From 1bb43fd4a0b8147d5e223fc25003c53172e09dd4 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Sat, 24 Oct 2026 11:56:07 +0800
Subject: [PATCH 001/126] play managed publishing: console plan/verify
 play-publish-changes, ready-to-publish items in play status, desktop hint

---
 CHANGELOG.md                               |  1 +
 apps/desktop/src/i18n/en.ts                |  2 ++
 apps/desktop/src/i18n/tr.ts                |  2 ++
 apps/desktop/src/screens/tabs/Releases.tsx | 16 ++++++++++
 cli/console/plan.ts                        |  6 ++++
 cli/console/verify.ts                      |  4 +++
 cli/lib/console-answers.ts                 |  2 +-
 cli/lib/console-plan.ts                    |  2 ++
 cli/lib/console-play-plans.ts              | 32 +++++++++++++++++++
 cli/lib/console-verify.ts                  | 18 +++++++++++
 cli/lib/play-publish.ts                    | 29 +++++++++++++++++
 cli/lib/train.ts                           |  2 +-
 cli/mcp-tools.ts                           |  2 +-
 cli/play/publish-ready.ts                  | 18 +++++++++++
 cli/play/status.ts                         |  4 ++-
 docs/pitfalls.md                           |  1 +
 skills/console-autofill/SKILL.md           |  2 +-
 skills/play-first-release/SKILL.md         |  3 ++
 skills/store-pitfalls/SKILL.md             | 11 +++++++
 tests/console-play-plans.test.ts           | 36 +++++++++++++++++++---
 20 files changed, 184 insertions(+), 9 deletions(-)
 create mode 100644 cli/lib/play-publish.ts
 create mode 100644 cli/play/publish-ready.ts

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 9f63eba..1ec495d 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,7 @@
 
 ## Unreleased
 
+- Play managed publishing: `storebound console plan play-publish-changes` (Publishing overview > "Changes ready to publish" > the owner's final "Publish N changes" + its confirm dialog; never-press: Discard changes, Stop managed publishing; `--lookup` lists the ready production releases from the API) and `console verify play-publish-changes` (API: passes when no production release is left ready to publish; or the page text). `play status` (and `--json` `readyToPublish`) prints the ready items and the plan hint, `storebound status` names the plan, and the desktop Releases tab shows the same hint with a button that opens Publishing overview.
 - Desktop dev update channel: Settings > Updates offers Stable (the npm releases) and Dev (every push to main). Each push to main builds Windows and Linux bundles stamped `<next patch>-dev.<UTC commit time>` (above the current stable, below the next one); the VDS signs them and serves `storebound.dev/desktop/dev/latest.json` (newest 5 kept). The app checks its channel at start, every 15 minutes, after sleep and right after a channel switch, installs a strictly newer build quietly (deferred while the window is in use), never downgrades (dev back to stable waits for a newer stable), rewrites its logon autostart on every start, and the tray card shows version and channel. No macOS dev builds (Developer ID signing needs the Mac's GUI session).
 - `shots` full-bleed layout: `shots.layout: "bleed"` fills the image with the app's own frame (no device, no background) and puts the scene title as a short corner caption (`corner`, `captionScale`, `captionWidth`, `captionInset` per scene) legible through a text shadow and soft glow only; the Play feature graphic shows the logo or `shots.feature.title`. Frames are captured per size at its own pixels in `<frames>/<lang>/<size>/<name>.png` (feature: `<lang>/feature/`), including the `mac` and `chromebook` sizes; `shots check` / `capture --source folder` verify aspect and native width. `shots.orientation: "landscape"` (bleed only) renders every portrait size landscape (stores accept it). Templates `template-bleed.html`, `feature-bleed.html`.
 - `storebound desktop`: "opened" now also works when a hidden tray copy is already running. On Windows it prints "opened" only when a process of the installed path has a visible window (the running copy shows it through the single-instance handoff); on macOS / Linux a visible start or a handoff to the running copy counts, otherwise it says only a tray copy runs. The graceful stop waits 3 s on Windows (closing a tray app only hides it), then stops by PID.
diff --git a/apps/desktop/src/i18n/en.ts b/apps/desktop/src/i18n/en.ts
index 8424ef3..3e3d6ba 100644
--- a/apps/desktop/src/i18n/en.ts
+++ b/apps/desktop/src/i18n/en.ts
@@ -154,6 +154,8 @@ export const en = {
   'phase.pageUnknown': "Couldn't check the store page",
   'phase.pageStale': "couldn't check the store page, as of {when}",
   'phase.reviewLive': 'In review (live: {version})',
+  'roll.publishReady': 'If the release is approved, publish it in Publishing overview ("Publish N changes"). The agent prepares it with `{cmd}`; the final press is for the owner.',
+  'roll.publishOpen': 'Open Publishing overview',
   'phase.reviewManaged': 'In review / ready to publish (managed publishing)',
   'phase.rejected': 'Rejected',
   'phase.testing': 'Testing',
diff --git a/apps/desktop/src/i18n/tr.ts b/apps/desktop/src/i18n/tr.ts
index 935eac8..8901d14 100644
--- a/apps/desktop/src/i18n/tr.ts
+++ b/apps/desktop/src/i18n/tr.ts
@@ -156,6 +156,8 @@ export const tr: Record<keyof typeof en, string> = {
   'phase.pageUnknown': 'Mağaza sayfası kontrol edilemedi',
   'phase.pageStale': 'mağaza sayfası kontrol edilemedi, {when} itibarıyla',
   'phase.reviewLive': 'İncelemede (yayında: {version})',
+  'roll.publishReady': 'Sürüm onaylandıysa Yayınlama özetinde yayınlayın ("Publish N changes"). Ajan `{cmd}` ile hazırlar; son basış sahibine aittir.',
+  'roll.publishOpen': 'Yayınlama özetini aç',
   'phase.reviewManaged': 'İncelemede / yayına hazır (yönetilen yayınlama)',
   'phase.rejected': 'Reddedildi',
   'phase.testing': 'Testte',
diff --git a/apps/desktop/src/screens/tabs/Releases.tsx b/apps/desktop/src/screens/tabs/Releases.tsx
index ee83644..fdf96ac 100644
--- a/apps/desktop/src/screens/tabs/Releases.tsx
+++ b/apps/desktop/src/screens/tabs/Releases.tsx
@@ -11,6 +11,7 @@ import { WriteButton } from '../../ui/WriteButton';
 import { type Key, t } from '../../i18n';
 import { ago, date, share } from '../../lib/format';
 import { type Lane, STAGES, type TestFlightStatus, trainLanes, versionHistory } from '../../lib/model';
+import { api } from '../../api';
 import { useData, useRead, useWrite } from '../../store';
 import { Icon, StoreGlyph } from '../../ui/icons';
 import { RolloutBar } from '../../ui/charts';
@@ -19,6 +20,8 @@ import { EmptyState, Section, StatusPill, tintStyle, useTint } from '../../ui/ds
 import { AppleSubmitCard, PlayProductionCard } from './Submit';
 import { useContextMenu } from '../../ui/ContextMenu';
 import { releaseMenu } from '../../ui/app-menu';
+import { consoleUrl } from '../../../../../cli/lib/console-links';
+import { PUBLISH_PLAN_HINT } from '../../../../../cli/lib/play-publish';
 import '../../styles/releases.css';
 
 const STAGE_KEY: Record<(typeof STAGES)[number], Key> = { build: 'stage.build', testing: 'stage.testing', review: 'stage.review', live: 'stage.live', rollout: 'stage.rollout' };
@@ -92,11 +95,24 @@ function LaneRow({ lane, version, st, app }: { lane: Lane; version: string; st:
           )}
         </div>
       )}
+      {r && r.store === 'android' && r.managed && r.phase === 'review' && <PublishHint st={st} />}
       {r && app.project && <RolloutControls app={app} r={r} />}
     </article>
   );
 }
 
+/** Managed publishing: the approved production release waits in Publishing overview ("Publish N changes"). */
+function PublishHint({ st }: { st: AppStatus }) {
+  const a = st.app?.platforms.android;
+  const url = consoleUrl('play.publishing', { playDeveloperId: a?.developerId, playAppId: a?.appId });
+  return (
+    <div className="roll-ctl" data-hint="publish-changes">
+      <span className="small muted">{t('roll.publishReady', { cmd: PUBLISH_PLAN_HINT })}</span>
+      <button className="btn btn-sm" onClick={() => { api.openExternal(url).catch(() => {}); }}><Icon name="external" />{t('roll.publishOpen')}</button>
+    </div>
+  );
+}
+
 const SHARES = [1, 2, 5, 10, 20, 50];
 
 /** Rollout controls of one store release: Play staged rollout share / halt / resume / complete, iOS phased release
diff --git a/cli/console/plan.ts b/cli/console/plan.ts
index 846645b..be96c28 100644
--- a/cli/console/plan.ts
+++ b/cli/console/plan.ts
@@ -47,6 +47,12 @@ export async function run(ctx: Ctx): Promise<void> {
     const { projectSignals } = await import('../lib/project-signals');
     ids.signals = projectSignals(detectProject(root));
   } catch { /* not scanned */ }
+  if (form === 'play-publish-changes' && args.has('lookup') && cfg.play?.packageName) {
+    try {
+      const { readyFromApi } = await import('../play/publish-ready');
+      ids.readyChanges = await readyFromApi(root, cfg);
+    } catch { /* not read: the plan says so */ }
+  }
   if (args.has('all') && form !== 'play-app-content') throw new Error('console plan: --all is for play-app-content (every App content card inline)');
   const plan = consolePlan(form, cfg, ids, { all: args.has('all') });
   if (json) return printJson(plan);
diff --git a/cli/console/verify.ts b/cli/console/verify.ts
index 09d0d45..5310af6 100644
--- a/cli/console/verify.ts
+++ b/cli/console/verify.ts
@@ -39,6 +39,10 @@ export async function run(ctx: Ctx): Promise<void> {
     const text = inline ?? await readText(from!);
     if (!text.trim()) throw new Error('console verify: the page text is empty');
     r = verifyText(form, config, text);
+  } else if (form === 'play-publish-changes') {
+    const { readyFromApi } = await import('../play/publish-ready');
+    const { verifyPublishChangesApi } = await import('../lib/console-verify');
+    r = verifyPublishChangesApi(await readyFromApi(root, config));
   } else if (form === 'apple-app-record' || form === 'apple-age-rating') {
     const bundleId = config.apple?.bundleId;
     if (!bundleId) throw new Error('console verify: apple.bundleId is not set');
diff --git a/cli/lib/console-answers.ts b/cli/lib/console-answers.ts
index a585937..8294abb 100644
--- a/cli/lib/console-answers.ts
+++ b/cli/lib/console-answers.ts
@@ -29,7 +29,7 @@ export type FormId = typeof FORM_IDS[number];
  *  API cannot set), the App content overview and its declarations without a fill form (cli/lib/console-play-plans.ts). */
 export const PLAN_ONLY_FORM_IDS = ['play-store-settings', 'play-app-content', 'play-privacy-policy', 'play-ads', 'play-sign-in-details',
   'play-advertising-id', 'play-government-apps', 'play-financial-features', 'play-health-apps', 'play-production-countries', 'play-production-release',
-  'play-games-services'] as const;
+  'play-games-services', 'play-publish-changes'] as const;
 export type PlanOnlyFormId = typeof PLAN_ONLY_FORM_IDS[number];
 /** Every form `console plan` / `console verify` know. */
 export const PLAN_FORM_IDS = [...FORM_IDS, ...PLAN_ONLY_FORM_IDS] as const;
diff --git a/cli/lib/console-plan.ts b/cli/lib/console-plan.ts
index 7eeac67..ff11b8c 100644
--- a/cli/lib/console-plan.ts
+++ b/cli/lib/console-plan.ts
@@ -108,6 +108,8 @@ export interface PlanIds {
   demoAccount?: boolean;
   /** What the project scan found (ad / attribution SDKs, the AD_ID permission, support and AR code); undefined: not scanned. */
   signals?: ProjectSignals;
+  /** play-publish-changes: the production releases ready to publish per the API (null/undefined: not read). */
+  readyChanges?: { track: string; version: string | null; build: string | null; rollout: string }[] | null;
 }
 
 const ASC = 'https://appstoreconnect.apple.com';
diff --git a/cli/lib/console-play-plans.ts b/cli/lib/console-play-plans.ts
index da3a979..51978b7 100644
--- a/cli/lib/console-play-plans.ts
+++ b/cli/lib/console-play-plans.ts
@@ -20,6 +20,7 @@ import { NEVER_PRESS, PLAY_NEVER_PRESS, playAppList } from './console-forms';
 import type { ConsolePlan, PlanAnswer, PlanIds, PlanStatus, PlanStep } from './console-plan';
 import { AD_ID_PERMISSION, type ProjectSignals } from './project-signals';
 import { playGamesPart } from './console-games-plan';
+import { PUBLISH_BUTTON, PUBLISH_CONFIRM } from './play-publish';
 
 const PLAY = 'https://play.google.com/console';
 
@@ -503,10 +504,41 @@ function productionRelease(config: ShipConfig, p: PlanIds): Part {
   };
 }
 
+function publishChanges(config: ShipConfig, p: PlanIds): Part {
+  const ready = p.readyChanges ?? null;
+  const readyText = ready === null ? 'not read (add --lookup, or run `storebound play status`)' : ready.length ? ready.map(r => `${r.track} ${r.version ?? '?'} (${r.build ?? '?'}) ${r.rollout}`).join('; ') : 'nothing ready to publish per the API';
+  return {
+    title: 'Play Console: publish the approved changes (managed publishing)',
+    start: start(config, p, 'publishing', ['Publishing overview (left menu)']),
+    steps: steps([
+      { text: 'Precondition: `storebound play status` shows "production <version>: In review / ready to publish" (managed publishing on, Google approved).' },
+      { text: 'Open Publishing overview. The section "Changes ready to publish" lists every approved change (e.g. the production release and Data safety); read the list as text and compare it with the ready changes below.' },
+      { text: `Stop. The owner presses "${PUBLISH_BUTTON}" (N = the number in the list) and then confirms in its dialog (button "${PUBLISH_CONFIRM}"; a real mouse click, a JS .click() may do nothing). It makes every listed change live at once.`, answers: ['ready'] },
+      { text: 'Verify: `storebound console verify play-publish-changes` (API: no production release is left ready to publish) or pipe the page text to `--from-text -`.' },
+    ]),
+    answers: [ans('ready', 'Changes ready to publish (API)', readyText, 'certain', 'play status (public store page + tracks)', { note: 'The API sees production releases only; Data safety, listing and other non-track changes show in the console list only.', where: 'Publishing overview > Changes ready to publish' })],
+    final: PUBLISH_BUTTON,
+    neverPress: ['Publish N changes', 'Send changes for review', 'Submit N changes for review', 'Restart review', 'Discard changes', 'Stop managed publishing', 'Turn off managed publishing', 'Halt rollout', 'Unpublish app', 'Deactivate', ...NEVER_PRESS],
+    allowed: [
+      { button: 'Publishing overview (left menu), expand Changes ready to publish', class: 'navigation', where: 'read-only: lists the approved changes' },
+    ],
+    uiFacts: [
+      'Managed publishing (play.managedPublishing: true): after approval the changes wait in Publishing overview > "Changes ready to publish"; the button is "Publish N changes" (N counts every change, e.g. production full rollout + Data safety) and opens a confirm dialog.',
+      'The Developer API has no publishing-state endpoint: storebound infers "ready to publish" from a completed production release the public store page does not show yet.',
+      'Never "Discard changes" or "Stop managed publishing" (it would unpublish or drop the approved changes).',
+      managedPublishingNote(config),
+      PLAY_MATERIAL_FACT,
+    ],
+    verify: { command: 'storebound console verify play-publish-changes', source: 'page-text', capture: PAGE_TEXT, expect: ['No production release is left ready to publish (API), or the page shows no "Publish N changes" button / "Changes ready to publish".'] },
+    guidance: ['Open: Publishing overview > Changes ready to publish'],
+  };
+}
+
 export function playOnlyPart(form: Exclude<PlanOnlyFormId, 'play-app-content'>, config: ShipConfig, p: PlanIds): Part {
   switch (form) {
     case 'play-production-countries': return productionCountries(config, p);
     case 'play-production-release': return productionRelease(config, p);
+    case 'play-publish-changes': return publishChanges(config, p);
     case 'play-store-settings': return storeSettings(config, p);
     case 'play-privacy-policy': return privacyPolicy(config, p);
     case 'play-ads': return adsDeclaration(config, p);
diff --git a/cli/lib/console-verify.ts b/cli/lib/console-verify.ts
index 797e227..b68db83 100644
--- a/cli/lib/console-verify.ts
+++ b/cli/lib/console-verify.ts
@@ -426,11 +426,29 @@ export function verifyProductionRelease(text: string): VerifyResult {
   return result('play-production-release', 'page-text', rows);
 }
 
+/** Publishing overview as text (or the API's ready list): nothing left to publish. */
+export function verifyPublishChanges(text: string): VerifyResult {
+  const f = fold(text);
+  const pending = /publish \d+ changes?|changes ready to publish/.test(f) && !/no changes ready to publish|0 changes ready/.test(f);
+  const rows: VerifyRow[] = [{ item: 'Changes ready to publish', expected: 'none left', seen: pending ? 'changes ready to publish' : 'none listed', status: pending ? 'mismatch' : 'match',
+    ...(pending ? { note: 'the owner presses "Publish N changes" and confirms' } : {}) }];
+  return result('play-publish-changes', 'page-text', rows);
+}
+
+/** The same check from the API's ready list (`readyToPublish`). */
+export function verifyPublishChangesApi(ready: { track: string; version: string | null; build: string | null; rollout: string }[]): VerifyResult {
+  const seen = ready.map(r => `${r.track} ${r.version ?? '?'} (${r.build ?? '?'}) ${r.rollout}`).join('; ');
+  const rows: VerifyRow[] = [{ item: 'Production releases ready to publish', expected: 'none left', seen: ready.length ? seen : 'none', status: ready.length ? 'mismatch' : 'match',
+    ...(ready.length ? { note: 'the owner presses "Publish N changes" and confirms (storebound console plan play-publish-changes)' } : {}) }];
+  return result('play-publish-changes', 'api', rows, ['The API sees production releases only; Data safety and other non-track changes are not readable.']);
+}
+
 /** Page-text verification of any form that has one. */
 export function verifyText(form: PlanFormId, config: ShipConfig, text: string): VerifyResult {
   if (form === 'play-app-content') return verifyAppContent(text);
   if (form === 'play-production-countries') return verifyProductionCountries(config, text);
   if (form === 'play-production-release') return verifyProductionRelease(text);
+  if (form === 'play-publish-changes') return verifyPublishChanges(text);
   if (form === 'play-games-services') return result(form, 'page-text', verifyPlayGames(config, text));
   if (form === 'play-store-settings' || form === 'play-privacy-policy' || form === 'play-ads' || form === 'play-sign-in-details' || form === 'play-advertising-id'
     || form === 'play-government-apps' || form === 'play-financial-features' || form === 'play-health-apps') return verifyPlayDeclaration(form, config, text);
diff --git a/cli/lib/play-publish.ts b/cli/lib/play-publish.ts
new file mode 100644
index 0000000..d4f5c41
--- /dev/null
+++ b/cli/lib/play-publish.ts
@@ -0,0 +1,29 @@
+// Play managed publishing: what waits in Publishing overview as "Changes ready to publish" (button "Publish N changes").
+// The Developer API has no publishing-state endpoint; `play status` decides it the same way portfolio.playReleases does:
+// a completed production release that the public store page does not show yet (404, or an older version) while
+// play.managedPublishing is on is "In review / ready to publish". Pure. Non-track changes (Data safety, listing, content
+// rating) are listed by the console page only; the API cannot see them.
+import { playReleases } from './portfolio';
+import { consoleUrl } from './console-links';
+
+export const PUBLISH_PLAN_HINT = 'storebound console plan play-publish-changes';
+/** The owner's final button: "Publish N changes" (N is the page's count) and its confirm dialog. */
+export const PUBLISH_BUTTON = 'Publish N changes';
+export const PUBLISH_CONFIRM = 'Publish';
+
+export interface ReadyChange { track: string; version: string | null; build: string | null; rollout: string; liveVersion: string | null }
+
+/** Ready-to-publish production releases from the `play status --json` data ({ tracks, publicPage, managedPublishing }). */
+export function readyToPublish(data: unknown): ReadyChange[] {
+  return playReleases(data).filter(r => r.track === 'production' && r.managed === true && r.phase === 'review').map(r => ({
+    track: r.track ?? 'production', version: r.version, build: r.build,
+    rollout: r.fraction !== null && r.fraction < 1 ? `${Math.round(r.fraction * 1000) / 10}% staged` : 'full rollout', liveVersion: r.liveVersion ?? null,
+  }));
+}
+
+/** Status lines for `play status` / `status`: the items and the hint (empty when nothing is ready). */
+export function readyLines(items: ReadyChange[]): string[] {
+  if (!items.length) return [];
+  return [`  ready to publish (managed publishing): ${items.map(i => `${i.track} ${i.version ?? '?'} (${i.build ?? '?'}) ${i.rollout}${i.liveVersion ? `, live: ${i.liveVersion}` : ''}`).join(' | ')}; non-track changes (Data safety, listing) show only in the console`,
+    `  next: ${PUBLISH_PLAN_HINT}  (${consoleUrl('play.publishing')})`];
+}
diff --git a/cli/lib/train.ts b/cli/lib/train.ts
index 1cdb660..86cac78 100644
--- a/cli/lib/train.ts
+++ b/cli/lib/train.ts
@@ -239,7 +239,7 @@ function storeSteps(store: 'ios' | 'android', v: string, r: StoreRelease | null,
       break;
     case 'review':
       if (store === 'android' && r!.track === 'production') {
-        steps.push({ kind: r!.managed ? 'owner' : 'wait', text: `${v}: ${playReleaseLabel(r!)}`, fix: r!.managed ? `${consoleLink('play.publishing')} (publish once approved)` : 'storebound play status', ...(r!.managed ? { url: consoleUrl('play.publishing') } : {}) });
+        steps.push({ kind: r!.managed ? 'owner' : 'wait', text: `${v}: ${playReleaseLabel(r!)}`, fix: r!.managed ? `${consoleLink('play.publishing')} (publish once approved; \`storebound console plan play-publish-changes\`)` : 'storebound play status', ...(r!.managed ? { url: consoleUrl('play.publishing') } : {}) });
         break;
       }
       steps.push({ kind: 'wait', text: `${v} is in review (${r!.state}); nothing to do until the store answers`, fix: store === 'ios' ? 'storebound apple status --wait-review' : 'storebound play status' });
diff --git a/cli/mcp-tools.ts b/cli/mcp-tools.ts
index 24c7644..c7972ae 100644
--- a/cli/mcp-tools.ts
+++ b/cli/mcp-tools.ts
@@ -40,7 +40,7 @@ export const notSentProp = { type: 'boolean', default: false, description: 'Comm
 /** Every form `console plan` / `console verify` know (cli/lib/console-answers.ts PLAN_FORM_IDS; a test keeps them equal). */
 export const CONSOLE_PLAN_FORMS = ['apple-app-record', 'apple-age-rating', 'apple-app-privacy', 'play-app-record', 'play-content-rating', 'play-target-audience',
   'play-store-settings', 'play-app-content', 'play-privacy-policy', 'play-ads', 'play-sign-in-details', 'play-advertising-id', 'play-government-apps',
-  'play-financial-features', 'play-health-apps', 'play-production-countries', 'play-production-release', 'play-games-services'];
+  'play-financial-features', 'play-health-apps', 'play-production-countries', 'play-production-release', 'play-games-services', 'play-publish-changes'];
 
 export const TOOLS: ToolDef[] = [
   { name: 'check', title: 'Offline config check', command: ['check'], write: false, network: false,
diff --git a/cli/play/publish-ready.ts b/cli/play/publish-ready.ts
new file mode 100644
index 0000000..14f5dfe
--- /dev/null
+++ b/cli/play/publish-ready.ts
@@ -0,0 +1,18 @@
+// Read-only: the production releases waiting in Publishing overview (managed publishing), from the tracks and the public store page.
+import type { ShipConfig } from '../lib/config';
+import { need } from '../lib/ctx';
+import { type ReadyChange, readyToPublish } from '../lib/play-publish';
+import { playPublicPage } from '../lib/play-public';
+import { playClient } from './client';
+
+export async function readyFromApi(root: string, config: ShipConfig): Promise<ReadyChange[]> {
+  const pkg = need(config.play?.packageName, 'play.packageName');
+  const play = await playClient(root, pkg);
+  let out: ReadyChange[] = [];
+  await play.read(async id => {
+    const tracks = (await play.call<{ tracks?: unknown[] }>('GET', `${play.API}/edits/${id}/tracks`)).tracks ?? [];
+    const publicPage = await playPublicPage(play.packageName);
+    out = readyToPublish({ tracks, publicPage, managedPublishing: config.play?.managedPublishing ?? null });
+  });
+  return out;
+}
diff --git a/cli/play/status.ts b/cli/play/status.ts
index 3097c3a..74214cc 100644
--- a/cli/play/status.ts
+++ b/cli/play/status.ts
@@ -10,6 +10,7 @@ import { playPublicPage } from '../lib/play-public';
 import { playReleases, playReleaseLabel } from '../lib/portfolio';
 import { playClient } from './client';
 import { listOneTimeProducts } from './products';
+import { readyLines, readyToPublish } from '../lib/play-publish';
 import { clearPending, pendingLine, publishingUrl, readPending } from './review-pending';
 
 interface Track { track: string; releases?: { name?: string; versionCodes?: string[]; status: string; userFraction?: number }[] }
@@ -32,7 +33,7 @@ export async function run(ctx: Ctx): Promise<void> {
     // the App category is not in the API (edits.details has no category field): a console step
     const cat = playCategoryOf(config);
     const category = { config: cat?.category ?? null, source: cat?.source ?? null, api: false, plan: 'storebound console plan play-store-settings' };
-    if (ctx.args.has('json')) { printJson({ details, category, tracks, listings, products, publicPage, managedPublishing: config.play?.managedPublishing ?? null, reviewPending }); return; }
+    if (ctx.args.has('json')) { printJson({ details, category, tracks, listings, products, publicPage, managedPublishing: config.play?.managedPublishing ?? null, reviewPending, readyToPublish: readyToPublish({ tracks, publicPage, managedPublishing: config.play?.managedPublishing ?? null }) }); return; }
     console.log(`${play.packageName}\n  details: ${details.defaultLanguage} · ${details.contactEmail ?? '-'} · ${details.contactWebsite ?? '-'}`);
     console.log(`  category: ${cat ? `${cat.category} (${cat.source})` : 'not in the config (play.category)'} · not readable by the API: Store settings is a console step (${category.plan})`);
     console.log(`  listings (${listings.length}): ${listings.map(l => l.language).join(', ') || '-'}`);
@@ -42,6 +43,7 @@ export async function run(ctx: Ctx): Promise<void> {
     }
     console.log(`  public store page: ${publicPage.state === 'public' ? `published (200), live version ${publicPage.versionName ?? (publicPage.varies ? 'varies with device' : 'not shown')}` : publicPage.state === 'notPublic' ? 'not public yet (404)' : `couldn't check it (${publicPage.error ?? 'not read'})`}${publicPage.stale ? ` (last known, ${publicPage.checkedAt.slice(0, 16).replace('T', ' ')} UTC)` : ''}`);
     for (const r of playReleases({ tracks, publicPage, managedPublishing: config.play?.managedPublishing ?? null }).filter(x => x.track === 'production')) console.log(`  production ${r.version ?? '?'} (${r.build ?? '?'}): ${playReleaseLabel(r)}`);
+    for (const l of readyLines(readyToPublish({ tracks, publicPage, managedPublishing: config.play?.managedPublishing ?? null }))) console.log(l);
     if (pending) console.log(`  review: ${pendingLine(pending)}`);
     console.log(`  products (${products.length}):`);
     for (const p of products) console.log(`    ${p.productId.padEnd(40)} ${(p.purchaseOptions ?? []).map(o => `${o.purchaseOptionId}:${o.state ?? '?'}`).join(' ')}`);
diff --git a/docs/pitfalls.md b/docs/pitfalls.md
index 8056ceb..4f58aed 100644
--- a/docs/pitfalls.md
+++ b/docs/pitfalls.md
@@ -9,6 +9,7 @@ fails without the fix.
 
 | # | date | lesson | guard |
 |---|---|---|---|
+| 94 | 2026-10 | An app with managed publishing was approved but never went live: `play status` said "In review / ready to publish" with no next step, and the Publishing overview "Publish N changes" button (production + Data safety) was easy to miss or to confuse with Discard changes. | `console plan play-publish-changes` (final "Publish N changes" is the owner's, Discard changes / Stop managed publishing never-press), `console verify play-publish-changes` (API), the hint in `play status`, `status` and the desktop Releases tab (`cli/lib/play-publish.ts`, `tests/console-play-plans.test.ts`). |
 | 93 | 2026-10 | A git-ignored, never-captured frames folder rendered store images with no app or game in them; render only logged 404s and `shots check` said 0 errors. | `shots render` refuses to start while a scene frame is missing (`framesForRender` in `cli/shots/lib.ts`) and fails when any load failed; report.json `missing` is a `frame-missing` error in `shots check` / `validate` (`cli/shots/report.ts`, `tests/shots-missing-frames.test.ts`). |
 | 90 | 2026-10 | `apple submit --build N --version X --yes` after `apple submit --no-submit --yes` (the documented two-step flow) printed the plan (every item "in it already", then "submit PATCH submitted: true"), logged "not added ...: already in the draft submission" and ended with "nothing to submit" without the PATCH: the submit only ran for new items or an UNRESOLVED_ISSUES submission. | `willSubmit` (cli/lib/review-submit.ts) also submits a READY_FOR_REVIEW draft that already holds the named app version (iap-submit: one of the asked-for items), with the same "not ready yet" retry. `tests/resubmit.test.ts` ("the second step submits the prepared draft"). |
 | 85 | 2026-10 | `shots record --source web` filmed at the page's CSS size: Chromium's screencast ignores the deviceScaleFactor (maxWidth only shrinks), so a 1080x1920 preview of a 430x932 @2x page was a 2.5x upscale. | `Page.captureScreenshot` with `clip.scale` = dpr (long side capped at 1920), 3 requests in flight, timestamped frames joined by ffmpeg; a warning when the first frame is smaller than asked or the rate is under 20 frames/s. `recordSize` / `captureShortfall` in `cli/shots/devices.ts`, `tests/video.test.ts`. |
diff --git a/skills/console-autofill/SKILL.md b/skills/console-autofill/SKILL.md
index 1048a99..251dac8 100644
--- a/skills/console-autofill/SKILL.md
+++ b/skills/console-autofill/SKILL.md
@@ -45,7 +45,7 @@ the UI shows. This is the primary mode.
    `--all` / MCP `all: true` puts every card's steps inline in fix order and ends with the one owner list: tick the
    IARC Terms of Use box (before), Send changes for review (after)), its cards `play-privacy-policy`, `play-ads`, `play-sign-in-details`, `play-advertising-id`,
    `play-government-apps`, `play-financial-features`, `play-health-apps`, and the first production release:
-   `play-production-countries` and `play-production-release`. `storebound console plan` lists them.
+   `play-production-countries`, `play-production-release` and `play-publish-changes` (managed publishing). `storebound console plan` lists them.
 2. Send the owner the `ownerBatch` of every form you will fill in ONE message before you start (AGENTS.md rule 5): the
    `ask-owner` answers (write them into the config, so the plan has them; never guess them) and the `before` steps
    (Play content rating: tick the IARC Terms of Use box on the questionnaire's page 1 first; page 1's Next does
diff --git a/skills/play-first-release/SKILL.md b/skills/play-first-release/SKILL.md
index c1e7f26..393544a 100644
--- a/skills/play-first-release/SKILL.md
+++ b/skills/play-first-release/SKILL.md
@@ -103,6 +103,9 @@ products) and answers the compliance facts no file proves, all in one batch at t
     Managed publishing is off by default: the app goes live automatically once Google approves it. If the owner wants
     to pick the moment, they turn on Publishing overview > Managed publishing first; record it in
     `play.managedPublishing` (`play release` and the plan warn while it is off).
+    With managed publishing on, `play status` shows "production X: In review / ready to publish" after approval and
+    names `storebound console plan play-publish-changes`: Publishing overview > "Changes ready to publish" > **Publish N
+    changes** (owner's final button; never Discard changes / Stop managed publishing). `console verify play-publish-changes` reads the API.
 13. **Verify.** `storebound validate --play` (no blockers), `storebound play status` (tracks, listings, products), Console dashboard has no open tasks,
     Publishing overview shows "In review".
 
diff --git a/skills/store-pitfalls/SKILL.md b/skills/store-pitfalls/SKILL.md
index 19f7785..c9fa7d2 100644
--- a/skills/store-pitfalls/SKILL.md
+++ b/skills/store-pitfalls/SKILL.md
@@ -1365,3 +1365,14 @@ that fails without the fix (see CONTRIBUTING.md).
   with what was found. Opening waits up to 15 s: on Windows for a visible top-level window of a process
   from the installed path (a running `--hidden` tray copy is shown by the single-instance handler, so a second start
   without `--hidden` opens it), elsewhere for a non-`--hidden` process or a handoff (`tests/desktop-proc.test.ts`).
+
+## 114. Managed publishing: approved, but nothing went live
+- **What happens:** with `play.managedPublishing: true` Google approves the release and it waits in Publishing overview
+  ("Changes ready to publish", button "Publish N changes", e.g. production plus Data safety). `play status` only said
+  "In review / ready to publish".
+- **Do:** `storebound console plan play-publish-changes`, drive to Publishing overview, then the owner's "Publish N
+  changes" and its confirm dialog. Never "Discard changes" or "Stop managed publishing". Check with
+  `storebound console verify play-publish-changes` (API: no production release left ready to publish).
+- **Guard:** `cli/lib/play-publish.ts` (ready list from tracks plus the public store page, the only signal the API
+  gives), the plan, the verify, the hint in `play status` / `status` / the desktop Releases tab. Non-track changes are
+  not visible to the API.
diff --git a/tests/console-play-plans.test.ts b/tests/console-play-plans.test.ts
index b7c6c65..f517dd9 100644
--- a/tests/console-play-plans.test.ts
+++ b/tests/console-play-plans.test.ts
@@ -7,7 +7,8 @@ import { consoleAnswers, PLAN_FORM_IDS, PLAN_ONLY_FORM_IDS } from '../cli/lib/co
 import { declarationSaveAllowed, flowAllowed, forbiddenControl, formDef, forbiddenTick, publishingControl } from '../cli/lib/console-forms';
 import { consolePlan, IN_PAGE_LOOP, playConsoleReminders, planText } from '../cli/lib/console-plan';
 import { APP_CONTENT_CARDS, PLAY_MATERIAL_FACT, startLabel } from '../cli/lib/console-play-plans';
-import { appPrivacyPublished, verifyAppContent, verifyPlayDeclaration, verifyText } from '../cli/lib/console-verify';
+import { readyLines, readyToPublish } from '../cli/lib/play-publish';
+import { appPrivacyPublished, verifyPublishChangesApi, verifyAppContent, verifyPlayDeclaration, verifyText } from '../cli/lib/console-verify';
 import { CONSOLE_PLAN_FORMS, TOOLS, validateInput } from '../cli/mcp-tools';
 import { playRules, type PlaySnapshot } from '../cli/lib/validate-rules';
 
@@ -27,7 +28,7 @@ describe('agent-only Play plans: shape, URLs, never-press lists, the owner batch
     'play-store-settings': 'store-settings', 'play-app-content': 'app-content/overview', 'play-privacy-policy': 'app-content/privacy-policy',
     'play-ads': 'app-content/ads-declaration', 'play-sign-in-details': 'app-content/testing-credentials', 'play-advertising-id': 'app-content/ad-id-declaration',
     'play-government-apps': 'app-content/government-apps', 'play-financial-features': 'app-content/finance', 'play-health-apps': 'app-content/health', 'play-games-services': 'play-games-services/setup',
-    'play-production-countries': 'tracks/production', 'play-production-release': 'tracks/production',
+    'play-production-countries': 'tracks/production', 'play-production-release': 'tracks/production', 'play-publish-changes': 'publishing',
   };
   for (const form of PLAN_ONLY_FORM_IDS) {
     test(form, () => {
@@ -45,7 +46,7 @@ describe('agent-only Play plans: shape, URLs, never-press lists, the owner batch
       for (const b of ['Publish', 'Submit', 'Send changes for review']) expect(p.buttons.neverPress).toContain(b);
       for (const b of p.buttons.allowed) expect(b.class).not.toBe('final-submit');
       // an App content card's Save is the agent's (verified 2026-10-13); the owner's button is Send changes for review
-      if (form.startsWith('play-') && !['play-store-settings', 'play-app-content', 'play-production-countries', 'play-production-release', 'play-games-services'].includes(form)) {
+      if (form.startsWith('play-') && !['play-store-settings', 'play-app-content', 'play-production-countries', 'play-production-release', 'play-games-services', 'play-publish-changes'].includes(form)) {
         expect(p.buttons.final).toBe('Send changes for review');
         expect(p.buttons.neverPress).not.toContain('Save');
         expect(p.buttons.allowed).toContainEqual(expect.objectContaining({ button: 'Save', class: 'declaration-save' }));
@@ -58,7 +59,8 @@ describe('agent-only Play plans: shape, URLs, never-press lists, the owner batch
       p.ownerBatch.forEach((o, i) => expect(o.n).toBe(i + 1));
       expect(planText(p).indexOf('Owner batch')).toBeLessThan(planText(p).indexOf('Steps:'));
       expect(p.uiFacts.join('\n')).toContain(PLAY_MATERIAL_FACT);
-      expect(p.verify.command).toBe(`storebound console verify ${form} ${p.verify.capture.includes("aria-selected") ? "--from" : "--from-text"} -`);
+      // play-publish-changes verifies through the API (no page text needed)
+      expect(p.verify.command).toBe(form === 'play-publish-changes' ? 'storebound console verify play-publish-changes' : `storebound console verify ${form} ${p.verify.capture.includes("aria-selected") ? "--from" : "--from-text"} -`);
       expect(p.inPageLoop).toBe(IN_PAGE_LOOP);
       expect(planText(p)).toContain('window.__sb.run');
       expect(JSON.parse(JSON.stringify(p))).toEqual(p);
@@ -328,6 +330,32 @@ describe('the first production release: countries, managed publishing, the owner
     expect(verifyText('play-production-release', base, 'Publishing overview\nChanges in review').ok).toBe(true);
   });
 
+  test('publish changes: Publish N changes is the final button, never-press holds Discard / Stop managed publishing, ready list from the API', () => {
+    const managed = { ...base, play: { ...base.play!, managedPublishing: true } } as ShipConfig;
+    const p = consolePlan('play-publish-changes', managed, { readyChanges: [{ track: 'production', version: '2.0.0', build: '45', rollout: 'full rollout' }] });
+    expect(p.buttons.final).toBe('Publish N changes');
+    for (const b of ['Discard changes', 'Stop managed publishing', 'Publish N changes']) expect(p.buttons.neverPress).toContain(b);
+    expect(p.answers[0]!.text).toContain('production 2.0.0 (45) full rollout');
+    expect(p.steps.map(s => s.text).join('\n')).toContain('Changes ready to publish');
+    expect(p.ownerBatch.at(-1)!.text).toContain('Publish N changes');
+    expect(consolePlan('play-publish-changes', managed).answers[0]!.text).toContain('not read');
+  });
+
+  test('publish changes: ready = managed + completed production the store page does not show; verify by API and by page text', () => {
+    const tracks = [{ track: 'production', releases: [{ name: '2.0.0 (45)', versionCodes: ['45'], status: 'completed' }] }];
+    const ready = readyToPublish({ tracks, publicPage: { state: 'notPublic' }, managedPublishing: true });
+    expect(ready).toEqual([{ track: 'production', version: '2.0.0', build: '45', rollout: 'full rollout', liveVersion: null }]);
+    expect(readyToPublish({ tracks, publicPage: { state: 'notPublic' }, managedPublishing: false })).toEqual([]);
+    expect(readyToPublish({ tracks, publicPage: { state: 'public', versionName: '2.0.0' }, managedPublishing: true })).toEqual([]);
+    expect(readyToPublish({ tracks, publicPage: { state: 'public', versionName: '1.9.0' }, managedPublishing: true })[0]!.liveVersion).toBe('1.9.0');
+    expect(readyLines(ready).join('\n')).toContain('storebound console plan play-publish-changes');
+    expect(readyLines([])).toEqual([]);
+    expect(verifyPublishChangesApi(ready).ok).toBe(false);
+    expect(verifyPublishChangesApi([]).ok).toBe(true);
+    expect(verifyText('play-publish-changes', base, 'Publishing overview\nChanges ready to publish\nPublish 2 changes').ok).toBe(false);
+    expect(verifyText('play-publish-changes', base, 'Publishing overview\nChanges in review').ok).toBe(true);
+  });
+
   test('validate: production with 0 countries is a blocker with a release on the track, a warning without', () => {
     const snap = { defaultLanguage: 'en-US', expectedLanguages: [], listings: [], privacyUrl: { url: 'https://example.com/privacy', status: 200 }, website: null, appAds: null, appAdsLines: [], adsLikely: false, tracks: [], products: [], expectedProducts: [] } as unknown as PlaySnapshot;
     expect(playRules({ ...snap, productionCountries: 0 }).find(f => f.code === 'countries')).toMatchObject({ level: 'warn', msg: 'production has 0 countries / regions (the API cannot set them)', fix: 'storebound console plan play-production-countries' });

From 4e2ffd6b3dc98c416f0ac6bfd6356800376c4d07 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Sat, 24 Oct 2026 12:01:37 +0800
Subject: [PATCH 002/126] generated API tables refreshed for the
 play-publish-changes form

---
 cli/api/wrapped.gen.ts | 2 +-
 docs/api-coverage.md   | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/cli/api/wrapped.gen.ts b/cli/api/wrapped.gen.ts
index 8693d61..1b484d8 100644
--- a/cli/api/wrapped.gen.ts
+++ b/cli/api/wrapped.gen.ts
@@ -254,7 +254,7 @@ export const WRAPPED: { apple: Record<string, string>; play: Record<string, stri
     'androidpublisher.edits.listings.patch': 'listing-store',
     'androidpublisher.edits.listings.update': 'listing-store play/listing',
     'androidpublisher.edits.tracks.get': 'play/release play/rollout play/upload',
-    'androidpublisher.edits.tracks.list': 'play/next-version-code play/status play/upload validate',
+    'androidpublisher.edits.tracks.list': 'play/next-version-code play/publish-ready play/status play/upload validate',
     'androidpublisher.edits.tracks.update': 'play/release play/rollout play/upload',
     'androidpublisher.edits.validate': 'play/client',
     'androidpublisher.generatedapks.list': 'web',
diff --git a/docs/api-coverage.md b/docs/api-coverage.md
index f575a42..cb6249a 100644
--- a/docs/api-coverage.md
+++ b/docs/api-coverage.md
@@ -1608,7 +1608,7 @@ Specs: Apple [App Store Connect API 4.5.1](https://developer.apple.com/sample-co
 | **androidpublisher.edits.tracks** (5) | | | | |
 | `androidpublisher.edits.tracks.create` | POST | `androidpublisher/v3/applications/{packageName}/edits/{editId}/tracks` | write (dry by default) |  |
 | `androidpublisher.edits.tracks.get` | GET | `androidpublisher/v3/applications/{packageName}/edits/{editId}/tracks/{track}` | read | play/release, play/rollout, play/upload |
-| `androidpublisher.edits.tracks.list` | GET | `androidpublisher/v3/applications/{packageName}/edits/{editId}/tracks` | read | play/next-version-code, play/status, play/upload, validate |
+| `androidpublisher.edits.tracks.list` | GET | `androidpublisher/v3/applications/{packageName}/edits/{editId}/tracks` | read | play/next-version-code, play/publish-ready, play/status, play/upload, validate |
 | `androidpublisher.edits.tracks.patch` | PATCH | `androidpublisher/v3/applications/{packageName}/edits/{editId}/tracks/{track}` | write (dry by default) |  |
 | `androidpublisher.edits.tracks.update` | PUT | `androidpublisher/v3/applications/{packageName}/edits/{editId}/tracks/{track}` | write (dry by default) | play/release, play/rollout, play/upload |
 | **androidpublisher.externaltransactions** (3) | | | | |

From 26f9559e1ae681701c711ca741988f52580fd424 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Sat, 24 Oct 2026 12:12:37 +0800
Subject: [PATCH 003/126] play-publish-changes: a release is ready only when
 the store page shows an older version; unknown reads are not determined,
 never a mismatch

---
 CHANGELOG.md                               |  2 +-
 apps/desktop/src/screens/tabs/Releases.tsx |  2 +-
 cli/lib/console-verify.ts                  |  7 ++++---
 cli/lib/play-publish.ts                    | 16 +++++++++++++++-
 cli/play/publish-ready.ts                  | 10 ++++++----
 tests/console-play-plans.test.ts           | 18 +++++++++++++-----
 6 files changed, 40 insertions(+), 15 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 1ec495d..b4f69d8 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,7 +3,7 @@
 
 ## Unreleased
 
-- Play managed publishing: `storebound console plan play-publish-changes` (Publishing overview > "Changes ready to publish" > the owner's final "Publish N changes" + its confirm dialog; never-press: Discard changes, Stop managed publishing; `--lookup` lists the ready production releases from the API) and `console verify play-publish-changes` (API: passes when no production release is left ready to publish; or the page text). `play status` (and `--json` `readyToPublish`) prints the ready items and the plan hint, `storebound status` names the plan, and the desktop Releases tab shows the same hint with a button that opens Publishing overview.
+- Play managed publishing: `storebound console plan play-publish-changes` (Publishing overview > "Changes ready to publish" > the owner's final "Publish N changes" + its confirm dialog; never-press: Discard changes, Stop managed publishing; `--lookup` lists the ready production releases from the API) and `console verify play-publish-changes` (API: passes when no production release is left ready to publish; or the page text). `play status` (and `--json` `readyToPublish`) prints the ready items and the plan hint, `storebound status` names the plan, and the desktop Releases tab shows the same hint with a button that opens Publishing overview. A release counts as ready to publish only when the public store page positively shows an older version; a 404, a failed or stale page read, a same or unparseable version is never ready (verify says "not determined" instead of a mismatch).
 - Desktop dev update channel: Settings > Updates offers Stable (the npm releases) and Dev (every push to main). Each push to main builds Windows and Linux bundles stamped `<next patch>-dev.<UTC commit time>` (above the current stable, below the next one); the VDS signs them and serves `storebound.dev/desktop/dev/latest.json` (newest 5 kept). The app checks its channel at start, every 15 minutes, after sleep and right after a channel switch, installs a strictly newer build quietly (deferred while the window is in use), never downgrades (dev back to stable waits for a newer stable), rewrites its logon autostart on every start, and the tray card shows version and channel. No macOS dev builds (Developer ID signing needs the Mac's GUI session).
 - `shots` full-bleed layout: `shots.layout: "bleed"` fills the image with the app's own frame (no device, no background) and puts the scene title as a short corner caption (`corner`, `captionScale`, `captionWidth`, `captionInset` per scene) legible through a text shadow and soft glow only; the Play feature graphic shows the logo or `shots.feature.title`. Frames are captured per size at its own pixels in `<frames>/<lang>/<size>/<name>.png` (feature: `<lang>/feature/`), including the `mac` and `chromebook` sizes; `shots check` / `capture --source folder` verify aspect and native width. `shots.orientation: "landscape"` (bleed only) renders every portrait size landscape (stores accept it). Templates `template-bleed.html`, `feature-bleed.html`.
 - `storebound desktop`: "opened" now also works when a hidden tray copy is already running. On Windows it prints "opened" only when a process of the installed path has a visible window (the running copy shows it through the single-instance handoff); on macOS / Linux a visible start or a handoff to the running copy counts, otherwise it says only a tray copy runs. The graceful stop waits 3 s on Windows (closing a tray app only hides it), then stops by PID.
diff --git a/apps/desktop/src/screens/tabs/Releases.tsx b/apps/desktop/src/screens/tabs/Releases.tsx
index fdf96ac..17b99ad 100644
--- a/apps/desktop/src/screens/tabs/Releases.tsx
+++ b/apps/desktop/src/screens/tabs/Releases.tsx
@@ -95,7 +95,7 @@ function LaneRow({ lane, version, st, app }: { lane: Lane; version: string; st:
           )}
         </div>
       )}
-      {r && r.store === 'android' && r.managed && r.phase === 'review' && <PublishHint st={st} />}
+      {r && r.store === 'android' && r.managed && r.phase === 'review' && !!r.liveVersion && !r.pageStaleAt && <PublishHint st={st} />}
       {r && app.project && <RolloutControls app={app} r={r} />}
     </article>
   );
diff --git a/cli/lib/console-verify.ts b/cli/lib/console-verify.ts
index b68db83..730997d 100644
--- a/cli/lib/console-verify.ts
+++ b/cli/lib/console-verify.ts
@@ -436,11 +436,12 @@ export function verifyPublishChanges(text: string): VerifyResult {
 }
 
 /** The same check from the API's ready list (`readyToPublish`). */
-export function verifyPublishChangesApi(ready: { track: string; version: string | null; build: string | null; rollout: string }[]): VerifyResult {
+export function verifyPublishChangesApi(ready: { track: string; version: string | null; build: string | null; rollout: string }[] & { undetermined?: boolean }): VerifyResult {
   const seen = ready.map(r => `${r.track} ${r.version ?? '?'} (${r.build ?? '?'}) ${r.rollout}`).join('; ');
-  const rows: VerifyRow[] = [{ item: 'Production releases ready to publish', expected: 'none left', seen: ready.length ? seen : 'none', status: ready.length ? 'mismatch' : 'match',
+  const rows: VerifyRow[] = [{ item: 'Production releases ready to publish', expected: 'none left', seen: ready.length ? seen : ready.undetermined ? 'none proven (the store page does not show an older live version; not determined)' : 'none', status: ready.length ? 'mismatch' : 'match',
     ...(ready.length ? { note: 'the owner presses "Publish N changes" and confirms (storebound console plan play-publish-changes)' } : {}) }];
-  return result('play-publish-changes', 'api', rows, ['The API sees production releases only; Data safety and other non-track changes are not readable.']);
+  return result('play-publish-changes', 'api', rows, ['The API sees production releases only; Data safety and other non-track changes are not readable.',
+    ...(ready.undetermined ? ['A release counts as ready only when the public store page shows an OLDER version; a 404, failed read or same version is never ready. Check Publishing overview ("Last published on ...") or pass the page text with --from-text -.'] : [])]);
 }
 
 /** Page-text verification of any form that has one. */
diff --git a/cli/lib/play-publish.ts b/cli/lib/play-publish.ts
index d4f5c41..6174390 100644
--- a/cli/lib/play-publish.ts
+++ b/cli/lib/play-publish.ts
@@ -13,9 +13,23 @@ export const PUBLISH_CONFIRM = 'Publish';
 
 export interface ReadyChange { track: string; version: string | null; build: string | null; rollout: string; liveVersion: string | null }
 
+/**
+ * Ready only when the public store page POSITIVELY shows an older version than the completed production release
+ * (both parsed and compared; playReleases sets liveVersion only then) and the page read is fresh. A 404, a failed or
+ * stale read, "Varies with device", a same or newer version, or an unparseable version is never "ready": a release
+ * already published (managed publishing, "Last published on ...") must not be reported as waiting.
+ */
+const isReady = (r: ReturnType<typeof playReleases>[number]): boolean => r.track === 'production' && r.managed === true && r.phase === 'review' && !!r.liveVersion && !r.pageStaleAt && !!r.version;
+
+/** True when a completed managed production release exists but the store page cannot tell whether it is published. */
+export function readyUndetermined(data: unknown): boolean {
+  const rs = playReleases(data);
+  return (data as { managedPublishing?: unknown })?.managedPublishing === true && rs.some(r => r.track === 'production' && r.state === 'completed' && !isReady(r) && r.phase !== 'live');
+}
+
 /** Ready-to-publish production releases from the `play status --json` data ({ tracks, publicPage, managedPublishing }). */
 export function readyToPublish(data: unknown): ReadyChange[] {
-  return playReleases(data).filter(r => r.track === 'production' && r.managed === true && r.phase === 'review').map(r => ({
+  return playReleases(data).filter(isReady).map(r => ({
     track: r.track ?? 'production', version: r.version, build: r.build,
     rollout: r.fraction !== null && r.fraction < 1 ? `${Math.round(r.fraction * 1000) / 10}% staged` : 'full rollout', liveVersion: r.liveVersion ?? null,
   }));
diff --git a/cli/play/publish-ready.ts b/cli/play/publish-ready.ts
index 14f5dfe..705400b 100644
--- a/cli/play/publish-ready.ts
+++ b/cli/play/publish-ready.ts
@@ -1,18 +1,20 @@
 // Read-only: the production releases waiting in Publishing overview (managed publishing), from the tracks and the public store page.
 import type { ShipConfig } from '../lib/config';
 import { need } from '../lib/ctx';
-import { type ReadyChange, readyToPublish } from '../lib/play-publish';
+import { type ReadyChange, readyToPublish, readyUndetermined } from '../lib/play-publish';
 import { playPublicPage } from '../lib/play-public';
 import { playClient } from './client';
 
-export async function readyFromApi(root: string, config: ShipConfig): Promise<ReadyChange[]> {
+export async function readyFromApi(root: string, config: ShipConfig): Promise<ReadyChange[] & { undetermined?: boolean }> {
   const pkg = need(config.play?.packageName, 'play.packageName');
   const play = await playClient(root, pkg);
-  let out: ReadyChange[] = [];
+  let out: ReadyChange[] & { undetermined?: boolean } = [];
   await play.read(async id => {
     const tracks = (await play.call<{ tracks?: unknown[] }>('GET', `${play.API}/edits/${id}/tracks`)).tracks ?? [];
     const publicPage = await playPublicPage(play.packageName);
-    out = readyToPublish({ tracks, publicPage, managedPublishing: config.play?.managedPublishing ?? null });
+    const data = { tracks, publicPage, managedPublishing: config.play?.managedPublishing ?? null };
+    out = readyToPublish(data);
+    out.undetermined = !out.length && readyUndetermined(data);
   });
   return out;
 }
diff --git a/tests/console-play-plans.test.ts b/tests/console-play-plans.test.ts
index f517dd9..c65df5d 100644
--- a/tests/console-play-plans.test.ts
+++ b/tests/console-play-plans.test.ts
@@ -7,7 +7,7 @@ import { consoleAnswers, PLAN_FORM_IDS, PLAN_ONLY_FORM_IDS } from '../cli/lib/co
 import { declarationSaveAllowed, flowAllowed, forbiddenControl, formDef, forbiddenTick, publishingControl } from '../cli/lib/console-forms';
 import { consolePlan, IN_PAGE_LOOP, playConsoleReminders, planText } from '../cli/lib/console-plan';
 import { APP_CONTENT_CARDS, PLAY_MATERIAL_FACT, startLabel } from '../cli/lib/console-play-plans';
-import { readyLines, readyToPublish } from '../cli/lib/play-publish';
+import { readyLines, readyToPublish, readyUndetermined } from '../cli/lib/play-publish';
 import { appPrivacyPublished, verifyPublishChangesApi, verifyAppContent, verifyPlayDeclaration, verifyText } from '../cli/lib/console-verify';
 import { CONSOLE_PLAN_FORMS, TOOLS, validateInput } from '../cli/mcp-tools';
 import { playRules, type PlaySnapshot } from '../cli/lib/validate-rules';
@@ -343,11 +343,19 @@ describe('the first production release: countries, managed publishing, the owner
 
   test('publish changes: ready = managed + completed production the store page does not show; verify by API and by page text', () => {
     const tracks = [{ track: 'production', releases: [{ name: '2.0.0 (45)', versionCodes: ['45'], status: 'completed' }] }];
-    const ready = readyToPublish({ tracks, publicPage: { state: 'notPublic' }, managedPublishing: true });
-    expect(ready).toEqual([{ track: 'production', version: '2.0.0', build: '45', rollout: 'full rollout', liveVersion: null }]);
-    expect(readyToPublish({ tracks, publicPage: { state: 'notPublic' }, managedPublishing: false })).toEqual([]);
+    const ready = readyToPublish({ tracks, publicPage: { state: 'public', versionName: '1.9.0' }, managedPublishing: true });
+    expect(ready).toEqual([{ track: 'production', version: '2.0.0', build: '45', rollout: 'full rollout', liveVersion: '1.9.0' }]);
+    expect(readyToPublish({ tracks, publicPage: { state: 'public', versionName: '1.9.0' }, managedPublishing: false })).toEqual([]);
     expect(readyToPublish({ tracks, publicPage: { state: 'public', versionName: '2.0.0' }, managedPublishing: true })).toEqual([]);
-    expect(readyToPublish({ tracks, publicPage: { state: 'public', versionName: '1.9.0' }, managedPublishing: true })[0]!.liveVersion).toBe('1.9.0');
+    // already published (real case: 2.0.0 / 2000001 full rollout, "Last published on ..."): never ready, whatever the page says
+    const live = [{ track: 'production', releases: [{ name: '2.0.0 (2000001)', versionCodes: ['2000001'], status: 'completed' }] }];
+    for (const publicPage of [{ state: 'public', versionName: '2.0.0' }, { state: 'public', versionName: '2.1.0' }, { state: 'public', versionName: null }, { state: 'public', varies: true }, { state: 'notPublic' }, { state: 'unknown' }, { state: 'public', versionName: '1.9.0', stale: true, checkedAt: '2026-10-24T00:00:00Z' }]) {
+      expect({ publicPage, ready: readyToPublish({ tracks: live, publicPage, managedPublishing: true }) }).toEqual({ publicPage, ready: [] });
+    }
+    const unk = Object.assign([], { undetermined: readyUndetermined({ tracks: live, publicPage: { state: 'notPublic' }, managedPublishing: true }) });
+    expect(unk.undetermined).toBe(true);
+    expect(verifyPublishChangesApi(unk).ok).toBe(true);
+    expect(verifyPublishChangesApi(unk).rows[0]!.seen).toContain('not determined');
     expect(readyLines(ready).join('\n')).toContain('storebound console plan play-publish-changes');
     expect(readyLines([])).toEqual([]);
     expect(verifyPublishChangesApi(ready).ok).toBe(false);

From fb1609cba77ec86f29daad3e563926ecc155bd43 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Sat, 24 Oct 2026 12:10:23 +0800
Subject: [PATCH 004/126] upload --pre-check/--evidence, shots copy translate,
 game-center --locale-map, play games API-disabled hint

---
 CHANGELOG.md                       |   5 ++
 cli/apple/game-center.ts           |  17 ++--
 cli/apple/upload.ts                |   6 +-
 cli/check.ts                       |   8 ++
 cli/commands.ts                    |   1 +
 cli/data/flags.json                |  35 +++++++-
 cli/games-status.ts                |   2 +-
 cli/lib/config.ts                  |   9 +++
 cli/lib/console-games-plan.ts      |   2 +-
 cli/lib/credentials.ts             |   4 +-
 cli/lib/game-services.ts           |  48 ++++++++++-
 cli/lib/google-errors.ts           |   2 +
 cli/lib/pre-check.ts               |  72 +++++++++++++++++
 cli/lib/ship-step.ts               |   6 +-
 cli/lib/shots-copy-translate.ts    |  75 +++++++++++++++++
 cli/play/games.ts                  |  22 ++++-
 cli/play/upload.ts                 |   6 +-
 cli/shots/copy.ts                  | 125 +++++++++++++++++++++++++++++
 cli/shots/lib.ts                   |   2 +-
 docs/ship-step.md                  |   7 ++
 skills/store-pitfalls/SKILL.md     |  39 +++++++++
 tests/game-services.test.ts        |  53 +++++++++++-
 tests/ship-step.test.ts            |  28 +++++++
 tests/shots-copy-translate.test.ts |  52 ++++++++++++
 24 files changed, 599 insertions(+), 27 deletions(-)
 create mode 100644 cli/lib/pre-check.ts
 create mode 100644 cli/lib/shots-copy-translate.ts
 create mode 100644 cli/shots/copy.ts
 create mode 100644 tests/shots-copy-translate.test.ts

diff --git a/CHANGELOG.md b/CHANGELOG.md
index b4f69d8..043b6e2 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -4,6 +4,11 @@
 ## Unreleased
 
 - Play managed publishing: `storebound console plan play-publish-changes` (Publishing overview > "Changes ready to publish" > the owner's final "Publish N changes" + its confirm dialog; never-press: Discard changes, Stop managed publishing; `--lookup` lists the ready production releases from the API) and `console verify play-publish-changes` (API: passes when no production release is left ready to publish; or the page text). `play status` (and `--json` `readyToPublish`) prints the ready items and the plan hint, `storebound status` names the plan, and the desktop Releases tab shows the same hint with a button that opens Publishing overview. A release counts as ready to publish only when the public store page positively shows an older version; a 404, a failed or stale page read, a same or unparseable version is never ready (verify says "not determined" instead of a mismatch).
+||||||| parent of abe0821 (upload --pre-check/--evidence, shots copy translate, game-center --locale-map, play games API-disabled hint)
+- `apple upload` / `play upload` `--pre-check "<cmd with {file}>"` (config `upload.preCheck`) runs your gate before any byte is sent; a nonzero exit refuses the upload (ship-step exit 1, `PRE_CHECK_FAILED`). `--evidence <path.json>` (`upload.evidence`) writes file, sha256, size, command, exit code, stdout tail, time and version, also on failure, and the result carries it as `preCheck`.
+- New `storebound shots copy translate --to de,es` fills store/shots/copy.json per language (agent translation or `--translate "<cmd>"`), machine-translated until `shots copy reviewed`, caption limits respected; `shots copy check`; `check` / `shots render` name this command for a missing language.
+- `apple game-center --locale-map en=en-GB` (config `games.localeMap`) maps a config language to the live Game Center locale; the dry run suggests it when the live Game Center has exactly one variant of the language.
+- `play games`: a 403 SERVICE_DISABLED / accessNotConfigured names the Google Play Game Services Publishing API, the enable URL for the project and `console plan play-games-services`.
 - Desktop dev update channel: Settings > Updates offers Stable (the npm releases) and Dev (every push to main). Each push to main builds Windows and Linux bundles stamped `<next patch>-dev.<UTC commit time>` (above the current stable, below the next one); the VDS signs them and serves `storebound.dev/desktop/dev/latest.json` (newest 5 kept). The app checks its channel at start, every 15 minutes, after sleep and right after a channel switch, installs a strictly newer build quietly (deferred while the window is in use), never downgrades (dev back to stable waits for a newer stable), rewrites its logon autostart on every start, and the tray card shows version and channel. No macOS dev builds (Developer ID signing needs the Mac's GUI session).
 - `shots` full-bleed layout: `shots.layout: "bleed"` fills the image with the app's own frame (no device, no background) and puts the scene title as a short corner caption (`corner`, `captionScale`, `captionWidth`, `captionInset` per scene) legible through a text shadow and soft glow only; the Play feature graphic shows the logo or `shots.feature.title`. Frames are captured per size at its own pixels in `<frames>/<lang>/<size>/<name>.png` (feature: `<lang>/feature/`), including the `mac` and `chromebook` sizes; `shots check` / `capture --source folder` verify aspect and native width. `shots.orientation: "landscape"` (bleed only) renders every portrait size landscape (stores accept it). Templates `template-bleed.html`, `feature-bleed.html`.
 - `storebound desktop`: "opened" now also works when a hidden tray copy is already running. On Windows it prints "opened" only when a process of the installed path has a visible window (the running copy shows it through the single-instance handoff); on macOS / Linux a visible start or a handoff to the running copy counts, otherwise it says only a tray copy runs. The graceful stop waits 3 s on Windows (closing a tray app only hides it), then stops by PID.
diff --git a/cli/apple/game-center.ts b/cli/apple/game-center.ts
index e122b2d..ba757e0 100644
--- a/cli/apple/game-center.ts
+++ b/cli/apple/game-center.ts
@@ -1,5 +1,7 @@
 // Game Center through the App Store Connect API, from the `games` config section (cli/lib/game-services.ts).
-//   storebound apple game-center [status] [--dry] [--yes] [--json]
+//   storebound apple game-center [status] [--locale-map en=en-GB] [--dry] [--yes] [--json]
+// --locale-map (config games.localeMap): config language -> the locale the live Game Center uses; the dry run suggests it
+// when Game Center has exactly one variant of a language (en-GB) and the config says another (en-US).
 // status: read-only (App ID capability, Game Center detail, the editable version's switch, leaderboards and
 // achievements on the store vs the config, the project's entitlement). Default: the upsert. Every write is a
 // find-then-create (createOnce: a conflict or an unclear answer reads the store again, never a second create) or a
@@ -10,7 +12,7 @@ import { consoleLink } from '../lib/console-links';
 import type { Ctx } from '../lib/ctx';
 import { confirm, need } from '../lib/ctx';
 import { dryPlan } from '../lib/dry';
-import { type GcExisting, gcFindings, type ItemPlan, planGameCenter, planRows, usesGameCenter } from '../lib/game-services';
+import { type GcExisting, gcFindings, gcLocaleMap, type ItemPlan, liveGcLocales, planGameCenter, planRows, suggestLocaleMap, usesGameCenter } from '../lib/game-services';
 import { done, log, warn } from '../lib/log';
 import { createOnce } from '../lib/upsert';
 import { type Asc, ascClient, type J } from './asc';
@@ -61,21 +63,24 @@ export async function run(ctx: Ctx): Promise<void> {
   const { config, root } = ctx.loaded;
   const a = ctx.args;
   const sub = a._[0] ?? 'sync';
-  if (!['sync', 'status'].includes(sub)) throw new Error('usage: storebound apple game-center [status] [--dry] [--yes] [--json]');
+  if (!['sync', 'status'].includes(sub)) throw new Error('usage: storebound apple game-center [status] [--locale-map en=en-GB] [--dry] [--yes] [--json]');
   if (!usesGameCenter(config)) throw new Error('games.gameCenter is not true in storebound.config.ts (game-services skill): nothing to do');
   const bundleId = need(config.apple?.bundleId, 'apple.bundleId');
   const c = await ascClient(root, bundleId, config.apple?.appId);
   const appId = await c.app();
   const s = await readGameCenter(c, bundleId);
   const g = config.games!;
-  const plan = planGameCenter(g, config.languages, s);
+  const localeMap = gcLocaleMap(g, a.many('locale-map'));
+  const plan = planGameCenter(g, config.languages, s, localeMap);
+  const suggest = suggestLocaleMap(config.languages, liveGcLocales(s), localeMap);
   const project = gcFindings(config, readProjectEntitlements(root));
 
-  if (a.has('json')) { console.log(JSON.stringify({ ...stateSummary(s, plan), project, plan }, null, 2)); return; }
+  if (a.has('json')) { console.log(JSON.stringify({ ...stateSummary(s, plan), project, localeMap, ...(suggest.length ? { suggestLocaleMap: suggest } : {}), plan }, null, 2)); return; }
   if (s.capability === false) warn(TAG, `the App ID ${bundleId} has no GAME_CENTER capability: storebound apple signing ensure --dry, then without --dry (games.gameCenter adds it)`);
   if (s.capability === null) warn(TAG, `bundle id ${bundleId} not found in Certificates, Identifiers & Profiles: storebound apple bundle`);
   for (const f of project) (f.level === 'ok' ? log : warn)(TAG, `${f.msg}${f.fix ? ` (${f.fix})` : ''}`);
 
+  for (const x of suggest) warn(TAG, `config language "${x.id}" is ${x.from}, but the live Game Center has only ${x.to} for that language, so ${x.from} would be created next to it. Map it: storebound apple game-center --locale-map ${x.id}=${x.to} (or games: { localeMap: { ${x.id}: '${x.to}' } } in the config)`);
   const rows = [
     { item: 'Game Center (app)', action: s.detail ? 'keep' : 'create', detail: 'POST /v1/gameCenterDetails' },
     ...(s.version ? [{ item: `Game Center (version ${s.version.versionString})`, action: s.version.enabled ? 'keep' : 'create', detail: 'POST /v1/gameCenterAppVersions' }] : []),
@@ -122,7 +127,7 @@ export async function run(ctx: Ctx): Promise<void> {
   }
   // read back: the store must now match the config (lists can lag right after a create: say so, do not fail)
   const after = await readGameCenter(c, bundleId);
-  const left = planGameCenter(g, config.languages, after).filter(p => p.action !== 'keep' || p.locales.some(l => l.action !== 'keep'));
+  const left = planGameCenter(g, config.languages, after, localeMap).filter(p => p.action !== 'keep' || p.locales.some(l => l.action !== 'keep'));
   if (!after.detail || left.length) warn(TAG, `read back: ${!after.detail ? 'no Game Center detail yet; ' : ''}${left.map(p => `${p.kind} ${p.id}`).join(', ') || ''} not listed as written yet (App Store Connect lists lag after a create): run storebound apple game-center status in a minute`);
   done(TAG, `Game Center: ${after.leaderboards.length} leaderboard(s), ${after.achievements.length} achievement(s); images and review go with the next version (${consoleLink('asc.version')})`);
 }
diff --git a/cli/apple/upload.ts b/cli/apple/upload.ts
index 6868d25..966019f 100644
--- a/cli/apple/upload.ts
+++ b/cli/apple/upload.ts
@@ -1,5 +1,5 @@
 // Upload an IPA to App Store Connect and wait until Apple has processed the build.
-//   storebound apple upload [<app.ipa>] [--build N] [--allow-existing] [--via api|altool] [--no-wait] [--timeout 60m] [--dry] [--yes] [--json]
+//   storebound apple upload [<app.ipa>] [--build N] [--allow-existing] [--via api|altool] [--no-wait] [--timeout 60m] [--pre-check "<cmd with {file}>"] [--evidence <path.json>] [--dry] [--yes] [--json]
 // Default IPA: the newest in <apple.build.out or build/ios>/export (and its <version>-<build>/ folders), or with
 // --build N the one with that build number. The bundle id, version and build number come from the IPA's Info.plist.
 // An IPA whose build number is already on App Store Connect fails with exit 1 (a stale IPA left by a failed
@@ -16,6 +16,7 @@
 // with `apple testflight wait` (waitForBuild) until processingState is VALID (exit 0), INVALID / FAILED (exit 1) or the
 // timeout (exit 7).
 // An upload is a write: --dry shows the plan; a real run asks first (--yes in scripts).
+import { runPreCheck } from '../lib/pre-check';
 import { appleSdkProblem } from '../lib/store-minimums';
 import { closeSync, existsSync, openSync, readdirSync, readSync, statSync } from 'node:fs';
 import { basename, join, relative } from 'node:path';
@@ -251,6 +252,7 @@ export async function run(ctx: Ctx): Promise<void> {
   // upload when NSPrivacyTracking and NSPrivacyTrackingDomains disagree (ITMS-91064), so stop before any network call
   const privacy = bundleTrackingIssues(ipaManifests(ipa));
   if (privacy.length) throw new Error(`${relative(root, ipa)}: not uploaded, Apple would refuse it as Invalid Binary:\n${privacy.map(x => `  ${x}`).join('\n')}\nFix the manifest, rebuild (storebound apple build) and upload the new IPA.`);
+  const pre = await runPreCheck({ args: a, config, root, resolve, file: ipa, shown: relative(root, ipa), tag: TAG });
   const size = statSync(ipa).size;
   const dry = a.has('dry');
   const json = a.has('json');
@@ -294,7 +296,7 @@ export async function run(ctx: Ctx): Promise<void> {
     ? [describeReq(reqs.upload), describeReq(reqs.file('<upload id>')), `PUT the file parts to the upload URLs Apple returns`, describeReq(reqs.commit('<file id>', '<md5>')), 'GET /v1/buildUploads/<id> until COMPLETE']
     : [showCmd(altoolArgs(ipa, { keyPath: '$ASC_P8', keyId: '$ASC_KEY_ID', issuerId: '$ASC_ISSUER_ID' }), null)];
   if (wait) plan.push(`GET /v1/builds?filter[version]=${info.build} until processingState is VALID (timeout ${a.str('timeout', '60m')})`);
-  const summary = { ipa: relative(root, ipa), bundleId: info.bundleId, version: info.version, build: info.build, sizeMB: Math.round(size / 104857.6) / 10, via, plan };
+  const summary = { ipa: relative(root, ipa), bundleId: info.bundleId, version: info.version, build: info.build, sizeMB: Math.round(size / 104857.6) / 10, via, plan, ...(pre ? { preCheck: pre } : {}) };
   if (dry) {
     if (json) { printJson(summary); return; }
     log(TAG, `${summary.ipa}: ${info.bundleId} ${info.version} (${info.build}), ${summary.sizeMB} MB, build number free`);
diff --git a/cli/check.ts b/cli/check.ts
index ed1f5ab..89ddd21 100644
--- a/cli/check.ts
+++ b/cli/check.ts
@@ -5,6 +5,7 @@
 //   storebound check --aso    keyword audit of both listing files (App Store keyword field, Play stuffing); exit 1 on errors
 //   --json                    structured result ({ ok, items, warnings, hints, problems } or { findings, errors }), exit 1 on problems
 import { localGameFindings } from './games-status';
+import { marksNotes, marksPath, parseMarks } from './lib/shots-copy-translate';
 import { templateBlockers } from './lib/template-answers';
 import { COPYRIGHT_MISSING, templatePlaceholders } from './lib/validate-rules';
 import { existsSync, readdirSync, readFileSync, statSync } from 'node:fs';
@@ -212,6 +213,13 @@ export async function run(ctx: Ctx): Promise<void> {
     if (e.length) throw new Error(e.join('; '));
     return `${Object.keys(copy).length} languages x ${config.shots!.scenes.length} scenes`;
   });
+  if (config.shots) {
+    try {
+      const cp = resolve(config.shots.copy);
+      const mf = marksPath(cp);
+      if (existsSync(mf)) for (const n of marksNotes(parseMarks(readFileSync(mf, 'utf8')), relative(process.cwd(), cp) || cp)) note(n);
+    } catch { /* unreadable marks: shots copy check says so */ }
+  }
   // Capacitor: the native builds ship the web assets cap sync copied last (pitfall 20)
   for (const store of ['apple', 'play'] as const) {
     if (!config[store] || prebuildFor(config, store)) continue;
diff --git a/cli/commands.ts b/cli/commands.ts
index ddce923..e4df348 100644
--- a/cli/commands.ts
+++ b/cli/commands.ts
@@ -103,6 +103,7 @@ export const COMMANDS: Record<string, [() => Promise<Mod>, string]> = {
   'shots capture': [() => import('./shots/capture'), 'raw frames: --source web (playwright; signed-in apps: shots.capture.auth) | ios-sim (simctl) | android-emu (adb) | folder; --dry'],
   'shots login': [() => import('./shots/login'), 'opens a visible browser (fresh profile) at shots.capture.baseUrl or --url; you sign in to a demo account by hand, Enter saves .storebound/auth.json (0600) for shots.capture.auth.storageState; --timeout <s>'],
   'shots fonts': [() => import('./shots/fonts'), 'download font subsets for the copy (CJK / Arabic / Cyrillic ...)'],
+  'shots copy': [() => import('./shots/copy'), 'translate --to de,es [--from en] [--translate "<command>"]: fill store/shots/copy.json per language (machine-translated until reviewed, caption limits); check | reviewed --lang de'],
   'shots render': [() => import('./shots/render'), 'store screenshots + feature graphic in every size and language'],
   'shots jpeg': [() => import('./shots/jpeg'), 'JPEG q92 copies of the Play renders (4x faster uploads)'],
   'shots check': [() => import('./shots/check'), 'local store checks of the renders (size, alpha, counts, overflow) and folder frames; --variants, --json'],
diff --git a/cli/data/flags.json b/cli/data/flags.json
index 5fc96bf..9707cf8 100644
--- a/cli/data/flags.json
+++ b/cli/data/flags.json
@@ -73,6 +73,7 @@
    "configuration",
    "env-file",
    "keychain",
+   "locale-map",
    "no-install",
    "no-prebuild",
    "out",
@@ -113,6 +114,7 @@
   ],
   "apple game-center": [
    "keychain",
+   "locale-map",
    "no-install"
   ],
   "apple iap": [
@@ -223,6 +225,7 @@
    "build",
    "env-file",
    "keychain",
+   "locale-map",
    "new-version",
    "no-install",
    "no-submit",
@@ -250,11 +253,13 @@
   ],
   "apple signing": [
    "keychain",
+   "locale-map",
    "no-install"
   ],
   "apple status": [
    "cancel-submission",
    "keychain",
+   "locale-map",
    "no-install",
    "platform",
    "timeout",
@@ -265,6 +270,7 @@
    "build",
    "env-file",
    "keychain",
+   "locale-map",
    "new-version",
    "no-install",
    "no-submit",
@@ -324,6 +330,7 @@
    "build",
    "csv",
    "env-file",
+   "evidence",
    "group",
    "internal-only",
    "invite",
@@ -331,6 +338,7 @@
    "locale",
    "no-wait",
    "older-than",
+   "pre-check",
    "progress",
    "remove",
    "result-file",
@@ -440,6 +448,7 @@
    "flutter",
    "godot",
    "keychain",
+   "locale-map",
    "name",
    "no-install",
    "react-native",
@@ -545,6 +554,7 @@
   ],
   "games status": [
    "keychain",
+   "locale-map",
    "no-install"
   ],
   "health": [
@@ -780,9 +790,11 @@
   ],
   "play upload": [
    "env-file",
+   "evidence",
    "include-drafts",
    "name",
    "not-sent-for-review",
+   "pre-check",
    "progress",
    "prune",
    "result-file",
@@ -928,6 +940,14 @@
    "src",
    "variants"
   ],
+  "shots copy": [
+   "all",
+   "force",
+   "from",
+   "lang",
+   "to",
+   "translate"
+  ],
   "shots fonts": [],
   "shots gallery": [
    "lang",
@@ -1024,6 +1044,7 @@
    "jobs",
    "keychain",
    "lang",
+   "locale-map",
    "no-health",
    "no-install",
    "no-local",
@@ -1140,6 +1161,7 @@
    "end",
    "env-file",
    "every",
+   "evidence",
    "experiment",
    "expo",
    "fields",
@@ -1188,6 +1210,7 @@
    "listing-text",
    "listings",
    "locale",
+   "locale-map",
    "lookup",
    "manual-release",
    "max-level",
@@ -1243,6 +1266,7 @@
    "plist",
    "port",
    "poster",
+   "pre-check",
    "production",
    "profile",
    "progress",
@@ -1401,7 +1425,7 @@
    "storebound apple events submit --name \"...\" [--dry] [--yes]  into a review submission (the owner's step; asks)"
   ],
   "apple game-center": [
-   "storebound apple game-center [status] [--dry] [--yes] [--json]"
+   "storebound apple game-center [status] [--locale-map en=en-GB] [--dry] [--yes] [--json]"
   ],
   "apple iap": [
    "storebound apple iap [--dry] [--only id1,id2] [--allow-price-changes]"
@@ -1480,7 +1504,7 @@
    "storebound apple testflight expire (--keep N | --older-than D) [--version x.y.z] [--dry] [--yes] [--json]"
   ],
   "apple upload": [
-   "storebound apple upload [<app.ipa>] [--build N] [--allow-existing] [--via api|altool] [--no-wait] [--timeout 60m] [--dry] [--yes] [--json]"
+   "storebound apple upload [<app.ipa>] [--build N] [--allow-existing] [--via api|altool] [--no-wait] [--timeout 60m] [--pre-check \"<cmd with {file}>\"] [--evidence <path.json>] [--dry] [--yes] [--json]"
   ],
   "apple win-back": [
    "storebound apple win-back [--only sub1,sub2] [--dry] [--yes] [--json]"
@@ -1629,7 +1653,7 @@
    "storebound play subscriptions [--dry] [--only id1,id2] [--csv store/prices.csv] [--yes] [--allow-price-changes]"
   ],
   "play upload": [
-   "storebound play upload [<app.aab>] [--track internal|alpha|beta|production] [--status completed|draft] [--version-code N] [--name text] [--not-sent-for-review] [--dry] [--yes] [--json]"
+   "storebound play upload [<app.aab>] [--track internal|alpha|beta|production] [--status completed|draft] [--version-code N] [--name text] [--not-sent-for-review] [--pre-check \"<cmd with {file}>\"] [--evidence <path.json>] [--dry] [--yes] [--json]"
   ],
   "prices": [
    "storebound prices export [--out store/prices.csv] [--store apple|play] [--only ids] [--with-automatic] [--no-subscriptions] [--dry] [--json]",
@@ -1677,6 +1701,11 @@
   "shots check": [
    "storebound shots check [--lang en,tr] [--variants] [--json]"
   ],
+  "shots copy": [
+   "storebound shots copy translate --to de,es [--from en] [--translate \"<command>\"] [--force] [--dry] [--json]",
+   "storebound shots copy check [--json]               marked languages, caption limits; exit 1 on a problem",
+   "storebound shots copy reviewed --lang de[,es] | --all [--dry]   a human read the copy: remove its marker"
+  ],
   "shots fonts": [
    "storebound shots fonts [--json]     (re-run after editing the copy or the fonts)"
   ],
diff --git a/cli/games-status.ts b/cli/games-status.ts
index a1a2048..5a06489 100644
--- a/cli/games-status.ts
+++ b/cli/games-status.ts
@@ -47,7 +47,7 @@ export async function gameServicesStatus(loaded: Loaded, o: { apple?: boolean; p
       const c = await ascClient(root, config.apple.bundleId, config.apple.appId);
       const s = await readGameCenter(c, config.apple.bundleId);
       out.apple = { capability: s.capability, enabled: !!s.detail, version: s.version?.versionString ?? null, versionEnabled: s.version ? s.version.enabled : null,
-        leaderboards: s.leaderboards.length, achievements: s.achievements.length, config: count('apple'), changes: changesOf(planGameCenter(g, config.languages, s)), why: gcUse.why ?? undefined };
+        leaderboards: s.leaderboards.length, achievements: s.achievements.length, config: count('apple'), changes: changesOf(planGameCenter(g, config.languages, s, g.localeMap)), why: gcUse.why ?? undefined };
     } catch (e) { out.apple = { capability: null, enabled: false, version: null, versionEnabled: null, leaderboards: 0, achievements: 0, config: count('apple'), changes: [], error: (e as Error).message.slice(0, 300) }; }
   }
   if (config.play && usesPlayGames(config) && o.play !== false) {
diff --git a/cli/lib/config.ts b/cli/lib/config.ts
index e6e87cc..f300e23 100644
--- a/cli/lib/config.ts
+++ b/cli/lib/config.ts
@@ -768,6 +768,15 @@ export interface ShipConfig {
     /** Words `whats-new check` must not flag as internal jargon (a product or game term that collides), any case. */
     allowWords?: string[];
   };
+  /** Uploads (`apple upload`, `play upload`). */
+  upload?: {
+    /** Shell command run before any byte is sent; `{file}` is the IPA / AAB path. A nonzero exit refuses the upload
+     *  (ship-step error code PRE_CHECK_FAILED). `--pre-check` overrides it. */
+    preCheck?: string;
+    /** Where the pre-check evidence JSON (file, sha256, size, command, exit code, stdout tail, time, storebound
+     *  version) is written. `--evidence` overrides it. */
+    evidence?: string;
+  };
   /** Native builds (`apple build`, `play build`). */
   build?: {
     /** Shell command run in the project root before the archive / bundle, e.g. "npm run build && npx cap sync" for a
diff --git a/cli/lib/console-games-plan.ts b/cli/lib/console-games-plan.ts
index 48bb8cc..c3c9b4a 100644
--- a/cli/lib/console-games-plan.ts
+++ b/cli/lib/console-games-plan.ts
@@ -49,7 +49,7 @@ export function playGamesPart(config: ShipConfig, p: PlanIds): Part {
       { n: 5, text: `Credentials > Add credential > Android: pick ${pkg}; it links to an OAuth client in Google Cloud. Create it at ${GOOGLE_CLOUD_CREDENTIALS} > Create credentials > OAuth client ID > Android (package ${pkg}, the SHA-1 of step 4) > Create, then back in Play Console pick that client > Save changes.`, click: ['Add credential', 'Save changes'], answers: ['package', 'sha1'] },
       { n: 6, text: `Only with a game server (ask-owner): Add credential > Game server: create a Web application OAuth client at ${GOOGLE_CLOUD_CREDENTIALS}, pick it, Save changes. Its client id goes into the game's requestServerSideAccess; the client secret stays on the server (never in chat or files here).`, answers: ['webClient'] },
       { n: 7, text: 'Copy the project id (Configuration page, "Project ID" / Get resources): write it to games.playGames.appId, and put the resources XML into android/app/src/main/res/values/games-ids.xml. `storebound check` then compares it with the manifest\'s com.google.android.gms.games.APP_ID.' },
-      { n: 8, text: `Leaderboards (${lb}) and achievements (${ach}) come from the config: run \`storebound play games --dry\`, then without --dry (the Configuration API; drafts only). Play needs at least 5 achievements before it publishes the games project.` },
+      { n: 8, text: `Leaderboards (${lb}) and achievements (${ach}) come from the config: run \`storebound play games --dry\`, then without --dry (the Configuration API; drafts only). If it answers 403 SERVICE_DISABLED / accessNotConfigured, the Google Play Game Services Publishing API is off in the service account's Cloud project: open https://console.cloud.google.com/apis/library/gamesconfiguration.googleapis.com?project=<project id of the service account key> (the error names the project), press Enable, wait a minute, run it again. Play needs at least 5 achievements before it publishes the games project.` },
       { n: 9, text: 'Testers: Play Games Services > Testers lists who can sign in before publishing (the owner adds them; storebound never invites testers).' },
       { n: 10, text: `Stop before "${PGS_PUBLISH}" (Review and publish): the owner presses it. Then read the page text and pipe it to \`storebound console verify play-games-services --from-text -\`.` },
     ],
diff --git a/cli/lib/credentials.ts b/cli/lib/credentials.ts
index 709be38..186a8fe 100644
--- a/cli/lib/credentials.ts
+++ b/cli/lib/credentials.ts
@@ -28,7 +28,7 @@ import { homedir, tmpdir } from 'node:os';
 import { isAbsolute, join, resolve } from 'node:path';
 import * as rt from './rt';
 
-export interface ServiceAccount { client_email: string; private_key: string; token_uri?: string }
+export interface ServiceAccount { client_email: string; private_key: string; token_uri?: string; project_id?: string }
 export interface AscKey { keyId: string; issuerId: string; pem: string }
 export interface ReviewContact { firstName: string; lastName: string; phone: string; email: string }
 
@@ -201,7 +201,7 @@ export function parseServiceAccount(text: string): ServiceAccount {
   const j = JSON.parse(text) as Partial<ServiceAccount>;
   if (typeof j.client_email !== 'string' || typeof j.private_key !== 'string' || !j.private_key.includes('PRIVATE KEY'))
     throw new Error('not a Google service account JSON key (client_email / private_key missing)');
-  return { client_email: j.client_email, private_key: j.private_key, token_uri: j.token_uri };
+  return { client_email: j.client_email, private_key: j.private_key, token_uri: j.token_uri, ...(typeof j.project_id === 'string' ? { project_id: j.project_id } : {}) };
 }
 
 export function playServiceAccount(root: string): ServiceAccount {
diff --git a/cli/lib/game-services.ts b/cli/lib/game-services.ts
index 9de1f7f..47fd17c 100644
--- a/cli/lib/game-services.ts
+++ b/cli/lib/game-services.ts
@@ -65,6 +65,8 @@ export interface GamesConfig {
   gameCenter?: boolean;
   /** Play Games Services: the games project id (the digits of games_APP_ID / com.google.android.gms.games.APP_ID). */
   playGames?: { appId?: string };
+  /** Game Center only: config language id (or its apple locale) -> the locale the live Game Center uses, e.g. { en: 'en-GB' } when the app's English is en-GB there but the language says en-US. `storebound apple game-center --locale-map en=en-GB` overrides. */
+  localeMap?: Record<string, string>;
   leaderboards?: GameLeaderboard[];
   achievements?: GameAchievement[];
 }
@@ -78,6 +80,10 @@ export function validateGames(g: GamesConfig | undefined, languages: Language[]
   if (g.gameCenter !== undefined && typeof g.gameCenter !== 'boolean') e.push('games.gameCenter: true | false');
   if (g.playGames !== undefined && (typeof g.playGames !== 'object' || (g.playGames.appId !== undefined && !/^\d{6,20}$/.test(String(g.playGames.appId)))))
     e.push('games.playGames.appId: the digits of the Play Games Services project id (games_APP_ID)');
+  if (g.localeMap !== undefined) {
+    if (!g.localeMap || typeof g.localeMap !== 'object' || Array.isArray(g.localeMap)) e.push('games.localeMap: an object { en: "en-GB" } (config language id or locale -> Game Center locale)');
+    else for (const [k, v] of Object.entries(g.localeMap)) if (typeof v !== 'string' || !/^[A-Za-z]{2,3}(-[A-Za-z0-9]{2,8})*$/.test(v)) e.push(`games.localeMap.${k}: "${String(v)}" is not a locale like en-GB`);
+  }
   const langs = new Set(languages.map(l => l.id));
   const seen = new Set<string>();
   const checkId = (kind: string, id: unknown) => {
@@ -133,7 +139,41 @@ export function changedFields(have: Record<string, unknown> | undefined, want: R
   return Object.keys(want).filter(k => JSON.stringify(have?.[k] ?? null) !== JSON.stringify(want[k] ?? null));
 }
 
-const appleLocale = (languages: Language[], id: string): string | undefined => languages.find(l => l.id === id)?.apple;
+const appleLocale = (languages: Language[], id: string, map: Record<string, string> = {}): string | undefined => {
+  const apple = languages.find(l => l.id === id)?.apple;
+  return map[id] ?? (apple ? map[apple] : undefined) ?? apple;
+};
+
+/** The effective Game Center locale map: games.localeMap, then --locale-map en=en-GB,tr=tr (flag entries win). */
+export function gcLocaleMap(g: GamesConfig | undefined, flag: string[] = []): Record<string, string> {
+  const out: Record<string, string> = { ...(g?.localeMap ?? {}) };
+  for (const item of flag.flatMap(x => x.split(',')).map(x => x.trim()).filter(Boolean)) {
+    const m = /^([A-Za-z0-9_-]+)=([A-Za-z]{2,3}(?:-[A-Za-z0-9]{2,8})*)$/.exec(item);
+    if (!m) throw new Error(`--locale-map "${item}": use <config language id or locale>=<Game Center locale>, e.g. en=en-GB (several: en=en-GB,pt=pt-PT)`);
+    out[m[1]!] = m[2]!;
+  }
+  return out;
+}
+
+/** A suggestion per config language whose Game Center locale is not on the live Game Center while exactly one other
+ *  variant of the same language is (en-US configured, only en-GB live): the map entry that stops the spurious creates. */
+export function suggestLocaleMap(languages: Language[], liveLocales: string[], map: Record<string, string> = {}): { id: string; from: string; to: string }[] {
+  const live = [...new Set(liveLocales)];
+  if (!live.length) return [];
+  const out: { id: string; from: string; to: string }[] = [];
+  for (const l of languages) {
+    const from = appleLocale(languages, l.id, map);
+    if (!from || live.includes(from) || map[l.id] || map[l.apple ?? '']) continue;
+    const base = from.split('-')[0]!.toLowerCase();
+    const same = live.filter(x => x.split('-')[0]!.toLowerCase() === base);
+    if (same.length === 1) out.push({ id: l.id, from, to: same[0]! });
+  }
+  return out;
+}
+
+/** The live locales of a Game Center read (every leaderboard and achievement localization). */
+export const liveGcLocales = (have: { leaderboards: GcExisting[]; achievements: GcExisting[] }): string[] =>
+  [...have.leaderboards, ...have.achievements].flatMap(x => x.localizations.map(l => String(l.attributes.locale ?? '')).filter(Boolean));
 
 export function gcLeaderboardAttrs(l: GameLeaderboard): Record<string, unknown> {
   return {
@@ -151,7 +191,7 @@ export interface GcExisting { id: string; attributes: Record<string, unknown>; l
 
 /** Game Center plan: matched by vendorIdentifier; create what is missing, PATCH what differs, keep the rest. Archived
  *  items on the store are left alone (an archived vendor id cannot be reused; the plan names it). */
-export function planGameCenter(g: GamesConfig, languages: Language[], have: { leaderboards: GcExisting[]; achievements: GcExisting[] }): ItemPlan[] {
+export function planGameCenter(g: GamesConfig, languages: Language[], have: { leaderboards: GcExisting[]; achievements: GcExisting[] }, localeMap: Record<string, string> = {}): ItemPlan[] {
   const out: ItemPlan[] = [];
   const one = (kind: ItemPlan['kind'], id: string, attrs: Record<string, unknown>, locs: Record<string, Record<string, unknown>>, list: GcExisting[]) => {
     const cur = list.find(x => x.attributes.vendorIdentifier === id);
@@ -166,7 +206,7 @@ export function planGameCenter(g: GamesConfig, languages: Language[], have: { le
   for (const l of (g.leaderboards ?? []).filter(x => onStore(x, 'apple'))) {
     const locs: Record<string, Record<string, unknown>> = {};
     for (const [k, v] of Object.entries(l.locales)) {
-      const loc = appleLocale(languages, k);
+      const loc = appleLocale(languages, k, localeMap);
       if (loc) locs[loc] = { name: v.name, ...(v.suffix ? { formatterSuffix: v.suffix } : {}) };
     }
     one('leaderboard', l.id, gcLeaderboardAttrs(l), locs, have.leaderboards);
@@ -174,7 +214,7 @@ export function planGameCenter(g: GamesConfig, languages: Language[], have: { le
   for (const a of (g.achievements ?? []).filter(x => onStore(x, 'apple'))) {
     const locs: Record<string, Record<string, unknown>> = {};
     for (const [k, v] of Object.entries(a.locales)) {
-      const loc = appleLocale(languages, k);
+      const loc = appleLocale(languages, k, localeMap);
       if (loc) locs[loc] = { name: v.name, beforeEarnedDescription: v.description, afterEarnedDescription: v.earned ?? v.description };
     }
     one('achievement', a.id, gcAchievementAttrs(a), locs, have.achievements);
diff --git a/cli/lib/google-errors.ts b/cli/lib/google-errors.ts
index 91c0349..606307e 100644
--- a/cli/lib/google-errors.ts
+++ b/cli/lib/google-errors.ts
@@ -19,6 +19,7 @@ export const PLAY_USERS_URL = 'https://play.google.com/console/developers/users-
 const TITLES: Record<string, string> = {
   'playdeveloperreporting.googleapis.com': 'Google Play Developer Reporting API',
   'androidpublisher.googleapis.com': 'Google Play Android Developer API',
+  'gamesconfiguration.googleapis.com': 'Google Play Game Services Publishing API',
   'storage.googleapis.com': 'Cloud Storage API',
   'storage-api.googleapis.com': 'Cloud Storage API',
 };
@@ -26,6 +27,7 @@ const TITLES: Record<string, string> = {
 const NEEDS: Record<string, string> = {
   'playdeveloperreporting.googleapis.com': 'Crash and ANR data',
   'androidpublisher.googleapis.com': 'Reading and updating the app on Google Play',
+  'gamesconfiguration.googleapis.com': 'Play Games Services leaderboards and achievements (storebound play games)',
   'storage.googleapis.com': 'Play statistics (store listing visitors, installs)',
   'storage-api.googleapis.com': 'Play statistics (store listing visitors, installs)',
 };
diff --git a/cli/lib/pre-check.ts b/cli/lib/pre-check.ts
new file mode 100644
index 0000000..f85bb15
--- /dev/null
+++ b/cli/lib/pre-check.ts
@@ -0,0 +1,72 @@
+// The pre-upload check of `apple upload` and `play upload`: a shell command the project owns (a store-readiness gate,
+// a policy scan of the binary) runs before any byte is sent.
+//   --pre-check "<cmd with {file}>"   (config: upload.preCheck)   {file} is replaced by the quoted IPA / AAB path
+//   --evidence <path.json>            (config: upload.evidence)   what ran, written also when the check fails
+// A nonzero exit refuses the upload: ShipStepError PRE_CHECK_FAILED (exit 1 under the ship-step contract), nothing
+// is sent. The evidence ({file, sha256, size, command, exitCode, stdoutTail, timestamp, storeboundVersion}) goes to
+// --evidence and into the --json / --result-file result as `preCheck`.
+import { createHash } from 'node:crypto';
+import { mkdirSync, readFileSync, statSync, writeFileSync } from 'node:fs';
+import { basename, dirname } from 'node:path';
+import type { Args } from './args';
+import type { ShipConfig } from './config';
+import { log } from './log';
+import { pump } from './runner';
+import * as rt from './rt';
+import { SHIP_EXIT, ShipStepError, shipExtra, shipPhase } from './ship-step';
+
+export interface PreCheckEvidence {
+  file: string; sha256: string; size: number; command: string; exitCode: number;
+  stdoutTail: string[]; timestamp: string; storeboundVersion: string;
+}
+
+/** The command with {file} replaced by the POSIX-quoted path (sh -c); a command without {file} gets none. */
+export function preCheckCommand(template: string, file: string): string {
+  const q = `'${file.replace(/\\/g, '/').replace(/'/g, `'\\''`)}'`;
+  return template.split('{file}').join(q);
+}
+
+function sha256File(path: string): string { return createHash('sha256').update(readFileSync(path)).digest('hex'); }
+
+/**
+ * Runs the pre-check for `file` when --pre-check / upload.preCheck is set (else returns null). Throws PRE_CHECK_FAILED
+ * on a nonzero exit, after writing the evidence. `shown` is the file name for the evidence (not the absolute path).
+ */
+export async function runPreCheck(o: { args: Args; config: ShipConfig; root: string; resolve: (p: string) => string; file: string; shown: string; tag: string }): Promise<PreCheckEvidence | null> {
+  const flag = o.args.get('pre-check');
+  if (flag === 'true') throw new Error('--pre-check "<command with {file}>" needs a command');
+  const template = (flag ?? o.config.upload?.preCheck)?.trim();
+  const evFlag = o.args.get('evidence');
+  if (evFlag === 'true') throw new Error('--evidence <path.json> needs a path');
+  const evPath = evFlag ?? o.config.upload?.evidence;
+  if (!template) {
+    if (evFlag) throw new Error('--evidence needs --pre-check (or upload.preCheck in the config)');
+    return null;
+  }
+  const command = preCheckCommand(template, o.file);
+  shipPhase('pre-check', command);
+  log(o.tag, `pre-check: $ ${command}`);
+  const p = rt.spawn(['sh', '-c', command], { cwd: o.root, stdin: 'ignore', stdout: 'pipe', stderr: 'pipe', env: process.env });
+  const tail: string[] = [];
+  const each = (line: string, kind: 'stdout' | 'stderr'): void => {
+    if (kind === 'stdout') { tail.push(line); if (tail.length > 20) tail.shift(); }
+    console.error(`  ${line}`);
+  };
+  await Promise.all([pump(p.stdout, 'stdout', each), pump(p.stderr, 'stderr', each)]);
+  const exitCode = Number(await p.exited);
+  const version = ((await import('../../package.json')) as { version: string }).version;
+  const ev: PreCheckEvidence = {
+    file: o.shown.split('\\').join('/'), sha256: sha256File(o.file), size: statSync(o.file).size, command, exitCode,
+    stdoutTail: tail, timestamp: new Date().toISOString(), storeboundVersion: version,
+  };
+  if (evPath) {
+    const abs = o.resolve(evPath);
+    mkdirSync(dirname(abs), { recursive: true });
+    writeFileSync(abs, JSON.stringify(ev, null, 2) + '\n');
+    log(o.tag, `pre-check evidence: ${basename(abs)}`);
+  }
+  shipExtra({ preCheck: ev });
+  if (exitCode !== 0) throw new ShipStepError(`pre-check failed (exit ${exitCode}), nothing was uploaded: ${command}${tail.length ? `\n${tail.slice(-5).join('\n')}` : ''}`, SHIP_EXIT.failure, 'PRE_CHECK_FAILED');
+  log(o.tag, 'pre-check: ok');
+  return ev;
+}
diff --git a/cli/lib/ship-step.ts b/cli/lib/ship-step.ts
index 796ce18..af8e3da 100644
--- a/cli/lib/ship-step.ts
+++ b/cli/lib/ship-step.ts
@@ -59,7 +59,7 @@ type Fields = Partial<Pick<ShipResult, 'track' | 'version' | 'build' | 'state' |
 interface Run {
   key: string; step: string; store: 'apple' | 'play';
   progress: boolean;
-  fields: Fields; noop: boolean; warnings: string[]; detail?: unknown; declined?: string;
+  fields: Fields; extra?: Record<string, unknown>; noop: boolean; warnings: string[]; detail?: unknown; declined?: string;
 }
 const RUN = Symbol.for('storebound.shipRun');
 const g = globalThis as unknown as Record<symbol, Run | null | undefined>;
@@ -69,6 +69,8 @@ export const shipRun = (): Run | null => g[RUN] ?? null;
 
 /** What the command did: fields of the final result (later calls overwrite earlier ones). */
 export function shipReport(f: Fields): void { const r = shipRun(); if (r) Object.assign(r.fields, Object.fromEntries(Object.entries(f).filter(([, v]) => v !== undefined))); }
+/** Extra keys of the final result (e.g. the preCheck evidence), kept also when the step fails. */
+export function shipExtra(x: Record<string, unknown>): void { const r = shipRun(); if (r) r.extra = { ...r.extra, ...x }; }
 /** Nothing to do (the build is on the store already, the release is there): exit 7 with what is there. */
 export function shipNoop(f: Fields = {}): void { const r = shipRun(); if (r) { r.noop = true; shipReport(f); } }
 /** A warning for the result's warnings[] (the log line is the command's own). */
@@ -178,7 +180,7 @@ export function buildResult(run: Run, exit: ShipExitCode, error?: ShipErrorInfo)
     ...(f.artifact ? { artifact: f.artifact } : {}),
     ...(error ? { error } : {}),
   };
-  return { ...out, ...Object.fromEntries(Object.entries(own).filter(([k]) => !(k in out) && !CONTRACT_KEYS.has(k))) } as ShipResult & Record<string, unknown>;
+  return { ...out, ...(run.extra ?? {}), ...Object.fromEntries(Object.entries(own).filter(([k]) => !(k in out) && !CONTRACT_KEYS.has(k))) } as ShipResult & Record<string, unknown>;
 }
 const CONTRACT_KEYS = new Set(['ok', 'step', 'store', 'track', 'version', 'build', 'state', 'url', 'warnings', 'artifact', 'error']);
 
diff --git a/cli/lib/shots-copy-translate.ts b/cli/lib/shots-copy-translate.ts
new file mode 100644
index 0000000..2145bc4
--- /dev/null
+++ b/cli/lib/shots-copy-translate.ts
@@ -0,0 +1,75 @@
+// Screenshot copy translation (`storebound shots copy translate`): fills the languages of shots.copy (store/shots/
+// copy.json: language id -> scene id -> {eyebrow, title [line1, line2], sub, badges}) from the source language's copy.
+// Pure. Like the listing (lib/listing-translate.ts) the CLI never calls a translation service: the agent translates the
+// sections marked "translate", or `--translate "<command>"` runs a command of your own once per caption field. A
+// language written by this command is machine-translated until a human read it: the marker lives next to the copy file
+// (copy.translations.json), because copy.json itself has no place for comments:
+//   { "de": { "from": "en", "status": "translate" | "draft" } }
+//   translate: the source text was copied in, still to translate    draft: machine-translated, review then `shots copy reviewed`
+// Caption limits (characters, per line / field), so a translation still fits the template without the overflow
+// `shots check` would flag: eyebrow 30, each of the two title lines 28, sub 90, a badge 18. A translation over its limit
+// is not kept (the source text stays and the language stays "translate").
+import type { SceneCopy } from '../shots/lib';
+
+export type CopyStatus = 'translate' | 'draft';
+export type CopyMarks = Record<string, { from: string; status: CopyStatus }>;
+
+export const CAPTION_LIMITS = { eyebrow: 30, title: 28, sub: 90, badge: 18 } as const;
+
+export const marksPath = (copyPath: string): string => copyPath.replace(/\.json$/i, '') + '.translations.json';
+
+export interface CopyField { key: string; text: string; limit: number }
+
+/** The translatable strings of a scene, in a fixed order (key: eyebrow, title.0, title.1, sub, badge.<n>.<0|1>). */
+export function sceneFields(sc: SceneCopy): CopyField[] {
+  const out: CopyField[] = [];
+  if (sc.eyebrow) out.push({ key: 'eyebrow', text: sc.eyebrow, limit: CAPTION_LIMITS.eyebrow });
+  sc.title.forEach((t, i) => { if (t) out.push({ key: `title.${i}`, text: t, limit: CAPTION_LIMITS.title }); });
+  if (sc.sub) out.push({ key: 'sub', text: sc.sub, limit: CAPTION_LIMITS.sub });
+  (sc.badges ?? []).forEach((b, i) => b.forEach((t, j) => { if (t) out.push({ key: `badge.${i}.${j}`, text: t, limit: CAPTION_LIMITS.badge }); }));
+  return out;
+}
+
+/** The scene with the given field texts put in (keys of sceneFields; a missing key keeps the source text). */
+export function applyFields(src: SceneCopy, texts: Record<string, string>): SceneCopy {
+  const t = (key: string, d: string): string => texts[key] ?? d;
+  const out: SceneCopy = { title: [t('title.0', src.title[0]), t('title.1', src.title[1])] };
+  if (src.eyebrow !== undefined) out.eyebrow = t('eyebrow', src.eyebrow);
+  if (src.sub !== undefined) out.sub = t('sub', src.sub);
+  if (src.badges) out.badges = src.badges.map((b, i) => b.map((x, j) => (x === undefined ? x : t(`badge.${i}.${j}`, x))) as [string, string?]);
+  return out;
+}
+
+/** Characters the way a person counts them (code points). */
+export const chars = (s: string): number => [...s].length;
+
+export interface SceneCheck { scene: string; field: string; chars: number; limit: number }
+/** Fields of a language's copy over their caption limit. */
+export function overLimit(copy: Record<string, SceneCopy> | undefined): SceneCheck[] {
+  const out: SceneCheck[] = [];
+  for (const [scene, sc] of Object.entries(copy ?? {})) for (const f of sceneFields(sc)) if (chars(f.text) > f.limit) out.push({ scene, field: f.key, chars: chars(f.text), limit: f.limit });
+  return out;
+}
+
+/** Parses the marks file; anything unreadable counts as no marks. */
+export function parseMarks(text: string | null): CopyMarks {
+  if (!text) return {};
+  try {
+    const j = JSON.parse(text) as Record<string, { from?: unknown; status?: unknown }>;
+    return Object.fromEntries(Object.entries(j).filter(([, v]) => v && (v.status === 'translate' || v.status === 'draft') && typeof v.from === 'string')
+      .map(([k, v]) => [k, { from: v.from as string, status: v.status as CopyStatus }]));
+  } catch { return {}; }
+}
+
+/** One line per marked language for `storebound check` / `shots copy check`; empty when nothing is marked. */
+export function marksNotes(marks: CopyMarks, where: string): string[] {
+  const todo = Object.entries(marks).filter(([, m]) => m.status === 'translate').map(([k]) => k);
+  const drafts = Object.entries(marks).filter(([, m]) => m.status === 'draft').map(([k]) => k);
+  return [
+    ...(todo.length ? [`${where}: not translated yet (status=translate): ${todo.join(', ')} (storebound shots copy translate --to ${todo.join(',')})`] : []),
+    ...(drafts.length ? [`${where}: machine-translated drafts not reviewed: ${drafts.join(', ')} (storebound shots copy reviewed --lang <ids> after reading them)`] : []),
+  ];
+}
+
+/** The fix to name in "no copy" problems of validateCopy. */
+export const copyFix = (lang: string): string => `storebound shots copy translate --to ${lang}`;
diff --git a/cli/play/games.ts b/cli/play/games.ts
index 3cebf46..009683f 100644
--- a/cli/play/games.ts
+++ b/cli/play/games.ts
@@ -14,16 +14,30 @@ import { confirm, need } from '../lib/ctx';
 import { dryPlan } from '../lib/dry';
 import { hasAndroidProject, type ItemPlan, pgsFindings, type PlayExisting, planPlayGames, planRows, readPgsProject, usesPlayGames } from '../lib/game-services';
 import { PLAY_SCOPE, tokenSource } from '../lib/google-auth';
+import { enableUrl, findingText, parseGoogleError } from '../lib/google-errors';
 import { errorBody } from '../lib/http';
 import { done, log, warn } from '../lib/log';
 import * as rt from '../lib/rt';
 import { AmbiguousWriteError, createOnce, retrySafe } from '../lib/upsert';
 
 const TAG = 'play-games';
+export const GAMES_SERVICE = 'gamesconfiguration.googleapis.com';
+export const GAMES_API_TITLE = 'Google Play Game Services Publishing API';
 export const GAMES_CONFIG_API = 'https://gamesconfiguration.googleapis.com/games/v1configuration';
 
+/** The Games Configuration API is off in the service account's Cloud project (403 SERVICE_DISABLED / accessNotConfigured): the exact API name, where to turn it on and the console plan. Null for any other error. */
+export function gamesApiDisabledText(errText: string, fallbackProject: string | null): string | null {
+  const f = parseGoogleError(errText);
+  if (f?.kind !== 'api-disabled') return null;
+  const projectId = f.projectId ?? fallbackProject;
+  const line = findingText({ ...f, service: GAMES_SERVICE, serviceTitle: GAMES_API_TITLE, projectId, activationUrl: enableUrl(GAMES_SERVICE, projectId) }, { withUrl: true });
+  return `${line}
+API: ${GAMES_API_TITLE} (${GAMES_SERVICE}). Enable it, wait a minute, then run storebound play games again. Plan: storebound console plan play-games-services`;
+}
+
 export function gamesConfigClient(root: string) {
-  const token = tokenSource(playServiceAccount(root), PLAY_SCOPE);
+  const account = playServiceAccount(root);
+  const token = tokenSource(account, PLAY_SCOPE);
   async function call<T = unknown>(method: string, path: string, body?: unknown): Promise<T> {
     const url = GAMES_CONFIG_API + path;
     const safe = method !== 'POST' && retrySafe(method, url);
@@ -37,7 +51,11 @@ export function gamesConfigClient(root: string) {
         throw new Error(`${method} ${path} -> ${r.status} ${errorBody(t, 300)}`);
       }
       const t = await r.text();
-      if (!r.ok) throw new Error(`${method} ${path} -> ${r.status} ${errorBody(t, 800)}`);
+      if (!r.ok) {
+        const msg = `${method} ${path} -> ${r.status} ${errorBody(t, 800)}`;
+        const off = r.status === 403 ? gamesApiDisabledText(msg, account.project_id ?? null) : null;
+        throw new Error(off ? `${msg.split(' -> ')[0]} -> 403: ${off}` : msg);
+      }
       return (t ? JSON.parse(t) : {}) as T;
     }
   }
diff --git a/cli/play/upload.ts b/cli/play/upload.ts
index d7c93a1..0ccad8d 100644
--- a/cli/play/upload.ts
+++ b/cli/play/upload.ts
@@ -1,5 +1,5 @@
 // Upload an Android App Bundle to a Google Play testing track.
-//   storebound play upload [<app.aab>] [--track internal|alpha|beta|production] [--status completed|draft] [--version-code N] [--name text] [--not-sent-for-review] [--dry] [--yes] [--json]
+//   storebound play upload [<app.aab>] [--track internal|alpha|beta|production] [--status completed|draft] [--version-code N] [--name text] [--not-sent-for-review] [--pre-check "<cmd with {file}>"] [--evidence <path.json>] [--dry] [--yes] [--json]
 // Default AAB: the newest in build/android (storebound play build), or with --version-code N the one with that
 // versionCode. Package and versionCode are read from the bundle; the upload is refused when Play already has that
 // versionCode (exit 1), and under the ship-step contract (--json / --result-file, docs/ship-step.md) it is exit 7
@@ -18,6 +18,7 @@ import { nextVersionCode } from '../lib/release';
 import { playClient } from './client';
 import { readPlayCopy, refusePlayNotes } from './listing';
 import { usedVersionCodes } from './next-version-code';
+import { runPreCheck } from '../lib/pre-check';
 import { shipNoop, shipPhase, shipReport, shipRun, shipWarn } from '../lib/ship-step';
 import { consoleUrl, playTrackPage } from '../lib/console-links';
 
