TXT records should check length at check/preview time (#947)

* TXT records should check length
* Add validation to TXT generator
* Split and validate long TXT targets
* Add a metaparameter to TXT records to indicate autosplit is requested.
* SPF_BUILDER marks TXT records as needing to be autosplit.
* Validate should check for overly-long TXT targets

models/t_ds.go

@@ -1,7 +1,6 @@
 package models
 
 import (
-	"fmt"
 	"strconv"
 	"strings"
 
@@ -49,6 +48,5 @@ func (rc *RecordConfig) SetTargetDSString(s string) error {
 	if len(part) != 4 {
 		return errors.Errorf("DS value does not contain 5 fields: (%#v)", s)
 	}
-	fmt.Println(part)
 	return rc.SetTargetDSStrings(part[0], part[1], part[2], part[3])
 }

models/t_txt.go

@@ -1,5 +1,10 @@
 package models
 
+import (
+	"fmt"
+	"strings"
+)
+
 // SetTargetTXT sets the TXT fields when there is 1 string.
 func (rc *RecordConfig) SetTargetTXT(s string) error {
 	rc.SetTarget(s)
@@ -34,3 +39,43 @@ func (rc *RecordConfig) SetTargetTXTs(s []string) error {
 func (rc *RecordConfig) SetTargetTXTString(s string) error {
 	return rc.SetTargetTXTs(ParseQuotedTxt(s))
 }
+
+// TxtNormalize splits long txt targets if required based on the algo.
+func (rc *RecordConfig) TxtNormalize(algo string) {
+	switch algo {
+	case "multistring":
+		rc.SetTargetTXTs(splitChunks(strings.Join(rc.TxtStrings, ""), 255))
+	case "space":
+		panic("not implemented")
+	default:
+		panic("TxtNormalize called with invalid algorithm")
+	}
+}
+
+func splitChunks(buf string, lim int) []string {
+	var chunk string
+	chunks := make([]string, 0, len(buf)/lim+1)
+	for len(buf) >= lim {
+		chunk, buf = buf[:lim], buf[lim:]
+		chunks = append(chunks, chunk)
+	}
+	if len(buf) > 0 {
+		chunks = append(chunks, buf[:len(buf)])
+	}
+	return chunks
+}
+
+// ValidateTXT returns an error if the txt record is invalid.
+// Verifies the Target and TxtStrings are less than 255 bytes each.
+func ValidateTXT(rc *RecordConfig) error {
+	if rc.Type != "TXT" {
+		return fmt.Errorf("rc.Type=%q, expecting TXT", rc.Type)
+	}
+	for i := range rc.TxtStrings {
+		l := len(rc.TxtStrings[i])
+		if l > 255 {
+			return fmt.Errorf("txt target >255 bytes and AUTOSPLIT not set: label=%q index=%d len=%d string[:50]=%q", rc.GetLabel(), i, l, rc.TxtStrings[i][:50]+"...")
+		}
+	}
+	return nil
+}

models/t_txt_test.go

@@ -0,0 +1,104 @@
+package models
+
+import (
+	"reflect"
+	"strings"
+	"testing"
+)
+
+func TestValidateTXT_single(t *testing.T) {
+	tests := []struct {
+		d1 string
+		e1 bool
+	}{
+		{`x`, true},
+		{`foo`, true},
+		{strings.Repeat(`A`, 253), true},
+		{strings.Repeat(`B`, 254), true},
+		{strings.Repeat(`C`, 255), true},
+		{strings.Repeat(`D`, 256), false},
+		{strings.Repeat(`E`, 257), false},
+	}
+	for i, test := range tests {
+		rc := &RecordConfig{Type: "TXT"}
+		rc.SetTargetTXT(test.d1)
+		r := ValidateTXT(rc)
+		if test.e1 != (r == nil) {
+			s := "<nil>"
+			if r == nil {
+				s = "error"
+			}
+			t.Errorf("%v: expected (%v) got (%v) (%q)", i, s, r, test.d1)
+		}
+	}
+}
+
+func TestValidateTXT_multi(t *testing.T) {
+	s1 := "A"
+	s253 := strings.Repeat("C", 253)
+	s254 := strings.Repeat("C", 254)
+	s255 := strings.Repeat("D", 255)
+	s256 := strings.Repeat("E", 256)
+	s257 := strings.Repeat("E", 256)
+	tests := []struct {
+		d1 []string
+		e1 bool
+	}{
+		{[]string{`x`}, true},
+		{[]string{`foo`}, true},
+		{[]string{s253}, true},
+		{[]string{s254}, true},
+		{[]string{s255}, true},
+		{[]string{s256}, false},
+		{[]string{s257}, false},
+
+		{[]string{s1, s254}, true},
+		{[]string{s1, s255}, true},
+		{[]string{s1, s256}, false},
+
+		{[]string{s1, s254, s1}, true},
+		{[]string{s1, s255, s1}, true},
+		{[]string{s1, s256, s1}, false},
+	}
+	for i, test := range tests {
+		rc := &RecordConfig{Type: "TXT"}
+		rc.SetTargetTXTs(test.d1)
+		r := ValidateTXT(rc)
+		if test.e1 != (r == nil) {
+			s := "<nil>"
+			if r == nil {
+				s = "error"
+			}
+			t.Errorf("%v: expected (%v) got: (%v)", i, s, r)
+		}
+	}
+}
+
+func Test_splitChunks(t *testing.T) {
+	type args struct {
+		buf string
+		lim int
+	}
+	tests := []struct {
+		name string
+		args args
+		want []string
+	}{
+		{"0", args{"", 3}, []string{}},
+		{"1", args{"a", 3}, []string{"a"}},
+		{"2", args{"ab", 3}, []string{"ab"}},
+		{"3", args{"abc", 3}, []string{"abc"}},
+		{"4", args{"abcd", 3}, []string{"abc", "d"}},
+		{"5", args{"abcde", 3}, []string{"abc", "de"}},
+		{"6", args{"abcdef", 3}, []string{"abc", "def"}},
+		{"7", args{"abcdefg", 3}, []string{"abc", "def", "g"}},
+		{"8", args{"abcdefgh", 3}, []string{"abc", "def", "gh"}},
+	}
+	for _, tt := range tests {
+		t.Run(tt.name, func(t *testing.T) {
+			if got := splitChunks(tt.args.buf, tt.args.lim); !reflect.DeepEqual(got, tt.want) {
+				t.Errorf("splitChunks() = %v, want %v", got, tt.want)
+			}
+		})
+	}
+}

models/target.go

@@ -23,6 +23,9 @@ so that it is easy to do things the right way in preparation.
 // GetTargetField returns the target. There may be other fields (for example
 // an MX record also has a .MxPreference field.
 func (rc *RecordConfig) GetTargetField() string {
+	if rc.Type == "TXT" {
+		return strings.Join(rc.TxtStrings, "")
+	}
 	return rc.Target
 }
 

pkg/js/helpers.js

@@ -416,6 +416,12 @@ function isStringOrArray(x) {
     return _.isString(x) || _.isArray(x);
 }
 
+
+// AUTOSPLIT is a modifier that instructs the Go-level code to
+// split this TXT record's target into chunks of 255.
+var AUTOSPLIT = { txtSplitAlgorithm: 'multistring' }; // Create 255-byte chunks
+//var TXTMULTISPACE = { txtSplitAlgorithm: 'space' }; // Split on space [not implemented]
+
 // TXT(name,target, recordModifiers...)
 var TXT = recordBuilder('TXT', {
     args: [
@@ -841,10 +847,12 @@ function SPF_BUILDER(value) {
         p.flatten = value.flatten.join(',');
         // Only add the raw spf record if it isn't an empty string
         if (value.raw !== '') {
+            rp = {};
+            rp.txtSplitAlgorithm = 'multistring'; // Split the target if needed.
             if (value.ttl) {
-                r.push(TXT(value.raw, rawspf, TTL(value.ttl)));
+                r.push(TXT(value.raw, rawspf, rp, TTL(value.ttl)));
             } else {
-                r.push(TXT(value.raw, rawspf));
+                r.push(TXT(value.raw, rawspf, rp));
             }
         }
     }
@@ -862,6 +870,8 @@ function SPF_BUILDER(value) {
         p.txtMaxSize = value.txtMaxSize;
     }
 
