@+jhI<VLnFpnXy9tx1E25FMRuR?mj_xwP@iPt7FBw
zHkiwV&vpIZG0klM?o;g5`R&QqFBoNAi_PKrxH-@AQMRF;C4;)iJ&OZxB-7f2Ud$~L
z6HW;_zS3OgZ<E2>775ue>tg;F2s6Ci_|>?|`&#G^)?V+-4PQ5Fn8k=32`u)_=Kg5H
zep}q~`W=nx?631b>mBqL*An=A=G2SVf3sKX&6=;<l*e)<h;g#6ZQGx^Klk4|$u7%&
zzf<AZ_q_|2PyM_6S*Oa4Gd(6bkCgRq3P~yM44s(IJ+V@fXRSjAcfq5oOMEvnJa#t;
zTM9(HyrIQ@Oz3vR?Mv370`9D$=}C1G$;;gAIr&12;`Z|<RjI#kcyartH(Qi>l<EZz
zq4F#FoB`8qPskp=-{Wc!cI<M>>a@=X;-<|xeB}M%n(S_?%KFWo=WQQ#&R<~Q-MVwm
z6qU;U+U%9C8T{H8KHic!ow?(bXHxEo3&}}$6Zj)m^)KARx-@OkdFirEEh!s)EQ1ah
z?E28-&9q_Lb|z*<2FArs1`Y=Nz?3U1%*gnkh1Gx=NEyh21o&9QSVY`+oc;ea|J{#G
zZ}k26eyVQhv&lYezz34%2dQTP<{dWVR0hmAz*NS_z@VV)Xv#9-kV8_!`$wie*X`Fl
zGMTVrVSd>!F|j2c<~lDY9QtJQgKPec#;3cZZ>j1mSsq%bV)X3<_oqEsKPIo)#C|A#
z{_Qg-x>oJW%75r7aK`X@!|vTDZY<(U34gWd>!Fo~qL&o1-uzKw)HvU^qd{)v8NsDC
zpTsu1&;4_$LGj4x3+@Gu3r{sma_HoKiY=ehB_e#qOlH!Dr)=hTmOYy=+oC@vTiUJ7
z*(u(Rkv%vhHnsM9SMkDGAyM+0&LZlETKTtjR7+V;*)E%~eCwR&nwjBIvnN+M8%Q%>
zPdeeSY}KEXCtlYl1~aZu=*XKB@3QlBLZiu>{L8hsJmOz(nXpH9r408PnX8L36dG8r
z{n^;BzuU`@*Q-tD^&>M)wXe5s9Qjn5c)o63S+ZA^L+a%AA94*nZBN^-_4EA+)=79F
zmMFEz&bj)mWkN{S*H4{lj2X=yi;Q2KWSO{0&_vMg)dgosdFIIzc>V|4hJSI)dw6=m
zzSk#{&*q+a^22OZ#@x4iW2YCm@NVNXz4MSKcK3q7DW~hiUJL3kp5%JMr|{;UlQV<D
z-Sh*_?={W*Vk>%%ZK)2w-M7YFQ+6NTy+5_$Qd{MJPiv`Wo)7mb-kkX4>mzlqN%P0S
zs9SH}JyVZ+;d)`NOyG)))h>@ObZ0&OVZHl~@AZ^Vf%~4VS{?P$@EzNp;{C!&T=S3b
GoDKkgi$p^J

literal 0
HcmV?d00001

diff --git a/assets/roots/79eabcd4a06fa193dda974a7c6cf184c1fbb4f14-0.der b/assets/roots/79eabcd4a06fa193dda974a7c6cf184c1fbb4f14-0.der
new file mode 100644
index 0000000000000000000000000000000000000000..e99af2e398cefbd29f07369b15f3b7fc451d8635
GIT binary patch
literal 1420
zcmXqLV(l<!VlG&~%*4pV#8JyR{oe=oS5*eQY@Awc9&O)w85y}*84QvPxeYkkm_u3E
zgqfWE42=v7KpZX}P4`eoKX(Nee<0!P8WiH`=IQJh;;P^n8sgy}<QWpF;Owub;}hbd
zXDDwV3(~{PBj)bn?5Ge@R9ajDQl=1Osu1MwA7UUU&TD95XlP_+U}|V=Xc{HXYhqw%
zWNc_?YHDd}8ATU2G%+b5d!3P$fw_r^pTVGsiHoU;iIL&vVzCb=N=nLSzc=Q!W~&SR
zvo)c=tWC(NHZ0Aqqv>r?GT*%JyCynJfq{o5|3-$iocx%**=NJc7jCf@#}+Nu6Aa(g
zB)Vu$f9{5vUR<AEcNQf3RUX+My?0UU#!rq++G|%@Eq+tU^(Nlx@!$6iHfv30OReru
zs}5V#)F%Jhw6nQBex0VD?Y6u(>kfWUpS|w!mpAX%)qiiZEvkCG^mnA+^4C*)lq@SB
z>T>j-*)ws6<9CsR$}11Ao#pDXdDC^Bv&S?a1qiH*Io;GJE@4(X{aMGX4ZbFvUvzdx
zrD<&tpFK~mY_3<Dq2qn~-$&WrOK+=_ax?p$l5G9hQbPH8da20O((p;<d-r8Ys|9>A
zQ)8QOw16=sw=C`9#M^o72NE0fHtFg26fD1JZL@jele}$5tP4KnOq$Ml*1cBZz~|lb
z_^)-ZW8W6Ve~z2Sefd+n9eZn!&o*6<INi#zRQ!zgv~sOUigGunmMNrXoafzp|C&5!
z)~rWoiVK(M*9tXk4>oX%^A4HGpMG-biBAd#o8HV7ynl%4x0Ln8w+ge~r>0C2;MIC`
zui&FZdQ(s0y&Zcl>d*Pje?j}LblJ`)mZ3j>ER@}`s)50$>G`I5&K-LU7U=VS4Vu^Y
zebQzw23dxX>1+=+vfn(;ACp>ZlN%ZS<n7Ylmkz=6MZFgkev?vse5-&>F+!xhwY+jw
zQza8KBLm}NCj$p?VwUA&5n~Z~bkbqI@3|MV7S^2Svrj#$*^wm~XuuCl>$1X(jQ?3!
z4VZzH0Ut<!A0)s6%xZ1OsSKFGfT@g;;i6~wgXL#3B6czIYfGN(-H_<IM(}NNK;{qm
z`h8;kf9JmDUS;H7b}3!u?cN$=qv=}5S=-Wh#cM@GrLVmHD?jU7-1N-tQmRY1HczyV
zH(S&FCVYk6^TsZTaLd*bDW~HvqlM%9e{#H>RMPv^{nBddYriYf{LE^9zMS-u<=$V<
z<UhH;MG7aU>$`hx-}zrotGK|;V1Lvn{mP{edwFjD+>~tIW1iYtkQEcnS+sL)vdzZ3
zKmHi)H*b5gyKjbi-7a~thXsP4nD4758L6vD7`4p*&tN6IYnJa9{~aO)N*hmUPdKM}
zu;7dS-1<)w<gP{C-|qJ3S=+DE4;0F(b}c*owdP*Z(v98k?lq-#`B@pr+c%tEtG<gT
z?)rs|VW-LqH*GCl7_id8S^SX3&GSLs(I=9xIN2>Qu5#1+&ZXcMQkUg#__49hsl+0+
zSpD6xnjL-Dms(w)v2ae0K<MS$-ftWxd^(#KekqBsCVcY7<+*3)Ht*JY{&bslVZ_?M
z7hU&6O?($Dnt$1qvovqlgjhM2^XB*ER-|q0d8Ux{{*Q-W$qc9Un)!NJ$A8yeOfytE
z)5cJj*39GdWv|Jk!&0yOPt_Iqau@V0^Vq#?p~$!25iT=D)~({6oVh?#)obZ#?YmuR
w>|zz7;f2y~zPh)3o@Z!Yb+uk)?UOx!|DMTfe!;V1yJHUf-Muz#)AcU_0Q?0~ivR!s

literal 0
HcmV?d00001

diff --git a/assets/roots/7e63ed24cfd532db5d6e66acee1149168947a20d-0.der b/assets/roots/7e63ed24cfd532db5d6e66acee1149168947a20d-0.der
new file mode 100644
index 0000000000000000000000000000000000000000..70cd46259ebc05593fc614b0ee023af442cd756f
GIT binary patch
literal 1386
zcmXqLVoft>V)k3W%*4pVB*5`=OT~&`b+@vN%{%YaobNK=W#iOp^Jx3d%gD&X%3$DY
z$Zf#M#vIDRCd?EXY$$FZ3gU1H^SNZEXF8`AmFOsV<|XSHsv0PRB$$O|U=j);KEVn>
z!Hy;dmSze;`S~RZ?xqHE;=D$N28M>F24D~+&TC=@<eC^6n_8M$Mp4_kCMG3h4>7Vb
zFgG#rGZ-{6aWOS9F*0nv@a1Hs;M~7|(i)$ix%y<!n?}1V(>}fJ&+o1O$?kjJVD2kU
z?wNaY!f#1<?WkB|Ww~OR#~Qt&r+Z(2lsfx-3G+&O!7VrRJH>uaVYJ<?|3jE{VTDYe
z#sk*}&0iv=r*2+X$L#ua-yx@e?>^aVYZabhG*@he<{@qwi#ziT%VYMdFaD#xX1n&@
zlG)<ApBit)Zg{9HZr9-@q<rDk`MLL)#Wy;6EfDirk~{gOz12Ibnz<2kzxeh4u~t5j
zyW<h-tuwFR95(!NeYs{x!+DozpL~OPpU>QtpW-~%x4xi&_lng;^A9<5XCDxm9P$3F
zqebZ+Vdkkd^^ap-Ugf>|s74@ZRrUwlvd{L5Uu-z|_x-AH-!*N^CAMfD)ZyEovQM+;
z29xgD82wN6??u1xh_2z<@bNOQf0l3gbjAfA)3$Fv_x{|QH%m)Tt$F+~`TLHAEGPC<
z+sEpPDTTfD@cg%2ztTW;_O5JQ`?=Of#GlLR{r+@**`LQEI@4w-_H3E>QZk|WlYur{
zalq9X)@(12ckv|jX#5D8o%isY?`}4g+1Itz?Eh-%7k<5_vajB79)IqOet+M^_Ww;^
z-S>=h>~H(|vAoh-dduQC{oig(7t(~|;#&RB-6-g&KF7Fq+VtyZYyUR=IHYp$6r-ho
z@1lbu4)Sx-uJUlYUHf$5qDNVnmGkLsT!NOndW3V>w$3~Mnu(c_fpM{ufrEi8F!jpv
zv52vV1RBe{HFH=mep&TwX2z%We#&;69S!(E()^5!|5;do`KHZ)AH)|1@mUR+ffRBo
z17;gwDr00wShhYoKKxeaZSR1UN0dz!|6fQnXqmX(Uf{fH-^u-MCN~c%s>u{c7RfC>
z+5T^(bILTU6TvK8+Z=Zvac8(WUqZrq6W?c(S1RA{u2)D{H%TMj?0M{yd&g~V2UxD%
zZL8rst)}c)^p}ITMV79XOk$UCh@U?3&Ya_`w+8Y)%M1=ZV_AFas9<Q(QS0u`A11m>
z#Gi^kn^|knp=f^AK-_l6r#&l57dYRs>-3(mE|>X%%;E*pICs}B-mWF!;_b$6lKj?i
zC(FCVvuCY)W?1p%l}e)Z>WGy8yW7>1R2%Q#S*ZW*?ehOs{egN0KbA0FYPF1KoH;E&
zD!M?@?O$7h-P#5L&byYX`VsZJFO_`w?k4YM>2)Lc!e>3}!lhU8|9nn=!rp&ZP4Z!H
z^smK}1!uoJVRbk(W7edHL1h*%9`4%v+yCnO&CflW4L>v~KHj!(`Re@l^Y8ndXWWsL
zrEL40)3-so+F;4yyX^HQ`<AF}`sVn8Q}(gKj8*3T|G$5Hq*-9-ZeMaiMC_Mh7t_@)
z&MD=3pCUE7YXT;5rBzrommb*~wL<XN(}Q!<LeB>uS%1B>b)}PV*c-+2#>r7UucqDf
zJhhPH({$_H*(?$&E`2qOpYEvMh-;g*(en1!iAGr$mlbp^`hIVTYpdD{xt>_f=o8*I
fW@RzQ6?|&-&+*RCKNa$==a$jG!`aRD7RTxUxI<No

literal 0
HcmV?d00001

diff --git a/assets/roots/7f7fad1e1daeeb75e7ecc9ad1ec5f590f5b98461-0.der b/assets/roots/7f7fad1e1daeeb75e7ecc9ad1ec5f590f5b98461-0.der
new file mode 100644
index 0000000000000000000000000000000000000000..b40648ca3f9907728a575d3d29dfc9cd11eee0fd
GIT binary patch
literal 1049
zcmXqLVi7fHV*0y)nTe5!iOthd=Lv&=0WTY;R+~rLcV0$DZdL|^#^r|G2Apinp)72|
zOdg?zf(HB`4m%HrQ)x<KL27Y{p{Ri{NQjGv$1k<SCqFq`!8@%)&(Pe!6eP^eqZg8x
zcX(Iv;k6}YhZp8mW@jd*9NwI*py8ZaRFavNnVeXXnV+W+oLW?tnVedzX=rL-4ARKV
zqXRR~u_!UG5~v|3vA9^lJwGQ!Q^D=%#1a%^4dldm4J-_e3=M$>SQr^biSrr(xdvuX
z?hx`x6QdGxG%&I<FgG#sGZ-{6axpbAGBO-di7Vdcohx#9;g`qLC*)l+aFw%pmwq$l
zfmB!hDT7nZj};C+{$h1`O1xA}bnbow{}%Oc^W{DF9Gl5C;S>MYdgm7N<iPH#r3HVg
zBF^^BetXz0r==kF)@Q~E%76R}R@OaKPk#P3#b&{dlg7#a#3uaTu;cIb6$cJXapvB3
zHFDX!unQ{k1(oY>TZZtamfjR~oWi(1?#;K}kN?-E{8N~9J?8blW%3*;i@VE0*UDLI
zB<QuPzF4(h{#c5e!uEoCn|mI&rv-1fEPo>P=(t!*+4N}r-IAiMKQddt&Ro9olgaXx
z+m<o^$#1g_sVQTbo&D1xmcit>-ptauPdk`b`Tk(O<WzP*nu(cVMfYM?17`yvU_y}<
zW@P-&!ePJ$q?j044ER7|{2(zFV8UiIkOlGiSj1RF&iqQB{9)UU3ri2keGdNH6MVn<
z`ZVN#2BvplKr=F|u74*ZwsMY5Aj5(Kf*h>NXFkhk>;NX>k2@vSdaeD}=%74B|95GP
zzJ_;_N@ElE*Tj!9c{>s<UN`<qT4)`Wba_hZk%!N6n||o47Hm>fJ6IGb-=lN5Wy0a8
z{$1z4EKgnfdd9`ytef0QMU}JiTayhMK3ttAuPJjVXG1__?1X6R6}$%L_t(~+`#86G
z?@6~jg=Iez19vIvSMOUYn!NDJ)b@|_c7E>sY}>kH$L)PvcWVB;WzNdrIfc2!<@tVR
z!}F!xsu#a3OZhtK+iKR=wl9}*n<d>k!xnGWy)Djght}`7Z-w_=)aD&|#yfF~Ug^|^
Zz$|ZrWgC(fPX0Li#<?TOrS_5T8v)g*opAsF

literal 0
HcmV?d00001

diff --git a/assets/roots/81abd26e80718923cd527a3315639bcabc82baac-0.der b/assets/roots/81abd26e80718923cd527a3315639bcabc82baac-0.der
new file mode 100644
index 0000000000000000000000000000000000000000..d0e4cf329bc5a5c6c86fa895677e764a3d0e715c
GIT binary patch
literal 569
zcmXqLVlp*oV%)WWnTe5!NkIAM;cKSr`!&4fKZLxhn?Bcoi;Y98&EuRc3p2BUw;{Iy
zCmVAp3!5;LvxlLifjEf6#UtSF864uO;Fe#Smy%eLnV)B<Xdn-gV&;*6NCl@Bm8BLb
z1m)+KD7ZR1E4UjP$cghB85@`y8ycFJ7#UeaiSwFR7?>KFfVt*T)U~Y4K!A-M><=bJ
zHdgIM76v8eBnB37{a-?R)<}Hj`r>k}%xT`{7xLRHS4M36k$TZe(SOD3#ru{R6@A{u
zcvAasd23$q-L<b)>8VcI_EJ%B#rmy2+@Gf<%(8y|N~%I{i|td5dom5XV)A%zOD=tE
zKSyhagZJHM{)>|h5)Jr)At5Ww$oQXy)qojDfrCa?nMJ}ttU<)ww<GoZAKR|0i$8iE
z@Z%B4ciJ+?Ko+Efk420HyEGq2njd5!3oz2!kfVq>lffX3$&g{CmVxYrL-QvD20GYH
z4N*KRmi9e3heOQrf>2F;vh@AO77Ug*b%PaLxn&a44V_ir0<}!)T=z02sW~a}r*8P_
pu$_W;Rrh82c}X>8-#LGIkJo0K>w2?q|Io<Xldb#4aG}-XZ~)CqxcC47

literal 0
HcmV?d00001

diff --git a/assets/roots/83cf671cc5fe6cef98a1dba2ad2bdd787607c611-0.der b/assets/roots/83cf671cc5fe6cef98a1dba2ad2bdd787607c611-0.der
new file mode 100644
index 0000000000000000000000000000000000000000..056eace40b686086f9d2dbdab57b0d395edeae19
GIT binary patch
literal 1425
zcmXqLV(m3(VlG|4%*4pVB;dek(sPIb0vK&R9W&r%<J4;NX#38~$jHOWU=U!)ZNSOK
z9LmBb%oGxCC}bc2;&2IbhB$hLJNoH5I~ocY@PWj*h1rAh^Gg(fBGLwuAQ5I^p^$KA
zM+N6dC)XeasHB0MIIoeBp`nqHftjg^k!6%PuZcN`YiMd}X=)io0~?!|l#so}$jZRn
z#Kg~F(8R>W)WpQdaO}q^xtp8{b+S2r=lUPJ8@tRoell~FRdmI>f=iQruxt(rl1(qt
zSa`oXb}HAuS7+aT*F5(jzkbbG+xMGgT(iDwO!$}>ew63P;(*wDSGJy(Jk_wX^ql6o
zORY+8n3B)97%1F&H8DEunXJs!xoOAk@3)=u4nA_Tca!X^A9vJ)7rQ@9JX5=M!;g2x
z6OW!N&Oi4~KwgUN{7dzOqyCalUY}D^bG@E0^X@r+^9S|Mlh<z85xL_6TZU=EWwUjK
z&MY4@Q!8pd%YQzlF+WOSYTA~w+u!w9EOC{1sixmMTT^4>lI>QxJFm!C6uCxhjC=h-
zWA^r@Q-9B2Gv=TFd-}YMGIQp=ijTX!>TbwO14WJ8zRJ&~lX}$t-8uU0@P_*?k<N>^
zF>8F|Fj&QF{P6vpmF!B7BcmPqZ*^?X<XEv?S<i(t(meY3WART)uk$Q}j@}DdKI5df
z!qhu%o$*_Qezt1%y*{BXs&K&j%9$FT91|Y3*=mN%Y?gn!dBJ;8%75#bjztF_6iol9
zvRnH|iPFY3*-Az#mn*am99XFTF^Kh~{rj@CN3J(`ZP!jcalBLQ1pm6_%zD2M#{W`y
zSg>|Os)D(3!iKBsuk*+pnow}vOJYwQ<Ax2dMde)B&MxtP!E^Djg22O&)Op(iFG!VT
zJ4Hp5nY`L=F1b#x^yjpv2P3~v3D;EZwenf*JInDxyc#nTGb01z;$(wFa6*>lXJq`(
z!UD`5YzF+mWGpKT;<Fks11SS}kbp9agn?Lt$lTUMk(z@^`O`C=_?tUCT>F4G%-ld0
zq=1h_j0L+iYVHCiLq>*_{;DHMd|Nxt>^R=Wx6n)MYytQ7<*nSC%eL_^|Ig9Qt$KdN
zmF7~d9n(6t{l2fOyCpMN(KP&8r*HB8%>IJKiDzcrmYelJ;YZHy*-CR`TMTFEbluHb
zcwHm&)W5ROD!264XPi647BOGjDgHw;Cs&!N{$u<FE=^_Yi>tWat`t`b;qpDS)c42H
zzdIVwYwJ`jPWM^KKI`-SxZgEjJI|I(PZY>v*KUlu)VKY)!bOEVl@%@O3&Yo}3XRae
zbMw@%43>FsT~vOSI9MwiuWpW#P;=Ur8?sd_!60Yjf*(5^7sPscUP@)Pdi8H^;-0pf
z`|n-eWwo)sZjwpgNrt>TGxpwj)4;lx$@YHgTW;p>-^E&340lbQa^sWGkFLl2oz^eE
za#m1W?1Yo7$O@-#mmJy__$!~9<{Fm3c6NIx<1)r6ssHj=Id^SYvg*<Mh<$t2!*0AU
zE{t|D{xqxT)rL5`yp=)GZwhj^w)dOI+4Rgg_vFJlo^;1E=e{+p_B-Pf_Vr+5<m4@O
z%Wmy37n-kS^tgM6;+w<TsXXtM?saHd`&|F^Z~H^{eRJ&Wntunze$Du<r`URD|Hr6D
zHP??mX+D_sdRIf#y%^nsvL7d&wzr>JFn8foB_VZw7hBn!S62>o>*rUlt`AstL~{AU
os_oN$9+XdtTI9^`5T|x*&D(VaVn<h<D(dpxaGtT7**@<&0AJr;p#T5?

literal 0
HcmV?d00001

diff --git a/assets/roots/83fcdde3ff2a744eb4370369af62cd497095e486-0.der b/assets/roots/83fcdde3ff2a744eb4370369af62cd497095e486-0.der
new file mode 100644
index 0000000000000000000000000000000000000000..452e5499ea52e08a21467ef78f75916f0ed2e1bf
GIT binary patch
literal 1355
zcmXqLVs$rYV%A^4%*4pVB*@Um|I>RyVMeNP$d@ZFmfIf~@Un4gwRyCC=VfH%W@Rw2
zHRLwnWMd9xVH0Kw4K@@q5CCzwggKp4i%JqR^KvQ;r3@rMV$8yVa506T{QMGyAVUK=
zab6=s0}}&712BjZ=QS}y;!<jS6O$6MgBe*Fn46gR84Q}3xR{!l7#S{@U6FrvclDEt
z+n)VaI&fE*H>+AnSZ2CSMsk|b9OkXPOB$PRRTv1Kzq3hu-=zJ0PmT!hTaw{(iz!2_
zWZ$N{EKjnv?wZRd=-mGLePPYi?K}l-dLOOc2Yo+tdG^oleSG%~x6jRpnY8Td)6ZNc
zTmM%tdeXk|*m`k>_skRDu9WdBw7t}w)A^;M?OB%Rf^%ChZCE|~+m|bPkBfeq9eXXh
zUA4#Rk1FqGrDDaB6JFC2Cw<lDmRR~_?W1>&dl@T#P3!3uXENCGbA5$W&lWQQ0e04c
z3ttQ;bOj!5Q>)x0*b#U116Rmd&t?0W=3H`F{`PUjd$+jU!i$v!GH&sKFHf4^iLcA7
zcD!%m`oOy7%fc=$vw7xcl7b#~@@o97Qr^gGYdh=j+{X7h6Ao0n`0e(5z~>b<Y0v4c
zcPqs^C*Di!ESa?8u~F+jzt$z*k*BqfR`eByTwpSv+4I!%)q{|tC4y}F+&u@Q_ibIc
zAvkZ&j)aNwk=Z|Wzf9qpzV*$~GUgEJ)Sz8HlfnW`7dYI|yuB`{%v#sLVRqLAr?4&C
zI~bR=TL(`&yI8FMbJ{BLjmHxn9CT*oc{e*cA)hU#JzD*zgW$Y5#s{}QH4SI2S3f7N
z&?EEb<L_IBnx1dJa<?q^Klsh>kj9)}?;fmY|7|Q-rRdMCD6q}JYPFIT%bf1nEp0`!
zE-hbrWJ~G9mD<Wo%!~|-i=7M{4ETUaRF<ES@jnX-Fy*ru@PqimAU>-BGmtWn1qtx6
zh_Q$~SY@x;JKrVdpw$b#b>%)ScIiA{kW(2jTL4oTBg4+{^*e-ag*W$Sa2v}q2Zw%{
zTJS{Mc7x^XU!6&Rzh9GJ(N{FN`!VCg)oD@p4mB)3*n2GNdt~`K(UkMim8|7yuX-+L
z^WOa!sdLbHsX>FNE4!<dq0+WV46A4QTJ@K&U#WCTKlzmCwd2P=*yj9^;hiCnI8Shq
z(siy+6RWZ<`ScAAn|aQE@RFa&CBS@2Xzi={->i2{S?cq0k6qxF7pEqfh2+MlYTUZJ
zR^;#HcaM}<UtjpNJwxbvRF|XFu}Mp#tdm{+_dm2MSJIE!@Afl_xmDOH{?xtT>q%Re
znX(*m|3C9@%l(*hFXI|C96!}Qmz!|Izs#=5hWF1>=3muPH(litZXN0S`A7R?_0*$U
z|5tV1Z!+XB`p=_&ol7o^AwZ62!og`<Z-}(+Ud}6a@CUn!^sd&0QmmW}yQU_ew0fgD
zzkcqnCGMiLT?#&Cd0(@LbN(z*7m)WdO5<7TvvO&xzq0$7)fV5r@^E+EG<9v+cT0ZX
zQVkJizGr#tu)ObtH~rFHmt@|yPPGWAbh~zNLV)4Qm|1zUUyZ}Mm(RTP>4c8)<Vgm{
z{d!W31yaQSs)$d!*n7w-OZ&BOx63ER&t6j7%j2)V?O0Ou)KY%x+<oZ>3j}R<fBE6L
z{ju6~tNEAWYknV?S!1dBpjvi6@ACdjnkIQFqNndoh}$o9B<<CqXS*!pyJoI*jAY-S
GvmO9p0Yv=(

literal 0
HcmV?d00001

diff --git a/assets/roots/843eb9be7c5fcf0311180cf2f1e3ecb9d5e36027-0.der b/assets/roots/843eb9be7c5fcf0311180cf2f1e3ecb9d5e36027-0.der
new file mode 100644
index 0000000000000000000000000000000000000000..cbccb435dde7829075f291c4f29f36df4fa5fc84
GIT binary patch
literal 1425
zcmXqLV(m3(VlG|4%*4pV#3JE!=9&R78>d#AN85K^Mn-N{27@p|ZUas>=1>+kVJ2rk
zLjwan5QmFL-8myOFHyk_NaQ7FCgvzOrxulDre!84mSpDVDL9svWaJlRmQ)&w8VG}Q
zF!S&@yE!{5xP~bN`TK_$$cghB8W~ssp|OFvfnk(5uaTvpk+C6^OEY_$n3Ryc$jHjT
z+{DDsV9><G#ni;a$Z$P2`>cSyJZt1tR$udtd~arG_le5>n(Qs!q*y2rbUiSoK<rRx
zrf;8U?)?2c(uW=_PQS*p=DgCn_2nU2-acKyK~;y}>D}90sCw{atnIsn`isA7*_>3C
z%~~zHaQVm2Zx&p2IWKy?NMAO2`iq%A|4v>K(%=(xC1|yt=luz1cf{|rzqjy|ufi48
z7cH8>+c$Q||NnJs!hEikx{mf6KT2r66N}U_@swJ@c6~+1CFY_kqerhYeDidsrB<Jc
z{PpS4-FF5$zt6a>Ig<Q3zurvSq*!Q5{rxj)^F9{E2Bb#zXKrqfGs-_K(Y1AI|As2_
zdr_{|$ITwTPrqn+d3tnllB9=jyA0d!k{Jq~#UEHNNpD=Rc)N7L<&MmqQP(WKB;8T%
zuGs(MMcs~=lT-cUm+S6S$UdKa_bcz0rtM!grRfQ1e48FsJx#2iQBpT2uii3(Ev1>U
zx%sf~q`OAP+LxHW6g#&{H)B0lW2#lb!P#qlb3;yP>3X+HZ*F*2;L4jFXZoSuddHk6
zECroHs*`VV%~VRrN>1=AW1Hc(w|T8>M3-vorQ@k`x_!s)Z#(v|zKcasRI}uR-JA(?
zdGtPZ*+s45;gmam)n@VA>4)V^ep&qF;Cp-^R=fFPSk}pHD?)<xDvZ)?o9at0{C>EN
zHDPDL?LO|G!V&p}2?9X^I}bW?zAutbH>~(SjkTAFnUR5Uak4?8fjltT$||!+7>G59
zJpQNqSK|Wr)?M2c9of&einV9*Z+!!PkOE;w#{Vp=2FyUpfDa_V4-#MjW+*lTSrDI(
zMT`Zze$<=>OoogMs>gO^zivN$ugP+n?FX0T*)7G)_vUK*?^3AWQ?cp%^bOK;K3}iY
z`|7dn(r@vOXP2w&-v$d`c%+|Id7434<C&a!xM^q0p)!9Hv$g4m&pEPn9R2?8hSZL0
z-1PzfC$AFs?s@YzC}GnQwpV_yzhq1Pef?GHfvVQ5JI5W(zMm*zZLyqcd5zn8iTW>&
z8!>V}SQ3H+H8hz2zYk7hSn6dWmR9qZbIH1S=~DTQ+}Uixv-{f$S-0r-cBUC?mW9j`
z{GtA9ll{a8=Xj+*8%V9)uM{hNdA};F@54z_^)u(&xJ*8E#lbVDq5V3G)nTI`Q@*et
zOYhbm>E;!b4?ZooNqk#IdDMd|r%$l2`)Z}vXTJRcqqnnWd5`7v{-&rOfloUZNIcJ|
zkLA+)z1W@4cA0Y3F~;NlC*t<!HiYf#QrTtvYW_nb!FeAq`8Rx%c35vQPcWdeSV-vX
zvz)m)9Yr<<jcgN@UPZ3GC8?)$sCQ>i`-8MS#me!DDaj2UUl-U&*iJd&;VA2{EAHRF
zFw2D}&d1G@OmP#qB|dRGYr~rEnUiXtFS^0bZKnR*qcWlE@O9ysA4LxLy-uH>$-u?H
zEjaa7m@9J!*ZlMgS1UKJ=yk~DJyhlJ>vMdH`=rysJ9kH(^Z$E6G??+m{nt02mA${9
iyxV$Z<>sqQnrAx~PviG8eeUOUp!6*J`DZ$>tMvf57f$E^

literal 0
HcmV?d00001

diff --git a/assets/roots/887da4445e67ea7c94774e43189c3ecee4c87312-0.der b/assets/roots/887da4445e67ea7c94774e43189c3ecee4c87312-0.der
new file mode 100644
index 0000000000000000000000000000000000000000..42f3c1b9ea851d77a1b156995ee2a5296e08767b
GIT binary patch
literal 1011
zcmXqLVt#MX#B_ZDGZP~d6C;BGFB_*;n@8JsUPeZ4RtAH{8HU^joNUaYENsF|p}~d%
z27Dk6hcLTiQD#+sUZSC}fgnhPU6?C4IlrW&I3+PB)lk(y86?OhEE8OkSd^BTnv<ds
zlA4^6m!FfLo|#&#qu`mBtY>I#U<p#jENp~O7MxmCmYJMdtPqr+U!vfgT2zvmmYJMb
zlB(cXT9T1plvz@#psV0+WFRNbYhVe4h6Z2|CC+PXZfIl-M5dOemQjP*=}nAE$N|mB
z%D~*j$j@NV#K^_e#K_2SmB;Fc)=$4jU-wB)kMHXU-Y9Q>`uuza;ap9t6a2L{-?Pgs
zl5d(Nte71a!_crvKeGN?`%hKpw&$7BL9-@2EPQ-Jm)9@<+X>H`+dfN$t<&CCBJ%qD
zZ?(r#yJV;7Wm!i|>2weKuexAzL2&b}mJ*S}>GN1JtnT+YM9F&jop+vS{XFa%L&52w
zch$A)te)>N{OS7bP{MiPNG9!uGbZl$cix+jn#*)vXX3JD&+oNLc-Ex(Ew;*Cx%Hii
z-Y#C|9me<FUvJFrRlPa;T;oMoH=}6<?f01YJe^y&<rMEud6nq6=H!)-`|bM2l{TrJ
znI9RFG5^m#E&U^*GNld);;l@fmfiKNOw5c7jEkKN91Qq@=|fhSk?}tZs{u2R0w+IN
zevkkQFv+qR$buB`v52vV%!y~Xzl!m?fwo1*q8+(jb3O@9Y(@@cU~&eAG9!bx*|L`M
z%)8c-^V5|%^7#@^{%yGvf5WWt><wv0-T4W3k4t6TyqMSautWL0@IB}Ak4!eR%$3)?
zy8lPqiK_?qzMGV9RPt$Jlm6Z&r>eDD+ZAek_f&-n9TI)D_j}e<y_}Ny=Vi8hI?A}X
z^+J)|+TzvRvrBn$UAOm5Su@Ri>w*jYqV9Z;Uo_wC|NGvNvHXns%A{7~Pv#u&3(uFc
z-8&&E+u?A&)=l=m-0_F!{wv=;_NzD4Zza=ncR@G1FMsz|YpU&DnV4j*u}xR&n?PI2
z$%5sV)^67<sC;E}D_M2^-;C`BZwh{wc5Tm1NZ%xPV&}^nEApAT(|LW>!V7OH{5j|q
J(7RD%7XbdRdH(<a

literal 0
HcmV?d00001

diff --git a/assets/roots/8a938d24845c923b512b1cd0ac0e7a64a33b4cf0-0.der b/assets/roots/8a938d24845c923b512b1cd0ac0e7a64a33b4cf0-0.der
new file mode 100644
index 0000000000000000000000000000000000000000..0f5f95fee95053be45dfff48e6913b0f896b211e
GIT binary patch
literal 543
zcmXqLVv;s!VqCa@nTe5!Nx<>a+>1r8-Ysu9sFU+jzdgu+i;Y98&EuRc3p2BUzah5)
zCmVAp3!5-gXt1HCfjWr8C9L3?SCU$kms+9_oSIx(lvz@#5R_V+npl*aq2OMWUs_-&
zY9I_!$}G&|864!U5R{)^q7Y$ZAScdiWME)vU}69UQR2KnmZhP&p&5uDMSTm)3<TKN
z!Tw=lWMkECWMNQZPGVp=JNxSVhGwoeoL-;ByzFAmm#?{(&dMvxzU_|K@2GB(+m8wp
zj_h)sD%jcgitYY)EisuTJC7bUdcgcZu1Uh8`?~85uB^Og4CTL>0&A6SaOKU4F2Dcb
zm*X4DJEf;G*m>k%Ep{?+FyI4*fGj^F<9`+wU|6#m@PqimAU>-BGmtWn1qtx6h_Q&&
zI89r3&)dWL*Q6iwdd}x|uPid3iX0Qn84L!gOa|4Jer^FRhg{m-q+JXCN6ftU<?oV9
zq01C>ORkyhaa<e_&!`@@WuJN}+j=3r(iy#fm<$=Zzn14*Igz^R0k_UOk-6&TOMV6~
i4Sb^6eEr7+!)T}ZTwnjKW5{^k<H^4*KRR0U({lihI<*b}

literal 0
HcmV?d00001

diff --git a/assets/roots/8aa2eaae98f84c6b1703fefce5ee0bc9afed2fa6-0.der b/assets/roots/8aa2eaae98f84c6b1703fefce5ee0bc9afed2fa6-0.der
new file mode 100644
index 0000000000000000000000000000000000000000..c5680233555e7b64b6695a7627dad02836fb0f06
GIT binary patch
literal 617
zcmXqLVoEh=Vtl=TnTe5!NuZ)%J*H78NMR|<1>L*5ioY0ev2kd%d7QIlVP-ZcG2}Mj
zWMd9xVH0Kw@G(?0kOy(Nge4q{i&K;H6<iWa5*30gi%U{-ixq<P9Q6#<4OBr&xP|4M
zQ;SMUa}_{TW?E))Vo7Fxo`Pd(Nk)EAW=W-?q=7g{A+xXmRH3W0uCaxQg0rK6oH(zc
zg@Lh=nSr^HiK$7HIIoE@5_f=HRc0W-#tse{CPp?^?M4;`CFUdsmLnQ{t0khd_T{CR
zCqFs+X0_G#GYfa{HF;id)11F>%BRN(6*C$u*nB^|nZ*~L&^&+3GjV;X&9O|;oys<c
z1X;C~cL+;-4rsZ)*F;CXGxYyCpXc|N$!i?>5OR2D&Gz86uMaJDGH@{92L_d_FeBrC
z7FGjhAY~v665wMIV-e|PODj<+v-;fmeb2SM?zQ@R1me97_(0P9AoVQ3SY|_xQ|1f?
zgH$F1=1|>b&m@l2ygwO`cTk;wPW$@2tI`}2dnaigd_QGk#U(45(9Wc%(wuU;QnEjm
zZMni^$gst!W#<3Y&*%M~I9)yV&W31%!gFyJQdu`upTGK^I4SJMt6OG=+Eb_L6{+gi
J-#;vT5&*>n$}a!_

literal 0
HcmV?d00001

diff --git a/assets/roots/8df6bca2fa8dd4f6a68eaf461bf2091e9aa77576-0.der b/assets/roots/8df6bca2fa8dd4f6a68eaf461bf2091e9aa77576-0.der
new file mode 100644
index 0000000000000000000000000000000000000000..1a0c2e285ff94f867385bb83894e2d0b2cac502f
GIT binary patch
literal 1380
zcmXqLVofk;V)j_T%*4pVBvKI(ueVl5()+PFyQzt=#@1<9QYRbmvT<s)d9;1!Wn|=L
zWiaqC<Tl`BV-96u6J~PqHIy_E2XVNB1p-U+!xB?6ixqq_b2Cd)Qw-${WI$5P!lH1g
zp#1z21!qSELj`wZ137VCLn8x2LnA|TBXbjzC~;mBWG)qLYGP7C_68#>19KA-KZ8LN
z6Bknx6C=ZdeE|Y}FF)ltY+;$xy3_E~9o;8_D_Lx$Lk~WWFpyQ*a`=7gy&j#12W{^+
zJ@a4d-k$R&+Vh~-)!qGX+Sk-K&1!pN%RDoP@sjDhHMc$lpG>p4vWAKAmda)86-;jH
zm&iQ+Q5;dW{Ttr|-mM?bpZWFkn9tM0Z3bMu;&rC4kKW(SH|Ica`{NFa*7RR?$5%fP
zp2I3J<NV~W8z*h~qkQ@N)g$Vj59Zm-=2+YvtEKqhkL9Z1TeWrPr8tB4#ImxSU+C4}
zUDm|A@W-X&BIVH&%-9=e+p+x$ic3DajN#wXmqF4&TPIl-F>@yE-H;%bx9qO!A?CEZ
zpII(CJo4*q`;z~(d4YOM9LvG46ZRU|9(lhabC1RBB}=AVOuChMfN|Qo(?<eLUh%B@
zuh<va?-lbTan|xnFSROq18uED-z|#lTN!ij=+6mCPdi)-?@pYVQ#Ie#c1BIyw|!z6
z3*y#sEB}e&U!_#0dvc+G?32qb$`d-~AJckv{p+mF5pwzlogC63i?+^Ce#22NGc`8x
z;_1#g@r%4B&U&x7%2SME#oj~>!;>XzTff~ry0QD>QvoC2_-+L&8&7%T)=1vlr#VZV
zGmC#`7uJ5bf5fNu*kZjCQ!7swFY5F2RrwwFgk@im^fGl_&#0MI*JC&pw%1SD>Hm>e
zCa%LtT5$XGiMQwFe95}s!#0C??HP^tOWi*QGchwVFfMj7a4_HprdU~FM#ldvtOm?L
z%770fzz-5&0p<}l16dHCk420{WbyQCpW_w@JY4NM-$p#e<{e|foHNL&447Gfsf>|9
z;#YL(AG@mK@#V))-9I0HSm=mD>=mO`JF>1{6%}=xp}h3jglLJGK9AQrEp9S2>p1)J
z_Ysz99^H(`dl}D18?#MwODmD}e|vD-&Mmx&XOio#>y`IRlhIPn$ZicUD=-%R_t1Zt
za=FAWsh$^mQ%|0^|8i3N&g<iQ4zTFyy6I=89hUC@_r~t>sVV!*xKw#pRx`=0ykH&A
zeW20GHs#^|<+^@*eUIGGJf<XZ;pmzorY8GUR*S5ZrW@YnNIqODvNJ(LH#*~i*vhmf
z<-o76gKrqlu70_FuJ`K>vGYG;ExJ4n`rm$hE%~Kf%22{LJtRjzKlSHr+c%1D;=X+8
zK9!Ifa<MSw%g<$t8;#A33qLHWi1%CDta#7Fv-d^hnz^6KqRc)Ce_8*4^LV0G&i4m%
z*X?fe(#Y3)x25vz1mnY-%YJ?RkTaKY!moJ~zRf8*?|$pB{1a1!;7=hJ?<Y1dV|t`&
zaj(@#H?DX>P^{CDbGF_Oe@eE<UR@M$#__kK$l<-$PDU+GPGf4=%W7rqKIaXCn$Opc
z!2K(f>m}GXaKG(VTbOb=(d%{0{Ck_%r!#MszndGInUT3V&gxA~=APr$t$y=FcWx2&
zKRmT6;`+&)mpMB>YbM8S(fOcj`!*`|!OCcdLmo35bLYvkY1s&E>E@rkNae$_-fLA4
Xytk!HOP<<t$m^_(o=UrM!qdY5xUW(8

literal 0
HcmV?d00001

diff --git a/assets/roots/8e88f59059604b03df43780a8094a649cdb975f6-0.der b/assets/roots/8e88f59059604b03df43780a8094a649cdb975f6-0.der
new file mode 100644
index 0000000000000000000000000000000000000000..d0e8f0bd110db8e87ddcfb7a31663be8ec075664
GIT binary patch
literal 895
zcmXqLVy-r5VoF}X%*4pV#K>sC%f_kI=F#?@mywZ`mBAq1klTQhjX9KsO_(Vp+)&6s
z0L0<q;S6!~40rU?b#^oqFyI4;ar3YT<>!|u07bM6G(aNEJc=RV&W;KY;nbp%%(Tqp
z#FEVXJO#(nl8pSK%#un2IdNVC3j+%y3j=c_6Jz5jab9BsLnC8DLsL^rQ_CpYJD`bC
z3E9((tPIRejQk7+O^jSjO^l2T8|sR7EMcDVZ23J-i-}%>4(-cpB2z@Fw+af}{kQ+>
zf!$$`T2;T87V-ZGzTo)Kh4Ii9nZt%oV(zWRN@bh4^7)^t2KcwO?b|;?Pas`xpCD@+
z>x3hb7iua5HZ;U+e|TKG^mNVqbz3jaRW?sve#dE%?j#oJfP>XL?4(bIv2^PP&0f1Q
z?B&7#Ygb0J8*FR*KHc??WVp3<{uB2vGhP45e*7_gafhtAOicfSGSyiDKNf`icbQP8
ze97q8;ni&W|NP$nd2Q{aB&KN1%chGb&vH&lh~4zd=)X0~dS8dEpT{4+SN@xQ`YC_6
z1@AkqKmYh=%r`K+n-i4!v%7Jh(nFaD=3Nt|JK33-85tNCI~h2Dqgj@pk?}tZ3ox~?
z8Sn!mSymXtXEk63QU<ah0X`Nn7LhEAXtmyZ-BF+Xt3sM3B_4B_F5871%D|)r3}r?J
zo2%uvx9)fDYUkky$x;ZIv~Po>?M}6nW-k2~4hN=ds5cpSot*qX>-jQ<`c9`=*94yi
zpVL3{=@#pee~$u=Shdxjxm72?X+6nQD|pkt*V?Q%b7G%ecz-!7ZJww`Yt@S;hBb1_
zIWxnYE@uQv><gK--^Fp4=RSp9nKAEnl%GA9BfqwJnnW$%RuRjVj~Xv^7tgDft160W
z-dvgge#@T=TuUST-R}R+t&IHCq7<}_|IF_i>*rag+!GI1{kS}dMSh1u%R{pevEvT+
zth<Wu+&{+YbN|h)|5t*Y7M}c+B&*bHGyUjK$t3kPsY=%`+Z=n^w<-9H=ea!w|El?n
OC;WbUNo1lt`+5Lt6;RRu

literal 0
HcmV?d00001

diff --git a/assets/roots/9370a55f7c274e0d3a10562231c60a406a8d98a6-0.der b/assets/roots/9370a55f7c274e0d3a10562231c60a406a8d98a6-0.der
new file mode 100644
index 0000000000000000000000000000000000000000..6927c52beb79d15a2169b05277faa8545efa2f4e
GIT binary patch
literal 1349
zcmXqLVs$iVV%A*1%*4pV#Kg1DfR~L^tIebBJ1-+6H!Fidpdq&bCmVAp3!5-gNVuVp
zfdGiZCCnM(=o#+lr|ax!C}6+`65|$T56aIkQ2>g_7)XIcn1zKy!krxz+;j4i5_1%w
zvIcVEyoN>wW=7^fY+-C1CC+PXU}$7)XlQC`X=)io3oDzLl#o5f$jZRn#Kg~F(8R>W
z)WpQduz~gViPt?x^12k?_xa8#<dP36c$?caXZq3WK7OvAryZQO3Yp|c9x7R47~je?
z{f)CRSMa4dJ$>7ERNmIUn)RtK?Z`WAM)pZpHeX=6AMh=7eH!2C2kr^_+D4Y9K~@^g
zKdQx!N$g0v=B_&N+y_Y^-?hnKFWZ;KYkpX0AfvTl#xl{p@BT`feRwp{x&POxYXa(?
zKJV`y{McGB`_!uyQO<vI+wzNFn!B$2V0QdWN2%QI9Jc?nv+cy+B(5r~IVQX4yXQ;M
ztv1&dCVmzC&YCa#S8(421NK9j8#w*c?mS+!Vq%v3p^2^?F;8dgC|oKkd9tQd@JvC8
zzwT_=i7tP`G#32Z-IjIYR}6Q=onzi*Csr%nEaqSOC5oxj-hZA_)4N3_!CJP#>Y1`R
zeMUMd3~I@VW`2v^w%gZk)?Jf3VbRn@=g!}1dd_YlIql^R#Z{Vh%PjWwX?iK9RmyKZ
zyp=Qk-nA?2ZlASoJySAIINi97e*yo?6I1K=hfZXzI&Uj_Apaic6vpQ3CemjdmVVeV
zJN@d6iPp<oDyFI}iQ@R7U9yFN#peDFk-iuASN7(lPcoK0u>I1TNhkJk?$^;|&1cG<
z_kPcQtv%5P0{R^b3fnjNZf9B9ve;<-x_8;)-J3T4%Xv7Vr(?x*k8>w{Pk&}RAD_kL
zv{6p3T)%I@vq^kxe^`|+sXa6dtTnpB&&15gz_?i1KoOjjW%(Hy|Ff_Fvjm#~KQJN7
z3WNBp2FySTIT-=-2QV2iGQ^uSmc5@Qd-dton@q_qVh7hPC<t8s-N)VZ1ow3f+s?w9
ztBf6AiAd)tG91WplB}Db8Li-Sf6=8|M{1^f_ilKx=ES?DnJhE8CM{d7t|#T&xWDB}
zf!td6e}BE^8bA27^N1^lBG;|V%;F;6eJ1~=bgw-uXL@~6^ZTb3$CtLsuRd?`#$Mwe
z&&TjKzmuWgWv<*<TFX|IfAzk={YF2<)Q#I7idRl`Wjhyt=8juua)wLq<S!`&3vB0V
zupYK7*pXDN@b}5>mmCXs%(LY@?*Cio$K*1{dqEE#hF_Y?yr+ELzj>N*-wy^R$ltrg
zy-BxpyR*mS=ie%iwZt|=CQSKLF{9sRa^PEs3GDY%l2uOo6|ye8K1Hg-=%Z4J(z>O~
zZU|-iBrIlnr~T$i@+9uKefnkDi?^xm>1V#d^~op2ZLek0(`m0wk_9!+O#Qg_{rfu&
z5gsqScf3kn^YTx_)~zR8f37(=|K`qDNgaJhK6*C`t$o(ra&6wB*Ub|1vvy0XBp4T*
zdGp=qbIi@k+V}I8{5z?9SmmAQq>Z){{ngs`rWLCQzgn^``QX~x7G@iPiZ<!W$45SY
zVwtM2PPysGW-ErI{m;x)9)|BaE;pg{YP|i_MD2stXP<7)NW9>two)-DQ}?yr@z>?&
smRW6OHuf*O_&g?rG4^!Dmy<mE&kOa5>ndkVdA|DJ%1zpA7g){$0Gz-*d;kCd

literal 0
HcmV?d00001

diff --git a/assets/roots/953e4462a2852855675a4a4f8a790c5e904cfa5a-0.der b/assets/roots/953e4462a2852855675a4a4f8a790c5e904cfa5a-0.der
new file mode 100644
index 0000000000000000000000000000000000000000..09438c828e164c612e3680d993e4b9b6c9299d90
GIT binary patch
literal 1370
zcmXqLVhuBBVzyhr%*4pVB;x$IQ255?NRim>=X(B{{>|UR+Ush-%f_kI=F#?@mywa1
zmBGN-klTQhjX9KsO_<5q&rrrd3dG?O7S0SQDlK--$jnPraL(7$@hM5sGZZrr0m(88
z^Ok{R6@v2fOB9?P4dldm4J{1JjSUUVjZ6$oqr`bljFGt1v80Jf3EA<CtPIReO#BQ6
zO-x)&O-zgodqZmyFYl0LNn%~FE@yke7ROiK%y9zt6QX3gtv94~=XflWQQCFYVbVL}
zP0Eoc`}RcK>YjH&@{@k#v7Y3pUGo=nZ`eF5W|!a&p_e?n&*$Ydv}=km>-4J3I+4=6
zHEWHqj`7F&cXSeMr0feqXRl=lsz1-N^PkzTIS0hnCH<S`<6IXivQKLBrQAd7%hIN1
zYi*cP-WtckpCp@H`aS#k>F8MnZ|u@pKm23oXgIHNoAsE8x_(>j2ladZpVb+AJm;2+
zxTvlj%opyJdj0pJhJ-&pdrX5Fv!)j{t^X)n@M6x__i=}Ej=R@IO=(s0wchpG=fwuj
zL#c=6&gGo#w{<$}ny+jNzMHYueVMQ+`^c7`DX(5iah>2@@mBrhmFJsxu5MDApl+-6
zqGrPTJ^p_maj7i7m#VTP_SJzhgUjUsKX_SYPcdUGKE)QX?6UQpUo39Ip<O3k+;;?8
zO6k2Yc~p5i(u=Ep&$9RO%;{N?+Nw#DZw5=I*{COJw)rl}e)s>1->$1$9`$)dF-UTL
zWW9NA;>Pc<Ut0Qq%V%+(75deVRb=n}&5>Jf^clA-o)ENZGt<<BpFBPpKi^#y=lxL_
zzE$;!=DXC`^%vjSh;v6dA6?q^N@d<7R`xq4PC^r}S(dExacsK%X_?2x&9grnull^~
zz)`=iU*?u2KVv$k<b80eeL#v%$kS~fY&6e@GchwVFfMj7a4?VsCQ?~G7BLo)kfeg-
zkEJcn5q%fM6gD1PBemySrvX1mT9}dXKMSh?GmtXi0}1eh1XzF>hYdNE0ka4&l`%4C
z?waJeeC>yi1&5zZ|1f{0>ecLdCjXvErF^r>4%#G8AvNFUR@bdJGUh=KoV<VMl$}!H
zwiFVbJ6}-uPi4xT2M@m9eGq<f>87%RfF=L7a}``&VDho_y07Oh!Hb)3ylMLXn(xT|
z6y4h7Jn@P*u{9khUiXEU-Hc@UwI@j4b<KyWhBt5W%hpZ2EzrkuXVU!z-=3}WynHZ6
zNcxQCs-GN7ADN4s+PEX_y;Rea4?jLG7t7p!du5`{{I7<mpD?%`(l6P#@p|LC6>3xW
zbgcI=W!GXlRUwk=uI&)^^0ZdM!gS^Z=X&;RC`vzKc<#2zQ&r{!)#}0-PYy_H$Co%=
z@;(~L!QQ^_=;8Y3({4VzqcQzjKkMVKv;9uV2Dq~ZZ#ZT7ymdk6K~`%<^UL<0kIG*w
zpXf-lwzVu%bo=-wUU|psMQNoa2OYlO$e1<xk?u;py)ujCPLv#5qFbe~+Iq(Zx4-#!
z<AXv=lRiveP;=eluj>7?3uX(P@7`e%7k6~aGA6Tya`7_fA5EL9x$5tXbwLk5I|lt;
zsaG^@zWU=;#kD`Al+&uMSEp_;V)PcZvt8uRqiwqA*v)hyQ-iZ*dSaVr&hz#6)3r8n
zemIMdcS+jxU6*9Md~~$ByBqxrrB>dJsjlWY%D`*x@VKTrBwoKYzU<rg<r`$e!wwd`
ZSi5L_ud(MY`K~+9N@^0?^4q6Z0|2TKPDB6z

literal 0
HcmV?d00001

diff --git a/assets/roots/96db2813a1d464fed7792b0db6d29e5d8308bbf9-0.der b/assets/roots/96db2813a1d464fed7792b0db6d29e5d8308bbf9-0.der
new file mode 100644
index 0000000000000000000000000000000000000000..a4dfe1f0471d34a21b2e6c50c56dd9b4e9d6e2b2
GIT binary patch
literal 1127
zcmXqLVo5e=V)kCZ%*4pV#K>sC%f_kI=F#?@mywa1mBFC#k|DPNCmVAp3!5-gNRXj~
zff$IxF3j(qnpBmlpsV1WpPZPQlWFK=-~f{061EH}Ey~WUOjU5o%*o6xPR&s$OH~L-
z&Cbiu$<NBnR&XpzEH23`%1u=8E-fm}Ed`np66)j`;^=LtYoHA>gIid|I}s=moLW?p
znU<NISX`N(r{J4fl$~0Y39=F_>1$|aU;<LkEUXJP04Adl9P9&hST>RgAbr6g`xFcf
z<ivRmjSUTrObslIOifLr#Cc7O4GrMj;pyonMkVCPWn^VwZerwTFlb`rVrpV!WLRHn
zV7zK~_T`y6Lgp<ud#k56T+Vy`e|ErBy9ranoUTjOsI~M?`o$<~#s4V9Vtdb?7ac#l
zRaWaQ{%Zcjp-)1!vbj{=`hU)fqsPL2Y<b(|vUqil&mY+fciw00J^y6YxeuY=7nxjX
z&Ni=+IrMKU^PBK<d$w#n`j&w|*j&r^i$72E@3!-&|MmFoZU4EvTQPi2)qUplPMx{a
z6PF9@2%S*Rr>kyJa{u|?TYf^1eMOa+PCR(<hktF?^^+k1XRP^8i8Zub2n;*i7gpb?
zWUT+Jm22<P71Cz+F5l6~wLUJqH&R*W+0!N8Z*aeTHNnAU#nj!CuU=>{+2&TkC(kh1
z?cuwZKi~L^GchwVFfInBVgp%VqLSrf5n~ZawLjj~cFg9kO-PLC539F9JnrEq4ER9O
z{EUqMSy+IXhRuK<#1{tfSq+$h6mlp7vk)+p85y+fAAU6ITla8AjCb7mY`HAXOG+z+
zj>m=97Kf!Yv{X%g!nsr6?0hZthYaQWJWiOdXq^9KhtA1*z73bW&0}BfyviMCviD1|
z=Ha($qI2pvg1aJmFL-O*Ke+k6!snllA6wl&GiS;TKmWto;@iI$y;z%Oyj3-L^@ATi
zE9d_G#Jg+V&YP=_W&fPKd)?|C(`}fgb~zuLw$ru9V)OEa(`+YJ*Bwv{_Gy3ni92L!
z;N+`HOL@CKPUf=<;oETIq~D!ShDKqpQhvVLI#(>sspxb4<&B2Uf0p!#f6P^0JtghO
v+TZ*fd1|`#;_RH8dVU8Sm_M!e{I<UgbE8CN?PqfNdhpPErMN}>3m*dj5fQ47

literal 0
HcmV?d00001

diff --git a/assets/roots/9717ccde7d8296f32c79363127c7d366c7ccf94c-0.der b/assets/roots/9717ccde7d8296f32c79363127c7d366c7ccf94c-0.der
new file mode 100644
index 0000000000000000000000000000000000000000..12f481ee4a2515594f587101f93cf7881798af89
GIT binary patch
literal 2007
zcmb_cX;f3!7C!gp5=|ro1Q{LzSs+Fb$c+*3i9;Zuj7pUtjkFL0k=Q^W2~sHv#7J;J
zXi-z3$f!W26qlelKtWs7iZT@hltBhX6lzr{S}HxE>go?y*Zc9-Ui<9x?dj}$?min=
z%xlLLT9@+)D1xH%KfQM0G$*lm0H+X1wke(|zf%xIOAFv`%!Rlvk-)_W+9X#FCvc0a
z7mvx*#dS2g1={oceY`YkCIw%h(U7&VIk*5PX&_M__1KD=8&Q}{+!4}$S<WnHo)LwG
zGgq*fZ{h#t3<YZW&(aYsKv1AmfGbcksz4EtQ+DPDzPI{&hFX{{4{7N>@n`eku<%z4
zi;b+S?nV9CeHPULy^9h=j(U>IH?)uLGB)o@?>4-m>**ByOmHrP7reyzZc*ngQq0BQ
z5UH|q?>)by+cWKwo6|k#brfwL2TDyNO4p9QbQjkaT)jo8JF-q6DEqxV>xV4KqmP|S
zjD63NC{}@qm|wS%()iSk9`-TWlRG-w))10c=aLJyaYW_YBKKr`K2lxf(sji*ZCOD{
zQOPBAlXa_Y#drn5vgR`y6<-!`JaJ&+4q2Gn%C?WP{66<T4O%8`lKSU)(_frJ-Tv?|
zGqca6TAgWZpnf&mQn+YxD=B92tcSkx;nGj12T~W4XAIAm%7``31WGi&k@xhGyg$04
zXutJX=XJFzv!wCRA(lGSS$Ca!U6jqD&H`#{s@=jo$+yLgZckhbhmLdFkpq!OFT1?3
za=QM;WuU-%p68jH2j#Q#)02LvKN0?7;;BzWZEor{<~jCnqs>#RE`KxJn)u5|P)@?@
zUtZ|s#C|z^X^Vr&zShaxJd>GA#Hl~Fl=@_0z0<F%4*M5v+HvriYRT*UZVjr}9riZ1
zyqNf~U3clB0?NHRUXy7S83$JwP0KhnZM@7Be&>T&^4K2X?$pgOPcZ9FGA}-J<f4xe
zn|k*A#mT<S_Xp0EyXZxSD!n;TS+sha7;=3$N<aWoq(E=Mj<}BRCC*<?g#A4aL9iHH
zg8RP1IGVzakjtZ2GZ=AkaSnWeV7EiKj3E?>!}(#6q9}%|R1hKBEs-$<;ZnIsC=&3)
zAdvD!@fu&IgFq_BE#7BCQuN<ulL%zd@6zFB@NJmsV1}4Mo2qK4-<h7toeCUF9&u_q
zV!pl>r)tdl2r`Rl;RGmPLa4C9jB&%H4@W2vnZ|{NDUe;b0ue&qLByZ}J^&;LvgNyy
zP!u8qa|NOcTtO_50|}4<5eNf($TY~|aOJ>N3T+}Fge-tI0hBL56tr!DXdJ}9_Z34-
zgSj}60^x2M-0y_(QFAdG+uu0@piTg_5+H`W6Xwv^_CWr((>$QJCQc6P(VYKxHFk4R
zUSI>1AAyy?3E+SU$r0{6fDLe%v-^XsP--fnfe4sE4x+(oz<?AtM-Fq}B>=mje>jlg
z`1?CT43~VM3B=($MKUp8Ad*Cd2pl5hkvLa#=@!@~+!y!G_srjr;{JiK|G9TU!osDn
zf5daM)r_k7{}>$3MBGSoj2;GuZnCzf%h+$*@}C0_&T2UD5TItFd5`|&?DTXu7`9Q3
z`z{l<q&xQb@h^C*{i^R}3}`v%H1276t`<>iv5nnz_o{7ra=I(ZvO3z=;F*(Y1*J2@
zH20T38y-(!-QRJz)OniTMY1>j^@ahRRu<+y>(Ckdt=KP=ZQ{iV5cCW-T@sFLc8}lQ
zy(@V+yCd-xLJzXLG4A<g!ur#o`9~X>o>O0n$-3MLlS8H*mE%X(eq&ot=~^osT0^Pr
zI2JrOSmJ1kfvNSpv@uR?$U(ERhRUX_K|et5xk=ytNIxTZc#>7fjl4fV@?)G`x}6>i
zNI&j~vzZ@q^5gRJ`@YKyz%2<4<}qP!UacaZFz!VS%B^k@7n>LFO{4VDT}Qv`S#+V&
zs&{#5dylnhe3a|%m-^CapECRN^51m=y>vQR)}2a!H!*FYnQceimFLmP#nGX4TGcrx
zG50#YRr%vnOOEIz9pe=iUi4~fxZheb&eXFzX>xkv0rx@uSTjXAY;>V8;Zz^jnmEx^
zuL@@OG#y{h9dNu}qpYj?<aYdiL^`2*7-CjYeV}n^|HFpt$L8q9JloR9vhB@JJ>n9-
zrf0AC#CAwI@zd8r#tE8PZ`U>Y-O5*Qy7%60$xB~g5cE+V<M6dr_I;!2ooTA#$v}=_
nmfg$Zz^auseCL~2gOW`1)de#jr#;r2YNh&cS8lL9oZ|8qN)P3V

literal 0
HcmV?d00001

diff --git a/assets/roots/984a0a63fba1d7069deb8931aef39c24ea7a5c47-0.der b/assets/roots/984a0a63fba1d7069deb8931aef39c24ea7a5c47-0.der
new file mode 100644
index 0000000000000000000000000000000000000000..d618f1e49bd788f553d91efd82b4776b86e97577
GIT binary patch
literal 1398
zcmXqLVl6UgVvbtC%*4pVB$9GFibuik#dXc{69MXrqSWu|emZTy%f_kI=F#?@mywZ&
zmBAp;klTQhjX9KsO_<3mz);yh5yasVmU6C4N-ZiWDlINi@JcL5%u{gA*V9q(DM`^Y
zlr@kBDPk5D2~JHeElLf}OwUsY%Fi!RaCS5_F_07IH8L<TF|aT&H!w4_j1uQHF-79i
z!pbHlC1j5=vNA9?G4V4PG%;~8H8C+V9KBSv@LJb?F~bWpE?Q0b6SX5x>0r|L<y`9T
z1HS2PoR=Z=Ax9<I^5cj50>|!c4^p@q6zw!~-sc7Tg5=}Rq~|Wz3s`h;dhfO$Q@?K5
zb!YB_eW&k#xA^4#b=j;*Q?-&J1GpD$G<}}BDRI-QNrjnDG(Y$^HnP}kS{i-j=!(en
z>QEWa)m3v3Jumisf0pymk#M2gjC{(Kob1+%Ui|4g-+#bOWsZgVgXX!?3-(ut3cPOf
z<BIxw|CUZu-MdrYG#~ydT==~sW6qopz5Dn*C*F8v_4DtAjKbS5w`%(}P0CM`fAHas
z&zn;hU+pSk`?<Mg!jy~geZ`Uju}n`3mL3qeAW)NkG{SSshP+v~YNviZbBk&H4xQS{
z{(a6Le`;v-aytLuxSM^VTSsMMZxH+5irJ@6Wo%k<m&d0v;n>WJlRp|rv0q-Nbm-N&
zk1d>M9*E@C+t*!cYF%?@rI=sqf`rrG=3GCqx$o_<*)vLcLtn%{o!ZT`WSz67hTxKC
zLI#Z9rP*?6b1U_img&nnY{@-YTgma}V%D};txZeQ_GY(!DG59L^?7NKhR)LeY3@s}
z{QEaAWPfTM<28f+rDk&$1<1U!Xkhd>cD&@vu{DPsJjD`Abk_Ieo4&1<V2C!enG?W!
zYLc<QM>Wsf`=u)8O-k2aO#3V9%{0x9y=ZFPYFi(@>!&{4e-L4>tIsmaVlg8VGb01z
zVkZL!1Abu2l@(@W{LjK_zzn1e_&@^uAORL&u3<Bf1@ZY<#8^bwCNJiS)5tVml_>lA
z^&j1Q<tLvPAg3~5_5r3cMuuq(MVxGPbIwd=5!=1Ms&|s#c0nnw!a{+wENknRx&{cO
z`FS}mV!kQpUuC}2`_Zv}qqI`h->=WvGi$2#?hupxCU2bQ@$AKq@J-T{_pRHx9;NJJ
zIF<9h?t=2`ivIs8vrWwBo2D*W!eA?;JS`&jRC4>V#q1rv&oj%qg3o^Rf8+FN^5dCH
z%x&6tB;Ee-M&8`sJl^?C;M}brrXSkgnw7!rBKI`#-Q;uLd2I(T@u)<aNzK=p*#B7K
z_LQkyZzrzen|Wti@Z-ehV`96Mcip*LCv~jaY1_>x);qJ}uioEr%f0rN#qBkgSLL#E
zw8VQ7&u+{uVmy3UfgveF%<yX2s<z#HtL7d1`QhddUPY!SM>WJE1$W-eEY_M-v13yB
zY>rP>PxYs6h}fR3Ad)Nco@-CtjnEq%xAcEWF8$s8px*Lpk#_45oi*<zT_^c$PGrC1
zE1!3%Q8;GSXQA}w^Rw-{=g(cTbHy~~s-y1|?it_GpC?sSBKPp!nJ6okyPKt0R){38
z+3qgXJS*qxvzMZx6Qx=t`KGu$7wS`uZb+BBlRQ~~J5{gi7w0U$TWuP(s}fCb@GaMn
z+8y+u;z!P|oDF$9+v8r&G&TQdo1(pPfyw0a$@*6t@2^W%Un=L<dq=Y(^2g7G3O&o!
p9P*lq&Q@$X(QhMH{QRK&{`2RSYR$gwl47)AcYTbiu*cT=NdV&uS#tmY

literal 0
HcmV?d00001

diff --git a/assets/roots/9b55f064e2c8498d97481114eeaf435fe0cd3a39-0.der b/assets/roots/9b55f064e2c8498d97481114eeaf435fe0cd3a39-0.der
new file mode 100644
index 0000000000000000000000000000000000000000..16a364ddbbf340861268c296c91a2277147e7739
GIT binary patch
literal 1374
zcmXqLVvRCrVs=`<%*4pVB;bEZyZ>v-3FCSGCJ|}M1qlYcY@Awc9&O)w85y}*84TPF
zxeYkkm_u3EgqfWE3<VANK^!g~j?lc!kfPG!5<^u3Wsndvk4&huqk?NiNorn7YKlTw
zVoqjCVo7Fxo<dN5eu;scIIp3pfw7^n0T@Jy^BP+i8W|fxxzw|$iAf3B6O613%uP)E
z3<gb1Tue<&j0`I|*)@cjHq3mGvP#Zbtg3k9#08~xD}Ft;V5oZ2nWezreRRWYW9F!~
zV-amv54P_1KQ_m~_td_3nbUTxZ8VrwGl}&ztM)993p>i}rkzmOeQCqT{u^st-Ttpi
zPuNmkmnCl_6;#Dy%Wl)k+j2p^jO%-r$o-<nCN<%HVT^W_A6IEw=luH7pX+<V^!~cn
zcU0b0x-M_s#@cbOBUZI$dP+Ly&HYiLtZkn;<=#XX84G?cPuWl=|3tu4T>2B=#+)Tu
zi;Mqo%F7u^1`9sFxmicAOmE@hdv#eIoG(7Hcm3FOR^a)gVu#7QIWF2i{KGwEv+Dbr
zW!EpRpZ|Z_tgjQRXK<Hase8eGDQW9e%g3KT=JNBUwsa+j9BtV4V4ioayV`O_j@XMG
z^R6E@a{1Nd#g!3KZxPIVW(k9FN?;`S;--mJac{&9eb#!GbW7`YWRifYmsTUUJG(Pm
zLHng&lLa-aJbYhIIbPtqKK*Lo#s&pO#w}GG%O=$OJ$TRV*uFk%X<Ya3^8uS?g{(i^
zxhq2VtHF$oW<{2Do-BVgm-|#cVGX}MWv5thuiIwXsfpoX_3J-~MJGn&n*|7R-&mtP
zRZNOcp5v^UNvc3n+SP`55rueNo&^<L8P{~Kzs%RZ<i$Gq&%FHX^#2_n{g!5W1(~zH
zIwsb8>B!8BP1@GGOiRB921a~7!G8D27Up^;W=00a#ZCqe2C~3(E6c|s#v*dF#OjHG
zE$?@sJ9Sa4^W{uteSatdPU*73jEw(TSPhtglmQ<|JwHf*1(<o-kW(2js{m6OBZFD*
z^fOMPDVpZ9)pV}?UMHHVlPx9nJ$~CycAv;spHH6Hx$ev^y{bD0zHZPxV7-2R0jprv
zd{uu&&4R~Ic^<xss=4F2`=Fdw<5w~7qKPLK8SY$l>(5;I&#?|n!hif^*iLO0nGhl_
zDJ1n#{yI-))VIQlFH>qKa`(NN5Yo3Nf1%InKP4%D3upasWM6o8;uD)$4`v%#7O&R2
znt7sPqMBjtqvHl2|A<tS3-Jkmxhpnhzju0dL2&D-4ZA;E`07lsJivP>Hv8qHr&l|A
zuj%YxExm86M!S%BN#38@Km8Zl)iy}~-kG!d(L7txgVuWKOc4|3zyIMRud_YlYw6na
zTfhAmtUdHWW$D_>zZTf6{1tm=>4NtzOZHuR@$`xCH1TRSJEOP9w>#}ATYMwcLfgVL
zP?3)>U(ZC?;h}aqPp+4vfrN6DQRvK*;ty=@eS1^6Ry#s+(OMlPsi}SYrcH=-3P18w
zgxOSEMmI2=W4YBm`zI&1Fc%*>sMfHX+ev;c?|QYOTW9udUfdkP+jLakE%5Oii8H;k
zd*67zE)BTaqY-(k#N<{Fx8iEKSJF?9{}r`6AinCia-N#o>0duL7G-CiS8Cx-;$L%9
zl3~iCGMg*9v);1I(`8E%Fb|SxEs|D$dghqn8}m2Gk+ZpF%g)pp&FYxSVHULeURivZ
Wr{~)Gy{QVDP9D@QlPH@Xwh;gt1~=6J

literal 0
HcmV?d00001

diff --git a/assets/roots/9bbd65196c3a9fffbf0bc4bfdb20299bf0d6df8f-0.der b/assets/roots/9bbd65196c3a9fffbf0bc4bfdb20299bf0d6df8f-0.der
new file mode 100644
index 0000000000000000000000000000000000000000..58d018a29428a56232b8e2d220acca9891bc8b70
GIT binary patch
literal 525
zcmXqLV&XJtV(eSM%*4pV#LL9|^gzb@WT`nt69R$^xY#(f+C0wLvM@6nxEpdCaI!In
zvaks=g$5fc87P1_T*8v>`T6NNsR|)QrNt!*!Kp=MnaQce3O+v0h9U++AT`Xw-0mU4
z3PJh#B?>_%26E!OhGqt4Mn(o;5GBrQjLfB;MP&v8Z0un7GcmHUYB#blC^087uzW5l
zUY^mNu+Djh>Cr}mYH!cEzYiv!dv?!lZ}!zh3Db2BcZ<JwPBe&mZS$_RW|2dg^~z&A
z+;3<-pENP6_~phT%lVq~7tOdF9~aS<%D=EBmF?o4?vuxhPxNHzKRvSgqHNb<Cj$oq
zKA^{C`577iv#<aIw#|Sa#1{tfSq+$hlz}WrfR9CtMWn&!+Ut`4o@R@$-uScC?r7GB
zDY8AtA<vx2V35XS$ne79fAc-&FZ0*QRxQ`tx!(U<vn-!(E2Hein^|x853N5Q7Zw+D
zRVG47gZsO|HvNq?KrJ5<ZI*vo(DYdGYKv@f+Z^5Xr%YyloWE1q?9rYC=D7`<XN8@3
S_-MCC<*BoZSEg+BbOr!FFtXPG