@@ -53,6 +54,7 @@ export async function run(ctx: Ctx): Promise<void> {
   const sdkWhy = playTargetSdkProblem(info.targetSdk, { where: targetSdkFile(root) });
   if (sdkWhy) throw new Error(`${relative(root, aab)}: not uploaded, ${sdkWhy}`);
   assertAabSigned(aab, relative(root, aab));
+  const pre = await runPreCheck({ args: a, config, root, resolve, file: aab, shown: relative(root, aab), tag: TAG });
   const size = statSync(aab).size;
   const dry = a.has('dry');
   const json = a.has('json');
@@ -82,7 +84,7 @@ export async function run(ctx: Ctx): Promise<void> {
   }
   if (used.includes(info.versionCode)) throw new Error(`versionCode ${info.versionCode} is already on Google Play: rebuild with --version-code ${nextVersionCode(used)} (storebound play build)`);
   const summary = { aab: relative(root, aab), packageName: info.packageName, versionCode: info.versionCode, versionName: info.versionName ?? null, sizeMB: Math.round(size / 104857.6) / 10,
-    track, status, notes: notes.map(n => n.language), replaces: current.map(r => `${r.status} ${(r.versionCodes ?? []).join(',')}`) };
+    track, status, notes: notes.map(n => n.language), replaces: current.map(r => `${r.status} ${(r.versionCodes ?? []).join(',')}`), ...(pre ? { preCheck: pre } : {}) };
   if (dry) {
     if (json) { printJson(summary); return; }
     log(TAG, `${summary.aab}: ${info.packageName} ${info.versionName ?? ''} (${info.versionCode}), ${summary.sizeMB} MB, versionCode free`);
diff --git a/cli/shots/copy.ts b/cli/shots/copy.ts
new file mode 100644
index 0000000..96ca84e
--- /dev/null
+++ b/cli/shots/copy.ts
@@ -0,0 +1,125 @@
+// Screenshot caption copy per language (shots.copy, store/shots/copy.json).
+//   storebound shots copy translate --to de,es [--from en] [--translate "<command>"] [--force] [--dry] [--json]
+//     fills the missing languages (and the missing scenes of a language) from the source language: without --translate
+//     the source text is copied in and marked status=translate for your agent to translate in place (listing-localization
+//     skill); with --translate your command runs once per caption field with the source text on stdin and
+//     STOREBOUND_SOURCE_LANG, STOREBOUND_TARGET_LANG, STOREBOUND_TARGET_LANG_ID, STOREBOUND_FIELD, STOREBOUND_LIMIT in the
+//     environment; its stdout is the translation (status=draft). A translation over the caption limit is not kept.
+//     Scenes already there are kept unless --force. The marker lives in copy.translations.json next to the copy file.
+//   storebound shots copy check [--json]               marked languages, caption limits; exit 1 on a problem
+//   storebound shots copy reviewed --lang de[,es] | --all [--dry]   a human read the copy: remove its marker
+// --to / --from / --lang take config language ids, App Store locales or Play codes. Local files only.
+import { existsSync, readFileSync, writeFileSync } from 'node:fs';
+import { playCodes } from '../lib/config';
+import type { Ctx } from '../lib/ctx';
+import { need } from '../lib/ctx';
+import { done, log, printJson, warn } from '../lib/log';
+import * as rt from '../lib/rt';
+import { applyFields, type CopyMarks, chars, marksNotes, marksPath, overLimit, parseMarks, sceneFields } from '../lib/shots-copy-translate';
+import { resolveLanguages } from '../lib/whats-new';
+import type { CopyFile } from './lib';
+
+const TAG = 'shots-copy';
+
+function readCopy(path: string): CopyFile {
+  if (!existsSync(path)) throw new Error(`${path}: no copy file (storebound init creates store/shots/copy.json)`);
+  return JSON.parse(readFileSync(path, 'utf8')) as CopyFile;
+}
+const readMarks = (path: string): CopyMarks => parseMarks(existsSync(marksPath(path)) ? readFileSync(marksPath(path), 'utf8') : null);
+const write = (path: string, v: unknown): void => writeFileSync(path, JSON.stringify(v, null, 2) + '\n');
+
+async function translate(ctx: Ctx): Promise<void> {
+  const { config, resolve } = ctx.loaded;
+  const a = ctx.args;
+  const shots = need(config.shots, 'shots');
+  const path = resolve(shots.copy);
+  const targets = resolveLanguages(config.languages, a.list('to'));
+  if (!targets.length) throw new Error('--to <languages>: config language ids, App Store locales or Play codes (add a language to languages[] in the config first)');
+  const primary = config.apple?.primaryLocale ?? config.play?.defaultLanguage;
+  const want = a.get('from');
+  const src = want ? resolveLanguages(config.languages, [want])[0]! : config.languages.find(l => l.apple === primary || playCodes(l).includes(primary ?? '')) ?? config.languages[0]!;
+  const copy = readCopy(path);
+  const from = copy[src.id];
+  if (!from) throw new Error(`${path}: no copy for the source language ${src.id} (--from <language>)`);
+  const hook = a.get('translate');
+  const dry = a.has('dry');
+  const marks = readMarks(path);
+  const rows: { lang: string; scenes: number; kept: number; status: string; problems: string[] }[] = [];
+  const runHook = (text: string, l: (typeof targets)[number], field: string, limit: number): string | null => {
+    const r = rt.spawnSync(['sh', '-c', hook!], { stdin: new TextEncoder().encode(text), stdout: 'pipe', stderr: 'pipe',
+      env: { ...process.env, STOREBOUND_SOURCE_LANG: src.apple ?? src.id, STOREBOUND_TARGET_LANG: l.apple ?? playCodes(l)[0] ?? l.id, STOREBOUND_TARGET_LANG_ID: l.id, STOREBOUND_FIELD: field, STOREBOUND_LIMIT: String(limit) } });
+    const out = r.stdout.toString().trim();
+    if (r.exitCode !== 0 || !out) { warn(TAG, `${l.id} ${field}: --translate failed (exit ${r.exitCode}): ${r.stderr.toString().trim().slice(0, 200)}`); return null; }
+    return out;
+  };
+  for (const l of targets) {
+    if (l === src) { warn(TAG, `${l.id} is the source language: skipped`); continue; }
+    const cur = { ...(copy[l.id] ?? {}) };
+    let written = 0, kept = 0, failed = false;
+    const problems: string[] = [];
+    for (const scene of shots.scenes) {
+      const sc = from[scene.id];
+      if (!sc) continue;
+      if (cur[scene.id] && !a.has('force')) { kept++; continue; }
+      const texts: Record<string, string> = {};
+      if (hook && !dry) for (const f of sceneFields(sc)) {
+        const t = runHook(f.text, l, `${scene.id}.${f.key}`, f.limit);
+        if (t === null) { failed = true; continue; }
+        const one = t.replace(/\s*\n\s*/g, ' ');
+        if (chars(one) > f.limit) { failed = true; problems.push(`${scene.id}.${f.key}: ${chars(one)} > ${f.limit} characters (source text kept)`); continue; }
+        texts[f.key] = one;
+      }
+      cur[scene.id] = applyFields(sc, texts);
+      written++;
+    }
+    const status = hook && !dry && !failed ? 'draft' : 'translate';
+    rows.push({ lang: l.id, scenes: written, kept, status: written ? status : 'kept', problems });
+    if (!written || dry) continue;
+    copy[l.id] = cur;
+    marks[l.id] = { from: src.id, status };
+  }
+  if (!dry && rows.some(r => r.scenes)) { write(path, copy); write(marksPath(path), marks); }
+  if (a.has('json')) { printJson({ copy: path, from: src.id, dry, languages: rows }); return; }
+  for (const r of rows) log(TAG, `${r.lang}: ${r.scenes ? `${r.scenes} scene(s) ${dry ? 'would be ' : ''}written (${r.status})` : 'nothing to write'}${r.kept ? `, ${r.kept} kept (--force replaces)` : ''}${r.problems.length ? `; ${r.problems.join('; ')}` : ''}`);
+  const todo = rows.filter(r => r.scenes && r.status === 'translate').length;
+  done(TAG, dry ? 'translation planned (dry run, nothing written)' : todo ? `${todo} language(s) to translate in place (edit copy.json, keep the marker in copy.translations.json), then storebound shots copy check` : 'drafts written: read them, storebound shots copy check, then storebound shots copy reviewed --lang <ids>');
+}
+
+async function check(ctx: Ctx): Promise<void> {
+  const { config, resolve } = ctx.loaded;
+  const shots = need(config.shots, 'shots');
+  const path = resolve(shots.copy);
+  const copy = readCopy(path);
+  const marks = readMarks(path);
+  const over = Object.fromEntries(Object.keys(copy).map(l => [l, overLimit(copy[l])] as const).filter(([, v]) => v.length));
+  const missing = config.languages.map(l => l.id).filter(id => !copy[id]);
+  if (ctx.args.has('json')) printJson({ copy: path, marks, overLimit: over, missing });
+  else {
+    for (const n of marksNotes(marks, path)) warn(TAG, n);
+    for (const [l, v] of Object.entries(over)) for (const o of v) warn(TAG, `${l} ${o.scene}.${o.field}: ${o.chars} > ${o.limit} characters`);
+    if (missing.length) warn(TAG, `no copy for ${missing.join(', ')}: storebound shots copy translate --to ${missing.join(',')}`);
+  }
+  if (Object.keys(over).length || missing.length) process.exitCode = 1;
+  else if (!ctx.args.has('json')) done(TAG, 'shots copy ok');
+}
+
+async function reviewed(ctx: Ctx): Promise<void> {
+  const { config, resolve } = ctx.loaded;
+  const path = resolve(need(config.shots, 'shots').copy);
+  const marks = readMarks(path);
+  const ids = ctx.args.has('all') ? Object.keys(marks) : resolveLanguages(config.languages, ctx.args.list('lang')).map(l => l.id);
+  if (!ids.length) throw new Error('--lang <languages> | --all');
+  const cleared = ids.filter(id => marks[id]);
+  const refused = cleared.filter(id => marks[id]!.status === 'translate');
+  if (refused.length) throw new Error(`${refused.join(', ')}: still status=translate (the source text is in place): translate it first (storebound shots copy translate --translate "<command>", or edit ${path})`);
+  if (!ctx.args.has('dry')) { for (const id of cleared) delete marks[id]; write(marksPath(path), marks); }
+  done(TAG, `${cleared.length ? cleared.join(', ') : 'nothing'} marked reviewed${ctx.args.has('dry') ? ' (dry run)' : ''}`);
+}
+
+export async function run(ctx: Ctx): Promise<void> {
+  const sub = ctx.args._[0];
+  if (sub === 'translate') return translate(ctx);
+  if (sub === 'check') return check(ctx);
+  if (sub === 'reviewed') return reviewed(ctx);
+  throw new Error('usage: storebound shots copy translate --to de,es [--from en] [--translate "<command>"] [--force] [--dry] | check | reviewed --lang de | --all');
+}
diff --git a/cli/shots/lib.ts b/cli/shots/lib.ts
index 57b2b59..5b882ab 100644
--- a/cli/shots/lib.ts
+++ b/cli/shots/lib.ts
@@ -145,7 +145,7 @@ export function validateCopy(copy: CopyFile, shots: ShotsConfig, langs: string[]
   const e: string[] = [];
   for (const lang of langs) {
     const c = copy[lang];
-    if (!c) { e.push(`${lang}: no copy`); continue; }
+    if (!c) { e.push(`${lang}: no copy (storebound shots copy translate --to ${lang})`); continue; }
     for (const s of shots.scenes) {
       const sc = c[s.id];
       if (!sc) { e.push(`${lang} scene ${s.id}: missing`); continue; }
diff --git a/docs/ship-step.md b/docs/ship-step.md
index dc9aa02..cb44b15 100644
--- a/docs/ship-step.md
+++ b/docs/ship-step.md
@@ -128,3 +128,10 @@ storebound play build --version-from version.json --env-file /run/secrets/ship.e
 storebound play upload --track production --version-from version.json --env-file /run/secrets/ship.env --json --result-file out/upload.json --yes
 case $? in 0|7) ;; 3) echo "owner: $(jq -r .error.consoleUrl out/upload.json)"; exit 1 ;; *) exit 1 ;; esac
 ```
+
+## `--pre-check` and `--evidence` (upload steps)
+
+`apple upload` and `play upload` take `--pre-check "<command with {file}>"` (config `upload.preCheck`): the command runs
+(sh -c, project root) before any byte is sent. A nonzero exit is exit 1 with error code `PRE_CHECK_FAILED`. `--evidence
+<path.json>` (config `upload.evidence`) writes `{file, sha256, size, command, exitCode, stdoutTail, timestamp,
+storeboundVersion}`, also on failure; the same object is the result's `preCheck` key.
diff --git a/skills/store-pitfalls/SKILL.md b/skills/store-pitfalls/SKILL.md
index c9fa7d2..b0c0381 100644
--- a/skills/store-pitfalls/SKILL.md
+++ b/skills/store-pitfalls/SKILL.md
@@ -1376,3 +1376,42 @@ that fails without the fix (see CONTRIBUTING.md).
 - **Guard:** `cli/lib/play-publish.ts` (ready list from tracks plus the public store page, the only signal the API
   gives), the plan, the verify, the hint in `play status` / `status` / the desktop Releases tab. Non-track changes are
   not visible to the API.
+||||||| parent of abe0821 (upload --pre-check/--evidence, shots copy translate, game-center --locale-map, play games API-disabled hint)
+## 115. A project's own pre-upload gate ran as a separate step and could be skipped
+
+- **What happens:** a store-readiness scan of the binary lived in the pipeline next to `apple upload` / `play upload`, so
+  a re-run, a manual upload or a reordered job sent the file without it, and nothing proved afterwards what had run.
+- **Do:** pass the gate to the upload: `storebound apple upload app.ipa --pre-check "./scan.sh {file}" --evidence
+  build/pre-check.json` (same for `play upload`; or `upload.preCheck` / `upload.evidence` in the config). A nonzero exit
+  refuses the upload before any network call: ship-step exit 1, error code `PRE_CHECK_FAILED`. The evidence (file,
+  sha256, size, command, exit code, stdout tail, time, storebound version) is written also on failure and is in the
+  `--json` / `--result-file` result as `preCheck`.
+- **Guard:** `cli/lib/pre-check.ts`, `tests/ship-step.test.ts` (failing check: no store write, evidence + error code).
+
+## 116. `storebound play games` died with a bare 403 when the Games Configuration API was off
+
+- **What happens:** the Play Games Services Publishing API (`gamesconfiguration.googleapis.com`) is a separate API in the
+  service account's Cloud project; while it is off every call is 403 SERVICE_DISABLED / accessNotConfigured.
+- **Do:** the error now names the API, the project and the enable URL
+  (`https://console.cloud.google.com/apis/library/gamesconfiguration.googleapis.com?project=<id>`); press Enable, wait a
+  minute, run it again. The plan: `storebound console plan play-games-services` (step 8 has the case).
+- **Guard:** `gamesApiDisabledText` in `cli/play/games.ts`, `tests/game-services.test.ts`.
+
+## 117. Game Center creates `en-US` next to a live `en-GB` (spurious creates)
+
+- **What happens:** the config language `en` is `en-US`, the live Game Center has only `en-GB`; the plan wants to create
+  an `en-US` localization for every item and leaves the `en-GB` ones unmanaged.
+- **Do:** map it: `storebound apple game-center --locale-map en=en-GB` or `games: { localeMap: { en: 'en-GB' } }`
+  (key: config language id or its App Store locale). The dry run suggests the exact flag when the live Game Center has
+  exactly one variant of a language the config spells differently.
+- **Guard:** `gcLocaleMap` / `suggestLocaleMap` in `cli/lib/game-services.ts`, `tests/game-services.test.ts`.
+
+## 118. Screenshot copy missing for a locale, translated by hand into copy.json
+
+- **What happens:** `storebound check` / `shots render` stopped with "<lang>: no copy" and the only fix was typing every
+  caption.
+- **Do:** `storebound shots copy translate --to de,es` (agent translates the copied source text, or `--translate "<cmd>"`
+  runs your command per caption field). Languages stay marked machine-translated in `copy.translations.json` until
+  `storebound shots copy reviewed --lang de`. Captions over the limit (eyebrow 30, title line 28, sub 90, badge 18) are
+  not kept.
+- **Guard:** `cli/shots/copy.ts`, `cli/lib/shots-copy-translate.ts`, `tests/shots-copy-translate.test.ts`.
diff --git a/tests/game-services.test.ts b/tests/game-services.test.ts
index f47c27e..636bcd8 100644
--- a/tests/game-services.test.ts
+++ b/tests/game-services.test.ts
@@ -5,7 +5,7 @@ import { afterAll, afterEach, beforeAll, beforeEach, describe, expect, test } fr
 import type { ShipConfig } from '../cli/lib/config';
 import { validateConfig } from '../cli/lib/config';
 import { capabilitySpecs, planCapabilities } from '../cli/lib/signing';
-import { gamesPrivacyFindings, gcFindings, pgsFindings, planGameCenter, playAchievementBody, playLeaderboardBody, readPgsProject, validateGames } from '../cli/lib/game-services';
+import { gamesPrivacyFindings, gcFindings, gcLocaleMap, liveGcLocales, suggestLocaleMap, pgsFindings, planGameCenter, playAchievementBody, playLeaderboardBody, readPgsProject, validateGames } from '../cli/lib/game-services';
 import { consolePlan } from '../cli/lib/console-plan';
 import { verifyText } from '../cli/lib/console-verify';
 import { gameServicesFindings, type GameServicesStatus } from '../cli/games-status';
@@ -116,6 +116,42 @@ describe('apple game-center (fake App Store Connect)', () => {
   });
 });
 
+describe('Game Center locale map', () => {
+  const live = { leaderboards: [{ id: 'lb-1', attributes: { vendorIdentifier: 'com.example.game.highscore', referenceName: 'com.example.game.highscore', defaultFormatter: 'INTEGER', submissionType: 'BEST_SCORE', scoreSortType: 'DESC' },
+    localizations: [{ id: 'l1', attributes: { locale: 'en-GB', name: 'High score', formatterSuffix: ' points' } }, { id: 'l2', attributes: { locale: 'tr', name: 'En yüksek skor' } }] }], achievements: [] };
+  const only = { ...GAME.games!, achievements: [] };
+  const sig = (p: ReturnType<typeof planGameCenter>) => p[0]!.locales.map(l => l.locale + ':' + l.action);
+  test('without a map the config en-US is created next to the live en-GB, and the suggestion names the map', () => {
+    expect(sig(planGameCenter(only, GAME.languages, live))).toEqual(['en-US:create', 'tr:keep']);
+    expect(suggestLocaleMap(GAME.languages, liveGcLocales(live))).toEqual([{ id: 'en', from: 'en-US', to: 'en-GB' }]);
+  });
+  test('--locale-map en=en-GB (or games.localeMap) leaves nothing to create or update, and no suggestion remains', () => {
+    const map = gcLocaleMap(only, ['en=en-GB']);
+    expect(map).toEqual({ en: 'en-GB' });
+    const plan = planGameCenter(only, GAME.languages, live, map);
+    expect(sig(plan)).toEqual(['en-GB:keep', 'tr:keep']);
+    expect(plan[0]!.action).toBe('keep');
+    expect(suggestLocaleMap(GAME.languages, liveGcLocales(live), map)).toEqual([]);
+    expect(gcLocaleMap({ ...only, localeMap: { en: 'en-AU' } }, ['en=en-GB,tr=tr'])).toEqual({ en: 'en-GB', tr: 'tr' });
+    expect(planGameCenter(only, GAME.languages, live, { 'en-US': 'en-GB' })[0]!.locales[0]!.locale).toBe('en-GB');
+  });
+  test('two English variants live: no guess; a bad map entry is refused', () => {
+    expect(suggestLocaleMap(GAME.languages, ['en-GB', 'en-AU', 'tr'])).toEqual([]);
+    expect(() => gcLocaleMap(only, ['en'])).toThrow('--locale-map');
+    expect(validateGames({ ...only, localeMap: { en: 'english' } }, GAME.languages).join()).toContain('games.localeMap.en');
+  });
+  test('apple game-center against the fake store: the dry run warns with the exact flag; with the flag nothing is written', async () => {
+    s.asc.put({ type: 'appStoreVersions', id: 'ver-1', attributes: { versionString: '1.0.0', appVersionState: 'PREPARE_FOR_SUBMISSION', platform: 'IOS' }, rels: { app: APP } });
+    const base = await run2(() => gameCenter(project(GAME).ctx(['--yes'])));
+    expect(base.writes.length).toBeGreaterThan(0);
+    for (const l of [...s.asc.all('gameCenterLeaderboardLocalizations'), ...s.asc.all('gameCenterAchievementLocalizations')]) if (l.attributes.locale === 'en-US') l.attributes.locale = 'en-GB';
+    const dry = await run2(() => gameCenter(project(GAME).ctx(['--dry'])));
+    expect(dry.out + dry.err).toContain('--locale-map en=en-GB');
+    const mapped = await run2(() => gameCenter(project(GAME).ctx(['--yes', '--locale-map', 'en=en-GB'])));
+    expect(mapped.writes).toEqual([]);
+  });
+});
+
 describe('play games (fake Games Configuration API)', () => {
   test('create, no-op re-run, update by name match; playId wins', async () => {
     const p = project(GAME);
@@ -141,6 +177,21 @@ describe('play games (fake Games Configuration API)', () => {
   });
 });
 
+describe('play games with the Games Configuration API disabled', () => {
+  test('a 403 SERVICE_DISABLED names the API, the enable URL for the project and the console plan', async () => {
+    s.faults.push({ method: 'GET', match: /leaderboards/, when: 'before', status: 403, times: 5, code: 'SERVICE_DISABLED', detail: 'Google Play Game Services Publishing API has not been used in project 987654321 before or it is disabled. SERVICE_DISABLED accessNotConfigured' });
+    const err = await run2(() => playGames(project(GAME).ctx(['--dry']))).then(() => null, (e: Error) => e);
+    expect(err?.message).toContain('Google Play Game Services Publishing API');
+    expect(err?.message).toContain('gamesconfiguration.googleapis.com');
+    expect(err?.message).toContain('https://console.cloud.google.com/apis/library/gamesconfiguration.googleapis.com?project=987654321');
+    expect(err?.message).toContain('storebound console plan play-games-services');
+  });
+  test('the console plan has the enable step', () => {
+    const plan = consolePlan('play-games-services', GAME);
+    expect(JSON.stringify(plan)).toContain('gamesconfiguration.googleapis.com');
+  });
+});
+
 describe('project checks', () => {
   const ENT = '<?xml version="1.0"?><plist><dict><key>com.apple.developer.game-center</key><true/></dict></plist>';
   test('Game Center entitlement: missing, unreferenced, present, present without config', () => {
diff --git a/tests/ship-step.test.ts b/tests/ship-step.test.ts
index 3da79de..133b817 100644
--- a/tests/ship-step.test.ts
+++ b/tests/ship-step.test.ts
@@ -287,6 +287,34 @@ describe('idempotent re-upload (fake stores)', () => {
     expect(JSON.parse(r.out)).toMatchObject({ ok: true, step: 'upload', store: 'apple', version: '1.2.0', build: '7', state: 'VALID' });
     expect(writes(s.calls).filter(c => /buildUploads/.test(c.path))).toEqual([]);
   });
+  test('play upload --pre-check: a passing command writes the evidence and joins the result; a failing one refuses with PRE_CHECK_FAILED before any write', async () => {
+    const d = tmp();
+    const p = project(BASE, { 'store/listing.md': LISTING, 'build/android/app.aab': makeAab('com.example.notes', 42, '1.2.0') });
+    const ev = join(d, 'ev', 'evidence.json');
+    const bad = await ship('play upload', ['--json', '--yes', '--pre-check', 'echo scanning {file}; exit 3', '--evidence', ev], a => playUpload({ loaded: p.loaded, args: a }));
+    expect(bad.code).toBe(1);
+    const jb = JSON.parse(bad.out);
+    expect(jb).toMatchObject({ ok: false, error: { code: 'PRE_CHECK_FAILED' }, preCheck: { exitCode: 3, size: expect.any(Number) } });
+    expect(JSON.parse(readFileSync(ev, 'utf8')).exitCode).toBe(3);
+    expect(writes(s.calls)).toEqual([]);
+    const ok = await ship('play upload', ['--json', '--yes', '--pre-check', 'echo scanning {file}', '--evidence', ev], a => playUpload({ loaded: p.loaded, args: a }));
+    expect(ok.code).toBe(0);
+    const e = JSON.parse(readFileSync(ev, 'utf8'));
+    expect(e).toMatchObject({ file: 'build/android/app.aab', exitCode: 0, storeboundVersion: expect.any(String) });
+    expect(e.sha256).toMatch(/^[0-9a-f]{64}$/);
+    expect(e.stdoutTail.join(' ')).toContain('scanning');
+    expect(JSON.parse(ok.out).preCheck.sha256).toBe(e.sha256);
+  });
+
+  test('apple upload --pre-check: a failing command stops before any App Store Connect call', async () => {
+    const plist = '<?xml version="1.0" encoding="UTF-8"?><plist version="1.0"><dict><key>CFBundleIdentifier</key><string>com.example.notes</string><key>CFBundleShortVersionString</key><string>1.2.0</string><key>CFBundleVersion</key><string>9</string></dict></plist>';
+    const p = project(BASE, { 'build/ios/export/Example.ipa': makeIpa(plist) });
+    const n = s.calls.length;
+    const r = await ship('apple upload', ['--json', '--yes', '--pre-check', 'exit 1'], a => appleUpload({ loaded: p.loaded, args: a }));
+    expect(r.code).toBe(1);
+    expect(JSON.parse(r.out)).toMatchObject({ ok: false, step: 'upload', store: 'apple', error: { code: 'PRE_CHECK_FAILED' }, preCheck: { exitCode: 1 } });
+    expect(s.calls.length).toBe(n);
+  });
 });
 
 describe('status', () => {
diff --git a/tests/shots-copy-translate.test.ts b/tests/shots-copy-translate.test.ts
new file mode 100644
index 0000000..85bf9d5
--- /dev/null
+++ b/tests/shots-copy-translate.test.ts
@@ -0,0 +1,52 @@
+// `storebound shots copy translate | check | reviewed`: fills copy.json per language with a marker file, caption limits.
+import { describe, expect, test } from 'bun:test';
+import { readFileSync } from 'node:fs';
+import { join } from 'node:path';
+import type { ShipConfig } from '../cli/lib/config';
+import { validateCopy } from '../cli/shots/lib';
+import { applyFields, marksNotes, overLimit, parseMarks, sceneFields } from '../cli/lib/shots-copy-translate';
+import { run } from '../cli/shots/copy';
+import { BASE, capture, project } from './helpers/store-mock';
+
+const CFG: ShipConfig = {
+  ...BASE,
+  languages: [{ id: 'en', apple: 'en-US', play: 'en-US' }, { id: 'de', apple: 'de-DE', play: 'de-DE' }],
+  shots: { copy: 'store/shots/copy.json', scenes: [{ id: 'home', palette: 'gold', frames: [] }] } as never,
+};
+const COPY = JSON.stringify({ en: { home: { eyebrow: 'Hello', title: ['Everything', 'in order'], sub: 'Lists and notes.' } } });
+const go = async (p: ReturnType<typeof project>, argv: string[]) => { const r = await capture(() => run(p.ctx(argv))); return r; };
+
+describe('shots copy translate', () => {
+  test('without a hook the source is copied in as status=translate; the missing-locale problem names the command', async () => {
+    const p = project(CFG, { 'store/shots/copy.json': COPY });
+    expect(validateCopy(JSON.parse(COPY), CFG.shots!, ['en', 'de'])[0]).toContain('storebound shots copy translate --to de');
+    await go(p, ['translate', '--to', 'de']);
+    const copy = JSON.parse(readFileSync(join(p.root, 'store/shots/copy.json'), 'utf8'));
+    expect(copy.de.home.title).toEqual(['Everything', 'in order']);
+    const marks = parseMarks(readFileSync(join(p.root, 'store/shots/copy.translations.json'), 'utf8'));
+    expect(marks.de).toEqual({ from: 'en', status: 'translate' });
+    expect(marksNotes(marks, 'copy')[0]).toContain('not translated yet');
+    expect(validateCopy(copy, CFG.shots!, ['en', 'de'])).toEqual([]);
+  });
+  test('with a hook: draft; an over-limit field keeps the source and the language stays translate; reviewed refuses translate', async () => {
+    const p = project(CFG, { 'store/shots/copy.json': COPY });
+    await go(p, ['translate', '--to', 'de', '--translate', 'tr a-z A-Z']);
+    let copy = JSON.parse(readFileSync(join(p.root, 'store/shots/copy.json'), 'utf8'));
+    expect(copy.de.home.eyebrow).toBe('HELLO');
+    expect(parseMarks(readFileSync(join(p.root, 'store/shots/copy.translations.json'), 'utf8')).de!.status).toBe('draft');
+    const r = await go(p, ['reviewed', '--lang', 'de']);
+    expect(r.exit).toBeFalsy();
+    expect(readFileSync(join(p.root, 'store/shots/copy.translations.json'), 'utf8').trim()).toBe('{}');
+    const q = project(CFG, { 'store/shots/copy.json': COPY });
+    await go(q, ['translate', '--to', 'de', '--translate', 'echo xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx']);
+    copy = JSON.parse(readFileSync(join(q.root, 'store/shots/copy.json'), 'utf8'));
+    expect(copy.de.home.title[0]).toBe('Everything');
+    expect(parseMarks(readFileSync(join(q.root, 'store/shots/copy.translations.json'), 'utf8')).de!.status).toBe('translate');
+  });
+  test('helpers: fields, limits', () => {
+    const sc = JSON.parse(COPY).en.home;
+    expect(sceneFields(sc).map(f => f.key)).toEqual(['eyebrow', 'title.0', 'title.1', 'sub']);
+    expect(applyFields(sc, { sub: 'x' }).sub).toBe('x');
+    expect(overLimit({ home: { title: ['a'.repeat(40), 'b'] } })[0]).toMatchObject({ field: 'title.0', limit: 28 });
+  });
+});

From 8084104a4d8eb5b8f0183068fddaebdbaceca117 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Sat, 24 Oct 2026 12:14:18 +0800
Subject: [PATCH 005/126] desktop coverage entry for shots copy

---
 cli/lib/desktop-coverage.ts | 1 +
 docs/desktop-coverage.md    | 3 ++-
 2 files changed, 3 insertions(+), 1 deletion(-)

diff --git a/cli/lib/desktop-coverage.ts b/cli/lib/desktop-coverage.ts
index 6896869..c869941 100644
--- a/cli/lib/desktop-coverage.ts
+++ b/cli/lib/desktop-coverage.ts
@@ -137,6 +137,7 @@ export const DESKTOP_COVERAGE: Record<string, Coverage> = {
   'shots capture': { where: `${T}: Captures`, methods: ['shots.capture'] },
   'shots login': { where: `${T}: owner steps (terminal command)`, methods: [], owner: 'signing in to a demo account by hand in a visible browser' },
   'shots fonts': { where: `${T}: Captures`, methods: ['shots.fonts'] },
+  'shots copy': { not: 'caption translation drafts are edited by the agent in store/shots/copy.json; the window shows the result in the Store art tab' },
   'shots render': { where: 'Store art tab: Render', methods: ['shots.render'] },
   'shots jpeg': { where: `${T}: Captures`, methods: ['shots.jpeg'] },
   'shots check': { where: `${T}: Captures`, methods: ['shots.check'] },
diff --git a/docs/desktop-coverage.md b/docs/desktop-coverage.md
index 55f5b06..d57be84 100644
--- a/docs/desktop-coverage.md
+++ b/docs/desktop-coverage.md
@@ -5,7 +5,7 @@ Every CLI command (cli/commands.ts) and the desktop place that runs it. "covered
 (serve.ts, or a host command `host:`) and the window calls it; tests/desktop-coverage.test.ts fails on a gap.
 Owner-only parts are owner actions in the window or owner steps with their terminal command (More tools).
 
-**100 commands:** 92 covered, 0 gaps, 8 not for the desktop.
+**101 commands:** 92 covered, 0 gaps, 9 not for the desktop.
 
 | command | status | where in the window | methods | owner step |
 |---|---|---|---|---|
@@ -103,6 +103,7 @@ Owner-only parts are owner actions in the window or owner steps with their termi
 | `shots capture` | covered | More tools: Captures | `shots.capture` |  |
 | `shots login` | covered | More tools: owner steps (terminal command) |  | signing in to a demo account by hand in a visible browser |
 | `shots fonts` | covered | More tools: Captures | `shots.fonts` |  |
+| `shots copy` | not-for-desktop | caption translation drafts are edited by the agent in store/shots/copy.json; the window shows the result in the Store art tab |  |  |
 | `shots render` | covered | Store art tab: Render | `shots.render` |  |
 | `shots jpeg` | covered | More tools: Captures | `shots.jpeg` |  |
 | `shots check` | covered | More tools: Captures | `shots.check` |  |

From 089c14928908c924ac17ef03f87164897c6f7b45 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Sat, 24 Oct 2026 12:15:14 +0800
Subject: [PATCH 006/126] desktop coverage test: shots copy is agent-edited

---
 tests/desktop-coverage.test.ts | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tests/desktop-coverage.test.ts b/tests/desktop-coverage.test.ts
index 36f198b..7a279e4 100644
--- a/tests/desktop-coverage.test.ts
+++ b/tests/desktop-coverage.test.ts
@@ -8,7 +8,7 @@ import { describeMethods } from '../cli/serve';
 import { analyze, render } from '../tools/gen-desktop-coverage';
 
 /** The only commands that make no sense in a window. Adding one here needs a reason in the coverage map. */
-const NOT_FOR_DESKTOP = ['mcp', 'serve', 'desktop', 'api', 'settings', 'aab', 'watch', 'events'];
+const NOT_FOR_DESKTOP = ['mcp', 'serve', 'desktop', 'api', 'settings', 'aab', 'watch', 'events', 'shots copy'];
 
 describe('desktop coverage', () => {
   const { rows, extra } = analyze();

From b325b453543bac13a25f0191af7bb20836c3ba16 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Sat, 24 Oct 2026 12:17:01 +0800
Subject: [PATCH 007/126] merge fixups: changelog and pitfall numbering

---
 CHANGELOG.md                   | 1 -
 skills/store-pitfalls/SKILL.md | 1 -
 2 files changed, 2 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 043b6e2..6f174cf 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -4,7 +4,6 @@
 ## Unreleased
 
 - Play managed publishing: `storebound console plan play-publish-changes` (Publishing overview > "Changes ready to publish" > the owner's final "Publish N changes" + its confirm dialog; never-press: Discard changes, Stop managed publishing; `--lookup` lists the ready production releases from the API) and `console verify play-publish-changes` (API: passes when no production release is left ready to publish; or the page text). `play status` (and `--json` `readyToPublish`) prints the ready items and the plan hint, `storebound status` names the plan, and the desktop Releases tab shows the same hint with a button that opens Publishing overview. A release counts as ready to publish only when the public store page positively shows an older version; a 404, a failed or stale page read, a same or unparseable version is never ready (verify says "not determined" instead of a mismatch).
-||||||| parent of abe0821 (upload --pre-check/--evidence, shots copy translate, game-center --locale-map, play games API-disabled hint)
 - `apple upload` / `play upload` `--pre-check "<cmd with {file}>"` (config `upload.preCheck`) runs your gate before any byte is sent; a nonzero exit refuses the upload (ship-step exit 1, `PRE_CHECK_FAILED`). `--evidence <path.json>` (`upload.evidence`) writes file, sha256, size, command, exit code, stdout tail, time and version, also on failure, and the result carries it as `preCheck`.
 - New `storebound shots copy translate --to de,es` fills store/shots/copy.json per language (agent translation or `--translate "<cmd>"`), machine-translated until `shots copy reviewed`, caption limits respected; `shots copy check`; `check` / `shots render` name this command for a missing language.
 - `apple game-center --locale-map en=en-GB` (config `games.localeMap`) maps a config language to the live Game Center locale; the dry run suggests it when the live Game Center has exactly one variant of the language.
diff --git a/skills/store-pitfalls/SKILL.md b/skills/store-pitfalls/SKILL.md
index b0c0381..55badb3 100644
--- a/skills/store-pitfalls/SKILL.md
+++ b/skills/store-pitfalls/SKILL.md
@@ -1376,7 +1376,6 @@ that fails without the fix (see CONTRIBUTING.md).
 - **Guard:** `cli/lib/play-publish.ts` (ready list from tracks plus the public store page, the only signal the API
   gives), the plan, the verify, the hint in `play status` / `status` / the desktop Releases tab. Non-track changes are
   not visible to the API.
-||||||| parent of abe0821 (upload --pre-check/--evidence, shots copy translate, game-center --locale-map, play games API-disabled hint)
 ## 115. A project's own pre-upload gate ran as a separate step and could be skipped
 
 - **What happens:** a store-readiness scan of the binary lived in the pipeline next to `apple upload` / `play upload`, so

From 2e8593ed5c55b0a95ed1257b1f2f4eea01a3838a Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Sat, 24 Oct 2026 12:17:45 +0800
Subject: [PATCH 008/126] pitfalls spacing

---
 skills/store-pitfalls/SKILL.md | 1 +
 1 file changed, 1 insertion(+)

diff --git a/skills/store-pitfalls/SKILL.md b/skills/store-pitfalls/SKILL.md
index 55badb3..70aa528 100644
--- a/skills/store-pitfalls/SKILL.md
+++ b/skills/store-pitfalls/SKILL.md
@@ -1376,6 +1376,7 @@ that fails without the fix (see CONTRIBUTING.md).
 - **Guard:** `cli/lib/play-publish.ts` (ready list from tracks plus the public store page, the only signal the API
   gives), the plan, the verify, the hint in `play status` / `status` / the desktop Releases tab. Non-track changes are
   not visible to the API.
+
 ## 115. A project's own pre-upload gate ran as a separate step and could be skipped
 
 - **What happens:** a store-readiness scan of the binary lived in the pipeline next to `apple upload` / `play upload`, so

From 9a937b5512f4a47fc90ff35c8c8fcd2e64d16675 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Sat, 24 Oct 2026 12:04:26 +0800
Subject: [PATCH 009/126] apple build --platform macos --tauri: Mac App Store
 build of a Tauri app (sandbox entitlements, profile, productbuild pkg,
 path-free, checks); apple upload accepts the pkg

---
 cli/apple/build-mas.ts  | 201 +++++++++++++++++++++++++++
 cli/apple/build.ts      |   3 +
 cli/apple/signing.ts    |   2 +-
 cli/apple/upload.ts     |  37 +++--
 cli/lib/mas.ts          | 299 ++++++++++++++++++++++++++++++++++++++++
 cli/lib/signing.ts      |   4 +-
 cli/lib/xcode.ts        |   8 +-
 tests/mas-build.test.ts | 194 ++++++++++++++++++++++++++
 8 files changed, 726 insertions(+), 22 deletions(-)
 create mode 100644 cli/apple/build-mas.ts
 create mode 100644 cli/lib/mas.ts
 create mode 100644 tests/mas-build.test.ts

diff --git a/cli/apple/build-mas.ts b/cli/apple/build-mas.ts
new file mode 100644
index 0000000..d1bb17c
--- /dev/null
+++ b/cli/apple/build-mas.ts
@@ -0,0 +1,201 @@
+// Mac App Store build of a Tauri app: `tauri build --bundles app`, signed for the Mac App Store, then productbuild to a .pkg.
+//   storebound apple build --platform macos --tauri <src-tauri> [--path-free] [--target universal-apple-darwin]
+//       [--version x.y.z] [--build-number N] [--profile <file.provisionprofile>] [--out build/macos] [--unsigned] [--dry] [--json]
+// Steps: Tauri project -> version / build number (next free one on App Store Connect, platform MAC_OS) -> signing
+// identities from the keychain ("Apple Distribution" or "3rd Party Mac Developer Application"; "Mac Installer
+// Distribution" or "3rd Party Mac Developer Installer") -> Mac App Store provisioning profile (--profile, installed, or
+// from the API) -> entitlements (app sandbox + application / team identifier, the project's own keys kept) -> a
+// tauri.conf overlay (signingIdentity, entitlements, embedded.provisionprofile, bundleVersion) -> `tauri build` ->
+// checks of the .app (sandbox entitlement, category, minimum OS, version / build, profile inside, no local paths) ->
+// productbuild --sign -> pkgutil --check-signature. --path-free remaps the checkout, CARGO_HOME, RUSTUP_HOME and the home
+// folder in rustc, strips debug info and symbols, and fails when the home folder or user name is still in the app.
+// --unsigned builds without identities, profile and installer signature (a pipeline check on any Mac; not uploadable).
+// Result: <out>/export/<version>-<build>/<Product>.pkg + <out>/latest.json; then `storebound apple upload <pkg> --platform macos`.
+// codesign needs the Mac's logged-in GUI session (SSH: errSecInternalComponent), same as apple build.
+import { copyFileSync, existsSync, mkdirSync, readFileSync, rmSync, writeFileSync } from 'node:fs';
+import { homedir, userInfo } from 'node:os';
+import { dirname, join, relative } from 'node:path';
+import type { Ctx } from '../lib/ctx';
+import { need } from '../lib/ctx';
+import { done, log, printJson, warn } from '../lib/log';
+import { parseMobileprovision, parsePlist, type PlistValue } from '../lib/plist';
+import { nextBuildNumber } from '../lib/release';
+import { parseIdentities, profileDirs, readProfiles, type ApiProfile } from '../lib/signing';
+import { remoteBuildSession, showCmd } from '../lib/xcode';
+import {
+  appProblems, entitlementKeysOf, entitlementsXml, findBuiltApp, findTauri, leakNeedles, masEntitlements, type MasProfile, masSteps, pathFreeEnv, pickMasIdentities,
+  pickMasProfiles, pkgProblems, parsePkgSignature, readAppInfo, scanPathLeaks, tauriOverlay, categoryId,
+} from '../lib/mas';
+import { readdirSync } from 'node:fs';
+import { ascClient, type Asc } from './asc';
+import { findBundleId } from './signing';
+import { runLogged } from './build';
+import * as rt from '../lib/rt';
+import { shipPhase } from '../lib/ship-step';
+
+const TAG = 'build';
+const run1 = (argv: string[], timeout = 120_000): { ok: boolean; out: string } => {
+  const r = rt.spawnSync(argv, { stdout: 'pipe', stderr: 'pipe', timeout });
+  return { ok: r.exitCode === 0, out: `${r.stdout.toString()}${r.stderr.toString()}` };
+};
+
+/** The Tauri CLI: the project's node_modules/.bin/tauri (walking up), `cargo tauri`, else bunx. */
+export function tauriCommand(cwd: string, exists: (p: string) => boolean = existsSync, which: (c: string) => string | null = rt.which): string[] {
+  for (let d = cwd, prev = ''; d !== prev; prev = d, d = dirname(d)) { const p = join(d, 'node_modules', '.bin', 'tauri'); if (exists(p)) return [p]; }
+  if (which('cargo-tauri')) return ['cargo', 'tauri'];
+  return ['bunx', '--bun', '@tauri-apps/cli'];
+}
+
+/** Mac App Store profiles installed for Xcode (both folders, .provisionprofile and .mobileprovision). */
+export function installedMasProfiles(bundleId: string, teamId: string | null, home = homedir()): MasProfile[] {
+  const files: { path: string; profile: Record<string, PlistValue> }[] = [];
+  for (const d of profileDirs(home)) {
+    let names: string[] = []; try { names = readdirSync(d).filter(f => /\.(provisionprofile|mobileprovision)$/.test(f)); } catch { continue; }
+    for (const f of names) { try { files.push({ path: join(d, f), profile: parseMobileprovision(readFileSync(join(d, f))) }); } catch { /* not a profile */ } }
+  }
+  return pickMasProfiles(files, bundleId, teamId);
+}
+
+/** The ACTIVE MAC_APP_STORE profile of the bundle id from the API, written to `dest`. Null when there is none. */
+async function fetchMasProfile(c: Asc, bundleId: string, dest: string): Promise<string | null> {
+  const b = await findBundleId(c, bundleId);
+  if (!b) return null;
+  const list: ApiProfile[] = await readProfiles(p => c.all(p), b.id, 'MAC_APP_STORE');
+  const ok = list.filter(p => p.attributes.profileState === 'ACTIVE' && Date.parse(p.attributes.expirationDate ?? '') - Date.now() > 86_400_000)
+    .sort((x, y) => Date.parse(y.attributes.expirationDate!) - Date.parse(x.attributes.expirationDate!))[0];
+  if (!ok) return null;
+  const content = ok.attributes.profileContent ?? (await c.asc('GET', `/v1/profiles/${ok.id}`)).data.attributes.profileContent;
+  if (!content) return null;
+  mkdirSync(dirname(dest), { recursive: true });
+  writeFileSync(dest, Buffer.from(content, 'base64'));
+  return dest;
+}
+
+export async function run(ctx: Ctx): Promise<void> {
+  const { config, root, resolve } = ctx.loaded;
+  const a = ctx.args;
+  const bundleId = need(config.apple?.bundleId, 'apple.bundleId');
+  const dry = a.has('dry'), json = a.has('json');
+  const unsigned = a.has('unsigned');
+  const pathFree = a.has('path-free');
+  const tauri = findTauri(root, a.get('tauri'));
+  if (tauri.identifier !== bundleId) throw new Error(`${relative(root, tauri.confPath)}: identifier is "${tauri.identifier}", the config's apple.bundleId is "${bundleId}": they must be the same`);
+  const target = a.str('target', 'universal-apple-darwin');
+  const out = resolve(a.get('out') ?? (config.apple?.build?.out ? `${config.apple.build.out.replace(/\/ios$/, '')}/macos` : 'build/macos'));
+  const version = a.get('version') ?? tauri.version;
+  if (!version || !/^\d+(\.\d+){0,2}$/.test(version)) throw new Error('version: x.y.z from --version or tauri.conf.json "version"');
+  let build = a.get('build-number');
+  let teamId = config.apple?.signing?.teamId ?? null;
+  let client: Asc | null = null;
+  if (!unsigned || !build) {
+    try {
+      client = await ascClient(root, bundleId, config.apple?.appId);
+      if (!build) {
+        const builds = await client.all(`/v1/builds?filter[app]=${await client.app()}&filter[preReleaseVersion.platform]=MAC_OS&limit=200&fields[builds]=version`);
+        build = nextBuildNumber(builds.map(b => String(b.attributes.version)));
+        log(TAG, `${builds.length} macOS builds on App Store Connect: next build number ${build} (CFBundleVersion must increase)`);
+      }
+      if (!teamId) teamId = (await findBundleId(client, bundleId))?.attributes?.seedId ?? null;
+    } catch (e) {
+      if (!dry) throw new Error(`${(e as Error).message}\n(pass --build-number N and set apple.signing.teamId to build without App Store Connect reads)`);
+      warn(TAG, `App Store Connect not readable (${(e as Error).message.split('\n')[0]?.slice(0, 120)}): dry run continues with placeholders`);
+    }
+  }
+  if (build && !/^\d+(\.\d+){0,2}$/.test(build)) throw new Error('--build-number: digits, e.g. 42 or 1.0.42');
+  const buildNo = build ?? '<next build number>';
+  const team = teamId ?? '<TEAM_ID>';
+
+  // identities and profile (a real signed run needs them; a dry run shows placeholders)
+  const mac = process.platform === 'darwin';
+  let appIdentity: string | null = null, installerIdentity: string | null = null;
+  if (!unsigned && mac) {
+    const picked = pickMasIdentities(parseIdentities(run1(['security', 'find-identity', '-v']).out), teamId);
+    appIdentity = picked.app?.name ?? null; installerIdentity = picked.installer?.name ?? null;
+    const missing = [!appIdentity && 'an "Apple Distribution" / "3rd Party Mac Developer Application" identity', !installerIdentity && 'a "Mac Installer Distribution" / "3rd Party Mac Developer Installer" identity'].filter(Boolean);
+    if (missing.length && !dry) throw new Error(`no ${missing.join(' and no ')} for team ${team} in the keychain. Create them with apple.signing.certificateType DISTRIBUTION / MAC_INSTALLER_DISTRIBUTION and \`storebound apple signing ensure\`, then import the certificate into the login keychain.`);
+    if (missing.length) warn(TAG, `missing in the keychain: ${missing.join(', ')}`);
+  }
+  const profileFile = join(out, 'embedded.provisionprofile');
+  let profile: string | null = null;
+  if (!unsigned) {
+    const given = a.get('profile');
+    if (given) { profile = resolve(given); if (!existsSync(profile)) throw new Error(`--profile ${given}: no such file`); }
+    else {
+      const have = installedMasProfiles(bundleId, teamId)[0];
+      if (have) { profile = have.path; log(TAG, `Mac App Store profile "${have.name}" (installed, expires ${have.expires.slice(0, 10)})`); }
+      else if (client && !dry) profile = await fetchMasProfile(client, bundleId, profileFile);
+      else if (client) { try { profile = await fetchMasProfile(client, bundleId, profileFile); } catch (e) { warn(TAG, `profile not readable: ${(e as Error).message.split('\n')[0]}`); } }
+      if (!profile && !dry) throw new Error(`no active MAC_APP_STORE provisioning profile for ${bundleId}: set apple.signing.profileType to MAC_APP_STORE and run \`storebound apple signing ensure\`, or pass --profile <file.provisionprofile>`);
+      if (!profile) warn(TAG, `no MAC_APP_STORE profile for ${bundleId} yet (storebound apple signing ensure with apple.signing.profileType MAC_APP_STORE)`);
+    }
+  }
+
+  const home = homedir(), user = userInfo().username;
+  const env = pathFree ? pathFreeEnv({ home, user, root: process.env.STOREBOUND_PATHFREE_ROOT ?? root, cargoHome: process.env.CARGO_HOME, rustupHome: process.env.RUSTUP_HOME, rustflags: process.env.RUSTFLAGS }) : {};
+  const entFile = join(out, 'mas.entitlements');
+  const configFile = join(out, 'tauri.mas.conf.json');
+  const exportPath = join(out, 'export', `${version}-${buildNo}`);
+  const pkg = join(exportPath, `${tauri.productName}.pkg`);
+  const tauriCmd = tauriCommand(tauri.cwd);
+  const category = tauri.category && !categoryId(tauri.category) ? undefined : tauri.category;
+  const overlay = tauriOverlay({ appIdentity, entitlementsFile: entFile, profile, version, build: buildNo, unsigned, minOs: tauri.minOs, category });
+  const input = { tauri, tauriCmd, target, out, configFile, entitlementsFile: entFile, profile, appIdentity, installerIdentity: installerIdentity ?? '<Mac Installer Distribution identity>', version, build: buildNo, unsigned, pathFree, pkg };
+  const steps = masSteps(input);
+  const existingEnt = tauri.entitlements && existsSync(tauri.entitlements) ? (parsePlist(readFileSync(tauri.entitlements)) as Record<string, PlistValue>) : undefined;
+  const ent = masEntitlements({ teamId: team, bundleId, existing: existingEnt });
+  const plan = { platform: 'MAC_OS', tauri: relative(root, tauri.confPath), target, version, build: buildNo, teamId: teamId, unsigned, pathFree, appIdentity, installerIdentity,
+    profile: profile ? basenameOf(profile) : null, entitlements: Object.keys(ent), tauriOverlay: overlay, env: Object.fromEntries(Object.entries(env).map(([k, v]) => [k, k === 'RUSTFLAGS' ? v.replaceAll(home, '~') : v])),
+    steps: [showCmd(steps.tauri, null), showCmd(steps.codesignVerify, null), showCmd(steps.productbuild, null), showCmd(steps.pkgCheck, null)], out: relative(root, out) || '.', pkg: relative(root, pkg) };
+  if (dry) {
+    if (json) { printJson(plan); return; }
+    log(TAG, `Tauri ${tauri.productName} (${bundleId}) ${version} (${buildNo}) for ${target}, ${unsigned ? 'UNSIGNED' : 'Mac App Store signing'}${pathFree ? ', path-free' : ''}`);
+    log(TAG, `app identity: ${appIdentity ?? '(none found)'}; installer identity: ${installerIdentity ?? '(none found)'}; profile: ${plan.profile ?? '(none)'}`);
+    log(TAG, `entitlements: ${plan.entitlements.join(', ')}`);
+    if (pathFree) log(TAG, `RUSTFLAGS: ${plan.env.RUSTFLAGS}`);
+    for (const s of plan.steps) log(TAG, `would run: ${s}`);
+    done(TAG, 'macOS build planned (dry run)');
+    return;
+  }
+  if (!mac) throw new Error('apple build --platform macos needs macOS (tauri build, codesign, productbuild)');
+  const remote = remoteBuildSession(process.env, run1(['launchctl', 'managername'], 5000).out.trim());
+  if (remote && !unsigned && !a.has('allow-ssh')) throw new Error(`apple build: ${remote}; codesign there fails with errSecInternalComponent (locked keychain). Run it in the Mac's logged-in session (write the command into a .command file and \`open -a Terminal <file>\`), or add --unsigned for a pipeline check.`);
+  mkdirSync(out, { recursive: true });
+  writeFileSync(entFile, entitlementsXml(ent));
+  writeFileSync(configFile, `${JSON.stringify(overlay, null, 2)}\n`);
+  shipPhase('build', `tauri build ${target}, build ${buildNo}`);
+  await runLogged(steps.tauri, tauri.cwd, join(out, 'tauri-build.log'), showCmd(steps.tauri, null), env);
+  const appDir = findBuiltApp(tauri.cwd, root, target, tauri.productName);
+  if (!appDir) throw new Error(`tauri build exited 0 but no ${tauri.productName}.app is under ${join(tauri.cwd, 'target', target, 'release/bundle/macos')} (see ${join(out, 'tauri-build.log')})`);
+  shipPhase('verify', `checking ${basenameOf(appDir)}`);
+  if (!unsigned) {
+    const v = run1(steps.codesignVerify.map(x => (x.endsWith('.app') ? appDir : x)));
+    if (!v.ok) throw new Error(`codesign --verify failed:\n${v.out.slice(-600)}`);
+  }
+  const entOut = unsigned ? null : entitlementKeysOf(run1(['codesign', '-d', '--entitlements', ':-', appDir]).out);
+  const leaks = pathFree || a.has('scan-paths') ? scanPathLeaks(appDir, leakNeedles(home, user, root)) : [];
+  const checks = appProblems({ info: readAppInfo(appDir), entitlements: entOut, hasProfile: existsSync(join(appDir, 'Contents', 'embedded.provisionprofile')), leaks },
+    { bundleId, version, build: buildNo, signed: !unsigned, pathFree });
+  for (const w of checks.warnings) warn(TAG, w);
+  if (checks.errors.length) throw new Error(`${basenameOf(appDir)} was built, but the Mac App Store would refuse it:\n${checks.errors.map(x => `  ${x}`).join('\n')}`);
+  shipPhase('sign', 'productbuild');
+  rmSync(exportPath, { recursive: true, force: true });
+  mkdirSync(exportPath, { recursive: true });
+  const pbArgv = masSteps({ ...input, installerIdentity }).productbuild.map(x => (x.endsWith('.app') ? appDir : x));
+  await runLogged(pbArgv, tauri.cwd, join(out, 'productbuild.log'), showCmd(pbArgv, null));
+  if (!existsSync(pkg)) throw new Error(`productbuild exited 0 but left no ${pkg}`);
+  if (!unsigned) {
+    const sig = parsePkgSignature(run1(steps.pkgCheck).out);
+    const bad = pkgProblems(sig);
+    if (bad.length) throw new Error(`${relative(root, pkg)}:\n${bad.map(x => `  ${x}`).join('\n')}`);
+    log(TAG, `pkg signed with "${sig.certificate}"`);
+  }
+  copyIfAny(profile, profileFile);
+  const result = { pkg, platform: 'MAC_OS', bundleId, version, build: buildNo, unsigned, pathFree, leaks: leaks.length };
+  writeFileSync(join(out, 'latest.json'), `${JSON.stringify(result, null, 2)}\n`);
+  writeFileSync(`${pkg}.json`, `${JSON.stringify(result, null, 2)}\n`);
+  if (json) printJson(result);
+  done(TAG, `${relative(root, pkg)}: ${bundleId} ${version} (${buildNo})${unsigned ? ' UNSIGNED, not uploadable' : `. Next: storebound apple upload ${relative(root, pkg)} --platform macos --dry`}`);
+}
+
+const basenameOf = (p: string): string => p.split(/[\\/]/).pop() ?? p;
+function copyIfAny(src: string | null, dest: string): void { if (src && src !== dest && existsSync(src) && !existsSync(dest)) { try { copyFileSync(src, dest); } catch { /* optional */ } } }
diff --git a/cli/apple/build.ts b/cli/apple/build.ts
index 277bfce..b5df488 100644
--- a/cli/apple/build.ts
+++ b/cli/apple/build.ts
@@ -26,6 +26,7 @@ import { capacitorProject, webStep } from '../lib/web-assets';
 import { archiveArgs, type AscAuth, distributionErrors, exportArgs, foreignRsync, remoteBuildSession, xcodePath, flutterConfigArgs, ipaInfo, ipaVersionProblem, pickXcode, scanXcode, showCmd } from '../lib/xcode';
 import { bundleTrackingIssues, ipaManifests } from '../lib/privacy-files';
 import { ascClient } from './asc';
+import { parsePlatform } from './platform';
 import { findBundleId } from './signing';
 import * as rt from '../lib/rt';
 import { shipPhase } from '../lib/ship-step';
@@ -98,6 +99,8 @@ export async function exportIpa(o: { root: string; out: string; archivePath: str
 export async function run(ctx: Ctx): Promise<void> {
   const { config, root, resolve } = ctx.loaded;
   const a = ctx.args;
+  // Mac App Store build of a Tauri app (cli/apple/build-mas.ts)
+  if (a.has('tauri') || parsePlatform(a.get('platform')) === 'MAC_OS') return (await import('./build-mas')).run(ctx);
   const bundleId = need(config.apple?.bundleId, 'apple.bundleId');
   const cfg = config.apple?.build ?? {};
   const signing = config.apple?.signing ?? {};
diff --git a/cli/apple/signing.ts b/cli/apple/signing.ts
index 30ce943..cea09e0 100644
--- a/cli/apple/signing.ts
+++ b/cli/apple/signing.ts
@@ -55,7 +55,7 @@ function localKeys(root: string): Map<string, string> {
 /** SHA-1s of code signing identities in the keychain search list (macOS; empty elsewhere). Read-only. */
 function keychainIdentities(): Set<string> {
   if (process.platform !== 'darwin' || !rt.which('security')) return new Set();
-  const r = rt.spawnSync(['security', 'find-identity', '-v', '-p', 'codesigning'], { stdout: 'pipe', stderr: 'pipe' });
+  const r = rt.spawnSync(['security', 'find-identity', '-v'], { stdout: 'pipe', stderr: 'pipe' });
   return new Set(parseIdentities(r.stdout.toString()).map(i => i.sha1));
 }
 
diff --git a/cli/apple/upload.ts b/cli/apple/upload.ts
index 966019f..03b19c6 100644
--- a/cli/apple/upload.ts
+++ b/cli/apple/upload.ts
@@ -17,6 +17,7 @@
 // timeout (exit 7).
 // An upload is a write: --dry shows the plan; a real run asks first (--yes in scripts).
 import { runPreCheck } from '../lib/pre-check';
+import { pkgInfo } from '../lib/mas';
 import { appleSdkProblem } from '../lib/store-minimums';
 import { closeSync, existsSync, openSync, readdirSync, readSync, statSync } from 'node:fs';
 import { basename, join, relative } from 'node:path';
@@ -29,6 +30,7 @@ import { altoolArgs, buildUploadReqs, exportedIpas, ipaInfo, ipaVersionProblem,
 import { bundleTrackingIssues, ipaManifests } from '../lib/privacy-files';
 import { BUILD_WAIT_EXIT } from '../lib/build-ops';
 import { type Asc, ascClient, type J } from './asc';
+import { parsePlatform } from './platform';
 import { waitForBuild, waitMessage } from './testflight';
 import { describeReq } from './jsonapi';
 import { createOnce } from '../lib/upsert';
@@ -139,13 +141,13 @@ export async function sendParts(o: SendPartsOptions): Promise<void> {
   } finally { beat.stop(); }
 }
 
-async function apiUpload(c: Asc, appId: string, ipa: string, info: ReturnType<typeof ipaInfo>, deadline: number, o: HeartbeatOptions = {}): Promise<void> {
+async function apiUpload(c: Asc, appId: string, ipa: string, info: ReturnType<typeof ipaInfo>, deadline: number, o: HeartbeatOptions = {}, platform: 'IOS' | 'MAC_OS' = 'IOS'): Promise<void> {
   const size = statSync(ipa).size;
-  const reqs = buildUploadReqs(appId, info, basename(ipa), size);
+  const reqs = buildUploadReqs(appId, info, basename(ipa), size, platform);
   // one build upload per version + build number: an earlier one that did not fail is resumed, never doubled
-  const prior = (await uploadsOf(c, appId, info)).find((u: J) => u.attributes?.state?.state !== 'FAILED');
+  const prior = (await uploadsOf(c, appId, info, platform)).find((u: J) => u.attributes?.state?.state !== 'FAILED');
   const made = prior ? { value: prior, created: false } : await createOnce<J>({ what: `build upload ${info.version} (${info.build})`, tag: TAG,
-    find: async () => (await uploadsOf(c, appId, info)).find((u: J) => u.attributes?.state?.state !== 'FAILED') ?? null,
+    find: async () => (await uploadsOf(c, appId, info, platform)).find((u: J) => u.attributes?.state?.state !== 'FAILED') ?? null,
     create: async () => (await c.asc('POST', reqs.upload.path, reqs.upload.body)).data });
   const up = made.value;
   log(TAG, made.created ? `build upload ${up.id} created` : `build upload ${up.id} exists (${up.attributes?.state?.state ?? '?'}): resuming it`);
@@ -179,8 +181,8 @@ async function apiUpload(c: Asc, appId: string, ipa: string, info: ReturnType<ty
 }
 
 /** Build uploads of this version + build number (any state), newest first. */
-const uploadsOf = (c: Asc, appId: string, info: { version: string; build: string }): Promise<J[]> =>
-  c.all(`/v1/apps/${appId}/buildUploads?filter[cfBundleShortVersionString]=${encodeURIComponent(info.version)}&filter[cfBundleVersion]=${encodeURIComponent(info.build)}&filter[platform]=IOS&limit=20`);
+const uploadsOf = (c: Asc, appId: string, info: { version: string; build: string }, platform = 'IOS'): Promise<J[]> =>
+  c.all(`/v1/apps/${appId}/buildUploads?filter[cfBundleShortVersionString]=${encodeURIComponent(info.version)}&filter[cfBundleVersion]=${encodeURIComponent(info.build)}&filter[platform]=${platform}&limit=20`);
 
 /**
  * `xcrun altool --upload-package`: runs in the background with a heartbeat (it prints nothing until it is done) and is
@@ -232,25 +234,30 @@ export async function run(ctx: Ctx): Promise<void> {
   const via = a.str('via', 'api');
   if (via !== 'api' && via !== 'altool') throw new Error('--via api | altool');
   const want = a.get('build');
-  let ipa = a._.find(x => x.endsWith('.ipa'));
+  const macos = parsePlatform(a.get('platform')) === 'MAC_OS';
+  let ipa = a._.find(x => x.endsWith('.ipa') || x.endsWith('.pkg'));
   if (!ipa) {
     const dir = join(resolve(config.apple?.build?.out ?? 'build/ios'), 'export');
     let found = exportedIpas(dir);
     if (want) found = found.filter(f => { try { return ipaInfo(f).build === want; } catch { return false; } });
+    if (!found[0] && macos) throw new Error('usage: storebound apple upload <app.pkg> --platform macos (storebound apple build --platform macos --tauri <src-tauri> makes one)');
     if (!found[0]) throw new Error(`usage: storebound apple upload <app.ipa> (no ${want ? `build ${want} ` : ''}IPA in ${relative(root, dir)}; storebound apple build makes one)`);
     ipa = found[0];
   } else ipa = resolve(ipa);
   shipPhase('verify', `checking ${relative(root, ipa)}`);
-  const info = ipaInfo(ipa);
+  const isPkg = ipa.endsWith('.pkg');
+  const platform: 'IOS' | 'MAC_OS' = isPkg ? 'MAC_OS' : 'IOS';
+  if (macos && !isPkg) throw new Error('--platform macos uploads a signed .pkg (storebound apple build --platform macos --tauri <src-tauri>), not an .ipa');
+  const info: ReturnType<typeof ipaInfo> = isPkg ? pkgInfo(ipa, bundleId) : ipaInfo(ipa);
   shipReport({ version: info.version, build: info.build, url: consoleUrl('asc.testflight') });
   if (want && info.build !== want) throw new Error(`${relative(root, ipa)} is build ${info.build}, not ${want} (--build): did the last apple build fail?`);
   if (info.bundleId !== bundleId) throw new Error(`${relative(root, ipa)} is ${info.bundleId}, the config says ${bundleId}`);
   // App Store Connect refuses IPAs from an Xcode / SDK older than its current minimum (cli/lib/store-minimums.ts)
-  const sdkWhy = appleSdkProblem(info);
+  const sdkWhy = isPkg ? null : appleSdkProblem(info);
   if (sdkWhy) throw new Error(`${relative(root, ipa)}: not uploaded, ${sdkWhy}`);
   // every PrivacyInfo.xcprivacy in the app (root, Frameworks, bundles): Apple refuses the build minutes after the
   // upload when NSPrivacyTracking and NSPrivacyTrackingDomains disagree (ITMS-91064), so stop before any network call
-  const privacy = bundleTrackingIssues(ipaManifests(ipa));
+  const privacy = isPkg ? [] : bundleTrackingIssues(ipaManifests(ipa));
   if (privacy.length) throw new Error(`${relative(root, ipa)}: not uploaded, Apple would refuse it as Invalid Binary:\n${privacy.map(x => `  ${x}`).join('\n')}\nFix the manifest, rebuild (storebound apple build) and upload the new IPA.`);
   const pre = await runPreCheck({ args: a, config, root, resolve, file: ipa, shown: relative(root, ipa), tag: TAG });
   const size = statSync(ipa).size;
@@ -263,14 +270,14 @@ export async function run(ctx: Ctx): Promise<void> {
   const appId = await c.app();
   // the IPA must belong to the version train being prepared (the editable App Store version): MARKETING_VERSION 1.0
   // from a project that ignored the intended version otherwise lands in the wrong train
-  const editable = await c.editableVersion().catch(() => null);
+  const editable = await c.editableVersion(platform).catch(() => null);
   const trainWhy = ipaVersionProblem(info.version, editable?.attributes?.versionString as string | undefined, 'the editable App Store version');
   if (trainWhy) { if (a.has('allow-version-mismatch')) warn(TAG, trainWhy); else throw new Error(`${relative(root, ipa)}: not uploaded, ${trainWhy}`); }
-  const builds = await c.all(`/v1/builds?filter[app]=${appId}&limit=200&fields[builds]=version,processingState`);
+  const builds = await c.all(`/v1/builds?filter[app]=${appId}${isPkg ? '&filter[preReleaseVersion.platform]=MAC_OS' : ''}&limit=200&fields[builds]=version,processingState`);
   const numbers = builds.map(b => String(b.attributes.version));
   const next = nextBuildNumber(numbers);
   // the same IPA uploaded by an earlier run: nothing to send again, only the wait
-  const already = via === 'api' && !dry ? (await uploadsOf(c, appId, info).catch(() => [])).find((u: J) => u.attributes?.state?.state === 'COMPLETE') : undefined;
+  const already = via === 'api' && !dry ? (await uploadsOf(c, appId, info, platform).catch(() => [])).find((u: J) => u.attributes?.state?.state === 'COMPLETE') : undefined;
   const onAsc = builds.find(b => String(b.attributes.version) === info.build);
   const decision = existingBuild({ ipa: relative(root, ipa), build: info.build, onAsc: !!onAsc, state: onAsc?.attributes?.processingState, uploadComplete: !!already, allowExisting: a.has('allow-existing'), next });
   // the ship-step contract: a build number App Store Connect has already is "nothing to do" (exit 7), never a second upload
@@ -291,7 +298,7 @@ export async function run(ctx: Ctx): Promise<void> {
     stop(r.outcome === 'failed' ? BUILD_WAIT_EXIT.failed : BUILD_WAIT_EXIT.timeout, waitMessage(info.build, r));
   }
   if (numbers.length && compareBuild(info.build, next) < 0) warn(TAG, `build ${info.build} is lower than the highest uploaded one (next free: ${next}); Apple accepts it only if this version train has no higher build`);
-  const reqs = buildUploadReqs(appId, info, basename(ipa), size);
+  const reqs = buildUploadReqs(appId, info, basename(ipa), size, platform);
   const plan = via === 'api'
     ? [describeReq(reqs.upload), describeReq(reqs.file('<upload id>')), `PUT the file parts to the upload URLs Apple returns`, describeReq(reqs.commit('<file id>', '<md5>')), 'GET /v1/buildUploads/<id> until COMPLETE']
     : [showCmd(altoolArgs(ipa, { keyPath: '$ASC_P8', keyId: '$ASC_KEY_ID', issuerId: '$ASC_ISSUER_ID' }), null)];
@@ -309,7 +316,7 @@ export async function run(ctx: Ctx): Promise<void> {
   shipPhase('upload', `uploading ${mb(size)} via ${via}`, 0);
   log(TAG, `${relative(root, ipa)}: ${info.bundleId} ${info.version} (${info.build}), ${mb(size)}, via ${via}, timeout ${a.str('timeout', '60m')}`);
   if (via === 'api') {
-    try { await apiUpload(c, appId, ipa, info, deadline); } catch (e) { if ((e as { exit?: number }).exit) { warn(TAG, (e as Error).message); stop((e as { exit: number }).exit, (e as Error).message); } throw e; }
+    try { await apiUpload(c, appId, ipa, info, deadline, {}, platform); } catch (e) { if ((e as { exit?: number }).exit) { warn(TAG, (e as Error).message); stop((e as { exit: number }).exit, (e as Error).message); } throw e; }
   } else {
     try { await altoolUpload(root, ipa, deadline); } catch (e) { if ((e as { exit?: number }).exit) { warn(TAG, (e as Error).message); stop((e as { exit: number }).exit, (e as Error).message); } throw e; }
   }
diff --git a/cli/lib/mas.ts b/cli/lib/mas.ts
new file mode 100644
index 0000000..cc5d15b
--- /dev/null
+++ b/cli/lib/mas.ts
@@ -0,0 +1,299 @@
+// Mac App Store builds of a Tauri app: detection, entitlements, signing identities, path-free build flags, and the
+// checks of the built .app and .pkg. Pure except findTauri / scanPathLeaks / readAppInfo (bounded file reads).
+//   storebound apple build --platform macos --tauri <src-tauri> [--path-free]   (cli/apple/build-mas.ts runs it)
+import { existsSync, readdirSync, readFileSync, rmSync, statSync } from 'node:fs';
+import { basename, dirname, join, relative, sep } from 'node:path';
+import { parsePlist, toXmlPlist, type PlistValue } from './plist';
+import * as rt from './rt';
+
+export interface TauriProject {
+  /** Folder with tauri.conf.json (usually src-tauri). */
+  dir: string;
+  confPath: string;
+  /** Folder `tauri build` runs in: the parent of `dir`. */
+  cwd: string;
+  productName: string;
+  identifier: string;
+  version?: string;
+  category?: string;
+  minOs?: string;
+  entitlements?: string;
+  conf: Record<string, unknown>;
+}
+
+const SKIP = new Set(['node_modules', 'target', '.git', 'dist', 'build', '.storebound', 'Pods']);
+
+/** The Tauri project: `hint` (a folder with tauri.conf.json, or the file itself) or the only tauri.conf.json found. */
+export function findTauri(root: string, hint?: string): TauriProject {
+  const names = ['tauri.conf.json', 'tauri.conf.json5'];
+  let confPath: string | undefined;
+  if (hint && hint !== 'true') {
+    const p = join(root, hint);
+    if (/tauri\.conf\.json5?$/.test(p) && existsSync(p)) confPath = p;
+    else confPath = names.map(n => join(p, n)).find(existsSync);
+    if (!confPath) throw new Error(`--tauri ${hint}: no tauri.conf.json in it`);
+  } else {
+    const hits: string[] = [];
+    const walk = (dir: string, d: number): void => {
+      let ns: string[]; try { ns = readdirSync(dir); } catch { return; }
+      for (const n of ns) if (names.includes(n)) hits.push(join(dir, n));
+      if (d <= 0) return;
+      for (const n of ns) { if (SKIP.has(n) || n.startsWith('.')) continue; const p = join(dir, n); try { if (statSync(p).isDirectory()) walk(p, d - 1); } catch { /* unreadable */ } }
+    };
+    walk(root, 4);
+    if (hits.length !== 1) throw new Error(hits.length ? `several Tauri projects (${hits.map(h => relative(root, h)).join(', ')}): pass --tauri <folder with tauri.conf.json>` : 'no tauri.conf.json found: pass --tauri <folder with tauri.conf.json>');
+    confPath = hits[0]!;
+  }
+  let conf: Record<string, any>;
+  try { conf = JSON.parse(readFileSync(confPath, 'utf8')); } catch (e) { throw new Error(`${confPath}: not valid JSON (${(e as Error).message}); tauri.conf.json5 / Tauri.toml are not read, use tauri.conf.json`); }
+  const mac = conf.bundle?.macOS ?? {};
+  const productName = String(conf.productName ?? '');
+  if (!productName) throw new Error(`${confPath}: productName is missing`);
+  const dir = dirname(confPath);
+  return { dir, confPath, cwd: dirname(dir), productName, identifier: String(conf.identifier ?? ''), version: typeof conf.version === 'string' ? conf.version : undefined,
+    category: typeof conf.bundle?.category === 'string' ? conf.bundle.category : undefined, minOs: typeof mac.minimumSystemVersion === 'string' ? mac.minimumSystemVersion : undefined,
+    entitlements: typeof mac.entitlements === 'string' ? join(dir, mac.entitlements) : undefined, conf };
+}
+
+/** Tauri's category names (and Apple's public.app-category.* ids) -> the LSApplicationCategoryType Tauri writes; null when unknown. */
+export function categoryId(c: string | undefined): string | null {
+  if (!c) return null;
+  if (c.startsWith('public.app-category.')) return c;
+  const map: Record<string, string> = { Business: 'business', DeveloperTool: 'developer-tools', Education: 'education', Entertainment: 'entertainment', Finance: 'finance', Game: 'games',
+    GraphicsAndDesign: 'graphics-design', HealthcareAndFitness: 'healthcare-fitness', Lifestyle: 'lifestyle', Medical: 'medical', Music: 'music', News: 'news', Photography: 'photography',
+    Productivity: 'productivity', Reference: 'reference', SocialNetworking: 'social-networking', Sports: 'sports', Travel: 'travel', Utility: 'utilities', Video: 'video', Weather: 'weather' };
+  return map[c] ? `public.app-category.${map[c]}` : null;
+}
+
+/** Entitlements a Mac App Store build needs: the sandbox plus the application / team identifiers of the profile. */
+export const MAS_REQUIRED = ['com.apple.security.app-sandbox', 'com.apple.application-identifier', 'com.apple.developer.team-identifier'] as const;
+
+/** The entitlements file: the project's own keys kept, the required ones added (the project's values win for the optional ones). */
+export function masEntitlements(o: { teamId: string; bundleId: string; existing?: Record<string, PlistValue>; network?: boolean }): Record<string, PlistValue> {
+  return {
+    ...(o.network === false ? {} : { 'com.apple.security.network.client': true }),
+    ...(o.existing ?? {}),
+    'com.apple.security.app-sandbox': true,
+    'com.apple.application-identifier': `${o.teamId}.${o.bundleId}`,
+    'com.apple.developer.team-identifier': o.teamId,
+  };
+}
+
+export const entitlementsXml = (e: Record<string, PlistValue>): string => toXmlPlist(e);
+
+/** Keys of an entitlements plist (XML or what `codesign -d --entitlements :-` prints). */
+export function entitlementKeysOf(text: string): Record<string, PlistValue> | null {
+  const start = text.indexOf('<?xml'); const i = start >= 0 ? start : text.indexOf('<plist');
+  if (i < 0) return null;
+  try { const v = parsePlist(text.slice(i)); return v && typeof v === 'object' && !Array.isArray(v) && !Buffer.isBuffer(v) ? v as Record<string, PlistValue> : null; } catch { return null; }
+}
+
+export interface Identity { sha1: string; name: string }
+
+/** The signing identities for a Mac App Store build on this team: the app one ("Apple Distribution" or the older
+ *  "3rd Party Mac Developer Application" / "Mac App Distribution") and the installer one ("3rd Party Mac Developer
+ *  Installer" / "Mac Installer Distribution"). `all` is the parsed `security find-identity -v` list. */
+export function pickMasIdentities(all: Identity[], teamId?: string | null): { app: Identity | null; installer: Identity | null } {
+  const mine = all.filter(i => !teamId || i.name.includes(`(${teamId})`));
+  const first = (...prefixes: string[]): Identity | null => { for (const p of prefixes) { const h = mine.find(i => i.name.startsWith(p)); if (h) return h; } return null; };
+  return { app: first('3rd Party Mac Developer Application', 'Apple Distribution', 'Mac App Distribution'), installer: first('Mac Installer Distribution', '3rd Party Mac Developer Installer') };
+}
+
+export interface MasProfile { path: string; uuid: string; name: string; team: string; expires: string }
+
+/** Mac App Store profiles (.provisionprofile / .mobileprovision) among `files`: macOS platform, no device list, this
+ *  application identifier, not expired; newest expiry first. `parse` reads one profile file. Pure. */
+export function pickMasProfiles(files: { path: string; profile: Record<string, PlistValue> }[], bundleId: string, teamId: string | null, now = Date.now()): MasProfile[] {
+  const out: MasProfile[] = [];
+  for (const { path, profile: p } of files) {
+    const ent = (p.Entitlements ?? {}) as Record<string, PlistValue>;
+    const team = String((p.TeamIdentifier as string[] | undefined)?.[0] ?? '');
+    const appId = String(ent['com.apple.application-identifier'] ?? ent['application-identifier'] ?? '');
+    const platforms = (p.Platform as string[] | undefined) ?? [];
+    if (platforms.length && !platforms.includes('OSX') && !platforms.includes('macOS')) continue;
+    if (p.ProvisionedDevices || p.ProvisionsAllDevices) continue;
+    if (appId !== `${team}.${bundleId}` || (teamId && team !== teamId)) continue;
+    if (Date.parse(String(p.ExpirationDate)) < now) continue;
+    if (!out.some(x => x.uuid === p.UUID)) out.push({ path, uuid: String(p.UUID), name: String(p.Name), team, expires: String(p.ExpirationDate) });
+  }
+  return out.sort((a, b) => Date.parse(b.expires) - Date.parse(a.expires));
+}
+
+export interface PathFreeInput { home: string; user: string; root: string; cargoHome?: string; rustupHome?: string; rustflags?: string }
+
+/** Environment of a build that leaves no local path in the binary: rustc remaps the checkout, CARGO_HOME, RUSTUP_HOME
+ *  and the home folder; no debug info; symbols stripped. Pure. */
+export function pathFreeEnv(i: PathFreeInput): Record<string, string> {
+  const maps: [string, string][] = [
+    [i.root, '/src'], [i.cargoHome ?? `${i.home}/.cargo`, '/cargo'], [i.rustupHome ?? `${i.home}/.rustup`, '/rustup'], [i.home, '/home/build'],
+  ];
+  const seen = new Set<string>();
+  const flags = maps.filter(([from]) => from && !seen.has(from) && seen.add(from)).map(([from, to]) => `--remap-path-prefix=${from}=${to}`);
+  return {
+    RUSTFLAGS: [i.rustflags ?? '', ...flags].filter(Boolean).join(' '),
+    CARGO_PROFILE_RELEASE_DEBUG: '0',
+    CARGO_PROFILE_RELEASE_STRIP: 'symbols',
+    CARGO_PROFILE_RELEASE_TRIM_PATHS: 'all',
+  };
+}
+
+export interface Leak { file: string; needle: string; count: number }
+
+const MAX_SCAN = 400 * 1048576;
+
+/** Every file under `dir` that contains one of the needles (home folder, user name as /name/, checkout path). Reads each
+ *  file whole (an .app is some tens of MB). */
+export function scanPathLeaks(dir: string, needles: string[]): Leak[] {
+  const ns = [...new Set(needles.filter(n => n.length >= 4))].map(n => ({ n, b: Buffer.from(n) }));
+  const out: Leak[] = [];
+  const walk = (d: string): void => {
+    let names: string[]; try { names = readdirSync(d); } catch { return; }
+    for (const name of names) {
+      const p = join(d, name);
+      let st; try { st = statSync(p); } catch { continue; }
+      if (st.isDirectory()) { walk(p); continue; }
+      if (!st.isFile() || st.size > MAX_SCAN) continue;
+      const buf = readFileSync(p);
+      for (const { n, b } of ns) {
+        let count = 0; for (let at = buf.indexOf(b); at >= 0; at = buf.indexOf(b, at + b.length)) count++;
+        if (count) out.push({ file: relative(dir, p).split(sep).join('/'), needle: n, count });
+      }
+    }
+  };
+  walk(dir);
+  return out;
+}
+
+/** The needles for a leak scan: the home folder, /Users/<user> and the checkout. */
+export const leakNeedles = (home: string, user: string, root: string): string[] => [home, `/Users/${user}/`, `/home/${user}/`, root];
+
+export interface AppFacts { info: Record<string, PlistValue>; entitlements: Record<string, PlistValue> | null; hasProfile: boolean; leaks: Leak[] }
+
+/** Problems (stop) and warnings of a built .app before it goes into a .pkg. Pure. */
+export function appProblems(f: AppFacts, o: { bundleId: string; version: string; build: string; signed: boolean; pathFree: boolean }): { errors: string[]; warnings: string[] } {
+  const errors: string[] = [], warnings: string[] = [];
+  const s = (k: string): string | undefined => (typeof f.info[k] === 'string' ? f.info[k] as string : undefined);
+  if (s('CFBundleIdentifier') !== o.bundleId) errors.push(`CFBundleIdentifier is ${s('CFBundleIdentifier') ?? 'missing'}, not ${o.bundleId}`);
+  if (s('CFBundleShortVersionString') !== o.version) errors.push(`CFBundleShortVersionString is ${s('CFBundleShortVersionString') ?? 'missing'}, not ${o.version}`);
+  if (s('CFBundleVersion') !== o.build) errors.push(`CFBundleVersion is ${s('CFBundleVersion') ?? 'missing'}, not ${o.build} (Tauri: bundle.macOS.bundleVersion)`);
+  if (!s('LSApplicationCategoryType')) errors.push('LSApplicationCategoryType is missing: set bundle.category in tauri.conf.json (e.g. "Utility", "Productivity")');
+  if (!s('LSMinimumSystemVersion')) errors.push('LSMinimumSystemVersion is missing: set bundle.macOS.minimumSystemVersion in tauri.conf.json');
+  if (f.info.ITSAppUsesNonExemptEncryption === undefined) warnings.push('ITSAppUsesNonExemptEncryption is not in Info.plist: the build will ask for export compliance in App Store Connect (storebound apple encryption answers it)');
+  if (o.signed) {
+    if (!f.entitlements) errors.push('the app has no entitlements (codesign -d --entitlements): the Mac App Store requires the app sandbox');
+    else {
+      for (const k of MAS_REQUIRED) if (f.entitlements[k] === undefined) errors.push(`entitlement ${k} is missing`);
+      if (f.entitlements['com.apple.security.app-sandbox'] !== true) errors.push('com.apple.security.app-sandbox is not true');
+      if (f.entitlements['com.apple.security.get-task-allow'] === true) errors.push('com.apple.security.get-task-allow is true: a development entitlement, App Store Connect refuses it');
+    }
+    if (!f.hasProfile) errors.push('Contents/embedded.provisionprofile is missing: a Mac App Store app needs its provisioning profile inside (Tauri bundle.macOS.files)');
+  }
+  if (f.leaks.length) {
+    const lines = f.leaks.slice(0, 8).map(l => `  ${l.file}: ${l.count}x "${l.needle}"`);
+    (o.pathFree ? errors : warnings).push(`local paths in the app:\n${lines.join('\n')}${f.leaks.length > 8 ? `\n  ... ${f.leaks.length - 8} more` : ''}${o.pathFree ? '' : '\n  (build with --path-free to remap them)'}`);
+  }
+  return { errors, warnings };
+}
+
+export interface PkgSignature { signed: boolean; trusted: boolean; certificate: string | null; installerCert: boolean }
+
+/** `pkgutil --check-signature` output -> what matters. Pure. */
+export function parsePkgSignature(out: string): PkgSignature {
+  if (/no signature/i.test(out)) return { signed: false, trusted: false, certificate: null, installerCert: false };
+  const cert = /^\s*1\.\s+(.+)$/m.exec(out)?.[1]?.trim() ?? null;
+  return { signed: /Status:\s+signed/i.test(out), trusted: /trusted (certificate|timestamp)|signed by a certificate trusted/i.test(out), certificate: cert,
+    installerCert: !!cert && /(3rd Party Mac Developer Installer|Mac Installer Distribution)/.test(cert) };
+}
+
+export function pkgProblems(sig: PkgSignature): string[] {
+  if (!sig.signed) return ['the .pkg is not signed (pkgutil --check-signature): productbuild --sign "<Mac Installer Distribution identity>"'];
+  const e: string[] = [];
+  if (!sig.installerCert) e.push(`the .pkg is signed with "${sig.certificate ?? '?'}", not a "3rd Party Mac Developer Installer" / "Mac Installer Distribution" certificate: the Mac App Store refuses it`);
+  return e;
+}
+
+/** bundle id, version and build from a component package's PackageInfo (`pkgutil --expand` writes it). Pure. */
+export function parsePackageInfo(xml: string): { bundleId: string; version: string; build: string } | null {
+  const tag = /<bundle\b[^>]*>/.exec(xml)?.[0];
+  if (!tag) return null;
+  const attr = (n: string): string | undefined => new RegExp(`\\b${n}="([^"]*)"`).exec(tag)?.[1];
+  const bundleId = attr('id'), version = attr('CFBundleShortVersionString'), build = attr('CFBundleVersion');
+  return bundleId && version && build ? { bundleId, version, build } : null;
+}
+
+export interface MasPlanInput {
+  tauri: TauriProject; tauriCmd: string[]; target: string; out: string; configFile: string; entitlementsFile: string; profile: string | null;
+  appIdentity: string | null; installerIdentity: string | null; version: string; build: string; unsigned: boolean; pathFree: boolean; pkg: string;
+}
+
+/** The commands of one build, as shown by --dry and run by build-mas. Pure. */
+export function masSteps(i: MasPlanInput): { tauri: string[]; productbuild: string[]; codesignVerify: string[]; pkgCheck: string[] } {
+  const appPath = join(i.tauri.cwd, 'target', i.target, 'release', 'bundle', 'macos', `${i.tauri.productName}.app`);
+  return {
+    tauri: [...i.tauriCmd, 'build', '--bundles', 'app', '--target', i.target, '--config', i.configFile],
+    codesignVerify: ['codesign', '--verify', '--deep', '--strict', '--verbose=2', appPath],
+    productbuild: ['productbuild', '--component', appPath, '/Applications', ...(i.unsigned || !i.installerIdentity ? [] : ['--sign', i.installerIdentity]), i.pkg],
+    pkgCheck: ['pkgutil', '--check-signature', i.pkg],
+  };
+}
+
+/** The tauri.conf.json overlay for the Mac App Store: identity, entitlements, profile, version, build. */
+export function tauriOverlay(i: Pick<MasPlanInput, 'appIdentity' | 'entitlementsFile' | 'profile' | 'version' | 'build' | 'unsigned'> & { minOs?: string; category?: string }): Record<string, unknown> {
+  return {
+    version: i.version,
+    bundle: {
+      ...(i.category ? { category: i.category } : {}),
+      macOS: {
+        bundleVersion: i.build,
+        ...(i.minOs ? { minimumSystemVersion: i.minOs } : {}),
+        ...(i.unsigned ? {} : { signingIdentity: i.appIdentity, entitlements: i.entitlementsFile, hardenedRuntime: true, ...(i.profile ? { files: { 'embedded.provisionprofile': i.profile } } : {}) }),
+      },
+    },
+  };
+}
+
+export interface AppInfo { appDir: string; info: Record<string, PlistValue> }
+
+/** The .app Tauri built: the first *.app in <cwd>/target/<target>/release/bundle/macos (or the workspace's target). */
+export function findBuiltApp(cwd: string, root: string, target: string, productName: string): string | null {
+  for (const base of [join(cwd, 'target'), join(root, 'target'), join(dirname(cwd), 'target')]) {
+    const d = join(base, target, 'release', 'bundle', 'macos');
+    const p = join(d, `${productName}.app`);
+    if (existsSync(p)) return p;
+    try { const any = readdirSync(d).find(f => f.endsWith('.app')); if (any) return join(d, any); } catch { /* none */ }
+  }
+  return null;
+}
+
+export function readAppInfo(appDir: string): Record<string, PlistValue> {
+  const p = join(appDir, 'Contents', 'Info.plist');
+  if (!existsSync(p)) throw new Error(`${basename(appDir)}: no Contents/Info.plist`);
+  return parsePlist(readFileSync(p)) as Record<string, PlistValue>;
+}
+
+/** bundle id, version and build of a .pkg: pkgutil --expand on a Mac (PackageInfo), else the <pkg>.json next to it that
+ *  `apple build --platform macos` wrote. Refuses an unsigned or wrongly signed .pkg when pkgutil is there. */
+export function pkgInfo(pkg: string, expectBundleId?: string): { bundleId: string; version: string; build: string } {
+  if (rt.which('pkgutil')) {
+    const sig = parsePkgSignature(rt.spawnSync(['pkgutil', '--check-signature', pkg], { stdout: 'pipe', stderr: 'pipe' }).stdout.toString());
+    const bad = pkgProblems(sig);
+    if (bad.length) throw new Error(`${basename(pkg)}: not uploaded:\n${bad.map(x => `  ${x}`).join('\n')}`);
+    const tmp = join(process.env.TMPDIR ?? '/tmp', `sb-pkg-${process.pid}-${Date.now()}`);
+    try {
+      if (rt.spawnSync(['pkgutil', '--expand', pkg, tmp], { stdout: 'pipe', stderr: 'pipe' }).exitCode === 0) {
+        for (const d of readdirSync(tmp)) {
+          const p = join(tmp, d, 'PackageInfo');
+          const info = existsSync(p) ? parsePackageInfo(readFileSync(p, 'utf8')) : null;
+          if (info && (!expectBundleId || info.bundleId === expectBundleId)) return info;
+        }
+      }
+    } finally { try { rmSync(tmp, { recursive: true, force: true }); } catch { /* temp */ } }
+  }
+  const side = `${pkg}.json`;
+  if (existsSync(side)) {
+    const j = JSON.parse(readFileSync(side, 'utf8')) as { bundleId?: string; version?: string; build?: string; unsigned?: boolean };
+    if (j.unsigned) throw new Error(`${basename(pkg)} was built with --unsigned: the Mac App Store refuses it`);
+    if (j.bundleId && j.version && j.build) return { bundleId: j.bundleId, version: j.version, build: j.build };
+  }
+  throw new Error(`${basename(pkg)}: cannot read bundle id / version / build (needs pkgutil on a Mac, or the ${basename(side)} file apple build wrote)`);
+}
diff --git a/cli/lib/signing.ts b/cli/lib/signing.ts
index 8abefab..70019c9 100644
--- a/cli/lib/signing.ts
+++ b/cli/lib/signing.ts
@@ -20,7 +20,7 @@ export type CapabilityType = typeof CAPABILITY_TYPES[number];
 
 /** Certificate types storebound creates: Apple Distribution (DISTRIBUTION, all platforms), the older iOS Distribution,
  *  and Developer ID Application (Mac apps outside the App Store; Account Holder only). */
-export const CERT_TYPES = ['DISTRIBUTION', 'IOS_DISTRIBUTION', 'DEVELOPER_ID_APPLICATION', 'DEVELOPER_ID_APPLICATION_G2'] as const;
+export const CERT_TYPES = ['DISTRIBUTION', 'IOS_DISTRIBUTION', 'DEVELOPER_ID_APPLICATION', 'DEVELOPER_ID_APPLICATION_G2', 'MAC_APP_DISTRIBUTION', 'MAC_INSTALLER_DISTRIBUTION'] as const;
 export type CertType = typeof CERT_TYPES[number];
 
 /** Profile types for store builds (Profile.profileType). */
@@ -105,7 +105,7 @@ export function pickCertificate(certs: ApiCert[], type: CertType, hasKey: (c: Ap
 }
 
 /** Apple caps distribution certificates per team (Apple Distribution: 3 per team). */
-export const CERT_LIMIT: Partial<Record<CertType, number>> = { DISTRIBUTION: 3, IOS_DISTRIBUTION: 3, DEVELOPER_ID_APPLICATION: 5, DEVELOPER_ID_APPLICATION_G2: 5 };
+export const CERT_LIMIT: Partial<Record<CertType, number>> = { DISTRIBUTION: 3, IOS_DISTRIBUTION: 3, DEVELOPER_ID_APPLICATION: 5, DEVELOPER_ID_APPLICATION_G2: 5, MAC_APP_DISTRIBUTION: 3, MAC_INSTALLER_DISTRIBUTION: 3 };
 
 export function certificateReq(type: CertType, csr: string): Req {
   return { method: 'POST', path: '/v1/certificates', note: `create ${type} certificate (key in .storebound/signing, never printed)`,
diff --git a/cli/lib/xcode.ts b/cli/lib/xcode.ts
index 6d01360..fe0dd52 100644
--- a/cli/lib/xcode.ts
+++ b/cli/lib/xcode.ts
@@ -187,13 +187,13 @@ export function ipaVersionProblem(ipaVersion: string, wanted: string | null | un
 export const UPLOAD_DONE = new Set(['COMPLETE', 'FAILED']);
 
 /** Requests of an App Store Connect API build upload (Build Uploads, API 4.1): the upload, then the file reservation. */
-export function buildUploadReqs(appId: string, info: IpaInfo, fileName: string, fileSize: number) {
+export function buildUploadReqs(appId: string, info: IpaInfo, fileName: string, fileSize: number, platform: 'IOS' | 'MAC_OS' = 'IOS') {
   return {
     upload: { method: 'POST' as const, path: '/v1/buildUploads', note: `build ${info.build} (${info.version})`,
-      body: { data: { type: 'buildUploads', attributes: { cfBundleShortVersionString: info.version, cfBundleVersion: info.build, platform: 'IOS' },
+      body: { data: { type: 'buildUploads', attributes: { cfBundleShortVersionString: info.version, cfBundleVersion: info.build, platform },
         relationships: { app: { data: { type: 'apps', id: appId } } } } } },
     file: (uploadId: string) => ({ method: 'POST' as const, path: '/v1/buildUploadFiles', note: `${fileName} (${(fileSize / 1048576).toFixed(1)} MB)`,
-      body: { data: { type: 'buildUploadFiles', attributes: { assetType: 'ASSET', fileName, fileSize, uti: 'com.apple.ipa' },
+      body: { data: { type: 'buildUploadFiles', attributes: { assetType: 'ASSET', fileName, fileSize, uti: platform === 'MAC_OS' ? 'com.apple.pkg' : 'com.apple.ipa' },
         relationships: { buildUpload: { data: { type: 'buildUploads', id: uploadId } } } } } }),
     commit: (fileId: string, md5: string) => ({ method: 'PATCH' as const, path: `/v1/buildUploadFiles/${fileId}`, note: 'commit',
       body: { data: { type: 'buildUploadFiles', id: fileId, attributes: { uploaded: true, sourceFileChecksums: { file: { hash: md5, algorithm: 'MD5' } } } } } }),
@@ -202,7 +202,7 @@ export function buildUploadReqs(appId: string, info: IpaInfo, fileName: string,
 
 /** altool upload (Xcode's command line uploader) with the API key. */
 export const altoolArgs = (ipa: string, auth: AscAuth): string[] =>
-  ['xcrun', 'altool', '--upload-package', ipa, '--api-key', auth.keyId, '--api-issuer', auth.issuerId, '--p8-file-path', auth.keyPath, '--output-format', 'json'];
+  ['xcrun', 'altool', '--upload-package', ipa, ...(ipa.endsWith('.pkg') ? ['--type', 'macos'] : []), '--api-key', auth.keyId, '--api-issuer', auth.issuerId, '--p8-file-path', auth.keyPath, '--output-format', 'json'];
 
 /** Errors and warnings of a build upload's state (StateDetail: code, message). */
 export function uploadProblems(state: { errors?: { code?: string; message?: string; description?: string }[]; warnings?: { code?: string; message?: string; description?: string }[] } | undefined): { errors: string[]; warnings: string[] } {
diff --git a/tests/mas-build.test.ts b/tests/mas-build.test.ts
new file mode 100644
index 0000000..b689b02
--- /dev/null
+++ b/tests/mas-build.test.ts
@@ -0,0 +1,194 @@
+// Mac App Store build of a Tauri app (cli/lib/mas.ts, cli/apple/build-mas.ts): plan, entitlements, identities, path-free
+// flags, leak scan, app / pkg checks, and the pkg variant of the build upload requests.
+import { afterAll, describe, expect, test } from 'bun:test';
+import { mkdirSync, mkdtempSync, rmSync, writeFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import { tauriCommand } from '../cli/apple/build-mas';
+import { appProblems, categoryId, entitlementKeysOf, entitlementsXml, findTauri, masEntitlements, masSteps, parsePackageInfo, parsePkgSignature, pathFreeEnv, pickMasIdentities, pickMasProfiles, pkgProblems, scanPathLeaks, tauriOverlay } from '../cli/lib/mas';
+import { altoolArgs, buildUploadReqs } from '../cli/lib/xcode';
+
+const tmp = mkdtempSync(join(tmpdir(), 'sb-mas-'));
+afterAll(() => rmSync(tmp, { recursive: true, force: true }));
+
+const conf = { productName: 'Demo App', identifier: 'com.example.demo', version: '1.2.3', bundle: { category: 'Utility', macOS: { minimumSystemVersion: '12.0' } } };
+function fixture(): string {
+  const root = mkdtempSync(join(tmp, 'p-'));
+  mkdirSync(join(root, 'apps/desktop/src-tauri'), { recursive: true });
+  writeFileSync(join(root, 'apps/desktop/src-tauri/tauri.conf.json'), JSON.stringify(conf));
+  return root;
+}
+
+describe('tauri project', () => {
+  test('found by scan and by hint; fields read', () => {
+    const root = fixture();
+    const t = findTauri(root);
+    expect(t.productName).toBe('Demo App');
+    expect(t.identifier).toBe('com.example.demo');
+    expect(t.cwd).toBe(join(root, 'apps/desktop'));
+    expect(t.minOs).toBe('12.0');
+    expect(findTauri(root, 'apps/desktop/src-tauri').dir).toBe(t.dir);
+    expect(() => findTauri(root, 'nope')).toThrow('no tauri.conf.json');
+  });
+  test('none or several found', () => {
+    const empty = mkdtempSync(join(tmp, 'e-'));
+    expect(() => findTauri(empty)).toThrow('no tauri.conf.json found');
+    const two = fixture();
+    mkdirSync(join(two, 'other/src-tauri'), { recursive: true });
+    writeFileSync(join(two, 'other/src-tauri/tauri.conf.json'), JSON.stringify(conf));
+    expect(() => findTauri(two)).toThrow('several Tauri projects');
+  });
+  test('tauri command: project binary, cargo-tauri, else bunx', () => {
+    expect(tauriCommand('/a/b', p => /a.node_modules..bin.tauri$/.test(p), () => null)).toHaveLength(1);
+    expect(tauriCommand('/a/b', () => false, c => (c === 'cargo-tauri' ? '/x' : null))).toEqual(['cargo', 'tauri']);
+    expect(tauriCommand('/a/b', () => false, () => null)[0]).toBe('bunx');
+  });
+  test('category ids', () => {
+    expect(categoryId('Utility')).toBe('public.app-category.utilities');
+    expect(categoryId('public.app-category.games')).toBe('public.app-category.games');
+    expect(categoryId('Nope')).toBeNull();
+  });
+});
+
+describe('entitlements', () => {
+  test('sandbox and identifiers forced, project keys kept', () => {
+    const e = masEntitlements({ teamId: 'ABCDE12345', bundleId: 'com.example.demo', existing: { 'com.apple.security.app-sandbox': false, 'com.apple.security.files.user-selected.read-write': true } });
+    expect(e['com.apple.security.app-sandbox']).toBe(true);
+    expect(e['com.apple.application-identifier']).toBe('ABCDE12345.com.example.demo');
+    expect(e['com.apple.developer.team-identifier']).toBe('ABCDE12345');
+    expect(e['com.apple.security.files.user-selected.read-write']).toBe(true);
+    expect(e['com.apple.security.network.client']).toBe(true);
+  });
+  test('xml round trip', () => {
+    const e = masEntitlements({ teamId: 'ABCDE12345', bundleId: 'com.example.demo' });
+    expect(entitlementKeysOf(entitlementsXml(e))?.['com.apple.security.app-sandbox']).toBe(true);
+    expect(entitlementKeysOf('garbage')).toBeNull();
+  });
+});
+
+describe('identities and profiles', () => {
+  const ids = [
+    { sha1: 'A', name: 'Apple Development: X (AAAAAAAAAA)' },
+    { sha1: 'B', name: 'Apple Distribution: Co (ABCDE12345)' },
+    { sha1: 'C', name: '3rd Party Mac Developer Installer: Co (ABCDE12345)' },
+    { sha1: 'D', name: 'Apple Distribution: Other (ZZZZZZZZZZ)' },
+  ];
+  test('app and installer identity of the team', () => {
+    const p = pickMasIdentities(ids, 'ABCDE12345');
+    expect(p.app?.sha1).toBe('B');
+    expect(p.installer?.sha1).toBe('C');
+    expect(pickMasIdentities(ids, 'QQQQQQQQQQ')).toEqual({ app: null, installer: null });
+    expect(pickMasIdentities([{ sha1: 'E', name: '3rd Party Mac Developer Application: Co (ABCDE12345)' }, ids[1]!], 'ABCDE12345').app?.sha1).toBe('E');
+    expect(pickMasIdentities([{ sha1: 'F', name: 'Mac Installer Distribution: Co (ABCDE12345)' }, ids[2]!], 'ABCDE12345').installer?.sha1).toBe('F');
+  });
+  const prof = (o: Record<string, unknown>) => ({ path: '/p', profile: { UUID: 'u1', Name: 'n', TeamIdentifier: ['ABCDE12345'], Platform: ['OSX'], ExpirationDate: '2099-01-01T00:00:00Z',
+    Entitlements: { 'com.apple.application-identifier': 'ABCDE12345.com.example.demo' }, ...o } as never });
+  test('Mac App Store profile: macOS, no devices, matching id, not expired', () => {
+    expect(pickMasProfiles([prof({})], 'com.example.demo', 'ABCDE12345')).toHaveLength(1);
+    expect(pickMasProfiles([prof({ Platform: ['iOS'] })], 'com.example.demo', null)).toHaveLength(0);
+    expect(pickMasProfiles([prof({ ProvisionedDevices: ['x'] })], 'com.example.demo', null)).toHaveLength(0);
+    expect(pickMasProfiles([prof({})], 'com.example.other', null)).toHaveLength(0);
+    expect(pickMasProfiles([prof({ ExpirationDate: '2000-01-01T00:00:00Z' })], 'com.example.demo', null)).toHaveLength(0);
+  });
+});
+
+describe('path-free', () => {
+  test('remaps checkout, cargo, rustup, home; no debug info', () => {
+    const e = pathFreeEnv({ home: '/Users/dev', user: 'dev', root: '/Users/dev/work/app', rustflags: '-C target-cpu=native' });
+    expect(e.RUSTFLAGS).toContain('-C target-cpu=native');
+    expect(e.RUSTFLAGS).toContain('--remap-path-prefix=/Users/dev/work/app=/src');
+    expect(e.RUSTFLAGS).toContain('--remap-path-prefix=/Users/dev/.cargo=/cargo');
+    expect(e.RUSTFLAGS).toContain('--remap-path-prefix=/Users/dev/.rustup=/rustup');
+    expect(e.RUSTFLAGS).toContain('--remap-path-prefix=/Users/dev=/home/build');
+    expect(e.CARGO_PROFILE_RELEASE_DEBUG).toBe('0');
+    
+  });
+  test('leak scan finds the home folder in a binary and a plist', () => {
+    const app = mkdtempSync(join(tmp, 'app-'));
+    mkdirSync(join(app, 'Contents/MacOS'), { recursive: true });
+    writeFileSync(join(app, 'Contents/MacOS/bin'), Buffer.concat([Buffer.from([0, 1, 2]), Buffer.from('panic at /Users/dev/.cargo/registry/x.rs'), Buffer.from([0])]));
+    writeFileSync(join(app, 'Contents/Info.plist'), 'clean');
+    const leaks = scanPathLeaks(app, ['/Users/dev', '/Users/dev/']);
+    expect(leaks.map(l => `${l.file}:${l.needle}`)).toEqual(['Contents/MacOS/bin:/Users/dev', 'Contents/MacOS/bin:/Users/dev/']);
+    expect(scanPathLeaks(app, ['/Users/nobody'])).toEqual([]);
+  });
+});
+
+describe('app and pkg checks', () => {
+  const good = { info: { CFBundleIdentifier: 'com.example.demo', CFBundleShortVersionString: '1.2.3', CFBundleVersion: '7', LSApplicationCategoryType: 'public.app-category.utilities', LSMinimumSystemVersion: '12.0', ITSAppUsesNonExemptEncryption: false },
+    entitlements: masEntitlements({ teamId: 'ABCDE12345', bundleId: 'com.example.demo' }), hasProfile: true, leaks: [] };
+  const o = { bundleId: 'com.example.demo', version: '1.2.3', build: '7', signed: true, pathFree: true };
+  test('a good app passes', () => { expect(appProblems(good, o)).toEqual({ errors: [], warnings: [] }); });
+  test('missing sandbox, category, min OS, profile, wrong build', () => {
+    const bad = { ...good, info: { ...good.info, CFBundleVersion: '6', LSApplicationCategoryType: undefined, LSMinimumSystemVersion: undefined } as never, entitlements: { 'com.apple.security.app-sandbox': false }, hasProfile: false };
+    const e = appProblems(bad, o).errors.join('\n');
+    for (const s of ['CFBundleVersion is 6', 'LSApplicationCategoryType', 'LSMinimumSystemVersion', 'app-sandbox is not true', 'application-identifier', 'embedded.provisionprofile']) expect(e).toContain(s);
+    expect(appProblems({ ...good, entitlements: null }, o).errors[0]).toContain('no entitlements');
+  });
+  test('get-task-allow refused; unsigned skips entitlement checks', () => {
+    expect(appProblems({ ...good, entitlements: { ...good.entitlements!, 'com.apple.security.get-task-allow': true } }, o).errors.join()).toContain('get-task-allow');
+    expect(appProblems({ ...good, entitlements: null, hasProfile: false }, { ...o, signed: false }).errors).toEqual([]);
+  });
+  test('path leaks are errors with --path-free, warnings without', () => {
+    const leaks = [{ file: 'Contents/MacOS/bin', needle: '/Users/dev', count: 3 }];
+    expect(appProblems({ ...good, leaks }, o).errors[0]).toContain('local paths');
+    const w = appProblems({ ...good, leaks }, { ...o, pathFree: false });
+    expect(w.errors).toEqual([]);
+    expect(w.warnings.join()).toContain('--path-free');
+  });
+  test('pkgutil --check-signature', () => {
+    const ok = parsePkgSignature('Package "a.pkg":\n   Status: signed by a certificate trusted by macOS\n   Certificate Chain:\n    1. 3rd Party Mac Developer Installer: Co (ABCDE12345)\n       Expires: 2027');
+    expect(ok).toMatchObject({ signed: true, installerCert: true, certificate: '3rd Party Mac Developer Installer: Co (ABCDE12345)' });
+    expect(pkgProblems(ok)).toEqual([]);
+    expect(pkgProblems(parsePkgSignature('Package "a.pkg":\n   Status: no signature'))[0]).toContain('not signed');
+    const dev = parsePkgSignature('   Status: signed by a certificate trusted by macOS\n    1. Developer ID Installer: Co (ABCDE12345)');
+    expect(pkgProblems(dev)[0]).toContain('not a "3rd Party Mac Developer Installer"');
+  });
+  test('PackageInfo', () => {
+    const x = '<pkg-info identifier="com.example.demo" version="1.2.3"><bundle path="./Demo.app" id="com.example.demo" CFBundleShortVersionString="1.2.3" CFBundleVersion="7"/></pkg-info>';
+    expect(parsePackageInfo(x)).toEqual({ bundleId: 'com.example.demo', version: '1.2.3', build: '7' });
+    expect(parsePackageInfo('<pkg-info/>')).toBeNull();
+  });
+});
+
+describe('plan', () => {
+  const t = findTauri(fixture());
+  const base = { tauri: t, tauriCmd: ['cargo', 'tauri'], target: 'universal-apple-darwin', out: '/o', configFile: '/o/c.json', entitlementsFile: '/o/e', profile: '/o/p', appIdentity: 'Apple Distribution: Co (ABCDE12345)',
+    installerIdentity: '3rd Party Mac Developer Installer: Co (ABCDE12345)', version: '1.2.3', build: '7', unsigned: false, pathFree: true, pkg: '/o/Demo App.pkg' };
+  test('signed steps: tauri app bundle, productbuild with the installer identity', () => {
+    const s = masSteps(base);
+    expect(s.tauri).toEqual(['cargo', 'tauri', 'build', '--bundles', 'app', '--target', 'universal-apple-darwin', '--config', '/o/c.json']);
+    expect(s.productbuild.slice(0, 2)).toEqual(['productbuild', '--component']);
+    expect(s.productbuild).toContain('--sign');
+    expect(s.productbuild.at(-1)).toBe('/o/Demo App.pkg');
+    expect(s.pkgCheck).toEqual(['pkgutil', '--check-signature', '/o/Demo App.pkg']);
+  });
+  test('unsigned: no --sign', () => { expect(masSteps({ ...base, unsigned: true }).productbuild).not.toContain('--sign'); });
+  test('tauri overlay: identity, entitlements, embedded profile, bundleVersion', () => {
+    const o = tauriOverlay({ ...base, minOs: '12.0' }) as { version: string; bundle: { macOS: Record<string, unknown> } };
+    expect(o.version).toBe('1.2.3');
+    expect(o.bundle.macOS.bundleVersion).toBe('7');
+    expect(o.bundle.macOS.signingIdentity).toBe(base.appIdentity);
+    expect(o.bundle.macOS.hardenedRuntime).toBe(true);
+    expect(o.bundle.macOS.files).toEqual({ 'embedded.provisionprofile': '/o/p' });
+    const u = tauriOverlay({ ...base, unsigned: true }) as { bundle: { macOS: Record<string, unknown> } };
+    expect(u.bundle.macOS.signingIdentity).toBeUndefined();
+  });
+});
+
+describe('build upload of a pkg', () => {
+  const info = { bundleId: 'com.example.demo', version: '1.2.3', build: '7' };
+  test('platform MAC_OS and the pkg uti; iOS unchanged', () => {
+    const m = buildUploadReqs('app1', info, 'Demo.pkg', 10, 'MAC_OS');
+    expect((m.upload.body.data.attributes as Record<string, unknown>).platform).toBe('MAC_OS');
+    expect((m.file('u1').body.data.attributes as Record<string, unknown>).uti).toBe('com.apple.pkg');
+    const i = buildUploadReqs('app1', info, 'Demo.ipa', 10);
+    expect((i.upload.body.data.attributes as Record<string, unknown>).platform).toBe('IOS');
+    expect((i.file('u1').body.data.attributes as Record<string, unknown>).uti).toBe('com.apple.ipa');
+  });
+  test('altool gets --type macos for a pkg', () => {
+    const k = { keyPath: 'k', keyId: 'i', issuerId: 's' };
+    expect(altoolArgs('/o/Demo.pkg', k)).toContain('macos');
+    expect(altoolArgs('/o/Demo.ipa', k)).not.toContain('--type');
+  });
+});

From 5fc15dd77359fafd216d5f27e36f4eecc37c7627 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Sat, 24 Oct 2026 12:11:14 +0800
Subject: [PATCH 010/126] apple build/upload: flags and help for the macOS
 Tauri path

---
 cli/apple/build.ts  |  2 ++
 cli/apple/upload.ts |  1 +
 cli/commands.ts     |  4 ++--
 cli/data/flags.json | 16 +++++++++++++++-
 4 files changed, 20 insertions(+), 3 deletions(-)

diff --git a/cli/apple/build.ts b/cli/apple/build.ts
index b5df488..74f0056 100644
--- a/cli/apple/build.ts
+++ b/cli/apple/build.ts
@@ -1,4 +1,6 @@
 // Archive and export an App Store IPA with xcodebuild, no Xcode UI.
+//   storebound apple build --platform macos --tauri <src-tauri> [--path-free] [--unsigned] [--target T] [--profile F] [--version x.y.z] [--build-number N] [--out D]
+//     (Mac App Store build of a Tauri app: cli/apple/build-mas.ts)
 //   storebound apple build [--version 1.2.0] [--build-number N] [--scheme S] [--workspace W | --project P]
 //                          [--configuration Release] [--out build/ios] [--no-prebuild] [--allow-stale-web] [--dry] [--json]
 // First the prebuild (build.prebuild / apple.prebuild: e.g. the web build + npx cap sync; once per flow run), then a
diff --git a/cli/apple/upload.ts b/cli/apple/upload.ts
index 03b19c6..114d989 100644
--- a/cli/apple/upload.ts
+++ b/cli/apple/upload.ts
@@ -1,5 +1,6 @@
 // Upload an IPA to App Store Connect and wait until Apple has processed the build.
 //   storebound apple upload [<app.ipa>] [--build N] [--allow-existing] [--via api|altool] [--no-wait] [--timeout 60m] [--pre-check "<cmd with {file}>"] [--evidence <path.json>] [--dry] [--yes] [--json]
+//   storebound apple upload <App.pkg> --platform macos [...]   (Mac App Store .pkg from apple build --platform macos --tauri; platform MAC_OS, uti com.apple.pkg; altool gets --type macos; no SDK / privacy-manifest check)
 // Default IPA: the newest in <apple.build.out or build/ios>/export (and its <version>-<build>/ folders), or with
 // --build N the one with that build number. The bundle id, version and build number come from the IPA's Info.plist.
 // An IPA whose build number is already on App Store Connect fails with exit 1 (a stale IPA left by a failed
diff --git a/cli/commands.ts b/cli/commands.ts
index e4df348..01665de 100644
--- a/cli/commands.ts
+++ b/cli/commands.ts
@@ -91,8 +91,8 @@ export const COMMANDS: Record<string, [() => Promise<Mod>, string]> = {
   'apple previews': [() => import('./apple/previews'), 'app preview videos per locale (MD5-idempotent, poster frame time code); --dry'],
   'apple release': [() => import('./apple/release'), 'phased release on|pause|resume|complete, --manual-release (asks first); --platform ios|macos|tvos|visionos (default: the platform that has the version this needs; asks when several do)'],
   'apple signing': [() => import('./apple/signing'), 'status | ensure: bundle id capabilities, distribution certificate (key kept in .storebound/signing), App Store profiles installed for Xcode; --dry, asks first'],
-  'apple build': [() => import('./apple/build'), 'xcodebuild archive + exportArchive (ExportOptions.plist generated, next build number, API key signing); Capacitor, React Native, Flutter, Unity; --dry'],
-  'apple upload': [() => import('./apple/upload'), 'upload an IPA (App Store Connect API build upload, or --via altool), build number checked, waits for processing; --dry, asks first'],
+  'apple build': [() => import('./apple/build'), 'xcodebuild archive + exportArchive (ExportOptions.plist generated, next build number, API key signing); Capacitor, React Native, Flutter, Unity; --platform macos --tauri <src-tauri> [--path-free] builds a Tauri app for the Mac App Store (signed .app, sandbox entitlements, profile, productbuild .pkg); --dry'],
+  'apple upload': [() => import('./apple/upload'), 'upload an IPA, or with --platform macos a signed .pkg (App Store Connect API build upload, or --via altool), build number checked, waits for processing; --dry, asks first'],
   'apple adhoc': [() => import('./apple/adhoc'), 'ad-hoc / release-testing: devices (list) | register (dry run, asks first) | options (ExportOptions.plist) | export --archive <x.xcarchive>'],
   'apple next-build': [() => import('./apple/next-build'), 'next safe build number (prints the number)'],
   'apple game-center': [() => import('./apple/game-center'), '[status] Game Center from games: the app\'s Game Center detail, the version switch, leaderboards + achievements with localizations (upsert by vendor id); App ID capability via signing ensure; --dry, asks first'],
diff --git a/cli/data/flags.json b/cli/data/flags.json
index 9707cf8..db3f259 100644
--- a/cli/data/flags.json
+++ b/cli/data/flags.json
@@ -77,10 +77,17 @@
    "no-install",
    "no-prebuild",
    "out",
+   "path-free",
+   "platform",
+   "profile",
    "progress",
    "project",
    "result-file",
+   "scan-paths",
    "scheme",
+   "target",
+   "tauri",
+   "unsigned",
    "version",
    "version-from",
    "workspace"
@@ -338,6 +345,7 @@
    "locale",
    "no-wait",
    "older-than",
+   "platform",
    "pre-check",
    "progress",
    "remove",
@@ -1259,6 +1267,7 @@
    "originality",
    "out",
    "param",
+   "path-free",
    "paths",
    "phased",
    "platform",
@@ -1289,6 +1298,7 @@
    "resume",
    "review-sent",
    "root",
+   "scan-paths",
    "scenes",
    "scheme",
    "sdk-dirs",
@@ -1313,6 +1323,7 @@
    "storefronts",
    "submit-review",
    "target",
+   "tauri",
    "term",
    "territories",
    "text",
@@ -1329,6 +1340,7 @@
    "unanswered",
    "undo",
    "unity",
+   "unsigned",
    "update-bigmac",
    "update-desktop-database",
    "upload",
@@ -1398,6 +1410,7 @@
    "storebound apple appinfo [--dry] [--json] [--allow-price-changes] [--allow-availability-changes]"
   ],
   "apple build": [
+   "storebound apple build --platform macos --tauri <src-tauri> [--path-free] [--unsigned] [--target T] [--profile F] [--version x.y.z] [--build-number N] [--out D]",
    "storebound apple build [--version 1.2.0] [--build-number N] [--scheme S] [--workspace W | --project P]"
   ],
   "apple bundle": [
@@ -1504,7 +1517,8 @@
    "storebound apple testflight expire (--keep N | --older-than D) [--version x.y.z] [--dry] [--yes] [--json]"
   ],
   "apple upload": [
-   "storebound apple upload [<app.ipa>] [--build N] [--allow-existing] [--via api|altool] [--no-wait] [--timeout 60m] [--pre-check \"<cmd with {file}>\"] [--evidence <path.json>] [--dry] [--yes] [--json]"
+   "storebound apple upload [<app.ipa>] [--build N] [--allow-existing] [--via api|altool] [--no-wait] [--timeout 60m] [--pre-check \"<cmd with {file}>\"] [--evidence <path.json>] [--dry] [--yes] [--json]",
+   "storebound apple upload <App.pkg> --platform macos [...]   (Mac App Store .pkg from apple build --platform macos --tauri; platform MAC_OS, uti com.apple.pkg; altool gets --type macos; no SDK / privacy-manifest check)"
   ],
   "apple win-back": [
    "storebound apple win-back [--only sub1,sub2] [--dry] [--yes] [--json]"

From 0263f624439e4317d1f098d3aba510d3f7859333 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Sat, 24 Oct 2026 12:11:56 +0800
Subject: [PATCH 011/126] mas build: cargo target folder is src-tauri/target

---
 cli/apple/build-mas.ts | 4 ++--
 cli/lib/mas.ts         | 2 +-
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/cli/apple/build-mas.ts b/cli/apple/build-mas.ts
index d1bb17c..82beef3 100644
--- a/cli/apple/build-mas.ts
+++ b/cli/apple/build-mas.ts
@@ -164,8 +164,8 @@ export async function run(ctx: Ctx): Promise<void> {
   writeFileSync(configFile, `${JSON.stringify(overlay, null, 2)}\n`);
   shipPhase('build', `tauri build ${target}, build ${buildNo}`);
   await runLogged(steps.tauri, tauri.cwd, join(out, 'tauri-build.log'), showCmd(steps.tauri, null), env);
-  const appDir = findBuiltApp(tauri.cwd, root, target, tauri.productName);
-  if (!appDir) throw new Error(`tauri build exited 0 but no ${tauri.productName}.app is under ${join(tauri.cwd, 'target', target, 'release/bundle/macos')} (see ${join(out, 'tauri-build.log')})`);
+  const appDir = findBuiltApp(tauri.dir, root, target, tauri.productName);
+  if (!appDir) throw new Error(`tauri build exited 0 but no ${tauri.productName}.app is under ${join(tauri.dir, 'target', target, 'release/bundle/macos')} (see ${join(out, 'tauri-build.log')})`);
   shipPhase('verify', `checking ${basenameOf(appDir)}`);
   if (!unsigned) {
     const v = run1(steps.codesignVerify.map(x => (x.endsWith('.app') ? appDir : x)));
diff --git a/cli/lib/mas.ts b/cli/lib/mas.ts
index cc5d15b..c870b5d 100644
--- a/cli/lib/mas.ts
+++ b/cli/lib/mas.ts
@@ -228,7 +228,7 @@ export interface MasPlanInput {
 
 /** The commands of one build, as shown by --dry and run by build-mas. Pure. */
 export function masSteps(i: MasPlanInput): { tauri: string[]; productbuild: string[]; codesignVerify: string[]; pkgCheck: string[] } {
-  const appPath = join(i.tauri.cwd, 'target', i.target, 'release', 'bundle', 'macos', `${i.tauri.productName}.app`);
+  const appPath = join(i.tauri.dir, 'target', i.target, 'release', 'bundle', 'macos', `${i.tauri.productName}.app`);
   return {
     tauri: [...i.tauriCmd, 'build', '--bundles', 'app', '--target', i.target, '--config', i.configFile],
     codesignVerify: ['codesign', '--verify', '--deep', '--strict', '--verbose=2', appPath],

From f588f4e1aa549cf0c505fe07b365919b4808d049 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Sat, 24 Oct 2026 12:12:37 +0800
Subject: [PATCH 012/126] path-free: no cargo trim-paths (nightly only)

---
 cli/lib/mas.ts | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/cli/lib/mas.ts b/cli/lib/mas.ts
index c870b5d..a5365bb 100644
--- a/cli/lib/mas.ts
+++ b/cli/lib/mas.ts
@@ -132,8 +132,8 @@ export function pathFreeEnv(i: PathFreeInput): Record<string, string> {
   return {
     RUSTFLAGS: [i.rustflags ?? '', ...flags].filter(Boolean).join(' '),
     CARGO_PROFILE_RELEASE_DEBUG: '0',
+    // no CARGO_PROFILE_RELEASE_TRIM_PATHS: still nightly-only in cargo 1.98 ("feature trim-paths is required"); the remaps do the job
     CARGO_PROFILE_RELEASE_STRIP: 'symbols',
-    CARGO_PROFILE_RELEASE_TRIM_PATHS: 'all',
   };
 }
 

From 33a7f73ab97e843841b3a2b27b0364fecf117938 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Sat, 24 Oct 2026 12:16:19 +0800
Subject: [PATCH 013/126] docs: build-and-sign Mac App Store Tauri section,
 pitfall 114, changelog

---
 CHANGELOG.md                   |  2 ++
 skills/build-and-sign/SKILL.md | 26 ++++++++++++++++++++++++++
 skills/store-pitfalls/SKILL.md | 26 ++++++++++++++++++++++++++
 3 files changed, 54 insertions(+)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 6f174cf..703ba22 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -8,6 +8,8 @@
 - New `storebound shots copy translate --to de,es` fills store/shots/copy.json per language (agent translation or `--translate "<cmd>"`), machine-translated until `shots copy reviewed`, caption limits respected; `shots copy check`; `check` / `shots render` name this command for a missing language.
 - `apple game-center --locale-map en=en-GB` (config `games.localeMap`) maps a config language to the live Game Center locale; the dry run suggests it when the live Game Center has exactly one variant of the language.
 - `play games`: a 403 SERVICE_DISABLED / accessNotConfigured names the Google Play Game Services Publishing API, the enable URL for the project and `console plan play-games-services`.
+
+- `apple build --platform macos --tauri <src-tauri> [--path-free] [--unsigned]`: Mac App Store build of a Tauri app. Generated sandbox entitlements, Mac App Store profile (installed, `--profile` or from the API), Apple Distribution / Mac Installer Distribution identities, `tauri build --bundles app`, checks of the .app, `productbuild` to a signed .pkg, `pkgutil --check-signature`; `--path-free` remaps local paths in rustc and fails on any leak of the home folder or user name. `apple upload <pkg> --platform macos` uploads it (platform MAC_OS). New certificate types MAC_APP_DISTRIBUTION and MAC_INSTALLER_DISTRIBUTION. Pitfall 119.
 - Desktop dev update channel: Settings > Updates offers Stable (the npm releases) and Dev (every push to main). Each push to main builds Windows and Linux bundles stamped `<next patch>-dev.<UTC commit time>` (above the current stable, below the next one); the VDS signs them and serves `storebound.dev/desktop/dev/latest.json` (newest 5 kept). The app checks its channel at start, every 15 minutes, after sleep and right after a channel switch, installs a strictly newer build quietly (deferred while the window is in use), never downgrades (dev back to stable waits for a newer stable), rewrites its logon autostart on every start, and the tray card shows version and channel. No macOS dev builds (Developer ID signing needs the Mac's GUI session).
 - `shots` full-bleed layout: `shots.layout: "bleed"` fills the image with the app's own frame (no device, no background) and puts the scene title as a short corner caption (`corner`, `captionScale`, `captionWidth`, `captionInset` per scene) legible through a text shadow and soft glow only; the Play feature graphic shows the logo or `shots.feature.title`. Frames are captured per size at its own pixels in `<frames>/<lang>/<size>/<name>.png` (feature: `<lang>/feature/`), including the `mac` and `chromebook` sizes; `shots check` / `capture --source folder` verify aspect and native width. `shots.orientation: "landscape"` (bleed only) renders every portrait size landscape (stores accept it). Templates `template-bleed.html`, `feature-bleed.html`.
 - `storebound desktop`: "opened" now also works when a hidden tray copy is already running. On Windows it prints "opened" only when a process of the installed path has a visible window (the running copy shows it through the single-instance handoff); on macOS / Linux a visible start or a handoff to the running copy counts, otherwise it says only a tray copy runs. The graceful stop waits 3 s on Windows (closing a tray app only hides it), then stops by PID.
diff --git a/skills/build-and-sign/SKILL.md b/skills/build-and-sign/SKILL.md
index 274ab8e..e54b8e9 100644
--- a/skills/build-and-sign/SKILL.md
+++ b/skills/build-and-sign/SKILL.md
@@ -85,6 +85,32 @@ when the owner said so for this run). The MCP server offers only `apple_signing_
 6. **Next.** `storebound apple encryption --build N`, `storebound apple testflight distribute --build N --group Team
    --dry` (`testflight` skill), `storebound apple listing --version x.y.z --build N` (`appstore-first-release`).
 
+## Mac App Store: a Tauri app (.pkg)
+
+`storebound apple build --platform macos --tauri apps/desktop/src-tauri --path-free --dry` prints the plan; without
+`--dry` it runs in the Mac's logged-in GUI session (not over SSH: write a .command file and `open -a Terminal` it):
+
+1. Version from `--version` or tauri.conf.json, build number from `--build-number` or the next free one on App Store
+   Connect for macOS (CFBundleVersion must increase). `tauri.conf.json` `identifier` must equal `apple.bundleId`.
+2. Identities from the login keychain: "Apple Distribution" (or "3rd Party Mac Developer Application") and "Mac
+   Installer Distribution" (or "3rd Party Mac Developer Installer"). The installer one is its own certificate type
+   (`apple.signing.certificateType: 'MAC_INSTALLER_DISTRIBUTION'`, `apple signing ensure`).
+3. Provisioning profile: `--profile`, else an installed one, else the active `MAC_APP_STORE` profile from the API
+   (`apple.signing.profileType: 'MAC_APP_STORE'`).
+4. `tauri build --bundles app --target universal-apple-darwin --config <overlay>`: the overlay sets the signing identity,
+   the generated entitlements (app sandbox, application / team identifier, your own keys kept), the embedded profile,
+   hardened runtime and `bundleVersion`. Set `bundle.category` and `bundle.macOS.minimumSystemVersion` in
+   tauri.conf.json (the build stops without LSApplicationCategoryType / LSMinimumSystemVersion).
+5. Checks of the .app (sandbox, no get-task-allow, profile inside, version / build), `codesign --verify`, then
+   `productbuild --component <app> /Applications --sign <installer identity>` and `pkgutil --check-signature`.
+6. `--path-free`: rustc remaps the checkout, CARGO_HOME, RUSTUP_HOME and the home folder, no debug info, symbols stripped;
+   the build fails when the home folder or user name is still in the app. `--unsigned` runs the pipeline without
+   identities (not uploadable). Result: `<out>/export/<version>-<build>/<Product>.pkg` (`--out`, default `build/macos`).
+
+Then `storebound apple upload <pkg> --platform macos --dry` and without `--dry` (App Store Connect build upload,
+platform MAC_OS, or `--via altool`). The .pkg is checked first (installer signature); the build shows up in the macOS
+version's build list once processed. Details and fixes: `store-pitfalls` 119.
+
 ## Android
 
 1. **Upload key.** Generate once (`keytool -genkeypair -v -storetype PKCS12 -keystore upload.p12 -alias upload
diff --git a/skills/store-pitfalls/SKILL.md b/skills/store-pitfalls/SKILL.md
index 70aa528..1e06369 100644
--- a/skills/store-pitfalls/SKILL.md
+++ b/skills/store-pitfalls/SKILL.md
@@ -1415,3 +1415,29 @@ that fails without the fix (see CONTRIBUTING.md).
   `storebound shots copy reviewed --lang de`. Captions over the limit (eyebrow 30, title line 28, sub 90, badge 18) are
   not kept.
 - **Guard:** `cli/shots/copy.ts`, `cli/lib/shots-copy-translate.ts`, `tests/shots-copy-translate.test.ts`.
+
+## 119. A Tauri Mac App Store build was refused (no sandbox, no profile, wrong installer certificate) or carried the builder's home folder
+
+- **What happens:** a plain `tauri build` makes a Developer ID app: no `com.apple.security.app-sandbox`, no
+  `embedded.provisionprofile`, signed with the wrong certificate, packed as a .dmg. Packed by hand into a .pkg it fails at
+  upload with ITMS-90xxx (sandbox, missing profile, CFBundleVersion not above the last one, no LSApplicationCategoryType) or
+  the .pkg is signed with an application certificate. Separately, rustc panic messages and debug info carry the
+  checkout, `~/.cargo` and the user name (`/Users/<name>/...`, hundreds of times in a release binary), which ends up
+  in a public download.
+- **Do:** `storebound apple build --platform macos --tauri <src-tauri> --path-free --dry`, then the same without `--dry`
+  in the Mac's logged-in GUI session (codesign over SSH fails with errSecInternalComponent). It needs, on the Mac: an
+  "Apple Distribution" (or "3rd Party Mac Developer Application") and a "Mac Installer Distribution" (or "3rd Party Mac
+  Developer Installer") identity in the login keychain, and an active MAC_APP_STORE profile
+  (`apple.signing.profileType: 'MAC_APP_STORE'`, `apple signing ensure`, or `--profile <file>`). The installer certificate
+  is a separate certificate type (`MAC_INSTALLER_DISTRIBUTION`). `--unsigned` checks the whole pipeline without them
+  (never uploadable). A universal build needs both Rust targets (rustup); with Homebrew Rust only the host
+  target exists: pass `--target aarch64-apple-darwin`.
+- **Guard:** `cli/lib/mas.ts` / `cli/apple/build-mas.ts`: entitlements generated with sandbox and application / team
+  identifier (the project's own keys kept), profile embedded through a tauri.conf overlay, bundleVersion from App Store
+  Connect (platform MAC_OS) so it increases, the built app checked (sandbox entitlement, no get-task-allow, category,
+  minimum OS, profile inside, version / build), `--path-free` remaps checkout / CARGO_HOME / RUSTUP_HOME / home in rustc,
+  drops debug info and symbols and fails when the home folder or user name is still in the app (without the flag the
+  same scan warns). `cargo trim-paths` is not used: it is nightly-only (cargo 1.98 refuses it). `apple upload <pkg>
+  --platform macos` refuses an unsigned .pkg or one not signed with an installer certificate before any network call
+  (`tests/mas-build.test.ts`). The `com.apple.pkg` file type of the API build upload is taken from Apple's schema and has not
+  been exercised against the live API yet; `--via altool` (`--type macos`) is the fallback.

From 634d5dd71dcfa7ecb605e6ccc71522d521cbbc1d Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Sat, 24 Oct 2026 12:18:12 +0800
Subject: [PATCH 014/126] generated API tables refreshed for the macOS build
 upload

---
 cli/api/wrapped.gen.ts | 4 ++--
 docs/api-coverage.md   | 4 ++--
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/cli/api/wrapped.gen.ts b/cli/api/wrapped.gen.ts
index 1b484d8..d361d9a 100644
--- a/cli/api/wrapped.gen.ts
+++ b/cli/api/wrapped.gen.ts
@@ -131,7 +131,7 @@ export const WRAPPED: { apple: Record<string, string>; play: Record<string, stri
     'builds_betaAppReviewSubmission_getToOneRelated': 'apple/testflight',
     'builds_betaBuildLocalizations_getToManyRelated': 'apple/testflight',
     'builds_diagnosticSignatures_getToManyRelated': 'health',
-    'builds_getCollection': 'apple/build apple/encryption apple/listing apple/next-build apple/resubmit apple/status apple/testflight apple/upload art health lib/store-apps triage',
+    'builds_getCollection': 'apple/build apple/build-mas apple/encryption apple/listing apple/next-build apple/resubmit apple/status apple/testflight apple/upload art health lib/store-apps triage',
     'builds_updateInstance': 'apple/encryption lib/build-ops',
     'bundleIdCapabilities_createInstance': 'lib/signing',
     'bundleIds_createInstance': 'apple/bundle',
@@ -185,7 +185,7 @@ export const WRAPPED: { apple: Record<string, string>; play: Record<string, stri
     'profiles_certificates_getToManyRelationship': 'lib/signing',
     'profiles_createInstance': 'apple/adhoc lib/signing',
     'profiles_devices_getToManyRelated': 'apple/adhoc',
-    'profiles_getInstance': 'apple/signing',
+    'profiles_getInstance': 'apple/build-mas apple/signing',
     'promotedPurchases_createInstance': 'lib/offers',
     'promotedPurchases_updateInstance': 'lib/offers',
     'reviewSubmissionItems_createInstance': 'apple/submission lib/cpp-events lib/review-submit',
diff --git a/docs/api-coverage.md b/docs/api-coverage.md
index cb6249a..9388e08 100644
--- a/docs/api-coverage.md
+++ b/docs/api-coverage.md
@@ -651,7 +651,7 @@ Specs: Apple [App Store Connect API 4.5.1](https://developer.apple.com/sample-co
 | `builds_buildBetaDetail_getToOneRelationship` | GET | `/v1/builds/{id}/relationships/buildBetaDetail` | read |  |
 | `builds_diagnosticSignatures_getToManyRelated` | GET | `/v1/builds/{id}/diagnosticSignatures` | read | health |
 | `builds_diagnosticSignatures_getToManyRelationship` | GET | `/v1/builds/{id}/relationships/diagnosticSignatures` | read |  |
-| `builds_getCollection` | GET | `/v1/builds` | read | apple/build, apple/encryption, apple/listing, apple/next-build, apple/resubmit, apple/status, apple/testflight, apple/upload, art, health, lib/store-apps, triage |
+| `builds_getCollection` | GET | `/v1/builds` | read | apple/build, apple/build-mas, apple/encryption, apple/listing, apple/next-build, apple/resubmit, apple/status, apple/testflight, apple/upload, art, health, lib/store-apps, triage |
 | `builds_getInstance` | GET | `/v1/builds/{id}` | read |  |
 | `builds_icons_getToManyRelated` | GET | `/v1/builds/{id}/icons` | read |  |
 | `builds_icons_getToManyRelationship` | GET | `/v1/builds/{id}/relationships/icons` | read |  |
@@ -1297,7 +1297,7 @@ Specs: Apple [App Store Connect API 4.5.1](https://developer.apple.com/sample-co
 | `profiles_devices_getToManyRelated` | GET | `/v1/profiles/{id}/devices` | read | apple/adhoc |
 | `profiles_devices_getToManyRelationship` | GET | `/v1/profiles/{id}/relationships/devices` | read |  |
 | `profiles_getCollection` | GET | `/v1/profiles` | read |  |
-| `profiles_getInstance` | GET | `/v1/profiles/{id}` | read | apple/signing |
+| `profiles_getInstance` | GET | `/v1/profiles/{id}` | read | apple/build-mas, apple/signing |
 | **promotedPurchases** (4) | | | | |
 | `promotedPurchases_createInstance` | POST | `/v1/promotedPurchases` | write (dry by default) | lib/offers |
 | `promotedPurchases_deleteInstance` | DELETE | `/v1/promotedPurchases/{id}` | owner only (typed confirm) |  |

From 2e1c7cdc3c62aeeb4eb62b96c4d6166c33f1d8ea Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Sat, 24 Oct 2026 12:19:27 +0800
Subject: [PATCH 015/126] mas: placeholders the scrub accepts

---
 cli/lib/mas.ts          |  2 +-
 tests/mas-build.test.ts | 20 ++++++++++----------
 2 files changed, 11 insertions(+), 11 deletions(-)

diff --git a/cli/lib/mas.ts b/cli/lib/mas.ts
index a5365bb..0a9d650 100644
--- a/cli/lib/mas.ts
+++ b/cli/lib/mas.ts
@@ -125,7 +125,7 @@ export interface PathFreeInput { home: string; user: string; root: string; cargo
  *  and the home folder; no debug info; symbols stripped. Pure. */
 export function pathFreeEnv(i: PathFreeInput): Record<string, string> {
   const maps: [string, string][] = [
-    [i.root, '/src'], [i.cargoHome ?? `${i.home}/.cargo`, '/cargo'], [i.rustupHome ?? `${i.home}/.rustup`, '/rustup'], [i.home, '/home/build'],
+    [i.root, '/src'], [i.cargoHome ?? `${i.home}/.cargo`, '/cargo'], [i.rustupHome ?? `${i.home}/.rustup`, '/rustup'], [i.home, '/build-home'],
   ];
   const seen = new Set<string>();
   const flags = maps.filter(([from]) => from && !seen.has(from) && seen.add(from)).map(([from, to]) => `--remap-path-prefix=${from}=${to}`);
diff --git a/tests/mas-build.test.ts b/tests/mas-build.test.ts
index b689b02..1fd738c 100644
--- a/tests/mas-build.test.ts
+++ b/tests/mas-build.test.ts
@@ -94,23 +94,23 @@ describe('identities and profiles', () => {
 
 describe('path-free', () => {
   test('remaps checkout, cargo, rustup, home; no debug info', () => {
-    const e = pathFreeEnv({ home: '/Users/dev', user: 'dev', root: '/Users/dev/work/app', rustflags: '-C target-cpu=native' });
+    const e = pathFreeEnv({ home: '/Users/you', user: 'you', root: '/Users/you/work/app', rustflags: '-C target-cpu=native' });
     expect(e.RUSTFLAGS).toContain('-C target-cpu=native');
-    expect(e.RUSTFLAGS).toContain('--remap-path-prefix=/Users/dev/work/app=/src');
-    expect(e.RUSTFLAGS).toContain('--remap-path-prefix=/Users/dev/.cargo=/cargo');
-    expect(e.RUSTFLAGS).toContain('--remap-path-prefix=/Users/dev/.rustup=/rustup');
-    expect(e.RUSTFLAGS).toContain('--remap-path-prefix=/Users/dev=/home/build');
+    expect(e.RUSTFLAGS).toContain('--remap-path-prefix=/Users/you/work/app=/src');
+    expect(e.RUSTFLAGS).toContain('--remap-path-prefix=/Users/you/.cargo=/cargo');
+    expect(e.RUSTFLAGS).toContain('--remap-path-prefix=/Users/you/.rustup=/rustup');
+    expect(e.RUSTFLAGS).toContain('--remap-path-prefix=/Users/you=/build-home');
     expect(e.CARGO_PROFILE_RELEASE_DEBUG).toBe('0');
     
   });
   test('leak scan finds the home folder in a binary and a plist', () => {
     const app = mkdtempSync(join(tmp, 'app-'));
     mkdirSync(join(app, 'Contents/MacOS'), { recursive: true });
-    writeFileSync(join(app, 'Contents/MacOS/bin'), Buffer.concat([Buffer.from([0, 1, 2]), Buffer.from('panic at /Users/dev/.cargo/registry/x.rs'), Buffer.from([0])]));
+    writeFileSync(join(app, 'Contents/MacOS/bin'), Buffer.concat([Buffer.from([0, 1, 2]), Buffer.from('panic at /Users/you/.cargo/registry/x.rs'), Buffer.from([0])]));
     writeFileSync(join(app, 'Contents/Info.plist'), 'clean');
-    const leaks = scanPathLeaks(app, ['/Users/dev', '/Users/dev/']);
-    expect(leaks.map(l => `${l.file}:${l.needle}`)).toEqual(['Contents/MacOS/bin:/Users/dev', 'Contents/MacOS/bin:/Users/dev/']);
-    expect(scanPathLeaks(app, ['/Users/nobody'])).toEqual([]);
+    const leaks = scanPathLeaks(app, ['/Users/you', '/Users/you/']);
+    expect(leaks.map(l => `${l.file}:${l.needle}`)).toEqual(['Contents/MacOS/bin:/Users/you', 'Contents/MacOS/bin:/Users/you/']);
+    expect(scanPathLeaks(app, ['/Users/me'])).toEqual([]);
   });
 });
 
@@ -130,7 +130,7 @@ describe('app and pkg checks', () => {
     expect(appProblems({ ...good, entitlements: null, hasProfile: false }, { ...o, signed: false }).errors).toEqual([]);
   });
   test('path leaks are errors with --path-free, warnings without', () => {
-    const leaks = [{ file: 'Contents/MacOS/bin', needle: '/Users/dev', count: 3 }];
+    const leaks = [{ file: 'Contents/MacOS/bin', needle: '/Users/you', count: 3 }];
     expect(appProblems({ ...good, leaks }, o).errors[0]).toContain('local paths');
     const w = appProblems({ ...good, leaks }, { ...o, pathFree: false });
     expect(w.errors).toEqual([]);

From 61b5fa062370187c6ede41c6f07f4e77e1fafc29 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Sat, 24 Oct 2026 13:00:48 +0800
Subject: [PATCH 016/126] shots: feature rotate, per-language frame fallback,
 layout-aware capture selectors

---
 CHANGELOG.md                         |  3 +
 cli/lib/config.ts                    | 17 ++++++
 cli/lib/embedded.ts                  |  2 +-
 cli/shots/capture-web.ts             | 31 ++++++++++
 cli/shots/capture.ts                 | 27 +++++++--
 cli/shots/check.ts                   | 10 ++-
 cli/shots/devices.ts                 |  5 ++
 cli/shots/feature-bleed.html         |  6 ++
 cli/shots/fonts.ts                   |  7 ++-
 cli/shots/lib.ts                     | 28 ++++++++-
 cli/shots/render.ts                  | 13 ++--
 cli/shots/selectors.ts               | 79 ++++++++++++++++++++++++
 skills/store-pitfalls/SKILL.md       | 13 ++++
 tests/browser/feature-fit.browser.ts | 40 ++++++++++++
 tests/shots-gaps.test.ts             | 91 ++++++++++++++++++++++++++++
 15 files changed, 355 insertions(+), 17 deletions(-)
 create mode 100644 cli/shots/selectors.ts
 create mode 100644 tests/shots-gaps.test.ts

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 703ba22..1a36300 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,9 @@
 
 ## Unreleased
 
+- `shots.feature.rotate` (degrees) is honoured by the Play feature graphic like a scene frame's `rotate`: added to the template tilt and the phone is re-fitted (`-90` stands a landscape game frame upright); with `shots.layout: "bleed"` the frame image is turned and still covers the canvas.
+- `shots check` / `shots render` without frames for a language that has copy use the default language's frames (an info line, no failure); `shots.perLanguageFrames: true` requires per-language frames. `shots fonts --lang en,tr` limits the report to those languages (the font manifest keeps all of them).
+- `shots capture` web shots take `waitSelector` and `click` selector lists per layout (`{ phone, tablet, any }`, data attributes first, `text=` fallback). A miss names the selector and the size with every candidate's match count; `shots capture --dry` prints the candidates per size and `--dry --probe` opens the pages and reports which one matched or MISSed on which size.
 - Play managed publishing: `storebound console plan play-publish-changes` (Publishing overview > "Changes ready to publish" > the owner's final "Publish N changes" + its confirm dialog; never-press: Discard changes, Stop managed publishing; `--lookup` lists the ready production releases from the API) and `console verify play-publish-changes` (API: passes when no production release is left ready to publish; or the page text). `play status` (and `--json` `readyToPublish`) prints the ready items and the plan hint, `storebound status` names the plan, and the desktop Releases tab shows the same hint with a button that opens Publishing overview. A release counts as ready to publish only when the public store page positively shows an older version; a 404, a failed or stale page read, a same or unparseable version is never ready (verify says "not determined" instead of a mismatch).
 - `apple upload` / `play upload` `--pre-check "<cmd with {file}>"` (config `upload.preCheck`) runs your gate before any byte is sent; a nonzero exit refuses the upload (ship-step exit 1, `PRE_CHECK_FAILED`). `--evidence <path.json>` (`upload.evidence`) writes file, sha256, size, command, exit code, stdout tail, time and version, also on failure, and the result carries it as `preCheck`.
 - New `storebound shots copy translate --to de,es` fills store/shots/copy.json per language (agent translation or `--translate "<cmd>"`), machine-translated until `shots copy reviewed`, caption limits respected; `shots copy check`; `check` / `shots render` name this command for a missing language.
diff --git a/cli/lib/config.ts b/cli/lib/config.ts
index f300e23..e0a52fb 100644
--- a/cli/lib/config.ts
+++ b/cli/lib/config.ts
@@ -167,6 +167,10 @@ export interface ShotsConfig {
   copy: string;
   /** Raw frames: <frames>/<languageId>/<phone|tablet>/<name>.png */
   frames: string;
+  /** true: every language needs its own frames (<frames>/<lang>/...). Default false: a language with copy but no frames
+   *  folder uses the default language's frames (play.defaultLanguage, else the first language); `shots check` / `render`
+   *  say so as an info line. */
+  perLanguageFrames?: boolean;
   /** Output: <out>/<languageId>/<size>/NN.png and feature/1024x500.png */
   out: string;
   /** Optional logo image for the hero scene and the feature graphic. */
@@ -183,6 +187,9 @@ export interface ShotsConfig {
    *  bottom edge on purpose (shots check then allows it). `scale` (0.5-1.5, default 1) multiplies the phone's width
    *  (still clamped to the canvas with 'contain'). */
   feature?: { frame: string; palette?: string | Palette; fit?: 'contain' | 'bleed'; scale?: number;
+    /** Degrees added to the phone's tilt (layout "bleed": the frame image is turned), like a scene frame's `rotate`: -90 stands a
+     *  landscape game frame upright in a phone lying on its side. Default 0. */
+    rotate?: number;
     /** layout "bleed": the name on the feature graphic when there is no logo (default app.name). */
     title?: string;
     /** Photo background for the feature graphic (path relative to the config, or { image, overlay }); wins over the
@@ -207,7 +214,16 @@ export interface ShotsConfig {
 }
 
 /** One raw frame. Web: `path` (+ query). Simulator / emulator: `url` deep link and / or `args` / `extras`. */
+/** Web capture: a selector, candidates tried in order, or per layout { phone, tablet, any } (own list first). Prefer data
+ *  attributes (`[data-shot="shop-row"]`); `text=Shop` and `role=button[name="Shop"]` work as fallbacks. */
+export type ShotSelector = string | string[] | { phone?: string | string[]; tablet?: string | string[]; any?: string | string[] };
+
 export interface ShotSpec {
+  /** Web: wait (up to the waitFor timeout) until one of these matches, before waitFor; a miss names the selector and the size. */
+  waitSelector?: ShotSelector;
+  /** Web: element(s) to click after waitSelector, in order (a list of selectors is ONE click with fallbacks; use
+   *  [{...}, {...}] objects for several clicks). */
+  click?: ShotSelector | ShotSelector[];
   /** Web: URL path after baseUrl, "{lang}" replaced. */
   path?: string;
   /** ios-sim / android-emu: deep link opened after launch, e.g. "mygame://shot/{shot}?lang={lang}". */
@@ -1259,6 +1275,7 @@ export function validateConfig(c: unknown): string[] {
     if (s.feature !== undefined) {
       if (!s.feature || typeof s.feature.frame !== 'string' || !s.feature.frame) e.push('shots.feature.frame: a frame name');
       if (s.feature?.fit !== undefined && s.feature.fit !== 'contain' && s.feature.fit !== 'bleed') e.push("shots.feature.fit: 'contain' | 'bleed'");
+      if (s.feature?.rotate !== undefined && !(typeof s.feature.rotate === 'number' && Math.abs(s.feature.rotate) <= 360)) e.push('shots.feature.rotate: a number of degrees from -360 to 360');
       if (s.feature?.scale !== undefined && !(typeof s.feature.scale === 'number' && s.feature.scale >= 0.5 && s.feature.scale <= 1.5)) e.push('shots.feature.scale: a number from 0.5 to 1.5');
       e.push(...featureBackgroundIssues(s.feature?.background));
       if (s.feature?.palette !== undefined) e.push(...paletteIssues(s.feature.palette, 'shots.feature.palette'));
diff --git a/cli/lib/embedded.ts b/cli/lib/embedded.ts
index f392f2f..715eb69 100644
--- a/cli/lib/embedded.ts
+++ b/cli/lib/embedded.ts
@@ -39,7 +39,7 @@ export const TEMPLATE_TEXT: Record<string, string> = {
 export const SHOTS_PAGES: Record<string, string> = {
   "caption.html": "<!doctype html>\n<html>\n<head>\n<meta charset=\"utf-8\">\n<link rel=\"stylesheet\" href=\"/fonts/fonts.css\">\n<!-- Caption overlay for app preview videos (transparent PNG, rendered by `storebound shots video`, overlaid by ffmpeg).\n     caption.html?w=<px>&h=<px>&lang=<id>&i=<caption index>. Same title font, stroke and colours as the screenshots. -->\n<style>\n  * { box-sizing: border-box; margin: 0; padding: 0; }\n  html, body { background: transparent; overflow: hidden; }\n  #c { position: relative; width: var(--W); height: var(--H); }\n  .cap { position: absolute; left: 50%; top: calc(var(--u) * 7); transform: translateX(-50%) rotate(-1.5deg); max-width: calc(var(--u) * 90);\n    padding: calc(var(--u) * 2.6) calc(var(--u) * 5) calc(var(--u) * 3); border-radius: calc(var(--u) * 5); text-align: center;\n    background: linear-gradient(180deg, rgba(0,0,0,.42), rgba(0,0,0,.28)); box-shadow: inset 0 0 0 calc(var(--u) * .35) rgba(255,255,255,.3);\n    font-family: var(--tf); font-weight: var(--tw); font-size: calc(var(--u) * var(--fs)); line-height: 1.04; color: #fff;\n    -webkit-text-stroke: calc(var(--u) * var(--fs) * .07) var(--ink); paint-order: stroke fill; text-wrap: balance;\n    filter: drop-shadow(0 calc(var(--u) * .7) 0 var(--ink)); }\n</style>\n</head>\n<body>\n<div id=\"c\"></div>\n<script type=\"module\">\nconst q = new URLSearchParams(location.search);\nconst W = +q.get('w'), H = +q.get('h'), LANG = q.get('lang'), I = +q.get('i');\nconst job = await (await fetch(`/caption.json?lang=${encodeURIComponent(LANG)}&i=${I}`)).json();\nconst u = Math.min(W, H) / 100, R = document.documentElement.style;\ndocument.documentElement.lang = LANG;\nR.setProperty('--W', W + 'px'); R.setProperty('--H', H + 'px'); R.setProperty('--u', u + 'px');\nR.setProperty('--ink', job.ink); R.setProperty('--fs', W > H ? 6.4 : 8.2);\nconst X = job.fonts.script;\nR.setProperty('--tf', (job.fonts.titleStack ?? (X ? [X, job.fonts.title] : [job.fonts.title])).map(f => `'${f}'`).join(', ') + ', sans-serif');\nR.setProperty('--tw', X ? 900 : 400);\nconst el = document.createElement('div');\nel.className = 'cap';\nif (job.rtl) el.dir = 'rtl';\nel.textContent = job.text;\ndocument.getElementById('c').append(el);\nawait document.fonts.ready;\ndocument.body.dataset.ready = '1';\n</script>\n</body>\n</html>\n",
   "feature-app.html": "<!doctype html>\n<html>\n<head>\n<meta charset=\"utf-8\">\n<link rel=\"stylesheet\" href=\"/fonts/fonts.css\">\n<!-- Play feature graphic, app style, 1024 x 500: logo (or the app name) on the left on a calm gradient, an upright phone\n     with one frame on the right. feature-app.html?lang=<id>[&v=<variant>]. Rendered by `storebound shots render` when\n     the screenshot style is app. Keep text out of it apart from the name: Play overlays its own UI. -->\n<style>\n  * { box-sizing: border-box; margin: 0; padding: 0; }\n  html, body { width: 1024px; height: 500px; overflow: hidden; background: #fff; }\n  #c { position: relative; width: 1024px; height: 500px; overflow: hidden; isolation: isolate; background: var(--bg); }\n  .soft { position: absolute; left: 760px; top: 260px; width: 700px; height: 600px; transform: translate(-50%, -50%); z-index: -1;\n    border-radius: 50%; background: radial-gradient(closest-side, var(--accentSoft), transparent); }\n  .logo { position: absolute; left: 330px; top: 250px; width: 440px; max-height: 220px; object-fit: contain; transform: translate(-50%, -50%); z-index: 5; }\n  .name { position: absolute; left: 330px; top: 250px; transform: translate(-50%, -50%); z-index: 5; width: 520px; text-align: center;\n    font-family: var(--tf); font-weight: 750; font-size: 76px; line-height: 1.02; letter-spacing: -.02em; color: var(--ink); }\n  .tel { position: absolute; left: 690px; top: 40px; width: 230px; aspect-ratio: var(--ar); z-index: 3; border-radius: 36px; padding: 5px;\n    background: #121317; box-shadow: inset 0 0 0 1px #3a3c44, 0 22px 50px var(--shadow); }\n  .screen { position: relative; width: 100%; height: 100%; overflow: hidden; border-radius: 31px; background: #fff; }\n  .screen img { position: absolute; left: 0; bottom: 0; width: 100%; height: var(--appH); object-fit: cover; object-position: top; }\n  .screen .bar { position: absolute; left: 0; right: 0; top: 0; height: var(--barH); background: #fff center top / 100% 60000% no-repeat; }\n  .island { position: absolute; top: 6px; left: 50%; transform: translateX(-50%); width: 30%; height: 19px; background: #000; border-radius: 99px; }\n</style>\n</head>\n<body>\n<div id=\"c\">\n  <div class=\"soft\"></div>\n  <div class=\"tel\"><div class=\"screen\"><div class=\"bar\" id=\"bar\"></div><img id=\"f\"><div class=\"island\"></div></div></div>\n</div>\n<script type=\"module\">\nconst q = new URLSearchParams(location.search);\nconst lang = q.get('lang'), V = q.get('v') ?? '';\nconst job = await (await fetch(`/job.json?lang=${encodeURIComponent(lang)}&feature=1&v=${encodeURIComponent(V)}`)).json();\nconst P = job.palette, R = document.documentElement.style, dev = job.phone;\nconst rgba = (hex, a) => { const m = /^#?([0-9a-f]{6})$/i.exec(hex); if (!m) return hex; const n = parseInt(m[1], 16); return `rgba(${n >> 16},${(n >> 8) & 255},${n & 255},${a})`; };\nR.setProperty('--bg', P.bgCss ?? (Array.isArray(P.bg) ? `linear-gradient(135deg, ${P.bg.join(', ')})` : P.bg)); // palette.ts: stops, colour, gradient string or photo + overlay\nR.setProperty('--ink', P.ink); R.setProperty('--shadow', P.shadow); R.setProperty('--accentSoft', rgba(P.glow, .18));\nR.setProperty('--tf', (job.fonts.titleStack ?? [job.fonts.title]).map(f => `'${f}'`).join(', ') + ', sans-serif');\nR.setProperty('--ar', `${dev.w} / ${dev.h + dev.bar}`);\nR.setProperty('--appH', `${100 * dev.h / (dev.h + dev.bar)}%`);\nR.setProperty('--barH', `${100 * dev.bar / (dev.h + dev.bar)}%`);\nconst c = document.getElementById('c');\n// device place and size from featureLayout() (lib.ts): fit 'contain' keeps the rotated phone inside the canvas\nconst D = job.device, tel = c.querySelector('.tel');\nif (D) Object.assign(tel.style, { left: D.left + 'px', top: D.top + 'px', width: D.width + 'px', transform: `rotate(${D.angle}deg)` });\nconst src = `/frames/${encodeURIComponent(lang)}/phone/${encodeURIComponent(job.frame)}`;\ndocument.getElementById('f').src = src;\ndocument.getElementById('bar').style.backgroundImage = `url('${src}')`;\nc.insertAdjacentHTML('beforeend', job.logo ? '<img class=\"logo\" src=\"/logo\">' : `<div class=\"name\">${String(job.appName).replace(/</g, '&lt;')}</div>`);\nawait document.fonts.ready;\nawait Promise.all([...document.images].map(i => i.decode().catch(() => {})));\n// read by `shots render` -> report.json -> shots check: the phone's rotated outline must stay inside the canvas\ndocument.body.dataset.devices = JSON.stringify([...c.querySelectorAll('.tel')].map(t => { const r = t.getBoundingClientRect(); return { x: r.x, y: r.y, w: r.width, h: r.height }; }));\nif (D?.fit === 'bleed') document.body.dataset.bleed = '1';\n// logo / name box for the safe-margin rule (7 % of the width left / right, 5 % of the height at the top)\ndocument.body.dataset.boxes = JSON.stringify([...c.querySelectorAll('.logo, .name')].map(e => { const r = e.getBoundingClientRect(); return { el: e.matches('.logo') ? 'logo' : 'title', x: r.x, y: r.y, w: r.width, h: r.height }; }));\ndocument.body.dataset.ready = '1';\n</script>\n</body>\n</html>\n",
-  "feature-bleed.html": "<!doctype html>\n<html>\n<head>\n<meta charset=\"utf-8\">\n<link rel=\"stylesheet\" href=\"/fonts/fonts.css\">\n<!-- Play feature graphic for shots.layout \"bleed\": the frame /frames/<lang>/feature/<shots.feature.frame> fills the\n     1024 x 500 canvas and the logo (shots.logo) or the name (shots.feature.title, else app.name) sits on the left with\n     a text shadow and a soft glow only: no band, no scrim. Play may lay its own play button over the centre. -->\n<style>\n  * { box-sizing: border-box; margin: 0; padding: 0; }\n  html, body { width: 1024px; height: 500px; overflow: hidden; background: #000; }\n  #c { position: relative; width: 1024px; height: 500px; overflow: hidden; }\n  #c > img.frame { position: absolute; inset: 0; width: 100%; height: 100%; object-fit: cover; display: block; }\n  .logo { position: absolute; left: 44px; top: 50%; transform: translateY(-50%); max-width: 380px; max-height: 300px;\n    filter: drop-shadow(0 4px 6px rgba(4,18,38,.7)) drop-shadow(0 0 28px rgba(4,22,48,.5)); }\n  .name { position: absolute; left: 44px; top: 50%; transform: translateY(-50%); max-width: 420px; font-family: var(--tf); font-weight: var(--tw);\n    font-size: 84px; line-height: 1; color: #fff; text-wrap: balance;\n    text-shadow: 0 0 4px rgba(4,18,38,.92), 0 3px 7px rgba(4,18,38,.92), 0 0 26px rgba(4,22,48,.55), 0 0 50px rgba(4,22,48,.55); }\n</style>\n</head>\n<body>\n<div id=\"c\"></div>\n<script type=\"module\">\nconst q = new URLSearchParams(location.search);\nconst lang = q.get('lang'), V = q.get('v') ?? '';\nconst job = await (await fetch(`/job.json?lang=${encodeURIComponent(lang)}&feature=1&v=${encodeURIComponent(V)}`)).json();\nconst R = document.documentElement.style;\nconst X = job.fonts.script;\nR.setProperty('--tf', (job.fonts.titleStack ?? (X ? [X, job.fonts.title] : [job.fonts.title])).map(f => `'${f}'`).join(', ') + ', sans-serif');\nR.setProperty('--tw', X ? 900 : job.fonts.titleWeight ?? 400);\ndocument.documentElement.lang = lang;\nconst c = document.getElementById('c');\nconst src = `/frames/${encodeURIComponent(lang)}/feature/${encodeURIComponent(job.frame)}`;\nconst name = String(job.featureTitle ?? job.appName).replace(/&/g, '&amp;').replace(/</g, '&lt;');\nc.innerHTML = `<img class=\"frame\" src=\"${src}\">` + (job.logo ? '<img class=\"logo\" src=\"/logo\">' : `<div class=\"name\">${name}</div>`);\nawait document.fonts.ready;\nawait Promise.all([...document.images].map(i => i.decode().catch(() => {})));\nconst overflow = [];\nconst img = c.querySelector('img.frame');\nif (!img.naturalWidth) overflow.push(`feature frame ${job.frame} did not load`);\nelse if (img.naturalWidth < 1024) overflow.push(`feature frame ${img.naturalWidth}x${img.naturalHeight} is upscaled: capture it at least 1024 px wide`);\nconst t = c.querySelector('.name, .logo').getBoundingClientRect();\nif (t.right > 1024 || t.top < 0 || t.bottom > 500) overflow.push('the name runs off the feature graphic');\ndocument.body.dataset.overflow = JSON.stringify(overflow);\ndocument.body.dataset.devices = '[]';\ndocument.body.dataset.ready = '1';\n</script>\n</body>\n</html>\n",
+  "feature-bleed.html": "<!doctype html>\r\n<html>\r\n<head>\r\n<meta charset=\"utf-8\">\r\n<link rel=\"stylesheet\" href=\"/fonts/fonts.css\">\r\n<!-- Play feature graphic for shots.layout \"bleed\": the frame /frames/<lang>/feature/<shots.feature.frame> fills the\r\n     1024 x 500 canvas and the logo (shots.logo) or the name (shots.feature.title, else app.name) sits on the left with\r\n     a text shadow and a soft glow only: no band, no scrim. Play may lay its own play button over the centre. -->\r\n<style>\r\n  * { box-sizing: border-box; margin: 0; padding: 0; }\r\n  html, body { width: 1024px; height: 500px; overflow: hidden; background: #000; }\r\n  #c { position: relative; width: 1024px; height: 500px; overflow: hidden; }\r\n  #c > img.frame { position: absolute; inset: 0; width: 100%; height: 100%; object-fit: cover; display: block; }\r\n  .logo { position: absolute; left: 44px; top: 50%; transform: translateY(-50%); max-width: 380px; max-height: 300px;\r\n    filter: drop-shadow(0 4px 6px rgba(4,18,38,.7)) drop-shadow(0 0 28px rgba(4,22,48,.5)); }\r\n  .name { position: absolute; left: 44px; top: 50%; transform: translateY(-50%); max-width: 420px; font-family: var(--tf); font-weight: var(--tw);\r\n    font-size: 84px; line-height: 1; color: #fff; text-wrap: balance;\r\n    text-shadow: 0 0 4px rgba(4,18,38,.92), 0 3px 7px rgba(4,18,38,.92), 0 0 26px rgba(4,22,48,.55), 0 0 50px rgba(4,22,48,.55); }\r\n</style>\r\n</head>\r\n<body>\r\n<div id=\"c\"></div>\r\n<script type=\"module\">\r\nconst q = new URLSearchParams(location.search);\r\nconst lang = q.get('lang'), V = q.get('v') ?? '';\r\nconst job = await (await fetch(`/job.json?lang=${encodeURIComponent(lang)}&feature=1&v=${encodeURIComponent(V)}`)).json();\r\nconst R = document.documentElement.style;\r\nconst X = job.fonts.script;\r\nR.setProperty('--tf', (job.fonts.titleStack ?? (X ? [X, job.fonts.title] : [job.fonts.title])).map(f => `'${f}'`).join(', ') + ', sans-serif');\r\nR.setProperty('--tw', X ? 900 : job.fonts.titleWeight ?? 400);\r\ndocument.documentElement.lang = lang;\r\nconst c = document.getElementById('c');\r\nconst src = `/frames/${encodeURIComponent(lang)}/feature/${encodeURIComponent(job.frame)}`;\r\nconst name = String(job.featureTitle ?? job.appName).replace(/&/g, '&amp;').replace(/</g, '&lt;');\r\nc.innerHTML = `<img class=\"frame\" src=\"${src}\">` + (job.logo ? '<img class=\"logo\" src=\"/logo\">' : `<div class=\"name\">${name}</div>`);\r\nawait document.fonts.ready;\r\nawait Promise.all([...document.images].map(i => i.decode().catch(() => {})));\r\nconst overflow = [];\r\nconst img = c.querySelector('img.frame');\r\n// shots.feature.rotate: turn the frame like a scene frame's rotate; a quarter turn swaps the box so the image still covers the canvas\r\nconst rot = Number(job.rotate) || 0;\r\nif (rot) {\r\n  const quarter = Math.abs(rot % 180) === 90, W = quarter ? 500 : 1024, H = quarter ? 1024 : 500;\r\n  Object.assign(img.style, { inset: 'auto', left: (512 - W / 2) + 'px', top: (250 - H / 2) + 'px', width: W + 'px', height: H + 'px', transform: `rotate(${rot}deg)` });\r\n}\r\nif (!img.naturalWidth) overflow.push(`feature frame ${job.frame} did not load`);\r\nelse if (img.naturalWidth < 1024) overflow.push(`feature frame ${img.naturalWidth}x${img.naturalHeight} is upscaled: capture it at least 1024 px wide`);\r\nconst t = c.querySelector('.name, .logo').getBoundingClientRect();\r\nif (t.right > 1024 || t.top < 0 || t.bottom > 500) overflow.push('the name runs off the feature graphic');\r\ndocument.body.dataset.overflow = JSON.stringify(overflow);\r\ndocument.body.dataset.devices = '[]';\r\ndocument.body.dataset.ready = '1';\r\n</script>\r\n</body>\r\n</html>\r\n",
   "feature.html": "<!doctype html>\n<html>\n<head>\n<meta charset=\"utf-8\">\n<link rel=\"stylesheet\" href=\"/fonts/fonts.css\">\n<!-- Play feature graphic, 1024 x 500: logo (or the app name) on the left, a tilted phone with one frame on the right.\n     feature.html?lang=<id>[&v=<variant>]. Rendered by `storebound shots render`. Keep text out of it: Play overlays its own UI. -->\n<style>\n  * { box-sizing: border-box; margin: 0; padding: 0; }\n  html, body { width: 1024px; height: 500px; overflow: hidden; background: #000; }\n  #c { position: relative; width: 1024px; height: 500px; overflow: hidden; isolation: isolate; background: var(--bg); }\n  .rays { position: absolute; left: 360px; top: 250px; width: 1700px; height: 1700px; transform: translate(-50%, -50%) rotate(8deg); z-index: -4;\n    opacity: .55; background: repeating-conic-gradient(rgba(255,255,255,.22) 0deg 7deg, rgba(255,255,255,0) 7deg 18deg);\n    -webkit-mask-image: radial-gradient(closest-side, #000 0%, rgba(0,0,0,.6) 30%, transparent 75%); }\n  .glow { position: absolute; left: 360px; top: 250px; width: 900px; height: 700px; transform: translate(-50%, -50%); z-index: -3;\n    background: radial-gradient(closest-side, var(--glow), transparent); }\n  .vign { position: absolute; inset: 0; z-index: -2; background: radial-gradient(90% 90% at 45% 50%, transparent 60%, rgba(0,0,0,.28) 100%); }\n  .logo { position: absolute; left: 360px; top: 252px; width: 540px; max-height: 400px; object-fit: contain; transform: translate(-50%, -50%) rotate(-3deg); z-index: 5;\n    filter: drop-shadow(0 14px 22px rgba(0,0,0,.4)); }\n  .name { position: absolute; left: 360px; top: 250px; transform: translate(-50%, -50%) rotate(-3deg); z-index: 5; width: 540px; text-align: center;\n    font-family: var(--tf); font-size: 104px; line-height: .95; color: #fff; -webkit-text-stroke: 9px var(--ink); paint-order: stroke fill;\n    filter: drop-shadow(0 8px 0 var(--ink)) drop-shadow(0 14px 22px rgba(0,0,0,.35)); }\n  .tel { position: absolute; left: 748px; top: 36px; width: 232px; aspect-ratio: var(--ar); transform: rotate(7deg); z-index: 3;\n    border-radius: 40px; padding: 6px;\n    background: linear-gradient(140deg, #f4f4f6 0%, #9da0a8 8%, #3c3e44 20%, #1a1b1f 50%, #3c3e44 82%, #c8cad0 100%);\n    box-shadow: inset 0 0 0 1px rgba(255,255,255,.6), inset 0 0 0 3px #101114, 0 20px 50px var(--shadow); }\n  .screen { position: relative; width: 100%; height: 100%; overflow: hidden; border-radius: 34px; background: #000; }\n  .screen img { position: absolute; left: 0; bottom: 0; width: 100%; height: var(--appH); object-fit: cover; object-position: top; }\n  .screen .bar { position: absolute; left: 0; right: 0; top: 0; height: var(--barH); background: #0b0b10 center top / 100% 60000% no-repeat; }\n  .island { position: absolute; top: 6px; left: 50%; transform: translateX(-50%); width: 30%; height: 20px; background: #000; border-radius: 99px; }\n  .spark { position: absolute; width: var(--s); height: var(--s); transform: translate(-50%, -50%); background: #fff; z-index: -1;\n    clip-path: polygon(50% 0, 58% 42%, 100% 50%, 58% 58%, 50% 100%, 42% 58%, 0 50%, 42% 42%); opacity: var(--o); filter: drop-shadow(0 0 6px #fff); }\n</style>\n</head>\n<body>\n<div id=\"c\">\n  <div class=\"glow\"></div><div class=\"rays\"></div><div class=\"vign\"></div>\n  <div class=\"tel\"><div class=\"screen\"><div class=\"bar\" id=\"bar\"></div><img id=\"f\"><div class=\"island\"></div></div></div>\n</div>\n<script type=\"module\">\nconst q = new URLSearchParams(location.search);\nconst lang = q.get('lang'), V = q.get('v') ?? '';\nconst job = await (await fetch(`/job.json?lang=${encodeURIComponent(lang)}&feature=1&v=${encodeURIComponent(V)}`)).json();\nconst P = job.palette, R = document.documentElement.style, dev = job.phone;\nR.setProperty('--bg', P.bgCss ?? (Array.isArray(P.bg) ? `linear-gradient(160deg, ${P.bg.join(', ')})` : P.bg)); // palette.ts: stops, colour, gradient string or photo + overlay\nR.setProperty('--glow', P.glow); R.setProperty('--ink', P.ink); R.setProperty('--shadow', P.shadow);\nR.setProperty('--tf', (job.fonts.titleStack ?? [job.fonts.title]).map(f => `'${f}'`).join(', ') + ', sans-serif');\nR.setProperty('--ar', `${dev.w} / ${dev.h + dev.bar}`);\nR.setProperty('--appH', `${100 * dev.h / (dev.h + dev.bar)}%`);\nR.setProperty('--barH', `${100 * dev.bar / (dev.h + dev.bar)}%`);\nconst c = document.getElementById('c');\n// device place and size from featureLayout() (lib.ts): fit 'contain' keeps the rotated phone inside the canvas\nconst D = job.device, tel = c.querySelector('.tel');\nif (D) Object.assign(tel.style, { left: D.left + 'px', top: D.top + 'px', width: D.width + 'px', transform: `rotate(${D.angle}deg)` });\nconst src = `/frames/${encodeURIComponent(lang)}/phone/${encodeURIComponent(job.frame)}`;\ndocument.getElementById('f').src = src;\ndocument.getElementById('bar').style.backgroundImage = `url('${src}')`;\nc.insertAdjacentHTML('beforeend', job.logo ? '<img class=\"logo\" src=\"/logo\">' : `<div class=\"name\">${String(job.appName).replace(/</g, '&lt;')}</div>`);\nlet seed = 7; const rnd = () => ((seed = (seed * 1664525 + 1013904223) >>> 0) / 4294967296);\nfor (let i = 0; i < 22; i++)\n  c.insertAdjacentHTML('beforeend', `<i class=\"spark\" style=\"left:${rnd() * 1024}px;top:${rnd() * 500}px;--s:${8 + rnd() * 18}px;--o:${.5 + rnd() * .5}\"></i>`);\nawait document.fonts.ready;\nawait Promise.all([...document.images].map(i => i.decode().catch(() => {})));\n// read by `shots render` -> report.json -> shots check: the phone's rotated outline must stay inside the canvas\ndocument.body.dataset.devices = JSON.stringify([...c.querySelectorAll('.tel')].map(t => { const r = t.getBoundingClientRect(); return { x: r.x, y: r.y, w: r.width, h: r.height }; }));\nif (D?.fit === 'bleed') document.body.dataset.bleed = '1';\n// logo / name box for the safe-margin rule (7 % of the width left / right, 5 % of the height at the top)\ndocument.body.dataset.boxes = JSON.stringify([...c.querySelectorAll('.logo, .name')].map(e => { const r = e.getBoundingClientRect(); return { el: e.matches('.logo') ? 'logo' : 'title', x: r.x, y: r.y, w: r.width, h: r.height }; }));\ndocument.body.dataset.ready = '1';\n</script>\n</body>\n</html>\n",
   "template-app.html": "<!doctype html>\n<html>\n<head>\n<meta charset=\"utf-8\">\n<link rel=\"stylesheet\" href=\"/fonts/fonts.css\">\n<!--\n  Store screenshot template, app style (shots.style 'app', the default for the app / subscription-app profiles).\n  template-app.html?s=<scene id>&w=<px>&h=<px>&lang=<id>[&device=tablet][&style=android][&v=<variant>]\n  Calm: a soft gradient (or solid) background, one clean device frame, a headline (two lines) and a subline. No\n  sunburst, no sparkles; badges only when the copy has them, drawn as quiet chips. Same /job.json as template.html\n  (palette: bg = gradient stops, ink = headline, glow = accent, shadow = device shadow).\n  Layout: everything is in u = W / 100; the text block is measured first, then the device fills the room below it.\n  device=landscape: u = H / 100, copy column on one side, the landscape frame in a Mac window (frame=window) or bare\n  (frame=none) on the other (as template.html). Safe margins: 7 % of the width left / right, 5 % of the height at the\n  top; text and logo boxes go to body.dataset.boxes for shots check.\n-->\n<style>\n  * { box-sizing: border-box; margin: 0; padding: 0; }\n  html, body { overflow: hidden; background: #fff; }\n  body { font-family: var(--bf); -webkit-font-smoothing: antialiased; color: var(--ink); }\n  #c { position: relative; overflow: hidden; width: var(--W); height: var(--H); isolation: isolate; background: var(--bg); }\n  .soft { position: absolute; left: 50%; top: var(--softY); width: calc(var(--u) * 140); height: calc(var(--u) * 110); z-index: -1;\n    transform: translate(-50%, -50%); border-radius: 50%; background: radial-gradient(closest-side, var(--accentSoft), transparent); }\n\n  .top { position: absolute; left: 0; right: 0; top: calc(var(--u) * var(--top)); text-align: center; z-index: 6;\n    padding: 0 calc(var(--W) * .07); display: flex; flex-direction: column; align-items: center; }\n  .eyebrow { margin-bottom: calc(var(--u) * 2.4); font-size: calc(var(--u) * 2.9); font-weight: 700; letter-spacing: var(--kls, .14em);\n    text-transform: uppercase; color: var(--accent); line-height: 1.2; }\n  h1 { font-family: var(--tf); font-weight: var(--tw); line-height: var(--lh); letter-spacing: var(--ls, -.02em);\n    font-size: calc(var(--u) * var(--fs)); color: var(--ink); }\n  h1 span { display: block; width: max-content; max-width: none; margin: 0 auto; white-space: nowrap; }\n  h1 span + span { color: var(--line2); }\n  p.sub { margin-top: calc(var(--u) * 2.4); max-width: calc(var(--u) * 78); font-size: calc(var(--u) * var(--sub));\n    line-height: 1.38; font-weight: 500; color: var(--ink); opacity: .72; text-wrap: balance; }\n  .logo { width: min(100%, calc(var(--u) * 60)); max-height: calc(var(--u) * 26); object-fit: contain; margin-bottom: calc(var(--u) * 3); }\n\n  /* device: a plain modern phone, dark bezel, soft shadow */\n  .tel { position: absolute; z-index: 3; width: var(--pw); aspect-ratio: var(--ar); left: var(--px); top: var(--py);\n    transform: translateX(-50%) rotate(var(--pr, 0deg)); transform-origin: 50% 40%;\n    border-radius: calc(var(--pw) * .155); padding: calc(var(--pw) * .022); background: #121317;\n    box-shadow: inset 0 0 0 calc(var(--pw) * .005) #3a3c44, 0 calc(var(--u) * 2) calc(var(--u) * 4) rgba(0,0,0,.08),\n      0 calc(var(--u) * 5) calc(var(--u) * 12) var(--shadow); }\n  .tel.back { z-index: 2; opacity: .96; }\n  .screen { position: relative; width: 100%; height: 100%; overflow: hidden; background: #fff; border-radius: calc(var(--pw) * .135); }\n  .screen img.app { position: absolute; left: 0; bottom: 0; width: 100%; height: var(--appH); object-fit: cover; object-position: top; }\n  .bar { position: absolute; top: 0; left: 0; right: 0; height: var(--barH); display: flex; align-items: center;\n    justify-content: space-between; padding: 0 8.5% 0 11.5%; font-family: -apple-system, 'SF Pro Text', var(--bf), sans-serif;\n    font-weight: 600; font-size: calc(var(--pw) * .041); z-index: 2; color: var(--barInk, #fff);\n    background: #ffffff center top / 100% 60000% no-repeat; }\n  .bar svg { height: calc(var(--pw) * .03); width: auto; margin-left: calc(var(--pw) * .012); }\n  .island { position: absolute; top: calc(var(--pw) * .025); left: 50%; transform: translateX(-50%); width: 30%; height: calc(var(--pw) * .082);\n    background: #000; border-radius: 999px; z-index: 3; }\n  .tablet .tel { border-radius: calc(var(--pw) * .06); padding: calc(var(--pw) * .018); }\n  .tablet .screen { border-radius: calc(var(--pw) * .044); }\n  .tablet .bar { padding: 0 5%; font-size: calc(var(--pw) * .024); }\n  .tablet .bar svg { height: calc(var(--pw) * .018); }\n  .tablet .island { width: calc(var(--pw) * .016); height: calc(var(--pw) * .016); top: calc(var(--pw) * .007); }\n  .android .tel { border-radius: calc(var(--pw) * .04); padding: calc(var(--pw) * .014); }\n  .android .screen { border-radius: calc(var(--pw) * .028); }\n  .android .island { width: calc(var(--pw) * .013); height: calc(var(--pw) * .013); top: calc(var(--pw) * .009); }\n  .android .bar { padding: 0 4%; }\n\n  .land .top { right: auto; width: var(--colW); padding: 0; left: var(--colL); }\n  .lwin { position: absolute; z-index: 3; left: var(--lx); top: var(--ly); width: var(--lw); border-radius: calc(var(--lw) * .012);\n    overflow: hidden; background: #1c1c1e; box-shadow: 0 calc(var(--u) * 2) calc(var(--u) * 4) rgba(0,0,0,.08), 0 calc(var(--u) * 5) calc(var(--u) * 12) var(--shadow); }\n  .lwin .tb { height: calc(var(--lw) * .028); display: flex; align-items: center; gap: calc(var(--lw) * .006); padding-left: calc(var(--lw) * .012); background: #e8e8ea; }\n  .lwin .tb i { width: calc(var(--lw) * .009); height: calc(var(--lw) * .009); border-radius: 50%; background: #ff5f57; }\n  .lwin .tb i:nth-child(2) { background: #febc2e; } .lwin .tb i:nth-child(3) { background: #28c840; }\n  .lwin img { display: block; width: 100%; aspect-ratio: var(--lar); object-fit: cover; }\n  .lwin.bare { border-radius: calc(var(--lw) * .02); } .lwin.bare .tb { display: none; }\n  .chip { position: absolute; z-index: 9; display: flex; flex-direction: column; padding: calc(var(--u) * 1.8) calc(var(--u) * 3);\n    border-radius: calc(var(--u) * 3); background: rgba(255,255,255,.92); color: #111827; white-space: nowrap;\n    box-shadow: 0 calc(var(--u) * 1) calc(var(--u) * 3.5) rgba(15,23,42,.14); }\n  .chip b { font-family: var(--tf); font-weight: 700; font-size: calc(var(--u) * 3.6); line-height: 1.1; }\n  .chip small { font-size: calc(var(--u) * 2.3); font-weight: 500; opacity: .65; margin-top: calc(var(--u) * .3); }\n</style>\n</head>\n<body>\n<div id=\"c\"></div>\n<script type=\"module\">\nconst q = new URLSearchParams(location.search);\nconst W = +q.get('w'), H = +q.get('h'), LANG = q.get('lang'), SID = q.get('s'), V = q.get('v') ?? '';\nconst tablet = q.get('device') === 'tablet', LAND = q.get('device') === 'landscape';\nconst job = await (await fetch(`/job.json?lang=${encodeURIComponent(LANG)}&s=${encodeURIComponent(SID)}&v=${encodeURIComponent(V)}`)).json();\nconst S = job.scene, C = job.copy, P = job.palette;\nconst u = LAND ? H / 100 : W / 100, Hu = H / u;\nconst dev = LAND ? job.landscape : tablet ? job.tablet : job.phone;\nconst FR = `/frames/${encodeURIComponent(LANG)}/${LAND ? 'landscape' : tablet ? 'tablet' : 'phone'}/`;\nconst MX = W * .07, MT = H * .05;                       // safe margins (lib.ts SAFE_MARGIN)\nconst colW = W * .36, colL = job.side === 'right' ? W - MX - colW : MX;\n\ndocument.documentElement.lang = LANG;\nconst RTL = !!job.rtl;\nconst R = document.documentElement.style;\n// #rrggbb -> rgba with alpha, for the soft accent glow\nconst rgba = (hex, a) => { const m = /^#?([0-9a-f]{6})$/i.exec(hex); if (!m) return hex; const n = parseInt(m[1], 16); return `rgba(${n >> 16},${(n >> 8) & 255},${n & 255},${a})`; };\nconst lum = hex => { const m = /^#?([0-9a-f]{6})$/i.exec(hex); if (!m) return 1; const n = parseInt(m[1], 16); return (.299 * (n >> 16) + .587 * ((n >> 8) & 255) + .114 * (n & 255)) / 255; };\nconst tone = P.bgTone ?? (Array.isArray(P.bg) ? P.bg[1] : P.bg);\nconst dark = !!P.photo && P.photo.overlay >= .35 || lum(tone) < .45;\nR.setProperty('--W', W + 'px'); R.setProperty('--H', H + 'px'); R.setProperty('--u', u + 'px');\nR.setProperty('--ink', P.ink); R.setProperty('--accent', P.glow); R.setProperty('--shadow', P.shadow);\nR.setProperty('--line2', dark ? P.glow : P.ink);\nR.setProperty('--accentSoft', rgba(P.glow, dark ? .28 : .14));\n// bgCss from job.json (palette.ts bgCss / photoCss): stops, one colour, a CSS gradient string, or a photo under an overlay\nR.setProperty('--bg', P.bgCss ?? (Array.isArray(P.bg) ? `linear-gradient(180deg, ${P.bg.join(', ')})` : P.bg));\nconst T = job.fonts.title, B = job.fonts.body, X = job.fonts.script;\n// titleStack / bodyStack (from shots fonts): script face, the configured font, then any automatic Noto fallback\nconst fstack = (st, def) => (st ?? (X ? [X, def] : [def])).map(f => `'${f}'`).join(', ') + ', sans-serif';\nR.setProperty('--tf', fstack(job.fonts.titleStack, T));\nR.setProperty('--bf', fstack(job.fonts.bodyStack, B));\nR.setProperty('--tw', 750);\nconst CJK = /^(ja|ko|zh)/.test(LANG);\nR.setProperty('--lh', /^(ar|hi|fa|ur|th)/.test(LANG) ? 1.3 : CJK ? 1.18 : 1.06);\nif (X) { R.setProperty('--ls', '0'); R.setProperty('--kls', '0'); }\nif (LANG.startsWith('ja')) document.documentElement.style.wordBreak = 'auto-phrase';\nif (LANG.startsWith('ko')) document.documentElement.style.wordBreak = 'keep-all';\nif (tablet) document.body.classList.add('tablet');\nif (q.get('style') === 'android') document.body.classList.add('android');\nif (LAND) { document.body.classList.add('land'); R.setProperty('--colW', colW + 'px'); R.setProperty('--colL', colL + 'px'); }\nconst tall = !LAND && Hu > 200, wide = !LAND && Hu < 150;\nR.setProperty('--top', Math.max(tall ? 9.5 : wide ? 4.5 : 6, MT / u));\nR.setProperty('--fs', LAND ? 8.5 : tall ? 8.6 : wide ? 5.6 : 7);\nR.setProperty('--sub', LAND ? 3.4 : tall ? 3.7 : wide ? 2.6 : 3.2);\nconst AR = dev.w / (dev.h + dev.bar);\nR.setProperty('--ar', `${dev.w} / ${dev.h + dev.bar}`);\nR.setProperty('--appH', `${100 * dev.h / (dev.h + dev.bar)}%`);\nR.setProperty('--barH', `${100 * dev.bar / (dev.h + dev.bar)}%`);\n\nconst c = document.getElementById('c');\nconst esc = s => { const t = String(s ?? '').replace(/&/g, '&amp;').replace(/</g, '&lt;');\n  return RTL ? t.replace(/\\d+(?:\\s*\\/\\s*\\d+)?/g, m => '⁦' + m + '⁩') : t; };\nlet top = '';\nif (S.hero && job.logo) top += `<img class=\"logo\" src=\"/logo\">`;\nif (C.eyebrow) top += `<div class=\"eyebrow\">${esc(C.eyebrow)}</div>`;\ntop += `<h1><span>${esc(C.title?.[0])}</span>${C.title?.[1] ? `<span>${esc(C.title[1])}</span>` : ''}</h1>`;\nif (C.sub) top += `<p class=\"sub\">${esc(C.sub)}</p>`;\nc.innerHTML = `<div class=\"soft\"></div><div class=\"top\"${RTL ? ' dir=\"rtl\"' : ''}>${top}</div>`;\n\nawait document.fonts.ready;\nawait Promise.all([...document.images].map(i => i.decode().catch(() => {})));\nconst overflow = [];\nfor (const [i, sp] of [...c.querySelectorAll('h1 span')].entries()) {\n  const max = LAND ? colW : W - 2 * MX, wd = sp.getBoundingClientRect().width;\n  let f = 1; while (wd * f > max && f > .55) f -= .02;\n  if (f < 1) sp.style.fontSize = `calc(${getComputedStyle(sp).fontSize} * ${f.toFixed(2)})`;\n  if (wd * f > max + 1) overflow.push(`title line ${i + 1} is too long even at 55 % size: shorten it`);\n  else if (f < .7) overflow.push(`title line ${i + 1} shrunk to ${Math.round(f * 100)} %: consider shorter words`);\n}\nconst subEl = c.querySelector('p.sub');\nif (subEl) { const lines = Math.round(subEl.getBoundingClientRect().height / parseFloat(getComputedStyle(subEl).lineHeight)); if (lines > 3) overflow.push(`subtitle wraps to ${lines} lines (max 3)`); }\nconst textBottom = c.querySelector('.top').getBoundingClientRect().bottom / u;\nportrait: {\nif (LAND) {\n  const topEl = c.querySelector('.top'), bh = topEl.getBoundingClientRect().height;\n  topEl.style.top = Math.max(MT, (H - bh) / 2) + 'px';\n  if (bh > H - MT * 2) overflow.push('text block is taller than the image: shorten the copy');\n  const f = S.frames[0], src = FR + encodeURIComponent(f.src), bare = q.get('frame') === 'none';\n  const x0 = job.side === 'right' ? W * .04 : colL + colW + W * .05, x1 = job.side === 'right' ? colL - W * .05 : W - W * .04;\n  let lw = x1 - x0;\n  const lh = k => k / (dev.w / dev.h) + (bare ? 0 : k * .028);\n  if (lh(lw) > H * .88) lw = lw * H * .88 / lh(lw);\n  R.setProperty('--lar', `${dev.w} / ${dev.h}`); R.setProperty('--softY', H / 2 + 'px');\n  c.insertAdjacentHTML('beforeend', `<div class=\"lwin front${bare ? ' bare' : ''}\" style=\"--lw:${lw}px;--lx:${(x0 + x1 - lw) / 2}px;--ly:${(H - lh(lw)) / 2}px\"><div class=\"tb\"><i></i><i></i><i></i></div><img src=\"${src}\"></div>`);\n  await Promise.all([...document.images].map(i => i.decode().catch(() => {})));\n  break portrait;\n}\n\nconst frames = S.frames.map(f => ({ x: 0, dy: 0, scale: 1, rotate: 0, ...f }));\nconst front = frames[0];\nconst pTop = textBottom + (tall ? 6 : 4.5);\nconst room = Hu - pTop + (S.over ?? 9);\nconst pw = Math.min(tablet ? 80 : 74, Math.max(52, room * AR)) * front.scale;\nconst ph = pw / AR;\nR.setProperty('--softY', (pTop + ph * .35) * u + 'px');\n\n// status bar text colour from the frame's own top row (dark text on a light app bar)\nasync function barInk(src) {\n  try {\n    const img = new Image(); img.src = src; await img.decode();\n    const cv = document.createElement('canvas'); cv.width = 8; cv.height = 2;\n    const g = cv.getContext('2d'); g.drawImage(img, 0, 0, img.naturalWidth, 2, 0, 0, 8, 2);\n    const d = g.getImageData(0, 0, 8, 1).data; let L = 0;\n    for (let i = 0; i < d.length; i += 4) L += .299 * d[i] + .587 * d[i + 1] + .114 * d[i + 2];\n    return L / (d.length / 4) > 150 ? '#111' : '#fff';\n  } catch { return '#fff'; }\n}\nconst BAR = `<span>9:41</span><span style=\"display:flex;align-items:center\">\n<svg viewBox=\"0 0 18 12\"><g fill=\"currentColor\"><rect x=\"0\" y=\"8\" width=\"3\" height=\"4\" rx=\".8\"/><rect x=\"5\" y=\"5.5\" width=\"3\" height=\"6.5\" rx=\".8\"/><rect x=\"10\" y=\"3\" width=\"3\" height=\"9\" rx=\".8\"/><rect x=\"15\" y=\"0\" width=\"3\" height=\"12\" rx=\".8\"/></g></svg>\n<svg viewBox=\"0 0 16 12\"><path fill=\"currentColor\" d=\"M8 2.2c2.3 0 4.4.9 6 2.4l1.3-1.3A10.3 10.3 0 0 0 8 .4C5.2.4 2.6 1.5.7 3.3L2 4.6a8.5 8.5 0 0 1 6-2.4zm0 3.6c1.3 0 2.5.5 3.4 1.3l1.3-1.3A6.6 6.6 0 0 0 8 4c-1.8 0-3.4.7-4.7 1.8l1.3 1.3C5.5 6.3 6.7 5.8 8 5.8zm0 3.6c.4 0 .8.2 1.1.4L8 11.6 6.9 9.8c.3-.2.7-.4 1.1-.4z\"/></svg>\n<svg viewBox=\"0 0 27 13\"><rect x=\".5\" y=\".5\" width=\"23\" height=\"12\" rx=\"3.5\" fill=\"none\" stroke=\"currentColor\" stroke-opacity=\".45\"/><rect x=\"2\" y=\"2\" width=\"20\" height=\"9\" rx=\"2.2\" fill=\"currentColor\"/><path d=\"M25 4.5v4c.8-.3 1.4-1.1 1.4-2s-.6-1.7-1.4-2z\" fill=\"currentColor\" fill-opacity=\".45\"/></svg></span>`;\n\nlet html = '';\nconst phone = async (f, cls) => {\n  const w = pw / front.scale * f.scale, src = FR + encodeURIComponent(f.src);\n  const ink = await barInk(src);\n  return `<div class=\"tel ${cls}\" style=\"--pw:${w * u}px;--px:${(50 + f.x) * u}px;--py:${(pTop + f.dy) * u}px;--pr:${f.rotate}deg\"><div class=\"screen\">\n    <div class=\"bar\" style=\"background-image:url('${src}');--barInk:${ink}\">${BAR}</div><div class=\"island\"></div><img class=\"app\" src=\"${src}\"></div></div>`;\n};\nfor (const f of frames.slice(1)) html += await phone(f, 'back');\nhtml += await phone(front, 'front');\n(S.badges ?? []).forEach((b, i) => {\n  const [big, small] = (C.badges ?? [])[i] ?? [''];\n  if (!big) return;\n  const pos = b.side === 'l' ? `left:${5 * u}px` : `right:${5 * u}px`;\n  html += `<div class=\"chip\"${RTL ? ' dir=\"rtl\"' : ''} style=\"${pos};top:${Math.min(pTop + ph * b.y, Hu - 14) * u}px\"><b>${esc(big)}</b>${small ? `<small>${esc(small)}</small>` : ''}</div>`;\n});\nc.insertAdjacentHTML('beforeend', html);\nawait Promise.all([...document.images].map(i => i.decode().catch(() => {})));\nif (textBottom > Hu * .45) overflow.push(`text block covers ${Math.round(textBottom / Hu * 100)} % of the height (the app should be the star)`);\nfor (const b of c.querySelectorAll('.chip')) { const r = b.getBoundingClientRect(); if (r.left < 0 || r.right > W || r.bottom > H) overflow.push(`badge \"${b.textContent.trim().slice(0, 30)}\" runs off the image`); }\n}\ndocument.body.dataset.overflow = JSON.stringify(overflow);\ndocument.body.dataset.boxes = JSON.stringify([...c.querySelectorAll('.top .logo, .top .eyebrow, .top h1 span, .top p.sub')].map(e => { const r = e.getBoundingClientRect();\n  return { el: e.matches('.logo') ? 'logo' : e.matches('.eyebrow') ? 'eyebrow' : e.matches('p') ? 'subtitle' : 'title', x: r.x, y: r.y, w: r.width, h: r.height }; }).filter(b => b.w > 0 && b.h > 0));\n// the front device only: back phones of a fanned layout peek in from the side on purpose\ndocument.body.dataset.devices = JSON.stringify([...c.querySelectorAll('.tel.front, .lwin')].map(t => { const r = t.getBoundingClientRect(); return { x: r.x, y: r.y, w: r.width, h: r.height }; }));\ndocument.body.dataset.ready = '1';\n</script>\n</body>\n</html>\n",
   "template-bleed.html": "<!doctype html>\n<html>\n<head>\n<meta charset=\"utf-8\">\n<link rel=\"stylesheet\" href=\"/fonts/fonts.css\">\n<!-- Full-bleed layout (shots.layout \"bleed\"): the app's own frame fills the whole image, no device and no background,\n     and a short caption sits in one corner. Legibility comes from a text shadow and a soft glow only: no band, no\n     scrim, no box behind the words. template-bleed.html?s=<scene>&w=<px>&h=<px>&lang=<id>&size=<size key>.\n     The frame is read at the size's own pixels: /frames/<lang>/<size>/<src> (shots check: frames for \"bleed\").\n     Colours from the scene palette: ink = the tight outline shadow, shadow = the wide soft glow, glow = line 2.\n     A dark custom palette suits it, e.g. { bg: [...], ink: 'rgba(4,18,38,.92)', shadow: 'rgba(4,22,48,.55)', glow: '#ffd76a' }. -->\n<style>\n  * { box-sizing: border-box; margin: 0; padding: 0; }\n  html, body { width: var(--W); height: var(--H); overflow: hidden; background: #000; }\n  #c { position: relative; width: var(--W); height: var(--H); overflow: hidden; }\n  #c > img.frame { position: absolute; inset: 0; width: 100%; height: 100%; object-fit: cover; display: block; }\n  .cap { position: absolute; max-width: calc(var(--W) * var(--mw)); display: flex; flex-direction: column; gap: calc(var(--fs) * .06);\n    font-family: var(--tf); font-weight: var(--tw); font-size: var(--fs); line-height: var(--lh); color: #fff; letter-spacing: var(--ls, .005em);\n    text-wrap: balance;\n    /* a dark outline-shadow for edges, then a wide soft glow: readable on light water and on dark rock alike */\n    text-shadow: 0 0 calc(var(--fs) * .05) var(--ink), 0 calc(var(--fs) * .04) calc(var(--fs) * .08) var(--ink),\n      0 0 calc(var(--fs) * .3) var(--shadow), 0 0 calc(var(--fs) * .6) var(--shadow); }\n  .cap span { display: block; }\n  .cap span + span { color: var(--accent); }\n  .cap.tl { left: var(--mx); top: var(--my); }\n  .cap.tr { right: var(--mx); top: var(--my); text-align: right; align-items: flex-end; }\n  .cap.bl { left: var(--mx); bottom: var(--my); }\n  .cap.br { right: var(--mx); bottom: var(--my); text-align: right; align-items: flex-end; }\n  .cap[dir=\"rtl\"].tl, .cap[dir=\"rtl\"].bl { text-align: right; }\n</style>\n</head>\n<body>\n<div id=\"c\"></div>\n<script type=\"module\">\nconst q = new URLSearchParams(location.search);\nconst W = +q.get('w'), H = +q.get('h'), LANG = q.get('lang'), SID = q.get('s'), V = q.get('v') ?? '', SIZE = q.get('size') ?? '';\nconst job = await (await fetch(`/job.json?lang=${encodeURIComponent(LANG)}&s=${encodeURIComponent(SID)}&v=${encodeURIComponent(V)}`)).json();\nconst S = job.scene, C = job.copy, P = job.palette;\nconst R = document.documentElement.style;\ndocument.documentElement.lang = LANG;\nconst short = Math.min(W, H);\nR.setProperty('--W', W + 'px'); R.setProperty('--H', H + 'px');\n// caption size from the short side: about 9 % of it on a landscape phone, a little less on squarer canvases\nconst fs = short * (W / H > 1.9 ? .092 : W / H > 1.5 ? .08 : .066) * (S.captionScale ?? 1);\nR.setProperty('--fs', fs + 'px');\nconst inset = S.captionInset ?? .05;                   // distance from the corner, share of the short side\nR.setProperty('--mx', (short * (inset + .005)) + 'px'); R.setProperty('--my', (short * inset) + 'px');\n// the caption keeps to its corner: at most 40 % of a landscape image's width (scene.captionWidth), so it stays clear of\n// what an app centres at the top\nconst MW = S.captionWidth ?? (W > H ? .4 : .84);\nR.setProperty('--mw', MW);\n// palette: ink = the tight outline shadow, shadow = the wide soft glow, glow = the second line's colour\nR.setProperty('--ink', P.ink); R.setProperty('--shadow', P.shadow); R.setProperty('--accent', P.glow);\nconst X = job.fonts.script;\nconst fstack = (st, def) => (st ?? (X ? [X, def] : [def])).map(f => `'${f}'`).join(', ') + ', sans-serif';\nR.setProperty('--tf', fstack(job.fonts.titleStack, job.fonts.title));\nR.setProperty('--tw', X ? 900 : job.fonts.titleWeight ?? 400);\nconst CJK = /^(ja|ko|zh)/.test(LANG);\nR.setProperty('--lh', /^(ar|hi|fa|ur|th)/.test(LANG) ? 1.3 : CJK ? 1.16 : 1.04);\nif (X) R.setProperty('--ls', '0');\nif (LANG.startsWith('ja')) document.documentElement.style.wordBreak = 'auto-phrase';\nif (LANG.startsWith('ko')) document.documentElement.style.wordBreak = 'keep-all';\nconst RTL = !!job.rtl;\nconst esc = s => String(s ?? '').replace(/&/g, '&amp;').replace(/</g, '&lt;');\nconst corner = ['tl', 'tr', 'bl', 'br'].includes(S.corner) ? S.corner : 'tl';\nconst src = `/frames/${encodeURIComponent(LANG)}/${encodeURIComponent(SIZE)}/${encodeURIComponent(S.frames[0].src)}`;\nconst lines = (C.title ?? []).filter(Boolean);\nconst c = document.getElementById('c');\nc.innerHTML = `<img class=\"frame\" src=\"${src}\"><div class=\"cap ${corner}\"${RTL ? ' dir=\"rtl\"' : ''}>${lines.map(l => `<span>${esc(l)}</span>`).join('')}</div>`;\nawait document.fonts.ready;\nawait Promise.all([...document.images].map(i => i.decode().catch(() => {})));\nconst overflow = [];                                    // read by `shots render` -> report.json -> shots check / gallery\nconst img = c.querySelector('img.frame');\nif (!img.naturalWidth) overflow.push(`frame ${SIZE}/${S.frames[0].src} did not load`);\nelse {\n  const ar = img.naturalWidth / img.naturalHeight, want = W / H;\n  if (Math.abs(ar / want - 1) > .01) overflow.push(`frame ${img.naturalWidth}x${img.naturalHeight} is cropped to fit ${W}x${H}: capture it at the size's aspect`);\n  if (img.naturalWidth < W * .99) overflow.push(`frame ${img.naturalWidth}x${img.naturalHeight} is upscaled to ${W}x${H}: capture it at native resolution`);\n}\nconst cap = c.querySelector('.cap');\nconst maxW = W * MW;\nfor (const [i, sp] of [...cap.querySelectorAll('span')].entries()) {   // shrink a line that would not fit its corner\n  const wd = sp.scrollWidth;\n  let f = 1; while (wd * f > maxW && f > .6) f -= .02;\n  if (f < 1) sp.style.fontSize = `${(fs * f).toFixed(1)}px`;\n  if (wd * f > maxW + 1) overflow.push(`caption line ${i + 1} is too long even at 60 % size: shorten it`);\n}\nconst r = cap.getBoundingClientRect();\nif (r.left < 0 || r.top < 0 || r.right > W || r.bottom > H) overflow.push('caption runs off the image');\nif (r.height > H * .42) overflow.push(`caption covers ${Math.round(r.height / H * 100)} % of the height: shorten it`);\nif (lines.join(' ').split(/\\s+/).length > 6 && !CJK && !/^th/.test(LANG)) overflow.push('caption has more than 6 words: keep it to 3-5');\ndocument.body.dataset.overflow = JSON.stringify(overflow);\ndocument.body.dataset.devices = '[]';\ndocument.body.dataset.ready = '1';\n</script>\n</body>\n</html>\n",
diff --git a/cli/shots/capture-web.ts b/cli/shots/capture-web.ts
index 516c798..0229eeb 100644
--- a/cli/shots/capture-web.ts
+++ b/cli/shots/capture-web.ts
@@ -24,6 +24,7 @@ import type { ShotSpec, ShotsCapture } from '../lib/config';
 import { log, warn } from '../lib/log';
 import { type AuthPlan, expiredHint, landedOnLogin, maskSecrets, safeUrl } from './auth';
 import { shotsFor } from './devices';
+import { applySelectors, candidates, probe } from './selectors';
 import type { FrameDims } from './lib';
 
 type Device = 'phone' | 'tablet';
@@ -166,6 +167,7 @@ export async function captureWeb(browser: any, cap: ShotsCapture, jobs: WebJob[]
       if (!expired.has(safeUrl(s.page.url()))) { expired.add(safeUrl(s.page.url())); warn('shots', `${j.lang}/${j.device}/${j.name}: ${mask(expiredHint(s.page.url()))}`); }
       throw new Error(`landed on the sign-in page ${safeUrl(s.page.url())}`);
     }
+    await applySelectors(s.page, j.spec, { device: j.device, w: o.dims[j.device].w, h: o.dims[j.device].h }, waitTimeout); // waitSelector, click: a miss names the selector and the size
     if (j.spec.waitFor) await s.page.waitForFunction(j.spec.waitFor, null, { timeout: waitTimeout, polling: 50 });
     t.waitFor = Date.now() - t0; t0 = Date.now();
     for (const js of j.spec.eval ?? []) await s.page.evaluate(js);
@@ -245,3 +247,32 @@ export function writeCaptureState(root: string, report: CaptureReport, cache: Ca
   writeFileSync(cachePath(root), JSON.stringify(Object.fromEntries(Object.entries(cache).sort()), null, 1) + '\n');
   writeFileSync(join(root, '.storebound', 'capture-report.json'), JSON.stringify(report, null, 1) + '\n');
 }
+
+/* eslint-disable @typescript-eslint/no-explicit-any */
+/** `shots capture --dry --probe`: opens each page (no screenshot), runs the shot's waitFor, and reports per size which
+ *  selector candidates match. Returns the log lines; `missed` counts shots where no candidate of a list matched. */
+export async function probeSelectors(browser: any, jobs: WebJob[], o: { dims: Record<Device, FrameDims>; auth?: AuthPlan; timeoutMs?: number }): Promise<{ lines: string[]; missed: number }> {
+  const lines: string[] = []; let missed = 0;
+  for (const j of jobs) {
+    const lists = [['waitSelector', candidates(j.spec.waitSelector, j.device)], ...(Array.isArray(j.spec.click) && j.spec.click.some(c => typeof c !== 'string') ? j.spec.click : j.spec.click === undefined ? [] : [j.spec.click])
+      .map((c, i) => [`click[${i}]`, candidates(c as any, j.device)] as const)].filter(([, l]) => l.length) as [string, string[]][];
+    if (!lists.length) continue;
+    const d = o.dims[j.device];
+    const c = await browser.newContext({ viewport: { width: d.w, height: d.h }, deviceScaleFactor: 1, hasTouch: true, isMobile: true, serviceWorkers: 'block', locale: j.lang, ...(o.auth?.contextOptions ?? {}) });
+    try {
+      if (o.auth) await o.auth.prepare(c);
+      const page = await c.newPage();
+      await page.goto(j.url, { waitUntil: 'domcontentloaded', timeout: 90000 });
+      if (j.spec.waitFor) await page.waitForFunction(j.spec.waitFor, null, { timeout: o.timeoutMs ?? 20000, polling: 50 }).catch(() => lines.push(`${j.frame} ${d.w}x${d.h}: waitFor did not become true in ${(o.timeoutMs ?? 20000) / 1000}s`));
+      for (const [what, list] of lists) {
+        await page.waitForTimeout(500);
+        const res = await probe(page, list);
+        const hit = res.find(r => r.matches > 0);
+        if (!hit) missed++;
+        lines.push(`${j.frame} ${j.device} ${d.w}x${d.h} ${what}: ${hit ? `ok via ${hit.selector}` : 'MISS'} (${res.map(r => `${r.selector} -> ${r.matches < 0 ? 'invalid' : r.matches}`).join('; ')})`);
+      }
+    } catch (e) { missed++; lines.push(`${j.frame}: probe failed: ${(e as Error).message.split('\n')[0]!.slice(0, 200)}`); } finally { await c.close(); }
+  }
+  return { lines, missed };
+}
+/* eslint-enable @typescript-eslint/no-explicit-any */
diff --git a/cli/shots/capture.ts b/cli/shots/capture.ts
index 1267e7c..c5b6d24 100644
--- a/cli/shots/capture.ts
+++ b/cli/shots/capture.ts
@@ -1,6 +1,6 @@
 // Raw frames from a running build of your app or game, from any engine.
 //   storebound shots capture [--lang en,tr] [--only hero,shop] [--device phone|tablet] [--source web|ios-sim|android-emu|folder]
-//                            [--dry] [--keep-booted] [--concurrency N] [--only-missing | --force]
+//                            [--dry [--probe]] [--keep-booted] [--concurrency N] [--only-missing | --force]
 // Frames go to <shots.frames>/<lang>/<device>/<name>.png: the screen BELOW the status bar (the template draws one).
 // shots.capture.source (default web):
 //   web          headless Chromium (playwright), mobile viewport + touch at phone / tablet size. Each shot:
@@ -18,7 +18,9 @@
 //   folder       your own frames (any tool, any engine): only checks that every frame the scenes use exists with the
 //                right aspect ratio and resolution.
 // A simulator storebound booted itself is shut down at the end (--keep-booted keeps it); one that was already running is
-// left running with its status bar restored. --dry prints the simctl / adb commands without running them.
+// left running with its status bar restored. Web shots may list waitSelector / click candidates per layout
+// ({ phone, tablet, any }, data attributes first, text= fallback); --dry prints them per size, --dry --probe opens the
+// pages and reports which candidate matched or MISSed on which size. --dry prints the simctl / adb commands without running them.
 // Simulator / emulator screenshots are full screen: cropTop rows (the status bar) are cut so the frame fits the template
 // (default per device class from the frame dims: phone 162 px of a 6.9" iPhone, tablet 48 px of a 13" iPad with apple.ipad).
 // The app or game needs switches for this: language, scene, fixed seed, no ads / tutorial, freeze. See the store-screenshots skill.
@@ -26,7 +28,8 @@ import { existsSync, mkdirSync, readFileSync, rmSync, writeFileSync } from 'node
 import { homedir } from 'node:os';
 import { join } from 'node:path';
 import { spawnSync } from 'node:child_process';
-import type { ShipConfig, ShotsCapture } from '../lib/config';
+import type { ShipConfig, ShotSelector, ShotsCapture } from '../lib/config';
+import { candidates } from './selectors';
 import type { Ctx } from '../lib/ctx';
 import { need } from '../lib/ctx';
 import { done, log, step, warn } from '../lib/log';
@@ -36,7 +39,7 @@ import { adbAppLocaleArgs, adbDemoExitArgs, adbDemoModeArgs, adbForceStopArgs, a
   cropArgs, cropTopFor, fill, pickSimulator, shotsFor, simBootArgs, simBootStatusArgs, simInstallArgs, simLaunchArgs, simOpenUrlArgs,
   simScreenshotArgs, simShutdownArgs, simStatusBarArgs, simStatusBarClearArgs, simTarget, SOURCES, type Source, TOOL_HINTS, validateCapture } from './devices';
 import { type CopyFile, copyText, type FrameDims, frameDims } from './lib';
-import { captureWeb, defaultConcurrency, hashPaths, hashServed, planWeb, readCache, selectJobs, summaryLines, writeCaptureState } from './capture-web';
+import { captureWeb, defaultConcurrency, probeSelectors, hashPaths, hashServed, planWeb, readCache, selectJobs, summaryLines, writeCaptureState } from './capture-web';
 import { imageInfo } from './spec';
 import { authPlan, safeUrl } from './auth';
 import * as rt from '../lib/rt';
@@ -122,7 +125,21 @@ export async function run(ctx: Ctx): Promise<void> {
 
   if (source === 'web') {
     if (dry) {
-      for (const lang of langs) for (const device of devices) for (const [name, s] of shotsFor(cap, device, only)) progress(`${lang}/${device}/${name}.png <- ${cap.baseUrl}${(s.path ?? '/').replaceAll('{lang}', lang)}`);
+      for (const lang of langs) for (const device of devices) for (const [name, s] of shotsFor(cap, device, only)) {
+        progress(`${lang}/${device}/${name}.png <- ${cap.baseUrl}${(s.path ?? '/').replaceAll('{lang}', lang)}`);
+        const sel: [string, string[]][] = [['waitSelector', candidates(s.waitSelector, device)], ...(Array.isArray(s.click) && s.click.some(c => typeof c !== 'string') ? s.click : s.click === undefined ? [] : [s.click]).map((c, k) => [`click[${k}]`, candidates(c as ShotSelector, device)] as [string, string[]])];
+        for (const [what, list] of sel) if (list.length) log('shots', `  ${what} on ${device} ${dims[device].w}x${dims[device].h}: ${list.join(' | ')}`);
+      }
+      if (a.has('probe')) { // open the pages and test every candidate on each size (needs the app running at baseUrl)
+        need(cap.baseUrl, 'shots.capture.baseUrl');
+        const auth = cap.auth ? authPlan(cap.auth, { root, baseUrl: cap.baseUrl! }) : undefined;
+        const jobs = planWeb(cap, { langs, devices, only, dims, framesDir, build: '', fonts: '' });
+        const browser = await launch(root, { headless: true, args: ['--mute-audio'] });
+        let r;
+        try { r = await probeSelectors(browser, jobs, { dims, ...(auth ? { auth } : {}) }); } finally { await closeBrowser(browser); }
+        for (const l of r.lines) log('shots', l);
+        if (r.missed) throw new Error(`${r.missed} selector lists matched nothing (see MISS lines above: the size and every candidate with its match count)`);
+      }
       if (cap.auth) log('shots', cap.auth.storageState ? `would load the signed-in state from ${cap.auth.storageState} into every context` : `would sign every context in first: ${(cap.auth.request?.method ?? 'POST').toUpperCase()} ${safeUrl(cap.auth.request?.url ?? '')} (values from .storebound/credentials.json / env, never shown)`);
       return done('shots', `capture planned (dry run): ${total} frames from web`);
     }
diff --git a/cli/shots/check.ts b/cli/shots/check.ts
index 7f322ee..2697d8f 100644
--- a/cli/shots/check.ts
+++ b/cli/shots/check.ts
@@ -15,7 +15,7 @@ import type { ShipConfig } from '../lib/config';
 import type { Ctx } from '../lib/ctx';
 import { log, printJson } from '../lib/log';
 import { checkFrames, type FrameIssue } from './devices';
-import { defaultSizes, frameDims, renderDims, SIZES } from './lib';
+import { defaultSizes, frameDims, frameLangs, langHasFrames, renderDims, SIZES } from './lib';
 import type { LocalIssue, RendersCheck } from '../lib/validate-rules';
 import { allIssues, requiredSets, type RendersScan, resolvedTablets, scanRenders, storeOf } from './report';
 import { imageInfo } from './spec';
@@ -125,9 +125,13 @@ export async function run(ctx: Ctx): Promise<void> {
   const tablets = resolvedTablets(config, resolve(ctx.args.get('src') ?? config.renders ?? config.shots?.out ?? 'store/renders'));
   const issues = [...allIssues(scan), ...localFontIssues(readManifest(fontsDirOf(root))).map(issue => ({ where: '.storebound/fonts/fonts.json', issue })),
     ...backgroundIssues(config, resolve, tablets)];
-  const frameIssues = cap?.source === 'folder' ? checkFrameFolder(config, resolve(cap.folder ?? config.shots!.frames), scan.langs, tablets) : [];
+  // languages with copy but no frames use the default language's (shots.perLanguageFrames: true requires them per language)