+    p.txtSplitAlgorithm = 'multistring'; // Split the target if needed.
+
     // Generate a TXT record with the metaparameters.
     if (value.ttl) {
         r.push(TXT(value.label, rawspf, p, TTL(value.ttl)));

pkg/js/static.go

@@ -212,131 +212,134 @@ var _escData = map[string]*_escFile{
 	"/helpers.js": {
 		name:    "helpers.js",
 		local:   "pkg/js/helpers.js",
-		size:    27948,
-		modtime: 1603735487,
+		size:    28419,
+		modtime: 0,
 		compressed: `
-H4sIAAAAAAAC/+x9aXcbN7Lod/2Kis67adJuU4tjzz3UcN5wtGR0Rtsh6VzP1dPjhdggCbuJ7gHQoplY
-+e3vYG2gF0rWmSRfnj8kbKBQKBQKtQAFKCo4Bi4YmYnoaGdnbw/O57DJCsAJESCWhMOcpDhWZauCC2AF
-hf9ZZLDAFDMk8P+AyACv7nGiwCUK2QIIBbHEwLOCzTDMsgT3fPyIYVhi9EDSDST4vlgsCF3oDiVsrBrv
-vknwwy7MU7SANUlT2Z5hlJSEQUIYnol0A4RyIauyORRc48KQFSIvBGRz2TKgugf/zIooTYELkqZAsaQ/
-axjdPZ5nDMv2kuxZtlopxmCYLRFdYN7b2XlADGYZncMAftkBAGB4QbhgiPE+3N7FqiyhfJqz7IEkOCjO
-VojQWsGUohU2pY9HuosEz1GRiiFbcBjA7d3Rzs68oDNBMgqEEkFQSn7Gna4hIqCojaotlDVS93ikiayR
-8qgmd4RFwSgHRAExhjZyNgwOWC/JbAlrzLChBDOcAM9gLsdWMDlnrKCCrBS3r9cU3PDmmeTwKkeC3JOU
-iI0UA55RDhkDMgeerTAkaAM8xzOCUshZNsNcycE6K9IE7mWv/yoIw0mvZNsCi+OMzsmiYDg50YQ6BjI1
-GMXHnj8rarAOxRVejyxjO7I+BrHJcQwrLJBFRebQkaVdbzrkNwwGEF0Orz4MLyLN2Uf1XzndDC/k9IHE
-2YcSc9/D31f/tbOiKC1nuZcXfNlheNE98scjMdWGcEL5jRGBJweRzXWvA0l8dv8Jz0QE338PEcmns4w+
-YMZJRnkkVYDfXv6T370QDgZyeldITIXoNNR3q4xJeP4SxgRirnmT8Pwp3lC81nJh2OLYW5GScogeWa6M
-F/dagvoQRXF9RfbLn3HAqz788ujDzzKW1JfvTbl6fXCzSieTiz7sxwGBHLOH2monC5oxnPi6p1olEFtg
-ESoEn11m3Z0gtuCdVWwWv+WVtA0ZA4xmS1hlCZkTzGIpV0QA4YB6vZ6DMxj7MENpKgHWRCwNPgukdEzf
-dirZUzBOHnC6sRBaPKU0sAVW3VCRKc4mSCAn1tMe4Wemx86qG0hsx4zBiCHglGPXaCgpqLSQQ+xIQf2k
-VoBfJf+FLLr9dOe4dOTgHpv6ulZjqXQ27eEvAtPEUNmTQ4thFVLrKZ0ly9YQ/ddwdHV+9WPf9OwmQyul
-gvIizzMmcNKHCF4H5FsNUCmO4MQKeKXGEKaXlh6cNhYnekmVK6oPxwwjgQHBydXYIOzBB46Vwc0RQyss
-MOOAuF0LgGgiyeeeVj9pW6tKe+gRD7asbE2mm0YCA9g/AgJ/9u1eL8V0IZZHQF6/9ickmF4P/pZUJ/qx
-3s2h7gaxRbHCVLR2IuFXMCgBb8ndUTMJq8ZepUzVDFuP0AR/uZ4rhnThu8EA3hx0a9Ija+E1RHLJJniW
-ImnHVxmTs4QoZHSGA2Pm9WP1rk9QnQwFo2iwfsXJ9PTj5PRKT2y3Dx/ypCongFLpGm4AJQlOtLY46XRj
-6SE49SvliOFs7slKgLlJTqYLLHQXZgEayiwbLeAAaJGmW9i1RhxoJkqebbBQ4quIkl4mzBCVEPcYCjXC
-REv/Sadr/NBewFmztLL7T71yiAPVoyzggnX2Y/2pBemN18Irhjdw8JtLvey0XfIPfkPJr/XsS+StgSHJ
-HQy8BkfSfKRYRByyB8zWjAithrRJ6RnJbJaOPkxkhEJWeYoVlaqlVbZIzJaELmRzlC4yRsRyBQXHCdxv
-SoHs9uAY0YQoSVdtMFdhE6KAv6CZ0IUSSzb38Efc+ETaNVbiJ42rZE6O/cWgm0kEQcseTJYY0kxGN6YT
-iUA7OlIky9XTPPpGbVuk6VGl+AJTJWStghdoji0CIcPBKznOQTi15O52V1K064mIjqS4DATGxXxOvsAA
-dnu78NphCWHnWUFLSH9pvQnQGPo8I66DXRWqEl6ZNTk5KjzWiM30Wv/HqhY1d9LNdgP8+jUkaDAIB1N1
-Njwa3EQiPbfMlGilXTCYFYxhKrWPnXafHhcBGFKs6vhLOZnVzksVpWe60vSoBVg59yTpA4nlYutX59R6
-9aGz5LlNvl+umzk7cno2/HAxGYMJBCQzOBYqTNVKq1QsIDJAeZ5u1I80hXkhCmZXGe9JfKfSk1UOqshK
-5GuSpjBLMWKA6AZyhh9IVnB4QGmBuezQd1ZMKxd21mPrtuXxpLL0Fbcyqr7W7Ibe2GRy0Xno9mGM9fbG
-ZHKhOtU2VntbHtka3IsMpYc6FjKK7zwEHuoDDNQOE11MspOCIeVjPwT62MyVRd5hfnvWEyKFATwcNQUc
-DZg99WPV5gAeeup3Z+//dv5P8rrbueWrZbKmm7v/3f1fe541dy3azPmDdX2koUZyTkkCiendkBMY6YIS
-AQOIeFTr5fbwzu/AQJaVQeQLA+kBc3xOhWt/YGdRDrZQC4f34SCGVR/e78ew7MPb9/v7dsUUt1ESSTNX
-9JbwCg5/cMVrU5zAK/iTK6Ve6dt9V7zxi9+/MxTAqwEUt3IMd0FM/eAWnwtHA0GzC88KXGnJ/FXit/2N
-pC4Jlk6vjJ5bhW+FPuPj4fAsRYuOWtyVTYFSoNXyCaRaL6gZQmp38+tAawe/m709OB4Op8ej88n58fBC
-RkdEkBlKZbHaFFXbgj6Mkp6SpgP485/hT129setv8ezajRCpjndj2O9KCMqPs4IqbbgPK4wohySjkZC+
-iTRYdttOaTVvF6HnN5bLwmI3SGRzlKb+dNa2m0zzhr0mi1htNxU0wXNCcRL5zHQg8ObgW2bY2zm5lWRI
-sTa4KhMx1GSSPDYzd2kiZmmzu2oehjAwdX8rSCpHFg0jw/vhcPgcDMNhE5LhsMRzcT4ca0R6J2YLMgna