literal 0
HcmV?d00001

diff --git a/assets/roots/9be242c83e15138e38e53cc701da3ab52d475144-0.der b/assets/roots/9be242c83e15138e38e53cc701da3ab52d475144-0.der
new file mode 100644
index 0000000000000000000000000000000000000000..6a62de126c25b84a565a9eb86582699830c48a1d
GIT binary patch
literal 735
zcmXqLV!Cb6#FVgrnTe5!NucIrzjn*@`>*&<rp~(T?K{nYi;Y98&EuRc3p2BUhatBC
zCmVAp3!5;Li>slifiQ@}CCuZZ8&XtST%zEfo8)1rWS{^NW)_wN3I~M-hbTA&DFo%`
zmnb+pDi|sl85kKD$cgg;Nh3o;14|QA1A{1WUSm@z*TmE^ii$Rs83?ekgMGln$i}MO
z$ikq+oW#I#?DTPsi@#gG&U)`8qVUi;JFj%@A8qEAD`k^auSZ%tre@1MGtt^z@=fU6
zi`?g{pV;`>yKr=$6)QZwf6~k^ORn1lgal1!ZLXM-p1xRyQ_{B7r1jq0gxcdgTO5OS
z<~@Dqw77|p*Pw}!(|{is7P7*OjQ?3!4VZzHfh<UXk420{q<Esh>i?meqiQ%+uWs7K
zu^@Z3e69f>NSYs{o&^{qYzB?TKmzhCjr$B5cN^F(uvuW$W|2`+QedU8pInrqm!ew&
z3VOY~)DjS1AIgtUDvB=xhIxE)V!UBID9rVMvIdn4$`_Qj73ZWRg7l|k7NsVa<QG+<
znBweb3ynBcBLk-(AOVUzAm!``Bn*KV1a<sDsz6o)1wiqx<815VYM-21RFavNnVeXX
zT9jIr52Q2m^KvqaOOO*1b0&j98j~TzlnJ`RzaA$4NKAgQwzVQ;;+!3mE$pNmZ#jqs
zJ8_)S@B3)i7<ORQjkgj<Hmv(%_e%|^<+H}4W4E<u{@xzALuK)jDOFPT&&(b%hZ}bp
coNhXPO+@f&X>zp4)H(8u=WkpsTF!3`02L_kQ~&?~

literal 0
HcmV?d00001

diff --git a/assets/roots/a27cf103f952a9ba8cd636012f4adfffe82b92af-0.der b/assets/roots/a27cf103f952a9ba8cd636012f4adfffe82b92af-0.der
new file mode 100644
index 0000000000000000000000000000000000000000..e4795f3bd1a3114667b5f51b8f9bd078d49506bd
GIT binary patch
literal 1449
zcmXqLVqI#`#N4}pnTe5!NhIYPUut<`)@ti5uUcDnZ|vMrIGNvomyJ`a&7<u*FC!xl
zD}zClA-4f18*?ZNn=q5JpP{OOGKj;)BNI|oT3q5-oSCQ)lA4^6m!FfLo|#&#qu`mB
ztY@fVpafFJ%p;9Z=AM(El$fIsl%HRs;Owa2ZfqbY&TC|7U}|Jw0Hh2pqr`bl%nVEo
zEumbR+TFyYgzQyDRtDxKCVmEkCMGVXCMHIP1BOkBlb%eG=F&>Nu#atJyLF(@s{+S$
zkA9cD;_BVG+2>CGcHtoZ5Q&F6#ZxC9O|#BAza}}iJ@~`-kCxjPI45s7!W<jE^0~{o
zBMX~TzXjNBtP|T|)x~sSnmof<R>k*hxpx)kNIJVNJo=*H)S<NwN#bnBR_*zG?b)Az
zx-=(wo9<<mm2D2D^A+CPzwUOI@9#T$rEi<gNf(yKSDZ`juiCGdIaB8rzvh05K-YV>
z4--D{>wf9r-l(~1ed{XEh!y*j7g$Vuw)t6k#*v>|k}bRW9)4Zl`DUqpfI^9!kYll&
z%FR>fbQVUM9ylTErk)tp|I_z!QDvIke9;Mtx_{qxhZQh;dD_)y8VY3|my0=7CEWeu
z+1CXAGm~{%>OcO;`ZL>o?(MZ5wx7#NjjwwzInn*|t8;|^=@ZN${YzUbSfoA|f4bf-
z>p1`U4e@hQbNIdf+;PbW$#~>w^G~Ox&D`d!z5b%x&%cK-$46fNKC$9>cX^iBQ_t23
zu0;j<6Jvkar8;m+&OE865S4Mzbie=dz>hZswWA-*nx|pSWyK|bu<@zhhh;l6mv&5f
zmMvU=F~#0?PJ!FgMXl8lE$VlUG}xujnst1ZA)mpUXW|Z1Z@Ru^oVIE|&u8z8$=`(|
z4(#~+EB)^5+FY;yMm}3rt^doU^S3HRvQC`nSl)P{)u&yc@c%q#>2*^}bsL$O85tNC
zCmSRh@B>q_tS}?ve->5)W*}uC4-!yjkuVTz5OH|&<dgDyi&Goch1Y*lG!Qeny=Rhv
zEJy(#ix>-bX+DrNKgd89U_N9+PKLl72TX>H3~JVa4}C2@8%b>068A7Q?#LAXE6WoX
z|2S~on33t_;Z>&mAEyYHmz&Ph4GVP1dw5JwL+<~rH|}SryNG{(;B)9<O^s1i+KH%b
zF~P3kQLa~5XX@)IhrUbBxPMu?V!6;1HilB(qL!C>d!n+g-qVjfzWB|h_O#pEL$<1{
z{^DG5+neP`{@rJGX?B{QyfX@w+86xTXq;U3n76gaMJd!?rsn0J9ilISeyy@wtY~Rk
z(zz__kmaw6^V`-ue||0Ozw#u#0PdAr*^R$g#4qt&b~?47>;+eAgSVNj@%O1ArK-2q
z94T%}eHrvM=C8$6rmReZqcU9K?CX@4==?nDxP8Z)`TiaZKN(p<&#d`rWO$@>D%*nk
zi@oZ1H?Le$)c!BBdsbD6*j=%uNt&;%rrqgYo)LNZb@@cgAJ<Rc?2nI9XRM9QkW9L9
z;_R30Meh5er=R<@cG1kqYp0x^{7r~+>bBL_tuNRMo;DEEt893Z-l!Y<wxD8LLgbo<
zv98JeC+-(zM8A^V!T7Q6_w%mJk3$w%a6YiP=k)2&TfNzz<xRJl-FV!vu>0)H6#hf2
zR&PA@HGiISZ%fF`&3Ole(ry$8d}K2<c3v?@Z<mPSIe~haw#WUKuKp;0Gkf(%{p6cY
z@ek4)Qzm|#uKy=b?VItB%UgdONm^|fsLE9J<8F59)m&eL6REp0L{itNbC+~|Y6k$g
CqHtjV

literal 0
HcmV?d00001

diff --git a/assets/roots/a4c867427bbd6f1c2a429387154ec72447e68508-0.der b/assets/roots/a4c867427bbd6f1c2a429387154ec72447e68508-0.der
new file mode 100644
index 0000000000000000000000000000000000000000..c1258eecf29c2da3e52bf40c456db218af65d9f6
GIT binary patch
literal 1463
zcmXqLV%==e#5{WeGZP~dlZY_W)kh9Klib?G(qp&m-n}W??vJnmFB_*;n@8JsUPeZ4
zRtAGaLv903Hs(+kHesd^KSOf^QxJ!XN6#@mH7_|;!7s5SGe0jeCsiRORlzy6s3bEj
zGZ`$V;F^<~TvC*umswbvYA9(S4${cXBM?%W7gAJOT%r(^pI@Tj>}Vh-&TD9CU}9uu
zU}0)*Y8EBVYhr@LrH2!mn3Rw`&dAEZ+{DDsV9><G#ni;a$Z+`V<v)8_g75MuSY7SV
zWA%3Y+T2w4J#zlMdC4z|Z+&B1=`X+KC%3$1&n$%tb!=DOnA~jJQySgg@!`_VD~q`{
z<w(Ew)UjI=dt(aof;T2l4UU-B{#Nsq&NB$P@wLHqj^)}pCskQ|XHBs4bI9w;KC792
z?2PV%k{7JuTpj_xs+@1ty@{U1msIxe)m+)uqBnxOO<%~X??1Tk_-+reyJ6SQ_$_$2
zbIt9m&5}~B7pF|Werj<l_h*ZrOzZA`OFw_o{%e<xyVT5lR^GoCWSb2CXr5t+m_E^`
zfkDQ&b(;QZ$3xu$Er&T(I_0<W-@IAwE-`6JLd@}*%r^hNPhDOcu(09K%I38Z(?S(*
zw?$rAe{9d)#ys}h2}%Fn2;|+$VEoc7z0z(`wDR?oWB2bYs=eX8tLakUkF@=4Zci$;
z)XXaT<^5*LZtCaZllgx#_Q2l>0?Rg<e?DualDDOG!v2PxJUv%uUpw(J%wDRYvufod
zX`?_LyHEG4zr|K*O7=ZHvDd7yJJ#orto_=EMdxh`e3u2xP`#u4b4P?DN8x_|9W4v`
z8A3$=Ow5f~KF#{I_cZmh*^3sot>LW+d6wpr7C&L1;w&aN-6ze58g`!dwtG=;!}z8@
z?ri-f4JXE_U5}>Q3Mkfon=5nFWZ@efKCU1gq0j;q+tY_cOr2xZ{q`N$yQ*f|^FQ+v
z*ScJ0n9jt^$iTQb*&xwC7MO}<`B=nQMA&A{mJhD|_;tyN%WZZGizByucTqIp2T2Pv
zGX7^_HDCr(2J#>QWflnou?Flq_&^HyK{{A~xsnYz83OYkFc~s3tYXdEc31S|{>{e}
zzOlJ)Xq&8hxp(IY2K(t>gVZ|;PnP_BeJbU4^n1D3UHdP-eixIuOYFqwo&A^1^c+0d
zc_Z(23vBRYee{2#z4!LJOnpBZHDb=($z2~WGN(48g7;ek=gyaW(={b`Y=8Yj>~yHm
zlVi2JkG%P@RmRUQegDyT>D*j*ja4iWiPy^ZE7f0M&sv@m{9$_U+y?vI2ib3@u75V$
zXx8D7$wy>34!iuWP8M{&m?f2%Rhc`%U$f7h^`KB@=CxyHh7bSzYS<Oyf8_OcqcuND
z6UDC!NbdZ2iSvDx)7<DN?kmTp`e~i}&wky%PJ*rDqvY0`Gj^{lJR<YFBr@VXPv`k=
z`O?W!EFzOU0#?2b*JKcTY$kK!$Nmq-R~`9}oUyt4(%6}CqJXyC#htNdjU>DKdlbsA
zD;;sV(;_xoHTT7q(8Br+HJdLNdhR?Qw1ma}j_rco>y77e86@=Go*O%5#omPHNeyL<
z%{)D44BR{)@myN5{&iyE`{znYE5FC2<jfcANjFn>{mNOr|C<2U#|^z9&OI!<7Tdpn
zWP1E($%A|o#|!(5Q^OU0&Q7mN%TV!aNZl(ilP&U7>iQkW+;{(-P|@vJthYW?{*Lve
zqP&*N7ZQDV&y<Bf(rr}|HRFBFIQR99*GF1r{yxBS#^}Z4@>|U=-Sa{<4s=Ic1{Ma=
M3?D_;HfzrU06Z9SF8}}l

literal 0
HcmV?d00001

diff --git a/assets/roots/a4d7c276adf4f0fa5b7b3606db53807f3cd79d09-0.der b/assets/roots/a4d7c276adf4f0fa5b7b3606db53807f3cd79d09-0.der
new file mode 100644
index 0000000000000000000000000000000000000000..c676be5926791d2e775d52d4670db938cc591e95
GIT binary patch
literal 600
zcmXqLVhS;6V!XY8nTe5!Ng%ysZg2Sw>#W;KU;alv+JDY~i;Y98&EuRc3p2Apjv==J
zCmVAp3!5;Ldyt{IfhmZ?#iQqunv;{7mzk{Kn4FlBnhRtk=A|eEr52|q7A0pWc;*$C
zWR{ecWaj4;D>yqEsu(DNG&1u@dpHJpIy)+a_yjAsIy)-_<>!|G6(|@P7#SMKiSq(U
zBST9=Ljxd+66ZBB1#*o+Tm#D}I=iOKK!A-M91={7Y^>UiEDTD_NenC&9RD^hn0BdZ
z&3aF(3kMz?w$@nnu_!l{!M&s9&n&g<Ro=UDShzak#6N|$|1sEL^2j72T&gAbrNPaW
zpQe=@4wR4ZG(0oIFF~-q^m5UZ3I4MMRJB%A=<b`~7%@S#X!*kJi=7M{4ETYeB`eIx
z_@9N<fEh>`$btm;Sj1RFPD%$i3jJfbDt2+zo>}?Z7fhARJ7vHJlI91gX931)8*&^n
zr!yF&Fc}EmTleFRU&n@(AC%S}3Uqj%P^kN^pXo>}bAjiQNw1EIbQCPR%)4RLDIJG7
zzh5@x&0;dpcAv$5?Bb!unp51<Bpjs|e=*>kw^dn#cfQCro8U!0Y?-ycawZ<r@^pRn
KX1nl1s~iCR@Wnm=

literal 0
HcmV?d00001

diff --git a/assets/roots/a76e38b989c88f14809cb8826da96b75cadeeb8d-0.der b/assets/roots/a76e38b989c88f14809cb8826da96b75cadeeb8d-0.der
new file mode 100644
index 0000000000000000000000000000000000000000..1ff0c9cf054ea45c3944aeb5ac6035e0362135fb
GIT binary patch
literal 559
zcmXqLV$wEfV%)fZnTe5!iL1JBTT|E$p_(}>47k`hwAwt**|IP*8$=m$8*s8QhqAB<
zGld2l3L6N5INZWqsky<K>3IqP-kydc20|b~E@AFe-_n$fqC^GHyktWK138c=v#>Z+
zsjIWILQsBwiGs7Eg06zIv4Na8uc3v3k)eg5g|UHwL6kVJi7^tFrgoPZ2(Yn(eaXbg
z#;V=O!l1;Q#K7`*Y2vzSH38X|+m#H~v3+UWywRy}s^y-`L66t3|M_XU=_E5ZzV@lT
zJ1wJL?!JHF-wAd{o86)L&5N^sCv9l#WGbljIO_HIrBaBJ@8sQ1JnPHnC@-tMo+x-O
z_4tqae_ubXT<m1vU?2+&7g;_QF&2^EQ63i>6dXRSc*($?DOtY!+2Jqe4fsIP{EUqM
zSy+Hk!)Cw_;tPZLtOm?L3ORn5GZ+j~nG6}W+|Xz0{JYI3X_vE~a7)qFb$4a%UE6vm
ztUtmbO81_Ek5cog$t&vK2{|0U*6#n~ek+rKj7Z9pnrY2~b2eOzO7vdF?|GTw&%!@X
fmj16_d)?r|@$&k8jqITY0SY2t!!5X07zP3WZ=$q_

literal 0
HcmV?d00001

diff --git a/assets/roots/aab38011e10133cb69cdf7f710e973cf9577abbf-0.der b/assets/roots/aab38011e10133cb69cdf7f710e973cf9577abbf-0.der
new file mode 100644
index 0000000000000000000000000000000000000000..8c59853592144185df1636dbccc7933a725ec502
GIT binary patch
literal 525
zcmXqLV&XJtV(eSM%*4pV#LL9|bVt)`g&(TwxwdHrTx=X#Z64=rS(up(+zq)6IN6v(
zS=fY`LW2#J3=}{dE@4Uc{QUHsRE3bD(&7?@;MAhB%;eN!1s@-0LlFZZkQ!!TZugL2
zg`oWW5``dR137VCLo)+2BO?Pah!W>DM&?q_qA~*kHg>T4nHbqvwHsL&l$etkSmgbU
z+l@857Pj0weOxiZvGY~fTy5{xW3oQ#d+OB!i}D}Mzqa_)8CMav?zQjh+Irq>tkeI$
zvT&|Miz|y`XrA^fwffx?7$18}?s^h3&6RWG)tregYg>f-X7%tk@ECo2puX72z`=kI
z=y6$oM#ldvEWm(mGvEjDg+Y8)17;v)APW-UV-aH!Irvd+*8<&jt&Qg|f7BA%yMrtJ
z?;hlkXU=3WNMkZ&`1Vj?sz`On;t67c`&&-D%Fh;`C+9XpVfOsXyf@ce)<0YGBU&$X
z_x`(+zAxdqWB70pP|Kg`X=zWL#e|#h9>1@@PsHLa<GGFEQi7!~_cHgZ)wMi5nXqi?
R^^nNz&jocluk3s$4gj+GtFr(A

literal 0
HcmV?d00001

diff --git a/assets/roots/abf377b2272de78e18d5a67e5b1297dce8c5dac1-0.der b/assets/roots/abf377b2272de78e18d5a67e5b1297dce8c5dac1-0.der
new file mode 100644
index 0000000000000000000000000000000000000000..9c534960432c5290bc86f2a16a7eeb6037355494
GIT binary patch
literal 659
zcmXqLV(K?&ViH}z%*4pVBoNa*^JvtRqn8T9?w##yIHP93#m1r4=5fxJg_+r)vBQwt
zfRl|ml!Z;0DKywn*gz1(;SlEXOD$LMN-Zi*tuz!d5CRFZ3v)vR6r3|lDh=ffWI&=^
z!lEG=sS2UNu0bI|p}`>veyJtp`9;}=dImZmd1hf%uv}4TafyPfv$KM8YEemMT4r)$
zNoIbYf@5h(Mt%{{JOep#UPA)|BLg4-0#V|;#uf&Kh89M~rk19bQG>~;Wd;Il?BFnD
zVq|00Ze(FlVoqXUky;ZHwen|%^7E>zD*3_3qHcJvK6Z86#b?EZ>+a6E#*_H>_JU64
z9jqd6!q2^nwST0z`P}y_U6l_OH`nP-zmRz3<IFp%6O&ih8!X;Z@aXtL<2j%A>%|0b
zjNe>qRNrOtxUzDwlYxVQEHF@I`B=nQM64ciwp}?dd1zW$iD%iJ2d2l8lV=(5fu#8v
z8UM4e0HdGHfFHyc2Ju-9n1K{>>@#OD7^E^8n58ci<GAx=I)kIE-@b>*jOVRaISHmL
zm^;OiNw6}eTJ~4U&Ua!?oA-Ae;ym)^$wpr$Lxz`HiS9i?UfzBZ1>df@T+92~yel_i
gugc9Zk5})HEOKk?$g*;~xN^4d$;4Y1W5cr~08TI3xBvhE

literal 0
HcmV?d00001

diff --git a/assets/roots/b0e31e6fe1b4e58b38cd4664dd9184b2eead11f6-0.der b/assets/roots/b0e31e6fe1b4e58b38cd4664dd9184b2eead11f6-0.der
new file mode 100644
index 0000000000000000000000000000000000000000..194de84d8ce9e2bf50334b34b7c32dcb7562af4d
GIT binary patch
literal 1471
zcmXqLV%=@f#JqR`GZP~d6Gu3g;B==WkIxwJvT<s)d9;1!Wn|=LWiZG#<Tl`BV-96u
z6K3)ZG2}Dg0dd%QSbZ~d67vj|4HQ9qE*>ez<dVdk%wmOLy#hT)J$(aXV^a%LBLhn_
zb3=6lRgfZP9yypI$I_CF)Vz|+<iwK9{5*xA{QMFHXGa4$ab81114|<#Lqj7Y1EVN$
zUSk6!E`1%-#H55A7>uk8%uP)E3<gb1Tue<&j10?<9a*ZmMCbieiK80=7Uu_A&*zFd
zdC0?p>yXR>iTa6K+jlzH-<8df=V-pFE7!5$M}Js<?o6gh6U45@bL4bhf4F9k!l8{1
znghEseHo@j<?A1CsawqVWa8O~cXxgtmveQ$tG<(iasDzz*{_be`aXX();{Q3tF$F7
zwXZFtf3maYJxjNW#Rkf|&VHyB4nGiksX5!j=g8{$4N=indrvM`vTsl~j^^9m#S_bJ
z&T%^DQkA=si|NrbXY~5+YQ5cFo5mZT7^oB~{n+jCW7`X+NwaRR7da8V@Jy%lLj$!x
z3uenVE_at_dA-<j65ITlm-k<O<sUFd^53*}Ih)jPizQT=+XSA6*sZWCQ}J(9Jo=cQ
z>Br<L?h3pAUE#Z&vGeYcs+Ok5!6B7*Z_l~(iG8--wmo)lTXWy53Vxa{<&^l{Yx;}s
zjRNeyQX4ldvONFY=D)=6V;`fsBOfuXsh)JfPsBgc^&3x|M*M~s_O9p8ub-X&yXA6u
z)YSYnQ(ES|+jGFH-)r&@7sW@0u89GD0yiF;*7!(nxyQPHG28qTThBg`zb?+kTQ#*L
zls7}_kAQSi%G}%sQx_bb!XC~m@@y~b?;Z1>-S2*M?0Ma^Z^1_!Oae3_J_rRAiW}^D
zR*}5t%cixnwKx5HXxS6Di(6sJz3S#2{~w3-ZWnxM-ScVV!PvP=xP7#5Zj$)Ab-p(f
zGb01z;$(wF16g3|mgQp+V-X3u(P4FBenr~b&d=2r1yfEkF_~R3;0H+yGcx{XVKra|
zQU>xM0c92m1F;6|I`}{e_(3{YfVq<mIT-@;Brq8=GH_QHwI4`W=IPTB@l3YkyGV-1
zvKtXxeE!0w_f2K5yk#>y(P)=-^{%y)(Ypz@f|vBZ^c_ytQ%>8EzAt~<0b$F8Rf|ki
zCzl4@TRwL!UwdazVV0PUq-^t#S(>T)zSz&Y`QdX^yJBI3@975?v+Z~PdSKvtzU^|V
zfTYC5=}a57i<~mnEZFN8bxUG@_Ke00e`oEB6ZJSND7y22X3Uls9pCND)@@JvE0=Vy
zph7^#Bl^~!B^JBV--g=7h2Ouz?BLV5<dT2#a!w~skv|M84>c6~>m6{oDOm0Cs*35r
z<<}aFY7r#|4-_lqPM-SLvUa!D<8Mumb*9Jr$xoc}>z~fz8)Z^Ed^cJ6&;BLrkx;4j
z==0x|7iPUE==ZF;_H-{7-)-H`z58E3UQ&Dd_|(D|w-(nNJ@lhw5{q=(nk7oX4%^oJ
z^C>(3dy3Hk)A?ogc~2+gEm)?uXot?ei`uP!muH;V#i+e8r$lx~@zm$<wjWphz~IBM
zscsv0x6J1Q0rOOMKH#`#miFI#>BZe4DLN<Bw|Y;iOZ|UY_u)>zJ@rc*6(=~BFSC??
zHSh8K3u*bRZ&sDn?avll@Ota<Ka)cAwFT8x%`1EYvo?G_6A>%&G0Q{r{~`8m8+-Zt
zVglSY+wNza;lC*|#NE!Mx*|7hvR?74G>wY0vLgEz^y};G(Chmo(skzL)|%frb9t6N
GoCW~9rDq}l

literal 0
HcmV?d00001

diff --git a/assets/roots/b63a54aeb7c096b2c72835b60f7d423e851e811a-0.der b/assets/roots/b63a54aeb7c096b2c72835b60f7d423e851e811a-0.der
new file mode 100644
index 0000000000000000000000000000000000000000..dd740abac0c9da2f5e4f611077a0d4b6026fc33c
GIT binary patch
literal 1431
zcmXqLVx4Tz#9Y0AnTe5!NyPaVPrRRWgM`cbi(C9n<z2osyghBe%f_kI=F#?@mywa1
zmBAp;klTQhjX9KsO_<5q!%);f7{uWc<_Rv(EG`btOwUtrbT`yC&;$uH3o9XngMu9u
zLVSW1g7WiA6r3Fuj0}v76m%5~4dldmjf@P;3@i){4J?d|qQrSk%#paXu(F9s3E5+e
ztPIReO#BQ6O-x)&O-zgor?oO3aUTxfW176DV5#-z9vi>#X?chJ%$9s(IwiMi-Hv-J
z*2|XN+GToSVgdX8&1|2#KIw%9R`1qPIbA<Vtzq$&Dc_nFE_v~*R5tQ6dsbq~qhmc&
z*Dv1PmmhY%@Jw7|B5&@e)l7OzravwG)3sruLiC)Hpxkw$>X8+nI8UYW)t~<I`uUxe
zKIPxE#aO1Un^U;dUh9^l({q~^fiDkjd$J#CPjnCU-x0RY^`26oub;-vcu7aLem-Be
z2L%qwj9E`k3(qcI<16AZN%vpw@*nNlm8B2&32a=|;Sd>e{rr&&vt2e@WTx~qUR17I
zWocv0Ki{jm=~Q<9DJ46@3mYzI$xQ0%zacrt{fQmV&O>MSIr98i;?8>eptymBRpy<u
zhclJ`&f;e}Cy;gS)Q_E-i_JRQ)^Q*3Pu|HE=^4j&Fmp54=khwexjmcJXIz@utGZmi
zZS%5_0*gPju`m3ac`i<VD)c1emffedR`={|Tt8^=v+aC%dwTUu*LipUO^syHFSWnC
zu5)JF8j&q4T7I2~wU&;Ud{BH!=n3w}O_eS4KQpwLyt`v~wg1yE|7kvKt15oqOIf6R
zR^IMt&mQv-zTHtpq3=&bZ!P*!ao=3QCwyY@q~bLa<<3nCnQvaM(R6#t?f1jHxN};U
zOzz(I`)+Lea_Yce_Ydp1BNUFFkTqL3y*Hp)O-1wjTx)(-CT2zk#>L47i3a?@bSx{(
z$oQXy)qojD8SsGw_(1|Jz+A&-AP?dzvq%_-HHhT*C3R1B-tf@j+w#MIKl1P37qwVw
zAPZ8!$0EjpT^coi0h1vk!x|k;$J$>pU!|r>?AKY@wNfRd^y?0X)u&ge1ZqpzC$C&L
zBTSpsS!wb1>u&Q7XbIW&O`GO$pU1d6+kB$c)ZLbvxd)hXx~6cmGx<u`{r+A3waj+*
zw>Sf~2xGZb6<42yuvl$s;_N*qW*q6N@p0+m>3q)0f4LPJCj5V_c78|7#HXzN!VAiH
zubcA-bWHnVw{Pm+kB4hNEIwT6&K)yJH2G~%Y1ebN%+rCP+*&?gKc)DujQO8#)EBC2
z)FjiOpEdEv={<E4i_})=Ee_Ube;fWZwaSmdE7~vkWRlt5Lw(V&&*Z5$N<?<MB+tLf
zllnz7wSJ<`)B3s>o#*=%PUo^a2?nYeb?I5T3-9RN>(0yhL2Sv}X>EFvH}>^dy>QhN
z+_f(1`Of_t&-6c7@PEhVi>=j_X^SnlTBqG`*mr(=dbh_(N!8Fldwb8v-SS)ZDf8Ul
zdY|$O2i;6(#3;{Za&?{(b$5^ZTBU!x;`AqKYPMA?-pfnbeww%6JbE!l*6S~Knfe2m
znKte)&zKhQdPn>fjjp9iJY6jxBK5ACUrc=JR2-qz_`U4*qes5H@!z)ZW8JdOkN2LK
zEpy{$wK(q`-VEpe_lWPxNzheqH&=O9m7u@%ax=>+f9KLg2b(vk&(Pk;*RbnAYn;>0
m`x_G`UVbf6S5UF8ta)Ey)P)I;PaPCfP51h+t$NqPIX3|cUR5Rl

literal 0
HcmV?d00001

diff --git a/assets/roots/b7e7d918696e6d071cafa898ed1bf22538e71ab2-0.der b/assets/roots/b7e7d918696e6d071cafa898ed1bf22538e71ab2-0.der
new file mode 100644
index 0000000000000000000000000000000000000000..53919a69c6d0b88f1f369a2a827704e3c49b7902
GIT binary patch
literal 537
zcmXqLViGlIVw}BznTe5!Nx*i7^|CbE3CZ8<)WR)T-ZL0*v2kd%d7QIlVP-b)G1N2A
zVPg(uVdhbFEXglc2q`KpE=f%Z%Fi!R029uR3a-x13L!qh3PuJ-hK9Tb+#vN_JS-sf
zhTI06ATFCQlZ&f?oH(zMp@E5!k%6U=nUQgnIIjtiYiJJU8bwjrwlV_&Hg>R2m>Ahu
zwHsL&l$etkSf;f_Xqa=QUs!NYMN;zN6IOQl>2F`8H0}I$q%h!I7tjCeTg!GY%$c0i
zyeK1Y>CJsQ9aA08#@^j{syVs&%z=F+Hy_Mh^3KaI?7<98$H_qgS5+*SjM6_&5z2pm
z{pdZtzmg4$oeUfd_<^356=r1o&%$cJ45SQXK>~a%Vk{zM8miZ7AEeEy;@p&F-DiB=
z?6UtN13r*6KS(_bFjm@-<A6DX!622%AbO_e=Q)PkI<s@G?Ja*;^E|L_ht=7|X7M%O
zZOZMQ1gu^0{8A*3TAzV+9*5SU<xwY?3>juV=6SyO@cPT1dTve1X|X36M1=lYe0ew{
dyIiyCw#xZbhy9oC^a#HAQd_UkveM~^1^_(Uu?YYG

literal 0
HcmV?d00001

diff --git a/assets/roots/badf8ae3f7eb508c94c1bae31e7cdc3a713d4437-0.der b/assets/roots/badf8ae3f7eb508c94c1bae31e7cdc3a713d4437-0.der
new file mode 100644
index 0000000000000000000000000000000000000000..d6aa0f435805de638e5c6cac066ebb0081fac3c4
GIT binary patch
literal 1415
zcmXqLVr@2PV$NQ`%*4pV#2-7k*C5^O1e>hX@sO5Gb^~5EPOUbNw(q=*jNGgY2G)k$
z2Apinp)72|Os>I(f(HB`4i^uHo1brpZjiIDp`?L0NQj$9z|mPD$k8)O0VZW2C(dhN
zVQ64vX=rL{X=)ZF&TDL7U<ia@5Jj2cO-xG2j%8$JU~XdKXE11D;$muIVr1A=*ihxu
zmREm5IQPJ@S{a7v{W?6#y9H)Btd!c`-tl90Sk~`n)qUNQ`j)H4Mhf0G)7u^>F29mP
zo<&?GVwJg<#Qmq1SHk~ZKd3X2apEJTE6fKX{*=4F>9;F!-nGW0*Vm#fy>G*bd;{Z%
z!k8^zv-7Sn2J8^7%kf(5c~L>~-JS!Q5~<7Y{d<3xYl7l)sq{%s0yE<M4ffc{xNZ@+
zp5Y*Jz~R^Pa`CEX-2JK1HaBMl-QK!)p4)lb*ArQp4ourr=Hn|c&3e+WIraQA@9$GK
zb(Ld^`L}h&?3t>!;yx=Kw*2};OYibA`6D^2j>=>)vU=%XI(l%0iCS#h(o0N=KP9%a
zef67}zhbpd;EVGC5=YBVSaRxkPBNOgVz;<><%X!E&lVqvOm#PHj$8S{lzZmxCubFo
z&Gurm+?w%6Y1g~Z9&Nu@pEo}Kvu)<At4_ZPeL2pz%VibT{=B^9<<i2&>O+3+)0TcK
zYhA3-|FR*kF?eZi{0@(whklwZ)ARhlW7?q}_RX_9BL2LVmbs@}@M!uZgN2=s_k^xc
zzvlgR!rJa%$*PgMD@^a6nr^)3>Dl9RFTQyn$LBSHO)Yut&YPyX?7PZRb=HLU*M4E2
za=nphTI^zW&#P4z!hcFX4|XeEwV~4KbVeb^%Y?m_ndiQ&KOE+8d~MJo&L{b8?p^Y)
zHPmC971pzy%n6&-?e>+4nUR5UabvSVV*@zR$_g_w{%2t|U<OhKe840t%MTJ@0cHa>
z16dHCk420{<a_PWzeirok}gkK{#ACtnf>hvvvLjWK+*~<<_4w)#%wG=CWC>tfhHS=
zHX9==D?1aTm~2K#Nr9EVetCJhUUF(tiC$V>Zi!xMv3^QHa<M*gIt6AbU^-=FV4vW1
z|Fg2+hr@FMQ)kanTGYkU`ngy$+xH*iqm?|#jQd&Am(HCL|Cdqt*PB^MFWdfYOS+Wj
zGv)VzQrDVPo*$dc&#&P>-<$ta@_YXqxlaZ2KAhU|e*6D2^Rnn~c^#kECmAVC=C#V|
z6G`LI4K4{!mAks>u5zRG(lllDbk6>V<*S^}rUr7n4UG8r%<|`H_m(B1AIo+xdAG#+
zNc{Uv#?u5Pwx3MhC-HFck~_a7eqP=qJlnF$WY=ZK-@lByw6<%vac4GL>^s|~$6c_t
zS8dWexvz}cTsN;xpPlz$g`|v?VmFVR!&>I&chl;=?o{AqelhK5lj{}B2MZWtug`c^
zJ1@QX@GPzGtGgFkiM%)26U5g!V-|};i)@{1=H&2muh0DmsPUJ{V{xAS^P07?#LHKG
z7k%A&KUzP@I<@P!^7h%kW-@9<MMUX7{&^*rPi^hNJd-^}KX_Pwr7pg0ZQiW(^4gsu
z<G-<=6!w<cDBsff{!{vOWXjb$@kMnCf6jJposjOERAukCR`#&vzp5`9V)q@tc{H$I
z=MSu0Be43)8|JiUSsQj4PI7X{+GlmS=wX(5=$<vQQ@3X(esZ2z@@&CnE)}<h9P6*$
za+RERC0I7PrSijp@9yur`;W4%o9mM__rDv<kIN^w38*@h{u5hu(kr1&f7g41@+TpW
VcC^flXjmoO9cbn6@vVE?W&l<MRAT@D

literal 0
HcmV?d00001

diff --git a/assets/roots/bece0f14569371822ea32fed5faa588deb9a03a2-0.der b/assets/roots/bece0f14569371822ea32fed5faa588deb9a03a2-0.der
new file mode 100644
index 0000000000000000000000000000000000000000..0642a0356958327e35939e6f384db1bcee4e8402
GIT binary patch
literal 1438
zcmXqLVx48s#N4!inTe5!iId@7r^$uW4G%UM@Un4gwRyCC=VfH%VP!CgGUPVkWMd9x
zVH0NZ3NTbNPyuncgk^(Wo&9|kLW)X@OB8}Di%U{-ixr&n^>h?`N>cO;l?@a@>X?P4
zpz3^r6@r2t6@v2fOB9?P6^smwObq12d4Z&%v7v#fp`od1lsK=6rGcTL36x7yyPKGl
zkiE*t%D~*j#Lr;R#Kgta#Kg$((BjcqALFB&)K?$*cs)W&v^nMJ=Y98kcKa(^%zaT3
z#Pn08En4N$<?}i9fA$}IAHQ?<(qD6uwBO!S6`A0+&3M=Q9pTpY<>%bRGF_hC4LiqV
zkh;B1>{z%=f#CI>^IqKL-{JmBd)9_n*+-?ErYzE@a~(HzOfTGRIZb*_z5SB^GCjX%
z|Mz4Lx!rSa-p7q0ffg^;INd9+ImM|Lrm*nY?H#8QtrjzFv*dg$H?PK7UT?k#W5nLn
zMHlDqYw`ckImy55S$W>B=Z7AMt@Z9)9uv9I-1|!GUZwsEHP#>gH0cBg9S!1d?D`No
z(N6Yu=>1>$<|#5s$)|I}m3`**MyaK`U0n10>~34>1s|tgn_c?xqtpFM><-?EcOGWt
zPj<F0`p10j>`DuUlOBRII)Cgu!Cd?$>CejT;dApUXMDQ;XUU~CoT1AdLZc3CpSQ^L
z>A4f$pH&!+HJI242j9(FuKPh}`T2j=u1|PgXCF;?Yjg03$~w#G|E{m;@-hvN*_8RO
zrRL8Sam!iK`i1)(Hk9t%`oukWQSf46$8Vwg>KQ(qJE7>Z$YX|7>Sf&vBGY}i(wmI>
z9FLvXRc@O$U9iwzVmiy7zNu&26?+$WUoPalB%dkWysDykQ^D#3iwo?0x34|<Tf4ER
z{j9Il`(IOf($-#K(7INd+H=Zl)r{q~*7ASvyWhVU9QerltyS?kQzm9c2FAt728jl;
zz=SNz$0EieqVu{)s4t>C#Z)xRlrfxrWi7ASGXr^$v@(l?fmj1}1$-a{{EUqMSy+I1
zjm>}`#1{tfSq+$h6ml{I<~U$7WMmLMbo%K|wfUKEer^fA_)jF5-K0=hna3gax@y7H
z?wWaxbGjBjw{A<c>X)5qd}x7jr21{8zyqPj<Ih})zIjl`;aYKzp75d9Q)exdoNT*f
zinvtbX4luus&So-0_oW=er(|Nd9Nfp?bDYH>_=k)Cc7@3%-?7lem_ueV{zn{JKWE=
ze)e$QaanW4LygDlml{6ZAN8ZU^YetwFO{^Nw>8uR@Z8Cns<wWPwng~P8d-spH@0oP
z)c1w0@2bA}*XYBH`~Hgh)j0mRarxPj19^h2?HAWCZ-`QxIXCbx(-TGhm)9;#{b3mS
z=f?W=MWJ?cZ5iq$0;Q6DPZ;($6bP*O)w#9iPPSup?YS;_17X*k9r;Tx{#QGCtt8dB
z=GwXI*=r7(?L4@mMn|?r)P(o;pYyVv>sh?GcdII-`-hrr%6QsfGO<WEw3EB%_%<({
zV(o63fa*V2n)ZI_FXhdt7H1aK=H1v3RhP1j@#f8!j$E$}h3<O9=^l7!oB0LjO%<oT
z#b^F>KEfp*c%)8@@zA2w{5dNZ^~@6f79oD|LA&6a%iZ@gmtGIg`Me`BJYZ&IqLT_c
zQ|C3w^9yEXAK!SUO4<HO<5R&e|NeTF6ew+45!81n^{*3yOpC?GmwxllX!~A_THYr8
ubm4<($#UlM^BFpvr#+ooFLLfpovhDSJCD#ngAIzmdAL%4&HmnbrV;?*YF-Th

literal 0
HcmV?d00001

diff --git a/assets/roots/c17e0d0305d965b2bf298a6c492a3b0bea8ba25f-0.der b/assets/roots/c17e0d0305d965b2bf298a6c492a3b0bea8ba25f-0.der
new file mode 100644
index 0000000000000000000000000000000000000000..86d70df56ac1baf2944e3de7e6dd95e3d5c4812b
GIT binary patch
literal 1349
zcmXqLVs$iVV%A*1%*4pVB+QmG|I#$mw)tHAPunVfM62!YGB@C5<J4;NX#38~$jHOW
zU|?y;ZNSOK9LmBb%oG}I$PbhUa=3)q9CH(^^79NO4a7kL%)$Z?0fnIa{1OFcM+GAT
zIdNV?Qv*{YGXpS)66ZBBK;lwjbQ6;jvO^hJ8JL@x_!$hEn7Ejlm>3z>PMfbg$IHj7
zu`+Pxo37K@34y|Ud~@0UY~bj<D=Cn5T#d){#({i=mX}jD&TeHs9DUpC#fcvi%5Fyc
zKlXXSX6Acl)*4%$3EGpcut_GYF?XqKZERW_W&VKo%-m%@L1nL;=Wb`Y81OCh!PQI4
zJX>FyzdTj9E@rB)$1MAG3Q@ToQ*WB=2$FK1uwj1=>&|Tz+h1LHVr3%~ob=!8Q}sSm
z)|Emgk3XlBB<a{Pct&abGjiG8em7N}snGhC*LV3_XTK|kPVnb{v##mk{Op^qmv?`N
zZ+~l}W7&4g{@$CS(ASlV*WSKcvtgIaxj*;(P0P;n|EQ49G7EH5PmF#!@BD{Fp|v%t
zUHST3j-GGP)BejFD3J3zUV4vo-O+W{GZ+mg{pSw<GHcV$@RzIK^Ojxw@b1gGw&f4<
zUT(=;ct7)-@v%(3>B94twr>a*Xf!_=ym@#1w@DZ0T#)!ODeqRZ|FYznK1+Ycy;n@B
zQi#t<X%#(f{xXS&TTAQ?qn^<%JMXXatiFjmOnE<VB1hY=eaS1LjNhCtai01!Co{<G
zxMu#JQ05r<-}CpnzkcrNK9$?AQ;E~_!Pi8&kNfqyit-vF|A$-sEHzr}7yst1M$%2+
z;!kH9#S`A1eSPQl@>56anD%}O;RyM=MVC`YJj83p#gK=A=^U5d=GEofU(#)i)J!`)
z!E&mgT#5R>yRX+XF*7nSE_O0-FyIHKPFZ0_#{Vp=2FyUpfDa_V4-#MjW`Z^YSrDI(
zMT|vc1J4H^gD<QROdfxYp9Zb>Zh4#*gq+HN*#Vf!7#UWrXz1swSo~nom9x*j&Zx3}
z#lXB_I^X0yQ7gXb^c1zP-1w)y_-}Gy#nSf3^9B!j1vUvs<u-lIde$(10V{XL6Zh=n
zS@*a7EjKE9D)Ec+%Yw-|v6p&ETgy@>@Gw_yH&jkuThYwfmeF$R|IhPkvnEwOKkI$;
zdE#>M)1OxgO`e>+{Dpq-q$3Ft8_qBVN<_EzCPgN1Tf61ntlw(i8PpHNhMJemJQ+~`
zI8x8$v5xAyH$Fz?Tjoo>^o~_Hdh4%DyVx=37gu(x&2lY>Tgh!6{K&0Z{qF;}Po3M(
zIBh$vp_X@Z=}D^-j=~Aw1A0W)ZOWArl?tzTHc9Jd>Vziy9H#Z_gsjx3nXz1#UDS}g
za`wlkySCJbZ16j|QNASJ;#=UW*}rra30_&Lt1jibas4L0Lf!)rZr3u|P6waf{4d+_
ztYclR4}VQjWmV+aI4{06vscb2uB_Se<;>0<>^z%FVs;$Q?^rlt`Il8c_orKZkrGXk
z+dhAv?MBV@=?jHEMF>a+GaE?nkm~$4XYX|8zQvrMWxEwWZn^(N=HmQRCbm~G*Mv8>
zykE35rl(wUdB%b4bq<$SY<YF|L$9~R9LZVI8X-G6C%ivZ+Gr>DDMjVD#CpH~?(^8c
znWiqe%oX<kt9VMz`xQ#6o|CuTXAr*?Q5XB}sPu-57vmKLj{p3;i-}8}{piPQ$1gwl
I&6$t`00#a`(f|Me

literal 0
HcmV?d00001

diff --git a/assets/roots/c5c7806f3b0ec8c5ac7df8fd9922dcc8b15bd0bf-0.der b/assets/roots/c5c7806f3b0ec8c5ac7df8fd9922dcc8b15bd0bf-0.der
new file mode 100644
index 0000000000000000000000000000000000000000..0911a562934374fbb203efb9d9d94edf0eb1d0b3
GIT binary patch
literal 967
zcmXqLVm@rp#I$+=GZP~d6C<MmFB_*;n@8JsUPeZ4RtAH{CPQumPB!LH7B*of7gs}V
z15FTzi$^I$H@LF6BsI5K!8NZWwWy#dvp7{DIJKxOGdZ<b!96$0!%*Hp7NnS)M+~7j
zq^PvGM8P=~q{mRzKpCWfnMWo>HzYMDH8?d{!96EGDKRG~KOd+nC$YF#!N@>PoY%m@
z(7?dZ(7?pN&?HKn*Vq`uH8M7}G_{Nx9FA;aR6-6sMpg#qCPsb+gC<5UrY1&4hE?&m
zq~l){PkeeS=F6gI?oU5wgeI`cGA-FWJMyz!*Lst+e|Qhw^pJd)*?&^ukK!tJ$+sI~
z)}$Vff6G);U85^~ZP(6*LlRA5Ex*z>a2yL!ZhUffr>Ffl|2%UK4GaFG`<`bM{I#6!
zd+GR$i2<vQxNKIgwRC?OlypsKa@=;qX-=%a%a+S6{(9)o%c`R}D+~Q!ovzrEu>SbH
zFE>x`t217jH>LT5$uGs#ulkA>*e|(f5dFT*H*0FNv&#wrQJJTV;YVkDe8#3Rah1Z+
z?ZIk+&YQRer$#(Hz+ZOrKyOXs=c0mn`TwN)ZpND)+mvrov(Ll-QIzHN8*?k>&2O_~
zj+5+mS#<R{6Eh<N<6<WR2Lpa!oXZL`GX7^_HDCr(27Dj^evkkQFd4FeQ;jSiix`W@
z{zwHghROvCl(KuSeoDNwL+5mp7jh^AlPEBh85s<j7bSAbm%J!4JC^&?ciu0h6%QN3
z&Y#^q|JCY=k{0V%)rk6j-nO`R>6gB5E-RP6P@KBfjv+~`;{(&KKZ(lEjAt8EWt$~c
zuVqngiAa5PTf6JIYOr}yaQvQIj7ge{mZ=v$vr?)%m@hlEK*5XM<o>Jwq76@XU9Y+k
zU0TChrRiShu)<Kd{H%lZmO%F^J;BHBg7@a8UFg0VlJ=`P^i|Cv%}(i;`J2x@Vr@C8
zZ&%Tply@@zU`29C!~qWpo|%@fmz<H>S{c<VI_HK6@3$)U@Z(C&thzR{Rn=@IHm`K9
rIdNijN<ZJ?{d1(}8r;5hK~is(&Bx!y4P{Txu9fs>RqqpCn0E*OeZ_7T

literal 0
HcmV?d00001

diff --git a/assets/roots/c90a620226764c614af7a3e7549b6b1dac6b0f55-0.der b/assets/roots/c90a620226764c614af7a3e7549b6b1dac6b0f55-0.der
new file mode 100644
index 0000000000000000000000000000000000000000..675cbeb1fe2031aad2cdfddc00627f9daa113bc3
GIT binary patch
literal 920
zcmXqLVxD5q#8k6@nTe5!iOcZolO&#;h_}~n81S-jYPET^edlFl<Yr|sNH^p*;ACSC
zWnmL$^7JzlHV_1HxP`e=bAvO}^ArNSJq=Y2ltF@A!ZNA8r70Oji3%a9$r*Y1Ir-_C
zsl^IDnYo!IsVRms22vnp%)-J@y+Qf;B?``t3c3pJh6ZxtyoMGAMurxK7RCk!22tX?
zCdNoy`Z=VDQ3*K^7+D#Zn;7{S44N3Zn3@<F876!0ewo(wZf^8dlgSsP<qkiew<E>4
zKDi=e%UQj`((AJoj`?ct*_M&e^<8mRm}%7Kvb{IX&iX$&%zJ4h+rr5vns>!aO8q`H
zZaF^9Z>^+gkk>z(g3^Ms>$O*l&N8-HwYhuMS?9lBUlsg+dtT6b$~iwHvCGO1TIHM9
z+c4_nyq&4jebX;<#-{K6jvI_B60h;bAO5w-VUlc&__G2#)8~t}A4+<(dWnV4R!h_T
zSIn8etU@wcbFY2UcMg@C$jf)*YSxlz7lmzfDgs_uO}Zo=_S96$LB_6E=dI;^rw7fB
zCHEJfJ=B)qk?}Z_JA|S8Nm-^MZ>66JN1Vu^GaI+By<St$b-a~{nUR5Uv6F#=fh;gO
zW%*ddSVVrm=WUy};ql#-J3lIl*W3O1P_8Xyzz34%XJq`(!U9ZXYzF)wzA%W-YQPMn
zkV6@m)PSMP$PoGeQ_t7-+CtmK^QEIN-uiKQPPW<J*((!Y-xJd*v7Ps<^w#xV%l9~m
zKewIu`f2T5yEz}vPg;}XapsVceWvx%ZKC>%O^;=0$%L=BeBXP)^sod^HA9%p*>1^_
zd;9o>9$Z+p(4NU;W5Kz(64yAGIo;kRJgD1t#FHhkwjg28s!jhZi>j8%+Qw`BIQ8hS
z<#zX-uj}r!D6juDhmHN^@8ro14qK1qa2aZx<C%Ycv$AP}V{gt8^Xf+ZhJ_AJtuJp{
z^uAaae3o&4=8Gt{Pp;e(eyw}Bf9|Js;WkUxZ3_F+o$B!NuVJIk7fa3?@3NO~StcvG
ZbjEka#v84*p95nGJMQf|Bi~Tx1pu9BV&MP)

literal 0
HcmV?d00001

diff --git a/assets/roots/c9770b343f6c16083e2a9e9be4f9ee2de35dd3d9-0.der b/assets/roots/c9770b343f6c16083e2a9e9be4f9ee2de35dd3d9-0.der
new file mode 100644
index 0000000000000000000000000000000000000000..982345d9c411308b527ab2d8fc300709503f9b21
GIT binary patch
literal 1400
zcmXqLVl6RfVvbqB%*4pV#Lt)>uYT=c)#E2?_HjnD&NJX;<J4;NX#38~$jHsgVBliN
zZNSOK9LmBb%;e^2C}ki4;&AZ@hNR|XCMvjP=H(>jr6~AUW*JHvh=b&qc?2MGLHYS5
z3eJuSWkv>a;=G0yhK5F#hK8o5rY2G1ye7s-Tq@bp#H57md`4CV<|Zb727@LhE~X|X
zMutrn?AiA`s=kmt^T(s|%;)FkE@9r&l)La>W2(H5`kFq5U1HU*4YC*xY%a;D+qC}p
z)uhc;_5r7Q%v@BGFPXjMY5nG0cGYKLLQ(o74dbP!4R=^6DVyx5-5aLlF!$A$YUZ^W
ze>OGx&$v+Xs`qK_+2q5EzulX3C_?hVwB1LKth8NPGVR~`pPj4rP8AQiQQ`8Dr(AT>
zgBecCmt0$=FzM{U1)HaBvTAYat-U(+$+g=rla54et~}av+0?jse(Ay>^+b!0k+yvS
z5B65tJkOc-FYYE&>XyEk3xX#1WA_IwZ)7-JKht%l=vDC(T)}UWKhLZ^lPT18Nc;oi
zy!|bEE(V>Jo|JZON$}H!`;Xk_y!Na!O#8&+ntPA`cRn@E(|D1?tsJ;gmG!m9kGmUB
z{mS78e7{{H$K{mT!{TF|Y>iL5)@*pBd2FZ3=4=<iFH4;d`8Yo<FzeZ799}h5uW7-T
z7=g`+&EJ?<+w^L5bM7#^<(W>tS~XSwp2Cgjx+xP_vUWw<vapuUHDAQ1XZ!l#lAz{)
z7qYLU_1!u4QpitMD}0r}o|?F(+GWd5e$w6fRa|}TMZV4u?Ww;Gtd*T1Qeo`W#<j9|
z>+cfY?a~I4N22&-)VJS~xbVO01naJkt7I0LZ-3^o#7$?)s}*HQ?%e{x>>lAck0$wU
zTgQ6(&OxuZ{x!Ceeuv&Blxp8Tc*^N26Eh<N<Kkq4L<4zXLX}l!kuVTz5Gh*o#JF;m
zYx}pqYh>qLJFee$L&efS7NmfWMT`ZzG#^NspONuD3kxt8u^I4#_`)DQs{u2RLQaOj
zTm(#pj0_8`BbRedu`_GARHtvbblUV^f@}Yze=g+ww5hWt-DUmG_iv}YnUiwc$RIy`
z)|$HbO{*Er>KcDNX^FeE#_U0M($QLPzNXwuWl0zRP5&|9phn{7mZ0(`*|OW0WmkSU
zIE!I#Zt0EM=f93yES^*F!mW~dy<W-f(jR%jJj^F%N_Cn_+FU*vQnTWN&a*uB%KWT{
z&t6Sz%H)zgTo<`$UbdU)jOfej-DHzaoNEa36tq9dB6L`|#@@PX+HIQ!a$H-wLpG_T
z^S*C7z0aoh;-mU?V%NeVcHUCh*ets6eV4CMzN5ZyP}7v_QU@y*1>V&z$lWgW^ZSMe
z>C?k**CYmWGHWn79N&E7@0^0HV;YBBUp{&(HF?23?-`3)>{!bgr`i7AqQF0=h^b0Q
z|LWphffehuv|UpDw*KXMaqw(qd!qKehH%&Y=^tlLj9a?oO{9kauf_2VzYe?PvV5%w
zkeM_s`qtMSdb^^}KmCw3*IPfLSl3_oh>YEr&GxHB`K%=!yOtab7fLJi`4#*){B_b)
z&UqnsFCMZ9x7lm4c1Ftf9n7<W!xCaQ-*A$S@fPZmdHuTfSXJh6_4*}0x<5UclGg71
zatb@AP-WMq*Ci}>&V6x-d?0q}s7}Ono9gpPZCL@ere<l&f15woIDX^8+NGIO`d=Kp
euku5h-LSp!M(np28aKRx8rBHE3lNc;aU1}uwPKzC

literal 0
HcmV?d00001

diff --git a/assets/roots/cc74fc3960063bc493f2540de8ccc3b47e59d84a-0.der b/assets/roots/cc74fc3960063bc493f2540de8ccc3b47e59d84a-0.der
new file mode 100644
index 0000000000000000000000000000000000000000..86658aeb9a6ecb5ec69dbcb8e2b06e3651bf574b
GIT binary patch
literal 605
zcmXqLVv00qV!XeAnTe5!Ng(Z$?fUk6-5b4L@q`;P9(rTI#m1r4=5fxJg_+qP)sWkO
zlZ`o)g-w_#G}utiKnBF&5*GE%OfJeV&QB{*aLz9($S+DP$;{6)G&3*($ukS<BII42
zofU%e^MMLei%K%nGLsWaQWYFaOEU6{GD|8Ij0_CT4dldm4J{3g3@wa|4a`hTqr`bl
zj10^{T#%7b^m0a-fdCsj*zZh?Y^>UiEDTD_NenDk_SiBxl{yM5pKV}iV+z#ITG5!q
zoqFcmskw6bUTJ}gm~YOV_-mWk#-6-;HD_;EF4I4^`&^;^)1|95-Xyc6&HVA}(_{hG
zhm9IekB?=1c_!VG;MKYQZ6&|;xsTsmzA{!ESR7&yWWWauI9Yy1#{VoVz<6mh;0N)A
zL3~yNW*}uC3liXC5n~ZKae8J^K@iW6XZtp>gllS@cM^DO3UoQAHX9=gW0SckBgg~>
z<alJxU@%B!GKl!(`-<mheB8SP&C^z&ZeKHMk+iS5s()zXnaS${c5@mXJNCBjq}ddq
zCmF45i=;2;GZ`|>d?~ht?^l?|l_dsZ6Dw|q^rSL&Jr77bWVqdO*A6KqcE3N_Az}*u
OwYNU^;qhJOUkm_{_{g6C

literal 0
HcmV?d00001

diff --git a/assets/roots/cd30d24c343a82ab1f0570158ad7a107762992e9-0.der b/assets/roots/cd30d24c343a82ab1f0570158ad7a107762992e9-0.der
new file mode 100644
index 0000000000000000000000000000000000000000..2fa45b280e22a9fe641b25ffb3f7d866bebec657
GIT binary patch
literal 1506
zcmXqLV!db3#C&W4GZP~dlK|u2T!TN0PX(@!-jl*-%B*X^%f_kI=F#?@mywZ&mBFB~
z!;ss6lZ`o)g-w_#G}utsKoG>?5a#krEm!bLEh<i}G!!uq0tvDUb3+6aoHI)*4do1E
zK%!j2q9GZn3ZcQSK_Nk*!66EMsU_w4McIaW209>lW?@yZTv2Ipi9%4Yqk?m4QAuW6
zW^!UlW`3T6V`)i7ei6_-137VCLjwaN10VqcQR2MD76yif7DmRVmZp|bgUP8)OiIWB
z$;isU+{DDsV9><G#ni;a$j~5^DsIMi_%_Gp3v0r8%if+<zwEO%pgHl;Dg|Fo-4xC{
z=Q`(~v0eG*+xdfcK3?8<t=e2eP}}{M<*_|hl3U`J?X8`=IN51i*{7A(+7o{~%D?bN
zOko12-J=&JCndH_ypoi1yM8g-#}0|C2}(A5{t16*7peaCM85CJlfYww>24f>r`tqA
z?DrV|tIL`5Uu>?#-oQT7Wy{k}6s6x*Oxt*6b_Mf+0IL^gKHS+e&*$HI)@i2l;ZfWF
zpZjUMU1!_3kh>?I3t9QD^Xb|iGi%Fs1=~~gN+#>-tTWOWU7j=gxdqQQPWV1$U$FUv
zV&~6BhlAhWUiGiUFY|bIPr~GTM~?H{e`vJs%w+4pimB<{?`*^V@m$E{m*)Shs+Mh>
z`#sP7SF!WcI=-c88#QZ;T9QLMkMJIx9AY3TyykMP`SRDXRyn3Iw;itw-CF6%eg8&7
z7w6=pzO8BJRXfhM?AU0(#FGCe)4bP0K2vKxXS1%16Kg)RBmL0};kjp`n=booejEM&
z-qYeW%GSCJ`%ObjI6ZH8Mo869GJ6&{iSM&ot&Feuo|A8!)h_IJjCWY+;__wY^YHe0
z0rKG?EA0N3B<pVsNacJM;iTs*<+J63s(a)w7P-k+)ZDxR8aLhBSF!z1y6D4`;Vp9f
z$=6;c?Yb5ps`o19m<9)ns^tzo?UkQ=rpvI~^9Fr=`(D3^pNW}~fpM{ufrEi8Fbl}?
zv52vV1Xu2lTBYrEKBVE{joAn0e%i#GcG`dsB+bvr_@9LZm|xip_(6PO5TDh68Au_g
zGGKNErZPr`m@75B=f5-7I?hbxDLxuB|MZXZGui5;Z#j$3pT`s$K279fkd1o#6pgp?
zR*dG0%Kiig9B7$+EZc8akD~vgzR;wJpEE^o?CE%XWEJ<{_bXm{hib7Y<c3ygO1_IX
zi1Aht4E?V%D=$t<`yIFM{QB>V7E?r~I<s^BPFVR)X0=eyf?09PXJkd@cH49OK5@}?
zy@Y7W1R?%n4ZWj}RQ&!#y!r6O^`Fw_*ZO^zZn`G29-N-PqO7RDyT@$(eqPpdg}u*~
z<;&+RD@;0i<3e*0&&PDZPM$f!K1C+?_gpQ!zpC)=!<{)jHbSwfxAuk$ZFA24|MZ@3
znqc7hnd{z&Z+lTVvFD!Wzq_V|i$v9@$ed4nthPIUak{Ev?6bSF+<F<()=lf*G^e*-
znGsmBap%m2&j0llk};KD33`(p*7=xg>6|>Cbb>GTyIJ(92db)!TkcA+&naiHzi{X3
z8`~?tcH5t6y_R3UQuqE&rte>;&)RBw>u~ypcCVEh^OXDk$EasN+~EJ2{T+kemB{wf
zL5@>jeR043F2ymlrZ<vl>fNNdhjzY;(kN+JI(z$s<2>y5zjm6H7+upixM2hLgE>Bj
zWv=~soVnHAtx<nb)9TB~E(J$=|LYp>TH9Z}wV-32o#c53jT?VXOxPVeQ|W8avxuYe
g9fr>DI%KaO>$7prl3gxwuhv%VW75x46IT2M0J!OJ<p2Nx

literal 0
HcmV?d00001

diff --git a/assets/roots/cf3ab99d14f558ddad1db1c0c87dd6b76685ff6b-0.der b/assets/roots/cf3ab99d14f558ddad1db1c0c87dd6b76685ff6b-0.der
new file mode 100644
index 0000000000000000000000000000000000000000..26f98a81109f0f2cf4d27cd17615548f92a6b32f
GIT binary patch
literal 565
zcmXqLVlp&nV%)xfnTe5!NyMz=p>Iv9@X0mJp{fh)g6i}GGL9Q?v2kd%d7QIlVP-an
zFyuDiWMd9xVH0L@_A^v9PzG_hgk?gCN{dSzi!&1yLQ<16^73=?(=$_xbrd}FlJyLg
z3=}}hn1v;gl=%cJxH>y41m)+KC^$PB$cghBnHZQFni`mz7@C?ziSwEuxTaAww7JYc
zfQ=pOLncNxR_#U>1|{Ys29_Q5OQY=>?P@=C<gU}4@o;ub@XXuaIsRYGdeC>;W!Z;=
zJ$wDHoV(Hy{30&=y5Bw>`_Dql8D2I$)`~W&@t!TBIq!#V^VZjWhMu-+i7#b~x;wXV
z?Ve+7%75$4y_H__Cyh5Qb~11<;0K0_tS}?ve->5)W*}uC3liXC5n~b2X${`J(fO>=
zt9gst|1FxaV%g-E0tS2_X?~D;7GR9AA;%4K27^H=lR=34^~1V}Z604Lqe6L2_2YTJ
zrRS78NVz@#krC~uF1uq!ZT;l^9KJ_xxf(3wkMpWvGGtghvHg>var5DWT@$T*v;#Ko
mRhklO+F9IubhhNbEel^>S(vtsajDtQ8ySfj+e;oUG6VpT^t)34

literal 0
HcmV?d00001

diff --git a/assets/roots/d07c43a2a0f778fed080dff8600e49515c1d05c2-0.der b/assets/roots/d07c43a2a0f778fed080dff8600e49515c1d05c2-0.der
new file mode 100644
index 0000000000000000000000000000000000000000..ff212ef71504fa5f8b59f6d643783f7f0b4ad60b
GIT binary patch
literal 1380
zcmXqLVofk;V)j_T%*4pVB*4Y!)WE>N=&F3eWh(;%1Cs$S8>d#AN85K^Mn-N{1_Lic
zZUas>=1>+kVW!YvLm>kJ5Qj^c(=#PCFQllnxWrK1Koum$EG!2XQ*h4D%}p&z&P>cv
z2+GedQE+xtFf@=8=QT7jFf=qXv@kR>GL91GHAd!A)vhKcC1kHKvNA9?G4V4PG%;~8
zH8C+VEDw;pXFt>Sim}_r{J_MfO)LHT(>r5ZZU*1w(YSg2!~b<tor`Av+!|Zcb<pXd
zVL-{nM&6pUvlUl6KU%Xkt}X8~XP11G(cVR`r~G^o!}aF>j7#eaH*X1^@7Ml*(w@C<
z{EZAcyv5_fj|3n3#x%Y6W|H=P75Svz`-gXEdV5ybOit)f`ZM#E*@;7ouIPj?q?_gy
z?`Mkmu;lL34U5#OPCYPNDk=8$@AmiW>>a-5MzQ=oXL3sAPKmN~tg*0A>=8!QZw7an
zV&^}&>b`f&Yw3l%Jw0#Ck7oMZ^+aXDlO%utgX_EbO2k)OEb7RrV)Q(-#jWy~_{Li^
z<k%yBl`6KT-klJ3?)U1Y33HFk{TZ~OdvE*Cer;tg<udE<#t%<2e9rvoz3748p1R4F
zE$rW23hMr`M?KxR=Ay)zPo_^jJvmN=owWVUFHzfVeNgz2Z~sYuKJ%CI3;D9{C+VFw
zWecp-IiYIt<(K#J&X_ru9`jnZd6m>$jch+;@5d7p^u_jjP}9d(i`V@1G?CKy?AT!?
z{O-lQ|1)Ldcb$GA_i1N9!U4m}#ZTYwTkzJHyJVk&!jbfx4;;)@p$+wJe$$qJk+XaF
z?FQ#V;}q@W>qc?&e;%mjugIUiXY#C{bA%>TR5i4VUN0({6IxQSao5AV0+wC=3wC83
zuKsWMq1e`Tiq=MMN4^FBd^=LJD~-2YXJTe#U|j5E;9$T9OuVxEjEw(TSb$lA&43@o
z7Y6ZJ4VZzHfh<UXk420{<gJV3fy*D*y5B9S-skjOE#yR>Ss8LF17;XtDr02eT{pq#
z+cNJOmomvjIdzS*aUt(j_dMp9@Kf{px(tqoQy3!N>*>`62lZ@=VSm-JYi4)Al<Q3m
z_Y*l8Ca>icd3NsLC-W&48{+3|UR1oJpLMdu*<QO1JANNHzwy%>U0vxjZ&uCPyegqd
zTG#q;i*0z<G`TsYJ1!fXP2gyraJet!qi@=Q*b-)k#qV0{4#}6#VS90KxkPNx)VC+^
zs?N*(wesy^E0YV6)wkXTd^X+x_O*zw;qinow?4MddF1iv*irM}Yy!VZBhw7sHE)&8
zl6l#*?)|Ktf!{lnXJt-JvUwWXV0Jx(>Ho)_vFENR=ihK`@rq7;-^p`VWVym=iKVJr
zcz-f}Saj(N!-<l<g<2kcskeoXJW>^}eZ8+eT3jI{aI#l0GxwX=Q^s$T{<<F5kG>PJ
zpuzIluj~JWMV7s_o#N$Ga^-M&WbxU4w|$`&?|;3RX!L4&1dGx=i^FI3<eoIP%Hqnj
zUvT18QGZWzoATaVn`!f=KJfHewP>f7^c=IsinoVfxII#fbSag)S=t$RR-k2WV#4Xz
zpVO6m`(`|QT>mY4_qwyEyc)CPxIYIzEYW^hr@s8=Oi#ZbOB-&h^2;PAb)7U$&$bb0
zKDPGWinC&Uy&u@k3+I1Y{m1d^!R|K<=CPbl{Tkl?+8ATOwp7~d;T;QIn>(xJCrDlO
Vn)B{rLC%?XU&4P#>}ttt2LSRMTnqpJ

literal 0
HcmV?d00001

diff --git a/assets/roots/d422b47d649377b28a8d0620f4ffafe3444e309c-0.der b/assets/roots/d422b47d649377b28a8d0620f4ffafe3444e309c-0.der
new file mode 100644
index 0000000000000000000000000000000000000000..7a8caf9169eaa54eb64a2e7e91c472ba65c282c1
GIT binary patch
literal 1386
zcmXqLVoft>V)k3W%*4pVB*4Y!)WE>N=&F3)t%iYtfyscEjZ>@5qwPB{BO^B}gMqIh
zw*e;`b0`a&FjHu-p^$+9h{Gk!>6wz67gAJOTw<tYpaBwN7FL9dDFl=z<zyx+1g9pK
z<QFLf<>!|uI6EpB8pw(B8k!gw8k!lJn;IJ%MTzqoBXg;3T@#ZMvWFO18JL@x_!$hE
zn7Ejlm>3zhDNXsa#AE#n_iV1;>Sa$p*>_o2dFdEx_4IC7dDt*}MR{3^+O{=~PP`ni
zLnC%q{n(RQ`)NUL_X_uyNo8_^?>Iy*ZgLU(^6J7bIsLfXr;8oe?P1v9rR}h3%|mPN
zL%MUHES&vD%1Z77$L0%9R7~0D&)IS^DEBt|ss63eADTb=AJ<)aV(sav3QG(%!Xu)d
z^h(cKJ&%{?6PK~2k|o!4z0bkrJ6&A=wwyLoXpGdIm7nY3k$B4Ie(=ThL3>>0uh!3Q
zE_z?uaEr}YI`+h^<YT^P*Q6Pqy?D>AUBK+&&Lvgv69P7!KD8|Df%*E?Cc>7gFD%oZ
z%&1x=G-FO=TASV4j~h<evGG@b5cD=*;F4Q?dPPs+m#bSRnw|L|dQAIXp!mk=J^{8H
zr$*MW*6J!=W!TS{z9_DGS<I*JN*^ciPQJa$B{1zwZ5i|HtQA@olGDq0v%3<1?)mnv
z>~DegT}_)GTyoJ)GTmYNq0%x7^|l@td-h|M&7{7}ZHx!Ew$1J2=eC#<^5WH<dA6#1
zg4Nz$U2VDQsDn?)>P=g2-u!XB=(fzB+`Xys?>kJj()8bb+noBrxVL78W2PIwvrOi%
z*;_9pW}Q9debZ-x+iKCsh3+Amdd(W~GKUteE)r*8>vMh6{m9t1{+6W6lcb`<_mz%)
z3cGSQernO%-1zSv%+Y_3YAyIytlT0X&G?*&nUR5Uv6F#=0Ut04%knca{%2tUW(+n1
zeh^<6#Ah{N22uvHAOSuWF&2@>g%9T4SnhQ5cHzYADU)9xUVKqxF>)#cW*cBCV`Omu
zb(d>{;6#hHzOmn*@=XtsZ1QLi=~<OB^G4La4#uMqOJ{CW4pH8oC94qrlrhOs{4(e5
z($je%6H5O{&2Qv7bocsq&I{2+qEF;Fvuuq&E6#c*TDLavDzCuXTBig3?+(o3xaxQ<
zhEFjwuOX37^uUhuM?Hmt&g`=~b4AaB^`7Zp`TQLX88d8s7o2iPy;NNDwfiR5RQntD
z%DGY(wNxZ;wr&=GUy-*m;-d29<HB!?RO@3m78hKoXPeI1qS=rr`z!8$@tOsXJ9o$w
ziXOXXSTA(vVeahp&tJ?ht?*gxW<BfNepZQCUr`&eS&{)Pvo_7jPwfthw~1iUP(6^A
zXjr%NLFrDZ6^+-5#5W&hHZ&Eis95yir9n@9!~KZ+HoMfPJ!&w?eLUlGiuxLlI*sy}
zW2%X&KU#TGe;qN>Upj;J$q(*yF|lJ!JB%cM{@hu4NB->V^{e^rO5b*UQuUna(bU*K
znID2P6Q`C|a>s=}vyhpxGSYb7iNcb~`oPX@C$e@JoXD~`oHy^Gx!5b#B%f#@_qWTp
zY>o&!?)kZ1D1+0m@I&qoKlk6)THhUwaFARgyZooOv-zEjDF5@X52cjc+ah}NOGt>6
zzRdOMg&`CAZYs<T)~;XO|LB#$o&fXrAKkas*66Uj$(Xyv(?#G*k+)3B^FPnBC)~}f
V&HT#{wsiZNZELrmvSWNd2LNeMNIn1n

literal 0
HcmV?d00001

diff --git a/assets/roots/d83a4cebac21908f4f278d95db510429928526b9-0.der b/assets/roots/d83a4cebac21908f4f278d95db510429928526b9-0.der
new file mode 100644
index 0000000000000000000000000000000000000000..cf29ccc1b794186fe4c9689bfdfddb232c2b45bd
GIT binary patch
literal 959
zcmXqLV%}}g#I$$;GZP~d6Elm;0Rvt(POUbNw(q=*jI68-26cwq2Apinp)72|OaVTI
zN(Krb4wtZGXkKPjYDvCANNRFMUVct~dS+^|La?5ro}s#dDo72tu$*&hQAug80*J~?
z%S=uz$;{7Fa4ap!$S=w)se~EEEG!9C7*bSPT#}li;Fnrbo?n!$;OuB1C(dhNVQ64v
zWN2hyZfqVU&TC|8Xk=^%<qo*}ni!RkgN%`tfw_s1pTVGsk&CH`k&)r?@7l#hyAFLg
zDboHmo6+xKo&)=?T=m%c@6o!OqmBp0uU=xbEU|rC9)H^<1E%Reu4jfXl(3A=N~t`?
z7`evA(95Fc63ZoTjTZ{>*6fSU_!i&(yw3l4*wv`z(>i~BUY&78xh+!tJg54eHF-tN
zG6qHWA1r!#>0wE!<X)|L)uJIR($}3W*M@2weI&K}%Yi5BEIf_Rl(o*cbiK4>-Y21+
zz#lbFbnCyaiGM9Nf1~cjU1ugbmHVikoM4fE`@@;veR9(y?XD*HJ!92)>scx6z02da
z{?DSzmZ$#7-!Liqy2atVA>-jU_XKstW94@QT#S=ko_UYmSmRW{)St^kPKUGwxUT%^
z$;8aaz_{4Sz`=kYm?&h085#exuo^G}DFa!M03VAOiwH;A+0*R*RlXfP`*!z)J&#(<
z-Acb3@PVZHLF!q6sgn&klz|Bo7|M(c%T}yaI>%_cZ1Ml33m$X3<BB#^xIDfiv!3&>
zvd6EzT1R$<vTPMt+^c?%yD9m?yL&w5m5$L$n>NgHj9FIj;L3&a)5@0_9^{1SKg{Ii
zy}4??Vq?HfwxuinPc^@=>ffWyUuWvNwsbvp;=EqMr2oD1#>|&{)UUYr?&5WmDL*f=
zL}up_!y|JvN|;Ul8%wG!eaTz0-ER7^vKQ*p7N^~PxbBl<^r;zP&BX;z+N3TSI_}cn
zrz;#)mhbn%uaVC_nptUq(7v<?L9f%yN498b=}r@WU>UN<<8qn$+*!J8%TB(rytMlE
n{8`-UOs1L}9i~42`C?9JhosxJ?IvIA&RNd7Y4I`eyT1+q$_H;s