+  const framesRoot = resolve(cap?.folder ?? config.shots!.frames), def = config.play?.defaultLanguage ?? config.languages[0]!.id;
+  const fl = frameLangs(scan.langs, l => langHasFrames(framesRoot, l), def, config.shots?.perLanguageFrames);
+  const frameIssues = cap?.source === 'folder' ? checkFrameFolder(config, framesRoot, scan.langs.filter(l => !fl.borrowed.includes(l)), tablets) : [];
+  if (fl.borrowed.length && !ctx.args.has('json')) console.log(`info  frames: no frames for ${fl.borrowed.join(', ')}; they use the ${def} frames (shots.perLanguageFrames: true requires per-language frames)`);
   if (ctx.args.has('json')) {
-    printJson({ images: scan.images.length, videos: scan.videos.length, issues, frames: frameIssues });
+    printJson({ images: scan.images.length, videos: scan.videos.length, issues, frames: frameIssues, info: fl.borrowed.map(l => ({ lang: l, framesFrom: def })) });
   } else {
     for (const { where, issue } of issues) console.log(`${issue.level === 'error' ? 'ERROR' : 'warn '} ${where}: ${issue.msg}`);
     for (const f of frameIssues) console.log(`ERROR frames/${f.file}: ${f.msg}`);
diff --git a/cli/shots/devices.ts b/cli/shots/devices.ts
index fecf941..1fa9f20 100644
--- a/cli/shots/devices.ts
+++ b/cli/shots/devices.ts
@@ -6,6 +6,7 @@
 //   android-emu  adb: demo-mode status bar, per-app language (Android 13+), am start with deep link / extras,
 //                exec-out screencap. Emulator or a USB device.
 //   folder       bring your own frames: <frames>/<lang>/<phone|tablet>/<name>.png, checked for size.
+import { validateSelector } from './selectors';
 import type { ShotsCapture, ShotSpec, VideoRecord } from '../lib/config';
 import { validateAuth } from './auth';
 
@@ -37,6 +38,10 @@ export function validateCapture(c: ShotsCapture | undefined): string[] {
   if (src !== 'folder' && (!c.shots || !Object.keys(c.shots).length)) e.push('shots.capture.shots: at least one shot');
   for (const [name, s] of Object.entries(c.shots ?? {})) {
     if (!/^[A-Za-z0-9._-]+$/.test(name)) e.push(`shots.capture.shots.${name}: name must be a file name (letters, digits, . _ -)`);
+    if (src === 'web') {
+      if (s.waitSelector !== undefined) e.push(...validateSelector(`shots.capture.shots.${name}.waitSelector`, s.waitSelector));
+      if (s.click !== undefined) for (const [i, c] of (Array.isArray(s.click) && s.click.some(x => typeof x !== 'string') ? s.click : [s.click]).entries()) e.push(...validateSelector(`shots.capture.shots.${name}.click[${i}]`, c));
+    } else if (s.waitSelector !== undefined || s.click !== undefined) e.push(`shots.capture.shots.${name}: waitSelector / click only apply to source web`);
     if (s.navigate && !['spa', 'reload'].includes(s.navigate)) e.push(`shots.capture.shots.${name}.navigate: spa | reload`);
     if (s.device && !['phone', 'tablet', 'both'].includes(s.device)) e.push(`shots.capture.shots.${name}.device: phone | tablet | both`);
     if (src === 'web' && s.path === undefined) e.push(`shots.capture.shots.${name}.path: URL path (source web)`);
diff --git a/cli/shots/feature-bleed.html b/cli/shots/feature-bleed.html
index 848715d..aeebd9c 100644
--- a/cli/shots/feature-bleed.html
+++ b/cli/shots/feature-bleed.html
@@ -37,6 +37,12 @@ await document.fonts.ready;
 await Promise.all([...document.images].map(i => i.decode().catch(() => {})));
 const overflow = [];
 const img = c.querySelector('img.frame');
+// shots.feature.rotate: turn the frame like a scene frame's rotate; a quarter turn swaps the box so the image still covers the canvas
+const rot = Number(job.rotate) || 0;
+if (rot) {
+  const quarter = Math.abs(rot % 180) === 90, W = quarter ? 500 : 1024, H = quarter ? 1024 : 500;
+  Object.assign(img.style, { inset: 'auto', left: (512 - W / 2) + 'px', top: (250 - H / 2) + 'px', width: W + 'px', height: H + 'px', transform: `rotate(${rot}deg)` });
+}
 if (!img.naturalWidth) overflow.push(`feature frame ${job.frame} did not load`);
 else if (img.naturalWidth < 1024) overflow.push(`feature frame ${img.naturalWidth}x${img.naturalHeight} is upscaled: capture it at least 1024 px wide`);
 const t = c.querySelector('.name, .logo').getBoundingClientRect();
diff --git a/cli/shots/fonts.ts b/cli/shots/fonts.ts
index 2f24be8..09ea404 100644
--- a/cli/shots/fonts.ts
+++ b/cli/shots/fonts.ts
@@ -6,7 +6,7 @@
 // sublines, badge labels; plus the Noto face of a non-Latin script). A character the stack lacks gets an automatic
 // Noto fallback (logged; `shots check` errors on renders that used it unless shots.fonts.fallback lists it); a
 // character no fallback covers fails with the language and the characters.
-//   storebound shots fonts [--json]     (re-run after editing the copy or the fonts)
+//   storebound shots fonts [--lang en,tr] [--json]   (--lang limits the report to those languages; the manifest keeps all)     (re-run after editing the copy or the fonts)
 // Out: <project>/.storebound/fonts/*.woff2 + fonts.css + fonts.json (faces and the per-language stacks, read by render).
 // The Google fonts are SIL Open Font License 1.1. A local font file in shots.fonts (local-fonts.ts) gets the same cmap
 // check, is read in place (never copied) and recorded with its path, sha256 and license note.
@@ -107,7 +107,10 @@ export async function run(ctx: Ctx): Promise<void> {
   }
   for (const f of Object.values(local)) if (!f.license) warn('shots', `local font ${f.path} has no license note: add license ('OFL-1.1', 'proprietary', ...) to its shots.fonts entry`);
   let auto = 0;
-  for (const [lang, l] of Object.entries(manifest.langs)) for (const f of l.fallbacks) {
+  const only = ctx.args.list('lang');
+  const unknown = only.filter(l => !(l in manifest.langs));
+  if (unknown.length) throw new Error(`--lang: no copy or config language ${unknown.join(', ')} (known: ${Object.keys(manifest.langs).join(', ')})`);
+  for (const [lang, l] of Object.entries(manifest.langs)) for (const f of only.length && !only.includes(lang) ? [] : l.fallbacks) {
     const ok = manifest.faces[f.face]?.chosen;
     if (!ok) auto++;
     const base = f.role === 'title' ? title : body;
diff --git a/cli/shots/lib.ts b/cli/shots/lib.ts
index 5b882ab..f20964c 100644
--- a/cli/shots/lib.ts
+++ b/cli/shots/lib.ts
@@ -1,4 +1,6 @@
 // Pure parts of the screenshot pipeline: store sizes, palettes, per-language script fonts, copy validation, job data.
+import { readdirSync } from 'node:fs';
+import { join } from 'node:path';
 import { specFamily } from './local-fonts';
 import { bgIssue } from './palette';
 import type { Palette, ShipConfig, ShotScene, ShotsConfig } from '../lib/config';
@@ -280,8 +282,9 @@ export interface FeatureLayout { left: number; top: number; width: number; heigh
  *  side, centred vertically; `scale` (default 1) multiplies the design width before that clamp. fit 'bleed': the design
  *  width x scale at the old fixed top, cropped by the canvas edge on purpose. */
 export function featureLayout(style: 'game' | 'app', dev: { w: number; h: number; bar: number },
-  o: { fit?: 'contain' | 'bleed'; scale?: number } = {}): FeatureLayout {
-  const d = FEATURE_DEVICE[style], C = FEATURE_CANVAS, fit = o.fit ?? 'contain';
+  o: { fit?: 'contain' | 'bleed'; scale?: number; rotate?: number } = {}): FeatureLayout {
+  const base = FEATURE_DEVICE[style], C = FEATURE_CANVAS, fit = o.fit ?? 'contain';
+  const d = { ...base, angle: base.angle + (o.rotate ?? 0) }; // shots.feature.rotate adds to the template's tilt, like a scene frame's rotate
   const k = (dev.h + dev.bar) / dev.w;
   let width = d.width * (o.scale ?? 1);
   if (fit === 'contain') {
@@ -329,3 +332,24 @@ export function framesForRender(scenes: { frames: { src: string }[] }[], sizes:
   }
   return [...out].sort();
 }
+
+/** Which language's frames each language loads (shots.perLanguageFrames false, the default): its own when
+ *  <frames>/<lang> holds any file, else the default language's. `hasFrames` is injected so tests need no disk. */
+export function frameLangs(langs: string[], hasFrames: (lang: string) => boolean, def: string, perLanguage = false): { map: Record<string, string>; borrowed: string[] } {
+  const map: Record<string, string> = {}, borrowed: string[] = [];
+  for (const l of langs) {
+    if (perLanguage || l === def || hasFrames(l)) map[l] = l;
+    else if (hasFrames(def)) { map[l] = def; borrowed.push(l); }
+    else map[l] = l; // nothing anywhere: the normal missing-frames error names it
+  }
+  return { map, borrowed };
+}
+
+/** true when <dir>/<lang> holds at least one file (any depth up to 3). */
+export function langHasFrames(dir: string, lang: string): boolean {
+  const walk = (d: string, depth: number): boolean => {
+    let ents; try { ents = readdirSync(d, { withFileTypes: true }); } catch { return false; }
+    return ents.some(e => e.isFile() || (depth < 3 && e.isDirectory() && walk(join(d, e.name), depth + 1)));
+  };
+  return walk(join(dir, lang), 0);
+}
diff --git a/cli/shots/render.ts b/cli/shots/render.ts
index 2ff3ef1..8895ecf 100644
--- a/cli/shots/render.ts
+++ b/cli/shots/render.ts
@@ -28,7 +28,7 @@ import { done, log, warn } from '../lib/log';
 import { closeBrowser, launch } from './browser';
 import { defaultConcurrency, pool, progressLine } from './capture-web';
 import { shotsStyle } from '../lib/config';
-import { type CopyFile, type DeviceBox, type TextBox, SIZES, renderDims, sheetTimeoutMs, featureLayout, copyText, defaultSizes, frameDims, framesForRender, mergeCopy, palette, renderDir, scriptFont, sheetLayout, validateCopy, variantScenes } from './lib';
+import { type CopyFile, type DeviceBox, type TextBox, SIZES, renderDims, sheetTimeoutMs, featureLayout, copyText, defaultSizes, frameDims, framesForRender, frameLangs, langHasFrames, mergeCopy, palette, renderDir, scriptFont, sheetLayout, validateCopy, variantScenes } from './lib';
 import { bgCss, bgTone, type ContrastSample, contrastIssues, parseColour, photoBackground, photoCss, type RGB, worstContrast } from './palette';
 import { type WeightSample, weightIssues } from './weights';
 import type { Palette } from '../lib/config';
@@ -74,9 +74,11 @@ export async function run(ctx: Ctx): Promise<void> {
   }
   const framesDir = resolve(shots.frames), outDir = resolve(shots.out);
   // every frame the scenes load must exist: a missing one renders a store image with no app or game in it
+  const fl = frameLangs(langs, l => langHasFrames(framesDir, l), config.play?.defaultLanguage ?? config.languages[0]!.id, shots.perLanguageFrames);
+  if (fl.borrowed.length) log('shots', `info: no frames for ${fl.borrowed.join(', ')}; using the ${config.play?.defaultLanguage ?? config.languages[0]!.id} frames (shots.perLanguageFrames: true requires them per language)`);
   const gone = [...jobs.values()].flatMap(job => {
     const sel = a.list('scenes').length ? job.scenes.filter(s => a.list('scenes').includes(s.id)) : job.scenes;
-    return framesForRender(sel, sizes, langs, shots);
+    return framesForRender(sel, sizes, langs.map(l => fl.map[l]!), shots);
   }).filter((f, i, all) => all.indexOf(f) === i && !existsSync(join(framesDir, f)));
   if (gone.length) throw new Error(`shots render: ${gone.length} frame file${gone.length > 1 ? 's' : ''} missing under ${relative(root, framesDir) || '.'} (run \`storebound shots capture\` first, or restore the frames folder; it is often git-ignored):\n  ${gone.slice(0, 20).join('\n  ')}${gone.length > 20 ? `\n  ... ${gone.length - 20} more` : ''}`);
   if (a.has('dry')) {
@@ -164,7 +166,7 @@ export async function run(ctx: Ctx): Promise<void> {
           fonts: { ...fonts, script: st.script, titleStack: st.title, bodyStack: st.body } };
         if (url.searchParams.has('feature'))
           return Response.json({ ...base, frame: shots.feature?.frame ?? scenes[0]!.frames[0]!.src, featureTitle: shots.feature?.title,
-            device: featureLayout(style, phone, { fit: shots.feature?.fit, scale: shots.feature?.scale }),
+            device: featureLayout(style, phone, { fit: shots.feature?.fit, scale: shots.feature?.scale, rotate: shots.feature?.rotate }), rotate: shots.feature?.rotate ?? 0,
             palette: look(palette(shots.feature?.palette ?? scenes[0]!.palette, style), style === 'app' ? 135 : 160, style === 'app' ? 55 : 50, shots.feature?.background) });
         const sid = url.searchParams.get('s') ?? '';
         const scene = scenes.find(s => s.id === sid)!;
@@ -174,7 +176,10 @@ export async function run(ctx: Ctx): Promise<void> {
       let file = '';
       if (p === '/logo' && shots.logo) file = resolve(shots.logo);
       else if (p.startsWith('/bgimg/')) file = photos[Number(p.slice(7))] ?? '';
-      else if (p.startsWith('/frames/')) file = join(framesDir, p.slice(8));
+      else if (p.startsWith('/frames/')) {
+        const [fl0 = '', ...rest] = p.slice(8).split('/');
+        file = join(framesDir, [fl.map[fl0] ?? fl0, ...rest].join('/'));
+      }
       else if (p.startsWith('/fonts/')) file = fontsRoute(p.slice(7), fontsDir, root, manifest) ?? '';
       else if (p.startsWith('/out/')) file = join(outDir, p.slice(5));
       else if (/^\/(template|feature)(-app|-bleed)?\.html$/.test(p)) return new Response(SHOTS_PAGES[p.slice(1)]!, { headers: { 'content-type': TYPES.html! } });
diff --git a/cli/shots/selectors.ts b/cli/shots/selectors.ts
new file mode 100644
index 0000000..1efb778
--- /dev/null
+++ b/cli/shots/selectors.ts
@@ -0,0 +1,79 @@
+// Layout-aware element selectors for web capture shots (shots.capture.shots.<name>.waitSelector / .click):
+// a list of candidates tried in order, with a per-device list first ("phone", "tablet"). Data attributes are preferred
+// (`[data-shot="shop-row"]`), then CSS, then Playwright text (`text=Shop`, `role=button[name="Shop"]`). A shop row that is
+// a list on the phone and a grid at 1180x820 needs different selectors; the miss message names the selector and the size.
+import type { ShotSelector } from '../lib/config';
+
+type Device = 'phone' | 'tablet';
+
+/** Candidates for one device: its own list first, then the shared ones, without repeats. */
+export function candidates(sel: ShotSelector | undefined, device: Device): string[] {
+  if (sel === undefined) return [];
+  const list = (v: string | string[] | undefined): string[] => (v === undefined ? [] : Array.isArray(v) ? v : [v]);
+  const all = typeof sel === 'string' || Array.isArray(sel) ? list(sel) : [...list(sel[device]), ...list(sel.any)];
+  return [...new Set(all)];
+}
+
+export function validateSelector(where: string, sel: unknown): string[] {
+  const ok = (v: unknown): boolean => typeof v === 'string' && v.trim() !== '';
+  const okList = (v: unknown): boolean => ok(v) || (Array.isArray(v) && v.length > 0 && v.every(ok));
+  if (okList(sel)) return [];
+  if (sel && typeof sel === 'object' && !Array.isArray(sel)) {
+    const o = sel as Record<string, unknown>, bad = Object.keys(o).filter(k => !['phone', 'tablet', 'any'].includes(k));
+    if (bad.length) return [`${where}: unknown key ${bad.join(', ')} (phone | tablet | any)`];
+    if (!Object.keys(o).length) return [`${where}: at least one of phone | tablet | any`];
+    return Object.entries(o).filter(([, v]) => !okList(v)).map(([k]) => `${where}.${k}: a selector or a list of selectors`);
+  }
+  return [`${where}: a selector, a list of selectors, or { phone, tablet, any }`];
+}
+
+/** Minimal Playwright surface used here, so tests can fake a page. */
+export interface SelPage {
+  locator(sel: string): { count(): Promise<number>; first(): { click(o?: { timeout?: number }): Promise<void> } };
+  waitForTimeout(ms: number): Promise<void>;
+}
+
+export interface SelResult { selector: string; matches: number }
+
+/** Match counts of every candidate. */
+export async function probe(page: SelPage, list: string[]): Promise<SelResult[]> {
+  const out: SelResult[] = [];
+  for (const selector of list) {
+    let matches = 0;
+    try { matches = await page.locator(selector).count(); } catch { matches = -1; } // -1: not a valid selector
+    out.push({ selector, matches });
+  }
+  return out;
+}
+
+/** The miss message: which selector, on which size, what each candidate matched. */
+export function missMessage(what: string, where: { device: Device; w: number; h: number }, res: SelResult[]): string {
+  const rows = res.map(r => `${r.selector} ${r.matches < 0 ? 'is not a valid selector' : `matched ${r.matches}`}`).join('; ');
+  return `${what} selector missed on ${where.device} ${where.w}x${where.h}: ${rows}. Add a candidate for this layout (waitSelector/click: { ${where.device}: [...] }), data attributes first`;
+}
+
+/** Waits (polling) until one candidate matches; returns it. Throws the miss message on timeout. */
+export async function firstMatch(page: SelPage, list: string[], what: string, where: { device: Device; w: number; h: number }, timeoutMs: number): Promise<string> {
+  const end = Date.now() + timeoutMs;
+  let res: SelResult[] = [];
+  for (;;) {
+    res = await probe(page, list);
+    const hit = res.find(r => r.matches > 0);
+    if (hit) return hit.selector;
+    if (Date.now() >= end) throw new Error(missMessage(what, where, res));
+    await page.waitForTimeout(100);
+  }
+}
+
+/** waitSelector, then click, for one shot on one device. No-ops without either. */
+export async function applySelectors(page: SelPage, spec: { waitSelector?: ShotSelector; click?: ShotSelector | ShotSelector[] }, where: { device: Device; w: number; h: number }, timeoutMs: number): Promise<void> {
+  const w = candidates(spec.waitSelector, where.device);
+  if (w.length) await firstMatch(page, w, 'waitSelector', where, timeoutMs);
+  const clicks = spec.click === undefined ? [] : Array.isArray(spec.click) && spec.click.some(c => typeof c !== 'string') ? spec.click : [spec.click as ShotSelector];
+  for (const c of clicks) {
+    const list = candidates(c, where.device);
+    if (!list.length) continue;
+    const hit = await firstMatch(page, list, 'click', where, timeoutMs);
+    await page.locator(hit).first().click({ timeout: timeoutMs });
+  }
+}
diff --git a/skills/store-pitfalls/SKILL.md b/skills/store-pitfalls/SKILL.md
index 1e06369..15a874c 100644
--- a/skills/store-pitfalls/SKILL.md
+++ b/skills/store-pitfalls/SKILL.md
@@ -1441,3 +1441,16 @@ that fails without the fix (see CONTRIBUTING.md).
   --platform macos` refuses an unsigned .pkg or one not signed with an installer certificate before any network call
   (`tests/mas-build.test.ts`). The `com.apple.pkg` file type of the API build upload is taken from Apple's schema and has not
   been exercised against the live API yet; `--via altool` (`--type macos`) is the fallback.
+
+## 120. Play feature graphic shows a landscape game sideways; a language without frames fails the whole check
+
+- **Symptom:** the 1024x500 feature graphic showed a landscape game frame sideways inside the portrait phone (the
+  feature path ignored `rotate`); `shots check` without `--lang` failed on missing frames of languages that only have
+  copy; a capture click on a shop row matched on the phone layout and silently missed at tablet / desktop sizes.
+- **Do:** set `shots.feature.rotate` (degrees, added to the template tilt; `-90` stands a landscape frame upright in a
+  phone lying on its side; with layout "bleed" the frame image itself is turned). Frames of a language that has none
+  come from the default language (info line; `shots.perLanguageFrames: true` requires them per language). In web
+  capture list `waitSelector` / `click` candidates per layout (`{ phone: [...], tablet: [...], any: [...] }`, data
+  attributes first, `text=` last); `shots capture --dry` prints them per size, `--dry --probe` opens the pages and
+  names the MISS with the size and every candidate's match count.
+- **Guard:** `tests/shots-gaps.test.ts`, `tests/browser/feature-fit.browser.ts` (rotate), `cli/shots/selectors.ts`.
diff --git a/tests/browser/feature-fit.browser.ts b/tests/browser/feature-fit.browser.ts
index 82aea79..a546755 100644
--- a/tests/browser/feature-fit.browser.ts
+++ b/tests/browser/feature-fit.browser.ts
@@ -63,6 +63,8 @@ describe('shots.feature config', () => {
     expect(errs({ frame: 'a.png' })).toEqual([]);
     expect(errs({ frame: 'a.png', fit: 'bleed', scale: 1.2 })).toEqual([]);
     expect(errs({ frame: 'a.png', fit: 'cover' })).toEqual(["shots.feature.fit: 'contain' | 'bleed'"]);
+    expect(errs({ frame: 'a.png', rotate: -90 })).toEqual([]);
+    expect(errs({ frame: 'a.png', rotate: 'left' })).toEqual(['shots.feature.rotate: a number of degrees from -360 to 360']);
     expect(errs({ frame: 'a.png', scale: 3 })).toEqual(['shots.feature.scale: a number from 0.5 to 1.5']);
   });
 });
@@ -106,3 +108,41 @@ describe.skipIf(!browser)('feature graphic templates at 1024 x 500 (DOM layout b
     } finally { await page.close(); }
   }, scaled(30_000));
 });
+
+describe.skipIf(!browser)('shots.feature.rotate', () => {
+  // eslint-disable-next-line @typescript-eslint/no-explicit-any
+  const route = (page: any, html: string, name: string, job: unknown) => page.route('http://t.test/**', (r: { request(): { url(): string }; fulfill(o: unknown): Promise<void> }) => {
+    const u = new URL(r.request().url());
+    if (u.pathname === `/${name}`) return r.fulfill({ contentType: 'text/html', body: html });
+    if (u.pathname === '/job.json') return r.fulfill({ contentType: 'application/json', body: JSON.stringify(job) });
+    if (u.pathname.startsWith('/frames/')) return r.fulfill({ contentType: 'image/png', body: PNG });
+    return r.fulfill({ contentType: 'text/css', body: '' });
+  });
+  const pal = { bg: ['#123456', '#345678', '#567890'], glow: '#ffffff', ink: '#000000', shadow: 'rgba(0,0,0,.4)' };
+  test('game template: a -90 phone lies on its side and still fits', async () => {
+    const page = await browser.newPage({ viewport: { width: 1024, height: 500 } });
+    try {
+      const device = featureLayout('game', DEFAULT_PHONE, { rotate: -90 });
+      expect(device.angle).toBe(-83);
+      await route(page, readFileSync(join(import.meta.dir, '..', '..', 'cli', 'shots', 'feature.html'), 'utf8'), 'feature.html',
+        { style: 'game', phone: DEFAULT_PHONE, logo: false, appName: 'Demo', fonts: { title: 'X' }, frame: 'a.png', device, palette: pal });
+      await page.goto('http://t.test/feature.html?lang=en');
+      await page.waitForFunction("document.body.dataset.ready === '1'", null, { timeout: 15000 });
+      const d = (JSON.parse(await page.evaluate('document.body.dataset.devices')) as { x: number; y: number; w: number; h: number }[])[0]!;
+      expect(d.w).toBeGreaterThan(d.h); // landscape outline
+      expect(boxOutside(d, 1024, 500)).toEqual([]);
+    } finally { await page.close(); }
+  }, scaled(30_000));
+  test('bleed template: the frame image is turned and still covers the canvas', async () => {
+    const page = await browser.newPage({ viewport: { width: 1024, height: 500 } });
+    try {
+      await route(page, readFileSync(join(import.meta.dir, '..', '..', 'cli', 'shots', 'feature-bleed.html'), 'utf8'), 'feature-bleed.html',
+        { fonts: { title: 'X' }, frame: 'a.png', appName: 'Demo', rotate: -90 });
+      await page.goto('http://t.test/feature-bleed.html?lang=en');
+      await page.waitForFunction("document.body.dataset.ready === '1'", null, { timeout: 15000 });
+      const r = await page.evaluate("(() => { const b = document.querySelector('img.frame').getBoundingClientRect(); return { x: b.x, y: b.y, w: b.width, h: b.height }; })()") as { x: number; y: number; w: number; h: number };
+      expect(Math.round(r.w)).toBe(1024); expect(Math.round(r.h)).toBe(500); expect(Math.round(r.x)).toBe(0); expect(Math.round(r.y)).toBe(0);
+      expect(await page.evaluate("document.querySelector('img.frame').style.transform")).toBe('rotate(-90deg)');
+    } finally { await page.close(); }
+  }, scaled(30_000));
+});
diff --git a/tests/shots-gaps.test.ts b/tests/shots-gaps.test.ts
new file mode 100644
index 0000000..3bc8045
--- /dev/null
+++ b/tests/shots-gaps.test.ts
@@ -0,0 +1,91 @@
+// Real-use gaps in `shots`: feature rotate, check/render frame fallback per language, layout-aware capture selectors.
+import { describe, expect, test } from 'bun:test';
+import { mkdirSync, mkdtempSync, rmSync, writeFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import { DEFAULT_PHONE, featureLayout, frameLangs, langHasFrames } from '../cli/shots/lib';
+import { applySelectors, candidates, missMessage, probe, validateSelector, type SelPage } from '../cli/shots/selectors';
+import { validateCapture } from '../cli/shots/devices';
+
+describe('feature rotate', () => {
+  test('adds to the template tilt and still fits', () => {
+    const a = featureLayout('game', DEFAULT_PHONE, {}), b = featureLayout('game', DEFAULT_PHONE, { rotate: -90 });
+    expect(a.angle).toBe(7); expect(b.angle).toBe(-83);
+    expect(b.box.w).toBeGreaterThan(b.box.h);
+    expect(b.box.x).toBeGreaterThanOrEqual(23.99); expect(b.box.x + b.box.w).toBeLessThanOrEqual(1024 - 23.99);
+    expect(b.box.y).toBeGreaterThanOrEqual(23.99); expect(b.box.y + b.box.h).toBeLessThanOrEqual(500 - 23.99);
+  });
+});
+
+describe('frame languages', () => {
+  const has = (set: string[]) => (l: string) => set.includes(l);
+  test('a language without frames borrows the default language', () => {
+    expect(frameLangs(['en', 'tr', 'de'], has(['en', 'de']), 'en')).toEqual({ map: { en: 'en', tr: 'en', de: 'de' }, borrowed: ['tr'] });
+  });
+  test('perLanguage requires its own', () => {
+    expect(frameLangs(['en', 'tr'], has(['en']), 'en', true)).toEqual({ map: { en: 'en', tr: 'tr' }, borrowed: [] });
+  });
+  test('no frames anywhere: nothing borrowed, the missing error names the language', () => {
+    expect(frameLangs(['en', 'tr'], has([]), 'en').borrowed).toEqual([]);
+  });
+  test('langHasFrames reads the folder', () => {
+    const d = mkdtempSync(join(tmpdir(), 'sb-fl-'));
+    try {
+      mkdirSync(join(d, 'en', 'phone'), { recursive: true }); writeFileSync(join(d, 'en', 'phone', 'a.png'), 'x');
+      mkdirSync(join(d, 'tr'), { recursive: true });
+      expect(langHasFrames(d, 'en')).toBe(true);
+      expect(langHasFrames(d, 'tr')).toBe(false);
+      expect(langHasFrames(d, 'de')).toBe(false);
+    } finally { rmSync(d, { recursive: true, force: true }); }
+  });
+});
+
+/** Fake page: a DOM of selector -> count; text= selectors are just keys. */
+function fake(dom: Record<string, number>, clicks: string[] = []): SelPage {
+  return {
+    locator: (s: string) => ({ count: async () => { if (s.startsWith('!')) throw new Error('bad'); return dom[s] ?? 0; }, first: () => ({ click: async () => { clicks.push(s); } }) }),
+    waitForTimeout: async () => {},
+  };
+}
+
+describe('capture selectors', () => {
+  test('per-device list first, then shared, no repeats', () => {
+    const s = { phone: ['[data-shot="row"]'], tablet: ['[data-shot="tile"]', 'text=Shop'], any: ['text=Shop'] };
+    expect(candidates(s, 'tablet')).toEqual(['[data-shot="tile"]', 'text=Shop']);
+    expect(candidates(s, 'phone')).toEqual(['[data-shot="row"]', 'text=Shop']);
+    expect(candidates('a', 'phone')).toEqual(['a']);
+    expect(candidates(undefined, 'phone')).toEqual([]);
+  });
+  test('validation', () => {
+    expect(validateSelector('x', 'a')).toEqual([]);
+    expect(validateSelector('x', { tablet: ['a'] })).toEqual([]);
+    expect(validateSelector('x', { desktop: 'a' })[0]).toContain('unknown key desktop');
+    expect(validateSelector('x', '')).not.toEqual([]);
+    expect(validateSelector('x', {})).not.toEqual([]);
+  });
+  test('the click lands on the first candidate that matches', async () => {
+    const clicks: string[] = [];
+    await applySelectors(fake({ 'text=Shop': 1 }, clicks), { waitSelector: ['[data-shot="row"]', 'text=Shop'], click: { tablet: ['[data-shot="tile"]', 'text=Shop'] } }, { device: 'tablet', w: 1180, h: 820 }, 50);
+    expect(clicks).toEqual(['text=Shop']);
+  });
+  test('several clicks in order', async () => {
+    const clicks: string[] = [];
+    await applySelectors(fake({ a: 1, b: 1 }, clicks), { click: [{ any: 'a' }, 'b'] }, { device: 'phone', w: 440, h: 902 }, 50);
+    expect(clicks).toEqual(['a', 'b']);
+  });
+  test('a miss names the selector, the size and every match count', async () => {
+    const err = await applySelectors(fake({ '[data-shot="row"]': 3 }), { click: { tablet: ['[data-shot="tile"]', 'text=Shop'] } }, { device: 'tablet', w: 1180, h: 820 }, 30).then(() => '', e => (e as Error).message);
+    expect(err).toContain('click selector missed on tablet 1180x820');
+    expect(err).toContain('[data-shot="tile"] matched 0');
+    expect(err).toContain('text=Shop matched 0');
+    expect(missMessage('click', { device: 'phone', w: 1, h: 2 }, [{ selector: '!x', matches: -1 }])).toContain('is not a valid selector');
+  });
+  test('probe counts every candidate', async () => {
+    expect(await probe(fake({ a: 2 }), ['a', 'b'])).toEqual([{ selector: 'a', matches: 2 }, { selector: 'b', matches: 0 }]);
+  });
+  test('validateCapture accepts and rejects', () => {
+    const cap = (shot: object) => ({ source: 'web', baseUrl: 'http://127.0.0.1:1', shots: { shop: { path: '/', ...shot } } }) as never;
+    expect(validateCapture(cap({ waitSelector: { tablet: 'a' }, click: ['a', 'b'] }))).toEqual([]);
+    expect(validateCapture(cap({ click: { desktop: 'a' } }))[0]).toContain('unknown key desktop');
+  });
+});

From b059e83b90f7aa3c858bbcbdb870dccd49efc78d Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Sat, 24 Oct 2026 13:01:32 +0800
Subject: [PATCH 017/126] shots fonts usage line

---
 cli/shots/fonts.ts | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/cli/shots/fonts.ts b/cli/shots/fonts.ts
index 09ea404..cb0a9e0 100644
--- a/cli/shots/fonts.ts
+++ b/cli/shots/fonts.ts
@@ -6,7 +6,7 @@
 // sublines, badge labels; plus the Noto face of a non-Latin script). A character the stack lacks gets an automatic
 // Noto fallback (logged; `shots check` errors on renders that used it unless shots.fonts.fallback lists it); a
 // character no fallback covers fails with the language and the characters.
-//   storebound shots fonts [--lang en,tr] [--json]   (--lang limits the report to those languages; the manifest keeps all)     (re-run after editing the copy or the fonts)
+//   storebound shots fonts [--lang en,tr] [--json]   (--lang limits the report; the manifest keeps all languages)     (re-run after editing the copy or the fonts)
 // Out: <project>/.storebound/fonts/*.woff2 + fonts.css + fonts.json (faces and the per-language stacks, read by render).
 // The Google fonts are SIL Open Font License 1.1. A local font file in shots.fonts (local-fonts.ts) gets the same cmap
 // check, is read in place (never copied) and recorded with its path, sha256 and license note.

From 66247f35d94a196abedbf3b8e3dc40ce0f05ae40 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Sat, 24 Oct 2026 13:01:45 +0800
Subject: [PATCH 018/126] flags: shots fonts --lang, capture --probe

---
 cli/data/flags.json | 9 +++++++--
 1 file changed, 7 insertions(+), 2 deletions(-)

diff --git a/cli/data/flags.json b/cli/data/flags.json
index db3f259..7473ef4 100644
--- a/cli/data/flags.json
+++ b/cli/data/flags.json
@@ -939,6 +939,7 @@
    "keep-booted",
    "lang",
    "only-missing",
+   "probe",
    "source",
    "src",
    "variants"
@@ -956,7 +957,9 @@
    "to",
    "translate"
   ],
-  "shots fonts": [],
+  "shots fonts": [
+   "lang"
+  ],
   "shots gallery": [
    "lang",
    "no-variants",
@@ -985,6 +988,7 @@
    "no-captions",
    "only-missing",
    "port",
+   "probe",
    "seconds",
    "source",
    "src",
@@ -1276,6 +1280,7 @@
    "port",
    "poster",
    "pre-check",
+   "probe",
    "production",
    "profile",
    "progress",
@@ -1721,7 +1726,7 @@
    "storebound shots copy reviewed --lang de[,es] | --all [--dry]   a human read the copy: remove its marker"
   ],
   "shots fonts": [
-   "storebound shots fonts [--json]     (re-run after editing the copy or the fonts)"
+   "storebound shots fonts [--lang en,tr] [--json]   (--lang limits the report; the manifest keeps all languages)     (re-run after editing the copy or the fonts)"
   ],
   "shots gallery": [
    "storebound shots gallery [--lang en,tr] [--src store/renders] [--out <file>] [--no-variants] [--json]"

From 98cd1d3c926eed767c2060f2105ace800595d7ca Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Sat, 24 Oct 2026 13:02:02 +0800
Subject: [PATCH 019/126] embedded: regenerated

---
 cli/lib/embedded.ts | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/cli/lib/embedded.ts b/cli/lib/embedded.ts
index 715eb69..c963dee 100644
--- a/cli/lib/embedded.ts
+++ b/cli/lib/embedded.ts
@@ -39,7 +39,7 @@ export const TEMPLATE_TEXT: Record<string, string> = {
 export const SHOTS_PAGES: Record<string, string> = {
   "caption.html": "<!doctype html>\n<html>\n<head>\n<meta charset=\"utf-8\">\n<link rel=\"stylesheet\" href=\"/fonts/fonts.css\">\n<!-- Caption overlay for app preview videos (transparent PNG, rendered by `storebound shots video`, overlaid by ffmpeg).\n     caption.html?w=<px>&h=<px>&lang=<id>&i=<caption index>. Same title font, stroke and colours as the screenshots. -->\n<style>\n  * { box-sizing: border-box; margin: 0; padding: 0; }\n  html, body { background: transparent; overflow: hidden; }\n  #c { position: relative; width: var(--W); height: var(--H); }\n  .cap { position: absolute; left: 50%; top: calc(var(--u) * 7); transform: translateX(-50%) rotate(-1.5deg); max-width: calc(var(--u) * 90);\n    padding: calc(var(--u) * 2.6) calc(var(--u) * 5) calc(var(--u) * 3); border-radius: calc(var(--u) * 5); text-align: center;\n    background: linear-gradient(180deg, rgba(0,0,0,.42), rgba(0,0,0,.28)); box-shadow: inset 0 0 0 calc(var(--u) * .35) rgba(255,255,255,.3);\n    font-family: var(--tf); font-weight: var(--tw); font-size: calc(var(--u) * var(--fs)); line-height: 1.04; color: #fff;\n    -webkit-text-stroke: calc(var(--u) * var(--fs) * .07) var(--ink); paint-order: stroke fill; text-wrap: balance;\n    filter: drop-shadow(0 calc(var(--u) * .7) 0 var(--ink)); }\n</style>\n</head>\n<body>\n<div id=\"c\"></div>\n<script type=\"module\">\nconst q = new URLSearchParams(location.search);\nconst W = +q.get('w'), H = +q.get('h'), LANG = q.get('lang'), I = +q.get('i');\nconst job = await (await fetch(`/caption.json?lang=${encodeURIComponent(LANG)}&i=${I}`)).json();\nconst u = Math.min(W, H) / 100, R = document.documentElement.style;\ndocument.documentElement.lang = LANG;\nR.setProperty('--W', W + 'px'); R.setProperty('--H', H + 'px'); R.setProperty('--u', u + 'px');\nR.setProperty('--ink', job.ink); R.setProperty('--fs', W > H ? 6.4 : 8.2);\nconst X = job.fonts.script;\nR.setProperty('--tf', (job.fonts.titleStack ?? (X ? [X, job.fonts.title] : [job.fonts.title])).map(f => `'${f}'`).join(', ') + ', sans-serif');\nR.setProperty('--tw', X ? 900 : 400);\nconst el = document.createElement('div');\nel.className = 'cap';\nif (job.rtl) el.dir = 'rtl';\nel.textContent = job.text;\ndocument.getElementById('c').append(el);\nawait document.fonts.ready;\ndocument.body.dataset.ready = '1';\n</script>\n</body>\n</html>\n",
   "feature-app.html": "<!doctype html>\n<html>\n<head>\n<meta charset=\"utf-8\">\n<link rel=\"stylesheet\" href=\"/fonts/fonts.css\">\n<!-- Play feature graphic, app style, 1024 x 500: logo (or the app name) on the left on a calm gradient, an upright phone\n     with one frame on the right. feature-app.html?lang=<id>[&v=<variant>]. Rendered by `storebound shots render` when\n     the screenshot style is app. Keep text out of it apart from the name: Play overlays its own UI. -->\n<style>\n  * { box-sizing: border-box; margin: 0; padding: 0; }\n  html, body { width: 1024px; height: 500px; overflow: hidden; background: #fff; }\n  #c { position: relative; width: 1024px; height: 500px; overflow: hidden; isolation: isolate; background: var(--bg); }\n  .soft { position: absolute; left: 760px; top: 260px; width: 700px; height: 600px; transform: translate(-50%, -50%); z-index: -1;\n    border-radius: 50%; background: radial-gradient(closest-side, var(--accentSoft), transparent); }\n  .logo { position: absolute; left: 330px; top: 250px; width: 440px; max-height: 220px; object-fit: contain; transform: translate(-50%, -50%); z-index: 5; }\n  .name { position: absolute; left: 330px; top: 250px; transform: translate(-50%, -50%); z-index: 5; width: 520px; text-align: center;\n    font-family: var(--tf); font-weight: 750; font-size: 76px; line-height: 1.02; letter-spacing: -.02em; color: var(--ink); }\n  .tel { position: absolute; left: 690px; top: 40px; width: 230px; aspect-ratio: var(--ar); z-index: 3; border-radius: 36px; padding: 5px;\n    background: #121317; box-shadow: inset 0 0 0 1px #3a3c44, 0 22px 50px var(--shadow); }\n  .screen { position: relative; width: 100%; height: 100%; overflow: hidden; border-radius: 31px; background: #fff; }\n  .screen img { position: absolute; left: 0; bottom: 0; width: 100%; height: var(--appH); object-fit: cover; object-position: top; }\n  .screen .bar { position: absolute; left: 0; right: 0; top: 0; height: var(--barH); background: #fff center top / 100% 60000% no-repeat; }\n  .island { position: absolute; top: 6px; left: 50%; transform: translateX(-50%); width: 30%; height: 19px; background: #000; border-radius: 99px; }\n</style>\n</head>\n<body>\n<div id=\"c\">\n  <div class=\"soft\"></div>\n  <div class=\"tel\"><div class=\"screen\"><div class=\"bar\" id=\"bar\"></div><img id=\"f\"><div class=\"island\"></div></div></div>\n</div>\n<script type=\"module\">\nconst q = new URLSearchParams(location.search);\nconst lang = q.get('lang'), V = q.get('v') ?? '';\nconst job = await (await fetch(`/job.json?lang=${encodeURIComponent(lang)}&feature=1&v=${encodeURIComponent(V)}`)).json();\nconst P = job.palette, R = document.documentElement.style, dev = job.phone;\nconst rgba = (hex, a) => { const m = /^#?([0-9a-f]{6})$/i.exec(hex); if (!m) return hex; const n = parseInt(m[1], 16); return `rgba(${n >> 16},${(n >> 8) & 255},${n & 255},${a})`; };\nR.setProperty('--bg', P.bgCss ?? (Array.isArray(P.bg) ? `linear-gradient(135deg, ${P.bg.join(', ')})` : P.bg)); // palette.ts: stops, colour, gradient string or photo + overlay\nR.setProperty('--ink', P.ink); R.setProperty('--shadow', P.shadow); R.setProperty('--accentSoft', rgba(P.glow, .18));\nR.setProperty('--tf', (job.fonts.titleStack ?? [job.fonts.title]).map(f => `'${f}'`).join(', ') + ', sans-serif');\nR.setProperty('--ar', `${dev.w} / ${dev.h + dev.bar}`);\nR.setProperty('--appH', `${100 * dev.h / (dev.h + dev.bar)}%`);\nR.setProperty('--barH', `${100 * dev.bar / (dev.h + dev.bar)}%`);\nconst c = document.getElementById('c');\n// device place and size from featureLayout() (lib.ts): fit 'contain' keeps the rotated phone inside the canvas\nconst D = job.device, tel = c.querySelector('.tel');\nif (D) Object.assign(tel.style, { left: D.left + 'px', top: D.top + 'px', width: D.width + 'px', transform: `rotate(${D.angle}deg)` });\nconst src = `/frames/${encodeURIComponent(lang)}/phone/${encodeURIComponent(job.frame)}`;\ndocument.getElementById('f').src = src;\ndocument.getElementById('bar').style.backgroundImage = `url('${src}')`;\nc.insertAdjacentHTML('beforeend', job.logo ? '<img class=\"logo\" src=\"/logo\">' : `<div class=\"name\">${String(job.appName).replace(/</g, '&lt;')}</div>`);\nawait document.fonts.ready;\nawait Promise.all([...document.images].map(i => i.decode().catch(() => {})));\n// read by `shots render` -> report.json -> shots check: the phone's rotated outline must stay inside the canvas\ndocument.body.dataset.devices = JSON.stringify([...c.querySelectorAll('.tel')].map(t => { const r = t.getBoundingClientRect(); return { x: r.x, y: r.y, w: r.width, h: r.height }; }));\nif (D?.fit === 'bleed') document.body.dataset.bleed = '1';\n// logo / name box for the safe-margin rule (7 % of the width left / right, 5 % of the height at the top)\ndocument.body.dataset.boxes = JSON.stringify([...c.querySelectorAll('.logo, .name')].map(e => { const r = e.getBoundingClientRect(); return { el: e.matches('.logo') ? 'logo' : 'title', x: r.x, y: r.y, w: r.width, h: r.height }; }));\ndocument.body.dataset.ready = '1';\n</script>\n</body>\n</html>\n",
-  "feature-bleed.html": "<!doctype html>\r\n<html>\r\n<head>\r\n<meta charset=\"utf-8\">\r\n<link rel=\"stylesheet\" href=\"/fonts/fonts.css\">\r\n<!-- Play feature graphic for shots.layout \"bleed\": the frame /frames/<lang>/feature/<shots.feature.frame> fills the\r\n     1024 x 500 canvas and the logo (shots.logo) or the name (shots.feature.title, else app.name) sits on the left with\r\n     a text shadow and a soft glow only: no band, no scrim. Play may lay its own play button over the centre. -->\r\n<style>\r\n  * { box-sizing: border-box; margin: 0; padding: 0; }\r\n  html, body { width: 1024px; height: 500px; overflow: hidden; background: #000; }\r\n  #c { position: relative; width: 1024px; height: 500px; overflow: hidden; }\r\n  #c > img.frame { position: absolute; inset: 0; width: 100%; height: 100%; object-fit: cover; display: block; }\r\n  .logo { position: absolute; left: 44px; top: 50%; transform: translateY(-50%); max-width: 380px; max-height: 300px;\r\n    filter: drop-shadow(0 4px 6px rgba(4,18,38,.7)) drop-shadow(0 0 28px rgba(4,22,48,.5)); }\r\n  .name { position: absolute; left: 44px; top: 50%; transform: translateY(-50%); max-width: 420px; font-family: var(--tf); font-weight: var(--tw);\r\n    font-size: 84px; line-height: 1; color: #fff; text-wrap: balance;\r\n    text-shadow: 0 0 4px rgba(4,18,38,.92), 0 3px 7px rgba(4,18,38,.92), 0 0 26px rgba(4,22,48,.55), 0 0 50px rgba(4,22,48,.55); }\r\n</style>\r\n</head>\r\n<body>\r\n<div id=\"c\"></div>\r\n<script type=\"module\">\r\nconst q = new URLSearchParams(location.search);\r\nconst lang = q.get('lang'), V = q.get('v') ?? '';\r\nconst job = await (await fetch(`/job.json?lang=${encodeURIComponent(lang)}&feature=1&v=${encodeURIComponent(V)}`)).json();\r\nconst R = document.documentElement.style;\r\nconst X = job.fonts.script;\r\nR.setProperty('--tf', (job.fonts.titleStack ?? (X ? [X, job.fonts.title] : [job.fonts.title])).map(f => `'${f}'`).join(', ') + ', sans-serif');\r\nR.setProperty('--tw', X ? 900 : job.fonts.titleWeight ?? 400);\r\ndocument.documentElement.lang = lang;\r\nconst c = document.getElementById('c');\r\nconst src = `/frames/${encodeURIComponent(lang)}/feature/${encodeURIComponent(job.frame)}`;\r\nconst name = String(job.featureTitle ?? job.appName).replace(/&/g, '&amp;').replace(/</g, '&lt;');\r\nc.innerHTML = `<img class=\"frame\" src=\"${src}\">` + (job.logo ? '<img class=\"logo\" src=\"/logo\">' : `<div class=\"name\">${name}</div>`);\r\nawait document.fonts.ready;\r\nawait Promise.all([...document.images].map(i => i.decode().catch(() => {})));\r\nconst overflow = [];\r\nconst img = c.querySelector('img.frame');\r\n// shots.feature.rotate: turn the frame like a scene frame's rotate; a quarter turn swaps the box so the image still covers the canvas\r\nconst rot = Number(job.rotate) || 0;\r\nif (rot) {\r\n  const quarter = Math.abs(rot % 180) === 90, W = quarter ? 500 : 1024, H = quarter ? 1024 : 500;\r\n  Object.assign(img.style, { inset: 'auto', left: (512 - W / 2) + 'px', top: (250 - H / 2) + 'px', width: W + 'px', height: H + 'px', transform: `rotate(${rot}deg)` });\r\n}\r\nif (!img.naturalWidth) overflow.push(`feature frame ${job.frame} did not load`);\r\nelse if (img.naturalWidth < 1024) overflow.push(`feature frame ${img.naturalWidth}x${img.naturalHeight} is upscaled: capture it at least 1024 px wide`);\r\nconst t = c.querySelector('.name, .logo').getBoundingClientRect();\r\nif (t.right > 1024 || t.top < 0 || t.bottom > 500) overflow.push('the name runs off the feature graphic');\r\ndocument.body.dataset.overflow = JSON.stringify(overflow);\r\ndocument.body.dataset.devices = '[]';\r\ndocument.body.dataset.ready = '1';\r\n</script>\r\n</body>\r\n</html>\r\n",
+  "feature-bleed.html": "<!doctype html>\n<html>\n<head>\n<meta charset=\"utf-8\">\n<link rel=\"stylesheet\" href=\"/fonts/fonts.css\">\n<!-- Play feature graphic for shots.layout \"bleed\": the frame /frames/<lang>/feature/<shots.feature.frame> fills the\n     1024 x 500 canvas and the logo (shots.logo) or the name (shots.feature.title, else app.name) sits on the left with\n     a text shadow and a soft glow only: no band, no scrim. Play may lay its own play button over the centre. -->\n<style>\n  * { box-sizing: border-box; margin: 0; padding: 0; }\n  html, body { width: 1024px; height: 500px; overflow: hidden; background: #000; }\n  #c { position: relative; width: 1024px; height: 500px; overflow: hidden; }\n  #c > img.frame { position: absolute; inset: 0; width: 100%; height: 100%; object-fit: cover; display: block; }\n  .logo { position: absolute; left: 44px; top: 50%; transform: translateY(-50%); max-width: 380px; max-height: 300px;\n    filter: drop-shadow(0 4px 6px rgba(4,18,38,.7)) drop-shadow(0 0 28px rgba(4,22,48,.5)); }\n  .name { position: absolute; left: 44px; top: 50%; transform: translateY(-50%); max-width: 420px; font-family: var(--tf); font-weight: var(--tw);\n    font-size: 84px; line-height: 1; color: #fff; text-wrap: balance;\n    text-shadow: 0 0 4px rgba(4,18,38,.92), 0 3px 7px rgba(4,18,38,.92), 0 0 26px rgba(4,22,48,.55), 0 0 50px rgba(4,22,48,.55); }\n</style>\n</head>\n<body>\n<div id=\"c\"></div>\n<script type=\"module\">\nconst q = new URLSearchParams(location.search);\nconst lang = q.get('lang'), V = q.get('v') ?? '';\nconst job = await (await fetch(`/job.json?lang=${encodeURIComponent(lang)}&feature=1&v=${encodeURIComponent(V)}`)).json();\nconst R = document.documentElement.style;\nconst X = job.fonts.script;\nR.setProperty('--tf', (job.fonts.titleStack ?? (X ? [X, job.fonts.title] : [job.fonts.title])).map(f => `'${f}'`).join(', ') + ', sans-serif');\nR.setProperty('--tw', X ? 900 : job.fonts.titleWeight ?? 400);\ndocument.documentElement.lang = lang;\nconst c = document.getElementById('c');\nconst src = `/frames/${encodeURIComponent(lang)}/feature/${encodeURIComponent(job.frame)}`;\nconst name = String(job.featureTitle ?? job.appName).replace(/&/g, '&amp;').replace(/</g, '&lt;');\nc.innerHTML = `<img class=\"frame\" src=\"${src}\">` + (job.logo ? '<img class=\"logo\" src=\"/logo\">' : `<div class=\"name\">${name}</div>`);\nawait document.fonts.ready;\nawait Promise.all([...document.images].map(i => i.decode().catch(() => {})));\nconst overflow = [];\nconst img = c.querySelector('img.frame');\n// shots.feature.rotate: turn the frame like a scene frame's rotate; a quarter turn swaps the box so the image still covers the canvas\nconst rot = Number(job.rotate) || 0;\nif (rot) {\n  const quarter = Math.abs(rot % 180) === 90, W = quarter ? 500 : 1024, H = quarter ? 1024 : 500;\n  Object.assign(img.style, { inset: 'auto', left: (512 - W / 2) + 'px', top: (250 - H / 2) + 'px', width: W + 'px', height: H + 'px', transform: `rotate(${rot}deg)` });\n}\nif (!img.naturalWidth) overflow.push(`feature frame ${job.frame} did not load`);\nelse if (img.naturalWidth < 1024) overflow.push(`feature frame ${img.naturalWidth}x${img.naturalHeight} is upscaled: capture it at least 1024 px wide`);\nconst t = c.querySelector('.name, .logo').getBoundingClientRect();\nif (t.right > 1024 || t.top < 0 || t.bottom > 500) overflow.push('the name runs off the feature graphic');\ndocument.body.dataset.overflow = JSON.stringify(overflow);\ndocument.body.dataset.devices = '[]';\ndocument.body.dataset.ready = '1';\n</script>\n</body>\n</html>\n",
   "feature.html": "<!doctype html>\n<html>\n<head>\n<meta charset=\"utf-8\">\n<link rel=\"stylesheet\" href=\"/fonts/fonts.css\">\n<!-- Play feature graphic, 1024 x 500: logo (or the app name) on the left, a tilted phone with one frame on the right.\n     feature.html?lang=<id>[&v=<variant>]. Rendered by `storebound shots render`. Keep text out of it: Play overlays its own UI. -->\n<style>\n  * { box-sizing: border-box; margin: 0; padding: 0; }\n  html, body { width: 1024px; height: 500px; overflow: hidden; background: #000; }\n  #c { position: relative; width: 1024px; height: 500px; overflow: hidden; isolation: isolate; background: var(--bg); }\n  .rays { position: absolute; left: 360px; top: 250px; width: 1700px; height: 1700px; transform: translate(-50%, -50%) rotate(8deg); z-index: -4;\n    opacity: .55; background: repeating-conic-gradient(rgba(255,255,255,.22) 0deg 7deg, rgba(255,255,255,0) 7deg 18deg);\n    -webkit-mask-image: radial-gradient(closest-side, #000 0%, rgba(0,0,0,.6) 30%, transparent 75%); }\n  .glow { position: absolute; left: 360px; top: 250px; width: 900px; height: 700px; transform: translate(-50%, -50%); z-index: -3;\n    background: radial-gradient(closest-side, var(--glow), transparent); }\n  .vign { position: absolute; inset: 0; z-index: -2; background: radial-gradient(90% 90% at 45% 50%, transparent 60%, rgba(0,0,0,.28) 100%); }\n  .logo { position: absolute; left: 360px; top: 252px; width: 540px; max-height: 400px; object-fit: contain; transform: translate(-50%, -50%) rotate(-3deg); z-index: 5;\n    filter: drop-shadow(0 14px 22px rgba(0,0,0,.4)); }\n  .name { position: absolute; left: 360px; top: 250px; transform: translate(-50%, -50%) rotate(-3deg); z-index: 5; width: 540px; text-align: center;\n    font-family: var(--tf); font-size: 104px; line-height: .95; color: #fff; -webkit-text-stroke: 9px var(--ink); paint-order: stroke fill;\n    filter: drop-shadow(0 8px 0 var(--ink)) drop-shadow(0 14px 22px rgba(0,0,0,.35)); }\n  .tel { position: absolute; left: 748px; top: 36px; width: 232px; aspect-ratio: var(--ar); transform: rotate(7deg); z-index: 3;\n    border-radius: 40px; padding: 6px;\n    background: linear-gradient(140deg, #f4f4f6 0%, #9da0a8 8%, #3c3e44 20%, #1a1b1f 50%, #3c3e44 82%, #c8cad0 100%);\n    box-shadow: inset 0 0 0 1px rgba(255,255,255,.6), inset 0 0 0 3px #101114, 0 20px 50px var(--shadow); }\n  .screen { position: relative; width: 100%; height: 100%; overflow: hidden; border-radius: 34px; background: #000; }\n  .screen img { position: absolute; left: 0; bottom: 0; width: 100%; height: var(--appH); object-fit: cover; object-position: top; }\n  .screen .bar { position: absolute; left: 0; right: 0; top: 0; height: var(--barH); background: #0b0b10 center top / 100% 60000% no-repeat; }\n  .island { position: absolute; top: 6px; left: 50%; transform: translateX(-50%); width: 30%; height: 20px; background: #000; border-radius: 99px; }\n  .spark { position: absolute; width: var(--s); height: var(--s); transform: translate(-50%, -50%); background: #fff; z-index: -1;\n    clip-path: polygon(50% 0, 58% 42%, 100% 50%, 58% 58%, 50% 100%, 42% 58%, 0 50%, 42% 42%); opacity: var(--o); filter: drop-shadow(0 0 6px #fff); }\n</style>\n</head>\n<body>\n<div id=\"c\">\n  <div class=\"glow\"></div><div class=\"rays\"></div><div class=\"vign\"></div>\n  <div class=\"tel\"><div class=\"screen\"><div class=\"bar\" id=\"bar\"></div><img id=\"f\"><div class=\"island\"></div></div></div>\n</div>\n<script type=\"module\">\nconst q = new URLSearchParams(location.search);\nconst lang = q.get('lang'), V = q.get('v') ?? '';\nconst job = await (await fetch(`/job.json?lang=${encodeURIComponent(lang)}&feature=1&v=${encodeURIComponent(V)}`)).json();\nconst P = job.palette, R = document.documentElement.style, dev = job.phone;\nR.setProperty('--bg', P.bgCss ?? (Array.isArray(P.bg) ? `linear-gradient(160deg, ${P.bg.join(', ')})` : P.bg)); // palette.ts: stops, colour, gradient string or photo + overlay\nR.setProperty('--glow', P.glow); R.setProperty('--ink', P.ink); R.setProperty('--shadow', P.shadow);\nR.setProperty('--tf', (job.fonts.titleStack ?? [job.fonts.title]).map(f => `'${f}'`).join(', ') + ', sans-serif');\nR.setProperty('--ar', `${dev.w} / ${dev.h + dev.bar}`);\nR.setProperty('--appH', `${100 * dev.h / (dev.h + dev.bar)}%`);\nR.setProperty('--barH', `${100 * dev.bar / (dev.h + dev.bar)}%`);\nconst c = document.getElementById('c');\n// device place and size from featureLayout() (lib.ts): fit 'contain' keeps the rotated phone inside the canvas\nconst D = job.device, tel = c.querySelector('.tel');\nif (D) Object.assign(tel.style, { left: D.left + 'px', top: D.top + 'px', width: D.width + 'px', transform: `rotate(${D.angle}deg)` });\nconst src = `/frames/${encodeURIComponent(lang)}/phone/${encodeURIComponent(job.frame)}`;\ndocument.getElementById('f').src = src;\ndocument.getElementById('bar').style.backgroundImage = `url('${src}')`;\nc.insertAdjacentHTML('beforeend', job.logo ? '<img class=\"logo\" src=\"/logo\">' : `<div class=\"name\">${String(job.appName).replace(/</g, '&lt;')}</div>`);\nlet seed = 7; const rnd = () => ((seed = (seed * 1664525 + 1013904223) >>> 0) / 4294967296);\nfor (let i = 0; i < 22; i++)\n  c.insertAdjacentHTML('beforeend', `<i class=\"spark\" style=\"left:${rnd() * 1024}px;top:${rnd() * 500}px;--s:${8 + rnd() * 18}px;--o:${.5 + rnd() * .5}\"></i>`);\nawait document.fonts.ready;\nawait Promise.all([...document.images].map(i => i.decode().catch(() => {})));\n// read by `shots render` -> report.json -> shots check: the phone's rotated outline must stay inside the canvas\ndocument.body.dataset.devices = JSON.stringify([...c.querySelectorAll('.tel')].map(t => { const r = t.getBoundingClientRect(); return { x: r.x, y: r.y, w: r.width, h: r.height }; }));\nif (D?.fit === 'bleed') document.body.dataset.bleed = '1';\n// logo / name box for the safe-margin rule (7 % of the width left / right, 5 % of the height at the top)\ndocument.body.dataset.boxes = JSON.stringify([...c.querySelectorAll('.logo, .name')].map(e => { const r = e.getBoundingClientRect(); return { el: e.matches('.logo') ? 'logo' : 'title', x: r.x, y: r.y, w: r.width, h: r.height }; }));\ndocument.body.dataset.ready = '1';\n</script>\n</body>\n</html>\n",
   "template-app.html": "<!doctype html>\n<html>\n<head>\n<meta charset=\"utf-8\">\n<link rel=\"stylesheet\" href=\"/fonts/fonts.css\">\n<!--\n  Store screenshot template, app style (shots.style 'app', the default for the app / subscription-app profiles).\n  template-app.html?s=<scene id>&w=<px>&h=<px>&lang=<id>[&device=tablet][&style=android][&v=<variant>]\n  Calm: a soft gradient (or solid) background, one clean device frame, a headline (two lines) and a subline. No\n  sunburst, no sparkles; badges only when the copy has them, drawn as quiet chips. Same /job.json as template.html\n  (palette: bg = gradient stops, ink = headline, glow = accent, shadow = device shadow).\n  Layout: everything is in u = W / 100; the text block is measured first, then the device fills the room below it.\n  device=landscape: u = H / 100, copy column on one side, the landscape frame in a Mac window (frame=window) or bare\n  (frame=none) on the other (as template.html). Safe margins: 7 % of the width left / right, 5 % of the height at the\n  top; text and logo boxes go to body.dataset.boxes for shots check.\n-->\n<style>\n  * { box-sizing: border-box; margin: 0; padding: 0; }\n  html, body { overflow: hidden; background: #fff; }\n  body { font-family: var(--bf); -webkit-font-smoothing: antialiased; color: var(--ink); }\n  #c { position: relative; overflow: hidden; width: var(--W); height: var(--H); isolation: isolate; background: var(--bg); }\n  .soft { position: absolute; left: 50%; top: var(--softY); width: calc(var(--u) * 140); height: calc(var(--u) * 110); z-index: -1;\n    transform: translate(-50%, -50%); border-radius: 50%; background: radial-gradient(closest-side, var(--accentSoft), transparent); }\n\n  .top { position: absolute; left: 0; right: 0; top: calc(var(--u) * var(--top)); text-align: center; z-index: 6;\n    padding: 0 calc(var(--W) * .07); display: flex; flex-direction: column; align-items: center; }\n  .eyebrow { margin-bottom: calc(var(--u) * 2.4); font-size: calc(var(--u) * 2.9); font-weight: 700; letter-spacing: var(--kls, .14em);\n    text-transform: uppercase; color: var(--accent); line-height: 1.2; }\n  h1 { font-family: var(--tf); font-weight: var(--tw); line-height: var(--lh); letter-spacing: var(--ls, -.02em);\n    font-size: calc(var(--u) * var(--fs)); color: var(--ink); }\n  h1 span { display: block; width: max-content; max-width: none; margin: 0 auto; white-space: nowrap; }\n  h1 span + span { color: var(--line2); }\n  p.sub { margin-top: calc(var(--u) * 2.4); max-width: calc(var(--u) * 78); font-size: calc(var(--u) * var(--sub));\n    line-height: 1.38; font-weight: 500; color: var(--ink); opacity: .72; text-wrap: balance; }\n  .logo { width: min(100%, calc(var(--u) * 60)); max-height: calc(var(--u) * 26); object-fit: contain; margin-bottom: calc(var(--u) * 3); }\n\n  /* device: a plain modern phone, dark bezel, soft shadow */\n  .tel { position: absolute; z-index: 3; width: var(--pw); aspect-ratio: var(--ar); left: var(--px); top: var(--py);\n    transform: translateX(-50%) rotate(var(--pr, 0deg)); transform-origin: 50% 40%;\n    border-radius: calc(var(--pw) * .155); padding: calc(var(--pw) * .022); background: #121317;\n    box-shadow: inset 0 0 0 calc(var(--pw) * .005) #3a3c44, 0 calc(var(--u) * 2) calc(var(--u) * 4) rgba(0,0,0,.08),\n      0 calc(var(--u) * 5) calc(var(--u) * 12) var(--shadow); }\n  .tel.back { z-index: 2; opacity: .96; }\n  .screen { position: relative; width: 100%; height: 100%; overflow: hidden; background: #fff; border-radius: calc(var(--pw) * .135); }\n  .screen img.app { position: absolute; left: 0; bottom: 0; width: 100%; height: var(--appH); object-fit: cover; object-position: top; }\n  .bar { position: absolute; top: 0; left: 0; right: 0; height: var(--barH); display: flex; align-items: center;\n    justify-content: space-between; padding: 0 8.5% 0 11.5%; font-family: -apple-system, 'SF Pro Text', var(--bf), sans-serif;\n    font-weight: 600; font-size: calc(var(--pw) * .041); z-index: 2; color: var(--barInk, #fff);\n    background: #ffffff center top / 100% 60000% no-repeat; }\n  .bar svg { height: calc(var(--pw) * .03); width: auto; margin-left: calc(var(--pw) * .012); }\n  .island { position: absolute; top: calc(var(--pw) * .025); left: 50%; transform: translateX(-50%); width: 30%; height: calc(var(--pw) * .082);\n    background: #000; border-radius: 999px; z-index: 3; }\n  .tablet .tel { border-radius: calc(var(--pw) * .06); padding: calc(var(--pw) * .018); }\n  .tablet .screen { border-radius: calc(var(--pw) * .044); }\n  .tablet .bar { padding: 0 5%; font-size: calc(var(--pw) * .024); }\n  .tablet .bar svg { height: calc(var(--pw) * .018); }\n  .tablet .island { width: calc(var(--pw) * .016); height: calc(var(--pw) * .016); top: calc(var(--pw) * .007); }\n  .android .tel { border-radius: calc(var(--pw) * .04); padding: calc(var(--pw) * .014); }\n  .android .screen { border-radius: calc(var(--pw) * .028); }\n  .android .island { width: calc(var(--pw) * .013); height: calc(var(--pw) * .013); top: calc(var(--pw) * .009); }\n  .android .bar { padding: 0 4%; }\n\n  .land .top { right: auto; width: var(--colW); padding: 0; left: var(--colL); }\n  .lwin { position: absolute; z-index: 3; left: var(--lx); top: var(--ly); width: var(--lw); border-radius: calc(var(--lw) * .012);\n    overflow: hidden; background: #1c1c1e; box-shadow: 0 calc(var(--u) * 2) calc(var(--u) * 4) rgba(0,0,0,.08), 0 calc(var(--u) * 5) calc(var(--u) * 12) var(--shadow); }\n  .lwin .tb { height: calc(var(--lw) * .028); display: flex; align-items: center; gap: calc(var(--lw) * .006); padding-left: calc(var(--lw) * .012); background: #e8e8ea; }\n  .lwin .tb i { width: calc(var(--lw) * .009); height: calc(var(--lw) * .009); border-radius: 50%; background: #ff5f57; }\n  .lwin .tb i:nth-child(2) { background: #febc2e; } .lwin .tb i:nth-child(3) { background: #28c840; }\n  .lwin img { display: block; width: 100%; aspect-ratio: var(--lar); object-fit: cover; }\n  .lwin.bare { border-radius: calc(var(--lw) * .02); } .lwin.bare .tb { display: none; }\n  .chip { position: absolute; z-index: 9; display: flex; flex-direction: column; padding: calc(var(--u) * 1.8) calc(var(--u) * 3);\n    border-radius: calc(var(--u) * 3); background: rgba(255,255,255,.92); color: #111827; white-space: nowrap;\n    box-shadow: 0 calc(var(--u) * 1) calc(var(--u) * 3.5) rgba(15,23,42,.14); }\n  .chip b { font-family: var(--tf); font-weight: 700; font-size: calc(var(--u) * 3.6); line-height: 1.1; }\n  .chip small { font-size: calc(var(--u) * 2.3); font-weight: 500; opacity: .65; margin-top: calc(var(--u) * .3); }\n</style>\n</head>\n<body>\n<div id=\"c\"></div>\n<script type=\"module\">\nconst q = new URLSearchParams(location.search);\nconst W = +q.get('w'), H = +q.get('h'), LANG = q.get('lang'), SID = q.get('s'), V = q.get('v') ?? '';\nconst tablet = q.get('device') === 'tablet', LAND = q.get('device') === 'landscape';\nconst job = await (await fetch(`/job.json?lang=${encodeURIComponent(LANG)}&s=${encodeURIComponent(SID)}&v=${encodeURIComponent(V)}`)).json();\nconst S = job.scene, C = job.copy, P = job.palette;\nconst u = LAND ? H / 100 : W / 100, Hu = H / u;\nconst dev = LAND ? job.landscape : tablet ? job.tablet : job.phone;\nconst FR = `/frames/${encodeURIComponent(LANG)}/${LAND ? 'landscape' : tablet ? 'tablet' : 'phone'}/`;\nconst MX = W * .07, MT = H * .05;                       // safe margins (lib.ts SAFE_MARGIN)\nconst colW = W * .36, colL = job.side === 'right' ? W - MX - colW : MX;\n\ndocument.documentElement.lang = LANG;\nconst RTL = !!job.rtl;\nconst R = document.documentElement.style;\n// #rrggbb -> rgba with alpha, for the soft accent glow\nconst rgba = (hex, a) => { const m = /^#?([0-9a-f]{6})$/i.exec(hex); if (!m) return hex; const n = parseInt(m[1], 16); return `rgba(${n >> 16},${(n >> 8) & 255},${n & 255},${a})`; };\nconst lum = hex => { const m = /^#?([0-9a-f]{6})$/i.exec(hex); if (!m) return 1; const n = parseInt(m[1], 16); return (.299 * (n >> 16) + .587 * ((n >> 8) & 255) + .114 * (n & 255)) / 255; };\nconst tone = P.bgTone ?? (Array.isArray(P.bg) ? P.bg[1] : P.bg);\nconst dark = !!P.photo && P.photo.overlay >= .35 || lum(tone) < .45;\nR.setProperty('--W', W + 'px'); R.setProperty('--H', H + 'px'); R.setProperty('--u', u + 'px');\nR.setProperty('--ink', P.ink); R.setProperty('--accent', P.glow); R.setProperty('--shadow', P.shadow);\nR.setProperty('--line2', dark ? P.glow : P.ink);\nR.setProperty('--accentSoft', rgba(P.glow, dark ? .28 : .14));\n// bgCss from job.json (palette.ts bgCss / photoCss): stops, one colour, a CSS gradient string, or a photo under an overlay\nR.setProperty('--bg', P.bgCss ?? (Array.isArray(P.bg) ? `linear-gradient(180deg, ${P.bg.join(', ')})` : P.bg));\nconst T = job.fonts.title, B = job.fonts.body, X = job.fonts.script;\n// titleStack / bodyStack (from shots fonts): script face, the configured font, then any automatic Noto fallback\nconst fstack = (st, def) => (st ?? (X ? [X, def] : [def])).map(f => `'${f}'`).join(', ') + ', sans-serif';\nR.setProperty('--tf', fstack(job.fonts.titleStack, T));\nR.setProperty('--bf', fstack(job.fonts.bodyStack, B));\nR.setProperty('--tw', 750);\nconst CJK = /^(ja|ko|zh)/.test(LANG);\nR.setProperty('--lh', /^(ar|hi|fa|ur|th)/.test(LANG) ? 1.3 : CJK ? 1.18 : 1.06);\nif (X) { R.setProperty('--ls', '0'); R.setProperty('--kls', '0'); }\nif (LANG.startsWith('ja')) document.documentElement.style.wordBreak = 'auto-phrase';\nif (LANG.startsWith('ko')) document.documentElement.style.wordBreak = 'keep-all';\nif (tablet) document.body.classList.add('tablet');\nif (q.get('style') === 'android') document.body.classList.add('android');\nif (LAND) { document.body.classList.add('land'); R.setProperty('--colW', colW + 'px'); R.setProperty('--colL', colL + 'px'); }\nconst tall = !LAND && Hu > 200, wide = !LAND && Hu < 150;\nR.setProperty('--top', Math.max(tall ? 9.5 : wide ? 4.5 : 6, MT / u));\nR.setProperty('--fs', LAND ? 8.5 : tall ? 8.6 : wide ? 5.6 : 7);\nR.setProperty('--sub', LAND ? 3.4 : tall ? 3.7 : wide ? 2.6 : 3.2);\nconst AR = dev.w / (dev.h + dev.bar);\nR.setProperty('--ar', `${dev.w} / ${dev.h + dev.bar}`);\nR.setProperty('--appH', `${100 * dev.h / (dev.h + dev.bar)}%`);\nR.setProperty('--barH', `${100 * dev.bar / (dev.h + dev.bar)}%`);\n\nconst c = document.getElementById('c');\nconst esc = s => { const t = String(s ?? '').replace(/&/g, '&amp;').replace(/</g, '&lt;');\n  return RTL ? t.replace(/\\d+(?:\\s*\\/\\s*\\d+)?/g, m => '⁦' + m + '⁩') : t; };\nlet top = '';\nif (S.hero && job.logo) top += `<img class=\"logo\" src=\"/logo\">`;\nif (C.eyebrow) top += `<div class=\"eyebrow\">${esc(C.eyebrow)}</div>`;\ntop += `<h1><span>${esc(C.title?.[0])}</span>${C.title?.[1] ? `<span>${esc(C.title[1])}</span>` : ''}</h1>`;\nif (C.sub) top += `<p class=\"sub\">${esc(C.sub)}</p>`;\nc.innerHTML = `<div class=\"soft\"></div><div class=\"top\"${RTL ? ' dir=\"rtl\"' : ''}>${top}</div>`;\n\nawait document.fonts.ready;\nawait Promise.all([...document.images].map(i => i.decode().catch(() => {})));\nconst overflow = [];\nfor (const [i, sp] of [...c.querySelectorAll('h1 span')].entries()) {\n  const max = LAND ? colW : W - 2 * MX, wd = sp.getBoundingClientRect().width;\n  let f = 1; while (wd * f > max && f > .55) f -= .02;\n  if (f < 1) sp.style.fontSize = `calc(${getComputedStyle(sp).fontSize} * ${f.toFixed(2)})`;\n  if (wd * f > max + 1) overflow.push(`title line ${i + 1} is too long even at 55 % size: shorten it`);\n  else if (f < .7) overflow.push(`title line ${i + 1} shrunk to ${Math.round(f * 100)} %: consider shorter words`);\n}\nconst subEl = c.querySelector('p.sub');\nif (subEl) { const lines = Math.round(subEl.getBoundingClientRect().height / parseFloat(getComputedStyle(subEl).lineHeight)); if (lines > 3) overflow.push(`subtitle wraps to ${lines} lines (max 3)`); }\nconst textBottom = c.querySelector('.top').getBoundingClientRect().bottom / u;\nportrait: {\nif (LAND) {\n  const topEl = c.querySelector('.top'), bh = topEl.getBoundingClientRect().height;\n  topEl.style.top = Math.max(MT, (H - bh) / 2) + 'px';\n  if (bh > H - MT * 2) overflow.push('text block is taller than the image: shorten the copy');\n  const f = S.frames[0], src = FR + encodeURIComponent(f.src), bare = q.get('frame') === 'none';\n  const x0 = job.side === 'right' ? W * .04 : colL + colW + W * .05, x1 = job.side === 'right' ? colL - W * .05 : W - W * .04;\n  let lw = x1 - x0;\n  const lh = k => k / (dev.w / dev.h) + (bare ? 0 : k * .028);\n  if (lh(lw) > H * .88) lw = lw * H * .88 / lh(lw);\n  R.setProperty('--lar', `${dev.w} / ${dev.h}`); R.setProperty('--softY', H / 2 + 'px');\n  c.insertAdjacentHTML('beforeend', `<div class=\"lwin front${bare ? ' bare' : ''}\" style=\"--lw:${lw}px;--lx:${(x0 + x1 - lw) / 2}px;--ly:${(H - lh(lw)) / 2}px\"><div class=\"tb\"><i></i><i></i><i></i></div><img src=\"${src}\"></div>`);\n  await Promise.all([...document.images].map(i => i.decode().catch(() => {})));\n  break portrait;\n}\n\nconst frames = S.frames.map(f => ({ x: 0, dy: 0, scale: 1, rotate: 0, ...f }));\nconst front = frames[0];\nconst pTop = textBottom + (tall ? 6 : 4.5);\nconst room = Hu - pTop + (S.over ?? 9);\nconst pw = Math.min(tablet ? 80 : 74, Math.max(52, room * AR)) * front.scale;\nconst ph = pw / AR;\nR.setProperty('--softY', (pTop + ph * .35) * u + 'px');\n\n// status bar text colour from the frame's own top row (dark text on a light app bar)\nasync function barInk(src) {\n  try {\n    const img = new Image(); img.src = src; await img.decode();\n    const cv = document.createElement('canvas'); cv.width = 8; cv.height = 2;\n    const g = cv.getContext('2d'); g.drawImage(img, 0, 0, img.naturalWidth, 2, 0, 0, 8, 2);\n    const d = g.getImageData(0, 0, 8, 1).data; let L = 0;\n    for (let i = 0; i < d.length; i += 4) L += .299 * d[i] + .587 * d[i + 1] + .114 * d[i + 2];\n    return L / (d.length / 4) > 150 ? '#111' : '#fff';\n  } catch { return '#fff'; }\n}\nconst BAR = `<span>9:41</span><span style=\"display:flex;align-items:center\">\n<svg viewBox=\"0 0 18 12\"><g fill=\"currentColor\"><rect x=\"0\" y=\"8\" width=\"3\" height=\"4\" rx=\".8\"/><rect x=\"5\" y=\"5.5\" width=\"3\" height=\"6.5\" rx=\".8\"/><rect x=\"10\" y=\"3\" width=\"3\" height=\"9\" rx=\".8\"/><rect x=\"15\" y=\"0\" width=\"3\" height=\"12\" rx=\".8\"/></g></svg>\n<svg viewBox=\"0 0 16 12\"><path fill=\"currentColor\" d=\"M8 2.2c2.3 0 4.4.9 6 2.4l1.3-1.3A10.3 10.3 0 0 0 8 .4C5.2.4 2.6 1.5.7 3.3L2 4.6a8.5 8.5 0 0 1 6-2.4zm0 3.6c1.3 0 2.5.5 3.4 1.3l1.3-1.3A6.6 6.6 0 0 0 8 4c-1.8 0-3.4.7-4.7 1.8l1.3 1.3C5.5 6.3 6.7 5.8 8 5.8zm0 3.6c.4 0 .8.2 1.1.4L8 11.6 6.9 9.8c.3-.2.7-.4 1.1-.4z\"/></svg>\n<svg viewBox=\"0 0 27 13\"><rect x=\".5\" y=\".5\" width=\"23\" height=\"12\" rx=\"3.5\" fill=\"none\" stroke=\"currentColor\" stroke-opacity=\".45\"/><rect x=\"2\" y=\"2\" width=\"20\" height=\"9\" rx=\"2.2\" fill=\"currentColor\"/><path d=\"M25 4.5v4c.8-.3 1.4-1.1 1.4-2s-.6-1.7-1.4-2z\" fill=\"currentColor\" fill-opacity=\".45\"/></svg></span>`;\n\nlet html = '';\nconst phone = async (f, cls) => {\n  const w = pw / front.scale * f.scale, src = FR + encodeURIComponent(f.src);\n  const ink = await barInk(src);\n  return `<div class=\"tel ${cls}\" style=\"--pw:${w * u}px;--px:${(50 + f.x) * u}px;--py:${(pTop + f.dy) * u}px;--pr:${f.rotate}deg\"><div class=\"screen\">\n    <div class=\"bar\" style=\"background-image:url('${src}');--barInk:${ink}\">${BAR}</div><div class=\"island\"></div><img class=\"app\" src=\"${src}\"></div></div>`;\n};\nfor (const f of frames.slice(1)) html += await phone(f, 'back');\nhtml += await phone(front, 'front');\n(S.badges ?? []).forEach((b, i) => {\n  const [big, small] = (C.badges ?? [])[i] ?? [''];\n  if (!big) return;\n  const pos = b.side === 'l' ? `left:${5 * u}px` : `right:${5 * u}px`;\n  html += `<div class=\"chip\"${RTL ? ' dir=\"rtl\"' : ''} style=\"${pos};top:${Math.min(pTop + ph * b.y, Hu - 14) * u}px\"><b>${esc(big)}</b>${small ? `<small>${esc(small)}</small>` : ''}</div>`;\n});\nc.insertAdjacentHTML('beforeend', html);\nawait Promise.all([...document.images].map(i => i.decode().catch(() => {})));\nif (textBottom > Hu * .45) overflow.push(`text block covers ${Math.round(textBottom / Hu * 100)} % of the height (the app should be the star)`);\nfor (const b of c.querySelectorAll('.chip')) { const r = b.getBoundingClientRect(); if (r.left < 0 || r.right > W || r.bottom > H) overflow.push(`badge \"${b.textContent.trim().slice(0, 30)}\" runs off the image`); }\n}\ndocument.body.dataset.overflow = JSON.stringify(overflow);\ndocument.body.dataset.boxes = JSON.stringify([...c.querySelectorAll('.top .logo, .top .eyebrow, .top h1 span, .top p.sub')].map(e => { const r = e.getBoundingClientRect();\n  return { el: e.matches('.logo') ? 'logo' : e.matches('.eyebrow') ? 'eyebrow' : e.matches('p') ? 'subtitle' : 'title', x: r.x, y: r.y, w: r.width, h: r.height }; }).filter(b => b.w > 0 && b.h > 0));\n// the front device only: back phones of a fanned layout peek in from the side on purpose\ndocument.body.dataset.devices = JSON.stringify([...c.querySelectorAll('.tel.front, .lwin')].map(t => { const r = t.getBoundingClientRect(); return { x: r.x, y: r.y, w: r.width, h: r.height }; }));\ndocument.body.dataset.ready = '1';\n</script>\n</body>\n</html>\n",
   "template-bleed.html": "<!doctype html>\n<html>\n<head>\n<meta charset=\"utf-8\">\n<link rel=\"stylesheet\" href=\"/fonts/fonts.css\">\n<!-- Full-bleed layout (shots.layout \"bleed\"): the app's own frame fills the whole image, no device and no background,\n     and a short caption sits in one corner. Legibility comes from a text shadow and a soft glow only: no band, no\n     scrim, no box behind the words. template-bleed.html?s=<scene>&w=<px>&h=<px>&lang=<id>&size=<size key>.\n     The frame is read at the size's own pixels: /frames/<lang>/<size>/<src> (shots check: frames for \"bleed\").\n     Colours from the scene palette: ink = the tight outline shadow, shadow = the wide soft glow, glow = line 2.\n     A dark custom palette suits it, e.g. { bg: [...], ink: 'rgba(4,18,38,.92)', shadow: 'rgba(4,22,48,.55)', glow: '#ffd76a' }. -->\n<style>\n  * { box-sizing: border-box; margin: 0; padding: 0; }\n  html, body { width: var(--W); height: var(--H); overflow: hidden; background: #000; }\n  #c { position: relative; width: var(--W); height: var(--H); overflow: hidden; }\n  #c > img.frame { position: absolute; inset: 0; width: 100%; height: 100%; object-fit: cover; display: block; }\n  .cap { position: absolute; max-width: calc(var(--W) * var(--mw)); display: flex; flex-direction: column; gap: calc(var(--fs) * .06);\n    font-family: var(--tf); font-weight: var(--tw); font-size: var(--fs); line-height: var(--lh); color: #fff; letter-spacing: var(--ls, .005em);\n    text-wrap: balance;\n    /* a dark outline-shadow for edges, then a wide soft glow: readable on light water and on dark rock alike */\n    text-shadow: 0 0 calc(var(--fs) * .05) var(--ink), 0 calc(var(--fs) * .04) calc(var(--fs) * .08) var(--ink),\n      0 0 calc(var(--fs) * .3) var(--shadow), 0 0 calc(var(--fs) * .6) var(--shadow); }\n  .cap span { display: block; }\n  .cap span + span { color: var(--accent); }\n  .cap.tl { left: var(--mx); top: var(--my); }\n  .cap.tr { right: var(--mx); top: var(--my); text-align: right; align-items: flex-end; }\n  .cap.bl { left: var(--mx); bottom: var(--my); }\n  .cap.br { right: var(--mx); bottom: var(--my); text-align: right; align-items: flex-end; }\n  .cap[dir=\"rtl\"].tl, .cap[dir=\"rtl\"].bl { text-align: right; }\n</style>\n</head>\n<body>\n<div id=\"c\"></div>\n<script type=\"module\">\nconst q = new URLSearchParams(location.search);\nconst W = +q.get('w'), H = +q.get('h'), LANG = q.get('lang'), SID = q.get('s'), V = q.get('v') ?? '', SIZE = q.get('size') ?? '';\nconst job = await (await fetch(`/job.json?lang=${encodeURIComponent(LANG)}&s=${encodeURIComponent(SID)}&v=${encodeURIComponent(V)}`)).json();\nconst S = job.scene, C = job.copy, P = job.palette;\nconst R = document.documentElement.style;\ndocument.documentElement.lang = LANG;\nconst short = Math.min(W, H);\nR.setProperty('--W', W + 'px'); R.setProperty('--H', H + 'px');\n// caption size from the short side: about 9 % of it on a landscape phone, a little less on squarer canvases\nconst fs = short * (W / H > 1.9 ? .092 : W / H > 1.5 ? .08 : .066) * (S.captionScale ?? 1);\nR.setProperty('--fs', fs + 'px');\nconst inset = S.captionInset ?? .05;                   // distance from the corner, share of the short side\nR.setProperty('--mx', (short * (inset + .005)) + 'px'); R.setProperty('--my', (short * inset) + 'px');\n// the caption keeps to its corner: at most 40 % of a landscape image's width (scene.captionWidth), so it stays clear of\n// what an app centres at the top\nconst MW = S.captionWidth ?? (W > H ? .4 : .84);\nR.setProperty('--mw', MW);\n// palette: ink = the tight outline shadow, shadow = the wide soft glow, glow = the second line's colour\nR.setProperty('--ink', P.ink); R.setProperty('--shadow', P.shadow); R.setProperty('--accent', P.glow);\nconst X = job.fonts.script;\nconst fstack = (st, def) => (st ?? (X ? [X, def] : [def])).map(f => `'${f}'`).join(', ') + ', sans-serif';\nR.setProperty('--tf', fstack(job.fonts.titleStack, job.fonts.title));\nR.setProperty('--tw', X ? 900 : job.fonts.titleWeight ?? 400);\nconst CJK = /^(ja|ko|zh)/.test(LANG);\nR.setProperty('--lh', /^(ar|hi|fa|ur|th)/.test(LANG) ? 1.3 : CJK ? 1.16 : 1.04);\nif (X) R.setProperty('--ls', '0');\nif (LANG.startsWith('ja')) document.documentElement.style.wordBreak = 'auto-phrase';\nif (LANG.startsWith('ko')) document.documentElement.style.wordBreak = 'keep-all';\nconst RTL = !!job.rtl;\nconst esc = s => String(s ?? '').replace(/&/g, '&amp;').replace(/</g, '&lt;');\nconst corner = ['tl', 'tr', 'bl', 'br'].includes(S.corner) ? S.corner : 'tl';\nconst src = `/frames/${encodeURIComponent(LANG)}/${encodeURIComponent(SIZE)}/${encodeURIComponent(S.frames[0].src)}`;\nconst lines = (C.title ?? []).filter(Boolean);\nconst c = document.getElementById('c');\nc.innerHTML = `<img class=\"frame\" src=\"${src}\"><div class=\"cap ${corner}\"${RTL ? ' dir=\"rtl\"' : ''}>${lines.map(l => `<span>${esc(l)}</span>`).join('')}</div>`;\nawait document.fonts.ready;\nawait Promise.all([...document.images].map(i => i.decode().catch(() => {})));\nconst overflow = [];                                    // read by `shots render` -> report.json -> shots check / gallery\nconst img = c.querySelector('img.frame');\nif (!img.naturalWidth) overflow.push(`frame ${SIZE}/${S.frames[0].src} did not load`);\nelse {\n  const ar = img.naturalWidth / img.naturalHeight, want = W / H;\n  if (Math.abs(ar / want - 1) > .01) overflow.push(`frame ${img.naturalWidth}x${img.naturalHeight} is cropped to fit ${W}x${H}: capture it at the size's aspect`);\n  if (img.naturalWidth < W * .99) overflow.push(`frame ${img.naturalWidth}x${img.naturalHeight} is upscaled to ${W}x${H}: capture it at native resolution`);\n}\nconst cap = c.querySelector('.cap');\nconst maxW = W * MW;\nfor (const [i, sp] of [...cap.querySelectorAll('span')].entries()) {   // shrink a line that would not fit its corner\n  const wd = sp.scrollWidth;\n  let f = 1; while (wd * f > maxW && f > .6) f -= .02;\n  if (f < 1) sp.style.fontSize = `${(fs * f).toFixed(1)}px`;\n  if (wd * f > maxW + 1) overflow.push(`caption line ${i + 1} is too long even at 60 % size: shorten it`);\n}\nconst r = cap.getBoundingClientRect();\nif (r.left < 0 || r.top < 0 || r.right > W || r.bottom > H) overflow.push('caption runs off the image');\nif (r.height > H * .42) overflow.push(`caption covers ${Math.round(r.height / H * 100)} % of the height: shorten it`);\nif (lines.join(' ').split(/\\s+/).length > 6 && !CJK && !/^th/.test(LANG)) overflow.push('caption has more than 6 words: keep it to 3-5');\ndocument.body.dataset.overflow = JSON.stringify(overflow);\ndocument.body.dataset.devices = '[]';\ndocument.body.dataset.ready = '1';\n</script>\n</body>\n</html>\n",

From 0ef27cf2e46ad400639e4d315c34b5540ee3605b Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Sat, 24 Oct 2026 13:01:50 +0800
Subject: [PATCH 020/126] desktop: five sections by job (Release, Store page,
 Revenue, Players, Health), Game services view, sidebar by attention

- app view: 12 tabs become 5 sections, each with a header (what it is for, the one next step from state
  already read) and its sub views in a segmented control; 1-5 jump, Ctrl+Shift+[ ] cycle, Ctrl+K and the
  context menu list sections and sub views; old tab ids, section and section/sub links all resolve
- Players > Game services (games only): both stores, one row per leaderboard / achievement with its
  languages and each store's state, Game Center locale map, Play API-disabled state with the console plan
- games status --json: items, localeMap, playApiDisabled; inspect summary: games
- sidebar: apps grouped by attention / in progress / live / not on a store, one status line each, studio
  filter, workspace as a footer icon row
- boot check opens places like a person (section, then sub view)
---
 apps/desktop/src/App.tsx                  | 147 +++++++++++++---------
 apps/desktop/src/design.css               |  42 +++++++
 apps/desktop/src/dev/fixtures.ts          |  10 ++
 apps/desktop/src/i18n/en.ts               | 102 +++++++++++++++
 apps/desktop/src/i18n/tr.ts               | 102 +++++++++++++++
 apps/desktop/src/lib/model.ts             |  47 ++++++-
 apps/desktop/src/lib/sections.ts          |  94 ++++++++++++++
 apps/desktop/src/nav.ts                   |  49 ++++++--
 apps/desktop/src/screens/AppView.tsx      |  26 ++--
 apps/desktop/src/screens/SectionHead.tsx  |  60 +++++++++
 apps/desktop/src/screens/tabs/AppInfo.tsx |   2 -
 apps/desktop/src/screens/tabs/Games.tsx   |  90 +++++++++++++
 apps/desktop/src/store.tsx                |  18 +++
 apps/desktop/src/ui/GameServicesCard.tsx  |  16 ++-
 apps/desktop/src/ui/app-menu.ts           |  10 +-
 apps/desktop/src/ui/ds.tsx                |   5 +-
 apps/desktop/tests/sections.test.ts       |  79 ++++++++++++
 cli/games-status.ts                       |  46 ++++++-
 cli/inspect.ts                            |   1 +
 cli/lib/desktop-protocol.ts               |   2 +
 tests/game-services.test.ts               |  14 ++-
 tools/desktop-boot-check.ts               |  71 ++++++++---
 22 files changed, 918 insertions(+), 115 deletions(-)
 create mode 100644 apps/desktop/src/lib/sections.ts
 create mode 100644 apps/desktop/src/screens/SectionHead.tsx
 create mode 100644 apps/desktop/src/screens/tabs/Games.tsx
 create mode 100644 apps/desktop/tests/sections.test.ts

diff --git a/apps/desktop/src/App.tsx b/apps/desktop/src/App.tsx
index b1b01fe..4cfa717 100644
--- a/apps/desktop/src/App.tsx
+++ b/apps/desktop/src/App.tsx
@@ -1,4 +1,5 @@
-// Shell: sidebar (studios, collapsible, with their apps; the workspace), top bar (breadcrumbs, last read, refresh),
+// Shell: sidebar (apps grouped by what they need: attention, in progress, live, not on a store yet; one status line
+// each; a studio filter; the workspace as a compact footer row), top bar (breadcrumbs, last read, refresh),
 // the screen, the command palette (Cmd/Ctrl+K), toasts and the first-run welcome guide.
 import { DryRunPreview } from './ui/DryRunPreview';
 import { useCallback, useEffect, useMemo, useState } from 'react';
@@ -6,8 +7,8 @@ import { FIXTURES, onDeepLink, onDeepLinkFolder, onTrayRoute } from './api';
 import { devSwitch } from './dev/switches';
 import { type Key, t } from './i18n';
 import { ago, num } from './lib/format';
-import { groupByStudio, type UnifiedApp } from './lib/identity';
-import { NavCtx, parseRouteJson, parseStart, type Route, sameRoute, TAB_ICON, TAB_KEY, tabsFor, WORKSPACE, type WorkspaceScreen } from './nav';
+import type { UnifiedApp } from './lib/identity';
+import { NavCtx, parseRouteJson, parseStart, type Route, sameRoute, SECTION_ICON, SECTION_KEY, sectionOf, sectionsFor, subsOf, TAB_ICON, TAB_KEY, tabsFor, WORKSPACE, type WorkspaceScreen } from './nav';
 import { usePrefs } from './prefs-ctx';
 import { Accounts } from './screens/Accounts';
 import { AppFolders } from './screens/AppFolders';
@@ -28,16 +29,18 @@ import { Toasts } from './ui/Toasts';
 import { useContextMenu } from './ui/ContextMenu';
 import { appMenu } from './ui/app-menu';
 import { isEditable, isItem, type MenuInput } from './ui/menu-logic';
-import { worstTone } from './ui/ds';
-import { attention } from './lib/model';
+import { attention, isGameSummary, SIDE_GROUPS, type SideGroup, sideStatus } from './lib/model';
 
 const WS_ICON: Record<WorkspaceScreen, IconName> = { apps: 'folder', accounts: 'building', ignored: 'eyeOff', dependencies: 'package', settings: 'settings' };
 export const WS_KEY: Record<WorkspaceScreen, Key> = { apps: 'nav.apps', accounts: 'nav.accounts', ignored: 'nav.ignored', dependencies: 'nav.dependencies', settings: 'nav.settings' };
 
 const SIDE_KEY = 'storebound.side.v1';
+const STUDIO_KEY = 'storebound.side.studio.v1';
 function loadCollapsed(): string[] {
   try { const v = JSON.parse(localStorage.getItem(SIDE_KEY) ?? '[]') as unknown; return Array.isArray(v) ? v.filter((x): x is string => typeof x === 'string') : []; } catch { return []; }
 }
+function loadStudio(): string | null { try { return localStorage.getItem(STUDIO_KEY); } catch { return null; } }
+const GROUP_KEY: Record<SideGroup | 'ignored', Key> = { attention: 'side.gAttention', progress: 'side.gProgress', live: 'side.gLive', draft: 'side.gDraft', ignored: 'nav.ignored' };
 
 export function App({ onTheme }: { onTheme: () => void }) {
   const d = useData();
@@ -47,6 +50,8 @@ export function App({ onTheme }: { onTheme: () => void }) {
   const [welcome, setWelcome] = useState(false);
   const [started, setStarted] = useState(false);
   const [collapsed, setCollapsed] = useState<string[]>(loadCollapsed);
+  const [studioFilter, setStudioFilterState] = useState<string | null>(loadStudio);
+  const setStudioFilter = (v: string | null) => { setStudioFilterState(v); try { if (v) localStorage.setItem(STUDIO_KEY, v); else localStorage.removeItem(STUDIO_KEY); } catch { /* private mode */ } };
   const exports = useExportItems();
   const runExport = useRunExport();
 
@@ -56,16 +61,27 @@ export function App({ onTheme }: { onTheme: () => void }) {
   const allReads = useReadState({ tags: ['all'] });
   const [showIgnored, setShowIgnored] = useShowIgnored();
   const ignoredApps = useMemo(() => d.apps.filter(a => a.ignored).sort((a, b) => a.name.localeCompare(b.name)), [d.apps]);
-  const listed = showIgnored ? [...visible, ...ignoredApps] : visible;
-  const groups = d.studios.length ? groupByStudio(listed.map(a => ({ app: a })), d.studios) : [{ studio: null as string | null, rows: listed.map(a => ({ app: a })) }];
-  // Alt+Up / Alt+Down: the previous / next app in sidebar order (keeps the tab when the other app has it)
-  const sideOrder = groups.flatMap(x => x.rows.map(r => r.app));
+  const gameOf = useCallback((a: UnifiedApp) => isGameSummary(d.statusFor(a)?.summary), [d]);
+  const tabsOf = useCallback((a: UnifiedApp) => tabsFor(!!a.project, gameOf(a)), [gameOf]);
+  // the sidebar: apps by what they need (attention, in progress, live, not on a store yet), one status line each
+  const studioOn = studioFilter && (studioFilter === 'none' || d.studios.some(s => s.id === studioFilter)) ? studioFilter : null;
+  const inStudio = useCallback((a: UnifiedApp) => !studioOn || (studioOn === 'none' ? !a.studio : a.studio === studioOn), [studioOn]);
+  const sideRows = useMemo(() => visible.filter(inStudio).map(a => {
+    const e = d.statusFor(a), l = d.liveFor(a);
+    return { app: a, st: sideStatus({ att: attention(a.key, a.name, e, l), all: l?.release.all ?? [], read: !!l || e?.release.source === 'live', missing: !!a.project?.missing, storeOnly: !a.project }) };
+  }), [visible, d, inStudio]);
+  const groups: { id: SideGroup | 'ignored'; rows: typeof sideRows }[] = [
+    ...SIDE_GROUPS.map(g => ({ id: g, rows: sideRows.filter(r => r.st.group === g) })).filter(g => g.rows.length),
+    ...(showIgnored && ignoredApps.length ? [{ id: 'ignored' as const, rows: ignoredApps.filter(inStudio).map(a => ({ app: a, st: { group: 'draft' as SideGroup, text: t('side.ignored'), tone: 'neutral' as const } })) }] : []),
+  ];
+  // Alt+Up / Alt+Down: the previous / next app in sidebar order (keeps the place when the other app has it)
+  const sideOrder = groups.flatMap(x => (collapsed.includes(`g:${x.id}`) ? [] : x.rows.map(r => r.app)));
   const stepApp = useCallback((dir: 1 | -1) => {
     if (!sideOrder.length) return;
     const i = route.screen === 'app' ? sideOrder.findIndex(a => a.key === route.appId) : -1;
     const next = sideOrder[i < 0 ? (dir === 1 ? 0 : sideOrder.length - 1) : (i + dir + sideOrder.length) % sideOrder.length]!;
-    go({ screen: 'app', appId: next.key, tab: route.screen === 'app' && tabsFor(!!next.project).includes(route.tab) ? route.tab : 'releases' });
-  }, [sideOrder, route, go]);
+    go({ screen: 'app', appId: next.key, tab: route.screen === 'app' && tabsOf(next).includes(route.tab) ? route.tab : 'releases' });
+  }, [sideOrder, route, go, tabsOf]);
   const toggleGroup = (id: string) => setCollapsed(c => {
     const next = c.includes(id) ? c.filter(x => x !== id) : [...c, id];
     try { localStorage.setItem(SIDE_KEY, JSON.stringify(next)); } catch { /* private mode */ }
@@ -94,9 +110,12 @@ export function App({ onTheme }: { onTheme: () => void }) {
   }, [go, d.reload]);
 
   const app = route.screen === 'app' ? d.appByKey(route.appId) : undefined;
-  const tabs = app ? tabsFor(!!app.project) : [];
+  const game = app ? gameOf(app) : false;
+  const tabs = app ? tabsOf(app) : [];
+  const sections = app ? sectionsFor(!!app.project, game) : [];
 
-  // keyboard: Cmd/Ctrl+K palette, Cmd/Ctrl+1 portfolio, 2-6 workspace, Cmd/Ctrl+Shift+[ ] app tabs
+  // keyboard: Cmd/Ctrl+K palette, Cmd/Ctrl+1 portfolio, 2-6 workspace, 1-5 (no modifier) the app's sections,
+  // Cmd/Ctrl+Shift+[ ] the previous / next section
   useEffect(() => {
     const onKey = (e: KeyboardEvent) => {
       const mod = e.metaKey || e.ctrlKey;
@@ -109,15 +128,20 @@ export function App({ onTheme }: { onTheme: () => void }) {
         go(n === 1 ? { screen: 'portfolio' } : { screen: WORKSPACE[n - 2]! });
         return;
       }
-      if (mod && e.shiftKey && (e.key === '[' || e.key === ']' || e.key === '{' || e.key === '}') && route.screen === 'app' && tabs.length) {
+      if (!mod && !e.shiftKey && !e.altKey && /^[1-9]$/.test(e.key) && route.screen === 'app' && app && !isEditable(e.target as HTMLInputElement) && !document.querySelector('.ds-menu, .ds-dialog')) {
+        const sec = sections[Number(e.key) - 1];
+        if (sec) { e.preventDefault(); go({ ...route, tab: subsOf(sec, !!app.project, game)[0]! }); }
+        return;
+      }
+      if (mod && e.shiftKey && (e.key === '[' || e.key === ']' || e.key === '{' || e.key === '}') && route.screen === 'app' && app && sections.length) {
         e.preventDefault();
-        const i = tabs.indexOf(route.tab) + (e.key === ']' || e.key === '}' ? 1 : -1);
-        go({ ...route, tab: tabs[(i + tabs.length) % tabs.length]! });
+        const i = sections.indexOf(sectionOf(route.tab)) + (e.key === ']' || e.key === '}' ? 1 : -1);
+        go({ ...route, tab: subsOf(sections[(i + sections.length) % sections.length]!, !!app.project, game)[0]! });
       }
     };
     window.addEventListener('keydown', onKey);
     return () => window.removeEventListener('keydown', onKey);
-  }, [palette, welcome, route, go, tabs, stepApp]);
+  }, [palette, welcome, route, go, app, sections, game, stepApp]);
 
   const closeWelcome = useCallback(() => {
     setWelcome(false);
@@ -131,13 +155,18 @@ export function App({ onTheme }: { onTheme: () => void }) {
     const G = { apps: t('palette.gApps'), go: t('palette.gGo'), tabs: t('palette.gTabs'), act: t('palette.gActions'), exp: t('palette.gExport') };
     const studioName = (a: UnifiedApp) => d.studios.find(s => s.id === a.studio)?.name;
     for (const a of visible) c.push({ id: `app-${a.key}`, group: G.apps, title: a.name, hint: studioName(a) ?? t('palette.openApp'), keywords: `${a.ios?.app.bundleId ?? ''} ${a.android?.app.id ?? ''} ${a.project?.name ?? ''}`, app: { name: a.name, icon: d.iconFor(a) },
-      run: () => go({ screen: 'app', appId: a.key, tab: route.screen === 'app' && tabsFor(!!a.project).includes(route.tab) ? route.tab : 'releases' }) });
+      run: () => go({ screen: 'app', appId: a.key, tab: route.screen === 'app' && tabsOf(a).includes(route.tab) ? route.tab : 'releases' }) });
     c.push({ id: 'go-next-app', group: G.go, title: t('palette.nextApp'), icon: 'arrowRight', hint: 'Alt ↓', keywords: 'next app down j', run: () => stepApp(1) });
     c.push({ id: 'go-prev-app', group: G.go, title: t('palette.prevApp'), icon: 'arrowLeft', hint: 'Alt ↑', keywords: 'previous app up k', run: () => stepApp(-1) });
     c.push({ id: 'go-portfolio', group: G.go, title: t('nav.portfolio'), icon: 'portfolio', hint: `${MOD} 1`, run: () => go({ screen: 'portfolio' }) });
     WORKSPACE.forEach((s, i) => c.push({ id: `go-${s}`, group: G.go, title: t(WS_KEY[s]), icon: WS_ICON[s], hint: `${MOD} ${i + 2}`, run: () => go({ screen: s }) }));
     for (const s of d.studios) c.push({ id: `studio-${s.id}`, group: G.go, title: s.name, icon: 'building', keywords: 'studio', hint: t('palette.studio'), run: () => go({ screen: 'accounts', section: s.id }) });
-    if (app) for (const tab of tabs) c.push({ id: `tab-${tab}`, group: G.tabs, title: `${app.name} · ${t(TAB_KEY[tab])}`, icon: TAB_ICON[tab], run: () => go({ screen: 'app', appId: app.key, tab }) });
+    // every section of the open app (1-5) and every sub view in it
+    if (app) sections.forEach((sec, i) => {
+      const subs = subsOf(sec, !!app.project, game);
+      c.push({ id: `sec-${sec}`, group: G.tabs, title: `${app.name} · ${t(SECTION_KEY[sec])}`, icon: SECTION_ICON[sec], hint: String(i + 1), keywords: subs.map(x => t(TAB_KEY[x])).join(' '), run: () => go({ screen: 'app', appId: app.key, tab: subs[0]! }) });
+      if (subs.length > 1) for (const tab of subs) c.push({ id: `tab-${tab}`, group: G.tabs, title: `${app.name} · ${t(SECTION_KEY[sec])} · ${t(TAB_KEY[tab])}`, icon: TAB_ICON[tab], run: () => go({ screen: 'app', appId: app.key, tab }) });
+    });
     // the app's own menu (consoles, folder, copy ids, reads, ignore, unpair) as commands: every right-click action is
     // also one Ctrl+K away; opening a tab is already above
     if (app) {
@@ -166,10 +195,10 @@ export function App({ onTheme }: { onTheme: () => void }) {
     c.push({ id: 'act-theme', group: G.act, title: t('action.toggleTheme'), icon: 'moon', keywords: 'dark light', run: onTheme });
     c.push({ id: 'act-welcome', group: G.act, title: t('action.welcome'), icon: 'sparkle', keywords: 'onboarding start guide', run: () => setWelcome(true) });
     return c;
-  }, [d, visible, app, tabs, route, go, onTheme, exports, runExport, showIgnored, stepApp, prefs, update]);
+  }, [d, visible, app, sections, game, route, go, onTheme, exports, runExport, showIgnored, stepApp, prefs, update, tabsOf]);
 
   const crumbs: { label: string; to?: Route }[] = route.screen === 'portfolio' ? [{ label: t('nav.portfolio') }]
-    : route.screen === 'app' ? [{ label: t('nav.portfolio'), to: { screen: 'portfolio' } }, { label: app?.name ?? '', to: app ? { screen: 'app', appId: app.key, tab: 'releases' } : undefined }, { label: t(TAB_KEY[route.tab]) }]
+    : route.screen === 'app' ? [{ label: t('nav.portfolio'), to: { screen: 'portfolio' } }, { label: app?.name ?? '', to: app ? { screen: 'app', appId: app.key, tab: 'releases' } : undefined }, { label: t(SECTION_KEY[sectionOf(route.tab)]), to: app ? { screen: 'app', appId: app.key, tab: subsOf(sectionOf(route.tab), !!app.project, game)[0] ?? route.tab } : undefined }, ...(app && subsOf(sectionOf(route.tab), !!app.project, game).length > 1 ? [{ label: t(TAB_KEY[route.tab]) }] : [])]
     : [{ label: t('nav.workspace') }, { label: t(WS_KEY[route.screen]) }];
   const lastRead = d.live?.at ?? null;
   // the app on screen is read first by the background reader
@@ -180,26 +209,19 @@ export function App({ onTheme }: { onTheme: () => void }) {
   const ignoredCount = d.apps.filter(a => a.ignored).length + d.overrides.ignored.filter(i => i.startsWith('account:')).length;
 
   const menu = useContextMenu();
-  const appItem = (a: UnifiedApp) => {
-    const e = d.statusFor(a);
-    const missing = !!a.project?.missing;
-    const tone = missing ? 'bad' : (worstTone(attention(a.key, a.name, e, d.liveFor(a))) ?? (e ? 'ok' : null));
-    const bad = missing ? 1 : (e?.errors.length ?? 0) + (e?.check?.problems.length ?? 0);
-    return (
-      <div role="listitem" key={a.key}>
-        <button {...menu(() => appMenu(a, d, nav, { showIgnored }))} className={`nav nav-app${a.ignored ? ' is-ignored' : ''}`} aria-current={current({ screen: 'app', appId: a.key, tab: 'releases' })}
-          onClick={() => go({ screen: 'app', appId: a.key, tab: route.screen === 'app' && tabsFor(!!a.project).includes(route.tab) ? route.tab : 'releases' })}>
-          <span className="ds-side-ic"><AppIcon name={a.name} src={d.iconFor(a)} />{tone && <span className={`ds-sdot ${tone}`} role="img" aria-label={tone === 'bad' ? t('pf.blocker') : tone === 'warn' ? t('pf.warning') : t('pf.note')} />}</span>
-          <span className="grow">{a.name}</span>
-          {a.ignored && <span className="so-dot" title={t('ignored.rowHint')}><Icon name="eyeOff" /></span>}
-          {!a.ignored && a.ignoredStores.length > 0 && <span className="so-dot" title={t('ignored.sideHint', { stores: a.ignoredStores.map(k => (k === 'ios' ? 'App Store' : 'Google Play')).join(', ') })}><Icon name="eyeOff" /></span>}
-          {!a.project && <span className="so-dot" title={t('apps.storeOnlyHint')}><Icon name="cloud" /></span>}
-          {missing ? <span className="tag-count bad" title={t('folder.missingShort')} aria-label={t('folder.missingShort')}>!</span>
-            : bad > 0 && <span className="tag-count bad" aria-label={t('nav.problems', { count: bad })}>{bad}</span>}
-        </button>
-      </div>
-    );
-  };
+  const appItem = (a: UnifiedApp, st: { text: string; tone: string }) => (
+    <div role="listitem" key={a.key}>
+      <button {...menu(() => appMenu(a, d, nav, { showIgnored }))} className={`nav nav-app has-line${a.ignored ? ' is-ignored' : ''}`} aria-current={current({ screen: 'app', appId: a.key, tab: 'releases' })}
+        onClick={() => go({ screen: 'app', appId: a.key, tab: route.screen === 'app' && tabsOf(a).includes(route.tab) ? route.tab : 'releases' })}
+        title={`${a.name} · ${st.text}`}>
+        <span className="ds-side-ic"><AppIcon name={a.name} src={d.iconFor(a)} />{(st.tone === 'bad' || st.tone === 'warn') && <span className={`ds-sdot ${st.tone}`} role="img" aria-label={st.tone === 'bad' ? t('pf.blocker') : t('pf.warning')} />}</span>
+        <span className="grow side-t"><span className="side-n">{a.name}</span><span className={`side-s ${st.tone}`} data-testid="side-status">{st.text}</span></span>
+        {!a.ignored && a.ignoredStores.length > 0 && <span className="so-dot" title={t('ignored.sideHint', { stores: a.ignoredStores.map(k => (k === 'ios' ? 'App Store' : 'Google Play')).join(', ') })}><Icon name="eyeOff" /></span>}
+        {!a.project && <span className="so-dot" title={t('apps.storeOnlyHint')}><Icon name="cloud" /></span>}
+      </button>
+    </div>
+  );
+  const WS_ROW: (WorkspaceScreen | 'portfolio')[] = ['portfolio', ...WORKSPACE];
 
   return (
     <NavCtx.Provider value={nav}>
@@ -213,36 +235,41 @@ export function App({ onTheme }: { onTheme: () => void }) {
             </button>
           </div>
           <div className="side-scroll">
-            <button className="nav" aria-current={current({ screen: 'portfolio' })} onClick={() => go({ screen: 'portfolio' })}>
-              <Icon name="portfolio" weight={current({ screen: 'portfolio' }) ? 'fill' : 'regular'} /><span className="grow">{t('nav.portfolio')}</span><span className="count">{visible.length}</span>
-            </button>
-            <div className="side-label" id="apps-label"><span>{d.studios.length ? t('nav.studiosLabel') : t('nav.appsLabel')}</span>
+            <div className="side-label" id="apps-label"><span>{t('nav.appsLabel')} <span className="count">{visible.length}</span></span>
               <button onClick={() => go({ screen: 'apps' })} aria-label={t('action.addFolder')} title={t('action.addFolder')}><Icon name="plus" /></button>
             </div>
+            {d.studios.length > 1 && (
+              <div className="side-studios" role="group" aria-label={t('side.studioFilter')}>
+                <button aria-pressed={!studioOn} onClick={() => setStudioFilter(null)}>{t('side.allStudios')}</button>
+                {d.studios.map(s => <button key={s.id} aria-pressed={studioOn === s.id} onClick={() => setStudioFilter(studioOn === s.id ? null : s.id)}><StudioMark studio={s} size="sm" />{s.name}</button>)}
+              </div>
+            )}
             {groups.map(g => {
-              const s = d.studios.find(x => x.id === g.studio) ?? null;
-              const gid = g.studio ?? 'none';
+              const gid = `g:${g.id}`;
               const open = !collapsed.includes(gid);
-              if (!d.studios.length) return <div role="list" aria-labelledby="apps-label" key={gid}>{g.rows.map(r => appItem(r.app))}</div>;
               return (
-                <div className="side-group" key={gid}>
-                  <button className="side-group-head" aria-expanded={open} aria-controls={`sg-${gid}`} onClick={() => toggleGroup(gid)}>
-                    <Icon name="chevronRight" className="chev" /><StudioMark studio={s} size="sm" /><span className="grow">{s?.name ?? t('studio.none')}</span><span className="count">{g.rows.length}</span>
+                <div className="side-group" key={gid} data-group={g.id}>
+                  <button className="side-group-head" aria-expanded={open} aria-controls={`sg-${g.id}`} onClick={() => toggleGroup(gid)}>
+                    <Icon name="chevronRight" className="chev" /><span className="grow">{t(GROUP_KEY[g.id])}</span><span className="count">{g.rows.length}</span>
                   </button>
-                  {open && <div role="list" id={`sg-${gid}`} aria-label={s?.name ?? t('studio.none')}>{g.rows.map(r => appItem(r.app))}</div>}
+                  {open && <div role="list" id={`sg-${g.id}`} aria-label={t(GROUP_KEY[g.id])}>{g.rows.map(r => appItem(r.app, r.st))}</div>}
                 </div>
               );
             })}
             {!visible.length && !showIgnored && <p className="side-empty">{t('nav.noApps')}</p>}
             {ignoredApps.length > 0 && <button className="link side-ignored-toggle" aria-pressed={showIgnored} onClick={() => setShowIgnored(!showIgnored)} data-testid="toggle-ignored">{showIgnored ? t('ignored.hide', { count: ignoredApps.length }) : t('ignored.show', { count: ignoredApps.length })}</button>}
-            <div className="side-label"><span>{t('nav.workspace')}</span></div>
-            {WORKSPACE.map((s, i) => (
-              <button key={s} className="nav" aria-current={current({ screen: s })} onClick={() => go({ screen: s })} title={`${t(WS_KEY[s])} (${MOD} ${i + 2})`}>
-                <Icon name={WS_ICON[s]} weight={current({ screen: s }) ? 'fill' : 'regular'} /><span className="grow">{t(WS_KEY[s])}</span>
-                {s === 'accounts' && <span className="count">{d.accounts.length}</span>}
-                {s === 'ignored' && ignoredCount > 0 && <span className="count">{ignoredCount}</span>}
-              </button>
-            ))}
+          </div>
+          <div className="side-ws" role="group" aria-label={t('nav.workspace')}>
+            {WS_ROW.map((s, i) => {
+              const label = s === 'portfolio' ? t('nav.portfolio') : t(WS_KEY[s]);
+              const n = s === 'accounts' ? d.accounts.length : s === 'ignored' ? ignoredCount : 0;
+              return (
+                <button key={s} className="nav-ws" aria-current={current({ screen: s })} onClick={() => go({ screen: s })} title={`${label} (${MOD} ${i + 1})`} aria-label={label} data-screen={s}>
+                  <Icon name={s === 'portfolio' ? 'portfolio' : WS_ICON[s]} weight={current({ screen: s }) ? 'fill' : 'regular'} />
+                  {n > 0 && <span className="ws-n">{n}</span>}
+                </button>
+              );
+            })}
           </div>
           <div className="side-foot" aria-live="polite">
             <div className="row"><i className={`dot ${d.sidecar?.running ? 'ok' : d.sidecarError ? 'bad' : ''}`} />
diff --git a/apps/desktop/src/design.css b/apps/desktop/src/design.css
index fc782ca..adfc21f 100644
--- a/apps/desktop/src/design.css
+++ b/apps/desktop/src/design.css
@@ -245,3 +245,45 @@
 .table-wrap .table tbody tr:hover > :first-child, .ds-table-wrap .table tbody tr:hover > :first-child { background: color-mix(in srgb, var(--tint, var(--accent-solid)) 6%, var(--ds-surface, var(--surface))); }
 /* Settings > Appearance > Tables: compact */
 :root[data-density="compact"] .table th, :root[data-density="compact"] .table td { padding-top: 5px; padding-bottom: 5px; padding-left: 8px; padding-right: 8px; font-size: 12.5px; }
+
+/* ---------- App sections (docs IA): section header, next step, sub views ---------- */
+.ds-tab-k { font: 600 10px/1 var(--mono, ui-monospace, monospace); min-width: 16px; height: 16px; display: inline-grid; place-items: center; border-radius: 4px; color: var(--muted); border: 1px solid var(--ds-stroke); background: var(--ds-surface); margin-left: 2px; opacity: .75; }
+.ds-tab[aria-selected="true"] .ds-tab-k { opacity: 1; }
+.sec-head { display: grid; grid-template-columns: minmax(0, 1fr) auto; grid-template-areas: "t next" "subs subs"; gap: 10px 16px; align-items: center; padding: 2px 4px 4px; }
+.sec-head-t { grid-area: t; min-width: 0; }
+.sec-head-name { display: flex; align-items: center; gap: 8px; margin: 0; font-size: var(--ds-t-h2, 18px); font-weight: 700; letter-spacing: -.01em; }
+.sec-head-name svg { width: 18px; height: 18px; color: var(--tint, var(--accent-solid)); }
+.sec-head-for { margin: 2px 0 0; color: var(--muted); font-size: var(--t-meta); }
+.sec-next { grid-area: next; display: inline-flex; align-items: center; gap: 8px; padding: 6px 6px 6px 12px; min-height: 32px; box-sizing: border-box; border-radius: var(--ds-r); border: 1px solid var(--ds-stroke); background: var(--ds-surface); font-weight: 600; font-size: var(--t-meta); max-width: 560px; }
+.sec-next > svg { width: 15px; height: 15px; flex: none; }
+.sec-next-t { min-width: 0; overflow: hidden; text-overflow: ellipsis; white-space: nowrap; }
+.sec-next:not(:has(.btn)) { padding-right: 12px; }
+.sec-next.tone-bad { background: var(--bad-bg); color: var(--bad-ink); border-color: transparent; }
+.sec-next.tone-warn { background: var(--warn-bg); color: var(--warn-ink); border-color: transparent; }
+.sec-next.tone-ok > svg { color: var(--ok-solid); }
+.sec-next.tone-info > svg { color: var(--accent-solid); }
+.sec-next .btn { flex: none; }
+.sec-subs { grid-area: subs; justify-self: start; }
+.sec-subs .ed-dot { margin-left: 2px; }
+@media (max-width: 1100px) { .sec-head { grid-template-columns: 1fr; grid-template-areas: "t" "next" "subs"; } .sec-next { justify-self: start; } }
+
+/* ---------- Sidebar: attention groups, one status line per app, workspace footer ---------- */
+.nav-app.has-line { height: auto; min-height: 40px; padding-top: 4px; padding-bottom: 4px; align-items: center; }
+.nav-app .side-t { display: grid; min-width: 0; line-height: 1.2; }
+.nav-app .side-n { overflow: hidden; text-overflow: ellipsis; white-space: nowrap; }
+.nav-app .side-s { font-size: 11px; font-weight: 500; color: var(--muted); overflow: hidden; text-overflow: ellipsis; white-space: nowrap; }
+.nav-app .side-s.bad { color: var(--bad-ink); } .nav-app .side-s.warn { color: var(--warn-ink); } .nav-app .side-s.ok { color: var(--ok-ink); }
+:root[data-theme="dark"] .nav-app .side-s.bad { color: color-mix(in srgb, var(--bad-solid) 70%, white); }
+:root[data-theme="dark"] .nav-app .side-s.warn { color: color-mix(in srgb, var(--warn-solid) 70%, white); }
+:root[data-theme="dark"] .nav-app .side-s.ok { color: color-mix(in srgb, var(--ok-solid) 70%, white); }
+.side-studios { display: flex; flex-wrap: wrap; gap: 4px; margin: 6px 6px 2px; }
+.side-studios button { all: unset; cursor: pointer; display: inline-flex; align-items: center; gap: 5px; height: 22px; padding: 0 8px; border-radius: 99px; font-size: 11px; font-weight: 600; color: var(--muted); border: 1px solid var(--line); }
+.side-studios button[aria-pressed="true"] { color: var(--ink); background: var(--surface); box-shadow: var(--shadow-1); }
+.side-studios button:focus-visible { outline: 2px solid var(--focus); }
+.side-ws { display: flex; gap: 2px; padding: 6px 8px; border-top: 1px solid var(--line); }
+.side-ws button { all: unset; cursor: pointer; position: relative; flex: 1; height: 30px; display: grid; place-items: center; border-radius: 7px; color: var(--muted); }
+.side-ws button:hover { background: var(--hover); color: var(--ink); }
+.side-ws button[aria-current="page"] { background: var(--surface); color: var(--ink); box-shadow: var(--shadow-1); }
+.side-ws button:focus-visible { outline: 2px solid var(--focus); }
+.side-ws svg { width: 17px; height: 17px; }
+.side-ws .ws-n { position: absolute; top: 2px; right: 4px; font-size: 9.5px; font-weight: 700; color: var(--muted); font-variant-numeric: tabular-nums; }
diff --git a/apps/desktop/src/dev/fixtures.ts b/apps/desktop/src/dev/fixtures.ts
index 4ba99d4..7e7be9e 100644
--- a/apps/desktop/src/dev/fixtures.ts
+++ b/apps/desktop/src/dev/fixtures.ts
@@ -430,6 +430,16 @@ const GAMES_PRISM = {
   play: { appId: '123456789012', resource: '123456789012 (android/app/src/main/res/values/games-ids.xml)', leaderboards: 2, achievements: 5, config: { leaderboards: 2, achievements: 5 }, changes: [] },
   findings: [{ store: 'apple', level: 'ok', id: 'gc.entitlement', msg: 'com.apple.developer.game-center in ios/App/App/App.entitlements' }, { store: 'play', level: 'ok', id: 'pgs.app-id', msg: 'games_APP_ID 123456789012 matches the config' }],
   links: [{ label: 'Play Console: Play Games Services configuration', url: 'https://play.google.com/console/u/0/developers/4444/app/9876/play-games-services/setup' }],
+  items: [
+    { kind: 'leaderboard', id: 'com.example.prismpuddle.best', name: 'Best score', locales: ['en', 'tr', 'ja', 'ar'], ios: true, android: true,
+      apple: { action: 'keep', changed: [], locales: [{ locale: 'en-US', action: 'keep' }, { locale: 'tr', action: 'keep' }, { locale: 'ja', action: 'keep' }, { locale: 'ar-SA', action: 'keep' }] }, play: { action: 'keep', changed: [] } },
+    { kind: 'leaderboard', id: 'com.example.prismpuddle.daily', name: 'Daily puddle', locales: ['en', 'tr'], ios: true, android: true,
+      apple: { action: 'create', changed: ['referenceName'], locales: [{ locale: 'en-US', action: 'create' }, { locale: 'tr', action: 'create' }] }, play: { action: 'keep', changed: [] } },
+    ...['first-drop', 'ten-levels', 'no-hints', 'rainbow', 'speedrun'].map((k, i) => ({ kind: 'achievement', id: `com.example.prismpuddle.${k}`, name: ['First drop', 'Ten levels', 'No hints', 'Rainbow', 'Speedrun'][i]!, locales: ['en', 'tr', 'ja', 'ar'], points: [10, 20, 30, 20, 20][i], hidden: k === 'speedrun', ios: true, android: true,
+      apple: { action: 'keep', changed: [], locales: [{ locale: 'en-US', action: 'keep' }] }, play: { action: i === 2 ? 'update' : 'keep', changed: i === 2 ? ['draft.description'] : [] } })),
+  ],
+  localeMap: { configured: { ar: 'ar-SA' }, suggested: [{ id: 'en', from: 'en-US', to: 'en-GB' }] },
+  playApiDisabled: null,
 };
 const ok = (method: string, data: unknown): ToolResult => ({ method, ok: true, exitCode: 0, dryRun: false, command: `storebound ${method.replace('.', ' ')} --json`, output: '', data });
 
diff --git a/apps/desktop/src/i18n/en.ts b/apps/desktop/src/i18n/en.ts
index 3e3d6ba..c4f37ed 100644
--- a/apps/desktop/src/i18n/en.ts
+++ b/apps/desktop/src/i18n/en.ts
@@ -2116,4 +2116,106 @@ export const en = {
   'cm.copyPrincipal': "Service account / key",
   'cm.copyProfile': "Profile name",
   'cm.openAccounts': "Open Studios & accounts",
+  "sec.release": "Release",
+  "sec.store": "Store page",
+  "sec.revenue": "Revenue",
+  "sec.players": "Players",
+  "sec.health": "Health",
+  "sec.release.for": "Get a version to players on both stores: builds, TestFlight, review and rollout.",
+  "sec.store.for": "What people see on the store: texts per language, screenshots and app details.",
+  "sec.revenue.for": "What the app sells and for how much: in-app products, subscriptions and prices.",
+  "sec.players.for": "What players say, and for games what they can earn: reviews, Game Center, Play Games.",
+  "sec.health.for": "Is the app well and ready: crashes and ANRs, growth, checks to fix first, more tools.",
+  "sec.views": "{section} views",
+  "tab.games": "Game services",
+  "next.open": "Open {where}",
+  "next.rejected": "{version} was rejected on {store}",
+  "next.halted": "{version} is halted on {store}",
+  "next.blockers": "{count} blockers before submit",
+  "next.blockers_one": "1 blocker before submit",
+  "next.rollout": "{version} is rolling out at {share}",
+  "next.approved": "{version} is approved: release it",
+  "next.submit": "Submit {version} for review",
+  "next.review": "{version} is in review",
+  "next.managed": "{version} waits in Publishing overview (managed publishing)",
+  "next.upload": "Upload a first build",
+  "next.live": "Live: {version}",
+  "next.notRead": "Stores not read yet",
+  "next.storeLive": "The live store page, read from the stores",
+  "next.listingProblems": "{count} listing problems",
+  "next.listingProblems_one": "1 listing problem",
+  "next.unsaved": "{count} unsaved edits",
+  "next.unsaved_one": "1 unsaved edit",
+  "next.listingsUnread": "Listings not checked yet",
+  "next.storeOk": "Store page in step with the config",
+  "next.catalogDiff": "{count} products differ between the stores",
+  "next.catalogDiff_one": "1 product differs between the stores",
+  "next.noProducts": "No products yet: add one",
+  "next.products": "{products} products · {subs} subscriptions",
+  "next.reviews": "{count} reviews without a reply",
+  "next.reviews_one": "1 review without a reply",
+  "next.reviewsUnread": "Reviews not read yet",
+  "next.reviewsOk": "All reviews answered",
+  "next.gamesApiOff": "Play Games Services API is off",
+  "next.gamesBlockers": "{count} game services blockers",
+  "next.gamesBlockers_one": "1 game services blocker",
+  "next.gamesSync": "Game services: {count} changes to sync",
+  "next.gamesSync_one": "Game services: 1 change to sync",
+  "next.fixFirst": "{count} problems to fix first",
+  "next.fixFirst_one": "1 problem to fix first",
+  "next.warnings": "{count} warnings to look at",
+  "next.warnings_one": "1 warning to look at",
+  "next.healthOk": "No problems found",
+  "side.gAttention": "Needs attention",
+  "side.gProgress": "In progress",
+  "side.gLive": "Live",
+  "side.gDraft": "Not on a store yet",
+  "side.missing": "Folder missing",
+  "side.rejected": "Rejected · {what}",
+  "side.halted": "Halted · {what}",
+  "side.blockers": "{count} blockers",
+  "side.blockers_one": "1 blocker",
+  "side.rollout": "Rollout {share} · {what}",
+  "side.review": "In review · {what}",
+  "side.approved": "Approved · {what}",
+  "side.draft": "Draft · {what}",
+  "side.live": "Live · {version}",
+  "side.liveWarn": "Live · {version} · {count} warnings",
+  "side.liveWarn_one": "Live · {version} · 1 warning",
+  "side.storeOnly": "Store only · not read yet",
+  "side.notRead": "Not read yet",
+  "side.warnings": "{count} warnings",
+  "side.warnings_one": "1 warning",
+  "side.notOnStore": "No store version yet",
+  "side.ignored": "Ignored",
+  "side.studioFilter": "Show apps of a studio",
+  "side.allStudios": "All",
+  "games.keep": "In step",
+  "games.update": "Differs",
+  "games.create": "Missing",
+  "games.notOnStore": "Not on this store",
+  "games.notListed": "Not planned",
+  "games.notRead": "Not read",
+  "games.item": "Item",
+  "games.name": "Name",
+  "games.points": "Points",
+  "games.languages": "Languages",
+  "games.leaderboard": "Leaderboard",
+  "games.achievement": "Achievement",
+  "games.hidden": "hidden until earned",
+  "games.localeChanges": "Game Center languages: {list}",
+  "games.checkAgain": "Check again",
+  "games.apiOffTitle": "Play Games Services API is off.",
+  "games.apiOffText": "Turn on {api} in the service account's Google Cloud project, wait a minute, then check again.",
+  "games.itemsTitle": "Leaderboards and achievements",
+  "games.itemsSub": "One list in the config, mapped to both stores: each store's state against the config.",
+  "games.refresh": "Read again",
+  "games.noItems": "No leaderboards or achievements in the config yet (games.leaderboards, games.achievements).",
+  "games.notReadYet": "Reading game services…",
+  "games.images": "Images of leaderboards and achievements are added in the consoles; on Play the existing icon is kept on every sync.",
+  "games.localeMap": "Game Center locale map",
+  "games.localeMapSub": "Config language to the locale the live Game Center uses (games.localeMap).",
+  "games.mapSet": "Set",
+  "games.mapSuggested": "Suggested",
+  "games.mapHint": "Add to games.localeMap: {entries}",
 } as const;
diff --git a/apps/desktop/src/i18n/tr.ts b/apps/desktop/src/i18n/tr.ts
index 8901d14..e19a2e7 100644
--- a/apps/desktop/src/i18n/tr.ts
+++ b/apps/desktop/src/i18n/tr.ts
@@ -2118,4 +2118,106 @@ export const tr: Record<keyof typeof en, string> = {
   'cm.copyPrincipal': "Hizmet hesabı / anahtar",
   'cm.copyProfile': "Profil adı",
   'cm.openAccounts': "Stüdyolar ve hesapları aç",
+  "sec.release": "Yayın",
+  "sec.store": "Mağaza sayfası",
+  "sec.revenue": "Gelir",
+  "sec.players": "Oyuncular",
+  "sec.health": "Sağlık",
+  "sec.release.for": "Bir sürümü iki mağazada oyunculara ulaştır: build, TestFlight, inceleme ve dağıtım.",
+  "sec.store.for": "Mağazada insanların gördüğü: dile göre metinler, ekran görüntüleri ve uygulama bilgileri.",
+  "sec.revenue.for": "Uygulamanın sattıkları ve fiyatları: uygulama içi ürünler, abonelikler ve fiyatlar.",
+  "sec.players.for": "Oyuncuların söyledikleri ve oyunlarda kazanabilecekleri: yorumlar, Game Center, Play Games.",
+  "sec.health.for": "Uygulama sağlıklı ve hazır mı: çökmeler ve ANR, büyüme, önce düzeltilecek kontroller, diğer araçlar.",
+  "sec.views": "{section} görünümleri",
+  "tab.games": "Oyun servisleri",
+  "next.open": "{where} aç",
+  "next.rejected": "{version}, {store} tarafından reddedildi",
+  "next.halted": "{version}, {store} üzerinde durduruldu",
+  "next.blockers": "Göndermeden önce {count} engel",
+  "next.blockers_one": "Göndermeden önce 1 engel",
+  "next.rollout": "{version} dağıtımı {share} seviyesinde",
+  "next.approved": "{version} onaylandı: yayınla",
+  "next.submit": "{version} sürümünü incelemeye gönder",
+  "next.review": "{version} incelemede",
+  "next.managed": "{version} Yayınlama özeti'nde bekliyor (yönetilen yayınlama)",
+  "next.upload": "İlk build'i yükle",
+  "next.live": "Yayında: {version}",
+  "next.notRead": "Mağazalar henüz okunmadı",
+  "next.storeLive": "Mağazalardan okunan canlı mağaza sayfası",
+  "next.listingProblems": "{count} mağaza metni sorunu",
+  "next.listingProblems_one": "1 mağaza metni sorunu",
+  "next.unsaved": "{count} kaydedilmemiş düzenleme",
+  "next.unsaved_one": "1 kaydedilmemiş düzenleme",
+  "next.listingsUnread": "Mağaza metinleri henüz kontrol edilmedi",
+  "next.storeOk": "Mağaza sayfası yapılandırmayla uyumlu",
+  "next.catalogDiff": "{count} ürün mağazalar arasında farklı",
+  "next.catalogDiff_one": "1 ürün mağazalar arasında farklı",
+  "next.noProducts": "Henüz ürün yok: bir tane ekle",
+  "next.products": "{products} ürün · {subs} abonelik",
+  "next.reviews": "{count} yorum yanıtsız",
+  "next.reviews_one": "1 yorum yanıtsız",
+  "next.reviewsUnread": "Yorumlar henüz okunmadı",
+  "next.reviewsOk": "Tüm yorumlar yanıtlandı",
+  "next.gamesApiOff": "Play Games Services API kapalı",
+  "next.gamesBlockers": "{count} oyun servisi engeli",
+  "next.gamesBlockers_one": "1 oyun servisi engeli",
+  "next.gamesSync": "Oyun servisleri: eşitlenecek {count} değişiklik",
+  "next.gamesSync_one": "Oyun servisleri: eşitlenecek 1 değişiklik",
+  "next.fixFirst": "Önce düzeltilecek {count} sorun",
+  "next.fixFirst_one": "Önce düzeltilecek 1 sorun",
+  "next.warnings": "Bakılacak {count} uyarı",
+  "next.warnings_one": "Bakılacak 1 uyarı",
+  "next.healthOk": "Sorun bulunmadı",
+  "side.gAttention": "İlgi bekliyor",
+  "side.gProgress": "Sürüyor",
+  "side.gLive": "Yayında",
+  "side.gDraft": "Henüz mağazada değil",
+  "side.missing": "Klasör bulunamadı",
+  "side.rejected": "Reddedildi · {what}",
+  "side.halted": "Durduruldu · {what}",
+  "side.blockers": "{count} engel",
+  "side.blockers_one": "1 engel",
+  "side.rollout": "Dağıtım {share} · {what}",
+  "side.review": "İncelemede · {what}",
+  "side.approved": "Onaylandı · {what}",
+  "side.draft": "Taslak · {what}",
+  "side.live": "Yayında · {version}",
+  "side.liveWarn": "Yayında · {version} · {count} uyarı",
+  "side.liveWarn_one": "Yayında · {version} · 1 uyarı",
+  "side.storeOnly": "Yalnız mağaza · henüz okunmadı",
+  "side.notRead": "Henüz okunmadı",
+  "side.warnings": "{count} uyarı",
+  "side.warnings_one": "1 uyarı",
+  "side.notOnStore": "Henüz mağaza sürümü yok",
+  "side.ignored": "Yok sayıldı",
+  "side.studioFilter": "Bir stüdyonun uygulamalarını göster",
+  "side.allStudios": "Tümü",
+  "games.keep": "Uyumlu",
+  "games.update": "Farklı",
+  "games.create": "Eksik",
+  "games.notOnStore": "Bu mağazada değil",
+  "games.notListed": "Planlanmadı",
+  "games.notRead": "Okunmadı",
+  "games.item": "Öğe",
+  "games.name": "Ad",
+  "games.points": "Puan",
+  "games.languages": "Diller",
+  "games.leaderboard": "Skor tablosu",
+  "games.achievement": "Başarım",
+  "games.hidden": "kazanılana kadar gizli",
+  "games.localeChanges": "Game Center dilleri: {list}",
+  "games.checkAgain": "Yeniden kontrol et",
+  "games.apiOffTitle": "Play Games Services API kapalı.",
+  "games.apiOffText": "Hizmet hesabının Google Cloud projesinde {api} açın, bir dakika bekleyin, sonra yeniden kontrol edin.",
+  "games.itemsTitle": "Skor tabloları ve başarımlar",
+  "games.itemsSub": "Yapılandırmada tek liste, iki mağazaya eşlenir: her mağazanın yapılandırmaya göre durumu.",
+  "games.refresh": "Yeniden oku",
+  "games.noItems": "Yapılandırmada henüz skor tablosu veya başarım yok (games.leaderboards, games.achievements).",
+  "games.notReadYet": "Oyun servisleri okunuyor…",
+  "games.images": "Skor tablosu ve başarım görselleri konsollarda eklenir; Play'de mevcut simge her eşitlemede korunur.",
+  "games.localeMap": "Game Center dil eşlemesi",
+  "games.localeMapSub": "Yapılandırma dilinden canlı Game Center'ın kullandığı dile (games.localeMap).",
+  "games.mapSet": "Ayarlı",
+  "games.mapSuggested": "Önerilen",
+  "games.mapHint": "games.localeMap'e ekleyin: {entries}",
 };
diff --git a/apps/desktop/src/lib/model.ts b/apps/desktop/src/lib/model.ts
index e1979c0..a104d02 100644
--- a/apps/desktop/src/lib/model.ts
+++ b/apps/desktop/src/lib/model.ts
@@ -2,7 +2,7 @@
 // inbox stats, catalog parity matrix, the portfolio's "needs attention" list, and the command palette matcher.
 // "Unknown, never false": every derivation keeps "not read" apart from "none" / "ok".
 import { plainError } from '../../../../cli/lib/google-errors';
-import type { AppStatus, ProjectSummary } from '../api';
+import type { AppStatus, ProjectSummary, StoreRelease } from '../api';
 import { t } from '../i18n';
 
 import type { Tone } from '../../../../cli/lib/train';
@@ -138,7 +138,7 @@ export function parityMatrix(s: ProjectSummary | null, diff: CatalogDiff | null)
 
 // ---- Portfolio: needs attention ----
 
-export interface Attention { app: string; projectId: string; tone: Tone; text: string; hint?: string; tab?: 'releases' | 'catalog' | 'listings' | 'health' | 'reviews' | 'testflight' | 'checks' }
+export interface Attention { app: string; projectId: string; tone: Tone; text: string; hint?: string; tab?: 'releases' | 'catalog' | 'listings' | 'health' | 'reviews' | 'testflight' | 'checks' | 'games' }
 
 export function attention(projectId: string, name: string, e: AppStatus | undefined, live: AppStatus | undefined, health?: HealthSnapshot | null): Attention[] {
   const out: Attention[] = [];
@@ -203,3 +203,46 @@ export function hueOf(name: string): number {
   for (const c of name) h = (h * 31 + c.charCodeAt(0)) >>> 0;
   return h % 360;
 }
+
+// ---- App kind and the sidebar ----
+
+const PLAY_GAME_CATS = ['Action', 'Adventure', 'Arcade', 'Board', 'Card', 'Casino', 'Casual', 'Educational', 'Music', 'Puzzle', 'Racing', 'Role Playing', 'Simulation', 'Sports', 'Strategy', 'Trivia', 'Word'];
+/** A game: profile game, a games section in the config, or a Play game category. */
+export function isGameSummary(s: ProjectSummary | null | undefined): boolean {
+  if (!s) return false;
+  return s.profile === 'game' || !!s.games || PLAY_GAME_CATS.includes(s.playRelease?.category ?? '');
+}
+
+export type SideGroup = 'attention' | 'progress' | 'live' | 'draft';
+export interface SideStatus { group: SideGroup; text: string; tone: Tone }
+
+/** One sidebar row's group and status line: the one thing worth knowing about the app (docs IA). */
+export function sideStatus(o: { att: Attention[]; all: StoreRelease[]; read: boolean; missing: boolean; storeOnly: boolean }): SideStatus {
+  const sn = (r: StoreRelease) => `${r.store === 'ios' ? 'iOS' : 'Play'} ${r.version ?? ''}`.trim();
+  if (o.missing) return { group: 'attention', text: t('side.missing'), tone: 'bad' };
+  const rej = o.all.find(r => r.phase === 'rejected');
+  if (rej) return { group: 'attention', text: t('side.rejected', { what: sn(rej) }), tone: 'bad' };
+  const halted = o.all.find(r => r.phase === 'halted');
+  if (halted) return { group: 'attention', text: t('side.halted', { what: sn(halted) }), tone: 'bad' };
+  const bad = o.att.filter(a => a.tone === 'bad').length;
+  if (bad) return { group: 'attention', text: t('side.blockers', { count: bad }), tone: 'bad' };
+  const crash = o.att.find(a => a.tab === 'health');
+  if (crash) return { group: 'attention', text: crash.text, tone: crash.tone };
+  const rolling = o.all.find(r => r.phase === 'rollout' && r.fraction !== null && r.fraction < 1);
+  if (rolling) return { group: 'progress', text: t('side.rollout', { share: `${Math.round((rolling.fraction ?? 0) * 100)} %`, what: sn(rolling) }), tone: 'info' };
+  const review = o.all.find(r => r.phase === 'review' || r.phase === 'sent');
+  if (review) return { group: 'progress', text: t('side.review', { what: sn(review) }), tone: 'info' };
+  const approved = o.all.find(r => r.phase === 'approved');
+  if (approved) return { group: 'progress', text: t('side.approved', { what: sn(approved) }), tone: 'info' };
+  const live = o.all.filter(r => r.phase === 'live' || r.phase === 'released' || r.phase === 'rollout');
+  const draft = o.all.find(r => r.phase === 'draft' || r.phase === 'testing');
+  if (draft && !live.length) return { group: 'progress', text: t('side.draft', { what: sn(draft) }), tone: 'neutral' };
+  const warn = o.att.filter(a => a.tone === 'warn').length;
+  if (live.length) {
+    const vs = [...new Set(live.map(r => r.version).filter(Boolean))];
+    return { group: 'live', text: warn ? t('side.liveWarn', { version: vs.join(' / '), count: warn }) : t('side.live', { version: vs.join(' / ') }), tone: warn ? 'warn' : 'ok' };
+  }
+  if (!o.read) return { group: o.storeOnly ? 'live' : 'draft', text: o.storeOnly ? t('side.storeOnly') : t('side.notRead'), tone: 'neutral' };
+  return { group: 'draft', text: warn ? t('side.warnings', { count: warn }) : t('side.notOnStore'), tone: warn ? 'warn' : 'neutral' };
+}
+export const SIDE_GROUPS: SideGroup[] = ['attention', 'progress', 'live', 'draft'];
diff --git a/apps/desktop/src/lib/sections.ts b/apps/desktop/src/lib/sections.ts
new file mode 100644
index 0000000..5cad08e
--- /dev/null
+++ b/apps/desktop/src/lib/sections.ts
@@ -0,0 +1,94 @@
+// The "what's next" line of each app section (docs IA): one sentence and the sub view it opens, from state that is
+// already read (status, live releases, attention, cached reads). Pure, so tests pin the rules; a section never starts
+// a read to fill it.
+import type { CatalogParity, ListingsResult, StoreRelease } from '../api';
+import { t } from '../i18n';
+import type { AppSection, AppTab } from '../nav';
+import type { IconName } from '../ui/icons';
+import { type Attention, isGameSummary } from './model';
+import { share } from './format';
+import type { ProjectSummary } from '../api';
+
+export type NextTone = 'bad' | 'warn' | 'ok' | 'info' | 'neutral';
+export interface SectionNext { text: string; tone: NextTone; tab: AppTab | null; icon: IconName }
+
+export interface GamesNext { changes: number; blockers: number; apiOff: boolean }
+export interface SectionInput {
+  project: boolean;
+  att: Attention[];
+  all: StoreRelease[];
+  next: string | null;
+  summary: ProjectSummary | null;
+  catalog: CatalogParity | null;
+  /** Unsaved edits of the section's editors. */
+  unsaved: number;
+  /** Cached reads (null: not read yet). */
+  listings: ListingsResult | null;
+  reviews: { reply?: unknown }[] | null;
+  games: GamesNext | null;
+  /** Blockers of the last store readiness read (validate), null when never read. */
+  readiness?: number | null;
+}
+
+const storeName = (s: 'ios' | 'android') => (s === 'ios' ? 'App Store' : 'Google Play');
+
+/** Problems of a listings read: file problems plus required fields missing or over the limit. */
+export function listingProblems(l: ListingsResult | null): number | null {
+  if (!l) return null;
+  let n = l.problems.length;
+  for (const loc of l.locales) for (const s of [loc.play, loc.apple]) for (const f of s?.fields ?? []) if (f.state === 'missing' || f.state === 'over') n++;
+  return n;
+}
+
+export function sectionNext(section: AppSection, i: SectionInput): SectionNext {
+  const bad = i.att.filter(a => a.tone === 'bad');
+  if (section === 'release') {
+    const rej = i.all.find(r => r.phase === 'rejected' || r.phase === 'halted');
+    if (rej) return { text: t(rej.phase === 'rejected' ? 'next.rejected' : 'next.halted', { version: rej.version ?? '', store: storeName(rej.store) }), tone: 'bad', tab: 'releases', icon: 'alertCircle' };
+    const checks = bad.filter(a => a.tab === 'checks').length + (i.readiness ?? 0);
+    if (checks) return { text: t('next.blockers', { count: checks }), tone: 'bad', tab: 'checks', icon: 'alertCircle' };
+    const rolling = i.all.find(r => r.phase === 'rollout' && r.fraction !== null && r.fraction < 1);
+    if (rolling) return { text: t('next.rollout', { share: share(rolling.fraction ?? 0), version: rolling.version ?? '' }), tone: 'info', tab: 'releases', icon: 'rocket' };
+    const approved = i.all.find(r => r.phase === 'approved');
+    if (approved) return { text: t('next.approved', { version: approved.version ?? '' }), tone: 'info', tab: 'releases', icon: 'rocket' };
+    const ready = i.all.find(r => r.phase === 'draft' || r.phase === 'testing');
+    if (ready) return { text: t('next.submit', { version: ready.version ?? '' }), tone: 'info', tab: 'releases', icon: 'send' };
+    const review = i.all.find(r => r.phase === 'review' || r.phase === 'sent');
+    if (review) return { text: review.managed ? t('next.managed', { version: review.version ?? '' }) : t('next.review', { version: review.version ?? '' }), tone: 'neutral', tab: 'releases', icon: 'clock' };
+    if (i.project && !i.next && !i.all.length) return { text: t('next.upload'), tone: 'neutral', tab: 'releases', icon: 'upload' };
+    const live = i.all.find(r => r.phase === 'live' || r.phase === 'released');
+    return live ? { text: t('next.live', { version: live.version ?? '' }), tone: 'ok', tab: null, icon: 'check' } : { text: t('next.notRead'), tone: 'neutral', tab: null, icon: 'clock' };
+  }
+  if (section === 'store') {
+    if (!i.project) return { text: t('next.storeLive'), tone: 'neutral', tab: null, icon: 'cloud' };
+    const n = listingProblems(i.listings);
+    if (n) return { text: t('next.listingProblems', { count: n }), tone: 'warn', tab: 'listings', icon: 'alert' };
+    if (i.unsaved) return { text: t('next.unsaved', { count: i.unsaved }), tone: 'warn', tab: null, icon: 'edit' };
+    return n === null ? { text: t('next.listingsUnread'), tone: 'neutral', tab: 'listings', icon: 'text' } : { text: t('next.storeOk'), tone: 'ok', tab: null, icon: 'check' };
+  }
+  if (section === 'revenue') {
+    const c = i.catalog;
+    if (c && c.checked === 'live' && !c.ok) return { text: t('next.catalogDiff', { count: c.missingIos.length + c.missingAndroid.length + c.onlyIos.length + c.onlyAndroid.length }), tone: 'warn', tab: 'catalog', icon: 'alert' };
+    const p = i.summary?.products ?? 0, s = i.summary?.subscriptions ?? 0;
+    if (!p && !s) return { text: t('next.noProducts'), tone: 'neutral', tab: 'catalog', icon: 'plus' };
+    return { text: t('next.products', { products: p, subs: s }), tone: 'ok', tab: null, icon: 'check' };
+  }
+  if (section === 'players') {
+    const open = i.reviews ? i.reviews.filter(r => !r.reply).length : null;
+    if (open) return { text: t('next.reviews', { count: open }), tone: 'warn', tab: 'reviews', icon: 'message' };
+    if (i.games?.apiOff) return { text: t('next.gamesApiOff'), tone: 'bad', tab: 'games', icon: 'alertCircle' };
+    if (i.games?.blockers) return { text: t('next.gamesBlockers', { count: i.games.blockers }), tone: 'bad', tab: 'games', icon: 'alertCircle' };
+    if (i.games?.changes) return { text: t('next.gamesSync', { count: i.games.changes }), tone: 'warn', tab: 'games', icon: 'upload' };
+    return open === null ? { text: t('next.reviewsUnread'), tone: 'neutral', tab: 'reviews', icon: 'message' } : { text: t('next.reviewsOk'), tone: 'ok', tab: null, icon: 'check' };
+  }
+  const crash = i.att.find(a => a.tab === 'health');
+  if (crash) return { text: crash.text, tone: crash.tone === 'bad' ? 'bad' : 'warn', tab: 'health', icon: 'activity' };
+  const problems = i.att.filter(a => a.tab === 'checks');
+  const fix = problems.filter(a => a.tone === 'bad').length + (i.readiness ?? 0);
+  if (fix) return { text: t('next.fixFirst', { count: fix }), tone: 'bad', tab: 'checks', icon: 'shield' };
+  if (problems.length) return { text: t('next.warnings', { count: problems.length }), tone: 'warn', tab: 'checks', icon: 'shield' };
+  return { text: t('next.healthOk'), tone: 'ok', tab: null, icon: 'check' };
+}
+
+/** A game: profile game, a games section in the config, or a Play game category. */
+export const isGame = (s: ProjectSummary | null | undefined): boolean => isGameSummary(s);
diff --git a/apps/desktop/src/nav.ts b/apps/desktop/src/nav.ts
index a6429e1..b442265 100644
--- a/apps/desktop/src/nav.ts
+++ b/apps/desktop/src/nav.ts
@@ -4,31 +4,58 @@ import { createContext, useContext } from 'react';
 import type { Key } from './i18n';
 import type { IconName } from './ui/icons';
 
-export const APP_TABS = ['releases', 'catalog', 'prices', 'listings', 'art', 'health', 'reviews', 'testflight', 'growth', 'appinfo', 'checks', 'tools'] as const;
+export const APP_TABS = ['releases', 'testflight', 'listings', 'art', 'appinfo', 'catalog', 'prices', 'reviews', 'games', 'health', 'growth', 'checks', 'tools'] as const;
 export type AppTab = (typeof APP_TABS)[number];
-/** Tabs of a store-only app: store reads only (catalog, prices, app info and checks need the app folder; listings and
- *  store art are the live ones; Growth shows the Product Page Optimization tests only). */
-export const STORE_TABS: readonly AppTab[] = ['releases', 'listings', 'art', 'health', 'reviews', 'testflight', 'growth'];
-export const tabsFor = (hasFolder: boolean): readonly AppTab[] => (hasFolder ? APP_TABS : STORE_TABS);
+
+/** The five sections of an app, by job (docs IA): each holds sub views (the old tabs). The route keeps the sub id. */
+export const SECTIONS = ['release', 'store', 'revenue', 'players', 'health'] as const;
+export type AppSection = (typeof SECTIONS)[number];
+export const SECTION_TABS: Record<AppSection, readonly AppTab[]> = {
+  release: ['releases', 'testflight'], store: ['listings', 'art', 'appinfo'], revenue: ['catalog', 'prices'], players: ['reviews', 'games'], health: ['health', 'growth', 'checks', 'tools'],
+};
+export const sectionOf = (tab: AppTab): AppSection => SECTIONS.find(s => SECTION_TABS[s].includes(tab)) ?? 'release';
+export const SECTION_KEY: Record<AppSection, Key> = { release: 'sec.release', store: 'sec.store', revenue: 'sec.revenue', players: 'sec.players', health: 'sec.health' };
+export const SECTION_ICON: Record<AppSection, IconName> = { release: 'rocket', store: 'image', revenue: 'coins', players: 'users', health: 'activity' };
+
+/** Sub views of a store-only app: store reads only (catalog, prices, app info, checks and tools need the app folder;
+ *  listings and store art are the live ones; Growth shows the Product Page Optimization tests only). */
+export const STORE_TABS: readonly AppTab[] = ['releases', 'testflight', 'listings', 'art', 'reviews', 'health', 'growth'];
+/** The sub views an app has: the folder decides most; Game services only for games. */
+export const tabsFor = (hasFolder: boolean, game = false): readonly AppTab[] => (hasFolder ? APP_TABS : STORE_TABS).filter(x => x !== 'games' || (game && hasFolder));
+/** The sections an app has (a section with no sub view is left out: Revenue for a store-only app). */
+export const sectionsFor = (hasFolder: boolean, game = false): AppSection[] => { const tabs = tabsFor(hasFolder, game); return SECTIONS.filter(s => SECTION_TABS[s].some(x => tabs.includes(x))); };
+export const subsOf = (s: AppSection, hasFolder: boolean, game = false): AppTab[] => { const tabs = tabsFor(hasFolder, game); return SECTION_TABS[s].filter(x => tabs.includes(x)); };
 export const TAB_KEY: Record<AppTab, Key> = {
   releases: 'tab.releases', catalog: 'tab.catalog', prices: 'tab.prices', listings: 'tab.listings', art: 'tab.art', health: 'tab.health', reviews: 'tab.reviews',
-  testflight: 'tab.testflight', growth: 'tab.growth', appinfo: 'tab.appinfo', checks: 'tab.checks', tools: 'tab.tools',
+  testflight: 'tab.testflight', growth: 'tab.growth', appinfo: 'tab.appinfo', checks: 'tab.checks', tools: 'tab.tools', games: 'tab.games',
 };
 export const TAB_ICON: Record<AppTab, IconName> = {
   releases: 'rocket', catalog: 'tag', prices: 'coins', listings: 'text', art: 'grid', health: 'activity', reviews: 'message', testflight: 'plane', growth: 'chart',
-  appinfo: 'clipboard', checks: 'shield', tools: 'sliders',
+  appinfo: 'clipboard', checks: 'shield', tools: 'sliders', games: 'sparkle',
 };
+
+/** A place in an app from a link: an old tab id ("prices"), a section ("revenue", its first sub view) or
+ *  "section/sub" ("store/art"). Unknown: Release. */
+export function placeOf(v: string | undefined | null): AppTab {
+  if (!v) return 'releases';
+  const [a, b] = v.split('/');
+  if (b && (SECTIONS as readonly string[]).includes(a!) && SECTION_TABS[a as AppSection].includes(b as AppTab)) return b as AppTab;
+  if (APP_TABS.includes(a as AppTab)) return a as AppTab;
+  if ((SECTIONS as readonly string[]).includes(a!)) return SECTION_TABS[a as AppSection][0]!;
+  return 'releases';
+}
+
 export const WORKSPACE = ['apps', 'accounts', 'ignored', 'dependencies', 'settings'] as const;
 export type WorkspaceScreen = (typeof WORKSPACE)[number];
 
 export type Route = { screen: 'portfolio' } | { screen: 'app'; appId: string; tab: AppTab } | { screen: WorkspaceScreen; section?: string };
 
-/** storebound://<screen> deep links and the dev-only start switch ("app:health" = first app, Health tab;
- *  "app:health:2" = second app; "settings:refresh" = a Settings section). `apps` are the app keys in list order. */
+/** storebound://<screen> deep links and the dev-only start switch ("app:health" = first app, Health section;
+ *  "app:store/art" = a sub view; "app:prices" = an old tab id; "app:health:2" = second app; "settings:refresh" = a Settings section). `apps` are the app keys in list order. */
 export function parseStart(v: string, apps: string[]): Route | null {
   const [screen, tab, n] = v.split(':');
   const app = apps[Math.max(0, (Number(n) || 1) - 1)];
-  if (screen === 'app' && app) return { screen: 'app', appId: app, tab: APP_TABS.includes(tab as AppTab) ? tab as AppTab : 'releases' };
+  if (screen === 'app' && app) return { screen: 'app', appId: app, tab: placeOf(tab) };
   if (screen === 'portfolio') return { screen: 'portfolio' };
   if (!(WORKSPACE as readonly string[]).includes(screen ?? '')) return null;
   return tab ? { screen: screen as WorkspaceScreen, section: tab } : { screen: screen as WorkspaceScreen };
@@ -41,7 +68,7 @@ export function parseRouteJson(v: string): Route | null {
   if (!o || typeof o !== 'object') return null;
   const r = o as Record<string, unknown>;
   if (r.screen === 'portfolio') return { screen: 'portfolio' };
-  if (r.screen === 'app') return typeof r.appId === 'string' && r.appId ? { screen: 'app', appId: r.appId, tab: APP_TABS.includes(r.tab as AppTab) ? r.tab as AppTab : 'releases' } : null;
+  if (r.screen === 'app') return typeof r.appId === 'string' && r.appId ? { screen: 'app', appId: r.appId, tab: placeOf(typeof r.tab === 'string' ? r.tab : null) } : null;
   if (typeof r.screen === 'string' && (WORKSPACE as readonly string[]).includes(r.screen)) return typeof r.section === 'string' ? { screen: r.screen as WorkspaceScreen, section: r.section } : { screen: r.screen as WorkspaceScreen };
   return null;
 }
diff --git a/apps/desktop/src/screens/AppView.tsx b/apps/desktop/src/screens/AppView.tsx
index 1736d8d..1a8424d 100644
--- a/apps/desktop/src/screens/AppView.tsx
+++ b/apps/desktop/src/screens/AppView.tsx
@@ -1,16 +1,20 @@
-// One app across both stores: header (icon, studio, ids, store state, pairing), then the tabs. A store-only app (no
+// One app across both stores: header (icon, studio, ids, store state, pairing), then five sections by job (Release,
+// Store page, Revenue, Players, Health; docs IA), each with a header (what it is for, the one next step) and its sub views. A store-only app (no
 // app folder) shows its store reads (releases, health, reviews, TestFlight) read-only, with "Link a folder" and
 // "Start an app folder here" to make it a full app.
 import { useContextMenu, useMenuButton } from '../ui/ContextMenu';
 import { appMenu, playUrlFor } from '../ui/app-menu';
 import { useShowIgnored } from '../lib/show-ignored';
 import { useState } from 'react';
+import { GamesTab } from './tabs/Games';
+import { SectionHead } from './SectionHead';
 import { api, errorText } from '../api';
 import { type Key, t } from '../i18n';
 import { pairCandidates, type UnifiedApp, withLink, withPair, withStudio } from '../lib/identity';
 import { attention, storeNow } from '../lib/model';
 import { Hero, nextStep, Tabs } from '../ui/ds';
-import { type AppTab, TAB_ICON, TAB_KEY, tabsFor, useNav } from '../nav';
+import { isGameSummary } from '../lib/model';
+import { type AppSection, type AppTab, SECTION_ICON, SECTION_KEY, SECTION_TABS, sectionOf, sectionsFor, subsOf, useNav } from '../nav';
 import { useData } from '../store';
 import { Icon } from '../ui/icons';
 import { ErrorBoundary } from '../ui/ErrorBoundary';
@@ -107,11 +111,15 @@ export function AppView({ app, tab }: { app: UnifiedApp; tab: AppTab }) {
   const ios = e?.app?.platforms.ios ?? (app.ios ? { bundleId: app.ios.app.bundleId, ascAppId: app.ios.app.id } : null);
   const android = e?.app?.platforms.android ?? (app.android ? { packageName: app.android.app.id } : null);
   const name = (app.project && e?.app?.name) || app.name;
-  const tabs = tabsFor(!!app.project);
+  const game = isGameSummary(e?.summary);
+  const sections = sectionsFor(!!app.project, game);
+  const section = sectionOf(tab);
   const ed = useEdits();
   useUnsavedGuard();
   const studio = d.studios.find(s => s.id === app.studio) ?? null;
   const setTab = (x: AppTab) => nav.go({ screen: 'app', appId: app.key, tab: x });
+  const setSection = (x: AppSection) => setTab(subsOf(x, !!app.project, game)[0] ?? SECTION_TABS[x][0]!);
+  const editCount = (x: AppTab) => (EDIT_TABS[x] ? ed.count(app.project?.id ?? app.target, EDIT_TABS[x]) : 0);
   const all = l?.release.all ?? [];
   const iosNow = l ? storeNow(all, 'ios').now : null, androidNow = l ? storeNow(all, 'android').now : null;
   const att = attention(app.key, app.name, e, l);
@@ -137,19 +145,20 @@ export function AppView({ app, tab }: { app: UnifiedApp; tab: AppTab }) {
           {android && <button className="btn btn-sm btn-ghost" onClick={() => open(playUrlFor(d, app))} title={t('app.consoleHint')}><Icon name="external" />Play Console</button>}
         </>}
         all={all} ios={!!ios} android={!!android} next={l?.release.next?.version ?? null}
-        compact={tab !== 'releases'}
+        compact={section !== 'release' || tab !== 'releases'}
         cta={nextStep({ project: !!app.project, att, all, next: l?.release.next?.version ?? null })} onCta={setTab} />
       <AppControls app={app} />
       {!app.project && <StoreOnlyBanner app={app} />}
       {app.project?.storeboundPin && <Notice tone="info" icon="info">{t('app.pinNotice', { pin: app.project.storeboundPin, app: d.info?.version ?? '' })}</Notice>}
       {app.project?.missing ? <FolderMissing project={app.project} /> : <>
       <div className="ds-app-sticky">
-        <Tabs label={t('app.sections', { name })} value={tab} onChange={setTab} items={tabs.map(x => {
-          const n = EDIT_TABS[x] ? ed.count(app.project?.id ?? app.target, EDIT_TABS[x]) : 0;
-          return { id: x, label: t(TAB_KEY[x]), icon: TAB_ICON[x], count: att.filter(a => a.tab === x && a.tone === 'bad').length, dot: n > 0, dotTitle: n ? t('ed.unsaved', { count: n }) : undefined };
+        <Tabs label={t('app.sections', { name })} value={section} onChange={setSection} items={sections.map((x, i) => {
+          const n = subsOf(x, !!app.project, game).reduce((a, s2) => a + editCount(s2), 0);
+          return { id: x, label: t(SECTION_KEY[x]), icon: SECTION_ICON[x], hint: String(i + 1), count: att.filter(a => a.tab && sectionOf(a.tab) === x && a.tone === 'bad').length, dot: n > 0, dotTitle: n ? t('ed.unsaved', { count: n }) : undefined };
         })} />
       </div>
-      <div role="tabpanel" id="tabpanel" aria-labelledby={`tab-${tab}`} className="stack" style={{ gap: 16 }}>
+      <SectionHead app={app} section={section} tab={tab} subs={subsOf(section, !!app.project, game)} att={att} all={all} next={l?.release.next?.version ?? null} unsaved={subsOf(section, !!app.project, game).reduce((a, s2) => a + editCount(s2), 0)} editCount={editCount} onTab={setTab} />
+      <div role="tabpanel" id="tabpanel" aria-labelledby={`tab-${section}`} className="stack" style={{ gap: 16 }}>
         <ErrorBoundary key={tab} where={`tab ${tab}`}>
           {tab === 'releases' && <ReleasesTab app={app} />}
           {tab === 'catalog' && app.project && <CatalogTab project={app.project} />}
@@ -160,6 +169,7 @@ export function AppView({ app, tab }: { app: UnifiedApp; tab: AppTab }) {
           {tab === 'art' && !app.project && <LiveArt target={app.target} />}
           {tab === 'health' && <HealthTab app={app} />}
           {tab === 'reviews' && <ReviewsTab app={app} />}
+          {tab === 'games' && app.project && <GamesTab project={app.project} />}
           {tab === 'testflight' && <TestFlightTab app={app} />}
           {tab === 'growth' && <GrowthTab app={app} />}
           {tab === 'appinfo' && app.project && <AppInfoTab project={app.project} />}
diff --git a/apps/desktop/src/screens/SectionHead.tsx b/apps/desktop/src/screens/SectionHead.tsx
new file mode 100644
index 0000000..75f04c1
--- /dev/null
+++ b/apps/desktop/src/screens/SectionHead.tsx
@@ -0,0 +1,60 @@
+// The header of one app section (docs IA): the section's name, one line on what it is for, the single next step
+// derived from state that is already read (lib/sections.ts), and the sub views as a segmented control (only when the
+// section has more than one).
+import type { ListingsResult, StoreRelease } from '../api';
+import { t } from '../i18n';
+import type { UnifiedApp } from '../lib/identity';
+import type { Attention } from '../lib/model';
+import { sectionNext } from '../lib/sections';
+import { type AppSection, type AppTab, SECTION_ICON, SECTION_KEY, TAB_ICON, TAB_KEY } from '../nav';
+import { useCachedRead, useData } from '../store';
+import type { GameServicesStatus } from '../ui/GameServicesCard';
+import { Icon } from '../ui/icons';
+
+const PURPOSE: Record<AppSection, 'sec.release.for' | 'sec.store.for' | 'sec.revenue.for' | 'sec.players.for' | 'sec.health.for'> = {
+  release: 'sec.release.for', store: 'sec.store.for', revenue: 'sec.revenue.for', players: 'sec.players.for', health: 'sec.health.for',
+};
+
+export function SectionHead({ app, section, tab, subs, att, all, next, unsaved, editCount, onTab }: {
+  app: UnifiedApp; section: AppSection; tab: AppTab; subs: AppTab[]; att: Attention[]; all: StoreRelease[]; next: string | null; unsaved: number;
+  editCount: (t: AppTab) => number; onTab: (t: AppTab) => void;
+}) {
+  const d = useData();
+  const e = d.statusFor(app);
+  const pid = app.project && !app.project.missing ? app.project.id : null;
+  // cached reads only: the header never starts a store call
+  const listings = useCachedRead<ListingsResult>(section === 'store' ? pid : null, 'project.listings');
+  const reviews = useCachedRead<{ reply?: unknown }[]>(section === 'players' ? app.target : null, 'reviews.list', { days: 30 });
+  const games = useCachedRead<GameServicesStatus>(section === 'players' && subs.includes('games') ? pid : null, 'games.status');
+  const validate = useCachedRead<{ findings?: { level: string }[] }>(section === 'health' || section === 'release' ? pid : null, 'validate');
+  const n = sectionNext(section, {
+    project: !!app.project, att, all, next, summary: e?.summary ?? null, catalog: (d.liveFor(app) ?? e)?.catalog ?? null, unsaved, listings,
+    reviews: Array.isArray(reviews) ? reviews : null, readiness: validate?.findings ? validate.findings.filter(f => f.level === 'blocker').length : null,
+    games: games ? { changes: (games.apple?.changes.length ?? 0) + (games.play?.changes.length ?? 0), blockers: games.findings.filter(f => f.level === 'error').length, apiOff: !!games.playApiDisabled } : null,
+  });
+  return (
+    <div className="sec-head" data-testid="section-head">
+      <div className="sec-head-t">
+        <h2 className="sec-head-name"><Icon name={SECTION_ICON[section]} />{t(SECTION_KEY[section])}</h2>
+        <p className="sec-head-for">{t(PURPOSE[section])}</p>
+      </div>
+      <div className={`sec-next tone-${n.tone}`} role="status" data-testid="section-next">
+        <Icon name={n.icon} />
+        <span className="sec-next-t">{n.text}</span>
+        {n.tab && n.tab !== tab && <button className="btn btn-sm" onClick={() => onTab(n.tab!)}>{t('next.open', { where: t(TAB_KEY[n.tab]) })}<Icon name="arrowRight" /></button>}
+      </div>
+      {subs.length > 1 && (
+        <div className="seg sec-subs" role="group" aria-label={t('sec.views', { section: t(SECTION_KEY[section]) })}>
+          {subs.map(x => {
+            const c = editCount(x);
+            return (
+              <button key={x} id={`sub-${x}`} type="button" aria-pressed={tab === x} aria-controls="tabpanel" onClick={() => onTab(x)}>
+                <Icon name={TAB_ICON[x]} />{t(TAB_KEY[x])}{c > 0 && <span className="ed-dot" title={t('ed.unsaved', { count: c })} />}
+              </button>
+            );
+          })}
+        </div>
+      )}
+    </div>
+  );
+}
diff --git a/apps/desktop/src/screens/tabs/AppInfo.tsx b/apps/desktop/src/screens/tabs/AppInfo.tsx
index 7e6b1c3..8666d46 100644
--- a/apps/desktop/src/screens/tabs/AppInfo.tsx
+++ b/apps/desktop/src/screens/tabs/AppInfo.tsx
@@ -19,7 +19,6 @@ import { Bar, Chip, ErrorNotice, Notice, Skeleton } from '../../ui/kit';
 import { EmptyState, Section } from '../../ui/ds';
 import '../../styles/appinfo.css';
 import { WriteButton } from '../../ui/WriteButton';
-import { GameServicesCard } from '../../ui/GameServicesCard';
 import { ascUrl } from '../AppView';
 
 const AREA: Record<DeclAsk['area'], Key> = { dataSafety: 'ai.aDataSafety', appPrivacy: 'ai.aAppPrivacy', appInfo: 'ai.aAppInfo', encryption: 'ai.aEncryption', review: 'ai.aReview' };
@@ -258,7 +257,6 @@ export function AppInfoTab({ project }: { project: Project }) {
           </Section>
         </div>
       )}
-      <GameServicesCard project={project} />
       <ConsoleSteps project={project} stores={d.stores} />
 
       <p className="ai-foot">{t('ai.foot', { when: ago(r.at) })}</p>
diff --git a/apps/desktop/src/screens/tabs/Games.tsx b/apps/desktop/src/screens/tabs/Games.tsx
new file mode 100644
index 0000000..26950fd
--- /dev/null
+++ b/apps/desktop/src/screens/tabs/Games.tsx
@@ -0,0 +1,90 @@
+// Players > Game services: Game Center (App Store) and Play Games Services (Google Play) for a game, from
+// `games status --json` (cli/games-status.ts). The two store panels (switches, ids, counts, sync writes with dry run +
+// confirm) are the GameServicesCard; below it one row per leaderboard / achievement with its languages and each
+// store's state against the config, the Game Center locale map with suggestions, and the Play API-disabled state with
+// the enable link and the console plan.
+import { Fragment } from 'react';
+import type { Project } from '../../api';
+import { t } from '../../i18n';
+import { useRead } from '../../store';
+import { ConsolePlanButton } from '../../ui/ConsolePlan';
+import { EmptyState, Section } from '../../ui/ds';
+import { type GameAction, type GameItemRow, GameServicesCard, type GameServicesStatus } from '../../ui/GameServicesCard';
+import { Icon, StoreGlyph } from '../../ui/icons';
+import { Chip, Notice } from '../../ui/kit';
+import { OpenLink } from '../../ui/OpenLink';
+
+const ACTION_TONE: Record<GameAction, 'ok' | 'warn' | 'info'> = { keep: 'ok', update: 'warn', create: 'info' };
+const ACTION_KEY = { keep: 'games.keep', update: 'games.update', create: 'games.create' } as const;
+
+function StoreState({ on, plan, read }: { on: boolean; plan: { action: GameAction; changed: string[] } | null; read: boolean }) {
+  if (!on) return <span className="muted small">{t('games.notOnStore')}</span>;
+  if (!plan) return <span className="muted small">{read ? t('games.notListed') : t('games.notRead')}</span>;
+  return <Chip tone={ACTION_TONE[plan.action]} title={plan.changed.length && plan.action !== 'keep' ? plan.changed.join(', ') : undefined}>{t(ACTION_KEY[plan.action])}</Chip>;
+}
+
+function ItemsTable({ rows, appleRead, playRead }: { rows: GameItemRow[]; appleRead: boolean; playRead: boolean }) {
+  return (
+    <div className="table-wrap">
+      <table className="table">
+        <thead><tr>
+          <th>{t('games.item')}</th><th>{t('games.name')}</th><th className="num">{t('games.points')}</th><th>{t('games.languages')}</th>
+          <th><span className="row" style={{ gap: 4 }}><StoreGlyph store="ios" className="ic13" />{t('gs.gameCenter')}</span></th>
+          <th><span className="row" style={{ gap: 4 }}><StoreGlyph store="android" className="ic13" />{t('gs.playGames')}</span></th>
+        </tr></thead>
+        <tbody>
+          {rows.map(r => {
+            const locs = r.apple?.locales.filter(l => l.action !== 'keep') ?? [];
+            return (
+              <tr key={`${r.kind}:${r.id}`}>
+                <td><span className="row" style={{ gap: 6 }}><Icon name={r.kind === 'leaderboard' ? 'chart' : 'sparkle'} className="ic13" /><span className="mono-id small">{r.id}</span></span>
+                  <div className="small muted">{t(r.kind === 'leaderboard' ? 'games.leaderboard' : 'games.achievement')}{r.hidden ? ` · ${t('games.hidden')}` : ''}</div></td>
+                <td>{r.name}</td>
+                <td className="num">{r.points ?? '–'}</td>
+                <td className="small">{r.locales.join(', ')}{locs.length > 0 && <div className="small muted">{t('games.localeChanges', { list: locs.map(l => `${l.locale} ${t(ACTION_KEY[l.action])}`).join(', ') })}</div>}</td>
+                <td><StoreState on={r.ios} plan={r.apple} read={appleRead} /></td>
+                <td><StoreState on={r.android} plan={r.play} read={playRead} /></td>
+              </tr>
+            );
+          })}
+        </tbody>
+      </table>
+    </div>
+  );
+}
+
+export function GamesTab({ project }: { project: Project }) {
+  const r = useRead<GameServicesStatus>(project.id, 'games.status', { network: true, title: t('gs.title') });
+  const s = r.data;
+  const rows = s?.items ?? [];
+  const appleRead = !!s?.apple && !s.apple.error, playRead = !!s?.play && !s.play.error;
+  const map = s?.localeMap;
+  return (
+    <>
+      {s?.playApiDisabled && (
+        <Notice tone="bad" icon="alertCircle" action={<div className="actions">
+          <button className="btn btn-sm btn-primary" onClick={() => r.refresh()} disabled={r.loading}><Icon name="refresh" className={r.loading ? 'spin' : undefined} />{t('games.checkAgain')}</button>
+          <ConsolePlanButton project={project} form="play-games-services" label={t('gs.setup')} />
+        </div>}>
+          <b>{t('games.apiOffTitle')}</b> {t('games.apiOffText', { api: s.playApiDisabled.title })} <OpenLink url={s.playApiDisabled.url} />
+        </Notice>
+      )}
+      <GameServicesCard project={project} read={r} />
+      <Section title={t('games.itemsTitle')} icon="chart" sub={t('games.itemsSub')}
+        actions={<button className="btn btn-sm" onClick={() => r.refresh()} disabled={r.loading} aria-busy={r.loading}><Icon name="refresh" className={r.loading ? 'spin' : undefined} />{t('games.refresh')}</button>}>
+        {rows.length ? <ItemsTable rows={rows} appleRead={appleRead} playRead={playRead} />
+          : <EmptyState icon="sparkle">{s ? t('games.noItems') : t('games.notReadYet')}</EmptyState>}
+        <p className="small muted" style={{ marginTop: 10 }}>{t('games.images')}</p>
+      </Section>
+      {map && (Object.keys(map.configured).length > 0 || map.suggested.length > 0) && (
+        <Section title={t('games.localeMap')} icon="globe" sub={t('games.localeMapSub')}>
+          <dl className="kv">
+            {Object.entries(map.configured).map(([k, v]) => <Fragment key={`k${k}`}><dt>{k}</dt><dd><span className="mono-id small">{v}</span> <Chip tone="ok">{t('games.mapSet')}</Chip></dd></Fragment>)}
+            {map.suggested.map(x => <Fragment key={`s${x.id}`}><dt>{x.id}</dt><dd><span className="mono-id small">{x.from} → {x.to}</span> <Chip tone="warn">{t('games.mapSuggested')}</Chip></dd></Fragment>)}
+          </dl>
+          {map.suggested.length > 0 && <p className="small muted" style={{ marginTop: 8 }}>{t('games.mapHint', { entries: map.suggested.map(x => `${x.id}: '${x.to}'`).join(', ') })}</p>}
+        </Section>
+      )}
+    </>
+  );
+}
diff --git a/apps/desktop/src/store.tsx b/apps/desktop/src/store.tsx
index 877b9ca..cfe6af2 100644
--- a/apps/desktop/src/store.tsx
+++ b/apps/desktop/src/store.tsx
@@ -750,3 +750,21 @@ export function useRead<T>(target: string, method: string, o: { network: boolean
 
   return { ...s, loading: !o.skip && (s.loading || st.busy), justNow: st.justNow, pausedUntil: st.pausedUntil, refresh };
 }
+
+/** The cached value of one read (and every later result of it), without ever starting a read: for summaries such as a
+ *  section's "what's next" line that must not cost a store call. Null until the read ran once. */
+export function useCachedRead<T>(target: string | null, method: string, args: Record<string, unknown> = {}): T | null {
+  const d = useData();
+  const argsKey = JSON.stringify(args);
+  const [v, set] = useState<T | null>(null);
+  useEffect(() => {
+    set(null);
+    if (!target) return;
+    let alive = true;
+    const a = JSON.parse(argsKey) as Record<string, unknown>;
+    api.cached<ToolResult>(method, target, a).then(c => { if (alive && c && c.value.data !== undefined && usable(method, c.value)) set(c.value.data as T); }, () => {});
+    const un = d.onRead(readKey(target, method, a), e => { if (e.kind === 'done' && usable(method, e.result)) set(e.result.data as T); });
+    return () => { alive = false; un(); };
+  }, [target, method, argsKey]); // eslint-disable-line react-hooks/exhaustive-deps
+  return v;
+}
diff --git a/apps/desktop/src/ui/GameServicesCard.tsx b/apps/desktop/src/ui/GameServicesCard.tsx
index 3aa77cd..50ae13f 100644
--- a/apps/desktop/src/ui/GameServicesCard.tsx
+++ b/apps/desktop/src/ui/GameServicesCard.tsx
@@ -4,7 +4,7 @@
 // (dry run -> native dialog -> apply) of `apple game-center` and `play games`; the PGS setup is a console plan.
 import type { Project } from '../api';
 import { t } from '../i18n';
-import { useRead, useWrite } from '../store';
+import { type ReadState, useRead, useWrite } from '../store';
 import { ConsolePlanButton } from './ConsolePlan';
 import { StoreGlyph } from './icons';
 import { Card, Chip, ErrorNotice, Skeleton } from './kit';
@@ -18,13 +18,23 @@ export interface GameServicesStatus {
   play: null | { appId: string | null; resource: string | null; config: Counts; changes: string[]; error?: string } & Counts;
   findings: Finding[];
   links: { label: string; url: string }[];
+  items?: GameItemRow[];
+  localeMap?: { configured: Record<string, string>; suggested: { id: string; from: string; to: string }[] };
+  playApiDisabled?: { service: string; title: string; url: string } | null;
+}
+export type GameAction = 'create' | 'update' | 'keep';
+export interface GameItemRow {
+  kind: 'leaderboard' | 'achievement'; id: string; name: string; locales: string[]; points?: number; hidden?: boolean; ios: boolean; android: boolean;
+  apple: { action: GameAction; changed: string[]; locales: { locale: string; action: GameAction }[] } | null;
+  play: { action: GameAction; changed: string[] } | null;
 }
 
 const tone = (l: Finding['level']) => (l === 'error' ? 'bad' : l === 'warn' ? 'warn' : 'ok');
 const yesNo = (v: boolean | null | undefined) => (v === null || v === undefined ? <Chip tone="neutral">{t('gs.unknown')}</Chip> : <Chip tone={v ? 'ok' : 'bad'}>{v ? t('gs.yes') : t('gs.no')}</Chip>);
 
-export function GameServicesCard({ project }: { project: Project }) {
-  const r = useRead<GameServicesStatus>(project.id, 'games.status', { network: true, title: t('gs.title') });
+export function GameServicesCard({ project, read }: { project: Project; read?: ReadState<GameServicesStatus> }) {
+  const own = useRead<GameServicesStatus>(project.id, 'games.status', { network: true, title: t('gs.title'), skip: !!read });
+  const r = read ?? own;
   const w = useWrite(project.id);
   if (!r.data) return r.error ? <ErrorNotice error={r.error} tone="warn" /> : <Card title={t('gs.title')} icon="sparkle"><Skeleton lines={3} block /></Card>;
   const s = r.data;
diff --git a/apps/desktop/src/ui/app-menu.ts b/apps/desktop/src/ui/app-menu.ts
index d82ba47..144e0aa 100644
--- a/apps/desktop/src/ui/app-menu.ts
+++ b/apps/desktop/src/ui/app-menu.ts
@@ -5,7 +5,8 @@ import { t } from '../i18n';
 import { copyText } from '../lib/crash';
 import { withIgnored, withSideIgnored, withUnpair, type UnifiedApp } from '../lib/identity';
 import { setShowIgnored } from '../lib/show-ignored';
-import { type AppTab, type Nav, TAB_ICON, TAB_KEY, tabsFor } from '../nav';
+import { type AppTab, type Nav, SECTION_ICON, SECTION_KEY, sectionsFor, subsOf, TAB_ICON, TAB_KEY } from '../nav';
+import { isGameSummary } from '../lib/model';
 import type { Data } from '../store';
 import type { MenuInput, MenuItem } from './menu-logic';
 import { pickConsoleId, playAppUrl } from '../../../../cli/lib/console-links';
@@ -36,7 +37,12 @@ export function appMenu(app: UnifiedApp, d: Data, nav: Nav, opts: { showIgnored:
   const storeName = (k: 'ios' | 'android') => (k === 'ios' ? 'App Store' : 'Google Play');
   return [
     { label: t('cm.open'), icon: 'arrowRight', onSelect: () => go('releases') },
-    { label: t('cm.openTab'), icon: 'grid', submenu: tabsFor(!!p).map(tab => ({ label: t(TAB_KEY[tab]), icon: TAB_ICON[tab], onSelect: () => go(tab) })) },
+    { label: t('cm.openTab'), icon: 'grid', submenu: sectionsFor(!!p, isGameSummary(d.statusFor(app)?.summary)).map((sec, i) => {
+      const subs = subsOf(sec, !!p, isGameSummary(d.statusFor(app)?.summary));
+      return subs.length > 1
+        ? { label: t(SECTION_KEY[sec]), icon: SECTION_ICON[sec], shortcut: String(i + 1), submenu: subs.map(tab => ({ label: t(TAB_KEY[tab]), icon: TAB_ICON[tab], onSelect: () => go(tab) })) }
+        : { label: t(SECTION_KEY[sec]), icon: SECTION_ICON[sec], shortcut: String(i + 1), onSelect: () => go(subs[0]!) };
+    }) },
     'sep',
     (ios || android) && { label: t('cm.openConsole'), icon: 'external', submenu: [
       ios && { label: 'App Store Connect', icon: 'external', onSelect: () => openUrl(d, ASC_APP(ios.id)) },
diff --git a/apps/desktop/src/ui/ds.tsx b/apps/desktop/src/ui/ds.tsx
index b38aa8b..6460ba2 100644
--- a/apps/desktop/src/ui/ds.tsx
+++ b/apps/desktop/src/ui/ds.tsx
@@ -275,7 +275,7 @@ export function Toolbar({ label, children }: { label: string; children: ReactNod
   return <div className="ds-toolbar" role="toolbar" aria-label={label}>{children}</div>;
 }
 
-export interface TabItem<T extends string> { id: T; label: string; icon?: IconName; count?: number | null; dot?: boolean; dotTitle?: string }
+export interface TabItem<T extends string> { id: T; label: string; icon?: IconName; count?: number | null; dot?: boolean; dotTitle?: string; /** A keyboard hint shown in the tab ("1"). */ hint?: string }
 
 /** Pill tabs with icons and counts; arrows / Home / End move between them (roving tabindex). One row always: tabs that
  *  do not fit go into a "More" menu at the end, the active tab always stays in the row. */
@@ -323,11 +323,12 @@ export function Tabs<T extends string>({ items, value, onChange, label, panelId
   return (
     <div className="ds-tabs" ref={row} role="tablist" aria-label={label} onKeyDown={onKey}>
       {items.map((x, i) => (
-        <button key={x.id} ref={el => { refs.current[i] = el; }} role="tab" id={`tab-${x.id}`} aria-selected={value === x.id} aria-controls={panelId}
+        <button key={x.id} ref={el => { refs.current[i] = el; }} role="tab" id={`tab-${x.id}`} aria-selected={value === x.id} aria-controls={panelId} aria-keyshortcuts={x.hint}
           tabIndex={value === x.id ? 0 : -1} className="ds-tab" onClick={() => onChange(x.id)} hidden={!visible(i)}>
           {x.icon && <Icon name={x.icon} weight={value === x.id ? 'fill' : 'regular'} />}{x.label}
           {x.count != null && x.count > 0 && <span className="ds-tab-n num">{x.count}</span>}
           {x.dot && <span className="ed-dot" title={x.dotTitle} />}
+          {x.hint && <kbd className="ds-tab-k" aria-hidden="true">{x.hint}</kbd>}
         </button>
       ))}
       {hidden.length > 0 && (
diff --git a/apps/desktop/tests/sections.test.ts b/apps/desktop/tests/sections.test.ts
new file mode 100644
index 0000000..e5a6494
--- /dev/null
+++ b/apps/desktop/tests/sections.test.ts
@@ -0,0 +1,79 @@
+// App sections (docs IA): old tab ids and section links resolve to one place, the sections an app has, the "what's
+// next" line of each section and the sidebar's status line.
+import { describe, expect, test } from 'bun:test';
+import type { StoreRelease } from '../src/api';
+import type { Attention } from '../src/lib/model';
+import { isGameSummary, sideStatus } from '../src/lib/model';
+import { listingProblems, type SectionInput, sectionNext } from '../src/lib/sections';
+import { APP_TABS, parseRouteJson, parseStart, placeOf, SECTION_TABS, SECTIONS, sectionOf, sectionsFor, subsOf } from '../src/nav';
+
+const rel = (store: 'ios' | 'android', version: string, phase: StoreRelease['phase'], o: Partial<StoreRelease> = {}): StoreRelease =>
+  ({ store, version, phase, fraction: null, track: null, ...o }) as StoreRelease;
+const base: SectionInput = { project: true, att: [], all: [], next: null, summary: null, catalog: null, unsaved: 0, listings: null, reviews: null, games: null };
+const att = (tone: Attention['tone'], tab: Attention['tab'], text = 'x'): Attention => ({ app: 'A', projectId: 'a', tone, text, tab });
+
+describe('places', () => {
+  test('every old tab id is in exactly one section', () => {
+    for (const tab of APP_TABS) expect(SECTIONS.filter(s => SECTION_TABS[s].includes(tab))).toHaveLength(1);
+  });
+  test('old tab ids, sections and section/sub links', () => {
+    expect(placeOf('prices')).toBe('prices');
+    expect(placeOf('revenue')).toBe('catalog');
+    expect(placeOf('store/art')).toBe('art');
+    expect(placeOf('store/prices')).toBe('listings');
+    expect(placeOf('health')).toBe('health');
+    expect(placeOf('nope')).toBe('releases');
+    expect(parseStart('app:players/games:2', ['a', 'b'])).toEqual({ screen: 'app', appId: 'b', tab: 'games' });
+    expect(parseStart('app:release', ['a'])).toEqual({ screen: 'app', appId: 'a', tab: 'releases' });
+    expect(parseRouteJson('{"screen":"app","appId":"k","tab":"store/appinfo"}')).toEqual({ screen: 'app', appId: 'k', tab: 'appinfo' });
+    expect(sectionOf('testflight')).toBe('release');
+  });
+  test('store-only apps have no Revenue; Game services only for games with a folder', () => {
+    expect(sectionsFor(false)).toEqual(['release', 'store', 'players', 'health']);
+    expect(subsOf('players', true, false)).toEqual(['reviews']);
+    expect(subsOf('players', true, true)).toEqual(['reviews', 'games']);
+    expect(subsOf('players', false, true)).toEqual(['reviews']);
+    expect(subsOf('store', false)).toEqual(['listings', 'art']);
+  });
+  test('a game: profile, games config or a Play game category', () => {
+    expect(isGameSummary({ profile: 'app' } as never)).toBe(false);
+    expect(isGameSummary({ profile: 'game' } as never)).toBe(true);
+    expect(isGameSummary({ profile: 'app', games: { gameCenter: true, playGames: false, leaderboards: 0, achievements: 0 } } as never)).toBe(true);
+    expect(isGameSummary({ profile: 'app', playRelease: { managedPublishing: null, countries: null, category: 'Puzzle' } } as never)).toBe(true);
+  });
+});
+
+describe('next step per section', () => {
+  test('release: rejected first, then blockers, rollout, review (managed), upload, live', () => {
+    expect(sectionNext('release', { ...base, all: [rel('ios', '2.1', 'rejected')], att: [att('bad', 'checks')] })).toMatchObject({ tone: 'bad', tab: 'releases' });
+    expect(sectionNext('release', { ...base, att: [att('bad', 'checks'), att('bad', 'checks')] })).toMatchObject({ text: '2 blockers before submit', tab: 'checks' });
+    expect(sectionNext('release', { ...base, all: [rel('android', '3.0', 'rollout', { fraction: 0.2 })] }).text).toContain('20');
+    expect(sectionNext('release', { ...base, all: [rel('ios', '2.1', 'review', { managed: true })] }).text).toContain('Publishing overview');
+    expect(sectionNext('release', base)).toMatchObject({ tab: 'releases', text: 'Upload a first build' });
+    expect(sectionNext('release', { ...base, all: [rel('ios', '2.1', 'live')] })).toMatchObject({ tone: 'ok', tab: null });
+  });
+  test('store, revenue, players, health', () => {
+    const listings = { files: { play: null, apple: null }, problems: [], locales: [{ lang: 'en', rtl: false, screenshots: null, complete: 0.5, apple: null, play: { code: 'en-US', fields: [{ field: 'title', length: 0, limit: 30, required: true, state: 'missing' }] } }] } as never;
+    expect(listingProblems(listings)).toBe(1);
+    expect(sectionNext('store', { ...base, listings })).toMatchObject({ text: '1 listing problem', tab: 'listings' });
+    expect(sectionNext('revenue', base).tab).toBe('catalog');
+    expect(sectionNext('revenue', { ...base, catalog: { checked: 'live', ok: false, products: 2, subscriptions: 0, onlyIos: ['a'], onlyAndroid: [], missingIos: [], missingAndroid: ['b'] } })).toMatchObject({ tone: 'warn', text: '2 products differ between the stores' });
+    expect(sectionNext('players', { ...base, reviews: [{}, { reply: { text: 'hi' } }, {}] })).toMatchObject({ text: '2 reviews without a reply', tab: 'reviews' });
+    expect(sectionNext('players', { ...base, reviews: [], games: { changes: 0, blockers: 0, apiOff: true } })).toMatchObject({ tone: 'bad', tab: 'games' });
+    expect(sectionNext('players', { ...base, reviews: [] }).tone).toBe('ok');
+    expect(sectionNext('health', { ...base, att: [att('bad', 'health', 'Crash rate over the line')] })).toMatchObject({ text: 'Crash rate over the line', tab: 'health' });
+    expect(sectionNext('health', { ...base, att: [att('bad', 'checks')] })).toMatchObject({ text: '1 problem to fix first', tab: 'checks' });
+  });
+});
+
+describe('sidebar status line', () => {
+  const o = { att: [] as Attention[], all: [] as StoreRelease[], read: true, missing: false, storeOnly: false };
+  test('groups and lines', () => {
+    expect(sideStatus({ ...o, all: [rel('ios', '2.1', 'rejected')] })).toEqual({ group: 'attention', text: 'Rejected · iOS 2.1', tone: 'bad' });
+    expect(sideStatus({ ...o, att: [att('bad', 'checks'), att('bad', 'checks')] })).toMatchObject({ group: 'attention', text: '2 blockers' });
+    expect(sideStatus({ ...o, all: [rel('ios', '2.1', 'review'), rel('android', '2.0', 'live')] })).toMatchObject({ group: 'progress', text: 'In review · iOS 2.1' });
+    expect(sideStatus({ ...o, all: [rel('ios', '2.1', 'live'), rel('android', '2.1', 'live')] })).toEqual({ group: 'live', text: 'Live · 2.1', tone: 'ok' });
+    expect(sideStatus({ ...o, read: false })).toMatchObject({ group: 'draft', text: 'Not read yet' });
+    expect(sideStatus({ ...o, missing: true })).toMatchObject({ group: 'attention', text: 'Folder missing' });
+  });
+});
diff --git a/cli/games-status.ts b/cli/games-status.ts
index 5a06489..814732c 100644
--- a/cli/games-status.ts
+++ b/cli/games-status.ts
@@ -7,7 +7,8 @@ import { ascClient } from './apple/asc';
 import { readProjectEntitlements } from './apple/signing';
 import type { Loaded } from './lib/config';
 import { consoleUrl } from './lib/console-links';
-import { type Finding, gamesPrivacyFindings, gcFindings, hasAndroidProject, planGameCenter, planPlayGames, pgsFindings, readPgsProject, usesPlayGames } from './lib/game-services';
+import { type Action, type Finding, gamesPrivacyFindings, gcFindings, hasAndroidProject, type ItemPlan, liveGcLocales, onStore, planGameCenter, planPlayGames, pgsFindings, readPgsProject, suggestLocaleMap, usesPlayGames } from './lib/game-services';
+import { parseGoogleError } from './lib/google-errors';
 import type { Finding as VFinding } from './lib/validate-rules';
 import { gamesConfigClient, playDefaultLocale, readPlayGames } from './play/games';
 
@@ -18,6 +19,33 @@ export interface GameServicesStatus {
     config: { leaderboards: number; achievements: number }; changes: string[]; error?: string };
   findings: (Finding & { store: 'apple' | 'play' })[];
   links: { label: string; url: string }[];
+  /** One row per configured leaderboard / achievement: its texts and where each store stands against the config
+   *  (create / update / keep; null = not on that store or that store was not read). */
+  items?: GameItemRow[];
+  /** Game Center locale map: the configured entries and the suggestions from the live locales. */
+  localeMap?: { configured: Record<string, string>; suggested: { id: string; from: string; to: string }[] };
+  /** Play: the Games Configuration API is off in the service account's Cloud project. */
+  playApiDisabled?: { service: string; title: string; url: string } | null;
+}
+
+export interface GameItemRow {
+  kind: 'leaderboard' | 'achievement'; id: string; name: string; locales: string[]; points?: number; hidden?: boolean;
+  ios: boolean; android: boolean;
+  apple: { action: Action; changed: string[]; locales: { locale: string; action: Action }[] } | null;
+  play: { action: Action; changed: string[] } | null;
+}
+
+/** The per-item rows of the status (pure; plans are null when that store was not read). */
+export function gameItemRows(g: NonNullable<Loaded['config']['games']>, applePlan: ItemPlan[] | null, playPlan: ItemPlan[] | null): GameItemRow[] {
+  const find = (plan: ItemPlan[] | null, kind: ItemPlan['kind'], id: string) => plan?.find(p => p.kind === kind && p.id === id) ?? null;
+  const row = (kind: ItemPlan['kind'], x: { id: string; locales: Record<string, { name: string }>; platforms?: ('ios' | 'android')[] }, extra: Partial<GameItemRow>): GameItemRow => {
+    const a = find(applePlan, kind, x.id), p = find(playPlan, kind, x.id);
+    return { kind, id: x.id, name: Object.values(x.locales)[0]?.name ?? x.id, locales: Object.keys(x.locales), ...extra,
+      ios: onStore(x, 'apple'), android: onStore(x, 'play'),
+      apple: a ? { action: a.action, changed: a.changed, locales: a.locales.map(l => ({ locale: l.locale, action: l.action })) } : null,
+      play: p ? { action: p.action, changed: p.changed } : null };
+  };
+  return [...(g.leaderboards ?? []).map(l => row('leaderboard', l, {})), ...(g.achievements ?? []).map(a => row('achievement', a, { points: a.points, hidden: !!a.hidden }))];
 }
 
 /** Offline findings (check, scan-like): entitlement, APP_ID resource, declarations reminders. */
@@ -37,7 +65,8 @@ export async function gameServicesStatus(loaded: Loaded, o: { apple?: boolean; p
   const { config, root } = loaded;
   const g = config.games ?? {};
   const findings = localGameFindings(loaded);
-  const out: GameServicesStatus = { apple: null, play: null, findings, links: [] };
+  const out: GameServicesStatus = { apple: null, play: null, findings, links: [], localeMap: { configured: { ...(g.localeMap ?? {}) }, suggested: [] }, playApiDisabled: null };
+  let applePlan: ItemPlan[] | null = null, playPlan: ItemPlan[] | null = null;
   const count = (store: 'apple' | 'play') => ({ leaderboards: (g.leaderboards ?? []).filter(x => !x.platforms || x.platforms.includes(store === 'apple' ? 'ios' : 'android')).length,
     achievements: (g.achievements ?? []).filter(x => !x.platforms || x.platforms.includes(store === 'apple' ? 'ios' : 'android')).length });
   const gcUse = config.apple ? gameCenterInUse(config, root) : { inUse: false, why: null };
@@ -46,8 +75,10 @@ export async function gameServicesStatus(loaded: Loaded, o: { apple?: boolean; p
     try {
       const c = await ascClient(root, config.apple.bundleId, config.apple.appId);
       const s = await readGameCenter(c, config.apple.bundleId);
+      applePlan = planGameCenter(g, config.languages, s, g.localeMap);
+      out.localeMap!.suggested = suggestLocaleMap(config.languages, liveGcLocales(s), g.localeMap ?? {});
       out.apple = { capability: s.capability, enabled: !!s.detail, version: s.version?.versionString ?? null, versionEnabled: s.version ? s.version.enabled : null,
-        leaderboards: s.leaderboards.length, achievements: s.achievements.length, config: count('apple'), changes: changesOf(planGameCenter(g, config.languages, s, g.localeMap)), why: gcUse.why ?? undefined };
+        leaderboards: s.leaderboards.length, achievements: s.achievements.length, config: count('apple'), changes: changesOf(applePlan), why: gcUse.why ?? undefined };
     } catch (e) { out.apple = { capability: null, enabled: false, version: null, versionEnabled: null, leaderboards: 0, achievements: 0, config: count('apple'), changes: [], error: (e as Error).message.slice(0, 300) }; }
   }
   if (config.play && usesPlayGames(config) && o.play !== false) {
@@ -58,9 +89,14 @@ export async function gameServicesStatus(loaded: Loaded, o: { apple?: boolean; p
     if (!appId) out.play = { ...base, leaderboards: 0, achievements: 0, changes: [], error: 'no games project id yet (storebound console plan play-games-services)' };
     else try {
       const have = await readPlayGames(gamesConfigClient(root), appId);
-      out.play = { ...base, leaderboards: have.leaderboards.length, achievements: have.achievements.length, changes: changesOf(planPlayGames(g, config.languages, playDefaultLocale(config), have)) };
-    } catch (e) { out.play = { ...base, leaderboards: 0, achievements: 0, changes: [], error: (e as Error).message.slice(0, 300) }; }
+      playPlan = planPlayGames(g, config.languages, playDefaultLocale(config), have);
+      out.play = { ...base, leaderboards: have.leaderboards.length, achievements: have.achievements.length, changes: changesOf(playPlan) };
+    } catch (e) {
+      const f = parseGoogleError((e as Error).message);
+      if (f?.kind === 'api-disabled') out.playApiDisabled = { service: f.service, title: f.serviceTitle, url: f.activationUrl };
+      out.play = { ...base, leaderboards: 0, achievements: 0, changes: [], error: (e as Error).message.slice(0, 300) }; }
   }
+  out.items = gameItemRows(g, applePlan, playPlan);
   return out;
 }
 
diff --git a/cli/inspect.ts b/cli/inspect.ts
index 4c2e7d5..e3313d9 100644
--- a/cli/inspect.ts
+++ b/cli/inspect.ts
@@ -44,6 +44,7 @@ export function summarize(ctx: Ctx): ProjectSummary {
     variants: Object.keys(config.shots?.variants ?? {}),
     playReports: !!config.play?.reportsBucket,
     playRelease: config.play ? { managedPublishing: config.play.managedPublishing ?? null, countries: config.play.countries?.length ?? null, category: playCategoryOf(config)?.category ?? null } : null,
+    games: config.games ? { gameCenter: config.games.gameCenter === true, playGames: !!config.games.playGames, leaderboards: config.games.leaderboards?.length ?? 0, achievements: config.games.achievements?.length ?? 0 } : null,
   };
 }
 
diff --git a/cli/lib/desktop-protocol.ts b/cli/lib/desktop-protocol.ts
index 58a2582..1a174d5 100644
--- a/cli/lib/desktop-protocol.ts
+++ b/cli/lib/desktop-protocol.ts
@@ -148,6 +148,8 @@ export interface ProjectSummary {
   /** Play production settings from the config: play.managedPublishing (null: not set, Play's default off), the number
    *  of play.countries (null: all countries / regions) and the App category (play.category or the App Store match). */
   playRelease?: { managedPublishing: boolean | null; countries: number | null; category: string | null } | null;
+  /** The games section of the config (Game Center / Play Games Services and the item counts), null without one. */
+  games?: { gameCenter: boolean; playGames: boolean; leaderboards: number; achievements: number } | null;
 }
 
 // ---- App-centric model (one app = one product on up to two platforms; a workspace holds many apps) ----
diff --git a/tests/game-services.test.ts b/tests/game-services.test.ts
index 636bcd8..8554834 100644
--- a/tests/game-services.test.ts
+++ b/tests/game-services.test.ts
@@ -8,7 +8,7 @@ import { capabilitySpecs, planCapabilities } from '../cli/lib/signing';
 import { gamesPrivacyFindings, gcFindings, gcLocaleMap, liveGcLocales, suggestLocaleMap, pgsFindings, planGameCenter, playAchievementBody, playLeaderboardBody, readPgsProject, validateGames } from '../cli/lib/game-services';
 import { consolePlan } from '../cli/lib/console-plan';
 import { verifyText } from '../cli/lib/console-verify';
-import { gameServicesFindings, type GameServicesStatus } from '../cli/games-status';
+import { gameItemRows, gameServicesFindings, type GameServicesStatus } from '../cli/games-status';
 import { run as gameCenter } from '../cli/apple/game-center';
 import { run as playGames } from '../cli/play/games';
 import { run as appleSubmit } from '../cli/apple/submit';
@@ -298,3 +298,15 @@ describe('apple submit with a Game Center build (live 409 STATE_ERROR.BUILD_INDI
     expect(s.asc.all('gameCenterAppVersions')).toHaveLength(1);
   });
 });
+
+describe('games status rows (desktop Players section)', () => {
+  test('one row per item, store states from the plans, null when a store was not read', () => {
+    const g = { leaderboards: [{ id: 'com.example.lb', locales: { en: { name: 'Best' } } }], achievements: [{ id: 'com.example.a1', points: 10, hidden: true, platforms: ['android' as const], locales: { en: { name: 'First', description: 'd' } } }] };
+    const plan = [{ kind: 'leaderboard' as const, id: 'com.example.lb', action: 'update' as const, attributes: {}, changed: ['scoreSortType'], locales: [{ locale: 'en-US', action: 'create' as const, attributes: {}, changed: [] }] }];
+    const rows = gameItemRows(g, plan, null);
+    expect(rows.map(r => [r.kind, r.id, r.name, r.ios, r.android])).toEqual([['leaderboard', 'com.example.lb', 'Best', true, true], ['achievement', 'com.example.a1', 'First', false, true]]);
+    expect(rows[0]!.apple).toEqual({ action: 'update', changed: ['scoreSortType'], locales: [{ locale: 'en-US', action: 'create' }] });
+    expect(rows[0]!.play).toBeNull();
+    expect(rows[1]).toMatchObject({ points: 10, hidden: true, apple: null });
+  });
+});
diff --git a/tools/desktop-boot-check.ts b/tools/desktop-boot-check.ts
index 6f7ced0..1943097 100644
--- a/tools/desktop-boot-check.ts
+++ b/tools/desktop-boot-check.ts
@@ -244,20 +244,51 @@ async function newPage(ctx: { newPage(): Promise<import('playwright').Page> }):
   return page;
 }
 
-/** Opens an app tab like a person: the tab itself when it is in the row, else through the row's "More" menu (tabs
- *  that do not fit the window go there). */
+/** The app's places (docs IA): five sections, each with sub views in a segmented control. A place is named by its
+ *  sub view's old tab id ("tab-prices"); the section of each, for opening it like a person. */
+const SECTION_OF: Record<string, string> = {
+  releases: 'release', testflight: 'release', listings: 'store', art: 'store', appinfo: 'store', catalog: 'revenue', prices: 'revenue',
+  reviews: 'players', games: 'players', health: 'health', growth: 'health', checks: 'health', tools: 'health',
+};
+
+/** Opens a place in an app like a person: its section in the section row (or through the row's "More" menu when it
+ *  does not fit), then the sub view in the section's segmented control when the section has more than one. */
 async function clickTab(page: Page, id: string, o: { timeout?: number } = {}): Promise<void> {
-  const tab = page.locator(`[role="tab"]#${id}`);
+  const sub = id.replace(/^tab-/, '');
+  const sec = SECTION_OF[sub];
+  if (!sec) throw new Error(`unknown place ${id}`);
+  const tab = page.locator(`[role="tab"]#tab-${sec}`);
   await tab.waitFor({ state: 'attached', timeout: o.timeout });
-  if (await tab.isVisible()) { await tab.click(o); return; }
-  const label = ((await tab.textContent()) ?? '').replace(/\d+$/, '').trim();
-  try {
-    await page.locator('.ds-tab-more').click(o);
-    await page.locator('.ds-menu [role="menuitem"]', { hasText: label }).first().click(o);
-  } catch (e) {
-    const why = await page.evaluate(() => JSON.stringify({ more: document.querySelectorAll('.ds-tab-more').length, menu: [...document.querySelectorAll('.ds-menu [role^="menuitem"]')].map(x => x.textContent), w: innerWidth }));
-    throw new Error(`${String(e).split('\n')[0]} (${label}; ${why})`);
+  if (await tab.isVisible()) await tab.click(o);
+  else {
+    const label = ((await tab.textContent()) ?? '').replace(/\d+$/, '').trim();
+    try {
+      await page.locator('.ds-tab-more').click(o);
+      await page.locator('.ds-menu [role="menuitem"]', { hasText: label }).first().click(o);
+    } catch (e) {
+      const why = await page.evaluate(() => JSON.stringify({ more: document.querySelectorAll('.ds-tab-more').length, menu: [...document.querySelectorAll('.ds-menu [role^="menuitem"]')].map(x => x.textContent), w: innerWidth }));
+      throw new Error(`${String(e).split('\n')[0]} (${label}; ${why})`);
+    }
   }
+  const btn = page.locator(`.sec-subs #sub-${sub}`);
+  if (await btn.count()) { await btn.click(o); return; }
+  // a section with one sub view has no segmented control: the section itself is the place
+  if (await page.locator('.sec-subs button').count()) throw new Error(`${id}: not in the ${sec} section's views`);
+}
+
+/** Every place of the open app, in order: each section, then each of its sub views (as clickTab ids). */
+async function places(page: Page, o: { timeout?: number } = {}): Promise<string[]> {
+  const secs = await page.locator('[role="tab"]').evaluateAll(ts => ts.map(x => x.id.replace(/^tab-/, '')));
+  const out: string[] = [];
+  for (const sec of secs) {
+    await page.locator(`[role="tab"]#tab-${sec}`).click(o).catch(() => {});
+    await page.locator('[data-testid="section-head"]').waitFor({ state: 'visible', timeout: o.timeout }).catch(() => {});
+    const subs = await page.locator('.sec-subs button').evaluateAll(bs => bs.map(b => b.id.replace(/^sub-/, '')));
+    const first = Object.entries(SECTION_OF).find(([, s]) => s === sec)?.[0];
+    // a one-view section: its only view (Players without games is Reviews)
+    out.push(...(subs.length ? subs : first ? [first] : []).map(x => `tab-${x}`));
+  }
+  return out;
 }
 
 async function state(page: Page) {
@@ -342,10 +373,12 @@ async function runCase(browser: Browser, name: string, sidecar: Sidecar, o: { br
       if (await wizard.count()) problems.push('the welcome guide does not close with Escape');
     }
     // every sidebar entry: the portfolio, each app (folders that are gone included), each workspace screen
-    const count = await page.locator('nav.side button.nav').count();
+    // (apps are .nav rows; the workspace is the footer's icon row, named by aria-label)
+    const SIDE = 'nav.side button.nav, nav.side button.nav-ws';
+    const count = await page.locator(SIDE).count();
     for (let i = 0; i < count; i++) {
-      const b = page.locator('nav.side button.nav').nth(i);
-      const label = ((await b.innerText().catch(() => '')) || `entry ${i}`).split('\n')[0]!.trim();
+      const b = page.locator(SIDE).nth(i);
+      const label = ((await b.getAttribute('aria-label').catch(() => null)) || (await b.innerText().catch(() => '')) || `entry ${i}`).split('\n')[0]!.trim();
       await b.click({ timeout: WAIT_MS }).catch(e => problems.push(`could not open ${label}: ${String(e).split('\n')[0]}`));
       await settle(page);
       await check(label);
@@ -365,7 +398,7 @@ async function runCase(browser: Browser, name: string, sidecar: Sidecar, o: { br
     // shared with the CLI: each account names its credential profile (or that its old keychain key has not moved)
     const accts = fx.accounts_list as { label?: string; profile?: string | null }[];
     if (accts.length) {
-      const nav = page.locator('nav.side button.nav', { hasText: 'Accounts' }).first();
+      const nav = page.locator('nav.side [data-screen="accounts"]').first();
       if (await nav.count()) {
         await nav.click({ timeout: WAIT_MS });
         await settle(page);
@@ -510,8 +543,8 @@ async function runSubmitCase(browser: Browser, sidecar: Sidecar, base: 'd3-full'
     await gone(page, '.cp-panel');
     await crashCheck('Releases');
     visited++;
-    // every tab of the app, then App info's console steps and the Dependencies screen
-    const tabs = await page.locator('[role="tab"]').evaluateAll(ts => ts.map(x => x.id));
+    // every place of the app (each section and its sub views), then App info's console steps and Dependencies
+    const tabs = await places(page, { timeout: WAIT_MS });
     for (const id of tabs) {
       await clickTab(page, id, { timeout: WAIT_MS }).catch(e => problems.push(`tab ${id}: ${String(e).split('\n')[0]}`));
       await settle(page);
@@ -524,7 +557,7 @@ async function runSubmitCase(browser: Browser, sidecar: Sidecar, base: 'd3-full'
       if (id === 'tab-testflight' && !(await text()).length) problems.push('TestFlight: empty');
     }
     notes.push(`tabs: ${tabs.join(', ')}`);
-    const deps = page.locator('nav.side button.nav', { hasText: 'Dependencies' }).first();
+    const deps = page.locator('nav.side [data-screen="dependencies"]').first();
     await deps.click({ timeout: WAIT_MS }).catch(() => {});
     await shows(page, '#content', 'Android SDK');
     await settle(page);
@@ -710,7 +743,7 @@ async function runAutoReadCase(browser: Browser): Promise<CaseResult> {
       await page.locator('nav.side .nav-app:visible').nth(i).click({ timeout: WAIT_MS }).catch(e => problems.push(`app ${i}: ${String(e).split('\n')[0]}`));
       await settle(page);
       const appName = (await page.locator('nav.side .nav-app:visible').nth(i).innerText().catch(() => `app ${i}`)).split('\n')[0]!.trim();
-      const tabs = await page.locator('[role="tab"]').evaluateAll(ts => ts.map(x => x.id));
+      const tabs = await places(page, { timeout: WAIT_MS });
       for (const id of tabs) {
         await clickTab(page, id, { timeout: WAIT_MS }).catch(e => problems.push(`${appName} ${id}: ${String(e).split('\n')[0]}`));
         await settle(page);

From 5b6e0992ca6c3632eb76b47494a08a8acd835b28 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Sat, 24 Oct 2026 13:05:40 +0800
Subject: [PATCH 021/126] desktop: boot check finds unsaved marks on the sub
 views; neutral next-step lines before a read

---
 apps/desktop/src/i18n/en.ts | 4 ++--
 apps/desktop/src/i18n/tr.ts | 4 ++--
 tools/desktop-boot-check.ts | 6 +++---
 3 files changed, 7 insertions(+), 7 deletions(-)

diff --git a/apps/desktop/src/i18n/en.ts b/apps/desktop/src/i18n/en.ts
index c4f37ed..9c5642b 100644
--- a/apps/desktop/src/i18n/en.ts
+++ b/apps/desktop/src/i18n/en.ts
@@ -2140,7 +2140,7 @@ export const en = {
   "next.managed": "{version} waits in Publishing overview (managed publishing)",
   "next.upload": "Upload a first build",
   "next.live": "Live: {version}",
-  "next.notRead": "Stores not read yet",
+  "next.notRead": "Release state shows once the stores are read",
   "next.storeLive": "The live store page, read from the stores",
   "next.listingProblems": "{count} listing problems",
   "next.listingProblems_one": "1 listing problem",
@@ -2154,7 +2154,7 @@ export const en = {
   "next.products": "{products} products · {subs} subscriptions",
   "next.reviews": "{count} reviews without a reply",
   "next.reviews_one": "1 review without a reply",
-  "next.reviewsUnread": "Reviews not read yet",
+  "next.reviewsUnread": "See what players say",
   "next.reviewsOk": "All reviews answered",
   "next.gamesApiOff": "Play Games Services API is off",
   "next.gamesBlockers": "{count} game services blockers",
diff --git a/apps/desktop/src/i18n/tr.ts b/apps/desktop/src/i18n/tr.ts
index e19a2e7..6872f6b 100644
--- a/apps/desktop/src/i18n/tr.ts
+++ b/apps/desktop/src/i18n/tr.ts
@@ -2142,7 +2142,7 @@ export const tr: Record<keyof typeof en, string> = {
   "next.managed": "{version} Yayınlama özeti'nde bekliyor (yönetilen yayınlama)",
   "next.upload": "İlk build'i yükle",
   "next.live": "Yayında: {version}",
-  "next.notRead": "Mağazalar henüz okunmadı",
+  "next.notRead": "Yayın durumu mağazalar okununca görünür",
   "next.storeLive": "Mağazalardan okunan canlı mağaza sayfası",
   "next.listingProblems": "{count} mağaza metni sorunu",
   "next.listingProblems_one": "1 mağaza metni sorunu",
@@ -2156,7 +2156,7 @@ export const tr: Record<keyof typeof en, string> = {
   "next.products": "{products} ürün · {subs} abonelik",
   "next.reviews": "{count} yorum yanıtsız",
   "next.reviews_one": "1 yorum yanıtsız",
-  "next.reviewsUnread": "Yorumlar henüz okunmadı",
+  "next.reviewsUnread": "Oyuncuların söylediklerine bak",
   "next.reviewsOk": "Tüm yorumlar yanıtlandı",
   "next.gamesApiOff": "Play Games Services API kapalı",
   "next.gamesBlockers": "{count} oyun servisi engeli",
diff --git a/tools/desktop-boot-check.ts b/tools/desktop-boot-check.ts
index 1943097..cc4d1e4 100644
--- a/tools/desktop-boot-check.ts
+++ b/tools/desktop-boot-check.ts
@@ -976,7 +976,7 @@ async function runEditorCase(browser: Browser, sidecar: Sidecar): Promise<CaseRe
     if (!over.includes('42 / 30')) problems.push(`no live counter "42 / 30" (${over.slice(0, 200)})`);
     if (!over.includes('subtitle is 42 characters; the App Store takes 30')) problems.push('no limit check while typing');
     else notes.push('typing: counter 42 / 30 and "the App Store takes 30"');
-    if (!(await page.locator('#tab-listings .ed-dot').count())) problems.push('the Listings tab has no unsaved mark');
+    if (!(await page.locator('#sub-listings .ed-dot').count())) problems.push('the Listings tab has no unsaved mark');
     // undo goes back to the saved text, redo brings the edit back