-gE0WO3T//WF0OvWQmh20J3GX7Rp6KCuj2PBb+uN9uHW8v41kd1EM5fr1NptuI0lGFGvligQe/lwwPEwJ
-4pNNjkNIRWoTJvM/wRDl84yt+tXlGCuyYrf50bA8tQOm4LwNDA9Ad29B9NdR4MN5OzemDZKjmSI5nG7V
-ZaqDGGbcuT42uUdGbYOnGYmyDHqP1CHx3SjjOMU7j13/VKGZ/6Gqk2P8zlfDqjLkpV6FKOW4YXXeRsMo
-Bi3mMUTHV8PL0+jO7UWYzvRmhDtnePc2FFsjsFp828TWtaoLrav6d4ns6N3b31xg+e8lsezd2+3y6gBe
-Lq0OxbfJqhGG/76+Ou38nFE8JUm3FOBaVZt99sdV5cG24fsjN32owZvfTw29MmrTqm9/NAw7dECapO3f
-vDw7peyGG75D7yBDF6gVHJbp1VwtrMNdfqyWTD5OqkU3k1G1aHxzVisa/VQtuhqGTVu0i6rver6XtbSL
-WMG1a5bjJsOthlmefEyuT647IiWrbh/OBfClPZdEFDBjerdG9WOji33pdB0c/mfvZQoJLdorVT9/nBKa
-ISTQolRCiyfUlO8bawJt91fF6h6zBiqDVVD3uHnV5S71iZLZ5zlZCrRh5pXUW7/bGqnPeCNFqdzziyEh
-C8y10dI/NdqTuoXaPRnvvtQ06Y5NvWZYUO8IagfR1BkbtxUmJON3lKmE63FaIP3VAFbuuRpIV9AAXA7c
-QpclreAh6DeYYE8Kbyaj58ngzWRUl0Cp7wwipfw0qowlmMU5w3PMMJ3hWK2EWIZxZKZO4vCX/MkOFcJ6
-l0bJvlBGFWntslXS3A6jBtPegxllO4Ae/jaF+sd6bhTlgik+WTD10QxXMswClyXNLbRWNMDqoxnO8NFC
-ms9mWM1SC6q/XrYcxqOftAznjMjFuonXmCyWIs4zJp4U2fHop7rAKkfhheJqqWiXRk3eFonO2JbaP1rW
-OHuwQyzlR383werBWkj91YgzYw5K/n6hLIz/fnajpaG0pcqKPuGmqYYNgiCLXywKz7Cec0IXmOWM0C1T
-/ge7ZJwv5/k3mEYF7w3MaY6y6JucOju52lcqOFrgGDhO8UxkLHaHptpZmmEmyJzMkMBqYicX4wYHXJa+
-eFoVBe2zZSlrh/Ap/saFDirP1RuLyk/lgGBXw++6s5/fc+cg5UhxxUKpj0Ywy53SSOjvRmCfUbaBX/YC
-JVHmxRqeXjOdqfWlsgPgRcZfuvD1K5RJXV9cJDj5OHmeKzb5OGmQQhnIvnRTyUpHZRy/j2aQqlbovB5s
-DlM4iDWZ4b4PA2BnhOg8hzlhXJgGVcAvwiIywIQm5IEkBUptF72wzdX15LSvT7ExwyoDokw2OjCNYnfm
-wG1kndF0A2g2w5y3EhGDWBYciIAkw5xG6txbYAbrJRKwlqOWXRFqh1ih7e/ZGj9gFsP9RoHavHOfA5ru
-WCUfriSVmMM9mn1eI5ZUKAtTnNdLrHPoU0w7KtWxC4MBHKicoQ6hAlM51ShNN124Zxh9rqC7Z9lnTD3O
-YMRUprxhvMALc2wpMBe8V9sBMyvDW2ZtG4DbdxV9wFIABnDrQd89b5uwqaPb/bun+2okrLaXePmx4mU+
-teQvP9ZX/OXH39Cv/KM9w9WXptCixTV8ljt39cwTrauGffurcRnmXp6OT0c/nQZhs7cXXAHwN0iriRTw
-3QAaEh+jEkWpXXLBIaPYGWR1hq3ShKJvOIr0T1NVpoaf3g6P3cpxZEnItC1vw6PVpMr2mngx/S2O1H8B
-yqdCpH146InMIOtWN6/LrH8nslOB7lPspYtP1AnRbZqtVVrDkiyWfTiMgeL13xDHfXh7F4Ou/sFWv1PV
-5zd9eH93ZxGpvO/dA/gVDuFXeAu/HsEP8Cu8g18BfoX3uy6LIiUUP5V4U6F3W2oakdFvBT5IWZRAilwY
-AMl76md4HqOKqno3TEDXIE35Vxb1tLdCuYaLSykkTU38+xDF6jDJRId068laj93ep4zQThRHldpG/e0T
-Y9Fqsrdnc3k8kjPuuCQ/anyShU9ySgG18Mp04bglv/9QfhmCPI4p8p/HM6m0BnDrqMp7abbuxuAVyCXT
-devJrBxPPNVyMDeJsrUZAfwKUbdp4WtoA3QEkXOhz3+8uh7pTXVPJful5ZpPcM6wDO2SWKWOaKip1Fl+
-X15xmCxeq6h26FW1nAdWtHNwMSZITw+0ssE+GY5+PJ10agaoqToGNvHuhT2TDnMLx1iKXLmstB+cgvc1
-4tByKCIvb65Hk+lkNLwan12PLrXyTZU21+rJXRhQVrcKX7fBVYiq83Mb1bqIpNaOTNax+i1EGvo8/05v
-Jvpr9IRrYtNEq84OFsiQX6pvdcBbGi/t2lRH2K13qLIYNbRI6/v9H0Y/nnY8cdEFTgKS3j8wzj/QzzRb
-U0mAPq81/sD1tNbelbWiEKxwGIYfJtcnV+Px6bEiBrMVEQInNmcVMdyXFbu7ACeZOp1UfN/o2BALISOd
-jpfPpzLKdjO6CwCnVLLE68Mk+hFuL3Qp2PlcYif8KWA3xBJmen1lx5n0UCGyaUI5xzMYKBrkKBtbnZ21
-N5vP29rZNrOM8kza/2yhj8l33cUqj3x1TcaqtB6cC32+uwYENHuT5T2AmxRLPS+1XTAmyFiFXJ2cb3Mm
-icpSXqHPGGhmVsJMSSHv6SsIK8zVlo3KSU4IR3mOpVtCAdmEZoZV7z3pAxkl+urVDryCv5Zk78CrveDa
-rHPPO3oVcoGYCFJvs6TVjVLALoe5NX1ZXeuyectByrKnKyWQT/RIrTZ9ke1eqyg1FnV7DH7RDuyjrvdg
-m2CyXPCe6vrudv8OhtbDl1rFh7d8GYRNDu7gOtcRuk3UyNi2dk7PgL2LWOagB2npNhsbXllWTaQItOa1
-Ie7lisOQbkqlqQXjHnu4ZIcEJ+bGkblrbwjqeakLq0IgcydmQR4w9clqZY0cjJWdhmGWdIlMYdY4Q/EL
-7Y/eEZbYrezI38qJM8uEd3551BCxJ13OOjVE5GWcLe1QGQa+zBgZv0ZDaoYv0QP2BuvurmnWV1tK3Hai
-AFFzBUmtKe9SpMmMbdoJaY/qfQ9ZW96t2z1NBtR6k367Zzq4z9498jxcbz4CaWqYk9bZaArqHHCbOgqu
-oGUJDMomKqKrAdZvFmdJty2CWGWJTRNviB2abwJvQbe3B/oOvSilVi0qsyPW2EhdTcgSTxF9/723Ix5U
-tfZsBuMhCS74BziOGjE8Npa6m86eb6amuJ1fzQSazZzT0eh61AfrDgVXoKMGlO3yqKM7IwBVF766IaDu
-cCTmds8vj+FGQKkRzAMf/szUdqn+XJobe/usMmSJ0zW7ICozxbWpDVEFvWWsK/DqiXBXgtQ2XzU36shN