literal 0
HcmV?d00001

diff --git a/assets/roots/db967dfe40104bbb8a15f44c45067d6d9ca0117a-0.der b/assets/roots/db967dfe40104bbb8a15f44c45067d6d9ca0117a-0.der
new file mode 100644
index 0000000000000000000000000000000000000000..339a109cb188c78c739a75952bc6197b76cd806d
GIT binary patch
literal 1453
zcmXqLVqIy_#5{2UGZP~dlR&Yx0gFfUP2UQ=V(*g+@1z;<vT<s)d9;1!Wn|=KWiaqC
z<Tl`BV-96u6J~O8H54@v264EAd0ccuib{)16x?%@JPef#6hOkv!jeGYpwQqD1*af|
zp#1z21!qSEBLyP^BVz+Oab6&4YG7$#VQOY<7$weYYysyQL{ZVECMG3hZ!oelFgG#r
zGZ-{6aWOS9F*2<C&lx$ffy*o7nTq|6<xfsnaaoC-J*k|yU~=K7)!oJY3(`{)E`?+#
z2j+VkKPX}suC+MJHi=y`DBG_*hvo9rUw3_aZpI!=to44bvDu}uI&l46<Bb_L*Zh3`
zX=m&_m6mzrO<Z{Wci!W3%*>v$C#*T(^NJ(qJzI@`v_=)jpUJVazs=dw-L^|{=a&yJ
zBBL}GnzTr%PTaP&|NW+)4ZnWc+6Wfic&y)6cC=FG;K~V;-DaepZq8Z|puF7rTchQJ
zw;y)yPyKk~bk*<o#mwgzzSLfS5Nn;b<4)hM=F{zE%zspGK3C3X`<wpx!T**$?)$fj
zNw{T-oMHWb`?BYn>@%yMY~^-ViSy3(O}~F_tDS#^{FFkKSN973e4PAm-sGq!Q=+Da
z@R(M|=e%Q(S9!y{i|K3Gm-$y_y=~R8P|`nsL%&SW|8Gvri?4m^?e&sgitZC+D|=<4
zf1LMfee!m5bnm_+DH^ekNAlKKMENV1l&lmw{O!_CK~ZD&i8rjxt&$DcE*@1f(@0Vl
zc;I$s`kHInu_-E7-^uXZ`^^zms`V{7_Z+v=zKgpGWacP7<u}X}zy617%e}V^b52j%
z(*5;b<e~`9rOEEx4;_t69B<Crcyq-D>8N|Wyk8z|iZyN6*?6TTb0X8}(hI#ux7u<}
z<m?w&C{j{sckQI8?2^bxr90ocTy1THuGz&J=`%4iGB7S~>@#TWHsA-QTUlX7#{Vp=
z2FyUpKo%sx$0Eiel0M<XwR>A7uDWT~#jO4@k7G~DQ~?7%kTgF?Jqs`cu^D)R`0^}H
z1`Y;x3v3oxwOM48loVL$>n9iG=%whEfbxi5UTO)5uMg$NCl$pP0W(K@a$>wuJScPM
z0cDYsEHLK*lPn{H$@k6W!M6>>cIqxw{OF)q`ueqpSfg$6gL&#&ugg~oFUjJHiV`ul
z&5&<gm-)A6erk@1(@otA^%Y_pt=1?Tu8pf-_k5l9uU&s^rcZU49Di7sdGXsN`N7wJ
zIq(^LWl+#z@aeJMvRHoG{)tAb*H4;pS?t-Biy<-2(R%CNhik3alE36VZ<xp}#nlRB
z^O*mr?U-k8$E^0u=l0xqrxsgRW@eelj#GE^5>=v>yi(^b7TOoInd`if_#?S?DY2;@
zxls=;oadaRmNxOm;zYhxjg9p$f|@QmJ%1o8@oPz|+4Hssys!6MIeE>-`D3hSUR~qt
z%&nbC{T)F!uK!a%sC@LaHq-8n@&A51w=%o!i#>KqQSJYArg<e^cYX+qZfp!UJDnPH
zQP!~hrRw3sn~cn_ew@MiBsaN%V>R2P#w#xi`j^{pdfV31lx2FtDXQsWkd!OG=u(Cc
zQ>s(d!!4c9*VI4TYr47mqomJ0t7+$7mc3(se#kk<Cadwq!KjA4g0Yjce;<FAV!u06
z=H*@0?)4=nLmW<>o-EAu_IKJO!Bbxk{JPN`%3O2#sFGW0L3X7Fn^x1T{m)*D@hQ17
z?zw9=#bl+aTG#dIJKu2>?KhcJ(A==vVpU|uU56zS6E=Om%6v-g)cdQ)AM^+JePDRJ
k;_dvOYs(*KC;QJk{LXxL1!v2=oq4}CXHIz0aCyE80N<Zt!T<mO

literal 0
HcmV?d00001

diff --git a/assets/roots/dd8ae898b225382efd64f9f3c37486534fa9cbda-0.der b/assets/roots/dd8ae898b225382efd64f9f3c37486534fa9cbda-0.der
new file mode 100644
index 0000000000000000000000000000000000000000..3f6981b6bc02fe7a08069effe16ea43ca8633607
GIT binary patch
literal 1380
zcmXqLVofk;V)j_T%*4pVB%=3qHj~Ek+g1OsE?)U=FY|))LRqo~ylk9WZ60mkc^MhG
zSs4sG47m+B*_cCF*o2v!d<`WH#6cV`VS&KX{IJB7%wh$f%-qb9)D%NG0~wGMv#=;!
zDkwj{M8Vln!C1lF*g#I4*U-qo(9p=pz{t$lC`z2y1er@ko0^!EkiEgk%D~*j#Lr;R
z#Kgta#Kg$3`81zEdfzLN>C26@xWdfpGklJ3&bLw)nfPC_e(9+-?>3jst$Nuly*k_Q
z_Al;WpY=zVN>$o)`TSpVU-h2f%_bvmmwTsf_pDi*C)RAeEXCWX^S79oMcr%XN0&>y
z4kd9FbKUja9DZp7SL@tDn|q5-A29mNXsO^VZF(_y^Tu~aCucU<iEY(zTX^qPC+Az|
z9jtC$ZC@kZ_etk7DhllUyYiC8DFI8)Q^IEF=d4}pP*SPQWN-5SmqKRk<#&l+cWr)d
zaKT);ttin|(<3q?zkHcq<34uZ{PpLKxC&1cDPZfDpZ}vhb0gpT!<~|^U&$o?smkfP
zbB&pMp4u*<yH`RiSF0^HepT9dOZP0l{}bkm??tCeXHPiFG+}ZYlj27Ad)>3V8g_>E
zZ(XE+;F@vzt-2%2x3IXpcK`h>V&`|B57pWm4-{w~c1Y5-_Q<@WY~%5|nzM3c?yVID
zGtM^@F?TGBc3W3eS;N7sn7VHJLz$%;wH6uPOJn(dpyWm2z5lk6XQrtMb+=9pms*`&
z%I#t+s9{r`xcyOoy8qKRHa-arnc)_4jM2TJFOJ_oaHd?@#Iv;K+YG_iy7%5X>WQ#2
z)j#;B@Y?jb;2NcK;kNfq8srKvx1Rm@zejBA!A*7@ISKU>{HK2Zrn{EWlAYyOX+!OP
z&w#h@Padg}dEHQVd)tM(!v9WQo^yTE^p#A^j0}v6oeUfd_<<=_R+y3TKMSh?GmtXi
z0}1eh1XzH1gv~$}#OGrXV-YzfeqqmwS4_^Iq}gW1YEMwud40|k<WvUCEWlL8$Y7Fq
zGi<9+d#LZ-#ioXCyO*#R?TJrJda?93xA{h!ZJU2-&aG$qy5!`F$=j<6H8T5)9|ldh
zb#<TB)9qzhVGWA+W1qdWn)lT1+oH_lT3j0>-0vt9)CMiKi>x`g>*NVhhs0Aw*9z8L
z+WtZ2Nt@<}bMG^fFKkul5>1>{*EVCz$wOto&+IY~JF__PSc&k{?DvaBUorm^?oN4f
z`QW7&Ex$c43iwv0y<YYAORu3^fymlB_tJ%Z8buTLY`;0Nyil?+VfTlKrCaB4fA3cc
zRX^a(m}@<g_loT7<aGTD?|4t8?U~}gZ0*}W?~>Pq+o!6Y-_+KBf#d&<GLgJ{Pu1V7
zuGkv9bDRAOg`byJ>`Qbz)!x(c`RB(48MBq-8r5bCuuLpGz$SlZ!R4J{%OB6st#6)t
zzejtHQJ>M24~#ZSTJxO`=^dV7$!<~oCyv2M{<D!<Wpm57rymXm3LW5<V^QV_S?Z(j
zdDQFTw!8%1>_6Gvttu(oJNZ_tx<}ibuk+k{{3X}1Ti@&W#5pc|OutY#=>xx|ok^BV
z?Tt@L>vm^;G2XJwBlIFapW2Hz+qiX?x0;^)8+l^>#j|!%nkGAKTh47vy%ITbVpyr-
z!SZ=Os~#rIy}Xu1;!DlzxXJy&UP_ujJhbh6+tx(apJtmGnQ$W_b!xB6#qafX>h-nj
W8osjoY_pqF7&4Q^`)|b08D9WMkx+90

literal 0
HcmV?d00001

diff --git a/assets/roots/ddb36391a7eefac7df3e47972cdd9c04be806e9d-0.der b/assets/roots/ddb36391a7eefac7df3e47972cdd9c04be806e9d-0.der
new file mode 100644
index 0000000000000000000000000000000000000000..b21a3441717a5f10cdf6efb327b8b8dd691692ad
GIT binary patch
literal 553
zcmXqLVp26|VqCp|nTe5!NkB)Oqc%nBz`s_BNVfA^yj~k{v2kd%d7QIlVP-Z6G2}Mj
zWMd9xVH0L@_A^v7Pyunccx0ViJ-s~r+!dT%gF-yrJe?gwTooKcLp=P0JVPQ4Weuc3
z>X>;%oV=VJ72I?3lM-_jg7WiA6r3H64CKUl4J{3g3@r_e4K0ieqr`blOn_V?D3?aI
zmKg}Jv4efa#K^{~-N?eA#GJ&yGWT@D#NOcatvdrYGXHq$DetJnxgjtp;+nQe|4|_~
zk)z%EIxYWo@>X2^$oZIAQRIlTZOuWQBi>nFXJ58IsQsq2@0VBL4uh`05AR6`aeZ^&
z{#<;&de;?4pJ_G;(+>U>m09d$;9wvN3=Ua77BLo)OI{lT>)AeBY?AlOi(lRR$K%R|
zi3a>2X<<gj|17Kq%s|S34<x`35?}$w5*u=yFlR6rq%s*u?TNnrZ{?*BKCjqIxf>ns
zd~v>d$!n&hP*}tFW|N1eejd3j{NaWM2D%$p&1JT@&BkQNaQaMp@ad}i3W3EF4y=ey
oyl^zY@^9<EgO4kIEW75tcXoR}|I=&1(^lJ@aJZHDJ$UhV06=E3rvLx|

literal 0
HcmV?d00001

diff --git a/assets/roots/de1d43c47af5f1bc86ab36437e021703f89ccf5c-0.der b/assets/roots/de1d43c47af5f1bc86ab36437e021703f89ccf5c-0.der
new file mode 100644
index 0000000000000000000000000000000000000000..56039c090ee0c6a6cc4a110f47131a25fae61432
GIT binary patch
literal 527
zcmXqLV&XPvVw|{unTe5!Nl5V0?p?-tSN1$p$vDc}B0J-SvjG<yhgO@%Ia?NHW&<}v
zZUas>=1>+kVJ0V6LrDX15Qj@xz&$5FDKRHFGd)isuS~Z%(NM-f3M9oWEQ}--l%HRs
z;A&!KAScdiXlY<<WB>tC;=DjX1ea>|lo<%Hv4dUD#K^{~-N?eA#GJ&yGKX*D`Ry;}
z1(lbY{95X^e65kB(H8cV>Zhjc=DEZraQs&1hUq*7!kmnKH(t5F+PA4e`|KYL-rH;T
zENL@;Tfo6k`f4(FwO-I1<qTyu=Qoq|gIjL@b{AoP5kDn8_GDF~jlyCl0|x^>p#Nq0
z85#exumHoh&43@o7Y6ZJ4VZzHfh<UXk420{#E@%3|F&auFS&R(Y+dwBexs1T^i<?<
zXU<?SNM$l)xF0g%?d<p6Q<x@;H_hC)d7jQU?uk9~y+k&COWCtKBT$%!`MYR$OTy0X
z|3Q7vd-ljM8QA<3ywc-$;9%k*QJ+<-Ww{OGtz{lDOm{JS_OE!F{;g@3|8cNyHtF2M
MI{&*|+q>=p0F*4N9RL6T

literal 0
HcmV?d00001

diff --git a/assets/roots/df22cf8b8c3b46c10d3d5c407561eabeb57f8181-0.der b/assets/roots/df22cf8b8c3b46c10d3d5c407561eabeb57f8181-0.der
new file mode 100644
index 0000000000000000000000000000000000000000..99bcc84b7e68b5b28e4444f6fa21bc7c2baf497d
GIT binary patch
literal 1428
zcmXqLVx3^n#9Xm}nTe5!Nq}{>bojhJMWaWS?0c7&m&O?IvT<s)d9;1!Wn|=GWiUuG
z<Tl`BV-96u6J`nxHWW1w264EAd0aBnGo4e5N)$Zvk_{yd#6iN`!UE;x<$5VVsbrv(
zUUGh}p`w92NQzll0<I&ZsI<5wHANvPKfgr5-NZmnoY&CUz{0@L(8vG?qQrTPK^#*k
zmo9E-Vp2l(IwLCsa}yIkgFzD$7gG}xBg6h@6N)qL?S2yLWn-XZkZJtp&~jD1lZv*V
zx^6@sdZ@YFHez+zth4K?rCWH97|4H?USc8kI_%i=T-nu|DnFePy!0gg8mmnZe~|pK
zd7?|}_RU`zE*2SDv_4~U!J$pNN@r#j8%?<=;3A-Rzv(l3%d-;e+`>n?JkswJuAWqo
zP1e*s_a@Ho#N;1}iL*^!vmT3k6D_sp^~v*R*O)lOZ>&mtSAN1{MOt|H{E&z~9_{V^
z%MEUZy*pJM`*`h1|G1~7&kaxCnjCkhufO5ewuv(wCR84-IKFM;k*!%07R&;@H?Ej3
z(PORc_}XMAFtK2DXp^JS_1i4PT6q&0YZQI1>{%zxTpC-EcGJqxWtOqSeva!=o=Xlr
zTe%?p?h^Gq3;iv(3Py;3SBY`!Px*c@v!iTAnQdgOQ(1fG^vo)c4-XazNvF*!Id#ul
z?m1ubx@TA3Pnu*k&-M<(6Ia#FZL?e?wd)Q{*>Wi{_qFlOqxZd87|ztnOg-HHU2)SU
z!R@>2KV9u9&~Z#ywJ}-3WvWzJQr)+P4ZmNcEHl2?$^LNf_GivZBz7z-XMD&%g-20#
zQ;4Q&XU<c;pg{MMeQImAIhNk5S`*)Ee{#=dM?s<Jrvd@54Ue8G5>w*5U*l71pZrEK
z{)j?gcK*iIZQcHduDQm~Rrs?|?&yL3MH}n5)MkEtlBqvKR`=`8m78RrN;5GtGB7T7
zGH@{92PS7(VMfOPEUX61K+1p*B)|_6U;*Z-HUn7@pN~b1MdZ!($4!?CV^e(Y>!sU2
z-!)^M48K2eDg$OPU@Bu|*qwN@c4f{!@gozZ4=-HA(EB(ggFozi`MQFie`k5k+<CGh
zhKDEq$ukknFm5x?SeN7nYv)XpNRw9PwXJ-an|&?h$0eJC&JOEj1HK0RnP9zp#>~v@
z;|G_o$XKF&XYNn+bq1|Fzoq+H+4V<SDh0c|J`u}&>TN((ZIU8a!-?Xwiwjs2;$JM?
zvV8rD@42RPYNEQXEwY&TxuW}v?<EE9do1sIX1g~Q@g5K{dT$V^x9&mVr?4kk)AJ_<
z<WB3&sG7COOr(nKlgds`!GP-=8+UY8wJ0Y#X+B+ic9DYP^^0>-ZoX1m*e!D1M{-ku
zW1+3RZ-H_fkJp{XOJ|IxwD59pPM7gN@Ge`S#Ng5cOA~=sMNvkM7okS?3O#RXhzIyS
z+vj_+bj^iRza4itFI{!{FsqBdj@j%-zaF{nP!7&v%TEujciZY?pQjO3sdj0}ilph6
z<Q~2C>fR&$*WHWvetKHnrfA0t)=$1ze_=^}`TkG{L*Rlgt&`^}&Rl)f&LXk-+<MQB
z^`9rr+_w2yBLAgUhUWoNPo$^Lm0Y-U&c@jr8RXty;P-dRImxx>o%1iN!lfsC)s~w6
z?Tp>inj~v<X@Pdg+gafUZ~qcFFS)(jOS+$NoBGt?7uz~>qxWQ7QGU@KxG3!Bhh+^5
ouE}lQ!_OaFs=4ZwaQTyaJ&lTM*#+DM*S6cTUo72o{&QL#0GZBIfB*mh

literal 0
HcmV?d00001

diff --git a/assets/roots/e24e78259c056c7f870c7b62f5b043d96fab7725-0.der b/assets/roots/e24e78259c056c7f870c7b62f5b043d96fab7725-0.der
new file mode 100644
index 0000000000000000000000000000000000000000..9519275a5d737dc4eda1a28957c2455192a9c7ad
GIT binary patch
literal 711
zcmXqLVmfTl#N@SrnTe5!iIKs8i;Y98&EuRc3p0~J<0?aL15P&PP!={}Cifsiegj?*
zhh3P>u_Plkuh`JVzzHP4C2Z}Hnv;{7mzk{Kn4FlBnhRtk=A|eEr52|q7A0pWc;*$C
zWR{ecWaj4;D>$bXmFOurmX>7X7iE@I!c1W%%@kK>XN92r{1RtJ1tSAPQv*41ULa|1
zU~Xt&Y;I^2CC+PNU|?o!0ObxX&y*Pmu(5;Vfr*igRlAXeL5Vqufo0MH#~0pBEisRN
z7z)m8OY!4W)t~FA&$Z6fzhvsBz?AIX>}U1`Q$Mh}xGyWR2q>G%6xFv*W8P0)znSlK
zJo0^1HD6pTjJ_{>u+)6Z^<ULhPII!j!lG(2xmPuCs^ruibX)9X;9$THj8a))M#ldv
ztOm?L%770fzz-4tCJIJ216dHCk420{WQ!7a(@YgczB#*}@crHYd%D8pnOevxh&i3X
zAce^w{hU~m#iBJyuFF?WRXHG~KF7%Vz=5l~RzCm1;vC%iE=cj-+^?$5cJm^<^{=N3
z^C>bJus$qhyqED-OWxOqlY{q-_u3S3jpwE3TvLk_#ZN0a^7RPMu$UE+JNwk5npaE_
GN)rJ9G~Y4+

literal 0
HcmV?d00001

diff --git a/assets/roots/e7e9ceba6df839282ba96295895cca12e56e2cd6-0.der b/assets/roots/e7e9ceba6df839282ba96295895cca12e56e2cd6-0.der
new file mode 100644
index 0000000000000000000000000000000000000000..f61e2f87724716f5c058bbaff2730cefcb61e822
GIT binary patch
literal 1412
zcmXqLVr?*JV$N8=%*4pVBqAem<NVWLdnHr1;1Cs?9QTVcUULk1**LY@JlekVGBWb8
zG8jY{avN~6F^96S2{SqS8LAp6gE(BmG9g8!#U+l#nTZM^smU36`8oONnW@D(3Z8k%
zdWK2{3Ls_7!jeeJe1a8%f*lot^7Bg+oE;71#CeTO3``A84NOf8P0gdkc});pvnU$c
z+{C1W>`g{i2IeLveg=akCN8EXCPs$CVmqX>mber@z2^62=lN*vgBNEteofxc?|g7K
zN0e06L-sN?`ToqXegDi7F7Py;o$~7WQQa7QRxze|Tr2dSCa8r>`!T~ocFnrECF%Mh
zzo#V6c&z5td~E7APUnELytVgS_!5NtqfPhjpJ|a>n{(??MzQ=)!=;h}#jIL~jU-!N
znXJ0&BxlfTKX0pC;??}U3`Iq2h3r=?^DO?<COVZzAU-hV-2d_&Cv(?4y*lILOud}P
zCtZGSbynx_{Z@C+rE>SC9+_L0y>s-g9j@5!b9Kp+TX(wp`2O=BUY4Myao%kIuW+t6
z(e^J5#Hx?nK5`{xfx+*me`O0N-PP=OjJU_J*6Ocqjns;b;vf7>Dk4;`wJN@@l)Z3g
z_4y>54acW<U%N2>@;{q<M<4&OYA$F|l;u3M@Xu}y#nj-0stLK%ETaE^yj~TZd--I6
zr`Il7s|x|Qj1(lFblbnaDyC*`^SgB32KIs-A_?VpzVXKdaqWrC?G5C*byVWS?A$vW
znm5-k_N(xjp}P80ot{EmljyQ*H~QB+J!{l<;^&iFosX>TCLa~f`hWbp#Gmx7?<I6X
zRy$nI@qK&r#C8k+lp|Ao{1=>ExAd60YN>kev0HQcHn7gTsv&q(@yd=r$EU6KN{LL&
z7XIUXX3{eLC4u|-A|~8yYPMV!zxh|*q|IlI`C3<e)V#bpa_zO-_pWF+GBGnUFfMj7
za4_HpreaxPM#ldvtOm?L%0Lz*z{euSBC>;hVr2~57q`FFk*A{6CN6i?{t;}z2a@Io
zsb>LZF*f8>2Fy&rRL01lI6I3~Ayz_cxzLjD?)GO-S+DCm&~)yOhiZj*&VvU9N3Kn~
zdGp);syV{DgQrgVe}2+~&qviw!&g`@l6?K6Ycb2c%<d;PHhZ70zaS+2v@^SScD^c;
z_k^bP4u{t6nw6ju)#%GAvG|d3Wfiyl<hO4uy}k;wyy-2O+sL&d|3%rqZh!4ep*AiP
zv%5{R^Zg$b-}S85usdnJIGp9i<eN5{w}k{U9v<o3!KUzBx@ynH$%(Th9R#;#wT3f(
z+!m#)R;)hl=T7_R3mtQxEcm<2Zz^YVefgb0)+uup3d=UW`PI2~j$Z4>ozW^$8#!0s
zIwi$^w(b7y%-dT$Bp7t}EIQKZs=So%p-ZY=*TF0U*+&UKtX8#iI_+$nbVs#gM(4*G
z(~n7~-c|mP)c+U%<97SGS1b5=mc8I!VDlh*%8WVnYuTR3ymAtVf21aAV{ZBV`kr??
zp1x;(w^!-6Mw>~*k*NB_MHT#UpHI!*BW<(%gzmTHN`j}DZ#+-u>f$?X+Gk>U<HW1p
z`6&;~H{@JD+JA6DqS|eh9yzZA9rsNqoU>>8l9G7u_zCu@_lzX0`WHDls64%999y&Q
z{YGE^E8!DNv+k^8neN$XGF{Jr<@t>7x49W79F*s>|8eM_->=)Vii^eeu<oe55xJi2
pxqZ5Y<;I%TQyyrFEYtXOKljnB+ab<B+#?ppmWa+dxO&5J6979&Ve0?@

literal 0
HcmV?d00001

diff --git a/assets/roots/e9c6f2faacfba8533a5d58a04d4f76d1fa532b0b-0.der b/assets/roots/e9c6f2faacfba8533a5d58a04d4f76d1fa532b0b-0.der
new file mode 100644
index 0000000000000000000000000000000000000000..f88e810743958020bdff64a8f7932d64c97048f5
GIT binary patch
literal 507
zcmXqLV*GB<#8|t4nTe5!Nq|k&c%wVBv3ktU-dQ{MpZQ_H#m1r4=5fxJg_+sF){xtP
zlZ`o)g-w_#G}utcKmf$y66SPHEh<UO%*&}XlroS2i7^Wc!o?JV^7Bg+Tn!E6#CeSj
z4NMFS4Zt8uoY%w*iA$;RWkBb!gWbx+$i}MO$ikq+oW#I#FaJlq%>B1N-P_wXE;-Qk
zqiK4>tNs&Saay$<8Os@yL?)_K#mrkQUfb2CXd)3HEpYFGxwqPJ$%KZNCVLYk%^a?2
zwsYD{topV`Sov<GA4}Z%6HGD^!3Pa*+){Yy()*-rv6F#=0UyxQviyvU|5;do;mBsd
z58?}h_^bxZK*~TCB*4ca#v<}rL*jHw={rrW*KgM;M_9DJKB2^p9LmfY3<jx8h723~
zq7)8ql1%cwx558@-lc-BkMrxYdY<jN*PMAObMs2pt<xrnw;#In>O%Fo8;;R6>zEAO
z?!7u4JL`?np;WOAJ_a!cpKtjUx3S$g*U92xZvNx0ap2s7_0^#_81-sdQ~26;OauV!
C{id$~

literal 0
HcmV?d00001

diff --git a/assets/roots/eb25d890fe2720f41d7d6ac15eef76cf62cfab78-0.der b/assets/roots/eb25d890fe2720f41d7d6ac15eef76cf62cfab78-0.der
new file mode 100644
index 0000000000000000000000000000000000000000..9e42698728dd31fa171527c1f0ba5bbf0994c2d8
GIT binary patch
literal 653
zcmXqLV(K(#V&Y%G%*4pVBp~m;epM1fK|qKP<Gk6)Gqnu3*f_M>JkHs&Ff$u8wi<F9
zaI!Invaks=xjPw38%TmU9Ku5GMX8A;sYMFDiFwHxsl`C1p@0D&NRnNcJvcEZEx#zm
zP|838B*G;u=<M(7@8YlE?5N<AnVVUXnqsJJpb3&=7FL4FxjH*5IHwksWTs^%CzfR9
z=P5XrmSp4?WtLPL$cghBSQr=^m>GaUlsK=kg@K`=g^{tTrKx4qpmArJfdCsjIP{np
z*;ut3Ss0X<lNeZ--K+IWPd16R{w{qoQS8d<q?upsg1FhvIWp8wf5@d`Bg@G0&h}C-
z=X9P2rB8nSF7ML%%ADYB)-9$iwwAN-i`N&8fGz(zWb*8D^z}I-qnAc=8_#@n*tYX$
zmd^W4m)Tw}b~11<kOc;(EFX&)i%4nVa!C)#J#**2a&*5x<%mc5%*&PFxRK>&Wc<&<
z0*rVz1AdTlVGy6yfEh?3$2)TdgFz~jA;Wv-=&Ci_E4YfbcijKK)lGzx>(_#3wH(K!
z+V@JVDBi1fDuHM2xta6N$M73G+$UoAipfCa%VZnR<;GPL+}t-O*9y<}+nz6B-Vprn
euEGP;S!NfHGwytL=kDkKvN~2`;WsB)UIPHw3dtk@

literal 0
HcmV?d00001

diff --git a/assets/roots/eb8ebc9d472b7e0291771923f2a5f1c1c51e57b5-0.der b/assets/roots/eb8ebc9d472b7e0291771923f2a5f1c1c51e57b5-0.der
new file mode 100644
index 0000000000000000000000000000000000000000..6dda6a38dc3d4d361acd02e4b52d4759d26ca563
GIT binary patch
literal 579
zcmXqLVzM`AVm!KlnTe5!Nq{vpY|p2-C8nl_m+)U*?OJ5O#m1r4=5fxJg_+qP(U9AK
zlZ`o)g-w_#G}utoKp4c~66SHqOwV*qEh<s)%u6<uG!O>~a|;WUmzV3M0Hu<FQhLex
zxrPb`av&*YVR5()_niEs#2kg7{QMFHcVh!Nab81X0}BH~Ln8wqh!W>D260TGTzWX6
z%s_yR9qeZ&MmARMMivGo<|GD|yUTCx?%Kiqo4a1|(uaNfia#62O6@Uub??~hJr|~a
z`*7w0_pZd~K)1Siy7S-lCG&{CVK4Z4zD3WWdCm)a$6V{RmzRh{npMnYc77)yoKtjf
zUB~i;*;}2@rQcEh&n&a}k=<e^0|x_sVDQKaGcx{XVKra|QU-h=0e+AG3owG(3}iuk
zJ{B<+k<GU~mi%0J^u{_f$1{S-nMs;^ypJKr7IOxJK`N6W!`eNca_oh?F6vqy=Hi@Q
z{H4RJr$c@BvyR??*5%1R=Na8go6P_5%tp@syE&_WW!EoYGO$dGK9thCV_v|W6<0kM
py*+;CqG!E0<Bk(;{eC?i+AC(Q>^gdpVegNSN3)(r*KAf72LSq%!wCQY

literal 0
HcmV?d00001

diff --git a/assets/roots/ef58da4b2284f3860c68b18b916a064a520a9728-0.der b/assets/roots/ef58da4b2284f3860c68b18b916a064a520a9728-0.der
new file mode 100644
index 0000000000000000000000000000000000000000..9c1e26c7ea1f4537df933c820e88e14304e8ffea
GIT binary patch
literal 551
zcmXqLVp29}VqCd^nTe5!NkmNa_~9F#%lBpSbalM_Q1J8acDr^1E;bIWHji_*EX>RX
zfri`$oNUaYENsF|UIB*628tjKm#~y`Wm0NUNl|HWiGo*RL1LbQbH1LAf=@|`o}sLP
zG)NJ%ut;!fa%oX&aAta*LQsBwiGs7Ep{aqKIIod`fr){IfrYV=sacdbuZbxVmljr*
z83?ekgZ;$B$i}MO$ikq+oW#Jw9Z=GnVl;E+=1U12JCyp|N^~j?XuIg<#><{u=N+Wb
zY`a4wH@H1vUVKjLZ8njq4~}d6pBw*V)yK`<xo`dTy-#{gnV3@gkMYgH8?URTRD?-5
z$7eU5{<i1V7M^XIlQ}Z`7dsg^81MtbLROfO@jnZz0W**?-~$Qpg9KQBk-%mk3*z&!
zh_Q&gc094}&((Q>9$)u%e`!~k?5KVD3vz5QXD}F~G8r=5)a$H^^IIawzBlp^`@Pjh
z7QtF>E^Oje=K^0o_@AcB>G#0@3+u(!Z>9-%z7}nEt7S59nc*hY)GC*l+3C&howjw}
ls$C1@9B(p~Smn7|bv8&=8_ft!Ui~^bZ*uNxY0d;gKLA4QvNQky

literal 0
HcmV?d00001

diff --git a/assets/roots/f026813c6ea2e5bbca921b4b884a50f107f0cbff-0.der b/assets/roots/f026813c6ea2e5bbca921b4b884a50f107f0cbff-0.der
new file mode 100644
index 0000000000000000000000000000000000000000..507b8428b59681a113d25ccc2e355636521b74a9
GIT binary patch
literal 1354
zcmXqLVs$fUV%A&0%*4pVBoKRl<E^O0Z)5jGr7EN{Pk3*@%f_kI=F#?@mywa1mBGN)
zklTQhjX9KsO_<5q&rr~SAH?C};Rwyk3@IutE-{ogkOT=a^9Y4HJ1V&6<R>NOD7YIb
z1m)+K7|4n98k!jx8yXsbL6kVJiGiV!F^o&8@l8xh$PQ*?WngY%;%6{uV&Y<IVq#=C
z`b;~&=DixL`r<~FTluFMf6kn>(&&&<d!pk+>(hrbq}h)8tkgc3F0Lf2{r0D3=j25d
zdnaWtSj@Yq?$qSX%P#hqUM>A8{_VW$(Wg~!$|o=AS6;^_#azGd%7wRj)vMi<qyOtX
z3#poNKuh$)$=(fB)+!ILXFM{rVKa8y79zN8slHN(Rs=62)5l+;f$2F1eqG-tU4JpG
zLto0O*Lru8-~)Gt3qkFxf49}~t7JROHA&yodtA3IztXO6rH#0E{f3#3Hxwq^;r^O(
z_?+{e+`^rg?x{z2y|{5~-NVS*^BTIQJEn$7ecTk`y<N!sM9t>6-VG0Xe;Fxn%ir!X
zm1CoeUu%yQQ;358{r%zo)>ab~uOC!14N-V=+}{1o`>6fiRR`BviwDFc-Qf53x}*Io
zZ%^^0vu}<Eyl|X$ePvzljhC|hU0ZiXOxoo&Nt-9^Z^LVj4{@4#(lR{j`zLp<y}ftw
zJjGL;l5g&BJuLNF>|ceM&$YY@cH%M<#Ix0Q{jSpAFDN6yr(4Y2zu>9qf~ZG6rLu(&
zEiHm89L_XPzRopoZghXwlcx_no_K6>KkKJes#X0->D$SDoD-*oS9Nr(c~`LJ=N-+*
zJTlfoelFLR`)yD=@%g6I^obd--uJq(T?%uJm}SGm-@JoW^|0l6>m??g+bf0i-H$$B
zIX&~wvhwt;_p3ivrHVdD3`=EVW@KPo>}23zzz0mDviyvU|5;do37-v|jAeyEd{zTy
zAY~v6QozR|#v;;qr02}nCkFqQ@^HlWh^8x+Fy6n9oXUXN0+`Ae8H7`nzV>Oab$N37
z|IUnOhZ{U>S*m|2>sP%syS3?D?zd<2p2kP?pEfsIcp`P%ItyD<X}dkv+gL8_`RVy}
z_V?DKX4_8h`EkPX>XUf(y`mx0OHQ47>%VJPO4<Cz9WAb&KE3&iUT-{e@$i&eE{C2y
zdL{8<k-R$VuIo>)tvq}8ec6m&2EMb>znHi8HAL{K+XwxgvglM?>d9*@w|1HqepWl+
zU;eC7{ZhI0ERp=mFW)XaygX&sh48?=>a4s6|DF&sc$eQRsLe6=%9Z^Mt|GHKTy7b>
z+OqudyZ6yeSM9E?t(bH>#^&>lwZC>`*B>#{*v2H<6{0g|gLrY@1@pxsHZ!I&@My9|
z&-3)$7=Qfn>GSHTeWv2u!%rC8bd269vhBqo{wapbr_4B$^?K_=^{)ae7+>@WCB5i4
zv$fuB`hnR3X%<puZt+SPw)amS6INdx%(iBcO&eQk{>HkEnl7^z@AAyl$n3xVG=42h
zTS~sv0-mEBN#`0CU-<kc<K8~w<Kofv4M%)@HZE)FI&8gz^Q=hYE{Vq>;b#AC>({t1
zv@$;NGs4=%f8!~pPL^pJ8ArW$sCDkXW~?7@_1~<{T@pr<LXJg0nENyCDX-G(Z?_(u
zP~4QHxT?)zlU~Z@_!E!o1k+vRS^qs=^nUY-&7W)gfAGjF$?Fzu*}-U1X29@Nxng<P
Q^#J*<-)vtGNq)Eh0CW~g(*OVf

literal 0
HcmV?d00001

diff --git a/assets/roots/f180fc731db5ec5a468e4ba9bc8ab856319ceda9-0.der b/assets/roots/f180fc731db5ec5a468e4ba9bc8ab856319ceda9-0.der
new file mode 100644
index 0000000000000000000000000000000000000000..72e48c301e6035cbc5fe075b21fd5faf21eda1c4
GIT binary patch
literal 1631
zcmXqLVv9CtVsT!;%*4pVB*<{;rF7@VP-fo6&m41)JYM$DfR~L^tIebBJ1-+6H!Fid
zlp(hPCmVAp3!5;LTaclUfdGiZ#lz{6k(pbWUy@mDC}SW66659(HZU+SQZTVFG%+(a
zurLJjjLi%s4a7mR%sc|lsYNB3>3N9?LHYS53eJuOa^k#(#z19;1{TIfM&?oCyvE2}
zn%dpOq=f8MMpg#qCMJFcgC-^}rY0svhO-iusZx;}U!{og^-NKjTGM>_sHNH+p7&zm
zz1MH7S?pBbbn5Nd=-YhTb>F&jh;O>N`SdmMpdyXieSY)0wsHTQ*D}ku?4FWl%%#nj
z*z61}SC%ZE6ehDU--k;fcfNAfmSeYcp2+Il*{pFv_>+$xljp(^hk4JQvM$hVIq`o+
z&V|=qQY{>E+cT8kDPJu(mm8QV@NQw%p^Hj}hniY1eF`lLs8Ovt*%HIO=B|^U_VcDi
zDxIe%Y`XAHc~_dx?xZC@gQHTaYi9gf>@kmj>bm6;U$WllF}tq+Q1V0TY*p;VeJ*N7
znjb%Y%{f!Yq{ux#e~JCRxxtUl*RIs5iIAH9(AL~sB2D9x!_mO5p2NE5f;&_qQVhh7
zu6l5dYnj9Sif><8YBGge_FTNUob5d0_lyH8!gpIGu4U<&{CMr354T-%Bky=du3Ix}
zrkR0bb(yhJ`{F~B+VXxDyj$1aK2`ci)n3ETS1vuB`G23so6@fpVzSE$4%XX9FP!xI
z{0W<DM<;Xje+{)Nn|dyCMi=MQa-&(zyL4ErrtiI?zwdg^>_w+)bJb3UUOj)fGKhn7
zCcBDmifZ;U#mw1RcT0S;r&l@dT`m4|g1AS&*-zc8M{mDd)#~c_>#UXQ#*AlXKC>r;
zzfs=V&T;4n=f~-7S{lBON)FsQ(sTR%qlMy;=Tss~3~$x{HORer=V8{vKk-b=j0}v6
zn;4}Gni$0l_<>1SR+y3TKMSh?GmtXi0}1eh1XzF>iOoP3#OGrXV-b;P4||YT{!Ycz
z#;<sm{I!RVD(kcj<U!KPED{D{4cHa9fD|aO*cw<HShBGInGC>Oq0h#l&Bn;e%Fe_n
zrkqhyQc!HAuU`%XddbkNq?cBtpIBOwUzAyrTC8u73o=EXCCwnkK!1Vm0_`?UkS?I6
z<f0rDJuv-6z?_(zs0WlbFkArC(x#21AqAGh^^)^*^|5F{Eh>Qdhmm2*j(Pqc9#7>^
zdVV&;@w-gu)f$FJx>lXB85a71O59$(r(f=lwc8zIyHVrcli*O{^9v_PGs(uMxp5k6
zJmgiGUT|4J{#8o&wB50{o*(J)_epV+jcI=zdC%$M>=kv(I`8(&oHS^9Ydz=eftQjG
zvTiVyny>zDqM<SI6APEW>Ei@7#$Oi%dwvRLy<2a4IN)-Bym6&X+lpe>2|Wtiii*XR
z_pzrwt(e5Si}Aqg9+|ZLYud^gr|`~s_R_Lfepz78OdiYfhg)X<l1UHG&&ujssqGV9
zSrx8y{%m}*TW?IHRof3E_oT(?yb=@d{9cy*)g!T3IkJyw`5u>7Up(i242k%eu>O|B
z5`7KVJ5>uh+G0OjKmV_3+VCgEdCIfLGWq+~@@XZ{)IM3)`mOK<8}rnE_xe3#qOMGO
zq5bZ;;q6^4S?x2PAB}%syIkoz;|<@Rofr6Ku|_VLH{)i$_Njt>DThKAe|fq7@FdMU
z9bzgoZF<#aY>VE0=G=C3_P=U3XSAyPk5p!!^>*&u6;I+U&Rq}U&A()yyOA~9^IX?N
zx8g6~^gpa9F6T>Kv#>WUD6`HxgXg%Mxq9=`p5shUM9z9LZYbXT_t*rh{7X4+t>3+w
zxNnhjY&U~fnyO2|JqP|DHKN}aowK<fC*0F0E+Kw#@5gcht1GFN2i4bv>!^nOUv$gA
NE73A;ovl~TUI3Z=my-Yh

literal 0
HcmV?d00001

diff --git a/assets/roots/f20ef3e3718f19d130d9cc7a2dc303161cb29cd0-0.der b/assets/roots/f20ef3e3718f19d130d9cc7a2dc303161cb29cd0-0.der
new file mode 100644
index 0000000000000000000000000000000000000000..a42b51999e61426079da0e4a7399e6d3888d586b
GIT binary patch
literal 891
zcmXqLVlFpmVv1kD%*4pV#K>U4%f_kI=F#?@mywa1mBAp^klTQhjX9KsO_<3mz);md
z8N}fdmI-!s_V-l?DJm^4Q3$RqE=kQTR&e&$)A0#$(KA#xPz5RD7M2T6O)f3UEU8p*
z&d<#)&C5(qEXmBzQwYk>FL8D>GLRGJHLx@=H3DJ-17pi5ab6G;&ZV{WO^iy&9%f`^
zU~XdMXE11D<YH=KWMsG?Y8kXKX!EY4kxfTpgVtF&r#5&W|1@pSZL{gumZkKpi2LxE
zOXmCi>9*eMzQw*#-0Hac?9RHf`TKs_nVBrGKKRX0(6wZ;ZFs}cpPe&LJzbr3W$P`+
z2?7VNU32O@wEv5R&{Urg*6(IdT$`&!Qm@_N@x6Gjj%T&?5z&2CVauZO%QAyjR_#3T
zI%`&J&;?ztY*R5#ftCwdr>xi*%-x^Vh5OrgzfRxLvFhl);LuGIkJRqm&??DRp?5n`
z>R0PmuZatvi(TzoWO;wejskfN`|dvuammd#&0113v(Mj)%(DKIFLqu2ub04Uza}xO
zHR?RUAJ<-0*^tc~a8TDq?5>N6x>V_JCT2zk#>Gws4hFKo_>|>i5n~bIYF$~L$~vRQ
zq45X*bRCP2TyJd78}Nao`577iv#<aY5}N@(h%XG{vl=i1DdbQFCM#elGcx#CEp}P6
z({<zV$#o~Vxt#8&ypnkrnZvQGGd}B-*VK7c{p?3?xfV4Q@>yLvlfQh+Lgn4xROX)+
z|JSqZ+@VXi&-DH&{KKqyFelbHK4n{~b!WarS;f~oi#+5d?fWLb{`gD$-C4iKEJC5z
zo<6zz+m5y7k!;+t<$I?4XIOoGsmJBKZGCu5Qbx`8zl*zC7OY9yr_I@J@*#_H_iW8D
zn|}=E=aq9l`mNel;wF?c@tw)lH?t-_ciA_=u;{8M(>JE4U*uoc+?*D=^8cHzpEKS6
zn?^CMVmaLv-Cn3Uaqp5XRlIv=eGOM;U{@5k_p-dm>dC!)n|b5X*q&9!ag7=^%WKtN
JGpy@12LJ#sRXYFx

literal 0
HcmV?d00001

diff --git a/assets/roots/f33f2ef9470df6a3ca848f278ea48015299c54f1-0.der b/assets/roots/f33f2ef9470df6a3ca848f278ea48015299c54f1-0.der
new file mode 100644
index 0000000000000000000000000000000000000000..767b3c2bb5faeae00886c1545445d7098c82c027
GIT binary patch
literal 541
zcmXqLVv;myVw}H#nTe5!Nr3ag<kU6aZ=Tp`C&SI6rT5u@i;Y98&EuRc3p2BUpCPva
zCmVAp3!5-gXt1HUfhdT>CCulNnV#vKT2!K=;F*`KXQ*bN0+L`BmW4?ug!lw2xH>y4
z1Q=VGC<Nu_mngWK8pw(B8W|cG8k!n_L6kVJi5ZY<Vq|P;X=)iob^FQ;1lZWYzF}fy
zW7TeCVNhaDVqiJwvhcj%^nh9Sl$%W1&t5n!G56BP`f^i$>$_8mg5Dmo{_*Blb#{cp
zo0;oQ{>j)}y7M;Yn-juc{f=?TrWyF`mUri}NfdC>tXayz_dx08Wz&pvvy<nyY@O*F
zv7qm3$n&Wu7dsg^7{~%cM3#?5j78*Npld+nYP;t;QNI+FgxDK8Y6P<k_(0P9jEw(T
zSb!1HX21{P3xoKq2FySTIUblZ7z|RG3>iAJdflJD`I8sQd^0^q&9C{`-;=+!h4*Z)
z>e-TdDKj%!IN4e)K#y@@CELWg9{UgNV={0*ELy#B!Ni%KlULZ(yl`Xd*7;<}FlBDi
diO#)}Eg~<M{$||4Tjt!O7ks+rK9Bgc008E{tK<Lx

literal 0
HcmV?d00001

diff --git a/assets/roots/f4ee867f8a28dc57b3dfe2c74facf594b917520b-0.der b/assets/roots/f4ee867f8a28dc57b3dfe2c74facf594b917520b-0.der
new file mode 100644
index 0000000000000000000000000000000000000000..b29eefdccc02bda893c34ff675febe398b61c0ca
GIT binary patch
literal 1453
zcmXqLVqIy_#5{2UGZP~dlR%~#XI+E0&w}MW6-mMIQTYbEY@Awc9&O)w85wz584NrO
zxeYkkm_u3Egqd7i4Mh!vK^!h&9v9t^qSE3L1^3(}4?`sb1&}bauq048C^R@k!8J@F
zC_leM!P!y4NWsX!$k;$moEJ!%8dw@w8X6cIM~U+qTfn(SQB<_4iAf3B8;q<B%uP)E
z3<gb1Tue<&j0`vW7I!vqZwe2(vohGnd}n>KxbXYs(aO=8r5k2)i687fa(l&tGlshk
zeL5Taa{CY2^;t)zwqJKYIrT;pOMq=7$Nwj`n>SuNy6JBR=j}NyZ&bxa+UpG}W@km5
z+*Yh%WAc6G_xj7re#p4itkvn6Vt*rDAh=HHte<M&2UQhQ!8n0qZ`#v38#8vD(VpvG
zEWh{c#3e;pa~4TUEXaQo@TJz_&<ca|dy7v9YYPa=b<bL1HKq8nL?)Nl|AUOo|10aa
zdem3Hd!d<c<})?1?Z(eV#a-{#=}&u?an{yX!|A81wvn`3s94rAZ_S^(r-to!lYJvQ
zS@uBcCi#WV>%!(O*w~*fv^^oWg8Nig%v-r>e9g-|ruJGdRy?vU;uyoGmMzLlrnQ;w
zxH0d>8WYbM$y1M>&h>DA^hr-b?t<a!yCrXa-s#yP)0d&V>%!-NJLgmTi>-`~*Ze!x
zq~yP^FUdXa>Dl&2FRt=S%zw&K<n3l7@X6&+N?4&^>5Dlh)k==mMqcEK=Fj~%uT)0j
zn3Pq`4PKTrXSchiR&DIxv986#ZgZ9I3g$<T>KMf$GbEgiH(a{2LCV?m-O^ht-D1|Y
zH99hSm8iX$&$j;%t9eRkg=WUzqhDYDbN~6Ib;HAI!@0}qix%%ZqN8_aW;mZBk1OMp
z)Yqw;$C8z}jXfuM*!($rZi8LlyzU?WJdc_dxic{{GB7S~>@#TWHsA-QTUlX7#{Vp=
z2FyUpKo%sx$0Eievg*%70qORM@nSpo`+HA}W02Ws)L_5|lI91gX8~p)HUm!(U!KLu
zz`?+7fz1M|Hj9jsk^(Dz{p6w?y%gONP#)3CODzHM^`ZRu)Ux;@VCINVPK-B-2W1XD
zpe%Bd1?D_pl4WF=e0r(;Ou;v^c;j_MCm*xlC(v8r^dWD8yL;c_Nk+W|{okT{_jR6g
zXUvjTQ0R<4(Ik-b;Q7o|*~hdNB%4mmYE@k;Zn1QBUBIWZSFNmC>W<nQ8!s;U=1{tl
z@ASt|j~j0;zS;cZoXA4cH;3X(rB*K!V`S@lbw_`3*D0NeuY>yHd1i~BKV8f&c_iyl
zamf1`=b+?+f~O9-Zv0{${55l(&Euu_*1QPWzG>p$H7n&mwLcL*=DDKg2AAWPPj=7C
zO<02NzG(d9s~_SzSM;I(nWy(m!Uaw$7l{}21{BDL<(%31-zv&Kx$1CUD!XjU!v8CI
zk~?!ZIdoWFmoLxQ`e)A7Yw4NMD@tzv>HH>b^nHoSva;>&!S8!L`&Vvjj#@fxf@|W}
zd(8f7{42UYFi+dCM)X2qR95wrX9bgQeaw8YDam(U|NqXpvt!S?zMR6O)ce4+{>4X@
z%EFwG<{!p8S&gJ4LIwRVJXLoueDn5J`n9BG-oE^qi%#x&qvSp1c*Yd*x<`E)cH54<
z`f8Fh-@Jp};&xl%ud`D<obwj@H??0knUUu`xiX<NlmCO%)!<)>JcsOG+RIDyOp2{o
zUY0Jod(*4>mj#?*VT(8LaO;}I9esJ^YV+wf@##7_!ujn{>phpr-ac!=q8I<j%al*o
i`^O>`mfjl=ljE2sncSL@7$cJ(QI@j#57UmXbGZQB-Cl$M

literal 0
HcmV?d00001

diff --git a/assets/roots/f5042d4a785f7dab303cd2dc815d90dee6995f09-0.der b/assets/roots/f5042d4a785f7dab303cd2dc815d90dee6995f09-0.der
new file mode 100644
index 0000000000000000000000000000000000000000..6a336d43999064b42158a620d996834f093cd489
GIT binary patch
literal 572
zcmXqLVzMx3V%)cYnTe5!iId@4?Ci}Ije4&QxY#(f+C0wLvM@6nBpPxXaI!Invaks=
zc?B4%8YqJ}T*5NJuFn3x3L!<M#U%>CmBl5gxy1_3{(3q-Auf7`+6I~+Wz51#!Kulm
zMVTd)3eNetxutoT$%!SI`FRSi&dv%!`S~Tzj)n$u;=G1t24+BPYG`U?5hc!RY++z%
zXaVKY!wF>u0&MJHKQl41v1&K6Feou6F|aIInxDYTe0Z<nm&@XFv|CEoJpF4Mo_9TY
z|1*}(NqvoT9=~+YJ2gS*gz$sqbHAsS$ma-bdhz7t``lKenJydS{+=llxDmZ~(XpS`
zoSuZ2-I;L6bftHPjgWh8%zsaRDX)Nyi=7M{3}k^JCCkSm#v;-t^ZcLgQm<}~e;R_n
z_AO5Pkr1hGzz34%XJq`(!UBvZHUoYTUl_z^HDCr($g#zo!C;WeWFQ*rWcz2^yYJQ;
z&0fs=cEnA?)A&M!vsSX^8Q+atsuu0!wOAVKq4oFlrsCMe9URAbm<$;Xtk&hreJio(
ucJNEp+o2o}0?yobNfc{Z?YUu7<D264iY-2ylB9)xiTSE}C-0RrzX<?rpT02w

literal 0
HcmV?d00001

diff --git a/assets/roots/f59639270d6a2019f1683191887f7f3edb1f2013-0.der b/assets/roots/f59639270d6a2019f1683191887f7f3edb1f2013-0.der
new file mode 100644
index 0000000000000000000000000000000000000000..d5f8989dce1564daf6738935bcd542e65722375d
GIT binary patch
literal 1355
zcmXqLVs$rYV%A^4%*4pV#3{&Nvd!<9nXZ`uFB_*;n@8JsUPeZ4Rt5t{Lv903Hs(+k
zHese9e?t)iArOa4nA_PkC?wd^-A^Id(NM-f3M9%cES#KLR00+a^7ju>aCTI1H!_eD
z=QT7pFfuSRurx9^HjNVJH8DcsQp1WSCM9HtGqN%;H!<-u7&I|)F*PwUG8{NsDmk&%
zrKF_&AD{KKJ2x1`&b&*W_?$ccoHbXbRL!Bs>zn%8uE+I<zrL&(`Pb6i$zWf=t8M%%
zJ8tOdW-30vXfEMbJMpSme0DU$Axmdov(})U!KwVRPEY&KvtE98hezt>j_wMj^e34c
zGLG6j$%%4%e)jmU_eb7%@6B4W=I<Ge!1t53Xs%vuI?LzD5sqVOXMSYPe=_HT=H-~5
z$HY|UDIZoiXv=SJ;jrOflZ(ZwD5<XO<Oqu`qL;S`W>(9Eyz7xtT2nOLUO961Nu`#9
z?EYu!ABCS1D%ia&^>b!v^4_VxrKg{LvSR(Wi+(F^b``3eHM89_?a0TRmFu3K=grgL
z-N3i?RA6<5$YBNj`rjg<4+Urby~?$49@FEb_}8Z1Iy;J9*xCB8(b=un_Gocg|I^7@
z=a;TN5!36<_Fu?tO~q*ucGCwd?{~jkFX}JW8NK&g@3F{r9j$x^J73GEA9d~fpKETW
zU6Iy2F;Ls~e_(l8(!w|Cc6N=;55iUk$jevFT%EkXMZEkYul4=!a}qb3&gin*^u|WY
z+`g`V()pW0A}O~7m_!}_`yY8Nv-sq%ncv-BK9sn*afgxaX%U`)8_lWB?{>zVKg}BD
z^GkAi_O)2y%ZFk@_81i}sQCIZSMK!urOW0k-MJVzuc<O6K~van@n8R<tksXMJl&xZ
zs^j9_)!{PdRLf;8YbIt!2FArs1`Y=Nz=SF*%*gnkh1Gx=NEz^f1o%M$EWoV5W*`gV
z^RbArh%_ncrX9P!;DPAtb3UBqM-t|R<S`?sGGO)qrZPr`gnLpuo_|Vcy2@<ac$%&2
zqmt*#7q2GPA2W{2kYsMNc4j=!UhsrNF12;yGeM>8UzwEq*6oz5m9NWrwpaD)RH;v_
z%htCt<*)m3&G5hKNv{*fyH?(u@9jBTFns1DXTf{hjF+6b-kVZ;<*bc{&X!rzUip4K
z;&McFl|sV}&Cu@;9RIMX{oiT!)mel&t>U5J##;*UZVVL+ic94fG!iTFS1>a6&o!C#
z|BJ<h-#adDE@C@b_^k10<y-D$m7j#U=X{Ult5%u3#p8Bc{Jns-isuf`3|CAjD@a^F
z$6QBnYt!~s>r_mli+D15&qmJwR=9o+_eCy?pKMCa!Kyre0*^e~_sDW8x60b}7pFd%
zcD*DeyU>rxW>xEFg~iU6WzjhS|7Oh*kxLcn65YGF$u-I|EbG#ojmbt&6CVUC@h#`_
ze091`e#N7thHnC{K{MDS?kzp5U%%?gOFNFDH_FURHp^Ds*ppsjD<b|o#9RFF<x1P!
zY|oP#e0n7T`+07<SqZeATyFnz!JGQmOUolN3!gP}nSW~Y%-UDUG2t7NSc=`#TRwF>
zCMSQ!Z`-U9xO}<xD$ifNshWO|vxS#WS*#nFTfyUU`u;tR{Bw&_R$rdla%E>wNKy4P
z)iZlCAA98SUN}Bieb%ZU!jtaG-A|rxx>C&SP0x<zFSeciXSayQUEeJ3C=jb&oX{HX
Hsl*NdIO#V0

literal 0
HcmV?d00001

diff --git a/assets/roots/f59c687f2418d62a790f7592330756ea85e94707-0.der b/assets/roots/f59c687f2418d62a790f7592330756ea85e94707-0.der
new file mode 100644
index 0000000000000000000000000000000000000000..232c4b6121f7236eb429572c591127e8aa60166f
GIT binary patch
literal 867
zcmXqLVvaXxVsc-=%*4pV#LdD01dNIi!5oVWc-c6$+C196^D;7WvoaX?7%CXZu`!3T
za0`pO=j10P<^*S^=P3l`=a(orJ1XcZ1Q{C&8wi3_a0zoERKNt8kp&Ip#CZ)Y4U7#f
z3=KdaN}SgSnM-Bcni!Rky~D`Lz}&>h&tTBR$i>ve$jER;wQNEqTZNL?*8|PlT25)q
z`^#D;cyw(?(H}P^=i{5Y=CZ`AoYwPxn9$_*FlaSTqkBQl-IR;3zv?XJZ?fglUN`;v
zHjy@g%H7t&4dp!?4?QnsCF#q@{hF3>zf*mx#eBBwb|+7(Me-Kk+i>Eg8eg;MvG>v4
zmsk=`c`noVmTCR%^a+iLPv>?ehMTV`5xG<H!0KI*zTTYQ7k2OeYRmAD&G<!=_PXF@
zR$|3HcOCf@tPX5hzVPKH{|S0V2`|G>?_`;jk@3_*EunPN{PO=3Mc%Jd@cgsZLDb_S
zlVPG{+>Yt**OqTjnN_tv{-E&t*-5{7a~_0bimhb6mG`oFa$(uA%+@AxCT2zk#>Gws
z4hDR{_><*lWc<&<0!$HX2K*qtFo@4;zzn1eWI+OaEMhDo{U5yRSLnH_tn&@{l{~Ba
z-lMzHdyqpJm}r2Z%*f#FaQi^Os(&YV-hZDK;_A738Uv@}n$5y(Z5r&xr?Q`w?A*nm
zyKV{B<*y$<@^|eoPWNg)?owUxV0~UrKC@<@v8C(bz9&1wb5{Kkn)W96nC=smoSjpW
zf8PntNDs4X-f`Yk@$kuvf9Gx;3SM<)Lf6X=v2Hz6?^Z=<Na@SoJIi41*#Fig_j<6#
z^t#XKEOMgPyQXcqe9uRHiH~$~aoHE~nTO=7_#W$WtmTr?`ERp2l#hR6o!RTd;hy^*
z>gm=bbRTvM6jq*l?z>U;6vh=ZpX(UQTUo1KYI8Vet<zR<GErY-*Sp)H`S)Aiv2yzE
c)woe~?s8H<s@&^I)0+)%Zr*yzJ;FX70IDiRoB#j-

literal 0
HcmV?d00001

diff --git a/assets/roots/f7025660b8bbc206931faf24a7161c03980f6301-0.der b/assets/roots/f7025660b8bbc206931faf24a7161c03980f6301-0.der
new file mode 100644
index 0000000000000000000000000000000000000000..e18997f41000c0924f0a23a6897a1ed087852e7e
GIT binary patch
literal 586
zcmXqLVsbNRVm!NmnTe5!Nq~D{)Gyil3$}W?tUs%=Am@z%7aNCGo5wj@7G`FHR6}k9
zPB!LH7B*p~&|pJR17Q${OPI$cGd<HewWvhFGcVat(m)&}%q=WXUS6)30+dPyO6eu%
z=NhUQD1oGyg{9#-9E*!fi&9e*JY5um^7Bg++>H(7#CZ*k4J-@{4UG(dAWEFq7{oD!
za_QxaG6MlNcCg=>7};308(A2Xn3EV-B%kkD<C6OJ><;^g-@O~dSGwr3ihg>}{a>JD
z{???R__R9tr+1`XE4j}c3+9^J8_RTaW#m1ksBcrX_<Ak8x;&5VImT?k9v^zEjx+C3
zecT0C1^&n~fols?KIq;v`;?<;x!B3T!GIqaOtQj^jQ?3!4VZzH0Ut<!A0)s6jHosP
zSrDI(MT|w{^o6}EAI@M6T<B}QsJZf7udLRS7UWoCPG>MkVKPu%(&);RE#zHV;(tQ<
zalxn3qI)%+AI?uKN}LxbFex%@XY+A^=N2y`)XZwHJ~3&tWHP8R3;tm6G%49?=A&(k
qt!JD3lDj1^sW5J$@bbG$@+O@zy7pBu?YRD{X~|isu9K!RZUF#I<Gbeo

literal 0
HcmV?d00001

diff --git a/assets/roots/f85cf300817f2b6cd6f5d220fd224155c466d35b-0.der b/assets/roots/f85cf300817f2b6cd6f5d220fd224155c466d35b-0.der
new file mode 100644
index 0000000000000000000000000000000000000000..c55cb68833c0b472a02ef4356c8a08c6ed0ec319
GIT binary patch
literal 664
zcmXqLVwz&m#3Z$VnTe5!i9<(oPPEut)~N<uY#dr`9_MUXn3)Xf4Y>_C*_cCF*o2uv
zgAMr%ct9Ku9@dc5io{|=0Ruh|pPh%@Bfqq`BtOqk!axip!o|ZM9PFduoL^LsUzAvq
z36wE0FapUi^JoKQ^pf*)6<os<g7WiA6r59wN;1<jlfmi~97{_w@{2M{DivIvoeku~
zc@51Bj0}woEeuVKjHASPO$?E^1Mk2x0|7R6aCk8>vaxD6vM?wyCo!<B5^|p~L;Cmo
z!w&4t3Vt6AnijEL{4}X8@zXcOj8hCpj=yqd2x+_XSN=Z34#%XJI|X7!_vB|@Idhc#
z1c!X07<-^?Z47(xV^fQs`)B9h)Z_KqCaD)y5XJU(--m@8PF>*CT%2r>Xdnv=P+2|}
zF&2^NQ*lr4U20r)c7<+A;I^AZv!_4vH{b_J3o|nQXJIv922uv{AOU3-U>r4I*8z%6
zS$>cXVB|BlAtwdq3<iT#CPRj<XAYg_uU}pjzIp0Ow#w%Xw(V{aQg1fi&;K2^t04Qh
z#hDiyd;Iyoe@rjqYrY^C*w18O`%PIx&F5G``((A*n@r_)UHfixQRdt)Rhwl}jiS+?
Wh4^#crFNZcU-6UuLDH<A7%u>5kk?=U

literal 0
HcmV?d00001

diff --git a/assets/roots/f9780538aed47baadb39e8710440f329a43a372a-0.der b/assets/roots/f9780538aed47baadb39e8710440f329a43a372a-0.der
new file mode 100644
index 0000000000000000000000000000000000000000..3a08309fc78bcf86f31db470fd7786f74f5b32e9
GIT binary patch
literal 621
zcmXqLV#+jVVtl`VnTe5!NkCC6jAz{~p4ASn`?VM8TD>yhV&l+i^EhYA!pv-tYshWD
z$;KSY!Y0h*>|rQizz5=R3A2ZL2B&(bRvIc9D1bz`g(dwxgF{>u-11BFQW8rt^Yav3
z^HTDQic?bzH4M~1YM6!PA!?v{72I?3lM-_jg7WiA6x^K^oE;71#CZ+P4NMIz4J=J8
zj7_4%c}<KUTvH2U<0yJNr_4ZrjU5~oOpI)-+Kns>O3X<NEIuy-4jkhzlGt<O<F3t}
zk1D+ui!IL%QMn!X|J4^xmBZXh^G|1~H#PEJI<VgGNl8=QDb<@jrE@>tzA$T%w_=^x
z^5hAZEU#>AuZWkJ#vdSUYR;c^?9NSL-z9w$%%AOzHk`OP#2^S9(6aoDjQ?3!fbqm;
zzz+;USz!>L)qojD8OVYJ_*lePL_FF>);vBuZ$g6A^;4biF0bv`5|9RTIj1%oBMW1b
zxhNyZ1P0`IWzJwQNM$lmJDwSR=j!uK&rk65^c=oh*(05N^<>Z#Ki?*=V!2HXEh|+I
z_(bJ;Y9>?&KdSS1ox)_uaN9(|h~xh(Po`}h_e9pm=FBYYm9p=?{$P<=n+$uCRax-g
TLyO+Nuint$AHnY(Y`GTzFR{ZH

literal 0
HcmV?d00001

diff --git a/assets/roots/fbb2191bc63ac8ff27f29ee542bf779ce0c298a1-0.der b/assets/roots/fbb2191bc63ac8ff27f29ee542bf779ce0c298a1-0.der
new file mode 100644
index 0000000000000000000000000000000000000000..3cd7112df074647663dd393ac9b94632e4411029
GIT binary patch
literal 1463
zcmXqLV%==e#5{WeGZP~dlYru!5ZxEw-V~Pq@_TW(Abh$3FB_*;n@8JsUPeY9RtAG)
zLv903Hs(+kHen_gS3`9JRS<`ZN6sa+w4^vWBUK?JH77MYKUX0*HMz7Xv!qhNJvYh2
zP}@Kgq>!0M2}3@_Cs-jU*ij)UKfgr5$iT?hKu(+&NE#bi7#bOxnV3e2^O{%yx#mX3
zrk19bQS@;{6O$6M=NVZUn46gR84Q}3xR{!l7#ZH0E^KW0eA+8B`q1yd=5=a+ALe~-
z6sj$B_}^aYq^bC}F-YgW&_T(T&Vzf8YFxeQo#S%N=QjH^uh6PfW=$++E0+FI|K|De
zYSFxjKb5Z)RPX*e`{0|&=OtgI)^!vtDE{;9|JJaihs9YYGwhmnteG18g>iv8d(mQs
z-~~@Mt!}mmH&&f8f1ii!jE9SN&5Jq9QW#iUTCw_b<f<bN687~s2kj`8ax{Ir=d)Gv
z%atOo*PjJl%)4}N&*QJ$*3TXs+3TDlyzJbU8Rj`%Q&&ts;m-ddPN4g_tjxcS)(cpT
zGguv)4l-*qo_OBxyZXh}Z)dYzwm!ex{pOYG76zqo-whi#86Ffn_y4a*%Xar)n?4rY
zyWO2*7O|vev*5+U<@NE~R3Gpjy|nq~jveK<%?k_NA16rot86PZuh_XbY5m@lMSc2b
zcCWkrL^Mc}-S~Ibc3tlY8coIjB)Uy|Z!c%b+V|?9ubH)&*+irF+Z;M4IzRZdXf=!8
zvrj&JVkQb}+7Ig1olJ8V7ZF_Y`TIhZ&eb=hPArVsxcGZd?g_?|{wLoY`Lia__~MD?
ziznyHUU4_kv^%|l?^iRoM#NLiJN7jz=AYcgwR_nMH!=QcPph9~Re9u=&0t-6Cs)o%
z&gquagP`wQn-54;SD5Npe3k#}xmfQ~Wb*!o4Ly^KPn#~AIaMh!l{w+J{$%f8v*t8d
zGchwVFfL9uNHpLBrfgY$M#ldvEWk{}W*`gV^RbArh-_Ovy~(zub@q3g`IBc&tt<`d
z$#pm22T2Qql(QNz11SS}kbp9agn?KCb{(jB5SR=Z8CIN0T(+-to@l_5?B6R2Tx)jK
zZH)R8t^A9t{Kt&KCZ5~}ac-+7f00{o_~GQ+-fK54i(S3pO48}L-DzKS-%WS0NqQZ3
zP2^h7qiNlanUhVQ?VOpNv}K`qn#r>4<YPPiJ}JG7;0<%U_>0HugYjAG-MNZZ>-vhe
z9`^eEvi9l5*=_G0J*eIC-RQ4U%g5G}=9MqE+V78fQnIOEFp1%=MB2ie)ynZ7`>v+H
z2)Pw)m2H;)vvH%byK%Y0&!AOzuQZ=;t(ZA$^3LLPCpSUGSO2(HN=v0?Zth<vw(XmD
z*e2bdOHaJ9PFnmn`-0z92hJt(Gp<`LofN6?WJB%Q=;DmMxknZW^QBAf=yj^g;hB}U
zKt=betMr{COd|hUqf@7!@|zIAQRQU%^VOlWD?b?5$!*zpc*XmFWwRD7lXv^p^7hZ|
zb4QrYm3!#)Y<hE;VeuQCP>F+elJ6ese_Go-d){iv`^UQUd&-|~XMJOR@Xfxq&24)Q
ze82PjRrI<|XSSNQd0%*BzwO2kK8AO(kH7au{6F7q{xUf}?>lFq*&(6W@J}bUoc;Wc
z>Av8dtexR4vXQ<$=T7h`AKI=qOF*RX-{ehQI~qRl3Cz2^B7n!dN&nS@uDK6&EdOua
zQq1t=yT`KPHTyT+D`#onviR(5Qx)@H6DA8cIvty#R%)K+D6nSt*C~$=8EUV6t{is8
JRCUtk001V%kGTK<

literal 0
HcmV?d00001

diff --git a/assets/roots/fcc3e143973af986f6b33251f56e17bbee86f58c-0.der b/assets/roots/fcc3e143973af986f6b33251f56e17bbee86f58c-0.der
new file mode 100644
index 0000000000000000000000000000000000000000..bcafb43bea2ff5306b4e037e85359aaf537b0e5f
GIT binary patch
literal 1446
zcmXqLVqIj=#N4%jnTe5!NrZ8Vf!reQyI+qQYi)FPDg1FQz?av6myJ`a&7<u*FC!xl
zD}zC%A-4f18*?ZNn=q4ikfEA^3W&qSBkSiF<{G5n6dLU5=NcTW5a8n&;^rUZtKghp
zRG?>QWMBYN$IPP%QRkkMpOl!R5R{)^qTrlbRFavNnVeXXnV+ZNSXz>iUzAx=X&@)g
zYiMp@VQ67sVQOJw6eZ4U4CWdcn_8M$M$ywLO-xG20l~=1z}&>d&tTBR#KqLa#K^Gi
z%E!quTOB&NR`X7X4oF@%VM>X(Ytgmp)F@5w<zWlFcj!BnzPwqj5@ndWT3r01vDHn%
zI}T>;_m5}2REvx3Du4XKV~(NNFT05wPn}%+X#P3H;KfX42B(9Vp58KwJ$&@p&v$~y
zyHC2vwM>@q+A{yCP)g<nwbmrYZ6}#z_caIZj=A+?t!UQF?~_8ln?%3d|4Oq_=t}U!
zX`3fT-TgPASmU>W+tyPY?8gg>PNrQpnf|Tki-gz13${_N+cKAH{#HKMaYJYhgU5<x
z{F|*O^%nA#9PK{g^YhE>z8yB1Z}Y7K^dsIL*>FKdI*aGg9+y=&&WglNsYu+<mv>8R
zk3J7~;j+zQ_H&;7JTpJo^bzxd1rqyrf86)wT2DK#(|5L=A9LTbOj+@7+hw+64vF{Y
z&ix!xb}rb8aoHrtH!O?$c^6&fJaz5#tdH-VV-Kue>UcgTxS-%<$1>e3*@?vgYHf*p
z@zRI1AN5?_J@+89)2=DE;#Y1sb;g(Ly?Z9JzS8fH8t3-M2BfZ-kh{5L1IO_-D=xma
zoAW1Ds##C_^w!TVbFG$(Cr(>bc)4JjsPA^4;&+lUN2Bc=|E(!au$E3f$8h%+$AqLU
zPj%mUEYB978M3e4>+#As7N6Gwxgpoye|+&NN$hk(_FLPxU*!#!uJb-A{I-jc@#K!c
zhy!U>8`HdxTs34$dRfxKbKBQVmx-B?fpM{ufrEi8FqzBpv52vVT$<l;f8kl3y>Gr+
zGcry#R^RkG!P|fjB+bvr_@9LZnCI9G_(6PO5TDh68Au_gGGKNCrZPqbqf-r==h}v_
z-Mw^4@52&CMecNuQ@MQ)PORcx)vFlZf6T7x)a}44L7T5kYgrnRQ2&&>PyXv2F44xP
z*4wr#>2uBz7TcJ^W6F`cI=SfWoqcbPhd(n=D7<!E;Gl3QV~>{e6UUF|t*U}2om<4r
z%4>0-X}5shP3udus}3w&_G7EzvoED5cLvWabytcK5j|cZy>0GGo*&X>A6r}QExaZ4
ze#s+&=~Wf?cmk)dP;}^S+speQ&d=Lyx3z+Nms8k7ZmIp%7nGcJTzY;#)!LFHBeQGD
z1K~QwXR{8SKI)XRMQ%zphw6#KGwrV7t(WI(CMh)sPG^vqUY<2$(#e{HoclSoUQY^q
z4$a#k`~8B+asD&Em;Yzpx3*xyE$+J~a;L}7s^>Iv{CjrMnW$W!PpdrtrTut$!}K+u
zhTJ<3eX9$VoEA09l$s__y}-P0AJYQXy9!E=^JP0s5{^CN+R0hU{ek^O<}}mezm*&N
zEG&1pYCBgfx~L=apI4)(XzJ`Z&fA?XGgdA1++7&-Y5%wX>I==*@7Pw}ao1`|?rf6@
zcSK?h_HTbJ{-k|-;f00Q%SEp^UH|miaAxf6yJETauh^7-xGhq8JNet)S<kfEH_iz8
zsPsMC_3@*=GTB+ZN7#DJwu^k88<M%b&*tiq+{umG*M8fZQhn%ThUJ1ubIzKyO`Py6
SC2;P)f3KH*Exp(Iy$Ap})o(oj