     await page.locator('[data-edit-bar="listings"] button', { hasText: 'Undo' }).click({ timeout: WAIT_MS });
     const undone = await page.locator(field).inputValue();
@@ -993,7 +993,7 @@ async function runEditorCase(browser: Browser, sidecar: Sidecar): Promise<CaseRe
     }
     await page.locator('[data-edit-bar="listings"] button', { hasText: 'Save to the app folder' }).click({ timeout: WAIT_MS })
       .catch(async e => problems.push(`no enabled Save button: ${String(e).split('\n')[0]} (${(await text('[data-edit-bar="listings"]')).slice(0, 600)})`));
-    await page.waitForFunction(() => !document.querySelector('#tab-listings .ed-dot'), null, { timeout: WAIT_MS, polling: 50 }).catch(() => problems.push('the unsaved mark stays after Save'));
+    await page.waitForFunction(() => !document.querySelector('#sub-listings .ed-dot'), null, { timeout: WAIT_MS, polling: 50 }).catch(() => problems.push('the unsaved mark stays after Save'));
     await settle(page);
     const md = readFileSync(appstore, 'utf8');
     const changed = md.split('\n').filter((l, i) => l !== before.md.split('\n')[i]);
@@ -1022,7 +1022,7 @@ async function runEditorCase(browser: Browser, sidecar: Sidecar): Promise<CaseRe
     if (!(await shows(page, '[data-edit-bar="appinfo"] [data-edit-plan]', 'apple.info.reviewNotes'))) problems.push(`App info: no review plan (${(await text('[data-edit-bar="appinfo"]')).slice(0, 400)})`);
     await page.locator('[data-edit-bar="appinfo"] button', { hasText: 'Save to the app folder' }).click({ timeout: WAIT_MS })
       .catch(async e => problems.push(`App info: no enabled Save button: ${String(e).split('\n')[0]} (${(await text('[data-edit-bar="appinfo"]')).slice(0, 600)})`));
-    await page.waitForFunction(() => !document.querySelector('#tab-appinfo .ed-dot'), null, { timeout: WAIT_MS, polling: 50 }).catch(() => problems.push('App info: the unsaved mark stays after Save'));
+    await page.waitForFunction(() => !document.querySelector('#sub-appinfo .ed-dot'), null, { timeout: WAIT_MS, polling: 50 }).catch(() => problems.push('App info: the unsaved mark stays after Save'));
     const cfg = readFileSync(join(dir, 'storebound.config.ts'), 'utf8');
     const cfgChanged = cfg.split('\n').filter((l, i) => l !== before.cfg.split('\n')[i]);
     if (!cfg.includes("reviewNotes: 'Sign in with the demo account.'") || cfgChanged.length !== 1 || !cfg.includes('// storebound config of the demo app')) problems.push(`storebound.config.ts: expected one changed line with reviewNotes and the comments kept, got ${JSON.stringify(cfgChanged).slice(0, 300)}`);

From 445ab1adbc1523b6d7588297735b24c8dc62e0a8 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Sat, 24 Oct 2026 13:02:35 +0800
Subject: [PATCH 022/126] apple signing: every signable target (extensions, App
 Group check), build keychain unlock over SSH, api confirm docs

---
 CHANGELOG.md                   |   6 +
 cli/api.ts                     |   4 +-
 cli/api/gate.ts                |   4 +-
 cli/api/wrapped.gen.ts         |   2 +-
 cli/apple/build-mas.ts         |   4 +-
 cli/apple/build.ts             |  65 ++++++-
 cli/apple/signing.ts           | 159 +++++++++++++--
 cli/data/flags.json            |  22 ++-
 cli/lib/keychain.ts            |  45 +++++
 cli/lib/signing.ts             |  29 ++-
 cli/lib/targets.ts             | 138 +++++++++++++
 cli/lib/xcode.ts               |   4 +-
 docs/api-coverage.md           |   2 +-
 skills/build-and-sign/SKILL.md |   9 +-
 skills/store-api/SKILL.md      |   4 +-
 skills/store-pitfalls/SKILL.md |  36 +++-
 tests/signing-targets.test.ts  | 341 +++++++++++++++++++++++++++++++++
 17 files changed, 832 insertions(+), 42 deletions(-)
 create mode 100644 cli/lib/keychain.ts
 create mode 100644 cli/lib/targets.ts
 create mode 100644 tests/signing-targets.test.ts

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 1a36300..5a15c38 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -6,6 +6,12 @@
 - `shots.feature.rotate` (degrees) is honoured by the Play feature graphic like a scene frame's `rotate`: added to the template tilt and the phone is re-fitted (`-90` stands a landscape game frame upright); with `shots.layout: "bleed"` the frame image is turned and still covers the canvas.
 - `shots check` / `shots render` without frames for a language that has copy use the default language's frames (an info line, no failure); `shots.perLanguageFrames: true` requires per-language frames. `shots fonts --lang en,tr` limits the report to those languages (the font manifest keeps all of them).
 - `shots capture` web shots take `waitSelector` and `click` selector lists per layout (`{ phone, tablet, any }`, data attributes first, `text=` fallback). A miss names the selector and the size with every candidate's match count; `shots capture --dry` prints the candidates per size and `--dry --probe` opens the pages and reports which one matched or MISSed on which size.
+||||||| parent of ae8d773 (apple signing: every signable target (extensions, App Group check), build keychain unlock over SSH, api confirm docs)
+
+- `apple signing ensure` signs every target of the Xcode project, not only the app: it reads the pbxproj targets (app, app extensions such as a share extension or widget, watch app, App Clip: Release PRODUCT_BUNDLE_IDENTIFIER and entitlements), registers each extension's bundle id (`POST /v1/bundleIds`, platform from the profile type), enables the capabilities its entitlements need (read back) and, with manual signing, creates its App Store profile; `--dry` lists every target. `apple.signing.extensions` (`bundleId`, `name`, `capabilities`, `appGroups`) replaces the detected extensions when detection is wrong; `status` shows a target table.
+- App Groups: the API cannot assign a group to a bundle id, so `signing status` / `ensure` and (manual signing) `apple build` decode the profile and compare its `com.apple.security.application-groups` with the target's entitlements; a gap names the developer portal link (`.../identifiers/bundleId/edit/<id>`) and the steps to tick the group. `signing ensure --refresh-profile` makes the profile again afterwards; `apple build --allow-app-group-gap` overrides.
+- `apple build` over SSH / in CI: the refusal now names the fixes (GUI session `.command` file, a CI runner with an unlocked keychain, a build keychain). New `--keychain-unlock` (keychain password from `STOREBOUND_KEYCHAIN_PASSWORD`, never printed; runs `security unlock-keychain` and `set-key-partition-list`) and `--keychain <path>` (sign with a build keychain).
+- `storebound api` writes: the usage, the dry-run message and the refusals show the agent form with an example (`--yes --confirm <operationId>`), and the store-api skill says both flags are needed.
 - Play managed publishing: `storebound console plan play-publish-changes` (Publishing overview > "Changes ready to publish" > the owner's final "Publish N changes" + its confirm dialog; never-press: Discard changes, Stop managed publishing; `--lookup` lists the ready production releases from the API) and `console verify play-publish-changes` (API: passes when no production release is left ready to publish; or the page text). `play status` (and `--json` `readyToPublish`) prints the ready items and the plan hint, `storebound status` names the plan, and the desktop Releases tab shows the same hint with a button that opens Publishing overview. A release counts as ready to publish only when the public store page positively shows an older version; a 404, a failed or stale page read, a same or unparseable version is never ready (verify says "not determined" instead of a mismatch).
 - `apple upload` / `play upload` `--pre-check "<cmd with {file}>"` (config `upload.preCheck`) runs your gate before any byte is sent; a nonzero exit refuses the upload (ship-step exit 1, `PRE_CHECK_FAILED`). `--evidence <path.json>` (`upload.evidence`) writes file, sha256, size, command, exit code, stdout tail, time and version, also on failure, and the result carries it as `preCheck`.
 - New `storebound shots copy translate --to de,es` fills store/shots/copy.json per language (agent translation or `--translate "<cmd>"`), machine-translated until `shots copy reviewed`, caption limits respected; `shots copy check`; `check` / `shots render` name this command for a missing language.
diff --git a/cli/api.ts b/cli/api.ts
index a629aed..953919f 100644
--- a/cli/api.ts
+++ b/cli/api.ts
@@ -35,7 +35,9 @@ export const USAGE = `usage:
 GETs run right away. Writes print the exact request and are sent only with --yes in a terminal; owner-only
 operations (submit, release, delete, cancel, prices, testers, review replies, experiments) also ask you to type the
 operation id. Agents without a terminal: --yes --confirm <operationId> (must equal the operation id; plain writes
-only, never owner-only operations). Full table: docs/api-coverage.md`;
+only, never owner-only operations), e.g.
+  storebound api apple bundleIds_createInstance --body bundle.json --yes --confirm bundleIds_createInstance
+Full table: docs/api-coverage.md`;
 
 export interface Row { store: Store; id: string; method: string; path: string; gate: GateKind; wrapped: string }
 
diff --git a/cli/api/gate.ts b/cli/api/gate.ts
index d3f6ef7..c7c8cef 100644
--- a/cli/api/gate.ts
+++ b/cli/api/gate.ts
@@ -94,7 +94,7 @@ export type Decision =
   | { action: 'refuse'; why: string };
 
 /** --yes without a terminal: refused loudly (exit 1, stderr), never a silent dry run (pitfall 77). */
-export const NOT_A_TTY = 'refused: writes through `storebound api` need an interactive terminal (stdout is not a TTY: piped or redirected). Nothing was sent. Run it without a pipe or redirect, add --confirm <operationId> (agents, plain writes only), or use the dedicated storebound command.';
+export const NOT_A_TTY = 'refused: writes through `storebound api` need an interactive terminal (stdout is not a TTY: piped or redirected). Nothing was sent. Run it without a pipe or redirect, add --confirm <operationId> (agents, plain writes only: --yes --confirm bundleIds_createInstance for the operation bundleIds_createInstance), or use the dedicated storebound command.';
 
 /** --confirm never stands in for the owner's typed id on an owner-only operation. */
 export const OWNER_NO_CONFIRM = 'refused: owner-only operation: --confirm does not apply; the owner types the operation id in an interactive terminal. Nothing was sent.';
@@ -107,7 +107,7 @@ export function decide(g: GateInput): Decision {
   if (g.agent && !g.bypass) return { action: 'refuse', why: g.kind === 'owner'
     ? 'owner-only operation: never through MCP or the desktop app; the owner runs it in a terminal'
     : 'writes through `storebound api` are not available to MCP or the desktop app; run it in a terminal' };
-  if (g.dry || !g.yes) return { action: 'dry', why: g.dry ? '--dry' : 'writes are dry by default: add --yes (in a terminal) to send' };
+  if (g.dry || !g.yes) return { action: 'dry', why: g.dry ? '--dry' : g.kind === 'owner' ? 'writes are dry by default: add --yes (in a terminal; owner-only operations also ask for the typed operation id)' : `writes are dry by default: add --yes in a terminal, or from an agent's shell --yes --confirm <operationId> (e.g. \`storebound api apple ${g.opId ?? 'bundleIds_createInstance'} --body body.json --yes --confirm ${g.opId ?? 'bundleIds_createInstance'}\`)` };
   if (g.confirm !== undefined) {
     // an agent's typed confirmation: only for plain writes, only when it names this exact operation
     if (g.kind === 'owner' && !g.bypass) return { action: 'refuse', why: OWNER_NO_CONFIRM };
diff --git a/cli/api/wrapped.gen.ts b/cli/api/wrapped.gen.ts
index d361d9a..4a8fca5 100644
--- a/cli/api/wrapped.gen.ts
+++ b/cli/api/wrapped.gen.ts
@@ -134,7 +134,7 @@ export const WRAPPED: { apple: Record<string, string>; play: Record<string, stri
     'builds_getCollection': 'apple/build apple/build-mas apple/encryption apple/listing apple/next-build apple/resubmit apple/status apple/testflight apple/upload art health lib/store-apps triage',
     'builds_updateInstance': 'apple/encryption lib/build-ops',
     'bundleIdCapabilities_createInstance': 'lib/signing',
-    'bundleIds_createInstance': 'apple/bundle',
+    'bundleIds_createInstance': 'apple/bundle apple/signing',
     'bundleIds_getCollection': 'apple/adhoc apple/bundle apple/signing',
     'bundleIds_profiles_getToManyRelated': 'apple/adhoc lib/signing',
     'certificates_createInstance': 'apple/signing lib/signing',
diff --git a/cli/apple/build-mas.ts b/cli/apple/build-mas.ts
index 82beef3..865b233 100644
--- a/cli/apple/build-mas.ts
+++ b/cli/apple/build-mas.ts
@@ -21,6 +21,7 @@ import { done, log, printJson, warn } from '../lib/log';
 import { parseMobileprovision, parsePlist, type PlistValue } from '../lib/plist';
 import { nextBuildNumber } from '../lib/release';
 import { parseIdentities, profileDirs, readProfiles, type ApiProfile } from '../lib/signing';
+import { sshBuildRefusal } from '../lib/keychain';
 import { remoteBuildSession, showCmd } from '../lib/xcode';
 import {
   appProblems, entitlementKeysOf, entitlementsXml, findBuiltApp, findTauri, leakNeedles, masEntitlements, type MasProfile, masSteps, pathFreeEnv, pickMasIdentities,
@@ -158,7 +159,8 @@ export async function run(ctx: Ctx): Promise<void> {
   }
   if (!mac) throw new Error('apple build --platform macos needs macOS (tauri build, codesign, productbuild)');
   const remote = remoteBuildSession(process.env, run1(['launchctl', 'managername'], 5000).out.trim());
-  if (remote && !unsigned && !a.has('allow-ssh')) throw new Error(`apple build: ${remote}; codesign there fails with errSecInternalComponent (locked keychain). Run it in the Mac's logged-in session (write the command into a .command file and \`open -a Terminal <file>\`), or add --unsigned for a pipeline check.`);
+  if (remote && !unsigned && !a.has('allow-ssh')) throw new Error(`${sshBuildRefusal(remote, { unlockFlag: false })}
+  Or add --unsigned for a pipeline check.`);
   mkdirSync(out, { recursive: true });
   writeFileSync(entFile, entitlementsXml(ent));
   writeFileSync(configFile, `${JSON.stringify(overlay, null, 2)}\n`);
diff --git a/cli/apple/build.ts b/cli/apple/build.ts
index 74f0056..97ac211 100644
--- a/cli/apple/build.ts
+++ b/cli/apple/build.ts
@@ -3,6 +3,11 @@
 //     (Mac App Store build of a Tauri app: cli/apple/build-mas.ts)
 //   storebound apple build [--version 1.2.0] [--build-number N] [--scheme S] [--workspace W | --project P]
 //                          [--configuration Release] [--out build/ios] [--no-prebuild] [--allow-stale-web] [--dry] [--json]
+//                          [--keychain <path>] [--keychain-unlock] [--allow-ssh] [--allow-app-group-gap]
+// Over SSH (no GUI session) codesign needs an unlocked keychain: --keychain-unlock unlocks it with the password in
+// STOREBOUND_KEYCHAIN_PASSWORD (never printed) and sets its key partition list; --keychain <path> signs with a build
+// keychain instead of the login keychain. Manual signing: stops before the build when a target's App Group is not in its
+// installed profile (the developer portal assigns groups; storebound apple signing status/ensure names the steps).
 // First the prebuild (build.prebuild / apple.prebuild: e.g. the web build + npx cap sync; once per flow run), then a
 // Capacitor project's copied web assets (ios/App/App/public) must be newer than the source, else it stops.
 // Finds the workspace / project and scheme (native, Capacitor ios/App, React Native ios/<Name>, Flutter ios/Runner,
@@ -24,20 +29,22 @@ import { pump } from '../lib/runner';
 import { parseMobileprovision, toXmlPlist } from '../lib/plist';
 import { nextBuildNumber } from '../lib/release';
 import { exportOptions, profileDirs } from '../lib/signing';
+import { keychainPassword, keychainSigningArgs, parseKeychainList, showSecurity, sshBuildRefusal, unlockSteps } from '../lib/keychain';
+import { appGroupGapsFor, appGroupSteps } from '../lib/targets';
 import { capacitorProject, webStep } from '../lib/web-assets';
 import { archiveArgs, type AscAuth, distributionErrors, exportArgs, foreignRsync, remoteBuildSession, xcodePath, flutterConfigArgs, ipaInfo, ipaVersionProblem, pickXcode, scanXcode, showCmd } from '../lib/xcode';
 import { bundleTrackingIssues, ipaManifests } from '../lib/privacy-files';
 import { ascClient } from './asc';
 import { parsePlatform } from './platform';
-import { findBundleId } from './signing';
+import { discoverTargets, findBundleId } from './signing';
 import * as rt from '../lib/rt';
 import { shipPhase } from '../lib/ship-step';
 
 const TAG = 'build';
 
 /** Installed App Store profiles for a bundle id, newest expiry first: { uuid, name, team }. */
-export function installedProfiles(bundleId: string, teamId: string | null, home = homedir()): { uuid: string; name: string; team: string; expires: string }[] {
-  const out: { uuid: string; name: string; team: string; expires: string }[] = [];
+export function installedProfiles(bundleId: string, teamId: string | null, home = homedir()): { uuid: string; name: string; team: string; expires: string; entitlements: Record<string, unknown> }[] {
+  const out: { uuid: string; name: string; team: string; expires: string; entitlements: Record<string, unknown> }[] = [];
   for (const d of profileDirs(home)) {
     let files: string[] = [];
     try { files = readdirSync(d).filter(f => f.endsWith('.mobileprovision')); } catch { continue; }
@@ -50,13 +57,35 @@ export function installedProfiles(bundleId: string, teamId: string | null, home
         const store = !p.ProvisionedDevices && !p.ProvisionsAllDevices && ent?.['get-task-allow'] !== true;
         if (!store || appId !== `${team}.${bundleId}` || (teamId && team !== teamId)) continue;
         if (Date.parse(String(p.ExpirationDate)) < Date.now()) continue;
-        if (!out.some(x => x.uuid === p.UUID)) out.push({ uuid: String(p.UUID), name: String(p.Name), team, expires: String(p.ExpirationDate) });
+        if (!out.some(x => x.uuid === p.UUID)) out.push({ uuid: String(p.UUID), name: String(p.Name), team, expires: String(p.ExpirationDate), entitlements: ent ?? {} });
       } catch { /* not a profile */ }
     }
   }
   return out.sort((a, b) => Date.parse(b.expires) - Date.parse(a.expires));
 }
 
+const security = (argv: string[]): { ok: boolean; out: string } => { const r = rt.spawnSync(argv, { stdout: 'pipe', stderr: 'pipe', timeout: 60_000 }); return { ok: r.success, out: (r.stdout.toString() + r.stderr.toString()).trim() }; };
+
+/** Puts a build keychain on the user's keychain search list (xcodebuild -exportArchive finds identities there). */
+function addToSearchList(keychain: string): void {
+  const list = parseKeychainList(security(['security', 'list-keychains', '-d', 'user']).out);
+  const step = unlockSteps(keychain, list).find(x => x[1] === 'list-keychains');
+  if (step) { const r = security(step); if (!r.ok) throw new Error(`${showSecurity(step)} failed: ${r.out.slice(0, 200)}`); log(TAG, `${keychain} added to the keychain search list`); }
+}
+
+/** --keychain-unlock: unlocks the keychain (the login keychain, or --keychain) with STOREBOUND_KEYCHAIN_PASSWORD and
+ *  sets the key partition list so codesign uses the keys without a prompt. The password is never printed. */
+function unlockKeychain(keychain: string | null): void {
+  const pw = keychainPassword(process.env);
+  const kc = keychain ?? parseKeychainList(security(['security', 'default-keychain', '-d', 'user']).out)[0] ?? join(homedir(), 'Library/Keychains/login.keychain-db');
+  const list = parseKeychainList(security(['security', 'list-keychains', '-d', 'user']).out);
+  for (const step of unlockSteps(kc, list)) {
+    const r = security(step.map(x => (x === 'PASSWORD' ? pw : x)));
+    if (!r.ok) throw new Error(`${showSecurity(step)} failed: ${r.out.split(pw).join('***').slice(0, 300)}`);
+  }
+  log(TAG, `keychain ${kc} unlocked, key partition list set (password from ${'STOREBOUND_KEYCHAIN_PASSWORD'})`);
+}
+
 export async function runLogged(argv: string[], cwd: string, logFile: string, show: string, env?: Record<string, string>): Promise<void> {
   log(TAG, `$ ${show}`);
   log(TAG, `full output: ${logFile}`);
@@ -142,33 +171,45 @@ export async function run(ctx: Ctx): Promise<void> {
   if (build && !/^\d+(\.\d+){0,2}$/.test(build)) throw new Error('--build-number: digits, e.g. 42 or 1.0.42');
   const buildNo = build ?? '<next build number>';
 
-  const ids = [bundleId, ...(signing.extraBundleIds ?? [])];
+  const scan = discoverTargets(root, config);
+  const ids = [bundleId, ...scan.extensions.map(t => t.bundleId)];
   const profiles: Record<string, string> = {};
   if (style === 'manual') for (const id of ids) {
     const p = installedProfiles(id, teamId)[0];
     if (p) profiles[id] = p.uuid; else if (!dry) throw new Error(`no installed App Store profile for ${id}: storebound apple signing ensure`);
     else warn(TAG, `no installed App Store profile for ${id} (storebound apple signing ensure)`);
   }
+  // App Groups: a manual-signing profile carries a group only when the portal assigned it to the bundle id
+  const groupGaps = style === 'manual' ? appGroupGapsFor([...(scan.main ? [scan.main] : []), ...scan.extensions], id => { const p = installedProfiles(id, teamId)[0]; return p ? p.entitlements : null; }, () => null) : [];
+  for (const g of groupGaps) {
+    const msg = `${g.bundleId}: the installed profile lacks App Group(s) ${g.groups.join(', ')}`;
+    if (a.has('allow-app-group-gap') || dry) warn(TAG, msg);
+    else throw new Error(`${msg}; codesign would refuse the build.\n${appGroupSteps(g).slice(1).join('\n')}\n(--allow-app-group-gap builds anyway)`);
+  }
   const opts = exportOptions({ teamId: teamId ?? '<TEAM_ID>', style, profiles: style === 'manual' ? (Object.keys(profiles).length ? profiles : { [bundleId]: '<profile uuid>' }) : undefined });
   const plist = toXmlPlist(opts);
+  const keychainFlag = a.get('keychain');
+  const keychain = keychainFlag && keychainFlag !== 'true' ? resolve(keychainFlag) : null;
+  const unlock = a.has('keychain-unlock');
   const archivePath = join(out, `${target.scheme}.xcarchive`);
   const exportPath = exportDir(out, version, buildNo);
   const authPreview: AscAuth = { keyPath: '$ASC_P8', keyId: '$ASC_KEY_ID', issuerId: '$ASC_ISSUER_ID' };
   const auth = style === 'automatic' ? authPreview : null;
   const steps = [
     ...(target.framework === 'flutter' ? [showCmd(flutterConfigArgs(buildNo, version), null)] : []),
-    showCmd(archiveArgs({ target, root, configuration, archivePath, version, build: buildNo, teamId: teamId ?? undefined, auth }), auth),
+    showCmd(archiveArgs({ target, root, configuration, archivePath, version, build: buildNo, teamId: teamId ?? undefined, auth, settings: keychain ? keychainSigningArgs(keychain) : undefined }), auth),
     showCmd(exportArgs(archivePath, join(out, 'ExportOptions.plist'), exportPath, auth), auth),
   ];
+  const unlockPreview = unlock ? unlockSteps(keychain ?? '<login keychain>', []).map(showSecurity) : [];
   const plan = { framework: target.framework, workspace: target.workspace ?? null, project: target.project ?? null, scheme: target.scheme, configuration,
-    version: version ?? '(project value)', build: buildNo, teamId, signingStyle: style, exportOptions: opts, out: relative(root, out) || '.', steps, notes: target.notes };
+    version: version ?? '(project value)', build: buildNo, teamId, signingStyle: style, exportOptions: opts, out: relative(root, out) || '.', steps: [...unlockPreview, ...steps], notes: target.notes };
   const webOpts = { config, root, cap, store: 'apple' as const, tag: TAG, noPrebuild: a.has('no-prebuild'), allowStale: a.has('allow-stale-web') };
   if (dry) {
     const web = await webStep({ ...webOpts, dry: true, quiet: json });
     if (json) { printJson({ ...plan, web }); return; }
     log(TAG, `${target.framework}: ${target.workspace ?? target.project} scheme ${target.scheme} (${configuration}), build ${buildNo}${version ? `, version ${version}` : ''}, signing ${style}`);
     for (const n of target.notes) log(TAG, n);
-    for (const s of steps) log(TAG, `would run: ${s}`);
+    for (const s of plan.steps) log(TAG, `would run: ${s}`);
     console.log(`\n${relative(root, join(out, 'ExportOptions.plist'))}:\n${plist}`);
     done(TAG, 'build planned (dry run)');
     return;
@@ -177,7 +218,11 @@ export async function run(ctx: Ctx): Promise<void> {
   // codesign in an SSH session cannot use the login keychain: the archive fails late with errSecInternalComponent
   // (Embed Pods Frameworks). Stop before the web build and the archive (pitfall 101).
   const remote = remoteBuildSession(process.env, rt.spawnSync(['launchctl', 'managername'], { timeout: 5000 }).stdout.toString().trim());
-  if (remote && !a.has('allow-ssh')) throw new Error(`apple build: ${remote}; codesign there fails with errSecInternalComponent (locked keychain). Run it in the Mac's logged-in session: a Jenkins / Forgejo agent started in that session, or from SSH: write the command into a .command file and \`open -a Terminal <file>\` (it runs in the GUI session; unset SSH_CONNECTION SSH_CLIENT SSH_TTY inside). --allow-ssh skips this check after \`security unlock-keychain\`.`);
+  if (remote && !a.has('allow-ssh') && !unlock && !keychain) throw new Error(sshBuildRefusal(remote));
+  if (unlock || keychain) {
+    if (unlock) unlockKeychain(keychain);
+    else addToSearchList(keychain!);
+  }
   shipPhase('prebuild', 'web build / prebuild');
   const web = await webStep({ ...webOpts, dry: false });
   for (const n of target.notes) log(TAG, n);
@@ -190,7 +235,7 @@ export async function run(ctx: Ctx): Promise<void> {
   try {
     if (target.framework === 'flutter') await runLogged(flutterConfigArgs(build!, version), root, join(out, 'flutter-config.log'), showCmd(flutterConfigArgs(build!, version), null));
     shipPhase('build', `xcodebuild archive, build ${build}`);
-    const arch = archiveArgs({ target, root, configuration, archivePath, version, build: build!, teamId: teamId ?? undefined, auth: realAuth });
+    const arch = archiveArgs({ target, root, configuration, archivePath, version, build: build!, teamId: teamId ?? undefined, auth: realAuth, settings: keychain ? keychainSigningArgs(keychain) : undefined });
     await runLogged(arch, root, join(out, 'xcodebuild-archive.log'), showCmd(arch, realAuth));
     shipPhase('sign', 'xcodebuild -exportArchive (signing)');
     await exportIpa({ root, out, archivePath, exportPath, auth: realAuth });
diff --git a/cli/apple/signing.ts b/cli/apple/signing.ts
index cea09e0..09fb9b0 100644
--- a/cli/apple/signing.ts
+++ b/cli/apple/signing.ts
@@ -2,7 +2,13 @@
 // provisioning profiles, so `apple build` can sign without anyone opening Xcode's Accounts settings.
 //   storebound apple signing status [--json]                 read-only: capabilities, certificates (with / without a
 //                                                            private key on this machine), profiles, what is installed
-//   storebound apple signing ensure [--dry] [--yes] [--keychain [path]] [--no-install] [--json]
+//   storebound apple signing ensure [--dry] [--yes] [--keychain [path]] [--no-install] [--refresh-profile] [--json]
+//       every signable target of the Xcode project (app, app extensions such as a share extension or widget, watch app,
+//       App Clip: PRODUCT_BUNDLE_IDENTIFIER + entitlements of project.pbxproj, or apple.signing.extensions) gets its
+//       bundle id registered, the capabilities its entitlements need and (manual style) an App Store profile.
+//       App Groups: the API cannot assign a group to a bundle id, so a profile lacks the group until it is ticked in the
+//       developer portal; ensure compares the entitlements with the profile and names the portal link and the steps;
+//       --refresh-profile makes the new profile after that.
 //       adds missing capabilities (apple.signing.capabilities) and reads them back (fails when one did not stick).
 //       style automatic (the default) stops there: Xcode owns certificates and profiles. style manual also
 //       creates a distribution certificate when this machine
@@ -20,14 +26,15 @@ import { confirm, need } from '../lib/ctx';
 import { buildCsr, csrContent, newSigningKey, spkiOfKey } from '../lib/csr';
 import { done, log, printJson, warn } from '../lib/log';
 import {
-  type ApiCert, type ApiProfile, type AppleSigning, type BuildEntitlements, buildEntitlements, type CapabilityType, type CapMismatch, type CheckoutInfo,
+  type ApiCert, type ApiProfile, type AppleSigning, type CapabilitySpec, type BuildEntitlements, buildEntitlements, type CapabilityType, type CapMismatch, type CheckoutInfo,
   ENTITLEMENT_CAPABILITIES, machoEntitlements, capabilitySpecs, CERT_LIMIT, certificateReq, certSha1, certSpki, type CertType,
   compareCapabilities, deleteProfileCmd, ensureScope, explainCertError, parseIdentities, pickCertificate, planCapabilities, planProfile, profileDirs,
   type ProfileType, type ProjectEntitlements, projectEntitlements, readProfiles, unusedStoreboundProfiles, verifyCapabilities,
 } from '../lib/signing';
 import { isBuildCopyPath } from '../lib/privacy-manifest';
 import { exportedIpas, ipaInfo, scanXcode } from '../lib/xcode';
-import { parsePlist } from '../lib/plist';
+import { parseMobileprovision, parsePlist } from '../lib/plist';
+import { appGroupGapsFor, appGroupSteps, type AppGroupGap, pbxTargets, type TargetKind } from '../lib/targets';
 import { zipEntries, zipRead } from '../lib/zip';
 import type { ShipConfig } from '../lib/config';
 import { textTable } from '../lib/table';
@@ -37,7 +44,7 @@ import { createOnce, isAmbiguous, upsertTiming } from '../lib/upsert';
 import * as rt from '../lib/rt';
 
 const TAG = 'signing';
-const USAGE = 'usage: storebound apple signing status | ensure [--dry] [--keychain [path]] [--no-install]';
+const USAGE = 'usage: storebound apple signing status | ensure [--dry] [--keychain [path]] [--no-install] [--refresh-profile]';
 
 export const signingDir = (root: string): string => join(root, '.storebound', 'signing');
 
@@ -98,6 +105,78 @@ export function readProjectEntitlements(root: string): ProjectEntitlements[] | n
   return out;
 }
 
+export interface SigningTarget {
+  bundleId: string; name: string; kind: TargetKind | 'configured'; source: 'xcode' | 'config';
+  /** the .entitlements file read (relative to the repository), if any */
+  entitlements: string | null;
+  capabilities: CapabilitySpec[];
+  /** com.apple.security.application-groups of the entitlements */
+  appGroups: string[];
+}
+export interface TargetScan { main: SigningTarget | null; extensions: SigningTarget[]; notes: string[] }
+
+/** Every signable target of the iOS project: the app and its extensions / widgets / watch app / App Clip, read from the
+ *  pbxproj (Release configuration) and their entitlements files. apple.signing.extensions replaces the detected
+ *  extensions; apple.signing.extraBundleIds are added (no capabilities). Capabilities come from the entitlements:
+ *  keychain-access-groups has no App ID capability (nothing to enable). Offline. */
+export function discoverTargets(root: string, config: ShipConfig): TargetScan {
+  const main = config.apple?.bundleId ?? '';
+  const s: AppleSigning = config.apple?.signing ?? {};
+  const notes: string[] = [];
+  const found: SigningTarget[] = [];
+  const projects = scanXcode(root).projects.filter(p => !isBuildCopyPath(p) && !/(^|\/)Pods\.xcodeproj$/.test(p));
+  for (const proj of projects) {
+    let pbx = '';
+    try { pbx = readFileSync(join(root, proj, 'project.pbxproj'), 'utf8'); } catch { continue; }
+    for (const t of pbxTargets(pbx)) {
+      if (!t.bundleId) { notes.push(`${proj}: target ${t.name} has bundle id "${t.unresolved ?? '?'}" which storebound cannot resolve (an xcconfig or a build variable): list it in apple.signing.extensions`); continue; }
+      if (found.some(f => f.bundleId === t.bundleId)) continue;
+      let caps: CapabilitySpec[] = [], groups: string[] = [], file: string | null = null;
+      if (t.entitlements) {
+        const f = join(dirname(join(root, proj)), t.entitlements);
+        try {
+          const xml = readFileSync(f, 'utf8');
+          file = relative(root, f).split(sep).join('/');
+          caps = projectEntitlements(file, xml, true).caps.map((c): CapabilitySpec => ({ type: c.cap }));
+          const g = (parsePlist(xml) as Record<string, unknown>)['com.apple.security.application-groups'];
+          groups = Array.isArray(g) ? g.map(String) : [];
+        } catch { notes.push(`${proj}: target ${t.name}: entitlements file ${t.entitlements} not readable`); }
+      }
+      found.push({ bundleId: t.bundleId, name: t.name, kind: t.kind, source: 'xcode', entitlements: file, capabilities: caps, appGroups: groups });
+    }
+  }
+  const mainTarget = found.find(t => t.bundleId === main) ?? null;
+  let extensions: SigningTarget[];
+  if (s.extensions?.length) {
+    extensions = s.extensions.map((x): SigningTarget => {
+      const det = found.find(t => t.bundleId === x.bundleId);
+      return { bundleId: x.bundleId, name: x.name ?? det?.name ?? x.bundleId, kind: det?.kind ?? 'configured', source: 'config', entitlements: det?.entitlements ?? null,
+        capabilities: (x.capabilities ?? det?.capabilities ?? []).map((c): CapabilitySpec => (typeof c === 'string' ? { type: c } : c)), appGroups: x.appGroups ?? det?.appGroups ?? [] };
+    });
+    notes.push(`apple.signing.extensions replaces the ${found.filter(t => t.bundleId !== main).length} extension target(s) found in the Xcode project`);
+  } else extensions = found.filter(t => t.bundleId !== main);
+  for (const b of s.extraBundleIds ?? []) if (b !== main && !extensions.some(t => t.bundleId === b)) extensions.push({ bundleId: b, name: b, kind: 'configured', source: 'config', entitlements: null, capabilities: [], appGroups: [] });
+  return { main: mainTarget, extensions, notes };
+}
+
+/** Name of a bundle id on the developer portal (letters, digits, spaces). */
+export const bundleIdName = (appName: string, t: SigningTarget): string => `${appName} ${t.name}`.replace(/[^A-Za-z0-9 ]/g, ' ').replace(/\s+/g, ' ').trim().slice(0, 60);
+
+const platformOf = (type: ProfileType): 'IOS' | 'MAC_OS' => (type.startsWith('MAC_') ? 'MAC_OS' : 'IOS');
+
+/** The entitlements of the newest ACTIVE profile of a bundle id that the API serves with its content (a managed one
+ *  is not readable: null = unknown). */
+export function profileEntitlements(list: ApiProfile[]): Record<string, unknown> | null {
+  const p = list.filter(x => !x.managed && x.attributes.profileState === 'ACTIVE' && x.attributes.profileContent)
+    .sort((a, b) => Date.parse(b.attributes.expirationDate ?? '') - Date.parse(a.attributes.expirationDate ?? ''))[0];
+  if (!p) return null;
+  try { return (parseMobileprovision(Buffer.from(p.attributes.profileContent!, 'base64')).Entitlements ?? {}) as Record<string, unknown>; } catch { return null; }
+}
+
+export function warnAppGroupGaps(gaps: AppGroupGap[], tag: string): void {
+  for (const g of gaps) for (const l of appGroupSteps(g)) warn(tag, l);
+}
+
 const git = (root: string, args: string[]): string | null => {
   try {
     const r = rt.spawnSync(['git', '-C', root, ...args], { stdout: 'pipe', stderr: 'pipe' });
@@ -171,7 +250,9 @@ export async function capabilityReport(c: Asc, config: ShipConfig, root: string)
   const b = await findBundleId(c, bundleId);
   const appId = b ? (b.capabilities as string[]) : null;
   const cfg = capabilitySpecs(config.apple?.signing, config.games?.gameCenter === true).map(x => x.type);
-  const project = readProjectEntitlements(root);
+  // an extension's entitlements belong to its own bundle id (signing ensure handles it), not to the app's App ID
+  const extFiles = new Set(discoverTargets(root, config).extensions.map(t => t.entitlements).filter((f): f is string => !!f));
+  const project = readProjectEntitlements(root)?.filter(p => !extFiles.has(p.file)) ?? null;
   let build: BuildEntitlements | null = null;
   try { build = builtIpaEntitlements(root, config); } catch { /* unreadable IPA: compared without it */ }
   const checkout = project && cfg.some(x => Object.values(ENTITLEMENT_CAPABILITIES).includes(x as CapabilityType)) && !project.some(p => p.caps.length) ? checkoutInfo(root) : null;
@@ -219,6 +300,9 @@ export interface SigningState {
   capabilities: { present: string[]; missing: string[]; extra: string[] };
   certificate: { type: CertType; chosen: string | null; why: string; onTeam: number; withKey: number; limit: number | null };
   profiles: { bundleId: string; name: string | null; uuid: string | null; state: string; installed: boolean; why: string }[];
+  /** every signable target: where it was found, its capabilities (present / missing on its App ID) and App Groups */
+  targets: { bundleId: string; name: string; kind: string; source: string; registered: boolean; capabilities: string[]; missingCapabilities: string[]; appGroups: string[] }[];
+  appGroupGaps: AppGroupGap[];
 }
 
 export async function run(ctx: Ctx): Promise<void> {
@@ -237,7 +321,13 @@ export async function run(ctx: Ctx): Promise<void> {
   const c = await ascClient(root, bundleId, config.apple?.appId);
 
   // --- read everything first (read-only)
-  const ids = [bundleId, ...(s.extraBundleIds ?? [])];
+  const scan = discoverTargets(root, config);
+  const exts = scan.extensions;
+  const ids = [bundleId, ...exts.map(t => t.bundleId)];
+  const targetOf = (id: string): SigningTarget | undefined => (id === bundleId ? scan.main ?? undefined : exts.find(t => t.bundleId === id));
+  const refresh = a.has('refresh-profile');
+  const refreshIds = new Set(ids.filter(id => (targetOf(id)?.appGroups.length ?? 0) > 0));
+  if (refresh && !refreshIds.size) ids.forEach(id => refreshIds.add(id));
   const bundles = new Map<string, J | null>();
   for (const id of ids) bundles.set(id, await findBundleId(c, id));
   const main = bundles.get(bundleId);
@@ -257,8 +347,11 @@ export async function run(ctx: Ctx): Promise<void> {
     const b = bundles.get(id);
     if (!b) { profiles.set(id, { list: [], plan: null }); continue; }
     const list = await profilesOf(c, b.id, profileType);
-    profiles.set(id, { list, plan: choice.cert ? planProfile(list, { bundleId: id, bundleIdId: b.id, certId: choice.cert.id, type: profileType }) : null });
+    profiles.set(id, { list, plan: choice.cert ? planProfile(list, { bundleId: id, bundleIdId: b.id, certId: choice.cert.id, type: profileType, refresh: refresh && refreshIds.has(id) }) : null });
   }
+  const wantCaps = (t: SigningTarget): CapabilitySpec[] => (t.bundleId === bundleId ? capabilitySpecs(s, config.games?.gameCenter === true) : t.capabilities);
+  const targetList: SigningTarget[] = [...(scan.main ? [scan.main] : []), ...exts];
+  const gapsOf = (): AppGroupGap[] => appGroupGapsFor(targetList, id => { const b = bundles.get(id); return b ? profileEntitlements(profiles.get(id)?.list ?? []) : null; }, id => bundles.get(id)?.id ?? null);
   const state: SigningState = {
     bundleId, teamId: s.teamId ?? main?.attributes?.seedId ?? null, registered: !!main,
     capabilities: { present: capPlan.present, missing: capabilitySpecs(s, config.games?.gameCenter === true).filter(w => !capPlan.present.includes(w.type)).map(w => w.type), extra: capPlan.extra },
@@ -266,7 +359,7 @@ export async function run(ctx: Ctx): Promise<void> {
       onTeam: certs.filter(x => Date.parse(x.attributes.expirationDate ?? '') > Date.now()).length, withKey: choice.usable.length, limit: CERT_LIMIT[certType] ?? null },
     profiles: ids.map(id => {
       const p = profiles.get(id)!;
-      if (!bundles.get(id)) return { bundleId: id, name: null, uuid: null, state: 'bundle id not registered', installed: false, why: 'register it first (storebound apple bundle for the app; extensions in Certificates, Identifiers & Profiles)' };
+      if (!bundles.get(id)) return { bundleId: id, name: null, uuid: null, state: 'bundle id not registered', installed: false, why: id === bundleId ? 'register it first (storebound apple bundle)' : 'storebound apple signing ensure registers it' };
       const r = p.plan?.reuse;
       const managed = p.list.find(x => x.managed && x.attributes.profileState === 'ACTIVE');
       if (style === 'automatic')
@@ -277,8 +370,17 @@ export async function run(ctx: Ctx): Promise<void> {
       return { bundleId: id, name: r?.attributes.name ?? null, uuid: r?.attributes.uuid ?? null, state: r ? 'ACTIVE' : 'needs a new profile',
         installed: installedAt(r?.attributes.uuid).length > 0, why: p.plan?.why ?? 'waits for a usable certificate' };
     }),
+    targets: [], appGroupGaps: [],
   };
 
+  state.targets = ids.map(id => {
+    const t = targetOf(id), b = bundles.get(id);
+    const want = t ? wantCaps(t).map(w => w.type) : id === bundleId ? capabilitySpecs(s, config.games?.gameCenter === true).map(w => w.type) : [];
+    return { bundleId: id, name: t?.name ?? id, kind: t?.kind ?? 'app', source: t?.source ?? 'config', registered: !!b, capabilities: want,
+      missingCapabilities: want.filter(w => !(b?.capabilities ?? []).includes(w)), appGroups: t?.appGroups ?? [] };
+  });
+  state.appGroupGaps = style === 'manual' ? gapsOf() : [];
+
   // storebound-made profiles that nothing uses (automatic signing: all of them; manual: all but the reused one)
   const inUse = new Set(style === 'manual' ? [...profiles.values()].map(p => p.plan?.reuse?.id).filter((x): x is string => !!x) : []);
   const unused = [...profiles.values()].flatMap(p => unusedStoreboundProfiles(p.list, inUse));
@@ -296,6 +398,9 @@ export async function run(ctx: Ctx): Promise<void> {
     log(TAG, `capabilities: ${state.capabilities.present.join(', ') || 'none configured'}${state.capabilities.missing.length ? `; missing ${state.capabilities.missing.join(', ')}` : ''}${state.capabilities.extra.length ? `; also on the bundle id: ${state.capabilities.extra.join(', ')}` : ''}`);
     log(TAG, `certificate ${certType}: ${choice.why} (${state.certificate.onTeam} valid on the team${state.certificate.limit ? `, limit ${state.certificate.limit}` : ''})`);
     for (const x of choice.expiring) warn(TAG, `${x.attributes.name ?? x.id} expires ${x.attributes.expirationDate?.slice(0, 10)}: make a new one soon (storebound apple signing ensure)`);
+    for (const n of scan.notes) log(TAG, n);
+    console.log(textTable(['target', 'kind', 'bundle id', 'registered', 'capabilities', 'app groups'], state.targets.map(t => [t.name, t.kind, t.bundleId, t.registered ? 'yes' : 'no', t.capabilities.join(', ') || '-', t.appGroups.join(', ') || '-'])));
+    warnAppGroupGaps(state.appGroupGaps, TAG);
     console.log(textTable(['bundle id', 'profile', 'state', 'installed', ''], state.profiles.map(p => [p.bundleId, p.name ?? '', p.state, p.installed ? 'yes' : 'no', p.why])));
     printCapabilityReport(report, TAG);
     cleanup();
@@ -305,11 +410,19 @@ export async function run(ctx: Ctx): Promise<void> {
 
   // --- ensure: plan, show, ask once, then write
   if (!main) throw new Error(`bundle id ${bundleId} is not registered: storebound apple bundle --dry, then without --dry`);
-  const missingExtra = ids.filter(id => !bundles.get(id));
-  if (missingExtra.length) throw new Error(`not registered: ${missingExtra.join(', ')} (register extension bundle ids in Certificates, Identifiers & Profiles first)`);
+  for (const n of scan.notes) log(TAG, n);
+  // extensions: register the bundle id (not there yet), then the capabilities its entitlements need
+  const toRegister = exts.filter(t => !bundles.get(t.bundleId));
+  const registerReq = (t: SigningTarget): Req => ({ method: 'POST', path: '/v1/bundleIds', note: `register ${t.bundleId} (${t.kind} ${t.name})`,
+    body: { data: { type: 'bundleIds', attributes: { identifier: t.bundleId, name: bundleIdName(config.app.name, t), platform: platformOf(profileType) } } } });
+  const extCapPlans = exts.map(t => { const b = bundles.get(t.bundleId); return { t, b, plan: b ? planCapabilities(b.id, b.capabilities ?? [], t.capabilities) : null }; });
+  const extCapLines = extCapPlans.flatMap(({ t, b, plan: cp }) => (b ? (cp?.create ?? []).map(r => `${describeReq(r)}  # ${t.bundleId}`)
+    : t.capabilities.map(w => `POST /v1/bundleIdCapabilities {capabilityType="${w.type}"}  # ${t.bundleId}, after it is registered`)));
   const needCert = scope.certificates && !choice.cert;
   const plan: string[] = [
+    ...toRegister.map(t => `${describeReq(registerReq(t))}`),
     ...capPlan.create.map(r => describeReq(r)),
+    ...extCapLines,
     ...(needCert ? [describeReq(certificateReq(certType, '<CSR of a new RSA 2048 key>'))] : []),
     ...(!scope.profiles ? [] : ids.flatMap(id => {
       const p = profiles.get(id)!.plan;
@@ -339,6 +452,20 @@ export async function run(ctx: Ctx): Promise<void> {
   const responses = await execute(c.asc, capPlan.create, { dry: false, tag: TAG });
   if (capPlan.create.length) await checkCapabilitiesStuck(c, bundleId, capabilitySpecs(s, config.games?.gameCenter === true).map(w => w.type), responses);
   if (gcPlan.length && gcSw) await ensureGcSwitch(c, gcSw, TAG);
+  for (const t of toRegister) {
+    const made = (await createOnce<J>({ what: `${t.bundleId} bundle id`, tag: TAG,
+      find: async () => findBundleId(c, t.bundleId),
+      create: async () => (await c.asc('POST', '/v1/bundleIds', registerReq(t).body)).data })).value;
+    bundles.set(t.bundleId, (await findBundleId(c, t.bundleId)) ?? { ...made, capabilities: [] });
+    log(TAG, `${t.bundleId}: bundle id registered (${t.kind} ${t.name})`);
+  }
+  for (const { t } of extCapPlans) {
+    const bid = bundles.get(t.bundleId)!;
+    const cp = planCapabilities(bid.id, bid.capabilities ?? [], t.capabilities);
+    if (!cp.create.length) continue;
+    const rs = await execute(c.asc, cp.create, { dry: false, tag: TAG });
+    await checkCapabilitiesStuck(c, t.bundleId, t.capabilities.map(w => w.type), rs);
+  }
   if (!scope.profiles) {
     printCapabilityReport(await capabilityReport(c, config, root), TAG);
     cleanup();
@@ -385,10 +512,11 @@ export async function run(ctx: Ctx): Promise<void> {
     else warn(TAG, 'xcodebuild signs with identities from the keychain: re-run with --keychain to import it there (or import the .key + .cer into the login keychain with `security import`)');
     cert = created;
   }
+  const finalEnt = new Map<string, Record<string, unknown>>();
   for (const id of ids) {
     const b = bundles.get(id)!;
     const list = profiles.get(id)!.list;
-    const p = planProfile(list, { bundleId: id, bundleIdId: b.id, certId: cert!.id, type: profileType });
+    const p = planProfile(list, { bundleId: id, bundleIdId: b.id, certId: cert!.id, type: profileType, refresh: refresh && refreshIds.has(id) });
     let prof: ApiProfile;
     if (p.create) {
       // an unclear answer is checked by reading the bundle id's profiles again (one active profile with this
@@ -407,9 +535,16 @@ export async function run(ctx: Ctx): Promise<void> {
       log(TAG, `${id}: ${p.why}`);
     }
     if (!a.has('no-install')) for (const f of install(prof)) log(TAG, `${id}: installed ${f.replace(homedir(), '~')}`);
+    try { finalEnt.set(id, (parseMobileprovision(Buffer.from(prof.attributes.profileContent ?? '', 'base64')).Entitlements ?? {}) as Record<string, unknown>); } catch { /* unreadable: not compared */ }
   }
   cleanup();
-  if (json) printJson({ ...state, plan, done: true });
+  // App Groups: the profile carries a group only when it is assigned to the bundle id in the developer portal
+  const gaps = appGroupGapsFor(targetList, id => finalEnt.get(id) ?? null, id => bundles.get(id)?.id ?? null);
+  if (json) printJson({ ...state, plan, appGroupGaps: gaps, done: !gaps.length });
+  if (gaps.length) {
+    warnAppGroupGaps(gaps, TAG);
+    throw new Error(`profile(s) installed, but ${gaps.map(g => `${g.bundleId} lacks ${g.groups.join(', ')}${g.url ? ` (${g.url})` : ''}`).join('; ')}: the build would fail at codesign. Tick the App Group(s) in the developer portal (steps above), then run storebound apple signing ensure --refresh-profile.`);
+  }
   done(TAG, 'signing ready (storebound apple build --dry shows the ExportOptions.plist it will use)');
 }
 
diff --git a/cli/data/flags.json b/cli/data/flags.json
index 7473ef4..2e3f8ba 100644
--- a/cli/data/flags.json
+++ b/cli/data/flags.json
@@ -66,6 +66,7 @@
    "allow-price-changes"
   ],
   "apple build": [
+   "allow-app-group-gap",
    "allow-ssh",
    "allow-stale-web",
    "allow-version-mismatch",
@@ -73,6 +74,7 @@
    "configuration",
    "env-file",
    "keychain",
+   "keychain-unlock",
    "locale-map",
    "no-install",
    "no-prebuild",
@@ -82,6 +84,7 @@
    "profile",
    "progress",
    "project",
+   "refresh-profile",
    "result-file",
    "scan-paths",
    "scheme",
@@ -122,7 +125,8 @@
   "apple game-center": [
    "keychain",
    "locale-map",
-   "no-install"
+   "no-install",
+   "refresh-profile"
   ],
   "apple iap": [
    "all",
@@ -238,6 +242,7 @@
    "no-submit",
    "platform",
    "progress",
+   "refresh-profile",
    "resolve-iaps",
    "result-file",
    "version",
@@ -261,7 +266,8 @@
   "apple signing": [
    "keychain",
    "locale-map",
-   "no-install"
+   "no-install",
+   "refresh-profile"
   ],
   "apple status": [
    "cancel-submission",
@@ -269,6 +275,7 @@
    "locale-map",
    "no-install",
    "platform",
+   "refresh-profile",
    "timeout",
    "version",
    "wait-review"
@@ -283,6 +290,7 @@
    "no-submit",
    "platform",
    "progress",
+   "refresh-profile",
    "resolve-iaps",
    "result-file",
    "version",
@@ -460,6 +468,7 @@
    "name",
    "no-install",
    "react-native",
+   "refresh-profile",
    "sku",
    "storefront",
    "unity"
@@ -563,7 +572,8 @@
   "games status": [
    "keychain",
    "locale-map",
-   "no-install"
+   "no-install",
+   "refresh-profile"
   ],
   "health": [
    "apple",
@@ -1067,6 +1077,7 @@
    "play",
    "prune",
    "react-native",
+   "refresh-profile",
    "repair-stuck",
    "signature",
    "skip-out-of-range-regions",
@@ -1113,6 +1124,7 @@
    "agent",
    "all",
    "all-pages",
+   "allow-app-group-gap",
    "allow-availability-changes",
    "allow-existing",
    "allow-price-changes",
@@ -1212,6 +1224,7 @@
    "keep",
    "keep-booted",
    "keychain",
+   "keychain-unlock",
    "keyword",
    "keywords",
    "kind",
@@ -1292,6 +1305,7 @@
    "rating",
    "react-native",
    "reconvert",
+   "refresh-profile",
    "region",
    "release",
    "release-date",
@@ -1497,7 +1511,7 @@
   ],
   "apple signing": [
    "storebound apple signing status [--json]                 read-only: capabilities, certificates (with / without a",
-   "storebound apple signing ensure [--dry] [--yes] [--keychain [path]] [--no-install] [--json]"
+   "storebound apple signing ensure [--dry] [--yes] [--keychain [path]] [--no-install] [--refresh-profile] [--json]"
   ],
   "apple status": [
    "storebound apple status [--platform ios|macos|tvos|visionos] [--json]",
diff --git a/cli/lib/keychain.ts b/cli/lib/keychain.ts
new file mode 100644
index 0000000..5106f43
--- /dev/null
+++ b/cli/lib/keychain.ts
@@ -0,0 +1,45 @@
+// Code signing keychain for `storebound apple build` outside the Mac's logged-in GUI session. codesign in an SSH
+// session (or any session without the login keychain unlocked) fails late with errSecInternalComponent. The fixes:
+//   - run from the GUI session (a .command file opened with `open -a Terminal`)
+//   - a CI runner / Jenkins agent started in that session, or with an unlocked keychain
+//   - a build keychain: --keychain <path>, unlocked with --keychain-unlock (password from STOREBOUND_KEYCHAIN_PASSWORD,
+//     never printed) and its key partition list set so codesign may use the keys without a prompt.
+// Pure planning here; cli/apple/build.ts runs it.
+export const KEYCHAIN_PASSWORD_ENV = 'STOREBOUND_KEYCHAIN_PASSWORD';
+
+/** The refusal for a build in an SSH / non-GUI session, naming every fix. */
+export function sshBuildRefusal(reason: string, o: { unlockFlag?: boolean } = {}): string {
+  const unlock = o.unlockFlag !== false;
+  return `apple build: ${reason}; codesign there fails with errSecInternalComponent (locked keychain). Fixes, pick one:\n`
+    + `  1. Run it in the Mac's logged-in GUI session: write the command into a .command file and \`open -a Terminal <file>\` (unset SSH_CONNECTION SSH_CLIENT SSH_TTY inside).\n`
+    + `  2. A CI runner / Jenkins agent started in the GUI session, or one whose keychain is unlocked first (\`security unlock-keychain -p "$${KEYCHAIN_PASSWORD_ENV}" <keychain>\`, then \`security set-key-partition-list -S apple-tool:,apple:,codesign: -s -k "$${KEYCHAIN_PASSWORD_ENV}" <keychain>\`).\n`
+    + (unlock ? `  3. Let storebound do step 2: export ${KEYCHAIN_PASSWORD_ENV}=... (the keychain password; never printed) and add --keychain-unlock (the login keychain), or --keychain <path> --keychain-unlock for a build keychain that holds the Apple Distribution key + certificate (storebound apple signing ensure --keychain <path> imports them).\n`
+      + `  --allow-ssh skips this check when the keychain is already unlocked in this session.`
+      : '  --allow-ssh skips this check when the keychain is already unlocked in this session.');
+}
+
+export interface KeychainPlan { keychain: string; steps: string[][] }
+
+/** The `security` calls --keychain-unlock runs, with PASSWORD as a placeholder (substituted by the caller, never logged). */
+export function unlockSteps(keychain: string, searchList: string[]): string[][] {
+  const steps: string[][] = [['security', 'unlock-keychain', '-p', 'PASSWORD', keychain],
+    ['security', 'set-key-partition-list', '-S', 'apple-tool:,apple:,codesign:', '-s', '-k', 'PASSWORD', keychain]];
+  if (!searchList.includes(keychain)) steps.push(['security', 'list-keychains', '-d', 'user', '-s', keychain, ...searchList]);
+  return steps;
+}
+
+/** `security list-keychains` output -> paths (quotes stripped). */
+export const parseKeychainList = (out: string): string[] => out.split('\n').map(l => l.trim().replace(/^"|"$/g, '')).filter(Boolean);
+
+/** The password from the environment, or an error that names the variable (the value is never in a message). */
+export function keychainPassword(env: Record<string, string | undefined>): string {
+  const p = env[KEYCHAIN_PASSWORD_ENV];
+  if (!p) throw new Error(`--keychain-unlock needs the keychain password in the environment variable ${KEYCHAIN_PASSWORD_ENV} (not an argument: arguments end up in shell history)`);
+  return p;
+}
+
+/** A command line for logs with the password replaced. */
+export const showSecurity = (argv: string[]): string => argv.map(a => (a === 'PASSWORD' ? '$' + KEYCHAIN_PASSWORD_ENV : a)).join(' ');
+
+/** Settings that make xcodebuild sign with a given keychain. */
+export const keychainSigningArgs = (keychain: string): string[] => [`OTHER_CODE_SIGN_FLAGS=--keychain ${keychain}`];
diff --git a/cli/lib/signing.ts b/cli/lib/signing.ts
index 70019c9..9b28e45 100644
--- a/cli/lib/signing.ts
+++ b/cli/lib/signing.ts
@@ -43,6 +43,20 @@ export interface AppleSigning {
   capabilities?: (CapabilityType | CapabilitySpec)[];
   /** Bundle ids of app extensions / widgets / watch apps in the same archive: each gets its own profile. */
   extraBundleIds?: string[];
+  /** Override for the app extensions / widgets / watch app / App Clip that `signing ensure` finds in the Xcode project
+   *  (every target's PRODUCT_BUNDLE_IDENTIFIER and entitlements): when set, these replace the detected ones. Each is
+   *  registered as a bundle id, gets the capabilities its entitlements need (or `capabilities` here) and a profile. */
+  extensions?: ExtensionSpec[];
+}
+
+export interface ExtensionSpec {
+  bundleId: string;
+  /** A label for messages and the bundle id's name on the developer portal. */
+  name?: string;
+  /** Default: the capabilities of the target's entitlements file (none when there is none). */
+  capabilities?: (CapabilityType | CapabilitySpec)[];
+  /** App group ids the target's entitlements list (com.apple.security.application-groups); checked against the profile. */
+  appGroups?: string[];
 }
 
 export function validateSigning(s: AppleSigning | undefined): string[] {
@@ -56,6 +70,14 @@ export function validateSigning(s: AppleSigning | undefined): string[] {
     const t = typeof c === 'string' ? c : c?.type;
     if (!CAPABILITY_TYPES.includes(t as CapabilityType)) e.push(`apple.signing.capabilities: unknown capability "${String(t)}" (${CAPABILITY_TYPES.slice(0, 6).join(', ')}, ...)`);
   }
+  for (const x of s.extensions ?? []) {
+    if (!x || typeof x.bundleId !== 'string' || !/^[A-Za-z0-9.-]+$/.test(x.bundleId)) { e.push(`apple.signing.extensions: "${String(x?.bundleId)}" is not a bundle id`); continue; }
+    for (const c of x.capabilities ?? []) {
+      const t = typeof c === 'string' ? c : c?.type;
+      if (!CAPABILITY_TYPES.includes(t as CapabilityType)) e.push(`apple.signing.extensions ${x.bundleId}: unknown capability "${String(t)}"`);
+    }
+    if (x.appGroups && (!Array.isArray(x.appGroups) || x.appGroups.some(g => typeof g !== 'string' || !/^group\.[A-Za-z0-9.-]+$/.test(g)))) e.push(`apple.signing.extensions ${x.bundleId}: appGroups are ids like group.com.example.app`);
+  }
   for (const b of s.extraBundleIds ?? []) if (!/^[A-Za-z0-9.-]+$/.test(b)) e.push(`apple.signing.extraBundleIds: "${b}" is not a bundle id`);
   return e;
 }
@@ -158,19 +180,20 @@ export const profileName = (bundleId: string, type: ProfileType, date = new Date
 export interface ProfilePlan { reuse: ApiProfile | null; create: Req | null; why: string }
 
 /** Reuse an ACTIVE profile of the type that holds the certificate and is valid for 14 more days; else create one. */
-export function planProfile(existing: ApiProfile[], o: { bundleId: string; bundleIdId: string; certId: string; type: ProfileType; now?: number }): ProfilePlan {
+export function planProfile(existing: ApiProfile[], o: { bundleId: string; bundleIdId: string; certId: string; type: ProfileType; now?: number; /** make a new profile even when one is reusable (after an App Group was ticked in the portal) */ refresh?: boolean }): ProfilePlan {
   const now = o.now ?? Date.now();
   const ok = existing.filter(p => p.attributes.profileType === o.type && p.attributes.profileState === 'ACTIVE'
     && Date.parse(p.attributes.expirationDate ?? '') - now > 14 * 86_400_000 && (p.certIds ?? []).includes(o.certId))
     .sort((a, b) => Date.parse(b.attributes.expirationDate!) - Date.parse(a.attributes.expirationDate!));
-  if (ok[0]) return { reuse: ok[0], create: null, why: `profile "${ok[0].attributes.name}" is active (expires ${ok[0].attributes.expirationDate?.slice(0, 10)})` };
+  if (ok[0] && !o.refresh) return { reuse: ok[0], create: null, why: `profile "${ok[0].attributes.name}" is active (expires ${ok[0].attributes.expirationDate?.slice(0, 10)})` };
   const stale = existing.filter(p => p.attributes.profileType === o.type && !p.managed);
   const managed = existing.filter(p => p.attributes.profileType === o.type && p.managed);
   const why = [
     stale.length ? `${stale.length} ${o.type} profile(s), none active with this certificate (states: ${[...new Set(stale.map(p => p.attributes.profileState))].join(', ')})` : '',
     managed.length ? `${managed.length} Xcode-managed (automatic signing; not readable through the API, not reused)` : '',
   ].filter(Boolean).join('; ') || `no ${o.type} profile`;
-  return { reuse: null, why, create: {
+  const why2 = ok[0] ? `--refresh-profile: a new profile instead of "${ok[0].attributes.name}"` : why;
+  return { reuse: null, why: why2, create: {
     method: 'POST', path: '/v1/profiles', note: `create ${o.type} profile for ${o.bundleId}`,
     body: { data: { type: 'profiles', attributes: { name: profileName(o.bundleId, o.type, new Date(now)), profileType: o.type },
       relationships: { bundleId: one('bundleIds', o.bundleIdId), certificates: many('certificates', [o.certId]) } } },
diff --git a/cli/lib/targets.ts b/cli/lib/targets.ts
new file mode 100644
index 0000000..fc8e8b9
--- /dev/null
+++ b/cli/lib/targets.ts
@@ -0,0 +1,138 @@
+// Signable targets of an Xcode project (the app, app extensions such as a share extension or widget, the watch app, an
+// App Clip), read from project.pbxproj: product type, PRODUCT_BUNDLE_IDENTIFIER and CODE_SIGN_ENTITLEMENTS of the
+// Release configuration. Pure parsing; the fs side (entitlements files, config override) is cli/apple/signing.ts.
+// Also the App Group check: Apple's API can switch the APP_GROUPS capability on for a bundle id but cannot assign a
+// group container to it, so a profile carries `com.apple.security.application-groups` only when the group was ticked in
+// the developer portal; comparing the target's entitlements with the profile's entitlements finds the gap offline.
+export type TargetKind = 'app' | 'extension' | 'watch' | 'clip';
+
+export interface PbxTarget { name: string; productType: string; kind: TargetKind; /** null: not resolvable (set in an xcconfig or a variable) */ bundleId: string | null; unresolved?: string; entitlements: string | null }
+
+/** Product types that are code signed with their own bundle id and provisioning profile. Frameworks, bundles, test
+ *  bundles, tools and libraries are not. */
+export function targetKind(productType: string): TargetKind | null {
+  const m = /^com\.apple\.product-type\.(.+)$/.exec(productType);
+  const t = m?.[1];
+  if (!t) return null;
+  if (t === 'application.on-demand-install-capable') return 'clip';
+  if (/^application\.watchapp/.test(t) || /^watchkit2?-extension$/.test(t)) return 'watch';
+  if (t === 'application') return 'app';
+  if (/^(app-extension(\..+)?|extensionkit-extension|tv-app-extension)$/.test(t)) return 'extension';
+  return null;
+}
+
+/** id -> body of every `<24 hex id> /* comment *\/ = { ... };` object (brace matched, quoted strings skipped). */
+function pbxObjects(pbx: string): Map<string, string> {
+  const out = new Map<string, string>();
+  const re = /^[ \t]*([0-9A-Fa-f]{24})(?:[ \t]*\/\*[\s\S]*?\*\/)?[ \t]*=[ \t]*\{/gm;
+  for (let m = re.exec(pbx); m; m = re.exec(pbx)) {
+    const open = m.index + m[0].length - 1;
+    let depth = 0, q = false, i = open;
+    for (; i < pbx.length; i++) {
+      const ch = pbx[i];
+      if (q) { if (ch === '\\') i++; else if (ch === '"') q = false; continue; }
+      if (ch === '"') q = true;
+      else if (ch === '{') depth++;
+      else if (ch === '}' && --depth === 0) break;
+    }
+    out.set(m[1]!, pbx.slice(open + 1, i));
+    re.lastIndex = i;
+  }
+  return out;
+}
+
+const unquote = (s: string): string => { const t = s.trim(); return t.startsWith('"') && t.endsWith('"') ? t.slice(1, -1).replace(/\\"/g, '"') : t; };
+const field = (body: string, name: string): string | null => {
+  const m = new RegExp(`(?:^|[;\\s])${name}\\s*=\\s*("(?:[^"\\\\]|\\\\.)*"|[^;\\s]+)\\s*(?:/\\*[\\s\\S]*?\\*/)?\\s*;`).exec(body);
+  return m ? unquote(m[1]!) : null;
+};
+
+function buildSettings(body: string): Record<string, string> {
+  const at = body.search(/buildSettings\s*=\s*\{/);
+  if (at < 0) return {};
+  const inner = body.slice(body.indexOf('{', at) + 1);
+  const out: Record<string, string> = {};
+  for (const m of inner.matchAll(/^[ \t]*("?[A-Za-z_][A-Za-z0-9_\[\]=*]*"?)[ \t]*=[ \t]*("(?:[^"\\]|\\.)*"|\([^)]*\)|[^;]*);/gm)) out[unquote(m[1]!)] = unquote(m[2]!);
+  return out;
+}
+
+/** $(VAR) / ${VAR} from the target's own settings, TARGET_NAME and PRODUCT_NAME; a modifier (:rfc1034identifier)
+ *  makes the value an identifier. Anything still containing $( afterwards is unresolved. */
+export function resolveSetting(value: string, vars: Record<string, string>): string {
+  let v = value;
+  for (let n = 0; n < 5 && /\$[({]/.test(v); n++) {
+    v = v.replace(/\$[({]([A-Za-z0-9_]+)(?::([a-z0-9]+))?[)}]/g, (all, name: string, mod?: string) => {
+      const r = vars[name];
+      if (r === undefined || r === `$(${name})`) return all;
+      return mod === 'rfc1034identifier' || mod === 'identifier' ? r.replace(/[^A-Za-z0-9.-]/g, '-') : r;
+    });
+  }
+  return v;
+}
+
+/** The signable targets of one project.pbxproj, in file order. */
+export function pbxTargets(pbx: string): PbxTarget[] {
+  const objs = pbxObjects(pbx);
+  const out: PbxTarget[] = [];
+  for (const body of objs.values()) {
+    if (field(body, 'isa') !== 'PBXNativeTarget') continue;
+    const productType = field(body, 'productType') ?? '';
+    const kind = targetKind(productType);
+    if (!kind) continue;
+    const name = field(body, 'name') ?? field(body, 'productName') ?? '?';
+    const listBody = objs.get((field(body, 'buildConfigurationList') ?? '').split(/\s/)[0]!);
+    const ids = [...(/buildConfigurations\s*=\s*\(([\s\S]*?)\)/.exec(listBody ?? '')?.[1] ?? '').matchAll(/([0-9A-Fa-f]{24})/g)].map(m => m[1]!);
+    const cfgs = ids.map(id => objs.get(id)).filter((b): b is string => !!b);
+    const cfg = cfgs.find(c => field(c, 'name') === 'Release') ?? cfgs[cfgs.length - 1];
+    const s = cfg ? buildSettings(cfg) : {};
+    const vars: Record<string, string> = { ...s, TARGET_NAME: name, PRODUCT_NAME: resolveSetting(s.PRODUCT_NAME ?? name, { TARGET_NAME: name }) };
+    const raw = s.PRODUCT_BUNDLE_IDENTIFIER;
+    const bundleId = raw ? resolveSetting(raw, vars) : null;
+    const ent = s.CODE_SIGN_ENTITLEMENTS ? resolveSetting(s.CODE_SIGN_ENTITLEMENTS, { ...vars, SRCROOT: '' }).replace(/^\/+/, '') : null;
+    out.push({ name, productType, kind, bundleId: bundleId && !/\$[({]/.test(bundleId) ? bundleId : null, ...(raw && (!bundleId || /\$[({]/.test(bundleId)) ? { unresolved: raw } : {}), entitlements: ent });
+  }
+  return out;
+}
+
+/** App groups (`com.apple.security.application-groups`) a profile's Entitlements allow. */
+export const profileAppGroups = (ent: Record<string, unknown> | undefined): string[] => {
+  const g = ent?.['com.apple.security.application-groups'];
+  return Array.isArray(g) ? g.map(String) : [];
+};
+
+/** Groups the target's entitlements need that the profile does not carry. `*` in a profile allows any group. */
+export function appGroupGaps(want: string[], profileEnt: Record<string, unknown> | undefined): string[] {
+  const have = profileAppGroups(profileEnt);
+  if (have.includes('*')) return [];
+  return want.filter(g => !have.includes(g));
+}
+
+/** The developer portal page of a bundle id (the id is the App Store Connect API resource id of the bundle id). */
+export const bundleIdPortalUrl = (resourceId: string): string => `https://developer.apple.com/account/resources/identifiers/bundleId/edit/${encodeURIComponent(resourceId)}`;
+
+export interface AppGroupGap { bundleId: string; resourceId: string | null; groups: string[]; url: string | null }
+
+/** The agent-first steps to tick the groups (the API cannot do it); the never-press list is part of the text. */
+export function appGroupSteps(g: AppGroupGap): string[] {
+  const url = g.url ?? 'https://developer.apple.com/account/resources/identifiers/list';
+  return [
+    `${g.bundleId}: the profile lacks App Group(s) ${g.groups.join(', ')} (the API can enable the App Groups capability but cannot assign a group to a bundle id).`,
+    `Open ${url} in the signed-in browser (agent-first: you drive it).`,
+    'Capabilities list > App Groups: tick it if it is not ticked, press Configure, tick each group above (Continue if the group is new: register it first under Identifiers > App Groups), Continue, then Save at the top right (and Confirm in the dialog that says the profiles get invalidated).',
+    'Never press: Remove (the bundle id), Delete, Revoke, or any Certificates / Keys / Account button.',
+    `Then run: storebound apple signing ensure --refresh-profile (makes a new profile that carries the group), and storebound apple signing status to read it back.`,
+  ];
+}
+
+/** Groups missing per bundle id -> one gap row each. `groupsOf` and `profileOf` are looked up by bundle id. */
+export function appGroupGapsFor(targets: { bundleId: string; appGroups: string[] }[], profileEnt: (bundleId: string) => Record<string, unknown> | undefined | null, resourceId: (bundleId: string) => string | null): AppGroupGap[] {
+  const out: AppGroupGap[] = [];
+  for (const t of targets) {
+    if (!t.appGroups.length) continue;
+    const ent = profileEnt(t.bundleId);
+    if (ent === null) continue; // no readable profile: unknown, not a gap
+    const groups = appGroupGaps(t.appGroups, ent);
+    if (groups.length) { const rid = resourceId(t.bundleId); out.push({ bundleId: t.bundleId, resourceId: rid, groups, url: rid ? bundleIdPortalUrl(rid) : null }); }
+  }
+  return out;
+}
diff --git a/cli/lib/xcode.ts b/cli/lib/xcode.ts
index fe0dd52..a961fd6 100644
--- a/cli/lib/xcode.ts
+++ b/cli/lib/xcode.ts
@@ -125,14 +125,14 @@ export interface AscAuth { keyPath: string; keyId: string; issuerId: string }
 
 const authArgs = (a: AscAuth | null): string[] => (a ? ['-allowProvisioningUpdates', '-authenticationKeyPath', a.keyPath, '-authenticationKeyID', a.keyId, '-authenticationKeyIssuerID', a.issuerId] : []);
 
-export interface ArchiveInput { target: XcodeTarget; root: string; configuration: string; archivePath: string; version?: string; build: string; teamId?: string; auth: AscAuth | null }
+export interface ArchiveInput { target: XcodeTarget; root: string; configuration: string; archivePath: string; version?: string; build: string; teamId?: string; auth: AscAuth | null; /** extra build settings, e.g. OTHER_CODE_SIGN_FLAGS=--keychain <path> */ settings?: string[] }
 
 /** xcodebuild archive. Version / build go in as build settings (they beat the project's values). */
 export function archiveArgs(i: ArchiveInput): string[] {
   return ['xcodebuild', ...(i.target.workspace ? ['-workspace', join(i.root, i.target.workspace)] : ['-project', join(i.root, i.target.project!)]),
     '-scheme', i.target.scheme, '-configuration', i.configuration, '-destination', 'generic/platform=iOS', '-archivePath', i.archivePath,
     ...authArgs(i.auth), 'archive', `CURRENT_PROJECT_VERSION=${i.build}`, ...(i.version ? [`MARKETING_VERSION=${i.version}`] : []),
-    ...(i.teamId ? [`DEVELOPMENT_TEAM=${i.teamId}`] : [])];
+    ...(i.teamId ? [`DEVELOPMENT_TEAM=${i.teamId}`] : []), ...(i.settings ?? [])];
 }
 
 export function exportArgs(archivePath: string, plist: string, exportPath: string, auth: AscAuth | null): string[] {
diff --git a/docs/api-coverage.md b/docs/api-coverage.md
index 9388e08..5a00c04 100644
--- a/docs/api-coverage.md
+++ b/docs/api-coverage.md
@@ -672,7 +672,7 @@ Specs: Apple [App Store Connect API 4.5.1](https://developer.apple.com/sample-co
 | `bundleIds_app_getToOneRelationship` | GET | `/v1/bundleIds/{id}/relationships/app` | read |  |
 | `bundleIds_bundleIdCapabilities_getToManyRelated` | GET | `/v1/bundleIds/{id}/bundleIdCapabilities` | read |  |
 | `bundleIds_bundleIdCapabilities_getToManyRelationship` | GET | `/v1/bundleIds/{id}/relationships/bundleIdCapabilities` | read |  |
-| `bundleIds_createInstance` | POST | `/v1/bundleIds` | write (dry by default) | apple/bundle |
+| `bundleIds_createInstance` | POST | `/v1/bundleIds` | write (dry by default) | apple/bundle, apple/signing |
 | `bundleIds_deleteInstance` | DELETE | `/v1/bundleIds/{id}` | owner only (typed confirm) |  |
 | `bundleIds_getCollection` | GET | `/v1/bundleIds` | read | apple/adhoc, apple/bundle, apple/signing |
 | `bundleIds_getInstance` | GET | `/v1/bundleIds/{id}` | read |  |
diff --git a/skills/build-and-sign/SKILL.md b/skills/build-and-sign/SKILL.md
index e54b8e9..9845d21 100644
--- a/skills/build-and-sign/SKILL.md
+++ b/skills/build-and-sign/SKILL.md
@@ -19,7 +19,7 @@ when the owner said so for this run). The MCP server offers only `apple_signing_
 1. **Read.** `storebound apple signing status`: is the bundle id registered (else `storebound apple bundle`), which
    capabilities it has vs `apple.signing.capabilities`, the distribution certificates of the team and whether this
    Mac holds a private key for one (a key file in `.storebound/signing/` or an identity in the keychain), App Store
-   profiles per bundle id (app + `apple.signing.extraBundleIds` for extensions) and whether Xcode has them installed.
+   profiles per bundle id (the app and every extension / widget / watch app / App Clip found in the Xcode project, or `apple.signing.extensions`; `extraBundleIds` adds more) and whether Xcode has them installed. `signing ensure` registers the extensions' bundle ids, enables the capabilities their entitlements need and (manual style) makes their profiles; an App Group the profile lacks is reported with the developer portal link and steps (the API cannot assign a group; then `signing ensure --refresh-profile`, store-pitfalls 121).
    It also compares three places a capability must be and names what is missing where: the App ID, the config's
    `apple.signing.capabilities` and the iOS project's `.entitlements` (`aps-environment` = PUSH_NOTIFICATIONS,
    `com.apple.developer.game-center` = GAME_CENTER, associated domains, Sign in with Apple, iCloud, app groups, ...;
@@ -57,7 +57,12 @@ when the owner said so for this run). The MCP server offers only `apple_signing_
    number**: later steps use exactly it. Any archive or export failure exits non-zero, so `apple build && apple upload`
    stops there; an export failure shows the IDEDistribution log's real error lines. xcodebuild runs with Apple's tool
    folders first on PATH (a Homebrew rsync breaks Xcode's IPA step: "exportArchive Copy failed"; `storebound doctor`
-   flags it).
+   flags it). Over SSH or in CI (no GUI session) codesign fails with errSecInternalComponent on a locked keychain:
+   `apple build` stops first and names the fixes. `STOREBOUND_KEYCHAIN_PASSWORD=... storebound apple build
+   --keychain-unlock` unlocks the login keychain and sets its key partition list (the password is read from the
+   environment and never printed); `--keychain <path>` signs with a build keychain (`--keychain <path> --keychain-unlock`
+   unlocks that one; `signing ensure --keychain <path>` imports the key + certificate into it). With manual signing it
+   also stops when a target's App Group is missing from its installed profile (store-pitfalls 121).
    - Capacitor: the archive ships the web assets `npx cap sync` copied last. Set `build.prebuild` (e.g.
      `"npm run build && npx cap sync"`; per store `apple.prebuild` / `play.prebuild`) and `apple build` / `play build`
      run it first (once per `flow run`; `--no-prebuild` skips it). Then the copied `public/index.html` must be newer
diff --git a/skills/store-api/SKILL.md b/skills/store-api/SKILL.md
index dae8e94..74e61dc 100644
--- a/skills/store-api/SKILL.md
+++ b/skills/store-api/SKILL.md
@@ -42,7 +42,9 @@ storebound api apple salesReports_getCollection --param ... --out report.gz   #
    on stderr (store-pitfalls 78). Never pipe or redirect a write; use the dedicated command the message names.
    An agent without a terminal sends a plain (non-owner) write with `--yes --confirm <operationId>`, the id equal
    to the one the call resolved to (store-pitfalls 92), after showing the dry run. `--confirm` never applies to
-   owner-only operations.
+   owner-only operations. Both flags are needed, and `--confirm` repeats the operation id:
+   `storebound api apple bundleIds_createInstance --body bundle.json --yes --confirm bundleIds_createInstance`
+   (without `--yes` it stays a dry run; a `--confirm` that differs from the id is refused).
 3. Owner-only operations (cli/api/gate.ts: every DELETE, submissions and their cancel, release requests, phased
    release changes, product page test start / stop, price schedules and price migrations, review replies, tester and
    user invitations, Play `edits.commit`, product activation, refunds, revokes and cancels, app signing) also ask for
diff --git a/skills/store-pitfalls/SKILL.md b/skills/store-pitfalls/SKILL.md
index 15a874c..4d19934 100644
--- a/skills/store-pitfalls/SKILL.md
+++ b/skills/store-pitfalls/SKILL.md
@@ -1229,8 +1229,13 @@ that fails without the fix (see CONTRIBUTING.md).
   (and read relative to the working directory, not the project).
 - **Do:** run the build in the Mac's logged-in session: a CI agent started there, or from SSH a `.command` file opened
   with `open -a Terminal <file>` (unset SSH_CONNECTION SSH_CLIENT SSH_TTY inside). `--allow-ssh` after
-  `security unlock-keychain` skips the check.
-- **Guard:** `remoteBuildSession` in `cli/lib/xcode.ts` stops `apple build` before the archive; `credPath` in
+  `security unlock-keychain` skips the check. To build over SSH or in CI anyway: export `STOREBOUND_KEYCHAIN_PASSWORD`
+  (never printed, never an argument of storebound) and add `--keychain-unlock` (unlocks the login keychain and runs
+  `security set-key-partition-list -S apple-tool:,apple:,codesign:`), or `--keychain <path> --keychain-unlock` for a
+  build keychain that holds the Apple Distribution key + certificate (`apple signing ensure --keychain <path>` imports
+  them); `--keychain` also signs the archive with `OTHER_CODE_SIGN_FLAGS=--keychain <path>` and puts the keychain on the search list.
+- **Guard:** `remoteBuildSession` in `cli/lib/xcode.ts` stops `apple build` before the archive, and its message names
+  these fixes (`sshBuildRefusal`, `cli/lib/keychain.ts`; `tests/signing-targets.test.ts`); `credPath` in
   `cli/lib/credentials.ts` resolves relative credential paths from the project and `ascKeyFile` hands xcodebuild an
   absolute path (`tests/build-sign.test.ts`).
 
@@ -1454,3 +1459,30 @@ that fails without the fix (see CONTRIBUTING.md).
   attributes first, `text=` last); `shots capture --dry` prints them per size, `--dry --probe` opens the pages and
   names the MISS with the size and every candidate's match count.
 - **Guard:** `tests/shots-gaps.test.ts`, `tests/browser/feature-fit.browser.ts` (rotate), `cli/shots/selectors.ts`.
+||||||| parent of ae8d773 (apple signing: every signable target (extensions, App Group check), build keychain unlock over SSH, api confirm docs)
+
+## 121. An app extension (share extension, widget, watch app) could not be signed: bundle id not registered, capabilities missing, App Group not in the profile
+
+- **Symptom:** an iOS app with a share extension archived, then failed at export / codesign: "No profile for team 'X'
+  matching 'com.example.app.share' found", "Provisioning profile ... doesn't include the App Groups capability" or
+  "doesn't match the entitlements file's value for the com.apple.security.application-groups entitlement". `apple
+  signing ensure` knew only the app's bundle id and refused (`not registered`) for `extraBundleIds`.
+- **Cause:** every signable target of the archive (app, app extension, widget, watch app, App Clip) is its own bundle id
+  with its own capabilities and profile. And Apple's API can switch the APP_GROUPS capability on for a bundle id but
+  cannot assign a group container to it: the profile carries `com.apple.security.application-groups` only after the
+  group was ticked in the developer portal (Identifiers > the bundle id > App Groups > Configure).
+- **Do:** `storebound apple signing ensure --dry` lists every target found in the Xcode project (PRODUCT_BUNDLE_IDENTIFIER
+  and CODE_SIGN_ENTITLEMENTS of the Release configuration) and what it would register, enable and create; without
+  `--dry` it registers the extension bundle ids, enables the capabilities its entitlements need (the entitlement-to-
+  capability table; `keychain-access-groups` needs none) and, for manual signing, creates an App Store profile per
+  target. It then decodes each profile and compares its App Groups with the target's entitlements: a gap fails with
+  the developer portal deep link `https://developer.apple.com/account/resources/identifiers/bundleId/edit/<id>` and the
+  steps to tick the group (drive it in the signed-in browser; never press Remove / Delete / Revoke). After that
+  `storebound apple signing ensure --refresh-profile` makes the profile again (a normal run reuses the active one, so it
+  does not pile up profiles while the group is unassigned). `apple build` (manual signing) stops before the archive on the
+  same gap (`--allow-app-group-gap` overrides). A variable bundle id (set in an xcconfig) is not resolvable: list the
+  extension in `apple.signing.extensions` (`bundleId`, `capabilities`, `appGroups`), which replaces the detected ones.
+- **Guard:** `cli/lib/targets.ts` (pbxproj targets, App Group comparison, portal link and steps), `discoverTargets` in
+  `cli/apple/signing.ts`, `tests/signing-targets.test.ts` (fixture pbxproj with an app, a share extension and app group
+  entitlements, a decoded profile plist, a fake App Store Connect). There is no `console plan` form for the portal page:
+  the steps are in the error and the warning.
diff --git a/tests/signing-targets.test.ts b/tests/signing-targets.test.ts
new file mode 100644
index 0000000..0104925
--- /dev/null
+++ b/tests/signing-targets.test.ts
@@ -0,0 +1,341 @@
+// Signable targets of an Xcode project (app + share extension + App Group entitlements): `apple signing ensure`
+// registers the extension's bundle id, enables the capabilities its entitlements need, creates its profile and checks
+// the App Group against the profile (the API cannot assign a group to a bundle id); `apple build` over SSH names the
+// keychain fixes; `storebound api` writes say how an agent confirms. Fixtures are placeholders (com.example.*).
+import { afterEach, beforeEach, describe, expect, test } from 'bun:test';
+import { toXmlPlist } from '../cli/lib/plist';
+import { run as signing, discoverTargets, profileEntitlements } from '../cli/apple/signing';
+import { decide, NOT_A_TTY } from '../cli/api/gate';
+import { USAGE } from '../cli/api';
+import { keychainPassword, KEYCHAIN_PASSWORD_ENV, parseKeychainList, showSecurity, sshBuildRefusal, unlockSteps } from '../cli/lib/keychain';
+import { planProfile, validateSigning } from '../cli/lib/signing';
+import { appGroupGaps, appGroupGapsFor, appGroupSteps, bundleIdPortalUrl, pbxTargets, targetKind } from '../cli/lib/targets';
+import { upsertTiming } from '../cli/lib/upsert';
+import { ascEnv, BASE, capture, mockFetch, project, restore } from './helpers/store-mock';
+
+const APP_ENT = `<?xml version="1.0" encoding="UTF-8"?>
+<plist version="1.0"><dict>
+  <key>aps-environment</key><string>development</string>
+  <key>com.apple.security.application-groups</key><array><string>group.com.example.notes</string></array>
+</dict></plist>`;
+const SHARE_ENT = `<?xml version="1.0" encoding="UTF-8"?>
+<plist version="1.0"><dict>
+  <key>com.apple.security.application-groups</key><array><string>group.com.example.notes</string></array>
+  <key>keychain-access-groups</key><array><string>$(AppIdentifierPrefix)com.example.notes</string></array>
+  <key>com.apple.developer.associated-domains</key><array><string>applinks:example.com</string></array>
+</dict></plist>`;
+
+/** A pbxproj the way Xcode 15 writes it: app, share extension, a unit test bundle, a framework, one variable bundle id. */
+const PBX = `// !$*UTF8*$!
+{
+	archiveVersion = 1;
+	objects = {
+/* Begin PBXNativeTarget section */
+		AAAAAAAAAAAAAAAAAAAAAA01 /* App */ = {
+			isa = PBXNativeTarget;
+			buildConfigurationList = CCCCCCCCCCCCCCCCCCCCCC01 /* Build configuration list for PBXNativeTarget "App" */;
+			buildPhases = ( );
+			name = App;
+			productName = App;
+			productType = "com.apple.product-type.application";
+		};
+		AAAAAAAAAAAAAAAAAAAAAA02 /* ShareExt */ = {
+			isa = PBXNativeTarget;
+			buildConfigurationList = CCCCCCCCCCCCCCCCCCCCCC02 /* Build configuration list for PBXNativeTarget "ShareExt" */;
+			name = ShareExt;
+			productType = "com.apple.product-type.app-extension";
+		};
+		AAAAAAAAAAAAAAAAAAAAAA03 /* AppTests */ = {
+			isa = PBXNativeTarget;
+			buildConfigurationList = CCCCCCCCCCCCCCCCCCCCCC03 /* x */;
+			name = AppTests;
+			productType = "com.apple.product-type.bundle.unit-test";
+		};
+		AAAAAAAAAAAAAAAAAAAAAA04 /* Kit */ = {
+			isa = PBXNativeTarget;
+			buildConfigurationList = CCCCCCCCCCCCCCCCCCCCCC03 /* x */;
+			name = Kit;
+			productType = "com.apple.product-type.framework";
+		};
+		AAAAAAAAAAAAAAAAAAAAAA05 /* Widget */ = {
+			isa = PBXNativeTarget;
+			buildConfigurationList = CCCCCCCCCCCCCCCCCCCCCC05 /* x */;
+			name = Widget;
+			productType = "com.apple.product-type.app-extension";
+		};
+/* End PBXNativeTarget section */
+/* Begin XCBuildConfiguration section */
+		BBBBBBBBBBBBBBBBBBBBBB01 /* Debug */ = {
+			isa = XCBuildConfiguration;
+			buildSettings = { PRODUCT_BUNDLE_IDENTIFIER = com.example.notes.debug; };
+			name = Debug;
+		};
+		BBBBBBBBBBBBBBBBBBBBBB02 /* Release */ = {
+			isa = XCBuildConfiguration;
+			buildSettings = {
+				CODE_SIGN_ENTITLEMENTS = App/App.entitlements;
+				FRAMEWORK_SEARCH_PATHS = (
+					"$(inherited)",
+					"{braces}",
+				);
+				PRODUCT_BUNDLE_IDENTIFIER = com.example.notes;
+				PRODUCT_NAME = "$(TARGET_NAME)";
+			};
+			name = Release;
+		};
+		BBBBBBBBBBBBBBBBBBBBBB03 /* Release */ = {
+			isa = XCBuildConfiguration;
+			buildSettings = {
+				CODE_SIGN_ENTITLEMENTS = "$(SRCROOT)/Share/Share.entitlements";
+				PRODUCT_BUNDLE_IDENTIFIER = "com.example.notes.$(PRODUCT_NAME:rfc1034identifier)";
+				PRODUCT_NAME = "$(TARGET_NAME)";
+			};
+			name = Release;
+		};
+		BBBBBBBBBBBBBBBBBBBBBB04 /* Release */ = {
+			isa = XCBuildConfiguration;
+			buildSettings = { PRODUCT_BUNDLE_IDENTIFIER = "$(MY_BASE_ID).widget"; };
+			name = Release;
+		};
+/* End XCBuildConfiguration section */
+/* Begin XCConfigurationList section */
+		CCCCCCCCCCCCCCCCCCCCCC01 /* x */ = {
+			isa = XCConfigurationList;
+			buildConfigurations = (
+				BBBBBBBBBBBBBBBBBBBBBB01 /* Debug */,
+				BBBBBBBBBBBBBBBBBBBBBB02 /* Release */,
+			);
+		};
+		CCCCCCCCCCCCCCCCCCCCCC02 /* x */ = {
+			isa = XCConfigurationList;
+			buildConfigurations = ( BBBBBBBBBBBBBBBBBBBBBB03 /* Release */, );
+		};
+		CCCCCCCCCCCCCCCCCCCCCC03 /* x */ = { isa = XCConfigurationList; buildConfigurations = ( ); };
+		CCCCCCCCCCCCCCCCCCCCCC05 /* x */ = { isa = XCConfigurationList; buildConfigurations = ( BBBBBBBBBBBBBBBBBBBBBB04 ); };
+/* End XCConfigurationList section */
+	};
+}
+`;
+
+const files = { 'ios/App/App.xcodeproj/project.pbxproj': PBX, 'ios/App/App/App.entitlements': APP_ENT, 'ios/App/Share/Share.entitlements': SHARE_ENT };
+
+describe('pbxproj targets', () => {
+  test('targetKind: only signable product types', () => {
+    expect(targetKind('com.apple.product-type.application')).toBe('app');
+    expect(targetKind('com.apple.product-type.app-extension')).toBe('extension');
+    expect(targetKind('com.apple.product-type.app-extension.messages-sticker-pack')).toBe('extension');
+    expect(targetKind('com.apple.product-type.application.watchapp2')).toBe('watch');
+    expect(targetKind('com.apple.product-type.application.on-demand-install-capable')).toBe('clip');
+    expect(targetKind('com.apple.product-type.framework')).toBeNull();
+    expect(targetKind('com.apple.product-type.bundle.unit-test')).toBeNull();
+  });
+
+  test('app + share extension + widget: bundle ids resolved from Release, entitlements paths, tests and frameworks skipped', () => {
+    const t = pbxTargets(PBX);
+    expect(t.map(x => x.name)).toEqual(['App', 'ShareExt', 'Widget']);
+    expect(t[0]).toMatchObject({ kind: 'app', bundleId: 'com.example.notes', entitlements: 'App/App.entitlements' });
+    expect(t[1]).toMatchObject({ kind: 'extension', bundleId: 'com.example.notes.ShareExt', entitlements: 'Share/Share.entitlements' });
+    expect(t[2]).toMatchObject({ bundleId: null, unresolved: '$(MY_BASE_ID).widget' });
+  });
+
+  test('discoverTargets reads the entitlements: capabilities and app groups per target; unresolved ids are noted', () => {
+    const p = project({ ...BASE, apple: { bundleId: 'com.example.notes', appId: '6400000101' } }, files);
+    const s = discoverTargets(p.root, p.loaded.config);
+    expect(s.main).toMatchObject({ bundleId: 'com.example.notes', appGroups: ['group.com.example.notes'] });
+    expect(s.main!.capabilities.map(c => c.type).sort()).toEqual(['APP_GROUPS', 'PUSH_NOTIFICATIONS']);
+    expect(s.extensions).toHaveLength(1);
+    expect(s.extensions[0]).toMatchObject({ bundleId: 'com.example.notes.ShareExt', kind: 'extension', source: 'xcode', appGroups: ['group.com.example.notes'] });
+    expect(s.extensions[0]!.capabilities.map(c => c.type).sort()).toEqual(['APP_GROUPS', 'ASSOCIATED_DOMAINS']);   // keychain-access-groups has no capability
+    expect(s.notes.join('\n')).toContain('Widget has bundle id "$(MY_BASE_ID).widget"');
+  });
+
+  test('apple.signing.extensions replaces the detected extensions; extraBundleIds are added', () => {
+    const cfg = { ...BASE, apple: { bundleId: 'com.example.notes', signing: { extensions: [{ bundleId: 'com.example.notes.widget', capabilities: ['PUSH_NOTIFICATIONS' as const], appGroups: ['group.com.example.notes'] }], extraBundleIds: ['com.example.notes.watch'] } } };
+    const p = project(cfg, files);
+    const s = discoverTargets(p.root, p.loaded.config);
+    expect(s.extensions.map(t => t.bundleId)).toEqual(['com.example.notes.widget', 'com.example.notes.watch']);
+    expect(s.extensions[0]).toMatchObject({ source: 'config', appGroups: ['group.com.example.notes'], capabilities: [{ type: 'PUSH_NOTIFICATIONS' }] });
+  });
+
+  test('validateSigning checks the extensions override', () => {
+    expect(validateSigning({ extensions: [{ bundleId: 'com.example.app.share', capabilities: ['APP_GROUPS'], appGroups: ['group.com.example.app'] }] })).toEqual([]);
+    const e = validateSigning({ extensions: [{ bundleId: 'bad id', capabilities: ['NOPE' as never], appGroups: ['x'] }, { bundleId: 'com.example.a', capabilities: ['NOPE' as never], appGroups: ['x'] }] });
+    expect(e.join('\n')).toContain('"bad id" is not a bundle id');
+    expect(e.join('\n')).toContain('unknown capability "NOPE"');
+    expect(e.join('\n')).toContain('appGroups are ids like group.');
+  });
+});
+
+describe('App Group check', () => {
+  const prov = (ent: Record<string, unknown>): string => Buffer.from(`\x30\x82\x01junk${toXmlPlist({ Name: 'x', Entitlements: ent as Record<string, string | string[]> })}\x00trailer`, 'latin1').toString('base64');
+  const profile = (ent: Record<string, unknown>) => ({ id: 'P1', attributes: { name: 'p', profileType: 'IOS_APP_STORE', profileState: 'ACTIVE', expirationDate: '2099-01-01T00:00:00Z', profileContent: prov(ent) } });
+
+  test('the profile plist is decoded and compared with the target\'s groups', () => {
+    const ent = profileEntitlements([profile({ 'application-identifier': 'ABCDE12345.com.example.notes.share', 'com.apple.security.application-groups': ['group.com.example.other'] })])!;
+    expect(appGroupGaps(['group.com.example.notes', 'group.com.example.other'], ent)).toEqual(['group.com.example.notes']);
+    expect(appGroupGaps(['group.com.example.notes'], { 'com.apple.security.application-groups': ['*'] })).toEqual([]);
+    expect(appGroupGaps(['group.com.example.notes'], {})).toEqual(['group.com.example.notes']);
+  });
+
+  test('a managed or contentless profile is unknown, not a gap', () => {
+    expect(profileEntitlements([{ id: 'M', attributes: { profileType: 'IOS_APP_STORE', profileState: 'ACTIVE' }, managed: true }])).toBeNull();
+    expect(appGroupGapsFor([{ bundleId: 'com.example.notes', appGroups: ['group.com.example.notes'] }], () => null, () => 'X')).toEqual([]);
+  });
+
+  test('the gap carries the portal deep link and the agent-first steps with a never-press list', () => {
+    const g = appGroupGapsFor([{ bundleId: 'com.example.notes.share', appGroups: ['group.com.example.notes'] }], () => ({}), () => 'EXT0001');
+    expect(g).toEqual([{ bundleId: 'com.example.notes.share', resourceId: 'EXT0001', groups: ['group.com.example.notes'], url: 'https://developer.apple.com/account/resources/identifiers/bundleId/edit/EXT0001' }]);
+    expect(bundleIdPortalUrl('EXT0001')).toBe(g[0]!.url!);
+    const steps = appGroupSteps(g[0]!).join('\n');
+    expect(steps).toContain(g[0]!.url!);
+    expect(steps).toContain('Never press');
+    expect(steps).toContain('signing ensure --refresh-profile');
+  });
+
+  test('planProfile: --refresh-profile makes a new profile although an active one is reusable', () => {
+    const existing = [{ id: 'P1', certIds: ['C1'], attributes: { name: 'old', profileType: 'IOS_APP_STORE' as const, profileState: 'ACTIVE', expirationDate: '2099-01-01T00:00:00Z' } }];
+    const o = { bundleId: 'com.example.notes', bundleIdId: 'B1', certId: 'C1', type: 'IOS_APP_STORE' as const };
+    expect(planProfile(existing, o).reuse?.id).toBe('P1');
+    const r = planProfile(existing, { ...o, refresh: true });
+    expect(r.reuse).toBeNull();
+    expect(r.create?.path).toBe('/v1/profiles');
+    expect(r.why).toContain('--refresh-profile');
+  });
+});
+
+describe('signing ensure with an extension (fake App Store Connect)', () => {
+  beforeEach(() => { upsertTiming.waitMs = 0; });
+  afterEach(() => { restore(); upsertTiming.waitMs = 3000; });
+
+  const MAIN = 'BUNDLE0001', EXT = 'EXT0001';
+  const cfg = (style: 'automatic' | 'manual') => ({ ...BASE, apple: { bundleId: 'com.example.notes', appId: '6400000101', signing: { style, capabilities: ['IN_APP_PURCHASE' as const] } } });
+  const prov = (ent: Record<string, unknown>): string => Buffer.from(`\x30\x82\x01junk${toXmlPlist({ Name: 'x', Entitlements: ent as Record<string, string | string[]> })}\x00`, 'latin1').toString('base64');
+
+  function store(o: { groupInProfile: boolean }) {
+    const caps: Record<string, string[]> = { [MAIN]: ['IN_APP_PURCHASE', 'PUSH_NOTIFICATIONS', 'APP_GROUPS'], [EXT]: [] };
+    let registered = false;
+    const bundle = (id: string, ident: string) => ({ type: 'bundleIds', id, attributes: { identifier: ident, platform: 'IOS', seedId: 'ABCDE12345' },
+      relationships: { bundleIdCapabilities: { data: caps[id]!.map(t => ({ type: 'bundleIdCapabilities', id: `${id}_${t}` })) } } });
+    const incl = (id: string) => caps[id]!.map(t => ({ type: 'bundleIdCapabilities', id: `${id}_${t}`, attributes: { capabilityType: t, settings: null } }));
+    const page = (data: unknown[], included: unknown[] = []) => ({ data, included, links: { self: '' }, meta: { paging: { total: data.length, limit: 200 } } });
+    const routes = [
+      { match: /^\/v1\/bundleIds\?filter\[identifier\]=com\.example\.notes\.ShareExt/, answer: () => (registered ? page([bundle(EXT, 'com.example.notes.ShareExt')], incl(EXT)) : page([])) },
+      { match: /^\/v1\/bundleIds\?filter\[identifier\]=com\.example\.notes&/, answer: () => page([bundle(MAIN, 'com.example.notes')], incl(MAIN)) },
+      { method: 'POST', match: /^\/v1\/bundleIds$/, answer: () => { registered = true; return { data: bundle(EXT, 'com.example.notes.ShareExt') }; } },
+      { method: 'POST', match: /^\/v1\/bundleIdCapabilities$/, answer: (c: { body: unknown }) => {
+        const a = (c.body as { data: { attributes: { capabilityType: string }; relationships: { bundleId: { data: { id: string } } } } }).data;
+        caps[a.relationships.bundleId.data.id]!.push(a.attributes.capabilityType);
+        return { data: { type: 'bundleIdCapabilities', id: 'x', attributes: { capabilityType: a.attributes.capabilityType } } };
+      } },
+      { match: /^\/v1\/certificates\?/, answer: page([]) },
+      { method: 'POST', match: /^\/v1\/certificates$/, answer: { data: { type: 'certificates', id: 'CERT0001', attributes: { certificateType: 'DISTRIBUTION', name: 'Apple Distribution: Example', expirationDate: '2099-01-01T00:00:00.000+00:00', certificateContent: Buffer.from('cert').toString('base64') } } } },
+      { match: /^\/v1\/bundleIds\/[A-Z0-9]+\/profiles/, answer: page([]) },
+      { method: 'POST', match: /^\/v1\/profiles$/, answer: (c: { body: unknown }) => {
+        const id = (c.body as { data: { relationships: { bundleId: { data: { id: string } } } } }).data.relationships.bundleId.data.id;
+        const groups = o.groupInProfile ? { 'com.apple.security.application-groups': ['group.com.example.notes'] } : {};
+        return { data: { type: 'profiles', id: `PROF_${id}`, attributes: { name: `storebound ${id}`, profileType: 'IOS_APP_STORE', profileState: 'ACTIVE', uuid: `uuid-${id}`, expirationDate: '2099-01-01T00:00:00.000+00:00', profileContent: prov({ 'application-identifier': `ABCDE12345.${id}`, ...groups }) } } };
+      } },
+      { match: /^\/v1\/apps\/6400000101\/gameCenterDetail/, answer: { errors: [{ status: '404' }] }, status: 404 },
+    ];
+    return { routes: routes as never, caps, isRegistered: () => registered };
+  }
+
+  test('--dry lists every target: the extension bundle id, its capabilities and (manual) its profile', async () => {
+    ascEnv();
+    const p = project(cfg('manual'), files);
+    const s = store({ groupInProfile: true });
+    const calls = mockFetch(s.routes);
+    const r = await capture(() => signing(p.ctx(['ensure', '--dry'])));
+    const all = r.out + r.err;
+    expect(all).toContain('POST /v1/bundleIds');
+    expect(all).toContain('register com.example.notes.ShareExt');
+    expect(all).toMatch(/POST \/v1\/bundleIdCapabilities \{capabilityType="APP_GROUPS"\}  # com\.example\.notes\.ShareExt, after it is registered/);
+    expect(all).toContain('ASSOCIATED_DOMAINS');
+    expect(all).toContain('# com.example.notes.ShareExt: with the new certificate');
+    expect(all).not.toContain('ASSOCIATED_DOMAINS is in ios/App/Share/Share.entitlements');   // the extension's entitlements are not compared with the app's App ID
+    expect(calls.filter(c => c.method !== 'GET')).toEqual([]);
+  });
+
+  test('automatic: registers the extension bundle id and its capabilities, reads them back, no profile', async () => {
+    ascEnv();
+    const p = project(cfg('automatic'), files);
+    const s = store({ groupInProfile: true });
+    const calls = mockFetch(s.routes);
+    const r = await capture(() => signing(p.ctx(['ensure', '--yes'])));
+    expect(r.exit).toBeNull();
+    const writes = calls.filter(c => c.method !== 'GET').map(c => `${c.method} ${c.path}`);
+    expect(writes[0]).toBe('POST /v1/bundleIds');
+    expect(writes.filter(w => w === 'POST /v1/bundleIdCapabilities')).toHaveLength(2);
+    expect(writes.some(w => /profiles|certificates/.test(w))).toBe(false);
+    expect(s.caps.EXT0001!.sort()).toEqual(['APP_GROUPS', 'ASSOCIATED_DOMAINS']);
+    const reg = calls.find(c => c.method === 'POST' && c.path === '/v1/bundleIds')!.body as { data: { attributes: Record<string, string> } };
+    expect(reg.data.attributes).toMatchObject({ identifier: 'com.example.notes.ShareExt', platform: 'IOS', name: 'Example Notes ShareExt' });
+  });
+
+  test('manual: a profile for the app and the extension; the group missing from the profile fails with the portal link and steps', async () => {
+    ascEnv();
+    const p = project(cfg('manual'), files);
+    const s = store({ groupInProfile: false });
+    const calls = mockFetch(s.routes);
+    const r = await capture(() => signing(p.ctx(['ensure', '--yes', '--no-install']))).catch(e => ({ out: '', err: String(e.message ?? e), exit: 1 }));
+    const all = r.out + r.err;
+    expect(calls.filter(c => c.method === 'POST' && c.path === '/v1/profiles')).toHaveLength(2);
+    expect(all).toContain('com.example.notes.ShareExt lacks group.com.example.notes');
+    expect(all).toContain('https://developer.apple.com/account/resources/identifiers/bundleId/edit/EXT0001');
+    expect(all).toContain('signing ensure --refresh-profile');
+  });
+
+  test('manual: the profile carries the group: ensure finishes', async () => {
+    ascEnv();
+    const p = project(cfg('manual'), files);
+    const s = store({ groupInProfile: true });
+    mockFetch(s.routes);
+    const r = await capture(() => signing(p.ctx(['ensure', '--yes', '--no-install'])));
+    expect(r.exit).toBeNull();
+    expect(r.out + r.err).toContain('signing ready');
+  });
+});
+
+describe('apple build over SSH: the keychain fixes', () => {
+  test('the refusal names the GUI session, the CI runner and the keychain flags', () => {
+    const m = sshBuildRefusal('this is an SSH session');
+    expect(m).toContain('errSecInternalComponent');
+    expect(m).toContain('open -a Terminal');
+    expect(m).toContain('Jenkins');
+    expect(m).toContain('security unlock-keychain');
+    expect(m).toContain('security set-key-partition-list');
+    expect(m).toContain('--keychain-unlock');
+    expect(m).toContain('--keychain <path>');
+    expect(m).toContain(KEYCHAIN_PASSWORD_ENV);
+    expect(sshBuildRefusal('x', { unlockFlag: false })).not.toContain('--keychain-unlock');
+  });
+
+  test('unlock steps carry a PASSWORD placeholder that is never shown; the build keychain joins the search list', () => {
+    const steps = unlockSteps('/tmp/build.keychain-db', ['/Users/example/Library/Keychains/login.keychain-db']);
+    expect(steps.map(s => s[1])).toEqual(['unlock-keychain', 'set-key-partition-list', 'list-keychains']);
+    expect(steps[1]).toContain('apple-tool:,apple:,codesign:');
+    expect(steps[2]).toEqual(['security', 'list-keychains', '-d', 'user', '-s', '/tmp/build.keychain-db', '/Users/example/Library/Keychains/login.keychain-db']);
+    expect(showSecurity(steps[0]!)).toBe(`security unlock-keychain -p $${KEYCHAIN_PASSWORD_ENV} /tmp/build.keychain-db`);
+    expect(unlockSteps('/a', ['/a']).map(s => s[1])).toEqual(['unlock-keychain', 'set-key-partition-list']);
+    expect(parseKeychainList('    "/Users/example/Library/Keychains/login.keychain-db"\n    "/Library/Keychains/System.keychain"\n')).toEqual(['/Users/example/Library/Keychains/login.keychain-db', '/Library/Keychains/System.keychain']);
+  });
+
+  test('the password comes from the environment; its absence is an error that names the variable only', () => {
+    expect(() => keychainPassword({})).toThrow(KEYCHAIN_PASSWORD_ENV);
+    expect(keychainPassword({ [KEYCHAIN_PASSWORD_ENV]: 'pw-for-test' })).toBe('pw-for-test');
+    try { keychainPassword({}); } catch (e) { expect((e as Error).message).not.toContain('pw-for-test'); }
+  });
+});
+
+describe('storebound api writes: --yes --confirm <operationId>', () => {
+  const w = { store: 'apple' as const, method: 'POST', kind: 'write' as const, opId: 'bundleIds_createInstance', yes: false, tty: false, dry: false, agent: false };
+  test('the usage and the refusals show the example', () => {
+    expect(USAGE).toContain('--yes --confirm bundleIds_createInstance');
+    expect(NOT_A_TTY).toContain('--yes --confirm bundleIds_createInstance');
+    const d = decide(w as never);
+    expect(d.action).toBe('dry');
+    const why = (d as { why: string }).why;
+    expect(why).toContain('--yes --confirm bundleIds_createInstance');
+    expect(why).toContain('storebound api apple bundleIds_createInstance --body body.json');
+  });
+});

From 5236f002f195ea2011e6f4b0c4588485abfbcc36 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Sat, 24 Oct 2026 13:44:08 +0800
Subject: [PATCH 023/126] desktop: tray menu panels and pinnable context menus

The tray's right-click menu is drawn by the app: one tree from tray.rs
(stable submenu keys), one frameless always-on-top menu-N window per
panel rendered by tray-menu.html with the design system, placed inside
the monitor's work area. A pure panel book keeps transient and pinned
panels apart; pinned panels (pin button, Ctrl+click, middle click) are
draggable, step aside from each other and are saved in state.json
(menuPins) and restored at start. tray_update pushes the tree to the
open panels, which update in place; closed panels are destroyed. The
native menu, rendered from the same tree, stays as the fallback and on
Linux. Only menu-* windows get the menu_* commands (menu.json).

In-app context menus get the same behaviour through a pure menu stack
(ui/menu-stack.ts): pin a menu, tear off a submenu, pinned panels
survive the next menu, are draggable and re-read their entries from
live sources so data changes update them in place.

Also drops a stray diff3 marker line from CHANGELOG.md.
---
 CHANGELOG.md                                  |   3 +-
 apps/desktop/src-tauri/build.rs               |   2 +-
 apps/desktop/src-tauri/capabilities/menu.json |  21 +
 apps/desktop/src-tauri/src/commands.rs        |  81 ++
 apps/desktop/src-tauri/src/commands_list.rs   |   3 +
 apps/desktop/src-tauri/src/lib.rs             |  83 +-
 apps/desktop/src-tauri/src/menu_panel.rs      | 744 ++++++++++++++++++
 apps/desktop/src-tauri/src/policy.rs          |  11 +
 apps/desktop/src-tauri/src/store.rs           |   6 +-
 apps/desktop/src-tauri/src/tray.rs            |  58 +-
 apps/desktop/src-tauri/tauri.conf.json        |   2 +-
 apps/desktop/src-tauri/tests/menu_panel.rs    | 203 +++++
 apps/desktop/src-tauri/tests/security.rs      |  47 +-
 apps/desktop/src-tauri/tests/tray.rs          |   2 +-
 apps/desktop/src/App.tsx                      |   2 +-
 apps/desktop/src/design.css                   |  13 +
 apps/desktop/src/i18n/en.ts                   |   6 +
 apps/desktop/src/i18n/tr.ts                   |   6 +
 apps/desktop/src/screens/AppView.tsx          |   4 +-
 apps/desktop/src/screens/Ignored.tsx          |   2 +-
 apps/desktop/src/screens/Portfolio.tsx        |   6 +-
 apps/desktop/src/traymenu/TrayMenu.tsx        | 166 ++++
 apps/desktop/src/traymenu/demo.tsx            |  55 ++
 apps/desktop/src/traymenu/main.tsx            |  70 ++
 apps/desktop/src/traymenu/menu-api.ts         |  33 +
 apps/desktop/src/traymenu/model.ts            |  75 ++
 apps/desktop/src/traymenu/traymenu.css        |  28 +
 apps/desktop/src/ui/ContextMenu.tsx           | 282 +++++--
 apps/desktop/src/ui/icons.tsx                 |   4 +-
 apps/desktop/src/ui/menu-stack.ts             | 140 ++++
 apps/desktop/tests/menu-stack.test.ts         | 150 ++++
 apps/desktop/tests/tray-menu.test.ts          |  85 ++
 apps/desktop/tray-menu.html                   |  14 +
 apps/desktop/vite.config.ts                   |   5 +-
 docs/desktop.md                               |  19 +
 35 files changed, 2308 insertions(+), 123 deletions(-)
 create mode 100644 apps/desktop/src-tauri/capabilities/menu.json
 create mode 100644 apps/desktop/src-tauri/src/menu_panel.rs
 create mode 100644 apps/desktop/src-tauri/tests/menu_panel.rs
 create mode 100644 apps/desktop/src/traymenu/TrayMenu.tsx
 create mode 100644 apps/desktop/src/traymenu/demo.tsx
 create mode 100644 apps/desktop/src/traymenu/main.tsx
 create mode 100644 apps/desktop/src/traymenu/menu-api.ts
 create mode 100644 apps/desktop/src/traymenu/model.ts
 create mode 100644 apps/desktop/src/traymenu/traymenu.css
 create mode 100644 apps/desktop/src/ui/menu-stack.ts
 create mode 100644 apps/desktop/tests/menu-stack.test.ts
 create mode 100644 apps/desktop/tests/tray-menu.test.ts
 create mode 100644 apps/desktop/tray-menu.html

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 5a15c38..ac914f7 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,10 +3,11 @@
 
 ## Unreleased
 
+- Desktop tray: the right-click menu is drawn by the app (the design system's menu look) instead of the OS menu. Each submenu opens as its own small panel; the pin button, Ctrl+click or a middle click keeps a panel open (pinned): it can be dragged, steps aside so it never covers another pinned panel, and comes back after a restart. Values (the apps and their store state, mute) update in place after every store read without closing anything. The native menu stays as a fallback (and on Linux), built from the same menu tree. The left-click tray card is unchanged.
+- Desktop right-click menus in the window work the same way: a menu's pin button keeps it open as a floating panel, a submenu can be torn off (its pin button, Ctrl+click or a middle click), pinned panels survive the next menu, can be dragged, and update in place when the data behind them changes ("Gone" when the thing they were for left the screen).
 - `shots.feature.rotate` (degrees) is honoured by the Play feature graphic like a scene frame's `rotate`: added to the template tilt and the phone is re-fitted (`-90` stands a landscape game frame upright); with `shots.layout: "bleed"` the frame image is turned and still covers the canvas.
 - `shots check` / `shots render` without frames for a language that has copy use the default language's frames (an info line, no failure); `shots.perLanguageFrames: true` requires per-language frames. `shots fonts --lang en,tr` limits the report to those languages (the font manifest keeps all of them).
 - `shots capture` web shots take `waitSelector` and `click` selector lists per layout (`{ phone, tablet, any }`, data attributes first, `text=` fallback). A miss names the selector and the size with every candidate's match count; `shots capture --dry` prints the candidates per size and `--dry --probe` opens the pages and reports which one matched or MISSed on which size.
-||||||| parent of ae8d773 (apple signing: every signable target (extensions, App Group check), build keychain unlock over SSH, api confirm docs)
 
 - `apple signing ensure` signs every target of the Xcode project, not only the app: it reads the pbxproj targets (app, app extensions such as a share extension or widget, watch app, App Clip: Release PRODUCT_BUNDLE_IDENTIFIER and entitlements), registers each extension's bundle id (`POST /v1/bundleIds`, platform from the profile type), enables the capabilities its entitlements need (read back) and, with manual signing, creates its App Store profile; `--dry` lists every target. `apple.signing.extensions` (`bundleId`, `name`, `capabilities`, `appGroups`) replaces the detected extensions when detection is wrong; `status` shows a target table.
 - App Groups: the API cannot assign a group to a bundle id, so `signing status` / `ensure` and (manual signing) `apple build` decode the profile and compare its `com.apple.security.application-groups` with the target's entitlements; a gap names the developer portal link (`.../identifiers/bundleId/edit/<id>`) and the steps to tick the group. `signing ensure --refresh-profile` makes the profile again afterwards; `apple build --allow-app-group-gap` overrides.
diff --git a/apps/desktop/src-tauri/build.rs b/apps/desktop/src-tauri/build.rs
index 673bde2..02a67cc 100644
--- a/apps/desktop/src-tauri/build.rs
+++ b/apps/desktop/src-tauri/build.rs
@@ -5,7 +5,7 @@ include!("src/commands_list.rs");
 fn main() {
     tauri_build::try_build(
         tauri_build::Attributes::new()
-            .app_manifest(tauri_build::AppManifest::new().commands(Box::leak([COMMANDS, CARD_COMMANDS].concat().into_boxed_slice()))),
+            .app_manifest(tauri_build::AppManifest::new().commands(Box::leak([COMMANDS, CARD_COMMANDS, MENU_COMMANDS].concat().into_boxed_slice()))),
     )
     .expect("tauri build script failed");
 }
diff --git a/apps/desktop/src-tauri/capabilities/menu.json b/apps/desktop/src-tauri/capabilities/menu.json
new file mode 100644
index 0000000..2f5783e
--- /dev/null
+++ b/apps/desktop/src-tauri/capabilities/menu.json
@@ -0,0 +1,21 @@
+{
+  "$schema": "../gen/schemas/desktop-schema.json",
+  "identifier": "menu-window",
+  "description": "The tray menu panels (menu-1, menu-2...: small frameless windows the app opens on a right click on the tray icon, one per open or pinned submenu) with the app's own bundled tray-menu page only. They may listen to app events (the live menu tree) and call the menu commands: read their panel, report their size, open, pin and close panels, pick a row, which runs the same tray action as the native menu, and start a drag of their own window (a pinned panel's header). They never read the stores or reach the sidecar; every command re-checks the window label and page origin in Rust.",
+  "windows": ["menu-*"],
+  "local": true,
+  "permissions": [
+    "core:event:allow-listen",
+    "core:event:allow-unlisten",
+    "core:window:allow-start-dragging",
+    "allow-menu-state",
+    "allow-menu-ready",
+    "allow-menu-open-sub",
+    "allow-menu-pin-sub",
+    "allow-menu-close-subs",
+    "allow-menu-close",
+    "allow-menu-dismiss",
+    "allow-menu-pin",
+    "allow-menu-select"
+  ]
+}
diff --git a/apps/desktop/src-tauri/src/commands.rs b/apps/desktop/src-tauri/src/commands.rs
index 2cbf8f9..9739e6a 100644
--- a/apps/desktop/src-tauri/src/commands.rs
+++ b/apps/desktop/src-tauri/src/commands.rs
@@ -49,6 +49,11 @@ fn guard_card(w: &WebviewWindow) -> Res<()> {
     policy::require_card(w.label(), &url, cfg!(debug_assertions)).map_err(Fail::host)
 }
 
+fn guard_menu(w: &WebviewWindow) -> Res<()> {
+    let url = w.url().map_err(|e| Fail::host(e.to_string()))?;
+    policy::require_menu(w.label(), &url, cfg!(debug_assertions)).map_err(Fail::host)
+}
+
 fn saved(s: &AppState) -> Res<std::sync::MutexGuard<'_, Saved>> {
     s.saved.lock().map_err(|_| Fail::host("state poisoned"))
 }
@@ -1665,3 +1670,79 @@ pub async fn ai_fix_undo(window: WebviewWindow, run_id: String) -> Res<Vec<Strin
     let rec = ai_fix::runs().lock().ok().and_then(|mut m| m.remove(&run_id)).ok_or_else(|| Fail::host("no such AI fix run"))?;
     tauri::async_runtime::spawn_blocking(move || ai_fix::undo(&rec.0, &rec.1)).await.map_err(|e| Fail::host(e.to_string()))?.map_err(Fail::host)
 }
+
+// ---- the tray menu panels (menu_panel.rs; only `menu-*` windows) ----
+
+/// A panel: what it shows (the whole tree and its path into it).
+#[tauri::command]
+pub fn menu_state(window: WebviewWindow) -> Res<Option<crate::menu_panel::PanelInfo>> {
+    guard_menu(&window)?;
+    Ok(crate::menu_panel::panel_state(&window))
+}
+
+/// A panel measured itself (CSS px): sized, placed inside the work area and shown.
+#[tauri::command]
+pub fn menu_ready(window: WebviewWindow, width: f64, height: f64) -> Res<()> {
+    guard_menu(&window)?;
+    crate::menu_panel::ready(&window, width, height);
+    Ok(())
+}
+
+/// Opens a submenu beside this panel at the row whose top is `top` (CSS px).
+#[tauri::command]
+pub fn menu_open_sub(window: WebviewWindow, key: String, top: f64, focus: bool) -> Res<()> {
+    guard_menu(&window)?;
+    crate::menu_panel::open_sub(&window, &key, top, focus, false);
+    Ok(())
+}
+
+/// Ctrl / middle click on a submenu row: opens it as its own pinned panel.
+#[tauri::command]
+pub fn menu_pin_sub(window: WebviewWindow, key: String, top: f64) -> Res<()> {
+    guard_menu(&window)?;
+    crate::menu_panel::open_sub(&window, &key, top, false, true);
+    Ok(())
+}
+
+/// The pointer moved to a plain row: this panel's submenus close.
+#[tauri::command]
+pub fn menu_close_subs(window: WebviewWindow) -> Res<()> {
+    guard_menu(&window)?;
+    crate::menu_panel::close_subs(&window);
+    Ok(())
+}
+
+/// Closes this panel (Left / Esc in a submenu, X on a pinned one).
+#[tauri::command]
+pub fn menu_close(window: WebviewWindow, refocus_parent: bool) -> Res<()> {
+    guard_menu(&window)?;
+    crate::menu_panel::close(&window, refocus_parent);
+    Ok(())
+}
+
+/// Esc on the root menu: every transient panel closes.
+#[tauri::command]
+pub fn menu_dismiss(window: WebviewWindow) -> Res<()> {
+    guard_menu(&window)?;
+    crate::menu_panel::dismiss(window.app_handle());
+    Ok(())
+}
+
+/// Pins or unpins this panel.
+#[tauri::command]
+pub fn menu_pin(window: WebviewWindow, pinned: bool) -> Res<()> {
+    guard_menu(&window)?;
+    crate::menu_panel::pin(&window, pinned);
+    Ok(())
+}
+
+/// A pick: the same action as the native tray menu (an id tray.rs knows; anything else is refused).
+#[tauri::command]
+pub fn menu_select(window: WebviewWindow, id: String) -> Res<()> {
+    guard_menu(&window)?;
+    if id.len() > 300 || crate::tray::action_of(&id).is_none() {
+        return Err(Fail::host("unknown menu item"));
+    }
+    crate::menu_panel::select(&window, id);
+    Ok(())
+}
diff --git a/apps/desktop/src-tauri/src/commands_list.rs b/apps/desktop/src-tauri/src/commands_list.rs
index 1daea05..a076389 100644
--- a/apps/desktop/src-tauri/src/commands_list.rs
+++ b/apps/desktop/src-tauri/src/commands_list.rs
@@ -56,3 +56,6 @@ pub const COMMANDS: &[&str] = &[
 
 /// The tray card window's commands (capabilities/card.json grants them to the `card` window only).
 pub const CARD_COMMANDS: &[&str] = &["card_get", "card_action"];
+
+/// The tray menu panels' commands (capabilities/menu.json grants them to the `menu-*` windows only).
+pub const MENU_COMMANDS: &[&str] = &["menu_state", "menu_ready", "menu_open_sub", "menu_pin_sub", "menu_close_subs", "menu_close", "menu_dismiss", "menu_pin", "menu_select"];
diff --git a/apps/desktop/src-tauri/src/lib.rs b/apps/desktop/src-tauri/src/lib.rs
index 2ef5046..e616bdd 100644
--- a/apps/desktop/src-tauri/src/lib.rs
+++ b/apps/desktop/src-tauri/src/lib.rs
@@ -8,6 +8,7 @@ pub mod commands;
 pub mod confirm;
 pub mod downloads;
 pub mod logs;
+pub mod menu_panel;
 pub mod policy;
 pub mod profiles;
 pub mod registry;
@@ -43,17 +44,53 @@ fn started_hidden() -> bool {
     std::env::args().any(|a| a == "--hidden")
 }
 
-/// Tray icon: a click shows the window; the menu (tray.rs) opens the window, reads the stores, lists the apps with their
-/// state, mutes notifications, checks for updates, opens Settings and quits (the only real quit on Windows and Linux,
-/// where closing the window keeps the app running in the tray). The window refines tooltip, menu and icon after every
-/// read (`tray_update`).
+/// Tray icon: a left click shows the tray card (card.rs), a right click the app's own menu panels (menu_panel.rs, with
+/// the tree from tray.rs: open the window, read the stores, the apps with their state, mute, updates, Settings and Quit,
+/// the only real quit on Windows and Linux, where closing the window keeps the app running in the tray). The window
+/// refines tooltip, menu and icon after every read (`tray_update`). Linux trays send no clicks: the native menu,
+/// rendered from the same tree, stays on the icon there (and anywhere the panels fail).
 fn tray(app: &tauri::App) -> tauri::Result<()> {
-    let menu = tray::initial_menu(app.handle())?;
-    let mut b = TrayIconBuilder::with_id("main").tooltip("storebound").menu(&menu).show_menu_on_left_click(false);
+    let handle = app.handle();
+    let panels = handle.state::<menu_panel::MenuPanels>();
+    if let Ok(mut n) = panels.nodes.lock() {
+        *n = tray::initial_nodes();
+    }
+    let mut b = TrayIconBuilder::with_id("main").tooltip("storebound").show_menu_on_left_click(false);
+    if cfg!(target_os = "linux") {
+        panels.native.store(true, std::sync::atomic::Ordering::Relaxed);
+        b = b.menu(&tray::native_menu(handle, &tray::initial_nodes())?);
+    }
     if let Some(icon) = app.default_window_icon() {
         b = b.icon(icon.clone());
     }
-    b.on_menu_event(|app, e| match tray::action_of(e.id().as_ref()) {
+    b.on_menu_event(|app, e| dispatch_menu(app, e.id().as_ref()))
+        .on_tray_icon_event(|t, e| {
+            let TrayIconEvent::Click { button, button_state: MouseButtonState::Up, rect, position, .. } = e else { return };
+            let app = t.app_handle();
+            match button {
+                // right click: the menu panels at the click point
+                MouseButton::Right => menu_panel::open_root(app, position.x, position.y),
+                // left click: the tray card next to the icon
+                MouseButton::Left => {
+                    if app.get_webview_window(card::LABEL).is_none() {
+                        show_main(app);
+                        return;
+                    }
+                    let scale = app.get_webview_window(policy::MAIN).and_then(|w| w.scale_factor().ok()).unwrap_or(1.0);
+                    let p = rect.position.to_physical::<f64>(scale);
+                    let s = rect.size.to_physical::<f64>(scale);
+                    card::toggle(app, card::Rect { x: p.x, y: p.y, w: s.width, h: s.height });
+                }
+                _ => {}
+            }
+        })
+        .build(app)?;
+    Ok(())
+}
+
+/// A tray menu pick (a menu panel row or the native fallback menu): tray.rs maps the id to what it does.
+pub fn dispatch_menu<R: Runtime>(app: &AppHandle<R>, id: &str) {
+    match tray::action_of(id) {
         Some(tray::Action::Open) => show_main(app),
         Some(tray::Action::Quit) => app.exit(0),
         Some(tray::Action::Event(word)) => {
@@ -64,23 +101,7 @@ fn tray(app: &tauri::App) -> tauri::Result<()> {
             let _ = app.emit_to(policy::MAIN, "tray-route", route);
         }
         None => {}
-    })
-    .on_tray_icon_event(|t, e| {
-        // left click: the tray card next to the icon (right click keeps the native menu)
-        if let TrayIconEvent::Click { button: MouseButton::Left, button_state: MouseButtonState::Up, rect, .. } = e {
-            let app = t.app_handle();
-            if app.get_webview_window(card::LABEL).is_none() {
-                show_main(app);
-                return;
-            }
-            let scale = app.get_webview_window(policy::MAIN).and_then(|w| w.scale_factor().ok()).unwrap_or(1.0);
-            let p = rect.position.to_physical::<f64>(scale);
-            let s = rect.size.to_physical::<f64>(scale);
-            card::toggle(app, card::Rect { x: p.x, y: p.y, w: s.width, h: s.height });
-        }
-    })
-    .build(app)?;
-    Ok(())
+    }
 }
 
 /// Silent self-update: at start (after a minute) and every 30 minutes, a signed update from storebound.dev is
@@ -282,7 +303,7 @@ pub fn run() {
         .plugin(tauri_plugin_single_instance::init(|app, _argv, _cwd| show_main(app)))
         .plugin(tauri_plugin_deep_link::init())
         // never restore "visible": a --hidden start would otherwise pop the window up
-        .plugin(tauri_plugin_window_state::Builder::new().with_state_flags(tauri_plugin_window_state::StateFlags::all() & !tauri_plugin_window_state::StateFlags::VISIBLE).build())
+        .plugin(tauri_plugin_window_state::Builder::new().with_filter(|label| !label.starts_with(menu_panel::LABEL_PREFIX)).with_state_flags(tauri_plugin_window_state::StateFlags::all() & !tauri_plugin_window_state::StateFlags::VISIBLE).build())
         .plugin(tauri_plugin_autostart::init(MacosLauncher::LaunchAgent, Some(vec!["--hidden"])))
         .plugin(tauri_plugin_shell::init())
         .plugin(tauri_plugin_opener::init())
@@ -337,7 +358,10 @@ pub fn run() {
                 Err(e) => logs::host("warn", &format!("autostart not set: {e}")),
             }
             app.manage(state);
+            app.manage(menu_panel::MenuPanels::default());
             tray(app)?;
+            // pinned tray menu panels of the last session come back
+            menu_panel::restore(app.handle());
             if let Err(e) = card::create(app.handle()) {
                 logs::host("warn", &format!("tray card not created: {e}"));
             }
@@ -438,6 +462,15 @@ pub fn run() {
             commands::ai_fix_undo,
             commands::card_get,
             commands::card_action,
+            commands::menu_state,
+            commands::menu_ready,
+            commands::menu_open_sub,
+            commands::menu_pin_sub,
+            commands::menu_close_subs,
+            commands::menu_close,
+            commands::menu_dismiss,
+            commands::menu_pin,
+            commands::menu_select,
         ])
         .build(tauri::generate_context!())
         .expect("storebound desktop failed to start");
diff --git a/apps/desktop/src-tauri/src/menu_panel.rs b/apps/desktop/src-tauri/src/menu_panel.rs
new file mode 100644
index 0000000..3809791
--- /dev/null
+++ b/apps/desktop/src-tauri/src/menu_panel.rs
@@ -0,0 +1,744 @@
+//! The tray's right-click menu, drawn by the app itself instead of the OS menu (tray-menu.html, src/traymenu/).
+//!
+//! - One tree: tray.rs builds the menu as `Entry`s, turned here into `Node`s. Every submenu has a stable key (its label
+//!   without the live part), so an open or pinned panel finds its submenu again after the values change.
+//! - One window per panel: the root menu and each submenu are their own frameless, always-on-top `menu-N` windows. The
+//!   page measures itself and calls `menu_ready`; Rust sizes, places (inside the monitor's work area) and shows it.
+//! - The panel book (`Book`, pure, tests/menu_panel.rs) records which panels are open, which are pinned and whose child
+//!   each one is. Transient panels close together (focus left all of them, Esc, a pick); pinned ones stay, can be
+//!   dragged, step aside so they never cover each other and come back after a restart (`menuPins` in state.json).
+//! - Live: every `tray_update` pushes the tree to the open panels (`menu-model`), which update in place. Nothing polls.
+//! - Idle: a closed panel is destroyed, never hidden.
+//! - Fallback: when a panel window cannot be built or never reports ready, the native tray menu (rendered from the same
+//!   tree) comes back. Linux always uses it (its tray sends no click events).
+//!
+//! The top half is pure and covered by tests/menu_panel.rs.
+use std::collections::BTreeMap;
+use std::sync::atomic::{AtomicBool, AtomicU64, Ordering};
+use std::sync::Mutex;
+use std::time::Duration;
+
+use serde::{Deserialize, Serialize};
+
+use crate::tray::Entry;
+
+pub const LABEL_PREFIX: &str = "menu-";
+pub const PAGE: &str = "tray-menu.html";
+pub const MODEL_EVENT: &str = "menu-model";
+pub const PANEL_EVENT: &str = "menu-panel";
+/// Gap to the work area's edges (physical px at scale 1).
+pub const GAP: f64 = 8.0;
+/// The estimated size of a panel before it measured itself (logical px).
+pub const EST: (f64, f64) = (280.0, 220.0);
+
+// ---------------------------------------------------------------- model
+
+#[derive(Serialize, Clone, Debug, PartialEq, Eq)]
+#[serde(tag = "kind", rename_all = "camelCase")]
+pub enum Node {
+    Item { id: String, label: String, enabled: bool },
+    Sep,
+    Sub { key: String, label: String, items: Vec<Node> },
+}
+
+/// A submenu's stable key: its label without status glyphs and without the live part after ':' / '·' / '('
+/// ("Apps (3)" -> "apps", "Apps · 2 need you" -> "apps"). Pinned panels are found again by these keys.
+pub fn sub_key(label: &str) -> String {
+    let head = label.split([':', '\u{00B7}', '(']).next().unwrap_or("");
+    let mut out = String::new();
+    for c in head.chars() {
+        if c.is_alphanumeric() {
+            out.extend(c.to_lowercase());
+        } else if (c == ' ' || c == '-' || c == '_') && !out.is_empty() && !out.ends_with('-') {
+            out.push('-');
+        }
+    }
+    let out = out.trim_end_matches('-').to_string();
+    if out.is_empty() { "sub".into() } else { out }
+}
+
+/// Sibling submenus with the same key get "-2", "-3"...
+pub fn unique_keys(mut nodes: Vec<Node>) -> Vec<Node> {
+    let mut seen: BTreeMap<String, u32> = BTreeMap::new();
+    for n in nodes.iter_mut() {
+        if let Node::Sub { key, .. } = n {
+            let count = seen.entry(key.clone()).or_insert(0);
+            *count += 1;
+            if *count > 1 {
+                *key = format!("{key}-{count}");
+            }
+        }
+    }
+    nodes
+}
+
+/// The tray menu entries as panel nodes. A submenu keeps the fixed key tray.rs gives it (so a translated label never
+/// changes it), else the key comes from its label.
+pub fn from_entries(entries: &[Entry]) -> Vec<Node> {
+    let nodes = entries
+        .iter()
+        .map(|e| match e {
+            Entry::Item { id, label, enabled } => Node::Item { id: id.clone(), label: label.clone(), enabled: *enabled },
+            Entry::Separator => Node::Sep,
+            Entry::Sub { key, label, items } => Node::Sub { key: if key.is_empty() { sub_key(label) } else { sub_key(key) }, label: label.clone(), items: from_entries(items) },
+        })
+        .collect();
+    unique_keys(nodes)
+}
+
+/// The items of the submenu at `path` (empty path: the root) and its label.
+pub fn find<'a>(nodes: &'a [Node], path: &[String]) -> Option<(&'a [Node], Option<&'a str>)> {
+    let mut current = nodes;
+    let mut label = None;
+    for key in path {
+        let (items, l) = current.iter().find_map(|n| match n {
+            Node::Sub { key: k, label: l, items } if k == key => Some((items.as_slice(), l.as_str())),
+            _ => None,
+        })?;
+        current = items;
+        label = Some(l);
+    }
+    Some((current, label))
+}
+
+// ---------------------------------------------------------------- placement
+
+#[derive(Clone, Copy, Debug, PartialEq)]
+pub enum Anchor {
+    /// The tray click point (physical).
+    Point { x: f64, y: f64 },
+    /// Beside a parent panel: its left and right edge and the row's top (physical).
+    Beside { left: f64, right: f64, top: f64 },
+    /// A remembered top-left (pinned panels).
+    At { x: f64, y: f64 },
+}
+
+/// x, y, width, height (physical px).
+pub type Rect = (f64, f64, f64, f64);
+
+/// Keeps a panel of size w x h fully inside the work area (with `GAP`).
+pub fn clamp_into(x: f64, y: f64, w: f64, h: f64, work: Rect) -> (f64, f64) {
+    let (wx, wy, ww, wh) = work;
+    (x.clamp(wx + GAP, (wx + ww - w - GAP).max(wx + GAP)), y.clamp(wy + GAP, (wy + wh - h - GAP).max(wy + GAP)))
+}
+
+/// Where a panel of `size` goes for `anchor`, inside the work area: the root opens away from the taskbar / menu bar the
+/// click is near, a submenu beside its parent (flipped left at the screen edge), a pinned panel at its spot.
+pub fn place_menu(anchor: Anchor, size: (f64, f64), work: Rect) -> (f64, f64) {
+    let (w, h) = size;
+    let (wx, wy, ww, wh) = work;
+    let (x, y) = match anchor {
+        Anchor::Point { x, y } => (if x + w > wx + ww { x - w } else { x }, if y + h > wy + wh { y - h } else { y }),
+        Anchor::Beside { left, right, top } => (if right + w <= wx + ww - GAP { right - 2.0 } else { left - w + 2.0 }, top - 5.0),
+        Anchor::At { x, y } => (x, y),
+    };
+    clamp_into(x, y, w, h, work)
+}
+
+pub fn overlaps(a: Rect, b: Rect) -> bool {
+    a.0 < b.0 + b.2 && b.0 < a.0 + a.2 && a.1 < b.1 + b.3 && b.1 < a.1 + a.3
+}
+
+/// A spot for a newly pinned panel that covers no other pinned panel: below whatever it overlaps, then the next column.
+/// Gives up after a while (a screen full of pins) and returns the clamped wish.
+pub fn free_spot(want: Rect, others: &[Rect], work: Rect) -> (f64, f64) {
+    let (mut x, mut y, w, h) = want;
+    for _ in 0..64 {
+        let Some(hit) = others.iter().find(|o| overlaps((x, y, w, h), **o)) else {
+            return clamp_into(x, y, w, h, work);
+        };
+        y = hit.1 + hit.3 + GAP;
+        if y + h > work.1 + work.3 {
+            y = work.1 + GAP;
+            x += w + GAP;
+            if x + w > work.0 + work.2 {
+                x = work.0 + GAP;
+            }
+        }
+    }
+    clamp_into(want.0, want.1, w, h, work)
+}
+
+// ---------------------------------------------------------------- panel book
+
+#[derive(Clone, Debug, PartialEq)]
+pub struct Panel {
+    pub path: Vec<String>,
+    pub pinned: bool,
+    pub parent: Option<String>,
+    pub anchor: Anchor,
+    /// Measured and shown once.
+    pub shown: bool,
+    /// Physical top-left once shown (kept for pins).
+    pub pos: Option<(f64, f64)>,
+    /// Opened from the keyboard: takes focus and starts on its first row.
+    pub focus: bool,
+}
+
+/// A pinned panel as state.json keeps it (`menuPins`).
+#[derive(Serialize, Deserialize, Clone, Debug, PartialEq, Eq)]
+pub struct PinRecord {
+    pub path: Vec<String>,
+    pub x: i32,
+    pub y: i32,
+}
+
+/// Which panels are open, which are pinned, who is whose child.
+#[derive(Default, Debug)]
+pub struct Book {
+    pub panels: BTreeMap<String, Panel>,
+    next: u32,
+}
+
+impl Book {
+    fn add(&mut self, path: Vec<String>, pinned: bool, parent: Option<String>, anchor: Anchor) -> String {
+        self.next += 1;
+        let label = format!("{LABEL_PREFIX}{}", self.next);
+        self.panels.insert(label.clone(), Panel { path, pinned, parent, anchor, shown: false, pos: None, focus: false });
+        label
+    }
+
+    fn remove_all(&mut self, labels: &[String]) {
+        for l in labels {
+            self.panels.remove(l);
+        }
+    }
+
+    pub fn transient(&self) -> Vec<String> {
+        self.panels.iter().filter(|(_, p)| !p.pinned).map(|(l, _)| l.clone()).collect()
+    }
+
+    /// Transient panels below `label` (children first).
+    pub fn descendants(&self, label: &str) -> Vec<String> {
+        let mut out = Vec::new();
+        let mut frontier = vec![label.to_string()];
+        while let Some(l) = frontier.pop() {
+            for (child, p) in &self.panels {
+                if p.parent.as_deref() == Some(l.as_str()) && !p.pinned && !out.contains(child) {
+                    out.push(child.clone());
+                    frontier.push(child.clone());
+                }
+            }
+        }
+        out
+    }
+
+    /// A fresh root menu: every transient panel closes, pinned ones stay. Returns the new label and the closed ones.
+    pub fn open_root(&mut self, anchor: Anchor) -> (String, Vec<String>) {
+        let closes = self.transient();
+        self.remove_all(&closes);
+        (self.add(vec![], false, None, anchor), closes)
+    }
+
+    /// Opens submenu `key` of `parent`; its other transient children close. None when that submenu already is the open
+    /// child, or the parent is gone. `pinned`: torn off as its own pinned panel (one pinned copy per submenu).
+    pub fn open_sub(&mut self, parent: &str, key: &str, anchor: Anchor, pinned: bool) -> Option<(String, Vec<String>)> {
+        let mut path = self.panels.get(parent)?.path.clone();
+        path.push(key.to_string());
+        if !pinned && self.panels.values().any(|p| p.parent.as_deref() == Some(parent) && !p.pinned && p.path == path) {
+            return None;
+        }
+        let mut closes = self.descendants(parent);
+        self.remove_all(&closes);
+        if pinned {
+            let old: Vec<String> = self.panels.iter().filter(|(_, p)| p.pinned && p.path == path).map(|(l, _)| l.clone()).collect();
+            for l in old {
+                closes.extend(self.close(&l));
+            }
+            return Some((self.add(path, true, None, anchor), closes));
+        }
+        Some((self.add(path, false, Some(parent.to_string()), anchor), closes))
+    }
+
+    /// Closes `label` and its transient children.
+    pub fn close(&mut self, label: &str) -> Vec<String> {
+        if !self.panels.contains_key(label) {
+            return vec![];
+        }
+        let mut out = self.descendants(label);
+        out.push(label.to_string());
+        self.remove_all(&out);
+        out
+    }
+
+    /// Every transient panel closes (Esc on the root, a pick, focus left the menus).
+    pub fn dismiss(&mut self) -> Vec<String> {
+        let t = self.transient();
+        self.remove_all(&t);
+        t
+    }
+
+    /// Pin or unpin. Pinning detaches the panel from its chain: the transient panels that are not its own children
+    /// close (returned). A second pinned copy of the same submenu closes too.
+    pub fn pin(&mut self, label: &str, on: bool) -> Vec<String> {
+        let Some(p) = self.panels.get(label) else { return vec![] };
+        let path = p.path.clone();
+        if !on {
+            if let Some(p) = self.panels.get_mut(label) {
+                p.pinned = false;
+            }
+            return vec![];
+        }
+        let mut closes: Vec<String> = self.panels.iter().filter(|(l, p)| p.pinned && p.path == path && l.as_str() != label).map(|(l, _)| l.clone()).collect();
+        if let Some(p) = self.panels.get_mut(label) {
+            p.pinned = true;
+            p.parent = None;
+        }
+        let mine = self.descendants(label);
+        closes.extend(self.transient().into_iter().filter(|l| l != label && !mine.contains(l)));
+        self.remove_all(&closes);
+        closes
+    }
+
+    /// The tree changed: transient panels whose submenu is gone close (with their children). Pinned ones stay and show
+    /// that their submenu is gone until it comes back (an app that is read again) or they are closed.
+    pub fn prune(&mut self, nodes: &[Node]) -> Vec<String> {
+        let gone: Vec<String> = self.panels.iter().filter(|(_, p)| !p.pinned && find(nodes, &p.path).is_none()).map(|(l, _)| l.clone()).collect();
+        let mut out = Vec::new();
+        for l in gone {
+            if self.panels.contains_key(&l) {
+                out.extend(self.close(&l));
+            }
+        }
+        out
+    }
+
+    /// The pinned panels to save (only placed ones; in label order, so the order is stable).
+    pub fn pins(&self) -> Vec<PinRecord> {
+        self.panels
+            .values()
+            .filter(|p| p.pinned)
+            .filter_map(|p| p.pos.map(|(x, y)| PinRecord { path: p.path.clone(), x: x.round() as i32, y: y.round() as i32 }))
+            .collect()
+    }
+
+    /// Recreates pinned panels from a saved list (duplicates and more than `MAX_PINS` dropped).
+    pub fn restore(&mut self, pins: &[PinRecord]) -> Vec<String> {
+        let mut out = Vec::new();
+        for r in pins.iter().take(MAX_PINS) {
+            if self.panels.values().any(|p| p.pinned && p.path == r.path) || r.path.len() > 8 {
+                continue;
+            }
+            let (x, y) = (r.x as f64, r.y as f64);
+            let l = self.add(r.path.clone(), true, None, Anchor::At { x, y });
+            if let Some(p) = self.panels.get_mut(&l) {
+                p.pos = Some((x, y));
+            }
+            out.push(l);
+        }
+        out
+    }
+}
+
+/// At most this many pinned panels are restored after a restart.
+pub const MAX_PINS: usize = 12;
+
+/// A panel label the app made (`menu-` and a number), for the window / command checks.
+pub fn is_menu_label(label: &str) -> bool {
+    label.strip_prefix(LABEL_PREFIX).is_some_and(|n| !n.is_empty() && n.len() <= 9 && n.chars().all(|c| c.is_ascii_digit()))
+}
+
+// ---------------------------------------------------------------- runtime
+
+#[derive(Serialize, Clone, Debug)]
+#[serde(rename_all = "camelCase")]
+pub struct PanelInfo {
+    pub label: String,
+    pub path: Vec<String>,
+    pub pinned: bool,
+    pub has_parent: bool,
+    pub focus_first: bool,
+    pub nodes: Vec<Node>,
+}
+
+/// The panels' shared state (managed by the app).
+#[derive(Default)]
+pub struct MenuPanels {
+    pub book: Mutex<Book>,
+    pub nodes: Mutex<Vec<Node>>,
+    /// The native menu took over (a panel failed, or Linux).
+    pub native: AtomicBool,
+    /// Bumped on every move of a pinned panel; the save runs once the moves stop.
+    moves: AtomicU64,
+}
+
+#[cfg(desktop)]
+mod runtime {
+    use super::*;
+    use tauri::{AppHandle, Emitter, Manager, PhysicalPosition, PhysicalSize, WebviewUrl, WebviewWindow, WebviewWindowBuilder};
+
+    fn state(app: &AppHandle) -> tauri::State<'_, MenuPanels> {
+        app.state::<MenuPanels>()
+    }
+
+    fn book<R>(app: &AppHandle, f: impl FnOnce(&mut Book) -> R) -> R {
+        let s = state(app);
+        let mut b = s.book.lock().unwrap_or_else(|e| e.into_inner());
+        f(&mut b)
+    }
+
+    fn nodes(app: &AppHandle) -> Vec<Node> {
+        state(app).nodes.lock().map(|n| n.clone()).unwrap_or_default()
+    }
+
+    pub fn native_fallback(app: &AppHandle) -> bool {
+        state(app).native.load(Ordering::Relaxed)
+    }
+
+    /// Puts the native menu (from the current tree) on the tray: the fallback, and Linux.
+    pub fn set_native(app: &AppHandle) {
+        let Some(tray) = app.tray_by_id("main") else { return };
+        match crate::tray::native_menu(app, &nodes(app)) {
+            Ok(m) => {
+                let _ = tray.set_menu(Some(m));
+            }
+            Err(e) => crate::logs::host("warn", &format!("native tray menu not built: {e}")),
+        }
+    }
+
+    /// Writes the pinned panels into state.json (`menuPins`).
+    fn save_pins(app: &AppHandle) {
+        let pins = book(app, |b| b.pins());
+        let Some(s) = app.try_state::<crate::commands::AppState>() else { return };
+        let Ok(mut st) = s.saved.lock() else { return };
+        if st.menu_pins == pins {
+            return;
+        }
+        st.menu_pins = pins;
+        if let Err(e) = crate::store::save(&s.data_dir, &st) {
+            crate::logs::host("warn", &format!("menu pins not saved: {e}"));
+        }
+    }
+
+    /// Stores the latest tree and pushes it to every open panel (they update in place). Panels of a submenu that is gone
+    /// close when transient. Cheap when nothing changed or no panel is open.
+    pub fn set_nodes(app: &AppHandle, next: Vec<Node>) {
+        let changed = {
+            let s = state(app);
+            let mut g = s.nodes.lock().unwrap_or_else(|e| e.into_inner());
+            let changed = *g != next;
+            *g = next.clone();
+            changed
+        };
+        if !changed {
+            return;
+        }
+        let (closes, open) = book(app, |b| (b.prune(&next), b.panels.keys().cloned().collect::<Vec<_>>()));
+        destroy(app, &closes);
+        for l in open {
+            let _ = app.emit_to(l.as_str(), MODEL_EVENT, &next);
+        }
+        if native_fallback(app) {
+            set_native(app);
+        }
+    }
+
+    fn destroy(app: &AppHandle, labels: &[String]) {
+        for l in labels {
+            if let Some(w) = app.get_webview_window(l) {
+                let _ = w.destroy();
+            }
+        }
+    }
+
+    fn build_window(app: &AppHandle, label: &str) -> tauri::Result<WebviewWindow> {
+        let b = WebviewWindowBuilder::new(app, label, WebviewUrl::App(PAGE.into()))
+            .title("storebound")
+            .inner_size(EST.0, EST.1)
+            .decorations(false)
+            .always_on_top(true)
+            .skip_taskbar(true)
+            .resizable(false)
+            .shadow(true)
+            .visible(false)
+            .focused(false);
+        #[cfg(not(target_os = "macos"))]
+        let b = b.transparent(true);
+        let window = b.build()?;
+        #[cfg(target_os = "macos")]
+        let _ = window.set_visible_on_all_workspaces(true);
+        let handle = app.clone();
+        let me = label.to_string();
+        window.on_window_event(move |event| match event {
+            tauri::WindowEvent::Focused(false) => {
+                let handle = handle.clone();
+                std::thread::spawn(move || {
+                    std::thread::sleep(Duration::from_millis(160));
+                    close_transient_unless_focused(&handle);
+                });
+            }
+            tauri::WindowEvent::Moved(pos) => {
+                let pinned = book(&handle, |b| match b.panels.get_mut(&me) {
+                    Some(p) if p.shown => {
+                        p.pos = Some((pos.x as f64, pos.y as f64));
+                        p.pinned
+                    }
+                    _ => false,
+                });
+                if pinned {
+                    // a drag sends many moves: save once they stop
+                    let n = state(&handle).moves.fetch_add(1, Ordering::Relaxed) + 1;
+                    let handle = handle.clone();
+                    std::thread::spawn(move || {
+                        std::thread::sleep(Duration::from_millis(400));
+                        if state(&handle).moves.load(Ordering::Relaxed) == n {
+                            save_pins(&handle);
+                        }
+                    });
+                }
+            }
+            _ => {}
+        });
+        Ok(window)
+    }
+
+    /// Focus left a menu window: every transient panel closes unless one of them has focus now.
+    fn close_transient_unless_focused(app: &AppHandle) {
+        let transient = book(app, |b| b.transient());
+        if transient.iter().any(|l| app.get_webview_window(l).and_then(|w| w.is_focused().ok()).unwrap_or(false)) {
+            return;
+        }
+        book(app, |b| {
+            for l in &transient {
+                b.panels.remove(l);
+            }
+        });
+        destroy(app, &transient);
+    }
+
+    /// The panels cannot be shown: the native menu goes on the tray and opens once now.
+    fn native_popup(app: &AppHandle) {
+        if !state(app).native.swap(true, Ordering::Relaxed) {
+            crate::logs::host("warn", "tray menu panels unavailable: the native menu is used");
+        }
+        set_native(app);
+        let handle = app.clone();
+        let _ = app.run_on_main_thread(move || {
+            if let (Some(w), Ok(menu)) = (handle.get_webview_window(crate::policy::MAIN), crate::tray::native_menu(&handle, &nodes(&handle))) {
+                let _ = w.popup_menu(&menu);
+            }
+        });
+    }
+
+    /// A right click on the tray icon: a fresh root menu at the click point (physical px).
+    pub fn open_root(app: &AppHandle, x: f64, y: f64) {
+        if native_fallback(app) {
+            return; // the native menu is on the tray and opens by itself
+        }
+        let (label, closes) = book(app, |b| b.open_root(Anchor::Point { x, y }));
+        destroy(app, &closes);
+        let handle = app.clone();
+        std::thread::spawn(move || {
+            if let Err(e) = build_window(&handle, &label) {
+                crate::logs::host("warn", &format!("tray menu panel not built: {e}"));
+                book(&handle, |b| b.panels.remove(&label));
+                native_popup(&handle);
+                return;
+            }
+            std::thread::sleep(Duration::from_millis(2500));
+            if book(&handle, |b| b.panels.get(&label).map(|p| p.shown)) == Some(false) {
+                crate::logs::host("warn", "tray menu panel never reported ready");
+                let closes = book(&handle, |b| b.close(&label));
+                destroy(&handle, &closes);
+                native_popup(&handle);
+            }
+        });
+    }
+
+    /// Brings back the pinned panels of the last session (state.json `menuPins`).
+    pub fn restore(app: &AppHandle) {
+        let pins = app.try_state::<crate::commands::AppState>().and_then(|s| s.saved.lock().ok().map(|st| st.menu_pins.clone())).unwrap_or_default();
+        if pins.is_empty() || native_fallback(app) {
+            return;
+        }
+        let labels = book(app, |b| b.restore(&pins));
+        let handle = app.clone();
+        std::thread::spawn(move || {
+            for l in labels {
+                if build_window(&handle, &l).is_err() {
+                    book(&handle, |b| b.panels.remove(&l));
+                }
+            }
+        });
+    }
+
+    fn work_area(app: &AppHandle, x: f64, y: f64) -> Option<Rect> {
+        let m = app.monitor_from_point(x, y).ok().flatten().or_else(|| app.primary_monitor().ok().flatten())?;
+        let w = m.work_area();
+        Some((w.position.x as f64, w.position.y as f64, w.size.width as f64, w.size.height as f64))
+    }
+
+    fn anchor_point(a: Anchor) -> (f64, f64) {
+        match a {
+            Anchor::Point { x, y } | Anchor::At { x, y } => (x, y),
+            Anchor::Beside { right, top, .. } => (right, top),
+        }
+    }
+
+    fn outer_rect(w: &WebviewWindow) -> Option<Rect> {
+        let p = w.outer_position().ok()?;
+        let s = w.outer_size().ok()?;
+        Some((p.x as f64, p.y as f64, s.width as f64, s.height as f64))
+    }
+
+    fn pinned_rects(app: &AppHandle, skip: &str) -> Vec<Rect> {
+        let labels: Vec<String> = book(app, |b| b.panels.iter().filter(|(l, p)| p.pinned && l.as_str() != skip).map(|(l, _)| l.clone()).collect());
+        labels.iter().filter_map(|l| app.get_webview_window(l).and_then(|w| outer_rect(&w))).collect()
+    }
+
+    // ---- what the panel page calls (commands.rs checks the window first) ----
+
+    pub fn panel_state(window: &WebviewWindow) -> Option<PanelInfo> {
+        let app = window.app_handle();
+        let p = book(app, |b| b.panels.get(window.label()).cloned())?;
+        Some(PanelInfo { label: window.label().into(), path: p.path, pinned: p.pinned, has_parent: p.parent.is_some(), focus_first: p.focus, nodes: nodes(app) })
+    }
+
+    /// The panel measured itself (CSS px): size it, place it inside the work area, show it the first time.
+    pub fn ready(window: &WebviewWindow, width: f64, height: f64) {
+        let app = window.app_handle().clone();
+        let Some(panel) = book(&app, |b| b.panels.get(window.label()).cloned()) else { return };
+        let scale = window.scale_factor().unwrap_or(1.0);
+        let size = ((width.clamp(120.0, 600.0) * scale).ceil(), (height.clamp(40.0, 900.0) * scale).ceil());
+        let (ax, ay) = panel.pos.unwrap_or_else(|| anchor_point(panel.anchor));
+        let Some(work) = work_area(&app, ax, ay) else { return };
+        let (x, y) = if panel.shown {
+            let (x, y, _, _) = outer_rect(window).unwrap_or((ax, ay, 0.0, 0.0));
+            clamp_into(x, y, size.0, size.1, work)
+        } else if let Some((x, y)) = panel.pos {
+            clamp_into(x, y, size.0, size.1, work)
+        } else {
+            place_menu(panel.anchor, size, work)
+        };
+        let _ = window.set_size(PhysicalSize::new(size.0 as u32, size.1 as u32));
+        let _ = window.set_position(PhysicalPosition::new(x as i32, y as i32));
+        if !panel.shown {
+            book(&app, |b| {
+                if let Some(p) = b.panels.get_mut(window.label()) {
+                    p.shown = true;
+                    p.pos = Some((x, y));
+                }
+            });
+            let _ = window.show();
+            if panel.focus || (panel.parent.is_none() && !panel.pinned) {
+                let _ = window.set_focus();
+            }
+            if panel.pinned {
+                save_pins(&app);
+            }
+        }
+    }
+
+    /// Opens submenu `key` beside this panel at the row whose top is `top` (CSS px). `pinned`: torn off (Ctrl / middle
+    /// click), placed so it covers no other pinned panel.
+    pub fn open_sub(window: &WebviewWindow, key: &str, top: f64, focus: bool, pinned: bool) {
+        let app = window.app_handle().clone();
+        let Some((wx, wy, ww, _)) = outer_rect(window) else { return };
+        let scale = window.scale_factor().unwrap_or(1.0);
+        let anchor = Anchor::Beside { left: wx, right: wx + ww, top: wy + top.max(0.0) * scale };
+        let Some((label, closes)) = book(&app, |b| b.open_sub(window.label(), key, anchor, pinned)) else { return };
+        destroy(&app, &closes);
+        if pinned {
+            let others = pinned_rects(&app, &label);
+            if let Some(work) = work_area(&app, wx, wy) {
+                let est = (EST.0 * scale, EST.1 * scale);
+                let (x, y) = place_menu(anchor, est, work);
+                let spot = free_spot((x, y, est.0, est.1), &others, work);
+                book(&app, |b| {
+                    if let Some(p) = b.panels.get_mut(&label) {
+                        p.pos = Some(spot);
+                    }
+                });
+            }
+        }
+        book(&app, |b| {
+            if let Some(p) = b.panels.get_mut(&label) {
+                p.focus = focus;
+            }
+        });
+        let handle = app.clone();
+        std::thread::spawn(move || {
+            if build_window(&handle, &label).is_err() {
+                book(&handle, |b| b.panels.remove(&label));
+            }
+        });
+    }
+
+    /// The pointer moved to a plain row: this panel's transient submenus close.
+    pub fn close_subs(window: &WebviewWindow) {
+        let app = window.app_handle().clone();
+        let closes = book(&app, |b| {
+            let d = b.descendants(window.label());
+            for l in &d {
+                b.panels.remove(l);
+            }
+            d
+        });
+        destroy(&app, &closes);
+    }
+
+    /// Closes this panel (Left / Esc in a submenu, X on a pinned one).
+    pub fn close(window: &WebviewWindow, refocus_parent: bool) {
+        let app = window.app_handle().clone();
+        let (closes, parent, was_pinned) = book(&app, |b| {
+            let p = b.panels.get(window.label()).cloned();
+            (b.close(window.label()), p.as_ref().and_then(|p| p.parent.clone()), p.is_some_and(|p| p.pinned))
+        });
+        if refocus_parent {
+            if let Some(w) = parent.and_then(|p| app.get_webview_window(&p)) {
+                let _ = w.set_focus();
+                let _ = app.emit_to(w.label(), PANEL_EVENT, "focus");
+            }
+        }
+        destroy(&app, &closes);
+        if was_pinned {
+            save_pins(&app);
+        }
+    }
+
+    /// Esc on the root menu: every transient panel closes.
+    pub fn dismiss(app: &AppHandle) {
+        let closes = book(app, |b| b.dismiss());
+        destroy(app, &closes);
+    }
+
+    /// Pin or unpin this panel. Pinning steps it aside from the other pinned panels.
+    pub fn pin(window: &WebviewWindow, on: bool) {
+        let app = window.app_handle().clone();
+        let label = window.label().to_string();
+        let closes = book(&app, |b| b.pin(&label, on));
+        destroy(&app, &closes);
+        if on {
+            let others = pinned_rects(&app, &label);
+            if let Some(me) = outer_rect(window) {
+                if let Some(work) = work_area(&app, me.0, me.1) {
+                    let (x, y) = free_spot(me, &others, work);
+                    if (x, y) != (me.0, me.1) {
+                        let _ = window.set_position(PhysicalPosition::new(x as i32, y as i32));
+                    }
+                    book(&app, |b| {
+                        if let Some(p) = b.panels.get_mut(&label) {
+                            p.pos = Some((x, y));
+                        }
+                    });
+                }
+            }
+        }
+        let _ = app.emit_to(label.as_str(), PANEL_EVENT, if on { "pinned" } else { "unpinned" });
+        save_pins(&app);
+    }
+
+    /// A pick: the same action as the native menu. Transient panels close; pinned ones stay and update in place.
+    pub fn select(window: &WebviewWindow, id: String) {
+        let app = window.app_handle().clone();
+        let pinned = book(&app, |b| b.panels.get(window.label()).map(|p| p.pinned).unwrap_or(false));
+        if !pinned {
+            dismiss(&app);
+        }
+        let handle = app.clone();
+        let _ = app.run_on_main_thread(move || crate::dispatch_menu(&handle, &id));
+    }
+}
+
+#[cfg(desktop)]
+pub use runtime::*;
diff --git a/apps/desktop/src-tauri/src/policy.rs b/apps/desktop/src-tauri/src/policy.rs
index 8d6cfff..3381956 100644
--- a/apps/desktop/src-tauri/src/policy.rs
+++ b/apps/desktop/src-tauri/src/policy.rs
@@ -56,6 +56,17 @@ pub fn require_card(label: &str, url: &Url, dev: bool) -> Result<(), String> {
     Ok(())
 }
 
+/// The tray menu panels (`menu-1`, `menu-2`... menu_panel.rs): they may call only the menu commands.
+pub fn require_menu(label: &str, url: &Url, dev: bool) -> Result<(), String> {
+    if !crate::menu_panel::is_menu_label(label) {
+        return Err(format!("not allowed from window '{label}'"));
+    }
+    if !is_local_origin(url, dev) {
+        return Err("not allowed from this page".into());
+    }
+    Ok(())
+}
+
 /// Method kinds the sidecar announces in its `session.hello` descriptors.
 #[derive(Debug, Clone, Copy, PartialEq, Eq)]
 pub enum Kind {
diff --git a/apps/desktop/src-tauri/src/store.rs b/apps/desktop/src-tauri/src/store.rs
index 5d2c567..f999653 100644
--- a/apps/desktop/src-tauri/src/store.rs
+++ b/apps/desktop/src-tauri/src/store.rs
@@ -45,11 +45,14 @@ pub struct State {
     pub overrides: Overrides,
     #[serde(default)]
     pub settings: Settings,
+    /// Pinned tray menu panels and where they sit (menu_panel.rs); restored at start.
+    #[serde(default, rename = "menuPins", skip_serializing_if = "Vec::is_empty")]
+    pub menu_pins: Vec<crate::menu_panel::PinRecord>,
 }
 
 impl Default for State {
     fn default() -> State {
-        State { version: VERSION, projects: vec![], accounts: vec![], studios: vec![], overrides: Overrides::default(), settings: Settings::default() }
+        State { version: VERSION, projects: vec![], accounts: vec![], studios: vec![], overrides: Overrides::default(), settings: Settings::default(), menu_pins: vec![] }
     }
 }
 
@@ -121,6 +124,7 @@ pub fn migrate(mut v: Value) -> (State, u32, Vec<String>) {
         studios: list(&o, "studios", &mut notes),
         overrides: one(&o, "overrides", &mut notes),
         settings: one(&o, "settings", &mut notes),
+        menu_pins: list(&o, "menuPins", &mut notes),
     };
     // two entries with one id (hand-edited or merged files): the first one wins
     let mut seen = std::collections::HashSet::new();
diff --git a/apps/desktop/src-tauri/src/tray.rs b/apps/desktop/src-tauri/src/tray.rs
index e3a653f..0b23b9f 100644
--- a/apps/desktop/src-tauri/src/tray.rs
+++ b/apps/desktop/src-tauri/src/tray.rs
@@ -1,7 +1,7 @@
 //! The tray: tooltip, attention icon, context menu and the "where to go" memory of the last notification.
 //!
 //! The window pushes a small summary after every store read (`tray_update`); this module turns it into a menu model
-//! (pure, tested in tests/tray.rs), rebuilds the menu, sets the tooltip and swaps the icon for one with a red dot while
+//! (pure, tested in tests/tray.rs), pushes it to the menu panels (menu_panel.rs), sets the tooltip and swaps the icon for one with a red dot while
 //! something needs the owner. Menu clicks come back as events to the window: `tray-route` (a route as JSON) and
 //! `tray-action` (`read`, `mute-toggle`).
 //!
@@ -14,7 +14,9 @@ use std::time::{Duration, Instant};
 use serde::Deserialize;
 use serde_json::Value;
 use tauri::image::Image;
-use tauri::menu::{Menu, MenuItem, PredefinedMenuItem, Submenu};
+use tauri::menu::{IsMenuItem, Menu, MenuItem, PredefinedMenuItem, Submenu};
+
+use crate::menu_panel::{from_entries, Node};
 use tauri::{AppHandle, Runtime};
 
 pub const ID_OPEN: &str = "tray-open";
@@ -88,7 +90,8 @@ pub struct TraySummary {
 pub enum Entry {
     Item { id: String, label: String, enabled: bool },
     Separator,
-    Sub { label: String, items: Vec<Entry> },
+    /// `key`: the submenu's fixed key (menu_panel::sub_key), the same in every language.
+    Sub { key: String, label: String, items: Vec<Entry> },
 }
 
 fn clean(s: &str, max: usize) -> String {
@@ -132,7 +135,7 @@ pub fn menu_model(s: &TraySummary) -> Vec<Entry> {
         item(ID_OPEN, &l.open),
         item(ID_READ, &l.read_now),
         Entry::Separator,
-        Entry::Sub { label: clean(&l.apps, 40), items: apps },
+        Entry::Sub { key: "apps".into(), label: clean(&l.apps, 40), items: apps },
         Entry::Separator,
         item(ID_MUTE, if s.muted { &l.unmute } else { &l.mute }),
         item(ID_UPDATE, &l.update),
@@ -233,40 +236,45 @@ pub fn take_pending() -> Option<String> {
 
 static LAST: Mutex<Option<String>> = Mutex::new(None);
 
-fn build_menu<R: Runtime>(app: &AppHandle<R>, model: &[Entry]) -> tauri::Result<Menu<R>> {
-    let menu = Menu::new(app)?;
-    for e in model {
-        match e {
-            Entry::Item { id, label, enabled } => menu.append(&MenuItem::with_id(app, id, label, *enabled, None::<&str>)?)?,
-            Entry::Separator => menu.append(&PredefinedMenuItem::separator(app)?)?,
-            Entry::Sub { label, items } => {
-                let sub = Submenu::new(app, label, true)?;
-                for it in items {
-                    if let Entry::Item { id, label, enabled } = it {
-                        sub.append(&MenuItem::with_id(app, id, label, *enabled, None::<&str>)?)?;
-                    }
-                }
-                menu.append(&sub)?;
+/// The native menu items for a panel tree (the fallback, and Linux), nested to any depth.
+fn native_items<R: Runtime>(app: &AppHandle<R>, nodes: &[Node]) -> tauri::Result<Vec<Box<dyn IsMenuItem<R>>>> {
+    let mut out: Vec<Box<dyn IsMenuItem<R>>> = Vec::new();
+    for n in nodes {
+        match n {
+            Node::Item { id, label, enabled } => out.push(Box::new(MenuItem::with_id(app, id, label, *enabled, None::<&str>)?)),
+            Node::Sep => out.push(Box::new(PredefinedMenuItem::separator(app)?)),
+            Node::Sub { label, items, .. } => {
+                let children = native_items(app, items)?;
+                let refs: Vec<&dyn IsMenuItem<R>> = children.iter().map(|b| b.as_ref()).collect();
+                out.push(Box::new(Submenu::with_items(app, label, true, &refs)?));
             }
         }
     }
-    Ok(menu)
+    Ok(out)
 }
 
-/// The menu shown before the window has sent anything (English words).
-pub fn initial_menu<R: Runtime>(app: &AppHandle<R>) -> tauri::Result<Menu<R>> {
-    build_menu(app, &menu_model(&TraySummary::default()))
+/// The native tray menu, rendered from the same tree as the panels.
+pub fn native_menu<R: Runtime>(app: &AppHandle<R>, nodes: &[Node]) -> tauri::Result<Menu<R>> {
+    let items = native_items(app, nodes)?;
+    let refs: Vec<&dyn IsMenuItem<R>> = items.iter().map(|b| b.as_ref()).collect();
+    Menu::with_items(app, &refs)
 }
 
-/// Applies a summary: tooltip, menu and icon of the tray with id `main`. Skips the work when nothing changed.
-pub fn apply<R: Runtime>(app: &AppHandle<R>, s: &TraySummary) -> tauri::Result<()> {
+/// The tree before the window has sent anything (English words).
+pub fn initial_nodes() -> Vec<Node> {
+    from_entries(&menu_model(&TraySummary::default()))
+}
+
+/// Applies a summary: tooltip and icon of the tray with id `main`, and the menu tree, which goes live to the open menu
+/// panels (and to the native menu when that is in use). Skips the work when nothing changed.
+pub fn apply(app: &AppHandle, s: &TraySummary) -> tauri::Result<()> {
     let Some(tray) = app.tray_by_id("main") else { return Ok(()) };
     let key = format!("{s:?}");
     if LAST.lock().ok().is_some_and(|l| l.as_deref() == Some(key.as_str())) {
         return Ok(());
     }
     tray.set_tooltip(Some(tooltip_text(s)))?;
-    tray.set_menu(Some(build_menu(app, &menu_model(s))?))?;
+    crate::menu_panel::set_nodes(app, from_entries(&menu_model(s)));
     if let Some(icon) = app.default_window_icon() {
         let img = if s.attention > 0 { Image::new_owned(with_attention_dot(icon.rgba(), icon.width(), icon.height()), icon.width(), icon.height()) } else { icon.clone() };
         tray.set_icon(Some(img))?;
diff --git a/apps/desktop/src-tauri/tauri.conf.json b/apps/desktop/src-tauri/tauri.conf.json
index c786df1..b95e93c 100644
--- a/apps/desktop/src-tauri/tauri.conf.json
+++ b/apps/desktop/src-tauri/tauri.conf.json
@@ -50,7 +50,7 @@
         "form-action": "'none'"
       },
       "freezePrototype": true,
-      "capabilities": ["main-window", "card-window"]
+      "capabilities": ["main-window", "card-window", "menu-window"]
     }
   },
   "bundle": {
diff --git a/apps/desktop/src-tauri/tests/menu_panel.rs b/apps/desktop/src-tauri/tests/menu_panel.rs
new file mode 100644
index 0000000..0f89878
--- /dev/null
+++ b/apps/desktop/src-tauri/tests/menu_panel.rs
@@ -0,0 +1,203 @@
+//! The tray menu panels' pure half: the tree and its stable keys, live updates, placement inside the work area, the
+//! panel book (transient vs pinned, parents, restore after a restart).
+use storebound_desktop::menu_panel::*;
+use storebound_desktop::store::State;
+use storebound_desktop::tray::{menu_model, Entry, TrayApp, TrayLabels, TraySummary};
+
+const WORK: Rect = (0.0, 0.0, 1920.0, 1040.0);
+const AT: Anchor = Anchor::At { x: 0.0, y: 0.0 };
+
+fn summary(state: &str, apps_label: &str) -> TraySummary {
+    TraySummary {
+        apps: vec![TrayApp { key: "k1".into(), name: "First".into(), state: state.into() }, TrayApp { key: "k2".into(), name: "Second".into(), state: String::new() }],
+        labels: TrayLabels { apps: apps_label.into(), ..TrayLabels::default() },
+        ..TraySummary::default()
+    }
+}
+
+fn tree() -> Vec<Node> {
+    from_entries(&[
+        Entry::Item { id: "open".into(), label: "Open".into(), enabled: true },
+        Entry::Separator,
+        Entry::Sub { key: String::new(), label: "Fleet".into(), items: vec![Entry::Sub { key: String::new(), label: "Recently lowered".into(), items: vec![] }] },
+        Entry::Sub { key: String::new(), label: "Profile: Work".into(), items: vec![] },
+    ])
+}
+
+#[test]
+fn keys_ignore_live_parts_and_stay_unique() {
+    assert_eq!(sub_key("Profile: Work"), "profile");
+    assert_eq!(sub_key("\u{25CF} First  \u{00B7}  ok"), "first");
+    assert_eq!(sub_key("Queue (1 running, 2 queued)"), "queue");
+    assert_eq!(sub_key("\u{2716}"), "sub");
+    let nodes = unique_keys(vec![Node::Sub { key: "a".into(), label: "A".into(), items: vec![] }, Node::Sub { key: "a".into(), label: "A".into(), items: vec![] }]);
+    assert!(matches!(&nodes[1], Node::Sub { key, .. } if key == "a-2"));
+}
+
+#[test]
+fn find_walks_keys() {
+    let t = tree();
+    let (items, label) = find(&t, &["fleet".into(), "recently-lowered".into()]).unwrap();
+    assert_eq!((items.len(), label), (0, Some("Recently lowered")));
+    assert!(find(&t, &["nope".into()]).is_none());
+    assert_eq!(find(&t, &[]).unwrap().0.len(), 4);
+}
+
+#[test]
+fn the_tray_tree_keeps_its_apps_key_in_every_language_and_value() {
+    let en = from_entries(&menu_model(&summary("App Store: In review", "Apps")));
+    let tr = from_entries(&menu_model(&summary("App Store: Live", "Uygulamalar")));
+    let key = |n: &[Node]| n.iter().find_map(|n| if let Node::Sub { key, .. } = n { Some(key.clone()) } else { None }).unwrap();
+    assert_eq!(key(&en), "apps");
+    assert_eq!(key(&tr), "apps");
+    // a live value changed: the tree differs (so it is pushed), the open Apps panel still resolves
+    assert_ne!(en, tr);
+    let (items, _) = find(&tr, &["apps".into()]).unwrap();
+    assert!(matches!(&items[0], Node::Item { id, label, .. } if id == "tray-app:k1" && label.contains("Live")));
+    // the same summary twice: the same tree (nothing is pushed)
+    assert_eq!(from_entries(&menu_model(&summary("x", "Apps"))), from_entries(&menu_model(&summary("x", "Apps"))));
+}
+
+#[test]
+fn the_tree_serializes_as_the_panel_page_reads_it() {
+    let v = serde_json::to_value(tree()).unwrap();
+    assert_eq!(v[0], serde_json::json!({ "kind": "item", "id": "open", "label": "Open", "enabled": true }));
+    assert_eq!(v[1], serde_json::json!({ "kind": "sep" }));
+    assert_eq!(v[2]["kind"], "sub");
+    assert_eq!(v[2]["key"], "fleet");
+}
+
+#[test]
+fn root_opens_away_from_the_taskbar_and_stays_inside() {
+    // bottom taskbar, icon at the right: above and left of the click
+    let (x, y) = place_menu(Anchor::Point { x: 1900.0, y: 1060.0 }, (300.0, 400.0), WORK);
+    assert!(x + 300.0 <= 1920.0 - GAP && y + 400.0 <= 1040.0 - GAP && x >= 0.0 && y >= 0.0);
+    // macOS menu bar at the top: below it
+    let (_, y) = place_menu(Anchor::Point { x: 1800.0, y: 0.0 }, (300.0, 400.0), (0.0, 25.0, 1920.0, 1055.0));
+    assert!(y >= 25.0 + GAP);
+    // a second monitor left of the primary (negative x)
+    let (x, _) = place_menu(Anchor::Point { x: -10.0, y: 500.0 }, (300.0, 400.0), (-1920.0, 0.0, 1920.0, 1080.0));
+    assert!(x + 300.0 <= -GAP + 0.001 && x >= -1920.0);
+    // a panel taller than the work area: pinned to the top edge, never above it
+    let (_, y) = place_menu(Anchor::Point { x: 100.0, y: 100.0 }, (300.0, 2000.0), WORK);
+    assert_eq!(y, GAP);
+}
+
+#[test]
+fn submenus_open_beside_and_flip_left_at_the_edge() {
+    let (x, _) = place_menu(Anchor::Beside { left: 1600.0, right: 1880.0, top: 100.0 }, (280.0, 200.0), WORK);
+    assert!(x + 280.0 <= 1602.0);
+    let (x, y) = place_menu(Anchor::Beside { left: 100.0, right: 380.0, top: 100.0 }, (280.0, 200.0), WORK);
+    assert!((378.0..=380.0).contains(&x) && (90.0..=100.0).contains(&y));
+    // a row near the bottom: the submenu moves up into the work area
+    let (_, y) = place_menu(Anchor::Beside { left: 100.0, right: 380.0, top: 1000.0 }, (280.0, 300.0), WORK);
+    assert!(y + 300.0 <= 1040.0 - GAP);
+}
+
+#[test]
+fn pinned_panels_step_aside_and_stay_inside() {
+    let others = [(100.0, 100.0, 280.0, 300.0), (100.0, 408.0, 280.0, 300.0)];
+    let (x, y) = free_spot((120.0, 120.0, 280.0, 300.0), &others, WORK);
+    assert!(others.iter().all(|o| !overlaps((x, y, 280.0, 300.0), *o)));
+    assert!(x >= 0.0 && y >= 0.0 && x + 280.0 <= 1920.0 && y + 300.0 <= 1040.0);
+    // no room left below: the next column
+    let col = [(8.0, 8.0, 280.0, 1000.0)];
+    let (x, _) = free_spot((8.0, 8.0, 280.0, 300.0), &col, WORK);
+    assert!(x >= 288.0);
+    // nothing in the way: where it was
+    assert_eq!(free_spot((500.0, 500.0, 280.0, 300.0), &others, WORK), (500.0, 500.0));
+}
+
+#[test]
+fn several_menus_open_and_pinned_ones_survive_a_new_menu() {
+    let mut b = Book::default();
+    let (root, _) = b.open_root(Anchor::Point { x: 0.0, y: 0.0 });
+    let (fleet, _) = b.open_sub(&root, "fleet", AT, false).unwrap();
+    assert!(b.open_sub(&root, "fleet", AT, false).is_none(), "the same submenu again is a no-op");
+    let (deep, _) = b.open_sub(&fleet, "recently-lowered", AT, false).unwrap();
+    assert_eq!(b.descendants(&root).len(), 2);
+    // pinning the Fleet panel detaches it; the root closes, its own child stays its own
+    let closes = b.pin(&fleet, true);
+    assert_eq!(closes, vec![root.clone()]);
+    assert!(b.panels[&fleet].pinned && b.panels[&fleet].parent.is_none());
+    assert_eq!(b.descendants(&fleet), vec![deep.clone()]);
+    let (root2, closes) = b.open_root(Anchor::Point { x: 0.0, y: 0.0 });
+    assert_eq!(closes, vec![deep]);
+    assert!(b.panels.contains_key(&fleet));
+    assert_eq!(b.transient(), vec![root2.clone()]);
+    // a pick / Esc: transient panels go, the pinned one stays
+    assert_eq!(b.dismiss(), vec![root2]);
+    assert_eq!(b.panels.len(), 1);
+    // unpinned, it behaves like a menu again and goes with the next one
+    b.pin(&fleet, false);
+    let (_, closes) = b.open_root(Anchor::Point { x: 0.0, y: 0.0 });
+    assert!(closes.contains(&fleet));
+}
+
+#[test]
+fn a_torn_off_submenu_keeps_one_pinned_copy() {
+    let mut b = Book::default();
+    let (root, _) = b.open_root(Anchor::Point { x: 0.0, y: 0.0 });
+    let (p1, _) = b.open_sub(&root, "fleet", AT, true).unwrap();
+    let (p2, closes) = b.open_sub(&root, "fleet", AT, true).unwrap();
+    assert!(closes.contains(&p1) && b.panels[&p2].pinned && !b.panels.contains_key(&p1));
+    assert_eq!(b.panels[&p2].path, vec!["fleet".to_string()]);
+    // the root stays open (a tear-off is not a pick)
+    assert!(b.panels.contains_key(&root));
+    // closing a panel that is already gone does nothing
+    assert!(b.close("menu-99").is_empty());
+}
+
+#[test]
+fn a_live_update_closes_nothing_that_still_exists() {
+    let mut b = Book::default();
+    let (root, _) = b.open_root(Anchor::Point { x: 0.0, y: 0.0 });
+    let (profile, _) = b.open_sub(&root, "profile", AT, true).unwrap();
+    let (fleet, _) = b.open_sub(&root, "fleet", AT, false).unwrap();
+    assert!(b.prune(&tree()).is_empty());
+    // the Fleet submenu is gone from the tree: its transient panel closes, the pinned Profile panel stays even when its
+    // submenu goes too (it shows that it is gone)
+    let smaller = from_entries(&[Entry::Item { id: "open".into(), label: "Open".into(), enabled: true }]);
+    assert_eq!(b.prune(&smaller), vec![fleet]);
+    assert!(b.panels.contains_key(&root) && b.panels.contains_key(&profile));
+}
+
+#[test]
+fn pins_are_saved_in_the_state_and_restored_after_a_restart() {
+    let mut b = Book::default();
+    let (root, _) = b.open_root(Anchor::Point { x: 0.0, y: 0.0 });
+    let (p, _) = b.open_sub(&root, "apps", AT, true).unwrap();
+    // not placed yet: nothing to save
+    assert!(b.pins().is_empty());
+    b.panels.get_mut(&p).unwrap().pos = Some((40.4, 50.6));
+    let pins = b.pins();
+    assert_eq!(pins, vec![PinRecord { path: vec!["apps".into()], x: 40, y: 51 }]);
+    // through state.json
+    let st = State { menu_pins: pins.clone(), ..State::default() };
+    let text = serde_json::to_string(&st).unwrap();
+    assert!(text.contains("\"menuPins\""));
+    let back: State = serde_json::from_str(&text).unwrap();
+    assert_eq!(back.menu_pins, pins);
+    // an empty list is not written at all (older files stay as they were)
+    assert!(!serde_json::to_string(&State::default()).unwrap().contains("menuPins"));
+    let mut fresh = Book::default();
+    let mut saved = back.menu_pins.clone();
+    saved.push(saved[0].clone()); // a duplicate is dropped
+    let labels = fresh.restore(&saved);
+    assert_eq!(labels.len(), 1);
+    let r = &fresh.panels[&labels[0]];
+    assert!(r.pinned && r.path == vec!["apps".to_string()] && r.pos == Some((40.0, 51.0)) && r.parent.is_none());
+    // a restored pin survives the next menu
+    let (_, closes) = fresh.open_root(Anchor::Point { x: 0.0, y: 0.0 });
+    assert!(closes.is_empty());
+    let many: Vec<PinRecord> = (0..40).map(|i| PinRecord { path: vec![format!("s{i}")], x: 0, y: 0 }).collect();
+    assert_eq!(Book::default().restore(&many).len(), MAX_PINS);
+}
+
+#[test]
+fn panel_labels_are_menu_and_a_number() {
+    assert!(is_menu_label("menu-1") && is_menu_label("menu-204"));
+    for bad in ["menu-", "menu-a", "card", "main", "menu-1-2", "xmenu-1"] {
+        assert!(!is_menu_label(bad), "{bad}");
+    }
+}
diff --git a/apps/desktop/src-tauri/tests/security.rs b/apps/desktop/src-tauri/tests/security.rs
index 1d31b45..6c6c4c6 100644
--- a/apps/desktop/src-tauri/tests/security.rs
+++ b/apps/desktop/src-tauri/tests/security.rs
@@ -6,7 +6,7 @@ use std::path::{Path, PathBuf};
 
 use serde_json::{json, Value};
 use storebound_desktop::policy::*;
-use storebound_desktop::{CARD_COMMANDS, COMMANDS};
+use storebound_desktop::{CARD_COMMANDS, COMMANDS, MENU_COMMANDS};
 use url::Url;
 
 fn root() -> PathBuf {
@@ -26,7 +26,7 @@ fn one_capability_for_the_main_window_with_exactly_the_app_commands() {
     let dir = root().join("capabilities");
     let mut files: Vec<PathBuf> = fs::read_dir(&dir).unwrap().map(|e| e.unwrap().path()).collect();
     files.sort();
-    assert_eq!(files.len(), 2, "main and card capability files expected, found {files:?}");
+    assert_eq!(files.len(), 3, "main, card and menu capability files expected, found {files:?}");
     let cap = read_json(&dir.join("main.json"));
     assert_eq!(cap["identifier"], "main-window");
     assert_eq!(cap["windows"], json!(["main"]));
@@ -71,6 +71,45 @@ fn the_card_window_gets_only_the_card_commands() {
     assert!(require_main("card", &u("tauri://localhost/card.html"), false).is_err());
 }
 
+#[test]
+fn the_menu_panels_get_only_the_menu_commands() {
+    let cap = read_json(&root().join("capabilities/menu.json"));
+    assert_eq!(cap["identifier"], "menu-window");
+    assert_eq!(cap["windows"], json!(["menu-*"]));
+    assert!(cap.get("webviews").is_none() && cap.get("remote").is_none());
+    assert_ne!(cap["local"], json!(false));
+    let got: BTreeSet<String> = cap["permissions"].as_array().unwrap().iter().map(|p| p.as_str().unwrap().to_string()).collect();
+    let mut want: BTreeSet<String> = MENU_COMMANDS.iter().map(|c| format!("allow-{}", c.replace('_', "-"))).collect();
+    want.insert("core:event:allow-listen".into());
+    want.insert("core:event:allow-unlisten".into());
+    // a pinned panel is dragged by its header (data-tauri-drag-region): only its own window
+    want.insert("core:window:allow-start-dragging".into());
+    assert_eq!(got, want);
+    // the menu commands never leak into the main or card capability
+    for other in ["main.json", "card.json"] {
+        let cap = read_json(&root().join("capabilities").join(other));
+        let perms = cap["permissions"].to_string();
+        for c in MENU_COMMANDS {
+            assert!(!perms.contains(&format!("\"allow-{}\"", c.replace('_', "-"))), "{c} granted in {other}");
+        }
+    }
+    let cmds = fs::read_to_string(root().join("src/commands.rs")).unwrap();
+    for c in MENU_COMMANDS {
+        let at = cmds.find(&format!("pub fn {c}(")).unwrap_or_else(|| panic!("{c} not in commands.rs"));
+        let body = &cmds[at..];
+        let open = body.find('{').unwrap();
+        assert!(body[open + 1..].trim_start().starts_with("guard_menu(&window)?;"), "{c} must start with guard_menu(&window)?");
+    }
+    assert!(require_menu("menu-1", &u("tauri://localhost/tray-menu.html"), false).is_ok());
+    assert!(require_menu("menu-12", &u("http://tauri.localhost/tray-menu.html"), false).is_ok());
+    for bad in ["main", "card", "menu-", "menu-x", "menu-1a", "menus-1"] {
+        assert!(require_menu(bad, &u("tauri://localhost/tray-menu.html"), false).is_err(), "{bad}");
+    }
+    assert!(require_menu("menu-1", &u("https://example.com/tray-menu.html"), false).is_err());
+    assert!(require_main("menu-1", &u("tauri://localhost/tray-menu.html"), false).is_err());
+    assert!(require_card("menu-1", &u("tauri://localhost/tray-menu.html"), false).is_err());
+}
+
 #[test]
 fn every_registered_command_is_in_the_list_and_nothing_else() {
     let lib = fs::read_to_string(root().join("src/lib.rs")).unwrap();
@@ -81,7 +120,7 @@ fn every_registered_command_is_in_the_list_and_nothing_else() {
         .map(|s| s.trim().trim_start_matches("commands::").to_string())
         .filter(|s| !s.is_empty())
         .collect();
-    assert_eq!(registered, COMMANDS.iter().chain(CARD_COMMANDS).map(|s| s.to_string()).collect::<Vec<_>>());
+    assert_eq!(registered, COMMANDS.iter().chain(CARD_COMMANDS).chain(MENU_COMMANDS).map(|s| s.to_string()).collect::<Vec<_>>());
     // every command checks the caller first
     let cmds = fs::read_to_string(root().join("src/commands.rs")).unwrap();
     for c in COMMANDS {
@@ -109,7 +148,7 @@ fn csp_is_strict_and_the_config_has_no_backdoors() {
         assert!(!v.contains("unsafe-eval") && !v.contains("unsafe-inline") && !v.contains('*'), "{k}: {v}");
         assert!(!v.contains("https:") && !v.contains("http://") || v == "ipc: http://ipc.localhost", "{k}: no remote sources: {v}");
     }
-    assert_eq!(conf["app"]["security"]["capabilities"], json!(["main-window", "card-window"]));
+    assert_eq!(conf["app"]["security"]["capabilities"], json!(["main-window", "card-window", "menu-window"]));
     assert_eq!(conf["app"]["security"]["freezePrototype"], json!(true));
     assert!(conf["app"].get("withGlobalTauri").is_none() || conf["app"]["withGlobalTauri"] == json!(false));
     let windows = conf["app"]["windows"].as_array().unwrap();
diff --git a/apps/desktop/src-tauri/tests/tray.rs b/apps/desktop/src-tauri/tests/tray.rs
index 95d5b67..47c03e8 100644
--- a/apps/desktop/src-tauri/tests/tray.rs
+++ b/apps/desktop/src-tauri/tests/tray.rs
@@ -23,7 +23,7 @@ fn ids(m: &[Entry]) -> Vec<String> {
 fn menu_has_every_entry_in_order() {
     let m = menu_model(&summary());
     assert_eq!(ids(&m), vec![ID_OPEN, ID_READ, ID_MUTE, ID_UPDATE, ID_SETTINGS, ID_QUIT]);
-    let Entry::Sub { label, items } = &m[3] else { panic!("the Apps submenu comes after the first separator") };
+    let Entry::Sub { label, items, .. } = &m[3] else { panic!("the Apps submenu comes after the first separator") };
     assert_eq!(label, "Apps");
     assert_eq!(items.len(), 2);
     let Entry::Item { id, label, enabled } = &items[0] else { panic!() };
diff --git a/apps/desktop/src/App.tsx b/apps/desktop/src/App.tsx
index 4cfa717..02a809d 100644
--- a/apps/desktop/src/App.tsx
+++ b/apps/desktop/src/App.tsx
@@ -211,7 +211,7 @@ export function App({ onTheme }: { onTheme: () => void }) {
   const menu = useContextMenu();
   const appItem = (a: UnifiedApp, st: { text: string; tone: string }) => (
     <div role="listitem" key={a.key}>
-      <button {...menu(() => appMenu(a, d, nav, { showIgnored }))} className={`nav nav-app has-line${a.ignored ? ' is-ignored' : ''}`} aria-current={current({ screen: 'app', appId: a.key, tab: 'releases' })}
+      <button {...menu(() => appMenu(a, d, nav, { showIgnored }), `app:${a.key}`)} className={`nav nav-app has-line${a.ignored ? ' is-ignored' : ''}`} aria-current={current({ screen: 'app', appId: a.key, tab: 'releases' })}
         onClick={() => go({ screen: 'app', appId: a.key, tab: route.screen === 'app' && tabsOf(a).includes(route.tab) ? route.tab : 'releases' })}
         title={`${a.name} · ${st.text}`}>
         <span className="ds-side-ic"><AppIcon name={a.name} src={d.iconFor(a)} />{(st.tone === 'bad' || st.tone === 'warn') && <span className={`ds-sdot ${st.tone}`} role="img" aria-label={st.tone === 'bad' ? t('pf.blocker') : t('pf.warning')} />}</span>
diff --git a/apps/desktop/src/design.css b/apps/desktop/src/design.css
index adfc21f..2ac3a50 100644
--- a/apps/desktop/src/design.css
+++ b/apps/desktop/src/design.css
@@ -229,6 +229,19 @@
 .ds-menu-k { max-width: 150px; overflow: hidden; text-overflow: ellipsis; margin-left: 18px; color: var(--faint); font-size: var(--ds-t-micro); letter-spacing: .02em; font-variant-numeric: tabular-nums; }
 .ds-menu-sub { width: 12px; height: 12px; color: var(--faint); margin-left: 10px; }
 .ds-menu-sep { height: 1px; margin: 5px 6px; background: var(--ds-stroke); }
+/* menu header: the pin button (a normal menu or submenu), a pinned panel's title, unpin, close and drag handle */
+.ds-menu-head { display: flex; align-items: center; gap: 2px; height: 24px; padding: 0 0 0 9px; margin-bottom: 1px; }
+.ds-menu-head.pinned { cursor: grab; touch-action: none; }
+.ds-menu-head.pinned:active { cursor: grabbing; }
+.ds-menu-title { flex: 1; min-width: 0; overflow: hidden; text-overflow: ellipsis; white-space: nowrap; font-size: var(--ds-t-micro);
+  font-weight: 600; letter-spacing: .04em; text-transform: uppercase; color: var(--faint); }
+.ds-menu-btn { flex: none; width: 22px; height: 22px; display: grid; place-items: center; padding: 0; border: 0; border-radius: 6px;
+  background: transparent; color: var(--faint); cursor: pointer; }
+.ds-menu-btn svg { width: 13px; height: 13px; }
+.ds-menu-btn:hover, .ds-menu-btn:focus-visible { background: var(--ds-inset); color: var(--ink); outline: none; }
+.ds-menu-btn.on { color: var(--accent); }
+.ds-menu.pinned { border-color: color-mix(in srgb, var(--accent) 45%, var(--ds-stroke-strong)); transition: opacity 120ms var(--ease); }
+.ds-menu-gone { max-width: 240px; padding: 6px 10px 8px; color: var(--muted); font-size: var(--ds-t-micro); white-space: normal; }
 @media (prefers-reduced-motion: reduce) { .ds-menu { transition: none; transform: none; } }
 :root[data-motion="reduce"] .ds-menu { transition: none; transform: none; }
 /* headings focused by code (dialog / wizard step titles) for screen readers: no ring */
diff --git a/apps/desktop/src/i18n/en.ts b/apps/desktop/src/i18n/en.ts
index 9c5642b..b93dd8c 100644
--- a/apps/desktop/src/i18n/en.ts
+++ b/apps/desktop/src/i18n/en.ts
@@ -2059,6 +2059,12 @@ export const en = {
 
   // context menus (ui/ContextMenu.tsx)
   'cm.cut': "Cut",
+  'cm.pin': "Pin: keeps this menu open",
+  'cm.unpin': "Unpin",
+  'cm.closePanel': "Close",
+  'cm.gone': "Gone: what this menu was for is not on screen now.",
+  'cm.menu': "Menu",
+  'cm.tearOff': "Ctrl+click or middle-click: pin this submenu",
   'cm.copy': "Copy",
   'cm.paste': "Paste",
   'cm.selectAll': "Select all",
diff --git a/apps/desktop/src/i18n/tr.ts b/apps/desktop/src/i18n/tr.ts
index 6872f6b..ec1d1ac 100644
--- a/apps/desktop/src/i18n/tr.ts
+++ b/apps/desktop/src/i18n/tr.ts
@@ -2061,6 +2061,12 @@ export const tr: Record<keyof typeof en, string> = {
 
   // context menus (ui/ContextMenu.tsx)
   'cm.cut': "Kes",
+  'cm.pin': "Sabitle: menü açık kalır",
+  'cm.unpin': "Sabitlemeyi kaldır",
+  'cm.closePanel': "Kapat",
+  'cm.gone': "Yok: bu menünün ait olduğu şey şu an ekranda değil.",
+  'cm.menu': "Menü",
+  'cm.tearOff': "Ctrl+tık veya orta tık: bu alt menüyü sabitle",
   'cm.copy': "Kopyala",
   'cm.paste': "Yapıştır",
   'cm.selectAll': "Tümünü seç",
diff --git a/apps/desktop/src/screens/AppView.tsx b/apps/desktop/src/screens/AppView.tsx
index 1a8424d..150c29b 100644
--- a/apps/desktop/src/screens/AppView.tsx
+++ b/apps/desktop/src/screens/AppView.tsx
@@ -69,7 +69,7 @@ function AppControls({ app }: { app: UnifiedApp }) {
           </select></label>
       )}
       <span className="grow" />
-      <button className="btn btn-sm btn-ghost" {...more(() => appMenu(app, d, nav, { showIgnored }))} aria-label={t('cm.more')} title={t('cm.more')}><Icon name="more" />{app.ignored || app.ignoredStores.length ? t('nav.ignored') : null}</button>
+      <button className="btn btn-sm btn-ghost" {...more(() => appMenu(app, d, nav, { showIgnored }), `app:${app.key}`)} aria-label={t('cm.more')} title={t('cm.more')}><Icon name="more" />{app.ignored || app.ignoredStores.length ? t('nav.ignored') : null}</button>
     </div>
   );
 }
@@ -130,7 +130,7 @@ export function AppView({ app, tab }: { app: UnifiedApp; tab: AppTab }) {
   return (
     <div className="page ds-app">
       <Hero name={name} icon={d.iconFor(app)} projectId={app.project && !app.project.missing ? app.project.id : null}
-        {...cm(() => appMenu(app, d, nav, { showIgnored }))}
+        {...cm(() => appMenu(app, d, nav, { showIgnored }), `app:${app.key}`)}
         badges={<>
           {e?.summary?.profile && app.project && <Chip tone="outline">{t(`profile.${e.summary.profile}` as 'profile.app')}</Chip>}
           {!app.project && <StoreOnlyTag />}
diff --git a/apps/desktop/src/screens/Ignored.tsx b/apps/desktop/src/screens/Ignored.tsx
index 4c7ac27..fdc3167 100644
--- a/apps/desktop/src/screens/Ignored.tsx
+++ b/apps/desktop/src/screens/Ignored.tsx
@@ -30,7 +30,7 @@ export function Ignored() {
                 {apps.map(a => {
                   const s = d.studios.find(x => x.id === a.studio) ?? null;
                   return (
-                    <div className="li" key={a.key} {...cm(() => appMenu(a, d, nav, { showIgnored: true }))}>
+                    <div className="li" key={a.key} {...cm(() => appMenu(a, d, nav, { showIgnored: true }), `app:${a.key}`)}>
                       <AppIcon name={a.name} src={d.iconFor(a)} />
                       <div className="li-main">
                         <span className="li-title row" style={{ gap: 8 }}>{a.name}{!a.project && <StoreOnlyTag />}</span>
diff --git a/apps/desktop/src/screens/Portfolio.tsx b/apps/desktop/src/screens/Portfolio.tsx
index c49926d..27eb5b0 100644
--- a/apps/desktop/src/screens/Portfolio.tsx
+++ b/apps/desktop/src/screens/Portfolio.tsx
@@ -153,7 +153,7 @@ function AppCard({ r, icon, health, studio }: { r: CardRow; icon: string | null;
   const menu = useContextMenu();
   const [showIgnored] = useShowIgnored();
   return (
-    <article className="pf-card" style={style} aria-label={name} {...menu(() => appMenu(app, d, nav, { showIgnored }))}>
+    <article className="pf-card" style={style} aria-label={name} {...menu(() => appMenu(app, d, nav, { showIgnored }), `app:${app.key}`)}>
       <div className={`pf-shots${shots.length ? '' : ' empty'}`} aria-hidden="true">
         {shots.length ? shots.map((s, i) => <img key={i} src={s} alt="" draggable={false} loading="lazy" />) : <>
           <AppIcon name={app.name} src={icon} className="pf-hero-icon" />
@@ -373,7 +373,7 @@ export function Portfolio() {
     const ios = !!(app.ios || e?.app?.platforms.ios), android = !!(app.android || e?.app?.platforms.android);
     const sub = app.ios?.app.bundleId ?? e?.app?.platforms.ios?.bundleId ?? app.android?.app.id ?? e?.app?.platforms.android?.packageName ?? '';
     return (
-      <tr key={app.key} className="clickable" onClick={() => open(app)} {...menu(() => appMenu(app, d, nav, { showIgnored }))}>
+      <tr key={app.key} className="clickable" onClick={() => open(app)} {...menu(() => appMenu(app, d, nav, { showIgnored }), `app:${app.key}`)}>
         <td>
           <div className="cell-app">
             <AppIcon name={app.name} src={d.iconFor(app)} />
@@ -456,7 +456,7 @@ export function Portfolio() {
           <button className="link" aria-pressed={showIgnored} onClick={() => setShowIgnored(!showIgnored)}>{showIgnored ? t('ignored.hide', { count: ignoredApps.length }) : t('ignored.show', { count: ignoredApps.length })}</button>
           {showIgnored && ignoredApps.map(a => (
             <span key={a.key} className="row muted" style={{ gap: 4 }}>
-              <button className="link" onClick={() => open(a)} {...menu(() => appMenu(a, d, nav, { showIgnored }))}>{a.name}</button>
+              <button className="link" onClick={() => open(a)} {...menu(() => appMenu(a, d, nav, { showIgnored }), `app:${a.key}`)}>{a.name}</button>
               <button className="btn btn-sm btn-ghost btn-icon" onClick={() => d.updateOverrides(o => withIgnored(o, a.ignoreKeys, false))} aria-label={t('ignored.restore')} title={t('ignored.restore')}><Icon name="eye" /></button>
             </span>
           ))}
diff --git a/apps/desktop/src/traymenu/TrayMenu.tsx b/apps/desktop/src/traymenu/TrayMenu.tsx
new file mode 100644
index 0000000..ceab77d
--- /dev/null
+++ b/apps/desktop/src/traymenu/TrayMenu.tsx
@@ -0,0 +1,166 @@
+// One tray menu panel (tray-menu.html): the root menu or one submenu, drawn with the design system's menu look. The
+// window around it belongs to Rust (menu_panel.rs); the panel only measures itself and reports what the owner does.
+import { AppWindowIcon } from '@phosphor-icons/react/dist/csr/AppWindow';
+import { ArrowsClockwiseIcon } from '@phosphor-icons/react/dist/csr/ArrowsClockwise';
+import { BellSlashIcon } from '@phosphor-icons/react/dist/csr/BellSlash';
+import { CaretRightIcon } from '@phosphor-icons/react/dist/csr/CaretRight';
+import { DeviceMobileIcon } from '@phosphor-icons/react/dist/csr/DeviceMobile';
+import { DownloadSimpleIcon } from '@phosphor-icons/react/dist/csr/DownloadSimple';
+import { GearSixIcon } from '@phosphor-icons/react/dist/csr/GearSix';
+import { PowerIcon } from '@phosphor-icons/react/dist/csr/Power';
+import { PushPinIcon } from '@phosphor-icons/react/dist/csr/PushPin';
+import { PushPinSlashIcon } from '@phosphor-icons/react/dist/csr/PushPinSlash';
+import { SquaresFourIcon } from '@phosphor-icons/react/dist/csr/SquaresFour';
+import { XIcon } from '@phosphor-icons/react/dist/csr/X';
+import { type KeyboardEvent, type MouseEvent, type ReactNode, useEffect, useLayoutEffect, useMemo, useRef, useState } from 'react';
+import { filterNodes, findPath, isEnabled, isTearOff, keepActive, type MenuNode, nextIndex, type Row, rows, split } from './model';
+
+export interface MenuBridge {
+  ready(width: number, height: number): void;
+  openSub(key: string, top: number, focus: boolean): void;
+  pinSub(key: string, top: number): void;
+  closeSubs(): void;
+  close(refocusParent: boolean): void;
+  dismiss(): void;
+  pin(on: boolean): void;
+  select(id: string): void;
+}
+
+const WORDS = {
+  en: { title: 'storebound', pin: 'Pin (stays open)', unpin: 'Unpin', close: 'Close', gone: 'This menu is gone for now.', filter: 'Filter', none: 'Nothing matches', tearOff: 'Ctrl+click or middle-click: pin' },
+  tr: { title: 'storebound', pin: 'Sabitle (açık kalır)', unpin: 'Sabitlemeyi kaldır', close: 'Kapat', gone: 'Bu menü şu an yok.', filter: 'Süz', none: 'Eşleşen yok', tearOff: 'Ctrl+tık veya orta tık: sabitle' },
+} satisfies Record<'en' | 'tr', Record<string, string>>;
+export type MenuLang = keyof typeof WORDS;
+
+const ICON: Record<string, ReactNode> = {
+  'tray-open': <AppWindowIcon />, 'tray-read': <ArrowsClockwiseIcon />, 'tray-mute': <BellSlashIcon />,
+  'tray-update': <DownloadSimpleIcon />, 'tray-settings': <GearSixIcon />, 'tray-quit': <PowerIcon />,
+};
+const iconOf = (n: Row): ReactNode => (n.kind === 'sub' ? <SquaresFourIcon /> : ICON[n.id] ?? (n.id.startsWith('tray-app:') ? <DeviceMobileIcon /> : null));
+
+export function TrayMenu({ nodes, path, pinned, hasParent, focusFirst, bridge, lang = 'en', openKey }: {
+  nodes: MenuNode[]; path: string[]; pinned: boolean; hasParent: boolean; focusFirst?: boolean; bridge: MenuBridge; lang?: MenuLang;
+  /** The submenu shown as open (the dev demo; in the app Rust knows). */
+  openKey?: string;
+}) {
+  const w = WORDS[lang];
+  const ref = useRef<HTMLDivElement>(null);
+  const [query, setQuery] = useState('');
+  const [active, setActive] = useState(-1);
+  const [open, setOpen] = useState<string | null>(openKey ?? null);
+  const hover = useRef<number | undefined>(undefined);
+  const found = useMemo(() => findPath(nodes, path), [nodes, path]);
+  const items = useMemo(() => (found ? filterNodes(found.items, query) : []), [found, query]);
+  const list = useMemo(() => rows(items), [items]);
+  const prev = useRef<Row[]>(list);
+
+  // a live update keeps the highlight on the same row
+  useEffect(() => {
+    setActive(a => keepActive(prev.current, list, a));
+    prev.current = list;
+  }, [list]);
+  useEffect(() => {
+    if (focusFirst) setActive(nextIndex(-1, 1, list.map(isEnabled)));
+    ref.current?.focus({ preventScroll: true });
+    // only on the first render
+  }, []);
+  useEffect(() => () => window.clearTimeout(hover.current), []);
+
+  // the window takes the panel's size (Rust places it inside the work area)
+  useLayoutEffect(() => {
+    const el = ref.current;
+    if (!el) return;
+    let last = '';
+    const report = () => {
+      const r = el.getBoundingClientRect();
+      const size = `${Math.ceil(r.width)}x${Math.ceil(r.height)}`;
+      if (size !== last) { last = size; bridge.ready(Math.ceil(r.width), Math.ceil(r.height)); }
+    };
+    report();
+    const ro = new ResizeObserver(report);
+    ro.observe(el);
+    return () => ro.disconnect();
+  }, [bridge]);
+
+  const rowTop = (i: number) => ref.current?.querySelector<HTMLElement>(`[data-i="${i}"]`)?.getBoundingClientRect().top ?? 0;
+  const openSub = (i: number, focus: boolean) => {
+    const n = list[i];
+    if (n?.kind !== 'sub') return;
+    setOpen(n.key);
+    bridge.openSub(n.key, rowTop(i), focus);
+  };
+  const pick = (i: number, e?: { button: number; ctrlKey: boolean; metaKey: boolean }) => {
+    const n = list[i];
+    if (!n || !isEnabled(n)) return;
+    if (n.kind === 'sub') {
+      if (e && isTearOff(e)) { bridge.pinSub(n.key, rowTop(i)); return; }
+      openSub(i, !e);
+      return;
+    }
+    bridge.select(n.id);
+  };
+  const back = () => (hasParent ? bridge.close(true) : pinned ? undefined : bridge.dismiss());
+
+  const onKey = (e: KeyboardEvent) => {
+    const k = e.key;
+    const en = list.map(isEnabled);
+    const stop = () => { e.preventDefault(); e.stopPropagation(); };
+    if (k === 'ArrowDown') { stop(); setActive(a => nextIndex(a, 1, en)); }