-8AvV6FdPh7LHr2utIqs1zeMdvHa93Cp8nw2NiEoL2mnCEbKpAUG3B9c03cDWxtsIUE+f8EKr+Ki6Yy0Z
-6m9M7wQrOU2lwnfd7GxTZFVuNCoyIxkn0mYQZVU9yQg2qCy0Tk1su3nrCWmJs7wjeNAkSdImFrT0jdRL
-LkWDCXSJrAH224O7hnTWZ4tWTcSiLUBhx/t3W/G5rWAzMrXZiUham/VtekVdZ3a64rZKgIxBvQP0dplx
-KqVZZhqE5Tk3C/0UzPa7hRWqtu5ulM/eqMkYNEyp98hLra7+WIprJdJ+cJ0rBHmsGO66m9rgThzVmzij
-5sDL2QubVr27vyOapNi7+K0fL3D3tHn9Em7i3ff//nvnRklB/24A0fHZdHR6cj46PZ5E8P33LSq81mZy
-enlTNtzi+vmPDXhfR42LNnBB1V5Mu1XxndWtiLcaeB/P6wFEvQheP4GusgjDB0x69gDFPKjU4KQZ0dZ1
-nvAHO4RPRNUoSXRA2knsTZbwdosMdb19UjKH8tydKt89BsR5scJAcomOYc57zg8k5vS64u43ePo11z7w
-6v0nqmbBQm1aoE3PIWl0bsNy5xlL1R4xBi8ZhYveMLv5kaEEz0iC4R5xnICMOCWpFv6Ni0Ttc0Ncr8Ey
-ApUxtPwK8m5U0+vGJ4YkbPDMkIK12ernZ3D5scSsp0zNox3njueP88bXhcLQ5Uljv9LxSrPV3vL+UfkO
-EsOz5rhu6wNFLw5I1OBbQ5FnBCKrthBkawBSDz78wKPyvtI3grVqrdpGYs2pcBuLl61PNUVxsxNkHmxq
-ro06488kzwldfNeNahDd57y0UNeP4aNqDM/sLjPJoXzZzTkCHOYsW8FSiLy/t8cFmn3OHjCbp9m6N8tW
-e2jvPw/23/3ph/29g8OD9+/3JaYHgmyDT+gB8Rkjueih+6wQqk1K7hlim737lORG7npLsfJOY246SRbs
-WCbq/RfR43lKRCfq2UBlbw9yhoUgmL3RJzDB/Sj173Vyu3/XhVdw+O59F16DLDi461ZKDmslb++6lffm
-7EFfsfIP5WmxUheg3f3nhhtcUVR94ck7ypf4GtrQYlV7Xk/rffgPSWfD5u1bqXP+olTPmzfBLWxJI1wi
-sezN0yxjiug9NdpSjCT2jkMv2WDMc8PWbuKuYqVZkcxT9fhNShDHvK+zdbBA9vCBKyq9bDKX9aAu6pxN
-b0bXH/85vT47U1ftZg7lNGfZl00fomw+j+BRvftzI4vUdvl9ipMqiqtWDDREgGlT+7MPFxdtGOZFmgY4
-Xo8QSRcFLXHp45k39jEhnwXqiMbQbk4Isvlcm0MqiHu8JDyo6YfkmQdJWjk1Ne1KjjX0SuudtnVz9WQv
-1HbygRKpO1A6Hl80j8x18uHq/KfT0Xh4MR5fNA2lsKg4T8ORhJ3QZ/dx9VQXehhKnj+MJ9eXMdyMrn86
-Pzkdwfjm9Pj87PwYRqfH16MTmPzz5nTsaYWpvehZroQR1k/f/puve6oG7npkFEddpXfM1WszcBsjNNx8
-8yKP9hw4/ShwFG8bV3i1DHNBqIqkn9Xq9z08Nm8cv4YolqpMHyiXFIdHvYaFQazVyMcwGvv/zGxj5ofR
-RZ1/H0YX0nyb+rf7B40gb/cPLNTZqPEmpyq2KYbjm7Pp3z6cX8gVK9BnzMuzGKV5c8QE76sDWvXTvss2
-vjmzvn5HZHCP4VMmbbiOMSKIukqrp+gep7r5ydVYf7oXcXJGVohtPFw96JQ68q+ROm9naN2H/1J50h39
-3rLC0tV+dqYfjysoSvXjy9YR8+i0pkRRpOIxSY8gK6xIkTGZzhzGTL2sqNSMT4p+4VD5KLF5ibt8vEcR
-qfwrgxev8hQJjRslCTHHpfZxT82tmXoVNPHHO+X5/D8SPeh5ioTAtA9DSAkX/pvTur0BMMZTupZLjJKD
-PgxXmXodHHbvi/kcM2BZttrVJ6wqG1NFii6fmwi8cu+a53OYLdUjRZJRX8Ql+jImP2M9rhX6QlbFCjj5
-GZfR6OTjxDHsJ51XIYmBw3fv9Okew1yd6lNYFakgeVqm3XtjP3z3Lup6xsETywZjoBW6lsevX8H7LI8R
-DhtyXX1hd5vvSECKERdwCNi8bFhzOk2PRvD8ww9X7CuCWkOG1jLWKz++GwwgiuqoZN0AoilDa57PHTpt
-zfQBikohXWInF55caXund0RyfRRjoaVP5Z2ryrWDhRUF5T/JmXSn3bI7RYLdkjXsNWlwUdchLldeuNR2
-yqf6jKzKZaPeXPxXgbnKhLMv0gPyevd2KdC6gtSyVZNk8JacNQXlFv1+8J6nazCowDfkMO7t6ZMRlCSO
-FskOQ6N935lGQr11sMrFpno7pCS0ecZDGCHSxt1JHYBOPk5KXLGZm1i/WOead599RL0FaffJ+NibWRvS
-ynlVz9TPiZxX7ddrpShnrjpxtlk4OwrczY2FCZZAiEJpvBCHKw7wqJIWRKWaCzGV5Q5VWXRUYcWP2wU5
-XHxVblRmvjY5Sr2Uc563TXttup/EVOa7Bnsb/ktt23yDrcb9eDjcYtRJluC5bjrLqNBviJK03ODtZCbN
-qASfzsxbcX34W5alGFF1uIZpov7MAlYXcY2CIQwnexa+J0VV2nC3rxTctvSeLWF4XnCc1LrnvMB9uDAa
-93ho//KDjt7TbK3/0oaC81Hzyut/0NF2X1+vMGJiban2mBSONUmTPgwN5rK/mRyz6kRCzBBLmnpzWYW9
-7f159tab6lZ7+3zrVxFwTbHT0vpTqkOaURx1w2K4jY6iu6MmFHLMFTSqqBmVrrLoHD5HvR2Wo+67SuMu
-fP1aQofAla1oV2VNz2AA+1vAzEi2VfuYdOZBg0Pjr9C6QyPnHFPBNrJIU56xUsBe6l1Up0auzepbU16V
-W7b1h6aUejoeDkP1FKlmUQwekjh4EtK3US2PUD0fdbf+NwoaBbjbclwRQ+q5FL4U6IOMFFN9gPFMCiWC
-kkL5dUvuut2jnbYl8Q2EeYL1cuKU7MRVtD6RVUMyVpYdwck/zi/tDVL3FzL+cvjuB7jfCBz8uYN/nF92
-EHNvmM2WBf1sjPHhu3flA7Gj1mtNdviIsYYhw+tBibQc/cie+7MeT8kMd0gsYT3Q8BxgZIfo0j7XDOU5
-ZoqYRZrdd7rqp/d3PCDNkDJZc5JiHZQOeemHOx50CIUfs67kETGvWWdUsCwFRDdrtInVC86ynUlod3eJ
-beolR5SIzZvZEs8+m0jxKhO4bwkj3Nz5oyr+ZTJMLWiSzdRxIE5giVM1FpcpO85UQjdRocNG0pStKTDC
-P/f8XFaliaamF7fJY1IpDu9gALuf+O6ROdecYaleFCWEztIiwdD7xC173KPl8hMGinadzNChRZrGJWb/