literal 0
HcmV?d00001

diff --git a/build.sh b/build.sh
new file mode 100755
index 0000000..ccdcc8c
--- /dev/null
+++ b/build.sh
@@ -0,0 +1,35 @@
+#!/bin/bash
+# Builds Minamp.apk for Android 2.2+ without the Android SDK/Gradle:
+# aapt2 (resources) -> javac (Java 8 bytecode vs android-8 API) -> dx (dex 035) -> jarsigner (v1/SHA-1) -> zipalign.
+set -euo pipefail
+cd "$(dirname "$0")"
+T=${TOOLS:-$PWD/toolchain}
+ANDROID_JAR=$T/platforms/android-8/android.jar
+BC_SRC=$T/bcsrc
+OUT=build
+rm -rf $OUT && mkdir -p $OUT/res $OUT/gen $OUT/classes
+
+echo "== resources"
+$T/aapt2 compile --dir res -o $OUT/res/compiled.zip
+$T/aapt2 link -o $OUT/base.apk -I $ANDROID_JAR --manifest AndroidManifest.xml \
+  --java $OUT/gen -A assets --min-sdk-version 8 --target-sdk-version 10 \
+  --no-version-vectors $OUT/res/compiled.zip
+
+echo "== java"
+find src $OUT/gen -name '*.java' > $OUT/sources.txt
+javac -nowarn -Xlint:-options -source 8 -target 8 -encoding UTF-8 -g:source,lines \
+  -bootclasspath $ANDROID_JAR -sourcepath "src:$BC_SRC:$OUT/gen" \
+  -d $OUT/classes @$OUT/sources.txt 2>&1 | grep -v -E '^Picked up|^Note:' || true
+test -f $OUT/classes/com/minamp/HomeActivity.class
+
+echo "== dex"
+java -Xmx2g -jar $T/dx.jar --dex --output=$OUT/classes.dex $OUT/classes 2>&1 | grep -v '^Picked up' || true
+
+echo "== package"
+cp $OUT/base.apk $OUT/unsigned.apk
+(cd $OUT && zip -q unsigned.apk classes.dex)
+jarsigner -keystore ${KEYSTORE:-$T/minamp.keystore} -storepass minamp123 -keypass minamp123 \
+  -digestalg SHA-1 -sigalg SHA1withRSA -signedjar $OUT/signed.apk $OUT/unsigned.apk minamp 2>&1 \
+  | grep -v -E '^Picked up|^$|Warning|risk|self-signed|POSIX|ignored when signing|not protected' || true
+python3 tools/zipalign.py $OUT/signed.apk $OUT/Minamp.apk
+ls -la $OUT/Minamp.apk
diff --git a/res/drawable-hdpi/ic_launcher.png b/res/drawable-hdpi/ic_launcher.png
new file mode 100644
index 0000000000000000000000000000000000000000..ee82b4529b4a77532362caffede52604f07d4dbe
GIT binary patch
literal 5335
zcmV;|6e#P7P)<h;3K|Lk000e1NJLTq002k;002k`1^@s6RqeA!000!8Nkl<Zc%1E=
zdz4*OeaAn0?{nXGCdni-nM@`jhBqXNAg>ldM4_m~B2@%hR<T{JMHkYR3fNX4YOU!*
z9;+2lT53g>eaNzrhX#RSZN-{L5lmCaduB2-$t0PX`#xvyU;o(W%p;j3Gn0$rs^7J4
zCimQP&)NICf4|@Uz0QT7<L5XQs3v@00lEoec`YD-i~s&ap@HBhebZxrVU~+HQwd6>
z#m4W0uCC)&TI=4VwVWWr;@J$M`Oy7Ju}#En2m)T}>FKE^AH;v%bgwiMf($V+ot?*>
z3hoBr3Z>M^N*$}FzBUjMK(>ppMr-@GeSLi!<B!JXax_eLW&sc_T)40U(swAuZ)vU5
zA`%Y*%TGbirvalp5D^FRh;xlk4h#%zC!W*ME-)Q}0w7wnsQWSz{Uxncw{wp8;+og5
zfllB+9H>BRjdL=jl>6B3-93*m4M{rM<YLKLd=u!Wl%m@?8{wrTn8x>C573|j0Owq!
z6!XD+rL(j94m>%ABM8coBxsBrV}g5JEH?aXka8qAz-es)=b}IB@9(*tBdFWq2r_`}
z=;(TfF~M39i8u<=(}7l?l)s1o&W&#;3ebAov2p?;ubE*JAktc=taUdG4D5QC!>HR-
z6V?D-U0w5>GcPHn7K*pTv-2Yq7zI|K)(~o;pLk#(n^L4=Z^}BTHiXFf&(i_q(u$Pv
zWVz-uC7=YTImgPu!JXTP*Jk2LQ#pGIu-58N8KXO$bJ1bWJ0cQdY9Z{e35AT}<i&<J
zFAq3<iQ%|*L&scAG2_o~L@+q)=oxbSPp@Ue)`%bPvg{odvS}z}6w+Lx6o}JW=SAFo
zz`L13U=BW@0oUH%eS$G+Q~X{{^~EE>XsAa}stU_GG*_IH=6&a-S+O*rP*CIRl)RFW
zBzvNQuqJHjcRaDa!9RVk&WqbE=@b+*3hSDxdR8fAMBGLF{XNffkg6R#@z^jg`Ez6R
zEi;uKrM#WlUlO|7G{1X!mTTXdp|f2>1ogTQ#gkL<`4b@%W~~)u(+ZV_a!Gi6U4whp
zRN1iAGN+)>+S{-uAktbJ=iJx&`*&T#5eQNMXPtFc(AzukKT7H4-np8d?a>+{>!s$J
zw`REWnmpYLHBr^u9j*L16Cq>&!~-~pFejdblz~iMQK<;`ezV43exr(YLLsY&rsWSG
z5duny$fz;)4SjumLyYeulL*p)>+0%yvvX!$GUn;r!Dw$_(}Ci1*B7|{9T{xhA2WJ<
z;>pe>B517$G-$12G6ZY=Ur=K^UIJ^u7|0eC|M^nLjrW&%Ww&Ksu_+`urIdEgzGq;d
z_i-jj(Zn^?ejxhI+K+l#w>28dbzwn^=Igh$aQ&qj$|a#534!sG6oJSJT0x<pDb5YZ
z=QNRn{Uyu3QA@2M<T8rFoPa`$CKV{GlQFe3#uHo`7S2C4#S?e5a>1zq`%3;kO&~~s
zbK>`7OLK^Q(VFGcy{e8Sr=wN#*zK*Hw#+bkK*qLi@Y{FFK&~aATC#leg%aOdS7zh3
zIs^M7strMabfB2uVmNh4noHi4=kl`(babR}RY$e%Fh-&9?m?;K@A)scwQ}|9QJ#A_
zY=$H$rS$QK9Gvj~0Ejv}yZ=sW^BYGq&`NoAQ3@Wrt%dVWOEEff5II&T6b+?{<H4s6
z@HdYiV6^I3xh%ukCuTW)X_}5X0ZPGe#j&}k!MZIq*1cMz9tt10poLrB*T&LCX(}Z<
z$*@}onY7|S#qsV{BW&)o6tjMZn+2>=+K9Mk`ulfXLTqjlQf39MV7Mkc@Zlootw>Fh
zoWuhz%n5k%`=fm1Zw85+@UbiAam_`obhQWGNpdoIn>PvsMusg<t}F2uU*E^dk8J0T
zYv%L&SG7^EJ8a}7*J!B4s{PPMi(Gcs2%+`IrHMYktOyD;>?`@*>envGP#!syoP1Gp
z*Wd5qGhZ9x53g$D_7BXb*lMs9N2TO&A{?AYlK5CQfU7TV<?0Jt`0{r~xcPxWo`1Q@
zS3kapR7w$sg4VIRRfH8M1l;w(JU2a5W`0o-HIbkhhYw0YErPB#&8lnigmsy;+a%<C
z{J}x~^09q<^UiKQ^V=PyG?WfRR6~bS5EzAtB_Vkw$E-kk)KaMm*Z<O7*59{`Eqx8%
zeMb+W6HG8JC4qs;sPLh8W_iaOQw&%9&e<%?_)<oBU+2clvve)g)Ei#i0IU=8Erz?k
zyq7OLd4L!G>NqYvr^x8O2<N~UMKNzk8NWjv4hk^ZZ}p`E5y!O${NSEtj8q)I@~K`@
zDesLZR}cZE;npj21V%MAZkrK7Dvqs|wQH`sFhf`!UoGo|Lc#FVe~$90uMP3oCl+(+
z@+_kVB2q?;dD;K)oneMXErp^XvT{^=5g0|e>c|A}_+8y>*jnd~f7nZ|sBtk9MnknC
z{K9D|E?yBZT5X;b&FC^lL#ZbG%DHJe7HH~W?B@U}qbOAzAO6B1w_er8JI*gMIvkM-
z5=Rg+8O_7r8R4Sack;}J3dL4~F&t5vz>`#|Iyx5wJo5XCSpD_=tlv~4m(ye6hTx^>
z*WZ?Hs*#=%LDu=G`pWY%NHkfs(gnj8pE`hZ!Y4j3pZbU;(36cYBD56^ukH@H>NCCE
z^1vX~&`aLYq$x0p@`&Zq^NU=5R)M=79YP0V5dm65qb6LuBE^Y|4Aq7l61vO=(<VqO
z?-ZWcrCG7m&}hh5Y?U^OO3CuqPaNRpE9OyXHH6XB1B{%I%PR6&&An^(^Y%~d;_3C}
z=}D7PxQ6gY?{DL|mnyvYzp)gFw_BlwIjxHGPY$R~u#LxpX%nOr)I&IPc|g7}?zLJ6
z>73@d7b}cb9M@jdN>p)}BaAMI$J*xvY}p<1zR&bcOPY*^dd=~cQ*x|Wn&vCdjiAyx
zj^C1j!g(jBrcJ=nFe8FQ;It)XlK(9T7{!z8%Diz|hR*hYMmRn3j%*x%W!1E$$vQ!$
z6qlV@;MpHlaCL`?Z>AIw!6}P1`Al<?YttskIq!2E*KQ^yCACrz3je*W&e<ns!KleA
zI*sc(VcOE9l!8b&_oN(s`z(9*Thf8gHY&h5p>wXLHK(!m&=kr{F>QiGAe(}PbM>S+
z-)N{-E&T@~PG6D+H@iU{R+{Dpq+$XfmgGoS-kHKVp=T)ajw7C+$ike0W^O?dIXUL;
zjOi1E-${yD;uMo7&1glbCRFP}``jRw>)8!!qBL#o4|)G*`?&G$e)f!5v|&t2tb@4)
zO<)v5qZV{bU>x3M1ITBZ<1o(LotomN6IZtx5b?>kN<(<1uR*opyedz?SQ2ik@f>EH
zv%!plRVO|fp9qMGS1gxSqyxoB*&S2mOerss`%9L#qT$}(>EL(XH5VJonBf=k+jpfd
zSSPgP^dV{6$oeh68S6D|f|5ZE4htkH1?6)-#k^*It7da=1B{9r8fG>;6X&$|jYhod
zEk#y;sGXCJ%TO7eoCk6OI#BEw3~>V83j$o^vy~z~IX5&a>?=6}qmEgSW>m2VE%Xjq
z(BpoF6G3GRr*>ypx1}~_pJsAhqZJ3rmX@q$^$qRZbj3UrP#TU1%)u8EBv5SFT4#QX
zVNsi*5j&+$d_cT+#4-}cW5*hHOy3W}-)vKlofJs};Dk%wlxN+mHA=%iIGxV8jP{e-
zGaPZ@>3P<EdI>lG>U`>Tp<0tE$ce`yuy$jab56>V%9}BNNdz$P%5F!w)|`NK`hJi=
zIt3fIMT8S>u9YIH374N$pcV>Gt}Bzy>!YSK0;3qI_#)Zr8`@cO$6{6<m!>ov`N)5Y
zkvV}(TC=^U&i6J|x$dG?e0Izenbc{1xFy8S(%m>1Ga@LLQoOv&vbEolN%?Kmr$8L-
z9VxE9poP_6-;awJ^KK7@iEZkhVawSkW_fB=H#h(4e8PrMIfB%HcLIaF=I(zz!1B%%
zZ#yGTt?I@WE6~uW3g6olkx4bDus9<jOa(sG`o#JMIz2uBqZCoqam)MK*xcLT(PxIq
zwR$gj5)_P99nQj?*UsmuRo$F<eCCK!lfXL2=QOWut@Gfw4)7-*m`@OlC*G`sOh)m8
zS0i598U1wpAm<>PhJXBCok~ea#q}tqpx$sS=}L3gHS@XgfkAfkG<@wVCP^s>LwL&x
zS-!QZn_I72fH){uk1RD1?_3&0!LR+*ZZ3Osf%pDm3zhQZpja9B>htxnN^UbSGlInD
zgI?TWd3;@iOkNQsQlu4?QOoaL)yBmu^1SQL9vYF1k)(hq5>{QefD2dVDesREII1DF
z&QCTs$MD;C_tQ5N@uiP-(rAo}hZD$V;MHB0HUHJ1HK&?Yx1YHuo%HT}eod8XRR|{d
zX$q*<9bdh55gl_37u>Rw!2_0JtZo7{LZMO}F9aSAF0RHFa*9kw@tdFP<H_}9p8oU_
z+FG=)Y$U#s1Cv(Vy{5`gEZNOUD$bZ7C%y$`!#2ykYpP_63L6KnN`Z|ar4>)y)y@1?
z!x<ml&QmY=pfjJ<zCJI4brZVC;+Jzip=O<Lt}4z8*xVcP3xBYar#Du3_OnYld1;zT
zW!x}F7K%m1v+F}1`EET9Qm2@xp53lCD^I~Xn44Gp#W!la@KQ)|LfKbq2t&arc=A)-
z{MIkc;mS|<^4?GG;)Tss@_ApIFBG)zAPf8}lT!Y()__8*Vf&ttoA2xA%$v5eXkNhj
zdzW$Y;uPhQ#h3|s?lkNhas0u<<tZDPlJ}z(A&h2jn`Tuwl$Zz`3Ln0|%#(Mt(%!16
z)xCeDweQAoPWbePI=J%u7FIpFmrFm{!|6-YTy|!Gb5F{0d}o@u1;0j>y0BwU$cC+T
z)^05GADgNyUzp-6w=CkyUu+?22<57bk&{IBCQ#h;V2RDWmbRA3^?3zEu|M>-H>TLO
z+tD**XSBo3x;76!fwsRSTySc@Ki}3$E>KkK<J}g%-9;$m3<R+8e`|d8-$r@n#R`2x
zK9)+w6ShvU0t;FU=bn`1gBP{(&NK3;Kv60AV&lYkOex3}6t_K8=I+O9w6`AGypZJ4
z@A=IFzkYd^?K>=2eQuN;dn}ohnpo#=er+DS{?98azPl;ngR4h*_~s%DS~Q~-Zzz)j
zV5RC1;EXq9IOCKY)E)i%Exkh#Ln9W!N9Bv>r|6m=kjiU_glfg%4hk6}>(wd<6t_N9
z=DsItEND5D9Ho5UW5*oLFQ1*Ec0gFxZFuWx0Y6@A$z}ZFDg~{%!-q!4{KQUVp{=NR
z?&XkouNvV?A1$)-gn-JZ#0j-=2e48XTs6XIMSH8Ev(1bf1pyZcjYwz=``H@pE4eV<
zZB{HQhDID8d$7bmf4{+kmP0!_4z@GZhLB4sB=YuC;mNz|{4|w1JpJDd^4X~a+oseX
z6G__KXSsaU2oFA9^Xb#P_eYYZOC8tb{p$MAqFi>A%Z^ILQ4hx}rHRxe-_NBL#a6}B
z8$&Mr<Oq+w(4f6_GC7HnPI`_K6-o&6-nyb%6>fe{j=%qSEB|zR3)j9i!)VnJOu<Ie
z%KVXqVpb7axcQ+n@BPyeo_{$cpHmbH%J)jglTDmBpX%^0l@KE1=K=ovMa3)qmXG{(
ziTAG_VcX#04RYw<r0!r$N+xaXNu5!{+gAp-svr(7UKt#=`RWiAlViwpTjwX+R#ZIu
zQpmq=3b}Y?it8@Qa`B3Qd2^CNJ~-=}#*^K|OP9~*5ctW|E5dhw9P;RQ>#X@fgQ1cz
zx1h$7^M{Nb`1}odu6}!#=hij2{=U*!QSo5ZCKMKH;TVyJoO%dBO3A=1xEUX$`1X}K
zdB2r@dt=DAHiVqG$Z-D20q35S;*@Sp=UmO)y!U?q!U%?{!k!V!tGg}#wI$*|Hu=D_
z7J5V4R-C#=S}UkDgi{s=Tz6rXMpby{IT_AAzQ+2k(Ud{(M9I<$QA&YwgUQE7AjoVv
z7J?EaDl#YU@3nKUV{>1fho7yJ&nQ}Qig^V^K9dk6>?;c+6`@>9ylKc~lrI8KP`kq+
zAxZ&m7PWb;^w#*lQxfEh0pd2qrs>#wM;V_~Cglw+c(tn3JQ*(5fh37$G-GO%Jfm@N
z*5pXgv7MQT$1I=_2#osS_@VfE6V7u0nT+|7bJ80NVUuFwSoM+}O?+E#Cgtl_`LrUJ
zR$~sPb>864CZFRZc2FmLR}Obf06|2QvCfqi&N2U<TqZehB0&NKJ9g}-DaB)PgLl&i
zIv8UC>V(&^CfJ=oKJ9l*JwaNt6OJhW@yS0G0BLM0(9#IynHPSvbr7#PQ%VrTgoto|
z+`Xka)F!^}kfeiO?YBJgd<~sbeEWqu8@E}?HQ|eEYmiZ_dnsh?iwz1n#TVDsC{={L
zdz||6b2X(x?wM+VrqWac*o6z1JYtN#cD9d0{iKojK>{4V$gp$35?b#%)I;IK#fJWU
zj?t>`0Vq|4<qM6CoHE-6!hfrb^uA4GJO-P1-GiY4>F)0CiX!zgsFqlWUiXh;CX=a!
zG8T+VQdnpRslY!U;=B=;T8PsMnUhoJZrQnW1CxIf0GN8x4$wV4J-yD!?`o}*FTL(n
zP2yKBwl#^$NL(IIde;G*5au%4WCH$h%g&wanSvZRyi`~q7#!?*)H!>n)+WWz2uU!$
zlO5)m0HM|<9Yywm-rc+I#+#5SgN>tk3rUXXvs#<myy2Fg37d2nSU_v7m9_T%fq|YI
z8PEMpx%ks@r(&bs{UNRO-AbvJ_!03q>}yIB#cK({6QH!#+Bp{jxAyn%`aI*i^kFq)
zx|1`2?ds|}*|}h~QtAr-w2y;BpFDj%U}B-gXsz)-qrqAc_s0VRJwL$D>8L-QGm{C8
zJ%!iNvGfwH<pxlfE2Y|w)XenLz{K&0xM8LE4sieO-MiMtr!@V?O%fzV-2p6IxV%Ft
zdltw!O34W#bj|R3uN4MBwkgFA!%%;J@7|re<KvUY|60P(q+s?ZgjtXGSZ#)4vY~#>
pS7w?>vagAOew`@)&+-2c{|BMT=YN}*%)S5s002ovPDHLkV1mH=g5LlD

literal 0
HcmV?d00001

diff --git a/res/drawable-hdpi/ic_stat.png b/res/drawable-hdpi/ic_stat.png
new file mode 100644
index 0000000000000000000000000000000000000000..978932076f869d5b723f1f97276eb5b5d111aa11
GIT binary patch
literal 1624
zcmV-e2B-OnP)<h;3K|Lk000e1NJLTq001Tc001Tk1^@s6s6FYf000IbNkl<Zc%0Rk
zPiS2C5y!tX@Auxm-N^qAsh}wdg~kxuk!sYM6cb4<CD1gK%E|7<p%5QZ=(XTNTc~_Z
z>8ViY#fO3~+G0af=%v(Fh)E6+t|i-P9Yb(%T^y5Ik>uTd@BM!B?cuEyN!GvJq{W@n
z?&H0g&zqUw%)AlwDI^pZ#}oi??@L6zNdQ2zE_nQ70RW6on+U958@<2?FO0dKpSv*T
zNJuZw?D%F*)gx&%!}9;mpAJ7GX3wc|$P7=B*b4w6m{-LuGnu98yXi}p-``Bf=K|v|
zp_l|k!29Qi_wGt?A_V@Bz(}PUMGyc4U}Yqsg5_&jI|Kn{qDX$fnB(lei7WFY1d|Xs
zy>*DU1Y7lnlK*k|#}eU`tLT#`h)!lOG6+D(Iz0plh>ApMMS)o0Gy8}EZzSKp@>>Ah
z&U>4JEkD@$!!u90G&vJj_1mFs$P4qOO~`gH27n|8(2`hPR8<sh`>XHdCu^^~e`_na
z4HbU|b?|6hbyF_UFSi!Ghe)LBy|Y6xf*?a}mvcV1J4M?!YOh?ov>Dt(MpmHC9r{+B
zMt@PFmgVL}r03JPk&yJ2M4bs*MJIfxcKqr)8^NssTTb-Wxo4kn6@4!f3}(3n6^XtG
zsAVxSR1%E>ao1<|joR_Kf380ex(4!KT`&nzm9t4j2lL$gW>6$Z_E$VrB+7I1Nks=$
z<t!$<wpTf71&pk#G@79`JoI|H$BniZ{ifj~fg~2Grm9Bns4lG+5pnHB@6$bQv^6~R
zx-^=BtgrA$*HB6N=dbPRWVIVEk;jXIkhLByp#X~$RiE46K`y3y<8QX-Jqc1p9=d-k
zAz*PV@Hy|LmDYZI_vT^=4VH>7jzuD1$5&rXcSnPHZrli}tB%eI0DPE!oE-Hn|Eo9=
z)Y3>v`d+{U&^$M$yQ9I5uf8e*;^J5YEE^x64kUyoCsB~HeRTrCs{ClCh`%>`s>s4I
zA2?gx?Hmajx#Qdu0Z@=MIY~k=J{<r+NvH^zogaEy1&6baiC{+|F%rV72a?+HtJDAb
z$0yI_?eIn%_vSr;Xx1@N!Qt%u(9<Fy30)aosCKkci_}VmJ1U|gAP!#loI>>EPj0s>
zFU|h6$b0sl80jmuNU3%d0B~_kb>_xW2|*p+EUUH!Y#<QjNYuCYw95cs=Ejof$i5i^
z00Lhv)%VwO1fU$7UgJG_8!rOqs(WL%rBZ<)uw(!*vTw!|b(HgpaCi6D=MrfkEDw~)
z59Z#A@68`69)w@0lQzl$X=5wwG5|n*xm<j~BJ!DWdF@sQ<i8>0>g(HyL$ez?%0hoZ
zTq|UmEh5u?v3Y1Htwq0awP-Y3@Gx$1s-(*R08NO_+#k{I^$!sV!2SZdoctm%5g>na
z_*A79z3ZHew&x4at)K`Zl9B<y%>5B{Bl`!sIc8U2{S6UQQ;4L2fMe7C!TD!Ll30K3
zsydb}1+)tbI~tj+%K%_x{{S7vr>*4DOIa(Jia2&taXVcE1lJC@M&o+^-tR`@p(l!;
zLGW|uByKNw4@e~2k4#h%m$ib4=_LTb__V1=S-~q4vmY37xsoc09kmn{fO6=1{@~p3
zk>RftZ^zYWG8Bm0?GQx7$qq^nL93)nBQ94aW<MYyBCs`0T$E=Ji*UOvE5Cv|BqV!t
z_;ga?+b+^0?FH`%P_XmCk^~Toi1N(pCf@(plZERL`6S)rp6`6>K``_Jw4!UPv8Svr
zb(I%yE*LTCs*%Dr4yOQGWQI7_18GH{Z_gK@S1+xI(OflBBPQj=n+rf)muubX91u>`
z71x^Ve0}IbIuMPvm$sZ@+1*R@b(Bf^>VR{drSMkzx7lMjSQlwD4c*SLI#k59CNT+`
z@kE~4-6T=B+34I&?7pCk3`wFc&+M)lPhhfZdsVwylS6VEhGtzKdwK45$ioB$tu)c7
z*U5A%A?edZBMMp}4-=2QJa-$-x~^XtJe1thXa-KzquTMS?-VWnf&q7`1J0SzTc2G4
zC_i}3%J3O*r)c>XHv6Uo{@+#v>*4SyEmc-*Jc?_mHGu!)#a&PGNUk~`GWK6y4*v&~
WcJ3n2An{=U0000<MNUMnLSTZ11_k{9

literal 0
HcmV?d00001

diff --git a/res/drawable-ldpi/ic_launcher.png b/res/drawable-ldpi/ic_launcher.png
new file mode 100644
index 0000000000000000000000000000000000000000..de70af6b798cbeddc3c38f0c4972f067347d5e8f
GIT binary patch
literal 2363
zcmV-B3B>k^P)<h;3K|Lk000e1NJLTq001Na001Ni1^@s6;Q*MJ000RBNkl<Zc$~GE
zYm8l06~}*TpU2#}kGb>cbf$D#8d3@bd8B}dB)kGxh$sdPq=JyB5G4>rkSLNsd8Hu`
zv1$-W3ItO^l(a!&cnB1t6$Bw*dBiGA8R$&g>CC-zpXZ#tmmkiZ>9oBwK+u((4`-is
z_WJL&*8Z=xw=lN|-~kHQdGtPwc&&L|>-kha{=cQI4QVrG05>o&uuvrYCdldF4gv91
z+v<N3QNS6)Fz}*tvSDm&`+KwO>s)|5zzz;B`JM<jiI|0|`{*CI8c9F5*EsMG5m0qg
zs(R<>=*TVmgPIM<1MI-S&|RMAU8Aa~x&%aK>lsN$oI+wjRS^+<1IB=A`fU!;R6~4Y
zJe;!|Mn^xmn7w(W(}q02E?Ttsa*^OS&e^y%X7&eCX(-JYIz#Bm8v;KCHd$4w4JGiP
z&?z9`=1yA$Vq?6}+T`}Jv5_05F-)&s7cE+}K-K>jNLR~yGhloJ)kukBIB|u~c_)M%
zzuad@pCJr{I8k;?I9_|t^293<FT524P{;_${Gc2lBId{)JBHtBts5Um1_zh?&=_;K
zb1rF(rLHqDQBjT<^0@KBEa$8Y2t!GUU}ib3#{-wZ^IKzXeYD1wcN6*wf}I;wVvO;f
zbL&P&Ke!t3{nk{da+WH}tbFlI8jABy2>I0&Ir@r*MqNRK*eatF36;7d+hG{!_Q+%n
zapE}RsDLjX*2Q%XR9XLQlkVJ{pp2?2a9Zo#`s^jWWv!f&8P8Oe^NtVMaBYDoQfv%~
zgWo<e$(zGX!axWEAxWU#bSz&Ku==zv`a>UQm33F<@jc<*CmSs25|RVyRa6mG7B64E
zyldOGZDoJf#~GqB0`*8ae6h!`ugKACDq$$RIUKQW(;iMZypwCb*305vpCAy_Dq|(f
zGjG(me*G@Kb!L&%j?PjoTh?Bh<?WG#E$=4eJ7tbUSJP-Te3+Fh`@j}x#&FYxS$d0x
zIEH@?N8I`Qan@YY&ml`guu5Ealq-(F6Z-Ooi_a>u>bM-&-@g-Ul{1db;hf{P)j7Vj
zri{*0EQ~Sx?xfk?sWg-?tngX2GN4&k>XGt`O%vRDNk4}y4jA7Vvv$KcyUUKQqK{K0
zwosW&=*=1KzI=d(pDXjx?wBMNj$7e#&dPvtUGWaExS#!YfSNIU<%EzR6goN$k8Un=
z;$az<Ee)xZ9QjVeL(i2t<tN*D;%`&r3Lb%%vT&{LC>A{~IH|yc&y?xt6i_(-#BhEj
za{;n0CB5U9`(PoClsAT(oO@i3q-yc~lxzD69wWOGE?T>TE7y%ts#|h-56=kAisg)>
zvwXNGVRF)f!ZFKydh%@(du~7?kT|6$Zy4$`ATTzO&=ClOy*^R0S2wXrCJ?%^hWno?
zamG(S;7>1A@O&Y*kj)tuba@Q#jKRRdF2i8AA+nmX-zW8uDuh0C1S$Pb)f|~X@B%^i
zt5HtDIc2ch<NdLOb8j5sk<DeY89@bd8KG2jAVT0nrp+853rI+7Q=FtFJev`sL~)6x
zWp+Q0`kt_>Z0XJ$?)$+YUp*;Ly_xnYjY!F5(i}=GL`nO8XSVFK?Nw6)6II8K31w&j
z4D|Tan#%5yr6+G@7}qmkowB=ZS#?~FwU_m?Vp#`K)#4m9>yBL|%fbBtIAwgwF;=n!
zp3K(`9Oxm>K(zs{y_bN2OsC<{MInEFqehVPNNl<jCu@$5K)C0Mg*<k{K^(d$pi)YR
z63FBXTi&VDllNHA>!Si&M=ax0O3;@1<^kjs0w4bPN`$lNN-sLCz|*f)*|R4hmo-!x
zj<b%<@%-&ex%|8y>J3f9BtjTKk|@7>eu|4v?;>g{V&L(=NAtBK^8+emgcsh5d2wq@
z7zzuDK9`<Z<l6gpQmQ+8dwuTyc0Wff2`TMKP)(b&T;3qQ@T2>7a`ws`E0%_cDDP~y
zY<fAO&?&97m^+u+^JYu?=0|HZVx?YpoO*PY)u(rH&Anr6`fG)9-QoE{vD+t?Hz@GT
zYgN9#Zj6(U?BpA#7MLnqf<U<Wks4EtG+d1sc9#{KZoUJ6wT-BAsh76AoABfHRn}dZ
zr&@NLd2Eg&hC&{Arp!~XR_QBvWIKgsQ`uFv^yUrMUC_&lr6E&gOQFx>j)$vkd^uua
zQJAX3Q3rc`{p65)9&a#FQGAbmcxlcQOC0nSg!Ruh@jYSfrCD%Ff5GR5)qPA%TDI?s
zDc2mi4#SdupZ;E-BvNeTDC7-yJY40D$LjPJgeXaC<d=^RxazVTPyQq3)qf`xv%>Bv
z=>IrCkd~3|T-wjPJz`n2I?Lx*_+V2u?<r)`perqwRQwR$8g|_BXpN08Mf4VgIDvzD
z43&nZ8ACFq#0fljb)I6@aQ2$XwjOHB4%WefE@8{NG3Tx+v1(<=`6q@Pv&?5<Q3$-W
zK8;r#Ten*te<kAamm{VcN`IG7kJA62yQ9cmf2dKZE4~jMAuQ=L6tjlTP;`4qbQ+KW
zoQQk?vVu0`p4jvx;S@H$6tVH8h@QMK&~4}lg*aArmK@_#n&w|tC}z{PHFipG-q6!6
z4D}h_-{nYLYNe5&9WkO##!98((lj6saNstJcxSfy>b9POG=u<g0`HAEoJ&he;HMxU
z-4xcfj!r;qflT^h4ETj~amB2-V%8XI^+iBWJvD9eEr2oZL2Km(5rS6u+ET?dFe8u&
zm{C*ZfJWXaboj!^xa01JYCQdV%y`AI_<<U)|0mI3JW<CthH}~7E5PQ>`yCVq2Zw%U
zjDL%BHUfgVKz&+Kg;GuF48a(o+EBW(M9tU>%eCZ}+W7FQX$;fE=m2kYbmTVY>?6i_
zt@cin);Ikuj|kdV5Y2?*LXTuYm$<<5!$QVA`}6O1Udv3{?CXJ<W8dK5&}|^s8e@X=
zj1Tif@ss$7>5B#tA)Qm#<?|iaZQHi3$=>7U0TyO%A_fMAJ||+n1A2-oOGMQB4A(J$
zSP}V1gugiF){l*iygbY1oYyha;xX&ithaZ0S3Vzorb{dl(c$6Y$^C3hr^6=_LrM$(
hlf<4S(^S(|{tKF8Ddq{Y;9vj%002ovPDHLkV1mqnk8J<|

literal 0
HcmV?d00001

diff --git a/res/drawable-ldpi/ic_stat.png b/res/drawable-ldpi/ic_stat.png
new file mode 100644
index 0000000000000000000000000000000000000000..d398f32f75b8cf2f90f94fabcdde314c87af199d
GIT binary patch
literal 732
zcmV<20wev2P)<h;3K|Lk000e1NJLTq000vJ000vR1^@s6a!@wR0007`Nkl<Zc$}?N
z!HQf}5IyJCeLe3@r`0bo;LbG82r7yQ!JVRJ!azTSA&YEu;|~ZzX6ee6o2=bPw+u!F
zag~h-K?SE}MqKI_sGXkIuivYCT%@O`yOV`r?&?xhojRvDRlvrR5H@4vX5`U%aV=pu
zFmmKS-F_k4eR}?;x8WL-t|YP-q=^DgEvB!I|LlBA{@iFdFqR`<HeCZMNB+-n=e45C
zPh%(Sf&f|pT4Y870@`^xuBQ6niE{k?Dj-*ZCc~X~i%a~>$XLzX0VI$C03iTS62R@;
z%%!%vuN%E`{P}r3&p*>IcV5mi{va3Kl}K7A5_Kaj=C)LkB#*{GqnbvqcCU}`X*e+6
zx`lAqzY?p=e#r}awyN9%X(XVeKejsIauQHC$pdMtfJI?8tNgd3@#hauPFn)N?9R^H
zTV4CQnzT;RB(+5^#%j_YK%vbF-j2qns%hH-v~!k{yy!)%r~Xd9H~uC7KyvIarlNIA
zXlr}_cz8DPSDGe$SM*|xM(QF<Ae0>Y02W@M`e?+(uvff7X*jSa%U^%*ymkCWedZs+
z@OLmI2?7}&)TzG$hTb}-6?Wywb@ytnyH{g=ZTxXl=|;>#Lqba}MDN11!UT_S`O-G8
zk7fW+-PwIFi}<K*QYL{Q1TN|?z<7d;FQHOelS+~0$p8A{xo5Vw_(_(By;LV8f3RYb
z92to-o-Abs!_lJ08b68k+0kx!scS!Gx$RZ=Tdx~wWmgG-!EgiskJV@4us<Nn)49l-
ztt&-ikmM53$-?E?T$(r1CQvkn)|EuwWO+J2><<`Nj$Ffmb+3=_)l(f<q!+oFB(Iy)
zfJh)DAxUbJ<lDKKMS4Be!E%+#kw5;cu?hHJ?%9j)KYY&~_SOHmwEqH3+QoU*NfAc?
O0000<MNUMnLSTaFiD7X7

literal 0
HcmV?d00001

diff --git a/res/drawable-mdpi/ic_launcher.png b/res/drawable-mdpi/ic_launcher.png
new file mode 100644
index 0000000000000000000000000000000000000000..edf9e1ec4cde721282f6a50fa1561ff041606ed5
GIT binary patch
literal 3371
zcmV+`4b<|9P)<h;3K|Lk000e1NJLTq001xm001xu1^@s6R|5Hm000c~Nkl<Zc$~eO
zd5qoFb;m#F-rw)-^TuNjo*CO?6L28xkWE#oXys56sM1o>1VKb9REQu%79{}`qL8qO
zw9SGFati@MX$>_|9TlgfDS;H3(gq>}f`r8^UdA(iGkCVQ|CW3D$M3!88ROZA$&sEk
z^PBg(_xnBP+_T*gmL}5ryq}`2&k+*=Z0qy85(9WFLRkxa!2)snmo;nFWP`vAc%Jbg
z`0XIROHxFU3q_ixQmIs(3&Wu@AA$CZseysDpH+3A1^F=0PokZL-d~EeT_yq@1KA-W
zk2af?E#u?k)67F+E&vvY`}zhyZH(M5A}6UP`=}mK_k1@XNsgHasJdOCH;jx7Jv;;J
zEC7ciV1c;5f6X^V?6+E=BMu(m_xlh7I6y_j6A_$qckbW6_v+T(ju|8l1=9g<jQ1_)
z;<)u4Gv97TKw2v~O+K_<GN!fbjOR-v5*uUvIF9Zvm4>e15O<nMpap*Qxgy?UsxD-K
zNYDmXYbuQ}d6w}Z;|mCc5!3?3IY@bs&j>~!c1t3mKxm9f#c_ODsWf!oOcFD}$%!YP
z=pQ&x{<Sf(UR7h}2%RE{*30z-+zEr0-~W)$8OM06?=$oil4Yw+*fkpS(w>-SUJZHv
zt(ZorbmydFl|_mJK~*QMjgK219v*L#YZLH*XywW^7kQq2$T>GBcxxbxp;A}QJi+72
zbF=*MsXm1kXkyS7G7;(6Fls2zz7cWv&l+rdE(yW;v=A-c8j&%^i(_{~skHa@Hs&^g
zmir8DGsgT$i-33N3f4fiq2x2d%@^hP%MBT<4~?4A3>6Vbd4g|~WusULBE>2Ao{-B3
zSop;YA=f@o<&}Lg%kzsS;Y5r$=Uyz8_I|kaOxsaK*R5NZX*Ap$BC;A(ImGv^fl5R9
zz)H&xHx@YkIFEW+2_q$w5>f>Vkuo_QGhU8y3OxnGilPT8A*wlQO@|dBUl0yVIj-1L
z<)_aF^em2q0-~x--{;t&p`m>wo{Rz9;Nak~VaRJOYs?~G4OE-T(MMVS;~Pa*tuT};
ziZM#QXqlXd*|NRNuXZ-5HXSK1iQ_?}q&?x(qtje?R*`{zpZau6<RF_8j0a!%UYV`G
z3|P@6M04ibgCs;mK+hT(*}EOE9XE-h$OrFTelL>vd_FBau(8kq?|G2Tdu)DuibuAW
z`RE7JT=vOs)(`kB%UMKVy6)ID8uG-8HLl!L;_TCNeECm%2%3&YprjQ3;mQKL#-@3B
zPedUj3q>deB#tH3!PmCHs#U9wch0^#^NVfmPgIq=F3WT2xf#lnE$~^xwfBxPUUuC4
zg<e+o`)J(}M%n>k4WxX5jA3FT;?{=`Fj;YIx~dOU2}3C4gcskA_|(nQ3#uP*B4V85
z6Q$CgCtF+0Eyg6F^33BsF4>TwR!-a|n>So{?<iScxbOM_`noK&$r!PT22~TwIfZ&t
zsZ2!VJ>k0>`}xSRX|B9$KfZ60b5&DLJI>?M4QVE;dKe#=U*;vyj@4J4m&NlSjFf!Q
z<Ds8VCz`)}CFSu5vGDxc4Zi>5ak5!MHZ4SPJCuUgB32#^`O<|e=<o6P-oK5LEm~BS
zsG)rEoD6--3_-NCT4hcGMv@GB!Wzrjr}{MONwk@mh}g1yn%gevC9JrlS+GLAsa$i<
zD4)4)A3OJl6uP~nd}z6o2zZ`QACI{4;uSpoN}acMH_2uVjV2tu%5u)>K9#y+=2h!r
z2^eUEaOQ_R@&%z0D(QmdN88JM?1NeQ27H=<OOlm>6<AiZ{A@>+Pu#GVyC0n(n~~Yp
z0ODB5<Sn26c%BEJoW{!-;#T6@aEia=QgKcK?W*~VWBg=u0V3tOoee&DMh<N%#vI&D
zfhdM$c}pWuHr_MJ1-A{eb7Y1!wB=59$JwXl**P2#R2{w*G=!7aT8h~PBhlgrIE73K
zj_o%PCmD8XDyG(StRF}bg${EVZN*Np7J6IO*wC^@E^EkT1XTz^Wz7l?YlWe)kW5Ml
zBW0k+&|5Tw(ZTBWJrhucv?uiB1$ByVg#(os-xG>CGjGySP0EO6c}p`=uDN%Vb8j5t
zg}0k{z9b~mLNRM7O+^?l(Rw~Di3L;_?MVwBmzkPSZFMw@TwPH-lUQ@#fsjhw(K<58
z+8lJ%_V0^byDjf3*k&#k#!9u3RFzSz^yDo;q?GH9Y+5=I=CBJ}p<H)Zfv;Y$oUeaw
zIhnMfUUzs#aG_FeIC_g7E>0p(GfeV^SptiBqfkA7U1JU`1hLZ7ZAtsWuF(+R6AsrN
zTa##UY%1d9bt$%eb2YbIdQ{T*)DjE$9+V~`f=C(c^=Jl(i;hk?MyDOVU3{-FCjn`7
zPA}~W!6flqQb}R<#EUg#M)+%sXN5{bX$H#mf3bqcZyDqdPRdc4if}GbO60)HTAq5j
z&e~p|Y|#?Lit*vK;h3o<X5+b|kb{&D&%729HIgV4)*Kg}RphCc>r78Xv#g-N<aETz
z>(U*qdj_gChi9eZ+Xir<vh{x}eEyHRa7~whF!1zmLc(}y=V0D2nokQm-irCvn<1Hu
zP;WX0`hCthJ;%)tA0XZ15j#ZzV}!3<u$=$8b<HfT&#bnBNXhkj+_80><5u~ca(tFr
z-I4Z%i3!JJJ3{j5Ba{aqDJL4C@{j-7KrC1z)TU#;^k+RuRk`H=-F-gIhU25hruok0
zEAeEu)|JE+okDS?&(_DM_@7tneEp(c8kHDTA(a#U_341uhhwrS4tuuV6M@)4cTV{C
z=K`L3Atawqv=cNOcU{%Tb8j^G+NKg}psU9t3|uEaw5w9z3i+ZXlM%l2&+oALzo)rp
zV?UmOID$+XM&EJV`B**a2ihYU(+UW`4FNbf$-3r&D&td*Oez_d7*&3F^#IGeEEoOF
z2>1SEf}!!4lqcj1hJ3-0P6?%{h=+eZ#f9G<VZ0Kv`Px-<XAMD+Bo#j;T=!s=-D8fl
zpO99dTvMj1O62Azv0y_3;29XND(9Wy^T>5YqDX0mU@c_3EN|{^@-M%b=JkC6#wHoo
zv^ugdQq~^jbMYT`aq96|nw6NSHRsDOGkkk<m75-^)7zEw#Ue=&dHwkr)(=>|@<5G7
zsLAjQoHDziSrmabiHWLm{>M{ny0SnqE0k*rs^qf<lQD$Vn7v~WrKuQIrMGAqY=ugi
zj!NC32-y^PDdF}<YTUjxah>)a%@CI5g=hbE8Qpz`&)hi0w&wy?6by|>T{dNA5tuU*
zA1aZ9p1iR2mjS!SruqBJ^PF+KhieG6h7#A3uzGZ#&oQf$mQ`b=5h&9W5dx%BLMkhi
z-f>+2V1+GD2c02U>|nC0SOd$ugi2j0)RbBSKDOTD?!WHh{-4yj@5zAP!a?13&VZ^e
z7=0rLE4qZ2_C%a_%QRoRzsjz$m_nD(-EGLFl9Hodchu`HnM(Lj>@sw98!8QD)3yd1
zzA?p*o=GMVkd)!Mv~bP&Sw3=%M<Ynw(|S-3l(SFsIr$Wy3w|%1lr=NmyZwXj`#})Q
zJx=V9h@p^4{Pm7)4IbX!<ebw}Y&gZ|q_vh+J%)TbS-%k~d)`rAACB4nn~<OG2zh-t
zCZ9>F+}I^^kjaYjS7)cWbz_15+ur2j?^inei9is7t0~o{iU3x%bGzcvDh|Ui+^=fK
zL`?reS5&b}OxIf!>H%zis>$Z3nsnuaql$*^Ttc80C}UHO$*K~yMl-!#NvNEetQ1(5
z6XLRx@`SW^NG&8_3@U;+7l&Cty}SKtn}8V^8L9R44L&a-pHfw~kR{q3m^IAu<B<u+
z(19ct8YB3Y&M-Gt7Bxl`Nj8XGl1z<2tf(=9bG-WNH{aST$&%VW0|r1<x3>SV@HQ<X
zt&Q3mO?i+@3Awb8_UVk%BR7ABovbOgO9<m+l#}wo=7d_%3fbM_VkgoJ_^}a`)&#MA
z24X<sxV}Xsdy_F{pk;+6%m)q<TFN~}97C~HN*J%gv#*9sRFtdlud=Gguye$5pd4uN
zj;cJdBdCXUe$c*4fx}#I^z{vX&RVm@ITr%{QVF~lX}i~SP06GZ3zq9i7Vgdou_LTD
z#dj|HYNI^--8R-k33N#G_YdA_jQz56@q)KBN0NlKNg407Q^jiRh^(=`k@%r~!+SsP
z6w8czvO|G&GIL+wnoZW)D^wL#7l9alr#JQLz<9<OoQpT_-@o^g*50#j@(%~54blw^
zto@>@-eipFPlzaoE^ve;>FY&k-A<NO^_Eg;=<jA=UGSQ97Ky&TzLmzLE(7^<=k!El
zB=<gnPtd70fLBy`6y%>ur9E#m2Y6W69cEo=u3o)*jdOOLbEJ<L;u&HLO;t0rfB&xC
zGak?TuLg?|VV?2J`zRiZ>{pf|?SuS&in4@r_WwcXPF*|*WxD_X002ovPDHLkV1nxo
BemejF

literal 0
HcmV?d00001

diff --git a/res/drawable-mdpi/ic_stat.png b/res/drawable-mdpi/ic_stat.png
new file mode 100644
index 0000000000000000000000000000000000000000..4c0077141af6fe4c179bf519a0597b7a347ba6f7
GIT binary patch
literal 1235
zcmV;^1T6cBP)<h;3K|Lk000e1NJLTq000>P000>X1^@s6#OZ}&000D<Nkl<Zc$|$@
zOK4nW7(M6v@0~kyV_FMEEWQwYQQP>4iYOAR=&Gd^$w<+Ky3my%2;DYa3NCaZ6a-hk
zm?-rvXd$T!soGN7()d7P>jMiSXw%G{x%dD7<6@FDnMtZ2GrRA6=l>q}9N;3M*0_^k
z7tIl<*0{S^4%Y%=0^~kK0GR)D>y<U|Hbq_+fgyuBG2&;Ljy1NQoL$6BOo00qFv}wu
zAlM5d5do<B<kp9z_`E#Fl7<bz*n5@$M4?;6vixM^s~GhvdGcKVl9uqRce0r9_nTWc
z)YsXoS&h3vqAUV}6d-6Bl192LGr$pLH+<fn<FgxfA3v?uxMOoN43KCqjQbGJw>Dp%
z<mne#?zR-?s$QaK<lt!4`$Y(9T#_Wd48MnY|8TuIGqb!STiO8t9k}Jvq>&uVYPO~L
zr>Y1#f^MPUz^n<7pd*>I=e$qMuCP2kShPm21tIP2)$d)-<hXGkVq0;4Hk904%=?OD
zy6^zhQZh?uQ40M;i($s3T?C(Iwh1-7f!4TT0uVr3oL}+Y$OHM1d#v+M<(CmCO^M3K
zGo_Db^7W|`6yoyT^b^f_Umte&l-c)BkcgNXb2f>|-h7?*fKXgMdnzWG0pO|1YIjsc
zc&Cvku9lE%b!A4zQt|<NS}i!-e<%<D&VM$#$#tt)N7jR+#e)zO8V%=)PMFSjp4<ii
z-4C|zrn8sR%q}a=dk@eJ9EG4HC8O8v*{&1E3;@_I@2n45-NzWP+6O8`3Dl9%G~0Rd
zZQri$tUBR?#wAHoOG&9eT_MRGV&uI`i>G)!T<_4<S}X}+^k|rx8cXu#%rCVaCw7&c
z_>2r^%|YtllLRr|c!2~QUaNS2Y}<Cos|Bal=32Jn_-pg$<96qG&N)bZk0dm_L?WR5
ze@S}Rh`{Dd+4*qf(V^Vlib2C6fb3TgunjC|ml$Ue3<9{SVq)QgJv!>xoUG2hdBeu~
z`o@cC%BK;4qS7Fc6vUsFNJ`le*Y;IHrm@%ZN(f;j1RSk82X5JAHNBi>c1<zoBS?@d
z?SP=gPGrS!7ywLyZFuDP=@9Wvtzi<hQa+48WT8**T33EN@_Lr@fCH~7=Da6q#7Y7I
zF|CoEPB{H*r6Uq()6-)H0M6+pIC6#3iss7*qi!m?#gQ~mo+{cQb}L1a12zEwii)n`
z=!jRgG-paok2x;P+W@FIF!DuXoqMo-&U>?7kp=C75h%(Sj9k+NqZIOnbDd87?$0tG
zz3SBAE+(K}s}sGXMqN*qMff9cxFkmT-u{5Hk~)>*e-YGDb3R}`0FPhYJX~O6FG%Qu
zpDgHq=l#u_ElCfinQdw>&Yf%fynv{vnCC9>0rQ=9wS9Q})bw)WS^|@ZYQfca&CImt
z{C#B^zs%PsNuzEiL6Us`KMJa+w0wP%_@EPI+uz?$0IZ@@trlFfi2#7zk4By{!*c|0
zb#;dU)hUI_>qij#&;Ib&{;Oa3t>`CMl?1q8#Y?q5zI_x7cPr?68HX6vp>Y-ozfL#0
xZ+XYjYBk({h5%}6Y}GRz$ekKX7A<_W_!qyge&K`q7bO4y002ovPDHLkV1gqpT>=0A