+    else if (k === 'ArrowUp') { stop(); setActive(a => nextIndex(a, -1, en)); }
+    else if (k === 'Home' || k === 'PageUp') { stop(); setActive(nextIndex(-1, 1, en)); }
+    else if (k === 'End' || k === 'PageDown') { stop(); setActive(nextIndex(-1, -1, en)); }
+    else if (k === 'Enter' || k === ' ') { stop(); if (active >= 0) pick(active); }
+    else if (k === 'ArrowRight') { stop(); if (list[active]?.kind === 'sub') openSub(active, true); }
+    else if (k === 'ArrowLeft') { stop(); if (hasParent) bridge.close(true); }
+    else if (k === 'Escape') { stop(); if (query) setQuery(''); else if (pinned) bridge.close(false); else back(); }
+    else if (k === 'Backspace') { stop(); setQuery(q => q.slice(0, -1)); }
+    else if (k.length === 1 && !e.ctrlKey && !e.metaKey && !e.altKey) { stop(); setQuery(q => q + k); setActive(0); }
+  };
+
+  // a pinned panel whose submenu is gone keeps a name: its key
+  const title = !found ? (path[path.length - 1] ?? w.title).replace(/-/g, ' ') : found.label == null ? w.title : split(found.label).text;
+  const onRowMove = (i: number, n: Row) => {
+    if (active !== i) setActive(isEnabled(n) ? i : -1);
+    window.clearTimeout(hover.current);
+    if (n.kind === 'sub') {
+      if (open !== n.key) hover.current = window.setTimeout(() => openSub(i, false), 120);
+    } else if (open) {
+      hover.current = window.setTimeout(() => { setOpen(null); bridge.closeSubs(); }, 200);
+    }
+  };
+
+  return (
+    <div ref={ref} className={`tm-panel${pinned ? ' pinned' : ''}`} role="menu" tabIndex={-1} onKeyDown={onKey} aria-label={title}
+      onContextMenu={e => e.preventDefault()}>
+      <div className="tm-head" data-tauri-drag-region={pinned ? '' : undefined}>
+        <span className="tm-title" data-tauri-drag-region={pinned ? '' : undefined}>{query ? <><span className="tm-q">{query}</span><span className="tm-caret" /></> : title}</span>
+        <button type="button" className={`tm-btn${pinned ? ' on' : ''}`} title={pinned ? w.unpin : w.pin} aria-label={pinned ? w.unpin : w.pin} aria-pressed={pinned}
+          onClick={() => bridge.pin(!pinned)}>{pinned ? <PushPinSlashIcon /> : <PushPinIcon />}</button>
+        {pinned && <button type="button" className="tm-btn" title={w.close} aria-label={w.close} onClick={() => bridge.close(false)}><XIcon /></button>}
+      </div>
+      {!found && <div className="tm-gone">{w.gone}</div>}
+      {found && !list.length && <div className="tm-gone">{query ? w.none : '—'}</div>}
+      {items.map((n, idx) => {
+        if (n.kind === 'sep') return <div key={`s${idx}`} className="ds-menu-sep" role="separator" />;
+        const i = list.indexOf(n);
+        const { text, value } = split(n.label);
+        const dis = !isEnabled(n);
+        return (
+          <div key={n.kind === 'sub' ? `sub:${n.key}` : n.id} data-i={i} role="menuitem" aria-disabled={dis || undefined}
+            aria-haspopup={n.kind === 'sub' ? 'menu' : undefined} aria-expanded={n.kind === 'sub' ? open === n.key : undefined}
+            title={n.kind === 'sub' ? w.tearOff : undefined}
+            className={`ds-menu-item tm-row${i === active ? ' active' : ''}${dis ? ' disabled' : ''}${n.kind === 'sub' && open === n.key ? ' open' : ''}`}
+            onPointerMove={() => onRowMove(i, n)}
+            onMouseDown={(e: MouseEvent) => { if (e.button === 1) e.preventDefault(); }}
+            onAuxClick={(e: MouseEvent) => { if (e.button === 1) pick(i, e); }}
+            onClick={(e: MouseEvent) => pick(i, e)}>
+            <span className="ds-menu-ic">{iconOf(n)}</span>
+            <span className="ds-menu-l">{text}</span>
+            {value && <span className="tm-value">{value}</span>}
+            {n.kind === 'sub' && <CaretRightIcon className="ds-menu-sub" />}
+          </div>
+        );
+      })}
+    </div>
+  );
+}
diff --git a/apps/desktop/src/traymenu/demo.tsx b/apps/desktop/src/traymenu/demo.tsx
new file mode 100644
index 0000000..2b81adc
--- /dev/null
+++ b/apps/desktop/src/traymenu/demo.tsx
@@ -0,0 +1,55 @@
+// Dev only (a plain browser, never in the release bundle): the tray menu panels on fixture data, as the tray would show
+// them: the root menu with Apps open beside it and a pinned Apps panel, whose values change every few seconds the way a
+// store read changes them (the panels update in place).
+import { useEffect, useMemo, useState } from 'react';
+import type { MenuNode } from './model';
+import { type MenuBridge, type MenuLang, TrayMenu } from './TrayMenu';
+
+const STATES = [
+  ['App Store: In review · Play: Live', 'App Store: Ready for sale · Play: Live'],
+  ['Play: Rolling out 20%', 'Play: Rolling out 50%', 'Play: Rolling out 100%'],
+  ['App Store: Rejected', 'App Store: Rejected'],
+  ['App Store: Waiting for review', 'App Store: In review'],
+];
+const NAMES = ['Star Dash', 'Puzzle Garden', 'Pocket Chef', 'Night Runner'];
+
+/** The tree tray.rs builds (menu_model), with fixture apps. */
+export function demoNodes(tick: number, lang: MenuLang): MenuNode[] {
+  const tr = lang === 'tr';
+  const item = (id: string, label: string, enabled = true): MenuNode => ({ kind: 'item', id, label, enabled });
+  return [
+    item('tray-open', tr ? 'storebound\'u aç' : 'Open storebound'),
+    item('tray-read', tr ? 'Mağazaları şimdi oku' : 'Read the stores now'),
+    { kind: 'sep' },
+    { kind: 'sub', key: 'apps', label: tr ? 'Uygulamalar' : 'Apps', items: NAMES.map((n, i) => item(`tray-app:k${i}`, `${n}  ·  ${STATES[i]![tick % STATES[i]!.length]}`)) },
+    { kind: 'sep' },
+    item('tray-mute', tr ? 'Bildirimleri 1 saat sustur' : 'Mute notifications for 1 hour'),
+    item('tray-update', tr ? 'Güncellemeleri denetle' : 'Check for updates'),
+    item('tray-settings', tr ? 'Ayarlar' : 'Settings'),
+    { kind: 'sep' },
+    item('tray-quit', tr ? 'storebound\'dan çık' : 'Quit storebound'),
+  ];
+}
+
+const log = (what: string) => (...a: unknown[]) => console.info('tray menu', what, ...a);
+const demoBridge: MenuBridge = { ready: () => {}, openSub: log('openSub'), pinSub: log('pinSub'), closeSubs: () => {}, close: log('close'), dismiss: log('dismiss'), pin: log('pin'), select: log('select') };
+
+export function Demo({ lang }: { lang: MenuLang }) {
+  const [tick, setTick] = useState(0);
+  const q = new URLSearchParams(location.search);
+  const still = q.has('still');
+  useEffect(() => {
+    if (still) return;
+    const t = window.setInterval(() => setTick(n => n + 1), 3000);
+    return () => window.clearInterval(t);
+  }, [still]);
+  const nodes = useMemo(() => demoNodes(tick, lang), [tick, lang]);
+  return (
+    <>
+      <div className="tm-demo-at" style={{ left: 24, top: 160 }}><TrayMenu nodes={nodes} path={[]} pinned={false} hasParent={false} bridge={demoBridge} lang={lang} openKey="apps" /></div>
+      <div className="tm-demo-at" style={{ left: 262, top: 262 }}><TrayMenu nodes={nodes} path={['apps']} pinned={false} hasParent focusFirst bridge={demoBridge} lang={lang} /></div>
+      <div className="tm-demo-at" style={{ left: 690, top: 24 }}><TrayMenu nodes={nodes} path={['apps']} pinned hasParent={false} bridge={demoBridge} lang={lang} /></div>
+      <div className="tm-demo-at" style={{ left: 690, top: 260 }}><TrayMenu nodes={nodes} path={['gone']} pinned hasParent={false} bridge={demoBridge} lang={lang} /></div>
+    </>
+  );
+}
diff --git a/apps/desktop/src/traymenu/main.tsx b/apps/desktop/src/traymenu/main.tsx
new file mode 100644
index 0000000..df0ba93
--- /dev/null
+++ b/apps/desktop/src/traymenu/main.tsx
@@ -0,0 +1,70 @@
+// The tray menu panel window's entry (tray-menu.html; one window per panel, made by menu_panel.rs). Theme and language
+// from the same prefs as the main window; the tree and every live update from Rust (`menu-model`). In a plain dev
+// browser it shows a demo with fixture data instead (demo.tsx, never in the release bundle).
+import { useEffect, useState } from 'react';
+import { createRoot } from 'react-dom/client';
+import { applyPrefs, loadPrefs, resolveLang } from '../prefs';
+import { bridge, inTauri, menuState, onModel, onPanel } from './menu-api';
+import type { MenuNode, PanelInfo } from './model';
+import { type MenuLang, TrayMenu } from './TrayMenu';
+import '../styles.css';
+import '../design.css';
+import './traymenu.css';
+
+const sys = () => (typeof navigator !== 'undefined' ? navigator.language : 'en');
+
+function prefs(): MenuLang {
+  const p = loadPrefs();
+  if (import.meta.env.DEV) {
+    const q = new URLSearchParams(location.search);
+    const th = q.get('theme'), lg = q.get('lang');
+    if (th === 'light' || th === 'dark') p.theme = th;
+    if (lg === 'en' || lg === 'tr') p.lang = lg;
+  }
+  applyPrefs(p, document.documentElement, sys());
+  return resolveLang(p.lang, sys());
+}
+
+/** One panel window: its state from Rust, the live tree, pin changes. */
+function Panel({ lang }: { lang: MenuLang }) {
+  const [info, setInfo] = useState<PanelInfo | null>(null);
+  const [nodes, setNodes] = useState<MenuNode[]>([]);
+  const [pinned, setPinned] = useState(false);
+  const [focusTick, setFocusTick] = useState(0);
+  useEffect(() => {
+    let live = true;
+    const offs = [
+      onModel(setNodes),
+      onPanel(word => {
+        if (word === 'pinned') setPinned(true);
+        else if (word === 'unpinned') setPinned(false);
+        else if (word === 'focus') setFocusTick(n => n + 1);
+      }),
+    ];
+    menuState().then((s: PanelInfo | null) => {
+      if (!live || !s) return;
+      setInfo(s);
+      setNodes(s.nodes);
+      setPinned(s.pinned);
+    }, () => {});
+    return () => { live = false; for (const off of offs) off(); };
+  }, []);
+  useEffect(() => { if (focusTick) document.querySelector<HTMLElement>('.tm-panel')?.focus(); }, [focusTick]);
+  if (!info) return null;
+  return <TrayMenu nodes={nodes} path={info.path} pinned={pinned} hasParent={info.hasParent && !pinned} focusFirst={info.focusFirst} bridge={bridge} lang={lang} />;
+}
+
+void (async () => {
+  let lang = prefs();
+  const root = createRoot(document.getElementById('menu')!);
+  if (!inTauri() && import.meta.env.DEV) {
+    const { Demo } = await import('./demo');
+    document.body.classList.add('tm-demo');
+    root.render(<Demo lang={lang} />);
+    return;
+  }
+  const render = () => root.render(<Panel key={lang} lang={lang} />);
+  render();
+  // theme or language changed in the main window (same origin: shared localStorage)
+  window.addEventListener('storage', () => { const l = prefs(); if (l !== lang) { lang = l; render(); } });
+})();
diff --git a/apps/desktop/src/traymenu/menu-api.ts b/apps/desktop/src/traymenu/menu-api.ts
new file mode 100644
index 0000000..fd9896c
--- /dev/null
+++ b/apps/desktop/src/traymenu/menu-api.ts
@@ -0,0 +1,33 @@
+// The tray menu panels' host calls (the panel page's counterpart of src/api.ts, kept apart so the panel bundle stays
+// small). Only `menu-*` windows may call these (capabilities/menu.json; every command re-checks the window in Rust).
+import { invoke } from '@tauri-apps/api/core';
+import { listen } from '@tauri-apps/api/event';
+import type { MenuNode, PanelInfo } from './model';
+import type { MenuBridge } from './TrayMenu';
+
+export const inTauri = (): boolean => typeof window !== 'undefined' && '__TAURI_INTERNALS__' in window;
+
+const call = (cmd: string, args?: Record<string, unknown>) => { invoke(cmd, args).catch(() => {}); };
+
+function sub<T>(ev: string, fn: (p: T) => void): () => void {
+  const un = listen<T>(ev, e => fn(e.payload));
+  return () => { un.then(f => f()).catch(() => {}); };
+}
+
+/** This panel: its path into the tree, pinned or not, and the tree now. */
+export const menuState = (): Promise<PanelInfo | null> => invoke<PanelInfo | null>('menu_state').catch(() => null);
+/** Every change of the tree (a store read, mute, language): the panel updates in place. */
+export const onModel = (fn: (nodes: MenuNode[]) => void) => sub<MenuNode[]>('menu-model', fn);
+/** Rust about this panel: `pinned`, `unpinned`, `focus`. */
+export const onPanel = (fn: (word: string) => void) => sub<string>('menu-panel', fn);
+
+export const bridge: MenuBridge = {
+  ready: (width, height) => call('menu_ready', { width, height }),
+  openSub: (key, top, focus) => call('menu_open_sub', { key, top, focus }),
+  pinSub: (key, top) => call('menu_pin_sub', { key, top }),
+  closeSubs: () => call('menu_close_subs'),
+  close: refocusParent => call('menu_close', { refocusParent }),
+  dismiss: () => call('menu_dismiss'),
+  pin: pinned => call('menu_pin', { pinned }),
+  select: id => call('menu_select', { id }),
+};
diff --git a/apps/desktop/src/traymenu/model.ts b/apps/desktop/src/traymenu/model.ts
new file mode 100644
index 0000000..9109366
--- /dev/null
+++ b/apps/desktop/src/traymenu/model.ts
@@ -0,0 +1,75 @@
+// The tray menu panels' pure half (tested in tests/tray-menu.test.ts): the tree Rust sends (menu_panel.rs `Node`),
+// walking it by stable submenu keys, splitting a row into its text and live value, type-to-filter, keyboard moves and
+// keeping the highlighted row on the same item when a live update arrives.
+
+export type MenuNode =
+  | { kind: 'item'; id: string; label: string; enabled: boolean }
+  | { kind: 'sep' }
+  | { kind: 'sub'; key: string; label: string; items: MenuNode[] };
+export type Row = Exclude<MenuNode, { kind: 'sep' }>;
+
+/** What menu_state returns for one panel window. */
+export interface PanelInfo {
+  label: string;
+  path: string[];
+  pinned: boolean;
+  hasParent: boolean;
+  focusFirst: boolean;
+  nodes: MenuNode[];
+}
+
+/** "First  ·  App Store: In review" -> { text: 'First', value: 'App Store: In review' } (the value is right-aligned). */
+export function split(label: string): { text: string; value?: string } {
+  const at = label.indexOf('·');
+  if (at <= 0) return { text: label.trim() };
+  const value = label.slice(at + 1).trim();
+  return value ? { text: label.slice(0, at).trim(), value } : { text: label.slice(0, at).trim() };
+}
+
+/** The items at `path` (submenu keys) and the submenu's label, or null when that submenu is gone. */
+export function findPath(nodes: readonly MenuNode[], path: readonly string[]): { items: MenuNode[]; label: string | null } | null {
+  let items = nodes as MenuNode[];
+  let label: string | null = null;
+  for (const key of path) {
+    const next = items.find((n): n is Extract<MenuNode, { kind: 'sub' }> => n.kind === 'sub' && n.key === key);
+    if (!next) return null;
+    items = next.items;
+    label = next.label;
+  }
+  return { items, label };
+}
+
+/** Type-to-filter: rows whose label holds every word; separators drop out while filtering. */
+export function filterNodes(items: readonly MenuNode[], query: string): MenuNode[] {
+  const words = query.toLocaleLowerCase().split(/\s+/).filter(Boolean);
+  if (!words.length) return items as MenuNode[];
+  return items.filter(n => n.kind !== 'sep' && words.every(w => n.label.toLocaleLowerCase().includes(w)));
+}
+
+export const rows = (items: readonly MenuNode[]): Row[] => items.filter((n): n is Row => n.kind !== 'sep');
+export const isEnabled = (n: Row): boolean => n.kind === 'sub' || n.enabled;
+export const rowId = (n: Row): string => (n.kind === 'sub' ? `sub:${n.key}` : n.id);
+
+/** The next enabled row from `current` in `dir`, wrapping; -1 when none. `current` -1 starts before the first. */
+export function nextIndex(current: number, dir: 1 | -1, enabled: readonly boolean[]): number {
+  const n = enabled.length;
+  if (!n) return -1;
+  const from = current < 0 ? (dir > 0 ? -1 : n) : current;
+  for (let step = 1; step <= n; step += 1) {
+    const i = (((from + dir * step) % n) + n) % n;
+    if (enabled[i]) return i;
+  }
+  return -1;
+}
+
+/** A live update must not move the highlight: the same id / key in the new rows, else the same place (clamped). */
+export function keepActive(before: readonly Row[], after: readonly Row[], active: number): number {
+  if (active < 0 || !after.length) return -1;
+  const was = before[active];
+  if (!was) return Math.min(active, after.length - 1);
+  const found = after.findIndex(n => rowId(n) === rowId(was));
+  return found >= 0 ? found : Math.min(active, after.length - 1);
+}
+
+/** Ctrl / Cmd + click or a middle click on a submenu row tears it off as a pinned panel. */
+export const isTearOff = (e: { button: number; ctrlKey: boolean; metaKey: boolean }): boolean => e.button === 1 || ((e.ctrlKey || e.metaKey) && e.button === 0);
diff --git a/apps/desktop/src/traymenu/traymenu.css b/apps/desktop/src/traymenu/traymenu.css
new file mode 100644
index 0000000..5bc1176
--- /dev/null
+++ b/apps/desktop/src/traymenu/traymenu.css
@@ -0,0 +1,28 @@
+/* The tray menu panels (tray-menu.html): the design system's menu (.ds-menu-*) in its own small window. The window is
+   transparent and exactly as large as the panel (menu_panel.rs sizes it from what the panel measures). */
+html:has(body.tm-page), body.tm-page { margin: 0; background: transparent; overflow: hidden; }
+body.tm-page { font: var(--ds-t-body)/1.4 system-ui, -apple-system, "Segoe UI", sans-serif; color: var(--ink); }
+
+.tm-panel { box-sizing: border-box; width: max-content; min-width: 230px; max-width: 380px; max-height: 860px; overflow: auto; padding: 4px 5px 5px;
+  border-radius: 12px; background: var(--ds-raised); border: 1px solid var(--ds-stroke-strong);
+  font-size: var(--ds-t-body); color: var(--ink); outline: none; user-select: none; cursor: default; }
+.tm-panel.pinned { border-color: color-mix(in srgb, var(--accent) 45%, var(--ds-stroke-strong)); }
+.tm-head { display: flex; align-items: center; gap: 2px; height: 28px; padding: 0 2px 0 9px; margin-bottom: 2px; }
+.tm-panel.pinned .tm-head { cursor: grab; }
+.tm-title { flex: 1; min-width: 0; overflow: hidden; text-overflow: ellipsis; white-space: nowrap; font-size: var(--ds-t-micro);
+  font-weight: 600; letter-spacing: .04em; text-transform: uppercase; color: var(--muted); }
+.tm-q { text-transform: none; letter-spacing: 0; color: var(--ink); font-weight: 500; }
+.tm-caret { display: inline-block; width: 1px; height: 11px; margin-left: 1px; vertical-align: -1px; background: var(--accent); }
+.tm-btn { flex: none; width: 24px; height: 24px; display: grid; place-items: center; padding: 0; border: 0; border-radius: 6px;
+  background: transparent; color: var(--faint); cursor: pointer; }
+.tm-btn svg { width: 14px; height: 14px; }
+.tm-btn:hover, .tm-btn:focus-visible { background: var(--ds-inset); color: var(--ink); outline: none; }
+.tm-btn.on { color: var(--accent); }
+.tm-row.open:not(.active) { background: var(--ds-inset); }
+.tm-value { max-width: 190px; overflow: hidden; text-overflow: ellipsis; margin-left: 18px; color: var(--muted);
+  font-size: var(--ds-t-micro); font-variant-numeric: tabular-nums; }
+.tm-gone { padding: 8px 10px 10px; color: var(--muted); font-size: var(--ds-t-micro); }
+
+/* the dev demo (a plain browser): several panels side by side on a desktop-like backdrop */
+body.tm-page.tm-demo { overflow: auto; min-height: 100vh; background: linear-gradient(135deg, #3b4a6b, #1d2436); }
+.tm-demo-at { position: absolute; }
diff --git a/apps/desktop/src/ui/ContextMenu.tsx b/apps/desktop/src/ui/ContextMenu.tsx
index e54b534..c71217e 100644
--- a/apps/desktop/src/ui/ContextMenu.tsx
+++ b/apps/desktop/src/ui/ContextMenu.tsx
@@ -1,55 +1,94 @@
 // Context menus (design system): the browser's own menu never shows. ContextMenuProvider (main.tsx) prevents every
 // native `contextmenu`, opens a small Cut / Copy / Paste / Select all menu on text fields and a Copy menu on selected
 // text, and turns Shift+F10 / the Menu key into a context menu on the focused element. Screens attach menus with
-// `useContextMenu()`: `<div {...menu(() => [...entries])}>`. Keyboard: arrows, Home / End, Enter / Space, Esc,
-// ArrowRight / ArrowLeft for submenus, type-ahead. Logic (placement, moves, type-ahead) in menu-logic.ts.
-import { createContext, type KeyboardEvent as ReactKeyboardEvent, type MouseEvent as ReactMouseEvent, type ReactNode, useCallback, useContext, useEffect, useLayoutEffect, useId, useRef, useState } from 'react';
+// `useContextMenu()`: `<div {...menu(() => [...entries], 'app:' + key)}>`. Keyboard: arrows, Home / End, Enter / Space,
+// Esc, ArrowRight / ArrowLeft for submenus, type-ahead. Logic (placement, moves, type-ahead) in menu-logic.ts.
+//
+// Several menus at once (the same behaviour as the tray menu panels): a menu's pin button keeps it open as a floating
+// panel; the pin button of a submenu, or Ctrl / Cmd / middle click on a submenu row, tears that submenu off as its own
+// pinned panel. Pinned panels survive the next menu, can be dragged by their header, step aside so they never sit on
+// each other, and update in place: they re-read their entries from the newest builder the screen registered (live
+// sources, menu-stack.ts), so a read that changes a value never closes them. The panel stack is pure (menu-stack.ts).
+import { createContext, type KeyboardEvent as ReactKeyboardEvent, type MouseEvent as ReactMouseEvent, type PointerEvent as ReactPointerEvent, type ReactNode, useCallback, useContext, useEffect, useId, useLayoutEffect, useReducer, useRef, useState } from 'react';
 import { createPortal } from 'react-dom';
 import { t } from '../i18n';
 import { copyText } from '../lib/crash';
 import { Icon } from './icons';
 import { MOD } from './kit';
 import { enabled, first, isEditable, isItem, last, type MenuEntry, type MenuInput, type MenuItem, move, placeAt, placeBeside, tidy, typeahead } from './menu-logic';
+import { clampPos, closeMenu, closeUnpinned, LiveMenus, moveMenu, openMenu, pinMenu, type Pos, resolvePath, type StackEntry, tearOff, unpinMenu } from './menu-stack';
 
 export type { MenuEntry, MenuInput, MenuItem } from './menu-logic';
 
-interface Open { x: number; y: number; items: MenuEntry[]; from: Element | null; keyboard: boolean }
-type OpenFn = (x: number, y: number, input: MenuInput, opts?: { from?: Element | null; keyboard?: boolean }) => void;
+interface OpenOpts { from?: Element | null; keyboard?: boolean; source?: string | null }
+type OpenFn = (x: number, y: number, input: MenuInput, opts?: OpenOpts) => void;
 const Ctx = createContext<OpenFn | null>(null);
 
+/** Every screen's menu builders, newest first: what pinned panels re-read. */
+const live = new LiveMenus();
+
 /** Marks a native event a menu handled, so the global fallback leaves it alone. */
 const HANDLED = '__sbMenu';
 /** Marks the contextmenu event Shift+F10 / the Menu key sent (the menu starts on its first item). */
 const BY_KEY = '__sbKey';
 
-/** Props that attach a menu to an element: `<button {...menu(() => entries)}>`. Entries are built when it opens. */
-export function useContextMenu(): (build: () => MenuInput) => { onContextMenu: (e: ReactMouseEvent) => void } {
+/** One live source key per menu call of a component (`id` when given, else its call order in the render); the keys a
+ *  render no longer makes are dropped after it commits, all of them when the component unmounts. */
+function useLiveKeys(): (id?: string) => string {
+  const hid = useId();
+  const seen = useRef(new Set<string>());
+  const n = useRef(0);
+  seen.current = new Set();
+  n.current = 0;
+  useEffect(() => { live.retain(hid, seen.current); });
+  useEffect(() => () => live.retain(hid), [hid]);
+  return useCallback((id?: string) => {
+    const k = `${hid}#${id ?? n.current++}`;
+    seen.current.add(k);
+    return k;
+  }, [hid]);
+}
+
+/** Props that attach a menu to an element: `<button {...menu(() => entries, id)}>`. Entries are built when it opens
+ *  (and again for a pinned copy whenever the element re-renders). `id`: what the menu is about, unique in the component
+ *  (an app key), so a pinned panel follows that thing even when rows reorder. */
+export function useContextMenu(): (build: () => MenuInput, id?: string) => { onContextMenu: (e: ReactMouseEvent) => void } {
   const open = useContext(Ctx);
-  return useCallback((build: () => MenuInput) => ({
-    onContextMenu: (e: ReactMouseEvent) => {
-      if ((e.nativeEvent as unknown as Record<string, unknown>)[HANDLED]) return;
-      // a text field or a selection inside keeps the edit menu
-      const target = e.target as HTMLElement;
-      if (isEditable(target as HTMLInputElement) || (window.getSelection()?.toString() ?? '').trim()) return;
-      e.preventDefault();
-      (e.nativeEvent as unknown as Record<string, unknown>)[HANDLED] = true;
-      if (!open) return;
-      open(e.clientX, e.clientY, build(), { from: e.currentTarget as Element, keyboard: !!(e.nativeEvent as unknown as Record<string, unknown>)[BY_KEY] });
-    },
-  }), [open]);
+  const key = useLiveKeys();
+  return useCallback((build: () => MenuInput, id?: string) => {
+    const source = key(id);
+    live.set(source, build);
+    return {
+      onContextMenu: (e: ReactMouseEvent) => {
+        if ((e.nativeEvent as unknown as Record<string, unknown>)[HANDLED]) return;
+        // a text field or a selection inside keeps the edit menu
+        const target = e.target as HTMLElement;
+        if (isEditable(target as HTMLInputElement) || (window.getSelection()?.toString() ?? '').trim()) return;
+        e.preventDefault();
+        (e.nativeEvent as unknown as Record<string, unknown>)[HANDLED] = true;
+        if (!open) return;
+        open(e.clientX, e.clientY, build(), { from: e.currentTarget as Element, keyboard: !!(e.nativeEvent as unknown as Record<string, unknown>)[BY_KEY], source });
+      },
+    };
+  }, [open, key]);
 }
 
 /** Props for a "..." overflow button that opens the same menu under itself (click, Enter or Space). */
-export function useMenuButton(): (build: () => MenuInput) => { onClick: (e: ReactMouseEvent) => void; 'aria-haspopup': 'menu' } {
+export function useMenuButton(): (build: () => MenuInput, id?: string) => { onClick: (e: ReactMouseEvent) => void; 'aria-haspopup': 'menu' } {
   const open = useContext(Ctx);
-  return useCallback((build: () => MenuInput) => ({
-    'aria-haspopup': 'menu' as const,
-    onClick: (e: ReactMouseEvent) => {
-      if (!open) return;
-      const r = (e.currentTarget as Element).getBoundingClientRect();
-      open(Math.round(r.left), Math.round(r.bottom + 4), build(), { from: e.currentTarget as Element, keyboard: e.detail === 0 });
-    },
-  }), [open]);
+  const key = useLiveKeys();
+  return useCallback((build: () => MenuInput, id?: string) => {
+    const source = key(id);
+    live.set(source, build);
+    return {
+      'aria-haspopup': 'menu' as const,
+      onClick: (e: ReactMouseEvent) => {
+        if (!open) return;
+        const r = (e.currentTarget as Element).getBoundingClientRect();
+        open(Math.round(r.left), Math.round(r.bottom + 4), build(), { from: e.currentTarget as Element, keyboard: e.detail === 0, source });
+      },
+    };
+  }, [open, key]);
 }
 
 /** Copies and says so in a toast-less way (the menu closes; failures are silent like the browser's own Copy). */
@@ -75,19 +114,48 @@ function editMenu(el: HTMLInputElement | HTMLTextAreaElement | HTMLElement): Men
   ]);
 }
 
+/** What a panel was opened with (kept beside the pure stack entry). */
+interface Extra { items: MenuEntry[]; from: Element | null; keyboard: boolean }
+
 export function ContextMenuProvider({ children }: { children: ReactNode }) {
-  const [state, setState] = useState<Open | null>(null);
+  const [stack, setStack] = useState<StackEntry[]>([]);
+  const stackRef = useRef(stack);
+  stackRef.current = stack;
+  const extras = useRef(new Map<string, Extra>());
+  const seq = useRef(0);
+  const nextUid = () => `m${++seq.current}`;
+
   const open = useCallback<OpenFn>((x, y, input, opts) => {
     const items = tidy(input);
     if (!items.length) return;
-    setState({ x, y, items, from: opts?.from ?? (document.activeElement as Element | null), keyboard: !!opts?.keyboard });
+    const uid = nextUid();
+    extras.current.set(uid, { items, from: opts?.from ?? (document.activeElement as Element | null), keyboard: !!opts?.keyboard });
+    setStack(s => openMenu(s, { uid, source: opts?.source ?? null, path: [], pinned: false, x, y }));
   }, []);
-  const close = useCallback((restore: boolean) => {
-    setState(s => {
-      if (restore && s?.from instanceof HTMLElement && s.from.isConnected) s.from.focus({ preventScroll: true });
-      return null;
-    });
+  /** Every unpinned menu closes; `restore` puts the focus back where the last one was opened. */
+  const closeTransient = useCallback((restore: boolean) => {
+    const last = [...stackRef.current].reverse().find(e => !e.pinned);
+    if (!last) return;
+    const from = extras.current.get(last.uid)?.from;
+    if (restore && from instanceof HTMLElement && from.isConnected) from.focus({ preventScroll: true });
+    setStack(s => closeUnpinned(s));
   }, []);
+  const pin = useCallback((uid: string, pos: Pos) => setStack(s => pinMenu(s, uid, pos)), []);
+  /** A submenu at `path` of panel `uid` becomes its own pinned panel at `pos`. */
+  const tear = useCallback((uid: string, path: string[], pos: Pos, closeOthers: boolean) => {
+    const parent = stackRef.current.find(e => e.uid === uid);
+    const extra = extras.current.get(uid);
+    if (!parent || !extra) return;
+    const id = nextUid();
+    extras.current.set(id, { items: extra.items, from: null, keyboard: false });
+    setStack(s => tearOff(closeOthers ? closeUnpinned(s) : s, { uid: id, source: parent.source, path: [...parent.path, ...path], pinned: true, x: pos.x, y: pos.y }, pos));
+  }, []);
+
+  // what a closed panel was opened with is not kept
+  useEffect(() => {
+    const ids = new Set(stack.map(e => e.uid));
+    for (const k of [...extras.current.keys()]) if (!ids.has(k)) extras.current.delete(k);
+  }, [stack]);
 
   useEffect(() => {
     // the fallback for everything no screen menu handled: never the browser's menu
@@ -118,15 +186,30 @@ export function ContextMenuProvider({ children }: { children: ReactNode }) {
     return () => { document.removeEventListener('contextmenu', onMenu); document.removeEventListener('keydown', onKey, true); };
   }, [open]);
 
+  const hasTransient = stack.some(e => !e.pinned);
   return (
     <Ctx.Provider value={open}>
       {children}
-      {state && createPortal(<MenuRoot key={`${state.x},${state.y}`} state={state} close={close} />, document.body)}
+      {stack.length > 0 && createPortal(<>
+        {hasTransient && <OutsideCloser close={closeTransient} />}
+        {stack.map(e => {
+          const extra = extras.current.get(e.uid);
+          if (!extra) return null;
+          return e.pinned
+            ? <PinnedPanel key={e.uid} entry={e} extra={extra} closeTransient={closeTransient}
+              onClose={() => setStack(s => closeMenu(s, e.uid))} onUnpin={() => setStack(s => unpinMenu(s, e.uid))}
+              onMove={p => setStack(s => moveMenu(s, e.uid, p))} onTear={(path, p) => tear(e.uid, path, p, false)} />
+            : <MenuList key={e.uid} items={extra.items} at={{ x: e.x, y: e.y }} close={closeTransient} root keyboard={extra.keyboard} path={[]}
+              onPin={r => pin(e.uid, { x: r.left, y: r.top })} onTear={(path, p, others) => tear(e.uid, path, p, others)} />;
+        })}
+      </>, document.body)}
     </Ctx.Provider>
   );
 }
 
-function MenuRoot({ state, close }: { state: Open; close: (restore: boolean) => void }) {
+/** While a normal menu is open: a click outside every menu, a scroll outside, blur or resize closes it (pinned panels
+ *  stay). */
+function OutsideCloser({ close }: { close: (restore: boolean) => void }) {
   useEffect(() => {
     const outside = (e: Event) => { if (!(e.target as Element | null)?.closest?.('.ds-menu')) close(false); };
     const scroll = (e: Event) => { if (!(e.target instanceof Element && e.target.closest('.ds-menu'))) close(false); };
@@ -142,12 +225,43 @@ function MenuRoot({ state, close }: { state: Open; close: (restore: boolean) =>
       window.removeEventListener('resize', blur);
     };
   }, [close]);
-  return <MenuList items={state.items} at={{ x: state.x, y: state.y }} close={close} root keyboard={state.keyboard} />;
+  return null;
 }
 
-type Anchor = { x: number; y: number } | { left: number; right: number; top: number };
+/** A pinned panel: its entries re-read from the live source on every change of the screen that registered it. */
+function PinnedPanel({ entry, extra, closeTransient, onClose, onUnpin, onMove, onTear }: {
+  entry: StackEntry; extra: Extra; closeTransient: (restore: boolean) => void; onClose: () => void; onUnpin: () => void;
+  onMove: (p: Pos) => void; onTear: (path: string[], p: Pos) => void;
+}) {
+  const [, bump] = useReducer((n: number) => n + 1, 0);
+  useEffect(() => (entry.source ? live.watch(entry.source, bump) : undefined), [entry.source]);
+  const root = entry.source ? live.get(entry.source) ?? null : extra.items;
+  const items = root ? resolvePath(root, entry.path) : null;
+  const title = entry.path.length ? entry.path[entry.path.length - 1]! : t('cm.menu');
+  return (
+    <MenuList items={items ?? []} gone={!items} at={{ fx: entry.x, fy: entry.y }} close={() => {}} root path={[]}
+      pinned={{ title, onClose, onUnpin, onMove }} done={() => closeTransient(false)} onTear={(path, p) => onTear(path, p)} />
+  );
+}
 
-function MenuList({ items, at, close, root, keyboard, onBack }: { items: MenuEntry[]; at: Anchor; close: (restore: boolean) => void; root?: boolean; keyboard?: boolean; onBack?: () => void }) {
+type Anchor = { x: number; y: number } | { left: number; right: number; top: number } | { fx: number; fy: number };
+
+interface PinnedHead { title: string; onClose: () => void; onUnpin: () => void; onMove: (p: Pos) => void }
+
+function MenuList({ items, at, close, root, keyboard, onBack, path, onPin, onTear, pinned, gone, done }: {
+  items: MenuEntry[]; at: Anchor; close: (restore: boolean) => void; root?: boolean; keyboard?: boolean; onBack?: () => void;
+  /** Submenu labels from the panel's root to this list. */
+  path: string[];
+  /** The pin button of a normal (root) menu. */
+  onPin?: (rect: DOMRect) => void;
+  /** A submenu torn off: its path (from the panel root), where, and whether the normal menus close. */
+  onTear?: (path: string[], pos: Pos, closeOthers: boolean) => void;
+  /** This is a pinned panel's root list: header with title, unpin, close, drag. */
+  pinned?: PinnedHead;
+  gone?: boolean;
+  /** After a pick in a pinned panel (normal menus close; the panel stays). */
+  done?: () => void;
+}) {
   const uid = useId();
   const ref = useRef<HTMLDivElement>(null);
   const [pos, setPos] = useState<{ left: number; top: number } | null>(null);
@@ -155,19 +269,33 @@ function MenuList({ items, at, close, root, keyboard, onBack }: { items: MenuEnt
   const [sub, setSub] = useState<{ index: number; anchor: Anchor; focus: boolean } | null>(null);
   const typed = useRef({ q: '', at: 0 });
   const hoverTimer = useRef<number | undefined>(undefined);
+  const shown = useRef(false);
+  const drag = useRef<{ dx: number; dy: number } | null>(null);
+  const fixed = 'fx' in at ? at : null;
 
   useLayoutEffect(() => {
     const el = ref.current;
     if (!el) return;
     const box = { w: el.offsetWidth, h: el.offsetHeight }, view = { w: window.innerWidth, h: window.innerHeight };
-    setPos('x' in at ? placeAt(at.x, at.y, box, view) : placeBeside(at, box, view));
-  }, [at]);
+    if ('fx' in at) { const p = clampPos({ x: at.fx, y: at.fy }, box, view); setPos({ left: p.x, top: p.y }); }
+    else setPos('x' in at ? placeAt(at.x, at.y, box, view) : placeBeside(at, box, view));
+    // a pinned panel follows its position (drag) and stays inside the window when it shrinks
+  }, ['fx' in at ? at.fx : 'x' in at ? at.x : at.left, 'fx' in at ? at.fy : 'x' in at ? at.y : at.top, items.length]);
   useEffect(() => {
-    if (!pos) return;
+    if (!fixed) return;
+    const onResize = () => { const el = ref.current; if (el) { const p = clampPos({ x: fixed.fx, y: fixed.fy }, { w: el.offsetWidth, h: el.offsetHeight }, { w: window.innerWidth, h: window.innerHeight }); setPos({ left: p.x, top: p.y }); } };
+    window.addEventListener('resize', onResize);
+    return () => window.removeEventListener('resize', onResize);
+  }, [fixed?.fx, fixed?.fy]);
+  useEffect(() => {
+    if (!pos || shown.current) return;
+    shown.current = true;
+    // a pinned panel never takes the focus by itself (it updates while the owner works elsewhere)
+    if (pinned) return;
     ref.current?.focus({ preventScroll: true });
     // a submenu, or a menu opened from the keyboard, starts on its first item; a mouse-opened menu waits for a key
     if (!root || keyboard) setActive(first(items));
-  }, [pos, root, keyboard, items]);
+  }, [pos, root, keyboard, items, pinned]);
   useEffect(() => () => window.clearTimeout(hoverTimer.current), []);
 
   const itemEl = (i: number) => ref.current?.querySelector<HTMLElement>(`[data-i="${i}"]`) ?? null;
@@ -177,11 +305,22 @@ function MenuList({ items, at, close, root, keyboard, onBack }: { items: MenuEnt
     const r = el.getBoundingClientRect();
     setSub({ index: i, anchor: { left: r.left, right: r.right, top: r.top }, focus });
   };
-  const choose = (i: number) => {
+  const tearAt = (i: number) => {
+    const e = items[i];
+    const el = itemEl(i);
+    if (!isItem(e) || !e.submenu || !el || !onTear) return;
+    const r = el.getBoundingClientRect();
+    onTear([...path, e.label], { x: Math.round(r.right + 6), y: Math.round(r.top - 30) }, false);
+  };
+  const choose = (i: number, ev?: { button: number; ctrlKey: boolean; metaKey: boolean }) => {
     const e = items[i];
     if (!enabled(e)) return;
-    if (e.submenu) { openSub(i, true); return; }
-    close(true);
+    if (e.submenu) {
+      if (ev && (ev.button === 1 || ev.ctrlKey || ev.metaKey)) { tearAt(i); return; }
+      openSub(i, true);
+      return;
+    }
+    if (done) { setSub(null); done(); } else close(true);
     // after the menu is gone, so the action sees the restored focus (paste, select all)
     window.setTimeout(() => e.onSelect?.(), 0);
   };
@@ -197,8 +336,8 @@ function MenuList({ items, at, close, root, keyboard, onBack }: { items: MenuEnt
     else if (k === 'Enter' || k === ' ') { stop(); if (active >= 0) choose(active); }
     else if (k === 'ArrowRight') { stop(); const e = items[active]; if (enabled(e) && e.submenu) openSub(active, true); }
     else if (k === 'ArrowLeft') { stop(); onBack?.(); }
-    else if (k === 'Escape') { stop(); if (onBack) onBack(); else close(true); }
-    else if (k === 'Tab') { stop(); close(true); }
+    else if (k === 'Escape') { stop(); if (onBack) onBack(); else if (pinned) ref.current?.blur(); else close(true); }
+    else if (k === 'Tab') { stop(); if (!pinned) close(true); }
     else if (k.length === 1 && !ev.ctrlKey && !ev.metaKey && !ev.altKey) {
       stop();
       const now = Date.now();
@@ -211,12 +350,44 @@ function MenuList({ items, at, close, root, keyboard, onBack }: { items: MenuEnt
 
   useEffect(() => { if (active >= 0) itemEl(active)?.scrollIntoView({ block: 'nearest' }); }, [active]);
 
+  // a pinned panel is dragged by its header
+  const onHeadDown = (e: ReactPointerEvent) => {
+    if (!pinned || e.button !== 0 || (e.target as Element).closest('button') || !pos) return;
+    drag.current = { dx: e.clientX - pos.left, dy: e.clientY - pos.top };
+    (e.currentTarget as Element).setPointerCapture(e.pointerId);
+  };
+  const onHeadMove = (e: ReactPointerEvent) => {
+    if (!drag.current || !pinned) return;
+    pinned.onMove({ x: Math.round(e.clientX - drag.current.dx), y: Math.round(e.clientY - drag.current.dy) });
+  };
+  const onHeadUp = () => { drag.current = null; };
+
+  // the header: a pinned panel's title, unpin and close; a normal menu's (or submenu's) pin button
+  const pinHere = () => {
+    if (pinned) return pinned.onUnpin();
+    const r = ref.current?.getBoundingClientRect();
+    if (!r) return;
+    if (path.length) onTear?.(path, { x: Math.round(r.left), y: Math.round(r.top) }, true);
+    else onPin?.(r);
+  };
+  const canPin = !!pinned || (path.length ? !!onTear : !!onPin);
+  const head = canPin && (
+    <div className={`ds-menu-head${pinned ? ' pinned' : ''}`} onPointerDown={onHeadDown} onPointerMove={onHeadMove} onPointerUp={onHeadUp} onPointerCancel={onHeadUp}>
+      <span className="ds-menu-title">{pinned ? pinned.title : path.length ? path[path.length - 1] : ''}</span>
+      <button type="button" className={`ds-menu-btn${pinned ? ' on' : ''}`} title={pinned ? t('cm.unpin') : t('cm.pin')} aria-label={pinned ? t('cm.unpin') : t('cm.pin')}
+        aria-pressed={!!pinned} onClick={pinHere}><Icon name={pinned ? 'pinOff' : 'pin'} /></button>
+      {pinned && <button type="button" className="ds-menu-btn" title={t('cm.closePanel')} aria-label={t('cm.closePanel')} onClick={pinned.onClose}><Icon name="x" /></button>}
+    </div>
+  );
+
   return (
     <>
-      <div ref={ref} className={`ds-menu${pos ? ' in' : ''}`} role="menu" tabIndex={-1} onKeyDown={onKey}
+      <div ref={ref} className={`ds-menu${pos ? ' in' : ''}${pinned ? ' pinned' : ''}`} role="menu" tabIndex={-1} onKeyDown={onKey}
         style={pos ? { left: pos.left, top: pos.top } : { left: -9999, top: -9999 }}
-        aria-activedescendant={active >= 0 ? `${uid}-${active}` : undefined}
+        aria-label={pinned?.title} aria-activedescendant={active >= 0 ? `${uid}-${active}` : undefined}
         onContextMenu={e => e.preventDefault()}>
+        {head}
+        {gone && <div className="ds-menu-gone">{t('cm.gone')}</div>}
         {items.map((e, i) => {
           if (!isItem(e)) return <div key={`s${i}`} className="ds-menu-sep" role="separator" />;
           const dis = !!e.disabled;
@@ -225,7 +396,7 @@ function MenuList({ items, at, close, root, keyboard, onBack }: { items: MenuEnt
             <div key={i} id={`${uid}-${i}`} data-i={i} role={checkable ? 'menuitemcheckbox' : 'menuitem'}
               aria-checked={checkable ? e.checked : undefined} aria-disabled={dis || undefined}
               aria-haspopup={e.submenu ? 'menu' : undefined} aria-expanded={e.submenu ? sub?.index === i : undefined}
-              title={typeof e.disabled === 'string' ? e.disabled : undefined}
+              title={typeof e.disabled === 'string' ? e.disabled : e.submenu && onTear ? t('cm.tearOff') : undefined}
               className={`ds-menu-item${i === active ? ' active' : ''}${e.danger ? ' danger' : ''}${dis ? ' disabled' : ''}`}
               onPointerMove={() => {
                 if (active !== i) setActive(dis ? -1 : i);
@@ -233,7 +404,9 @@ function MenuList({ items, at, close, root, keyboard, onBack }: { items: MenuEnt
                 if (!dis && e.submenu) { if (sub?.index !== i) hoverTimer.current = window.setTimeout(() => openSub(i, false), 120); }
                 else if (sub) hoverTimer.current = window.setTimeout(() => setSub(null), 200);
               }}
-              onClick={() => choose(i)}>
+              onMouseDown={ev => { if (ev.button === 1) ev.preventDefault(); }}
+              onAuxClick={ev => { if (ev.button === 1) choose(i, ev); }}
+              onClick={ev => choose(i, ev)}>
               <span className="ds-menu-ic">{checkable ? (e.checked ? <Icon name="check" /> : null) : e.icon ? <Icon name={e.icon} /> : null}</span>
               <span className="ds-menu-l">{e.label}</span>
               {e.shortcut && <span className="ds-menu-k">{e.shortcut}</span>}
@@ -243,7 +416,8 @@ function MenuList({ items, at, close, root, keyboard, onBack }: { items: MenuEnt
         })}
       </div>
       {sub && isItem(items[sub.index]) && (items[sub.index] as MenuItem).submenu && (
-        <MenuList key={sub.index} items={(items[sub.index] as MenuItem).submenu as MenuEntry[]} at={sub.anchor} close={close}
+        <MenuList key={sub.index} items={(items[sub.index] as MenuItem).submenu as MenuEntry[]} at={sub.anchor} close={close} done={done}
+          path={[...path, (items[sub.index] as MenuItem).label]} onTear={onTear}
           onBack={() => { setSub(null); ref.current?.focus({ preventScroll: true }); }} />
       )}
     </>
diff --git a/apps/desktop/src/ui/icons.tsx b/apps/desktop/src/ui/icons.tsx
index 6d0cb1c..d941d89 100644
--- a/apps/desktop/src/ui/icons.tsx
+++ b/apps/desktop/src/ui/icons.tsx
@@ -55,6 +55,8 @@ import { PauseIcon } from '@phosphor-icons/react/dist/csr/Pause';
 import { PencilSimpleIcon } from '@phosphor-icons/react/dist/csr/PencilSimple';
 import { PlayIcon } from '@phosphor-icons/react/dist/csr/Play';
 import { PlusIcon } from '@phosphor-icons/react/dist/csr/Plus';
+import { PushPinIcon } from '@phosphor-icons/react/dist/csr/PushPin';
+import { PushPinSlashIcon } from '@phosphor-icons/react/dist/csr/PushPinSlash';
 import { PulseIcon } from '@phosphor-icons/react/dist/csr/Pulse';
 import { QuestionIcon } from '@phosphor-icons/react/dist/csr/Question';
 import { RocketLaunchIcon } from '@phosphor-icons/react/dist/csr/RocketLaunch';
@@ -89,7 +91,7 @@ const ICONS = {
   more: DotsThreeIcon, gauge: GaugeIcon, eye: EyeIcon, eyeOff: EyeSlashIcon, link: LinkIcon, unlink: LinkBreakIcon, bell: BellIcon, filter: FunnelIcon, play: PlayIcon,
   send: PaperPlaneRightIcon, edit: PencilSimpleIcon, upload: UploadSimpleIcon, sliders: SlidersHorizontalIcon,
   rotate: ArrowCounterClockwiseIcon, cloud: CloudIcon, coins: CoinsIcon, chart: TrendUpIcon, flask: FlaskIcon, grid: GridFourIcon,
-  clipboard: ClipboardTextIcon, share: ExportIcon, lock: LockIcon, question: QuestionIcon,
+  clipboard: ClipboardTextIcon, share: ExportIcon, lock: LockIcon, question: QuestionIcon, pin: PushPinIcon, pinOff: PushPinSlashIcon,
 } satisfies Record<string, PhosphorIcon>;
 
 export type IconName = keyof typeof ICONS;
diff --git a/apps/desktop/src/ui/menu-stack.ts b/apps/desktop/src/ui/menu-stack.ts
new file mode 100644
index 0000000..300371d
--- /dev/null
+++ b/apps/desktop/src/ui/menu-stack.ts
@@ -0,0 +1,140 @@
+// The in-app context menus' panel stack without React or the DOM (tested in tests/menu-stack.test.ts): several menus
+// open at once, a submenu chain per menu, pinned panels that survive the next menu, step aside so they never sit on
+// each other and stay inside the window; plus the live sources pinned panels re-read their entries from.
+import type { MenuEntry, MenuInput, MenuItem } from './menu-logic';
+import { tidy } from './menu-logic';
+
+export interface Pos { x: number; y: number }
+
+/** One open panel: a root menu, or a submenu torn off (pinned) at `path` (submenu labels from the root). */
+export interface StackEntry {
+  uid: string;
+  /** The live source of its entries (`liveKey`), or null for a menu built once (the edit menu). */
+  source: string | null;
+  path: readonly string[];
+  pinned: boolean;
+  x: number;
+  y: number;
+}
+
+/** Pinned panels step this far (CSS px) until no other pinned panel sits there. */
+export const OFFSET_STEP = 24;
+
+const same = (a: Pick<StackEntry, 'source' | 'path'>, b: Pick<StackEntry, 'source' | 'path'>) =>
+  a.source !== null && a.source === b.source && a.path.length === b.path.length && a.path.every((p, i) => p === b.path[i]);
+
+/** Opening a menu closes only the unpinned ones. */
+export function openMenu(list: readonly StackEntry[], entry: StackEntry): StackEntry[] {
+  return [...list.filter(e => e.pinned), entry];
+}
+
+/** Outside click, Esc, a pick, scroll, blur: every unpinned panel closes (the same list when there is none). */
+export function closeUnpinned(list: readonly StackEntry[]): StackEntry[] {
+  return list.some(e => !e.pinned) ? list.filter(e => e.pinned) : (list as StackEntry[]);
+}
+
+export function closeMenu(list: readonly StackEntry[], uid: string): StackEntry[] {
+  return list.some(e => e.uid === uid) ? list.filter(e => e.uid !== uid) : (list as StackEntry[]);
+}
+
+/** A free spot: steps down-right until no taken spot is within a step of it. */
+export function autoOffset(taken: readonly Pos[], pos: Pos, step = OFFSET_STEP): Pos {
+  let next = { ...pos };
+  for (let k = 0; k < 200 && taken.some(t => Math.abs(t.x - next.x) < step && Math.abs(t.y - next.y) < step); k++) next = { x: next.x + step, y: next.y + step };
+  return next;
+}
+
+const taken = (list: readonly StackEntry[], skip?: string): Pos[] => list.filter(e => e.pinned && e.uid !== skip).map(e => ({ x: e.x, y: e.y }));
+
+/** Pins an open panel where it is (moved off other pinned panels). A pinned copy of the same panel is replaced. */
+export function pinMenu(list: readonly StackEntry[], uid: string, pos: Pos): StackEntry[] {
+  const entry = list.find(e => e.uid === uid);
+  if (!entry || entry.pinned) return list as StackEntry[];
+  const rest = list.filter(e => !(e.pinned && same(e, entry)));
+  const at = autoOffset(taken(rest, uid), pos);
+  return rest.map(e => (e.uid === uid ? { ...e, pinned: true, x: at.x, y: at.y } : e));
+}
+
+/** A submenu torn off its menu (pin button on a submenu, Ctrl / middle click on its row): a new pinned panel. The menu
+ *  it came from stays open. */
+export function tearOff(list: readonly StackEntry[], entry: StackEntry, pos: Pos): StackEntry[] {
+  const rest = list.filter(e => !(e.pinned && same(e, entry)));
+  const at = autoOffset(taken(rest), pos);
+  return [...rest, { ...entry, pinned: true, x: at.x, y: at.y }];
+}
+
+/** Unpin: a root menu becomes a normal menu again (it closes with the next one); a torn-off submenu closes. */
+export function unpinMenu(list: readonly StackEntry[], uid: string): StackEntry[] {
+  const entry = list.find(e => e.uid === uid);
+  if (!entry?.pinned) return list as StackEntry[];
+  if (entry.path.length > 0) return closeMenu(list, uid);
+  return list.map(e => (e.uid === uid ? { ...e, pinned: false } : e));
+}
+
+export function moveMenu(list: readonly StackEntry[], uid: string, pos: Pos): StackEntry[] {
+  return list.map(e => (e.uid === uid ? { ...e, x: pos.x, y: pos.y } : e));
+}
+
+/** Keeps a panel of `size` inside `box` (the window), `margin` from its edges. */
+export function clampPos(pos: Pos, size: { w: number; h: number }, box: { w: number; h: number }, margin = 8): Pos {
+  return { x: Math.max(margin, Math.min(pos.x, box.w - size.w - margin)), y: Math.max(margin, Math.min(pos.y, box.h - size.h - margin)) };
+}
+
+/** The entries at `path` (submenu labels) inside a menu, or null when that submenu is gone. */
+export function resolvePath(items: readonly MenuEntry[], path: readonly string[]): MenuEntry[] | null {
+  let cur = items as MenuEntry[];
+  for (const label of path) {
+    const next = cur.find((e): e is MenuItem => e !== 'sep' && e.label === label && !!e.submenu);
+    if (!next) return null;
+    cur = next.submenu as MenuEntry[];
+  }
+  return cur;
+}
+
+// ---- live sources ----
+
+/**
+ * The menus' live sources: every `useContextMenu` / `useMenuButton` call registers the builder it got on each render,
+ * so a pinned panel re-reads its entries from the newest builder (fresh data, fresh actions) and updates in place. A
+ * source that is gone (its row unmounted) gives null: the panel says so instead of closing.
+ */
+export class LiveMenus {
+  private builders = new Map<string, () => MenuInput>();
+  private subs = new Map<string, Set<() => void>>();
+  private pending = new Set<string>();
+  constructor(private schedule: (fn: () => void) => void = fn => queueMicrotask(fn)) {}
+
+  /** Registers (or replaces) the builder of `key`; its watchers hear about it once per batch. */
+  set(key: string, build: () => MenuInput): void {
+    this.builders.set(key, build);
+    this.ping(key);
+  }
+  delete(key: string): void {
+    if (this.builders.delete(key)) this.ping(key);
+  }
+  /** Keeps only the keys of one hook (`prefix#...`) that its last render registered; `keep` empty drops them all. */
+  retain(prefix: string, keep: ReadonlySet<string> = new Set()): void {
+    for (const k of [...this.builders.keys()]) if (k.startsWith(`${prefix}#`) && !keep.has(k)) this.delete(k);
+  }
+  /** The entries of `key` now (tidied), or null when it is gone. */
+  get(key: string): MenuEntry[] | null {
+    const b = this.builders.get(key);
+    if (!b) return null;
+    try { return tidy(b()); } catch { return null; }
+  }
+  has(key: string): boolean { return this.builders.has(key); }
+  watch(key: string, fn: () => void): () => void {
+    let s = this.subs.get(key);
+    if (!s) { s = new Set(); this.subs.set(key, s); }
+    s.add(fn);
+    return () => { s.delete(fn); if (!s.size) this.subs.delete(key); };
+  }
+  private ping(key: string): void {
+    if (!this.subs.has(key) || this.pending.has(key)) return;
+    this.pending.add(key);
+    this.schedule(() => {
+      this.pending.delete(key);
+      for (const fn of [...(this.subs.get(key) ?? [])]) fn();
+    });
+  }
+}
diff --git a/apps/desktop/tests/menu-stack.test.ts b/apps/desktop/tests/menu-stack.test.ts
new file mode 100644
index 0000000..b1c4b67
--- /dev/null
+++ b/apps/desktop/tests/menu-stack.test.ts
@@ -0,0 +1,150 @@
+// The in-app context menus' panel stack (ui/menu-stack.ts): several menus open, pinned panels that survive the next
+// menu and never sit on each other, tear-offs, live sources that a pinned panel re-reads, and the wiring in
+// ContextMenu.tsx that keeps it that way.
+import { describe, expect, test } from 'bun:test';
+import { readFileSync } from 'node:fs';
+import { join } from 'node:path';
+import type { MenuEntry, MenuInput } from '../src/ui/menu-logic';
+import { autoOffset, clampPos, closeMenu, closeUnpinned, LiveMenus, moveMenu, OFFSET_STEP, openMenu, pinMenu, resolvePath, type StackEntry, tearOff, unpinMenu } from '../src/ui/menu-stack';
+
+const e = (uid: string, extra: Partial<StackEntry> = {}): StackEntry => ({ uid, source: `src-${uid}`, path: [], pinned: false, x: 10, y: 10, ...extra });
+const uids = (l: readonly StackEntry[]) => l.map(x => `${x.uid}${x.pinned ? '*' : ''}`);
+
+describe('menu stack', () => {
+  test('opening a menu closes only the unpinned ones', () => {
+    let l = openMenu([], e('a'));
+    l = pinMenu(l, 'a', { x: 100, y: 100 });
+    l = openMenu(l, e('b'));
+    l = openMenu(l, e('c'));
+    expect(uids(l)).toEqual(['a*', 'c']);
+    l = closeUnpinned(l);
+    expect(uids(l)).toEqual(['a*']);
+    expect(closeUnpinned(l)).toBe(l); // nothing to close: the same list (no re-render)
+  });
+
+  test('a pinned panel steps aside from other pinned panels', () => {
+    let l = [e('a', { pinned: true, x: 100, y: 100 }), e('b')];
+    l = pinMenu(l, 'b', { x: 104, y: 98 });
+    const b = l.find(x => x.uid === 'b')!;
+    expect(b.pinned).toBe(true);
+    expect(Math.abs(b.x - 100) >= OFFSET_STEP || Math.abs(b.y - 100) >= OFFSET_STEP).toBe(true);
+    expect(autoOffset([{ x: 0, y: 0 }, { x: 24, y: 24 }], { x: 0, y: 0 })).toEqual({ x: 48, y: 48 });
+    expect(autoOffset([], { x: 5, y: 5 })).toEqual({ x: 5, y: 5 });
+  });
+
+  test('pinning the same panel again replaces the old pinned copy', () => {
+    let l = [e('a', { pinned: true, source: 's', path: ['Copy'] }), e('b', { source: 's', path: ['Copy'] })];
+    l = pinMenu(l, 'b', { x: 300, y: 300 });
+    expect(uids(l)).toEqual(['b*']);
+    // a menu without a live source (the edit menu) is never "the same" as another
+    l = [e('a', { pinned: true, source: null }), e('b', { source: null })];
+    expect(uids(pinMenu(l, 'b', { x: 300, y: 300 }))).toEqual(['a*', 'b*']);
+  });
+
+  test('a torn-off submenu is its own pinned panel and the menu it came from stays open', () => {
+    let l = openMenu([], e('a'));
+    l = tearOff(l, e('t', { path: ['Open tab'] }), { x: 50, y: 50 });
+    expect(uids(l)).toEqual(['a', 't*']);
+    // the same submenu torn off again: one copy
+    l = tearOff(l, e('t2', { path: ['Open tab'], source: 'src-t' }), { x: 50, y: 50 });
+    expect(uids(l)).toEqual(['a', 't2*']);
+  });
+
+  test('unpin: a root menu becomes a normal menu again, a torn-off submenu closes', () => {
+    let l = [e('a', { pinned: true }), e('t', { pinned: true, path: ['Copy'] })];
+    l = unpinMenu(l, 'a');
+    expect(uids(l)).toEqual(['a', 't*']);
+    l = unpinMenu(l, 't');
+    expect(uids(l)).toEqual(['a']);
+    expect(uids(closeMenu(l, 'a'))).toEqual([]);
+    expect(closeMenu(l, 'zz')).toBe(l);
+  });
+
+  test('a moved panel keeps the move; positions stay inside the window', () => {
+    const l = moveMenu([e('a', { pinned: true })], 'a', { x: 400, y: 20 });
+    expect(l[0]).toMatchObject({ x: 400, y: 20 });
+    expect(clampPos({ x: 1900, y: -40 }, { w: 240, h: 300 }, { w: 1280, h: 800 })).toEqual({ x: 1280 - 240 - 8, y: 8 });
+    expect(clampPos({ x: 100, y: 100 }, { w: 240, h: 300 }, { w: 1280, h: 800 })).toEqual({ x: 100, y: 100 });
+  });
+
+  test('resolvePath walks submenu labels; a gone submenu gives null', () => {
+    const items: MenuEntry[] = [{ label: 'Open' }, 'sep', { label: 'Copy', submenu: [{ label: 'Name' }, { label: 'More', submenu: [{ label: 'Deep' }] }] }];
+    expect(resolvePath(items, [])).toBe(items);
+    expect(resolvePath(items, ['Copy', 'More'])!.map(x => (x === 'sep' ? '-' : x.label))).toEqual(['Deep']);
+    expect(resolvePath(items, ['Open'])).toBeNull(); // not a submenu
+    expect(resolvePath(items, ['Gone'])).toBeNull();
+  });
+});
+
+describe('live sources', () => {
+  const sync = () => {
+    const queue: (() => void)[] = [];
+    return { live: new LiveMenus(fn => queue.push(fn)), flush: () => { while (queue.length) queue.shift()!(); } };
+  };
+
+  test('a pinned panel hears once per batch and re-reads the newest builder', () => {
+    const { live, flush } = sync();
+    let value = 1;
+    const build = (): MenuInput => [{ label: `Rollout ${value}%` }, false];
+    live.set('h#0', build);
+    let heard = 0;
+    const off = live.watch('h#0', () => heard++);
+    value = 20;
+    live.set('h#0', build);
+    live.set('h#0', build);
+    expect(heard).toBe(0);
+    flush();
+    expect(heard).toBe(1);
+    expect(live.get('h#0')!.map(x => (x === 'sep' ? '-' : x.label))).toEqual(['Rollout 20%']);
+    off();
+    live.set('h#0', build);
+    flush();
+    expect(heard).toBe(1);
+  });
+
+  test('keys a render no longer makes are dropped and their panels hear it (gone, not closed)', () => {
+    const { live, flush } = sync();
+    live.set('h#0', () => [{ label: 'A' }]);
+    live.set('h#app:k1', () => [{ label: 'B' }]);
+    live.set('other#0', () => [{ label: 'C' }]);
+    let heard = 0;
+    live.watch('h#app:k1', () => heard++);
+    live.retain('h', new Set(['h#0']));
+    flush();
+    expect(heard).toBe(1);
+    expect(live.get('h#app:k1')).toBeNull();
+    expect(live.has('h#0') && live.has('other#0')).toBe(true);
+    live.retain('h');
+    expect(live.has('h#0')).toBe(false);
+    expect(live.has('other#0')).toBe(true);
+  });
+
+  test('a builder that throws reads as gone', () => {
+    const { live } = sync();
+    live.set('x#0', () => { throw new Error('boom'); });
+    expect(live.get('x#0')).toBeNull();
+    expect(live.get('missing')).toBeNull();
+  });
+});
+
+describe('wiring', () => {
+  const s = readFileSync(join(import.meta.dir, '../src/ui/ContextMenu.tsx'), 'utf8');
+  test('menus register live sources and pinned panels re-read them', () => {
+    expect(s).toMatch(/live\.set\(source, build\)/);
+    expect(s).toMatch(/live\.watch\(entry\.source, bump\)/);
+    expect(s).toMatch(/resolvePath\(root, entry\.path\)/);
+  });
+  test('an outside click closes only the normal menus; a pick in a pinned panel keeps it', () => {
+    expect(s).toMatch(/closeUnpinned\(s\)/);
+    expect(s).toMatch(/done=\{\(\) => closeTransient\(false\)\}/);
+    expect(s).toMatch(/ev\.button === 1 \|\| ev\.ctrlKey \|\| ev\.metaKey/);
+  });
+  test('the app menus carry the app key, so a pinned panel follows the app when rows reorder', () => {
+    for (const f of ['src/App.tsx', 'src/screens/AppView.tsx', 'src/screens/Ignored.tsx', 'src/screens/Portfolio.tsx']) {
+      const src = readFileSync(join(import.meta.dir, '..', f), 'utf8');
+      const lines = src.split('\n').filter(l => l.includes('=> appMenu('));
+      expect(lines.length, f).toBeGreaterThan(0);
+      for (const l of lines) expect(l, f).toMatch(/`app:\$\{/);
+    }
+  });
+});
diff --git a/apps/desktop/tests/tray-menu.test.ts b/apps/desktop/tests/tray-menu.test.ts
new file mode 100644
index 0000000..1b36a6f
--- /dev/null
+++ b/apps/desktop/tests/tray-menu.test.ts
@@ -0,0 +1,85 @@
+// The tray menu panels' page (src/traymenu/): the tree from Rust, paths by stable keys, the row split, filtering,
+// keyboard moves, a live update that keeps the highlight, and the page's wiring (its own bundle, dev demo only in dev).
+import { describe, expect, test } from 'bun:test';
+import { readFileSync } from 'node:fs';
+import { join } from 'node:path';
+import { filterNodes, findPath, isTearOff, keepActive, type MenuNode, nextIndex, rows, split } from '../src/traymenu/model';
+
+const ROOT = join(import.meta.dir, '..');
+const src = (f: string) => readFileSync(join(ROOT, f), 'utf8');
+const item = (id: string, label: string, enabled = true): MenuNode => ({ kind: 'item', id, label, enabled });
+const tree = (state: string): MenuNode[] => [
+  item('tray-open', 'Open storebound'),
+  { kind: 'sep' },
+  { kind: 'sub', key: 'apps', label: 'Apps', items: [item('tray-app:k1', `First  ·  ${state}`), item('tray-app:k2', 'Second')] },
+  item('tray-none', 'No apps yet', false),
+  item('tray-quit', 'Quit storebound'),
+];
+
+describe('tray menu model', () => {
+  test('a row splits into its text and the live value after the middle dot', () => {
+    expect(split('First  ·  App Store: In review · Play: Live')).toEqual({ text: 'First', value: 'App Store: In review · Play: Live' });
+    expect(split('Settings')).toEqual({ text: 'Settings' });
+    expect(split('Odd  ·  ')).toEqual({ text: 'Odd' });
+  });
+  test('paths follow submenu keys; a gone submenu gives null', () => {
+    expect(findPath(tree('x'), [])!.label).toBeNull();
+    expect(findPath(tree('x'), ['apps'])!.items).toHaveLength(2);
+    expect(findPath(tree('x'), ['apps'])!.label).toBe('Apps');
+    expect(findPath(tree('x'), ['gone'])).toBeNull();
+  });
+  test('typing filters rows by every word, separators drop out', () => {
+    const r = filterNodes(tree('x'), 'stor quit');
+    expect(r.map(n => (n.kind === 'sep' ? '-' : n.label))).toEqual(['Quit storebound']);
+    expect(filterNodes(tree('x'), '  ')).toHaveLength(5);
+  });
+  test('keyboard moves skip disabled rows and wrap', () => {
+    const en = rows(tree('x')).map(n => n.kind === 'sub' || n.enabled);
+    expect(en).toEqual([true, true, false, true]);
+    expect(nextIndex(1, 1, en)).toBe(3);
+    expect(nextIndex(3, 1, en)).toBe(0);
+    expect(nextIndex(-1, 1, en)).toBe(0);
+    expect(nextIndex(-1, -1, en)).toBe(3);
+    expect(nextIndex(0, 1, [])).toBe(-1);
+  });
+  test('a live update keeps the highlight on the same row', () => {
+    const before = rows(findPath(tree('In review'), ['apps'])!.items);
+    const after = rows(findPath([...tree('Live')], ['apps'])!.items).slice().reverse();
+    expect(keepActive(before, after, 0)).toBe(1); // First moved to index 1
+    expect(keepActive(before, after.slice(0, 1), 0)).toBe(0); // gone: the same place, clamped
+    expect(keepActive(before, after, -1)).toBe(-1);
+    expect(keepActive(before, [], 0)).toBe(-1);
+  });
+  test('Ctrl / Cmd + click or a middle click tears a submenu off', () => {
+    expect(isTearOff({ button: 1, ctrlKey: false, metaKey: false })).toBe(true);
+    expect(isTearOff({ button: 0, ctrlKey: true, metaKey: false })).toBe(true);
+    expect(isTearOff({ button: 0, ctrlKey: false, metaKey: true })).toBe(true);
+    expect(isTearOff({ button: 0, ctrlKey: false, metaKey: false })).toBe(false);
+  });
+});
+
+describe('tray menu page', () => {
+  test('its own page in the build, with the demo only behind import.meta.env.DEV', () => {
+    expect(src('vite.config.ts')).toMatch(/menu: 'tray-menu\.html'/);
+    expect(src('tray-menu.html')).toMatch(/src="\/src\/traymenu\/main\.tsx"/);
+    const main = src('src/traymenu/main.tsx');
+    expect(main).toMatch(/!inTauri\(\) && import\.meta\.env\.DEV/);
+    expect(main).toMatch(/await import\('\.\/demo'\)/);
+    expect(main).not.toMatch(/^import .*\.\/demo/m);
+  });
+  test('the page never polls: values come from menu-model pushes', () => {
+    const main = src('src/traymenu/main.tsx');
+    expect(src('src/traymenu/menu-api.ts')).toMatch(/sub<MenuNode\[\]>\('menu-model'/);
+    expect(main).toMatch(/onModel\(setNodes\)/);
+    expect(main).not.toMatch(/setInterval/);
+    expect(src('src/traymenu/TrayMenu.tsx')).not.toMatch(/setInterval|requestAnimationFrame/);
+  });
+  test('every command the page calls is a menu command Rust grants to menu-* windows', () => {
+    const api = src('src/traymenu/menu-api.ts');
+    const called = [...api.matchAll(/call\('(\w+)'/g), ...api.matchAll(/invoke<[^>]*>\('(\w+)'/g)].map(m => m[1]);
+    const list = src('src-tauri/src/commands_list.rs');
+    const menu = list.slice(list.indexOf('MENU_COMMANDS'));
+    expect(called.length).toBeGreaterThan(5);
+    for (const c of called) expect(menu, c).toContain(`"${c}"`);
+  });
+});
diff --git a/apps/desktop/tray-menu.html b/apps/desktop/tray-menu.html
new file mode 100644
index 0000000..b765ee1
--- /dev/null
+++ b/apps/desktop/tray-menu.html
@@ -0,0 +1,14 @@
+<!doctype html>
+<html lang="en">
+  <head>
+    <meta charset="UTF-8" />
+    <meta name="viewport" content="width=device-width, initial-scale=1" />
+    <meta name="color-scheme" content="light dark" />
+    <link rel="icon" href="data:," />
+    <title>storebound</title>
+  </head>
+  <body class="tm-page">
+    <div id="menu"></div>
+    <script type="module" src="/src/traymenu/main.tsx"></script>
+  </body>
+</html>
diff --git a/apps/desktop/vite.config.ts b/apps/desktop/vite.config.ts
index ba701d6..84580da 100644
--- a/apps/desktop/vite.config.ts
+++ b/apps/desktop/vite.config.ts
@@ -16,7 +16,8 @@ export default defineConfig({
     // no inline scripts or styles: the CSP is script-src 'self', style-src 'self'
     assetsInlineLimit: 0,
     cssCodeSplit: false,
-    // two pages: the main window and the tray card (pre-created hidden by src-tauri/src/card.rs)
-    rollupOptions: { input: { main: 'index.html', card: 'card.html' } },
+    // three pages: the main window, the tray card (pre-created hidden by src-tauri/src/card.rs) and the tray menu panels
+    // (one window per panel, src-tauri/src/menu_panel.rs)
+    rollupOptions: { input: { main: 'index.html', card: 'card.html', menu: 'tray-menu.html' } },
   },
 });
diff --git a/docs/desktop.md b/docs/desktop.md
index 5e96ff4..63d3c76 100644
--- a/docs/desktop.md
+++ b/docs/desktop.md
@@ -490,6 +490,25 @@ The CLI and the app are one product: one version number, one set of store accoun
   starts silently in the tray, without a window. Closing the window keeps it running in the tray; the tray icon
   opens it, the tray menu's Quit (macOS: Cmd+Q) quits. Turn the logon entry off in the OS (Windows: Settings > Apps >
   Startup). Window state never restores "visible", so a `--hidden` start stays hidden.
+- **Tray menu panels** (`src-tauri/src/menu_panel.rs`, `src/traymenu/`, page `tray-menu.html`): a right click on the
+  tray icon opens the app's own menu instead of the OS menu. tray.rs builds one tree (`menu_model`, submenus with a
+  stable key such as `apps`, the same in every language); every panel (the root and each submenu) is its own
+  frameless, always-on-top `menu-N` window that measures itself and calls `menu_ready`, and Rust places it inside the
+  monitor's work area (the root away from the taskbar or menu bar, a submenu beside its parent, flipped at the edge).
+  The panel book (pure, `tests/menu_panel.rs`) keeps transient and pinned panels apart: a new menu, Esc, a pick or
+  focus leaving every menu closes the transient ones; pinned ones (pin button, Ctrl+click, middle click) stay, can be
+  dragged by the header, step aside from other pins and are saved in state.json (`menuPins`) and restored at start.
+  `tray_update` pushes the tree to the open panels (`menu-model`), which update in place; nothing polls, and a closed
+  panel is destroyed. Only `menu-*` windows get the `menu_*` commands (`capabilities/menu.json`, `guard_menu`). If a
+  panel cannot be built or never reports ready, the native menu (rendered from the same tree) goes on the tray and
+  pops once; Linux always uses it (its tray sends no clicks). The left-click card stays as it was. Look at the panels
+  without Tauri: `bunx vite` in apps/desktop and open `/tray-menu.html` (a dev-only demo on fixture data; `?still=1`
+  stops the ticking values).
+- **Pinned context menus in the window** (`src/ui/ContextMenu.tsx`, pure stack in `src/ui/menu-stack.ts`): every menu
+  has a pin button; a submenu's pin button, Ctrl / Cmd + click or a middle click on a submenu row tears it off. Pinned
+  panels survive the next menu, are dragged by the header and re-read their entries from the newest builder the screen
+  registered (`useContextMenu()` / `useMenuButton()` register on every render; pass an id such as `app:<key>` when rows
+  can reorder), so a store read updates them in place; when the thing is gone they say so instead of closing.
 - **`storebound desktop` install / update**: before the installer runs it stops the running app (only processes
   started from the exact install path: `%LOCALAPPDATA%\storebound\storebound-desktop.exe`,
   `storebound.app/Contents/MacOS/storebound-desktop`, the AppImage; a graceful close, then by PID after 10 s). After the

From a889ada137b087004cb836e8aac204ca7e48c855 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Sat, 24 Oct 2026 19:09:21 +0800
Subject: [PATCH 024/126] tests: adhoc register --yes gets 20 s (timed out at 5
 s on a busy CI runner)

---
 tests/adhoc.test.ts | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tests/adhoc.test.ts b/tests/adhoc.test.ts
index 5e6d606..2337396 100644
--- a/tests/adhoc.test.ts
+++ b/tests/adhoc.test.ts
@@ -247,7 +247,7 @@ describe('apple adhoc runs (mocked App Store Connect)', () => {
     expect(out).toContain('Old pad (aaaa…aaab) not registered');
     expect(err).toBe('1 of 2 device(s) not registered');
     expect(leaks(out + err)).toEqual([]);
-  });
+  }, 20_000); // signs an ES256 token and runs two POSTs: over 5 s on a busy CI runner
 
   test('register --udid with a bad UDID fails before any call, masked', async () => {
     ascKey();

From 2ec1f0ab1380e5d157d40f884abf57b9fed23e60 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Sat, 24 Oct 2026 18:17:14 +0700
Subject: [PATCH 025/126] storebound 0.8.48: version in package.json and every
 copy, CHANGELOG 0.8.48 section

---
 .claude-plugin/marketplace.json        | 2 +-
 .claude-plugin/plugin.json             | 2 +-
 .codex-plugin/plugin.json              | 2 +-
 CHANGELOG.md                           | 2 ++
 apps/desktop/package.json              | 2 +-
 apps/desktop/src-tauri/Cargo.lock      | 2 +-
 apps/desktop/src-tauri/Cargo.toml      | 2 +-
 apps/desktop/src-tauri/tauri.conf.json | 2 +-
 gemini-extension.json                  | 2 +-
 package.json                           | 2 +-
 10 files changed, 11 insertions(+), 9 deletions(-)

diff --git a/.claude-plugin/marketplace.json b/.claude-plugin/marketplace.json
index 1f47268..0878844 100644
--- a/.claude-plugin/marketplace.json
+++ b/.claude-plugin/marketplace.json
@@ -9,7 +9,7 @@
       "name": "storebound",
       "source": ".",
       "description": "Take a mobile app or game from nothing to Submit for review on both stores: skills for every store step and questionnaire plus the storebound CLI and MCP server.",
-      "version": "0.8.47",
+      "version": "0.8.48",
       "category": "development",
       "tags": [
         "mobile",
diff --git a/.claude-plugin/plugin.json b/.claude-plugin/plugin.json
index 6b75797..7fe1a01 100644
--- a/.claude-plugin/plugin.json
+++ b/.claude-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.47",
+  "version": "0.8.48",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/.codex-plugin/plugin.json b/.codex-plugin/plugin.json
index 5e92768..6cbea1a 100644
--- a/.codex-plugin/plugin.json
+++ b/.codex-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.47",
+  "version": "0.8.48",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/CHANGELOG.md b/CHANGELOG.md
index ac914f7..80f2267 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,8 @@
 
 ## Unreleased
 
+## 0.8.48 · 2026-10-24
+
 - Desktop tray: the right-click menu is drawn by the app (the design system's menu look) instead of the OS menu. Each submenu opens as its own small panel; the pin button, Ctrl+click or a middle click keeps a panel open (pinned): it can be dragged, steps aside so it never covers another pinned panel, and comes back after a restart. Values (the apps and their store state, mute) update in place after every store read without closing anything. The native menu stays as a fallback (and on Linux), built from the same menu tree. The left-click tray card is unchanged.
 - Desktop right-click menus in the window work the same way: a menu's pin button keeps it open as a floating panel, a submenu can be torn off (its pin button, Ctrl+click or a middle click), pinned panels survive the next menu, can be dragged, and update in place when the data behind them changes ("Gone" when the thing they were for left the screen).
 - `shots.feature.rotate` (degrees) is honoured by the Play feature graphic like a scene frame's `rotate`: added to the template tilt and the phone is re-fitted (`-90` stands a landscape game frame upright); with `shots.layout: "bleed"` the frame image is turned and still covers the canvas.
diff --git a/apps/desktop/package.json b/apps/desktop/package.json
index 48b121c..f05a79c 100644
--- a/apps/desktop/package.json
+++ b/apps/desktop/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@storebound/desktop",
-  "version": "0.8.47",
+  "version": "0.8.48",
   "private": true,
   "license": "MIT",
   "type": "module",
diff --git a/apps/desktop/src-tauri/Cargo.lock b/apps/desktop/src-tauri/Cargo.lock
index 0bf2c5c..15deadb 100644
--- a/apps/desktop/src-tauri/Cargo.lock
+++ b/apps/desktop/src-tauri/Cargo.lock
@@ -4096,7 +4096,7 @@ checksum = "a2eb9349b6444b326872e140eb1cf5e7c522154d69e7a0ffb0fb81c06b37543f"
 
 [[package]]
 name = "storebound-desktop"
-version = "0.8.47"
+version = "0.8.48"
 dependencies = [
  "base64 0.22.1",
  "getrandom 0.3.4",
diff --git a/apps/desktop/src-tauri/Cargo.toml b/apps/desktop/src-tauri/Cargo.toml
index f200fc4..9a6707f 100644
--- a/apps/desktop/src-tauri/Cargo.toml
+++ b/apps/desktop/src-tauri/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "storebound-desktop"
-version = "0.8.47"
+version = "0.8.48"
 description = "storebound desktop: every game's releases on both stores in one window"
 license = "MIT"
 edition = "2021"
diff --git a/apps/desktop/src-tauri/tauri.conf.json b/apps/desktop/src-tauri/tauri.conf.json
index b95e93c..a3a7baf 100644
--- a/apps/desktop/src-tauri/tauri.conf.json
+++ b/apps/desktop/src-tauri/tauri.conf.json
@@ -2,7 +2,7 @@
   "$schema": "https://schema.tauri.app/config/2",
   "productName": "storebound",
   "mainBinaryName": "storebound-desktop",
-  "version": "0.8.47",
+  "version": "0.8.48",
   "identifier": "dev.storebound.desktop",
   "build": {
     "frontendDist": "../dist",
diff --git a/gemini-extension.json b/gemini-extension.json
index 16d0c93..762fc7c 100644
--- a/gemini-extension.json
+++ b/gemini-extension.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.47",
+  "version": "0.8.48",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "contextFileName": "GEMINI.md",
   "mcpServers": {
diff --git a/package.json b/package.json
index c9c6de6..b544124 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.47",
+  "version": "0.8.48",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every store questionnaire (incl. account deletion and App Review demo accounts), privacy, icons, screenshots and previews, TestFlight. After launch: crash vitals, review replies, price sheets, analytics and Product Page Optimization. One config, a CLI (Node 20+ or Bun), an MCP server and Agent Skills for your AI coding agent.",
   "license": "MIT",
   "author": "CRTkafa",

From ed8d138a8e0bb229940b1e7c39a96cf615ac7d42 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Sat, 24 Oct 2026 19:46:57 +0800
Subject: [PATCH 026/126] play: a new language is created with everything Play
 needs to commit it (icon, feature graphic, phone and tablet screenshots);
 play images creates a missing listing

---
 CHANGELOG.md                   |  2 ++
 cli/play/images.ts             | 55 ++++++++++++++++++++--------
 cli/play/listing.ts            | 40 +++++++++++++++++----
 skills/store-pitfalls/SKILL.md | 22 +++++++-----
 tests/helpers/fake-stores.ts   | 13 +++++++
 tests/idempotency.test.ts      | 66 ++++++++++++++++++++++++++++++++++
 tests/play-post-reads.test.ts  |  6 ++--
 7 files changed, 172 insertions(+), 32 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 80f2267..d11434f 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,8 @@
 
 ## Unreleased
 
+- `play listing` for a language Play does not have yet uploads, in the same edit as the text, everything Play requires to commit it: icon, feature graphic, 2+ phone screenshots from `store/renders/<lang>/` and the tablet sets when the other languages have them (a set the folder lacks falls back to the default language's). The dry run lists the uploads or refuses with the missing file, instead of a 403 "too few screenshots" at commit. `play images` creates a Play listing that does not exist yet (text from the listing file) together with its images instead of skipping the language (pitfall 102).
+
 ## 0.8.48 · 2026-10-24
 
 - Desktop tray: the right-click menu is drawn by the app (the design system's menu look) instead of the OS menu. Each submenu opens as its own small panel; the pin button, Ctrl+click or a middle click keeps a panel open (pinned): it can be dragged, steps aside so it never covers another pinned panel, and comes back after a restart. Values (the apps and their store state, mute) update in place after every store read without closing anything. The native menu stays as a fallback (and on Linux), built from the same menu tree. The left-click tray card is unchanged.
diff --git a/cli/play/images.ts b/cli/play/images.ts
index de181b2..76ed75c 100644
--- a/cli/play/images.ts
+++ b/cli/play/images.ts
@@ -2,8 +2,9 @@
 // language, not of the whole upload).
 //   storebound play images [--dry] [--only en-US,de-DE] [--src store/renders] [--variant b] [--prune] [--include-drafts] [--not-sent-for-review]
 // Languages: the ones `play listing` pushes (a status=draft or status=translate section is skipped unless
-// --include-drafts) and that have a listing on Play. A language Play has no listing for yet (404 "Listing for language
-// ... not found") is skipped with an info line, never an error: run `play listing` first.
+// --include-drafts). A language Play has no listing for yet (404 "Listing for language ... not found") is created by
+// this run from its text in the listing file, in the same edit as all its images (Play commits a new language only with
+// icon, feature graphic and 2+ phone screenshots in it; `play listing` does the same, from either command).
 // Per Play language, from <renders>/<language id>/: icon (play.icon, 512x512), featureGraphic (feature/1024x500.*) and
 // phoneScreenshots (play/NN.*, at least 2) are required (Play Console Help answer 9866151). Optional, uploaded only
 // when present: sevenInchScreenshots (tab7/NN.*), tenInchScreenshots (tab10/NN.*), tvScreenshots (tv/NN.*),
@@ -26,7 +27,7 @@ import { draftReason, draftSections } from '../lib/listing-plan';
 import { done, log, step } from '../lib/log';
 import { playClient } from './client';
 import { pulledChecksum } from '../lib/art-pull';
-import { readPlayCopy } from './listing';
+import { listingBody, readPlayCopy } from './listing';
 import { variantRoot } from '../shots/lib';
 import { resolvedTablets } from '../shots/report';
 import { consoleLink } from '../lib/console-links';
@@ -72,16 +73,34 @@ export function missingChange(type: string, remote: number, prune: boolean): Ima
 /** What one language uploads: the sets with files, the optional types without, and errors (missing required sets). */
 export interface LangImages { sets: [string, string[]][]; missing: string[]; errors: string[] }
 
-/** The graphics a NEW Play language needs before its edit can commit (403 "no high resolution icon set for language"):
- *  the hi-res icon and, when rendered, the feature graphic. `play listing` uploads them in the same edit as the text,
- *  so listing and images never wait for each other (pitfall 102). */
-export function firstGraphics(ctx: Ctx, code: string): [string, string][] {
+/** Everything Play wants in the same edit that creates a NEW language, or the commit is refused (403 "no high
+ *  resolution icon set for language X" / "too few screenshots for language X"): icon, feature graphic, at least 2 phone
+ *  screenshots and, when the app's other languages have them (or play.tablets is true), the two tablet sets. A set the
+ *  language's renders folder lacks falls back to the default language's (a note); what is still missing is an error
+ *  with the exact fix, raised in the dry run, never at commit time (pitfall 102). */
+export interface NewLangImages { code: string; uploads: [string, string[]][]; notes: string[]; errors: string[] }
+export function newLanguageImages(ctx: Ctx, code: string, defaultCode: string, tabletsOnPlay: boolean): NewLangImages {
   const { config, resolve } = ctx.loaded;
   const icon = resolve(config.play?.icon ?? join(config.icons?.out ?? 'store/icons', 'play-512.png'));
-  const l = byPlayCode(config.languages).get(code);
-  const src = resolve(config.renders ?? config.shots?.out ?? 'store/renders');
-  const li = langImages(code, l ? join(src, l.id) : join(src, '__none__'), icon, false);
-  return li.sets.filter(([t]) => t === 'icon' || t === 'featureGraphic').map(([t, files]) => [t, files[0]!] as [string, string]);
+  const langOf = byPlayCode(config.languages);
+  const src = variantRoot(resolve(ctx.args.get('src') ?? config.renders ?? config.shots?.out ?? 'store/renders'), ctx.args.get('variant'), config.shots?.variants);
+  const tablets = config.play?.tablets === undefined ? resolvedTablets(config, src) || tabletsOnPlay : config.play.tablets;
+  const dirOf = (c: string) => join(src, langOf.get(c)?.id ?? '__none__');
+  const own = langImages(code, dirOf(code), icon, tablets);
+  const def = code === defaultCode ? null : langImages(defaultCode, dirOf(defaultCode), icon, tablets);
+  const required = ['icon', 'featureGraphic', 'phoneScreenshots', ...(tablets ? PLAY_TABLET_TYPES : [])];
+  const sets = new Map(own.sets);
+  const notes: string[] = [], errors: string[] = [];
+  for (const type of required) {
+    const mine = sets.get(type), fb = def?.sets.find(([t]) => t === type)?.[1];
+    const short = type === 'phoneScreenshots' || PLAY_TABLET_TYPES.includes(type);
+    if (mine && (!short || mine.length >= 2)) continue;
+    if (fb && (!short || fb.length >= 2)) { sets.set(type, fb); notes.push(`${code}: no ${type} of its own, using ${defaultCode}'s (${fb.length}); render ${code}'s with storebound shots render`); continue; }
+    const why = own.errors.find(e => e.includes(type === 'icon' ? 'no icon' : type)) ?? `${code}: ${type} missing`;
+    errors.push(`${why}. Play refuses to commit a new language without it (403 too few screenshots / no high resolution icon)`);
+  }
+  const uploads = [...sets].filter(([t, f]) => f.length && (tablets || !PLAY_TABLET_TYPES.includes(t)));
+  return { code, uploads, notes, errors };
 }
 
 /** The image sets of one language folder (`tablets` = resolved play.tablets). Reads the folder only. */
@@ -180,7 +199,7 @@ export async function run(ctx: Ctx): Promise<void> {
     (await play.call<{ images?: { sha256?: string }[] }>('GET', `${play.API}/edits/${id}/listings/${code}/${type}`)).images ?? [];
   // one read-only edit: what Play has now (sha256 per image, in order) against the local files, per language and type;
   // for an optional type with no local files only how many Play has (kept, or deleted with --prune)
-  // a language with no listing on Play yet answers 404: skipped (play listing creates it), never fatal
+  // a language with no listing on Play yet answers 404: created in its edit (below), never fatal
   const plan = new Map<string, ImageChange[]>();
   const unlisted: string[] = [];
   await play.read(async id => {
@@ -197,14 +216,21 @@ export async function run(ctx: Ctx): Promise<void> {
       plan.set(code, out);
     }
   });
-  for (const code of unlisted) log('play', `skipped ${code}: no Play listing yet (run storebound play listing first; a draft section needs review or --include-drafts)`);
+  // a language with text in the listing file but no Play listing yet: this run creates it (the default text of the file)
+  // together with all its images in one edit, which Play only commits as a whole (pitfall 102)
+  const copyOf = new Map(readPlayCopy(ctx).map(c => [c.lang, c]));
+  for (const code of unlisted) {
+    const li = sets.get(code)!;
+    plan.set(code, [...li.sets.map(([type, files]) => imageChange(type, [], files.map(storeSha))), ...li.missing.map(t => missingChange(t, 0, prune))]);
+    log('play', `${code}: no Play listing yet, this run creates it from the listing file with its images`);
+  }
   codes = codes.filter(c => plan.has(c));
   const writes = (code: string) => plan.get(code)!.filter(c => c.change === 'replace' || c.change === 'delete');
   if (ctx.args.has('dry')) {
     let changed = 0;
     for (const [i, code] of codes.entries()) {
       changed += writes(code).length;
-      log('play', `${step(i + 1, codes.length, code)}: ${describePlan(plan.get(code)!)}`);
+      log('play', `${step(i + 1, codes.length, code)}: ${describePlan(plan.get(code)!)}${unlisted.includes(code) ? ' (and creates the listing)' : ''}`);
     }
     done('play', `dry run: ${changed ? changed + ' image set(s) would change' : 'every image set is already on Play'}; read-only, nothing uploaded`);
     return;
@@ -221,6 +247,7 @@ export async function run(ctx: Ctx): Promise<void> {
     const li = sets.get(code)!;
     await play.edit(async (id, ctl) => {
       let n = 0, types = 0, deleted = 0;
+      if (unlisted.includes(code)) await play.call('PUT', `${play.API}/edits/${id}/listings/${code}`, listingBody(copyOf.get(code)!, config.play?.video));
       await Promise.all([
         ...li.sets.map(async ([type, files]) => {
           const remote = await remoteOf(id, code, type);
diff --git a/cli/play/listing.ts b/cli/play/listing.ts
index f0dce56..698a1f1 100644
--- a/cli/play/listing.ts
+++ b/cli/play/listing.ts
@@ -20,7 +20,7 @@ import type { Ctx } from '../lib/ctx';
 import { confirm, need } from '../lib/ctx';
 import { done, log, printJson, step, warn } from '../lib/log';
 import { playClient } from './client';
-import { firstGraphics } from './images';
+import { newLanguageImages, type NewLangImages } from './images';
 import { stdinIsTTY } from '../lib/tty';
 
 /** Play release notes that name iOS, iPhone, App Store, ... are refused before any edit, dry runs included (pitfall 77). */
@@ -140,12 +140,40 @@ export async function run(ctx: Ctx): Promise<void> {
   if (!a.has('json')) log('play', `${copy.length} listings: ${copy.map(c => c.lang).join(', ')}${config.play?.video ? ` · promo video ${config.play.video}` : ''}`);
   const play = await playClient(root, pkg);
   const bodies = copy.map(c => listingBody(c, config.play?.video));
+  // A language Play does not have yet only commits with its icon, feature graphic, 2+ phone screenshots (and the
+  // tablet sets when the other languages have them) in the same edit: planned here so the dry run refuses early.
+  const fresh = new Map<string, NewLangImages>();
+  const planFresh = async (id: string, now: PlayListing[]) => {
+    const missing = bodies.filter(b => !now.some(n => n.language === b.language)).map(b => b.language!);
+    if (!missing.length) return;
+    const ref = now.find(n => n.language === details.defaultLanguage) ?? now[0];
+    let tabletsOnPlay = false;
+    if (ref) for (const t of ['sevenInchScreenshots', 'tenInchScreenshots']) {
+      try { tabletsOnPlay ||= !!((await play.call<{ images?: unknown[] }>('GET', `${play.API}/edits/${id}/listings/${ref.language}/${t}`)).images?.length); } catch { /* no tablet set */ }
+    }
+    for (const code of missing) {
+      const f = newLanguageImages(ctx, code, details.defaultLanguage, tabletsOnPlay);
+      // the very first listing of an app: Play checks the images at release, not at this commit, so only a warning
+      if (!now.length && f.errors.length) { f.notes.push(...f.errors.map(e => `warning: ${e}`)); f.errors = []; }
+      fresh.set(code, f);
+    }
+  };
   const p = await play.read(async id => {
     const cur = await play.call<Record<string, string>>('GET', `${play.API}/edits/${id}/details`);
     const now = (await play.call<{ listings?: PlayListing[] }>('GET', `${play.API}/edits/${id}/listings`)).listings ?? [];
+    await planFresh(id, now);
     return playPlan(cur, details, now, bodies, { skipped, notes, only: a.has('only') });
   });
+  for (const f of fresh.values()) {
+    p.notes.push(...f.notes);
+    if (!f.errors.length) p.notes.push(`${f.code} is new on Play: uploads ${f.uploads.map(([t, fl]) => `${t} (${fl.length})`).join(', ')} in the same edit`);
+  }
   const dry = a.has('dry');
+  const refuse = [...fresh.values()].flatMap(f => f.errors);
+  if (refuse.length) {
+    if (a.has('json')) printJson({ dry, ...p, errors: refuse }); else for (const line of playPlanLines(p)) console.log(line);
+    throw new Error(['a new Play language needs its images in the same edit:', ...refuse].join('\n'));
+  }
   if (a.has('json')) printJson({ dry, ...p });
   else for (const line of playPlanLines(p)) console.log(line);
   if (dry) { done('play', `dry run: ${p.changes ? `${p.changes} change(s)` : 'nothing to change'}; read-only, nothing written`); return; }
@@ -168,13 +196,11 @@ export async function run(ctx: Ctx): Promise<void> {
     for (const [i, b] of todo.entries()) {
       await play.call('PUT', `${play.API}/edits/${id}/listings/${b.language}`, b);
       log('play', step(i + 1, todo.length, b.language!));
-      // a language Play does not have yet: its edit only commits with a hi-res icon (pitfall 102)
+      // a language Play does not have yet: its edit only commits with its images in it (pitfall 102)
       if (!now.some(n => n.language === b.language)) {
-        const graphics = firstGraphics(ctx, b.language!);
-        if (!graphics.some(([t]) => t === 'icon')) warn('play', `${b.language}: no 512x512 icon to send with this new language (play.icon or store/icons/play-512.png; storebound icons makes it): Play may refuse the commit with 403 "no high resolution icon"`);
-        for (const [type, f] of graphics) {
-          await play.call('POST', `${play.UPLOAD}/edits/${id}/listings/${b.language}/${type}?uploadType=media`, new Uint8Array(readFileSync(f)), { 'Content-Type': /\.png$/i.test(f) ? 'image/png' : 'image/jpeg' });
-          log('play', `${b.language}: ${type} uploaded with the new listing`);
+        for (const [type, files] of fresh.get(b.language!)?.uploads ?? []) {
+          for (const f of files) await play.call('POST', `${play.UPLOAD}/edits/${id}/listings/${b.language}/${type}?uploadType=media`, new Uint8Array(readFileSync(f)), { 'Content-Type': /.png$/i.test(f) ? 'image/png' : 'image/jpeg' });
+          log('play', `${b.language}: ${type} (${files.length}) uploaded with the new listing`);
         }
       }
     }
diff --git a/skills/store-pitfalls/SKILL.md b/skills/store-pitfalls/SKILL.md
index 4d19934..95f7ac0 100644
--- a/skills/store-pitfalls/SKILL.md
+++ b/skills/store-pitfalls/SKILL.md
@@ -1239,15 +1239,21 @@ that fails without the fix (see CONTRIBUTING.md).
   `cli/lib/credentials.ts` resolves relative credential paths from the project and `ascKeyFile` hands xcodebuild an
   absolute path (`tests/build-sign.test.ts`).
 
-## 102. A new Play language: `play listing` 403 "no high resolution icon set for language", `play images` skips it
-- **Symptom:** adding a language (tr-TR) to an existing app, `play listing --yes` failed at the edit commit with 403
-  "This app has no high resolution icon set for language tr-TR", while `play images` said "skipped tr-TR: no Play
+## 102. A new Play language: commit 403 "no high resolution icon" / "too few screenshots for language", `play images` skips it
+- **Symptom:** adding a language (tr-TR) to an existing app, `play listing --write --yes` created the listing and
+  uploaded the icon and feature graphic, then the commit failed: 403 PERMISSION_DENIED "This app has too few screenshots
+  for language tr-TR" (earlier: "no high resolution icon set"). `play images` then said "skipped tr-TR: no Play
   listing yet": each waited for the other.
-- **Cause:** Play commits a new language only when its hi-res icon is in the same edit.
-- **Do:** update storebound; `play listing` now uploads the icon (and the feature graphic when rendered) for a new
-  language in the same edit. Then run `play images` for the screenshots.
-- **Guard:** `firstGraphics` in `cli/play/images.ts`, used by `cli/play/listing.ts` for languages Play does not have yet;
-  it stops with the fix when the 512x512 icon is missing.
+- **Cause:** Play commits a new language only with its hi-res icon, feature graphic, 2+ phone screenshots (and the
+  tablet sets when the app's other languages have them) in the SAME edit.
+- **Do:** update storebound; `play listing` uploads all of these for a new language in its edit, from
+  `store/renders/<lang>/` (a set that folder lacks falls back to the default language's, with a note), and the dry run
+  lists the uploads or refuses with the exact missing file. `play images` now creates a listing Play does not have yet
+  (text from the listing file) together with its images, so either command works. Render first if it refuses:
+  `storebound shots render`.
+- **Guard:** `newLanguageImages` in `cli/play/images.ts`, planned in `cli/play/listing.ts` before any write;
+  `FakePlay.requireNewLangAssets` simulates the 403 (`tests/idempotency.test.ts`). The first listing of an app with no
+  listing at all only warns.
 
 ## 103. "App.entitlements is not referenced by CODE_SIGN_ENTITLEMENTS" on Windows although it is
 - **Symptom:** on Windows, `apple status` / `apple signing` warned that `ios\App\App\App.entitlements` is not
diff --git a/tests/helpers/fake-stores.ts b/tests/helpers/fake-stores.ts
index bf5c880..d89233f 100644
--- a/tests/helpers/fake-stores.ts
+++ b/tests/helpers/fake-stores.ts
@@ -421,6 +421,10 @@ export class FakePlay {
   priceLimits: Record<string, { min: number; max: number; symbol: string }> = {};
   /** product id -> 400 message for its PATCH */
   rejectProducts: Record<string, string> = {};
+  /** live Play: committing a language that is new in the edit needs its hi-res icon, feature graphic and 2+ phone screenshots
+   *  in the same edit (403 PERMISSION_DENIED), 2+ tablet sets too when `requireTablets` */
+  requireNewLangAssets = false;
+  requireTablets = false;
   /** validate calls that carried changesNotSentForReview (live Play answers them 400 "Unknown name") */
   validateWithNotSent = 0;
 
@@ -445,12 +449,21 @@ export class FakePlay {
         return json({ error: { code: 400, status: 'INVALID_ARGUMENT', message: 'Changes cannot be sent for review automatically. Please set the query parameter changesNotSentForReview to true. Once committed, the changes in this edit can be sent for review from the Google Play Console UI.', errors: [{ message: 'Changes cannot be sent for review automatically. Please set the query parameter changesNotSentForReview to true.', domain: 'global', reason: 'badRequest' }] } }, 400);
       }
       if (method === 'POST' && rest === ':validate') return json({ id });
+      if (method === 'POST' && rest === ':commit' && this.requireNewLangAssets) {
+        for (const lang of Object.keys(e.listings).filter(l => !this.live.listings[l])) {
+          const n = (t: string) => (e.images[`${lang}/${t}`] ?? []).length;
+          const miss = n('icon') < 1 ? `This app has no high resolution icon set for language ${lang}` : n('featureGraphic') < 1 ? `This app has no feature graphic set for language ${lang}`
+            : n('phoneScreenshots') < 2 || (this.requireTablets && (n('sevenInchScreenshots') < 2 || n('tenInchScreenshots') < 2)) ? `This app has too few screenshots for language ${lang}` : '';
+          if (miss) return err(403, 'PERMISSION_DENIED', miss);
+        }
+      }
       if (method === 'POST' && rest === ':commit') { this.live = e; this.edits.delete(id!); this.committed.push(id!); return json({ id }); }
       if (rest === '/details') { if (method === 'PUT') e.details = body as Record<string, unknown>; return json(e.details); }
       if (rest === '/listings') return json({ listings: Object.values(e.listings) });
       if ((m = /^\/listings\/([^/]+)$/.exec(rest!))) { if (method === 'PUT') e.listings[m[1]!] = body as Record<string, unknown>; return json(e.listings[m[1]!] ?? {}); }
       if ((m = /^\/listings\/([^/]+)\/(\w+)$/.exec(rest!))) {
         const k = `${m[1]}/${m[2]}`;
+        if (this.requireNewLangAssets && method === 'GET' && !e.listings[m[1]!]) return err(404, 'NOT_FOUND', `Listing for language '${m[1]}' not found.`);
         if (method === 'DELETE') { e.images[k] = []; return json({ deleted: [] }); }
         if (method === 'POST') { const h = new Bun.CryptoHasher('sha256').update(body as Uint8Array).digest('hex'); (e.images[k] ??= []).push(h); return json({ image: { sha256: h } }); }
         return json({ images: (e.images[k] ?? []).map(sha256 => ({ sha256 })) });
diff --git a/tests/idempotency.test.ts b/tests/idempotency.test.ts
index bef1580..39d22af 100644
--- a/tests/idempotency.test.ts
+++ b/tests/idempotency.test.ts
@@ -370,6 +370,7 @@ describe('listing, appinfo, data safety and the owner commands: a second run wri
 
   test('play listing: one committed edit with only what differs; the second run opens no write edit and commits nothing', async () => {
     s.play.live.listings['de-DE'] = { language: 'de-DE', title: 'Notizen' };
+    s.play.live.listings['en-US'] = { language: 'en-US', title: 'Old' };
     const p = project(CONFIG, { 'store/listing.md': LISTING });
     const r = await twice(() => playListing(p.ctx([])));
     expect(r.first).toEqual(['PUT /androidpublisher/v3/applications/com.example.notes/edits/edit-2/details', 'PUT /androidpublisher/v3/applications/com.example.notes/edits/edit-2/listings/en-US',
@@ -380,6 +381,71 @@ describe('listing, appinfo, data safety and the owner commands: a second run wri
     expect(s.play.live.listings['de-DE']).toEqual({ language: 'de-DE', title: 'Notizen' }); // a language not in the file is left alone
   });
 
+  // A new Play language (tr-TR next to a live en-US): the commit is refused 403 "too few screenshots" unless the
+  // screenshots, icon and feature graphic travel in the same edit (pitfall 102)
+  const trConfig = (): ShipConfig => ({ ...CONFIG, languages: [{ id: 'en', play: 'en-US' }, { id: 'tr', play: 'tr-TR' }] as never });
+  const trListing = LISTING + ['', '## Turkish', '<!-- play: tr-TR -->', '', '### Play short description', '```', 'Notlar.', '```', '', '### Play full description', '```', 'Herkes icin notlar.', '```', ''].join('\n');
+  const renders = (lang: string, base: number, tablets = false): Record<string, Uint8Array> => {
+    const f: Record<string, Uint8Array> = { [`store/renders/${lang}/feature/1024x500.png`]: png(base) };
+    for (const n of [1, 2]) { f[`store/renders/${lang}/play/0${n}.png`] = png(base + n); if (tablets) for (const t of ['tab7', 'tab10']) f[`store/renders/${lang}/${t}/0${n}.png`] = png(base + n + 5); }
+    return f;
+  };
+  const liveEn = () => {
+    s.play.live.listings['en-US'] = { language: 'en-US', title: 'Example Notes', shortDescription: 'Notes.', fullDescription: 'Notes for everyone.' };
+    s.play.live.details = { defaultLanguage: 'en-US', contactEmail: 'support@example.com', contactWebsite: 'https://example.com' };
+    s.play.requireNewLangAssets = true;
+  };
+
+  test('play listing: a new language uploads icon, feature graphic and phone screenshots in the same edit, so the commit passes', async () => {
+    liveEn();
+    const p = project(trConfig(), { 'store/listing.md': trListing, 'store/icons/play-512.png': png(1), ...renders('tr', 40) });
+    const r = await capture(() => playListing(p.ctx([])));
+    expect(r.exit).toBe(null);
+    expect(s.play.committed).toHaveLength(1);
+    expect(s.play.live.images['tr-TR/phoneScreenshots']).toHaveLength(2);
+    expect(s.play.live.images['tr-TR/icon']).toHaveLength(1);
+    expect(s.play.live.images['tr-TR/featureGraphic']).toHaveLength(1);
+  });
+
+  test('play listing: a new language without its own screenshots uses the default language images; none anywhere is refused in the dry run, nothing written', async () => {
+    liveEn();
+    const base = { 'store/listing.md': trListing, 'store/icons/play-512.png': png(1) };
+    const ok = project(trConfig(), { ...base, ...renders('en', 10) });
+    const r1 = await capture(() => playListing(ok.ctx([])));
+    expect(r1.exit).toBe(null);
+    expect(r1.out).toContain("no phoneScreenshots of its own, using en-US's");
+    expect(s.play.live.images['tr-TR/phoneScreenshots']).toHaveLength(2);
+    s.play.live.listings = { 'en-US': s.play.live.listings['en-US']! };
+    s.play.live.images = {};
+    const bad = project(trConfig(), base);
+    const before = s.play.committed.length;
+    const mark = s.calls.length;
+    await expect(playListing(bad.ctx(['--dry']))).rejects.toThrow('tr-TR: no phoneScreenshots');
+    expect(s.play.committed).toHaveLength(before);
+    expect(writes(s.calls.slice(mark))).toEqual([]);
+  });
+
+  test('play listing: the dry run names the uploads of a new language; tablet sets are required when the default language has them on Play', async () => {
+    liveEn();
+    s.play.requireTablets = true;
+    s.play.live.images['en-US/sevenInchScreenshots'] = ['x', 'y'];
+    const p = project(trConfig(), { 'store/listing.md': trListing, 'store/icons/play-512.png': png(1), ...renders('tr', 40), ...renders('en', 10, true) });
+    const r = await capture(() => playListing(p.ctx(['--dry'])));
+    expect(r.out).toContain('tr-TR is new on Play: uploads');
+    expect(r.out).toContain('sevenInchScreenshots (2)');
+    expect(s.play.committed).toEqual([]);
+  });
+
+  test('play images: a language with text in the listing file but no Play listing yet is created with its images, commit passes', async () => {
+    liveEn();
+    const p = project(trConfig(), { 'store/listing.md': trListing, 'store/icons/play-512.png': png(1), ...renders('en', 10), ...renders('tr', 40) });
+    const r = await capture(() => playImages(p.ctx([])));
+    expect(r.exit).toBe(null);
+    expect(r.out).toContain('tr-TR: no Play listing yet, this run creates it');
+    expect(s.play.live.listings['tr-TR']!.title).toBeDefined();
+    expect(s.play.live.images['tr-TR/phoneScreenshots']).toHaveLength(2);
+  });
+
   test('play listing: the store reached the wanted state between plan and edit: the edit is deleted, not committed', async () => {
     const p = project(CONFIG, { 'store/listing.md': LISTING });
     // the plan sees an empty listing; right after it (before the write edit opens) another run makes it current
diff --git a/tests/play-post-reads.test.ts b/tests/play-post-reads.test.ts
index 6322b37..5572ae1 100644
--- a/tests/play-post-reads.test.ts
+++ b/tests/play-post-reads.test.ts
@@ -287,7 +287,7 @@ describe('play images: tablet, TV and Wear sets are optional (play.tablets)', ()
     expect(resolvedTablets({ play: {} }, join(phoneOnly().root, 'store/renders'))).toBe(false);
   });
 
-  test('languages without a Play listing are skipped: a draft section before any call, a 404 listing as info; exit 0', async () => {
+  test('a draft section is skipped before any call, a language with a 404 listing is created by the run (dry: named); exit 0', async () => {
     playKey();
     const root = mkdtempSync(join(tmpdir(), 'sb-langs-'));
     const sec = (name: string, code: string, marker = '') => `## ${name}\n<!-- play: ${code} -->\n${marker}\n### Play short description\n\`\`\`\nShort.\n\`\`\`\n\n### Play full description\n\`\`\`\nFull.\n\`\`\`\n\n`;
@@ -309,9 +309,9 @@ describe('play images: tablet, TV and Wear sets are optional (play.tablets)', ()
     const out = await capture(() => imagesRun({ loaded, args: parseArgs(['--dry']) }));
     expect(process.exitCode).toBe(before);
     expect(out).toContain('skipped fr-FR: no Play listing yet (machine-translated draft, not reviewed');
-    expect(out).toContain('skipped de-DE: no Play listing yet (run storebound play listing first');
+    expect(out).toContain('de-DE: no Play listing yet, this run creates it from the listing file with its images');
+    expect(out).toContain('de-DE: would replace icon (0 -> 1)');
     expect(out).toContain('en-US: would replace icon (0 -> 1)');
-    expect(out).not.toMatch(/de-DE: would/);
     expect(calls.some(c => c.url.includes('fr-FR'))).toBe(false);
     expect(calls.every(readOnly)).toBe(true);
     expect(noListing(new Error("GET /edits/1/listings/de-DE/icon -> 404 Listing for language 'de-DE' not found."))).toBe(true);

From 6782ac60785bcf33626c08e7f0c242ff576024c9 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Sat, 24 Oct 2026 19:49:26 +0800
Subject: [PATCH 027/126] api tables: regenerate for the new Play listing calls

---
 cli/api/wrapped.gen.ts | 4 ++--
 docs/api-coverage.md   | 4 ++--
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/cli/api/wrapped.gen.ts b/cli/api/wrapped.gen.ts
index 4a8fca5..20dc859 100644
--- a/cli/api/wrapped.gen.ts
+++ b/cli/api/wrapped.gen.ts
@@ -246,13 +246,13 @@ export const WRAPPED: { apple: Record<string, string>; play: Record<string, stri
     'androidpublisher.edits.details.get': 'apps onboard play/listing play/status validate',
     'androidpublisher.edits.details.update': 'play/listing',
     'androidpublisher.edits.images.deleteall': 'play/images',
-    'androidpublisher.edits.images.list': 'apps art play/images validate',
+    'androidpublisher.edits.images.list': 'apps art play/images play/listing validate',
     'androidpublisher.edits.images.upload': 'play/images play/listing',
     'androidpublisher.edits.insert': 'apps onboard play/client validate',
     'androidpublisher.edits.listings.get': 'onboard',
     'androidpublisher.edits.listings.list': 'art listing-store play/listing play/status validate',
     'androidpublisher.edits.listings.patch': 'listing-store',
-    'androidpublisher.edits.listings.update': 'listing-store play/listing',
+    'androidpublisher.edits.listings.update': 'listing-store play/images play/listing',
     'androidpublisher.edits.tracks.get': 'play/release play/rollout play/upload',
     'androidpublisher.edits.tracks.list': 'play/next-version-code play/publish-ready play/status play/upload validate',
     'androidpublisher.edits.tracks.update': 'play/release play/rollout play/upload',
diff --git a/docs/api-coverage.md b/docs/api-coverage.md
index 5a00c04..2e79da5 100644
--- a/docs/api-coverage.md
+++ b/docs/api-coverage.md
@@ -1592,7 +1592,7 @@ Specs: Apple [App Store Connect API 4.5.1](https://developer.apple.com/sample-co
 | **androidpublisher.edits.images** (4) | | | | |
 | `androidpublisher.edits.images.delete` | DELETE | `androidpublisher/v3/applications/{packageName}/edits/{editId}/listings/{language}/{imageType}/{imageId}` | owner only (typed confirm) |  |
 | `androidpublisher.edits.images.deleteall` | DELETE | `androidpublisher/v3/applications/{packageName}/edits/{editId}/listings/{language}/{imageType}` | owner only (typed confirm) | play/images |
-| `androidpublisher.edits.images.list` | GET | `androidpublisher/v3/applications/{packageName}/edits/{editId}/listings/{language}/{imageType}` | read | apps, art, play/images, validate |
+| `androidpublisher.edits.images.list` | GET | `androidpublisher/v3/applications/{packageName}/edits/{editId}/listings/{language}/{imageType}` | read | apps, art, play/images, play/listing, validate |
 | `androidpublisher.edits.images.upload` | POST | `androidpublisher/v3/applications/{packageName}/edits/{editId}/listings/{language}/{imageType}` | write (dry by default) | play/images, play/listing |
 | **androidpublisher.edits.listings** (6) | | | | |
 | `androidpublisher.edits.listings.delete` | DELETE | `androidpublisher/v3/applications/{packageName}/edits/{editId}/listings/{language}` | owner only (typed confirm) |  |
@@ -1600,7 +1600,7 @@ Specs: Apple [App Store Connect API 4.5.1](https://developer.apple.com/sample-co
 | `androidpublisher.edits.listings.get` | GET | `androidpublisher/v3/applications/{packageName}/edits/{editId}/listings/{language}` | read | onboard |
 | `androidpublisher.edits.listings.list` | GET | `androidpublisher/v3/applications/{packageName}/edits/{editId}/listings` | read | art, listing-store, play/listing, play/status, validate |
 | `androidpublisher.edits.listings.patch` | PATCH | `androidpublisher/v3/applications/{packageName}/edits/{editId}/listings/{language}` | write (dry by default) | listing-store |
-| `androidpublisher.edits.listings.update` | PUT | `androidpublisher/v3/applications/{packageName}/edits/{editId}/listings/{language}` | write (dry by default) | listing-store, play/listing |
+| `androidpublisher.edits.listings.update` | PUT | `androidpublisher/v3/applications/{packageName}/edits/{editId}/listings/{language}` | write (dry by default) | listing-store, play/images, play/listing |
 | **androidpublisher.edits.testers** (3) | | | | |
 | `androidpublisher.edits.testers.get` | GET | `androidpublisher/v3/applications/{packageName}/edits/{editId}/testers/{track}` | read |  |
 | `androidpublisher.edits.testers.patch` | PATCH | `androidpublisher/v3/applications/{packageName}/edits/{editId}/testers/{track}` | owner only (typed confirm) |  |

From da7ca48ab48f24e5f93ac2245ec4e642a4895b46 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Sat, 24 Oct 2026 19:53:06 +0800
Subject: [PATCH 028/126] desktop tray: card as tall as its content, card and
 menu open from the tray icon's edge (never over the taskbar); menu permission
 files

---
 .../permissions/autogenerated/menu_close.toml | 11 +++++
 .../autogenerated/menu_close_subs.toml        | 11 +++++
 .../autogenerated/menu_dismiss.toml           | 11 +++++
 .../autogenerated/menu_open_sub.toml          | 11 +++++
 .../permissions/autogenerated/menu_pin.toml   | 11 +++++
 .../autogenerated/menu_pin_sub.toml           | 11 +++++
 .../permissions/autogenerated/menu_ready.toml | 11 +++++
 .../autogenerated/menu_select.toml            | 11 +++++
 .../permissions/autogenerated/menu_state.toml | 11 +++++
 apps/desktop/src-tauri/src/card.rs            | 47 +++++++++++++++----
 apps/desktop/src-tauri/src/commands.rs        |  4 ++
 apps/desktop/src-tauri/src/lib.rs             | 15 +++---
 apps/desktop/src-tauri/src/menu_panel.rs      | 11 +++--
 apps/desktop/src-tauri/tests/menu_panel.rs    | 11 +++++
 apps/desktop/src/card/Card.tsx                | 14 +++++-
 apps/desktop/src/card/card-api.ts             |  2 +-
 apps/desktop/src/card/card.css                |  8 ++--
 17 files changed, 185 insertions(+), 26 deletions(-)
 create mode 100644 apps/desktop/src-tauri/permissions/autogenerated/menu_close.toml
 create mode 100644 apps/desktop/src-tauri/permissions/autogenerated/menu_close_subs.toml
 create mode 100644 apps/desktop/src-tauri/permissions/autogenerated/menu_dismiss.toml
 create mode 100644 apps/desktop/src-tauri/permissions/autogenerated/menu_open_sub.toml
 create mode 100644 apps/desktop/src-tauri/permissions/autogenerated/menu_pin.toml
 create mode 100644 apps/desktop/src-tauri/permissions/autogenerated/menu_pin_sub.toml
 create mode 100644 apps/desktop/src-tauri/permissions/autogenerated/menu_ready.toml
 create mode 100644 apps/desktop/src-tauri/permissions/autogenerated/menu_select.toml
 create mode 100644 apps/desktop/src-tauri/permissions/autogenerated/menu_state.toml

diff --git a/apps/desktop/src-tauri/permissions/autogenerated/menu_close.toml b/apps/desktop/src-tauri/permissions/autogenerated/menu_close.toml
new file mode 100644
index 0000000..f113d1c
--- /dev/null
+++ b/apps/desktop/src-tauri/permissions/autogenerated/menu_close.toml
@@ -0,0 +1,11 @@
+# Automatically generated - DO NOT EDIT!
+
+[[permission]]
+identifier = "allow-menu-close"
+description = "Enables the menu_close command without any pre-configured scope."
+commands.allow = ["menu_close"]
+
+[[permission]]
+identifier = "deny-menu-close"
+description = "Denies the menu_close command without any pre-configured scope."
+commands.deny = ["menu_close"]
diff --git a/apps/desktop/src-tauri/permissions/autogenerated/menu_close_subs.toml b/apps/desktop/src-tauri/permissions/autogenerated/menu_close_subs.toml
new file mode 100644
index 0000000..dab5968
--- /dev/null
+++ b/apps/desktop/src-tauri/permissions/autogenerated/menu_close_subs.toml
@@ -0,0 +1,11 @@
+# Automatically generated - DO NOT EDIT!
+
+[[permission]]
+identifier = "allow-menu-close-subs"
+description = "Enables the menu_close_subs command without any pre-configured scope."
+commands.allow = ["menu_close_subs"]
+
+[[permission]]
+identifier = "deny-menu-close-subs"
+description = "Denies the menu_close_subs command without any pre-configured scope."
+commands.deny = ["menu_close_subs"]
diff --git a/apps/desktop/src-tauri/permissions/autogenerated/menu_dismiss.toml b/apps/desktop/src-tauri/permissions/autogenerated/menu_dismiss.toml
new file mode 100644
index 0000000..5c7a0ef
--- /dev/null
+++ b/apps/desktop/src-tauri/permissions/autogenerated/menu_dismiss.toml
@@ -0,0 +1,11 @@
+# Automatically generated - DO NOT EDIT!
+
+[[permission]]
+identifier = "allow-menu-dismiss"
+description = "Enables the menu_dismiss command without any pre-configured scope."
+commands.allow = ["menu_dismiss"]
+
+[[permission]]
+identifier = "deny-menu-dismiss"
+description = "Denies the menu_dismiss command without any pre-configured scope."
+commands.deny = ["menu_dismiss"]
diff --git a/apps/desktop/src-tauri/permissions/autogenerated/menu_open_sub.toml b/apps/desktop/src-tauri/permissions/autogenerated/menu_open_sub.toml
new file mode 100644
index 0000000..ee4175b
--- /dev/null
+++ b/apps/desktop/src-tauri/permissions/autogenerated/menu_open_sub.toml
@@ -0,0 +1,11 @@
+# Automatically generated - DO NOT EDIT!
+
+[[permission]]
+identifier = "allow-menu-open-sub"
+description = "Enables the menu_open_sub command without any pre-configured scope."
+commands.allow = ["menu_open_sub"]
+
+[[permission]]
+identifier = "deny-menu-open-sub"
+description = "Denies the menu_open_sub command without any pre-configured scope."
+commands.deny = ["menu_open_sub"]
diff --git a/apps/desktop/src-tauri/permissions/autogenerated/menu_pin.toml b/apps/desktop/src-tauri/permissions/autogenerated/menu_pin.toml
new file mode 100644
index 0000000..6e1dabc
--- /dev/null
+++ b/apps/desktop/src-tauri/permissions/autogenerated/menu_pin.toml
@@ -0,0 +1,11 @@
+# Automatically generated - DO NOT EDIT!
+
+[[permission]]
+identifier = "allow-menu-pin"
+description = "Enables the menu_pin command without any pre-configured scope."
+commands.allow = ["menu_pin"]
+
+[[permission]]
+identifier = "deny-menu-pin"
+description = "Denies the menu_pin command without any pre-configured scope."
+commands.deny = ["menu_pin"]
diff --git a/apps/desktop/src-tauri/permissions/autogenerated/menu_pin_sub.toml b/apps/desktop/src-tauri/permissions/autogenerated/menu_pin_sub.toml
new file mode 100644
index 0000000..b339f12
--- /dev/null
+++ b/apps/desktop/src-tauri/permissions/autogenerated/menu_pin_sub.toml
@@ -0,0 +1,11 @@
+# Automatically generated - DO NOT EDIT!
+
+[[permission]]
+identifier = "allow-menu-pin-sub"
+description = "Enables the menu_pin_sub command without any pre-configured scope."
+commands.allow = ["menu_pin_sub"]
+
+[[permission]]
+identifier = "deny-menu-pin-sub"
+description = "Denies the menu_pin_sub command without any pre-configured scope."
+commands.deny = ["menu_pin_sub"]
diff --git a/apps/desktop/src-tauri/permissions/autogenerated/menu_ready.toml b/apps/desktop/src-tauri/permissions/autogenerated/menu_ready.toml
new file mode 100644
index 0000000..c839ac0
--- /dev/null
+++ b/apps/desktop/src-tauri/permissions/autogenerated/menu_ready.toml
@@ -0,0 +1,11 @@
+# Automatically generated - DO NOT EDIT!
+
+[[permission]]
+identifier = "allow-menu-ready"
+description = "Enables the menu_ready command without any pre-configured scope."
+commands.allow = ["menu_ready"]
+
+[[permission]]
+identifier = "deny-menu-ready"
+description = "Denies the menu_ready command without any pre-configured scope."
+commands.deny = ["menu_ready"]
diff --git a/apps/desktop/src-tauri/permissions/autogenerated/menu_select.toml b/apps/desktop/src-tauri/permissions/autogenerated/menu_select.toml
new file mode 100644
index 0000000..e546f01
--- /dev/null
+++ b/apps/desktop/src-tauri/permissions/autogenerated/menu_select.toml
@@ -0,0 +1,11 @@
+# Automatically generated - DO NOT EDIT!
+
+[[permission]]
+identifier = "allow-menu-select"
+description = "Enables the menu_select command without any pre-configured scope."
+commands.allow = ["menu_select"]
+
+[[permission]]
+identifier = "deny-menu-select"
+description = "Denies the menu_select command without any pre-configured scope."
+commands.deny = ["menu_select"]
diff --git a/apps/desktop/src-tauri/permissions/autogenerated/menu_state.toml b/apps/desktop/src-tauri/permissions/autogenerated/menu_state.toml
new file mode 100644
index 0000000..b4844a3
--- /dev/null
+++ b/apps/desktop/src-tauri/permissions/autogenerated/menu_state.toml
@@ -0,0 +1,11 @@
+# Automatically generated - DO NOT EDIT!
+
+[[permission]]
+identifier = "allow-menu-state"
+description = "Enables the menu_state command without any pre-configured scope."
+commands.allow = ["menu_state"]
+
+[[permission]]
+identifier = "deny-menu-state"
+description = "Denies the menu_state command without any pre-configured scope."
+commands.deny = ["menu_state"]
diff --git a/apps/desktop/src-tauri/src/card.rs b/apps/desktop/src-tauri/src/card.rs
index 0e60f4c..e7c85ff 100644
--- a/apps/desktop/src-tauri/src/card.rs
+++ b/apps/desktop/src-tauri/src/card.rs
@@ -62,7 +62,7 @@ pub fn place(tray: Rect, work: Rect, card_w: f64, card_h: f64, gap: f64) -> (f64
 
 /// Whether a card action word is one the card may send.
 pub fn valid_action(a: &str) -> bool {
-    matches!(a, "hide" | "open" | "route" | "refresh" | "mute" | "quit" | "external" | "ready")
+    matches!(a, "hide" | "open" | "route" | "refresh" | "mute" | "quit" | "external" | "ready" | "size")
 }
 
 // ---- the last snapshot ----
@@ -123,6 +123,38 @@ mod window {
         Ok(())
     }
 
+    /// The icon rectangle of the last show, so a size change keeps the card anchored to the icon.
+    static LAST_ICON: Mutex<Option<Rect>> = Mutex::new(None);
+
+    /// Card height in CSS px (what the page measured), clamped; the window keeps WIDTH.
+    fn height_px(h: f64) -> f64 { h.clamp(120.0, HEIGHT) }
+
+    /// Puts the card next to `tray` at its current height: its edge GAP from the icon, inside the work area.
+    fn anchor<R: Runtime>(app: &AppHandle<R>, w: &tauri::WebviewWindow<R>, tray: Rect, css_h: f64) {
+        let monitor = app.monitor_from_point(tray.x + tray.w / 2.0, tray.y + tray.h / 2.0).ok().flatten().or_else(|| w.primary_monitor().ok().flatten());
+        if let Some(m) = monitor {
+            let s = m.scale_factor();
+            let wa = m.work_area();
+            let work = Rect { x: wa.position.x as f64, y: wa.position.y as f64, w: wa.size.width as f64, h: wa.size.height as f64 };
+            let _ = w.set_size(tauri::PhysicalSize::new((WIDTH * s).round() as u32, (css_h * s).round() as u32));
+            let (x, y) = place(tray, work, WIDTH * s, css_h * s, GAP * s);
+            let _ = w.set_position(PhysicalPosition::new(x as i32, y as i32));
+        }
+    }
+
+    /// The page measured its height: resize the window to it and keep it anchored (the bottom edge stays above a bottom
+    /// taskbar, no empty band under the content).
+    pub fn resize<R: Runtime>(app: &AppHandle<R>, css_h: f64) {
+        let Some(w) = app.get_webview_window(LABEL) else { return };
+        let h = height_px(css_h);
+        if let Ok(mut c) = CURRENT_H.lock() { *c = h; }
+        if let Some(tray) = LAST_ICON.lock().ok().and_then(|t| *t) {
+            anchor(app, &w, tray, h);
+        }
+    }
+
+    static CURRENT_H: Mutex<f64> = Mutex::new(HEIGHT);
+
     /// A left click on the tray icon: shows the card next to the icon, or hides it when it is open.
     pub fn toggle<R: Runtime>(app: &AppHandle<R>, tray: Rect) {
         let Some(w) = app.get_webview_window(LABEL) else { return };
@@ -134,14 +166,9 @@ mod window {
         if just_hidden() {
             return;
         }
-        let monitor = app.monitor_from_point(tray.x + tray.w / 2.0, tray.y + tray.h / 2.0).ok().flatten().or_else(|| w.primary_monitor().ok().flatten());
-        if let Some(m) = monitor {
-            let s = m.scale_factor();
-            let wa = m.work_area();
-            let work = Rect { x: wa.position.x as f64, y: wa.position.y as f64, w: wa.size.width as f64, h: wa.size.height as f64 };
-            let (x, y) = place(tray, work, WIDTH * s, HEIGHT * s, GAP * s);
-            let _ = w.set_position(PhysicalPosition::new(x as i32, y as i32));
-        }
+        if let Ok(mut t) = LAST_ICON.lock() { *t = Some(tray); }
+        let h = CURRENT_H.lock().map(|c| *c).unwrap_or(HEIGHT);
+        anchor(app, &w, tray, h);
         let _ = w.show();
         let _ = w.set_focus();
         let _ = app.emit_to(LABEL, "card-shown", ());
@@ -158,4 +185,4 @@ mod window {
 }
 
 #[cfg(desktop)]
-pub use window::{create, hide, toggle};
+pub use window::{create, hide, resize, toggle};
diff --git a/apps/desktop/src-tauri/src/commands.rs b/apps/desktop/src-tauri/src/commands.rs
index 9739e6a..5bfa27e 100644
--- a/apps/desktop/src-tauri/src/commands.rs
+++ b/apps/desktop/src-tauri/src/commands.rs
@@ -1355,6 +1355,10 @@ pub fn card_action(window: WebviewWindow, app: AppHandle, action: String, arg: O
     match action.as_str() {
         "hide" => crate::card::hide(&app),
         "ready" => { let _ = app.emit_to(policy::MAIN, "card-request", ()); }
+        "size" => {
+            let h: f64 = arg.as_deref().unwrap_or_default().parse().map_err(|_| Fail::host("bad size"))?;
+            crate::card::resize(&app, h);
+        }
         "open" => { crate::card::hide(&app); main(); }
         "refresh" => { let _ = app.emit_to(policy::MAIN, "tray-action", "read"); }
         "mute" => { let _ = app.emit_to(policy::MAIN, "tray-action", "mute-toggle"); }
diff --git a/apps/desktop/src-tauri/src/lib.rs b/apps/desktop/src-tauri/src/lib.rs
index e616bdd..f45f3bc 100644
--- a/apps/desktop/src-tauri/src/lib.rs
+++ b/apps/desktop/src-tauri/src/lib.rs
@@ -67,19 +67,20 @@ fn tray(app: &tauri::App) -> tauri::Result<()> {
         .on_tray_icon_event(|t, e| {
             let TrayIconEvent::Click { button, button_state: MouseButtonState::Up, rect, position, .. } = e else { return };
             let app = t.app_handle();
+            // both open from the icon's rectangle (not the click point): their edge sits next to the icon, above a
+            // bottom taskbar, so nothing starts inside the taskbar
+            let scale = app.get_webview_window(policy::MAIN).and_then(|w| w.scale_factor().ok()).unwrap_or(1.0);
+            let p = rect.position.to_physical::<f64>(scale);
+            let s = rect.size.to_physical::<f64>(scale);
+            let icon = if s.width > 0.0 && s.height > 0.0 { card::Rect { x: p.x, y: p.y, w: s.width, h: s.height } } else { card::Rect { x: position.x, y: position.y, w: 1.0, h: 1.0 } };
             match button {
-                // right click: the menu panels at the click point
-                MouseButton::Right => menu_panel::open_root(app, position.x, position.y),
-                // left click: the tray card next to the icon
+                MouseButton::Right => menu_panel::open_root(app, menu_panel::Anchor::Tray { x: icon.x, y: icon.y, w: icon.w, h: icon.h }),
                 MouseButton::Left => {
                     if app.get_webview_window(card::LABEL).is_none() {
                         show_main(app);
                         return;
                     }
-                    let scale = app.get_webview_window(policy::MAIN).and_then(|w| w.scale_factor().ok()).unwrap_or(1.0);
-                    let p = rect.position.to_physical::<f64>(scale);
-                    let s = rect.size.to_physical::<f64>(scale);
-                    card::toggle(app, card::Rect { x: p.x, y: p.y, w: s.width, h: s.height });
+                    card::toggle(app, icon);
                 }
                 _ => {}
             }
diff --git a/apps/desktop/src-tauri/src/menu_panel.rs b/apps/desktop/src-tauri/src/menu_panel.rs
index 3809791..935ac09 100644
--- a/apps/desktop/src-tauri/src/menu_panel.rs
+++ b/apps/desktop/src-tauri/src/menu_panel.rs
@@ -107,6 +107,8 @@ pub fn find<'a>(nodes: &'a [Node], path: &[String]) -> Option<(&'a [Node], Optio
 pub enum Anchor {
     /// The tray click point (physical).
     Point { x: f64, y: f64 },
+    /// The tray icon's rectangle (physical): the root opens from the icon's edge that faces the screen, like the card.
+    Tray { x: f64, y: f64, w: f64, h: f64 },
     /// Beside a parent panel: its left and right edge and the row's top (physical).
     Beside { left: f64, right: f64, top: f64 },
     /// A remembered top-left (pinned panels).
@@ -129,6 +131,8 @@ pub fn place_menu(anchor: Anchor, size: (f64, f64), work: Rect) -> (f64, f64) {
     let (wx, wy, ww, wh) = work;
     let (x, y) = match anchor {
         Anchor::Point { x, y } => (if x + w > wx + ww { x - w } else { x }, if y + h > wy + wh { y - h } else { y }),
+        // same rule as the card: the panel's edge sits GAP from the icon, never over the taskbar
+        Anchor::Tray { x, y, w: iw, h: ih } => return crate::card::place(crate::card::Rect { x, y, w: iw, h: ih }, crate::card::Rect { x: wx, y: wy, w: ww, h: wh }, w, h, GAP),
         Anchor::Beside { left, right, top } => (if right + w <= wx + ww - GAP { right - 2.0 } else { left - w + 2.0 }, top - 5.0),
         Anchor::At { x, y } => (x, y),
     };
@@ -520,12 +524,12 @@ mod runtime {
         });
     }
 
-    /// A right click on the tray icon: a fresh root menu at the click point (physical px).
-    pub fn open_root(app: &AppHandle, x: f64, y: f64) {
+    /// A right click on the tray icon: a fresh root menu next to the icon (`anchor`: Anchor::Tray, physical px).
+    pub fn open_root(app: &AppHandle, anchor: Anchor) {
         if native_fallback(app) {
             return; // the native menu is on the tray and opens by itself
         }
-        let (label, closes) = book(app, |b| b.open_root(Anchor::Point { x, y }));
+        let (label, closes) = book(app, |b| b.open_root(anchor));
         destroy(app, &closes);
         let handle = app.clone();
         std::thread::spawn(move || {
@@ -571,6 +575,7 @@ mod runtime {
     fn anchor_point(a: Anchor) -> (f64, f64) {
         match a {
             Anchor::Point { x, y } | Anchor::At { x, y } => (x, y),
+            Anchor::Tray { x, y, w, h } => (x + w / 2.0, y + h / 2.0),
             Anchor::Beside { right, top, .. } => (right, top),
         }
     }
diff --git a/apps/desktop/src-tauri/tests/menu_panel.rs b/apps/desktop/src-tauri/tests/menu_panel.rs
index 0f89878..d46cd18 100644
--- a/apps/desktop/src-tauri/tests/menu_panel.rs
+++ b/apps/desktop/src-tauri/tests/menu_panel.rs
@@ -83,6 +83,17 @@ fn root_opens_away_from_the_taskbar_and_stays_inside() {
     assert_eq!(y, GAP);
 }
 
+#[test]
+fn tray_root_sits_just_above_the_icon_never_over_the_taskbar() {
+    // icon in a bottom taskbar (the icon is below the work area): bottom edge exactly GAP above the icon's top
+    let icon = Anchor::Tray { x: 1800.0, y: 1044.0, w: 32.0, h: 32.0 };
+    let (_, y) = place_menu(icon, (260.0, 300.0), WORK);
+    assert_eq!(y + 300.0, 1040.0 - GAP);
+    // even when the reported work area wrongly includes the taskbar, the panel stays above the icon
+    let (_, y) = place_menu(icon, (260.0, 300.0), (0.0, 0.0, 1920.0, 1080.0));
+    assert!(y + 300.0 <= 1044.0 - GAP);
+}
+
 #[test]
 fn submenus_open_beside_and_flip_left_at_the_edge() {
     let (x, _) = place_menu(Anchor::Beside { left: 1600.0, right: 1880.0, top: 100.0 }, (280.0, 200.0), WORK);
diff --git a/apps/desktop/src/card/Card.tsx b/apps/desktop/src/card/Card.tsx
index 99b4101..4140e6a 100644
--- a/apps/desktop/src/card/Card.tsx
+++ b/apps/desktop/src/card/Card.tsx
@@ -18,7 +18,7 @@ export interface CardHost {
   get: () => Promise<CardSnapshot | null>;
   onSnapshot: (fn: (s: CardSnapshot) => void) => () => void;
   onShown: (fn: () => void) => () => void;
-  action: (action: 'hide' | 'open' | 'route' | 'refresh' | 'mute' | 'quit' | 'external' | 'ready', arg?: string) => void;
+  action: (action: 'hide' | 'open' | 'route' | 'refresh' | 'mute' | 'quit' | 'external' | 'ready' | 'size', arg?: string) => void;
 }
 
 const route = (app: string, tab: 'releases' | 'reviews' | 'health') => JSON.stringify({ screen: 'app', appId: app, tab });
@@ -39,6 +39,18 @@ export function Card({ host, lang }: { host: CardHost; lang: CardLang }) {
     const tm = setInterval(() => setNow(Date.now()), 30_000);
     return () => { a(); b(); clearInterval(tm); };
   }, [host]);
+  // the window is as tall as the card: report the height whenever it changes (the host re-anchors it above the icon)
+  useEffect(() => {
+    const el = root.current;
+    if (!el || typeof ResizeObserver === 'undefined') return;
+    let last = 0;
+    const ro = new ResizeObserver(() => {
+      const h = Math.ceil(el.getBoundingClientRect().height);
+      if (h > 0 && h !== last) { last = h; host.action('size', String(h)); }
+    });
+    ro.observe(el);
+    return () => ro.disconnect();
+  }, [host]);
   // every show: fade in, focus the first control (keyboard users start at Refresh)
   useEffect(() => { (root.current?.querySelector<HTMLElement>('button:not([disabled])') ?? root.current)?.focus(); }, [shown, !!s]);
 
diff --git a/apps/desktop/src/card/card-api.ts b/apps/desktop/src/card/card-api.ts
index 6a66afc..86b466c 100644
--- a/apps/desktop/src/card/card-api.ts
+++ b/apps/desktop/src/card/card-api.ts
@@ -4,7 +4,7 @@ import { invoke } from '@tauri-apps/api/core';
 import { listen } from '@tauri-apps/api/event';
 import type { CardSnapshot } from './model';
 
-export type CardAction = 'hide' | 'open' | 'route' | 'refresh' | 'mute' | 'quit' | 'external' | 'ready';
+export type CardAction = 'hide' | 'open' | 'route' | 'refresh' | 'mute' | 'quit' | 'external' | 'ready' | 'size';
 
 export const inTauri = (): boolean => typeof window !== 'undefined' && '__TAURI_INTERNALS__' in window;
 
diff --git a/apps/desktop/src/card/card.css b/apps/desktop/src/card/card.css
index c9502c8..68ca2e6 100644
--- a/apps/desktop/src/card/card.css
+++ b/apps/desktop/src/card/card.css
@@ -1,12 +1,12 @@
-/* The tray card (card.html): v2 language at 360 x 480, rounded, its own surface; fades in over 120 ms on every show. */
+/* The tray card (card.html): v2 language, 360 wide and as tall as its content (at most 480: the body scrolls), rounded, its own surface; fades in over 120 ms on every show. */
 html:has(body.tc-page), body.tc-page { margin: 0; height: 100%; background: transparent; overflow: hidden; }
 body.tc-page { font: var(--ds-t-body)/1.4 system-ui, -apple-system, "Segoe UI", sans-serif; color: var(--ink); }
-body.tc-page #card { height: 100%; }
+body.tc-page #card { height: auto; }
 body.tc-page.tc-in .tc { animation: tc-in 120ms ease-out; }
 :root[data-motion="reduce"] body.tc-page.tc-in .tc { animation: none; }
 @keyframes tc-in { from { opacity: 0; transform: translateY(4px); } to { opacity: 1; transform: none; } }
 
-.tc { box-sizing: border-box; height: 100%; max-height: 480px; display: flex; flex-direction: column; border-radius: var(--ds-r-lg);
+.tc { box-sizing: border-box; height: auto; max-height: 480px; display: flex; flex-direction: column; border-radius: var(--ds-r-lg);
   border: 1px solid var(--ds-stroke); background: radial-gradient(120% 60% at 100% 0%, color-mix(in srgb, var(--accent-solid) 10%, transparent), transparent 60%), var(--ds-raised); overflow: hidden; outline: none; }
 .tc-head { position: relative; display: flex; align-items: center; gap: 8px; padding: 14px 12px 12px 16px; border-bottom: 1px solid var(--ds-stroke); }
 .tc-title { flex: 1; min-width: 0; display: flex; flex-direction: column; }
@@ -25,7 +25,7 @@ body.tc-page.tc-in .tc { animation: tc-in 120ms ease-out; }
 .tc-menu button:hover, .tc-menu button:focus-visible { background: var(--hover); outline: none; }
 .tc-menu hr { border: 0; border-top: 1px solid var(--ds-stroke); margin: 4px 2px; }
 
-.tc-body { flex: 1; overflow-y: auto; padding: 6px 10px 12px; scrollbar-width: thin; }
+.tc-body { flex: 1 1 auto; min-height: 0; overflow-y: auto; padding: 6px 10px 12px; scrollbar-width: thin; }
 .tc-empty { margin: 28px 16px; text-align: center; color: var(--muted); }
 .tc-sec { margin-top: 8px; }
 .tc-sec h2 { display: flex; align-items: baseline; justify-content: space-between; gap: 8px; margin: 6px 6px 4px; font-size: var(--ds-t-micro); font-weight: var(--ds-w-strong); text-transform: uppercase; letter-spacing: .07em; color: var(--muted); }

From 53845c6dd97af050d3bc80b247efca592f588431 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Sat, 24 Oct 2026 21:13:10 +0800
Subject: [PATCH 029/126] desktop: autostart respects Windows Startup apps
 (turned off there stays off; the Run entry is no longer re-enabled on every
 start)

---
 apps/desktop/src-tauri/src/lib.rs  | 40 +++++++++++++++++++++++++++---
 apps/desktop/src-tauri/tests/d5.rs | 10 ++++++++
 2 files changed, 47 insertions(+), 3 deletions(-)

diff --git a/apps/desktop/src-tauri/src/lib.rs b/apps/desktop/src-tauri/src/lib.rs
index f45f3bc..c2cd10e 100644
--- a/apps/desktop/src-tauri/src/lib.rs
+++ b/apps/desktop/src-tauri/src/lib.rs
@@ -90,6 +90,35 @@ fn tray(app: &tauri::App) -> tauri::Result<()> {
 }
 
 /// A tray menu pick (a menu panel row or the native fallback menu): tray.rs maps the id to what it does.
+/// Whether the person turned storebound off in Windows' Startup apps (Settings / Task Manager), from the `reg query`
+/// output of HKCU\...\Explorer\StartupApproved\Run /v storebound: the first byte of the REG_BINARY is even when enabled
+/// (02, 06), odd when disabled (03, 07). No entry: not turned off. Pure.
+pub fn startup_approved_off(reg_query_out: &str) -> bool {
+    reg_query_out
+        .lines()
+        .find(|l| l.contains("REG_BINARY"))
+        .and_then(|l| l.split_whitespace().last())
+        .and_then(|hex| u8::from_str_radix(hex.get(0..2)?, 16).ok())
+        .is_some_and(|b| b & 1 == 1)
+}
+
+#[cfg(windows)]
+fn startup_disabled_by_user() -> bool {
+    use std::os::windows::process::CommandExt;
+    const CREATE_NO_WINDOW: u32 = 0x0800_0000;
+    std::process::Command::new("reg")
+        .args(["query", r"HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run", "/v", "storebound"])
+        .creation_flags(CREATE_NO_WINDOW)
+        .output()
+        .map(|o| startup_approved_off(&String::from_utf8_lossy(&o.stdout)))
+        .unwrap_or(false)
+}
+
+#[cfg(not(windows))]
+fn startup_disabled_by_user() -> bool {
+    false
+}
+
 pub fn dispatch_menu<R: Runtime>(app: &AppHandle<R>, id: &str) {
     match tray::action_of(id) {
         Some(tray::Action::Open) => show_main(app),
@@ -354,9 +383,14 @@ pub fn run() {
             }
             // start at logon, in the tray: rewritten on every start (Windows: the HKCU Run entry then points at the
             // running exe, so a moved or updated install fixes itself)
-            match app.autolaunch().enable() {
-                Ok(()) => logs::host("info", "autostart at logon set (--hidden, tray)"),
-                Err(e) => logs::host("warn", &format!("autostart not set: {e}")),
+            // ...unless the person turned it off (Windows Settings > Apps > Startup / Task Manager): that choice stands
+            if startup_disabled_by_user() {
+                logs::host("info", "autostart at logon left off (turned off in Windows Startup apps)");
+            } else {
+                match app.autolaunch().enable() {
+                    Ok(()) => logs::host("info", "autostart at logon set (--hidden, tray)"),
+                    Err(e) => logs::host("warn", &format!("autostart not set: {e}")),
+                }
             }
             app.manage(state);
             app.manage(menu_panel::MenuPanels::default());
diff --git a/apps/desktop/src-tauri/tests/d5.rs b/apps/desktop/src-tauri/tests/d5.rs
index 6232f5b..6342910 100644
--- a/apps/desktop/src-tauri/tests/d5.rs
+++ b/apps/desktop/src-tauri/tests/d5.rs
@@ -142,3 +142,13 @@ fn background_updater_schedule_and_defer() {
     assert!(updates::take_kick());
     assert!(!updates::take_kick());
 }
+
+#[test]
+fn startup_apps_choice_is_read_from_startup_approved() {
+    use storebound_desktop::startup_approved_off;
+    let on = "\r\nHKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\StartupApproved\\Run\r\n    storebound    REG_BINARY    020000000000000000000000\r\n";
+    let off = "\r\nHKEY_CURRENT_USER\\Run\r\n    storebound    REG_BINARY    0300000020D1D3B1F0B3DC01\r\n";
+    assert!(!startup_approved_off(on));
+    assert!(startup_approved_off(off));
+    assert!(!startup_approved_off("ERROR: The system was unable to find the specified registry key or value."));
+}

From d43c95db7e59de43c34af191c9a360aa65d134c7 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Sun, 25 Oct 2026 21:11:31 +0800
Subject: [PATCH 030/126] desktop: read StartupApproved through the registry
 API, no reg.exe (the security test allows no other programs)

---
 apps/desktop/src-tauri/Cargo.lock  |  1 +
 apps/desktop/src-tauri/Cargo.toml  |  2 ++
 apps/desktop/src-tauri/src/lib.rs  | 27 ++++++++++-----------------
 apps/desktop/src-tauri/tests/d5.rs | 10 +++++-----
 4 files changed, 18 insertions(+), 22 deletions(-)

diff --git a/apps/desktop/src-tauri/Cargo.lock b/apps/desktop/src-tauri/Cargo.lock
index 15deadb..6dfcec4 100644
--- a/apps/desktop/src-tauri/Cargo.lock
+++ b/apps/desktop/src-tauri/Cargo.lock
@@ -4126,6 +4126,7 @@ dependencies = [
  "url",
  "webview2-com",
  "windows-core",
+ "winreg",
  "zip",
 ]
 
diff --git a/apps/desktop/src-tauri/Cargo.toml b/apps/desktop/src-tauri/Cargo.toml
index 9a6707f..14112cb 100644
--- a/apps/desktop/src-tauri/Cargo.toml
+++ b/apps/desktop/src-tauri/Cargo.toml
@@ -53,6 +53,8 @@ zip = { version = "4", default-features = false, features = ["deflate-flate2-zli
 [target.'cfg(windows)'.dependencies]
 webview2-com = "0.39"
 windows-core = "0.62"
+# reads Startup apps' StartupApproved value (already in the tree through the autostart plugin)
+winreg = "0.56"
 
 [dev-dependencies]
 tempfile = "3"
diff --git a/apps/desktop/src-tauri/src/lib.rs b/apps/desktop/src-tauri/src/lib.rs
index c2cd10e..0e55f5c 100644
--- a/apps/desktop/src-tauri/src/lib.rs
+++ b/apps/desktop/src-tauri/src/lib.rs
@@ -90,27 +90,20 @@ fn tray(app: &tauri::App) -> tauri::Result<()> {
 }
 
 /// A tray menu pick (a menu panel row or the native fallback menu): tray.rs maps the id to what it does.
-/// Whether the person turned storebound off in Windows' Startup apps (Settings / Task Manager), from the `reg query`
-/// output of HKCU\...\Explorer\StartupApproved\Run /v storebound: the first byte of the REG_BINARY is even when enabled
-/// (02, 06), odd when disabled (03, 07). No entry: not turned off. Pure.
-pub fn startup_approved_off(reg_query_out: &str) -> bool {
-    reg_query_out
-        .lines()
-        .find(|l| l.contains("REG_BINARY"))
-        .and_then(|l| l.split_whitespace().last())
-        .and_then(|hex| u8::from_str_radix(hex.get(0..2)?, 16).ok())
-        .is_some_and(|b| b & 1 == 1)
+/// Whether the person turned storebound off in Windows' Startup apps (Settings / Task Manager), from the
+/// HKCU\...\Explorer\StartupApproved\Run value named like the Run entry: its first byte is even when enabled (02, 06),
+/// odd when disabled (03, 07). No value: not turned off. Pure.
+pub fn startup_approved_off(value: &[u8]) -> bool {
+    value.first().is_some_and(|b| b & 1 == 1)
 }
 
 #[cfg(windows)]
 fn startup_disabled_by_user() -> bool {
-    use std::os::windows::process::CommandExt;
-    const CREATE_NO_WINDOW: u32 = 0x0800_0000;
-    std::process::Command::new("reg")
-        .args(["query", r"HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run", "/v", "storebound"])
-        .creation_flags(CREATE_NO_WINDOW)
-        .output()
-        .map(|o| startup_approved_off(&String::from_utf8_lossy(&o.stdout)))
+    use winreg::{enums::HKEY_CURRENT_USER, RegKey};
+    RegKey::predef(HKEY_CURRENT_USER)
+        .open_subkey(r"Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run")
+        .and_then(|k| k.get_raw_value("storebound"))
+        .map(|v| startup_approved_off(&v.bytes))
         .unwrap_or(false)
 }
 
diff --git a/apps/desktop/src-tauri/tests/d5.rs b/apps/desktop/src-tauri/tests/d5.rs
index 6342910..9f2f382 100644
--- a/apps/desktop/src-tauri/tests/d5.rs
+++ b/apps/desktop/src-tauri/tests/d5.rs
@@ -146,9 +146,9 @@ fn background_updater_schedule_and_defer() {
 #[test]
 fn startup_apps_choice_is_read_from_startup_approved() {
     use storebound_desktop::startup_approved_off;
-    let on = "\r\nHKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\StartupApproved\\Run\r\n    storebound    REG_BINARY    020000000000000000000000\r\n";
-    let off = "\r\nHKEY_CURRENT_USER\\Run\r\n    storebound    REG_BINARY    0300000020D1D3B1F0B3DC01\r\n";
-    assert!(!startup_approved_off(on));
-    assert!(startup_approved_off(off));
-    assert!(!startup_approved_off("ERROR: The system was unable to find the specified registry key or value."));
+    assert!(!startup_approved_off(&[0x02, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0]));
+    assert!(!startup_approved_off(&[0x06, 0, 0, 0]));
+    assert!(startup_approved_off(&[0x03, 0, 0, 0, 0x20, 0xD1, 0xD3, 0xB1, 0xF0, 0xB3, 0xDC, 0x01]));
+    assert!(startup_approved_off(&[0x07]));
+    assert!(!startup_approved_off(&[]));
 }

From d7c36cbdb657eae8bc0e8ec9eaf200e6d7ea06e7 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Sun, 25 Oct 2026 20:15:46 +0700
Subject: [PATCH 031/126] storebound 0.8.49: version in package.json and every
 copy, CHANGELOG 0.8.49 section

---
 .claude-plugin/marketplace.json        | 2 +-
 .claude-plugin/plugin.json             | 2 +-
 .codex-plugin/plugin.json              | 2 +-
 CHANGELOG.md                           | 2 ++
 apps/desktop/package.json              | 2 +-
 apps/desktop/src-tauri/Cargo.lock      | 2 +-
 apps/desktop/src-tauri/Cargo.toml      | 2 +-
 apps/desktop/src-tauri/tauri.conf.json | 2 +-
 gemini-extension.json                  | 2 +-
 package.json                           | 2 +-
 10 files changed, 11 insertions(+), 9 deletions(-)

diff --git a/.claude-plugin/marketplace.json b/.claude-plugin/marketplace.json
index 0878844..4919deb 100644
--- a/.claude-plugin/marketplace.json
+++ b/.claude-plugin/marketplace.json
@@ -9,7 +9,7 @@
       "name": "storebound",
       "source": ".",
       "description": "Take a mobile app or game from nothing to Submit for review on both stores: skills for every store step and questionnaire plus the storebound CLI and MCP server.",
-      "version": "0.8.48",
+      "version": "0.8.49",
       "category": "development",
       "tags": [
         "mobile",
diff --git a/.claude-plugin/plugin.json b/.claude-plugin/plugin.json
index 7fe1a01..3c2fc7c 100644
--- a/.claude-plugin/plugin.json
+++ b/.claude-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.48",
+  "version": "0.8.49",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/.codex-plugin/plugin.json b/.codex-plugin/plugin.json
index 6cbea1a..5f1e53c 100644
--- a/.codex-plugin/plugin.json
+++ b/.codex-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.48",
+  "version": "0.8.49",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/CHANGELOG.md b/CHANGELOG.md
index d11434f..b029e3f 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,8 @@
 
 ## Unreleased
 
+## 0.8.49 · 2026-10-25
+
 - `play listing` for a language Play does not have yet uploads, in the same edit as the text, everything Play requires to commit it: icon, feature graphic, 2+ phone screenshots from `store/renders/<lang>/` and the tablet sets when the other languages have them (a set the folder lacks falls back to the default language's). The dry run lists the uploads or refuses with the missing file, instead of a 403 "too few screenshots" at commit. `play images` creates a Play listing that does not exist yet (text from the listing file) together with its images instead of skipping the language (pitfall 102).
 
 ## 0.8.48 · 2026-10-24
diff --git a/apps/desktop/package.json b/apps/desktop/package.json
index f05a79c..62a3769 100644
--- a/apps/desktop/package.json
+++ b/apps/desktop/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@storebound/desktop",
-  "version": "0.8.48",
+  "version": "0.8.49",
   "private": true,
   "license": "MIT",
   "type": "module",
diff --git a/apps/desktop/src-tauri/Cargo.lock b/apps/desktop/src-tauri/Cargo.lock
index 6dfcec4..ba11a53 100644
--- a/apps/desktop/src-tauri/Cargo.lock
+++ b/apps/desktop/src-tauri/Cargo.lock
@@ -4096,7 +4096,7 @@ checksum = "a2eb9349b6444b326872e140eb1cf5e7c522154d69e7a0ffb0fb81c06b37543f"
 
 [[package]]
 name = "storebound-desktop"
-version = "0.8.48"
+version = "0.8.49"
 dependencies = [
  "base64 0.22.1",
  "getrandom 0.3.4",
diff --git a/apps/desktop/src-tauri/Cargo.toml b/apps/desktop/src-tauri/Cargo.toml
index 14112cb..1611078 100644
--- a/apps/desktop/src-tauri/Cargo.toml
+++ b/apps/desktop/src-tauri/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "storebound-desktop"
-version = "0.8.48"
+version = "0.8.49"
 description = "storebound desktop: every game's releases on both stores in one window"
 license = "MIT"
 edition = "2021"
diff --git a/apps/desktop/src-tauri/tauri.conf.json b/apps/desktop/src-tauri/tauri.conf.json
index a3a7baf..ba5ad4f 100644
--- a/apps/desktop/src-tauri/tauri.conf.json
+++ b/apps/desktop/src-tauri/tauri.conf.json
@@ -2,7 +2,7 @@
   "$schema": "https://schema.tauri.app/config/2",
   "productName": "storebound",
   "mainBinaryName": "storebound-desktop",
-  "version": "0.8.48",
+  "version": "0.8.49",
   "identifier": "dev.storebound.desktop",
   "build": {
     "frontendDist": "../dist",
diff --git a/gemini-extension.json b/gemini-extension.json
index 762fc7c..e4f2853 100644
--- a/gemini-extension.json
+++ b/gemini-extension.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.48",
+  "version": "0.8.49",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "contextFileName": "GEMINI.md",
   "mcpServers": {
diff --git a/package.json b/package.json
index b544124..7e841cd 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.48",
+  "version": "0.8.49",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every store questionnaire (incl. account deletion and App Review demo accounts), privacy, icons, screenshots and previews, TestFlight. After launch: crash vitals, review replies, price sheets, analytics and Product Page Optimization. One config, a CLI (Node 20+ or Bun), an MCP server and Agent Skills for your AI coding agent.",
   "license": "MIT",
   "author": "CRTkafa",

From d978bb7a8b08b0c0e01f2c5f69907818d90b9589 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Sun, 25 Oct 2026 21:08:07 +0700
Subject: [PATCH 032/126] desktop icon: the brand mark at every size (small
 Windows sizes were a plain S tile), each size resampled on its own,
 20/30/36/40/60/72/80/96 px added for 125-200 % scaling

---
 apps/desktop/src-tauri/icons/128x128.png      | Bin 15007 -> 22762 bytes
 apps/desktop/src-tauri/icons/128x128@2x.png   | Bin 43665 -> 71045 bytes
 apps/desktop/src-tauri/icons/256x256.png      | Bin 43665 -> 71045 bytes
 apps/desktop/src-tauri/icons/32x32.png        | Bin 1650 -> 2439 bytes
 apps/desktop/src-tauri/icons/64x64.png        | Bin 5265 -> 7474 bytes
 .../src-tauri/icons/Square107x107Logo.png     | Bin 14924 -> 15933 bytes
 .../src-tauri/icons/Square142x142Logo.png     | Bin 22453 -> 25328 bytes
 .../src-tauri/icons/Square150x150Logo.png     | Bin 24745 -> 27718 bytes
 .../src-tauri/icons/Square284x284Logo.png     | Bin 63233 -> 78585 bytes
 .../src-tauri/icons/Square30x30Logo.png       | Bin 1522 -> 2040 bytes
 .../src-tauri/icons/Square310x310Logo.png     | Bin 74510 -> 90992 bytes
 .../src-tauri/icons/Square44x44Logo.png       | Bin 2331 -> 3799 bytes
 .../src-tauri/icons/Square71x71Logo.png       | Bin 7858 -> 8308 bytes
 .../src-tauri/icons/Square89x89Logo.png       | Bin 10888 -> 11928 bytes
 apps/desktop/src-tauri/icons/StoreLogo.png    | Bin 4533 -> 4699 bytes
 apps/desktop/src-tauri/icons/icon.ico         | Bin 75036 -> 161653 bytes
 apps/desktop/src-tauri/icons/icon.png         | Bin 121756 -> 233530 bytes
 17 files changed, 0 insertions(+), 0 deletions(-)

diff --git a/apps/desktop/src-tauri/icons/128x128.png b/apps/desktop/src-tauri/icons/128x128.png
index 701fe9a480ef7bd840d0781bf5100c8f5c439f18..bfff39e39c43b68c1001def238e6751452b2245f 100644
GIT binary patch
literal 22762
zcmV)CK*GO?P)<h;3K|Lk000e1NJLTq004jh004jp1^@s6!#-il003CANkl<Zc%1FM
z2fSrfbwB>y`_$X->vei#Ds=z>6$AtkMPqNopV*C2qe*@tzeN8@)ToI@lh|USi5hEE
zEC?tfy~7L)!_+r3@4b1w+<wnJW$*uI?S0OBZ!A%fp(qEh_r5!~oO{;Vt9;jYtqnYN
zJas&EJas&EJas&EJas&EJZc96Q}+Xz^?m2{zw8}po;Q<!dFuE*I2a>Ab6oj?Ke=xF
zo_pkJ9q0Z5J<l1(6X|$joy}vqKKYW{qq{2U^Q4r>p(}Up)3WDxpF9$tv328%=-(tH
zo=C^<nF6p_*dzwA<feu4XeokT{lJD?|K<%F!KGy4wC!syFpxG$F&=G&`)!WcFa16o
ziQoa7bz}?Hx-Ds|doU35^YhKa4>U0{P5(;5BO(1ZN1{;Yu3PrH{*5+*z-gR%dbWGO
zUbbS`-+NG5h$o08_`Og7GV`?3Im=k93om{5iG6?g!Iga*vAI2klb6k6%GiagZoB1M
z-?{BO?;ewT59{|lG9htNAV_qup3J4^_q>Mnr+vc+?Tt^*;8|PGc-I&1-TOzeE<SZU
zR>G&lWL<?b`#=8BThDIFKY2^g{EIKOs-OCPtGe%V^{Ri%eRVl>v%KjOUzRWEfBxGR
z-}{@HYI?oF_4mDg-DU4@-uX7^``@fLn?DVL;PcI!Kk-j;0Bcv#zZ=YWLbw9{`>^tD
z*57f)z(@C;y!!2%<XOB{eo16Dp9XhsJKUSkcHJqz+YUwKo$;oPwa<O$Pygl5PJ8vI
zQb-xJl4(W%>hEC-D?btf&&Z$ktoOWQ#g)c}Y(vWRwqf)_gq%O^wO#&uU-Qx*wWGf+
zl975ny-#NbkB>6&-+kftww*cnj|Vm_e^qCAR@jLCfVrn^H;~OTF+2)U%SD*q(1&`t
z-(+>e&2C#$dH=VreDlXHece@AxQ39wS_xE0DJ5Lw%$F~}=uMyf;M1>P{R*=o?Ne;V
zmw~YX04^79gx7!kq&1&;=c~ug>p1Iq^m=-qkm7Ok36H-GI*!7((3Lx5@E;#OVcDzu
z<o3X~U&+iDZe<WA6aRfMg5?1@6L|hA&bQPh+}aRQ111FT^XytV`<1u7|GGc=+7~XJ
zll6d<fQ0q)hlv3!8$5f}+ULFO;*EcK;mh5D)G29Cm|IO|o(6_~z0Tyl5W$@QbA)N6
z`P@BC^Tw|qoV@y`JzuzU-{@8Q8@uoHWkV#v>SK4Ue&-H-0XcH+_JI#Sux-_w*2$A2
z&wYh3pTCV`YYO<pgb;hCB{G5`%YcDA_!TQnq-T8YghRsY>VuFO&u)~m-+RZ0Zh7sO
zK7HPtXoQIpr~r{kI7st%KI=vQ{i?TYdfA%I2GVOR1jsdn?6Nsu0fyxOvgGjr3`2@L
zfz}XY7zt*x(27JFvjX!EF}&l?cm2l~cYoswGB&?u67u_;1!&<jq|L3}e|i0uWml{-
zP6`|L%VA%#jpOtb@T0mE2daQ68CnrQG229g<NDbMFX?hnA0I%jItiZ7xPH1=d)_Dh
z;+)S0)vI3r)h}IEl1-%qN<fkVOUFEMS^LYjZmc1)E53g;@L}X^o}C0T(*T<Quu7>T
zqWgj1AW$9!X68BOJ%~9gY>YVO!Le@4wZi>Nf5T&W#ePSQ<ieS3YsZz}KYjg`m+;NJ
zAzvx&=WpjYCk>2;z$d2#M&}?z3t$1`HV3jc(3u4;?FF8ZHhFobj6!A>k-H31GS4cF
zr~m5>@BQW*ulnLkTZrV+6tU0l$z3qG{_+=|-S_76o}JrLJh6q)3_Y3aFj@O@NOPH9
z(v97~<RM_B3N~(p)4O}zAKqivzQ1?)A8#Jp^Tio);2;n^E?4bwJ#_R;*GT@>2p@gI
z+Wgx-arXN6zunp7)Z}ZVd)_Gqo|OlL1io6AxMf<RRfmW?fccD*33P0rJq>i{fminf
z>zT>RQ&TA9rxB%BLPU1Mo;{TPhs)pliU0TGZ@trJp_2bnoFL88{Fyx~x4-$4lRkUN
z+j_Rao%UopXR@vpfQTR`_CoG231cLU>#y&!|L(^RzvZsd{a<LwS?^J~kdOGv{SF0v
zgXvfP#o6mV@qyg>T#fyqbk8`;z$FEMg}`kg@INyW<(fp$gpdsYA>)PwECWcVfMNz%
z-T}O>8z}k)TH~Y0wND^Q_j4(W4L-6v``%Z4<ij7h`<s8h;0hG<OA4m{Xk%&X!_Rr{
zwXgla>hs`^doo`z850nDj)D(4;kUol>%Qm5H*6YiJ@BwTcP)a)3mJS|(?FA1>}6YD
z@xBwgPd%Cbek8z1BK&UW!k3(}^8Fuh2XnRPMbh1NhJj}kfG`4f3gDWOK;4t@1Bl31
zixNTrVF36opxFd!o)jY`h_B59p)Fu^527~N4WoQWAUx=bWrf<Ge)5VxyL{cHZ&Sfw
zY`t_~NZ<~~yle!2am_W)`S!n5_c5!J%W_FXr5Z3RydAf7xqtbSJD)|u=W!8=1pj!#
z!jFprB!cdcUELpg{|nyx&R4$V8w>{f%`b!&e!)KT+%s2w^y}IF{+j(#xT~LG;LL&q
zkAMdw;5+j|%+#f5w4?}qi71Q}Akw!e00NJp;W1P_V9z|n*Q<b&mfY`Lj{4Dln57bA
zZOTn=E7sos@i+X-g<a2jIpy!1Co33;q)<vQBdV>BeB~#v9D6WlBc1k94SadDGyShO
zRj%6Kyz>SEe#DX@)Z=+PJ_^9J3ao4IUDLfj@Sk>J_o{x@GeFP(`t@>poq)^NtUhh<
zgEthqH#E#krQP-nj<dP|hcVn4XyH#bfQHWzv=|Rt3^D{4A>%S6Hvq^02wM_<4X8II
zstt)-XC=N?lcHD@nD1VN`r&?9b0Oq-!|i@rruLB!zTqp|GTYA*LL76>${KKno%Nv|
zKe?tnVwr7e)MU7GcadK=eE*fo*gyVqf4p6Q*8Qig9(+lv-Lu!8o#ih+`K&*sKu{NL
zepQWL3*SOd`)LDz|6qUbIbP}lVdgL7d`mA7NZ^Nc;0Ln;lQoHY3ut+g3y*>M;L>MW
z@FA2nhyn?63w{IeD?r@?S`8^~C`o*~33T-cjP<O7cVqz89D^8<_NMc@8Xx<!x8J(b
z+PX<uf>;US=ny{q=*M@Ae5EyGa;s*fui05YGS)h{XYtqno+<#DNLnQYw7Ji_WceGT
z_I6)p2E0Fc?-_smjQq(LNJ(JJ|7IRZF$CrM_NJcycgOO+7rE})0@;f>w>p5?P~v;D
z61U9?lo||mkD=8BB2Nn8OCbW#4arT?EoAC(=mV`9(5jHdVDM@XKbVu^Y7gjJ#j(G8
z6<UXv!!El#Itud{mkxUW-)sN)-Zr+Xo6b2YJV9#Zy<_k2_eT%0P|oGVO$VpG1~i1`
z3jAIw08^%4`AOL9J!fC^>8D-M?@GB=2(ixWzogUquP<KyqxYV7`BzWMp7^vpR&@US
z=`H5^>)YOW)d~G?T<4q^dd26$ET@5)ro_$Tz)%@zv=|y>)>}ZR6o5haTHv($MQj0N
z6yHc8THur(w#q<r9;h@Vyt>49<|S@u3G{Ae*wMEf;m{!LQkF-PCSLuD&E}t7`lk;&
z=*g1x(n_EOe55(N<G~$ybI<Tfd-vSv_m(Qh6Xkf!&t?S%``&TU(?9dpe>nAd#tG{^
zDbF)G&+sU`NpN;wXwF;i^xhK29^iP#2XDIk#<6R^xCp`Opl?O?ijSPR=A-XPZE<UT
zm%|;)ag=R|mI?R-x=}!;R=1>;Eo2Lz8>NFh0;j-F`VfW$#Q}l|^*mt`Trw$`4e%6T
z6al9V$YcN`!}!ZP8Mbg>^rr%6?wtYao&~t)3mEA?{?OHT{QJFs|MUp;Z~-V{3|rgJ
zdvV4suDxgchaV0_^D)QzA9pA?xflhr-F?-W7k&7O*PrzEQ(m+Tq1*JNh)l-!L&}2S
z;Soef_L$Llv(kQ;=XdYvM5Prp=`$#3N`&9(T==R}mjBgzoaJt9@MUnvEslx0L=XX?
zBZV;3>gEU;`FEj&t^z(O$kz)BzXO0#^e>qDchVRt$VF1waWEwx!u!EFhp2PH{iXPC
z2L9SkhR(A&Zf<nq?7a?*+?>tqu=c^%z3|Mjx%tn3|IjC1qduHgx|Dcu_9x#w_KL_~
zN+J7gnMhAa3!qXSDR55Lxo^DgYcKswYSTEv+O#KSQ@~Eytk?l*<{^(B1i!Bm?!B?i
z{oAX?zxe&JU02p|U^M;|<@dAZwiBPe>hn8_gIj7VFPCm*(7^tRM3|AncK~5gX_W*^
z0%lx<5L~T##^IASkb=xV)QV?HP9%J~Hw3sO<sb#H;+xIDGZIESU={#71z1_eU)9Nw
z@c?<1#2I^9aEdi>+ix5iujXI;$-nvIhiYH{=R{#2PvJfx6d*Bp1*<J}(csB%K6M~<
z{^=)J7j3^FXS(YnU$~5mtPA7eX86$m<lQU2w(p92%QybVA}+3lZ?oR^vsQj~x^M7e
zZ}2i{vdx^|KP3^QrHEW0vH-!AY}LhPf^n&YEWtvi{5(RrAapYMEKUQNVCrufNx=+&
zZpt<~RJ{clxqvq9609`iPMYDx9Y8P#bpH>qbtpp0Y9i}0@49^lvVZu^w{D*c@46>Z
zf?s7FSEko?aRYp)dSLRg<_kU!5s85go=;smu<=!Y@$N1Ew&t8UPr?+@U0L_?56phy
z8>8R8LZ292JY9C<NSP=1{QdpwSN+imUC#`|u5*}q*BDT>0O=BHCxtM9h%e;WT>Ug9
zY`xOS#FH}Uza?0(L<s^2GW&Ef)Pf}iu;QDom4N3NH;PgidB&{_fkePLIUqd?Ec;K1
zfgy&J6N&Du5q{$KAK8C<+nc%rjL!cufvU8T&NnjoxBu@4%G1@#op1Q$-(HYV%75pw
zfP^+hQkfO=&Ho&^?Q?(r_q*Oaf3Vw)BKY_2wE4B8JKw8cd+f?tRro)jUE6cTmcmJ)
zH?Upu2M<V5Z)kHaJwVg}!uAc1aqclLJyq-xQbqj|f@(J^>Zkl)Ki0|tdMrSS5nBUg
z5$Hy70x5~Fibg;a5LL#b8f6rOD*$)afzb|zoiF4#oQIh5IQC6T{=yS3<QFY_>-Q<?
z)l2Nyb*5_v0wR+5gZ{H$`rNnoWjAecR~yn)mxxf1-#G<HXjAG-3Gw3$S5NHtx3B(B
zYnSO|-P`wgdny<|s$WaO*XdN7b;kKy`rq?^GV86{nzMwx{|LieCC=Zy_|}k+H9*$2
zpk#xA(LE_ZjP%J+D}sW5X~hd|8C3L71>V>isK4nx7QVWVz`4)BJO)%r;iQl)DZCbN
zpaIm@0^_e?d@N#otS-$dPc|+;<+W!GI2XS17xe+qWpGfmFY7<^vX6Z1yswDPRkdwr
zb*_3|-^u3-p*t0Rr;$LV2$CT{Lwx@FhyQx^-WBcxll5DGrqnT$273&&<+gQSd0l?l
zU}NReggrXWab!y8?NI{|H7QUBSdD?#092(wBUXYI5VaKWqgQ)!Ppez4esTx;S}Wl%
zy{XIrFd_y+FmCvO(E^Ny6ub$+s-$dyXh`9OKsEw;PXQjjh+($DF;o_|$vYdDZFuW{
z8R*dXK#UY-jCSX*FMY!|uKU-wjQrO%FaFN*7oFovd8+MhTIPNDA1=A>qTbWaXRz4s
zd^Iq!1`n4W{N9T`eD7cVWca?nITk2kSebvtM+SQ@=51Snif`~e!&;DnO1UKD8iTAt
za1uIMg=q#pN5W!UrFyYBS3plF1*cW7QbS2rL6Buoraoevg^Uv(kYoi^OK>^38!)5<
zkdji^5nz#3Xab}JbPjeCxW5UkiX^r@S7LG#Fjr+bSP|j+u4nR<*=N2?{~G<fLIGw*
z{t2h8^19vj@mg5k%eiqckLDlb%g>#uT=PHA{qct{zWg@z?Ua!mXLs<#f~A(^4JK>L
zK4b99)s?4Q==tj-vsB_}Lg)FC>l|IVZXW<){7p%SpCC8yoD41oq=-nECgWsQ5lUfF
znI_T^KPdr^SGmpv7B7b504^A+`+=w~VW$DBLkhDUuzLX3O=%6${g?ub>S^$Edl;@r
z1ON0LKz>pPzZHcAE0w<Cz(;SmcI4g9TKd~)-JPC2?HQkX$L8x#d~rjBg(B?TQ|6%?
zO@8yi%<iin9{Z1P?)m9Qh4kg`0Vj}xL+uxJw5%_ZfqeV&?g0@vQcTV=L}b!U20`*_
zg3Bgg1q@lq)r$3l2)4_3gRWTxa8@y@@vBu$Hwpli(FufrWSoa&-WLNu9`pQE>sW>%
zm;gjmvH4IxEFgy%499?#14t39ZUL)b!WjSx-5d|JfDdH=UrH?R1rF@tW`U??x!w~r
z<%FQB<Pf;4cGpes`YfLRovquhPUmMTKlqQLc=y$JpS#aH_#i-t;bU_=0Th6OLv83(
zr!M(Q6(ysUO@}-U#t$D3z${Z`gpOn=Fu)3dpc#mA$rJOn3R<3TI@vblRu{n-DG<04
zY8>cM8ptDv*vAVlz!P(?Tt&j};W`VXE8}!94Bt2lZ@vP<VB9oJ*tP@Pbz#`9u=6Ij
ziU!OgLB$dF2Mn7E5iUHn%$FlAdiuE7_mepa8^zBN*f?<8^xhvoy!({7RZd6y+rD?l
z$-}{}o%HX&oPz#4p#X7*uKu6q!>BSa9rT!%E3J{EQ`hbI#{IAAT7BZ#g<M!~F&@dt
zuh*q0mjs`h_snX;w<QZ;a09ND_XD5vuqBW(n2zkVSve-SBTz_#LmB`|G6AK4#M6-A
zCNX|fKy5~#S&m>@E+7m9fk4m-g;%Y4l2u?#nWp8~rt3J|&08qA22R=7z}%#PbGI}+
zv1u%S_ZRQ`E=8P6n@*FGamcE{RX2L~hYbY7!9zO;8=%)bR>IfPIL;rhzd%b{3HKKs
z7IRQ^yHedf{l(tZgPr|b`#T0ss5hMF92moZ!OjsKxwX9Bu*}&?9e!9vfC>0GxUVI~
z?u?>Fae2qfpJ!&y4E^p9=`$Iu^$fLItN<#nmqG=6%Is^l5GPPbFwTWk7J!HxWb->Z
zG>9~NSYqhM4OpDRfCbyIMAj^uT+H)Kx*dj*LKtv}i1~&g{jMyqtQ{Cg0cULpv;T1Y
zXT1Nq{X@OLWcimBfgH5iAwm(M8a^I{BJ+5zZe7>MqH|S;YoyUr=*{;HuI*jEdGqph
z&sf{P>a4-Ofi1;MH|Hq84>RyuHd=u|tvns>JhX>jeb1-;vBr+qOFp|Vh$=@zIX@eU
z`GzEE(hr#vU*6n)+AHV5J%dS8B~qcJHO|!vr(B*g4DIs;MUYHAr~Eus1XV^vX{Zs`
z1B{duhHWd%!VnN$d2Wx5e{Fnd;?pn9xXXKs>6I6Dq&J+~*S7hDuEH`qZD$n6Y_fg?
z@BHf3H{N*Q%P%G2Gv!oB^E8KWsgPTkr!Y1?9{YNM`Dh7TukM)OxFB!x=v|p^XVt2e
zUF)`QTDIxgn^&zlYxUsDWu5s>m_`B3AdT6IfzdhXKX6F+<ys^fEhQgXn6_muM{jXm
z_@c8myI;KRuX9H#*WP~Y85q=(iG~>ZAxGntrj-uCm`PZo4gjT~Vh~0DD%c}s5L5@I
z)vtU%rH7m`(pCl9Pz4ag7dIUSW^foBa7`h)yBMFIDLqsd58PI7Jb<YNzNKn;!)@6V
z@9j(3#a@cs%dN>n0;8kJRiN|xc}kpCh6MWk-)aU=Km|yCK+N1(P~41_X3M(z3+ql?
z*SqQ5^~*M2yk_8pZ3ErQkVzF02?sTgVRR<+b_|KITo+WiqXlR(PVhK$$p)J?1JSkV
zk`U+a(0t9zTFbqQwtn!Rzk6?Oe!}~~m$l#*n<^vem6+KAHz;f*#xAFotOG%X_mkPz
zkw2pxQhhkI>5l^sJvat1xP+Bru+jiG7)(RJwj}Q^0EehP06JM+bkY&bT(u$QstphO
z7O#=TGJHi(%FN`2^jr0yTyCLK2O0r=-D1?Ucqq+FF6YvC;fbXH3!$4b=Pp(Z_7}IF
zxn}T`=Wbka@^ja%KB2w4*aOE+q3Hp0rO4km8TsW3&<a|njOgmYWDF*!%A2Wj`gk%2
zfi_IFSX11rJ7;MHGF1Jholf`Fwy$~jm#*8r>-v^FGND<)`iNv>UK%YJmR`M-cqKyC
z!Y50hxdGbmD<7p4KnXLBSLm@tWnd}*IpC(lglTZNw#16g5JQ=e&P<h^7q3TBzo3=Q
z&}}{aSr=}6%|D;L;ml1PIR}Q}p%KhtzCKl&ZBFbtGJWK(!xO_hj?RugI9;1OQo(FV
zq7sm@|J>D%tpy#&1d)%A0%+k|yv^ygFMh*$XT9YAZrQSJptCpt$96#!k6I<D?HdJ}
z^%f5UX%b%&lDVpvjsP55@5K8f%sXD?6nv?s$haIQDH@Jz2L$#IPY}#REohj1J!kk^
z=ihzpy<>lV3gD4Q)#V5yuSOC!9l$W+R4&N?1o?ao@2aSugf8Sl1(06H6aR1O6pgDG
zfT@(gvKdcVOl(-|Vb?yNK;<Pz!c>aDP_R$zxZ)Ep*#1Xv>gyUn6o!p?Uy76s<g@Gf
zvTl}dFGgo(vcZ|$YM>F#V5T~a@wutWk)y+RKRk5c=6xf>caP4D?4EDUOxG~ikTO`v
zk$#y{{5A?<{^nh`DQipDUp@4W_q=sYzTFnnhr`CqtQ6HslScteM9fvErvy%U6&6>s
z(1KUORrj&Lb$q0ifSw~oiL*hHjc&f6RnE;;<a--dzI5C8{QZA(wE6kJOwt%BgE~wf
zMoQ@lly$*^uvN-u#4DdmscB$H*hU%@r?`L<hF~!mE?|%{+2E!D6jKcA)>mNPK;hxi
ztD-BHCVKMcta#sj=WTt>nuy8LfvLJ{GsAW*2FGHUZAKzhX1+54;hMHc+m6U(+fc}?
zHBTEr{=99$`BtiVzR#*CH)k<1H;sdbkL=pB@6fFW4jj5=XngpA;qvgIdCb<N43ANY
z--bi*Yb!wVB^}QB|7YE@SFCC46LW_j_Ohi>W>c(fN<($ps>L1Ys+%MsD}$-LvJ#@E
zUQxUi*X~vQQ%j#w^^_heEQl*=ml~cBQ*}uF{3x_dGg~=n?c1*`@4o-*wP=R|Pa@%Y
zk>M%A2281yfaFR+pu&wQ0F<NziXo&{Ka)aL>r{PK#R4jJFo_dL(TD?><WdZV<((mx
zucex>C4O!Q1qQpGzUuFGp0Vj=eKQTO0<g5nZLWTgq?Q*0CIb)E^^rUj5}q$nnwOX;
z0rnX8Ic$+ixgwh>gqiGebD%RaH=iT6yyQ9l7FhK+RqG{;PfXz8fdhLU+_nFw5A5D^
z!|ve&cN_|ak49)d;;zzPTLF?NwLP`*qDmzc_ucBJdpk3n8A51Z9ltIXx)MCCc#7tg
z1t1~O$|wIGD?kGM3a+AUas{+<xglvuaW1&R`lXa)Fu3Atag+OD%PtnzdmH-R`I8-^
z?;40$$&&>A^ALpDDEm)QWNf!c_(n({3&CmNM`Bi_F3~CRlhUc^U&3%0%(SL}nJ$HM
z92-`8Fmf$KwD{tHjeduP{?4;keB|)fHJ7<F)n<b+!{ywh(QryZD1H$ZgRseA302IZ
zDi2u|3WRJ6@aeGu-iidT*Q9CGBbd`1_Fluc3@c1!(juGfLPv3(z2>ZQPPpvS)(O&W
zzIkST3P1SDEhGQ<l`mYjzj4?7kHixE1{OeTdm|WoC=BObuwzG6Jnym%unfTkb=%NC
z#)2n{KyF)GTQcWL@FI#LP63{dg0)&{w0&`cAJMT4$^yuHnBbzygzwSPp*PY!y~pH%
z2>ew8&u^bD-TBYMwNJf4#rj4F!(}|Q1h^S16A4*i{Zi?Kq0Vk0@Z)rTN+V(_7^49p
z4mcHn+_ZKBDF$pDsK>=q(k?P{L{nSVc~al|cCA}+nK|dRJTACNL!xvUk0YYT<Vw;M
zhf3kob@KJd8IuB4VldNJ({CmSnyQTkqvyHFfzXmL4QAJ?RAH1b#~I8$%(t9Wm}_&z
zzzKQ0>Hn=*RzB2!-(TPGmd=(OpZ!gh;MXn(Cm%Z1yy-K|@Bp7bTE%^LkD;yCjB)%V
zr(yAhRl#5E`_+LcqFbbJuSjV8D-<Cj`a2X5bR*XR#z~NN4shBT=ME*~Bpv!lx|tLY
zxQ3akov`xlug@AMZ;eo`30mg)c-5w%E;3zM&d3cY8n})L$keO!53xd!P+~#Y6#Qu@
zm_CPF4828x<?RCSENV8j=?opCD|br&-|gSD=G8s5z!#z5b_4^Vq!NRnq)UY(w@nQu
zRL!R?Pa+5zd><e(Ny}%vscwL}wWuLQqTxf(<7!KaN<#|zyAcxoK#C><uM269PDuCY
zVaxsQzm`j5^Ic(2X2WU8Qaw(50Bx>YV&v$7sjs|`b3c9W?FapdnF@+MCJ8R-jnYA#
zvh-32qGQK`mm(4i0v7@yDFgi*DTgFw5C}sl0>Z{Dz%Bx*4j|P<KACfAaY)06Z#H}p
z+U>>l{_5U8`GL*Wo*FRULyDUuM2D;hMe<AvT1~WWN%+bNs2)U(_^Du#9@A^+^=WWg
z^(vLLwGs>zsdQ`uz71*cX#?HaEnV-uXWgoo6q{ko3z=a?FcC77N3?b=1~bp#c2db$
zih5HBTE!%EF92F0loC+mN+VVTPbq~|sWS<`Nu5b8h9*6yUQ1n0pf)#Ar3oh)10xj=
z|NX-e^GJ2ttoRcLe<R8N<_eG;3{&2B|88{lnmx8<*w_E)!7wy@q_c#HCxHNonov>g
z^GN}eu$AzWzhl9Z(A7PSSd$0?srYtYO)+qhA7scb*GfQX8FRGch%Y3$#alAutCn51
ztUL39Yg@8Tui>10I0?~`TCj}#Z5$LXxfv=TV4NGA0ycUdH_}X70Y@u9Iww(VW2i(a
zE?Zm#VP@Ov{JZX4xB7MKTS5{c$fOld=OZ|WB-c{_++GR0O>+mUrC9jXdPcvGZXsC%
zh*qGV_kD0LU}yyl%>ZZyQncv#h-rnPlDA;$wUT~N7WnV~c`$5v&FsP18*eH3`wnXB
zD~=})psj#}9}U+&e{Mdta>5Q)de`6Zp!w`)oQh^WLO@+O6!1mhp(Id8>Xj|EkSUte
zaex}k8rNZ!(*WaS2{<SE6>;zCWr^NZTv(kF(g6<+G2WV!1S7yE^UN(3B&MY4FYCO(
z_AvpOmV&twPD)Y)FAOt|D+p^KzZBQ~lj<L%X@CafNjDHNe(AGqM^6sP7d7dl9NAn(
zo&X=*vTnsW6#M&r<eQwdg}`OPGAZ*Y0I6j_x|dqaB&u_ON67<qtWqSaf3*${Rg6N{
zicm3fS#)gxlbjM)NsBNkbv2~=9TeJ708<<^@Qv@@FDA$5L`xhJd*{FM0v%?v$HD?=
zMvE`UCJ)U1+jGIH*{RWa?~eQSBHwON#Lq)PEF5hCl=(+u=JmbG1VZf|l#8Hiqm(1g
z7D8<WN@Eh`$%q#Qf&Og_U0Z<SO3w3xCO0xbrB=n!(Zkq1w3Cm{4huopukzhY3D8oj
zn8BjF-jLeI>xg^du|a=Z+SHr0`icERia=Jt2HdPf%aW){6FzC7)$YS>^QFr;cTEWD
zcjS!I%4c~XwUQyXo&hO{$}B{!LS~<FUoaj<)WJjxLf>dr2gGYo&olTT=RwH0ehvr%
za6gdn<G;xw6bDTF=+=GMy>HByyprBE_3!8Vn3#Q}mBdF_3(&|-CA#bC{nP*Xfpy()
zx^nkJ2Wpvg)?L*#fa&p23zCFSXkHX)vmdYg1fkUll?ILIb@T-JXL8Ug8nz5HCxFJZ
z;HyuBn(8$^3Jf2rWA5lAyvj60SXXdzBq@({6o5m*v~8Wn84e**`j_e$KIRF~!L_ef
z4IpU-MuB5mQYN9W0Lzvt4k40JO>p>Bp$rW^TOS2WwIQ9!Af2K}lTh&pRu@C@1R&c6
zOx;h)D|J&U6)c6I@8yP+BAF_xvLQ)~HL`u$O(kcht_iJt$zU_aTcJSjatrtGJ&L>U
zKj>vrX7-_@U;MMG*zwb(dFF8`2haIe|JCSR-$lKJ=bn1^y?1-*vomHoQ$%^*S1X=`
zu2;7Pel$mee7NM4-)ngrFf9vi$^}<}9$^L{=BFDN84Gb_+(lj3aF#Qm8xSc2Mm7yw
zbc(2vQJk=lTk5Jg84cjLmK3QJ35IfTsaw6&52j`e-MA?^IHjD7&_gQxWXNhTWjRQJ
zEC+(8wKbw7upwOD3<Zu%-;J4i8ir9ow$P3Co*s1cWU%Z+pmQ0}7~yD4k+qL$=%I>-
zIa3QDp(+u#kup@lX=EMMK;mRugbI<+I05HOS%J=O3kSw#@S_`d_!-B^4o!XaD^tNW
zANg%L1iys>B=JBXCYoPA&o(*^=QG>Vx7_tp@$^$K;+Acr)uir>Mbl6BdbW-U$FX7B
zHn&V$VFrHSVZJhka&;c{W(}V2gIfBGbRHS67s0jdIQ5kV)@%oA(~bz5?GS+jNu3%Z
z05_<@<iSmm0!Wdy7&0yp*b)(~aOw^wWut{+=oQFKu3QGxjaEKc4W@j*YXH8(I7RW~
zn(7>=5yO}}V5DWXiI(A`B`fe`8(1oXuB=39h~en<K6oWm>|q-gEZ5>pSSmn^!iYy<
zq*gyc)T)xfi3+Fajyg3}g$#v?a^Xv~wVRl1lyU8icZRNQrbp+lzGI~EmCF+uJWdL*
zs05*$tB%#bbgE^%<q&wbapwcq*=KIP47`;>5P1q-wP~eM0~|M0OwbDJn6HeZQlCJz
zIfZ7cf*=ZD5ctkBFn9r+=M{7tH3O7K0zCX<juT%B44f``Y1}~QX9YpClIAnIHVjtb
zYV|ryjevCtwI@73Ma`jvCM!5m!_9Qz3@ONcAO+58wcApye%EB&<v_!f5UIEmNH9)=
zTqEXynQ1UL1<TFCY3oDB2?Z=ai(Ug9xRIDdB?OgW$VLSucGqx_aoUhewZpLsNT<@I
zKQUac35(<+mBo;Z>QLH31p>LOg=*BqH8<ZLG9H;z<-4a2Rsa220^Xy-AbJ!SL0Sns
zapdsP>X)9~pMT|bM`tFyYwj2~Ph4>-WejNed3d3TN_85oXbypxMl%>iC>lyB7$f1O
zVVDINbb*N$Ac+L3VdBUaqScJ}#BLyc2e9%ShUt?ee2-8@7g5uJ8CYOUh;&LSTDN0p
zGY)DTrQShDFBZiIP!~83fgR-@1gFX$0Z2p!wE&0W0|FjXj7JK@p|%w|r3|<$VWhJ#
z3hl@)&!hiTAk!gn;D=ny4117KolA;)&_c_fMmekkWly^(qlmQKiCnr9*;FrbZYMHM
z7N+H>aZ|)((qa|J<t&)#09W67i}0f+THX*2mp*q=gj(~r@%xXm0xV_*wP@FmM(4l#
zmQ}qMeCqN`wlz-MFkq9v^JEQ&hR3jPVwCUPe?S}@nM9>ZrCuAhokGSjVcL$e4#d9G
zhEeb5LynrTI$DJ^#A)O%Aio+|aVA4`mIgdX5mq^(mJP$sfc!qKF2`g@lW-j%Bqg9C
zuF1GT=10{Sb=6Q(Y@llYlClM!A`F2t0|J~WvUemR69_obw@5-+7-<t`t_Zg$hn|xe
z`Zw$In%E@}wG?b81o<yj&>&<<C_1u`bu`1nsJ3=vywn1RgOt^UjMI&r+lxYW8M5h4
zI93*E%SL^sj0X?igNCSzpmo$eJpbtpEsT#Rol}p-@hB-kazd`Tdf@D*zv6lC4BcFT
z-!j7Cm_V@r^se53Ehj--epw5iKZm2!6WF=?Fm~)6#{S_7=1O%H2&K~*q+AP@NkN^V
zgC@F|5u*_<Xw3pcw*i}90Q8>D(3mISK#IuYu-!Cw9I48$DGMUw=pqbH>8T(fgpr0v
zNXq}0bO94yPsk&!e3P0|ROGFEvFbWDh`|fANYAY_tZYh{ooN&|Fuw9MpgawX+zEsY
z8cd;zVd_5xhpPfZQbV8|#DJwp3mie%M5(z4WAi)IJi`p{!1AtcY~QpAC#+AQ#XL+m
zC&PR09&zXSwa;vbp?#0m%6}9UU}0_#-`e-i?>+y*_g*|#H@)$>z_chcW5DzbaLAU5
zWRcI9=qmQ1v(Sf2&OI5gd`=6^U>-*%kK+D4leqVx5)K}&VSb)I(L^f4k)~1^d2MR$
z^cX5b5{K^xmXj4Yg=6kM$*F_ac5KDmN!g4Pk7pc-Fvj*NkW*fTn88$cq)bB+XcU)z
zDeAW%Y?E=DfTks_;sh8)9Gnz@IWFvWhTKYqW!p)UfP*&y{=Du)j*A(Zr9u@!Ds!vK
z6IU&2tw^HLXd)!k+P1K)vmaa5bl~(;`*8A>c5K{GKwDQDDstr=2n`co_|h%-%lF;T
zr1r;0dz$!fPYP8hWU_UgZ~4qc=U#bn!{fD<7rLftYCVk$FS4a7d??ifswIIDLhBqL
zlQz(n>BV42FD`!$@TNbgVZJ(#-3MoI$Idc#?47{)REV%@BURKUo{+-XJrRm4C6=Gc
z5LB2VRXbT?B|`1>K?+0lfD}ddfu0%?(c+<*0-Cu6(*&0`gh`+d-J23Nr`0djg;6YV
zdc6rA8W6seoaYSW+QA1-f++M#vHupv>qleiIrXB^5JDwyhR~-8Wi7O#8bnk^+6b_s
zD~~PP2XNZ@EVgg$!G?A1NEN7toq|7aqcUdW$b%M0Gp($Fv@7`)Z+M>HUhKH*jqm)U
z6X)dv5B#dZ6OWMsB*K?iQF!e~FL~zQzTR)yl|~~<8_b}2Je+(e1yagJ@OT18zz}%g
zL5(4xTDU7w%le8uy=xdKrqk%lWpUDqWw_v^7D8FVk?9h43?0Q?yC$)3G>`H`0d6{j
z!+SYSI1lJPMIb0iq#Yn_FxW)or1;K~2xxVC8gYvhx}v9rsHnwKOPwnQunBd(<g)0!
zs(3`mqADROz=#tD?{rAC4FEms8J|8VMQNXe5t(Z0Sm=jn)>`n&Ww3A_`OF;FZfN0z
zVmG!AEW>Hr+pw}b1-p;|A{TR01`h4CQEs^KLvjnII;WTu0oEXQ#Cc&P5SN{EYNPtT
zf86=U@B8DGH9UOe(Ncm(tN@zMEYO#J>ARkN*5AC-58O(lCelpOd?rZ@Uj#k{QaZ9$
z=2TBVP?RjyogFgnHyO;T247NHDvAiqdjbbb5*folr`v_W_Ab2mtPrnxb`>*?3U(hI
z$BrQjJ9im4QqQCFnOPK0F~Mg5(-zdptE+y7ZuBHGPauTi{e>jR#flJ%>0@M_Ncc29
zo{+jEL{RLc__a+T;SK`X6B)cF$Jl<(n-!ooLbLy?$gxSRUp<dgwploJ`wDE@v<(Bx
zb2JtY*we!BJsuw1V`6H~LOn8xz@P`qDJc+W6se&WJWx(UP$rUg!Rr>|{&yr^bLrXM
z^vwJ2`OANK*V+(c<wrva9-#un6T7U7Uv=RbfB#W#v{$O-Fr5s9QVK#X8BmkD5Yft^
zV9O*b79pPr2~!He2qULPOd8h;7-gNuyBQ$N0UiXVr-8jw2HKrA^k&;|dS8eOHhJ(w
z1&5}macKV}4%8eR@pEuy^Kkks72DAm7g-~g1x5Lc`%)K@5-uPT7Em0g5hS1#K$mwE
zW}qg;kVPTDu?;X!0IKzXPu)}#VyJ{oZVOw_m)N$^z~(L87#vswWKufdq#n<PW}yZf
zQn>p^DU6RWRc8o&p@vq(qwI((MztYW3I>NDR<q)@3n*xM9+rLJdr|oAmtE36Hd(p%
z<KKACCW*5D+bY2$Xbsa*XwEqO?2EU5`j%p0bFJ2Bxyg2EDn6mCN4-=#0P@EMnPv*K
z=qf8Pn6S~<C=eA)O^}IQ1`#u<&71Q16qGV#iwtf`!Zsuv!B8+6y4o1}`$Ob<eZa0`
zcCLY=qfJaTIGmN85bN@2WNkG)#Gj=;KZWF|AUcVo7+EKk3QEfGkm_LQC>kgN7y@wn
zI8ffx0-NxWZ!|DJ?_+J&z{VbqjcY9o4yJ*eqkSCV#ePg|k;ML@0uNBH1Ffb+c@DVx
z^BNvjjj1YhR?Q0{DO(du$c_tEqztYJq!hHxxMN84r={Qf%x3!4fA)`8ednGJzmTyY
zW{b<mLIJe!9jsmX>{C8>sK58DMyb>=4I<9Rr;xC0Rr*G%X>d*^HQ7_oqRJcjxCP;>
zf*K*Y@oS_|K9E9b1;(ht5Vssj?cYiX$W>%XSmg6LL*Ae^Y>CbRiBw+`g4Z!O<6~;L
zilZf9rmGXiiXu7+E*i4}UXxBMW++q8moXG`hbDnhO(4~1p>(8ydmb!f`e6?%BMVzk
z%VWcO3;lgAtUQe*Gsrwqfk4d~CXRW;7`%v~M#8QD)dtXPP%VL>)dC6y;QsFlObyfi
z1PYGUWEHYL32%Yxo(5%&Xwk&Llp0n+1QiCX>Vju(n#;c6kN^5(cOCh+KOv-5Yk@qT
z3Xsski<xuQeEjgn4X@0WN_CPh0bGJ=>PdA^)d;BiMV5esuPHYaQz;>nzEE6{m|kM-
zC<P$jtN6ol1g=_p;>TQ<bIF2`38k7n`Nwn?NN0dtigxV)il#(Iw?x}A3EmYTLKD;b
zXK?$qEsS-wW8Jd{z#{{JCt#&HsLEDuc$l3jqdw+Aj5W|!1D2;!Sl!`ZO;-wb%0Vfx
z5u9kCYZVYo>8h3%IMj%F5;oy;wAxAN#A=F?ar9((C`(B(coPykuhCYGVxfeJrog9I
z5lF~pYz^r5l0~4Rqr(|@DOQBU#+9-$oEgc#@LlhC#YpYyuWBU_$4dbce9~ZBy8iF=
zPdoXq&a2j2o@6w1V{wSdLU}i_1hE1n8G|NaaJ8z5h@*Zq(XeRMFSvqaGer%>YHOg&
zPKw`0jhYmx$H0wE1WKDBosl4A$mM}TiXj7u_Ow9HmL~SxTE|1Tc=-HJ9spktyyIgR
zD&*(z-BSpT*5Qv;vAp17^V)W-XivkXa-uXbUgg+7CU9t)Q6C_YQt-OBGeiL+z8<P|
zpi-BL@ZtMRfjK1TFwg}gg*_zqs^-HuDe8USlJKceWX1}hSG^({YqoHFQ_nLMm#AG$
z48|2qO@VDFux%6bu04EL_KJ_Zc|%h^wC|Cyf`5GlfJBdb**h;f<Fg-&kgbKnceU0n
z0VkHWOT{igt>>8kuiLLxbB3C)uGq08P~{fXPzPdF#Z$y$1yG6;vuI)hhXz-4c0nf6
zrtHboqz`2oazMTv*s#^aU7tUSyKXvw8!Fc$m0OLTbSHBCKBns-!jUZA`l2&&*^Bck
z&#R0_7&<I*Xj)>T!7$f?n*5tE-O4i(&%8)t)9D5#CnP+NRypw<w2&jB!K+oT%HJYk
zL@TCr+~JffFn;tdfze$OG;orvfMIZ|g2xK3gF#XRmCn-dq+Uge2RP#@O*N%(EO1ju
zvGpWFeBfJOs(tL5cP$4>G`;9Ias}qEZ~D7BPFnM}k6Bi+)@oF3ZrO2T$D+<HboL~(
z@W{gw_8#x2LL<NuEv2qq)vc}CzZfSr4+VG%RMuS^G4Dh_xAai1gSLAiqJ{1!6x4G_
zmVo*IeVX7oVB(hVP2i5Z=5b5un+WX9c+PWPix*x9tZVad?>!QK_g^>T%1?g}zV$+E
z-I~Q6JArxf*OIHoji4n}4S}|mAvTZn7<SwtuzaILqoxKvAq*AyRVjhuohqR(c0(mS
z5(#=o)}pwKVPrQEV~H0*B9GUM;?XnErn0(;hB#rmXO8IY$;2SlE*COd0DR9wGJMmy
zFX_B#$E_c^cj9w@^qV4uzmgJ`82IkgGhR11aF(E+eS?;4GEybE{j8J{-%ngQ+9W_7
zF&CSI6B#4v4x(EaYIZEqo`_PWIE692Oc6{qsYd%$5=Pv86cVr$677n3_dvY@<T^}D
zO_uQeZyv_OmD@4VtfRN>bQ~QEanFp8{aF`3+-sugw@~4?<G;VPPgw+EQ(y@AWr^0D
z-Z#Ln1HKohs0LI3H+F~y3utC9bvH+9{t#1w)WMjh#%t5Bn_e0DJc5%wVmmXqc_N5X
zwh%L<DQlp<5&Ap<P82Z8AX>iK=ZMo|x)E8lK@@UDCS{nf3A<Ug8!tNPHE-kS>P)`>
zQB!~<$L!3U`l56?L+voOWI9w+|IzLqvGnzpFWTQPHVcpfFAj}Z9Gs~b5W4SgVb2}K
zf8!J}Qwt`oDiXft7!tu$|4n)G!oEL3PYMr0qED+<RHQNyuKN0Z%y>tzd*(V6v+H0x
zIn?I^cqIeZekZ~$H|-a-@(fLy!oIP)aK~*k=<nrdRwM#XDupDnrb2hs_vn=!1ssQV
z3svJG%b=lu9FqklBVM#}YbDnT9A_Q|L%xTh<wuGvOAP72j}U}H-xP09D}NYj;S-%)
z(ZhrI76LV2s=#xyEJZ%QMdaB@7c5=0kBS1s2WxsYr(UaxwjKu-0px_M$;FawQZ-pv
z`AYK>4(u@>rBQ%bF$gnE!Uy%d+EhX-K%kUBuSyyip~k||s*e>z2_?SBLNFfqlJ~AM
z@sl6z!`RVzj5cpp(PGN!Qw(CFd(nILKGXtZO~pl!(nf{vz)iP~A`E<0KTxo7LQ+*X
zvNog?x^Z-LhyuY_u(5exd~F;LQ1y3#0;fJhM3HK76J$BkUAnu7z9$e7f+$2l)cHgK
zBt0+T$2**Q3R9A_@~M%8S6c$jh=b)URP(^SLsTVhE%xU;$}xZ}`@6m~GPLic_P(A*
zv7?yH@f5s<K&z!Yd=~vc90)9N5vuJw<^nDZK!{U9-CTX_k^F#=gio-ps?X~bLPZ>u
zHIT2=-A96oth91^1}yA9IEnl39Yza#G35=REqfv?Bd0h8lsVL^9MuvnX<sRxX{OPL
z4q|v}4{p6>CDyFz#`Lr*9H^c|b-s&?ZlY)N(hS4gq=1t*)Q%*2LW(|T9r<f|_tM!J
zOFR3C<Cp2=ioEKFk?Nw>)`Px|hGXc;A;m&^mbIE|paMb1F<_*)g177NaA0aWJa}sf
zdyf2+H{_n{j=h49iUR0k&cES9M`kv@!EZf(V0>((*49}x+q=5WLbj+(VXF}#2uSTU
z<wjuxWD@AHE(;zLCoGt$B`zzDDHs0MS6{PuDc~YSqNtcIk^)#&Q<qdRLN;fBx`S`{
z$pdPP=aI?{aGX3$BM*yuv=jrBsm>cRw}N)_loWOAHlV7!A3Gk{isdVda9k69O$TtQ
zW}%u$7y9r;;4?mUFvNy43^W@$D2?K%pW@|&5})+E|13~P!nHCSnGS~8qamm#LHiN1
zh~#A>b<I>0DNR62S#W7^s3lMhYdADLC#L7;!_v$=nzbO^@JDd8`K1^6a_TpxhyNN1
zpnr%!)jL@E?1ow}_V0a}3ttxb1DKwg@lzSw@95~X3x!Ue&Sh0qtl5ZYa3d84v`a|3
zLG^ZE3){ve7y@yA;sHu(Rnp%SR4o{kB(f&7EonZ|oW3}&6v(z)xcQcy@Tv{W_&1})
zDkzwnU>I3g)agkP7}3Xx*r}-LYAhHSx0QvcwT3W0^DrLX(}U&9`cbKd3qD<20Of8J
z+CoDl#)bvfo)&K&sa!-d16g4oG4FQ~6<t*PIOvU_TI!}oh&rYz;*9Fmq^PC|+p&nC
z$_0E;YR+J0WLnJ5O^5Xc&0&aK83lGACQxcUbjwupM{lV|2X;LYj^M9p0kjfCn6HmD
zzxeVw@8-YmaL@SDj`Y)C&w_RKNV$#?Hq=OGbLi^sF>|?2p2??G^xX0U0vRflQ04c@
zWmsYjBt^)|NNZb>%nM%V7>>P*nxCkKOX&BLHc?Y)XP<@rhlX+Jz$gS8!L<J%T&GJ3
z-{h_`^E6A)Fu95=)J%YQB#6OmaONOn0m{+6c=+M9=<V--<65XE13QU061xF<uVFxx
zXF0FVN3hct{FWYesdD}WH>a=+y$eaKL<<@~Zomf$y;OttRjg!LE>bBArWvBqs$rxw
zgWBjED&-35^%~6?usPF0ulxJ&oo_w-xk|9-d%m0)TLQrUM#BFM6kt&a=-!iu_Z@8>
ze#3b4+V>RfZI^bq+pjD*+cqKW#!#sY!x{3k`8;oH>qc9#1C~Yc0`1O8&7VSDD8+e>
zoxd9277xfIR;;q4Nv$9bYv}SWQ3Q1=ln$md2I@fr_uc(~n#D6(y$PnBf@Nl5((1P|
zuuNAWkn}#4J;Ys9Jf{567SfiPK`lIh+42w$9_qugfn})Hsi`<tI%NU0C8J_h;4@5*
zMi@N7Qi19MO<o73)cm1bl*R_)Sc3cq%_>j`r-a+dk;<eHh8`;Z1jb5Js8%beRVxVn
z7J{fw%>)pbKqc7sy?Suui#31WjlQJ%=u&Ava(3_|=nY)_LV;3w-oNR~^ZqSgaoDnz
zIcxK)i_S@JE68o#v&~XCH#Gytb&xG&QB=y%rG!BnG*SSmhax3Ol-32hxCutCA>d<w
zWIWDAD~SPQ+Bj~x`F=#ck7@4?v{(r#qcdLpS(s){(R!2_j{z3yPe|s{FlNDE7EB|9
zW>`fz+<`-fR-m`93zlVr_5{-zO+3*=J=WOP#7Km}4e^)@#<+;V_yqo5GA>VT5Td7z
zDC(K|9Iq;H@aXL*&CDPYK1A4rWG(p79DFf>?z9uyGIZ~p{?@vdIC|h%Su6nXk4Im?
z&)72v(UM1oTK<v0nengxV0ZKR*S2NWJyXE-Gtq!aO&oKRv#^{4$Q27{Z|_FF&;i>@
zspd|<NfkBSHkQ-?lEG0+@dI^X^*A{tghHo<ef#!fa%>zSKZ05RA;r6=X>+vtX_BX9
zWK<(c0$J+`U*vTa{y=mDFz$jyCMT;=4If6Sd<sU6_F<rRCA?|HBZ*y896!(i6N{lV
zO>i&`qcBv^rvd61`HNf6sl|+926`^^fJQ~aD@in}0_luEy*`FgZ7&3$MJQVkXu>s9
zNV|DFd(BpEU=BA;R>ppI8=XgMsN|#27?K=`m|6ihgWYR7pLgED((Pi#+W`Y6T(gL@
z7(~!&!~E1VOxr@XkVAV%4~oT3nlPv?knd4FJyMom)eaWY0zJ=-5<%)c&v#fTS4(*4
zft}!H6XVsJ)l6S%EHTZzpy=N)(wrM9L34Uk!I{X#iVL74e5m1sltkJ}NjOiTg&Hd1
z4jdWkM`w38Ow&cn7gV<pl3?$6rVzO+uMXZQ2S^u50pd9WRNNwt0Zso1<DE#$0<Ah_
zA2A;>-X51Y>a(reP>JSXn+_Z!hm_fYter!OXE4}q!p_++Z*_R6cBy#u1b-Yx#V%R}
z>XWt&2RVB=ETaQnG>>{PflA{}nz)O!)de@|h2JD)n1N+G$Q1G@ws)bUtrMvfaps^}
z%|k*#VmCpt1A!!My#~_R5V!o`PB0!}s(vd1R)x(A!lYGC4JJmGbM6Y$OvM42_A}IZ
ztgK6Xri{hHXD&DkNO@2W_8?u}fP+H?oUmpqT9Xl_XDU=tdle9TN9PpUs7wJJgEUiK
zulg44KRhSVs%i*X?N}1mFVyTKHRVRe1F<4*8ChggHXJLZ_yDe%M%u}tO*q(mQV*XN
z4Qj4AZo9}FhiTzDk)z1lG%WCll%W6;OeFf$pyyIF1sNQH#av{}9=K5-0>2&e(^EKN
z7|0d#Xz%Pods{cM9eHg8h@RyDy{mw(KH$rrxgF)o6nq>(Dcld+$*Y{+;8_@)qW%m_
zGo$=FA$|!s5sx6#K`0C^C<fpzgh8VWiN_`3MN=q8_hIx<8#>xMQS9hLr4;EwR?MW~
z5uBJr)k+nkV<il1>c`BmgxAnJ0j(HP=asT0e%~-v$h(BjoeU+^$dbu2njc}fu(^W_
zHOg3NtjgF}zs14i!-TmKGVml&fF-eLWLsG{R-2mi)C%f~9woVeZRV76NExWsuyQbs
zIsc%VIhrPA-~%X46;Ym<$B1<V>1-OgVjJ4pi|AYKV0J#jRo~o+sqry@&11ZJD{Qv_
zgWD>QGY$Iu91J5Plmbu&U}(OPGN3B{O9DVcn__N*3+haAAY=&JYD2ws7@6=O9^5Ih
zdi{y$?&?<=45ehX>I~+~qnMeRz`9gFrVcGbZJw+L4Sz~7Kh+!(Z~L+|nx*g6pcs{~
z9V?H>r%B|tx(0OX%cild+Y%`jnL&f<lE-ge?4zmxi)TqD*HD5^nHDTN1JAF)k7@{6
zQ|;#_L392IgvqGQdz3On^C$&JVZuPl>_l1)Ae?VUd2R+{M{Ml8*QbpkVA&odMlo5x
z6Q+|=xjvbDBNjgSf73|A;u%!~U{Z~Pre<8_0u(x@$C83v04HuZbHSJo#)+#-<c|o`
z-i<1K+_T%mVHz36LbL)8t)N8Hl2B?K!hpXS27gvO;Y3#fDLzn{Y{DpBa(z@FO0f(P
zK-Cb*G$ND3HEk4}3<mQVtZ%d67$L%%;9(>32)D$O$pX-9Zo@EW<*6sg6=aMwTv>o0
zHQ@U-grZ5q9l_Mj&OR*ez%p|X!dJ>riz+BL#^N@u99*NQ%(^gYD0?%gMPuL&we^}R
z=AhM2?<WgDuQPZGCiQ#A{BK>kB*`R`&2_g94I^N%sEtGcLIw*FG2#rSRcG;3>n5al
z4=lf^5?{e;@WqUpFJB2~;72ReZ;$6ZCx;?P#|@6^P!Lg)*+h~XCKHPN1PfW$MrS&Q
zu8fQJxFxAY>1N=d(TIqZ@Z_)n$)QF#QSUv)0BUq7ZIwmA6LkSw$fk2j_|zgEgmpww
z6Ojy*57w*DQSdD7@=RNQ2eOG)G=V5+L6X7{k<;o?rj!nYJ4*1DQQ($A?jS8JBMrlH
zX$(}{53G|k<pNZtj-;>W`B6i*p|*!ksedF_r6z}x&v#8U!wEFyxUO?Z;zQUlOb3>q
zM=I5+dHwWh3)=!Dl`y4rl(z`e;%HPto^mW?vKBQFa$++TQXO!aiM(wp=1(#p+owul
z%cA~+#gXVwo-Jbxig#7yEdz#PM+#@3JBUiv!@<2X7#*%5XmYq#8Y!nuHA(tm9bwo&
zMEkl+5_A9of=PXtG!o0~)XypRp?7`I`~%txjQoF&o1EIqv#^XbH|>mio>BUzB5qxI
zq~Q#ViG?xaOl1O;1yBGPD(hg7!YbCVewj_tr^4%L)E(^ssIe$clSwUG3qGDat>YX@
zMZp6<P&@_O;WRiKKm5_B;o1e9e(H0uabqtgCK{?~#5QS)z~by=N>!UQ9jt1gUL|J2
zLR|5r*)xbr-*KUYqo*f_wvIHYKCo<MJLYF<IIw>fhYprdD|66bKgZ4^5>5C4L7)w#
z1d(VF#1tz63CE{l)$yQzZN`-g;1*1Z`c(!%rk}>Qq+_y5?1*E&nudXse41(ZAc@;*
zgULv-l9eb3|Do(b5@$e<99IgU8XfibS_Z{AjvjZfFbjc{Yh&NugUYR~U%yeYf9YGU
zzWUpknA#27Oylb74&%WcTXnu~*fGATcS?<7W{}S~yoQZ>gZ4&!lDPoAT2wGVTA*x!
zqI|Ui(74oWE{!wJ%3|BeeHb}X#=bqXm>O#!5-GS&1}-Zij9SVvgybFs1&-t*D5*{?
zVlrZ!k~xY2DD6zE8h~Nuq2|6Nf?raWRfVJ&7hqI+m9*aVcHx{k%4ZYpT3H53N<p}-
zwhVg9QPsTwZkVcbmlQ{h95My6Sr-pKFof%W`bnj@M-E?rleV3M!^02Z;Lu$t=2pQV
zYa@Y1bq@LVyyiqGZXi(*7-*n0O%Ef%RB8szQJ^3F<Wc}BBbE$<Uf3l^k|`z3U6Upn
zH5!FvVC}jttXkWS>4_>1?4QH%kt&*X%Ad2yq%vyNkurpluPp+>rKAiBk)uzhUIMD3
z5&WBiWfd1!|I%tgd_Kwo=(j;b!5X+yFEOa%tYdjWLxag3(SQIo@0?ObOQnjW0FkJp
z2^#WXpwLbda`Etk`*Hn^pH+Hqn^_z<d;>;~KA>1m*-RHqP>{)ywsUC95lhL?45E13
zd&NB<ULdEja0Y4(8<o277v}-UCr28X0Ov75QPsvNAs88%#mr0vD_3-)y@PBchv$VV
zFzf0mqIaN(YPE^sBV`=iU&ibt?F?<ea&oY&WYQQ}0*c~@(4kR6T8$J48fHq}sJcft
za?ZLjP4ml>MiZqB%4Kskdw2oAh)dQgprf8}YU(ryF19J4rCo$oD5;d&r}pzSh7KIU
zniUls+J6|g-}7}Cl=d3bSVp^ybb?6(ra?41R~5n>GXs}4mtuxy{w9`*;u8WFsb&yS
zgDpq3>7wqF**kvw$Q`$R11a*S5M0m0)A;!8d=2~dO<;1og!ax11_nCN)ty(hcVZJ!
z%a(1~*u13|Cv5D%<U|eo_LMMkq^WlcP(1+z-Rf1H5Yp9Zr?gYy`E-j1059a;F&$lT
z^y3{wV?rzR-XcqZ8lgTzC+u;g5N~S}*Q_aqpiIEF3z(ao!Pma_Pbx;S33#Hwlh8tL
zDy{*gqVzlopDdLDLlFOgI3y}VGL)axq*29(WC&;^EDcKcQm6*RM?QYXaY_TDNKhpt
z{)?^|(Z<%S?pCXIV!Vu_N9Qp$Sw^9lMt^@hdVAWC$+>D;R-+cE4xpZ%0#>YQ!^lV(
zKfZb*&b8I`inn-+H=0mr9tC`)1TpNZ8A$P7M2kE{HH~YrxCg!5byTmn51`M`L7j3l
zG1o$WmwJOx10QMb4EJEE&kr@^tV+w20Z=SL0F|SroPZfBq$K{LCY9+;>NG!q5zNb}
z{6(u@6_kh-1QYeZK`RWKc(N&gfM_c8m535?HbC@h*RgThsjD$JTgAxeEG8z(C|5j`
zN@F;Dct%-+!Txp>+tP|H>-!N}ErEf-0(u847(LPuG;U6X+p6bOD*&a>G?!q3L7=LC
zG3dX9vQ7n<ghjlRjL2fVR!;>`_CF~;#_3r+UOt}PNB>6wr^---p;k7z30nPzp;tOp
z88w+@f$<!ZC3O(0w#$u)v1(WQnEOc21qvzTXwcwj%8j3N3Lv9EU-w0}YjQDZb+@<Y
zP%P%KYE=`H(`8JI&GY%WrZ_w_rRdzNR&`<B+CDW;kUob>#3nVz#qDK!Hx8!CysF(I
zCTc9$@de)D;@=Cgpjv~97$O!<cxlH{5)s4!rUsi961BJ&j^1LbS_gfM!XlLANctiY
z08mBuv>(diNs!r($!_YNhG`JPIl&gxrXth_$<ZP#AR-#;lT87HR}KOqRca~}1#i^R
zyLbN#jvSsu|3Eti`a00wkw&4A!m_~*F*RAi<YWm`Q#FiF%wyf!UY)upsI98E6V9%X
zF?Gc5Shb+X%(28hD9uskmb8fCxg|mBBIts+ry;hz3z^GeKjT92M!%1~TV)9en@Ew9
z;(yne1DW|)xbccksISR6s4OEn0m7a2=Gn2q(6f_ij;K$YOGMO5lu+oO;8{RY4Txl`
zLi+<qE(OH`3rqn{ee)igjY*6jokv$s9?J&W(bk^D@?{+u7-+-nY;~bvLSgX&GdBs^
z$n@()sEHnldDlpvzKAg^m--JA_L?@`i+k_=Y?l%i0>eeZs<t$78oMA!r7g<pBxxv}
zha`BB+QSy;?@9Qm5y-^8Xrx$wW=t@QC%wl+SIGqhf;7#J_7n(3Kw~GKToxb{jakas
z)pb%bAb$?5Sl$K4HZeLnkNNpJhK8nabaW0K9T^NR>q1vo4&B`a)s{stYAjAo#Zs3&
zF0CoSE=K73h)1$5X+>Y?Qqm4yDFNl(i>)Xu_V)|hSCQ{lfj*tL9&^3;9ScU`n1vX}
zA&Qzp)1c$Ep7b`v`K3xmV?856nkr8vv50aRs!>#JIiqJ;kp+<O!dhwJd!G0fK%ZbB
zDpReX0%mq7y;n?NRf+|c4R)cwzYSB<6$~Gl#@uWj<Ktz_%+ydQq|w*kj=sJkGHC~4
z7^!~2<fp6rdr4_TuX?QzOtsU*L6)w>EB0U#HzX@ti!`<s(c(-4-MA79T3MW!)0-?z
z4Fx8@QdyRmx2m68Xn{&TFLo3v)Td5p%KK<8N!(|l-mEvxQajmFHlW5KlHFv&l_tC(
zL@R1k@no|AzMMN!^QLGPt}?r&QZwF^iNW)9ir3rSj^6G9D&;zcRYp+3%xn#_vvnLg
zG=<*YB37^JhGo;x)}P-tb)f-OJ*h^&(ezI>rAny`DZxS@u7#fT@aZld^(k>VNJsYC
zH&eAof9z6r?=fy6)(j%JC!dnUjmNwv)(O?|qqItUkL1w0p|?epv`3!mrBr9iX|vTv
z(1I71CX?45kK+;S81kzRfzouTvA1L~D$5BmJyF4q`;MxSahVLkwhTcKsGj>mTOQlC
zt-x7NTZa=i_92^d&}jPD{qRxj-aQJFHi(J=oMeTn)wQJ0Y$2;t8`mvX{?sdDd%ToR
zsVUyEC5YKM2}@9~_E@Q6&#j8XaU7y<am#nI;`QT%Hl7GJejO=_YJjERphT^0P;5rx
zEsWz9G_9b72T)C;5!7k8_Arj)@hB@mvQ)xwyne%{0>1`BS|R<+`|lXV_rA3oyC0fB
z5QeHIZduf+6Qb3M)MgPI)(_&Wv)19nZG-6Rr(uwUs_9RTF?`iMl=$JrZkr|h=c=I_
z$+;wF6%U7wUA`vdEMf%uMOuI~K6WAdkNd)CX(khElFy4*>H^PiK?mbWAjyXC3nOCG
zbO5qus_|2qnK*Zd+g_4RW1`426x#}X-W!G|XXAbV`Q)(xbd>zNKRz~l8)t$BnFMN_
z%lvE|xBc`mzWc3*aMvBfs8w2UT@$u#sXDz!z0cgjvSmHWB5YXSkARx!2rP+xx87zY
zxsTICI+7y&Lh&!2WEvNL^mrQGO{9XdpP_0&<&!bn_t<|~h|uE;7Uy$u8(3limcDCY
z@CB{<c#|aZPUP#8n=1Zj=vP|{O<bYYwZ6Vy^sY4Qp{cuS0<)?o;CLO!K>@TC2r)f5
zH2<G}SFev`r7#+SXsH2Ega_1XE!=z8D6abUF5Gba0Tl#Vwt;k-5HwvjRvh}+pd`Lq
zt#0k7b(9|8)Jj#UUjhv;MFRC%C2eJDtuDo7uz1!BCFTVS5@WxrSv7es9!s<Ez9n$q
zl9r9+<vO6$D5YNI@viAhr=G;SsMCGM?m{us<KJ`l0duVS(@*Lt3CAY`IIesEI;zoa
z?>#*Cg)`RlyzxTG?MfiLG?%9G-?nY2)xCGm6o!W8(A$^C+I5{+zC4di+E)Gkq3RaW
zYN{llF?vnxiXE=1rX@ajVN9uB(8|A4S`|ZciNRek-Etux*DGIL=OwOVG4PL{NK#Ez
z($`%5C6wP|EJ6HyJS|NVNn*`eH2hQ|FzD;Ksy<R<O4P&yyLOB5x$9BI9e<DGd>prG
zU>pmGY5zNyh>6B$R&-qPI_`9NUQmHaY&dDD3ZA7n7!u=SWsHwikuNw{v7#NTR<)z8
zjXHZdd^I&A3C`oabYfvIwvf{XRB`7H4W!a5S#1-e-=-&xEaVb`O3HC~xMUEOjwRy>
z=S%Pb!t(Vtf3YH}WlbnvyyA7|Gbd>t13|~irtuK1g-WM&s!1dh75xX1k49912*X;?
zoG6YpzVZ4{mgbM=>R&j;<995ce41~2*<k(^Uu`d(K?JW_gwQr=I2x64)m}onqDMSD
z>bA8V6J6a|tXx$@wHAmyyDPA58V{jNWgJUu?48QLsv<~`uqp{JQo$7OpY|+DTgdmB
zIC`*(Mr9n$>LfzilxJ~Z&BEy}LavLbAsvK6>!)K^v-r*hMbPyr%~VpKy`Vt}YN-Mh
zm7WT<lPZx;e26IYX^M5|O{R~QzWTvRbnBII7<t?!gvUw=I0{`|&iNnj$v^)UPHH)P
z>DQzI+ca!W1P--jOnk2pGnz3WNU(+=Hqip)n?&z1fkT&pwa}F^aFZvLFLf_D+^mJd
zpo!r<6|DfZ89`h_U9LzX$@qThqFc%qIp#Mh<x@>&%7r9zaAKugnx-bGq_R#za3Zr%
zB{33B!352!VK#i<t~K{zrg_cFYvO^g9dE%Ob8e5#v3ON&wqko{>VnVp<SyD~rn=CQ
z9_=1wnx?~vXb~3!)KCYSi=qXuEyW_VyC8%G-oI+}RID8i!!l_UrM4{8Xp*y#>oc?h
zRL9V$%}~KP#sl<9TZrp_re=`1jYVvKQ9Bm94E3pKs+t0H^rVn@cSvF~>DAs6Q51x<
z+D*aIBCMg|9YU#f&&O)v{eK&(y;2@qsXWGCms~u9r`Wm+yED)EOlSU?D`4kBUwA$@
zY+JQ+C9E7~2`aZHD_Vng$!Izy_Jzow6o8mG>M;>EO`23~fCA4<!9b>)V|cH&0Hgqd
zDCWxllNC5Nu2)H+f}s;EF?pPf%}o?U6`rW%yU+xpK_pEhr|*a&#c&RpK<F?t&BBO#
ztx42d`*zfVT_3HBeOE<ly!6jrqvL-Z#~|<*9ZT(MB${&1wMS}0>t-7_y{0>N(Z}0!
z=VYZ}gnm%>4a2rMDFPF;rL@NQlA@Vz9$x@s7BIYp*elK*m&|3M`9MTV)2Ue!-m`^j
z9~EZQB-13xNN|S*Za|DFEI`6BX+*s_u2IJWFCw8=dnAL93mF=;t6{`l5!6s=?X6UU
zhdxn@_I@Fd6GKV4=<yJK@{Nz<vGfPKshn}*ANJ*+_wlyeb~`W~KM<|ZvPcoKf`U86
zlTku4kF^5I)Ek;|9aF<p9mt{)<wV0aQRp_1?&KKSSwX!vCcMU+TAh0H05zO-!L!5w
zPTWHFGvjwuUY96WT>g!*2@xsQGMN*fGt;yLcUjOv!#^BWS`U7q7ViCbPmbJANXN0)
zKz;CIeesX^_Q&z~*$a@$7OgYh-IKleeYxz32u#}-G7K#%Wm_gSXqtL}S{(Ex=3Zw4
zqy#*69|ld^;)ZD`hA$0dO0_W@+*wAWHZGd=SxDLmP&Jq&kYel#RQeYqG>ei~Y+&Us
z68u0hlWC*u7QHf5T|UxEi_k;MA4T2Yds8)d_@j+z|Bq;|uwVY0AHU-Xpa8%4qA+9%
zMQi)pyK|TRZ8oz7p<($nV#+dI+p@E2n-6NE)0u;@5C9sc#VL4HaRYUQ(O@27p>u@^
z8W(ur-V&OP3DK<2s6IoYnClh2WW^_S;>1(L)4_B+M@kZ?U{1&=Bp#p*H_d3L^k5bh
zf7iWbZ|6TXqM>U9N;5zI`xbxW6XAFQDZnpQ1de>MV4e1k?(D_yBSjFF8%8qnO)F)a
z77c>X10a;ySIS^5NheLUD>-fbIk4G+k&@VbYYDB^gz)OKx(AWEe&YRm7gIuo)W=Gp
zO+Dr8)R3b5I*ia}cABd}(IwQpgX6W}fsfaMJzoqlJ$|f&pE#@iNumJ1OcAn$oOSXW
zy0aI5D3?BwODjz~^LWg1Y{$-WYQ9ibK=laF>ZiH_m7Yz6zJm*1<6!tefCp}>AdIF&
zqc#m8J=JKU_mLA^NA1Zh4iY}if~VO9e#j*YZNsq*Y1%TZqt@DAsd~FURgd<5(U;?U
z^}O?6eC|)=;|Z()ztlD4a>hw-ZO@$hzG7y(%j`UL<kq<9*tV77G!w{BDIj$Qn_!WF
zTu&aCyxzeNJ~NH!u^J?rs8z-VDF8&E1h0F>qqqY(R2#k11I}#IlBUZgZFzeb<>s!h
zRfAn0Z^@B+_1LFhe4bC1<4K?Zzf2L_RN6S<vX0dG|J0T{y~nV-$TK%6i?f}a>DU=g
z10!i(V6i`kFbpuh{~&~HsvXKbZ$`}~(5syCbT2mV2rcfK795ueAI;WLR9ic*t_HjR
zr5PQ$S)yM1`Ey!4uP58_BvOE1w$dys#n)ck=A8N7w#+%Fx~b(5h9M$Ew3V}I*%>Of
z@Ss&k7*&<9$-HY+&QsAlQxnGx+hiu~&jjBeN4dG<j#{wm6U}J&x(Joo|NR`EyvLJJ
z0e+bf7_(Ua#=L#v>kFyvZ^@=Mx|ZFc*f}jx^@6A&)D|vM4PfUcGr7fFn<lx4u%Xhn
zn!oq@YOwF$o8i!pBOSp%X@a@mLk0NX1mn0aA3P;%Z+c_KSos{+9_%)FQIWdTi~-ed
zUWXry?XN}qe^?KOzU7OF`-R$Y=2w08@7D1<pa8#0U}V+{-3H4KaAxJHO;yO&Oem}4
zw2yf*yYqkljHiyLj;D^Nj;D^Nj;D^Nj^C~0{|CJ}5@wf8O{f3>002ovPDHLkV1mu<
Bd07Ae

literal 15007
zcmai5RaYELkj35I-66QU6WrZBxCIRs+}$;}dvN!`6Wn!Rg1Zb1u;2cGJ^RpIuXXBF
zRaf7-H&#PU0Ud<|1quoZUGb}|)_*qie-9GEfA^@k<qQ;*u$`i;l#bu#Wxs!c&6+L<
zEcQG=_ybsE_*SY_qhsXKkd@eCLrQAgLE@W_^CuMjJ0`yctljx3<}6@Dl84tAQzpdV
zhrwooCbTMPf{Qb4cIp?y_=XCdG)In=BExR``s<w^C&|w=+}x~fEIf5A=&Gh6)6)Qe
zANKA1`%c^YypX%Msj2?jiueC*K3|mwhOfUgD_gwW1t<OBSfjt{Efug>C<;OmU=ghk
z{XpGte@1AYF&p27w9i~^KE{~3Xf&?o=fa)#nw}Gq3hbsgP4wtG`!u}#(;I$>!`Icl
z4IK^@u=q+zKL~#_)n=jcc6SL9^Gg@s3pihWTyz2_?R8MlHF1U(_lp-^FI@cS<ggHK
z$`Ey%?c1Zfwp8(S!LKXTlZAA(cZ2$$?J@eEmV<p3cJtw={&VQ!v)c{or)eeq3!jsj
z1n|rC-A(8(-%w{P<oXyYD`D{@sxRo&i?@DyUSD5-Y%T!87TV2OXW!m*Bo}YZ3fIhU
z`c(sRS086#uKU-oLBVFaiv0P)j8<mYv+1=Tn!2BBh?pO%cth+y8#|(hQV+!k2<x`S
zVb`W!pt*@nN?89PqFw|^KClFIa?CYEu#}-+|0EFFDIk6PyEDPBcM_@JUa%?Kf!I36
zrD|q%X(r0NK?Nwi?fN=sX#<t-1#}V|eW}8!d(1EJ{N{J52^NW8LvyHFV3rFdk9ks$
z2g!oLYfms2{{?xc|4r(7!4?)tl<ubadg~<*{jil17VO$0CBH&l%kFQSzW+6078?kk
zvJpGIq5mCalP&a6E@kiMYIhX|`8C%wU)vgw*Pc1St0?ymBa;`PriR>jIJR{IA49m8
zCNA)ZW~KPYaps;lJZ3JdCEN7z+M{3SuD9>|58AtUn&FgM*ckYhhWq<KOLm2qdo}o6
zxyQxi_s9r|x4e1l!JxQiv;&SPh|r$fE=aXVTekok*C2ng_XY1P<n9=D@GcgJNx_}H
z#NU-bN(HtE3fk%gJig~)-(T|yfvh?8HhnuI6Z{ok21S7jZ^8FX$+dAj69}s(?jA?J
z@y9Kg68E#$a@k(EfMeO<=M&?AaHeNsuHl_C>u4gLc=GNTPJJp!NC#lB`ew@qCU)hh
z;fuj_83$s?kNrr(V1J0G3ru&xNT=pin|xTWj%mbK!O!ZCswBvL#Al+^M}6x0?Q`vz
zr3PAon>c;tT~g3n4@25u|8G?b_V9d0r`2sEUYCQ(+mVs%4qb^KZ6a*XLO(o^0ok@R
z<^(bWvq9Uj5ctT2L%<--i26GLmlT=4wNsn#L0oZIGRuYXcB$Jo!q-4ZWyGMZDk_-4
zz~F`Zdj0gFf$(mNBQ!88HjqF@9CeJy;Dye>y$w)6^*2*881xp;^)ue71^w=MyZIgz
zjOf#AdcnU(g`e^Q4m!VvK+C*DBj0h*1sXyr#v6>*HQs~Fow$HA_-kO0+ml-6Qk*^(
zVh7Qf=CO#`<|k_M#UXZYe&#qb5JwGzoUG3&5ff-DJN+ewEeQe^n4A?s{y_c*IVK5&
zGUH@<+4rOkxw0$ly}hNO{sq#3I6Ylj`&B#*p(H1p!c=2EWRJt`{Q4MK{g4(ecB`IO
z$4ef^qLY{rCEceH-rEEk^<Hg^B@aF`Xhg^KI|~m6Nz4<9hjG=mbn;8kC7DM>zq7lh
zt+Ya;T|B*?U#%lQiRcz0wh*p@J)sNT^b|o00}~c$)vR%oWof`n8%1FWf1sFOQ{R#J
z<d1<WOwvfEI1~0l4%DFM2M-vebCVs?eDHj}TktoKE5!q5i5)(_WLWSrBx9W_pDc`q
zP=3G!3S5tKXD?6;vxxSu&dq|{37G_XmsBzx>Jh%-9azspQ?I`;Ps#>sJZ-W?Ub*^e
zD=psoUnU7?uaKrs;cOMde5dR^R@#Ds`M25bMwX!R8?)RzM>W}$LLy{9&8)PzU$(I6
zj3~}*bZ$))khJD<wDnqf({Fw<81%~g@!Bne1$P;-0A|#`%dL-GCmsl~PcMFdG5zMx
zGx&+Cep~$MLxi1A^!1*9H_iJ)E=A(Gw~PiFrA#V{v^eO=UIC}m{d8m07Ki5weLrX6
zd&3)s^~g1j_kg#b+4_ROO!Jc};@vR}|M=Z|;I;Lt!n4Pu3nle)iR(i@MKAqme#elA
zL|36xDVuumBPX9z3!om0>(n-F(hOa|a8yBpB&GMG!LRtBGGD9-@=m8<m)ExUoR-2t
zh&>QWq^V1Z5UEAhn;oSvaC6cBj6){UF=<|c?%p{hK9?;Jv`n?esAy`Pl>|YpiDiur
z43}DIp$<kB*m;#wk|6PV+sX_dRpPVXDB#firqg};(c9JAG<5X&LX!?h1bqpFf*S8R
z5EFq3zO{x&*bN|^4?(TXYJOvK3z;!eqE(ew8!K=ci)q(K0=MNGW8ovq@ns#Pas(c(
zw^08K3ZU1KEPea$wV`ysP?(iB+5pSFLu`8jvUe5)h_H1shbPXvE>|h(KWVwH2Pun)
zqX$LKP6cj;vQj$V9CRj_9^8)iuhj2lB;G(|PlhnGf{_Wh!51Ig*N`Wid^gr3B`5a)
zfheb+DB>T+Y?IAa`}@2LLHs8&gU0rB?`USnG{GN{36o$zF)SHA^7z|7*&30~qgck^
z)($ehW;EIxYUqFXz35!w<=3r#5$fzTfrc-31=%9MXvuo|kj%pZD?0sAJ54@EZN#ze
zKYT+IBNmcbsx=bPlamCKGN<9bYZepRy*2vYnTLFcIWG#UITUkRwn^1+qm3e30v)PD
z5MH>?o`!&H7S}xg%*AKCLITnjE^9QDF%87jUr-I-P;(~ZsY9-;HN72G1P$^NI-o@#
z{w)6NN5ki|u_z{(A$8-zfrS3bOA%r(zXx>(6ShBb6weDdYHBJyI(6UY6*JsJkN((e
zxIjZ66sRT3hcZVbL`{wM@^d9-ODk;L|DI5?Wj^UNjXux}g5pEIMW7HtDTdh0j_oou
zZ2$ooY9&4h4VRMxeZ{E@-|s0ujWGwGbaL$((B|+@1G_`#voSJ-6?CiHH#GP@X4+`Y
z1-W^@r*Cw+Js*oh<D7N)xhh6hC@YA^)0(p<L4fB*J%M%(EkS(Me%y~zu4ebx7jH1T
zw@sN_ZBaYg)2K^vZqmyU^5nI;ehw-xV}2^zJQ4Y!ex4ki??at8%9MTSCS;7ml(cB}
zGQrQ|G!pOk(Cya!Ik{yyZIiiv_0gCg{*=XakzFRN6c&wCcc5)2{FdrGW2mTT^9)u3
zL@XPsxs20k6R~*#&y$)kp?rF|S4oD^>yNQ5!+chYvF|Ti_w_-1RB;YjT@|27=3rmK
zrcd^TOT$s~Ii?VaD+fK?gI<Fe+Uf;KZ-gSEsKHvH*?opudz7)!x0kHq?&#u=jzYg{
zca*F#bjZlpq0hHy3}uQR+jk<x?6+wwKMU!D&a43T6$pDUEY0Zh@iF9Ghd-%W7|hHL
ztxGuEPHZrQn*@r*oSI{hjFqVO9tO;I-CZ!vaP!(-j&Y5ICGf@PLdkO}ORvR9yFY@G
z&f~Kb7%~Tmb?sQB+h7LRUyuTE4~3T*ehI^e_!@z2F8)5QaeCXp{{6|d`?=(M|L$u7
zd!~uKOkZ-OE)JiG>pxG<ej~uh9b0#bvv3dw$gV&#&tigXOio~#-=hE8%ncdv1R!!+
z-PBf(^j^(MyX8`X|DZdM<A{u(Z?9D|iR*RbJhxnatZ96hMFY`8eB{9pAzM2VlBNB+
znvbS%C%VtPB@MA`(NBGQ(Gbc2k~LRr&rkl+qomJwTDN@{QUN+=JFZ_NEw!FDO|91!
zL){r$wS<e{8ENqutl&F|su>Uh+bGhu<9`j)*JWVgt2?Ec7>(UAARCp&+~_vI`=X~Z
zI~j5&mecq~+%<pKv6Wvh0Ik(dmhVin=-EzoUgmam^7eth@hn%sO8TTeTw@e=_YJ`W
z{#&Sg7(YG@6#*~88XRZ{@kXgW1F@uPIbNJNg%ABI=#rn}2LujOD!hu~h?aSPW-fx`
z-d9P)b)OWJm9}n31aAF)0K1!4;6ZXtOaXr5aNP+gHgx3t20s;^#I%-{$`MZ!@?qyd
zO}XFGh%@+n)O5V|d596FN}r+4TW4?3dCMf>*L2Xai*@Z>>s8YE6yVx@FLL_Ym}BiI
zC{(GUmuUxowzTi~%iG<1d_`=aq=rNz(Dc^(TN3JHn{*J&$3;2F$w^GXyz}SZ><+D*
z(<6b8OV|e|3Q)S+N9UVU;BA7FKA9;$uubP+0mg|wx8Gu;=_WK4-lV@mqm#q+veQ%%
zzvCIy<x#D6>7=gNCGYSMlxa~uGO*`xhZ|yefKQ4Ir#P%I&=HyM3&DczwZagz4MYh<
zKCC=E%E%`}=9QvN`HGz_%0QrniYXgASz<?x_ri1A=Y&|0e*vl-oNx1Y4^0kQ>b#{j
zhj;-x68>&j57O&gr_I!u*4_{vvH)-*_D=cg<%I>QU*}hLvXQ};n-ax=H49|qpf8^X
zP@hku_!Mur<4FZ2ue!(fA62#?MA&e#?c~cd+g(qiCiiBeis!@>_`i`|Ng#ONbW0Eh
zvWSAl(jZQuyg#F8G|%nR){>+|Q68BOmZ~zF_D)`=gM^;0<~-Jhb^<?FeQ_qa<S(2n
zWO`wcgMq5_R~uQAL}~x_TT=&R4}1-vS#dy0xi+4PHc9uX9QRgl4U-;3H;<JElOIfW
zCy^9IKd_%(8Gb@P5+sTmd+klm`(koxdXh;nuOn^a{i6f?{-ym(_fJ%*svNDH_6`U3
zS2*5bSql=2S}JcTMzjPeYlH!D1ob`Cg}#kDAlJfHXMdvc$ob8;+E$$5Iu_py5(r?@
z_3)}NEFhhzPI(pFI%aK7&|IZ=0LOU`*T>C0c^FGh5OV{MFdtd82No3l&?0aWGy7sj
z9{xAK`*F^9i7a6w1VHz-7%CS^Q2+{mcr9%|nSV)}3MLlc!{Si(Wf6{4N<Okay19lE
zn!A>_(xMgvj2PL!MfSEJxI1v%AA#<G`jXdocfM!;a+z!%O&KVL8SF0hd|jQYs_x?j
zpCX}uV~6h?3dZiTrS~zwj^<be`n`uY={8SLF~r^?KDzoihoqcL<dh-8*-Mh{SK{fy
zdJq3d?pFI#+TlWU4i}4qDOvh}cQe&LkKARA1%wl!`*U3aXK6}Y6sD5wKKg7-@!o9R
z&}iv&B9C#0Lo;GC%EQAglP#jcdk=cxH#=b5TN(d*q-s`soLzGdx@RVgE1K6WuCs<)
zWG_@r7@m<m%1efTTcCBRG03>$6cq_&HdMbivEGlgAW^33Q1DY3cXlbMY~OULNH#;4
zJG-lDRADhQAZ)2bQicm6-CHn3Oj}lPZ4bdo2dhf@gi{$)_sYF&<JBksdLx;fji;6w
zZzrq1kO}pey9o(qkqNTPxemI)`#c5RLsq!d#j;_S40YL*B?s7`!Q3DYyZ3>&(CDUF
zgqtr4?tfE`kCjj36s3D7kmeUUyfs8o3L4P0tM%5G0oX$EO)^0^42-0+I;=WJ3>8jq
zOgW*IEF_F0{HL03iy{1KU8}27jo*kG^#t#yIi)O`n`{7faS?LL0~|n|PWO(<d+jY&
z=RM}Yi=`?q-T0gchkq+K;OsZ%cg0i*p{2yR8JyG*ar8iDfZMn-4tX02%TT!#DZUr9
zQwSJNP4P&}3hq%{$cC5NwRQ~{<E0cbFqEg2%Xdt1Cl%{uFCo?DftneR+fu`#J!eVc
ziNnS7Ku95Jplo4vXwd9I^O7~rk!oc%TpdOTgSkQDXOG<aj_2ji9ZXag%`_drjVp%d
zXxQ;X(3fR$<8PJU#Y&JOb%vu71$L1b?%lRxJUZwZw+rhoH#)FwsNWQrp=xdgajb?K
zwWakUg5x5%4w@d;US?bX8=TI3Z>#YQbwXHctMEm43Ru$wpdXrWtQZwJE@_b$0AFfk
zAUpAc>TR4!Ur5H_n54H2WYk?n^r+n9<ild&mf&#d8;c+Fw!3)Iu<XQgwL;M&hX>GB
zY9@&t0&{BuVoM+X%mh3YPqkdnGI1nQ(6B{$r6P^VW8wN>9WUrR5Gsfh$_2j#<cagw
z*}+Zwdq6U&%oYDMo^g5nELp@de&uiVw_qg==;SuomE_-2ZXo6qhmDT1tUUO}o5>V+
z<40!O6aRcuc^>dGiTjCfpNB+^b##fwuaY2AHic|KGR16RTKb%*TxTrTLSqw$g$GAE
zq9HNMl#n)z%QYuddE^!Q7NY?`c-Vw#k=Hq7;JfDJANrb7U{PomaE8$tQnk3t$*S-%
z!hFo?3OA4ZTyFqEwJggnG<LPz>N(%wY)<^RnuCkbspAxa=P2}C&R4p~V~T6BfT0G2
z8OV^a`YrecMFoNpIx_d>W-<q<X8m;FIk2S&oT1Fp4F(fM`Ei`th^k^3I_j~JWT=@W
z4dC*5oQ+@~n}<IfhGSgn==Q#EYxL#5x%MP`2kqF5lF;Dt+GhNH6;e}6a1W>*IgKTb
zVkFhka88l)*2~#U^8KnXlWa>f7<Bh9?g(mlx<Jz58ED9Umq_=wSIYkj<;wwPdYh?A
z^2l;IXeGVKuIy(|`RdnHy0k0;t7?>8dMP)KFzsUZ%jQ|$%Jt@xF9~F#L*)ZVM9X7v
za?K^wo=W@p=WwLRQUMR04qp&plv|<iu!u&{x2)zfY1TPnps(><{I34>7w30w&&V#9
zb6+syqdwq8{bMC@HG^#$TutZTrQ#X3IpU?w^eP}DKl)eWkyO~=9{79u+mf{lhAA4D
zCVopF75l549uG$INGZDH%6@*-<2z;wGoIkBXW^!b63M-E=>AUwxNGVpvE3hil|a$_
z8`v~%o$$J!3LZquawfeWQbl67=PwXmGa4os;*<a@I(RNP3THM&UkYB$G8BH;Ty8iy
z00_OQ-yx1;j*giEgxBD2w)NSx(R|{nrZS(>k|jNlgOs3<6zhdOEJTefNe$2dplh->
z*)}V$dx+s(f5%ec(UzFmxYZ^T=9w;2@0(s*;9t^HECiS*-GH)E>$SMQ>X|g!CUA0l
z=Ghk+Og^qXEafC&WB2Lnz$>Jw#9AxhiS+f1kq)K&)<Qu-wLp<hpw3ei*SjFMtV~ut
zc02m|o=jEt6`L-<D_|E{svNF%9nUL{O8zgDv)a@%Qf@2fI%uP%W*YR#HJ2lhd0FxN
zXUU6@mWRhC9IeGbMJfemb~costt7HfI-$xadTQOn2Zy@~y#%{eD%Z0n|7!Q#|5;$P
zbI?ET8r&jrf;1QLIm8{gSHcg$-+_9D`H?0c<739!ar^=f`ze{5FfcpN)L?5tCDXD!
z{vaE%Mpu7EJ~od#$)!nFMM@>ckZ3Ws-$%cPhzIYx$>1N%hEB-E`+^Xa99UQ>6#ZSQ
z5lv7dUC`zyVwsDcvF9<CvnEo!g=e$vpHxg9-hv9l`1OrPGlbVG%TjUG37eP};ExCh
zNwu1^i*R=(AJ%w^w<3}VF3N_aLjY2J)maJmsh}7FE&j|vcAbusA(Pziz>;IKH^uh!
zd1mMS!|qTYI(PWUyawH=D|<f(a*^K!Ql1+Y9D;Y8@4gj%5}76$Zf_2gTCi&+qcom>
z?UEuwr(5)&c5;=eL)dTu>Uox})eyp;dy*OX)Y{xOt$9eYIQcZ8V`9A0SV&T4NWD}5
zsTNcO1hmFHdPlhL0(;USpXa%;EY-jmm(WxE=`~4MA`wI$zKTVST6Ei<MwPW+TI#_P
zrnoG+)yt7aGC8$Kxmtj=B=q|!u?4TJ)W|ndc4RR5Z?G;pyt&q2`9)4whG#f?_2*ll
zHns1bC+tcsjz~-aj*tS7ti@|=o>9I8JAvs?Oij$XDx#6R`8Zz+mGiz9Yvl{ik+-9&
zI+3d+s_KX*w)sy%SW759`}Q2TI2-uWFlPbaoyHZyl5I{*#E`4?dsMH(zGnKkA@#q=
z#<kF?A%JD|nxs{-6mkMJE>S_apoTQZ7==|+%_X#$DYOE^1o#4EW>*g8`%abbju>G}
z{R!DT*G+_VM|LqxyDG?Y;l{o`xcMpCtrA5}+QH+=PxB;>9efefKk2W20p-@Lhdc_E
zkK6)7+cfkCy~t@7&V09lECkG}ZLhA;q(&QwV62p7f~|rb2z{aA3A4WZnvJD`{98l_
zdV~zvn`s2iP)e34IGH=m#s7?vb~%lcQSwY+X(3V&sFO>k{reP~5I1Ju<<K)q?*^$T
zV(FhQQh^p5g31d@vHt^pl)afGA|7i;8HNWKV6V37u6qcD`gmq)XH1~@y@Q}Cr(kn5
zo<k^%YQ`cM7k5cjM@)^}Oo~p1J)0h>&4TI<eWFUCCQ+}3jEjtt@^C&xzx?+S_9ZJ#
zw^Zu@nooiWavVIpKAb*Wx_VNuV#Ako^*<atDI8MbsNL+<1fsa&HY}cG#Qu56Ys!uG
zs9PP*mgfy4xuDEg?YLAZWJ!7|AFf@Y0^tIZzIp!7r!!>FET(TakzzlDyj(d3+|sC+
z=x?D7k?$&Y4t**vk}T*8B+GfqyZcViyp9e~tZt6ARn!AB?ad2LUK{ozZg+U|uqS}c
z(A5r{JA%{8W5ktpWy@#ieG4>|@hZXSbJ_8D;)T|rPE^`x<$?fV89MJjp@C-qm?aCM
z1E5v7nDcq^>@dCJGT@j4P~c0*kUEewu^I65w5XWSEdmfY^AS${!w>dZqq0Bk@FYAU
zsA{#4JTtuB@!DYV+UQ}dx15bZqN#LMSwK<qz*m2@qMi6_an+nJRV$g<p@CW~eMl4e
zD>Lxb^K~n|5m72u(t*#&^9AJA)?W@?ItP;+@jU*`61^o|905*YRn}PGEPr|ihgt=H
z*>ENXSkgzVdp#(sJ5(KSzGY6OrfkNtHKL45OX^dQ7%~wIXQ%xdd}L-6My;&=stEu^
z1VZs6di>>t^)qH*BK17yZ@&M4iDaMTDUPYpuX3LwF5Og=FU6Lvi(sH5%=*XfTwc|j
zDlI50{*T_8N6`HEG<?Cs6KHF43b!HcYh>E(3GD2SagaIJ6@nHPlFD9;bMX;jln~Ut
z8n`sueR?%r|I<7`)OOVFO_6e*Q$TS7XwmNbeglW7u17@d!c8vHN~~N%lrm-X4JG<h
zs{1%3T-EKTb@9_bo1(zKTGKL(R4RnS-t>D$eKe;CDZH=Qm{iI*Sf0eyhqso5xgV~p
zd+FAf4M~I_D%DA{SgfVcxy@*mie!_^B(!MiWWRR(5}+)reN)!V2GieMx1<_@LN}-S
zIe%!;G6d*i!@w<pmbWw;@Tq$qX;wFNmT(=RwAl%e4GvJjQROhA-{m}_kh`e7B8*IK
z^H=?v+5I5|*Y0EftDyc#&f$OS#Ad>R^Y?G0WTN6zFS3M|HZf`>7$L|$qWd+8Oxg<w
z-$5k>nx$+RGgu1yFjVNw>AGPsaK!YKk`z)fR1v~)CwC7!OwPUfLLYp#XU$k76$d37
zSZA3CbAAZ4-UvN$+a4~2zPp@&!p_EnSEp#AvrC5Zn7PN>55(&eQ1E*b7{X(Z6h^jt
zUO`=)WQC^}OW?}RbJw5T)d9h9-Tk1lU*P4Oz_LS|U=sIH(Idw#n@+`Qg)bQ#Oipxq
z^_w9**z0RoYUiFm;NdG02}tO#LP5J`#Wu;WdNzx%lhz+jS7?FGQ2z5RMPu^tLHq<R
zKU#(0jzAjEDIFbaGQ|*fZ4c_P_IN#AgE)HnRB_})C@R3d>nSP4xTn)&EsJc;<-DS<
zF1gFlsx{C4P&P`ti73#SYn5x=_GSF~&9#;%WCRznvUy^^pFL$I-Tys<Kqk1?dhd)r
ze6zlQfYw<KAV36tO@2Nq;JMVkHv{+z+eahsz@Nd1$8CA|Op0HCOQI?$g3HB^)&z{a
zDk3|76==4l?fa-?v0^Q#QE7eN7K)l|CEGR`a{NgKy$E07klYZEhmxkXKo5s2$sdY_
zY|cqY)aoBYYT@>?Hd*jVfagKqY1`jAe66o)n7qkwX8ydf%BdM@;%@qr@cu#EvXy$7
zG|V>-E^it4a0-6J4@*-5_eS~p4MY6p6XJ_e;9`+5Ue|~OF8sTaxj3Sqh1&dO#=8Qb
zK9b$PJvO%$oH7+ll1E^M^G3%&fhx{#(~97fMupmtV8J$qPhWJWBTvq#hPq=agb)YM
z|0uNE%~xtr&$S~l`Y)HOasmFI1+mjT9wIl8K~!_RYP?aJfz>8H%9B|7*X}nhp*5R&
z;<n-OZP!TB&&*b9<D$mlB4F1yX;E~LSz?WB(UROun?go{X1#hBe2L@)3Il8lVP8u@
z?suEwnY)nw&%K-LkC|fbU9_cwF{PBf;i`<4L)hPal6)ZAp#SzOTt=RMNnE#Xsae{Q
z0^ueYmO0>?FsxPb2(d;Iunab9EV<(17M(-mBTmqk8Aa3m7jiY3iZO`KrkiU9^U-0^
z?<#~dZynUu6a;zmqE(#$4an};%Y9Xg&fNax^JDkkJqp&1LWK8odA4&-)6P9@NRCqI
zn(*_54=S@`Dk`JE?~BI2%pwELm<ckcECHZ&lfh18vr?i2mPfnAyu0-ndxbxf96`^$
z;6IdsIBxf>vLDXWN+75@T@7efnP3sO6@cgY2_{xI+x(nGg4_yY06lr!VZVZ|CWoL~
zx?d1di7I#0E-F9s;<y6Vq>>Kq8IQ&kOFI1VGUtPjEz#M0>tzr7Dp--?vn?C~9^ml$
z4CyMg5?B9V!#iRT!1F?T5!IVf*+Ns8Kr;syj~ILXS*t1_PRuR%sia%I5?PHg&&X&+
z#@d1;mTw8{V!&5+i0ck=e0}H@VzQ5XXS8-*?<u4VIzNBOTnNroX<T1DK}8O+1kTXw
zgW*``C>(12v#c*^!{TW>e6LG2ww2n&V_T#~zWsfurMYA;qVmID_AekT;OXM+tz@1v
zDx<3dsd~m53=56RN$cR-F^FXXG-SXtpKtKuA$N6s;D&3v(K>JOw`9iDsT6at#O~0k
zr5}WotoR8{{Rav5a%INE=S|;-Y1R@Wu2!6vL$*d0vf?=7#*8C=E3BeY_pZ(eRfFr3
zG+P|zQdc%hsWdxppF8JC;@UuJ760IL_CgXZ|JS@L_D!jAwrR2~d;<U6%p$0n_9tyC
zQUA`UFXsc10sV1YK8=-5D~3imVX~8U`YUt_e<A|NNm8+dVniKU>8EIV4AKW3BpXVW
z9TBWEcS8D-7s%f6x{F8+y>=2!-a7J;13K=q)jz)sf*BDvL|{0I5{Sw5Ab6bUmS_s*
zTJmZy83i!xYWz8C<xzjZ8LkA(z=)C1#c#qi*A4;IA{E$-#TA<oMszy)oTlN9+CuKj
z_w$#}G7U-3i$xYb!GA&0fZ{sHyJLCyyT9zjeY^<aW(&=fCPA0@9XQmPU$(GNl{H>5
zid9K^@tbCa5jqLqinkeVc<o;mlO84lD-J~hF12?EZ<(OBX53CzRgvIS5lCElJn3&{
zZ&Yd<SIFzFaI%C)jMXz-@!Pb7^iry~bX%>g>abjF3TygE4J`#1mRufh{Wog!rKMl*
z-M=`Y=9m<X*GRb%E6WZ<(Ggd^<~lIp>Mq!r=DHf$X~>tdSKFUx^#W;JpI{1QXEQ~i
zuL>y<GrGNN2=jmcrTL<>t(Zh97K%*M6CiyTNmo#p7m<x?Ds;YDtzK=pc_z!!Rw+#;
z(^ezPzJb?5Sb#E*s)+_}Owld_`CYVB5&yMk0(MxdB9IbI%*(?4oQ(2MN)R8{9|(xE
z+Q3nmO1%o4*1$P<q1IS?4Z7n{Q_s)35mVeNf&7w#Rp&{H4O9VIk+hU;Ce+9m^$5u3
zrUXoQs^y7#dnP1@+@daDs`M@lJJ*0Ai`{Z@Dn_KB>BW(2WhSZL8jb|H^&Y9gZ{s9y
zYVXvrpsNZuch;StAUu>EgQ)|WiofoHAlya@#X~cjEak1*5!KThKl}pN$2hoCJaNpD
zmTwv$R`d0lsp+z=A#Fh8<YvmcRN0BguB9rbre8*r_?w{9S|cM`q@%WnxW9mPWNNxn
z`ysY<jOil1Nl@6w6QZJnb8cD+vy3g9(pPq=s03tAV%P~T3RP|)(fRckI_sm+1XT)}
z>0}Lx%@pn;0`Vt8a-M94@Cc!HOMP)--r|VnWlK~mnBTr>Z7ZL{>ot#f>gEdi4y+ZP
zlsiH1cqpb+{wBDkb_F`fxnm3|YL8Xqx+|yl9_*^OwTnCUFR%Aa?iUZ~Dl^bZ2dWYO
zO+C&8Uzv{)VA4kspeN-A$3DWFtVb)qs9;Vi29GeJ(>mf4NnD=pIeVZN>%clmPiE<$
zr+f$?MHYD**5Xp<_CcY`vz8?kliLQIk@4_YFOyVx_>iO%jy(E%9z@BR_D5Ew6%?c8
z6?*ldxb8!u;FP6<Co%Yuw9szGEgABvavQ~EI9sA1r*lA5nTLn^lFpDAlbZY?V9Xho
z0<*q}oj|yQcbzg3LkxBwOGRT!y1jbqXC^534<i!ye_#!CYc6{NGEUi?e*%*QvWr0b
zKG6?M(W#-$N4V8LF*vNn-&p{;xLiT`IILn0M1@HGb1axRMgM`4RP|o3+gy30pqxBn
zJI50`;+mrhgdM|?0h(_2Ik2f_Rw87+CrmdEu0yuoD^KK$TjOqhlM@m*0ylQc!1T+k
zCP}(6aUmc@WJ95*t7v!N@%tm17Mr)VDn=r;Yd~LedZL994{w@iNKT9FZ1ZzBA(4})
zl(roc;ui9#S=g^_aeC8fUV`-DJZ=WTnVQ&1K@SMVYU7@K5SyAv!jCb(i3P#ZN`)mH
zPHUV;Dux#P!vLIwJRuh$??WaIve#?44Ph&*`nj8=bJzWqS0+U7X7n(h$rk#q074A3
z241W{<N`@U=lR`ny9>_F=kGIOc(_!#3{KnvoU3HkwZS<xx3CE+8B@_tO!#YyOT9m@
z2B_mAT|F%+%Jyk)#3#m;a`?Vuk`zIvQ40$Fq8!8|`9&ld$f(eITKJ2f2&h~n7>SUv
zr?7I&98ZWi$OFR$hP`b@L|5c_Ea`}4f`rR8BTcfg`0xqo3uVrDlyp{><-TVqQ>PZu
zw^lI&qnRT5Gl=)SJDug#1q5##7d?J!zbJb=vXkL2uZTd4G9XWOs6STFe8PNDSAB)o
zMINQ0j~f%GT2#!t6{`Jf#xU{BCAzEpF-8&>>0Og&AfxZgv7wTrC1ml=?`O4ePbT!l
zmj24i&y<23fD|r1@+*4i1P4K@S82+EPR1hM&wL_McU~nV_WiB1<vyx6l`8!e%yo2R
zjaEGWXY0b+lTNKC9=y!jN=GcK=!hbdUzW2YDYT@{&elwCe3I1L^Ku4Ci>2{2lNgRn
z8B9oNri<z}&-`kUhqjpXZ)x#AB10}?%Eb{UlLiv1>=>^phEu$tIsFs<nQMZP=qwO8
zgO;2<RcxS8)0|}GkTSq0H}Ld`oJ1b{6ZsRrK(kef!}5<h!v$^r=`eynXWHu(GWlE%
z+A1C=gF4Xzj;*|qJ4BoJDCXm*6w3-RLzOzG=o8NS)}A8P^MO@zyIqI5-ez0qGVYA+
zoz18jN-o7}c2Aczr+RLVooP1luBnl@B!~-HZy43!muw(Cptu-<6^_ofN&w)AS?+D|
zL1@CK5l{v8co;FR5|g;5_53KBIweG^j3W~-8b3wza3>(-o!a~_rrFMRDV+bP(Pk7s
ze?Gu{W%Gq4u>x4D600XfC84}+gg6rYsEtTRF|(_dw-&sj2hjah*ekVSnCqFc;r^u<
zWXX?o%7Nygx`%bH4Bd^kTnU?po@?LDkrZf1h1>Pd0^JsWX*gD$ziM!8JazE*?ug<>
zjuai0Il%M%i%fwK-`q{EL&8Jaluqmp?_5_{XON)zsOGo>{59i^kwSTX0Wv289WDmW
zCN#Gcrj&t-xbIn~Q=T(Ui$Ol)uZTrBT{`R7OWqc>UuP{0biDMQU@NQE7{=@wOSrQ{
z1aM#$p?P4G)j+(6>mbGvPyM->f>1W><FZu=e__e4#T3AvId@2T3fA1w|HV1=pJ(Ma
zjtEG%d_^VmJ|Ags7f3Zfr^waw6^Iv&nc#Jz6KT|*?QAgVkhs3^C&B(d|Jq}@l^NUk
z6()Re^IW+tF;{KU(JfSJ*MeS&*`yJi;uMkdP`-txlGSq6vb)Hgr`se-wq#g;vc4g~
z&Y%mJE&PN<^nXweQQ~KFf7mzu9vy3nBQi{^yfX^)``VDTi)@N=$B}}ThFY_(`vt8#
zr+qM?@zCX2Yl&JlDuBGzGV0t1&3&#tC?QElFwnigTA?y0&lwBu9q5H_rB5AK=jZb4
z499vl!e#`gdlt&_&&o6>{a=|qD_TayAE{(|OOP_6goV=0uitxYu-P6@1aqB}JS9Z$
zU+x1xC_h4n>;%96^F~W1t12*8U}w`PuGPNM<K6j|8Xm=$pcbKX=A#y!iArmp6&mR9
zrd3CQXh3l{_urrSjsZ{A5BiXE0*8;*Y|}UG@jQT-h=qsKz|Nw2HnDS6$ip+P43Uvo
z+?1Bn6wfp69$P74tvuYGhyZDnT_r_sjN#gD(Y>yNA(^f}s$Y`ILN(NpI2FpejR^P9
zG+e%I;s7>U(91b(asWbzcNb)kf3$Lh$aI3pl-)ZOO|Jy@6i(ruQl=vw4sFRLYbOHy
zj+!<l0@Hw=KaI)2iX=NZ{~>WE3_xYZmF0a?H2y*byU3O)6oq7rr9E?-`xENb`pXgx
zK+F9r*;eN>m$=@slX|k})AvH>M!|d)?C^Fe;f2lFq>!Zu^Az5qwC~$>bk>JsRx17!
zFu0or)DnQU1<{|iWjUlYXmK_pG#j4SPF@i>7OIOAyD`)R)Oyr+(mWjry7#=>Y}wN6
zVUT-jU+A~mb}qd#PC8~xi9!886;vU5ge)|Q2=hPa(O`C8v+@Ol91Fsu=Wj-Kt;q!4
z^Bzgx)_;41s_<LPZL+)ej^5>}7dmGrGn!tgvaJ3p9Fk50Se7C{$gXKU%ECHyo6ffO
z#_|Gj)R|6@oheuiVe%Q9Ew`GU^UzZD_ylnd1o|!TNUU-lNoZ_SH6P>mCQ)f6-qlVU
zpHE07Q3uHYZj;c9MV}3pzcqn^-(T3y*PiYw1$KsjvY9f`3!X233>hZuyWXzOzb%u`
zha;<yU@1oKozi&Y7;Gib?%9#IljzacjPbsG3+y3GOH4!mvDJsLbgKG$b1U9Kd!-<?
zJT+3$=uhOXMj{@_^v#=4VSo)8yvS9t-0V0-l@$x2pI_wr6O;G#-_35ArkNQ32rEai
z)o7Gi;|~AWWvBV*d?9I0Uj3miGTi|h-9Ldg@@|z$du7umJyc;M|7W3Y<ja3bo5TK`
z3?Aqr#B*M0OAP+?4eO!mNmedFUdj`QI<%_sjy9_ZUF*m!goNVc;g0&u81CTz64|=}
z`|w*7)mKLZ7~GpEx6P?so+C0L?%5)-w}00hUUThEhMkR!g)mnR*l<SDs!8KnsRH@(
zu5<6If-%fqopW+35pt7LoLeh1zJZKO!Nml(OLgim@2B&NzyGzb+)#UF)yBsxt@0{M
ziCYnPlo1xuwZ^$xFp9{r=ik5&Z;GyL3I;`n#>TSD`^QDHtvQ>{OeDT1B&c{^tRtyQ
z1jPi3kFGYzm~;lAi@Pi}#*U@=g=KHNRflc<9%bIF^q4DMD0e2i%uy7~zrt^ExEhqx
zU0R)0GlCYo##tEeOi0KWtn{Oq;>2C?I0RL={nz@ARWO(Qy-D=b@XqG?{_PxN4_IKe
zsJtD)$rDQmj211B+q}%;S&4!J0TYR^eOKNhexv8Uf3~#u0jX`Wngutg%fHiUzNp<g
zJ6pPbr0R4srVeFsE_M7?>b(v*?^5SC=<#2!T3~c7TBAcQJM~+SpvVG}7D)5NA%}_b
z6{^&#2`9{tr*h1Yk$1*1N~S?|_W`P4@jdLq4sM&YnOs5thAoo@h39)zZ5w+n(MkEg