-uX/vJFHjaTlKNLR2FFBLOraqs6KMhdsRNmyX/R1fnEsiifR7uWdWL86n7jFsm7lru3fi+hmrC8zV+sqb
-sdKu337Gmzu1ebnrTk12q3rVA3Q41XdNzT3u/L8AAAD///wzemcsbQAA
+H4sIAAAAAAAC/+x9aXcbN7Lod/2Kis67adJuU4ujzD3UcN4wWjI6o+2QdK7n6unxQmyQhN0EegC0aCZW
+fvs7WBu9UbJPli/PHxI2UCgUCoVCVaEARbnAICQnMxkd7+zs7cHFHDYsB5wQCXJJBMxJimNdtsqFBJ5T
++J8FgwWmmCOJ/wckA7x6wIkGVyhUCyAU5BKDYDmfYZixBPdC/IhjWGL0SNINJPghXywIXZgOFWysG+++
+SfDjLsxTtIA1SVPVnmOUFIRBQjieyXQDhAqpqtgccmFwYWC5zHIJbK5alqjuwb9YHqUpCEnSFChW9LOG
+0T3gOeNYtVdkz9hqpRmDYbZEdIFFb2fnEXGYMTqHAfyyAwDA8YIIyREXfbi7j3VZQsU04+yRJLhUzFaI
+0FrBlKIVtqVPx6aLBM9RnsohXwgYwN398c7OPKczSRgFQokkKCU/407XElGiqI2qLZQ1Uvd0bIiskfKk
+J3eEZc6pAEQBcY42ajYsDlgvyWwJa8yxpQRznIBgMFdjy7maM55TSVaa2zdrCn54c6Y4vMqQJA8kJXKj
+xEAwKoBxIHMQbIUhQRsQGZ4RlELG2QwLLQdrlqcJPKhe/50TjpNewbYFlieMzski5zg5NYR6BnI9GM3H
+XjgrerAexTVejxxjO6o+BrnJcAwrLJFDRebQUaXdYDrUNwwGEF0Nr98NLyPD2Sf9XzXdHC/U9IHC2YcC
+cz/A39f/dbOiKS1muZflYtnheNE9DsejMNWGcErFrRWBZwfB5qbXgSKePXzAMxnBt99CRLLpjNFHzAVh
+VERKBYTt1T/13SvDwUBN7wrJqZSdhvpulTGJyL6GMSUxN7xJRPYcbyheG7mwbPHsrUhJMcSALF8m8gcj
+QX2Iori+IvvFz7jEqz788hTCzxhP6sv3tli9IbhdpZPJZR/24xKBAvPH2monC8o4TkLdU62SiC+wLCuE
+kF123Z0ivhCdVWwXv+OV2hsYB4xmS1ixhMwJ5rGSKyKBCEC9Xs/DWYx9mKE0VQBrIpcWnwPSOqbvOlXs
+ybkgjzjdOAgjnkoa+ALrbqhkmrMJksiL9bRHxLntsbPqliS2Y8dgxRBwKrBvNFQUVFqoIXaUoH7QKyCs
+Uv/KLLr7cO+5dOzhnpr6utFjqXQ27eFPEtPEUtlTQ4thVaY2UDpLztYQ/ddwdH1x/WPf9uwnwyilnIo8
+yxiXOOlDBK9L5DsNUCmO4NQJeKXGEmaWlhmc2SxOzZIqVlQfTjhGEgOC0+uxRdiDdwLrDTdDHK2wxFwA
+Em4tAKKJIl8EWv20ba1q7WFGPNiysg2ZfhoJDGD/GAj8Ndz3eimmC7k8BvL6dTghpekN4O9IdaKf6t0c
+mm4QX+QrTGVrJwp+BYMC8I7cHzeTsGrsVclUbWPrEZrgTzdzzZAufDMYwJuDbk16VC28hkgt2QTPUqT2
+8RXjapYQBUZnuLSZBf04vRsSVCdDw2ganF1xOj17Pzm7NhPb7cO7LKnKCaBUmYYbQEmCE6MtTjvdWFkI
+Xv0qOeKYzQNZKWFukpPpAkvThV2AljLHRgc4AJqn6RZ2rZEAymTBsw2WWnw1UcrKhBmiCuIBQ65HmBjp
+P+10rR3aK3HWLi328KFXDHGge1QFQvLOfmw+jSC9CVoExfAGDn53qVedtkv+we8o+bWeQ4m8szAkuYdB
+0OBYbR8plpEA9oj5mhNp1JDZUnpWMpulow8T5aGQVZZiTaVu6ZQtkrMloQvVHKULxolcriAXOIGHTSGQ
+3R6cIJoQLem6DRbabUIU8Cc0k6ZQYWHzAH8krE1kTGMtfmpzVczJcLgYTDOFoNSyB5MlhpQp78Z2ohAY
+Q6dkPjcPvlHZ5ml6XCm+xFTLWKvclRTHFnlQ3uC1GuagPLPk/m5XUbQbSIhxpITyA8b5fE4+wQB2e7vw
+2mMpw85ZTgvIcGW9KaGx9AV7uPF1tadKRGXS1Nxo79ggtrPrzB+nWfTUKSvbD/Dz5zJBg0F5MFVbI6DB
+zyMyU8ttidHZOYdZzjmmSvm4WQ/p8Q6AJcVpjr8Vk1ntvNBQZqYrTY9bgLVtT5I+kFittX51Tp1RX7aV
+AqspNMtNM7+NnJ0P311OxmD9AMUMgaX2Uo3OKvQKSAYoy9KN/pGmMM9lzt0iEz2F70wZsto+laxAviZp
+CrMUIw6IbiDj+JGwXMAjSnMsVIehrWJbea+z7lq3LY9ndWWot/WeGirNbtkYm0wuO4/dPoyxiW5MJpe6
+U7PFGmMrINuAB46hMlDHUjnxnceSgfoIAx1goosJO8050ib2Y0kd27lyyDs8bM97UqYwgMfjJn+jAXOg
+fpzWHMBjT//u7P3fzv9JXnc7d2K1TNZ0c/+/u/9rL9jMfYu23fzRWT5qn0ZqTkkCie3dklPao3NKJAwg
+ElGtl7vD+7ADC1lUlhxfGCgDWOALKn37AzeLarC5XjiiDwcxrPrw/X4Myz68/X5/362Y/C5KIrXL5b0l
+vILD73zx2hYn8Ar+4ktpUPp23xdvwuLvjywF8GoA+Z0aw33JpX70i897oyVBcwvPCVyxkYWrJGz7O0ld
+Ulo6vcJ5bhW+FfqIT4bD8xQtOnpxV2IChUDr5VOSarOgZgjp4ObngdEOYTd7e3AyHE5PRheTi5PhpXKO
+iCQzlKpiHRPVUcEQRktPQdMB/PWv8JeuieuGEZ5dFwdR6ng3hv2ugqDihOVUa8N9WGFEBSSMRlKZJmrD
+clE7rdWCIEIvbKyWhcNukajmKE3D6axFm2zzhlCTQ6yjTTlN8JxQnEQhMz0IvDn4khkOAid3igwl1hZX
+ZSKGhkySxXbmrqzDrPbsrp6HIQxs3Q85SdXIomFkeT8cDl+CYThsQjIcFnguL4Zjg8gEYrYgU6AN2FSx
+R/ff70Zn0wCpDaA9i7to19BDURnFlt/KHO/Dnef9XaS6i2Io1m8Qa7qLFBlRbJQrknj4c87xMCVITDYZ
+LkNqUpsw2f9JjqiYM77qV5djrMmKfeyjYXkaA0zDBfGLAMB070DM13HJhgsCN7YNUqOZIjWcbtVkqoNY
+Ztz7PjZZQEYtvtOMRO8MJkTqkYRmlDWc4p2nbnio0Mz/sqpTY/wmVMO6ssxLswpRKnDD6ryLhlEMRsxj
+iE6uh1dn0b0PRdjOTCzCHzMcvS2LrRVYI75tYutb1YXWV/1WIjs6evu7C6z4oySWH73dLq8e4Oul1aP4
+Mlm1wvDfN9dnnZ8ZxVOSdAsBrlW17c/huKo82Db8cOS2Dz14+/u5oVdGbVv13Y+GYZcNkCZp+42XZ6eQ