literal 0
HcmV?d00001

diff --git a/res/drawable/art_placeholder.xml b/res/drawable/art_placeholder.xml
new file mode 100644
index 0000000..19e3f44
--- /dev/null
+++ b/res/drawable/art_placeholder.xml
@@ -0,0 +1,4 @@
+<?xml version="1.0" encoding="utf-8"?>
+<shape xmlns:android="http://schemas.android.com/apk/res/android">
+    <solid android:color="@color/surface2" />
+</shape>
diff --git a/res/drawable/bg_button_accent.xml b/res/drawable/bg_button_accent.xml
new file mode 100644
index 0000000..7a1643e
--- /dev/null
+++ b/res/drawable/bg_button_accent.xml
@@ -0,0 +1,6 @@
+<?xml version="1.0" encoding="utf-8"?>
+<selector xmlns:android="http://schemas.android.com/apk/res/android">
+    <item android:state_pressed="true"><shape><solid android:color="@color/accent_dark" /><corners android:radius="20dp" /></shape></item>
+    <item android:state_focused="true"><shape><solid android:color="@color/accent_dark" /><corners android:radius="20dp" /></shape></item>
+    <item><shape><solid android:color="@color/accent" /><corners android:radius="20dp" /></shape></item>
+</selector>
diff --git a/res/drawable/bg_button_outline.xml b/res/drawable/bg_button_outline.xml
new file mode 100644
index 0000000..bf75639
--- /dev/null
+++ b/res/drawable/bg_button_outline.xml
@@ -0,0 +1,6 @@
+<?xml version="1.0" encoding="utf-8"?>
+<selector xmlns:android="http://schemas.android.com/apk/res/android">
+    <item android:state_pressed="true"><shape><solid android:color="@color/surface2" /><stroke android:width="1dp" android:color="@color/text2" /><corners android:radius="20dp" /></shape></item>
+    <item android:state_focused="true"><shape><solid android:color="@color/surface2" /><stroke android:width="1dp" android:color="@color/text2" /><corners android:radius="20dp" /></shape></item>
+    <item><shape><solid android:color="@color/transparent" /><stroke android:width="1dp" android:color="@color/text2" /><corners android:radius="20dp" /></shape></item>
+</selector>
diff --git a/res/drawable/bg_edit.xml b/res/drawable/bg_edit.xml
new file mode 100644
index 0000000..791d4b4
--- /dev/null
+++ b/res/drawable/bg_edit.xml
@@ -0,0 +1,5 @@
+<?xml version="1.0" encoding="utf-8"?>
+<selector xmlns:android="http://schemas.android.com/apk/res/android">
+    <item android:state_focused="true"><shape><solid android:color="@color/surface" /><stroke android:width="1dp" android:color="@color/accent" /><corners android:radius="6dp" /></shape></item>
+    <item><shape><solid android:color="@color/surface" /><stroke android:width="1dp" android:color="@color/surface2" /><corners android:radius="6dp" /></shape></item>
+</selector>
diff --git a/res/drawable/bg_play_circle.xml b/res/drawable/bg_play_circle.xml
new file mode 100644
index 0000000..bbbf4e7
--- /dev/null
+++ b/res/drawable/bg_play_circle.xml
@@ -0,0 +1,6 @@
+<?xml version="1.0" encoding="utf-8"?>
+<selector xmlns:android="http://schemas.android.com/apk/res/android">
+    <item android:state_pressed="true"><shape android:shape="oval"><solid android:color="@color/accent_dark" /></shape></item>
+    <item android:state_focused="true"><shape android:shape="oval"><solid android:color="@color/accent_dark" /></shape></item>
+    <item><shape android:shape="oval"><solid android:color="@color/accent" /></shape></item>
+</selector>
diff --git a/res/drawable/bg_pressable.xml b/res/drawable/bg_pressable.xml
new file mode 100644
index 0000000..c115f82
--- /dev/null
+++ b/res/drawable/bg_pressable.xml
@@ -0,0 +1,7 @@
+<?xml version="1.0" encoding="utf-8"?>
+<selector xmlns:android="http://schemas.android.com/apk/res/android">
+    <item android:state_pressed="true"><color android:color="@color/pressed" /></item>
+    <item android:state_focused="true"><color android:color="@color/pressed" /></item>
+    <item android:state_selected="true"><color android:color="@color/pressed" /></item>
+    <item><color android:color="@color/transparent" /></item>
+</selector>
diff --git a/res/drawable/bg_pressable_round.xml b/res/drawable/bg_pressable_round.xml
new file mode 100644
index 0000000..ea9a5df
--- /dev/null
+++ b/res/drawable/bg_pressable_round.xml
@@ -0,0 +1,6 @@
+<?xml version="1.0" encoding="utf-8"?>
+<selector xmlns:android="http://schemas.android.com/apk/res/android">
+    <item android:state_pressed="true"><shape android:shape="oval"><solid android:color="@color/pressed" /></shape></item>
+    <item android:state_focused="true"><shape android:shape="oval"><solid android:color="@color/pressed" /></shape></item>
+    <item><shape android:shape="oval"><solid android:color="@color/transparent" /></shape></item>
+</selector>
diff --git a/res/drawable/bg_tile.xml b/res/drawable/bg_tile.xml
new file mode 100644
index 0000000..cf4ee7d
--- /dev/null
+++ b/res/drawable/bg_tile.xml
@@ -0,0 +1,6 @@
+<?xml version="1.0" encoding="utf-8"?>
+<selector xmlns:android="http://schemas.android.com/apk/res/android">
+    <item android:state_pressed="true"><shape><solid android:color="@color/surface2" /><corners android:radius="6dp" /></shape></item>
+    <item android:state_focused="true"><shape><solid android:color="@color/surface2" /><corners android:radius="6dp" /></shape></item>
+    <item><shape><solid android:color="@color/surface" /><corners android:radius="6dp" /></shape></item>
+</selector>
diff --git a/res/drawable/progress_mini.xml b/res/drawable/progress_mini.xml
new file mode 100644
index 0000000..1077a4d
--- /dev/null
+++ b/res/drawable/progress_mini.xml
@@ -0,0 +1,6 @@
+<?xml version="1.0" encoding="utf-8"?>
+<layer-list xmlns:android="http://schemas.android.com/apk/res/android">
+    <item android:id="@android:id/background"><shape><solid android:color="@color/surface2" /></shape></item>
+    <item android:id="@android:id/secondaryProgress"><clip><shape><solid android:color="@color/surface2" /></shape></clip></item>
+    <item android:id="@android:id/progress"><clip><shape><solid android:color="@color/accent" /></shape></clip></item>
+</layer-list>
diff --git a/res/drawable/seek_progress.xml b/res/drawable/seek_progress.xml
new file mode 100644
index 0000000..aa53a26
--- /dev/null
+++ b/res/drawable/seek_progress.xml
@@ -0,0 +1,6 @@
+<?xml version="1.0" encoding="utf-8"?>
+<layer-list xmlns:android="http://schemas.android.com/apk/res/android">
+    <item android:id="@android:id/background"><shape><solid android:color="#40FFFFFF" /><corners android:radius="2dp" /><size android:height="4dp" /></shape></item>
+    <item android:id="@android:id/secondaryProgress"><clip><shape><solid android:color="#40FFFFFF" /><corners android:radius="2dp" /></shape></clip></item>
+    <item android:id="@android:id/progress"><clip><shape><solid android:color="@color/text" /><corners android:radius="2dp" /></shape></clip></item>
+</layer-list>
diff --git a/res/drawable/seek_thumb.xml b/res/drawable/seek_thumb.xml
new file mode 100644
index 0000000..9a2dd04
--- /dev/null
+++ b/res/drawable/seek_thumb.xml
@@ -0,0 +1,5 @@
+<?xml version="1.0" encoding="utf-8"?>
+<shape xmlns:android="http://schemas.android.com/apk/res/android" android:shape="oval">
+    <solid android:color="@color/text" />
+    <size android:width="14dp" android:height="14dp" />
+</shape>
diff --git a/res/layout/activity_browse.xml b/res/layout/activity_browse.xml
new file mode 100644
index 0000000..da5fc11
--- /dev/null
+++ b/res/layout/activity_browse.xml
@@ -0,0 +1,16 @@
+<?xml version="1.0" encoding="utf-8"?>
+<LinearLayout xmlns:android="http://schemas.android.com/apk/res/android"
+    android:layout_width="match_parent"
+    android:layout_height="match_parent"
+    android:orientation="vertical">
+    <include layout="@layout/view_topbar" />
+    <FrameLayout
+        android:layout_width="match_parent"
+        android:layout_height="0dp"
+        android:layout_weight="1">
+        <ListView android:id="@+id/list" android:layout_width="match_parent"
+            android:layout_height="match_parent" android:fastScrollEnabled="true" />
+        <include layout="@layout/view_status" />
+    </FrameLayout>
+    <include layout="@layout/view_miniplayer" />
+</LinearLayout>
diff --git a/res/layout/activity_home.xml b/res/layout/activity_home.xml
new file mode 100644
index 0000000..4a30f02
--- /dev/null
+++ b/res/layout/activity_home.xml
@@ -0,0 +1,57 @@
+<?xml version="1.0" encoding="utf-8"?>
+<LinearLayout xmlns:android="http://schemas.android.com/apk/res/android"
+    android:layout_width="match_parent"
+    android:layout_height="match_parent"
+    android:orientation="vertical">
+
+    <include layout="@layout/view_topbar" />
+
+    <LinearLayout
+        android:id="@+id/tabs"
+        android:layout_width="match_parent"
+        android:layout_height="32dp"
+        android:orientation="horizontal">
+        <TextView android:id="@+id/tab_home" style="@style/Tab" android:text="HOME" />
+        <TextView android:id="@+id/tab_artists" style="@style/Tab" android:text="ARTISTS" />
+        <TextView android:id="@+id/tab_albums" style="@style/Tab" android:text="ALBUMS" />
+        <TextView android:id="@+id/tab_playlists" style="@style/Tab" android:text="PLAYLISTS" />
+    </LinearLayout>
+
+    <View
+        android:id="@+id/tab_line"
+        android:layout_width="80dp"
+        android:layout_height="2dp"
+        android:background="@color/accent" />
+
+    <FrameLayout
+        android:layout_width="match_parent"
+        android:layout_height="0dp"
+        android:layout_weight="1">
+
+        <ScrollView
+            android:id="@+id/home_scroll"
+            android:layout_width="match_parent"
+            android:layout_height="match_parent"
+            android:fadingEdge="none">
+            <LinearLayout
+                android:id="@+id/home_content"
+                android:layout_width="match_parent"
+                android:layout_height="wrap_content"
+                android:orientation="vertical"
+                android:paddingBottom="8dp" />
+        </ScrollView>
+
+        <ListView android:id="@+id/list_artists" android:layout_width="match_parent"
+            android:layout_height="match_parent" android:visibility="gone"
+            android:fastScrollEnabled="true" />
+        <ListView android:id="@+id/list_albums" android:layout_width="match_parent"
+            android:layout_height="match_parent" android:visibility="gone"
+            android:fastScrollEnabled="true" />
+        <ListView android:id="@+id/list_playlists" android:layout_width="match_parent"
+            android:layout_height="match_parent" android:visibility="gone" />
+
+        <include layout="@layout/view_status" />
+    </FrameLayout>
+
+    <include layout="@layout/view_miniplayer" />
+</LinearLayout>
diff --git a/res/layout/activity_now_playing.xml b/res/layout/activity_now_playing.xml
new file mode 100644
index 0000000..e686e0f
--- /dev/null
+++ b/res/layout/activity_now_playing.xml
@@ -0,0 +1,145 @@
+<?xml version="1.0" encoding="utf-8"?>
+<LinearLayout xmlns:android="http://schemas.android.com/apk/res/android"
+    android:id="@+id/np_root"
+    android:layout_width="match_parent"
+    android:layout_height="match_parent"
+    android:orientation="vertical">
+
+    <LinearLayout
+        android:layout_width="match_parent"
+        android:layout_height="44dp"
+        android:orientation="horizontal"
+        android:gravity="center_vertical"
+        android:paddingLeft="2dp"
+        android:paddingRight="2dp">
+        <ImageButton android:id="@+id/np_down" style="@style/IconButton" />
+        <LinearLayout
+            android:layout_width="0dp" android:layout_height="wrap_content"
+            android:layout_weight="1" android:orientation="vertical" android:gravity="center">
+            <TextView android:layout_width="wrap_content" android:layout_height="wrap_content"
+                android:text="PLAYING FROM" android:textSize="9sp" android:textStyle="bold"
+                android:textColor="@color/text2" />
+            <TextView android:id="@+id/np_from" style="@style/Sub"
+                android:layout_width="wrap_content" android:layout_height="wrap_content"
+                android:textColor="@color/text" android:textSize="12sp" />
+        </LinearLayout>
+        <ImageButton android:id="@+id/np_queue" style="@style/IconButton" />
+    </LinearLayout>
+
+    <FrameLayout
+        android:id="@+id/np_art_box"
+        android:layout_width="match_parent"
+        android:layout_height="0dp"
+        android:layout_weight="1"
+        android:paddingLeft="20dp"
+        android:paddingRight="20dp"
+        android:paddingTop="4dp"
+        android:paddingBottom="6dp">
+        <com.minamp.SquareImageView
+            android:id="@+id/np_art"
+            android:layout_width="match_parent"
+            android:layout_height="match_parent"
+            android:layout_gravity="center"
+            android:scaleType="centerCrop" />
+    </FrameLayout>
+
+    <LinearLayout
+        android:layout_width="match_parent"
+        android:layout_height="wrap_content"
+        android:orientation="horizontal"
+        android:gravity="center_vertical"
+        android:paddingLeft="18dp"
+        android:paddingRight="8dp">
+        <LinearLayout
+            android:layout_width="0dp" android:layout_height="wrap_content"
+            android:layout_weight="1" android:orientation="vertical">
+            <TextView android:id="@+id/np_title" style="@style/Title"
+                android:layout_width="match_parent" android:layout_height="wrap_content"
+                android:textSize="18sp" />
+            <TextView android:id="@+id/np_sub" style="@style/Sub"
+                android:layout_width="match_parent" android:layout_height="wrap_content"
+                android:textSize="13sp" android:textColor="#CCFFFFFF" />
+        </LinearLayout>
+        <ImageButton android:id="@+id/np_love" style="@style/IconButton" />
+    </LinearLayout>
+
+    <SeekBar
+        android:id="@+id/np_seek"
+        android:layout_width="match_parent"
+        android:layout_height="wrap_content"
+        android:max="1000"
+        android:paddingLeft="18dp"
+        android:paddingRight="18dp"
+        android:paddingTop="8dp"
+        android:paddingBottom="4dp"
+        android:thumbOffset="7dp"
+        android:maxHeight="4dp"
+        android:minHeight="4dp"
+        android:progressDrawable="@drawable/seek_progress"
+        android:thumb="@drawable/seek_thumb" />
+
+    <LinearLayout
+        android:layout_width="match_parent"
+        android:layout_height="wrap_content"
+        android:orientation="horizontal"
+        android:paddingLeft="18dp"
+        android:paddingRight="18dp">
+        <TextView android:id="@+id/np_elapsed"
+            android:layout_width="wrap_content" android:layout_height="wrap_content"
+            android:textSize="10sp" android:textColor="#B3FFFFFF" />
+        <TextView android:id="@+id/np_status"
+            android:layout_width="0dp" android:layout_height="wrap_content"
+            android:layout_weight="1" android:gravity="center"
+            android:textSize="10sp" android:textColor="#B3FFFFFF"
+            android:singleLine="true" android:ellipsize="end"
+            android:paddingLeft="4dp" android:paddingRight="4dp" />
+        <TextView android:id="@+id/np_remaining"
+            android:layout_width="wrap_content" android:layout_height="wrap_content"
+            android:textSize="10sp" android:textColor="#B3FFFFFF" />
+    </LinearLayout>
+
+    <LinearLayout
+        android:layout_width="match_parent"
+        android:layout_height="64dp"
+        android:orientation="horizontal"
+        android:gravity="center"
+        android:paddingLeft="6dp"
+        android:paddingRight="6dp">
+        <ImageButton android:id="@+id/np_shuffle" style="@style/IconButton" />
+        <View android:layout_width="0dp" android:layout_height="1dp" android:layout_weight="1" />
+        <ImageButton android:id="@+id/np_prev" style="@style/IconButton" android:layout_width="50dp" android:layout_height="50dp" />
+        <ImageButton android:id="@+id/np_play"
+            android:layout_width="58dp" android:layout_height="58dp"
+            android:layout_marginLeft="8dp" android:layout_marginRight="8dp"
+            android:background="@drawable/bg_play_circle" android:scaleType="center" />
+        <ImageButton android:id="@+id/np_next" style="@style/IconButton" android:layout_width="50dp" android:layout_height="50dp" />
+        <View android:layout_width="0dp" android:layout_height="1dp" android:layout_weight="1" />
+        <ImageButton android:id="@+id/np_repeat" style="@style/IconButton" />
+    </LinearLayout>
+
+    <LinearLayout
+        android:layout_width="match_parent"
+        android:layout_height="36dp"
+        android:orientation="horizontal"
+        android:gravity="center_vertical"
+        android:paddingLeft="12dp"
+        android:paddingRight="12dp"
+        android:layout_marginBottom="4dp">
+        <LinearLayout android:id="@+id/np_sleep"
+            android:layout_width="wrap_content" android:layout_height="match_parent"
+            android:orientation="horizontal" android:gravity="center_vertical"
+            android:background="@drawable/bg_pressable" android:paddingLeft="6dp" android:paddingRight="8dp">
+            <ImageView android:id="@+id/np_sleep_icon" android:layout_width="20dp" android:layout_height="20dp" />
+            <TextView android:id="@+id/np_sleep_text"
+                android:layout_width="wrap_content" android:layout_height="wrap_content"
+                android:textSize="11sp" android:textColor="#B3FFFFFF" android:paddingLeft="5dp"
+                android:text="Sleep" />
+        </LinearLayout>
+        <View android:layout_width="0dp" android:layout_height="1dp" android:layout_weight="1" />
+        <TextView android:id="@+id/np_artist_link"
+            android:layout_width="wrap_content" android:layout_height="match_parent"
+            android:gravity="center_vertical" android:background="@drawable/bg_pressable"
+            android:paddingLeft="8dp" android:paddingRight="8dp"
+            android:textSize="11sp" android:textColor="#B3FFFFFF" android:text="Album ›" />
+    </LinearLayout>
+</LinearLayout>
diff --git a/res/layout/activity_queue.xml b/res/layout/activity_queue.xml
new file mode 100644
index 0000000..ba64d7f
--- /dev/null
+++ b/res/layout/activity_queue.xml
@@ -0,0 +1,15 @@
+<?xml version="1.0" encoding="utf-8"?>
+<LinearLayout xmlns:android="http://schemas.android.com/apk/res/android"
+    android:layout_width="match_parent"
+    android:layout_height="match_parent"
+    android:orientation="vertical">
+    <include layout="@layout/view_topbar" />
+    <FrameLayout
+        android:layout_width="match_parent"
+        android:layout_height="0dp"
+        android:layout_weight="1">
+        <ListView android:id="@+id/list" android:layout_width="match_parent"
+            android:layout_height="match_parent" />
+        <include layout="@layout/view_status" />
+    </FrameLayout>
+</LinearLayout>
diff --git a/res/layout/activity_search.xml b/res/layout/activity_search.xml
new file mode 100644
index 0000000..dd2eb9d
--- /dev/null
+++ b/res/layout/activity_search.xml
@@ -0,0 +1,29 @@
+<?xml version="1.0" encoding="utf-8"?>
+<LinearLayout xmlns:android="http://schemas.android.com/apk/res/android"
+    android:layout_width="match_parent"
+    android:layout_height="match_parent"
+    android:orientation="vertical">
+    <LinearLayout
+        android:layout_width="match_parent"
+        android:layout_height="50dp"
+        android:orientation="horizontal"
+        android:gravity="center_vertical"
+        android:paddingLeft="4dp"
+        android:paddingRight="8dp">
+        <ImageButton android:id="@+id/btn_back" style="@style/IconButton" />
+        <EditText android:id="@+id/search_box" style="@style/Edit"
+            android:layout_width="0dp" android:layout_weight="1"
+            android:hint="Artists, albums, tracks"
+            android:imeOptions="actionSearch"
+            android:inputType="text" />
+    </LinearLayout>
+    <FrameLayout
+        android:layout_width="match_parent"
+        android:layout_height="0dp"
+        android:layout_weight="1">
+        <ListView android:id="@+id/list" android:layout_width="match_parent"
+            android:layout_height="match_parent" />
+        <include layout="@layout/view_status" />
+    </FrameLayout>
+    <include layout="@layout/view_miniplayer" />
+</LinearLayout>
diff --git a/res/layout/activity_setup.xml b/res/layout/activity_setup.xml
new file mode 100644
index 0000000..3fd1abc
--- /dev/null
+++ b/res/layout/activity_setup.xml
@@ -0,0 +1,120 @@
+<?xml version="1.0" encoding="utf-8"?>
+<ScrollView xmlns:android="http://schemas.android.com/apk/res/android"
+    android:layout_width="match_parent"
+    android:layout_height="match_parent"
+    android:fillViewport="true"
+    android:fadingEdge="none">
+
+    <LinearLayout
+        android:layout_width="match_parent"
+        android:layout_height="wrap_content"
+        android:orientation="vertical"
+        android:padding="20dp">
+
+        <!-- welcome -->
+        <LinearLayout android:id="@+id/page_welcome"
+            android:layout_width="match_parent" android:layout_height="wrap_content"
+            android:orientation="vertical" android:gravity="center_horizontal">
+            <ImageView android:layout_width="64dp" android:layout_height="64dp"
+                android:layout_marginTop="12dp" android:src="@drawable/ic_launcher"
+                android:scaleType="fitCenter" />
+            <TextView android:layout_width="wrap_content" android:layout_height="wrap_content"
+                android:text="Minamp" android:textSize="26sp" android:textStyle="bold"
+                android:paddingTop="8dp" />
+            <TextView android:layout_width="wrap_content" android:layout_height="wrap_content"
+                android:gravity="center" android:textColor="@color/text2" android:textSize="13sp"
+                android:paddingTop="4dp" android:paddingBottom="22dp"
+                android:text="Your Plex music, anywhere,\non a very small phone." />
+            <Button android:id="@+id/btn_signin" style="@style/ButtonAccent"
+                android:layout_width="match_parent" android:text="Sign in with Plex" />
+            <Button android:id="@+id/btn_manual" style="@style/ButtonOutline"
+                android:layout_width="match_parent" android:layout_marginTop="10dp"
+                android:text="Connect to a server address" />
+        </LinearLayout>
+
+        <!-- PIN -->
+        <LinearLayout android:id="@+id/page_pin"
+            android:layout_width="match_parent" android:layout_height="wrap_content"
+            android:orientation="vertical" android:gravity="center_horizontal"
+            android:visibility="gone">
+            <TextView android:layout_width="wrap_content" android:layout_height="wrap_content"
+                android:gravity="center" android:textColor="@color/text2" android:textSize="13sp"
+                android:paddingTop="12dp"
+                android:text="On a computer or another phone, open" />
+            <TextView android:layout_width="wrap_content" android:layout_height="wrap_content"
+                android:text="plex.tv/link" android:textSize="22sp" android:textStyle="bold"
+                android:textColor="@color/accent" android:paddingTop="4dp" />
+            <TextView android:layout_width="wrap_content" android:layout_height="wrap_content"
+                android:textColor="@color/text2" android:textSize="13sp" android:paddingTop="10dp"
+                android:text="and enter this code:" />
+            <TextView android:id="@+id/pin_code"
+                android:layout_width="wrap_content" android:layout_height="wrap_content"
+                android:textSize="40sp" android:textStyle="bold" android:typeface="monospace"
+                android:paddingTop="6dp" android:paddingBottom="10dp" />
+            <LinearLayout android:layout_width="wrap_content" android:layout_height="wrap_content"
+                android:orientation="horizontal" android:gravity="center_vertical">
+                <ProgressBar style="@android:style/Widget.ProgressBar.Small"
+                    android:layout_width="wrap_content" android:layout_height="wrap_content" />
+                <TextView android:id="@+id/pin_status"
+                    android:layout_width="wrap_content" android:layout_height="wrap_content"
+                    android:textColor="@color/text2" android:textSize="12sp" android:paddingLeft="8dp"
+                    android:text="Waiting for you to link…" />
+            </LinearLayout>
+            <Button android:id="@+id/btn_pin_cancel" style="@style/ButtonOutline"
+                android:layout_width="match_parent" android:layout_marginTop="24dp"
+                android:text="Cancel" />
+        </LinearLayout>
+
+        <!-- manual -->
+        <LinearLayout android:id="@+id/page_manual"
+            android:layout_width="match_parent" android:layout_height="wrap_content"
+            android:orientation="vertical" android:visibility="gone">
+            <TextView android:layout_width="wrap_content" android:layout_height="wrap_content"
+                android:text="Server address" android:textSize="18sp" android:textStyle="bold" />
+            <TextView style="@style/Sub" android:layout_width="match_parent" android:layout_height="wrap_content"
+                android:singleLine="false" android:paddingTop="4dp" android:paddingBottom="10dp"
+                android:text="e.g. 192.168.1.20 or https://plex.example.com. Signing in with Plex is easier and finds remote addresses for you." />
+            <EditText android:id="@+id/edit_url" style="@style/Edit"
+                android:hint="Address" android:inputType="textUri" />
+            <EditText android:id="@+id/edit_token" style="@style/Edit"
+                android:layout_marginTop="8dp" android:hint="X-Plex-Token (optional on your LAN)"
+                android:inputType="textVisiblePassword" />
+            <Button android:id="@+id/btn_manual_go" style="@style/ButtonAccent"
+                android:layout_width="match_parent" android:layout_marginTop="14dp"
+                android:text="Connect" />
+            <Button android:id="@+id/btn_manual_back" style="@style/ButtonOutline"
+                android:layout_width="match_parent" android:layout_marginTop="10dp"
+                android:text="Back" />
+        </LinearLayout>
+
+        <!-- choose server / library -->
+        <LinearLayout android:id="@+id/page_choose"
+            android:layout_width="match_parent" android:layout_height="wrap_content"
+            android:orientation="vertical" android:visibility="gone">
+            <TextView android:id="@+id/choose_title"
+                android:layout_width="wrap_content" android:layout_height="wrap_content"
+                android:textSize="18sp" android:textStyle="bold" />
+            <TextView android:id="@+id/choose_sub" style="@style/Sub"
+                android:layout_width="match_parent" android:layout_height="wrap_content"
+                android:singleLine="false" android:paddingTop="2dp" android:paddingBottom="10dp" />
+            <LinearLayout android:id="@+id/choose_list"
+                android:layout_width="match_parent" android:layout_height="wrap_content"
+                android:orientation="vertical" />
+            <Button android:id="@+id/btn_choose_back" style="@style/ButtonOutline"
+                android:layout_width="match_parent" android:layout_marginTop="14dp"
+                android:text="Back" />
+        </LinearLayout>
+
+        <!-- busy -->
+        <LinearLayout android:id="@+id/page_busy"
+            android:layout_width="match_parent" android:layout_height="wrap_content"
+            android:orientation="vertical" android:gravity="center_horizontal"
+            android:paddingTop="60dp" android:visibility="gone">
+            <ProgressBar android:layout_width="wrap_content" android:layout_height="wrap_content" />
+            <TextView android:id="@+id/busy_text"
+                android:layout_width="wrap_content" android:layout_height="wrap_content"
+                android:gravity="center" android:textColor="@color/text2" android:textSize="13sp"
+                android:paddingTop="12dp" />
+        </LinearLayout>
+    </LinearLayout>
+</ScrollView>
diff --git a/res/layout/row_choice.xml b/res/layout/row_choice.xml
new file mode 100644
index 0000000..f132c5b
--- /dev/null
+++ b/res/layout/row_choice.xml
@@ -0,0 +1,16 @@
+<?xml version="1.0" encoding="utf-8"?>
+<LinearLayout xmlns:android="http://schemas.android.com/apk/res/android"
+    android:layout_width="match_parent"
+    android:layout_height="wrap_content"
+    android:orientation="vertical"
+    android:background="@drawable/bg_tile"
+    android:padding="12dp"
+    android:layout_marginBottom="8dp"
+    android:clickable="true"
+    android:focusable="true">
+    <TextView android:id="@+id/choice_title" style="@style/Title"
+        android:layout_width="match_parent" android:layout_height="wrap_content"
+        android:textSize="15sp" />
+    <TextView android:id="@+id/choice_sub" style="@style/Sub"
+        android:layout_width="match_parent" android:layout_height="wrap_content" />
+</LinearLayout>
diff --git a/res/layout/row_header.xml b/res/layout/row_header.xml
new file mode 100644
index 0000000..8f2e672
--- /dev/null
+++ b/res/layout/row_header.xml
@@ -0,0 +1,11 @@
+<?xml version="1.0" encoding="utf-8"?>
+<TextView xmlns:android="http://schemas.android.com/apk/res/android"
+    android:id="@+id/header_text"
+    android:layout_width="match_parent"
+    android:layout_height="wrap_content"
+    android:paddingLeft="10dp"
+    android:paddingTop="12dp"
+    android:paddingBottom="4dp"
+    android:textColor="@color/accent"
+    android:textSize="11sp"
+    android:textStyle="bold" />
diff --git a/res/layout/row_item.xml b/res/layout/row_item.xml
new file mode 100644
index 0000000..e40dc81
--- /dev/null
+++ b/res/layout/row_item.xml
@@ -0,0 +1,35 @@
+<?xml version="1.0" encoding="utf-8"?>
+<LinearLayout xmlns:android="http://schemas.android.com/apk/res/android"
+    android:layout_width="match_parent"
+    android:layout_height="54dp"
+    android:orientation="horizontal"
+    android:gravity="center_vertical"
+    android:paddingLeft="6dp"
+    android:paddingRight="4dp">
+
+    <FrameLayout android:layout_width="44dp" android:layout_height="44dp">
+        <ImageView android:id="@+id/row_art"
+            android:layout_width="44dp" android:layout_height="44dp"
+            android:scaleType="centerCrop" />
+        <TextView android:id="@+id/row_num"
+            android:layout_width="44dp" android:layout_height="44dp"
+            android:gravity="center" android:textColor="@color/text2"
+            android:textSize="13sp" android:visibility="gone" />
+    </FrameLayout>
+
+    <LinearLayout
+        android:layout_width="0dp" android:layout_height="wrap_content"
+        android:layout_weight="1" android:orientation="vertical"
+        android:paddingLeft="9dp">
+        <TextView android:id="@+id/row_title" style="@style/Title"
+            android:layout_width="match_parent" android:layout_height="wrap_content"
+            android:textSize="14sp" android:textStyle="normal" />
+        <TextView android:id="@+id/row_sub" style="@style/Sub"
+            android:layout_width="match_parent" android:layout_height="wrap_content" />
+    </LinearLayout>
+
+    <TextView android:id="@+id/row_right"
+        android:layout_width="wrap_content" android:layout_height="wrap_content"
+        android:textColor="@color/text2" android:textSize="11sp"
+        android:paddingLeft="6dp" android:paddingRight="6dp" />
+</LinearLayout>
diff --git a/res/layout/view_album_card.xml b/res/layout/view_album_card.xml
new file mode 100644
index 0000000..84359a3
--- /dev/null
+++ b/res/layout/view_album_card.xml
@@ -0,0 +1,19 @@
+<?xml version="1.0" encoding="utf-8"?>
+<LinearLayout xmlns:android="http://schemas.android.com/apk/res/android"
+    android:layout_width="96dp"
+    android:layout_height="wrap_content"
+    android:orientation="vertical"
+    android:padding="4dp"
+    android:background="@drawable/bg_pressable"
+    android:clickable="true"
+    android:focusable="true">
+    <ImageView android:id="@+id/card_art"
+        android:layout_width="88dp" android:layout_height="88dp"
+        android:scaleType="centerCrop" />
+    <TextView android:id="@+id/card_title" style="@style/Title"
+        android:layout_width="match_parent" android:layout_height="wrap_content"
+        android:textSize="12sp" android:textStyle="normal" android:paddingTop="4dp" />
+    <TextView android:id="@+id/card_sub" style="@style/Sub"
+        android:layout_width="match_parent" android:layout_height="wrap_content"
+        android:textSize="10sp" />
+</LinearLayout>
diff --git a/res/layout/view_detail_header.xml b/res/layout/view_detail_header.xml
new file mode 100644
index 0000000..461d669
--- /dev/null
+++ b/res/layout/view_detail_header.xml
@@ -0,0 +1,45 @@
+<?xml version="1.0" encoding="utf-8"?>
+<LinearLayout xmlns:android="http://schemas.android.com/apk/res/android"
+    android:layout_width="match_parent"
+    android:layout_height="wrap_content"
+    android:orientation="vertical"
+    android:padding="10dp">
+
+    <LinearLayout
+        android:layout_width="match_parent"
+        android:layout_height="wrap_content"
+        android:orientation="horizontal">
+        <ImageView android:id="@+id/detail_art"
+            android:layout_width="104dp" android:layout_height="104dp"
+            android:scaleType="centerCrop" />
+        <LinearLayout
+            android:layout_width="0dp" android:layout_height="wrap_content"
+            android:layout_weight="1" android:orientation="vertical"
+            android:paddingLeft="12dp" android:paddingTop="4dp">
+            <TextView android:id="@+id/detail_title"
+                android:layout_width="match_parent" android:layout_height="wrap_content"
+                android:textSize="17sp" android:textStyle="bold" android:maxLines="3"
+                android:ellipsize="end" android:textColor="@color/text" />
+            <TextView android:id="@+id/detail_sub"
+                android:layout_width="match_parent" android:layout_height="wrap_content"
+                android:textSize="13sp" android:textColor="@color/accent"
+                android:paddingTop="2dp" android:singleLine="true" android:ellipsize="end" />
+            <TextView android:id="@+id/detail_meta" style="@style/Sub"
+                android:layout_width="match_parent" android:layout_height="wrap_content"
+                android:paddingTop="2dp" />
+        </LinearLayout>
+    </LinearLayout>
+
+    <LinearLayout
+        android:layout_width="match_parent"
+        android:layout_height="wrap_content"
+        android:orientation="horizontal"
+        android:paddingTop="10dp">
+        <Button android:id="@+id/detail_play" style="@style/ButtonAccent"
+            android:layout_width="0dp" android:layout_weight="1"
+            android:layout_marginRight="5dp" android:text="Play" />
+        <Button android:id="@+id/detail_shuffle" style="@style/ButtonOutline"
+            android:layout_width="0dp" android:layout_weight="1"
+            android:layout_marginLeft="5dp" android:text="Shuffle" />
+    </LinearLayout>
+</LinearLayout>
diff --git a/res/layout/view_home_tile.xml b/res/layout/view_home_tile.xml
new file mode 100644
index 0000000..4a5f263
--- /dev/null
+++ b/res/layout/view_home_tile.xml
@@ -0,0 +1,21 @@
+<?xml version="1.0" encoding="utf-8"?>
+<LinearLayout xmlns:android="http://schemas.android.com/apk/res/android"
+    android:layout_width="0dp"
+    android:layout_height="58dp"
+    android:layout_weight="1"
+    android:orientation="horizontal"
+    android:gravity="center_vertical"
+    android:background="@drawable/bg_tile"
+    android:paddingLeft="8dp"
+    android:paddingRight="6dp"
+    android:clickable="true"
+    android:focusable="true">
+    <ImageView android:id="@+id/tile_icon" android:layout_width="26dp" android:layout_height="26dp" />
+    <LinearLayout android:layout_width="0dp" android:layout_height="wrap_content"
+        android:layout_weight="1" android:orientation="vertical" android:paddingLeft="7dp">
+        <TextView android:id="@+id/tile_title" style="@style/Title"
+            android:layout_width="match_parent" android:layout_height="wrap_content" android:textSize="13sp" />
+        <TextView android:id="@+id/tile_sub" style="@style/Sub"
+            android:layout_width="match_parent" android:layout_height="wrap_content" android:textSize="10sp" />
+    </LinearLayout>
+</LinearLayout>
diff --git a/res/layout/view_miniplayer.xml b/res/layout/view_miniplayer.xml
new file mode 100644
index 0000000..8d0cde5
--- /dev/null
+++ b/res/layout/view_miniplayer.xml
@@ -0,0 +1,46 @@
+<?xml version="1.0" encoding="utf-8"?>
+<LinearLayout xmlns:android="http://schemas.android.com/apk/res/android"
+    android:id="@+id/mini_root"
+    android:layout_width="match_parent"
+    android:layout_height="wrap_content"
+    android:orientation="vertical"
+    android:background="@color/surface"
+    android:visibility="gone">
+
+    <ProgressBar
+        android:id="@+id/mini_progress"
+        style="@android:style/Widget.ProgressBar.Horizontal"
+        android:layout_width="match_parent"
+        android:layout_height="2dp"
+        android:max="1000"
+        android:progressDrawable="@drawable/progress_mini" />
+
+    <LinearLayout
+        android:id="@+id/mini_body"
+        android:layout_width="match_parent"
+        android:layout_height="50dp"
+        android:orientation="horizontal"
+        android:gravity="center_vertical"
+        android:background="@drawable/bg_pressable"
+        android:paddingLeft="5dp">
+
+        <ImageView android:id="@+id/mini_art"
+            android:layout_width="40dp" android:layout_height="40dp"
+            android:scaleType="centerCrop" />
+
+        <LinearLayout
+            android:layout_width="0dp" android:layout_height="wrap_content"
+            android:layout_weight="1" android:orientation="vertical"
+            android:paddingLeft="8dp">
+            <TextView android:id="@+id/mini_title" style="@style/Title"
+                android:layout_width="match_parent" android:layout_height="wrap_content"
+                android:textSize="13sp" />
+            <TextView android:id="@+id/mini_sub" style="@style/Sub"
+                android:layout_width="match_parent" android:layout_height="wrap_content"
+                android:textSize="11sp" />
+        </LinearLayout>
+
+        <ImageButton android:id="@+id/mini_play" style="@style/IconButton" />
+        <ImageButton android:id="@+id/mini_next" style="@style/IconButton" />
+    </LinearLayout>
+</LinearLayout>
diff --git a/res/layout/view_status.xml b/res/layout/view_status.xml
new file mode 100644
index 0000000..b265680
--- /dev/null
+++ b/res/layout/view_status.xml
@@ -0,0 +1,20 @@
+<?xml version="1.0" encoding="utf-8"?>
+<LinearLayout xmlns:android="http://schemas.android.com/apk/res/android"
+    android:id="@+id/status_box"
+    android:layout_width="match_parent"
+    android:layout_height="match_parent"
+    android:orientation="vertical"
+    android:gravity="center"
+    android:padding="24dp"
+    android:visibility="gone">
+    <ProgressBar android:id="@+id/status_spin"
+        style="@android:style/Widget.ProgressBar.Small"
+        android:layout_width="wrap_content" android:layout_height="wrap_content" />
+    <TextView android:id="@+id/status_text"
+        android:layout_width="wrap_content" android:layout_height="wrap_content"
+        android:gravity="center" android:textColor="@color/text2" android:textSize="13sp"
+        android:paddingTop="8dp" />
+    <Button android:id="@+id/status_retry" style="@style/ButtonOutline"
+        android:layout_width="wrap_content" android:layout_marginTop="12dp"
+        android:text="Try again" android:visibility="gone" />
+</LinearLayout>
diff --git a/res/layout/view_topbar.xml b/res/layout/view_topbar.xml
new file mode 100644
index 0000000..6a8a7a4
--- /dev/null
+++ b/res/layout/view_topbar.xml
@@ -0,0 +1,28 @@
+<?xml version="1.0" encoding="utf-8"?>
+<LinearLayout xmlns:android="http://schemas.android.com/apk/res/android"
+    android:id="@+id/topbar"
+    android:layout_width="match_parent"
+    android:layout_height="46dp"
+    android:orientation="horizontal"
+    android:gravity="center_vertical"
+    android:paddingLeft="4dp"
+    android:paddingRight="2dp">
+
+    <ImageButton android:id="@+id/btn_back" style="@style/IconButton" android:visibility="gone" />
+
+    <LinearLayout
+        android:layout_width="0dp"
+        android:layout_height="wrap_content"
+        android:layout_weight="1"
+        android:paddingLeft="8dp"
+        android:orientation="vertical">
+        <TextView android:id="@+id/bar_title" style="@style/Title"
+            android:layout_width="match_parent" android:layout_height="wrap_content" />
+        <TextView android:id="@+id/bar_sub" style="@style/Sub"
+            android:layout_width="match_parent" android:layout_height="wrap_content"
+            android:textSize="11sp" android:visibility="gone" />
+    </LinearLayout>
+
+    <ImageButton android:id="@+id/btn_action" style="@style/IconButton" android:visibility="gone" />
+    <ImageButton android:id="@+id/btn_action2" style="@style/IconButton" android:visibility="gone" />
+</LinearLayout>
diff --git a/res/values/colors.xml b/res/values/colors.xml
new file mode 100644
index 0000000..32aa3b7
--- /dev/null
+++ b/res/values/colors.xml
@@ -0,0 +1,14 @@
+<?xml version="1.0" encoding="utf-8"?>
+<resources>
+    <color name="bg">#FF111114</color>
+    <color name="surface">#FF1D1D22</color>
+    <color name="surface2">#FF2A2A31</color>
+    <color name="divider">#FF26262C</color>
+    <color name="text">#FFF2F2F2</color>
+    <color name="text2">#FF8F8F98</color>
+    <color name="accent">#FFF7B02E</color>
+    <color name="accent_dark">#FFC98A16</color>
+    <color name="on_accent">#FF16130C</color>
+    <color name="pressed">#22FFFFFF</color>
+    <color name="transparent">#00000000</color>
+</resources>
diff --git a/res/values/ids.xml b/res/values/ids.xml
new file mode 100644
index 0000000..f902a97
--- /dev/null
+++ b/res/values/ids.xml
@@ -0,0 +1,4 @@
+<?xml version="1.0" encoding="utf-8"?>
+<resources>
+    <item type="id" name="tag_image" />
+</resources>
diff --git a/res/values/strings.xml b/res/values/strings.xml
new file mode 100644
index 0000000..5145bff
--- /dev/null
+++ b/res/values/strings.xml
@@ -0,0 +1,4 @@
+<?xml version="1.0" encoding="utf-8"?>
+<resources>
+    <string name="app_name">Minamp</string>
+</resources>
diff --git a/res/values/styles.xml b/res/values/styles.xml
new file mode 100644
index 0000000..eb2f119
--- /dev/null
+++ b/res/values/styles.xml
@@ -0,0 +1,80 @@
+<?xml version="1.0" encoding="utf-8"?>
+<resources>
+    <style name="AppTheme" parent="@android:style/Theme.NoTitleBar">
+        <item name="android:windowBackground">@color/bg</item>
+        <item name="android:textColor">@color/text</item>
+        <item name="android:textColorPrimary">@color/text</item>
+        <item name="android:textColorSecondary">@color/text2</item>
+        <item name="android:listViewStyle">@style/List</item>
+        <item name="android:windowNoTitle">true</item>
+    </style>
+
+    <style name="List" parent="@android:style/Widget.ListView">
+        <item name="android:cacheColorHint">@color/bg</item>
+        <item name="android:divider">@color/divider</item>
+        <item name="android:dividerHeight">1px</item>
+        <item name="android:listSelector">@drawable/bg_pressable</item>
+        <item name="android:fadingEdge">none</item>
+    </style>
+
+    <style name="Title">
+        <item name="android:textSize">16sp</item>
+        <item name="android:textStyle">bold</item>
+        <item name="android:textColor">@color/text</item>
+        <item name="android:singleLine">true</item>
+        <item name="android:ellipsize">end</item>
+    </style>
+
+    <style name="Sub">
+        <item name="android:textSize">12sp</item>
+        <item name="android:textColor">@color/text2</item>
+        <item name="android:singleLine">true</item>
+        <item name="android:ellipsize">end</item>
+    </style>
+
+    <style name="Tab">
+        <item name="android:layout_width">0dp</item>
+        <item name="android:layout_height">match_parent</item>
+        <item name="android:layout_weight">1</item>
+        <item name="android:gravity">center</item>
+        <item name="android:textSize">11sp</item>
+        <item name="android:textStyle">bold</item>
+        <item name="android:textColor">@color/text2</item>
+        <item name="android:background">@drawable/bg_pressable</item>
+        <item name="android:singleLine">true</item>
+    </style>
+
+    <style name="IconButton">
+        <item name="android:layout_width">44dp</item>
+        <item name="android:layout_height">44dp</item>
+        <item name="android:background">@drawable/bg_pressable_round</item>
+        <item name="android:scaleType">center</item>
+    </style>
+
+    <style name="ButtonAccent">
+        <item name="android:layout_height">40dp</item>
+        <item name="android:background">@drawable/bg_button_accent</item>
+        <item name="android:textColor">@color/on_accent</item>
+        <item name="android:textSize">14sp</item>
+        <item name="android:textStyle">bold</item>
+        <item name="android:gravity">center</item>
+        <item name="android:paddingLeft">16dp</item>
+        <item name="android:paddingRight">16dp</item>
+    </style>
+
+    <style name="ButtonOutline" parent="ButtonAccent">
+        <item name="android:background">@drawable/bg_button_outline</item>
+        <item name="android:textColor">@color/text</item>
+    </style>
+
+    <style name="Edit">
+        <item name="android:layout_width">match_parent</item>
+        <item name="android:layout_height">wrap_content</item>
+        <item name="android:background">@drawable/bg_edit</item>
+        <item name="android:textColor">@color/text</item>
+        <item name="android:textColorHint">@color/text2</item>
+        <item name="android:textSize">14sp</item>
+        <item name="android:padding">10dp</item>
+        <item name="android:singleLine">true</item>
+    </style>
+</resources>
diff --git a/signing/minamp.keystore b/signing/minamp.keystore
new file mode 100644
index 0000000000000000000000000000000000000000..b43ce8f31b6947c8fbd369b3e771b1498361865a
GIT binary patch
literal 2600
zcma)8X*d*$8lEv@8OD|o8e7p=!kMvTn<Ps!$WpctGDu7qTNrC&?Vu<byU7wFV;?ao
z*+%4qwAi=GU~=pn(s7@ApU!iC-TUKv-sgMY@BRLL@ADx^+_G#y5RwEL<bWt9ViR|G
zft)}J3Gxz5g0vmcG$e_==D#HNA~1<P?}#QJ)k6-R|G1#sKsE}AUH^zgBX9h2u=64v
zkXrw=P~;gfZ1~3kw`zX~Ik=3NtN20xxNd&jG8>zm02@#m3FYAW_eM4dI{+!c0lA)t
z1$u(OKt-^?9>rg(+P!3?cVH$P9c0}CCV}5+T)TVkYuhK%SJU5*uVh;~O4hn3khCrF
z5*=SNKYEUrMc+9^)Lh*t>@yQw5*J!8C1dRQtj-#47D>Gd2aAjHL>$Z_9bLavO2KGP
zZuQ&cLuP8^lF1S>+$53V&ku}>pvfkDDpjGtr?y5;SDmryjb>y4gXy3pUyF_6H%c~*
zg3%JzkBp&Be@%Kx&-BhXG>w0)JeZpRX-9n&x(VD{8`s}{D8YYeEJN;4*85@D{c_Qo
ze7V=+LCUUjK1*@K;%cRZYIK4ukE#Q%Z{wpy9fgV<Vo07IT2s(mO%mf5AWkf+ATb~x
zfmn#t$tKq)wa@>sR`z_G);J%u(xN8#slzHK;829{rx_kTF-OObk>g*O*1HTD1>~_t
z{F<xO4wb|=)B6*glveW8FO^1r5mVqH_MP{-sXN9r-Uz!NqZgCAW+tVhS47l~H}>6o
zd<AZVf9^9vOYS_sRi~OjULl7ej#V_U7SRWMQXOKjg2IWEaNZOCsn5diko~6vg#`hM
z7SefYuv^6wT4k#K?JFwK!hy1LylyDFt#&AB2$NMdk~3s9eAsPI=cJ{;Sq$7{u6mnR
z`vu#~<a+_8IM14<{UDbDuAI^euGfC@Vn$e0CNjv72~$bt{sYVNv|PC+C+SY*()SES
zOWySRXQgjZQw;Eh%t#Xi|8G<N{8iMIk>BGbSAS-te!gO`YA32DcP_NW;|e!$gobh~
z{+P88d4{YuyR7clfRcq`PMgv?2e&_(OG|a*?<*hYA4j7x*jt*|Hit7c%<`<>pZ5AH
zessFBLu`6O#VEK%=UYgAz=t21c^{I>Y|9mU>g*c3i)PFVuv!8BF_(wJcN=biri$=s
zk=th`p+>I5Q)X<<DH$(J=3Oxt7nNq69=glRX)Kr<i^La?oYxPP%oXE*-WY*a@c_y^
z%T;QMClT5Ty_((vf}jsp9Lr3pxvE9(axJ@SmpGEzEvI2h{`TWogD)$gz09%FA}Hj;
zC8QLePb$V5=BX7HYOk{D6&;7$OB-#mBcBege7nsY8n>lSho{8C611+S4!{0Ra?U)%
zQ*5uma8@|^5&zD6Aj?@YRW5%IK45iBp0yV(pKWyTWX5fdm@ivHWZ5evy}%gByu;#7
zJW7zj6}?ZHA0wuzy$vh)(`{!sIAh1;+Tw{WNv#SF8gAVQv0uA}SPtP4PwN>_x~5Sz
zc=)V6A9@wPS1jA-MI8#cklQ*JoTgB@S&+l9tycv|#QlULq~G*j5b-DRU)Qu8jBGi}
ztvh5s@Q$S2CA7_@vtX#L64+y}QaYcbb{$lRZ4Pr(xOt7H(3lLga^K0KzHYohxhCI#
z!fO;HCc4bhE<a?=7*AmbV0_kS{X!Y8ZmAAc&FRHSywBx6O#{C6&2k~3Eein$59N}M
zTpuT}`0n0eOJLCax?bnrLJE7yz>>3M0WVJej@oI(TB*CNVA;i*@Jrd^Ow@gcO@3_q
zuqRX}W4}vxsG;P(1~h}H!qrN5mC46b$J^R{4iOGqx@&Xk9TsSAmgw{gCiW8d4GqXd
zi9nDZ=s`%gdd$|&Bk*NDdNoa#6}|SjsdvMd;79cojD}^oeREgkcIaF;9~82h^Qae9
zbX&foL00amLg^#nzv2=CL-9#M0lollfFHo^2nooO|A@jU82Fftx38x(N>dx9t*xnw
zI*UZ2kR&kh*AOQMg#=nhl0e_tfPf?T_KyPmUoov}Yb*2#aE_`GFgVTW=z**M0EPZP
zF}>TDyh8v{F|NrCFGP{m8nGl0p}*%_A0wcPcGJeF#BO5gd{G{i9%v}25^ZQS1xqjK
z32+)u#YBAHJW#A--GeK&gzW3ci0|Cy!l5T(oAMQ^#tE(|%Zig?b;I6mOomg5)2G#w
zh76`+(kN$Rlb0w~!4DYdzr`6Ir^9~yYQp2bNz+Wn%~cJXtm~V#s)K^IHOr(Bt_Mtx
zr(L3m4`K$#gK-05Nu?gmCPa?n_VQ6F@{3JU6o1sDsbO`rX(3{_nR_76aZtV#<_y0r
zkcdf}^KZzUcx25o5)Oak)-4?P8ZE;x^P^@;wA&h&2`UEItVX%zDfdu<*ApT(VgQgE
z>DBFq_^u24S~c_=eo*L0pocs$an=qVfxMCs2udN9uO_F+Q{oGL>YHlHi3<?Slkdcy
zqAh^BS7NF)AEU-whwNzNyouJ5zS~y9aA-QcIrVVfJ@jl<B*hMFx#QdQL-@Vz_l1N=
z{Gu1arQ+NGE|nR!0YC@uPsrgX0{Ne1cTe%?O{rH*S_<Yh-EPqpgr;Q<R(iG>JZ&uz
z6skWj#K^f^H@ou^9dg;l=P^zXT7{;3+WF0yT-z2f3`AUWbbIB)Cj72Uv9#L%7^U0<
z{-~zDL-w1gl+WG%uz|1>o*@CHcPl;BG}<d-EN!A5*vg)AxvWMBR#)H!KudmH*NKVR
zu&NpDdjE4XQKO!|Vfm;IHM^Lj9znPElu=Ex*+smPcqb;P@>V11NAd5JlKiUMQ373P
z8xNJxzvMZXYpkbZ1p<=v!A%S1XnE^<enJsnp>X!M)TH$wKklTVx`<=P&(In<Uh<E~
zTLjD&UX12Sp?cQ}t1HU&pj@s{_!fH9H?m~6lDLS3frfd#HxUv}4xycOkt+*_6q;ig
zCO6aQOAI1t%}A$RknpCDDX;6})buLJa<_w9nyaJ>n)|Zq{H(G$B3>j$lo4)m*r>m3
z8S?(((qx3lU+JdTMWkg<vt{fmeSYdqx6CM3P=`b!-ZK;)$Ia_0G4{`T5t~hMUz62h
zhuBeu%6+}Yd|PIkZV+fFk*);K9e*<Uqf^O5$Sj{;yB$~9pSPWOi*j)5-j4&D9G6eP
zM90%`i<GOal`*v$K8vsek!&v8=47ah>KMW7^X9QQ){uICJP!lsZrL#Zng5<BfWY4-
ztiExfQ|5xPU0mD6eYrWL`B4z?{`#KSfb0OU^gT63r(GU~3NN&CWoy*-{mt}5BH-1}
mv@aXaF{#>bnP8Y6=emoYc<XZpd{Q^(6u#Is-A?^qC;vD3@0E1`