zr_aHmp?zQ4(l7m+0I-2A6;$et@xR$0r?bJ#MX&ri%|^gl^9vV7k^38~i$nuesY_-`
z3^#qq?@i+Jh?T6fn_2_w+nR&5P2M=EejKHuIpekam$pyIfj<HZt>$Fl`&cSMGOCK#
z#53&g{{OK@$n5Uuqnwgk8+T=LzTh~eTPw&5`8bDtl+cLyptX1_b5wX@q_;D3aQ@u}
zu!Ui7`6LU^G}t-V=50cqI{X!<_^q3t_GJ21RhEyuR_eB`EdTb4^+;6+N88s0TSULp
zigz@9^*^SYo1UcXwfBb28V^?KvU<ZvIxPYIks-ltK&=qWQS0Jz)(?h}ZQ+DRqPm1c
zJwFJm!p7T(A-~I&?M#+9zcZV*(?rcj$LZe&7iDukYOnb;17kMp;xu)|8p}M_N*hE)
z<*&l|^?I2}^F_Z`R4;-Yof%Xpn=qQVS_BFj$PTxG6tA7mibAQVbN~Wb@fi}5+(4Zb
z)&Xc)zAhX<v4jcB-r6|ufx<I$F2l3)fG?hC93ji7VM>`J(S3hN@Ew+(B(Yp&_O0W6
zm!1Dn5m~bq#}2+>x044`{E|4wG5lfh3rJ%N3I8i?Oj}E&UNNHX_z#70u3bKC$|F*q
z<wMv9XM^bWNTH0Ynb<%Vk#dHvJ5tHn?j)Y8R+>TWcx34o(a?MA1l8a;6>rk<#W_Lz
zF<#^_v@mO+b0ifS@(5?*MtM8zx6M#$W;z#D0j>t*Vqw;sWr!1LScAD!Z>(6%e20fK
zX?6|hfKNK;E_wYR?`Z6Ut;6D<@sBSPHrXZjAfBJu+>$7oc=bZQ<NQPal{>GPUa|gT
z%xvo;2Qs+z#-u;1*u|wN(EMk$e?shOy3GR#N+fAa4A%rU9E{a1ySz%MBD#p~IEl;B
zgfT?Mnx2c`GzQ>+6HK6}6*+L^ui6{SKq2E;UprYh>Yw}#ZoW(tov=`PG{(96YmF1n
zDo}V`;@*3JZQbWHP@D?&cSdoir7WFG`HSe#pFc5XKXLabRt*I&Rs_a#n*UpGcmii&
zZg0VKNC2Av3(0TGm|U7dQY9^k&IiIYE>;Z+F8r~Yl~MWS-qFIOPs+~sPz8$C2woWe
zdmY4S8J@KmI$J9YW=FuLLS+)3ZUhf6IA?rgfCkwaL;mUczn_0tR&$%~=Z>X=g}Ihv
z*1Ar4Nf5ejCro=pT_;;-KPk~V%(MN6mHhhG1QY!@5W${OKn`)~AU(|R5;Jm{I>T1a
zFB>C1bVw~y2-e&VENfOS2u?6Cq*mcjw1%(zHs2g)Q~MQa*3?qbFx4W}!ko2av{uT*
zm4dSuEfe)kc-3YF`Rjm6J3tgz^5QkRD0`ChF2P)D>cT-z4FWbqr#W<=#CKgW&wHK)
zh{g6_xX(L;FrUkSv7u`@d0?HDw8rhse?)tk0ii*GE9sH!dCm4IC(p=W6j<BRk>E;}
z;xhj3>@I#8ycPGxq*p=gB43A5MRhV}FgIN8?+g{3F%ilm(*!T<vwS~&#-zG25A^G!
z@(L5{xa!~tgCwjczSFJd+@cbvDSQOb?Oht6WR|!gU+bT6m?(G1%L!R{Q@D@BHJ{fJ
z3=GR|4qI5@ajv~M*5ziqXfFE<5*fvZi=skruwKG|8~?W+oI;5~B@3?q!e^m4mcsfV
zE%j{`gNN^)Wq3B=ZoKfn5tTE2k|ddETm)8-e;4a!yXdszW@U0e-_PYRu)t*fM*_;k
zTFfCfuXEbzyfzC)MSz$pO-%>3*d)MM2h?U$xDe?bZ0|oHB{p$GIK|=96uR5lH@G%D
zOv(QEWP=g6&X>pUWjZi#4)FVr_)bV(`|adm-C=n$mL)DRnhEG@#j^vqAu7e7+_J4O
zK$tXGkny&926AtVdd8Mkkwh9$!$X(RU}TH3LA4!ecJfKDy8T>DnW?aSB>20B`Y+IM
zNUT8Od#wz5bt;ywFGJq6*=MHyu3({0u}LdR^Gq^~xK-UsvBSgTUfU8v_twg!TDhEj
zPl0fV5O(uMxf<5V6hYjJdxFtBr-w^Um!^Vs^?ZWI(>itDoEI-?S<HmNV@%y)Sz9%+
z9CteK6$S6dTH2JirHfAomX4NEE})<+KymqUru<%{sVQy-&XnILaqsgE_4$3S|5==b
zOvEQ~aHM3Pa7ifgM87|IP+_cmPTi<u|BU)G&?uwBp4g@>2-u2nO-s`LuCn$dg;$!V
z&hrD?QIy@;Djs?~FqiYfmGS@~Tz`*!k2?od<-QLBkVt;|k5LW7VwLFCZczUY8!Gm^
z1KJqH*M<J#^=HJj(|S@JqG^G8oqS}(HUYQC1mxhiU}pX}4ZMgo#n)9O(Ly*Dx^#t$
zXGA}rFFx$AH|l4Nhwyq|jx<lo-;TM3oYr&(eOqf(xVYNE?8(%GWcO2WLkYOnpmo>#
ztH~lPT1uZl;!0TA0_Q19#5><>=Y7Zw0TxRHb*m=7U|+2Yg|f8ve3|#$q=4av<92Y5
zpu@cWj|Psw;5$q4+L^!a*^7o~e(R&Et=H>KMVi~u4Rg7_VL!J?o9PZ_DyYrb`R&H%
z)AVildj-xF>0FJ^<vIGl%)qCFP^1yQ1rsLT6mkT@;U6_j#o>J3SaSs4zYLfPOesYS
zO4ByC`>={yDJX<kxrJPtp1WxD&AbWnTg^(K13CV<g<x!y(l)x6M5*ZGft7FWL8z38
zBh4ZSho^gxMeV&i(q5mM|5QzOom$LhMwY}ZH@|)=K+r`#j`W>1y8f%u79vtMf?d<V
zxTlJ92&(UnSr1iH!Mu6Gl$S?gv5!mww`B;Cf_Cxeq4snC<?atk^rs8|wsSh+hBTBM
zRSZU<u;e(nL|>u3Ko+EU=-S)y)R0tv8A9ogR?yj(jPKpQJJ<+0HVu@Nd}{!Re`H@g
zj+vDo3NghVQa0K^1Ijobw(C$|en354z9qIO5rxz}|IH5nMMS5n`B%<+;Ct{!1x-lq
zWH95fSFmy~yiv=P?O!mfrqh2UWIwq;tfz>1T?x`PhQUWv^?sL!gJ@%@K3OEMja3;0
ziYMRg+i=VF)~imK{P)mj>{@mLt`0A@#j{h09H1`#G|&+GuBo8CsrIaX4#BGRrRyo*
zJn(EF`TOqq40ZcV7xYPRbH0!GL!nieIS)hcZZ}Ew7>y(DWMB!^f?UerMQk1`J{{{a
zm{sn>-*g0jJT`|4Y1)sna72O9|DooM!v7yNAErct83yn_CC8th6B!uHxAUfuZ$TC#
z=2$PTPHn{3`F@Y=Us@dZ8bS^L>KpZnRO5LG$j+(jYxzUh{EjQ;eh{!5xmtaYhrXnN
zzMZ#xrRxqjUf>6<1Oote)ozWB2l|i~F<D&%)ATp~Cb$hbi`yC`ZQ2PU3A-0q3}al7
z#$Ea^u}qgY1>_UB7{XIcMikuVa3|o3-PvD{#MB4<uOUCc3wE%-x5xfdJ@qOIj5K`u
zf3?~@zQz2t{qrA!lUIlCR4=Cy$mq&bD%{Pd^41@aUhxV>?as4H6&;6YgCN>c1ZXJj
zLIA-vcdHB5(mT4B!A7l+hbhME;yio^dx%gnM0Xdetz)>+R6r5LJ^(5*pAo2>)1%C3
z7jN8iL<-O?to_YtcOt}su#{)!HtP)ZH=Ap9`?Q^ON*sRC1NRxaPh^#>h_eUnmg{QV
zn;qSP%!|vdiFRiPBEZEBd`^lwba<Kq6geaJ@)x<gbCb`$yZK{-pQVE)QM(c)6`t4q
znDC0+r)POh+`g9q<tq{)D_McCgKa}HtxjvI+@g?Dwk9X=CyCRyZ?bON{mPWC_-rQs
jk9PBab)Bh?pRjD2pDUQX3N8N$PoWg$)MOi_EyDf>pAiZ&

diff --git a/apps/desktop/src-tauri/icons/128x128@2x.png b/apps/desktop/src-tauri/icons/128x128@2x.png
index 9b3b288c514a934e2b6875403109d335d83eb173..875659f3a9052be7e013944cd6a0204635382bdc 100644
GIT binary patch
literal 71045
zcma%iWm6nX(=P1d?(XjHx=3&jmf#TF-C;L)g1bxbpuycOcyM=jci3}3RqqctpJux1
zs+pdyo@trxC=E4vbQBU47#J9IMFm+c7#P_9rm!$b2>%U+Ze>>gqZMVPw0*MAI^kQs
zEqXG%Tn6T=ZCjpnP1recH>6u8WRS0#rFZmn^q`IpL?!wDg<~)gQ#?@Z$r$(pv{G;w
zZc?dZv$89fnh4B5Q72z|4YWTG{QcW9UL4ne-IFq~*#C8-O{ett<geiOQ<I*I-Er3g
zA@^+INiyqL-r@gmvUGtvoszk7((#J{iqhoIKn~8v{=h%#TmP;0v?&Y+$Hyn2>*XlY
zeVK}g$ol-TJBx}bz8AF9mhlqx_2HFwxLI-!_3h(-d(&g`T=ZZLF!)|ezHO;HUP6=F
zgZv(Tk2M?m5OBPz-u?&ncFT5!v5rk!qdv0~J*hJ2v^2MQ<gZct-I`dvcDK7<6xk)1
za%&l32xAFr9qSzYf9Qma`$+x3`P8av6uDKb7qiwNd911oB4a(g5FqCbbJw?6UW~2r
z>qJpLJTiGx8lq0mF)wP%>ir?t$eVOsgJv{~9`aSI3ttAHPr+_9P>3D#x?@%OkZX&A
zOaJJW;b*^K&FYFmXe9lXGIq;N<t-vNldg&VMIZw5|KTxsNS7_nUVH^V>viMVS(&N3
zdOF=y@`qd;Jq>v=SuW!{A!{jlpD#;<uSYfCr6?tW`_lUC{kY@)<I6ILsGsq(#@oF6
zEz=XN@jpt;A0Lr<kE{Xc)0e8ND%mq~NrQLj7j1$LE6Kn3m@R1#sEjCS)b`pOMaU?b
zE=cZ%hL3}2Zi)VrhhO$KY=;BpKkk4{_MeIEX72e6&X0rBRb6CD+oHwhnRJ@T<LnG>
z+Y<X6K`qB*FDKHc`r__Dk8Gt*4<4&3{viaG4F>OXb*If7CSo5a79eO)VTUO2RLgVn
z6Ta9@E59K5z{g{bh;^_Xg*92v*wRyR@)73b>O$Pl4=<|b<C&=KiF6|45ZLbIXgx80
z?lL9eRv{4s(YEtt+F8klU}$va!qms4=HrKCMm1%1ro4zJ690h?Y!*t^<T9VGe!bbF
zxlx%pRW=zI2@7Qg_u?W8abB;>Z=vR_LhS0J*v=?Nsb*VSbW#YMwr)0F6mO71>Q)2o
zH*-Fm%4>W;sU#6CCGqiH*2AmYBy{tn+Dk<)W<VG!G`CeL-wxYrJ@^4Fo~rbJ)RSm_
z5R84id>;hvK)N%(WIE-sAQbUyjQH<3w4Qr68O>`yH_oVbNFkLX*&rVSXm0i&>~jv9
z?(MzE#9SWGF?BDW`+f#)l-{@w!FE()upHvQptLg}%r%-AZF*lHkgqz~61dAa6@8*6
zQ>R+Ar+X*S1TxKmKNP6-%9Kl|y_y}aYL9<UOjK-YxJte-h6J|-U%r?Go9|RtP-OY-
z_53u#QJ~Im7<zse<yey73R+!mZpxfte`@1G%Kvsjr$yHXk<4t->ue)Ce=WS-2zGF}
zY&#wd^U{^b7FLt^pLnva5ec*TlZ_wGQs?zdZ--V-T~82nWUn|psk~7dBH&)+U^d|?
z@&Kdqs6^<a8et5Hd<dCQ-MhcB9oi}lp?ATeTum2wA@76NYnI;XoBo{QV?WIlGOjW8
zST+W4>Vn&j9)wOd0fN}V3eA)xmPiS8?l^Vm<o*{amoEJg65>Klb%&#yZ)_6Jc?B`3
zqWC-+pO1xR;eCjSgM(fEPErTXcGWMg<2Wu~jn*zJ1?og^ukV12PzK&XYo!Gdd<cx-
zH{Gp2Mt~{2VXCB{k!(a_9|bLlVKGt1114w8#vLLd|0b8mym+&^F*L+@(qb1HM046l
z(w&#&^XWNUQaD)8_BO1>nNbOq`4$M~MT78wX{Zojh^5A0T7x8gPTLVO54FACOMgai
zbS`-aPkO-T250|;F=iN&)NVQX1-UyxoZN8n7ixMj*Y02P945<X*P;4Sn&5}S!9N5r
zEvf#ay_k=%brm_p>q|J8F|Us+Q1HW3VN?DDFMoA({T^st0cqU#gVq#Z8t9R9?opOX
zyxxwnva<Xf-K+><R+5&s4RaG_G#2-{ZLcO<zT$0um+rhkf9@J3EVw;|<wiR~35|UA
zXa9|rD~E$=K4BUA`mlN3zb9$p-F^5si^8zuGL}h6H9`if#D#%WXcxv9VMtQHWv5Rn
z@E+Jc@}y@JEk~s2JpSq0E6O8Bjz}Te0RiC^{1s`=I)6sCkeVt21wguJd!~NN#8Ek9
z`hhj`9gHQ6v?)a*qh{R5>a%ZhP*DgyW|f@1MC=c4gVIWBI4^WFs!>@`bFoUXs$gL5
zJC(29ET*YB_#CnZSAC^iqIeqhEM`)b7OjAd{eXqR#Cpf7Ln}g!Z*?s)`*IObOdBja
zY<BU;`PvsL`jQqW|M))IyIgLkiyVoezH{e+V6BhC>AFja#IeD{;uPRD+@=>syPGy5
zho|Vh^yxX}J8bvh_nuVp9(v2IP=b@c%Xl&Hw~O?!djXJBJ>=Gjd7*&m-sOAdz1PzC
zSVT}45_LeCZ0~*GTpR@|<$I%ga@W%y<njG@d+Ke;&5{27(FHKH7e>#TQD}&^=R25_
zc7eh1(sQBALhAI^+G4!C2UnhqwU15J4D4aCsRV+EVKT0{L6WF+h~uxjPGCF1?LkJa
z_bZ2|n&1@{@mrV9XOE6Y#yqsVw}I=Fj3L3?;o~se{|pr8aVGTb-lFBaC-%Pilf`bk
zC4Y30=+Unm7FgHRAvffuPMNJAI9SYEu_d}w<crhXTTE1(;6zloPt3vJ_~X^Vh4SEu
zD%ufDHX3qDu*=O5*JsRFJvsk})~n;qH<#ns2#mm;$H$-@^s)OBs2M}N=i|hm-(p{v
zayNr!n@nfhCyfPNwlDMsm!4VHJ$`iM9RMPCkUX4dCjbCH9O>xg;rz!Ul&U<KIVq}~
zQY)rVQDpqVt3=`=GuD;YuyE)TW6J9|?!3#?==I~J^Eq@F_wSzwy~MDuM1wgUTOJv-
z|5Ls?8>n!Fyz6U0)v1#%u6?z}gznjBV#sI(j5DhStD<2OZc7(ZnRZ#k=ddX?`y&3@
zKO*IzUJ)2U#8yYp4tWR(FFGVeI0pS(<_dvSLuStE7UoW-6esqO>gxvO#dAzIYvBGz
z`PAF>_EhJ^)0+yNW9LV=yUK%V^3YwI^6=j8W=GO&pW)|2?Kk%t_uA**UbCdiYuY|q
zaQKmLLJjq!MBPLYJzOo%&Up*pup+4Mc&Cr~;;Ug;0DDYS!?2%Z3-F6m36ho(3Eu)u
zRM$!=Y_~GrRmlv{E;EPMA|6UGp%V@k)lsv1|2ypWArp)yOw6Bp<V!rhfwivh_lo=~
zfnU6)A5nT%3pCl04O^AB+GyfSKy-~SJv=Thx<F)MICwo&IB6;ua3b&v6N;fEo68qt
zi-P@88|oo_`@BR8l;1pnB79KGv@Oc;7`5>R;ko}JBFdw<K=7vX`TM~9@L>t9IR(po
zpBmNA8sAMqJxs%US_37~54V2ZsdZnD+Q8=Mp(fD;-uT<byP_MwbUx;qS;&nAmb41Y
z5ilNDbRq<ETZV4aiP@t`m4P_JBCCbifGYH^k&I6jwmYD~qBf^R`$c5!Ax;7v%9>}l
zdx1z0xA6t~v=FusaH>rW3grBsw?c3A1|RI`N>t<Pb^DuisL835-7a)genaXQAGB>4
z^HpuD!w9E26@N#zj}YZ?=xd;#n#??38bAS_%yGw04FHdLG=?m!kL@!{#dU!!Y>=e!
zQ<XpUB7|fL_L(1aLV9Ni8+%IgMTCsvt*V<N@Hk-?dQ)BcvG0k>s(kF7i2N<wbN&dw
zxyx@BKhO8v`Eha45R2)Hn^E~^J!a;{E2?z>)y?#`j({d#P%`_8`j*K?BA84;5w;8d
zNZ3XN)-SvlRK_B^f{@4%F9*T_mWONcNp49AQ79;C+ZX=|^LrPEYGQUlw<C<(ORwkE
zaX?Eyl{?7dc#Xhm@z;lIn$8;QH-nyqX;m8?+Y5fI+7LDcyc)!tLmR$Z0HGtI6BAGo
z;3IAJ#okk0MkWmOt6Uc`6hX_9)f%>edRhgxwEX%Ww3QOr<H9`{J!)a=3q&Bul@bv_
z-LBqeVl4t?(zzfmz>|KAsn0vVokO303$;F9Zgw8lUmE_dDkG#pwbX1>kJ)JR(p$+E
zb7sayHKsQDE7hKW=LFdH2UEge2$NIBKU6Tm{=y`A$C`Ux+(Qa4(C(9~`FnMbZ1HxC
zB5N2H`xPYmJ(7m1$N+6wDW8Pd<1+vqeLxt5Nv$S_b^M^XwKewqpPH*Z_wx<9ZA6N)
zY(9l~hNPWuG@Ya0>sAK(0KzK3ThcMpgiB56Eq?$)QPONM@-W_w;6a2>@-d-_Cakbj
z6C;$NIMc`p=WuV@yDp!1d&%bTVfPf62OYHJs=AQ(Po&BqVnw_|wq5xil2O|aRmcp%
zyThk~Z!i8qpso3^P2UHT4WaJ3>>yFbcuN@Go9Wkw_2!F13TVAm?Jkeb<7-Otuj60q
zZumK-+=!Z!GJCfm4e-MlmN9X>Cx|cKQnK_7fZY%aBaT|eOjU4X5@y2*jA7BRhnXO<
zvDLWzyhxv&3T$|jW&gdmh0IJTETP?UIDNFW`+2xaBunfb-@SzM@-8oym%fKNFx_tX
z5n(U=wnSY;mm_e#wSB|Txi~0ZDW=a7C(Isy#W%`v6|#y5HndYRKZ%x10zg}ebSes_
z?NA5q+To&s@oy1@)a1xMI3ukfdPc6~*&|j!^S$uW7PBn#-pr4Xj|Z~vGp=Pg)R!_W
z759xw+btA*<%oU2?ho~1PO<hUh`0E20;Pk1!ON;BEJz8mUU+!f)lz%fNjltNB-$jp
z6aYIn!m&P%KGbCs!GlbT@x}y?wU6TQ2eYpR#%Wmyh6BEgEfR(wbD$p70mGL@b;5t-
zhg3N*M+L4%ZZX4X`=X)jE_F9oAbku8#GuHu-F6Awt{8inrlfF`cxd&@x+$35{hvy>
z?s{jFF?0w*AFoXxr}DfnL{F4bL*TgG(u78gN~dq&7n})w#+Wpe_;8eGi_x|y?Ry}<
zwak=hqnRBMKlxMbk8m=}xWE(t%0Op&0pObyZXzx`Aa~T!{X1kKW&kweM}4@E7(Wwf
zM<EHp4G@cJmTQF~^Tn;<U%WQPB}+Vw7nnRds|Ov#AvwIM5qXCc|Ej0%_PZTgTVkEM
zB!woRE?}PNdqxdqR%BcGiW}<KE3G?8C#JEafVJSS#tsgW3(DE38YI6U{PNA0z^r5g
zHVO><2sg%=)<IMo({tyQa$B?r412}gbICWB6e`SpO|saYrOd@tALm=KUIAOje%?7!
z@{Tz)c}?2=&<XbKt!~yUmeh*GDs+K_yiK6!$eTJO^%yL|02Q0Nyh3}(v0WB_$Pw9n
zlH!VGez8B2ot`Fxg?xK-Dei?8+X4FQ!GR?(%l7!a&=l5m<6S~ilcg5Z=)?O$u-<t=
zW;j@LiL^j<;zwFWjo^!)|2}tLKli=n`t9TdKkpq%#CK*o?*nr4=%epa)+>euP24}(
zo?kk#?0Y+RamU3t6Qgw+?lHKdVo75wBmL5cL$T~R1%88-b(;Q%Go6h{KnO{}(pP|3
z5~>|ZF9Po8UvF-b9uY6<@1GIXj;w>8W&JnTQDf|G0y=wVsqd#^d5L?NeTkBYSvwBS
zX?I33vzvF>=kps_Y)bx&UsC;wldFJBUPS8fB<IS7`7_@=hP*`#AK>w+Z~;J)Ah#4w
zqY*#0*T4v*0>yKA&`b!!Y&-c<GWmdl)e1EL)#ph|=SoQOf9>d|jbXySB7zHqM`pN^
z^?_iwJ3JQb(Q6zw@!S2QUXy3@?Iih!k2#ae=QWdJWbyKkCN;3hpNowOEtG+ag2uzO
zjqdwPjwNBYjp{r~+lQ*ycONSP>5}+B%X|&E8+@<}gfG--LW+$;x`q$(jF;}c#b+ej
z7;w`Ye2OXYs*-&cM-k9pe=iSh+;FOxO?hAR&t9N1m6H;0Y}s0NnL=OGxf`Th`m?Wd
zFYT%`tzdEN<f754NXrH@$PcKY-Bsr|_s9M`YbS>q5Qf&Rn$!tO$9kC}Bf_;kwr8R9
z1dQw;p&oU3j3VGz#2ZqEqIkEH3?}w*fKme3lY$U`9{Zt9$!Vm+qp*Xj%{`3UzLvQD
zMrbnH%DW|vY5SPi;<Sjm>x>J0agJnvs#1b|X}!pS#{xA{oN&%PN<1u$&J9Xl8eKzH
zoSQb?{?^0^A~vJF{vD_B;0@in3+o`_#$Uy%67lGS*T#+fjmjs^XZ5yMBf*Qa=3RNc
z7g816`mlBLFYL_sNXS#-k?>HcY8Vo;Y;B%iiZkf__|Ww<!|7<`{kd~4IJG-*K&#S=
z+e0*84%S+0E0w=zMZ4~rl%fNqj1)i*u##5YB41%9dMea1ykBeJnKLSehsKUbdla%2
zkOMV;>k!%N#KGx)?IAQk8U8zoQ~vT@yZF8O>zx1#w}IyGWi5qRn3EQ%J@GKU2QII_
zzP*zs!lgku-TR$_HJgFN;*_p%#z$M~p>nazyx4&HvBte_%8t`>Oin$?fT>Fk0=u7q
zQKEbpvLrT|{x!&0E1T882>}gtuqEJ)EPtCZ`1Y6@YA>If_u+RN@}Ff_-n}`qu5oRn
zENuib?f;lOcxz3oo^UpX?o<qu>~bCmU}6;MNwj!Qpl>f7g$2>76;Y%fwSSR{Mm5#n
z3il)-J$`Ba?4CTv0vo`N@F2)f>iQG?>*q)Ha_!YQ6PLTgvD}s5Gqg&e0w^i?3@#F9
zQ;9D#K{qCTB@&S5Xv-FVV2pxx__+ZQsNH$*Vg)=YWyNM^A}7~TIH1bLQe>+=X*>V;
z)a~c=G&)-BZPN6T%?^i0bnCwzGRaLpT8EczP*xi3dNkQADXiD|3VCFMXAz92Vv-iL
zIPxMDp}~$PY9p4yJuEnp7BIXoZy#-Wt#y)E`B-FCuViZ&c}kgw|1UFmfI)TmymK<c
z3jHW`el76d@Vi*WykIhRp?!ZFOc<Dq4z}=x6I|~$o9F)+SgFv^i^2oq00m(u{UCD0
zOP#Pn21qA+*Mnr5c!)0E05Ri576(?HpZqIPR#?V)c+bnVK2D77mXcF-Fm|{@Q6Pu0
z2su&~2jDPCPxmJh>}yo2eH+EUcEQA+jTn>3amfv#yGT67JG$8*Tw9{Qsx|8@HP6MU
zeT&I8f##2y?t)3rfu(BTSZ&)Dt(~VcrMKqKChgB%oKq8G?@=Ymg%(PT7)gFl6Oj!w
zF|x<_@~w_0<YM|N5-%VuvBIu^+3o#udh`2#ubu}&6XYPPt^SRrt<=#c%(uNfhrGby
zcCSyX*;T>+^v>M7pks7s{}}VK&=B_7A8Uxa>}JFHn;EJUT7M}FacV3v|6@ZvTPpe^
z17KGUX6!GmeA$5W$*<Pt)h^S#Q_nZILuQFdF6=g?!AbxxA*Zvw7S(|gu7`6}KyD22
z=_<cA7FbXU9{9ncM-qK(*u=~%;}~~^Q93SGM)_*%LY7BOig4wh%f7NTci*!az9$|2
z&U!z6$QA$N$S(@H%qJU()n@eqyjoeGnmCEwHz9u5E;#GF%cioHOe!L8&4E74EE*MQ
zO1uob2ZkMHB0?8u$Kp2ar{8&ppcApPld#|9KcT5Ot<j|HPP~#%QX+A#)%ne~)cf7M
z`V*9p+^<P2b2@+Q$?ku5%o6OXUY;AJUkTj*3fXxE>BBWSAaIQF#^eBv9iVR?L@hN^
z<!y4}^t*)FLyUOyxKblxEpQ`RL8HO=-%>x4baNNJD+7w*w8jXjNEr~P)zH%QWBB_B
zBni6`OH}4=>Gu@!`u==iH|);G-wGeep((-`5xFTz{g&`6J~zJGJ)Ik@kz{REGJ5Zk
z-PG^d@9{o@JIXF6qml_Kx?amsmk<r!Iu<>F5E)f9OlCA${mM7s5Yy?|07CpXrHV`L
z`@7{ZuEwvc;$|0Mqx}k31sz6}w;5+BNfND1bcc!zZ%;0}y}Ew}9Ue#$-FS7G55EX5
z;Q9oe+3j)SmYpGFa&Wc5wp5n+hUeJ@wrR3_Gzz$w7*$v)7iJ(eX!Xiv6~(g<@J#qY
z%ejuftCH5;ZF;~hwUu#gZE7-rczFYUmXl5Ahkv03=&ppeBM1DccGXj&GcWsI!!1^J
zwbsM*YXL5MSqx9p>90K>EdbBw0i=x!Juq3pF}lq(!d>)h4)|T8;WdIBP`a$UAf;cq
zINSMmj#B*oIa9?_n8vO)mS48Az<@$qTczttUqXn0^1Xd`g4X@5+4}c~vv0N+1~`f*
zwkOl{4&PqjH6C)QMBHjnLtvL8c!&C4{NweV4T$iT739(*dYCq~adY5zk`kgZjO3+=
zW{4PyfmI1RS@2iy$3>snKsPm*Goq*P+gpKjf5{16l?8oK)XTSAJmN4sWc(h!62>9{
zlZi_QMD!dUaCX>1CAFh+`N|NoY{C|EpRPfLoq;REm9uJCMATa$91BFwm&m6nnCR~f
z+@1<DRkgV4{Ngbtewnd%W;wKNb7`aF;>F#mjr#E<n1bmM>YQRYRm>>S`gl!1fH_qC
znayP)#EPx6DWq5!F^)_pT{Z8++4U_)G=277sEQ2a#f^sd(t#fKu_`Z6q(tM|_|<LE
z#2ABfNvzf^sr{M8ee-hP%;PBhW^tX5iX&)q*}Aj%0-xc#M&q_qDp6~ObOj6ppI5XE
zo=x~CR66PHP=LfHTyD9o%Y^!3kR42WI!*A*{_9VDh2GeFMqqxfXc`;=)i@Y5idJUX
zLk_D-4oBx`#shnShSZP(V*O4ND^*c^U7ku!t{Kj)HHRbz7Vj@qu-}bG{d5!$gL<Q%
zpCD6|04$|=b$*RGzek-~zaBart$AKmDrf34V08H<F6#cR;GqYCm<eHdq|c<ts*7D3
zq(%Hz>uhPeDIH*Q`FKYgkU>_O2CQ9NdNFld4ZrR?>It{|%=lGn50_TvCfqx^Lb=m@
z<1-sVAB@h9f7y}yzos8;Pq(WAU3JD6n_CgKq!(WiX`8XzbwKy_Drzt?eRFT$hW%H1
zx^*D5-`*1B__4EJKCi|Nui+BBY7aafX7Sqz_`KxifMY%$HkT*vP?_Di5LDIZsQm(y
z>R@B|78D{ql5cLy<<Qug`6Si=xrL9q$SS%p;tW^g(@3>k2;BBLAUbMkL>jmF1~R;4
zq@c6)LtVi*NB_f%KF3QQ_9eogn)?0Xd8^Or!((|tI~N3aYoTN50<iJMZkv#7!{}0I
zcZzPvQ>^t2lu$^G6)_(BpO-Ibu+#1!xSfSD<t$?NL8_GA`!#DpcF~Bt_4W7G5AT_G
zo|_*}k4}%zSrJMnHxU9=UG!wc!kg&3NEa<Xx3l2CYf}9ZPSea+zww+%e(*o-5oaY)
z=36GTJ!scBAa%XmAS(S4d0NB#y@GH4$H%V7rrguUWz1);aZnP%H%Z=Nu#)XS?p~v(
zymAOP>?bi`j4tW#d4z+nB+zL9hO4!-=`PkZk^9x%G}GP=(SRYc$epS<F3QN<C#}-x
zUiP=ScJBp2-O1;3ch<!X6{b$jqxT2-hcDw}&zur3F6c4OM6t;(s~EpgIdUZ~@(W@E
zht?idUZB#$w!1JR@yy>Hh_lJMOg(mny}Ei)$%6+7Kd>+xZO%cd0gvG(xBXcQjzOEM
z7J5((lVYlo@HXXo)z{PD8W7icS5FqwXv;&_y~QFz#iC)DTyjg>*=X-6WJV-E2RAZ;
zuZSSs9_XLd17z)iWD0yGaCrLu*-h?M*pg5qdLwH@HJ^fdcPL#kKSBg%sKu9Nx(=3?
zM+5Q8xClJ5(9is6@CO666!{EZ{$Zp|WqNL&5?0kpf$q;_<j@|zV>E@RDq0fv3i@0M
z3W#AkSicg~9FV_H%$OfY#|k(d`q4Y}ap;~Y`eX5JwKYV~<RM1{R>W!tH;zJr?9(u&
zf7eJ_a^>riy9R>1z4E<=Iwkj`$SmxCzjO^QFmjE$5Utm&x3Q0lU#nwBn>rwt@R-<+
zY_Nwets;%KmulPPQ%(Q2ee>B%yEj_r^W>OrUa%8)9wFmwcva?*_v(c^iyO!Udad)G
z=D5;wkzz(vT>U`Lq6bWI#G`{h!ME$iPLSW0#a(Jg8y9Hc513F0j@Vh9Z9hbsy6=XC
z5k2mNe{NZ~?zXm`UPaCiHqfX|qStt&VgOBxsgVIRjd1rVxY3Ee<bpzA`UJS<XPyqR
z(&;;;<V|0ZT)w4*Sj&Y|AIgI*SrEnY&t;m)6}D-Or<b}sr{9lFHi(@F1UCXFuTreL
z<8eo@-cvmObj|6v9`^9Uo8ZeOHQ>u)QZVP2q+V8*Dw|yfPLY)!bHzuk3_U6DgF1@c
zZYkG2dfQf~pnu$OnV$M+6aGrzL?_3SQm-?o6e$yRy%;`5e4OatLLMiKTHk-}%QrVP
zi8Yu^1ezmHApUkc&Un7NO5j4d_ZD50+*^AXrhWeDyxjDxI-$_3Zj=w@ftY<=rH8ls
zgr2ET>b0q)aNn75t2_QiYaX|Kk;S(G@Flxvz8Ay*M`yqS4Gxu+7}D=8g5|nP#eLTd
zo7H+QCdNd7vYh6-+ym6~hPcc)fV=d+)>bYK`=IWkKLB5(o(R6H1u?F4U{f?O&K6ei
zWcbT4+{`GAM>%pYuKWN{Az^&zrcQZbXGC;md-H9+5!3m^BvY*RZEn1IcDJw|eHHuU
zqi^`~MaySGwdUOZm(gG+;!pVf$)H-*(8yVZl~?GV&ldv4sl2;PGBV~h-Ig~_C&|l7
zZ)4~y?fu(IkDeO{C773Q5)uyyEeT(eplT&$sqDKS$}dW4z@*d}rufQs7T6Ng9|08e
zruvU1t4qJ4`;08Yud@?`y0QF(J1!Rwl;mzTA6cm0Z>Bm=g<(yxnyn!79RZSh+;n$v
zTMe}vNNK;0=Nl!@hc=ey)U>&<=Ox%*Bm2N00h9K@ta9dG$vUIoFVS^9v6^@Jp($vS
z;76DH%G>A?ERr5*`i5Lj1`Y=KK2ar)6sd*67TE@_D}DtikOH?s03#DSu$_YE9|ub)
zSzPO92Tx>(fI_`B^EdrY`V(??FV*vGchKDXQE9HkQ{`)%C?N^&b+eyyeO??s1ES#J
zMy<;(x`lpjl*^$-eZBllTxFi~crL+@E-1zD*d**-&=qZ9;D&H(y>n|r$9d=Cng&JZ
z&f$*<Q@0-Vb?V5quQm>0$+$&~_TjdkMpEmj4S8TEHmO3)>bwxQLRl$>w#?ri)Ugr|
zrGKx2UwaBK{n%cXps(kge83lU!s_m7&dwd>Lx({5&KhWCey$wTg-h*=4!~HFtBUX7
zF9r}?2QY6e@z9Mu-&i(HExsf6DMi{Dn|=>%cy~}>Km!l>G!VZw-oh9zy6=^`th>TI
zur}^6;Zhy;f{{hZ&C#)*^PKyr3kj)cy>Gw<(=KiRHH<5<L=NDMFm=>mOD9YRJr<D*
zxRd}QBhSwfDAxPCl_9%VL>6Q*kWgjNf)1M;a@72>m)n;{5pb6DdQ~9ECO|Mt$g`(2
z7*p}%x>d5ev*k|_<y%GAfycSZnWU;R_{^M`<-vD#&8TKMb@S<U(NL)6_{96c?A~)9
zOKMqN94ECBWC6b4ZZy`FPNoN0?k3L-7%ECfmce3kNb}>(434N)lxO`6nCVlNEtHJ%
za7xa-4U6u^$rk^j#Q8SUgx)NG$ddKuhezE#*n46C4v^$Z(pVoynXg=tkrCR1<2llF
z*JsGA{)3JCF8r<wcZdCV*yV<ay%a~vUDx!)ze+`$ka6+p+gdXDQn2;o-z{`}10!cS
z2{h~8x5?Z%JgqP*q$tW|hZ{ajx&noMZ%lBU(w3ue)OiTX&p$oDs1RjJ7Bim>$l@VL
zL^TLj8^>kU6Z@m)ec<9{M(K{^ahmjFM+zD!`Hz8q(>ZA}&qmA};B(=P<yrHcHv!5w
z4#Tr+Vqhp3q;nna@1192?0uhAyb`qfQo`$&nm0qoGEq?~tFBD_ZBjv{u&-_=S<?Q*
zM({zJjRO8Rb!}0+8nci)`_UkspPgOL`(nh)`_!en3n(yXJ!+_4zRNe1htQ$d<TFtZ
z>!VX<i{-c7msLFKkB!=pzl*4M&Hw`3t=3ezJ(wu#qs|}Eo3l!yjLUSqFJ)+4o?^nV
z#bqYy*aj>#Z|N(WO;C}?u^GQYz?{X=U3)GYSQ)(WYAs;h*w1`l>a8L4T~>sC7eKK^
zQ1DID-HIv@J>tRHhtG~ZA3)8?V$&fZe~ZwgSIYODIR=$No5(mefm48LZ8{mi^C`1v
z6qStZr*2;!v{RH7vEmWBgnN$(ts(3KwwcpdgS-C=ai+K1yIRWM+C-td!EJk^tigWs
zzYdGT_~xoLSmW(5G9SzpM=ivWjzOO(PVuO}QS$wB=(p(Eaiz(Y$%`zAg>_Oc1HKl$
zl-3~j8p#`tGt34DNUuM(-^T1JZ;J7Jp*Lw(#}ILTn_20yuUT$At}>%lH9|vD*<j%I
z5dh8BBc5a~*D-$z_5uuDeHIXKH=D&mBaX`#4oX@eg(n9bIymQ@2BOT2zm}Hk{kUQz
z^|87l2Oh%aS0|auOE(~n3TUZLhxi(|d#Qi3gbBPvR%|W2%ZJ-0fQKywsr76D_Ta=!
z^0(~E10gx^5W(5hUji<}l|xUOF-G3VXrbIn&jg00=t2z}qB@E={hVzrmsi(Ei_o2o
znaYp8{VDCsmO~HynQL=0&Yw6`Kl{2yT4$~~^?92NQzA-@Iy>?Wm9BMY6xq|xWbpzb
zr74);uwe0PgnNv*!wqs^f1@8A!@ZcIH1C(IZ*E?G+=}N0{Jy?xx1Jf^;Qh=<Hzsx}
zC>S)ec*}LP{(?x`+q!tRbhBbbJ0FyY$iP8Jv;j*|Eo=x>zx+3orEmL*U$XS!n~(Ms
z?s%?v2P{m=Tp!KLL6^fc-*TEILiB-sd9nuFhihyuaR9;ba%jxIdWb<$w}pXR`cyLB
zf_g1({$ZUl1S0j}A42roYU&kq>0Z)EmwyAeNk}~y8o(qVGvtC>E5^_M$tMsnIJl*R
z{2oSTn6{AAu#JRy{;YqID>Me}HeN-8Zc%1=tL>?)s5Iv0LXAaW|KXylm*VVLZo}~W
zu;DEq9{v>wy@vXGZ`ahckN2KLiP<#o_vjO)GHUIk+33{_XtB#<r4W2G0qr_~<+TMt
zi>E!(Xr9`=My_)v8=8rEL1JIl;y8^Oz4yzl>keNRdXoPnL$-#Rb@qh212zu+3%50q
zXe5WO1~GJvOi!Nr(SQAOTd&#C=G|H}J0ia2Q5N+<#N@?sWZxv;#{cRa?x!-E7dT}i
zOgqA)oQ!qFgT)i%1hgWCJd^sdO#+rOnQ^CQ@NnduD(y*2&`ce`*{F{Q6PLEEgzs70
zfIgxne2CKzfhX~5_zwz{OEwtM7ciqBijWTE>9nDCK%V}vZ?W1#8xE194>u~Hzm@QJ
zr+nJJ<ht*zURLX}yWYxek?or}w?-fd@%va4Tz<bhS$4{1lLef`VjRM=GJ|sOAZdi#
z>Ow4wgOG{EE$isSTJ3IW{Vi4lWxFJpf!Po+XeCpG$hY>zBybP)Q^(^5lQ5G+`*u&?
zpJg_=4y>caylx-s?w0GnKLwzsopasvWyRP^t47)PC{%i|xfOtjlgxxWeLz%U%7ZF{
zDf-YiSc13um7KdZvSW2OIJ7<N9cNlzQV;d;X?Lg^^7JagI1ik`SE5x0W61K$Kkgu<
z*Dpm=T`CK>&6cn^f`L=V-C#Bi#p(5fPd?yX<cvp{6x^0Fn6=EL7JuUcO~fY2BJO~^
zp?n}-s2m2e*aZsF=r7*LBWvjKZdm){CX_JZZWHPuD}x#E_DWP)i(%QpW!xgv^3t5P
zzZUYyzIoq!aof=mmzD!O5?6TY!okaqdh5A**co6y#Mgbls7|;!K@Dc2R5K=R`TK{t
z-m@gmYudMGTOd26XG6SrPY_Ctlsj<feUTCTa7?Hs&OW?pU_wDqBidwfZvUoJQIpK7
zNEf1rnPm)nrwSM*C3z))r;(oxKr4LLzGYpU`}n~=9WX)1dMuaF?%w)XdynRmR`9$4
zoBi$Tp@xkTl&yVB>c{1c)AF9SzW5C_fKmeUws98;DZ9Z3=8}Te(RH}`{Pt||d%_8$
zT8IZVxk=A10d=Ppgk5;ckJ87(xNsU_AxNhXN)7ho-b)IsdM=rP3+vGt3k$m%h92~%
zgp7H2-nKr-OU8F@LL~^h!H2#+r&|V+_n)E14|?LS(|AFTA;Dc2Ab)7WEUb4tr#(VG
zAT?{kW2)~uBaYnnDiCV%GDa%lb=RXFaDdrwx=EOoz-y@4Mgg(5v(4{fh;MTH7twtI
z?{DBAG)M$R{j0dV9(a*ITk8Ba-j<-OjGL5JVMnIyy)?MO3W2zq7GRL27xa=3z6A=H
z{v5yEqkzv=Q{N<FC|#Umh_mgBD}8IZR394qCq{a8oO4q@*)w-TJlrk%vHB0E9s|Pb
zg@Z}2h203Ps|3el_+Ra1ePNr)5#Dm&xfRR=B8BZSmnbNx-U4OynrO#l0Rg{@U9Bts
zw3?U-GrF9iKw4D+sH&#r@N?z`y5@)l58MW`N0`GQ(AOdREO^h0*Tut{C8wd-4{{D8
zvjZ8g)TyqmUpf6XBCqmFpAU_7Rdinqt*!IU#@>Ctn8Hj+`pw>{Smy@u)f@hltPQyI
z&$2#F*@t#L%SbNOob1|<NhxKoYWGKxiFu11ZUj;(#g@iF2T>)HT4luq<EWtrlEe?*
zMy<a6=l51+fy<0@C(4lRd6Gs37t_oz5n%v}t&dPZ^&Qq1amT*Sm=1wD>kP2bpHC&~
z{C)(-!t+zL?QCtUUvs~J#XEyO->wpvA;2VV86OC-(YLT})~Nb#UKNci>PJ;oiXD+4
zSA=EOfw^JpeVKqXI75izq4bVaemq5NQWn4HT-LA^YT##>^TjK4&SsrtRLM2_fP0W*
zqBOL;^Df`V?IX$y^lq_u(FU*bK(QCeUf@%T-NY?*+Vf%e<4yA@U7Gt?NPl^IiI|VD
z-P7GM7`20q7wlZZn>X<|8=NQnuoXdB!SQyUCK1nBJeUy4A&Accs7s8<yMN30cAb~D
z)B5${ar0yZX;`M!-dGRIAjs);NKkuM=n7Ze%%OQ;&x-eRH#AhPQ*n{>{+Qh}ZQd`s
zh4NGIBp`Bp20@mtNF_A6p{J1b!YsXBQ6S#}AxNlg^`CM7(<%0At&o&8S<5WoEb54y
zr1me12(ffrsQ#mMQ}mX59Stqsd;ROT8pxCm7%xl+cWcp>0l&PX)Qmw7S&SSd+tiEN
z#RHwoKMPc4VyXz_R~n(Awl88~pu-qvd5(2ANjTH*^s3C>xN^!A;adfEz4jX-9@KYI
z2Orxzb@|;tA9nb0xn(Cx2Iv~(@blfB^o$um?{6l7#t#_zk0S(Xp=LiK`i6s!3*>W7
z{>U3Lqxyal-O*8HP$wTVBOcyVHc#CA=okFQcv)TL^S1=k(Zt)o9!sURNDtbIW8XB5
zhvDL5YylCNO-wK4hbcL;VwSXBwiNuj{;64CUxp?&I{%#V&ELEo`G-HbYn*dp$)iSi
zJqGO5gL_f4hlxM!BupCam!^aX)NlQ=;u$g#OmnSY-l$j=N4jV97AW~fi?s<fyg|*j
z`ijityyO|9=*EW9!TwY`=*H1eY`N$IH8?z@sIA#ZiZ=&EZe%3@^eV3U#M|JPA9{SR
zZ=T%}XT|~5%<u!=Is{gWu<)VlA?=g?6RBeoK@&9y1+(1~>bRI6D`md_sv$<Co&2Zi
zh|j++e?Dzcl%@dlX=jT!1%u6x{~Z*VbnYf8=6@A&UE#1}4gBb8<@@p@R_um6=5e&{
zY&H!#+jd>Ce>MGFmpjDcol3iy!>-{0U*_%NFzIyKsAVKD!|DYSfXmR9WLDoo|4CK#
zJJjJSpirmV<CMEP8fP3Km)JgnMdb@jF*F<^4?Ud;<W&|d1}!j;FubV@IbFl9l8=a>
zYd5FoWjTbVhGKyf1$nGK1RJrV3KWD8gkk+U9Se>;|4l`Qg#6+@P-)AK#D69`XIV@a
zri|nu)K>)4^8`>p7^*`Dw8gb#TKR8O2@NTHuLq%84?`W5@Nd%cL#kKq90Ctj<N@zj
zj@>V`qSgL;3*N<Mw#r{h%n_&5MwI?_ZpG04UDY+Z@uqzb#CV>#l<Rvd_Ud5c1`~?Z
z6@6q}U1J7(oZ<$1%vKefy21VZLo6xOR(GetYUI=VUqwk>%iW=z65)E2@5FzP%`ady
zz@7sR0k!8&tTs6FFIV`cdQ;l{tD~d((7bZ%{>tXUXs8)V`|yv;$!HjviO+XTiDl4K
zq^yYtYr5Rn7=!*x4tVZ_O&0hJ1`ENL+u3h$)UR@`MTfWCl6!du{v$mK9Oy@CO1SLH
z9Bj2UAzbLAPGtwpP=<Y)HbFD$0SJ|w)hd3=I`F~?@X84sdPJgAw;6~9=V{eLTCf1G
z2gx07?>hf-UNI|uy^c>zD!2QCucY(5snZDUL#hm35<h-6W2$r=oOu>HcWk+B{c7It
zdmF+o&z``!U~0D1Zr_Pr;~`pin;M;0rtJL4+u-be0=oaS3b`6{?YrXhggNNTbDo;R
zJU(H(cp4or2;M?0e6c{JZB4Een^9wW3##ZRGXJ~EgKc{1-&7T7i7$dQ6Y%{{4o*c`
zxRKV9dmo&$-SM?FhCq<0ip;$)V33_ZfjIrsg2Px$V92cf6N8F7*5U9kYBGTiH6I#K
zTt*Oa{-P_)(1>qPj~c+rvzr*>WP+mY>}68F7M_V1YkUd$+meUZx3kWCs;nQnL(l1w
zRPuwwszZ$V_(OCia$|mE%u&x`@-gXTF8&lgHSso`a%S&*)9KVikfMR{-C{Z+EzCE)
z+(6&kt(@T?XS$`gMR#g`z3zWP^?B!PM(>k?CSHTD9IgNQGaV&{Chfv6%F<dcGO3CO
zOWeehPeSl~6@+1OCR+~Q`g{U?ZLd}TGpA|+0)B6ZxsKxA$+@rlUL67MS%gAIJ5=nQ
zzSf)2*JIJokHPO@Bp++Da9cS~h_|oK_Y2cqZDc=$9@Q7)jLTn8N!LZpzpT*w@zToI
zoLzD^y!A3xdM<}gZG29za2|uX!6>q-pf$LheS}NLE{rW%mf^v9X$9j-X`whCy!)R7
z7j9Z3Ad2z_H^)sC^$q-bBQNT%fb-z#u^x)3=a3rW+$!p8VqHf3g1BSTo4Dm+5f~?=
z{H#jczd4*4%xK}xTZ4$@_>)qfDq(-vd`lS_)SeNvr2MB2TfYODDp8xApCqzTp|BVZ
zqlQjju$FdNq|5l=t~!q^Z&dKLXk6X1;_U^sS<t1oikG*-JG-o1iplfr$@VMa9gia^
zSQb}WPZ)mY99IjD9h$khIroOy-F!c~*|M!8zajAU(rsX5xSnSu%9*yif2;I?8S6Rd
z&f&2_x^b~bcquf~c3HnE0_6JV!{xpFssDo=)3E8?`h?~DF$ujqTS(o!2<<FuCcS#O
zAh!~olR0luz|TF|+8k3J^f@(4dlO<VXR4d``NyTyOaQwjfZ1__KCwDxR12w2UcyIc
zBo+3~JqVPQ>uzNlBWMAe$t?Yv!rW(sNZmk=c<~nyc}rUiriB$mRP10*0;b~`i-upS
zA4+|}T#qD@#SIzxM?#JJZ0i%*mBvR0Vmr%@udb2m&p7Ys;e_uQ{JLGieYMOS6$35$
z<I#;ET~*exRb8%ibZf*<Dsd9L1$m^*Q<JPMz~-z&aj9V);Q`Nw#UzP-U(XBN=V(1`
z6l5goF49kfCqF8HF*hY*ijirzm-75!a{<&XiC>Um($sJ&&Zdh(i+iu2c$?S^yr`he
zfsS}`|E23ziJh&3^Z9UXxqg!A*~NsgLJ7a_>VPn^f`c7wN=FN54EBj8)5nmYy~L(n
zc3?r><3`#}wj;C8X3}HJ$m!AsiT{$!xZ63t%c|0TDG^z&jf?zpScxzYdW}Oo6*2RA
zW+w8TTKm6@ch)_$-sisKfieeCI8=pekIoUs4GE2(XjoQ3NIZ>^@4FasJfMns;_KTU
z$WRM`1=tFUgUn4ku`I+}L#fU)yvXid=HjaF48x)u4ZW7#dzWy5;I;4|k`V!{yiuNB
z!6)1kdom1a%#e)mM2nP(i9a`O{6EJk7Wis?j-D++5AW9p?!yF08MhCT4d<B=7`cy<
zK~K{oO%=w?L_ZEHE3$M<9f*H5pf%`%%L_H?(S7FOZ1?E>TGjavWo_-+zK@_Iv>8Ft
zBF;vL5vO@Sf8>lOy_y#t{pjQ0EuK)!RM3kpve87XDEXsRZzDPXPKJICQjx3Hj3*<u
zy+}n1tz-*Tu_<R*w-H!EF;Iwr<(WC(y6LU45&FdXpy*u-lp&5Bz76^6az3G(YKd*-
z6B+TdUYBAQGayfG;1E|}C{GyH0O;9)xb+#2ac3`x${434w19vTLiX*y$chzc41W~?
zhtdz4Mr6{$-ieNcS5}el2P76*^kgHjN4|x;ibItDt7{d(5xqfqya$R7!*FwA@y8g`
zc#0?TefoVv#2Q!8$!gIKVZ;oqn2MFy)SXknl*0_P{c<j8y}!HozA^WfX%e&>hcC@-
z;H|g|(=g`p2i}t}lsBzxU#2Hy3XPCLm?xCcIt_!OjN)Uh;O?JyBks)i0AC_Wa%(b>
zbJY`hhne(Y1hD1|gMi^g1he}>S#h_sDjY;aazMVnI?9~^W4%uHNmW;kpU3{J8C+DI
z!6rl4c&K5=PR07ACNq?i+V^X1Ikg>NgDyTi_1Ip$r7*~b7bf<Iz-G^8xfkewnqcQ8
zp_uvH45s$4*cd)N!MJ+NpEK$Agzx*Zqr5a+G?PDqA5*@oIN@Vl$X!T{VIu@j0>-%t
z2fuM`p(Dd-e|lVgj5H~8wIi+u)x%$=0X|i^u+8byF%{*{FBJ_zO5xqsDvA<+DB}og
zAEi|@8KG^3Y@XnbgG^qW%Nucm)u5-)q=5T_o1=l1ytV_?U*!ZVT`FWn5f&}=)qZ<j
z*wD*voNdU-ws%hC<y*wQ$ANyM&cwr?u1XQu|GKce1HSn-88AKJqdgE}!}q8#{c~FW
zE}<#cl7wTp`1@EZN9}=tB!n?A5N9YqSx_Fx;~SsOaC$r&4a&NZS846o*-QXq7ypyZ
zrDntymFCG{5@i>dsqRRde-&7V$)p@{fgJ_#P{qAGkW*cKo34?epNtL{|4|NQ{;9q?
z#H|tWT^E8KPdK@B2LFB0M|7=oS}Wpfm}<-co<?!^lx-HdjWJj{_!1q!gpA}y$Gz1E
zuX{q$Ek8r&Xv$UMDBJUb9Y$Nt>Z{B(K`9IvB-7y7+dcwQ?89U91F1O4!jUiBFP`I|
z56@kCdBLi#WzIrM3OP$Tv2&e|v51$?(oaY0F;kl!zk<v^_E@)6NUs_sLtS?8Fc8L&
zrQv35Sq88bEr@N!X1i&V4HT5pl2T>Y6k451a{V^&nF!!eie#h(h!p3n@O6K)^JP*e
z3eorSJQdS~3%rax1L%HQ@93$=I9J=M<-|;v9&dZob@Ph%Tp)4X|C?Bolz(@ijaMD^
zSCCpJqiKF`nc<2ST9n`>4h~8lBP8qY4s$8Ss4_Q(zfd5|JsdNPm(jQ?&T`+LZsFag
znb2-jgg=I(gAFy->^}vf7A7Lk>Wz|=MWc|C@D=AQ;!N1FFbXzvC9oEj(~Hu`qeSb4
z2KY6_>JQIJKF4AJ1dejDo!Ocwvok(ItSMJNa#5W<DkfDX0uQc1AIs#&<BKPGU3Mkh
z2EknlBV)`r*25WSTkT>+v&LV`1^?MhwaOIZAmrC}&|v8`W*nE^CC{3zL@LWA{W=3S
z3^Z*i?nN$>!p8WTx-t*BHU5y(mj9K-wP3q-J7oUf-Nb6uiM6fpWNI}+2$26btg=i*
zdx7Oq$CJ-kcS~oYo8}P_Jg!hX2=LqK_Qkn<%s_*Y-vm)fGP&NdV%xco#jA~UN{^!9
z6kE0zYnmir^@SYnVZp)gq4@ehP-ot5#c61nkJ{wc;QE;J<;W2d$sSdkLvtC?;YgIs
zPZtE5ayvth%pmxJ5nP_zLMVrocIBAjt^kyC>xsWXrH!qvn;sok#ie=dyM3qda{-9~
zR~wMg!gE9?`rXpH64s=<8}a`d<Svg!%psuY)?$5r3<-~|UUcVnC!-dY@5+Q{<{>V0
zzX$mP<oj;nZa(q&!REo#5|vdmsj$oG8zO5u&tsPp@bOwBB?{7d_x(6m6hg9Rb_>nL
z{^lHPKNHyIJarbV{<5jK&pU5Ya&5&69Q_gDvDYg?4?@uYmXu^=R;o$OZ6t4|;nQYw
zQ{rr56bWLZpbj|V<K722qjB5H|ISiK!f&t#{5oJ^2DBLGl1q2RN0?m2kBR1MMNwq$
zMcY;+T#Z*lLKhI(27D&64*z&CMa<(m8rF7&TYZ6{4-22|>*_WP-(?GqIb`VC#amyq
zHlCpL^9dFYkYCkNrzB!u3#<&<^!U$ltQU@(-Ttq#JJ(w*_%RRiyY1MdzB6Ag0^{Q>
z<aMsJx!R<{t7<c*Pw9tMf|VnWUv~dv$^E)AD@wgGcdD**CEr(@VQR^e-4`a`z|niL
z{T`iix8m?bYCA1Wlb9J~<?Uj>=A>Bnq6;NY(yb|s$2*KOkC}i|G&GHoI?5s%hwM)R
zw9~X~ecq<v_*F=WKUMStV*LmHTDB3bni0%)W>wV8Ar5#AE{%R~)I-S@i;uX;PO4mB
zMU(X03%@ZFQ{K--SZ0JeZLF8G#pNds$2k#|4V8}1tT2D*l#h?;B^Lt<@=m`en#$xa
z7peS>*RIkvi+a?t^EU`%o%*S$aNSg0!NI9Ir9se@a-O04zTQRbwZm>NrJ=20y*FxU
zzblC-*h#yTw!*(%L~Om^9k_k;{q#huckvzQWRTpTG2ab6+a#<OZV&UM)pOTWwrhz}
z`!f^C)tqknrv$4BnMh?RIWR$<dW4mkR`xf;>|JP{tmm>)mVyqh%zn<qb{~g#(|W3Q
zMO|-#>sS5_2bhH&HzSWtl1>?PIhyMweA8tvOiFP#(~gIvFTqBse|#CyV3}rtBVRX&
z5kOy1I1ydZsT4*>`>q|sL1zpz2)ma@6+9Q9Ut7vPS{2&%8D&JSIMj;LL+Ht|({>Hm
z3x-clV8coIcy~=^;f}8kcCDeqn9oF`tVIP8Enf#NZdk;ErZ%popu^($dzc?5ZuXg)
ziI+n*zMc9r3;qU=9oNkt*uf3y6i+?cZvz{%%rAKYDm~5=^WE21hLl~^KJd|KdviS^
z>W_|9Ei!~?`|@6dW4);bA6?rYA3=0l7FM<lEAHlU7Y3P9@Q3ERJ?KpPjN8w?GY9H@
zy1#KoU)QJcd9HVhAWRuD1``E2lfSC0<I4`j@^cljDZ+FQX<WS>@&XL>%h#w5SN|mE
zhISkO+PA|K1g6x(|NJ??XE;j>NQ?@``Wy={!REPm2H#N324w@H)>lKY&yN<MaAcWY
z^v!JSW)VWDDL+8PXyX*HA%1-cJ|~5aDGgDbbVYMBDrh{m3M?o3PtvBf3Ihc)Ec1@d
z+C-5`VN&}(xhkKjcNIo-X}+<l5aXJngWO1}L0iZvsG;MEkb;h(+8VA46vM9BPkhfR
zw~QaBlDZh=;xF@-he?8bg(=Rau(`r&t7!S6kMHNd{3h9dkiCR}Vxm(A2AY0|x@iVG
zUDf?3CsYPTIY!-@Q42S=p3Fx4=&IlOJIX0(Qjvz5#VZMa&5t;$8eE_sxKCG$lzlQ&
zALQDdl>2WmTI@iQAazAEy8j13K)%0hAyx5Annuqm(b}U#^}$5XKb+{rBTCn*sjkHe
zP3_82w<K=*!z0so{=)f#7d7*`-%n_3PLJ}A%j`MY49q&fW+NxT16j@AqxM6A+G+u^
zuwBOg=Qet_9xQuX1R-)A_)i()P|pBRCI*~21fuxLRMEab>YqzZGUP%ES11~trEY;Q
zHTv={W~={(!-xJQaAc|J%3`6A??ZoO5dGy5^cP1k<c~$=zR@J-xk!~m#fPLW0Nrv9
zR9{}m!91{jSgJKcN%BzrYxv{e{%U1vX5q_K=ihGqKQ(^QiTJ0d0}(H;H2#}M_DXKd
z^Ymb!tA-|XYH(Xw4qh}?8NF=H_}DpXC;LmA))cT|V+G@DOBgKYR6bV>W929HIUkFQ
zt~{~m$@w`Ut1Ch_BPnT1FJ;;lADA5WFg&O+HGdHA{o-fU6NgT?A~*ZX)p+k`$P5!z
zolDe8RiTxpiq?UA^VdOVpK~`9`qb^m&)NDz1vhs-8fhZMq(n0ZRL&9@JQt|ev<h1!
zrERb_O8YaNzK-Z;*3!!~0~K!y=&Jvi`%&~aZx}g@%#m<ak;#Dz=IBys)7LLhrVQXX
z;0I>b;qi|u=oSqnnsG;mTZMwseH0vExL-$)KKbXR#m1fQZtBPWK<ZLiqOwM!a)GP+
zu6Jc{W!@iH)1RNfU}XZM{i`rGID)}aUl@oW38-sAv%tFM&QuQu_wRcgPaK$rmM4C3
zQGM=DoAL4s?hZV2ysR>SZx-Fnzp|s?_sJZ_2YfxY$xVmPF1o|lj+Vx57#|&)*s!J_
zJJ$DM)7moDt}S6`xRgjI-)z-9RbBSw+_W$EJPJ%N3U_H4ZoMTCrN-E@op_ncBzrm0
z(%7?<!gmBV^limYT(cS<3_hmr+;iV8iJblORy_4hw579h<oOq^K%%FcsaUu>YR%tP
z%<GWWXPRQ$a&sAA>@xNYk6%-*ExYpI*6=&vUYG96c!2JLfD8n3SHUm>jm=x-0LlVv
z_rbt{1Oght0Lff``T<d%%<JJPLBS9pd`BZ+kf`)W%9B14J^QIJK0?bE={5)8VJYQ%
zT{Y;|!oI$R*5KwtOG8)qhlj6no&NIzue3Vv`+<-#(lkP?U002;`lygA{{Zjc`<KE!
zGueA~#`s^h4xk&|yD9w1WDMWU3m1byPOn<$s?qZcV)W_(fBgFKfzd4+Ru5w5mO-4g
zsSoSdR503C3SBp^qR_>{f{#N79QXeFB<7c;zub^$CK@rX+ok%JS^R)Y7rW-@$lMyH
z)^<1F5Ic@elGM7MoNwdcqAzdQ^^Pb^@~?Q{x#Hu(`{en}_*i(djP*B`BiW&K1TEu*
zSk<`=#v{Pi0=vpoW>ANRfjR>}J>neto9+ASX$kfW02$w6Z~^`~8NYQ3v>w3PznMxj
zBL#3|$|Znpc<|5oZ&(vl!*ys&utvEE^p&)9sElEvFx{IPiI$b56e7$g!2AMmU;)6r
zuH*f&qbja!7X#5Qmb8{RA(B|5QB_X0*-olPwYVn`d}9)ug@iL%!Ar~me51iXKf34r
zLC4i212P#qJBP8WE6&9AqkZF-t{Y$DZ<-vymUY9}w6-5(gQc*PFC<Fjuu^yA@gu^0
zcuu+V%L>a4piTmn*|rU)>l$OHgTO2<m1$iU*%-$|Q$%--zvlwu-WnnH4w_ow$+^Vc
zz2#N)<z{2sb2Iv%W9I{}i__|NFhD{w=1hv8ja3N8H{-7?uG2{xtg#a4#w~oU9O}Jw
z7Jqh^ePp5^cKny_&WbvjJebKKvhm=abF+g)+|w5f>lq;*=HByOK+yQErU3?v37Gc3
znNDN}KzjiLD!u4^A$WnLP<iy}d1czklXV1|CRj*}h&t-u_zoFwsA;S7cWmIj&f>e7
z`Zzs~7uf-11lMmg_?%x9z8EPuYGl&Wt1b=X=ye0Z=#`U$6Pq?oj$zZ<F>F{pjPcR_
zsN7en3%IJ@l<s0xx(D|tcd@G6dJAZ^88l<StfPNIb*)jpW1C7T+-2=Dwh2Bbl7=w<
zF}9YK9+?xMEZUr_`5hUSM5q#ZyygU#?s$E@878k$E4Td2RQjPm|4wUFEu!g^Mg(oj
z&C`P&G~Tq|>}gWHZCiPE`Y+@4_iPNxT7|~oEk)THd{+vLSBi9ei~${cWi)xZ0gkKS
zx)Rb?Qaf64DM06CK|-1Va6KVClJ%x6z}M1af>T#${CThTd0(?v*88<9&YC%of<Gud
zJ<=~!X-sOrWHO|<4kuhuXw+g|ZN|EuwwWRP%_+PmcZT$7>lj`H2avt-ClhRZuOM7K
zSn#lVb55^+Wl^rab*Q}R(#hd*xoOQ9&YB#-hBZSN9_<fZ-%pxtA(tCM?q3#i<!Bnz
zY8tJOc=@DA(S0WV%Kb2kKW1478#`a<cJ)@)U$_6}pIH5?u8yYJcW0JkS|`8(*-p)o
zTopftgSJlLCVjz0+iz@s`N8==Yv~KWupB+~?01ATi*$h;0D)}Oe(PxQImW=aZ<krA
z9r-oJZ?^hmEj>&BHSA*ZR?AK)fS#Fw%rW$+-*#~W>hRh0-VwY!NxF<Yk~n~LY0Q@t
zj#DT{Yc_r=T|75MF_0K3r0^xd7~c)n{Cua-UCdJQCi5kn`=$YB>;E&+ziQXWK$#bd
zlDcXbw^3`hvD~PtrF!*nD{4HgW&0V0<)>PD?y)u&j>f1~V^NP9?V4F}3jJ-Jg1r*(
zaz4Iq4xp<vXWn?v4dCjLvaeR}^swgU5>~%ruz%Ght41f>4U?;I)}~chvt}q7=<kc9
zCuA52*=P#+_>^#~)x>Qz6~d;K*|tKIS&E)L4I6xqk(%Ed#T~<kF}!ngf>uG-&e$9O
z&=JA2fwFtabe8W}BkH0QR7*Rk#SQfNXSrL}Um7;{Eqt!+p4ie#rlJ>e0vhp3!X<MG
z$8pRy^DGNsHl7vkv<}GB{Q9KzUxxW-c>lc&zs?{K=i+={3u>Aop!;E&E`XGrfJmMM
zWHOSZ-NR;cF)tElaZ>x~nkhin)yR3&0@PSN(nckqr=m~kf9EjRNzUz){o;z(SH!lz
zK7Z4W{u|CaADhR=!*U^?crKLhCerm2NYR#URd*Zh`i8|uZNp-<b^F|61IOnZn3}0$
zes*cOR$ty%l}itYYU#n2Sa>{i77j*oc_l<OYDa`oo?h9)_sIct4YTO4Ef<orUz<xe
z{78R!{JM#WactVK9-B5yV$JH2sIOA0(_7t6gsiuvJ9{Gan^h&-O^qayZ18+D>b4xo
z%<!8vb{pOK*=&$B#%t&E*%6qtGMO*~UZy{uDcM@Dz{o$Z74HTAx)HxKA=VM&?M{me
z;bJ+e%gOPpqQ&aWx^$-cdu{QLzib-v-~2tIzfE;}IZ+7_=@d=YQ5%jOfHj9KDd6YI
zc>X-kpUHl8GXS$?)H(rv!PW_o5|0J@vR?l;>;trL08QOx4k*h+sQ*v=eIsgW%M<>c
z=8<LE0Z8PX^;<#|3p~r5e7Dz2hGv%iO@009hL4^#boLE5U37W4b@kS2lsf*w+1O1~
z>QX`DN)Nv4qTm-$$`7M2FT!<|RGqyxR>i>xP9cQW4Y`suOEW92i>Hn(UwrgP{ilu{
zYhdPh4fFH$<wmpiconl>t)|oW)b#Y8rktONoO-*_uJM5PH|yG*j4ix09m4m)0hkZ7
zlHXX#r|14+S#J5yTeqF(UUcbpY}!5^_Luu3+Je(gq)QS0;B?|Q8x-9&VwycqrCByX
zyp}B5X3>}X@g@Lr#J8!xiOM$Pu-|t;yl#SEyItAW?vz{>)w_=Cn?-Gdn49X@77@<_
z3Q1cpPPD&c(@pio`phrIjT=6<5Pjhb-+sAeTq8|^)KStH8Bg|`Ou(k&op_XycZf!3
zX97B{zs`(6w`FMGF*`MAFW?^J-~2P<0dSXrCGkxuVrGUJ3*bedlF9)h{h3i=V(>YX
z{%Zs|V5A(QZ(U@Z$ahr&bl>Zd-1WOlxcKvzZ@;8+)%n*gLl=TQQ_X-rZ{L;h=y@GT
z>1fqT1?n-d5NbF}1eZ86=Qs$w0L7q;N^uDN{VJIpP|5c5+seH@RNAkpIBB`_t*Ep(
zA6`9oIK2A!p%BLpR&iwiOgOi&_{@r~Jv<*By`v`Po{V#~sg_)+w$ySIhBVXh?XrcJ
zMyBvRb^zv$7^_@%PM^5$fmH*${Hw3OJUaifi8_RI(@4mL#WZNt$>39jEx~Fzq=Utm
zYDzh$x#)SDi#7Btoj2cG<L`~`qW5=Mo!?!xZSIpfi4Ob4Is@}_^KDN(nt_And9q!)
zo##7AlHWcjSx=-R1n!W#dHogj#*@pRkG!ezTKwe9w{ilc|3mA&2)A%NQs6X1H}1DH
zAHREkW-`#$@tHJOch#5a?HjqUPKuwg{|w4+N`cJBbtS<phQLp0-hVCw$Qih_NLiXK
zzz%f-%(?K!aA~#x7d?T|kv4*XCM1vUI+Dp0-{JM*J0&sZzxo&Z-LwDOjpyGGZCZ6+
zb9$*&h|{_$iy#rFMiq!42$wVkY2wm_qLhH>k_4C%WjoXwX<MQmIhbD5(m0L0^qmxi
zU=XEBit?aRXAOtp+1Er$zadq^Y06fu?$6AG=gk~yop=1X=8qoTzl_<#bu7)*X6I{5
z4=l;)uPv+DhiY<R-?EyWZlW56Ve=cXh0M`*5e0p^H~{lu7QD3;KR)-N4eKt)Ew|lN
zzxu6iaCm<joOqgsJ2aw@w#Q1dK~}Nay{S#DU79*ROZWMKJG<*`EpHNJoAYOKc%5`V
zGf12EcFKcHJC7AMtzQ50W(GPFx2(RIJ+lD_&12hAp(m~HJZI-A95mYvIo5xHTs?jy
zNvCQbX*q|lPEuk8ev`~XBrTe?)v^ug7EP*c9aiQ9Iu>g{z#iZ)a{|2@05)sr*#XE;
zlR3iYEe1Jh2~LkXkQo9pO232yNCqQp8!#(RBvGu1x34j|z7D6*MvkxnHqRG2j6?LD
zvKaB+_-8};tv_?~`ERHW_OJJkEL7cW%94UZ)&}JXMMtvus+mc&K(Cbyqo6^J5xVij
zG4*vML53QUa?otKJjU%Dqp_y4^gU8xN>L~$s0_uJm`K9)=SNCkA1mHtu3PTPQaC()
zFuZ;G+4}9r_AFy&{}QH-E-ub3Ej_lZmmaRl#fN5b{QgBff1<9I!*<ll5T~BYimuZP
zNY*dk41g~F0xtNIiGlOovB6g~S8vmSK!Ta)1fmuYx4NsNZTpJbS{-o9MlYIku|`Xm
zvt4FkqCH8=v9h&w3Ynkis$=mV8VABopr=Hjl(u7pwqCY<wvOgzM#Q(#kex{inPCpS
ze`^vByZ*;=^^JgsL>NWxmi0G;_2%4_as9e?%%z`te|IHt_s}|S5g`apEQx|Eh>T=U
zhU;&-bvXehrSCO*BlE?GzghLg1R=AQq>~Y3Pxib{eAZ&@WC_`w3<yYF0A5zYl3%pb
z1FU^W@@7N=qJNW$&#Fp{v2{%l55qHEfETC%jH}PN19HfD^?O$LpZhbfxbTftsFC3K
zBF*~~*g$xtVH>jYP><R&??#c-2o^L;z=4DfjIx&0NQ$wnIsF|`Ehr1Hs>F^2Q<v#0
zZ7^=N9W1pSOfBT$9e|s2l#(Kq`C^LlaEkKkIN3hgR@*L!l`c{F6r-`wtjr$>ubX|g
zcHPvoRh-zrh^fOf&6$O{N9V$YuT4cKzA%UBr|M31siv0OahouS-YmhaDSt7_h3}CA
zFy1`xtQ+a`cKqn-k?X>Rm1V!(?!)XM0`lyhDx*-_*<+UhYrOg@J4`6$VHN(?Zokcb
z#{jr3-?K4U{rpSIl({FN_L(@8xsx5FA^m<%zq7uxO@ZyTrUVVVSblxyLo@g6fPl7L
zXi5OHt(TpRPT`1(ziGqu^~Te4e;@frzq%4Va^(4?fJPjrX#yGqVm2U6){t||Bzc&f
zU>u*R-Me{9Cler7nzaBsY(UcnG%vT~p=`C3)&JdcsM|s{#-H7cQ?i=>ObIp)h+b<h
zr%~_)3wIQTA~cj|5E9KU{@Y$F1%JZp7q|WMWdFIZzvbc|s76UKsJ5ysF_u~~gmDw3
zp4ibU<I2KBRLN<-BI$8RNjpd>Tj0q@?tvOn6GLb+EKbReKog%rkwYMoBRL8xZAhIc
zkx(H^xqGPAeazN`at>(eJ6h&*34%hb3jGPnYtm%>WE!nMH-RqFrxhVwZ21dE8kf)S
zS-kxC;|srf?CDt?KfF?(TAF#_ggo)7Y0Q3kUd|m@N~h}~k-j^fGW~LJ0Om!w7{9!f
zA5*R@CAFmLKKFD9K~5SW35(oksdv_Ex1H@SkkXS4WNWX@Q)Iwi4<^uQ_jQ3mHb~3n
z%O0<n#m5obf@1tfB!SVh2Fq->vURrA$mb|%tLiRC;N&(T7ubA_NyVeC#1DvD=qqlP
ztH#eyqGPo$wB4zlVKPm-b9&ynBuQ0@R4NdmhN3M8P>#Ab0{2Af9=2a+B)GRE$QFKf
zQvEK%(J7ZQa#8nz%@;G9XPh3<e_gKsjT3NtoB%8OQu?10=r00m)-<><XXJrDj~<8q
zO^m<fugML&uldSI>8wkyJMV4PS}Py4;s)r6iKN9De@14?TCLf?Not%Ime}12<OCcO
zFbGUFi%)EsVrMDnJ<6DksU)nxC^OSX#v=|&O3D;S!I>AKNKJE!{NATNR4S!x)5eyT
zFP$3T9iuEFm0m8DK|VoHPEZ)DsL3@tntaV<a_&2ol4;wm9jh1So>{)`#G`Z99eZ*C
z`<^|4Cr?a$et&TAclS2${#qD?`upt!zPBZScE&vE%QS(ElNO$OvWE3rhao)$-RMLa
zo<%iRNVk^fqZ75et-K7JGe0M&tm`Pu&kb0}9Rnkf+xdAHi0L^PbTF(y?sMA=fVuKn
zx}60aDnU~)0fw`VY}(GKT=Q;Bli2i>6`jn$c#w9x<*u2yI$T^iu_dWq`^zEz`S*M8
z3qi}g1yY?z-l~)B70BKe>npSw+&41|*@d3cT)xQ;xD2Ln`8@isJt14UcbAJ&@{{4G
zy=jHaoB(A2Wbm}8#FvD=!|_PI*susFo%UTq|5HqiQGG`<!A2&m!>{_LJ^mr5U*7)N
z;nKECuRQ1N)q2|t+DQ{qx*cU9(__pcxcRJ1@n(QY0|pppX%><g!WZo;;H|~>y))&5
z>87whmBw+IR;L9!>3x)1appivPqN>4HzP6p!LMIx&~npQQd&aaIFNA;auINz)6%<7
zA)ibApc11vo}jdTDA{=V2DRb#9Ob^KA3N+m^^u2O@wva-`ii@bZ~mu8<i~z^C7g@C
zpHAR=>Hw6Ejz?*zNC(D|F^(UZ#o^~l*l?DQu*!@w#gjC)hV8uMEE~vrbhhr#erc(>
zhQ!i40An(43c37Ex94xXNSD2L64Ym+yzQo$Az3PFO^VMpXIpUw^fLRRDKpn?5&+eT
zT9sY!uUmu&0yX({bsYim*j?oPjq7i$hfgj4*FIeIv6cA2y`~PdBpsgOPdM^Yirt|e
z+n&40=lP<Sv|5}aEu$md=--**vtE$@&1P@tJKgudTx?n2Kf^rOwf6M?GeQzM0E+&;
zOR{Fh;OOVn0U$eEJJdoxAF^g3sD$B<Nqke|_nbc2CvN)N!NTV2F4^(6dMnNaQPScX
zgS7!!T*PE#?8q!p!vJWe#_zO9EiWN;G>=q}bEfjLGc08d-ue>bGqlMfIq|c4h}`}(
zPM~us(C_$VvLm3ZKrpVrWkW{N$}&U(NXcn<KqLfO%7s|=;4T6FJ|zpKM3zU}sElj$
zZJxlTzwqktoC^+zx&QRw+v?AxLr<v>-r9<4_N?_w)dAS3EUQn|!+9CCt7gTzSi%GM
zO<}|44JZw0RA=eEGSQJVVK`Cjl+|7F%1$qyuXDQ(&o<(0%R9rw3{aTTYznu=JJPwv
zKzmw$_B{DJ`m<~UE}u6oz_j<`4_I)o*_QaMc$KZbN?In`*c#ek71olw)k~(~M@qQ@
zZ57MD{3dr|^#xJ;$n?Lq+(SE}geK$oxd`N-*+l8&v?6^_BNR;AgoH`CS?%L_8M}$}
zT$p5Ozawn>uZQSkQvWQIGXJKmx${7l*w4>t3TLkQ>3PWtNUqSy8RKU`5UQ66Wf#=(
z5!ke<Y04<Nw6f)gCxL**Yv=t@w@<wKABXch-gL>1chuWS&X3a;HT64t5wmt`H(RmM
zpFv3z^{EVTa&`wH4@l7lVa*OmB^KMUrGhbRlL?s1OLww`j0nb<hh5T~p)*ES$y^ik
zyM&wsWrL2%xa?I$r<MJ!%(9BCbs9SwZ7I-ddssf^qi{@P=wJ;)uc*6jajbOHMVBq#
zH$DA|>AACSJBGXe_4{M~-?Qz&=F~%V>_{s)^vqKI3E!82a=jGuQ!}{#t|gTF9Tt~l
zRat(MyDBs%rvj$lrigC>TUI9Yq}IlYc`X)4e#Xbh=*bC?CLd)4RFl$IBR{2jZ#w(E
z{d>BAEZEp7KR690M_@SdM27M5fFzx7S4b@>+h*0wPDx?fl35rvR;BpTa1bV;yL$YJ
zWT1cN<^g%rZ(0#f&QX+(6D1=l>G6G9s7cH_WBdk*w~^1LwHdJ2CH(YY0~vPM=@#@%
z0~*(q(Wh*BY@_7!E?_b=2LI?B{Oml;iZi1B($~>Siq!)#RO-Xwe4KWZbeI;M7G^#-
z;!Ff@`Iq6sxo^67$J^_PD)?>E2!vx+sb}px+ex8fhR&41RmNaM_dEh~BVGbIZk0gN
zZr7AHF;f=6tHcEFC!~cdw8N2ZBuS=HDf#}iYK(6rYi{pnZxrc?b3h{|tW=bOzmHNN
zOtosKT19*VqQu<V%KW@d-_zohwpsW>JeOt*XtXt!g~Vb~f}G3YzK=(Ee4ig|7~P;8
zwfe_g$9<`n0LCXKs-~KH|Ibb@KXgZ5@vORoeBirnJo>;<jE?3pu{yvay-TE{Z+GH#
zx@Z}LkJDAtPV24VGg6Le#~GC0fPyCF<#BnQ@9$+~b>GyE6prPwTabYx26NrX>5w7N
z*VG0^E*#1DIKFYDA>BKUa<tKh9TG`z8!W+;Fx`@yyU_f)$Q)_?N8Vqz_NHe2$+>s+
zd6$2DIr{n|l#r$=U%~~EvxXO0<F~E240tn|y$tVnjo(K4P6?1@LA~Wv1|VjU|9J;H
zl`IReQ8vp0xC>&#24f^N{KE>sz{b%Oc}l|*`k#i5$)HFT*nR>uB;^Dcc3=5FithSb
z&fET`dMYbHl+g5}XXpO-bIsP3m`)0#GnS~8Mg73Yle>Y5{yY!W)@ajOc3Qd4a}Yh5
zq)l!*%Ua1XNX<h|oVA<z2Et7k&tOa?bAp!5$o&QTe$r!;!|37)rmWy{i5w1ZU*)G@
z%|rqlX<mgp4=y<ojgfJIy$=@fkvondFC!_$fDF9B)gtjM#p!#W2Yin*fbP*qpZroY
zn!a~x@!>+==}#ysr|}}ba>rqWErq^O8ZR{w#D-7%mnVNUG~TRRz(SW?GT1s_nTTy>
z^XYqz>YND}h>`!q+>z$!&0-2W%WoWrDG{=4fHMO7SQI_d#8``@3oa0xb~<^%n{51w
zS&T_P(+*_=-B8L?g|<*6*p9mnR7FS^iE4vNfw75;q9DESv%WjxYTb$@3X;y9qM9O0
zr!0w(cSrJmK1#pY_%!vXY5TZMTW#vvZ3$*nV0)2f%RTJd+Tj)17@c7U42WgXKXW*g
zVrM)At4-*ze!p4h5%|FBG8v%D^leE!G>X79cufkT6m6UU<KF9kz3goLsdKixxehrH
zP~@ivO|9lJIrKzG#xu>$q0Gvd0cAn7KQR!zh1jEYVg=1=>=e~0(nb+AQZ;J|W)Yhr
zdD`=pvI0_iiW7k-&hA55f{+~b>F?s68%1`$5A|sHxp-$I|2%sxTI)tx0DsjS`6GUO
zZ8C%Gu~MKFQ|73VdM^IqQ?od>w19>ZYOdKtqG|gg8NdBpUb-M)mIX9)O+WBDu~L~T
z<i=Hyn}Cwbs4h?AD|h7anm4UQSTjb(wRFPOcqc$pYHMcBOpTkh1FfNR+Haz*y;;L$
zAv{eRb9;cmEPJpSMrRU`BaIco$O?Tcw`HD7NQ(B7Ck{2doMD%-p^>xpY?i_6#pwbz
zAXKOM#TbKi1~w<jiiAkD<+|0^CDr<gv84IR{~G%b{3fb0OcGU5RNL~_9uv|{x@|{-
zd&x;%IzzXNx7>zq>&&+QdMLka>zrhnd(b}&R%2^riu@i2=Z@hUT>wk{wd)ILR%0O0
z2poZW+ed}^y!5EFCy@4r3#nY!#j4=#zm-q7zI(^kH`awe7KCww$zmCzpPge?>t|#h
ze%~lS_{IUd1<ejX<cStwL{iDPXoVUP%NYF2#7`~Wk&Qgl=WGE#MRSd&hPObY6*pl=
zPqh&j9!7@5W)I5Yzp>;hyFbAM4)fSdn(AR98pmv9)fq3L>qTL3t%omsX&#S0bJT1~
zk|H@Ye*n$&=)ba>^h+BA%ntLBHsWWeJ#Xx-N9Tfn-Zb&rx)grk=Mp@({}Ar_YJe-R
z8bzy-^2N@?px$g<^$gzF;U8n@mI!2xzZ0>0+kPC)dm4W>+I5^lX7BbM1oBuV9Hx=*
z)o!=fQkfzmv%r#80r^GSETHF)3@FG%CffL$F$sC5!9K60!f*zVod-WYsoVJO+R2-u
z+OtQ0xmX%;>b3StI}S%_I|e-;U4k5inSyK6aJt5rwPKZxYzvEN0!&`9>8X7iJ9Od>
zx50P}lc8p4zg-4OU(JRx#vh~wAhVKyoe-tS<oGB<puwGrM(j$ow2P9a)WyglMq1J)
zAb*wjnjiGqo8G-;%Wd@_zb**ls%5}+i?i%Rh!DzUh{X?Ce#{qe@)~ZD9Dqsx$uZH>
z#J0w!m214E*i1)uCLc3|o|OeG?;+zpIJUH)=O-|e6D4V&!)$6YGj1kXN}*h>nU!qH
zgzgX-p@94xq>adzj%ibpgaWULC#N7aR&DU`%+pQ$+n4r1qYl^Y$3lI^om$zi8tT9Y
z@p2pouB8ut$Wy~_pPIktRcj`044cui8w3#^x^F*5$Me{*ri>E@QUbd=t-<clPj`xs
z>-<hx(Cz(YPQc&*Hr=-|zrz9OObKS>qpT*j4uR2z4(UfS7}(n~qzjQ)x+Gcc1Ab9+
z#3AiIN!=@<d6RESfFWTTso+)wgHhb-FclX^SzD7+bc>P*h1@#1det@2(b+qHL24ao
zp%Pjo$iyDo1t7hAc2YJPXT^R8yrb{Afz)Lv8tz2)x@~l)+=c^HMy9dYMux0g(2v@9
z26Hfzeq5$`HVYtwVSv&sJnioT+VonqgEVCz0BM-`EA47jaxVMxMq6CBX~Qd`N@aV{
ziYW5CJ>|JcI|vmqpr$cO#yIFJ4Ibq+oD$%bZQY+ELpQ6|+bw~1Xpnz$0Q|XTbh4i5
z$?SbHH~>3H4$@?xF_n5;+8F1_+$|fm>EBE=I;nqTfzoUQJFEX~IhK(s={(5y6M{_u
z<EnKM%gYfy^wGTtlSOzA4JWDS$zu-}+WP2kRHMU7->>NZeR2Ti;!9Oi*PMIa=7i-V
zh3aTwu(UmCMvJcNRPm)RJc~EK<!lU&<ghT6&`KH863p^d3kjLF9@mMiG-rf5v$~(1
zgXsj&5C}ne_WP3^Kracn>kK$ZcQSx%3Qiaz2^lth!W7g<s+ZPWhXUmx!55??+0TGv
zjaa7->5}2dQ)WOJjX~lK(<WQsX?luw7D>7!X@$*eub1s~E;>?sO!8JBig5H8bpEy$
zr=b_VVr@F!JCEP(3RnQlMzM@LoB=*oVoYVPl{@}6&&|008T+quBL)oh{)tylQ4K&q
z>&xkVAT2-_XeohEIY<};lx&cR^3ZOUuiL)yns8|Fe77Ek#`vF4lw#TveXgc1;o&XI
zI}ioHsQ_+8z@d%8fi<iUh?+puCas99?8*kmdg>f|DKWOod<BDV=#D6=ooKYcAa?>e
zy|=iDWis)mqn-{Gt4vve7B11~y)+uBokgllFOvpy7@9OJ(ht0EFBYp)aNGpt+=x0d
z_n1Flf9~+IeBcl9eLlWV8Gw0*!gQ+9@E*B(ZmIla-mO%<+>ngZrffHt@UNfVkJr6w
zI|^lq>Jp{JR)v>afLwD+)6%h3bcgY0JU&ByLQ{aWJfa@s&r*H^8}b>^ed+Gz+GE(x
zq?`PWGRDsr3hlwOX(HW-;nvh}8ydN~Kyj5&PF_JaI8BxGjxqzbCXlqWMBC2XpTt+N
zk(APD9+m-QqLH+Lb>p|l6GsoRKqg)Mnih`INwOrE2{o<<*5%LW!I?AQ41f_7%WUgq
z|8>fM4yEE`)}K`yF)cO%9Vzwi(tSw}kZON&0Hg~@KFB3TrwbMUjRd9plmSS@R04<;
zGUp)Ct{fY?Bpe^TSgtfl5XrF%3cKglVIXGQgDfMV5{T0M65tO|^w$jhF?LeZJW$5B
zkP{9Q{j)g}TlaS!Kl^HneU8x55~}RTxw&qP^Wn%&RAD9@8Ar}DN!jBV4kmXH_*_i}
z!30!#eWcgOz&~AIiAHf$pfKRzA3m@TM@}4p=S3)b1E@AnB!}kq6zcMUYg@^D{QZpn
z-)BuglT6p*$DhjitN!of3x)Tr9lx<Ekqdl3k_$5@aOa(QTzln4gpop6&HjqW^ck72
zOZl}CzpL2WsqHfypi2$r?^DAQFsZ+JXruT;UfUR12B4XrWzTO7DO<0Vn6$H11N^Fn
z->*?#ZR%1{(-1ksNmnz5P(<fOQGinEASd7khGCZ`60K!`WGtg*f;em;Y}e6>YrJzW
zPD3^TLfM&1XX|h>5-J6hVc!^Se(sIiuNlcVTkD-&+}(iNVfbYZfM09Y@*}5`@%)+g
z+x^N6z?7uFm=?onG&uzVMacmW_!*G~0$ikg^0Z{gf$ObtSDFHGCoO*-FUVFz%(3NG
zpEi-7(EgH!KP2D}0e;CS4kb0MsO}FNKuooN+yPx#zMUADCJX8rmg+25wbP_rE(z|~
z7_hEO5HnzH7Pc&{yaT4tz62BS%`A&e_wB+4`p+TIID1dE=~fJ_a`1_d9m13Q_9Mtg
z@N^y!t?=0sca@rW{LR&5&!O+P@xN%Qz{|<k{#3f9R~(za>$Z(!H#J*v>id3zXP-TU
zf&MafZ5@%b%>-#|L99-s&u(TjPnY=9jrQEev#h{w2GD)(Ovp3)2P4p(wb-@+-C@ny
zuy3JZx-eMWiqg#{&{_e!6(Rk8ttu0yE$G%wJCLq*lFt?c1_+`{GHw8^We1H#ps^UE
zzEVdkTtZtdBUUxUs>!<nco>KtAxp#QqM~*iUr-dCP21F@?7cK)yZ<i>qMaJJD@kEr
zmAMb|-%W(;wD@f8Pxi}K2kk{5CzSR7X=;YgLvaVh&l|!#<!n?TwLuPmHUzs!+Yu`=
zOD{D<9cH=P{zvb?mF<kOL-EXdaFC>U5%7iu{9z#1r%7x?sYoM<jRS7Cz|NRjdqnK%
z_WO;~?hJKNIcKquj%l0pT#?f-w%cvH^8*nv&8kdg<rT*v&I<T?BzhA6t+Ifi0a)$)
zf(;tPSD4)9;_k03;DINeL#{wQWfwuti=I7kN2!$@dH)LT{qT!n{4at7=xGhAd)};@
z#pkA$9_k+(xI{JE%hGW|-2cEH6pJ~m8m(aQL}Jo!PT%b`U=Q-&>HFhk?!OtqJ$aCb
zK`-MIETqtlLfq_gIBD(}$4NYd4ghJg0J;bX6rzjJUC=-tGUyW+9tYZWpxFfc98e2@
z#w@Th2dvBh%X1N0)dt$(GQ##ENa03nGMkKUNa{H`NT&o%X@mvbGBFMsKB1t`W4IKV
zUBM|h8z<$OlofPz|1wH&r>WM_FYF9B@s({e2R3%wVITwSnfA-@0F!;#v0#EcNdDWt
zPn3C+2sib?V*+uKZ0a+BlXI9akt5DT-gu=XB&8m~7>C_SY|fuvb6!B^1-wBGe^?+G
z0`eun#3HKun^hD2>G8RJOzJ>(Et-9av?<BxAK3Ng9Y>fMJAtc$vm?p`C5yatG9}v<
zWFW9-T(XnFn07S%t<^_0ZPTnpoi(yujkQ}{?0K?=FW$Weex7O-7e&86IXwU6pb;M5
zSCjYtL`oj*q+;!5odFmp&`ORs9QT3U^DFY8>sOkU+$KMbm!MP?cYS>iZo2V2REBa`
znC6`l-C>)|31q2#=VuoA@3aB=GqO*a)%{E-wpxBB7v_{OQv>Zu{rK0mFzjRr){MyT
zSpJ&QRI&?-NGrg|C@?S%96bTFQedSCOwVX6O)J!w8)!9F5XV*WAhZ`p(n@jj5twt$
z7>-gDph@P&8h$qH!mKqx^4oy2hOen!&qjo)L@-=h3k`HN0S#!?Ep4n~nQbLz3_DY5
za0yRQpE?ihXiTQTW5BHcPc%5o!8hbbj>2>q6AsW;L;-f8Vv-IUK&@U!dScN;zI+aa
z3J{bef<DcNJ`skfjweD5e++pG`i%g&L7+Hbrtg#za%B-{E@>4p>Th-qQ8$25`_3FV
z8@}X$kc{Key9~v)er2aOV&^upcAcX62rCwAvMQwrChh1c*zAc@f1b(AsHC0ihg65w
zZ+9_0)yBvEbq|!Y!f#U98&k8jr!imK7uLl+m$j0a_KOw$U&O^A=1s3BPaksJ%I!1r
z?x+2czPc;Rff98zThqAn>w9qHHRqsE5m=ec1U<6|Z_|5@{EF*)JMCvycs;MZ*V7c^
zOrUo?4X12YW1@R{nLMsxr%|Nze1RObp-P4T!{QUEM12~lE-Dn4jW++tMu3={p$EhT
zKvgu<GS##aZjggO87awqi9o41mO4$C7Mv9(M2s;MKm)=NcEEji;@YxIH%Y1+2O#WM
zp1a}Jpjiu?=>#w}HB$)g0p84Y%+Zh$YQ73A;75kf4uF`BocbH=fdN3e8Ip{me2LDD
zXJm+cLl?c$WRsFJ0m1=Nhp~XA)=?})$9TTqt(W013?T3Z5acT;R&po}NCf>rp_H0T
zfegL^XiuO#AmRE%uLi1f8r5lyn4|_Hqb8*(^Wl}~Oa`SFZucH`$w1tn?_i7O!{?3w
z?2L!~%=tRuUz*E+hN-wL<co&<4_^@c9x(aZ%y>yU1v`e#k3nq0p|uj#YKjki>{+z+
zEDyfsoPJdgk44i<50)C@;T^S@R-(Ol#{VL31~NukO&|J<>yG^OiG?r!#N_BJnzVSz
zbz4|iIEecmD&Wf9Ti`VlG?z`@dNOU-d`(Sc@1XzY(Ypw62l(sgUsLEey)Zjf-pMTJ
zQ*}HSzV9HHcQ``vu!$=<U2QJ|)dtXxV>Ht?+LXfQ1WJoO>XC<~6c|_!3{D8NW1t*S
z?e9Rh14E5Xgd(&|I59-(LaPXZ5G*6*3(5)vS)Y<TUmy8azKS~r2KS?%Q>Tp#Htm^%
zXXDTI0@~U&`@VOg(nfzX%tOwDBEOX%0}mc`(|*o6tO!WfW$+v!JqL=~p*&1Pv{+k(
zBoOpA$%tFO4i92!LGu7qCbZEObu{!epmT7OBHY#hiYvn?l`HUzITXhw#`=NrKA<oN
z<f#Qnjh6+|OE#n|{;UX#p?L!?{aEdYQ+e}gn}Zdc$o{P};Q4(^>M^ytwv&g(De`!*
zVf1uJQ)W7lG7J+4%>8W}(cYC3A{$&d6RC`v?Cisz+=HdY5nhzyi3*am79E+tv(&;9
zudBvS?s>6||CHDbNHuU(ef|F$kio@Mi+7$kF>pf|r!CiY+c<pW8I+0zY(HxfVJoG!
zni=i22A-7x{5aP5yF$Lq#Wd|V!{)TMZzo_nf|n9RRd=Yh<v9onE`ovym0^=o_mnpd
zwVNs0?Kav;4G|hh&^AgmegI#Upq9(P5g_qh=%T>rBrv*)P-=npkVaH@ki<Ea&|X67
z7l9lA89(){i3xA!76fr`2?tOPd^>f>z`Unfwkk*Xm>teBAf34a2@4=A<ezr{wywIb
z5d_aT4tAQ**7^)6(&KmrV5IMP+OGG;!Wgvt(}0n#6jJ)O&Y}c{fH)Sz(uk=YNT4U-
zH}GiPne|3?@XF3b#4<r7me4{QP0>Qp8$v9K5Df{R0bq%0O(CfQ&HWOhq4+%kF#?Hd
zKsZ1sOesK_NNQ(4EPKoPd`{0Z-iJdRaf{^Bk<CBQJ!pW3a3V8PZJlYxoTO|iqY*OB
zm}xNDwP}_*TpAL{_dEF1r}tuJ{t$A00!J5!P!t}Sxw90i{qI_g@BYN8VEm_m129o3
zP8XA!xbGSr<qj^@9xC-$&Q<MXSqiy=C-*!E-|?_+VhoE>Od5<m?7rTbzZdkgm^UHI
z9W>Z7%<NU+`7VOMM=tQ-<s9z)(hOeIN-?|GLZj9~vsFh(2Co{3bpxrQ?Y;CUzA;ia
zZ-B@+MI1(`FOcy%Ob#lP1qyvY-vkiW1vwKHMdSp0bA{2YyzeL)o7Frq#|t#1kUn@0
zSkqDvTLO@v2QS@_WKPIY>Q6N>am#z6zl9SFfM=76E+ME#_=H<-2Fsw-->mww02~+j
zX73*xKCSz5H4A?5jqb*3IJCgghP+tviZIRqBxG9ybW6xc_<{VcvNAuv5f_wRU~WMX
zPH_P4U;*xsgd7IqqQ)Xg<wY7t?*p1gV|X#(P$wZFLJnn1G+ju8Swz2}EY5(B1`{Cu
zhMf+zxPU?KtOiAP{ps#Vq-&sr4tdJR#AP!VnaHEb3fLDg;MWynr4q3`=-`g89K>@+
z_krZWpnUi_H##zNN2w9-d+%a;=kInIs4xEUqGteEaoS3bRHggCd9o#rI9{<?%B}a?
z$pVy`#bZz3jbiRb3=EbrKOI?sFSS(QZbs0X{%6cT(-Ec!?;)4-5#(JeGWdRRl%UaU
zqcz_`tJy@@ZlDz}p&2dGC^JVc(-S7fxDUx9*8zkXKDVi8iZn_&nvoP`bIHTf0aMeC
zZV?z5HB)M>rjV_gR!K+~sLum5iH-?{gGeZGCM+XWLV6H%MN_{$<KB~<Qp?R|0KUWO
zQ|tsd2d50clVlGZ!8((qSw{dp+Jbb@7mD&(-``@9EI>+*fLeb9baHlJFaR=o-ww5~
zuc7B9v64in)TR9Z245k@B=Z5Xg{nNeYX>37SjYi54uqS7lPf^_1vteraziELM|||J
zQ>cuaA){C;EbbRrJfhI5HjxlHByK@QiXDNk0=SNkoELER=1BoRC*e~G=TdnkLFiqY
z(l9@rkilBmcu(RZh%Av|;E)X4@B_M?V8%+U@e|uK6J5!q=83n^H|FB&_Z`O*d!9fp
zh@h2+AgClq=k6%1G@ty$62A6RiE4gd#(ZBw4uB5hW*f<~M_s@F70WgE^Ab+ob^8K^
zCR*_^-2cQqxZ=EP(bw-|cD~IHAS(g7xPa{rSP5v)&%yV7xSq=&T#_aT!x;62Wi;w5
z+=?S(57PxCx{g#woSKtyOW_kx$3{<kZ#uNQj9JT^aZ4&m3=chx71}L@>b!(_8u0ow
zM%N3BtOn{U0*!gdq{+xN30JcK2FavrP`i`#^T>kfe2Xj%$f-6V?-FeMJ{f<eV`sVf
zEXhT{9sMaGO=OI8fzdpCr?1_^{<CcAZ0RSb<Fs8TYyA<MEi-(oe`(o<1IhRUfuR|=
zNRPvwfXWZSU?eH<knxkPu^JaIOwDMDHUW1$2-gFx5SF<jynGpcUlBo{gVMM{-zp#|
z7$9x=IgOb;f^?FR((3ReWG9fe>qwIZPXf_kmMeXDC?JO-e7B68SAx%<Jz+WI@IB-S
z&mk*K6%x`Zu&hCyQNTJ{0fZY^K#|d6qGj1uWyZs>{C^{8Ylvk1qaL1oW)2TN{uI0*
zVy9CG3d!`+z3xh5@4*#u-&^C9bns3c<3EKQKo2Mw-~R>AEB)3|E&1)fzVqus<N|>R
z%dN-p^~XY7wDo56SITG;!X^{Mu|kxjWI{}<^;|MsLpLR8DvDcJt~F7sFQMLCKqHz*
zJDx?NYrK3zYcfEx1J?j>6zOey&R|MC;90gdt8>nxJFG;r;<1Jx7Gq6AP6^EHA*LXu
zg#ttCf%<~suJdd<bJpoONCk(){RoYt!2u5rIRG88IHhk{c2xT^2Y~F<rr^|Xrj7&=
zlN4zcl0#q&z(SwBYr(SGpB;cjzF4$}ISmSq=C&Yb0}TF|u7XMZE!05&R^$$ChGkWF
zi8nyXIw^~p>W%~8*?W30VqCM=a3MSo!q36+b8zz|_?05^gFcF5KzTxg_!NZEwr5gI
zKMJ&}3UMnznnXww68q+Sjt4K4j+sjl#w}<ST9n^|F9PJ83Or{JzSGCIAeTq65Fnp-
z;Ss<a7|AlzMWE7wGD-sqDnX<WO;8P&3uOB&1Z`12-brBFi1c-2m4|&t7ID{okHOCo
zw?o1Y`qV=GajdL7;WqH#rR{Y7MQ!)J1RQ`l=tEde?*1?R?$u|lRG)fhrE+$YI@3}{
zSZv&nuRpPb{`>|+ZL=ndL?-h2A@o;Pqm;`bRV^&6EMTQEjb>OyJ8B`)%ZSoNL}~%4
zs`K-Z!BIMIB7Kkiu3a9ItqM0Y^ad5O+p_t{wCH&o4Xd1Jh&Yu=n}9q*?}6n*0{$Q%
z&IZbT!0=|m1BkprXtWt`=5b@;K_?D$O5zzTccaL7m}@|(H`U#o2^b;}{fsh$j0=#p
z1j+dAv;!M+)|%=#EIZ?n?E&aeiK)*|*Ev6);K3u7{K~*T>u}6+4b~7e-7?}MBt|xz
zR)mp5qUwXjB{&1%nS?x3e6_7-G6&!mittJW`28M&5uk6aLC-0)rtK87k4e>BP7$^h
z(x@$U9PvI0o~+EaBO7Ke9C8NylE^`XXsQJ?;^#QyAYzp#%J3Wg$Sn`T_xj;E73BN^
z@<G5jP(H{ZD0*<Hv?DN++l#4W9KmKyovBbeRK*#At1vO?V|uZMuiyI!ggegzWxh9%
z)SHKr<)x=eP4UDz_4vT-sc8JCpaaO5f-SwA-2Eei@)hgq)dN=t<&iLoYwk*Y2|=Ha
zvsMZ0SUZe-&c*b~JdP|K#?k5f@$j=%RGTehoK6#t7eczUpprl~ljb=#&*gqQ;|5e0
z(qEXL_eS}wOJL-wJF|2hMA`J24PSuIo~6yqSZUJK%nF>}E07x@5fOo*ae?|qGxWn5
z0OiXzwPZnh`a{YFC{5-qMJDAZFpZ<Hk)>uwkdcF^4VcMwrPcu$eJV&N?Mj7ZxD#^)
zvY{uQCotiyqx;8Yg<x8~lVuy30uh;%Rp4eYl<EQMJkaDLVG{HbIPIsR#*`OA=Iw+b
zoe&KU_;7N0xWxjzJ`ce#P+F}qv{t}(1(HN#>T#{ACsLm8kJ~A96e%Q%$FsXy5t-5<
z0l4&RR&9+(cuAUx>5<%KZRsgA^dSaY$tifU2;Uh&-Wf;W4kPE3k;@fO2#N^u1^AxN
zw|v2cOX{EWxhARMoY*yTq)jls%EkQB3cmdHN0EvJ2pVYgimKT@oGdInTngo$E0?3k
zo;X#F{}glpy-uK(E{m_-JgBa_Yk7I$TrVi8pS<mj@<(sK0+SO37J(q+2?7PLlA@*S
zIDBLpPaHaqrw`7{Cl1VG|AARd&#kCd62X%Wf}D?Bj_9`Cg`uWxV9~Nn#Iti`gS>Wn
zhKpV+nUgId>F~a-m<2_UL?EWTy+MNy!2CXe;t;XlfZ??Q?YfY3{)$j8_CFeu+JiJL
zL*uqSbr>9u`gB%YciSBWX8)c60tp0U0#Jt#WNKC(T4GE<NXLk$nRhl5+2}9_Gbdns
z|4a&E&`(LnqW`x4-(9X@G60747)Uf4ifsILw+eR!vo&oF)%#|ND0Ks*AHXT*;gvk(
z2Ly_vz|cC4plCkNg#!Zf2Q;F#8T27;u}BESBmF1t;&fF+IwOo!N*PDqDa$yUG$1iM
zE_h~2Q^kmqIfU^E)WlP8WB^Z=;nw@%iy`<<KXP6l^0`4&iUX*W3J8K6)6<JZkKcRB
zz;Zd@(6J@l{qX$=6Oy+kzCa%B_FObG_w`aN4!nLby8r8^vhkmy4xr}{jj)}j2ggSy
z&i{!w{7kZQ{YLr7T#C;>7jeB!Ex5b~R0<LU#WKeF`f%-z?RfLG3ZfiiX{Dx~J}`y*
zA3K7F_e^2$!8uG#FQXd9JkjR)3b~xer9`%Dv_m1Y(WJZk)__?i6EJ$ZW>6#(FEQvE
z0fX!WtVl@O0%}vh{6S!RyWztRZ3J3%188g7E5LK=b~Kfhc3ei?h;Tz_G%3uIA=0v7
z3hv|>m<*Jq{jQKPMQ>Z5+8&nC(kCp>Xrp%7&Q{!%k*utJXj_S<_Ro6$^qgG<;*2gp
z&?S9k=V22dTg{l!?d-;EIdTBx2qd)hmB<HhOP<X20l8sdU>(puY&sIl(;Cx{3);se
zQ!4zZmB4*{>TMWxB_{k(k!>!J9&Ulj)HoC9-41O=cZjWI90Gr)l<u1hfl7u@HK6s0
zP8Z3S6<Sq>g~ky4#R7b{0^cRaP((iGLnRH&%}k@#Y``g0jTWQ|5XSS#{QScu<xKzL
zVs!7vPj%xzMIC^7(|orq%DDBf)~~+sjc<G7kAy-FxnJ4WroER2jV2`(G6E@3Zve-e
zz|(UnJfsMas-Zw&^>`oFjt}6HH|>O9Nl|Y#v43g~4?TVy_uhX5PwhK_qbC-z5;ozw
zKJt0VN<Y+F?lS0Yu3#g6Hc8W+7VO!(XS)JM1;`-tL{^Ea8ngQZ3PZra8jXCPKxrM&
zT%jz0l5*O<V<WUu@bjMZc=n%W@VVD7J$49&3>3IRh8Z)D#$z)&u+=PN(8^jPU-LwF
zWs|W6%ZhgPd(QKFlz&-!uuJ%1$}hG4>`Tvv0y7~JHpNT`BXa;YL!dH85-96BP_C;4
zWnU!+ei_J(2vjDGNCuIxsMbIFC=f53Isc?>g*{jlB1`?dl)KKt6)R%M#%~o;de?FD
z|9ko1ogpzJKF&E4tN2h5FsW0TE@Qc|f-p`IMQv1^L9FfHfWA>5>joSQ4rnBsA}lUB
zcyiAI4jx%Sad;$Is_yf(tbb%#-TNNAL=N{<H2$2|C;D*Pdnbl={^%QC{bS8~YrtQw
zwc$}eiZ3qGO{LJrFfB(dLd#jK(-Wv^2h|Wbb_no~C=^_cfg&(ESir>adi=oE8}MVd
zq-eC8*mq(M4?cAQ_dR+XPwt(=@#9sr!WMkLf?~mkA5f3X^ptzYin{{_9VH2KQQ2~U
zt|bPns8k{9@QTLNULe<R1TLuEMPtFF8bmQR6}-z5B9_t*Ty}0`0Q5CyK|n_eNm&3n
z2XcU%^4ldP#Mw9EDON)-6D75qQ;jgOsr|E7DQgH=Dlnz#Tn1Ra0F}NjV*w`RHwl7i
zTzW!-F!zp6wEI7(d&-M8tOFoU0672>6G7gEQ<U(^0=XfrN)wPnYmA~WjXocJMx%9H
zAf<A@#g5T%Bluj6%t_X-?>(|EjBx_p=%1By-OsFN9NO}wr4@al7GsnoXcOR=NaWlS
zM*91(`K*3ivSkFjFIj`F+xxI;Jb=^ZK$LS5l`^!KS96CO`1oJlh4=pXm)%AxlV<U;
zpNy-G=Z~D6vWI)B89xy_`t>XSaBT3LAAQZMeyHAT4FuJC1jliismJ&1AoQ8YgP9Gd
z+Me2CG^J;jR|q7oK%KbcEsYb$fX5DN<fTGips{Kok2MqP@guiv!jHc>L9<=QGe>7}
z|Kn4*|A84i_4GWZrj`(=eF%a96bfZ-A+eHehk0mMjAzSBjfHUr0A4_$zd(I)E>Q^>
zYzWlnG)_DVtT_)T6@igW0+i~KkBFIRYCtt7qQ<+K%4Kj*ne^Yyz<cWi$nXjHqfQ$e
zzwP;FQJHCNcE??|^@a^LQ$)67z{c>qqMuCE>*(Q|?^!F4FPQFlZAUIQQ}LmxTw-5l
z-GG!FfCDFRAPOYzArKJ1e+1}XtyR8kI(k!wG!~zsRcmHMnAx62*x8n2oQHLXd@>BC
zBkOG6{A{;;kEf>UpADX~15S~6b|{Jygi*@RRm|nFcBl{A){WtUontuvyfJK9Tg1d@
z9vE_f61`9&dL&%d=z65m#hMgJgptuQe)7M*7MH(jr+U{rKjiK`7QefeJMkZhHvVF4
z`+bQzfNrhSCvN`nq007Oe${R7tft9uP^}S)FS&JQm|K?D-Lr9$l~_sFojxYgiDO*I
zOt8_)YRU|Ff{*E~MtriBXe`VLJTpfQAwhp0ST$J2rqvZ(@Y=KRAKn&YWu=P8_s`(I
z2kEwieS1$}X^u!m6$FKT<O+GX)Yh`+!l`Cz#Dp_$02?L&f;9i$plLRN#bX-dn+5tt
zfM}z@q7^}9O^Y_*65W-ezmfl9N-OQK&$jGQZBF|EQcDFUgH_avw`y2~Qga#5qocs3
zij}=JyDJQDfDGR#4O<y7`*_(NJ>FwvTVIS3W&=i6S;zp3RAQJ0q*ZNWZ9kd^ATLG=
zz9<Uml%ev20+rQ3d5BkVtK~&t>PaD0!=(MxK4AHElGtKLn(4sV@x7i&ziisibaJ|a
z5ym$u!(IaIUq}&#37U-twf9i;^H?`Bh;ufs!o@pQ;oP0W*s`IBfpH(`x2u9F4bdS|
z8rYh3kSw`~=JSYZ1w>IEN_mR1p?nY{7+J)w>$l1O`K6zZe&yDG{`q8obnt-q*n4_K
zXHV7R6mbCN81`TFj-mV|e|^iX@2EqJ1~oE%N<1@3ZM&$mv*d<<m~pvmf0pZLb0M*K
zPt*3WeT^K6Oi-ynq#8098rh`<jzVC$sd20+@YD%lFsCq7kQf{3$K`7Wan%LefdA0O
ziJ4_Qx@Qjee0>HFK6(^~jvT{Es{*eufnwh%{2bN0#E&(mz;!Aq*BYrD#sg?8^4t-P
zU`V4fBG5lc<$=Kqm^?%GvG-@Xi&dedb|5k~0vV=t0?H%jX9P{D6JTxLG%Yhcvm=yY
zHXoDoB#lo^%t0<6gp`@_8*IR=$+j7Q0sgu|mn?<Ng-bUJp!A<5S7<25Z1dp?+bIZ$
zBH)xI`~i*97%;dB@QL0PY8-z8P%DDB`lJNxCRT>s=(yS89wIK9@$XL8rjv3}YcI8;
zCI&Z1QsNJ^XcIHvtr7&-GBSp37jDLdTZVDo)*)<JUqOW;e1Rq)X`Y!rpb%-zgKGJR
zSITHF1qkaov}-=%mJ3DQ2EvJGe0hkn8)6>hS@2VTCB*o}L+&4Z{>}AYx?cW?IFhD^
z@aaE`Nw4e_b^@n>12AvSaPF0F8t^ZE|E;&atr~cf!SYg@Yi}-$nVHGCD-ZWjRO)?C
zGbtuB<;R&qXWyMp%ra4G&5;U?X+>K{kh2ogR&0aX@YGrhQ;GQ+aJV5*KB~~?35=9;
z7#beKZRd{TwySp_P8-;JWFC(`vVgnqn#NPl%wl1>gw!2FeqbE=z7mfS8<p6U>B1D<
z<A#P{CjjKjM0=G?f{9yZ=AEG}0uZU3;n82CgFx9prcmp2x&Z_Z2*i{f5#B)ALPq?t
zLLDYb8r?fHC1<q-jlLj@n6d^RWdaQP8FCP>u;LM9vr0Rgg~=MDSvSF`>zX=@r!ISd
zK{61pBp^u2yHBGyF66*kAXnr`PIY`Q(4K=-ZO!(_89GsPIhY&nzSIe)?ED_`3^1`J
zZT(KXeB${N#XAlWww8djih+C{XN~t^=h}6+VCxvp**1br8!9OF(`%#pf_dA3sv@mA
zh}%BeEB$D#1ZdRrXtn~h+cdyLf+kiEaX`SMZA3Zqx`~LYLNgN(xf%sO0PYJhaZx$=
z-A~?H|M?r5f0}FMooDfp_r#=ha*7@=vI8*K&X9lo^+lZjp&PD$UA3HFAI#6QdaNX+
zBw~M=h?;F(F&7v|s}4Q42N%d{UyFEiOdyP%m+l&N8a-~Cme>-QMng6Q&5J%gpC<G)
zO|&unmey6)AuyW?91DT+yheGi!ayDv87^Sw=p=T&auweGrZ$#q4Lr4f1rOYF91lKl
z07s7Gv675I42&WeA?BIO7ZUMfN$Iz>2rM22M$b~nQ(e5u?6#xBDtj3UE_FI6E$&(U
z#l84U2Y|<S4R@aM?v(eI8#W@-fXsk|6}Pk{RJK<jn<8YTp&n@~PU+1q06K>r#zW_3
z%7YAlJ827PCo^DCqmqW(2lyjEX#zYUNls?|7_fYdNl_}Hb|?{wm<?%{xU$Z-+4MnE
zPMpq54@n%M-Ad4^%_C_aLq1nSUy#R+;WEzKv;h}v8p5tEV_3VcXyn65p2Q)Pr3OSa
z7~~>q1!yhzp*kO+y6mCe42*yYqscVlP3KL<ZX6>k{G>pm1}KtzkIb$I{v3!r?f`|n
zLOJiF@`VQ0Uo+(Ymyf=t`m3*W{zT;)2cM2V^~qBe6m(x~<F9xZZ!YKyzj)o%x6}tK
z+x+S2n78K|32;;Ib>241)@6>Xm1)lQv-4rK0{9}QA6k-4ruD}zz*1#dNQCqm+nQ5R
zDhcQV&oTqLc-&m3A+PD$K}!HjT4FYoID8x^99I}{75WPf2FC(iv26%fTumn);^2WL
zJo-Qt58OS2$Dfs0nCeF~F@gO03S46P`M}ZwiR&jQj|-GW1Zch`rniO3MCNsHBqq?W
zv-i)o<uV?Bwkasvdq?V3CVMt^P0`=-m(2tmA?1c;X!825V`X-s%>w9g={d9ZA3bO1
zPt2*A=~#O+5xLWqW5+<y204I$bp6JN3}ybPu>{N=l+dB#C`ty!+JIqd778(+!Egvt
z#E8Qcw5sz^?Ijd)O{`lbu=UCu&OYxvTy)7AtX?&Q(WVFQU__F^z^GMirM-PkiLg~b
zvz9}(RYbL!L#^SU6**|9#7!`hd|pAqC5bayHKr-6qA5<T2zX8+VOWUSbR{hcVV0!e
z?hJ7-XvJZ?q*UnVk^E}|=e%K!|LzapQvXk{O+K+YKYiBm*8K-gMJM3Cn8x4dpTD-0
zUibK=m){mnth&UVosM1l1Sp!BaxdFzYqmz2eSTRF-dylJEl0JlRdwxD2AwGwI;fx2
z1;|W`$T$TSa7;;)0Gt_651LYIqVDqcS#k!xK<aB=_7Mq<wgMUsup%TD5`lcpL!l1z
z9ZE4!P#74K*f8c}!<$C%x*yh9nQLIr<25{S&rv+~w8Eiha;OehAkQ9zC>A;TQx-t1
zw<a%|)M$p50xSpsw1Yr)8HHWntsF-)iq5S(v-FZDgz09s(Pa8|CoAM;?K_?bv?ID1
z*~e_pF`}ngC!n)I$YxlbC8OEy1kvMkd7+13<0njyQfJcjqY+;}Cy4xnnS&Z}O-r&-
zx|7++>ljiK8DQ8#bKyAR>R|-#Jl3pI*txre3wN)=1?R8ArY(ag4w6(*roKs|U<uk=
zeWXvi2=}zn3I%F44@)&4D-9R4a+PKjC}U!!Wm@p++3Sb^SgH&nVq?-WPpwGHpNyVo
zgzXk!^ImAh&QQ|lA|#(PEsiBNBspaUFpH2Mugl$U-st|?|GYN(jUQ?~oE96KryEbr
zo@!3OebFL+?wql5a{aUCoqMg^u=es~b|$8ehChHV>7zU2pRw}DV6z&RZp0TS5R9Ba
zc7gJ?XI>-Hz3}<_p2;`@=#1{OT?3wN)3Gf)azZYt|GIW4CueX2HxLXWQk#qZJ|^tI
z(`X5es*;#*I4B+RP&%eirp+&v1bu5<TzXAEF1<}dH9{PDY8g*_;RGIk<RGRVEupb(
z1j$tcsBA5<YVOJbn4UBZme?q4u2s9-((W?g*KA7!!Z65ju_kDS1EkLrp6K*WGudFf
zH8^9`X4?7umhkFqE7fm15N5|g&t8E{HY*#WF#3C`)Sx_$#62nc=SNvPh1i>F=@<}J
zsW6jlh=en=n-Q8P=Fpy>g_q7_a<qwE*SI+M{C=Ew{$`xDc^IW(LK3a~a4SYq582W1
z^G7s=X|^ZlE~((al)`<V5XPxy^A1M8u%q$F8B?1KpY}XZHfRjql$v&tC|x7wb0*!7
zY=Dxl7b2r&>;&r4_|!(_9S)qG%H^dBoR6%?o8Gh|nf~o+=}+ISo^S`S?by;&OQ(_(
z_&z%T^Ntn$^~F+h{X^TfUE=QAc4IU*m%1c{!D8##7Le{#Ye(FJ-ZrXhJHt4c!VS}J
zNi5S)O1THlySUAIr|eO(sV*AzG>acCHjqU=))p|TLCk3<!x929Y4f$n$!NF)AO;$Q
z`4E!L7nMo3IqDIRNRh9m1QyypO0zzKIfe3`1f@QO!blP8Hw9RK`4C=}q*&ft$G$Jm
zVE-o$Vm{4bc4Pq6wWIJx`!PbyK?&4I6qA6yP88<UQ%V{?W*oq*lP7*3F#stUAhMJd
ztm)|FWlU!#3T3iawlmO~bhBD{YydW!$ULaY1gsOVEkR=aWuHSfE<uK%T(b+$9RvzP
z5`IylI<FB?nX?pO?#U%Yhh|ZTmau9t!M0rv&N;7)b9QaQ=FLMWjF!yhLa9s`A!&rh
zu@MJ>qH;`Y$nEdxbupV!0(FI*w*k*Sm16FMgF@M0A-p?)R+W*#(`*6j0iXktb^;D}
zK)M@+`8}{D5x<d{M0mF5jc;b5w*$dii1Z%S=t7&WKz?G`eaA0e86H2;9R1K=CU=JA
zr3>e4C!$lu35f4I#n%~-1NwD$oVE7y>n^+Go%Q7<<wwNt&AL0CCT}*d)BS7KdguKQ
z-HDw}1Y)fxG7QuI=ik|s&19zCM>=_9Z0`kZwBj<M3_huzHCil%MM^n7FR9=ZGQ$jL
zTW~-Eo)%2wt>IE}`c6T}*Mj*ZMNgyXrYKfY<W?(qYc(*&n!1P&w=n(nCG2}(Mebj5
zRbk5rhAtg~dtpDkK8cF$Z`UKur2^>y#4X!GqfCfXSQFJ4KqdH-Nyhed_UuXM?gr?t
z{?7ISu-tcGz|kOY#)JFmwPvsi%{VFGzGWb;lHMVps~VyS<b^<g$-(3Zl}Nznr-1?@
zx%^BMN5586IJ%5sG_hq(jPuSb;k*lmv3ctd3d2-y8NLm|1PM>x*^UE+T>3fPY?pw~
zm$w#KezLIg;x$_F08AZ~_{86vDuLF9n~6T^7#NT^llvDvbDq5J`=oA17wqitA?)XC
z+M_~Jm&CJJ09|`Vz{SY6<vopxP#D?Pgm<eK{?c1MTKe4Q?)kt`{{!!&Hsz^66cXQ0
z<M*7h7!+^#+sW|@e(1_ef4E*-^8I!~Y<>&TeUlT)e56_TWOv4MIo8PoY+7n{`*~3%
zeGqovJ>Sc&it2g%jyl#i7=O>>+Eg%8i0yp%gpSju9wVZu_(Gs183nqLELEoB+a=IY
z1{zRX%+cJ_F9?C6m!j+|6e=maNd<R<161faW2sLx)zm$+IQX?i96uott?9?WwQDi4
zdjPo+3EG@SWkPdV6XwY6GZq{rK+TZWItscO9k|Pnx396&$G1)(TL!|C1O@}4Ooto-
zIRMVUZ5c41YCJ$x<~jjjB!D2<`H`M#E{@TjuH)f*7qRz=Iwpn2#&J(xa86O3drlD>
z&MKlfOg%L+c6uS!;4?>_89aCWOh(2ZOSS}sDUl|_NbG8GGV+j?hBP$7w!q{%fzN+X
z;n|1H0+W>V8nS_{=iwQ`L>Fc1{ESGHfuCImkj+Jy>%d?uG%Q67b=GSj`m`jcV0I_u
zU5$XG&5>Z@!WP=+M&VD~{=w4yPk#NEk2)X!V`^cVL%*CIfO!f>`WTXL`2Df|3x4&w
zYk#EPs8xbSvt|0u8KpA=?RqJm*(J;PJ@eenbQ?FCvlZ9f`TY#k%4%Znd0Tm>Y&4W=
zy3W~|G=NW|6a9Nq?QGYc`C9_VNE5$X_tFP$lyix-XXK*E0g)5PQG1ba19Ap*KD5-s
zs{2qj;R%5PwUDGn+0!VM5_shVVo1YXOCob*a&?fN#PnVBIR0pYg_;MwVF<w`1Mtop
zKsxAg4?S7};<}->a+I{Q2-(t(j7()-a~G-SEFhZ!$aDdy6-HeUTF_xxl>JuwnjSvz
z9jpL&Fa^9i&^R9B_!BEQ@<<i&(KgCaf{C)m_Ok+9difBx>?ono&twam(kF<?dKq|>
zoYJ$gv$lAT*QYiHMR=>%!XRy=(F(!0kc^(PpxCtO+Fa9{e~+&cSURThZ-1LIenam=
z7ST->-)()e@n@0W{w#9>8Rvo>fCWeSz8O)9IyA=kjaGxf2TW$*3gjG(z!B*4+nBsE
z!qL)V_~WnsXz57p{&(zceC!`y>{38{zv}*B|CMha$Y1h-8?XMMs#cSQm0Gh~mu3iZ
z&ynGPe3GVkH~Se(?Pbz>^J%fhf5!oI&}p-Emofn|&`#v<rv9`V(vk>_1F*`~_I?>a
z#w)`ad0@5Jo{K0e6&xW*445+lb_UF=w~RfaBM0Dlclt__-jpU9E{;G>Qbr({>RS}V
zn59fXAt*=44I~hwfV0K}3dBH(k<Kk*_U<_xy>lKX4#%ji?uWc`9m?ksQ0DXaakxlp
zdW^H9l-KYnOqSJojh)39me9l6f^;K+QDbyYK%096@<j)eE-+xWqhqSt#$%5!;d5VG
zLjC?ZM8_0X59G1?nj!4IZWvoO=TRolR<yNPJ3&lJNxY8BeoBnG6L@EgGrLq6nI{Z^
zcm(8ds2xYkSX&yc7SN)lpyUW>7Xdv6wQ`9DP8m>E9@x)jXbAZ7-=|oaH8Ud2T{25R
z?ezo8eJ~dmX8@cTWf`9}`pf~?_m9a~S$5#`7{AqP^yqqEsWmgUO+10Xl^F0^SaplW
z12YH0pMA?GOY`nmcOR;K<^C7b35f4YyU)95N56CZQ`cYq_G-DjGnid$NV3}u;m^{0
zR;9}@mY$lub7Y_Z)waFB6r<vdWm~e0d6>?J%-Fy;*8HToXMd780G?{IpFMrRrgZ2L
z)HJ1rK_NO$NE@`AoCRM@^x+#xZ5u(%{RuY+IIT9dHGzo4@S`a^ju@o*FHOV<s7#Ow
z1wTPhX~P{=z=RKHI53kzs3X}s&(2`qgLUkkm6#u^pmNzbwq3po#k|DIY{~;vM1EpH
z+)T}YCg8G}8K&`CK$V;&l`ln?wG2tXBqxF9d<%<DFXO;tH9Y(1GLAi4MbJ_>cdQ>5
z>=?kd4Skp#FC*yl5EccT%^F@sF}I&0I58UqG5tcCcC?+AEc>z!$Owv%B9JlgHbr+b
zc8d7K)v%GCfjl;PQ_FL9Lm)8C4rEylJx&CSjSHN3I>E!AHM<4PDlh(UJ3GXsHE8ax
zFx9-rG1#sPe}*<=FjB521E5X-X9B(2iJS!pNq7MT0>@?oMCmR#0z<_nMqe$}M?Qa_
z`ki0?ioaa`)T$HJCuUwOCm_D(h`+mepdYs!x$L~xxsz+J!t`8|uKA8c7vGZ{0EJ}Y
zpYdYG-fFc2^>^mFjXXpTI&JSm4y2RHcQOJSb?Aek4}?Zw?JMU}z|aYK(^n4wXac3J
z3p)#ivIv^>&QE%-tSso_1za9jZGXqJrGsfDNy-Aq8RUurzONAwkVrKy*Olf**)M5V
z79A=TQUt{aemRC55YXcuFyg}%zSO#@qCLm)^ylaCwL5A!sPowR`qkKV(+1RQL_bap
zeVX6oj3%r&ZKjXG%ehQTCaNpd;f<9h4nMPur|+J@v8R^Mm`+fZ0^3IVaoN^koV}wT
zlj9`mO|OJ<?*wS4W(>IP;OLZ#!YvNQw*cuJp>S3v=y@zbF7;C@n@+|~^*kBBP2(dA
zW>QO*#)J8*)daLM0o`S>c3vpsdr-zx$O8jq;PZb&X^`wSZf<i5n|XE&-bVE7b9J8Y
zAbLxKEGx)VntOy(Js~**AaKwG22=L=u13ib7$`L{@)}3|@t@rx|K@*w?eJXiPdk@d
zQ|%W66cpcE#DCBoP_KDl*I757bN0?RM>C5gW5Mgzta?jlQMa-2&Y$)GKQ<N5L>w{)
zkUdWq%(LZyffBfHYY==pt!B4@vFFY>>=_WmDSpN;?}_xi#(h%9p^E`@tA_4;c_+i@
zNikVhkFx^Zi4t~hp;IQ5Dgt@J4TyVA5rr@VBLITDLkK$%IEu%a{bCGvIE0=^r88Qf
z`BvbWHs<$A-0}G;{{HiO;cjo^hkyHejI8cQdnw_`KT4@7UCtLA6w9WqzO+!sfqe^j
z^uD7w{KO*kg2d{43A<L8aPF3V>{v5|wPQ3m<Myn;rJP$axE3}AR+e4NwH&M{iK$tE
zxme=|f6H_(lByY0A`eT9EIQS!e$S#jMf`}7dUH;c){{P9LL?hDeA4PRGYvfA@VvR8
zY&<(-jPoa=fb|;%9{H@s;YW=c6FLTL%K&@LWwK}46eO!6okYLx!3Jyz(7^=wzUF)W
z%mnE+*jWl&9?)k`{*uc9tue7GMCAq@{p`<utnh`eeEq{y-ao!2Buc8imR|A>z>yvX
z^sE2-+R@8?{>t6|p}DXEpZ4CHBU{|jY3HAOoFw3q^$5DZ%P;^I>+Jlo1qf{(m9f_t
zAF#-+iR{+nTV>s@17XPz8xhE1m@=ccEoAO%?~_G}j&taylqUg**@a^x0beYvwMTWo
zUCx<xFL*YA7;~hNN6rA88PL1}fl0hQ+Yts`))E7L3;A=ZXwE4-^_eF2KiS4y!^fPa
zg`B_>&pm<AUBqv_?>4O2IfB_~1t*Xk<z}9n!_!}z!7~reW9e`eMWL{BvJbnrkKw#?
z$FOQc(bVuXpAcHhv<m>EwnV+<V18L(YF=QvDzF$yYQZC>GAM`tzrFVWvh=#n1HV7M
z*!?>9%=84LK_Ea9BnSr46hz6^D%fS0w7Xu}TjjFLL3Y{Ju6Ii=Z`oegZmq*^sjOW&
zN|tPyDkV~Zv_z4TD2XCSfB*pu!VD&-p3ePV_sj47aqFCO@BQ!V0p&zMXs|EY=$;q<
zaPPV2eCIpg0hRfF@MAf??=QG$T@{W5@9t49fF1okR=YgYn8p2Pm!1rOwlj(no+MNe
zBpZXlhl~b;(7kmUS?-^3Ll%}CL@nUypG&!Eh<JXA+yey)EBZ1oYBucZzN;*beq6Dp
z3&YNaK(QvZ2SGbO-oOB8oIpKRLxwXC#u(kRH~N7;|MT_hTVMXco6)EL^;;bZIB%Bg
zKkI+ncP^B_?el;1TmN!r94(al<AI8v%_d(|^Jz1zJG8354<0HnEG2QN8GVZ0rMw6A
z4T9_0`F*u01t#GC=$)B>FWn7R!%>b7B?KMTZldin@(;6Q)Ph$nXLU}QIrMt_VD%!U
zw4-IVsEZ950G8oWxB-EO9E%D$hZu;J8c?mNaDmu}s!=D^6+QZRj=kG4zVM@)SZ{YQ
zH8+LzXcu3;@gjCRO;l=&XtzUnwG{v0r@jjd4=iKj$}T?hZ(hL0xiP-uu?O(ck1pVz
z*$Ph2QH2xX3$&tQWZbJehZ{MF+CX>DL96Ryx96ZaaIrI>9u7ITK^MCqiFHk)qU$qg
zXZY)Xn@VPV^amnL7{?BA?AZ&UDn@egbv(}^T~_(OuKtzBh}BT=7_>1kCC{b<7++gK
zfQg6{01I=#SAH%<zv*&Wc(Ie`D(}zPBUdQCR;Z^KfZ8iCSyM#?F2KOzZ>9)SLo|g6
z=<vWLIXA)vl+-$9fht*wM?M0a>%TtuOF#IT>3#3FA7AZ1{qkFB1irycK!NM0f=3oB
z`D34c&%3{804$aJ!wx*xqy67BWweL5`--DJ0sq^?ei>A9N`xSe`E55sKTkLScYh*q
zix|PCN?5)_0XlkuaVuLRhN)Xc^M7<72)6uEK2&ts;eS}EHQs}0CsPxJ7=fPp0N#y^
zc!kollkev?RCJIe04lqVfMK-T(~d~uq0B-I98~H#re>rz;pDp=Y^~+^<Ud-+&fYGT
z8guy4?JwhZul^p8RZ*)h!;K;=E?2R-+QMJ^o_~R*duFk7XNaZnG(PtDN3poLgt>AB
zr{5bO^M*)!L)OB`h7RIgANxBFc3KWL+b(v-K#!V!vQz<e9~1T)$NgFeH6g~G=pT@K
z+}Z)2{=F0*{tg%2fk>H;hB@c!rEp1hZF<jL{T&(D(^6~vH<7#b9&gF8Sp+9FR}v;b
ziG&(`7aix)y$&vKWnAe;-)ru(BRZ@iyC7JC-X`c)N}EBULTiwa?Y{a9IUw>riw`r!
zziJwj_zH`hP;5%)!YYs=lzQo_37+_lN5jARS2jlf`2TJH=0bJt{@uZi-dlwS_-_W;
zr<#56GiOe|zkFih@xe~3&pRCJ<!Kt_8+ZZynC<%OJERdf)!0)&cVz_hL{M)g5Kx}C
zQ-fwftLj2(BQ0;C8$z#T9X-`llezCXb&$1LpF%;Fme3}3Xi`oSd<9+<L}pQa=oQwW
zPl|7<GCtH@SW}dUcTRtEJ8mlRRXI=UTO>X9WZ@)D2lqTAlkgXRatjxCw{WU9kLPxt
z#iuX*TO6ysA7}3Q6L|3KlX&z*6_4FRrK(-5?XKhMl`gIv&vE|tHh$x4pT?_K-iuHD
z>Ky*WM~>qM|JHE~Ix*T!7oE0)%?)6yo3pYxRcWMD^T2XiBK1XadP0j`VG82L3lcBq
zB<T0oz6?C^l-$1|$)AznC%?Bq@A<mOW2E@Y<;V>5Szdtb_{DXWMX$kOJ8aat2L%C&
zfY7D;99(@t@FzV|fpcY!XcZMT$><lA`m%Zw%^CV!Mf;Y50L`UPk1G$*$z={Q$H(e0
ztm!DyMxx-R^ql~&e=&Cd;<tZ1dG`4mOTYK*xBhe~*!cc2>)s#2T7ZiC$OlXQ(uW^=
z@Vk1wA<A4>VpwQ;6xwv!+n-$chO0LDK0DsGy#)QJ^<K>@q$U>*DN2}6v@E}T1O*i?
z?c8}xEuvN2MjU(fT1`x5B7!riLNp;tqJFdkM>jvUx%OsWs$-#PrLrD8CzKH&CLH(X
zV?8AG6*M^`0t$1?&HDJvzuCd7=eIClZ(w7zjnCisB<5@PVt(!k9KZjASbC^}>C*{U
z<2}4Eg(tu3Az%;KxCVUYCE(|Oqk@~OpT>iW--%!N{S?O^s^ELScLuLrNU@*gXjdfX
zPw6yX@C2lD)g-y`%5|q5pWp$t2&LPR(kILugn@(2JHYjeDUO{A(b-EG-Dh$lyZK}=
zROGH=efb>bXb3%AEBLD2U3Z1PYw;VU--7YTYK@fD=;l~nb}+RFbhoMWTi**u%_Dh_
z*di6Css*ljYBF!^ngQAMSwLE=HKio(YKM&C4d~6zQ}>q}sj6#5=hccmcl|;T{@p+Q
zCwu2!-TuDe=zZ_s!80$u6`_FL1>?VRQ0!HL6QB4$A2{>DtWsO_$8iM5BUnVQPH~6T
z%W=0mpbOO$uC8Ky)7{<r4CV~z7OnOWqK9=<7URwOY9%#bbrO~dNs};692O&?9gT~E
za@vu&zR=~rjr^R7c~#7+ZIVt$Wfn-KcQh>%#%-r~p>P20vQSBuX9@MB(<nG~5TYHH
zM6alzg;4E>e7y9f4u0!%*O4JY5Y+L-+n<M%hbWg%A*`H6JaW+KBp8<+3|D~5GbuK_
z1efCkFZL1)h}%E^Fk<+)w)-1s%#`qnPi^34bA*MH9{R+nQz3|?<Oukqa3lvc=%tQF
z@qj46x#HN1F<>!IZmR_)ib@N_#Y<1e@O@I;Epqod)|am6ay|65q!MNw@9P_=GsfCT
zitSa8+Z)5gq>`OBP8_PV#?pPBcpj{oNLEJe-m1r+{D_=cK{-+PkB(b`lX8C~Lm@_y
z?wvf&4N-}cpk7DcN6!<a!mpu!CzA1q5(i@zfpKwTE5c%M%>OeV|7haG5B+$_uPS9n
z=P(!mImi$vk2gy9{;@NsKNgKhVnwYy>7jR!;4}Gd;oaMDzh(v(slwvL>b0zQFG061
z57N2-#mkHLvu>SvPQ{&;e4hTzyAa(dCY_kqnFXEZF2#lv)=BuFc6CF$R}0>NR;n&v
z|HvDhVj>ZJpBFv}Vaj*wA2I?|+(UrbJ&!tQZAbW}pTExi??ShN=T^Ur)%GRSE63n@
zGw|IiM*TkaHi7dm0xv!bB$WQEI{4hPE`ITI!0$f2fz{QoBJ@JE$Lr|CmoV<7_{2|b
zVc}jWlO;|)GYDzoj&km4m<(0X5iMlyd!SQvqT?q9O?3JA8YZN;>*DHppwrGowq51&
z={)&b&^1(EgKA{PSd0PpECa5xC9dA>i_o9|1XTvW<-D)*Ea-_|58Qr?!Yl60$Obs$
z&eGcOvr%GCPnI5G2fUDThwnE(t{xMEPW1@v#mId#_frgl4t3aTQX!N47H>)$2TF^k
ziH9q<GymHk`A~Fn=AI`i`2$blEg0WG4}dD(R=#I``T^9dvk9gAxY>fNPST54S##ZF
z>JJ))UoCn314n9Q060_@J$ixZ4uk|M?jna$NJe}>S{=h|5^CWWlPLx5`eeBsml<ee
z2&}Y}-ifG;nY{vKIHX~Pz3^4ss8y?VjI3a54R+}rh9?Di0wnFDNH64uPtQ@UfQMiH
z#0EC@Zle;E(d=#Gh4oLNR1V-$_nKe<rP4H$osx)JmFL*omExcmz6`wle2T60Z8Uc-
zAx#HdpW%5m-0A#2!df3+eRc=0pYP%R`#p@gjlD=;k=hOI=CarotvC~<MtyGV$tX8S
zUmN<NRBONM<J#*nv+*c=(8f_Od|I$PQ7FPv=^K4Ncm`-aLo+GVPOr1(7B*o1)`nPd
zI*3M0nt=6rT5!@9Jk2d5pclTnzxsz4yY@~<k461tIq4ufE*olXw0ZYeMnElmG7yyZ
z<kTlsAycYU8w0-AlnNDHi@kP&EULK=o_Kc_<Y)f2Pu%P`83_Ca8309SLF1`<^#tj+
zQKxRh%{T5pzf_TV)T&l__XEMaz4#SliyxoJ8%|srRth>$6QDmz|D_FtnJBV#6Eb8}
z2y{rGc5&wQks%<Ljdo$#xik|^#iXJmAnvK^`fF6Ib-Zh(w`>V}9V*D~uPCkT7R$~^
zKO_=z--7|Z^tm=(JAVT~n80(&cxC&ufHOilq(wi4a%llx5b$@B0U+1<#A#q_8+h?K
zV9*;P8to!YBj(jm6;R+$qZ4gmKVC)ZjPOgJ+`zpL0aIlMX<RI1-r;q+PK*@?sKUxq
zZMC&}xAA=Bd`f|bOD|@Ot?-U*KhM`$XLM|YPkw9fOJ;$&JJz+gTC<4_lI)E|Hlusa
zKxGchuegFk(4x<j%WpgY+RcgFBm^h+66kLwQO=l!#Xe-c71}5$G)x^=jJI?|;$5H0
zlerbVJRWB`OQjPhBFZQ%$%#OTQIca!KdFOu=D2h9dr@*ueXH+I8?@qW?*TXnX-8R(
zBO#@Q6#=rO-dYU2{+C|xk`vVRsKwuEQ&%J&dc9GflrK}e4F72b35J_*q`>6JCISKJ
z{_B#kfTWXnH?gimak0fds2z)TV!D}R1e9*Qp6IfuwZSMn3J&k}0_QllzzPazr<l+@
z2`xbq+Lb83e&!Jew=a+Jx!<^e+}lSjSjKAaWo!;#MY+^~=heAQdJt61wWS41;A^e!
zVC@#Lemg_2Gt82NGU|LFY@%5f*m1DYeF2r4gO^`y;quKs9(mM9G$8Ozou~BFP}jr4
zG_*IQy&wIz;O1=1%4J~vCUFT;mS*QTTrIeRX*?ZHO{N43mtT8VHkr)6=5{uKm;>@2
zF#>}=Fn7}B{s?5ua?6!xcRo##Ce#{?7QGly+Q9{*C|;`_I-M2axS!?+Eq?MEiMW)h
zMJ`^QG7ch@#=E}y(F=c&IB*&s_TjjlE+Wq@Ex0++zz$6aKzMgF9F1Gpz0+ca-KiOu
zbJijm?=c{x>-P1+H2<<%Jh6*sYF15bXLaN~pbKVPLERKm*AJ-2)qk}wAyh%m%?M%S
zU@tlT?<B{s*kJ^aqZqE3w8h`X6R>uD0j<O<Ft6uMx3(**(@*>y$GJ4AmhU09kb_VE
z(slI5TX5YFaXP@|=5HYkDy+5Txpnpk2!vH>G`_V&93l*%xs_wk%`lE4mm7C$z7o6A
zDSWSl-O&XMk{v#dU;f!WET5tHU0hp1)C+J^qv5Qmq>*|3qZfAJ?6ExfXy{?}T7s#D
z3a6B@(CIz>dSg^9JVv|!e3=fm1~4nXFcy?qp!Lg(RW(MXOG0T#>PTFwlS?j7hyf!5
zAZ^GvEKuP9B`8cdpu7aZ1neK-LvZ-Um_V`Plks5Sj}3(5lGh}=zF-031rXUXL;1J^
zf7!=NulBNy_L?7Irz2bGAu#|M>9=Qt3sKh0I<1{-?Z!63iiepcALY92_D=3`FDNP1
zwRd#=DTUxCKdjPi6ZwAgq^j;xcz}`q(El+D)9NX&|F#ylaxo^-c;<6VD56^cTDvpv
z7}5dPOn5zsHCk<D2(;0eK$cZ%(S|u4Zg3|PtvU-FTk-IlpV`9d#vM*y)q*)(ZT>bQ
zbm04ScwU3sQhRQdTU~QEU0!t#hYo}|cRM-8gxC`pkjJh7rQ}^noirKe3?ppyUqQK+
z;f3dSasHJNPTlJ=U6-Y?wQ*&sarzQ*we{cX8I@VpExOe`Az41($My3mi*pE#TjK>b
ziKjsPCvX&vrAX)@-)r5kiTh@p#KP?JTBj^3l^;`W{xXFD@-FV4Zh*gnkYqd^l^sxR
zNeVCEpdnz;P<mF9K`=j-Az%-HeyemUwRQ97T}<5{AgyQk%&*_V%U7;vt?^|y&i1|<
z=WRs>$lvZf09ih<yYma((bnI|+-}y|NYEb)aO}hqW@hS`nkEaJVn{8ZNS>94it1RO
z&(!yrTy8-Tw!h0L1s7;w!Oc+*Dbf(X-J%NH#Y1m!Sr2@w<dv-!WcoRAFV*p@dIZV~
z3q4e3VM>n(V@Xk6tl9+$L&PdjRUETurL0(-7t$UCmQVXQ_gojxJ$D(7-$u!uN3(w!
zYyB5du1v#mOYog3xDJ7NWnR!azsxr`5P*q@Fx*bvxbH$?bX;n4M(-i+Lk+FLB^<AR
znA2mQ`?VJSyZ_+?!XV`|n$po!n1ysSrjkOPiZh1q04PU;;^<Q7a<f(n1IlHW>-!b?
z!7{pXafCNg7;e4d8L!ip`M`JBf19~uc?Q~;(*itpPk_~nk$jjc5!U@3h0G`Y9+};&
zL_jsZ%w#pi_T>Ao3c!R1M4qeqTg_w5d5}OeXQ}z1=AhQ_xb(Wy9pT*bEnK?1iS~XI
zL1~aQ`?t!8v-?j|O1Zq@OnuuK06D;6cJ-A~a^JI??ce+0nYr&BwOeapcYh1j=~*lv
zU&j1m1N9jX<57k|FK3BpLX^qE3gLpcE-nw2F0-OFTWrC4rRxcBAh{2Hhpgvl5!2_X
zQe*uRV;D>^l1w_OB~S*)0;f#G!QZ7)f6N3Fp1+P~nQE*jh<pz7{R$(%OhH|>NOWOZ
zM50Wfi%~oWb0-`O`Wb%rcP}G#b`fw5ZHmjS&%mR)VTX!(s&J|D#_<^gpr)l02TX1+
zwI}E6Or3R9T0yNWDU2d@Q4g+H#yH-?-tamWYLDamg-twpYZk{&lyKvE#tcO=1ajO8
zG_`hXQerMraqJZoU>!LT9x&YZar07wGmliz?<ayHYIdg>4)&##_J+Bw2JcaxR<WWB
zT>-P-n*uTY+QKuWP>STk$OE9R&ne-cn(D1@tzPI>k(w9>?Tc!%k&u(fSTX>v=C3jx
z#xv!Dvyy{S)nnaAa=HfNF>c@NVs&*J8yh<qjRx>M7u9kQ-RZniAI7U+?d7k19&f?;
zhEjpke2@?E%AeY7hnt~WcaJrmiaMj+aIdwB{k<(zYqOYNT*Bhw3>x#~t^%V08G{V*
z*p*$C!&fFtnpvO`U@ipGlfx7hs2gG!dwMx5m!Ez!qG%tfnI7gH#k(v6Vtoy73{1|`
z6ROx&iV`Lj4k$cRsBAhzVZsP92!eUgu9|YzdqRn((g3DrJ^bdcUBO<9T>lgm?>JWX
zehb6AiO_3s<l?ym`uXs@5WYu$t9^-bo=WA12~FH>R{#lN?G>RA8x4oruDkGjA3Oc8
zVW#phk|f46UvA-#|H&1s-pV;vHDI0b-Bg$}v4)guZ?39bC%P^q+kN};2xs40D$={w
z?xt-QGXW{zZvl+@`64W|n#9@|&;*8aV1|-(;W$Ta)<JC+*x$++qbiuFh2pWaX`9>{
zSS6S+EM*LI$f{36SDI3RS-I|_Jmqm1mZTY4`#tPjZex3U53T)ujE8+>d5;;Vm2!i+
z-i=n<&(`+_7kfQC_gzWW&))3a{~K%o<VFvY>sxM6d+c_z^x8NYV|nVy9{ffaWnH)5
zU&ElkgN-!`3Ffh|G>6&wI_8guoa-L;Qr@k|UDX8`@~OI+g_r@egW4NE*NUmX6;n{l
z-&<55;~D6xL1?vM-YgWTbs&9+;uwgl&SWBiFm$bgwHqnifw|yHRY;tdBHJ)&+=Tke
zm^|%XL5|tuJ}$i6#D(*(Bk)HEoEh}S>sT8;gD|X1h~U*Y?q~O(LIJ-*bPMCE@I)mY
zJ;lD0YsVQ+m7Y}Pj9k(vwaw&3490h`Ke~k3(z|f^@-}w27csx=<Ms_H<}r<0ZS-Ba
z?3$EgOoWN;DOPY?0wp(A35-lpDtj0!*|GwY$hqK$k2G^KyS{${58%}BWOrx{t`;*!
z4$|5VOgfOBn?K=UcP(ZEAQMNM6#^Tya*{m4uD#NGkZ?_%AqkBVU7M7sD=w;apEU=l
zSx7V<V|}-U?VUYr@9v@7=^&<#!%ocEF+cDTxaBN_pY)?`cdPSKy%$}+*vGl2hUwb=
zTe0}xgjxW(_`Uem^O-+dS?}~evp2Z*#IeTvvPR|MLGIPVDDSyRzK6Y57yGR>l)@?+
za|>(?8Z&iFH$0Yq8V(XBppan@ovs`?b;7YME)A_9WcvgB8kIRPsbDMiS8p``Hduif
z#l=@VeQ`e3uBmqz-Kxv{_W%|_$CBnbtsCywr94Cp6BzG9c4Xm}Pc6CVv|>E-^m)J|
zHonjQySVo&a6D-}?l=K_Pmq7|030`f>xF_N=oG6GG~o%adMRjCf7$tE_jeuYW-Og=
zbJFW_9qja8!c6&LjEDPp=9wKl_3bNITTPhd$JL6gFK9VS+S4)4leEkzI2Eebq3@#I
z_ON~{!qUka2D=G|7JU7bgQ5vl^7-oCPTV}}K56jQ7@(q%$G+R#yqx|}K;meWGv)cp
zO9!dLlimndkE$-m^i5>c=~YxC><2C?Q!Z+>=qm(HW@vYNxOHRC-QL>8-rgQY<37=~
zGsjCANcBSxzEjBpl#(nPqCdJ_-5A{pd*dy{`OP2h<*)weINOWgs>S~%H3re1z?Jpb
z+xlRVKl1&<=GMQO3SXUDntlw^<%fE?+wc>=@5k8)<9LXz&3$Zdh74>qX6G<7+raGX
z6iRa*bI|*plw&u+3*<W(9pD?UqArCjn`Nyh4YzfgeC*&-*DF@q-0>~G8+<u%KPLPH
z{k_KHHM<}mF7Fz$vB)AUzR!jgQJ$ibUl+go*-L15o6^$UoxytNOXy{*D2229F5j&%
z@=v#q=vN*sVybi1Ne$|1tBRQ@1YlQM^-UC>gf;-K!T@}@nJ1;sUKO43b##U|Q4de!
z^^3Rh=zA70zZhV9L$nSPA^{cHoF%$0XQCdbCWK1<NvtEc3wHzDyg0(idyA{6uR)O}
z)tA*WEc|jxj~0bp1zc-=)`9zE9<w4lnoHC3KFZYqNkp7ab=;;0o%Lqz)p#y~l7~_y
zAie}SUWlS$wz;>5?Mr*u+1bIM-$9ZNkUJ64gSeq-K&&{YmV{22q}d3g@lLflS_|9b
z>lkO7w^FD5BT>Hki9xcuU(Cq2X7Rs?oq^;^$7v^v)31Iq^cFu8#izcz-MsR@*Zkv;
z&r}}4Z0*sg9xOzOlZ4}J;HK!KKkTC0-NgFs5VcwZ3roi^yD*Ddqk^d!kLi+>NuZi?
z;-L%R!@jfR^aYxq*v*YH&|R*5aiq*u7WaN~mnpC&{eGoqVB-S^jEaa$YC9#srql`W
z+~V#=D$>-^EDdT?K6}i^rSm(ua_u_2U<3~(4C4)~4ZegRoZ^M;Iwc0|Xy<lZN~wDA
zyb^pi0Iu5ArIQT}+O>(rCdaGYrUJ8|6re7qFeEKE#rEJiOwHbdXxPO|=XUWeA6dcf
zcB1(D+J!Nnt3W?~M3&P5h8~w#XK>494_mj0s+_P#U})8{<C3dy`Z(%aKxsT32AKP%
zQ@{2Lt=^G3B+*cVeea10=+8NrUUIQ>D`nvh0rg~qVVKEr;RhZnwE&fh$1-ihIL3Z^
z53AcvG+Rw{J8d!o$VivnjYaJ#2r|#9l2&6vDrgCM?r40wygR-V_ToDjr+YWX>CR8Y
zdGnVOXZLEHv~9umw{-Ep$*sYPOCF^=;|M#y>bp~)iISCfbvsx8=2q{;zcgDu8_rc9
zM76Xs$ekHP&d5)^p_}D>^aexpZZxrayMk(c26GGZSXh`ry-`7}5rE32M}w4qXVm4D
zzDS&Fx#=cV`1P-;JuxJ-GmBa2JV;TB+I`H9Z8_3vf@vK<enhDXO<oJ?Z^Mg2A=U+8
zDc;QVf`@i%jOV|40r1<Ls`H&1u6I7q4J`@iV=|Rjf=5Pxc5U9hL->9fp63g{!Xu-g
zTBLCbPMB;4L1)^wwTWtWCNl!1fIaZ5=)_ksh&NCw&EeXWb-e45B}~tH*xi<_hw%ce
zlU1Luj6ng8N=lC}Waj&>+iTOg#wgV)=u<BP%k4KzLi=->grh6#IlSQ|tI>MFHr1W9
z0Z7f=u;u{2o@#VGVDY4ftsA7cplcF51c8rgt;9-9q}DVZ^{~FXkDcZ&c6N6#9CnfC
zN#=4XSOVAg5O95OnE8&MxbQP%<MJ?GFL$Cl=tirE(v9b%eD~jGPUrJ+ws$Me4la6q
zfN$;Me+zm87BCHsB<p4gF1`j_{L3Zh<PVRA*S>Rm^tJ!B<{f`>x^xD!m9tqjI6i<E
z_)$LelYEF2`{;Dr=yW!)e!GlnZ3eURi<qCEMPshQz!aCN_EU`dvg2ul-8h(9Y1o<s
zdT5tV(l#cQpui?oi@>C#qD`2YUltg_-Uv;8<KC;qt>2?0!OWG>GoCu>G$?29;_2VN
zh{0eBuAd=vXVB`uif()xL3x@#L>4_60`dS#T+Bm{5qL)^qOPm3Ltw5e;B8H}2$m-#
zOqbLIO?>tya_v!&_twYm@I{<%d>4kp7GAxug(sgliQS#V2&NLSrvm^vC#ycf-u@5F
zi7fH4c0Iy_AE+SRmu!Vzxa<W;cFm&xDici>R96Zf2%w6OSJ#-uJqm+h_6CK05;$6#
zBF<HSY9&Be^7%O8bc{}a2di5<*xPTS*KK1QQ(r>TG*3lTmhVA;z?tHTOpfQ{)vz_b
z9rlw=L}@Qe^3H!q^ZlQT^PMloS#vYaNHNj6F?X$zcXV^mNkc&Y9;bKq$GG#0zFYrf
zf)fw*dRPAHZvWh0s0F9%Gu8Vs6`qdD?o^Vwj-PrXH_ao&d4zVShxYy!?%b-NR-eJb
z@&cBR&tYb<gruR`L=D9=&=g!Y1)Q|iM`6X`Tofa!fO>s!#g}cE)$zN$z-2kB*BLK>
zp5ye;8-%BdpD*b@b0x&M_>~;fvjHx=vX1pTHxUG6LuyEqF4lU#13x67k8liHoB`+k
z3H7Jn4E{L*dj;A$X}7qb)oPDJSZ|zxU?ZX7&!YB%j7gsR%oq%UDq5r0uvq&b{9p<<
zuiwVm2Ny9t6QH##xC&<mCs>e^wBDj5t5~LVxk=t^^;(Lv@7E~>dv2JuUd$NX)z>^?
zA^mcFMFf=i9{QD5{eTGlNV66~?5RgYsg|QUO*?*$VZ4u>_CEIa_t5P&F&giK;&n#%
zU6=biNJ(jk(5b-5Qw*aWw4-edqbA_=5To6R)6Jib(foxdYo1H;c0Zxe;BC0*{}8(a
z+b6EQf?l3vmoEaBe<*Mles~xke{#S3%3ll6_<^#w9L|*=!OYa7QOTcm69NtM9x`u)
zC>tW$r<=Bh)f+W7293FS%rDNNLE@HFaW&4ktaUudq-B=c2yG9*-ZAY7Yj$w9Ap#JZ
zqm~{5E`tt}A6A^FmIv2wQa>h3K)4ch|C$fb-09=OYZu}B5gV<*4{&wwQ%L;?zBi?I
zY+C%GS^R?DhsqF?l$T?<&%y_`3Tb4cF5Gf;#*{_S^lX-J2#`^#ifRs=J?!>h!ttq(
zV>D{x((7CJz>}xZ+7&OrbPCmCE(IoPuA=5*=)WmG@Ix1^T}k@}p)a&t1M~~C&Q|KN
zhv9%tJg9ef_6{=g5=_`Y)?Bq|BT728Y>P)ZI!zDl-2q;^{@a9AA*b%jP6k5k$xu)^
zD;HQfH8zfM+Qled$9{AJ-S`&BJ6$Nx;$6#2$;F*sIm)kotQDVo<?aL1SNrX==>HH6
zz#r@t#M$mR#_rQ@=05GaOMj)GE<CjtUHMzp{<)7&hi9Ux(u!O2PXK-c2@+&3<y9j@
z$q=Jf3(eg-xO1b9sm2@|g4u-`G^pz=wUqB?{6obtnwO_M0VVxsACGqZjmW%`8n<P{
zwLqmkDV1ulet&U#6WxqOjW|cOA@1)B&z(mUwcz>*O8yjfde5U1-$12IsK2=WvfGDn
z+>ng{8w9oc({mc9px;dPVV^@SB3^h>>>>p(s(L}kCrm={TnYg+kVvod{VH0+bC|C_
zjv$!At($9j_>pDQ8zt<uQUMyNpSJP@CIC6J_zU6@w`5fE*n^&f-HkDpPlt#U5^ol^
z+R>#<zW^+i29)Jm6<1XoI!){i$_{E&D^-%?AXaU!nWNXF#wQsnW%~RGqo~PR{*F)g
znbLGM24Cs9@pu=V_+@nCb&Qf7M)%8M74uUo?y2cB`0kZQvQpT?KivF93{w(6)3@6A
zM0mT8KSTrY^}Pb(^hD`q7uftY&#nJ@fZ&HZ!{kTW(MzKw?}jtsyD?XJ9QD#Yybxk%
zfW#Rf^~Q+u2)j)(1|doz5st_h%wu+;ftf{O%L!&M>Zgc@QWh#Zp|#_iLy^U=y?ND0
z)PPSam{9MRe=D1zjeryy+2Eui=#bZ5pZ0O?Yd5gHy#_ywxtqc$Ze|<ZFC#2Xso1s1
z)zi6p9Dj-tpkP*mgZ%BbPJ;R_UDzTbcawYx*==RPJ2}N3Y?{O?aESg}!U#KP4PO;6
zV7!M5udn01@3|N4eL>k%O3eurXt02Z`)byKwENZ%x(KjwJI2Zba)A|QIkCG-JBI`5
zJqxwfx&qvXF>v5hccqH7=qADvsTg&4at!vQg}D>}i5FDn7Vi#1cb=QH!s%n2Y@<Vq
zJ=(<}+d)K3J=aIcpT%6|K2(DSs(u9}FU)E|h?#nVu$H3c*Rh}bt|^u{1PlLdWB~pk
zV?ZgaULLz^PgjCt?t6~^jcjjx9qXN!aHIXJ9Lvs>&SJLm7;52Z<c^OB10+PCaYl?8
zG+S*no2v-II_gt1m|L93yz&g_zK@3)M*R#iwW(G$;*u^?i^(oeR1H3iG2k6v^*9t)
zz*TZ(Lipjur6z<b8sT`}0~&KaR&Ta&>HO>PLvsD8EVqK|`=3Vc6SJP$*wE``_jjCf
zM&O@A2EZ%1u17|J;&$>11OQ~Pj8cUR(iK<$Px*=8uE9YxA&4sggFt-01L=#&2;^h{
zq{T2@x4qFhEL7i*zzeZ@a~1d8e+<*J73}Yl>XXsYlZFshsh%<nlZI94?-A&^bBEH3
zM3S)xMXHjpAYNIsLo2MXJU1=)96^Ozn@M~h4;>6!IR<TD)FwPgVK*As5$$hIJw{{d
z0+C{vT*Y3rj$wQU!*rd2zR;gTxwMRF|33I0(XgoXxewp<xMNf3Io#xRt_n;qdRVN?
zVJjsm=Rb@@-aE<w*rRaC$%9PuAwsW=<?4swxGU&J>*$UzV{d!|JL6YTa_eXW_cM>3
zj6voGi1Pswe?U3~AkxuZYY(m6Roo7$s87#gZgBx~3p1$AQ7yg8JcCg$K{OBvEQJY>
zz8rTVDv*CA_AN$$Z~#N`<s(<U1t-D^ZWbx;oSJtLjbog9{#9g7htf(2y=m+Y&Skyi
zCQ6k#hU{ebXAdA_#NQ(hfR6vAlFxNZ8Fk%NEo-D*x@tm5R8`K~D`QpE0B9nzPG*Y!
zuxJnqFM!g5<bji97y(|*!8t6~K8De#gG(3J@Wc}jpuH!240U??-1RD8+hA%YifXzn
zOEZ@^0R6U$QIF`jWsIr&knyx+@e7Me9%cHo4+ONsm!&xhu^h*JptA)G_rO>Wd316O
zBwZ<%$Z8^@f&>yNi8BIPKa0?>Aq*GL@ZJrNuQz2|R5MVeKS}eW<X2D*DyRklW<nS9
z6&IBi&#hC7Crh;KFpamd0nmf*T<n0*Zy!-M0PzGoglLrCg{jiRly<=|T17LuhOOZX
zD0?&P88k`{p&G0p_X0#1BJuiwJ3^fG&}y~V7=%F`wdq;RFD+nhNsK{#)<rZD0Fm|Z
z2ovM(xkbxxJ~BQuwb*qPfo1{Ppr7vg<K|rBU#+`%`gdMOr@sl$PsshoIBsFH|9c2S
z0{x`TA+?d=IA8Jo1pq9&%-*9N+x0VI0NO6Ht(2=3YMK47m4eiBn#jzHUZ(_=5fBW3
zQiDG7EMYHTclZKkO7EoxFSv7S6{pTDqdq%@y{$wz@=_Wr`FYLD=RSgOkkjY#W4f+B
zI=eCEPn8)HU@3OXz2}Cm+(j8&MoaIdu&uKV3~7h&=PKKyJS)|XOLB;M`si9rskxLU
zEz-0#$x_sUdr>J>r6@`j@Ur9#xBH@9pMC;_UJ0RJMkOer?t54$m2muY72{Jm0s<Hu
z)0_BEjYD7nXymDj5P@4kf=KOvW28BeIH>b&3H9;=sFm(xt4_vXXZ#wrhR>nm&Y@90
zi$<A@!7_5!N1Tx{7$NtEi1RVp`)%y+-NEgvHB{@fn3<nrW6+qb!uN%N7!6V-gDr$%
zLGvvUQY}YjA=%vWi+cJo-<|UPIc66Fy!N#<tlqu`KTNqy*LTXe-Tigs#P#O|O)aTp
z7k1siWz^p-!=c4b^k3rb!^;991+j3XCMxMZh^j_iRq&}irDFS8d;oU+CI8Py?Gg~^
zbDE1V0D|{2Cq+PBK)i+4=p`&xK8z@C;{2=E@sU6BUX-g2H~Wx68J%9#*%Q(?pz<vt
z@o0U2UA0Ky=JtAo<@;2Tk*cJlMNfJNbj(sDmSeaE47;Q`r8+WM4Oj`olxbq~9VjiU
z*p?<EqZFjYFLI?$-!sH0!X=1g#n+G#8Cm=#KSaqZq2vcBdp_!+kEL44U4C*pTMrU9
zNMlvleE7!UFaWB`gv_>^`+Q@_C6+cTl;4X$Jb~O1d8>N)e$-0$GB10aY+-A39_xc=
zP;uwQGbo=$m9hy=2{9QGcZeJV#Q6~Ib{qTq>sY->q$8puFJS4|ET-lvTrNw-o-hN_
z%gd>njd|iq0K!f&s#enkG||jx9M5t5-T<$Cc^|L5@-m#Dhct^&4rZ{^`6>qKI!fhv
z<@z%!uXy^UObkE>GJ*~%129NOH2@S2=nkhvA&|zxIU}Gpf72#i)&T#XbVsEUkav5R
z>H#PXD1{3w`>QYv!UCqz8h#Cp(t~7_u)BQ|t2d9~zI&IkaZB1?ut&tZu}(z_&wye9
zE%3pWoaC9Xx~7NQSAoa>XoC3@E`yca7JQte+X91k1mp=&t4eVdk*BB*EO-G-1<=Lg
zLOhgvp&cA$APiq4rP_p$ucIK2<XO2&DNc6(z@yzi<liMPM8)?}FL^jQ=Vj%Gt4LRS
z2*uzY8Gtu!5RaDjJOaK5Sa$=_zf<bFbi;CTTd9#28G@XYR49I}pz7X(a(D`9*2Os4
z#8&hQHb>8)>^9H{9zdh=Fsi{x&ZS3rAF(^&)MAo#(eCb|y}ydv*Q%)18_F}7#mw9k
zs*Ql%)OeI39+KX(CdTSCkP?l|fU{3H_|Uie_`RPW;rVA?MVvR`<Pie5j()U`&E8iK
zlqn}j{}<O=7=N_jg>}X|KQsR*15nB&6F|?4J1;d6ns89$(N*}ZgJ~=7XZPRb+JQV^
z0F|yG|C@0DGAx3+F=$6#fU}9_;CU=mp90Xs<qH=vJJ&#Csf^ZUQtZeqx2UucR2j7D
z(#4tpr4ngHx?HHVz1PBE5F(E%*xv@a&0N)b$YS+8ZqO-&O^aMupew2X#0dHn6`&fN
zFytUM1d=)s6epL=3iBw)6nZR<!vAByk4kna{30XZqY}{K53w{A;NBAf^3cihD5FN8
z<QpD^0B@!R;AyTbGFfeEr7eOKWCUWmb+qJF%uTxqHJXe0hi*EFXH>&`Q48-yl8+E2
zP3%Tjur+#-bH6jC`!QE}m@DAmRxri@<E(?+?;}DVaj%8_&Kg#4R#7cCFtad^#ba}r
zS*W8vN8Sik-pO2~^3bW-9Q9cTXWr%E*fQ{IKe3PB{@eu&(+%YLSjmQsvAXveIH3>6
zrv<H0e?|Jygdh1g?fhQmx}i&9g2o0Iup=6;$DQicLQs`$T;^W{)kT_J1AWT6s&GTT
zhsu5vagB+8z=}$O^OwRI?2pc4s{9y2r-9*U11~;z4)6ca6PQ{I(AlADEg_OA38Xka
zbXf+B+<N+`!MKZ7w}qXp4Ggn8*x&tbbnb8qa4Ekwts}I+p;T#dSVMxTdP<n-F%fta
zQ|1k4lCVO_JM*}MZ<&ErWkwYUC<Y+ljV7RqK6d@fUVui$$Jr$x(>1!d8L|<vRC88b
z#33AqBLomgh|^FcBt<uj`>d&F6YBJyQyyK|IXM{u#H##`5N|3tAp<Rf&c0KEAD%=d
zIEggtW0Y*78DGNg_$7pH6*Hv=FjIOIHUAXF-Ha1ZMj`VOWKJ9XxQG7QHn!F)D1|jt
zYQ!;^Vb5TyQAWAup)v1adN#x57e@H;|FDVMw=TjhwUDG^R_qDADcs)w6~q`J4CZ+<
z3Am>yzwGLZ5#S5}r2vWb=LE!#W`p4QA_GRd7Ww?l1~jxo-Kj@YYi*^YB4p4#_q5?5
z&qQ{AYDktbc}G%&M5C=D^@rH)e+4Vk-^(2McIO(Ne>TO#kG&gn%cN7NlzEj>E;m6<
zBJ{gG?5uC0*<3@fzl}5<vG7Y{nGk&!W5UsF{<IEe?D`2IH)W(otg;2RkmMVz`9k5x
ze1bY>`q;pyg<j=2pDDvE?L{E~?ff2BSe87G7e9Fbvy~7J&W4x@rH=z``srv45)(gM
z$-l#90Ej?Ny?VIilcy%XOnll69isQ~WT%~rV_T^X<|-|bu_1gwE8<W`d#&zHJ8d;w
z;UCh>i_#XF(JgEZ&!glt-0ARCHWl8B>EK>?!5k8YOv?bNJ3`9FppDM%CU%--luI@E
zKBel2pc8OojX{5e%xm)EkD?AQ$f|b?TixG5FJ48tvZO#eiR;A(P^mBdP>$aKfT{|R
zJOY}yB?*Zn<)>u6<#GuL$>AN9^#C+U$)eU4JsKqS$DAd0{mJks{XjARWSF$*SDv9%
zUcjJ#3(es(m@j{T4P&=|1LwXrz~aIR=9gzsDu)>LV{|$l^m_Z~4>}l(_K>9eaGWv6
z@a)mJW%lT}U09-U6veYp%tocBIHCDmj04I}#j{#O#HMN67l?u%@lI%m=UNKU?BsNx
zPgQ}+?GL>GW#7kgJ;Z$tA5~9e%{k;7P~l1DW{ykEoQ^zzH*ZM6iWYd6ns-uW2{}DO
z<*<HIL6r27W@C9Rq1jntCUeFtpG4d?;=Hp_h}me!u1S;KL)krna<GCFBP7XwwjZx!
zyZ0LW+{aXK0*&$mm@1t`C0OFwO2nhF(?f<n#@P_#h~iiATzPSN8H15YJm9k^du42O
ze-o|fJj&H2m9v%@z9{&ionLhRX@WYu@Ks2_-hi(FK#}qy;SH`>B<`P8k08AVj7pF4
zst;V(0|tQAftUy+V%RKpVkEfeTII}B*zJFn4b@!b1BkL7qU;XttZ(7Y8W}F~x<*JT
z)FJ&~>Y(TmKug~+B^(21fL?M9y>W^>{eBTcHAh~AF07%bbzpce&@%3Z(PS_H+jlTL
z4YTl-$&(bJOPm5v831m<r7FO<27o*O&qv7%FjFaGspey;LdJkEwQ1~1LW${^HU9@k
z2H;H`!mCkaQC={DFzaqZw3~z>m2;NZ#b)<1qaB(+LBawOxW)@0*EV5{KyuxQ@eCwX
z;GQr1*~AD7{aJp0LR^Dn51sCpkavCuWp5s{<@?YG&!X<HAV-MANs%H(<_-{LT}0`K
z$v9L{QuB@>&Gxa;`7C<z2C9`4rY))L{FH<DGl}^H>?;;MEq00f&GVEmlga`E{uyUi
zNm<d(ujSMXN7)2aDqP?k8h<xm7vTj^?5}VD{#$7>GPszrAPE_-?fzFejX7I=zg$me
z1h@lm4Gx)EHeeN{uRlbd4ls&#(2qBWJC9y;6VB9q$YS~)%l+5o+lEu5a~dN4qC*1~
zSDC;9EJ5f4yMNI(PDo3xR&RDfWdIZfN`Ze<r84Gg70i`=R7lQEaXKhD%8fo!svUN@
zk!qZz{gkSS4jBvZ@Pq)W3^(vyB#Bxq%yYK@pPW#Cp~mK3m3JR90tp#|G%_wN?P65!
z>X0#@-Htr~`kRb^3KOIux5_FAuod_X1pX{gKEt*0QL>NC(JNRRJcE)`Ww*ZWpGLiO
z5+#2gp)<?9_9(@eWNqyBUqEa83Ilf4>ODM{B@9tiTomQLQuU_{0Oh6G3()C5+WiF-
zEC@VWov`S-WRe1EQi=w?US#@x@;6};vY86{Pv<UGf;woBLLwpjdJLpfQ<7>u#NO})
zbUT+Z6+D27e*(Tc&Gqs*#>lch2H7eG@hami#J^x^0#Y#!>L}v`!f=V(Y>USvH`5d<
z8KG4T{cBpaQh`zu0U8SsJpuVkuSU5J`npJHKtwL0W@Oazm%>Hm0T9)<7L+kvqMra2
zpN@-FN=;e0(nIHr2@((SILAmjuHZ0^Lty}N<x>-(hIBzChg0an3SYkv-ykp1C*~lL
zhw>_tG)9t)*fZb-%?cFc8KiIs*kj{B9)UIjYVk88PK65`LP$749eApx<8VqRkmZyz
z>|>a;(22i-d>p~aSo~4&h@AKZ9bUxc(h7WknlT7Q#}qL~LK+3a*@7Pm_><k=Hz_(T
z1R^X~EiYy@M3q|QLQsRMtGK^iA!{bZdxY=n7+Qn`g%V7=J{?O&+T6%E4XN_#DzqW`
zGBqQq)K(Bh`)J0`!-;73R6Bkasf8>|LD#P$2<P}ZNLWGQq5=G{##{*oL6uRLwXZ4&
z%{djIA1gC6r@(sBI5?`=2l+LgE7IaB8$qxT@A{t0wBjTYPmgo_eu$}{%rxJCrPoAC
zT^N%}9F!{`9q#^<)6$7tt|5uCIL^&(bhr$`p)dd%y4AQ2i^907HLX^t=SfMf83B8e
z3Y4ZGv{*<*w}dPsV=!i~fYO8H=H@CqU>8<p3pi9zi#>N!E*jCGA>jsvkr3Q~!i17f
z{C!$j5z>^fh#`MR;51NjPpRrX0n%g<XfacX{{{S`oxjX<UviyYx57ribwW!2sZ^j3
z&ktOO$nfO0=wzOmcL%WWLYknc&sPmrnEU5=+yk%J-Kq2?Gx>5ZB~WQZ3O^+Esurul
zPr`5(LC{b}HG|97tENJmf_We*O1g$pL`9)S7*-LM2o<zQJ5s<yx7RcXQKv!}hrt7i
z<||g)9+m#2W9;`5%+5+mkGKVd4wK#VSr~*|eiu{a24-sw_>Q9pJxbt(>kuVXsu5NW
z4q0Q-;mi|-0P&auCn;n&gyWDHfP%Whe=A0tPC0RJJLLq<%m?Up#?00u<r(^s#U}iD
z5_w4T8nwtacmWj)NxSI65D4{%j6fnrK>bak??jK)SOF9;mYYT5!}X^TpvJ%>zhCQ7
z%M@1fqMDtjig1X4;)X6QdUpF!qV}E&`Iq?LcLSHpf0Y0z)$sFgRs2(2tU|h+zm~T#
zAp)2{Rnuk}7*j+l%9yy~^$4eq&PQ<wB%{bjpHYKR<#`F~P8%~aP=r0Gj(WNex;iEe
zMDn5{jsfEYq-iLn%fj1{9b5N)FzjA+KHOeb)flLUB;YCF1C&AsH?Q`vv$Km+Cr@H_
zF2~fY%Pv0E5|G>O2N~CS)GAXTO0|=5mPr)>6-`Hq8V0GW;2wVo;eQT?08uRblL=M%
zLo^PF0T7H>Yfjk3C7cZ)jzB5LcmIjgn4YbnKa6na);=zsZ(?V2#BZQoh8Y1=eo8K`
zPsV`s++vV)6J-z5JVu_yNO@<I1x^b%GmBV41@S}$Ptdr5Y_&A$nG&cv$;b}R&zlLN
zWy7r2=Sq%?6@R(%uk4Bu5C))!&}AJu!U8DmNxv2QuV4ULRAfn#b9#*_x7?{Pr=mu)
zzzl8Jv|1~Qf!MR5c3~M+1e$)zENRAnOoSYgLDAscWF}wSXPuVRLlzpj*_6&zQ_yzj
zRo#HbGPGMyEJ7%Lfzf0$8~_O!Nb0M#3B2&~ui(zsSMWgVJ8}BNN3l4+gfkDMm_P1t
z8gDdmapPteVW1l&>uWiIIv7f`6fwE{-Q510aEq>!4LT8qSwbNI4&yi!20%|V-KtsU
zw?t=T8^*%~4?Wtz!tykWR)(b#-u3R|c=SDsSYPen{3}hY-soX8N;%$S7g0@3uCN0U
zL8{W>m_mevDh^fpFeigS3tbrmHUJtkkPL%_2YRQZ&!X6pfFj*V-t?B0Gf@jvYw;Dl
ze~t7D2B3vMCO85_2GW&$+GSNADlV%9gi#*_DhW1OG#ytLopTI_U%TmS1nBjY&XY($
znXp1z&-7@cSE?5o<3Q&v9?wBRF9GS4_r`n<^3Xz~1t8k&#r-b8JO^QrV=#;`Rd-Mc
zLkv1(%(=pk(|Odaq*O^U=#=on%fE#iYhOS)n8uYGzl-&)S8@8plW6WfiRI-5%rr{q
z_xG{Bxs5QCmg>4+LXkgE_>u%id|c83oZNrvlSr~g4)-`5XYo+AOFVSrP#6H6xDqRC
z3eOouliaR@#!MB%fpo+rBeCB~Sk!T0c@BT<d*-mW-@~QXo4EY?9y)sw0?$KOlH@ak
zV>!WV<Yo)6AWNy;IfV%n9!S-pEFdumoIN0wSTY(a!yvmy;T1?KOQ+z9MM$G)%%L>-
z8Qo|8ze~Sa0!)d1Y6&pn0|=I&^!v?HDY5`I)6a;2sBe}K*#H8%fsd91GgF?6d%4*O
zElOo{3m&l;I6Hh$9m0!+Ba2^pA`~2bZMa$6i?a-4CNoJB6V(t<w`I|K!<mC}Imdo8
z!TM?o^K;W!T5(v>m-|U3)TEdis^pwbeC?I<xOnxmsD{V*GXg(E634i5<F~QC`5cbT
zJ%M_49>c*Vro(xb^)~HhRJ@^Qnf{?W?^6iCM!-Qz28S?!BtRTfYjuzk0S@Ch6b2x7
zv_=f;TX8^Yiar!E$R~2Q<z^GeLvwA|PtZ?+a;1uoe6)`DKY0w-ukGW~Yx~$*A94u?
zNkV&6Tfn=exYS&4kXI0-DUvK=V~`PpFjK&xOSfG9CXc{?go<w<-hfV9>D8wfzb+cm
zjZK6Eq;>vHu3s&DPa6Y@RXN_YOAnO`Y@~|h{0$pUtB@**5+fU?uAzVt$|aIA9>c1i
zFdoK`(d!kdiqC=g0*W+b+PI3>QIPMfomCk=s_1kn%b;ku8hqo9>FPXar>#^n>^Ff+
zuV28+m;ODDFTMwl4Za)Gjd@HhB$!?B;RmAmckbm)ymIN67*`<RPYjU<-zT=;G<Qke
z-MxU0Q^DfwJxunIMnfk4utZf!`Bkzdq%S~fVu2DCNm2>}Twoj^8WSeuL`9{=;Tng+
z04SYUQ}$^vZAscI07wB|@}~^Zk!MgRjx)6Ps3<7F*$0;K&_fH@-R<M`*IKxKwT(eH
zWo|g9q<F3?V2k+Tc_<*E;t;SgpdZ2q2=P{7fH4A`GSrL0-WgQZ!sMluOUz`ZNdq9e
zKNUS`79dHOkwMV7w94gMF|(+fTl=t*2G{!drfpb8n1k%xYSME9(_*1guN)atPoW!q
z%I?pg7ii}r<0l=!3bLN^02F&rQk4Z$S>pi`0&vGb2Gz(|3i7T(6rxPmQ?xc+oPYHt
zynOkmktRdjxcxMCTG#Q=z2AZ5?I$oe=3-&d#oDa_UVP<O5Jv-qoNCpLy2;qcwe`X}
zLbr^m$`TiJC0WA2ptO50+PgF1M^S@0aMOJrQ-C~ws&tGJhx<_UdYt))sdV}<jzeJp
z^ekt=2@}K8L$uJOrJdb9mh0&i*k<Be-J%;gr-$g_#?&;P`u1r&@!<ikUfjd^S6bNH
zCBYGgyVug(pr((aEiY}kfRb7CVhHH>m{WejBhXlZ-UT(KR_~{_AuB=w*%74%K<d(^
z>QU2ziG8QZD0lr>RmjqUTtRchvFA%9uC%_AqKczzgFHGJMmW@t!INvMj<c|>t~x(K
zFesJBUXUug<zch<%=MQni~y(fdh%q5BS3~gNpCUPQ>qEe(+Qe)JiPMCb9m+QCpaS#
z`T^X~K@tsc?!u?AF!wA@HlIQ%n8vNmFQVOBL%B4gm%Y(IkTPEiu^g0xI;xe1%Iv#R
zO{(sL;`ng7Bhw*>>Oo1D&x8PuizIc??;-1SsTfFiCOUlMP#6HwvLo<KOL5ydAV~qK
zuvR^$`_ft6fGo#=^}Rq{ViOGdU`@Km-m`*tJ-USTI~~0KdJC(!x)=^}gw)ZML_Lh2
zo|KVt^|&Vh5_tub|CcnPt}md8u2^*Hr*O0N(W;!YiitTjrWOik1-y_o4TwZTtAloJ
zIb8*$X?~mG!Q0LF^mk2O0PUa~ww>;;sL^~LZ1mWNcewIS)PcC#kjY3CcPsFdGaodK
zbc+OCKOiVSYZj;~N0#(Tx}0{^b(=J*H4^qDmM1X`fyzvR<}DxR&OL)yuKYXrE_Ff{
zaFtE5@1o+D(e7-a)BBVOmn!8M_DDoLh4>6A+n~IFG6}<0=d63+s<^)}$i_q~qLKEZ
zc=5AHE%PK1ryj;hfN@HHCxasc@a7JlkFuD=Jr|A$DNhPUtvTUp&2eK#LWgOP`_C@g
z0ggCLZHhOEJk)Jdc;I4XWgchlo5kM#02eRp;p*i!x_c2k4I1)ps%vaj9{?&(233?1
zI!-@C9uh4ANh1o&P;>MrQi8nukc%pH{Zjlxi$@l}<53r2qCPA6ZX2!E=|mk0SWbb?
zt7|Y%r|1+dST3ZIF)Kt&<Z;Q-a{(30lLbmXtH|%OTdylDRhm<ZnFvquGsh{pbPh)C
zSFtP;>YU3DCY;vm?2{xLuyl%g1&~T}jN2D|T)OmSoWK5y2;6B=e_|Lz0if!vOW}g@
zmPjl`a16PAwD>)>@JXoILAg{%tum{-yP7ugu=)qG_oN=yVSpz8a32&(t!7efnq&cz
zgw8KOlBazf(s3v}07DHmO+17!BEEjX5M+!n%MtiKHa7RLMyT=P6jn~mqEeBv(<Bk)
znhBtQX`}M*{xAUsL?)@?Lm#f={U2Dy?bSA3e{Bz&cZP%`u_2(>vsWOE_cW{yFQ<tY
z0$xS!`YJ2Hv9k^lBs>tvQ8cck6jti|83Q1~4^4a}Q&lYTqWEWm`>%HLf-H5AAEXSH
z%6YR+f~gJAK9zP8NLWQnX9X^2KKRNjb|kYUC3C_b&xT7xOQ|n5yVLA7JFf5!)OQn|
z+a)?SX$}w_w}RI09bCJxi<M&w$kP;?H_CYB(id=f^;ft*BGGn@jv%K)^|=Zyx+tX5
zVU+H2M8qGTGdh7+MG%xsTUT8@jRX094P$ECpcA(`4XCNW^qbOvqsYS`=5X&&ssSAu
z1E9@5PbCrJ7vVg;qcWncUddKE#)S)O=ydv6TPKij8z)v~aO&hN8Z$MK@{${;IWuPP
z4&hQAeTMd!y5D%X@18|G^x!;pcYC;Seh=3!_0a1i2m^;(TNPbt%oLKmIR~}0o2nR7
z@ypqjHHJV5dFmaWxT;1IP<An<>6=N*XIV^MR=O%sY$@?oAgLu(Djv6{04orY8GG_R
zBc!V?uk5kJl97~OfxAev5;k32j_hZ&^yv5~FwkBaBLwW76`27MN)5SIf{)K7FfGQH
zzw)!V@A!8xvu>;XGH$MY4Ha)rEqK-K*ifcb2&77vxhbmhqFCRLo27;beBC^i!U5&s
zsGD8nIH2L=2?JniC^+VHECb*mCcGx2R$)E{qX7MgnV?5h;5T*otA?;CZQ&}$l~AB?
zZS`ZcQxPhiq#4R3iVYn^QH*O>w{Yv$4i=ZDaL?&Q%*{^;H8f6zbgtTH@#m;enCjQ*
z)4LtHzx7HTPkq}oKKPLlu3l;5;;Vbu*@$?8hGkKz)W$$umBLLo%U11VIybIP(75(G
zPhPMDWk*wfz2&*6Pt;sln=H-8K_no}1<(`RMnd%WD^Ea|+0x0YVk^-C)0O(X>k>F<
zB(x=x;MxMg3#{yf`JWC$6j?}c4k~3P&4vh}KZWM*4z_oGLQ;)c36+q<QFT#|uq4G0
zsKw82y=X)*$j71{WdwdjvL=cr;c)T3g7a0LR2sFbhRI-O$33|4g^wWq8Djy;3o!9N
zO92EJ#bt~H_aUv~LpctG2OylY9BD%28)d6`wd)0|7;b8ZEr$W7rYqRm?4n+gd@%6@
z=$3A*?_qPJjhUG$R!+|1_%Z4N6S8qh2<f>?T1v`C>A}G$L%*LQ3<Es+=rSICY#tjM
zJ-qb%K2~pxxbdXM)-_Q^=eLXPMlJn`FHwu%?DTravkZcDU<Z#+|5iyxQ#DJoT&~SQ
zMxOqyJq8UPD#4WkCghJPq{emoaYM$k6nTp7#0HOHFkL(~F;)~xP>PehCh~6RYhwg{
z4FM?2kugPEl!VpJ&&Nlhk^Ea0HzE3xDPd`JUlFA2z>c#+7UzLP3RJ5!@kSIfk~vvM
zG-*B^!#0s5qN=v!Isg`*Rn;G^gE;dMr6I;d7(=2AKmkP`mT@QyfbK!h8;urV*A*fv
zy~hu!$Eo+<d*8Q$mtMS$*3Llm-?)1V5C*dQw%Y^j@Aq)?`Zi9Sn8S&cdDQDv8;~(5
zsNHj8Y^08dd(e@`(AuGHA;7}iH2%z=pTU>ExQnNMdlz9@x(SNQuX*<NI@NWnwxwZ_
zn}Xu2D$%q{Ut9+DOS!Ua7K{^7fOtBr(bVb5wm4#>ikM&h)=WhMlnRMPADfL42=87Q
zOI1stHG_zD!Et~Z^tUqL#3oP~4pLOsdJLLFAdUvR_A0g)!>8Jp3%JOc7Z&oQcweRZ
zL>icb65WN73{P=xx}?{X4D0q|Fo_xM5t!gg*GT9)l)G6%&IoZR;3LgEj8hjeivedx
z9>AM9a)#cRqN)hj2i#!(Rk+!-fJ=TEPkrnxws+dNdUXfeTRm2<34NMGM0KHs<|B#{
zT)DP|o41-+Tx{Uf={d~J)uaniB;kQAuAyf(gN6>!>tq;>GJMO&7O=h=;rit+8-ZME
zY>TX%kP{9ZuZ84mm(`_CWI8=(fqX)RW(qz(GO3rTIQqt!(6zEAYciP<)O-qkJQgoO
zN5!UH@8lKN-y_Fp(~3=e&27|dhevtTYC((KdG1Qul#zXvlh@##M&@auF+JKBffQ+k
zN+`co{>+D=Ya&G7KvjuMNP?Q;C0h6<695%P>g%NH{!LO;8v-`|q!NIX3>1NZnTJtK
zpfVrKkpXyfhm^FiH!kt1vh<eJwVt39&-3n=VLWuPv@nOIg&FMa^>E|XF4phtV=y8B
z&qLq|_*U|yXl8w_g^i6p%+6MD;^Z8Tk-%jbG8sskWY~=;<U5HY5Jfq5HZ#2YJ=3^;
zwaax1GH)!IE?(RPk~hKSr-e=_0@<DUi!_T)xzD_NiZ)u|Js2FpZd<NB2nCv&olMw3
z#v;k*>)2nfRxQX;7%A-s=@sW3tnyP}nfy`QF{Rojp@YULRN^Lc%ScjL{Nx4b<B@EK
zfQzh(#PK{Wdhv$LuFmHqO<A-DQVe^+7bt&mJqzvOoIgsmCP@!av=7XyC7jbDGg>Il
zq4w%h7&OlFETTVhDl9&n<4}YE)bf$B99EMhdY;t}o{?<JRj0wKFY?%ENU1Aesy2-$
z9-qcT5B72MRtsxuZ43ty=ZV9>p?x<a(hrUOy#aQcJzT49<HX5XoIW{=O1X?U)tz#z
z9WN7&dFp0UD*FruQjWqZ!7F(C){bsI!#uAir7iEJPDXtef3;^D0iF9V7J$wS@CL5i
zRhxx*AU-vlzjaQQM<D;!x|>CuWsXZ58U3s_E^61LoQ7s@n%7XBhFezI5NY6|5q-($
z7oCrsyRei=k4WqMY0SaO1zA7E;+J^7z$qLtUaH{O+WmE7QpN$~ai$=t#m||h+#yX+
z#3>8T9(e$7>d15AVCa0cD?Q)zjn*U<dveR<CE$<JdDNkYWWlIMJke?&KD&am_b+3+
z*~YD#P3*OXtoG=+r10#pPCZGFMdJiFu5aVc>Mq{>=xHo1%_2#ON1%2_^_46iMWvz%
zb+VyyQAH5C>pZkkFg5b*?(4ipu}%woU}6W;pE*HjQaiaK{>VeBu!c8$mC;s8Kqfvn
z8UQvxp@W9PC6@2Ah(gvYi`VPWLMPayU5Pktlc5KjILAfkOeyVzLKIb>mGQAu>^1p6
zh5MLGYF}Ra6RhiIu9Gwc(J#*RIcVi0Rku(8pppXAib}NjxmuB5Lv-L2V~S2iB>Yg0
zL*W5%&lqBnr7=-s2*M&wFlC{2+DpAy5n#xr-`Z`XS`9HhRbds^h<W=NMq`TMJ)Brt
z#LBTb?Cy84dTS3GYhA>nghK;n5^{*(Ac|95yt0Y8xv2@ju>iuv4iyVd$H)g3t2xF=
z(_q+rOqQA8HJk6Uy#+fXFzMD#PJRjfi+DGMqc9XJlVaR_Z3v2mZ9h7RyI4nNJ!}O$
zB1+C`qgo`ytT5%~)1RU3jH?}ArxDF{5kk>{MXd~!N<SXl`HRC6c+u1(o9kh?{~51w
zE~65jMp4*oe;*A>29XeuPdeua+$hTsr{w*U{`uh?hr|HH5mlZgNsN$dQ6wusH?Bxn
zsrkstF%DjQ`3`R1+C{bEVQG09r%x_oW@d_C!+Zi{7>@;^nwx55^Y3lo?AZ}kZ?~{^
zXAi?c44(i)?oa1nJc<xU5lR(tU-|2FXgvXvX+nY&+ZWTZSlDJ4S0(TYA9GnxTa7o8
zm=af3fmqttH^G86@r}Jv7i8kIY|C=sOZ1yfNvu$O#ZH)1z=Qy4v7p}QzA1b|sSvSo
zn>Y#sIU1K<9|#k&%=Hz+WnQbH`yzU=0Mo)iOdO*!u)69|!uwps{_46*X41+472byN
z0CK|$r1;-WSm2edz@Z$6!T@A>6z6#oMOoyRNtTT{s9Ll_D!Pn2M>*OwMRT`@QsA;D
zaO+kRt9SOWw9vpkXBM!yJO$q)F$W@XP=QK@JR;s(84o{r5)VAEfUWHgR&Te_Yz`17
zF{{W_s#F$SNLJgfda)Z?+c($Ts;88?v{A${yBO!$1^G7<@PHSfQ=eocbeSz*7(pg^
zx^kCPx-M$TD7W3#&DU+f%${Zmb{Oa1LiY7}7695^kyi0*GLn$bbsedaD_nN1N}!?-
z1?K6`Hy>MMLGCuO6U)<l|D+e7UsvP+CeDw)THZAg^IKRZu|^2=6Y(QyyC%SjBhtdT
z>qbe2MACo+W*o|KC=7rk_Ap43ybf-+tx`9<73Z!^bRjEU4yF4nDZ!RPssfY754*b^
z>^8fYnW^B^>3N(uK7(?JiaNN`pT5N%4ztYle5@Q_z^Rov1_QTtyI48iU;>K7ty*Y9
zFCaDP6j8C*$*kR&!8;z}6<BF`Q$=TX!Gh+iVqQ%YD5kfOpgHLF7XOwIpzx61AiA((
zbc+sbsR)Z3e!y!`7)+rrSQr7F{SfCvK1cy?W_Puz+p0l=vNar|v&%2XF}YZEm|%ef
z7SeAocZtag^Pz=H?Hh6+kE&kFV6(bOl>1km8~9yP9K>uumt;_A@w247!*0N#9EZXH
zP&}C<?I-DA#(~2vSf~g`ZoDqDRfCByKF&TkkLR9Q<*k=I0b<#ed|?9;38;0hk84-9
zaq`qGR#s+Et5vCXKBHnG+T}?<kZyZpdK&YyGok{+0H9g-1@53GwJs7ArCxhavQl-~
zB+6bm5O)Jxrq21`Fr|$JNk|zTz8H!yCz+BWs5r1Y7KX~+C3Swka29mR&%Ph(uINQM
zu|X^2pm_pnu?uEm0dM+Sb(TPOVQz6Id;vn-NvutW7#40}Tzrk@+h)u>V@!gQJ$VBc
z1;)$a<4T>(@rV^D9jEv+H4{+5%^U_$_i0c;P^!X7>JM}{$DuF)N{4kPO8YBD(u)6M
z_`ef%@Z(W}l@km2)^7`O<?;@iO{&%;#UCM=5CG`8IflbAUVnW9*RO42`51)<%b1y~
zGLI}K+A)1|l5#mQ*9d9P{~#i+{>kBiTIn`qMU6SsPHw&Yz-#qnoLH21|5bcW5qsbD
zT5e?}syaqpSJ*f%iC5U4s%bEjXEdqgtK)w%Ys%;<kJ;kS9oSJPJR#dqnvTTQP`f{2
zu2O!lI&HE?FnNBHDL;|$(TQODn&|H<>L0YZnq2r0SEleJ6vm><p=j~bj>G+uR9ND%
zVI?|nf`~OEqoZ=*H)p8nmd9C!q!}eW%GGIsT4V90M%_lr$p~bapP9kpw@fqT_r|Rj
zHr6|w+6$Q0MMWf3$3_{0l)=CCwGI{*r*P`@ES44<@B<$)HGnjNuZ06W(Tm>1!B$Oz
z+SLlD)ZT$D*Hx4!D6^#c-`QBYdbQ4hYqwX23C91nLk__cbT>WIT+0AwrWLAk(KW!J
zp4T2W8A=L%HAUHWdrYjL&P^Q;C(v|iQTU3AcdrOkHgux?eGoq&UybPbg$q)IC6k8L
ze7pQ+Bdg9;3I--pkT%1QKiN1F`Q&}c-7Ir*s>%=!bB2u3e|2Zr!6b8@dl<%JHzqYG
z?hkZ0$D!~5GEm3gbbS!*@!r5ULT;Z_a^)G4Se0a}Nk)@yOr@G*pjxfreebQ~!3RgU
zaifXVTTKi{G1G!cl!9u`L#jK6gPolYwzu18Gz2F&c6^qLg-CstDh$n3DPmT$1}AE6
zjO2E)sN@gJZP)*`z$Y^wmAh<ku);|<YtPV&rORbOC{kqvg}|kO%1Q9w#QXMB`iQK}
z(+Zahwjk}!6DOeYP9gnpv4*;725}c(L3=@pBQW6x=xyCHYU<a-lAqv5sPIC9a}@{5
z{m?xEv?Vj)gDGj2PjHMr0D-5hNGhPEt_qYJC!&W6D3pRBQa7TK;DO6+0gre9Z{|?K
z8_w`TZ?sENR8)UXU3d#-Xr80rC-ohZ_%$vl&3PgN#Sv-Cm+{!UPT{_L=Q%5|dV3GO
zF0lbgK3djNK>u)nZfAs7Us=P|E4w&$Vj5>o&0)G;W9OI1KzdP#n`mvq#dc+R2sR~k
z^4!cL8q_1Ax&2C=JunlTD|D?+I0dFq#K`h*gGn%xS!)ky2i`s!wHPcTHledd3^>l~
zn-f&RrUn4yx>;ICvQ8AG*suvFzfW`n^dmL`VgIK<8Ya9V`-K);+EiT%K17X$C=fD+
zS)bp*;c8sMfI7MgP_8BAX^AbE=PYz0d;t<nfrmjflqNFNhyIX`L*W6?$erO!<N-v<
zAfr;yD2w=pXuxT|Ju+^%ss2(_Qmp|<J9ylulGG9&ynh7`+_%KL{f(Qu*xl)~n@XKx
zn5yE5>Q6L|aP7(#R&O`4MB%~71uV=@F)XPB$}FjEyEBgU*F<=1aqaD?t}O%^0#5h6
zk+GPFI*MoRinR-IOKm!gtIWHa?4E|kt9D+B@r_|oo2FT;R@T$x;twoV+X&qS^0BS6
z`ga#cV`QF+0wv3!={&qTX5-qJa}n>SxV-wTlo7C#2K@3#FfgNk5tz><!G(WC`F@d3
zmkz=d7HEYaR%b?@b&|H9=HpK8jE_LTH+y90oFBv;4C9s?mgX=>2Sxypq`cSfv@se|
zO@0|soQQCz3NQ_Dq||e0p^nBeL**xqFW|(=ESk+OuH9&2YomuG61_U&_>=J{h14rA
z$NI)T?yT)&X>l6wf8RYyTHA6j54h9CtfT)H1*&>a(+fuvWDMCxdoL5aqTZ)P##>bb
zPZa6cOHrprjbguU3TpP=$&{Kj8PuOOfn2a_FCMb4ypx5e!+nF)^Mc9Ttk4KI=W9}j
z=FE$QNR?CO8;$p`7UEs_iGDUK9;I%9lrcC^_HclMFnJ9pjsUC|kh_^Hc!rglJO~bw
z=qM>PXFzwf?`9ZoW_fgIJpfy0>TNwz>}@4kXMb;evt042nb14QF_liXqd|(NzjPaZ
zn4w&entv5XQ|*92QfkJ~RM!S#I7(Rkm(qP7eBxd__3;OA_TeS?B^SdnQHNEG&qYH4
z%7M=^V^^<javuSE)pOF=X0(~Wx!|xDnSde}VE-5|nH!+!mNmu4=^ahZr}(Y{?y|qv
z0@;)Su)Ph<KahqzlZ)RVfjS<xj-gl-lkSLWLS~s53wBihFrM~AJ%?Qfp?;a)g<Q8W
zWco98Z$thV>N23bn_|aT!OtX^SiBzxuD^A@+K6gl72RV2A-5Bwnb#Talfv=M3?ozH
zaoENoFaUB<lYBph)BW^r_q<Pa^FGT=3-czU`v1Ve>WwZw^Gg@8cBh3>iCRjr*e1(j
z+@)%xF*9k*!?pjU_EYvNc<hl=`1r>k#(N)MLA4fO6s3qM7o_fQr5vEwA5L!1OjlB%
zlgX!xWUj6pG$52&OxE6{eC~r&XkwxoAKCWx&9lWn*|rt0VUgjxTy?G9S9s@lU3D9O
z<NqA^UX>ChmEp`GQ>^qF3^TL%fQg;?fLCDiDT+{BS9}&cB)v$D0a1@@>2CdcId=X1
zp2AV|_1E4|ae~GGkQbmnSF21hcEU{*1pf5BDoUgvmFHPEYQc5lOVnKUu#Q850f_!w
z>TUna=HSAg>kiklQcy>fk;1GzPhEdWq_ep>z;Au#3YJgR@Ys8f<J6fMR-n<+;M~62
zT724V)ZB9_79vAHiZl0~S;m=D^Vr&Ma|v;CcfdQ&I1;f?R?Ac503z#=x1e^7NudJE
z#nlVIgtP}o5v;z!<7&6mZM`(yVR;q2^tiB20dc1GKsmhTxQaO5xWd-@mT+Crd;4%~
zC1Gynp^cg7glo>eYJyHnrvMf7!qz9Gy9bHeZTmzTL@dr-n<}fcXySZ~`jUB8Q+L(k
zPPvG$sJ>LGTE|>D`#S46ryo<w)0u}-SVO7eqqE=3+M^w0?(nMxv*Pf10Eff?$Qb9h
zzUC(@*S5MZoH;)G?HM(Tp!QC(D8vEveUXgbx--D$ookp|s^Ec#=J3GT1=Q*##F0pY
z(=fH>I`&jEgEdF;9K(U|zm^x~apKr4`r|%s-)>{S9pRw|k8uqFcf?U?Z)qW2RQnV=
zmlbVVh+sj|v8J>MN=-qLN^=!#LQ+OHe0URxYYDMJ8Axj;Or#=}zF@ISTHC99nVI|r
zT5lb{4jXvK)EJyPPOXJ%;&+P8$pun<2=vfjYp{=^no}1Z8!m+e`3DgW)%Z&xE5$WX
zJ;*3?XI?6cUlN!ZQL+sJlk0m?;4|hHnQtp}2as1Vcf5jn8MyxXS~iF`kmh?|#UUPt
z!~n<yOtMazdVBw1qx02IG%Anvat~#OgE;ukEtaeUKNMN&c5{elzjzC;o!h|KhZphS
zBa4`wts;rQWxj8?<LLFL`q7VL(h<*5DNo_CcQsgOV>}k^K%HTrPZ7~#*_J1rdGTQ6
zFV&4k?^JrG>Av(lkBvZ}`fRP2r`~0W{Ah!s-FQyVY1X}RV`V|HjBaKYoBCd}1~hly
zxWq+RF<EFsMo-}jW|0X$T9-#m8aPJO-IO{0R{em!E|#u>e3XvEZN{KJE}MR(fJiBX
zV*UZix|q^vJ0q&U$5Lbx1LqcjN)bCr8GyOg5=OXLi0SD$yz4^&R-etYjoyW7oVR)j
z_EvF-$05J~CdW9x{;A<;bFk6={g6mlX-x5#o~%+Ks2g@rSU{<~ay7tsnBt}9*YW93
zUceWA^9rZ`!jgwliAbKBHY*d<pz`z|!x|*lKVyk->IqMwf-di|JVh(cEOuYLn3ROJ
zS$Vo)M&ZGzUEeeTkZ?ky(fnUsIcO^S^ee4+p7jok1#Z%l+Do?Ec1y*+=@e9C7A9gC
zeTLR|6_|*G2{xi(qH6UK#lkHXWic!kH?2HX#ZzPiY-2QmFbZkdNSsQaNF7e7xSf7n
zvO$hp-~?K}9SYpjy_2-$oBp?G7f{+caOUv-Z=K=KzI}a=HKU7umW_Ws&RPlpIDGE^
zA@Trd$PA6Mol)%F`Li4Cul!2cKhdj(r^+#g+)2lPWNZLrwliy!OT47vC+*soUvJ{t
zl@^vy)bY^6i#UB|4%Mp93p`bBy`HhQ>@{Z|L^W&z;L?AkR4F1m6StNuHZWnUn@Csh
zHp*L(#mT#kYJeio7l}ZNP-6$iCV(#tmc7trr!T}X$d>6^0NL@C$DtORI2}ssUyA|g
z7aK1{{;j+Ua}CJN=PavrX!?BB<y1U>eQws((+0^{wBmC$p-aeMg~2tiQf$D&f18Zm
z#lEU<Rg~m{VVRp_F*ITOA}RwAU>YY*EV20aGoS5YbMIQx9$rW4Z2zcupNBL4KV$}g
zhTO1z_R_D`o!Zab+5g=C_|Vdy8#tL45+~dBL?+r)shJ%^8olX>Q6kmeoVWuW+*$2l
zZhnKS2Ol^)FX}-tbq=BeVLhWKQ&tC$Nbgh>erV1;15WCRObM8fi%Ohz+Xm=iRDP8P
zoz|^)Rr5p5I4qW+HViiK_4Tfq_CRcb(89<`wog%Y_0DSypnc`l-xist02uiaOCJF1
zwMF(p3vy`e!U`3v%1H7iie!g!^R4W|q)k&MMjx=%@~a>V9k>*xcEPR(DvE(fvQ)Yr
z(F;88O;`^Xxoz3AU);d36D6CY-!G5TjccR)+H*MM<B%Bu8Pri`=)C+FojCmHjpi@i
zd-m9$9rV+FNb*c1A3f3gO)V%r_gT=9)CC-B>m>%G+aBY&XV-B4wH=&3)4+pg7qGls
zXG|#?Q^{x1X3M1UiVfThasY}5x7gV@R5-Xn@QOEjAv_o}S1ezRN$3U_W{wm7#c4eq
z$dcMH&t`>WiHv#iJ(FRASxXAEEQ)3=WhE01Sg%))7ol=tRE$|vBB92!(BH4FnF>r)
zCE;Yh1d;tRUz7>eScge=LlPawOqK@oKly%WQ>_ZK4lHnXMOe~9>mRV>7?%*~ODe>O
z0D)73>y*(R?qa>Qhct=-r<ZKDUn$4f{2NKu%MSDIe@G304h5Ryp?mIq`3UE)@BG}#
zy^G)18>Vh~oDMkc$AGY<hsQgmv=UYSBW-v2ED{<nhaS>6#pR1lT)*1J(sB(CoSng$
zGc%}FL#`(nClXVtHZsK#S@EP^1ZIfgaH&rK|4+@rH{7u$Y~|*BN_WGq{IyrIDSnYN
z(h;oHI?Mv;tQ4L!1~&Y6IhO)Iu)G439kExvddw0T(brerSAb{}$E#k&*hEf*9YN)-
z+o@89mXoDJ0@HZJa#}16fWk{r7?9HTHfV(ob@Wx&4v{Y6f*1qiS&%w$PRf&{AvwS>
zZX$}QDeM^appmS$zEB<|+b<2AOP{yS{?Lv?XaH!)?ToU`Hr#XX+UuuZjFR5t_bmLk
zy_!E??xnko)a!QDy2%As5;DS0#T-RkPO=lcu{sV)B|-4FHab{eYh$Xhi8H4gxc~k+
zEG$g%H*>=f<rV05B{X{}EqLG%Cqi`@8X;#bO0#jBjae=J3GDy^{<LFl_d>T;x%qtE
z*_PXaSqQgfr8E#}06E<n%%m3N2_0ikJTi#~-pw!2m*Aiww9b-CevMwDwb+XjmgA=T
zqOk<FZ+7@n#3)usVlW6XW-0`;HB>c>W4yIo6*dVYj7xvB2;*#wBppcyqcldztz)bA
z)ui3OT8`bze=5xehko}z#0Fr(2y{|s@MIbde&q7TPyfx8xj#B+)ZXv*(>;Hjwyd_*
z(m!4%sH`DwI;vc8)x(O}g)I8uyYL+sqke){U)ja$7x!@d_!REDe-<kz>Zp`MsSG4N
zL2eKNwDv|54L^7kVSvkdXm*ix9I6+du4YsF79;&uk1wl6IM*=(TP`V6)s$WXqA7P+
z<?_wdLY}(PEUdr<j4Q3(cl8;?)P5t9jFpa?07?yecmk_54miKTbPqP{#G>FxQWpeP
z(lfdOQ5XFbDMsVcXx)$rz+!SoFYprj9O5h(Trk(K7s)VgeV)dMvq)H`oHj@iI8}6p
zuMc+ipPx>=%^w^l*KfZQ7XKkP05oJOrFkbA;Q1edGyKZUX8Y%7hZk{j=D+DxgVW_s
zvVk}ouo0kEQ{3;)?0`iKYt;}-_CN)Ylv*yA=`uN3U+v+}Y9CY60ZyHo;_zT@zJzMk
z!}aU?+1jl>8;(39x3b9O*~k0FFrt~zR>^yTX6tIbBKB5`iv0q9#OMsF8g_ZV($-<z
zQ6u4IVOU-OKc-w~DeIj$;=2`tbXA;{!ZYr~B${tZZ_J6Av%AYsnD@VtqhYR|Wt;>c
zoxoe{xIhbj>MN!J%Hp##k(SF7=8}-UA8S4et$<G?K#1P((qL!*nd#Ko{gH0^{Ey=u
zG`=2me8@(ztV-_bV}5?`FO<BwZ@p*Xk4201Z%Ou(Za7HyRV{!R0f)NHQny%oH*czH
zXHkFant`HCw{E%RGAKx7LeKXx)d;!qXuCyhA!$!3?6{&oosOdqcF;0X)<V`-jX3pV
z+$~tNGgKXeLH!TBmb7cBXPOua53^@nRHj{QTuIRD_K;;mM8gh}Q5SJC&aynV8W-tZ
zU%S$i-2n8EbI@R6VTcai1#Qs8&6jXSXu|3hnnWZQKq>W55LSd6HjrAB`RmxeKu?VM
zo(Lao6C;1~UD2QlpC={UPmKTo6+lTuK~(8J#$3zKX*}JaM4O5%gO_`7(md&nE@k_@
z^VKN3^LKjq+CRzi=<sj*?>qybhfGk<skvqMk^kP$m;dcld8K@;@g0L&_>kL2%O9m}
z={?6?YC~E4nn9|ogLvWzlaLppdW^$RrMyG<0;$4q0T6M;d{0Oywm!X@y^|b6%Ud-J
zKHUsMzh4%&*apuqZTWcA_v`m5BaqRH1S$8iaG!@#-NX8&2;FWEc|Jrm5Cf2~0bmge
zm1$6b-oaX0{(PIiudSDs+nlhw*0~k^^z<hcf2;G7{)48)nS=l;dob}H1>KnzVEU8n
zlHy{)Pb3G5>#XY%z~`OCyy&Sdd2W{!lb4jmoD=YJFH7USXn$~_K8iOn%5QvcFMIj3
zlfce9V;u4j;Om71{j8sU?dL=H_^+kI{lC{8Zv60k^<gYGp6Z3c@vxV++$0}Tb0@ge
ztrpawR`2-5!W8gGg$$ak!p&|-C02w1=Mxz0LWyaZQ!`N7Nf^-cCWS0bFgoeVOF@s`
z1t;*rqTq!-h%yHxR-ubn40YGaBM5?3h<9>l?SkBAN^8wx*KeD|@(NH;9?+bIyRY$q
zINxd%e6ZY^|2Cf~z^nRL_6|s>R126&lO7TW6^qB3E5aM#f2$m#E#Ys%8I$%iQGmQp
zyY{r>XH++$)2sZdl)VAEcVxcZ)XB1RkaVLv)$aIK80XthkMb)&Fv@P<Ie7l>l<^Mp
z0PImr?~3>ELoSZ}RLQA-%VPBjEKEJs%Ys_i&vsnm6tE`%@(83UrE<Szhh^_Tp~Pla
z7srx2-Lg=Oa{DQ)P%gcA4))>byk4<-JQlJbjjtlMmBN%F+%SY6rU=XNNaf;Wn8JN^
z`B*(Ho^|1u9jskS(B}|ffbpP%c+|^MuAof0?M0!UV<BP(pg$W;*CZw5h#Tu-@c|50
zVH>$3-q)XMyY*BnK>M$b(RI2}AD;nM4*-;8AQUr075HenHMMo8MNf;H)SYRe7kZ9-
z{$va?TKI$v`AL@alm7U2y_ejf6!Voh+xY9l{OWIK`8xyc|0eMO>`_d)VS4eB=id2P
zj{82g*&qExYjox8@%l%ynW-m7v6qDXq)8fs$a88%?Zfd%0Z8r6oE1>n0v%DR^3W7S
zFSoS;$qOJOpeyRke71_-)npc-i6RxIk614j9k1#l9eS<Q1QjjDbxf^~Kr`HO)x^$X
z^64oo_3n3rdc_eGzs({w+r72OCbxEer3N62#jn+n)Si1VouCfNh=`bQV{*CauVE5{
zwDXb<Ns5xe<Yj(}7Je)XpBKE6Ut`?}Qg@EIV$01u_$Xxo!YEE!VLQ52?#HW0^4_&1
zZ~nbucIi`T-cijy-nona9qs|xqqvE_JL8AWec$Kgb3Zm6o?JRM{YR3i>U*M*GYkjm
z9>0dO1%we$e|pjdGYie?R;za2oSa9sQ*&a=U<k#+l>Zwl;zVw}0I{?gQ5ybgx7RSA
zJk1Kmf(fvfqVWRq07S!(K+L84T{xbDwJR}({XSCV0Yu~hBqLBCq@wSi4g6_NeqjI(
z!hv=Hle}n><!JB$6K51DIsFRzzL>B`uCCw$Dj{>w5EY?}{#r@hk!#O8J)`(qxliL8
z65G3J4nHqtejX%AGQcR=sE*QgjM80<v+bXX^Q|9?v&~o2ygMl`{SF`BBnIFO41qIO
z3Y{~5+Qs6(oDT1+uFO0&C{^xthk4f@r5(u>kocn;!1L(0rxv&F(j^NobHo7fQq`c`
z1Q$SohANbpxa0?V3rc2O7I*P^Dh$vI-l6IMm94OzCxbzK4#;RMKPVy_YnLJn2R)G6
zKkB!$Xxv9e27p5VG62@%w^E};agpLHsMMh73LHq^S;KbkZGUG1Bhas9$|C`ng$Gb{
zGnl+zMQEYC7jEe*i(YnjrF^L91mppv>6rbql2f6ckCB%q*&y1gcH&#^DBeJl?|dae
z`(MWS_OD0Trda;sh`%Wo|2sScc%xBF-6U^~lf3os1NX$Q?#KPV-`lzQzsy!1!1C0$
zj^;}Dp`W+?QN9oE4oB{!=fm>|E6_We>K$X{(`8cM{at#OGm5kY_eP0q+HbMscP;0@
zDV`_vu_#0q0RbzE0C<7cCsgsX;Q$l{$Xeo7T0)Zowdkh;B8&K;aQ$_&5B(-<C>cd{
zgchc+c6GxjRBg9(SR<)M8;>ZA3Gei&2K1!6Gv61DS<s><X)aFTRZwwfk`kOGPIkj?
zbfMad?_ij=T4~n)u>>1G8Dr;8mXGpp)`kB~>H*ke@`jhadsp22*#8z_;jb-JAH%Wf
zj}4siF%0r%7^OYo54a&ng~+u$0$N}heAXN^F1!)&P$7Zx3Z!9Q!EHCkVJQHcU7gs7
z90C+!he=6N7L#etg_l4=HzZT$_zq4!>L89CtiB#&G#DUByBPJmSsV|LCS#71MZRCV
z{Tk;|#!MM1ojcdNzx3aj6zVg(y#*ASU)rGEr97l)O!iW@-mck_^1Vc45>SstU{x)G
zGUM#t(`&pufS3DOn3tj)u|JI0%I)D*jM5FnXni7c_WnhZ?Y%^X|Le_xZ^rRWYykAI
zuxY9gbnZFn<;VVy(4G17%k>XoY5HS5KbZGB`IbM<25`v$&<}?OA!iOUcvMJGWC|#J
zFg5&=6%by57MT#{8t1(&f{$$g$XFC;f3d?$7{K{Q)dGy8e+dCRhYi4~ce@ym$N)qb
z56J-ZG3<BP08j|PsV@~L>k?hrO)(J$n5H8Wio%S)ALtfTTuJj1J0Wk}7ybA|y`u3z
zv<(tNqjL4yl~JAw3;ojLc?v)E5Tcfq-FlMcBlJhB)n0rZ{dfy;zW2o}-~Sg0c77|t
z_MTQ`I(W~&*~gIqctb<rA#hgi3G$VHSn`hjz*7CaIM(>KUK%#SZnEvh=};9JQERaf
zo=>#~0k_?fMPq|^dLilOER8uEBvgyu?CKV#U|4_Zb^MuZ04!sndL2^x^m`t6(eIK0
z7$X|>ktPES2i+`=$O9N5ClHWQV+NmBuC%W5(<{-2D=Z}=LG*1`{S77-f%Wo-5=qdW
z0ZEf-xuODuGz;A9_Tp_6$4IO_;%zu6IaQS0T0$k7QM^^|#&_J__!gpU``HAof0g8|
z&!%YYP>T2NseZKZ?QvuP{y;+zqU4@=mzyvDWW`(f@Y2+WF+cU8LF(1~e%f?nCKLHm
zaO8*Zy)qo)5~xK@8G^ePzTF#e0^Cy!MeDVeA<&+Hcm;&=OEy5dgeloF;xL2`?t8*T
zXV1avg)yRtfIl$+1Olch^|6%PxLKGJEFk-*0Pu<hYH4rV4F-#ur1<%^{Ba?RCb)ym
zA0Yc6Xg(PwJ7X#w{RD32B5)bZOZ+TL;$*Mfi>~{<XcbY`>%{5KKT5Fmvk7)rkK+3O
zyzxy20{*9r!f(y<2&44M1<&33DDrzgdaJel|LnA%{m`-L4`a6eWG@P4!vV1h(*e>v
z;`o}p0naUSXaFZ+Fn~e?%_tPsnvVGCyEO1Et~GPv3>Z$ax$xf{hg+FQjgkS~Y!Hwd
z*^0b5SIz3afNH^sK3=h_7VkZH-gb;#umSI?AUxnj^Nw#4{Yslr8G$0jC|Lzr@RF`G
z`Fd>*bPk`|w9!uQ)e_I~l5w&d_6C>Bz41+qlC2~`?`Pl+e>%>$zZ~b=L+ePa^Euk>
z|6}9G0Q@Hyf;8)7gY1<rc~1Q!S+?@z&Hd&-+wOnu$@%(+FjN0P5ALGh&$s<J?<0*P
zcn+}(1Nc4}0_r1|a(OSO4RcK%(sc(#nQW0JER-)4?N_8bot$LGL`c9?F51T|;wE0G
zV`(jbsRNFK%0zls*I{~L1jt|%DLidWtQ~(c`7b552SNm?EYxnk7Hp-wyka7nvn4-(
zn0ZvmP)6BnWFab1mbLx<=yG{~bREN(sybVr%JTM4q}cs(f>u8#Whd+0j~4xZ{x~uK
z|ItyTvC_Pkr?~W->#lt$Nl$)wxYzu#X7Ah+i}m+mzV?A$<j=E5K*XCY^N^(xdjx(^
z0Tq_Y4w)(<fkwTA3QXN*jhY56SSbXg9+kym&=4aq39?y->4y%2ir)1PEL@w0FkyF8
zn^Ohw$@8`vkQN}arH^c-0r~*#wrG4np3@!9Xwhq84(INrX_A0>P8nr)J}Y_EB+vR7
zjc!->#y7%VyiO#Y-%s=XA5F3Qg(TnY+zsaGV>sIF|4YV^0r*cE_T(Z3pk6-0#b;vo
z&XY-c&qoIB)qlR#d-n0g`Uf#r{lFme=iEWw@=1pvizB3D2)q(Jufn9FA_nHooecuD
zF{j!UL$uL5DJvRllw3Fh8mKc^ok^kP2+BFCHPr^(R?d+_Hw8ml!=Dzp9pg_}1{2F$
zI05hC(oeyT>$RAN?DXnc<<3jdjeb2nmcY#ea__UUJDs_CnvKRA)vfXMa1h<WINg0d
z#r{7_(fWLn?`~)L`0M2Bj~4xZ?Km<3|5c$uFCXHyuXxVX6DiJoY_zxgPj<R5d}yiu
zKFrkKKS+b)?l|lCQA&N}Be-b<pF9G;3^?l2a|lnLN%{m-)vGfE<ik^Kff5)e+Od)R
z6FvdAz2wkB9aH9@R09I~cv^5ITSl4(cB`_9z}--Elp<e|8q|oqejOJ!7(77ak9EGD
za*>46OCu7MVl-ZYQrcl3$4BT)A#kgSpCcPbJLOh%!R<yj5G8x948xzvoYqf9`JLBN
zF2b=6)ExWKqW?yYBLnb_Fa&uw8>X*)(Q~K1B}q?yV9>tvkE^}sK0a4_60^1U4XVKj
zcbK>Ran?s3jX4)jeGDXfPzG|k4TQ=UYQ{o>(JiZlSj5hN`F?sPV?rW>0!q_h<`__$
z0Y*L5u9y=DEHNgF*6hxD!D~QH;`2fsSJP|txfV2FKG4D;K&~XTG_a>rixk&WL!!{B
zqwLKjLGC8wbUW;gu9UmcO^nj*B+GjLE<y93C;9GcNxo<0?T!}xTQQCdz&8>j$hujI
z*PnBp%6Fvc@pp|nyZ?8y_u}`=Rv*S<{X>INxZ;kowjUF-kVGe)F}!R9->-5S(alJg
zfOdUN1(t=U+ic3luk&)UJChgSDK|eaIe5>L4jQvAnp+X_jM9`!CS5ONBcdsbo!hG`
z15n6t7Y0F?`jfk^+11$~P-$&J&DD4U>F9;-Y*t1kiPN4t7`|3+4=-aBZy`ndXA<oF
z>onhcA<ml?f=}ZJ%zG=xkpXx!FoJxTkMry2V`uGqlkCiUNB!-8)*PPuBaQOIn6G_!
zPz_IF?DWG?-bI#-rEnz)5cpLDUWE&gbc`(-18xOi5PQZ5c@s|gak3Lh>R@(748U_=
z0Q#LV@^~N;xT47~Mue3&^zN?3FbmqP?h+<E0qr5!%zmk}mm(aE;LGmsqlAh#l~vuT
zB+L5fjc!z%!>i#S-a(Y@KAmCj$5QP5W`do4yV=LlZvTfjj)*{S>ZO%Q?mAVc<ehok
zO=teD?@WK+OyyB5)ISmh;fW-6qHvsdr70d$j0r3xc438ChEju2ln1lAG1npJ+5-=s
zQ$}^Jf``5{#F_gtJp0KQw=Om@9&W=6YW#W0xQpSilMyYL`17D9J{pZT3txUq^8(4w
zYc76~|CirH&>_Yi9dqc^v$8Xl_zv|>SgW>2S3vptDBWMn^5MTqu=P_3b~lblI&Z&m
zWB}e$Lr`LhvFptLP2Xw!&y5m!1Rsd%<p+}3bNo@(aZ^Naa#1GIT!Mg%K~Uy}Ea^cq
z0^DSS)r`V&6*H$wm^}rw@1)qi(MPYnfoQZ3mopD#Ad3-2BnsL`mX4WPtMl>&4p6Z2
z1kBT3fYJtLv674t{IWBR(5okInkJ)Yt=x;R_=98}!+3Wi$y)zk=5&5J#oqNK+fVME
zZbv}g+hrUXfVcEg7Zcximl|Qd@>e}~;s2_Ir`(0w6UkKRkx}Yb!V$V|ob~xVJ_0zN
zXc7?Bn6LsbATNQ$O3Da=GTeYF6se6_j3gQ(iP{(qn#eN2)X0bsRzRT!X#>!2k;>BK
z97)Xy3s1TCx>8W(8Y$E$Ia4UPjl|FLB+j=((#`9PZep0O_tJd-C$hZ#i6n2mmgMdD
z4?6dw@%9-<2H+3nk{631aE~{9XXOW7)c$VOTddEP--AZ&iGdd`xiR`ag$L5mg0u>Y
z5@6CFlu)6ppd6Kz&r(F=HZOjyek<=GViE~sj#bRA+<(Rc3Q-NS^K)X7a`jWF_;ZP$
zJIOfS47;PtVQ+jLgJhE=w0;g4{CJ%2Je%aL(cR}s<7nZ(oyU;@c-wdci<Q7x`nZ=h
z{=V-ne5g@Ai^ZuYlS=7S6gjRN<$a%uj~Enmm8>}%1T7twBS~W<RPxJITam)jd3h~?
ztup|cp36g#dn8vMB5=Yibn98kEhlNVU+#`>_+5_c*OBCVpUa)jKTXkoCPAxfxB}*!
z_ygbCOL;W@i^q`xc$*ml*Qq(7d+I%IKKDa`TmN&l;G{cUc?7k}{iBjUpCpdw$Ii%4
zNZnV-Xmeyvi$5I^D?t)^4EQHXxri3LNMh5F+yWKc<Qai@zEgEewBVgmf_#kec)Q$>
zZ@T^D4u;827NxD9&(QnXj23;~YGt{lsd2RE5A`@Q0B@Ud_wE_E$LhW__c0H1|C8^`
zerGK>iALoiRLf@uVK9$0cl;>ryW_NjI3F1KYuVj3HJ1!Rp@;7g5b097v6_{gFmaG4
zN!s>D(N?t=-9&$U8>6JTouc!}48vbevHyIM?{>d_+U{r^=5b^I4uw}xaeQ}S*~@4D
zxaTx}Fz{xcsQOE&g{M$0os25pa^yHAsx)*HCv%gW;(VbII(f>{<6iD$tQ-U<%Q5iB
z@lLs)(1KsXAl^ojcP^ya=$CV+|Ep=<d^O4UZ8eRfMgI;RM+V?+J?`FViBk}|$L{wq
z^Zm%m-|ss9lYuvllDCA=n?c|=;CodiJfdW^@`z=@qNIm$x{oMnBgqD>6umE`PXCv3
zw0|!{cPGtzcB$RbqW>lsM+V?98w0oMc&OJM)K0sozc0_rkGXK}0o*wUm=aoU+C`qX
zfb3R=^fEAfEkpl$hQVH%x0C;r?>QRp+;L<84(0gzd3DMTP}hT^Y={BCob&r%_p@jm
zE%>8xG>*p6I2uReXdI2BaWsy`(Ks4M<7ga>qj5Bj#?d$$N8@N5jiYfij>geA8b{-3
e91R@e@&5y_?H;I3s(|<a0000<MNUMnLSTZ3&M3D4

literal 43665
zcmd3tRbQ0f_xFcxq`L%Ex}-r;0i~pyp+P#NV`z{P@JlGIq;xk!NXO7E9TLL;L(eet
z=XY{HhWlt=XV-e|wfBnmXYDT^wNyz683+LY0Lgo`x4HlT#?vPT03Y{hG50Qa004d)
zzkjQ!AFz7*=%4Gl<h%JLY-!__{y!%79)P<NE=DSuqA-5(+cc^dI^<2&Lg`U_YqrVz
z=ea{HUu?e)v$(i^{gppA@;?3D(P;V$Q;PR#g>-2?J#A9{XEmSuEn#0nwG6JinLRK)
z7w`&{ZlS+xYNUN{R!>?NJs!jAd|jE%h8OGqzgw=Q>`tg$^S;U3#kuE2Rwr6)S?_}1
z2-azCYsF|EE#i3pVwKkmITIXHe)gC9tL)_t>oLR<<;i~s$7KC{&fU6-73UFz=CYxl
ztbJ&ww}h9$dp$4Etz-4b=5DdC+rGd8wc_7juocfX0(OCrT9o;-HOr58O^5+9vb|@+
zKS7))VB5nf{{@QVGm*tpgN0!IYZ`K&*G?AyDWj^gskOg-Mhk|@r=E2;>{Mj1-=1~?
z4Z|ibH^KkH^iX>{OD+8;-+a%2N0n7qEZ6D7-_=>nH#`>a7(*RZ4Ld<GxBM=DYsXRD
zm%)O-tZ--2he+WFpDAW);o-NZKE3Md>eaT6Q^*qswD0A#vOFbKAKNA&z@zf^D%GOr
zA8X66POa{>epRYlOPw<^+ndODZ$q+;y8r#O$soG>spo*LZ)o06E2zLN=v0J|IS~ju
z;>R|*@U^&lXfluE-4uMs*0C38mxsveM(oJU^lUjK6x;}oUCIrXw>!Dr<}ZQw)PWxD
zcfk-YMj3ErE{7sn{UBKLVug3Aq`jA$9FBed0>9_-xN^AQ)a>r^d;n}C_jnX%aZ%ce
z*=u$#be?*|kBo!<tNHfK)OWLteUqErKYrP!i1+tz1>lcYy5<TFdKe0Z%Ms$ABiwCn
zvrzk;S^#68IE#Icap~LI|Nf3h-vU3g*d<rl4TAYk*1=~xj{Bzorg${+ox)pUn|FLD
z2TuX4s~6LoH1%NA7%%!?<=^VPZD75GE*qJ9w*IE-iQ5{>dOqI6FRL*9w;K_3AKxuh
z6b7cL6UDcG-mYpsH+dmuAp-^afvdWrMi~-UVaQ70U6ue+><nmo=*ZFMk__fBdd)S8
z3q-s)^z%`y5UkYwXh4mlkIhSwARO@wmj`IDN87-6KgpqrI%;Q;y<0&-S@8E%OzwWI
zv9_%-AZ!y*<@MWs264aj*zklO@q_Fq_!tL}Moo8uq3c13=p9uH)LF;n&gS`9$Jq{0
zP{@L00`wvgRMN}i!jBi1K-tGY`6YhvlOO5T;Wy4lBYU=U`o352YC!L``~KYr)D3jA
zi~se#HU`K*gRDZj*Pexfu5tFo(pQ3|)q5jz*@nfb*4fRr^(IjBAh@5D=cF%^THv$E
zA&OT6A;`;X;(rJ}Z30mq`o)}J`6iSLFEUW>ntPM(9nQ@^j!SIZfgy;<Dae@V-;!#8
z=R!(c_2%^^bqbUiofMBSWB1GHV2UR0Fvu74*D?`)0W32W$eQmp>Q*q?ypL&)oV{!c
zfkrNt5GDBvgta^IkK+oUGSDeic<-?nq54&w@Y>vrsxEl#^~%V*=KmJ*LCuAm(D-tm
zc40*;&7|>fb36~Nz`%W06vD=qa7%B+5YXmOd+mrVw?EV(e^*HN2>P>(x3C}X5MR$L
z*08vdw?UW<dSTuXb6+cb0K9%2Ply>&w=DSW?5;sZN4b4@>Mx8G6a*u0f!8ZXkmI!y
zaW;=y3)UgO9z+=qswf`&xHVLd=6q=rW3wh3)ZK*sAdF^M888?`p75h2DB-o9;HqmD
zE=-JelHU=|a<#{(8{S%E6v*#Ftdkm0^DlraT(zOkqV;Q>^p)V?vi45H&zM(!C5hHV
za1Uz~?*Nk5(W5d{JmEkksk!CD*({J?U_~Cj?t^x|fdU97)~qkS!rEXtO3V*GfXGi?
zN`e;1h8@griHjG<GUyT+0Pn|-c7u{Ul>%WV-`~!Gt?Wv`V9YP}$%EjX6Ik$N1`LMQ
zY>(d?AOwM!C%`Wep51u`1~fMx4l@m=poH{aN8Z6K3@66+er|53uUln6RC?p<3xC*8
zPW<@yEl~RAJ_--L`gmS(S`-)da(N6;V|DTMEaXr%W-IIMM7eV&!AoN|S|DrIMtL?U
zc|H&;8)z6o=pk?b{#RxGdO|Sg{k<T;25mvGL6(UbN$x@8ly47W!3cE5oB#TJaRPh7
zEaU<mo%YWkTV-Z~z?(j?z?Vke$m^mJBOUUAw!Dh<+fpyGD(c<{Xyx)a<tzm;jX3fa
zlCS#vWrg^_k$D2L`t)0Ej}ooPgg#@})WbaUX&o0HU>E!bd_nmX`WGj$Pt6*)ZojV!
zqRxSp9bH>lISUE?F1xxWj)$9k2VkZk*aF|31<?dJNd02fCT!&`<8_dAm<cVsR<)3V
z9BYceCh3d3u-wIDSwX-KOzzAD^J`l*pzdG_D1a(AM!qOIoQ>gg5kU3y<%pR$@oKhI
z$J|faTZI|+BE6}F!B4i^yG;nX0^q<V&&5Gx4iqjpjKt9fJ?&Ht`#~0oHA)N;dJ8N)
zrImKsh0(KuZjUM|z_)kG&mJ{APnXSJ;g6W{Ls{2+H{)W)91Y+$7g^g#l|f`f#QcM^
z6-sPlbBzXGyL8;CI{~JNaE@}b)4{1^H_Y|hxV;<)p<T{-X*L+Htl^7AH*)F8ur@S?
z=!5;d)CIg@$?5{UASBP&i!{fXfG~hLmI&bE218F~3!zPMz{&Ggivko661!yj)%u{5
zmNnGsoAXhmHA{;bMj=d;Wb-qm{KGjfyTiKnkvldVI5j2cLglk)_SxlI$TDEmvDt7b
z!#ZrS4|$RnV(5|NF2LKKD~BG!JlW4%YmO2=!A?pv`^m`5U>TH;ZJRr8@OG%`3wr#`
zE%JIs+o#Nulkg%=3?OT_tv6LX116_D)thX1x-B{OchzzCf@kl5NLj`s_&86St^ibQ
z{8%<NLk5?2clO#7K6dvwhCm*O(1p2Jhpk{AWcdn#tHST?^W?yu+^Wike~{y6S&6iu
z?|%{|;aU!w*ZF)TD3Xw|H&@e;Rr$Sl3cw52wfkOeGs?$z<{f=<=!No|@#E0*41wu0
zSoU}?vH?{CdY28tB61~}5M&H<bIC<$8X)ZRoWZXDnk`rkfVH!NM)CJqcngW0SW_=P
zkrA)I5l3y!Q)(mgJY*+omuc^>a>OOrJZ{ur=QVg|&*o(f@!@wrH%rYzyX@N^8&rtg
zIrKsq4{vIfwJm=I_=g^K8+}^?ixYnno6lK1gOB4TRGgGNR-#e}7r$hemU^R!YSGXE
z`2k3_cK7>Ve=c9*vP8s9ET<g&8p=i__OS%}(xS(HwYb2LOC1n!e)jPGNPxwZ{^shh
z`mBr$^Mjo%rF5O*d5*61q6*&a8xMUh`xt~o%N>!IuD1*CV*AY@Fu+6((|<H)fjZ!u
zGvFCxZ!*joSzO=uI}y03j@bV&hicZ-GZA((e+D0CX#4#7DGm(hd0#xbY#)S~^Hlnv
zjRuiRTu>O|wCS$3=5EED`~Ufcc|vg9`jFuhIsr+<A?^>Iz{T41JA^*`>ft@-^&n)*
zk~r}og$6>LvJY#c=y5Y9ldmk@3xMJZiho^K!8)jW>JRpAbXhgA_Y#?=z)d;u5?ji=
z?)SJUGEN6ygM(Iw0uX;1mEp^e_aLb>z<eG=v<<PJCDZ5;n-U)Q%@0J<cqN!fpwf4A
zoLEq)ak<T4g-Sk$ES;2iv_Qaqm0x{@<UPL2fnm{agd|5GkFaNO&1T_0N8bEsbs_Y^
zlQ#%?G;)sMjZ-_o>#$w(gQRL`-RwR0-G9N^+BuBOm~?kdjB6KL%xdRG^ZTU24!hX}
z<A0Eh#$8KI5HL%H9hTjHy!}W<Xt8;6+D0<Y;^iwZy}J>FbJyYU(EZkM3uTjefmyGE
z{MYfLr?gln=8T)ui>$OaU^hNA<yn>oA)p`+<ecnjjfBLOG+uaIQkKP{{EH!#7y+;=
z6Ff%(1716z*k&^U@$E-eB~;`1Pz!-q^b0l-b@(#L`!xvcw8Qqp2t^gKn{nVKVRk`f
z<h_x6EBmpxqnq3MhX*~jpzcP1PiQ@w<NgK;TgFAk|DNkFwg3C~x<R*-8i92EN!x9D
zU?rZu;nt8fCCw1#nz9C-dRyQmh?7+_@T|}whROBUCwUiJR3aq%E<DUit?ho1W)b(a
zGdQ)|77Il_<m&Ek5wp;~4T;tKI4t-KUQ2BHHp$10dZGX{EQ8u^(T0zn{J_aR8NXA0
zZT6^Bzb)>0|KXu&i53nowGCU@b4BgjqI&+e8lV4A&gTw18|%xkN5w29tO2D-7n!?k
zwfjfpqLy`3Zn*ILaF;c@^Oif-QO(bnhJ?^TZatN;_eP!WgHl;$W~}}um%qX-wPUw@
zi2+~t)&m`*k68tYWhR>YkPX%of*u$XU`vpLt<0&45NIWe=2SN$ZAf!HcM~Gh@3Cze
z{499w8}Y<K+C-I8d*J@y{8O&m1P`0AglMbDnR2N2EtqxPVsQ{V$kqLJ_hZ@e7DD6x
zF|NUfd$9463;(X*Is3X9cnEpB;q~u<sqb3<nmLCxpp4EZ>$i_plB*j2t~27Qo++z_
z``P2myDN(+wc09Q@KMWJv4wTInN-`!!08Xkk(wC>|70#$TRXu5N0$&N9gXUQoF@;w
z%BI&I5gDY4`H@T%;I7c6*JU&pDmLuKIw9mhWs6Nd9L2ghR1N<8;}xeOJTdu0ZQX)@
z40ge|I%4TL>-|}**AHplZHph{GKxK6-Ar*cdH_k_)tf!MIvP>m$Bhsd?c(Z3y+vJ@
z4!+AM^KF<1C)6=-{_`&oQ2YwX-W!sqJixl&(!HrDOV0))%XHUC`MgznpK5j+r?D<R
zr7VBN5(dlizdS)-;Pe#vh$fwsp1Oej8;g8w6T`jr%<gVr_!S#&BP%h&1ABRtNnIQ}
zyR1L9k~bx%t`zD{J!;zn8)v?BYv$^hbiS(FX&l+NF!?QM%kj<S2CH`oQUFqPFSIVS
z9n14q$?&^Ehtq>4S%4D_9W7CB8jh_-hGMlRemn$Kw$9nbEP)#kQ$x5;hG?1DuV;UH
zC)jQ^!qOi*dzf1X(nI5Zg%$_}2okU3mEm#t`A7E!FwpDWgt{_5TL<GkuHvNdi#aiv
zShH)1i!F1g`Clv<+($4AZ{8Y7W3Q<cJ^<Kv%Vi?S2T*HU^Ny6Hf(~|zOI(8^3@L9K
zQo_rsrVq1xYpOH;bvJ0O3Z8t{704I=FL9u({D4xKV-xO?A9P&nD4_-jSnf}B7wy{r
zyNC_K(J%4$wZxlCNnZA~P<KZMi7zenm(N}OH|MC@=8yPV=W-bA8BB$EOx<v&Tjy<}
z%B0CSjvgQ;7HTQ{6Q#a4L#B+^0-y2#f1fFXcm<UXHc1nE>wM^uJD@$cz`KySkFO7b
zDa6QMNH9m;np}=`t9d>XiX9OZ@SyZy+&PosDD7z*S@DZ&sqeNg-S5~`I|k1bRV?U&
z+BGJ?7;cK~(Tf6w&Ki<5Z>!OMC?u>P@b0M_6YL3adxcZ049ITsoLInfe|T>j88<Bp
zO9*xSvF1@z4gq(mcJ;MKi3QJ8Uf<jAhN4I=AQE$j5`TSc4`bUM5ziXkE-@M`J|G`s
z_Y4OR?$pQ1{og;SE@JccTLiOB;#LSYeTifKUQPZr*$1IY>NR)bC>aux3FpC4R9%F^
zZ^5+Wb%Y4Y0oFCvi($0ipMSwP$+xyVx8WPnBY<fI$;fdI+?(XfUKtsEOOI)(ePi#~
zKf02gwc-->X>#(6Pf_3g`hGG92W$ZOMx(6s<4|=9c!xB4`3lywWGa6yjUCR4$1=0p
zn-6};j@S3;Xf=4Wrllee^h+<4x0%A8L?%@oJ#|bAF`FrGEWDXW_JrK9+IS;#Mp~qt
z<*l}~w(;C!u&D2%;3+GCpmql-JDQE|VUY!f;*IPVOyYYCWb=NW@YcUmZe=Mxcjv^8
zxmMHaWjBUg4_^ouQoMyELT>YUK*x9-J-cPEop1F$x5J8qB>FMl#&)g)wq@J&_P&2y
zdp#uswoSq#U2Lydc`3VDES8fhqfArNBvZ?`)!u^I8SA_p@<T0rCSIhIu+-yvXTT{M
znD1$Qe2bo|w`Ij<(b*UpP{926)NWcrCi~Un{}Odn0qzzl&e#7<+?&mn>&^3WkM*<p
zr-0J)WHz<MONm3|vx8$`@|^3GeIDW&n^HyCUnnH4mzB&Tv`?uvESfb6oEwxk!r$!f
ztw;{VPPg}t%OhCtz+s0ZJ?nhiy<_VD9KVX~JPzu!PNM(_!kH-qh#gGQ4`^Tcf-S)j
zL^Kjm?;_2n8pv`<%O-_270LXL$BKdEhpIGFV9zAw*Uxv?f)f{}WV=^86#EWOnaeL9
zq!|P&okghwb13UoEd0#-&!-#<9?_z*-2YZd@GWdvdLj4<EP@*^ZTxBVHV>*@R_oIO
z!;`P>B|a>hfE~N7e@)q3blzuUDQ}K${Dr9wTiqdI{xQeGq`21U`|33ULoCxYM)Ojo
zo%T{o`i&f{V{_~C#7fsKvwtW>Qf0}+ziNMU1Vw`H^IFf(egpS#Exaz`wC>Jt!qF%4
zTIb4W8wtEHC$jE}gvK?mZB84Kf0$z?TcXo^n7x71I3I!NbXP)?00#e4o%Gj&Iu*HF
z(^z`QY3=5Kf4zVj=sz(+!Bz;kCmoV;eJ}B@P~`V_21=-oZz~3J0%E?V`M}VM0lX>`
z%fgBmW<dup*VoIToo!f*Y?kX&RFTb3r~D<(YjLYtZfDs}kBTu=#McH7nCg3%vEEz4
z8|Hq0=13V^HSarb%2Eb7D?7qPMLbq)ht=~HsqJsOQWtwdK67hyCejg%ZOoJ2qAUkn
zo2d7wr5p6*CZd~2_D430cA*Eija5ya&oPnSX-_JfvL^nj6$f4Uz!tv#5P2uba%=--
zydp5}N{G`jwS?&3DZ6x*4K0-kp=a6FKbPm5lJz<AlIa|2g*a^O456s&^(cu~TMZOd
z_E=gUcm7~!t}_GjLoNoj$Jg3$w}`@<``*YqX`DaT22eD5O@O?j#ZRvKmMU*N-ntz?
zW9}b!@O}sfM?Ld8EMn!XRzebtz-W6K)ewVyE>g&;s`RF!Z;JUeZ|JFWBb$}<s44ON
z=Y6F6$U3qq;tr<+s79$sDqVwN)l5N9oP7C>oi2Dm0!=}(qGxXfc0S6q|6=&Z+e1th
zXX>39;v>GT14p5Bh1Bq-M@>NmKjI(5sYiPMjsmZY6Qo?6x<$s8z)gv0<Om!3>^^(*
z&7mY~<XB1H^^=uG0d71~tIOplvY@m6L)P}im|hnqzy|;M&qdrDl%&lWR#`*B4(xaL
zGB3q>*Hg=NoEKd=a|pagJ=Kpy<?<OnqEAOyw`!E--x?Co-9`U`Yi$q2Mc)#Kk7v9f
z4|5|I5Y6zzG$FJr{2u;Gy|Wq9hjhqxVB>egA2N|v1**K50Ai8UF`>21V4_aTu(UF5
zzw9M-gBZQ&*ERty<d=V}B@r44Qpee{P03EG(Vap>#qpD5mGJ_K2vLoK2tD<YPl^sM
zvZ#{xs2LAD<fZWbr&k(ynX*DzT4H0)--=J34(hiXU|0d@O?AZCBQ7;TQpf3Xdj;fi
zsB^Ph(=z1ZU1$z&cpMJP%<<L+n9Iif0+F2E`aAq^Kk&Lbcjx|WyCgtovF^_*)q$W2
zw<rm{+u!lfRutVQ{h}La3No}G@r-a&nmA9NAnCl*Ex<wXh%=RQOV^V=^%hehjW|G5
zz|)6M!|=a*S1Oq|>U4SGA4n$obaSkhqHJA3$3lXTy@|shulE!jsg*);`zsEAz71pF
z-mwS!B@21F#82_FJtw1^7N5wA^&#?HWjl064#Cd$3PPCkzYr%D4UY2AFP1(aa||w5
zTnnB+3>ug13z}Jsg05@@c~4Y;h@k~ux%_iu0LXF4MptWh7Kqw}kbB}_q#9hLRXNUc
zyLe7Z2nYl{CQH{c-9{<6S4_fond4B{49|2BsmgM$ZHM9K^*U;LFGTxo>17)VMP;V>
zXhFZ7UY1je-YWE%sY|2+4vE)U2%^NS1?XSo=M2AfWcyq`E{sLFeyJIS4GfBMJfK+3
z#w6uidU*Zrpi!YW(d6y<9TVc2ridropGnAb9nwG|fr+25L?&D_faq#wWa6Pu$`YRz
z@y|z_nTGe2^W(ZOi+s1y<_`$LNDdxn4J#^tREo?df@nCU$YTk>b{<c<FQbYn2Er?+
zngupA;7#t+`HtDs`C4jRws)xH?JqrN->}$>8W*8?FX2AlJ_Z<jkqC?l@WZ=3L(gG1
zL$NpiBM*(+UX1D=9(oR86YU=-4Rcid?!l}6<*uR=TP?A=X9D02wt3h4g>}%4YXZm9
zA6sWZXo<c^x*NZb3Y*_NpDbx%#UF-WtvYpX`nqIpa4f4uheS!{HIpCtg^&9BeNo<9
z2bQc?;pqj=R%Mv^4`ZC@e=eThy==~g^0$ma$NweLt~i*5dY2?_RwdsHzQoPgdv9-5
z@g0ebAu4cw=sMN&fOuI6N3b7nF#V5G6}ZIRKRYl$je?O}puO%m{MiN1C*&u+&n`>>
z`P~YqTn~kRrCjo(+{n>G*M!%bZDCQ$HA~=H`kk*4rL2_NKG&I@PjgH?+%kt{9$Mx-
zS7$p>coi{7Dw;C}Pdt}#D>qj4W#0>_WA*7EP2|@Qk8=?a3b^HzzX64Wf7So}M|W{g
za39k7(^oQ&E^NPUw;pI3okrla@5Fd2TYMOM_Z3JYWs2cjn)SYF1iHz2;P@>YG%)M-
zgiyrg=4NkSV@<6lY_J6Z4%}?!+c)ku9zs#+&;31Bd+#1KSswmj_&H|$v;iApc)pp~
zlxg_R;O~mCB_?L>XP%&Yh_?5X53!TLrnkej9NTWC%^=dW7p6|fo_#w)vFWhHRDhDv
zo}68$#hz<PZI1E#Iq|A)Ib3jxx4><naFW2!P>KUjxXih3y1!|yZH0ysM!)kFo$L>v
z66KR4ZM2bJr%pU^Eg6D6p5d(e>^?!t)ro1XyxKPsLzL<XtA*pd#_ES&@KBVdRai|>
z0Z4gI0(BmMW%=xvmiVWa?N7YMjGK&Yg5Mv;7)?jo^J;6+y1?w@U35*eri{RY)}v|$
z#7I)|;f+SpU+s>+!k3{m?vV&TB{5nNEbY?sHFydU$*?X@liqW65&;~|N2R58ThOFp
zLal(&rT*xT)aJrGd^oec7lB-3VTcs<%bi?Tk37Aju!%3$pGU13q=H^<_o}|UuK-`N
zwMt-B@!y`Q(^mXW=a3Dax_qGA`t571R@X=!28;Qx{cNa=G5csUN#{`IzYwcX-lpqW
z)VKxG#mju-2E&Tl{C{BJfX6zlhT#BM<Ksw1?$@5$=}zS7kamnQ;2(Nosbcm#!73ro
z%lFq5wGgNecQT9J{dZV)jz5SIsx!QI%Xo^hz2$D--zyaZk=TYej(t`(QHwFe{PeTu
zuz)cA+8*#-`_aO11GzhkJsX?a95P;)#+CdM`H+5T%yU|OD0)NUE&ccF8{s5@$WNy0
z-;)q>a-#*0_5R*->DMc%mK}VW!bE<C?D@zsb`@LKaj#>$jA4k3IoZ__CXnFZkWd&M
z1V=XXqne+*vPK9E5<s2M0cvOt4tZ?D+KDH?xMzF<H^I0{q+trk)Wj6{4EmmJQ&>33
z>xD}-lbgl3sD9@41H8pL5>L_-ew#LLy>^Q~10~bsQWow?>xE5ne}zcXtja+>{Mn#f
zfvR52?<o1D0ilX)2CUebIGAc{A3E>@8Ku8ZyACK}g?Z@&%2MBal@efL*wJudz1icc
zp|>_A4_ds~j`N2rvv%if<0xy-?9TdZreO8l>|suF5AHwL?xyh)c=ot^{RFDBBJS;<
z_|}P4SUXQP2zqi88wK#7o`B#Ap@%eNG<4n+oEpnr@JA7Y;B>zcUhdB>m^0;XD=d(`
z3dzh28GJ$W|9CJ;L2){wF+nHdXUn%7oI@g)ZXcj51O4H{2yIAjR@s(5*6R0ZwV2{v
zqM$(45lY3*<xQhUivt|Raq&X%J<OsEACq5=hRsc>@fV+1MojFby80NLe!XYXYcIum
zs)>{=m*E}b^Vyo-rt<;$uvGbnd>J}Z!pHU{l=K%+!FRDPzgbUIzoY>30b{L0u~!eS
z>_*k6Vfz659)fI;W*PTJPb3@WNBW)$=R711xn2f!#tVs`yZ-!7IjRZ*M5SQv3T$b^
zHv3+o&io=rq2*mzw*I^6aN@uA0gxz}<t3rFho)^YsZEsW(Scb9T{|&b#4||Cvp46C
zsh-hAao$7VNg--Q-3SNVL(}Pz!f(nl*L?C>O8Ix01uuIJwa>Wwe&~e=rdE33WfHR)
z(cSz9Y{n<0$-TH*qY4-#kcg}EFb<SXqL<UPwvtoDdiOf<{T9j}y475kDJj>ez;d01
z{lS>yvuTRi%a(dg8`PkO*e7CoZS9`&7ad+Wo4k3)ow!#U2H$IWJxtkEKDt$oqL1$3
z1s($s%SQ1+^IbsUfJ8S)bZSq?M)hdrjq6y6|NRfq9JagZ*FDSeAy>a2H=3axO2l}x
z@vI$XQ?Jms-G5-~UmR}P`$F+)7GAgAc-Uy*{waQSC<($&k=wq*L!VIz9uv>vk$&*&
zj(;bR<h98U%3Pfe`-$*zM=6eT6E)WF*f>=b>_c!aZ5)?0-b_ji!jKif^C9hZ0bbPm
z_J7QD*Lj2m&Ab%h*jDVR82E8)RYVKFDGZ{wJI=o;3;jOdOFYl775|Q3Iy%hI)}=|-
z8#72M{|J)php*twswIwv!DLMhhD<;3|MtqHd2iKjEaX058QTA{{gD=(vI02R+}oiY
zc*rN9b-~2`dF+sP#1wGW4i*mPSB;E1$-e|H1fs5IUzwCBdHT|T$(L8+@3uAwL3^st
zE>q-NNb=%mT<HiZ=_KNGu}aC8R3Kn2xfA>Y-IqSfbYHE!^{Ql#wl~-{I=&P7LmxP!
zu0uzvr4T(3Z&Jx6FFW?n-kwE2kJnrR&+Z><?sx`kzUqnUU9JOFeh}Fa*4&xdI~1bo
z_cxbBC;`RXd*S3IZpdp%j&qN<cNOH4p1dLT7W+}a%^@d|xN3p4c2dd(>4JyRXBSzh
zqeID3c=1kVUhu1aeG=K*X?NN48Xxq65VS2R5H&8OVX}Qae%**q;vO;qroY}uwhrSK
zIZ&4F-9)+E!na;wou)i*D8@*f%ia>*^GIFu653Te^xZ>_w@LiKF8fbUyC3xEoB?4n
z+tGKcUq8<>LekpaJPUb6$?+@|`g#4~O(qW3tAh+q8fk*Pv<I<V#TwJ%n|C|~JUa^B
zM>NQ>zpQ21N}e6X7`J#4-a=|kYP++MfmLDOKC6sUvl~odpqcLUl>1X;VjyMDSwrk{
z(^NE!Kcx%4IAvTL1)?_M?ij&$QkgH!>;wcGL@choO<W>;|0aEItd?6T{xqBueqZ~V
znJrwR9se#<<k&7sB~R`>3xM=*)7ublLQ5G{@nw~&J{)R0SF(y{g?#{Ne~dS)y<O?>
z5u;akhd>|M9D$-=B<7a?`mXuIpwXwq8{?A_p}B^Cy-sfF8lDF{Vt!Uq%L}3b>hu|5
zmkp+z&ASNf&q869ydn`4u+Dy}32L%JVoa?rnOaL-RbE2)hYc=@xCT46vG?RCoUsCW
zic*-kY=cw4Eo~efYx&17YkOrmAy%7;VV6bX=<{27yfs1}1rtb<?Y{ENKJ$MhwqfEP
zt6qazdW`j6W?>ei$3+)Ug>~^r*7cKIF;0KnP9tK8%E_`wlt<G7w`-uWX8!oM>xR3%
z2;zlD%vWXBW{f*HSFVgc6msYiVbodHT5gTlh-ST+VDMv4xcGE?o(ySdx*^{>GEb<^
zEa13l7T~QTV#X(TGWyQ6lyh|e{)6ba$zw^7DR7L&?7ndVlwm_tNX$N4yIQ{Q0vE$!
zkfW@_bi=CGnPNvWM#vk+9d6=i^AY%i-Z=1)mXoDHeD7uuEL;2E=8&zsUpbWb;bWyS
zx<iz4boM+=MyWToarZ`)aAU_qV3b`;SlYuwD@H9V_Q!Tib#C!>k#_GF1=q>a<2Dv^
zJYUzuziJa<>3PD{&!=gLHxZ*cq+wZudHHc)FeW}vea|{ZR@Uz4vKX^N5c(lO*Sc@{
zw~?f0Qda|<))~y3xs4~J1C5UV-IMMK?|t7&f&k{JG6JEtv`+K@s<L-9AF*+`oxr-i
z5%v;B^Mp-mkIkJ>|L0$C+~QZyL2GpX=;Cpv==SBYSgVK*Hw52m4(Hc0#O@M$v5>b$
zgRiEC1Fz@iy5{9l^w&i?V5=&*DA-W-e+8%wGp7zx5ZZt0r+5ePivo2YLX()9uxnwo
zX(IZe6>HKA4|7CJ<aoW!_SuO(!pJ_4fRBC~hZ+TyMg9W4fe;m7P{y?#Q87G6KhA_7
zHh5oTHErdq*NWlhReBws$$v0jnd*H*kH<nqTHuwN$4?k)Qg7Ru_`~G48aoQ{^Y5W9
z8xA*1<zF0uca^<xG=jEAGDJsc&eD+$wt&MWgKKip^+n;OllpXQq1$ul-Qw=b%MfmZ
zNR0jFXN)PQv|5w>O|Nrd3XVlnzyO&4>$Z=>R-GIJF3BIV<PBmF8i`*~5Uh1{{&QTJ
z?@Q)n;$Q9&7WvnjFgVzRv+!gL+dStWfL|Ewx?HZeNRQi*jaL}D5>6#{s=xgt{;Q+k
zeVRPu{HX5Tf0;p<Qe}D?;9aj%nktCBE`sz@!95#VPxrZv<8v(i@0a6aO<sm9N^54#
z1A||Y0`v>(b61T@7Odd@7<>|i`NKs5I{aROG4&^o+G6WnqI9HPci}7vCUYT2+e@c8
za81)L)=>M~fGL94QRl0-1aqzUhh{<r^eF;+r&Z8{I2gijm9{~wYPwjJo-6YxzjRj{
zeJ(jO`RjD~d*ds$(Ab|HiW6YnAx8mwprz^r`0_Ex7AHJ8+iyf##FAG<Cv98^YPDO+
z9Ga=yfWc74D^QjaB{<c~8ZwlsK2lE^)iqPBO=`V@ln~H~y&`pAz0jF`-v(EXRl%~9
z`pY=Ckn&*BgVjVWeM}o%X`J*$fn800vQ==<|NBiTDp!y$^HYzc&?+xsrb&1kI|r9P
zno2_;n@QuT*yOzMR4_w{*)zxJe?Q}zBfMv6J6Dal|Ls|dq4}yyxGV%d2|KXhz#IMH
z9;4l^{qb!Kn;xn78uI?D_+4qiMpQF`{z+QtzE#oB<()#PXvpj}Xv!@9K~~Zg)pRua
z*RExJ8eY#HP%w`%ENCap28t)&OH^%`*{w!;zSOuI+%)N(O7TQ0jogbu&+cd&@h6dV
z{?JGA^dH-qw=zl`vZ2ODpSwKEPQqOffAdJEX^LN{5jk<qQh|UK@T}j!b9=IpF`7a@
zv#>qFz!{$Cjh&^9+frlX%iH6=m$VuO;8mtbDpyQ#oF8{fbFo!WqFD7_D9ul-^W)*@
z65>)_YXRTf?{ToM-Ol(do`A}<#8{iR%ajaqO@Gh9UGiIps423|$6Jp9lJ0MOU>xSv
z(Ocv~Xb5@>=O^c&MY0?^VQuQAekG!2=9*~1r7u$?mt-?sHryrU-kwsR+r<bWsC@#y
zee@wZhoJ`mf-L#N2CpCJS?pP5fkNxjsK0L)2%P;LHBwCTgA7bG6qO-odfc=PnY!U9
z>Bc+Vkbeb}^zWi<yxW9k^h%td)IC8aiWmZGu_a8#tgk-?8Dh~vFaFcmvW|3E9oNsh
zp~>Nwqt&Us&gzGgBfluzmpmgpw2XM5eYCw4wG9q^_3SL@6-Wp{9objs6h$Kg_E~2U
zyLSXRGTy&&yF6xVUx^Tj7k(~KufI97_X>T)a`U+ME^K#3TyS4ls$o<PZOX}7LwNvn
zo1E}bp1{O*Mq{!sB>H~e(-c1LVpx4-q&%PKPpa+d__OV&MB_lat@SRiD4%I(Di0Lx
z>fd|Q8BKY(eU%F`ubAJZ1z)+>aP^B}OH|eYY$6IBJDndG?skyi<ZtfIn~y!q+oL#M
zDB*n=J$V&=#>e<7HaC2c=M7}4R@JxEqM@0gxSRAsD)>}d4BLOx&LfsD{?tV{T76oj
z{6ZtsZ|oaQ3z3g8%xcfIO4{z%of-#94@~-Se{1G$g5&CbSJ{)CkV}yA&aTV!+zjSf
zpRIzom#r4-2x~eC_+J3s-2XSRBG}!MWUSZ><?KFa1oY(;+>A?qLTCK&Gw1KDnN0LQ
zASAZ4qwVf&c!aKw-K@TeZchCiJoUvVvpo>4|EZ=tO+fKul?S!MmnFzN?zFyq53iM<
z!j%>)t7l|(B%3}J;EkM)#!O7=PdYA~8`vSHT0042Jp1#{V>>5Ghmk)kILZ}7G5fgQ
zek0Q+WT2gT``f83p!z$g6-+}=@SBko8u`j2=9v5WC>w<7R|ZrA`&+J8nefm}<S)WR
zujEb3s*6i>4xARke^CSjhmYqg^VV8hzR^b6jO}Wh^mx4u@a}o1%Xn0yX)*Ub@K-2m
zLHs{om4zh@#FDjSW{JJefFi);mvcv76Z*I0jk(1Hc;ivG0r4PMXk*|)DD&#pM%8+T
zV1?<kbi!-7W}_36kU-V<45V&EMNu8(k-b|=(>#3QKI!x&XV?TWTB^ZskPYWckCtx;
zxnrX`66JYc<8(v;Fr%N_y;gGkKwwjs5$=kynwTI%N+ER`PLZM{OE9B_-@@yMZAa$J
z&P1{WB+7N;6{$+n>`$W%<C4bb<H*3!DwPs%=}zn0(WmENs=!6AdobQ?$c~|&i3<<Y
zX5Sy<%io>|1C8mdxNEE*8d$s8CqVR`7YV{>=ao|=$p@SsjlZZ?(F5QMw(@_+ZMwEE
zhk53C&yVR}&~eeovNSrnjpTgzZy;N29upKJIQeQqu=$gi&rTXovjzEk;Yr65H8g?_
zw1fRCl=^YK?4h*k?l9rMR0X2n)faudLL2Y6ST4lE8^1!n2{hLaQN)t#ym*;Q<aJ04
zHKL}KJguY9zB?^!VD4AkmstJy+Ve2i+ey2B;)uuC9zym<2N$aT+|(n;SkjVy?=|qp
zei^F}pKR8JKd5>N_L5^cNZa;(yLk{S<Ef>#nE=~3{0y?S0}Lp17C8D^v_GCS>l(g>
zE<YiX2eCx=fijOXAh~E=Zl26kD~sfx%GW6?Ql9L_(fB1S1lP;jXZ(|8=GpGTGMk0p
z1&WI4DCbO>o-;8GkRlB8^~ik3%llYv)pZsG<D#iX6Z)<C@PxFo2>xTdpjG?%k-0TD
zv~=+F!o>Bz!glz#C<QAlo(w`Ax9~R8KE8LHbD4WWd^n`ZZ1`K|<CoJC5&^I`@b&a(
zvkZ+%#7%c-Ik{w#etUMVtdTnUf!$Ylo{0u>h-Mz3(_+0r6!&MG%toGl9<6JOL^(7=
zShRO&AYe%rFoBg}e}COPg!HJ<ajeCwvX~(f&L1rsw=AO|;rZHq@y;E*4|w*stKgfD
z(wVH4wr+L-BwIR9<jq>q%+$wG0*(PSdnyiU)AZC&YKvZUE<)w7Ll+%KE}F0vh(stm
zTl($wBO(%;%SJsY$)B1KbA-Q%hUsNWeajAWm~f$#0K}<TgeGe$iqM))=L@g?layf^
z6Trrn5Mx%!ypiD_a8=>uPMFnp(kEUJ48>P<{1GjqiQejKX#72u^MUnKF9^|09(Mgg
z-Lm>l!P$_KwcGpGRAtn?gk%F>Lju_`Nh-$Y@QgBf`(MFV_H)4!B06<CV#<pN+p8{~
z|E-4rcjwRI-SP><iOL<xueq#>r6)qVC&4I~{BWPe=48Z|XCJE<vMoj=CB98->3J{p
z)vGy`y}z7mT7`dZkiy+%KFz(ebVw)TjpU8>$#u>euO0j;@%VWo9cAW;$(ePw+xfl;
zE=^;hM*biWC5&NHx!h|b+RLEM7F)DTu@)`V6yMBQF?-bXsfj{*68nI8;YUdaV;G`d
zM@6%@cY|=nr}hH;_-%7AC15+rplmB)w78_MfAi5Mv5JAi&?t{~CENKNSI)mZX_Izk
z&$n4O*37hOLv1dchmq^9dR`>WMRK9FBUG}oI3>(c;;Ghq$m<pim%+0mZ{~FPDczgW
z$0Omv=m2ZMxY0^#2t{y4>0}g2Yc$U6jMVEPZ}bGuuW7-GuNcc1hB;R#oL9?7y;{C}
zd#S4_WJqQ!DRWH`HR+c0HH25wo2ri{-QuPH_)zHhJC6<ut4O<5=0|GkVtl56TNPlu
zI1BDFAf8E_B9g10E^3f0K}5G%G)r#yONF3L<*8MG72~g{PI}gjsp%AE{h!i{JjYZn
z)(F5U>!{RoK{(_Ipa|vJ>&O1;>Grrz+h7{O>#tmX8nzsD#9D&JzI9%VZ1uLa2UH5y
zB|qKa(rl3J<$kHt7w!(%dPKAwgkON9yv#tQGU}9`d1nziu-@Vk85-Q$=w_GQCinJL
zwNNXWw>8gJhF<1(DZv#e6Y-zc%Nd0HgmNqM{!?mo>FPRX&v2V^Brn}U@O4&sJKH|@
zNzS5UM2oMo+hHySSPKiD7QF**!Y=<3_Xa|Rj>=F!QC{I{<ZP~eVj}i{kDOFV&Bnag
z?0?vkl6qHs1b+=AHVs6VTnP<BinED%ME-dCGOoq>3G1?!(DYACV4`<NmjbW*1N)2G
zI`7mggiH=Q$oY?2gJN*Nl`;4GV^8C%PsD)jP58FWXDBq{zQn9}&XO7!6if5TnLtJ?
z)-F6x`4`i2Pjct8v#s7qnPn*{m2T6rZ~EC5@sje4=l$f?4wfdaym|Uw0;(n1t+bw8
zho<y`+V)9rCE)e`k5cKwD5Bw2L5lfVxz{8Yjo81fux&Gv0;?wLtN}y(ju|dr$JX{Q
zJ26Qm6PSS=7z();z`;stqDWym##Df-xhHv&B40FSv+;`fwq)3Rdh~PgaJHmE8tU49
z;k^8v^_};h4M+1@F~9!I9=jQP(btLAoAC}Yk4B9F#)afhd=Rzx@LIcNuV!KN2ifqG
z;aTw6+rn0c1Ht!#Z=z>&sv)lx=i)zDI<m9a-~JOPJzXDkLy*=vu5tcSR*wJEG#gIj
zGnQ2lQ4wfgpYd&<%~04-7?+bOQo*zRiHNDD=>+6;bLrE}Mjt5siSn1#*gXQ;i3gH=
znUzD?J-baHXQF?pR{!$+Hpjbz%yks&-><vOP*Bvx5oq+Wj0}VOuwZQKW8FjK2$?=L
zrDT;sl>ug@K2Lvu<`=gOi$V*j`kjziYX!Q@Luu2@m<pxLeaTn(zD^{IV<Kt`!-eO2
zFPA8_kAR#WEC+GC!$^-z;bmU}09?T>G}k9j7)&MIwQ8Zi^W7yc+gYxEZ%g0?x;jww
zM#9SqCg69L%}IRHL}^`=1|Q;^U?I<Bkb0l#8`ToemiGKK4MsRxqw4|L*7q8;@xnQo
z<Yvp%%4a9O=yls1r_DzMUe>S3k-jZR%EafP&!(c(@8c3D%Y~9$-?gJRl0Yjs|NQXA
zq$1d_X)jDtsIDx@U&KeV`Kw`zQ@H-?#I)x6Lp|IQksI`pEaAcLR2|c!;79y8mBmPV
zpp}fo*RMkQ^^%&#8m1azG$u}EO?oA1`<xL<PN}_XNwwI|O0?CQk><6e2SCj~D&m<l
z?qu*MHKSI75L<0&P>XSnu#2LfH0$3O#$I)Ho!EqND5C^y9pZ*~<^?}{<GLoNQes%L
zFlAz{n=k)@k8iIjXNt(jNzf^#=pxaiuf1Xa5D)f8tzfHGyJ);7oQ9pYJu?pz<4KEh
z<H^Wd?>XF+^?xv`|Mdl!?Ql=$RYUJA5;^_)AnDF4-1}#(#1c?9oahXELJ+3gLR3N}
z1BD_N35RHm-UGxxYOrPF_bbrHXP9|>2>2|zpL~=kxSmnHIUAGY<{s$*hMBebquu6t
z$%_njmUWW#FxM1I6xkCsBn~A*trK<~%OrjM(i$5Hd^A<(6lMJE(kNEL)hE6uq$r^s
zi;e8-4v%fa0_Sc}CnH$p?g{`q<u=gY3$2y9?6{-(3elVMtx(vm1*|=B^ov)2;fKrv
zzA4@~Z6%)y<<*PRF3Xr+qy46)<+IMVrhkC)Oj)Md9$O6p;iiwO@J{{jIE8XV(>w2}
z)HyyixD0oGH<j!^8v2Eeb+*$&*e*HGC9bbgNXHRV<D|3T-+c_$(MBF=-BtuWC*fbq
zX1UGUg|<|o)OE1RBMCyG&+C-vxCiR%U>_473j3Q(;35(fsT%w1G8dY%pJA=mP`289
zj|hio3~byTp`R=Z^i>){ve+`Q-tJ(DvYQBTT?@`p+H4o`?>{WI=8sG^0&Ek04QENp
z<cZ9E_=K0)gekyRMqy7cW<2ITKS*vp&~()-jO<`s?r`s={a$!X(vPKP_~uJh`b}es
z(Pog=?}j0Glqm1IE`m<}>QHWKLs?89_v3+M%>7EVp|DjH!^d4Smn;5L_U0Sz?i;GW
ztde`v(*qRcXDxwMrjots!nXW|kKC&#NR0p)$TIkL?RyvsI}oa&(|1zv8sHjR4WLQl
zuf`@Ku0_3L<bR3L%!Z?bjj`l!`Jr!`;!}LB=5jAy44ZiN^m7_aA|0z`soaL$OdOA!
zc0-*hlUeTJRwg92|2h(INRzYY{$<)!$#&XXVV+(zu6Q>aT$r0rp@g|(mHI*UkAm;3
z0p&4%N^V#HPzgCh6F6;GF}Kw}!RM&;B&J-`r?8ql?HA4AfiA;uQJW%4`Xqv2%Jk4H
zZ-Z_pAx*<qS7Xw*f`?%>X*adxLLF{C-50SD8>e#MajU{m8Gre6i*@wJ7)Nlv7fPs2
z-*d_eAuHV>6U3cip)vkx6YnHp9%!MX!!;Kun_22Qd98`z*J@&Lxqe5KYMG;x*rAYL
z65U7F`WI;->%Sv!JDl_1(r>Vex9C4I{oZ9I-rgI+*pdk&|I^lwC}Ddv_yjfMzsmGx
z5`)|oTO5ys=_P;>U;LvDQJkMY-A103#q_O-KtbrVxz*5Rwf`evO$D}fcZ#`aToo-z
z?Y*1vpFW>6QcYxPJo!+;{XdPOJg!6n^K9BkO5x0SE*3kdkLAw}laeHF*7MIJZkvUg
zNuf=Hr}sEhOnLhwCx=oG4}8PgqEcdW4vX{*)QO1$ETWyR6A&KUrkp<H<5IQd($B4&
zGvd$PLZI&t?<@Py>Ys_UW_#V?s5;IV<-^}1>H=YiSyqT6PDyLGc3#G;vUZ3Ur2Xf)
zQSk%5qzC<(hR5GTX$=$T6!GtxaTdO7*gOQDZpS|~d}ejH9xT~-hwnG->+fu!>L3!C
z;4$<5<A3N*?y&lQc@X@hAbZvXB`b+JK9Ovci$RhjV0F6ekYcw;1>c%@z;`_2k)%BQ
zcr2kK9j}f1E>i}D&oK}u32sxf;>e}+#&8MpgDv6<kX=TK=k3R|0K(Wt>F}$`Oly^`
z-X3v@{;<lS@maO8Oe$Bw(ytubN)>4u@LGa$!$Rt!s!NOSDPGe$NM6k1ScV=`)q*>E
z)yo)|e4oF6vl{+s_$4hmRv2tPi@U@)MOQ5U7)mJw@?WsaluVHFamX|R;;*#79@?)N
zms-+AcYN&R_Py$$E3k><IqIG=x_*RpxVu1%0G+R^V=}Ub|CRo$rVKYwlqp?e;ImSA
zo*417X^u45FEo6`=xe&e@bi&Q8XGNdjb-@lpRGV#D&O#~)XP~pUsk9W&e)ZifNnEI
zrP@b309AGGvbF6Xu8?r95Bv<*j#N+OTSF#W<iQ6&#Xy*w{D<n60yvx~TKo#Cqn8?{
z?@1?r!-OB5%J^K9O1DFaqoq))Y!MH`w#zDBOes4swy2rRxc1rdQExxaz;_?qUl`A+
zcL<4-Q(iZ@2;TO*KJ0^yrTy5w;*GnX1R*)m*E5Y1$@+=n2Pzkcg{Q|E6@EKw5`cd>
zarcj#w}I8K>GM8gWMr2W{PTpr@_11td0Cv=$x|6*&jTZ5*DAU#!x4v{_ud1x%q5cj
ze~+U}TerD`qr)!V;o62aurgfqgt?)Op^XQZ5GOBzfmr3!wMQ>Y$s1UFixe5qSnr$l
z&d*J!#}W4xaxVX%UF2yuIn;S8bGK&|rv7o__Ty=rO(JoxlD=;=Id+j%)plk*?m!f?
zIRpE<@RJsRkFxj1Ma?59+BsC-2l^uEZE^c6T9c5BnJ;}N7yLtnPFrz>mw(1n-Ya^D
z?=+@PkJH%@MW%~c#z=WaPExu2!Hemo6?#)Y`b@N0#JG(u8;-H<let<bB7MAkzpacM
zMZ+B&KuGeii#@&NqBMKP1+igdR_fdpZVBeC6qW^V)`nR7<GzErrj*1jmjv{VbShVN
zxKUfvdx`m1uE|8uDFABrPq+Ai=PyrTEfEzF`0hBtNvDN27+1Sgy~T^FT9%vV*uJ-6
zYkq4r|IHyf{PPK>jnb^BeZU@@3@yvfdOwVkcwf>x_s9yb&kyOYc`6w8Z8r3UJ*FLD
z5k0pE6}JcuKb!jdmlS5i=;#glWn41DzUU8RN=&`bP8lmKQKI)2M=u2Enu{ATZZ|H4
zl$GO*odn6V0Y>KlS@ZL{c!fHHcwE^zA#Ju#!O!P)n<aTg!YS;jq9S@UKZW3CFbZlq
zB)_t_FZ}q~?XB$h_hTB0@83GLTHolaLBIcJWT{3LOw^3zmVP`+b!~d-iSzWRr{&rM
z4X`pE?zZQz?U~H>tCDxLV$XKz`V#<`!{wn2c}x_1EgU3oE5oZ%FcMVCT(db-ZhU9j
zaM#odmx&u^PO-W0w+MRhTa^3cRj-u!z${oEgrR8zYuG(_!^Fmmn~<<r#LELR$*d1v
zQq};U6B6fNLfjMODtQ#KU*2@KxCN(8>y~Lh%%Ky_S3_qS%jx3_u(*!E`Ix7)7Gwm9
z*t@>N`HF?i3WO$Es#c={l4r~C?xduRA>D@PwA6_V=sQ;HBs$J$D~0&j{|X5MaiKJv
z{6WNnKevvO1PL9q@H@l+1q;T!b}e*f0wP%75VvmCSGYg0UC+>Ndg!URmcDJh=jfX(
zZCwJrB>g4&Q<F-zfWU0@<N-#uge{fRZZ=SW6<(|Owq<}|xKv&}zj>x>lvWNwNFnok
zAlCaAtOeQ((I1fVXx}#{$7j-FZa>K11=?XwNnNg|$?&Vm?ZYI^YwYNYD+HHgu*gUV
zFS3pP67XOaabwHjh~bLSh+$~45#p|Z;J4`lq}EWf_xTFM6kIRQ6X%VER36^}u>qT$
zWUe}iLP{5*X=jWD`HZ{P(aAVw7ZHWgnAU@i7?i&6EEHD1kSlRkQR+VLE<9aBJtign
zoz!(C$N(4_hs#{R6bBWs9RU5-FBm99qYW8NHPv*lcmL3H26~Mbej|YDzZX$Ugl9SE
z%3A&_p4NI3ttN8ubu<A~hPsuh0HOST%Q+>{q2RUPsgTYAeU~5YAw46ypQAAI8Mkqt
zrokla9N;&%I6{>@qYF<XL=Bs!+?weNXFzw-=Z`p%kz54}+CC1)y!w?K8rpgLxAF*S
z<uzi(^1qP<9hSV))YKq;ny@o((D-9N1a4`#)e%uBXg1xy$D!9iHEYvK#G@3dTcM@k
zix;gdCzD!UcukEZX`Hwmuaz(KQT|T=RFUS;v{+QQ{-U)`4ISkj1}<Z<Bn-*6Ss(rH
zGxkvhnt_9kH+xzT<u0zn^?;p5VPIvWZ~R{>-&e0MMc;^^761LUWpxNago;X&2+<5~
z2}$ztyaUT)o5eXz5G8)Vk#=(uP<(ZfxFqQPVzL<_=F{_fnw!?QhLd#GT+QdjXwz*l
zy<H7HW}uhPApb2`Cd{W77IG#D=?VC+4YM{cIMS+)j9Scrxwa>9!f8)8!^$Lihu7Th
z{{YWGFuyjl+7v1`<}lE;$NU?RYf^))!9x3a>WjM>9=w@XUwNJJZFTOuZ8v9*q`h`r
zS?w=608WdY-SsVS)uI#Ny8MA27gcfMS$AR_k_onaOAQE{%GhopGK#5ttec+^Xh7ak
zT;c;qF*StP0E^>}10Q34>I5no5`*g~CRW0VAfd;?YKnB(6ih(Z*Jm#I1Z80Wum2^1
zhe@VVK!DIM{?I~P6NZK$uEC<SBw0Wu%UEpW>==GOH{J9tEVU9uB6{*7f-%Np_{a-|
z29pqvLr{fe-qBnX+AUuL&|JHMq-DLr8E=ScZNa;cqTpvePr#}#7P=x>8!a-PQq;tH
zSfED8oU;4YkjI`n&*vU_j>(ZaCoa59Gi+0fM^IIaY=YjqF6Q5$Oc`sL=iX?dpw|)e
zuV&f-5RN&{U-%MX_#F(@hj{dBFETt(XUF6)7fxrMjDzRuyPRc<y?1j3|G%sS^r`+D
zpZ%C(!VdLScydKEfi^T|p+2XK-3Gw`NL9!!xU;~b-+gT)h&ALLXw5^X*=DJe5`=q6
zwS%dEv;`AF6e(fg3wT<v18q_9_ZdJb{MpA#C`>&h00}`NFjb!g1QA35gn_{Xj%roO
ztk6_LM=NLuCYoSm<h?Z8N}l^JL3z5R7*LSV2e^2fP~ELm2EjF;u^_aTAT1YvUY;i{
zI;qkv$~yId&3V!wxl@9mSolSaMvboxxFRS>5g39%$U4g8o{(3M&GBph{RxKZmS*cb
zCtEKtviGJH7Qbv-XK2mEFKY{s-q`lwtY_N66&ZD|DbTrwj))m+aq7Y&?A!jGL>9jE
z$g_OMM;@d;7_%^wp-zgbKbI5$Jrw8*0wtFK;{$>7DYom*=t~z;koz64JrA>|Al?S!
z2Ot{uRq?2%WD7#4VOW}SESzaEcYdCQg(*7OESa=fYM!BPcKS+v#kc5!P<`qi_z`4Z
z(Ju>pEDr!>JFvhBCIn(ZDn1JcDn0-i1I9XE5FCKSD&7h(Buf)AXV6$M1BS>M&#KJm
zu@)ncx)4r4^(Lro^8%$yr<KOMHx<n@Z%#sCT+-G3D0>+WEXHSA#y@wU;t4}V%eL&F
znqnBr86N;KKARff9<Y>k__g19mLT?@-{GmRGPHM>Z>w&Ur+?Kk{|!A3e6`d5)uZ$3
z0-h_~U;NA}IyB9RsV}j6@>^MI%<=n=Ji|x6^#Q_)kSrAAx_v3XQ(yfrVZd@0UttI$
zr46{>#ayxYoby4zs$ZB^yp!+Jd0})9>^lg@LYSL@b4QgkZ#0=ZH$`V@hAf>2&3u2`
z!~}K}B=S3U<kR&ygdp}eLiNfWiC+-iT7X{Ep$Uo%AoiG?3fNdZ6o`aSJk>a=f({6&
zDour!Gvw_6rOrZY9tjQAfr#p$#YTS4A<Yy*#SRJ4Zl%6ksMcWd7|fsd_}`@k%yG`o
zDrk<=qD@*T{@Q~1XiSfnfq0IC?IR#-F~)37PdF&;C<CK{8F2jSuRKd9TVOaI=J2`C
zP~Sd*38P-LT2(dTGSmK56{lCZ9&fZ^pv};GFK_X0M50+%zh4DgQ#zf)oSzwCeCS>-
zOdaJbkJfnayY8mBl;M)z&YwFiIsu;j*CqaxgF*d*7X{lb&;4U;Y>8q^P!+<O!4@u7
zjTxAoO<7zt<PSkw6<RfDRUi!&Qx6Dq0NW06NrH1JA^{=|&;T3z3cU@K$SRd0Ah-xL
zP`|*-0HDjcCR()1h`_|+C7dh1I9V3|)cP7gP*su&WEpe>nix_SlVUl3;Rz}W5mpAN
zRwfu48fSEJh}xK?x=k3_2lWYIcpTa@Fni3=Uh*zSu0!EB=(<yiB}-9C+G3IV8!fYe
z;sQ3({d7wMBwzC=RLgUSDne!0@@v2OEa#?AF)}d5$(gTXMlC^opvzudjbL^yG5@7M
z(^WJy-{t{eb%x(&Fuz<L=3lcH>j^CJSjfVKrwAH#25P%`<LI*t4%9hx(>|t8r#&GL
z=W)I(IsaOY1WVuSfENx80!t8t1Ytm2i?D$qNpf1Pgqi6Mjm8qqq)A5<TdOg$ILeY#
zIQVU_=Qg3U1j#}Lml#|clIJbRS_mn|7{t`E2$d>C2}FTX37`^zMnWEXvrq|p8Ud!D
zICr%Qte@{E28k4j1&KZO4`R;(RI5Z*2r5b%dtbi<XsOW2EtwP4I&zcJVVXud$A#I`
zM4d@SI=dOK3=#*1(J{kP%dzl=!Q_T829xIGt|+i(pf2yqfjI?hN}&?xNlV>SN{Y3j
z-PWDeo)$q~aH>qK4DSf|-7mhx8z)|6VrUyP^Doi~&ru)VQ%pX}224FRsy%!;nE%b=
z0teS^!&f%JhPqame|7$W;;2qo=FUAz5PS=jxXRPd{{gX$*fF-7>GMq-IZECe-qBtl
z$aApP62%cg91unk#s;X%X|>y&KR3nv!ZeN6Jng(m<`OU#W2*$wAW>*&%r!atVn}t;
zvhSOPZMVYWG_)2%@^pa2S<n#85<g>aI~eWw#TqG5DAbDpkQF<>MuMaTH!&}jdy1|=
z!T6Kd<Mc8Jn8+&uMWHtW6)Qvrv?6Hi3!-TbO_a6+Yy}N!5Cp!67FICv0Kw2Oc2|w)
zCPRBjIoEKU`~zj?#THSPU^@`zhByd`gODJw2o`nf+p4LjT9-6sQ_6!CEJlp48>sq1
z=fyj;5oLHX;13>uoflqvf$`xnW|v-NUSDBg+s(z!zgjnZCDV?LY(AHR`B$>AztL&{
zhCV9r^*8F=NFh>12`6)=&wq{a!3Pm(@#wRk<NfdYUIvGTSy)_xz~EAcQ!mABOh6n)
z1Yw96i_@HTr@{2hDdrnzSZbZ8lQ&5628a^aDn_ap<8Md=&X9K;X)C8WpL6mlOFXIU
zyi1s$6Bf=x)`@V=AR3Y<DWYJb6r+p2O;>?x;BRr!&XWQLNZL1xQPP3CR=z$EXe1s2
zloNj;gaK3nf87V-+juTk@<hl~=qPklaD<47AP5l~A(blOz!=qSV~pG!v*Qj&G$@>V
z2F|^%G?wN`7SED5=aD2Kl7QG&s0M=!R7a^*1_{FoQ7s?}3^+%gxuQkrtN-3_u{+M#
z_kBs;QpR?MJpIZko_OYI1_xpq?K4cbpJ8~<fj(#It0m*b8km0_Rbjb^IeNpj0pB7<
zo$GZWR14PINR#QguQ4?64l=#KSD*Q>+`9WCxXhAk2Sc5DZG?I~BuyK%lX;qp3(PH^
zW@hOat>i3@wqIOgFcM>=hBb8z5klyPd<uGQ32^hoku-A_&ML>hE>tF!9k&Xzr#)#X
zS4)yt{pwZ-Dj9+!ij=AoDuuF67~<P=A-GV{vc{ErJ%CdE7b!UQ#bYH@D2jhJP{Ke6
z3pFE)`l}@pTx3Wyr2}+w#YqK;G9-$Ss7g>Dq%uCr(C&!wLpk;B!opEF`GnG3>J$u2
z?^v4App(uq-){Ob={X@Xbt>Tm^=Oiz`Xu$*FqODQ7>5Kl@DtCuLkqTLi5If&;HNUV
zJLK@GvwZD|Z!l1=&`B4Wn*TDxHy!L-&zn{6-2lCJ173rxFa8^O8gN7H!E0gEx$zH3
z3RfRnwP@C&(Kw7mgUl|z!QN5Fdv4!HXyI%l<@A*B%4^e{o0+E3IS-~m6la7XSQ}v^
z24aL5Ljah*QPUpHMGBcQ!J-+YEkE8ne-e&84!3?7cHb{F<{d8g9Rsl;IE!hfpb2pd
zRrNb|WQ8bHh#)U-soz&j4z?=*($^OZ>F)dz`Ql#~_&^d^&x5ey3yT^FE`Th6M1&MD
zwvLGfTZxfsooH;B>h_TFJC%t8LVH0u`Iyk0hfceLw$q|b=vxp*D&9WLwa9geW<E_b
ze}n0kBC`f715|@;3|4kCSe<03K1QuFOcYe8RwDx2dpltW+qS`(>GOQ`@ox}SG7{Hf
zdhRiX_TGZAwh%rw>tlYAtAP1sUGK=1c>w$&-~p_Q`LCT(=V}4N6vUHYFr?X@rY<>u
z`G<ajkG$tzR1C)D3=C!Dy1>lLIZiFj@%(G2c>K9Hc=h-+GqVY4<_N-+YDI`6gEdhx
zs9)M#6(e^TuLW3e4Xhe86Vf)=C75~*25*6Fx518k4V@)$9p|4SaRilsAgU9`P;tH@
z9$Kh{eo<!ysfVoBGV{`4g+@^!_^Ab4kkE7etreok58fDj`X7iOMWArjtMz0kiGs5g
zY%G{c1v@lIWjtc^0PMI;u_2s%0_ILT(zZi8IhuK$#j;r19XLR|bhwl{?QL?JWZ4w0
z>@{Xv0d}rRAj8DLC_}Y9j1BCiRvV^P9im>X6XYpJo;<@#$DSpu<>Z+%HTPA9cJIQ5
zao^&<JkyRfWxOsM^KZWV`1a=kyah1-%0bCz0!a(D4;|o>pZE#tgFE=uCo^)F5d~0<
zEd$j_CWj{3IRt;~Bk(7`r$Z~B=lHpEJoWrB9)IoxFCIS2x#<phuEZhKt1)31AOwE*
zQ=fxtQK8pjfocX>3zAtl^)w7@gRy-ub6!cCMe5#ys2=zkeX9hq5Qh+3s769wEPg2@
zy_|Sia0*R8DbjzjJ^++3zyu}r*J~Bn;uHnN422qR6zar}>Lw~kP$8(s*uj`+G-O~8
z?7RyG$Au%0D^ssQ))qAJqt5C|&9z=OBt=lv!lOVn!#RhjK}-dsAz~7gMOxVuv&}Xq
zr()2UvC1%a?7p4xeFKb*Cj>#l%-l4uA73I5XBgbRgD@T_TK(oKr2SV9^REqKZ&(QM
z*1-H1-(PY;@^-+8+sh|D_UC9OqntmH5Czr;hE&Kq&~B&9HQ<#qULS9$YMB_?#*Wc#
zeBuN5@FO2d=wx#oK6{QQUpdL6&z|9x*V{}_&*0n$wQ5YY5)cG_YDWrFL3Q56$E8Bv
zR2paC#B<6m?-RD&CA8;+wm94Z<Q+>G8muVQs7U`UR3arU>i}_~USvQEww(aR3a*^F
z4Jg=u-WfP3m4C~j#A1q2`vgOrh0F+v0~=Kcj1Z4nYCB=_4rOE)TsQ@%pMt!pWG$gj
zHMJ|9?A4H^Z+5`9{X{HA3{D|UQ`(&lNhigkjMfIY?Uq}(=g>~xb^93K^zLo!zjKhv
zs6pZy#3L-sD*x|4{{sK!pM06>;4ry5ynpiLI`&)}%)cTJ;6|(g$htlItA+Vx(;rZG
zUQmQQ6>6PbeEg$7Ns^7wXr+WUAWN6e(3@r<G!cm>+~ly7q#T{`Cv`9qwhd0OYkV6&
z{B8H}XMUi~d~=rP-#EqBo|)!}XPO*6+GJ*?hOy(+2WwQq5MzudyQE6q0cj{RZ$N#A
zvhyAxxd+a+h0F>r@%{R^(9(+vNFN0dg`klq?f3zjLOUQY=IyN(8ZC-MQtbXd%@1r*
zOf(P_5+|zCYa1H>e7Ptc2gHWB4wXq5Js?cpqBNUu^f5^11x*B#DXy5DEZkDMr3j%^
zE%k6H$#ar4qm!hNwHc`f+_~>2-g*0O-u;g4+;{gd`)?h95$gj<C!~E=n0YxSO$H#h
z42>Ip>VN&C+;-=!{LD}P7Wv+hixxi{*!j5%n4b+`{`LGbZvY;^>ekP1F6Qt5&ZU-0
za~B`|)}KJ^7>%V25ku-cE|#wBo#(2nQ(Pu=n$R+(TaKTWTQbmG%sH}<6CHu^YQXN{
z?cB9vCm;IZ9QQvpI5j=ZlP{g;D^Jbx{PT;PIX_OW+o_JkR4P8>(8QsOj`ObxwVlf3
zL7_D(ECMc7!dQrlL7t$f)(2LIB1L1c8RV`IG&Tj)C=5)D6|cn?c*?JhJmuF~hzkF|
zl4k3qrxc{76zKpbLNH{gRAA&L*nTSnv2gV3O8YdpMA4*>T5~CyXMn?q&o*)=B%Opb
zYtu>R2(-<3&2ZqB3GTan2j6t(Fz+}pz)gFrFc$j=HwOzRV-}vO(w?u9B@wD2LDf<n
zHv}Vw`F2k7`w8FviFe}CjQ{N~{}0T*aWb!7a+w02mxK9b1DJnhF2V4PR0GhrEaop>
zUv9AT6MXnXe}XXF&fHAqEAs^|aK<kf<NJ06N8Ky#Vjy>d=6<lHwd99!;uzuqFm+)%
zhq*b&t8+Qkmxb+>I(x?k_|A9S#KYgxW~npFtLNr<?D-Qs_S6Xu9~)+NVH7hl%;0cD
zl)>~ds0}$r4l2naXd+as@B3p*`2Zm>N)-COeVX>1fUw2DO(ARMm4EuifUTdJGl3W1
z4EpICl)@o&MFzy%788vK^)Y4qkT5s_XI_Q5qkaHK+X5Mg%l*i%2%Szwd#ORznWYk*
zWykiM{X>J?zhfT{+&{^kw+^#y!ora8m*|4w!m)tqM<W)NYIL$HxedJqTg?wYmHMmG
zXB^}?p%H3v!04}Z`1TLq&D`Hg`Nx0nOR#5<i=4yWWX!)Z<WLdjZ_FCNN|=BB(&1(e
zA7!0Cu<W^=!A+0w!EgQ%D$#DHr*cF~y?)O+%S905$4`TxXDx>IhHISoan;NTc?xM8
z+6`z#P^tJ}5Y-Gxq_i^S)Hz4x91Piro%J2uymJTd{O**W{G*GUnV#pFm(TF^r%rSD
z>=5UkuXB2SfF!Q5=Up(C!9wZ?n_js%iu{gk@Qc`nN)!PpkQJ8UdC`n;zN(M(7P6G1
z!$lB?jE4cXPog>~xcO2j2VtSDV8@h^12C{dnL7hhuL~xzkb$PqZbIY266xYG2Er+B
z*`9Fc2djM31ADpqp1V14`vikw1r8^0W`QKlIDOc1emY{VQKgwjB+inHK|=LXYA7zv
z(F>5Zi}q+SZXH>u#6l}nTE>!m+VSuw-^Jowi+}#_9w(X{=s5&khEeCHWV~c^DZSk2
z(}3$^{wtpc*w}DJiTeZc={nzh-w!h~avL)<Y0;kZ(<FW%rC`oEKen0&zE5sSn=j|p
zXDLU0O=<pP$TClz%@f~Q2qPt|7X1C1ki|;dz<dI4ya9uUBeoBWv3+8MkKL8=u@5J-
zJ1t&+b(SX|JH@MCj9EA`LiMgelD&hZOAyx~lpLG+1z=3^`XbQ8Q+;!vf%|XFaymk}
z_@%3#=V3%pJk;TZiKGZ{#wgAY8PYLO+YQxy1~J0)DOj3;=9xB~GxLOtbL<{i<gO2<
z-2aZ4`|i7ygSU=S8L#^Yk~wH)WbGWer^eCw3SaqUAsjMf_(G)=Y(<wT*@BW!X;-bO
zoCXZ6e~p0@{s>Od)Q>k$Ye4j?jz9I|4|3+@0{`u^hq2=|R-gA@*&cl3m|r%D`7g2u
z@0v;t-++ohSA_Z3Csk}5^ZO$`AM&nSzmJ{U?_p*tE!=Wk-*AuXrk7>9m^wec8iiid
zo`QtZt!Ecj+gk8$U7?8V93%;trqT)^ilI`6N=?Y>N*03)pqUD%Ph09I48vi_<V2mj
zZyMq5pXdNB&b&6yiKElJbX0gl28f;+BfNWvD251#)uG0b885*VI3ZQYRC}&J+GA#y
zD!cS)@CVQxsSWT-yOBarSceC(P#radgFZ+!mJ$wszD4K71;$&meDk)PcRy6)?tALo
zvVSMl$zs8$KqDhPn?ss;nef06SObf&?|#FxPr&J8-iAEsK-N(oyi_p7z>oI}@Kb-K
z`g%!h67?MiQ)D`A3}@#I_BWLO^>2PVXU;70wO6MIhpK(9NbA%DWTQFi<zW8RhUMnp
z1ij9yYz1=DP2V}1OXaX2qll_37hHc+Fn{?f(%A}k?*16J9{4!3vq@LEykDWc=XWp5
zx&@}t&<jHd!t%LYH>>P!u%*hb6pB1v9>~LJ<5Tw__OPN-gZf}mNQ{)g`jP&c2vwBf
zSQ(p8CigqIIR|afINjvr)AO7-(xyEz%IE_-uy+m6sT$hzkj^-gMMs_pc~-OnORIv?
zaoF|*K}_s5`{Lp@926g9WO=j&OAD}c8kSCVs4ul?o?Yb3@ivD>EO+e+x%;+={RgX5
zCu$x~<UrHUIgl0lgQoNaP*R1YgE#Y-^Fgw;2*2@fT~V7Ud=5)_#IA;6aSn^16<SY(
zvPJ7MvR)l24h^AEs*zGv<>tK(d2ogw`|)4mXd(oacx|tWYmE6XUHGU-AgbAHD{mZl
z?zulVTi_LaduIS<{TAo-!2I3CzYwy2{QcZ^=;KUJC!nr7%inL-S$-*<bWNcd<?!ir
zqEbjsX_rM<8fzk6AHWpK!2W*i{uSrE6jq)=W`(RHbe5Db5~3L5s?QM8iqeUofnjb6
z&QBReo-quL4N>1e%x#~T;I?#;xg$-^zjB=EKS)`MLz=g5Cps`reOo{_2gzav2C`Io
zW3bY56e<gxMuaf74Ax*L&<2jrwK)9LA~R3SBPTL;ZL4tiO%Vt047vT2V+>5jeidfG
zk|UjVeur1DHxOEb3n3L@DN&jW%3>25O{LuyF9_Q4ZOe%X7#M|f$CbF^I~&>+kJW<7
z*fVe{KUe4cqnz=gEV&cX%x7aA^)%<BM-8{t$N5J;_dWc{pZGLOLE(M2=?>M^!Tgv0
zPQNk8@C}jyn95-zX0*?S^*X2h%YT-)g-Lfe?|t{5WoAKfc~+$UrEOKuFRvSxO9mar
zSHi^<yOHs`lM#ZzZ+hK|xp-1bDFP}*o37t6%;RqVgTVOifiJ{)93O;Gsrp-WK&Vyl
zq8|oo3IoP55a$f-a#U|Ouw9_tVD7nTPCmKFD`#>}4GpmSeS6roZ-|+*j<n;vo`CwX
zTPF}!1FAz14S8I@u+U`g#5_wcEi!vJp?S8&9usr-jykvRA7<BWgK%dI6An6%H5}UV
zY(p_pPU`wPK`yisrO|?=1~eN=yX`v^Sq6FTAyw`m&xKkY8Ydl3{12sCmqN$b*B?r$
zbK9*~_^wCy=io_9wwPxyp4Au?-hy!q)zoqKdxfvgKhIzItG`9KcY-{3eH7s<!2Bzw
z{c8*z$qHMP1fuF@Te&&#+;cyCO*4S&767c6QN1JpY<BUl=O(lo=I{NE%Y=A-2OoU!
zr)g&+bdnaPNKXV%)3>ekO$p+3*@q@#iVMADt{IPKOXG?XQ;YVr_Y0bFSuZdmUHmPD
z(S=CQ^(F{B#4rUpC$vS~paz43P^<YCU~Ggz1A{iBUdyTNgy0}BZsFV%&;O@se)Ex(
zh1-R1{p0r#5Yld>*f8`NM&_8EYjO0*6lV|5;!ZoN^C`Q+3Wv50a`*mWcHdlwnt{~O
zo^njh3ojhA?0eX7>p?>{qiEq#*mlrPV6h2HO=z{ely|$Mqy-dlxgRo8C%9a3&Sz4k
zr1JO(eC@wFl7@I`@)F{gbqdp~SM=Ws4bol^C<ska;Azr9(VnfPId^`@@{8a2D*xxd
z{37+;6Z8P8tg-mlfTEjS{Fhv}{SY9ZjdF9~%hxyn1lP|OR5q6I%LWT9D;7>x+xbml
zvn4Q7<AHmBgjC1qbe1rtoDS>Z;xeUNhFN-IGerSSd&)Y3FGo8;)!_1CCl4S;3e!;2
zD<*2$>n&cH6jE2EHJK~OHqP&mHia-$ob~O+RzqmaDU}LT2cSNnv<F~G0;;Wm$}6y^
z)g-CT^Te;Wm^wd3qqD%5f8k|bd-@cA_2)mv__mN!$67r7yC;}^tx5C5B75oqAHQXs
zyFWC}_T4q#8t5o)K{+=ioSITjTriwzge(F}8NB$b%C5hpG&7;q#P9S?Xf~Bj;>|m<
zf{f&HA<rSti-oVgv*Octx}QUy`C8$&n}x$qC>86WlPxq1`mchnF|qa;IT?YxD;3bw
zK<N8Kb8C6=i;f@q;DbE>>`8v>iR0A9M*QQ=+QUGy4l!s=hvBss|8;K%zBz5cOE}gm
z%Z15$K7z7VtM5`=mCjn;vG02s96rSC!Xnn#ZeT5CvU}d1y2=NpUEjZQ$M8<Pen%7W
zL7}{;O;A{0=RO;dqDp8?@u!P9eeKigFE45>)P|h%a#?wy&mROzhS12ARs$C2pjwCe
zpi&=zZF>zfRQPXy>kRXA36C|t$TKHjVR(2qFF#)8ul|w$z@Z1X^U@b)xMSch{=^U7
z&U^n@1uEXPhYKk)$CNYYlv6Xpg-*as2j(;AX!-v9Ykd7x_=C?mZobnpH>b2(zMz-o
zehk_BC3rmEbwAEa_2e=D6zWRa`&<_nVf1E@r@h*eDOR)V+f1B-b$&p}71%#0{rrk7
zs|)}Xip;t5f+C?6G7(<=s^zc$$anC<YyX~8?S!Bj6@X)di(fXQ>o4ofr1bO+-Hj6f
zh6^^zwd(WBh9(a4j$tCaott)lfcb@1*PFid?kmUSSIR_|8GZEW&WY)B#4Q%9xZJzt
zI<HMHDyWr0+paLWRQ1I{Q$D7bqx33}#ja(f_uBGe5jan+wbrM{WQr@b^@06$!+-u~
zM>uyj;km|d@%X9dc<|o8#Cz_)i}xLLWXUOBer1l<z!=Y;eT9GU^BF%jb%^i$#3*mP
zm~-}gz=;bmuU`B!!!PJGS6u474U^0-;<N?d__DJ5Hf3o6+Qs7cDZS!yDJ0YV>&ErX
z0$t?5<n<Ljq-r%`WCZFHN@H3HLO(cEYJ{qKbCA+Ez)^Ur28E-ul=B8s6maQteDVP~
z3gG-=PVLoU{??Cvf<OHae}U+xn~LD3eNthY>GN+E^RK`IxQ?b>!S(Y7HyhCKTYr#Z
zvjx9y?|xpn{oaq0=BCGn=~G`7(Myb(yZ<ig0(uF1w5aME>8AA*!K7$nA-U(esPPiy
z<u4o86Cv^OLVJa$Ld~`W1yTrH=0(;~Zo#hDRh<)vp_3}R_6GdMe>l#oFEmN)X&ycG
zb@uQ0LALFA7o&GU{cgDL&>`MG1=~Ld|M(YXc;VEq^KXCof8wTFtK?eaXqwZkcv^Fo
z78pL!qF`5;q~?BijRN7stIE0K4y+|j{4Sm6#mtZMJ9v3UyTYl?yCtL23j}>9*yWHq
zVSKM){#@>5#*1^D7p0`~@uq;ts)DA4Z-5olcxf;xl!H@z1`w8pqfUqeID9(eo<j%t
z!3V#Y|ML9P43ACrn1Y+`^RJWkug3%6hBF79Uy}xLZ7~1x#h;}a6V=-o8@r7p$uK7D
zR{bvl5weEEap81RT6}9)!ujHttHpo43p;nd>YXH7EDj-eo;IAh!g}oDTj55ed67ov
zMa$4ZR{G`@MwyKz$Ig8LhhLfFcR%wgi7fEQk>8|V*-aepWN~_d=by}Y;&8_6os7Tt
zUo-yGZ=I&ooTuqdGS_;AU;gw31}7bzB_&Uw(}2dDk}Uao{yY&}CS4tWm-|d4X&PRB
zHYbdgBq=k1a`*2=Q`P?25dWTB;rgRxU8V16HeqCsAXZ6pM^4_eW-A~-rjV+Vx$;){
z|CL6fdGF>;MxkAN?WE93ge(^hpM(z_dOz_}6X){vXZAOY`DI<q|7O~Qo9hDs=##*@
z)HGqaQRq6DUp9jI%WJM|`zezn_Yg*&0b|OccI~GG%Q86Ev$O8Y1>{orx9oM5ef2&v
zK{-lWV%#hj?`)fDu~7UicS7FxxNe$Uw8*?<cKIB=i#p4dq^%4L3sxMz@{2DL#lmxE
zf1mmEB=y=YRI3vpN^4OuIXwDEzzdHpGIjPf(zJ<4jX56Usi)8K`s=go*&Wbs`*CEK
z_S$shC4TSSN=D@27nCe17Ikqev3)<ON=w=FK6q6ctI+rU5g$w{!$M^k(oXKxmkV!(
zEOTVJBg>Vn&xtu#?c)3_6VhBra_=16&b;ezJBLnjYiH0(h3WZ(%nh@1@DQEWQfch4
zGUk_cye3w{{IUVVkvE|VXs(|cfUcAF%c>D@y$C5QMa{mgT%3?}99Si;dDl$AblH6(
zg(6L%c;W9eUB+M8BG58jEh5BnPNQ4|dW3$rAf@yVC>C+%)9bvi1y-i>uCU0<)GzSd
z^#=t{D$0x9HOsyE$L{?BzwxUtGdr`uk~_zd#ji40+f5XV5QY_8?hA-E5T1TKqp`Gv
z2Ne+70cJYKSjvy{+0V|hYp)k2(ZUnao1sGHJhmwpxXV3{Ac&ONv%<_dM;HrPs@;O$
zCAXd&K=-}$-|xCL0V#HPVR(mlXi*rk<ath(W@K4TmKDy-xfVgdQ=U^Nq|Q4CC%G3d
zZD-}e_j2Z~92$wT&~%uQkn^gv+fgyHyw)|jTG}s{I8(2V`DKmk`i8RyUn}k34Cdc>
z+TZ_3V_;$N6z7l6F*s%!8jlEUfT;D7Q~lF1D!uV#UH-G>A6ie%rkld5PwgF^rP3po
z=<?K}v=DQUXWri~cfDd(Ucdt{oGXP9i4?YCMf*(reQB!fy*1>SCob^R({E6#2D~!$
zS%Roa7>p6xK}0Ml#5F@>5oXUj(zJ~h<AGu<scW(%&+y{23%vZ&0^278I*ETjJqa(<
z7leB0J4VPe%c;XT)tY+Bu}aql&GiMa?$>VLzpo%j`IypiNolv0!R-czE6iD4_twh@
z9J#6wm<0^Tw4fR1N>T;_=l|W#ppiH_IY=#_c2me%*XDP>{5t2GFA{{&b;kS~89I6!
z7Xi&0t-j4+e%aLGH^uk18nD=Um6>xVSXi27`|b%ww~dkK&|GpPt=zYz#C6$wdNDIo
zSNS~kq9tBt28AzR`6Rjm(X(u2l^9=bNqCWhU!Yy!<oceV>^$VTV|<5YcDBQ3KJyfV
zwTP4Rk29a2WVmt=D}w|<9SWLk5J6)Jnv05RUSM5=n1C>-Gt)lINbNkI|Lh3g@tp&n
z%3sb7IR7qsn7xPCy-Tlf^i?=;UqN|x+DFsveO(3(ba}J2zot?uD5oh5PFkV?L)yu)
zfhm-fecRP^2>^I|_HyQ;m>I~W=ZIvC5JiT#W{K)v1oh0~Ja2sCEXUrMXTJ419lO9#
z<(8s5WHx~LxeA#726qPP?xLa_h=P~X=U;i}?*@Xv(237;Zt)9j({JJB=g(6etg&;~
zE=I=37#NL6TF_d`NIO1vHRUv)6m2E#J%8E1U-lAp`Ddv8y^k`HD0|Y&IP8iz&jgZE
zxkpN;8|f7jyBB$3F^*EH34;@c-~RPy$+8BCW*lF7geb0KObufzgh9Q~JM=?I%?4y?
zUWjgL;f@nvgDUOx91VSmH{O`!)Ts%^$A&n0Dqn`-3lz{}Nm6+Ag)nm#=BIMPYDlNk
zBUhEu{bjqagaQ4NcwO?9u<Ycz9PEHFFd<wx>ZsUWR%DD9&M04-&{tn@J^%z(h${h=
z0ZUYcBuhE7FwcdP)0{gu#oWv+#zm+sa=!U>M)vG0UV~w6-TpO(d)DmpuQCNI{g06A
zrVMx;hk<lOXP~Rq=U=|~FTKAqQsu(*vvg)UObou0&Jw)-$_oT>%-HB8liMd58XpFY
z=rp0z%)A?o`oSK(s6nX93@kl+tiO#VqRTFu@&a9!Jd~`nf&rvOTdedP3=BA1EZ)9X
zAjLu)-4XEQ<3~7h<aNdeCwO)G(>R+F+i?OrfVEYEuv*kB495DpgWrK24n@Tv5+MZG
zAmT#nNosNzPdz=%2fk$pPL;2%SHn<OwA|?7cRyrgICDJX;Qb-3mKPrNk1c8<#j0O6
zYf+M)N_U^Wno)V)vJ6JI8_vE_l8}n$ae^9Ka14CQ)Ea{g43%0)wQi6Anw<vcr)Ib?
zeSr(pGc+1a9~_J&2%0oH$Cz%uz|gL}gq6WHiqu!5&%fTpq27S9;4Ad(uN~%JIWns%
zm9dz{(yJ`YzQ%Zb7o!7rBCf*pxig$UdxC0hfU)syjEs&kG%<uBps@r=EAvxj-7Q_a
zg~2X&t8|!^zE>c<c7W;IF{OVPzkJR8!$-x`VD5Us(;9DGCIVUJ7~dH(Gqc2FUw@8z
zZHV&=PcoamOeGq_n!&<}C?>G6FJ@X#n#q#o7qKx0V?vCCSX-r;T%h4z=8e|}Ie7av
zM#qM@FqQXsP_C~Sx{S=Dn9y+I4ab3di*wP}(kugopPtZeb|d|*m%gB&1-nv#PDdHp
z5n{u%n@yC^19cc15JVwi91>LoXF4=mvm8BofeTX?m|K`3O%g&I5QP!dP)U+GW}0u%
z;sWvDC=)yGK}@iYfam34em1fAumAC;P=PNW^K%)Ce|aY&8i-)fFthj!Gjq>UV=of}
z_fw0vk#;(qIQ9xhk0^tKBTR1F#mLwM!;=H#nU}Uo+8KFPkVX5LfTI1<*8MMUh1a68
ztc|$rtMn@<_LzdM)FI5hqEI{lU;NB7q;3h5J5IJ9Aq)qxwnAWQ7zqh%g&?RP#$v5S
zjOPrv!dtJzBO=z{Fo-o=Xg@){dK=F@dy4nIX9zRX2V45_O@CUiz78;d!O&dDutDgR
zl(kns=miexgH+mAM3r7dk>0sX6Brt?)JF_Uvl+$;p$(~2Vk-53z-F{M4Ngx_F*AFC
z`GslPttNSv5rr{P5E91$t@J!oi-+l$MNC{Jo)~AmelKPv^1p17-pfW?eH+Pm<wi3G
z@p~ZMiTlgt_M27RT4haX<>D0gRpl##H5e2+?b94>o+MrxVlddpU}YcGXqcqc=8ZRA
zK#m%QhQ=5l+s???B%|Bvo}{wqVS;l#3V;gB1t;}V%}MREAuD<a#p3VB4}B8k<#0<^
zjaV6(40-0s*Ew_M2!quDPRxD=XFJ4p1Z!$oTf^FzFsNg#ml`jFOP&=0fIhB+3L+sQ
zmeAH{re|o$5l)||bMCf9s`WuSv-vVAv=)WQk~XXAyDhDzVd`|wwtXR;R>7j|=S66*
zBr5cV`nA8<S}gvu*5Y!o6{wF^$eM;qT}ZPwi=A_voI39p{n8v+k`UPnp*2*3h}<mE
z=p1Icb-}wHMG?`qQO2qVih$QwhY?vr%wrvr&!#Z{ddgTgq&1jXvv?wxqw6ml(fwb`
zaM9l%Rw_glaCwK>=F`k9JwrveF%aECE!ssG4%1p%<c+y0%+Y|s!BKYZ+R4E17{h~g
z#6i2|J^j+e*9Ner=qB{1w%v`t#}bfUAm}|#yFs8F9O~j>rwnfoIe%e}7oK~Lf$AW$
zt(Te0Um=c%5ffl-jlk3~rh>IK3I&4hV3E2KyE{LQi~s>ftcL<N!Z^cJ`$;O*TX^NA
zV?6M{-7L)YF!?f4Pv7}>MGAlFSjzVO7Y|nTS4ayWpwibpDfATkW&^?y;+hb~N?0+Z
zZkFR`PmsEK<`<^uB#T%H34<yjg0(5F^cb_v3xwiGY=_G5ID@slgwfElYpW;tDm}NL
zH5T&K!~CqHGQ^E)45G_gKGz!aUrISx`+j2sDuV+sDCF537n)zjEm;PZZlxMc5{Kgi
zGD2fvmX~JFU~I_H&?J-Fwlg|0&d6|`tmEmkX(#LQ-;L?JAPP`h28V9TQTo6`*+wkX
zce~RsDAhrO4Ktqj`cohYS)OpZ@p)`m1+f@YAuu(+_)P^HRM9RL?=R-LqNV2wyF!bo
z#Yp6{fM9^7_EB2#an78sF}E;Jr9Mo$;C&K&8=zOLa_S17KSvP2%vmK%a>UyHsz-O+
zvKJWp26T$d$wm;yf(?9oG*6VN^Nu*MoIU><uOEGe!GStf46!kE^7AyB=V@o>QI?3p
zn2#QK7a?u_`?<5!M{emWx|Wbfix%-lj5@gvnEz5|Ai2?uLDpCDxmuWih0#rsb;O;Q
ze*iX!s11+9Ff5#Y4NYcQNSYWOW~j1{db}Gk6&4q!n3*|66jm4>o?v`(8^dGcjEvRM
z+}8}!R*uWG``JrBqtvimaI_CbmNew@F~-8+h~=rrpJ#gR6a&>7$LD?zXEGu)gfTJJ
zR57Mn1c0IdSUyR)%N8AgQuvfE>oG21K!A}DvBFH}Nvh^%UVZr}@3{Y78jFRU7#E2q
z_R)K70L=wqVK$>S5|VWCzGlBJs~h;h3t?3VqC%lPh4!M-nuE@w(rGJc>X_UHp$#x5
zr;)xuvvY!6Gn{dRHlkh`W2my1x~+5XuDvKz{NA}44^|4__invr(?*?Fg8A8W#(RSn
z0c8VTeVg6+*O6<I^%PxJ`x`yYJP8wS8TugBPV)Nf7dYE`3~4?}J(y%Lx`ldWFPMP2
zxpPcSpC+&&LqlUsY}>)e#5jZ71`wdV1W7Z)Wu@v*p$Q;;N+U{9>6dN?!B4U|#wJ6K
zA3wvZuRKSsT4$#5B8&O!gwY5h#_#y1j<o|=Q^D8>D^ZWOY;BK-Bic>ZJ;X2=2|>JZ
zDHy_Fkj3N(o%keYPX*kxf0oL?D2sDhw^v=Z@0Kkcapb8mcP?Xi656eT7*xzX7>hSF
zjl2PgQ%G7$V;b7?N~h%~4a<zlTF-<C0+?w%#p&i}7_5&XfguhiiEWL@S|Srs4+j_s
z0wxDi!qJey=W1x*6zbJ7?buw}FYBcJvO@Uq{DvFM9CWqx=1Thfo5%bcj__Too}U~v
zMi`85rXKB~l`qgrPO{K=6w~+`^<a|W_%^EX4iH$FKgaaUNkUs?Xn357ZQB_h8>c>5
z$6!cXkazN4W4+v&Ou6_KF@D}Z&y~^bmQLQ{=_j5hh#W~e%enTK2*P^txQM`32?F2y
zHzptms)#K<Uhz7Heo#kyJD1Y!0+be@J_`s7Eq=p=_G9d<Z0E%nUgd#zKZsfI14`W@
zX7RitraL=e#4taVA?kxcP=&BkI1?ebL}|<^t$FA)l`JXRh_*=2E#0g_3iah61VcbQ
z-p*ik(nARx)))d?p&HZ}h-*xkhy%BeGFM5EJiCa$u@R$AuHxd~9Ojq)fg|Mxw+DZd
zG5?CyR#_>uD1oV9O^6YT)11&$2rBz=m77SiSz74@78+m1G#mrr4hExrRHNM(8x%0%
zG{(jZ42&?jZ3mM(CK%W@fT$tuK+??7OpA11yH)W#S8lq~5C(?-{$C%bm7Jp%4RUPe
zcTk&QOwI4!rh>I~pZ-gXhz|%xg5r#sF1^_=R>2rsggVn*^hQFAiBWRY<wU_SOP!;%
z+!4}q31?29VAqblOr6e(>b~?;jB+iAK883BnLcBXFlTte(r&4j3!7Kk3+jbS9KE)u
zfY@U2s#`14?$~u#uvJ3>6Zzt$1O#FUZA2xgQj4k#gfTm!fSbQ*h{Y501UQlnn{vEa
zn18KxaYMBMbzNtmjnjLt7Uo~6t8fv4s3;HyL7l)>z2pp*j0Dk)$PN;iLGoxXnVYAP
zooBxJHG+nr7ECf2AEXxVz*tM8G0p5NCpr9j%;3N<W0O0W+_s&;(LtghAW!_*Zx}l&
zb>+almf<1z5C8aC&Q8Bdy;9@C(xWW86U3Df&wR60tW+^l!Ab>Vs=gK=u~#lO0V=*w
z*Ilhe5fCxm{(rgn4INZNkeJ*EHVBz&J<87dck|M7&oDSR%E0&l3o}{KtrP-d2x3DJ
z`c7?<G&wtUl<5n5(AE&M=ToxM*rPNdF&C8v`t=nqX^DHoQX>I@9q@%tF$5A21u>N%
zrW(WyRVv)QJ7i$OlE0B-CA>n+FB{PCyK>CGZ0ElrnSg*%gW@)=<a6yY|5{`X|6O2W
z;;2p(4q&8%W?uYL#NaeRT^j*HJ4j>)aX7NPK_i`FuJHxJrePr5!9aMBTDS`_5$#r!
zV@F=$_>tEbs1GqTJkIFE1jA!P42=YA-zyw{ZHdqQ#`Bz?d4)<`W3hFd^UX(zs$<2d
za#R%jY6NBf-&6`RP>}%`)5ZEqA<tC|;|RU6Xd}K0V2DtYqU4Cn34>ue`4mgZs|<vP
z_{KNBz+Lyem$AuljP)d)BuVMC=QwxaG*dIjSzMSUtfe&Ochj79-bOuGIjxnxvdc>J
z_%cJV2BNS^U<dtsLx@aB#a4)I$Y2<A>v)CT!va}G-fs70bXUu?<Jw^UOS4tE(d@ym
zM#1kIV18MDC`l>JFvEgiQ!NH(mPlO-QSZ%dG{tF(YK9>tv~>bgMcGBJZ5r7O^R2HF
zv@Ed<G8FHl7VjkthRM=|Q>WhG<mn@XVOaPO1~i*Zh|Uv*LaTFzvyDdxD#HaFF}>YB
zs9|i~7XeL7V0sL|@&XeBd8Xu9kEzrn<OCQA3MddGq=@7g$x$Q3@fcIBuMpS@m2@{x
zJ^6V?M|M)J$26NuG@1*vI!okPgTNYcmti&O32O8we@1$QBGv8!?`H#-1SRcyD0t6>
z&;~?7jmTCpKx`taL50a$h5e&3+v|obOOZy0tev9;1X>&OuMH`$Ip)7k#lAPc2)ImT
z`z?a`H&75X1YH9?&#1G$!X8vfvNl=PAa!kW*THE9WH?Q6bZ{=kX+|KHARa);$?_#S
z`5b53Pb00zh-HYucrW!}4}lr;qrWa8annQ<MO>Yw*0Y>%J&vsmVQf&O>`|BO6PUWs
z089mADj4e*zd!6n!liw~$z7d;00=Pz7(yJ84*;f=C|80?owLm^GFf>am2f9hQ?H>@
z-ni2Q0muR>^E8qL7CJ|XrA?mw7)Fe*DRgUFJ<6Y$o-BGvl#)XISBv7GS6tV^2O#iF
zzaSzYU^uR_eW1o<JzyX%MN|SvENM%~jJYz*FV_L{ud6<M!wdsmFU&6+#{9B|S3&={
zYY-UErMI?V)_JM#Y7paGoy@gKvL<QTCU<Q_I~XFI_^iNbhLVChPt`S52qAZE(tLpn
z$tzswJV&4bu^A$^qktuKb2PIvB(#aEJG$FxiPr;LC9ppAH@1Q?5!UzuAf@aXCDqpp
zca&OuJz~G<`&twOiBNJ+7?K>p5!fM2HReL+4+xSPRl6M{F}b$M+VdoC#`A-0h*}}4
zOrUB(T(1DBE2v}j=_pDu1m!Kt6mr1?f>`hQ=Q1U-F+-IhhQcbtm6(CR6Of!5972wP
zG@#wg$)w+LcYX1hjf|;p9`myf=I0MF58$!}d)CAJ>qPi<Fn=!>Ey*~ACARg#8KM>u
zN0vd7=71xNs?@_OS(K8dZPL6+-pvY9oXdO=kQ76Pb1AARR$@#zMkN~a<GI=)aZ5C_
zlQ>NPhl#3G?IeZ4x6eRKP^ABL0y98h>P29Q2yBcEB5!ftH#<>g0jj0Ge(8Q(Qegwc
z1b*?W?*f4HY8nViidcv%ljN>J!=36f0F4-ISSPTN_gzd9qHvJ77SL>JZv?|#^f754
zOVs%MKMaL-%TSGksFIVVUdJ)8Pz`E~4@@v#s}mPSpuQbwP=w40X|9k4bUNOb(Oz@R
zzuwNj5zN1AaC{Xbowq#?fXfo|SVLQA^L}R=?6k<mU4bG;HDVBBNHQ4TUg6d|N13|N
z;Mf~;EY2rb8&HXdh_p_YC1iPv%(ck!gxq!f!Xm|q4*;qu4*xSG!)ioe1|ZD4^#n&&
zSd^C>fxxr%Ok9lp*0EB<N=#s?1VI&JJ*Bs7qxCO1?{VmmemY*k1~dfThs@=E;deU+
z#ycK4-=+-gAYw~Zpd8hFnXIdr2pdEML1EyBE4|OUxZaBQ0W2((5mjsmE*1XZ4}P8D
z;ceV?$2YTQZ$ud6WG*M`1PoN`1#h8W)!hfPG>29OSu>#31YHpVT)w&Is<oyKj`Yep
zFGX(LVIb)<2)mY;Up64oycYJ8O9w!^nsz>oG==iV{SRzo&n+YD&nCJ5-EEE>p5@gS
zXE}eify*6HTp^4q<Zh7MrKDMdENkOjO0Ee=p~_PR0!=(cmmH^AvCy-^BSwn=VEx~h
zs3`W;u%?C~#)yXi##RbKPan;<FfnlsFLENTPk*3S3lJ=VF9sT;zH3vu>U1x3OOZbm
zK?0<JMZJ!KBMd4%lLP5ZGa3t;TT~3SK}WNZqZ!!15d<+``pV~d;kExCm1vaXC!Xi_
zgYV<e!CP6HKgaBBgE$EKv=z0eYY4gXLZC?w*@CdJ&><5DmhGpP!|+>Yq*ty$#Ad_f
zv>Sp4uu3d_Q!ziQerVqC!(Y&@u(L5mS{+3~6vZ?eIce$$!iZaM-^sz-COLOzfmdFd
z=H#&komNg5hE&3sFsPE}33;B7W^Hm3oJ)$upZf2~Q8J9CJ{U-!o^YudV62z$D!Bha
zQS`GW_O$?s3huw@3Y7Gl-6<D)w3P0<K{@1Gh?^*49Fmu#vKC`3XxhyT{O+&Iio3>I
za1I+(yBSDfl!OFIAQ4YI`4~%$^StYw-^So@g}9m!MKO<k^+le2@pl-i@4-mG{Nhm_
zfBFQky?hfR^)V)fws&pXd&AUT+c<R|0wfNSBqHgAsF*9n{IWSrf0>wHR<4xaU_5{>
zy4mc`e|<2&toXX5J36ZUz6R3s60k)o+-i7s+|He2?A|lN!a|$Fhi5tb@(i<62_imd
z1cBG-%QYj{ggk4Lxel(V7kJBy9K{vi_Z%*za3?Whu{QEOf2kCOz$(_%ip;_EwfcIP
zvtM$%bT_6bo}sn~G+|ea)URF;H8{yp=Q9K(FIsj*kSeS8c-WyP$4G@NQ}2c(-lAJv
z#ADxhf^R(i3*>o&^XFgVw*4RGw%c!GX8IUkf9%((L^T455D}_j1uKS1SY@y_USvqU
znFd!_kmpXwr0`3yhQ$TL!lJ`;$Iw^mt*?*y*K!BmIOb;^%)i<-f5S}!vW}R?<$IW4
z70iE$|3g=kr<(@%zvgn5y_^$p1%J2G_WbioT;cxvcXQ`mlN>uT$Kh9JIeWT6nmD4!
z5(NRyRnVZ0(~R6D<awLi_4ou@1OobuH2fe@fHhH32Z#x5jUX68Y}6IDkY&KX=ThWc
zpXR0%YQq%z1%&=_rU-b>yB@1rL^IR`{&h*#Cv_I|<_8cm*Tm4oiltH$8VgEL0jnWj
z`_k8W^x6MJXk#i-otgO~Jo?PP<+V3%qnXSCo_=fyup<6B!a5^^I}x#d(Tf($M!H@K
zDuqK(Zb);>Qp2*)NH;c6Bb%+lZx-{L4Nl3vImRH@xdtFtX{7hsVg8k#$1g-bM(cOi
zf=1&EB91i4h~fxqAj=8|o7~Y@@>TnThqiI()^VmTG<fZ`+5dlgUm7FVm7VvUd+)2Y
z7j`$vCMi;+7D^mSn#CGB_Q;;rShEC)kvIW*62S1EAQ?M={li9p*gpb_F^t53^CJlC
z1Rlo@5Ccibv4c$F#M>-A8haK>9?wXm))7f9T)NrpwYsb7y?al7-22|UulDM_d+G`r
zkzG^ORj=MX_k8Dk=lgK;?PaVkN03q=2m(kbNRtPvAuwxb6FGQLhc=N70!RyJf)u1s
zHVcpiC^c+_JV-i-Kv|-FeBTO@)Dz$-=*IN|`$Ls9=Y@#p5;VXOz#*6wKmt<cY|TOB
zov8{e#4!d^hFD#xqFy6RKA<rB9`NEfzk%;w`ya>$<zz~+SQrABuv(o%po+-JVf)#j
zpoBtR6);?yfE3D=EF7B=R*cnpC|IjBK>`sGLak5@3#e-eBcc}H{Z3>4e#vVNt}-1^
zO~5^b`KiS)P`e5Sah&SLZ6`oV;P&k$eD8ZVFg`wv)2AkIWO5k!oI)5Hm$EX}*CPPH
z=%FF}*fS&e$VaQVd1DE0y}pFIx2j+R<nq!=k+Xyld4Njp<Tqd#7*4D0BqW4XmJB3w
zPSjJTvR0naN#cAY2tpXgGK}TGB?!`K0|;NI)X{LsP5FfotN<!m)}Z@+@Pi>UBuNMz
zfT)N{Wd&dTv#;Qx;~&E7Z+s80UjI|%f>B7yxmt#Ta5D&&i723?)iB7ZJOWulAoH$s
zK(4LnD*lw>e*=bgW+{;oh>XO_T7cEMP7GhTp$NFQFh5$Dg5Utkf^P`(ci{na=qPL)
z^Ec)O1Z`Zgi%iDhRw`hvTE*I02$&Vj&n;tkG>;PxOyKyjF%*k=7-OKdRo)5f8uhw?
zlmQ-pd=ihJo51YsD&BZ)0oUJLLloIrd86H+j<dhc7E$fbY=P1-6NMG^jMYQf-~34R
z4NNTShtyfuw$cQMO%m8rDg?Q}QgVSHbzF?Q0x?yW9oa_8JR+@;Q^R=W>I`1F`egt>
zDSz0tQf&Ys5_bLo3Q7b}s)Rt5pj>bfo{$Mcz_2Y<S_=i|mPF1mi3PMFgdo(kK&4(p
zB?_$<T9V;x7v^uVrF*Vbp(!h-gE|Zp%R%*r$*Dgcz$P$%`?)~@qjjod?>X4$2snOx
z47cwrVd;JaQpH{MTU$-A4#9$Zad&rjx8hc$#i2kUP>K{ua4Rk?6qh2!9SStK2Djqw
z*20H}aJkR@Bkp<5?`QYy&O0;j&b~uzYWCCrY&ozEc|%JhEf;0P&L$uug$9_C(&B04
zu4Ie>k?b(v-8C}br8v80-d~w_LcQ@66FW`6Ee>kMCDnlW4e6EpfBEt%QFNRRP)OV5
z5T0+<qpYPDFrYZ0IyGFO@PX=Uk2QBcX$6zBaj!C}_Q-7zUiN@8@k)%SfWxCnUjSO|
zS?DR@>5}RVN@-cIkB1J^Q}7BR@l2MF2tiDiAcxRo(uHCgC3l5(8>kKBc);tuwNYp*
z_SLQJz$(su8C@Oq0I3*Md0D5hS&;!%=Bi%Z^I(Fh#u^qq@JL1&!Xe^+ksIj$+=c%7
zHSW$X>Q1JFP<)PYOjDF6zgeYgRV_+iu_|KMIdSKbzB8O-4!`zG6y>W?s_$&`kgeSR
z(t~wr2CcLw1lS`7jKi8x=%vpAGRmZ`e>L2sbh4`3V>p%{A_Z(XKpH25r^a8>d8AO%
zI$2Fc&1<pl0!B1@GIAI=&38y?p>~PR*r)Q#998q~(#f3#ZK9>LD<SvU4x@;Gr9%P$
zfsMEzwCr|lfjTj_t}LC{D*DInL+XrxfW>C0y}D=6N1EFU{+$Qut4vrc_QKb@Phek4
z@5YxaL42G2v0g8nGDSLeK|&~DOGaA*O`!~r*X|p-i`6&k@8X(V_-CjyH_1;qT=3Y!
zWp}4_IPox8Qc?~uvPD`wUn}2TI*|Hd{F#p2v8A);oh3FR)deys=of*QPg)!`h-XNs
zQj~s#jx{=ho0grPJM2=ri7Ww4ut^E?k7uj-%?$6~h;MzzI9_I1Pku>Wnou)gXFEYt
z#-Y;FG!@#6HDh;9laq>#H`c9K{C=}(`CkLRwrIsgI1VLK(9#YN1iwdfo99}G`Ovq5
zd2QY26^IKPEc&RytAo`mxBs>X<l^l(J(+S(<0WRpXj7sa*GgNftVY`o->e9X9wNjS
z@a*^$WH2{dy!t%ZnhT1WlKXsx_QWJa+9JBS@b-?9yPO>K9GOyFc?QKC*RP%Ag_%?8
z1NDLcD4B0e{%k!<;7nn}tbVdhEb&Ic?^;|gFmNXL^+YY*R2~VON1?-D@{cU~n$)y1
zJjaGKL>(zxdGGATnmJ+JAdMBNSbkFBBx^_w{(<)D6?a>}nJf(z@8&LQw4jV(6K_or
z(ZNJsZ`Q23=i?2rN0%QxH@68#VO?Ea;!?Y+%;m7)T;Fh(#qtJCw(p;8a?0n<*V+U{
z1Hs>fc4Jc3tmbU`Xrn<N%RX$IFf<_1D7A%MIX({XDBPq!R}U5_YzA+*Y!UyyXMGfY
zJ{Q!@&2sN-Sjmsg$zyaJ%(jp9>Y0F~k{uK2i~Fc&50=JDbx2te`FP?g1^!6G|2c;_
zMOmJ*)|3&9<Q+sL{NxKGR9iq9rm(l%t+}Ws^@Q4zdHa2<>uieiTklG;Pb-#q+C&>9
zAXqW5OX&+|PuiRt@#5jD-d^(~ud5rTpyy`WsUQBJH42Jk+b5&kdpjz%<Y^kXLBQdw
z*9dm|E_Epq6fj})1aEt1Xc_Y*F1AH}i4WNJ??sjuomFn+pZ#f8sZsa>$>YApy8@w8
zXw6(9h-S7KJ)V(*SwHDCCPPbvsD<R}w(smB;$AwyhL#1~-4%W>t>zz>Aj`t^wpCU5
zX4M4?#JqVp&6pl_338*l&v`*=q4NnoyAK~gWx6_>hr0s66lGE&{DefC4<FE^W|9q=
zW(@4mzLPE`u$~gi9Bf4??6afh{C5)k%&SEcnx?>LNHSTf&6mtMNR-S<B-(!D(D)_Z
z1W?@bSD24$Fs|RrHZ9olYa9GKmTXi)wsBp7YFknHzOjyZw+G}*2rv$`btq_7;}iCK
zO}&a(Nw}|Q^qo+o!CdFggxOCnlC^7K&lQv5*huUbN}f_ul73N@x!Q5|+8LBx?P`p#
zqf!F(_9D3U555}EO>FH}FiUvZ;SLl4?0K5Su&XCRo>d#Yl!d)~HcGOyvf*l+SYb!D
zuiYP}>Xi+0cw*R2C$eD9Zdfns;~g%N)Um_n!J=#1Dp_grqNcj7Sz98`gyypaDrzAV
z0uD4C8<)V-5xtn489~7widYK=!ulKI6tTE_m$cdPCp!rA<V!dyz#mgk-ktEOud--}
zmu0M@)|7m$;^Hq%aBBHg?s1_aqgi*_0eycTLG8|yC652WzHC+XLSc!D4{tAZ?fPKC
ziMNDr5NVk%-QZu1rDkmAi{bIO-Ue{yQQ3{xb^da$tN8=i&WAtcC(3}O<k5ZhLaR(5
z@ikHr`$h|ZHz!(~wrOM;^d^}qq?8teU2K!>u1XHz>=_y^>7kUmgpYpYU^<FUWm>N4
z6G6lF3x#?J@dpS`;>(1Yk#7f61JqC=#_1alKw80e$aM+`FBDVMkK35grrDRA?PteV
zYUViHg-Rl|C85J6u^1*i){hd8f3b3;BtxZJ$-Pb%fUn58Zc5^C*W2ZiZr9Db`%@TY
z{67Mt+0_(!FR|>ZKBN{=IZqs@tj?aH+jIOQM~gVY=%327Y~x)yU<qYaexu2(FLO)L
zL2BN#GxZC`_*USxG|5t!t;OjTDq4qO7&+RieJ|_7LJR!WQ%v>_Y!404kHN->m0~77
zY|CpE>a^xr{^H*+NTmXX5IRY-6M#@!5I`F+il_Pm?*r1k2XXk*vfLP@(up#qLMb&&
z4bOslwY@nanvPPDLh?w*rB$=~l@fMj^u+6JcvfF#M{C536zb0UDK@S!n(+QPkNx>M
z@o1l_%;$4b{Dg0X362|r;s?4eIs#-@CGdn)(>~!NHpiE|Joy)z_cG|i0R3*s*W`?{
zxQ#CdHs|ZYqLh^^xfpCo3u%HtjTzihhX#t*_!p0J4&oCuP$eA<c&{W4^E9gQ&-lHJ
zTib{wM!243*nKuLt?&ESP<5dYU74e^LBw2_@bs1%p;Gs-kFl#?iV>@d0j*-U|JgB3
z&AVLHLJoZ%uD~#1hLWx{w`)S%VF?+*M0&`BZP2N`v)BF>7KpVVi}6SA%#&#6&Hm%a
z{<Y}Cuzb6QgTFt-7vO>a3d^g^mN_;5*P{|$|M;n*Zlug?nU@ewk9o1TI)_%c;-&Yk
zyw{0H6y6}-UxBhJSlg@3X&#~4i<Q)sgOy2JyD{P2<S}j@GxBOf!Ks+yfMJk}x*&9H
z92Ty9>OfLQvR~%wE^!%cF=hHElqzrbj<pq0B>e2+VKR8D>%oz<GG<2T$(I!rE_gS_
zzt*3Rs5SF?dc0K#GvMLW;Iv}3dJ_s4P^oqj5Hape)63}*p3E88Ibbv3FdxdhBTU-6
zOxTCF?=5aM^wWB@KCVrr((_QTJn6Y~8m;Kn8YOrn$~z;lk>^(g;M(u`p19iw_mf}{
zS55?pnVFY}weB5|>E7p`j6x0(Md?fL({+S}@C*O^8vr-+U>yFo(&~>z*YlHPB--MW
zvc>$*^83GxuF4ngSBO_{zlG0Z{1+7(;BoCPz7HPLFM0jkB@qPjzJL;>oydnOeAS<I
zvk?HIziha;l~!&Fd8_W?1Gc}1OUxYKyg_|!!_Jt_MZ*kLZX6kX#RU2N%t<r@U4h)g
z2iUJ}JFIIH*wNMGc(aJt@tR{CM?TSimiG+H>(?cjazn+|8gkuQyiFy^o7T|T+wI?E
zW3|ke9d<EHX+dA&A2wu5Vss|nK25c?JFsO}8h!Uqz=QK65bLzd@fbxnk3M`Z-ttRr
z0b*0-1l8WClvcLs;iYWUGN@3F*?z+rP(5@J(1Z8`*e}Zyly6Rna}~lQ!v6W%-w#<i
z<%23_N<K+}_anqg;Z2V9kT}ej#2V3O_O}|m+J9+?ejld9r>{xHYgJ!Gr#4mCpVIeI
z{lTTwq2r<_tfgz<)RG6$g-Cm2I}4#)VnjBmbWzx+#m_pnHmfdoJL{oj#9Delw4YSD
zPQGr@-kHb9i)KY~A`k46QipR!N$Yp0`)~H5I3<sKFr;GA8Ozbxl61H0%cB0>jAxf`
zieV4LzH*<f7CU=^IK4UR>f`Qz04Y1j^0pilDltZ{M@c0gx0Jo1R45c%IAcCn0c0%6
zU2{fFRnWyU=JG*YXIQp9jPmH_(hb-r(GL70=}T5(!fke^|J6zyl|nN9sS9FH+>lV+
zJ*58IQ;}h9H&r6{@ivUoh<QkE|9mJggM<YCBWx&fEr7Y#!D@>yfgj@t7Z8{baLLg_
zqsR2|CwsE&ki>n~GnJqop(b}y*X{Qfsvol`P1rl<X~`;*5^?{ON!l*=96JMc(9_ik
zLN(Y>-v(ApZscNygnz(Q%0238qIHp%B7H3HP;I}3QcB+d)?wGsf1XHs<)4CcMWPxh
z-oEeZb2C(aGuXuUWP{;54=Z0XW#r=3Cv`XB;r1LEKougwC@GgZYE+F8-GiD?a=@fE
zf9{RW%xS;Z(Bp?)qAbLy>~;&ISE)k??tPRnr~ExBEaG$rom74RJc1xJ2fx1=P~jK>
zzWyMZH;1zgSN50pJJS(67X_k;0LQ!M7p;dLmWiDzt%vG&=zSLTJi5ypH{^n0F3`tB
z;1-|*^@10^aq+(N$-73se|T5I1OB!*d<RP3zKT_q%?kRu5W6`3Q<#MT?c?V!X3iH?
zo9AcP@94U|2oof17tZdy7!i<h99tyK=+_=x!=p%H&eL+BN?J?nVs*PT4)c3wT+mDB
zZ{tJ>VXVz3PSeMP+H&nRBaogZioh$45v#|xYmFRAS1lZBym)!1I>A_KqXr_$r+6C6
zD8&$okm-o|2OigEGLGGP{d)}TViNuKtxxZ4zr;(efFT9)@C}zMdSk_8mEy!(z`nW}
zd;^=Se{%erx`N@>LoUBfgG^*fA%X2U592l$&>RB?#rAc8MQQ{o8e_<)E8fP_#M{mQ
zAG#sk_|3xTA<ykUgmD8j#sK(wWs${va?uuBoTbaZalO2axA6F45!p%qzn{q<3obr+
zJHNsf=^RFX`PQ3}swfxy)zsSL$<0I<7P?&#d9|=@ar213nhr*yc+EUV+Y(aN2?{uk
zQ&y`C8(@9m-cTG^?H;k0&w8cPY6Z7vMs<4$T%=+MLn_E=VYx#HT8`d1Iqng%QHh{q
z+tutxsjp78+jIS8iaiph*Fq7DgqN}YtVF9v6NE|(-&((}U34{u`E8gF3~S&M<j@S<
zr2y9<Ze&s-$&x7*6$XQ&D=SUsXyOqOU6|Xrj`K56$&qcHD)1jWV2Isn?y2Xf67Z7i
z(T2Ta98XgIGkRCs#IR-=Gt%@Fj_T}&fpv3h5_8(TNYnGa^6LkQ2C-9~!Z)^F_pDXN
z;$D}9`5GJ(!QRi}ESv40;Tz{u+q7|Lt}mLgA93fHT~qUy`QRHB$14Q;7dhXtI0d~<
zZL6wZET9)U^ya*ef>$1omvy1oQNu9#CkW&&jADz$?KQ2-3B*$RLA*Whc4fncrWnFd
z7pV$G=BGU-2*;^vhQs?GGlbdQv=$qG2YR*Q!DCNFK6A>jtK?v4^zb^7*&MayES)nI
z5|&+Krv1Pj3_y)2$xB}Sm#$0G`)5&%t;y+UY2F<RHbzOx)OBE6t1q5$jOQ_&ok67z
z1->!fWZz*Ce0E-4Qc0pobP4f574lSE?YzJE)*Y0=q0p<pB(Oh}Xa_m|o<cav94!dB
zB;pw}^V(UzunoR;Ocz8`l#H0hE-H7ed>jlh@2iWlMRh+N<|1My2i$jtq;sl%BY7ty
zZaWcSu_O4OP<8X5n+DKO?B+lFoGH&RXBOo)7e2-(>7km)qizC93W_oDzj@l8srIo=
zWw&4}OPj#pOy&1)RY|LhUhx&Y;wz%#WfpSVEXOCJ%4|mG;SI*Ta@$Zj`b&|R3&Bt-
z=RLeCmX<F8!}Wq~AsCd5-VA@|vo4VT&7fDt4n9%>1z07`VVU%6Sr)Wxn2%ETD>leP
zaebQF$nHXB0wx*bAp}CaUf}jE4eb-!=s;TeN3!ep=vups4k%%3D%nPtWc{0O1kEJ)
z;`x6n=8@Bh&&7@8?WQMJNj#ntWAT0S&Ta~xOgQc33Ea@xbqohKZrtsZ;3(ps|B=a;
z{hnlUY<p=Po*M!RB!ljhEEdl(Potv>p*fOjP*Ze;Wi0#5)rVXb?z}`!=$zi`744{{
zw1<2<&64nosG_XZ!Hsv($?o`o#ckl_Ey_O<P1sLoxZX<K{R$rHbxwx<FIvh7hGBce
zAM?4&$~K?pq!i2C?&*}IVtt7?(XKEJGe(o85t|`&F_gBRjLaKXJvA*dsBi_WGMvOw
z_wWr5^HTr1D4SVC)52!X(nZC2!D1jg?09n|R2=`xKQ~}s<U_p~g@|r@YkL8fSqv_3
zsd$R8CY~bhE(fLy(6cM7`LEPM@hyY)XI#C!-rc{^Y39#Oi!jT~{1&vUvP1<>BrYNt
z&?Xj~<@q@uBc!6@N<<iyaHO@mMJDq-)DC%bIWta$ao;PDnB!05mZ91i_?#rr^Z;Os
zg3>VgQMfr_EgKgaV`=TX>*Y0z&VN$o>zzF*OE*b#oOMd^Q&Zy(tXbhvz?fUFDLj(Q
ziI;0+J}w(j^vDE?R76=L=w$Z_Soj5VKJiywoA0hBDupl$P=lD0)lo`LVvbwuh=b`1
zXE+k*26hkCQ^pcRI0$+gU03ko8}FCvWnExkr#>5BEnP6`OWK<9l#K$1TQySBWiMvo
zX@Hg?@D2AXdmM4-!CZ|oo$_aY8gA{zwsub}=3|4`@j<vu6iNd;#if-XV=Tk{+_TL3
zFxvDy*AJb){d+NsKB0;nU6p;Z)l!S3RC1#7%gXY0okH0!Vcj&_ljK_~dkdI&#VU+e
z)W)Xh#jYd`?rFof<DDYI1hoNrFs>hHxV9?GZBY~}Vp4XT4Y+70mH2Mkg}%pR_ae?{
z0;hVKiu1>l^2DKGoo~VwYEiqVi@iIO7`q)?5+(LKl#Z!T+GQi}r{(uA)U~+yJ`yC*
z3``BPn0{R!8oz&zQ*I})`S4#f(FpNE9~r|>hO#IIlW9jFn`DX(JlQ#ASXBr&LL(Bn
zRJm*v1*B;`0i>e2|Dg<i_|f%x2!?VoB>#nTl&zXxq#Ri0$?}6{WpXPnpKkz@8Z^pS
zAOpmB-4^Ehgt0JATb`=qvW><THKB|>IX_e^ReFT<$nyQ~%Y8*s;1@+grR)G+yQjAR
z2`D5$9up8KKj*r?#vtIWa?IlGAY(QnCkl9p6lGJn%FSMxa_hCzHKe|3pBO&W{0p*o
z`S+Fw{;uy0QZpVOik8Av^a?Y~=8qC8<6Bb(l5qSmcXn)I&Fi(g*^w`g&!@Rp>82Ox
z=HTwO|D2k!b_n~-P4sv2#{ODGAfy0+EjxMNU0!6?nCNU)HER_?`XxeWIGJ@XlW^x*
zs8!x2)3PV9`S_m;hso&a{avv5iu+lzfiwG?I+INK#{e~bh9;~7SDN2A0CIji7-ope
z=f|6is$AK}FZ|1Zg7#wgBEB7R;@3s405lpNVj+8OGNHLS^~WXCAUtD$`ptJJdhtDh
zy~ClhKtss&1Mx9SvXLW)Nt3(xo7;C|U&!h5Lp}&FY;Z3g9kFu8gy^FY{b~OUE|K56
z?Km(Ls&=-D++ay^j0=HleodV~x;bajDS00TVUPh06uPm)D6b#h@)&P~r1+#q5$p^P
z&vKCBH|x{3<X1wAClYLsx@x&AN%xH&#{EkBg*tcJ+Wb#l%`R4{-xLF^NkX@k7=)c-
z4$HE-fIj(Zxm}Cb6$gti{?A97=^+rjYcdf@C?NvDaDv-7Zn3?(fQ2cyvkO=u84BXc
zqqsrE*kLvlT3=INv@(Jky*Y^;#JQvoR{KX~92YBSlIf$UrT60}ZK@jcXTo*ZI7%*M
zs7|kl?0*BP7k}gQ!~iHbxERz`HHwK$$?M+);#imxrmG3~-Wia7QSa<NmI6@{8)1@_
z{YH}s^!mBX7jFJ3Jsa%ZDwqO5n*?;9&Jp##NIH;sIt_9uQriFac<m6wuu@rWXkAMC
z!cqkLG6iHLolm1>$UuG*zJy|B1q3ctJnQ{4Pn8rSxqW~CMgz>%s(;5No4#e>P#9*2
zB(Kq$v{1rP0NQND!*RpoQR-Fn9Z1JQV*dzBU*D2S7p3Y=OivK=>OLo&JgszgQ)mx~
z(uDQs8>_sF5BUV5<+E)@V*K3a3p1qbODof-ll$uB*HX)CRaQLY2IDTJeLDkLF7d3M
z<Y)M*wis^{L<`6ZzA+aTZoF_t;iDSMAmSHR2NR(uElC0T75flRK1{<EN6SrCT9L{m
zWwwJ9mD(3J_eeJi!z9~Jhv5nWaRI?(K0M5zQBW9T@@V^cNbxEKsxodJP!V;I%5lyO
z+c}R=;-j(69)y-FMBFetZ?i>$qU;)jP4|cd65=aQVEY=+29+~zc#H@wsyl!-qxr)2
zEsVefUi|3}Z7>=_V~FuC4$QC`!$)-OJQv$#vpikv>Qn0^wh&@C+9~i0>EtCCKxy;K
zzdl9s%TonNMAS#|_w@p_TyUB^5(HpNyDy?bld*III5n@9ho|c8dlkXqiU+3jKPotz
zNn$^Q-e-$J8<CcQxsoX@2#RDSn@^{>i8&Br+k3us^E+^6{xej+85^5JIohPEdZXvz
zLH4lDiG9b)Z9LVbsARnKgzD#OiAQGQ#zp3;Y96JNU$ZOP;&PUpOdUOMljst2`q;t*
zO;mn`30R;|Cn&_*XwWHUkrrK_WLiGpz@wq)UK;k7h4el3Y4TAi)56I@8XThwjyhsi
zD`LMAX@B3=0P}QI8r5plzFd@6N6`n&{dHrP)y1O<&0UwL=ESz?C4b(nh8bmlfB4z2
zn1vC44<LHEZWas43aS~)8$vXV+%9nQH7|#HsVT4sNcmDR7njvHT=K13Bb0Z|lI%MX
z2D>;zgsSoLhkP+CA6-H1R+NhRfD|;&vU7eQ&1a6JZ%!eL@7|yYB)PH@pm3Mbwu{Ks
zESEh;X$BAoprH?cAwpv!ATiai-RM>FM^&3o=BDl48X+jur*L;+++TtEZR>x)+b4en
zT{%N1RFqD>6DdJa{veU^zL2}SFu+THK0b)i=&E`GRzk*yBh0Jf;wbAt5Bck?n_01v
zr!&LZo34Eo_n}<fjCtudSui}8D8Y9RjJsFP1&$$8RX`;MeN_&Vh*7cvV=TqrxP>gP
z8HCNpG_K8$008I5m?BY?Uv_0@tEJ+l`1Y<g?>mn61c18=zY+yH!{`4>DZNwmcu%2R
zOi=VjCMN~`3+veT%ClUt=T~+}xf*wHCd{N6rU%!{J<+UrRg%GlRlWEwr~R@w>0S3#
zTg;i>v!4Z#27sJ-ia$6{11Z3K`XuvX;w)2F%uZGq5ip4O(>tD&D9&&{uLK-b9x|Yl
zN^EWpZ1aO+bY24S$>hVfE_VPKM5<IL(=u&?`b-BDQ3@rMF-1P&7M9+Tayy$!Xi>h*
z9N3bQVE|(62o9_6nFs3f?<>Ou2}L3h?7bN*zbWDdp#di8xYdj1i<8|A^Wuqh?64OS
z^aCh_L6z#i&znW}$8(L?!UC8)sCBTD`XR_?V7Hr!$i%w8Ik*hq(@tcOi;#T)8Pey*
z=zx*B%a_#;1HXCw9+1b^K2<!wzr61XlS#B`yF=N%B2XwN7NMRS=Q^I|YI>(f_L&G6
zqks!ai6%zh<pf(sJJHTByBi-b7Vb$IyMTUN8l-Ct(Oe~`F4*x*uBG`%UvF;xnJKN#
z_JBUpAqLT8I+BCL)=t1nu{KQT7#q=p?OEUQa=|&L5*#RiZdR-y(|p-S?MZHvUxcb|
z79!?tV$?n@U7Azo@9WE&@~5n+Qv<F@--FqfCiD`QGYiDzCv=4@^`+Q4TjZjfe@Mst
z6eZnb(du#8os-ZY?a`kS_$tuf(yh**L7@_W;<nZC24@4cM6u=*XrOS1gN!|=oJ|yj
z)W4Yjn>P#jZ*yjjiI?4#`$+9<cfEYk6~ca9fscvf<LV`jiRQG>ZetuZeL0ZDJt-?M
zJAQe&cgFgBT8b}-67PKgv9-$XJqdd+Bkb^-H4~O(O7E_h54CS=$~9Fw@FfwJW~Y^4
z%mrnP@+_D+5zU(_N)d!IrSr5Sp`hv$0Z>nB;YXB@dtT|I>M4^6PB=z6Tom`&1>Vh_
zB>NjNW*fftNDo}txE<2;Vm!_F2jF#(b=Kd1{BQ4fpK@iM{M2Js$ACbS-!K1+h^S(H
z26-d0GH#2^)p!gfO)0_q@4N7X0@Ia0={%w8Nz2m^1`B!#Psz@(4ps%Yl+nU!C86|b
zuFN6u+l7<%43aMxQbfno?Gm0%Z?n(wjoQezt&O|vnGYSnw)t7g?|hvidxl#@!j<y9
zheA0&<XP?KQ#I40Y3WlFC+2SAc15+A0XL^-DMkZcbH<pK-o4mGf|x>BAzmGK1p#$y
zaKe3>JSDLtz{&LcLz?xk%WL$_&+8+z(1WTTDwX_D_QU2yh+Ccnf{YP6Y$?{nz}_X^
z;+=+TD8&m)J|}i+U<p5j6&;4%2QDFarCzD<4w-+y%2flJ?CdZ}^V8!%oDTd`Vm=co
z>St%?2k@A-u;^b)kS#8hH=5+bo?eJ)JXm6OzJ(2>sl6rQ2BW1q9JN_Wq)IK!pn<1p
z8g}`EJO6ur9wg5<;OfE<gRs^GE9YQn(iHi6xYv8xxVZq=1ov%%3;}TeA`7}6E7sLM
zn;}KYbSt)h@$nK&b#?0regQE{MY07gJk9FG-y&CM&hoOd!C8FP$g1^(w;aCwfE?$|
zB7^vRdlhco&9Fz|vqSVN@RYv8$^#;I;{Ii^I)Z=mm2o!*Sj)cDcswGS27-}i0>>rm
zdK$+(cC)`odS0i83)-r_zw!oTT^-b3dYmb>2cp<Sg=&91NAiy+B|RTDr2fbkVvFMt
z{ItRc*9*kH@>@Zy2|}aW?-ISQ0*S6Js^y?VOrM@J<-Z!uw%ceNm0w<22OqWb>*-mi
z!k$)OHok7;=XMx?mv$XSM&xtUV8lN7==~Ex1{XS<%{AfP1xMgn?E1dq8{Ptyc#(3z
zcgkd!*!vaSOc6XC(c9tdbxZY^<A9KRX}p{Nghb{O6e6Q~vVAXLD>ekbaBoUnpa*W+
z)rQX;<nfgOZHPx<e!1I6BO_~rj*N$kP%4EM?!R+J&C?tultr7I)o$NoSllJfhUoeb
zXIxK~k@wOrtpA1FW39OXr4#NgJrHNzh+rz8n}mBJJ!@CivD9{Ck%cw%W@<-!e(YP>
zxCbfnMjwOF54~o3jQ@EBy>H(+b3B-_g!ava-Q1EmEND>x$_|lqM|r6`5RiZA0r3YL
zo>V=6c=ABv*(2%79>n7BvEUy{I5g_s#rQupLXlmQ##Mg~&OMN_!~nocsVm>eqV;pa
zH_G|^h8A+-ao@0Dj;b4}$qk{ii!F>3oNq<W!Xp#g<+=0jmg<RoS`zL!kUxM{m^B&e
za+q7kyjt#D%jTlxrXuscxDpzJ4daYk{^zZg{B}9nV9oQ0KSOfZ02kTK7t6S!t~!xt
zSDCQb*LU?@^RBElgX>ZEAnZ^x^KV36NbiQ!mr01xmbPTl3xt&z6fqo6A0Pa_*)FR&
zMPG#txdIYS!hn2g2NTF+`7}kOUwo_`jK)hq5ZbEsY-)?t_0V`EyYeeG1t$f7lQK6z
zL?G5UQ1Ra6xYg(LtN&dfVd4Ckn;8$1Kz@K#d}%3P`Qkc4Jb$tDMw00VI%kim-!B-o
zr?m~l#)z##)*kZd4^5MDCd_&^(c>kh2VD6*2E7bdP1~Fh__2_V_qq55O@ko;-}m0F
zAOb~D6{?uaot*g8^ki--C+mivz>K?@3(YYa<<%yaM~r6|mE=0vG^a~H<)E+^IJ~)k
z9Mihd&8H8>zxm`3u9+`$Fb^$$OnLXb;<XGT7k|#f2S5n#x{IGLnVHNUCc{3`#}>sg
z<Fx<F(8>1wBzbSSjwrf1TJ|Y-PWx}2uk6GLOO9ImF%U=VtkzxpC4+f6TM(L?RsGe$
zYi#4hmWG3`S<P+s$^FUs_l<Zy#G4<Cl*LBbjE#L4U+SsY^{@aAQXjrPh_88T__GS2
zs5|7E_6|B%Rt6CL0Qt0pI84ZUJxAZw8trSr4&Q)L8_H*w(HBqX64$z81U?*JfgOsH
z9@<)B@8j4wu;=RL0-pT1gLcxaAG7sflK;CA_Qqic!T<-1Xg)W9#Pi)1j3eSslyUBT
zNu{P(o!`NI2R!{&#(O>6*mSHaJfH&WL&JRQnjIar=HsL2amj>`<M;-SFsem`?LgJH
zc>L!9ct*trdI%2ro6`(a`kQ?o1^E*TnO(m9eSXNvpRJ_l6coC&pLZ19{qZp|Sa?Qf
zXOD=E7t=>&Cv|7uFQe`KKWOSkbaje5IlX7}7Sd<#&0Nlpayp~`?YYPP92D@7+Ua{n
z?BwK|zv~?$1gPZ;!EwbPX9oCRqCP+53ryE)8c5i_Ci@`4WS0fGD#8n|yT;ORXDN7a
zyLNXdclHy6x<!^$V`)86`rJtIb*)wZ_GO2y+$nMXh$2$WutdA6{e5}n3?%^gDo-C^
zvY=`#>cA;Z1pk`A*8^{)hoa??m=-oV0Q%&g0zeA8{TM^DIHUj+<|2PRtql%521l%~
zFrJk`EJFheCpYk~F5cyD7&(dq;t91lM0qmdZ{2&LX5UVp|BD0%U!HjR2AnOk!yzkr
zk9?@Z#u%miBbg@GyJ;{vO{!;_f_!ozd6(cLWhXWrl`yK=P}%{+nlAFiXM4PSjx)W1
z{<U-q_El@}GX^{=ri7H0sj$H3nvdj(J$4z2xNMdC><7zxz+?mT&qf#-O^#(zV&dc>
zt~GluowLR#iDL<{Q@ry&i&4C(kkJ~w?^rvy;DC1h$b@A}aJlzP5uGW+^AC#!h3m;q
z88}t*A~?DaxhU?qnf_UW=J^MyH(GA<<^ydD4lrc^P55ZDv$L1uZhFtW;|Kx(;w{rX
z3Zq@)C<snOl4i>!?WRDp@v*2F*L-DssZU2Ym?HesbnS+JGi>X22IEi09P|E#!el9*
z`<O>h<xxlBIuJMf^=VR$1TCSaB1*(CDob}Mw%CIS=-*Ju5frjFPyy3w)cyL6zwh)m
z0SZ7>I8guqX4_acg0}YwD2vN74~=Z(*dv0HRW{-LRje)Urz-C68_pi4A?~5sR*7l(
zDbIHWhw5+jkRJc-nP$VZm-WyXFVD@1Re*4+lp5ENb@pCuK(J2Ms&%6LfAuh3qrlQ5
zmzeOTe*~U@zw#?hnct=KAOe7pvi#rrGxLS)xSrT5dZER_3_jnN(y_LA1aC8Miu+{b
zKO1vjcKJ|w*iY~6Uf9IWvqfH%ew%`PTJWoM^9R3hrcY@wlQOn0-=dVhg+^-9P^|AE
zmB3Iz5Lg4-gBYFP?a)lUs4)Ba;73voW1q@XoK(Q4#M_zw))@dFq$s)p<SV9b`2okR
zLlNcmg7Z37*#-b@JSg2733)HnIRT2Qc01hhA!sPu(lFgT8=LIo=PPplVAl#GgU`M<
zpmrT_5Ye?FKq3UiHXwkivC-`4aGL$@a<3BCYL`BO{|PhjEg|_|nHn8ywvMIzy{m6M
z<kd`~&j62z9@hm9nkv+wF#;gM25;g2`914>c>Ynnnh3saxCOjCnyR`gHA*&N{{w9T
BYIXns

diff --git a/apps/desktop/src-tauri/icons/256x256.png b/apps/desktop/src-tauri/icons/256x256.png
index 9b3b288c514a934e2b6875403109d335d83eb173..875659f3a9052be7e013944cd6a0204635382bdc 100644
GIT binary patch
literal 71045
zcma%iWm6nX(=P1d?(XjHx=3&jmf#TF-C;L)g1bxbpuycOcyM=jci3}3RqqctpJux1
zs+pdyo@trxC=E4vbQBU47#J9IMFm+c7#P_9rm!$b2>%U+Ze>>gqZMVPw0*MAI^kQs
zEqXG%Tn6T=ZCjpnP1recH>6u8WRS0#rFZmn^q`IpL?!wDg<~)gQ#?@Z$r$(pv{G;w
zZc?dZv$89fnh4B5Q72z|4YWTG{QcW9UL4ne-IFq~*#C8-O{ett<geiOQ<I*I-Er3g
zA@^+INiyqL-r@gmvUGtvoszk7((#J{iqhoIKn~8v{=h%#TmP;0v?&Y+$Hyn2>*XlY
zeVK}g$ol-TJBx}bz8AF9mhlqx_2HFwxLI-!_3h(-d(&g`T=ZZLF!)|ezHO;HUP6=F
zgZv(Tk2M?m5OBPz-u?&ncFT5!v5rk!qdv0~J*hJ2v^2MQ<gZct-I`dvcDK7<6xk)1
za%&l32xAFr9qSzYf9Qma`$+x3`P8av6uDKb7qiwNd911oB4a(g5FqCbbJw?6UW~2r
z>qJpLJTiGx8lq0mF)wP%>ir?t$eVOsgJv{~9`aSI3ttAHPr+_9P>3D#x?@%OkZX&A
zOaJJW;b*^K&FYFmXe9lXGIq;N<t-vNldg&VMIZw5|KTxsNS7_nUVH^V>viMVS(&N3
zdOF=y@`qd;Jq>v=SuW!{A!{jlpD#;<uSYfCr6?tW`_lUC{kY@)<I6ILsGsq(#@oF6
zEz=XN@jpt;A0Lr<kE{Xc)0e8ND%mq~NrQLj7j1$LE6Kn3m@R1#sEjCS)b`pOMaU?b
zE=cZ%hL3}2Zi)VrhhO$KY=;BpKkk4{_MeIEX72e6&X0rBRb6CD+oHwhnRJ@T<LnG>
z+Y<X6K`qB*FDKHc`r__Dk8Gt*4<4&3{viaG4F>OXb*If7CSo5a79eO)VTUO2RLgVn
z6Ta9@E59K5z{g{bh;^_Xg*92v*wRyR@)73b>O$Pl4=<|b<C&=KiF6|45ZLbIXgx80
z?lL9eRv{4s(YEtt+F8klU}$va!qms4=HrKCMm1%1ro4zJ690h?Y!*t^<T9VGe!bbF
zxlx%pRW=zI2@7Qg_u?W8abB;>Z=vR_LhS0J*v=?Nsb*VSbW#YMwr)0F6mO71>Q)2o
zH*-Fm%4>W;sU#6CCGqiH*2AmYBy{tn+Dk<)W<VG!G`CeL-wxYrJ@^4Fo~rbJ)RSm_
z5R84id>;hvK)N%(WIE-sAQbUyjQH<3w4Qr68O>`yH_oVbNFkLX*&rVSXm0i&>~jv9
z?(MzE#9SWGF?BDW`+f#)l-{@w!FE()upHvQptLg}%r%-AZF*lHkgqz~61dAa6@8*6
zQ>R+Ar+X*S1TxKmKNP6-%9Kl|y_y}aYL9<UOjK-YxJte-h6J|-U%r?Go9|RtP-OY-
z_53u#QJ~Im7<zse<yey73R+!mZpxfte`@1G%Kvsjr$yHXk<4t->ue)Ce=WS-2zGF}
zY&#wd^U{^b7FLt^pLnva5ec*TlZ_wGQs?zdZ--V-T~82nWUn|psk~7dBH&)+U^d|?
z@&Kdqs6^<a8et5Hd<dCQ-MhcB9oi}lp?ATeTum2wA@76NYnI;XoBo{QV?WIlGOjW8
zST+W4>Vn&j9)wOd0fN}V3eA)xmPiS8?l^Vm<o*{amoEJg65>Klb%&#yZ)_6Jc?B`3
zqWC-+pO1xR;eCjSgM(fEPErTXcGWMg<2Wu~jn*zJ1?og^ukV12PzK&XYo!Gdd<cx-
zH{Gp2Mt~{2VXCB{k!(a_9|bLlVKGt1114w8#vLLd|0b8mym+&^F*L+@(qb1HM046l
z(w&#&^XWNUQaD)8_BO1>nNbOq`4$M~MT78wX{Zojh^5A0T7x8gPTLVO54FACOMgai
zbS`-aPkO-T250|;F=iN&)NVQX1-UyxoZN8n7ixMj*Y02P945<X*P;4Sn&5}S!9N5r
zEvf#ay_k=%brm_p>q|J8F|Us+Q1HW3VN?DDFMoA({T^st0cqU#gVq#Z8t9R9?opOX
zyxxwnva<Xf-K+><R+5&s4RaG_G#2-{ZLcO<zT$0um+rhkf9@J3EVw;|<wiR~35|UA
zXa9|rD~E$=K4BUA`mlN3zb9$p-F^5si^8zuGL}h6H9`if#D#%WXcxv9VMtQHWv5Rn
z@E+Jc@}y@JEk~s2JpSq0E6O8Bjz}Te0RiC^{1s`=I)6sCkeVt21wguJd!~NN#8Ek9
z`hhj`9gHQ6v?)a*qh{R5>a%ZhP*DgyW|f@1MC=c4gVIWBI4^WFs!>@`bFoUXs$gL5
zJC(29ET*YB_#CnZSAC^iqIeqhEM`)b7OjAd{eXqR#Cpf7Ln}g!Z*?s)`*IObOdBja
zY<BU;`PvsL`jQqW|M))IyIgLkiyVoezH{e+V6BhC>AFja#IeD{;uPRD+@=>syPGy5
zho|Vh^yxX}J8bvh_nuVp9(v2IP=b@c%Xl&Hw~O?!djXJBJ>=Gjd7*&m-sOAdz1PzC
zSVT}45_LeCZ0~*GTpR@|<$I%ga@W%y<njG@d+Ke;&5{27(FHKH7e>#TQD}&^=R25_
zc7eh1(sQBALhAI^+G4!C2UnhqwU15J4D4aCsRV+EVKT0{L6WF+h~uxjPGCF1?LkJa
z_bZ2|n&1@{@mrV9XOE6Y#yqsVw}I=Fj3L3?;o~se{|pr8aVGTb-lFBaC-%Pilf`bk
zC4Y30=+Unm7FgHRAvffuPMNJAI9SYEu_d}w<crhXTTE1(;6zloPt3vJ_~X^Vh4SEu
zD%ufDHX3qDu*=O5*JsRFJvsk})~n;qH<#ns2#mm;$H$-@^s)OBs2M}N=i|hm-(p{v
zayNr!n@nfhCyfPNwlDMsm!4VHJ$`iM9RMPCkUX4dCjbCH9O>xg;rz!Ul&U<KIVq}~
zQY)rVQDpqVt3=`=GuD;YuyE)TW6J9|?!3#?==I~J^Eq@F_wSzwy~MDuM1wgUTOJv-
z|5Ls?8>n!Fyz6U0)v1#%u6?z}gznjBV#sI(j5DhStD<2OZc7(ZnRZ#k=ddX?`y&3@
zKO*IzUJ)2U#8yYp4tWR(FFGVeI0pS(<_dvSLuStE7UoW-6esqO>gxvO#dAzIYvBGz
z`PAF>_EhJ^)0+yNW9LV=yUK%V^3YwI^6=j8W=GO&pW)|2?Kk%t_uA**UbCdiYuY|q
zaQKmLLJjq!MBPLYJzOo%&Up*pup+4Mc&Cr~;;Ug;0DDYS!?2%Z3-F6m36ho(3Eu)u
zRM$!=Y_~GrRmlv{E;EPMA|6UGp%V@k)lsv1|2ypWArp)yOw6Bp<V!rhfwivh_lo=~
zfnU6)A5nT%3pCl04O^AB+GyfSKy-~SJv=Thx<F)MICwo&IB6;ua3b&v6N;fEo68qt
zi-P@88|oo_`@BR8l;1pnB79KGv@Oc;7`5>R;ko}JBFdw<K=7vX`TM~9@L>t9IR(po
zpBmNA8sAMqJxs%US_37~54V2ZsdZnD+Q8=Mp(fD;-uT<byP_MwbUx;qS;&nAmb41Y
z5ilNDbRq<ETZV4aiP@t`m4P_JBCCbifGYH^k&I6jwmYD~qBf^R`$c5!Ax;7v%9>}l
zdx1z0xA6t~v=FusaH>rW3grBsw?c3A1|RI`N>t<Pb^DuisL835-7a)genaXQAGB>4
z^HpuD!w9E26@N#zj}YZ?=xd;#n#??38bAS_%yGw04FHdLG=?m!kL@!{#dU!!Y>=e!
zQ<XpUB7|fL_L(1aLV9Ni8+%IgMTCsvt*V<N@Hk-?dQ)BcvG0k>s(kF7i2N<wbN&dw
zxyx@BKhO8v`Eha45R2)Hn^E~^J!a;{E2?z>)y?#`j({d#P%`_8`j*K?BA84;5w;8d
zNZ3XN)-SvlRK_B^f{@4%F9*T_mWONcNp49AQ79;C+ZX=|^LrPEYGQUlw<C<(ORwkE
zaX?Eyl{?7dc#Xhm@z;lIn$8;QH-nyqX;m8?+Y5fI+7LDcyc)!tLmR$Z0HGtI6BAGo
z;3IAJ#okk0MkWmOt6Uc`6hX_9)f%>edRhgxwEX%Ww3QOr<H9`{J!)a=3q&Bul@bv_
z-LBqeVl4t?(zzfmz>|KAsn0vVokO303$;F9Zgw8lUmE_dDkG#pwbX1>kJ)JR(p$+E
zb7sayHKsQDE7hKW=LFdH2UEge2$NIBKU6Tm{=y`A$C`Ux+(Qa4(C(9~`FnMbZ1HxC
zB5N2H`xPYmJ(7m1$N+6wDW8Pd<1+vqeLxt5Nv$S_b^M^XwKewqpPH*Z_wx<9ZA6N)
zY(9l~hNPWuG@Ya0>sAK(0KzK3ThcMpgiB56Eq?$)QPONM@-W_w;6a2>@-d-_Cakbj
z6C;$NIMc`p=WuV@yDp!1d&%bTVfPf62OYHJs=AQ(Po&BqVnw_|wq5xil2O|aRmcp%
zyThk~Z!i8qpso3^P2UHT4WaJ3>>yFbcuN@Go9Wkw_2!F13TVAm?Jkeb<7-Otuj60q
zZumK-+=!Z!GJCfm4e-MlmN9X>Cx|cKQnK_7fZY%aBaT|eOjU4X5@y2*jA7BRhnXO<
zvDLWzyhxv&3T$|jW&gdmh0IJTETP?UIDNFW`+2xaBunfb-@SzM@-8oym%fKNFx_tX
z5n(U=wnSY;mm_e#wSB|Txi~0ZDW=a7C(Isy#W%`v6|#y5HndYRKZ%x10zg}ebSes_
z?NA5q+To&s@oy1@)a1xMI3ukfdPc6~*&|j!^S$uW7PBn#-pr4Xj|Z~vGp=Pg)R!_W
z759xw+btA*<%oU2?ho~1PO<hUh`0E20;Pk1!ON;BEJz8mUU+!f)lz%fNjltNB-$jp
z6aYIn!m&P%KGbCs!GlbT@x}y?wU6TQ2eYpR#%Wmyh6BEgEfR(wbD$p70mGL@b;5t-
zhg3N*M+L4%ZZX4X`=X)jE_F9oAbku8#GuHu-F6Awt{8inrlfF`cxd&@x+$35{hvy>
z?s{jFF?0w*AFoXxr}DfnL{F4bL*TgG(u78gN~dq&7n})w#+Wpe_;8eGi_x|y?Ry}<
zwak=hqnRBMKlxMbk8m=}xWE(t%0Op&0pObyZXzx`Aa~T!{X1kKW&kweM}4@E7(Wwf
zM<EHp4G@cJmTQF~^Tn;<U%WQPB}+Vw7nnRds|Ov#AvwIM5qXCc|Ej0%_PZTgTVkEM
zB!woRE?}PNdqxdqR%BcGiW}<KE3G?8C#JEafVJSS#tsgW3(DE38YI6U{PNA0z^r5g
zHVO><2sg%=)<IMo({tyQa$B?r412}gbICWB6e`SpO|saYrOd@tALm=KUIAOje%?7!
z@{Tz)c}?2=&<XbKt!~yUmeh*GDs+K_yiK6!$eTJO^%yL|02Q0Nyh3}(v0WB_$Pw9n
zlH!VGez8B2ot`Fxg?xK-Dei?8+X4FQ!GR?(%l7!a&=l5m<6S~ilcg5Z=)?O$u-<t=
zW;j@LiL^j<;zwFWjo^!)|2}tLKli=n`t9TdKkpq%#CK*o?*nr4=%epa)+>euP24}(
zo?kk#?0Y+RamU3t6Qgw+?lHKdVo75wBmL5cL$T~R1%88-b(;Q%Go6h{KnO{}(pP|3
z5~>|ZF9Po8UvF-b9uY6<@1GIXj;w>8W&JnTQDf|G0y=wVsqd#^d5L?NeTkBYSvwBS
zX?I33vzvF>=kps_Y)bx&UsC;wldFJBUPS8fB<IS7`7_@=hP*`#AK>w+Z~;J)Ah#4w
zqY*#0*T4v*0>yKA&`b!!Y&-c<GWmdl)e1EL)#ph|=SoQOf9>d|jbXySB7zHqM`pN^
z^?_iwJ3JQb(Q6zw@!S2QUXy3@?Iih!k2#ae=QWdJWbyKkCN;3hpNowOEtG+ag2uzO
zjqdwPjwNBYjp{r~+lQ*ycONSP>5}+B%X|&E8+@<}gfG--LW+$;x`q$(jF;}c#b+ej
z7;w`Ye2OXYs*-&cM-k9pe=iSh+;FOxO?hAR&t9N1m6H;0Y}s0NnL=OGxf`Th`m?Wd
zFYT%`tzdEN<f754NXrH@$PcKY-Bsr|_s9M`YbS>q5Qf&Rn$!tO$9kC}Bf_;kwr8R9
z1dQw;p&oU3j3VGz#2ZqEqIkEH3?}w*fKme3lY$U`9{Zt9$!Vm+qp*Xj%{`3UzLvQD
zMrbnH%DW|vY5SPi;<Sjm>x>J0agJnvs#1b|X}!pS#{xA{oN&%PN<1u$&J9Xl8eKzH
zoSQb?{?^0^A~vJF{vD_B;0@in3+o`_#$Uy%67lGS*T#+fjmjs^XZ5yMBf*Qa=3RNc
z7g816`mlBLFYL_sNXS#-k?>HcY8Vo;Y;B%iiZkf__|Ww<!|7<`{kd~4IJG-*K&#S=
z+e0*84%S+0E0w=zMZ4~rl%fNqj1)i*u##5YB41%9dMea1ykBeJnKLSehsKUbdla%2
zkOMV;>k!%N#KGx)?IAQk8U8zoQ~vT@yZF8O>zx1#w}IyGWi5qRn3EQ%J@GKU2QII_
zzP*zs!lgku-TR$_HJgFN;*_p%#z$M~p>nazyx4&HvBte_%8t`>Oin$?fT>Fk0=u7q
zQKEbpvLrT|{x!&0E1T882>}gtuqEJ)EPtCZ`1Y6@YA>If_u+RN@}Ff_-n}`qu5oRn
zENuib?f;lOcxz3oo^UpX?o<qu>~bCmU}6;MNwj!Qpl>f7g$2>76;Y%fwSSR{Mm5#n
z3il)-J$`Ba?4CTv0vo`N@F2)f>iQG?>*q)Ha_!YQ6PLTgvD}s5Gqg&e0w^i?3@#F9
zQ;9D#K{qCTB@&S5Xv-FVV2pxx__+ZQsNH$*Vg)=YWyNM^A}7~TIH1bLQe>+=X*>V;
z)a~c=G&)-BZPN6T%?^i0bnCwzGRaLpT8EczP*xi3dNkQADXiD|3VCFMXAz92Vv-iL
zIPxMDp}~$PY9p4yJuEnp7BIXoZy#-Wt#y)E`B-FCuViZ&c}kgw|1UFmfI)TmymK<c
z3jHW`el76d@Vi*WykIhRp?!ZFOc<Dq4z}=x6I|~$o9F)+SgFv^i^2oq00m(u{UCD0
zOP#Pn21qA+*Mnr5c!)0E05Ri576(?HpZqIPR#?V)c+bnVK2D77mXcF-Fm|{@Q6Pu0
z2su&~2jDPCPxmJh>}yo2eH+EUcEQA+jTn>3amfv#yGT67JG$8*Tw9{Qsx|8@HP6MU
zeT&I8f##2y?t)3rfu(BTSZ&)Dt(~VcrMKqKChgB%oKq8G?@=Ymg%(PT7)gFl6Oj!w
zF|x<_@~w_0<YM|N5-%VuvBIu^+3o#udh`2#ubu}&6XYPPt^SRrt<=#c%(uNfhrGby
zcCSyX*;T>+^v>M7pks7s{}}VK&=B_7A8Uxa>}JFHn;EJUT7M}FacV3v|6@ZvTPpe^
z17KGUX6!GmeA$5W$*<Pt)h^S#Q_nZILuQFdF6=g?!AbxxA*Zvw7S(|gu7`6}KyD22
z=_<cA7FbXU9{9ncM-qK(*u=~%;}~~^Q93SGM)_*%LY7BOig4wh%f7NTci*!az9$|2
z&U!z6$QA$N$S(@H%qJU()n@eqyjoeGnmCEwHz9u5E;#GF%cioHOe!L8&4E74EE*MQ
zO1uob2ZkMHB0?8u$Kp2ar{8&ppcApPld#|9KcT5Ot<j|HPP~#%QX+A#)%ne~)cf7M
z`V*9p+^<P2b2@+Q$?ku5%o6OXUY;AJUkTj*3fXxE>BBWSAaIQF#^eBv9iVR?L@hN^
z<!y4}^t*)FLyUOyxKblxEpQ`RL8HO=-%>x4baNNJD+7w*w8jXjNEr~P)zH%QWBB_B
zBni6`OH}4=>Gu@!`u==iH|);G-wGeep((-`5xFTz{g&`6J~zJGJ)Ik@kz{REGJ5Zk
z-PG^d@9{o@JIXF6qml_Kx?amsmk<r!Iu<>F5E)f9OlCA${mM7s5Yy?|07CpXrHV`L
z`@7{ZuEwvc;$|0Mqx}k31sz6}w;5+BNfND1bcc!zZ%;0}y}Ew}9Ue#$-FS7G55EX5
z;Q9oe+3j)SmYpGFa&Wc5wp5n+hUeJ@wrR3_Gzz$w7*$v)7iJ(eX!Xiv6~(g<@J#qY
z%ejuftCH5;ZF;~hwUu#gZE7-rczFYUmXl5Ahkv03=&ppeBM1DccGXj&GcWsI!!1^J
zwbsM*YXL5MSqx9p>90K>EdbBw0i=x!Juq3pF}lq(!d>)h4)|T8;WdIBP`a$UAf;cq
zINSMmj#B*oIa9?_n8vO)mS48Az<@$qTczttUqXn0^1Xd`g4X@5+4}c~vv0N+1~`f*
zwkOl{4&PqjH6C)QMBHjnLtvL8c!&C4{NweV4T$iT739(*dYCq~adY5zk`kgZjO3+=
zW{4PyfmI1RS@2iy$3>snKsPm*Goq*P+gpKjf5{16l?8oK)XTSAJmN4sWc(h!62>9{
zlZi_QMD!dUaCX>1CAFh+`N|NoY{C|EpRPfLoq;REm9uJCMATa$91BFwm&m6nnCR~f
z+@1<DRkgV4{Ngbtewnd%W;wKNb7`aF;>F#mjr#E<n1bmM>YQRYRm>>S`gl!1fH_qC
znayP)#EPx6DWq5!F^)_pT{Z8++4U_)G=277sEQ2a#f^sd(t#fKu_`Z6q(tM|_|<LE
z#2ABfNvzf^sr{M8ee-hP%;PBhW^tX5iX&)q*}Aj%0-xc#M&q_qDp6~ObOj6ppI5XE
zo=x~CR66PHP=LfHTyD9o%Y^!3kR42WI!*A*{_9VDh2GeFMqqxfXc`;=)i@Y5idJUX
zLk_D-4oBx`#shnShSZP(V*O4ND^*c^U7ku!t{Kj)HHRbz7Vj@qu-}bG{d5!$gL<Q%
zpCD6|04$|=b$*RGzek-~zaBart$AKmDrf34V08H<F6#cR;GqYCm<eHdq|c<ts*7D3
zq(%Hz>uhPeDIH*Q`FKYgkU>_O2CQ9NdNFld4ZrR?>It{|%=lGn50_TvCfqx^Lb=m@
z<1-sVAB@h9f7y}yzos8;Pq(WAU3JD6n_CgKq!(WiX`8XzbwKy_Drzt?eRFT$hW%H1
zx^*D5-`*1B__4EJKCi|Nui+BBY7aafX7Sqz_`KxifMY%$HkT*vP?_Di5LDIZsQm(y
z>R@B|78D{ql5cLy<<Qug`6Si=xrL9q$SS%p;tW^g(@3>k2;BBLAUbMkL>jmF1~R;4
zq@c6)LtVi*NB_f%KF3QQ_9eogn)?0Xd8^Or!((|tI~N3aYoTN50<iJMZkv#7!{}0I
zcZzPvQ>^t2lu$^G6)_(BpO-Ibu+#1!xSfSD<t$?NL8_GA`!#DpcF~Bt_4W7G5AT_G
zo|_*}k4}%zSrJMnHxU9=UG!wc!kg&3NEa<Xx3l2CYf}9ZPSea+zww+%e(*o-5oaY)
z=36GTJ!scBAa%XmAS(S4d0NB#y@GH4$H%V7rrguUWz1);aZnP%H%Z=Nu#)XS?p~v(
zymAOP>?bi`j4tW#d4z+nB+zL9hO4!-=`PkZk^9x%G}GP=(SRYc$epS<F3QN<C#}-x
zUiP=ScJBp2-O1;3ch<!X6{b$jqxT2-hcDw}&zur3F6c4OM6t;(s~EpgIdUZ~@(W@E
zht?idUZB#$w!1JR@yy>Hh_lJMOg(mny}Ei)$%6+7Kd>+xZO%cd0gvG(xBXcQjzOEM
z7J5((lVYlo@HXXo)z{PD8W7icS5FqwXv;&_y~QFz#iC)DTyjg>*=X-6WJV-E2RAZ;
zuZSSs9_XLd17z)iWD0yGaCrLu*-h?M*pg5qdLwH@HJ^fdcPL#kKSBg%sKu9Nx(=3?
zM+5Q8xClJ5(9is6@CO666!{EZ{$Zp|WqNL&5?0kpf$q;_<j@|zV>E@RDq0fv3i@0M
z3W#AkSicg~9FV_H%$OfY#|k(d`q4Y}ap;~Y`eX5JwKYV~<RM1{R>W!tH;zJr?9(u&
zf7eJ_a^>riy9R>1z4E<=Iwkj`$SmxCzjO^QFmjE$5Utm&x3Q0lU#nwBn>rwt@R-<+
zY_Nwets;%KmulPPQ%(Q2ee>B%yEj_r^W>OrUa%8)9wFmwcva?*_v(c^iyO!Udad)G
z=D5;wkzz(vT>U`Lq6bWI#G`{h!ME$iPLSW0#a(Jg8y9Hc513F0j@Vh9Z9hbsy6=XC
z5k2mNe{NZ~?zXm`UPaCiHqfX|qStt&VgOBxsgVIRjd1rVxY3Ee<bpzA`UJS<XPyqR
z(&;;;<V|0ZT)w4*Sj&Y|AIgI*SrEnY&t;m)6}D-Or<b}sr{9lFHi(@F1UCXFuTreL
z<8eo@-cvmObj|6v9`^9Uo8ZeOHQ>u)QZVP2q+V8*Dw|yfPLY)!bHzuk3_U6DgF1@c
zZYkG2dfQf~pnu$OnV$M+6aGrzL?_3SQm-?o6e$yRy%;`5e4OatLLMiKTHk-}%QrVP
zi8Yu^1ezmHApUkc&Un7NO5j4d_ZD50+*^AXrhWeDyxjDxI-$_3Zj=w@ftY<=rH8ls
zgr2ET>b0q)aNn75t2_QiYaX|Kk;S(G@Flxvz8Ay*M`yqS4Gxu+7}D=8g5|nP#eLTd
zo7H+QCdNd7vYh6-+ym6~hPcc)fV=d+)>bYK`=IWkKLB5(o(R6H1u?F4U{f?O&K6ei
zWcbT4+{`GAM>%pYuKWN{Az^&zrcQZbXGC;md-H9+5!3m^BvY*RZEn1IcDJw|eHHuU
zqi^`~MaySGwdUOZm(gG+;!pVf$)H-*(8yVZl~?GV&ldv4sl2;PGBV~h-Ig~_C&|l7
zZ)4~y?fu(IkDeO{C773Q5)uyyEeT(eplT&$sqDKS$}dW4z@*d}rufQs7T6Ng9|08e
zruvU1t4qJ4`;08Yud@?`y0QF(J1!Rwl;mzTA6cm0Z>Bm=g<(yxnyn!79RZSh+;n$v
zTMe}vNNK;0=Nl!@hc=ey)U>&<=Ox%*Bm2N00h9K@ta9dG$vUIoFVS^9v6^@Jp($vS
z;76DH%G>A?ERr5*`i5Lj1`Y=KK2ar)6sd*67TE@_D}DtikOH?s03#DSu$_YE9|ub)
zSzPO92Tx>(fI_`B^EdrY`V(??FV*vGchKDXQE9HkQ{`)%C?N^&b+eyyeO??s1ES#J
zMy<;(x`lpjl*^$-eZBllTxFi~crL+@E-1zD*d**-&=qZ9;D&H(y>n|r$9d=Cng&JZ
z&f$*<Q@0-Vb?V5quQm>0$+$&~_TjdkMpEmj4S8TEHmO3)>bwxQLRl$>w#?ri)Ugr|
zrGKx2UwaBK{n%cXps(kge83lU!s_m7&dwd>Lx({5&KhWCey$wTg-h*=4!~HFtBUX7
zF9r}?2QY6e@z9Mu-&i(HExsf6DMi{Dn|=>%cy~}>Km!l>G!VZw-oh9zy6=^`th>TI
zur}^6;Zhy;f{{hZ&C#)*^PKyr3kj)cy>Gw<(=KiRHH<5<L=NDMFm=>mOD9YRJr<D*
zxRd}QBhSwfDAxPCl_9%VL>6Q*kWgjNf)1M;a@72>m)n;{5pb6DdQ~9ECO|Mt$g`(2
z7*p}%x>d5ev*k|_<y%GAfycSZnWU;R_{^M`<-vD#&8TKMb@S<U(NL)6_{96c?A~)9
zOKMqN94ECBWC6b4ZZy`FPNoN0?k3L-7%ECfmce3kNb}>(434N)lxO`6nCVlNEtHJ%
za7xa-4U6u^$rk^j#Q8SUgx)NG$ddKuhezE#*n46C4v^$Z(pVoynXg=tkrCR1<2llF
z*JsGA{)3JCF8r<wcZdCV*yV<ay%a~vUDx!)ze+`$ka6+p+gdXDQn2;o-z{`}10!cS
z2{h~8x5?Z%JgqP*q$tW|hZ{ajx&noMZ%lBU(w3ue)OiTX&p$oDs1RjJ7Bim>$l@VL
zL^TLj8^>kU6Z@m)ec<9{M(K{^ahmjFM+zD!`Hz8q(>ZA}&qmA};B(=P<yrHcHv!5w
z4#Tr+Vqhp3q;nna@1192?0uhAyb`qfQo`$&nm0qoGEq?~tFBD_ZBjv{u&-_=S<?Q*
zM({zJjRO8Rb!}0+8nci)`_UkspPgOL`(nh)`_!en3n(yXJ!+_4zRNe1htQ$d<TFtZ
z>!VX<i{-c7msLFKkB!=pzl*4M&Hw`3t=3ezJ(wu#qs|}Eo3l!yjLUSqFJ)+4o?^nV
z#bqYy*aj>#Z|N(WO;C}?u^GQYz?{X=U3)GYSQ)(WYAs;h*w1`l>a8L4T~>sC7eKK^
zQ1DID-HIv@J>tRHhtG~ZA3)8?V$&fZe~ZwgSIYODIR=$No5(mefm48LZ8{mi^C`1v
z6qStZr*2;!v{RH7vEmWBgnN$(ts(3KwwcpdgS-C=ai+K1yIRWM+C-td!EJk^tigWs
zzYdGT_~xoLSmW(5G9SzpM=ivWjzOO(PVuO}QS$wB=(p(Eaiz(Y$%`zAg>_Oc1HKl$
zl-3~j8p#`tGt34DNUuM(-^T1JZ;J7Jp*Lw(#}ILTn_20yuUT$At}>%lH9|vD*<j%I
z5dh8BBc5a~*D-$z_5uuDeHIXKH=D&mBaX`#4oX@eg(n9bIymQ@2BOT2zm}Hk{kUQz
z^|87l2Oh%aS0|auOE(~n3TUZLhxi(|d#Qi3gbBPvR%|W2%ZJ-0fQKywsr76D_Ta=!
z^0(~E10gx^5W(5hUji<}l|xUOF-G3VXrbIn&jg00=t2z}qB@E={hVzrmsi(Ei_o2o
znaYp8{VDCsmO~HynQL=0&Yw6`Kl{2yT4$~~^?92NQzA-@Iy>?Wm9BMY6xq|xWbpzb
zr74);uwe0PgnNv*!wqs^f1@8A!@ZcIH1C(IZ*E?G+=}N0{Jy?xx1Jf^;Qh=<Hzsx}
zC>S)ec*}LP{(?x`+q!tRbhBbbJ0FyY$iP8Jv;j*|Eo=x>zx+3orEmL*U$XS!n~(Ms
z?s%?v2P{m=Tp!KLL6^fc-*TEILiB-sd9nuFhihyuaR9;ba%jxIdWb<$w}pXR`cyLB
zf_g1({$ZUl1S0j}A42roYU&kq>0Z)EmwyAeNk}~y8o(qVGvtC>E5^_M$tMsnIJl*R
z{2oSTn6{AAu#JRy{;YqID>Me}HeN-8Zc%1=tL>?)s5Iv0LXAaW|KXylm*VVLZo}~W
zu;DEq9{v>wy@vXGZ`ahckN2KLiP<#o_vjO)GHUIk+33{_XtB#<r4W2G0qr_~<+TMt
zi>E!(Xr9`=My_)v8=8rEL1JIl;y8^Oz4yzl>keNRdXoPnL$-#Rb@qh212zu+3%50q
zXe5WO1~GJvOi!Nr(SQAOTd&#C=G|H}J0ia2Q5N+<#N@?sWZxv;#{cRa?x!-E7dT}i
zOgqA)oQ!qFgT)i%1hgWCJd^sdO#+rOnQ^CQ@NnduD(y*2&`ce`*{F{Q6PLEEgzs70
zfIgxne2CKzfhX~5_zwz{OEwtM7ciqBijWTE>9nDCK%V}vZ?W1#8xE194>u~Hzm@QJ
zr+nJJ<ht*zURLX}yWYxek?or}w?-fd@%va4Tz<bhS$4{1lLef`VjRM=GJ|sOAZdi#
z>Ow4wgOG{EE$isSTJ3IW{Vi4lWxFJpf!Po+XeCpG$hY>zBybP)Q^(^5lQ5G+`*u&?
zpJg_=4y>caylx-s?w0GnKLwzsopasvWyRP^t47)PC{%i|xfOtjlgxxWeLz%U%7ZF{
zDf-YiSc13um7KdZvSW2OIJ7<N9cNlzQV;d;X?Lg^^7JagI1ik`SE5x0W61K$Kkgu<
z*Dpm=T`CK>&6cn^f`L=V-C#Bi#p(5fPd?yX<cvp{6x^0Fn6=EL7JuUcO~fY2BJO~^
zp?n}-s2m2e*aZsF=r7*LBWvjKZdm){CX_JZZWHPuD}x#E_DWP)i(%QpW!xgv^3t5P
zzZUYyzIoq!aof=mmzD!O5?6TY!okaqdh5A**co6y#Mgbls7|;!K@Dc2R5K=R`TK{t
z-m@gmYudMGTOd26XG6SrPY_Ctlsj<feUTCTa7?Hs&OW?pU_wDqBidwfZvUoJQIpK7
zNEf1rnPm)nrwSM*C3z))r;(oxKr4LLzGYpU`}n~=9WX)1dMuaF?%w)XdynRmR`9$4
zoBi$Tp@xkTl&yVB>c{1c)AF9SzW5C_fKmeUws98;DZ9Z3=8}Te(RH}`{Pt||d%_8$
zT8IZVxk=A10d=Ppgk5;ckJ87(xNsU_AxNhXN)7ho-b)IsdM=rP3+vGt3k$m%h92~%
zgp7H2-nKr-OU8F@LL~^h!H2#+r&|V+_n)E14|?LS(|AFTA;Dc2Ab)7WEUb4tr#(VG
zAT?{kW2)~uBaYnnDiCV%GDa%lb=RXFaDdrwx=EOoz-y@4Mgg(5v(4{fh;MTH7twtI
z?{DBAG)M$R{j0dV9(a*ITk8Ba-j<-OjGL5JVMnIyy)?MO3W2zq7GRL27xa=3z6A=H
z{v5yEqkzv=Q{N<FC|#Umh_mgBD}8IZR394qCq{a8oO4q@*)w-TJlrk%vHB0E9s|Pb
zg@Z}2h203Ps|3el_+Ra1ePNr)5#Dm&xfRR=B8BZSmnbNx-U4OynrO#l0Rg{@U9Bts
zw3?U-GrF9iKw4D+sH&#r@N?z`y5@)l58MW`N0`GQ(AOdREO^h0*Tut{C8wd-4{{D8
zvjZ8g)TyqmUpf6XBCqmFpAU_7Rdinqt*!IU#@>Ctn8Hj+`pw>{Smy@u)f@hltPQyI
z&$2#F*@t#L%SbNOob1|<NhxKoYWGKxiFu11ZUj;(#g@iF2T>)HT4luq<EWtrlEe?*
zMy<a6=l51+fy<0@C(4lRd6Gs37t_oz5n%v}t&dPZ^&Qq1amT*Sm=1wD>kP2bpHC&~
z{C)(-!t+zL?QCtUUvs~J#XEyO->wpvA;2VV86OC-(YLT})~Nb#UKNci>PJ;oiXD+4
zSA=EOfw^JpeVKqXI75izq4bVaemq5NQWn4HT-LA^YT##>^TjK4&SsrtRLM2_fP0W*
zqBOL;^Df`V?IX$y^lq_u(FU*bK(QCeUf@%T-NY?*+Vf%e<4yA@U7Gt?NPl^IiI|VD
z-P7GM7`20q7wlZZn>X<|8=NQnuoXdB!SQyUCK1nBJeUy4A&Accs7s8<yMN30cAb~D
z)B5${ar0yZX;`M!-dGRIAjs);NKkuM=n7Ze%%OQ;&x-eRH#AhPQ*n{>{+Qh}ZQd`s
zh4NGIBp`Bp20@mtNF_A6p{J1b!YsXBQ6S#}AxNlg^`CM7(<%0At&o&8S<5WoEb54y
zr1me12(ffrsQ#mMQ}mX59Stqsd;ROT8pxCm7%xl+cWcp>0l&PX)Qmw7S&SSd+tiEN
z#RHwoKMPc4VyXz_R~n(Awl88~pu-qvd5(2ANjTH*^s3C>xN^!A;adfEz4jX-9@KYI
z2Orxzb@|;tA9nb0xn(Cx2Iv~(@blfB^o$um?{6l7#t#_zk0S(Xp=LiK`i6s!3*>W7
z{>U3Lqxyal-O*8HP$wTVBOcyVHc#CA=okFQcv)TL^S1=k(Zt)o9!sURNDtbIW8XB5
zhvDL5YylCNO-wK4hbcL;VwSXBwiNuj{;64CUxp?&I{%#V&ELEo`G-HbYn*dp$)iSi
zJqGO5gL_f4hlxM!BupCam!^aX)NlQ=;u$g#OmnSY-l$j=N4jV97AW~fi?s<fyg|*j
z`ijityyO|9=*EW9!TwY`=*H1eY`N$IH8?z@sIA#ZiZ=&EZe%3@^eV3U#M|JPA9{SR
zZ=T%}XT|~5%<u!=Is{gWu<)VlA?=g?6RBeoK@&9y1+(1~>bRI6D`md_sv$<Co&2Zi
zh|j++e?Dzcl%@dlX=jT!1%u6x{~Z*VbnYf8=6@A&UE#1}4gBb8<@@p@R_um6=5e&{
zY&H!#+jd>Ce>MGFmpjDcol3iy!>-{0U*_%NFzIyKsAVKD!|DYSfXmR9WLDoo|4CK#
zJJjJSpirmV<CMEP8fP3Km)JgnMdb@jF*F<^4?Ud;<W&|d1}!j;FubV@IbFl9l8=a>
zYd5FoWjTbVhGKyf1$nGK1RJrV3KWD8gkk+U9Se>;|4l`Qg#6+@P-)AK#D69`XIV@a
zri|nu)K>)4^8`>p7^*`Dw8gb#TKR8O2@NTHuLq%84?`W5@Nd%cL#kKq90Ctj<N@zj
zj@>V`qSgL;3*N<Mw#r{h%n_&5MwI?_ZpG04UDY+Z@uqzb#CV>#l<Rvd_Ud5c1`~?Z
z6@6q}U1J7(oZ<$1%vKefy21VZLo6xOR(GetYUI=VUqwk>%iW=z65)E2@5FzP%`ady
zz@7sR0k!8&tTs6FFIV`cdQ;l{tD~d((7bZ%{>tXUXs8)V`|yv;$!HjviO+XTiDl4K
zq^yYtYr5Rn7=!*x4tVZ_O&0hJ1`ENL+u3h$)UR@`MTfWCl6!du{v$mK9Oy@CO1SLH
z9Bj2UAzbLAPGtwpP=<Y)HbFD$0SJ|w)hd3=I`F~?@X84sdPJgAw;6~9=V{eLTCf1G
z2gx07?>hf-UNI|uy^c>zD!2QCucY(5snZDUL#hm35<h-6W2$r=oOu>HcWk+B{c7It
zdmF+o&z``!U~0D1Zr_Pr;~`pin;M;0rtJL4+u-be0=oaS3b`6{?YrXhggNNTbDo;R
zJU(H(cp4or2;M?0e6c{JZB4Een^9wW3##ZRGXJ~EgKc{1-&7T7i7$dQ6Y%{{4o*c`
zxRKV9dmo&$-SM?FhCq<0ip;$)V33_ZfjIrsg2Px$V92cf6N8F7*5U9kYBGTiH6I#K
zTt*Oa{-P_)(1>qPj~c+rvzr*>WP+mY>}68F7M_V1YkUd$+meUZx3kWCs;nQnL(l1w
zRPuwwszZ$V_(OCia$|mE%u&x`@-gXTF8&lgHSso`a%S&*)9KVikfMR{-C{Z+EzCE)
z+(6&kt(@T?XS$`gMR#g`z3zWP^?B!PM(>k?CSHTD9IgNQGaV&{Chfv6%F<dcGO3CO
zOWeehPeSl~6@+1OCR+~Q`g{U?ZLd}TGpA|+0)B6ZxsKxA$+@rlUL67MS%gAIJ5=nQ
zzSf)2*JIJokHPO@Bp++Da9cS~h_|oK_Y2cqZDc=$9@Q7)jLTn8N!LZpzpT*w@zToI
zoLzD^y!A3xdM<}gZG29za2|uX!6>q-pf$LheS}NLE{rW%mf^v9X$9j-X`whCy!)R7
z7j9Z3Ad2z_H^)sC^$q-bBQNT%fb-z#u^x)3=a3rW+$!p8VqHf3g1BSTo4Dm+5f~?=
z{H#jczd4*4%xK}xTZ4$@_>)qfDq(-vd`lS_)SeNvr2MB2TfYODDp8xApCqzTp|BVZ
zqlQjju$FdNq|5l=t~!q^Z&dKLXk6X1;_U^sS<t1oikG*-JG-o1iplfr$@VMa9gia^
zSQb}WPZ)mY99IjD9h$khIroOy-F!c~*|M!8zajAU(rsX5xSnSu%9*yif2;I?8S6Rd
z&f&2_x^b~bcquf~c3HnE0_6JV!{xpFssDo=)3E8?`h?~DF$ujqTS(o!2<<FuCcS#O
zAh!~olR0luz|TF|+8k3J^f@(4dlO<VXR4d``NyTyOaQwjfZ1__KCwDxR12w2UcyIc
zBo+3~JqVPQ>uzNlBWMAe$t?Yv!rW(sNZmk=c<~nyc}rUiriB$mRP10*0;b~`i-upS
zA4+|}T#qD@#SIzxM?#JJZ0i%*mBvR0Vmr%@udb2m&p7Ys;e_uQ{JLGieYMOS6$35$
z<I#;ET~*exRb8%ibZf*<Dsd9L1$m^*Q<JPMz~-z&aj9V);Q`Nw#UzP-U(XBN=V(1`
z6l5goF49kfCqF8HF*hY*ijirzm-75!a{<&XiC>Um($sJ&&Zdh(i+iu2c$?S^yr`he
zfsS}`|E23ziJh&3^Z9UXxqg!A*~NsgLJ7a_>VPn^f`c7wN=FN54EBj8)5nmYy~L(n
zc3?r><3`#}wj;C8X3}HJ$m!AsiT{$!xZ63t%c|0TDG^z&jf?zpScxzYdW}Oo6*2RA
zW+w8TTKm6@ch)_$-sisKfieeCI8=pekIoUs4GE2(XjoQ3NIZ>^@4FasJfMns;_KTU
z$WRM`1=tFUgUn4ku`I+}L#fU)yvXid=HjaF48x)u4ZW7#dzWy5;I;4|k`V!{yiuNB
z!6)1kdom1a%#e)mM2nP(i9a`O{6EJk7Wis?j-D++5AW9p?!yF08MhCT4d<B=7`cy<
zK~K{oO%=w?L_ZEHE3$M<9f*H5pf%`%%L_H?(S7FOZ1?E>TGjavWo_-+zK@_Iv>8Ft
zBF;vL5vO@Sf8>lOy_y#t{pjQ0EuK)!RM3kpve87XDEXsRZzDPXPKJICQjx3Hj3*<u
zy+}n1tz-*Tu_<R*w-H!EF;Iwr<(WC(y6LU45&FdXpy*u-lp&5Bz76^6az3G(YKd*-
z6B+TdUYBAQGayfG;1E|}C{GyH0O;9)xb+#2ac3`x${434w19vTLiX*y$chzc41W~?
zhtdz4Mr6{$-ieNcS5}el2P76*^kgHjN4|x;ibItDt7{d(5xqfqya$R7!*FwA@y8g`
zc#0?TefoVv#2Q!8$!gIKVZ;oqn2MFy)SXknl*0_P{c<j8y}!HozA^WfX%e&>hcC@-
z;H|g|(=g`p2i}t}lsBzxU#2Hy3XPCLm?xCcIt_!OjN)Uh;O?JyBks)i0AC_Wa%(b>
zbJY`hhne(Y1hD1|gMi^g1he}>S#h_sDjY;aazMVnI?9~^W4%uHNmW;kpU3{J8C+DI
z!6rl4c&K5=PR07ACNq?i+V^X1Ikg>NgDyTi_1Ip$r7*~b7bf<Iz-G^8xfkewnqcQ8
zp_uvH45s$4*cd)N!MJ+NpEK$Agzx*Zqr5a+G?PDqA5*@oIN@Vl$X!T{VIu@j0>-%t
z2fuM`p(Dd-e|lVgj5H~8wIi+u)x%$=0X|i^u+8byF%{*{FBJ_zO5xqsDvA<+DB}og
zAEi|@8KG^3Y@XnbgG^qW%Nucm)u5-)q=5T_o1=l1ytV_?U*!ZVT`FWn5f&}=)qZ<j
z*wD*voNdU-ws%hC<y*wQ$ANyM&cwr?u1XQu|GKce1HSn-88AKJqdgE}!}q8#{c~FW
zE}<#cl7wTp`1@EZN9}=tB!n?A5N9YqSx_Fx;~SsOaC$r&4a&NZS846o*-QXq7ypyZ
zrDntymFCG{5@i>dsqRRde-&7V$)p@{fgJ_#P{qAGkW*cKo34?epNtL{|4|NQ{;9q?
z#H|tWT^E8KPdK@B2LFB0M|7=oS}Wpfm}<-co<?!^lx-HdjWJj{_!1q!gpA}y$Gz1E
zuX{q$Ek8r&Xv$UMDBJUb9Y$Nt>Z{B(K`9IvB-7y7+dcwQ?89U91F1O4!jUiBFP`I|
z56@kCdBLi#WzIrM3OP$Tv2&e|v51$?(oaY0F;kl!zk<v^_E@)6NUs_sLtS?8Fc8L&
zrQv35Sq88bEr@N!X1i&V4HT5pl2T>Y6k451a{V^&nF!!eie#h(h!p3n@O6K)^JP*e
z3eorSJQdS~3%rax1L%HQ@93$=I9J=M<-|;v9&dZob@Ph%Tp)4X|C?Bolz(@ijaMD^
zSCCpJqiKF`nc<2ST9n`>4h~8lBP8qY4s$8Ss4_Q(zfd5|JsdNPm(jQ?&T`+LZsFag
znb2-jgg=I(gAFy->^}vf7A7Lk>Wz|=MWc|C@D=AQ;!N1FFbXzvC9oEj(~Hu`qeSb4
z2KY6_>JQIJKF4AJ1dejDo!Ocwvok(ItSMJNa#5W<DkfDX0uQc1AIs#&<BKPGU3Mkh
z2EknlBV)`r*25WSTkT>+v&LV`1^?MhwaOIZAmrC}&|v8`W*nE^CC{3zL@LWA{W=3S
z3^Z*i?nN$>!p8WTx-t*BHU5y(mj9K-wP3q-J7oUf-Nb6uiM6fpWNI}+2$26btg=i*
zdx7Oq$CJ-kcS~oYo8}P_Jg!hX2=LqK_Qkn<%s_*Y-vm)fGP&NdV%xco#jA~UN{^!9
z6kE0zYnmir^@SYnVZp)gq4@ehP-ot5#c61nkJ{wc;QE;J<;W2d$sSdkLvtC?;YgIs
zPZtE5ayvth%pmxJ5nP_zLMVrocIBAjt^kyC>xsWXrH!qvn;sok#ie=dyM3qda{-9~
zR~wMg!gE9?`rXpH64s=<8}a`d<Svg!%psuY)?$5r3<-~|UUcVnC!-dY@5+Q{<{>V0
zzX$mP<oj;nZa(q&!REo#5|vdmsj$oG8zO5u&tsPp@bOwBB?{7d_x(6m6hg9Rb_>nL
z{^lHPKNHyIJarbV{<5jK&pU5Ya&5&69Q_gDvDYg?4?@uYmXu^=R;o$OZ6t4|;nQYw
zQ{rr56bWLZpbj|V<K722qjB5H|ISiK!f&t#{5oJ^2DBLGl1q2RN0?m2kBR1MMNwq$
zMcY;+T#Z*lLKhI(27D&64*z&CMa<(m8rF7&TYZ6{4-22|>*_WP-(?GqIb`VC#amyq
zHlCpL^9dFYkYCkNrzB!u3#<&<^!U$ltQU@(-Ttq#JJ(w*_%RRiyY1MdzB6Ag0^{Q>
z<aMsJx!R<{t7<c*Pw9tMf|VnWUv~dv$^E)AD@wgGcdD**CEr(@VQR^e-4`a`z|niL
z{T`iix8m?bYCA1Wlb9J~<?Uj>=A>Bnq6;NY(yb|s$2*KOkC}i|G&GHoI?5s%hwM)R
zw9~X~ecq<v_*F=WKUMStV*LmHTDB3bni0%)W>wV8Ar5#AE{%R~)I-S@i;uX;PO4mB
zMU(X03%@ZFQ{K--SZ0JeZLF8G#pNds$2k#|4V8}1tT2D*l#h?;B^Lt<@=m`en#$xa
z7peS>*RIkvi+a?t^EU`%o%*S$aNSg0!NI9Ir9se@a-O04zTQRbwZm>NrJ=20y*FxU
zzblC-*h#yTw!*(%L~Om^9k_k;{q#huckvzQWRTpTG2ab6+a#<OZV&UM)pOTWwrhz}
z`!f^C)tqknrv$4BnMh?RIWR$<dW4mkR`xf;>|JP{tmm>)mVyqh%zn<qb{~g#(|W3Q
zMO|-#>sS5_2bhH&HzSWtl1>?PIhyMweA8tvOiFP#(~gIvFTqBse|#CyV3}rtBVRX&
z5kOy1I1ydZsT4*>`>q|sL1zpz2)ma@6+9Q9Ut7vPS{2&%8D&JSIMj;LL+Ht|({>Hm
z3x-clV8coIcy~=^;f}8kcCDeqn9oF`tVIP8Enf#NZdk;ErZ%popu^($dzc?5ZuXg)
ziI+n*zMc9r3;qU=9oNkt*uf3y6i+?cZvz{%%rAKYDm~5=^WE21hLl~^KJd|KdviS^
z>W_|9Ei!~?`|@6dW4);bA6?rYA3=0l7FM<lEAHlU7Y3P9@Q3ERJ?KpPjN8w?GY9H@
zy1#KoU)QJcd9HVhAWRuD1``E2lfSC0<I4`j@^cljDZ+FQX<WS>@&XL>%h#w5SN|mE
zhISkO+PA|K1g6x(|NJ??XE;j>NQ?@``Wy={!REPm2H#N324w@H)>lKY&yN<MaAcWY
z^v!JSW)VWDDL+8PXyX*HA%1-cJ|~5aDGgDbbVYMBDrh{m3M?o3PtvBf3Ihc)Ec1@d
z+C-5`VN&}(xhkKjcNIo-X}+<l5aXJngWO1}L0iZvsG;MEkb;h(+8VA46vM9BPkhfR
zw~QaBlDZh=;xF@-he?8bg(=Rau(`r&t7!S6kMHNd{3h9dkiCR}Vxm(A2AY0|x@iVG
zUDf?3CsYPTIY!-@Q42S=p3Fx4=&IlOJIX0(Qjvz5#VZMa&5t;$8eE_sxKCG$lzlQ&
zALQDdl>2WmTI@iQAazAEy8j13K)%0hAyx5Annuqm(b}U#^}$5XKb+{rBTCn*sjkHe
zP3_82w<K=*!z0so{=)f#7d7*`-%n_3PLJ}A%j`MY49q&fW+NxT16j@AqxM6A+G+u^
zuwBOg=Qet_9xQuX1R-)A_)i()P|pBRCI*~21fuxLRMEab>YqzZGUP%ES11~trEY;Q
zHTv={W~={(!-xJQaAc|J%3`6A??ZoO5dGy5^cP1k<c~$=zR@J-xk!~m#fPLW0Nrv9
zR9{}m!91{jSgJKcN%BzrYxv{e{%U1vX5q_K=ihGqKQ(^QiTJ0d0}(H;H2#}M_DXKd
z^Ymb!tA-|XYH(Xw4qh}?8NF=H_}DpXC;LmA))cT|V+G@DOBgKYR6bV>W929HIUkFQ
zt~{~m$@w`Ut1Ch_BPnT1FJ;;lADA5WFg&O+HGdHA{o-fU6NgT?A~*ZX)p+k`$P5!z
zolDe8RiTxpiq?UA^VdOVpK~`9`qb^m&)NDz1vhs-8fhZMq(n0ZRL&9@JQt|ev<h1!
zrERb_O8YaNzK-Z;*3!!~0~K!y=&Jvi`%&~aZx}g@%#m<ak;#Dz=IBys)7LLhrVQXX
z;0I>b;qi|u=oSqnnsG;mTZMwseH0vExL-$)KKbXR#m1fQZtBPWK<ZLiqOwM!a)GP+
zu6Jc{W!@iH)1RNfU}XZM{i`rGID)}aUl@oW38-sAv%tFM&QuQu_wRcgPaK$rmM4C3
zQGM=DoAL4s?hZV2ysR>SZx-Fnzp|s?_sJZ_2YfxY$xVmPF1o|lj+Vx57#|&)*s!J_
zJJ$DM)7moDt}S6`xRgjI-)z-9RbBSw+_W$EJPJ%N3U_H4ZoMTCrN-E@op_ncBzrm0
z(%7?<!gmBV^limYT(cS<3_hmr+;iV8iJblORy_4hw579h<oOq^K%%FcsaUu>YR%tP
z%<GWWXPRQ$a&sAA>@xNYk6%-*ExYpI*6=&vUYG96c!2JLfD8n3SHUm>jm=x-0LlVv
z_rbt{1Oght0Lff``T<d%%<JJPLBS9pd`BZ+kf`)W%9B14J^QIJK0?bE={5)8VJYQ%
zT{Y;|!oI$R*5KwtOG8)qhlj6no&NIzue3Vv`+<-#(lkP?U002;`lygA{{Zjc`<KE!
zGueA~#`s^h4xk&|yD9w1WDMWU3m1byPOn<$s?qZcV)W_(fBgFKfzd4+Ru5w5mO-4g
zsSoSdR503C3SBp^qR_>{f{#N79QXeFB<7c;zub^$CK@rX+ok%JS^R)Y7rW-@$lMyH
z)^<1F5Ic@elGM7MoNwdcqAzdQ^^Pb^@~?Q{x#Hu(`{en}_*i(djP*B`BiW&K1TEu*
zSk<`=#v{Pi0=vpoW>ANRfjR>}J>neto9+ASX$kfW02$w6Z~^`~8NYQ3v>w3PznMxj
zBL#3|$|Znpc<|5oZ&(vl!*ys&utvEE^p&)9sElEvFx{IPiI$b56e7$g!2AMmU;)6r
zuH*f&qbja!7X#5Qmb8{RA(B|5QB_X0*-olPwYVn`d}9)ug@iL%!Ar~me51iXKf34r
zLC4i212P#qJBP8WE6&9AqkZF-t{Y$DZ<-vymUY9}w6-5(gQc*PFC<Fjuu^yA@gu^0
zcuu+V%L>a4piTmn*|rU)>l$OHgTO2<m1$iU*%-$|Q$%--zvlwu-WnnH4w_ow$+^Vc
zz2#N)<z{2sb2Iv%W9I{}i__|NFhD{w=1hv8ja3N8H{-7?uG2{xtg#a4#w~oU9O}Jw
z7Jqh^ePp5^cKny_&WbvjJebKKvhm=abF+g)+|w5f>lq;*=HByOK+yQErU3?v37Gc3
znNDN}KzjiLD!u4^A$WnLP<iy}d1czklXV1|CRj*}h&t-u_zoFwsA;S7cWmIj&f>e7
z`Zzs~7uf-11lMmg_?%x9z8EPuYGl&Wt1b=X=ye0Z=#`U$6Pq?oj$zZ<F>F{pjPcR_
zsN7en3%IJ@l<s0xx(D|tcd@G6dJAZ^88l<StfPNIb*)jpW1C7T+-2=Dwh2Bbl7=w<
zF}9YK9+?xMEZUr_`5hUSM5q#ZyygU#?s$E@878k$E4Td2RQjPm|4wUFEu!g^Mg(oj
z&C`P&G~Tq|>}gWHZCiPE`Y+@4_iPNxT7|~oEk)THd{+vLSBi9ei~${cWi)xZ0gkKS
zx)Rb?Qaf64DM06CK|-1Va6KVClJ%x6z}M1af>T#${CThTd0(?v*88<9&YC%of<Gud
zJ<=~!X-sOrWHO|<4kuhuXw+g|ZN|EuwwWRP%_+PmcZT$7>lj`H2avt-ClhRZuOM7K
zSn#lVb55^+Wl^rab*Q}R(#hd*xoOQ9&YB#-hBZSN9_<fZ-%pxtA(tCM?q3#i<!Bnz
zY8tJOc=@DA(S0WV%Kb2kKW1478#`a<cJ)@)U$_6}pIH5?u8yYJcW0JkS|`8(*-p)o
zTopftgSJlLCVjz0+iz@s`N8==Yv~KWupB+~?01ATi*$h;0D)}Oe(PxQImW=aZ<krA
z9r-oJZ?^hmEj>&BHSA*ZR?AK)fS#Fw%rW$+-*#~W>hRh0-VwY!NxF<Yk~n~LY0Q@t
zj#DT{Yc_r=T|75MF_0K3r0^xd7~c)n{Cua-UCdJQCi5kn`=$YB>;E&+ziQXWK$#bd
zlDcXbw^3`hvD~PtrF!*nD{4HgW&0V0<)>PD?y)u&j>f1~V^NP9?V4F}3jJ-Jg1r*(
zaz4Iq4xp<vXWn?v4dCjLvaeR}^swgU5>~%ruz%Ght41f>4U?;I)}~chvt}q7=<kc9
zCuA52*=P#+_>^#~)x>Qz6~d;K*|tKIS&E)L4I6xqk(%Ed#T~<kF}!ngf>uG-&e$9O
z&=JA2fwFtabe8W}BkH0QR7*Rk#SQfNXSrL}Um7;{Eqt!+p4ie#rlJ>e0vhp3!X<MG
z$8pRy^DGNsHl7vkv<}GB{Q9KzUxxW-c>lc&zs?{K=i+={3u>Aop!;E&E`XGrfJmMM
zWHOSZ-NR;cF)tElaZ>x~nkhin)yR3&0@PSN(nckqr=m~kf9EjRNzUz){o;z(SH!lz
zK7Z4W{u|CaADhR=!*U^?crKLhCerm2NYR#URd*Zh`i8|uZNp-<b^F|61IOnZn3}0$
zes*cOR$ty%l}itYYU#n2Sa>{i77j*oc_l<OYDa`oo?h9)_sIct4YTO4Ef<orUz<xe
z{78R!{JM#WactVK9-B5yV$JH2sIOA0(_7t6gsiuvJ9{Gan^h&-O^qayZ18+D>b4xo
z%<!8vb{pOK*=&$B#%t&E*%6qtGMO*~UZy{uDcM@Dz{o$Z74HTAx)HxKA=VM&?M{me
z;bJ+e%gOPpqQ&aWx^$-cdu{QLzib-v-~2tIzfE;}IZ+7_=@d=YQ5%jOfHj9KDd6YI
zc>X-kpUHl8GXS$?)H(rv!PW_o5|0J@vR?l;>;trL08QOx4k*h+sQ*v=eIsgW%M<>c
z=8<LE0Z8PX^;<#|3p~r5e7Dz2hGv%iO@009hL4^#boLE5U37W4b@kS2lsf*w+1O1~
z>QX`DN)Nv4qTm-$$`7M2FT!<|RGqyxR>i>xP9cQW4Y`suOEW92i>Hn(UwrgP{ilu{
zYhdPh4fFH$<wmpiconl>t)|oW)b#Y8rktONoO-*_uJM5PH|yG*j4ix09m4m)0hkZ7
zlHXX#r|14+S#J5yTeqF(UUcbpY}!5^_Luu3+Je(gq)QS0;B?|Q8x-9&VwycqrCByX
zyp}B5X3>}X@g@Lr#J8!xiOM$Pu-|t;yl#SEyItAW?vz{>)w_=Cn?-Gdn49X@77@<_
z3Q1cpPPD&c(@pio`phrIjT=6<5Pjhb-+sAeTq8|^)KStH8Bg|`Ou(k&op_XycZf!3
zX97B{zs`(6w`FMGF*`MAFW?^J-~2P<0dSXrCGkxuVrGUJ3*bedlF9)h{h3i=V(>YX
z{%Zs|V5A(QZ(U@Z$ahr&bl>Zd-1WOlxcKvzZ@;8+)%n*gLl=TQQ_X-rZ{L;h=y@GT
z>1fqT1?n-d5NbF}1eZ86=Qs$w0L7q;N^uDN{VJIpP|5c5+seH@RNAkpIBB`_t*Ep(
zA6`9oIK2A!p%BLpR&iwiOgOi&_{@r~Jv<*By`v`Po{V#~sg_)+w$ySIhBVXh?XrcJ
zMyBvRb^zv$7^_@%PM^5$fmH*${Hw3OJUaifi8_RI(@4mL#WZNt$>39jEx~Fzq=Utm
zYDzh$x#)SDi#7Btoj2cG<L`~`qW5=Mo!?!xZSIpfi4Ob4Is@}_^KDN(nt_And9q!)
zo##7AlHWcjSx=-R1n!W#dHogj#*@pRkG!ezTKwe9w{ilc|3mA&2)A%NQs6X1H}1DH
zAHREkW-`#$@tHJOch#5a?HjqUPKuwg{|w4+N`cJBbtS<phQLp0-hVCw$Qih_NLiXK
zzz%f-%(?K!aA~#x7d?T|kv4*XCM1vUI+Dp0-{JM*J0&sZzxo&Z-LwDOjpyGGZCZ6+
zb9$*&h|{_$iy#rFMiq!42$wVkY2wm_qLhH>k_4C%WjoXwX<MQmIhbD5(m0L0^qmxi
zU=XEBit?aRXAOtp+1Er$zadq^Y06fu?$6AG=gk~yop=1X=8qoTzl_<#bu7)*X6I{5
z4=l;)uPv+DhiY<R-?EyWZlW56Ve=cXh0M`*5e0p^H~{lu7QD3;KR)-N4eKt)Ew|lN
zzxu6iaCm<joOqgsJ2aw@w#Q1dK~}Nay{S#DU79*ROZWMKJG<*`EpHNJoAYOKc%5`V
zGf12EcFKcHJC7AMtzQ50W(GPFx2(RIJ+lD_&12hAp(m~HJZI-A95mYvIo5xHTs?jy
zNvCQbX*q|lPEuk8ev`~XBrTe?)v^ug7EP*c9aiQ9Iu>g{z#iZ)a{|2@05)sr*#XE;
zlR3iYEe1Jh2~LkXkQo9pO232yNCqQp8!#(RBvGu1x34j|z7D6*MvkxnHqRG2j6?LD
zvKaB+_-8};tv_?~`ERHW_OJJkEL7cW%94UZ)&}JXMMtvus+mc&K(Cbyqo6^J5xVij
zG4*vML53QUa?otKJjU%Dqp_y4^gU8xN>L~$s0_uJm`K9)=SNCkA1mHtu3PTPQaC()
zFuZ;G+4}9r_AFy&{}QH-E-ub3Ej_lZmmaRl#fN5b{QgBff1<9I!*<ll5T~BYimuZP
zNY*dk41g~F0xtNIiGlOovB6g~S8vmSK!Ta)1fmuYx4NsNZTpJbS{-o9MlYIku|`Xm
zvt4FkqCH8=v9h&w3Ynkis$=mV8VABopr=Hjl(u7pwqCY<wvOgzM#Q(#kex{inPCpS
ze`^vByZ*;=^^JgsL>NWxmi0G;_2%4_as9e?%%z`te|IHt_s}|S5g`apEQx|Eh>T=U
zhU;&-bvXehrSCO*BlE?GzghLg1R=AQq>~Y3Pxib{eAZ&@WC_`w3<yYF0A5zYl3%pb
z1FU^W@@7N=qJNW$&#Fp{v2{%l55qHEfETC%jH}PN19HfD^?O$LpZhbfxbTftsFC3K
zBF*~~*g$xtVH>jYP><R&??#c-2o^L;z=4DfjIx&0NQ$wnIsF|`Ehr1Hs>F^2Q<v#0
zZ7^=N9W1pSOfBT$9e|s2l#(Kq`C^LlaEkKkIN3hgR@*L!l`c{F6r-`wtjr$>ubX|g
zcHPvoRh-zrh^fOf&6$O{N9V$YuT4cKzA%UBr|M31siv0OahouS-YmhaDSt7_h3}CA
zFy1`xtQ+a`cKqn-k?X>Rm1V!(?!)XM0`lyhDx*-_*<+UhYrOg@J4`6$VHN(?Zokcb
z#{jr3-?K4U{rpSIl({FN_L(@8xsx5FA^m<%zq7uxO@ZyTrUVVVSblxyLo@g6fPl7L
zXi5OHt(TpRPT`1(ziGqu^~Te4e;@frzq%4Va^(4?fJPjrX#yGqVm2U6){t||Bzc&f
zU>u*R-Me{9Cler7nzaBsY(UcnG%vT~p=`C3)&JdcsM|s{#-H7cQ?i=>ObIp)h+b<h
zr%~_)3wIQTA~cj|5E9KU{@Y$F1%JZp7q|WMWdFIZzvbc|s76UKsJ5ysF_u~~gmDw3
zp4ibU<I2KBRLN<-BI$8RNjpd>Tj0q@?tvOn6GLb+EKbReKog%rkwYMoBRL8xZAhIc
zkx(H^xqGPAeazN`at>(eJ6h&*34%hb3jGPnYtm%>WE!nMH-RqFrxhVwZ21dE8kf)S
zS-kxC;|srf?CDt?KfF?(TAF#_ggo)7Y0Q3kUd|m@N~h}~k-j^fGW~LJ0Om!w7{9!f
zA5*R@CAFmLKKFD9K~5SW35(oksdv_Ex1H@SkkXS4WNWX@Q)Iwi4<^uQ_jQ3mHb~3n
z%O0<n#m5obf@1tfB!SVh2Fq->vURrA$mb|%tLiRC;N&(T7ubA_NyVeC#1DvD=qqlP
ztH#eyqGPo$wB4zlVKPm-b9&ynBuQ0@R4NdmhN3M8P>#Ab0{2Af9=2a+B)GRE$QFKf
zQvEK%(J7ZQa#8nz%@;G9XPh3<e_gKsjT3NtoB%8OQu?10=r00m)-<><XXJrDj~<8q
zO^m<fugML&uldSI>8wkyJMV4PS}Py4;s)r6iKN9De@14?TCLf?Not%Ime}12<OCcO
zFbGUFi%)EsVrMDnJ<6DksU)nxC^OSX#v=|&O3D;S!I>AKNKJE!{NATNR4S!x)5eyT
zFP$3T9iuEFm0m8DK|VoHPEZ)DsL3@tntaV<a_&2ol4;wm9jh1So>{)`#G`Z99eZ*C
z`<^|4Cr?a$et&TAclS2${#qD?`upt!zPBZScE&vE%QS(ElNO$OvWE3rhao)$-RMLa
zo<%iRNVk^fqZ75et-K7JGe0M&tm`Pu&kb0}9Rnkf+xdAHi0L^PbTF(y?sMA=fVuKn
zx}60aDnU~)0fw`VY}(GKT=Q;Bli2i>6`jn$c#w9x<*u2yI$T^iu_dWq`^zEz`S*M8
z3qi}g1yY?z-l~)B70BKe>npSw+&41|*@d3cT)xQ;xD2Ln`8@isJt14UcbAJ&@{{4G
zy=jHaoB(A2Wbm}8#FvD=!|_PI*susFo%UTq|5HqiQGG`<!A2&m!>{_LJ^mr5U*7)N
z;nKECuRQ1N)q2|t+DQ{qx*cU9(__pcxcRJ1@n(QY0|pppX%><g!WZo;;H|~>y))&5
z>87whmBw+IR;L9!>3x)1appivPqN>4HzP6p!LMIx&~npQQd&aaIFNA;auINz)6%<7
zA)ibApc11vo}jdTDA{=V2DRb#9Ob^KA3N+m^^u2O@wva-`ii@bZ~mu8<i~z^C7g@C
zpHAR=>Hw6Ejz?*zNC(D|F^(UZ#o^~l*l?DQu*!@w#gjC)hV8uMEE~vrbhhr#erc(>
zhQ!i40An(43c37Ex94xXNSD2L64Ym+yzQo$Az3PFO^VMpXIpUw^fLRRDKpn?5&+eT
zT9sY!uUmu&0yX({bsYim*j?oPjq7i$hfgj4*FIeIv6cA2y`~PdBpsgOPdM^Yirt|e
z+n&40=lP<Sv|5}aEu$md=--**vtE$@&1P@tJKgudTx?n2Kf^rOwf6M?GeQzM0E+&;
zOR{Fh;OOVn0U$eEJJdoxAF^g3sD$B<Nqke|_nbc2CvN)N!NTV2F4^(6dMnNaQPScX
zgS7!!T*PE#?8q!p!vJWe#_zO9EiWN;G>=q}bEfjLGc08d-ue>bGqlMfIq|c4h}`}(
zPM~us(C_$VvLm3ZKrpVrWkW{N$}&U(NXcn<KqLfO%7s|=;4T6FJ|zpKM3zU}sElj$
zZJxlTzwqktoC^+zx&QRw+v?AxLr<v>-r9<4_N?_w)dAS3EUQn|!+9CCt7gTzSi%GM
zO<}|44JZw0RA=eEGSQJVVK`Cjl+|7F%1$qyuXDQ(&o<(0%R9rw3{aTTYznu=JJPwv
zKzmw$_B{DJ`m<~UE}u6oz_j<`4_I)o*_QaMc$KZbN?In`*c#ek71olw)k~(~M@qQ@
zZ57MD{3dr|^#xJ;$n?Lq+(SE}geK$oxd`N-*+l8&v?6^_BNR;AgoH`CS?%L_8M}$}
zT$p5Ozawn>uZQSkQvWQIGXJKmx${7l*w4>t3TLkQ>3PWtNUqSy8RKU`5UQ66Wf#=(
z5!ke<Y04<Nw6f)gCxL**Yv=t@w@<wKABXch-gL>1chuWS&X3a;HT64t5wmt`H(RmM
zpFv3z^{EVTa&`wH4@l7lVa*OmB^KMUrGhbRlL?s1OLww`j0nb<hh5T~p)*ES$y^ik
zyM&wsWrL2%xa?I$r<MJ!%(9BCbs9SwZ7I-ddssf^qi{@P=wJ;)uc*6jajbOHMVBq#
zH$DA|>AACSJBGXe_4{M~-?Qz&=F~%V>_{s)^vqKI3E!82a=jGuQ!}{#t|gTF9Tt~l
zRat(MyDBs%rvj$lrigC>TUI9Yq}IlYc`X)4e#Xbh=*bC?CLd)4RFl$IBR{2jZ#w(E
z{d>BAEZEp7KR690M_@SdM27M5fFzx7S4b@>+h*0wPDx?fl35rvR;BpTa1bV;yL$YJ
zWT1cN<^g%rZ(0#f&QX+(6D1=l>G6G9s7cH_WBdk*w~^1LwHdJ2CH(YY0~vPM=@#@%
z0~*(q(Wh*BY@_7!E?_b=2LI?B{Oml;iZi1B($~>Siq!)#RO-Xwe4KWZbeI;M7G^#-
z;!Ff@`Iq6sxo^67$J^_PD)?>E2!vx+sb}px+ex8fhR&41RmNaM_dEh~BVGbIZk0gN
zZr7AHF;f=6tHcEFC!~cdw8N2ZBuS=HDf#}iYK(6rYi{pnZxrc?b3h{|tW=bOzmHNN
zOtosKT19*VqQu<V%KW@d-_zohwpsW>JeOt*XtXt!g~Vb~f}G3YzK=(Ee4ig|7~P;8
zwfe_g$9<`n0LCXKs-~KH|Ibb@KXgZ5@vORoeBirnJo>;<jE?3pu{yvay-TE{Z+GH#
zx@Z}LkJDAtPV24VGg6Le#~GC0fPyCF<#BnQ@9$+~b>GyE6prPwTabYx26NrX>5w7N
z*VG0^E*#1DIKFYDA>BKUa<tKh9TG`z8!W+;Fx`@yyU_f)$Q)_?N8Vqz_NHe2$+>s+
zd6$2DIr{n|l#r$=U%~~EvxXO0<F~E240tn|y$tVnjo(K4P6?1@LA~Wv1|VjU|9J;H
zl`IReQ8vp0xC>&#24f^N{KE>sz{b%Oc}l|*`k#i5$)HFT*nR>uB;^Dcc3=5FithSb
z&fET`dMYbHl+g5}XXpO-bIsP3m`)0#GnS~8Mg73Yle>Y5{yY!W)@ajOc3Qd4a}Yh5
zq)l!*%Ua1XNX<h|oVA<z2Et7k&tOa?bAp!5$o&QTe$r!;!|37)rmWy{i5w1ZU*)G@
z%|rqlX<mgp4=y<ojgfJIy$=@fkvondFC!_$fDF9B)gtjM#p!#W2Yin*fbP*qpZroY
zn!a~x@!>+==}#ysr|}}ba>rqWErq^O8ZR{w#D-7%mnVNUG~TRRz(SW?GT1s_nTTy>
z^XYqz>YND}h>`!q+>z$!&0-2W%WoWrDG{=4fHMO7SQI_d#8``@3oa0xb~<^%n{51w
zS&T_P(+*_=-B8L?g|<*6*p9mnR7FS^iE4vNfw75;q9DESv%WjxYTb$@3X;y9qM9O0
zr!0w(cSrJmK1#pY_%!vXY5TZMTW#vvZ3$*nV0)2f%RTJd+Tj)17@c7U42WgXKXW*g
zVrM)At4-*ze!p4h5%|FBG8v%D^leE!G>X79cufkT6m6UU<KF9kz3goLsdKixxehrH
zP~@ivO|9lJIrKzG#xu>$q0Gvd0cAn7KQR!zh1jEYVg=1=>=e~0(nb+AQZ;J|W)Yhr
zdD`=pvI0_iiW7k-&hA55f{+~b>F?s68%1`$5A|sHxp-$I|2%sxTI)tx0DsjS`6GUO
zZ8C%Gu~MKFQ|73VdM^IqQ?od>w19>ZYOdKtqG|gg8NdBpUb-M)mIX9)O+WBDu~L~T
z<i=Hyn}Cwbs4h?AD|h7anm4UQSTjb(wRFPOcqc$pYHMcBOpTkh1FfNR+Haz*y;;L$
zAv{eRb9;cmEPJpSMrRU`BaIco$O?Tcw`HD7NQ(B7Ck{2doMD%-p^>xpY?i_6#pwbz
zAXKOM#TbKi1~w<jiiAkD<+|0^CDr<gv84IR{~G%b{3fb0OcGU5RNL~_9uv|{x@|{-
zd&x;%IzzXNx7>zq>&&+QdMLka>zrhnd(b}&R%2^riu@i2=Z@hUT>wk{wd)ILR%0O0
z2poZW+ed}^y!5EFCy@4r3#nY!#j4=#zm-q7zI(^kH`awe7KCww$zmCzpPge?>t|#h
ze%~lS_{IUd1<ejX<cStwL{iDPXoVUP%NYF2#7`~Wk&Qgl=WGE#MRSd&hPObY6*pl=
zPqh&j9!7@5W)I5Yzp>;hyFbAM4)fSdn(AR98pmv9)fq3L>qTL3t%omsX&#S0bJT1~
zk|H@Ye*n$&=)ba>^h+BA%ntLBHsWWeJ#Xx-N9Tfn-Zb&rx)grk=Mp@({}Ar_YJe-R
z8bzy-^2N@?px$g<^$gzF;U8n@mI!2xzZ0>0+kPC)dm4W>+I5^lX7BbM1oBuV9Hx=*
z)o!=fQkfzmv%r#80r^GSETHF)3@FG%CffL$F$sC5!9K60!f*zVod-WYsoVJO+R2-u
z+OtQ0xmX%;>b3StI}S%_I|e-;U4k5inSyK6aJt5rwPKZxYzvEN0!&`9>8X7iJ9Od>
zx50P}lc8p4zg-4OU(JRx#vh~wAhVKyoe-tS<oGB<puwGrM(j$ow2P9a)WyglMq1J)
zAb*wjnjiGqo8G-;%Wd@_zb**ls%5}+i?i%Rh!DzUh{X?Ce#{qe@)~ZD9Dqsx$uZH>
z#J0w!m214E*i1)uCLc3|o|OeG?;+zpIJUH)=O-|e6D4V&!)$6YGj1kXN}*h>nU!qH
zgzgX-p@94xq>adzj%ibpgaWULC#N7aR&DU`%+pQ$+n4r1qYl^Y$3lI^om$zi8tT9Y
z@p2pouB8ut$Wy~_pPIktRcj`044cui8w3#^x^F*5$Me{*ri>E@QUbd=t-<clPj`xs
z>-<hx(Cz(YPQc&*Hr=-|zrz9OObKS>qpT*j4uR2z4(UfS7}(n~qzjQ)x+Gcc1Ab9+
z#3AiIN!=@<d6RESfFWTTso+)wgHhb-FclX^SzD7+bc>P*h1@#1det@2(b+qHL24ao
zp%Pjo$iyDo1t7hAc2YJPXT^R8yrb{Afz)Lv8tz2)x@~l)+=c^HMy9dYMux0g(2v@9
z26Hfzeq5$`HVYtwVSv&sJnioT+VonqgEVCz0BM-`EA47jaxVMxMq6CBX~Qd`N@aV{
ziYW5CJ>|JcI|vmqpr$cO#yIFJ4Ibq+oD$%bZQY+ELpQ6|+bw~1Xpnz$0Q|XTbh4i5
z$?SbHH~>3H4$@?xF_n5;+8F1_+$|fm>EBE=I;nqTfzoUQJFEX~IhK(s={(5y6M{_u
z<EnKM%gYfy^wGTtlSOzA4JWDS$zu-}+WP2kRHMU7->>NZeR2Ti;!9Oi*PMIa=7i-V
zh3aTwu(UmCMvJcNRPm)RJc~EK<!lU&<ghT6&`KH863p^d3kjLF9@mMiG-rf5v$~(1
zgXsj&5C}ne_WP3^Kracn>kK$ZcQSx%3Qiaz2^lth!W7g<s+ZPWhXUmx!55??+0TGv
zjaa7->5}2dQ)WOJjX~lK(<WQsX?luw7D>7!X@$*eub1s~E;>?sO!8JBig5H8bpEy$
zr=b_VVr@F!JCEP(3RnQlMzM@LoB=*oVoYVPl{@}6&&|008T+quBL)oh{)tylQ4K&q
z>&xkVAT2-_XeohEIY<};lx&cR^3ZOUuiL)yns8|Fe77Ek#`vF4lw#TveXgc1;o&XI
zI}ioHsQ_+8z@d%8fi<iUh?+puCas99?8*kmdg>f|DKWOod<BDV=#D6=ooKYcAa?>e
zy|=iDWis)mqn-{Gt4vve7B11~y)+uBokgllFOvpy7@9OJ(ht0EFBYp)aNGpt+=x0d
z_n1Flf9~+IeBcl9eLlWV8Gw0*!gQ+9@E*B(ZmIla-mO%<+>ngZrffHt@UNfVkJr6w
zI|^lq>Jp{JR)v>afLwD+)6%h3bcgY0JU&ByLQ{aWJfa@s&r*H^8}b>^ed+Gz+GE(x
zq?`PWGRDsr3hlwOX(HW-;nvh}8ydN~Kyj5&PF_JaI8BxGjxqzbCXlqWMBC2XpTt+N
zk(APD9+m-QqLH+Lb>p|l6GsoRKqg)Mnih`INwOrE2{o<<*5%LW!I?AQ41f_7%WUgq
z|8>fM4yEE`)}K`yF)cO%9Vzwi(tSw}kZON&0Hg~@KFB3TrwbMUjRd9plmSS@R04<;
zGUp)Ct{fY?Bpe^TSgtfl5XrF%3cKglVIXGQgDfMV5{T0M65tO|^w$jhF?LeZJW$5B
zkP{9Q{j)g}TlaS!Kl^HneU8x55~}RTxw&qP^Wn%&RAD9@8Ar}DN!jBV4kmXH_*_i}
z!30!#eWcgOz&~AIiAHf$pfKRzA3m@TM@}4p=S3)b1E@AnB!}kq6zcMUYg@^D{QZpn
z-)BuglT6p*$DhjitN!of3x)Tr9lx<Ekqdl3k_$5@aOa(QTzln4gpop6&HjqW^ck72
zOZl}CzpL2WsqHfypi2$r?^DAQFsZ+JXruT;UfUR12B4XrWzTO7DO<0Vn6$H11N^Fn
z->*?#ZR%1{(-1ksNmnz5P(<fOQGinEASd7khGCZ`60K!`WGtg*f;em;Y}e6>YrJzW
zPD3^TLfM&1XX|h>5-J6hVc!^Se(sIiuNlcVTkD-&+}(iNVfbYZfM09Y@*}5`@%)+g
z+x^N6z?7uFm=?onG&uzVMacmW_!*G~0$ikg^0Z{gf$ObtSDFHGCoO*-FUVFz%(3NG
zpEi-7(EgH!KP2D}0e;CS4kb0MsO}FNKuooN+yPx#zMUADCJX8rmg+25wbP_rE(z|~
z7_hEO5HnzH7Pc&{yaT4tz62BS%`A&e_wB+4`p+TIID1dE=~fJ_a`1_d9m13Q_9Mtg
z@N^y!t?=0sca@rW{LR&5&!O+P@xN%Qz{|<k{#3f9R~(za>$Z(!H#J*v>id3zXP-TU
zf&MafZ5@%b%>-#|L99-s&u(TjPnY=9jrQEev#h{w2GD)(Ovp3)2P4p(wb-@+-C@ny
zuy3JZx-eMWiqg#{&{_e!6(Rk8ttu0yE$G%wJCLq*lFt?c1_+`{GHw8^We1H#ps^UE
zzEVdkTtZtdBUUxUs>!<nco>KtAxp#QqM~*iUr-dCP21F@?7cK)yZ<i>qMaJJD@kEr
zmAMb|-%W(;wD@f8Pxi}K2kk{5CzSR7X=;YgLvaVh&l|!#<!n?TwLuPmHUzs!+Yu`=
zOD{D<9cH=P{zvb?mF<kOL-EXdaFC>U5%7iu{9z#1r%7x?sYoM<jRS7Cz|NRjdqnK%
z_WO;~?hJKNIcKquj%l0pT#?f-w%cvH^8*nv&8kdg<rT*v&I<T?BzhA6t+Ifi0a)$)
zf(;tPSD4)9;_k03;DINeL#{wQWfwuti=I7kN2!$@dH)LT{qT!n{4at7=xGhAd)};@
z#pkA$9_k+(xI{JE%hGW|-2cEH6pJ~m8m(aQL}Jo!PT%b`U=Q-&>HFhk?!OtqJ$aCb
zK`-MIETqtlLfq_gIBD(}$4NYd4ghJg0J;bX6rzjJUC=-tGUyW+9tYZWpxFfc98e2@
z#w@Th2dvBh%X1N0)dt$(GQ##ENa03nGMkKUNa{H`NT&o%X@mvbGBFMsKB1t`W4IKV
zUBM|h8z<$OlofPz|1wH&r>WM_FYF9B@s({e2R3%wVITwSnfA-@0F!;#v0#EcNdDWt
zPn3C+2sib?V*+uKZ0a+BlXI9akt5DT-gu=XB&8m~7>C_SY|fuvb6!B^1-wBGe^?+G
z0`eun#3HKun^hD2>G8RJOzJ>(Et-9av?<BxAK3Ng9Y>fMJAtc$vm?p`C5yatG9}v<
zWFW9-T(XnFn07S%t<^_0ZPTnpoi(yujkQ}{?0K?=FW$Weex7O-7e&86IXwU6pb;M5
zSCjYtL`oj*q+;!5odFmp&`ORs9QT3U^DFY8>sOkU+$KMbm!MP?cYS>iZo2V2REBa`
znC6`l-C>)|31q2#=VuoA@3aB=GqO*a)%{E-wpxBB7v_{OQv>Zu{rK0mFzjRr){MyT
zSpJ&QRI&?-NGrg|C@?S%96bTFQedSCOwVX6O)J!w8)!9F5XV*WAhZ`p(n@jj5twt$
z7>-gDph@P&8h$qH!mKqx^4oy2hOen!&qjo)L@-=h3k`HN0S#!?Ep4n~nQbLz3_DY5
za0yRQpE?ihXiTQTW5BHcPc%5o!8hbbj>2>q6AsW;L;-f8Vv-IUK&@U!dScN;zI+aa
z3J{bef<DcNJ`skfjweD5e++pG`i%g&L7+Hbrtg#za%B-{E@>4p>Th-qQ8$25`_3FV
z8@}X$kc{Key9~v)er2aOV&^upcAcX62rCwAvMQwrChh1c*zAc@f1b(AsHC0ihg65w
zZ+9_0)yBvEbq|!Y!f#U98&k8jr!imK7uLl+m$j0a_KOw$U&O^A=1s3BPaksJ%I!1r
z?x+2czPc;Rff98zThqAn>w9qHHRqsE5m=ec1U<6|Z_|5@{EF*)JMCvycs;MZ*V7c^
zOrUo?4X12YW1@R{nLMsxr%|Nze1RObp-P4T!{QUEM12~lE-Dn4jW++tMu3={p$EhT
zKvgu<GS##aZjggO87awqi9o41mO4$C7Mv9(M2s;MKm)=NcEEji;@YxIH%Y1+2O#WM
zp1a}Jpjiu?=>#w}HB$)g0p84Y%+Zh$YQ73A;75kf4uF`BocbH=fdN3e8Ip{me2LDD
zXJm+cLl?c$WRsFJ0m1=Nhp~XA)=?})$9TTqt(W013?T3Z5acT;R&po}NCf>rp_H0T
zfegL^XiuO#AmRE%uLi1f8r5lyn4|_Hqb8*(^Wl}~Oa`SFZucH`$w1tn?_i7O!{?3w
z?2L!~%=tRuUz*E+hN-wL<co&<4_^@c9x(aZ%y>yU1v`e#k3nq0p|uj#YKjki>{+z+
zEDyfsoPJdgk44i<50)C@;T^S@R-(Ol#{VL31~NukO&|J<>yG^OiG?r!#N_BJnzVSz
zbz4|iIEecmD&Wf9Ti`VlG?z`@dNOU-d`(Sc@1XzY(Ypw62l(sgUsLEey)Zjf-pMTJ
zQ*}HSzV9HHcQ``vu!$=<U2QJ|)dtXxV>Ht?+LXfQ1WJoO>XC<~6c|_!3{D8NW1t*S
z?e9Rh14E5Xgd(&|I59-(LaPXZ5G*6*3(5)vS)Y<TUmy8azKS~r2KS?%Q>Tp#Htm^%
zXXDTI0@~U&`@VOg(nfzX%tOwDBEOX%0}mc`(|*o6tO!WfW$+v!JqL=~p*&1Pv{+k(
zBoOpA$%tFO4i92!LGu7qCbZEObu{!epmT7OBHY#hiYvn?l`HUzITXhw#`=NrKA<oN
z<f#Qnjh6+|OE#n|{;UX#p?L!?{aEdYQ+e}gn}Zdc$o{P};Q4(^>M^ytwv&g(De`!*
zVf1uJQ)W7lG7J+4%>8W}(cYC3A{$&d6RC`v?Cisz+=HdY5nhzyi3*am79E+tv(&;9
zudBvS?s>6||CHDbNHuU(ef|F$kio@Mi+7$kF>pf|r!CiY+c<pW8I+0zY(HxfVJoG!
zni=i22A-7x{5aP5yF$Lq#Wd|V!{)TMZzo_nf|n9RRd=Yh<v9onE`ovym0^=o_mnpd
zwVNs0?Kav;4G|hh&^AgmegI#Upq9(P5g_qh=%T>rBrv*)P-=npkVaH@ki<Ea&|X67
z7l9lA89(){i3xA!76fr`2?tOPd^>f>z`Unfwkk*Xm>teBAf34a2@4=A<ezr{wywIb
z5d_aT4tAQ**7^)6(&KmrV5IMP+OGG;!Wgvt(}0n#6jJ)O&Y}c{fH)Sz(uk=YNT4U-
zH}GiPne|3?@XF3b#4<r7me4{QP0>Qp8$v9K5Df{R0bq%0O(CfQ&HWOhq4+%kF#?Hd
zKsZ1sOesK_NNQ(4EPKoPd`{0Z-iJdRaf{^Bk<CBQJ!pW3a3V8PZJlYxoTO|iqY*OB
zm}xNDwP}_*TpAL{_dEF1r}tuJ{t$A00!J5!P!t}Sxw90i{qI_g@BYN8VEm_m129o3
zP8XA!xbGSr<qj^@9xC-$&Q<MXSqiy=C-*!E-|?_+VhoE>Od5<m?7rTbzZdkgm^UHI
z9W>Z7%<NU+`7VOMM=tQ-<s9z)(hOeIN-?|GLZj9~vsFh(2Co{3bpxrQ?Y;CUzA;ia
zZ-B@+MI1(`FOcy%Ob#lP1qyvY-vkiW1vwKHMdSp0bA{2YyzeL)o7Frq#|t#1kUn@0
zSkqDvTLO@v2QS@_WKPIY>Q6N>am#z6zl9SFfM=76E+ME#_=H<-2Fsw-->mww02~+j
zX73*xKCSz5H4A?5jqb*3IJCgghP+tviZIRqBxG9ybW6xc_<{VcvNAuv5f_wRU~WMX
zPH_P4U;*xsgd7IqqQ)Xg<wY7t?*p1gV|X#(P$wZFLJnn1G+ju8Swz2}EY5(B1`{Cu
zhMf+zxPU?KtOiAP{ps#Vq-&sr4tdJR#AP!VnaHEb3fLDg;MWynr4q3`=-`g89K>@+
z_krZWpnUi_H##zNN2w9-d+%a;=kInIs4xEUqGteEaoS3bRHggCd9o#rI9{<?%B}a?
z$pVy`#bZz3jbiRb3=EbrKOI?sFSS(QZbs0X{%6cT(-Ec!?;)4-5#(JeGWdRRl%UaU
zqcz_`tJy@@ZlDz}p&2dGC^JVc(-S7fxDUx9*8zkXKDVi8iZn_&nvoP`bIHTf0aMeC
zZV?z5HB)M>rjV_gR!K+~sLum5iH-?{gGeZGCM+XWLV6H%MN_{$<KB~<Qp?R|0KUWO
zQ|tsd2d50clVlGZ!8((qSw{dp+Jbb@7mD&(-``@9EI>+*fLeb9baHlJFaR=o-ww5~
zuc7B9v64in)TR9Z245k@B=Z5Xg{nNeYX>37SjYi54uqS7lPf^_1vteraziELM|||J
zQ>cuaA){C;EbbRrJfhI5HjxlHByK@QiXDNk0=SNkoELER=1BoRC*e~G=TdnkLFiqY
z(l9@rkilBmcu(RZh%Av|;E)X4@B_M?V8%+U@e|uK6J5!q=83n^H|FB&_Z`O*d!9fp
zh@h2+AgClq=k6%1G@ty$62A6RiE4gd#(ZBw4uB5hW*f<~M_s@F70WgE^Ab+ob^8K^
zCR*_^-2cQqxZ=EP(bw-|cD~IHAS(g7xPa{rSP5v)&%yV7xSq=&T#_aT!x;62Wi;w5
z+=?S(57PxCx{g#woSKtyOW_kx$3{<kZ#uNQj9JT^aZ4&m3=chx71}L@>b!(_8u0ow
zM%N3BtOn{U0*!gdq{+xN30JcK2FavrP`i`#^T>kfe2Xj%$f-6V?-FeMJ{f<eV`sVf
zEXhT{9sMaGO=OI8fzdpCr?1_^{<CcAZ0RSb<Fs8TYyA<MEi-(oe`(o<1IhRUfuR|=
zNRPvwfXWZSU?eH<knxkPu^JaIOwDMDHUW1$2-gFx5SF<jynGpcUlBo{gVMM{-zp#|
z7$9x=IgOb;f^?FR((3ReWG9fe>qwIZPXf_kmMeXDC?JO-e7B68SAx%<Jz+WI@IB-S
z&mk*K6%x`Zu&hCyQNTJ{0fZY^K#|d6qGj1uWyZs>{C^{8Ylvk1qaL1oW)2TN{uI0*
zVy9CG3d!`+z3xh5@4*#u-&^C9bns3c<3EKQKo2Mw-~R>AEB)3|E&1)fzVqus<N|>R
z%dN-p^~XY7wDo56SITG;!X^{Mu|kxjWI{}<^;|MsLpLR8DvDcJt~F7sFQMLCKqHz*
zJDx?NYrK3zYcfEx1J?j>6zOey&R|MC;90gdt8>nxJFG;r;<1Jx7Gq6AP6^EHA*LXu
zg#ttCf%<~suJdd<bJpoONCk(){RoYt!2u5rIRG88IHhk{c2xT^2Y~F<rr^|Xrj7&=
zlN4zcl0#q&z(SwBYr(SGpB;cjzF4$}ISmSq=C&Yb0}TF|u7XMZE!05&R^$$ChGkWF
zi8nyXIw^~p>W%~8*?W30VqCM=a3MSo!q36+b8zz|_?05^gFcF5KzTxg_!NZEwr5gI
zKMJ&}3UMnznnXww68q+Sjt4K4j+sjl#w}<ST9n^|F9PJ83Or{JzSGCIAeTq65Fnp-
z;Ss<a7|AlzMWE7wGD-sqDnX<WO;8P&3uOB&1Z`12-brBFi1c-2m4|&t7ID{okHOCo
zw?o1Y`qV=GajdL7;WqH#rR{Y7MQ!)J1RQ`l=tEde?*1?R?$u|lRG)fhrE+$YI@3}{
zSZv&nuRpPb{`>|+ZL=ndL?-h2A@o;Pqm;`bRV^&6EMTQEjb>OyJ8B`)%ZSoNL}~%4
zs`K-Z!BIMIB7Kkiu3a9ItqM0Y^ad5O+p_t{wCH&o4Xd1Jh&Yu=n}9q*?}6n*0{$Q%
z&IZbT!0=|m1BkprXtWt`=5b@;K_?D$O5zzTccaL7m}@|(H`U#o2^b;}{fsh$j0=#p
z1j+dAv;!M+)|%=#EIZ?n?E&aeiK)*|*Ev6);K3u7{K~*T>u}6+4b~7e-7?}MBt|xz
zR)mp5qUwXjB{&1%nS?x3e6_7-G6&!mittJW`28M&5uk6aLC-0)rtK87k4e>BP7$^h
z(x@$U9PvI0o~+EaBO7Ke9C8NylE^`XXsQJ?;^#QyAYzp#%J3Wg$Sn`T_xj;E73BN^
z@<G5jP(H{ZD0*<Hv?DN++l#4W9KmKyovBbeRK*#At1vO?V|uZMuiyI!ggegzWxh9%
z)SHKr<)x=eP4UDz_4vT-sc8JCpaaO5f-SwA-2Eei@)hgq)dN=t<&iLoYwk*Y2|=Ha
zvsMZ0SUZe-&c*b~JdP|K#?k5f@$j=%RGTehoK6#t7eczUpprl~ljb=#&*gqQ;|5e0
z(qEXL_eS}wOJL-wJF|2hMA`J24PSuIo~6yqSZUJK%nF>}E07x@5fOo*ae?|qGxWn5
z0OiXzwPZnh`a{YFC{5-qMJDAZFpZ<Hk)>uwkdcF^4VcMwrPcu$eJV&N?Mj7ZxD#^)
zvY{uQCotiyqx;8Yg<x8~lVuy30uh;%Rp4eYl<EQMJkaDLVG{HbIPIsR#*`OA=Iw+b
zoe&KU_;7N0xWxjzJ`ce#P+F}qv{t}(1(HN#>T#{ACsLm8kJ~A96e%Q%$FsXy5t-5<
z0l4&RR&9+(cuAUx>5<%KZRsgA^dSaY$tifU2;Uh&-Wf;W4kPE3k;@fO2#N^u1^AxN
zw|v2cOX{EWxhARMoY*yTq)jls%EkQB3cmdHN0EvJ2pVYgimKT@oGdInTngo$E0?3k
zo;X#F{}glpy-uK(E{m_-JgBa_Yk7I$TrVi8pS<mj@<(sK0+SO37J(q+2?7PLlA@*S
zIDBLpPaHaqrw`7{Cl1VG|AARd&#kCd62X%Wf}D?Bj_9`Cg`uWxV9~Nn#Iti`gS>Wn
zhKpV+nUgId>F~a-m<2_UL?EWTy+MNy!2CXe;t;XlfZ??Q?YfY3{)$j8_CFeu+JiJL
zL*uqSbr>9u`gB%YciSBWX8)c60tp0U0#Jt#WNKC(T4GE<NXLk$nRhl5+2}9_Gbdns
z|4a&E&`(LnqW`x4-(9X@G60747)Uf4ifsILw+eR!vo&oF)%#|ND0Ks*AHXT*;gvk(
z2Ly_vz|cC4plCkNg#!Zf2Q;F#8T27;u}BESBmF1t;&fF+IwOo!N*PDqDa$yUG$1iM
zE_h~2Q^kmqIfU^E)WlP8WB^Z=;nw@%iy`<<KXP6l^0`4&iUX*W3J8K6)6<JZkKcRB
zz;Zd@(6J@l{qX$=6Oy+kzCa%B_FObG_w`aN4!nLby8r8^vhkmy4xr}{jj)}j2ggSy
z&i{!w{7kZQ{YLr7T#C;>7jeB!Ex5b~R0<LU#WKeF`f%-z?RfLG3ZfiiX{Dx~J}`y*
zA3K7F_e^2$!8uG#FQXd9JkjR)3b~xer9`%Dv_m1Y(WJZk)__?i6EJ$ZW>6#(FEQvE
z0fX!WtVl@O0%}vh{6S!RyWztRZ3J3%188g7E5LK=b~Kfhc3ei?h;Tz_G%3uIA=0v7
z3hv|>m<*Jq{jQKPMQ>Z5+8&nC(kCp>Xrp%7&Q{!%k*utJXj_S<_Ro6$^qgG<;*2gp
z&?S9k=V22dTg{l!?d-;EIdTBx2qd)hmB<HhOP<X20l8sdU>(puY&sIl(;Cx{3);se
zQ!4zZmB4*{>TMWxB_{k(k!>!J9&Ulj)HoC9-41O=cZjWI90Gr)l<u1hfl7u@HK6s0
zP8Z3S6<Sq>g~ky4#R7b{0^cRaP((iGLnRH&%}k@#Y``g0jTWQ|5XSS#{QScu<xKzL
zVs!7vPj%xzMIC^7(|orq%DDBf)~~+sjc<G7kAy-FxnJ4WroER2jV2`(G6E@3Zve-e
zz|(UnJfsMas-Zw&^>`oFjt}6HH|>O9Nl|Y#v43g~4?TVy_uhX5PwhK_qbC-z5;ozw
zKJt0VN<Y+F?lS0Yu3#g6Hc8W+7VO!(XS)JM1;`-tL{^Ea8ngQZ3PZra8jXCPKxrM&
zT%jz0l5*O<V<WUu@bjMZc=n%W@VVD7J$49&3>3IRh8Z)D#$z)&u+=PN(8^jPU-LwF
zWs|W6%ZhgPd(QKFlz&-!uuJ%1$}hG4>`Tvv0y7~JHpNT`BXa;YL!dH85-96BP_C;4
zWnU!+ei_J(2vjDGNCuIxsMbIFC=f53Isc?>g*{jlB1`?dl)KKt6)R%M#%~o;de?FD
z|9ko1ogpzJKF&E4tN2h5FsW0TE@Qc|f-p`IMQv1^L9FfHfWA>5>joSQ4rnBsA}lUB
zcyiAI4jx%Sad;$Is_yf(tbb%#-TNNAL=N{<H2$2|C;D*Pdnbl={^%QC{bS8~YrtQw
zwc$}eiZ3qGO{LJrFfB(dLd#jK(-Wv^2h|Wbb_no~C=^_cfg&(ESir>adi=oE8}MVd
zq-eC8*mq(M4?cAQ_dR+XPwt(=@#9sr!WMkLf?~mkA5f3X^ptzYin{{_9VH2KQQ2~U
zt|bPns8k{9@QTLNULe<R1TLuEMPtFF8bmQR6}-z5B9_t*Ty}0`0Q5CyK|n_eNm&3n
z2XcU%^4ldP#Mw9EDON)-6D75qQ;jgOsr|E7DQgH=Dlnz#Tn1Ra0F}NjV*w`RHwl7i
zTzW!-F!zp6wEI7(d&-M8tOFoU0672>6G7gEQ<U(^0=XfrN)wPnYmA~WjXocJMx%9H
zAf<A@#g5T%Bluj6%t_X-?>(|EjBx_p=%1By-OsFN9NO}wr4@al7GsnoXcOR=NaWlS
zM*91(`K*3ivSkFjFIj`F+xxI;Jb=^ZK$LS5l`^!KS96CO`1oJlh4=pXm)%AxlV<U;
zpNy-G=Z~D6vWI)B89xy_`t>XSaBT3LAAQZMeyHAT4FuJC1jliismJ&1AoQ8YgP9Gd
z+Me2CG^J;jR|q7oK%KbcEsYb$fX5DN<fTGips{Kok2MqP@guiv!jHc>L9<=QGe>7}
z|Kn4*|A84i_4GWZrj`(=eF%a96bfZ-A+eHehk0mMjAzSBjfHUr0A4_$zd(I)E>Q^>
zYzWlnG)_DVtT_)T6@igW0+i~KkBFIRYCtt7qQ<+K%4Kj*ne^Yyz<cWi$nXjHqfQ$e
zzwP;FQJHCNcE??|^@a^LQ$)67z{c>qqMuCE>*(Q|?^!F4FPQFlZAUIQQ}LmxTw-5l
z-GG!FfCDFRAPOYzArKJ1e+1}XtyR8kI(k!wG!~zsRcmHMnAx62*x8n2oQHLXd@>BC
zBkOG6{A{;;kEf>UpADX~15S~6b|{Jygi*@RRm|nFcBl{A){WtUontuvyfJK9Tg1d@
z9vE_f61`9&dL&%d=z65m#hMgJgptuQe)7M*7MH(jr+U{rKjiK`7QefeJMkZhHvVF4
z`+bQzfNrhSCvN`nq007Oe${R7tft9uP^}S)FS&JQm|K?D-Lr9$l~_sFojxYgiDO*I
zOt8_)YRU|Ff{*E~MtriBXe`VLJTpfQAwhp0ST$J2rqvZ(@Y=KRAKn&YWu=P8_s`(I
z2kEwieS1$}X^u!m6$FKT<O+GX)Yh`+!l`Cz#Dp_$02?L&f;9i$plLRN#bX-dn+5tt
zfM}z@q7^}9O^Y_*65W-ezmfl9N-OQK&$jGQZBF|EQcDFUgH_avw`y2~Qga#5qocs3
zij}=JyDJQDfDGR#4O<y7`*_(NJ>FwvTVIS3W&=i6S;zp3RAQJ0q*ZNWZ9kd^ATLG=
zz9<Uml%ev20+rQ3d5BkVtK~&t>PaD0!=(MxK4AHElGtKLn(4sV@x7i&ziisibaJ|a
z5ym$u!(IaIUq}&#37U-twf9i;^H?`Bh;ufs!o@pQ;oP0W*s`IBfpH(`x2u9F4bdS|
z8rYh3kSw`~=JSYZ1w>IEN_mR1p?nY{7+J)w>$l1O`K6zZe&yDG{`q8obnt-q*n4_K
zXHV7R6mbCN81`TFj-mV|e|^iX@2EqJ1~oE%N<1@3ZM&$mv*d<<m~pvmf0pZLb0M*K
zPt*3WeT^K6Oi-ynq#8098rh`<jzVC$sd20+@YD%lFsCq7kQf{3$K`7Wan%LefdA0O
ziJ4_Qx@Qjee0>HFK6(^~jvT{Es{*eufnwh%{2bN0#E&(mz;!Aq*BYrD#sg?8^4t-P
zU`V4fBG5lc<$=Kqm^?%GvG-@Xi&dedb|5k~0vV=t0?H%jX9P{D6JTxLG%Yhcvm=yY