+3XK8dxicY5gCvYLLZWY1VwvrcFfvqyWT95Nq0e1kVC0a357XikY/VYuuh+WmLdpF13cD28vttItYw7Vr
+lpOmjVsPszj4mNyc3nRkSlbdPlxIEEt3LIkoYM5NsEb347yLfWV0HRz+Z+/rFBJatFfqfv48JTRDSKJF
+oYQWz6ip0DY2BLrur/PVA+YNVJZWQd3iFlWTu9AnWmZfZmRp0IaZ11Lv7G63SX3EGyVKRcgvhoQssDCb
+lvlp0J7Wd6jd0/Hu125NpmNbbxhWqvcEtYMY6uwetxWmTMYfKFOJMON0QOarAawIuVpIX9AAXAzcQRcl
+reBl0C/YggMpvJ2MXiaDt5NRXQKVvrOItPIzqBhPMI8zjueYYzrDsV4JsXLjyEwfxOFP2bMdaoT1Lq2S
+/UoZ1aS1y1ZBczuMHkx7D3aU7QBm+NsU6p9ruVGUSa755MD0RzNcwTAHXJQ0tzBa0QLrj2Y4y0cHaT+b
+YQ1LHaj5+rrlMB79ZGQ440Qt1k28xmSxlHHGuHxWZMejn+oCqw2FrxRXR0W7NBrytkg041tq/2xZE/zR
+DbGQH/PdBGsG6yDNVyNOxj2U+v2VsjD+x/mtkYZiL9W76DNmmm7YIAiq+KtF4QW755zQBeYZJ3TLlP/J
+JpkQy3n2BVujhg8G5jVHUfRFRp2bXGMr5QItcAwCp3gmGY/9makxlmaYSzInMySxntjJ5bjBAFelXz2t
+moL22XKUtUOEFH/hQged5hqMRaenCkCwa+B3/dnPHxk5SAXSXHFQ+qMRzHGn2CTMdyNwyCjXICz7CiVR
+pMVant5wk6j1qRIBCDzjT134/BmKnK5PxhPUcdJ3k5vx7eXFxByfFslSSyR13jHPZ/aI/0f2JsWPONVJ
+zCCZai6y1OVST95P7CgiYaNWJiNttszpRwFsDodHRz0TZfW96ojIJzlWeIZuRfYhWuWpJPbICZ50woJN
+oDo8OnrzsJHY4t3Z29PL5P3k6t3l5GJ8Ozw5a8UqMjTDDp+uBUZBl8Kd8kt9VgNO7s3Z4fvJy2xVNfz6
+MlWe/tdG3dzyqUz0H6M6FX+kyXvC9rRJgFyTGe6HMABOZIkRkjnhQtoGVcBP0iGywIQm5JEkOUpdF71y
+m+ubyVnfHPNjjnWGSJGMdWAbxf5QRrjQA6PpBtBshoVoJSIGucwFEAkJw4JGOjFAYg5rJfprNWrVFaFu
+iBXa/sHW+BHzGB42GtTl5YccMHTHOjlzpajEAh7Q7OMa8aRCWTkFfL3E5o5BimlHp4J2YTCAA51T1SFU
+YqqmGqXppgsPHKOPFXQPnH3ENOAMRlzfJLCMl3hhz3UlFlL0aiFCqzoCPdQWId0edg0BCwEYwF0Aff+y
+OGpTR3f798/31UhYLdh69b5ihj+35K/e11f81fvf0fD+s03n1acm36vFdn6RvXv9wiO/64aDjetxEQe4
+OhufjX46K8UVgmB5BSCMIFczTeCbATQkhkYFikK7ZFIAo9hbLPqQX+dRRV9wVhseN+tUljD9H566lfPa
+gpBpW2JLQKtNJe418WL6e+Qc/AJUTKVM+/DYk8wi61aj+8WtCC+yU4keUhyk00/0EdpdytY672NJFss+
+HMZA8foHJHAf3t7HYKq/c9VHuvritg/f3987RNoK2T2AX+EQfoW38OsxfAe/whH8CvArfL/r00xSQvFz
+mUkVerfl7pEMBlX4UkqnAtLkwgBI1tM/ywdWuqiqd8sJ+gakKUHNoZ72VigzcHEhhaSpSXhfJF8dJkx2
+SLeezfbU7X1ghHaiOKrUNurvkBiH1pC9Pd0t4JGacc8l9VHjkyp8llMaqIVXtgvPLfX9p/LLEhRwTJP/
+Mp4ppTWAO09V1kvZuhtDUKCWTNevJ7tyAvHUy8HetGJrOwL4FaJu08I30BboGCJ/2nTx4/XNyJw6BCo5
+LC3WfIIzjpXvm8Q6t8ZATZXOCvsKisvJ9LWKaodBVcuBaUU7ly4OldL3S1rZYp8MRz+eTTq1DaipOgY+
+Ce7NvZAOe0vJ7hSZNllpv5Qm0DeIyzuHJvLq9mY0mU5Gw+vx+c3oyijfVGtzo578hQq961bh63twFaJq
+/NxFtS4ipbUjm5Wtf0uZlm2e39Kaif4ePWOauDzaqrGDJbLkF+pbn4AXm5cxbaoj7NY71GmeBlqm9QOR
+d6MfzzqBuJgCLwFJ758YZ+/oR8rWVBFgDrStPXAzrbX3Za0oJM89BuWNn16Px2cnmhjMV0RKnLikXsRx
+X1Xs7gKcMn18q/m+Mb4hllJ5Op0g4VGn3O0yugsAZ1SxJOjDZkIS4S68adj5XGEn4jlgP8QCZnpz7caZ
+9FAu2TShQuAZDDQNapSNrc7P25vN523tXJsZo4Kp/Z8tTB7Brr94FpCvrxE5ldaDC2kOwNeAgLI3LOsB
+3KZY6Xml7UpjAsYr5JrLCy6plOg07hX6iIEyuxJmWgpFz1zRWGGhY1o6aTshAmUZVmYJBeQyvjnWvfeU
+DWSV6KtXO/AK/l6QvQOv9krXir153jGrUEjEZSk3mSWtZpQG9knerfnd+tqbS+wu5XQHulIBhUSP9Goz
+F/0ejIrSY9G36+AXY8A+mfoAtgmGZVL0dNf3d/v3MHQWvtIqIbzjy6Dc5OAebjLjobtMFsa3tfN6Btxd
+zSJJv5S379LV4ZVj1USJQGviHxJBMj0M6aZQmkYwHnCAS3VIcGJvZNm3CCxBvSC3Y5VLZO8MLcgjpiFZ
+raxRg3Gy0zDMgi7JNGaDsyx+5f3HhMwVdic76rc24uwyEZ1fngxEHEiX350aPPLCz1b7UOEGft1mZO0a
+A2kYvkSPOBisv9tnWF9tqXC7iQJE7RUtvaaCS6M2dbgpEtLu1YcWstl5t4Z7mjZQZ02G7V5o4L44ehRY
+uMF8lKSpYU5aZ6PJqfPAbeqodEWPJTAommiPrgZYv3nNkm6bB7Fiicujb/Admm9Kb0G3twfmjQFZSK1e
+VDYi1thI391gSaCIvv02ODIoVbX2bAcTICk9gFDCcdyI4amx1N8ED2wzPcXt/Gom0AZzzkajm1EfnDlU
+uiIeNaBsl0fj3VkBqJrw1YCAvuSS2OtPvzyVAwGFRrAPoIQzU4tS/bXYbtz1vMqQFU7f7JLo1B3fpjZE
+7fQWvq7Eq2fcXQVSC74abtSRW+cXqt6vmQ69H7+utYqc1rSPm4ja9Xun8EM2NCIqdtBOE44ymxoQdHtw
+Q9MNbG28jQD9NIzIjYqPqhFrxdAwML1TWslpqhS+72ZnmyKrcqNRkVnJOFV7BtG7aiAZpQCVgza5m203
+kwMhLXAWlygPmiRJ7Yk5LWwj/dJN3rAF+kzfEva7g/uGfN8Xi1ZNxKItQOWO9++34vOhYDsyHexEJK3N