literal 0
HcmV?d00001

diff --git a/src/com/minamp/App.java b/src/com/minamp/App.java
new file mode 100644
index 0000000..8aca2ed
--- /dev/null
+++ b/src/com/minamp/App.java
@@ -0,0 +1,183 @@
+package com.minamp;
+
+import java.io.ByteArrayOutputStream;
+import java.io.IOException;
+import java.io.InputStream;
+import java.util.ArrayList;
+import java.util.HashSet;
+import java.util.List;
+import java.util.Set;
+import java.util.UUID;
+
+import android.app.Application;
+import android.content.BroadcastReceiver;
+import android.content.Context;
+import android.content.Intent;
+import android.content.IntentFilter;
+import android.content.SharedPreferences;
+import android.net.ConnectivityManager;
+import android.net.NetworkInfo;
+import android.os.Build;
+import android.os.Handler;
+
+import com.minamp.net.CertVerifier;
+import com.minamp.net.Http;
+import com.minamp.plex.Library;
+import com.minamp.plex.Plex;
+import com.minamp.plex.Server;
+import com.minamp.util.Json;
+
+public class App extends Application {
+
+    private static App instance;
+    public static App get() { return instance; }
+
+    public Handler handler;
+    public SharedPreferences prefs;
+    public Server server;
+    public Library library;
+    public ImageLoader images;
+
+    // quality: 0 = original (direct play when possible), otherwise MP3 kbps
+    public static final int[] QUALITIES = {0, 320, 256, 192, 128, 96};
+    public static final String[] QUALITY_LABELS = {"Original", "320 kbps MP3", "256 kbps MP3", "192 kbps MP3", "128 kbps MP3", "96 kbps MP3"};
+
+    @Override
+    public void onCreate() {
+        super.onCreate();
+        instance = this;
+        handler = new Handler();
+        prefs = getSharedPreferences("minamp", MODE_PRIVATE);
+
+        // Android 2.2's HttpURLConnection pool is buggy; we use our own client, but be safe.
+        System.setProperty("http.keepAlive", "false");
+
+        String cid = prefs.getString("clientId", null);
+        if (cid == null) {
+            cid = UUID.randomUUID().toString();
+            prefs.edit().putString("clientId", cid).commit();
+        }
+        Plex.clientId = cid;
+        Plex.platformVersion = Build.VERSION.RELEASE;
+        Plex.device = Build.MODEL;
+        Plex.deviceName = Build.MODEL;
+        try { Plex.version = getPackageManager().getPackageInfo(getPackageName(), 0).versionName; } catch (Exception ignored) {}
+
+        CertVerifier.setRootStore(new AssetRoots(this));
+        images = new ImageLoader(this);
+        loadServer();
+        PlayQueue.get().restore(this);
+
+        registerReceiver(new BroadcastReceiver() {
+            @Override public void onReceive(Context c, Intent i) {
+                // Network changed (Wi-Fi <-> mobile, new Wi-Fi...): re-pick the best connection lazily.
+                if (server != null) server.invalidate();
+            }
+        }, new IntentFilter(ConnectivityManager.CONNECTIVITY_ACTION));
+    }
+
+    // ------------------------------------------------------------------ server/library
+
+    public void loadServer() {
+        String sj = prefs.getString("server", null);
+        String sec = prefs.getString("section", null);
+        server = null;
+        library = null;
+        if (sj != null) {
+            try {
+                server = Server.fromJson(Json.parseObj(sj));
+                if (sec != null) library = new Library(server, sec);
+            } catch (Exception e) {
+                server = null;
+            }
+        }
+    }
+
+    public void saveServer(Server s) {
+        prefs.edit().putString("server", s.toJson().toString()).remove("section").remove("sectionTitle").commit();
+        server = s;
+        library = null;
+    }
+
+    public void saveSection(String key, String title) {
+        prefs.edit().putString("section", key).putString("sectionTitle", title).commit();
+        library = new Library(server, key);
+    }
+
+    public boolean isConfigured() { return server != null && library != null; }
+
+    public String sectionTitle() { return prefs.getString("sectionTitle", "Music"); }
+
+    public void signOut() {
+        prefs.edit().remove("server").remove("section").remove("sectionTitle").remove("account").remove("username").commit();
+        server = null;
+        library = null;
+        Http.evictAll();
+    }
+
+    // ------------------------------------------------------------------ quality
+
+    public boolean onMobileData() {
+        try {
+            ConnectivityManager cm = (ConnectivityManager) getSystemService(CONNECTIVITY_SERVICE);
+            NetworkInfo ni = cm.getActiveNetworkInfo();
+            return ni != null && ni.getType() != ConnectivityManager.TYPE_WIFI;
+        } catch (Exception e) {
+            return false;
+        }
+    }
+
+    public int qualityHome() { return prefs.getInt("qHome", 0); }
+    public int qualityAway() { return prefs.getInt("qAway", 192); }
+
+    /** Max kbps for the current situation; 0 = original. */
+    public int currentMaxKbps() {
+        boolean away = server == null || !server.isLocal() || onMobileData();
+        int q = away ? qualityAway() : qualityHome();
+        if (server != null && server.isRelay() && (q == 0 || q > 192)) q = 192; // relay is bandwidth-capped
+        return q;
+    }
+
+    public boolean downloadFirst() { return prefs.getBoolean("downloadFirst", false); }
+
+    // ------------------------------------------------------------------ trust store
+
+    /** Mozilla roots shipped as assets/roots/<sha1(subject)>-<n>.der */
+    static final class AssetRoots implements CertVerifier.RootStore {
+        private final Context ctx;
+        private Set<String> names;
+
+        AssetRoots(Context c) { ctx = c; }
+
+        public synchronized List<byte[]> find(byte[] subjectDer) {
+            try {
+                if (names == null) {
+                    names = new HashSet<String>();
+                    String[] l = ctx.getAssets().list("roots");
+                    if (l != null) for (int i = 0; i < l.length; i++) names.add(l[i]);
+                }
+                String h = CertVerifier.sha1Hex(subjectDer);
+                List<byte[]> out = null;
+                for (int i = 0; names.contains(h + "-" + i + ".der"); i++) {
+                    if (out == null) out = new ArrayList<byte[]>();
+                    out.add(readAll(ctx.getAssets().open("roots/" + h + "-" + i + ".der")));
+                }
+                return out;
+            } catch (IOException e) {
+                return null;
+            }
+        }
+    }
+
+    static byte[] readAll(InputStream in) throws IOException {
+        try {
+            ByteArrayOutputStream b = new ByteArrayOutputStream();
+            byte[] buf = new byte[4096];
+            int n;
+            while ((n = in.read(buf)) > 0) b.write(buf, 0, n);
+            return b.toByteArray();
+        } finally {
+            in.close();
+        }
+    }
+}
diff --git a/src/com/minamp/BaseActivity.java b/src/com/minamp/BaseActivity.java
new file mode 100644
index 0000000..5637a68
--- /dev/null
+++ b/src/com/minamp/BaseActivity.java
@@ -0,0 +1,448 @@
+package com.minamp;
+
+import java.util.ArrayList;
+import java.util.List;
+import java.util.concurrent.ExecutorService;
+import java.util.concurrent.Executors;
+
+import android.app.Activity;
+import android.app.AlertDialog;
+import android.content.DialogInterface;
+import android.content.Intent;
+import android.view.Menu;
+import android.view.MenuItem;
+import android.view.View;
+import android.widget.ImageButton;
+import android.widget.ImageView;
+import android.widget.ProgressBar;
+import android.widget.TextView;
+import android.widget.Toast;
+
+import com.minamp.plex.Item;
+import com.minamp.plex.Library;
+import com.minamp.plex.Server;
+
+/** Shared bits: background tasks, mini player, item actions, settings menu. */
+public abstract class BaseActivity extends Activity implements PlayerService.Listener, PlayQueue.Listener {
+
+    private static final ExecutorService POOL = Executors.newFixedThreadPool(2);
+
+    protected App app;
+    protected boolean destroyed;
+    protected boolean visible;
+    private View mini;
+    private ImageView miniArt;
+    private TextView miniTitle, miniSub;
+    private ImageButton miniPlay;
+    private ProgressBar miniProgress;
+    private Glyph miniPlayGlyph;
+    private String miniThumb;
+
+    // ------------------------------------------------------------------ tasks
+
+    public abstract static class Task<T> {
+        public abstract T work() throws Exception;
+        public void done(T result) {}
+        public void fail(Exception e) {}
+    }
+
+    protected <T> void run(final Task<T> t) {
+        POOL.execute(new Runnable() {
+            public void run() {
+                try {
+                    final T r = t.work();
+                    app.handler.post(new Runnable() { public void run() { if (!destroyed) t.done(r); } });
+                } catch (final Exception e) {
+                    app.handler.post(new Runnable() { public void run() { if (!destroyed) t.fail(e); } });
+                } catch (final OutOfMemoryError e) {
+                    app.images.clearMemory();
+                    app.handler.post(new Runnable() { public void run() { if (!destroyed) t.fail(new Exception("Out of memory")); } });
+                }
+            }
+        });
+    }
+
+    protected void toast(String s) { Toast.makeText(this, s, Toast.LENGTH_SHORT).show(); }
+
+    protected static String msg(Exception e) { return PlayerService.message(e); }
+
+    // ------------------------------------------------------------------ lifecycle
+
+    @Override
+    protected void onCreate(android.os.Bundle b) {
+        super.onCreate(b);
+        app = App.get();
+    }
+
+    @Override
+    protected void onResume() {
+        super.onResume();
+        visible = true;
+        PlayerService.addListener(this);
+        PlayQueue.get().addListener(this);
+        bindMini();
+        app.handler.post(tick);
+    }
+
+    @Override
+    protected void onPause() {
+        super.onPause();
+        visible = false;
+        PlayerService.removeListener(this);
+        PlayQueue.get().removeListener(this);
+        app.handler.removeCallbacks(tick);
+    }
+
+    @Override
+    protected void onDestroy() {
+        destroyed = true;
+        super.onDestroy();
+    }
+
+    private final Runnable tick = new Runnable() {
+        public void run() {
+            if (!visible) return;
+            onTick();
+            app.handler.postDelayed(this, 500);
+        }
+    };
+
+    protected void onTick() { updateMiniProgress(); }
+
+    public void onPlayerChanged() { updateMini(); }
+
+    public void onQueueChanged() { updateMini(); }
+
+    // ------------------------------------------------------------------ top bar
+
+    protected void setupTopBar(String title, String sub, boolean back) {
+        TextView t = (TextView) findViewById(R.id.bar_title);
+        if (t != null) t.setText(title);
+        setBarSub(sub);
+        ImageButton b = (ImageButton) findViewById(R.id.btn_back);
+        if (b != null && back) {
+            b.setVisibility(View.VISIBLE);
+            Ui.icon(b, Glyph.BACK, getResources().getColor(R.color.text));
+            b.setOnClickListener(new View.OnClickListener() { public void onClick(View v) { finish(); } });
+        }
+    }
+
+    protected void setBarSub(String sub) {
+        TextView s = (TextView) findViewById(R.id.bar_sub);
+        if (s == null) return;
+        s.setVisibility(sub == null || sub.length() == 0 ? View.GONE : View.VISIBLE);
+        s.setText(sub);
+    }
+
+    protected ImageButton barAction(int id, int glyph, View.OnClickListener l) {
+        ImageButton b = (ImageButton) findViewById(id);
+        b.setVisibility(View.VISIBLE);
+        Ui.icon(b, glyph, getResources().getColor(R.color.text));
+        b.setOnClickListener(l);
+        return b;
+    }
+
+    // ------------------------------------------------------------------ status overlay
+
+    protected void showStatus(boolean spinning, String text, final Runnable retry) {
+        View box = findViewById(R.id.status_box);
+        if (box == null) return;
+        box.setVisibility(View.VISIBLE);
+        findViewById(R.id.status_spin).setVisibility(spinning ? View.VISIBLE : View.GONE);
+        ((TextView) findViewById(R.id.status_text)).setText(text);
+        View r = findViewById(R.id.status_retry);
+        r.setVisibility(retry != null ? View.VISIBLE : View.GONE);
+        if (retry != null) r.setOnClickListener(new View.OnClickListener() { public void onClick(View v) { retry.run(); } });
+    }
+
+    protected void hideStatus() {
+        View box = findViewById(R.id.status_box);
+        if (box != null) box.setVisibility(View.GONE);
+    }
+
+    // ------------------------------------------------------------------ mini player
+
+    private void bindMini() {
+        if (mini == null) {
+            mini = findViewById(R.id.mini_root);
+            if (mini == null) return;
+            miniArt = (ImageView) findViewById(R.id.mini_art);
+            miniTitle = (TextView) findViewById(R.id.mini_title);
+            miniSub = (TextView) findViewById(R.id.mini_sub);
+            miniPlay = (ImageButton) findViewById(R.id.mini_play);
+            miniProgress = (ProgressBar) findViewById(R.id.mini_progress);
+            miniPlayGlyph = Ui.glyph(this, Glyph.PLAY, getResources().getColor(R.color.text), 18);
+            miniPlayGlyph.scale(1f);
+            miniPlay.setImageDrawable(miniPlayGlyph);
+            ImageButton next = (ImageButton) findViewById(R.id.mini_next);
+            Ui.icon(next, Glyph.NEXT, getResources().getColor(R.color.text), 16);
+            miniPlay.setOnClickListener(new View.OnClickListener() {
+                public void onClick(View v) { PlayerService.send(BaseActivity.this, PlayerService.ACTION_TOGGLE); }
+            });
+            next.setOnClickListener(new View.OnClickListener() {
+                public void onClick(View v) { PlayerService.send(BaseActivity.this, PlayerService.ACTION_NEXT); }
+            });
+            findViewById(R.id.mini_body).setOnClickListener(new View.OnClickListener() {
+                public void onClick(View v) { startActivity(new Intent(BaseActivity.this, NowPlayingActivity.class)); }
+            });
+        }
+        updateMini();
+    }
+
+    private void updateMini() {
+        if (mini == null) return;
+        Item it = PlayQueue.get().current();
+        if (it == null) { mini.setVisibility(View.GONE); return; }
+        mini.setVisibility(View.VISIBLE);
+        miniTitle.setText(it.title);
+        String st = PlayerService.status();
+        miniSub.setText(PlayerService.state() == PlayerService.BUFFERING && st.length() > 0 ? st : it.artist);
+        miniPlayGlyph.setType(PlayerService.isPlaying() ? Glyph.PAUSE : Glyph.PLAY);
+        if (!it.thumb.equals(miniThumb)) {
+            miniThumb = it.thumb;
+            app.images.load(miniArt, it.thumb, Ui.dp(this, 40), R.drawable.art_placeholder);
+        }
+        updateMiniProgress();
+    }
+
+    private void updateMiniProgress() {
+        if (mini == null || miniProgress == null) return;
+        long d = PlayerService.duration();
+        miniProgress.setProgress(d > 0 ? (int) (PlayerService.position() * 1000 / d) : 0);
+    }
+
+    // ------------------------------------------------------------------ item actions
+
+    protected Library lib() { return app.library; }
+
+    /** Tap on an item in a list. `context` = the list it's in (tracks play from there). */
+    protected void open(Item it, List<Item> contextTracks, int trackIndex, String sourceTitle) {
+        switch (it.type) {
+            case Item.ARTIST:
+            case Item.ALBUM:
+            case Item.PLAYLIST:
+                startActivity(new Intent(this, BrowseActivity.class).putExtra(BrowseActivity.EXTRA_ITEM, it.serialize()));
+                break;
+            case Item.TRACK:
+                List<Item> q = contextTracks;
+                int idx = trackIndex;
+                if (q == null || q.isEmpty()) { q = new ArrayList<Item>(); q.add(it); idx = 0; }
+                playList(q, idx, false, sourceTitle);
+                break;
+        }
+    }
+
+    protected void playList(List<Item> tracks, int start, boolean shuffle, String title) {
+        if (tracks.isEmpty()) { toast("Nothing to play"); return; }
+        PlayQueue.get().set(tracks, start, shuffle, title);
+        PlayerService.playCurrent(this, 0);
+    }
+
+    /** Fetch the tracks of an album/artist/playlist, then play/queue them. */
+    protected void playContainer(final Item it, final boolean shuffle, final int how) {
+        final Library lib = lib();
+        if (lib == null) return;
+        toast(how == 0 ? (shuffle ? "Shuffling " : "Playing ") + it.title : "Adding " + it.title + "…");
+        run(new Task<List<Item>>() {
+            public List<Item> work() throws Exception { return lib.tracksOf(it); }
+            public void done(List<Item> tracks) {
+                if (tracks.isEmpty()) { toast("No tracks"); return; }
+                boolean wasEmpty = PlayQueue.get().size() == 0;
+                if (how == 1) { PlayQueue.get().playNext(tracks); toast("Playing next"); }
+                else if (how == 2) { PlayQueue.get().append(tracks); toast("Added to queue"); }
+                else { playList(tracks, shuffle ? -1 : 0, shuffle, it.title); return; }
+                if (wasEmpty) PlayerService.playCurrent(BaseActivity.this, 0);
+            }
+            public void fail(Exception e) { toast(msg(e)); }
+        });
+    }
+
+    protected void runRadio(final String title, final Task<List<Item>> fetch) {
+        toast("Starting " + title + "…");
+        run(new Task<List<Item>>() {
+            public List<Item> work() throws Exception { return fetch.work(); }
+            public void done(List<Item> tracks) {
+                if (tracks.isEmpty()) { toast("Nothing found for " + title); return; }
+                playList(tracks, 0, false, title);
+            }
+            public void fail(Exception e) { toast(msg(e)); }
+        });
+    }
+
+    /** Long-press menu for any item. */
+    protected void itemMenu(final Item it) {
+        final List<String> labels = new ArrayList<String>();
+        final List<Integer> actions = new ArrayList<Integer>();
+        if (it.type == Item.TRACK) {
+            labels.add("Play next"); actions.add(1);
+            labels.add("Add to queue"); actions.add(2);
+            if (it.albumKey.length() > 0) { labels.add("Go to album"); actions.add(5); }
+            if (it.artistKey.length() > 0) { labels.add("Go to artist"); actions.add(6); }
+            labels.add(it.loved() ? "Unlove" : "Love"); actions.add(7);
+        } else if (it.isContainer()) {
+            labels.add("Play"); actions.add(0);
+            labels.add(it.type == Item.ARTIST ? "Artist radio (shuffle)" : "Shuffle"); actions.add(3);
+            labels.add("Play next"); actions.add(1);
+            labels.add("Add to queue"); actions.add(2);
+            if (it.type == Item.ALBUM && it.artistKey.length() > 0) { labels.add("Go to artist"); actions.add(6); }
+        } else return;
+        new AlertDialog.Builder(this)
+            .setTitle(it.title)
+            .setItems(labels.toArray(new String[labels.size()]), new DialogInterface.OnClickListener() {
+                public void onClick(DialogInterface d, int which) { itemAction(it, actions.get(which).intValue()); }
+            })
+            .show();
+    }
+
+    protected void itemAction(final Item it, int action) {
+        switch (action) {
+            case 0: playContainer(it, false, 0); break;
+            case 3: playContainer(it, true, 0); break;
+            case 1:
+            case 2:
+                if (it.type == Item.TRACK) {
+                    List<Item> one = new ArrayList<Item>();
+                    one.add(it);
+                    boolean wasEmpty = PlayQueue.get().size() == 0;
+                    if (action == 1) PlayQueue.get().playNext(one); else PlayQueue.get().append(one);
+                    if (wasEmpty) PlayerService.playCurrent(this, 0);
+                    toast(action == 1 ? "Playing next" : "Added to queue");
+                } else {
+                    playContainer(it, false, action);
+                }
+                break;
+            case 5: openKey(it.albumKey, Item.ALBUM, it.album); break;
+            case 6: openKey(it.artistKey, Item.ARTIST, it.type == Item.ALBUM ? it.artist : it.artist); break;
+            case 7: toggleLove(it, null); break;
+        }
+    }
+
+    protected void openKey(String ratingKey, int type, String title) {
+        Item i = new Item();
+        i.type = type;
+        i.ratingKey = ratingKey;
+        i.title = title;
+        startActivity(new Intent(this, BrowseActivity.class).putExtra(BrowseActivity.EXTRA_ITEM, i.serialize()));
+    }
+
+    protected void toggleLove(final Item it, final Runnable after) {
+        final Library lib = lib();
+        if (lib == null) return;
+        final boolean love = !it.loved();
+        final double old = it.userRating;
+        it.userRating = love ? 10 : -1;
+        Item cur = PlayQueue.get().current();
+        if (cur != null && cur != it && cur.ratingKey.equals(it.ratingKey)) cur.userRating = it.userRating;
+        if (after != null) after.run();
+        run(new Task<Object>() {
+            public Object work() throws Exception { lib.rate(it, love ? 10 : -1); return null; }
+            public void done(Object o) { toast(love ? "Loved" : "Removed from loved"); }
+            public void fail(Exception e) {
+                it.userRating = old;
+                if (after != null) after.run();
+                toast("Couldn't save rating: " + msg(e));
+            }
+        });
+    }
+
+    // ------------------------------------------------------------------ menu
+
+    @Override
+    public boolean onCreateOptionsMenu(Menu menu) {
+        menu.add(0, 1, 0, "Now playing");
+        menu.add(0, 2, 0, "Search");
+        menu.add(0, 3, 0, "Settings");
+        return true;
+    }
+
+    @Override
+    public boolean onOptionsItemSelected(MenuItem item) {
+        switch (item.getItemId()) {
+            case 1: startActivity(new Intent(this, NowPlayingActivity.class)); return true;
+            case 2: startActivity(new Intent(this, SearchActivity.class)); return true;
+            case 3: showSettings(); return true;
+        }
+        return super.onOptionsItemSelected(item);
+    }
+
+    protected void showSettings() {
+        Server s = app.server;
+        String conn = s == null || s.active() == null ? "not connected yet" : Server.kindLabel(s.active().kind)
+                + (s.active().uri.startsWith("https") ? " (secure)" : " (unencrypted)");
+        final String[] rows = {
+            "Quality at home: " + qualityLabel(app.qualityHome()),
+            "Quality away / mobile data: " + qualityLabel(app.qualityAway()),
+            "Download tracks before playing: " + (app.downloadFirst() ? "On" : "Off"),
+            "Library: " + app.sectionTitle(),
+            "Server: " + (s == null ? "-" : s.name),
+            "Connection: " + conn,
+            "Sign out",
+        };
+        new AlertDialog.Builder(this)
+            .setTitle("Settings")
+            .setItems(rows, new DialogInterface.OnClickListener() {
+                public void onClick(DialogInterface d, int which) {
+                    switch (which) {
+                        case 0: pickQuality("qHome", app.qualityHome(), "Quality at home"); break;
+                        case 1: pickQuality("qAway", app.qualityAway(), "Quality away / mobile"); break;
+                        case 2:
+                            app.prefs.edit().putBoolean("downloadFirst", !app.downloadFirst()).commit();
+                            toast("Download before playing: " + (app.downloadFirst() ? "on" : "off"));
+                            break;
+                        case 3: startActivity(new Intent(BaseActivity.this, SetupActivity.class).putExtra(SetupActivity.EXTRA_MODE, SetupActivity.MODE_LIBRARY)); break;
+                        case 4: startActivity(new Intent(BaseActivity.this, SetupActivity.class).putExtra(SetupActivity.EXTRA_MODE, SetupActivity.MODE_SERVER)); break;
+                        case 5:
+                            if (app.server != null) {
+                                app.server.invalidate();
+                                toast("Reconnecting…");
+                                final Server sv = app.server;
+                                run(new Task<Server.Conn>() {
+                                    public Server.Conn work() throws Exception { return sv.pick(); }
+                                    public void done(Server.Conn c) { toast("Connected: " + Server.kindLabel(c.kind)); onConnectionChanged(); }
+                                    public void fail(Exception e) { toast(msg(e)); }
+                                });
+                            }
+                            break;
+                        case 6: confirmSignOut(); break;
+                    }
+                }
+            }).show();
+    }
+
+    protected void onConnectionChanged() {}
+
+    private static String qualityLabel(int kbps) {
+        for (int i = 0; i < App.QUALITIES.length; i++) if (App.QUALITIES[i] == kbps) return App.QUALITY_LABELS[i];
+        return kbps + " kbps";
+    }
+
+    private void pickQuality(final String key, int current, String title) {
+        int sel = 0;
+        for (int i = 0; i < App.QUALITIES.length; i++) if (App.QUALITIES[i] == current) sel = i;
+        new AlertDialog.Builder(this)
+            .setTitle(title)
+            .setSingleChoiceItems(App.QUALITY_LABELS, sel, new DialogInterface.OnClickListener() {
+                public void onClick(DialogInterface d, int which) {
+                    app.prefs.edit().putInt(key, App.QUALITIES[which]).commit();
+                    d.dismiss();
+                    toast("Applies from the next track");
+                }
+            }).show();
+    }
+
+    private void confirmSignOut() {
+        new AlertDialog.Builder(this)
+            .setMessage("Sign out and forget this server?")
+            .setPositiveButton("Sign out", new DialogInterface.OnClickListener() {
+                public void onClick(DialogInterface d, int w) {
+                    PlayerService.send(BaseActivity.this, PlayerService.ACTION_STOP);
+                    PlayQueue.get().clear();
+                    app.signOut();
+                    startActivity(new Intent(BaseActivity.this, SetupActivity.class).addFlags(Intent.FLAG_ACTIVITY_CLEAR_TOP));
+                    finish();
+                }
+            })
+            .setNegativeButton("Cancel", null)
+            .show();
+    }
+}
diff --git a/src/com/minamp/BrowseActivity.java b/src/com/minamp/BrowseActivity.java
new file mode 100644
index 0000000..7af57b4
--- /dev/null
+++ b/src/com/minamp/BrowseActivity.java
@@ -0,0 +1,163 @@
+package com.minamp;
+
+import java.util.List;
+
+import android.os.Bundle;
+import android.view.View;
+import android.widget.AdapterView;
+import android.widget.Button;
+import android.widget.ImageView;
+import android.widget.ListView;
+import android.widget.TextView;
+
+import com.minamp.plex.Item;
+import com.minamp.plex.Library;
+
+/** Artist (albums), album (tracks) or playlist (tracks) page with Play / Shuffle header. */
+public class BrowseActivity extends BaseActivity {
+
+    public static final String EXTRA_ITEM = "item";
+
+    private Item item;
+    private ListView list;
+    private ItemAdapter adapter;
+    private View header;
+
+    @Override
+    protected void onCreate(Bundle b) {
+        super.onCreate(b);
+        if (app.library == null) { finish(); return; }
+        setContentView(R.layout.activity_browse);
+        try {
+            item = Item.deserialize(getIntent().getStringExtra(EXTRA_ITEM));
+        } catch (Exception e) {
+            finish();
+            return;
+        }
+        setupTopBar(item.title, kindLabel(), true);
+        barAction(R.id.btn_action, Glyph.SEARCH, new View.OnClickListener() {
+            public void onClick(View v) { startActivity(new android.content.Intent(BrowseActivity.this, SearchActivity.class)); }
+        });
+
+        list = (ListView) findViewById(R.id.list);
+        adapter = new ItemAdapter(this, item.type == Item.ALBUM ? ItemAdapter.MODE_ALBUM_TRACKS : ItemAdapter.MODE_DEFAULT);
+        header = getLayoutInflater().inflate(R.layout.view_detail_header, list, false);
+        list.addHeaderView(header, null, false);
+        list.setAdapter(adapter);
+        list.setOnItemClickListener(new AdapterView.OnItemClickListener() {
+            public void onItemClick(AdapterView<?> p, View v, int pos, long id) {
+                int i = pos - list.getHeaderViewsCount();
+                if (i < 0 || i >= adapter.getCount()) return;
+                Item it = adapter.getItem(i);
+                open(it, adapter.tracks(), adapter.trackIndex(i), item.title);
+            }
+        });
+        list.setOnItemLongClickListener(new AdapterView.OnItemLongClickListener() {
+            public boolean onItemLongClick(AdapterView<?> p, View v, int pos, long id) {
+                int i = pos - list.getHeaderViewsCount();
+                if (i < 0 || i >= adapter.getCount()) return false;
+                itemMenu(adapter.getItem(i));
+                return true;
+            }
+        });
+
+        Button play = (Button) header.findViewById(R.id.detail_play);
+        Button shuffle = (Button) header.findViewById(R.id.detail_shuffle);
+        if (item.type == Item.ARTIST) { play.setText("Play all"); shuffle.setText("Artist radio"); }
+        play.setOnClickListener(new View.OnClickListener() { public void onClick(View v) { playAll(false); } });
+        shuffle.setOnClickListener(new View.OnClickListener() { public void onClick(View v) { playAll(true); } });
+
+        bindHeader();
+        load();
+    }
+
+    private String kindLabel() {
+        switch (item.type) {
+            case Item.ARTIST: return "Artist";
+            case Item.ALBUM: return "Album";
+            case Item.PLAYLIST: return "Playlist";
+            default: return "";
+        }
+    }
+
+    private void bindHeader() {
+        ((TextView) header.findViewById(R.id.detail_title)).setText(item.title);
+        TextView sub = (TextView) header.findViewById(R.id.detail_sub);
+        sub.setText(item.type == Item.ALBUM ? item.artist : kindLabel());
+        if (item.type == Item.ALBUM && item.artistKey.length() > 0) {
+            sub.setOnClickListener(new View.OnClickListener() {
+                public void onClick(View v) { openKey(item.artistKey, Item.ARTIST, item.artist); }
+            });
+        }
+        app.images.load((ImageView) header.findViewById(R.id.detail_art), item.thumb, Ui.dp(this, 104), R.drawable.art_placeholder);
+    }
+
+    private void setMeta(List<Item> children) {
+        StringBuilder sb = new StringBuilder();
+        if (item.type == Item.ARTIST) {
+            sb.append(children.size()).append(children.size() == 1 ? " album" : " albums");
+        } else {
+            long total = 0;
+            int n = 0;
+            for (int i = 0; i < children.size(); i++) if (children.get(i).type == Item.TRACK) { n++; total += children.get(i).duration; }
+            if (item.year > 0) sb.append(item.year).append(" · ");
+            sb.append(n).append(n == 1 ? " track" : " tracks");
+            if (total > 0) sb.append(" · ").append(Ui.longDuration(total));
+        }
+        ((TextView) header.findViewById(R.id.detail_meta)).setText(sb.toString());
+    }
+
+    private void load() {
+        final Library lib = lib();
+        final Item target = item;
+        showStatus(true, "Loading…", null);
+        run(new Task<Object[]>() {
+            public Object[] work() throws Exception {
+                Item full = null;
+                if (target.type != Item.PLAYLIST && (target.thumb.length() == 0 || (target.type == Item.ALBUM && target.artist.length() == 0))) {
+                    List<Item> l = lib.server.items("/library/metadata/" + target.ratingKey);
+                    if (!l.isEmpty()) full = l.get(0);
+                }
+                String path = Library.childrenPath(target);
+                if (target.type == Item.PLAYLIST) path += "?X-Plex-Container-Start=0&X-Plex-Container-Size=1000";
+                List<Item> children = lib.server.items(path);
+                return new Object[] { full, children };
+            }
+            @SuppressWarnings("unchecked")
+            public void done(Object[] r) {
+                hideStatus();
+                Item full = (Item) r[0];
+                if (full != null) {
+                    item.thumb = full.thumb; item.artist = full.artist; item.year = full.year;
+                    item.artistKey = full.artistKey; item.title = full.title;
+                    setupTopBar(item.title, kindLabel(), true);
+                    bindHeader();
+                }
+                List<Item> children = (List<Item>) r[1];
+                adapter.setAlbumArtist(item.artist);
+                adapter.set(children, -1);
+                setMeta(children);
+                if (children.isEmpty()) showStatus(false, "Nothing here", null);
+            }
+            public void fail(Exception e) {
+                showStatus(false, msg(e), new Runnable() { public void run() { load(); } });
+            }
+        });
+    }
+
+    private void playAll(boolean shuffle) {
+        if (item.type == Item.ARTIST) {
+            playContainer(item, shuffle, 0); // artist: all tracks via allLeaves
+            return;
+        }
+        List<Item> tracks = adapter.tracks();
+        if (tracks.isEmpty()) { playContainer(item, shuffle, 0); return; }
+        playList(tracks, shuffle ? -1 : 0, shuffle, item.title);
+    }
+
+    @Override
+    public void onQueueChanged() {
+        super.onQueueChanged();
+        if (adapter != null) adapter.notifyDataSetChanged();
+    }
+}
diff --git a/src/com/minamp/Glyph.java b/src/com/minamp/Glyph.java
new file mode 100644
index 0000000..ab09b79
--- /dev/null
+++ b/src/com/minamp/Glyph.java
@@ -0,0 +1,206 @@
+package com.minamp;
+
+import android.graphics.Canvas;
+import android.graphics.ColorFilter;
+import android.graphics.Paint;
+import android.graphics.Path;
+import android.graphics.PixelFormat;
+import android.graphics.Rect;
+import android.graphics.RectF;
+import android.graphics.drawable.Drawable;
+
+/** Resolution-independent icons drawn with paths (no PNG sets, crisp on ldpi). */
+public final class Glyph extends Drawable {
+
+    public static final int PLAY = 1, PAUSE = 2, NEXT = 3, PREV = 4, SHUFFLE = 5, REPEAT = 6, REPEAT_ONE = 7,
+            HEART = 8, HEART_OUTLINE = 9, QUEUE = 10, SEARCH = 11, MOON = 12, RADIO = 13, BACK = 14, MORE = 15, NOTE = 16, CLOCK = 17;
+
+    private int type;
+    private final Paint fill = new Paint(Paint.ANTI_ALIAS_FLAG);
+    private final Paint stroke = new Paint(Paint.ANTI_ALIAS_FLAG);
+    private final Path path = new Path();
+    private final int sizePx;
+    private float scale = 0.5f; // glyph size relative to bounds
+
+    public Glyph(int type, int color, int sizePx) {
+        this.type = type;
+        this.sizePx = sizePx;
+        fill.setColor(color);
+        fill.setStyle(Paint.Style.FILL);
+        stroke.setColor(color);
+        stroke.setStyle(Paint.Style.STROKE);
+        stroke.setStrokeCap(Paint.Cap.ROUND);
+        stroke.setStrokeJoin(Paint.Join.ROUND);
+    }
+
+    public Glyph scale(float s) { scale = s; invalidateSelf(); return this; }
+
+    public void setType(int t) { if (t != type) { type = t; invalidateSelf(); } }
+
+    public void setColor(int c) { fill.setColor(c); stroke.setColor(c); invalidateSelf(); }
+
+    @Override public int getIntrinsicWidth() { return sizePx; }
+    @Override public int getIntrinsicHeight() { return sizePx; }
+
+    @Override
+    public void draw(Canvas c) {
+        Rect b = getBounds();
+        float s = Math.min(b.width(), b.height()) * scale;
+        float cx = b.exactCenterX(), cy = b.exactCenterY();
+        float l = cx - s / 2, t = cy - s / 2, r = cx + s / 2, bt = cy + s / 2;
+        stroke.setStrokeWidth(Math.max(1.5f, s * 0.11f));
+        path.reset();
+        switch (type) {
+            case PLAY:
+                path.moveTo(l + s * 0.15f, t);
+                path.lineTo(r, cy);
+                path.lineTo(l + s * 0.15f, bt);
+                path.close();
+                c.drawPath(path, fill);
+                break;
+            case PAUSE: {
+                float w = s * 0.3f;
+                c.drawRect(l + s * 0.08f, t, l + s * 0.08f + w, bt, fill);
+                c.drawRect(r - s * 0.08f - w, t, r - s * 0.08f, bt, fill);
+                break;
+            }
+            case NEXT:
+            case PREV: {
+                boolean next = type == NEXT;
+                float bar = s * 0.13f;
+                float tri = s - bar - s * 0.05f;
+                if (next) {
+                    path.moveTo(l, t); path.lineTo(l + tri, cy); path.lineTo(l, bt); path.close();
+                    c.drawPath(path, fill);
+                    c.drawRect(r - bar, t, r, bt, fill);
+                } else {
+                    path.moveTo(r, t); path.lineTo(r - tri, cy); path.lineTo(r, bt); path.close();
+                    c.drawPath(path, fill);
+                    c.drawRect(l, t, l + bar, bt, fill);
+                }
+                break;
+            }
+            case SHUFFLE: {
+                float a = s * 0.22f;
+                path.moveTo(l, t + s * 0.2f);
+                path.cubicTo(cx, t + s * 0.2f, cx, bt - s * 0.2f, r - a * 0.4f, bt - s * 0.2f);
+                path.moveTo(l, bt - s * 0.2f);
+                path.cubicTo(cx, bt - s * 0.2f, cx, t + s * 0.2f, r - a * 0.4f, t + s * 0.2f);
+                c.drawPath(path, stroke);
+                arrowHead(c, r, t + s * 0.2f, a);
+                arrowHead(c, r, bt - s * 0.2f, a);
+                break;
+            }
+            case REPEAT:
+            case REPEAT_ONE: {
+                float a = s * 0.2f;
+                RectF box = new RectF(l + s * 0.04f, t + s * 0.2f, r - s * 0.04f, bt - s * 0.2f);
+                float rr = s * 0.15f;
+                path.moveTo(box.left + rr * 2, box.top);
+                path.lineTo(box.right - rr, box.top);
+                path.quadTo(box.right, box.top, box.right, box.top + rr);
+                path.lineTo(box.right, box.bottom - rr);
+                path.quadTo(box.right, box.bottom, box.right - rr, box.bottom);
+                path.lineTo(box.left + rr, box.bottom);
+                path.quadTo(box.left, box.bottom, box.left, box.bottom - rr);
+                path.lineTo(box.left, box.top + rr);
+                path.quadTo(box.left, box.top, box.left + rr, box.top);
+                c.drawPath(path, stroke);
+                arrowHead(c, box.left + rr * 2 + a * 0.8f, box.top, a);
+                if (type == REPEAT_ONE) {
+                    Paint tp = new Paint(fill);
+                    tp.setTextSize(s * 0.5f);
+                    tp.setFakeBoldText(true);
+                    tp.setTextAlign(Paint.Align.CENTER);
+                    c.drawText("1", cx, cy + s * 0.18f, tp);
+                }
+                break;
+            }
+            case HEART:
+            case HEART_OUTLINE: {
+                float w = s, h = s * 0.9f;
+                float x = l, y = t + s * 0.08f;
+                path.moveTo(x + w / 2, y + h);
+                path.cubicTo(x - w * 0.15f, y + h * 0.45f, x + w * 0.05f, y - h * 0.15f, x + w / 2, y + h * 0.22f);
+                path.cubicTo(x + w * 0.95f, y - h * 0.15f, x + w * 1.15f, y + h * 0.45f, x + w / 2, y + h);
+                path.close();
+                c.drawPath(path, type == HEART ? fill : stroke);
+                break;
+            }
+            case QUEUE: {
+                float gap = s * 0.3f;
+                for (int i = 0; i < 3; i++) {
+                    float y = t + s * 0.15f + i * gap;
+                    c.drawLine(l + (i == 2 ? 0 : 0), y, r - (i == 2 ? s * 0.35f : 0), y, stroke);
+                }
+                path.moveTo(r - s * 0.25f, bt - s * 0.25f);
+                path.lineTo(r, bt - s * 0.08f);
+                path.lineTo(r - s * 0.25f, bt + s * 0.09f);
+                path.close();
+                c.drawPath(path, fill);
+                break;
+            }
+            case SEARCH: {
+                float rad = s * 0.32f;
+                c.drawCircle(l + rad + s * 0.05f, t + rad + s * 0.05f, rad, stroke);
+                c.drawLine(l + rad * 1.75f + s * 0.05f, t + rad * 1.75f + s * 0.05f, r, bt, stroke);
+                break;
+            }
+            case MOON: {
+                Path p2 = new Path();
+                path.addCircle(cx, cy, s * 0.45f, Path.Direction.CW);
+                c.save();
+                p2.addCircle(cx + s * 0.25f, cy - s * 0.2f, s * 0.38f, Path.Direction.CW);
+                c.clipPath(p2, android.graphics.Region.Op.DIFFERENCE);
+                c.drawPath(path, fill);
+                c.restore();
+                break;
+            }
+            case RADIO: {
+                c.drawCircle(cx, cy, s * 0.1f, fill);
+                RectF o = new RectF();
+                for (int i = 1; i <= 2; i++) {
+                    float rr = s * 0.22f * i;
+                    o.set(cx - rr, cy - rr, cx + rr, cy + rr);
+                    c.drawArc(o, -45, 90, false, stroke);
+                    c.drawArc(o, 135, 90, false, stroke);
+                }
+                break;
+            }
+            case BACK:
+                path.moveTo(cx + s * 0.15f, t);
+                path.lineTo(cx - s * 0.3f, cy);
+                path.lineTo(cx + s * 0.15f, bt);
+                c.drawPath(path, stroke);
+                break;
+            case MORE:
+                for (int i = -1; i <= 1; i++) c.drawCircle(cx, cy + i * s * 0.35f, s * 0.1f, fill);
+                break;
+            case NOTE: {
+                float rad = s * 0.18f;
+                c.drawCircle(l + rad + s * 0.1f, bt - rad, rad, fill);
+                c.drawLine(l + rad * 2 + s * 0.1f - stroke.getStrokeWidth() / 2, bt - rad, l + rad * 2 + s * 0.1f - stroke.getStrokeWidth() / 2, t, stroke);
+                c.drawLine(l + rad * 2 + s * 0.1f, t, r - s * 0.1f, t + s * 0.2f, stroke);
+                break;
+            }
+            case CLOCK:
+                c.drawCircle(cx, cy, s * 0.45f, stroke);
+                c.drawLine(cx, cy, cx, t + s * 0.18f, stroke);
+                c.drawLine(cx, cy, cx + s * 0.22f, cy, stroke);
+                break;
+        }
+    }
+
+    private void arrowHead(Canvas c, float tipX, float y, float a) {
+        Path p = new Path();
+        p.moveTo(tipX, y);
+        p.lineTo(tipX - a, y - a * 0.7f);
+        p.lineTo(tipX - a, y + a * 0.7f);
+        p.close();
+        c.drawPath(p, fill);
+    }
+
+    @Override public void setAlpha(int alpha) { fill.setAlpha(alpha); stroke.setAlpha(alpha); }
+    @Override public void setColorFilter(ColorFilter cf) { fill.setColorFilter(cf); stroke.setColorFilter(cf); }
+    @Override public int getOpacity() { return PixelFormat.TRANSLUCENT; }
+}
diff --git a/src/com/minamp/HomeActivity.java b/src/com/minamp/HomeActivity.java
new file mode 100644
index 0000000..b217534
--- /dev/null
+++ b/src/com/minamp/HomeActivity.java
@@ -0,0 +1,428 @@
+package com.minamp;
+
+import java.util.ArrayList;
+import java.util.List;
+import java.util.Random;
+
+import android.app.AlertDialog;
+import android.content.DialogInterface;
+import android.content.Intent;
+import android.os.Bundle;
+import android.view.LayoutInflater;
+import android.view.Menu;
+import android.view.MenuItem;
+import android.view.View;
+import android.view.ViewGroup;
+import android.widget.AdapterView;
+import android.widget.HorizontalScrollView;
+import android.widget.ImageView;
+import android.widget.LinearLayout;
+import android.widget.ListView;
+import android.widget.TextView;
+
+import com.minamp.plex.Item;
+import com.minamp.plex.Library;
+import com.minamp.plex.Server;
+import com.minamp.util.Json;
+
+public class HomeActivity extends BaseActivity {
+
+    private static final int TAB_HOME = 0, TAB_ARTISTS = 1, TAB_ALBUMS = 2, TAB_PLAYLISTS = 3;
+    private static final String[] ALBUM_SORTS = {"titleSort", "artist.titleSort", "addedAt:desc", "year:desc", "viewCount:desc"};
+    private static final String[] ALBUM_SORT_LABELS = {"Title", "Artist", "Recently added", "Year (newest)", "Most played"};
+
+    private TextView[] tabs;
+    private View tabLine;
+    private ListView artistsList, albumsList, playlistsList;
+    private ItemAdapter artists, albums, playlists;
+    private LinearLayout homeContent;
+    private int tab = -1;
+    private boolean[] loaded = new boolean[4];
+
+    @Override
+    protected void onCreate(Bundle b) {
+        super.onCreate(b);
+        if (!app.isConfigured()) {
+            startActivity(new Intent(this, SetupActivity.class));
+            finish();
+            return;
+        }
+        setContentView(R.layout.activity_home);
+        setupTopBar(app.sectionTitle(), connectionLine(), false);
+        barAction(R.id.btn_action, Glyph.SEARCH, new View.OnClickListener() {
+            public void onClick(View v) { startActivity(new Intent(HomeActivity.this, SearchActivity.class)); }
+        });
+        barAction(R.id.btn_action2, Glyph.MORE, new View.OnClickListener() {
+            public void onClick(View v) { openOptionsMenu(); }
+        });
+
+        tabs = new TextView[] {
+            (TextView) findViewById(R.id.tab_home), (TextView) findViewById(R.id.tab_artists),
+            (TextView) findViewById(R.id.tab_albums), (TextView) findViewById(R.id.tab_playlists)
+        };
+        tabLine = findViewById(R.id.tab_line);
+        for (int i = 0; i < tabs.length; i++) {
+            final int t = i;
+            tabs[i].setOnClickListener(new View.OnClickListener() { public void onClick(View v) { showTab(t); } });
+        }
+        homeContent = (LinearLayout) findViewById(R.id.home_content);
+        artistsList = (ListView) findViewById(R.id.list_artists);
+        albumsList = (ListView) findViewById(R.id.list_albums);
+        playlistsList = (ListView) findViewById(R.id.list_playlists);
+        artists = new ItemAdapter(this, ItemAdapter.MODE_DEFAULT);
+        albums = new ItemAdapter(this, ItemAdapter.MODE_DEFAULT);
+        playlists = new ItemAdapter(this, ItemAdapter.MODE_DEFAULT);
+        wire(artistsList, artists);
+        wire(albumsList, albums);
+        wire(playlistsList, playlists);
+        artists.setPager(new ItemAdapter.Pager() { public void loadMore(int from) { loadArtists(from); } });
+        albums.setPager(new ItemAdapter.Pager() { public void loadMore(int from) { loadAlbums(from); } });
+
+        Server.listener = new Server.Listener() {
+            public void onConnectionChanged(Server s) {
+                app.handler.post(new Runnable() { public void run() { if (!destroyed) setBarSub(connectionLine()); } });
+            }
+        };
+        showTab(app.prefs.getInt("tab", TAB_HOME));
+    }
+
+    @Override
+    protected void onNewIntent(Intent intent) {
+        super.onNewIntent(intent);
+        // library or server may have changed in setup
+        if (!app.isConfigured()) { startActivity(new Intent(this, SetupActivity.class)); finish(); return; }
+        setupTopBar(app.sectionTitle(), connectionLine(), false);
+        loaded = new boolean[4];
+        int t = tab;
+        tab = -1;
+        showTab(t);
+    }
+
+    @Override
+    protected void onConnectionChanged() { setBarSub(connectionLine()); }
+
+    private String connectionLine() {
+        Server s = app.server;
+        if (s == null) return "";
+        Server.Conn c = s.active();
+        return s.name + (c != null ? " · " + Server.kindLabel(c.kind) : "");
+    }
+
+    private void wire(final ListView lv, final ItemAdapter ad) {
+        lv.setAdapter(ad);
+        lv.setOnItemClickListener(new AdapterView.OnItemClickListener() {
+            public void onItemClick(AdapterView<?> p, View v, int pos, long id) { open(ad.getItem(pos), null, 0, null); }
+        });
+        lv.setOnItemLongClickListener(new AdapterView.OnItemLongClickListener() {
+            public boolean onItemLongClick(AdapterView<?> p, View v, int pos, long id) { itemMenu(ad.getItem(pos)); return true; }
+        });
+    }
+
+    private void showTab(int t) {
+        if (t == tab) return;
+        tab = t;
+        app.prefs.edit().putInt("tab", t).commit();
+        int accent = getResources().getColor(R.color.accent), dim = getResources().getColor(R.color.text2);
+        for (int i = 0; i < tabs.length; i++) tabs[i].setTextColor(i == t ? accent : dim);
+        int w = getResources().getDisplayMetrics().widthPixels / 4;
+        LinearLayout.LayoutParams lp = (LinearLayout.LayoutParams) tabLine.getLayoutParams();
+        lp.width = w;
+        lp.leftMargin = w * t;
+        tabLine.setLayoutParams(lp);
+        findViewById(R.id.home_scroll).setVisibility(t == TAB_HOME ? View.VISIBLE : View.GONE);
+        artistsList.setVisibility(t == TAB_ARTISTS ? View.VISIBLE : View.GONE);
+        albumsList.setVisibility(t == TAB_ALBUMS ? View.VISIBLE : View.GONE);
+        playlistsList.setVisibility(t == TAB_PLAYLISTS ? View.VISIBLE : View.GONE);
+        hideStatus();
+        if (!loaded[t]) {
+            loaded[t] = true;
+            switch (t) {
+                case TAB_HOME: buildHome(); break;
+                case TAB_ARTISTS: loadArtists(0); break;
+                case TAB_ALBUMS: loadAlbums(0); break;
+                case TAB_PLAYLISTS: loadPlaylists(); break;
+            }
+        }
+    }
+
+    // ------------------------------------------------------------------ home tab
+
+    private void buildHome() {
+        homeContent.removeAllViews();
+        LayoutInflater inf = getLayoutInflater();
+        int pad = Ui.dp(this, 8);
+
+        LinearLayout row1 = tileRow();
+        row1.addView(tile(inf, Glyph.RADIO, "Library radio", "Shuffle everything", new View.OnClickListener() {
+            public void onClick(View v) {
+                final Library lib = lib();
+                runRadio("Library radio", new Task<List<Item>>() { public List<Item> work() throws Exception { return lib.libraryRadio(); } });
+            }
+        }));
+        row1.addView(spacer());
+        row1.addView(tile(inf, Glyph.HEART, "Loved radio", "Your top rated", new View.OnClickListener() {
+            public void onClick(View v) {
+                final Library lib = lib();
+                runRadio("Loved radio", new Task<List<Item>>() { public List<Item> work() throws Exception { return lib.topRatedRadio(); } });
+            }
+        }));
+        homeContent.addView(row1);
+
+        LinearLayout row2 = tileRow();
+        row2.addView(tile(inf, Glyph.CLOCK, "Time travel", "Pick a decade", new View.OnClickListener() {
+            public void onClick(View v) { timeTravel(); }
+        }));
+        row2.addView(spacer());
+        row2.addView(tile(inf, Glyph.SHUFFLE, "Random album", "Feeling lucky", new View.OnClickListener() {
+            public void onClick(View v) { randomAlbum(); }
+        }));
+        homeContent.addView(row2);
+
+        addShelf(inf, "Recently added", lib().recentlyAddedPath(20), ALBUM_SORTS[2]);
+        addShelf(inf, "Recently played", lib().recentlyPlayedPath(20), null);
+        homeContent.setPadding(0, pad / 2, 0, pad);
+    }
+
+    private LinearLayout tileRow() {
+        LinearLayout r = new LinearLayout(this);
+        r.setOrientation(LinearLayout.HORIZONTAL);
+        int p = Ui.dp(this, 8);
+        r.setPadding(p, p / 2, p, p / 2);
+        return r;
+    }
+
+    private View spacer() {
+        View v = new View(this);
+        v.setLayoutParams(new LinearLayout.LayoutParams(Ui.dp(this, 8), 1));
+        return v;
+    }
+
+    private View tile(LayoutInflater inf, int glyph, String title, String sub, View.OnClickListener l) {
+        View t = inf.inflate(R.layout.view_home_tile, null);
+        t.setLayoutParams(new LinearLayout.LayoutParams(0, Ui.dp(this, 56), 1f));
+        Ui.icon((ImageView) t.findViewById(R.id.tile_icon), glyph, getResources().getColor(R.color.accent), 22);
+        ((TextView) t.findViewById(R.id.tile_title)).setText(title);
+        ((TextView) t.findViewById(R.id.tile_sub)).setText(sub);
+        t.setOnClickListener(l);
+        return t;
+    }
+
+    private void addShelf(LayoutInflater inf, final String title, final String path, final String seeAllSort) {
+        LinearLayout head = new LinearLayout(this);
+        head.setOrientation(LinearLayout.HORIZONTAL);
+        TextView h = (TextView) inf.inflate(R.layout.row_header, null);
+        h.setText(title.toUpperCase());
+        head.addView(h, new LinearLayout.LayoutParams(0, ViewGroup.LayoutParams.WRAP_CONTENT, 1f));
+        if (seeAllSort != null) {
+            TextView all = (TextView) inf.inflate(R.layout.row_header, null);
+            all.setText("SEE ALL ›");
+            all.setTextColor(getResources().getColor(R.color.text2));
+            all.setPadding(Ui.dp(this, 10), Ui.dp(this, 12), Ui.dp(this, 10), Ui.dp(this, 4));
+            all.setBackgroundResource(R.drawable.bg_pressable);
+            all.setOnClickListener(new View.OnClickListener() {
+                public void onClick(View v) {
+                    app.prefs.edit().putInt("albumSort", 2).commit();
+                    loaded[TAB_ALBUMS] = false;
+                    showTab(TAB_ALBUMS);
+                }
+            });
+            head.addView(all, new LinearLayout.LayoutParams(ViewGroup.LayoutParams.WRAP_CONTENT, ViewGroup.LayoutParams.WRAP_CONTENT));
+        }
+        homeContent.addView(head);
+
+        HorizontalScrollView hs = new HorizontalScrollView(this);
+        hs.setHorizontalScrollBarEnabled(false);
+        hs.setHorizontalFadingEdgeEnabled(false);
+        final LinearLayout strip = new LinearLayout(this);
+        strip.setOrientation(LinearLayout.HORIZONTAL);
+        strip.setPadding(Ui.dp(this, 6), 0, Ui.dp(this, 6), 0);
+        hs.addView(strip);
+        final TextView loading = new TextView(this);
+        loading.setText("Loading…");
+        loading.setTextColor(getResources().getColor(R.color.text2));
+        loading.setTextSize(12);
+        loading.setPadding(Ui.dp(this, 6), Ui.dp(this, 30), 0, Ui.dp(this, 30));
+        strip.addView(loading);
+        homeContent.addView(hs);
+
+        final Library lib = lib();
+        run(new Task<List<Item>>() {
+            public List<Item> work() throws Exception { return lib.server.items(path); }
+            public void done(List<Item> items) {
+                strip.removeAllViews();
+                if (items.isEmpty()) { loading.setText("Nothing here yet"); strip.addView(loading); return; }
+                LayoutInflater li = getLayoutInflater();
+                int art = Ui.dp(HomeActivity.this, 88);
+                for (int i = 0; i < items.size(); i++) {
+                    final Item it = items.get(i);
+                    View card = li.inflate(R.layout.view_album_card, strip, false);
+                    ((TextView) card.findViewById(R.id.card_title)).setText(it.title);
+                    ((TextView) card.findViewById(R.id.card_sub)).setText(it.artist);
+                    app.images.load((ImageView) card.findViewById(R.id.card_art), it.thumb, art, R.drawable.art_placeholder);
+                    card.setOnClickListener(new View.OnClickListener() { public void onClick(View v) { open(it, null, 0, null); } });
+                    card.setOnLongClickListener(new View.OnLongClickListener() { public boolean onLongClick(View v) { itemMenu(it); return true; } });
+                    strip.addView(card);
+                }
+            }
+            public void fail(Exception e) {
+                loading.setText("Couldn't load: " + msg(e) + "  (tap to retry)");
+                loading.setOnClickListener(new View.OnClickListener() {
+                    public void onClick(View v) { loaded[TAB_HOME] = false; buildHome(); loaded[TAB_HOME] = true; }
+                });
+            }
+        });
+    }
+
+    private void timeTravel() {
+        final Library lib = lib();
+        toast("Finding decades…");
+        run(new Task<List<Integer>>() {
+            public List<Integer> work() throws Exception { return lib.decades(); }
+            public void done(final List<Integer> decades) {
+                if (decades.isEmpty()) { toast("No release years in this library"); return; }
+                String[] labels = new String[decades.size() + 1];
+                labels[0] = "Surprise me";
+                for (int i = 0; i < decades.size(); i++) labels[i + 1] = decades.get(i) + "s";
+                new AlertDialog.Builder(HomeActivity.this).setTitle("Time travel radio")
+                    .setItems(labels, new DialogInterface.OnClickListener() {
+                        public void onClick(DialogInterface d, int which) {
+                            final int dec = which == 0 ? decades.get(new Random().nextInt(decades.size())).intValue()
+                                                       : decades.get(which - 1).intValue();
+                            runRadio(dec + "s radio", new Task<List<Item>>() {
+                                public List<Item> work() throws Exception { return lib.timeTravelRadio(dec); }
+                            });
+                        }
+                    }).show();
+            }
+            public void fail(Exception e) { toast(msg(e)); }
+        });
+    }
+
+    private void randomAlbum() {
+        final Library lib = lib();
+        run(new Task<List<Item>>() {
+            public List<Item> work() throws Exception { return lib.server.items(lib.albumsPath("random", 0, 1)); }
+            public void done(List<Item> l) {
+                if (l.isEmpty()) { toast("No albums"); return; }
+                Item a = l.get(0);
+                playContainer(a, false, 0);
+                open(a, null, 0, null);
+            }
+            public void fail(Exception e) { toast(msg(e)); }
+        });
+    }
+
+    // ------------------------------------------------------------------ list tabs
+
+    private int totalOf(Json.Obj mc, int fallback) {
+        if (mc == null) return fallback;
+        return mc.optInt("totalSize", fallback);
+    }
+
+    private void loadArtists(final int from) {
+        final Library lib = lib();
+        if (from == 0) showStatus(true, "Loading artists…", null);
+        run(new Task<Object[]>() {
+            public Object[] work() throws Exception {
+                Json.Obj mc = lib.server.get(lib.artistsPath(from, 100));
+                return new Object[] { Item.listFrom(mc), Integer.valueOf(totalOf(mc, -1)) };
+            }
+            @SuppressWarnings("unchecked")
+            public void done(Object[] r) {
+                if (tab == TAB_ARTISTS) hideStatus();
+                List<Item> l = (List<Item>) r[0];
+                int total = ((Integer) r[1]).intValue();
+                if (from == 0) artists.set(l, total); else artists.append(l, total);
+                if (from == 0 && l.isEmpty() && tab == TAB_ARTISTS) showStatus(false, "No artists in this library", null);
+            }
+            public void fail(Exception e) {
+                artists.loadFailed();
+                if (from == 0 && tab == TAB_ARTISTS) showStatus(false, msg(e), new Runnable() { public void run() { loadArtists(0); } });
+                else toast(msg(e));
+            }
+        });
+    }
+
+    private void loadAlbums(final int from) {
+        final Library lib = lib();
+        final String sort = ALBUM_SORTS[Math.min(app.prefs.getInt("albumSort", 0), ALBUM_SORTS.length - 1)];
+        if (from == 0) showStatus(true, "Loading albums…", null);
+        run(new Task<Object[]>() {
+            public Object[] work() throws Exception {
+                Json.Obj mc = lib.server.get(lib.albumsPath(sort, from, 100));
+                return new Object[] { Item.listFrom(mc), Integer.valueOf(totalOf(mc, -1)) };
+            }
+            @SuppressWarnings("unchecked")
+            public void done(Object[] r) {
+                if (tab == TAB_ALBUMS) hideStatus();
+                List<Item> l = (List<Item>) r[0];
+                int total = ((Integer) r[1]).intValue();
+                if (from == 0) { albums.set(l, total); albumsList.setSelection(0); } else albums.append(l, total);
+                if (from == 0 && l.isEmpty() && tab == TAB_ALBUMS) showStatus(false, "No albums in this library", null);
+            }
+            public void fail(Exception e) {
+                albums.loadFailed();
+                if (from == 0 && tab == TAB_ALBUMS) showStatus(false, msg(e), new Runnable() { public void run() { loadAlbums(0); } });
+                else toast(msg(e));
+            }
+        });
+    }
+
+    private void loadPlaylists() {
+        final Library lib = lib();
+        showStatus(true, "Loading playlists…", null);
+        run(new Task<List<Item>>() {
+            public List<Item> work() throws Exception { return lib.server.items(lib.playlistsPath()); }
+            public void done(List<Item> l) {
+                if (tab == TAB_PLAYLISTS) hideStatus();
+                List<Item> audio = new ArrayList<Item>();
+                for (int i = 0; i < l.size(); i++) if (l.get(i).type == Item.PLAYLIST) audio.add(l.get(i));
+                playlists.set(audio, -1);
+                if (audio.isEmpty() && tab == TAB_PLAYLISTS) showStatus(false, "No music playlists yet", null);
+            }
+            public void fail(Exception e) {
+                if (tab == TAB_PLAYLISTS) showStatus(false, msg(e), new Runnable() { public void run() { loadPlaylists(); } });
+            }
+        });
+    }
+
+    // ------------------------------------------------------------------ menu
+
+    @Override
+    public boolean onCreateOptionsMenu(Menu menu) {
+        super.onCreateOptionsMenu(menu);
+        menu.add(0, 10, 0, "Sort albums");
+        menu.add(0, 11, 0, "Refresh");
+        return true;
+    }
+
+    @Override
+    public boolean onPrepareOptionsMenu(Menu menu) {
+        MenuItem s = menu.findItem(10);
+        if (s != null) s.setVisible(tab == TAB_ALBUMS);
+        return super.onPrepareOptionsMenu(menu);
+    }
+
+    @Override
+    public boolean onOptionsItemSelected(MenuItem item) {
+        if (item.getItemId() == 10) {
+            new AlertDialog.Builder(this).setTitle("Sort albums by")
+                .setSingleChoiceItems(ALBUM_SORT_LABELS, app.prefs.getInt("albumSort", 0), new DialogInterface.OnClickListener() {
+                    public void onClick(DialogInterface d, int which) {
+                        d.dismiss();
+                        app.prefs.edit().putInt("albumSort", which).commit();
+                        loadAlbums(0);
+                    }
+                }).show();
+            return true;
+        }
+        if (item.getItemId() == 11) {
+            loaded = new boolean[4];
+            int t = tab;
+            tab = -1;
+            showTab(t);
+            return true;
+        }
+        return super.onOptionsItemSelected(item);
+    }
+}
diff --git a/src/com/minamp/ImageLoader.java b/src/com/minamp/ImageLoader.java
new file mode 100644
index 0000000..3c8857c
--- /dev/null
+++ b/src/com/minamp/ImageLoader.java
@@ -0,0 +1,199 @@
+package com.minamp;
+
+import java.io.File;
+import java.io.FileInputStream;
+import java.io.FileOutputStream;
+import java.util.ArrayList;
+import java.util.Arrays;
+import java.util.Comparator;
+import java.util.Iterator;
+import java.util.LinkedHashMap;
+import java.util.Map;
+
+import android.content.Context;
+import android.graphics.Bitmap;
+import android.graphics.BitmapFactory;
+import android.os.Environment;
+import android.widget.ImageView;
+
+import com.minamp.net.CertVerifier;
+import com.minamp.net.Http;
+
+/**
+ * Album-art loader for a phone with a 24-32 MB heap: Plex resizes art server-side, we decode as
+ * RGB_565, keep a small LRU in memory and a capped cache on the SD card, newest request first.
+ */
+public final class ImageLoader {
+
+    public interface Callback { void onBitmap(Bitmap b); }
+
+    private final App app;
+    private final LinkedHashMap<String, Bitmap> mem;
+    private int memBytes;
+    private final int memMax;
+    private final ArrayList<Job> stack = new ArrayList<Job>();
+    private File dir;
+
+    private static final class Job {
+        String key, thumb; int size; ImageView view; Callback cb;
+    }
+
+    ImageLoader(App app) {
+        this.app = app;
+        long max = Runtime.getRuntime().maxMemory();
+        memMax = (int) Math.min(max / 8, 4 * 1024 * 1024);
+        mem = new LinkedHashMap<String, Bitmap>(32, 0.75f, true);
+        for (int i = 0; i < 2; i++) {
+            Thread t = new Thread("img-" + i) {
+                public void run() { loop(); }
+            };
+            t.setDaemon(true);
+            t.setPriority(Thread.MIN_PRIORITY + 1);
+            t.start();
+        }
+    }
+
+    private File dir() {
+        if (dir != null) return dir;
+        File base = null;
+        try {
+            if (Environment.MEDIA_MOUNTED.equals(Environment.getExternalStorageState())) base = app.getExternalCacheDir();
+        } catch (Exception ignored) {}
+        if (base == null) base = app.getCacheDir();
+        dir = new File(base, "art");
+        dir.mkdirs();
+        return dir;
+    }
+
+    /** Loads art into a view (recycling-safe: the view remembers the latest request). */
+    public void load(ImageView v, String thumb, int sizePx, int placeholderRes) {
+        String key = key(thumb, sizePx);
+        v.setTag(R.id.tag_image, key);
+        if (key == null) { v.setImageResource(placeholderRes); return; }
+        Bitmap b = fromMem(key);
+        if (b != null) { v.setImageBitmap(b); return; }
+        v.setImageResource(placeholderRes);
+        Job j = new Job();
+        j.key = key; j.thumb = thumb; j.size = sizePx; j.view = v;
+        enqueue(j);
+    }
+
+    public void load(String thumb, int sizePx, Callback cb) {
+        String key = key(thumb, sizePx);
+        if (key == null) { cb.onBitmap(null); return; }
+        Bitmap b = fromMem(key);
+        if (b != null) { cb.onBitmap(b); return; }
+        Job j = new Job();
+        j.key = key; j.thumb = thumb; j.size = sizePx; j.cb = cb;
+        enqueue(j);
+    }
+
+    private static String key(String thumb, int size) {
+        if (thumb == null || thumb.length() == 0) return null;
+        return thumb + "@" + size;
+    }
+
+    private Bitmap fromMem(String key) {
+        synchronized (mem) { return mem.get(key); }
+    }
+
+    private void enqueue(Job j) {
+        synchronized (stack) {
+            // drop older jobs for the same view
+            if (j.view != null) {
+                for (Iterator<Job> it = stack.iterator(); it.hasNext();) if (it.next().view == j.view) it.remove();
+            }
+            stack.add(j);
+            if (stack.size() > 60) stack.remove(0);
+            stack.notify();
+        }
+    }
+
+    private void loop() {
+        while (true) {
+            Job j;
+            synchronized (stack) {
+                while (stack.isEmpty()) {
+                    try { stack.wait(); } catch (InterruptedException e) { return; }
+                }
+                j = stack.remove(stack.size() - 1); // LIFO: what's on screen now wins
+            }
+            if (j.view != null && !j.key.equals(j.view.getTag(R.id.tag_image))) continue;
+            Bitmap b = fromMem(j.key);
+            if (b == null) {
+                try { b = fetch(j); } catch (Throwable t) { b = null; }
+                if (b != null) {
+                    synchronized (mem) {
+                        Bitmap old = mem.put(j.key, b);
+                        if (old != null) memBytes -= bytes(old);
+                        memBytes += bytes(b);
+                        Iterator<Map.Entry<String, Bitmap>> it = mem.entrySet().iterator();
+                        while (memBytes > memMax && it.hasNext()) {
+                            Map.Entry<String, Bitmap> e = it.next();
+                            memBytes -= bytes(e.getValue());
+                            it.remove();
+                        }
+                    }
+                }
+            }
+            final Bitmap fb = b;
+            final Job fj = j;
+            app.handler.post(new Runnable() {
+                public void run() {
+                    if (fj.view != null) {
+                        if (fb != null && fj.key.equals(fj.view.getTag(R.id.tag_image))) fj.view.setImageBitmap(fb);
+                    } else if (fj.cb != null) {
+                        fj.cb.onBitmap(fb);
+                    }
+                }
+            });
+        }
+    }
+
+    private static int bytes(Bitmap b) { return b.getRowBytes() * b.getHeight(); }
+
+    private Bitmap fetch(Job j) throws Exception {
+        String name = CertVerifier.sha1Hex(((app.server == null ? "" : app.server.machineId) + j.key).getBytes("UTF-8")) + ".jpg";
+        File f = new File(dir(), name);
+        byte[] data = null;
+        if (f.exists()) {
+            try { data = App.readAll(new FileInputStream(f)); } catch (Exception e) { data = null; }
+        }
+        if (data == null) {
+            if (app.server == null) return null;
+            String url = app.server.imageUrl(j.thumb, j.size);
+            Http.Response r = Http.get(url, null, 20000);
+            if (r.code != 200) { r.close(); return null; }
+            data = r.readAll();
+            try {
+                FileOutputStream out = new FileOutputStream(f);
+                out.write(data);
+                out.close();
+                trimDisk();
+            } catch (Exception ignored) {}
+        }
+        BitmapFactory.Options o = new BitmapFactory.Options();
+        o.inPreferredConfig = Bitmap.Config.RGB_565;
+        o.inDither = true;
+        return BitmapFactory.decodeByteArray(data, 0, data.length, o);
+    }
+
+    private int writes;
+
+    private void trimDisk() {
+        if (++writes % 25 != 0) return;
+        File[] files = dir().listFiles();
+        if (files == null || files.length < 600) return;
+        Arrays.sort(files, new Comparator<File>() {
+            public int compare(File a, File b) {
+                long d = a.lastModified() - b.lastModified();
+                return d < 0 ? -1 : (d > 0 ? 1 : 0);
+            }
+        });
+        for (int i = 0; i < files.length - 400; i++) files[i].delete();
+    }
+
+    public void clearMemory() {
+        synchronized (mem) { mem.clear(); memBytes = 0; }
+    }
+}
diff --git a/src/com/minamp/ItemAdapter.java b/src/com/minamp/ItemAdapter.java
new file mode 100644
index 0000000..88f68ba
--- /dev/null
+++ b/src/com/minamp/ItemAdapter.java
@@ -0,0 +1,153 @@
+package com.minamp;
+
+import java.util.ArrayList;
+import java.util.List;
+
+import android.content.Context;
+import android.view.LayoutInflater;
+import android.view.View;
+import android.view.ViewGroup;
+import android.widget.BaseAdapter;
+import android.widget.ImageView;
+import android.widget.TextView;
+
+import com.minamp.plex.Item;
+
+/** Rows for artists / albums / tracks / playlists, with section headers and paging. */
+public class ItemAdapter extends BaseAdapter {
+
+    public static final int MODE_DEFAULT = 0, MODE_ALBUM_TRACKS = 1, MODE_QUEUE = 2;
+
+    public interface Pager { void loadMore(int from); }
+
+    private final Context ctx;
+    private final LayoutInflater inflater;
+    private final List<Item> items = new ArrayList<Item>();
+    private final int mode;
+    private final int artPx;
+    private final int accent, text;
+    private int total = -1;          // total available on the server, -1 = everything loaded
+    private boolean loadingMore;
+    private Pager pager;
+    private String albumArtist = "";
+    private int highlight = -1;      // queue index highlight
+    private final App app;
+
+    public ItemAdapter(Context c, int mode) {
+        ctx = c;
+        this.mode = mode;
+        inflater = LayoutInflater.from(c);
+        artPx = Ui.dp(c, 44);
+        accent = c.getResources().getColor(R.color.accent);
+        text = c.getResources().getColor(R.color.text);
+        app = App.get();
+    }
+
+    public void setPager(Pager p) { pager = p; }
+    public void setAlbumArtist(String a) { albumArtist = a == null ? "" : a; }
+    public void setHighlight(int i) { highlight = i; notifyDataSetChanged(); }
+
+    public void set(List<Item> list, int totalSize) {
+        items.clear();
+        items.addAll(list);
+        total = totalSize;
+        loadingMore = false;
+        notifyDataSetChanged();
+    }
+
+    public void append(List<Item> list, int totalSize) {
+        items.addAll(list);
+        total = totalSize;
+        loadingMore = false;
+        notifyDataSetChanged();
+    }
+
+    public void loadFailed() { loadingMore = false; }
+
+    public List<Item> items() { return items; }
+
+    /** Only the tracks, and the index of position within them (for "play from here"). */
+    public List<Item> tracks() {
+        List<Item> t = new ArrayList<Item>();
+        for (int i = 0; i < items.size(); i++) if (items.get(i).type == Item.TRACK) t.add(items.get(i));
+        return t;
+    }
+
+    public int trackIndex(int position) {
+        int n = 0;
+        for (int i = 0; i < position && i < items.size(); i++) if (items.get(i).type == Item.TRACK) n++;
+        return n;
+    }
+
+    @Override public int getCount() { return items.size(); }
+    @Override public Item getItem(int i) { return items.get(i); }
+    @Override public long getItemId(int i) { return i; }
+    @Override public int getViewTypeCount() { return 2; }
+    @Override public int getItemViewType(int i) { return items.get(i).type == Item.HEADER ? 1 : 0; }
+    @Override public boolean areAllItemsEnabled() { return false; }
+    @Override public boolean isEnabled(int i) { return items.get(i).type != Item.HEADER; }
+
+    private static final class Holder {
+        ImageView art; TextView num, title, sub, right;
+    }
+
+    @Override
+    public View getView(int pos, View v, ViewGroup parent) {
+        if (pager != null && !loadingMore && total > items.size() && pos >= items.size() - 15) {
+            loadingMore = true;
+            final int from = items.size();
+            app.handler.post(new Runnable() { public void run() { pager.loadMore(from); } });
+        }
+        Item it = items.get(pos);
+        if (it.type == Item.HEADER) {
+            if (v == null) v = inflater.inflate(R.layout.row_header, parent, false);
+            ((TextView) v).setText(it.title.toUpperCase());
+            return v;
+        }
+        Holder h;
+        if (v == null) {
+            v = inflater.inflate(R.layout.row_item, parent, false);
+            h = new Holder();
+            h.art = (ImageView) v.findViewById(R.id.row_art);
+            h.num = (TextView) v.findViewById(R.id.row_num);
+            h.title = (TextView) v.findViewById(R.id.row_title);
+            h.sub = (TextView) v.findViewById(R.id.row_sub);
+            h.right = (TextView) v.findViewById(R.id.row_right);
+            v.setTag(h);
+        } else {
+            h = (Holder) v.getTag();
+        }
+
+        h.title.setText(it.title);
+        boolean numbered = mode == MODE_ALBUM_TRACKS && it.type == Item.TRACK;
+        if (numbered) {
+            h.art.setVisibility(View.GONE);
+            h.art.setTag(R.id.tag_image, null);
+            h.num.setVisibility(View.VISIBLE);
+            h.num.setText(it.index > 0 ? String.valueOf(it.index) : "•");
+            boolean showArtist = it.artist.length() > 0 && !it.artist.equals(albumArtist);
+            h.sub.setVisibility(showArtist ? View.VISIBLE : View.GONE);
+            h.sub.setText(it.artist);
+        } else {
+            h.art.setVisibility(View.VISIBLE);
+            h.num.setVisibility(View.GONE);
+            app.images.load(h.art, it.thumb, artPx, R.drawable.art_placeholder);
+            String sub = it.subtitle();
+            h.sub.setVisibility(sub.length() > 0 ? View.VISIBLE : View.GONE);
+            h.sub.setText(sub);
+        }
+
+        String right = "";
+        if (it.type == Item.TRACK && it.duration > 0) right = Ui.time(it.duration);
+        h.right.setText(right);
+
+        boolean current;
+        if (mode == MODE_QUEUE) current = pos == highlight;
+        else {
+            Item playing = PlayQueue.get().current();
+            current = playing != null && it.type == Item.TRACK && playing.ratingKey.equals(it.ratingKey);
+        }
+        h.title.setTextColor(current ? accent : text);
+        return v;
+    }
+}
diff --git a/src/com/minamp/MediaButtonReceiver.java b/src/com/minamp/MediaButtonReceiver.java
new file mode 100644
index 0000000..7de3773
--- /dev/null
+++ b/src/com/minamp/MediaButtonReceiver.java
@@ -0,0 +1,53 @@
+package com.minamp;
+
+import android.content.BroadcastReceiver;
+import android.content.Context;
+import android.content.Intent;
+import android.view.KeyEvent;
+
+/** Wired-headset / Bluetooth buttons. Headset hook: click = play/pause, double-click = next, triple = previous. */
+public class MediaButtonReceiver extends BroadcastReceiver {
+
+    private static long lastClick;
+    private static int clicks;
+    private static Runnable pending;
+
+    @Override
+    public void onReceive(final Context context, Intent intent) {
+        if (!Intent.ACTION_MEDIA_BUTTON.equals(intent.getAction())) return;
+        KeyEvent ev = (KeyEvent) intent.getParcelableExtra(Intent.EXTRA_KEY_EVENT);
+        if (ev == null) return;
+        if (isOrderedBroadcast()) abortBroadcast();
+        if (ev.getAction() != KeyEvent.ACTION_DOWN || ev.getRepeatCount() > 0) return;
+        final Context app = context.getApplicationContext();
+        switch (ev.getKeyCode()) {
+            case KeyEvent.KEYCODE_HEADSETHOOK:
+            case KeyEvent.KEYCODE_MEDIA_PLAY_PAUSE: {
+                long now = System.currentTimeMillis();
+                clicks = now - lastClick < 450 ? clicks + 1 : 1;
+                lastClick = now;
+                if (pending != null) App.get().handler.removeCallbacks(pending);
+                final int n = clicks;
+                pending = new Runnable() {
+                    public void run() {
+                        pending = null;
+                        if (n >= 3) PlayerService.send(app, PlayerService.ACTION_PREV);
+                        else if (n == 2) PlayerService.send(app, PlayerService.ACTION_NEXT);
+                        else PlayerService.send(app, PlayerService.ACTION_TOGGLE);
+                    }
+                };
+                App.get().handler.postDelayed(pending, 450);
+                break;
+            }
+            case KeyEvent.KEYCODE_MEDIA_NEXT:
+                PlayerService.send(app, PlayerService.ACTION_NEXT);
+                break;
+            case KeyEvent.KEYCODE_MEDIA_PREVIOUS:
+                PlayerService.send(app, PlayerService.ACTION_PREV);
+                break;
+            case KeyEvent.KEYCODE_MEDIA_STOP:
+                PlayerService.send(app, PlayerService.ACTION_PAUSE);
+                break;
+        }
+    }
+}
diff --git a/src/com/minamp/NowPlayingActivity.java b/src/com/minamp/NowPlayingActivity.java
new file mode 100644
index 0000000..3595dbb
--- /dev/null
+++ b/src/com/minamp/NowPlayingActivity.java
@@ -0,0 +1,229 @@
+package com.minamp;
+
+import android.app.AlertDialog;
+import android.content.DialogInterface;
+import android.content.Intent;
+import android.graphics.Bitmap;
+import android.graphics.drawable.GradientDrawable;
+import android.os.Bundle;
+import android.view.View;
+import android.widget.ImageButton;
+import android.widget.ImageView;
+import android.widget.SeekBar;
+import android.widget.TextView;
+
+import com.minamp.plex.Item;
+
+public class NowPlayingActivity extends BaseActivity {
+
+    private ImageView art;
+    private TextView title, sub, from, elapsed, remaining, status, sleepText, albumLink;
+    private SeekBar seek;
+    private ImageButton playBtn, shuffleBtn, repeatBtn, loveBtn;
+    private Glyph playGlyph, shuffleGlyph, repeatGlyph, loveGlyph;
+    private View root;
+    private boolean dragging;
+    private String shownThumb;
+    private int white, dim, accent;
+
+    @Override
+    protected void onCreate(Bundle b) {
+        super.onCreate(b);
+        setContentView(R.layout.activity_now_playing);
+        white = getResources().getColor(R.color.text);
+        dim = 0x99FFFFFF;
+        accent = getResources().getColor(R.color.accent);
+
+        root = findViewById(R.id.np_root);
+        art = (ImageView) findViewById(R.id.np_art);
+        title = (TextView) findViewById(R.id.np_title);
+        sub = (TextView) findViewById(R.id.np_sub);
+        from = (TextView) findViewById(R.id.np_from);
+        elapsed = (TextView) findViewById(R.id.np_elapsed);
+        remaining = (TextView) findViewById(R.id.np_remaining);
+        status = (TextView) findViewById(R.id.np_status);
+        sleepText = (TextView) findViewById(R.id.np_sleep_text);
+        albumLink = (TextView) findViewById(R.id.np_artist_link);
+        seek = (SeekBar) findViewById(R.id.np_seek);
+        playBtn = (ImageButton) findViewById(R.id.np_play);
+        shuffleBtn = (ImageButton) findViewById(R.id.np_shuffle);
+        repeatBtn = (ImageButton) findViewById(R.id.np_repeat);
+        loveBtn = (ImageButton) findViewById(R.id.np_love);
+
+        ImageButton down = (ImageButton) findViewById(R.id.np_down);
+        Ui.icon(down, Glyph.BACK, white);
+        down.setOnClickListener(new View.OnClickListener() { public void onClick(View v) { finish(); } });
+        ImageButton queue = (ImageButton) findViewById(R.id.np_queue);
+        Ui.icon(queue, Glyph.QUEUE, white);
+        queue.setOnClickListener(new View.OnClickListener() {
+            public void onClick(View v) { startActivity(new Intent(NowPlayingActivity.this, QueueActivity.class)); }
+        });
+
+        playGlyph = Ui.glyph(this, Glyph.PLAY, getResources().getColor(R.color.on_accent), 24);
+        playGlyph.scale(1f);
+        playBtn.setImageDrawable(playGlyph);
+        playBtn.setOnClickListener(new View.OnClickListener() {
+            public void onClick(View v) { PlayerService.send(NowPlayingActivity.this, PlayerService.ACTION_TOGGLE); }
+        });
+        ImageButton prev = (ImageButton) findViewById(R.id.np_prev);
+        ImageButton next = (ImageButton) findViewById(R.id.np_next);
+        Ui.icon(prev, Glyph.PREV, white, 22);
+        Ui.icon(next, Glyph.NEXT, white, 22);
+        prev.setOnClickListener(new View.OnClickListener() {
+            public void onClick(View v) { PlayerService.send(NowPlayingActivity.this, PlayerService.ACTION_PREV); }
+        });
+        next.setOnClickListener(new View.OnClickListener() {
+            public void onClick(View v) { PlayerService.send(NowPlayingActivity.this, PlayerService.ACTION_NEXT); }
+        });
+
+        shuffleGlyph = Ui.glyph(this, Glyph.SHUFFLE, dim, 20); shuffleGlyph.scale(1f);
+        shuffleBtn.setImageDrawable(shuffleGlyph);
+        shuffleBtn.setOnClickListener(new View.OnClickListener() {
+            public void onClick(View v) { PlayQueue.get().setShuffle(!PlayQueue.get().shuffle()); }
+        });
+        repeatGlyph = Ui.glyph(this, Glyph.REPEAT, dim, 20); repeatGlyph.scale(1f);
+        repeatBtn.setImageDrawable(repeatGlyph);
+        repeatBtn.setOnClickListener(new View.OnClickListener() {
+            public void onClick(View v) {
+                PlayQueue.get().cycleRepeat();
+                int r = PlayQueue.get().repeat();
+                toast(r == PlayQueue.REPEAT_ALL ? "Repeat queue" : r == PlayQueue.REPEAT_ONE ? "Repeat track" : "Repeat off");
+            }
+        });
+        loveGlyph = Ui.glyph(this, Glyph.HEART_OUTLINE, white, 20); loveGlyph.scale(1f);
+        loveBtn.setImageDrawable(loveGlyph);
+        loveBtn.setOnClickListener(new View.OnClickListener() {
+            public void onClick(View v) {
+                Item it = PlayQueue.get().current();
+                if (it != null) toggleLove(it, new Runnable() { public void run() { update(); } });
+            }
+        });
+
+        Ui.icon((ImageView) findViewById(R.id.np_sleep_icon), Glyph.MOON, 0xB3FFFFFF, 16);
+        findViewById(R.id.np_sleep).setOnClickListener(new View.OnClickListener() {
+            public void onClick(View v) { sleepDialog(); }
+        });
+        albumLink.setOnClickListener(new View.OnClickListener() {
+            public void onClick(View v) {
+                Item it = PlayQueue.get().current();
+                if (it != null && it.albumKey.length() > 0) openKey(it.albumKey, Item.ALBUM, it.album);
+            }
+        });
+        art.setOnLongClickListener(new View.OnLongClickListener() {
+            public boolean onLongClick(View v) {
+                Item it = PlayQueue.get().current();
+                if (it != null) itemMenu(it);
+                return true;
+            }
+        });
+
+        seek.setOnSeekBarChangeListener(new SeekBar.OnSeekBarChangeListener() {
+            public void onProgressChanged(SeekBar s, int p, boolean user) {
+                if (user) {
+                    long d = PlayerService.duration();
+                    elapsed.setText(Ui.time(d * p / 1000));
+                }
+            }
+            public void onStartTrackingTouch(SeekBar s) { dragging = true; }
+            public void onStopTrackingTouch(SeekBar s) {
+                dragging = false;
+                long d = PlayerService.duration();
+                if (d > 0) PlayerService.seekTo(NowPlayingActivity.this, d * s.getProgress() / 1000);
+            }
+        });
+        setBackdrop(0xFF1D1D22);
+    }
+
+    @Override
+    protected void onResume() {
+        super.onResume();
+        update();
+    }
+
+    @Override
+    public void onPlayerChanged() { super.onPlayerChanged(); update(); }
+
+    @Override
+    public void onQueueChanged() { super.onQueueChanged(); update(); }
+
+    @Override
+    protected void onTick() { super.onTick(); updateTime(); }
+
+    private void update() {
+        Item it = PlayQueue.get().current();
+        PlayQueue q = PlayQueue.get();
+        if (it == null) {
+            title.setText("Nothing playing");
+            sub.setText("Pick something from your library");
+            from.setText("");
+            art.setImageResource(R.drawable.art_placeholder);
+            shownThumb = null;
+            return;
+        }
+        title.setText(it.title);
+        sub.setText(it.artist + (it.album.length() > 0 ? " — " + it.album : ""));
+        from.setText(q.title().length() > 0 ? q.title() : it.album);
+        playGlyph.setType(PlayerService.isPlaying() ? Glyph.PAUSE : Glyph.PLAY);
+        shuffleGlyph.setColor(q.shuffle() ? accent : dim);
+        repeatGlyph.setType(q.repeat() == PlayQueue.REPEAT_ONE ? Glyph.REPEAT_ONE : Glyph.REPEAT);
+        repeatGlyph.setColor(q.repeat() != PlayQueue.REPEAT_OFF ? accent : dim);
+        loveGlyph.setType(it.loved() ? Glyph.HEART : Glyph.HEART_OUTLINE);
+        loveGlyph.setColor(it.loved() ? accent : white);
+        albumLink.setVisibility(it.albumKey.length() > 0 ? View.VISIBLE : View.INVISIBLE);
+        albumLink.setText("Album ›");
+
+        if (!it.thumb.equals(shownThumb)) {
+            shownThumb = it.thumb;
+            final String want = it.thumb;
+            int size = Math.min(getResources().getDisplayMetrics().widthPixels, 480);
+            art.setImageResource(R.drawable.art_placeholder);
+            app.images.load(it.thumb, size, new ImageLoader.Callback() {
+                public void onBitmap(Bitmap bm) {
+                    if (destroyed || !want.equals(shownThumb)) return;
+                    if (bm != null) { art.setImageBitmap(bm); setBackdrop(Ui.backdropColor(bm)); }
+                }
+            });
+        }
+        updateSleep();
+        updateTime();
+    }
+
+    private void updateTime() {
+        long d = PlayerService.duration();
+        long p = PlayerService.position();
+        if (!dragging) {
+            seek.setProgress(d > 0 ? (int) (p * 1000 / d) : 0);
+            elapsed.setText(Ui.time(p));
+        }
+        remaining.setText("-" + Ui.time(Math.max(0, d - p)));
+        String st = PlayerService.status();
+        status.setText(st.length() > 0 ? st : PlayerService.sourceLabel());
+        if (PlayerService.sleepAt() > 0) updateSleep();
+    }
+
+    private void updateSleep() {
+        long at = PlayerService.sleepAt();
+        if (PlayerService.sleepEndOfTrack()) sleepText.setText("End of track");
+        else if (at > 0) sleepText.setText(Ui.time(at - System.currentTimeMillis()));
+        else sleepText.setText("Sleep");
+    }
+
+    private void setBackdrop(int color) {
+        GradientDrawable g = new GradientDrawable(GradientDrawable.Orientation.TOP_BOTTOM,
+                new int[] { color, getResources().getColor(R.color.bg) });
+        root.setBackgroundDrawable(g);
+    }
+
+    private void sleepDialog() {
+        final int[] mins = {0, 15, 30, 45, 60, 90, -1};
+        String[] labels = {"Off", "15 minutes", "30 minutes", "45 minutes", "1 hour", "1½ hours", "End of this track"};
+        new AlertDialog.Builder(this).setTitle("Sleep timer")
+            .setItems(labels, new DialogInterface.OnClickListener() {
+                public void onClick(DialogInterface d, int which) {
+                    startService(new Intent(NowPlayingActivity.this, PlayerService.class)
+                        .setAction(PlayerService.ACTION_SLEEP).putExtra(PlayerService.EXTRA_MINUTES, mins[which]));
+                    app.handler.postDelayed(new Runnable() { public void run() { if (!destroyed) updateSleep(); } }, 300);
+                }
+            }).show();
+    }
+}
diff --git a/src/com/minamp/PlayQueue.java b/src/com/minamp/PlayQueue.java
new file mode 100644
index 0000000..f0b770f
--- /dev/null
+++ b/src/com/minamp/PlayQueue.java
@@ -0,0 +1,249 @@
+package com.minamp;
+
+import java.io.File;
+import java.io.FileInputStream;
+import java.io.FileOutputStream;
+import java.util.ArrayList;
+import java.util.Collections;
+import java.util.List;
+import java.util.Random;
+
+import android.content.Context;
+
+import com.minamp.plex.Item;
+import com.minamp.util.Json;
+
+/** The play queue (main-thread only), with shuffle/repeat and persistence across restarts. */
+public final class PlayQueue {
+
+    public static final int REPEAT_OFF = 0, REPEAT_ALL = 1, REPEAT_ONE = 2;
+
+    private static final PlayQueue INSTANCE = new PlayQueue();
+    public static PlayQueue get() { return INSTANCE; }
+