zHXoDoB#lo^%t0<6gp`@_8*IR=$+j7Q0sgu|mn?<Ng-bUJp!A<5S7<25Z1dp?+bIZ$
zBH)xI`~i*97%;dB@QL0PY8-z8P%DDB`lJNxCRT>s=(yS89wIK9@$XL8rjv3}YcI8;
zCI&Z1QsNJ^XcIHvtr7&-GBSp37jDLdTZVDo)*)<JUqOW;e1Rq)X`Y!rpb%-zgKGJR
zSITHF1qkaov}-=%mJ3DQ2EvJGe0hkn8)6>hS@2VTCB*o}L+&4Z{>}AYx?cW?IFhD^
z@aaE`Nw4e_b^@n>12AvSaPF0F8t^ZE|E;&atr~cf!SYg@Yi}-$nVHGCD-ZWjRO)?C
zGbtuB<;R&qXWyMp%ra4G&5;U?X+>K{kh2ogR&0aX@YGrhQ;GQ+aJV5*KB~~?35=9;
z7#beKZRd{TwySp_P8-;JWFC(`vVgnqn#NPl%wl1>gw!2FeqbE=z7mfS8<p6U>B1D<
z<A#P{CjjKjM0=G?f{9yZ=AEG}0uZU3;n82CgFx9prcmp2x&Z_Z2*i{f5#B)ALPq?t
zLLDYb8r?fHC1<q-jlLj@n6d^RWdaQP8FCP>u;LM9vr0Rgg~=MDSvSF`>zX=@r!ISd
zK{61pBp^u2yHBGyF66*kAXnr`PIY`Q(4K=-ZO!(_89GsPIhY&nzSIe)?ED_`3^1`J
zZT(KXeB${N#XAlWww8djih+C{XN~t^=h}6+VCxvp**1br8!9OF(`%#pf_dA3sv@mA
zh}%BeEB$D#1ZdRrXtn~h+cdyLf+kiEaX`SMZA3Zqx`~LYLNgN(xf%sO0PYJhaZx$=
z-A~?H|M?r5f0}FMooDfp_r#=ha*7@=vI8*K&X9lo^+lZjp&PD$UA3HFAI#6QdaNX+
zBw~M=h?;F(F&7v|s}4Q42N%d{UyFEiOdyP%m+l&N8a-~Cme>-QMng6Q&5J%gpC<G)
zO|&unmey6)AuyW?91DT+yheGi!ayDv87^Sw=p=T&auweGrZ$#q4Lr4f1rOYF91lKl
z07s7Gv675I42&WeA?BIO7ZUMfN$Iz>2rM22M$b~nQ(e5u?6#xBDtj3UE_FI6E$&(U
z#l84U2Y|<S4R@aM?v(eI8#W@-fXsk|6}Pk{RJK<jn<8YTp&n@~PU+1q06K>r#zW_3
z%7YAlJ827PCo^DCqmqW(2lyjEX#zYUNls?|7_fYdNl_}Hb|?{wm<?%{xU$Z-+4MnE
zPMpq54@n%M-Ad4^%_C_aLq1nSUy#R+;WEzKv;h}v8p5tEV_3VcXyn65p2Q)Pr3OSa
z7~~>q1!yhzp*kO+y6mCe42*yYqscVlP3KL<ZX6>k{G>pm1}KtzkIb$I{v3!r?f`|n
zLOJiF@`VQ0Uo+(Ymyf=t`m3*W{zT;)2cM2V^~qBe6m(x~<F9xZZ!YKyzj)o%x6}tK
z+x+S2n78K|32;;Ib>241)@6>Xm1)lQv-4rK0{9}QA6k-4ruD}zz*1#dNQCqm+nQ5R
zDhcQV&oTqLc-&m3A+PD$K}!HjT4FYoID8x^99I}{75WPf2FC(iv26%fTumn);^2WL
zJo-Qt58OS2$Dfs0nCeF~F@gO03S46P`M}ZwiR&jQj|-GW1Zch`rniO3MCNsHBqq?W
zv-i)o<uV?Bwkasvdq?V3CVMt^P0`=-m(2tmA?1c;X!825V`X-s%>w9g={d9ZA3bO1
zPt2*A=~#O+5xLWqW5+<y204I$bp6JN3}ybPu>{N=l+dB#C`ty!+JIqd778(+!Egvt
z#E8Qcw5sz^?Ijd)O{`lbu=UCu&OYxvTy)7AtX?&Q(WVFQU__F^z^GMirM-PkiLg~b
zvz9}(RYbL!L#^SU6**|9#7!`hd|pAqC5bayHKr-6qA5<T2zX8+VOWUSbR{hcVV0!e
z?hJ7-XvJZ?q*UnVk^E}|=e%K!|LzapQvXk{O+K+YKYiBm*8K-gMJM3Cn8x4dpTD-0
zUibK=m){mnth&UVosM1l1Sp!BaxdFzYqmz2eSTRF-dylJEl0JlRdwxD2AwGwI;fx2
z1;|W`$T$TSa7;;)0Gt_651LYIqVDqcS#k!xK<aB=_7Mq<wgMUsup%TD5`lcpL!l1z
z9ZE4!P#74K*f8c}!<$C%x*yh9nQLIr<25{S&rv+~w8Eiha;OehAkQ9zC>A;TQx-t1
zw<a%|)M$p50xSpsw1Yr)8HHWntsF-)iq5S(v-FZDgz09s(Pa8|CoAM;?K_?bv?ID1
z*~e_pF`}ngC!n)I$YxlbC8OEy1kvMkd7+13<0njyQfJcjqY+;}Cy4xnnS&Z}O-r&-
zx|7++>ljiK8DQ8#bKyAR>R|-#Jl3pI*txre3wN)=1?R8ArY(ag4w6(*roKs|U<uk=
zeWXvi2=}zn3I%F44@)&4D-9R4a+PKjC}U!!Wm@p++3Sb^SgH&nVq?-WPpwGHpNyVo
zgzXk!^ImAh&QQ|lA|#(PEsiBNBspaUFpH2Mugl$U-st|?|GYN(jUQ?~oE96KryEbr
zo@!3OebFL+?wql5a{aUCoqMg^u=es~b|$8ehChHV>7zU2pRw}DV6z&RZp0TS5R9Ba
zc7gJ?XI>-Hz3}<_p2;`@=#1{OT?3wN)3Gf)azZYt|GIW4CueX2HxLXWQk#qZJ|^tI
z(`X5es*;#*I4B+RP&%eirp+&v1bu5<TzXAEF1<}dH9{PDY8g*_;RGIk<RGRVEupb(
z1j$tcsBA5<YVOJbn4UBZme?q4u2s9-((W?g*KA7!!Z65ju_kDS1EkLrp6K*WGudFf
zH8^9`X4?7umhkFqE7fm15N5|g&t8E{HY*#WF#3C`)Sx_$#62nc=SNvPh1i>F=@<}J
zsW6jlh=en=n-Q8P=Fpy>g_q7_a<qwE*SI+M{C=Ew{$`xDc^IW(LK3a~a4SYq582W1
z^G7s=X|^ZlE~((al)`<V5XPxy^A1M8u%q$F8B?1KpY}XZHfRjql$v&tC|x7wb0*!7
zY=Dxl7b2r&>;&r4_|!(_9S)qG%H^dBoR6%?o8Gh|nf~o+=}+ISo^S`S?by;&OQ(_(
z_&z%T^Ntn$^~F+h{X^TfUE=QAc4IU*m%1c{!D8##7Le{#Ye(FJ-ZrXhJHt4c!VS}J
zNi5S)O1THlySUAIr|eO(sV*AzG>acCHjqU=))p|TLCk3<!x929Y4f$n$!NF)AO;$Q
z`4E!L7nMo3IqDIRNRh9m1QyypO0zzKIfe3`1f@QO!blP8Hw9RK`4C=}q*&ft$G$Jm
zVE-o$Vm{4bc4Pq6wWIJx`!PbyK?&4I6qA6yP88<UQ%V{?W*oq*lP7*3F#stUAhMJd
ztm)|FWlU!#3T3iawlmO~bhBD{YydW!$ULaY1gsOVEkR=aWuHSfE<uK%T(b+$9RvzP
z5`IylI<FB?nX?pO?#U%Yhh|ZTmau9t!M0rv&N;7)b9QaQ=FLMWjF!yhLa9s`A!&rh
zu@MJ>qH;`Y$nEdxbupV!0(FI*w*k*Sm16FMgF@M0A-p?)R+W*#(`*6j0iXktb^;D}
zK)M@+`8}{D5x<d{M0mF5jc;b5w*$dii1Z%S=t7&WKz?G`eaA0e86H2;9R1K=CU=JA
zr3>e4C!$lu35f4I#n%~-1NwD$oVE7y>n^+Go%Q7<<wwNt&AL0CCT}*d)BS7KdguKQ
z-HDw}1Y)fxG7QuI=ik|s&19zCM>=_9Z0`kZwBj<M3_huzHCil%MM^n7FR9=ZGQ$jL
zTW~-Eo)%2wt>IE}`c6T}*Mj*ZMNgyXrYKfY<W?(qYc(*&n!1P&w=n(nCG2}(Mebj5
zRbk5rhAtg~dtpDkK8cF$Z`UKur2^>y#4X!GqfCfXSQFJ4KqdH-Nyhed_UuXM?gr?t
z{?7ISu-tcGz|kOY#)JFmwPvsi%{VFGzGWb;lHMVps~VyS<b^<g$-(3Zl}Nznr-1?@
zx%^BMN5586IJ%5sG_hq(jPuSb;k*lmv3ctd3d2-y8NLm|1PM>x*^UE+T>3fPY?pw~
zm$w#KezLIg;x$_F08AZ~_{86vDuLF9n~6T^7#NT^llvDvbDq5J`=oA17wqitA?)XC
z+M_~Jm&CJJ09|`Vz{SY6<vopxP#D?Pgm<eK{?c1MTKe4Q?)kt`{{!!&Hsz^66cXQ0
z<M*7h7!+^#+sW|@e(1_ef4E*-^8I!~Y<>&TeUlT)e56_TWOv4MIo8PoY+7n{`*~3%
zeGqovJ>Sc&it2g%jyl#i7=O>>+Eg%8i0yp%gpSju9wVZu_(Gs183nqLELEoB+a=IY
z1{zRX%+cJ_F9?C6m!j+|6e=maNd<R<161faW2sLx)zm$+IQX?i96uott?9?WwQDi4
zdjPo+3EG@SWkPdV6XwY6GZq{rK+TZWItscO9k|Pnx396&$G1)(TL!|C1O@}4Ooto-
zIRMVUZ5c41YCJ$x<~jjjB!D2<`H`M#E{@TjuH)f*7qRz=Iwpn2#&J(xa86O3drlD>
z&MKlfOg%L+c6uS!;4?>_89aCWOh(2ZOSS}sDUl|_NbG8GGV+j?hBP$7w!q{%fzN+X
z;n|1H0+W>V8nS_{=iwQ`L>Fc1{ESGHfuCImkj+Jy>%d?uG%Q67b=GSj`m`jcV0I_u
zU5$XG&5>Z@!WP=+M&VD~{=w4yPk#NEk2)X!V`^cVL%*CIfO!f>`WTXL`2Df|3x4&w
zYk#EPs8xbSvt|0u8KpA=?RqJm*(J;PJ@eenbQ?FCvlZ9f`TY#k%4%Znd0Tm>Y&4W=
zy3W~|G=NW|6a9Nq?QGYc`C9_VNE5$X_tFP$lyix-XXK*E0g)5PQG1ba19Ap*KD5-s
zs{2qj;R%5PwUDGn+0!VM5_shVVo1YXOCob*a&?fN#PnVBIR0pYg_;MwVF<w`1Mtop
zKsxAg4?S7};<}->a+I{Q2-(t(j7()-a~G-SEFhZ!$aDdy6-HeUTF_xxl>JuwnjSvz
z9jpL&Fa^9i&^R9B_!BEQ@<<i&(KgCaf{C)m_Ok+9difBx>?ono&twam(kF<?dKq|>
zoYJ$gv$lAT*QYiHMR=>%!XRy=(F(!0kc^(PpxCtO+Fa9{e~+&cSURThZ-1LIenam=
z7ST->-)()e@n@0W{w#9>8Rvo>fCWeSz8O)9IyA=kjaGxf2TW$*3gjG(z!B*4+nBsE
z!qL)V_~WnsXz57p{&(zceC!`y>{38{zv}*B|CMha$Y1h-8?XMMs#cSQm0Gh~mu3iZ
z&ynGPe3GVkH~Se(?Pbz>^J%fhf5!oI&}p-Emofn|&`#v<rv9`V(vk>_1F*`~_I?>a
z#w)`ad0@5Jo{K0e6&xW*445+lb_UF=w~RfaBM0Dlclt__-jpU9E{;G>Qbr({>RS}V
zn59fXAt*=44I~hwfV0K}3dBH(k<Kk*_U<_xy>lKX4#%ji?uWc`9m?ksQ0DXaakxlp
zdW^H9l-KYnOqSJojh)39me9l6f^;K+QDbyYK%096@<j)eE-+xWqhqSt#$%5!;d5VG
zLjC?ZM8_0X59G1?nj!4IZWvoO=TRolR<yNPJ3&lJNxY8BeoBnG6L@EgGrLq6nI{Z^
zcm(8ds2xYkSX&yc7SN)lpyUW>7Xdv6wQ`9DP8m>E9@x)jXbAZ7-=|oaH8Ud2T{25R
z?ezo8eJ~dmX8@cTWf`9}`pf~?_m9a~S$5#`7{AqP^yqqEsWmgUO+10Xl^F0^SaplW
z12YH0pMA?GOY`nmcOR;K<^C7b35f4YyU)95N56CZQ`cYq_G-DjGnid$NV3}u;m^{0
zR;9}@mY$lub7Y_Z)waFB6r<vdWm~e0d6>?J%-Fy;*8HToXMd780G?{IpFMrRrgZ2L
z)HJ1rK_NO$NE@`AoCRM@^x+#xZ5u(%{RuY+IIT9dHGzo4@S`a^ju@o*FHOV<s7#Ow
z1wTPhX~P{=z=RKHI53kzs3X}s&(2`qgLUkkm6#u^pmNzbwq3po#k|DIY{~;vM1EpH
z+)T}YCg8G}8K&`CK$V;&l`ln?wG2tXBqxF9d<%<DFXO;tH9Y(1GLAi4MbJ_>cdQ>5
z>=?kd4Skp#FC*yl5EccT%^F@sF}I&0I58UqG5tcCcC?+AEc>z!$Owv%B9JlgHbr+b
zc8d7K)v%GCfjl;PQ_FL9Lm)8C4rEylJx&CSjSHN3I>E!AHM<4PDlh(UJ3GXsHE8ax
zFx9-rG1#sPe}*<=FjB521E5X-X9B(2iJS!pNq7MT0>@?oMCmR#0z<_nMqe$}M?Qa_
z`ki0?ioaa`)T$HJCuUwOCm_D(h`+mepdYs!x$L~xxsz+J!t`8|uKA8c7vGZ{0EJ}Y
zpYdYG-fFc2^>^mFjXXpTI&JSm4y2RHcQOJSb?Aek4}?Zw?JMU}z|aYK(^n4wXac3J
z3p)#ivIv^>&QE%-tSso_1za9jZGXqJrGsfDNy-Aq8RUurzONAwkVrKy*Olf**)M5V
z79A=TQUt{aemRC55YXcuFyg}%zSO#@qCLm)^ylaCwL5A!sPowR`qkKV(+1RQL_bap
zeVX6oj3%r&ZKjXG%ehQTCaNpd;f<9h4nMPur|+J@v8R^Mm`+fZ0^3IVaoN^koV}wT
zlj9`mO|OJ<?*wS4W(>IP;OLZ#!YvNQw*cuJp>S3v=y@zbF7;C@n@+|~^*kBBP2(dA
zW>QO*#)J8*)daLM0o`S>c3vpsdr-zx$O8jq;PZb&X^`wSZf<i5n|XE&-bVE7b9J8Y
zAbLxKEGx)VntOy(Js~**AaKwG22=L=u13ib7$`L{@)}3|@t@rx|K@*w?eJXiPdk@d
zQ|%W66cpcE#DCBoP_KDl*I757bN0?RM>C5gW5Mgzta?jlQMa-2&Y$)GKQ<N5L>w{)
zkUdWq%(LZyffBfHYY==pt!B4@vFFY>>=_WmDSpN;?}_xi#(h%9p^E`@tA_4;c_+i@
zNikVhkFx^Zi4t~hp;IQ5Dgt@J4TyVA5rr@VBLITDLkK$%IEu%a{bCGvIE0=^r88Qf
z`BvbWHs<$A-0}G;{{HiO;cjo^hkyHejI8cQdnw_`KT4@7UCtLA6w9WqzO+!sfqe^j
z^uD7w{KO*kg2d{43A<L8aPF3V>{v5|wPQ3m<Myn;rJP$axE3}AR+e4NwH&M{iK$tE
zxme=|f6H_(lByY0A`eT9EIQS!e$S#jMf`}7dUH;c){{P9LL?hDeA4PRGYvfA@VvR8
zY&<(-jPoa=fb|;%9{H@s;YW=c6FLTL%K&@LWwK}46eO!6okYLx!3Jyz(7^=wzUF)W
z%mnE+*jWl&9?)k`{*uc9tue7GMCAq@{p`<utnh`eeEq{y-ao!2Buc8imR|A>z>yvX
z^sE2-+R@8?{>t6|p}DXEpZ4CHBU{|jY3HAOoFw3q^$5DZ%P;^I>+Jlo1qf{(m9f_t
zAF#-+iR{+nTV>s@17XPz8xhE1m@=ccEoAO%?~_G}j&taylqUg**@a^x0beYvwMTWo
zUCx<xFL*YA7;~hNN6rA88PL1}fl0hQ+Yts`))E7L3;A=ZXwE4-^_eF2KiS4y!^fPa
zg`B_>&pm<AUBqv_?>4O2IfB_~1t*Xk<z}9n!_!}z!7~reW9e`eMWL{BvJbnrkKw#?
z$FOQc(bVuXpAcHhv<m>EwnV+<V18L(YF=QvDzF$yYQZC>GAM`tzrFVWvh=#n1HV7M
z*!?>9%=84LK_Ea9BnSr46hz6^D%fS0w7Xu}TjjFLL3Y{Ju6Ii=Z`oegZmq*^sjOW&
zN|tPyDkV~Zv_z4TD2XCSfB*pu!VD&-p3ePV_sj47aqFCO@BQ!V0p&zMXs|EY=$;q<
zaPPV2eCIpg0hRfF@MAf??=QG$T@{W5@9t49fF1okR=YgYn8p2Pm!1rOwlj(no+MNe
zBpZXlhl~b;(7kmUS?-^3Ll%}CL@nUypG&!Eh<JXA+yey)EBZ1oYBucZzN;*beq6Dp
z3&YNaK(QvZ2SGbO-oOB8oIpKRLxwXC#u(kRH~N7;|MT_hTVMXco6)EL^;;bZIB%Bg
zKkI+ncP^B_?el;1TmN!r94(al<AI8v%_d(|^Jz1zJG8354<0HnEG2QN8GVZ0rMw6A
z4T9_0`F*u01t#GC=$)B>FWn7R!%>b7B?KMTZldin@(;6Q)Ph$nXLU}QIrMt_VD%!U
zw4-IVsEZ950G8oWxB-EO9E%D$hZu;J8c?mNaDmu}s!=D^6+QZRj=kG4zVM@)SZ{YQ
zH8+LzXcu3;@gjCRO;l=&XtzUnwG{v0r@jjd4=iKj$}T?hZ(hL0xiP-uu?O(ck1pVz
z*$Ph2QH2xX3$&tQWZbJehZ{MF+CX>DL96Ryx96ZaaIrI>9u7ITK^MCqiFHk)qU$qg
zXZY)Xn@VPV^amnL7{?BA?AZ&UDn@egbv(}^T~_(OuKtzBh}BT=7_>1kCC{b<7++gK
zfQg6{01I=#SAH%<zv*&Wc(Ie`D(}zPBUdQCR;Z^KfZ8iCSyM#?F2KOzZ>9)SLo|g6
z=<vWLIXA)vl+-$9fht*wM?M0a>%TtuOF#IT>3#3FA7AZ1{qkFB1irycK!NM0f=3oB
z`D34c&%3{804$aJ!wx*xqy67BWweL5`--DJ0sq^?ei>A9N`xSe`E55sKTkLScYh*q
zix|PCN?5)_0XlkuaVuLRhN)Xc^M7<72)6uEK2&ts;eS}EHQs}0CsPxJ7=fPp0N#y^
zc!kollkev?RCJIe04lqVfMK-T(~d~uq0B-I98~H#re>rz;pDp=Y^~+^<Ud-+&fYGT
z8guy4?JwhZul^p8RZ*)h!;K;=E?2R-+QMJ^o_~R*duFk7XNaZnG(PtDN3poLgt>AB
zr{5bO^M*)!L)OB`h7RIgANxBFc3KWL+b(v-K#!V!vQz<e9~1T)$NgFeH6g~G=pT@K
z+}Z)2{=F0*{tg%2fk>H;hB@c!rEp1hZF<jL{T&(D(^6~vH<7#b9&gF8Sp+9FR}v;b
ziG&(`7aix)y$&vKWnAe;-)ru(BRZ@iyC7JC-X`c)N}EBULTiwa?Y{a9IUw>riw`r!
zziJwj_zH`hP;5%)!YYs=lzQo_37+_lN5jARS2jlf`2TJH=0bJt{@uZi-dlwS_-_W;
zr<#56GiOe|zkFih@xe~3&pRCJ<!Kt_8+ZZynC<%OJERdf)!0)&cVz_hL{M)g5Kx}C
zQ-fwftLj2(BQ0;C8$z#T9X-`llezCXb&$1LpF%;Fme3}3Xi`oSd<9+<L}pQa=oQwW
zPl|7<GCtH@SW}dUcTRtEJ8mlRRXI=UTO>X9WZ@)D2lqTAlkgXRatjxCw{WU9kLPxt
z#iuX*TO6ysA7}3Q6L|3KlX&z*6_4FRrK(-5?XKhMl`gIv&vE|tHh$x4pT?_K-iuHD
z>Ky*WM~>qM|JHE~Ix*T!7oE0)%?)6yo3pYxRcWMD^T2XiBK1XadP0j`VG82L3lcBq
zB<T0oz6?C^l-$1|$)AznC%?Bq@A<mOW2E@Y<;V>5Szdtb_{DXWMX$kOJ8aat2L%C&
zfY7D;99(@t@FzV|fpcY!XcZMT$><lA`m%Zw%^CV!Mf;Y50L`UPk1G$*$z={Q$H(e0
ztm!DyMxx-R^ql~&e=&Cd;<tZ1dG`4mOTYK*xBhe~*!cc2>)s#2T7ZiC$OlXQ(uW^=
z@Vk1wA<A4>VpwQ;6xwv!+n-$chO0LDK0DsGy#)QJ^<K>@q$U>*DN2}6v@E}T1O*i?
z?c8}xEuvN2MjU(fT1`x5B7!riLNp;tqJFdkM>jvUx%OsWs$-#PrLrD8CzKH&CLH(X
zV?8AG6*M^`0t$1?&HDJvzuCd7=eIClZ(w7zjnCisB<5@PVt(!k9KZjASbC^}>C*{U
z<2}4Eg(tu3Az%;KxCVUYCE(|Oqk@~OpT>iW--%!N{S?O^s^ELScLuLrNU@*gXjdfX
zPw6yX@C2lD)g-y`%5|q5pWp$t2&LPR(kILugn@(2JHYjeDUO{A(b-EG-Dh$lyZK}=
zROGH=efb>bXb3%AEBLD2U3Z1PYw;VU--7YTYK@fD=;l~nb}+RFbhoMWTi**u%_Dh_
z*di6Css*ljYBF!^ngQAMSwLE=HKio(YKM&C4d~6zQ}>q}sj6#5=hccmcl|;T{@p+Q
zCwu2!-TuDe=zZ_s!80$u6`_FL1>?VRQ0!HL6QB4$A2{>DtWsO_$8iM5BUnVQPH~6T
z%W=0mpbOO$uC8Ky)7{<r4CV~z7OnOWqK9=<7URwOY9%#bbrO~dNs};692O&?9gT~E
za@vu&zR=~rjr^R7c~#7+ZIVt$Wfn-KcQh>%#%-r~p>P20vQSBuX9@MB(<nG~5TYHH
zM6alzg;4E>e7y9f4u0!%*O4JY5Y+L-+n<M%hbWg%A*`H6JaW+KBp8<+3|D~5GbuK_
z1efCkFZL1)h}%E^Fk<+)w)-1s%#`qnPi^34bA*MH9{R+nQz3|?<Oukqa3lvc=%tQF
z@qj46x#HN1F<>!IZmR_)ib@N_#Y<1e@O@I;Epqod)|am6ay|65q!MNw@9P_=GsfCT
zitSa8+Z)5gq>`OBP8_PV#?pPBcpj{oNLEJe-m1r+{D_=cK{-+PkB(b`lX8C~Lm@_y
z?wvf&4N-}cpk7DcN6!<a!mpu!CzA1q5(i@zfpKwTE5c%M%>OeV|7haG5B+$_uPS9n
z=P(!mImi$vk2gy9{;@NsKNgKhVnwYy>7jR!;4}Gd;oaMDzh(v(slwvL>b0zQFG061
z57N2-#mkHLvu>SvPQ{&;e4hTzyAa(dCY_kqnFXEZF2#lv)=BuFc6CF$R}0>NR;n&v
z|HvDhVj>ZJpBFv}Vaj*wA2I?|+(UrbJ&!tQZAbW}pTExi??ShN=T^Ur)%GRSE63n@
zGw|IiM*TkaHi7dm0xv!bB$WQEI{4hPE`ITI!0$f2fz{QoBJ@JE$Lr|CmoV<7_{2|b
zVc}jWlO;|)GYDzoj&km4m<(0X5iMlyd!SQvqT?q9O?3JA8YZN;>*DHppwrGowq51&
z={)&b&^1(EgKA{PSd0PpECa5xC9dA>i_o9|1XTvW<-D)*Ea-_|58Qr?!Yl60$Obs$
z&eGcOvr%GCPnI5G2fUDThwnE(t{xMEPW1@v#mId#_frgl4t3aTQX!N47H>)$2TF^k
ziH9q<GymHk`A~Fn=AI`i`2$blEg0WG4}dD(R=#I``T^9dvk9gAxY>fNPST54S##ZF
z>JJ))UoCn314n9Q060_@J$ixZ4uk|M?jna$NJe}>S{=h|5^CWWlPLx5`eeBsml<ee
z2&}Y}-ifG;nY{vKIHX~Pz3^4ss8y?VjI3a54R+}rh9?Di0wnFDNH64uPtQ@UfQMiH
z#0EC@Zle;E(d=#Gh4oLNR1V-$_nKe<rP4H$osx)JmFL*omExcmz6`wle2T60Z8Uc-
zAx#HdpW%5m-0A#2!df3+eRc=0pYP%R`#p@gjlD=;k=hOI=CarotvC~<MtyGV$tX8S
zUmN<NRBONM<J#*nv+*c=(8f_Od|I$PQ7FPv=^K4Ncm`-aLo+GVPOr1(7B*o1)`nPd
zI*3M0nt=6rT5!@9Jk2d5pclTnzxsz4yY@~<k461tIq4ufE*olXw0ZYeMnElmG7yyZ
z<kTlsAycYU8w0-AlnNDHi@kP&EULK=o_Kc_<Y)f2Pu%P`83_Ca8309SLF1`<^#tj+
zQKxRh%{T5pzf_TV)T&l__XEMaz4#SliyxoJ8%|srRth>$6QDmz|D_FtnJBV#6Eb8}
z2y{rGc5&wQks%<Ljdo$#xik|^#iXJmAnvK^`fF6Ib-Zh(w`>V}9V*D~uPCkT7R$~^
zKO_=z--7|Z^tm=(JAVT~n80(&cxC&ufHOilq(wi4a%llx5b$@B0U+1<#A#q_8+h?K
zV9*;P8to!YBj(jm6;R+$qZ4gmKVC)ZjPOgJ+`zpL0aIlMX<RI1-r;q+PK*@?sKUxq
zZMC&}xAA=Bd`f|bOD|@Ot?-U*KhM`$XLM|YPkw9fOJ;$&JJz+gTC<4_lI)E|Hlusa
zKxGchuegFk(4x<j%WpgY+RcgFBm^h+66kLwQO=l!#Xe-c71}5$G)x^=jJI?|;$5H0
zlerbVJRWB`OQjPhBFZQ%$%#OTQIca!KdFOu=D2h9dr@*ueXH+I8?@qW?*TXnX-8R(
zBO#@Q6#=rO-dYU2{+C|xk`vVRsKwuEQ&%J&dc9GflrK}e4F72b35J_*q`>6JCISKJ
z{_B#kfTWXnH?gimak0fds2z)TV!D}R1e9*Qp6IfuwZSMn3J&k}0_QllzzPazr<l+@
z2`xbq+Lb83e&!Jew=a+Jx!<^e+}lSjSjKAaWo!;#MY+^~=heAQdJt61wWS41;A^e!
zVC@#Lemg_2Gt82NGU|LFY@%5f*m1DYeF2r4gO^`y;quKs9(mM9G$8Ozou~BFP}jr4
zG_*IQy&wIz;O1=1%4J~vCUFT;mS*QTTrIeRX*?ZHO{N43mtT8VHkr)6=5{uKm;>@2
zF#>}=Fn7}B{s?5ua?6!xcRo##Ce#{?7QGly+Q9{*C|;`_I-M2axS!?+Eq?MEiMW)h
zMJ`^QG7ch@#=E}y(F=c&IB*&s_TjjlE+Wq@Ex0++zz$6aKzMgF9F1Gpz0+ca-KiOu
zbJijm?=c{x>-P1+H2<<%Jh6*sYF15bXLaN~pbKVPLERKm*AJ-2)qk}wAyh%m%?M%S
zU@tlT?<B{s*kJ^aqZqE3w8h`X6R>uD0j<O<Ft6uMx3(**(@*>y$GJ4AmhU09kb_VE
z(slI5TX5YFaXP@|=5HYkDy+5Txpnpk2!vH>G`_V&93l*%xs_wk%`lE4mm7C$z7o6A
zDSWSl-O&XMk{v#dU;f!WET5tHU0hp1)C+J^qv5Qmq>*|3qZfAJ?6ExfXy{?}T7s#D
z3a6B@(CIz>dSg^9JVv|!e3=fm1~4nXFcy?qp!Lg(RW(MXOG0T#>PTFwlS?j7hyf!5
zAZ^GvEKuP9B`8cdpu7aZ1neK-LvZ-Um_V`Plks5Sj}3(5lGh}=zF-031rXUXL;1J^
zf7!=NulBNy_L?7Irz2bGAu#|M>9=Qt3sKh0I<1{-?Z!63iiepcALY92_D=3`FDNP1
zwRd#=DTUxCKdjPi6ZwAgq^j;xcz}`q(El+D)9NX&|F#ylaxo^-c;<6VD56^cTDvpv
z7}5dPOn5zsHCk<D2(;0eK$cZ%(S|u4Zg3|PtvU-FTk-IlpV`9d#vM*y)q*)(ZT>bQ
zbm04ScwU3sQhRQdTU~QEU0!t#hYo}|cRM-8gxC`pkjJh7rQ}^noirKe3?ppyUqQK+
z;f3dSasHJNPTlJ=U6-Y?wQ*&sarzQ*we{cX8I@VpExOe`Az41($My3mi*pE#TjK>b
ziKjsPCvX&vrAX)@-)r5kiTh@p#KP?JTBj^3l^;`W{xXFD@-FV4Zh*gnkYqd^l^sxR
zNeVCEpdnz;P<mF9K`=j-Az%-HeyemUwRQ97T}<5{AgyQk%&*_V%U7;vt?^|y&i1|<
z=WRs>$lvZf09ih<yYma((bnI|+-}y|NYEb)aO}hqW@hS`nkEaJVn{8ZNS>94it1RO
z&(!yrTy8-Tw!h0L1s7;w!Oc+*Dbf(X-J%NH#Y1m!Sr2@w<dv-!WcoRAFV*p@dIZV~
z3q4e3VM>n(V@Xk6tl9+$L&PdjRUETurL0(-7t$UCmQVXQ_gojxJ$D(7-$u!uN3(w!
zYyB5du1v#mOYog3xDJ7NWnR!azsxr`5P*q@Fx*bvxbH$?bX;n4M(-i+Lk+FLB^<AR
znA2mQ`?VJSyZ_+?!XV`|n$po!n1ysSrjkOPiZh1q04PU;;^<Q7a<f(n1IlHW>-!b?
z!7{pXafCNg7;e4d8L!ip`M`JBf19~uc?Q~;(*itpPk_~nk$jjc5!U@3h0G`Y9+};&
zL_jsZ%w#pi_T>Ao3c!R1M4qeqTg_w5d5}OeXQ}z1=AhQ_xb(Wy9pT*bEnK?1iS~XI
zL1~aQ`?t!8v-?j|O1Zq@OnuuK06D;6cJ-A~a^JI??ce+0nYr&BwOeapcYh1j=~*lv
zU&j1m1N9jX<57k|FK3BpLX^qE3gLpcE-nw2F0-OFTWrC4rRxcBAh{2Hhpgvl5!2_X
zQe*uRV;D>^l1w_OB~S*)0;f#G!QZ7)f6N3Fp1+P~nQE*jh<pz7{R$(%OhH|>NOWOZ
zM50Wfi%~oWb0-`O`Wb%rcP}G#b`fw5ZHmjS&%mR)VTX!(s&J|D#_<^gpr)l02TX1+
zwI}E6Or3R9T0yNWDU2d@Q4g+H#yH-?-tamWYLDamg-twpYZk{&lyKvE#tcO=1ajO8
zG_`hXQerMraqJZoU>!LT9x&YZar07wGmliz?<ayHYIdg>4)&##_J+Bw2JcaxR<WWB
zT>-P-n*uTY+QKuWP>STk$OE9R&ne-cn(D1@tzPI>k(w9>?Tc!%k&u(fSTX>v=C3jx
z#xv!Dvyy{S)nnaAa=HfNF>c@NVs&*J8yh<qjRx>M7u9kQ-RZniAI7U+?d7k19&f?;
zhEjpke2@?E%AeY7hnt~WcaJrmiaMj+aIdwB{k<(zYqOYNT*Bhw3>x#~t^%V08G{V*
z*p*$C!&fFtnpvO`U@ipGlfx7hs2gG!dwMx5m!Ez!qG%tfnI7gH#k(v6Vtoy73{1|`
z6ROx&iV`Lj4k$cRsBAhzVZsP92!eUgu9|YzdqRn((g3DrJ^bdcUBO<9T>lgm?>JWX
zehb6AiO_3s<l?ym`uXs@5WYu$t9^-bo=WA12~FH>R{#lN?G>RA8x4oruDkGjA3Oc8
zVW#phk|f46UvA-#|H&1s-pV;vHDI0b-Bg$}v4)guZ?39bC%P^q+kN};2xs40D$={w
z?xt-QGXW{zZvl+@`64W|n#9@|&;*8aV1|-(;W$Ta)<JC+*x$++qbiuFh2pWaX`9>{
zSS6S+EM*LI$f{36SDI3RS-I|_Jmqm1mZTY4`#tPjZex3U53T)ujE8+>d5;;Vm2!i+
z-i=n<&(`+_7kfQC_gzWW&))3a{~K%o<VFvY>sxM6d+c_z^x8NYV|nVy9{ffaWnH)5
zU&ElkgN-!`3Ffh|G>6&wI_8guoa-L;Qr@k|UDX8`@~OI+g_r@egW4NE*NUmX6;n{l
z-&<55;~D6xL1?vM-YgWTbs&9+;uwgl&SWBiFm$bgwHqnifw|yHRY;tdBHJ)&+=Tke
zm^|%XL5|tuJ}$i6#D(*(Bk)HEoEh}S>sT8;gD|X1h~U*Y?q~O(LIJ-*bPMCE@I)mY
zJ;lD0YsVQ+m7Y}Pj9k(vwaw&3490h`Ke~k3(z|f^@-}w27csx=<Ms_H<}r<0ZS-Ba
z?3$EgOoWN;DOPY?0wp(A35-lpDtj0!*|GwY$hqK$k2G^KyS{${58%}BWOrx{t`;*!
z4$|5VOgfOBn?K=UcP(ZEAQMNM6#^Tya*{m4uD#NGkZ?_%AqkBVU7M7sD=w;apEU=l
zSx7V<V|}-U?VUYr@9v@7=^&<#!%ocEF+cDTxaBN_pY)?`cdPSKy%$}+*vGl2hUwb=
zTe0}xgjxW(_`Uem^O-+dS?}~evp2Z*#IeTvvPR|MLGIPVDDSyRzK6Y57yGR>l)@?+
za|>(?8Z&iFH$0Yq8V(XBppan@ovs`?b;7YME)A_9WcvgB8kIRPsbDMiS8p``Hduif
z#l=@VeQ`e3uBmqz-Kxv{_W%|_$CBnbtsCywr94Cp6BzG9c4Xm}Pc6CVv|>E-^m)J|
zHonjQySVo&a6D-}?l=K_Pmq7|030`f>xF_N=oG6GG~o%adMRjCf7$tE_jeuYW-Og=
zbJFW_9qja8!c6&LjEDPp=9wKl_3bNITTPhd$JL6gFK9VS+S4)4leEkzI2Eebq3@#I
z_ON~{!qUka2D=G|7JU7bgQ5vl^7-oCPTV}}K56jQ7@(q%$G+R#yqx|}K;meWGv)cp
zO9!dLlimndkE$-m^i5>c=~YxC><2C?Q!Z+>=qm(HW@vYNxOHRC-QL>8-rgQY<37=~
zGsjCANcBSxzEjBpl#(nPqCdJ_-5A{pd*dy{`OP2h<*)weINOWgs>S~%H3re1z?Jpb
z+xlRVKl1&<=GMQO3SXUDntlw^<%fE?+wc>=@5k8)<9LXz&3$Zdh74>qX6G<7+raGX
z6iRa*bI|*plw&u+3*<W(9pD?UqArCjn`Nyh4YzfgeC*&-*DF@q-0>~G8+<u%KPLPH
z{k_KHHM<}mF7Fz$vB)AUzR!jgQJ$ibUl+go*-L15o6^$UoxytNOXy{*D2229F5j&%
z@=v#q=vN*sVybi1Ne$|1tBRQ@1YlQM^-UC>gf;-K!T@}@nJ1;sUKO43b##U|Q4de!
z^^3Rh=zA70zZhV9L$nSPA^{cHoF%$0XQCdbCWK1<NvtEc3wHzDyg0(idyA{6uR)O}
z)tA*WEc|jxj~0bp1zc-=)`9zE9<w4lnoHC3KFZYqNkp7ab=;;0o%Lqz)p#y~l7~_y
zAie}SUWlS$wz;>5?Mr*u+1bIM-$9ZNkUJ64gSeq-K&&{YmV{22q}d3g@lLflS_|9b
z>lkO7w^FD5BT>Hki9xcuU(Cq2X7Rs?oq^;^$7v^v)31Iq^cFu8#izcz-MsR@*Zkv;
z&r}}4Z0*sg9xOzOlZ4}J;HK!KKkTC0-NgFs5VcwZ3roi^yD*Ddqk^d!kLi+>NuZi?
z;-L%R!@jfR^aYxq*v*YH&|R*5aiq*u7WaN~mnpC&{eGoqVB-S^jEaa$YC9#srql`W
z+~V#=D$>-^EDdT?K6}i^rSm(ua_u_2U<3~(4C4)~4ZegRoZ^M;Iwc0|Xy<lZN~wDA
zyb^pi0Iu5ArIQT}+O>(rCdaGYrUJ8|6re7qFeEKE#rEJiOwHbdXxPO|=XUWeA6dcf
zcB1(D+J!Nnt3W?~M3&P5h8~w#XK>494_mj0s+_P#U})8{<C3dy`Z(%aKxsT32AKP%
zQ@{2Lt=^G3B+*cVeea10=+8NrUUIQ>D`nvh0rg~qVVKEr;RhZnwE&fh$1-ihIL3Z^
z53AcvG+Rw{J8d!o$VivnjYaJ#2r|#9l2&6vDrgCM?r40wygR-V_ToDjr+YWX>CR8Y
zdGnVOXZLEHv~9umw{-Ep$*sYPOCF^=;|M#y>bp~)iISCfbvsx8=2q{;zcgDu8_rc9
zM76Xs$ekHP&d5)^p_}D>^aexpZZxrayMk(c26GGZSXh`ry-`7}5rE32M}w4qXVm4D
zzDS&Fx#=cV`1P-;JuxJ-GmBa2JV;TB+I`H9Z8_3vf@vK<enhDXO<oJ?Z^Mg2A=U+8
zDc;QVf`@i%jOV|40r1<Ls`H&1u6I7q4J`@iV=|Rjf=5Pxc5U9hL->9fp63g{!Xu-g
zTBLCbPMB;4L1)^wwTWtWCNl!1fIaZ5=)_ksh&NCw&EeXWb-e45B}~tH*xi<_hw%ce
zlU1Luj6ng8N=lC}Waj&>+iTOg#wgV)=u<BP%k4KzLi=->grh6#IlSQ|tI>MFHr1W9
z0Z7f=u;u{2o@#VGVDY4ftsA7cplcF51c8rgt;9-9q}DVZ^{~FXkDcZ&c6N6#9CnfC
zN#=4XSOVAg5O95OnE8&MxbQP%<MJ?GFL$Cl=tirE(v9b%eD~jGPUrJ+ws$Me4la6q
zfN$;Me+zm87BCHsB<p4gF1`j_{L3Zh<PVRA*S>Rm^tJ!B<{f`>x^xD!m9tqjI6i<E
z_)$LelYEF2`{;Dr=yW!)e!GlnZ3eURi<qCEMPshQz!aCN_EU`dvg2ul-8h(9Y1o<s
zdT5tV(l#cQpui?oi@>C#qD`2YUltg_-Uv;8<KC;qt>2?0!OWG>GoCu>G$?29;_2VN
zh{0eBuAd=vXVB`uif()xL3x@#L>4_60`dS#T+Bm{5qL)^qOPm3Ltw5e;B8H}2$m-#
zOqbLIO?>tya_v!&_twYm@I{<%d>4kp7GAxug(sgliQS#V2&NLSrvm^vC#ycf-u@5F
zi7fH4c0Iy_AE+SRmu!Vzxa<W;cFm&xDici>R96Zf2%w6OSJ#-uJqm+h_6CK05;$6#
zBF<HSY9&Be^7%O8bc{}a2di5<*xPTS*KK1QQ(r>TG*3lTmhVA;z?tHTOpfQ{)vz_b
z9rlw=L}@Qe^3H!q^ZlQT^PMloS#vYaNHNj6F?X$zcXV^mNkc&Y9;bKq$GG#0zFYrf
zf)fw*dRPAHZvWh0s0F9%Gu8Vs6`qdD?o^Vwj-PrXH_ao&d4zVShxYy!?%b-NR-eJb
z@&cBR&tYb<gruR`L=D9=&=g!Y1)Q|iM`6X`Tofa!fO>s!#g}cE)$zN$z-2kB*BLK>
zp5ye;8-%BdpD*b@b0x&M_>~;fvjHx=vX1pTHxUG6LuyEqF4lU#13x67k8liHoB`+k
z3H7Jn4E{L*dj;A$X}7qb)oPDJSZ|zxU?ZX7&!YB%j7gsR%oq%UDq5r0uvq&b{9p<<
zuiwVm2Ny9t6QH##xC&<mCs>e^wBDj5t5~LVxk=t^^;(Lv@7E~>dv2JuUd$NX)z>^?
zA^mcFMFf=i9{QD5{eTGlNV66~?5RgYsg|QUO*?*$VZ4u>_CEIa_t5P&F&giK;&n#%
zU6=biNJ(jk(5b-5Qw*aWw4-edqbA_=5To6R)6Jib(foxdYo1H;c0Zxe;BC0*{}8(a
z+b6EQf?l3vmoEaBe<*Mles~xke{#S3%3ll6_<^#w9L|*=!OYa7QOTcm69NtM9x`u)
zC>tW$r<=Bh)f+W7293FS%rDNNLE@HFaW&4ktaUudq-B=c2yG9*-ZAY7Yj$w9Ap#JZ
zqm~{5E`tt}A6A^FmIv2wQa>h3K)4ch|C$fb-09=OYZu}B5gV<*4{&wwQ%L;?zBi?I
zY+C%GS^R?DhsqF?l$T?<&%y_`3Tb4cF5Gf;#*{_S^lX-J2#`^#ifRs=J?!>h!ttq(
zV>D{x((7CJz>}xZ+7&OrbPCmCE(IoPuA=5*=)WmG@Ix1^T}k@}p)a&t1M~~C&Q|KN
zhv9%tJg9ef_6{=g5=_`Y)?Bq|BT728Y>P)ZI!zDl-2q;^{@a9AA*b%jP6k5k$xu)^
zD;HQfH8zfM+Qled$9{AJ-S`&BJ6$Nx;$6#2$;F*sIm)kotQDVo<?aL1SNrX==>HH6
zz#r@t#M$mR#_rQ@=05GaOMj)GE<CjtUHMzp{<)7&hi9Ux(u!O2PXK-c2@+&3<y9j@
z$q=Jf3(eg-xO1b9sm2@|g4u-`G^pz=wUqB?{6obtnwO_M0VVxsACGqZjmW%`8n<P{
zwLqmkDV1ulet&U#6WxqOjW|cOA@1)B&z(mUwcz>*O8yjfde5U1-$12IsK2=WvfGDn
z+>ng{8w9oc({mc9px;dPVV^@SB3^h>>>>p(s(L}kCrm={TnYg+kVvod{VH0+bC|C_
zjv$!At($9j_>pDQ8zt<uQUMyNpSJP@CIC6J_zU6@w`5fE*n^&f-HkDpPlt#U5^ol^
z+R>#<zW^+i29)Jm6<1XoI!){i$_{E&D^-%?AXaU!nWNXF#wQsnW%~RGqo~PR{*F)g
znbLGM24Cs9@pu=V_+@nCb&Qf7M)%8M74uUo?y2cB`0kZQvQpT?KivF93{w(6)3@6A
zM0mT8KSTrY^}Pb(^hD`q7uftY&#nJ@fZ&HZ!{kTW(MzKw?}jtsyD?XJ9QD#Yybxk%
zfW#Rf^~Q+u2)j)(1|doz5st_h%wu+;ftf{O%L!&M>Zgc@QWh#Zp|#_iLy^U=y?ND0
z)PPSam{9MRe=D1zjeryy+2Eui=#bZ5pZ0O?Yd5gHy#_ywxtqc$Ze|<ZFC#2Xso1s1
z)zi6p9Dj-tpkP*mgZ%BbPJ;R_UDzTbcawYx*==RPJ2}N3Y?{O?aESg}!U#KP4PO;6
zV7!M5udn01@3|N4eL>k%O3eurXt02Z`)byKwENZ%x(KjwJI2Zba)A|QIkCG-JBI`5
zJqxwfx&qvXF>v5hccqH7=qADvsTg&4at!vQg}D>}i5FDn7Vi#1cb=QH!s%n2Y@<Vq
zJ=(<}+d)K3J=aIcpT%6|K2(DSs(u9}FU)E|h?#nVu$H3c*Rh}bt|^u{1PlLdWB~pk
zV?ZgaULLz^PgjCt?t6~^jcjjx9qXN!aHIXJ9Lvs>&SJLm7;52Z<c^OB10+PCaYl?8
zG+S*no2v-II_gt1m|L93yz&g_zK@3)M*R#iwW(G$;*u^?i^(oeR1H3iG2k6v^*9t)
zz*TZ(Lipjur6z<b8sT`}0~&KaR&Ta&>HO>PLvsD8EVqK|`=3Vc6SJP$*wE``_jjCf
zM&O@A2EZ%1u17|J;&$>11OQ~Pj8cUR(iK<$Px*=8uE9YxA&4sggFt-01L=#&2;^h{
zq{T2@x4qFhEL7i*zzeZ@a~1d8e+<*J73}Yl>XXsYlZFshsh%<nlZI94?-A&^bBEH3
zM3S)xMXHjpAYNIsLo2MXJU1=)96^Ozn@M~h4;>6!IR<TD)FwPgVK*As5$$hIJw{{d
z0+C{vT*Y3rj$wQU!*rd2zR;gTxwMRF|33I0(XgoXxewp<xMNf3Io#xRt_n;qdRVN?
zVJjsm=Rb@@-aE<w*rRaC$%9PuAwsW=<?4swxGU&J>*$UzV{d!|JL6YTa_eXW_cM>3
zj6voGi1Pswe?U3~AkxuZYY(m6Roo7$s87#gZgBx~3p1$AQ7yg8JcCg$K{OBvEQJY>
zz8rTVDv*CA_AN$$Z~#N`<s(<U1t-D^ZWbx;oSJtLjbog9{#9g7htf(2y=m+Y&Skyi
zCQ6k#hU{ebXAdA_#NQ(hfR6vAlFxNZ8Fk%NEo-D*x@tm5R8`K~D`QpE0B9nzPG*Y!
zuxJnqFM!g5<bji97y(|*!8t6~K8De#gG(3J@Wc}jpuH!240U??-1RD8+hA%YifXzn
zOEZ@^0R6U$QIF`jWsIr&knyx+@e7Me9%cHo4+ONsm!&xhu^h*JptA)G_rO>Wd316O
zBwZ<%$Z8^@f&>yNi8BIPKa0?>Aq*GL@ZJrNuQz2|R5MVeKS}eW<X2D*DyRklW<nS9
z6&IBi&#hC7Crh;KFpamd0nmf*T<n0*Zy!-M0PzGoglLrCg{jiRly<=|T17LuhOOZX
zD0?&P88k`{p&G0p_X0#1BJuiwJ3^fG&}y~V7=%F`wdq;RFD+nhNsK{#)<rZD0Fm|Z
z2ovM(xkbxxJ~BQuwb*qPfo1{Ppr7vg<K|rBU#+`%`gdMOr@sl$PsshoIBsFH|9c2S
z0{x`TA+?d=IA8Jo1pq9&%-*9N+x0VI0NO6Ht(2=3YMK47m4eiBn#jzHUZ(_=5fBW3
zQiDG7EMYHTclZKkO7EoxFSv7S6{pTDqdq%@y{$wz@=_Wr`FYLD=RSgOkkjY#W4f+B
zI=eCEPn8)HU@3OXz2}Cm+(j8&MoaIdu&uKV3~7h&=PKKyJS)|XOLB;M`si9rskxLU
zEz-0#$x_sUdr>J>r6@`j@Ur9#xBH@9pMC;_UJ0RJMkOer?t54$m2muY72{Jm0s<Hu
z)0_BEjYD7nXymDj5P@4kf=KOvW28BeIH>b&3H9;=sFm(xt4_vXXZ#wrhR>nm&Y@90
zi$<A@!7_5!N1Tx{7$NtEi1RVp`)%y+-NEgvHB{@fn3<nrW6+qb!uN%N7!6V-gDr$%
zLGvvUQY}YjA=%vWi+cJo-<|UPIc66Fy!N#<tlqu`KTNqy*LTXe-Tigs#P#O|O)aTp
z7k1siWz^p-!=c4b^k3rb!^;991+j3XCMxMZh^j_iRq&}irDFS8d;oU+CI8Py?Gg~^
zbDE1V0D|{2Cq+PBK)i+4=p`&xK8z@C;{2=E@sU6BUX-g2H~Wx68J%9#*%Q(?pz<vt
z@o0U2UA0Ky=JtAo<@;2Tk*cJlMNfJNbj(sDmSeaE47;Q`r8+WM4Oj`olxbq~9VjiU
z*p?<EqZFjYFLI?$-!sH0!X=1g#n+G#8Cm=#KSaqZq2vcBdp_!+kEL44U4C*pTMrU9
zNMlvleE7!UFaWB`gv_>^`+Q@_C6+cTl;4X$Jb~O1d8>N)e$-0$GB10aY+-A39_xc=
zP;uwQGbo=$m9hy=2{9QGcZeJV#Q6~Ib{qTq>sY->q$8puFJS4|ET-lvTrNw-o-hN_
z%gd>njd|iq0K!f&s#enkG||jx9M5t5-T<$Cc^|L5@-m#Dhct^&4rZ{^`6>qKI!fhv
z<@z%!uXy^UObkE>GJ*~%129NOH2@S2=nkhvA&|zxIU}Gpf72#i)&T#XbVsEUkav5R
z>H#PXD1{3w`>QYv!UCqz8h#Cp(t~7_u)BQ|t2d9~zI&IkaZB1?ut&tZu}(z_&wye9
zE%3pWoaC9Xx~7NQSAoa>XoC3@E`yca7JQte+X91k1mp=&t4eVdk*BB*EO-G-1<=Lg
zLOhgvp&cA$APiq4rP_p$ucIK2<XO2&DNc6(z@yzi<liMPM8)?}FL^jQ=Vj%Gt4LRS
z2*uzY8Gtu!5RaDjJOaK5Sa$=_zf<bFbi;CTTd9#28G@XYR49I}pz7X(a(D`9*2Os4
z#8&hQHb>8)>^9H{9zdh=Fsi{x&ZS3rAF(^&)MAo#(eCb|y}ydv*Q%)18_F}7#mw9k
zs*Ql%)OeI39+KX(CdTSCkP?l|fU{3H_|Uie_`RPW;rVA?MVvR`<Pie5j()U`&E8iK
zlqn}j{}<O=7=N_jg>}X|KQsR*15nB&6F|?4J1;d6ns89$(N*}ZgJ~=7XZPRb+JQV^
z0F|yG|C@0DGAx3+F=$6#fU}9_;CU=mp90Xs<qH=vJJ&#Csf^ZUQtZeqx2UucR2j7D
z(#4tpr4ngHx?HHVz1PBE5F(E%*xv@a&0N)b$YS+8ZqO-&O^aMupew2X#0dHn6`&fN
zFytUM1d=)s6epL=3iBw)6nZR<!vAByk4kna{30XZqY}{K53w{A;NBAf^3cihD5FN8
z<QpD^0B@!R;AyTbGFfeEr7eOKWCUWmb+qJF%uTxqHJXe0hi*EFXH>&`Q48-yl8+E2
zP3%Tjur+#-bH6jC`!QE}m@DAmRxri@<E(?+?;}DVaj%8_&Kg#4R#7cCFtad^#ba}r
zS*W8vN8Sik-pO2~^3bW-9Q9cTXWr%E*fQ{IKe3PB{@eu&(+%YLSjmQsvAXveIH3>6
zrv<H0e?|Jygdh1g?fhQmx}i&9g2o0Iup=6;$DQicLQs`$T;^W{)kT_J1AWT6s&GTT
zhsu5vagB+8z=}$O^OwRI?2pc4s{9y2r-9*U11~;z4)6ca6PQ{I(AlADEg_OA38Xka
zbXf+B+<N+`!MKZ7w}qXp4Ggn8*x&tbbnb8qa4Ekwts}I+p;T#dSVMxTdP<n-F%fta
zQ|1k4lCVO_JM*}MZ<&ErWkwYUC<Y+ljV7RqK6d@fUVui$$Jr$x(>1!d8L|<vRC88b
z#33AqBLomgh|^FcBt<uj`>d&F6YBJyQyyK|IXM{u#H##`5N|3tAp<Rf&c0KEAD%=d
zIEggtW0Y*78DGNg_$7pH6*Hv=FjIOIHUAXF-Ha1ZMj`VOWKJ9XxQG7QHn!F)D1|jt
zYQ!;^Vb5TyQAWAup)v1adN#x57e@H;|FDVMw=TjhwUDG^R_qDADcs)w6~q`J4CZ+<
z3Am>yzwGLZ5#S5}r2vWb=LE!#W`p4QA_GRd7Ww?l1~jxo-Kj@YYi*^YB4p4#_q5?5
z&qQ{AYDktbc}G%&M5C=D^@rH)e+4Vk-^(2McIO(Ne>TO#kG&gn%cN7NlzEj>E;m6<
zBJ{gG?5uC0*<3@fzl}5<vG7Y{nGk&!W5UsF{<IEe?D`2IH)W(otg;2RkmMVz`9k5x
ze1bY>`q;pyg<j=2pDDvE?L{E~?ff2BSe87G7e9Fbvy~7J&W4x@rH=z``srv45)(gM
z$-l#90Ej?Ny?VIilcy%XOnll69isQ~WT%~rV_T^X<|-|bu_1gwE8<W`d#&zHJ8d;w
z;UCh>i_#XF(JgEZ&!glt-0ARCHWl8B>EK>?!5k8YOv?bNJ3`9FppDM%CU%--luI@E
zKBel2pc8OojX{5e%xm)EkD?AQ$f|b?TixG5FJ48tvZO#eiR;A(P^mBdP>$aKfT{|R
zJOY}yB?*Zn<)>u6<#GuL$>AN9^#C+U$)eU4JsKqS$DAd0{mJks{XjARWSF$*SDv9%
zUcjJ#3(es(m@j{T4P&=|1LwXrz~aIR=9gzsDu)>LV{|$l^m_Z~4>}l(_K>9eaGWv6
z@a)mJW%lT}U09-U6veYp%tocBIHCDmj04I}#j{#O#HMN67l?u%@lI%m=UNKU?BsNx
zPgQ}+?GL>GW#7kgJ;Z$tA5~9e%{k;7P~l1DW{ykEoQ^zzH*ZM6iWYd6ns-uW2{}DO
z<*<HIL6r27W@C9Rq1jntCUeFtpG4d?;=Hp_h}me!u1S;KL)krna<GCFBP7XwwjZx!
zyZ0LW+{aXK0*&$mm@1t`C0OFwO2nhF(?f<n#@P_#h~iiATzPSN8H15YJm9k^du42O
ze-o|fJj&H2m9v%@z9{&ionLhRX@WYu@Ks2_-hi(FK#}qy;SH`>B<`P8k08AVj7pF4
zst;V(0|tQAftUy+V%RKpVkEfeTII}B*zJFn4b@!b1BkL7qU;XttZ(7Y8W}F~x<*JT
z)FJ&~>Y(TmKug~+B^(21fL?M9y>W^>{eBTcHAh~AF07%bbzpce&@%3Z(PS_H+jlTL
z4YTl-$&(bJOPm5v831m<r7FO<27o*O&qv7%FjFaGspey;LdJkEwQ1~1LW${^HU9@k
z2H;H`!mCkaQC={DFzaqZw3~z>m2;NZ#b)<1qaB(+LBawOxW)@0*EV5{KyuxQ@eCwX
z;GQr1*~AD7{aJp0LR^Dn51sCpkavCuWp5s{<@?YG&!X<HAV-MANs%H(<_-{LT}0`K
z$v9L{QuB@>&Gxa;`7C<z2C9`4rY))L{FH<DGl}^H>?;;MEq00f&GVEmlga`E{uyUi
zNm<d(ujSMXN7)2aDqP?k8h<xm7vTj^?5}VD{#$7>GPszrAPE_-?fzFejX7I=zg$me
z1h@lm4Gx)EHeeN{uRlbd4ls&#(2qBWJC9y;6VB9q$YS~)%l+5o+lEu5a~dN4qC*1~
zSDC;9EJ5f4yMNI(PDo3xR&RDfWdIZfN`Ze<r84Gg70i`=R7lQEaXKhD%8fo!svUN@
zk!qZz{gkSS4jBvZ@Pq)W3^(vyB#Bxq%yYK@pPW#Cp~mK3m3JR90tp#|G%_wN?P65!
z>X0#@-Htr~`kRb^3KOIux5_FAuod_X1pX{gKEt*0QL>NC(JNRRJcE)`Ww*ZWpGLiO
z5+#2gp)<?9_9(@eWNqyBUqEa83Ilf4>ODM{B@9tiTomQLQuU_{0Oh6G3()C5+WiF-
zEC@VWov`S-WRe1EQi=w?US#@x@;6};vY86{Pv<UGf;woBLLwpjdJLpfQ<7>u#NO})
zbUT+Z6+D27e*(Tc&Gqs*#>lch2H7eG@hami#J^x^0#Y#!>L}v`!f=V(Y>USvH`5d<
z8KG4T{cBpaQh`zu0U8SsJpuVkuSU5J`npJHKtwL0W@Oazm%>Hm0T9)<7L+kvqMra2
zpN@-FN=;e0(nIHr2@((SILAmjuHZ0^Lty}N<x>-(hIBzChg0an3SYkv-ykp1C*~lL
zhw>_tG)9t)*fZb-%?cFc8KiIs*kj{B9)UIjYVk88PK65`LP$749eApx<8VqRkmZyz
z>|>a;(22i-d>p~aSo~4&h@AKZ9bUxc(h7WknlT7Q#}qL~LK+3a*@7Pm_><k=Hz_(T
z1R^X~EiYy@M3q|QLQsRMtGK^iA!{bZdxY=n7+Qn`g%V7=J{?O&+T6%E4XN_#DzqW`
zGBqQq)K(Bh`)J0`!-;73R6Bkasf8>|LD#P$2<P}ZNLWGQq5=G{##{*oL6uRLwXZ4&
z%{djIA1gC6r@(sBI5?`=2l+LgE7IaB8$qxT@A{t0wBjTYPmgo_eu$}{%rxJCrPoAC
zT^N%}9F!{`9q#^<)6$7tt|5uCIL^&(bhr$`p)dd%y4AQ2i^907HLX^t=SfMf83B8e
z3Y4ZGv{*<*w}dPsV=!i~fYO8H=H@CqU>8<p3pi9zi#>N!E*jCGA>jsvkr3Q~!i17f
z{C!$j5z>^fh#`MR;51NjPpRrX0n%g<XfacX{{{S`oxjX<UviyYx57ribwW!2sZ^j3
z&ktOO$nfO0=wzOmcL%WWLYknc&sPmrnEU5=+yk%J-Kq2?Gx>5ZB~WQZ3O^+Esurul
zPr`5(LC{b}HG|97tENJmf_We*O1g$pL`9)S7*-LM2o<zQJ5s<yx7RcXQKv!}hrt7i
z<||g)9+m#2W9;`5%+5+mkGKVd4wK#VSr~*|eiu{a24-sw_>Q9pJxbt(>kuVXsu5NW
z4q0Q-;mi|-0P&auCn;n&gyWDHfP%Whe=A0tPC0RJJLLq<%m?Up#?00u<r(^s#U}iD
z5_w4T8nwtacmWj)NxSI65D4{%j6fnrK>bak??jK)SOF9;mYYT5!}X^TpvJ%>zhCQ7
z%M@1fqMDtjig1X4;)X6QdUpF!qV}E&`Iq?LcLSHpf0Y0z)$sFgRs2(2tU|h+zm~T#
zAp)2{Rnuk}7*j+l%9yy~^$4eq&PQ<wB%{bjpHYKR<#`F~P8%~aP=r0Gj(WNex;iEe
zMDn5{jsfEYq-iLn%fj1{9b5N)FzjA+KHOeb)flLUB;YCF1C&AsH?Q`vv$Km+Cr@H_
zF2~fY%Pv0E5|G>O2N~CS)GAXTO0|=5mPr)>6-`Hq8V0GW;2wVo;eQT?08uRblL=M%
zLo^PF0T7H>Yfjk3C7cZ)jzB5LcmIjgn4YbnKa6na);=zsZ(?V2#BZQoh8Y1=eo8K`
zPsV`s++vV)6J-z5JVu_yNO@<I1x^b%GmBV41@S}$Ptdr5Y_&A$nG&cv$;b}R&zlLN
zWy7r2=Sq%?6@R(%uk4Bu5C))!&}AJu!U8DmNxv2QuV4ULRAfn#b9#*_x7?{Pr=mu)
zzzl8Jv|1~Qf!MR5c3~M+1e$)zENRAnOoSYgLDAscWF}wSXPuVRLlzpj*_6&zQ_yzj
zRo#HbGPGMyEJ7%Lfzf0$8~_O!Nb0M#3B2&~ui(zsSMWgVJ8}BNN3l4+gfkDMm_P1t
z8gDdmapPteVW1l&>uWiIIv7f`6fwE{-Q510aEq>!4LT8qSwbNI4&yi!20%|V-KtsU
zw?t=T8^*%~4?Wtz!tykWR)(b#-u3R|c=SDsSYPen{3}hY-soX8N;%$S7g0@3uCN0U
zL8{W>m_mevDh^fpFeigS3tbrmHUJtkkPL%_2YRQZ&!X6pfFj*V-t?B0Gf@jvYw;Dl
ze~t7D2B3vMCO85_2GW&$+GSNADlV%9gi#*_DhW1OG#ytLopTI_U%TmS1nBjY&XY($
znXp1z&-7@cSE?5o<3Q&v9?wBRF9GS4_r`n<^3Xz~1t8k&#r-b8JO^QrV=#;`Rd-Mc
zLkv1(%(=pk(|Odaq*O^U=#=on%fE#iYhOS)n8uYGzl-&)S8@8plW6WfiRI-5%rr{q
z_xG{Bxs5QCmg>4+LXkgE_>u%id|c83oZNrvlSr~g4)-`5XYo+AOFVSrP#6H6xDqRC
z3eOouliaR@#!MB%fpo+rBeCB~Sk!T0c@BT<d*-mW-@~QXo4EY?9y)sw0?$KOlH@ak
zV>!WV<Yo)6AWNy;IfV%n9!S-pEFdumoIN0wSTY(a!yvmy;T1?KOQ+z9MM$G)%%L>-
z8Qo|8ze~Sa0!)d1Y6&pn0|=I&^!v?HDY5`I)6a;2sBe}K*#H8%fsd91GgF?6d%4*O
zElOo{3m&l;I6Hh$9m0!+Ba2^pA`~2bZMa$6i?a-4CNoJB6V(t<w`I|K!<mC}Imdo8
z!TM?o^K;W!T5(v>m-|U3)TEdis^pwbeC?I<xOnxmsD{V*GXg(E634i5<F~QC`5cbT
zJ%M_49>c*Vro(xb^)~HhRJ@^Qnf{?W?^6iCM!-Qz28S?!BtRTfYjuzk0S@Ch6b2x7
zv_=f;TX8^Yiar!E$R~2Q<z^GeLvwA|PtZ?+a;1uoe6)`DKY0w-ukGW~Yx~$*A94u?
zNkV&6Tfn=exYS&4kXI0-DUvK=V~`PpFjK&xOSfG9CXc{?go<w<-hfV9>D8wfzb+cm
zjZK6Eq;>vHu3s&DPa6Y@RXN_YOAnO`Y@~|h{0$pUtB@**5+fU?uAzVt$|aIA9>c1i
zFdoK`(d!kdiqC=g0*W+b+PI3>QIPMfomCk=s_1kn%b;ku8hqo9>FPXar>#^n>^Ff+
zuV28+m;ODDFTMwl4Za)Gjd@HhB$!?B;RmAmckbm)ymIN67*`<RPYjU<-zT=;G<Qke
z-MxU0Q^DfwJxunIMnfk4utZf!`Bkzdq%S~fVu2DCNm2>}Twoj^8WSeuL`9{=;Tng+
z04SYUQ}$^vZAscI07wB|@}~^Zk!MgRjx)6Ps3<7F*$0;K&_fH@-R<M`*IKxKwT(eH
zWo|g9q<F3?V2k+Tc_<*E;t;SgpdZ2q2=P{7fH4A`GSrL0-WgQZ!sMluOUz`ZNdq9e
zKNUS`79dHOkwMV7w94gMF|(+fTl=t*2G{!drfpb8n1k%xYSME9(_*1guN)atPoW!q
z%I?pg7ii}r<0l=!3bLN^02F&rQk4Z$S>pi`0&vGb2Gz(|3i7T(6rxPmQ?xc+oPYHt
zynOkmktRdjxcxMCTG#Q=z2AZ5?I$oe=3-&d#oDa_UVP<O5Jv-qoNCpLy2;qcwe`X}
zLbr^m$`TiJC0WA2ptO50+PgF1M^S@0aMOJrQ-C~ws&tGJhx<_UdYt))sdV}<jzeJp
z^ekt=2@}K8L$uJOrJdb9mh0&i*k<Be-J%;gr-$g_#?&;P`u1r&@!<ikUfjd^S6bNH
zCBYGgyVug(pr((aEiY}kfRb7CVhHH>m{WejBhXlZ-UT(KR_~{_AuB=w*%74%K<d(^
z>QU2ziG8QZD0lr>RmjqUTtRchvFA%9uC%_AqKczzgFHGJMmW@t!INvMj<c|>t~x(K
zFesJBUXUug<zch<%=MQni~y(fdh%q5BS3~gNpCUPQ>qEe(+Qe)JiPMCb9m+QCpaS#
z`T^X~K@tsc?!u?AF!wA@HlIQ%n8vNmFQVOBL%B4gm%Y(IkTPEiu^g0xI;xe1%Iv#R
zO{(sL;`ng7Bhw*>>Oo1D&x8PuizIc??;-1SsTfFiCOUlMP#6HwvLo<KOL5ydAV~qK
zuvR^$`_ft6fGo#=^}Rq{ViOGdU`@Km-m`*tJ-USTI~~0KdJC(!x)=^}gw)ZML_Lh2
zo|KVt^|&Vh5_tub|CcnPt}md8u2^*Hr*O0N(W;!YiitTjrWOik1-y_o4TwZTtAloJ
zIb8*$X?~mG!Q0LF^mk2O0PUa~ww>;;sL^~LZ1mWNcewIS)PcC#kjY3CcPsFdGaodK
zbc+OCKOiVSYZj;~N0#(Tx}0{^b(=J*H4^qDmM1X`fyzvR<}DxR&OL)yuKYXrE_Ff{
zaFtE5@1o+D(e7-a)BBVOmn!8M_DDoLh4>6A+n~IFG6}<0=d63+s<^)}$i_q~qLKEZ
zc=5AHE%PK1ryj;hfN@HHCxasc@a7JlkFuD=Jr|A$DNhPUtvTUp&2eK#LWgOP`_C@g
z0ggCLZHhOEJk)Jdc;I4XWgchlo5kM#02eRp;p*i!x_c2k4I1)ps%vaj9{?&(233?1
zI!-@C9uh4ANh1o&P;>MrQi8nukc%pH{Zjlxi$@l}<53r2qCPA6ZX2!E=|mk0SWbb?
zt7|Y%r|1+dST3ZIF)Kt&<Z;Q-a{(30lLbmXtH|%OTdylDRhm<ZnFvquGsh{pbPh)C
zSFtP;>YU3DCY;vm?2{xLuyl%g1&~T}jN2D|T)OmSoWK5y2;6B=e_|Lz0if!vOW}g@
zmPjl`a16PAwD>)>@JXoILAg{%tum{-yP7ugu=)qG_oN=yVSpz8a32&(t!7efnq&cz
zgw8KOlBazf(s3v}07DHmO+17!BEEjX5M+!n%MtiKHa7RLMyT=P6jn~mqEeBv(<Bk)
znhBtQX`}M*{xAUsL?)@?Lm#f={U2Dy?bSA3e{Bz&cZP%`u_2(>vsWOE_cW{yFQ<tY
z0$xS!`YJ2Hv9k^lBs>tvQ8cck6jti|83Q1~4^4a}Q&lYTqWEWm`>%HLf-H5AAEXSH
z%6YR+f~gJAK9zP8NLWQnX9X^2KKRNjb|kYUC3C_b&xT7xOQ|n5yVLA7JFf5!)OQn|
z+a)?SX$}w_w}RI09bCJxi<M&w$kP;?H_CYB(id=f^;ft*BGGn@jv%K)^|=Zyx+tX5
zVU+H2M8qGTGdh7+MG%xsTUT8@jRX094P$ECpcA(`4XCNW^qbOvqsYS`=5X&&ssSAu
z1E9@5PbCrJ7vVg;qcWncUddKE#)S)O=ydv6TPKij8z)v~aO&hN8Z$MK@{${;IWuPP
z4&hQAeTMd!y5D%X@18|G^x!;pcYC;Seh=3!_0a1i2m^;(TNPbt%oLKmIR~}0o2nR7
z@ypqjHHJV5dFmaWxT;1IP<An<>6=N*XIV^MR=O%sY$@?oAgLu(Djv6{04orY8GG_R
zBc!V?uk5kJl97~OfxAev5;k32j_hZ&^yv5~FwkBaBLwW76`27MN)5SIf{)K7FfGQH
zzw)!V@A!8xvu>;XGH$MY4Ha)rEqK-K*ifcb2&77vxhbmhqFCRLo27;beBC^i!U5&s
zsGD8nIH2L=2?JniC^+VHECb*mCcGx2R$)E{qX7MgnV?5h;5T*otA?;CZQ&}$l~AB?
zZS`ZcQxPhiq#4R3iVYn^QH*O>w{Yv$4i=ZDaL?&Q%*{^;H8f6zbgtTH@#m;enCjQ*
z)4LtHzx7HTPkq}oKKPLlu3l;5;;Vbu*@$?8hGkKz)W$$umBLLo%U11VIybIP(75(G
zPhPMDWk*wfz2&*6Pt;sln=H-8K_no}1<(`RMnd%WD^Ea|+0x0YVk^-C)0O(X>k>F<
zB(x=x;MxMg3#{yf`JWC$6j?}c4k~3P&4vh}KZWM*4z_oGLQ;)c36+q<QFT#|uq4G0
zsKw82y=X)*$j71{WdwdjvL=cr;c)T3g7a0LR2sFbhRI-O$33|4g^wWq8Djy;3o!9N
zO92EJ#bt~H_aUv~LpctG2OylY9BD%28)d6`wd)0|7;b8ZEr$W7rYqRm?4n+gd@%6@
z=$3A*?_qPJjhUG$R!+|1_%Z4N6S8qh2<f>?T1v`C>A}G$L%*LQ3<Es+=rSICY#tjM
zJ-qb%K2~pxxbdXM)-_Q^=eLXPMlJn`FHwu%?DTravkZcDU<Z#+|5iyxQ#DJoT&~SQ
zMxOqyJq8UPD#4WkCghJPq{emoaYM$k6nTp7#0HOHFkL(~F;)~xP>PehCh~6RYhwg{
z4FM?2kugPEl!VpJ&&Nlhk^Ea0HzE3xDPd`JUlFA2z>c#+7UzLP3RJ5!@kSIfk~vvM
zG-*B^!#0s5qN=v!Isg`*Rn;G^gE;dMr6I;d7(=2AKmkP`mT@QyfbK!h8;urV*A*fv
zy~hu!$Eo+<d*8Q$mtMS$*3Llm-?)1V5C*dQw%Y^j@Aq)?`Zi9Sn8S&cdDQDv8;~(5
zsNHj8Y^08dd(e@`(AuGHA;7}iH2%z=pTU>ExQnNMdlz9@x(SNQuX*<NI@NWnwxwZ_
zn}Xu2D$%q{Ut9+DOS!Ua7K{^7fOtBr(bVb5wm4#>ikM&h)=WhMlnRMPADfL42=87Q
zOI1stHG_zD!Et~Z^tUqL#3oP~4pLOsdJLLFAdUvR_A0g)!>8Jp3%JOc7Z&oQcweRZ
zL>icb65WN73{P=xx}?{X4D0q|Fo_xM5t!gg*GT9)l)G6%&IoZR;3LgEj8hjeivedx
z9>AM9a)#cRqN)hj2i#!(Rk+!-fJ=TEPkrnxws+dNdUXfeTRm2<34NMGM0KHs<|B#{
zT)DP|o41-+Tx{Uf={d~J)uaniB;kQAuAyf(gN6>!>tq;>GJMO&7O=h=;rit+8-ZME
zY>TX%kP{9ZuZ84mm(`_CWI8=(fqX)RW(qz(GO3rTIQqt!(6zEAYciP<)O-qkJQgoO
zN5!UH@8lKN-y_Fp(~3=e&27|dhevtTYC((KdG1Qul#zXvlh@##M&@auF+JKBffQ+k
zN+`co{>+D=Ya&G7KvjuMNP?Q;C0h6<695%P>g%NH{!LO;8v-`|q!NIX3>1NZnTJtK
zpfVrKkpXyfhm^FiH!kt1vh<eJwVt39&-3n=VLWuPv@nOIg&FMa^>E|XF4phtV=y8B
z&qLq|_*U|yXl8w_g^i6p%+6MD;^Z8Tk-%jbG8sskWY~=;<U5HY5Jfq5HZ#2YJ=3^;
zwaax1GH)!IE?(RPk~hKSr-e=_0@<DUi!_T)xzD_NiZ)u|Js2FpZd<NB2nCv&olMw3
z#v;k*>)2nfRxQX;7%A-s=@sW3tnyP}nfy`QF{Rojp@YULRN^Lc%ScjL{Nx4b<B@EK
zfQzh(#PK{Wdhv$LuFmHqO<A-DQVe^+7bt&mJqzvOoIgsmCP@!av=7XyC7jbDGg>Il
zq4w%h7&OlFETTVhDl9&n<4}YE)bf$B99EMhdY;t}o{?<JRj0wKFY?%ENU1Aesy2-$
z9-qcT5B72MRtsxuZ43ty=ZV9>p?x<a(hrUOy#aQcJzT49<HX5XoIW{=O1X?U)tz#z
z9WN7&dFp0UD*FruQjWqZ!7F(C){bsI!#uAir7iEJPDXtef3;^D0iF9V7J$wS@CL5i
zRhxx*AU-vlzjaQQM<D;!x|>CuWsXZ58U3s_E^61LoQ7s@n%7XBhFezI5NY6|5q-($
z7oCrsyRei=k4WqMY0SaO1zA7E;+J^7z$qLtUaH{O+WmE7QpN$~ai$=t#m||h+#yX+
z#3>8T9(e$7>d15AVCa0cD?Q)zjn*U<dveR<CE$<JdDNkYWWlIMJke?&KD&am_b+3+
z*~YD#P3*OXtoG=+r10#pPCZGFMdJiFu5aVc>Mq{>=xHo1%_2#ON1%2_^_46iMWvz%
zb+VyyQAH5C>pZkkFg5b*?(4ipu}%woU}6W;pE*HjQaiaK{>VeBu!c8$mC;s8Kqfvn
z8UQvxp@W9PC6@2Ah(gvYi`VPWLMPayU5Pktlc5KjILAfkOeyVzLKIb>mGQAu>^1p6
zh5MLGYF}Ra6RhiIu9Gwc(J#*RIcVi0Rku(8pppXAib}NjxmuB5Lv-L2V~S2iB>Yg0
zL*W5%&lqBnr7=-s2*M&wFlC{2+DpAy5n#xr-`Z`XS`9HhRbds^h<W=NMq`TMJ)Brt
z#LBTb?Cy84dTS3GYhA>nghK;n5^{*(Ac|95yt0Y8xv2@ju>iuv4iyVd$H)g3t2xF=
z(_q+rOqQA8HJk6Uy#+fXFzMD#PJRjfi+DGMqc9XJlVaR_Z3v2mZ9h7RyI4nNJ!}O$
zB1+C`qgo`ytT5%~)1RU3jH?}ArxDF{5kk>{MXd~!N<SXl`HRC6c+u1(o9kh?{~51w
zE~65jMp4*oe;*A>29XeuPdeua+$hTsr{w*U{`uh?hr|HH5mlZgNsN$dQ6wusH?Bxn
zsrkstF%DjQ`3`R1+C{bEVQG09r%x_oW@d_C!+Zi{7>@;^nwx55^Y3lo?AZ}kZ?~{^
zXAi?c44(i)?oa1nJc<xU5lR(tU-|2FXgvXvX+nY&+ZWTZSlDJ4S0(TYA9GnxTa7o8
zm=af3fmqttH^G86@r}Jv7i8kIY|C=sOZ1yfNvu$O#ZH)1z=Qy4v7p}QzA1b|sSvSo
zn>Y#sIU1K<9|#k&%=Hz+WnQbH`yzU=0Mo)iOdO*!u)69|!uwps{_46*X41+472byN
z0CK|$r1;-WSm2edz@Z$6!T@A>6z6#oMOoyRNtTT{s9Ll_D!Pn2M>*OwMRT`@QsA;D
zaO+kRt9SOWw9vpkXBM!yJO$q)F$W@XP=QK@JR;s(84o{r5)VAEfUWHgR&Te_Yz`17
zF{{W_s#F$SNLJgfda)Z?+c($Ts;88?v{A${yBO!$1^G7<@PHSfQ=eocbeSz*7(pg^
zx^kCPx-M$TD7W3#&DU+f%${Zmb{Oa1LiY7}7695^kyi0*GLn$bbsedaD_nN1N}!?-
z1?K6`Hy>MMLGCuO6U)<l|D+e7UsvP+CeDw)THZAg^IKRZu|^2=6Y(QyyC%SjBhtdT
z>qbe2MACo+W*o|KC=7rk_Ap43ybf-+tx`9<73Z!^bRjEU4yF4nDZ!RPssfY754*b^
z>^8fYnW^B^>3N(uK7(?JiaNN`pT5N%4ztYle5@Q_z^Rov1_QTtyI48iU;>K7ty*Y9
zFCaDP6j8C*$*kR&!8;z}6<BF`Q$=TX!Gh+iVqQ%YD5kfOpgHLF7XOwIpzx61AiA((
zbc+sbsR)Z3e!y!`7)+rrSQr7F{SfCvK1cy?W_Puz+p0l=vNar|v&%2XF}YZEm|%ef
z7SeAocZtag^Pz=H?Hh6+kE&kFV6(bOl>1km8~9yP9K>uumt;_A@w247!*0N#9EZXH
zP&}C<?I-DA#(~2vSf~g`ZoDqDRfCByKF&TkkLR9Q<*k=I0b<#ed|?9;38;0hk84-9
zaq`qGR#s+Et5vCXKBHnG+T}?<kZyZpdK&YyGok{+0H9g-1@53GwJs7ArCxhavQl-~
zB+6bm5O)Jxrq21`Fr|$JNk|zTz8H!yCz+BWs5r1Y7KX~+C3Swka29mR&%Ph(uINQM
zu|X^2pm_pnu?uEm0dM+Sb(TPOVQz6Id;vn-NvutW7#40}Tzrk@+h)u>V@!gQJ$VBc
z1;)$a<4T>(@rV^D9jEv+H4{+5%^U_$_i0c;P^!X7>JM}{$DuF)N{4kPO8YBD(u)6M
z_`ef%@Z(W}l@km2)^7`O<?;@iO{&%;#UCM=5CG`8IflbAUVnW9*RO42`51)<%b1y~
zGLI}K+A)1|l5#mQ*9d9P{~#i+{>kBiTIn`qMU6SsPHw&Yz-#qnoLH21|5bcW5qsbD
zT5e?}syaqpSJ*f%iC5U4s%bEjXEdqgtK)w%Ys%;<kJ;kS9oSJPJR#dqnvTTQP`f{2
zu2O!lI&HE?FnNBHDL;|$(TQODn&|H<>L0YZnq2r0SEleJ6vm><p=j~bj>G+uR9ND%
zVI?|nf`~OEqoZ=*H)p8nmd9C!q!}eW%GGIsT4V90M%_lr$p~bapP9kpw@fqT_r|Rj
zHr6|w+6$Q0MMWf3$3_{0l)=CCwGI{*r*P`@ES44<@B<$)HGnjNuZ06W(Tm>1!B$Oz
z+SLlD)ZT$D*Hx4!D6^#c-`QBYdbQ4hYqwX23C91nLk__cbT>WIT+0AwrWLAk(KW!J
zp4T2W8A=L%HAUHWdrYjL&P^Q;C(v|iQTU3AcdrOkHgux?eGoq&UybPbg$q)IC6k8L
ze7pQ+Bdg9;3I--pkT%1QKiN1F`Q&}c-7Ir*s>%=!bB2u3e|2Zr!6b8@dl<%JHzqYG
z?hkZ0$D!~5GEm3gbbS!*@!r5ULT;Z_a^)G4Se0a}Nk)@yOr@G*pjxfreebQ~!3RgU
zaifXVTTKi{G1G!cl!9u`L#jK6gPolYwzu18Gz2F&c6^qLg-CstDh$n3DPmT$1}AE6
zjO2E)sN@gJZP)*`z$Y^wmAh<ku);|<YtPV&rORbOC{kqvg}|kO%1Q9w#QXMB`iQK}
z(+Zahwjk}!6DOeYP9gnpv4*;725}c(L3=@pBQW6x=xyCHYU<a-lAqv5sPIC9a}@{5
z{m?xEv?Vj)gDGj2PjHMr0D-5hNGhPEt_qYJC!&W6D3pRBQa7TK;DO6+0gre9Z{|?K
z8_w`TZ?sENR8)UXU3d#-Xr80rC-ohZ_%$vl&3PgN#Sv-Cm+{!UPT{_L=Q%5|dV3GO
zF0lbgK3djNK>u)nZfAs7Us=P|E4w&$Vj5>o&0)G;W9OI1KzdP#n`mvq#dc+R2sR~k
z^4!cL8q_1Ax&2C=JunlTD|D?+I0dFq#K`h*gGn%xS!)ky2i`s!wHPcTHledd3^>l~
zn-f&RrUn4yx>;ICvQ8AG*suvFzfW`n^dmL`VgIK<8Ya9V`-K);+EiT%K17X$C=fD+
zS)bp*;c8sMfI7MgP_8BAX^AbE=PYz0d;t<nfrmjflqNFNhyIX`L*W6?$erO!<N-v<
zAfr;yD2w=pXuxT|Ju+^%ss2(_Qmp|<J9ylulGG9&ynh7`+_%KL{f(Qu*xl)~n@XKx
zn5yE5>Q6L|aP7(#R&O`4MB%~71uV=@F)XPB$}FjEyEBgU*F<=1aqaD?t}O%^0#5h6
zk+GPFI*MoRinR-IOKm!gtIWHa?4E|kt9D+B@r_|oo2FT;R@T$x;twoV+X&qS^0BS6
z`ga#cV`QF+0wv3!={&qTX5-qJa}n>SxV-wTlo7C#2K@3#FfgNk5tz><!G(WC`F@d3
zmkz=d7HEYaR%b?@b&|H9=HpK8jE_LTH+y90oFBv;4C9s?mgX=>2Sxypq`cSfv@se|
zO@0|soQQCz3NQ_Dq||e0p^nBeL**xqFW|(=ESk+OuH9&2YomuG61_U&_>=J{h14rA
z$NI)T?yT)&X>l6wf8RYyTHA6j54h9CtfT)H1*&>a(+fuvWDMCxdoL5aqTZ)P##>bb
zPZa6cOHrprjbguU3TpP=$&{Kj8PuOOfn2a_FCMb4ypx5e!+nF)^Mc9Ttk4KI=W9}j
z=FE$QNR?CO8;$p`7UEs_iGDUK9;I%9lrcC^_HclMFnJ9pjsUC|kh_^Hc!rglJO~bw
z=qM>PXFzwf?`9ZoW_fgIJpfy0>TNwz>}@4kXMb;evt042nb14QF_liXqd|(NzjPaZ
zn4w&entv5XQ|*92QfkJ~RM!S#I7(Rkm(qP7eBxd__3;OA_TeS?B^SdnQHNEG&qYH4
z%7M=^V^^<javuSE)pOF=X0(~Wx!|xDnSde}VE-5|nH!+!mNmu4=^ahZr}(Y{?y|qv
z0@;)Su)Ph<KahqzlZ)RVfjS<xj-gl-lkSLWLS~s53wBihFrM~AJ%?Qfp?;a)g<Q8W
zWco98Z$thV>N23bn_|aT!OtX^SiBzxuD^A@+K6gl72RV2A-5Bwnb#Talfv=M3?ozH
zaoENoFaUB<lYBph)BW^r_q<Pa^FGT=3-czU`v1Ve>WwZw^Gg@8cBh3>iCRjr*e1(j
z+@)%xF*9k*!?pjU_EYvNc<hl=`1r>k#(N)MLA4fO6s3qM7o_fQr5vEwA5L!1OjlB%
zlgX!xWUj6pG$52&OxE6{eC~r&XkwxoAKCWx&9lWn*|rt0VUgjxTy?G9S9s@lU3D9O
z<NqA^UX>ChmEp`GQ>^qF3^TL%fQg;?fLCDiDT+{BS9}&cB)v$D0a1@@>2CdcId=X1
zp2AV|_1E4|ae~GGkQbmnSF21hcEU{*1pf5BDoUgvmFHPEYQc5lOVnKUu#Q850f_!w
z>TUna=HSAg>kiklQcy>fk;1GzPhEdWq_ep>z;Au#3YJgR@Ys8f<J6fMR-n<+;M~62
zT724V)ZB9_79vAHiZl0~S;m=D^Vr&Ma|v;CcfdQ&I1;f?R?Ac503z#=x1e^7NudJE
z#nlVIgtP}o5v;z!<7&6mZM`(yVR;q2^tiB20dc1GKsmhTxQaO5xWd-@mT+Crd;4%~
zC1Gynp^cg7glo>eYJyHnrvMf7!qz9Gy9bHeZTmzTL@dr-n<}fcXySZ~`jUB8Q+L(k
zPPvG$sJ>LGTE|>D`#S46ryo<w)0u}-SVO7eqqE=3+M^w0?(nMxv*Pf10Eff?$Qb9h
zzUC(@*S5MZoH;)G?HM(Tp!QC(D8vEveUXgbx--D$ookp|s^Ec#=J3GT1=Q*##F0pY
z(=fH>I`&jEgEdF;9K(U|zm^x~apKr4`r|%s-)>{S9pRw|k8uqFcf?U?Z)qW2RQnV=
zmlbVVh+sj|v8J>MN=-qLN^=!#LQ+OHe0URxYYDMJ8Axj;Or#=}zF@ISTHC99nVI|r
zT5lb{4jXvK)EJyPPOXJ%;&+P8$pun<2=vfjYp{=^no}1Z8!m+e`3DgW)%Z&xE5$WX
zJ;*3?XI?6cUlN!ZQL+sJlk0m?;4|hHnQtp}2as1Vcf5jn8MyxXS~iF`kmh?|#UUPt
z!~n<yOtMazdVBw1qx02IG%Anvat~#OgE;ukEtaeUKNMN&c5{elzjzC;o!h|KhZphS
zBa4`wts;rQWxj8?<LLFL`q7VL(h<*5DNo_CcQsgOV>}k^K%HTrPZ7~#*_J1rdGTQ6
zFV&4k?^JrG>Av(lkBvZ}`fRP2r`~0W{Ah!s-FQyVY1X}RV`V|HjBaKYoBCd}1~hly
zxWq+RF<EFsMo-}jW|0X$T9-#m8aPJO-IO{0R{em!E|#u>e3XvEZN{KJE}MR(fJiBX
zV*UZix|q^vJ0q&U$5Lbx1LqcjN)bCr8GyOg5=OXLi0SD$yz4^&R-etYjoyW7oVR)j
z_EvF-$05J~CdW9x{;A<;bFk6={g6mlX-x5#o~%+Ks2g@rSU{<~ay7tsnBt}9*YW93
zUceWA^9rZ`!jgwliAbKBHY*d<pz`z|!x|*lKVyk->IqMwf-di|JVh(cEOuYLn3ROJ
zS$Vo)M&ZGzUEeeTkZ?ky(fnUsIcO^S^ee4+p7jok1#Z%l+Do?Ec1y*+=@e9C7A9gC
zeTLR|6_|*G2{xi(qH6UK#lkHXWic!kH?2HX#ZzPiY-2QmFbZkdNSsQaNF7e7xSf7n
zvO$hp-~?K}9SYpjy_2-$oBp?G7f{+caOUv-Z=K=KzI}a=HKU7umW_Ws&RPlpIDGE^
zA@Trd$PA6Mol)%F`Li4Cul!2cKhdj(r^+#g+)2lPWNZLrwliy!OT47vC+*soUvJ{t
zl@^vy)bY^6i#UB|4%Mp93p`bBy`HhQ>@{Z|L^W&z;L?AkR4F1m6StNuHZWnUn@Csh
zHp*L(#mT#kYJeio7l}ZNP-6$iCV(#tmc7trr!T}X$d>6^0NL@C$DtORI2}ssUyA|g
z7aK1{{;j+Ua}CJN=PavrX!?BB<y1U>eQws((+0^{wBmC$p-aeMg~2tiQf$D&f18Zm
z#lEU<Rg~m{VVRp_F*ITOA}RwAU>YY*EV20aGoS5YbMIQx9$rW4Z2zcupNBL4KV$}g
zhTO1z_R_D`o!Zab+5g=C_|Vdy8#tL45+~dBL?+r)shJ%^8olX>Q6kmeoVWuW+*$2l
zZhnKS2Ol^)FX}-tbq=BeVLhWKQ&tC$Nbgh>erV1;15WCRObM8fi%Ohz+Xm=iRDP8P
zoz|^)Rr5p5I4qW+HViiK_4Tfq_CRcb(89<`wog%Y_0DSypnc`l-xist02uiaOCJF1
zwMF(p3vy`e!U`3v%1H7iie!g!^R4W|q)k&MMjx=%@~a>V9k>*xcEPR(DvE(fvQ)Yr
z(F;88O;`^Xxoz3AU);d36D6CY-!G5TjccR)+H*MM<B%Bu8Pri`=)C+FojCmHjpi@i
zd-m9$9rV+FNb*c1A3f3gO)V%r_gT=9)CC-B>m>%G+aBY&XV-B4wH=&3)4+pg7qGls
zXG|#?Q^{x1X3M1UiVfThasY}5x7gV@R5-Xn@QOEjAv_o}S1ezRN$3U_W{wm7#c4eq
z$dcMH&t`>WiHv#iJ(FRASxXAEEQ)3=WhE01Sg%))7ol=tRE$|vBB92!(BH4FnF>r)
zCE;Yh1d;tRUz7>eScge=LlPawOqK@oKly%WQ>_ZK4lHnXMOe~9>mRV>7?%*~ODe>O
z0D)73>y*(R?qa>Qhct=-r<ZKDUn$4f{2NKu%MSDIe@G304h5Ryp?mIq`3UE)@BG}#
zy^G)18>Vh~oDMkc$AGY<hsQgmv=UYSBW-v2ED{<nhaS>6#pR1lT)*1J(sB(CoSng$
zGc%}FL#`(nClXVtHZsK#S@EP^1ZIfgaH&rK|4+@rH{7u$Y~|*BN_WGq{IyrIDSnYN
z(h;oHI?Mv;tQ4L!1~&Y6IhO)Iu)G439kExvddw0T(brerSAb{}$E#k&*hEf*9YN)-
z+o@89mXoDJ0@HZJa#}16fWk{r7?9HTHfV(ob@Wx&4v{Y6f*1qiS&%w$PRf&{AvwS>
zZX$}QDeM^appmS$zEB<|+b<2AOP{yS{?Lv?XaH!)?ToU`Hr#XX+UuuZjFR5t_bmLk
zy_!E??xnko)a!QDy2%As5;DS0#T-RkPO=lcu{sV)B|-4FHab{eYh$Xhi8H4gxc~k+
zEG$g%H*>=f<rV05B{X{}EqLG%Cqi`@8X;#bO0#jBjae=J3GDy^{<LFl_d>T;x%qtE
z*_PXaSqQgfr8E#}06E<n%%m3N2_0ikJTi#~-pw!2m*Aiww9b-CevMwDwb+XjmgA=T
zqOk<FZ+7@n#3)usVlW6XW-0`;HB>c>W4yIo6*dVYj7xvB2;*#wBppcyqcldztz)bA
z)ui3OT8`bze=5xehko}z#0Fr(2y{|s@MIbde&q7TPyfx8xj#B+)ZXv*(>;Hjwyd_*
z(m!4%sH`DwI;vc8)x(O}g)I8uyYL+sqke){U)ja$7x!@d_!REDe-<kz>Zp`MsSG4N
zL2eKNwDv|54L^7kVSvkdXm*ix9I6+du4YsF79;&uk1wl6IM*=(TP`V6)s$WXqA7P+
z<?_wdLY}(PEUdr<j4Q3(cl8;?)P5t9jFpa?07?yecmk_54miKTbPqP{#G>FxQWpeP
z(lfdOQ5XFbDMsVcXx)$rz+!SoFYprj9O5h(Trk(K7s)VgeV)dMvq)H`oHj@iI8}6p
zuMc+ipPx>=%^w^l*KfZQ7XKkP05oJOrFkbA;Q1edGyKZUX8Y%7hZk{j=D+DxgVW_s
zvVk}ouo0kEQ{3;)?0`iKYt;}-_CN)Ylv*yA=`uN3U+v+}Y9CY60ZyHo;_zT@zJzMk
z!}aU?+1jl>8;(39x3b9O*~k0FFrt~zR>^yTX6tIbBKB5`iv0q9#OMsF8g_ZV($-<z
zQ6u4IVOU-OKc-w~DeIj$;=2`tbXA;{!ZYr~B${tZZ_J6Av%AYsnD@VtqhYR|Wt;>c
zoxoe{xIhbj>MN!J%Hp##k(SF7=8}-UA8S4et$<G?K#1P((qL!*nd#Ko{gH0^{Ey=u
zG`=2me8@(ztV-_bV}5?`FO<BwZ@p*Xk4201Z%Ou(Za7HyRV{!R0f)NHQny%oH*czH
zXHkFant`HCw{E%RGAKx7LeKXx)d;!qXuCyhA!$!3?6{&oosOdqcF;0X)<V`-jX3pV
z+$~tNGgKXeLH!TBmb7cBXPOua53^@nRHj{QTuIRD_K;;mM8gh}Q5SJC&aynV8W-tZ
zU%S$i-2n8EbI@R6VTcai1#Qs8&6jXSXu|3hnnWZQKq>W55LSd6HjrAB`RmxeKu?VM
zo(Lao6C;1~UD2QlpC={UPmKTo6+lTuK~(8J#$3zKX*}JaM4O5%gO_`7(md&nE@k_@
z^VKN3^LKjq+CRzi=<sj*?>qybhfGk<skvqMk^kP$m;dcld8K@;@g0L&_>kL2%O9m}
z={?6?YC~E4nn9|ogLvWzlaLppdW^$RrMyG<0;$4q0T6M;d{0Oywm!X@y^|b6%Ud-J
zKHUsMzh4%&*apuqZTWcA_v`m5BaqRH1S$8iaG!@#-NX8&2;FWEc|Jrm5Cf2~0bmge
zm1$6b-oaX0{(PIiudSDs+nlhw*0~k^^z<hcf2;G7{)48)nS=l;dob}H1>KnzVEU8n
zlHy{)Pb3G5>#XY%z~`OCyy&Sdd2W{!lb4jmoD=YJFH7USXn$~_K8iOn%5QvcFMIj3
zlfce9V;u4j;Om71{j8sU?dL=H_^+kI{lC{8Zv60k^<gYGp6Z3c@vxV++$0}Tb0@ge
ztrpawR`2-5!W8gGg$$ak!p&|-C02w1=Mxz0LWyaZQ!`N7Nf^-cCWS0bFgoeVOF@s`
z1t;*rqTq!-h%yHxR-ubn40YGaBM5?3h<9>l?SkBAN^8wx*KeD|@(NH;9?+bIyRY$q
zINxd%e6ZY^|2Cf~z^nRL_6|s>R126&lO7TW6^qB3E5aM#f2$m#E#Ys%8I$%iQGmQp
zyY{r>XH++$)2sZdl)VAEcVxcZ)XB1RkaVLv)$aIK80XthkMb)&Fv@P<Ie7l>l<^Mp
z0PImr?~3>ELoSZ}RLQA-%VPBjEKEJs%Ys_i&vsnm6tE`%@(83UrE<Szhh^_Tp~Pla
z7srx2-Lg=Oa{DQ)P%gcA4))>byk4<-JQlJbjjtlMmBN%F+%SY6rU=XNNaf;Wn8JN^
z`B*(Ho^|1u9jskS(B}|ffbpP%c+|^MuAof0?M0!UV<BP(pg$W;*CZw5h#Tu-@c|50
zVH>$3-q)XMyY*BnK>M$b(RI2}AD;nM4*-;8AQUr075HenHMMo8MNf;H)SYRe7kZ9-
z{$va?TKI$v`AL@alm7U2y_ejf6!Voh+xY9l{OWIK`8xyc|0eMO>`_d)VS4eB=id2P
zj{82g*&qExYjox8@%l%ynW-m7v6qDXq)8fs$a88%?Zfd%0Z8r6oE1>n0v%DR^3W7S
zFSoS;$qOJOpeyRke71_-)npc-i6RxIk614j9k1#l9eS<Q1QjjDbxf^~Kr`HO)x^$X
z^64oo_3n3rdc_eGzs({w+r72OCbxEer3N62#jn+n)Si1VouCfNh=`bQV{*CauVE5{
zwDXb<Ns5xe<Yj(}7Je)XpBKE6Ut`?}Qg@EIV$01u_$Xxo!YEE!VLQ52?#HW0^4_&1
zZ~nbucIi`T-cijy-nona9qs|xqqvE_JL8AWec$Kgb3Zm6o?JRM{YR3i>U*M*GYkjm
z9>0dO1%we$e|pjdGYie?R;za2oSa9sQ*&a=U<k#+l>Zwl;zVw}0I{?gQ5ybgx7RSA
zJk1Kmf(fvfqVWRq07S!(K+L84T{xbDwJR}({XSCV0Yu~hBqLBCq@wSi4g6_NeqjI(
z!hv=Hle}n><!JB$6K51DIsFRzzL>B`uCCw$Dj{>w5EY?}{#r@hk!#O8J)`(qxliL8
z65G3J4nHqtejX%AGQcR=sE*QgjM80<v+bXX^Q|9?v&~o2ygMl`{SF`BBnIFO41qIO
z3Y{~5+Qs6(oDT1+uFO0&C{^xthk4f@r5(u>kocn;!1L(0rxv&F(j^NobHo7fQq`c`
z1Q$SohANbpxa0?V3rc2O7I*P^Dh$vI-l6IMm94OzCxbzK4#;RMKPVy_YnLJn2R)G6
zKkB!$Xxv9e27p5VG62@%w^E};agpLHsMMh73LHq^S;KbkZGUG1Bhas9$|C`ng$Gb{
zGnl+zMQEYC7jEe*i(YnjrF^L91mppv>6rbql2f6ckCB%q*&y1gcH&#^DBeJl?|dae
z`(MWS_OD0Trda;sh`%Wo|2sScc%xBF-6U^~lf3os1NX$Q?#KPV-`lzQzsy!1!1C0$
zj^;}Dp`W+?QN9oE4oB{!=fm>|E6_We>K$X{(`8cM{at#OGm5kY_eP0q+HbMscP;0@
zDV`_vu_#0q0RbzE0C<7cCsgsX;Q$l{$Xeo7T0)Zowdkh;B8&K;aQ$_&5B(-<C>cd{
zgchc+c6GxjRBg9(SR<)M8;>ZA3Gei&2K1!6Gv61DS<s><X)aFTRZwwfk`kOGPIkj?
zbfMad?_ij=T4~n)u>>1G8Dr;8mXGpp)`kB~>H*ke@`jhadsp22*#8z_;jb-JAH%Wf
zj}4siF%0r%7^OYo54a&ng~+u$0$N}heAXN^F1!)&P$7Zx3Z!9Q!EHCkVJQHcU7gs7
z90C+!he=6N7L#etg_l4=HzZT$_zq4!>L89CtiB#&G#DUByBPJmSsV|LCS#71MZRCV
z{Tk;|#!MM1ojcdNzx3aj6zVg(y#*ASU)rGEr97l)O!iW@-mck_^1Vc45>SstU{x)G
zGUM#t(`&pufS3DOn3tj)u|JI0%I)D*jM5FnXni7c_WnhZ?Y%^X|Le_xZ^rRWYykAI
zuxY9gbnZFn<;VVy(4G17%k>XoY5HS5KbZGB`IbM<25`v$&<}?OA!iOUcvMJGWC|#J
zFg5&=6%by57MT#{8t1(&f{$$g$XFC;f3d?$7{K{Q)dGy8e+dCRhYi4~ce@ym$N)qb
z56J-ZG3<BP08j|PsV@~L>k?hrO)(J$n5H8Wio%S)ALtfTTuJj1J0Wk}7ybA|y`u3z
zv<(tNqjL4yl~JAw3;ojLc?v)E5Tcfq-FlMcBlJhB)n0rZ{dfy;zW2o}-~Sg0c77|t
z_MTQ`I(W~&*~gIqctb<rA#hgi3G$VHSn`hjz*7CaIM(>KUK%#SZnEvh=};9JQERaf
zo=>#~0k_?fMPq|^dLilOER8uEBvgyu?CKV#U|4_Zb^MuZ04!sndL2^x^m`t6(eIK0
z7$X|>ktPES2i+`=$O9N5ClHWQV+NmBuC%W5(<{-2D=Z}=LG*1`{S77-f%Wo-5=qdW
z0ZEf-xuODuGz;A9_Tp_6$4IO_;%zu6IaQS0T0$k7QM^^|#&_J__!gpU``HAof0g8|
z&!%YYP>T2NseZKZ?QvuP{y;+zqU4@=mzyvDWW`(f@Y2+WF+cU8LF(1~e%f?nCKLHm
zaO8*Zy)qo)5~xK@8G^ePzTF#e0^Cy!MeDVeA<&+Hcm;&=OEy5dgeloF;xL2`?t8*T
zXV1avg)yRtfIl$+1Olch^|6%PxLKGJEFk-*0Pu<hYH4rV4F-#ur1<%^{Ba?RCb)ym
zA0Yc6Xg(PwJ7X#w{RD32B5)bZOZ+TL;$*Mfi>~{<XcbY`>%{5KKT5Fmvk7)rkK+3O
zyzxy20{*9r!f(y<2&44M1<&33DDrzgdaJel|LnA%{m`-L4`a6eWG@P4!vV1h(*e>v
z;`o}p0naUSXaFZ+Fn~e?%_tPsnvVGCyEO1Et~GPv3>Z$ax$xf{hg+FQjgkS~Y!Hwd
z*^0b5SIz3afNH^sK3=h_7VkZH-gb;#umSI?AUxnj^Nw#4{Yslr8G$0jC|Lzr@RF`G
z`Fd>*bPk`|w9!uQ)e_I~l5w&d_6C>Bz41+qlC2~`?`Pl+e>%>$zZ~b=L+ePa^Euk>
z|6}9G0Q@Hyf;8)7gY1<rc~1Q!S+?@z&Hd&-+wOnu$@%(+FjN0P5ALGh&$s<J?<0*P
zcn+}(1Nc4}0_r1|a(OSO4RcK%(sc(#nQW0JER-)4?N_8bot$LGL`c9?F51T|;wE0G
zV`(jbsRNFK%0zls*I{~L1jt|%DLidWtQ~(c`7b552SNm?EYxnk7Hp-wyka7nvn4-(
zn0ZvmP)6BnWFab1mbLx<=yG{~bREN(sybVr%JTM4q}cs(f>u8#Whd+0j~4xZ{x~uK
z|ItyTvC_Pkr?~W->#lt$Nl$)wxYzu#X7Ah+i}m+mzV?A$<j=E5K*XCY^N^(xdjx(^
z0Tq_Y4w)(<fkwTA3QXN*jhY56SSbXg9+kym&=4aq39?y->4y%2ir)1PEL@w0FkyF8
zn^Ohw$@8`vkQN}arH^c-0r~*#wrG4np3@!9Xwhq84(INrX_A0>P8nr)J}Y_EB+vR7
zjc!->#y7%VyiO#Y-%s=XA5F3Qg(TnY+zsaGV>sIF|4YV^0r*cE_T(Z3pk6-0#b;vo
z&XY-c&qoIB)qlR#d-n0g`Uf#r{lFme=iEWw@=1pvizB3D2)q(Jufn9FA_nHooecuD
zF{j!UL$uL5DJvRllw3Fh8mKc^ok^kP2+BFCHPr^(R?d+_Hw8ml!=Dzp9pg_}1{2F$
zI05hC(oeyT>$RAN?DXnc<<3jdjeb2nmcY#ea__UUJDs_CnvKRA)vfXMa1h<WINg0d
z#r{7_(fWLn?`~)L`0M2Bj~4xZ?Km<3|5c$uFCXHyuXxVX6DiJoY_zxgPj<R5d}yiu
zKFrkKKS+b)?l|lCQA&N}Be-b<pF9G;3^?l2a|lnLN%{m-)vGfE<ik^Kff5)e+Od)R
z6FvdAz2wkB9aH9@R09I~cv^5ITSl4(cB`_9z}--Elp<e|8q|oqejOJ!7(77ak9EGD
za*>46OCu7MVl-ZYQrcl3$4BT)A#kgSpCcPbJLOh%!R<yj5G8x948xzvoYqf9`JLBN
zF2b=6)ExWKqW?yYBLnb_Fa&uw8>X*)(Q~K1B}q?yV9>tvkE^}sK0a4_60^1U4XVKj
zcbK>Ran?s3jX4)jeGDXfPzG|k4TQ=UYQ{o>(JiZlSj5hN`F?sPV?rW>0!q_h<`__$
z0Y*L5u9y=DEHNgF*6hxD!D~QH;`2fsSJP|txfV2FKG4D;K&~XTG_a>rixk&WL!!{B
zqwLKjLGC8wbUW;gu9UmcO^nj*B+GjLE<y93C;9GcNxo<0?T!}xTQQCdz&8>j$hujI
z*PnBp%6Fvc@pp|nyZ?8y_u}`=Rv*S<{X>INxZ;kowjUF-kVGe)F}!R9->-5S(alJg
zfOdUN1(t=U+ic3luk&)UJChgSDK|eaIe5>L4jQvAnp+X_jM9`!CS5ONBcdsbo!hG`
z15n6t7Y0F?`jfk^+11$~P-$&J&DD4U>F9;-Y*t1kiPN4t7`|3+4=-aBZy`ndXA<oF
z>onhcA<ml?f=}ZJ%zG=xkpXx!FoJxTkMry2V`uGqlkCiUNB!-8)*PPuBaQOIn6G_!
zPz_IF?DWG?-bI#-rEnz)5cpLDUWE&gbc`(-18xOi5PQZ5c@s|gak3Lh>R@(748U_=
z0Q#LV@^~N;xT47~Mue3&^zN?3FbmqP?h+<E0qr5!%zmk}mm(aE;LGmsqlAh#l~vuT
zB+L5fjc!z%!>i#S-a(Y@KAmCj$5QP5W`do4yV=LlZvTfjj)*{S>ZO%Q?mAVc<ehok
zO=teD?@WK+OyyB5)ISmh;fW-6qHvsdr70d$j0r3xc438ChEju2ln1lAG1npJ+5-=s
zQ$}^Jf``5{#F_gtJp0KQw=Om@9&W=6YW#W0xQpSilMyYL`17D9J{pZT3txUq^8(4w
zYc76~|CirH&>_Yi9dqc^v$8Xl_zv|>SgW>2S3vptDBWMn^5MTqu=P_3b~lblI&Z&m
zWB}e$Lr`LhvFptLP2Xw!&y5m!1Rsd%<p+}3bNo@(aZ^Naa#1GIT!Mg%K~Uy}Ea^cq
z0^DSS)r`V&6*H$wm^}rw@1)qi(MPYnfoQZ3mopD#Ad3-2BnsL`mX4WPtMl>&4p6Z2
z1kBT3fYJtLv674t{IWBR(5okInkJ)Yt=x;R_=98}!+3Wi$y)zk=5&5J#oqNK+fVME
zZbv}g+hrUXfVcEg7Zcximl|Qd@>e}~;s2_Ir`(0w6UkKRkx}Yb!V$V|ob~xVJ_0zN
zXc7?Bn6LsbATNQ$O3Da=GTeYF6se6_j3gQ(iP{(qn#eN2)X0bsRzRT!X#>!2k;>BK
z97)Xy3s1TCx>8W(8Y$E$Ia4UPjl|FLB+j=((#`9PZep0O_tJd-C$hZ#i6n2mmgMdD
z4?6dw@%9-<2H+3nk{631aE~{9XXOW7)c$VOTddEP--AZ&iGdd`xiR`ag$L5mg0u>Y
z5@6CFlu)6ppd6Kz&r(F=HZOjyek<=GViE~sj#bRA+<(Rc3Q-NS^K)X7a`jWF_;ZP$
zJIOfS47;PtVQ+jLgJhE=w0;g4{CJ%2Je%aL(cR}s<7nZ(oyU;@c-wdci<Q7x`nZ=h
z{=V-ne5g@Ai^ZuYlS=7S6gjRN<$a%uj~Enmm8>}%1T7twBS~W<RPxJITam)jd3h~?
ztup|cp36g#dn8vMB5=Yibn98kEhlNVU+#`>_+5_c*OBCVpUa)jKTXkoCPAxfxB}*!
z_ygbCOL;W@i^q`xc$*ml*Qq(7d+I%IKKDa`TmN&l;G{cUc?7k}{iBjUpCpdw$Ii%4
zNZnV-Xmeyvi$5I^D?t)^4EQHXxri3LNMh5F+yWKc<Qai@zEgEewBVgmf_#kec)Q$>
zZ@T^D4u;827NxD9&(QnXj23;~YGt{lsd2RE5A`@Q0B@Ud_wE_E$LhW__c0H1|C8^`
zerGK>iALoiRLf@uVK9$0cl;>ryW_NjI3F1KYuVj3HJ1!Rp@;7g5b097v6_{gFmaG4
zN!s>D(N?t=-9&$U8>6JTouc!}48vbevHyIM?{>d_+U{r^=5b^I4uw}xaeQ}S*~@4D
zxaTx}Fz{xcsQOE&g{M$0os25pa^yHAsx)*HCv%gW;(VbII(f>{<6iD$tQ-U<%Q5iB
z@lLs)(1KsXAl^ojcP^ya=$CV+|Ep=<d^O4UZ8eRfMgI;RM+V?+J?`FViBk}|$L{wq
z^Zm%m-|ss9lYuvllDCA=n?c|=;CodiJfdW^@`z=@qNIm$x{oMnBgqD>6umE`PXCv3
zw0|!{cPGtzcB$RbqW>lsM+V?98w0oMc&OJM)K0sozc0_rkGXK}0o*wUm=aoU+C`qX
zfb3R=^fEAfEkpl$hQVH%x0C;r?>QRp+;L<84(0gzd3DMTP}hT^Y={BCob&r%_p@jm
zE%>8xG>*p6I2uReXdI2BaWsy`(Ks4M<7ga>qj5Bj#?d$$N8@N5jiYfij>geA8b{-3
e91R@e@&5y_?H;I3s(|<a0000<MNUMnLSTZ3&M3D4

literal 43665
zcmd3tRbQ0f_xFcxq`L%Ex}-r;0i~pyp+P#NV`z{P@JlGIq;xk!NXO7E9TLL;L(eet
z=XY{HhWlt=XV-e|wfBnmXYDT^wNyz683+LY0Lgo`x4HlT#?vPT03Y{hG50Qa004d)
zzkjQ!AFz7*=%4Gl<h%JLY-!__{y!%79)P<NE=DSuqA-5(+cc^dI^<2&Lg`U_YqrVz
z=ea{HUu?e)v$(i^{gppA@;?3D(P;V$Q;PR#g>-2?J#A9{XEmSuEn#0nwG6JinLRK)
z7w`&{ZlS+xYNUN{R!>?NJs!jAd|jE%h8OGqzgw=Q>`tg$^S;U3#kuE2Rwr6)S?_}1
z2-azCYsF|EE#i3pVwKkmITIXHe)gC9tL)_t>oLR<<;i~s$7KC{&fU6-73UFz=CYxl
ztbJ&ww}h9$dp$4Etz-4b=5DdC+rGd8wc_7juocfX0(OCrT9o;-HOr58O^5+9vb|@+
zKS7))VB5nf{{@QVGm*tpgN0!IYZ`K&*G?AyDWj^gskOg-Mhk|@r=E2;>{Mj1-=1~?
z4Z|ibH^KkH^iX>{OD+8;-+a%2N0n7qEZ6D7-_=>nH#`>a7(*RZ4Ld<GxBM=DYsXRD
zm%)O-tZ--2he+WFpDAW);o-NZKE3Md>eaT6Q^*qswD0A#vOFbKAKNA&z@zf^D%GOr
zA8X66POa{>epRYlOPw<^+ndODZ$q+;y8r#O$soG>spo*LZ)o06E2zLN=v0J|IS~ju
z;>R|*@U^&lXfluE-4uMs*0C38mxsveM(oJU^lUjK6x;}oUCIrXw>!Dr<}ZQw)PWxD
zcfk-YMj3ErE{7sn{UBKLVug3Aq`jA$9FBed0>9_-xN^AQ)a>r^d;n}C_jnX%aZ%ce
z*=u$#be?*|kBo!<tNHfK)OWLteUqErKYrP!i1+tz1>lcYy5<TFdKe0Z%Ms$ABiwCn
zvrzk;S^#68IE#Icap~LI|Nf3h-vU3g*d<rl4TAYk*1=~xj{Bzorg${+ox)pUn|FLD
z2TuX4s~6LoH1%NA7%%!?<=^VPZD75GE*qJ9w*IE-iQ5{>dOqI6FRL*9w;K_3AKxuh
z6b7cL6UDcG-mYpsH+dmuAp-^afvdWrMi~-UVaQ70U6ue+><nmo=*ZFMk__fBdd)S8
z3q-s)^z%`y5UkYwXh4mlkIhSwARO@wmj`IDN87-6KgpqrI%;Q;y<0&-S@8E%OzwWI
zv9_%-AZ!y*<@MWs264aj*zklO@q_Fq_!tL}Moo8uq3c13=p9uH)LF;n&gS`9$Jq{0
zP{@L00`wvgRMN}i!jBi1K-tGY`6YhvlOO5T;Wy4lBYU=U`o352YC!L``~KYr)D3jA
zi~se#HU`K*gRDZj*Pexfu5tFo(pQ3|)q5jz*@nfb*4fRr^(IjBAh@5D=cF%^THv$E
zA&OT6A;`;X;(rJ}Z30mq`o)}J`6iSLFEUW>ntPM(9nQ@^j!SIZfgy;<Dae@V-;!#8
z=R!(c_2%^^bqbUiofMBSWB1GHV2UR0Fvu74*D?`)0W32W$eQmp>Q*q?ypL&)oV{!c
zfkrNt5GDBvgta^IkK+oUGSDeic<-?nq54&w@Y>vrsxEl#^~%V*=KmJ*LCuAm(D-tm
zc40*;&7|>fb36~Nz`%W06vD=qa7%B+5YXmOd+mrVw?EV(e^*HN2>P>(x3C}X5MR$L
z*08vdw?UW<dSTuXb6+cb0K9%2Ply>&w=DSW?5;sZN4b4@>Mx8G6a*u0f!8ZXkmI!y
zaW;=y3)UgO9z+=qswf`&xHVLd=6q=rW3wh3)ZK*sAdF^M888?`p75h2DB-o9;HqmD
zE=-JelHU=|a<#{(8{S%E6v*#Ftdkm0^DlraT(zOkqV;Q>^p)V?vi45H&zM(!C5hHV
za1Uz~?*Nk5(W5d{JmEkksk!CD*({J?U_~Cj?t^x|fdU97)~qkS!rEXtO3V*GfXGi?
zN`e;1h8@griHjG<GUyT+0Pn|-c7u{Ul>%WV-`~!Gt?Wv`V9YP}$%EjX6Ik$N1`LMQ
zY>(d?AOwM!C%`Wep51u`1~fMx4l@m=poH{aN8Z6K3@66+er|53uUln6RC?p<3xC*8
zPW<@yEl~RAJ_--L`gmS(S`-)da(N6;V|DTMEaXr%W-IIMM7eV&!AoN|S|DrIMtL?U
zc|H&;8)z6o=pk?b{#RxGdO|Sg{k<T;25mvGL6(UbN$x@8ly47W!3cE5oB#TJaRPh7
zEaU<mo%YWkTV-Z~z?(j?z?Vke$m^mJBOUUAw!Dh<+fpyGD(c<{Xyx)a<tzm;jX3fa
zlCS#vWrg^_k$D2L`t)0Ej}ooPgg#@})WbaUX&o0HU>E!bd_nmX`WGj$Pt6*)ZojV!
zqRxSp9bH>lISUE?F1xxWj)$9k2VkZk*aF|31<?dJNd02fCT!&`<8_dAm<cVsR<)3V
z9BYceCh3d3u-wIDSwX-KOzzAD^J`l*pzdG_D1a(AM!qOIoQ>gg5kU3y<%pR$@oKhI
z$J|faTZI|+BE6}F!B4i^yG;nX0^q<V&&5Gx4iqjpjKt9fJ?&Ht`#~0oHA)N;dJ8N)
zrImKsh0(KuZjUM|z_)kG&mJ{APnXSJ;g6W{Ls{2+H{)W)91Y+$7g^g#l|f`f#QcM^
z6-sPlbBzXGyL8;CI{~JNaE@}b)4{1^H_Y|hxV;<)p<T{-X*L+Htl^7AH*)F8ur@S?
z=!5;d)CIg@$?5{UASBP&i!{fXfG~hLmI&bE218F~3!zPMz{&Ggivko661!yj)%u{5
zmNnGsoAXhmHA{;bMj=d;Wb-qm{KGjfyTiKnkvldVI5j2cLglk)_SxlI$TDEmvDt7b
z!#ZrS4|$RnV(5|NF2LKKD~BG!JlW4%YmO2=!A?pv`^m`5U>TH;ZJRr8@OG%`3wr#`
zE%JIs+o#Nulkg%=3?OT_tv6LX116_D)thX1x-B{OchzzCf@kl5NLj`s_&86St^ibQ
z{8%<NLk5?2clO#7K6dvwhCm*O(1p2Jhpk{AWcdn#tHST?^W?yu+^Wike~{y6S&6iu
z?|%{|;aU!w*ZF)TD3Xw|H&@e;Rr$Sl3cw52wfkOeGs?$z<{f=<=!No|@#E0*41wu0
zSoU}?vH?{CdY28tB61~}5M&H<bIC<$8X)ZRoWZXDnk`rkfVH!NM)CJqcngW0SW_=P
zkrA)I5l3y!Q)(mgJY*+omuc^>a>OOrJZ{ur=QVg|&*o(f@!@wrH%rYzyX@N^8&rtg
zIrKsq4{vIfwJm=I_=g^K8+}^?ixYnno6lK1gOB4TRGgGNR-#e}7r$hemU^R!YSGXE
z`2k3_cK7>Ve=c9*vP8s9ET<g&8p=i__OS%}(xS(HwYb2LOC1n!e)jPGNPxwZ{^shh
z`mBr$^Mjo%rF5O*d5*61q6*&a8xMUh`xt~o%N>!IuD1*CV*AY@Fu+6((|<H)fjZ!u
zGvFCxZ!*joSzO=uI}y03j@bV&hicZ-GZA((e+D0CX#4#7DGm(hd0#xbY#)S~^Hlnv
zjRuiRTu>O|wCS$3=5EED`~Ufcc|vg9`jFuhIsr+<A?^>Iz{T41JA^*`>ft@-^&n)*
zk~r}og$6>LvJY#c=y5Y9ldmk@3xMJZiho^K!8)jW>JRpAbXhgA_Y#?=z)d;u5?ji=
z?)SJUGEN6ygM(Iw0uX;1mEp^e_aLb>z<eG=v<<PJCDZ5;n-U)Q%@0J<cqN!fpwf4A
zoLEq)ak<T4g-Sk$ES;2iv_Qaqm0x{@<UPL2fnm{agd|5GkFaNO&1T_0N8bEsbs_Y^
zlQ#%?G;)sMjZ-_o>#$w(gQRL`-RwR0-G9N^+BuBOm~?kdjB6KL%xdRG^ZTU24!hX}
z<A0Eh#$8KI5HL%H9hTjHy!}W<Xt8;6+D0<Y;^iwZy}J>FbJyYU(EZkM3uTjefmyGE
z{MYfLr?gln=8T)ui>$OaU^hNA<yn>oA)p`+<ecnjjfBLOG+uaIQkKP{{EH!#7y+;=
z6Ff%(1716z*k&^U@$E-eB~;`1Pz!-q^b0l-b@(#L`!xvcw8Qqp2t^gKn{nVKVRk`f
z<h_x6EBmpxqnq3MhX*~jpzcP1PiQ@w<NgK;TgFAk|DNkFwg3C~x<R*-8i92EN!x9D
zU?rZu;nt8fCCw1#nz9C-dRyQmh?7+_@T|}whROBUCwUiJR3aq%E<DUit?ho1W)b(a
zGdQ)|77Il_<m&Ek5wp;~4T;tKI4t-KUQ2BHHp$10dZGX{EQ8u^(T0zn{J_aR8NXA0
zZT6^Bzb)>0|KXu&i53nowGCU@b4BgjqI&+e8lV4A&gTw18|%xkN5w29tO2D-7n!?k
zwfjfpqLy`3Zn*ILaF;c@^Oif-QO(bnhJ?^TZatN;_eP!WgHl;$W~}}um%qX-wPUw@
zi2+~t)&m`*k68tYWhR>YkPX%of*u$XU`vpLt<0&45NIWe=2SN$ZAf!HcM~Gh@3Cze
z{499w8}Y<K+C-I8d*J@y{8O&m1P`0AglMbDnR2N2EtqxPVsQ{V$kqLJ_hZ@e7DD6x
zF|NUfd$9463;(X*Is3X9cnEpB;q~u<sqb3<nmLCxpp4EZ>$i_plB*j2t~27Qo++z_
z``P2myDN(+wc09Q@KMWJv4wTInN-`!!08Xkk(wC>|70#$TRXu5N0$&N9gXUQoF@;w
z%BI&I5gDY4`H@T%;I7c6*JU&pDmLuKIw9mhWs6Nd9L2ghR1N<8;}xeOJTdu0ZQX)@
z40ge|I%4TL>-|}**AHplZHph{GKxK6-Ar*cdH_k_)tf!MIvP>m$Bhsd?c(Z3y+vJ@
z4!+AM^KF<1C)6=-{_`&oQ2YwX-W!sqJixl&(!HrDOV0))%XHUC`MgznpK5j+r?D<R
zr7VBN5(dlizdS)-;Pe#vh$fwsp1Oej8;g8w6T`jr%<gVr_!S#&BP%h&1ABRtNnIQ}
zyR1L9k~bx%t`zD{J!;zn8)v?BYv$^hbiS(FX&l+NF!?QM%kj<S2CH`oQUFqPFSIVS
z9n14q$?&^Ehtq>4S%4D_9W7CB8jh_-hGMlRemn$Kw$9nbEP)#kQ$x5;hG?1DuV;UH
zC)jQ^!qOi*dzf1X(nI5Zg%$_}2okU3mEm#t`A7E!FwpDWgt{_5TL<GkuHvNdi#aiv
zShH)1i!F1g`Clv<+($4AZ{8Y7W3Q<cJ^<Kv%Vi?S2T*HU^Ny6Hf(~|zOI(8^3@L9K
zQo_rsrVq1xYpOH;bvJ0O3Z8t{704I=FL9u({D4xKV-xO?A9P&nD4_-jSnf}B7wy{r
zyNC_K(J%4$wZxlCNnZA~P<KZMi7zenm(N}OH|MC@=8yPV=W-bA8BB$EOx<v&Tjy<}
z%B0CSjvgQ;7HTQ{6Q#a4L#B+^0-y2#f1fFXcm<UXHc1nE>wM^uJD@$cz`KySkFO7b
zDa6QMNH9m;np}=`t9d>XiX9OZ@SyZy+&PosDD7z*S@DZ&sqeNg-S5~`I|k1bRV?U&
z+BGJ?7;cK~(Tf6w&Ki<5Z>!OMC?u>P@b0M_6YL3adxcZ049ITsoLInfe|T>j88<Bp
zO9*xSvF1@z4gq(mcJ;MKi3QJ8Uf<jAhN4I=AQE$j5`TSc4`bUM5ziXkE-@M`J|G`s
z_Y4OR?$pQ1{og;SE@JccTLiOB;#LSYeTifKUQPZr*$1IY>NR)bC>aux3FpC4R9%F^
zZ^5+Wb%Y4Y0oFCvi($0ipMSwP$+xyVx8WPnBY<fI$;fdI+?(XfUKtsEOOI)(ePi#~
zKf02gwc-->X>#(6Pf_3g`hGG92W$ZOMx(6s<4|=9c!xB4`3lywWGa6yjUCR4$1=0p
zn-6};j@S3;Xf=4Wrllee^h+<4x0%A8L?%@oJ#|bAF`FrGEWDXW_JrK9+IS;#Mp~qt
z<*l}~w(;C!u&D2%;3+GCpmql-JDQE|VUY!f;*IPVOyYYCWb=NW@YcUmZe=Mxcjv^8
zxmMHaWjBUg4_^ouQoMyELT>YUK*x9-J-cPEop1F$x5J8qB>FMl#&)g)wq@J&_P&2y
zdp#uswoSq#U2Lydc`3VDES8fhqfArNBvZ?`)!u^I8SA_p@<T0rCSIhIu+-yvXTT{M
znD1$Qe2bo|w`Ij<(b*UpP{926)NWcrCi~Un{}Odn0qzzl&e#7<+?&mn>&^3WkM*<p
zr-0J)WHz<MONm3|vx8$`@|^3GeIDW&n^HyCUnnH4mzB&Tv`?uvESfb6oEwxk!r$!f
ztw;{VPPg}t%OhCtz+s0ZJ?nhiy<_VD9KVX~JPzu!PNM(_!kH-qh#gGQ4`^Tcf-S)j
zL^Kjm?;_2n8pv`<%O-_270LXL$BKdEhpIGFV9zAw*Uxv?f)f{}WV=^86#EWOnaeL9
zq!|P&okghwb13UoEd0#-&!-#<9?_z*-2YZd@GWdvdLj4<EP@*^ZTxBVHV>*@R_oIO
z!;`P>B|a>hfE~N7e@)q3blzuUDQ}K${Dr9wTiqdI{xQeGq`21U`|33ULoCxYM)Ojo
zo%T{o`i&f{V{_~C#7fsKvwtW>Qf0}+ziNMU1Vw`H^IFf(egpS#Exaz`wC>Jt!qF%4
zTIb4W8wtEHC$jE}gvK?mZB84Kf0$z?TcXo^n7x71I3I!NbXP)?00#e4o%Gj&Iu*HF
z(^z`QY3=5Kf4zVj=sz(+!Bz;kCmoV;eJ}B@P~`V_21=-oZz~3J0%E?V`M}VM0lX>`
z%fgBmW<dup*VoIToo!f*Y?kX&RFTb3r~D<(YjLYtZfDs}kBTu=#McH7nCg3%vEEz4
z8|Hq0=13V^HSarb%2Eb7D?7qPMLbq)ht=~HsqJsOQWtwdK67hyCejg%ZOoJ2qAUkn
zo2d7wr5p6*CZd~2_D430cA*Eija5ya&oPnSX-_JfvL^nj6$f4Uz!tv#5P2uba%=--
zydp5}N{G`jwS?&3DZ6x*4K0-kp=a6FKbPm5lJz<AlIa|2g*a^O456s&^(cu~TMZOd
z_E=gUcm7~!t}_GjLoNoj$Jg3$w}`@<``*YqX`DaT22eD5O@O?j#ZRvKmMU*N-ntz?
zW9}b!@O}sfM?Ld8EMn!XRzebtz-W6K)ewVyE>g&;s`RF!Z;JUeZ|JFWBb$}<s44ON
z=Y6F6$U3qq;tr<+s79$sDqVwN)l5N9oP7C>oi2Dm0!=}(qGxXfc0S6q|6=&Z+e1th
zXX>39;v>GT14p5Bh1Bq-M@>NmKjI(5sYiPMjsmZY6Qo?6x<$s8z)gv0<Om!3>^^(*
z&7mY~<XB1H^^=uG0d71~tIOplvY@m6L)P}im|hnqzy|;M&qdrDl%&lWR#`*B4(xaL
zGB3q>*Hg=NoEKd=a|pagJ=Kpy<?<OnqEAOyw`!E--x?Co-9`U`Yi$q2Mc)#Kk7v9f
z4|5|I5Y6zzG$FJr{2u;Gy|Wq9hjhqxVB>egA2N|v1**K50Ai8UF`>21V4_aTu(UF5
zzw9M-gBZQ&*ERty<d=V}B@r44Qpee{P03EG(Vap>#qpD5mGJ_K2vLoK2tD<YPl^sM
zvZ#{xs2LAD<fZWbr&k(ynX*DzT4H0)--=J34(hiXU|0d@O?AZCBQ7;TQpf3Xdj;fi
zsB^Ph(=z1ZU1$z&cpMJP%<<L+n9Iif0+F2E`aAq^Kk&Lbcjx|WyCgtovF^_*)q$W2
zw<rm{+u!lfRutVQ{h}La3No}G@r-a&nmA9NAnCl*Ex<wXh%=RQOV^V=^%hehjW|G5
zz|)6M!|=a*S1Oq|>U4SGA4n$obaSkhqHJA3$3lXTy@|shulE!jsg*);`zsEAz71pF
z-mwS!B@21F#82_FJtw1^7N5wA^&#?HWjl064#Cd$3PPCkzYr%D4UY2AFP1(aa||w5
zTnnB+3>ug13z}Jsg05@@c~4Y;h@k~ux%_iu0LXF4MptWh7Kqw}kbB}_q#9hLRXNUc
zyLe7Z2nYl{CQH{c-9{<6S4_fond4B{49|2BsmgM$ZHM9K^*U;LFGTxo>17)VMP;V>
zXhFZ7UY1je-YWE%sY|2+4vE)U2%^NS1?XSo=M2AfWcyq`E{sLFeyJIS4GfBMJfK+3
z#w6uidU*Zrpi!YW(d6y<9TVc2ridropGnAb9nwG|fr+25L?&D_faq#wWa6Pu$`YRz
z@y|z_nTGe2^W(ZOi+s1y<_`$LNDdxn4J#^tREo?df@nCU$YTk>b{<c<FQbYn2Er?+
zngupA;7#t+`HtDs`C4jRws)xH?JqrN->}$>8W*8?FX2AlJ_Z<jkqC?l@WZ=3L(gG1
zL$NpiBM*(+UX1D=9(oR86YU=-4Rcid?!l}6<*uR=TP?A=X9D02wt3h4g>}%4YXZm9
zA6sWZXo<c^x*NZb3Y*_NpDbx%#UF-WtvYpX`nqIpa4f4uheS!{HIpCtg^&9BeNo<9
z2bQc?;pqj=R%Mv^4`ZC@e=eThy==~g^0$ma$NweLt~i*5dY2?_RwdsHzQoPgdv9-5
z@g0ebAu4cw=sMN&fOuI6N3b7nF#V5G6}ZIRKRYl$je?O}puO%m{MiN1C*&u+&n`>>
z`P~YqTn~kRrCjo(+{n>G*M!%bZDCQ$HA~=H`kk*4rL2_NKG&I@PjgH?+%kt{9$Mx-
zS7$p>coi{7Dw;C}Pdt}#D>qj4W#0>_WA*7EP2|@Qk8=?a3b^HzzX64Wf7So}M|W{g
za39k7(^oQ&E^NPUw;pI3okrla@5Fd2TYMOM_Z3JYWs2cjn)SYF1iHz2;P@>YG%)M-
zgiyrg=4NkSV@<6lY_J6Z4%}?!+c)ku9zs#+&;31Bd+#1KSswmj_&H|$v;iApc)pp~
zlxg_R;O~mCB_?L>XP%&Yh_?5X53!TLrnkej9NTWC%^=dW7p6|fo_#w)vFWhHRDhDv
zo}68$#hz<PZI1E#Iq|A)Ib3jxx4><naFW2!P>KUjxXih3y1!|yZH0ysM!)kFo$L>v
z66KR4ZM2bJr%pU^Eg6D6p5d(e>^?!t)ro1XyxKPsLzL<XtA*pd#_ES&@KBVdRai|>
z0Z4gI0(BmMW%=xvmiVWa?N7YMjGK&Yg5Mv;7)?jo^J;6+y1?w@U35*eri{RY)}v|$
z#7I)|;f+SpU+s>+!k3{m?vV&TB{5nNEbY?sHFydU$*?X@liqW65&;~|N2R58ThOFp
zLal(&rT*xT)aJrGd^oec7lB-3VTcs<%bi?Tk37Aju!%3$pGU13q=H^<_o}|UuK-`N
zwMt-B@!y`Q(^mXW=a3Dax_qGA`t571R@X=!28;Qx{cNa=G5csUN#{`IzYwcX-lpqW
z)VKxG#mju-2E&Tl{C{BJfX6zlhT#BM<Ksw1?$@5$=}zS7kamnQ;2(Nosbcm#!73ro
z%lFq5wGgNecQT9J{dZV)jz5SIsx!QI%Xo^hz2$D--zyaZk=TYej(t`(QHwFe{PeTu
zuz)cA+8*#-`_aO11GzhkJsX?a95P;)#+CdM`H+5T%yU|OD0)NUE&ccF8{s5@$WNy0
z-;)q>a-#*0_5R*->DMc%mK}VW!bE<C?D@zsb`@LKaj#>$jA4k3IoZ__CXnFZkWd&M
z1V=XXqne+*vPK9E5<s2M0cvOt4tZ?D+KDH?xMzF<H^I0{q+trk)Wj6{4EmmJQ&>33
z>xD}-lbgl3sD9@41H8pL5>L_-ew#LLy>^Q~10~bsQWow?>xE5ne}zcXtja+>{Mn#f
zfvR52?<o1D0ilX)2CUebIGAc{A3E>@8Ku8ZyACK}g?Z@&%2MBal@efL*wJudz1icc
zp|>_A4_ds~j`N2rvv%if<0xy-?9TdZreO8l>|suF5AHwL?xyh)c=ot^{RFDBBJS;<
z_|}P4SUXQP2zqi88wK#7o`B#Ap@%eNG<4n+oEpnr@JA7Y;B>zcUhdB>m^0;XD=d(`
z3dzh28GJ$W|9CJ;L2){wF+nHdXUn%7oI@g)ZXcj51O4H{2yIAjR@s(5*6R0ZwV2{v
zqM$(45lY3*<xQhUivt|Raq&X%J<OsEACq5=hRsc>@fV+1MojFby80NLe!XYXYcIum
zs)>{=m*E}b^Vyo-rt<;$uvGbnd>J}Z!pHU{l=K%+!FRDPzgbUIzoY>30b{L0u~!eS
z>_*k6Vfz659)fI;W*PTJPb3@WNBW)$=R711xn2f!#tVs`yZ-!7IjRZ*M5SQv3T$b^
zHv3+o&io=rq2*mzw*I^6aN@uA0gxz}<t3rFho)^YsZEsW(Scb9T{|&b#4||Cvp46C
zsh-hAao$7VNg--Q-3SNVL(}Pz!f(nl*L?C>O8Ix01uuIJwa>Wwe&~e=rdE33WfHR)
z(cSz9Y{n<0$-TH*qY4-#kcg}EFb<SXqL<UPwvtoDdiOf<{T9j}y475kDJj>ez;d01
z{lS>yvuTRi%a(dg8`PkO*e7CoZS9`&7ad+Wo4k3)ow!#U2H$IWJxtkEKDt$oqL1$3
z1s($s%SQ1+^IbsUfJ8S)bZSq?M)hdrjq6y6|NRfq9JagZ*FDSeAy>a2H=3axO2l}x
z@vI$XQ?Jms-G5-~UmR}P`$F+)7GAgAc-Uy*{waQSC<($&k=wq*L!VIz9uv>vk$&*&
zj(;bR<h98U%3Pfe`-$*zM=6eT6E)WF*f>=b>_c!aZ5)?0-b_ji!jKif^C9hZ0bbPm
z_J7QD*Lj2m&Ab%h*jDVR82E8)RYVKFDGZ{wJI=o;3;jOdOFYl775|Q3Iy%hI)}=|-
z8#72M{|J)php*twswIwv!DLMhhD<;3|MtqHd2iKjEaX058QTA{{gD=(vI02R+}oiY
zc*rN9b-~2`dF+sP#1wGW4i*mPSB;E1$-e|H1fs5IUzwCBdHT|T$(L8+@3uAwL3^st
zE>q-NNb=%mT<HiZ=_KNGu}aC8R3Kn2xfA>Y-IqSfbYHE!^{Ql#wl~-{I=&P7LmxP!
zu0uzvr4T(3Z&Jx6FFW?n-kwE2kJnrR&+Z><?sx`kzUqnUU9JOFeh}Fa*4&xdI~1bo
z_cxbBC;`RXd*S3IZpdp%j&qN<cNOH4p1dLT7W+}a%^@d|xN3p4c2dd(>4JyRXBSzh
zqeID3c=1kVUhu1aeG=K*X?NN48Xxq65VS2R5H&8OVX}Qae%**q;vO;qroY}uwhrSK
zIZ&4F-9)+E!na;wou)i*D8@*f%ia>*^GIFu653Te^xZ>_w@LiKF8fbUyC3xEoB?4n
z+tGKcUq8<>LekpaJPUb6$?+@|`g#4~O(qW3tAh+q8fk*Pv<I<V#TwJ%n|C|~JUa^B
zM>NQ>zpQ21N}e6X7`J#4-a=|kYP++MfmLDOKC6sUvl~odpqcLUl>1X;VjyMDSwrk{
z(^NE!Kcx%4IAvTL1)?_M?ij&$QkgH!>;wcGL@choO<W>;|0aEItd?6T{xqBueqZ~V
znJrwR9se#<<k&7sB~R`>3xM=*)7ublLQ5G{@nw~&J{)R0SF(y{g?#{Ne~dS)y<O?>
z5u;akhd>|M9D$-=B<7a?`mXuIpwXwq8{?A_p}B^Cy-sfF8lDF{Vt!Uq%L}3b>hu|5
zmkp+z&ASNf&q869ydn`4u+Dy}32L%JVoa?rnOaL-RbE2)hYc=@xCT46vG?RCoUsCW
zic*-kY=cw4Eo~efYx&17YkOrmAy%7;VV6bX=<{27yfs1}1rtb<?Y{ENKJ$MhwqfEP
zt6qazdW`j6W?>ei$3+)Ug>~^r*7cKIF;0KnP9tK8%E_`wlt<G7w`-uWX8!oM>xR3%
z2;zlD%vWXBW{f*HSFVgc6msYiVbodHT5gTlh-ST+VDMv4xcGE?o(ySdx*^{>GEb<^
zEa13l7T~QTV#X(TGWyQ6lyh|e{)6ba$zw^7DR7L&?7ndVlwm_tNX$N4yIQ{Q0vE$!
zkfW@_bi=CGnPNvWM#vk+9d6=i^AY%i-Z=1)mXoDHeD7uuEL;2E=8&zsUpbWb;bWyS
zx<iz4boM+=MyWToarZ`)aAU_qV3b`;SlYuwD@H9V_Q!Tib#C!>k#_GF1=q>a<2Dv^
zJYUzuziJa<>3PD{&!=gLHxZ*cq+wZudHHc)FeW}vea|{ZR@Uz4vKX^N5c(lO*Sc@{
zw~?f0Qda|<))~y3xs4~J1C5UV-IMMK?|t7&f&k{JG6JEtv`+K@s<L-9AF*+`oxr-i
z5%v;B^Mp-mkIkJ>|L0$C+~QZyL2GpX=;Cpv==SBYSgVK*Hw52m4(Hc0#O@M$v5>b$
zgRiEC1Fz@iy5{9l^w&i?V5=&*DA-W-e+8%wGp7zx5ZZt0r+5ePivo2YLX()9uxnwo
zX(IZe6>HKA4|7CJ<aoW!_SuO(!pJ_4fRBC~hZ+TyMg9W4fe;m7P{y?#Q87G6KhA_7
zHh5oTHErdq*NWlhReBws$$v0jnd*H*kH<nqTHuwN$4?k)Qg7Ru_`~G48aoQ{^Y5W9
z8xA*1<zF0uca^<xG=jEAGDJsc&eD+$wt&MWgKKip^+n;OllpXQq1$ul-Qw=b%MfmZ
zNR0jFXN)PQv|5w>O|Nrd3XVlnzyO&4>$Z=>R-GIJF3BIV<PBmF8i`*~5Uh1{{&QTJ
z?@Q)n;$Q9&7WvnjFgVzRv+!gL+dStWfL|Ewx?HZeNRQi*jaL}D5>6#{s=xgt{;Q+k
zeVRPu{HX5Tf0;p<Qe}D?;9aj%nktCBE`sz@!95#VPxrZv<8v(i@0a6aO<sm9N^54#
z1A||Y0`v>(b61T@7Odd@7<>|i`NKs5I{aROG4&^o+G6WnqI9HPci}7vCUYT2+e@c8
za81)L)=>M~fGL94QRl0-1aqzUhh{<r^eF;+r&Z8{I2gijm9{~wYPwjJo-6YxzjRj{
zeJ(jO`RjD~d*ds$(Ab|HiW6YnAx8mwprz^r`0_Ex7AHJ8+iyf##FAG<Cv98^YPDO+
z9Ga=yfWc74D^QjaB{<c~8ZwlsK2lE^)iqPBO=`V@ln~H~y&`pAz0jF`-v(EXRl%~9
z`pY=Ckn&*BgVjVWeM}o%X`J*$fn800vQ==<|NBiTDp!y$^HYzc&?+xsrb&1kI|r9P
zno2_;n@QuT*yOzMR4_w{*)zxJe?Q}zBfMv6J6Dal|Ls|dq4}yyxGV%d2|KXhz#IMH
z9;4l^{qb!Kn;xn78uI?D_+4qiMpQF`{z+QtzE#oB<()#PXvpj}Xv!@9K~~Zg)pRua
z*RExJ8eY#HP%w`%ENCap28t)&OH^%`*{w!;zSOuI+%)N(O7TQ0jogbu&+cd&@h6dV
z{?JGA^dH-qw=zl`vZ2ODpSwKEPQqOffAdJEX^LN{5jk<qQh|UK@T}j!b9=IpF`7a@
zv#>qFz!{$Cjh&^9+frlX%iH6=m$VuO;8mtbDpyQ#oF8{fbFo!WqFD7_D9ul-^W)*@
z65>)_YXRTf?{ToM-Ol(do`A}<#8{iR%ajaqO@Gh9UGiIps423|$6Jp9lJ0MOU>xSv
z(Ocv~Xb5@>=O^c&MY0?^VQuQAekG!2=9*~1r7u$?mt-?sHryrU-kwsR+r<bWsC@#y
zee@wZhoJ`mf-L#N2CpCJS?pP5fkNxjsK0L)2%P;LHBwCTgA7bG6qO-odfc=PnY!U9
z>Bc+Vkbeb}^zWi<yxW9k^h%td)IC8aiWmZGu_a8#tgk-?8Dh~vFaFcmvW|3E9oNsh
zp~>Nwqt&Us&gzGgBfluzmpmgpw2XM5eYCw4wG9q^_3SL@6-Wp{9objs6h$Kg_E~2U
zyLSXRGTy&&yF6xVUx^Tj7k(~KufI97_X>T)a`U+ME^K#3TyS4ls$o<PZOX}7LwNvn
zo1E}bp1{O*Mq{!sB>H~e(-c1LVpx4-q&%PKPpa+d__OV&MB_lat@SRiD4%I(Di0Lx
z>fd|Q8BKY(eU%F`ubAJZ1z)+>aP^B}OH|eYY$6IBJDndG?skyi<ZtfIn~y!q+oL#M
zDB*n=J$V&=#>e<7HaC2c=M7}4R@JxEqM@0gxSRAsD)>}d4BLOx&LfsD{?tV{T76oj
z{6ZtsZ|oaQ3z3g8%xcfIO4{z%of-#94@~-Se{1G$g5&CbSJ{)CkV}yA&aTV!+zjSf
zpRIzom#r4-2x~eC_+J3s-2XSRBG}!MWUSZ><?KFa1oY(;+>A?qLTCK&Gw1KDnN0LQ
zASAZ4qwVf&c!aKw-K@TeZchCiJoUvVvpo>4|EZ=tO+fKul?S!MmnFzN?zFyq53iM<
z!j%>)t7l|(B%3}J;EkM)#!O7=PdYA~8`vSHT0042Jp1#{V>>5Ghmk)kILZ}7G5fgQ
zek0Q+WT2gT``f83p!z$g6-+}=@SBko8u`j2=9v5WC>w<7R|ZrA`&+J8nefm}<S)WR
zujEb3s*6i>4xARke^CSjhmYqg^VV8hzR^b6jO}Wh^mx4u@a}o1%Xn0yX)*Ub@K-2m
zLHs{om4zh@#FDjSW{JJefFi);mvcv76Z*I0jk(1Hc;ivG0r4PMXk*|)DD&#pM%8+T
zV1?<kbi!-7W}_36kU-V<45V&EMNu8(k-b|=(>#3QKI!x&XV?TWTB^ZskPYWckCtx;
zxnrX`66JYc<8(v;Fr%N_y;gGkKwwjs5$=kynwTI%N+ER`PLZM{OE9B_-@@yMZAa$J
z&P1{WB+7N;6{$+n>`$W%<C4bb<H*3!DwPs%=}zn0(WmENs=!6AdobQ?$c~|&i3<<Y
zX5Sy<%io>|1C8mdxNEE*8d$s8CqVR`7YV{>=ao|=$p@SsjlZZ?(F5QMw(@_+ZMwEE
zhk53C&yVR}&~eeovNSrnjpTgzZy;N29upKJIQeQqu=$gi&rTXovjzEk;Yr65H8g?_
zw1fRCl=^YK?4h*k?l9rMR0X2n)faudLL2Y6ST4lE8^1!n2{hLaQN)t#ym*;Q<aJ04
zHKL}KJguY9zB?^!VD4AkmstJy+Ve2i+ey2B;)uuC9zym<2N$aT+|(n;SkjVy?=|qp
zei^F}pKR8JKd5>N_L5^cNZa;(yLk{S<Ef>#nE=~3{0y?S0}Lp17C8D^v_GCS>l(g>
zE<YiX2eCx=fijOXAh~E=Zl26kD~sfx%GW6?Ql9L_(fB1S1lP;jXZ(|8=GpGTGMk0p
z1&WI4DCbO>o-;8GkRlB8^~ik3%llYv)pZsG<D#iX6Z)<C@PxFo2>xTdpjG?%k-0TD
zv~=+F!o>Bz!glz#C<QAlo(w`Ax9~R8KE8LHbD4WWd^n`ZZ1`K|<CoJC5&^I`@b&a(
zvkZ+%#7%c-Ik{w#etUMVtdTnUf!$Ylo{0u>h-Mz3(_+0r6!&MG%toGl9<6JOL^(7=
zShRO&AYe%rFoBg}e}COPg!HJ<ajeCwvX~(f&L1rsw=AO|;rZHq@y;E*4|w*stKgfD
z(wVH4wr+L-BwIR9<jq>q%+$wG0*(PSdnyiU)AZC&YKvZUE<)w7Ll+%KE}F0vh(stm
zTl($wBO(%;%SJsY$)B1KbA-Q%hUsNWeajAWm~f$#0K}<TgeGe$iqM))=L@g?layf^
z6Trrn5Mx%!ypiD_a8=>uPMFnp(kEUJ48>P<{1GjqiQejKX#72u^MUnKF9^|09(Mgg
z-Lm>l!P$_KwcGpGRAtn?gk%F>Lju_`Nh-$Y@QgBf`(MFV_H)4!B06<CV#<pN+p8{~
z|E-4rcjwRI-SP><iOL<xueq#>r6)qVC&4I~{BWPe=48Z|XCJE<vMoj=CB98->3J{p
z)vGy`y}z7mT7`dZkiy+%KFz(ebVw)TjpU8>$#u>euO0j;@%VWo9cAW;$(ePw+xfl;
zE=^;hM*biWC5&NHx!h|b+RLEM7F)DTu@)`V6yMBQF?-bXsfj{*68nI8;YUdaV;G`d
zM@6%@cY|=nr}hH;_-%7AC15+rplmB)w78_MfAi5Mv5JAi&?t{~CENKNSI)mZX_Izk
z&$n4O*37hOLv1dchmq^9dR`>WMRK9FBUG}oI3>(c;;Ghq$m<pim%+0mZ{~FPDczgW
z$0Omv=m2ZMxY0^#2t{y4>0}g2Yc$U6jMVEPZ}bGuuW7-GuNcc1hB;R#oL9?7y;{C}
zd#S4_WJqQ!DRWH`HR+c0HH25wo2ri{-QuPH_)zHhJC6<ut4O<5=0|GkVtl56TNPlu
zI1BDFAf8E_B9g10E^3f0K}5G%G)r#yONF3L<*8MG72~g{PI}gjsp%AE{h!i{JjYZn
z)(F5U>!{RoK{(_Ipa|vJ>&O1;>Grrz+h7{O>#tmX8nzsD#9D&JzI9%VZ1uLa2UH5y
zB|qKa(rl3J<$kHt7w!(%dPKAwgkON9yv#tQGU}9`d1nziu-@Vk85-Q$=w_GQCinJL
zwNNXWw>8gJhF<1(DZv#e6Y-zc%Nd0HgmNqM{!?mo>FPRX&v2V^Brn}U@O4&sJKH|@
zNzS5UM2oMo+hHySSPKiD7QF**!Y=<3_Xa|Rj>=F!QC{I{<ZP~eVj}i{kDOFV&Bnag
z?0?vkl6qHs1b+=AHVs6VTnP<BinED%ME-dCGOoq>3G1?!(DYACV4`<NmjbW*1N)2G
zI`7mggiH=Q$oY?2gJN*Nl`;4GV^8C%PsD)jP58FWXDBq{zQn9}&XO7!6if5TnLtJ?
z)-F6x`4`i2Pjct8v#s7qnPn*{m2T6rZ~EC5@sje4=l$f?4wfdaym|Uw0;(n1t+bw8
zho<y`+V)9rCE)e`k5cKwD5Bw2L5lfVxz{8Yjo81fux&Gv0;?wLtN}y(ju|dr$JX{Q
zJ26Qm6PSS=7z();z`;stqDWym##Df-xhHv&B40FSv+;`fwq)3Rdh~PgaJHmE8tU49
z;k^8v^_};h4M+1@F~9!I9=jQP(btLAoAC}Yk4B9F#)afhd=Rzx@LIcNuV!KN2ifqG
z;aTw6+rn0c1Ht!#Z=z>&sv)lx=i)zDI<m9a-~JOPJzXDkLy*=vu5tcSR*wJEG#gIj
zGnQ2lQ4wfgpYd&<%~04-7?+bOQo*zRiHNDD=>+6;bLrE}Mjt5siSn1#*gXQ;i3gH=
znUzD?J-baHXQF?pR{!$+Hpjbz%yks&-><vOP*Bvx5oq+Wj0}VOuwZQKW8FjK2$?=L
zrDT;sl>ug@K2Lvu<`=gOi$V*j`kjziYX!Q@Luu2@m<pxLeaTn(zD^{IV<Kt`!-eO2
zFPA8_kAR#WEC+GC!$^-z;bmU}09?T>G}k9j7)&MIwQ8Zi^W7yc+gYxEZ%g0?x;jww
zM#9SqCg69L%}IRHL}^`=1|Q;^U?I<Bkb0l#8`ToemiGKK4MsRxqw4|L*7q8;@xnQo
z<Yvp%%4a9O=yls1r_DzMUe>S3k-jZR%EafP&!(c(@8c3D%Y~9$-?gJRl0Yjs|NQXA
zq$1d_X)jDtsIDx@U&KeV`Kw`zQ@H-?#I)x6Lp|IQksI`pEaAcLR2|c!;79y8mBmPV
zpp}fo*RMkQ^^%&#8m1azG$u}EO?oA1`<xL<PN}_XNwwI|O0?CQk><6e2SCj~D&m<l
z?qu*MHKSI75L<0&P>XSnu#2LfH0$3O#$I)Ho!EqND5C^y9pZ*~<^?}{<GLoNQes%L
zFlAz{n=k)@k8iIjXNt(jNzf^#=pxaiuf1Xa5D)f8tzfHGyJ);7oQ9pYJu?pz<4KEh
z<H^Wd?>XF+^?xv`|Mdl!?Ql=$RYUJA5;^_)AnDF4-1}#(#1c?9oahXELJ+3gLR3N}
z1BD_N35RHm-UGxxYOrPF_bbrHXP9|>2>2|zpL~=kxSmnHIUAGY<{s$*hMBebquu6t
z$%_njmUWW#FxM1I6xkCsBn~A*trK<~%OrjM(i$5Hd^A<(6lMJE(kNEL)hE6uq$r^s
zi;e8-4v%fa0_Sc}CnH$p?g{`q<u=gY3$2y9?6{-(3elVMtx(vm1*|=B^ov)2;fKrv
zzA4@~Z6%)y<<*PRF3Xr+qy46)<+IMVrhkC)Oj)Md9$O6p;iiwO@J{{jIE8XV(>w2}
z)HyyixD0oGH<j!^8v2Eeb+*$&*e*HGC9bbgNXHRV<D|3T-+c_$(MBF=-BtuWC*fbq
zX1UGUg|<|o)OE1RBMCyG&+C-vxCiR%U>_473j3Q(;35(fsT%w1G8dY%pJA=mP`289
zj|hio3~byTp`R=Z^i>){ve+`Q-tJ(DvYQBTT?@`p+H4o`?>{WI=8sG^0&Ek04QENp
z<cZ9E_=K0)gekyRMqy7cW<2ITKS*vp&~()-jO<`s?r`s={a$!X(vPKP_~uJh`b}es
z(Pog=?}j0Glqm1IE`m<}>QHWKLs?89_v3+M%>7EVp|DjH!^d4Smn;5L_U0Sz?i;GW
ztde`v(*qRcXDxwMrjots!nXW|kKC&#NR0p)$TIkL?RyvsI}oa&(|1zv8sHjR4WLQl
zuf`@Ku0_3L<bR3L%!Z?bjj`l!`Jr!`;!}LB=5jAy44ZiN^m7_aA|0z`soaL$OdOA!
zc0-*hlUeTJRwg92|2h(INRzYY{$<)!$#&XXVV+(zu6Q>aT$r0rp@g|(mHI*UkAm;3
z0p&4%N^V#HPzgCh6F6;GF}Kw}!RM&;B&J-`r?8ql?HA4AfiA;uQJW%4`Xqv2%Jk4H
zZ-Z_pAx*<qS7Xw*f`?%>X*adxLLF{C-50SD8>e#MajU{m8Gre6i*@wJ7)Nlv7fPs2
z-*d_eAuHV>6U3cip)vkx6YnHp9%!MX!!;Kun_22Qd98`z*J@&Lxqe5KYMG;x*rAYL
z65U7F`WI;->%Sv!JDl_1(r>Vex9C4I{oZ9I-rgI+*pdk&|I^lwC}Ddv_yjfMzsmGx
z5`)|oTO5ys=_P;>U;LvDQJkMY-A103#q_O-KtbrVxz*5Rwf`evO$D}fcZ#`aToo-z
z?Y*1vpFW>6QcYxPJo!+;{XdPOJg!6n^K9BkO5x0SE*3kdkLAw}laeHF*7MIJZkvUg
zNuf=Hr}sEhOnLhwCx=oG4}8PgqEcdW4vX{*)QO1$ETWyR6A&KUrkp<H<5IQd($B4&
zGvd$PLZI&t?<@Py>Ys_UW_#V?s5;IV<-^}1>H=YiSyqT6PDyLGc3#G;vUZ3Ur2Xf)
zQSk%5qzC<(hR5GTX$=$T6!GtxaTdO7*gOQDZpS|~d}ejH9xT~-hwnG->+fu!>L3!C
z;4$<5<A3N*?y&lQc@X@hAbZvXB`b+JK9Ovci$RhjV0F6ekYcw;1>c%@z;`_2k)%BQ
zcr2kK9j}f1E>i}D&oK}u32sxf;>e}+#&8MpgDv6<kX=TK=k3R|0K(Wt>F}$`Oly^`
z-X3v@{;<lS@maO8Oe$Bw(ytubN)>4u@LGa$!$Rt!s!NOSDPGe$NM6k1ScV=`)q*>E
z)yo)|e4oF6vl{+s_$4hmRv2tPi@U@)MOQ5U7)mJw@?WsaluVHFamX|R;;*#79@?)N
zms-+AcYN&R_Py$$E3k><IqIG=x_*RpxVu1%0G+R^V=}Ub|CRo$rVKYwlqp?e;ImSA
zo*417X^u45FEo6`=xe&e@bi&Q8XGNdjb-@lpRGV#D&O#~)XP~pUsk9W&e)ZifNnEI
zrP@b309AGGvbF6Xu8?r95Bv<*j#N+OTSF#W<iQ6&#Xy*w{D<n60yvx~TKo#Cqn8?{
z?@1?r!-OB5%J^K9O1DFaqoq))Y!MH`w#zDBOes4swy2rRxc1rdQExxaz;_?qUl`A+
zcL<4-Q(iZ@2;TO*KJ0^yrTy5w;*GnX1R*)m*E5Y1$@+=n2Pzkcg{Q|E6@EKw5`cd>
zarcj#w}I8K>GM8gWMr2W{PTpr@_11td0Cv=$x|6*&jTZ5*DAU#!x4v{_ud1x%q5cj
ze~+U}TerD`qr)!V;o62aurgfqgt?)Op^XQZ5GOBzfmr3!wMQ>Y$s1UFixe5qSnr$l
z&d*J!#}W4xaxVX%UF2yuIn;S8bGK&|rv7o__Ty=rO(JoxlD=;=Id+j%)plk*?m!f?
zIRpE<@RJsRkFxj1Ma?59+BsC-2l^uEZE^c6T9c5BnJ;}N7yLtnPFrz>mw(1n-Ya^D
z?=+@PkJH%@MW%~c#z=WaPExu2!Hemo6?#)Y`b@N0#JG(u8;-H<let<bB7MAkzpacM
zMZ+B&KuGeii#@&NqBMKP1+igdR_fdpZVBeC6qW^V)`nR7<GzErrj*1jmjv{VbShVN
zxKUfvdx`m1uE|8uDFABrPq+Ai=PyrTEfEzF`0hBtNvDN27+1Sgy~T^FT9%vV*uJ-6
zYkq4r|IHyf{PPK>jnb^BeZU@@3@yvfdOwVkcwf>x_s9yb&kyOYc`6w8Z8r3UJ*FLD
z5k0pE6}JcuKb!jdmlS5i=;#glWn41DzUU8RN=&`bP8lmKQKI)2M=u2Enu{ATZZ|H4
zl$GO*odn6V0Y>KlS@ZL{c!fHHcwE^zA#Ju#!O!P)n<aTg!YS;jq9S@UKZW3CFbZlq
zB)_t_FZ}q~?XB$h_hTB0@83GLTHolaLBIcJWT{3LOw^3zmVP`+b!~d-iSzWRr{&rM
z4X`pE?zZQz?U~H>tCDxLV$XKz`V#<`!{wn2c}x_1EgU3oE5oZ%FcMVCT(db-ZhU9j
zaM#odmx&u^PO-W0w+MRhTa^3cRj-u!z${oEgrR8zYuG(_!^Fmmn~<<r#LELR$*d1v
zQq};U6B6fNLfjMODtQ#KU*2@KxCN(8>y~Lh%%Ky_S3_qS%jx3_u(*!E`Ix7)7Gwm9
z*t@>N`HF?i3WO$Es#c={l4r~C?xduRA>D@PwA6_V=sQ;HBs$J$D~0&j{|X5MaiKJv
z{6WNnKevvO1PL9q@H@l+1q;T!b}e*f0wP%75VvmCSGYg0UC+>Ndg!URmcDJh=jfX(
zZCwJrB>g4&Q<F-zfWU0@<N-#uge{fRZZ=SW6<(|Owq<}|xKv&}zj>x>lvWNwNFnok
zAlCaAtOeQ((I1fVXx}#{$7j-FZa>K11=?XwNnNg|$?&Vm?ZYI^YwYNYD+HHgu*gUV
zFS3pP67XOaabwHjh~bLSh+$~45#p|Z;J4`lq}EWf_xTFM6kIRQ6X%VER36^}u>qT$
zWUe}iLP{5*X=jWD`HZ{P(aAVw7ZHWgnAU@i7?i&6EEHD1kSlRkQR+VLE<9aBJtign
zoz!(C$N(4_hs#{R6bBWs9RU5-FBm99qYW8NHPv*lcmL3H26~Mbej|YDzZX$Ugl9SE
z%3A&_p4NI3ttN8ubu<A~hPsuh0HOST%Q+>{q2RUPsgTYAeU~5YAw46ypQAAI8Mkqt
zrokla9N;&%I6{>@qYF<XL=Bs!+?weNXFzw-=Z`p%kz54}+CC1)y!w?K8rpgLxAF*S
z<uzi(^1qP<9hSV))YKq;ny@o((D-9N1a4`#)e%uBXg1xy$D!9iHEYvK#G@3dTcM@k
zix;gdCzD!UcukEZX`Hwmuaz(KQT|T=RFUS;v{+QQ{-U)`4ISkj1}<Z<Bn-*6Ss(rH
zGxkvhnt_9kH+xzT<u0zn^?;p5VPIvWZ~R{>-&e0MMc;^^761LUWpxNago;X&2+<5~
z2}$ztyaUT)o5eXz5G8)Vk#=(uP<(ZfxFqQPVzL<_=F{_fnw!?QhLd#GT+QdjXwz*l
zy<H7HW}uhPApb2`Cd{W77IG#D=?VC+4YM{cIMS+)j9Scrxwa>9!f8)8!^$Lihu7Th
z{{YWGFuyjl+7v1`<}lE;$NU?RYf^))!9x3a>WjM>9=w@XUwNJJZFTOuZ8v9*q`h`r
zS?w=608WdY-SsVS)uI#Ny8MA27gcfMS$AR_k_onaOAQE{%GhopGK#5ttec+^Xh7ak
zT;c;qF*StP0E^>}10Q34>I5no5`*g~CRW0VAfd;?YKnB(6ih(Z*Jm#I1Z80Wum2^1
zhe@VVK!DIM{?I~P6NZK$uEC<SBw0Wu%UEpW>==GOH{J9tEVU9uB6{*7f-%Np_{a-|
z29pqvLr{fe-qBnX+AUuL&|JHMq-DLr8E=ScZNa;cqTpvePr#}#7P=x>8!a-PQq;tH
zSfED8oU;4YkjI`n&*vU_j>(ZaCoa59Gi+0fM^IIaY=YjqF6Q5$Oc`sL=iX?dpw|)e
zuV&f-5RN&{U-%MX_#F(@hj{dBFETt(XUF6)7fxrMjDzRuyPRc<y?1j3|G%sS^r`+D
zpZ%C(!VdLScydKEfi^T|p+2XK-3Gw`NL9!!xU;~b-+gT)h&ALLXw5^X*=DJe5`=q6
zwS%dEv;`AF6e(fg3wT<v18q_9_ZdJb{MpA#C`>&h00}`NFjb!g1QA35gn_{Xj%roO
ztk6_LM=NLuCYoSm<h?Z8N}l^JL3z5R7*LSV2e^2fP~ELm2EjF;u^_aTAT1YvUY;i{
zI;qkv$~yId&3V!wxl@9mSolSaMvboxxFRS>5g39%$U4g8o{(3M&GBph{RxKZmS*cb
zCtEKtviGJH7Qbv-XK2mEFKY{s-q`lwtY_N66&ZD|DbTrwj))m+aq7Y&?A!jGL>9jE
z$g_OMM;@d;7_%^wp-zgbKbI5$Jrw8*0wtFK;{$>7DYom*=t~z;koz64JrA>|Al?S!
z2Ot{uRq?2%WD7#4VOW}SESzaEcYdCQg(*7OESa=fYM!BPcKS+v#kc5!P<`qi_z`4Z
z(Ju>pEDr!>JFvhBCIn(ZDn1JcDn0-i1I9XE5FCKSD&7h(Buf)AXV6$M1BS>M&#KJm
zu@)ncx)4r4^(Lro^8%$yr<KOMHx<n@Z%#sCT+-G3D0>+WEXHSA#y@wU;t4}V%eL&F
znqnBr86N;KKARff9<Y>k__g19mLT?@-{GmRGPHM>Z>w&Ur+?Kk{|!A3e6`d5)uZ$3
z0-h_~U;NA}IyB9RsV}j6@>^MI%<=n=Ji|x6^#Q_)kSrAAx_v3XQ(yfrVZd@0UttI$
zr46{>#ayxYoby4zs$ZB^yp!+Jd0})9>^lg@LYSL@b4QgkZ#0=ZH$`V@hAf>2&3u2`
z!~}K}B=S3U<kR&ygdp}eLiNfWiC+-iT7X{Ep$Uo%AoiG?3fNdZ6o`aSJk>a=f({6&
zDour!Gvw_6rOrZY9tjQAfr#p$#YTS4A<Yy*#SRJ4Zl%6ksMcWd7|fsd_}`@k%yG`o
zDrk<=qD@*T{@Q~1XiSfnfq0IC?IR#-F~)37PdF&;C<CK{8F2jSuRKd9TVOaI=J2`C
zP~Sd*38P-LT2(dTGSmK56{lCZ9&fZ^pv};GFK_X0M50+%zh4DgQ#zf)oSzwCeCS>-
zOdaJbkJfnayY8mBl;M)z&YwFiIsu;j*CqaxgF*d*7X{lb&;4U;Y>8q^P!+<O!4@u7
zjTxAoO<7zt<PSkw6<RfDRUi!&Qx6Dq0NW06NrH1JA^{=|&;T3z3cU@K$SRd0Ah-xL
zP`|*-0HDjcCR()1h`_|+C7dh1I9V3|)cP7gP*su&WEpe>nix_SlVUl3;Rz}W5mpAN
zRwfu48fSEJh}xK?x=k3_2lWYIcpTa@Fni3=Uh*zSu0!EB=(<yiB}-9C+G3IV8!fYe
z;sQ3({d7wMBwzC=RLgUSDne!0@@v2OEa#?AF)}d5$(gTXMlC^opvzudjbL^yG5@7M
z(^WJy-{t{eb%x(&Fuz<L=3lcH>j^CJSjfVKrwAH#25P%`<LI*t4%9hx(>|t8r#&GL
z=W)I(IsaOY1WVuSfENx80!t8t1Ytm2i?D$qNpf1Pgqi6Mjm8qqq)A5<TdOg$ILeY#
zIQVU_=Qg3U1j#}Lml#|clIJbRS_mn|7{t`E2$d>C2}FTX37`^zMnWEXvrq|p8Ud!D
zICr%Qte@{E28k4j1&KZO4`R;(RI5Z*2r5b%dtbi<XsOW2EtwP4I&zcJVVXud$A#I`
zM4d@SI=dOK3=#*1(J{kP%dzl=!Q_T829xIGt|+i(pf2yqfjI?hN}&?xNlV>SN{Y3j
z-PWDeo)$q~aH>qK4DSf|-7mhx8z)|6VrUyP^Doi~&ru)VQ%pX}224FRsy%!;nE%b=
z0teS^!&f%JhPqame|7$W;;2qo=FUAz5PS=jxXRPd{{gX$*fF-7>GMq-IZECe-qBtl
z$aApP62%cg91unk#s;X%X|>y&KR3nv!ZeN6Jng(m<`OU#W2*$wAW>*&%r!atVn}t;
zvhSOPZMVYWG_)2%@^pa2S<n#85<g>aI~eWw#TqG5DAbDpkQF<>MuMaTH!&}jdy1|=
z!T6Kd<Mc8Jn8+&uMWHtW6)Qvrv?6Hi3!-TbO_a6+Yy}N!5Cp!67FICv0Kw2Oc2|w)
zCPRBjIoEKU`~zj?#THSPU^@`zhByd`gODJw2o`nf+p4LjT9-6sQ_6!CEJlp48>sq1
z=fyj;5oLHX;13>uoflqvf$`xnW|v-NUSDBg+s(z!zgjnZCDV?LY(AHR`B$>AztL&{
zhCV9r^*8F=NFh>12`6)=&wq{a!3Pm(@#wRk<NfdYUIvGTSy)_xz~EAcQ!mABOh6n)
z1Yw96i_@HTr@{2hDdrnzSZbZ8lQ&5628a^aDn_ap<8Md=&X9K;X)C8WpL6mlOFXIU
zyi1s$6Bf=x)`@V=AR3Y<DWYJb6r+p2O;>?x;BRr!&XWQLNZL1xQPP3CR=z$EXe1s2
zloNj;gaK3nf87V-+juTk@<hl~=qPklaD<47AP5l~A(blOz!=qSV~pG!v*Qj&G$@>V
z2F|^%G?wN`7SED5=aD2Kl7QG&s0M=!R7a^*1_{FoQ7s?}3^+%gxuQkrtN-3_u{+M#
z_kBs;QpR?MJpIZko_OYI1_xpq?K4cbpJ8~<fj(#It0m*b8km0_Rbjb^IeNpj0pB7<
zo$GZWR14PINR#QguQ4?64l=#KSD*Q>+`9WCxXhAk2Sc5DZG?I~BuyK%lX;qp3(PH^
zW@hOat>i3@wqIOgFcM>=hBb8z5klyPd<uGQ32^hoku-A_&ML>hE>tF!9k&Xzr#)#X
zS4)yt{pwZ-Dj9+!ij=AoDuuF67~<P=A-GV{vc{ErJ%CdE7b!UQ#bYH@D2jhJP{Ke6
z3pFE)`l}@pTx3Wyr2}+w#YqK;G9-$Ss7g>Dq%uCr(C&!wLpk;B!opEF`GnG3>J$u2
z?^v4App(uq-){Ob={X@Xbt>Tm^=Oiz`Xu$*FqODQ7>5Kl@DtCuLkqTLi5If&;HNUV
zJLK@GvwZD|Z!l1=&`B4Wn*TDxHy!L-&zn{6-2lCJ173rxFa8^O8gN7H!E0gEx$zH3
z3RfRnwP@C&(Kw7mgUl|z!QN5Fdv4!HXyI%l<@A*B%4^e{o0+E3IS-~m6la7XSQ}v^
z24aL5Ljah*QPUpHMGBcQ!J-+YEkE8ne-e&84!3?7cHb{F<{d8g9Rsl;IE!hfpb2pd
zRrNb|WQ8bHh#)U-soz&j4z?=*($^OZ>F)dz`Ql#~_&^d^&x5ey3yT^FE`Th6M1&MD
zwvLGfTZxfsooH;B>h_TFJC%t8LVH0u`Iyk0hfceLw$q|b=vxp*D&9WLwa9geW<E_b
ze}n0kBC`f715|@;3|4kCSe<03K1QuFOcYe8RwDx2dpltW+qS`(>GOQ`@ox}SG7{Hf
zdhRiX_TGZAwh%rw>tlYAtAP1sUGK=1c>w$&-~p_Q`LCT(=V}4N6vUHYFr?X@rY<>u
z`G<ajkG$tzR1C)D3=C!Dy1>lLIZiFj@%(G2c>K9Hc=h-+GqVY4<_N-+YDI`6gEdhx
zs9)M#6(e^TuLW3e4Xhe86Vf)=C75~*25*6Fx518k4V@)$9p|4SaRilsAgU9`P;tH@
z9$Kh{eo<!ysfVoBGV{`4g+@^!_^Ab4kkE7etreok58fDj`X7iOMWArjtMz0kiGs5g
zY%G{c1v@lIWjtc^0PMI;u_2s%0_ILT(zZi8IhuK$#j;r19XLR|bhwl{?QL?JWZ4w0
z>@{Xv0d}rRAj8DLC_}Y9j1BCiRvV^P9im>X6XYpJo;<@#$DSpu<>Z+%HTPA9cJIQ5
zao^&<JkyRfWxOsM^KZWV`1a=kyah1-%0bCz0!a(D4;|o>pZE#tgFE=uCo^)F5d~0<
zEd$j_CWj{3IRt;~Bk(7`r$Z~B=lHpEJoWrB9)IoxFCIS2x#<phuEZhKt1)31AOwE*
zQ=fxtQK8pjfocX>3zAtl^)w7@gRy-ub6!cCMe5#ys2=zkeX9hq5Qh+3s769wEPg2@
zy_|Sia0*R8DbjzjJ^++3zyu}r*J~Bn;uHnN422qR6zar}>Lw~kP$8(s*uj`+G-O~8
z?7RyG$Au%0D^ssQ))qAJqt5C|&9z=OBt=lv!lOVn!#RhjK}-dsAz~7gMOxVuv&}Xq
zr()2UvC1%a?7p4xeFKb*Cj>#l%-l4uA73I5XBgbRgD@T_TK(oKr2SV9^REqKZ&(QM
z*1-H1-(PY;@^-+8+sh|D_UC9OqntmH5Czr;hE&Kq&~B&9HQ<#qULS9$YMB_?#*Wc#
zeBuN5@FO2d=wx#oK6{QQUpdL6&z|9x*V{}_&*0n$wQ5YY5)cG_YDWrFL3Q56$E8Bv
zR2paC#B<6m?-RD&CA8;+wm94Z<Q+>G8muVQs7U`UR3arU>i}_~USvQEww(aR3a*^F
z4Jg=u-WfP3m4C~j#A1q2`vgOrh0F+v0~=Kcj1Z4nYCB=_4rOE)TsQ@%pMt!pWG$gj
zHMJ|9?A4H^Z+5`9{X{HA3{D|UQ`(&lNhigkjMfIY?Uq}(=g>~xb^93K^zLo!zjKhv
zs6pZy#3L-sD*x|4{{sK!pM06>;4ry5ynpiLI`&)}%)cTJ;6|(g$htlItA+Vx(;rZG
zUQmQQ6>6PbeEg$7Ns^7wXr+WUAWN6e(3@r<G!cm>+~ly7q#T{`Cv`9qwhd0OYkV6&
z{B8H}XMUi~d~=rP-#EqBo|)!}XPO*6+GJ*?hOy(+2WwQq5MzudyQE6q0cj{RZ$N#A
zvhyAxxd+a+h0F>r@%{R^(9(+vNFN0dg`klq?f3zjLOUQY=IyN(8ZC-MQtbXd%@1r*
zOf(P_5+|zCYa1H>e7Ptc2gHWB4wXq5Js?cpqBNUu^f5^11x*B#DXy5DEZkDMr3j%^
zE%k6H$#ar4qm!hNwHc`f+_~>2-g*0O-u;g4+;{gd`)?h95$gj<C!~E=n0YxSO$H#h
z42>Ip>VN&C+;-=!{LD}P7Wv+hixxi{*!j5%n4b+`{`LGbZvY;^>ekP1F6Qt5&ZU-0
za~B`|)}KJ^7>%V25ku-cE|#wBo#(2nQ(Pu=n$R+(TaKTWTQbmG%sH}<6CHu^YQXN{
z?cB9vCm;IZ9QQvpI5j=ZlP{g;D^Jbx{PT;PIX_OW+o_JkR4P8>(8QsOj`ObxwVlf3
zL7_D(ECMc7!dQrlL7t$f)(2LIB1L1c8RV`IG&Tj)C=5)D6|cn?c*?JhJmuF~hzkF|
zl4k3qrxc{76zKpbLNH{gRAA&L*nTSnv2gV3O8YdpMA4*>T5~CyXMn?q&o*)=B%Opb
zYtu>R2(-<3&2ZqB3GTan2j6t(Fz+}pz)gFrFc$j=HwOzRV-}vO(w?u9B@wD2LDf<n
zHv}Vw`F2k7`w8FviFe}CjQ{N~{}0T*aWb!7a+w02mxK9b1DJnhF2V4PR0GhrEaop>
zUv9AT6MXnXe}XXF&fHAqEAs^|aK<kf<NJ06N8Ky#Vjy>d=6<lHwd99!;uzuqFm+)%
zhq*b&t8+Qkmxb+>I(x?k_|A9S#KYgxW~npFtLNr<?D-Qs_S6Xu9~)+NVH7hl%;0cD
zl)>~ds0}$r4l2naXd+as@B3p*`2Zm>N)-COeVX>1fUw2DO(ARMm4EuifUTdJGl3W1
z4EpICl)@o&MFzy%788vK^)Y4qkT5s_XI_Q5qkaHK+X5Mg%l*i%2%Szwd#ORznWYk*
zWykiM{X>J?zhfT{+&{^kw+^#y!ora8m*|4w!m)tqM<W)NYIL$HxedJqTg?wYmHMmG
zXB^}?p%H3v!04}Z`1TLq&D`Hg`Nx0nOR#5<i=4yWWX!)Z<WLdjZ_FCNN|=BB(&1(e
zA7!0Cu<W^=!A+0w!EgQ%D$#DHr*cF~y?)O+%S905$4`TxXDx>IhHISoan;NTc?xM8
z+6`z#P^tJ}5Y-Gxq_i^S)Hz4x91Piro%J2uymJTd{O**W{G*GUnV#pFm(TF^r%rSD
z>=5UkuXB2SfF!Q5=Up(C!9wZ?n_js%iu{gk@Qc`nN)!PpkQJ8UdC`n;zN(M(7P6G1
z!$lB?jE4cXPog>~xcO2j2VtSDV8@h^12C{dnL7hhuL~xzkb$PqZbIY266xYG2Er+B
z*`9Fc2djM31ADpqp1V14`vikw1r8^0W`QKlIDOc1emY{VQKgwjB+inHK|=LXYA7zv
z(F>5Zi}q+SZXH>u#6l}nTE>!m+VSuw-^Jowi+}#_9w(X{=s5&khEeCHWV~c^DZSk2
z(}3$^{wtpc*w}DJiTeZc={nzh-w!h~avL)<Y0;kZ(<FW%rC`oEKen0&zE5sSn=j|p
zXDLU0O=<pP$TClz%@f~Q2qPt|7X1C1ki|;dz<dI4ya9uUBeoBWv3+8MkKL8=u@5J-
zJ1t&+b(SX|JH@MCj9EA`LiMgelD&hZOAyx~lpLG+1z=3^`XbQ8Q+;!vf%|XFaymk}
z_@%3#=V3%pJk;TZiKGZ{#wgAY8PYLO+YQxy1~J0)DOj3;=9xB~GxLOtbL<{i<gO2<
z-2aZ4`|i7ygSU=S8L#^Yk~wH)WbGWer^eCw3SaqUAsjMf_(G)=Y(<wT*@BW!X;-bO
zoCXZ6e~p0@{s>Od)Q>k$Ye4j?jz9I|4|3+@0{`u^hq2=|R-gA@*&cl3m|r%D`7g2u
z@0v;t-++ohSA_Z3Csk}5^ZO$`AM&nSzmJ{U?_p*tE!=Wk-*AuXrk7>9m^wec8iiid
zo`QtZt!Ecj+gk8$U7?8V93%;trqT)^ilI`6N=?Y>N*03)pqUD%Ph09I48vi_<V2mj
zZyMq5pXdNB&b&6yiKElJbX0gl28f;+BfNWvD251#)uG0b885*VI3ZQYRC}&J+GA#y
zD!cS)@CVQxsSWT-yOBarSceC(P#radgFZ+!mJ$wszD4K71;$&meDk)PcRy6)?tALo
zvVSMl$zs8$KqDhPn?ss;nef06SObf&?|#FxPr&J8-iAEsK-N(oyi_p7z>oI}@Kb-K
z`g%!h67?MiQ)D`A3}@#I_BWLO^>2PVXU;70wO6MIhpK(9NbA%DWTQFi<zW8RhUMnp
z1ij9yYz1=DP2V}1OXaX2qll_37hHc+Fn{?f(%A}k?*16J9{4!3vq@LEykDWc=XWp5
zx&@}t&<jHd!t%LYH>>P!u%*hb6pB1v9>~LJ<5Tw__OPN-gZf}mNQ{)g`jP&c2vwBf
zSQ(p8CigqIIR|afINjvr)AO7-(xyEz%IE_-uy+m6sT$hzkj^-gMMs_pc~-OnORIv?
zaoF|*K}_s5`{Lp@926g9WO=j&OAD}c8kSCVs4ul?o?Yb3@ivD>EO+e+x%;+={RgX5
zCu$x~<UrHUIgl0lgQoNaP*R1YgE#Y-^Fgw;2*2@fT~V7Ud=5)_#IA;6aSn^16<SY(
zvPJ7MvR)l24h^AEs*zGv<>tK(d2ogw`|)4mXd(oacx|tWYmE6XUHGU-AgbAHD{mZl
z?zulVTi_LaduIS<{TAo-!2I3CzYwy2{QcZ^=;KUJC!nr7%inL-S$-*<bWNcd<?!ir
zqEbjsX_rM<8fzk6AHWpK!2W*i{uSrE6jq)=W`(RHbe5Db5~3L5s?QM8iqeUofnjb6
z&QBReo-quL4N>1e%x#~T;I?#;xg$-^zjB=EKS)`MLz=g5Cps`reOo{_2gzav2C`Io
zW3bY56e<gxMuaf74Ax*L&<2jrwK)9LA~R3SBPTL;ZL4tiO%Vt047vT2V+>5jeidfG
zk|UjVeur1DHxOEb3n3L@DN&jW%3>25O{LuyF9_Q4ZOe%X7#M|f$CbF^I~&>+kJW<7
z*fVe{KUe4cqnz=gEV&cX%x7aA^)%<BM-8{t$N5J;_dWc{pZGLOLE(M2=?>M^!Tgv0
zPQNk8@C}jyn95-zX0*?S^*X2h%YT-)g-Lfe?|t{5WoAKfc~+$UrEOKuFRvSxO9mar
zSHi^<yOHs`lM#ZzZ+hK|xp-1bDFP}*o37t6%;RqVgTVOifiJ{)93O;Gsrp-WK&Vyl
zq8|oo3IoP55a$f-a#U|Ouw9_tVD7nTPCmKFD`#>}4GpmSeS6roZ-|+*j<n;vo`CwX
zTPF}!1FAz14S8I@u+U`g#5_wcEi!vJp?S8&9usr-jykvRA7<BWgK%dI6An6%H5}UV
zY(p_pPU`wPK`yisrO|?=1~eN=yX`v^Sq6FTAyw`m&xKkY8Ydl3{12sCmqN$b*B?r$
zbK9*~_^wCy=io_9wwPxyp4Au?-hy!q)zoqKdxfvgKhIzItG`9KcY-{3eH7s<!2Bzw
z{c8*z$qHMP1fuF@Te&&#+;cyCO*4S&767c6QN1JpY<BUl=O(lo=I{NE%Y=A-2OoU!
zr)g&+bdnaPNKXV%)3>ekO$p+3*@q@#iVMADt{IPKOXG?XQ;YVr_Y0bFSuZdmUHmPD
z(S=CQ^(F{B#4rUpC$vS~paz43P^<YCU~Ggz1A{iBUdyTNgy0}BZsFV%&;O@se)Ex(
zh1-R1{p0r#5Yld>*f8`NM&_8EYjO0*6lV|5;!ZoN^C`Q+3Wv50a`*mWcHdlwnt{~O
zo^njh3ojhA?0eX7>p?>{qiEq#*mlrPV6h2HO=z{ely|$Mqy-dlxgRo8C%9a3&Sz4k
zr1JO(eC@wFl7@I`@)F{gbqdp~SM=Ws4bol^C<ska;Azr9(VnfPId^`@@{8a2D*xxd
z{37+;6Z8P8tg-mlfTEjS{Fhv}{SY9ZjdF9~%hxyn1lP|OR5q6I%LWT9D;7>x+xbml
zvn4Q7<AHmBgjC1qbe1rtoDS>Z;xeUNhFN-IGerSSd&)Y3FGo8;)!_1CCl4S;3e!;2
zD<*2$>n&cH6jE2EHJK~OHqP&mHia-$ob~O+RzqmaDU}LT2cSNnv<F~G0;;Wm$}6y^
z)g-CT^Te;Wm^wd3qqD%5f8k|bd-@cA_2)mv__mN!$67r7yC;}^tx5C5B75oqAHQXs
zyFWC}_T4q#8t5o)K{+=ioSITjTriwzge(F}8NB$b%C5hpG&7;q#P9S?Xf~Bj;>|m<
zf{f&HA<rSti-oVgv*Octx}QUy`C8$&n}x$qC>86WlPxq1`mchnF|qa;IT?YxD;3bw
zK<N8Kb8C6=i;f@q;DbE>>`8v>iR0A9M*QQ=+QUGy4l!s=hvBss|8;K%zBz5cOE}gm
z%Z15$K7z7VtM5`=mCjn;vG02s96rSC!Xnn#ZeT5CvU}d1y2=NpUEjZQ$M8<Pen%7W
zL7}{;O;A{0=RO;dqDp8?@u!P9eeKigFE45>)P|h%a#?wy&mROzhS12ARs$C2pjwCe
zpi&=zZF>zfRQPXy>kRXA36C|t$TKHjVR(2qFF#)8ul|w$z@Z1X^U@b)xMSch{=^U7
z&U^n@1uEXPhYKk)$CNYYlv6Xpg-*as2j(;AX!-v9Ykd7x_=C?mZobnpH>b2(zMz-o
zehk_BC3rmEbwAEa_2e=D6zWRa`&<_nVf1E@r@h*eDOR)V+f1B-b$&p}71%#0{rrk7
zs|)}Xip;t5f+C?6G7(<=s^zc$$anC<YyX~8?S!Bj6@X)di(fXQ>o4ofr1bO+-Hj6f
zh6^^zwd(WBh9(a4j$tCaott)lfcb@1*PFid?kmUSSIR_|8GZEW&WY)B#4Q%9xZJzt
zI<HMHDyWr0+paLWRQ1I{Q$D7bqx33}#ja(f_uBGe5jan+wbrM{WQr@b^@06$!+-u~
zM>uyj;km|d@%X9dc<|o8#Cz_)i}xLLWXUOBer1l<z!=Y;eT9GU^BF%jb%^i$#3*mP
zm~-}gz=;bmuU`B!!!PJGS6u474U^0-;<N?d__DJ5Hf3o6+Qs7cDZS!yDJ0YV>&ErX
z0$t?5<n<Ljq-r%`WCZFHN@H3HLO(cEYJ{qKbCA+Ez)^Ur28E-ul=B8s6maQteDVP~
z3gG-=PVLoU{??Cvf<OHae}U+xn~LD3eNthY>GN+E^RK`IxQ?b>!S(Y7HyhCKTYr#Z
zvjx9y?|xpn{oaq0=BCGn=~G`7(Myb(yZ<ig0(uF1w5aME>8AA*!K7$nA-U(esPPiy
z<u4o86Cv^OLVJa$Ld~`W1yTrH=0(;~Zo#hDRh<)vp_3}R_6GdMe>l#oFEmN)X&ycG
zb@uQ0LALFA7o&GU{cgDL&>`MG1=~Ld|M(YXc;VEq^KXCof8wTFtK?eaXqwZkcv^Fo
z78pL!qF`5;q~?BijRN7stIE0K4y+|j{4Sm6#mtZMJ9v3UyTYl?yCtL23j}>9*yWHq
zVSKM){#@>5#*1^D7p0`~@uq;ts)DA4Z-5olcxf;xl!H@z1`w8pqfUqeID9(eo<j%t
z!3V#Y|ML9P43ACrn1Y+`^RJWkug3%6hBF79Uy}xLZ7~1x#h;}a6V=-o8@r7p$uK7D
zR{bvl5weEEap81RT6}9)!ujHttHpo43p;nd>YXH7EDj-eo;IAh!g}oDTj55ed67ov
zMa$4ZR{G`@MwyKz$Ig8LhhLfFcR%wgi7fEQk>8|V*-aepWN~_d=by}Y;&8_6os7Tt
zUo-yGZ=I&ooTuqdGS_;AU;gw31}7bzB_&Uw(}2dDk}Uao{yY&}CS4tWm-|d4X&PRB
zHYbdgBq=k1a`*2=Q`P?25dWTB;rgRxU8V16HeqCsAXZ6pM^4_eW-A~-rjV+Vx$;){
z|CL6fdGF>;MxkAN?WE93ge(^hpM(z_dOz_}6X){vXZAOY`DI<q|7O~Qo9hDs=##*@
z)HGqaQRq6DUp9jI%WJM|`zezn_Yg*&0b|OccI~GG%Q86Ev$O8Y1>{orx9oM5ef2&v
zK{-lWV%#hj?`)fDu~7UicS7FxxNe$Uw8*?<cKIB=i#p4dq^%4L3sxMz@{2DL#lmxE
zf1mmEB=y=YRI3vpN^4OuIXwDEzzdHpGIjPf(zJ<4jX56Usi)8K`s=go*&Wbs`*CEK
z_S$shC4TSSN=D@27nCe17Ikqev3)<ON=w=FK6q6ctI+rU5g$w{!$M^k(oXKxmkV!(
zEOTVJBg>Vn&xtu#?c)3_6VhBra_=16&b;ezJBLnjYiH0(h3WZ(%nh@1@DQEWQfch4
zGUk_cye3w{{IUVVkvE|VXs(|cfUcAF%c>D@y$C5QMa{mgT%3?}99Si;dDl$AblH6(
zg(6L%c;W9eUB+M8BG58jEh5BnPNQ4|dW3$rAf@yVC>C+%)9bvi1y-i>uCU0<)GzSd
z^#=t{D$0x9HOsyE$L{?BzwxUtGdr`uk~_zd#ji40+f5XV5QY_8?hA-E5T1TKqp`Gv
z2Ne+70cJYKSjvy{+0V|hYp)k2(ZUnao1sGHJhmwpxXV3{Ac&ONv%<_dM;HrPs@;O$
zCAXd&K=-}$-|xCL0V#HPVR(mlXi*rk<ath(W@K4TmKDy-xfVgdQ=U^Nq|Q4CC%G3d
zZD-}e_j2Z~92$wT&~%uQkn^gv+fgyHyw)|jTG}s{I8(2V`DKmk`i8RyUn}k34Cdc>
z+TZ_3V_;$N6z7l6F*s%!8jlEUfT;D7Q~lF1D!uV#UH-G>A6ie%rkld5PwgF^rP3po
z=<?K}v=DQUXWri~cfDd(Ucdt{oGXP9i4?YCMf*(reQB!fy*1>SCob^R({E6#2D~!$
zS%Roa7>p6xK}0Ml#5F@>5oXUj(zJ~h<AGu<scW(%&+y{23%vZ&0^278I*ETjJqa(<
z7leB0J4VPe%c;XT)tY+Bu}aql&GiMa?$>VLzpo%j`IypiNolv0!R-czE6iD4_twh@
z9J#6wm<0^Tw4fR1N>T;_=l|W#ppiH_IY=#_c2me%*XDP>{5t2GFA{{&b;kS~89I6!
z7Xi&0t-j4+e%aLGH^uk18nD=Um6>xVSXi27`|b%ww~dkK&|GpPt=zYz#C6$wdNDIo
zSNS~kq9tBt28AzR`6Rjm(X(u2l^9=bNqCWhU!Yy!<oceV>^$VTV|<5YcDBQ3KJyfV
zwTP4Rk29a2WVmt=D}w|<9SWLk5J6)Jnv05RUSM5=n1C>-Gt)lINbNkI|Lh3g@tp&n
z%3sb7IR7qsn7xPCy-Tlf^i?=;UqN|x+DFsveO(3(ba}J2zot?uD5oh5PFkV?L)yu)
zfhm-fecRP^2>^I|_HyQ;m>I~W=ZIvC5JiT#W{K)v1oh0~Ja2sCEXUrMXTJ419lO9#
z<(8s5WHx~LxeA#726qPP?xLa_h=P~X=U;i}?*@Xv(237;Zt)9j({JJB=g(6etg&;~
zE=I=37#NL6TF_d`NIO1vHRUv)6m2E#J%8E1U-lAp`Ddv8y^k`HD0|Y&IP8iz&jgZE
zxkpN;8|f7jyBB$3F^*EH34;@c-~RPy$+8BCW*lF7geb0KObufzgh9Q~JM=?I%?4y?
zUWjgL;f@nvgDUOx91VSmH{O`!)Ts%^$A&n0Dqn`-3lz{}Nm6+Ag)nm#=BIMPYDlNk
zBUhEu{bjqagaQ4NcwO?9u<Ycz9PEHFFd<wx>ZsUWR%DD9&M04-&{tn@J^%z(h${h=
z0ZUYcBuhE7FwcdP)0{gu#oWv+#zm+sa=!U>M)vG0UV~w6-TpO(d)DmpuQCNI{g06A
zrVMx;hk<lOXP~Rq=U=|~FTKAqQsu(*vvg)UObou0&Jw)-$_oT>%-HB8liMd58XpFY
z=rp0z%)A?o`oSK(s6nX93@kl+tiO#VqRTFu@&a9!Jd~`nf&rvOTdedP3=BA1EZ)9X
zAjLu)-4XEQ<3~7h<aNdeCwO)G(>R+F+i?OrfVEYEuv*kB495DpgWrK24n@Tv5+MZG
zAmT#nNosNzPdz=%2fk$pPL;2%SHn<OwA|?7cRyrgICDJX;Qb-3mKPrNk1c8<#j0O6
zYf+M)N_U^Wno)V)vJ6JI8_vE_l8}n$ae^9Ka14CQ)Ea{g43%0)wQi6Anw<vcr)Ib?
zeSr(pGc+1a9~_J&2%0oH$Cz%uz|gL}gq6WHiqu!5&%fTpq27S9;4Ad(uN~%JIWns%
zm9dz{(yJ`YzQ%Zb7o!7rBCf*pxig$UdxC0hfU)syjEs&kG%<uBps@r=EAvxj-7Q_a
zg~2X&t8|!^zE>c<c7W;IF{OVPzkJR8!$-x`VD5Us(;9DGCIVUJ7~dH(Gqc2FUw@8z
zZHV&=PcoamOeGq_n!&<}C?>G6FJ@X#n#q#o7qKx0V?vCCSX-r;T%h4z=8e|}Ie7av
zM#qM@FqQXsP_C~Sx{S=Dn9y+I4ab3di*wP}(kugopPtZeb|d|*m%gB&1-nv#PDdHp
z5n{u%n@yC^19cc15JVwi91>LoXF4=mvm8BofeTX?m|K`3O%g&I5QP!dP)U+GW}0u%
z;sWvDC=)yGK}@iYfam34em1fAumAC;P=PNW^K%)Ce|aY&8i-)fFthj!Gjq>UV=of}
z_fw0vk#;(qIQ9xhk0^tKBTR1F#mLwM!;=H#nU}Uo+8KFPkVX5LfTI1<*8MMUh1a68
ztc|$rtMn@<_LzdM)FI5hqEI{lU;NB7q;3h5J5IJ9Aq)qxwnAWQ7zqh%g&?RP#$v5S
zjOPrv!dtJzBO=z{Fo-o=Xg@){dK=F@dy4nIX9zRX2V45_O@CUiz78;d!O&dDutDgR
zl(kns=miexgH+mAM3r7dk>0sX6Brt?)JF_Uvl+$;p$(~2Vk-53z-F{M4Ngx_F*AFC
z`GslPttNSv5rr{P5E91$t@J!oi-+l$MNC{Jo)~AmelKPv^1p17-pfW?eH+Pm<wi3G
z@p~ZMiTlgt_M27RT4haX<>D0gRpl##H5e2+?b94>o+MrxVlddpU}YcGXqcqc=8ZRA
zK#m%QhQ=5l+s???B%|Bvo}{wqVS;l#3V;gB1t;}V%}MREAuD<a#p3VB4}B8k<#0<^
zjaV6(40-0s*Ew_M2!quDPRxD=XFJ4p1Z!$oTf^FzFsNg#ml`jFOP&=0fIhB+3L+sQ
zmeAH{re|o$5l)||bMCf9s`WuSv-vVAv=)WQk~XXAyDhDzVd`|wwtXR;R>7j|=S66*
zBr5cV`nA8<S}gvu*5Y!o6{wF^$eM;qT}ZPwi=A_voI39p{n8v+k`UPnp*2*3h}<mE
z=p1Icb-}wHMG?`qQO2qVih$QwhY?vr%wrvr&!#Z{ddgTgq&1jXvv?wxqw6ml(fwb`
zaM9l%Rw_glaCwK>=F`k9JwrveF%aECE!ssG4%1p%<c+y0%+Y|s!BKYZ+R4E17{h~g
z#6i2|J^j+e*9Ner=qB{1w%v`t#}bfUAm}|#yFs8F9O~j>rwnfoIe%e}7oK~Lf$AW$
zt(Te0Um=c%5ffl-jlk3~rh>IK3I&4hV3E2KyE{LQi~s>ftcL<N!Z^cJ`$;O*TX^NA
zV?6M{-7L)YF!?f4Pv7}>MGAlFSjzVO7Y|nTS4ayWpwibpDfATkW&^?y;+hb~N?0+Z
zZkFR`PmsEK<`<^uB#T%H34<yjg0(5F^cb_v3xwiGY=_G5ID@slgwfElYpW;tDm}NL
zH5T&K!~CqHGQ^E)45G_gKGz!aUrISx`+j2sDuV+sDCF537n)zjEm;PZZlxMc5{Kgi
zGD2fvmX~JFU~I_H&?J-Fwlg|0&d6|`tmEmkX(#LQ-;L?JAPP`h28V9TQTo6`*+wkX
zce~RsDAhrO4Ktqj`cohYS)OpZ@p)`m1+f@YAuu(+_)P^HRM9RL?=R-LqNV2wyF!bo
z#Yp6{fM9^7_EB2#an78sF}E;Jr9Mo$;C&K&8=zOLa_S17KSvP2%vmK%a>UyHsz-O+
zvKJWp26T$d$wm;yf(?9oG*6VN^Nu*MoIU><uOEGe!GStf46!kE^7AyB=V@o>QI?3p
zn2#QK7a?u_`?<5!M{emWx|Wbfix%-lj5@gvnEz5|Ai2?uLDpCDxmuWih0#rsb;O;Q
ze*iX!s11+9Ff5#Y4NYcQNSYWOW~j1{db}Gk6&4q!n3*|66jm4>o?v`(8^dGcjEvRM
z+}8}!R*uWG``JrBqtvimaI_CbmNew@F~-8+h~=rrpJ#gR6a&>7$LD?zXEGu)gfTJJ
zR57Mn1c0IdSUyR)%N8AgQuvfE>oG21K!A}DvBFH}Nvh^%UVZr}@3{Y78jFRU7#E2q
z_R)K70L=wqVK$>S5|VWCzGlBJs~h;h3t?3VqC%lPh4!M-nuE@w(rGJc>X_UHp$#x5
zr;)xuvvY!6Gn{dRHlkh`W2my1x~+5XuDvKz{NA}44^|4__invr(?*?Fg8A8W#(RSn
z0c8VTeVg6+*O6<I^%PxJ`x`yYJP8wS8TugBPV)Nf7dYE`3~4?}J(y%Lx`ldWFPMP2
zxpPcSpC+&&LqlUsY}>)e#5jZ71`wdV1W7Z)Wu@v*p$Q;;N+U{9>6dN?!B4U|#wJ6K
zA3wvZuRKSsT4$#5B8&O!gwY5h#_#y1j<o|=Q^D8>D^ZWOY;BK-Bic>ZJ;X2=2|>JZ
zDHy_Fkj3N(o%keYPX*kxf0oL?D2sDhw^v=Z@0Kkcapb8mcP?Xi656eT7*xzX7>hSF
zjl2PgQ%G7$V;b7?N~h%~4a<zlTF-<C0+?w%#p&i}7_5&XfguhiiEWL@S|Srs4+j_s
z0wxDi!qJey=W1x*6zbJ7?buw}FYBcJvO@Uq{DvFM9CWqx=1Thfo5%bcj__Too}U~v
zMi`85rXKB~l`qgrPO{K=6w~+`^<a|W_%^EX4iH$FKgaaUNkUs?Xn357ZQB_h8>c>5
z$6!cXkazN4W4+v&Ou6_KF@D}Z&y~^bmQLQ{=_j5hh#W~e%enTK2*P^txQM`32?F2y
zHzptms)#K<Uhz7Heo#kyJD1Y!0+be@J_`s7Eq=p=_G9d<Z0E%nUgd#zKZsfI14`W@
zX7RitraL=e#4taVA?kxcP=&BkI1?ebL}|<^t$FA)l`JXRh_*=2E#0g_3iah61VcbQ
z-p*ik(nARx)))d?p&HZ}h-*xkhy%BeGFM5EJiCa$u@R$AuHxd~9Ojq)fg|Mxw+DZd
zG5?CyR#_>uD1oV9O^6YT)11&$2rBz=m77SiSz74@78+m1G#mrr4hExrRHNM(8x%0%
zG{(jZ42&?jZ3mM(CK%W@fT$tuK+??7OpA11yH)W#S8lq~5C(?-{$C%bm7Jp%4RUPe
zcTk&QOwI4!rh>I~pZ-gXhz|%xg5r#sF1^_=R>2rsggVn*^hQFAiBWRY<wU_SOP!;%
z+!4}q31?29VAqblOr6e(>b~?;jB+iAK883BnLcBXFlTte(r&4j3!7Kk3+jbS9KE)u
zfY@U2s#`14?$~u#uvJ3>6Zzt$1O#FUZA2xgQj4k#gfTm!fSbQ*h{Y501UQlnn{vEa
zn18KxaYMBMbzNtmjnjLt7Uo~6t8fv4s3;HyL7l)>z2pp*j0Dk)$PN;iLGoxXnVYAP
zooBxJHG+nr7ECf2AEXxVz*tM8G0p5NCpr9j%;3N<W0O0W+_s&;(LtghAW!_*Zx}l&
zb>+almf<1z5C8aC&Q8Bdy;9@C(xWW86U3Df&wR60tW+^l!Ab>Vs=gK=u~#lO0V=*w
z*Ilhe5fCxm{(rgn4INZNkeJ*EHVBz&J<87dck|M7&oDSR%E0&l3o}{KtrP-d2x3DJ
z`c7?<G&wtUl<5n5(AE&M=ToxM*rPNdF&C8v`t=nqX^DHoQX>I@9q@%tF$5A21u>N%
zrW(WyRVv)QJ7i$OlE0B-CA>n+FB{PCyK>CGZ0ElrnSg*%gW@)=<a6yY|5{`X|6O2W
z;;2p(4q&8%W?uYL#NaeRT^j*HJ4j>)aX7NPK_i`FuJHxJrePr5!9aMBTDS`_5$#r!
zV@F=$_>tEbs1GqTJkIFE1jA!P42=YA-zyw{ZHdqQ#`Bz?d4)<`W3hFd^UX(zs$<2d
za#R%jY6NBf-&6`RP>}%`)5ZEqA<tC|;|RU6Xd}K0V2DtYqU4Cn34>ue`4mgZs|<vP
z_{KNBz+Lyem$AuljP)d)BuVMC=QwxaG*dIjSzMSUtfe&Ochj79-bOuGIjxnxvdc>J
z_%cJV2BNS^U<dtsLx@aB#a4)I$Y2<A>v)CT!va}G-fs70bXUu?<Jw^UOS4tE(d@ym
zM#1kIV18MDC`l>JFvEgiQ!NH(mPlO-QSZ%dG{tF(YK9>tv~>bgMcGBJZ5r7O^R2HF
zv@Ed<G8FHl7VjkthRM=|Q>WhG<mn@XVOaPO1~i*Zh|Uv*LaTFzvyDdxD#HaFF}>YB
zs9|i~7XeL7V0sL|@&XeBd8Xu9kEzrn<OCQA3MddGq=@7g$x$Q3@fcIBuMpS@m2@{x
zJ^6V?M|M)J$26NuG@1*vI!okPgTNYcmti&O32O8we@1$QBGv8!?`H#-1SRcyD0t6>
z&;~?7jmTCpKx`taL50a$h5e&3+v|obOOZy0tev9;1X>&OuMH`$Ip)7k#lAPc2)ImT
z`z?a`H&75X1YH9?&#1G$!X8vfvNl=PAa!kW*THE9WH?Q6bZ{=kX+|KHARa);$?_#S
z`5b53Pb00zh-HYucrW!}4}lr;qrWa8annQ<MO>Yw*0Y>%J&vsmVQf&O>`|BO6PUWs
z089mADj4e*zd!6n!liw~$z7d;00=Pz7(yJ84*;f=C|80?owLm^GFf>am2f9hQ?H>@
z-ni2Q0muR>^E8qL7CJ|XrA?mw7)Fe*DRgUFJ<6Y$o-BGvl#)XISBv7GS6tV^2O#iF
zzaSzYU^uR_eW1o<JzyX%MN|SvENM%~jJYz*FV_L{ud6<M!wdsmFU&6+#{9B|S3&={
zYY-UErMI?V)_JM#Y7paGoy@gKvL<QTCU<Q_I~XFI_^iNbhLVChPt`S52qAZE(tLpn
z$tzswJV&4bu^A$^qktuKb2PIvB(#aEJG$FxiPr;LC9ppAH@1Q?5!UzuAf@aXCDqpp
zca&OuJz~G<`&twOiBNJ+7?K>p5!fM2HReL+4+xSPRl6M{F}b$M+VdoC#`A-0h*}}4
zOrUB(T(1DBE2v}j=_pDu1m!Kt6mr1?f>`hQ=Q1U-F+-IhhQcbtm6(CR6Of!5972wP
zG@#wg$)w+LcYX1hjf|;p9`myf=I0MF58$!}d)CAJ>qPi<Fn=!>Ey*~ACARg#8KM>u
zN0vd7=71xNs?@_OS(K8dZPL6+-pvY9oXdO=kQ76Pb1AARR$@#zMkN~a<GI=)aZ5C_
zlQ>NPhl#3G?IeZ4x6eRKP^ABL0y98h>P29Q2yBcEB5!ftH#<>g0jj0Ge(8Q(Qegwc
z1b*?W?*f4HY8nViidcv%ljN>J!=36f0F4-ISSPTN_gzd9qHvJ77SL>JZv?|#^f754
zOVs%MKMaL-%TSGksFIVVUdJ)8Pz`E~4@@v#s}mPSpuQbwP=w40X|9k4bUNOb(Oz@R
zzuwNj5zN1AaC{Xbowq#?fXfo|SVLQA^L}R=?6k<mU4bG;HDVBBNHQ4TUg6d|N13|N
z;Mf~;EY2rb8&HXdh_p_YC1iPv%(ck!gxq!f!Xm|q4*;qu4*xSG!)ioe1|ZD4^#n&&
zSd^C>fxxr%Ok9lp*0EB<N=#s?1VI&JJ*Bs7qxCO1?{VmmemY*k1~dfThs@=E;deU+
z#ycK4-=+-gAYw~Zpd8hFnXIdr2pdEML1EyBE4|OUxZaBQ0W2((5mjsmE*1XZ4}P8D
z;ceV?$2YTQZ$ud6WG*M`1PoN`1#h8W)!hfPG>29OSu>#31YHpVT)w&Is<oyKj`Yep
zFGX(LVIb)<2)mY;Up64oycYJ8O9w!^nsz>oG==iV{SRzo&n+YD&nCJ5-EEE>p5@gS
zXE}eify*6HTp^4q<Zh7MrKDMdENkOjO0Ee=p~_PR0!=(cmmH^AvCy-^BSwn=VEx~h
zs3`W;u%?C~#)yXi##RbKPan;<FfnlsFLENTPk*3S3lJ=VF9sT;zH3vu>U1x3OOZbm
zK?0<JMZJ!KBMd4%lLP5ZGa3t;TT~3SK}WNZqZ!!15d<+``pV~d;kExCm1vaXC!Xi_
zgYV<e!CP6HKgaBBgE$EKv=z0eYY4gXLZC?w*@CdJ&><5DmhGpP!|+>Yq*ty$#Ad_f
zv>Sp4uu3d_Q!ziQerVqC!(Y&@u(L5mS{+3~6vZ?eIce$$!iZaM-^sz-COLOzfmdFd
z=H#&komNg5hE&3sFsPE}33;B7W^Hm3oJ)$upZf2~Q8J9CJ{U-!o^YudV62z$D!Bha
zQS`GW_O$?s3huw@3Y7Gl-6<D)w3P0<K{@1Gh?^*49Fmu#vKC`3XxhyT{O+&Iio3>I
za1I+(yBSDfl!OFIAQ4YI`4~%$^StYw-^So@g}9m!MKO<k^+le2@pl-i@4-mG{Nhm_
zfBFQky?hfR^)V)fws&pXd&AUT+c<R|0wfNSBqHgAsF*9n{IWSrf0>wHR<4xaU_5{>
zy4mc`e|<2&toXX5J36ZUz6R3s60k)o+-i7s+|He2?A|lN!a|$Fhi5tb@(i<62_imd
z1cBG-%QYj{ggk4Lxel(V7kJBy9K{vi_Z%*za3?Whu{QEOf2kCOz$(_%ip;_EwfcIP
zvtM$%bT_6bo}sn~G+|ea)URF;H8{yp=Q9K(FIsj*kSeS8c-WyP$4G@NQ}2c(-lAJv
z#ADxhf^R(i3*>o&^XFgVw*4RGw%c!GX8IUkf9%((L^T455D}_j1uKS1SY@y_USvqU
znFd!_kmpXwr0`3yhQ$TL!lJ`;$Iw^mt*?*y*K!BmIOb;^%)i<-f5S}!vW}R?<$IW4
z70iE$|3g=kr<(@%zvgn5y_^$p1%J2G_WbioT;cxvcXQ`mlN>uT$Kh9JIeWT6nmD4!
z5(NRyRnVZ0(~R6D<awLi_4ou@1OobuH2fe@fHhH32Z#x5jUX68Y}6IDkY&KX=ThWc
zpXR0%YQq%z1%&=_rU-b>yB@1rL^IR`{&h*#Cv_I|<_8cm*Tm4oiltH$8VgEL0jnWj
z`_k8W^x6MJXk#i-otgO~Jo?PP<+V3%qnXSCo_=fyup<6B!a5^^I}x#d(Tf($M!H@K
zDuqK(Zb);>Qp2*)NH;c6Bb%+lZx-{L4Nl3vImRH@xdtFtX{7hsVg8k#$1g-bM(cOi
zf=1&EB91i4h~fxqAj=8|o7~Y@@>TnThqiI()^VmTG<fZ`+5dlgUm7FVm7VvUd+)2Y
z7j`$vCMi;+7D^mSn#CGB_Q;;rShEC)kvIW*62S1EAQ?M={li9p*gpb_F^t53^CJlC
z1Rlo@5Ccibv4c$F#M>-A8haK>9?wXm))7f9T)NrpwYsb7y?al7-22|UulDM_d+G`r
zkzG^ORj=MX_k8Dk=lgK;?PaVkN03q=2m(kbNRtPvAuwxb6FGQLhc=N70!RyJf)u1s
zHVcpiC^c+_JV-i-Kv|-FeBTO@)Dz$-=*IN|`$Ls9=Y@#p5;VXOz#*6wKmt<cY|TOB
zov8{e#4!d^hFD#xqFy6RKA<rB9`NEfzk%;w`ya>$<zz~+SQrABuv(o%po+-JVf)#j
zpoBtR6);?yfE3D=EF7B=R*cnpC|IjBK>`sGLak5@3#e-eBcc}H{Z3>4e#vVNt}-1^
zO~5^b`KiS)P`e5Sah&SLZ6`oV;P&k$eD8ZVFg`wv)2AkIWO5k!oI)5Hm$EX}*CPPH
z=%FF}*fS&e$VaQVd1DE0y}pFIx2j+R<nq!=k+Xyld4Njp<Tqd#7*4D0BqW4XmJB3w
zPSjJTvR0naN#cAY2tpXgGK}TGB?!`K0|;NI)X{LsP5FfotN<!m)}Z@+@Pi>UBuNMz
zfT)N{Wd&dTv#;Qx;~&E7Z+s80UjI|%f>B7yxmt#Ta5D&&i723?)iB7ZJOWulAoH$s
zK(4LnD*lw>e*=bgW+{;oh>XO_T7cEMP7GhTp$NFQFh5$Dg5Utkf^P`(ci{na=qPL)
z^Ec)O1Z`Zgi%iDhRw`hvTE*I02$&Vj&n;tkG>;PxOyKyjF%*k=7-OKdRo)5f8uhw?
zlmQ-pd=ihJo51YsD&BZ)0oUJLLloIrd86H+j<dhc7E$fbY=P1-6NMG^jMYQf-~34R
z4NNTShtyfuw$cQMO%m8rDg?Q}QgVSHbzF?Q0x?yW9oa_8JR+@;Q^R=W>I`1F`egt>
zDSz0tQf&Ys5_bLo3Q7b}s)Rt5pj>bfo{$Mcz_2Y<S_=i|mPF1mi3PMFgdo(kK&4(p
zB?_$<T9V;x7v^uVrF*Vbp(!h-gE|Zp%R%*r$*Dgcz$P$%`?)~@qjjod?>X4$2snOx
z47cwrVd;JaQpH{MTU$-A4#9$Zad&rjx8hc$#i2kUP>K{ua4Rk?6qh2!9SStK2Djqw
z*20H}aJkR@Bkp<5?`QYy&O0;j&b~uzYWCCrY&ozEc|%JhEf;0P&L$uug$9_C(&B04
zu4Ie>k?b(v-8C}br8v80-d~w_LcQ@66FW`6Ee>kMCDnlW4e6EpfBEt%QFNRRP)OV5
z5T0+<qpYPDFrYZ0IyGFO@PX=Uk2QBcX$6zBaj!C}_Q-7zUiN@8@k)%SfWxCnUjSO|
zS?DR@>5}RVN@-cIkB1J^Q}7BR@l2MF2tiDiAcxRo(uHCgC3l5(8>kKBc);tuwNYp*
z_SLQJz$(su8C@Oq0I3*Md0D5hS&;!%=Bi%Z^I(Fh#u^qq@JL1&!Xe^+ksIj$+=c%7
zHSW$X>Q1JFP<)PYOjDF6zgeYgRV_+iu_|KMIdSKbzB8O-4!`zG6y>W?s_$&`kgeSR
z(t~wr2CcLw1lS`7jKi8x=%vpAGRmZ`e>L2sbh4`3V>p%{A_Z(XKpH25r^a8>d8AO%
zI$2Fc&1<pl0!B1@GIAI=&38y?p>~PR*r)Q#998q~(#f3#ZK9>LD<SvU4x@;Gr9%P$
zfsMEzwCr|lfjTj_t}LC{D*DInL+XrxfW>C0y}D=6N1EFU{+$Qut4vrc_QKb@Phek4
z@5YxaL42G2v0g8nGDSLeK|&~DOGaA*O`!~r*X|p-i`6&k@8X(V_-CjyH_1;qT=3Y!
zWp}4_IPox8Qc?~uvPD`wUn}2TI*|Hd{F#p2v8A);oh3FR)deys=of*QPg)!`h-XNs
zQj~s#jx{=ho0grPJM2=ri7Ww4ut^E?k7uj-%?$6~h;MzzI9_I1Pku>Wnou)gXFEYt
z#-Y;FG!@#6HDh;9laq>#H`c9K{C=}(`CkLRwrIsgI1VLK(9#YN1iwdfo99}G`Ovq5
zd2QY26^IKPEc&RytAo`mxBs>X<l^l(J(+S(<0WRpXj7sa*GgNftVY`o->e9X9wNjS
z@a*^$WH2{dy!t%ZnhT1WlKXsx_QWJa+9JBS@b-?9yPO>K9GOyFc?QKC*RP%Ag_%?8
z1NDLcD4B0e{%k!<;7nn}tbVdhEb&Ic?^;|gFmNXL^+YY*R2~VON1?-D@{cU~n$)y1
zJjaGKL>(zxdGGATnmJ+JAdMBNSbkFBBx^_w{(<)D6?a>}nJf(z@8&LQw4jV(6K_or
z(ZNJsZ`Q23=i?2rN0%QxH@68#VO?Ea;!?Y+%;m7)T;Fh(#qtJCw(p;8a?0n<*V+U{
z1Hs>fc4Jc3tmbU`Xrn<N%RX$IFf<_1D7A%MIX({XDBPq!R}U5_YzA+*Y!UyyXMGfY
zJ{Q!@&2sN-Sjmsg$zyaJ%(jp9>Y0F~k{uK2i~Fc&50=JDbx2te`FP?g1^!6G|2c;_
zMOmJ*)|3&9<Q+sL{NxKGR9iq9rm(l%t+}Ws^@Q4zdHa2<>uieiTklG;Pb-#q+C&>9
zAXqW5OX&+|PuiRt@#5jD-d^(~ud5rTpyy`WsUQBJH42Jk+b5&kdpjz%<Y^kXLBQdw
z*9dm|E_Epq6fj})1aEt1Xc_Y*F1AH}i4WNJ??sjuomFn+pZ#f8sZsa>$>YApy8@w8
zXw6(9h-S7KJ)V(*SwHDCCPPbvsD<R}w(smB;$AwyhL#1~-4%W>t>zz>Aj`t^wpCU5
zX4M4?#JqVp&6pl_338*l&v`*=q4NnoyAK~gWx6_>hr0s66lGE&{DefC4<FE^W|9q=
zW(@4mzLPE`u$~gi9Bf4??6afh{C5)k%&SEcnx?>LNHSTf&6mtMNR-S<B-(!D(D)_Z
z1W?@bSD24$Fs|RrHZ9olYa9GKmTXi)wsBp7YFknHzOjyZw+G}*2rv$`btq_7;}iCK
zO}&a(Nw}|Q^qo+o!CdFggxOCnlC^7K&lQv5*huUbN}f_ul73N@x!Q5|+8LBx?P`p#
zqf!F(_9D3U555}EO>FH}FiUvZ;SLl4?0K5Su&XCRo>d#Yl!d)~HcGOyvf*l+SYb!D
zuiYP}>Xi+0cw*R2C$eD9Zdfns;~g%N)Um_n!J=#1Dp_grqNcj7Sz98`gyypaDrzAV
z0uD4C8<)V-5xtn489~7widYK=!ulKI6tTE_m$cdPCp!rA<V!dyz#mgk-ktEOud--}
zmu0M@)|7m$;^Hq%aBBHg?s1_aqgi*_0eycTLG8|yC652WzHC+XLSc!D4{tAZ?fPKC
ziMNDr5NVk%-QZu1rDkmAi{bIO-Ue{yQQ3{xb^da$tN8=i&WAtcC(3}O<k5ZhLaR(5
z@ikHr`$h|ZHz!(~wrOM;^d^}qq?8teU2K!>u1XHz>=_y^>7kUmgpYpYU^<FUWm>N4
z6G6lF3x#?J@dpS`;>(1Yk#7f61JqC=#_1alKw80e$aM+`FBDVMkK35grrDRA?PteV
zYUViHg-Rl|C85J6u^1*i){hd8f3b3;BtxZJ$-Pb%fUn58Zc5^C*W2ZiZr9Db`%@TY
z{67Mt+0_(!FR|>ZKBN{=IZqs@tj?aH+jIOQM~gVY=%327Y~x)yU<qYaexu2(FLO)L
zL2BN#GxZC`_*USxG|5t!t;OjTDq4qO7&+RieJ|_7LJR!WQ%v>_Y!404kHN->m0~77
zY|CpE>a^xr{^H*+NTmXX5IRY-6M#@!5I`F+il_Pm?*r1k2XXk*vfLP@(up#qLMb&&
z4bOslwY@nanvPPDLh?w*rB$=~l@fMj^u+6JcvfF#M{C536zb0UDK@S!n(+QPkNx>M
z@o1l_%;$4b{Dg0X362|r;s?4eIs#-@CGdn)(>~!NHpiE|Joy)z_cG|i0R3*s*W`?{
zxQ#CdHs|ZYqLh^^xfpCo3u%HtjTzihhX#t*_!p0J4&oCuP$eA<c&{W4^E9gQ&-lHJ
zTib{wM!243*nKuLt?&ESP<5dYU74e^LBw2_@bs1%p;Gs-kFl#?iV>@d0j*-U|JgB3
z&AVLHLJoZ%uD~#1hLWx{w`)S%VF?+*M0&`BZP2N`v)BF>7KpVVi}6SA%#&#6&Hm%a
z{<Y}Cuzb6QgTFt-7vO>a3d^g^mN_;5*P{|$|M;n*Zlug?nU@ewk9o1TI)_%c;-&Yk
zyw{0H6y6}-UxBhJSlg@3X&#~4i<Q)sgOy2JyD{P2<S}j@GxBOf!Ks+yfMJk}x*&9H
z92Ty9>OfLQvR~%wE^!%cF=hHElqzrbj<pq0B>e2+VKR8D>%oz<GG<2T$(I!rE_gS_
zzt*3Rs5SF?dc0K#GvMLW;Iv}3dJ_s4P^oqj5Hape)63}*p3E88Ibbv3FdxdhBTU-6
zOxTCF?=5aM^wWB@KCVrr((_QTJn6Y~8m;Kn8YOrn$~z;lk>^(g;M(u`p19iw_mf}{
zS55?pnVFY}weB5|>E7p`j6x0(Md?fL({+S}@C*O^8vr-+U>yFo(&~>z*YlHPB--MW
zvc>$*^83GxuF4ngSBO_{zlG0Z{1+7(;BoCPz7HPLFM0jkB@qPjzJL;>oydnOeAS<I
zvk?HIziha;l~!&Fd8_W?1Gc}1OUxYKyg_|!!_Jt_MZ*kLZX6kX#RU2N%t<r@U4h)g
z2iUJ}JFIIH*wNMGc(aJt@tR{CM?TSimiG+H>(?cjazn+|8gkuQyiFy^o7T|T+wI?E
zW3|ke9d<EHX+dA&A2wu5Vss|nK25c?JFsO}8h!Uqz=QK65bLzd@fbxnk3M`Z-ttRr
z0b*0-1l8WClvcLs;iYWUGN@3F*?z+rP(5@J(1Z8`*e}Zyly6Rna}~lQ!v6W%-w#<i
z<%23_N<K+}_anqg;Z2V9kT}ej#2V3O_O}|m+J9+?ejld9r>{xHYgJ!Gr#4mCpVIeI
z{lTTwq2r<_tfgz<)RG6$g-Cm2I}4#)VnjBmbWzx+#m_pnHmfdoJL{oj#9Delw4YSD
zPQGr@-kHb9i)KY~A`k46QipR!N$Yp0`)~H5I3<sKFr;GA8Ozbxl61H0%cB0>jAxf`
zieV4LzH*<f7CU=^IK4UR>f`Qz04Y1j^0pilDltZ{M@c0gx0Jo1R45c%IAcCn0c0%6
zU2{fFRnWyU=JG*YXIQp9jPmH_(hb-r(GL70=}T5(!fke^|J6zyl|nN9sS9FH+>lV+
zJ*58IQ;}h9H&r6{@ivUoh<QkE|9mJggM<YCBWx&fEr7Y#!D@>yfgj@t7Z8{baLLg_
zqsR2|CwsE&ki>n~GnJqop(b}y*X{Qfsvol`P1rl<X~`;*5^?{ON!l*=96JMc(9_ik
zLN(Y>-v(ApZscNygnz(Q%0238qIHp%B7H3HP;I}3QcB+d)?wGsf1XHs<)4CcMWPxh
z-oEeZb2C(aGuXuUWP{;54=Z0XW#r=3Cv`XB;r1LEKougwC@GgZYE+F8-GiD?a=@fE
zf9{RW%xS;Z(Bp?)qAbLy>~;&ISE)k??tPRnr~ExBEaG$rom74RJc1xJ2fx1=P~jK>
zzWyMZH;1zgSN50pJJS(67X_k;0LQ!M7p;dLmWiDzt%vG&=zSLTJi5ypH{^n0F3`tB
z;1-|*^@10^aq+(N$-73se|T5I1OB!*d<RP3zKT_q%?kRu5W6`3Q<#MT?c?V!X3iH?
zo9AcP@94U|2oof17tZdy7!i<h99tyK=+_=x!=p%H&eL+BN?J?nVs*PT4)c3wT+mDB
zZ{tJ>VXVz3PSeMP+H&nRBaogZioh$45v#|xYmFRAS1lZBym)!1I>A_KqXr_$r+6C6
zD8&$okm-o|2OigEGLGGP{d)}TViNuKtxxZ4zr;(efFT9)@C}zMdSk_8mEy!(z`nW}
zd;^=Se{%erx`N@>LoUBfgG^*fA%X2U592l$&>RB?#rAc8MQQ{o8e_<)E8fP_#M{mQ
zAG#sk_|3xTA<ykUgmD8j#sK(wWs${va?uuBoTbaZalO2axA6F45!p%qzn{q<3obr+
zJHNsf=^RFX`PQ3}swfxy)zsSL$<0I<7P?&#d9|=@ar213nhr*yc+EUV+Y(aN2?{uk
zQ&y`C8(@9m-cTG^?H;k0&w8cPY6Z7vMs<4$T%=+MLn_E=VYx#HT8`d1Iqng%QHh{q
z+tutxsjp78+jIS8iaiph*Fq7DgqN}YtVF9v6NE|(-&((}U34{u`E8gF3~S&M<j@S<
zr2y9<Ze&s-$&x7*6$XQ&D=SUsXyOqOU6|Xrj`K56$&qcHD)1jWV2Isn?y2Xf67Z7i
z(T2Ta98XgIGkRCs#IR-=Gt%@Fj_T}&fpv3h5_8(TNYnGa^6LkQ2C-9~!Z)^F_pDXN
z;$D}9`5GJ(!QRi}ESv40;Tz{u+q7|Lt}mLgA93fHT~qUy`QRHB$14Q;7dhXtI0d~<
zZL6wZET9)U^ya*ef>$1omvy1oQNu9#CkW&&jADz$?KQ2-3B*$RLA*Whc4fncrWnFd
z7pV$G=BGU-2*;^vhQs?GGlbdQv=$qG2YR*Q!DCNFK6A>jtK?v4^zb^7*&MayES)nI
z5|&+Krv1Pj3_y)2$xB}Sm#$0G`)5&%t;y+UY2F<RHbzOx)OBE6t1q5$jOQ_&ok67z
z1->!fWZz*Ce0E-4Qc0pobP4f574lSE?YzJE)*Y0=q0p<pB(Oh}Xa_m|o<cav94!dB
zB;pw}^V(UzunoR;Ocz8`l#H0hE-H7ed>jlh@2iWlMRh+N<|1My2i$jtq;sl%BY7ty
zZaWcSu_O4OP<8X5n+DKO?B+lFoGH&RXBOo)7e2-(>7km)qizC93W_oDzj@l8srIo=
zWw&4}OPj#pOy&1)RY|LhUhx&Y;wz%#WfpSVEXOCJ%4|mG;SI*Ta@$Zj`b&|R3&Bt-
z=RLeCmX<F8!}Wq~AsCd5-VA@|vo4VT&7fDt4n9%>1z07`VVU%6Sr)Wxn2%ETD>leP
zaebQF$nHXB0wx*bAp}CaUf}jE4eb-!=s;TeN3!ep=vups4k%%3D%nPtWc{0O1kEJ)
z;`x6n=8@Bh&&7@8?WQMJNj#ntWAT0S&Ta~xOgQc33Ea@xbqohKZrtsZ;3(ps|B=a;
z{hnlUY<p=Po*M!RB!ljhEEdl(Potv>p*fOjP*Ze;Wi0#5)rVXb?z}`!=$zi`744{{
zw1<2<&64nosG_XZ!Hsv($?o`o#ckl_Ey_O<P1sLoxZX<K{R$rHbxwx<FIvh7hGBce
zAM?4&$~K?pq!i2C?&*}IVtt7?(XKEJGe(o85t|`&F_gBRjLaKXJvA*dsBi_WGMvOw
z_wWr5^HTr1D4SVC)52!X(nZC2!D1jg?09n|R2=`xKQ~}s<U_p~g@|r@YkL8fSqv_3
zsd$R8CY~bhE(fLy(6cM7`LEPM@hyY)XI#C!-rc{^Y39#Oi!jT~{1&vUvP1<>BrYNt
z&?Xj~<@q@uBc!6@N<<iyaHO@mMJDq-)DC%bIWta$ao;PDnB!05mZ91i_?#rr^Z;Os
zg3>VgQMfr_EgKgaV`=TX>*Y0z&VN$o>zzF*OE*b#oOMd^Q&Zy(tXbhvz?fUFDLj(Q
ziI;0+J}w(j^vDE?R76=L=w$Z_Soj5VKJiywoA0hBDupl$P=lD0)lo`LVvbwuh=b`1
zXE+k*26hkCQ^pcRI0$+gU03ko8}FCvWnExkr#>5BEnP6`OWK<9l#K$1TQySBWiMvo
zX@Hg?@D2AXdmM4-!CZ|oo$_aY8gA{zwsub}=3|4`@j<vu6iNd;#if-XV=Tk{+_TL3
zFxvDy*AJb){d+NsKB0;nU6p;Z)l!S3RC1#7%gXY0okH0!Vcj&_ljK_~dkdI&#VU+e
z)W)Xh#jYd`?rFof<DDYI1hoNrFs>hHxV9?GZBY~}Vp4XT4Y+70mH2Mkg}%pR_ae?{
z0;hVKiu1>l^2DKGoo~VwYEiqVi@iIO7`q)?5+(LKl#Z!T+GQi}r{(uA)U~+yJ`yC*
z3``BPn0{R!8oz&zQ*I})`S4#f(FpNE9~r|>hO#IIlW9jFn`DX(JlQ#ASXBr&LL(Bn
zRJm*v1*B;`0i>e2|Dg<i_|f%x2!?VoB>#nTl&zXxq#Ri0$?}6{WpXPnpKkz@8Z^pS
zAOpmB-4^Ehgt0JATb`=qvW><THKB|>IX_e^ReFT<$nyQ~%Y8*s;1@+grR)G+yQjAR
z2`D5$9up8KKj*r?#vtIWa?IlGAY(QnCkl9p6lGJn%FSMxa_hCzHKe|3pBO&W{0p*o
z`S+Fw{;uy0QZpVOik8Av^a?Y~=8qC8<6Bb(l5qSmcXn)I&Fi(g*^w`g&!@Rp>82Ox
z=HTwO|D2k!b_n~-P4sv2#{ODGAfy0+EjxMNU0!6?nCNU)HER_?`XxeWIGJ@XlW^x*
zs8!x2)3PV9`S_m;hso&a{avv5iu+lzfiwG?I+INK#{e~bh9;~7SDN2A0CIji7-ope
z=f|6is$AK}FZ|1Zg7#wgBEB7R;@3s405lpNVj+8OGNHLS^~WXCAUtD$`ptJJdhtDh
zy~ClhKtss&1Mx9SvXLW)Nt3(xo7;C|U&!h5Lp}&FY;Z3g9kFu8gy^FY{b~OUE|K56
z?Km(Ls&=-D++ay^j0=HleodV~x;bajDS00TVUPh06uPm)D6b#h@)&P~r1+#q5$p^P
z&vKCBH|x{3<X1wAClYLsx@x&AN%xH&#{EkBg*tcJ+Wb#l%`R4{-xLF^NkX@k7=)c-
z4$HE-fIj(Zxm}Cb6$gti{?A97=^+rjYcdf@C?NvDaDv-7Zn3?(fQ2cyvkO=u84BXc
zqqsrE*kLvlT3=INv@(Jky*Y^;#JQvoR{KX~92YBSlIf$UrT60}ZK@jcXTo*ZI7%*M
zs7|kl?0*BP7k}gQ!~iHbxERz`HHwK$$?M+);#imxrmG3~-Wia7QSa<NmI6@{8)1@_
z{YH}s^!mBX7jFJ3Jsa%ZDwqO5n*?;9&Jp##NIH;sIt_9uQriFac<m6wuu@rWXkAMC
z!cqkLG6iHLolm1>$UuG*zJy|B1q3ctJnQ{4Pn8rSxqW~CMgz>%s(;5No4#e>P#9*2
zB(Kq$v{1rP0NQND!*RpoQR-Fn9Z1JQV*dzBU*D2S7p3Y=OivK=>OLo&JgszgQ)mx~
z(uDQs8>_sF5BUV5<+E)@V*K3a3p1qbODof-ll$uB*HX)CRaQLY2IDTJeLDkLF7d3M
z<Y)M*wis^{L<`6ZzA+aTZoF_t;iDSMAmSHR2NR(uElC0T75flRK1{<EN6SrCT9L{m
zWwwJ9mD(3J_eeJi!z9~Jhv5nWaRI?(K0M5zQBW9T@@V^cNbxEKsxodJP!V;I%5lyO
z+c}R=;-j(69)y-FMBFetZ?i>$qU;)jP4|cd65=aQVEY=+29+~zc#H@wsyl!-qxr)2
zEsVefUi|3}Z7>=_V~FuC4$QC`!$)-OJQv$#vpikv>Qn0^wh&@C+9~i0>EtCCKxy;K
zzdl9s%TonNMAS#|_w@p_TyUB^5(HpNyDy?bld*III5n@9ho|c8dlkXqiU+3jKPotz
zNn$^Q-e-$J8<CcQxsoX@2#RDSn@^{>i8&Br+k3us^E+^6{xej+85^5JIohPEdZXvz
zLH4lDiG9b)Z9LVbsARnKgzD#OiAQGQ#zp3;Y96JNU$ZOP;&PUpOdUOMljst2`q;t*
zO;mn`30R;|Cn&_*XwWHUkrrK_WLiGpz@wq)UK;k7h4el3Y4TAi)56I@8XThwjyhsi
zD`LMAX@B3=0P}QI8r5plzFd@6N6`n&{dHrP)y1O<&0UwL=ESz?C4b(nh8bmlfB4z2
zn1vC44<LHEZWas43aS~)8$vXV+%9nQH7|#HsVT4sNcmDR7njvHT=K13Bb0Z|lI%MX
z2D>;zgsSoLhkP+CA6-H1R+NhRfD|;&vU7eQ&1a6JZ%!eL@7|yYB)PH@pm3Mbwu{Ks
zESEh;X$BAoprH?cAwpv!ATiai-RM>FM^&3o=BDl48X+jur*L;+++TtEZR>x)+b4en
zT{%N1RFqD>6DdJa{veU^zL2}SFu+THK0b)i=&E`GRzk*yBh0Jf;wbAt5Bck?n_01v
zr!&LZo34Eo_n}<fjCtudSui}8D8Y9RjJsFP1&$$8RX`;MeN_&Vh*7cvV=TqrxP>gP
z8HCNpG_K8$008I5m?BY?Uv_0@tEJ+l`1Y<g?>mn61c18=zY+yH!{`4>DZNwmcu%2R
zOi=VjCMN~`3+veT%ClUt=T~+}xf*wHCd{N6rU%!{J<+UrRg%GlRlWEwr~R@w>0S3#
zTg;i>v!4Z#27sJ-ia$6{11Z3K`XuvX;w)2F%uZGq5ip4O(>tD&D9&&{uLK-b9x|Yl
zN^EWpZ1aO+bY24S$>hVfE_VPKM5<IL(=u&?`b-BDQ3@rMF-1P&7M9+Tayy$!Xi>h*
z9N3bQVE|(62o9_6nFs3f?<>Ou2}L3h?7bN*zbWDdp#di8xYdj1i<8|A^Wuqh?64OS
z^aCh_L6z#i&znW}$8(L?!UC8)sCBTD`XR_?V7Hr!$i%w8Ik*hq(@tcOi;#T)8Pey*
z=zx*B%a_#;1HXCw9+1b^K2<!wzr61XlS#B`yF=N%B2XwN7NMRS=Q^I|YI>(f_L&G6
zqks!ai6%zh<pf(sJJHTByBi-b7Vb$IyMTUN8l-Ct(Oe~`F4*x*uBG`%UvF;xnJKN#
z_JBUpAqLT8I+BCL)=t1nu{KQT7#q=p?OEUQa=|&L5*#RiZdR-y(|p-S?MZHvUxcb|
z79!?tV$?n@U7Azo@9WE&@~5n+Qv<F@--FqfCiD`QGYiDzCv=4@^`+Q4TjZjfe@Mst
z6eZnb(du#8os-ZY?a`kS_$tuf(yh**L7@_W;<nZC24@4cM6u=*XrOS1gN!|=oJ|yj
z)W4Yjn>P#jZ*yjjiI?4#`$+9<cfEYk6~ca9fscvf<LV`jiRQG>ZetuZeL0ZDJt-?M
zJAQe&cgFgBT8b}-67PKgv9-$XJqdd+Bkb^-H4~O(O7E_h54CS=$~9Fw@FfwJW~Y^4
z%mrnP@+_D+5zU(_N)d!IrSr5Sp`hv$0Z>nB;YXB@dtT|I>M4^6PB=z6Tom`&1>Vh_
zB>NjNW*fftNDo}txE<2;Vm!_F2jF#(b=Kd1{BQ4fpK@iM{M2Js$ACbS-!K1+h^S(H
z26-d0GH#2^)p!gfO)0_q@4N7X0@Ia0={%w8Nz2m^1`B!#Psz@(4ps%Yl+nU!C86|b
zuFN6u+l7<%43aMxQbfno?Gm0%Z?n(wjoQezt&O|vnGYSnw)t7g?|hvidxl#@!j<y9
zheA0&<XP?KQ#I40Y3WlFC+2SAc15+A0XL^-DMkZcbH<pK-o4mGf|x>BAzmGK1p#$y
zaKe3>JSDLtz{&LcLz?xk%WL$_&+8+z(1WTTDwX_D_QU2yh+Ccnf{YP6Y$?{nz}_X^
z;+=+TD8&m)J|}i+U<p5j6&;4%2QDFarCzD<4w-+y%2flJ?CdZ}^V8!%oDTd`Vm=co
z>St%?2k@A-u;^b)kS#8hH=5+bo?eJ)JXm6OzJ(2>sl6rQ2BW1q9JN_Wq)IK!pn<1p
z8g}`EJO6ur9wg5<;OfE<gRs^GE9YQn(iHi6xYv8xxVZq=1ov%%3;}TeA`7}6E7sLM
zn;}KYbSt)h@$nK&b#?0regQE{MY07gJk9FG-y&CM&hoOd!C8FP$g1^(w;aCwfE?$|
zB7^vRdlhco&9Fz|vqSVN@RYv8$^#;I;{Ii^I)Z=mm2o!*Sj)cDcswGS27-}i0>>rm
zdK$+(cC)`odS0i83)-r_zw!oTT^-b3dYmb>2cp<Sg=&91NAiy+B|RTDr2fbkVvFMt
z{ItRc*9*kH@>@Zy2|}aW?-ISQ0*S6Js^y?VOrM@J<-Z!uw%ceNm0w<22OqWb>*-mi
z!k$)OHok7;=XMx?mv$XSM&xtUV8lN7==~Ex1{XS<%{AfP1xMgn?E1dq8{Ptyc#(3z
zcgkd!*!vaSOc6XC(c9tdbxZY^<A9KRX}p{Nghb{O6e6Q~vVAXLD>ekbaBoUnpa*W+
z)rQX;<nfgOZHPx<e!1I6BO_~rj*N$kP%4EM?!R+J&C?tultr7I)o$NoSllJfhUoeb
zXIxK~k@wOrtpA1FW39OXr4#NgJrHNzh+rz8n}mBJJ!@CivD9{Ck%cw%W@<-!e(YP>
zxCbfnMjwOF54~o3jQ@EBy>H(+b3B-_g!ava-Q1EmEND>x$_|lqM|r6`5RiZA0r3YL
zo>V=6c=ABv*(2%79>n7BvEUy{I5g_s#rQupLXlmQ##Mg~&OMN_!~nocsVm>eqV;pa
zH_G|^h8A+-ao@0Dj;b4}$qk{ii!F>3oNq<W!Xp#g<+=0jmg<RoS`zL!kUxM{m^B&e
za+q7kyjt#D%jTlxrXuscxDpzJ4daYk{^zZg{B}9nV9oQ0KSOfZ02kTK7t6S!t~!xt
zSDCQb*LU?@^RBElgX>ZEAnZ^x^KV36NbiQ!mr01xmbPTl3xt&z6fqo6A0Pa_*)FR&
zMPG#txdIYS!hn2g2NTF+`7}kOUwo_`jK)hq5ZbEsY-)?t_0V`EyYeeG1t$f7lQK6z
zL?G5UQ1Ra6xYg(LtN&dfVd4Ckn;8$1Kz@K#d}%3P`Qkc4Jb$tDMw00VI%kim-!B-o
zr?m~l#)z##)*kZd4^5MDCd_&^(c>kh2VD6*2E7bdP1~Fh__2_V_qq55O@ko;-}m0F
zAOb~D6{?uaot*g8^ki--C+mivz>K?@3(YYa<<%yaM~r6|mE=0vG^a~H<)E+^IJ~)k
z9Mihd&8H8>zxm`3u9+`$Fb^$$OnLXb;<XGT7k|#f2S5n#x{IGLnVHNUCc{3`#}>sg
z<Fx<F(8>1wBzbSSjwrf1TJ|Y-PWx}2uk6GLOO9ImF%U=VtkzxpC4+f6TM(L?RsGe$
zYi#4hmWG3`S<P+s$^FUs_l<Zy#G4<Cl*LBbjE#L4U+SsY^{@aAQXjrPh_88T__GS2
zs5|7E_6|B%Rt6CL0Qt0pI84ZUJxAZw8trSr4&Q)L8_H*w(HBqX64$z81U?*JfgOsH
z9@<)B@8j4wu;=RL0-pT1gLcxaAG7sflK;CA_Qqic!T<-1Xg)W9#Pi)1j3eSslyUBT
zNu{P(o!`NI2R!{&#(O>6*mSHaJfH&WL&JRQnjIar=HsL2amj>`<M;-SFsem`?LgJH
zc>L!9ct*trdI%2ro6`(a`kQ?o1^E*TnO(m9eSXNvpRJ_l6coC&pLZ19{qZp|Sa?Qf
zXOD=E7t=>&Cv|7uFQe`KKWOSkbaje5IlX7}7Sd<#&0Nlpayp~`?YYPP92D@7+Ua{n
z?BwK|zv~?$1gPZ;!EwbPX9oCRqCP+53ryE)8c5i_Ci@`4WS0fGD#8n|yT;ORXDN7a
zyLNXdclHy6x<!^$V`)86`rJtIb*)wZ_GO2y+$nMXh$2$WutdA6{e5}n3?%^gDo-C^
zvY=`#>cA;Z1pk`A*8^{)hoa??m=-oV0Q%&g0zeA8{TM^DIHUj+<|2PRtql%521l%~
zFrJk`EJFheCpYk~F5cyD7&(dq;t91lM0qmdZ{2&LX5UVp|BD0%U!HjR2AnOk!yzkr
zk9?@Z#u%miBbg@GyJ;{vO{!;_f_!ozd6(cLWhXWrl`yK=P}%{+nlAFiXM4PSjx)W1
z{<U-q_El@}GX^{=ri7H0sj$H3nvdj(J$4z2xNMdC><7zxz+?mT&qf#-O^#(zV&dc>
zt~GluowLR#iDL<{Q@ry&i&4C(kkJ~w?^rvy;DC1h$b@A}aJlzP5uGW+^AC#!h3m;q
z88}t*A~?DaxhU?qnf_UW=J^MyH(GA<<^ydD4lrc^P55ZDv$L1uZhFtW;|Kx(;w{rX
z3Zq@)C<snOl4i>!?WRDp@v*2F*L-DssZU2Ym?HesbnS+JGi>X22IEi09P|E#!el9*
z`<O>h<xxlBIuJMf^=VR$1TCSaB1*(CDob}Mw%CIS=-*Ju5frjFPyy3w)cyL6zwh)m
z0SZ7>I8guqX4_acg0}YwD2vN74~=Z(*dv0HRW{-LRje)Urz-C68_pi4A?~5sR*7l(
zDbIHWhw5+jkRJc-nP$VZm-WyXFVD@1Re*4+lp5ENb@pCuK(J2Ms&%6LfAuh3qrlQ5
zmzeOTe*~U@zw#?hnct=KAOe7pvi#rrGxLS)xSrT5dZER_3_jnN(y_LA1aC8Miu+{b
zKO1vjcKJ|w*iY~6Uf9IWvqfH%ew%`PTJWoM^9R3hrcY@wlQOn0-=dVhg+^-9P^|AE
zmB3Iz5Lg4-gBYFP?a)lUs4)Ba;73voW1q@XoK(Q4#M_zw))@dFq$s)p<SV9b`2okR
zLlNcmg7Z37*#-b@JSg2733)HnIRT2Qc01hhA!sPu(lFgT8=LIo=PPplVAl#GgU`M<
zpmrT_5Ye?FKq3UiHXwkivC-`4aGL$@a<3BCYL`BO{|PhjEg|_|nHn8ywvMIzy{m6M
z<kd`~&j62z9@hm9nkv+wF#;gM25;g2`914>c>Ynnnh3saxCOjCnyR`gHA*&N{{w9T
BYIXns

diff --git a/apps/desktop/src-tauri/icons/32x32.png b/apps/desktop/src-tauri/icons/32x32.png
index 2d4c28ada4d37396052f1d0519813b6115d45da8..37cd4c8d00ba538398850514282331b962d09870 100644
GIT binary patch
delta 2429
zcmV-@34-?W42KhtBYz1_Nkl<Zc%0Q&d2p2F9e&>TJNHPkyE%3fa+q*yfIxz#pkPs|
zA|u`mYIU5dt;Z<n)Y5iZvDO2pw%Bp36{(IEbZUpH(MlC(xFi$=IShpa$O$H9v-k0x
z@7wuyg9(V*I!<T${ISRH{q}vH-}V091^ypFK)z@rBUV*b$ba&iZvK(;SrqBFOGb#8
zdzVlp-@B~uqYs~Z`*pv|onsM2A-8tT?1phX_68p<?ppyNc>;ov^we(*{xIjfjdRZ9
zpYo8uB)9nL&#qs|%@)VVdB<{o?UWhKj-AqPEP@P^pA4moJn{>TALN|RYE8xGZPwzB
z1|IF;iX>r1ZGWk^YwKMf@yPxBm-A;{?RORAg#B0abXaX&s6u)3nMYTTUc2?yfr0g$
z^94uJ$)*;=Y<^8QuWQqjoLk)5*rMlt7xXDTzrT-vGk-~*ywp=9r4Oz$Ip4-tExCM!
zW4r2t);I1r#(6_qIyt>XH)p@9n-@H%n^V{5`obPPX@7Nce(d&lH#^T(`D;A?k+V1*
zJTE-0Yu3ug)-5>k@(Wn{>N_hM$Nu{IihG(DwH{7I$RSY{6M&TfcpR*F2pHH))cGMT
zMiyN<XL;?j_w+`)(_>0X#ixJ1^!s1wFi!J6UuX=Bv7Ai;B_<^PgQXhpDgd+|K%ZzB
zJP0aB0Dn16pcnv&+t4po#Ti!u=idP=UL6vDeDnAVAAREHjnf)d1onS+B1#DX8+P!F
z0#1iV^$?%CL~5>Cbe-Z^`sZDTwm&I`i)RLxU;16GTGym5LRChn3lwdCNQx3a(q46L
z!-U0W_jKI$?AQs;9wA9l`b|Ao8v+$_0yxh*=YN2l>~#(fRVg41W3Qc3Uv=4n>cIIo
zN+eJZD99Q>I2^&Vn~I4`s8+uBNVgW{T1q`mRhe?;E*DtzAELUwwMa;t307Zr&CJHS
zsTD)nwvOGstsRkMzp0xh&IHkUamXFqePu73F{ud0+JSTyh$K0fsB2uZ3`PQlmz=X>
z(|@+3w=ALsfV-DaR~Af?0Pd&ayz_NzX-%`bz)u%m-Sk*XbtO=&0Lwgp>dgRTU~kym
z_x3|CJ^tIhT|1+cP%zH&0-PRq!m|GTl|S^kAN!-OXCu+1?$)(5HBGNLW@>?G`z#~-
z;dyiGYoGi86&gIpBw00WMqPxu>IiM}#DA<s(_UVuYd0*32bpy+u4Pi)9KjMvEh%!#
zl_j+el@+xOF21=P*!jxI?9*HXh6|%J^7!*_ZCtlKnQ;Y%1}%IR6KI+NhxW$cpUG&d
zDq);B9%>AYgXQ-z=8*tTH9^HWoW;FGG!mJ<#GIbhJTn;jyHvNJs%k7F(%ya})qfWU
z?)u$}e{bzx^@_vAxIK~r<Wk@$;@H)D<Lt3#Rq~nV)vG(&HW~+eI_UAfO6*>`2<QH!
zgsL4Aweh8(kxCBT2IR9is|+#PM+7!h4x@CABCdJpUx=J|5B@?%>x#!&m(7~%eR1QO
z5BB!ob@@o?@zDZCaNdMR7S^6M2Y)Hc(&jcVrdM2)0wXaTX)_QW%3#`kF0srfz*SF>
zR2f`jILau+VJ}d!WTM#no{352S<JYw6txOaH?A0y$BCFVZ5o~bV4lM{>rQqf$r}W4
zZex7#w&shcuWpSdbW0$Nxm+^!dI*Y3Ih$C;X@y@$QKgPxBf-JAh`zXrqJL73A|;K!
z4uY{E0p%tTtWl8&3wV7ckj-!=7`Aco6xrLA-oJg}Q`2UTQ1g*<AmEu=a7FXJL{>{C
zzzr2tp^_j#kqBHOVNS6qDnV61q>Ym}UVG~ucp7SPZb1QPwj6toaxA!8z>rDN+0GbK
z7{a?4O?Gkw%Lwx_mb$Fo6MuMl=h|ftZ@6idb0*l#9yyAO<SCO}B2Z9JQ0Q_O%aqEn
z7)M$M5*nyQ2xW#1TjuP+XVzd#KgB0)Zmd}S7aWL5*xg0&#@`qQqc#X-P$+@763AE*
zGNvk~;0e6j4#d*abBS=s9eiE`ozb<sUfa|?VPg56PnHFmuJjeuFn?K9sgo<)0x}sL
z-cp6`Z|}j5o>y?ih3k+tISz&2NB@ai5ex*_U~iUAW-@HSNiyIqQxG#d*^#zhaUi~D
zeP4XTqcLOSp3y0wqv{V)eOt$lt{bn~dvMjt9s5?xdk(EJ!m$GoL<^yE1(E{1we3L^
z`zAA04uJ>+isECN4u7nM-$$sKaIxqhpeHzu^@udwW3!gs4_kg|D^l!<8)C-$drnsW
z8M}ZI1&r(Py6Q5;#dC4Ey9Mn%&!foWLRDxo!ii6y3lWSjz5$>D48uT4VIw_}+<^@{
zS0Rz^qrUMEpe9rf+u}@?fu@>y^p;t5=-s?l?HU@?DG|ZA^?y01I9dQlet|+#=3O!c
z3w`6Uv$YQg+S<_7e;AUh5H-QYDD+IEPE}gA0a*wkP}qb|le@r}0gqq7uC^T*_^g|n
zaRcLnli6UHBRpi~HYXSvL|+gv5(?P51=v~`P0c~fo>PZ^wtfdaJyE#a5-4?pIU(d6
z0xe{+dNvB(jelS~MO)rnhs00@{(><m@r+?fBa6;h2@=`-(Z{~_LIS7g3`3ECRMKJx
z4)j5F8yGj)4Z{|gsJK3#;+%01L4fE?C*r(&A)^-66|<PXu$pl}Le`?_&k*R$$|wD_
zi<)@q*Zjr_<JjTBPl2<W%M6bzsrL3pkV?5gC<nJ0qkmigciNJJk(`w=!Z{cS69fgi
zrNJU#V(ucVAjw?N?BsCb`Ikq44-bfb?WMnN+0=sdYr}z9l(6dRfI&qL+jeeB91w|f
zxp4wY8R0B9%s8h`SJ{p#n_D&)4U;OAigoHh>PV+yNA1z0|5TSx!SE4DL{xYlSfR=n
zJyc#f7Jsq=!!RvFpt3B9Zt4#f<9OeG#KJvHkR@<tSrh^Tm1I$H%Y+eV*#TtI`~K7w
zTX{Q&&PETR(QIeH$b+gFa+Mb?d)n`tce}T+22`|}2tf<g1jHjp+E{Gxs3pjvOt>h6
zQ7}6WT|549B)#GOxVCL8Lna^AF9G?grM!&15Ozfv<F4@C`K!{B`44#96Hry}!=aD&
zA|B}k;aOPb;L%uS%ko5a>)Qq&)JE@e#_Ice0T_l;CL_%wkRqwfyYOmNnSQTrMzUGs
vlNS=k?ss(ic=FVZosw`!zuEtj{~7)bzKK_RJ}hxS00000NkvXXu0mjfw?Lmm

delta 1634
zcmV-o2A%nb6Y>m@BYy@tNkl<Zc-pO3X>3$g7(M5^_f1P%oGF8p$|8_hl_iR$HHunP
zh^TSJx`2QXLp1S+Mq@BBPMR2_#<-!>Y9eUdB1%MvQ4yhyM3j<9R6r0c3aJCw#a6n^
z%)9=0Z{C|X^M-_ko6Njr?%eb3-}!*h)u4e!g)_DqRk8C}<bT-!KxJiZ)IO^suqT%D
z9bDn>G8q{<a^$4}_gDfn#ROm$c+|N1B?5H^AeYgICKU)FsX;0L0_U9qslnW55eO9k
zWrP}}?jx;sv32vl-=E(MBm`(OSuExX5}i0BrZZ)42(3E-0Rb080Z<V7_r3sm_fQ~%
z0*aJCs9|T)Er0v=Kl^~=j&(KwqkJDtV?|m2yP`@OjcpGT1gXdZFmW{&00MEJL2-X$
zU=Jb2z}UtZ+p<R1$K#h*pE&WxM#mDZhEBk>rsLIhi$s;YXKZ_zR1tAOQA|_EErI8t
zl_Y<!0d(53Dy&TU<bq%KHLY)GNN54Z7{>*2FCjLmlz&hIrvirqju3E!fm4ChBq@N{
zWMl<k*xI_y@qOi#xluKEvO~m*0W^eSF&{fXVVVn&ACL?ROe#Z(kOtk>2u$9!Yh|wn
z06UYShN7dD6b-P8FRH<U1#?hWcRt3P9Yg7e2)erZ@%w>JeEHQ+*tlUA><mM|o!CJ(
zUO-8wHGcs>dpYPvZlUiKl+s8%wHyl<&MnCFs;U^Os$!UZ#f4bBcn%(Va4n7<>(2xC
zgIB0w!!HHm7XdfDLNs5#{H9Rw{8dv^jn|r&K`AQ$j;wN7cfl`;ITp}v0g(cq-+k9L
z0if>geym-y1)ZI}m^N)9?p=HploD5nvAFu0sejn|&3@19envT|>F8hK3lKvL!yGD>
zJ{UW8R6u}LuWZ7)bvpnEzWm~6^mGs4o<*}gTTU1scfl2c=`8NO@tmOjW3w(`L8=`-
zoJ38{cyH&t>n=fC+kPBN_JLGb^Y(XGyXO16fD3{<W_PV?06Pa2vDgKrHu$iJE_EuL
zW`8!-gbF=9CozA1ttY^Q32`i0+JGBwyaX4|oP=@X<FGTtKPLt}kOFYmq9PUv8L}xa
zCzBfn2>|DwdrK^Bq(j7t0yL6ag55Z{e*P>x_V{h6uC6Q^gnxJbi#J=gW7CFTL%|6#
zA`!wiy~E_B-Mg3dcos0U9v0E1uI6N3<9|7L=r}%je>>WLJcPeHdoeheLU~0g%E}_1
z02L!k&@ksbbaxG6@7@!k^+0Hm;7|tU<z#Zhpq~Yve~2Ksc)@5gMElMT>}vnZJ9NsF
zDm?Mz4XB+p(Gz6R(ps$lWN%(Ni-%#1K@4Z*24M_j$~7AU<#p=x$!Km~;fZOC!GHbB
z-o~GYdq603{LzI?pZ^jNVD#wn5b)fqK{gG13rO}440N@F2a?cQAsQ|70GeCw!$%+P
z#PMW5#!aZi!bNp~SUB9#69S&i0=Etn2$0QDAkfuP!v@W(zro5UZuS7G&xzuZM~hd+
z_uko^!w2$-iUv$bDHi(v_KJpUg@2De_yKRVY=do^Q<maX%EqfN?!cC>J3?4ePH&Kq
zQVb|VD!|Yu8aYwi{CX=kfAt$~y?rL?>L;VBY9z`lBIxTILg&#w?ELX4K3l&J$<CAE
z;5jaUfeDmiW6B5^l^cX%DRk&y7hZZ{E6BD}v!x=O5uTfk%Ggdj762R=V1G)e`?9Pz
zyr1WEwW8osMDwhBofsfhpUR|D04P9%I(~e0KPl}Z5gU+9F)|@J2g_-IdkhLHqg1&K
z>h{(>SNAtGBvh6Y0+3ZgOR^=?r%~aJ<#fS8F;0)rBF3x&fH7mH83pVyKtj5@o;w&H
zb!oL_MeB{RGlUqSrUU5mJ%1JkXOQuPkW?t+5K(29Mn>yYy0@jRecr1H7+Jk%y6xse
zD-uY^r~f>&F&>{?ZRwHqA|*nSq^3y3xiUhbrikT#n0FPO_pXGNt`JL=OFI2uOWV$C
zA4tGRlRKj2jb;e~P4<kbPd5VAViK1Dq5*+G5w4~J?au{ylsuc~gj+HW%hG+qNV`y)
zzy0CL%?Tu=DP%OuS^fZ7Tl;J@oi5?22T+Gmh5s-KLqh{YJ9b=NbT|zkrW-$2XL3Am
gZ2VX`XBMvi0hP|lR^Vwy9RL6T07*qoM6N<$f{Io5RsaA1

diff --git a/apps/desktop/src-tauri/icons/64x64.png b/apps/desktop/src-tauri/icons/64x64.png
index b6d21d669404aafb83ae95bac168d1b8b0ecc982..f3e642ce20ccf04f7e2f195ca6ecea997109dba0 100644
GIT binary patch
literal 7474
zcmV-29nIp2P)<h;3K|Lk000e1NJLTq002M$002M;1^@s6s%dfF0012MNkl<Zc%1Ef
z33Oc5mF>RwjWw!DQc1Ec$(9FfV;f^UVn~=ib07>Iet!}I{Dx-y1OiEupH6qWR~8Lf
zq0<Qo5b_Bjfy50VA<z)O#0&|>7=yvHCCidE4^^ca-+14>f8AFynBQTr8S;CrT(2jo
z-h1`lJ?EZt_Bs1p1AiHR8Gn{RhyqF}6smv{`hmZ9%~@C8(pKM|s6B(=zu+K$`s{lM
zBd^ILr6i5~>pvG~f9m8_^0PuexZ>VzP<*083Ms<BX2i}}^;h$M^t~HD{q?UORzGj5
z5TYjN|Dz!JSyL$F^%LfHEKe;|`H8C*UKrj_$w67qpLvk|zsbtXzkc`XuL<$(jY5oW
zsEWeo7sWMaec__o)&HynITDELuiW#uJAMBJJJ<Phv2yC-dHAn0$bJ(iD;n>->zZ!}
zad*L<xV)!YzIU%vb+i3t5oE=8uekB%15I9zn3_;dp1*X_OZQy&x(J>Wj%(YDJ?V~a
zxm*0*g%@10sC8DeM)f~mFre=nh@>zzGhLd#^_IWAS%|eor+EK_>z=v6aj)C%`@8e5
z?@SC8g%IMdYrpdK@LPmHg-L())vG&2_EsUpzY5!3Z~H7CIMyS+KXIKcdcQ9E?)-+B
zTR(4lZ7%fx&uA~lqU6nAy7W3B9vydzTYb+zZ-?uivEFsheaZ80>kIr+#R}}gP+5pT
z+;+)T*UIlGih}u#Q&N9_=Bh6YKYCG_kKYhD)jM3)b*Y>C?td3wUUK4%(<7}7QdNJJ
zp(z?^OLo-1+jT-}6PsyXa_;B9D8&6kPH|u0`PU72{t2(S?#b(1|Maz<f8Ivdy*C^9
zPNC#mW4p>C=oL4db;0KkeAcq&j+UV(uPwSGmy`?lTqKUqtXTa~$UqP2OGHLrg4R?f
z`pa8y7&j3KpK~BA$(0v^p;<e1<;qj;`t`DZ^eTrpljxme;9K*83k&dl0@nuI2||B2
z!1!ZI41%?o_P*iDcka3Nf%BH0dXjur#MH29v}fejJG-t^tvd6^kCcD>{P@Q8ic*`$
zC$0cO3AhkAs<mm+F&A~vi%&lOY<WK5ymlQ@_y7sAxc#`*Ki|-Lvtp^OLceQ(V8ggT
zPzHi3q1*-n2e1o(H43ch_xTg41gh?Qll7>TpWJ@qvn!^rUSvBy6hiUjraiy&w>GH1
z*|PV}P;OqE$0w=)LI{F@<H#wqTE6w|FaCl@Kh18x|BJu*^(}w%&}SANd!iIyAb^3X
zi4%@ovvta~_1<76P#@bvX=hG=6#>5pa9bddha;5%SYtqCkl?{S#-Hs-V2Cf&qvKPp
zHUIltTiWUlpBe~`{_IHhrhn_cb4PAqr<7X?FD>B1WQ6pfZl)wmNG?0>j4L)jbM^4N
z6M_!kdzMA4t?V$+bA4B+GSQ(hmDL?TePQku^O8M{KI<K#D3=5e1+O4ndEXK|aKHmw
z@Id}u0o+kSt3$vqq!Nyb(d}vnZLco$esRein<Gjl;<76L!E^UtQ}FU`Z8d62kaIfJ
zK@RF>0?2pGX>3ieo{?U1*=MKUy6U3%qV;!>{!?#%X0d~uE$>^>^n-g&x#pV7_b#xl
zfk07_0GRw@Kq&DD-~q%Fpe{fifcW54f<*+N34pc&kv2kCXA~@Z!1IpVZAO2v<>6;;
zT6f`TiXsFLcsO$@_{!-EJA4H88~wXRAf!vw-0)+u05PfPuI#|X{hPL~JLjJ^99Mjy
z+5Fjyga5o=`1a@}7o2q7HJ4|n*rky^MW<ze=KvH4cnMsZK6eowZ~@|i6R8M!$R|_@
zFixpE1iU;EVBH0Z{_B`qI<e_<r<^+D>c0tsAjErxD43SWMDF|HmtMN)yiZ-sxd4dx
zgn}Tc<>xt;wXeKw`(^8Uho6_}Yn04tIPRF+{@tDKReCy!jv}}i14thMMhJLCfIEP2
z1cU<)DZCF*uciRQA&A<9Ms32)s^B~?cwQ$kt|ZY7fp4AE_O%};^|oXn0<4~X<jPHJ
zuC!*IJTvj7>lfYn)l*NpMsRx2@jyKk1xVBL1B8+JS391)H^h4a%x(JI|4`eTu(_+s
z2sDs!K(zpGg6p)6Qf(#Sfi!;xs2->it~`-00L=vGAc55vKurjk(+M{Y120s$+CQJr
z(gL5MH{*4rj#>8R*qU|gd*9r6(?9VOA4m_c`|X;MC${$HH%Z|S78TSFc3UmdhX06!
zyCAIUg2|UjyqCjay(7v{g|~=!id#T2%TO%k;RFhjnL0)(sOw0-7hJBm;t{HN02rVf
z1QJCD-^fAO0gXq}dZaE2vx(y2`oOzlCc)8X`T8&K%$DRlnDE7e8@E2U^457z-Tc^#
z=UOQFhk^y_dx}jI5F)@i4_7@DcT&MoHLgxew<c#c&7RTLIA=*FF>AT1G%uUTzKo%s
zp;v~B-4B=j?wy|KAD-3lFAp2q>JGs?7PypZK4@tEp5T;$k^s;pyha3|CRw_{Q0?MF
zPgb(!oKanJO2@>^<}nZYx5n=H*3OY<H@!7^Md13!etV`M7FUTfnTLFY79d108Tcq^
zh|P%4$SjySv*oB`XEz^t^0bCI#~9j_MvfFLm!ePsESDqJ;Ik>#({#h|E&s+vAWa3n
zc<pJ^IOb}f3&uR?)Fx0oL8%X}1hv4eQBXYzu0=Jky+Jcy9lQ5yefj6MXi8L#4mU*~
zd_C(*$7_g8i&VX$?*tXb0%>`SOPQGnUxocOgghq~?fp<eefLWQvszAFeAN6i{%S_k
z^3P1EpLe9Gq~JL~xeD}802PNh0r!}!cZd*_`GM+k&RUwzUVe1PT|awi@0Fh?pkRt!
zkUlObApKtP1Xrc`GeN1GBLQ?BAQ3{92%&SQGYkyqO8*3bA6Tqt_m-ASx%lMsmwx4e
zsp&)$A^EIN26l~<yEg5c=-jw>Z1<ZzBYOu&3ZoS#Z~}=Ghin0aNcM$e;j|n6*WX=#
z`}a#@KxqQVPcX-IY>)YZau5{~jf7BDN>xIs%t|2w3It3qI)%#Ywu>(u$iJ{=U*W;W
zx#E=7c<Aa}VS;Nup!$Hq!6kA@#b{CibppBpEIY!&rX5@jSs$qM_*u7q|5Nj?yT*mj
zhswfhOt;lHM2<XmW)qG*Ee@Db2R_ZB==Bc{<oB%a8rb&Yww|poZ`rf6yF1%kI4A{(
zNs}@8;){Cr`4+W&&#DlU2tpMorXZlq=kOVuG%pIGY0%>YnnvLk6drJ{2ZUKmX5aGI
z&}&aceVW@tlK@o#g@NimxX!`D#E1wU5I~CoT0KE3EpX&K3yia>oX6@J-~Y+N8CP9A
zR4x@vMT<5zDYU>`Z+uvALj{j&l$$z1BG#;?6Rp$c)gS%2<?Z;KaS}tMsfb_xdd&kj
z{q!pr3*t-ygm@nd0EGZYPws)QzWT@I&mDVg2UjhHGEX4jpo|Ibdp^9tqtf|g;!8ON
zH8mt!0Ul9kVUTby@DYi&V?oO;KgyGxThugQ#t98bC_L0j1d*ts>VTdUpb3KZDTKB}
z2^^Q!9oF#8o9E8B>f&s*RMIpfo}5CVq=AV+O5uTeszfA0UBS7{IZBq}4CDk?2$-oV
zG}E3yIs54^7^MDMTMQO!vb~Q21b7H{IdARrTRQK%KaslX;v?ovt4xdvJ@5(lJO+<>
za2bOvP^33d#fM*@(3=%ZJsR*gQ!0iGT?o!*&bZ_v#aYLKq|YJ=sxwV+jQ}$9r3$!A
zCPWl4>It+2U^FXw!3x-n#_Jzzik#6{a&1QtGio*y#O4U(yTGeO0hI`73W3K643C7a
z<7$K&I;g4$)vSZ}_zV5<N1yxg4;?X7lrl-#K2RnoCVvk)cVGV68&B@r-7~6drotUJ
zpl-mZ!x;6L57+UzE2CZ@qo9uRhyqPlu;5$*-Y77XAHuGEn>_~_^t3=M2_A{m0-iji
z-y0FYXdp1sK(bDNHUQ&Z1Zrenqo;X}l2BE1I>FRa2rQ5Au_2)92ej(=sJa0v4oB4`
z)UrXVGC)@ZrJBMwb&W-zdHM0qe)lKW%T*T#mkNvU660lmU+FumHooz^K9tL;l<M4e
zIk-@uX>mm24b+UqsLX06>;d%j?ZMOck7BF{7>5I6Wy)P<QbH4m*9p`oA(a3#0+{CH
z?-XD*0<k(Ekpx(Z@jQ=VpwR1W8GJ$Qv_@batH6Ok-&T*Z(C17D8bu&9*j&K&0`7X8
zJFcLrq4M1$<M{ph=bXLe+gCABWe3vn2LXdTj0X<y9qBKAZ<YPp=(?llolH$VNyiE{
zvgJ{f-C_8=6jn)u#6f8Wsxcj}u1R6(RT|okX~y7-DXyD&q!R-5I$$ROQ~)Y#0BJZ$
zaHIs1QP7wPur$Gh2XLdF@`Qopss^xnVBI|>SOeRku^b|*fn+2@Q?X_w)J6ovq*bpb
zVqZSTH*Ec**_r>B*>*56u|K9AS|S8VI8c=Q*IrrJa?Z;~EpI#_mC!uLv(^650=oJ}
zv9Esu*+LASpM<WNNa#9>JwWezVD{MoE%a+#SL#uhq)013DFp;Bp^7Vb7zpA5G)WLQ
z2}~7WF+t0|ER9>yxFm^rr|a1DZ~!Z7bD{*)@hT`3cVN%(I9%6(sl?Heo{r`7k3ie>
zH2dB28}&B_zju_6o!##z{QD|E3eQD=rL%6n;rJDQf6_pnIsI9xrs9ogZ=HuFivUxr
zz_v%x*PqAsP7mEf6-?MZwm)m&hy@fg&j&5O3^YW5dQ~cbz?TVuLnx>KiGwRqfw+W7
z3J4vr1YowLu;8<Vk9TvL-J!sBIkmC@xaT1mQ!#s128XvBIBI?q=FMqATc!@NWCQ;C
zoRjeRn;#+@wrvXu97!F#*C6kDAtW^e%$s`UMW?K|>t_|qwG;wf7A+Kl%X~pmDUBr*
zv@}z+O$9P_9w;v%JK<vcAVqh~M6kj@d7p`MFQv%nz|hVB)e*skClvtD2%y#jZ5@Cx
z3D#}}I)*4VRe-D-VDE!IjPVMlC5Ev0a0g2dS1{et5!32Gv=qwKC@Pi;rz{gO!P}b!
zk7Y{c+5d3%+-*HCby5j6Vexhl3LulhPp?1!zn#2n&05d(DuLjpJTIBwh#@rrE)9$l
zNs@w64TvWwnwu4LOaZ1fxQJ>F9Mi$DDnO?w5RFlcSq6ATg+CD>2n4h!h2BEZ(g9fD
zc>EO~Q^x{SI72GuV^KZF!Z|8hTP0kW;rzNb0+0S5$tnk+T*4veQ5A^k1TmFk?lg`2
z=|1($Z=N<~bfPO;vt<6k6hJ0Z;l}8SIj1jwrjrY;5(wXv$W6H5lJS)*Z)g;{1}Lh4
zN@c<dF0onBKy?#{#VDFG1Z^2$Ml(aQ&O#7#FpdD*hfUD76k-ttxd{tS;G#+Rh-3q>
z5rQdm<CuS>21S*bj)H6f7|wEJa~y@D096S(*9w$|z#}q;P=SaFm<o_E33L+h`K^Z9
zX>A<7;Px}-xc-D>9sVR3lK=csz@SZ$GnPI(5|7Q-J-<vrWqTGNoN&pzg<V-np(>Q>
zlCjYQS1F*X1hNoQAfTxPnjsK135_QR8q>hyBNX(%(TzKPx(SD!(T;d3iNnnl=1tXM
zWla=q1N}t>gEqlwe+@W+z-U&$b^y<nWd=BB0-8Z+wGY_)l7LizDc_|EE)@_}36eUf
zt_0qK8IkCkH|~G*AAWV|d6LilQ)CH!=jzw=v7qgSe@rD8C0$lzM3w8iKWCK~EFdVM
zVNJj|w_O35gt#&_^+A14!1n>4iLi3CtKfw(j)^kCvupGC(k;J1p=kzAJ8mhqzBqx0
z9(fa4D}yI@$MD!T1sl47T{}3|Jr!Ui2NVk6u2ZvMS?<fACP@`d_M?mdwkKdSS&9=>
z96-Wh#UZGARDGk<E}c2+;&WECoqv3dLRa2f0ixz7B$Hfmp&nt5N_170c~WnoZsZSz
z)|xSrexgLWApC%Y6Ob$AGD0O?CRfb&0LK&X1m%{+@QX)&i<~-)`p6uteND%nkurY2
z<!Su!)lp~xMNs0Pu8_`#{!YNHO3E9Qb5JRGFsTH_1Yi(oDFMs%VS7v_L)7*KEnA#U
zSONu`qACa<s4^!LJ?@H03E#&85PlT9_WkmQxsh>GHx)A)Gdxp|c$BCRtVUafO^KSW
zLPf~O%EM!T>rE<w6Zo7^&nHxiDs<h8uVPnr9pdqsP*oMfJ)Z0hATSD8x8db5m<AH%
z0)QxjPmF`-$E4p8us{YpfccV!Ba#A<%s7uV64;&x+xOtG03N6Csm3dmc%#0rzd2S)
z-S^x^^N-yR++JJY_sIjqWYVy&bnmyzZ|vLImOl5kmdwg|snk?NV+jsD!WrWTynqWL
zsHCB#%0j-dRz*?CZUkI_$)*JpNToFF-m@34@A?gd=_6*ehatuHWjLWQ%{aF0TZ?%e
zpN1Jt!!FCrl~C6ae5_xfqn^T(Ns|m>LLPwp#C*_LlLFN=BsT^bp2qAfs=0z*ERN`7
z#T~=r#mzs>I?vthqNndb`QB9lZx12zZ0%$D@!$VPcW&XldUN$<4T;s4rc%@64Gl98
zi#AeKF%kHf<O>7&XsQsIJjtULZ&Y1F$tvR2H`by|cc9K#1Vc}OC<^>AL*dYsG$ybG
zZ|?pBRxJ5!2ti@rg8-xb0b1uvNS17G*p!v94xxa{KCB+4DA)tY<@!*x`dHvhs8y%y
z(INZ!8y())$Klr4+C!-YNG*-z6~1Lh#oF@aqPOv(>HcLe_YJSF)J3P7>GVw0r`r&Z
zXP_yj>`~R&9TDO?rK$og65y2$uVA>k4r(L;)0hTTON3LA%(8T8N@LKBDBUyiEIM+l
zVVW6QskmI4R4FfDR|V9FLIoGKmG=P8BGfC(VCZ0b?*k~62BBysJ8RA&v%ft2^F6z}
z_U@M<T+TzO1;pf+DAcgoNfnGY)g6I-<;}?3dof<#4t+3=WV8*bR0kRw+G)Bj14EC(
zFo4WdVB^c1v1jNBaIMVa`r$CN3{{l~7lcr0A(SXop%EBr6RO?-w(fo!tB(2tB2j~K
zF1Tg8C}w@c(+VoGvFg?oAni`(D^z7rbx!M&Q;|R;PFOJ;YrEna*<C~KAS6vcWM4p_
z#`_RZ#Wd2W59Y!0^KgSK{2-5UYa7O^ThTk1KqAtLbaDn7TQb<)o5!~8YvHK9F!U)f
z^kx`FGgq}}_%s<O<O-=Y234tpVOB6uSc})UCehq{7)sS~Ix_wSqSKB;d&?1UJzs(j
zr4pAy6aq9tXu_Np#-RDBG#0dIczlN=n{SZ$%17E6B18yHkH8f5Fr!J7D)sP#5(2#l
zpBLe=JhJX~<VLq(&yWfxHvyOx=t>5WPyth5Nbn|FID4r8A>$~CK&5ri6bD{p9D8zW
zuy;HHPAoWV0xRkAkV{nMmP$#!N@`UQ=&DMSQ4@`^7StyVw8ki$iVnLh8}1)VYm9{a
zb*eFeV~(GS{=Oo*c4v_rFTwT8h-g(XQGyo~5r{HW5dlF96h#kB-&9+m8+9O38ks}v
z-%LSts7exCNZXcVUKw22P=tYq-U3aJhHbM_-j>x4nlmZ-#MA!{$0}p-+*OEa=`anp
zIYXgnpki_MF)2Vmc3`8rhD2Qii<d^QU~vojdJE{<mBa8*36^EU)GcsPMZj%v!9W!S
zhL%FaY>`eBMipuNA+X6%E_6<59GWUSn+g;j4bLmYfbHZFjmISci{Cwc518*@>XiBD
z>+OO;Bk1(I(3Gr)%pF`pku7K_l|xPbNzDIH3J?%PmX(z1$Y#sfzI_05W;dgKMm=WE
zPGNk^LQhWtJ>4Z(6(593>MX=`Xj(Lk{*piqBeP7N!Wj}CmXRU~iEpYJmk7ZX#gy%D
z%6Si7-}o}BWgDeZ0Z}83k--r(rxze<BoWoLaNhxwowfkTmZK=UAD0CP*?SV<_Lx*E
ziq^Jz?A$egUAu?SI;{cIXEb8j@~N16cs-taVgODRTsIU6-7?y9D#LQfH`5T6!~7xq
zOM172D~-z{t7aOtjaacrGY0!dpsO)t(u-lJQK;15;Z9PS_4%?gq|^-vR6>z=3|M~P
zek=;$@^v-rqPFEhRTLcisre`rs_5(-!FaBOWlLwm&^1INI_#?KfXXHkrD5xb6HZjw
z39Ho+64#|dYh7na4%R}uRG4hY%1^pl2cs?>ZiWcYhjB<i3ESX6ASnERa#@_p`l0L-
zI7}wvAG}4XeozH4?zo=kKuFGt0Nvdq=;|6qdwV06E$avcP&EaCOw@(MVY&Jw#A^~3
zP-H)*%0{BBDc=%0gjp%%{&st~<CAj<lG0*$4cBUxAwN&<CT9DU7|57Gc{OaG))eqT
zgMj*eH|!@7ykMfjcomKnQR9gSPB?KP1_pB2*E@!uo-s6LlIUp9Ad!kp7E5xCrK#3x
z1OmdPz)~3@3QWpht29H$pn^==zsx8lixX~ys|i~pG)PE$aoJC&io8GE72}7yV-#9;
z8Fzw8xK-yP+#(}t3gCIG;_lv3DloeKg>F`wurYIH1CBpoK9((;3E45~>>hrbV>zHo
z43#jsAp3=uh*I+?La87$5F*^>6ZYD|qG$h6yDzK<<i0?8dkvDggk@P7drbD&b)6{z
zwfwQtfeZJMxB#iu1)@8D-*pR(Bc9*!rd8RqXFNK+qk+zz+k|P;>hP)N1T2SzL6V0(
zGagPj40)Ptf)ZZifkO_l)=Q8yjl2<p*8aah=nS07O0#x>AGku3+u^vRqU7~J_KrcN
z+p&gp8y(62eupQ<%LgvpN3uyugmnSIg!|$Poujwiq$wiBJg)BCKIlC4<PJRf#7=D6
zHZDulP$(uOX9Ow<mN1c)t2jxbgk|&o6kF8N?3(G<?hC(Bi<EDhy_7n<CIcV90?7+V
zzz_(S?}2EnXP{Hx(D|MJ8HSL9*!x93@SShnE|Accu53$R_DDRwXj-5M##rDfilNt~
z<47iB$mJN9ejS>)Y^qa9aB5UhHArHmt~r8{p<(2QJGmfiG7P@uFq1wXhJ`R!kk1Lx
zLWYkpwuID`)Knad!E;72IC1|4MgI>EzgOw|5hy^8+6xGDEfYEYi<#8<cSfVLb*{=C
zKZ1dns%aRIRSV>VW!xqzR7HoP>r_=Vq*@{v>K{aIq>G1J#=^BdKneRfxKQv~`#^S@
z!<{hTCIX=fzY5#lH&$_8`~HOU;@v*Ra|bKD9EY^Y_P~~tO6p>n*k`WI)SYvy5uFaG
z)S;9zN)25KE>}@ib!b%ftyQSHNgJk_=-)el+-Nrkk*HOB7U%3Oca!ELcO(!Y<R&1M
z3TleL2XjYJv9{e;@n8E<mF;?+!|~tt=7ZZMD#wS|Yrfw{YcJJFCe;`}>&p$vGrwU*
z+W}Q`6h&c_sJf~e2oFuCnrb55W}vTY0Qs>!p#s7r6LLdV5R#1n4_L@SfJP<EaaMw5
z?|icCzJ6E5+x{HGMD^`i?BDcoX#0i9p)26s6w#b+h@F02W8E3wG^4Ym*)vtu9T_7O
z&7{$26dgy!@cQ%nP|S64A#8B&an3y^6+l4aM8aQCh3)Klt?F&LqvCD(50?+;-uc!K
zC-~dX`N+mQ6`_&FRN6fG^2XE|x5Q%eRo#pOism#-YvA#;OLuJ?fa?u%pH(G=Xv#)|
z;4WOZcVE@r@`JLw`5~M4_8%zWM<w(-XZ?|ncPc_bJW^*I^O<z~gfGWq3s$LG8kSWA
zNCglKa-Y284eWBf&YxA>&5u~Y-fj^R;UAyS@0{(&Hfoih^yU30BFd~8F?H@Kn%2Ao
w!uR}O{8h{E`hy+x^?#B=|7HAT;H~k00q$`13?wxbUjP6A07*qoM6N<$g2$FB#Q*>R

literal 5265
zcmV;C6mIK@P)<h;3K|Lk000e1NJLTq002M$002M;1^@s6s%dfF000zNNkl<Zc-rlo
zdypk}b>Bbd_v`Nap7+eozE`W&KD7dA^;n|dm5c(G5d@qpHVH~4Atf9q!Hz2qu1fH-
zm5M_uKvYHH1eZ}!c1(hnvZ+!qNF}kz5(0@`^xF6PJv;B2J9D4i{X6-i@66npotd2-
z2uUUCsyp{i-`m~4@A;kIIp6d6!8^x0$2-UW&xb7ky1fPl1bP&<>;IYIACo<Mw#$nz
z9#c5r0R06BY_I*lbvF0zecJx-)Bppxsn6}J-m}{x4+HlIrY$*bMT|6VYcOJxho}Wf
z&IvO8*&twSa;|X=B8~rT@;wF+M3QrYL5!$i0T~l9KQ+cbc=BZ7$FSdl3VcqI&p$T-
z?6q(phFyNwD*L!1zawII8u1#p5Cj8a5D`RYKBJ9yG0ATbM9j1>nm;3E`d-rXIT1?Z
zceBnLjCiPvP~>e9ee&eVFFiGT%s;aLk{flcx@)tNeoBo0AgZ9KATc5`8`yk<mRTUB
zF|*CH+N>cnzi+<Jocm8*uc9Kx8XJg_0H@KjQ2+Fa6JI*D6d~M10Q(H=cb&cW-iMg)
ziSasA<4CYZ#F!hw-Z-PP!OnBO>H4`^fC$!DoRfL3pDS!}AkMQ{&$)QSX#6WjPksI;
zQy3Oo*NcL0?YVa&VxARar@(v52XAJbH`rv!EC60Gi-VV@=Zi5S){Ej=WQ^@l6Fj@~
zj^E!1``teFnOhY=q8Zz_2cDI0i1FH0UEBcQ7^Ezqp3-E<=Fa?#ffEcW$q+na<^}It
zk8QoJP4_j^26O)9CKzKq=c3q{pgp$1H@0uz7wiXUJZ*^r*lS?F>ln#>+}PlO#?0H<
zAPu*^_RTC|<m)YXu_ac)n3?6^8H<QzZJY3izqba|V62(;3JZak#xq2$b*>iqUf}_p
zd>r<>y&N#NAb_VGyLS0v<TI+Of-yfI@Qv>kHgx?4pZM$-`1XJLO@8&BRj3oJXE9h}
zmrT}2{${|=N4N6OwpP>$x&-hu-&x~as0RC)UAw;OA7HOrq5$?<5N*Ha-!I~AMNtuJ
zZUwwGW?t|{EUJ!89sh*KzxrYNKAL9Y;d}VXpZ_a9`RKcFF&Jxj_Zpus{B|o(?E4^*
zy_YAywu*oM$vhid6MJA~G4P3Y8H`bl)!1NbR2{k>MCT()^9W!-5=x^F8S$iHU2kdT
zok~K2n$+GHi&Mv{{Np_FU*AXTjylIrIi4P{48}SB&6ocv|LFbOa1J^%!sZnve2zl+
z48hUY(Y^_yIN=qGgP-{y#2J$k=j0)Pfq|np*nxSd<NX51G+S8zyCQZgBuii^;EfSd
zp3kQCR)#BetQZu*;-e@%@<IOLSN<-yKM?WNGf*2BMka;PjNxuu;gP?!lGBIJ@%)i8
z|NRAJy$rFf`vRZ-EuXI)O*0YBFv^>OZ+Ij%#y6^QabWQIZ(h9EBXCS_q5(-@BS^<A
zhIdo77gP-`#_;4HJV4H*a4J~wapGvN@8*~He**hU5l>!l3=M-T3(*K1Jfr+^B~Nj@
zjW7Q8`?!033r0Nt+p}5T`fi@*$Fo?I2w0X3UK%b|5HTIi*p|oxB$~0>H=FrHNVj)p
z_~IYj#rDVE%U^wY3lFX;;Bd6mHu0WM{uWmrjQI28N?)HKqfnnv>XS-%37$C-^ObZr
zMc&OHefT4+EaW(OP5JCMeXKDk2Gtq*d{gjDxmJT<qGb>vE7N@bCTm_qzzG{W(sX<M
z*uJmx;<qnze5guL?PT|(pJr&caOPA@tsitu2q!_yppy_6LC?Xnr(*u&?FB}<?&m*j
z`TJ<(acaz=2&mBE)8PM0^hlcgMw1Bb)&w9%mINLQ>XL!HaAtxJe&!nA`O+Bw`TJEy
z>xTR8`V{d!om@U!#~U!Xeu%~uR|d*pN?=Rim4#HF;q}3oFTX#8EqC&0;Smr+-dFzl
zuXppsf47;|AZ|pOOEb#I6o0s74M?K88#(uleqJQ;&z|)W6Y#s=jww2&$9oUyZFh41
zWJKn823|0j%RmjJ1f~q8Eci9SI|=4TF_|A3iW8Q@zY@}!e;);DArR%4wvMr_>mr+5
zq9pBMWJw-rCe)t)@D>gKMHT^XlR!lk5LAUYRuG{^oz}o-bpgsp2C$<Z<AYa;To;A4
zy@X+enFOy4rlMq8Jw{HKx&GQDU0ptt-{_!go8^&r4e+h!L&m}s|Mm-2(h_sDRKOa8
zb2kUCI^{9UtqZ_Ru`bmGW*(d>f{-$4dh)%jX<f&vwzYI+S7D`-dYIz;rL$bT_AR1d
zoX+$|$oh{_E<3!E#j7e(gN%&{+A?%?Ddq5wsGLi2^m;e1${8wg6|kHsXQtP@(*(4&
z7FFhOgZZ>`IT|2SD@1RYc|owoXXpC&vax#?otX_}O%E<Ilxi?mgIWZYYDl(g4eM*y
zxlsBZk}i`;LA@&YWhDqfLrAB<YlEG4M4Y@nL4R?C>+vXi)_j;voo#sOVajfZ!O9R<
zievN_Cm5a#iJV<@X=+1*QG4qGkOt7{M1{<xxfEz+Cyzb&&nON+aa`%IL{#f_;wVIo
z#m{=!G>jEXtm*tHedBKu1x5T8@UJWBst`DcVo2qcOcy-ZQ|0^%b%Nm@-n;$@azTNL
z5AEJYHl*S1wUEs@@P{eZhA2jZ{N*dhINCQcy%c6qa0Qt%n73{N8u7X6?7*h+cdUAm
z7Y-ibo*i3=>JI0GFbt_hHB>F3F|^(0QSI}njX5^9{{#9`hp`<>>bj7Q!871lNVP$4
zAZ)Bx@M>$>(6X1YY98BF!}ARTSCn)BxwKG78}gYhT5{dowtgFhXcQ<n*8J>Tgihxe
z%yPVdnMqX4N?0V?L281Zoc>eJUK}BnvQ(-O)q0gmwNACJR409+*s|@{0%TQ8CC=le
zZzsLNk<SV#3n>rM1tGmk=vo71a&));9lUH0{-%iB&VatF9-}44=w$L5Da8yG>x|Z8
zp8V!(96WbCi9g(Yi5PQJFJKmNg40?s_r_D!SMyi-!Rvp**{g$;Dly{|F_q9zjVp}T
zFYv~XPILN1iOeqH?6q-1<I~+Mw0A%*pS-fGpuHDzy^elA&&mE%ob|4d-Q#iY#5lvF
zV?<(!O^R9^Ffr*9<MZQVmpF9kAla5wk}r@sW1N*>U6v7SxEOWw=I}tU#t`O@adzM@
z_|StNWpHeOV;6tQ`72i_PPSoXD+B+dgTL{wb8P<5?Nmlftm%vx?iQ+JiTb-<rL!PR
zreV-Ggt>LB`Diz1jzpY(`2-pr$AuMACQnac9q+zl3rDVA=Z7c0OKWdtPS$w_eDee@
z%MB)hVpCi{CxL0OIEC)aHr{jB<CIOFp4FXf+Po1XqfAbYap6kDxl2_}Jy)mmF^|-x
zJiP_*SHz5$6k|X;p)-I`ltJ-W_t<(WDdFwEnn3Dx+EWpm)=seHwun17wX);(2~_fw
z{;ZYr{Snp(jvK*GrQD|2>@s)&O$CWL;2WMGXIAsB)&G*wp){j|A*qzb_wwZO1y=T~
z<DuO#zxMtLwOWaxlrp~CqpcDU_xfa<M^tjqVQ6iE{)w1sN6gAh9gf%e&=Xbe-no(W
z9osm2Fhg-XN4*9o4k>Hegnf^-@tJQOV4#@5*E!&)Vu57ri5uL<=h)BwC2D}N7%@1t
zb7nq?@dGWebH%@)R`-dba+2+FK*}*$g!2>1<qJYfTb9*5aGQ&Hz|<)mEi+;quUv}g
z*wBe9l`)6v+;&OX<fnMoE|2WJ87f+!@4DgC5WLYBbM>u=_7+ELN~n!1n`+(s-ouab
z+3!3<E%Fg#q2czX#+q<c14fp^1E!>>O?i6*#vo4E)cy&4e+9K@9BX`>bJRkJVoTr)
znUr9SFgX@;rU+NA3WZ#nyY9^KgYSHw@s=EI-Gkg!Xr-R(<@g0*xNcA@6zj^^s3WR7
z#6V_+Vtgfx4W&9570&e4*w%X+AK$*4ufKJ8YNT_rMN{dqWd=hurM{<Vr7C!Fp5FG|
z7|-FE07cP;t#K%|5K0wcq5_pjh#b_)4#o2A@4n90zW+lqD<0sbA7AB9o_UEQ*8+}T
zgG(2cpS%=Pt16;kJ;B8wS;1u@MknfwRboafhRM+5)UcA#ccb-qn)feMMOs!clmOOg
zH>eE`5ZW?toc=GY?|DCk!dk2ih+<7xpekaNSfL&^n50uoHsJb5k?*|xr*!siWw;ND
zla9WtFSGs12grC`R3+m2Wo7j?p&kh?Qk(-XWk`1!N+W{BQm$6GG(OJ2_!%ybo<Is-
zQ_Z2dK*O}#UX~k7ZsO(?Ex?Fj%)G%!-`nK+*3*{SMn~HwT3gl<_<00~V~1#r#*PR<
z4ZQfHrx|ybSe^ec4)AT38buDBe2!h){~k_bM*AJ(BM@XgR1~qvI+k>eGktGRjjmCz
z3^Eynm^7qY+or2aa|<*o(i9ReI~G_t+_V{}af#v5IK}ZnLirvYEw|C#v6;4(b!2jR
zJPWPu@aCJZaC+c>($=w^Am}F2h}c0cvyxMN&$D6WBNXyI6vv@B7}2>-sZ0p<QjA1!
z_3|m+y!dtQS-XSx-ks&SE15>A+%$?l^At~~HDEbQK&RHcTQK4>SP(-l(?eVSUd|7_
z%H_c$Tp4<ebkIh7egms|@8HVN1cy%j89^>jA+rrXXdzZb#FF+_QnmfOcI+v(-}blZ
z8#)6gd)eylqg<+CjG?s^a@h>Mt#|V1j=RXM8bB^rF?K5EpTBaf+MFA_RUWWtGGr#)
zOr)$73Oziq;bE>^8DwDiD)qRJYvXTodH5%U@dSR_(2}{6TzVazmnC+Jiw)Mal1p!3
zw044*jvb*?9b(0n-^35@BP%It^$O=Nog*UwJ9@X!nQG<w@IWIYWD~nIU)g->eR}N6
zF@hLW+)c_|5Iaa^eD2?~j{BnZT)McK6UX}K9~dT#M^TwX)sYE0$)r~!)<ac6z}gm4
zW;G%yBpc!TD`{z6$%U(Dc>Sjb$z|HPa`80VR^LlUy1?Ls&tNS;2pd`|^Mh}YBl($(
zpqQlFW3gJFNMiW~hK5QE4~@~gqKywcwuRxL3U9qJ#PCoR>nYaD;Q6`4qclj1wOOnL
zr2H<7O_2>sym|OA^;(Dvg(#C}eeZ4*kE(NwRx<QYrjm^6bacAF7#qvOESCsPOL4LK
ze3B8wIVI&;a=8p6qb2(Li`;$BT1r*N(96RFsZ>Hqb;i9qRYW|D@f*RHBjpzeLrXrL
zC0$4gB2FQ6hH?yJb)RBrnx4Jz1gXrp#AOFVB5o1ziI5@<iJ}lc$WSWPK$UzUORegN
z!bXZ6nSP(*6wLD5Gd?>Vw1Wsy9HUNAlSHM8P^<}+FoIx;?k-k|mgVyRnI=LDgEx(c
zEAmQ=j*ifG*<<IOYbcd!oIN+drOOT@8B`lI)is15G_uLsc!q!|qKU@ENiHYJKZ;9w
z(+s#+3Daq+F1k7R#(igcj&8Xyl7tqERbNyRXQ*DC!P1Mo`q%v&c=|0aoF8Y?##P*L
zM=!A|io-dVfD~y={7jinQB<2>jWoMcVkbnZL@J;KCTnAqY_Vx(7uU|jPFP(A4=~=e
zlox4B(MD}B%3Y>dd5&uT4t_Ws@x~k1*|4#bN<}ahV&@P^Xfi^>1~?oJfd=KKVN@-s
zVnm2FDT&8XM7eg3LAgS{v!}`WFWfq#GYrwY1pyqB#0i)Yq^W&v!Oo0^n%Mx!7pc`=
z#tYX_ncT|pqn04>2vPw~9kFv52Vx8&5$ckONoL*Q(1v2fjXa;lg_A^KKjPK!vzC0W
zXSVB`lLKVle1I7NIK~0F=@QtpXL~~ca>$5>sObFVu^X$jA{H;5g2E6rd5Nfgm^d6K
zj!3|YYcNX%lYmx@aW2HU8ZNF8M|I+QiQ41^YSkl1aEWZUp{2WrOs@Ne>aQ%`H>Ae+
zh{z#;fj!-FQw>NOk0Flb2gXDy$#mTm{8Y@4l<f>QBM1YODt(m4ddZ}=lFhF{O-w59
zK@btgpwz%A>LQ|O2r*UsG-O-S_^Ixuz9KVi%$EorF=Cvnt8@ATfS#T~U1Fo8%C23X
z@`}amTh;_yRAZ&NQECbG`MGK7uv~+%oxrZ6(7u66d6e?x0AbXRNEI)L@v}Zbx@Fcg
zw88dnapp;yCNmPd`pJ@OyX(;5U6C|f-o?GZ0dx59ABVu_jR^$A-3oYVs?2JG_yoBe
zskV?Pb%ep;XP79zf&^#DwpVFcQ6SsVJ_CL_mp@Z^o*%rhaKolJYqDZ6pFe!~-tc34
z=f^6GcZ$N6Ev4tI&A!h?wMdNhme!eZBR59{W9+QTvot4LrwW|&1~v<UpTD12RinUb
z^}@LH{9pg-FMnVkuz$a}TTF=o?AO@iQyRNbV^bbVwA@}nF|*m8sGR{lm3o^6UX}n}
z<^fOS+q@UM`asR-C)h8#fB)x}lM~$UV4s{h`h~NxMjsG0Bi3dUA&7Cy?GT>=Dk4oy
z4rU(kW(nYDx5TLu1zwA%XkQ$cKlJLWkM!@`r;F|#SaQ4k)~&z4*+}*&&!!(#7oi#{
zm>7&qS7vm9PH-{P36@#vzNiorw>p1^`7H9IV#InTE7oKPUFF%ZKJt%WdHo~T_U%)%
zkm@gM!^Ey#Px!U+y2lau9V6aOW73UnI&;?ZLfzwYH&fhj&CMdu+2@m#n2&QcP~H~w
z$%C&w^wiY$nF9wt7XKW#%ry7i?=w4gWOf_O!zlL{v2Do?3L~az`%7a(1Bh*GkdfJq
zj#w}<vo&Uly~*tMyd<7)vI}a}h>r?m7W-3Cd+^|)?>B9kVRo?b^V~GGoQ+ApxJ^@P
zf1%sv_Uzd%JumLi0~}qJwD<A3pKa6J-UBi)&@DYZgL>e=$9^H(=H5BpIo>(`-#Y#m
XN6IPiAlS<E00000NkvXXu0mjfVl-2S

diff --git a/apps/desktop/src-tauri/icons/Square107x107Logo.png b/apps/desktop/src-tauri/icons/Square107x107Logo.png
index a4da06d4699a49825f0da74c2f0332fa300c0501..4e83a2bd7cb172e01bcdb737aab9f5d2ed25a8d4 100644
GIT binary patch
literal 15933
zcmV-DKElC?P)<h;3K|Lk000e1NJLTq003(M003(U1^@s6aKC&E002G&Nkl<Zc%1Eh
z2bf$}dG>qGJ-1BX-Pxkms;zo=mu=ySE6olBn_>vnflz)z2{D8kNZ<!T%MYZ0!J*lJ
zF~t<)Ua(wb*|NHJRkvvSPM=%P`JeCHnU%~Rl3+_l=GXNz-lEx=JNG?bd%yR57dUa8
zI8GcVjuXd;<HT{|IB`5X2Lsbz7w6Z^d)b;de#n3s|Kh}Pv@S3|;_=L`Eo1TD|NU#<
z@vVtXcdBk{(H#1jGmbyj@yC1Tqj<2!$54<*JQO&8dZ5wYD5YQ_ZLUAXy1aEwDLiT6
zinAL3_(wbVp8`+{Qh%G_i)QsC&Of8WK6x3CwWN$e`$GXEt0Kc%otd+E?Mc}#CKBR#
zr!9O<{IBYme2zc)gEiJ#+Fac8{JCGh>ut{;R9|~-Rc(8Jzxvq+zEiwn`Bi^uAR+!x
z_hlIIbN}JeE54y7zMwqs*7DX{zN*^!ybk^E%s57$=uh-uh%Z>Hz3%j@mTy+?ev?w~
zy2Y=4ev4Or>=)H?v}I!u3_PH|{#XCFu@m_WJ=gdz03+)oK$}3Flw7lN@P}_xLGYux
z>)ltE)f=KuUitQ)q4B;3kDvccW8?ofK(#y1JNxPtd(>P0(yzYl!Fv6plV0$ye%JfP
zU=$2LIvjZ8kCc@fR1bdnhT`hPoLTfY2LJCZ?2PP5s~-E@JE}qXLv_#F<9Xh`APBCn
zy8}0=554g9-)cp>2LIVU*mDsmg@`Qb<ck-6@A2HadA0OgrMP09!5<h`a@RqLC9RCV
zqEn!IWDv<7-!~HTt-Uwi8ov5%|7*#k#lb-WERs6T%^U(Lu{yhO#VapZ`_9+><=ksK
zFUp6ZajxX-R1QeU@K@ksEEKhrv+>8H;g4?G`1#v6?f%h@iQSLaWjTy5<*|)t?70Y3
zTC7}r*^(djwXa)JOI$0(>&`TI!B_I1_bMcOg#=?be-7s_OBq~F?UPn}E)-U)7`f$F
z;^l9C>zoaR!65=nDy6f&S!Q?k8`r&V;DT4TWRr6_0xMUOm@f>rj00ql3<{4yc@F}9
zCFEuVQHmVwPvE)_?!EJW-+RNwl#tMC9m_)p-{(%&7a=JY&Ay=b`W<a2FLe`dio~nd
z8N3s~4O0qX2-G7+=^TG#LSac-$y0K35LSjQ-s1ROe|EXNG5GxMmtOnMg_|m)qk<a<
zRfGURFgA4P@%oPP`AIJT&p{|>572rLiZ2J01iXiUu|BY&2`L7X$vs<=xMREj#65le
zAB!#O*suF%)v|O-4Cod8bkcL%=*nI=@4E-)pMGIlz0nU}alR1iY~TlF;HQVAj4A+J
z#))glCV=^^3fImR=&A)=1qZ>iouLp}vE%w1Ca!q<dzb9-rb?7_L<9ynRwR06U32!5
zx4hwXy&s!(b`*xDEqUiMu2cwla5H#c(JyT5N`CgI<saVMxAQ}L>wWz|{i*)+|8F-K
z#{vUs`|O@?ZCi2j%X)FG?_Y7LA<i>_jRA1|xWZIX$*=-2mvKrz5*Cn61FO0e-rOl*
zPSjwkKF-<*u$*}4^WPkO>H9vsXcWadWpz>m79Z<!y$inii5Kr!_9CB4+ainRe9K@s
zeD`eU4d3d2)m>wE-AHjvpB;+}=s%gFxJlhyy6ln{Ua{sSuQ~E}{}Z4Xvy4+ZKlO_x
z%l>>(@M_;Z{~|8Vuz{@+@Z*A%(={c1ABX}Vl0e`C^%_vCLvEjB@(0rqM0*nTaG}JZ
zgFJNm-Lv0&QTJEg`@Z|rNLvIH0md1F;2e(>_w9f4$8JAuY-^jv!m`A~v>Wbjb>4T=
zp-<j5cE^p3shPU%*#hcW151A(2E6gAGe7)^4_x(a0ox#~{_7fr&HVfF*6Y5xa`8JZ
z!qq|Tv=?&gj3mRh0Qmm2lm|)*t_y@7Aj8HZ0793cRspZo6dsy@ytx{|>CT|wE(beM
zv4ZK*+Mj>)qSHR{%6I&nK`;W0PBWBJ*IFB<c5eTV|JeUMA-Wt^0RPQ{smd(}9{6PZ
zfyk9VYu@kK1500W&X81TbIC$;;qvEO@{HCMXGp0a3|h_nzl>A8**9Hxa_<LUYrVv;
zEVx2htFjD_y1;iQrQBBn>K^A&jdA6ItAKF=iXM@#;8lQXiJ@9k`1Kg%t!@N+K@Ovp
z6)^gQ<xiF?@A}wfm%itMw|-q;ipByW9LVy2_S-#QDGgZ=)5+xbHV%C`#H2^oM-<i{
z<2a^Z(FZ3$lvFsUtM{zs>++qft=s*?-(3D5?Z{_?DEd!VXfs9cOuXP_r_TTEr*fCF
zO8QFWq|yxcPAmLqOkt>`-5mU?l##2XBFmzO4=4hQtg8-LFDO)tfL8;4JPO<yMKD*j
zVxY1TqA%+N)v)r35B>QYU%vXae@h;K^Ed|4<B5@ht$ka4zc`W#A2@K}rsmoGv5sR3
z7Og-6WIkr)|Ngp*ZnBpz_mx`9FM7|~CBOLB_l&;j>?{6yP1mVw93#npH$~4`r=E1i
zoUh#6eom_5yjVF!gX57AV8b|2ssgSC3J7aVgQP;HElLHd@l^xI!y4dD0p%%$T1Cm5
z#()hhLU39u_LrAI>~3=mE-GKS?%GeU?|$iPs90u1BQb^=#!9!}9qs<r#=JNb9@zD4
z$Ee>uj_ES7krFRje%7CT<ZqvU!`j!*b3&{S8G3~bZViR^2<KxEr41Qe_Ws*m`q1cI
zKQWj<q(V5x+^%!y-aNAKypwC$zmQ_D!+FI5JQGk12z>%VN#=pv9~6BbG7S(58;=O!
zWVGbkY=Ea3xAQ<EucXK@{@U3L^Cmfxw^pz?8bR1mcX#h7r?33Xb!Y7@{q|wb3`i9r
zYxLv{kw{K^{fGYFi>LkOvj*T%2P^&n<VGz1FK>GL@LN8)xGQR%_Jd;8HxjcPIGs?#
zo22>3kht$wA-{Cr$Oms5eC*5haLOY~G+5eR*Y&NwWoNv!yZcQ+xX0mQ3_zGtQi?d+
zgAY!nj}b7gd<E$#i5ZZX{>mGG>C>?Q?l8{NkY=ZXl>_Vy<FA+vv<)-N{!xI1^=Zjw
zMgE-+^{21?=38c0WZ$79+Aqh&acnG0XWW9le9bwpy=+bE)u+x6FFW<ptO#c-H%cYB
z*y`d3U$zQw`}KV%6=eTN{3mo_6g#Q&v$w8Y{oWVO`-`A<AP4JU9a7~KLKBdzQBX_9
z5i$)3SrY=Kfzcr8pUJAo1Qq=s%miQoEI~~#!0Z5w7Qo3ce#I;XXD6`oCWU!^HOyrV
z@!7k6edxNo-?SJg`*9nFmXUgD(!_uS&lq{9EqAcGe@Z7N&wXx?qa7{DzdZZ&4}9Rm
z-5)Y%*Gq#xZp&Wqsryz92HUp_W*|~@IU+1fzv;SltG@QB-m6rlI2X>gX$E9~z*170
zK-9P#lwXo1fv6=7lG0xZD0;9MFv*)AP{h`yY=AicZ(&??K#ClAA`P682fCgBmV85@
zizz>svXbxk*{6T_!@YlZ_2Hs7212({1P}xg?|Z?kKe~S1+BdxH@2^`xSt4b)$M#Ad
z%NN&$ufznVYX7+5jt_tR8{RLCAZy+FaOvT}VE1;)yduiH5TVUpch;JD|M02#7s-<9
zP}c4}kYp{Y2B<QCGGNpgM-`A&=<JVNAX%19E<9*gs2>3&SsDEJXAPhSaQ$Fll$1<^
z%W|BkJYE2{oy4&Dr5yXJu=*y0%3IHP$5ji{m%UgiN;nR$Y06#+s8#m7x$pbXIUiYf
zQ97ShNt=K=*7}TN`sz&%FmC!ueEGJ=-&uZSw)4bL>F0D6W7i=ekV~%V{PgYf&uXhB
z<|}JUKhvqVEGwyq?<+MP6$VvhK)sQs6HpYh0tH1bF$POgVnL5)?9vwJ14hWWez*Xy
z0IC4Vs!9^uF<A%FmjgT28|WXEmJ6qL&B_nmY_j%L6EMmW&sliJNguiT>W|#=!?*0s
zue-#becGzzKfLD3F9|rDfMm~g1|ud)fqj*|`(E?8%^$z#!0vC;&x%qz0E@EMerC~%
z3)8735?gn3UavGPs&PS4WKfi4i~vTJ@rG4NicKm|k~iWP{DyVutdQ}UI2Hm9XK;ML
z@fDm<NjrozT>wQuR3Qsh!193=S1An7=Y0FH414ltTdVR{UQ6c~yF-rk^Ot`5<L_Sn
z@!ktn7=~jal>6Ox{NwDm{PyE-FD^{=&QdcT<xh&pjd?$^s!JE&R_(g*bid$)yjbH>
zS(F<9QKYjz7`~ycsa}nwSOu<@D$>Gm!kWMmig6w>@IYxRGD1o&0Nw~S$rONbpf<>0
zS{$N9NwX6$dnDK_1)~E9GmLk3GQ6z~_~~~PN?#4bl#_6_41fR8ANIZaOh$xYqs}_F
z{nWE=`1p$Z=U#4v#x~!%{T6@V&OPcoH*9?9)1$RRrDK(BJnQ|e83I&m`xH!;%PgAH
zh2fHtqf?4=rZ~aKeFn#a<erq(N{#!G;#M}r6<L7Ec)cEjL0q5;l~kbuk2p6dT_?BK
z0E++>lEJT$+YB+js|qF=w-Pq&tbo}eq}2l?<||Bg10QjKr4@<Ay&*470JB@OvjNVP
zl4Pg)-0z>*^w9tQZrl65x@7L>zVJEkr|-Y-o~t8FQ-o}MwquiM9AmIzGFE#9?MCDg
z^b*O$fVvtO-#_-qp_4l2cR5vZT1rN~l3tndLLqQURTpmP!V5z`-DB~LX@OHPr<ajr
zMFdR4s<b)AE|JrvCH`0dLQw|DF|?_M;?Oh%HM|rc4BIz$8=-02!b+Lk&I!(h!OuIX
ziVK&ye%Ixazv~;@b^|hMW`*%$Q+ROi@XsIk$(djLhX-$aJpn~*eI%cn;veT=5il`8
zT4<>=Jt~lolqYbO=B;*DwyV9Tb@u$(ZF84}!4vM2PeyRWX^=AOj7-&0u1}&G?i~%-
zzJ~-iW_9JSIWyq4&soF`#bPihk%+*V&i)wHTlAId1Vbsw6yx+9ivyuWr)R-VwZjrN
z9D_+qjU;VTz%*?jvLK2kIx~^)4d!q#XiGmnbw6(2_?^Gjr>*0wnpteS#`f-e`PXmk
zo(hKx^m&P`Kh}phI^Z;01~CD8cx?%uF}l+8+84}U+||2k#oT4<7j`c?r@dwF8r$d)
zVU&XxBvAJ}j7|=@8@4=P-MRbbzYf@*TO=x_P)?R3<x&MDa>>~{TRLCWD~&L;6hkdg
zFep}qnz7(4j9CmGDXBq}+RthWGz?-elr$Ux!{kUhB5bk8olV=WeU;?39j&RQ=jKx@
zFYIYq^E@UyyAF;8*s|}5CvJW6>#r{cTb^u+KACFvumE4WYTVy55<~dx&`sj$0;K*E
za16BAoyp$W3%gdIwtV)Qi<iw=`TY5_7cNOBI}k=`RO&XSD-2r?hGDTPD|IhG7)dCW
zv}|)FU%PCTtjXX-zuEn+e^&60SgJB~<=__6VvC3t)ICDUq^6YoIO8)2u=sbJsW^Ry
zp(F?6F<5|MaWJ8f&M4WH33)B*zoX{wpO|tV+`MNJ{|5(6Lm-=wM17!GZN7Vxh5vu9
zga)zEcRS)a$5G5Wd{PFw(%sn=OP0(z<I)uiPJh9o?&W89w$8JJ(E>jJN@ZZzNaU9)
zkze-+6qj>~3Wj$5jxag6hznyc@^GM}{N)R-y=1I(=zEWkeEgM6D_<K6f>ovr6J!}u
za0a0ik4al4DQ;2y#K<K|rDK)WkHueMk_${JE*vIJiy@O{e12;Llbbe+h+(I;zRvlh
z5R+8dA#bf+aQ@<}-ZQ_Wd!<s<%4BVD=R|dI%h2?|wnNiHLsQ;FF;Zp!_mQ}yo}z!!
zz%{=<dtfzM>_`~%voE^xyt7~S?xhP(Ij5s#K1?HlK!c-X-*8x~*L)cU5!dyu!8l{g
zu}lUk85Q{x9)~c=6v9Yp4PT@Pn8+#xmCD-1Z+pdX@!|g%t^fL$oCzp|@MLwuumNEL
zg2h}Q52?nYbUlt?I`N2iCFrxIhcKY&Avl0Y0K#UxB@LXkq6XvVQKSN?Pv$UbYa6F_
zz4gO?cG|l?I=5pE91}=73RwqNrc)k-Q${@+$5?5gGB`E(<o?mU_wPKgd&8dLeOpJS
zM@FZk$r=#I-_<3~#PUWQKc-;Cx;V~Gp8erpzW;;QU8(|x@qx%68;|@ti5)`fjq6lN
z2s$xg@F*gdoPu)9X6RGY$&_aIKuNlOL`o{9IHmJJ7+98>uAH{$<G;9b+qS%?2BzrG
z6x?Ye2}FVt={VCfh^2@ajEHd~ih*j@RyxV%l+KVf0xU&9fm6$VUWdfOWt74T{j{cK
zF{G^vdq4e~^HyDZz6ZawbEGV6!Fj^wNZ3Z0Hib-Dt;nVFBA;5}EMCmkXU+)M3#SSf
z(<r!O7#uy&w`*Vj1H1b7Jh<cF?nn0y@83TXjFpuNb*}hKj{gx@dete3jInyf{PtH~
z>IUxA=pL1>PU}rIjxe}pmZ*I})rf3-PXsM3u!uUs%@dWh)S+Ab+<@eqaX;i-|E-Fk
zxZt(0&fD`Rg)6)N_UDfezvo<9siCY_K&-i=Bm^TX(s7CEs`$YuJ0$4iEhP<sEJ>ZL
zB%sKu$hs^8s}@z!+7VDfu3;sh474WB@BRFPr!Twa<k4!i#KDucuwjrjka?O)RH3Bn
zDHQz(=Cle;&O%E-CaknfCDX`c7g#Gg&RVi=iCkj8%zZ;3ODI%^v45a{&z4=g@3`Z)
z5C8Pe-S^xcp!&2Fynj&45+ac(Oc&(FhZ5H6C7rxB9Z-bO^$ro4L?7uyOala+JZPY_
z7$xomDso{;==Qm=$wetC8Ru>VQih64dIe<)FR0fR&%0**Xz{mi8Loc+Yf7mAj)Ed9
zAr_s-bdnJ$n21{;S^=+^HZIPUq+b{&q>%tOvw)QXlmo2lt?J@}={%8SZaL@7xu1P#
zMel3Yj+M(LVThzK1OjkaCI?FbF4fdk%2~K}t+t`KZ34amcO!*LO<~Ga7@lCh;E*OW
z!-SJZORm#e-hJAlv)5tKd)_zomXH1Qw;%n)?H^bV=7urdrj9OHP4g}J+n%iWkJolR
zDXgB^DVa&9c)1Yjm8@iZku+fB`lOUm6!I_(Nh#jw2*sC_cp{2j%HiBh0Eq-hna6_y
zwLBt8J~Be+aADV0_kQrJ<6G~&F+^cM&j2C?SY##S4jYLCxkKZKT8^=pQRVa;3n2Gt
zrT}g;bhSq4ZHqAIS%~1)7%XGm+%G-0Y{4}vr`<}0LnQSpa)VnAgOiU}L3N7AV-~w#
zgWNIafsB(IlMK&fuo<{#K?;NX1FV`06#Wnf$3j1`i^;BDQL)r{XSCbPmyLUmZ)^1M
zjy932*D4}a4fYhSe@V44Zar{Mzi+ij7$)OdX%^RulHyMkNg0L_=$lZ62xX)nq{oQA
zmxw|sJz~x|kmvx?a{#-Q0hSTF9br>$##>ug$t9hCcaxI2v!a9#Gr@&TU>Qo9h9ak`
zfzn?!!ym^qid6)tNP!!PI3qM2peL_L8!ZCQkb<|(U)}Zh-(9lcH7hGotrjZN37LtI
z3(ivviEe6ADp{&3St%>jJ;3z=*8|F~Ld|8IephvYY8|L}kR;;K-@8mdsvd(IFwWY9
zxc&zN$@_Nhg)1j?!}S=t!Pt#Wd%wMBxP0TkC|vW_4I6jW&RVm=8b27s7DWjKJwno*
zM+hSViZZ=8VrjEy6sxF`Q9N=LSb-rmmmxo&T$DnvmvO%W8F@rFSR&#|u2}NMOSbKI
zE(y$XXr<eP<%BwE5S%i@c*W^eN8cMtD#{p4vLrxcn6^aA0n#l%E@CK$NnWpq;k>rD
z-n(?+YqGV_^Cc4&rvOJtCje&-G+4C}pfp9&Hd>HWY18{Mn1X3C*$gRZQ8JJWAz4^N
z87tGt4=t9!SG;SkiQjDKbGPmoP9G@!>@($HVDjmZy-$n57^r;booRdFWqWs?IX9O|
zg}oi~#KdTTNHPSGLLdo@h}a(umJFjt6O}_5oLEsXL&i#^5-@pCVc}vXd)9%gBv2h-
zJai4X6^X(`3H4&x2Wx>!1l&jg+Olj-=*F&&;!Yz|)-150z-*>7Kr;i_<T`C2l~Evp
zO);_&z~OD37p9qGxRFO?8zmA9Ji*}f0@)P`!K9K?qk!)=+AdnTt6erC#UQBcAb<oV
zDRJ&31$amqs->jiE8fv%;?dm)!wnnuCd=+4JNrvN_#mC<)5#0}K(OMbx<ozfpZdz#
z%iFs~9(y$O?e!_-5_uG+2{5Xg$g1K8)f<wMH_9{UC79BdMv`1k{|N)K4ovL_UwMfn
zS_qpa83y+hF+DVddU*n&40yzR7>=Q>gurqr4%w88P=Y}C#A{VsmkEg^ILk1Iw1Syr
z5EhWg0bW_55DJ7r8U?=`I#Ep|GYMFZ0cA;0>!ke@z!Jc~CWTswJOwyqO$Nm%DmfbJ
z-N>L)lHxD1S}_Mo;o33?FvVN*CJq!Q<=yx9OE(&nJEs5T90j7!p59)rr^R5<TK3f7
z=-%nCJioW)y>~tI=*G%9>&|nyVI%Ne9hYLzWDFL42#WWbG)+PX3x-A8Z9>$&GA0M>
z=pPc8a<f=?DF^EY>RSy&R!SPS;zlIlM@+jiO2d<uk|g+42?c8N6IfIbYc_#1ZaA@3
zkvPUmGEfrZ*npW;GPD&nop}(YFk0Nq3+@1fl|#0D4%&OWvHTQ)*7?BL1_OS@(0xQ&
zo{`d@i4*rIjF@$y_!uWm`WwPa8@8_$vKbT8UJ1XtXR{v!Q|X<PUs~g-k;&L$%V(3w
zjkm~@!^iGERQc|^yYPxHY}j;n<?PijbPV4@plI<>Vr;<>1~|7Uxk9Ks)cpxm%2Oy;
zrcm=-1f;XzN!XcAc=wqwyHi+x9#9xg$zjigr%F<}J`6A5w#|`BDcNE(6dWM5iJ6F{
zZ@P_77mdPBGA@F7Qb{`rp0pT}<StVTVM39d15z4bRvOAN;8`5gCP#WUhuaQpyjx-9
zw^J~@GVDkoDbjF65{BjIx1wBCHVR4|xwPzx?Ao9O!&3>4I(Ko~{Tto7TS)Jl{?g^;
zaNE{r0@O1As|gsxxckd53f}rWH#+s@cRcnzcj>G%MHmGLWg0#u8M2H(O`=>s2-ly4
z7uI!b6GjHaAsW0jwzP=DuLRg}n?!ORL+=HO7Y+#tnL|kN4HC96WF|$s^8v>JB4RY^
zvFoFlMY(|@&txm`B;!1xU^z@CO`Ww<jm5(xLyf+d0?f*SrxLKTooHLpfh89K<w2nT
zVITG4D1zbuq(1>JeK>}Nq@71L*^O+f9mHgqBBAT^xUh@m3rWX-NJY5g;fLKybviv<
zyy4vw-h;P2Q=pz9Sj|IWw0_gotwH$kDJw2J?Ir8OFliZlqB@S<0|)r#y*uTBg9lJ3
z`;f{((r!V@X@^ZYHBUe(q3I_nnT$NetK-1-+kmy#Fw8ku@%?vjX;>y?l$D93i4?gs
z4kQymkOYD{70D!oX*8PX6OjVfR?<i?p0t^cKNgW$2|(Hmb-f3{gh;l-%w~|B+lGY~
z=}Z#+cSE{mmpEN+a2w395XlP4{s@Zhb_`GZV2UASw<DA2LCTtiw9|v6)rORvLfx-n
z+onhTk~f{6D*xh(BlTZ=@n`_`jKONApC)E?UVQFrJI^}pvT!f}EXmN;4xGR66#0_N
zT|`j<!=uC4wsRl0?i<10!8)c%p@Jlmwm>pr(rgK?i)CM-(8q9alS0p#43mT4_5MgI
zKLI<zc`Bih0V84+)g&OOnO@f#LgK!N9F!U?`Zr6-gvGeU0Goo3sWi7px*DQEL^?0c
zt^|6{X1rq|@Z^tx>IgWCBvDa%+ZJGgK;tY$J!}La#n}obONS6e8{rr>=5@`&8LOAz
z+|%blq@|P_Mx3ABdiMjP>c)2;&CPaC8>}WvZDLm273;rsaLIz_TmAc7-)M*|28Ut-
zm8>D(HVd7tvvApkr{ZNV^brJ;7#cZ*O*^OY<jw#G21}TnvSB%G$S@Pa1BNz6$SzWP
z#qaYO=YgSjGo~F<CovFcl;%evWo5ApjqsrGLCRYygbfR@h0<ZoY{WArAblb&nZcd5
z6mMU}<h(Pa-1j)+)4Qp8Nl6j)S}0ZJ2m%H#2vMuosH=vQ#jv0~i<6fw##twK;gq$V
z=$+kyTqX^84wPuctFN-d=RL1u?q6MZU%sveCaLT@8i0vs0+fM#=CafOeS7cx3;5Vr
z-8GmYXhSavf%K_GN>U$ds3`f!kiyOc)jAxVZQYog@5XCi3?!~7W2!WX?R$!NtZx`Q
z2C5jF&grY&_o%??D}b)EfzfJ&tPP|E(}ic!fd<PbuqXwicuxjnGESC7sk%wAja(o*
z%)Y~nMNh;HWqN^y=YUtIAjcjDL}bACX}5_Fce(}@7LZL%Vo8g{+Eco4=9;BgyDX1+
zT{$E~7WE*BLdC(*P8)m3w?aTTiaT7%*Ij(YeDzUt?^`~8?R;Mi6^@2({%LiJ=}j3j
z_IWG5^w5$8FYX#0t-DMyp|@{po-D53W1(|Q^~!+rh_>jI6zbCf4vkQ)#L$*bp}Qr6
z(^f>dbiIoRMeH3N!{$Q*o5xHH-H}A*)D)amCX5_Fsxku+EK@-yNOu8AX*7!(w3pG?
zh+tCDOklC6P*J)yLkUI-m~);1BMa>KCHT~Uk8rq(bU2Q+izaZ&Y6GX9wiqi`oPv3z
zvF;Bsafo58WZ|J<fkN4UA96BKFfOUD#;KSjNq*91d}?2<cFp;hq^I8X+26kROMi6=
zarMtsqV@;s2Ajp4;AbuP{N1Omedl?lQnd!ftmZhYW~-a3dfOsui5T&?0HLBqf92rR
z5VXimrGP{Ra8f|d;h2@?=xK@2nfD>=3P!6n3`P+)kC;gIrZDG}6w-McCF1CY0e3tk
z3A7}zbVv3G0#{@eQk@L>G!@VW?wbO}_5fY9-#85Mc){m#w<}Xa6|9{jv1S>^s$~hx
zo0A4oB%<MfN7fi&U<dG%e`Rr&9?Do<73$hf5;tja24dlD14x;Sr;<RcA^nriGm?M%
z?SH-V3pc&{l2{G-^oN_Ur=z`C+w<Y;&sy`*H&kl%3ZovZ-rYfJBNp%4AW8|Gx{$Dm
ziq_Vpi%3bWjd<=6ffs{l*-F|r<H;<LOvgN4#$@Qo80g7M%<AyrWb3E|WekqjP_<Ji
zq-_*ZS@47dUIpq!YRku32r?rx#bLK|q-F!{M$CTya%&BfTYStn6lR+tx^pI0%(gIZ
zwh5$Yn~4#FL&U5bq2ek{(iRJhS~=K!m%@&R6_QkR$6aVi{G>?_-8LZ(A4ur#GSh98
zya{*l*<t#1pZUlaZ`trq@1`q5rP(nBD-Mzpy)CbK*Tw7p{fkvMs;DruXdh}EJYy{$
z#VMVZ8H|(0ooFR$ADD56SL)b7g)4p4z2Ue)NB~m(EE+Wwc^=~OQb~ra#gI<{UF{0(
zvjdnJ7t@6zh6^5c9}-}_-N<z(QJs!CLrM@`<)d7y!JVohGv>oCNVIqgOR_2CmS&MZ
zmzrtR`v9aXQ6peHg{sfAREG2;)vAK;0W=AKkq<2^JpOY9(s6L6qy~wY{U%^Mmc7{~
zivbhh1Y%DPZf;pMeZ`0W>P?UByXpGh9p!LT!D<G_R_n~OUbyb&4a~?_{LpnYC^L*<
z6D;x+4R&3}2&Tm&hQT!u)Y{N(41>k(3<9mus@H_929s&61(B}_6P$R!bPh--f%X(b
zs{<@pBT=swaL+fU@U{E4;q*5z#Ccb)z@cp=M2D*IM@v}PnnG_TiB|5ww3C?f4D6i%
zwhb^WITv`|Il#mewKIU}ibAytcplRLg@Kl6>%KF6C5AndVc30}!t{tj!lo{FY*7@S
zHCU_xn89=wnlv~kZ%RVO-Y(`&*n{aSK7RGd<JHGDHy8g=2CJz_Z_i%5=H~IPuCqh8
zUJ=Y7yEwxA#w;zh*5iH%<<Z(5GSbCp&W^MhhDk-LqSe^2G6FMxI=M<}dC+s{XSxVB
zJxs<;lh_C%aTVq+HR1R*{OpTQ;*RlqkndiNm9x`8i;pKC4)MB+Pr|FOnT666!=3}c
zo^gf25-?UF6%|7e(%w3WKYuf)o)igv8f_htiZIF(5QdVzCw)j0EF{yM7yBgoHz?T2
zc(GBeqV^kgrU@)d#I8`gL(Vv5qqap71c?>BM)<4U_uw7hd{w8!Wc3e?U;k}3*evQ6
z<X`cTIo;=4<yyh#+VwTnP7SQIF*THsF<TaAU2$mAx@k(WWdN=sYDXyYLQQ>(B&&*L
z*4mY7i`4O$UL;bwaZlth{ZXx0$IovZ!o4HEM%C)U<rlsfuX{C69|rz*@BR4b4L?Dq
z>y0`|*t$<52pQbE(!)$h8&4w8$s(|8bA;}NLhsR1ih89@^)P*A#v@5Wo;V)ULC;Hc
zF>r?(sl>L&;}{4?N-{`hue;<VJ0PtB)qi@n2H+T+Z{H_zQST+mix<ECGr#Hor?=}3
zc<QKiiko6i%Us-Z<+Y5_PF`*`x9T(~>3HAnj6x;ekfkWYXtXSp5vyY<ZKYQuag6JO
zdw#sigOKr1(#0V_;zF19T+xN4;aP5|WX)HyS^;wH9C!Zm03O_a7l!?V=xR9y{kwhK
zzbnF*e_Y0a!9%F=t+?^l&AOFBVw#|!;8z%eIzymcT<qHWHWPqSzX#R91W*i4L#!!@
z28&%GV~o@Dj3h&%mAb{DmVySM)IB^uBqkr6J_~h|>j6;rfr_tWg}!<;Wk6boCL;fw
zMX!1rLu)#YTkPnz^%*SFt;wvDR5F=JaHhL#%}t=ONHPXXugKWmno8A%G$mq;(_+(l
z!G=u|<4!H|ARzsq22rb=VgTc=GtJPTMqj<AcuS|i&h10kxUmm|(fvr+JupN@^M!-E
z4fJoBfZo4qdDygT1NQY-kWF#@9&yViUil$u4GmyykfB_NEjm_L&BUk1&#|S^Ifs$b
zJ=9P#q&n#QB&h>6yW#mE{D6K|@Dz=cV4T3J_zIP};uROX5^zMejR`aI`^G|W-I2r5
z1S?J*6l(Q>k$WE++JDHBMzNA>6*7|{#@UKn198G0zntQl=xhR~#Y)Zg#StTZ8X-=9
zB{xM1UIL6PENm#0=xeALt$dzHn<)Eb+;evyMuP`YS3Xkqe9*$70(f#lBGhRcl?o0D
z(N^4f?>-pRH6~Y1@ksv{XU-I3>NSRu{WSh3wqPy9BEaZ80@9Mi0BXP*-ij7hrpo~7
zumb8TkaaaX<B^0LM5y{9YJsGo0#J^LFd;By*2B%?LzSCu-<`gH#}A*77#okTnLOGI
zhExN!Z@kFblYO#nY<*9<H78rz+G^=+P9%{QG?&6B-Fg_s`Ui65&Fzl*r{?<6(q=ss
zq&cB4wzOFCOskeI3JGC!2UZuJdg3<{EfV+KyA4yt-5B?uKq|2mrj-My3YbwmQHUa)
zAwU>8c;-&*-2W(+5A`CO$zpVzwwf@#0A_Z#fMIB#ME5d10YJ;-Lam!)@vb6@y*g$e
zz7hnWo#k5A=2at|#gaTUk_If2G+9DFm<Z%_FfEG{g>ZbT=#&d(r&6A9CTkBrHtc=t
zBJvl1C@1kh04qLIUye=fDt%&6yL;Z7+p8CUq&Tsv(@C}>k#^i%OKX@-=Pj@Vr<g!)
zK~lic`n`sDzj0m-n~QC2Mmna`i5X3}c7KX$E~eRnj#(zQ?AV2Y{Rc1>-U}vdm?95L
zq+y6gW0SV5YLPpK;0Z8pV#0eEPds@V)}MV6J%?KDx^1mpwVoZNNN2?B71D$-{Th1C
zh7PUqg3_mT1Xz0Wo?ys!ni%Q}kZ=SX%hD8^8`e?wCV6pUQWmBQR;^Nn=TF0phWv`R
z>zl=J)4!L(Z4Z+=_sDB|6v1j9)ZDIlWB#wdGVb5~Z&`EgnQfKz@5>g}UO6?|11p(A
zrX?3<vw37PEnv*y0Zl6lNQ<Gd(ZJ~;&(vSlWmQc2>O3V*-DP7psQv}TnN-rmRAma=
zp6o+eK8~6iMcP^f(@4Xz2rQxbzR->H$~fsUbaT@+hOmEl6M9GIBav#;oMgN&J(hG6
z9HbnaIus#4#~=XdoV2)yo<eG2?Wh`AVO)X4%HEc46NmOj@MIa&#VM4^Qz#ZDQLasf
zDsn|6hYr=${%@E4?LVr7{aYeMD#F9p@)&C{nx!wrFfS+uk3K*Ti*@C*)~Xle>g)d|
zQCP6j5LuZ^ckxt93tDn{WU{Sb($QI1L|Q^hZD}j2E}EsTwPFm9cr<>YN#S&eNABN(
zn!6tp!Q-&39E6dDDO$iqswq-w>^ju470H;%h2el3CZ_yH(YNPhoP2Ul1F5S4{fNP(
z^BEnK$j@ySB8M*`sS{{R7B}N<L-Ei71?d}@ni|EnzK21I4%eGTsLJr=gzU{_L>Nr$
zdvNTAm67shwywrUvk7^OHzqUzYmN<R21j3wPEL5E-<k5BxNT+Yd&b;w)U8eK<W6B0
z#>{pkQ*Fq!w4$XYk93CG_z67{!FMAlvN+-iXQqq9KryPnq(Y|6#P%JVF*!bniQvK5
z#ThvWk&{BCxnVf*t`w?Qh&myyJSl#eDH$BHF78GH7#!J*xl{9yOm^^MDU6@q$o2??
z>Cs5*9BDT`rSEzH5vxL1hcd+gdK{ihBlAjHYLDXd7!DQgg0QL@1KTi>vRiS%!lm2|
zSmFLr&yQ)PBUyt#N?ZTPeW$vFqD;W;NUwsc1V*b{QH=J0MLS`8EhrQ_F*4MKWHOIz
zYaY3lJW{DvIA($h=y(DrrDKf(lh}mLIVQ%ZhOlpUKT7fm)Z{1<b~{Y7MVdwn7iL<<
zN=}j?#`Rfq5piaMF&hR;ATTPJ@;0KcZz)bbrB!o~fmHEMe_gyYSuY7r8^q02OaM@w
zN1lMDsrh9EpNi&KB(9yJnNf&XfroqwDQ6Z;ZXsi5ky0tSd{GXgfhn<pQLFi=?y5T~
z8jOauamK0dmqyB*i_q+XFQ-utCQ%8tKm-PCFRy{K&30H$D{`$ZXlctMmuo{Zlh$+w
zH4W!30m|hf9{bf}aOGZ12T#H@v(hk9FpV4xBco#$Wr8!sc!O;rc|b%!kp=SvEYS*A
z4q|ZZQM3(qVBVZ%C>I+}-7<AwyHJ|O<hX}CYsKVnpn)Rm*T8d9@yCrz?PzuCK}uj7
zNvjJ9vjrBnkTBEeHWE1Xj8@#foo3k_{ZVO0aRaziw5g6+dG172cr;y@oRXD5q&g7E
zDr!*y<!~65G&OL=Vmn5LI*>}XBbmt|)6#;j9tYdEyLjxuCsA<+G3IT6VI~P2E{qmQ
zu}X-HG(`rS`u5~%8Z=MrpbZ#Yz%UYsWC8{P2s4F>{{;GW=ivnbW_8Vh=lLjCrco>n
zVRGsKI+m`7s<*=T6b!*65y_2Nkx%g>dM}`6)-Bj(8*GtA!f?=@NaNHF3+;}CS0!TV
z=pRQBET)JIBcW#^k%z5X-~|<UVF^K4fh6YJ$RJW4LRCjKDniLo7(PcS$iXh=Ar9ry
zx7~!NebOij!4sOsrbQr(jI>Mwss*OV()J^r^^r9-_k$gtuR;5&Y^|Q+%GcKDi3v;u
z_rmL+!h!u6NEW~iClJXJO8$QM;WACg26RPuqwCy=rOi#=y30&Fpk~_z9FalB$zfJ9
zgN3a&a)}6DnWlz@Gy9Q`OR)5;KtUU<O|VFS(WnA$f|+SJmWLp!zz<6ZqZ$mA(7;LM
zBaAAj%Mxm83OwAUYiP-9@WVO`GX;y<n9PDH+F+V_u0bOgXxNQ$Lh%e<3J+2-38kB9
zR64*QMG_CRD#<eQ2w53Z;eFtKf@X};Zc0rIM}`lBwAj@9Z`P@t5_VEdF;3Y$EkvOV
zdRy39h$E0scVKQy9xWDw$s}CK5%~`4b=|@|e!*(?vkb$4j5rppXv6GzDeT!bh2eoR
zWIchD)1ohs7nBi%RYb~#;7RI~Y2fGrMzRK`QnAoBCOfoCGesLWSqm&9%S|f=i(;e(
ziim#VJZN*i_Jy$uSb#tYW6cQd+o#Ru25A+ExurzJ0Zr_rcBMldPu&Tn!dg+Gt6!_`
zx=5!TzGu%aY~Fky)}8(WtXeS#wUR_zDi4!(>*-qCfEPuml}%JDL|7f?LrW-4rR<7x
z!Fw0Bp=UuFbLO?6FjYf;-y{y~E2C0OAYo;Za6E)z9YIvn))vYd6nqGthSKtD`n=?N
zDE`<mjch~3n+7Es1R@n;x`{`;P)txY2xQt^YJsr?46WwXyBvvnpb1?u!Nn+5r=TQY
z>8X*l(VTQ4hL)c__|V<xoxdEt3%fBnQNq0s+>CO008_si#MZ}Gqs3`M!ZH!j`rsVC
zRH#cO39L$4y2oNb|4{`?pP1g<&14uVP90a$l()2IaOV09)}G?y!2W6U@0!NMSPceG
z!m`?^$c7)*5Nd1lKs!?7W{PT9mIc#D!7{TDW~)xk<A4&ot(YyR_ay*ne=}K&3C?V-
zO{YvDVggK(>!gieao{2MN(a5KuuNDP+GQee&%HNd$FAG3V@D5`FFhaQ69*9ZKH9U(
z^)jHzp@u_?L~qND2mdPuKjN4!3lu7}o9pNwM-eRI+~QRnQ-UOr3^6fYMtgf2jF~Wn
zg{4couy{!xW1|)9>7T~nKozyJfMce>ojgb<FKN=FrpaULG7S3L1Wc0(;v|?sDSKlJ
z9a)mDs+&1mJQt9Wno~LYdz~{V6N)C6FoVFC2Dd2zM-UX@c{LQLi^!)U{OVUf!2W{|
zp|xcplnk+b$9=Hv9CE2Su(+*Vc{-7e?<`5lO`}Ij&B#C*DAyd43B;Cll&7N|&1^7k
zR5m89kjA21spEkMccHy4jd}C)=<aSsB4KHLduLY`-91@Us~-06E24jQ5vAz>7WM9t
zjn%bH;-1`{VS-b_qFHv`S8m)hwL#%DXrvfK+Rf2yh%yM$2e7oH*hYg;VlW$79_=f)
zTXFy0x8osxA1bv;WK(nXdkNEqnM}eIDOiR>#jg~?<PnL2sAOP_6L(JiHrn|}TYU=k
zBr3siZdsZTkQB`0pNPC|Yf0gxljq^U{xNLcd;tA@hcLS*k2yVgWLpw?L$zgEShZ>v
z)|}jqyMA*B2lrKAT0&<Qac?EI6i#J<E`l2qPi8a##0JLu#_4FzzKIE4@_^LyeCi0J
z22$E_Qt?bRTNG8{M?TVt*)W(5lQL0}fI$m{3EgU?1)@n^eebPU2^=y4O6Q+c;i2T&
zq)Dvdcm|8Mo5ghrrD*XoCn?(Mm9w#EVJ8j_Ok!wg3I`61^8*JaWP5uC3m0~xtu2FE
zEkH75Vt#KH`}fso!D`O0*@0$?L^qTmG%8eL!yBfdv(OnYcto3AgW0@&#^GVaIy2Or
zBzg@x-6WLRLYt2vxT7t~;Fd0|=?Tp~TthS$?<t~PFVq##auITWjU<xO05H<VQ=xeD
z?^Aaa-Cz_&($|eUs(I+d>#mP2TSm~+-HJuMU0AfR3!`I29Na&Fv9S_1KDH0%pSv7R
z!qVBCZnslq!}P9CEoswxLo|Az*PgMo88SH@B^h&iGfZiGiJPPJns;5*znhtG7RNaH
z*%mF0SQop|_<kdCt3->m8V*-WRU64nq&FAq_Ey|Mpt6N==|&7*M7Odz`o~cOD~LSb
ztt6#Pl20dAEet~R^&i5%edCxlD~AOO+R@e3BD-hhFg;bp#B@c=n&b4gVL1&6n_m68
zn*vD+Uo;z(T70AxPejLRxSF#KoB!UN7OjK3Rv<N0Qq6<FpgwTJ!e&~c)Wag>dYm`J
zPi=tITmX%^1C7pdyhmC~31E<LOL_s#!|`IeNgc<Q6-4DC6tYm#r+rMF*(}aIXE_cW
zoWP-xf_8)Xd<ygCcc7=I4NLPWcrIB~Y!I3xZKmXLxAt&DhBc>xHe6G4d|bQ-JHC^J
zHX+K(53_lO?s(`Hie?WR+r%4sgT??seNd51CLQNBdOlP`N22!+^CQ60*-N}tHzFAq
zqdJRX7Ka;1+TBUBvXA<4R9N@MA*=rA00W;(o4yGE`p~&t8mFF;L7`B^z~Cef4Nv3o
zP5aQ_H-gzcZJ0YJk7UBums7tQT?<_}#WYew1R!-}($l_T86Ts7*l1G5f1}ZgH4`)9
zoTd@P6K5K79pe4sYp&lkPOo+LIdgM0deMgE=y;?gl@Xkiuyuwk)O0B6`)TT{g5s94
zc%9TvVVSlqAD^Sbn=zqK@4sKu36SC5{z;vES+=1wwQM$tlTKQI^Uhz6m8<9K54>~d
zFz&u*yG}mn)=fv=aiBr_#Ye1=l8sjIj52B_{5Q0I@!!W6o~(o(x~-uFG7S(LNlH9K
zMK>E8F)s$~NY545_>Iv;`t{=-1&#5%dTT8SDamH_%roYo9{Q+-lQh`;_ynu@0Vll;
z->=n2xNSM|;NA(`ddqh7?;6vWz;+0<2&QRa>5|zv=bYs@?X(5RwK(v6U$^jOe4h*5
z5R6?=<Mp*JLp|la;_vAKH8Sy;iJ}ebXoeQ;P8(wv8by2D<!H>Bnz_wVV+f`8a>V4v
z4?XXKK-ZzoAXhE*?;E~AFHIGTgp$b|uc-;t<=9~J{Eowz6}zyy?0a(G#LxH4X}@Yd
zV^KIYRu=c&Sw^nS!Qy3|ShScl84kjL9FBpWo=(h})27u-G+Z*i2n{Agf6sN6rQH(O
z4^C;k4i0qa{2_K%@$DrVyCCUk+$yO#-s^CK^2qaU$fe_9ij7$K)LSf3U8Qe;W*E8v
zKCHruV-#umX+TNR%E{iP9nP=rxOq%savaC^9TQ?c;9&9k%chE(1cxn21}RL1VxfkI
zH|)nxZrO_a@7;^Z$to->7W79E(_rZ$Grk&J(SJI_qv|bQpQ<ShYbF}acWqdfu7pUm
zeOQYqb*yUqLLKq@7z?t#nIZE>4j-9O;l`4+SVkSE?6KOfDg2~5oaSC|mO$F+@SohY
zm+wCG<4?qYak#!aF1bPaumOhl^iO^2d5hTJ{5F|d3D>JsNZDdp7JNUz_U$9svv&%!
zW@WHwVIDnmbFeMq{+emAF0A9rN~^s=SSX6|ahgF#W2Z_SFdO&(q<l}y%$h#1*))u?
zIV|jq5p5`_V)gHg!eS;+Hfk&_{ifk0M`$uh0m`@*W+945vsm#5Dt*rA#2tk~^uWKx
zf3BVjx3_3+5$c>XC-b^rbhKQuHZm+<svtB>VNold+!|REk*%3r0`um!U{-e;TecQt
zu^4b6;`>C>yeGYfQnLx1<~(stIq9-1c0x|dLLzTqaL)v))BE806-`mZ?UF{EJ7TbW
zvs~7@@sE&nQ|Nihr)U=6GcK`NHfV`4my#N%q-Kpm7O`}>{Dd4R|Jx#84ex&@TT%bJ
zD|-x%nIRoUt9jmEbZ4)+KABvBkTX~Di0)J%47&3H7xCCTDn&_{DNIT8opf^12rl~a
zX!6yF`9VYQ_$#q-9LcnaM2En@&M{Pr2jB-)>NFna0h>En8kW*9v!|SElkkn>R)dDp
zdNo~4HEzT~9Aw0arIC>zDizYLG#u#{P^dn9_n7<ht3ymp94nyWYjMnu!zay=Y029c
zePCAZ%J<vJ1qcw<h*vU&L$hHt2sG-1h7D_0z0u}qUdXr@HZ)(S`&*{TW3U9$Splcb
zz`<Q(C>IV$(t8}%=pFW!&B&*ZncTmDVuNa;cc1y)%uS<dz?Ltg(53b=?ZZkcKR_5v
zpyY1;MbUrclXbcK;h9x&jDTuh(PMlZ9))9|eO71k1^?8Uz5La}=|RZo4#R?*CMo%C
zNfs1SfwASp#A#d{bKQrc$>SvYr#-I%Oqs~GnXq%ffgNKg7YAez&^_BJ@<;JJ-Ui#=
z+!Fc}<7)g6&%izsJlY-<B9LxKZB(vUnx<T<un5=d-&625eXbhqyg5+gM`V4+7O3Vs
zJPSvhy)}cbiJnDW=@);dGk59BxZOdZRk&dZLnLVTaib;DY%uCZ2DH4aVTJlZ)&&!}
z4go96uy5-awcTat9|@M`uj2ZO{H-45-#De2IHoIKoyHIq97e8=L!5DoOK!2igX`~~
zDtVj#wH$2wj;9XpjH|0>52PdC=~+CU`oSFDyS6L!!q2y4F1*OFJ814w%`hxZpi%On
z+lzWktEsK3X<Y=Qc7=5Jtu9LsIo`Kr6qWKp8IonuM1Gxr$JP}$MdQY3gRY3FM{RK=
zyAFs>@)_g8RJKDiRy}VJ6?g0RE8(`U)}p?LmEJ-2yO-_R0qJ+&6@Ns~Sb{HF+mU+F
z7h2QjU1-?tG`_S(fKei%8-LU(<|cJ~Iq5O9EQ};?u#lf?fhQ#TH;tlJ9gtyAo>4T#
zgrVL(*<ddst!^ZqFH*jgDx}-aki;xWlR(2@3RQ2%FN)r#uT;Zb_es5f|BnmMaRAou
z18woz_SB`HZcSfsxv;yaRZ^ol!<Lm48YHqdt#%^dOhkc=)#ur$RwcGRI11N|-5{x?
zNI#(oMHR-CnxgIZBy|gQJ6kX_Ni*7`uz;Gk`>~R@`Jb!du3v^~;&<4GKR!su30S|^
zJ+8_pF8WMM>iieli8)ZF>6*fphH!*s(lB@u!jLOW;?mcrvEgSE7~WTb=N*!sH%+$(
z=i~yV3`m<u)pSU{ki$rFny9R5sJVL&mE9-4P!6|zKTxAXPetSS0q8gc>put0WZete
zoD2UhpSkeOw%toJxTPV?nqeh`X{AJ_H4np4IMmm#b%s&s!u2NTzPK`!eyC(9O>QOy
z&3%b#sQUw@vb*_fm0-)aTshDm&jmR0y^lYDj$^R?bI=U5b+uS$UYk!}@HffC@+>p6
zl)lrQbbPNqEhD(`jf<i0a3%yZElLDsR7MbuRm%0P-zoc>u6N}@Jxt-L?{j<u^c(=|
z_oc<AnKTxknsZKlbIM-*O4}eoVj^x)k<wPu%>b&X2Ya8Wdi^(7gI%|{a<K2Y4A653
ztlxiu8SJFRx_T`>YXvu~Hl_S(7?t+;a<o6hG~LGOcWNO#XF)n~oH$M#Cyo=xiQ~j^
f;y7{O#DV_{Hp9I{vRpj800000NkvXXu0mjfu6L+=

literal 14924
zcmV-SI<v)zP)<h;3K|Lk000e1NJLTq003(M003(U1^@s6aKC&E0024@Nkl<Zc-rl~
zd6Zn&apw7pd*6Gx*Iw8Of&d7B;3ASBMM*XVYO^fMYIzZ)k-W%K+n({#W4F57V@o}U
zqTAcF?Y2FqeWu&(9v`>eYFn`7eW7KF0wqe^M2b5IfF$;%P=#8va(VCGm_OdjrK++P
zEV9p>b{-Z{S(Wwj<&7J0Bfj_|0{-do|C@(g!|Mp_H|f)L3VZc`-erAB_V3>-0EZ6Y
z;Q<By(bvPk{@|bX{OXSb2R>`ze)Er^Sq2UW9CYc^{lU<N`i<6@Hz~4J@wW*wh>8j-
zh+XuS**zP{ZlHA=HvNrA`)wBfzUyxh1nK$&Ci}nXJU8j902D!5zmu-NZ@pFp)4rB%
zzXO0u>$~pvHrdnEsATW1U_{YLYr^Nm%SkWcW1BV=jvhMnK$3~grdH<x|BV)wzyZ?|
z(%|~LZn4JvfFkcf*exco?FG=*VoLjMq-8B7{gQ4Ws36jL{es`oeXT`8l+N?kk}2u6
zTJNXX@1(sEq)Qa0b8pi9+;m;PbM5x;yY6MlwZtG|PzCRsiHJQSDhE~c4~`u94~H{V
zvm89=FULH}<!KYXB_xb|!XV!xCWt^$RY08}O14xiSYToC&)UyhOTWxQk}dv%*Dl!z
zo!6%S*`>nn64vU1qU%0QkBzhFd1^!2n?w}_5hKQm2{01kHEyWNXN>Xx;qc*KeIdQ(
z{bsFNwnkwcu&Flf3kNsyDZ&1XF*Z`~KuAE0wA7`&@ZBaOTL|f8+Lqh#9l<UzS3MWE
zBQ&}+YQgoEXlySH>DK<%_r1)nEZltU*PBJlY7kIFR24O1thITZOPUD3ST0Zg{MWwr
zTXAQ7uUc5?g({nGzcJL{cSOQ(!Y2R;Vr=K*E;d)P<ioEns72Z)D=+Q>p(2?gm>!zU
zlEq!gB+~PYTE<E&BdCSi+5Q}=Do%_9fi2>E<58#|IDGim&%tLce9&Emuu?${Z@B$#
zmEdnh?2xKU1Y=vPwr~NK`#^xKRin%z4OxS^>bYPGHKDiArRU;)g9O#KE`q44I&1TR
zdOhbfdH<0kzx3p40$ahAyx(*Q>Om3H5>#+mf|AP-lq@eO>1FylYa)vlSC)8vlD)4i
zIU83O6jvcA7Hud=KaJSHxn?3pHU=hoaM!M%zB?7v^6tG^UQiGC{&jb4R|y_O%pmGr
zCa4umN)L^?R%cYNbEUmO7HSj=OtCC9BEq7dFLWlluVpZc?(<4CD!V^fye?qG1nLuq
zFc_HJgSX!J)7#+zfB!N9Gs~LBefvUV^)n)N5cQ7K^etK3bmy6+ALz0*N-jgAq)Ve@
zkwz^vebRp4)ir9dcIs7Wl=RZ59_wVR`otL%3_25hX5YRa4j*X6KC27sfPn}6;8{Lp
zOn6V%8P!8j-8+(hB#m06LCb0mOFXsZG^!<V=iE|3ak+x(_4f-sP7!0Bt0y)n-!nhA
z{!{RPKXBlnS;fJ)-@pSpyy>o8s^)n?O{yN<d$?Or<{!lCTl)GQ=VjM>n>K1;(h&JF
zygnm>A`FKC|ND2pk>5D@6qC*&(h07wOi)Xml||Q5!Ft4c;~Td=|H{uDxgV7W5WkFO
zy(EBo<&(zPu<Mg9BdCS9y>^X~tI(*WCS|c{QWQl1#Tv6_jq14naO(!k_x#%tc5UhJ
zy5p<SsD*;-aV=52S{sFq;FEy9#6elk3>rA-hBn-BlfisQz4K`tMGt3UaV%s00nVu2
z8YS&xA$`4fO`=+vpqa;ek5_FYhO)rh?BPL5=U(5uJHbaWckC*r$b`8ZuWzX{(blNt
z&O0G9hYfFS_@SF`{@I%j@<G?_Y;*}LO>Y>n|6ELvL+}e=qt%=VE+>v!$@Ix0tgo}<
z7d-DA(CrUjZf@eu13$@!-uest&Ub&3-~8~m^Tv@4s83J~rj1GVj-xCF?}d@3^6qb~
z;GN|?-!@3D4&Iageb?fy?)5DN3YNx#rfYMGpz4ju<?!;)0lv7uBcm=j{DiW1Z<Md+
zehrZkx|XQ7Ms-6-%ed>8b4Fbegk-Ysl!5wQ-n8>)=>PZ*3Lnq0VOKxzy))#yesBlH
zvyP`;K0{(HR!nx5b?)1k^jaQJZ~4Ujgtz|qjW}~F>$lJ14mWu0_-uP)m=r_0+B2$4
zP+cBsx}ikX509>U>u){vR12+d3+sLZhjb*|wga)B1T}(~l{Kmx>yxWHqhv99-VGti
z5{;7fb<*1(tl!F=JAR7r2LpC}DB)aPnW|W>lRT9|gL@9Vg+0xLFFk&gx(QouNBcUh
zg&(cMC*EcG*uNXW5567MJxFkbH|-y!|9pc}$C_MnJ~N5kCVj0MCCh14H^?oZYE9T@
zy!{^+#vhshHSmDij?hl{TzTtv8f(8()O#@I+CfN{qfussc&6i4r-D-Yo4eSz{im=W
zGkoAfiuHyk&ML0%*|?>^=DH>ERd&DQKJLubdF0U}%t?SnXeF?2AC36<w+--9KRLvG
zKe`py_f4q36ES(z&qH*SJHKt1_kMH0JzHWLXA@qV7L1W@2x$fPd^s3wkweu|2*q1l
z2)(%H#x6ee^nS1>IONSjZ$q!kv_`Kjge2D#LJ~~{RcdVIjxC=c{C>lCe@NLL8Xg=|
z5--dq!WYIJ6C*=NJx8N<iMxOFBmBpI{SHRrIzIbos_^z5hL3+V$Mttj5zk$~)sBFC
z9o1LCA0xSVjO6PNF?8`2_J(yvqUD^P<(vswqoCSIzk&g;*QM^n0yFpnz#%PFuKO1v
z<|a@T#4PptzL6TW*i@R{$wy6ha=tOj-5Y;~;Csuw<0GDTlr6tMsXRZaP#1h6)E&%Q
z<qabhWM&F)>s<Hdx3DJ}=kt%BpeX@?F+6_4@$er{;$E6%&&Vu6@dU~g5}e1M{R-g=
z=Q#SgK7Q`EOZ?p5Se}^`MC|fs6f1juD+?-(xr_uxaT8+~ANuTx6ZZj!bb)3mjL_v}
zT^WSLWoneJ8A1|GffU;)aclo4h`xJ(w|t-HJ$;sk=HV+dpiQCKgnAvSHF$Dd`HQN<
zRyGn(Oq0}K=iYzwVSe_*w_;p^SHWAu^GS|Rf4QH3d4GYqmj^J_)40i(30|Azi9gxM
z$Np@Hznzb$mC`KmvJjFiXZqGEsBUM&j4TT`2_}&R9?q3ONNWptO&Y@S?w!~3{+n-1
z-`$#JAtX_QiXw5y&G{dr^8U^2{g~rh`z?>v;d7Io>bw#+6_-HVg!wtB&Iu2mQ@-du
zxq%(jPR|q1zQlL@+&lS+w{J()VT@oAtc8az2K?f$dZb!Lr!F!1^bntVIL~ARR_JnW
zmN}z(dVR81jcRXZO%ao11z~9?;rk6fqcl4e-}AOne&h#t;?;F+lZ9Si>k!vO*)AVr
z^j)`c{SSNIw$Ad^8vOT5p0PP-&O_1=d@T4FTpi|TV0IS%;GE~N5M*#KwIc=Mv5WlJ
z&)&-i_H0b=#TdLxz0bcq;(7MTkjNGIqet?bvKDK=smaJQmmlyh6zU2ZB`p+1Ql`$b
zK(5#xrfjWP-`YW0liA!bQTE;ld)~Q@ca99;eJ6flK?)t5i`n8oz>c@>XW)O0*|tUa
z{Iv3!i=GQJN@EUu6|^q62Dm094QR~3{3V#0f!{grc(xyE>-IAL+&Y?*F`xd_e%?GX
zh-*UthB#+=<naW(*vIFOWpR~X1wCiAGfGwwROh+sV*9pYKI?KJq_qdULPsDUyS<N_
zzU3Bt{to{AZ{Ep=Zr;E;TOgFqZZu**9V3l*u;-5NqV)YS^TWay&cZ_%VR{bgvqC(p
z_&WGT_SMV;R)_i}s7=85r1IP65{_;*Ol;jl{n^dfX2>u9#5>s@RZtbIr0~>}FBx8W
zVl&68=?3;(twyo3>06Y8Tgd-dMp&}Qy}XvDuf^;eH93CjTX*t*{HJfmSN4ExWaRD&
zzx<yDc;r`hao_q8KnTR53VpTPc*EWwV)&y8=Lg~VMd8#m)T+>!gJd3jt))?lZ+$fs
zUssYE)Gk8(qA)Q9zkSwma+l@A_U+6+dp$$ZFu(GVchl!15*0)Y&z?&7_-~)5Q4G@0
z)fL<tV=f0mS^$kLXZpI29<xZ0tw+$41>J?uT{UN-^|u15hKdjQ{ZHM&-VX`R9mCCB
zg2FKR%2S;DlN!JApyjdi4r2^Xm8iC!n>PPA8$RqgJ)oSM5L`uZP4F>j45kS*L7NIO
z7$;~9HUV`RhZBe=(qQER%I}EdJMR*vW;U|-ks>#39pPv9znh=<`@cl;5DQG9OH7}l
zw1YHQhTpi>Gpbhxq3b9x3w0@rv+k2L&br~FV(bm=IO`jLo-6Rm%a=Iv7q2sXahgpV
z$I<$6#{a_d(cdzBdA?38S>~vb=ca*w&F+tkFuu+6`lLZ4#W`>dMVkUmpebl9kbpQr
znjkSqEJy<4vk(pNNxE)x22KIRUBb*{p5o({J2&1yZPxMB<g0`>SRg0?tTE)&aQkqM
z3w6K5bL~x4Th8<?)Tl*3w;CH5)Ez%R_TcZf<g@h566wW#yJi{Q*eH)rH2AHfmhbz2
z0uKF2giPi5e;<USwnk{u51~%E-hPyu-m{hFb)MHx2@->w0i6ZrK&uKh(zB`wB!V`9
z7^Dd_G!q&~1EdbjgPRm&S{R##L$k^=?^PbTG2)q54IkL^KJJKi<5G^qg5B;te9La-
zm;UW_khpeEVkt5qYlx$I0MqS_zVu96dS)3x7E!0JJ!c}#<OW8V3_ZW{InY-&^TdTT
z1>x1;y)xX`&#m{~OYSDe;nxIT1Dyk=L8gIOfjQEjHx+FvE;ECYfN|-UG{MGT8er;R
z8-l3{ege$2GBX2*V`2OUgl9H5j-GQI*!@9rjS#Ob+O@DQZ+X{_n16NuZESekPTsXO
zLA4tYUTeV13L4e@JF_xjMizO4-zXN62NIwD{qvIzKJlAV9IvMz-YbOjqujjvdnw<R
z@WN53&jPccQwmd{7eFQi<^`>5TboRr{@ePJ7)+9WA37*_A>V|8Q*sT(%z&9u=4PN=
zfq{=2zU~rg@eup^?!o&cJ);uke|yUuzwuxC8Gge$G;sXdZ&-e0-#o@?c3`YA;9WtZ
z+Ez`aC+lKa2jhw$q*YV#3-L3R^wj+GbC<GfSk!wq<=#xVqrgjNV`k<BA3`!M;2?-C
zehwPe5xiMQZ01Bb5SI!kJ+o4?DISc4oI>pt!FWT^uY{W**aAizK2V;S6h3mZ@a!Fi
z!+-4=%H4sT{W3%Xq43L}kC>Z2!^eO6zhf^YJp9L=v*YU#170sfqgV?cL>E=e^b}T?
zRIiyv_4atWQ|s19iqWZpQLY;v!8V1l<DOh-37sK7ulPBbot~zN5^kvwW<j(|fJBj4
zF|lA1!DN~y9)f&o{*rmm#0!@o_C&>q{6Iu*eL&#`!}+c7^Eu(&r8*-!a!l28*oy|2
z-F+j-@oSHT{If4l@bH&}`=8uQ7<N3itJSE*g%Yy5>u!4_8o6dHBqIh<0h^}DTdr{8
zrOnMzCmbF75_k9Q<(6PQ@w8!j5+<f*n4TZU5u?E<cAXL$L*h~dEftPnnwox}2-c;W
z)H*1X4P%Wa(_;;yoS|85;wBCClfvvXN|3ko_X`8J3g3CJ@cS=5O5+73kWT19F5p)W
zmU;3*jxZFg2u`(&kFkQ+cNv1x#caA>!pcY(Sz*r_;;0o%bkYQ&7{PmOmBFBr#VP8D
zG{^dKA6tip**rMRXmOZ<(g^c4<?!)GICc!iYE_y^9T!ZZ(KvWzOW|Lj!2qE+nl5$E
zZR^Zxrq4~15z)M0J%kYiIZLiINTpaLuP3R_|1J4wJ*8lj!Tb%Z&-XEQKF9xk_6h#S
zi%$@QVM+r~O@kSMzdBoPpHWUP&-7hR1q&ENS2BZ(_y8+%&ll5@yKYYDXpLs9H=n>z
zG{}~L4eT7<!nTc@87Z%)oL`UA0cPtFmuBG9q$f_44Vxg!9p=HK{{@$;civMyu{%mJ
z+JTV-<A7K)tpek;?Fky6ZVrnO<vd}@Ac19|UkKxqTyRe^uMt{P@{JO&P8CsUFy&_m
z!y-avn!5`G4H%PFN{VXAe8Oa>%*v*3EmXMl=ejloV{t@&xn(!4#F&pmMvEKSHhKfw
z*WbYAq3aneT}NR1X*OYc9$q=8%+-Br%EW<s)O#FCbIwzYZsCoaf1IzJ`3*FeU<h!;
zNZ25VNK+e0rb$i3#-!(!192I1P{0}pi|JPo2}Aubr10uYgfS6BLX0C}4n$aQHn3-K
zGhvu8o6IoNsBx)2&vdPc3kAq6;9s-^Wvl^D`?+3`My2VXUgbSOZ%^K=*_r76SJg3O
zcJZd$-^%qHb~0GLo<MRm8)=&2*f~e7-o!i2V!Cu^29e3kr6p+!>OIB?bMY+sz8!3v
zeh;tK{}dBij2fJ2667Haz%~V%9vdq*PR}W$ifG5L3IoCBAt(tpC#)Za-9t4VdM!IA
zeQM&8hU3=0yLs!bcQafmQ_OiP1y8A1L&8aB8t1q;KhA}jX--_6;N-+S7iXJHHysk>
z@vgJwRRm+wm~rhI)zZ>6c!O&yyXhe~$yB#Ee+xhHi3iB%gtNyy7sovHMgxsgny;u3
zSiy<GIVJHadlsXJkrcxVOp2PT2Mwq-t6aDKTNr=s2y?;FbW_-vpaeF^_O*g_LXZg7
zE5>&$iJ0_tK@ozIVyt23bqQP7*HVWnTPxpi>>GS9d$zolv(<Ud&&^ZJ8!E+sa#W-e
zmFO#OWk*HWw?!#b8u)OAd4G|y=?k2>aEaH>P4ep5X--|JGv+)2#Rcg3@*33xXB27k
z6xR@Et<^m@+1cdiw|8**bV6UjGd-D7mqQ~s1I`Q13yFerigOO9K1=)ofx!ks5I~|9
zUsIe4i3%Raj`bhnx%0mc`FWg)p#((f9aslJ0)fxWpaP=p0Nh4Ot|H{h5akVT*gZ=U
zr`Vo)A*m(YI`AEA9DO6_W@ZV4fP54nIfIXsnWm@OfbnWVbO|DB$VDNA+%SFRQHBO?
zX4@`!*X<q?%}{k0I5Tse&;9v}JalXh6SPd?@*1_63XaI?B|p+@2doGoX$l~TrS4Dg
z^kXL>6mn63y3`f-n&yMNf=@inIHnoLBuPx-65==^X)4|eK~X3Sg2`LFS|B9$j$B~_
zn@aB`Nt#ILFl8_~2*MP+wGKj60u-A@2LuMf5Nr<e{gA6be;@3<u0}I41lFLjva|FZ
z3=iJJcy*pc0~`TTFa&)tp9nMahUvOtu3?x@ELA7WCZ4H==j>#{ky9~GKbP?M<I1y7
zRygy@jqKjEpC5Y9hbUJiOAnc)ag@lSxJugTm~^k1RWwTssSCHZfVT}?ie)DFI_FOB
z;cHJC?ta5I#!n}p>E$#@H7ZUVE=h=80-~s9FsT}78X|<k2>62F&RQDt={+@E%*N6C
z7(4n5jlKq^AM#}(nTFUZR>5lPZnS-iCWN32K?zJ=*gWDG4kMb)9QA6<uKxEiI{Fr-
zo3jKaBEgcY2&FATv#!ierRazSnpTJ%M1c}CAqs`aDnST=RRXIt>dL$~Jo-d~zxm5k
zINP1}SVf~+bzyA}R915^7RLyyLr9wWg&H-uH2-%TeX&UYP{_8SO<X!3qu!8sND@zy
zB*aNV;vK4*W?;o*)ZrTzrY-qR!n*C?Bc*xLpfyE|MXa)O^Y?Nx{yeVWh)NLT6txf<
zus-_)ChZ?U045J%pAhDuP=@@7FxM<luL*<hZH$cE$6TX|H95R7&<EumK%h*Vg66y;
zssthg77`~!LF(Kzof26gau5Vy10^&<FaUq`@KIhm^(3{S7(>|G>syk9WKnL6Rp6$@
zNwYOVNUcU8jlx-`t6%2pj~j~LRG?fOVrnWTaS%I4(>W6FND_zln)1$#W&-oLIm5&$
zW#krN`#V4$gX%d$ZN_nFY?_(rDX0uU*%6g3xuRksAqZ0KGFfG*1d8MY>4T^ras?<=
zKn7sa1*oiJbi-~m@)*tIjbh3|`4%W_RK}lyxtR<gR!<@jc#HE&;vjM<80~`8Q3{+8
zI4G?Tc<|AedFk+B=89(t!T~x5^YR+Cg!8_-X33JyEo&=eYq5S)irIYrd1R)KuRI3#
z-g5_rBF$!l*g0I{NSw#1l6a3-uqZ(o5JY*x0%#LXJneYHcMAiz!z)K(&L25Ved;{T
zT8(1K5LJYH5t0&^f?}#ERm^6dvV>sDpaVkK2T=iv6=k-fTyg>RxWLKDmyz;jN|iqH
zeG&b;V9Q-F@pWP9JS0sAae`GPu-Tcb2A{d+X|DwEDkRP`G7$3k;n#WY#goiMM+hnd
zWUWh9Xx1WK7A!M^ZC93+T=#|Pj9w7Zs(mKZAfcg}dlD|?c<dR+UAynaGz{J;9-m=f
z0l8cb8%BsRB(BcP{28j3=9q6biC^jCVtpgG{4W6my9370juN>L@$*D>nnKxADG0U%
zGewX>DlB}uiA_O}3ecCDze1Ec7*l0s3aBO#V{<Q1KX(B$y^&3~?B=f93S2nrIRCtZ
z1Ogi&5~9xIe1iJagZ18^YO<~}g7cn{;gA<ko#yeUjxsOL5)76zL9rx`T3U6|qi)#<
z_|@PhStg$%i=idy-LxwEds9^A{S%x!-{5gy=enVN)ang9xzyVUVycY`%uStTwl+?+
zR>gUXp^Obj$dxR|pRQBcUgpMc5ynrJm^vDvNu3}F$(NMDLV6~}C7_zVw{5|6c||IM
zDR~M7p%Mre^N^H<S)i^FVQC%F-~hqs7B<|MW4Zy)|4E(dnPZsRMREe=s6sivj!JQa
zLRca&rd=oHd<u<?42GPV9OJ7`zrehE7CT}Wb_`gSuffvwOc||ffty;I;}(_OTxRDM
zld(9;G1HfxBwwB3mNyPFP$_bDs>;i+ALYg4FLG|;0<kj`as!kL8z>dlVWfme4)Fo5
z=6U7smEule=eNNNe;5KGL0;)A3FRCl1!$DOl|h0uD8>RgFhxa*LLo2Y4FoyxC7~+N
zlmbC{J>kd(w(jp^{T{~)zXx*@^QddkOsdQ^&oefC2}4Y1LyFNL1I4YBa~mmy>nQ~N
zRPrI?Cr|VI@n@(vk6?!sW1^LviJlror*ue{5ZHQqgR<Bw6qe~T(F;qYZ9<I^y!UKb
zznk~p_oEd1DmVjswmR;<XAkJTj8BYl<kjQ6{Q3o6JJV!xs*b9skh7F+3N0lwaP0HS
zP2Vf5dy{hEOG-W{QYu->d4VF-OW+zn2;#GYD+i{S=CTSQsjvdUM@k(}925x$H!*Z`
zfgSgGPJS82k0yw7s54lb!$y608`ErFVyb$cGZ$aM`$JUnd3IiR9p7~4&D?eC22Nd^
z<=NMt!3|iVXdpxAWrapvy)??SmsQtFMN6?M*9Bvlr8}UfMs*1=i`9nBZr*X%PcboV
zI5!bvB&})6<%$gUml++|!o6>~llQ(e#wQb;y>Nl&kIeG?ks2q?O>=2tfP7*}jzQnE
zo*nNHniqkIfJz=pA&`f18C(J`NMj<bppm8!Q=}9u<PnTj2%#A(aTwCKEn?@lC{t%W
z=e{OHqBK-VVxcyd&}ht|%+XhXTeppJ+m0Q)>9$SWdeb^KuOFfmmT*alXmE%Ryzf?i
z^izMvST)52b&<=~(I|SOMA9P<)?JvoG@rHb!YgUi@|{~Os-BA5$~WKnFPWKzq!|<D
zEXFG0A&DJhRmb=R<!BB{Wy8AR4Q$!4fe*YJKKkAnCa0%3dTx@ZUz_Fdc$pKAm5?n3
zhTjSG$Du#x$)mUsDivtN;7l5PV?gpLcpK%R5I~4xZR#bu1f&ex-v-4&%hP`ca}!WK
zU&YUjF<6{o@135THf&<w;5KgC)5qw@AV&I_nJX|gmE)x|0nK_!__Pvp<MmtlkN@Ta
z{P53zmZ_x0lays3yrmkoa6K2ES@#1E^g6S21<pjTrd12Mau&gpYp&;>oBt*A^C8W8
zoO*k)$5<g3L0|+iiaH^Qg}EBkr(@2aheAmh94NDCxR2X+Io`Q%o`f1FrY3mtlw*8j
zffE}_1inDtT9Q5}&v?wdC)UgiO6IzU5Lw7&_+icnQQoAS`kf$>@WNl$u&3v_ePe@L
z-dtzjZ53|ayO|A}%23WzdphBZpYuF*)G${Uk~l>}ElQw{NF2pTm^l~oh8s8X?|<|?
z{MfJmHHpckK*0iyVg-#_Sp6x;5-@P-nI!^hm-YIV?cAaU#A6#3_HF-hoa>|6s3FFn
z&LLiq#Gr{G$_rrts*1@xA8i<1Q;BDxIqjGpcbupg2FfKy%N4F4b$n=hgRn5q<j@oo
zFO5-sJx?@R#+m|^k%0J;BdKdUaT|n&e9=(phddB#LUpRf#TiE_Y4SFKoAxPtKM<tC
zDdkdkc@}0T95W{qstB)DEf>#taz?R$6(JNMAEt<YtU|76c<ETe?YnpLsSi)_fBv^G
z5#(C#`&u-rBPeZq7_HxZ8hBuluuK;RU=@w(PFYLlZfe8whAlrx7;UCjo5NV!$>%ta
z5v8e$uNjg+h{Ci|-T+opN|#5eSD{%G8Z*j#UYRU=&P+gmInVn3BG-*Lb_~@CqB_$T
zE^%f)=0vqbaoc)K#p0UK6sT#FiE|AmkJgwNkEx6``JP6|b$j}_{!JBZ6r}X38q8es
z%$!!H<`Sl7V6F<)D%cSEHh4}Q23txQStdvgmGclMsq@*W3pRphUy8Z+);IA(@0#R4
zKXjN}RJaU{lCIE6Fe`b3%XMz)rBRCyP8WN2^?w(AmD{M+rU^`XcBSPjtw>)1kE-Il
z!8t=1LJ*{YuBza@U`@IJ^}3S8so-ieFqiXODtk_i!AM`8^#ggf?doTHIL+67?=?Pm
z{4xI7C-0&d<uPYs?CdPNN_jR)p1f9wgB)k(Er0*_hT9|9c_Uo7m@r+1nK`J{g?bHK
zBB%%N(#?|}HH1Z_UWX`1j}&eF+sbfy1qY?P;p;DWK6uM}IC6Y~M^8>;Oqc=I%WKra
zPHt<Cv${mFqDEzvA(9edhU7N3Zh9~CjTx-9Dd#53E47&O>J?P*ne>{m%LFC_p%NKI
zO-8Ko+Ah%c3W*07r)4~iSz%_<GwTe~FDQTX>(BA<#ix18J#QoT#28<AYMN5L!Y_Vu
zAD1Q#FT4iFr#)w9lxhPS^UA3|^1SCGhOsfB87n?XnM&S)ciI+~^C@EAx88I92xuWq
z_oz=TrfUgHTfI7=86>>?V!)4l^LKIh4}P0Tjk2uuN*X0gD|uG0A~9KWnU&r1)?2Cy
zzM<TB-TR3Xml;vhHm15Hqpe-SCQU%bY1N?yX}UpM?YTv>3uLJjP1#D$D^3mGJO1!@
z4)gg_e?xiQ+u3o?oxJ5+;h9rs_{<;vXEy)-2)l2;foD%7#C4(BP)LN(!THzV<PlHQ
zXNjAnpt5gq+7<89O`-~o29!1#+>w~ro7Ce4oPu-d-})dGn0F8*hPaWCzgXbgZ@7p5
z`tnzaa+M{nd+$1~<<t76cTl`sz`KZOoxxHjuF%)FnJ`q;2kjD6$x_qp<{;fYk2`g<
z?GN6Fg+?8kF~mMawG$6<oM}}8%|w}-Q_2ID$G&uiL(l&WRXam}?gmbuO!%*#Y4FIS
zM=A78@K=vKf+miF6XH1~X-aw>2XR9<{&M>6aoiD(_nQ5i<>54a|6IRd@}6eX(TEco
zO-DWUG`!MCV7>{n4P~n4nW`(ZO~XXuk!Uw@HSVBDJ!_47!%-_2CbX*u7Pl&0rmvEu
z@Q5>WoIdd)Hgr__BZ`FrLXZNUnH#F!WClKMtL<A#lcITTVxv=NHq)=fL7WN9so+$I
z6DanFoIF3qqhEQ7i#$UqzXNL{tTkLX(IhYq8|Ha!;t3vm{2ZmSC5}60Epdui;oJ#m
z)-^jTQvo^G(w3AG;DIDjh#)^G)SC&3PiQ6yapGtsj%qVuuIZ^IhS-KQBg<6ic;d_q
zfAaVjuzAzvxOFvWS<>o!QMPzRGq`NPE6cj=0@$K(Z2S+Hot<KEbPEF`Lli4z@OhG0
zX*Lto`4nK)?#p&Q0vQPu$<At@a@$oEV>2#>Q*x0dG4nin=mpN!zKF9zA=-p7mc&7Q
z-r;<VHT}fFalZQW6Rh8`kuVhI8!4~DYwB`OUWBQOp5maT*-SZtt+PrOa3Ir`c$IaA
z^RGEf;4^b2U;~1jMFM5kRXH;~&BWw1mo8mo?BY=x<@59nY+2Agy_e}*fO4p=y)Z#~
z2E5DDenmhBW;j#*EEA`;QaQJWzP_!LDt+`14v{bSrGjfh+-Rm9#%x#5weHkSmZxhS
z*6P##0%}s0ZU3<0YtJ0!)Yy~Ea*RrND^b`-7)2<CBuSkVYYN!Va(w&{uN=LL&0DrI
zdm%~9u1~$ZBoWS^a@;s#afzmlwpwL8(t2HL?i)3wJYoq8A!01K$b!U7*Do<QHObV}
z1hcbK%+*d4>lB(#$ZgEim*2AL8MQcN($PS(vg<DG4w#qM{8tcyvJmS@#v3P@o*Ez;
z-$dce^^_{3RQiV*99l=QzYH4Tnh-bBk{Zd{dUXgpDG{ghui%`gJP>m7%t?+OeSt}R
zj4&D?3WtfJ3N{E*jdY4JieL$CKQ;S0FC2M_k@Xu10z*AkT;@24!1x)@wp+4hlG)Eu
zMSaSJ(5!1(7(r09_@Kt*r77kc<4n(vF+Fnzm(1gXS%OkXIGm%9AHbM!DO-6ZK`jAz
z*F^HnQY2T@pgtwe1bIR8Rch`<<{L+ty10&Te3<;HVJekP3=D0ce_(_{rGiM5_N<5<
z-h0GoN>6T6$kRYH%7rxi3@<$U0+aD$G^I*ku$eF%BnT>P&&_4r4v`RR%9!v1XQsZ)
z>C<<ze#16ulS!I1^d7Ow^n|B6;|cNsF4nerHUWrD`*pa6Qk{UL?s(<3FL3VsOJL^l
z)EFofc-OWKd}%I+6xMYDUhR=>Uqz#qIv=unoVAq4zIyZD#eub8FgAyj422}16l~z^
z+}D||zruxyeoDDbl*{WG7+O#N;3$Q1ABHHUAG?%B4QbqCtWX^AJo(k<xH$6+GyW*~
z+$cdfL>TsCZN6Q4<JG5T%!G*Kv1Wjpyv8f9KFQGN20|Orh<(N&@-*gQZo)INt#eL!
zr!;ENm{poph?^cC8*=%Cspi+H%NV6xg}!Kj9hEJ-ecuqzJa&evnv`I_r1j5g8nrkn
zxt5?<yIW+Ns~Y*Bq8PDw?+JqnmBKbkah0adP*28~ubp9HKH$RmI*PfCl*$_z7#wAA
zc$8APpL~!<6!HbwyaT@S#pgJE<^`toNrIq66bujsLqtIz)~4C#)ImuLVU0vsQy{c`
zxUkCE=|dblwv*kv@4(NP4!K5SCdO+FT^BNaL5XWhTu(hhffT8iltpDjPZU(B6e7yG
z3PoGurcHzFd}A5?YU<c_yt>62#TqoKwf>7yj$SE}Hrip<$j@G;?|Cb@Q$@sJBp{y~
zpb!lcxB^X6BKC76ewM1cz+C+}VWY^{#4!02>*=d(qOX5F{X+w+-<snqkDlhaXTQ!R
z_f?$n<bz?tV3;TvBnk)Hn&n%NmKdyrr1L%sM0SW~aE@aq{vNRb8#ZpGUT-ivcagK_
zkI*QMFfed0b2Ci>oAT~$pjpSxme(VMRw(3#akV*0VLw|+74E*SOeoEilhKBXdO=8Q
z(I`4?1u$K&UsGCtwUG~Nn<QY2B?ya@it9;|n0h=-qI1Nq59bF-e2v6csrvI&<5Nsc
zM1&Iq<W3CZpE5MvBz1F`*vyd&1_^_HqG*ID7$giTv?gvOS*(=S;Y1h;7%5^*Ob{ka
z#ZU3ltJA!8avhEu4R?|0>Pd#SzXK!pV#AETp}x&R7J(oLaET)@N+B#07K>~f9AJBY
zNZy3hF4b{uxTy<LTGI1=aT1bM8bz;C`S^_(qGF5?gdu7|Dg#A|uEg|omC)94%n>Iu
z#IA<dA)K#~_-X1~qV6xCriqhzFcEn>iZOYja2=5yCJOrq!eYv(k}QPq85W7fm;!;V
zpu~Vj#86ERQ%#QGHO2-87uJaKr3^_=Qxid8N#X<(7`*pPP0p}o^AN>I8O)DR$OQ})
z462@blBYITBi8PgeC9HoiRA{lu{x03T_$<WhNxt(35?~N?%PUvFyz=P6TE(Ol8NyO
zff*(*^TckB*j4d<0H<}lHu2g35|kv(%9<jP9U?USL}5QBGl60R=Rh^9O~q#CRtcYV
zf)flT%%M2EPcUMM>^!+#DNTKZX|k|dn`dyKOc=t$U;JyHd;VeWx$Avw99)OhJfSr>
zuf*O^jYDQ8(xMBS_0G`cAf#nAN*3r}D@C=q!%UA9iMi%uiF{Tq5(FVpE~Hq@bNii}
z*>m$KXV1*?+L1}lo|;7({p6wqrA9NJC2>`}HZo2~su|YiiGm7II7ATiW5l*$FYjAK
zQ-k*bLLO^;7ils=d@Utv7_cV7B~@%t#1^37BOd<ZpL6WkS9r@C4<JT);l;0#k4n7o
z^+%Z++QUfS5H5qi8s0PCFicEX971qSG)k7ZBFmpyvIr`_2J@p-TgX6aqGqS-s8{+2
z3+&i2%+~7%xinto_1C93d3=_csUpSPAYx(?*T8E7uL+7Lun}QcCKnB-S|#00uUch?
z8EHpCj1~#9rp{LKU<a@^!q_~5q1kwq`g{WczVOAr;H8%zA{Q0-@>l<uFeuYk+DP7(
z87PfV&X-e?r=;Bd7)z}gQLhCVNZlzwSSl#iE~s{6uN5>)dr+sYetwjo-k}+U9fp=;
z$Io#5)iJj3T*sD8!}RqR8C_RlWPOEO-q7I8sTqzPnPz;fK^XOA8z|KfV=UI@FgD5t
zI+(6@<+Lj>q}@9)ost^Zd?v>L5u4@85=x~}4!`&^Ctf|x^z;S#O4ktt1wvCG3d-by
zB9Sd%gA{u-Ce@-uq3NO8jA%3>vZAo7*C;Vv=sYV|K6a>Rt7z2a%;t~|z7xle-Mcno
zt#I=A7{^~9WBs}Twrm+;c%(uYhHT$C%I>|xJoNc9oP2GbD4*rgP1>Hpm;hsfC9ZLr
z*3hmdlqn5au~}Ph&BBRRFGEWd_S0-SYV&paN?Qp`kti$?+6W_IJ87t1(qyBDSUM!J
z`6S0|!*&f*T$v-ds-W7uL9_OfpKCEXuM?<hMx04;x4;J6vUe-HZ`{PGGZUOVevzl1
zI!0fAky~!Qj=ug9BEs-UkrS`gvP0W+8uDwpc*d9xl5H|Gq`q@NOKbMA>F~})GtN=^
zgD4mvG{sa~CBPcn?u?iYpvfw})ZkTc0*MN-7eqY`Z>h$9No(^f(x@eg$u*VytRC=Q
z&Y&;nk`&cWJYi%xeB>ObPmFWZO<TC(`cZalU(bc}QyhEsJhRn0!y|pDdR&qUSxjr_
zbJt{oi~-b2bf(|8NAPxiTy2k}ZP(CCtAN#GC4wNI?q%teFQKVtmj?HemQ$#J>oizF
zh1gkYvFjRUy-L8lW<kkXQY7?Xjb7=D!<4t}NYW|{^(2XB^Tq+DC#yXB{BaH+KF!u`
zBW&BYj&HtqPnr#GB;@izN|KaC#pb3n@}j%dn=u_$*5ZB=CQGELw#Y**)^JzGThiXN
znYGP&U`S`*s-`AZ0H2aO@t#IvsU<NI20i;!UA{(jmtC#sx|?>J>NN{WmZt;bQz15e
z74OsHxg>E6j+VLmjXRm1s&eAQ7_S~X&#T8SuyNB6+pZs>udmpyeQM>O+ME#IB0pv(
zy9*if?V~YU=mmAuX@zAAJ!<pOyZ8>;)ni^$R2VOc5rfazJ88Xd>R@;kVjnOcH!x9j
z1zuloL8(a30`Q=BlK=7p-sNW;LQ`gNZVu;^SC5W!*T@#a&@w#S$M8s*xw$$gPfu|A
z<T%HVkFj&dM)uvcHESc((uB<0^Bu*}76&9Vhw3xpi)u=?X&FLodGr~PC$nfRjiSv2
z>Ab#8n$R>+X)q}(%Y&Mf+9V#F7N{oG)H_|avm8CT_AGNoW#)B_nPRi-#JAN=-y(v2
zcB7`?nV5NwzWzIT@#|+8J3qsXw~VrF+aUQuM7dn#rrkwuxPBd{&rYNQ$rfMQMbRx2
z*4@}jmxhI^o$8I2X40aybsURUg<<Qut-ouzAMHesN%20Xbf&9%LxLwV5q-lYX3kHN
zW4KHBS7`cV@$k?!rS-3BVDb`YBnV54%|1a`-G<EtT(~gB`3uuLH&kTDt`W9xAEB?m
zKp~%F=k`r$k(vYN6_4W8feH?T%_c2mlib=te0pYO{+j{s(=?5CZ0N!{kePbvqLveB
zb~qJudQF4ZRD2$=n!-uy4eLj@Gu=2%O{(M=Sq4P7j5BH(R@1Uw(b_$Su6$tfqF&|c
z_xZt)a~J=Nb@J^gKuW^&RFx+lo9D$BF0k!}VRmdEVsu?O1%7R&F`_9^)OYHZReQW=
zI}xCr1#h**)0PHl$|Ki>_ui(bXuBaCkg|idWg=Cv;#2yZT0}z5o*U!Dg+HZ#+xms~
zbA=k!sVQbn^;t@rrg^0rMbAkBVj`l^n6b$}rDESml;4ONM;IBJ&6t;8y1=oc6O69w
z<AxiCSihmfrO8Iy%S-dW>FJT`PsT8k&T^+j&6FOX?Ka;Xev+!PAZ64NRn}Cc`%|>E
z6fap$&fwG$yJjl8*fBlxca+xUu%?J+uKv|%)Z%G;i?NJ_aFd!~AwBv^1}3xY=saU`
z6o!Sl*)I{yZK9OB4YZ7!7;Dqv;up@(a{hdkFiH`GAPBPJh86<hQ#2uS$J1<YO03b=
zxzyG`?Px|fH&uPBT(DDytF0uXwi&mQxwOtT(|)-rSp?slp^==Vv~GZ6dGi$rie;uw
zbW`+%v;<;#-rzW`Zkty-FnO72HzGp5Zv^LNn4JDRQFANh!YvtB&|_^tU?S8zBuEEl
zw#N36_5TwxdnFxjF>TuK+9t1aMrpgXinfHdz}wRWL!nd!)dY{n`zGGS81)c0X*S1D
znIR~J3=M6^n!+{IsIJViwn7P+0BDWC4FLA<#~eC@H=-{XG2fMF3q-!0fyu0C7^P-j
zSYQhTLj~gGJd-nLiE3LZ6>r63KpPk<IG4^_GX!a@)57&kcWc9RsZEeN01NvbYKN-r
zed=s<5=I?uYI%+7QB82(A?h&B<C@bn{Y8R2<VX4`mG>-IXd_pDMlJ3{r>GhU5Tnlm
zjO`y44rRhRbg1=Od#WRyYpGES**+%o$P`N$_7M#Wjpk{lXU~zVZ6jaYMG^|eI;=+R
zPSt`SHfRf}L-GN!in@+-(SAjS6{>cS|McfBlc&RHzY|rA7sSnx#1~V7On;tSc@u%H
zbYi_$aD3Si(sCNLsAZrSK^=m931Hp2i`r!dAMgNi>>mk&xM{?MS2Qr0%b6c#7krFd
zGyuawqwy+@+2e$|jY4S`8pN0&#@HN2!jxN|?Pk+%|CrL%G||k-@E{(=Wt29TW)iZ*
znrfOU_Bcd67K`|VBpxTRRcs-kGCD{U4R)EPE+L7%CSG6f-i|2|!uw|3Y4|L_-h(f8
z3kwe_g~A7q$IVSAj16z}n)nQfTP2Q?-r9F1lLQd*`C-Tl&H4#u=1vmo77B$u_{d>{
z2qc&FT$Ys9V+=0w42&v`^PM(H-g~@HC&#3MO7NOwO()ZGiNGsya}00i3G$Z0-~hS&
z#;%6?Ci6dgEc7=-PzDrdY~FfbfBDN#K5{HQky4zj3n~1xed(oxO@z;g2~icl5`?r=
zqhytG7S=vLN`+j0kkZHy+IN=e`rk2o>2aFX3F5{aaa<)yYItqpl7t{Hj9ecuePJf;
z5$`?T$Ea`O+<f|a7lT(!qDVZ2YrKXxuTvN?3~kv?-^dN*@`Gt*Sr*i(bddO~hLBb>
zeQlwqO;5o51w7#I+y6z|%Nz8WTl;(7CqHe(L>V?9Ytty{kzKz0NdgQ0Rw17sB%g;y
z;}WxTU%<={Qpnvzm>VXJa@Z)3$$1X_@i-UH97l{NNoH}bj%w;CL=xcRX%at<M2@IZ
zB46B$HTm|2N{i8L8$-PMeAMM>R2%;{fjD1pI1PRm;Lv?v^c?ERfInd2pxeFcCx6%4
z()TAxJrQF9xn={CR~GuRyn5}Ndr2}wbG8O?3ClY2`Rh;u8qHZ$ny5A~lAb{>nIzF^
zY%b-p=Su@vTV7CMxS$MYndTx_m*!ZjpaeyeC>#vpc>2E`dh+cbJ#gT&_Ta$}x@8cI
zy;&@%zu;W*VG)~=QWqo|7C94FqEW0mn`1#^%1pCWg)kf-92!6n>htHAtG$ko4dU~y
z8p^bHVCV?Sd5Xnh0#oR`Pb<bUy5MZOb{Sr|0@IgmNfR39YBN~*cc8L&@29o*V4wEm
zvlc$+ZoKhdeL4y&_b17GA|k=H8<>0<8r73wrKp+(XNicUXOudOi7*l@sEU`ankz{O
z>C2~j<R4z6vW$0<3x|S6bMjM<JoWZpIB-Di!Gq#f5ta&kTK4TbXXj=I4_O<%*}0}O
zV(c|DeQVXIW!q_Y5`>Zkrn+EouFbH-)}PrP8{`|onUG~PN>&h*psGm}^aY8V|NIx9
zc<Z+wIDjk`)H2glQ}FO>U;C{%mruUKdpBlnWHlwgU;V)3wakxNOFQk>AR6gz!>#QK
z7HKCe?Fu!#*NQVC%S@hIi=c3UEe6ij$Be|^2cicLe!3?aZJE)x4|urWJontMjv1f4
zPgN$32`$>1NPXo4lh<ncWD#dk7Pom2mX36%Gw)t{j^16S>_&QNl)3yfN>(2QyjY_G
zo3|*FiEF&?3y;6^!u|KFv_Oj9-HVrfq~77KT|a$yX!3t6#tu1GPehCrjQqo#QOnT`
zdR$9bX5!Ea8YQwqHOFPJkmNEnD#b!v81x0|<8z6tzW<S@-u2{S?{AHo)p{Is2M&DJ
z9y#($PkO1o$*X%b2r7YKMA4*WGB1B%@>(=XmeDBbO1du;R4<K^mC9~pwX&Nvn7+%?
zC{;8O6G$!`47{&D7$?*F)*`4iXx2gv+qdtB!}|QjPYJ=#7#l^-)j=gm^JGT4=gnQ+
z{HV)p{=3G`E#G+eyeHO|rKeFb#)d&3&ef+uf92uF@BKM|wFv4mgavTFY1z`-_S}Dq
zlkgJ;`5t3)k=F#(gcO7`9a=-1BOwbr0m#zM01E^qbPf9II#-mn&#0GW1~>N%cvE1x
zXJ?(|G7QV1H`3iC!iW*E))WvE;(ViFR6e7=@qa!1)H`13wCP%o-G0TwN?(6~&zggz
zyWqAxKYxpg`~ZgcpzOA`U{jdLw_SYgVahsZ&KjyIr9&3&ZGM)S0lZ9QW>06L=XiSQ
zF#>RH+Mn_-15_PJQcH{ppB6EH<4yAq4t@1)htnM5!@;3LZ%Zy~@wuYM{pP@do28|?
z`}f};%#07*7;Ew-V`QuP_%<=YpsH82wLIB}GN!Fd3;XiYX-PnL*R_QdxfVlYX`|(?
z4PfZeug|8LWtD|ZtYqPRbWU^A&b}=jP_VciZR>8WidgaZNh{%V#zfC0+C2Qo<M+MX
zK2Q#P)*d|gqAut0eFGo&oBjLm5BR6Y>K5sM+Vm*7ii=#Un}Pdf|Ne9vt~+$I9^^&+
z$5@s7J1HL?Sn&KG?(x!rgEBTYD(lwWr+W{g4<P=Z_Ur#-kN*#)?AY!zG1|`n0000<
KMNUMnLSTZ7)W>ZA

diff --git a/apps/desktop/src-tauri/icons/Square142x142Logo.png b/apps/desktop/src-tauri/icons/Square142x142Logo.png
index a4cd877f98732cf229350bc4fa65ff9fafd07f04..183a972818b7ef400dc62c38add8bd1574503e9d 100644
GIT binary patch
literal 25328
zcmV)2K+M01P)<h;3K|Lk000e1NJLTq0052v0052%1^@s6=lw7U003gQNkl<Zc%1Eh
z2Y6&xdG>qGEpw+z8r7Awz3;m0x~{towqs(7V^jYGNCF|I1_&uX32B6oLV$!42n14r
zK){#)!GLkWeb;5z+ncoNU7CLDIsfyWbMHuYoa7HKyV!eREbT~|xpVJ(zxux40Zy;e
z>-0LkPOsDJ^g6vxuhZ-FI=xP>)9ds)y<T980cW;ee$BR)t6t8zak7u*^g7iSBg6nG
zpr`$|zxtB=!QcG5ETX?x|BT~QU#I>Np0vx#<BQ9lop)gRb<b$qc=e7KRl*Ce55x7v
z^_S_N;gnyefwN>S-sut&Lj9M%XDk8HGq)s!ddCabcfCAYEStFw)7-Xs<F(1VpX%#0
zaMWT;E+$~2EoZZpT|h?*U~nllh@L6%Ffav;R@UKMwyos`)|Lz5SmNBXdTy|gv!2QK
zdbXB%vJc?oFS<Z<896$f9hYrrz2Q$*wQaj}ZLtlV#c2#L>^*q*zI#6W$lP6D2~hIM
z#Yp+|EJE@c+uGJ%e9=|uOlV}P2x_?UCCiHI|8djy{k2^WJrnQqY%cSK?wZKT7_5-m
zRD8=9&tLV9*LAL1iNe;%U+akQXVW2X+0wshT%Pw2U-`ntfANpsy5*IRxexw$(Q5qf
zFKqI6CLDItg&RNCeX%J5^x6y+ti3E7-f-b%pFa4b-RFaalF6U!J)Vp80(Mm~Xwa6~
z*7-ZTE?M^nuPbcrDOX<M`SUl1eCiF-{^6O1S(B#Uz8TebfANxzFMjej?!K|-+BfUJ
z{olJ2&bTsgWJ#{?yzEzA`OAf~!uD1dYy}r0&7*ASzvVYJoO@O4i{B&!y@OPLb1J&6
z7btM(V+)w9J-5C4kM?d`{q8gP7OPr)6*8I24Q_TC7^wo&TRD#Ptl@H|#R;QKxaIZd
zRR88*-~YMa+WzWKny{F@u<U=%&j>K|jub0Nj_bRwdF_Y(?^&O1zlzl*Kig)k58UX5
z2$<b>b-VkQAHDu_Kht&1TP>sw^*6EAIh6o(>Kw^)3>pKi&N)4QwEK(|H*YZ4qaM9Z
z+MCbe*w799a7YMm7U(SiFYh&Z_lXKRGJ`;G3#81|adfQkiMRgw=YIFcU;R}Nfh6#V
z|1lo1*m`UA@>gx!{>Q)it`)Cec0KAcwaI4orGQ)q#^xZS??OZ&3_BlA-Z|=g?Ni70
zeDm%{-uvj>p$E#Ct>F|}?1cy#j=X(#*Y7>BZOyN3H&&vK|0C>e7aF*s6ZqP^6!(q_
z<OM^91Lt-#enXpqU}z2<Z4(F!%K({ojnU(|zkSPxzVusneB<?%s4o69cy!R+Zg!^6
z>)Q6(E4MBG<(Iu|`K6n$2BKc8F8L;#n`Z%78Hbvb(LD+oJOmMh;OU}o1;|W2IFFro
zOyI{4Oy7Rn!@EDYXa3>4^!uFL*oVFFvL~BwY5UC|?%4GHtIU;VoxfJvXI#i}Qx`Dc
zOYxZz3AZX?MhrOv$fX#6<qF_D%jA{OG11!DKxos&maaWElKaA2fB&D}{=Kih(S<LQ
zz&H8ou$=LyH~iAXum0)E4yQXpkP&spid@K6lc5a^eE{pE#2kPNDGvf-FW?OWjS55%
z2^i945#zRN=l<=(7JlIipUZieto@|H`7^c57Z_;R#+G;f^Lgvuca_;^RQao<bH)W6
zFYf}P2>5<kqUr%$GWY@@-@pTgJ7*<U_C;vzT!!kx5OQ6!h|uNuz5Uf+{?zZh-hY!D
zyywn;f3wG8@Q_7dWJ4l3J3IT({7&m<yH>j3Emc!EJcOME+PVRUIt<Gp(GSR3Alw7i
z7=WCaf}E~_m!i;`%oIirT6pkS8ee_9^zo3D>hw`gcDD5busAxTq!Yb5|0{oe*`_~z
zXSy#}^=^{RrYj7*whzcfz&$?jl?fr-8W4H_3mCUKkhXyK3~**U@C%)s2UQNEJ^-gZ
zjZpMJBB-0k_T~QKmw*4mzx}|s-_ICb)kSNNVh%eixAvUtHZOnUjo0+PbL&+ctlxEI
z2$Oa80J%O$gOIxbln();W8kBnz(fj%AMLVleVCoNZE)aE9+}&BOF23*jZ<WulE9&O
zL3#0Kpa7QCYWgy-dC%n=Kl0IRPgj+_Mml{lXo^x|6bzrAl^82YxOE5_1BcA9Wdf}k
z{kWnBcv+tFg$0RB{SfS~G(z-4O4OtM59U7bi+}RIkMH@xU#fP6{LeOFZMv)Vl^Zs_
z{q65M_m6w7sMlq!YV#ffPY+~c26A{1?6@n~Xr6!VyG8TQfBfjH9<M+8%}7>5oMP*g
z1kN)Z40l-9y!O)dpZs!L@2aYGqjcJ@Gw{0QK&OzXGKQ~JfrsZL>J5po0Rb04$haW^
zlLL;Ufz#3gyu1^*)G;tO9iqkC3$w@MA(lZ%yXx({zwn+ne)Q%q9RI;*DFvrgTD3{l
zjUWkNYQ4H|+sppscdq`{itF9FtW|8@)ee*wAP&w5K9Com`*J(}@S)o_PWp$2mZsq+
z+dZA4bsT+iGCXU%dh6@|WMkXb4f<L3G#ZuyE#^5pE?o7;UoLd4s>*AG({i<em-YiK
z5~y*8+Zqyk%L0BNMG!!U01%OWL?ICPfad~LPl{?4;y>nreL;j`r-^xUGos-@7{L+2
z#8}3;U`6!<A9?d<uIsw=Wds@m4_#`?f(SHZNe#yE)zQcP{SW{2!J8KjbY_?dUz8UR
z%{9PgdH91n+MN$Sbk`074TsSTv`;0_oKnC^3TZ3M6=!_%6R-ZizxuM9zCx$@Cp%%<
zJ!Q<zn=e@T=l2)8w%6?!!7f~H;?jNz%42E_3N#Nc2vK#VX!sIQKtZz9z!4fa^jzoy
zuE$VzCFaUfe7yvW2*KOBQkaq(fFT>)od)U)PVe<As(<#uw|?uq%(<5(;7Jw%NKo9&
zfG-W*_qSjB{E5A$)#FG{gsdXn+F*C)Q}>L0YS`bsn}btueaZpmlmkw(HuZF!Rov|P
zmtV8u%uaN4l9~UXs<TgB749yc)$_ZLEo;BRH7*op>Uz%4Sp}?3G0Xz^Ze8NOc`3>s
zL&Il0@E9T=RK10a7?%-%2#_HV`hZ^r>Ml_Bf#C(<iwh95JVJhX7Nfy>@PQO~)di*-
z_U2c2*FW?dH{ZR|*sxZCXUS<!()9?DyydQae>gML#+hM-tYYvx9?Rk0nMeLu|K6#+
zP8s0nJB#DOb$zcg@^yR56^?n$>g{i#Ad|rJ|L3w;TorC{&g^{ut~I@{<~UOze*@zy
zRs$>2z|jD>wIcD*oD>xgs1YbU2I(=*d~g;rPGF&j2p6qR;DQGghDL*-?n-f@B*hm?
z489e?T$9JJyAgaS3sw?bj!W}JZ(QYm@J;VL+{4%O3Q(-G1U&Rn8L)eL=#JeFxBxf6
zrku=o_s!h35T2M|ODG<v>N+KWV^Az0CAwK>%avDlULU4x*IL%?zW3di|Na`RS`~>U
z{hI&M`Xsd)i?3~c$9Ffa_?6Y>I_Y=33Z}J^p_rA}Qv+_9kvOm*QK7iS1%ifz@T3sF
z)bWk4K_deR8N>i07v@9wH3^?GFCTDS;6O>@vn2*ABM@#WV5qhM#%K#rwK%3Ee*Vpy
z#jjm|^CJ#AG6aMtfL{W$n4SO8J=2HHy6FrLI^zD3vCk_rcWPXg|8||^Bh(GRNYdTK
z@k`q-`LlC>z5`Nj7DB8v&wf);eD(wX=h#cTulV_#%4-bv)G2y$K^Xe8KmUodR=xKs
z-fdJnZxpuI%h2EwJEwuWrzK|UKwY^fWknFV43Q@x6TnbVOn`~VWyQ~t)$#Phs{-Bv
zL#-j<)uh;0miW6e&{_~!II{&OYU^Q+wj!!Jrl=U<d*8LA`{s+@{h*CDdudgfZU6ya
zJn;C;H@UyUJTRE$L$%?1@l&!+iFDjS#(eYo%YXk5|K_saEnKm}mEvbj##^`)-xr1)
zMd{(ly!ZRZ!$<eKkN)t%eINeu(4DtvQ=W8<buipzzx=J2Z1}{d)7?GQWp9v<zuCaF
zEfHEkRRAFeLJEA96_G-C0M%^Bx)>25n9^_!6duPo#ED^ozAASrm<@1;!7NBvZ9q25
zU}S*pEsVdR02~?SSoxz0`uRA5mMXXr_~kM(Z~DEjee>4ipS+Q=FfJ^!_?S1Z{f(R6
zc=Vyi2JZO!!GFA3$i}JdqfQ0jSaA6H`K>>5^NpAN)s636w?4Hc>q@c3WPCFibGV4^
z6>{!-Kp<UN^F?YQUHH_W8hGcepR^?w0)6szT+?D+aMh)2Kl7uu?yc4C*GdOx8#wAo
z_-Vj10YMKmK||mWROEwCZb%5GfWnk}Vvz(BOamtZcnlo%Rwlr0fMpoBS^&FMicA)e
z8OC?CGQ2JaJbDN?<3}!*8?*3JWpGEj!()xy8~^+>AHH|$AKssUCRrxBvI5nHK>eoz
zG$*fD#ppuV{5@B{{`<fAp)+6Hvdwly<W<AcxMQa00pkb+Zxtx-0vi|uKNQ*fer(!*
zf1f;Z%h3KefRzK?uhF1MvDGWK_x{0;3T<c9i&qQVIn%(tS&3Q-2n@=urB1JvMbVZ;
zhRVt`Eet(CfT7<J+GQocp|2{9rel{HfSjzCZnc9jmXcDCpWy(%c0I#`UJBy2F7zXf
zC{=O#TXW?PzwRyn_l=*O-aX)c=U)>mNh`$E|45lgV!Km?PWqe!CussQ7(8RLEy3|I
zG>(lq`DIlEZKz8#ZL_X6z)S%nvw}SyiEsRSoAXC^?R(YU%Fb^9HSvTDiWM_wFZ<nx
zm-Srh=PrnN$0Y{eJpoiWL}bRb8CCvgAXXiVK|vkoB&MP76__F^q+n!WIQ^ai4p|#z
zeRLU^t{>A`AYlnXNwucPSRutEZf6W311{RiaCgPRh2L#OUpft=RCO-wUse6R>)!p9
zcYgE4V^!=ulz=B8um5*R_^ASzQ^HkcP_S29eVex|E1YxHx{hCc=?%*+?7hVI1@pMb
zIWYDI;g7!5=DhjV`!5;x9=T5+aB`AqnQTk(x9`}t_IIzaH*<I6Yoxiq#4zGZh>R3r
z3XmockyX%vsVe0*tqB1_fk#`K1S~v^EsgrBfTTdBn4gqRn99!r<g)0I1&lU;w*aX$
z<1)i=Sqsol9rAl6&i)UHb}o<-zQ|_`@%|s&>VACJd;7)z2R$NbU2N~%zW$;$=e_fD
z5B>eG1r(H><aJ5}$FvMs?CQdn7k}{A&;P;pmy}#74B_5i$h_*qV;{S1>f7&C<$Gm0
zbiIe}&i>46|LBtSfBgY_b)mZT)o_L)CJvV+k1`CA1%#Fq1RN0qN8PlX5h!#ZtW1S=
zO%&H8u8GCLF@2Q*1drX6@)iUhBL+_Vpm>L80p1G1^WaVvh#X*B4(MeJ`R_@r`8Gt}
zkvzwkFO4wswp;%E?(a{0_(}#pwk7hv;3$)AGuap3_TGapx#_$O+pc~`>!h42CEVo~
zWICSkaj7yKA&|F~cmME@KYi#Oa|69jB$)rm;}#y6KKL=^8k!swT^Vk*&wugu{`Y^t
z=*X8hTqo=WAL7`E4tl8;LybyV*AMP8&OOHUb4lt=fv|)KWt?{F^jlESOnyhF;zC)W
zaPh(72PlY+9~5ANva<@ftO7pO^n75y%WzBrhhD^R^g=2sLku^BU8)<^w_p6`%llI=
z{>A@}^iGzB-0MxtE`9Y)Z(X;cWu+f(Z0p=ie?zseletdnyDPmUog5YOFmTTB{mI8Z
z`_*sM2TU*LJa{x1D9N!=xkUM>+6ibcoYD2`-^z7utgpO6IxNkxZ$JmX5p}j3#LuIz
z60!z}suZXbn3#U36g&=y<6@ucPlc*Iq;7r!47n)kkgGT+wnFL=62VJ948gb&FmRuN
z(d$x}TbDw(Qb<=~$dd>ip!!<IM^-UDUE&z7NvAE_S$*9Z@BD&^<()dtdGe*OSO@xB
ze{tQ_@A!+qy5uX)#xv`7e;#kY>5`9Skv2mSom8ptDN~|MXa_DT;lJE*^v@=Dt#I~C
zR38B9LZ6_;v$QJzhJRhr^K+Tjvm|fr=6K{F;Ko(or~yPZDP#=-RR&%KSPfux2HDWo
zA@Zf5N1RP*uuz<{2qXb|o)8;@r5P;8|29Gb6@dm&4^M)-5S(ZkRRRx#sO$Hjh-6C}
zF!XAM$s90SXE-tooYQ|5ws*Ydb7&R?_2np<{jHyV{k!(x@s&5t{>}GZ@`>d)?(l`&
zZVO|1_;VlFy5rAoxaqsg&E*|2(eQ;09JOMXy=U&xFTC<kcfJ3Pk)6M(pHIa95(Vp=
z3%B<C%5`?1thTR(x%VhguIfUbAgj_~y7gTJcwK)lXBpTGU^aB!MhCq*rlGW)K*EKJ
zeU>~QyCaH+1Z!ql^tXm!a7>0&#Nb3g8WJf1VF!Rk)KfZ+s=5nc)q!KGS`EBntHj((
z8Rk7;vJu&{F0Ws_;uWt*vAz!V;nn8^yvPq{r>5QI_8jMYxEjvx<DB0MQG3*k<i7IT
zKHB@@`#$!|(-(DI_+lNl@fSAdILR*R;X?4h?5!Vu;`91v-RZ0TpjcclqF$IsM~LP?
znUhq_NJ*V^t~`wDXbYDtjgD*FhzV;wxV?pOUqEn`EHS8VM_l0Jl5zT~-4cT#V(`$<
zbv~u)H)#v-M;U6v6l(x>3t+ZOSnYt_1xN?_b$xAhD82uV#qjYI!z1Sb$G!)_k8v~t
z5w>Nvh_3Y3%ZBSCw<MpjCa0<&xa~{leCwX`uKeq_o$>wiZ`vuM#sKHz^I`Zvqj1M=
zPdqd#Zl4KCC)D{l2|@BH1)RmjwEu1f#7%uS?=GxbpYJsI(IDVqgMpMJQZTCT5pRY^
zb-?hcjbXqf<3X{D1-L@+U|J$=YEUV#P)#OI&6S@F<JcyQL8FR-P2i{tWH=P~GBm~{
zOp_t10JSLzdDKupGg|?xO~C4su=*uZJwU3Rp(24l3xP^iqH`Hg9%QKb%<RqPc$>5A
ztl>ItS^D{bQ0}ZfaL2p;*1zV~jpyD`3}(vHKgbt;^B*dIcFT#|K3v08Ngw#hVFsR}
zz*(eO>PtpIqBy{SZ5im#GwdA{h-^a@+sK{Jh0aR`hb%@QP_5K3TP~wf_rdKPTGzB9
zGAQk*`4fyQq!CDx6r2it3OI}>eX1nBQ6@}9%+zMpF3l+#sL%Qs+e7^E046uMZKYs4
zj(RZL5=M@3s|c8Ff?5-}lU~9%@b={;o?p)~IF~_hOHBk1H{2(Ge)X9-u(P!P?z?uK
zbNH3H%!>E_)BHdE^NHJjI|0nel*pV?z)1!fCD{UHTyfYO14)QIV|RV-iuw(IdU;nz
zI4}zmBB%%?ilnGjd@(iSVWH~tFbZud7E8kvUOhCuY6R0TK(P!bUAC$SCzWIEnlykQ
zSSUFa2bHB!jn24DqUueQ?*LW~DDCzUxFJlN!4Cx7Mip2n3C38+O@pV?S?;6>NH)x@
z2`k01I_F~L3J)zEz-2F~g?An~!AHu2cRl%BC_t$9^~8Pq>i2hsYd8Gc;1_?5K%?1#
zi&T>r7;s{8Rt%D42F(+#4XqTnQAii9j?VUcM{h3W^nUfukBZgHUT*fcoeOTH?9r(J
z^A#6$w~j#0L9hu(Hs?oS)$GV#%tK>sNJufr;xMV>nHV&b8BsfdQ|hBz3-pzmo+=<#
z4NeU+I#e~K&olv(3V+Oikt)ElY;c%lbwt4ew~Qde4Ff?a!oUmspymr!mOPg+cvp(?
zAKcX;&T5T(V`RMWp?~<sv5MHY^C=5@Dp;2I%0u`3`mH<neY7e^=IJ;HG$(sKN5Dx+
zTpB2Hi6vRQY3Mg{RtxKFSzcVec3scP?d$qhUb4Dp#U;zyx>vUrI^mcF_^>cGG7{c(
z-~hjW-+g?(E{=g!4uz~V5s3LmeKGpDCx(xNa$!ygW_iIceRuQf4_;j6cE}*Or7Fi#
z5NIf9<vOc^AvuRC1`=pgCzIgA2{bBT);c{^*D(yhObc+^5Qgo5n+7Z}6w{nfPyhWw
zx%%k8x8^sT(Oy_}ezCB^Y|Ac3-pRr?Efrk1W<pHkg!7S4etGXbNB{XUpc*A0S-KL7
zGVKk`0z<QjKI~Lj&k}H!P(7(+-qaW^1xn7!p|`WIb@i6@y=yPoylVZ6Hud$NwX&zb
zwXLNSU^!HM2Q%{=Q?qdQkIS%90|EgvW%QYwS6w1Db`9do_kDhH=fr1j1c(UwpO#zl
zcYQ>Pxo?_Qryp_3qP441nUiG7MX4TloJmm|ot|eQH76(|Vw^E*a7xmLbAwA527^gI
zv$!%rrp1spnBUnR<&K|t`0FPspSk%&g)=smOWUlYw_vY6rz5}NlD5pUO}2?b#T`F>
zZ0hl^E`+<k160Cfh*DC=(dQ^RV@YNCiByc|5pWXMlK>?~i27o310A_`d-eL2?dvbv
zxcuywZ0_H1@tVGst;;&QV5f7a*DcJH81@ZIci{lSYD022lw36@h2UV)QPv6)jVQ##
zsL!+3^6*7x|Hj2tA742z_t!TvG8xUgQdgNn)MmgN%Ds>$Qb$SvkWwUpu?9`-mXdl7
zSs7I|rVC059l1D7oaZKBrvOgw%3v@IiA-9eyU38TWGQ}cDN(L_vV3&fJAQQ9yZx)p
z6ZIt1lDH^siJ#)kCPAOnJ-Yv?lm1f#oWzJG7A0la=<DdtZM|Uava^0>W8an+Z(6l}
zQ-9A2q@6ZMW}{q}VrC(%A3Z>NCB_?JM41j}T$+Z#2x+iQy3063$h2%FmY2|1+vKPR
zo*D8?^|Gz+ykTMI;kS>ww|+9wQzea1A>Fc!ffE=K1`)B;F(!;ZsYqNr1Xo4CB&#C8
z=vD|tLrn|HxrCKs5EkPWrQarmZA&<5@Sa?RltEWlTMrG0MLAs@$EbI=(BHnf{mR#_
z>s)t9#^JfTU!9(=jvbh-PVHZ)Pam6eC&yis>Od{jNy3xP_!0uYe#Pfjd-V(fhfZvJ
zw#z#A@>PA?Z``!{yq9cPy`^tiS04&3EeNT8QH%T&3z1)1VBB?GE&_G^Y;I86DPdb&
zHS`4OuBrZ_<ohvMi__1jr=?B0;@7Cwl?gZU9VgXMJ$LPUKJlXihrU}E2aju>i(Zj*
zs}b|yq!{-&QQ1{M43TuhDZU9MxhWM8t4_Es2<jMzfwCm^TI5NncEici5QWr+Fl+|P
zVLa<dY+3E0H5Ue$)aN95=wl%~(Lq~$Rpy4bzVxhL`Q(mG=b|;2LCO+H+aXNT1LIZr
zd;v4nDGbkyO%03<J$8I-`2Mk(@m*uHBl~8;@d*zLu9U%3h>RDj$j>&Io(6FA$ux`<
zTjspt-B+If#*bWf<qqCfXoK$om6BhbT##a5$Th<Nrl2eZ%uy*VjVCh}K|(c^<f{ss
z>29Knr_MqA(GwZ1W=K$5kQ0bV3{wjl=CWnyxm)Jnb@wA<|96d`A&)S$ic<KEh!8=%
z8B?m@G*0@#BO%BY#q9>Jnwk_0leN)-ybg?G14dSm9?SqNqR!il8zvP3Ig05BYd6)9
za`Yuz>W>n_mWl5Cxn1x0`t|3%>6(1LSRa`81fTaz+a!%T6ImxG@~MI-=6lg!*lcg@
zmmQhQ-D{auyEb4oRJ;WYkB{QW@sYg;2M6ytF*>qycyjcyvC_!kJZ4G)_2{Xr)6$7x
zr-;RoXvNj<zTriG`O(+Bv#Y-EAt?rqcxIy^dFa7O22GRxS~5vSLy@M0ARCid7HvKB
zMHY)7NlbCl#iJ`uK#8<UDY=&w4Noxc27$j}<&AyQrN=&YqV~6MUp&Il2W!C0GS1BS
z!mD^iyR4*ML;WWLj(U!)-ICcwF)c>_4Oy%d5XCW$K@S61UJTK{rUDZLgZ~T~a!r@6
z{)2;;Z+UG;U5N6+Y|XI^i(3Z0I9Xkedc;H&NL1$}#^%(;@l$46WX!C{rh(SBh;M8^
z!@gi+bcT^}&yaTQ=8C(3iODG(KR!Bo<k0XVhmQ~3b!h0wy+d=uN2W2oAmBa;O#eB1
zdk%r4-`r${^s2VkeZ+Fw>ytymER9PZxLjQf%TS;o|Dxj(BIpu8$f_h%PGwSw(y6Hx
z&7hi2WURX;JEbl*Wig!bP;gFkP<kN^AWE_gjxexID_1^a&CPF{-@p6I<><kC=+8+N
z9xxY3GtQ`TXX;i1Cq`df&q)Gfsy-|Cq}mZuBw|1;1&s|*Y!lk_y;Sua$2PEOO#>~R
z0uh<Fraji6Nwc-fFIxF~doS4Zs?1E?t4gqp#ckmW4yl@E90n()xa6LYB9vq=DW#A+
z5a3=UP^|;gHO7rG6Q*IgwwV@br&YAJ_o1t}$y|T2?0d!aexG2Cm(}VeOiqsB$brG}
zJ&zr}d-s7u-+p9Z|J_6K$j~ztR6i|?!;x>zWjpwx{Zm-6p^K+720Y@TC=k#Ir^_8%
z6d8j=Qg2C<zscG}k<h=RfRI#66JjrKW)u|E8U}IU6nH2`5kgSb6_dV6y&rgXOY8dj
zhMsrbwtMtFT>+-3Pc9=wU^e4Y^&8@H5@VbTDJUp5sp%PmNcW|bztl}l<rNd=AEn@o
zn`xqm0=C1zQxf?MuxT~5#6y)-CTB+?f{p&33s(Hm;2CRvPRvwYpM%@nFcC;{wNwM<
zh$sml#-h!H@T6+2QuCC+WKu9ru8iCyhcKyXt?HGGyB>IDoWYzhVH|)@V02Phk!xue
zZJn#lYp%Lz*$uCaUK3f3*F1jzUVP+3w|wraN5Ama2zA}Fcp4yjTEGcqX|CoE`>1uB
zdv-^-?6Q@pOb04EA&;cg0`WsvJXKPwEsKyMiUg0MD7G|9XUfFBK_wy-4*}d{oSRaR
zyCH&(Tjj(MC)6o`sn=!Tfr!Ma{+DE?OAmeVMD?#<t(+qdz%u|#NpOoEab~Nm3n5v@
zHpUak=yYKz{g#V#(Ks+R93Yh=%OmNy&|L_zqO*Y@Pz6369LWd{U$gA2t`F?ru;LZr
zg71Y~a#M|;l?<jdv?ktSu!we=0z6+L^fV8e6L2V&;_6%?6tTq<IzYD~bvQ8TcPv#~
z;tdg@<}$P70ppVl<^jV`XSpbL7~z(epA+7^ulHAWeQNOWBaMImgm$4nIdFbLB8N^h
z1*+c2{C7W+vON3no^k*9u`=3vEM;91DTyvzskl=U#Z@{DC|R$Fgb)!z5voT-wn0V+
zWvG6x;+aS&$^`ulw;89C?6gs@h;vv(qTtFnNM=AXlj0}aFw@nItKRaeg1O_;2sKYI
zAJlL(QcPGRrc2S?tS%1GE0ndNim;Avbo@gPgOTPzHZLMQIHlkzeW6W<+!e?A?hq;4
zK;Y5L5~8q6q<L>~+p^z3x@G-q3$-v5LB#Dy8X#*)Uy1onsRB_lth{c-yLHmBOX~Q;
zr|~MJ9Q7G@)dQT!YOV(~JfKc8WS^lHKvX;_$_*h%p<4H)sD)BABoQGQpQ$i&wvlpn
z{-f)B_s5N}w|M5u^rd-vf%4O408P6;{NV7+-7^;B{I1&%hyVd{ZInJQVHc?YHm1;q
z%F@t7#Wo5kB2qvJ=@CWBebK+EVXb~Il7i;cPyx@(YyL~78?Xxu%;u03eG`DV32E5y
zMQ9gWH~MRO-tirWZ#gp*!6*slm?dFTj6(4VlY-oU@?J4$=zz&!D4^&nfR2Y)>?#Q~
zX`PBwU5M&APFi4DfdLI0EV98&K1~9<&7HryXYJ~n>_!;)G~A0!WdMUmhDo#^aB_8R
z45<!?(3GNDlcG^0FlaWTN8kwn8o$!;B;0@zkhtqh1s?i6dfs=zoB#F+P)w1=>OMrZ
zF3EYqwIclew?@R^!UCVH4n3+b%G2WxJ`Go;txklpJGk)qt8=O4kC|b2^@l&)=Uo4i
zZKzj51a8b~lRBePbsBmoa1dC+CODGdAR(pGEIs9b=+-CYC0)cSaa|a4-GE7YZwrV<
z!G+6&R%nuAQUNFTqEM_@_R_+9>BOC$2slsa;M%16ixsEVRF@%O#CMRIVXo4t_`EX4
z6*-K8bNU;S!H|`)G<Xb0qOFC&%y85~$27dU5Tf{^b*;bl+VyMR*hdZXNC|XIRmkMz
z#|VW4ns&hHl1e2}p9Jca`1o~GRfCm|Pck7S<K(WW2Bj+1aeNpuCM*F?btwXNl(;j4
zsqYE=?Y#!R@tyq`9i2fW$N6CS&W|M@Po6xBqg4kDd1&{*>_7gdY5KW|;Ys)Y2alrI
zMJFq+&BQgDNT?IQBO!T6aVb^(RYoNch5})rK}1#JFp8gxB>YHn-<R-+f;lf?q=B|o
zKw&kI>1QzVWKDG7OZ6HnYrx1FywIBU*Y>`m0A}Q5S_<I+R$5ZKK+uV%_<%rRP=!gw
zH@dw*wo(P+h7<%61vGMRY3=4L2e2(5ondHg13ZJO*bWavAvoW7?dElF*(O<vm=-1-
zkd%gy>W!$91z4Scvz%@Ma!(S~c|G;Z3ncuIT$MmT-^ULxq_5hls0m^8T)^N*fFEk>
z<i%DhAdP&)xaUgV(re=Odk65yqXRBCz098RFTKN+BNGY7`6O44wdI)&e(;eK(<@)T
zy8Bg^?%i|LZOP@#72VyK84bCRT!BHU5Mnn(V2Om(-&0ma;ZB@+=^UA>ZnVDpV%=>3
z)E0obA&KRE5S?w{$k4@*2p2dP5m(c*DzhOL=E`U^=K1{GWXQ6d(*+|EmU2~&L_ik9
zAZsFZ@Ev!)pHRC|L3vyyPHT%}rO8Fb?kXkK<XKAH>PW$27EGtlhuwyN2V6>14LKms
zWS9&rEn#&qWY+=NE{R}DiqZ_=62U%HBpY3nRPIr#3bzW-RrNu_q<~CnYDX*((Kid#
zFiALQN~)<M^d-9cE$lfmi67qmxZjqwbNk1>{=KR2N1uMC=<UxKa3lgbR{!eHrsjHw
zI$JMx?!AAvNMCg^&lmETpCPdm&DA5IP|JWUiH>P>n?d29dR3~Pr|T#&1%p6Eb$_Bf
z(9dkZD>GEa8DF~tXlVxy3t)6FFn*$j`O#U_7N+0_Wk?<(@LZl{DKH9V4F=1mUX#A~
z<hIC>Fq&4OTox7nn%T4hjTYR2>Ojghne^4xph{&Kcus0=d}JW&+6a`$$3r$_!*-~g
zKo&qi8WOy~kXj?rx`t#r5DSw)t*pnYkUXc!{~<T6il92%B>I^ow;5A()Cd+xmGwz#
z)~Z&Dq-qwThU6VR7AC6|eCJ1xg}H3O9G<yja@76Cjhbw9QVW1j4W1CQm7($%F0zc`
zfwZ-<de^-VIagnCIZWGtUwu-*n^>B7ygY$Ja;d0o>b8lSj8@7(%Aq@%D;Gf*w6PH3
z$o&yQ&e3-sgV(|^6G_a~1Gr?YQw~gJGiYq62Zl1NR0NAsUsDQ)D!)|MPDw}tfl@Be
zox4c;kcpL`-%B$fizaAnk``N1*ck~w!>Efds*>}f%%bLd7?`{Z89Rq`rV}m24zzaU
zknS|lz5!@k!BA)cMt6air=+rwG<QecMHHP$!A;$b(Kn77qM;m}0#|%^s?i@(At(kD
zjhU3b<hd3LmB_`{zq3o2;9|bA-#J$K;yED}8qXAHo?%*rj(0pcaBz6xpWd*#{pNoR
z>Z$6zyB=^ZI_ol^MyYn}rgZapNot<3{-{o3^0bqNX{PAPfpMXjeRI=w)aq3<yt-1j
zn7I~A*E+DtN}=y;pghOmmGWXfGT@P%GO9sJy8kU0@Tq$Z-;{7n8nX{2k|WSifUR7S
z;^$}!rz$aq&U{qkBrO$q$Vw4tER(wIj2js#U`s*mMpEL`LxW0<2)T!<3{a|<F%e85
z8?HcCW*MA}fnp1A;vi5RpgN8L%K}WY#)jZg7%Em`Ac(puDHx{Ql#?kYo*9!;P?nUG
zI;as(w;P!?I)-ePBp4ySdE0|zX?-DPaz|!Av%{04V~GOx6eV(LwPi&-_)jCH;#n(-
zuY2G4_<`!fhUuKM{v!Buq3RQ<c7cfW^ayUiwo|Yy2c~7Kd9iL#!9r;imFgVIwHbIp
zL%TC(!7%eMtvr~YLUqQ)z&#dn%NSN{W0)TYZ<NwP1VrYugbaL$FaU?ksYsSeLF7pB
zU;}jv5Cj~DaTclxkJ?ql{V^&u5}+spBCEq~A*?h*%4VE2Rmuc7j7MoH!iXuMXoKtk
zMeY`dVVU5mG|XH((tRChInx5`jd1K3!?D`}xU(}b+#2i<NT;&Mm>D>B1~!>h&94R%
z5tqs`>vS_Auc+c(VjPKX7D~l?Hu4<bx$AzE%k!>fy19eXpL|7C?0fK;2F<g`0Hm=;
zxBr&C(6XbLzx2}MqYt`_F|$3p6?M0wZuPX2N7^RO<Rg?GW=h8}S2=-deH?C3LMX_x
zau`Mirjdui^I$9mP9#lfD%ED-MpzgTIDChJvtA|9cRo;>U_1&*9%mt9K1@jpga&L|
zicE$hZAhd{AY}t0rNAR31-m5ajYr9<_7pWn6nGdX`UGWF3VbGmqxuj!{vi!jL<Kt1
z-wA4`J0NBtOJ`tY3rKf#p>3Um-m@qLVi>$vqFQah_vR2(rxAH`$~sae;20TX>^5Ya
zF0^F3kk1rgS}DaQP(CRVYJX5)2ujm+n?@4w7&2`J?%4S-CZ{G{+YWNaCja3BrD)f;
z5<=TEy`BZ&#8qYKi5c%Z*P1+YpJ44<jt$=`Hl9=BJ$(*l8xmvl5(kGSF*-AhsyhkB
z>#*zyj+2IE=3p9WFqxvsTwvr+Vw!}`v{buYL~g`=OJMqtfg=wBYcFT$IZvvTRYnFv
zN`aUS$#Nn^=`^L$6x3QE>jO&9!;~7jq#B^69!9uW*rE7`8bjo+9L818$kO!`>X1^v
zO%^L?0L1n2C<C$ziic`ubFhj<<X1UZem+$8b@Xm2=Eow0jXI~PU<?)vo<bxV2xSFj
ze+(tB0ah`<rz}`Ji)^X~Et!54vfaq1+mSM}$ffPL2d{5{Vmq*F|Kk`OIpRAhmOC+Z
z%jaf-+duSd3WT3Ei$iBVl;y@${hqg;zu`^yzv+fwsIKhqbf|@prCm3~0&4YcKC#e;
z-3O0}$B$3q#7G%a^9_Vy9gYoT(kY}YqGlR^G(hPsqrQ~ts1u)ttKLpf1;!r(TGjyl
z+ZoC;j7OdjDk~CHd&wb{;;IH?8w?qnPPhck&w)cRvEmrRhzAZRw?)>3EKZVon;<fn
zYB(CPzDo7HEUD)2_)MyehX^55`!NeGNcT8cwjJnP4Gi1|OdkY~f(XKkRKZdTNtrYl
zBb9^=#xpwh6Lke7&mTd>+lT3@34>)|vOLmOFVc1|vUWQ<S~`()0^Gav7*5O%gssI~
zW@P&IA544SyqR*>XEGRmj)0SFDAv<{(dM`R<8{}(%^xVk-m@!E4Z4(VBA@L>G2bn^
zTY*<!e;Ix`6QJIh!-=60>^Xb_4<DJt(ZLGl=BprTxI=M(Lotr28=s0(s`<jgWALUW
z1|I}AzZB>?7pToJsss^>52l&c*1`cCiy@bisMrjiD(c0NnHo5t7=J3&7DP~|z?ted
zmZDDx+axc<l&(sPtfZQ~L%<0c12wh{I}gj|!tSzB+ydTz1~5COvM7WU2>EeMDxQ6*
zo3nailj`xs?vfG%&eHIF7qxl~zCW*iR?Ls1qva?rJbN83*w&4XK88w=!hd|*;@|k@
zopZCscU~@38SvQy&9elYBoJ%MUbOc2_FZxDuXayP(Rjv)G-|4>?lvTXT7ZRli9zDC
zq!_YkhSqF1dRx13<2C2v^)L5O4`y+Ed;&Z7Okmf(22PwPVSbKy5H@l-1CC|rG&Gc;
zkf=N;F|-?4brD1TJcj9=ssaxlm@2NJrX(r&$cj0(1gMrnz@hA)QZ=fj5GFL22rNak
z3DsOxC4Kr^n~VzdU=pHfsIED&JUDS_03(w^s+FN-HL!e}5Y(VNeh))bCV-PQp`2Q^
z^OfICf^k)Wq<ylafaeLgZXJdQ(9x2`dFxi-f~_66;Jj{Z-O`4>o(xb(17!nf<N=<;
zb=O@iF1lz<?tQ;?_}oc6aPPCd{j~XPfQF&fId9eP+;{mUzuZ|WMfETgHs^*io@x;f
zhi1w&w9GX$0nd@BRRT;dNbDVBNSg+_TY9moqZjA>oPhnh8YbuF@c5Bw+_$@oy@y;(
zPWzzdp;IitAu6W_%pHl)vQnb|Oa^bBsfi=J0;L&G5&eK-T0^QGVaN>;A6jwKW4x;&
zOVmuY7?&1=nPObE9ZV^R6Jt|F7kZHgrR<9s5_&ErwGlY-%fS1#L1fz`4&4ROn2?-+
zsVJ#LwpPSfRS1XI2;sXGgj8!{b#&%9HmvK#`J0P4Z&My;u5U$0AGOe_sb!%w>tJY?
z4Yy)L3Ja+gOIgkIfZ(rt{fm*ZoqOK)p7&ieBX>TqbU@`PEsxQbCT*P2^PW4e-0_aH
zN(;R1`;kqYKnhN%#7`Vuow+FGv)UwCc#Ko5Li;7q@1&?Dke6`75Tgqc&JaVJl|^46
zkIOc$#LF(M!wna3Y_@`j4;;s?$88)LFQ7Euf^;^E;iDYumjRt;3xqYHbx*`$q4!sG
zaUE1rnjO%%eFBU+{N#wpJrN3^=%z}!X);b36*WbTM4?A95MLyRQ4y0Gm(CWTeI?@)
zhovYD2=KsA&DSUt@EQRc3l#`=4w+O5tNKb<zdDbz(>*wEV-{P_C?KD;h$V)wVPj(4
zz{3Y@R2ykTRDCo}Rq<AF7_pnCH4P+Xa$Xwt#Vf8jr&{@g58wZuKX}iEG9EwjY=P$)
zmB)}=cYWL2zH-HmcVAd8v#RSxPRz%m#xOz(Oce2m8jJC8Yeikq6Fn90CS*MHiKwON
z59usJm<Rl{z+5D7Xh9;&ZFFUNu%e>}zjU>aUwLU6<JBtm4o%>(BL*IS*uaT}0y?iM
zpmn<m_W+?qAVV|?5qF&lI20UH1}1cmhY0H`&L9xP)<pFt>6j@SBLKx!T3Ym#WD#+V
z8VyKfRsvm{8ER#YsR7RY8c-Sc5lmH)j;67)IE6DW2F^dfh_laLhgE9}NEb6e1@L#)
zaC}dI*_wsf1q-gUAj!SQ^bTr8L}5hR2Y~jSpcLNZ5Gj-KjKkoW9KkmQf5Qzs+^NYA
z?E3w`dEXjeDL|ij@H_*+SsaJID))v@UA5!4U+H;H)vX5(@rG5FpoY6DmV$0{hFUXa
zS(;c(b@qgLM}0gcKp-g682k_*Ex%<mMb}Id=_yCuV1bEoAUAHIXm_BuwH;Tk3US@`
z2I_tZ$H%8|bngU)eFys+1vupbvYi%X*s8jpG6h0H0R_mCK@Coh6%gb~6&E;GHqfyd
zB&DJ@gwg^-T?Rw-k%+6K2%#`?K*j+UDj^@eqb9t=CG@d6HgAh?)+UZ^XXdbKT^~{u
zpU_{@JZx7W8jFZ%25)l?_x}eCFwoY7nw2sXDlSx%i?}bPT4)ASu2X?Zai%3reCKnp
z?7?qE;cva+XL4gx)yF^i_1|18G1GXa!Sl2e{p5hUou7O6wL3ogv6R(Yt$UtB<@Bbs
zg>=~TRoNY_eIP!qW$JFVRvi%AZm|FtQyn<*S9pB4sUb#`N)w+Y4P^5`CQn(KRGCgX
z1X^qc+HkI?KZMhx$74-S)JXY>iK>LXx&!vsR=7o5xyF#X(+kuLjXOZG;zAt@T_LhM
z1g<QQY5@v)ppeq4ga-m(d>AMn50EK&5c746PkUIGVti8v6I<7rSiL3-r=42!CbiHN
zPz3qL*gaAU!H*cK6+Jom_yORKujyY`wH~!gpR#NUG;|IW?>M%C^fPk3jtNeMK!<8n
zhCqK_`W;s`GQaSikKg{yU4L;c)wQ3=OzUX^C!PRmUU9=qc6|DlY<69>Qf)Y@?t&-E
zpjF&JZ7NPnOJ69Xp!kDa7jIe|MYz&ra>Y>A?!X|nrJA;xaA-KUiPn(PKuX0xA{hx4
z_%f2A)dD)&1d9C<R*#D)C}Cziz|6RZsZxm9&LYIh4rE(W;5DFLrY`>C3{aZLPW+x!
zj>9f;IGsR&E|wqS=s*Q`JW@fh*F{gt#<nxlSlek}&Dt!oZB!*R)hIWb=dCswp)8FE
zR*az$0>sXv5p<QBR9hJlABO^UI{qL3a|E}>6z7L(smeW)rO|ZP7&zpnNNJ)KC90@N
z4-QUW$+E8Qkv_J}W^Q`hhd%ef&}ZMmh@!njmwu9fqe0_f{f29{edbW_vP-M;<%UC+
zgi*|3a3z>a-a^F=BuP=y7fs<;I_!9NJnCE%v5Mja1)kXI5N-^*+Y(?YmZ%;%qKH^Z
zU8yY*H6a~GBAsJubB?qlL2+gl5-p}g`!cDDgy;wmRH~RBtl-eTGLF`==)SBEx%NDf
z?bY#+N{%YVRJ5-89_DAOm_JcQI9x}5o`a}B>)TS;(49eBXBK|ZfqkK&BJFU2*yY;w
zQPY!vQuFjSM`Z#iQAF#SoE4G0S+ODsI1IT0F!7kck%yo@2lW{A>C(hA^_7701nZ*<
zlPMzxjyfL<mXz4C4({>vVD44#{_UFwE4O@BOOwUP0**F$oN6^I|6*e6<~N$9a*YNS
z)Ae1Pd9!4KuLh3NvBV;NGWKLe^q5+*F9Z}VgVEs8)<yrm=F7yuiiuYV#ZrNXGA63n
zQa{Pi?E#Xn<O&j*9FWT}<ZYk;fvhRfwK;&X+Q*4+RdMIHLVWGe5nS`G)p*g3>rpBL
zvm+G@?VrK;!8zFV0P9-|SidZbH7!|mv{A5?0&O)tFeWfK!*FZ@SbhP+D{kbNpO(~?
zLbU;us#1M*Y3v+jaI{rppk@|o;+mq=>IZ!sYF4Hq;Gut0Ru*P_6Y(X$QNel)CL;!s
zDoj!z&QKX7r<Md+V>1vq`)uZZ_xP^doBre-=hpD(BhN&<!+!EVG1-RVyT5nEd4G6q
zxj{8i>NPi~;4Gcg5kIHm2NlOCmS2*R$B%e2BVkBYmlc3wLX**SUx~$uL8O30%sBcQ
z1I&=hdZi3-dL5lg3pi<pTq}^v1H}%G-qrwjesTo+hNkf2xd&0I5G5joD}QMn%JU(@
z0}g)S>P<NRY!gM=c-%1|=76D53EKU8qy$V<8A?RqRMlUJs4nrkH#1U=qEwd3vJeH7
zToAcHHIFbRw1puF{^FQQQEOu%A{Z|efJ3(l%#Et7oG!B<1Ff`G>Ky2siavJ|<0$=A
zET>6x4IGO&Lnblhg*f|M9)9@Nukt_t=KFdiCQ46t4BStcRY|lO7r*A5jW=KG2E5E<
zNYjO$I3IM;OD&GYQA900{ec*5an!2>{;E<-WF1D;Q<~|g>n_CmRkaeDLmY!c-JS7=
zPBi98O+^*(=zkG}txEe^_(ozsr5dOM%T{uH<6ow*@4ysppZYsw+pfaPU->dzz9B+&
zb{G#$`M7I*1pn}j<LFzx9U^66&%FY}Q^0)0Np_-mz+p&*Oo=dN@GZ;%JMR@Z_eulv
zvsw!!BBq3c#7CyIk^q!gnPfy=qCJcMEl3hmTnS7K>n?ai;=TA(#sqdwEfG!q(pNFz
zGci(r#^nJuA1YMg7T>=Ic<YN^;XJhav0LsK_}Gh7D)ux&o&P0pn%fte>v~`LiI&!t
zeyLnlRbee=h;h7RaC4#sZ%%wj+*UkLKr8!IO+vvzO<5;J48e?O3W9Nq6qKB)R2Vd)
zFFr8}i&XznCtkG+7fq<vgmWRJup-9k0uT{=<pvXXeR~)??_0pJ`n@Oz4mS7x49u<q
z(&qygu4;q06}WF~0e9~CH>5w^fnWQzRTyy@N@h$7uS<BY);~p29HWp>jx!v5G{UBH
zn5v8uaMXAfA&Gv}Jbg(8i)24dfub@vOj%q4ceaPaa3Tbe9=}hYQE_jY)%UpF6~8w{
z&}5*MW!66vRI^gM3q%}&FYNrZU46?{zjW1ugSVYqmybXEbX?Z|Qstm8i-R>=SNC1r
zAw=X;H;&{ePnZ&#Gy#(@i=`e&It$501TmE@F1V?-je3Ub5jJXqY^d1%oY?&IeMm|P
z0Zw13YL~<Zdh=DexIH4#Um^$six){zuSgVHIA&+7_}+JpW3>J#4$M4+uC{X!1tAVT
z=Hu{*5dZSs2p|3Y3CvE7!pO~H&!I>0(9U^uwi|FO5`G!*DiUhf;DET$s%S};MY)do
zNrurup<FG+Gei-S)WwX&@G4=5d7%n4O?h-Y6ouG)fdo%8<U2@^M*?Qjo@vELC?qii
z36z{3>RgbjL8&1~=|B~Cpb<zks4u9rSpezOPfSR&Grd7<YQOGJ^qK$3<DCB$aFXk9
zv(ELLIf7~_B*>ODFiT6>)cMgP$@Jg=3W1wIipQEXtx)_m89br}M$n5Sq_<?k3rVZO
zSRzY-WuyT^CrxY6wOdeqr)Hq3iSeW|2&l?x1NnB~8~?fwZdk>^g&)94wIc2GfN@LJ
zg1j2XgSYz-!L%y0NSVSM9>(o=j3JW`RO%bh{^XI4Q`DyRDsG7t9Ln->3?9&fDia0j
zQkrZs7%JJsKCw3Hv#RV$yL<XPg>C{7k@^WJB$){j1d)1<BsBE-Xy#=iiSa`QH>CYW
zNx%nA03wxmHIOLP1Ok)ud2aF)TYU~w%%r7P^;rZ?b663p%uS4*;6WIP_O2Atsg&Z$
zDEAN#8&Kh{G9~n!B3>oadlysmn2o)7$7zazj0=StIC|uX_SxiamH<Q#V4}NjG4ND@
zrjn5)4J1z5q@L9#?zsI3CPvGc@^+#oN=T<xz%(-I!aHdlm(0v~kkVHi9U@uPa1=*}
z2Jq-Z6?AqODozqQCQ-^%`mf&PMT-p$i(za~2gS6SG0jo{CC3_bt&@jVJk!ty2y%s)
zPBjHeONwH}s{#;_{uP*F3nV3cA>qZ3MwBQ(!Ry2vuuT{p7UrEmd~es$aICz4SVME^
zRee@t9Q`J)7`T7Ba=%C)=&;kpRM^qoW#(FPYM_!^3*nJ@i0KJUKrgY1Pt3g*H!f>#
z9~i4D_0$1vrJ7^#z?9#oi=gz}aji!sY7{VPA-UEa5vU@8u09LL2WIf_L&snkGZ-p8
zgluLxOkRL#I66MEfbs%u85Dsi;c5>*BaJW!QIY#__r06&@>dWc%s^PvbAGgVMGtwR
z$~PU8X-X{2ay~sGkn1#5y@m`hfkDl!Y^L9oRV|*8CucaS7}#ncU0|q{A~ms0-(*6y
zNOZhId=9PRr_&Rtiab$9447$MhYER!k;WW`_e_K%!&P^B;b7}rc+YR@GsvDx;3(N|
zW3c@97pHj31KGwIn4B1|wiH{;_RcP|(AI{Wbl?%4vJvRv0u;5W7>;~b{8DtEDqptv
z>PtTc6}~9*Qo{z8yn7NIstpOr%*Wewn}!n9=;`{p!>uMAWOD|j<>N;`dPLPZj+gIH
ztpv+#g=ytrn2vf$vT=0GBGLm7w81iAnmJU$eHfiM7srlwpuMdF<q`oav3ME`$q_1c
zV#F{u5a5hH6ZIMe?MW8Z9E!!8QkP^pMqHw3o&W*~2l8DU3$vk$nbZrA1yiH#D2YhQ
z6&$IQg-pg!%tc?;F;$tz<iJcgJHHUtt94Tbq2onU&T#F^zg>-X|M2OyAAW*#T!W_`
z9eQy8+@G)OPXEk5cjqqOQJD*{FgNeowjo-IMYCA!<oUK1aFzmz={+yt6uhc)6}QY2
zwOKRPQU6b3A3aP-S7>y*At4;=VMqER(YH!^9%D)k3LvIwe3kMY7Vf#{an#EV)Wsf@
zq5<U6D;4?OG_nD`B0}9XicS|G)oiBZ6VmG%;5-GBXV4HMC<VK*dv_mR^x_uSDGn0<
zH`8dXK#eE&lWdq_Y*=Drplney^GV_uMY2jp)FyiQq{^Py0g7FGpsmNm(7_;fb)<Yy
zOnRlFux*P(e;h_AT(5-D$r&*<GmT1VJ`6%ZvARQ@VmBPYyubH*vyFRys}>#E^An@x
z=>caEJf0jpHdO!o#nX-3&n`L_{&q+9lGhk=EvCnOOpFZIQ%(xS&K|R^t&6u53y4Cl
zEs?Lbp;Nu+W(vJz*RJ^AF<|0-qg0HfLAJ=}i6?c%Q^}Q^il<Ew_oZW*h2ukGICA(n
zEVF{q>b<b-78pDS(gfR928L;arl2c}Lllc-{Fd?t78o-XfJ)J0n4CNd11GxB)!vQT
zc$hTF6{vMHSNEi-MN*mPyfPahRj|~KdHVQb{aB({rO&9;s>-b{ng6EG1?lC<-Pvg#
zGYZmh92<5@Ac*RiDve=oY(~_oWz;KG1c7H-hRqpsZ8sc3*+2OGl6U9})!^vuA!cXr
z46dg=t%8hoLmqu>v~l#c6OG&6p104qsUvmX`&*r}Rz_|Y#)k&Q*yvE0$!2(KTPNDv
zy3pR%qGrj^5P^`$+sWPvO9mUMAe+byF)v-wEaMBhn1|{4HOZ67-$$WDCd<)?T<m(_
z5k(apE#Ix=nwF8(DhgApDGW})(0mG2;Uz1e`ek|y7csd^GXvM3K~)^U;ls<&aY?(X
zZij&$&!hw6#gtlcivotJ;Rq|wv{c}(6fRW!jDuwTYcW`~P^vkQj4~^VRj9R+Y2nBg
z(rA=@G@^M-PEDXvokz7=f$tI`BLt!WiwC?e2Hi^I*uU1pfiKs>frmo5P<rAuJ7tud
ziz5>0`v^0$3;vydyWrpZcTTl`L&4tqi!Jt9H@9ZbF4W6zSS?jBHaw(GL`!Q2+KWAC
zX)UNYg~ogYJ}DWM-zKJe68|VGqbBae4bfzq`lZLAwdUIVQ=1`QG;r^|I}v(5%HiWE
zi$OT4qSk3O-Bd=;5R6k~1;g0)s4eT6NriqG+=gM;SO_0OW_A-s$Ggzp(u>B7j&+jY
zw#fvLx`#GC9AU-QL{q$Y(UxwBnAEE%`=jS+rXa;L#6P0f@#<86c?cr|BidAjE*PWX
zQ#JU}I07*zR_9vHiQ4dq<CX86847BnE?rAYvCkX_`5DxXFFnX0a^=7Q*Bkh)Des5B
zS8QDK`J%J&|1cx#=d4v`eZCE~`6|XvoIoa@MLUVsT07C&(xNPn-vAFhvPAkNRevV2
zC~=nGTxw#czN4uyPba&z!@|*H0~j41f?<_0QF{QUom0gegJ;2wjLMie1;+6hTyl(R
z3ZYC!%c)I11c?9%K&FvH-5W<eJc7Yv-Dtm{OIaPCrcA_Kq9j(KScKx7@~nhgkEm&;
zD#*(H>Y;=hU@=8R&FrDdFJ)6SajPsbzaUU82~gjvUSB}9HVkG?A&6@5Wl6<}89R%v
zY$sm7?HvA%{R>n3N(pG59k4u$Wc4Qlh`zdBh{-!vx4+{Trs@OXWPPV;G6Na23mK~y
zjdBNu%4H1m0c5gi6gxW6R_sQ;qoB&k9yJOHL}b2IKPr~6P?)JIvWfgsr>gl@3#D2a
zyB~c7mc=nrxl8S!M>QG4$O_Y-6g<lbI0myQ<>SmC&DIn9M==sraIeY7B+YTK5I&0R
z?0Sq&jH9b<IlLL7VkKrInOmrWcH!0;ugr&N={8lMn|M`aRTP0u59;<Q?kh<}m-Ss;
z{nmpMscC0m!Fvd^{yv%}u3T-#YDe10ppa@s(MXB@?g)KTSzv&gGKA1)Pu=hw2=bCe
zSJdPwGmm^~B_fuB7gbOVMzK(P02VWlv-*_CtX^(GwX}ed!9iqlS+uryqOGk9x%L*i
z$UIUTvC>RH6%KGU+eTR&UB%557&0vp?)%;@H9KS8-Hn<Yg>4a7Y*<DfrkUpy>>6f<
zT#=4646SKW7EXuX@x`Y-VJPiOLBIonuI^2s5+1_w!&ww}biuYvD)Z|gN%I?Z91}$l
z0Yhm@qP<_oPi9JQEkM&L8nb{~mMU3@h(k<(OZZ5%U%K8Torb@uEHdMCAnUZMnvG>x
zNLyKCQfc&9X>8olfz%+qYEwt@eAsqKla47yP}vK!V3QWySO*~*@S_qIf*H(u$6#?A
zIja{LdpYXmB5LI_MotVMop#XP)rn$z7xMWwqzzMT|4b9SlDbas29Ex99AEvrotT>+
z0XM6dad*N>Q3hoSa#4ms!EhD^Ps8MCLSE8sZ5s7Onuo~+BXuQNsuU!Rtsu>|mBm81
z3wEgs$BrGumW^j)W<u9~bcC*XMUInF48E!Hd2CFjP@18k2tsjqh!LnN>apwP#BPiO
z|M+z2G(MgNZGz&mv<l=+Zox4fWbG_+RvMd@*;sZ~4(zLH2lVIPMrXE}fh|I$!Up`1
zHU=j?a0CmK9%uFNfvAE~G=urdpxSRHZ!bf}T7gEj6~pAt28NJM6XULkVp|7t`Bt<R
zQ|Mc3z)JbJ^((t^{P;oGR*0d}55a5-YDu)8CO4(QVq^qY-)F!$jZx8>^rYcRF^=xD
zDGdV*W<$`h1Lo1zd8#1jh100ZBN!e?!?0|u?BA?g21#?(FJrDYj_HX}6e5YSqgP^K
zLNP`Z8DHtKRB2mv!*zwHNpy}+nBIs-52>_hud9Me$7$*p0mm^?=r3e&Mn8>l2@nO8
zqdw1oL-~rjTg)7sln>L)s!=9^Fu<6HNDvjuAa?}YY(-@G2t^sCXcqJS2yB+-X`@wS
z*>d=9C#HrQ7#kdgl}@Q1lW`x%!b}Yfe+(%r#CZ80gocNdS<t)KsSJwTR0}A`rGW;P
zl~%w}jCh(Qtf-qhR%y=ap&AaO_{IU}z8WS#N=zr!fqC~4H5B0Z(Fk)hQ)n%=qT$w2
zt5r~~%^?h{sMkwa+tCFPsIf>YU?$czi9eFDCC%Bax~3WTe3N!dOpCQLNSQg<hOPDs
z%-b2PXvtu6(Sk*t^O8$V&nNBc`8)s)4Vzb!qiI-?K_)y6)6O6WU3g&yL0G5FI+WEB
zWQo*-PLi?|)s9o4D2sA9k5YY1W$78S4H=^cqTYef&8j+v78;c>UU>k4NuX)b7K3L5
zfrV-|oNG&C@QiwWWm#xAdpwLQsjoC|eMUNUyZKOoGLeNi?dOoely@)MC@r3z#MBhY
zAtFdlGr^{5*BZ<P$I)KjsN)yC6@~8m#zGuju2g+C-E2zc-y|+fB!qODPLV;{PNV2#
z(U(u7JEP@0KJ~ro23${6)R8~S(%<LU;)u{9?GXi=QM{Rgx}i*D(`g9l!}sg(!zv=-
zf^!c-Qkk6yEgmf10@E%)N&-<0bwR=PelVK2B`pO^n(h$DI!vp8l#x^247$)%uhC;u
z3fwR<f@(6BNn_TDHm3&SYR!eZu!`28IfbgDulpDDI-IAKwNW?|v@vWRM%u=l_b_N<
zMVcldq5zSsL6WkMQhgpGMbZdeF3|50w?`Pw-%(lN5}Y!kW7rg3sp(wwgb@R$E!&2!
zTmgC8RPq-pno>+2NmB^dq}=uS7vrc_fpQ6CNetCnYAM>P0XZ>VMNlVm?7&I2z>i$`
zK^0+CM-*u*L?hYA5)r^C6S8PZwzBp#C%K{K%h13jhjqric2eP(Dl0OL95;BYF8c8-
zEF;ZLnwvvzDw#X1YB|L0jm3DnA)xzJG_t}Voi+u?iiiW<vGuifHPxYxgGTVvjc$M}
zo32I&oWo9K)OZy#JDR2x?_bUpJ28GA0+3MS>-O&1gYK?gtXkPYWOGh8QO<5fHXEtU
z-6)9G>UClXXrfk7Gl;|$@6YhOa#fsW8|%0srkP%H#d37?<WO3u;rNj`96h{%`Pn)+
z%OIQ1Dv*#X3qk^sr%XS|*R&<lE{y_N4r)Y_g$dOKR2N7o`6%$!7Ki4_aFv;4IK^3%
zjw_9Y+IWGiO-u}nA|iC^+&tk6k<eGgIVl**tI<{h^fz<^Xx@>EgH$A^3NTI3(eD!&
zw5}%s4LwH^OaqxLsUIkwlgQ^&*t2^NZvXMe(OOu8%^R-3wllV&TAGE|h~QAL6EAgZ
z2u<MfLJoJ9p;D&-{?EItN~%4R6ib3emN_O;X&d!ggp`xU+2=0D<}<r7JhXr#2j?+0
z(SYztm6(Q;${`GW_@S%Zn0}D;@nWz93NT6PN)!&AQd8s7QZWsYwe&+}RqCQ^reZvs
zMjhf}pD774SRx>oRL>#TN2D6vPEdEf8t6zKA_kN$;lx`MS*qS*5Z@;Wf|*1*V`F%5
z0*^fUJ)Cvs6<D!iHM+ZjBL~NE?*m^)Hr<XetYOdIZ{x&~N73239K~E)e29rXCF+Fc
zJbOf*uce4C+Q9QL9ao=NQA+9DlZPjZZ&T$|C;%DUz}j_PSi7zRvokduJ~)Gcqh&N|
zoQieGq)Ap6Aq+i)k&7@Q7v<_WNNFyUaaxOctznR>a&+Cs%u?|$t^_y5HObNG@wxF%
zQ{-kMsrCw{sptwkoYN>-y{W5E7taC{7I^dh6SAvrj8djXyV_C3TG1^GiCn?P;NdC!
z;EvCuR5^l)seM?x;xer0-+)IRzfA!$Wpyil4b^M%P7%3ui*5o_DwdGXsUb^h5XGxD
zFgr*4JCM5kS)HZy+yh55ER&hWi>W6qizaNvL8D8OM+vmF=5f)bd7QP~#fiar967vz
zx#<RkFko9br0gsr+BhU4Gw<t+jAEdstI+RZkj0@oj^V(vTENLo(Fj}>lP+P+#u#ey
zW8(iQpeu5Zl8h;HVo2)PQ%FJ+RB79RP`gHoYgE05#J5b<q&Rcc;DDAQy><!%hbQra
zAAJ@LZw7_j3N>N%*wEb=7}=%D1DRBZ-uRvw$fjCQ$Wr_iZ{`*^()D;>4IDLJC$dnf
zr_k_&I30g>CviR3t}1C8leunY5>$SF^wDFgY`<z%2U=RQ>bHGARNL=ZmW?f2mtn)E
zPE1c$apcH6Mh2^B)M?nY1>3e^Dz+biQVrFEpu0crBGSdAEQNr>>7nX2@ffX`Hj%ij
zL>(G8s^VRIbqqu9kK7d@Ms4{hDbphNm{!3$Sry_Na;7$s)YCwz*qO><Xz&E~JT#2j
zyoVn@_*E73XPqAP9+qLiux<4kCbyM!Oc@SrGYgxPcuE)%t07|6BUvv+&X-&f)&0;y
zxo*=WujgM@Me<$}7D<{1l8ii2B=iUqQ)L8Ri1G1xw0CB)ysrc89eFs8r5OFSYM^Am
zUEQtd?JuBGbun;k0f!G(P%CRnrMkeJYAp$8IllNRYck?^M}J-9H7_B~H#d}x`OWc2
z1Z{2Nw!HpbwFx2&M<l>XC>_mqh5EoG-%Y84r|&iJ?eF}pO0_9aPum^3|3&c+fsSdw
z*e2DQXo#dKXfUPT<4egtXe$ggWHK2YNP2V%%n3MNV2K5n`hU;Q;5Z~MFAUOFCYmCW
ztlHSNeFcsknLxSRz~~4C#wE12X0WWc9X&m5Dww1=$a4d=@mI=paOT;)IQzT+Km6_l
zh6k#!Y(vE(iT_FVfzUvSxBH2|Us~C35~<>5v~Hd*QKQC64K=?!wouAzFugs|;y&w5
zEtzs>#0oYz#a50w7S*RCuuxp2tP8o$v<lWKmQmYTH8-dwcf@FOSuIf1<Bb*3o#H0a
zCg`kD&p!4d8&%&#D5<FNe5>Qg&{KjJMgvO{(F;QuM(A7Cj%D2ijE&7>WMmHWb9Kxu
zG%&v~iowBYbafZdx2%Yk)=YCdBEJ$Lle2L4_98}x>iVK4mO;55of*YGk#^unSb}=a
zMYH0jk59=b6AZ<4hNc!HCP2q?HJ%VZFePP<$ysralEj$wJCw~uhO0Qj6f9FaMQ3@G
z*%2>DxjwxOK=bXIl|YTcxDlF=&B#SjnOScVqPK<iB}a|)W+Hn2WmS?02I}TbM#<~5
zMHh@l&eKU<y|N2EJw+@mR53m=kLjrjuhl$p{MeMTME%Q)YN(>R#s<+gNhZM61|v;M
zyWR|1(@x3E2vu>3k3tVUP!lzla#U$0adHwbJxR<HJ0$(D1Sm*QrGXYlO!3TFa+5Ua
zw5Wn--SZ-gM=cC}9%ACglH@M=MrV9UP^>JFo(QftevLmL@&1WU62U+tB&jelo1eS&
z++<b4s|HjN*M%0%u#2zVW4njc)616=_a=*;?pAblwxU$6VT@eYWC^uefMds}(BE4`
zzK~XyicY$!DaL93qE-uw-_fuhnvk(5%A%95_mNxVQ8cr><SCW?Y09$(M$%|%;)x|u
zR2&N>%7jHmk1l&s+?9HQ<pNjWrjb#4mmCF%BtDAcFU7jhgfbG!>kX2X^rx8$sz!-Y
zS(u_hyA3L;{qqJmF&A0-Rg$lQ_R~>XMUv<1opL897SM2gOiq;1(V55c<wbOM7SLA6
ziu{HgU$drDj8BwMtGmc#X_Jsxq}TK<vCU2{pqg2&1$l}sNCTddpjGb_tdEKWarBhF
z6!A0&O{hw&O!GfWo1aZqCR_Run}tJlt()Lk%7k2usRUCZm!`{JjQjLMIYjE4(XYgE
znr3BDeMUpj&N1{Nf#f_2shS==pDa!yp7X2J^;eoQbyMoP4h4;8p52clhbGZz1Q?%K
zz~od3tt}b!^|zAi5=4kvwX#dqE>z=hiD}SOPbIX9FFFy-mjG(Xg>FvEP$!<s*o(6*
zwBUGgMon`qvO)DfRgkTOfJz#pU2YO6$Hc4{P|eNmn=n+tE|t!k#p&ctl#npi{v^&%
zTOu88D=;T=>iD>6Q+qmsNO1T82_K1M`<&JPo*P#cp;7X~5^YdPVpy&RyU+lE2)#WW
z=;|zBVzP|k;Tg=&)i5(t!Q5O0g9Ecz*4u*K-gabjl!cfGX-_9C7VMG}-xOviC|K%H
z;$Sm5>9LMR&*vcnpysFOmq;#Zy!+guG9iv(2pCd55lb=SVMsI)RA+WeE_Cvj@$cwO
z(ifj^USzdpwNkFC*lZCzdOPcQ=sJy4qJ0->A}cvOO;HsF>OO5ELYq%Nck4N-9M={q
z?j-Vg6(u6@BbwKuMy+`s)oHk@-}EkP#q@LuqoebfnXaH*X`ph5M)A*~vn!7k{q1OL
z%_+fsOxV+RcC#tj>}_acK^xlZy&3cngG7Lvs7JLWQa@WVQ9@Jok}c|*0gQgooFu0I
zG6|3396zCoXm_QLXHmwZ!<i)MP6jZ<$E=Pkmh~-8=F&bdmIucw(b$zLL@D<wq>Y+i
zA*&t(=ee;tPkZ0-|G!nQF4Rw)U{t<k5WXMa#EE%iavT=TAEOGWAE;hYPj@@cKYtx|
zT)Y;mR(HZl+h{a=44s$-?JoS-o)gX1MZ(luTuCas<n$%!?$Q7?21l$Ujwz#yvSB@3
zQ4^}-K`k`sQkN2zPS(H@a3%GicmvkNMkTtbrPk{S$3<UN92N(|dUnBLpdPy`n(P%Z
z!D(_?6i@D;jqf?jm?d`>5o%8o-~ChrCy5$`m~$Wfw=k#(Ll~i92t5Ai1n#}_1l)#)
zOvY5AdAj%gFi;ZVd@hHx&RmI0E?tjJo0p-`LPRQHXm}Q$>%$<ex0=)tyCO9WV#&m+
zIL?S;N_Fm^5U(`T;5fsJfs$y_ljC0+w<LcrmwY~QKZy%U(&t66EX~xCQ777(#d`B*
zwR*97r1YtAgLN_4PYQ$TH59j*T%`@mvCIW`g2pM)wiVAmvU(}p_35e7?q6?f*#?hh
zO-g~ikBsB^kr}L5(}oS3JJ8irh^-HG!6Ov|Q5k;y+CHpW(SfPi66&=;ZSL9>zX|g4
zda_A!Nt0m&O@F4vG{m`6qhI5x-p%NRVjMjkD+yeeXhoM;Bn6O!{wXz7RP84I#W){Q
zzn6eZr)!IxQEi+STO%q1R00XkljBgwModJS7`fE4=@C4t4n+f|db*3kDF}OfVei9w
z6Y9lt@cfX+C<@lp@e_03y2rNqE@qs$l1H|kqVe+~4(y%8(Zf^dTTTG#L~mb<?o}xO