++ja9oq97e11xVyVA+aBBhkG7zHiV0iwzDcLykquXYY5q++XLClVboxvFs0B6MgYNUxo8glOrqz8m41vJ
+tF+671YGeaps3HUztcGcOK438ZuaBy9mr9y0at39A9EkxcHFePO4g7/HLuq3lJPgPYRvv/VmlBL0bwYQ
+nZxPR2enF6Ozk0kE337bosJrbSZnV7dFwy2mX/gYQ/B13LhoSyaojsW07yqhsboV8dYNPsTzegBRL4LX
+z6CrLMLyAy89d4BiH5xqMNKsaJu6QPhLEcJnvGqUJMYh7STuqk/5+o9ydYM4KZlDce5Ote0eAxIiX2Eg
+mULHsRA9bwcSe3pdMfcbLP2aaV+y6sMnvGalhdq0QJueizLofMBy5wVL1R0xll56Ki96y+zmR5gSPCMJ
+hgckcALK41SkOvg33hN1zzEJswYLD1T50OqrlJikm940PsGkYEvPMGlYl85/cQ5X7wvMZsr0PLpx7gT2
+uGh8fansujy72a+Mv9K8a295H6p4J4rjWbNft/UBp692SPTgW12RFzgiqzYXZKsDUnc+Qsej8v7UF4K1
+aq1aILFmVPjA4lXrU1ZR3GwE2QetmmujzvgjyTJCF990oxpE9yVPUdT1Y/nROY5nLspMMihevvOGgIA5
+ZytYSpn19/aERLOP7BHzecrWvRlb7aG9/zzYP/rLd/t7B4cH33+/rzA9EuQafECPSMw4yWQPPbBc6jYp
+eeCIb/YeUpJZuest5So4jbntJKwUsUz0+ziyp/PZOlHPOSp7e5BxLCXB/I05gSldINP/Xid3+/ddeAWH
+R9934TWogoP7bqXksFby9r5beY/PHfTlq/BQnuYrfUPcXxBvuOIWRdUXsIKjfIWvoQ3NV7XnB43eh/9Q
+dDYEb98qnfM3rXrevCldU1c0whWSy948ZYxrovf0aAsxUtg7Hr1ig92eG0K7ib+rlrI8maf6caCUIIFF
+32TrYInc4YPQVAbZZD7rQd9kOp/ejm7e/2t6c36uMwNnHuU04+zTpg8Rm89dWuCtKtLh8ocUJ1UU160Y
+aBkBpk3tz99dXrZhmOdpWsLxeoRIushpgcscz7xxjy2FLNBHNJZ2e0LA5nOzHVJJ/Osu5YOafpk8+2JL
+K6emtl3BsYZeab3Ttm6un+2Fuk7eUaJ0B0rH48vmkflO3l1f/HQ2Gg8vx+PLpqHkDpUQaXkk5U7oi/u4
+fq4LMwwtz+/Gk5urGG5HNz9dnJ6NYHx7dnJxfnECo7OTm9EpTP51ezYOtMLU3YQtVsIIm6eBf+P7sLqB
+vz8axVFX6x17N90O3PkIDVcDA8+jPQfOPJocxdvGVb57h4UkVHvSL2r1xx4e2zegX0MUK1VmDpQListH
+vZaFJV+rkY9lb+z/M7ONme9Gl3X+vRtdqu3b1r/dP2gEebt/4KDOR41XXXWxSzEc355Pf3h3calWrEQf
+sSjOYrTmzRCXoq8PaPVP927d+Pbc2fodyeABwwem9nDjY0QQdbVWT9EDTk3z0+ux+fRPBmWcrBDfBLh6
+0Cl05N8jfd7O0boP/6XzpDvmPWqNpWvsbGYe18spSs3j1M4QC+h0W4mmSPtjih5JVliTonwykzmMuX55
+UquZkBTzAqS2UWL7UnnxulHX3xewePEqS5E0uFGSEHtc6h4/Ndya6aT/JBzvVGTz/0jMoOcpkhLTPgwh
+JUKGb3Kb9hbAbp7KtFxilBz0Ybhi+vV02H3I53PMgTO22jUnrDobU3uKPp+bSLzy775nc5gt9StOilGf
+5BX6NCY/YzOuFfpEVvkKBPkZF97o5P3EM+wnk1ehiIHDoyNzusex0Kf6FPTVhywt0u6DsR8eHUXdYHMI
+xLJhMzAK3cjj588QfBbHCIcNua6hsPvgO5KQYiQkHAK2Lz/WjE7boxW88PDDF4eKoNaQo7Xy9YqPbwYD
+iKI6KlU3gGjK0Vpkc4/O7GbmAEWnkC6xl4tArsx+ZyIimTmKcdDKpgrOVdXawdKJgrafinsuBoEhwYVk
+LXttGlzU9YiLlVdeajvFW4ZWVtWy0W9S/jvHQmfCuRf7AQW9B1EKtK4gdWw1JFm8BWdtQRGi3y+9d+ob
+DCrwDTmMe3vmZAQliadFscPS6N6/ppHUj0GsMrmp3g4pCG2ecc3krHJiZgp7tUs+SirCu0PBTR9Fngua
+zfW1M5zUw6uGEinTxhiocXMn7ycFxbGVgBh4FpvHAz2K7osPw59B3H3WGw/kyDnQSor0Hw2YEyVFxosw
+KljJSVVMXLOyLJgbXk4SHExpwZVRaP1axuGLS3h0SQuiQqmWMRXlHlVRVML1W8iG4+mP29dfWWdU2VoR
+pdpMa61YzHWrDNVk51lMRZpuKSQTvsC3zaTZapOcDIdbbBHCEjw3TWeMSvM2LEmLuHSH2eyoAnw6s28A
+9uEHxlKMqD4TxDTRfz0D6wvWVi8SjpM9B99TMq9MDx8OK92iDZ6j4XieC5zUuhcix324tBvFydD9QQ8T
+dEjZ2vwBFQ0XohaVVx2hY8wVcyvEiokzAYyhp3GsSZr0YWgxF/3N1Jh1JwpihnjS1JtPhuxt7y8wE4Kp
+bjUTXr5pVwTcUOw3F/OptDhlFEfdcjHcRcfR/XETCjXmChpd1IzKVDl0Hp+n3g3LU/dNpXEXPn8uoMvA
+lQi6r3I75mAA+1vA7Ei2VYeYTMJEgx0WrtC6HabmHFPJN6rIUM54IWBfaxRVp0atzeobYkGVX7b1B8S0
+ejoZDsvqKdLNohgCJHHpqc9ws2t5XOzlqLv1Pz3RKMDdllOWGNLAEgqlwJy/pJiac5cXUqgQFBSqrzty
+3+0e77QtiS8gLBCsrydOy05cRRsSWd1IzBaK4PSfF1fu4qv/wyd/Ozz6Dh42Epf+isU/L646iPu36fRV
+brurHx4dFQ//jlpvY7nhI84bhgyvBwXSYvQjl67AeyIlM9whsYINQMvHFyM3RJ+tuuYoyzDXxCxS9tDp
+6p/Bn2eBlCG9Zc1Jio0vPRSF++B50CEUfmRdxSNiXylnVHKWAqKbNdrE+mVu1c7m4fsr0C5jVCBK5ObN
+bIlnH62De80k7jvCiLBXFal227nyrnOasFlubrjDEqd6LD7Bd8x0Hrq5Fr9RNLE1BU7Ex16Ygqs10dT2
+4mNTNgPk8B4GsPtB7B7b49gZVupFU0LoLM0TDL0PwrHHP0avPmGgaTc5GB2ap2lcYA7/ikNwAGrwtJyA
+Wlo7Gqgli1zXOVHG0geyLdtVfyeXF4pIogxoEWyrlxdT/8i5Szh23Xtx/Yj1vetqfeUtYLWv333Em3sd
+c931hz27Vb0aAHqc+rum5p52/l8AAAD//0o7eJQDbwAA
 `,
 	},
 }