+    private final ArrayList<Item> items = new ArrayList<Item>();
+    private ArrayList<Item> unshuffled;
+    private int index = -1;
+    private boolean shuffle;
+    private int repeat;
+    private String title = "";
+    public long resumePositionMs; // restored position of the current track
+
+    public interface Listener { void onQueueChanged(); }
+    private final ArrayList<Listener> listeners = new ArrayList<Listener>();
+
+    private PlayQueue() {}
+
+    public void addListener(Listener l) { if (!listeners.contains(l)) listeners.add(l); }
+    public void removeListener(Listener l) { listeners.remove(l); }
+
+    private void changed() {
+        for (int i = listeners.size() - 1; i >= 0; i--) listeners.get(i).onQueueChanged();
+        save();
+    }
+
+    public int size() { return items.size(); }
+    public Item at(int i) { return items.get(i); }
+    public int index() { return index; }
+    public boolean shuffle() { return shuffle; }
+    public int repeat() { return repeat; }
+    public String title() { return title; }
+    public List<Item> items() { return Collections.unmodifiableList(items); }
+
+    public Item current() {
+        return index >= 0 && index < items.size() ? items.get(index) : null;
+    }
+
+    public Item peekNext() {
+        if (items.isEmpty()) return null;
+        if (index + 1 < items.size()) return items.get(index + 1);
+        return repeat == REPEAT_ALL ? items.get(0) : null;
+    }
+
+    /** Replace the queue. If shuffling, the chosen start track plays first. */
+    public void set(List<Item> list, int start, boolean shuffled, String sourceTitle) {
+        items.clear();
+        items.addAll(list);
+        unshuffled = null;
+        title = sourceTitle == null ? "" : sourceTitle;
+        index = items.isEmpty() ? -1 : Math.max(0, Math.min(start, items.size() - 1));
+        shuffle = false;
+        resumePositionMs = 0;
+        if (shuffled) {
+            if (start < 0) index = items.isEmpty() ? -1 : new Random().nextInt(items.size());
+            setShuffle(true);
+        }
+        changed();
+    }
+
+    public void setShuffle(boolean on) {
+        if (on == shuffle) return;
+        Item cur = current();
+        if (on) {
+            unshuffled = new ArrayList<Item>(items);
+            if (cur != null) items.remove(index);
+            Collections.shuffle(items, new Random());
+            if (cur != null) items.add(0, cur);
+            index = cur == null ? -1 : 0;
+        } else if (unshuffled != null) {
+            // keep anything added while shuffled
+            ArrayList<Item> restored = new ArrayList<Item>(unshuffled);
+            for (int i = 0; i < items.size(); i++) if (!containsRef(restored, items.get(i))) restored.add(items.get(i));
+            for (int i = restored.size() - 1; i >= 0; i--) if (!containsRef(items, restored.get(i))) restored.remove(i);
+            items.clear();
+            items.addAll(restored);
+            index = cur == null ? -1 : indexOfRef(items, cur);
+            unshuffled = null;
+        }
+        shuffle = on;
+        changed();
+    }
+
+    private static boolean containsRef(List<Item> l, Item it) { return indexOfRef(l, it) >= 0; }
+
+    private static int indexOfRef(List<Item> l, Item it) {
+        for (int i = 0; i < l.size(); i++) if (l.get(i) == it) return i;
+        return -1;
+    }
+
+    public void cycleRepeat() {
+        repeat = (repeat + 1) % 3;
+        changed();
+    }
+
+    /** @return false when the end of the queue was reached. */
+    public boolean advance(boolean userSkip) {
+        if (items.isEmpty()) return false;
+        if (repeat == REPEAT_ONE && !userSkip) { resumePositionMs = 0; changed(); return true; }
+        if (index + 1 < items.size()) { index++; }
+        else if (repeat == REPEAT_ALL) index = 0;
+        else return false;
+        resumePositionMs = 0;
+        changed();
+        return true;
+    }
+
+    public boolean back() {
+        if (items.isEmpty()) return false;
+        if (index > 0) index--;
+        else if (repeat == REPEAT_ALL) index = items.size() - 1;
+        else index = 0;
+        resumePositionMs = 0;
+        changed();
+        return true;
+    }
+
+    public void jump(int i) {
+        if (i < 0 || i >= items.size()) return;
+        index = i;
+        resumePositionMs = 0;
+        changed();
+    }
+
+    public void playNext(List<Item> list) {
+        if (items.isEmpty()) { set(list, 0, false, "Queue"); return; }
+        items.addAll(index + 1, list);
+        if (unshuffled != null) unshuffled.addAll(list);
+        changed();
+    }
+
+    public void append(List<Item> list) {
+        if (items.isEmpty()) { set(list, 0, false, "Queue"); return; }
+        items.addAll(list);
+        if (unshuffled != null) unshuffled.addAll(list);
+        changed();
+    }
+
+    /** Move a queued item to play right after the current one. */
+    public void moveNext(int i) {
+        if (i < 0 || i >= items.size() || i == index) return;
+        Item it = items.remove(i);
+        if (i < index) index--;
+        items.add(index + 1, it);
+        changed();
+    }
+
+    public void remove(int i) {
+        if (i < 0 || i >= items.size()) return;
+        Item it = items.remove(i);
+        if (unshuffled != null) { int k = indexOfRef(unshuffled, it); if (k >= 0) unshuffled.remove(k); }
+        if (i < index) index--;
+        else if (i == index && index >= items.size()) index = items.size() - 1;
+        changed();
+    }
+
+    /** Drop everything after the current track. */
+    public void clearUpcoming() {
+        if (index < 0) { clear(); return; }
+        while (items.size() > index + 1) {
+            Item it = items.remove(items.size() - 1);
+            if (unshuffled != null) { int k = indexOfRef(unshuffled, it); if (k >= 0) unshuffled.remove(k); }
+        }
+        changed();
+    }
+
+    public void clear() {
+        items.clear();
+        unshuffled = null;
+        index = -1;
+        changed();
+    }
+
+    // ------------------------------------------------------------------ persistence
+
+    private Context ctx;
+    private boolean saving;
+
+    public void restore(Context c) {
+        ctx = c.getApplicationContext();
+        try {
+            File f = new File(ctx.getFilesDir(), "queue.json");
+            if (!f.exists()) return;
+            Json.Obj o = Json.parseObj(new String(App.readAll(new FileInputStream(f)), "UTF-8"));
+            Json.Arr a = o.optArr("items");
+            items.clear();
+            if (a != null) for (int i = 0; i < a.size(); i++) { Json.Obj io = a.optObj(i); if (io != null) items.add(Item.fromJson(io)); }
+            index = Math.min(o.optInt("index", -1), items.size() - 1);
+            repeat = o.optInt("repeat", 0);
+            shuffle = o.optBool("shuffle");
+            title = o.optString("title");
+            resumePositionMs = o.optLong("pos", 0);
+        } catch (Exception e) {
+            items.clear();
+            index = -1;
+        }
+    }
+
+    /** Remember position for "resume where I left off". */
+    public void savePosition(long ms) {
+        resumePositionMs = ms;
+        save();
+    }
+
+    public void save() {
+        if (ctx == null || saving) return;
+        saving = true;
+        // serialise on the main thread (cheap), write on a background thread
+        Json.Obj o = new Json.Obj();
+        Json.Arr a = new Json.Arr();
+        int max = Math.min(items.size(), 1000);
+        for (int i = 0; i < max; i++) a.add(items.get(i).toJson());
+        o.put("items", a).put("index", Long.valueOf(index)).put("repeat", Long.valueOf(repeat))
+         .put("shuffle", Boolean.valueOf(shuffle)).put("title", title).put("pos", Long.valueOf(resumePositionMs));
+        final String data = o.toString();
+        saving = false;
+        new Thread("save-queue") {
+            public void run() {
+                synchronized (PlayQueue.class) {
+                    try {
+                        File tmp = new File(ctx.getFilesDir(), "queue.tmp");
+                        FileOutputStream out = new FileOutputStream(tmp);
+                        out.write(data.getBytes("UTF-8"));
+                        out.close();
+                        tmp.renameTo(new File(ctx.getFilesDir(), "queue.json"));
+                    } catch (Exception ignored) {}
+                }
+            }
+        }.start();
+    }
+}
diff --git a/src/com/minamp/PlayerService.java b/src/com/minamp/PlayerService.java
new file mode 100644
index 0000000..a0f8d09
--- /dev/null
+++ b/src/com/minamp/PlayerService.java
@@ -0,0 +1,669 @@
+package com.minamp;
+
+import java.io.File;
+import java.io.FileInputStream;
+import java.io.FileOutputStream;
+import java.io.IOException;
+import java.io.InputStream;
+import java.util.ArrayList;
+import java.util.concurrent.ExecutorService;
+import java.util.concurrent.Executors;
+
+import android.app.Notification;
+import android.app.NotificationManager;
+import android.app.PendingIntent;
+import android.app.Service;
+import android.content.BroadcastReceiver;
+import android.content.ComponentName;
+import android.content.Context;
+import android.content.Intent;
+import android.content.IntentFilter;
+import android.media.AudioManager;
+import android.media.MediaPlayer;
+import android.net.wifi.WifiManager;
+import android.os.Environment;
+import android.os.IBinder;
+import android.os.PowerManager;
+import android.telephony.PhoneStateListener;
+import android.telephony.TelephonyManager;
+import android.widget.Toast;
+
+import com.minamp.net.Http;
+import com.minamp.net.StreamProxy;
+import com.minamp.plex.Item;
+import com.minamp.plex.Library;
+import com.minamp.plex.Plex;
+
+/**
+ * Foreground playback service: one MediaPlayer per track, fed through the loopback
+ * {@link StreamProxy}. Handles audio focus, calls, headset buttons/unplug, Plex timeline
+ * reporting, retries after network changes, and the sleep timer.
+ */
+public class PlayerService extends Service implements MediaPlayer.OnPreparedListener,
+        MediaPlayer.OnCompletionListener, MediaPlayer.OnErrorListener, AudioManager.OnAudioFocusChangeListener {
+
+    public static final String ACTION_PLAY_CURRENT = "com.minamp.PLAY_CURRENT";
+    public static final String ACTION_TOGGLE = "com.minamp.TOGGLE";
+    public static final String ACTION_PLAY = "com.minamp.PLAY";
+    public static final String ACTION_PAUSE = "com.minamp.PAUSE";
+    public static final String ACTION_NEXT = "com.minamp.NEXT";
+    public static final String ACTION_PREV = "com.minamp.PREV";
+    public static final String ACTION_SEEK = "com.minamp.SEEK";
+    public static final String ACTION_STOP = "com.minamp.STOP";
+    public static final String ACTION_SLEEP = "com.minamp.SLEEP";
+    public static final String EXTRA_POS = "pos";
+    public static final String EXTRA_MINUTES = "minutes";
+
+    public static final int IDLE = 0, BUFFERING = 1, PLAYING = 2, PAUSED = 3;
+
+    // ---- state shared with the UI (main thread) ----
+    private static PlayerService instance;
+    private static int state = IDLE;
+    private static String status = "";
+    private static long sleepAt;
+    private static boolean sleepEndOfTrack;
+
+    public interface Listener { void onPlayerChanged(); }
+    private static final ArrayList<Listener> listeners = new ArrayList<Listener>();
+
+    public static void addListener(Listener l) { if (!listeners.contains(l)) listeners.add(l); }
+    public static void removeListener(Listener l) { listeners.remove(l); }
+
+    public static int state() { return state; }
+    public static String status() { return status; }
+    public static boolean isPlaying() { return state == PLAYING || state == BUFFERING; }
+    public static long sleepAt() { return sleepAt; }
+    public static boolean sleepEndOfTrack() { return sleepEndOfTrack; }
+
+    public static long position() {
+        PlayerService s = instance;
+        if (s != null) return s.currentPosition();
+        return PlayQueue.get().resumePositionMs;
+    }
+
+    public static long duration() {
+        Item it = PlayQueue.get().current();
+        return it == null ? 0 : it.duration;
+    }
+
+    /** Human-readable "where is this streaming from" for the Now Playing screen. */
+    public static String sourceLabel() {
+        PlayerService s = instance;
+        if (s == null || s.track == null) return "";
+        App app = App.get();
+        String where = app.server == null || app.server.active() == null ? "" : com.minamp.plex.Server.kindLabel(app.server.active().kind);
+        String q = s.transcoding ? s.kbps + " kbps MP3" : (s.track.codec.toUpperCase() + (s.track.bitrate > 0 ? " " + s.track.bitrate + " kbps" : ""));
+        return where.length() > 0 ? where + " · " + q : q;
+    }
+
+    public static void send(Context c, String action) {
+        c.startService(new Intent(c, PlayerService.class).setAction(action));
+    }
+
+    public static void playCurrent(Context c, long posMs) {
+        c.startService(new Intent(c, PlayerService.class).setAction(ACTION_PLAY_CURRENT).putExtra(EXTRA_POS, posMs));
+    }
+
+    public static void seekTo(Context c, long posMs) {
+        c.startService(new Intent(c, PlayerService.class).setAction(ACTION_SEEK).putExtra(EXTRA_POS, posMs));
+    }
+
+    // ---- instance ----
+    private final ExecutorService worker = Executors.newSingleThreadExecutor();
+    private final ExecutorService reporter = Executors.newSingleThreadExecutor();
+    private StreamProxy proxy;
+    private MediaPlayer mp;
+    private boolean prepared;
+    private int gen;
+    private Item track;
+    private long offsetMs;      // transcodes restart at an offset; MediaPlayer counts from 0
+    private long pendingPos;    // position to show / seek to before prepared
+    private boolean playWhenReady;
+    private boolean transcoding;
+    private boolean fromFile;
+    private int kbps;
+    private String session;
+    private String routeId;
+    private int retries;
+    private int failuresInRow;
+    private boolean forceDownload;
+    private boolean scrobbled;
+    private long lastTimeline;
+    private long lastSave;
+    private long lastPos;       // last position seen while playing (getCurrentPosition is unreliable after completion)
+
+    private AudioManager audio;
+    private boolean hasFocus;
+    private boolean pausedByFocus;
+    private boolean pausedByCall;
+    private WifiManager.WifiLock wifiLock;
+    private boolean noisyRegistered;
+    private boolean foreground;
+
+    @Override
+    public void onCreate() {
+        super.onCreate();
+        instance = this;
+        audio = (AudioManager) getSystemService(AUDIO_SERVICE);
+        audio.registerMediaButtonEventReceiver(new ComponentName(this, MediaButtonReceiver.class));
+        WifiManager wm = (WifiManager) getSystemService(WIFI_SERVICE);
+        wifiLock = wm.createWifiLock(WifiManager.WIFI_MODE_FULL, "minamp");
+        wifiLock.setReferenceCounted(false);
+        proxy = new StreamProxy();
+        try { proxy.start(); } catch (IOException e) { /* reported when playback starts */ }
+        try {
+            TelephonyManager tm = (TelephonyManager) getSystemService(TELEPHONY_SERVICE);
+            tm.listen(phoneListener, PhoneStateListener.LISTEN_CALL_STATE);
+        } catch (Exception ignored) {}
+        App.get().handler.post(ticker);
+    }
+
+    @Override
+    public void onDestroy() {
+        App.get().handler.removeCallbacks(ticker);
+        try {
+            TelephonyManager tm = (TelephonyManager) getSystemService(TELEPHONY_SERVICE);
+            tm.listen(phoneListener, PhoneStateListener.LISTEN_NONE);
+        } catch (Exception ignored) {}
+        if (track != null) PlayQueue.get().savePosition(currentPosition());
+        releasePlayer();
+        proxy.shutdown();
+        abandonFocus();
+        unregisterNoisy();
+        if (wifiLock.isHeld()) wifiLock.release();
+        audio.unregisterMediaButtonEventReceiver(new ComponentName(this, MediaButtonReceiver.class));
+        worker.shutdownNow();
+        reporter.shutdown();
+        instance = null;
+        state = IDLE;
+        notifyListeners();
+        super.onDestroy();
+    }
+
+    @Override
+    public IBinder onBind(Intent intent) { return null; }
+
+    @Override
+    public int onStartCommand(Intent intent, int flags, int startId) {
+        if (intent != null) handle(intent);
+        return START_NOT_STICKY;
+    }
+
+    private void handle(Intent i) {
+        String a = i.getAction();
+        if (a == null) return;
+        PlayQueue q = PlayQueue.get();
+        if (ACTION_PLAY_CURRENT.equals(a)) {
+            newTrack();
+            startCurrent(i.getLongExtra(EXTRA_POS, 0), true);
+        } else if (ACTION_TOGGLE.equals(a)) {
+            if (state == PLAYING || state == BUFFERING) pause(); else play();
+        } else if (ACTION_PLAY.equals(a)) {
+            play();
+        } else if (ACTION_PAUSE.equals(a)) {
+            pause();
+        } else if (ACTION_NEXT.equals(a)) {
+            if (q.advance(true)) { newTrack(); startCurrent(0, true); }
+        } else if (ACTION_PREV.equals(a)) {
+            if (currentPosition() > 4000 && track != null) { seek(0); }
+            else if (q.back()) { newTrack(); startCurrent(0, true); }
+        } else if (ACTION_SEEK.equals(a)) {
+            seek(i.getLongExtra(EXTRA_POS, 0));
+        } else if (ACTION_STOP.equals(a)) {
+            stopAll(null);
+        } else if (ACTION_SLEEP.equals(a)) {
+            int m = i.getIntExtra(EXTRA_MINUTES, 0);
+            sleepEndOfTrack = m < 0;
+            sleepAt = m > 0 ? System.currentTimeMillis() + m * 60000L : 0;
+            notifyListeners();
+        }
+        if (state == IDLE && track == null) stopSelf();
+    }
+
+    private void newTrack() {
+        retries = 0;
+        forceDownload = false;
+    }
+
+    // ------------------------------------------------------------------ playback pipeline
+
+    private void startCurrent(final long posMs, boolean play) {
+        final Item it = PlayQueue.get().current();
+        final App app = App.get();
+        if (it == null || app.library == null) { stopAll(null); return; }
+        final int g = ++gen;
+        releasePlayer();
+        track = it;
+        scrobbled = false;
+        pendingPos = posMs;
+        offsetMs = 0;
+        lastPos = posMs;
+        playWhenReady = play;
+        setState(BUFFERING, "Connecting…");
+        goForeground();
+        if (play) requestFocus();
+        final boolean download = forceDownload || app.downloadFirst();
+        worker.execute(new Runnable() {
+            public void run() {
+                try {
+                    Library lib = app.library;
+                    lib.ensureMedia(it);
+                    lib.server.base(); // choose LAN / remote / relay before deciding quality
+                    final int max = app.currentMaxKbps();
+                    final boolean direct = Library.canDirectPlay(it, max);
+                    final String sess = direct ? null : "minamp-" + Long.toString(System.currentTimeMillis(), 36);
+                    // Streamed transcodes start at the offset; downloads always fetch the whole track and seek in the file.
+                    final long startAt = (direct || download) ? 0 : (posMs / 1000) * 1000;
+                    final String url = direct ? lib.directUrl(it) : lib.transcodeUrl(it, max, startAt, sess);
+                    final String ext = direct ? extFor(it) : "mp3";
+                    File file = null;
+                    if (download) file = downloadTo(url, g, it);
+                    final File ff = file;
+                    post(new Runnable() {
+                        public void run() {
+                            if (g != gen) return;
+                            transcoding = !direct;
+                            session = sess;
+                            kbps = direct ? 0 : (max <= 0 ? 320 : max);
+                            begin(url, ext, ff, startAt, (direct || download) ? posMs : 0);
+                        }
+                    });
+                } catch (final Exception e) {
+                    post(new Runnable() {
+                        public void run() { if (g == gen) trackFailed(message(e)); }
+                    });
+                }
+            }
+        });
+    }
+
+    private static String extFor(Item it) {
+        String c = it.container.toLowerCase();
+        if ("mp4".equals(c) || "m4a".equals(c) || "m4b".equals(c)) return "m4a";
+        if ("ogg".equals(c)) return "ogg";
+        return "mp3";
+    }
+
+    private File downloadTo(String url, int g, Item it) throws IOException {
+        File base = null;
+        if (Environment.MEDIA_MOUNTED.equals(Environment.getExternalStorageState())) base = getExternalCacheDir();
+        if (base == null) base = getCacheDir();
+        File f = new File(base, "play-" + (g % 2) + ".tmp");
+        Http.Response r = Http.get(url, Plex.headers(null), 30000);
+        if (r.code != 200) { r.close(); throw new IOException("Server said " + r.code); }
+        InputStream in = r.body;
+        FileOutputStream out = new FileOutputStream(f);
+        try {
+            byte[] buf = new byte[16384];
+            long total = r.contentLength > 0 ? r.contentLength : (it.duration > 0 ? it.duration / 1000 * 24000 : 0);
+            long got = 0, lastUi = 0;
+            int n;
+            while ((n = in.read(buf)) > 0) {
+                if (g != gen) { Http.abort(r); throw new IOException("cancelled"); }
+                out.write(buf, 0, n);
+                got += n;
+                if (total > 0 && got - lastUi > 65536) {
+                    lastUi = got;
+                    final int pct = (int) Math.min(99, got * 100 / total);
+                    final int fg = g;
+                    post(new Runnable() { public void run() { if (fg == gen) setState(BUFFERING, "Downloading " + pct + "%"); } });
+                }
+            }
+        } finally {
+            out.close();
+            r.close();
+        }
+        return f;
+    }
+
+    private void begin(String url, String ext, File file, long offset, long seekTo) {
+        try {
+            mp = new MediaPlayer();
+            mp.setAudioStreamType(AudioManager.STREAM_MUSIC);
+            mp.setWakeMode(this, PowerManager.PARTIAL_WAKE_LOCK);
+            mp.setOnPreparedListener(this);
+            mp.setOnCompletionListener(this);
+            mp.setOnErrorListener(this);
+            prepared = false;
+            fromFile = file != null;
+            offsetMs = offset;
+            pendingPos = seekTo;
+            if (fromFile) {
+                FileInputStream fis = new FileInputStream(file);
+                mp.setDataSource(fis.getFD());
+                fis.close();
+            } else {
+                if (proxy.port() < 0) proxy.start();
+                routeId = proxy.newId();
+                mp.setDataSource(proxy.register(routeId, url, ext));
+            }
+            setState(BUFFERING, "Buffering…");
+            mp.prepareAsync();
+        } catch (Exception e) {
+            trackFailed(message(e));
+        }
+    }
+
+    public void onPrepared(MediaPlayer p) {
+        if (p != mp) return;
+        prepared = true;
+        failuresInRow = 0;
+        if (pendingPos > 0) {
+            try { mp.seekTo((int) pendingPos); } catch (Exception ignored) {}
+        }
+        pendingPos = 0;
+        if (playWhenReady && (hasFocus || requestFocus())) {
+            mp.start();
+            setState(PLAYING, "");
+            if (!wifiLock.isHeld()) wifiLock.acquire();
+            registerNoisy();
+        } else {
+            setState(PAUSED, "");
+        }
+        goForeground();
+        report(true);
+    }
+
+    public void onCompletion(MediaPlayer p) {
+        if (p != mp) return;
+        long pos = lastPos;
+        Item it = track;
+        // A stream that ends well before the track does means the network dropped.
+        if (it != null && it.duration > 0 && pos > 0 && pos < it.duration - 15000 && !fromFile) {
+            trackFailed("Stream interrupted");
+            return;
+        }
+        if (it != null) {
+            if (!scrobbled) scrobble(it);
+            reportState(it, "stopped", it.duration);
+        }
+        if (sleepEndOfTrack) {
+            sleepEndOfTrack = false;
+            PlayQueue.get().advance(false);
+            stopAll("Sleep timer");
+            return;
+        }
+        if (PlayQueue.get().advance(false)) {
+            newTrack();
+            startCurrent(0, true);
+        } else {
+            PlayQueue.get().savePosition(0);
+            stopAll(null);
+        }
+    }
+
+    public boolean onError(MediaPlayer p, int what, int extra) {
+        if (p != mp) return true;
+        trackFailed("Playback error (" + what + "/" + extra + ")");
+        return true;
+    }
+
+    private void trackFailed(String msg) {
+        long pos = Math.max(currentPosition(), lastPos);
+        retries++;
+        App app = App.get();
+        if (retries == 1) {
+            // Most failures on a phone are network changes: re-pick the connection and resume.
+            if (app.server != null) app.server.invalidate();
+            startCurrent(pos, true);
+        } else if (retries == 2 && !forceDownload && !app.downloadFirst()) {
+            forceDownload = true; // some old media stacks choke on streams but play files fine
+            startCurrent(pos, true);
+        } else {
+            failuresInRow++;
+            retries = 0;
+            forceDownload = false;
+            toast(msg);
+            if (failuresInRow >= 3 || !PlayQueue.get().advance(true)) {
+                failuresInRow = 0;
+                stopAll(msg);
+            } else {
+                startCurrent(0, true);
+            }
+        }
+    }
+
+    // ------------------------------------------------------------------ controls
+
+    private void play() {
+        if (mp != null && prepared) {
+            playWhenReady = true;
+            if (!hasFocus && !requestFocus()) return;
+            mp.start();
+            setState(PLAYING, "");
+            if (!wifiLock.isHeld()) wifiLock.acquire();
+            registerNoisy();
+            goForeground();
+            report(true);
+        } else if (state == BUFFERING) {
+            playWhenReady = true;
+        } else if (PlayQueue.get().current() != null) {
+            newTrack();
+            startCurrent(PlayQueue.get().resumePositionMs, true);
+        }
+    }
+
+    private void pause() {
+        pausedByFocus = false;
+        playWhenReady = false;
+        if (mp != null && prepared) {
+            try { mp.pause(); } catch (Exception ignored) {}
+            setState(PAUSED, "");
+            PlayQueue.get().savePosition(currentPosition());
+            report(true);
+        } else if (state == BUFFERING) {
+            setState(BUFFERING, status);
+        }
+        if (wifiLock.isHeld()) wifiLock.release();
+        unregisterNoisy();
+        goForeground();
+    }
+
+    private void seek(long ms) {
+        if (track == null) return;
+        if (ms < 0) ms = 0;
+        if (track.duration > 0 && ms > track.duration - 1000) ms = Math.max(0, track.duration - 1000);
+        if (mp != null && prepared && (!transcoding || fromFile)) {
+            try { mp.seekTo((int) ms); } catch (Exception ignored) {}
+            lastPos = ms;
+            notifyListeners();
+        } else {
+            // transcoded streams can't seek: restart the transcode at the new offset
+            startCurrent(ms, playWhenReady || state == PLAYING);
+        }
+    }
+
+    private void stopAll(String message) {
+        if (track != null) {
+            reportState(track, "stopped", currentPosition());
+            PlayQueue.get().savePosition(state == IDLE ? 0 : currentPosition());
+        }
+        gen++;
+        releasePlayer();
+        track = null;
+        sleepAt = 0;
+        setState(IDLE, message == null ? "" : message);
+        abandonFocus();
+        unregisterNoisy();
+        if (wifiLock.isHeld()) wifiLock.release();
+        stopForeground(true);
+        ((NotificationManager) getSystemService(NOTIFICATION_SERVICE)).cancel(1);
+        foreground = false;
+        stopSelf();
+    }
+
+    private void releasePlayer() {
+        if (routeId != null) { proxy.unregister(routeId); routeId = null; }
+        if (session != null) {
+            final String s = session;
+            final App app = App.get();
+            reporter.execute(new Runnable() { public void run() { if (app.library != null) app.library.stopTranscode(s); } });
+            session = null;
+        }
+        if (mp != null) {
+            try { mp.reset(); } catch (Exception ignored) {}
+            try { mp.release(); } catch (Exception ignored) {}
+            mp = null;
+        }
+        prepared = false;
+    }
+
+    private long currentPosition() {
+        if (mp != null && prepared) {
+            try { return offsetMs + mp.getCurrentPosition(); } catch (Exception e) { return offsetMs; }
+        }
+        return pendingPos + offsetMs;
+    }
+
+    // ------------------------------------------------------------------ ticker / reporting
+
+    private final Runnable ticker = new Runnable() {
+        public void run() {
+            App.get().handler.postDelayed(this, 1000);
+            long now = System.currentTimeMillis();
+            if (sleepAt > 0 && now >= sleepAt) {
+                sleepAt = 0;
+                pause();
+                toast("Sleep timer: paused");
+            }
+            if (state == PLAYING && track != null) {
+                long pos = currentPosition();
+                lastPos = pos;
+                if (!scrobbled && track.duration > 0 && pos > track.duration * 9 / 10) scrobble(track);
+                if (now - lastTimeline > 10000) report(false);
+                if (now - lastSave > 15000) { lastSave = now; PlayQueue.get().resumePositionMs = pos; }
+                notifyListeners();
+            }
+        }
+    };
+
+    private void report(boolean force) {
+        if (track == null) return;
+        lastTimeline = System.currentTimeMillis();
+        String s = state == PLAYING ? "playing" : state == PAUSED ? "paused" : "buffering";
+        reportState(track, s, currentPosition());
+    }
+
+    private void reportState(final Item it, final String s, final long pos) {
+        final App app = App.get();
+        reporter.execute(new Runnable() {
+            public void run() { if (app.library != null) app.library.timeline(it, s, pos); }
+        });
+    }
+
+    private void scrobble(final Item it) {
+        scrobbled = true;
+        final App app = App.get();
+        reporter.execute(new Runnable() {
+            public void run() { if (app.library != null) app.library.scrobble(it); }
+        });
+    }
+
+    // ------------------------------------------------------------------ focus, calls, noisy
+
+    private boolean requestFocus() {
+        if (hasFocus) return true;
+        hasFocus = audio.requestAudioFocus(this, AudioManager.STREAM_MUSIC, AudioManager.AUDIOFOCUS_GAIN)
+                == AudioManager.AUDIOFOCUS_REQUEST_GRANTED;
+        return hasFocus;
+    }
+
+    private void abandonFocus() {
+        if (hasFocus) audio.abandonAudioFocus(this);
+        hasFocus = false;
+    }
+
+    public void onAudioFocusChange(int change) {
+        switch (change) {
+            case AudioManager.AUDIOFOCUS_GAIN:
+                hasFocus = true;
+                if (mp != null) try { mp.setVolume(1f, 1f); } catch (Exception ignored) {}
+                if (pausedByFocus) { pausedByFocus = false; play(); }
+                break;
+            case AudioManager.AUDIOFOCUS_LOSS:
+                hasFocus = false;
+                pause();
+                break;
+            case AudioManager.AUDIOFOCUS_LOSS_TRANSIENT:
+                if (state == PLAYING) { pause(); pausedByFocus = true; }
+                break;
+            case AudioManager.AUDIOFOCUS_LOSS_TRANSIENT_CAN_DUCK:
+                if (mp != null) try { mp.setVolume(0.2f, 0.2f); } catch (Exception ignored) {}
+                break;
+        }
+    }
+
+    private final PhoneStateListener phoneListener = new PhoneStateListener() {
+        @Override
+        public void onCallStateChanged(int s, String number) {
+            if (s == TelephonyManager.CALL_STATE_RINGING || s == TelephonyManager.CALL_STATE_OFFHOOK) {
+                if (state == PLAYING || state == BUFFERING) { pause(); pausedByCall = true; }
+            } else if (s == TelephonyManager.CALL_STATE_IDLE && pausedByCall) {
+                pausedByCall = false;
+                play();
+            }
+        }
+    };
+
+    private final BroadcastReceiver noisy = new BroadcastReceiver() {
+        @Override public void onReceive(Context c, Intent i) { pause(); }
+    };
+
+    private void registerNoisy() {
+        if (noisyRegistered) return;
+        registerReceiver(noisy, new IntentFilter(AudioManager.ACTION_AUDIO_BECOMING_NOISY));
+        noisyRegistered = true;
+    }
+
+    private void unregisterNoisy() {
+        if (!noisyRegistered) return;
+        try { unregisterReceiver(noisy); } catch (Exception ignored) {}
+        noisyRegistered = false;
+    }
+
+    // ------------------------------------------------------------------ notification / state
+
+    @SuppressWarnings("deprecation")
+    private void goForeground() {
+        Item it = track != null ? track : PlayQueue.get().current();
+        if (it == null) return;
+        Notification n = new Notification(R.drawable.ic_stat, null, 0);
+        n.flags |= Notification.FLAG_ONGOING_EVENT | Notification.FLAG_NO_CLEAR;
+        Intent open = new Intent(this, NowPlayingActivity.class).addFlags(Intent.FLAG_ACTIVITY_NEW_TASK);
+        PendingIntent pi = PendingIntent.getActivity(this, 0, open, PendingIntent.FLAG_UPDATE_CURRENT);
+        String line = (state == PAUSED ? "Paused · " : "") + it.artist;
+        n.setLatestEventInfo(this, it.title, line, pi);
+        if (state == PAUSED || state == IDLE) {
+            // let Android reclaim us while paused, but keep the notification as a shortcut back
+            if (foreground) { stopForeground(false); foreground = false; }
+            ((NotificationManager) getSystemService(NOTIFICATION_SERVICE)).notify(1, n);
+        } else {
+            startForeground(1, n);
+            foreground = true;
+        }
+    }
+
+    private void setState(int s, String msg) {
+        state = s;
+        status = msg == null ? "" : msg;
+        notifyListeners();
+    }
+
+    private static void notifyListeners() {
+        for (int i = listeners.size() - 1; i >= 0; i--) {
+            if (i < listeners.size()) listeners.get(i).onPlayerChanged();
+        }
+    }
+
+    private void post(Runnable r) { App.get().handler.post(r); }
+
+    private void toast(String m) {
+        if (m != null && m.length() > 0) Toast.makeText(this, m, Toast.LENGTH_SHORT).show();
+    }
+
+    static String message(Exception e) {
+        String m = e.getMessage();
+        if (m == null || m.length() == 0) m = e.getClass().getSimpleName();
+        return m;
+    }
+}
diff --git a/src/com/minamp/QueueActivity.java b/src/com/minamp/QueueActivity.java
new file mode 100644
index 0000000..3be161f
--- /dev/null
+++ b/src/com/minamp/QueueActivity.java
@@ -0,0 +1,95 @@
+package com.minamp;
+
+import android.app.AlertDialog;
+import android.content.DialogInterface;
+import android.os.Bundle;
+import android.view.View;
+import android.widget.AdapterView;
+import android.widget.ListView;
+
+import com.minamp.plex.Item;
+
+public class QueueActivity extends BaseActivity {
+
+    private ItemAdapter adapter;
+    private ListView list;
+
+    @Override
+    protected void onCreate(Bundle b) {
+        super.onCreate(b);
+        setContentView(R.layout.activity_queue);
+        setupTopBar("Up next", "", true);
+        barAction(R.id.btn_action, Glyph.SHUFFLE, new View.OnClickListener() {
+            public void onClick(View v) {
+                PlayQueue.get().setShuffle(!PlayQueue.get().shuffle());
+                toast(PlayQueue.get().shuffle() ? "Shuffle on" : "Shuffle off");
+            }
+        });
+        barAction(R.id.btn_action2, Glyph.MORE, new View.OnClickListener() {
+            public void onClick(View v) { clearDialog(); }
+        });
+        list = (ListView) findViewById(R.id.list);
+        adapter = new ItemAdapter(this, ItemAdapter.MODE_QUEUE);
+        list.setAdapter(adapter);
+        list.setOnItemClickListener(new AdapterView.OnItemClickListener() {
+            public void onItemClick(AdapterView<?> p, View v, int pos, long id) {
+                PlayQueue.get().jump(pos);
+                PlayerService.playCurrent(QueueActivity.this, 0);
+            }
+        });
+        list.setOnItemLongClickListener(new AdapterView.OnItemLongClickListener() {
+            public boolean onItemLongClick(AdapterView<?> p, View v, final int pos, long id) {
+                final Item it = PlayQueue.get().at(pos);
+                final boolean isCurrent = pos == PlayQueue.get().index();
+                String[] opts = isCurrent ? new String[] {"Go to album", "Go to artist"}
+                                          : new String[] {"Play next", "Remove from queue", "Go to album", "Go to artist"};
+                new AlertDialog.Builder(QueueActivity.this).setTitle(it.title)
+                    .setItems(opts, new DialogInterface.OnClickListener() {
+                        public void onClick(DialogInterface d, int w) {
+                            int action = isCurrent ? w + 2 : w;
+                            switch (action) {
+                                case 0: PlayQueue.get().moveNext(pos); break;
+                                case 1: PlayQueue.get().remove(pos); break;
+                                case 2: if (it.albumKey.length() > 0) openKey(it.albumKey, Item.ALBUM, it.album); break;
+                                case 3: if (it.artistKey.length() > 0) openKey(it.artistKey, Item.ARTIST, it.artist); break;
+                            }
+                        }
+                    }).show();
+                return true;
+            }
+        });
+    }
+
+    @Override
+    protected void onResume() {
+        super.onResume();
+        refresh(true);
+    }
+
+    @Override
+    public void onQueueChanged() { super.onQueueChanged(); refresh(false); }
+
+    private void refresh(boolean scroll) {
+        PlayQueue q = PlayQueue.get();
+        adapter.set(q.items(), -1);
+        adapter.setHighlight(q.index());
+        setBarSub(q.size() + (q.size() == 1 ? " track" : " tracks") + (q.title().length() > 0 ? " · " + q.title() : ""));
+        if (q.size() == 0) showStatus(false, "The queue is empty", null); else hideStatus();
+        if (scroll && q.index() > 0) list.setSelection(Math.max(0, q.index() - 1));
+    }
+
+    private void clearDialog() {
+        new AlertDialog.Builder(this)
+            .setItems(new String[] {"Clear upcoming tracks", "Clear everything"}, new DialogInterface.OnClickListener() {
+                public void onClick(DialogInterface d, int w) {
+                    PlayQueue q = PlayQueue.get();
+                    if (w == 0) {
+                        q.clearUpcoming();
+                    } else {
+                        PlayerService.send(QueueActivity.this, PlayerService.ACTION_STOP);
+                        q.clear();
+                    }
+                }
+            }).show();
+    }
+}
diff --git a/src/com/minamp/SearchActivity.java b/src/com/minamp/SearchActivity.java
new file mode 100644
index 0000000..8aa8c71
--- /dev/null
+++ b/src/com/minamp/SearchActivity.java
@@ -0,0 +1,116 @@
+package com.minamp;
+
+import java.util.List;
+
+import android.os.Bundle;
+import android.text.Editable;
+import android.text.TextWatcher;
+import android.view.KeyEvent;
+import android.view.View;
+import android.view.inputmethod.EditorInfo;
+import android.view.inputmethod.InputMethodManager;
+import android.widget.AdapterView;
+import android.widget.EditText;
+import android.widget.ImageButton;
+import android.widget.ListView;
+import android.widget.TextView;
+
+import com.minamp.plex.Item;
+import com.minamp.plex.Library;
+
+public class SearchActivity extends BaseActivity {
+
+    private EditText box;
+    private ItemAdapter adapter;
+    private ListView list;
+    private int seq;
+    private String lastQuery = "";
+
+    @Override
+    protected void onCreate(Bundle b) {
+        super.onCreate(b);
+        if (app.library == null) { finish(); return; }
+        setContentView(R.layout.activity_search);
+        ImageButton back = (ImageButton) findViewById(R.id.btn_back);
+        Ui.icon(back, Glyph.BACK, getResources().getColor(R.color.text));
+        back.setOnClickListener(new View.OnClickListener() { public void onClick(View v) { finish(); } });
+
+        box = (EditText) findViewById(R.id.search_box);
+        list = (ListView) findViewById(R.id.list);
+        adapter = new ItemAdapter(this, ItemAdapter.MODE_DEFAULT);
+        list.setAdapter(adapter);
+        list.setOnItemClickListener(new AdapterView.OnItemClickListener() {
+            public void onItemClick(AdapterView<?> p, View v, int pos, long id) {
+                Item it = adapter.getItem(pos);
+                hideKeyboard();
+                open(it, null, 0, "Search");
+            }
+        });
+        list.setOnItemLongClickListener(new AdapterView.OnItemLongClickListener() {
+            public boolean onItemLongClick(AdapterView<?> p, View v, int pos, long id) {
+                itemMenu(adapter.getItem(pos));
+                return true;
+            }
+        });
+        list.setOnTouchListener(new View.OnTouchListener() {
+            public boolean onTouch(View v, android.view.MotionEvent e) { hideKeyboard(); return false; }
+        });
+
+        box.addTextChangedListener(new TextWatcher() {
+            public void beforeTextChanged(CharSequence s, int a, int b, int c) {}
+            public void onTextChanged(CharSequence s, int a, int b, int c) {}
+            public void afterTextChanged(Editable s) {
+                app.handler.removeCallbacks(debounce);
+                app.handler.postDelayed(debounce, 600); // slow phone: don't search on every key
+            }
+        });
+        box.setOnEditorActionListener(new TextView.OnEditorActionListener() {
+            public boolean onEditorAction(TextView v, int action, KeyEvent e) {
+                if (action == EditorInfo.IME_ACTION_SEARCH || (e != null && e.getKeyCode() == KeyEvent.KEYCODE_ENTER)) {
+                    app.handler.removeCallbacks(debounce);
+                    search(true);
+                    hideKeyboard();
+                    return true;
+                }
+                return false;
+            }
+        });
+        showStatus(false, "Search " + app.sectionTitle(), null);
+    }
+
+    @Override
+    protected void onDestroy() {
+        app.handler.removeCallbacks(debounce);
+        super.onDestroy();
+    }
+
+    private final Runnable debounce = new Runnable() { public void run() { search(false); } };
+
+    private void hideKeyboard() {
+        InputMethodManager imm = (InputMethodManager) getSystemService(INPUT_METHOD_SERVICE);
+        imm.hideSoftInputFromWindow(box.getWindowToken(), 0);
+    }
+
+    private void search(boolean force) {
+        final String q = box.getText().toString().trim();
+        if (q.length() < 2) { adapter.set(new java.util.ArrayList<Item>(), -1); showStatus(false, "Search " + app.sectionTitle(), null); return; }
+        if (!force && q.equals(lastQuery)) return;
+        lastQuery = q;
+        final int my = ++seq;
+        final Library lib = lib();
+        showStatus(true, "Searching…", null);
+        run(new Task<List<Item>>() {
+            public List<Item> work() throws Exception { return lib.search(q); }
+            public void done(List<Item> r) {
+                if (my != seq) return;
+                adapter.set(r, -1);
+                list.setSelection(0);
+                if (r.isEmpty()) showStatus(false, "Nothing found for “" + q + "”", null); else hideStatus();
+            }
+            public void fail(Exception e) {
+                if (my != seq) return;
+                showStatus(false, msg(e), new Runnable() { public void run() { search(true); } });
+            }
+        });
+    }
+}
diff --git a/src/com/minamp/SetupActivity.java b/src/com/minamp/SetupActivity.java
new file mode 100644
index 0000000..9e66fd1
--- /dev/null
+++ b/src/com/minamp/SetupActivity.java
@@ -0,0 +1,290 @@
+package com.minamp;
+
+import java.util.List;
+
+import android.content.Intent;
+import android.os.Bundle;
+import android.view.KeyEvent;
+import android.view.View;
+import android.widget.EditText;
+import android.widget.LinearLayout;
+import android.widget.TextView;
+
+import com.minamp.plex.Plex;
+import com.minamp.plex.Server;
+import com.minamp.util.Json;
+
+/** Sign in with a plex.tv/link code (or a manual address), then pick a server and a music library. */
+public class SetupActivity extends BaseActivity {
+
+    public static final String EXTRA_MODE = "mode";
+    public static final int MODE_WELCOME = 0, MODE_SERVER = 1, MODE_LIBRARY = 2;
+
+    private View welcome, pinPage, manual, choose, busy;
+    private TextView pinCode, pinStatus, busyText, chooseTitle, chooseSub;
+    private LinearLayout chooseList;
+    private Runnable chooseBack;
+    private long pinId;
+    private long pinStarted;
+    private int pinSeq;
+
+    @Override
+    protected void onCreate(Bundle b) {
+        super.onCreate(b);
+        setContentView(R.layout.activity_setup);
+        welcome = findViewById(R.id.page_welcome);
+        pinPage = findViewById(R.id.page_pin);
+        manual = findViewById(R.id.page_manual);
+        choose = findViewById(R.id.page_choose);
+        busy = findViewById(R.id.page_busy);
+        pinCode = (TextView) findViewById(R.id.pin_code);
+        pinStatus = (TextView) findViewById(R.id.pin_status);
+        busyText = (TextView) findViewById(R.id.busy_text);
+        chooseTitle = (TextView) findViewById(R.id.choose_title);
+        chooseSub = (TextView) findViewById(R.id.choose_sub);
+        chooseList = (LinearLayout) findViewById(R.id.choose_list);
+
+        findViewById(R.id.btn_signin).setOnClickListener(new View.OnClickListener() { public void onClick(View v) { startPin(); } });
+        findViewById(R.id.btn_manual).setOnClickListener(new View.OnClickListener() { public void onClick(View v) { show(manual); } });
+        findViewById(R.id.btn_pin_cancel).setOnClickListener(new View.OnClickListener() { public void onClick(View v) { pinSeq++; show(welcome); } });
+        findViewById(R.id.btn_manual_back).setOnClickListener(new View.OnClickListener() { public void onClick(View v) { show(welcome); } });
+        findViewById(R.id.btn_manual_go).setOnClickListener(new View.OnClickListener() { public void onClick(View v) { connectManual(); } });
+        findViewById(R.id.btn_choose_back).setOnClickListener(new View.OnClickListener() {
+            public void onClick(View v) { if (chooseBack != null) chooseBack.run(); else show(welcome); }
+        });
+
+        int mode = getIntent().getIntExtra(EXTRA_MODE, MODE_WELCOME);
+        String account = app.prefs.getString("account", null);
+        if (mode == MODE_LIBRARY && app.server != null) {
+            loadSections(app.server, null);
+        } else if (mode == MODE_SERVER && account != null) {
+            loadServers(account);
+        } else {
+            show(welcome);
+        }
+    }
+
+    @Override
+    protected void onDestroy() {
+        pinSeq++;
+        super.onDestroy();
+    }
+
+    @Override
+    public boolean onCreateOptionsMenu(android.view.Menu menu) { return false; }
+
+    private void show(View page) {
+        View[] all = {welcome, pinPage, manual, choose, busy};
+        for (int i = 0; i < all.length; i++) all[i].setVisibility(all[i] == page ? View.VISIBLE : View.GONE);
+    }
+
+    private void showBusy(String text) {
+        busyText.setText(text);
+        show(busy);
+    }
+
+    @Override
+    public boolean onKeyDown(int keyCode, KeyEvent event) {
+        if (keyCode == KeyEvent.KEYCODE_BACK && welcome.getVisibility() != View.VISIBLE && app.isConfigured() == false) {
+            pinSeq++;
+            show(welcome);
+            return true;
+        }
+        return super.onKeyDown(keyCode, event);
+    }
+
+    // ------------------------------------------------------------------ PIN sign-in
+
+    private void startPin() {
+        showBusy("Contacting plex.tv…\n(the first secure connection takes a few seconds on this phone)");
+        final int my = ++pinSeq;
+        run(new Task<Plex.Pin>() {
+            public Plex.Pin work() throws Exception { return Plex.createPin(); }
+            public void done(Plex.Pin p) {
+                if (my != pinSeq) return;
+                pinId = p.id;
+                pinStarted = System.currentTimeMillis();
+                StringBuilder spaced = new StringBuilder();
+                for (int i = 0; i < p.code.length(); i++) { if (i > 0) spaced.append(' '); spaced.append(p.code.charAt(i)); }
+                pinCode.setText(spaced.toString());
+                pinStatus.setText("Waiting for you to link…");
+                show(pinPage);
+                pollPin(my);
+            }
+            public void fail(Exception e) {
+                if (my != pinSeq) return;
+                show(welcome);
+                toast("Couldn't reach plex.tv: " + msg(e));
+            }
+        });
+    }
+
+    private void pollPin(final int my) {
+        app.handler.postDelayed(new Runnable() {
+            public void run() {
+                if (my != pinSeq || destroyed) return;
+                if (System.currentTimeMillis() - pinStarted > 14 * 60 * 1000) {
+                    pinStatus.setText("Code expired — go back and try again");
+                    return;
+                }
+                SetupActivity.this.run(new Task<String>() {
+                    public String work() throws Exception { return Plex.checkPin(pinId); }
+                    public void done(String token) {
+                        if (my != pinSeq) return;
+                        if (token == null) { pollPin(my); return; }
+                        pinSeq++;
+                        signedIn(token);
+                    }
+                    public void fail(Exception e) {
+                        if (my != pinSeq) return;
+                        pinStatus.setText("Retrying… (" + msg(e) + ")");
+                        pollPin(my);
+                    }
+                });
+            }
+        }, 2500);
+    }
+
+    private void signedIn(final String account) {
+        showBusy("Signed in. Finding your servers…");
+        app.prefs.edit().putString("account", account).commit();
+        run(new Task<String>() {
+            public String work() throws Exception { return Plex.username(account); }
+            public void done(String u) { app.prefs.edit().putString("username", u).commit(); }
+        });
+        loadServers(account);
+    }
+
+    private void loadServers(final String account) {
+        showBusy("Finding your servers…");
+        run(new Task<List<Server>>() {
+            public List<Server> work() throws Exception { return Plex.servers(account); }
+            public void done(final List<Server> servers) {
+                if (servers.isEmpty()) {
+                    show(welcome);
+                    toast("No Plex Media Servers on this account");
+                    return;
+                }
+                if (servers.size() == 1) { pickServer(servers.get(0), null); return; }
+                chooseTitle.setText("Choose a server");
+                chooseSub.setText("Signed in as " + app.prefs.getString("username", "you"));
+                chooseList.removeAllViews();
+                for (int i = 0; i < servers.size(); i++) {
+                    final Server s = servers.get(i);
+                    int remote = 0, local = 0;
+                    for (int k = 0; k < s.connections.size(); k++) {
+                        int kind = s.connections.get(k).kind;
+                        if (kind == Server.LOCAL || kind == Server.LOCAL_HTTP) local++; else remote++;
+                    }
+                    String sub = (s.owned ? "Yours" : "Shared with you") + " · " + (local > 0 ? "home + " : "") + (remote > 0 ? "remote" : "local only");
+                    addChoice(s.name, sub, new View.OnClickListener() {
+                        public void onClick(View v) { pickServer(s, new Runnable() { public void run() { done(servers); } }); }
+                    });
+                }
+                chooseBack = new Runnable() { public void run() { show(welcome); } };
+                show(choose);
+            }
+            public void fail(Exception e) {
+                show(welcome);
+                toast("Couldn't list servers: " + msg(e));
+            }
+        });
+    }
+
+    private void addChoice(String title, String sub, View.OnClickListener l) {
+        View row = getLayoutInflater().inflate(R.layout.row_choice, chooseList, false);
+        ((TextView) row.findViewById(R.id.choice_title)).setText(title);
+        ((TextView) row.findViewById(R.id.choice_sub)).setText(sub);
+        row.setOnClickListener(l);
+        chooseList.addView(row);
+    }
+
+    private void pickServer(final Server s, final Runnable back) {
+        showBusy("Connecting to " + s.name + "…\nTrying home network, then remote, then relay.");
+        run(new Task<Server.Conn>() {
+            public Server.Conn work() throws Exception { return s.pick(); }
+            public void done(Server.Conn c) {
+                loadSections(s, back);
+            }
+            public void fail(Exception e) {
+                if (back != null) back.run(); else show(welcome);
+                toast(msg(e));
+            }
+        });
+    }
+
+    // ------------------------------------------------------------------ manual
+
+    private void connectManual() {
+        String url = ((EditText) findViewById(R.id.edit_url)).getText().toString().trim();
+        String token = ((EditText) findViewById(R.id.edit_token)).getText().toString().trim();
+        if (url.length() == 0) { toast("Enter your server's address"); return; }
+        final Server s = new Server();
+        s.name = "Plex server";
+        s.token = token;
+        s.add(Server.normalizeManual(url), Server.MANUAL);
+        showBusy("Connecting…");
+        run(new Task<String>() {
+            public String work() throws Exception {
+                s.pick();
+                Json.Obj mc = s.get("/");
+                return mc == null ? "" : mc.optString("friendlyName", "");
+            }
+            public void done(String name) {
+                if (name.length() > 0) s.name = name;
+                loadSections(s, new Runnable() { public void run() { show(manual); } });
+            }
+            public void fail(Exception e) {
+                show(manual);
+                boolean auth = e instanceof Plex.PlexException && ((Plex.PlexException) e).code == 401;
+                toast(auth ? "The server wants a token (or sign in with Plex instead)" : msg(e));
+            }
+        });
+    }
+
+    // ------------------------------------------------------------------ libraries
+
+    private void loadSections(final Server s, final Runnable back) {
+        showBusy("Loading libraries…");
+        run(new Task<List<Server.Section>>() {
+            public List<Server.Section> work() throws Exception { return s.musicSections(); }
+            public void done(List<Server.Section> secs) {
+                if (secs.isEmpty()) {
+                    if (back != null) back.run(); else show(welcome);
+                    toast(s.name + " has no music libraries");
+                    return;
+                }
+                if (secs.size() == 1) { finishWith(s, secs.get(0)); return; }
+                chooseTitle.setText("Choose a music library");
+                chooseSub.setText(s.name);
+                chooseList.removeAllViews();
+                for (int i = 0; i < secs.size(); i++) {
+                    final Server.Section sec = secs.get(i);
+                    addChoice(sec.title, "Music", new View.OnClickListener() {
+                        public void onClick(View v) { finishWith(s, sec); }
+                    });
+                }
+                chooseBack = back != null ? back : new Runnable() { public void run() { finish(); } };
+                show(choose);
+            }
+            public void fail(Exception e) {
+                if (back != null) back.run(); else show(welcome);
+                toast(msg(e));
+            }
+        });
+    }
+
+    private void finishWith(Server s, Server.Section sec) {
+        boolean sameServer = app.server != null && app.server.machineId.equals(s.machineId) && s.machineId.length() > 0;
+        if (!sameServer || app.server != s) {
+            if (!sameServer) {
+                PlayerService.send(this, PlayerService.ACTION_STOP);
+                PlayQueue.get().clear();
+            }
+            app.saveServer(s);
+        }
+        app.saveSection(sec.key, sec.title);
+        startActivity(new Intent(this, HomeActivity.class).addFlags(Intent.FLAG_ACTIVITY_CLEAR_TOP));
+        finish();
+    }
+}
diff --git a/src/com/minamp/SquareImageView.java b/src/com/minamp/SquareImageView.java
new file mode 100644
index 0000000..ba595b7
--- /dev/null
+++ b/src/com/minamp/SquareImageView.java
@@ -0,0 +1,22 @@
+package com.minamp;
+
+import android.content.Context;
+import android.util.AttributeSet;
+import android.widget.ImageView;
+
+/** Square as large as fits in the space it's given (album art on Now Playing). */
+public class SquareImageView extends ImageView {
+    public SquareImageView(Context c) { super(c); }
+    public SquareImageView(Context c, AttributeSet a) { super(c, a); }
+
+    @Override
+    protected void onMeasure(int w, int h) {
+        int ws = MeasureSpec.getSize(w), hs = MeasureSpec.getSize(h);
+        int wm = MeasureSpec.getMode(w), hm = MeasureSpec.getMode(h);
+        int size;
+        if (wm == MeasureSpec.UNSPECIFIED) size = hs;
+        else if (hm == MeasureSpec.UNSPECIFIED) size = ws;
+        else size = Math.min(ws, hs);
+        setMeasuredDimension(size, size);
+    }
+}
diff --git a/src/com/minamp/Ui.java b/src/com/minamp/Ui.java
new file mode 100644
index 0000000..69a216b
--- /dev/null
+++ b/src/com/minamp/Ui.java
@@ -0,0 +1,71 @@
+package com.minamp;
+
+import android.content.Context;
+import android.graphics.Bitmap;
+import android.graphics.Color;
+import android.widget.ImageButton;
+import android.widget.ImageView;
+
+/** Small UI helpers. */
+public final class Ui {
+    private Ui() {}
+
+    public static int dp(Context c, float dp) {
+        return (int) (dp * c.getResources().getDisplayMetrics().density + 0.5f);
+    }
+
+    public static Glyph glyph(Context c, int type, int color, float sizeDp) {
+        return new Glyph(type, color, dp(c, sizeDp));
+    }
+
+    public static void icon(ImageView v, int type, int color, float sizeDp) {
+        Context c = v.getContext();
+        Glyph g = glyph(c, type, color, sizeDp);
+        g.scale(1f);
+        v.setImageDrawable(g);
+    }
+
+    public static void icon(ImageButton v, int type, int color) {
+        icon(v, type, color, 20);
+    }
+
+    public static String time(long ms) {
+        if (ms < 0) ms = 0;
+        long s = ms / 1000;
+        long h = s / 3600;
+        long m = (s / 60) % 60;
+        s = s % 60;
+        StringBuilder sb = new StringBuilder();
+        if (h > 0) sb.append(h).append(':').append(m < 10 ? "0" : "");
+        sb.append(m).append(':').append(s < 10 ? "0" : "").append(s);
+        return sb.toString();
+    }
+
+    public static String longDuration(long ms) {
+        long min = (ms + 30000) / 60000;
+        if (min < 60) return min + " min";
+        return (min / 60) + " h " + (min % 60) + " min";
+    }
+
+    /** Average colour of a bitmap, nudged towards something vivid but dark enough for white text. */
+    public static int backdropColor(Bitmap b) {
+        if (b == null) return 0xFF1D1D22;
+        Bitmap small = Bitmap.createScaledBitmap(b, 12, 12, true);
+        long r = 0, g = 0, bl = 0, wsum = 0;
+        for (int y = 0; y < 12; y++) {
+            for (int x = 0; x < 12; x++) {
+                int p = small.getPixel(x, y);
+                int pr = Color.red(p), pg = Color.green(p), pb = Color.blue(p);
+                int max = Math.max(pr, Math.max(pg, pb)), min = Math.min(pr, Math.min(pg, pb));
+                int w = 1 + (max - min); // favour saturated pixels
+                r += pr * w; g += pg * w; bl += pb * w; wsum += w;
+            }
+        }
+        if (small != b) small.recycle();
+        float[] hsv = new float[3];
+        Color.RGBToHSV((int) (r / wsum), (int) (g / wsum), (int) (bl / wsum), hsv);
+        hsv[1] = Math.min(1f, hsv[1] * 1.2f);
+        hsv[2] = Math.min(hsv[2], 0.42f);
+        return Color.HSVToColor(hsv);
+    }
+}
diff --git a/src/com/minamp/net/CertVerifier.java b/src/com/minamp/net/CertVerifier.java
new file mode 100644
index 0000000..7fcecae
--- /dev/null
+++ b/src/com/minamp/net/CertVerifier.java
@@ -0,0 +1,226 @@
+package com.minamp.net;
+
+import java.io.IOException;
+import java.security.MessageDigest;
+import java.util.ArrayList;
+import java.util.Date;
+import java.util.List;
+import java.util.Locale;
+
+import com.minamp.bc.asn1.ASN1Encoding;
+import com.minamp.bc.asn1.ASN1ObjectIdentifier;
+import com.minamp.bc.asn1.ASN1OctetString;
+import com.minamp.bc.asn1.pkcs.PKCSObjectIdentifiers;
+import com.minamp.bc.asn1.x500.RDN;
+import com.minamp.bc.asn1.x500.X500Name;
+import com.minamp.bc.asn1.x500.style.BCStyle;
+import com.minamp.bc.asn1.x500.style.IETFUtils;
+import com.minamp.bc.asn1.x509.BasicConstraints;
+import com.minamp.bc.asn1.x509.Certificate;
+import com.minamp.bc.asn1.x509.Extension;
+import com.minamp.bc.asn1.x509.Extensions;
+import com.minamp.bc.asn1.x509.GeneralName;
+import com.minamp.bc.asn1.x509.GeneralNames;
+import com.minamp.bc.asn1.x9.X9ObjectIdentifiers;
+import com.minamp.bc.crypto.Digest;
+import com.minamp.bc.crypto.digests.SHA1Digest;
+import com.minamp.bc.crypto.digests.SHA256Digest;
+import com.minamp.bc.crypto.digests.SHA384Digest;
+import com.minamp.bc.crypto.digests.SHA512Digest;
+import com.minamp.bc.crypto.params.AsymmetricKeyParameter;
+import com.minamp.bc.crypto.signers.DSADigestSigner;
+import com.minamp.bc.crypto.signers.ECDSASigner;
+import com.minamp.bc.crypto.signers.RSADigestSigner;
+import com.minamp.bc.crypto.util.PublicKeyFactory;
+
+/**
+ * Minimal Web PKI path validation for the bundled TLS stack:
+ * hostname match, validity window, signature chain up to a bundled Mozilla root.
+ */
+public final class CertVerifier {
+
+    /** Lookup of trusted root certificates (DER) by the DER encoding of their subject name. */
+    public interface RootStore {
+        List<byte[]> find(byte[] subjectDer);
+    }
+
+    private static RootStore roots;
+
+    public static void setRootStore(RootStore store) { roots = store; }
+
+    private CertVerifier() {}
+
+    public static void verify(List<byte[]> chainDer, String host) throws IOException {
+        if (chainDer == null || chainDer.isEmpty()) throw new IOException("Server sent no certificate");
+        if (roots == null) throw new IOException("No trust store configured");
+        List<Certificate> chain = new ArrayList<Certificate>();
+        for (int i = 0; i < chainDer.size(); i++) chain.add(Certificate.getInstance(chainDer.get(i)));
+
+        Certificate leaf = chain.get(0);
+        if (!hostMatches(leaf, host)) {
+            throw new IOException("Certificate does not match " + host);
+        }
+
+        Date now = new Date();
+        // An unset clock on an old phone (e.g. 1980 after a battery pull) would make every
+        // certificate look "not yet valid"; only enforce dates when the clock looks sane.
+        boolean clockSane = now.getTime() > 1704067200000L; // 2024-01-01
+
+        Certificate current = leaf;
+        for (int depth = 0; depth < 8; depth++) {
+            if (clockSane) checkDates(current, now);
+
+            byte[] issuerDer = current.getIssuer().getEncoded(ASN1Encoding.DER);
+
+            // 1. Anchored directly by a trusted root?
+            List<byte[]> anchors = roots.find(issuerDer);
+            if (anchors != null) {
+                for (int i = 0; i < anchors.size(); i++) {
+                    Certificate root = Certificate.getInstance(anchors.get(i));
+                    if (signatureValid(current, root)) return; // trusted
+                }
+            }
+
+            // 2. Otherwise find the issuing intermediate among what the server sent.
+            Certificate next = null;
+            for (int i = 1; i < chain.size(); i++) {
+                Certificate cand = chain.get(i);
+                if (cand == current) continue;
+                if (!java.util.Arrays.equals(cand.getSubject().getEncoded(ASN1Encoding.DER), issuerDer)) continue;
+                if (!isCa(cand)) continue;
+                if (signatureValid(current, cand)) { next = cand; break; }
+            }
+            if (next == null) throw new IOException("Untrusted certificate chain for " + host);
+            current = next;
+        }
+        throw new IOException("Certificate chain too long");
+    }
+
+    private static void checkDates(Certificate c, Date now) throws IOException {
+        Date from = c.getStartDate().getDate();
+        Date to = c.getEndDate().getDate();
+        if (now.before(from) || now.after(to)) {
+            throw new IOException("Certificate expired or not yet valid (check the phone's date)");
+        }
+    }
+
+    private static boolean isCa(Certificate c) {
+        Extensions ext = c.getTBSCertificate().getExtensions();
+        if (ext == null) return c.getTBSCertificate().getVersionNumber() < 3; // v1 roots/intermediates
+        BasicConstraints bc = BasicConstraints.fromExtensions(ext);
+        return bc != null && bc.isCA();
+    }
+
+    static boolean signatureValid(Certificate subject, Certificate issuer) {
+        try {
+            ASN1ObjectIdentifier alg = subject.getSignatureAlgorithm().getAlgorithm();
+            byte[] tbs = subject.getTBSCertificate().getEncoded(ASN1Encoding.DER);
+            byte[] sig = subject.getSignature().getOctets();
+            AsymmetricKeyParameter key = PublicKeyFactory.createKey(issuer.getSubjectPublicKeyInfo());
+
+            if (alg.equals(PKCSObjectIdentifiers.sha256WithRSAEncryption)) return rsa(new SHA256Digest(), key, tbs, sig);
+            if (alg.equals(PKCSObjectIdentifiers.sha384WithRSAEncryption)) return rsa(new SHA384Digest(), key, tbs, sig);
+            if (alg.equals(PKCSObjectIdentifiers.sha512WithRSAEncryption)) return rsa(new SHA512Digest(), key, tbs, sig);
+            if (alg.equals(PKCSObjectIdentifiers.sha1WithRSAEncryption)) return rsa(new SHA1Digest(), key, tbs, sig);
+            if (alg.equals(X9ObjectIdentifiers.ecdsa_with_SHA256)) return ecdsa(new SHA256Digest(), key, tbs, sig);
+            if (alg.equals(X9ObjectIdentifiers.ecdsa_with_SHA384)) return ecdsa(new SHA384Digest(), key, tbs, sig);
+            if (alg.equals(X9ObjectIdentifiers.ecdsa_with_SHA512)) return ecdsa(new SHA512Digest(), key, tbs, sig);
+            return false;
+        } catch (Exception e) {
+            return false;
+        }
+    }
+
+    private static boolean rsa(Digest d, AsymmetricKeyParameter key, byte[] tbs, byte[] sig) {
+        RSADigestSigner s = new RSADigestSigner(d);
+        s.init(false, key);
+        s.update(tbs, 0, tbs.length);
+        return s.verifySignature(sig);
+    }
+
+    private static boolean ecdsa(Digest d, AsymmetricKeyParameter key, byte[] tbs, byte[] sig) {
+        DSADigestSigner s = new DSADigestSigner(new ECDSASigner(), d);
+        s.init(false, key);
+        s.update(tbs, 0, tbs.length);
+        return s.verifySignature(sig);
+    }
+
+    // ---- hostname checking ----
+
+    static boolean hostMatches(Certificate leaf, String host) {
+        host = host.toLowerCase(Locale.US);
+        boolean ip = isIpLiteral(host);
+        boolean sawDns = false;
+        Extensions ext = leaf.getTBSCertificate().getExtensions();
+        if (ext != null) {
+            GeneralNames names = GeneralNames.fromExtensions(ext, Extension.subjectAlternativeName);
+            if (names != null) {
+                GeneralName[] arr = names.getNames();
+                for (int i = 0; i < arr.length; i++) {
+                    GeneralName n = arr[i];
+                    if (n.getTagNo() == GeneralName.dNSName) {
+                        sawDns = true;
+                        if (!ip && dnsMatch(n.getName().toString(), host)) return true;
+                    } else if (n.getTagNo() == GeneralName.iPAddress && ip) {
+                        byte[] a = ASN1OctetString.getInstance(n.getName()).getOctets();
+                        if (ipString(a).equals(host)) return true;
+                    }
+                }
+            }
+        }
+        if (!sawDns && !ip) {
+            X500Name subject = X500Name.getInstance(leaf.getSubject());
+            RDN[] cns = subject.getRDNs(BCStyle.CN);
+            for (int i = 0; i < cns.length; i++) {
+                String cn = IETFUtils.valueToString(cns[i].getFirst().getValue());
+                if (dnsMatch(cn, host)) return true;
+            }
+        }
+        return false;
+    }
+
+    static boolean dnsMatch(String pattern, String host) {
+        pattern = pattern.toLowerCase(Locale.US);
+        if (pattern.endsWith(".")) pattern = pattern.substring(0, pattern.length() - 1);
+        if (host.endsWith(".")) host = host.substring(0, host.length() - 1);
+        if (pattern.startsWith("*.")) {
+            String suffix = pattern.substring(1); // ".example.com"
+            if (!host.endsWith(suffix)) return false;
+            String label = host.substring(0, host.length() - suffix.length());
+            return label.length() > 0 && label.indexOf('.') < 0;
+        }
+        return pattern.equals(host);
+    }
+
+    static boolean isIpLiteral(String host) {
+        if (host.indexOf(':') >= 0) return true;
+        for (int i = 0; i < host.length(); i++) {
+            char c = host.charAt(i);
+            if (!(c == '.' || (c >= '0' && c <= '9'))) return false;
+        }
+        return true;
+    }
+
+    private static String ipString(byte[] a) {
+        if (a.length == 4) {
+            return (a[0] & 255) + "." + (a[1] & 255) + "." + (a[2] & 255) + "." + (a[3] & 255);
+        }
+        return "";
+    }
+
+    public static String sha1Hex(byte[] data) {
+        try {
+            MessageDigest md = MessageDigest.getInstance("SHA-1");
+            byte[] h = md.digest(data);
+            StringBuilder sb = new StringBuilder();
+            for (int i = 0; i < h.length; i++) {
+                String s = Integer.toHexString(h[i] & 255);
+                if (s.length() == 1) sb.append('0');
+                sb.append(s);
+            }
+            return sb.toString();
+        } catch (Exception e) {
+            throw new RuntimeException(e);
+        }
+    }
+}
diff --git a/src/com/minamp/net/Http.java b/src/com/minamp/net/Http.java
new file mode 100644
index 0000000..4affafd
--- /dev/null
+++ b/src/com/minamp/net/Http.java
@@ -0,0 +1,542 @@
+package com.minamp.net;
+
+import java.io.BufferedInputStream;
+import java.io.BufferedOutputStream;
+import java.io.ByteArrayOutputStream;
+import java.io.IOException;
+import java.io.InputStream;
+import java.io.OutputStream;
+import java.net.InetSocketAddress;
+import java.net.Socket;
+import java.security.SecureRandom;
+import java.util.ArrayList;
+import java.util.HashMap;
+import java.util.Iterator;
+import java.util.LinkedHashMap;
+import java.util.List;
+import java.util.Locale;
+import java.util.Map;
+import java.util.Vector;
+
+import com.minamp.bc.tls.DefaultTlsClient;
+import com.minamp.bc.tls.NameType;
+import com.minamp.bc.tls.ServerName;
+import com.minamp.bc.tls.TlsAuthentication;
+import com.minamp.bc.tls.TlsClientProtocol;
+import com.minamp.bc.tls.TlsCredentials;
+import com.minamp.bc.tls.TlsServerCertificate;
+import com.minamp.bc.tls.TlsSession;
+import com.minamp.bc.tls.CertificateRequest;
+import com.minamp.bc.tls.crypto.TlsCrypto;
+import com.minamp.bc.tls.crypto.impl.bc.BcTlsCrypto;
+
+/**
+ * Small HTTP/1.1 client with its own TLS 1.2/1.3 (Bouncy Castle), keep-alive pooling and
+ * session resumption. Android 2.x's built-in SSL can't talk to plex.tv or *.plex.direct,
+ * so every request in the app goes through here.
+ */
+public final class Http {
+
+    public static final String USER_AGENT = "Minamp/1.0";
+
+    /** Optional HTTP CONNECT proxy, only used when running the networking code on a desktop JVM. */
+    public static String proxyHost;
+    public static int proxyPort;
+
+    private static TlsCrypto crypto;
+    private static final Map<String, TlsSession> sessions = new HashMap<String, TlsSession>();
+    private static final Map<String, List<Conn>> pool = new HashMap<String, List<Conn>>();
+    private static final long IDLE_MS = 25000;
+
+    private Http() {}
+
+    private static synchronized TlsCrypto crypto() {
+        if (crypto == null) crypto = new BcTlsCrypto(new SecureRandom());
+        return crypto;
+    }
+
+    // ------------------------------------------------------------------ URL
+
+    public static final class Url {
+        public final boolean https;
+        public final String host;
+        public final int port;
+        public final String path; // includes query
+
+        public Url(String s) throws IOException {
+            String lower = s.toLowerCase(Locale.US);
+            int start;
+            if (lower.startsWith("https://")) { https = true; start = 8; }
+            else if (lower.startsWith("http://")) { https = false; start = 7; }
+            else throw new IOException("Bad URL: " + s);
+            int slash = s.indexOf('/', start);
+            String hostPort = slash < 0 ? s.substring(start) : s.substring(start, slash);
+            path = slash < 0 ? "/" : s.substring(slash);
+            int colon = hostPort.lastIndexOf(':');
+            if (colon > 0 && hostPort.indexOf(']') < colon) {
+                host = hostPort.substring(0, colon);
+                try { port = Integer.parseInt(hostPort.substring(colon + 1)); }
+                catch (NumberFormatException e) { throw new IOException("Bad port in " + s); }
+            } else {
+                host = hostPort;
+                port = https ? 443 : 80;
+            }
+        }
+
+        String key() { return (https ? "s:" : "p:") + host + ":" + port; }
+
+        String hostHeader() {
+            boolean dflt = (https && port == 443) || (!https && port == 80);
+            return dflt ? host : host + ":" + port;
+        }
+    }
+
+    // ------------------------------------------------------------------ connection
+
+    static final class Conn {
+        final String key;
+        Socket socket;
+        InputStream in;
+        OutputStream out;
+        TlsClientProtocol tls;
+        long idleSince;
+
+        Conn(String key) { this.key = key; }
+
+        void close() {
+            try { if (tls != null) tls.close(); } catch (Exception ignored) {}
+            try { if (socket != null) socket.close(); } catch (Exception ignored) {}
+        }
+    }
+
+    private static Conn take(String key) {
+        synchronized (pool) {
+            List<Conn> list = pool.get(key);
+            if (list == null) return null;
+            long now = System.currentTimeMillis();
+            while (!list.isEmpty()) {
+                Conn c = list.remove(list.size() - 1);
+                if (now - c.idleSince < IDLE_MS && !c.socket.isClosed()) return c;
+                c.close();
+            }
+            return null;
+        }
+    }
+
+    static void release(Conn c) {
+        c.idleSince = System.currentTimeMillis();
+        synchronized (pool) {
+            List<Conn> list = pool.get(c.key);
+            if (list == null) { list = new ArrayList<Conn>(); pool.put(c.key, list); }
+            if (list.size() >= 4) { list.remove(0).close(); }
+            list.add(c);
+        }
+    }
+
+    /** Drop all pooled connections (e.g. after the network changed). */
+    public static void evictAll() {
+        synchronized (pool) {
+            for (Iterator<List<Conn>> it = pool.values().iterator(); it.hasNext();) {
+                List<Conn> l = it.next();
+                for (int i = 0; i < l.size(); i++) l.get(i).close();
+            }
+            pool.clear();
+        }
+    }
+
+    private static Conn connect(final Url u, int timeoutMs) throws IOException {
+        Conn c = new Conn(u.key());
+        Socket s = new Socket();
+        boolean ok = false;
+        try {
+            if (proxyHost != null) {
+                s.connect(new InetSocketAddress(proxyHost, proxyPort), timeoutMs);
+                s.setSoTimeout(timeoutMs);
+                OutputStream po = s.getOutputStream();
+                String req = "CONNECT " + u.host + ":" + u.port + " HTTP/1.1\r\nHost: " + u.host + ":" + u.port + "\r\n\r\n";
+                po.write(req.getBytes("ISO-8859-1"));
+                po.flush();
+                InputStream pi = s.getInputStream();
+                String status = readLine(pi);
+                if (status == null || status.indexOf(" 200") < 0) throw new IOException("Proxy refused: " + status);
+                String line;
+                while ((line = readLine(pi)) != null && line.length() > 0) { /* skip headers */ }
+            } else {
+                s.connect(new InetSocketAddress(u.host, u.port), timeoutMs);
+                s.setSoTimeout(timeoutMs);
+            }
+            s.setTcpNoDelay(true);
+            c.socket = s;
+            if (u.https) {
+                TlsClientProtocol proto = new TlsClientProtocol(s.getInputStream(), s.getOutputStream());
+                proto.connect(new Client(crypto(), u.host, u.key()));
+                c.tls = proto;
+                c.in = new BufferedInputStream(proto.getInputStream(), 8192);
+                c.out = new BufferedOutputStream(proto.getOutputStream(), 4096);
+            } else {
+                c.in = new BufferedInputStream(s.getInputStream(), 8192);
+                c.out = new BufferedOutputStream(s.getOutputStream(), 4096);
+            }
+            ok = true;
+            return c;
+        } finally {
+            if (!ok) { try { s.close(); } catch (Exception ignored) {} }
+        }
+    }
+
+    private static final class Client extends DefaultTlsClient {
+        private final String host;
+        private final String sessionKey;
+
+        Client(TlsCrypto crypto, String host, String sessionKey) {
+            super(crypto);
+            this.host = host;
+            this.sessionKey = sessionKey;
+        }
+
+        @Override
+        protected Vector getSNIServerNames() {
+            if (CertVerifier.isIpLiteral(host)) return null;
+            Vector v = new Vector();
+            try {
+                v.addElement(new ServerName(NameType.host_name, host.getBytes("US-ASCII")));
+            } catch (java.io.UnsupportedEncodingException e) {
+                return null;
+            }
+            return v;
+        }
+
+        @Override
+        public TlsSession getSessionToResume() {
+            synchronized (sessions) { return sessions.get(sessionKey); }
+        }
+
+        @Override
+        public void notifyHandshakeComplete() throws IOException {
+            super.notifyHandshakeComplete();
+            TlsSession s = context.getSession();
+            if (s != null && s.isResumable()) {
+                synchronized (sessions) { sessions.put(sessionKey, s); }
+            }
+        }
+
+        public TlsAuthentication getAuthentication() throws IOException {
+            return new TlsAuthentication() {
+                public void notifyServerCertificate(TlsServerCertificate sc) throws IOException {
+                    com.minamp.bc.tls.Certificate cert = sc.getCertificate();
+                    List<byte[]> chain = new ArrayList<byte[]>();
+                    for (int i = 0; i < cert.getLength(); i++) chain.add(cert.getCertificateAt(i).getEncoded());
+                    CertVerifier.verify(chain, host);
+                }
+
+                public TlsCredentials getClientCredentials(CertificateRequest req) {
+                    return null;
+                }
+            };
+        }
+    }
+
+    // ------------------------------------------------------------------ request / response
+
+    public static final class Response {
+        public final int code;
+        public final String status;
+        public final Map<String, String> headers; // lower-case names
+        public final InputStream body;
+        public final long contentLength; // -1 if unknown
+        public final boolean chunked;
+
+        Response(int code, String status, Map<String, String> headers, InputStream body, long len, boolean chunked) {
+            this.code = code; this.status = status; this.headers = headers; this.body = body;
+            this.contentLength = len; this.chunked = chunked;
+        }
+
+        public String header(String name) { return headers.get(name.toLowerCase(Locale.US)); }
+
+        public void close() {
+            try { body.close(); } catch (IOException ignored) {}
+        }
+
+        public byte[] readAll() throws IOException {
+            try {
+                ByteArrayOutputStream bos = new ByteArrayOutputStream(contentLength > 0 && contentLength < 4000000 ? (int) contentLength : 8192);
+                byte[] buf = new byte[8192];
+                int n;
+                while ((n = body.read(buf)) > 0) bos.write(buf, 0, n);
+                return bos.toByteArray();
+            } finally {
+                close();
+            }
+        }
+
+        public String readString() throws IOException {
+            return new String(readAll(), "UTF-8");
+        }
+    }
+
+    public static Response get(String url, Map<String, String> headers, int timeoutMs) throws IOException {
+        return request("GET", url, headers, null, timeoutMs);
+    }
+
+    public static Response request(String method, String url, Map<String, String> headers, byte[] body, int timeoutMs) throws IOException {
+        for (int redirects = 0; ; redirects++) {
+            Response r = requestOnce(method, url, headers, body, timeoutMs);
+            if ((r.code == 301 || r.code == 302 || r.code == 307 || r.code == 308) && redirects < 4
+                    && ("GET".equals(method) || "HEAD".equals(method))) {
+                String loc = r.header("location");
+                r.close();
+                if (loc == null) throw new IOException("Redirect without location");
+                if (loc.startsWith("/")) {
+                    Url u = new Url(url);
+                    loc = (u.https ? "https://" : "http://") + u.hostHeader() + loc;
+                }
+                url = loc;
+                continue;
+            }
+            return r;
+        }
+    }
+
+    private static Response requestOnce(String method, String url, Map<String, String> headers, byte[] body, int timeoutMs) throws IOException {
+        Url u = new Url(url);
+        // A pooled connection may have been closed by the server; retry once on a fresh one.
+        for (int attempt = 0; attempt < 2; attempt++) {
+            Conn c = take(u.key());
+            boolean pooled = c != null;
+            if (c == null) c = connect(u, timeoutMs);
+            try {
+                c.socket.setSoTimeout(timeoutMs);
+                writeRequest(c, u, method, headers, body);
+                return readResponse(c, method);
+            } catch (IOException e) {
+                c.close();
+                if (!pooled) throw e;
+            }
+        }
+        throw new IOException("Request failed");
+    }
+
+    private static void writeRequest(Conn c, Url u, String method, Map<String, String> headers, byte[] body) throws IOException {
+        StringBuilder sb = new StringBuilder(512);
+        sb.append(method).append(' ').append(u.path).append(" HTTP/1.1\r\n");
+        sb.append("Host: ").append(u.hostHeader()).append("\r\n");
+        boolean hasUa = false;
+        if (headers != null) {
+            for (Map.Entry<String, String> e : headers.entrySet()) {
+                if (e.getValue() == null) continue;
+                if ("user-agent".equalsIgnoreCase(e.getKey())) hasUa = true;
+                sb.append(e.getKey()).append(": ").append(e.getValue()).append("\r\n");
+            }
+        }
+        if (!hasUa) sb.append("User-Agent: ").append(USER_AGENT).append("\r\n");
+        sb.append("Connection: keep-alive\r\n");
+        if (body != null || "POST".equals(method) || "PUT".equals(method)) {
+            sb.append("Content-Length: ").append(body == null ? 0 : body.length).append("\r\n");
+        }
+        sb.append("\r\n");
+        c.out.write(sb.toString().getBytes("UTF-8"));
+        if (body != null) c.out.write(body);
+        c.out.flush();
+    }
+
+    private static Response readResponse(Conn c, String method) throws IOException {
+        String statusLine = readLine(c.in);
+        if (statusLine == null) throw new IOException("Connection closed");
+        // HTTP/1.1 200 OK
+        int sp = statusLine.indexOf(' ');
+        if (sp < 0) throw new IOException("Bad status line");
+        int sp2 = statusLine.indexOf(' ', sp + 1);
+        int code;
+        try {
+            code = Integer.parseInt(sp2 < 0 ? statusLine.substring(sp + 1).trim() : statusLine.substring(sp + 1, sp2));
+        } catch (NumberFormatException e) {
+            throw new IOException("Bad status line");
+        }
+        boolean http10 = statusLine.startsWith("HTTP/1.0");
+        Map<String, String> h = new LinkedHashMap<String, String>();
+        String line;
+        while ((line = readLine(c.in)) != null && line.length() > 0) {
+            int colon = line.indexOf(':');
+            if (colon <= 0) continue;
+            String name = line.substring(0, colon).trim().toLowerCase(Locale.US);
+            String val = line.substring(colon + 1).trim();
+            String prev = h.get(name);
+            h.put(name, prev == null ? val : prev + ", " + val);
+        }
+        String te = h.get("transfer-encoding");
+        String cl = h.get("content-length");
+        String conn = h.get("connection");
+        boolean keepAlive = !http10 && (conn == null || conn.toLowerCase(Locale.US).indexOf("close") < 0);
+        boolean chunked = te != null && te.toLowerCase(Locale.US).indexOf("chunked") >= 0;
+        long len = -1;
+        if (!chunked && cl != null) {
+            try { len = Long.parseLong(cl.trim()); } catch (NumberFormatException ignored) {}
+        }
+        InputStream body;
+        boolean noBody = "HEAD".equals(method) || code == 204 || code == 304 || (code >= 100 && code < 200);
+        if (noBody) {
+            body = new FixedStream(c, 0, keepAlive);
+            len = "HEAD".equals(method) ? len : 0;
+        } else if (chunked) {
+            body = new ChunkedStream(c, keepAlive);
+        } else if (len >= 0) {
+            body = new FixedStream(c, len, keepAlive);
+        } else {
+            body = new EofStream(c);
+        }
+        return new Response(code, statusLine, h, body, len, chunked);
+    }
+
+    static String readLine(InputStream in) throws IOException {
+        StringBuilder sb = new StringBuilder(64);
+        int b;
+        while ((b = in.read()) >= 0) {
+            if (b == '\n') {
+                int n = sb.length();
+                if (n > 0 && sb.charAt(n - 1) == '\r') sb.setLength(n - 1);
+                return sb.toString();
+            }
+            sb.append((char) b);
+            if (sb.length() > 16384) throw new IOException("Header line too long");
+        }
+        return sb.length() == 0 ? null : sb.toString();
+    }
+
+    // ------------------------------------------------------------------ body streams
+
+    private static final class FixedStream extends InputStream {
+        private final Conn c; private long left; private final boolean keepAlive; private boolean closed;
+
+        FixedStream(Conn c, long len, boolean keepAlive) {
+            this.c = c; this.left = len; this.keepAlive = keepAlive;
+            if (len == 0) finish(true);
+        }
+
+        private void finish(boolean complete) {
+            if (closed) return;
+            closed = true;
+            if (complete && keepAlive) release(c); else c.close();
+        }
+
+        @Override public int read() throws IOException {
+            byte[] one = new byte[1];
+            int n = read(one, 0, 1);
+            return n <= 0 ? -1 : one[0] & 255;
+        }
+
+        @Override public int read(byte[] b, int off, int len) throws IOException {
+            if (left <= 0) { finish(true); return -1; }
+            if (closed) return -1;
+            int n = c.in.read(b, off, (int) Math.min(len, left));
+            if (n < 0) { finish(false); throw new IOException("Unexpected end of stream"); }
+            left -= n;
+            if (left == 0) finish(true);
+            return n;
+        }
+
+        @Override public int available() throws IOException {
+            if (closed) return 0;
+            return (int) Math.min(c.in.available(), left);
+        }
+
+        @Override public void close() { finish(left == 0); }
+    }
+
+    private static final class ChunkedStream extends InputStream {
+        private final Conn c; private final boolean keepAlive;
+        private long chunkLeft = 0; private boolean eof; private boolean closed;
+
+        ChunkedStream(Conn c, boolean keepAlive) { this.c = c; this.keepAlive = keepAlive; }
+
+        private void finish(boolean complete) {
+            if (closed) return;
+            closed = true;
+            if (complete && keepAlive) release(c); else c.close();
+        }
+
+        private boolean nextChunk() throws IOException {
+            if (eof) return false;
+            String line = readLine(c.in);
+            if (line == null) throw new IOException("Unexpected end of chunked stream");
+            if (line.length() == 0) { line = readLine(c.in); if (line == null) throw new IOException("Bad chunk"); }
+            int semi = line.indexOf(';');
+            if (semi >= 0) line = line.substring(0, semi);
+            try { chunkLeft = Long.parseLong(line.trim(), 16); }
+            catch (NumberFormatException e) { throw new IOException("Bad chunk size"); }
+            if (chunkLeft == 0) {
+                String t;
+                while ((t = readLine(c.in)) != null && t.length() > 0) { /* trailers */ }