pkg/normalize/flatten.go

@@ -19,6 +19,7 @@ func flattenSPFs(cfg *models.DNSConfig) []error {
 		// flatten all spf records that have the "flatten" metadata
 		for _, txt := range apexTXTs {
 			var rec *spflib.SPFRecord
+			txtTarget := strings.Join(txt.TxtStrings, "")
 			if txt.Metadata["flatten"] != "" || txt.Metadata["split"] != "" {
 				if cache == nil {
 					cache, err = spflib.NewCache("spfcache.json")
@@ -26,13 +27,13 @@ func flattenSPFs(cfg *models.DNSConfig) []error {
 						return []error{err}
 					}
 				}
-				rec, err = spflib.Parse(txt.GetTargetField(), cache)
+				rec, err = spflib.Parse(txtTarget, cache)
 				if err != nil {
 					errs = append(errs, err)
 					continue
 				}
 			}
-			if flatten, ok := txt.Metadata["flatten"]; ok && strings.HasPrefix(txt.GetTargetField(), "v=spf1") {
+			if flatten, ok := txt.Metadata["flatten"]; ok && strings.HasPrefix(txtTarget, "v=spf1") {
 				rec = rec.Flatten(flatten)
 				err = txt.SetTargetTXT(rec.TXT())
 				if err != nil {

pkg/normalize/validate.go

@@ -255,18 +255,12 @@ type Warning struct {
 func ValidateAndNormalizeConfig(config *models.DNSConfig) (errs []error) {
 	for _, domain := range config.Domains {
 		pTypes := []string{}
-		txtMultiDissenters := []string{}
 		for _, provider := range domain.DNSProviderInstances {
 			pType := provider.ProviderType
 			// If NO_PURGE is in use, make sure this *isn't* a provider that *doesn't* support NO_PURGE.
 			if domain.KeepUnknown && providers.ProviderHasCapability(pType, providers.CantUseNOPURGE) {
 				errs = append(errs, fmt.Errorf("%s uses NO_PURGE which is not supported by %s(%s)", domain.Name, provider.Name, pType))
 			}
-
-			// Record if any providers do not support TXTMulti:
-			if !providers.ProviderHasCapability(pType, providers.CanUseTXTMulti) {
-				txtMultiDissenters = append(txtMultiDissenters, provider.Name)
-			}
 		}
 
 		// Normalize Nameservers.
@@ -335,12 +329,6 @@ func ValidateAndNormalizeConfig(config *models.DNSConfig) (errs []error) {
 					errs = append(errs, fmt.Errorf("TLSA MatchingType %d is invalid in record %s (domain %s)",
 						rec.TlsaMatchingType, rec.GetLabel(), domain.Name))
 				}
-			} else if rec.Type == "TXT" && len(txtMultiDissenters) != 0 && len(rec.TxtStrings) > 1 {
-				// There are providers that  don't support TXTMulti yet there is
-				// a TXT record with multiple strings:
-				errs = append(errs,
-					fmt.Errorf("TXT records with multiple strings (label %v domain: %v) not supported by %s",
-						rec.GetLabel(), domain.Name, strings.Join(txtMultiDissenters, ",")))
 			}
 
 			// Populate FQDN:
@@ -353,6 +341,44 @@ func ValidateAndNormalizeConfig(config *models.DNSConfig) (errs []error) {
 		errs = append(errs, ers...)
 	}
 
+	// Split TXT targets that are >255 bytes (if permitted)
+	for _, domain := range config.Domains {
+		for _, rec := range domain.Records {
+			if rec.Type == "TXT" {
+				if txtAlgo, ok := rec.Metadata["txtSplitAlgorithm"]; ok {
+					rec.TxtNormalize(txtAlgo)
+				}
+			}
+		}
+	}
+
+	// Validate TXT records.
+	for _, domain := range config.Domains {
+		// Collect the names of providers that don't support TXTMulti:
+		txtMultiDissenters := []string{}
+		for _, provider := range domain.DNSProviderInstances {
+			pType := provider.ProviderType
+			if !providers.ProviderHasCapability(pType, providers.CanUseTXTMulti) {
+				txtMultiDissenters = append(txtMultiDissenters, provider.Name)
+			}
+		}
+		// Validate TXT records.
+		for _, rec := range domain.Records {
+			if rec.Type == "TXT" {
+				// If TXTMulti is required, all providers must support that feature.
+				if len(rec.TxtStrings) > 1 && len(txtMultiDissenters) > 0 {
+					errs = append(errs,
+						fmt.Errorf("TXT records with multiple strings not supported by %s (label=%q domain=%v)",
+							strings.Join(txtMultiDissenters, ","), rec.GetLabel(), domain.Name))
+				}
+				// Validate the record:
+				if err := models.ValidateTXT(rec); err != nil {
+					errs = append(errs, err)
+				}
+			}
+		}
+	}
+
 	// Process IMPORT_TRANSFORM
 	for _, domain := range config.Domains {
 		for _, rec := range domain.Records {