+                eof = true;
+                finish(true);
+                return false;
+            }
+            return true;
+        }
+
+        @Override public int read() throws IOException {
+            byte[] one = new byte[1];
+            int n = read(one, 0, 1);
+            return n <= 0 ? -1 : one[0] & 255;
+        }
+
+        @Override public int read(byte[] b, int off, int len) throws IOException {
+            if (closed) return -1;
+            if (chunkLeft == 0) {
+                if (!nextChunk()) return -1;
+            }
+            int n = c.in.read(b, off, (int) Math.min(len, chunkLeft));
+            if (n < 0) { finish(false); throw new IOException("Unexpected end of chunk"); }
+            chunkLeft -= n;
+            if (chunkLeft == 0) {
+                // consume CRLF after chunk data
+                String crlf = readLine(c.in);
+                if (crlf == null) { finish(false); }
+                else if (crlf.length() != 0) { finish(false); throw new IOException("Bad chunk terminator"); }
+            }
+            return n;
+        }
+
+        @Override public int available() throws IOException {
+            if (closed) return 0;
+            return (int) Math.min(c.in.available(), chunkLeft);
+        }
+
+        @Override public void close() { finish(eof); }
+    }
+
+    private static final class EofStream extends InputStream {
+        private final Conn c; private boolean closed;
+        EofStream(Conn c) { this.c = c; }
+
+        @Override public int read() throws IOException {
+            if (closed) return -1;
+            int b = c.in.read();
+            if (b < 0) close();
+            return b;
+        }
+
+        @Override public int read(byte[] b, int off, int len) throws IOException {
+            if (closed) return -1;
+            int n = c.in.read(b, off, len);
+            if (n < 0) close();
+            return n;
+        }
+
+        @Override public void close() {
+            if (!closed) { closed = true; c.close(); }
+        }
+    }
+
+    /** Close one in-flight response's socket from another thread (used to abort streams). */
+    public static void abort(Response r) {
+        if (r == null) return;
+        InputStream b = r.body;
+        Conn c = null;
+        if (b instanceof FixedStream) c = ((FixedStream) b).c;
+        else if (b instanceof ChunkedStream) c = ((ChunkedStream) b).c;
+        else if (b instanceof EofStream) c = ((EofStream) b).c;
+        if (c != null) {
+            try { c.socket.close(); } catch (Exception ignored) {}
+        }
+    }
+}
diff --git a/src/com/minamp/net/StreamProxy.java b/src/com/minamp/net/StreamProxy.java
new file mode 100644
index 0000000..6c0923b
--- /dev/null
+++ b/src/com/minamp/net/StreamProxy.java
@@ -0,0 +1,207 @@
+package com.minamp.net;
+
+import java.io.BufferedInputStream;
+import java.io.IOException;
+import java.io.InputStream;
+import java.io.OutputStream;
+import java.net.InetAddress;
+import java.net.ServerSocket;
+import java.net.Socket;
+import java.util.ArrayList;
+import java.util.HashMap;
+import java.util.LinkedHashMap;
+import java.util.List;
+import java.util.Locale;
+import java.util.Map;
+
+/**
+ * Loopback HTTP server that hands the platform MediaPlayer a plain http://127.0.0.1 URL and
+ * fetches the real stream through {@link Http} (our own TLS, plex.direct, relay...).
+ * It also turns chunked transcoder output into a simple read-until-close response, which
+ * Android 2.x's media stack copes with much better.
+ */
+public final class StreamProxy implements Runnable {
+
+    private ServerSocket server;
+    private Thread thread;
+    private volatile boolean running;
+    private int counter;
+    private final Map<String, String> routes = new HashMap<String, String>();
+    private final Map<String, List<Http.Response>> live = new HashMap<String, List<Http.Response>>();
+
+    /** Called with how many bytes have arrived for a route (for buffering UI / diagnostics). */
+    public interface Listener { void onError(String routeId, String message); }
+    public volatile Listener listener;
+
+    public synchronized void start() throws IOException {
+        if (running) return;
+        server = new ServerSocket(0, 8, InetAddress.getByName("127.0.0.1"));
+        running = true;
+        thread = new Thread(this, "stream-proxy");
+        thread.setDaemon(true);
+        thread.start();
+    }
+
+    public synchronized void shutdown() {
+        running = false;
+        try { if (server != null) server.close(); } catch (IOException ignored) {}
+        synchronized (routes) {
+            for (String id : new ArrayList<String>(live.keySet())) abortLocked(id);
+            routes.clear();
+        }
+    }
+
+    public int port() { return server == null ? -1 : server.getLocalPort(); }
+
+    /** @return the local URL to give MediaPlayer, ending in a fake extension it may sniff. */
+    public String register(String id, String remoteUrl, String ext) {
+        synchronized (routes) {
+            routes.put(id, remoteUrl);
+        }
+        return "http://127.0.0.1:" + port() + "/s/" + id + "/stream." + ext;
+    }
+
+    public String newId() {
+        synchronized (routes) { return Integer.toString(++counter) + "x" + Long.toString(System.currentTimeMillis() % 100000, 36); }
+    }
+
+    /** Forget a route and cut any upstream connections still feeding it. */
+    public void unregister(String id) {
+        if (id == null) return;
+        synchronized (routes) {
+            routes.remove(id);
+            abortLocked(id);
+        }
+    }
+
+    private void abortLocked(String id) {
+        List<Http.Response> l = live.remove(id);
+        if (l == null) return;
+        for (int i = 0; i < l.size(); i++) Http.abort(l.get(i));
+    }
+
+    public void run() {
+        while (running) {
+            final Socket s;
+            try {
+                s = server.accept();
+            } catch (IOException e) {
+                if (!running) return;
+                continue;
+            }
+            Thread t = new Thread("proxy-conn") {
+                public void run() { handle(s); }
+            };
+            t.setDaemon(true);
+            t.start();
+        }
+    }
+
+    private void handle(Socket s) {
+        Http.Response up = null;
+        String id = null;
+        try {
+            s.setSoTimeout(60000);
+            InputStream in = new BufferedInputStream(s.getInputStream(), 2048);
+            OutputStream out = s.getOutputStream();
+            String reqLine = Http.readLine(in);
+            if (reqLine == null) return;
+            Map<String, String> reqHeaders = new HashMap<String, String>();
+            String line;
+            while ((line = Http.readLine(in)) != null && line.length() > 0) {
+                int c = line.indexOf(':');
+                if (c > 0) reqHeaders.put(line.substring(0, c).trim().toLowerCase(Locale.US), line.substring(c + 1).trim());
+            }
+            String[] parts = reqLine.split(" ");
+            String method = parts.length > 0 ? parts[0] : "GET";
+            String path = parts.length > 1 ? parts[1] : "/";
+            // /s/<id>/stream.mp3
+            if (path.startsWith("/s/")) {
+                int slash = path.indexOf('/', 3);
+                id = slash < 0 ? path.substring(3) : path.substring(3, slash);
+            }
+            String target;
+            synchronized (routes) { target = id == null ? null : routes.get(id); }
+            if (target == null) {
+                out.write("HTTP/1.0 404 Not Found\r\nContent-Length: 0\r\nConnection: close\r\n\r\n".getBytes("ISO-8859-1"));
+                out.flush();
+                return;
+            }
+
+            Map<String, String> h = new LinkedHashMap<String, String>();
+            h.put("Accept", "*/*");
+            String range = reqHeaders.get("range");
+            if (range != null) h.put("Range", range);
+            boolean head = "HEAD".equals(method);
+            up = Http.request(head ? "HEAD" : "GET", target, h, null, 30000);
+            synchronized (routes) {
+                if (!routes.containsKey(id)) { Http.abort(up); return; }
+                List<Http.Response> l = live.get(id);
+                if (l == null) { l = new ArrayList<Http.Response>(); live.put(id, l); }
+                l.add(up);
+            }
+
+            StringBuilder resp = new StringBuilder(256);
+            boolean known = up.contentLength >= 0 && !up.chunked;
+            resp.append(known ? "HTTP/1.1 " : "HTTP/1.0 ").append(up.code).append(' ').append(reason(up.code)).append("\r\n");
+            String ct = up.header("content-type");
+            if (ct == null || ct.startsWith("application/octet") || ct.startsWith("text/")) ct = guessType(path);
+            if (up.code >= 400) ct = "text/plain";
+            resp.append("Content-Type: ").append(ct).append("\r\n");
+            if (known) resp.append("Content-Length: ").append(up.contentLength).append("\r\n");
+            String cr = up.header("content-range");
+            if (cr != null) resp.append("Content-Range: ").append(cr).append("\r\n");
+            String ar = up.header("accept-ranges");
+            if (ar != null && known) resp.append("Accept-Ranges: ").append(ar).append("\r\n");
+            resp.append("Connection: close\r\n\r\n");
+            out.write(resp.toString().getBytes("ISO-8859-1"));
+            out.flush();
+            if (up.code >= 400) {
+                Listener l = listener;
+                if (l != null) l.onError(id, "Server said " + up.code);
+            }
+            if (head) { up.close(); return; }
+
+            byte[] buf = new byte[16384];
+            int n;
+            while ((n = up.body.read(buf)) > 0) {
+                out.write(buf, 0, n);
+            }
+            out.flush();
+            up.close();
+            synchronized (routes) {
+                List<Http.Response> l = live.get(id);
+                if (l != null) l.remove(up);
+            }
+            up = null;
+        } catch (IOException e) {
+            // player went away, track skipped, or the network dropped: just close
+        } finally {
+            if (up != null) Http.abort(up);
+            if (id != null && up != null) {
+                synchronized (routes) {
+                    List<Http.Response> l = live.get(id);
+                    if (l != null) l.remove(up);
+                }
+            }
+            try { s.close(); } catch (IOException ignored) {}
+        }
+    }
+
+    private static String reason(int code) {
+        switch (code) {
+            case 200: return "OK";
+            case 206: return "Partial Content";
+            case 404: return "Not Found";
+            case 416: return "Range Not Satisfiable";
+            default: return code < 400 ? "OK" : "Error";
+        }
+    }
+
+    private static String guessType(String path) {
+        String p = path.toLowerCase(Locale.US);
+        if (p.endsWith(".m4a") || p.endsWith(".mp4")) return "audio/mp4";
+        if (p.endsWith(".ogg")) return "audio/ogg";
+        return "audio/mpeg";
+    }
+}
diff --git a/src/com/minamp/plex/Item.java b/src/com/minamp/plex/Item.java
new file mode 100644
index 0000000..0e30e58
--- /dev/null
+++ b/src/com/minamp/plex/Item.java
@@ -0,0 +1,166 @@
+package com.minamp.plex;
+
+import java.util.ArrayList;
+import java.util.List;
+
+import com.minamp.util.Json;
+
+/** One Plex metadata item: artist, album, track, playlist (or a hub header in search results). */
+public final class Item {
+    public static final int ARTIST = 1, ALBUM = 2, TRACK = 3, PLAYLIST = 4, HEADER = 5, OTHER = 0;
+
+    public int type;
+    public String ratingKey = "";
+    public String key = "";          // children path
+    public String title = "";
+    public String artist = "";       // track/album artist
+    public String album = "";        // track's album
+    public String thumb = "";        // art path on the server
+    public int year;
+    public int index;                // track number
+    public long duration;            // ms
+    public int leafCount;            // tracks in album/playlist
+    public double userRating;        // 0..10, -1 unrated
+    public String albumKey = "";     // parentRatingKey
+    public String artistKey = "";    // grandparentRatingKey (tracks) / parentRatingKey (albums)
+    // media (tracks only)
+    public String partKey = "";
+    public String codec = "";
+    public String container = "";
+    public int bitrate;              // kbps
+    public long partSize;
+    public String playlistItemId = "";
+
+    public boolean isContainer() { return type == ARTIST || type == ALBUM || type == PLAYLIST; }
+    public boolean loved() { return userRating >= 9.5; }
+
+    public static int typeOf(String t) {
+        if ("artist".equals(t)) return ARTIST;
+        if ("album".equals(t)) return ALBUM;
+        if ("track".equals(t)) return TRACK;
+        if ("playlist".equals(t)) return PLAYLIST;
+        return OTHER;
+    }
+
+    public static Item fromPlex(Json.Obj o) {
+        Item it = new Item();
+        it.type = typeOf(o.optString("type"));
+        it.ratingKey = o.optString("ratingKey");
+        it.key = o.optString("key");
+        it.title = o.optString("title");
+        it.year = o.optInt("year", 0);
+        it.index = o.optInt("index", 0);
+        it.duration = o.optLong("duration", 0);
+        it.leafCount = o.optInt("leafCount", 0);
+        it.userRating = o.optDouble("userRating", -1);
+        switch (it.type) {
+            case TRACK:
+                it.artist = o.optString("originalTitle", "");
+                if (it.artist.length() == 0) it.artist = o.optString("grandparentTitle");
+                it.album = o.optString("parentTitle");
+                it.thumb = o.optString("parentThumb", "");
+                if (it.thumb.length() == 0) it.thumb = o.optString("thumb", "");
+                if (it.thumb.length() == 0) it.thumb = o.optString("grandparentThumb", "");
+                it.albumKey = o.optString("parentRatingKey");
+                it.artistKey = o.optString("grandparentRatingKey");
+                it.playlistItemId = o.optString("playlistItemID");
+                Json.Arr media = o.optArr("Media");
+                Json.Obj m = media == null ? null : media.optObj(0);
+                if (m != null) {
+                    it.codec = m.optString("audioCodec");
+                    it.container = m.optString("container");
+                    it.bitrate = m.optInt("bitrate", 0);
+                    if (it.duration == 0) it.duration = m.optLong("duration", 0);
+                    Json.Arr parts = m.optArr("Part");
+                    Json.Obj p = parts == null ? null : parts.optObj(0);
+                    if (p != null) {
+                        it.partKey = p.optString("key");
+                        it.partSize = p.optLong("size", 0);
+                        if (it.container.length() == 0) it.container = p.optString("container");
+                    }
+                }
+                break;
+            case ALBUM:
+                it.artist = o.optString("parentTitle");
+                it.thumb = o.optString("thumb");
+                it.artistKey = o.optString("parentRatingKey");
+                break;
+            case PLAYLIST:
+                it.thumb = o.optString("composite", "");
+                if (it.thumb.length() == 0) it.thumb = o.optString("thumb", "");
+                break;
+            default:
+                it.thumb = o.optString("thumb");
+        }
+        return it;
+    }
+
+    public static List<Item> listFrom(Json.Obj container) {
+        List<Item> out = new ArrayList<Item>();
+        if (container == null) return out;
+        addAll(out, container.optArr("Metadata"));
+        addAll(out, container.optArr("Directory"));
+        return out;
+    }
+
+    private static void addAll(List<Item> out, Json.Arr arr) {
+        if (arr == null) return;
+        for (int i = 0; i < arr.size(); i++) {
+            Json.Obj o = arr.optObj(i);
+            if (o == null) continue;
+            Item it = fromPlex(o);
+            if (it.type != OTHER) out.add(it);
+        }
+    }
+
+    public String subtitle() {
+        switch (type) {
+            case TRACK: return artist + (album.length() > 0 ? " · " + album : "");
+            case ALBUM: return artist + (year > 0 ? " · " + year : "");
+            case PLAYLIST: return leafCount + (leafCount == 1 ? " track" : " tracks");
+            case ARTIST: return "Artist";
+            default: return "";
+        }
+    }
+
+    // ------------------------------------------------------------------ persistence
+
+    public Json.Obj toJson() {
+        Json.Obj o = new Json.Obj();
+        o.put("t", Long.valueOf(type)).put("rk", ratingKey).put("k", key).put("ti", title)
+         .put("ar", artist).put("al", album).put("th", thumb).put("y", Long.valueOf(year))
+         .put("i", Long.valueOf(index)).put("d", Long.valueOf(duration)).put("lc", Long.valueOf(leafCount))
+         .put("ur", Double.valueOf(userRating)).put("ak", albumKey).put("rk2", artistKey)
+         .put("pk", partKey).put("c", codec).put("ct", container).put("br", Long.valueOf(bitrate))
+         .put("ps", Long.valueOf(partSize));
+        return o;
+    }
+
+    public static Item fromJson(Json.Obj o) {
+        Item it = new Item();
+        it.type = o.optInt("t", 0);
+        it.ratingKey = o.optString("rk");
+        it.key = o.optString("k");
+        it.title = o.optString("ti");
+        it.artist = o.optString("ar");
+        it.album = o.optString("al");
+        it.thumb = o.optString("th");
+        it.year = o.optInt("y", 0);
+        it.index = o.optInt("i", 0);
+        it.duration = o.optLong("d", 0);
+        it.leafCount = o.optInt("lc", 0);
+        it.userRating = o.optDouble("ur", -1);
+        it.albumKey = o.optString("ak");
+        it.artistKey = o.optString("rk2");
+        it.partKey = o.optString("pk");
+        it.codec = o.optString("c");
+        it.container = o.optString("ct");
+        it.bitrate = o.optInt("br", 0);
+        it.partSize = o.optLong("ps", 0);
+        return it;
+    }
+
+    public String serialize() { return toJson().toString(); }
+
+    public static Item deserialize(String s) { return fromJson(Json.parseObj(s)); }
+}
diff --git a/src/com/minamp/plex/Library.java b/src/com/minamp/plex/Library.java
new file mode 100644
index 0000000..f972b61
--- /dev/null
+++ b/src/com/minamp/plex/Library.java
@@ -0,0 +1,225 @@
+package com.minamp.plex;
+
+import java.io.IOException;
+import java.util.ArrayList;
+import java.util.Collections;
+import java.util.List;
+import java.util.Random;
+
+import com.minamp.util.Json;
+
+/** Paths into one music library section, plus the playback-URL decisions. */
+public final class Library {
+
+    public final Server server;
+    public final String section;
+
+    public Library(Server server, String section) {
+        this.server = server;
+        this.section = section;
+    }
+
+    private static String page(int start, int size) {
+        return "&X-Plex-Container-Start=" + start + "&X-Plex-Container-Size=" + size;
+    }
+
+    public String artistsPath(int start, int size) {
+        return "/library/sections/" + section + "/all?type=8&sort=titleSort" + page(start, size);
+    }
+
+    public String albumsPath(String sort, int start, int size) {
+        return "/library/sections/" + section + "/all?type=9&sort=" + sort + page(start, size);
+    }
+
+    public String recentlyAddedPath(int size) {
+        return "/library/sections/" + section + "/all?type=9&sort=addedAt:desc" + page(0, size);
+    }
+
+    public String recentlyPlayedPath(int size) {
+        return "/library/sections/" + section + "/all?type=9&sort=lastViewedAt:desc&viewCount>>=0" + page(0, size);
+    }
+
+    public String playlistsPath() {
+        return "/playlists?playlistType=audio&sectionID=" + section;
+    }
+
+    public String searchPath(String query) {
+        return "/hubs/search?query=" + Plex.enc(query) + "&sectionId=" + section + "&limit=12";
+    }
+
+    /** Search results grouped as [HEADER, items..., HEADER, items...] (artists, albums, tracks). */
+    public List<Item> search(String query) throws IOException {
+        Json.Obj mc = server.get(searchPath(query));
+        List<Item> out = new ArrayList<Item>();
+        Json.Arr hubs = mc == null ? null : mc.optArr("Hub");
+        if (hubs == null) return out;
+        String[] order = {"artist", "album", "track", "playlist"};
+        for (int o = 0; o < order.length; o++) {
+            for (int i = 0; i < hubs.size(); i++) {
+                Json.Obj hub = hubs.optObj(i);
+                if (hub == null || !order[o].equals(hub.optString("type"))) continue;
+                List<Item> items = Item.listFrom(hub);
+                if (items.isEmpty()) continue;
+                Item header = new Item();
+                header.type = Item.HEADER;
+                header.title = hub.optString("title", order[o]);
+                out.add(header);
+                out.addAll(items);
+            }
+        }
+        return out;
+    }
+
+    public static String childrenPath(Item it) {
+        if (it.type == Item.PLAYLIST) return "/playlists/" + it.ratingKey + "/items";
+        return "/library/metadata/" + it.ratingKey + "/children";
+    }
+
+    // ------------------------------------------------------------------ radios / mixes
+
+    /** "Library radio": a random slice of every track in the library. */
+    public List<Item> libraryRadio() throws IOException {
+        return server.items("/library/sections/" + section + "/all?type=10&sort=random" + page(0, 100));
+    }
+
+    /** Tracks rated four stars or better (and loved tracks), shuffled. */
+    public List<Item> topRatedRadio() throws IOException {
+        return server.items("/library/sections/" + section + "/all?type=10&userRating>>=7&sort=random" + page(0, 100));
+    }
+
+    /** Tracks from albums released in a random decade that the library actually has. */
+    public List<Item> timeTravelRadio(int decade) throws IOException {
+        List<Item> tracks;
+        try {
+            tracks = server.items("/library/sections/" + section + "/all?type=10&album.decade=" + decade + "&sort=random" + page(0, 100));
+        } catch (Plex.PlexException e) {
+            tracks = new ArrayList<Item>();
+        }
+        if (!tracks.isEmpty()) return tracks;
+        // Older servers don't filter tracks by album decade: build it from random albums instead.
+        List<Item> albums = server.items("/library/sections/" + section + "/all?type=9&decade=" + decade + "&sort=random" + page(0, 8));
+        for (int i = 0; i < albums.size(); i++) tracks.addAll(tracksOf(albums.get(i)));
+        shuffle(tracks);
+        return tracks;
+    }
+
+    public List<Integer> decades() throws IOException {
+        Json.Obj mc = server.get("/library/sections/" + section + "/decade?type=9");
+        List<Integer> out = new ArrayList<Integer>();
+        Json.Arr d = mc == null ? null : mc.optArr("Directory");
+        if (d == null) return out;
+        for (int i = 0; i < d.size(); i++) {
+            Json.Obj o = d.optObj(i);
+            if (o == null) continue;
+            int v = o.optInt("key", 0);
+            if (v > 0) out.add(Integer.valueOf(v));
+        }
+        return out;
+    }
+
+    /** Every track for an album, artist or playlist, in order. */
+    public List<Item> tracksOf(Item it) throws IOException {
+        String path;
+        switch (it.type) {
+            case Item.TRACK: {
+                List<Item> one = new ArrayList<Item>();
+                one.add(it);
+                return one;
+            }
+            case Item.ALBUM: path = "/library/metadata/" + it.ratingKey + "/children"; break;
+            case Item.ARTIST: path = "/library/metadata/" + it.ratingKey + "/allLeaves"; break;
+            case Item.PLAYLIST: path = "/playlists/" + it.ratingKey + "/items" + "?X-Plex-Container-Start=0&X-Plex-Container-Size=1000"; break;
+            default: return new ArrayList<Item>();
+        }
+        List<Item> all = server.items(path);
+        List<Item> tracks = new ArrayList<Item>();
+        for (int i = 0; i < all.size(); i++) if (all.get(i).type == Item.TRACK) tracks.add(all.get(i));
+        return tracks;
+    }
+
+    /** Fills in media info for a track that came from somewhere without it (e.g. search). */
+    public void ensureMedia(Item t) throws IOException {
+        if (t.partKey.length() > 0) return;
+        List<Item> l = server.items("/library/metadata/" + t.ratingKey);
+        if (!l.isEmpty()) {
+            Item full = l.get(0);
+            t.partKey = full.partKey; t.codec = full.codec; t.container = full.container;
+            t.bitrate = full.bitrate; t.partSize = full.partSize;
+            if (t.duration == 0) t.duration = full.duration;
+        }
+        if (t.partKey.length() == 0) throw new IOException("Track has no playable media");
+    }
+
+    public static void shuffle(List<Item> l) {
+        Collections.shuffle(l, new Random());
+    }
+
+    // ------------------------------------------------------------------ streaming
+
+    /** What Android 2.2/2.3's media framework can decode itself. */
+    public static boolean canDirectPlay(Item t, int maxKbps) {
+        String c = t.codec.toLowerCase();
+        String k = t.container.toLowerCase();
+        boolean ok = ("mp3".equals(c) && ("mp3".equals(k) || k.length() == 0))
+                || ("aac".equals(c) && ("mp4".equals(k) || "m4a".equals(k) || "m4b".equals(k)))
+                || ("vorbis".equals(c) && "ogg".equals(k));
+        if (!ok) return false;
+        if (maxKbps <= 0) return true;
+        return t.bitrate > 0 && t.bitrate <= maxKbps + 16;
+    }
+
+    public String directUrl(Item t) throws IOException {
+        return server.url(t.partKey);
+    }
+
+    /** MP3 transcode over plain progressive HTTP, starting at offsetMs. */
+    public String transcodeUrl(Item t, int kbps, long offsetMs, String session) throws IOException {
+        if (kbps <= 0) kbps = 320;
+        String profile = "add-transcode-target(type=musicProfile&context=streaming&protocol=http&container=mp3&audioCodec=mp3)"
+                + "+add-limitation(scope=musicCodec&scopeName=mp3&type=upperBound&name=audio.bitrate&value=" + kbps + ")"
+                + "+add-limitation(scope=musicCodec&scopeName=mp3&type=upperBound&name=audio.channels&value=2)";
+        String path = "/music/:/transcode/universal/start.mp3"
+                + "?path=" + Plex.enc("/library/metadata/" + t.ratingKey)
+                + "&mediaIndex=0&partIndex=0&protocol=http&hasMDE=1&fastSeek=1"
+                + "&directPlay=0&directStream=0&directStreamAudio=0"
+                + "&musicBitrate=" + kbps + "&maxAudioBitrate=" + kbps
+                + "&offset=" + (offsetMs / 1000)
+                + "&session=" + Plex.enc(session)
+                + "&location=" + (server.isLocal() ? "lan" : "wan")
+                + "&X-Plex-Session-Identifier=" + Plex.enc(session)
+                + "&X-Plex-Client-Identifier=" + Plex.enc(Plex.clientId)
+                + "&X-Plex-Product=" + Plex.enc(Plex.product)
+                + "&X-Plex-Version=" + Plex.enc(Plex.version)
+                + "&X-Plex-Platform=Generic"
+                + "&X-Plex-Device=" + Plex.enc(Plex.device)
+                + "&X-Plex-Client-Profile-Extra=" + Plex.enc(profile);
+        return server.url(path);
+    }
+
+    public void stopTranscode(String session) {
+        try {
+            server.fetchQuiet("/transcode/universal/stop?session=" + Plex.enc(session));
+        } catch (Exception ignored) {}
+    }
+
+    // ------------------------------------------------------------------ reporting
+
+    public void timeline(Item t, String state, long timeMs) {
+        try {
+            server.fetchQuiet("/:/timeline?ratingKey=" + t.ratingKey
+                    + "&key=" + Plex.enc("/library/metadata/" + t.ratingKey)
+                    + "&state=" + state + "&time=" + timeMs + "&playbackTime=" + timeMs
+                    + "&duration=" + t.duration + "&hasMDE=1");
+        } catch (Exception ignored) {}
+    }
+
+    public void scrobble(Item t) {
+        try {
+            server.fetchQuiet("/:/scrobble?identifier=com.plexapp.plugins.library&key=" + Plex.enc(t.ratingKey));
+        } catch (Exception ignored) {}
+    }
+
+    public void rate(Item t, double rating) throws IOException {
+        server.put("/:/rate?identifier=com.plexapp.plugins.library&key=" + Plex.enc(t.ratingKey) + "&rating=" + (int) rating);
+    }
+}
diff --git a/src/com/minamp/plex/Plex.java b/src/com/minamp/plex/Plex.java
new file mode 100644
index 0000000..b86551c
--- /dev/null
+++ b/src/com/minamp/plex/Plex.java
@@ -0,0 +1,144 @@
+package com.minamp.plex;
+
+import java.io.IOException;
+import java.io.UnsupportedEncodingException;
+import java.net.URLEncoder;
+import java.util.ArrayList;
+import java.util.LinkedHashMap;
+import java.util.List;
+import java.util.Map;
+
+import com.minamp.net.Http;
+import com.minamp.util.Json;
+
+/** Client identity + plex.tv account calls (PIN sign-in, server discovery). */
+public final class Plex {
+
+    public static String product = "Minamp";
+    public static String version = "1.0";
+    public static String clientId = "minamp-dev";
+    public static String platform = "Android";
+    public static String platformVersion = "2.3";
+    public static String device = "Galaxy Mini";
+    public static String deviceName = "Galaxy Mini";
+
+    private static final String TV = "https://plex.tv"; // the test harness maps plex.tv to a mock
+
+    private Plex() {}
+
+    public static Map<String, String> headers(String token) {
+        Map<String, String> h = new LinkedHashMap<String, String>();
+        h.put("Accept", "application/json");
+        h.put("X-Plex-Product", product);
+        h.put("X-Plex-Version", version);
+        h.put("X-Plex-Client-Identifier", clientId);
+        h.put("X-Plex-Platform", platform);
+        h.put("X-Plex-Platform-Version", platformVersion);
+        h.put("X-Plex-Device", device);
+        h.put("X-Plex-Device-Name", deviceName);
+        h.put("X-Plex-Provides", "player");
+        if (token != null && token.length() > 0) h.put("X-Plex-Token", token);
+        return h;
+    }
+
+    public static String enc(String s) {
+        try { return URLEncoder.encode(s, "UTF-8").replace("+", "%20"); }
+        catch (UnsupportedEncodingException e) { return s; }
+    }
+
+    static Json.Obj fetchJson(String method, String url, String token, int timeout) throws IOException {
+        Http.Response r = Http.request(method, url, headers(token), "POST".equals(method) ? new byte[0] : null, timeout);
+        String body = r.readString();
+        if (r.code == 401) throw new PlexException(401, "Not authorized");
+        if (r.code < 200 || r.code >= 300) throw new PlexException(r.code, "HTTP " + r.code);
+        if (body.trim().length() == 0) return new Json.Obj();
+        Object o;
+        try { o = Json.parse(body); } catch (IllegalArgumentException e) { throw new IOException("Bad response from server"); }
+        if (o instanceof Json.Obj) return (Json.Obj) o;
+        Json.Obj wrap = new Json.Obj();
+        wrap.put("_array", o);
+        return wrap;
+    }
+
+    public static final class PlexException extends IOException {
+        public final int code;
+        public PlexException(int code, String msg) { super(msg); this.code = code; }
+    }
+
+    // ------------------------------------------------------------------ PIN sign-in
+
+    public static final class Pin {
+        public long id;
+        public String code;
+    }
+
+    /** Creates a 4-character PIN the user enters at plex.tv/link. */
+    public static Pin createPin() throws IOException {
+        Json.Obj o = fetchJson("POST", TV + "/api/v2/pins?strong=false", null, 20000);
+        Pin p = new Pin();
+        p.id = o.optLong("id", 0);
+        p.code = o.optString("code");
+        if (p.id == 0 || p.code.length() == 0) throw new IOException("plex.tv returned no PIN");
+        return p;
+    }
+
+    /** @return the account token once the PIN has been linked, otherwise null. */
+    public static String checkPin(long id) throws IOException {
+        Json.Obj o = fetchJson("GET", TV + "/api/v2/pins/" + id, null, 20000);
+        String t = o.optString("authToken", "");
+        return t.length() > 0 && !"null".equals(t) ? t : null;
+    }
+
+    public static String username(String accountToken) throws IOException {
+        Json.Obj o = fetchJson("GET", TV + "/api/v2/user", accountToken, 20000);
+        String u = o.optString("username", "");
+        return u.length() > 0 ? u : o.optString("title", "");
+    }
+
+    /** All media servers this account can reach, with every advertised connection. */
+    public static List<Server> servers(String accountToken) throws IOException {
+        Json.Obj o = fetchJson("GET", TV + "/api/v2/resources?includeHttps=1&includeRelay=1&includeIPv6=0", accountToken, 25000);
+        Object arr = o.get("_array");
+        List<Server> out = new ArrayList<Server>();
+        if (!(arr instanceof Json.Arr)) return out;
+        Json.Arr a = (Json.Arr) arr;
+        for (int i = 0; i < a.size(); i++) {
+            Json.Obj r = a.optObj(i);
+            if (r == null) continue;
+            if (r.optString("provides").indexOf("server") < 0) continue;
+            Server s = new Server();
+            s.name = r.optString("name");
+            s.machineId = r.optString("clientIdentifier");
+            s.token = r.optString("accessToken", "");
+            if (s.token.length() == 0) s.token = accountToken;
+            s.owned = r.optBool("owned");
+            s.presence = r.optBool("presence");
+            Json.Arr conns = r.optArr("connections");
+            if (conns != null) {
+                for (int k = 0; k < conns.size(); k++) {
+                    Json.Obj c = conns.optObj(k);
+                    if (c == null || c.optBool("IPv6")) continue;
+                    String uri = c.optString("uri");
+                    boolean local = c.optBool("local");
+                    boolean relay = c.optBool("relay");
+                    String proto = c.optString("protocol");
+                    if (relay) {
+                        s.add(uri, Server.RELAY);
+                    } else if (local) {
+                        s.add(uri, Server.LOCAL);
+                        // Plain http to the LAN address too: works when the server allows insecure
+                        // local connections and some routers block plex.direct DNS (rebind protection).
+                        String addr = c.optString("address");
+                        int port = c.optInt("port", 32400);
+                        if (addr.length() > 0) s.add("http://" + addr + ":" + port, Server.LOCAL_HTTP);
+                    } else {
+                        s.add(uri, "http".equals(proto) ? Server.REMOTE_HTTP : Server.REMOTE);
+                    }
+                }
+            }
+            s.sortConnections();
+            out.add(s);
+        }
+        return out;
+    }
+}
diff --git a/src/com/minamp/plex/Server.java b/src/com/minamp/plex/Server.java
new file mode 100644
index 0000000..68eab9f
--- /dev/null
+++ b/src/com/minamp/plex/Server.java
@@ -0,0 +1,258 @@
+package com.minamp.plex;
+
+import java.io.IOException;
+import java.util.ArrayList;
+import java.util.Collections;
+import java.util.Comparator;
+import java.util.List;
+
+import com.minamp.net.Http;
+import com.minamp.util.Json;
+
+/**
+ * A Plex Media Server and the ways to reach it. Picks the best working connection
+ * (LAN first, then the public address, then Plex Relay) and re-picks when the network changes.
+ */
+public final class Server {
+
+    // Connection kinds, in order of preference.
+    public static final int LOCAL = 0, LOCAL_HTTP = 1, MANUAL = 2, REMOTE = 3, REMOTE_HTTP = 4, RELAY = 5;
+
+    public static final class Conn {
+        public final String uri;
+        public final int kind;
+        Conn(String uri, int kind) { this.uri = uri; this.kind = kind; }
+    }
+
+    public String name = "";
+    public String machineId = "";
+    public String token = "";
+    public boolean owned;
+    public boolean presence;
+    public final List<Conn> connections = new ArrayList<Conn>();
+
+    private volatile Conn active;
+
+    public interface Listener { void onConnectionChanged(Server s); }
+    public static Listener listener;
+
+    public void add(String uri, int kind) {
+        if (uri == null || uri.length() == 0) return;
+        while (uri.endsWith("/")) uri = uri.substring(0, uri.length() - 1);
+        for (int i = 0; i < connections.size(); i++) if (connections.get(i).uri.equals(uri)) return;
+        connections.add(new Conn(uri, kind));
+    }
+
+    public void sortConnections() {
+        Collections.sort(connections, new Comparator<Conn>() {
+            public int compare(Conn a, Conn b) { return a.kind - b.kind; }
+        });
+    }
+
+    /** Normalises what a user types ("192.168.1.5", "myhost:32400", "https://x") into a base URL. */
+    public static String normalizeManual(String input) {
+        String s = input.trim();
+        while (s.endsWith("/")) s = s.substring(0, s.length() - 1);
+        String lower = s.toLowerCase();
+        if (lower.startsWith("http://") || lower.startsWith("https://")) return s; // explicit: keep as typed
+        // bare host or IP: assume plain HTTP on the default Plex port
+        if (s.indexOf(':') < 0 && s.indexOf('/') < 0) s = s + ":32400";
+        return "http://" + s;
+    }
+
+    public Conn active() { return active; }
+
+    public boolean isLocal() {
+        Conn c = active;
+        return c != null && (c.kind == LOCAL || c.kind == LOCAL_HTTP);
+    }
+
+    public boolean isRelay() {
+        Conn c = active;
+        return c != null && c.kind == RELAY;
+    }
+
+    public static String kindLabel(int kind) {
+        switch (kind) {
+            case LOCAL: case LOCAL_HTTP: return "Home network";
+            case MANUAL: return "Direct";
+            case REMOTE: case REMOTE_HTTP: return "Remote";
+            case RELAY: return "Plex Relay";
+            default: return "";
+        }
+    }
+
+    public void invalidate() {
+        active = null;
+        Http.evictAll();
+    }
+
+    public String base() throws IOException {
+        Conn c = active;
+        if (c == null) c = pick();
+        return c.uri;
+    }
+
+    /**
+     * Probes every connection in parallel and keeps the most preferred one that answers.
+     * Returns as soon as the best remaining candidate has answered.
+     */
+    public synchronized Conn pick() throws IOException {
+        if (active != null) return active;
+        if (connections.isEmpty()) throw new IOException("No connections for " + name);
+        final int n = connections.size();
+        final int[] state = new int[n]; // 0 pending, 1 ok, 2 failed
+        final String[] errors = new String[n];
+        final Object lock = new Object();
+        for (int i = 0; i < n; i++) {
+            final int idx = i;
+            final Conn c = connections.get(i);
+            Thread t = new Thread("probe-" + i) {
+                public void run() {
+                    boolean ok = false;
+                    try {
+                        // Give LAN addresses a short timeout, remote/relay a longer one.
+                        int timeout = c.kind <= LOCAL_HTTP ? 3500 : 9000;
+                        Json.Obj o = Plex.fetchJson("GET", c.uri + "/identity", token, timeout);
+                        Json.Obj mc = o.optObj("MediaContainer");
+                        String id = mc == null ? "" : mc.optString("machineIdentifier");
+                        ok = machineId.length() == 0 || machineId.equals(id);
+                        if (!ok) errors[idx] = "different server answered";
+                    } catch (Exception e) {
+                        errors[idx] = String.valueOf(e.getMessage());
+                    }
+                    synchronized (lock) {
+                        state[idx] = ok ? 1 : 2;
+                        lock.notifyAll();
+                    }
+                }
+            };
+            t.setDaemon(true);
+            t.start();
+        }
+        long deadline = System.currentTimeMillis() + 12000;
+        synchronized (lock) {
+            while (true) {
+                // the first non-failed candidate in preference order decides
+                for (int i = 0; i < n; i++) {
+                    if (state[i] == 2) continue;
+                    if (state[i] == 1) {
+                        active = connections.get(i);
+                        Listener l = listener;
+                        if (l != null) l.onConnectionChanged(this);
+                        return active;
+                    }
+                    break; // still waiting on a better candidate
+                }
+                boolean allFailed = true;
+                for (int i = 0; i < n; i++) if (state[i] != 2) allFailed = false;
+                long left = deadline - System.currentTimeMillis();
+                if (allFailed || left <= 0) break;
+                try { lock.wait(left); } catch (InterruptedException e) { break; }
+            }
+        }
+        StringBuilder sb = new StringBuilder("Can't reach " + (name.length() > 0 ? name : "server"));
+        for (int i = 0; i < n; i++) {
+            if (errors[i] != null) { sb.append("\n").append(kindLabel(connections.get(i).kind)).append(": ").append(errors[i]); break; }
+        }
+        throw new IOException(sb.toString());
+    }
+
+    // ------------------------------------------------------------------ requests
+
+    /** GET a library path; on a network error re-picks the connection once and retries. */
+    public Json.Obj get(String path) throws IOException {
+        try {
+            return Plex.fetchJson("GET", base() + path, token, 20000).optObj("MediaContainer");
+        } catch (Plex.PlexException e) {
+            throw e;
+        } catch (IOException e) {
+            invalidate();
+            return Plex.fetchJson("GET", base() + path, token, 20000).optObj("MediaContainer");
+        }
+    }
+
+    /** Fire-and-forget GET (timeline, scrobble); never re-picks the connection. */
+    public void fetchQuiet(String path) throws IOException {
+        Conn c = active;
+        if (c == null) return;
+        Http.Response r = Http.get(c.uri + path, Plex.headers(token), 10000);
+        r.readAll();
+    }
+
+    public void put(String path) throws IOException {
+        Plex.fetchJson("PUT", base() + path, token, 15000);
+    }
+
+    public void post(String path) throws IOException {
+        Plex.fetchJson("POST", base() + path, token, 15000);
+    }
+
+    public List<Item> items(String path) throws IOException {
+        return Item.listFrom(get(path));
+    }
+
+    /** Absolute URL with the token in the query string (for the stream proxy and images). */
+    public String url(String path) throws IOException {
+        return base() + path + (path.indexOf('?') >= 0 ? "&" : "?") + "X-Plex-Token=" + Plex.enc(token);
+    }
+
+    public String imageUrl(String thumb, int size) throws IOException {
+        if (thumb == null || thumb.length() == 0) return null;
+        return url("/photo/:/transcode?width=" + size + "&height=" + size + "&minSize=1&upscale=1&url=" + Plex.enc(thumb));
+    }
+
+    // ------------------------------------------------------------------ libraries
+
+    public static final class Section {
+        public String key, title;
+        public String toString() { return title; }
+    }
+
+    public List<Section> musicSections() throws IOException {
+        Json.Obj mc = get("/library/sections");
+        List<Section> out = new ArrayList<Section>();
+        Json.Arr dirs = mc == null ? null : mc.optArr("Directory");
+        if (dirs == null) return out;
+        for (int i = 0; i < dirs.size(); i++) {
+            Json.Obj d = dirs.optObj(i);
+            if (d == null || !"artist".equals(d.optString("type"))) continue;
+            Section s = new Section();
+            s.key = d.optString("key");
+            s.title = d.optString("title");
+            out.add(s);
+        }
+        return out;
+    }
+
+    // ------------------------------------------------------------------ persistence
+
+    public Json.Obj toJson() {
+        Json.Obj o = new Json.Obj();
+        o.put("name", name).put("id", machineId).put("token", token).put("owned", Boolean.valueOf(owned));
+        Json.Arr a = new Json.Arr();
+        for (int i = 0; i < connections.size(); i++) {
+            Conn c = connections.get(i);
+            a.add(new Json.Obj().put("uri", c.uri).put("kind", Long.valueOf(c.kind)));
+        }
+        o.put("conns", a);
+        return o;
+    }
+
+    public static Server fromJson(Json.Obj o) {
+        Server s = new Server();
+        s.name = o.optString("name");
+        s.machineId = o.optString("id");
+        s.token = o.optString("token");
+        s.owned = o.optBool("owned");
+        Json.Arr a = o.optArr("conns");
+        if (a != null) {
+            for (int i = 0; i < a.size(); i++) {
+                Json.Obj c = a.optObj(i);
+                if (c != null) s.add(c.optString("uri"), c.optInt("kind", MANUAL));
+            }
+        }
+        s.sortConnections();
+        return s;
+    }
+}
diff --git a/src/com/minamp/util/Json.java b/src/com/minamp/util/Json.java
new file mode 100644
index 0000000..10da329
--- /dev/null
+++ b/src/com/minamp/util/Json.java
@@ -0,0 +1,283 @@
+package com.minamp.util;
+
+import java.util.ArrayList;
+import java.util.HashMap;
+import java.util.Iterator;
+import java.util.List;
+import java.util.Map;
+
+/**
+ * Tiny JSON reader/writer. Plex responses are parsed into {@link Obj}/{@link Arr}, which offer
+ * forgiving opt* accessors (Plex is loose about numbers vs strings).
+ */
+public final class Json {
+
+    private Json() {}
+
+    public static final class Obj {
+        public final Map<String, Object> map;
+        public Obj() { map = new HashMap<String, Object>(); }
+        public Obj(Map<String, Object> m) { map = m; }
+
+        public Object get(String k) { return map.get(k); }
+        public boolean has(String k) { return map.get(k) != null; }
+
+        public String optString(String k) { return optString(k, ""); }
+        public String optString(String k, String def) {
+            Object v = map.get(k);
+            if (v == null) return def;
+            if (v instanceof Double) {
+                double d = ((Double) v).doubleValue();
+                if (d == Math.floor(d) && Math.abs(d) < 1e15) return Long.toString((long) d);
+            }
+            return v.toString();
+        }
+        public long optLong(String k, long def) {
+            Object v = map.get(k);
+            if (v instanceof Number) return ((Number) v).longValue();
+            if (v instanceof String) {
+                try { return (long) Double.parseDouble((String) v); } catch (NumberFormatException e) { return def; }
+            }
+            if (v instanceof Boolean) return ((Boolean) v).booleanValue() ? 1 : 0;
+            return def;
+        }
+        public int optInt(String k, int def) { return (int) optLong(k, def); }
+        public double optDouble(String k, double def) {
+            Object v = map.get(k);
+            if (v instanceof Number) return ((Number) v).doubleValue();
+            if (v instanceof String) {
+                try { return Double.parseDouble((String) v); } catch (NumberFormatException e) { return def; }
+            }
+            return def;
+        }
+        public boolean optBool(String k) {
+            Object v = map.get(k);
+            if (v instanceof Boolean) return ((Boolean) v).booleanValue();
+            if (v instanceof Number) return ((Number) v).intValue() != 0;
+            if (v instanceof String) return "1".equals(v) || "true".equals(v);
+            return false;
+        }
+        public Obj optObj(String k) {
+            Object v = map.get(k);
+            return v instanceof Obj ? (Obj) v : null;
+        }
+        public Arr optArr(String k) {
+            Object v = map.get(k);
+            return v instanceof Arr ? (Arr) v : null;
+        }
+        public Obj put(String k, Object v) { map.put(k, v); return this; }
+
+        @Override public String toString() { StringBuilder sb = new StringBuilder(); write(sb, this); return sb.toString(); }
+    }
+
+    public static final class Arr {
+        public final List<Object> list;
+        public Arr() { list = new ArrayList<Object>(); }
+        public int size() { return list.size(); }
+        public Object get(int i) { return list.get(i); }
+        public Obj optObj(int i) {
+            Object v = i < list.size() ? list.get(i) : null;
+            return v instanceof Obj ? (Obj) v : null;
+        }
+        public Arr add(Object v) { list.add(v); return this; }
+        @Override public String toString() { StringBuilder sb = new StringBuilder(); write(sb, this); return sb.toString(); }
+    }
+
+    // ------------------------------------------------------------------ parsing
+
+    public static Object parse(String s) {
+        P p = new P(s);
+        p.ws();
+        Object v = p.value();
+        p.ws();
+        if (p.i < s.length()) throw new IllegalArgumentException("Trailing data at " + p.i);
+        return v;
+    }
+
+    public static Obj parseObj(String s) {
+        Object o = parse(s);
+        if (!(o instanceof Obj)) throw new IllegalArgumentException("Expected JSON object");
+        return (Obj) o;
+    }
+
+    private static final class P {
+        final String s; int i;
+        P(String s) { this.s = s; }
+
+        void ws() {
+            while (i < s.length()) {
+                char c = s.charAt(i);
+                if (c == ' ' || c == '\n' || c == '\r' || c == '\t') i++; else break;
+            }
+        }
+
+        IllegalArgumentException err(String m) { return new IllegalArgumentException(m + " at " + i); }
+
+        Object value() {
+            if (i >= s.length()) throw err("Unexpected end");
+            char c = s.charAt(i);
+            switch (c) {
+                case '{': return obj();
+                case '[': return arr();
+                case '"': return str();
+                case 't': expect("true"); return Boolean.TRUE;
+                case 'f': expect("false"); return Boolean.FALSE;
+                case 'n': expect("null"); return null;
+                default: return num();
+            }
+        }
+
+        void expect(String w) {
+            if (!s.startsWith(w, i)) throw err("Expected " + w);
+            i += w.length();
+        }
+
+        Obj obj() {
+            Obj o = new Obj();
+            i++; ws();
+            if (i < s.length() && s.charAt(i) == '}') { i++; return o; }
+            while (true) {
+                ws();
+                if (i >= s.length() || s.charAt(i) != '"') throw err("Expected key");
+                String k = str();
+                ws();
+                if (i >= s.length() || s.charAt(i) != ':') throw err("Expected :");
+                i++; ws();
+                o.map.put(k, value());
+                ws();
+                if (i >= s.length()) throw err("Unterminated object");
+                char c = s.charAt(i++);
+                if (c == '}') return o;
+                if (c != ',') throw err("Expected , or }");
+            }
+        }
+
+        Arr arr() {
+            Arr a = new Arr();
+            i++; ws();
+            if (i < s.length() && s.charAt(i) == ']') { i++; return a; }
+            while (true) {
+                ws();
+                a.list.add(value());
+                ws();
+                if (i >= s.length()) throw err("Unterminated array");
+                char c = s.charAt(i++);
+                if (c == ']') return a;
+                if (c != ',') throw err("Expected , or ]");
+            }
+        }
+
+        String str() {
+            i++; // opening quote
+            StringBuilder sb = null;
+            int start = i;
+            while (i < s.length()) {
+                char c = s.charAt(i);
+                if (c == '"') {
+                    String r = sb == null ? s.substring(start, i) : sb.append(s, start, i).toString();
+                    i++;
+                    return r;
+                }
+                if (c == '\\') {
+                    if (sb == null) sb = new StringBuilder();
+                    sb.append(s, start, i);
+                    i++;
+                    if (i >= s.length()) break;
+                    char e = s.charAt(i++);
+                    switch (e) {
+                        case 'n': sb.append('\n'); break;
+                        case 't': sb.append('\t'); break;
+                        case 'r': sb.append('\r'); break;
+                        case 'b': sb.append('\b'); break;
+                        case 'f': sb.append('\f'); break;
+                        case 'u':
+                            if (i + 4 > s.length()) throw err("Bad escape");
+                            sb.append((char) Integer.parseInt(s.substring(i, i + 4), 16));
+                            i += 4;
+                            break;
+                        default: sb.append(e);
+                    }
+                    start = i;
+                } else {
+                    i++;
+                }
+            }
+            throw err("Unterminated string");
+        }
+
+        Object num() {
+            int start = i;
+            while (i < s.length()) {
+                char c = s.charAt(i);
+                if ((c >= '0' && c <= '9') || c == '-' || c == '+' || c == '.' || c == 'e' || c == 'E') i++;
+                else break;
+            }
+            if (start == i) throw err("Unexpected character");
+            String n = s.substring(start, i);
+            try {
+                if (n.indexOf('.') < 0 && n.indexOf('e') < 0 && n.indexOf('E') < 0 && n.length() < 18) {
+                    return Long.valueOf(n);
+                }
+                return Double.valueOf(n);
+            } catch (NumberFormatException e) {
+                throw err("Bad number");
+            }
+        }
+    }
+
+    // ------------------------------------------------------------------ writing
+
+    public static void write(StringBuilder sb, Object v) {
+        if (v == null) { sb.append("null"); return; }
+        if (v instanceof String) { quote(sb, (String) v); return; }
+        if (v instanceof Number || v instanceof Boolean) { sb.append(v.toString()); return; }
+        if (v instanceof Obj) {
+            sb.append('{');
+            boolean first = true;
+            for (Iterator<Map.Entry<String, Object>> it = ((Obj) v).map.entrySet().iterator(); it.hasNext();) {
+                Map.Entry<String, Object> e = it.next();
+                if (e.getValue() == null) continue;
+                if (!first) sb.append(',');
+                first = false;
+                quote(sb, e.getKey());
+                sb.append(':');
+                write(sb, e.getValue());
+            }
+            sb.append('}');
+            return;
+        }
+        if (v instanceof Arr) {
+            sb.append('[');
+            List<Object> l = ((Arr) v).list;
+            for (int i = 0; i < l.size(); i++) {
+                if (i > 0) sb.append(',');
+                write(sb, l.get(i));
+            }
+            sb.append(']');
+            return;
+        }
+        quote(sb, v.toString());
+    }
+
+    private static void quote(StringBuilder sb, String s) {
+        sb.append('"');
+        for (int i = 0; i < s.length(); i++) {
+            char c = s.charAt(i);
+            switch (c) {
+                case '"': sb.append("\\\""); break;
+                case '\\': sb.append("\\\\"); break;
+                case '\n': sb.append("\\n"); break;
+                case '\r': sb.append("\\r"); break;
+                case '\t': sb.append("\\t"); break;
+                default:
+                    if (c < 0x20) {
+                        String h = Integer.toHexString(c);
+                        sb.append("\\u");
+                        for (int k = h.length(); k < 4; k++) sb.append('0');
+                        sb.append(h);
+                    } else sb.append(c);
+            }
+        }
+        sb.append('"');
+    }
+}
diff --git a/test/NetTest.java b/test/NetTest.java
new file mode 100644
index 0000000..928e666
--- /dev/null
+++ b/test/NetTest.java
@@ -0,0 +1,57 @@
+import java.io.File;
+import java.io.FileInputStream;
+import java.io.ByteArrayOutputStream;
+import java.util.ArrayList;
+import java.util.HashMap;
+import java.util.List;
+import java.util.Map;
+
+import com.minamp.net.CertVerifier;
+import com.minamp.net.Http;
+
+/** Desktop-JVM test of the bundled TLS + HTTP client against real servers. */
+public class NetTest {
+    public static void main(String[] args) throws Exception {
+        final File dir = new File(args[0]);
+        CertVerifier.setRootStore(new CertVerifier.RootStore() {
+            public List<byte[]> find(byte[] subjectDer) {
+                String h = CertVerifier.sha1Hex(subjectDer);
+                List<byte[]> out = new ArrayList<byte[]>();
+                for (int i = 0; ; i++) {
+                    File f = new File(dir, h + "-" + i + ".der");
+                    if (!f.exists()) break;
+                    try { out.add(read(f)); } catch (Exception e) { break; }
+                }
+                return out.isEmpty() ? null : out;
+            }
+        });
+        for (int i = 1; i < args.length; i++) {
+            String url = args[i];
+            long t0 = System.currentTimeMillis();
+            try {
+                Map<String, String> h = new HashMap<String, String>();
+                h.put("Accept", "application/json");
+                Http.Response r = Http.get(url, h, 15000);
+                byte[] body = r.readAll();
+                long t1 = System.currentTimeMillis();
+                // second request should reuse the pooled connection
+                Http.Response r2 = Http.get(url, h, 15000);
+                byte[] body2 = r2.readAll();
+                long t2 = System.currentTimeMillis();
+                System.out.println("OK  " + url + " -> " + r.code + " " + body.length + "B chunked=" + r.chunked
+                    + " first=" + (t1 - t0) + "ms reuse=" + (t2 - t1) + "ms (" + body2.length + "B)");
+            } catch (Exception e) {
+                System.out.println("ERR " + url + " -> " + e);
+            }
+        }
+    }
+
+    static byte[] read(File f) throws Exception {
+        FileInputStream in = new FileInputStream(f);
+        ByteArrayOutputStream b = new ByteArrayOutputStream();
+        byte[] buf = new byte[4096]; int n;
+        while ((n = in.read(buf)) > 0) b.write(buf, 0, n);
+        in.close();
+        return b.toByteArray();
+    }
+}
diff --git a/test/PlexTest.java b/test/PlexTest.java
new file mode 100644
index 0000000..62c18b0
--- /dev/null
+++ b/test/PlexTest.java
@@ -0,0 +1,167 @@
+import java.io.ByteArrayOutputStream;
+import java.io.File;
+import java.io.FileInputStream;
+import java.io.InputStream;
+import java.net.HttpURLConnection;
+import java.net.Proxy;
+import java.net.URL;
+import java.util.ArrayList;
+import java.util.List;
+
+import com.minamp.net.CertVerifier;
+import com.minamp.net.Http;
+import com.minamp.net.StreamProxy;
+import com.minamp.plex.Item;
+import com.minamp.plex.Library;
+import com.minamp.plex.Plex;
+import com.minamp.plex.Server;
+import com.minamp.util.Json;
+
+/** End-to-end test of sign-in, discovery, connection picking, browsing and the stream proxy. */
+public class PlexTest {
+    static int failures = 0;
+
+    static void check(boolean ok, String what) {
+        System.out.println((ok ? "PASS " : "FAIL ") + what);
+        if (!ok) failures++;
+    }
+
+    static RootDir roots(String dir) { return new RootDir(new File(dir)); }
+
+    static final class RootDir implements CertVerifier.RootStore {
+        final File dir;
+        RootDir(File d) { dir = d; }
+        public List<byte[]> find(byte[] subjectDer) {
+            String h = CertVerifier.sha1Hex(subjectDer);
+            List<byte[]> out = new ArrayList<byte[]>();
+            for (int i = 0; ; i++) {
+                File f = new File(dir, h + "-" + i + ".der");
+                if (!f.exists()) break;
+                try { out.add(read(new FileInputStream(f))); } catch (Exception e) { break; }
+            }
+            return out.isEmpty() ? null : out;
+        }
+    }
+
+    public static void main(String[] args) throws Exception {
+        CertVerifier.setRootStore(roots(args[0]));
+        Plex.clientId = "test-client";
+
+        // --- sign-in via PIN
+        Plex.Pin pin = Plex.createPin();
+        check("WXYZ".equals(pin.code), "PIN created: " + pin.code);
+        String account = null;
+        for (int i = 0; i < 10 && account == null; i++) { account = Plex.checkPin(pin.id); if (account == null) Thread.sleep(300); }
+        check("account-token-123".equals(account), "PIN linked -> account token");
+        check("tester".equals(Plex.username(account)), "username");
+
+        // --- discovery
+        List<Server> servers = Plex.servers(account);
+        check(servers.size() == 1, "one server (players filtered out)");
+        Server s = servers.get(0);
+        StringBuilder order = new StringBuilder();
+        for (Server.Conn c : s.connections) order.append(c.kind).append(' ');
+        check(s.connections.get(0).kind == Server.LOCAL && s.connections.get(s.connections.size() - 1).kind == Server.RELAY,
+              "connections ordered local..relay: " + order);
+
+        // persistence round trip
+        Server s2 = Server.fromJson(Json.parseObj(s.toJson().toString()));
+        check(s2.connections.size() == s.connections.size() && s2.token.equals(s.token), "server JSON round trip");
+
+        long t0 = System.currentTimeMillis();
+        Server.Conn picked = s2.pick();
+        check(picked.uri.startsWith("https://127-0-0-1.abc123.plex.direct:32443"), "picked local TLS connection " + picked.uri
+              + " in " + (System.currentTimeMillis() - t0) + "ms");
+
+        // --- browsing
+        List<Server.Section> secs = s2.musicSections();
+        check(secs.size() == 1 && "Music".equals(secs.get(0).title), "music sections only");
+        Library lib = new Library(s2, secs.get(0).key);
+        List<Item> artists = s2.items(lib.artistsPath(100, 100));
+        check(artists.size() == 100 && "Artist 100".equals(artists.get(0).title), "artists paging");
+        Item album = s2.items(lib.recentlyAddedPath(10)).get(0);
+        check(album.type == Item.ALBUM && "The Testers · 1999".equals(album.subtitle()), "album item + subtitle");
+        List<Item> tracks = lib.tracksOf(album);
+        check(tracks.size() == 2 && tracks.get(0).partKey.endsWith("file.mp3") && tracks.get(0).loved(), "album tracks with media");
+        check(Library.canDirectPlay(tracks.get(0), 0) && !Library.canDirectPlay(tracks.get(1), 0), "direct play decisions");
+        check(!Library.canDirectPlay(tracks.get(0), 128), "192k mp3 transcoded when capped at 128k");
+        Item rt = Item.deserialize(tracks.get(0).serialize());
+        check(rt.title.equals("Song One") && rt.partKey.equals(tracks.get(0).partKey) && rt.duration == 200000, "item JSON round trip");
+        List<Item> res = lib.search("test");
+        check(res.size() == 4 && res.get(0).type == Item.HEADER && res.get(1).type == Item.ARTIST && res.get(3).type == Item.TRACK,
+              "search hubs grouped (" + res.size() + ")");
+        check(lib.libraryRadio().size() == 2, "library radio");
+        String img = s2.imageUrl("/library/metadata/10/thumb/1", 64);
+        Http.Response ir = Http.get(img, null, 10000);
+        byte[] ib = ir.readAll();
+        check(ir.code == 200 && ib.length > 100, "artwork via photo transcoder");
+        lib.timeline(tracks.get(0), "playing", 1000);
+        lib.rate(tracks.get(0), 10);
+        check(true, "timeline + rate calls");
+
+        // --- stream proxy
+        StreamProxy proxy = new StreamProxy();
+        proxy.start();
+        String id = proxy.newId();
+        String local = proxy.register(id, lib.directUrl(tracks.get(0)), "mp3");
+        HttpURLConnection hc = (HttpURLConnection) new URL(local).openConnection(Proxy.NO_PROXY);
+        hc.setRequestProperty("Range", "bytes=1000-");
+        byte[] body = read(hc.getInputStream());
+        check(hc.getResponseCode() == 206 && body.length == 299000 && (body[0] & 255) == (1000 * 7) % 256,
+              "proxy direct stream with Range over TLS (" + hc.getResponseCode() + ", " + body.length + "B)");
+
+        String id2 = proxy.newId();
+        String local2 = proxy.register(id2, lib.transcodeUrl(tracks.get(1), 192, 30500, "sess1"), "mp3");
+        hc = (HttpURLConnection) new URL(local2).openConnection(Proxy.NO_PROXY);
+        byte[] tbody = read(hc.getInputStream());
+        String ts = new String(tbody, "ISO-8859-1");
+        check(hc.getResponseCode() == 200 && ts.startsWith("TRANSCODE offset=30 bitrate=192|") && hc.getHeaderField("Content-Length") == null,
+              "proxy de-chunks transcode stream (" + tbody.length + "B)");
+
+        // abort mid-stream
+        String id3 = proxy.newId();
+        String local3 = proxy.register(id3, lib.directUrl(tracks.get(0)), "mp3");
+        hc = (HttpURLConnection) new URL(local3).openConnection(Proxy.NO_PROXY);
+        InputStream in = hc.getInputStream();
+        in.read(new byte[100]);
+        proxy.unregister(id3);
+        check(true, "unregister mid-stream doesn't hang");
+        String gone = proxy.register("nope", "http://127.0.0.1:1/x", "mp3");
+        proxy.unregister("nope");
+        hc = (HttpURLConnection) new URL(gone).openConnection(Proxy.NO_PROXY);
+        check(hc.getResponseCode() == 404, "unknown route 404");
+
+        // --- failover: break the preferred connection's identity, expect fallback to plain http LAN
+        Server s3 = new Server();
+        s3.machineId = "machine-abc123"; s3.token = s.token; s3.name = "x";
+        s3.add("https://localhost:32443", Server.LOCAL);              // cert won't match "localhost"
+        s3.add("http://127.0.0.1:32400", Server.LOCAL_HTTP);
+        s3.add("https://10-255-255-1.abc123.plex.direct:9", Server.REMOTE);
+        s3.sortConnections();
+        Server.Conn c3 = s3.pick();
+        check(c3.kind == Server.LOCAL_HTTP, "falls back when TLS name check fails -> " + c3.uri);
+
+        // --- trust checks
+        CertVerifier.setRootStore(roots(args[1])); // real Mozilla roots: test CA must be rejected
+        Http.evictAll();
+        try {
+            Http.get("https://127-0-0-1.abc123.plex.direct:32443/identity", null, 5000).readAll();
+            check(false, "untrusted root rejected");
+        } catch (Exception e) {
+            check(e.getMessage() != null && e.getMessage().indexOf("Untrusted") >= 0, "untrusted root rejected: " + e.getMessage());
+        }
+
+        check(Server.normalizeManual("192.168.1.5").equals("http://192.168.1.5:32400"), "manual URL normalise");
+        check(Server.normalizeManual("https://plex.example.com/").equals("https://plex.example.com"), "manual https URL kept");
+        System.out.println(failures == 0 ? "ALL PASSED" : failures + " FAILED");
+        System.exit(failures == 0 ? 0 : 1);
+    }
+
+    static byte[] read(InputStream in) throws Exception {
+        ByteArrayOutputStream b = new ByteArrayOutputStream();
+        byte[] buf = new byte[8192]; int n;
+        while ((n = in.read(buf)) > 0) b.write(buf, 0, n);
+        in.close();
+        return b.toByteArray();
+    }
+}
diff --git a/test/QueueTest.java b/test/QueueTest.java
new file mode 100644
index 0000000..27dd7c8
--- /dev/null
+++ b/test/QueueTest.java
@@ -0,0 +1,71 @@
+import java.util.ArrayList;
+import java.util.List;
+
+import com.minamp.PlayQueue;
+import com.minamp.plex.Item;
+
+/** Queue semantics: shuffle keeps the current track first and restores order; repeat; edits. */
+public class QueueTest {
+    static int fails;
+
+    static void check(boolean ok, String what) {
+        System.out.println((ok ? "PASS " : "FAIL ") + what);
+        if (!ok) fails++;
+    }
+
+    static List<Item> tracks(int n) {
+        List<Item> l = new ArrayList<Item>();
+        for (int i = 0; i < n; i++) { Item t = new Item(); t.type = Item.TRACK; t.title = "T" + i; t.ratingKey = "" + i; l.add(t); }
+        return l;
+    }
+
+    static String order(PlayQueue q) {
+        StringBuilder sb = new StringBuilder();
+        for (int i = 0; i < q.size(); i++) sb.append(q.at(i).title).append(i == q.index() ? "*" : "").append(' ');
+        return sb.toString().trim();
+    }
+
+    public static void main(String[] a) {
+        PlayQueue q = PlayQueue.get();
+        q.set(tracks(5), 2, false, "Album");
+        check(order(q).equals("T0 T1 T2* T3 T4"), "set from index 2: " + order(q));
+        q.setShuffle(true);
+        check(q.index() == 0 && q.current().title.equals("T2") && q.size() == 5, "shuffle keeps current first: " + order(q));
+        q.setShuffle(false);
+        check(order(q).equals("T0 T1 T2* T3 T4"), "unshuffle restores order: " + order(q));
+
+        check(q.advance(false) && q.current().title.equals("T3"), "advance");
+        q.advance(false);
+        check(!q.advance(false) && q.current().title.equals("T4"), "end of queue stops (repeat off)");
+        q.cycleRepeat(); // all
+        check(q.advance(false) && q.current().title.equals("T0"), "repeat all wraps");
+        q.cycleRepeat(); // one
+        check(q.advance(false) && q.current().title.equals("T0"), "repeat one replays on completion");
+        check(q.advance(true) && q.current().title.equals("T1"), "manual skip leaves repeat-one track");
+        q.cycleRepeat(); // off
+        check(q.back() && q.current().title.equals("T0"), "back");
+        check(q.back() && q.current().title.equals("T0"), "back at start stays");
+
+        List<Item> extra = tracks(2);
+        extra.get(0).title = "X0"; extra.get(1).title = "X1";
+        q.playNext(extra);
+        check(order(q).equals("T0* X0 X1 T1 T2 T3 T4"), "play next inserts after current: " + order(q));
+        q.remove(1);
+        check(order(q).equals("T0* X1 T1 T2 T3 T4"), "remove: " + order(q));
+        q.jump(3);
+        q.moveNext(0);
+        check(order(q).equals("X1 T1 T2* T0 T3 T4"), "move earlier item to play next: " + order(q));
+        q.setShuffle(true);
+        q.append(tracks(1));
+        q.setShuffle(false);
+        check(q.size() == 7 && q.current().title.equals("T2"), "items appended while shuffled survive unshuffle: " + order(q));
+        q.clearUpcoming();
+        check(q.size() == q.index() + 1 && q.current().title.equals("T2"), "clear upcoming: " + order(q));
+        q.set(tracks(10), -1, true, "Radio");
+        check(q.size() == 10 && q.index() == 0 && q.shuffle(), "shuffle play from random start");
+        q.clear();
+        check(q.current() == null && q.size() == 0, "clear");
+        System.out.println(fails == 0 ? "ALL PASSED" : fails + " FAILED");
+        System.exit(fails == 0 ? 0 : 1);
+    }
+}
diff --git a/test/mock_plex.py b/test/mock_plex.py
new file mode 100644
index 0000000..2c14a60
--- /dev/null
+++ b/test/mock_plex.py
@@ -0,0 +1,226 @@
+"""Mock plex.tv + Plex Media Server for exercising Minamp's networking code on a desktop JVM.
+
+Serves:
+  https://plex.tv:443                         pins, user, resources
+  https://127-0-0-1.abc123.plex.direct:32443  PMS over TLS (wildcard cert, ECDSA leaf, RSA root)
+  http://127.0.0.1:32400                      the same PMS in plain HTTP
+"""
+import datetime
+import json
+import os
+import ssl
+import sys
+import threading
+import time
+from http.server import BaseHTTPRequestHandler, ThreadingHTTPServer
+from urllib.parse import urlparse, parse_qs
+
+from cryptography import x509
+from cryptography.hazmat.primitives import hashes, serialization
+from cryptography.hazmat.primitives.asymmetric import ec, rsa
+from cryptography.x509.oid import NameOID
+
+OUT = sys.argv[1]
+os.makedirs(OUT, exist_ok=True)
+NOW = datetime.datetime.now(datetime.timezone.utc)
+
+
+def name(cn):
+    return x509.Name([x509.NameAttribute(NameOID.ORGANIZATION_NAME, "Minamp Test"), x509.NameAttribute(NameOID.COMMON_NAME, cn)])
+
+
+def cert(subject, issuer, pub, signer, hashalg, ca, sans=None):
+    b = (x509.CertificateBuilder().subject_name(subject).issuer_name(issuer).public_key(pub)
+         .serial_number(x509.random_serial_number())
+         .not_valid_before(NOW - datetime.timedelta(days=1)).not_valid_after(NOW + datetime.timedelta(days=30))
+         .add_extension(x509.BasicConstraints(ca=ca, path_length=None), critical=True))
+    if sans:
+        b = b.add_extension(x509.SubjectAlternativeName([x509.DNSName(s) for s in sans]), critical=False)
+    return b.sign(signer, hashalg)
+
+
+root_key = rsa.generate_private_key(public_exponent=65537, key_size=2048)
+root = cert(name("Test Root"), name("Test Root"), root_key.public_key(), root_key, hashes.SHA256(), True)
+inter_key = ec.generate_private_key(ec.SECP384R1())
+inter = cert(name("Test ECC Intermediate"), root.subject, inter_key.public_key(), root_key, hashes.SHA256(), True)
+pms_key = ec.generate_private_key(ec.SECP256R1())
+pms = cert(name("*.abc123.plex.direct"), inter.subject, pms_key.public_key(), inter_key, hashes.SHA384(), False,
+           ["*.abc123.plex.direct"])
+tv_key = rsa.generate_private_key(public_exponent=65537, key_size=2048)
+tv = cert(name("plex.tv"), inter.subject, tv_key.public_key(), inter_key, hashes.SHA384(), False, ["plex.tv", "*.plex.tv"])
+
+pem = lambda c: c.public_bytes(serialization.Encoding.PEM)
+keypem = lambda k: k.private_bytes(serialization.Encoding.PEM, serialization.PrivateFormat.PKCS8, serialization.NoEncryption())
+open(os.path.join(OUT, "root.pem"), "wb").write(pem(root))
+for label, c, k in (("pms", pms, pms_key), ("tv", tv, tv_key)):
+    open(os.path.join(OUT, label + "-chain.pem"), "wb").write(pem(c) + pem(inter))
+    open(os.path.join(OUT, label + "-key.pem"), "wb").write(keypem(k))
+
+MACHINE = "machine-abc123"
+TOKEN = "server-token-xyz"
+ACCOUNT = "account-token-123"
+pins = {}
+log = []
+
+TRACKS = [
+    {"type": "track", "ratingKey": "101", "key": "/library/metadata/101", "title": "Song One", "grandparentTitle": "The Testers",
+     "parentTitle": "First Album", "parentThumb": "/library/metadata/10/thumb/1", "parentRatingKey": "10", "grandparentRatingKey": "1",
+     "index": 1, "duration": 200000, "userRating": 10,
+     "Media": [{"audioCodec": "mp3", "container": "mp3", "bitrate": 192, "Part": [{"key": "/library/parts/501/1/file.mp3", "size": 300000}]}]},
+    {"type": "track", "ratingKey": "102", "key": "/library/metadata/102", "title": "Song Two (FLAC)", "grandparentTitle": "The Testers",
+     "parentTitle": "First Album", "parentThumb": "/library/metadata/10/thumb/1", "parentRatingKey": "10", "grandparentRatingKey": "1",
+     "index": 2, "duration": 180000,
+     "Media": [{"audioCodec": "flac", "container": "flac", "bitrate": 900, "Part": [{"key": "/library/parts/502/1/file.flac", "size": 9000000}]}]},
+]
+MP3 = bytes((i * 7) % 256 for i in range(300000))
+
+
+class H(BaseHTTPRequestHandler):
+    protocol_version = "HTTP/1.1"
+
+    def log_message(self, *a):
+        pass
+
+    def send_json(self, obj, code=200):
+        body = json.dumps(obj).encode()
+        self.send_response(code)
+        self.send_header("Content-Type", "application/json")
+        self.send_header("Content-Length", str(len(body)))
+        self.end_headers()
+        self.wfile.write(body)
+
+    def do_POST(self):
+        self.route("POST")
+
+    def do_PUT(self):
+        self.route("PUT")
+
+    def do_GET(self):
+        self.route("GET")
+
+    def do_HEAD(self):
+        self.route("HEAD")
+
+    def route(self, method):
+        n = int(self.headers.get("Content-Length") or 0)
+        if n:
+            self.rfile.read(n)
+        u = urlparse(self.path)
+        q = parse_qs(u.query)
+        p = u.path
+        host = self.headers.get("Host", "")
+        tok = self.headers.get("X-Plex-Token") or (q.get("X-Plex-Token") or [None])[0]
+        log.append((method, host, self.path, tok, self.headers.get("Range")))
+        if host.startswith("plex.tv"):
+            return self.tv(method, p, tok)
+        if p == "/identity":
+            return self.send_json({"MediaContainer": {"machineIdentifier": MACHINE, "version": "1.40"}})
+        if tok != TOKEN:
+            return self.send_json({"error": "unauthorized"}, 401)
+        if p == "/library/sections":
+            return self.send_json({"MediaContainer": {"Directory": [
+                {"key": "1", "type": "artist", "title": "Music"}, {"key": "2", "type": "movie", "title": "Films"}]}})
+        if p == "/library/sections/1/all":
+            t = q.get("type", ["8"])[0]
+            if t == "8":
+                start = int(q.get("X-Plex-Container-Start", ["0"])[0])
+                size = int(q.get("X-Plex-Container-Size", ["50"])[0])
+                arts = [{"type": "artist", "ratingKey": str(1000 + i), "title": "Artist %03d" % i, "thumb": "/a/%d" % i} for i in range(250)]
+                return self.send_json({"MediaContainer": {"totalSize": 250, "offset": start, "Metadata": arts[start:start + size]}})
+            if t == "10":
+                return self.send_json({"MediaContainer": {"Metadata": TRACKS}})
+            return self.send_json({"MediaContainer": {"Metadata": [{"type": "album", "ratingKey": "10", "title": "First Album",
+                                                                    "parentTitle": "The Testers", "year": 1999, "thumb": "/library/metadata/10/thumb/1"}]}})
+        if p == "/library/metadata/10/children":
+            return self.send_json({"MediaContainer": {"Metadata": TRACKS}})
+        if p == "/hubs/search":
+            return self.send_json({"MediaContainer": {"Hub": [
+                {"type": "artist", "title": "Artists", "Directory": [{"type": "artist", "ratingKey": "1", "title": "The Testers"}]},
+                {"type": "track", "title": "Tracks", "Metadata": TRACKS[:1]}]}})
+        if p.startswith("/library/parts/501"):
+            return self.file(method, MP3)
+        if p == "/music/:/transcode/universal/start.mp3":
+            return self.chunked(method, q)
+        if p == "/photo/:/transcode":
+            return self.file(method, b"\xff\xd8\xff\xe0JPEGDATA" * 50, "image/jpeg")
+        if p in ("/:/timeline", "/:/scrobble", "/:/rate", "/transcode/universal/stop"):
+            return self.send_json({})
+        self.send_json({"error": "not found " + p}, 404)
+
+    def file(self, method, data, ctype="audio/mpeg"):
+        rng = self.headers.get("Range")
+        start, end = 0, len(data) - 1
+        code = 200
+        if rng and rng.startswith("bytes="):
+            a, b = rng[6:].split("-")
+            start = int(a)
+            end = int(b) if b else len(data) - 1
+            code = 206
+        chunk = data[start:end + 1]
+        self.send_response(code)
+        self.send_header("Content-Type", ctype)
+        self.send_header("Accept-Ranges", "bytes")
+        self.send_header("Content-Length", str(len(chunk)))
+        if code == 206:
+            self.send_header("Content-Range", "bytes %d-%d/%d" % (start, end, len(data)))
+        self.end_headers()
+        if method != "HEAD":
+            self.wfile.write(chunk)
+
+    def chunked(self, method, q):
+        self.send_response(200)
+        self.send_header("Content-Type", "audio/mpeg")
+        self.send_header("Transfer-Encoding", "chunked")
+        self.end_headers()
+        if method == "HEAD":
+            return
+        offset = q.get("offset", ["0"])[0]
+        payload = ("TRANSCODE offset=%s bitrate=%s|" % (offset, q.get("musicBitrate", ["?"])[0])).encode() * 400
+        for i in range(0, len(payload), 1000):
+            part = payload[i:i + 1000]
+            self.wfile.write(b"%x\r\n" % len(part) + part + b"\r\n")
+            self.wfile.flush()
+        self.wfile.write(b"0\r\n\r\n")
+
+    def tv(self, method, p, tok):
+        if p == "/api/v2/pins" and method == "POST":
+            pid = len(pins) + 1
+            pins[pid] = {"id": pid, "code": "WXYZ", "authToken": None, "created": time.time()}
+            return self.send_json(pins[pid], 201)
+        if p.startswith("/api/v2/pins/"):
+            pin = pins.get(int(p.rsplit("/", 1)[1]))
+            if pin and time.time() - pin["created"] > 1.0:
+                pin["authToken"] = ACCOUNT  # "user linked it" after a second
+            return self.send_json(pin or {}, 200 if pin else 404)
+        if tok != ACCOUNT:
+            return self.send_json({"error": "unauthorized"}, 401)
+        if p == "/api/v2/user":
+            return self.send_json({"username": "tester"})
+        if p == "/api/v2/resources":
+            return self.send_json([
+                {"name": "Living Room PC", "provides": "server", "clientIdentifier": MACHINE, "accessToken": TOKEN, "owned": True,
+                 "connections": [
+                     {"protocol": "https", "address": "10.255.255.1", "port": 32400, "uri": "https://10-255-255-1.abc123.plex.direct:32400", "local": False, "relay": False},
+                     {"protocol": "https", "address": "127.0.0.1", "port": 32443, "uri": "https://127-0-0-1.abc123.plex.direct:32443", "local": True, "relay": False},
+                     {"protocol": "https", "address": "1.2.3.4", "port": 8443, "uri": "https://1-2-3-4.abc123.plex.direct:8443", "local": False, "relay": True},
+                 ]},
+                {"name": "Some TV", "provides": "player", "clientIdentifier": "tv"},
+            ])
+        self.send_json({"error": "nf"}, 404)
+
+
+def serve(port, chain=None, key=None):
+    srv = ThreadingHTTPServer(("127.0.0.1", port), H)
+    if chain:
+        ctx = ssl.SSLContext(ssl.PROTOCOL_TLS_SERVER)
+        ctx.load_cert_chain(chain, key)
+        srv.socket = ctx.wrap_socket(srv.socket, server_side=True)
+    threading.Thread(target=srv.serve_forever, daemon=True).start()
+
+
+serve(32400)
+serve(32443, os.path.join(OUT, "pms-chain.pem"), os.path.join(OUT, "pms-key.pem"))
+serve(443, os.path.join(OUT, "tv-chain.pem"), os.path.join(OUT, "tv-key.pem"))
+print("ready", flush=True)
+while True:
+    time.sleep(1)
diff --git a/tools/make_icons.py b/tools/make_icons.py
new file mode 100644
index 0000000..b1fcfe1
--- /dev/null
+++ b/tools/make_icons.py
@@ -0,0 +1,53 @@
+"""Draws the launcher and status-bar icons at ldpi/mdpi/hdpi (supersampled for smooth edges)."""
+import os
+import sys
+
+from PIL import Image, ImageDraw
+
+RES = sys.argv[1]
+BG = (24, 24, 29, 255)
+ACCENT = (247, 176, 46, 255)
+DARK = (22, 19, 12, 255)
+
+
+def launcher(size):
+    S = size * 8
+    im = Image.new("RGBA", (S, S), (0, 0, 0, 0))
+    d = ImageDraw.Draw(im)
+    pad = S * 0.06
+    d.rounded_rectangle([pad, pad, S - pad, S - pad], radius=S * 0.22, fill=BG)
+    # amber disc with a ring groove and a play notch: a record that is also a play button
+    c = S * 0.46
+    r = S * 0.29
+    d.ellipse([c - r, c - r, c + r, c + r], fill=ACCENT)
+    rr = r * 0.72
+    w = max(2, int(S * 0.018))
+    d.ellipse([c - rr, c - rr, c + rr, c + rr], outline=DARK, width=w)
+    t = r * 0.42
+    d.polygon([(c - t * 0.55, c - t), (c + t * 0.95, c), (c - t * 0.55, c + t)], fill=DARK)
+    # three level bars, lower right
+    bw = S * 0.045
+    for i, h in enumerate((0.10, 0.17, 0.13)):
+        x = S * 0.72 + i * bw * 1.6
+        d.rounded_rectangle([x, S * 0.82 - S * h, x + bw, S * 0.82], radius=bw / 2, fill=ACCENT)
+    return im.resize((size, size), Image.LANCZOS)
+
+
+def status(size):
+    S = size * 8
+    im = Image.new("RGBA", (S, S), (0, 0, 0, 0))
+    d = ImageDraw.Draw(im)
+    c = S / 2
+    r = S * 0.44
+    d.ellipse([c - r, c - r, c + r, c + r], fill=ACCENT)
+    t = r * 0.45
+    d.polygon([(c - t * 0.55, c - t), (c + t * 0.95, c), (c - t * 0.55, c + t)], fill=(0, 0, 0, 0))
+    return im.resize((size, size), Image.LANCZOS)
+
+
+for folder, ls, ss in (("drawable-ldpi", 36, 19), ("drawable-mdpi", 48, 25), ("drawable-hdpi", 72, 38)):
+    os.makedirs(os.path.join(RES, folder), exist_ok=True)
+    launcher(ls).save(os.path.join(RES, folder, "ic_launcher.png"))
+    status(ss).save(os.path.join(RES, folder, "ic_stat.png"))
+launcher(192).save(os.path.join(os.path.dirname(RES.rstrip("/")), "icon-preview.png"))
+print("icons written")
diff --git a/tools/make_roots.py b/tools/make_roots.py
new file mode 100644
index 0000000..b64a709
--- /dev/null
+++ b/tools/make_roots.py
@@ -0,0 +1,27 @@
+"""Turn a PEM CA bundle into assets/roots/<sha1(subject DER)>-<n>.der for the app's trust store."""
+import hashlib
+import os
+import sys
+
+from cryptography import x509
+from cryptography.hazmat.primitives.serialization import Encoding
+
+
+def main(pem_path, out_dir):
+    os.makedirs(out_dir, exist_ok=True)
+    for f in os.listdir(out_dir):
+        os.remove(os.path.join(out_dir, f))
+    data = open(pem_path, "rb").read()
+    certs = x509.load_pem_x509_certificates(data)
+    counts = {}
+    for c in certs:
+        h = hashlib.sha1(c.subject.public_bytes()).hexdigest()
+        n = counts.get(h, 0)
+        counts[h] = n + 1
+        with open(os.path.join(out_dir, "%s-%d.der" % (h, n)), "wb") as fh:
+            fh.write(c.public_bytes(Encoding.DER))
+    print("wrote %d roots to %s" % (len(certs), out_dir))
+
+
+if __name__ == "__main__":
+    main(sys.argv[1], sys.argv[2])
diff --git a/tools/setup_toolchain.sh b/tools/setup_toolchain.sh
new file mode 100755
index 0000000..9ebdd5a
--- /dev/null
+++ b/tools/setup_toolchain.sh
@@ -0,0 +1,62 @@
+#!/bin/bash
+# Fetches/builds everything build.sh needs into $TOOLS (default ./toolchain), with only
+# Java 17+, git, curl, python3 (+ cryptography for make_roots.py) and npm's registry.
+set -euo pipefail
+cd "$(dirname "$0")/.."
+PROJ=$PWD
+T=${TOOLS:-$PWD/toolchain}
+mkdir -p "$T" && cd "$T"
+
+echo "== aapt2 (prebuilt, from the aaptjs3 npm package)"
+if [ ! -x aapt2 ]; then
+  mkdir -p dl && curl -sSL -o dl/aapt.tgz "$(curl -sS https://registry.npmjs.org/aaptjs3/latest | python3 -c 'import json,sys;print(json.load(sys.stdin)["dist"]["tarball"])')"
+  tar xzf dl/aapt.tgz -C dl && cp dl/package/bin/x64/linux/aapt2 . && chmod +x aapt2
+fi
+
+echo "== android-8 platform jar"
+if [ ! -f platforms/android-8/android.jar ]; then
+  git clone --depth 1 --filter=blob:none --sparse https://github.com/Sable/android-platforms platforms
+  (cd platforms && git sparse-checkout set android-8)
+fi
+
+echo "== dx (built from AOSP source)"
+if [ ! -f dx.jar ]; then
+  git clone --depth 1 --branch android10-release --filter=blob:none --sparse https://github.com/aosp-mirror/platform_dalvik dalvik
+  (cd dalvik && git sparse-checkout set dx/src)
+  mkdir -p dxbuild && find dalvik/dx/src -name '*.java' > dxsrc.txt
+  javac -nowarn -encoding UTF-8 -d dxbuild @dxsrc.txt
+  jar cfe dx.jar com.android.dx.command.Main -C dxbuild .
+fi
+
+echo "== Bouncy Castle sources, renamed to com.minamp.bc"
+if [ ! -d bcsrc ]; then
+  git clone --depth 1 --filter=blob:none --sparse https://github.com/bcgit/bc-java bc
+  (cd bc && git sparse-checkout set core/src/main/java tls/src/main/java util/src/main/java)
+  mkdir -p bcsrc/com/minamp
+  cp -r bc/core/src/main/java/org/bouncycastle bcsrc/com/minamp/bc
+  cp -r --update=none bc/tls/src/main/java/org/bouncycastle/* bcsrc/com/minamp/bc/
+  cp -r --update=none bc/util/src/main/java/org/bouncycastle/* bcsrc/com/minamp/bc/
+  grep -rl 'org\.bouncycastle' bcsrc | xargs sed -i 's/org\.bouncycastle/com.minamp.bc/g'
+  # Android 2.2 has no Long.compare / compareUnsigned / divideUnsigned / parseUnsignedLong
+  python3 - bcsrc/com/minamp/bc/util/Longs.java <<'PY'
+import sys
+p = sys.argv[1]; s = open(p).read()
+s = s.replace("return Long.compare(x, y);", "return x < y ? -1 : (x == y ? 0 : 1);")
+s = s.replace("return Long.compareUnsigned(x, y);", "return compare(x + Long.MIN_VALUE, y + Long.MIN_VALUE);")
+s = s.replace("return Long.divideUnsigned(x, y);", """if (y < 0) { return compareUnsigned(x, y) < 0 ? 0L : 1L; }
+        if (x >= 0) { return x / y; }
+        long q = ((x >>> 1) / y) << 1;
+        long r = x - q * y;
+        return q + (compareUnsigned(r, y) >= 0 ? 1 : 0);""")
+s = s.replace("return Long.parseUnsignedLong(s);", "return new java.math.BigInteger(s).longValue();")
+open(p, "w").write(s)
+PY
+fi
+
+echo "== signing key"
+if [ ! -f minamp.keystore ]; then
+  if [ -f "$PROJ/signing/minamp.keystore" ]; then cp "$PROJ/signing/minamp.keystore" .; else
+  keytool -genkeypair -keystore minamp.keystore -storepass minamp123 -keypass minamp123 -alias minamp \
+    -keyalg RSA -keysize 2048 -sigalg SHA1withRSA -validity 20000 -dname "CN=Minamp, O=Minamp"; fi
+fi
+echo "Toolchain ready in $T — build with: TOOLS=$T ./build.sh"
diff --git a/tools/zipalign.py b/tools/zipalign.py
new file mode 100644
index 0000000..ea89c73
--- /dev/null
+++ b/tools/zipalign.py
@@ -0,0 +1,51 @@
+"""zipalign replacement: rewrites an APK so every STORED entry's data starts on a 4-byte boundary.
+
+Re-compressing deflated entries doesn't break the v1 (JAR) signature, which covers uncompressed
+contents only.
+"""
+import struct
+import sys
+import zipfile
+
+ALIGN = 4
+
+
+def align(src, dst):
+    zin = zipfile.ZipFile(src)
+    with zipfile.ZipFile(dst, "w") as zout:
+        for info in zin.infolist():
+            data = zin.read(info.filename)
+            zi = zipfile.ZipInfo(info.filename, date_time=info.date_time)
+            zi.compress_type = info.compress_type
+            zi.external_attr = info.external_attr
+            zi.create_system = info.create_system
+            extra = b""
+            if info.compress_type == zipfile.ZIP_STORED:
+                offset = zout.fp.tell()
+                name_len = len(zi.filename.encode("utf-8"))
+                base = offset + 30 + name_len + 6  # 6 = our extra-field header + alignment value
+                pad = (ALIGN - base % ALIGN) % ALIGN
+                # 0xD935 is the extra-field id Android's own zipalign uses for padding
+                extra = struct.pack("<HHH", 0xD935, 2 + pad, ALIGN) + b"\0" * pad
+            zi.extra = extra
+            zout.writestr(zi, data)
+    verify(dst)
+
+
+def verify(path):
+    z = zipfile.ZipFile(path)
+    raw = open(path, "rb").read()
+    for info in z.infolist():
+        if info.compress_type != zipfile.ZIP_STORED:
+            continue
+        o = info.header_offset
+        n, e = struct.unpack("<HH", raw[o + 26:o + 30])
+        start = o + 30 + n + e
+        if start % ALIGN:
+            raise SystemExit("misaligned: %s at %d" % (info.filename, start))
+    if z.testzip() is not None:
+        raise SystemExit("corrupt zip")
+
+
+if __name__ == "__main__":
+    align(sys.argv[1], sys.argv[2])