z5$jkp`ucmj)N4@>i&i`Vf-)5~YevNsiteeetnLyJ3p5#{8waYoo7udOe33Sq=<t$g
zsA-LokHY>_#t0gEkmO~Ht}~8%lDRiYY@#jT;xruX{%E6nRhd><S6t*$G!7-Ni({Uo
z^+CUrwp+1vdzZg|*MK?a@A=n7>;Aj}4lSK0%y{2>WoB;8L|^fGc<`teK~=J*PI}<@
zECvVX(B759h7Fxqy{4%4@1`s~2t&AT5DV~hR7x!fU5n9GGNm}tb|LQP=&}BK_RQh{
z%f(|_%%XJcnhZ5aih@eSqUF6YD3Z`tHo>WWB3P{bj%z_GgHlcPW(_G>dZf`}0Iq=|
zq!CXui>I(BRUSRfBF^M=hGnn<iiIBRd!)i2+5dg+vV(vBoaN!qJ*|Q&pEHxA)qlD;
zWfksgYq`jGqk70CH<?gEBbb(<LeZJ&DyFAuczo|9R<9~z-P$%3+jHub{D62kdc0Y(
z!H7D=)V?4fC0-#3e5vXhHzc)FiG$;2eI#jVCEi4jBWXsi&Fo0eGH%uaL_B;+{WH#x
z^yE<elzz7-OlQ<yYcZH!O#3Ob(&IXs*<vicU@;9vw^E35nj$(IPK+OR8@1WoXziPy
z3gyi7b7^g!(-<cKkB@=-kIjF4TYotBP*>}<jvocp5Uy<*4p%#c8B`e59qmTV!{d9#
zap>R_x_b&(yRIF*%kpqi#KqBbcAk(~(H!N7u6r`QBEIPKJjER<If^^oF?f<Hv}XTl
z|3_+urhTEh%o9Gv5{s}T5^n~!i9ge+c@j(MZH?l3j|S-zUsV_SVrJrEY_4QGdOtp5
z00w9f2Rn3q9z~g{>i5g#@PYT?BrJAv-jagCLTj7(;(uPze$(}-%<`}ixjv&&m})yZ
zvOJnQqc;?x?TU0Lns0HiyuSr)#S{+gFN<n5BwB^KK#Ozrw3|{K9O@YvYD#kRHIvDx
zBs5^m;Dv5WjX)bcz5tK5uddFCNb&2I<Vnr2=n2uuVvkafV2Sm_Nzt$Q3eAkJ*;{Rn
z-B<$5W*dV@7&;OoLRcgM#d3^fAdCnui=x8x!d=yA_m<58CP$uYYm;2XldzhlFP7#T
zU(%C(=|8pSE-y+u=lY^9xM|tMh|>Tf>q9kXebI%`Akv+2Q&2TIp;0vZSGxYv<lrc8
z#ECp*s2wEKYtqG`z*%s#_1kLusF5S{@ahwA>+>|*Qw0~QCz@nNO#rbcfJv{V7cNfS
z)KoE5hfz(+<oB9H`K5mm*O=5GOG$)h0u0e&mBuVI1q)dubG|!;x!RBKm=Evzxezos
z>A43@@(EAUTKvEanRMPb``5d3*L|=xzXOqBx&a!*jx!B2rFg<v3II+2j0si5Sze-}
zjf0hBqL#`=2tX>aCF^6-RDc+e1}MHNt}s=VmVo1u#i`HJ5ZKriElyls%v{i{3O^Yx
zsz$R|-fcE0Rl6dV$0&M<Dh#W^;<`Yr=DCq&2@@3uv0!~7m+~;QeQydSZ|^|a-}M$(
z9=)C9cqa=q&Chyr*W!ogXzOUP&i}oh!b{$n&z=FFiFyd1n?}YYDyFhPF%TrT1gQa%
zi4)E3jAA}Z(v#A=(`f3b8uCSeF-<iShhB%ALUFmN2x6nh=i$~S&>-ND>_){m8aU0g
zdNGB@;_)vA(9L?yVyQ8<K1(POnxqx)#6a7~1c)Lc+j|tBg(fWGQfETH0+;q44-Wim
zC3yTVeL4CF&53{Vd3%8Zht{GQr)8jXMKN{hUw7xPc||6(2_6gU5syp?poyOw@A^Uf
z-=-x|aX}2Cgg2}Q3XoeOaa^LMBH$P?a7?8t=vrf_Et^M<&ZAMA6mDZ)>9ur2TaOl1
zX?3%*EaJ9AJW>Kn-B(h_Np1!r?JdeW^h;<mdnm}Nk+4wEe)q71ok8d$3`SA*4?kK7
z_Wgw`j(;aYx%|X)b@BkS^e9fDwG=?4EMK;z-MRc@JuNS}Hl0}okLVdp*tVJGG_IuS
zz7k6k$23XVSl4p2wRr+?=zG)PYH%b>bgwtiXh@74nM0#CAv|{>)@x~MxB^RJOyVKc
zP}|gKZ}G%1XGv2+bF`XizNBGGO3JMGGa;8Ow4~)2f|<TQg{pUKxEk#HY%Mzcr4ZAD
zi(R%SpPQ4vPBGv-^<8CQ`L?dii$C94xcXen>4PVOsx+i+n^{iNLuqecZDGiYXt$-J
z3KAqJy^|)ZYY@e8l4)|9!9(_K*(MX!a)i;NbEwy*gy+ud?SYfo=}D{;*KuUrp<3J~
zM?D$uX`|g(Q=vusACb~j5@#j~xnQBiQZ|<~E@%M_ZwO^?|HrG*-p~1R{E(iov-CW~
zuYZcIQxrH)1t6L;vHYU0^i`iIw!CP&o$5z`ph_A&+aOJN8emqUP;Umm%?E+TFu6fN
zHT8fDQX7z<&P4xK0}Hbe#*WRSQJ)ZAeV%r=id~g11|~|;q;rnN0-^GadfIIAydFYH
zSrP5^!k8JFlJpE|2T=`GcK~Jg@vqgw1E2Bb#DfCW+D`*meu{weQ~=`KVQVh#NMHGh
z_WTvw$O8E^?}9VavT_ti$4osH_mD_V1IILZ^Luh#B!)AH6KrDb4g+I@0mhHcq0yKU
zzKU_^qH9fh(=9cXO;SClK@@LTqOu~IluCa`TXM+Ils0T;XIK=%4aQM%_kF({?EM=z
z8n|7cR{5_#<Eg)%!^-i~SxYk%AzXR%o{{?TbEg}3Ufkha_K{-YiVN-33WTCw4S2(}
zEXO3RxM5gaG4*KCRz-<qTqIi}Q3G14eW7q{vG%)!B^HAw*)B#|9j-TXi>SA%CumTC
zPWn`H4h`6FSRunA-}Zwk%(;gSR)WX>x*>*c4dwLM6F=8d>+;hBnx7(z^W?Sk?qtly
zigVl3SA3#9cli$6S&4|Vy5NG_cE+@=yprf@Q69B4w7!XgWf|J&-I&I8Z?N%&Kb}YE
zxu{hstC~|mEE54&a$@C%C{{@<k5r>pR7F<>xjb~tbcWNWWBxp9-r>oTxBIW^;@Fo$
zIWwGW2Dy0b_^AWR^8`3g>B5-J`p+xa7yMCY?yBq3>2(mMS*KczVcNDDz-VQ_RYB2;
zXXIyb#&vm^BE;QaI|e&#fMzh(>XSkWm(##uHHAwBxRg5UDPa;aq@6cR3UVWwE?Ge>
zI9{(b_WVmVIQ&^3W4q&tf=iC`rynfOBj7xBd|;qsRg1mjgB`gmej)2@f;6+CK;SaN
zG%Y)AT6P8&O})q#V5AI`rzj{Mj#<DQzF$HV)s=-=oW~P}1~Wp($k>K3Z5dV22!^rH
z*z@IDxc_flF}f3K+xex(^!x(L^AI>s4IqwUZ`RoSmiEl$ztfi6ZW?wwb)Z~9Tf-Yv
z$uZ3^q^fOAkBt*Ftcfg)n(igQjL?v#Fq!G7QGD>>`lDE=KlZ(9u=kUm9KBnj@f1Ps
z^A|ABQ{X%`fEY3vhp)J-klOy<7H9jl+00rPMu94~!WUIPlA+oGhWb-XMx5#_Cbu~g
z9zs=XIUy?Efv;4fqyOwiBlpOs%!r=<V0i%m=fA$79ED=qSpBmZbIt2B_KJ%gqc6vd
zY^;YOrG*PWT5!E^ba%}^_U{dG;@iHQJ*@Z7`|n@-g|wdM!1<ppaw=`0(9K!8lY=`F
zVM9o7CPH;us@=bz{0A>=u$*3}*Xeb7onEKc>2-RYUZ>aTb$Xp%r`PF)lezvM?o%{3
T^+Y=-00000NkvXXu0mjf7NCK6

literal 22453
zcmV)GK)%0;P)<h;3K|Lk000e1NJLTq0052v0052%1^@s6=lw7U0038fNkl<Zc-rm#
zd6;GQUEhhnKHu*-=Wcat?W$hYi_~gKEm@YW#WuES888kQgNbQFfQhpV84|XcUt)$#
zl98Q27#^Nv<_Ys;e!n4v0kVLV#3X>h#>Q%IfNjZITT82@-nXi*{ch)+@Avcj<9qI{
zTh&$7Rox}op2zo5Nu{b=_uPBV`+U~-=ly|iJ-+q$*5g}`*Xtp#&oPb~xKbQzLgBD}
z>(p=M<G36-a#$vg9oI(zc+>;>O$x{(5gfJOx~N~D$I+ulZE^nPo5A83I4ba{>;7Qp
z&ikvWCU+a-?@{btRliR}_M@VpA^>97cw46Uj}$+V<%dErD2Q41b6NG{*=t^3kiMsw
zzE@cOdKgw5UzR;T{8+lLxcv20Fv2x|*L$Xb_Fmnrc#p+rF|zFEeeYBSBVPO|E757A
z@{AWfTVEJ??(vHsZFZk^<j5n@v154nsQ*R-&N9Gk-~P4<Z~c2c@_nEWh{#^VE}bmx
zzi@Kx#q6EbrQa|8T*Kj1!mmV@UC^Zq+y|c(!0JC*ab<dc-T(L6eG9$U>wmAZ#%nAG
z;SxAy?a#RKXZ^2#&F5SGobKlnF{pY}9l#mj&%~LJJINk<`Q=}mFYJ(ok9iRN1^~`c
z+Xc+X_6P0}Ykp3Y_lb$N11KI81@(d`z0)CmCtX&(pSqUh+Pi)Ale+2!kX5X}MlNXa
zds${(Rz8>405r>iywW1BJO(0&q5<Sa03#BKF)^s(H9u#J{oOS6zxB#1|Ki!;#y(~r
zee{Fw>jj+dr}bmI9=OA+{Lg~?m@zg{??Ke{nGGW=KfEkA%gauPta4Xh_fA{^4q0jX
z`;RSa0AV%I$SQ7d`304At=Z;5v-~}-evBSyR@^wnD|%JD7>r14j49z=nhN}Tr};lQ
zapHeJ504o5h~B96k(;$LqdV{a8L<CMj2*(~06AhTeW#u^K_e^vEw2%1R{rf~L9?1`
zS}mU1;4y9(G|SJ?>Y(XAh5)LlI1!1gE#tkvqWE8Y@x@>HwUyWMH3rU+2#)33w%xze
zNAjCu?R(UF1kJ%%L}aaaW22y1?S!lkn*NLO%?O&+{(f!HT>H0cfo9olrK;kLv5~PQ
zyiY#~?Z5fL3;)MO_?U&wxh``fpc&o%#)o`t9v5TZqu%8L3MTr-1C99>XqGZG5hIb}
z)wy<VBzcc$?eRm0{{DmTL3iZHBhhOFoB}kv-t@Py@ux-Dsp@h;qTp=TzM$8}H2p!|
zYYCdwV;b2q(3mX*4eP`-Hwzl+J55FeiJWWaV$4o!DxbXj&@ViA?AS;1&45QX1)3fA
ze@Kk|e^iwsOERoTsb#g3Cvx3D_~t+(%OaiYfrc#u%?6Kg!<ME$X1h7iT$7E30+KT(
zwu;O+pT6g%m;Se}Y&7QCfW>*lblnri{A*S9>w{*6D_Q}XYw^1J3AuhCEGtebYrHnA
z)?n7po>l|R4IX37KzKDvv)(Z_9n-7;&9$#BVyxH9i!c(|(kBn!{__t7&^%&p*5VjI
zCnoNh$Zh#)#7v-mgO=vnlzVmaz4h7C=Ib=qw=~zpWH(W#5iEjs>*m+BR&qn2F>70z
z{`V9DR2P|&_1;}EQFiaM&;IfictqB#G+zf<M+MN#B)=nKCs3b%eL*8%7tqL-fu{TZ
zSAxcDA!uY%pb2NuSm)B*nq<Of@$Ue7l)L2yT~+XP!`t8dQ^qFm?hAy!j-XjTdwQ)v
z!xn-@fEdd}S|;+cCNOUtG_ons$dcQNa^KEvRC)K|L;vefJ<12&Q9foj37kg^JnF~C
z-*nIz`^)N`7sPHX5H{;)Fs}({c#T10wg5DOEqZGYZXe*^|HhB9w^aUy08QWTt@_lP
zDEj5YhaWlkC`bJxYs5QdEq(`}d1U{In5ZtOzkbTSTElYrNxyl}$eJnlR)R*<hNM*l
z)7PB6*@mSDyoYZ)413>oi8tOpTs*~YA!x4ct;q&J6MkmItMkT`>p1x*AbNZamu1$n
zHe);Qzf&+jjL&^h5xzmtu!W#mC*|G(&;(E#Lf24H6?`Z?V8j$3@y0+S#d{n~;l6u3
zB98m+9l__}Sh8iHS?A`xUaLYvrsZ7Q8yo%bJ@-6v=c9bkKZ2SK04G=*FY*tJu_Y9L
zZAEyklv}RtX3NcFPwS`LTUim7f=1zUN3}h{-t<k}8^4L$%ubS42}RMOe75o4(~3Hc
z!o7p=hKFjTX_<%KR$-gk-Z_#jO}SSzTQ>lj?i*26Z%wI0ZvFwF$9Yt)myQdd13T^;
zFA*O{%vfliirh>aVQXWWt?xYr&<Js-&Yjio=itGI*?n7;cMZZD_MhO1_Hlmu_rA(!
zPoJez3ek^lqPQo;Y4TabFMfN<5C5w}<druPH7EJ`qtEeQPt9XQP+cN*-FV8q;yTD$
zT%J`y(<=>%SX8+hmE`b~PyVCHK%!deq}yvN#HamGZQl<QMSl(TKCqx}uJ<J0z`ds~
zXp-hO9vu5Q_TT>&IzMQL-><X}Dtjd7_9Gp>@5gUv=d9(KC(p4M1&*L@z&&-}tE%Ch
ziQ(t|vBlnYAI{x^lrM4HNQKY+*D2;Amc=7CmU6ES8rc+RmaI+`RR>(2K7VEMvris5
zLUj7{F~0_I9uhdN<@&CVh_QEoS1@KHDfc&H@2Lx#Qgb^GjQ;~h?z@HNU(4C{?S{62
z#i~-D7-ZY!7SSHK=e_sw;6Q~J{^Aub(WQj00UEPpJyZ>EFO~S{FBrzYYXon;17mmN
z^H&+Wv(DjK#PeUA<cdmQ^W8-Dv>IsG6li*XuVNxm&E?AEXMgwf=?Q`3x&{&VxE~)s
zGJtiz1TsV~m0Bz1el2@X<~8j-i5gUda%+P7$NxTqhj)<unCCmcJz}B;&s<X60*p_<
z?%FVBdVy##V&eWc^X+?UyzseaIhUK@V%GS4nmG;;^Px9cKKzdoCcbwY-o71U??xCz
zxPr^hvFD*tzUzSzw$J6XFLjt*@MN*+QC>F(8nYFk>HVY1z_y8Z{`%zPzwQKg_0g3_
zenbE?PHz{HouImOmHyw=dlD5?6x$l&zKNe@=<p8oM;+huPRlz6;LDelMyhlKzB=WZ
z9*dy9k8G-i^Eun!_ildeSAUG}7?5C-rSBL9j4JQmQ|4d(ogMt<zun7E{r2q)e#c!n
z^KBS=FHjBd#@voE74pV;#@?FqxBt~B|K>kz=Rf}HFz>$wyw|0?WCOjY4fnU!1kJJ=
zQ&gQA6Yq?)d^^A+k1Rd0-{M#}?MnkYzt7nC2c*}NGT-FArxkQh4WGj_Yuq>T(@flT
z8~mu}J0FgC_aOZ7qVnad5aojR;8j>exo<~8zL*f}6dI3EKDeJF`^!B4*i)R&;&391
z&lhFF&pce?eLq{Kvi&Mq+C<w9lXMW%2ya3=sDBE{Uq$9l!>O0>r_NJ8KTR?xJo8e_
zlUFISxYc4B*;H|FW1#7;iy2h$)|Ra&|LT>=&pZLxZk)3U|HAAke80Z-pt*kbw3QX%
zU}*$tCEPpmlk7ZnnAZDq-gP8^=2Qk>m{nW`c@D7;j{2nq__JBZ`z8iyTy@lwvt-F0
z2H*2;ezn!$r~c6&@PsS%-hGxB{`n{7`NCJG_};fV-tumPJ#dzMzKm?!2bD=w6KFn*
zzwk2lYy*3$!dJe$jX!!e;<Fb#mlBVSSN7&^tRlQw(DVh{0R!IeS&5Q9;7n*yXx|&0
z_ENd)>(hJUH35ybBkrpHckJAMAL(CpJoN5}ch{lm;ExuSsTSn9qM4u$)In_E^H*VK
z+40cm2=iCk3=W<kEAMCY{qN_WHyZrhFCODXjgZ2^T~^`ID`o!p<M7VUb@<629p=vW
zI`T`WFgrkOguikcd$L9Q`EmY_kJtE5=M9aD!PKH_YGJP(X!--`Yf5{eMu6E1FfnoW
zYQgbQfn!=7*z*s>*uB9>i}}XsJ%RdA!QFftA)FlTc=p>5u<yY4pno;z@cS%3Fb=VY
zKkdL5=Ahkzyd(G&)CKUk;^ogM>>W@hN`ov;HK|6Y$Ro?xeTTSP=Q#F-3pB0iy#pgc
zM}(I<F<<*~%H6dAcD&KzTeIMs*jKNTJvYq%`tOGMkFyq6TBX4Fbpwqch*}#Pk8fO=
z{Pb@gKYm!?n66qm7BT7S4a=`j@2Lxv`$oq3AK&pd;(Ync(Z(8<g659h^4;9F?+5YU
z<GJPg4DT5S<Kc6e@|jsrqphSVxD31lmqXftP6HNNFgXXmI|b7vPifm;<}ZyB&7L4n
zFY?Bpc`N_q$M2!u&e7r=c@2X>k-$r)%s=~$29wVWW65yS3ve;!xBsNhf1QUY0;7HJ
zcT0LtHv*dFb*S)`G~GbUL1q1($LrjCDxUJzLxX(ypTC8J<$8F%-rrxx(qK@ZF_yoT
z+jo5k`3}d9qsn*g43_3|Dg4olGSk$;+62IOC-@vRhrBJc8?e|`PS3$_PAjdd!;Kwa
z@%%2L$*cJJMZV{MelvgfJ8ws_yqE$NP{FHUjPSIN`S^cYz?OC(P0!?s?fmYE2$KW{
zr@eEwb-kzSgGN>_Ac`plZUxlHb%C?|!tr(OJxSqW#T)M09i#gedDp!|!4g?PwC_Z(
z0vf>}stk1Q;?C`Vhxl!t!K0r0cL~-ApJ*zdxazsugjUA{7u5kx1<e9zd<HI6vPEbv
zz+zK5KBN5GS%^kFbKCaQIK2mRu|q!H=D+{P5Afsn><zWk;yo!{eu3q&CzXW@Rcu@M
z(<k7pNMTi9v)<F1DfgPk5V?UVhn@hyDh0OJd00+D*MwVK#6#a!Cd(>(=%)^IXP)3(
zZv=hS2}{wyw2PYCxqJL)sNJ7X|Db34EryoD?@cMkrj^+yv|5lg72i@c4PfbhxjeY8
ztPSZLv=<?5!`EiuH|CY<F2kjrx6*uNFXmEA-c&yP^Ka$5cI-ga7c;EVvyv}dg=d~>
zViqer_Oihy0b06l?@4a5_jJANiPf*4niagH>+*57y7y!@-Fq^o@UPzRH{UtJ?!U4N
z%p2JL@DBdvFW$v>506r9Tb%3mwU_g05QS!yJ4b$+fxCto`XNteyW#Aj@`;PeOLNd{
z39S~SO>j-n4#Cp&0jFnmI*>J?Jp+w-q190Sau)vmf@ko6;pN@8(mu5hxlksOn1A*^
z9^u~71m3gcRuvj$;hAS*+E;Gnx#@1u|62E+)=jzBoy9k6P}BRes)q%RX|2BZLn7t?
zs4nq~U;o|{DhzdmpL=kepZL|o=(YzC4xt(|@y1Jh&v$L-;ll}U8Xn`B7uqx=EB?+R
zqG&7P&e~71{f@(I|8dXsZo{;LsT3A+NV5?5x;FUYiwwvEaL7X{P7dM(9H?Iknw<e-
z;H-y5tGw|R%gNa~<1a=SpHr?!yy=!beCA89(zLGd5P}%P`7@3$J_RplS$GkVO@Zdd
z+6ZfbhBZ|&1k{+=cy*^PPk!pRx)@ob0JuWd<8=g$6h!W_M!fsB3I4{9@8zKn?j)~(
z`VJ!J5iXLSI{~u`+*cJAWeoK;+yVt?T*t9L`XJl)J;2Tn=FCi3F3c)v74k&!QUt!4
zLJE=z<cd!fx?sr#@xkKY74bce7c|0oX&a?vl+Pf<#_^7~2wz&<&fA_X6Aesp>-Hgj
z=>va-pZVQS&>6^44S#nw^_)!`5Sdj|ZdvIRgq!X?tx>00S4u@!>Hw`?09>WVal@eD
zhAfSdP(9i~nP2*!?qcN4m(fdK0?DEFI1KK>&re~GU*y$4sq;&JnDb|ivq&`$#}LIi
z#}2-OJ-dH^?cbNt++%okQppCCJO$^$dEcwim@K?JMFtftOyGHH_xs}idwFLNZy`0{
z1rk;MNQ87ux%Xk=*!(bWeX2}lXo0sMxRalIu)!}q{%PW>1kt9hE=lqI$_uK?8kRQ$
z8m?2PS&ii&*Id8VuoG=e$z&@7;k6r<K2)r^AT9pJ-~V&&8OwP49XStw{}9Q+DO_tF
zJMB34**bss<DL^y3#n>x3<32FXZLV$*WYCOcR7;7!ZYU}tthSljqlPOd;mn(9cdoi
zk!S&uJOD~^5HH{~IPNUGYi~doLj33r#8&y_w2+U%#Jk~3b7kK6TuiOh=0o>9%ySoJ
z_-|JqM<OZcP}hQ{dm#sby_JY(TluoAac$7BftY5qO;PES5i}bKj=MhBeBI`rQs9ZK
z!|z;De&#a~AO5E~lTVj1b4~2&nE&(Bo)dNv5d}3xTCOC`aqbxVNk$(Ow%zY}?sSM{
zG!uLav<2Eyw5ezZ=!Af{8wBG5fHYr<cSwO$5m#8IEPzMS@H=e?Iw$0df@#BJGs=sx
za^?q=$0rP@E>$=?UFN4AILbk{2USmRU}Oboj1^RsAAD29KmG7QY?cSY{B<qODlYDt
zm}Zrx=!Qm@WmRXjx&vD^&wqUzmX^SE$s+iJxs+e~zXjVF=E8}XV^>_!e+sH9Dhh4O
z!TR4~<nS>2-syPZ3@j`vWZ;|Nn+gq(mO+}J4K1=LK{G9iec}56A}Op*0iXg%CJ&(L
zeRTqO{2b(s0L0^q@M2YX`mYIRb_lP|<jl4s{?2_rj9rXSv;f0$_v9QL%9{MGpWem3
z2Zi0*>C+J05OZ&xKzQ?@ku_>PYuKQz2F;BP%lX1}b$|b#Pj-0e3uP`$mbs*PsBDHn
z0hc>=$$J>T?F}6GcF(Jq4VR~bMQ{zE39=xt0L+6n1=><r8x2`hrs4Z;aO^{TV|@4$
z7eHh35Eq#a*i5jgU^`$Mp!30+`8Hf=LVZ76_)*~$mXp&tL$#fJ=fpe6(yWMM!sjlD
zaG)0PgSUGA<*$q}`j&T6+Pjy(_x>6-ZR50mK<CDLPn!h|n+cA)FQr@9M!1<Sw-!Nj
zJI?sk-%A-V7Ag7g$`XEGYaL+!{vTrJL!PMxIC&YU5Q>Byg*c28Qhb?Ma8}Vsdu4U;
z1z2(rr%-@}B49QJtxY`G1fnQVE>r{Xv{l@6Ca9zNL})bNfqRu>?}ee?HcWPudw0H@
zFHb+oeA4VqR@Bps|NZaQx#LGIZe$m^AI8Wu@BR6Nu^o>8@1rS?&nH;3oNf5pgJx}s
zf#~`H@fP%+Zju_IDq!GKSLRU_BHPVM1eZE)seU)L+ajiMoIhnyt9Tb0jA9{o;B!Hn
z;2MgV5bUAg;*1H+NW5aa39(EMFonBvOL1b9K-od-rSP267??378eIabw1sG1`7-eS
zn()r|z@K~;N-sDDs$~w;?%@gdMKB2lxM~xA_FrG-XJ5+s-XD7vd+=3cdK!6piUR}t
zIXIm2_<Xr9UcFxLNv=EbaDCA9SZ^Cm$N7ewdxD}?*1hL6G~uGW#GYNZvRF}OE(%!&
zJ{EEpihI(5#93_7@y_rxo65kU(9TsCw30QGK-+L&oCJ4N1jNP_d>&PjijZAY(hEQ;
zv|a>THYB4EZ-;1y$L?0lcBo~Be;32f9Fo0C=LJYx%C^c5{Inw~7a5)v&N9G1{3B0&
zpv~Klo@DA%F~9t~V|;GL(yml6mZcQ_hI&t%1x^3=W^=&#MiXi@MMYT({bOSwH!-`n
zC7hpw#g@ZZiv?<4h;xv(vbfM-dSQW9E2F-18}Z%}#w$hwJ+$kVj04FE@MO|+UB**T
zu)!)wB-jDZ`9Gh;wcA8CB90T1a+$bNA{mJ&O;}3X;Hj$P^KHvd?p$QYJ)TBB%(Lef
zVP?4%utsp@h>t%p%(p*K<)8kZ@>n{C)UKVTxZ&Q@CP5?X=-@=FCR%C`+?KWxZUi*F
zxg=vyuRSZRMf9U8xTwKrpZPf7{g%JOP?V5+Xtk8Z1>x#Uo0)|cnQJ4~V@;XXjALLg
zSP`t((6x4gI1L$7F1<ileDUAHVjF=-LF$IdlNrrfM^cJOJ3`vZNgHjDCeh^>dom&}
zMU?9?w+>|tCmH*OEeGFuk>C53<HSiBF-7+u2~t(S^OqBT{of^gVKLAxC?-fZ*Lz|M
zKqH~`x`HXOZj2+nVYAl@G)tAzP(AJfq)1$Skv%z~rU~QKDm&_Rb`I6qHZ;b?$yvVi
zwf__KZzhSxxjL8A=**Jp6h69ukLGY`o83b{j8^YL#Sx2;cCAboD7`AOLLOos<F%0W
z4(~7$FeR|DAu11&Br&m+sKqTvPf)E4Q%)+N6)XvfhjEk_Uo26-#qhCz`)7RdmDAJ)
zt3A;4IbhDVBmTuRN|e~uv(oF5u(k#?tQcLsE^tiuUw#W4maBlq^pTOeqpyPEi+)a?
zL(Ny&H8jHhkzo$*+|K^(+Zi7or&QWTmJZNpmua+P_KiF4J21^tFMo|sJpCv-*h0#R
zSPcQP7(^ZOi=Sinw!_RR#8xo52L~n>Oc4m10yxGAQh>(zrR@Nb0TX$mvJfQ+HiqE}
zNcJ2j=YNAF9U_r3H8adu?G|du4i*|^PPb?H+{qVscJeH>p=$5)=*r%Z5u#+RRRuTK
zd)hQ;R9D$Cv6jW@NzA*O?mfvWI|sVKx^|(g;Jrt(G9&Q_dq;M0>-a7X?%Kn?ox2#Q
zZo~N+^UZ|m1;f`~^~^P(*~-asSG17~*6d)%#QS;oJ-hhK+228u&ay=uA~DX)g)}+}
z)87Wcc3o6f)My+SAKX<pMGrAXc)l?ZmjzoE#2Rem7#RW6$vM-gVN2j?v%nQ*)3dyA
zMGzN?LFICt(onLj=(qBQ?y6!e-AwBhXE)n>S`Rc_YiZW05l3sw0^WS@iEC;yim2e6
zVmmb^26nS=+bta2xsL-o_c1cKi&8Q~rz6ZQ!t>`HGYd+y1KvBt<`^sCt0csc!Fq5A
z-aF3B%~Kz`pL-V?JUR0pu$2%Hg^5T-CB?=LW5GtDkY|19Q5hG4V(SEP60A&Nar#M-
zQKUpwh$;}pLQ;m20Vqcfuf9is5+hh!!rCQ^;hH(OR43RmFo2kp`A&nmtj%KTS@e0(
zJByM~eptziF;e`To~7D+?`b{Im}@{IYmm6s$*NXC+)cI-^4v3&@8#A#hq!IeAr9<5
z$k@nElDI^>4RZ^g7cY1ki#b{5d$FI05Xa!VHo}BER7G$amKHcqsIHor`K-y#9dF~}
z!b@E7U&WfZSU4l(WJv6>i4YmE1&Ae8OcvaeDY7WhqCeFa8(IrC7Nk@Z0ZT%Z7`BfJ
zyGm{T_(XBCi^3p<+x0GIs5Q#FZvPJ6c;FuDm555oQHoP+)WF$kt~M`mY4$4Tu1<4d
zrp4vi4wLg87K~zJgV(qZG^Pipuw$hNuw{#4n%+XEwVRx)W>s6&u<ZHp)&LLRb(HV^
zo_A4+sx;?ecGhv~oTt-D(Oi2UUPOqZP?S>*0kKytz@p1K!fFiOD~iJx!IJkvTReB{
z{QxsBp2ZJd4Fw<+6^|)-Y+|t{xFFGxVjEw8#)Zpbd~vKIzQKYup+6awA*u*AQsT&P
zU`K~-!!0N-Zf~`cK-S6FXYS%%Z~6dnsmh7Tl*nY15}{VEQZEfKQr*FL{ca8(a@1-a
z;&K~bT4Z+dGH0(`;>_d>=PoUB=Hen3rc!3JoK6Bz>YZ=x3Z|*_xwsn#&Gm$7qqRw+
zH$N;FNZQJTe>d;{;Cu0s@zPg1xGuX6A+|+dDyJB^4V7Z=!8^sP?*XTqzG4b)q7AMn
zcLvml*TImxj3gT5_U#|w_|@OQ)`A7|I4EV<l0{+=(NNFP5ZhQU*sitF@S45PRb-}7
z2}}h{8EgqEvElAJ7HFhPRn{(HD{H6RmOQ|NxBpdUGKXumDMb;bSTJhoc)%&mdC%o}
z#a@7tDN&6p)G8y?NA_}X#Btw#Pi44`#)~X8r@1nDnODzEaq`qOCr{6F`f|!7iY677
zB%;g~fW~Yl9cN2GBbYGQpH>;F-OUqUX>jX-Qm|*m#D(`7z|kE?@${OT&MDse@YRi`
zHSjfqHXj({vDP5Ygpn2vmPaL`mA4riy_@m*w=tD}9uvi=dR)mtsVK-8mO$gcdc}G{
ze3vsLs4Ok0GZx}9#8pTt0XSoW${n{a^3`VxfdCT<hiR+BKKmB#+5di~nkhyEYhqFj
zGA2o6@Cme>BDoNm;68Jd)Vnap)fVh!B@#oqRHs%Rpgy#NvC+fqyH|PdJ5wmlGvAu#
zmD6YWZy$ew&%DyYmEs<JZVohBWWci7;Mm-7?@7B|Zpm@}D$hJoX77PpNy>)Se9>$2
z!6K;&UP1*xUC6TX+y$nddb*BGeL<#DL9Ad)f;Ea-p*3&tPKzyZ231I1#=f2JWA2rg
z@k5g#P);0D1|kh3HWJcs>lCYCyM#&UHhPO=Mj&yh;gklTTniQCJ=;=7M%!eW4e!fC
z-p<*sZ|3%WKgdkG0}7F~P;9c3l3;6rsgX4U7swhRHc+xc?1Njhk&;B==Pq-kz+4-+
z2$2X$RHiymVq{{1H@@L^-tpi={P%zTKk}Duo+ye}gdLj&P4QQ{*<O|0Z11Uf14+hI
z`_D1+-^-W3c$T-l<yP7YdGG>7%BfNS$P3PUoC{yM&kO2A5#wNrz*P`yQ4yjFlq%q?
z;HD#d?og*-49?})q{{w@4{~DW|3Zw1ipSQ2#fZyAC{i%-Y!UCE+GnAIB{7x|6jvas
zLR?m&lI5=L8CXl2MPL=5=Zx!{Ikf*M3t0zI!HO+1Ela5e<*^VeHK!qO7oP{nEjSCY
zSF9CmE@Y7s+tAoGIYc&CCS#RMbJ|T|@+GB}2``^$;q(?HdkT$8h-#0Jw_eJ<mZqSp
zY$iA^(%0^SyPNDiiLuO?;|z2T@zOK985^&0>(1?5KARW4r{L$+u>=_B@IJ>m*Mp4j
z1^7jC$r(CrAsT{m9i$d0oNn5LVB3L;C3QKYqlXz<cso}X9w(1Fn6eO;g}4OHD#k2<
z#`c?cDJ-V}8-u9^;Mf>!NvPL7<8_NHR)7+|<*D1l+_wLRX!<meu&}5Y#2D-VRK_8y
z!{QV)7YptWU?p_%Q=^o;5L?9vWDa5*3YOM}%+8o#p&}cKlq1_?p1U~1?|<?PSKH^H
z8uit5uAg!*2Ti|g(`(Z9b*ejd3mcZj=7O^4V*5{tq85Mgg%_D_E>Itga9Idyx<Rq`
zipw2&o|8KlK$JW3+~b^*dnI$8+$mYAbXw4whj>sJzD=m_gVLyA%7R8xRH0)saol#x
z4^Yv)WM&al6>M3Fk`T98Q?wH3`x3CGxbvgn7NeRFl_4$#i#0Y1z8pbXq20<UHE-qM
zzQ0CW1JFGYUMy-2Qisw`C{IAU1M@TCzwH#-nbOXbPNt-}&`OKnWkNfJRtl}+xt%<G
zr4CxDViLo=wt4iw9jBRIWir2njY`+lf;JDD)ixV%NRodmg&GYE&2y>oX~a1m`|LB2
zWJD!P?u*utgWM^(_vAkOx9hgD0zBbMm%h)G);!E#R%&C)_+h9Y63XL3byTSDjHqsl
za8}7YluNhcqZEqZHYuz}90g*Qu>nY?n3=LxiK4*4u@$fbP^v<y1f??6hLlAybbN_i
zDs12Wy{IjbW{UF(UMwUAQ-|_i7`QFCqnSx)H6hKEH1}kgBh5UW4ALArsnSXVU%Hb^
z0E<&Pxzg@HCxcF=cm!Wle)spEU~z7qbB(WJhX;xVF`G-dR{@Qz0h)DUoX~REI?cT>
ziO{OP%1rC4)cpf|?$4j$9S^*jRwEBXZcc-%@*eMlwejBLiVn7ya4~(ztMLwes;Gg*
zDPiG?u>aejJ`N{i;p!{O<e7P<FHW&AdxgxmSX`WBce0PD21zNzDM=aPB=99n;i`Jo
zVq0vlsDRXjsHUNQ6GL2qcrdV08!o}SDp{0ZYC>(GgnG!;K?$N=!qD9i$8hCkWpO@~
zA8?9z#Sq-3SC3+_#phHP-j5Ic2b>SFjxCfhMt500@wunDe5FA%eHJ%jNld&(Ak1|G
z;Z?iin9VQ%uhE0s1ZY^3PZPz4x$FsSI>gyCyLqDaJog;9i{^z4S6CTexG3j)-7NC3
zP!jI~c;dv8RLaC<uw_v7oO;4xs)il+3#}nIJ(V+cd6ulPfGQX}KxD=+ktL}?k|>q3
zkXHmLDa1WyX{g3Z$fQg;fJO!&t_pDlk_5_Cr8x)<r!3|XnX7ST@@d+7j%sy`;jwKD
zjFzeIv5Xyt@jY<qab@9(21SgHf;z<eK=CN54eC6;DB>wf(&dpTM7EF~$&}&oh|hlI
zMNYhY38$xN4Kyg1Mph^{ZajNhyD7@X>o{`5LXEQik}wtGYQ)Uk7ujaNix*yKQBJDt
zsPAKXx`ERir;78ThT}rDk0^?WlM+c%LB!z6Xtb`fII~Ej)u5GSXnBBhS9kEnq{1!t
z!PRpyX=8#0Rq};7P>+$6Qe-LDpb~?WAuTB+p$Kav#NJvcLYhP{RiLU!RY<A@Xd+0e
zpcSRlhIxgKi)m|v*|fuCXNt3}Nk%xxZMP4zeHWa031(je?+n%&qB8j0;$4o*JwEp#
zxVJ*oi?oXSUYE|NW}fk#F<(3JDo;H1DzTkr-kzp1Fdl}sWo00|(M4)&%+U!OtsKiu
zbA;Di5+>ociiVWwxi2zo-^y2?`V8Oprthax-Nr&=5k!b0Lu@Q!Vh|zM4$by7S7tA>
z(7MWEbA~K;K#bTbQ8YqgA{tXIUiwUlH|;hYcqhzUh{-yG;3G84v9Tkv38k7ckc2Am
zVi|lHq*Az47iu_SfC5}n1ylBvN<t+TDmE1Vd=0W(SX4+g#w0`7av4c#BqKW*ylaS&
zH^I5{@Y0`TG%lV;n$wgNs!@$vX^2{Rh^SN{DMYt@?ojn)uGlBx1#gR<SLzuXi+Sn7
z1^(jkXNaRV)Bag1!`u5nBWrZIWu5&GYpIiT&DTb06-CeEHQD!6{H+;WWN!K|D93m3
zslWUU-njQ+2Ffwbv_$GEEHr1x{4{NMg+}Kr&NT|6M@(b~iR=(oDu|RZ5`(kk9mn(;
z#|xhn?*0*B_gkR7U{F7RZ+oJqVl4~|KrI%Cp<Dv3fNK|pKfg4OsF5P2Q1mlph!ZHs
zP!dHV@KqseLQ^5t1XCKsRBPD5G3xur*!xzYR99a91IxlpgFKrj>&!6Mxs1yfFq)It
zgi12bP-Q#y>NvIXI0L0RiH$Kunl1t!&$h9cE6pjs_|?a;QHPoI398$77NF7Md~c-p
zv=Pu0bd<g;_y}E<<8_1M*J?>vH;9jru{JXop5e&-NBE&5qYMv}NNIEC!Z}{LaE7N&
zyvW7#lPok8rzI-M0M&Ax$d-vrf)e%8PF0IfA#cIu=b`=t?0HC-xdc;BD!viZS*Q>v
zo`EVP5%>fuWpE|PtAXBUUD4jKp;AmafF>#n<&uP&ihxZ7Eh$+9Ex?&FQFWAPXo%AG
zA@)2ZjNc9~{Si!`$;sOtd=`LjZ4E<?bF;MFB+bStF3+_Pg-SfiKzRqX(sl-`w=hti
zpd1fSFULIl@&%rL^+{};GS_*A+V+VegL(}>v(&WMXmD&+QLVW7ZMpsZE!99h$eO};
zz5Pdc>;3QMl_vN_VW<w{`wwx~8{o&jze78l=G>+8JpIC}Jagg#C(pH*nO($?P%hW0
zmJ_T*7!8UNnnB(W&itiPKOpRWhp;dS?uw%{pHM18xvW&;Pyn1OLskvFDv64b7>Y7-
zQ~;+`Seqm$kd{m!bZHE^fmA%XEfLqph{vjo-EG+SAY3}GTzopX7|nwiWvG@Lz#<Z3
zO@fsSE1ooKadq((E=)a#2S&<c9NN2^x4-!=?!3Ls)n=Qi);XSh@dP_=zpd}`y%wNh
z8P_>HKGL%}*Oxijth(oF1hD?5XcsgM__l+8o!f7Hm=mW`Y>_csor2Tn6cY)90}*4R
zI~gC`$@hQf1N`WFJG9fQoVs+8C!W8|lh1cJeP)5_X(1}r7^p{7N)eJ9(#f1xzNFmo
zKEv*}3s?Re@`fdjp;lJPBDe&qWhE`<p}Y;i3vOLd<1tmilmdaPWJ7<n<OS*G?iM-<
znT;rqMhxC6?0cKCFbk)?2-*tL{P?^G84O}AUImvc?M_N3P0_5yP}Oq(!Gqj?_ZV-v
ze+O^4V}yNs28l}*=u{yY<A3;xHoy3bf5h+q<t56cxFD)+AbYxIjA?z)tR665H>+AP
z$+?LY%d%cmR73igHQ|B1Kf=M=jxaTuA;$F4C>8P$n9Vjl3$vc{CFO;RP_0?E4eny!
z*e?F|_e1#u3rx*S^UTRfzWm%Y$4}-=&3YEoVaidAoQ27kVb6V@bOy2os8)r+1d<F~
z1l0=ID&(Py0ZFJ4i7h5T%R*FwC=S4hB{V`!(e(5Y<f2d!YP(_YLr@-s<DXFSxiF(;
z#pAUo>@Bp(+S9}`$LLUpdv6=!O^5dJmN$&>h66+F***-V8fmM<{B(tLPsDVZF}4z8
zOUlS#jbHw!AA*1UJN*7vE>bB~198cibyM!uc0#NVnkBW04RMYQs|gw2NKCV`DH=XN
z+VR}I?FYF1w)Zf3IqTIOOi`t^HpJyx+(|wK*AlXMXqT17T*k#ID3^udYK=XEb>4Q@
zKECIH2ANsl)btFGAD`l@uavnkJH*K^)yRiS48IN9b5I`elu_bB9im(g{F+V%4h2^T
zJsJryP7<VK<5(zJAwr3YIVfWTfV>FQl<_wxW49SDK5b}T3OC5Yl%qX0MdB~8eYD9P
z4+!_Z=@#zUb}x6TWzU{6xR{w%naP=i&%YG0*iP^^MxsC;5frAvaW6)WohLmX{h1H2
z@GJj`&%Zc{jmqm(gxAplSQj*_H9$AS$GN#cc(u)WdFHvb_HOPv^Z}+OJG~CM7)5eJ
zmWJwT9Cb;)q0y%rE{@AX7892st3apbnQeGZOhdg?W};GK-`E5ndRLpj{e4X)TP>bG
zImL5NS{C;W&>pUnRjbrZ$fnxrNMc1wf>bmV8neE)+-*TvNGz0Wpfec4qK{DV6?|++
z_QSSe;rvO*i7zxU7aELYO&)whi~H`$dGi~0aOloqhQ|h=6qthf`J6xe*BNu|h<0v@
zPCaPuQSZW(X&#Ol8>l3ZC6F(GJ(ln*KllCot&e<+7pK}pQB-INZnXDwJ<#;Y0dG`T
zNtgM<%?HA(wJMy;*<s$oy|@1uvojskyPhfqPBF#Qn>xYALXrs9fYYwrba%Cc;M<U;
zVCSKfKxF{3y3(rWTxko{OC?64GP_2UcOA@l?@*J5YjC=LfeZ5n_ooS+y+f4t)v1j`
zCJ^P0cBb96;KAbAf`?-uLa{#ZloMm94?=AO(izW{W{1mDE!@eBy|WqbzB}c<4<y`v
z#}GqfJ3@aW1)3f|<H>zSnuCvo(!qqYk10{)$=d~mRl~GHWI|_L0%L<L6;f4VV>vVF
zNxnMBzx?nI^4I_2zhl<NEa{h;Edh-dM6QizRYISJ@Xdin#Nd6-NPd_%-}@8HFQj<Q
zgN$oI2}MJlB52(Rni{;P2ObYt34|~FQZOi@blOUuL2E%Mm7!8o%2k-JDOYoNWj1D{
zG|bLzLmb?mbNE1;W^<aWXD>7T(q$Un(i$Hn8m}`}wlt^nLdi7rh>Q`+RZB7i$rx0C
z+36N9Kex#A*IG<?%Ypq75AQbI`nC#V+lE82Ck0yIXB@f9NmXdIVXi4GEDDW9Xt#rC
zLA&YknGi<>U8308quM7}sS@M~ZRnUwESx;&xT`eAzxbcNkDvIZkK?QLqK?4LTbdOD
z2iFIV32}~JbMx9JEKQ*`oHQnQ;0^x+t+pX|ZLA3ly+G0`QdHju98;)hxj<Zxqk?Cw
z1s}LzHTtC$k-?q0ph4U$EK#Eh)tWM2hpTO6@UmsNRAXX$jotelw+yss%r9{1;su`k
zbI;7JJK1&bD9ss<u?AvjJIBoI0`n)Ev@bRon9LaMSRPI+w+~ks9UGvtyTZVO7G}UL
zI`X-^pgjnS9hh$l^Ycox0i90B;9L$_4g+;ze6MikIj}WBbM0%I71Y*(2W@~flVV6P
zv_zgi;d$dd2l>Z;<6-`nUw@49@X*p4)paVy>&7%Itjva}qq5%AgKVbf5w5OZjCs@k
zzl~#vPP&LSw%`zJU&V9DM=GID6_iH|swMy^1``E>mJJGSp-WtJ&27Q!aV|7NT_$u=
zXg6VDMwu-OwLxWS0H$(b<g#V3G{D{m6RKHE^xPu9@vn}t_q`+h_|LzS%V!sudtsKw
znK>%$oHy?o;?~gtM)sGnahaL6<)ur?t7qWUr<Lz*<QzI^xH<=mZDDpnX*85hC$uH<
zY>8K`T@I3i#U_j#Fr0c;Nwd)TE=D?*mOJ>O0jk}bOp(H+Q4*ed*75Lt5Ax$jF7n%d
zagthPVC_ERx}Y(u06;dYI=X@0)4F3ait8u`N8d+%_zo7D^H>|vH8Ncv)tjF#X2rvJ
zN0HSKERpkq_k#6;Miih6vsI=TI_(M(bcyA@xKn)&E)F_>SxZ=)R_1HUWF78$Q^aR}
zZ;ns>_RBoBaE#jUZ8X2y;`jdHpYY;yO%Bx$@(=&so$NkTqH!5comRelMLD-1Otq9o
z9%8h11ODXqJ<(rRu3QnCO(oBZ+K?|qD;)(VIt<5qAFO2Fgn<E}I^t>0gyf*>zSYvB
zl=xzzL%KIy(J{|`sDeNBB>c^{zn5oD{5sDsWJFQY71-D$Xk<lq>jw03Hr_^9Q2><i
zAuIVVZoTEN&}g-YOhE$|UDkR~R*ou%dGFqV3M-U*@M&=YqCl<eU!!h{*HsO|0UC8x
zOpETa1Mfq9Dw|ho!x1k(J<Ff|mr1@f_Xo7%Tlt>v`4N8jeXt|W_^sb-@vna8w`u>H
z=jVU+e!hC#ad95nPJ$IFr2Df>5huL*0-Sl-V@j5GJIL;Or$H5r(5zHn&_fEVqs1st
zrZBu)n4ff**n|qR1kkAn4h<6_Hq?zMCSpYk%asec%{lXO#7{l^0e<>F{9AN*Tc69?
zU`)ft2lC8y6}dJEn(oEUvy^?~-;UV0m`^gxJ?=^mX9_E0Wcf6;SyHa>1Ts^eLMII|
zLhc~*kb5a6I*U6zSJWvkhrG+8OO;kL+_6zP<@f*nNuIg*c`mf3*g5hbCr@U4^-9Jc
zpNaYO6SLUzIll1B7x?TKrx_R%@=VF*pfd}d1tD#LOM_l=))HQN(j!u=F3Jng6aj8e
zAK8ad-h!KjNC=YayF#TpbB<g+nGZKh>OHAfG8bs2owQ&8=FrNNMhBWHbTY%GnVeES
z!M&sVaCvLRO4ZGQ=6bHmtW6nRFA!dDinG|&lv=9E4$5VZA;SB@@JV;OZLmznbc+|#
z8}04w9u|5MAl+bEwU8lpkfszDDJXUZmlnX2yP$Xx2K|&QSJE8XsWQIX^65{U<kj=1
zc)9Uu2CDmrlR9LMxyzPM{g(wUU3eL^%Ay?SQ;)qsCGnVCNIOdI0%u6`Lggz58wsaR
zK-vzBMc1<^Md0p>_g=&(y^KjiRu~Tm(SVYsfd!eRIces|vOt&36f&oDa%ks5GlRtx
z8V(jSWv-<(QkXG{ky~hYn#<%<ZX7fl2F|sT@Up3aye{WmxpeUrI-Qi^Z6&JJDu$?-
zr7FnNQV^C3#vA=>gtY(8l<pvTp_$Vajw~!r7N!BZGvtB4Ofg#?X3SNDP8ucxUU>Ne
zPd{;v%lTiBiBK!;0kxDW!rZLk>XkM&au`z~vsZcH%+q}Bi3Ns-3#m9CX2QIuH&kdM
zn7=B_OnPio?7Z@QUoMO@YmdlYe05_W5eCMEGz}If_m12-G8e2*>XnWv9j~;Ur;&OZ
z9i^2)Y9e$XqBR7^UYh1>uRcL3E*CXGbAzDi-!UPZ*d8Nmr`*>S84w{ZM@+T9z^l(6
z=j`c|IIdD3vkVTGDJ2Q036;(+=c8+pbcrh2y<3+FFcl*!T~n_RXs3CX@Gdx&o|<Tm
zkb6UxL$z*c`v%88{Q?d5GMC!VQYq~rjs}Bfas&&rkhZg+jv*1omRaCwzWAlncy%Ok
zQKWQ*Qok;3v&&N9+zC$<^^G)lt)TDns+Y!`wPz6&r!c%D!l}o3hf^h2UoavaS?*|e
zGTNCV^MWbIM8h$iO3vBNG=F~bCH~7NpX8H|Jw_|JOkAp88yv5ba<4g%x8dMemY8~S
zBLjKG?~Pcp`ZTZ3evFaDw=gp`PNiOFXl#h#p;0RJ!LSFa<>;jOlEbIC9c5))r@f;s
zosj<R=;7zCXk!?JTm<8_m)%x}4abf>MRReQbM427;u^6XC64QeSd5hr^!hNbj#wf)
zNIO5zsY_4s%Bek!3~ythk%tKbAB3Q~Zd9yr>8$6r`@@@3uefdo*mX_4&3Q{LM3E3|
zS4IM-Im;ChAEa@`5?M=<#FVNLHuiK}gUj>N%$}KHdS-#<Vv{VLqn)22tIScK*jMbv
z&<$r#s}AI?Dxb0;x!O(6R;`dsjp7(TI?3h5Kcw2&#X$Q`nzOsPoSdgrD>FJW#?bIM
zrGZ)qc-xLVbKxS0ETx0euTi7D6OXR==(>cxVE&aj3KA<5J7b<dagsBqF0<hNlBP~F
z7~e@`sw8nWh)!A|&*>r$V`8kS;030$FZ0aPck}J<8X`^%d52y%R*US$T9~~mEKEB}
z12LVB_Ea~zQ>#k_%b@Kig&K-Wm1@OO8;h7ems2XoluHRo$>4m4xz;3$bF<9MOtCOO
zPoCy@zeuJR$)tgn9Ld-a^~!<eV@cNq%|-_D%*KHuHwl`hmP1TZhm6ZiHqR5KBUIWu
zsWuL<cy$JooTffB$nfwu^}$i<NtLt(S;q$ww-06i?nrL8-Jo4+qi8RX4x_wF{S^@*
zcS@}mGuN8usVAN%<1CY%rzn@U5!nHvs74&uFg8L=0GaQN01JX8wga^MX)a7X&zZBg
zFgCiKMk^1lMx__{B1+y7CeL|pIUEXp#cq;iSyVt%0Kf0K<1ku0yuHl)<qT&UOfH;b
z;o>Z_v(vPi3$)S(k)&i?KoWt95>+Zx%e#<bKg6nP6&nqNWn)~Nb(GbY#CvWAG)qh}
zMZ^-<EYPNrJ<nq61h!MB+Sx~|wUaBC&QhriGdNObaA=I7p>4!*m8=PA+vA-N`Z#?c
z0v{$5`f5JQrFjF#xH9PZ!snhOPv^PZ{yY*HB0E5Ahlry=j4c;IYjBgk+qNgdn1sky
zN!<)H`QyC&@*Rx6b(F{&x*oP?{0anIKJVCbr(PR27Uc78Y-3EZ{kIqb#2c>8p5>Vn
z&mhvF)1Jd=i_A}x>s1a64l>!ECfRm?I2l@YbL+C^f>~$F%w|Bd_T%OU@~#7#<%;Ve
zZi?b^;9$~WX5k4c&Fw^XfOb}+)!fe1r6H11jltm|hDWziuaA+$)v#}>6Q(#-6=M`J
zrn|>)X$zfnrO!M=V=*th@ElW@uQ2Bxr{%9wNydrn0Jg9=#w5M1y<QbnS6C2(krE;?
zv8~g{UgpZxm$-CkH=`rF=}hN6%Mns+#YQkUskB=Tu@Np`ig853FrSUWu%FK%Z7Q94
zSe$W`V#~tp6jx@xf=#Az+Ce3y990-CZR3M)cmtn4{T#1ELl_a9FWh!9@VI{V#EO#1
z`m<F_bUs;ixofn3hA!9DlUrR%d6gpHir@DLTqVndxsxc~#p&74)973vl88#SomO*#
zsmnver84!wAx5^1Gc>%7s;QwFxHQP1NUuN|`a8x7dFC0Oh`BmD$&1guKq}{$>O4(S
z8YD7R;%JyCsu4w1q)WUhE`}D`!lCArAS4*6pk|TT^a)PBd@F+wZNr)f?MnZ5V-```
zi%N6OQ5}tfV1ez5K!s&%jTvaqd9qf>1o4V`Ph5qTKh3;<p2298NGeq0aq6WZ#_RwG
z4<tO(Eb+=r*X@}V+3#A}(|S6A>s@QJc}f0_q}<oDH0#DqveaiV5|Km$43_UAr%gMb
zVm3Pq{uL5irkqaDYV2V8$|d4bmD=DSqhn)?jBTS*s)GZUf_E;A-e#U#ZjVtqeD=@2
z3}%tbi=V^95!RH6;z6Ql2xF?mQLU$2qeWdsOdx+7i4aLJri9Tlu^p!2U*YoAXE<|u
zgj@ID#nsDM&-I83*2Z8GW+zj|_rctBXtcKH15mP*VwE&O(7=X3+<C!7U`ePY;|!Fx
zVSs8}V<4$>OS#5f-#*SCzA7*yeaqxG(y)|G%~tix!)=_8qg@iuR)NN>ArZHv^lNR2
zQZh(n!pwC!8Yi(sq^?2cr)lM9F#0NqRH)|LX|;E7^>Ur0RHZgJ#MriNjE;^`s@13u
z#_T!(Vw?Pz-~JNK<}@?umq?{SDH_7s8j-1E%>c2j6WI#JMoU?QbYn7uNED_JYz41v
zz~Ov@dG|F=o!m~PT4QW%Z|HpcFpAvH=9rnez_|;;=()p8p3lPWD=C<c668vjnh;B;
z#Rx>UL}cs4wn{89)u_r)QsvG2YHXVbOo8QdPa7-lZ5A|iGuMq;9CN*ayiI~eR^9cv
z{6kn15yf>Xl`-NxrJc`{`9)&FiPU%k=Ub%t4Aa>uO!f+i)G50$+MVspUmfMNtx&EF
zP#-RF{5YI`<sxb4GL7swbNOk?<&h%L9VCv1iKD^7Rn>YrGG2u|@8-@1!C)lDNCjis
zc+E)SF*^P-Go3H<+_Rn?yQZkuYb-1-vamQ!qj`myne$Y4y@AHeVNeZ9rCni1U6LZ!
zJ{Kzlxs`HKrW}t@vNg)4#8`EJ!`mwCsvGjTRwx&25;PkflUaK;k=Z2Y_;mnHa9b8*
zBciBEk_?i#I%(dZlP!?tO+0Ok1UKV#0#Ap`&C+&fAUjEH%2doKaeEuH(*vY=2V+|-
z<}a||FHkOzVk9Cm^#B+<NMr_xqXCSGiWw&<I6&Hq!5|9p4W;m9D&Unk8Dy?=9N+G+
z_{u97BGhz9bqbX>)A=bDJ9Q$voB`0)I?^r!K<Vl1i3pK}NG#>J#$aWbiAs&#^%5gh
z2~E$2CC#MoMPColu=y>(TLT)iO#Nb|5`sv`GU6ykYy=p*mM{`gEf1h{NV7%Kyg}}p
zc%R})Fj7M8Hk`J}{Q~nk1@3&oS8?QS5wRu8$#xLMni6p|L=ue<MPV8=j;evsTd>5t
zs;1uex9lT~DPgIiE-Zdfqm;@Ki`grPzKUps&r?(!CQ49ol*+?&+i^>S9-%WI7M3YC
z5^yo41e{BWV<<%l;{y}y85(9F5{!5<FJx-STQTj7*U{2!ipXU)2pVo0G~H%q_re*8
zh?9s1-#J0Mlk&=oSGhVB5!o_HGJ^9>(yU3AH}KlQX$PxiB3mQqbvnGZaoQ%*@la9_
zkC7NLB_caSBtyg!tc{H;LB+J7b0~pqCAgkKgpmkL38jK+u}9h)JS~!VEXd@lLo`9e
zV2vfSLMf?WqF_<9h;7PAjLUP<%oE4q+<fZKeuwSjxAMT7-inQ(y=WM&4PzuOh$I&0
zp^;hIbB0cOgT1FU2J+SejjmJ6x&A=jnxHWoa8K*+F7Li!Uo4yO-ZHwa#-Y2m;XK@N
zc${-*=6LzVDK4IG;<FO9$}mcsG;5OP%>W=Dz@nOAw1m|Gv{)V<s2dhzN<}bS$C?^Z
zRL4kCq_jm=rC}%e64}fU$eb~TGS>Ls6oIG#-vRL$0(j8SriiTsIkh62O%g+^<v9NG
zv)p#uoeb0yq8L8)$xrao$;UW-_G_Fz^$dF^4q-E;9LGfy)Zz*{Md}RA*_c*FU&V9d
zy{FX%@-}8^WZAIa^<_@BBBqh+EL!jD0dyCO=-YIkX^o}R@no6D7{k8(+c<FBDAQ9-
zPQE<Nt0!hzm>1%xLa8)@*OWACk-H|jZ=#wJCZzn*B%&Cs4He+n4iLwKSX)EHF6}Ir
ze$tg-jKO&msDzSWjP}@wA{OxpA|caKbwSAsi?tECjWH&{c_>vanput=`xq~s{8RS6
z@DLBY>8~(5caaxf{32sRw`0Z9X)Z87HOaQ&?Zsl0f|zEY<Dla#(=(QKYM|WRVr6ft
zjj%EIwEFt!>&n%>rl9Heoz(Yeqs8KdP>MI<Vy10naHz@yZyn(7H*Dw3nHgSwX_l!g
zExeDZlxm1^<avkOb?}<vd?!?ZyK$6Bh@%Q|G(Z#&V@y&6Af{jU3GcO!avfY%cP#@N
z=BvC$I3f&P_Y`AH2_eGyHgFd8!svE5_lodmpZ*V=JpBa*2X-(yeS%N@**T0UGf>?|
zBxPcW85$gCusR$%?h;7&&IfK$hLC0vvx_0dp?vebrwv&ek)^rxjnOI!V)UAzxen25
z!=UM#7gz12s8Iwjym*-_m*=?kzyuRJ>KGG~wjI_++;Qg)4jvk3YI2d2CuTT%YLUjG
zP%0(FalPm@c~l)97e-5L6t=lUm2i<wv6!I<f~6q7n{E@bs2po|GLNu$Rjgn%32{|X
z=MfVvY35~fluLD<fA%;Pvx8@!eS-6so?@_e3nGS693vEQTU4bKRVYO@N^vO+9~L7*
zz8F@_Rmi>2@iDWF5@~nG#ER`>uL)?Bjq4mMH<>+c5;TIrdsir^`(9O54P3rF$Mn?&
zhKDQc+&#*!9V65RDx|5yJ7wFpIy-mOS-ii)tFO-S+>>*pX^xHJ-m0PAv5mnPix?XM
zUNOt1TvZBHcluT|n_ibZ4EzelBp9*Fnwq^HSy9YPl40g&=lJBOe}^QlFi_cr5gT-U
zY?-*o=&VVI#A3t*UXK^N7@SD>(g2*yK|7C_ZI{SYvDa(^-dOKxQ=p;$Jlsfdyusen
z+Iy1L15IHHeZKS|jF4rX1AE6Au9rA<YLdw-^UOSZhBK!pnV1-6_wG@KhHH4IG!{LP
zNqFGF9SqdVJocxTh~h$UNpxxPtC&zP65HcEuaM#d2_oGr6BIIq5jIO1r+}zO`#?j%
z6^cxi+%%C`DJR1iLOLJWDsfaHvT+c0D1h6e#!^_Bf=lEGqsgLRjG^Na7CN@bvu>>S
zw4s<rWcB*n^@C%xf$T{(uzURapjj%4g<w>d7*AMZxMj~MJ9mt7`SL6mFV8S}Wr0^;
zxx%@#R~Z|xbK9-k86F<MdB@x=3=fwnRf@)AXpx7mv5`Xd-q1~TM3%M*2TF6H`=>08
zC3Fc3vZNB<v&&+ONx5P<V$rp=rbH<o#_IsK5Kb~C!W5Q8R(7e2_n_W{#VCd4$_WE^
zc`?qOtD%{BoI>13vf6YTVO`LyQA*jUKF;-0?)7_5n*mL@crH(a(x-;~Q&D6%dwzzi
z)AQW2Ya0_2!|dEO%-npFbLVHca&eYRm*!}-Qr`LYJA3g-o@t?eVZ$+$9+Pm{o=W9f
zqC9;Q2}*DANY`Bjre9&fdM92A&k)kF?!MmG4lLI@>;;*oH;`z0JR0c*-@Ua1#YW(~
zd-r?A5z)#W4u9jlryB%~Y)<CH+(a8;W1xYsCNWL(uztupe8Fj%nOo%fXU}u-+zi`y
z46$d=DC6Tp+<jM-TMtZd;lfPV<=I^ysw*Z?&2kQ-7}HnNP`aa#T_d-|M%CpsRQh&^
z_IHbw<=tm7EU6QBsjN#`iS|#3bQeSv48i~!U5YVv=?#cjM3vlG+TQi`j&zGaBP-mK
zS*0zyS<dlm44Tjpwm8=g!)h8%e44^-2PQDUrHgZ%K0U>`bJJ|wR%6%hF?Q@2;kH{R
za5<!Dz7*IyEiPc+^4R_$(kxkuZqVC%{{^$KZ?{>G_R%W`N^h-7ac!m74;ESC75DE=
z56x3u;tUnP>;BC2Tbd%$>1GE;guGDb$i3jwtOpleAuaq`fJXaniVd$;6mGnYuu;$m
zf-z;<ej&IjmNv*3vD|g%E$rVv&bbTIoIg9w<xBHSUS8nT=oNPE8fEA95e5dz<hkpe
z%-(EzZ&G53E3+j0V~U~v6&sn&QXNN(thk_kD-+Q|ETM}QS+TKK`&cT=8<N_6Yd%;#
zk6qf<-IeE&Ah_Usw=gL<AJa*vQKM@prfn5y`hF&>v;WpstB~s}h;9XFy1`-F&EZ{6
z6dC4bTe#d2Co%1IMr0#yzjYV;_l|RAa+b4ar<s~u;Of*_PSvllW5)=$?%z&zAnv&o
zAuPx+-HC`UpnP8d+|8zYxq$YD=X%8QW$%|BA$=){SX$UhG4!{z17XRfEgR+OtCa=s
z<ndy9(+<A70M0lBTTHGhN|}XpE^sfp$KDdq$m*M)d)Ar_PI4O72#jP|f$&DMr<Iy?
zUB8~%c{<q)k&RhcX!7TuKTTty#lS#JoJ3?<hKR6d_c#wdc#yZe^&orqkK&wi{JHa-
zI&+02HesW$_64p5tFH%~;zIXJv94Ab4S{+e<)P1#sCE~oY9C3R-o!)q_q}7P_Kn9B
zVgwqpC+$U4!D9K|bGj{uAU2TaLKIb*?_3F+@48vwmZjV)zPn}#nru$yWbLT^MnGeh
zZ_eu*b%|@jrP;q=V%v9O%si)Fn&QH_S@s<q<<K45*uHZRfOb1ay)rgB$k^y0iwh0T
zU!GxPu-+RpQSI*m_F079+ta=pRo`${m;O+U#w;_@eN&_1?~CX4X1tc{OfNjvV$*uh
z3P}%erifd*%~jvqZEkwozO~E5^qxvIz{vIzQzy<*8W~w}8Mh{TTKoFlh<N0dfJUxe
zx40sqPfCMaoqdw(!ktK5A&OJ-Jm-aHFY)q=SJ-vSFt^`1&YnHP#7Pw9t8-7aR^{*=
z^<oj)(!w;OVK=9!3A@TA$e^e!?FyCRuI;(ELR!T+EeeP9E#C;QcWpLhmNGQ$x}UCl
z)Sl7OK0TmrQ#TyX6f1@LM&LBG98A%2FfQTHT?c8TSDDSG*kN`o+uLySpji>q^mC3k
zJIN`l=*4X<XjVW+45hI$XD|Ied$)Zs?0J%$IF9gmPQN<M=~FX|P1LykjtLIzAE7=_
zBF_seq>7D9F`?l5vLP*cR;IUiQ?*dYSS3f4ULL+Q$Ef`$RaXSRqWzikvOiFfYh0X)
z^p>M~?S8Mlv`S29Y<LaPy|E=~<xwu4X>t6O|Hi=haNmTb*`n-;>sXo%s#Ta9?s9Ji
zG<}0(#TifHD)G4E!raFZr+9B@b(*+5FSgVPSEm~M#TQTWhkx(_U;5H1Ca)|I$A(fV
z#+s!%Os^W-jY))Fp{-lUTh>GA3syr)-raRBJ$i=pfYOyH3D5C;f%Y<vch9{^Phg;H
zt-7)&&IjRa-~Aik)389*kfkY;i|2Xa^f4BAj)D3u%Us%4q}-bV%_BGBs%|n6UcHC1
z{CMT^AlX=h3se7z(ek%Zs_Y{34$U1#<1pWCpw;Z~+_P7B>BU*bCkEKJf0*67>zqBe
z*ln^e#U`pnJD>|I4HKc=@U~9?AczPAps4q#_@z2cPgg?w+)zl%d$Lho89Gd_&a+en
z>Qg`Oww<-F7Eln{oXhY&!}~mt4Lc2HI$vU9?;E!?5Z=%}vfkfstd65M+k09q5MJ(_
zR?3Sly>=WA5buQ9>BmUscQI6X2#qRazK!t_Y65`bI08{FUYzIR#Rf?dqgWyv;d3AA
zC%ubQ>?1F3cl8=XCvCs*ybn7TiuSm4t(0h=+v}U6k>%N%?_(E;_z)xLa(<Jj2I0(J
zVo+E=@9{pz`wq@$VWCN$lXb4p)-z1(y@xoiUV9EV71OMicFQ{Ir1X_dR5udiBwJIb
z**s|aX$}KpJ4v$zuFU*CWw)Qf`h$2Q<arCDNe>jp7>o%@rN)M_-%x|-E7AzP2?o<u
z?JO95LApH<$c5#pw)Cg*{YAYMd0DS8*mGt5A_-lFV_(}r1@CiIGn`NHK1033creb9
zb}rHJ7bp*pvSZtWD+E2as`qp~&@9Dc+Qr1`z&T!=H#vbZ@4$V%K-0})Ac+S_CI)G@
zt}r?OU#Xcpsn+fwcR3xO5k+N;iI-$iBoxln7Xx)&Thddt&=tPD&l(hh-GW~dby}`r
z+3R5~Ss+;kr(OV4fJghOY8p~&RTmhFE-)00hgiX-3$)U+n35wI9%g*_J|a_I{T$w4
zOtUG_^n?s7h&cgp{P?4C4RDSeIV{JHfry?m7`zrr)UP{exTY{ysf<EJXf#gHn16|S
zbT8%FZ8(>c`<y5$VN4VVVO`l;E4_vzeQstMuSj)ibhlU^-3xO2A=3?}#S}DG?Q4`S
z=@a(9ZudCegW&L*7qnK7RfF}4<{i@XGO0`v4b&K%*iE@S);s=EYHwb5&~!hDh{eFG
z09USzUkjXL$Bq}br#!FXk#2i=lWl~R!PV+IyX%8y)nkZI8yH6hU~&E_8gnl&RJxa_
zvX?yTkh_dHs)h!M6zZNm&73~s6kU2mk(zfumR(ZOS}Lt9(OCn?T(@@-Tw>42^i>~=
zCRtbo?RtT(QHvFbT~6Marp+{_qEtr4sMg+$NW`)_faum|Pn!Zwx6$WN^hJP)iAi0>
zRUIzQPjph%yKaPg^Pn*s9FtieH2s11z~D}FP??+k3NrH)1EqV3%6rNDB4PtY(^3wB
zEmDxE3f&tohz(TG{vJ}0Md>PNdDMFl-wUoOERFU+vm{iw^#8#XIn7XYh!`S`C~1i-
zy-F)PhbcKqqoa(~4+X+}@tIWpQX4^DgWl6-K@)B_<9yo5)jb7p`0&xyfb&rWSX{I(
z)(5l8MxtGTr_hs@*hI?B8cWbN3!46EizN^S2V|%Z??Q(?i*rxF{PWb3!^Gu1WTrtL
zb%<;gYm-7>xXV2bs~xp_!HY&>R2C!(y`iNBWs!}k3vJVa7foSJmOPom`3$e2r)E`%
zh|#P?Cp|?c>5$YbjMVo9p~`N5s?dK9Vg%+j?mcY|G{H?J;x(V@Xm%FhqaS5e`nn!H
z`Z0U?^1o;x@~6hcpyD={a?8ej>4rdKuC-jfZcew#A2Bezi`vdX8un|<&i^ra^Ays_
z$kGO#bPng*1=}k}eO}Z`@*ooFJ$a@KZ-clCoUm=AaBE?13cr*AdCl=Y$K`F(Y=O)*
z5%rWPlVqN(`6|uM)8wVI)OL@tZO=Unj@(8Z4YD-QQOsu*k}6xx+*{34Y!oy_mgKCh
zAgZ5v{PFK^9zCj-zPX2G>G-3MKH6odJ&Njw!nmT@bnmGjH0xHKH{hPuJVu{PN=ScW
z>La_*VWlzuEQ<@zQn81qRBj`UJXzkN6xWEN3bspM(4dxX<A^)nV)^`kUPOH!3V7b3
z8dByic*6fXJQ>~xs~3}C)sc2C(9{{CYD9H(8`a98Ws$h5VwMe(Z^5wKCVEes0!>$T
zRy|_O#|m_?-f9p5^o~0|TvwmJD8}wkbqGc_-bQ$>K(lgIedP)10;ucGJk9xwWDTV(
z`>9p$K%*)cA&N?rN;RUSijgWKdxja>0ndN_Wt`7YpVMky!ub>}QfH?r;IYKS5@S^9
zbS{xIi77#;Hbiw`M_7y9n+){@sr@yYd%Br6!up_5F$t>qrED&_<4Z5TW1&~5Djs%a
zVduz^N213c|L5(|vA6BAw(@Q2b0<B`u#NVfUT@G8gtLOBrG#;qq&!5WK1?bXS!f(5
zZ%z?22pBqPi%vRE?wc&m&T!`W)3jO_>9i+F(;2dSp4>I@nu974ma>$Pe2!N8MKXJV
zWY{ve?G~!_og}5f0FrL!yVq0tW&=%7`;DVP>wWs`UwHb+9~?RI+357?1Ag7g@v&pw
z>bd_n-e*50BJmP)dUL&}n+t?D+gFjE`8F%Wvugu885l6M+EXkn9)tM`CA)`m=@wj?
z()KMf-z;QjGaw~0C9H|ScgWI7Qa?prg1BB`xVD!#8d#!(7L{Qm{R8?NKQFI;?`hp*
zs7Pd-YjsrQ-vmrN>^HW>ilY`Db%zf9fBv7yRzH;I?OcpRTUFfKOd!0mlPW7t>Iwpq
z_RUZM-e<HLSIL?UNCl&HBD<~70Zj3(h1WJ}8c0crD}z*O<5*i>k^s>qRrKEE!A)xJ
zz4pDQ>wu=vw@l)pC`;#l>)2Pn^KTqI`Z4?HqaSn|Byt^AP>DJp{smV`zuy=;6e=7>
zzPUitcWhY-QmrX5P~Qc0@S2mR3%G1D=-dEtR3=J>NTOSoU2xT<0X-43uGGluKlgO=
zpaD^1V&n4G3}Su(R33fwBdaox?drferf}R&&i$K(v9Y%;+NkngRp+GFgV-w2$ZHRp
z6&zY4c8NP&2q#5xl~QStQfY{!G)x@ViA-rp(yb_>njT<Q%$={I8nJbtk=F?{232)Q
zG-O@g`0%l>e#d8z9=+QhKmODH`WuGUa9MZU@!>zUrt)3RwQ~^@Z5?Rjbp_4p(q<v8
z?k$$>ezI<lNVZ_#(`zvIv~{5A6(jRfJRGIj!hb&Ym4|=m$dS)R$Bw-#XLHKx%i0hU
z$I*}HS@yKGr3vpd7utcm2B2BJ7PR%C=~vb;%UE@rUa|aj0L=~ep4J47y4cpD+_heH
zZTl0dDk3=8%y`VQ$45OpBF{ei%a@&Z?^CZcMq&%zZw+W<jpCkpZ9yZe>)~x3Xv`LZ
zMpn4StpyG0ePl{jRcE}<KKO-a-Z}G;kFcy}a|5nwxy!oy&@ViwCix`7i1)cOJ^6;M
z34~Xx(`+Vt>Rr4w=YrO*q1^1YT-LlXzJb~ZD~_S6E;1zxW+r!w@A=$U-~E-fvZzg3
zoL)1+9Xawy^xRAT+gHS=?*W;ywq#W`|Hc4~tN|MHbpefhQ-H?jv8^rx&5<LYjWz<B
zO#lau9s6kB1CQ&x2i1$#R-&-dw3v_FG-zatK(m2B_@+Q3>nsU-J$g@D1e#*0m#WW`
zXed%R(GQySg5eu<Rees2kJ(50pu6+V|7E8k{!MGk?@`~utItJ>6)ZQ<uw1uj_H_r%
z>m<~;iD9{oSA=`dQ3YpA9L08k%(Xt&@R$GISHALBuWr;m-4t;8V;+Ee?)b>hVC_FM
zCK+<BjViebL{+)D-qY3v!m@#C?)5>lmge3!e#271iP$KP>Ufu4QSra{*}r(luL0Z$
zXx1qJUhi?dORh9mu730{w~xO4;~rBJ%-vB`iNTAicZg`g9Tr&?H0B0D!#Xj|R)J<^
zOe1TqSl)W~)DIf7S<q;~W_19@CMJ#s4eC;S{@ZlgKl0hfAO7?skEl6z>?0gMeviKq
z1l*v->9ak3h`smDU%JN|eoj>0XKZOZqNvYM^{QbuS9_<knB(par3uSbB(?-JvZNew
z<Dg;f3%9NdG&kIP+PJ0Z$*pvi6U2yEBQeI53$d!sIf#E(UFWxsef3?>hHIww(MQGI
z%yqwM;DpB`=IGJ8r3avUe|5rp_g?Y(eW*MjM)n4Nt?8RlT7DNVTR<wS&^0zA(B1Wt
zy2gd;isZ;T%)4vinoaheRwN6n0!(B>4a@6U8o?rB1BKPKoQOFO{FzAf@rKSn_T?{s
z@BGqDe$-#DM)NuXXLSGp+<*W7ui9?U-z~~L#>ifE**>w+epRQakyV8#P575tm7ZXh
zPgJf^5jHE<11<;FwL$1LX}zIut*u#Ox?YxPCUT9wjI1tdZ~9+xtu}&Lm%38)!&D>^
zk2_^0J}qLOak%FP^MTWU`1k`&dK|0IMh_o*%zu=RdcLtADo2hy5*_8J<y()h%j4+L
zkJ+O~KW6)U^_D*5b@&VdN6nEVhXr6_;%<HP(dYCV<peJYFnlC5S(b}3d}BWP-{42#
z_|Zq@%9U}Mn0QzZKZ<^|e_HTck8eG`_4wA~oBr|t2bESez1P6HuK)l507*qoM6N<$
Ef^;<)xc~qF

diff --git a/apps/desktop/src-tauri/icons/Square150x150Logo.png b/apps/desktop/src-tauri/icons/Square150x150Logo.png
index bf34596fe901868966a787ea03a7742b8c546dfa..486b26bee85560dc355b76d04a38a6b4697cc265 100644
GIT binary patch
literal 27718
zcmV)CK*GO?P)<h;3K|Lk000e1NJLTq005Q%005Q<1^@s6JOOdy003+aNkl<Zc%1FM
z2b?8WbteAZTjAA<ox@D`^yH{f808E?NJN3aU>RdDwz0upaQJ&|a9SI7*Vx83u(nx@
z4JH_a4MrppC6u!?BTddT-90m%(~DL0s_y;&&bd{uTOho<W+aWo6g+iLhu7~_eRaZj
z&iM{-_BeZ-J<c9ykF&?w<Lq(vID4Eu&K_rvv&Y%v>~UHTaeANb>~T5{AtkmHuDTI1
z#J<J@-%%<)dt%QXKL(&6`D3>j8u-pf{!QQZ*I(7$SUI%xd(W5S`Sog_Q^Wo&7<Zxh
z!}&cMUw_RjYtdCdC8D(*>#uLUgy+$57Fa*>5KF8CU2t>J>1*_zXX4PB{)UZ9H}>C@
zDbCo%PGxU9XX6d#y9&>z<1DbA_8{PB=+?!wCE)P6qOZ|+2wbNVV1k}Y0Nt{;c*VKd
z>r`9bM=l#(a8CcLGAOwOxn~N{&%|Lr*Dv5qJLuvOa3nmd+q>lY<@w8gzCXX_!j2-W
zTI2BkBNKZ+cewW0*8)s8mj3){`MX-<!p^nVU2=8CRx;<Ss1{xQlFrhq&#c{gps{0n
z3i#*4aTZuh4svs3k@EJ&HRtxe^Q-3!{M6R|6@ysbC2(yAuyN(c`jffgo4)q_9o2ui
z^|oK#QM>nFLfueONGScEcU2+*j0;b^YTKIs-glX$n!4MSR!wcVwxn)6|H?l*^w7>5
zIR?|G2guL#an=?70I1sR%U*o#st+BxWW#T4EneDJt^8E%SAHc7w_hEH3nklMe!i%_
z>x1WepZ?shefHPS`=zg!P|6Uf2weZ^NKOcLu-CL*{!_1cQ|Y{@x9CF-%DCy;=!*TH
zfBVK8&UG%ik^jzVcEQioaTZuhK-J+~^Qvps{?(l;mtS9vE)M<b>$DeLsBM3_kP{ax
z`N%oFc3A24RG_iyWh=|?|LR*``N5liZP%L2U=Lk%>;C~<f&oQ;S0mO6=Vs2`^4_;x
z@Wp`}qq-IwTqy=1t#0T@y63;C)BmG)-t^Tqa_gozjq!x}{WBG0Kk>jyLDlJ8{mQG?
ze()R1dM>Hz%e5QaB<=O*Sy;V7V0>1q$r-KG8i}!<m53HPAwnl-FJD&w<<I=m`j7q6
zZ;YIiUC|%^Uw}&_K;YCsE7<VlOS`Up?cconm3v<N+sa4VYFoHlpmiIB90WuRW!ds|
z|6`r~(cgRBzSs1<^tap4<xxCFzkjB>#WNG`&oZdm?aQydX5C-k-P?6hRbHZ9{W>YH
zK1bl34&d`Am71ObiU3x$3Hhc03-Wjky_w?>%Zm`AEt0XaAAjGcqIdqy|60GjI&y-*
zMIif+j&}5xF6`X!qSs!&`F%IPskm+Vjl$RYAsg;C2yqVo1keD~T~N_sKy)Z6q2?ZK
zc=vsNwEC?(_x=6-hYx*exH-P7hN&9PutWT$gQ{q6yZGw0fBoq4zALNN`Pvn)7xL=!
zBwo=De6^z0ZKE1qq><MGo&))!Wdg74uuvUdkX?lnD()D9Kt2+>D);~Cr`>mc<Zsv9
zH+T5h4}vSr9+!Ll#ak|V#Xnqo-LhLQzb23Vi(NE}R$a$^uCP`^h;;zETEC}p7>FMM
z!jsS{1Ch&ycI<n>Xe3YU^YQSvEBL@afA5MtmF*9mt_<~b9P%d_R9Ufp?InYM^5}~G
ztLo1AaNXBSdCj>JH?#vIO|2eY(6AK{DS<kDjG-Q%1&)LYZ3FF?t98SwkJF{JV^L6>
ze*c%lkN?Iy_g+#OT>e9DF}a1W=)Uy#KJcd-Zn@#T-elXQwb?+`eeFB05CNc1LF+>R
zjsmCy7zflapejIAg{&NeI`n|s-2G^%r=Of1=r}z4y2~>dYFm2?|A{lmOq@Y4<=Hyu
zViTy=3|u<&=f~F#-W<uzN?LD%yyAR`8#*|w!M{{A9-Pohg#bNlEu?1w9iG6N4vn|;
z3wRBQc>a_u_GrX%Kxv_sjH}r5M;}o?|9Ahe>WSKkiPUnX)?`g#Rqubf;+n7CaCP?b
z_2)-$hw4%6s!%&wSM)4{$PNJ305tjmH3NiuA*#dBlhe@S4T!Q8%2VyR{d;rx?vsu1
zyCap4Jve>Odl#CMjWfw&iJwGJIik0CasLNK&RO@if?TVj<{OlK;e`^f>jT^vcp?Hm
zJE>49Lp4JHAz&#X9SbOCfX*CnQ5SGamyq?E1*>u#*)AZKs{q8I4Cm|z-t(cUpZoa7
z*AIs?wIAfU9Aw10-13#LSikn?UVq(+_g(l(Pui;+bzKi#+0zS@mO<OyKr|1`9R^0n
zA;)5c@hl#HxZC~0BaO%J96$Qs4pjHv)rcm^w4HIs84IlR?mK;Vp#ha8I=u6{{%FSq
z>wk3vR@$NcW@WFxP~wff1S*X=De#YT8pHD%egi6QXrL)z#X?eHC*uO`IiM{M+|UQS
zG-qMHEM%^{ADKRl*dlPbp&gv?zW(mNJNWL;f99fLf3li_>j&S@pxcrExsB)l&bxm5
zqCf7vrdrq4nk)NyfkF>-eF}PH6ykVOVWfyJe7oEIi~AqBX;1CZZ)$|<2eZsG={RF!
ztn@^ko)bnVpDwB=*Oh+lJDXSi@}{`g^4*_O_KIy1ujvOI1vI3<x9Y&j8sIm9W(>si
zh=hz3(2M{-1j+$W^`X8$4?GseXfJ71@z$&6SW{WiK0uARO}D-N>JR?xhCjLS%@3B4
zx0iy7UJa3=#6q12=W2hp>#jff@9%%`-Q)Ln=44wbQnS-QV;o{(78nm8CUfdjU+s2(
z@9ytz*j>B-8w9Gf7*5Z3rh)2=1Xg+np3`~$mUmtGo40nm{iUT}|Ia?75VlxVc<aY5
zT=SdPik?i}zFE25mq@&78Q??&D&Tfs<H@o@5NZOIQcXZd0!jnaYZo<vC;$SVz@<^H
zKz)4<I2^_3>Xw+xY(g|*Dd`U@-5hbFQl|bh|Ldl$zkAJFzML01YtaG&ig+lhNixwX
z@Q=d}{q2YUeCLPjr}{hr6{<=V(VP#=O8?&by1frR^3aVZgFT02a>>$S_?dc~allIP
zbHk?dfA7Pex%uYnR$ud5OTYgA{$%DtF3-L3e_p)y4}aNiFIDre)o%OM7Ow5r$i;x4
zfa-yHrK%0B>Y-Lq2t*MOD}cfywp;|R5NP^9BM>P2z)V@IFO>x*w2~b?4koSjz(^i;
zV;;IX=UU6X`nx`I^G(07`IgTyD7cAX@y!sx=!j#5Pwct-y?6Y}T-_@4xw@g0Rn=i|
zq9^wc4=mhvsPXXk==ap~q<!X$0#;h#x8R8_Yl|0PRWrQ)@^wFNA!DWA|IfI<4(GZz
zT{QFuzn3ZXRh^eBFLSlTWrM&nOJH6A->C!l&udi<1ZquzW*{U1NJqwE(MM2sFk3KV
zwVE}cPF5=bj?HU)Y5}SuW0VH77{z+vSPrrpKu`E?c8yhi&tKhq%S{8X{XNFf54;Tm
z7nNuhPz}ENy#s&i&-K_+h)CBR_0aA%dDqzX_n3aHGd3hX!+}M2vk>T)JslTp>ew1Z
zW&b6w>07<kU4Ib)?*FaOYl8Knb>UT)ta{(SlseW|-D|X$zuv~$L7>M4j>W*&D;f{a
zDMi+&76M@)qz(mS04YM^3LtfC07dRFjuNX?hYV{#EfA<Tv^u<?@#%_yc4D}za~O^`
zKn}M-R5bJnc)jQ5s{ix-Z~oI4cfa~w^j?0j)mUi3@BiUr!=F3!go2V*WKBA`Z|yE0
z84nKaqn|mGUElM<VqMm|`lbz6(o4%>?JI_&ci(jVKV?vGV!Faf;QJq2F9WKKShMPa
z!9TvQujkULdx>^CULlcPrqPwv*j)#{GOMv?UZWBKH6I9ljW|#$4z*GQB(hLTAM~|I
z^VgdJR9FF;RgFd@DDF}_=QaMZB9P50s4WE?57)sOX@m3~=uzRVzpPY!-*3I;Z#HJG
zzMf*FrQqTaTmz%w_~Co+pASWB$%)Y{9vGeYgodxu)|%(baYg`(PFhMNwxcuqw%2a`
z%fe;dp^#fV?RKa)|LN*2|Ko-?+`q})upY1lxsD%w_Zm>y=qjDl`<`7ZdS4Zab#S|1
zEoHq62qf^}G;q(9#$*j>gaVC#EEN#>0xA#;A{9Xqju~L&5)-Qh3g+qiVG_uf0RmXn
z*9dA_JwcYM3Un6~D(4n)G~57dv=hS5K#$qp<uB>2{?B*(+U-Nur57y)SNeWxn5#du
zqkO+azkT3XRvs&l-fr%p=Z_maBO3kElsVQKo#@QH|0Oqn=VkwOs9QTLe2HbQiXG*w
z9SMKyGuK}7(tqD_@SES>`_T5ojeB;S-2drg)t!4y?5m#=Q%Mw@jUB)B;KsqX=ER^5
zm%S18LK{#eN@@WplS>moQzgJ5pacdiI@HWr5&Nzq4Mc#TpNol+7yPH_-x`pbz(;?5
zj+l8MDggxx>S3WJxwbcVDeT#nhjsTVtXw#WsH+0hBlk5ot*H->zVos7-8!?pj3Z-d
zi7EZ~_`ySef7idCd)+to*8Dj&ywkkB=a02IV{QW%S^KK?b6@eUH(dV7o8B|jEmjTq
zT3u#KYn3FRsOC47sBe$7<tk@B$YD<6(|@V(_RoDRA7P@NrtowKVTslGU;Wah>)-!+
zYk9st^z+)S3`m?%8cokwtk^c8Fas*mWQi0)ND9tX2!&Wf#zLwXimaDZrp!YDJb_B4
zvlW!&Ie>Hlkr&cw({S5_%I7q6PRMK81a8R#j~xLv-r-}Fm_f5xh82gAaxMAZ|8?ig
z-#_pd8|oOZrl6w3magcM7hKj56Nk#p;hE=COY(DWu~JL5zPM@aufO)y-@Ex2hgJ_<
z+pC(o=If|oOY2E!HLWxvi281*<HNQX@x$s~jeB-=;NKsd`Lq%hpU!tWKSOZobzl9S
z3s(Jqua|AP>cH!i7caALd|o5SQe{R%WuO#U91hA&#z)|?VhO=nAOj7W7|jGsS_yWA
z1S+;<bp6xpjyNtJG9}|CAS{il1hQJIy9jdvxPGm`W4;I6(Tkx<1}a;zg{{K>_U4x@
z8=0uw{*@ztc~y)`oIYWsLOr1#d1&!${b*2ev*3Ri8vKM=EXw}qguHq4o4)nWpTFYe
zQQHY0jcI7nP+DeO*<J+lJ<zd&K6V^(rym`9sMGtvHy6J5jgcpQeNG+N&wgr2T-D}W
z@v^Jd{@u5Wo##~hU!%R^WfpeMXw+Sx>1h?afU=BTAWljsAsHkQlodl#{G^)%tVK{s
z3Y(R2dju+rl2Zdr@?C7P1l^vFfb=v(0kGQvs{nW&pz}h$v|Zqe46x@3;Ii8k24w@%
zt3g^(ePpIu`q_{D%|{=b`}_Z5ZZ>1JOzd^$0p`pHR@$GG8SHz-&;|eP{1wiX+txW3
zY`wxk@mxXNw?t0?F<FycjcD&T+q`%E`^gX7JNvyqfcBT1Z38OLTD$tnm4AD5S^rC_
zg{!o;@<t1fPio8wAkHSBA{S^lQyFWm7+3@#Dv+esiQ=lnI`PN!k#Jd(XaTlbT9K6!
z#IO;tY(QiHc!10URy!bzfR_bgPsmqx2&@pm<U<;leH-YrA~>pnTvqsZ9ywn4#ee<1
zpFY+6&KH-u#Q&S~x7ORVa#l@_&xNzW+3tp?IV3V-x!d0UlHS!n`>Q{5-rrt)OT$-j
z-IjJP3huV;U-^jt-OrDH@zq*Kdhz5N*I}U}dtu)PMmDT^d&%1xW7Ex2?w;2e^#SDp
zQAR5Ul?5o7{3cC!5phHyNi35A8G(wxMF7$as2>2AVwae>KaR6(Ks(&Fzz>-<pppcx
zypUcF5Lw{TJkYNN-1{`ve@&yqqQZBKo_1OP-;dr``r|u)V?!N#4*j3Nl@_!I?7^N}
z|KiUl|MAwZ|N6)8{lec!YB420e+C@SIo-gF6i=xH`b0P}_n8w9{oQYT^u8+|{fgrW
zCll(qSUvbe&i>};W4}(Il1~8@U`bD|ZTqF$)-Qi^w;WQ@hU<ahDWy(LX|8@SMc@P4
z2M_=<5Yh@DbpWLTC>;W#X($8+7Cj;XP^^{yI{_BE$i$+VpG$&z`q*52peZDLA$3Ja
zT_=7F&;jsh9T*WBr>+#(cbUM61*jQqslyYN``Y!_hOb%kt_K9#U6Ub-A31=Lw&1+=
z!mI!0qIYDY^Hz6XYkuO)ahuOMunaNy)QbNj^}P>$>|bX->`(UQWZClW+3z2j*C&pV
zfuYi?IgGXHbYJw2tt;Mj9lD(IrW<0r><b(@X+RPO22`p6=!S--&TwBWKB$u^Dcvw&
zi2O_#cIL2}1Wt;vILKEf-XhQ~f{Lt|Tmr20a}Xa!E$dYVwTc4G8Rq^#;Di8<zeZr{
zav>)cgq#dxd!mZyZ5O|xdqd%-KQ-s&>Ccq`mBh`xSHJN$-+$RHu~P`Iyr}f*Zgl09
z(y-V!KljIT4y^P@EB@&T{pyj&-v9mE{76R~;bSB7w*rkN?6b)LJ*-}P{<7csXr^;n
zb>)k74wi*o$FwOHQ>Sl3D*~2i0HP)!>VU3jMSx-pM%|%gxd>1#0+fSyllie_BFjbb
zn9=Nz$s^4W<q~jN1guy{i~6^kfE5Cg=B0^1^MSYl)eJOd6|kZNOukOwL@zK?l{nRi
zT}u|rx195i-_D7xo9TTnW#-AMFUt?LU9;>(*MHz;Z~e;Oee(K$>%9JaUyC*Jf?L+Q
zfArFqe<p*Bl~yP4lTMKS;E~SEE$EYT|9r>%zh{Ciw;ZWF`W^nBPTd2YbVsi4c-uGn
zy042$=SFsWr^KTNG+jT$j<GuA-axz*#X%wsvIS>wf{YQxM%2tg)<|-O$nH~s2vQSg
z(bpI}DbP|&mG+pYK$GN_$xkKLkAThQg`SOkcJjI{fo2BqBjCd28sGeBVBo{l;x5%x
zP221GE>_!mUjI+`Pwu}$V=<m|M2Gjjo8CJA_V;)YD}kuE(pP$o4Rj*zvcq5e$d=dV
z{`}4NeEge_zJ2@5-hEUy&_C$}=?@>~ie+U-rYKi!nb-TC2;(#pG+AJWd+lqlTl2}U
z6gRA>_FV~Yd`75KHO=XNL?kE&)<P;9l)aG`LmUFJua(RQh#tr|s}V`9q$McXV+uiX
zcZHORYc%dJrfCUCV%}TXq9Aq)AV7L9VA=HCfV2RcX2r5l$~9SH?9sn9L>|bL1neAS
z+$Qj$g2rJ5-1jj7@fD@WEEa7U9-V!x@bM?!yv*0f$5UWQ;fPCmx4rh=H*WabH@>NT
zK&}pawQP$moOWRJVWs_g=!)fq$3ExbrVo8)V7z(s)c<XU`4eHW%waIpP;)^;&Fy&V
z_sogv&0g{w?WGke?34D<Q`~eXwFN~zR9bSUfaK(^390IU@VR4w>VPtcq1<x-XR8U?
z$>NYTjJcyPDci&x?-|S0<VdR(s2kZC(`sQk0I>{}{Q|)RrJ8`16|mbBoNgf72gqK-
zcM%~ApJGaZPyn}j0&mR%-#rKL?gr6#2qLXIa_dxAX8jc>{o}W`-nDM(hbJES%J$D5
z{nnFvUh<EB{JZYYW#Y$u5lLx1zTn>Xeb4>Yo};%tIC<)`^Lk>!oW<uZLp(!)^_1Sv
zB_}A2v83!QEFb9XbL3vXDWgb&Vi)ZQzTQn=$+!+kpDsEzBvTp=1kD(3miZs4%7AMF
zVUvKQIetpZHuP^zfx9MP2}6peZjk8+^J?goIGzd8n`Mnmmq0kB;EyX{OhVWa)f`|I
z0lOoH)34wS08YO^dl&Fn12~oeg1W}gGL6I2QYtO%&Rk9wyv}v(*OwgRX`6aF_^a*T
zc-xk*y#CU+4yrZLfhPX$lkNNe`-AtsbXtv^TqKR3+vAJ|mI>t-vp}OE#STa-)eHxV
z0{c#B_!b3191lr5)+h>rtN^SSXw*W?&ec$^meC9aGNpF3tu3J`Gyw*dpeHj{ieo8`
zr!=$dG~F)A3oW4>xNexdB#x`-CB;Cl&q8H1z{$raA*_(PHKc7j@H`KhY!=eVDCs$}
zS^%sP*rEwf<9G!0IRclQyC8?ES=6kI%3AZP@nCh~2hT^U4-xBneCuPAfBkc_Yd-w#
z?=;*$eBiEYD|&c}VpHxiO}bK_%fmjCEmb;zX;SQ@yus&8=>t>uf8^B6{(pG!;M(ZG
zBwS6Ywr!~hS~Y4-H9ZrmnYjRsW@JmLY$>ymWh*;uD6(j<Y(kXrm)xR2#pT2r$;h}p
zc7qhoM}o^ZX%OG)Vo^yxAOYJ07RG|ap1Pbo_<n?XZI0R>LLr6BWIUP8W#MH#IGzKi
zAd!K@CF`ol1{#}|SF!wtdG&?w?U$3a(R-in+@!X9_vF~U+wZ#8`^3W!y_Y~m{GQQr
zI5Q6WOaYO(T87g~E!9(RJWo0(Wjm~{o{mD-K*{S^|K)o>s#Y(1g}ti#YUI3}9G{Nu
zsrdkP-$xi#psZ;~Od^iwLK)j$U*}7siY~Inu`G&}bgNT=vUHjqq^7WxZRZS;*mq*H
zsFfyR<(bc=_>1Bx0oWA0b3pGvx&=741L@e1!cs-ohG&I2%c6WhMa>`zgZU-}>Qc`;
z_KJ3iV9Lc;#|rAjD<Z%8#F6$7e)iUfLvd)oxsRR-6`hcyC#nbcz4>Fey=c_mb-%&*
znF6Wj1XxQtKRL8XCrw%{3W+HwI&Gq-W3YY2nl*hx7q4ADbmf}mE3O>q>{;2_-h-@N
zLL^;`pB#(s+`C^sxcdn?Q**196&{LIIf(T9<AI*q8OFm;1ZrYfp;{5DXN&7Z5BBu^
zEUFao3L-4HY{L`-xjac0iufps!A)0#5|kYhm^ggbieoWF_Q$+bVi5?Wc1A(Ema?4;
zEX$JA@6+Mg2<msrqo;1WqnI5kb+xa$q$@vQw{@>TG24j@{jAVRYav&3ML5_v?EUSB
zKl|{$u`j+vfd(3Xbh}Kb0)4pt;6009`H2G7QXnn0MoZ5_Tc(JCzGZDIHg6bMf8C}P
zE3eo*xZ=DugDcwG+qxj_BI==snK=s+)9{ZRMpUT^8rQTPxx(JG@+x)Cz)AJx2mdv?
z`}jY+zKLTaPk)Z*w$C?qd~ZPh%&Ua7d<bn5rA4lg2vwpLBxP;HdL==+jFss{C#pef
zDl^i*B~cATVi3t~$plz5UQhg(Z9_Ujxmv02F6kbbKQMK?^3j*0631e)n03)PSa63f
z=*n-ruBW*AqGGmV(3W+4y?lJv!SNmcSdMpmS)mdOX3&j--w#e&w$5(SGIOSZ>KOpm
zB9Kfb_k%!krH#J!E_Z0ds_rc>+PHl44V#A6Ua?_lWo~(YHyo#cM&M$4LE^wk__GH@
zRIX~-h?F!`fRd1!SRrUZu~Ce%(WdmQK6TaBUv003?(L7B{Im07O!)%VlHfn>b6Oa-
z?ItYSQ9QU|7;P!3(;*4YQv%e)TM1`D9}U}105g08@n7T)37j_IP_v(H$WU8qc$P+Q
zmyi>u^g>c#(i-#i0P_cf@aVyr@UDM5NMqM<sWeUnMj}dDXHx$M3_1nr#^k5(?96Kf
zv`;6Xet3wo=;p9$u)l5NrK@{4->`Yb#_Kk&+PJ#EdjO?k2Q)mC>srk$MD;_vwOS|(
zS#QQt#fl2`wzP#!KE=*R&frumdH#;BbrOZau_c1IDaUHUzjV{v)-Tk@{(axvhhCk8
z<V#MtMvVF-tN@nfFyk)ix{_23!GW(W$5h0$OGAtbNdRLOizx}p9}{{axrHpL;ZQf9
zE2Qm`Mw;fBE8{|T=N0l+ItfoEdy$VeO)vBsiGxqS*5UPg=U>uS95^py3$GE@rsf)x
zN6Y@qXhSW`gqW`ryZ3ZfD$NM_ohGf!&t)&yX#!UICOj*HRYSe`E!V9Xxad`zR&IUC
zx|N&S2M3oU>lHXtny*Cu@SKXuBSJQOUlM`Irpz+u-gN|&O-+DiC_aS;opzO68?Gsm
z3u9u_G|q%7a)s?xx2^kyS57_g<j+huzxR2=JTIQyD6Y*=5zkK8dB^5>iic874;F!n
z+mabv><*b<=O#ZXgkVe8N;$|4QiC6npAKMA5bsJj87)0msnvZ=jI>i{J-y&XfT#am
zWX5gL?_B@7mu~#of4J_vYdZToO7L6-%kt4w6*R&*EQB){oj!SNc;e*l<71<boR~iO
z_*7-$z=ED04=~fvy1As%x_G1`bI&%|eoSB)6YSVUt4&|^#*4SS@z1Wl`ihmy`v#En
zN{C_=l^3Gw@iDFZTHuC(rap2Tnw$oC6l&!){pvcoz-*0@Q$!$Y-QyfJ8?(Q7ziOo*
zB>%LqP;dHPp|rZXZOw1~%RL8<-W%Y^iN!j*MpK9L)In+yIYIFexiJDP2j|r5ZYYJ6
z&oVI;m354T;y*)w*fMmQMI>0#?B`^eg_o8EWjg|SS7O6jA3G0_i+j2=XFz44CwETg
z+dg^oCBJgZvYx@P+>ELV6N-{bm2*8+@Osga7qY)6wlCijug>P1tF=?Psn(puY-IuC
zvokn4dUE%HgNGkHeB$K&BU8gW=KPtH3z%MrQHh>T&3O@Qr&Ax}G+QhhUKsR#{;O~O
zncsia6)#(ci6hN=c~+}aCw&<-w5?*eT;fgCf$2Tbdo>{wlbU9*K_y_~BrIhh30z4L
zmkuV0%mwCOPc0UgV^|3R^{642_g@*UpZ=A5_RhS2y+WOfGyL4Dxge}2H{vlk7$62T
zk|0V$u^d+!7q}!~N1D;Ir81>uhB#STnE@<MLXeelw6ratI}5B{Uxu9#t~t%o4}r?X
zs@}_2{O+#n&->Y4W!dGUQ+3x7mY1<5GLAqP3)JFR%>@GPoQ5kbKWp16o5`wTzDKnc
zw0+@V?7rx{Xsi8(#@0|&e|fGphbaQv(Xq)xhmJpb;L!0qhfki^eq#Q_fk}){g{U@v
z5NwOXDEdqQmMI38><eGCy89PjwfVyK*@Zd3Fmf0!kEJWgPtK%v(woNMi4!pJ2$d=R
z@^C|fl(avK-y*33CswM}p+G<*A}J=XmAX13x4~@;v9g7f{+6{rvwEhs;}6FCFT6i}
z#Y#6S$_`+8rt6a*CNneuGX3qwY9$l|y*##3Db|xXnGL8ATq|@k)KS5pVmE6$0z<ta
zmaS<(XwtFKKLjcdYlp5{{YQH)-|~jsj2~6C4n2o_Dpj#5Zl_z(wwU^$QN~0Dgj8>2
zJpkrIV0>0e`-G)z;e?)-Q~5$ySSSt2<=wHp`NdIh=BDsf+HSn6S}S9Gd>Tg&kIo<1
zcl4p%dk=p1;PGP*9j_kWKaH7rjqtRatRDkd=CyQq7rf1Jx}wJ)4sx5f6r^n{Bc`D#
z3QAUoFldsYPqI=8h|(aO0Y(2-6qqlG16uvR<|5KL7eXn?nVjUFD(1p;>JkaWwv3~u
z>v~<~%|q{aU*+)ruU6F)PttS5Dr`hDf}Kg;xs_z|Nv)9LD~s$KSuUa(n3+#~DWi!p
zLAJ0=u2PKV3TEBO71Bq`)$lSFHm>p^icP2{(XERE5|l#Z<mR=P5B<^M3)a3SoUJ!~
zt%NHrmj^p+4#Fk1;6PEl=>UOJ2)XzznBHKfUka*qQnxkzjtnBmYDLSbDqx+m;aYB(
zvGOWgXp2f6{pjjgD_352N$J(E3}3G7+RMue^B5kUzyr7M*!%f!-0}WL%Xj`;tb_lM
zJ9}1Lp;FDN5Ouk0M_sMkxQ_4Mut7JMaap`cfq-L7kO2~hFER<hHKI5+KSTACB+lix
z$7X>px|L)-#u~ulQD=&;5&4YSBp+2KR)USN8MwVY7x}B_fB8FmCx34!7G+XoP}+)l
z=z+3Ac7@WkzNB;mS*oNpUeYThC(bxCK;y2hG_DdBlyo3%a;+ZVW&{EkC}e;QgH_}2
ziEJ_*UeFvDtQt6P+3)P#wB}}iHVCLw#<nEAAp(ujyi%5A_exGQlv+iNq^;WYd~qh~
z(zqG9ZRXOnA}-CbnDk{=97|2@WU^5c_DosBI&Q%hR+O<El`9og$55}@ynd5?@oTqj
zdD*ou{lYK)?uRaZp#0h2;pG?4Z3n3dtLOb)UksWjWp#c|J+XZp?Y%ZVDNh0?R90e^
z7*xg>uqz}0DWz0Q|3|DM2AHCUiV&;VPz&iJ?Lp`2u8@vLy-jrT$(<5AA*f2C7_fB3
zg=NPOYR%BieZ9Fie1wBC9fjHoxnD|>b;(d5Z%EFB8RA(BGJQ;VvU@aTAGT2RH4fTM
z{}o+Sj;}I+lP6k4GncijBf^Rv5_rfYwu*jJqhN0w+P3_E9N)a^jjGZJ5XZufVev#Z
z-6TBrV@p_Bz$qGF1vLIox)PCqAJPK|Lm|URNFpjoAkJ?JevpPly$MCGvKl~De66a1
zR*jgtv$bkS$cltLUDxiB1MnXCdTdYMFT;Adzr1z%EB>n|`a4q%ujde02G^B%*S({&
z-`$_{Ja79$$D-kpDms_h6!=nlp8Ocy^}+xu3EGM9qz8jW5wK_gIZhrlv#|I%yU2tg
zkEwr(!r_7eR<=vP%F+d~pvlHai-D!3L%?*i+3xCwfnRxN&f2;`>BbcES2^<>WMPQd
zG?sweoH-#xJ*5-R>83)9t~+N91h52L1WJn6GKM52{>pYG)^<}2W%Jl|9BJwoRat9!
z`<CwC-m`J->)_K=Hl*EzEhDNV3Cnm~NAUadI?bdHfv8ah0s>P6G@I1sL+w8#p(Nl3
zLK4XQP{R*28oov&q@OncBt3~*0MtWL(h;cnTGf51x-U?r9<?qDyY@@@H~%zjSK+~t
zx$Noc|NJq5MW;GcqvbEYVsh>YJ0nGO_Z_>@6iwvXsRv4@iWeprB2P#EixWe|mWte9
ztRk{f^lzPjELKEUB!Dyjj$_SYv!twN=YUK*;Pn96ZUM^^5=2zm651kQ+0eF&Fpk{b
zz6+zF?qB<6#@g`OKsS`|ESDPZ9O9nnAvAd(?ph{ZEA1pE0JR>pP*)PYU?>JE-^d&!
zSu3($^jzc;v)LG31-ghHXzW@$*(nbjmap%8@9uSL-;@iYm|wmUHYXb~eWce)peg~G
zF2HJo3SzA)RjvHM04#_!f><M@k4-4Q$sf%l6bPE;K^Cmh)G7=h!zDl@aI#gS?*|$Y
z#g|!$&wlx!s>FeNbawZ2EjpDn2<qp0n8JW7(8rD+pZ)YZV_hi(wYq=%?R${#l4K1C
zMkWJH0(hl~H!=Zx9Fx0?5s^p&TQCNX0TBoH#;TG2XGC{-sAWhes0Qw>%J&KsmIL`g
zjSS!Af;v`swvT8EB2I}pAXl?~<r~(P+)F;%Bw*3cWyp0ItHUlW1y)+>Nlp%fjN>Y1
z>ZN4~DQqD{2GY)ngcLQvBKO?UE@0&)s!>MLbWY6|tA~nje{$2hw+=+wCc|TsMK!L^
zSXnY|)T5Q@F~Fj3^;(&F$qX>)mxA<T1cb4XvZT*hD>Z^N;L-f^>>?v5a-U(GSUW|9
zYg0HPZPm5`8@JxJAIC=~!bWr2J~(sRFDNvk(-pj*hAABbu7&u%j}K3M>9(vV3nxa$
z!UrEYf{q^B^pYn5VXVOEa;!Dg{$!-nhp7c}tksNF94VzDrJ`6Pis)gi7lA8kYK}Q-
zvl;}lwgIU2l|W%FT@(QjXvi&P0k2IU)8@j?S|}Ae!=Co5LPfJ#H2R(aTn@OkB8x+r
z7Pr!*7K!4ngyLXVX@LV|W(3H}QH(~JAjMboJdQ*rCs1lL(v#K5CF)o~cJ-}UaZ9JP
z3SkgyTMIXF)nr*|umg~7KxR3RrPVoEjoJbjSoHqLLNz009!+}a7C0Dep|M<ao>CCe
zM*<sxtjY11`C1$c=?9Rd0ULMRcMOkiKN#k+R$=GKuY7Sfdh{EoQ+(vK6`?7=n+R_G
zX>WS)<Y4zpyj@QmQf-BzT-nnrr%p9NUXdvVvPg+_B67>n4rX4C8BhLtTJs{NYe{pR
zq0WqcRRx$E(a0|YI@ds1B_T;Wp)p1yUA7EJZEr5Z?BoI}^E2?9WjVVrhGkX<1Hz&?
zAL5<Ja*@@c&IAHZ!m6iZUVPgyxTv9-de;R6jnUI{<N%ifZL)ffg6(Q{(RChKbeUh#
zvKZ-1mx^pHC1rmsIARLcG}Ivr8s4BlVGWSUX;hCvmFHO4jno6VhAC<Knv(}k1DFU_
zoUxb^m#Ic@F+Jg5Oj{2HZk*mGO%ida(ZABh?!!~~-aUI%XVJ5djNdhRD!BD6hCCBz
zUagQ`R8!B@PgFm5S;p--(3aa&z5jt7UiKwdq1aZy?4%KsVmBBYAh9dtz&!yMKNZyn
zsdt^zdv2)XXQ!{lg6o40&BxR81Of}EgzR1g^lmXp=)$bP$zuVgMrKi;ok9@ILF*8d
zgA+$VsTOB)0?4G~X5tdz@Zf|A&WT<~`UdFWA{5m#i3Xs)X9AX|85|U+NlU{c&4vQd
z5I|K)guaa^c2SGUGAlZeDY^_odeWvM+Czi(1mxE8&H(shQ1j!))yH94YU1Lzw1^iZ
zZi`-wp=K1N!}K)<S8_9O10tP6%Ve<h(kLDXeTD9R2b1M0zH$2w)mF$ylk>ZB$7`Rz
zB&HnlG<Qgx#<m$F80G6D2Z!fA^D}GYyS`w{w(>pqKb(8%wb#P&EYzz+C(yK<3Ch#B
zYH5jq8)Hb9%Cv*<lniI#o`sBO!}cUw8Tx*GKE}-B5o!$!8?P6jk*aD&qe3wVVJMeT
zuIQ8$@r#825wMxeBn(-$RvtYUb4Hry42g{==AD{umd<bpimj+M#uKc=Ko4?(><a1k
zsYaO7h_ggiY8niZzRDm}HjYg^jOj`qj@^zzu^a8(T_|>YC=N+<ZvZ-$nM`#2gqHOM
zlB*<TL8XX|0g1R#xhn0};Q)|qmShXd#B(~>VNn{y0HJ6ATo0uivZ+yQcTkA~eEGIV
zDV7YY^^=9e^PjxN*CQh>S8(R`V;N0_n%e%aC+7d{#Vb31?wz$-t$zPw54%^Ke>FtS
zPzWi*&NNq2>!XuMjRl51hjbhlnT$uhQ?PBD8S84jhT41`wOSR8pw4<%GGD}Gr5jZz
zhs`$#3|%15m~{~covIeOKvW|JhwYw_AqVJL(#nc7vbI1zV}wIAsnL)m5xF&Dx#@zj
zo1rTzBv~|afiwU?)=GMU>VR+^n)cCDkd}6iRBg0sYI22C=d%#eOq!(;T0ZJ(9P`zA
zjKy>4kgKq)zlipt;6dq`?LaVNn>de>k1V8$6yhl2b40NynQJ2BH6;%;IYI;pyF8*^
z6X7F6<k7{TGA5|!AzzTt*$7|x&cg_Tns3RlaCrKY@2JMR?rSygKOZ_s2?X=aJN}Ei
z(7k1O$IGuhIkvC9-FDmy)?bETx(O{Jke5?Tf)d?LZpM}w+lA|9=~F~;6OFKfT4f&P
z>NG0V8HAC~858%G+eO%R0Zx>GU-ofohlj#43j^DLxpRT?tc7M!L>SwO(Lxh0HX+xS
zWMwiARNeuyF5uJTG+j)O8F*5|YE3)yf9c}6i!w!m`mS6>eOQu;#ThC@Q~K@+sYo&@
zHtvu%hH;c{=jl#?Wx24jB{=Op$geG;?Hqwx78rgM7`eLv-I#@J_{b;=xlA6OorULQ
z;ksUO15#xnrV%C6nLxy9qI+RZykKDRK`4tfoQ!~7l(_A#hp<qd_OltQaB%Ds@0*G4
z`S>%b6!;7P%fwp>zM2WX{z`ixcdD&$Ztn2t1In=-*;hIbwFaql2-tQWg@Vi7lGO0z
zhgF=MK8l6v3Dg^tXhidfb-+~-OJ-qPMOdN$A!u6Ap&|%thDMDTwb=+q?vuzZ0|w3$
zm>v<bS+kT@IToYTaRfU{BDxj08Pa1GAYPR=dXd#3cc_RSA#=l%HcLvC^mc5TvgQ~|
z!ZVCL(J8JC-U`OQMF6FkEfh2x3tth@>q3z4b+eF}9Gp@YiUS?!*#h*e17;2YC$=jD
zQ4K+T3Q=taaku~xH(-(Cy;Vd$(~g|ii(;-DrCb3{CX;p%ajLC#Oxg8foSJY^l#paQ
zEPVfw?HHRJ3v-?<9H0EsZPU%$-?!LV`@HITPlNf{+O+?*b1j)YKy{Rd_x>}k-gK=T
z>Mo%iD9qNfI6hXx#M~I_!2}=|0ILGaBJ1Ko${Z~1F_5J27)%s6q^E?7y42#;R0!%y
zR!;$k?gqBJ9vHe@pte8>0=ZcSI&!J5NY+$kDd<+<wFCsJ48>VSM~kyIDjV797R!{-
zqBG@ca#K8_Z@D~(L%`x>f`b6IXhM?uGLe~7(uI|W<tbRXEM&e7+5R?kY?fHIMZ>RX
zoOlGPvJgV~bxB<z0xm3RbL<($W%$tu=6oM=!6lf%wM)pmy(r}dP|Ek9nCn2s%E6Wv
zG87{wSuCju_VfS`?cR-Jqx++L&dZ&ey8ZD9|EsT~DEFDxHGKw$DUx7bogA5{e($EC
z?w5V<U2l0y^@{U1ctmbxye5Kp0TYv_Fg(|kPwua%U595dHYri9Ql=9ln`t7KaberZ
z?)H|t29X6kGh>R}F>Rj_RQ$%wQDAf@u<~MH*+o)@q&P!aCrvBYY}lC`pLA-EvMqs}
zqfw(!jIuSdTGT2-N-;cGVa`8GK{Bumctk>odM+oMu&8~8Jf=(2*rotXq%HwVTUj2t
zw{iuzokf&ZS{S-e!_5gCzFng{rlkrZrF;r9O^l?u=uS6N6GFx&2GtFOY90;$DCX-;
zjLo}nWC<C&3;9eh+6ya@&vnCd+felKsQNx0-gN+{<`1iUKIe{2-8C`R`24jIYSe)J
zjQ7YtgTP9I!eVA^{|&$XGq3&KNaj22Z|r30PUJifr9vC}+J<o62B?=@LL_7r^Yv*Q
zI6R8&dyeDDLt_{o^RX~n<u;Lgz5vgq0N1!dQ#Pg+Vx!E*lG+vE<PMF}pkNAOdW^y<
zf!NV1Q@1IGlP&?k7IcTJyeDLhT2qK}$Qmqh6ChFJL^&A#idsEez@k`<TByldCE_*a
zGI3jk5hNk)HtuqAvaqumWw(3C4Onv71whAgfkXFe%+glgfJNTuFPJqs%sHh}fn<@5
zRx8C<lANQRqlQJq%15nv0@Ibl+@|D-HZ1FC!-X5SVDsvB6gr#e9`e<l-#>*TBctV-
z^R086dVwm0&&uG%GX$*k#pkRoJ@2~fwJ&?`<>f}spPXyjF5TinBdRM@%P}UVP5VmD
z6X+=9&{bN6)kCXr#nx-!I91G4r?Bt%2|TiU3Oo0fF?y=Z%)6Jdk<D4i@L(u4=#kz6
zEdc<;6maZujg2=7thhwrctxW*CKzCj>zXW%43s6L=V-D#3>u2FxkrrTji|Um386(J
zhNdD-{1pfBR2Q_N91GHs9KnIIGD`20LZc#<o8m0tWZ<>~*?x)6O-l8x7jo=4F#d#q
z@-^-GGDNCrplERisk^5(89G6+ve5_{Xf$ewnh|o2gXNw5IA>cAE<S%bwr%ae)^pm?
zwSsghEr_@zmEEpR&Q9Zxf8$Hhzue8DPN#AI<FgK|6jT|xuJi4md*w_2>*YbytNM+|
zvn-oS4}A8?<_7|@P8Psa+rwJSo!UqEVhfbKEP9Kpv2ERIy!=v<EiPkZdK%mJ%;4cC
z%Gh(Lf!SHo4qA>}(L$akspz8kF{&dPr}hFXFB7O=ATUiyRMRl!ISR5VxYZgiS+0y`
zH%O%tCUKLPilZ#jcpw=hTPP-0T^gRyuq_SOk{n+#XGA|r_YD0*nzmEgDkyRiSr4*(
zl~9A{0)Abqk%xth%Nis(Lp+_PmJO<R(W@d778W9<;73jPehsQwMJ^+;va<^tR}A8^
z%{{pE!e!XBp@cjw1tLOiR-!uRV(cylVcmnwd&+UNTs|}u{lmZgW@r8vin~Ad&G&7N
zF;#gs<c&`IT%kF|wpdmAg-^Zex<9-niVM|7O?f0$r6Mg^Gr=fLo3>>t7AI@m!WtEM
zDMgluiEGL$%=rq(=E(L5^yJ$y*wKmCUk1GOrFG1Qv)F%Z1`qEZ!;ZZ(7#Z)tLZcJ5
z%AwR@VeS;rKB3UJ0cgx>D6(`#fh;w`ad|}W3}7a8aa3DN_$w|QCB<^d{tl9I2d*nx
zl+n^?k<qg?-497Io7|xV$ySf7S%*X+tFi2SA-#fD2krraNn>5fU$U1aZ>WfIZ^Ext
zAk-L2o{x1UiLK}L;*u>}aQ=oOHm+|&rp*HhN{90{rjI)~{)C5GBMYTHNLO+u=wu}<
z;ye^k-lOgQDG~nVhi)0D)xuq$yZZy1o0w`m)8IOdz-kpguq^w=_uY8ad*7l|TeZ3n
zdraMN-Ot1<-0jHy=4k_Y5>l8aP;m`1sA<@9Kqd=h@&YlHN}zDE5o6~V&~CfvEiT9U
z&VF3^h7ibCF*-em?fZ`5;XM|P&b4D<e;)fp4r_04(0Q@x!pwx!T9>r<(nspLbTpHn
ztVc@xEfKGAq5;o^!o>hSZSo^a=ca*sqJBhiAhY6<`m+R8hhTMTbgcr4y&B_(g{)6V
zMW~MIrqEoUnuQ2YpfkUKty_T$&MV=9i<V*I#vTk-GRT%gz*DGC1Ec$GOjWa})EqQ?
zBGV-7JT>&tX^fSoj=oSx9mUMUWo!ZJu&SKUa^<8~{_scMvU2uq<*$70i4VL&BS<Q+
z&x~6<jYNhi3-r1-|K`iC`tuL9wXH0d7vfwBD(*{61|iJoR5I6RIti$BkzPY?=jCg}
z+egiXq8eL<x<>N?8B)f}X|@`k1aexS*ArOLtI^jR!tQQhA@H&9Pz5{oH8Elr5N#-6
zrddL)T)h6R#?o{}F{&ZdLK%`oXam~j<!i;FxDiFpOU_bajVQ*VVz=8S;B^Sz51q4k
zZ8Ywj(wIF3xKluT)98%eGhsn)6f&6C>hOIE<$XTXL<PB^jFp{rT(Bj^1>3SXcWWmG
zR+cDuH0QDw@r#^3sBrto6_o3sNi{&845AmMxu{GJE@ZH%Nn%aOz*?Zn0;>&XGg@V#
z<)#fPtgfBT-SXDI{^SG0AA37Qm`s4_GZR>;S#1+n-*n@pAO2cz-`4WNLX<Po*^7hj
zEU}*UfYY7M%ey6802;&MIz<9ev%Am)uO#)zprfzR?-1La)5ub{B|UP)pc4b6kySuR
z0?WF9zQG7?zmF)aVr;UG!^05{&AAx3pa`|G4gG^24`r3><ep-L6;r394XV79X=xyx
zSS{Y2Lv1qDz1ksAq~<=M$r$3nSzvD3f;|tkOQ0(UeEXOWf8LkDPG9vlD%jlH#Kjln
zu<4vUmM_l(g`7#AsYSjKK{shE#3T*$+UW0n|I5JcM>t_X*dQ<^<NszZfSVLq^@adN
zyjn7Fkr7lGpv1`VTG^(;Ip-_?P-(1i%g_Dc?;fap;e$s1L7j=fGL|YQwq5#?ZGZLf
zVE<Ls`EuaVFlT!3{Xpb;syV<G$$*PK5=rS$&d#0uBq^P&6XAwU)3wRoGMNLUzvxg2
zj^b9E32o#PfMv2KAkRuc)fcomKwq~;?`j3B&**bc9i7F<zA9>@^1r4H{+c41r5q&1
zSTlgXK)o%(kfmvQwggyIu(k`vVs*Dmv>DZJ++GF7_BJrPzkx!ziH=4CB}d@=l^!;(
z^Dwv~1C)p~ljPT-d~#g`Br~{6T^)@`gL>BMb)Z@%jV%L`+di&9-LnLq^roa6kz6sg
z&!q012P#OUBmoy$ERX7$q?MY{46gI8)c*I!b{5|Do4^0siTL|pdnV#7aXLWdV5tAv
zO@B4Eas6xSv$MX<7KVy})Tz+YcuFd73^2-|X#T<Ix>NHIu@KxUoU|TFig1MBLTXxG
z;l6Y3P)Mej`Q!>|X88;_-HhhAEKjR=a<p<pz!N}TX|!1y?L8Wut76Cj;(|iV9$mnx
zopU%*cQMo7iOl*=^!MaYomTK0M3R{}gkoVLth}NHuN@F=$yohD9hGBs?Atwu6Z?Gh
zSAcWYwBy_tw_()=2UbVo+A3s`Vx}0_5>g9{Bob9{PkN=MQ7LOw$a?ywzrEQM+=kuO
z0qnm+VRSE$%k#a*lR|8zxL<$qbAIsW24KXs(IZ2HKlJa6KrT`^_j=`j>h60B|KA6H
z_q-aO+;zIa^<w}l)j26<F6#f|LzixQci&tkAU25;0&;tr)QFQ|idN$uH?5ieU-pVr
zK4F;#YFv{h?n=h8$U50{{*73ziMJSxM%LN@%Y5C)VH<EU(9E4GX_rlwJWd|Sk;@c7
zL2I<<6xwOo_)1dBrIt(|Bln%cz2A*6xuS$EuUZL9Iq+){T+im(U=S<JEYvVHHjnB^
z1I?3lwATby7xGxQJco_TvdEA{iY=U&wV*GOSg{5Or%hZ$XN!PT3k`s34YS#`UemNP
zm_bCX*)(io8Y0ayDFTD2YCQ54jSMvh@_b`D1j2J9=3@%9G&xDE7bO`CEJF%&yxK06
z+H`Fc{lTYhwg2i%@99@KHFr8WF7f02niOja@A&d{m;cY38%?(!$4z&s#G?UIt4F}t
zE#jAx{m1FgnqsdsE{_2w7+@SMCnHzfGMoY{iN6SuiT+vgJ@a#%xv>S)OoGz$xUN7h
zZ{o6I5h!E@3bg*MsW7-YK-5{s{_li1xJ%)m@7@csHo$Lx<VF;Fvl!mDfbm_^m_57z
zd%?%ro+7qx=)#)*JUo}!RSQ8~Vt7*VR*aKXiP@0KIKbO~!)$J?h8lGrC|5P=4I1k*
zK#I6!m<B|+`^pfsEvh3uX+n0k15bQKqcTnXU+nrgw&Ip~y2<D!WSuT!y$sMy=E{_c
zCE!^m<}#i^qbDPyWfxZ6x4!>>?fk~>zqlBvwN~3bhrrV4v|suQH(vVDPrBKmvLDoQ
zbOl?o3rVm0($~nAikFBiSq6~AT0AePIS%8oF;3&@1aL~vfKqhwIGAs_!6eA%xlkrD
zS*U}pA)jy}G1*lr*ESp(Ck!5tD;am$Hzd*JHSz5~8^w|7lely0ZYWuTtGdv(TA*`n
z5ySV@@yhcr$1nYCKl)Z1f30Q|PK+uX8w18Ff)%;uX(Wqh1i`OsVOrz*S88m!$inoD
zMx$<A9FfGl;D9tI;w4?Rv6&t>z*-#gr9`mMCNQ;2;qW6GUXEpzc<BMTywn}0HzCJb
z+}KDTb?e_mCUP0d)+&?qbgk?aexrN5@P<G9!@oQ@|GD4!p^NtH0n5Zy7W%rbUiUZC
z8`iwGx=^jSmQ8QL9IcnN^z|jp<1Ad3?0+y?iv%QNcc@`4-BxeD#8WYB&Z#>xjkQ_>
z4-Bj%W=XOlvSJ(zCw=OieiNAJBCynup(!X6C19PiP2yXh8piOxDSYqL|3;>8C0_Be
zx8W6+Sm^a;aO_YOU$}P$yZ7$H)tfHE@4sga#z%o8qXHAeLrI!`5eS=R(1SPJM}oKA
zH|iRl{R*%DB@2@iX5xk{6urkNYAx!L<oY;pqMp$uljCW!MqqOtA?;A(iLaA*S3<>5
zKWq{b@OvkvC%VBXJ4|9MvR3pn<U#3c%)MD!IZ4JSbc{`_Mg8`JkClGy6Tfz$kDWVC
zN4)i)n9?z5>2k05%{8m8S2XiRZ64-G)Q%TbhnC0?C6<X|c1A=Zu#wKOCBML<=%%gP
zO!iQlaWWrAcY3S@DL9%((nHT5Nd}1?RF+{K2s1g&IucDtGmocL=nI-8=D|)HEcn(J
zk7M`FGIm!U#6oCcdH0Lav>lAKDRf`ogZ7J8qhsJ4%<0{@bH{`D_gl+|3pOTbddA_<
z42^k>#+*iD9`H%VvY`?AWGMv30SPSj(~oJKI&P8xnz|uiHA89!)Vzz)bTp(uN<n4x
zEfR~x_Yo~aw+aIJZZnxfd=^z0sSk^V2+jMaDJY)cp%F2fMdaz62(lRq{yL3?`RUNB
zPp?Pfz_4(yT60<SqSdeej0q}!{2>1S5m>4Jb?ueCH@-8M>!4K-t{_R^rx?E_!+EJf
zON*G-RIHU`si*~ciO3zdBx{~8Nfl&FC`q89aV9?*W#X8G1}k`+OvuGq#UwW26}+hs
ziKa4*3TY0HXYe%Y6^*W58zaZ(apxVwm<V=b_vF3kYC8`?IyiYWz>$N%BfAv->SGJI
z|DlJNt83Uh@a@}=p<J#ZM@oV<jYe6c*&y%|Jz;hpYLbUZB%0!;g@Zd|NZZ^XMp=iF
z8k(drgCZ$cMi!diOG}<9JricIg33)D0|G&mOo>w?A<tn_n+|=S1AbCul6(V3!VIm_
z_!r$+Ja4FZXq9FU>EDeePe|L7Q#!nK^((hJShLw&!5?oj@IUq268XF>I=d}54sA!u
zWN{6@7;<aIwHfzj{+$HtM(M-ckqP2jaZ(CMmU-Y4&n|PZ;BW3?vOqML$<~Yduy~l2
zyr`Mr;X5}8h#6psP6S^7>XD+d4vpt$BYgP_d!Q{J`)0p`Os0fvW*HnF+fgW$1RlCm
zV_|Ye2~kzHETOKaF*>&g4?Zx5RjVXI+9Jk(%g_<241nT~<~5T09XSYu+?<t8C@ld_
zVr`AAQ;MX-g0ZHT8JVL~Ll&>lM;1SM|NOpUgw1Gi?vUm%lR;ksVnkgQv49_umDV&>
zE&Uj%$A;Xm@EE>EBcoM4?uxP)*!p83>c;_=Kol-4oW$&SS+@7OC=@)>G*7fTTk`(~
z^&G_;&@rf%e3uRe&=S+%I-zXQjD}GQTs+-OCSNeX*v+M~NYoUXr04u-Nlh+-SjU2f
zWzo0V#<y<UkNLSeChCu)63-%+8H8i!`MDg|Vs|+<5+jNN7BZorkK_O<atH3ae;V@(
z4dnBJU7L}+;bp$mC#<-&Fwv->qA-o5%}*&aYL<e%H5tArM8|q4DX5YM$MhU~X+^V!
zc3!|Ok_9r-12jcWoe*ZAH~pF!qTq*0+@jK)SkSC94XxG!T0IJ&V8b48vHes{J$hi5
zt>o0GIp_M>1eW<@F{+KZaQm0XPaJlS9ynZY>REL4xM=V4;JOaW4w=An$(j=VG!F(_
z3pK4Q$cTw7^`EIs<YGQRpdl;7cPIggV=dlAlekyoD$Um!V6qu2^saEQbLSX#?K}=`
zP2qUuL1evtSh5Yam1pZf*(fpIl?B2HP07R%(&8TdT0DxW@^RdI&m20sOq&kR@v)0D
z)<_vuomPGqM-n6Z6(<cQ222$VjY^;am9cUyu%#+{$s0~J#Yi)vy`O+jU1G_!6USKu
zszeq_DKtsvAyx=f3_prd4`XhZR<?vJ*swYsH1aX_&78u&-~NRE&F}8WohaWm+fc)g
z;koH<FmcvY@a<n3o*TMxAbMqKdTP9yFXio?zFxb%vj;`#BB)dEk&!0i-y+7G26I@Z
zFF9FD*N6PjUofd&>LSy*y4LTu23(UC7n&0^dP7E6H2qzrnX4zjv~^l&L=D_~*A95D
zg`@L#@V+?5YGcsYwwZ>ZTqJ1FGEI8Hl)jm^Qp?IBXilN3pTO=ttFV4UCvrI#bMuL~
zToOQQwvtJlNP1f~4bduWywr4fq-NQO^pce``+Vp%rjys^Jti?ii^4G$vaL@-?V;IB
zbGOmorMfKb*&)}No?yy{9LGi`Yr{>XEbGl0j!(^Ea(Y_L&Mt&uy-xLv!d&ne#u~R?
z8lR@t<^Ke*%mt71%>1$PCs)>k@h|lkue;8!3}CoYu8-Qs(bmy!clY+mBC&cp!(E+?
zMuesb#u6(=<sG^|IZx(uVQPuVPw-@~=JHR9siZ~FZ1*q$-O`t2CWn(27LrxuawQoR
zWhjPRhr}JXKY_@Pun_OTe0&snZ@^6dSUFfE_(1#_b&aOkS`yz$>G0T@ZRar8+=IgW
zh1j*b3+vafz}$RfjPerk6K!q=Nos>c2h7h2%+E&1<XupP$2SJ+uNwM=_`9btNUf|e
zJtO8nfv-{Ml5jn0222K6c`n*?HdCd{b*Q`6k#>gqYD3J{W-v86A*ZLOqgu5ZMX{2W
zrc!#tZNwv(u5bU>DgTalhk9!2bP=Tg$$qR9Tobb={m)!K8$57Xw|Ck5x(ip_Sim|g
zOwVC@a-wQEw%yU$Y4`RnN3ny7YZ=hwSKvp8>8ubLYRWmSB$7w#TW6C1M*?VEH%$IC
zx8Rt8;2$t{iBdPaKu#UF8<Sg=&@t#>-~M3?A0I`=4KP~18?IY`WfdSr7LJvLZMz_n
zmwKs)6*q!>$!MXlV9`9I^w3bJP*zW3|NdndT-k$c-bJ}WmXTMYC=M!@#7VTtB5F!G
zaV*B#3jv?DnWU7;5;QHD5L`UdM!DI1k6QbiK(=V1*llC_WXKAKws4Tmy2yGCsg$DH
zs9<__26N>pEX>ZMUa$KWEYG%R&Zy=#<1tM8haa8wcYUlLAGximr&zw|3=suM3(K)?
z=mQUpHV(dQtnuB!Hh0_Gy0e%3R>|AgY3nXbpPC3K$Hqc8mvy_kx@AXuAKE(Gc+}l*
zu)CCoZ(gdsy|itRw?Cwk1;)`Oy<3Y9KJAGHJ3klK9yzg$6$&K_<ysAoJ+=d0M&e}o
zE@*av9UNC#mIue7k1hj<^<|T6kK`)T@)NZ;(D!Z2!$PzhZME}p@K6uduUUnKvQb4g
zmqjzc4QLGKL`3hz35C@ckb6y(pc7D;0Nw-!EL&+-3mEZe9<E420ZJ68=wbuyeJ(0f
z8F-vPG*Ai0F*-Ae*|}*{D=bsV#?X?ntubAw$1|ulhHqQ&cYda(j(tDU^D{qe6VDj!
zhNYcw8WF}%%!J?iAG6_|f03=MzO3EZ_NyJa^WT(nhFl#8jGs6ejh#3FFPlMkUmrT!
zd(qZaVy{L65`H~KMEyucfIZ!0%8M&g^Td+bCOS)~RE{N>apuoWPC)x^IQF6*b+0IK
z*InDm^<trU01NREc$p4J%VRfa%N)m8h9*hfRI>Mvrej)9YO_nEpY_8jRMkElKh}eR
z6@AEf8Pw`#LRoXNkZP$K($khuvy+h3g_x&|hz>}$z?wA2SZZVGOei3Ui8o!W<_y!^
zYo3}N3lgC!V|4NeB3(tLGJ~k;gLJBu4x!Wn{Afa12xQQlJvkXZ@U!)J^zm5NYEQj>
zOOm70-0XK6)n@2OC<ORnUG2NK9_+h!Jox%MJh}R%J(=r2lyiFr9H(0eH6TwMIgU|z
z6xmz>ojpD1?&?Q-cM);qu!K)Yy-IxY6N{0ksqijlQw!v}SnJOwMZ=|>899)SJ_q~u
z9>Da(7;LwWvD!Vb-JFS+$Xd}*EY1E|*+d>F)odVK61UA6m&rNUV!4vRWo0oJ>_D!%
z8N(x|uxiCxRO=+@%)xl;{^zWXZUak6YKNJhh|#;sVNx}TCArfsb%QO}NM#yYqvDvF
zDOV8!jk!|_3);f;)HsGmo<ufB*ryE^3kc#V{z&sdz4>0eVcmK5=XTxtV5PqQo@WD0
z&)_h{Qvt?7B`TG=+Ij12m>cRU{Pc&*;gRZmW0zNSmm`;1$!lv*9;@Qi$S`vG9NIg3
z(be6Hw%!tyviJft{g`7iKHuD3nRG>nr~Wn5JV>d4iKL624yLANuy^+^xUQ6=mAjO(
zVmOjwt1K*8P?nXKmh@ne<|99up*u_<o>2K@F!_lofOp9bO3TW_kEYO2hcJ4y6U&w_
zgO|yn(TI6dSnG7KgG);!5|gJQ^sh}?h*Cm=1_{k_4FVJE#go;hPSKFq{RJSXlHi<1
zGl<dFK^CuqTD%`Me-h28!t;i%ok7X#L@CpSfoxt~u&N#3AMTVp=gs+gHaCSmgCq9o
zVS)*bxVEf#DGE&=W3?wxZcbn}I0{#|D0nN7!vOqhj1%QDP7EJHE?+=rcOSaC`;hM{
zLB|fFfI&u?)?&SJ$)DkPD9Hk|1<ITv+;jJ%5R#^S_Nr<;3^&upwN2Y9D%&oCKqc+0
zBG8zNYg!G7|7xiba?)xnmeGuGNk9OWoyTmr9bR=EjvO7vx;2|os~HLIWI>(T!$H8L
z>`-V~oz~E-B4Z|fSbf<RJOoRYtw~Hc)f^WTGy4=%rBop0jZQ|ZOa{`APNEtgMn`@S
z8JA*37a8dwYiE&jv*^xvShe0oX}e%yfoFT0@3XK7GmStk6I_c3S-Te*yBndZBZy}(
z6CA@#{QxpDhkRxLIcGV7n!?Fy9Vds6!OP{)*42aF?mo2jw1c!DY2bm@@RHO|YP~qs
zZvv$rpm)&19p8EsmD&uXsA014fN_D4il_wxs)8iZE5|0+NT-5=YE$+k`ETA1LBTu;
zL<n1v`xLa0OlD{^4{Q|R$1|v@y%;&_puc|^ilugxskNCX6ppwBuU4gGz_Kh<7bJpE
zq0nx#>?38L^?8k;qCqNzl=Y?eC2P1lW-A4YttCl>CS7;rWX|bBhGIh!Sdlg|Hl4pb
zijIeM{RIqO)dlO{s6zRI-mpsT8y+0$X_p?f3SdbWS=oh*)rO`D5JuCO4vql+K6rw}
zF9wiv2iO&kjZ|@R_%L$0JPVg~cP&GE2W=^JTD|G6r_enpvF04$Yo9)dqsMk5pK~xe
zcPICikh^2IC-blbiH>9;t-Lay^IR8~0*odWS*fJsg1|++3W5YXGEgK<!^2&QcP!3^
zkHZy%*t_dVTy*I*@FE+HdSn&?kW!9eF*vOopE!l7i7Yxhx-l`@<am;JtYj*QnrIVX
zu`<P?rCGwSn3f^Q?%cL=Y#1|^i=3Thi`A9&aPHci%5+*3n^8NyaqrKf*?KmCr5)R2
z*XOx41Qa|e8#Lvor4P~(_M9GgPB#=ngwX<~!$Ux@6IrVb1!o1a_5hj<g^AGs<D+A|
zw7XDhLq|t9I=V|}U+%J6;6Ht2KMoz(g<Lj^@rAq5z%*Q^-EdJHtmk1{6ldiWUmUvY
zi2x<R*~Gt^(u&FQj2omF%Yq=+Npk$OP+Uix00eTD^zLEJJ9zZ5yRm8GC1~#{aACMn
zucGSH;-nE&Dif&H%Gj`Q9hwW>T;AcvMcR^KvQb{+%N=-26B9gj<)KXtdk#qjl;Du{
zWng)5tqj^d4_kXYEGtPwwFYet;WXjdKAt^bF(p8wUJe|$2;0dcXx0%#H2G^&P)y=f
ztQSfb(sOLMc006gqN%Ew4vz!DA?d(T1&0FvL8!0?v*Qg+PfT)b_3(WWf`ICJRnSDr
zboD`$)iGo;ovFr_vN&)j&Z@|uu%*YP9J4Cd^onsYn{~2`i7@v$WrSuNnk1DJnh=82
zXK8m%7Zw`3V3Q2Zyuf3ReGmCU5pf)_-a^o<0jkb~3^CnWUCEuXG>x4UUs@}A(s|0I
z_0d+@E9sV{7G&2Z*H>f-Bhuc<IXUzf^H|@WL06V~=rvS@Zctsv3mI6<S0=833c4iI
zleII*s3JlJSe1!B=3$bD&;jWp!j&1gb_Y?hDvE2Ei%(&uau|+qkh8krS^da320XS?
zLmbyJS>A;@rr~*A{P!(Mih72xa*VZNx5%y}jjt$_N@|&=B$JRxya&MuI>=V=PX5j8
z0HOl0>vdr^c#`?0tUZ9b?->aq5g<@w2;(ZkxCTF-Kp4IiBA-0<A}O3~qcYt@Npl7t
zrto0)@er^~_ZxMHX5hIw6rC*k@;P*8EqJ!+Y>1UaT({6@##OwKfkinFt=T0KkK7Iu
zQPeLK*|6*)YdS?yfH1718P`~*ht&M2yMQbi0nKm;88{YMvXFp=s;Z(A?J~_u)K#Ga
zM5yy~diHV-vYAbn8Q8Kw*`Tzn61hZWi3|ga%^d;B^!c#a;O(tOi#HutC7w$`I2^oN
zWL>E~Cuw7k;&{sPY}A^=s5XzXNE#Qg1t}6zAnrjpHaxc<E)75?gAmEdNdRStU;bM1
zJ)*@Z!JyuKr9zs9Ry;HT3vFHp`imVX*pv+#sUvPF;)jK(Zo!YJx#-zHp2Zl;EFYw6
z$7@KHKsIk<-R3-|rmC2kpfy4svR)1z+E{P2nOLzn4%zh(NC;pADy7IZW#FL1&u)O`
z^GC8LX1ti(qL(n{1fr6phCKopNl!XXR$8=0fX98zhB0GBsCSFWSzaz~f?j6cNp_c&
z*XXrcY|%(VmA9ao-dcw&B+EBa%L0IW(wAnE0&=;T3|YOT{eZWErIX;ywi_;u&zFMh
zX7Ko<kMIudO`F!!f&xi%lOoQbqtJ;A392R|+w|PT`ctn~(6rI4N;G4VG=Cwx!lZSD
zx(#TJS`=z*y`TqMxAmZ2k1#z^#{RuCI5Av?Ul(xQA~J3sv1%fW>WG>(M2cKwz_Cgi
zkHri$>Mo$gP&8yuopj`aQW}B)VT#9wX)jO&2U}((xkK8K!lfKjwl;+#>O^hQlv=X2
zGYxRKiIG<ifUF%EFe5TczegHY^!+A>OT?-1CVDQ}nNC`k&a&yXB-2b(x=NQMBrzTh
zq}J;pyVyc8gWbFK;ogV;9$uys$Btix3(mb9g}j52(K)yo*R%&Eg~xRLaY)6Sz(RdS
zquQjN*=LOxeJ(7P>1#8~=8RrLA@8AHQ|!fhmvy3lpc4!8RUAGzi(^O2D9?rL#&Ve~
zRHlfiNg$&*EMQkju0bY1qb7F-8~=?K<(<TIT#Dfg%82BeG7f2+(go$%FP#}%T3SiF
zE>iv|5zR6&mRY??#Xj?<Y(p>bysk<vGz+SkIGhbOH47$-ds<FUgVds*d~zp7MxVr`
z7rhcaeO+kp1dbe-#QhI`30bcLwsdiP^nOf??MHWE1$sLAX+wL`USs;tBHnwAq{+`x
ze$A%O8_z_M`Ah;9Pk!-T&rvZA4x|@eaVrhI??Rz~OD-?qylqX4j?Cl0o*9gvszb$=
zQR8!SJV-$CSQHb$8U|zxDx#_Bk+`p9-?PaGU9Rt?z@p+aTdUT{>k_Srw5N)mf~Sfo
z9!z&3(tH_-<76a>^Rv>Q38lFNC1{ERW`@SRVMDUgYasf9z-NF!<fn$`xY+UN9^C)X
zrw~SSn3_6-4QpP4fn}@k=#Fo2R-AKtnX9s0mnFJOg>HU6ZfQ<hKZx|A&q?)$Y-Z53
zFf*eNHksvnAqVd<<0-9HF=3ZnM8~24-jpv$29d^_=mM->(}Pv3J25?3#i2v97(QM>
zz1oCrIml#OWKcjH(>gi=Skt&gc9-NP)Am#YUb^F%AmtXBHd@`q48BPM7dK&=Ur74c
z)6bKBFhi!BQ%21X9NH*lcI1%7WEV#olav6E3w9HcS_=`yjPU|g+=Q34dE7s!xY+Ud
zF5L6*C%Czg>ZcS_?m75%>_0-8tBai1%?S^4RdyC_g+5p|$%~t0HL=ZRkc5&UX~g6F
z$U(VIlR4C8`GN+P`F~<bTJ6c?6-GyAF*9Ap%Asy_bdiobO$^6q)QKw+=<aDl-?BDb
za8Uyz!wWckZ~@a3KHssfORCDQnIq&tn|jnE?o43OsHA<4T2*MdVA{!GK-Ch7XiXWV
zuZb%=Y2eP_qu46}AgLO&(yfsLAgdyD6Ovq{AeWdS_p6vzA&1G8W@>5i5rhrweEcBJ
z-`tHyAAS^%@BR`p)C)!pokV8XrQ~@mb2CT>E|H&hj$=-W(M;=e;_y?8mCP1KO0v}o
z!VD^8*}0Vc0tOb{zoxm!+-GSc99gQ9W3w1JK8^A51$1;~F}R`&y*+L4GLF&W44S-H
zoB*_WOFuSk?#9G;6$cN@VdPkyN1;fMfUS&lP0x2y%{Q5t39b!)M$`ilvdNmSWEIoW
z*&+s0I^2=;lXH(@vM@PqMW@3&kE=K%Tk<?;X-b&>cgv0-VshmrJod=#*tO#U_+c5I
zQ)0`;ovZ9JiAW&Mjkvo!T$^qLhdS<Q^&-jBLn@(?i6zrtpD2fOoJGr_1kDb*P*D?s
zqN&1X|9CcIEKPf1cu{zI@mLoU7+TqlN|_Xa158YWn3^u5RPeBTpbN{FcOsk3FlR(l
zHnnP#%OJgd?N~NYLL=~T@As#0YNXEVJr)O#(%!5DFzlL4tdqt(OT|l;&NXs&MQu7s
zjAY=M@Ru!@$Y5j5FQ&`Q1XvQNqt(;HTDe4cvMbK9U>f~xN<v(_&9vf>v$HZ>0pJ#C
zx;dl)EB8B^;U6=2vDl5n86ah`X6=djpT(IeEx^p6$=j|-{r&~*3Y)akia4T_`r`{i
zX?;&;5!b$G14c(@aAI^8m5Psras$=s7>19}ptrAtfq@RRwb9--I-w@mC-+w<<#5e)
zefaVhMp^s7bYi9h8jEsCl2_ERk84eB^Je<==aa)w6lNOP%&;Z>=E-YLbo7#^UIe0%
zxir>;j-}H_%$5tHI6Oo;GQ67A#+Hy02$Q7}&ql4$lv$czPV6mf_boO8vOt4TBuJ*F
zndVrkfJmfAY$qzvB<cHt29|D;{2^HlV+oRdXvyKZ8LVHs97BWM7@t_c*!Vma=Ihe;
zLktg3sgoyW(9u=I+BLmsZ!fTQux){QErMm+$hSFIm}&CY(iQ-d5vDygiKA1*o+tn2
zmcXUW^9jY!>M$_iN?UT$ZimFlCH-JYOEmu{C1$nZKGRXR1cZ)VWOvMfVs4H2Fe-kh
z{Fr$rPHbAhHLjZ5qg%0++2=^v14WViP80bH_Itebi^k_^6rXeeU%<dpItqxLPR5d3
z+pH)Xs+JoV8>^wGr-Y2_V#Qz&1_wGZSFYmZi8)M+l@SCHrl%?>mm9e9vh~R1D7`nr
zw`No;Rhdbyq#3D7E))|?t-qUspar_63{N^3n+*5UO`q0Wl97+6N;EC?rztc<`sH*?
z$9$K9dU}|jNt~B?F-E>Aac7i;E&??HR}xE^@Gr5b2^U7o3(}vY%#bi2Ye&_aoFO-#
z1Ag?`1eU)LMorib@3C)9r%=#+_{ao~AD=)+dmhV{bz;R(C-Qj@-5qVJqg2GIl|Ck?
z=5dO)QiNgBW@7Z`%&l#nk1kFkotF$KEbR<PluVa&O{XKVynM_IyPCNPL$?_otTmmz
zMAK{WT`h^rQW3c&e3+5IGLD(QviRM_QCwsB$mN-R1qK3%y=`?@q>sh%AC?SY5j%?D
z%#)cnAY-YNvLr1a(A;<X>>tk_un^UwsA<afBt@W1tVLJ1y(0@bVxd+GapdSYPMn-U
ze}5ZR40NE_mPfIWL$R2{z(5yIRuhMnic7Udq>^~aSfV5`WPtHiQ@kNHbt`5b#<;0g
z^BX6t$^D*MtR;>0$)W(my`>XDW_^o!n#F`fESZl?I$)A8JN+*Iys@ZU*-m4&)Ha%!
zYN?$xf7iS`GZ&UvyX5^-nUPqWnA@PK2rXsM<VwT~yMt6AC^uCNv}uq)L0J`@7%Jxs
zt>{KR>tbYd2D3ADG#Vj}9i7C9k!f`G6#4s|T}61AjFB)RfVPIe%mlP)&`a_H4&oD;
z_S8sm9eD{IkfJXcm`&Xd5#)5^o3;jaOh$!_`KrZX1VbgTsB;=K@~e0XgOAo<TcVL+
zzMrVg(HxLrjT0-G{x*YcskKb(V=^BGN)QP^DMdnWI95VYX9H)ov4uuRi$iI8Gd%$>
zNMQNpdN_*$72GKOrWOwl2v~m;Jv|-h=`CS?zJ_DRr!X~9L9-cQVr&7^lNFTOa~K%x
zLSKIyubPV@(+g!9T9yXeOWS!9hhyfsSR<kJb-ps}{LC{LmE6{lh6%AaaAV*tcJ&%F
zk;(xis?cTuLTcn-M(Y<F1yhNXrvfb52e5?dSiD(8vM-UG991QaV!kQeFsRK`57n5I
zjwMyR%*tr8gk-stg?dzd;k!bOTDjaf>G$!rKT44`%H@E&A$`(vN_zg=N(EeaK>@XD
z11H92aq1+Eh&M4iQ^nkD9Y+t3qkmZkXOA>i-da$QkfDqBr4hnyxgN8Cnq4AG4w)Ze
zaJ3S`1eGmmp+ujHj?|4Nl3u1Uhf6(6ej))C(x83`!0BMAhSUzG@uB%b`jX9umIpS&
zuH-Dqj2iNG(IqP)N_m_&mZlleR5eTj;MnD0j%gk|2gi>m+xCBTq-Qq>7W^ZR2-*~=
zMMPUv4<DRj&Z<zN0Z_Btl6FLsfLJb{#g@%0aOG9&v1RK3+B&EqPjei0=<qlme&i4W
z-;{jPh2<??iT;z+A`K7K`eN%<nd_d!Ux{XE;$>PNxwg4P`i+H~TY)!UW}{=@;++=t
zzmQljgJ+Y~wLrdT>5{*<^y}t#wIl^q^LG=)t)zO{>fJEIu+;XN)Cvu!ML&{JwEuO%
zpY)At{0kCTbeI!2A3pKvTH_>a;Zc19l{p{Z{K^6B+<p?&=$OsfEP6)HiG;*_pICMW
zYgYB)$}87n+qRYH?JL4{98_unC^#j$f}7*g?iD)MOD}HgVkQ7dgms@Xu##Ge^o*qL
zhIrLhduQ@ak`4|2`4osPBr;pC2#$Cf_qM2Bv&71_G#-pdTna=6NgAhdyqHXBGoY4a
zi%J+7@8m(@MaC)uwvr3}*kPm7yyQ*3082Wksr_F(F?a7LhI((dS;vVse^h-ua^EQS
z?w-P`we8rnsRte1B!EVNy^$6UNQzDf^!Ih5zrO>ON)?rA6ZrzQ{~DT!Tx;4Ulhz3r
ziP0qzNrv0xji#w2LwcbNE0M%l+?$;I-cz_LI#}S0J=>y{G`1>{=R$fN4P~0R-UOH?
zYfMA?rRl(;Y!Vl5D6~rUznD%6Qv2e#uvNlIpCHA%ifjz6>y8%2#_gH<zVEd54?oMm
zdX_9!nmAV~C(GaZtJ#Hvo`|JSgek?ww0Xg=1=#iYDSYkLz4-q34&&6RdENz0g=ntA
zu)r<3NsVH$h{5IEi?K^WkQ(u`#A_s@TSkRA`P}GmnJlkGO)O=e7MmT6budc_(%_nf
zW0(MMv7<|_mwrkdg{Nc`OXZ4|DD^G5)~WSkqe`z?#Vm=$qH&4H9A$oK{6}RRBZO<<
zOg~4;fdk72&_8IagTp&zLm&Avo}=Sg0@mVDi5~ick=ZXzs>t`ESVeK%L`)eTVlE<6
zws&a%6u$M1{kZM6eK>e%ioI7hYr}D<cudBfx=y2~h+@%$`9ZcoWZ@|OF^iU4`Fz?$
zlkx;V;%M0*HZMt61OM9qhh1GOXitAO)jH+$^C>b$f>n|iv9#C)u{54r5@Yd4a($*L
zFa=wxU}JQ(65%#}uuu|jx3_gp-SwRl?vbf)O-4BJ2%e+kS)GKYOQui@rh>0+%gnV6
z4|Lz`1xnSm_FY;@O55mp-HB`Qg&IFu#>A;A+PiXCv$_jw*0iI&J;x`PH8@Epz15VL
z`ks~mhGC^!tuY+oG9VJ`Wqv$m=?%}dq_$^Vn;BYN%4V3Utb`U#-j#U~i$5b;eW|Hc
zHCo3lHNw{Kw@yv+F=hC9P?lwCQp#kJBeSSsq9s;GZqkL+E-JwcW{;intF?or>EQdn
ztXOdS*>{7_dW@BVE5`Jx6SdC_hSB`JgIzzpUOU;U->kTfMQbe$z{u`cj@hqMS@5y_
z@e|m)XB^9xw_)wNF7)>okjdCAtT7iiS?HEFFeGWeWGY}udvfdVr*15fnj`?5@=nq}
zAj}$)Rz|6)^(3`3i^76SR7P9GS!;w{r0;ie=}`h>hO=Qb42mcwOFL9sMwH_J)^n%X
z#1ada_);Di(GpQyXL$ld%2&;D=~U$_cQo{YuRm9yT719H$)BYQm352qvcDW`f5W@m
zOIuOb&ALY9+El1b+BmuV#|xay>|Yd_roHwK4?`=cvow!G2g_=7w1JFgCB!surC>am
zeks#`#WF{hB^P_M3|ns|XsEYJO0Ug9vB$!RLsj_oDKyICG>WE7G~H@mX<f5L=1l+4
zNtH%*CK0J!tQNN7utWqmZPi&KhQD}WQksHVVp^SFG?3clHfL(Xj#X1R%J$>1TpFMM
z<`c8c?_3$9-1rFuR{E#Sn|3gCX@Blz|I$;uVXf`;g$-4WgcNQ%`fdg;2wc?1WB{gk
zGet61C2eI>{FRPxEs0-R>w>8*C0S-530&MsYQW2Z8G%?y<T@M_`Yep>t1z(q$|R!L
zHxouI<GvI~i<#$Au$g1g*|nS@%U-fu=AA)LsSYN<N`EWiM_UO3@BgG~1p!J0Jj@HN
zB0EMTVqIwXBbct<^-l}xfp?HL@^cBQ)=Pixj-`}y#?FZ?Z|}>$<bQV-uch6%eiL=F
zC^j|7NsA_^O^>><K4w&3Yb)7jNZ&KTeam&QXbcYxGIy0$a7>Fb%|IA%8PF22EEKwJ
z<a;a(?<HVOqEVSdtODa%lU}Q*Jd(eYlI=!(ck$qQ9uKSXzgj(F+?LJt!bDQC1*}$?
zC($A$Jwc*fXjmkGR<yuHMi#L(apVR5ILg7U{R_><-|p)p_b+x_Ja?cn@AQl~7Egpk
zsZ_Aee@}n$WxwBEya=&$>jCQ05{^w$*bJtmyupK?!ckPEVPGVE>;_w@-a^V@B`qav
zsS@i(z)D>sSwlz^yDVfoEDRs0z^_fBR+&<9?DJ~aH2p{^&c)l}2eh;K;B3Hr+G^lh
zoK7OZnL>05Qli#)=_+TnDVWGQDIE~O9+6tF73*9aQcN|5d4Jb!HMRH812yu1MqmW>
z&j3)Rui^|jo?0*yXzyvWFZ;7)r5k^-m_G-RwCVwTX<J#FbhZ+!LlVL&1&ayXlfj8}
z_%vx5XjwU)F{EJ%qbwtB0u~K25U^|(=l9wKj_<9YQJ+-x$}|XA94K?o9~qQn3_i6`
zoF^FJj`Yy!f0mx%WWND-7c=q~?U<nth=VgS0!E}Zj--;2qph43H)YtIMA<)Zs1oh@
z3tu1qTBK(u7eRDp0O||`*3$uuM7w*}wL6!8u)po)H|GnRXq>4Uh^FhvjI>EcSh_7Y
zw+J5N;#zgPB!)>rWvpBB^C_^{V%g|eE|Dn-9NSezqduV;wHb=BT5Ac6E<-BFmh2g1
zLN;FV7DQ{&QY-f2PdP(1OBB*6A|4Q=O<rW3NTVW-tXM?0$habIx>0ihwQ#sz4W9VN
zx<34|P){8+i{qZ|e4RPR83-&q?Hy>LZ&PRHMIRbyzwzan+&Tn0szwAb%afK<V5?;`
z;M0f6`qG~E)T*U1R%*TYbK91rCqV&z=L!o>Uf}4?GW^Drs#j;ARAb46buz`bgdjD=
z>Lu})XnkrlNKF!G)}(U`W}ZV4m7z@BBw&S>ux(dMPlZ)9!V_2scm7i~+W+xTkL}R3
zTInh0hW|3o)Z+{W*3$t@2v-bU*6CdJp}w}4T<+vnlm1LKmXYh)SxKTF9D~siR7;RH
z$s9RQC-4~RqBY0Iz_KJS^VAl)SJ4iK6j;U;DwaPW<^D95S_F|PEGP5$i*c4rOG@T<
z(r#CBb)+#tasr{!up&of;c6>Kq9=YZjB2p|ftot}(MEjyYYOGck3JV?_VGLb*3+F-
z8u1*wtSfu%hkJ@Iy)2Vmfe>*uMr6BA&bFNbYjBzN-!v063jhd6mPK;fW@wc;GK;2;
z9Ts^T*kq9y0FLaS0gfpHEVfuAxnV4onQTsj?!<yE0!tdJlul+-Ocs$<;vk#`X&jMN
zj_?X14$*8*VIkPPv+VEsNJ9;OLt%dEX}0J*Zvgc?1lH35%n}(fba|(D^+&o3*InXe
zhY$)?kD;UiSUy><v<NJ=TFE3dsTiA&#Na#7%Ep>YEck)Ofrl69qH~O;;)WUBr$*vb
z`#lNdnK(^?_eASNn)r$s+6b`<31X2AJ96OUNT8<KoJK7;GFuLI|8+e+_}K_Eqe;)|
zlK1%h1Jm;ySWgcy7lRkKdsqB<Px1Qevf0&W3Q<?0DQ(-cU8lrC8XUAUQEEY01Tq6O
zp6{dDkaqFnH`_S4J;tH!6-2SISTO;Mgx``t8@xBlfQ;K;5_ib1E(yXl_ZrxdD?QiN
zjvF;+Pz?@ME8+fssznDr5$UPDw59r~@8|gqrsuF$csh@zX*TK13_m*Qk6b_JKX87B
zciG={=B~anpW8%rXTKIr(n?-C<CIv+h^DD|3sS1ZK%X}>y4Pf|eyfH1ZY@LW1_4mg
zL=k0uLR0%M#YRT0FSTCWmIE3L4G2^UWSN8~Ga}=ucmeh5UX+8~|5}Om{asU!Jwmdx
zPY<RS2B2O57VAH@U^aTUl-zB9(4D{TO@-VRz|Q$iL959n#bGkz7C>}`u#G|t1^z29
zDewx^-FF@3fSra*>$OQ0MP<nWHy5Oh<w_+hwWjCHL=LiWw3CaXGMdo|ECl<$R}J@k
zJWwa^P$<tm^>wDl3kysyP+<Kinxb={;9U48-MK5@Ud)~k;daoBV^s-l+qPrdZWgXn
zgyR*N(f2DA1i`pb3lt8!!Ddu5#3j2q65Wj=2@$zgUS@=sQ&AmZIEr#`aA!H(^Wi`p
z|3-|3sULn_FKjTqz=8Gj0Fx+n<>b1zv}dpS<Icjx?XJ5Fv1Ns^jzcYCN*76$Sdx@C
z^Gh*FP#WuGTIytE!&SC)ZA+8TdjrjQ2Ia>7-DQ90r+j_%Ut=tsd?93Xr{j151M5d|
zKN;5*%eEDqt?z2jZu_}Hb^~0yn-|D6l^;er;ATxjh&H7S$981KCSkQGnu8ynVy>wg
z9{NN>o%l|Sxl?Ds^b-lJA8kDZa`}uLd{Nd~`KFw`;<~IeG(Z~grU*#f6X~2*l;51#
zTaS-_zY!h3HPlm2Xw(*-iq@Z8%k-m;pCDlUpFrR^0{KpfY?lO4_;FL|=7K_FMx$PB
z(dYli=Q(?vJ<c9ykF&?w<Lq(vID4Eu&K_rvv&Y%v>~Z!udz?Ma9(bM{|3A)2-(7<E
RS|0!a002ovPDHLkV1kP>)^Y#<

literal 24745
zcmV)KK)Sz)P)<h;3K|Lk000e1NJLTq005Q%005Q<1^@s6JOOdy003ZcNkl<Zc-rm#
zd7NhFS>FkNulqjdJX`Hmy|=nsEvdD(Em@XVY<a~dvB6+ub_gVa3Bv^92}~xFys{xf
zOqh`5Wq4;`LKv20z=9VDn9as^TgIC#%i3Cd?|WC*`mE=i`@ZIn`#eik*V>D0^6{fj
zsh+NS>RHbDoooGFzYD%``^N1Xw{P73w%p|9f4v7xxO+jqCZG8Jm*c75@^y294;?zJ
z;od_Y(Eo;j`+$Y}qptyozj3?l_Mo}{{s*IQPOk6yxL!|g;C=&#^1&aD?)j$iC~e=Y
zl8hU1_o<p#L{wG902tH%^W{&6FTNX0?>?75-YosO8Th-Uf41~F!DBGXe!s$fZ@?6f
z?frc4d6xf)8TjeoJ74AXyFWLpyngqu{orR^`ugFRS`qQH)+SG=x_X|spFeWs*XEa4
z*!v%h4jsb7hyB+(unasP@Q?$Tn0U>Il=VJU^KOLu1#Sj2Zp45Hf<XZ({tNF$dT&bx
z532O<%aXS)#WMgR%YNSdP4Ok&S6lg{i7b82rGH=iT$cZAh4(e^JhIaJ?0(iIpXu_~
zVer`Wo@3y(WR>SG?rHb`>hRuAi<rkn<Y8l?zk2rB<6r8Yr(nVE&}#`W;hM%y;f;=O
zd-Yvn><<b4yG5ei7zv+G6+tyzVxkNj{-p<L;G}5xSlN|9rP2q5EC<!VW26tf{wps7
zl>jQ}l2bWwqC^k@(eBR_#Vk3cDuX9libwT9D$+gSOTjBh__-{5@2g%wtP0*fHVq;e
z5D~E=5+PzypQHH0hUm{Q{x_d}_TN6$2iQlKoSUy9upY2I3$^uCufs<FGw?2BY)RDv
z>I>U0LimtNPP~}Q-p-P%R|c=fjajOtkL^FtN+&=DPQ?0_YK@b<%;K)}9@e$WOMtZ+
zs962=mw{^8aa9nHq9Rx^u^5x!T$+OXXJh;?bpiGOAGHth0r#~6mcacM4&{@R_w4jZ
z^sfZ@elaG-JAfQ9mI3E+*#X@YsASn=*8|nkleH?SgbljC<+0A!0#vg4>#ukLt>6Lr
z&*N3`MoeUF8RxQ8;8)Y!{i`EK{_TZ9gYj|#OS&$6eCMk^AZq`e7`rn7N*x%}4_H<M
z)mrgTKmNF`mTFU=TF+9g^nTX^l`I40%JJJ(TB;R5wZvMhs(KM)jjf=XpAql=$urOY
zn~%bS20o-$;u_`30(3mw8;@`2-xy<mN&(d8g4lkrvKFYWr=?nYvcB#u)vBP{tfjgl
zPz^q(D(b9>BasO8>A!#GxnKAv-7>{y1AEzQ9Rxn?NB0~Yw|VJLMC=>YJ6D9h=JJea
z`IWwMpuUo&+I;r6F-x`j$zDAx+lZxF={>A#saAD=Y%2R(`65~!R7-&+%d%ZOfVEZQ
zefF18?7rv8CqFW~S#Zf_E!F6rgX1<!{!&bIpL&-G60>5Oy~+Vy6I6fO0`)6#f18M@
zHVCS#v{WmUPy|)7II70ZcOHpi_pZ%?OEv?*k==KUN3QZ0BGG-Sc`le}!=QRO+}}3>
z^=ksEUJ$L4MNuVoK7B;VzvbCyOS2n|xy&Z|d&auT#{#HaA5=xL^Xfo#`N!T|_V;pw
zYW4T9p_pn__a{qZ^mQ%O^#c_c#7LaGR%UJGKBLj^25a@94Yh;p23o5T{Fxiye$Ou%
zn|!D0fcsnVWM7G;G8-re{%y|wHWH|t0&{Y`vcFA$s_%hBj8&g!QB=8Qa^m%4)0ckk
z&+q5K=s1V`RRHS&3xDP&w%_}m#>BrAEY-CH)zy>~%s^{oxl33*@Lk_hZ5~vz2~f$)
zQc_qW0h0AC)u2T!x&>C%<<^$pFg5Xpr@wsZ=bn0i2kc=E>y^Y<24KtH`?k7Np8zuj
zsvF7vHWsK~?>g1x@zB?6_SgNFqB!S>qU0J`s>_e-YM@&3-d4;q)r-V}>a-et#o@zT
z2)|o7m|r8tdO!f5r~V^iqAlRvhC#I~?poXZU9aNj#y}+-0@Z-4+LZf~bprL`IZb%X
z-IEji%)8#gaN2#Oxk~pZ8+LzdgDTKQ)aTAdl`W$FBk*DW0C&nJgZBpwJme?0-+iB8
zzgxX?g4p#zC0CIB$=5-kzOmll#y};T%Kk(Qs)BdQd*4vy$N!K0>>n+M-^<`<HP<yz
zUmH|imuReWEiaOM_rZfdd+S4dz(0tZO#tg~k!{+aHDXJGhNyB~OC{Ga`;+U?`;!f2
zf2K!6=|7L{S>;t+k8G@=+<l7i)Nt1wDULJTeb*LL6|ed-WPgJco|Ql~a9jmZRW+tm
za=HKKfF9-{*(k6KJme;}zxH;-zF9T*V9nP>_9ri|r4nq99Fylcc}K`n2kP-X^2^n<
zX^NJs3b&6a2kuHxH_9syR<M~8c!yVEsWuU)uWqT#(h`dp<6PTYiNEX4JAd}}hxmYd
zkO$2MfOUTnp}K!y#8v@6m~N~ZsBgehu?b7XN--6yw`pKwpkjlTDv%HrQp=X~Ag?L^
z0N=a&$N8DNzmE^xcpo=p6F8?RU`5tH2CLW;MZg>0a))Q+KpF2nuYdap`%0xA*KDJ0
znhhNTRz3!+TB^&RQ&7Ayr4pWh0PyMiFUOIr#9A2NfA6R?%`;-`_JYK4ji@hwJK8jY
z1(c{Y!okt+VgJo<X6QA_zAeh%bvaw_e2!C{bNu$NKEfY-;YDVufo&FC*T(r&UE=i3
znc+YFJZ%5KYslR$5;@1O{DYVH51&1ci7cYhBM@FQ_qS$D#buUi>1(Nq#HhM+rD}Zp
zqmTZx`GQTUt5~csL1P-xJ;p>k2yD-5$fvqa#ZS4m?hll>F~zGV{|S5UdLxbZJ7(UO
zasE3TfAu=UoUgL&o)Z7_@4bs({HZr{YaYl=#+Y^8U-y$(BY2?N5&pqjg&l8?@csaX
zDZKIg;Lq&gZ9`QwcuI^&pR0P^1NF5)1z<$gtFfgW?Y7<n@W2BPnKfMDh3@<QJAtUL
z{%aSg%gY|9hs;Y!np?Pc>jxRXZ9j|e&)M=W*s|Ml@&e546i(l`m-Ore&R2NzKYbVf
z$N%<z-cpY7s#s%IZPRo~Y>ME#u)S^gU*1;X{r`)F(c2NZ31e@-Wf4QS*Z5ce=N)|e
z4j5{AR0DNcU#>uXRZvOc4e>@ItopwLaN)w!vPR|om~!u*#^t*FYZ2Me4cAt-RPwi|
zO|yPQT{Hp-mg-g8{t2V|c9VU;^QyN+ym=cua?#VMLzXEw?v5DN5u(N%48@Gxc96H;
zG0y4FJi+sA!I~}?-(2=tHCJ|~@NN4_{Pf?Cc>7P5$hRFp?VAwU2~;rV60UQMp?y`}
z@hv-e<*224sZIT2#$pB<nJcqYYX<6Uz)}q+1R!F?tE=9y=ez#X=Rf~HI`}ZFMX@@%
z_myK&S~`l@u`u{BNZh*~d@45Bxi{C1PbF$l0oxen-fbUba^HU31CCd|GvWhV;g9E)
zKRf9ea!?at|2X{c4H5B~1#0Cp=;%I#nC$ak<ikJxTm1edk2MzOwb%bs;I@+GhrV@+
zSAA27o9?aPrph=!g>W+>`+<?}1&+GUqV3bzxD1iQUdmWFk@E2GH+k@(4)v1l4`5tX
zMSWQSFYAD+|7aDl;=P-*NqXbskAHY>FwPoqg%1iqtmT^!TU!n)*$}8!s!*?Isbm8r
zJ+tgRT&s#YP=HDrRSu5-C|maIhwt#*{mzK*+zKaB_?tN;@<Qr_wuj?&;j?p&>W&c>
z+fziH^C*`1^{?eazxe%p>xjd9#dgah#rxe?6(0DzF*m+yj?^8)oj(cnqu?J0eFQj)
z>T%RP2I(ne@g(l~FX2D`CHxnj#6ET$77Zfy8dlW1mAZ|AYOu7c>eZN}=Kb(Z01rOc
zf6{1KQ55mAMa0Ca&eJ<2|84TAL`}HBnh6KT|315Jd?l^Fn{(GYBffQO;8OloU72eY
zvqm|n5sZN^%)*|s<L<3f)Mq`z(P=Wfi|F;Q=V$+QgT_z)KA&twA!;ke#SYDSzW+y$
z^N!ndzWHs2ov)q44IRT*#$oaT8ea<eQsXH&cNBAS5pz1>#jkGT&mWKZ#7WN!SsSgI
zZk)4$Kz#!Y(~Y=4Ry?jMVq;vs1>o@Eez9~Q#@b@xxUUZF`YvOlx2dWFF)tfSfsL~i
zM8d4b)$plAEr{aVmRqae%bvY&B7cwL#`jp>ze5;R_)H3)no~M0$UC5!pswKV0v9~o
zGy>zv5Y0<-R7w}|W{i0M&D^&u=c!M>z-e!LM<z!&?IIpNm+*xzL;E?n{q`+Hm3e$?
z5mN?nGwAsv$cqcei{t#}A58I~zp;F>VVR91h-DKo6<1MGSQk{N;v!o%-lxxAnEu4W
zTejR`j~@?on#&4XswR1PE9$J{{^T<1i>mg^Ygg2!DL~ax_SpBbd*?Uf-|pG|Uc-0n
z7RG^RJ$!sYX|^GA;4;W_$TDbmV6hFS8t~B>rIC2d$Q~LOJW=)(-p{b@z3<@Xe&)^G
z?A*Y#x4{%2?KxNCBafH)r3dF}pWBJ`IXZtD>SwU07O^Ks`1c>3;1^#=xLAp?k-5yZ
zt(*OE{Xo_4S_v4EjkI*MKcalCnV)Q+O|$GEEomo&f4pL33*UO<0mSPS@~IS`d3JC=
zH}CpR{F^<a-yytbw=kw~OyLjbJr|owmVryb<={Q!8KiA!wV=^bUYvuE&M9#X^3emd
zPM3+A&y%NTxbX+>=3o5iJ#0(0=rbz5IH`s(-TgafD*XEY)_`marm=vVZNNptAANj`
z|8xR;35-$%>JrKgo8(h%9#m`qRDp1y6cdUYX+kf3L)Xszt#*GUOSRH-7Cl+secu%S
z`ro{roxX~grRl;(_*C9ICf&Up*!d&a*LlXiTe*KPY?T12hZdA$b*0%>Ivpj?z`KF3
zRLGjpXbFo=<*_;VgNA2#)Uz;j3+c&m;)M&idYw1?)GPU^Z@-mNJ1-{vO;5%{0B;Qc
z<*RL;{EUIx2(sW<Ji3+NdNL-jgrM3l8Oz^zn}*du#d?;?tlzF1^diQr--I@s%>FhL
zQ^_U*by<nFB7$|61A7vNUYT>>-f9>eUyFG;z^5_@sHfVznOnE~7||<)(g!@R*e~o$
zgr{=&=)CgcqS8nWosPkEq=>Bq%|UbUnUZ%PTZDQG78=SYW|Ti}DpT7m=V~{T9hoG$
z)WltE@&14MN`CB{ZX!;X!b6LAakgCM<Dcwc{TQb1`Se#4p3Mc*^BC76`x~gJ%Vyl4
ztO2UkxuPpT&0N;3{kmz>sIW(4?!3d|#PI{)b2G#37_T8yGh&vOF9x2&sGulOV><`8
z{{)pgD-3^^XZNj!trhs|y7C8?lw%7@qYdqr;@Ut5GzFjazgz}+3TYG4d1$nt(@;J(
z1ApFjOzw+0K71?grLD-c;O0I5=%2od@3`d#oO1)BBSoSwhA%wrxO7~x3kiSyte{Dk
zS8?t5R97EU$%^A>W^)YEub(!J71L8}dC#3ycE4>3IKZp_-VOZBySKBYY4Bd~%8E>e
z(8N_}l(~K4zoW8mit+b*xY^J^`NRd~Gcz#V48eM*33(HITk%~`4S-AY@Nd_Kv<~T9
zaEr~l@&_~U+0-+6Tg<by18{5?dMSa9@IQU<b-ZO_C*Et3)f&7HCil4+ICU%`o1NhC
zi-jtUe;L~}BAal3OBnI^6<{<_ZrEqwxUY@udy7c)7FFkE(0qLj+cZJ^$noBhF@EMF
z`-u<S0s3k*YVxYLE3e%)MQtI+W>ps3j#OOlT9Tp|?3yvR4*f%>Zg>S-zsu9P!>}N5
zz6EF6(8-{a3V9pyHu!e1RFVfZ3Ua^!PC^GY(6Z3tyH{{Fxa(&eOqF5h&WK}YhS_;c
zaX8{q#A|Qc!{2=73^S4z+{y4+Q>zTM%bYqp!k-^$Kw=Ov*PKsv_3m#;804)f8K>!?
z3l~5B>3#d&V!GvqXl;vijrmlo4p_2gK)Jmc@x5=_%a8obUTUx2j=I}1)}p$DR6fI9
z@9%K;+lJxj5dY|($Nbs!+3;Gv098l1G5L0O?0hX--tWk7H=M3R>L9fN5H1IwDw-AU
zF9TA=yHL9#Rm2P8G(_Hoij>+ASo<Q#7Ne-ZZvj8N#k2kO5nuZA-Mr>Rg>2*!TZWaN
z|DkvA-~Y!yXS&=14d93(!|yyiA5Ls7jP9xE_25&j+NRm4rCR=+E4jUhwc+wI@Tpdw
zrZHkrRo=N{J0JSc0rtG5LMk2H!YOQ}j>;Z1J&qiI0Xf{}nTIXE{lyZWzmS79hz}>m
z<(_T+E$rU;txSA#PW(#C3)4!o0+}d22B)BT2+qmC<N}%Eb0Al6!9o?{co-L~mug|f
z6uf|&gN_OJBb46|_`xY5c}K+O|LYX@ohajm=eXmBQU3Y6-pNn@>7V0<9a419d}Zz8
z=f;FjRw^m5LH8#cim5KoI?cv_1twgE=4;ue2`8>(a<Y@>nfbjlOx(~S-(t{81(}>c
zFV!(mwD{A9M)>(JJI+K+jMW}SRXt<bUEI9$?=kuY&&cbAC(b}4QJe#pDw+%4E8Yi?
zbX}k3Qn){boWfdlU7{3LOA*r-X7oTd7l0MMl>Z2P|CEq_v*mNYJHji^S12tm^6py>
z^6Xu6{K~VRA*t9wuG5;9N_9Yea6^ImayiPY3)EMtL9#K6Wv<cKJ8QbX<;BnC$wD}Q
zhCe+u!)O1+9Q%h1Z{8z(*9S(~{@OZu=RDDj@a0dA@-M&CWWL<NbPJCf3W=rW4sP52
zV+`MA+5HaBQ|E+vr>GHJTk*NzQGEA}xBx2eLVzADl^{O+Tk-%baRXwPhMt_I8qikp
zGaLTx4gB5=yk!FBz75QOiP>{zjB1?oqpx~5htJJ$sPPnW92c}oUC~k*fjEaBxO<Af
zcxjGPEiFpD>jmmuC8*Xow=3dft*o%n{CqjvG^;k04a`@R$DHRs9990wFD`QI3uR2|
zkrQS9ug|5-mpfRoJr21F&`h{>^oJR`X^j2v@En^KF3c;U;5*=3KpSWav=nVCq(B<t
zEA3jQqJG67s50Mok;Ts>E56e3oVp;mMZvdWv8{Y^Ub(bGc>LRhXE2;tj5$A>@Dulb
z7dzTpdX`9*xflVg6}$>>m`wTLzrBt9V|_i-^(*RqCDbdkRA!BHyGGS&<9NH;vG<Kx
zs+Ahb-Kjbe;fvn$tG^Rrn`4}KG2*cW4Zj^|D!A0KCwVVpyYAqocX*~#;rLla@&G7p
zYWS*yv;=7hG(g)$qd8MF*P<Y*eUSMANWO5BSpb#kf~r&8?|}>4qM~hRrSN0}j@=9|
zeV=e1;l=r!oC-g5*Zas9^JSIso@gS@3H#F~KlPK_@w+Xr+1CmwnGRmImxF4l12fma
zQVpKlwIO6y`;lBxpw6b-G#i<w>1JKx!z2IbXp83`E^~Ui$_4U3*)8b#s*dsWAiH<H
zm)&pjWRdX9(ct3pCTJ6A3bH83B2X{fS1M=+TrX%J1XYN&#0B?fd<fu;1C#f`Wir8J
zf=vaRf@y&)3R(|9uBV|rH2HdX=54~oy5+?=&kf_Z@!H{g$nvbPx#4(~fLCve`H}nJ
zmw#!Jo4)H!sNTj0{_%d^R$WBZ7k0?3)5^J$I+a=D+^#hxwMvX-2FH@V&ZcR)y|zv%
z<LCZMn?wX#asz_=U|Pf6H2DLJ-=&l$m9IQ2<WUhfS<sF`1QJQNyNgK#7bzNP@iY<w
za}5Ez<VD)o1z8bq^|Xi;;smVi2G#+bzP)s>KoY_E1ST_x->W?T6x1H^%qGHpH@urC
zo;^%H)NS@a($4vbx0iX%KUDIGDp_t3X;Z#skze@LD*yG@bN=^FTIQ@7IA?Nw0`(>C
zZ)Nqt4P=G#b*oO?&6qyBFyBi`wD?2sbGGWejPKe_w#9MyB}1#DXk3(wjG!jeth5uX
zmuo6!n-JYD<ON&87lFJem?C(WteZ8;lJWxrNePk^nlFV+u`~|xq!LYlltW@k1~j3q
z%3oXI!(+m)y&Gm8GicK>5>IhM`6iC?Vlj4aSS%TS{MTpsdyjg4^hZx%UvU(X685Vv
zF?W25t)+1)qRbI*093NEhVq){c4biYAN3Zxy!Ukrq+hpV?<+i~&y`)Hdyxs{)Qpm~
z1aAfBLT}Ht!K6aj8B89k<r$vF31#?p@FI9uBzk#4K`30H$p!2Bfx6M|vH>Nj37w-#
zdNH`e_Df)5Lp%!c7Kpcb>`ujOS4Or7rw#n42xclud8csxFvKEEmZo^I^E47wLUt(7
ztPb(Z&p_!nJN*3*&Z5UWzxki0_>E`AI9n<aC($)-)2tP!U#?>+^ofrfvshYW9bdQV
z#Il4XU_=lTF)@}fDZ+Eda!eAT3b7Z4y^!RJZ#x=`4W{c0q-|m3hDqWbF~)0{XjXbH
zo30xaC%sro@(^2vk%3UhvL2#Dh(<hTJ~xePx3M-NiAyBq5^=diG#rsk8R9Ka8uvVe
zGVX+*x_zD#3uVT}l=JOosIU%L5Gz5B<^TWm7=QnC#K-=)$wyw;i5)h?*P)@j^0{3J
zRAwpHa$|L@l}5O~wqx%y5KxK<q&pqd%S4G{%NLLS4d1`_wY;ucW}#yc@9DIa#kynq
zQk#WFO72p`8k`EvOF6ZjF_vJ3{1Q+FOC?T&l`4v)Chz0i2*e69Y?wZp(wIq!ONKo4
zv>SD-v;*@ZiYOf~k(6SRp_o!R;`TjFYPFnq-rZpIo@svhi^qwga&YfjtU)PeUe0DQ
zfAX<Oe&?wnY}pj$Gg-1u<!UU|>gRT)^Sbo@=2|*m(?H$yD_$lL6uad>rQh{;PN`-I
zW92eihpKEH9i=ty`O7c<JBCVcV`Atg7V4IZ^9@?*BB`Fi*)upZk4+=CPkw-Qsf?gR
zrl09id=J3t2I~slcxzy+%a|aULK%!TMCDPEB*GF?jU&ojAdU=4GK_NumkYLG83m&G
zDxdpGmABt6{PM5=HqXvYQyVS^Z?Qz-M#&??gP(Nd<#ISC8*0;B`#^mOjAXOHyR4*x
zb$zF40t-Qkc(~vpiG~Sa1)swZRkqcJxM}Mo`?pQ8XUh~@#<oz2Cs0PovI^}?nYnb1
z$BsVF$G`IDEZPP(PLUd5Q?NP4TAHm6qpcel9e)pt<iy5eRmpS3_`d5iMQcZ#Vw{Fj
z1HDCJ7!Q#FNjy<mut|bVgqpPs#}|3&)GuL^5|wzEp=g|m>K?X@-pFuyj4XqOoag8M
z@^gIQ)JxRH3Q&pZEr9Bm^@Y4@E|XJw`9LL?Q<uBG&}_tF8S}Dae?|kPRSUYb4j4J-
z95$;mRi0qa_!e&4xr_a~x3ha{2g8*~lo1x13Db*)!>5#)1y7^pNOQ%bMDZ<bpS+9r
zz3xu_=*i!pQ(YK%eG3@M<%CZ23~^+@2(|!;@xe-&T!Q;^AinPgLmf*HQ7{@b6%3eI
zuq8pP#YUc?A!VwXa%39JP=}P1X@8!x^(T2|HX)W6A*1DTlA(mkSlr|FYj5RQpSRUt
z64$?fUD`Bj1nR7yle$_{XN|0o>yrJ65zs&_35pj=mc`U`l<h-XxpC`GZrrw)z1#M(
zWqb#*9j238X6x|eF~>|@X>~k-ALqL|gJ>i~HuV0ScO02rWGKFwH{ST8eEOwd!4K7o
zLER#D5sNn|aRSB)VnX(3yS1xKF}W1QPzmm@=nqO*kJobyQ3O;qSgc5iV;HFk+lCZ_
zB5J|_g^4MZ5-4?#NJ2$QIF}<$p<*o_Psit^MzN70vPmE*E-M3BW6+{JqDy+tS7NEy
znESg7RBXIJx+*0?Rzm3J+cc<>XF}W=WBcfCZrrh-{X1{w#yvMNJ~W9K%VHg7=NzYx
zD)ojZbNP}B(<a>(Pncp3jpHCA<h&N*96~*9P#fCIfr)qX)ciw4mB4%N*227WFi{a3
zMT$)!?^f8I7BQEE?;0)$aoyPg=^1#NfF|L4R5HY6WpoG*>`3{96>^bYXMmm?H7E`<
zAMwVW_wxE%?qPDcL=<)C<TEUGrkPI{I6XhdnVAL7&$pRtd0JMHSc=B^3f1zimRqks
zz5z?MPWHE&rRrN&vvGEVtlOrM)s=Zyi>aJtIK7!S-S<`w-gOrv)h&RfQTNO)c+Q+x
z+N};gFN}TRALA%AVZDO)+EZN_oHbA>sL2XWLu`gbEMyIK?tBv$7LPFPzJjr~C_pMs
zJthI0D3K_ZZc$X1v}|nGN)@x=;`^<)I12B>l)+Yl#foCXmQlFvjt2HGL&1KzWzVvl
zscakH{EF{j`_wL)xhJiAs)=E^x}QBGFfr;F8P18yO*%Tmd~1da^^2T3JIhO_W;t=8
z$;E}7g|?@eC{a`@vdDhmFTEwC0nD3e)2yp|x<*?kT5U>4uW6tzsLvT{+{*|5=})t5
zkKx!8p3|q5M!g*vnuSKHm9X<dosf6QnobKq1>RKQ(R$+G1v3zg;JoY4@M*AQsXA`i
z{q4-ZbP_*0(+fIPa!lD_N+3~@<*8zQXfzuqSPw=+(B5s~bQ|8HA=a{qAeCUTYz(mx
z_HR$wwx<a`E;u&bI9y0ODL2Tiy!qgF<4nYn=_aulDv6<yD)Xr_-4K##D4B>#JkC&c
zoRR9y+%%DM&wV+Sw|B^Gou-@R{LFbyoSNp?v3ZW4YH;FWiwkwfV#yFmsdo+rqqEIr
ze{0a6WwWkOuZ`wsm$G5oBkUggRy6XQIhr$bK0r7&7LTG1oD12X`e2#76d9ok-g~@y
zRD;C|D-ny!AS&KLEO=*7rzj4Opkl~ePEs1@rmf$`vorrUwnovqN%3WeEm<TAg)H%k
z8L(Qm09dym$`aK+MIu971}%dvE4HLm%Mo`Tn4>xximTlVR>hFDJKSIn^19o;i`kCD
zX-aHjum<Bp>=Z{5*sTh=hfd~LTvRSK1bY#zi76)~Dy0!>BRd(Nx`VxUI^O+F86+*5
z?Kv(^pW*0{b3FIl49~o@$kXTAw1+AK1hNfef3l9H5-k9`30HW{N($QT*H=M>&mWrQ
z^>5sYjdSu;Q7=J`+6Qo{7W{ES<Jft{Ige@pme&v;sqfBJS}dUfY^>tN&}n+S6PyoO
zloHX(TTDzGWMb}h%;cXViXyxhNQz#fr8oR4PO*8=_UpPq(>0UbAg17o*(e0<QiD=e
zuq7BD_8iz-XVGboW2Hc+(_*`S1qW~XZZ6e3f$MH#at)bZ92qEqiy`ZT{-PC#j3Ks4
z7KP6l38c=^>In1G%7qyrHW87HDaBQWh9(%D*v}j8_PqOB91PWY?9-3)^Z)+K9E}Rv
z_Z4S<1Jr2^7u?2LI=+{YuRaaEi8@s`J<eo-)Su+Y^C<^zuQ4=IWA0que@zW>QV}DE
zFRys#aLx@_tAR?FFDCPxAQizxN+|&+f?Kp<1+w?Wdk7%ix9dGD9DNB!FM)WZl4B}S
z5o;A=m0kjvJlJkf&@EhPU_gj1+-DTxt7Hh0iXxG)dop8uBInYDxL1dAX~tCc3U0gc
z0T$8>R4`&uF~r88kzi|Jt6_vcZ3hmRkx(ZqMIkh>E`TfcLTtnDA}eIE$9SRHQ5G{e
zKLgPbA&Db)?i=Brdtc9McPcL&|15EBv`8Q}9;h!>V`f?KzLt5qfAA-Rk-n@+{9Ct8
z(>)>O4(IBh#pI4dAAgCc3Z;tlV-}TuG1LcZ<Gjavk8_^fIdY%loFjKR&V~Cfcep$V
zc9@coj6h{lh=&bC7Bv<%5o%&`Rgz?sy<5JMylD`lP*KbfBo&Cu;Y3*pP_&^`)hmda
zB9s#pBVZ$l%3v#COAwVHDH{%KaiB4I$D-EY@|^MXR&KxXduXYUIwe<&!-Sc<l296l
z@;KxIjd~CsNi*oA&`zP*316*LX?4Q<W1|htj?n19VlxcRHj00@ywLJ6+xE<5G5_Hg
z&+*JzOIhL#wP{x6)vd6Z%xsiFDwrasSbOY!<DzFE646LrV5adEW-l!Axz9hx*bX~L
zlti2sr2~)8J$W9iRTog+d7O9T&Xao$uF-j1?nyh4J4i;Mx)rKBAQ=`&3`7RC7PTch
zK4WtHAj9T$w3<p5wXr23N+@btiZ%3lhqf@_R*LUNFgD0R+C+$I0aP}Is4NT(dB%n;
zrd0xBoHLZ0H*nM5@1unySC5w%ClStAC<*ZdRJMRmU||6o%>b-crnGaVlPS$qX{ON0
zgmx;l(k{rLohqFy0I;1xtN8t5!&94z`NH9IJp9-hPB)*YV^>n=Gs_o|ukQY?G%H-a
zz;^X41zQrP7eC9M(oUX#y2JQXjRQM&bKyh^n4+A}wOB4#DxdePmPd<vP?%)#UJ(<b
zC~u%O52Yz#>?VjN6mKCvD`d@LTpq#15nkZdz3=0(XXbFWiBu<vDoRumj4k3AQ&^_~
zT|+S;W->PHK(iIFRUs}xTnbiiaspi0(n-s-nr)=LjazU29&)ib@1WpLSz{o9XbLJj
z!Bn7e8tMzhw6zOX(E!d0ktxb8PKj(_RODW81|ly+Mf_z9#1W)z&%{K`$=L<|_+!ry
z)8u@1l6Z7#ApejR6=v1~)rvLD%~js72cJqXBPnNR|B78B@8Qdzd!CWE4>2-6%Iw9E
z#pPa$FCVUMuQ=~}Zm}ngWkSX$8rnFTDYS+8bIR}@*m5&a6I`NnE(#SF2L4)gsLwRX
zS}ly-hQ=vU4Q?<ghd3*az}V2<vA(ZfE(XMgI7&)jsu0xzpprNc{wl*tL!jv^<PtMB
z@kVTUgjOpJGEycKcqu_N3DujRIt9&>FgMc;+Cz|OG=R%{gSUe9;R13VA{DHHw}ftk
z2ELe$Lo8XV#w^n2cmMFq;5wXWJc8XeTC|OH^MU$`=T)y@u5eu;i7Vk#DPYM*E^v0?
zVYUswg+qrP=bdkT9Z5N+zUT|7paMuPxIO1XHt01RR0>wHr<m;{99$Kk0kbEB@tcKP
z?+YjW^pnEH<0;c8=9s^Dfo5w4M~8O14kb%e2^J?VD@h6BL?9{}&SoImlp<h{L8<~(
zur<Y2f-6lbkc~oJpy?A_S|&3dp9s}z36UahG>VJ}m78Gf7RWCtv*)1Q4CNMaq3j`|
z7$f}}Uh$b#1fN4xh`_6cUS|{qwrZ&?#N+VL#~!EE@+>r;fXM`7lBJ{fR|TqWVrH(y
z6<*slBE3A(8rqfTxl|va8sEWZzVImbzxEBtq85R=$2si-tf*b}zBH5~j0qg9q>>Pq
z4N)10Vdhj$=Tpin-fNI;!o{z`iSr#Aiwk(4A+|&;H8Rt|MnYT*7N=5%P6bRUlpw^1
z10+R0trD8erV3I8Y7kcnR~SR7qBMq}<zUf4?nXGb@C5ZEvsB6xjEqk)HaS9NDq`%G
zU{xy#9DNL$^B&g@Vk4+SyvItgN*FB$O28MZSdsw{sD?8sE`Yx}X8G8szRJb(3#9%i
zoskyh(gdoyj1IMa_P6?sysVkqt?CM86Z`(y>=H>8qH@e)_874n=F)`*k39Jm4(@*y
z%?la1cX;n`O0WOtd^f(a#7UV_se+hLQfPMS%v`L~Xx3?_9da8}J-LN>9pkQV7jAep
z)Te8x-%f`i^5$YO1X?GF4doh?W5t$)R=F6DDfK6EaD|{yB-jd20jVmcDm^z?jv%gv
zW^~$87J-(F$;hbtOUyUsIMX>#wQ~d8hHl`li3neVqhEyPMT-%Oi350jZtyNIE-+7I
z32~&Fo@86s0d$Fep?jf>Z;Lqe=+nIT(pe%q%VKn#%Fwofxka;ym};GkuTm)C`Hi-8
zq`$l6x@>!wP}xt0Epzi<V8XtM7hZalk}Yx5jysu|ZKBp9>M=yvD8iT+6GbSFb~?}b
znd2-rFR{?LM4EN*m@sG%jS`o~NgFLrKT)H$J7(WE371YoW440NERcY6n5a!`EJ;-v
zN+2u2LK5T|DHl!W986qXXc0&PQVCzS<SCVeN-UIZ$PRr4@?5AZbkriz5GJumRK^aE
zQ`xzViB~4D)A96|EJr`NfUlp!G@F!7Of4CrmW)tIhKS-4)_~Cv7N{zj)1ct&Ls2&_
z23NiFjBStk@^dfp<Z~}jj#Dn>Pf(rOxojBrN&|Jdd=F2d25mOR$67}t>#DZB4*<2e
zYeyY3GY>Nyzlz76|1+j%E-_i#L7HbEV;Eyd^GkSHWU+OUxyA`P=_0wNAeP7u5!+F$
z3?r1Wl7P3kj;FPlbL8Qe+6~GLuM;kv1ece<M`-Senkm-A)P|rM37rT^rN9Pt<!}N`
zR9tLDIH8GRN=0w5)VEe831elx0%==lDYU&s;vq~qf$9k5sV!`|ZHQg3a<onh#~;b*
zq;=BP9C_;^KApz9HjxNrTccLm#%OID!?h_Y$tdNdN^A<(>_fpgcODU8`?i?p&m89~
zPd-f&=S;UBWoY}Z0#v%m;wS5aYM`U+H#7dFYKk=bYNlz{-}WvdL=(#F`Nyc0r+CdB
zbG-i6E#%~!TR6^BM^AG2_%U8Qd4%~!6KfJGl@V&?VUnndNQE#~U<)0sV$*~Z@}|<9
zh8I2s2fr8gycyaJP;bz7OnYI7I57-Y!_1#aLY(Exkd=d*iCjn!y47|~KuW=FMkS$C
z5+Vx;A)}-sxJ76i$Rx&=$FV~tqOl1^Zmh8Hn;a;-^e{B$GF-a@&S0d3*eXI!?&ev@
z&N1J4np3kGMk6ZmRz@nj7_IGOw7Q+~;cb+X3P_BU;MtQ$`RWT_#Y8PGH6N$8V_R_n
zYq5Ch>H_tZ1}t>*b*yV)sn!EkA6TjxlM^@az`OrD_T6v;XInzG0(*DD-S^x}DQU5|
zc#&i0&hq37r+D(&lN>oc&!xFVEJCeXqf(BsHbKM|@<IZ65K@~z4#yvXy>Akx&p_T%
zwC*V_lt@a3a#<<If|j6Kg0uuwihf{TjCz@n5fT^t_CzTqLMaZtyF>&VfksMhAjOkn
zv6WGxkt&rPW%j%lMt2HN|FN=gT7%AaRxBq_P$EPkj3l5X5QmK%sx9i-Gt4v}qjf3=
zKg3YHjhnXb=bqd55LG&yKYo(g>5KT%9HTq8BN7d)$h$I2wG!}F@<3)Yb*#$*w@qb#
zYbf&$#$6()choxjdC%KENZXI_$l(r=H5e04R8lewRfgF<HOj8tH*@d+RNvcRzB$cH
zr%&^h=g;!wvki`&YS3v}lDI^*77@px(I6T42Auh-Qrio=Un4Z9h4dt3iwSWAm9kQ?
zVce!t4nw9<E@5&yEt;)1$P!5mrmUD4l1NBGM<xiJ8%3iK`(y$smSlK@^0tUA2VvWt
z%84h0>1T?8*&=SDm^cy<#F*Zx>ZFclt4-SJkl2_V<HOwkiV5y{#Wr4j*BA#6Ze`0v
z1!ITFqI>zHk3G&W{=y;DCaY4ER|gDhD_qN3k_u*{Q##9De8bt_>I8jRz7bx+*1B?M
zH}8DoKgQ`0&Do43j=_cDQ&LFV%3Q;-Fz+~WQYn>%(V;SvBYW9*!(QHaH^g?1^K+MY
z;<*{V_|yVVKYxztS&vGU+PI}s1H0%s^Qdy`dzBmBAe?y^^14zg2_q#X&V#F~ltN(c
zTrheX6&aTlM=J(fHrPaoBc)`8L^PBox>n5!8A@)1@|0!#CSlL3Vg9^w>PrfpAm}DO
z55)r`xXh5YGTM2AJYS?liyf20+;-PiUVUJM*WJB?+ism?Y_bBThMP-RxRh|=r35LL
zDV5;^?|UbEZ`jRGe((=*qodb0P+#%9>Xo=cx%%vHRZA68V_V<C+g|sR2xH98<QQXV
z=SmcXOv88SF}XrZ$gSXFNEbcxbB>eKLglzHQ5#{`=ooK3coX0LO)XmKEH9p!=PNIs
z<SWl!;HC4U%$*%39j$WwIoS7VXwEwFIT)&hz&-JxRw$PhQ-L%ON<|dFQVo1BNkV}%
ziiISGk{#$LT0v}~0bxPPLTxwfx)-7tUU)>&hC!UcWsY_uqcvAYJ9AXa)7*GNlLKR8
zyn4@eUh}GP_V1`MJT(li#N5T03(qCI&?wQ)N{F=>Yp^kxMkrODKaumASKrS6`Y&4i
zv!DHIn5bUUnCf!tWUg$OVzXoK8v#`@MS(7k^2S&GBdncd_EKJ0F-44!86}P&inJ#>
zCK75|9Veu1p|cnYlX(@=mS?)|dF~<%B?((AJJ~a_ogaBu%8$KofwS{<o;bP4SC2<L
z^VyhF?NLVVtkRq@FbWkMaZ%Myl0btY1>=L_A6<)8P-RRMm<^>k^tf#i$(TY*-<U$>
zsHAMYM;N)maN;poIBQrqmy(@rQq8BidHV%k@iyVU`?hoN;H~W0H$vHz;n@zSo=AD|
zh~?a)F^xPX_XgjM<5VG6G|dq&#0cdCYGtAICmr7Q&b#@a{&Ah3`;{+}jMj>gvTJ3j
zE?@AuDF&&EEKzZ}7M6;F%Ig*?yy4b=NVT$;x!JVP8!bjKeIfCjgNuYD4niKLXxRkH
ziUjG;c34N!szZ_por;o;C@q(BHie;c2~*{*>>Qoq9XDmX@7@;k=>kVCoaMxe%H!<{
z)k`Ckn?uA^ivs1gCu?{p1&ft;6cZH_$%U&kwwQnxh)p3{<CRDuu|ixn*eduT(0b01
z&$XHR!XkU}I(OXddBt}dUU^rIJ$qk4JX{U5>=w|;K|JkSsyzI$Dwk#iYn41JfRrif
z0?{!7lE@Gj%7Ie!HBB|*$xnD5c>C)){hf7w?T?<JR;%@B(bvXObtj!RGfd$FXGCN(
zZJPB#r3I++dc@s(zK4;K+nAqgV~q*)m!db(-O*w+xIynADM{e1cr5@H=)>49`!wiU
zb(+vw49(<n4YDz%r8(y_rE)Q1JQ-%&<OsL!$hhaW4)2u)7cX7n<R71;kqluEjFW7y
zVJ0Jz1X>qeP@w5DlDqqzY!K|Q2#GP&5~u*>QQ&OO#hE7VcnXUx?y+!iD&qDZi`cVw
z8_7r|AhQK@JpQ8MTu!QxW<tGgNmJ#<d*Oxu>_hP}4?CeF6KFfO&^UF)dnja5$!s79
zF2wNkU&H_K?zeO5_zZvb)HJ1}Qh;H-HqAyX)nI{iqZX@Rj&>)LueMIrOG!n^+RE)y
z?`7AHZ(?q)UVut_{Xcr(a;ORPSyh8-h*2UF8nDI`lhVFmcAD;FnUbd9av^IA?L{R?
zgi;l%!%BMy=4O=Ba}i@NMof)XnYh8R?KMqO?J#@(5~sg<oRhxF!me?)+&G3!BjzsU
zSSw+U&l<`#OKGfd!&%C?m)e|vq0ZsMbw<y6UcYmQgKr#S_r7r|W2KNLra;T%E-FrQ
zGK5YJi!GR65Eko7tEF_>LYfJ~Lr|)D7N&)ANxH%}J;r)hYQPa_(@r4E3o@dInMgQt
zsKn3y@cTIPk>BCjnVdL@10t^|P+w^a>n1Fgxu)4)f9N339lN79a?{@TFgxGC6ti~P
zBl>k4s#+8|Jt_t@zOY;d7X{vtL9l^Lk2MABw0JXJ4N{*e&M8?(N!voZ4)wB9DG8M!
zWqt@|91P7_Cd$K1ZmY3v=Q!Km-Qkt_0+0RPX+HCZm)QEADfZt!L2EG-P-o}boO-Fw
z?70QFlu@0}*-gwVCu@A$mPtl#DACDcUVJ(t-78e)m3A}7BeY!r(n3?HH=*8ucB_zB
zDy(zZFs7&oTW>Z@pAJ+Qqy6@r+Ac?|;1CreacD8M9ffmquHh(sb%<a1@$cjZf9|(v
z_%6Fa2e&3|%KfcW4>MOr^jj}bUvF1)`2TR{M(#ZL{meHyfi2y&h6Ruq*f2w{!5W&+
zVP?=5%~`?5;G+O8)j+_r5_pi^J>S|T4N7sca>!C4i=nj$izQ*UqEv@rb`+*_%g`C+
z##>@udR%z%(JG(+!s9&id(-^LzkU<DZ{Na^PtUMDw@jpMUcIfxf!nt-Tq@z35z`IJ
z)6?+$)1C`$!^K6oyW#nk_ZcqC3iY<KxTrK+kYz%i7sDdOx;n4Ll1(4R+8PZQ+95=x
zz>bY=|M+*~y`JS7JY@yAL_uTW$hn+blPNy@1Am8~{6GII@!0slMEKQ!s{d%enXFKk
zB&ch-zx5Y@`-PZ;H~$csFQZyVOsJ0QvQkKw*{EpGHTF7ET5y>p46iyT#BsQU!_^$>
zLHJ@2106UH8ve$IO%pyUM$9sy(^Q)CFjMv1`I?wdeQKV+{>_todiIYfO&#Q0-t<~#
z|MCn^{_cysc-Zs)H@}J>{2y+{dwB5~#|tNw({-53p`I(bGoc2S!xs)IyALQD33IbS
zq&B<<3Id~`PWzHfz5Ah&os7WfcICoRkh0=>>tBkc1-@Hr8@x!Rn2ZXeW2Hzqe8h3r
zZMX3QZ#=?({NghV4UH8`3(V$Xs>}4THZ=)NPdIZUG1Y3DCA$B2uEUO@H!?bQBlC+3
zSZj+av-ShxL2oGi0Sj4yR;{XGtg8@6^HzwX0ID9J(dgj#Uw>Xy3)Z8Cc*%PqB2bq{
zx5T{o*bJZe{fj)_`Xn<x=38F%eZ1w{;GM657rp}j@|VBJM}Gf5lbRpq-QTjEzj*-~
znFPLhE3BH!a{>cFg~d7H*{?coxjUlM3Kx>|q4?WfD5XBcO1`k%gI}EvjO`K59dS6M
z(2Xd7<teh`K-cz03V;=(Y6WM_=i&GqegWQh@ZEgsD=%_heQ|NGZK;;8s#|SBdQ;oK
zHrl3H4OCiW48B=n|L(Vw<sM_~646{)X<bh-uO~(Zo>Kc4M%SXzcX6FG6f~U+Jn-BJ
z&WCI%oXFy2I>qH7$W3#llPc|Ixay*E#vlFOi#&Jn5nh}-%#MlIbMZ`r&pn><$)k>6
z_<!a(aq>LL$V>d$ryu9!`6jiRkhhffEOZuyv=ykuJ`;QfkrAGMT<LT?xeK}wu8^n<
znWh%vX~Cj)r<A&tfp!}zQwCd6vdrPU?@_l?4{0$}lDXpZWJ;O~?K})xG*W10VYp(k
zm2+|0@P>V_r%|5?uhsKQYh?Jcu|=Az0_*-|GR(5%Y?~DqS*{*a^((R_s}RRSl*+||
z??P0}$iO7C7{m-RBD)*fm&;X3kwF$$c=2!7U8$Rfz}NXOgXdh4iffqQajrY8q2w-r
zv7IX0Zm|5-pT5AUa~F8A{&7mBDJs<|yn||F_|jj)@#oKxXN#yroLu-KpLzH^JGKS3
zgv*K*Dg&D>@;nq$XU+*T=RBrZ1l6@h-N6ynuqs8hkP+xwVhzcMBtmr@IvtNg$+Da@
zb)=ai%{^HGw9JJvSUV?7^yJWV(8!d9wo-3HJ%X0*!Zm$?8MDFcZyB9=#XjSPEY?z@
z-^R1QzQ64P!<!aoPaXs78Jnt5E|n3rL6y&U*Pclqj9L^@wO{{Y&_#6h8Ko-_S-egW
zQ)Ic271qlaGm3c^P{qG}kt%djWpYQ%GtZsj$;Zwxoqw5zuTv}U!$^X$p#ga6c#e1N
zFbpDPn)VsK_~j#<J=0-$$dI`(Jws7b>w;H-EH#`t8l;U}Ht;?Q0J%abM}2n+ybn6B
z;j;{H6|%e-ee<pufpa*oWL`<V($Vm}<&<Ww)H_NmRXSpz7U3ohkDjgb@RMIAD*Gi1
z3YM>uTP^!r2~-<s>AVFvv`l++GoV_^gYLEvOwDoT(qChrE>oH)Gqq(4V<RKvDYP0H
zS?0R9>IYjr-LZajuR8F&Jza@@xuP3Sc`Y_}S$e88)^w@8LXKdHm}Y3i(sE5c^@+oD
zIK`>Pm#9_u6Wb9C31U2*%ut_qc+G-5QdA|+Tbyq^!RJ1IfP3%V#kq4uG1rIgPZzkT
zVl13|LD_p}aS;@Ox~ldyDh58Ys`RzP2(EKvM}$Nja_4)3nHB>Yqy&6%+^h(3Y^juE
z;tDu%T*&IooSNax=^4(So8f%=IYy^$3btN08mO-Vs&0XFa}3hWg6eXHq98;`!b15l
zC#Hpw#e0}Jf1c{t2osazjEqh&M1`~iSvw=k!etw%BVl{jK*@zZ4Zknxx+DSUW`|v^
zc2A*&6@vWk*uEC>hP83Sr#|%<oo0hmtwTs`h@)}hcm!i(jFB*9ohe?6mAjH)O_fFW
zRi1tBUT!`xNu^dLoe#CD;LZZ5yoR3Q>_u3dcSPlwJk_36(xSBBeLn~9#aKlQn&(ii
z3FT2}&UvCJbRe7wl9rLNBuPxEWJyYfR9l>DTx9mb9MjXY)EArNohG@PVUd>@+O-pF
z;!V}5SWYWvaKwI-3k22{16fTUYh^lfTuoTC&(LTbWhA?aEWMq^r8#WrB-P;><KvTz
zj!uCuk#?Zd&T+Z#uTblH_kkTQB3<Fc!Q##U?Rj9gj`yMEVT#QWdFGki6?6ExmpFOs
zA}#+_=JTTrS8u|~5OGw)*ccm`A}-S+-ZNNJBC<oYvQwO2c#J2X+Ra^e?Pq>rP%5AR
zP7xq?QsMk@&%V2$(=LFoJ);yph4i!DK@06&u)3q$V&*S)f)I&`D3?maC5zLXR=&W+
z`B`QzU1Dy2p0w3QeTtU_+WC3%sDT|WF+92#Bhf&C^a?E1a*4{#2(QTsLR{-wssY}Q
ztWdd6N(q!a^VyTkH=n1P?xvRRrCr~`?D>ntl@cRkBTP(er8+W!H3?}OI<368qA&l5
zU3c3RX%ksS`jIg3*%K0xptM{YikWXO@RdiO#+!?rZGMqbX@bZO5k(b}q>3$o<$Vac
zr4aNNEJk9)L@e-Cjvjd>yZ3IRT&c0JnD+!rymmnn)CJF<R`%Q(N*qX6WrspNhk>rc
zz-~fU)VUPKcO;yDA*NJQoNqIqo?&kK5|?H!(P}oyvJOUD<jkVdBDZy<Y>BHAR7%@c
zUbwVQooelvYVf<?XiKMC2fsF;l7ZjHNd*$2<4@9T9>Jy~RCF8VY!98*6c^5(r&O*m
zF*U~6_!es8<5&}uwV~C>(V}5yY&X_Y26M)+XITfUWBnLT6%#>u#Pjf>$I!gZ`POGq
zn-kj_ksTq5hKQnCA0R$V7K1OcSc@?+NjyS3J;$Zy)4cT3E^fW`78VxhWv#0HBCoM9
zd(P8ba2OMXq1&DgoAe5s^kT0<A0k$gA*j?0^XFTfntqo2e4ToIhAiulyEeI-!Rrjw
z2<p-x8W|(0j8cxaE-e=fcF{NM{#FE4pY?7wze{KHG1dB<9Vx_FW9(1@c$)bU7FtJ$
z7N#i2!*tRewChuxJ9V0*Qe}K%jETvu3{8w<h{-yTcU;KCx{F{<VNndrIQ4<!B}P#1
z8QT)`?6ZfNzA#NgpJc%ur&5~2+8U7^CbB~qTkgd=p%v$fO<RhX81bbr{9r8e?lDfC
zyn|ggY@<{eq1ki{PS^TkqPg9Kxr>g;8zS=7K=wUwv70EU)fgL$K-PkV^U6#cW~LW7
zdHSnhW^sOzOy}@45%JtSzMF5}yO-ZS`Xb5ju7S%;`y~aDD{y~ipj5fKOsL;1gY?Ql
zb-ATlwVMt^afLWGxU|i-q1SP2?n}VaRHLnwvTd~M6P!PNhEk=%==c~DQ(LKxO%R!w
zv<+Fyp*{f1bgLKISM=zDYIr>6;-!l`^VBmqxx|IWBP7WP)|83tXyFR0Sd$cgXNnSl
zFDm85V5tOc$;b}V%1$%ac$Q;Fw{y#Z5t?=FZKwBzD-;RU^_dGfQ+rD|*G;@NDBMKh
zIJsQuEGq2<=roip4Z9aB<%rzRGn;-MiP{K4DIQ@so?y5%$-dEXUb%mWKRr{UKCs$%
zX`RY!s7<rdB=l;aQZXA}-8-PWwjofhrnR)10c0SX-=(_j@d5^mS5IPw7^~dOSlXuT
zW@)77n9sgKjG-EBC(X9eTpZ#2=~I*|HAW}K86Drk$mj%dl%RQF3ivGV?YU9FWuBo4
zOHxgF?9i7H)8>5r5E^+RQzDLriK9`hsSrigf^-#%w$2SI8yZ9+L}HATFj7WL%v}Bz
zP8{FE)Q&AwYf~)Nvyj<p(Li@WICb%2C>F$}AcC9cfj`x`1f6=Ap!TlYc?c9VNrGSr
z%@nL>sInW2AvO`Uq{dKGW#7~=`|cYi`kUacyBpE2rcJZ7NxcFN#PqmMW;3)IT{cs=
zTK2a(#b%xH?A}EYnwe6VYGW;tiAi)6TdtC8lQf@aE}urTqr|2}&2A^lchIblaqjdf
z;!?u+<OCB_TNoLcq&89k-_>{U?AUAAvK#)NU;6^}#tilRahiITQZ#`vWvm^>njws>
z5}PW<L|q-qura!*pBV||1|td9lu=DdqH$X38Rk1r@xn8syz0K!Q_5r7?Hp??u??=R
zT7%h{Y1(Z=+AOg!t)#7DXrw4DNFnCdtzCBY-NQn2ODP&BG9@C3sYGRJNsY0n!riwH
zF>+%Cac13y^5)t!tGmCI1>4qhh1V!h-w3FdSUEA2lTk{^IAnD?u8GByL_%b1c<qq;
zI`jEOX3`^+Y>8UDog~{qyFSDDQ)ekvs*H?{FfumI_{11H_m;>_#_#^dqnti-mRwJ8
zvHev_<#CL}SUVhIt7wS02;7a0px3=OK|Tp7GD3s3Wt^5V+CgzdQH{m?Nv1FD;IYTx
zz=3-hnXJ%mXSCaO=H}0GY32;x)VcM<JILy#P~;Q|btza<k6S_4pCqy*(HKcoA(4o3
zRADHtaQjq+{aa$PW~*1&?pIsPH4M}TEY${jg)0EdFVUvl7^pVy{$v$_w~%oS6U9}c
ztU)JVBy&x2-^OT+wPj*Eiqj6xH<`~bp?aDKOT|u7(VcXflUz7cC5jUs{i37Q>>zf5
zOpkJ*^<|RM2v$m1TP2Q0i0vq`9U(GRqNoA{EqFx8GT&q1h5~7fA;Cx)V>)=viK8((
zI?YUW2rhUQ<}XpHRY<co&CViOHcOh$lZ-Cl{o4^^FkK0og7DbW&6WOg6EUH+Wet?#
zh;lqcDJoMoF<Yy{+&EF;hLO++&lfTr_KNsaR}QL839p&!8mO-Zs<4~SVk3*O5kgEQ
zDiLQR<TOdMMY60#t}Q%mL}RQe6Gx+XZIinui*Am&)@fo4B{M>jjblw2Cv{rs1sd)w
zad`+S0`SNV6GtONcDRVIh7c1kImk+}T11PiN-aW+p^T9>#yGt9B+(ch=DC=DoN~S$
zsh2@Aa+x952JO5>El<L<z6@4=w6_MPU+Yn<4fP?fA=WY|iLEeR9b>XwWm`32q@-l3
zI1;i(My3obapD@(sn)hsa%Gz-<f=;wn*o&+yjyE6Vxy3%t0OMQxK@=?RH0nT$?^ti
z)*$l@oJ;YV7I9CR*p3A4c5Tzq7A<!QpLOus0b@wY+mWIkWlfpbjuG3jqRdbxjw>Kh
zQO_^7I?!bsbc?VSF)@}B>Z_scBo2&FiY=L`Q};)TzNHHeG%8_;s8qI7D#fI^3$?ah
zFSH+LDN3AJ7U$cH)XG$=hH@3sddyU98{3A5shUts@E$S`S)PzK+T^|qejNbG#sc+~
zE!bM1S`Oe%PeQK+Dzm9TeSN{Nklq_>NjshccTI7}-BX-8Imb)S&T#&06VZrjWfY}N
znzcx?I!@bo?Vy_BHN|U(h!Kbs)fBH8N)F`3j=>mXDnxb!E5le*C60!$Q8mzcx)dG}
z@;nG+iR!?<ng}B$tmLRETFz>4UWn{4Vuw&X>Rqo0s*({$C2VB+({Om=D2(~%c~07K
zlq)fdjRybqWB*?!$8Y3y_q~Ig_HX6v*%q~O4Z#LJTG6oXI8Un`;b%PAvixr|fx2us
zP?sg^M>jo8(d)de8>nwQ`&$!K#p`(WAxJjD_MIbCt7UFJu$`N3*}{c$3%u~$B~Bf$
z({5SHNsUT*lq?S*bK1uF@Z~iHGQ7_)xE>i?#9&N>F(qO<L}Z7sri!&g7!&t${ocM~
zugkV?8AKyQ5=0!vgu*G_fU$^AQE?P|$U^up25f~m9uD+r6C75xlJMdSN0^&C$6a^5
zfzio`yyN-gC;x!?g_AUzm$-Q02s<ZlW3)6vH3_a%3DZrfhsYV)otR7`GBuR0bD+Lr
z3Bqh<m_p<lWq&JMzso^Y@T63F>Am-mJ5SaL#I$YO$Jx1ioP~uJM_!uYrDtcEn*ouS
zT4e;4oGfpV=PfeV#A}L@q3ZfBN2JK?5+YM2wnHTG2-bG%SN#P?T5QKarKsK;R4qa7
zOfg0Wwue~6Cx~<ahpG!Y4jN*{OgmUp4Is3h;h}^V4j<<epZYc0ooS9Adz!lszJ(K~
z4|D$f^NbDOgvADWOr8@}<AReWVL(JAxIvV5$I`C%WrbcgP!$j{o-1tWTvbf9F;InA
z#`VX)q;I;dRcsUnFj~!=a#G@zckkl%+qZK1)I2Y~Fw5C94f0M*5|=2KMsY6ees(^^
z`%VCvYEK3;vI*7(c54)mVoVZ>i%WK5cNqxU-~L)CfAnO!yK0FVh4_v*ROd~MF(pJ|
z)Mxno9C@l#hY~6!!{M(U<rAO!HB?iEYTLOu^DLkE%rT;<!f<UHmW0^Ej8rBWu8sFe
zfCd}|L)HtaLNkq7Y#3bkc#E!36x|G{WF1fy2BSEh8xvkza$K)Z_O}wK`Ugb&%uvGE
z*CStki8zYbw{MEcsUbuR?N-ox*n8s?d-qQ;H{0aMOLH81X@P~glqjlDE>()D7guCh
zg(VRJEyk3vQ3Y!f#B}$VNDp9Qx-y7b7(3Goj#Yx>qyfYVMq{uwkO(UYVxrJWQpLG8
zaa?C{VUf@N_1_RP#1|j^6GSYP(pC^dDVoF(6WLOzRYes_QH>-{ij8N1oe{WZLas`#
zVPd?MmY8eVFjBW<LV0aI)s<VSWwo+RiQBHZ5`(J`)K^fH&_Zhye2@2Ttf8IeoIW+n
z`SY_(PS)75bCT`bMoCHuS?X|386K{3-)o0Bcz1`BCl)yT#5{8|K^0jfxy-_fu^3}8
z5+O?}?E^|Xz8J^y^!BNC8DP?#(iXv(5~k=Y4vw?+==#<dt`;77<SzhEIT^>uaA?Nc
zgvgYMZJ9W#5}5=mw$QZbf+;Lma2nz(haq<c!PCsk%(taTBzhaQH^HacfcDvCl1M8r
z3SKuWT(wOja*Zt&OD3j+IEYzNuYL8aZ{)<ui<~_*%eiy&T)eoz@zEOFc8s%g`xv$1
zD&9F7^$cSo4&1thefvlFqlZq?Zu(%21}M{^pBBI+VtYd!OAosCiFO4Ap<9XXHF%9*
zCaLL{sZMLLg}Ov!tAL|c*&4u%4Ye~{A&x6V5{Dqa3-B(#U!}L?Gt5RpUX&&>BcPUc
z7SqVWIM@}}saQi&;j;cAE3|z!Nc6kjf%;0mUj=LwA+G4r5!8T(YZdN3xQG3Fw{r6I
z3>PlUGe6g2?(k_&9J|Pttt0H)yM>|QDqcN{3mMg+n62BZ9C@J;WFRp;)<LhJ(%mIj
z$ozB%JG#7jV<l{Bg(99XMaiOntc>aJ{|oEd3htH;1kqxM?QqCQu~?G?H*BH+vhFm}
zl9O!u1zHWkdRI*;FNRW0Q3~rgLnF<57l;va9Rl^0h1ae?A4{%7puSpl#1y=zVhx;{
zo+_}745v=d5*cC3)-i57u#^4!wsPUpJf~02a_QnCCyrlY`cj=Yy#4@5DGDc|7+n_=
zEL3;;hr(Jd8Tnq81$XEA!oKMM6yM!_H$Z>xyFOVmL*8W=^hR$)iEOY=!T`8MmRyW|
za-}H-E()??S7)KS@}#gwdGYeOMl`ebfaTl-pK4uDu?$pZmHpD2ST=rL1NF<UC`HN1
za#w&%d-b%ZpE^mq-C^6dF?R2sWc&6}_UxWy`<6-O<`+19c8*4)U9>^yFTUwLz3I6p
z)4Ko%8G-$Y74@>@qv?_+`Q_3*T2Pj|lS50d!GgJgt}vd`ovZ9ps|N-C2RQG_zz9$G
zSZdE&iigY@I(bk;+zg-U$}H6&s5UiBVXkePW(`ZVJWI)Oco(*PbxRM%z>PO=;m8XY
zxNv@fi_;5?k5$>RV~ia;CYYKUVPay0EX#|MMbX0b9`%K_l7T>4mo9T0{NBHgx<a$v
z=Nnw!t;-|;%mDjW`|~RzD-cj*VDK{to*1+AcsT`A=&}bDaHSXFiS*pI!332*4SErs
zEJw<+IX=}@S}N_j>`hrLk!x5{Ux&w4xD!W;^PQp)=}|m+2K)DJW9Rl!PMw|O^vO$1
zUtDDR;sVEyPqS^u7`t{(FftNU>+(GB$Nk!64-|2A5ybbZ8m4PG`YoJ6w`i;s)5`tP
zGu5RDlIelY52)x!Z)5DziJ^Whr2|vnGB{|YK2+zWTO;c4qc);=jc_Xc)iEmM&d|);
zMZ9+<e5#c|wSkTItG5bQ+hWhl<o^0<G6FcsXr~L9$|%k&?RJha(5UAmr4k2j+R2_>
z6P!CY&)G9G%*-@+;kmP%JTb$Tt;6izImzVYFy8y(z-uw6(6=OAQoO2k*V6P|jOh<!
z6vO;@zeKTQSxKcBiSN!iiu5(By5c4S(g2sAWbJK#8t6oZ&`g3PrWTz3@KFrDSXrD)
zSHZ%Pc}pvAU`(kOR>+bKxz{34=du-n=<2S}tW5Ni4P<}U22}m4Sdc`icg|snKyr@0
zaEUz685#+KVV!nHWMlT<xQ*Ao{uW+!-+p%P9>?X56UQ#``7gY{GtZpDbd>^CE<0d7
zNfBSPYL--+`vJ8wsI$;5gXq8*Sg%0RTb2~QOy6SlCUyq83)(GP=wP_to7&c%j8lIc
zv{;=JmQ@w)^ib0RB*7EW$m>{BStC%FD*%;Q9aLAcy7yYPY1RYP;M*uyDqLzkj#a^0
zIDdALkNx2@yzuM=z*8HFv60a3WVjr5Y@OiVdvD^kue*txZr(zv95FlJ=mpchkoxJm
zyWSGbo~_U&N`gx)5q$|tp({HigAW-1%0TN!{SxccpY+ils8qE#(27cbxK%^O=Zjif
z5I>P#kyMN1qN@*)XF1jkL*!`rW~j?8v8-3nrdikh$z?1Uzmd7Z%ZW4B$Neq!|G|}5
zTcs{1SgfDM#8s>`nVZh}%wHd2Y@*D~w@q>LfhmTE%V7|qlc5TuBg2f3kFx)!1}+aL
z${Gqaz>w~%YLLDwM0Webt~y|;ddefckuhHgD;N_3>p>c^*IpFVdoI%p;+D#8^p1iK
zW|aMgWVb9V3Rn}Wcv`%rf+Ax?g7y`m5skCla_0`t9X(DOrNxN8E-Uz6WA}HN@Y*Iv
z?75;gjjY-FSs7GIpRY7p<=FW@;)clw$c-;{G#eJ?TYTwr$9ek6^X%O}&MmiWVQNba
z!H}k*Op!!oB<br-btkBOw<l8^1g{zfUb_|e!NTZZY0J>tZrUBG>Z(6?U0{z(EIJUB
zcYBN4574_b<ZeXS4Z(T^*kCoq7*G?efXWhiux>17Me*LUV{#ATW1e{7)6~YdTt%QR
zs}57F1gguckZdf*TFp|eG+w=$rCNOp!paGF_c2jiK}Y7fIR8l^BC<Rq%hE8k5DV>g
z%2Q9A<70pF44?SKiyS*PgBYk)W5fhvp7&a)xP(i-e@wJTlI!{})yvB&QfMjkdFa}!
zH4VDA%bVuf6NOvuL<Xx_3}lzSSG@?mNAHVje=+RpeX*ZVeZl-t@DZ^YVxivVGlxFU
zrTjUDYCC!ZDN8KXx^0@3wa?bFRI*MxXWatnwP@3<2dc~G6osLYEj08c&dqk18hI<3
z%W$qkWD|^yNJ<t}<;1aBPMw%%Vxq#n8z<PicY=|Ta@Y*vJ-O2*?l!nEEee-~B`5;(
z&`%uDQtHNJJxRwroK(>zq+IQ`d^G@BWKdMKF9Dzf7N@Ji<aMbt=#Az3rB=<VFKR{}
z)X>R0G}{aKH0RR7CmGv)<Mqw{R^@c*3KQ0=082#l`UdLDKqV_H+|)+5(Mm3GcIKl@
z)!t00yp_~v0R)8g5Y}3Zz|2gW>FKjP_0$YIb_}s^{}|1tXK^7VvZj||X@8)ra7cX%
z)01(NrLy4OJG3ZfbwxgwDu_!j%j*}$yZ5!Xg>+!{Ch+;Y3<Mc?Mxhr}^`(pg7uCBA
z?^B%5!y<C$m|J*+%H$~J%G7me(_9{?UxtHTCat<IuvEK??&LZJ>Z~H~eYtt9RwnT~
zQ!ZZmE6Q^>Fjl({7nRAfHrB>qBD}F!8xh48muDP1Hpj7Jix?A;Br)Fkz>Dhj_zDnc
zx9p&F^Ek16{VgrD6jTQ)>LN>>UC)9^KMrDP>@+CwWtO;9mN-ov4DKa#4#az$W_Z`Z
zX^K@rTu$Cupx$|w;qAK_9@(>`fP3|Anw8z(N}%eQAY-BpSS+TO)`+jJO|zb*S}m9t
zOxPMP2_su}(QeOiZuSqT$!!b|-HkVp<xQ+D6@<WW0wZgSc8mr}ve+e+?{1^FoA!4%
zk)b+(5ed5S%VM*oX<kp<ssN&1mIaD-d!W9Er%a#mB~sMJq*#Vih={01H85YDPr-YP
z7p(W>ooSlsG2-DWTX!BLiiZdGJzoy06=R`ITdI}x9D2u4LU>@NR|VFgLx+nC%{&pZ
zpd|>}5T9zz<>airduOFdl0gelE{{^#F-Eg-obwCE7>@3uTDzId<)l8t+A`K8I1O`p
zMr|Q=6e`xec1PC&NvLk?vRR{U%+TxMsrKttz8@dyU?a9$;UBDv4c5uJ&(R~k^Z^(W
z)*P>S0F>+Cy~n7K06uNdY@dLrO*}HpmXW)Nli|Lap~$M)AJ@ZDEyaNps*6tmY~6ZM
zR~H5G+OX>L9wF#jyT4_qUwOXpa#P-YY_+x(hJ?lWr>M_8&1mUfO4WVj&XM^BQB=WV
zLmkM6v8~X%m4RreFM6`Hiqemv#0XK$z_7$p!edwPqdUpmB?I;fRYk?V*DUNM4$^bM
z;PE~q_bJ}{u%6B<HqXhjODy`+*jk0!&aKpjb_}RW(;GOso^`4f-QRLrj{00(-dMvG
zKI93@9G~?*pED+!QuRx&iEEwxZ3I-yX&+sSF*3RX9q}y8e+ij;it);;NGiL?@(#|o
zgLs-L^_Cjpq_|WDMYQ^XdSI^(yf0HQNV^i*OF*OjfW2RK?`x(?U&p;q+Uin)!dRGd
zDe7~?Sgb<q6rV28a%YipPHAGC(cyzwTkH2!)fbG{!8VOtL7Rq6W`D~;6*3bm);Mj?
zbmslD01rL%fM3aCDLiOie3AMsx6D2%61`P5^I;qE^$*lH0xAZmC|ZnM4Ug@{kLJwG
zein17%1GrNOnC>nYl3YPM-_}I;f;c`g+7E0`<{ytb|cc;g*d3rA;lh^pzP-htK<hN
z^hGGI#qV@*-9&HAK~akE#iWo6Q$m_xDU-M7X{SdaPALsfFh07EI2v9ep4RQfiP%lH
zY2=F9H0y&ZOxqe;vYPuRzx3i4>kp#l!-!w8KzjfE82GRU9+nXF>bjtkjg%B*4N!F}
z-|K_w@&yG&j3hB56MLxa9A-{F$K2e<(bhRk=14n>bUJgmyi?SoJgN@w9p1SREHhY6
zD5R}pgH6D>fwE@d^3?kP6z>Y&SlAq(nuRa#@S5XYMxM7w^F?x3$9Sboi6rx6&6jAV
zU&U2VGqQUZ+xEVOvB{f>qv0hMvQIO<+B%ily!(??KvkG+BQc177(VPjegCJ;s##$-
zfcIYh!if79(k(%+)u!1*puVc5Vl$w+e8j(N!K^7WGO-8eQs(DAhncG}RJjvd+C}ag
zVB17d8If|o2j@e#4=dPW$BsjZ5~Vy6)}-`Gd))@LcZG#2zKbs^<G!HU<Ty=11L#Xs
zz;#H|Gjy26RwAm~w^FIxwB&?_EOn5acr|>g%~`7T<qu@psEIMocf1n+#qz*?h2Z@m
z2S}-O=Fu$O^@6eSt*XukO3<|q)VU%{wW6NHz(G_MB3ov3au3dTSe*YdI{zd?$sHu+
z-DEB&%bO%gl{l(GAtULfZ=BP%aL+4CRE9jQdWMNiFF;pcOjfH8*<3-`Qt~hytBO%W
zVoMnB$kS<>?kuKks7y{WK71!4@$xlm#cP}EIQVcif%>x7QM|P!<9z$Y>Bh{Xpz_c|
z;@0dH-hcmt_VD3{QZf9gF$t<+G0Elw_4Ts9YX_=9T?NzST&ZA9g^}?+4DTGL89m1I
z{GZZUd=ArTlee2Ro0n*|XUOw5>K%y3IY)UU#td7Y{=y<zdNB~6G+3elE{F3OdEUXf
zI=O42s>GBjYl%2-&~6^4kv|S24JP&+U~0!JsEzCjlhH-}YLNGSeWq#52HG^61XW?P
ztt}(i|9trH2h#iR|Fm7VKzis<cRjQIy7$>nNDz$D0jGP#ZJLz>^_51!Hw&uePSy4n
z3@Cy%B}OLpq2r$V;`7uOo~CN{QmNcV9#wFiHWJMfB?(D9f+-1~duX2di)YB)EG{dd
zzKPEpp%U&pcy$;N5>qBpi%VzeWT$X(hh(V6=+G|Wcx14cI6&DkU!!T7D+|<@y^e~p
zHqTp~%=_OCnEA9{U8G^j?Ewo9xdR72_?wZf{9vB9oQSd422|I>QmtV6muYdT%0QZK
zsMk-E&Nqm4E49k4*mweO!|<x}8CkxF^PSM6qtiRN5iu5v_#E#R$lL{TsS{NV)!}WF
zN?Vq`-!2<^fGT`F$KJ1-`|DH3TpW+uJe&KiLyx@UhaPy~qxPYPKHxUUZn&e6b#g!N
zeEPi-gbjjH;#CCdY$8x+tyL<ru}c0DVor~v9_|kf?Sf&Ulg?AGe~G-VBur3=_adf3
zgkXqKV-Pin3Pv;1{0uF35o}6atx>5>QZDUV@?Ju{sjy1sO4o>7&DgtaK2TqQ#d5jT
z5f!m$-p-B6&x6VxcU;D0T!&CoSgl)b`5*uHII8~lxobJowOUsisIMsTy;k-oo3~U;
zT!O4BI;Kmi>ESW0)<xQlIeeOfOAs|6S#V`WFtHF<YE-HdMDg%4i^!6A>6*whUeVb5
zwX{@&k1?ovSBl4Mn$7*np-0~S6RTOPb%3P;ACiLyJEK|Zo)d|tRGkjCdah+f{hGMH
zRYA4vYFt)VTSDg@IMLo`;Z&Gp#R~}S%ZR@m>crQcPqm?#s>|*1)|QR;`AcbJ?s?}s
z-`M!@hr8ryHZ@G4a9Eyv@*}f~|8bG1V487xOeI%eQNQv)-E6>8Eth{;`hL5Xt2;Q@
zEtDFQECE%2!e($u)Rn9ek?Rns%T)&IE4aUb?Y4sTf>AX8vCn<(n-&iren?gW)$)x!
zE8Gq%eAHgL^uebmCSN-i+3Fj-cbSobxwK|Qo$FRoxFYu_YZd<b1<66-kfm<f^mHI(
zmE{StQ6br@wp8XixIeS9RSs8MR*J{tET8|`Lyx@uH}1dxQ_-LO*?Zht$Pw1R2|Q@w
z!}+bZ{<DwAw)&1dZ)GA9uQeR8KBxvX6*g?CR@e=*#_E;zLB#;5)~+~Ti*4_$NO3Wn
zv{dGr@u^l7DPF?4@>waKj62!F9~}D9o4@n^`#%*OI`r0jJ<voO0G7gs9AHE`-|bxI
z&!ebvU+!9&VB)p-R9Duf*$AjsX;H8VF41MnvR7Z>^0iqba;0PMn?DAtDPJo-i|uHf
z<@HBgOa7s%N};B-?#-~FTkxgNKKqeNQR3d^eELWf4aF$gsugwFjQf-8<Nja`cineM
zs|T;Ef$GY(y|3y1HaJal{pwW9sZp9G(PZp=`;n}v@A~YMZ<-bP(3)}86#xqY>)}E3
z<dYwnjpF=W-lu;VMb)_Ah4_~z`!gHJ{>++z`sy3lHv+0_vF-iqvrW@qzY-?;lW074
zuJO?>s2+S!yUdr3nIblQd$9KccijH}`FBQ=pHg+G&vWU`cwdV;71t?Hzfw@iHClJO
zoKGd2bbr^OPE|~hsH%%>B@zVZvk!gxOK<-0@^ik?o83IH4)qqxT%7*dznGkQ!!w5X
zjW#Nes^+4Kldvm9uDSb@uNA1w=H1_hvcK!>{?_1A$r6?sUc{JEJZikppZ7ldzE3}L
z|F1vzpqfL6J_Ni~H;a-huvi032p)_M@!|Z|TYq|IWQPBhAm3+fDRHg^D!GW-z_^h$
zgmYK6R4ZCGS!?m8Y$&E$seSUYTdH*{>dQ0cjkRemEBVM;d@Av%su*h{JB;`3RFGet
z&zt}9(MR7oztQaPx&RAcu&n=z+aA2jN&G=m0L=RoRp%860xC<Q)N9|Sx%M&D^>BY*
ztHB3RRD7Y9WQ{3_v1OcVcZ~91oX>yh(3ju()bexsH3L?+{qq11nTO~C?0>yW4L_vt
z-NwYb1I<}c%~ADX$%2ZC$U4pI!IP~kSGl=-+(vpM6dSZ2>(r@wZuxI#o5qNU7>UK0
z5=J7NZ=smOf;{96zkBHOZ+x~7s0aK;GryMsSpC5M0q&G8z+Q9ngCniDdLNR%8|?j{
zH;b6@uv6I%9O&g^UMpFu)lT*XfGJ(MMOi_&ex*X|W_y2TV^(p!lERWPVY5t9O8YY1
z8+3nR+B>jbz2?)R_Hi-tu+`|VCib2AQr9X4Ks~LS4bWdkVD$lZ|NWRlhd#W-M;|=+
z{~Pyy?&gSS+~e;9iA9UD8-^g>V~VL1e;JSl@An>If^_%gt2d&a9$t9n?ypyPP7{{Y
z7;^=$zf#r4tn~Uz-^EJLi3tmjyjgjHcX&=e@E-a{Y{>;Dsv;#(&1NH0eIoaHJ<;s>
zPdxh0`K4iu+J_$c&@~0r%XO0n_^7@A{s*J$2jXwsHg~~)Dth37kJ{^fK3?XNtpXn~
z4?OSy7cM+~m9PDlZ{TDDx9;@JwThj-ar?&Y8@F%V{@c6#zv=c?O`?SW6951J07*qo
IM6N<$g7e3=7XSbN

diff --git a/apps/desktop/src-tauri/icons/Square284x284Logo.png b/apps/desktop/src-tauri/icons/Square284x284Logo.png
index ba1b7f77677c757809766416fbeef1d5bc03e58e..742469c1977134ba358a3018bb4e106622207b47 100644
GIT binary patch
literal 78585
zcmcG!Wmg<b6D>Ln?(Xhx!5xA-!3j24aEIXT?(P-{?k<B9G`PD3cb7TOd++%RXRYop
z{h?RauI}DdwJS<ZMHUr_2nhfHpvuchsRIB|B>$TTaR05~-Xre-pa1}QDG5!_-18pz
zT(f0&vd_&org0EQW^Y$h4||6Jn@`fp5LNQ&RJyr*>qZHG6!v<<{t(YkQ`x8wk8|Cq
zE(^tU^HnD85+ufC(<=)f_Ib;{H`n7mknN5qQGj9$mbJ!GEnY_OkDqYR!hkFPtK2K!
zV<GW?2c7>{BhM$suMNGh@Ab@1Hx|k)>o+CbH2%PTj5AB$dc?g*$7|rc@$rjkJ!`yT
z#N{)e#%KDrNzss!?|U2B?|@ga)`7wV!H-4bkB4y<xZ2)Y;*Ew!KU;ql(TA`uo0*M|
zoxQhmf4xf<BR|6{zt^)gy$_G3zUg&ZN-ZXyBs<7#RUPil60ysQ@1nv}w9qC$zEW?7
zD;na>rs(9=??w3BPeFEk4ZGkW&<`+?yKJxH=pmk`%fQjQz}tXMnrA=T)|Z{*noGa8
zvou{l@JZdB3n!92AT@V(_IJ^F=kF<DQ1LWj)eX=3m;Qx+|Hh##+wV6;r>|Q6zn$xr
zL%a6&+?hpUtF4eIO(P?3k{IF7c;gGL;vDCnPG$M)7EYm60(wHF<ze|?Y`hf%emXeF
zP{P{fn86l!-Ys<Uo)?X!3(u6f1qFvJ3c;yiF*}yXRm|*nyHug`e>@Z`hD03+TFsxt
zWo*qAoQ&Uez=&>?YG6YTeuip!pLHUiaXtwXKVpClo!HJ7*E0zQ#)Kk}rE@NQYP(yT
z{C@K_{pXd*wBT4c>>0vFUtYn}+c|G!Xft&Mxz$QKhJx7Dy(n+tZH45a_rng2RlNfJ
zE?aj>{SBvYP1A`tS%;F*7%WzIH5s>{;#7SugS^b|;9E@Gld)cw<ASdL`E?t|&I*@n
zeFXj>o!t3w$me$JAKf;gct86<8!3%EZrl=yO-&g^(qf<Ov+QS|-p$5fi?(zrrUa6%
z<vN!7Kr12d?SojS1w2Q+_O;Xxt?n7AKz<dDX0-NyjhN>z<F6j)gZYpp_#B-d4^ZWO
zpO`D=J-AzmelMzMjieCQ>UP2^y4EOMYK@28^FRXUz{P#ACS&LX{)^pR=-WY(#x`Wd
zjB7jKe&Lc{1zq$rMRt&$%%=7GtsP7rx4NEwHjB#Y{?*z~GuEA2Gh|CJ2TH^1fc<Fi
zd%U{uc8~4nrn&XK$FGc|kfxi5T-*P7WD$E&4&}IRMO&e^)0U;r{xJPv8Gf*=r2(d`
z2gTJwTl{;nenTKM{$Pjjl2Y96+&Wx{2gu%c#?TBu;Bqhoy}HJ(>rCn-s=)VXVITgX
zq`;5(0n2e2eyJ|wa;-{Fqp^DGovL(94T$KlOi3N#*q0BRvs6QnBkJ-eL3tm!?`>1`
z=qhZHK5pi%tUtW=9s5OSOEh=m`aNB%PS5M*@`)Q6n)pH+Ma+Qqe23`|aUE1aNBln6
z8+l?QEDdUJmse`89v+?w;x5+8`+nHhTkL;k%e(FC{`L#Ht)^q&Fx`Ssnq7!_%rx4e
zHNJ*y)yDBTZPQ~Ui07bvjveq5v9LM%1%OTg8f2xtd~lrLE)QmfxXur)H8dT%=T7{G
z(DB0@Xs{#fW|G+7l%x0Ak!{UW*6-t0Kg2twi&Y3%yPMd?(d+@W@`u9<`fo3(=eY|q
z@(a)|9r}p`A&1&}#Mjht3Gzp*gWq$M-Jz;C+VFmtug>#h#wUN&s>JniQ)p8&l{QFe
z#AMlf`Qs%$#?G!sKqglgWP}ES2C-B*sE>entzAg`r=B|6|IG=rMH_vT_c}6zPj#w4
zPyTm4ffe2K2+XTEF^$wN$WHQwW0gv*(czLU<#9-$D|1A<0R<6YuUd+mA?YA!fM2qn
zvwx7-ck)KwDG8c{xYd!mfkf_Pz3vk%{V4=FI6YNnZi9@VD|LSk?hk)UXlA#Te>J{O
zV`7c_yjq$)^LNpA-h0gPuUI@_Ys$KUp5_mf00_t(K=C5f^OmNCr8#e0LCTUq>(ANi
zb<7)&lJ}lWb0-;pAo5k@<oTl@vvs{#FUR+m;*Fb_uC|_@Z072_brXQkz;4z$!5$A*
z)UZhcls4H8B8V1?5DkYFw2@4pU+-*TK?q$oC<nI=3SkSwl-q+*S?a&-FWZTM9J#*u
zjix^Z6hF4u=8JU%1W}O!3j(6jL^JlCy8R!NuX=I~pDi8Vv$XvNmFJX63YzwqD7uIf
z&%i4LG)I6AbU76uK^V$<{kPFwAEMoY&wIPas3UB#577SQwqY%ID3CPVzvJDaT68D3
zEh#R+88X$!8%o;OZhIzF*%9Qvs!f96F(7ftJ979vs&iOv1tAvQRSK(uh34x5t#8?s
z$$KSY;R@V<BpzFW3YaiYLcOsc2^w&W5fysTX*E3!{{-2<zkMsvXMyye%s6ZaxjNkl
zAqv94;4GFVhzX{)843NIs53gZgM{e^RDav{mEEJGxn@3SpS%QC^8^~ef(Ss0fg9+N
zC4p8!dixj>q^$@}2l)!uyT*cP+fCelGi1W=`Q@tTV)>%<I<F<QKY#c2zMMi&d;M8;
zQZnDV<)S@*uQAl`>$^N$ev#M+7cn*4`3Yy6H`F-D(TLmrGZSf8Nq8PZm!Fl=3=Avo
zw=f7hz0Hfr!Vb+(=@i6|_Kit0{s)v8^au&6V0>7Gc0$4POo3BD=hMnLB>(Mn+ESI=
zpq@bX7AZ(2dv7csLO*R`>3r5YaWV1fcHEi7?C`Pd?01+psSI+?zYE-;lj}u8!A_(A
z-+&p?1}MczfXQZn8^I+T8VOt#?u0UtyZ&uR-FN>PNmdfvQU9AiJAbytv<0+OuwIno
z%g{yH4gA0YSE4pixLJH3{}B4lC5760YA%nL-lpnN%MU05;6e7O3_jp+dlWuY=nfc9
zC61dFx8R>~q0U53aB@|99RB?rgHPy+=lYGHJO{HpVH92>@pzOVXL2k=3Kk9_<mQQ+
zd}Bx?WMOlD5uNO9?}%RYqTu6LMsVBC75y0bv2|l<qHQI||EH_-J!-}VgY%+LN~hS#
zbJTv2MN?u{3us9}P5=l(icLa`APXU3RFN3(3FJqkv5@11`B4{&LR3Gff$@#t3gUvD
z5b)&@U1WKr|MfRIISTsc>doV<EZ$(4O&2MoNv!5-@juSKL$RZ4a`aV2%=mbju5tW*
z6rIypQ-~@GDsiIUv4g4<9sFevCRPkg0hCh?Z?h`0OhF^zV}Vn|mw=6E?Rh4i`}~7!
zs-{=LVdpN`Rfm|7oQOCP015XfV5w8T+yia;UQgc({UaB|srb{UX?x`bJZq`ajdil9
zTXYb6i<?7txRAqVuJdsXdls>5*Ec>O%@;A%uWXMt+8UMtHIquQ$ru<1u)|5j230=?
z%OV4SBwjFIvfz`$YgJa60lX+u_PRe|<;zI&{VN8Z0%)%b0)&S?_i;&>moFJ7ZnxQ2
zMn(N9TCbcouwU+V$epHBq;rfw!U4xQ(SHsLx~<O6Du;`ZKfFm?n2$j_KM=2gL6xHo
z_CkYsNOt`EszdnDJ6qO>OF*nOHyD1<n6BD^^Aa>Uvs1U3u4yDReL5>j>KQ{+2u2Da
zg?^|~#lgAFkSUJD<S0C3y<i3Y>U(2=$K_{@@z&dQZ$^$$ndyKjoueVA=M;Kv{nE$s
z4W^~t1TS${?a_*7mey0bL5@(pnL~(|9+(iWniDoKRfZ8PVe|(WDp#P7OhJpslR;e`
z<cTO}gXF16V;(0?fgDbNSM{}-xFOSaXx>NvGRd;6>xpwGN!IKfIsYvyBE9cjY)^`>
z>+yf46W0^|+43~}X5ju5mSe0_klDUq4}&Q?Jp!H*fBYI$Io$9A{yH5Kl@|r*svg~E
z0LP?=#XT%e1IP$uB@{+$Ct+CGSw$I?rVST@M@S_oFxq3##Fq{t56ff$UJ_75+VEzY
ztq1DHC%hj)TG0Iuar{4qmY4nauer+Y94LR$dqr{PTzQ=<Q#(G-EArL)TvY||V>_%^
zM67bcUG^W%wPH`ey1E3WmH9{prw)mN5u6w*i@3-6_+)!jha3@Sf%Pzqsz4Vsj2I**
zT`Y#bL6J)H!V!g|=6X&sLHhUm{CGi;1<zf2HxYgD13Fa@4)^X}$iZqw>!(AtzwMwG
zfLHozt|sg{xvQ<Zt3g!2KWY<+TGxws^(=5hCF<8;y+79|DRm$|@=&Z>tNI2$AT3;z
zB1x_i0>nX3OUL+~%=H%wMFr-(PEq(+uN`bgK&Zq)ui$h_`6XsFDYg^jt4@kpBBo#(
zh`M^_|4DB;`YG~xXWV^yV;nz#OeWOe_*o_;Xf3v|0Ir-hu|4Q<d?l<CcJIl<t%1sb
zi3}b!SiC;z&_#))qbZZO!deR|f{Tit+u}%vN8mO`1d)YW0bPvJMzeCmG(j3rdxGXz
zfy0;>Vd5)rYxdV1L3Z<Tlt}ht;mw9W*1NPVawG@6`kB4Fcj<j{OlOY&d+JxSX=_p_
z-d)S-LvgD1-~A+A7qfNNr?iLkrjN386wTRTzvB%a{MdOgL%c=QSpPB+cx(o8%uAG}
z!qPMqrQQdW)FJLSzg$QS*g~W8Va2YJn4xh9Gt@KCajYTjXqE>_*bq~UsvtS@Yj#X9
ztyK9RmGAMtfKKp510J{_aSbtK0=*vTLqQ9(AH@^zmAE`a^#t+TV#lgz^g)MfwX9fd
z#dM*#A%}((IZ$8pI7Z>mQE2qku31F*2yDNO2S=*~Vkn_~Ek;Silbw{H;|i<@mc}hK
zgw0kS`$5bS*$)lXOq2X8)DEC+h_sc6!NV-NMS^YYX;bQCUQ4K*Tr!jI{P+0fG-YIa
zFlh?(<2d@8^KsHcRqfF0LmlqJPdlz0Y9AiiOYfkSBZ5_!ZU-QNqGmy}Amtk1vl=P4
z5@{AKkO9tg-0dITy;gLHa}E@nvjCdpA9y&wDAW*?HcN)h<O*1nxW-}G<iYxI8}T2|
z1QUo7TLSk|p{A{<tD?AMuZNJ6s{jg{&+&$?B@usLNbqpxUaXOw^=#gddy3BHZRG&1
z@kT?4$-0F}_YdUYNnMzAG+#_L)l`@XU63BIfW@2_-5jp}To{yORDtkYy$TBZL=#Fv
z>V^d)Bd8v@R1JuuGiL?Z(uhMRx+7Z&?y#yxf}@TtS#Ay})BScTCY~m{bfayaNUi-Y
z3}tQM6Q1UOU;antPYf$4&p9#Fw+|8835MD$4Ifj^)N*zvoSqpj=8iZBh%~&M-S)H`
z`TuaD(q{tM;lUXbKxf5hnVcYgRS7F8K1AJQXCO?BJU`yfItnzInj7sc;m&Ds7_%_c
zA8?g2axtA+@%SPL`g*BCQ$}HMQH~O{nph*b+iU!s2-%>1z=qs_%Uj6|GZB03OU;&+
zl6Xq+J#zv~TezMtr}jIP*W0>u-38F;*`&|$LRqU&RmT4K!lh3DUZ5!S0b|Jnbbkp0
zHGij}k7Wai2w4MLGQgD+;w7+pF@e#6)n5unOd`mNz1g+`_?gLs6aR?%tPRY{yezo6
z9VFoGO9t@F3wzhE(sh`NrJWl3fnV~!zaBhpI$H+!UF>RwZFc=Mc&;tX<Iw+(wIxlm
zH3bYBPShK`ZhZj5Ar3YFMid8-q<}}6!7h@8tHB7S${h^#MRs!10<r5PsZ)uC1ih$g
z013j$MCNbft{cK*4gJY9;9-}L5G^yDL;py1Y$v`zGXx+ak0ugTc)LAyr7->#L^a@a
z`)Ozn-{1PG{3@57oqik5&ATKbYOjzhjZnW$sO@NT8Kv%hW<Lc*Lx;2Bvej+}Z<lTY
zh7Kz8Sp4V?v<d~Df?^9&A;V%LxDlEC^4ADB9wS}@rAb|H0jJm0PlTtti9JJly~i$^
zJ|QYJ$eA(e=aNqPyz~3$bM(mO@R3ib^>gmO{9xM*w7(|lJK(pztz_=e_pnELRV_RA
z%!z;P;dF3?V<muM7ra}O6UeHD69+_FBU0w@?S>+;mTLw^$p9oyQX}O}CR6{RbMmL)
zY+9)-?NvHr_m)Ulg5jcjhgK*Cb8b;2W1W-tSe693U65hVBM1<oEP22c)?c7fzN+C^
ztnv;Vjt*FU&X+eD`<;(P1lVp{Zg*)`MLWU^j{gk)JnNX4USy6i;%WXA5#oHG$XPm!
z*54LdBk2>|r$dfOjAP2QgoYNVw?n&DZXP6&tNhx6|C<|L(?(nXs88WA5=6QdIpO~v
zRcEouE^={=eRG3OuA2WoLr**!4_D;bKU5|9*SG0^pJ!B=s`Drr2>Y^2RM_;&^Y{{Z
zTPx#dKPrZ+M^D(^8Er8Y#VFyW0s8r#xV}2@S6lcXVecB;WsL%ieIcfN^SU|>r-s%J
z_khG#vi;XJd*@%`5tSRw0e+|J%|XGc1~o&Ez)@SjxeJUwlwP%_MB`e@nMcXk@SQCN
z82wd7`4}mriTJ;{ek{HR<zg9rd)IsTqMip_bz&l7<UOhP(Fk@ADv8I9FRN?2l#sX-
zA^*qMfm7qv`_}%~B@djB(r&<Pb$>B5*;o}Xig`3mUN}u~doK)&cAyQhT@ceV?|FFG
z?Vk9vWdW->x!~&eHTKKC{f@(O^4Prvsow4BYjy4I{JleNm~6;&ZCOHuK3jO+GQ=D0
zY}>1UiEq&a{gu+xq3(cTi;fbGF!@_}4j({>H7fDl8U_8FBfQ*f=LQc$8fyy13OkC$
z-CY48nk*G90$Hme86!EU-MCZw=(F^nBP~ixWYH?zBM)saUUo^U0SY=z1rFTb*yZ4v
zRSbJ7OLSmzc7v%C^PW6QBI)*l(L3?-GJ9@j_l0py&wkxq2TIBD`_ChtQv%c#4DqDw
zfB*Jeu7zf{o~jDa&;lS_0fy6JccU>yJi<Vk;2}AH1RxY=F*T?i4sWTSNV#wpu2M6o
z5!7bKk~=vBIolsT4{?nfC9?}~*-W`pWvoAe&Gy&4yZA4VGTKv6t!TO`otvG?^ms$Z
zO`hs=+CAc1sF^G^#-}_W82xKY_)H_ofnv}A)t;$AR7Q=Bq-!_gq~wx#^b1#^8T(h2
zdIR2eGMXyZ7!69Y1B|#j@-vnz^=F1>J_p@(QZcFgH~PPbf%N)7bb1(vV5yK|?!?I9
zukxY0HvM=klmqGFzCes}H+4%znxvS4?6}X`?e^kc0j~EY59Q5w<O32p)lYRO;~*-Y
z%F2p}T~)Gx>k{K1^jja3qao+Lsu4vZz3OSB7BPTwd+~_zZ76dtm<l3k^}Ot`!qXUZ
zzuE)QuIBf5zr_SYpKf6d+8&IWrYm3muK$@nP>g)`I&h?n|GM03Chagawwe-m8m-BA
zcUpxs`zW^6dou0q?^LoKEjdOt3brjRRu~X=`XjTWpih--AkEXz=ma=|@~vU5Cz0c(
zrclF-;RcmR2jt~MQ=tF|3n|5;dBiEB0ZfxHQBoKR-yBoi!gjadu5<q~Sx{vv!UlB|
zankhDRC~!xHYe^Ti+ie5<U==okED*;wXb@w^1mB@wFuGo|6o0H@Ks%NyLQ>~A|<rm
zd1)FYf3Au+*ATlKB2R0&^TAjfq#aw)22c-TeBrHFjioq4DRv0qv%9(Jy4yPuz!b*y
zz0{gdD+|oL)~THM@YVm174VpQvK<K9L2r3gTdfe|zBf|xo`(DIRV{&R{p-!2e)Ax%
z+#VZCd4tb5Wm`vUv;>0#-V_YGzXLm{fo+5p?ci5bFpv47A|n=-^yuH3YK0vvE>z0z
z_LM};+bAnmpxMF@v=uq&l7BgHr0y{-@d*GqDAnqqD%`JX^=c(wd?=j1TRZZ*knO)f
z1<k+Uid&%A<wHTGO;9=QsTIRIHDk0<DH(Ol^_?u&RrCq=oy}}F-Yj{P6--X(;Ur<U
zt9L$H`doeNP$P2%_(86wEMdu`v&0Hr`x6Ja#o@k={laKGMd(sqtnhtaEjNG^cE7b!
zAI>YLRz$g)UoNe-zXsm1YTIP@Q0YO;mb+~z{72#IMBO*1n4i7RpRG?jUM_#jDo=cU
zY(x#Y%`RV3*}|yK>|Sz^;VkF9>^~!f`{~Rr65kL9#-%AOyKSvS{4HC-wNs1d)J-Yf
z#3})rj}N0TqQV<m{;TZDA1c5!z{#|qy8O*pIaQJo7jsg6K(KILA@B!-G;^S?1JJlo
z8&U351Y8L33A-cZ4D0EKpliOPj3_}Y7Eg)jTfz04$n3OJ{wchmuig8%`)tIOZoqub
zKUYfsqeGUj3RE3uQ)>Rd-p5phA%9KluWWf7;^Mw0*KytmAYvnV5-q@*NWx@2r=X)B
zs7jB1-gX?)UoC2Sk=uO={6~rGjdSw?`(Ab{<SQ-yJ}GbhX4lc{bbHFHT8@l|(P$Ta
z0WS=)A<EP129pz21qK2xdhI_SYP#`8g`N4~YJU*4lUTixl*NISX`^Bj5eP9(p=C%7
zqTb@w%+3Bq2L=u#f|2+u1f|UzKq8<L0TSFBH@Z(EqlnLVZzAez{vS+SMc^Vr=m)vt
z#c=+$#Ai1e>6m*y#C<aXswVr~$r>Pg2E}+fQjBL6?9wkBSw0QAL*8wd<IsSqzBPkB
ziuUW2jM%HS+Lx>h|JOOrk*^gqXMgt$+*N%ZJ;>h<x^wD-5-lP$36-V!i$d)>{tFip
z$gi&#<SCDa_Qg`POJ2_k+Wxx>#fs4K)6-p55fSVJ`UOL|Ts|LZ*!{m+!cbEl7wFz&
z*wa$L?lO5$8%{G)KYf0lW%CWQQhJ^PwrIgSE#m9I4aOjy6bl$As20Rbv4RW|W2-1G
za5$49Q=>eAD%A+1w7PjiN0tkJ5Q^#x2?oY2off5<0t>Xf9GIHY^dl38gIhA(ra~Nk
zhKEKJ_iLyU5)zX(8jTgMNbb0D5IZjA1RBf(Bafsm>z=mU^B_gKr2j+La_2JSU+a!b
z_i2&4q;13>$q4n_j1N4ZC!6SN1bl%V$U6YV*7K{gKqRcCrj~6NhJ@(nUW(CAquloi
z>?yORdp^J5=YqcftfyjT?T;6vPO+7_E1Nr2Vkimi!p?QvV&$aN`QSK)BrB+!`8ph~
zV)Q-C$b8B1aM-?&|DpILqq8fI6{Rc(u*PSK((Z)9F!v*(>^gW2Lq&c^5j7|UwP>#5
z*Y5W<PH8@+pim~Ca`BYJm4uB3f{fRyC>ysiu(>KssXE8+l9E75#1kK7nuxC<%4tYn
zS$Cr7u3zM2BkrAS!?9S>g>xUZ!P#WtES7<R-)Cv7;nHehGwX5xZM<XWJlk%yYzE-=
zT|~K;xl1cJ8)>Ini`JU;pX`rLOwm93_2lEO+Oc3`(P7%MwUY|+^O)_fY5-mLUbc}W
z6{Kdusrozqe*p4md&cv-Z5EM`x9W$(tehv1Hjo`BhR*UD$g@~tkN=5ozodK<6OD5t
zbiaD9qxE?cV&8b5?yQG@=RMKUc8%Q{2n0&<(=_<wa!9a>CI6P0%<SyL-kCrJ)iO$P
zrCQM_o!KK$z<4He)K*)KEmE4~j>a~Hc2g;ZmdsT-EHWuqAz0ndl-7P9MzU(RvhAmU
zQj_EJW~(&7#DK*@Z>72X#fSl70_qE;?kq$mtWGNEx=JSUkW+yU%+MBSX_CgHpc@FT
zmp>LpuCw*|R1D3wZw@*eTA<l2#SI1b$_#9y=S^QA7d>@onBO^@e8YO>Qx2B#$kxyy
z=C)o}25)1%SJx3fMm3^4zA@PI6Dun_O1+MUBfOc*d#Ra2Cb5fk`3SW=zBB<zJ$IXK
z+gI=0GNhX*K5e~X5z1nHW)tgGDnBOCrHOr$%?^Ho$rqbSMt%jhlv;55Dq{oDn*-}~
z2-9=0P%DXsQG(<>#&nrg<i1s-&I$3sQV>aLHk-BQ+|zx|D$B}9anmD8kpP`ze%~{3
z;^8mIV1_F#FqR?FT-qpX$QDvVEnDdFQ8`;}3>J$a+WvykyD9ubkG4byh3V%Q!Wwqj
z74TEmbzNG+wzm1Q+p<}$5yA+4`s3w%8STQ}Y&SIY@J+J_h%6vAA4Se@es_4VaHaD-
z)$P%z*yw+1qT}N)0)Sph4vAh4ai_&?<4-WF1G6HuIS94ZsqXFOKPC1Y7UDX1olWJ8
zNCRWG{jFxoec58)KA_oeleh{xti@ly*(7d_fNr!`OZ*%-jRcx3pDKDfazoiLgw3y3
zSkMRJ7%nizeF<f=Hbk(Jk^+^8%c}VVv5C2B(2`F5?c-@!>nKZ7or6|!Gp^K?#&XuD
zav%y3er;2;@Sx?OF#!<(3hWhxLEIvQ1tt%fLw9C+EP5&RzZ4TE$Y_$(?a}a@>W6|+
zSfA}rKA!`6D|)?c7KgiXg&+yXg6uxxo9c~D@6TVkR_?4;(?s!8;gZ*P|G?&uXEuDp
zrx%rcI-}R9+xRbqZqvp0$=U9+$cVU6{NOji1}#yvYkkE+>fL+gG=Q+p^aUBe9sZv4
zjDP%{ywF#Sia}(Dv^7lZ^5?RPuco&~kEmnJF`UxUi&&Bm5RyYc6+@X#;Yg%lOoNBD
z^FntWhvZaAiHT)G3{{iKSQsTpYX^kOdo4Xl#k^zOk(Z#ueP+y;k>(PNn=6#;j_*~a
zA1;2&DHyh=p!)j_Fp9w#oc&EUsG=pP5Z1R7QP@GfSv}rlICE&e>Wl7AdeBrHpoIjZ
zT^z*h5P=Bq98+S&34!kGZt5^`n?N_t?YV>Yj(=%Wb=KIjr_{BXhD&1?{ZKncT2DY6
zGatmBAv68_TE)9A_d}(Rirg%~UHiW{v7SMla%yB`SF3FE#l5fdEYIHx9nbd}d#&`(
zcgF>SSmO`uuxED<9Coj~fb}3^UIQ<!qC}HDSX7MH153#LZCh7wCcciS0MF;C)9^t{
zH=(qFC*G|NV3_p4Z169O{7|k^BaKRHpd}OdlZg;yEkcazr#TUfc~sU(NEL;v_E+c5
zkI&_#^Ua!K)>`{Jl8zW(-~1C7<~Nk2UlvTmRE3n-bw9rMe-Z4;%$6#nFp8imnrUt(
z(nE-k0!murc=}r4S@0s-{v>F;lx(#RbSQnmWh)jOjrJY+@aSu=>TPj4xiS=b|3x0~
zdzDqIEto<^n$7=U><(u&&6Mr#>yp9E^*3awf)52&D(qZ;_tUihgoP77uGoT0-G+bN
zTRoQ=8CwSRI!1Yz@&*8E4}O=ojKSPh+YTBl#+u_c$my>gdoga|m$eP8ZBNS^R^txy
z>%FRxCbN!QSuWJM6s^yc@$Fu&U9@rH%Pf|QX$M``a)iC1bTrvZ)9|FKz!l&rYzqVj
ze?BrWjE+Np8Mo-i2KFiqT_dGm4pi_~4iKRXZ|TR0O(axM?4ARHUUMfuY#xr4x4ikC
zYwZOKgBBMiwzQUV#eH;pUZi)cX6f((C$kYFKy(%c4QcKx^jSE-5y#W5CxJ)?Cn?qj
z&dNvp0GI?F(-AoiBwj{)6}!D^TZ|YmgdE@Q3K`dFRAv0MS-$9qh$lsQIp3r3XoR*}
zxZCC8(o0&oD~Q|A(1SXwbL@J}9})SrF*ICFM0m5E)bn!Xu+p=)Ru#~>61v|pNj%5q
zZu3t3(GS;uAu#4i#86Xj{6H={XkRBldiB!mKDgwF)7x;YYpBF`FmJKt@4F@X!Y8|~
z>feFOJ3P^n&2Y2qXE)U6bli%%y&Vf<P`Po``bBA@V(Ns5S29HLP@|-?1<|1SD|s-N
zMRgfNrY6{Oj!gQMDREYmk5N@JVGt&cweZrxFioA}D`p&!R0B_EbDu8nE78s0nPxov
z*ztc%7g!5o(uy466~BcRYLtk?<sV#=SO4~zB7T1Ra~)4ozXjJCujk1ke{FTJ8*M4G
ztE!(UsRc&wAEU{m-I<i(#@-!|(SF&6d=`EN1c<#aJkGtxA7_yHiaxl19x0NqH1fNf
z_G;(7trW~;h+aPyy>1JCZ?&`u)_Iv_fAA;!uVtkAj;Pm%bX88H$;Wr%=<H&%pmX=M
zp@#2$Tz4~XtYd)5=}1|kkrYI596OvihXod;@JDFmfo6;Vy&YVr#}B`M6%Hso%ojE7
zpicliZ7+@t!lQrgLNE4xL}lJaWjJZ#wQ=nAykx|j?-_TV2R|+D#=h8N_HPe0+^T?y
zEp<)7K&=uhlwXQ?JEa~_2&q=s^h#}HZi=f!EHFit3MJ|_ad7#XW`puz#ck%7`jc`j
z4DNSvF9*#0`(OGCUbQaF_SN~?=dsn|6}ujIsEQzOjC^VdvLo)ul&-)FP796GPW3EL
z&WxLWl)<hhuwYIJA(F7~_hL7cl@B{WffhL0T#HEkW6Ld!7UKfp(Msigw?K?i^ft<`
z|J#$}a(*RgrLXPZSx}?1)6*jM`Rg0K4$97g9k$}$tjAT|#)l5f!ha~%-Vr#(CQcu%
zeE;6}O7&J;urAVgOJC<z5)rd~0q5IprPzk>OW5;Io&zhYYsp3Rmv4;6p*RVFEl<!7
zUSpXEipF_clSf}iS`#nS7M^6M0zOJ^#*U9f1-nT|^<I}+Q?lE##(F+QUd)#ZjGIpk
zAA*YFM0w2Ds#vSLp~vceRLJd^Q%Rhf0!j895yoKz_?>Fzu2A&ka0l~vVWWlaMJ-B6
zmN4VVe66WS*$8`3V7ZYr)qTFvK5``~!+UZoPiTOPnkR(2PKDJd<31GtgJZT6Cb=@w
ztGzhsqaZKyJ=)z)^SxmKR~nfwU?DCPTl@Gh@ts}`@LCBFUxbuupW7r!tWlYZE^?Tv
zO5G+SaVI3}dHHk4=qVo_jZD}aaxqLlF`B(i<aVDuRzvu6D4Ml_C&07Q-{}ZfboF(j
z`i{RWc}1|<dJ6CSxlFlZmc09tj$G#hET`68F$O!cI!6j9`SW9P5vL)WPkC@&?o0>j
zfHL0PsIUd0nFw@2P@OH#0wb6H^%9Od4veQNy8Gk!J1oM|rRSzUb3Ng>fqxOc!^<5j
zv7<d6g53bdQhQh$A9NTaoWi6^g!&CH3=QRpAp^hjzdGf$LGGBM&ffWd;q5rlj;Y=R
zJ71AMG>N1E)TMJX7*;fuqKmY_Cmz-G#quRt&3%<`J@Iy(>6#+TT;429eXb(kWtwqd
zoEBM%aMp3eW{nYd6-JH$zM;@p7C>fS&?v#R=Hw0>8?VSrQi+$YXpt^)a%{Rlm>rgj
z#BG5Wq-83s%&JNFK7B@uE5O&RMT?UxjGe4uk~^LiINE!okZ1VuFtzN3zgtSbMH`~i
z^EqBLA?AKjgI4QTrA6Ln3f<;%W<WGCPSDY(1x1KS3gwht%MXwbnO_)!BBFJ{sdm9&
zU<WK>=qe>n%IU_~M;_An?@5svd;eU4oI-_Le;)XtFZ4d*duLbs-pC_grYA{woi(7Q
z@LfOH8jYUGk9jSP4Ar2NWSlY_$x$>&?d-})@p6Hv5uFfld1_1<@Qe8uT(cvkRuwa?
zXqEGHzmKROBq(*P!$6O7e8l2Z60cSuW}kd`_g(pUo$3-0Fuoylb*N<h`!afRB(Cd4
zv|n68@@1Q<OI`7Wn#+mYcN~6emrH2{j2#0`f(^=hqg@iA=GbZ8^;QNK-z)Uh)5wSJ
zJ1fyYTtoNWw7mZr@7?z1eV-_>#r{(DFeOp0uPjWgywvM~Cq&-=>mcsvlEBOLLF|1i
z{wRH&J}j^KqXO3n*@B}1z<BBn*LrxuFzP~CgOZsRasX??2v<cqU;C-3JT}jntbye)
z<oquY_w!-7=e%c>m1Uw#EH5PiGWX{+2%B9+^t8Y-*V!Yo=Wta^Qpawk;WN*KTE#BO
zjG!yt<d!IW2u=kCtI1w`P24K0mr)<dB*#r5g<%A^06@K|tSr%Ab&SR_XRt56n%7jI
z{jOjsIjf{PlNud}GM1V8TgN^3b9!$60>`P0Mwrmpy4)R_m#N1zRU31eng3y3BU^gj
z^H1HV7KN0C*-kqOp^nQDN9>QltBEhw4S`+9frqqFh6(aYm#|2yyp2Br4#a;=q9RKO
z9F_*K=jZzao<AIM(hmo({5x;k0v^=Wt3F?+Ywy04x$K}TDBfZnWqUprvWGM}S^aF5
z^Bl;k&GqEw&e;I_QAl!CihytW&zWczJ<o7fn<>l9BF#8+TbV^6|0qOV`U*Ce1)qyf
z4sIYWo&Kh57k^&0|I-G%cn>x{@dvk#l!bVE%2qMvXb-RdhM}ZnSfA(Ee_NTM_|u|_
z;Yf{Jo+Wt2xTSq8@tURNu8`$0d!(}?j>`~?XU3HTj8KT7dBLqpRY>cY+a})mB1tqY
zSH3V?B|G2U07q?~S+WuA20JdL#JE$rudz!0LHS`c2eWn0c2r!*tcyVySYQe^me}(X
z2xkr#5G_Cu?n0J31&^8Fm*vLgVh8ElI}r|;qOHYXZi{q^zBz8K*?qnmhmsp*<oKV<
z?GyVzXvNFhQnwP)r_I3fV(*8ZKVGdKRtnyy1I)$THhJ*qMv(}J8u#ZsnI{wES0o31
z)I`cI3VQMe^8AxL_`_KVyMjtVgFK$DQlf&$&!hj|S9fsJQJ(3y(RuuOY?H7h*-7x7
zeVX)NN^)^fGGwh_stNUKrRC(}A=Bc0EIM)9)Z|nva35nuF1PZFmRWolO;0{&zXJ2(
z$)(mzd3C?3b?HpAU?-uLvN~o$L(V^`FVQWOxg6rAaAr)wdM`;&&)cQ6Zm6Qk<-#iL
zN!8gX3((dyGy@&7sK3c$tni@)5qYdD3FO5v4kM%jQw%eRgJu+VW(ck&^@6G*g4hwm
zp)=-bjN(1xOH!K>TkKZmj?yDR{W7+K17~eltxv{%B)-qgaqu!t<>f~?vS-`Ye@{Xt
zW9sgh%1#Zv_y*fv@wfN~!X3$+KbYy@H%M*6bCc4{5Vfx&8%};HakbGM)7?#gs%tC@
zP}&ni0rpV5*c1YjAa?#e$E)c`u}<UH`N!p-!a{9VFB!Zr%6GiftHchI`;~PDohR_8
z(8E*ytZ2K{tqq@eh3!CHq#%(A^{IEdB4fJ~90frDY8!P=+>t|Rl#?5KS|uqV;M>GM
zYXtLD-e2_Y3Q@b7W93!KBCbO|?YUf3h0}gKI}BZjE*)P)|DK)~YmWO~)aah5ck~{7
zi>_eOWrKDW<kkr<J4x&0R52R6CWxH(vLwr_g-T$DCbp#2_SZAD!X$757$dc_gxi}>
zbFa*k?%%+FzB+!uKZ$xQV?J88@sw0PtNgQ_oAJE^FKL~<Jd%t4LH9jhJ+#cfLLWM-
zy~A_z)*10wDa>)zc`f_Rx*El2|0EM&qQR)M;Z=_B;J;3RA9I&@aH@J|cSok1BSD5}
zk_TF86C;P*MsR&n9&arR^WHt{7>zG-^~@A{^bcV;<Zbb~%eoGapKaJ|gljc&x{C}B
z@fI@D<{JaX7sx>JLwFhn%BG4EIhrm&!n|`UFy~EBu}Y?b>;2tHB7^(oJjfJooe{G@
zB@Ab|q!|A$;#5?SbY76uu;!FDj?qE`Tym=DMj%*R#Gx2Ob_GTDnw1uemh^{+8_})8
zK!u{jL11tm``^k=`XC59lL5n&z=dWj*Mi>&4lf7GRuxEHkiwuj#u3Mzgw+Z#7=MyN
z*>3qp&H{f02?$6LYkj}3BS(O|i`m9aF~jpSR>WG4a)~v+_8`}JK`zgA#BR*ri|9YC
zK$HfBXdL&{1$XT&MQy{4xKb{^zB`EVdOYtKlYfjj23YOpN6k!=`$ICs7JibytLfG6
zO3Y0HEwamsS#AS~B<EZP5;kpLMh7J!G2juqF2}b?H}dT)H~1lUV`C8)Y2l7jt!|>0
z{#!gccFW8SxfE=Ev`J_!8{g98maJ59pHPLhHN;IRhSGu}oZ7085(j$;(w%4w-q&oh
z<KBFKMoE%#dt@1%k}F$r1^EnA^wi|xBRW%WGD;~J3G-$kqj%PCy=B6g#Sfo6>{GKJ
zC&~oq`FJ5;ZlfwvRlcQY%cR&dM&TT<f$52`nBfsa2~=vKj%v+xn{gu&6u_E%-aM^;
z)5-9NFrec&pDY~%ls7Sn{hcL`TH36z-*rCk`xg4%kJ-9JQ+nP<b*3*n3qc9r&8j{v
zSd^yY+_!+!$d*d8yz-U=dAclZklUS*fLp@1lZn39lOez7!5B{RX+%Qj`d@)G^qnjH
zLHlF@J8HpZf3W*%$@kY;Nk@F9DTrGf-g0&~MwD}wwlSN(_GgU_U$ce(sgZ(HbhZ=4
zLsnG(8&1d9tK!iLg`1@^7~6@Op@5pZHR&fkuwYh-=AZYnW9{LAPEoNirr9u!^OSdD
zmix;<J#DV*{cqM{jV8^C4<!Hi3X1I`yCSIh?zP>H6KyZBMYZuKI*r+5BmiGGHgKke
zb|hN8#WQzpy55OURv<_>p3(+UO7dSFrk%eV??Kn?`UZLX(Eu2c?PD+cJd8S<@%7j-
z$Zg^JS5k{4K5ETJnc`MIa2eG#rK&yiUU7Y%tG4gIU*Bt2T?<qCr_B?8W7hNBt|hq_
zx4^Tchu^|fdO}B$A<4Ja40WN|Vf1tNj}Fh>6y)7|^;d#zha|@5ih%Wi>*q>7hwbZD
zZxSyDC2Rt=1Klo-lP4#eZ+rK_|1~v23zN!~^D^>C5fv6qRRl)xnp7LUdJZfutH6|A
zs{Z;1BZ$R9YGqlBFY>Q;9dV0O=_*ThapE|au;E{%oKCqnRko41JVZvCgAS>rqpv3^
zuD4I{$3wOfmvwPu6%NR~R5Gp{=R}Q(kMxUhu9`JTrbkeU4z!{WOKMoYiR_YIT%@xN
zhCLTDye0PMG_vFHbV~{q@z#AtZyt~QKQWQlzgPelvxD~j&eLVbcCHBA3^Zn~*YT-j
zRj<Le%C~zc+5Z(eQ_`k?{jxeHj#2#>PWt{F_a>HhlM-Z_nfOeLfuR^#Aaq#tBk%R&
zAFVs?S;H4t%Vj#|?=Sl6%RRlPUD#}>H4_edx_(JgBk<{GSh7E+0tIdf>6{|nASr8}
zI4z+}hU(*nuneVBi0-emgn|}<kup3CW=^k$qd1$Tx-jA*=FV5bOk7bCZ+kS1oEwWf
zYHpH{rB5-D?)WIv&YdAmsp7>cYbi<aylq4gZcNWCA$2_p)U0MBeX>{#PVBv>$!{`8
zUUPmW_SJM<B0#z^y;pb0jUYoARecggN)(=QBEZRewE?oo(*_Uif6~f%7T)%$aTN2L
ze?@BW)gY<e{k~GjvDfKM)#xM00Q@4DbGJgaN;E1&C$s(i9_|k*%E$Db=uY=P1?s#P
z1uiccVF)$)*677;uiVSwiaqgs3?XDp9VcTSJE1pKBlTy2Wtts($BtPQeJz@-V%LTY
zmaA>qR5=@5v{&I408Qx(Rr=ENz_8@Q2E}s-LZG(rW5GD=_F74Ub<m@9Uo~^ra{=xI
zDt#-mY+pH-*YWYTl5th3u56yq!r^xXKab8;ltVjI8@`K}LX{*bB2qJ0Ajp`$tYle!
zHq*-<3TGwJBNDhx5c~?VW`YsGV;jLz&gpNYt;7l4nod*-WFHl$r9?)_h8s_mi|>$$
z3~n0m-(Fni#&mc+OYZ6@^=ivV#(0{<<P+!mqE>%J&~qtLr|<g5vi5Db^h8x<C8`He
ze&y&=hQ0kYd$-~2u4^mX2uv`2<!*H1WOO-aCP(n7`6w!eWB2*2Bg*%h-sayYt3ANq
zs&;Kzd1qV~cBj>O)rOoU;L15x3+ag(817n9-Q21Un=4zYj#8u<2`7we9{Ehc;wIy3
z$Rv`H#mz%YQ2bCX{af~>UH#^Ci@K*Ot5%JZ$4tT}k0~f-OV({!WtWi^zMR(a0b|6W
z82ZcakI<-4L5rUcj*I`YcwK%L=c}BB%#zPuO;(GGh*lm`Xu47K-&f57WFd-^eu!3r
z3_rj;6q<7Zib;8`-+ttBWFi@IuQ<wv_uDFx<bZU&MB;u>?Ej>oCPd6`5yUhg$&7Jc
z9M{=R=7B#SRpEscn~?T3<@x4l^W70@C>UJBT_p2-X=LpBY*}y8fSjx;!t-^%8dEbE
z?sOq;14d*64{%r<7y7Ov-jCMF)^C;{zPeu-Mvw=5bq(|8*nat+8jGdP73nk}@GREn
z{q%3$$iwGbdxhDyJY#xE+1uJpTT|{|;%<<!uRYwEzwcW%pB80L^|d65{l0Ebv}7yn
z<5XZJW2KVaTAtvk32u}cV-{YN)xzbna(1&t+NaDc1J>jmLJ7|FFPfTwI=FRAje&X8
zx`>r5o1`d%xdO%-752=3)2?MwDm;Ab2kz4tPh}$7zsC~drwq0Ty`KN_g^Tl&30C5M
zbyn&@)jLR&gvb8LBf@BfL<h?gf@G6{0R{$=Pkwoap8C=kX!2171-ZlGak*BTP1PJ#
z)#^)8-0+`=<y$H!$m%ki?A#m2j`Jb&ZJ2X^y~7RD>evh;7Ue&A<8#p0*l4~0lIPUg
zn4U8AIp8n9M)d&e%M%L`CX9mG{fIh{byhMU2PdFQzMsNuzYg4uMP3e;XLRa|{*x{;
z+VPV26Rrw+1fS=YS>AZ`H*Z5C_NtvG(C1}5oiF0H2zo_M+g;9Nmuo!T6Q6WCaS8kN
z%}gEy!BMnm)4=kH?*Lg7F~;b$@g-dmhT0Hr<{`GK$Z)cCI}k9_ZIH<prNp_YfN2Jy
z#E%nPk{dl0{$nAlQiHinK?ULmH*1?MD)hBK|0lvC`=Y)BADqGIDk^E!_%j@aR;Xzs
z{;8TOvFN-<<*|?bL2cRmcU!5e5GWFFH0<+=WyR5dNIOy}BuC&2J)5wd6^|5fYl--6
zb8Ta}6px8R2dT;3*mwVz@VFblH`M@!V_|1!NkkyzMq$@P)8PJU%l9Lk+~-X77-%_Q
zeOsjFWYj4A<zQq9hMzbbWG?;RT|{(viL@=RKT=L<$F2eGpnGg{EgHQDJ@Ms3t|CIH
zxuS?_oc;gD3OQ*iKwUewh`V9SzAK2I@6$F!Sv!7eaedyR;i~rDXxrxSrR<9Q&!ujM
z!`_H@6RSaMwuuX}<Q8oFl!CLT#FfGx?HGRy;Omt=G~2x+ECP|Pn^V#+dOCJ>dq6n&
z@Km)Oq=Ycer+!V@I3%T#I{laLd-bw%IX9G&Igh*cLq$BU#M+^0<k^W7qq$>IzSOWO
z5z71)TNrL?bfy_sr8%p_-@;-~>JTX<Ib6VBpF(g<af>FuToHK?y|j?Ef;<r^Q(j7b
zH1yMVu!{a(#3lhbi_2sW96=6TWm8}og0*BaG=KNlh3&Etp|H2x%rsPkg$A{^`F0zY
zLwIqAuupO9bwf!}o9IDxqQ`ze)p<Wth7s)bm{q~M*AkE)ag4}Qc=Wfu*+mW=r<byB
z-#aoh<l-{H;kB(`^=(6SyXSoof;&&*o-20ddt7hyNc6;4-D+W7`6phqm1I(5_ffxG
zee0Jgl*gn|_wL(}=cW4An2eLhci+WSyj#-Tq+mH^t&JjLDEKn5Us@7D2)N#Ep~Wl=
z3$XdTRAqFv)=214N<6G^y!;ivH-9WB#}5@RNR~tav$;?^1q01EFSO<{KWG;WYw5qa
zN&8^oY2_nuO=k{S`_HKV<=h!2q|XtLNlBq}56VdoZ?;}o`KG49B+UU67|ML_XJbYw
zvZ<v~gL?1%hbPf%!K4;<Y=f5P3x%%>miaR*{t6Xreq2zW(ShzAVc{)qR7LTPj?Qu*
z1&*%B&|tvI8{cY#itp>PN_fHZq2uChqKE4e({Uqt2MDz2*!O}Y6tI4_QCR=&ddS9A
zg$om2QQRMEjtDMBj>?~)LX+|oGkFECR!2P5J?DnR5%SoFI3m{kq_N+$JKJ$5AGVR;
zWOS5`ibe|mPv&g>Y5#fUJ>B5P3hAGViqWs_(+aoq<`uj&c$FwMc+?!2h=w|-f7Wcp
zBxgeuXctQ4*;t6Wt2FQyReD$`$9l`*Q~*Uklcz#?;HLTH786QYqaNh*v{N))OFI^r
zr)5NZ*EGr$cPd4KvDoIt%HHZ1L|zELg311VyU}`WE%oO&&tWRFQ7#;HAc5X%%#V=v
zXfQ<dNbF~q-$ey{F)PNWnvz#29ly?IS#k`CN>q9i95zk1<CpU>gL)DG<Bd26!Jm`B
zJlX-m3oNV>cdh7AY5FXqTyoZPMq6)WRfV79V-24dwcq#rv>)n|&QY&E2L%LPGi0w;
zA0*+?FW(_spAM0688ah)X7#4ExxrG{lX=j1mVv9%ksZ9%-VC}z_<VR^Rnnwk%W^}K
zYCT0vTZ|sJ|0&zulMi!o*;Z)$hCf}~640tcp%WrH2)->Hm1f(sLTeG3tS1%yTaa+(
zqZ|Cj)x$Vf<P@xq;=RVZZ_{p|Y^!PYg;pY>Y|J!!u4>rz;OY{W_Ppg+M^g!niUfrp
zPqOe6cLjrtcFI`ZFQw>jvF)k|l$r&p{atJY^Hb;36}p&+cI|W#RD>Lw@qk^Rbp(NV
zg#>+R!{B&sjGZi07sYNmfeUq@5DY&o>1v`o0#s9@g4RaXk$GuVe@6T)yi*^vK{gcI
z9tp8Q5c>}rq(O`<Dz!XI3g@ypQu%Nj@N=RV=0VTil7f$2McC<Hj1d0GjQ?+eZC#tK
z2On1dTk<2wObdDs-!zVgVOFGh>oBWPxHxVmWdRLT@6i6>%;Cn{V|<rt!Sp`J{^X24
zq{KKg>gm0&>`|D<IhSu1_5b2G(p&1K8Xx=6ns8KZmCBj`*Pk=8$7OdysN6iS)mduC
zJ5{2AHryU>7rAW(O&O<K#Dqud{B^)2@K|95`WNGz6erYF@fYgvQhEJFLP#PHUtqrs
z!#@18b;C+kG2+N+kDyW*4jwmGw1!nuSrP)S2&W%;C_hYOR?gq8qDgKf%Gt=!$R%6=
zjkIkYHT!T*5{R%Qw1DL_<J`*JGdno6?<UcK1i4t?h*B4CE!}b|_8J~4%0lH5|5L=z
zRL<@hycLa%O7pE|nx)z#U8BEO@X~UE%DBGZi7-7rWFaPu{jO(IOqJKwa;J}tx%@#y
zboPnQVfTn7JA%jv85=n!O!^dSFDf|W|9UE&mJ=Zjqm_z2#g>o@CEt73MJtovn9Ul}
z^IkAK-Vad6Lhbxb9k60tnhZsnK;S6Vo7tf=cAIs|H{H4ljmAwJ&HpM>m$!5^s&juS
zB(Va3P|;Yzs?5oxxU)`&)*HVlT^HQ)aL4{4;Jp&BT_qi<$kmxLs+wu!t5hj_7CnZ4
z(=HEpE$bvvI7$7w;<;84S#CL57w-_O+UVWQ{myC3BZ0aO1V-D$;*Bx_w*Zp-Gnj0M
z?$tw2E4j!M#inhw6|@#nPEke9x&pA32$A9uKYqXAK%qi&W27BsWyAGLLe>3Is|EBa
z%VGjcaHPY)<EFu8`ElPtat_mp&VdHg;g&uir?L9i_1fuDbf<Geem6Ik?04{o@x~{7
zonL_l{=-<=qrWKp%?*3pOTgpMJ$(T}@B8J;E0(}#rbT7sG3mzre<*cV*zJeKlbV_b
z-joSa5UcZ0VnJ1^Lu*8-=gr}y!H`^d10~W3p!f||uPLrLJ*A2jfCTY2v@$JQU#oDF
z6WA?`ui;!6YFu}`QS99@d1|8QZsnLYU;hez6)k&Q#ASrVh-SECOkkE3Gi!BtcbYp=
zkyI~F$31~&HZg4rt>Gsbl>Cjf29W$oqU);wGBL(Q40B|9*keL<CxOqu>YwS{aAD<{
z3aZqWPemXiB}wl;lWk%B%|)?`@+D2QQxZi*0(;z~v}7Qb>Nnx(#7>FrcipThGZnRJ
z84yaUFEVu&0%!KUdP&B^Nw!XRo!`GYGC$KhNc)L0SsNyjZ7*Z58zk`!KOv3WoBuh&
zBQ*!L_^v2K&MW_GoY4ouu~6gv3C-B(*T#LWLyer;6{p_}0O5?pD?w+r&b8uH`^siT
z$rGzP`ms*&k$IUtLLgy3W@42!Y(+Y>CXsUU9udsiNLq@@5BxZep#KA5K%T#!AA-Mv
zgFM63uR3aCb5yAjx>5M1em5P?CXHHp07e6f7Uk&|*8REuo+6>Hcu*UGncsE!U!y)|
z$P9BNO<-<s4RN?^#=Iy}1#u`jz1CWV;s+Ow?ZNXi@Ut1%z75y2z+97twkdUFXqJKI
zaV;pc)SNE!0;$o{We6OGZP^$bFRlPjO3XHM2n1LDLhA}4>d`5CxlyH|$@9IR-%I_R
z>vFkva4vb|^z_(uYgfkg#iPJSAJ5wR<y~(lu%U2G$+P7vd5)c%s}DHeu|>1ITX3?C
zFF$|mz)i2cq#?%g185*pW#vXF5d{*qr1XfZxlDc*$Pvg;sh7&OEugw6uvBiNTn!L}
z4TQ2qJ>+1Fs1#iTSHgX&9}}lsjp0quzg6vA&x<nrOsXz^0e_=RvlKmS_!woXrK&k;
z`ek~uI$Vw6dsIWF@i`@MN;QZb`&3<pqT@&bhrV&Lz{1G{QP_rU+iJ!+p+j1A(pu{T
zv8W=B5(FVft?CHQeb`P0o}Wb~<HOC`@G_Pzol`}N#sm|8)nckTXS=!~w0a7-{XNTI
zWscH7gl*dv5fwSAp~ToGOZ@5I9(99;n2WrHS@X8Mq?O*U(GKLn+R|4K9U8x8)tY?p
z<tGP64%AM3=tTYKapi*8RSKN<s}DH;?A5LK=+&)WQTQBL&;CiRG4gAF|M187dvAF^
zV#`9oPtXeKMAUhPO@L!*zn4Z+pt_J?sS;ti5}@8}qMfwJ-3qp4BV%Vs!78}46onGY
zHWD6lMQ%u2+gK2RN^<{h2ZZT}P&0Kq2I^fite!}w;{>P$fF?r{DW8+3V%-UxJ<*P8
zRnnv~*_)=3m5OjU2a!S4U}?DmVM99&O4wiuG|44Um+4fQUbSaX<P!-c77}g5vVkb5
zBM1n9d^k4UJUFh8OxA_%S#WX;j>nYapVgE=3%GN24O^lXzWV7g<T;0&tz*=yVSHl+
z?UjZ2lV3StTTbP#s_nVx<x;t+hGsrF{gnqE-TW&XbGHAPCnS!wANz$UO8V`ZFIauR
zc^Ru)64y&BQakW+#(f>fg$188w1Tmb`16nNedKkv%mtTkd9!W9#Q=@Hw6)(&trlXY
zl3<}CP_4%Z0^(&zfl6enFEY-6usLaP0|8cpU`t#@Ps|r%gWKI!%tR$=(~edfTSY09
ziYYwnmbkSJr`NlfA`cS#>G3X|>6$%Yqa&R&xtgv&PM3gA+n<buscOsY*cz+02BG*H
zvIwPgQavVxAp}mGs&Z5`*TAD@fhnycSI=jw-xEN!k;q8dhElsYeGS_LKy}nB3^w!O
zdl|T{1K+nWn&H?vLC%0KKJwL7aA0H57DyU{s4oj_naqmc{oh}VpWJhbv-~r^Pi1<o
zG=BNH&!Rl=&{v<{@|TZ3H};nOjR$U=X&(JHQ&!K<)d!rH5w(1?l6c0=Ge-`1ju;s9
zlhUdz8{O&f+)ketwr0KJ2FK2?sWxk&%cA&;`~J>;Z2xoEJo!cpI-B9TzUrH51&OHF
zg@}>_mMuiiwuG<+kK?Kx%SAT`XVFTg5yZ24v#A169YWNx*jyFvnEC*$q$nB*xo?>x
zH+@GGDQGA4bb4kFK=c5JZr0R5K-pLt)le$c@yt=pkDS0t&lp!}7~NFLKpGvI2%(RF
z(y=tUG7}sW;Mfw}rfM8zgSMculzvV<qQO!Cr1~+HUZ&vN81P~N-i}?zhvj5AB)5Zz
zaq0w*k`Q4WBMM3L$dr8urKq06!EG)MHyA(qjEkX+z*r`M8wmsuSan$upMCnC=Kub~
zM~hx&<~L5Zo;ajG>6e%Oq<~UySK~+GPrS$B*&l91Wi@rL4>tdJ^#SJv;PPTo3)vF*
z_Mnx)NZuDCE3$HE>wrCe<)Aly-C#DmV`M0kU%8@yHEWBQ7_%{6@-SE`fM;A0Rs;Lg
ziL!Y3;0*r$fv550@!vzvT7%)jI+{sE@sJzK0Fh`S4x30?A)+KgBI|UUO;CL_LHT}x
z+EWQ?2NPLapsnWet*@@s>`xq<`#Z65_4|2D_NOMYNN0W1#-&Y6zBDvChKkQ;v?BC2
zV0Qd!^qeXxlczcx^>f1orKNBa=IF-H^zG{X-c+hogku25Qoc2c%MtXRa+?V<+u}4c
zi|jQh&fyF$m&iFbI6sW%4}ZcHvF-cr01AZ>lm;g-m>&&Chel$X6_7}q(_p_?Fy5wq
zG^*N>>YAniCQRhKgnLxQ;}+HqTiCKCia&nfOW|*R=>DRG%AZb0pZ~>})R_NFWlTum
zmrw!zd{o%Hv~?Z=PS*zM#lR)w=9rBE#}&nbFGtqq+4$~3XZ*@iwsggc(V?xYRu%cG
zDIcq+vRJvgfZ-80&NIKsxgR&fEE-D|ugx<)eZ;a`k<CRUlmhn7Z5+4mcrBhgaR?v1
z??F7a{~^+U#BEmjd@O?qEG{QWV^566lR~zR3$zwgk|mbHM9GTJTumJKOwoSJk5nqh
z|2)QA-E+qMP&sd<oz=P=ZK4+nrqtYU?OZ|8NJ<c!21^wXr5)j>xiT%0;~z&wTAXYM
zXY(GW-ZrKR+`Xj{4t13h&*MmN%cAd%fQJc+P6!-rF5z;ZkdtE1kuTc|wP%jNuKt1u
zyb>?xuHoFj)N^uMeJAS{vI7_?tif1uHA(~H!PvlXT*&9ti5-O&WpEhG0L3hj^=e|K
zzMuceNAAx)@Z_w|oD)AkD?a_-+cA+nuM9}^)2Q<raJtb;Hyt{&B_ZqOnT>+$$+58<
zo4VAMBUfkaq036y;*OQWgCpx#4`A!&BGzs!U}D0<@PHd;{6ZXxjHoSISeUo%XCG#m
zp11793hYY5LMtY2h9gnENNJ0bAZ;H?ITss8ufV^*bvM2+@g?!G2kv(nTmIvP;4`1H
zxQ#@$F24Bd>85$QRXV`qf0vOH9}1h(w&#zDm<H3)>rE{oIzC-#O4aqLNi{XbK2+O9
zq#O;cGy>|{i0Ywt+8fZ!x6(<R_Owxdq0_A%z#%TlR%oVDDxo+WTXQ$+4yrSp0vyfN
zC>6EGFi;3%mc%~n%5N>TKld?nRDbC561U@0!HR~~FEj@)Jvujdox=*(Wt`!a`OFZC
z`4UP4gD7M?_zqE15h{%`jxSE*<orB@2<~Fu-k+LnKDf90zP>UMNk5G`Zvdy;9rR++
zi|e>>S<!JZQgY?wj*MJ&ONNbHSIiD>pBNb|tY1BdEgJ{1VSN!BR^>60%LUxc#!=w#
z%CgI6j@ta$Ig2lpxw~AGH0f8gmGztfG1cKMI8u%xg*l^9k<!9K0L&a|Bf}(it-OQF
zs|w-YeB&#BKkPNHUu=Kn9<5mEJ^6cT*x!Uh5@-c6n)6{?ohn!en|jN4!WvD&_LRm`
z(CO9M^qQadrdx^jYUmKpdNgK7G}tMn_gvY{WGj`nbv$c~D`6+XaVWkrsHZAZ`dfPC
zD!Orie2$|~6!cb-;O11vg98b|cu9m<Dg$_&ZWg!xugyw!GZ`MLG)6X@t{1jrI=h9-
z%$i7sgA7qq$lx&Njfa>ue_xXwnGKt*&XM=ipMSY^4g<~^fqdtr>Ak}E&LDR%JYb2D
zHNKpBl`ke=TkwjPjSr2Et(_dg#<fG(x?u=gHVnq2BZa!_WDqx9zF21b)FJRk7P&pQ
z$n8p<p&2v8ROvD08nwB&Dy|4_K!;j%)Z_<aqSv(r?v`*=<=6t6Lg2oWEo>dV3AgMP
z%`ZOA??xutwb=UlQ|VOBZ@tpj8&eBajY`I3{lLk1+yp^H7<X&~b?HZe#~Fb00$<}^
z0y)*xq{HnxUsGW3kk9Iml&QJ~U9C=5iJReZv^9pFZa`&mU5L_sRw@$HGl=0>25_<f
zO<1<L(&Ug$d=D_BQJw~iL?lSWeB8!73HRvsApMqP1XOaDO4CE+jsaEmmm1i+QyaRE
zeWvs9KR&Pe>%0J*f1Domo&=ub!{I}o%|=EYF>#@tOx%)XBd-}Pj9oA_I*d(gCb4nd
zDAr93ipjB|W<Hx0B5`=VY1#7&!1Md1Kf5GRu1hpSi7?Wg$*N>SB0IG?^v+RM4@T@p
zAfpVmd(Fv}$+j^pH<p;XrNGp>lzA0b9o~EA%6!%6b=bYB(R})l{c!9pOjO#>FTXU<
zq337|hGaew0f`3%PqcTARv_y}&=h2dqwO?Q_B2@bf=zD(l*TPRphJ}_MN4<=M0Iqc
zz$X1POiq=?THVsPYR!<`@gS5_pR!0b6CDVQNRwnkHM)8(kn<$BH2Nhkc-1fXYF=zl
zRZ&5)B7%EURHgP&(Jz6}i@c-X0$h5*s1HQngMed3aeR~XDB~8n%SQ_?R&L^A><SNK
zw-wxxt0o4AOY2vRVe7hatXn;XiP52;kk7}kT@u^za+TXp9+mELmFQTBR+u27A#7S%
zujgaa6Oh_hfrh0vrnZSmfunm(JY$}>(u$;~yRn-%BmUB0rGA<km2;b)tOR_=+S}tw
zqiT!kn?BdFPG1uyG+pUih5PBd(UyWmGcozFP`aWb3B8f&B2E<{LLhCtr`5;3l_x!>
z#Z;Pf)I+81-qr=)EArD(Pnw#kW6%a(rZm-wd{RY=2D(mlO1Wyf9F`-LI8kYZY;EI1
zzqee@9a|vd2n;$29C|G;$tLa}r<*T4m-M|f&=mc(SzoT%#zf&Fh|F4>Sspc3fX6e8
zw@)Xio`_}nRKzM}!5U#88cDm|ei1P01JOAQIO&xt1sVMT`)+|d7%A9de4{H@-I|e8
zZ!csfcdi^A$NCkc*t~WeQ!9qWim|~UTgZw)FkY)Mexl0k@@!(0g16O@2-^ZN0Sr0X
zb*|#wr>2xhM=-{;D!mU~#!ZycowjITFtz<upkxNjnY(JKT^jLpVY3^%=$vDz5!<^q
zy*5~^%w8EZZuqI$<nMmxrSJ<hW0&z{F&1qNIL0?8jc^n<Vy2I&%2LNHD~)b?S{Sqs
zj!=!HJ>JHh=?vXURVVy9QwnJ~9i3Ter!K|YXt1GUBg7FTQKSl*quu@xaba=EDY~&8
z3CEVm`@l#pfu|i0<v)*Y>HcNW-8__&7yav^wf<+;jjhhF9UsPcDT^%GXUI01K^sf8
zCgv+OELLi$wOaKg7N?WAwx{7O-QSiAk4IQO7V*kL$SU=gsKqY^MBS;L{b=Yc1e`O&
zVTXEVFfnK+D=u{9)SbSVcx^F1xpQ)K9BZZ~ux@GsYu1hhqoc*x^(}-6w;OfF57e1m
zn~u?{3xt90nodI2GdsKEs?hQ2?e0G_*v$Me1q&m3Q^bTGfYu#!(CLR(t=J|SGv~K5
z|JJq-W~yg*$EcJnedUZJ5D|DX<nGw`ntJ`|^8YHiSA1?Md}#l-ORaR;mQ<*^B{)@p
z3}KyCg$&@Ry^a^8QHCT|fYPZ}DMFY!DO9A>TM}2@RN5|(s#VHTMjwACwNgQl(cB0U
z2rDmRiejjxfXFWTHyxigb|>F4l}o8^a!ac2c;A&MW`L=QfERNTa!yU=`X`=MI)%zO
zBlZZp;YTuZ!yjC<em!o!^zv}?idFTj?JFUo&0=L6lJO!qE`fL(k!bL0Sn;dP*5>(2
zWAmxS<{M6*Zesd$1xpJxlxx)!^|11Ei1NcNYw3};y|h1Ii?e~OH0$jOv3lS1h}e0Y
zmYpSl)4c*^-AO->ov(AE4L?@!CvO^CF@m*gS75{XwU}Bx9*hnbL)RvO7q`it^Ta~p
zHd_L%y5x~EwNieaWIL&2q;5Zu-uNbU>U1`z-=@*W3xTJbNf<zRfw&|EkdFV0HXcr+
z8VzdZaXKB<XDWZR37>^}Tt{i}LVM%d>2Uwy;ImEp*p48c`4;^>`sYHn7h@Ug2#0pL
zigeQIl;%cKD+={jhHEl56w1X<!DecVo^-{5>F6tkqdG4$d8Dx`O<zb)+LOLD>R1c_
zDU?#>aLwf?&`}y319FN`W-7WNzn|f(#H!70WHJIw&`7|4+BropZ_wQ~GAM8O!rJ2I
zOK!gO>iV{+9U_RBzxPDw$K(UTCAE%d&t=ZwI~nA>9P<7M3K<cvD8=#CHL=JHhQjfh
zh^zq1VQ4SRSEf##s7@U}*}UWQu{!2XHnF_aLakNXTgT$P)nw+rI%c10@cH9yt5yqS
zEe?X<MMu%}e$L;kAaoW0j((H#{t9mZm;8vEtpBg8$F>!AUv>d5*u6R!ofrvSY4Nbl
z?PkFE%u?bv8VTA#f_4jt$c7;yxxF4cn-;{=NJdRe>i|yorh&zjtIhq@m!6a=T`w57
z)Zr>pAW2_G8Z~vjAPmUpjY@~n8LiwQlFe}_h80{igC^g!`nq_rdVEtj|JvW1=O6v?
zSOniXp<tp+qi;J_q)Ow`ZEr}swo^u|BjQtT!0b#Vu}QDerb~T4Gg>B%hRD&F40zI^
zcfE&_s*Cl^IGslIC;+K_%5u5>YH3nfrB~`kku5{Ul^D&(D69@OV5<2tFaMmP0~qse
zyD6LO{M@CRcDXlPd~=ywd4KOrgD2!QWN|p0ld_o$OA6}eh$KT>GSm}>#g+swbMDT#
zaBY_p5as;>266(0VuCfLB-naIAo$H~A?=!oWXKnrvAsOo*gAK#z4g@5_K%!8T*Ik@
zvzS||ovOC$Pc5_4U#_y*M?<fAylqt$8e+LsYf?1yk2$FCMG*Qf1CD+(OZgq+Blhi&
z4A`ruF1h5|_*J)TuNQ{6orH`xn<6_`79wcH%C3RZq&U)Zsr9&8IvaIsatBz{72H^c
zzYt{7YLa^T?(aL%PD%iGIMMFqTTMPt-<W?J!XhPP^`ECFM@mxa9wY-%R6W<iy!2R9
zB-9I50_~97Ti3m&zP!BfV<mp`SLWKE{&+f@{F^O_q^i{~0^G5nJTFv=Vxk<A3a08`
zb<C;nO<ILA{7bhZT>Va0*iDa>ijq2pend2<N8ODU&rlYd;dd(9GW?Pvhl!APs0~B=
z<ETu_L^!TPEe#waV*$Kk3p}x?yluVQ6w0@U__+7RU&&$PFW$8Kx?tPt%bN?eAR9zA
zShh0mKrA$7(r9H%klUb&z(m?cN@_)$NpcL;+g)&F4O?znuoql%Q{*<!anDYW%MK$~
zNH8#*@Xez^c)_i)ki|rRHPEWJ`1Gm9<lNC<<>|xC+fN>>VD4BQmAPiP)TlmF;S2Yc
z#oR-6zVv(rbH^*mVzm|41hr^<GZ5-kGoNc9WPi88#<ho?OnmwMrNQ-6H@xay)z`c;
z>$?T%KmTBYsLDWTQWP>ysS<geB+Br+JN1z;fFcqdm6(z<m1I+n#2|;H=?7^(WHw$e
zk(+WjIz{P;P}2WT$EWmEo;ufdv&(e0(QTeog1{8CGyp1a>=t#+F?SAAcS;9wfQ-Aw
zUcdUv`hmmkkLH~NU#UlXmR_9CA;1X%D-;$oI$cSTK^L*ls2~|fzAl(_Dpb8T72Qav
zSKOC!I%#^?Q6;CTQ_qFEa}2~IQ5r>On@OL}xS6s!ZFt|77;yzwuBpSy&=4<*KvbOc
zGQg(9N8Pu7wBW3K+iknwTpb_Y=pI|F5)5nMRHV(})qFwS&!GTD4LFS%Pb3q<ri+^X
z8J!PQT~ju$iU`+zBC1!7BBIzvz3RYPW}K4~A(z~D1kYq+<O&f6Mk1`9jKlSpM?&68
zeJ&xGXz}t=+nzbnx@3B9<C4>RDwsJ~#=@y(F}qlPwu16w4OV%oVl6&CCr&?C5sQ^t
zP)X8@)C*sCdPbe?0Q6l?sq*ZSpDg&RH*8q>miq9DTz2Kg7*9RG&?=KYl;$l#JK~v9
zAyl?C76_e_yAwGWVw3KxuSlJ}ZpN*3rd;=qQ&Nweit^H*s;Hx52bl`g%!W-t#k>YH
z2%+=y-qMW*HLeALombs+Ql#QMLqzMRvC(Qb`Ra+Qd9{8D$-?y?3Hb5bV$pa(&rkY&
zRFk3&X~#N`vB;pS`|#>j_mtwu=z?B!YOd8Od(+@tn#z#+;;3j$kH_s4<2vu>nesRV
zXfGHI+^OiPE^%tq)a5%;O6tf*M`0@Jq1jayad^Or!3blkTS(x-CGn6JKz*BK$YFcb
zE?IB>i_!dsx4rg~x797a!auQChGm#^-PU17*Kn>rdzG<~!I*ioETMhHVx2mwhFF@C
z86{~mED#dsW2T9!pOM=j6+6fZl|!Xw^`?u3h6`(!!`mxu&rXD8#oVWKaU@25RgCRx
z!*JUbkq|i<BTmp*Y}$)QnmebTsqLKGSHsMq3Z_pjVQyjm(4w>Oz*4ew@0^&qe?iV1
zZJ^p}1l4~;PV0B{>;#|h65!~K;#rfKEZg)OYggP7mg|n6uojl4GpH}chKwWvSc3Fh
zI_l`=v_1TXDbLCjH#*g*-c+eGLffoPRjOz6c2XR5hfc<zb{R!bof+6^t3vuxQXERh
z@6uyyovkLRyD(-pE?qgPx@7b}=C3sn8oN%K#}rF@)4JQ5mHON*CEWA_bL~(6#W&+}
z1fmvIsS;A<8qXPZSQHmnJ>zxt3)ig*M#R|RbJRR>6S4F}J!!Vu`MG+GG}AQ4ogPwW
z+-6$9O9^aJ{c6%!Rj^chLz-@BsGvxL4C2XFb;XJR{&0v^;^~-BDqFE{v2^5@cUNZy
z`D;J5qOk4e+pl<MJxU7hVxs~IkW`DA)GVL2%b;{hg9a_#E3W&w(h48NhcTU3h99K&
zjSfUr{*-;HeseVFDAHLt3F9hiQm>URaWr61%_u~Zjx+MWmVHbwGT3`1JX>%-6Y=ao
zWM_(z$gdp4+SM{xvnvrYM;3+xt>u<oK3d%{v$wio?zyFRpMHJ;r;p8JcCq^Wytn*~
z+4%J5X65Xoi<q0K1oM%(;+~a_q~BG*@%hvxd4DpSb63|Zt!01u<Omi{gXC9T)oyBo
zkP^A7*g~#y=5Z9jyrA4`O3|H)lcD6&>QtH%bW<t4&ZtcF+$WXnlS3b!WT|?$GcY6_
zkD?>nbVGABZ&!6_r#YNC#16mIP0iHv(ZyU)Fr*QJDo>s@?5<sXb$#Ey%AXg#nfuD^
zhY!Dy&yk4QiJ+5OD5b8NB~HKAv#N}tusP6Pg>dR;tiG!2qEZqQ@O1of^!uoEIqFE6
z=5<o=>}Hi|ZCwAGhDE60gaQlVY|MmB#n<R*nWkE$Q#YDOK|apZ)jc&;r(8wRz68Ef
zzIaD#nno4<%>zaD+DA+IRhw_R_+9m8JMY%RI!(?nVoOys(;ra!QKda*>UFX1xE>m<
ztcLKVk!O$ZbH`)Id?j#6IVckqsp-m!M&q1%!)RETYFgzg5+cnJ5k*M2L~L8UC45xM
z8CXl;&LJUOTX5HpcxE8vnPLoo)E6sO6vLHoVnV(*6o?`;<{R$P^X2WQpIqF2`kC1u
zK6PLjr{*hjhZ_rDIx3I<$>G)$U#~QmlCuqTzDt0U5+vRR*LERe%8COVK2*mAr*oSB
zc)=;Ai%q@6N>7xXs&-Qz<^{gJhNM*~R|iN^^>E7Z81*mZW@<YblBXM)XhK)>EQYI5
zbHIDVZt3RJS4cWuC2&(b6BV~pvRWBg>E5fJ%&<#NceoOcAgp7oxSKDG9f_0K<|kVA
z(aYNLTyka|TF{_h2p+4A+|>k`ncU`U3Z`0ZY^E#F#xT+$v!N*CF$P=a;X9m+dfZN0
zs#L^Ai_>L_&3i!{hst6o%HjHo?+Vbk8Z{J;QYl9d@KX^E4J36L#)~n=MgxF&7E3jk
zd<&(q2AiC_CNs$Hd~7(sdef^f`hj{Q^xYt;!?LLR-b7$Mq&dBQHBLDt%IR@Zr}tDN
zM1Vk_A*EW1!0Bm5P18i>OW4&qC8X@u?}>I@WKxhv52tCVWO>TzW~2ft3gWOMiv9>%
zrB20c@PIC8p%1>8gEbHE=LL6I4BwA=b}&YEJVJJ=fHfDb2v^^1Q3MvpjgT+xJ2kfF
zbC19K-cL@w`>9hGKl`+O*Xxc}pE`OrfzEf8!;vznsSR!kL59AIb4%F2Cy!m1<#bx5
zcY)B=AY+r6f=!wy8SBhmVPCo%^mtoM)aobH|Cgp$D$-EIZWnM2L18LcFH#jU#HV^H
zljEnxluD{^#BJ)dOXxzbBN`Fu6HoI)U7+bw9%;p@r^3Y;qA0f4t-d*|*A_1xYF_{E
zX7I89amE2rFr?zDgf8g%3f+m+j407;I%+u8?~mGSTHvRqH>m9^bn2iVlmvik=D0ES
z5~_mLO+ig6MHZz-0N5po&BmlXO+{z5xzrqS%ao(3ox$jFR9W06TMCBNBQ1EDHWJD~
zq#*I&i}(WTG|IC_>;ZYx=L?yYo36g_J@t0tyX~l@nlp)W>3Ail?u5n>QKeTZ^);kS
zntrOxi{`Pb@xeOfrHfw*$|=~G3y*F()uW6FZ0LZ~>YR>-sN8NMAgM`arT$JBC)S!?
zCcP&bj8a=z^WM@0gnsYP<(Q$FxF|1ruoeL4c?sW-cz!tM`8C4Mugzid!tLS2rJKZ+
zZ#fix`oBJZf%tOnh#0W99j`sM_iO>3?`ldVSz~`QtRhV6>ZjbQ;>jnbvH60H7#v|(
zK5ecxkt&^%X`Q~B_UzObYHCz5sk@og205d7vWK9NLUPqc)KM0vgmL=s-lOfNL@L5D
zak=VG>Ph!#m>ajujPD-Mpf_4|o5yLi)SVHfDIt}*nJBK?2uV*8Gjie_a@S5>*W9~*
z@wW$@U7x5$PaaLpLv>Y-B8rGBn_vZYR8rAB+d9%PCvzH!sobs$AoNIjL+J`uCmig&
zif$UxD?eh?C2oSswDY@H1EkVQ0v6g(q`gtI#I>2a=68tW(1Y@F4zPBjVcuwh>COYO
zZw59Qd(ti9wVx{Gwp@4B1@Er6W6uramaasZPcC)uQOBXCSfqV#CfzoML8`G-mFx8f
zOmoMHIU@d07b{Z!O@oaB!c@uK;mURUivl<eHrnGSjm0DdOWmoT^q2%PbY3XGAUZ}h
zipO|Qr&y>A==J+c=@<cbNR9*2L2b!}Tb0P|iBZTk`M~Z5&+S-kzx|!V&6BgtKK;ZM
z_m=$=tE$0V`)mN6?`ldF%GrZKJm0KV54qXg1`$~yua)QV=r@YE{^k)hmJ?DAYoDj|
zBvIXeot>QS)(#`Arkr%-Z9O28ZfxQJ=}JUnvJJu9iEeto_8hHdRMHqGRjyFpm+~;C
zpq@q&G>FI;m{Yi{#C3`j08g4`129HHGj%Mf?E@{<JldTqM;VNYpQ5OZk--c2*!bQ!
znXP@XZJ*j6#`B6yl}sj5#$>{vhQO(`ims%FJE3r$yo7bHfdP%)j4UPIO&ZlP;Y)vL
z$YcX<o%bnCrxZ|iUi%A5-iE`WF$#1=R~v}<8yew4getW)7}9uhFvf~f2q9c!A7O*=
z`AopkU{mnd`6cU3cW3OWE3Vk_&U&2W-7smXYLq%fOeIQVxsGlK8TI?CqdtlR)8n%|
zeO&Z!ifj@CHl2p^PFiWA!A{$Vy2zQK%!U*<5ikLZ5kcw#0yE#M&`%T2G}VRzM4G^A
zsdf={LMZwuy*OBUG_e*^(qj-Oq=1JZvL%89XeJJ7v5z$~0?t5yNABhBhKb!labVxb
z!1AVBs+jxCcR#-AIj{a@m)^MTWF`o4;<sk154v0h(GFZE#&b_j<G`K(g%Jks(q`%5
zN6skHq-lcz0wY>GQ^{xi>CzOcLkuf2(#%()DlruVglXQ?ztcQVdP};$6WyC4v9%YD
zCa+C}GA;SijZS3hMRv1*ogo5|T9Fvp_^Rm!gaTT>qqzljJyb7+zS4HoVM99!?KM-k
zgxTzx%_V-ze^O_ldfjnCO`MWN;660yIOe%2T&E3{s*jBbFs-_nbHArrm2x-T3RaiH
z(G@iMYNcS4zSrinQJXC7pE9isotwrG{nh-Q^f|7>VA~Aq#v{1YQ7$Miq)R^#(>RGv
z<C!K$GVYi?>b>DBId|n1m+g2*U1Gou)I4MxBn(LHLv-3~A{wC^H&ok+s+19j#1zoj
z84WlD)U=~%^Hbp>j-(pLtWOgygH&xZ1V%&<D_~My$^=lHzK`hV=6Btj1T|;GJwJ;C
zM4T}FyM!T3fFPD4h=m9vU4l>VOTP<+6k$x?GpMgIL)eBIkVuOARtPj?0>(2q@Kq0=
z{rVz~Eron6KP4<VdR6a!IS&D+yBgxz57t`K;bQG+o^wkooRFe|yT5!K)iO{R=CJ8x
z&|_{*U9&@H8bIk7GIZ9NO_?2XSVuQXhNAK@(E*Xpf21rlz@x%o0v@7b^zZ0<{qvM~
zPQgd(dDI{_6QFR9nHyl6uTDNa!Aa?6LVBbB&>%w_LWc*M=hm~D^uHx2wOYOE`lg*s
z{Yt^U>Y^SRS`ji#ji;ikp9CXP*6=3k{ZqYGCVgUxA5j%2{(|VHJAu=*IdtMhlPYkP
zjCDT-bp&Z}XFP7w6v6aPX#h^sJrf<6ZgD!soDZxm3M7;(5PKRE=S5e3B_J@GXqwHH
zWuw;X{;!9zt1sUAjymjNza`pSSPqYg7Lk;KTIwt1wVfMNF@b3w)gvJYob4RoWSANo
zOemTNiHL?2hD_bmrtbj|0vZ+lsD3>SCQ%9iDk5TB#EdIYQ9z@AuWwS{RP?0pLxVQ-
zV@N~<G<3g&hA3*FX`A1L>hGio6QO~pb0e@~N`=ooiRFrik9@L%1C==}1QhjVxW#E$
z^4YPzi-4n}l2&}89^&}>PA@*~hhZh;q?ARBdU+c6d}SJ5mLpq4C(<Ev%HBs%FG9;&
zO!T4>YK;s8C=`7t5Yu3js*zKm(J2-IOnU1A2}M2ntN9zUR!F0y6pVVJBBe+b6swsG
zk9dm=oe1XS&gc`|9q5Me)Tx{j0xBibth4^NrG^o70ElrSLIaEqU2KnxUl6+TvQIhA
zhy@n5xXdAu35Taq!(fyW0y>VRBAgEIAf-^%v)+jc#-q5yFQ@54PltSmSyH25(y*up
zXi}qex-w8InSu?aRHhr8o<tF(G#OJxHu`u+vJzPiGy@88xaKmH!=eYyNKQwp^Z~ZY
z{r=z1S{r`wqOIRo=k}N%L`@w98nQjTxR9STfehUeW^tu?Qh=jB56fq;Rm2Ifj1ba=
zAh4mC<UyO%?HVj7G9eI1!6pTu6m()515dv<U}B;dnkLH6h-x~I!%Wm7Mf!6BpA=;D
z-)K<MQ4T{W2+Z{F6(9*IIsitGMStT+4363O{MVN8^r2HK(yT`brmHg|M0t<?;9i1$
z@_RkPp*LYUy8oli<jCia&VD)Ta5to@wc`pLJ8~2c-Zzh-aSOJuLttI<O{-QWb5g;w
zNoI5iqD6xyicy%70!UhwGLeglS4_mCQzH|x7+<&!I0=%sr@)eGY0@-Jb3^n@`q}in
za8jpIPEJEH30xckoD73g0NgxN8;(1SQ!cJG^TzR<wzC2t9VXCMwW$>7a6}^H>sQ|{
z26AiHl>9gTw@hwjF%e-L#W7^6Zy_PSssIT!giZl~7NeQy#0c*Uub`?YDbQ$srX%Aq
z9TF;yQrVEMco`{5I&(?`nA+2nu22f+K$F;pG^RUH>O|3wB8^p9Tvunt^Ac@gBZyr{
z;XrjXSuVJhrw0_Cm%+;Hdw$Or8~**)O>e2&{u;j(HB2X|E{ExK$pDY~dDo*urK)sH
z3T)^?Aa$fkDX6Q@6#{{FTZ%Z6sy{si4Eh{n8ndHE?I?~&|Jy`A6cw584G1Z45(F;v
zGjpFr=zpi6m4c3nmPp`AsafZif|}G{g^qmG-^WnV5q(dmUd#nX*V%Y(PZM9d`!Etl
z?vEKPHy8L!^(b$N<9F$uhV#9(K}R`>Xv&6o@SVKro}Mj_W2AVAXoZX1^+G)I;315T
zXR&^54%0_ejoG-=o%tB1G_Js=tFP%APNn5<O%@x#NdYD8pE3`pNsS(1URruLj(;i|
zFn6XCnF}GvZ(ONU=^J7?X*!WhJOJS57#R+#lbX@*sKZ@dvn7Nn&@nanQuk}6+Ubt2
zh=4}93DO_Y@l&ooXs=pvW4Q0o$^VcqUbnuCay^XO1-KBrP2ix*(492O@L-xV(mJCQ
z-_*02^0Nk;lx{Vel{BR?9DN$~7$!^wogLw$s!SQenuuX_3<m5J5cRY)(5M(j0#Js*
zf<%KP07|GwfTMU5-bxa9UM|1FdHqkw`slyfwCR@mz`#bo)vlQ|v!{<FEug1Ar(-mL
zsPr|IzL_+NfS*8zcpEwgXj6v)KvShuWh(9pN;^QD>NidIy?zf>2|>^&l1AJV$f^6N
zN&{26!?cS|s0x=+D68W$9@0ubU~<~jhbSeW>Ha#VRJJRsCCz+(k&qaj;;58keB$p8
zp&2gexn8axKY!|ex0THNLoGgf!kn$Z`QA&_O|6bqeD~lR7M2I@%4eqPj$81fs1Dbz
z;j3RdfRT4?Lutap!ihvxHVFCEUw6QzN4wJ1;B+b~DY*24j*f1+shLugrXNh|2-qov
z^;E=+okYrOP|<)m4~l9!syI4X0-Z|H)hJ8z?r2;J-6sUvP5t=lO4uf?4LFNQ`_a=s
zpvqOc{j#g&)r4pg2Ph5f;43Dt38&|ue6x*ANab<bR7{mtX@i+5m#RvXYF;$h=nbUH
zwyGzn^X_#&lTHtNhqCQzY;-7NKq@7Hb+@&Su1twp-BOR9^ca-EIgS6*QPhwPI6gxF
zj*w=ilY%aZk+g(c4ePNhcKu%54mYh`cS|@_y4Y`oP15l8_zHCtGRkDE6Lpy%tMrm8
zP`(7u0~9pbzK%TAM;#fk2^gZb{u~wPcb(eQ(%e_7Og80kBdpYlXc7r(g|aGhtFpT`
zZqu{f(NU@^XGoPbN{Slk5}+zxX=%OF<!|)S-3y&=R3;FosH(J*sp$VN|M&=ImrlcS
z+8A(#Fkd|&W|xlfmc8d+MM?0A&E5JQNU6FfcqMw|%ON}ZKTa=vJ<nwvsCm<zocreS
z`Oh7O;|t^mbvad4P1Q>M5_-G8Rd~%4QkAPo3LyUz^;O-BCPHm^@}Wz48pXkw)JmmL
zX~%b(Zkf(uaptY_I~4}YZq6P8VH1b~eG+>G2DiZA7XZJ=;0*)BlUrF$A`?&5spcpY
zFzVQJ<8%OrJb`U+C&u>mxACFD)nP1Y%&)Gr&?X?+JY^<S4!4OfaZNg9G&x<qr7Lym
zY|>u7rXylAniB2gC%7e)F-ZFN%Gs|&3~P{6Q4ZaV(l{lsX)_Xy>1G)mkD-t!9~zQL
zaB^-$9FvBC>xz(cMLTddZCZU}Fg1AvZ$|+bNhuX6Ocgwpi_&)ORHD*w#I#STG>TFB
zGys*(+LX@b_3<fQqzz>|L104>sVax3+{+oCwdPkksg8+^^f>^b{>G$2ib&Rv!RhxV
z6+)7xMY^&@uaQ$ROs8GlbgM&9o14<`P{ft!E_XU^e^_E@)WY9>>;(27IRb8lAh!U>
zDA;@Qv20)+{^_OmbH~mWusMqWM=v2`l;!>Zu@xVGc6#A{KVxUqczL=K&Yqgam%ely
z`5_L^*LsC+)S|EYMnO!SzC7)p>b5YXl_!-jaT=1XG&?;cuvYp?$V5=2q3Yx^mgaln
zW()^p(jE;=FXVqrK29eS5q)i--2j3b0S^=YkQCm46n;U%8v-)pfLEmI6$8&OPBUp$
z<wgU8s>-QS5|y}#{~2KLhBz`su0SM=T&$YBh0`UR8aQbaNs8%d9~$tYXu`Ikz{WhT
zu3V+PKpnAOmq_mV=;+U;<EPVA5qCS$Ra*e1O*(~AX_VrpbW~$2Rk5y^QCoveqhb^g
z8Q@XT4G;ln3kxx&RLp_pWstz)!y^}kD<)sX8|_eWS=!Apt=#GF)kkYQfapb~uSZD)
z2yBR~9|G(_x=BSC$JB)uNzrba2q#K88v`OKUzc8hIu|4TnWx-}0Snb(-upAn<CvSd
zfF+%Bx|a7)hE3<I=m3zea`irj;e%AEP4P!`70m&os~vpyv(tFwsROXRmP!E&em>qe
z{b0V4oc{V!eBbZlEL&$mN_A$G6D5_T&L6(nYUQS9D}`Wm@Zz``R_tsh#({lDF;dK8
z=e99bCZsEfCT_LYO~?G)NRkyl(=p>p6QMMhPKo1gZ<UJB6U8u_d-e2WDOGVdZR@z<
znXp>_LZ6_j-GOBFbT-9IrB8NU!mCU8LqL9<p;?7slo`0@N=(y~ET(dD;x1^z_yY`%
zBAj(R-fnUP%K|}-`om*{VH2%(1Fd*jX$_;etx^YzHamd{ZE~{B)PSQw#(;v}ueyY-
z=2xYzfT`strI%@sXd3LKsbWeFbJcsGBCAfx+wMj-+GtDPR7J|XaVba<^t&DbBvTUq
zh(3R2A!IfZMYzzY9wM42d9|ghG-+DdZJ+IAQ(6(Ig?RcnD2?(M?3{!<#Nd>uLMT<w
zmJB4NQX*(bMD*CCyNR_(lK>#SGO1_l<#Br6BYnX$lP64rt~x4{GAT~4$I683&R+dq
z(=Sy~!K9{CPU~^WpueE=kWOrRhgFtr`nRYsFtN_Y{rAk{YxnPgn`uJE35xj<acuDs
zEL0EGtJc@=jFS4dnf!5H0}d^{gX_`$8P6NPW44Tc@Z3^0msw@EqdFX`jYl3ih+;8^
ziBgV}&Or69oM9u{?Q7_oYnhbEOhieIv2=<q&ivc7{kYQ(p--69t~5<AR7AzjoZ-}Y
z4aOjcu1u6G5Z4=20Y49Jl_9(#iNOgAjf#Zb(j#e<<efUEsbp@(r^FN;)i|1qKyw+W
zEr)2;t7s=n2$LEjSwoaGAw)}8D+uKXSd_ZhL>YRPx9-ZOz=2}M^y+U2WcBZKYJ=It
z=@eeIdWH{Za#(K^MJ1S~$5gQ^dpILP7y?u^nV}~d(!EurO`_;Vby(}hMN*#==%~>=
zHj*$_AOO-A*_tp-|LY)4m%dTQqu3BtA*1L<!pch6!wl{);0;Q6RFzWEiH>aAO@=r~
z(<lOgPU{1SdQ4}059eiw^<Gv@pBG&szPCL^w}|K|7=ju&ske%_8j8Yo4~dG3%}J-h
z%QSnYO}O-Tiu<Ani34l4*f_MWi7$Nh0PIXlMO-<*gvI*)@Z{Wc`L_McWzFbh?WN8(
zJC6Z}mj1Ao!v{ZCvW9-^)ZBwVyK&X+bqk&^WD9Xp#y$7$!EHD1M84>vJg=QhIso%R
zRdK2UHo6%NHb!sLlXi8Zpze@2ZHd=YOw<phM-ZshJ@HK+qdtz5B&4u8(p4YYe2p>#
zGT>I0VQizs$OO=+OJwp4z7I4PfS}A!TLh|e9F@5kjdBa^Rs%tM2|>6_6+Km@qSv5L
zddEzd%xS1_y5z0mQHZEkge~LBB7ww)N*GAJfmCDCoS34gyMDxHD2=;)4JqL0zmY^z
z8w(10-ZZ-D+zjxk)&>&=rMwRTj+fD7F%jkTDYhk*#wp6<5HZ*DHl+(YW5FH(d}+8S
z0;RSFWK~U4k&n5G6R?`dhGiJ+Aqi(#!YeUk2K3b=X=$)&RyBV^yp8&-RBu^2Iwze|
zmI7_hjP=yDFzvb1Gtp_dj(Y1-0$zRY=G>(GU21&+SLbNjyP&IHggZKFqzjLUnzWmx
zF3OViMZ|$s8!arCL;U^c_e0nf^<1tsgfJ=xM`j+$OMB*LmZQfXO;y=v+d2yYM=v2G
zl;u6YFoet{N9VqJ)0*+y1DSB!;tA@NIehKj1GweJZO9EWR2I4sO2@WSoY~6ItEowQ
zsCq?w-9=Rem7-}eVfXshRokjBX(L>E(wH#YbTZP_I1T<KZM@VikQB63rD_0UBS10F
zaB>Dn$^fMebEkpwtVF%sK(ks!yH$n=n-Fn8EezUiR}m%Y`(#Gt@+_#{k&@07(WnZQ
z;cy(9%BlDiiU4%<p>#T`r^qOa(>^LA^ixV>wXu47uR3$WO<$HOIT`y<M*^<a6j_F>
zrnFAASP*}crW3|^i*!jUDkAQLHk68PBtjBT3QKWd%qb#h3oOpkdq5G9gY2MypJ&Jn
zX;3AwAkvql{_5gFfJ3EkB8f+cBV))8>8cnt0tX8c^(BgKXoxTo`dT+d+*|6WWYT3t
z4v|nY6+UWf3o|WLwcGc+S9C?Ab0;ON4X_ZX>!wb0Q7nzh=s8oFg3iyiu&C#Jq)Hc&
z&=Z^V6aUS}4x$=N!y<=AWZ-Zs+&6PyKH~F#x)6WugX!O$jq5B09Q|p>NhPUTUw^%9
zvty^1?kP+T-5^@Qq9Rr2W{=|jhcbB873<;V5;WA+u<Ik-NtukUM)f^WvlNqtC^nn5
z^OQZ`YhFg@@uuRgbr(cNYNd0hLf+ND=`@RcQz)t+GBn5F<Rl!bLeVB5i-858O(A>;
zc$P$Aj3KsxiU8WKMCePjErFOPAnue4j~-uG%!i0VE|iR!4vemQso0Kq3ljPm3kc#&
zRD?tN4Q-m0@;Jn$2m?0Cs4GpW3}0g?g^uf>{#j2Yklul`qGfueR8&RcMcVwN2zL!(
zoEmSX6F@tjU>f|Gr=}(75m|~vC1++vssTiBAmRvuXHl-tpqea$OB+t50C%AX-zmV$
zWRWS@$d@=Wg97=iF2~c8D59982pI;i1oauvdllAz$~1VZsy+ijGs{E_P9i;Ze&}{s
zDs3yUQO+A3j4*GAiEujObvmLMV}7A7cxDd0d0$mdC5^aU@mF+ysrO#_Z+8S22HcG;
zlM-aodowUb5ut^TfBXn$mXE`86Ogbx>*eDk^Iy%j;!_VTi?94>EShIc3H%%a99lX!
zZ70)B*WUY@TFrgZu?Fj<+=YHCT8869IC5kk269<kv||Eon(9zXZ92u7kxkmhaE57l
zx`EQwGp*r_<LJ&5C$LF%80z7az(VH;HaYzJbYe4gax3ROx@xzGs{sOvYT^WK8LN#@
zT(;1NI7*wKHbh~ZsRq0p@it8hGW2z-K&4`eZfr8%wrEBZB#-q*FnOc`JOwy3*GYq&
ztp?(0z)`J3rb3iXz!Vm>PNdTvjHj`ALp0!|x}&ZZCvDu;eNwa=ObTaGDFrxMVXXNh
z)6QTyWUoL%1sy#R_-O|~W#hqBIuk>v7AgZek>bEC-B61Faokc>Oo<sVVS^`GIAH;9
zqXd7Ugj_C<Y~F=i1oA6@vDH9vOiK=OdEJ5+1p-S1_*H7oR09$@*@ck(gt{Q5Uf4`^
zxS6-3cNk(<?5F3CX#uDzCa9u<`CY2t(*+HkqA7SmSJ!2_$0@Q@Pez}K5n3vPZj-bV
zf8!5I42{|N^k<Iaz=;F!{7^+@d2d9VSpEjDv<_6O^8Q=eN!cjD&c0OY8~_|znpmjC
zPd??kBR{cJ#s6{beBHNK_>m}s^D3U-`y2`b8LSu^RI{om?@v=9-BOh{XKEs_Ta`-p
z(ivACJ=wv?{3XeCmDnro%BD+`?(8PE)c0-pd0UlrDFPsZGYln~6<wJMni1Mb3$bh>
zK!AjHwd=x5vS{->Vw!jEaExbw!IJ5<i5S`yiKt;Ajyyr4G)j#Gg(GB+o`mY^nHueB
zQ9tRGTrj~^w>3pE<eNg)7&d2urdhfwtx~g~Kobel)(2|LW&~`;mQ-Jq%~iaIOizJE
zy&tO5rGcemTxED6^>YJk3fvU%2xXE^`WxEH4rko5rJzPrrLbnkZj&>WR)wU=QEdR!
zxlJt{8rZpXIy2j2#E9fF8c7w5&%jTHkdKGq1w{-rT*QkE7+@$30<}=6z^65>MVHwD
zsvuJOrnN29aI5oD;#blM8=4GM7chMS5QvzdxU0xk2d`W1J2tG^8iVeuv^y%rQkOGs
z0v_X;L%a@&M(HW&dm4dEV55k51Mp5>Vq}$#uYGMA&mGtU&uc?OG{<dREH<8r%hkQv
zCLY_~j89h2cCa}I0Ed?T6qn=s{&3j3<)Yc;hkkt3@Xbxm9ha&zaWaQTpLhaS?7kd>
zgIPr)rx8r&tFfBsbdPtt7>vo268|X|1kC}P>zh$5Q`N|J9JsCnmk3NprB>>`L<(0H
zBGf8vG+S+iQJ@UPB2h;Knmj;ssB#U5?Pb+uM-fH{8f`33b4c5PGXT;Sp)?G%8bDZQ
zXxFKyM}dywgJKf4$p~E8Hc<FP#IYXE#W*!B`QU=<O-`k8lET?iP^9CgfMd$y34wzV
z#i;=-N<?XBZxcAB-Q(Ix(9r3rSyf5|r+-W7qS5_mK1Z8tDN770&8tzqT9Qu>s?sV#
zABQf;43g%InK3M?Ql&(IRN$lcnUKrX(u2<AQvyF5jL34^19LnG+ehfxa0fY(EYQwK
zw6j1Zq$nxD(m|m1JcAQ)1v)Y^edLZ%9sG_dmC><~&V^DeN?BAZi8&oeB$^iE2|$VI
z)u)Q_y;kQMDI@jRE)6`oG@&^?7~);WJ2JH<B?{gU%ldE4&6OBgVdK%q7xD1Z&%^Zt
z#WQ8y5^BMLaCYgje88W-q0)Zt(Ai27pM!uyi^9wR%lP^ShWKkX&6V%FX?*0>0aVSU
zje7G49(#)6n%!3+U$jwPpv{;9jW(9hCqvpqo>s29CxHrMh)6bN7v(qWTJSvwj%UNN
zv^_)=Ca9I$Xf;AKTTL`tWrSfB5$Y<ENf4=O7!f3lI-Pk&6}6P1l<FcDh{71G8KcD$
z*fTbk4{P;taS|x4kZ1=CVMF_zgaK7-sG*Tk3?-DN9thAN1EyLuh^Mr{Esx8Dj?<`l
zsnL?sC;}Rqh+w`~+>I$^tJW-P9;FC}4%)ORbo_hiUF-B}bQ>^J&)<~4=~SmI3dDqd
ze$^??c&aRRsDqrqoA@nC^K8kb%P31yB(@UAF>u=VDd=c>R2R~UyGCG!S0zN_jt}l+
zz+4}8z5su?2!GT?eo`PeDG}KWH6o;!fKyKct%WvZyRAAOt<VCGI4trMrrF{y^&eSq
zZ6dfi9M@9mEH#qGNn(VY<PM<GAgxH^41X{kcdB$srCeRRdj$m|bw<?hV>-Ms{hIPW
zDw^gJL*q8~9;o2!4?YRottimSxI<_sv%$%^yYm4KzGWeN;O?`TvpGir$B@XPoK)Gp
zcXDyl(S`COL&JqDL_2PA#zHJs_TsT;bGY*2OOY=~EHBX&guuo$X{HfP+JM+o;n6w@
z4$F1md!DL<xGtqmwE1IH%5^mA4K$iHgkc43(LgAw2t`@xU~~!80cS+;y5>fs)o54t
zjPzB2lYm8(J|wW(30if5<>OpcR7ed=)~X{@K&#2PTL!!)73^$115-H;lYOSKqEpgV
zN^uAvGeB%<UtH6H?KsfU4c!cRt1Kccx~qhwp-+h+d`0SPM*wEV|8_dVyRsMB2wKgn
zIh>Bz&)lSmqO=DOO(<ZT0FQ1;_-7j9m7%hul-`2UIzkz$_z-tXhe4pDB`zt+l&UQ?
zqB6@-K*PNpY(EdTn1@%ikRJz%D}l_QHp_}z38tT8N-P<)+h{kdNZMtHb{#Sf;ZPb1
z4<66Kv2vh)In09VIq-ZNo@>LlZ8-D>!qJtdga}*Hlc$bTSC6!<nbCV`Q$8Kt^pefY
zq^7BVi6MJ>runGHC{5Uyo^RqSUw;aMFRA;x_5czz!eg^{=L324rxxOSKY1>J%{c@(
zy(IE%(BMyA&DuD$RO8J;Zi^d7btNV{x$qbsea6Mbn|H$V9W<J;N&|E*tzG?ebfdeQ
zNxx!SE?m#mClnJ1+ijF9%V;)QXtpW{f@OqB1)*Hh03!)t(g?-|XRf+2=73S}SI?DC
zm&%O;o=)`jrZHD_;trygK%>mT4gf9*)3QLez)+k5YD+4;;xzF=2ukm%u1mW*f>67h
zQW7F#ZP-rEa5<VZR-4==l@67onHpKE2IiVnN_$Nh&>&Gh>2v6y$-g(H082o$zckD{
z-x(FGr&*{Zt0PFU7*_yfI>M25hb!7edlf7H8zPIl>ZLTD)6Yxqg#%6)s>Inwd!q5w
zs0!6|3`#*MjdInEd%gyn!94tei%bc~PbA2V>eoOQl-Xw)$|oe^Hbp6>4V;RVN`;=F
z8CB6x7Y$;M=v{T;@d3EaLHO1nY%2%b_Te}LJ}xp@2ic6H{!Qd{9C5^C6qdR@rgp5V
zWNyU8S}wtrwX&HOtGVPZSEd?1js0SA#6r2=#$ES3gIF#pPh$mURurC?`C2v-Gk?7-
z9{k@p2iG|SIOtph>e2Iu9k+0Y4B~%)#p+piwI3x_)t-HD`U@)k+P>y;WPKtXn<^Jb
zVv6^*i=Jas3SuE7E+uTCT$@MGYUwtCU>VJ50j+ozp;$yB8fL>;DvD9Sq6Vg=`A2G5
zLCYv}R8-S5Ye1c8rrM>fFQs6y;BiROQ$gO4Xe~3$?_sK$v$R52SZb@OqN0UqwrXS~
zy$T@)HBk|xKw-a0si--K2uDi_$I&M*VW>)F%ottT{4_#9nQ>83i?TmD`&Hw$@zqN$
z5sVM7w&gGe=~|?wLENNOY6OZN`JmG)<KU;L7sFAg6pD^RX#ZkW5mQw%)$=B#%{V=t
zB5)y9I;FhkRT;+xqxVP=KNQ*6V6F%5da%6=oPjL7K^K`3hJh6l`7x@B>CdEcfMNL%
zMXA&Z5|OL`36;ZQO1X8~qsClNGbjxb6cGYZM@!BrU?Pskv3xkz5IkO@8DVgF0iKhC
zpYh;&Bu91Nc{Cx^1`Q%3P^8q0tVz{%Nh@;Hd&dmnopOn!F4tl|{aeavhf0<jX!yl1
zKZQncQW5?10ojfho|?NW8^trvmc_mAOGN9eE`NWI0M408<f3c;n5?@W;se>bW%)h{
z<2Y~P`D35N;S*1)^WUeuf=*QCBA1=SU|}VE&qfqAP-`xs8O^KNPvrI=$tq&Hi3Wsd
zYc5BD42kVhwN_f(N{g7rcg37gdj58*i0dH=jq$pUfT$D;AtJ#ODqT|_QB$I^z%ctf
z=|?1rC5Evz49yB%oz19Y)$655M!iWA>X0S~)kB}CgIV!5U~rXzyD5*GF}m6pM^};5
z1}E->O4-`MN;QkJSYMGlTAZ}2tn+d-*yu`?(eNm;*gP&_IW>wZgY>SwXlmR=k&bG)
zq)R<LH;J1F9gTUpYG|aiD%Ak-jEa<~jIThRA{^I+<!52#v#<+}YJ$xXNKXNNhC(oj
z)(phLa~$n9rBVVSYI7M!DjiZicY0i5=OUrMr_Y-V+$o)=V{4-wR}jPtsH@M=hQ)oj
ztN^b*1cwj9;YD~(9-iyL_kHAY9x}cMH|v7K)`CLC{iJ<+MjvJr6|~fREF>78u$1@p
z=kIwQwdOI{Zlb)8NozB+@PONH&mF7afveleVstKo%{dA<=)BR@=)wP6atiAkwWB}h
z4GafD#&)H?h)ollaO>`sxP03f#!3SS!ZwaCE#ctYGWHxgfIWw%u~=;(ib>lQz;;8}
zPN=IX%!aLcT#Oz+70s)w5mklMtZViBTK|&jk2T4lwWwWS(g2fIy>yC2l?-+Ak^iyc
za~OC_m(nXI82nMd%>aHD7}=mLF38$|NJCwi(oCb$k5I!Q9g|HkV-&m+@X({fu_&D}
zWoZ+ch#ulsX;Em?Yds0MkgHir9pbBJz+Hz+NjuV0b1hS5S6%H)kGmz3I(76@))uC@
zG4;?<fJIr3QX5Fc-_YixC`Zd0nIYbV1~l$~Ihwn%vspNK2bm#;%os2@B~d6@)aj3A
zP2j|n)S;iK)`f(k!7!%0hihZ4-b!V60v-WcDy1-L8f{rfzaw>*h!7>q2$E@~gePq%
z0gz{nB4ba$Qvfso*UrInbIABvxE=wJk9^LD=NJx1ML?#aMA8LcVq`>fb9deI9A*}d
zz_RIzM2)6-F}rl1-E15WYW(3#o6(8dxe7MtFyN#iXpH6fYd=3?-#S&VHonjH-S9{5
zc&Gh?uYENpCmq!5K&vI-S`xc2urM$}e->h4c?pMRrm^S55`X%@9G-n{8V8S^6bt1V
z1@v%j%F{hK)Bu<oo2PNG+723YbTre`M%`&F)Deyzb)t_|r(Rm(uJd*s2@z<hDFAfM
zYA|JjzId1+KcT^ZS~rH)Nvc+Hnj|11N<sh{QlMsx7&h8+GJ2Sto)`&-vYd35H~pJ>
zmrPXCnJ`JgAMww$nMsmQ)hVUPAv0hK6w*0fU7$(J>H0CKAyl)#>Lr^Li(8UY+NLK;
z_F$FiNT+Sx=~~y;H~MCH4bwxZqX7!psPwJ!Gm=nyure9gSqEN$!yf?(D}bR1Wel$(
z!P8H3G#4bomPDj{F9aBoyz0G6O|?{h-9=GTdSir0iZnNqIo0Pz@3MhGh4qv^(M2Oh
zlGM?NE2y^*!QwV7mW9m+;j$q()*w847+I%;j9)}Pn?)w;V<4Zw;BZzM$14Rm2P*Xd
z4?Xb=W|sG<_7lP*$0>+~@)M#~+vm3Ub6e`s!G&`fY|e4O(aYj4ixLkbL!<cNxBUdR
zuik`5PQ{o%7;0BQ)j}-cI|;HjFpvSp21=M39>uO#GyLEiiM$QO@!3T@wf7VreRdj8
zADqRZLvvVIsv}Ag*mkV)b=UE<C`+xh{$MVb9goe9&!*Xh=!yo@T;A{pW^T6%yNRb!
z4uMS|r~tG30hf%razJr{p;ZUkb-G&jC}PRR)Kru>8FDFcA5p+$<sb!>rl~?jdsXRi
zY#^fQl&L5Q;!ddjK`EvUPm^|zQ>K@g{#E@FI=u-xy)uLLda6`uW2WY9D5cYnn>q?o
z<fy3s9*YY7xT*V{erc(Ltm@t-jgd;#R6Zz}@50JCoQ%v=Dm4a-uF<1rh+mr71JsVG
zel<>@tOpNLdC;^Fbjy`SDBOFoNJrLn4^TJC!W`8L6<)M#WmK=nvL}dT1!1y;hB%;p
z@A5o+cNAVQ1gDmTV;A7CA=t?1>X(&ZdFd2t)fOzT4JWU;Ig916TzOj5sz<Vsd+dr@
zd+*V69c<2Fz|n8KXBVvjcE?9nj_!EdJKz3;fn$%^-#8qo$_C~AN_kJ|gu~GiKr058
z>cEKx@Wix$^Hd^=<SjB{Va3=uZoFs(-tZba$s^2{D|q(E3?6>)Bp!L@1oj`A#_S>i
z5QpapWPAsX%awO<r`ak!8GB|sb#5Jns!6R#fvS8^Oj`k6Jc$@4hrpUd<rG6^7+A4G
zH(};i0hMLt-J(j_)L~3~xN06G0dvOT<Yh}&V~TWCrQG4Vag$5o+2F3Cvy5*GRfbGT
zMNvUoM6*&~W!*2NTRA#}F(IrWcv2gP-eyq+MjB|e!B=X=ZpPcDo#)0orbBlblQBaj
zsqblfQ>!YsU8Rdj9817;z;hPt98(RM{<uVGE!nr~$D5x8=AHxMKp<=~YF$v(C~eY~
z;zep-(w#xC)2iOtqx$=<$*TGPbf#IVQ17%o7(J8`-l^BCGzj!!TBx^<W4?VD<W`tx
z16WhsfYFI8)=qM)T;ag7LNuEU2amMz_%kO_mo~hD6PGK8ecP{mU^#g7;qL{oIY$9U
zzwy2^%!}-fj}8~szV&Ty{J~}zjkz<6ZDZA7u8^cy?Y2AVGO;JsjnF9I7N!$mVU}V4
zJmBpWD0l)R1%|QVAzU<8!VN#L9dHPMYIueK=!w&K<k{0WaA*<p3(H6n4}NA4*{rX{
zVvNXK-N@OEe7en{%KIek)#-HV8Ni`bi3BLb+0=l=BT|)m3oA{evlfWzCIZoAS8d{*
zaPIhysy?Yol?QmD%b(a5<4&T}t(3n}dKxN8Q%cvf2i4Hej-RiY9BIZo=&FjosR@<6
zb`&b0Gc6DngiXd=L{=MRF-d8O2}uJb-9>FIK#hT)YAsRowe)AFnl`BXZCj9pm|3pu
zLEWMh{up?1ieX?#r<FkfoP3%gsY&H;6PqsZ4%<#`E$Thj3L`D8>u%xhq*fE{s6REO
z05uW0+g+8q0CXJhNp_%uSxV_*gi)f%YO+f8tUN{r3%GdgAg<UvhRZLT!nPfQn4HMK
z8MJ_`1y&f~$Yvo!M?C$F!}#O>{w47bUw+OV%-c`SCJ+8W_pCqn*Et3_`faCSXhrsh
zKN`xfd+VEC|AW;y8p|$KiS)Hq8r7jy%-^Knha~rJ>as0a6_9;`nu=+Y5KfPPZATmn
zixT_hiF~D*jsl}OhE-#OxMJN9ZoG5{;Dwl9s^F=E(|GXFX*~Ai91a{<!qN<d!$Zhs
zOUPtA6*5zp-ZA*<87QZ&lxZ7*5|e35Qk98OV<DwhRbZO*IRzk71coP=DwEe#M>Bcb
z8Y8e6uv^+U*fGQ~aU#?=MQKbb;ImD`rs|APEe-|%Q@~L~bP70Ta)3#JO!A@UyQ^@;
z`0b?rJ3XGp+NM<Xap{Qzog~wM7#+SMm$b;RV;f^;Zl{0~QO_7DzG-M6flbc57sHfF
zNij4APOq7=rlZd?v}aU9rn3Ja<)9fmW`LnHiB-21q$c|&(&@~gFio*~I&1HlXJ&&L
zt1PWW(w4RDC_z0)6cL<rGgviT#FjOq*u8xM7hg1vEvs`_Ii3ZEETCYd+%g2Uktq@3
zViodqAgoLdJ8#^8-@Wkz{Ni8zT=@IHcJFp8cg<T4;Paor_sBYj0LS$DaE=mx?SB~b
zSO4G}?|e^{^9g^c9I9QR=0J7y4n6)6W~nPHm0m;Y;x@`#)$Ayh^IQr-DcMTZBQo`_
zG=Sqr82lr2LM0d-;8;06j2kwO;5FA=K-N(>d3qU-KX)4UJv@sipQz&Ku`<dn5)=+1
zn;V4d>w2;2FYYu&(%fj{eWBE=>Ixq*1v+s<B3NdaJp`=1nB3|ZM%MyKL+_zTtMHVc
zj2##s8rl-dBSu%HsON{?58W}Y`5PqwB+f<o<(jlYZFDoyA+6#VK<rQ&NdK)XRLU&f
zRIF6FJuST}kkM@n>2w3dBc%e{RPWQBbFTX!Nt&s@QAXipAxkDYG`-Z#GS2f-C~uol
zQWHzEUlsJ+r}i^mI}8Y8`$08zB8j>2Ayy@6Jq_{9@j^Wfyn5`jPKz|?nEE8m{ZZaO
z^x08^ZGv_yRJtvS4zsR@)g!~WVE0N~x@{5{?-<7Bb$JX=x<HXW0Q#V43~@mI%s}0O
ztaHT6KEkq(u$e{Fc7=?ntwJJOsKMQ0<9+|-P4>j9G4bDi;;xT}+4^P2n)g21F{3<(
zmwm2*&4}~HA1gRJe(Uzz-&J*-m43M#s&Xb(di2IIbFIzab(9t<bwE}DCX1mHhOUHk
zKC~OeJ4o2BR3&MeCZPOds42-<U<Qn%5=+c3avWF!1`kLKX9Y$JHpa%s@cL`U@%q~Z
zqIMGpk1gS`CuZ@$0}FWenZr0aYa>ny@N;9x7RKOt)cI^1UMJ}g$x1R$1acc-Er58M
z+PuW<31ED^M7GE<M4%IB?nY$|0o@oZ>R_fls>l+ZPNiv)+W5q4QHn(+Y+E-dQfb;)
zzI4O()O0JI>(!&fp{8x6^fO>hElo5lT}L^3Dny#fsWuDxYN#8P!<f=|YT}hvy{J=~
z%1mkCr^@5>dVHo@K3I;y8U(V#62+AaxuP}~Tb>0L_XFg@P9!nO4D_2~8kE#@R1G>Q
zhogBIji!o)A)qnMu&IS?O7TarKr3h|ktqGifNNpH@EEqP8Ny{-#&GeLQEb^%#Ndbz
z<mi2+QevCp9)PBZMi!E~gSa|?pzb3myJ%Nz0vQO~f}OYFjd0aKN=Fl505}>U3F^4@
z2d^fctofVoXOFOaa>>#9Hy%INldE$CaP%5+-u(UnYsVkncH29ux$HWBX{oKEhD4oU
zs&=W2leB^O88+KJUO2`iTxA6+0aqs>4WrlPX{MteDlvP+`55pqqlVSQ12cw&JX>mk
zh0_5;Zb4#TKLHTK@K7FGM)TPAx;1$BTO(AeH9WI_4v#)ew`uI#KZ~XLAz0oxvc+*^
z3R%UwsM4?sx0NtZr3N%y(rPj+oq}?$D~tgH;~cFDh2vTpM90D+a+hMtRgW4FQ~QK;
z*d2k5t{_RJUM2p98WL59vYtEF?U(9wjO+JIdAgWxapm4e;E+1~^@#hFIT@Fv(bJ$~
zHg2lPPCp85+TLTlo)X9UQPumPiET1KXJ9!AHo%Y_W}Hgkg;6DN6zzttN{O0O08Buw
zr)H#D8y%r2FfmmmO-E~sR%1A1NNvq7(TLwxP(#qJs0gX(TUa}s$BuPlxOCe}?AkGc
zjZ+!q3KX*G)QE0^k>L@8s98uFSp+o?t$GHHY8K79uaxdmO;}}m3hR)uSoLTcM_QHB
zk^uNNGRroi2WtGbAGpM>l^eka|6TZ)Ka#m}@4{CeI+r7za{zF3$#KlT^Ua>v`bV$1
z=?(Saq0RpMY^apL5xKQd)RKy|l)a;#)<A-{^n%dwyj65<8u6TIGNpuchAdQLS|e>k
zNs$kwTMi9Rqj9}7`-#TGnu}?`B$^B;#|$$S2f3=mz%hZMD=?U67#T0%+Vumt_R@90
zkGF7qri^Evso<dpkK^g54&v15EJ8jGyEqANcmTF%tU_sHMC8E>B@A3Tp}kyalEc7C
zipr$oZ<MhW?V}czqp5X+h9sq+Y5>Q0>=F>@6Q2&=Z2Ht<&iLMRxKQ<`=rJWKlS*e=
zr5)!6fE7QJ+Ey^eRr9728urxcIud?U<Vx?~xkJ~iU4f8M7EpA<3xHFSs(oQ_l2TtC
z37$Ft1WOW0n=841dM{|ERbu+)RPR)zwKX(CM@=g;2JqZMLga3<hM+l(B&;iU)S;4%
zEmJNoT(JdLY+HrxTT56o;=?OYjXQ>FFQ+$}fGr?v4I3c=OW8%W?4#cB(F{C9!hxVS
zg*=#ja(~n<7xbEyz)>;;4M0}t(9C;JT4u@Mxe~cNFi^=L`_*Os)(>1EmKWR2KmB#@
z!Of$s&HLxSao}799s67Wo09kH%iU<}-(LUfTk7K@JKdS-h!ZnPlLu4fZSRSzQYRuF
z<F2H?LnN!omR*k*?OCFoUyNF><IYAy%2da3qy=QWLH=1%k(gxutpJG3uBdlOjX2R$
zk{T9J<qQj<h0L;rY!w(dBvABX6bCX`J?>%kjbpgu?F48|?Afz~C-0rd!w*j5z)>5E
z@etVX7;>vi@Uym>Za`64vz%b=Fi_f%s5w^I6-1EgsSw2D=!`{8O3{^}G@UW8U4f0M
zP^Fd<BrsEc#@c{Ojj$llplC){X$<FMTE@=+oOFm@I>K8;P^L6)WC`gcgVbLqtpzDP
zb~pI!q*tjxP}%+v=BN=bP(uTA6B3rMKdpt6Kx0PpT{KuyP&qPWkZqxr)6`C&l#+A~
zSg>FtX@_XHT4*<xkc1Uv+y*8`8rXLA0Crun1#1e!xX>zK4OPY_Brr&?pQOrxnmi|z
zYS}>$<<V?qP^q};R<Al}wQY6rA-;*oZ8g|XoqHPfL)FRxx`=Vz?w}(v)$OlLxAet;
z(p|C=q2fT3OHrIFpxCbRAO0^li)JMXKJve#dq?x9*U#6FHqS-SvCnp}DY}=g_v0%c
zxZ<iCnrl{HWlzr#*l-oWr~*Wfo0jg4G^JV7zohz$j6X|CROnD!b2*x{>;RVPBT~_U
znJ<(+j;URs9Z=X!rroA*$rW&EIsna&QuCLL)c_5vr|5@E)EKZJIsB%BY?C2B4-D=X
zC=NszoXlg_+8lOWJc;-Hn+UU~nt1ZzWjuE89_%@i#r)|3RECD&ZXSTQF^e*BJ7u6)
zN{}xC7zIMAI1v{`A-S4wqWh>6hogLGbQDAHgBq(twx6B02IcxkK8ET&pfrnkPW5)A
zbb)#w^!t&P#nnbK0i+i4b!TR)&0`uj(^0r8y-T~$jc!S)wUxI_cl?h23@NswDGqvC
zrV{u~5O1UJS6L*$VO&jh2uJ{_TSN$a$oE)P>l_Pl7@^fzLaTZjXwM?+RIzG>g$rLb
zgiEj3fSs3&WBu9^21W<EJE0k({cHo`NENOXA&G1RjV!8V4@+eam70x4<e*Jsg;f-0
z#_y2Sf+9x(N{j2VzM6d{>B1){ib*0vXd5fiw0cOk=@yfmQeo9SZ%I8ll`ftkN3t)E
z5vOYZ)CX^kt4r<ikN?#hKHJXx)h*T50zKMUF*E!e2OI-7-eqg^(e(#*?z}eKwBa>;
zb}m-a4b$nDT@uhJ&U@xQYcMhGc_u|rpwqeH8`Wvb4x02z$=S{Kdj4~_tgOb*($CB>
z5O+kJ4_!!YO1-Gc<!auCs$NufCes7eX2c{y&Jb7<HHv;>j?A);LIo%uNs!NmiU=K_
z^l<B&OStuYv_}FQe5Qt{zJ3x<J`~{4eGbA6qi9|;itIIcWGA&gr+R>hO@WXGx~1p6
zNnvPnr>T{yfst>Ovc}LUi}GIX7?O3l7S$A*Muxq16eeov&c03~oOA<e?Ts2uV=`9l
zC~QUrr|DJNS7ja}-88DLfm4GCLrm4fVNw)Jo*h=bVS;o>3r8iQiiB)ZHOhi*TdMm#
zZUD`C6V1hWB(>AXuz9Q~)v@D}94@<Z1$JL@88&PzAv>DWCxV*A8zBywn(ZUo3U0x<
zd=T-P0X+5RF&5@HBC1wOeN&%5fs7J9>oLZu=MhbSpwy0B`3PXNy@nLZqQpp;EE*?c
z%<t*-6MsbS7oA#2w7;{KFBmYRo<VNIc|OO7-KP8Vzkf?}_C)=L`yP15M^5EG`hDg4
zVsb8l&Y5-Nvj}Vo-j3mX^4h~&HtqDU*!_L+!eU~pF{mBoXqStjmA>7Ykn93a_p8pI
zX|w76A``vnDM2Q}(O2A_NIxCA))_I>;Um%+PMz7>o%v6lsR@d3&d_v8Jtjqq@T9W)
zBu+(jb#uB&WGtqN90isjlZ}xbkC2`C|J(Z$D9g_4JPiHLc*m-`HFfpejiE6E9KcB=
zMTwg2NS2~!$yr%`iDWCzBw5Ky@>a5(_w3lRoOpP$W7<h9S+cEJlqge_NQ&Yhk`MtB
z1OYS}jULcbb=N%K`JVBuz4t%e0%$wSdSs(eKTus&x9&an+;jea|9gM?+usIo%mZ2(
z(CcIQ#XVg9QU_OG%yDf{!Qk8!8t<CLV15dF-2kI?;Cuf}fg?vtHiC3cQ-OyHf#UG6
zIVy{M2%qpxszA?%#KtY9O$+bBrq7cumo|l{e5rM6T!m9?WK^jGrQ5mTU0fDn)kCG>
zkz5UH?o3xa)O@AlN1(O`e2J(A+a>%iP!dMf1EM~)?efs507o0ZFa<t-18ANqeahk>
zL$S9UV6Y<`rQsTotn|@a-a)##jyT!I{L~N+oeS|T@0r0{-oAjd_s^j*TbJ{u)}5n_
zJwZu<3#pH(fQ0>yr1K_ml!8+su02=a<NvfovqciKrum;zUsTLvu~}?j*jr@4T5WXF
zhuzp}UxW90Lr`CAplNPW(JN(2sSJg@w3r#<6k_>}(8F{z#N7J_*gl;P|I6?Fo#wU0
zt3Q9W_@)26+wZ<%q$<L@(b&|Y<CV$$gHN40ajyBUxBf@N?d>9@*p~|jc(N$Ms8f}#
z2MNe=t6Z8KPU?li3<?+MF=8B(aZr<oH(-J+EHA?yJkdB&V>MwsE<e(kvkt?UxW@}!
zGC|qE<4W%&ri>R*se33Z0ydNJ$x2Us2`Q0)=XU8M?#8J0VoWX;Xw(YSrhHV6`8fXA
z1de~3j}In8v|rrDov-ZT&S%zeZPUl~>1piVcNCL@NzC~Hx>ZIW;E}?hYUD<BR%G}X
z_tO2q*~4K^i2GTSY!D@qsX3++1DETqdvuvFQ!KAm1mrMFWqU{l%+$?0Ej-D~Bg0p!
ziARQqZn;#3>-a+OB=RZ-^z)2|#*q+}3b1|?{?7Gb(Ye&d?v*tJo0~X3Il_A%sp4Hf
zI*Z4ico=8zZ=pU#Jz-QrDov5K=}PF*TA#G&rK?=x%n>r2Rl;CIY6H7D?t2_~<UPPE
zU-KBOCxLrzXCq+}he(|GQeK?dy`_YMa}xBAk!!`iayz|=G0{<;$H&sm?^4evBh3bp
z@t!L1RF1j-z_0%85C1^>zxehK|7WKMfA0K6{Mv`!C|=H8<l)FIiGnGAru^ZL9G`#m
z2fyvTf2G?WRN}#qD0sHTi)&_d8xOq~lQysHM5;%SI=1#q#Iqrejqq&j;$i$jp%=E7
zwDD^6&zkDb8vphQTzagYDAK>G30+uH2@vo8Uc}T3Di4xwn>FPX>Ba|sAwpTIPhFMz
zi-#VnUWtjIM5B?T(n=986bQ~xN`+pPBfGhW^)IgZH!k#xwXF#0{1n3X&ZF_JY0NA{
zpa3F4fn9d_g&dbs8kyXGu0W^IP!^B@Gj*0q4Po9|+{Wz@&Ohr;o5b8EP`zGqH&M#w
zO-2Bbh3N>i*6GGP-vd^6fudJ(uc)G1(gMR|#lzf;j}vpiQV00Gmk01xx_<kWHu{%`
zm@7ub11ErYzN3oA-`2v}bJJ+H=t3%8(u^b|#6l8pi^F4z(^#2Z6=`XFPMxoG=#vnL
zK7TSSG1wEFD#<*2_~%Qm%_4DirYq=8uh>`mX?ly3XQRqORM@EGprO?dX;T`bEYRH7
zvL56iv*^82Obn<9v_vf`P!D}fS9_TKkqBSDe0BKW{D;5ST=l>3-o^fBpME2N$ll#$
zY#QF2{}=w*%+v!v@xgEVvF@ll7xxCFS*+N(w$jD1<+d9GNh;{9lOeKkzD4hD*5L5w
zN;gt5i!~p|q|qg`l8%ceG?Va3hf{3Wbh)3F;WU~rD(q5<cOLP)sHl=^j95h6LtLdr
z=?T%0!!UIml{Bg<*IFi=7@$T_Vj?WjsAq`hbNI(g1QdGJDV`~j-`T?IQ@3&b)4Nz%
z@sQth9CP1x9P{sQ0mnjKlieXO*vV0<R=K3LLv#|BGSx+-x}K^Szt*Ny#39(|hIqQY
zFlCa6K0s6g@))K_TUlup>mKjVc7TnphdA@$rG$UTIiNejXr+hEi#xdf!Y<Iu@zyhS
zy!CCANowN0he%GeBJWL(3-uq*#X05TQ8qBj_)wU{Iv46ZMcCb(H+ghvO41+FoNz?R
zfD9N6f#Hb$=HZ@ufu}xJ;DyhZsMI`e1?2DZXmp6JYQ$6+B}PSGD$Tg|mC=!YVK%(t
z$C$LK8Wt+qiclFL3bm>fUQzi~=wWtp53L`m6d(KOv)TXrlYdn2On&~s#rD%z?slVd
z*BBfsia8Sf$p74oANpJ0^=&`i_5Bmo?VX+xyK)FMPS|63#4<?3MH?CSXJue)vtHGt
zjfJ47d7Q+}`@JW%LusBn2M7{ID6rGaWrh7H42TAKOKgZ#%2@Z~rU}HJPfQ*bfs|sw
z=p2Y&!(=ex{6ta^NQ8Rsyg-vs38J&-;{(mG#6*R%WEuR448chc{_z-~j0t*3ukB#-
ztGifyu7~xl7{$>h!gtIfd~z1S0-@T#Xa~r;xzrx9MNlD^BG9n`(xnI*TUTE~&a>n{
z{+YUN5_nEd2c`3)5>%r|yy}dE>LVY7s5}c`qXVRiLo8ot<JPm=XkQ;<BJpr`KEz`W
zR`8Z5C-K<ZTBy&F8$ut6;u+G4QJ$`9tmk?#6ms(|&=x@T#v&ub^;yKvBM)W-^vST0
zk)aG<rVWrhhdsTb#O%D!eZv0WpXI{qvJ@e;;gEq*WJuK`++?5h#^i910;TmV;JO0z
z9b?3XM&o^wwDP&dj>2{-K8dLV%?Ox1vWLkZtP~&mxzFGi{{C07+xpnaJG(D!+|5SE
zyIXLZxytu_f5U(K$G+ozf1y1w@mPIhyKmVs4yfx=@Qq4<#unJaQQ240a?!j$pUKC%
zL76c;8gmfZzpA6+_mMNxVH7v2mrR85ZVYyz{3%hiqfU}q^G|63JD!e8vGd6=KZqs~
zx5IUIL)~qG6#p7Pl`>xR9Nqz?$CU1Z5P2nov9y4zL5W%|MRhVo(8}N)58xlKiOYcz
z^3`o@Jhg;dpV`9FtrUBw=HS2Y6k2be!{mt?Q%#23l*=a`5AEcVB4;4k*`@hv>t5sR
z-AH)^7jhCFL~?^%|3oDs9;%H1Cj($s91dLD9N@~=Ht?x0>|p7c9R#aGOb2zm_kDAC
z=l34L+dtSsW0C+cwP5msF%t^uWKG)+6Xc<>C!;|iWnhS4#})Cc0WF@(a6}AZ@m@wr
ziIM6*#fC<Ok)$J}f7THseP37r{^YlEtX(IsR8EVfKm>WVnK!x?TI@nA9GdK%LmO~@
z=9)9@<v1lFq5~}khYE0sNXhgL@^<;l!&FdW?ra<N?~Akl@xT7<@DDzE;rd47!%u8=
z?~LwNOvk$`GE&jo?wQ25Uw`kDKhQmW>RZF5^??*7DB>9#5*@sd0F6#ijmgp3A!?v9
z8MKMf27-(azq7j8lBuv+E4{n$QEmEHNXg31NMSkS0J^oe@n|$}N7o<m-?cYo5@_Tm
zs|m-oU&85O5~0$O(HXFq3{G59)(6$P$3jyq^`JUga#u~S<nXKFQ!DKf^)N@Rksz8*
z;Vt;UTnulf!lK}$eUV+>#`;$_arx<8TwL<8He1Ksx1PWgA3TYABf#!zfixxPSa?h%
zVXCj0G<6dUge5L$;i;CsA@PwK0V-2sFiCZ=z1qd<g>77Zb`RGtbg^-(hsr3&TaLHz
zo=0c#@Pku0F;hde5@T2b-597o3NFwj%0WQwddR4davyP!$Z8RmV!TEh+OZxorLR-+
zTuO`*kBtjuyXZT4E|gIsqmmjUBSK#^*EoWt;#nn2LH|>>@5m7kyLWOt{W~S!13fna
zswq<*t;4Ai&r5GKnpJJQ9#0t?@k5lRndmne0W(XSG+~ve$$`>Xu%d9C=}Lhk5BE{L
zJxTuZkAAp*{*_lgvgrNtpYIRv&dk*}(cs9%sE22p)8+Tyc=W+<n|%C{A1YQih9S4+
zbuvaCa~b3=7o>Bo<sIB(>6DS~KA=J>`Li-Ql40U7OC?0Ox3$H0q<xHTCTCD*rG`g7
zl*McGVJRac29XY`$#NRUVZke7lmwuWmst)9+(}38t<vhclprXC?m?jzwUME8GZ~^P
z_YhZJk(!)@m2jLNP%4^)!ZK7Q5`>g<pZ8EKMDUwc1YY2m<z6v5zlsZ=+{PC^-Nv=D
zhDUzn1m5yz?qzw_w3|t&sap+bu1qcxm~>sLwGb8RTv?ZpWpA^M8!zqP!WY+Y=h6;F
z>m?>*ACDfN!h0V&g10_AjT0xR`8u%>C8u1Bq$PzP``qIA+ER$t5BNBGKaj6eXFQd*
zQL&6I_@oRUwO95qAP;6FMurRyVKL;TC8QZmMuuw6h&QE-jQ-NX=FCN+yQ_I!YI@OQ
zbe$KD0Dtt0IYw=ty;8oX%;Xjy+zmO|aHxB$=ZY4Q_f^|puDVg1Q{WIL$<t+SjtZ&R
z_;_3&Ysj3M-a$pWwa~+qpW@iNQ>@JF41fGbf4jM~{k8w`>fks2H=&N)U7?ltO$CYl
zDSx*7;m@5p{^SSV_m02PU*F4O>K!EQd6k#oo~SNK;6JJMEDoTnCytRSF@!!h8znuY
z`A6#3YWOug0~nyztXFRFOOl+9cS4ws<N1tvM<!#zc16`Cx#5&~jy5{RXi0^#1|MnS
z>23!EG&6p~u_E`c=3OuXYBiuSNw^Q;L9#1y|0(LU8F&mb*2n-+hQlvWi8F*#BlrtL
zzdRZtXvPJ0`p7R8*ti+sQ-8RFU;d*@s63kD$N$E6;>ek440kfNc4TA-U?ua~Z2FvG
zOVR?HYaP6DaSbm%a|d@W?!w!NaJo5xC(bnSwuf7I<kT!q&eyph(G+PR=RRRn-A+cK
z-}bP*7h-GVqh0t|TJx}n0zdx01gMkYXiNEq6t@ByVNa=t0edlm!>|XV3=P%6k(ZL?
z(l<QI=y%R8k^Y5hzN;{Cm3Gz}oRpMF&rdyD$u8b=pNChzP~y^4K&@e`>xIZSJ|En$
zo68#<Ovl%rkM?j3aO@Zz_MXI};rr=%J{f-UW{oI)pxXe^{RO7{5l(-Pk1s7=9scBB
z{%CV2`uw*q_CEXhyA99zrWqX8wef!NZ_G9x`|IEN{-5mjM^jbmu3#M%>%nN^o(7FI
z_eH688d0aQ0E^U(lp!&ONr8!^EXN|@>fq+P=9MULScf(2MHoGF7NAs<OvJ}Mh4C1?
z#u!M|cSuWSSW1e)cywl&-%oi`JP9?qP77&~TA_3xR@X$%l?)AIK9uolc&I7whqy*0
z9?wb?z8IgXU!qX}Qww|W&keBsVu_2N>Ep)L3>(7`n`H&<VTl*7zkqJJg}?qw-;Z-o
z9>vO1hSCpFp@lZeaO>qYod4n~uD-B|_EHC}iigKf&)~g}9K&1Rb_7Sy5cm{GZNgC4
zgtTb66I||NI1142dRX7~vAPAU^?WXT?UMnb&r3q`>%jZIv&5hKPkiiNr%=hqC@sXW
z<YHJjt3-8f+Jhm7NsH2JDPzTvVmv1!ijm9*EsCb44y6UOvuSZC#Evi<+nHI9>o!04
zFLN%C<$K59co(qjVTTZ^HxC*ngoY{u;c9+c-XXfrg4M96>wwG@Me}B&=b|z^JU7*2
zbh&40Bb@wRzxc(Ed@lRDfA@>kUh@x*uXHc0-AzWv`)1)b)6oasH{pHDQ{Vai|Fm7H
zJW$=~c7?2GD!XmI$k-cxKqbdD(|BxXE{<$m{1Qk0PXmE2FUMsi+iVukB!eIG1kkN=
z)p=-7hrJ@9^ed2BdqavD<buqOWViHzvV0$L!IhY~_JX*ll&-86o(35nVK%FYsp#*L
z5tFhC0-Ni!=E?X_#)~;e0%jkX1Wvpy$CZCQz|+6IioJ4#`qTtghuiq_;>+0XbWm^3
zVy{g}p8@{Xzx-aDc<XU=w{v{;4=>{5zj6UH!#TX~EywZb1Cuy6-N2dC4Pd6Cy7gt;
zY>s6gXz}+;7KQJ0Lu_|^Z1y~CbbV|OfG(w=$rEwZ{){jm!8V-&KmFH;3lpN(r<+Q~
z#zQhH+2Al1L;N8!FeXG2G9PK_aPKLj>!Wx!EMvmW2#uz(o*P=eL}P~m3s%c>=-wYa
z>fy`3onf0=GglSPCbwACqRB=<ZnCPJH+URpu>5@<jxsuim!pi97$@uLgw!BM85}KA
zPh}n?<H|p)3}zK2=2{7ke{Yfe_kaB(@y9=L{?*OeuRXEbU%PAiSbc*Hj(q55e6H2V
zzw_3UkNseH|Jm>I*EhSgnMi9?Jpr8SV;H>}EY^n`yM8uhSsI{OnHH{#awZprR2svf
zK|2}YMB4aBheS4jIs>75Lfbw|mJ`I;DN`Gy>mbz6`v7QNE?`>c>EozMYcWvv!y1>{
z5wzmsOfo(MGBbJ6PJZF|sPrlUunk~hk~|;}wI=Y$69F#%eh;7eS2vM*eN0cb@YS7X
z@r75vh&0U+#dQQh6ZOVXY^-;Iu!l##<s{l0BWztQ@Q!ou!TX<l0PlVGB;Ni+2+XF)
zb~AD2$ekjI&pi+QEe|{F!FX8f0=tEeK4pxkri`;kRA?%-Yot0T;f;XQWJu^UZY-7f
zo*ydku5XX9vML!p!e<6O0(~v!!p25tmel+Z?JY4rBETkL7KK$Zbrioy6#$zWV1wT%
ziUZd=c|IAng`>dA#S$-ly5OE+Cf`ZMRe>cmk+o-HHWC#wK~p8vro@0TV}&+TrNb-v
zT@~V%3d2!zfb`}>!j+8`Cm?k1F(O!=K9d#EqwVC+|HQ8}Z?3%b50{GH{BK8un7_FU
zj=U9-`)0i#`OL!1;~)IMyMMC3wL79NJhDd%!*9$MyV&rU!5Md9oB~YydTQv#$8~u-
zp5^A~gYv{MUXe^rnxxEBHKCJG{kiRlYVsx?jd(WVDyt~UsifAxq5fRfZ?m6C^LV&%
zo!V4g`jNQkDof!Q7V>!bHRK6VQ#mz3jk`^Thk)jqheor+TizF9>(&sz`gd=m(_X`=
z=5ai|`G@%As~^UR#yfEQ$amn(>9^vMlhb(cbcrNg$E&w);FTNOSla>i20*{JftlJ#
zG{aMPV7`W*{>igA`vlNlDUpnT_NI^ZC17P2Xj7*Q%5W<#9$jD-<Wn9Ae<|j!;4SjI
z)XJ3@_Ixy^GyLcOQ;5w?N!1Uj*Hk71Jno=r6#OWZV&lWq2)@e7km<jR9+yUN<l^dn
zW5!rHwRvhwV2%wLw|ZS@2v7Y6>6SRGYlj-4xj|xZ#OrkNn}V@!;R@*{g<48PXRH`h
zR`Z6u8%+=tqeI-Wg84qeTBh4CjAWV%RZ2LNdGX*Q0bUxslKiFr?$?@0^tJE4+57aT
z?}k+QH?WpU5c5XxmUjo`<OkpS@b`B|Nl-0{oT{0u0nwURuGw)6jgEpGQn3Aljl_76
zf}G;!sG<9}=rU%@78SCfGEizl@I=*bCJjgEcwF})Ida)$Omj^=X+={;U`HJS>i4%%
z+}Pyi?-YVaFBJ<wD{3PxE^a5ID%hEqLSYEGVhSH&oQdQOXrk+OvP5P}N=(mt*jvr<
zk$<*^t==wXt8=)x_X<99^LMb&ydN{uZ^7w@--ml1n85sOfteW}Po6xD#*du_+Q8~1
z;Nvf*_?<7lfS0d)828S;6)&!w#ozu%IsU(Y??H6>1#T^ZC0KVT`CgaQGkG!@rPo;$
zU5pJG4la09*b9d`3RlsZ=X8w;i(0+~+`L@i$msy<WYk#VhCCJZU4==cHCTx5mV`}`
z4e|{xLw7+c=lOYNp1D~mcQZ4$Qwloip7p!H^a&p`#|x}qFW76ObG9AF6f@g2Tb0l4
zj#4>QvR5j#cy&KDnNn-Sd8Mk^Q_tt8+QLvFX!56&^Cwx6Azim9^k04{!+XBvvG~V+
z=v~Q&eyjJJla-f`w?`{PEcm8+ItGdV|Nkfu_%+W<kNv$fC!Z)<Gxvnu;Q)RZ`b_3h
z!!9-To6T*TOC>#%91lei0>v9pfsVmMbZZlJ7{0&iuCg(3jGFO8To*&T=(dD{-FVtf
zb80x}u}GKE=$6oc!*kP1TJ=S;zpLk)322Y4cVsOYA)@0dv%)xpR4OB<VoMH73i?i&
z8OAiIR!V7w)2bQ{sg(*aI~U-0|M{x_%GFiGq&^;b_}s0Jq8iMhT0MjM<Rb{838Y?z
z+PwwvNRAs5IX2T2dzBRZ=@iEw4Dk5l@5IdXx8UW~e~qZt#<kTE{^f72V)m>L$}bM+
zvc*ypk`RwD_u24J>A<i{Ro*2=?GkB^M9rM~E&3vYAL-ht=HkQ}CXesAFQ%LZrnEK#
z!kRy$WJ2hgWNBH*<4Qh+BqEH=s9=6N<*ocubw5<v-?`a>?>HNX@`T6>qtyG6`<32}
zx^J8gb^B^jiHXwCroVIOs0}LQI~i2*^60z5p-5#?8E4@G$%evzS96Bw2-MAjjW!u?
zWyGm|jPNbmToU?1h)XZ${*Qm)yR&o0&&<@bCw~HW!T1Il9J!$t@673Xc<lZ6-}@cO
za6~frIw!4aU>ux<hNe`RjL(>AoI0|uVs;;OQD$A*px;VwAI96U@1>0vWwG=z^y0Vu
z7M)&dYKP^UPu0Uh9%H7nh=7w(pjO=;$>Z|G)tX`B2FCuZB#qTVP*NOfrs~P5Jpzg<
z#OQz*n{Z7^mY!hFNd{CVN}N6y;;B#U;OS>>7AZQ2{RX~t^9$G;Zlh5>f*_cNS47y`
z+QZhehfC*yYd3+ds)zKHj~Dg={QA=Ye*a4aUcP!ANw&>E!mXVzU}_@5$3M1#7cO;i
z;(-7il8zWa_4JnhP@^6&qB4fQDjrpUFMD(xM#*=hMXX48<OMaVKCZk}puJ1@k`BR?
z?5P5Y_4RO#w63R>du!ce@eZ|7*Fdqp-r9546bS-<CCnEmw?w-Gw2o78s$wNG4kdV$
zJ1@j5m3ct-osCGTjg5L8<4<Bt+z?Z-yrp`dJvkASC*vZSxRSj^?J-i;j#B^hIyO3~
zT$A;7fnwB*|H8L^An}W1KiiBJYOe_c4yM78J6|bI{y*ni4-~D*6GfV(qD8_tSCYMo
zv}uNmcj%0d@mBWt4KkK!Tr7%hSm5~#6bGzFB@NJA-&w`Y)C*IL4Nq4iKV@Te_aoU}
z;k-ClYQ^(;f|#9Geev@=pEhhVLT0yfNoP(PS9l?c>}Cv*4%g(^Vr=vTq{&B~j-uyl
z!;=*_{eXwnTPc3;qt`L=wo&yOxUzm8FRpzOwaNtiU;<G%jY_4-+P{NtiOqEn7r#bn
zq7v;54`2MF63;)E;_}6t*jT%QJljDvp2ha?D%!~vcwUCz_!sMF%>%VS$_V&$X+dyP
zI`KH9kGd=d?%l0DJyR@dJq|6JMxIT#9pcrOGbIsWcYEzQ3dA8&U|bukfG{}+HH(~m
zMyi3ehpQ*U*nDE|)JzU-h)BV4ATlG<M}>z((Hq5a{8f^UsDOcdj%vd&a|CQ`=>9VW
zN1AMqH%xOwHWLQZ)jS|0qYVvvKKVW);}|M=j-CtP&@)Ya+_;nA;rYjtW34ljwesA5
zgm3crhJ{o?(D1@?=7(pe@AHF@%R@|Qfp`^~)!>9v&UZ_i+lRoKFiNE#^-ylIO`*$+
zG%&2WJr*a?2URb3V=yN(=6KqUm*V*>&rPmwu2Z$L7&I<n)3f6FNFz3DxOA%)cIk~)
zv-;94aFi^c+11U2)046+q+O1L9`h%N{vP0Wesvi;-DPGC)9(8G%D+Y!CJ5sOf}n+J
zb)G_7{`e#;PVdv06zt`hr%Ei|$T1jfV$fekRtyWzkKy|@_7;{q&mwAMc=5$myzqPn
zkG>^f<vTvlTvwn=$fv^`s&gaai#96O+mKAs7(b=}Dsh09pUXwEl(8;-ZSC`QzbnJv
za&SA{1yy4?dOD1Is}82d*-J|fH2y7NW*jC0M<|5U9***Ibm(n28}76<zWEelghaqg
zZA@}*Y<P(Ku00#_{PfRiQ(=Q7-^J)8_TEcar5+z;!cXcA3#3IHo}PaML2>-YB5DzF
zurVCDyFpox1HXBn?@v&<i|E5h>W6D}4348Fnklnn4xV^IvN7nRy8kK8ivf=<GtdY}
z>4zQ4uN!%}D3U%A@`?(N*fIvl;S7gsaMUx+WEZc;W88uak6utR5iO1&I1ha}uDHek
zc!#v1lOeB}%~<c6dQuw<$!9k`FHviiICXD?&wgwZSFYYb80Dx%Gq|+%$LM4$sKzZs
zVH07{K$SclE=H726@;ZM9P_Zb0bD#!9!7#;zbos7wpn$J;$R9p!yD*i8}Pyuzw_Z0
z9J?2oo$xrMG9OB1qQr}1-DRIs1!Qy-U&dl5Dzl^(B!v(4s)ywpKzln!twuXNy;Ntj
z_OpbYY?B+}sE}6AF&#$POx3snVn@X(c`*4X59oDEw2u0m0hG_Bzcj#KFq1mVa+c1>
z>5FlilHF46{gCn3**g`EtIV4cLsOoO7#ATtif7}Ar^CjFq)*B4cnUKsnQJ+sj2@MC
zgg)Ay=U0NcBJ}1S3%#Z)z4s0}XzWu8H|}+N1@S1V)Vh^=J+VJb=_KhdAmlqsUQuim
zF+#k;Z6hP`jHPzK0=+ub#c6gvjLauZkFzx_<AA*^IP<F;-!pGVPuADJQLYh^i7&g8
zE)vuWh$oa;1S%|Z4UP72v?0+uy?ztt9rbIK7pKHhS>_XGAM$bOYXf}tbC*&0JE#OL
z?2XoNeed(A#5MR~9lqB<7*s$W3twejp-LpP5S$g-S}V}&j+o5Htyc<a38=L5{0M2;
z!&>JB)EY4^UD(6(FZS@rTd6~Wu4_}^ty<XHC@A36W|54s))<b)&V<;O3_{$zoN+%W
zTEO;tsxWNKI~~Wz_%R2!VQ<9L-Dw(xLppReD)B-nmnz1Qrre+pL=6wkS+%K{aM<E9
zWLUI!L)0JoIk)6PyJ0A!BRG!`MA#6i$F=uD-`Su@v8hjTyBU2E8L}w(aW+2M^C2vU
zC=tg)+}g;o*X?ESvpR(m_$H2T;G1W8S`NBtvL3E3F7u6^nvIx_PjpF^e)K{%K8CTo
zFW|8}8!;{>3^HD{E7W3tR{hoVvn?R2)WEgZpocb4Jc)HY=X*Z$gjB_}lL%GMbI!@x
zLFtP*CRCAZCcj-|9Ez#X!GvEL4Al$AIUn<W#sVp0qZTKTf=-_Ekqm&3f9wX5LIB>-
zk8pY850rLI4Ph{Wz^fqe>j?ZvwYL>xPrMz<9#MCM(V)bLwo8(LFUb|v*O%U%G-6_`
z51vO-bV$z>zx^van3w}58{*}07^1U$%6O6!KtxNvmr_%}-h?&)+8fbEgnp0W5Z7ML
zIaN;Se_b<Y*uqX0QHQYlwXWCWhELXryKGWt<6uZec*o}XEGj4lVEPzk;3SyRMob$@
zc~n2HKYuCx8nt0^GFpt+aJ9QNIBaOx6A~F(V~8}Li9H+nGGSHWf%<-WEnxoP5Z9MR
zc>er4c1E}2QMs|0V?YeRgKTi*Hs$ChMKOG7m~Ua!?G!gJ-$9b5n3xGLF)f@6r8vvp
zj*x+sCu7p%uMK?cT-lf5+6T1A%g0mh#`V?<*#U8_Nm0*pJSc4lUoR47gXVI9)Ny$N
zsaV{k*zH6X{K^R>++&-a*#RJhTtr?UhbEH60x&UOVrn|TCw_MYE1OI3f(#SU5iIRK
zhwbDB;%EYa-{3FLixCFo>4d5irBGw(UeI}VIwgao1PsyM%N`ELrKDOceRl#sMw;(o
ztA7cVdV!ZOY~qEl3~>5BkHKO?<>YWuRr%|Rep5!tkEw!!*WOF=6f3cZl|`VpOCs~W
z$e^k$q6OehS?t*TvkP8}iYWs(wz=4Oqo%~zeWdfusrXaPqv5c`>?u~mS2&U~Ci{(#
z#&yi!G3L>V7pv0f>NxDRFjy>))6Zgnv{6yNt2sr6ov@rd@(|5>Xr7G_&Ifqrt6TWp
z-+u+`-Rs%b;AT;v`v*x*bj)ua7v~$67SD?jGJoSkyZt+U8FaJW-Yzb`cm=m_ZZf(!
zyAWdbXo&iR=na!ILH`B(uP$*^gt~FW*k-#-IHgzp{x4@&)3KGAnNA^(!jMEtK>p@p
zHZrV-BQJG+cb_2$q+82lYJcpG%U~|2&-o>0z1ee@bi3>2Xs}vk<w%;M2FxE1@$8@M
z;e{8k!VC5glvNDVEnMCCBg8Q^=?)MEO?aqrNEA?yVZ|KNq<_NK2ypE8gx5hWa>Y(4
zUyHSZnFGrf#Sg03=)H{Gqt29FeDaf9s7?5&)#Ot!9baD%Rc@d$8;yBsa9<mIb!C)y
zL5$rJgI<6emr~RlVsNyVW4#>)WyvbaMH~a9H6BA1;~KzsLT7y=U5dBC1ns>bsGEY4
z(FkZA2~e8|7+<m8&3Jgt;S}RKG7mJsY%^FY>>|uZfx_BA>2S$-I($6AZ|FS}dW<AW
zW_&bHg{Yqj(DhP0cYYPW{#!5M<9~P_!_gM@(o02mu;C}T{g3fx>e|pRF8*GWp18fV
z`{`r%%>F>O*WV8B+}OtIN&~a=3s_i~!{ls*Z`!b5aEdlhln9i{Ea?U9^NuJrPs|48
zMX$3FPAFzv4w*g1QBt$e6j)N`gz*|H=BHDk+DO@IZ{4+Ackz@Xk0nSP!Xhs&_C{1c
zBQX}zby4Y`$Z2x1jc<CMTQ7*YL}ZkRIc(%i)v-7)907ADJ?!q}c<QMuD1#lI%+;uY
zOY6UmJm@3zr>G2&2$=BLizE+++7xKxr}+1j5g$mizcMFdBYHJs00%-gSOoZoVGX^}
zGCIR0G;3#Z^~yS~UY*AAGc{bkSQu$e0Czx$zdlvv$;idlEMPL6)@S4>%zAmOyhASv
z!w^@_4{_h)Oe8kmpmUjplu5E9Dvq|sMqN)`*x-0L`c2L6nzo~|pKeDY?QL^?YUE@3
zXn;GHD6|wNvyhmzS1fl?GmCxIUYh5D@|vV?n2rBb0|2W!pbJ~o!Kj{$y1rKG0ciiA
zPuU-iuz0hJrKL@*tgK_$@4@qPRH8Zx4Eig(FHNRc{5#$J>WzJ$`k)#dxmszllMRCl
z-?g^uU9Ncb<aq15vc1t(I2>%@&aFMHEiYkedKPnYbC{lMu*XALlYTeHuunuX(X3NM
zK*crIH%}Eps_X(6g1QDqGnLiurz^vaLEs6hQ&tvScF&(94l42#;~<94+&iUzV}GSp
zAsH^y*;7w5(aT{H8ms4NO<O)5+afuHRCF<*t5$*z0eAwF@lnN_jTtJ`4Dj*ay@dAe
zGJ+^aJy^g-=M`*@E+ei?p!A6CU4`cpP#m&%6H?=AEj-U%I|U;l42RpG@Wqjf%Db_F
z(`>I_GG4^1U+X=KM&%TWvWutxWCwr#M=1kVqCZfJih+E64~)rH)<uUy_HS|#Yz225
zd)QbiFzRKf)Ittxv}0<5B2@=Rm@PjdE7jrEz$Y(7Uqf@B9el^k6=O2?4Q1?zhckEF
z$Korx!w~I$lu1>;DZJ6pIXsn`-~@=&S@A1*6VcDK;UT}yS4FtZ0M(|?5~q~;+S=)2
zeQ^)#>pR%l+r?-&Kw0+T`3b^G1r>j~7^EA++q<8iOtQr<?3K^_zj@>MCWcerU=K%b
zUN^mX#gFRmTimYv$sifw_|&&_y<n<3%)7|)ZES7sVS8&CmBlH{%*<l$$P^}~>X@7k
zFdUHAQwW(XA8*uViWEc|(00~z-kT=@>)`0;iZ+fe&bGHf8yKB(*YnPLHS%&Tr!gL#
zvhX@LtarIV+AES0KD#liif8(TC!WQcbY_QsrB`tOD|;%Eu%jbZOSBe3od4<uu3Wy1
zIHpFlH55gH8|_abBFzdGbgFVVMV<|P1wj>FSaEP*3XiBbP%<5YlZfrq_=Ehe6riXB
z6}N04t)416qbuknx6zDF;`;S<EZv#Mk>eFyy_5^kOCW^8add&34k>jQB$-87u$CJ`
z&BjQCif|<#D@!Sk-4kQbr{k(nR(mj-%%`$=N&=tTLyfEX>DI;0>=*-%)f{jzK;_+-
z8%=<E>zL0SR}1$(IY$tHPGgWIdo<#a+xaU$$}Y)$y&|9WpleN~K|~?kaD=6`Hr6+G
zu)ev2PN#!38^H5Z_7AC?JVbyfm?*pg$!71x>PGj4$)vdR>+SN{A4`i){>?Tv--JeZ
zaueI>SHIK<hYzfFM}N56zj4pP)LWC8`lDG9G{dCq_&ItQ4To61vyJuT2(`u(=8nu`
zW^M|tnJQm4YHd6072IBgY4Th)K-`&9DFN(*nANVNy&?6e3YBE%HII!UKB{kv4an@X
z_T4)vsHC~4C%yAL<3BmOrh*#ud2nhJr5~_gF1@9V)203~87eB`R7Pj=NQmu~5x(;D
zMflN(U8H6(iC1?%f>F7RYA`7>3!IUvDT6~HQH+4wEm%B^Wl{+%;I0K)4Bi3BIh6C^
zvDRxyjf@%Kryjx?QfzczKy&&Ol4KWOdS(OP^L-}~RU|Z~&?@Ci<Vg>A2kbD$tT67A
zy^fk2!zuC@S6=Sp^n(pC=n8Yw-ieEg=_|+SY$v<s-WDxgtNlieCfg0mnMIVTq#u-)
z)nEY3&H9}9=xh~?J?cJbM%P-+3)#>-o}*-dq+O1ZsR)GAQ>_PRPK4aOgHr!{ovwfL
z>MqvSHn6+9i(%3O=b`*u`omKj9z=+|W)YS_mgL*m8C<UK43^?yw!WK|H-4;LzVv%J
zH95ZvjLkQx^QJ7gUUuPX8mv5+<I$g3+}`@oR_8*zF!@-~sz2H<{Z=^ix?%1QQDB5#
zw~tPH9k*}QF)=xf*7P){S`(O@sWBi)o=?A1GTDp@_odp~)=KFeZ`=r}NvVrK36<5}
zg%cWC^v8**<yclT*+l9tz$m#HVbbrv1ST#~&ojHa_ONZsb8Re*33E&t38uGvR{Z<?
z7hgrUzYRYwP{A~I`j@djd=7Cu$&)-(DR8c=RGtZ?v<cG@*In_x$rFJJr^F$#pHW>K
z!fhy%NMV_uhv0I53Jb$Jc7_+Rkh}+#a0*wi+`;2d%;Ct<7)y&Hl}cF^$tF1<J6{j|
zMn;>4ZX^T1@@L_<RH{B!Zc=?#hB)?_7^ts{i`Q5W#U+3`hRt-=uy@$pI)yEb&mMJ#
zsxX#+Bpk={Fmo)%?)r#D@Ll6+RFBL@^O)qADZ?IB15_JK4e`l%j0S^Zd2<)5Yunh|
z+(f_EF0#DOjk}o3F4{SM=v9lzZxlYMdgOidN4M%bqw8@uxrMB3Uo5@7pB<F1{>~s<
zC+YcbdKh&VwEC6Xm*iV%l7Hd<s01f}CC$(NC++RUzt(6!du+P?5L)#|h7-|3k$Op(
z6g|K6Q)I;swzhV#xgH`4E0}7{<H*7Sre>R%nv0oAKN=R&)NE)&0$H?$k_`~f3W;wq
zp-&AL(=n4#ovZb1<n<C0IfBaOBdOg~ez6^AL>9rpc*aeYas0JJ0fUdi`C)!FdqQ>>
z){}<{2&d))Tzq~NHx_Rqj1zcla1-2Ye*!^BB?x3($eXFKN8|hCl?41nfN`KQO-wOT
zBJT7Sx<<#OtqoYE^_YdWAm6D|IxV6Q3EJ4`eHEvtz7L~e8(({V9UuJm(+H!CTjfgF
zp>T8UiIRYs^>l2pqzR7%JIlS&j{+a<PKb@=1XD-q*xSo>;lBe0YfQ)*3xc7j7}J_=
zdo{He;wnk<-waD#1J3GoPB|Yb56+zkaQ(bRecacOai;K*!~^3>h-xiBtxoM%fx#$4
zySsy1E8E!K+Tt*2H0q-$hVXpSlIEUT1$mK?S0gS}5unJDyzO^}x2o;rX53FUG03+s
zW#!I4&%LeRP0O_#Y1UC^YQxjJWqcERi`$zr%I|bWxbsh9fA*hc`Kb?d_ip{aRy$w&
zo~g?HSZF?qdgWxl@MC{ecEi-`0l@%SF~a6%7u#Dah$~G@PR(FueiqX+O|+VkYIs&~
zoSji>mnDlNOQcfR%D2%BW_?cBKV@F;oJ9^*c`+J9)?1_wJ@oM;3t<6l(@sXoQ`)x~
zn;`6cOU7S9KAkn;XNJJke2A^J0iJvA61=dDJWo*%XRy-#90u4%C7cv`K|qG40^f^N
zC`EvAjF9jfHb~;Ja5$w*FpF0)qt{MW?uuggDXPMsjgB0nK+4D58C}3a{$4~;gqzpb
zu>QzVOwWc`T_&+G)$dnhy!)=M%Ds<0D5WC;sFVC1$_Ohr6C61WkoXRFa8RxomFW^;
z&lnIjl;ngpa!U14JYgXtYEQ@wejO}&-?EkVKBG~Ind3ex#0|=XK0qf#?@h+MQjbt?
z5G)|{fL_0grHwtTtgmBxdmF=H4`rDao|lN^EQ_Z}Yn}krqT<yvGUsWr7w-<P#(Se%
z@gQABQf@v|dfk7Om7Px{#oA(8Xd~m!*}KQk+yw@QhIKw^B*j*m6kDGOyxM2u^2CW`
zxcnElMlb!<MtJ1dROKE_*6tlPqJ=E?f;cS(ejbbfzmHKi!20?Y);DgUUY)>XYX;NP
zGnks0M57t<&P2wCWfMq)MFm4fs=@_!^?Kij>Btbiiq$n%#zH-xje_nrVV>upM!G89
z9C=??3TMb#_Fgv(qxikv5(D<7r!HeST4#b^<TueDtuXVKjIgB632UKLxb|=&_(5bi
zIPx~+-3WhBe>RchRM$kGprbb=D^MF7F*x+6FsNae?_hiQ5{@?BjlpOeFI`y2``>>O
zevnHT!s1c%f-%o#{LB2KXNq8HbY5{BVChDVC%#p1&@mu*Jfw9zALa2VZ_(mra?eDp
z%l1FBu9g0*;(fZC6J_)$JswU`c;sWSOD%i?#Bq$c5=aPHBxv_GaC3PJ+glsxbUR4W
z9s~NsaR{VkCtvu`tE1vcC-_mel?{?R)$MFO9;R)iMY~Az-H+$q_OGSI#;22Vb3LQR
z>~_Yy&bqq$#y8pEyuRVd%RxEFU%fNHtN&}{&-{ZdJNeFjdi}3$^q%{(jqoH|^#?Fj
zxu+imvlx_Vn3Y|>2og%XV=x+`zp{<Bl?rOL2~4$SF*`SnnIjXJoDDeC>bDCd11hew
z@&#u3Q|P4#VK!sL285+6Eyu!mNyH;lkgzNl$vm*clcau>mop|VCZU(oLRMR-X%{RW
zlgW^|z@}Gl8{Ot)h!?+h8*3{!5k<6h#|RPQM*CCJLz@jiX~1FMBM+yleh!rZ5)O{t
z(H$Iw&t7Gw)CFO%)Aki*H;a}FH}@iWqk<X}=Lo_IHv7+Ew*Ca7Fu>xi+gN*e4wEx6
zHdke#ssbX*i_ux7vCzoH9+a^t$|8z9e`g)o-AoZiRU|`Yc-)<RKWw4v=bU4ifL1+$
zxu&Y5LGGD)syZpjX6m*>N=KTsgexU#^*X#EP-&(Z47=D^+riH6I@+C0j7SU!nd!vg
z1-Td-M2Nj6f-*o^CdktscCtkbvO8fvTMm<aYduHjH#6-0W>)T;PmA47Rt&~J)N9tz
z-97FSgQLg38N#mQcA6I3Ukd!{e-L3|ZkXKuzP<G7e-j6-CmYcMn(<joR_^InD#ybF
z13xMH$i0MKiT<#U?$SC|mMdsXv@kn2i^-{JG$$Kqv_j6rkl`Wkhq^rGRG{Jzu}r<D
z!gz#RBSb@Ik*e^@;pDJ!F|B@?kK-6E^Xc?wbRbKMEI75LW?GSkZ3SF|wz}NK<x5u(
zMH#bHtKl@3_CAANxx_z{;iS?90)@r1QQi$b2J&)Z#&&FkZvjuvrWhu)5?*j~#{6vJ
zfRnRN;TVMwAquL=Dsqqn!Z6*$&fpSe>Tl(Y)uoH8c<+19VtXS)nUR5#o>cm1mcVD5
z99lBvH~>udCrLuq`8o4wl||Kw5U0IU!fJ$TV?$ZjaV5PR<3Z_rH+Hr6EnZcEz^|p&
zJ5}jTMFc!4p${;~)^O?OtK^Ab&>x`4M~tQU9_hc9%G0dyS5OjRl03*R`oqiEVLHJY
z>lHWrDw5LQPQB}Ywp-kIZkTVItK`m{yA7LpgBqNFgV$3Gk>l3p5Vw9M^qapL7YnDl
z!`UC*7`*sbD*oKL>Dt4XZakjV!g-!YqjG?h`ojh}3q<w119aOf@VqK&)hSHR&0+q?
zEGDKKXiSA1K2VyScs`Wv(%mLaWx0~%l0DJgS(Im@zyX8FIGH5ocUf0O?VLI-s<S2P
zHLeq+dKO74TDmbbTNL_ac<$Mkk!QOcO2t79-Q+sf`cI=$om4yzZZ2XtH~fW20mu|$
z5#dk3UcKPOj}e?plOM(F(U~5m=?khOj9BS-&Z#X*j|Y;mqKOs8*zA1;la&V%gdT3+
zTEXrk3uw($u(qPwATxBlkD=`pGwBisTlhp2Vk&p0ZWRHR7l*j-3C(}8vqobyB{5PQ
zkoYyZM@NoUKQ7|t3XfA>C$|WSrF4XJj5$;q0ec%I_SOqbGy|+}U&Wo(7ckLm@^xY?
zhK(|HIVJBi<h0f(+r&<C9i7oljEW65ypz=h|DAJB6yJ05(d^mvm#d$;{^b|jc>c>=
zgK+?i%p1hud_Av+;^J<Z72QSP+TRcT*3V_-vB%Q>;2&&vU;Q>eD2j>75x-S^3+k2A
z@Vp2aM#%j>;8T<84E@mn-Ng+o-L9b7oJ4D84s-J}n3`^&J{j_4qEvf2EV#Ec>!G+L
zE#s2gb5cA}EfC>k*T+LPOEBDTw#*Kz%H_wqbJEUARQAS1fUi7#4O?5wh~rGH&k~C}
ze}o_ugCY`m5r_)L28KPIm_s1>T|i?u)vXPSoU&qHQ?aHpLo_UetRz90Rzg{>P>JY?
z@uA~{VIBR!GTNgnn61AB!(<N^FRtL7@46TMx`3<nBH|a0-Dib^>2uMTwPq(vSXFRJ
zd}En52Lh^nAx>)iNqagv3rQfd{Miu>a0pNe2r|W`#O|d+Nb2iV69YpV(qON|-fD@#
z9&Jw4LYRzEfrVKrE)5ZSR1{0KY3%p0q+gcz&`z(Qo8CY#TSZo;i2Mrb@ieBZk76>O
z##ChrPfX9@(PQ&?d6)C;X&6+zguAW3@r}$I%;30V|6WCfZM%7f-4}y6{3{jjt=DFo
z_w@JDEAh3x7g6(0Vyb!$)3rxYi)Q&{NjXB|58->H5H&)t*F&$nft5RT#(Y|{Gnknb
z<1;ZWp3kT+r4^*lD?JviMzZn=#wLZ;+aXUw7o0j-bVV1|zngworq8g`T1K}J2}?}0
zBHVm+3s)~)K^UjV@{wPQT3Bv>z8IEUs6<mz48h(F0Xgj16yo7jd<v_?ASn)xo2ECq
z(h4UvsbY)j+KyTpjS})-QHI>sPrMy6YE)fLHC8dU2G3!-_6VY&z@5b<+<X5qOwHD?
zyG}R;%WASWA)F-*`YKe%E$OzW$-ffGuHEsmyOpBesw3^?wmGlf4@@0~x||L`E%!k+
zy`y^+O7~I<lZb@J^-@EiyIG>Q4UEXZjI8D|1LUC;xl%GB0F@I=!YfATCpXX@UBWOW
z1C#N+h@uHh)J~uhOrjFh5d|^gAV8IQ2x$?9Bh1gHIMS+PGH9Vs?HLY`p?QNE96j6{
zA?fa-7z|Tv<M`wc`wv$B0+xF(VXgZj)&|dEssC9t!UfFK-h%1MLuiIG<eDQXhsc8=
z;3b^W?GD@M-d@M@9R)a3X~p~uS~C-vo|3w*q@N=hQe78y7qFZRsYe>eehBt8$y#m^
z%*6{F(@WW=d=`Tdnc`4Y1i{@kr9<b$bbwxGh_5|+0j1voXr~OCMR&A>&Hh&qS0@#y
zOol_aH-Q%yo=2q%3cq0kq!_|vd}J*uC_{KS9Llf^rs>@07#>kw)Y&SbB*}ZhBcsEe
zl9ZQ|BZ?-`AKpQGbQP`mA&k-vE?>HXcfRKw+B-xp)IhYgD7IMEHm4I)r$Qr&>d1MZ
z-}3+)cSd;dSRK8NDty!=LZ>#$c#;kj#WhOQER@<JSIMB0kb8+yx5VBuc{4yd5N&96
z2c<0!y|dy6IsFQ;H@b|Qz287c%=e<tnM5L8PK2|FgGo-2`(7^HHK`QAD-Z=0RKhCi
zG0=*AOiz}Wory6SHL}%x$jw0+Z%~8d4uv#Gw-l5Z@@`oPX8h^;+tI9?!!TP#FImKL
z{~0WGKZjZ{iy6Xvs*j->&LQ^-R<6su1PG}JZiN1zi|*noR&G~Ot4*ObJBOM1X|#yv
zGZpdXIqKyYc4+6*(hjP@p2}eCC;N%BZWn|JyVPqeplth^6K|!~qTScWSH5%wy}>H{
zkU|nM4ojU+!H*)5ilDVf6PqV@TyW_^P=U{Uo3QY`(5EhH9uWc|bOG+Ot{KG2=x9A&
zGLoi{)Xj~XFQr*T>2V6*l$c1aj1YTUL4@`0(`dFHfbV5ky1k4u_Z`FJOcR^Slq1((
zhxBMSv>58P!Soq}${37?Yq9bIQ5a!!X@E!HBNa?^-uihq!z3IX`Zb73_FgzlB9NI<
z3qzp20rYoD?kqu^EeXdINKbk<$}`gP6O73T8OtxJ`CJX?C3jGuk7oTGX9L+FD=}&!
z@ezpc`xJJCEQVGIYGQ1n7!wh2B(7lQc!=7XkGRZ-bnOq~H~<F6jNC_z&?B7}@(mJ{
z#MlH-4HpoH$1qtWNU}|KdGB<e!JW<*(TwKNsyu?}_+eDzIjUtsQg)De18QN&VOM|D
zMgR61R`1kMtxaNTmWoQJF*)7D)I!W*S31lwqBbZ)o&2yygNBA6Z1)K#RqjqMUKvtJ
zOq0GkQDS;F!iBFcVR`8$SAl1Fib^nz<<4g@DA!O8XBnvU12Q&>*vG&yrM{~YP7#j7
zg_aafkpWUfNGcytT?{lxEIpAFSgcOU1$I>zZIygehN>ikK_GMhuOyF$z}}R-oZfJW
zJ%FkB0i@Y3E?&5a_q^{hgjJ8j7ACxL8eS<XY9m8+aUv(<2CN3qCme@V3ClD?=!aZ3
zVT`r{e96F&2gCKNBqE=b7<5YXcBw}ekPOvkp;O%w81gZ6A1V93;^~QfmbQq#LdipK
z3ia?5q98(1WNdiF!<8%^)vSfSHa4;HZX(pf2ve01^D}jS^05g&JYOOx(~+p*AG~pZ
z3=ZvMbVF&82`_|!QBv6}Q!*orEyU3@;%EjF<zw8+c91S&ssBYRcfW{6bOf#1Lzs*o
zKr@_U?>#B|$O!L=xceLz(DiSxW9@bomFg5GrdybqpTX?h1g4LQK6OG$`8ww3MIg)6
z@c0}+*?gy^N_|^ZHj3>|v&78N2us&@@$!XN5JUqMrDUagqifh2d<B(iOKQh>$%?1p
zdyy}t3{3W;svRk3AY<c4EJ-2i9UAno*&4=gbms*17#Szlo<>QE7(zE@V?!kpss>8|
z(o}vbR)WF?u>geSZ1kUD3Ij1}H&z$1cyj@#PtRk0QQGF}k`4ijbzsTw$cMAVo>cT9
zf2Zr!?*`c2$q-dyq@A2S7cwryRq`Y0UP1UvXA2nam5jwvCkZw%Ty1YLD+wnRbzDMZ
zRbr{(e5W2y_2%VQQ1uDnI=<dy0t6lb`1-mL>zL+djM$G5ld%aRRD%e$FvM&e<Jj3M
z%15S(Ag6Y|SzfA8?x2kWWN=iLg^i8u=9H-++Iyf_u>}(3NI9)c3%nA|p%TvXB2MyM
z43gVe?0gO$K8t2}9IeWOpz?}|Z~?hTy0Qag7@`cNsC1b2F<4#4+DeQ{rNLT03&&<L
zGe3dm5n=HX-b0~RMms6<({%r7CsCq)=6>NSdDNUQarTi2w_Y6K*{9DVDc5-c3qDg~
zx$_x>QBA;M4&gNGmll4d5DpIEG=$qwdYsy1gau<eESj!QfL^D|6l~C^s<xdfYmNAD
zf}X-AJ{GA^c~o4e0Az|ba;D~!!3pU%L{STa0eLwuV={gSWx0#1m#*U2@o7xW`q<eJ
zV@pD7`f_L-hm8-j3x%S|HD*flIrm5fFvjg0DW3c;a1%bN{~8T|&US%8+e3e^WG{-n
zONGOj*3vpu8h=;Sms3JYP4d+D$<cBXTuDxf=NEaDq!Z2fo07?;&5u&zgyDn)6#L}e
zgzVi^!w8K^h?#nT<M)KXe3j>F=zF>KE)Ui?Kn91B9n#01I}tFQKbF{@xL0a%k;`9t
z8OkDMpqNF8SkGk|VXcK``5^1^46<e1?tcMy`hSc@uz*(OA<lR;!lNv%LSa|x4N>|d
zco<-q?qRU9j*XQn8=vOXG<!ZX^DQ)6RRlpGt#}7wd<bwh3}Q!1WmEvCANBC<-yh<|
zKhE*g=Psi&T;|Y@a0?3iZtwg)M&%wV(X=u)ve?O}FhHyfjOatlV=7}Mzf&rk-`anz
z_`8;JaFNzA`k~I!1wI{z7FNlIhN{O2@DM^E@p7nqjr*Zfp=nsdX8#$~!n6GPUS|a_
zJ%1f<d*=hFvd)oW?y7eq6-1_?n5Kb3o+QH*MFA=`pYfF}9bjX94_PvW-PIEPJrBKI
zNm&at&)~Zl5Z#T_DbUpDvgaw%%WG<;<Uz)>98#v%G-5}GPnx_K@hS!9Ap<1Wg02yH
zI8i`zGD75&!3oibBTUvJ+<P>{WXmroCZy}-h3INpz(F%R2gu+kY=K-?s)7z;1SI%M
zMusP@&Z!C&pY#H`l9%dx3JSTnK?hH$D4an|xCjMec^gT(hUMOuaHspnjF-$*AH;O^
zAxuWcSqElVbl3nPNRfL(^s^2I8=KhJs2~oSEU7VjWEOKrr_h|Nvak{vLF$aj7*nIf
z#1v4U_Hg=v0B7$9KKp9}eC)R_VXuD+#F@|YA*#U)HalOz&fq1)wRsElvS&lUv0@Y}
zgTs#zNX$U8WU9yrn}SXHPGT%hZj4O}7m#aiif-|y(%`<&eW4_k?YuvQZEU>Bdlcyk
z$>K;TN?6VyUBlk!CCpUcg~ID$`OYOoag2u^Kg-&`!>$;AY09m$LqHt*EK9*c`_%n1
z9iiLZLA$+;TQ{$ua&iu9w@zdAdVwew#XWNTSpSIYwM-^Z^Q44n%;&})k5~^=ej-;x
zeQ5iu6B5g{=L4}Ym<d(csEbp^Mu#+{y^xJeK;OL(l^{elh*66|oSg}Abefoj)Jr`r
ziX=th<*I(+;F+8QWN@UqE-(hCf-p$oQPVU6e_0`rwj#+l(rx6rpfXc}H8fFkl!QC*
z!jZWdhm(lI7En0{5;z)WD_9;pjg|gWs0BpcdIYV?!<Y;fc&AT@;av7ngml~-Svkb^
z-Y#}`m#}!fj!I<$6Vp?eo}I#Ei#(y2Q{FQRKx+nAzLw(Ge{KtxFJ1;Jt0+i(zDN=K
zGw3BNSm}Hbab=dXKf>`*p^UBsr|-Pe3TRAnqFQi^F&wU^VnakAh-B6FWuF){=Ei%f
z2Z5G}V0=fhqcwMka2)n<=$Pa&QkX@Clr+Q$?jdg{0{o2erk%m_XjbmyLd6_AxPJY4
zjItEx&Yi_fliJnjd!tnJ*dxg?=yh>tZ3~+l%h+wNAW7P6{Mwy1;_9??A<cv!sl~S>
z`L|C-L{eRfH{|r+7$ZvAr)uhg=}+&JT9{m2K%5+s`XC93SX?QE-;lA9IT<46uK=+h
zq7j9-uNC8H!<SB?bl4<8mSr@J31vEv;{X{P)l!U`ODp-ypvqYR6tvhz@bUy1cljhp
zfaY5!vI;DeL);NEMg<!k2`w`Ae7I`?^Cl*_TP1KmYnBYNbu9P4ily$CNI%%0s@z*l
z#P_nqrsvg>`YF=94-yh1J)g83V%XckZacurQVrE=gXKTNC}M$dlGNz72gu58_|+|>
zDal9<+1M1t088ypz>lg3qPmi}P<k|qJ<OaN_F%-d_xvh*G-6;B%Q&RJ5f4W<4|L!h
z6-s5?mz=Jt7-F-vJE?J{s%&*}I5kf1ldB?dGB#p(_)=4Esb~^;wvN^Ir*NwE{m99~
z3wE(|`#joP+c<jSIA-RXd@cIj6zz5w-Oet$J^31CI{<nhNkplHr?LUb%5ld~wO8nm
zrAjckDt*7_VjLESU}^uVe|D4t_0TFu27@EaMTJl#`4LnYYNn@!gxhdWF!FFBHZ<hj
zv}z&lZN-?aD!L=_xky;2*XNeVoL)Vk;{X{P-LX@q5@)IklD?z~L8;&>!eWFZ9U`Us
zS;#`6nq7|#l5{8FFEU)rmZi%hk5P(O{w8j?A2iVjCQ+~4hrH+_$#$?ly1?E~j2fom
zd(f&qfJWtBM8Q!$tEA{554tG*A##6&Vb;SSEf|~OU6Df^u9inS>N0^W_8TaQT`cbY
zKFXj#Txlt8hb(sO-I#Dnc{fxuW@@N(g*esp@ZXe&LRM7m^fqIrdV=fVLr0?fQq$a<
zN?jlJa+IhS^KrDH;aXJ!kCh)m8Mf*y`n@|??))K+Py89=RGRI#(H^{ty-SPmFO$I}
zsm~E#2R8mx0D%-iNFgs7*Sa!}DU#wA((H`o&ZrMz$dsmB#K~|g5q$~5_c=ggPL9?e
zRu<DC1xO{n$T><@(P!_5n+h^gs0@xuhm)~sRw|gQM>yIb4@ZtAZGlw>Ji_;Kl4>n_
zIH2Re7#y7vwk1xI<K;wynqXlVa1W(08zRj|+$$?D5}we6Kj@H3bpTS~M5cb%ikG^+
zh<+x+MC7(QYJRn-#z(oxG|hIfo2_7L_cEVVBRbCM_UZUOOa^m&*+<0)sV8af(i>62
zodvY=gxIL$de>M?tCzfjJA0qza_CBRPBLr;x8ZPxGg1;t#cWjQOL#Y0mO@Gz6sE(M
zNA_S&rWXjcGLR}{Fr^LF>X@#k=67YRm9gQ<aW+EaP$=WWp%xdQ=nfS8_iFtpy1hj#
zw?Bnr6W>GmLaL7gJTk`geA0)=-~|+pR8ewTUsCQAH;vMDCUOq*MQn{OVK91F@FK<C
zRue)s?NergKxbn#<O&E#Ek2lP5bC_vdN5;kUh05c<jDeQrS)()jHT<${x#z_1RN8&
zZ@ON^T)lz@g<p!I%&oJit0vI`2p3B|WEpigp*E%ma~v3hW6J?Z;ZBDd!ZUGMn>690
zka}v@+1QZLA&-Z?7r6?bc<#xhXPk$2>@q;Xp_S^>#3@m3)XFXaI}0V%2Sp&mQ;m<4
zaqyFDx9F!^Xm>t`#qyJ=1}#iQ_n;ZwgKBgP)o_ME0OtFk&&Q!fK;0}?dSAfq@D)UH
zi@yq@##1U<wFu<z?A-_$tiva!1#qRfPLm6$EE>l0I-~8Pjfo>csJDG>bX)?U`z7ol
zkr<_^L`GY}szMnEUA!b%5Q`!*wYh>u^CbHHCEVKmb+l@4K`lJNq)m^c8#r8&=jY`R
zqihL%GBDW&(!7VXBz3$9QB*~o90AbekcxXbxw<%}fJ)UNm<QeBEY(TD=?$feZ0)R4
zM#f3rarR3ZhRG302s9wzn9yp%fPGZM3MS$TTD1xqF?l=6q^oO9P3@#;gRE?ba)2VC
zHo_&f1~{1Gz!)6W@D&m99s-@BRU8xcN|ZaS6BRruVg_GBRFUV2cs+T-YHVUuBt&4(
zhj(o8e#i|LzL(<_5eCGUlU2PG9#j^Q2AzqKQuLYcvzcGRTJi#G6~|r!)nE>hKgDJw
zDfTePS1`=C;RSV6YiC)TnDl*g2U4vgEZL?=c{Ex=lqdnB?k66O7^lGSZ<G->IE?K)
z$$pE1QZ@UQ(?_(Ko0X=>ap3Agbu4<A0B99vF<4v>8%`K|8U`k8gOvrj={OpV<E)jl
zG57*YXH<e2L_v!eJzXmT+_R$1B?DxXgP;Mw(m>U334@mwy*ETe=_@`r6;^4T8>bFk
z<2617i{e?ZFQo<R%`>$cptwcq#mu4d119!yYO0{tAna4q$0hVI;}S2v&T$l>8P(8?
zVorZY+yPI@=(K<r8D8$v!3K`5NdSyIjM5xwP8tOVa~v3hqxU9L$He>#@=91;)=l~<
z$~j>QWIS^Cq~$_s%dm#LNRek0YSCmT!=t?(danG;PPoQ=*yvEmpdX_cUKU(gQtJcx
z8|$iYm_(rSDgGNRsx)t-lkK6%*7<mBN+@kwxtDuL@!+CA!3G3tQC$=Giwuiq71w;9
z+Q1NC>_vqLZdpkRKcJswqHFKZ@M@f0+-c9kOO^!4m1eNfZ6*RB(+iZ5k<V<yt3s7G
zSkAD3$7HO<v!ZKBY3vrlXcAf8M_LS!lwH0jEU`hJTQq^tn--wk$Y_wUr}`xF*lMU$
zYmB3qhO63hq0^v~bUvvuBraAnmhK+^dq5e^0)8b9xH7!RC;}zn3y(zExnl-xL_ry%
z9yc-7AcGj9!uX99&)0Jhs_LHkVcc_`z7wH{+MRkBQF|UK!a9)SAQ>Db18irH=qR~*
zB0_Yd(gUh@p~p#kRyZ3}Q&TV-l)%5Dl#nY^SPyY^D1|Nth#JFbV<X|0;5*jvNSGyI
zn2^L&22AP8(1H&s>lI9*7SmbMafuHk&k+wx=AGa!8sJouR{_RiXb2##`aYDRoT?BP
z@?+$a0pku1T(L;8iqngoE3aR3DRugnya1~^?DpVRB@Nsdi^ISG1@V2z(5M#(=byhz
znJ9Z(8Y82jdeKlI7S!Q|6AE0G&o73L@HO2DLxZ}~h)-w$0V*+ti*Cie5#17}Pz$O{
z*u?r;R$<Y6Vgb($HteBNEwR0sVQ)Lfk)r{oXK11X%pRAXA7VfPzeFu+qG%F(I24kP
zGBg@kmiP9JL8MA!!fuFNon+*91@O|qPYBD=1$YN=93X>Z0SMQHc4e*@6Ua+E@#HjG
zvsJ7t_po?#5B;`?IE9gjM-|k>n>>S%>anV9oU)woo*`F~Q)We40}#$5o{o4l)*E7j
z!?=d3D>4gB86BSQVuXzEZ^{N~!b+1l{mJCJlZsaOjM2JLp_J53QJ5I}zV>ohIGtE?
zTtCI3k4)-)+CB>Z;E>6R&GC964@FfTI4NhH{82OnmK>FKZ;auvbs~>OpkVWA)ws?q
zLMB|ghQflqVy9FF(oJD=rcH5+RCdo6tJ$9KY$!E{hJ#$W3*7G9<<)3o#SI3j^JRfi
zKg6X==dr$Z0S^p5h~4cYn4T+e;<S+YdV2+$(*?G-GNhw|yHv0VHsvC6Y+JD5X-JE&
z5M58|aGK^Giqr=N9tOmamYDNEj)P=y6!xHmz#VcHQ{@96{eF(Oy}O0?fAA!Bwt)v8
z0n%)Q>sPk%%1b1?KHw^2>Iy)+HfaUZAUuR>V9Jt=Pl}wwA;NkH^C7Q<-jh5U*WgeX
zr9-yTF+$1<QZk^N31U!Mkq#Bv&bZ&?Jt*rb-i=b$V+=<^robmDiYixxYt3RYMpWmd
zQ|7c7ENM>;sTY|R-;#7MaY0BMM(6>;hBm;l5v&<+`X<JbjE->gjjEP{m37-<_5>CC
zTXo@8DR#9i**g%@pxi;{eVtZ2a^6y)OKol$A|a2%;mt^vN}z3lVmw4KfxCpcc%pUV
z7#$ATNY#f6b$wjDyol#7{sIPr9jtA>jI*adfYZD0M1OAvC(kBmPWi~v7_VO5#xNP7
z5mTc<=7NoHbm~n?b6#T5DV)m4(;*td$VaxDqca+jXxAZzbN3IKo*Wk&r8lRMJQc-7
z1x}xCVRM~Gohb$bGA<Dwe)Jd~e(VUA7WeS-OIujH(P5RpFecSHRcpjfiNbokDu-W;
z^JGKj=#ZR%gjqIp61>OZ_mq_NBDb78B053s8IiG(f=5NIm5_>qo$*jYup2GsNq{jK
zl?q6jL(<>6tU<yJ(J+>7n--+tBbsZZmxQ(@%)#M0X{Ym>BWyMH-GI-^yHN#?8o=ex
z<aVRfp`vc7V>mmit&Z>*G}n0iTouTqJsjZ}We7qt-0}=^+_d1i6%doNj4LHJHxoob
ziG`Cf@+3sBBRvfn{H2QTK<3HKs{=fD;Wv<`2`1{tQDhmeT>TW5SH6N%$KHdLmA7Gf
zat2{c<rOa>4r@vRS%s^vnxYDbOI7VhxT4HcAoD2=P6GY`vVMU<MxG>zoE*$?fIJ-C
zcH3E`1hsGoA#``@d>F=r^5v{q%UOcFz|M{UnR7>G@ZEoQ27B!;E?wNhl~;Dr-lA}e
z43pGJb8|SZ&LiGM6QK&ZOxRT>3@!^#N3a{$;7I01GuL%COBpDW(J`EUC%kY(vUoBp
z?Hk3xp-h$XYE-CUxj9lbt}TG}l5|Q(2Qx0m#$3U%g~Qj8ue5D~N9kOfg;tDhb>5=)
zqZhnBo(Oia!QkwS;9w&CAn!^csFrkhT^fB1t!gMjV}##?MktJZ69)pJMNO})R10jZ
z6u5r<Dr(g_%Iqu}(?irIBkm%>>VqLrpU83hYJulp`Y3kWcTle!;SGfV_gdIMnxwdL
z?GspSd=1l$)5y~irklsmtWC0|Q-n%$-gY*Mhr<*`+WeF-n0PwWvN)v9Aw{0^XF2q6
z?*5_oI8MJR)k<mY!fiu1<*NV*y`<DipmZmVelJ762UM$dy!X9Ly!{==aP#^uE?wBg
z>hb{jNSd%w=7KkFl>wu0O=`F5Lf)g0tCS2E7lx{gR-ug!Wt>zf<%VEmjbgQ@u+QM=
zMJs)$6mY5vHg!h^CIC_h#b1Q$D6dEZy%yjaH!6m=;y|hfFVS7N^y{Q4pa^Ywh3^q`
zstk>5D3!34IT-PXSdd0Fr&9g!ta0Jo7aLzAQS5Mr_$UlM>u#YG(h~OO*iY-+@N?s8
zhK=PCmoGn$7cTt*1M82re*pKKcsD9F;K)f2tp(B@F0k~fj~C8=9?R=rMWaf>W+_5e
z@Dt+}`85_m4~hW2?k-x*1yth(@;sBa$<k>^^*2{jP+>L&m-I>NW@^T0yqv;Ak_1So
zQDesb-l4&{+lSW4ww-A;4V`ybdYGj&rOBISAJg-!zfX13^dQv|5fDfd=-zve;DHC{
zu({d8#S2@wesvGMy$oSQd<$aQihbi*Myyk>iU7o$sSBvA*vw>j<ac2%bLd4zhAWn}
zvC-uKj##dXMva9(A~GfhM=Ham!zRg!Y62i-uOgdOvYMvyfq8Mbpr)4O9Pgv8Q}Obi
zguf7kEKN)_c+3QSlR*Q~R8(e2-bmFoNm`s*{Bd}xNrS@J)+c4?4bGx9p__^QxQYpZ
zpQ6Y-QTy{nzJlLbc^S1vhP4|$F23>%Ub_109D34+df~$FVrA_D?mP7z=x#lP*@X;o
z6yw4xU&FOqpFuU6RjP(c`&qX`R#Fq87ol01#YCO-lnMrl_hVZ^oK#+yzLurF4nR)C
zX_{|^hY^XjWf_K)7q?l212+y*NM)2vwBD~UTQwe_LI=~xMQ2D}zi^LwDbWn+cF8aR
z6O9Rc;DZx*$9o32^2!b_p5Mau1~od9_O8q`B*Kc87u9UwlJt+2hf`3e1u{G%RhuQ<
z=7c<`bI;ZQ8DGQl?A7^-ha(2Z0K`gOREJVkF5|H2Yki4y0@w+al&7azuw+TN5YjO`
z{2BpzjiE8&0~;Cb6_ID6`&~)a&5{%7ymiW-NOCHqH02hGo~ije`o8eyKntCKd&&%w
z10XI9U1u^f1O%%$6Jr#3h^r}9UiI<P%YT9k*M1eDKf&ihxLF*=*xp&f&hF3S*!<&|
z-+B^*bOSe+{)Cz6a$QBES-0X1=s&*Z9x7oC^*ZSh>CjR>ztSxeL*r4nWO3<ImD$ka
z8HG~RwIZh!xrZbT(C=p$CbS_rWfli)92kS6GewN%vP_9ASvOndJlSFrs@<#}hQ6+L
zX!d%DlQooZD~w`1_V{r;_Sig@mpXXmB7w|Z4Eoe7Dd6<F@SdIg4I7{kC5K&PlnB?M
zG<$9UXY27umS(J^z&UyC>4^M+?!X`^bTK%T0<SVlnX^Ci#q?n}Y!VY-vL^=n(vFp(
z{#l`S<9k?KMb3qcs@}te>{rq~5Kvh3#+A+thdu^Sr%<yTOQnm^q6`(eqvBl{Oo}}r
zs$}n}HpHUZ$UUHZ5A_LPcbgV4X&nQVdWw}R0nWet1-yLimk|dozE;fZVWOgsIHppH
zD%Q5HV14^Kf0jx#sTu}K2t{>mY}OR!6!<>ku#RSZmN6u|EhydRv3f1*K$DRvnCK@@
zA%QV6G;}su5g^S;lQ}|4y{rn7cGoxSwJfPO@;ERC$1D?t2e`sfygGT3+MB0$Z{pr)
zqmm|M3={=@yljtmb8d)Ml<4eHxaH&Mu^F5`+rsYN0GBTA;OgZ)w6{l$=@6k%-bcCj
z%Ae+P1onJL%0Q}x#RDS4lcH21muea*$1w9(CsswmQj2Jbrz2@{Vl(?e&5^Fqp_B%j
z_2+Wxr`$Y{mf##)Hex_c7fy2&#lw*nnrfHVeW~d0Id_T>nu5m7geWPU)0H>JnJR@z
zi3mKW`B}nL_x4t8_((E@K!0g+Az<_J?IF&c1LjY87!6C7wzzgaz}0Jij8|^{E-K-y
zszKvQIs=?*J?UyVq1qrTkz-W~!q=4j8iknwh@(0h^%*JBG&e}Sj6aj|W^~3+Ltn~m
z$w_&dp)k=MA`W?8hDfp)D5^e5rQ{|pez1(qfigIT^5wCXp9&R(^P!($ykEtGpiI^J
z`Y!I=*~aYbB#s}SLbVcc=8C=q2GBsItv+U)zyrI$<n=^x4exq)18;lB5!}ArW=_xY
z?E!b~B&9ksK+-wV)qGGKACl=LTmd!1)e#R!YPG~u(y4Oc#AqYJ1}D(ojp`S!n%xO8
zP@bo&w5=Icgg=#SGE!3eYB<#uRocR`TqR7E$8}e3Sr#@tWq*dN+O6!k?p4KEJ3c2J
z$_bDx;`em^q|?sFV6b08CrMqiz<fZx)JIA_L@=XUH!fl2+S?J=N@RTxOIIVjeC-eM
z>e3&e8q8WsC>s=YUG#O-vKp$=T{2%}Y~-4W06G<ARuDxsE*O<-sz0+bGNv`M{&GNL
z^;n@zw8~Iro{xyW=MqxUd`a2cHB{^aHx7)!(Z~tA>s-^I&<DRX4d-m(qHsRaEXRxI
zZ=>7o<M!=sTzj>K<0o4<d14w<Q+1x?X(AMRo7lC0k5F()Kexc{PR_c;XHU=Jfpat1
z+9Hsdyq*rayBXq`NN42P2oGbwyDXT9)Fn|r>aj3JVL&#sri=}T9TZZ@LLwkZFBI`q
zoV1Ob{?_=5b!!~*pJbIxHk=W6T?6D7lI@aI3@tLl%i~3-jS(}Ax$mErAr*d-EnZ~M
zi;u_TMMnI&WXqHV$Y*ggUvjxs#XD73mnkZhDcrhs9?yJv0W;Odk*7T@Za#yX%U?x3
zns*G00=~HlOs<PECn{W%Yex7Jv54us!Z6}?E>!BGn+R&WOALwD6&jm{%J`^IOXp5i
zSXnp*huOyPkrh6YG(vwsnn`?}4l$g&eyGL58F34AigvBS{f%q^#n6F=B+J<7R4dZ<
zb~H+G_3|oi-PpkV!UWEqna9jblP7<c<-+Mut$U3(t>n3Nc7(z$&W_aT_`tVM;9cJ`
z!mF?D;o|unY^)49!&9wULtrYk^#pc6Y%y<A=3sM4Ht#DcHg3qIE6H_nruHtzKp=As
z45vk_`YB{nFcQ70wD+UBVsds!7L__X3-GEmH2-RVX#KXFrsqx%+;B$KOqo;S+o$$F
z6Xw~lmcy>HRG_W89(+DILQLX?3!gw7{~>Z(uz7@fJntM|QwWrbfco50XhjA`-it7s
zFs!oRyBHZMc2$^O!HRC0!zBH&3Xum@BE~ucsLCmHszQ4<C2uw)VnFzf&!92IPEqb7
z%c>aUl;qE74(A6mpgKSvj;?s72`9KQ2hE}x;PlGo=W<#WsMbP6afHzzMI3P_5>yC#
zDN8Ib@9@{`%mj{~n8vZAEmYzdIT;?YJo~_0F&Lz&OMe>-OZ0jv;yA>^4<Es!kI!Ib
zsf(9h+{N|F1L;9U&(&!RUI3bJqK>Fi#YUFb$n&~Jz!Le429W05XfZ!C6iLKMj|<^X
zfx*gwVgW+w^lhj>7E7@(ye?WWL4@jTAl?tR(vzAhCF?L|_*4rR)4<mlMtfalZAw@r
z&n1XevU7xgaGjM$-8XX7;#rn`B@zJ1u(Ac<s$6AUbeKtcNh-vXCUvS;7wce?XGuV@
zQ+rjC`Bk1V0c%XHkohBRVpMjD|E8MkD6KDM7VAzF$|Ed|ha+(ldC4hZI7J1+A`pcF
z<cB<*yMB0HNfV1Z77`B2LBCoU1_x17n>--`Ad3KxK7JI>J$oCYBtygv3}g|+lxHo0
zo$W5RxAt)TS`{Zw%;4nl88jw{;71t~sW{h-+00;JCaTGi_uk$}Ig>IoHHq*44_nyS
z=;5QkwTfXc70<|cII3Zl+1i}UkyKEshaF?1JQ+)j)8sxjBvwMy4FO!6Hh$uYIzZhw
zH9)*iV0@ersQ5CXH>ATJU7Tw1A?vM-r@uv!QDY+7?z(AV=}X7|sl}{IHK?<yd_+wY
zB*0wWmvAvLFedy|p_PyYiNB*mB>{`2-HoAf`NrUxi>`C-PDQ!7Y@*($IX8SKjewag
zP4)Cq3co1)(kCy6yI>R)R)rX4g`acyd_dc79wZN^ENNd>mDkFXF(H(a#1!!)^ALu^
z0>_Tb;=8`PifgZ~<M!=6^oJ=T=5@#ur5k31WSHUVtE;%RxP>G0Q#f^M7Om+96TZ@n
z7{%%xUCN7EOeCE^qub5V>E<|le*-`CqsQ?ZzjQ}xiC8zALwXYqlH$s1C$|of9NY!_
zGEn0num-Kv?rY41zG#L&qiqT=YwgYGOrK-0wa3HwjRA1nl)J5Jm!ItiFh)tk%}z%J
z8&;`P(@J{MCriK~Hc(Q|LF{dUq-n8=j<PapY&=}!t8||gWq?Xim>9{Sojsp|JQ*7%
zvf<Ij#t;ZJS=3|?oyvEol{0%h`}%unss(sYqr`^d5S0P)lG5TH1__0Y6p9Iua}dXY
zF*uTUq8lZ=48b^*){7G|Sbv?KM_n2-)T#|U`SyG8-~)Z!xVeqRTU+RMM=XLJg)-Mk
zwzR^oe92j@<)s}=&opuJR0~HIT3iH5eWqBtLVH%myK=~c@NoS~ij!w+c;Jyqyz<g6
z;)<x}**#Dj3Eq<VSM9#Lm<*@eO{+NtR`7S%(DIs4nLBO2#tnpdX9uUz*%#?erDZ~G
zC}#?!44$RKHCa_kD$7_AOHr{tk8pO})yUV3i8vO|)~sUsg;~r9N@_NjNF_RT<xnq|
zG`5q8Bb7kvhN&}P3W(N*MH?GAw$9?&VMz#M7t4|y6`R>jDQKikm%fUjQf>1*@#r`u
zu0pJg!!zRI0E0{@@etnhfgA_M;7|}ylwRif)R-)U7f^mxM74}wtpNbbG4CVGbEIub
zyH@eYgC}wBz9U#(*}?T2TiD(naIIA(Qjv*ATnrm-ZEdwtYpmhKv1yz*K8=ZqIv<Y=
zlcnoBl?vR_*F(2m;Mj=@F22Ooh5{gsO>2v_*wnmp5P8(4EQ+|6S=sh+@s=#krBBFU
zD*E|4VlYBm`iyK(ZQJTrEiH|Ujd@`fi*m~soxeIw=Ty5~bGd9;g4ik*uqq?R$MY*J
z18c(^eQy;5TNSNJxTNJg#;>lv9=1$^HYXurxxt@45oIflN8{F{xoK~GMr2gv`e>Cw
z1t2R1GQrQHFGNH?Dd0>CinRz7I5aqS{g8c_UD2x0{9cPrX#U6;M#3PVOd%5Iq5@8G
zEKVF-!0}_V*xK%3@y<3j);mZ?IVw>|=7C*s>N!NX%c!5?>eW@;zO#iR3ln(Y{$q%u
znDullykjRZy`JPMNqbp)Jsf(B0mkFTW_%$FP-2&?;~BZ2vTIz__t%Tkbk<3Eh2ty`
zb<J!QzQuCJ6&Q4j9{v3BMQIBkEM-s}PL)Ygu7LJVR61xZRb!t+YKcuQ5uwz$7#dyT
zA!>m8eG?b!vPMr|m;Lw1{e2vN5&qD4NV)%a(fx7Y^m6=ru3jT$7MlErVwh!q&K<#w
z{MmsU2gbu8q?4MSlx51QmfGVNMSQhuI=iio`6+DTIw&fn%NcFvXAA}@KWC;jg`-EN
z(H-=#czerVBAln2^2Fx)9n<ex1g`EZ?r?VMoo~O-71JFvbPQS(=*-f+<!g<Cepx}d
zf?cGlMu-<85gZ9!Gz2tfVVYF5_xi`Rn2Ona#}*y|;ug1&YH%*-9P?H*?a!J#eKgG~
z7Dq^hSw^x!z1FNxZF+2G$bOL5Ner_HJItg205Y^mL_t)ylB>F=#{NH=D9@z*nf>e0
z2BZRAH*l3F3NY<n8~s<u*Ks^HSIR@KqZ<kffGzdBR5#@qXxKYM^DH+RMv|iSG0GA@
zFSDU>8xP<(Fb1bYnit51X`W3MOvcfKKWk>BzRGwAoJHE&>EhO{O-xQ!nDAGxRgqA0
zI)W0&?ad2T3Zy<!4?l3axaaK9UtQhBt(&{p-R|?zDD_QY5*@ozjj^-c!|rYuv$GS(
zq=?#_hs7owT`PlCjP1$t8pDGzTdCTd9RSlpC1XGD4<HmqGWNXjXQ>BG|0y{+-J0Er
zr<@Ps{B9PZ^GWsdboR|yIc2B}XzltWIuCEp$^Od+vmu=+4Rx-gy1*u^)1?gRIb>jz
zC@Fgu`gF!Hw0+-A)x3El*W4;YLp}ZI^Z2E&RXlh{P~KqS98Xf?B7sQRQu=+Arv!s1
zht=Y5fKilbjxyiN^5lq=-l*MQB-m`lH9uyv#xI_~gZ5sR>#43?TjlzwGbiUT)so#a
zqlVR7^;;qvP`~i7ICbI(PM(;<)>a3Lw>Gh{(MOt;T)0WcVUcwPkCptKdQ-iawVmU8
zTwNE&+oZ9Y#%^qDVm3A!b0%zz##UpivEA5eGO>-uoY>|&&mZxgZ|6E+_P+K$>)d;t
zwSM=&J!`$FhEP)gfJx?ri7Fun^RD5jt2jV=y0s>jo^{eKz~K1yIEnAjEWM<~J%j?T
zY<4<Q?|t9>1)lC_bPPk-l>HBmpLdotyv5*B_TwSJ)Ii~GWf0Ne#YwlFU3<o>-|Veg
zdD}#AuAq@53g`sq&RPIcyWwy=fm!Yrqx60V2@kkL5&0@Q{+jtGwGb-yJw4Gp+6yvW
z0_);KWBw~BC5;(?FP-4AFF{?3PzZKW+thEZ*2(sCu!0TfFTkEpYaz%Fa^893Pq8~U
zHZl2PF*#;xm(7o)a-{c>h?I>`b$jO8LRTG5sCtpi*wGQs&F(yJkt}~5kzHuk7<KSu
zMXB6SQR{InOLxFu+kT@K7GA@wH!I~}&XEY>Fb|XB9v|~9yG^9&I?^2@m7L9{@6dSu
z?c0t_v97oG`ijc9mk&l?UoFdbD#P>)B_7_td}nVIKRW3@Qx9#6?!=`Hs8bOWHJ85F
z6piftv|O@x8(f;H2HFg~o3ax=rfsvze+(n}olNBc`wHsbq`@epEqp-8XQV169iL4?
zi{ah1eum{o_wR|%bFURTYRN^i4;6a;=M&)=VJ#$CM3`TnO7TYqzU@0sPtkm%P-WGr
zsb^C-X9>jN<baCqIobS+9p+hLG2Bc8h~b42W8U$+bNBX!ja$=9AuPM%TQ@48N`fvl
zYfiaXI;kD%T(%Roba4<9*D=&5Q#vKrt+GBK`(Vuy+a|ui?Ko`n;<jEIGPo^+9IFFf
zM4Hhbw9?O=`dRHQ)P;V2hCaK*S9vKuCq_M&q+D>$*{y^LxRtexQ4mAXQ@g(M4jFFs
zCbLCstabD>Yq8kOOziBnktCiQF{DhDEc{h8=CH8FEwpQ$7$@hLTy`at!$GpzLk<-4
zP1x=gBY}PhFANWo1!UJ<e^QWiB_(NG(fdvX;rVUt#1F=99+uddND|N`U}!2yRqFKW
z8Q9plu<_{(mL)P1i%g4m8Wt!;!VwS=?hfCyHBeCyr)QY00igwY-)~x@su+g9(*<$D
zqk`k5%%+Xn5d=(<J$~y5TT>ri^f8g65oR>BSHb;j{?m7WZzCHfdqXAR_;cOuMPEV2
z92ejtTeIcMp=b4n7v|J#>Qp_fMw0~ix30rwm2x^%zFURJ-0?&vPQRqB5i+PirU@!b
zL^{%*;Iob$&ilqN*)ROZG3!-mw6!eeA2uqP{8~ZayK0%E8Q1bGy??M;Djj^0)sXYW
z08}1P=)_ggcqreB*Cn^@4#|ZF(PT%`vJv9ieC^t4XK=qg;$QgAk59w5s5$(bHN^1*
zc5UJV9?Q+eQ3WI5r#GR+1aZ%t2HH1r1z@}yeS9I*BL((p@xzBBm${rqNF}1lKHms{
z?p4(bA7L;lPOQoWHimytB`?}z*d6`3k$}7jqv;!qo1Mz!eNlCiLs^zf%lIb-Ha#Bz
zqgnavG_medgo78}fWwzWL9HjgePZrX(8g4DJ$TtMI>UnuYhCAjM4xo9b^Alz3%}KS
z?NjY#yOji&YtKNP8gdEyIn>!pCNzzQh((+{oP+(MpACrlb_!EATlioc4GVOzOd9&0
zSgHJ*L(Ktll0X5WZ;uQhLW(5-S!(=tA52uddGcA+T{RappHkK_4p3X?!jzq*K}Cen
zJM0Y5&<P2<fncBo!^U>L2}Sh3O2F1MJTxk_HDrHPB*HWpsHTFpeJNl6V*HRrv=BOQ
z05id%yhM?cP8<%wu$^xQ+rP9=lKZ#X;GWElYG#}33<O?T;z>^^vw|jI(#K+zW=oxC
z7hDy_Mp-o8!X^zmU`%ub7RSBEe2QSp_vQReO}+nhFU5kuv|f!irScEq9PxBGaAKU+
z1LWqA+)$)b(iK7?C}tN)Cr&P8OALi9jL{K>M>NPrG@-&P#Lf5zFGfU9eA&)({|MWu
zL#*|}yqSHfe1zhGgd(IhZE3k`Sc0Hvcf8O2p(nBBeBA@8a)OQ*d8e%~mPW%%9pi7p
zzlG@Sdur?9WR}dA@5~+Y5eqGdYo-EZIzS7*dl=^qe@A=((%!&m(S_(>rU;gFADbgF
zeX|fG;S0S)9XKKC&U0BaE0rUWPxU`wQz-OcCIyPCYhDzIvr}gG`!xt=EDj%*#tnW@
zm7?kk3G3r>LW^HUw=wYl`6P)Ld>&8~C2+r?ORCsWPqxO*51c;$-s<D3Xyx>yVcbGE
z#cg)d;$Fl*cj{*(Kocf+NJ0{KDKqytCE<p$90l90s+TlzAR&Ik*byN55#TGlv{b-)
zML|Qf$qci2dF|GC1TU_MOEDijn0UT8;`1tue6@zQLht5<&pmN}nL4LFr|a<o?oT&K
za~|}0{d+{Fl<W<!c37M9)q#p?yUis>hLg+z$xfEtt|%&rexl1vk`<=5T2S2OWj_Fa
z>@SUBbZUN+qc9Jw^3K+W?re7Cm@yeb6<EMa5<5f+qtR0#Cis}w%xCGs{3LiVD$jBc
zU}dK>{W8vtpE>X7K*PLe9QA7jaPFEZp;=V1zD{)gfN#OxpE0sTAA5OAtPD)kunOT(
zdP&Ov+Qa^xnJXsCsqrrC`_<P+M&dL=U4KEXKRP|KZ!@eYUr2+LnStVGJKwIb&Ddp-
z(CJnHe|P)|GT)-9&I@=~Zy2LFcU-)$KnXBeXNdLJXgJl0*OZUU#i7%v<O_~Eb>4JU
zlj^klj{9>=KYzBh_&TFhFnU#9;7Lo~CCVNk6cRvyOJrLkMP{pQt>FdIw2nu8OvNR%
zt=W;6gs^9H0tM=%XG_i5x3sg2$~(&Nym?{HGnR2G;v^D4(K|P*B;d0Bncfj0wW|X2
z_W`HTYLBKBG%z7w-3fo-6dE0}6}5G{b=Q7DYowc>P@=QYlJCiNC6gyeP^LZzFi7?z
z5Za#LcrI&?IDlMUqeP6^&KI@ZwFq!#;4*KDZTq3|wX%bNW1!1PFPs``hgEbGBPZwg
z+8|B0iHv>$P=Tjqb<?UdO=?I?et75$8uOuR9WUtr09C)+0SFdsa){Lq#chX^AP9+2
zTpY+BK|vYnD-wcx_m4!syLCJ>qsO1irSyZw2P-=QEOpvJm}b0Y08>V~-8OS<wq&O&
z&O$Av%7huV-Gk}loAtk=xjNsFcnV(QGWghgO1>w>z96g+p-7^0grCWdGeTvk{^elC
zG7V1nReZWv9$hMVts+LsiQ_7&0D-|6-3*IdZM194GK5#h@qf*0Ohy?EzP5LU%s-Cb
z(+;f18dZDG&lI&R4rz#gi5?MNFA_|Q<xwCjNy`2-Ea3h}ej8QH?zO64u4dATb~S>q
zOe$yJaM0%numqF)cf^OSrgf|mVas&2akgMS`=+U8CGDl}S2B9<{6n`}U+vY1<Z_&E
zNZJ#px10^l?zUVhmI($iC7`Y;h05s<>X8ZrVfbDUllpDrTPs4#unT({lRj+;Iz|By
z@gW{}j~U`HbC=yg>HO+5rd;N-huv)?w8S4~nWJk`O{2KX_f)uzD;m<cmGWYNU_LKj
zs?eg_kUKBK1$g|l<-)W_Arj?@J;WFvn0x0o?O)G=Sop0NC+*j5pIu&}D^2sz+wUT?
zBFR%Y<R;9X^xt=H^3=Cf^CU)Vuel)mr0PYZjoUfCMv&}OskY!xcNK`>&(NMxN;!9T
zumJR3_}~F(0HR_(bZ)GlZn!I_xYb2yp>U$QAYcvHBAz|Gl;BO1fm+@J_|D|BqFRpi
zdieRz#8o_*n-J?jJWdIPsBAgy=lExxZlsJA?Wk<_b~g`u$ucaA<14z*)<|B_YJtDI
zyPr6!swCGX|5$t9#4w;`ppH;zuHIpt0UNZBerqdyn_u(<o7bitOXN%&e*vOMhcL>C
z8VIeBW5&SI47|<?G`E`m!DGX%!?!dyDlHUgC^+2diuK4Ju*`IxM_K6<{+$R!EgfiY
z*x7bxiE*8U{OM=qG8n+U_@S~4w3jyWx(-Nl0r*C9@mTs>Xx?qArkPRkQD~HFvV>V-
zxV=V|k$}yJHyuR<i3ObOZ{6AtBf6(Oma9D#i*n6xJ<E<Mkc|8;XCoh8V>_ZMQopx~
zXcUl_J9f0H4&~v16oeATKg64uW|pK<5Wo!L?q9s!ug79^yc=c;a`%6|HHL<~zz(E6
zU^rW9ihu4CQ~&vu-1h^`w#+NOC|L*Gp{0D%YpJ`SmM8l^&-KbFV7?lpWG2>`lNF|q
zCnr-h^7Zy7g9%lX79sQxoi}8w+nPXt##F!k4^K$>y{nLjo-GIl;Owg#xr{W~un=?I
zxM7kwX{jm#tVu#B?EG5xo86%~+;>QCT5EQb&-?4V;Xm)>FLHR);@zRv$#Vz+S<{|r
zs>+@>3y%JSAFmuhPpFaodR=Z$@)f5R8?)uYDUxFStaW*=wwjjeRS!!#WLvTC2Q(Ai
zEinjW>0qJzanpPqF}dFN8w@my<o5E9Um}Kgz#qA5U}-Yc-3M1_ripGGEj;i><!w(+
zsMGA`)5{ck_1jixvtaML>Q)NtGY5ukdZ(95wCQMf`^e<<bW*=1HiW2?{P~RA_-inZ
zw0^r$jRK{V5uA$$MRB12X*i$B$dxgmQ0$;w)%L;#>JSCN(w}C$=0rccs71#smR!FB
zZJ?(j%!QgZ)P+{HFPL|vXI@o|82iS2MP!IOx(0I2i)A9@uTrPIrC8fb^Y!=QdD2WW
z+Gi;2Rzs?=l8&&^Ru~0E6e}l&)hP!?iji4D(9PkG8iQT|Z?<Ls=EvieD$>c@77yph
z2x?-C>?k!{f6=TF{B{s_a6;w&blvRu)@ruuYzH4JSm%G(3SZJ#wi}RI@w<gk($x{?
zQdf>jCq@-U(u5>dSTG=rlo*N=`&;x`+>KRRNW}}Wci***GR=6z6q?YTIn-@rvo#-R
zI~SZ*)LrZkk#YJqPm!+n0gF*L%hiz7Q@TlNkYBScxOXHrg1wIAvm14drYTKdE!8(_
z**wE9X~IlONkyTLl~mjmG5I^_Ws`>tZh%|WE8ei4)4~yhjhOSG5tT1Wlxu>vJd;yV
zHwYZhLC9vyP4c{oK;c_gg7(;_4|3aFwwp`KNKBcZCX7zZ^uVKZBNMcV`98)v0|*?2
z`SD4-A~}UCKSsTbO7~?Av8^bw;P5}-R0q0E<bzl#5#{E7d@LDf^|r<7zK>76Tvj&d
z|98Z~F#ln`e93HOShUFVHc%xG&jYb=Q#wz>i?zRo%-A}=UvZ^Qzab@LfMr(sfyJ8q
zz$VTrlOnF*Fy8Jcg9({$!Arj_2aznSR!)Aaxs8pVtM+fPFCWI<`vD=B`hA~Cp%cL>
zb+y_EyahXg^G<5*_?k|mlOY8bd&&SItS73)uumDk2cJ;J5zlXarPB}-_+MVf-aHT?
zq|Xzamxgm8GjKQhP9?1H@wB(8{31jQjvuVSGV_2bPa)H#vU&@Z1t@zWjCS2f%wiO*
z`^?iej4arF{rt@G7n*_^1IHJ|;R@(r+Pv-#tUqEb7Syllx)<vPBhAyNt;znh{)Ssn
zR@{qQ{*_h&`qK#akHOkN{EnjF%aEW_PP$YTF1f6KRBx4!03$|Y<g-%FA=PkSfJ!$b
zf*4Jmb&gp|2~1S<cK15zAmFPmYR^Y!ZFlL{4zhl3^n^9wpkK`-bx>*RHzkhflvr!h
zv$MIFoZLNHVk29@jwzAT<C)wy8B)yKoI28gz0*?u(ZvXOet2^cT!{x|dY|kp=c(-<
z6A+Ff{5u%Nz+&ra^$zsSDnD`$B(GMa7-v_<-D@j0oo7!{IJI9v1cEQS*a;>P6%Z7g
zBFGLC(bvm`?4FNg2xFT|hjWaE55FMFKE96kI~#X@UyKNG`NY+p?gOU?Nz|z<*Bnwh
zFX^h7+voo|;f=cegW?$+-eIL3&Q_U<X{=uatzns#hK2p~s%YN!<6dv3CP5szEyzi6
zI5wg_@Z*_{qyJp46V)`}WaM=k3>3V*x1(i%JUZ4&k@#NlN`URatfw#KY{SNygoBRy
zlq3WRSsajY-03n_r&x$D?wXqPmI}z_Vb+q?&Son@$E;&M+_JChsMuve#Zd+V!`b$j
zbLp<{L-FQMv1lEgIijUIChg_*bmjOM2!_SewyxZs9Wd2TSK5H-Tjz=)%aZn@1V>KV
zK-XDzLBOaAcj-CAq;^JlXlw2xH-L+-@(?HJDuhh(>h4ycy*tcn|7|Bf=k(DdosCl)
z#9$_n$^a8N{kbyE@i8upEuW?_KmGb-*3IGag-~fjAUcffH~2-+tOte)sqtgVu-$Ma
z;Q`4;N;GXXm-@hGVh(Kn!aO-*O>0G_&*&ChD+?h)<Khl*qgfG_9_oiY$NocSiw~a`
zC!&;2OB>tIt@!)4)(qTcoop7~3alaKexaj2em!ATk346&M;D^9Rva|N3O$!Bheo|Y
zt2CZxd{%-(Pew|^Eq|2N{n!`3cZY?86bHqxA8)y#L?B<`T2j6(8mVdNs0fj0Ye0xy
zb7Y2F6Wc-20nH?i7g*2tXzhjI(2o~hovg)C6fH&}wNQH<C1}CxXZypytP9}l?6nAf
zQ&@&DyKfmLp(4Vx^-K}W(H>#$CL9Y&T$BcLA?Xy{AN|!nSLEgxp3A?m&H(4O5Gl@v
zt(4y&cpnFX2K4V@Qr0JmXb1z`YS#ScD_8fNQH^V=FWAE>hYoUYG*A3v)|^{uUqJVn
z8#Y<ROrE%rU+}?IX+NVQb&b!|rk4R;q0dGIX#FiMZF7D)T~T}MbYhH{-<^ene2b9g
zTU3<(RDwx=W`oa<^@;X^={T|j%QY;mR<=%@=aQxidg)r<0v8<~%1{fJXpg>PQeGW-
zcQ-$e;@dUGQ%h(R$Tc-QD{wO2`#P(vx0$i-_mCjWLBr|VB&+ZS;*0&->UGxvrLxk*
zi|B%EyNPa83$VbFz!JS*SdrlOIx5`Ib}@$ni&3dev59R_Sn{5*ZWZ^c^EuU7w;z1f
zFg$CRs`zC*_26OF46^<q+$F!j@8MsvmYdnBSS@^WUh!Cai%a=ui`#U%pDnv{qkHg~
z-1@%#pen5S@^?omf*33+MdMl}NOi6MN~Nh}?7#)#91WX4Z6S#o(3HbQLT2Yznv*1H
zElT+z(gzaGxnnYbdVZDfI|}=0?wA-zGE!6*85js-5=s1))Wy>@YWZwP5Z}Tdx=e~#
zB0Kv@ho?_+saFmX8~NsdB=LTwj6*#dNlKW>dlyGAJ<2LLk2vC1dAesrQ0Voxy!<ZB
zi(Fj3=ACh@Q%FSF=vy>m@XFsVKbo0rPRUW=+CsfNYX`+M_%y~w;_*1#EPXl?;0;Qo
zEmnyYr-Y)4wkFUMn6}_D3;RZwc?T87<C@Try*7;{XnmRCDNAThLHhQ8nfK?Wg8%F{
zr6~XKAN^9|20D}vi!P}b;0JU1+OBEZ_E>9WP5M^8_DS&4xJ0lF?ozJa&)(X#?MLmH
z^pp`RkBBq>t8n6S?XnX}VbODlIGBU5t8~j3)#4{l=cYJBl9sd<x(KU$9Y**H@2DD8
zNDs`WxI0=R>f%^k^2$qp{^4h(vAXQeiJt*`wspeG&nklV>?Iv3_EaX%*!{4;IqTQ7
zVl7DQHlry*&yU!FAD}!wM}dWWL0bN=yTzKdt&D~MtxWMswF+J^56`~I@%TH!Y`yEM
zvoeZ>va*SFd9NfZ@}P`!dK{rswc833o^M;EW;;PrqsgZbMDHi>hT#3Qnq*kiV>MeX
z%H?3(h;y~L<-Q+JzC<0ppozZRp)a{>dRG0VgV9@Rn^Ezb4ua*2!Ny1JdJW^}wjZ(8
zkGTvXX7U6!d2l6vaE$HbF>g2#hwiYu3O^bihwBvBvJ}W(>Y)f3%H;bk=4g`6DV~m5
zsA|B+NJM_piC5e3LZ6M`kPapcJ)Ci{f;cO>cTT!Q;=T1h!0|5uSEtAh$T_KQig$kB
z_ify>KdL*AH(Su^ZY1s+er~?T$#(5BGEol8SUWac@s!xx2zh7COOWBVRQpOT(5H75
zUo?jUGq%I$*)T8wIjE&Mx{X5-@4jms-|mO3lrB&e*%n%_o`l21GH2(>F)#f*U`b%0
zK7FoS8XOG_|8+&oSYw81`^rydxHWt1{e|(G-Fcxz7^2;s?tGm2MWPVQlJG`)74_4a
zBQYVJXi%y$Z|;)_N!Jkmebg!;9q=X7;wf9Bv9;@$QfKV5AP;CY_Sk(jrPqdN|EY|O
z7`W}JM^mZ3IGrVM*M5d<eTQJ6s2p7u5ru{lmaESzEi2$*p#7!F)V8JVb#NSJ4Q1^r
z-Hp0`U~_zXtz#G!9j&z%#AW>kK1YcNiPZw94?pkw<%+Di&ul30fK6%<a=7IXPbl*g
zo^;fAlLMwvmJK!sE|$9G5%*+e_8v=lfepo`b`8z->9_%3F7g-QZOYs$_E(c*v~Buw
z<?0oSntlD|Ii%iXV&eID=hapPrHM%9`9izYdl=qpZ^Xyej>*fPwA)kiR?hP2!el~)
z3Sl__U~yz+q~UEWj;+KVzJaL82RB<$v#7<0b~ovEB4DFNs4}HpW{8iCxoXioiN7zg
zf3t7qmmR0H6?i|w*oi3pQ1l<+O|&A`vS?T4rRFRW@fJ1?h&9txaKgBaUMxbv-+uKR
zNcq)Yzkt5m`Q_;eKKod;-WGH4*oy~AfY&#NL}p62x4N<1)kU}sx)G#lyW5HSOSTQW
zwrI_yQPFQJ?uJ+LDpS5Q&S!^muz6xKPKwuH9Df}4C1Ddzuqd38ei|z5DMSs`Da8e{
zfyZwE=T)WLJMb!g7-_vFZ!C~p0e)FBJF|{bF{*b4eq!kfIK=!9qgq%u{H6{=U|9r`
zJBKR@M!DFZ_KC1F{O2(#u>;)$wlQx^H2R)sKll1vp9M*8hh1JnWX;->SJjkE^oF$Q
zWJI(=yh7bAh1k8YAsarrhDm!1i&|bByFH(mMneZOo6Q3(h^6B5hOd2R&Wuo>3sxK>
zqWzZWyPh^6X1sp&1R1<#J<E{OzY@&u7y8=SFK}eH7))F_V=)TeUx&fgtK-dalwzV=
z$;zR$-{C_-VGy{dQ#&a-A8w_pT7+ppU#ca3x6@-tb`Ll{a%)MSFYQMSJ_WZM#_#|}
z+-pColBZmD?Ye?&D#N5kCQYeiJ<bj!gkPq>S7tMBhk0}eG6)8RU>>vY$is!Df$H-T
zUX{9PL4TDj0cTeLjANH9kF&S3gSiR<?@_OD_93i%2+~3o8o8emyvy=uBoQ_4PrG2g
zHt&hwT35us=PSt>_Gb^`!UYMVN1;C==T~Y66Tt;e>6tJK6ht6KON?rbS#L)9nj3KE
zcJE-HXy;?pc*ZBLH&2Q4M(U@>qKW`FNRa0HG@0R<@U6Ta7?L4Pcuq3G)m=2?EpmoK
zL{}<8pryx9J%|rC-Zh>TC>HHsJ~;nJA=dm83{eK?*&(K=V%1cne!fEbS7N1gQNuOR
zkRKlZM;rl=G;G?+@y?IOqir}SL*XCBi?xvg(J%I>fselP;w}+<V~-vCq-pu`x5#F}
zOTW^1{^GKc0<Rbd)XjXMP6w%?`aF9nQ}6K39E)lX=udOEu5A4(ZJEIz8Ukw=vA>NB
zNa20BR)^LF;h&ggI~-sqYkoN%fiKWIC~iKo>WZvfeQOo-xV5M0ANkW6V=oN6rnz_M
zQcA-i{-NP;ZiF`Vu&nEjO-s{VATsUVOO{J?cg?&f8%#52IvFa#9KE&FE5doc9BCpZ
zb|_US3vA$p0?7g9vvlZj#w!9cpCFG#!(3M0y&vOoLJN9K?(zfuUr5YYU1X>svLXn<
z>W`$jq+feHFc=p(ZrX*Qjnc!pL7*wAlvrdPhhWVUc>%t>q)X7MLZUhzPuJK0x$!IN
zX}8a7LmO6L%tt9v70)i0ziNZc;(WTGtmwuM-M9|8rZxPqA>(oJm<-qkIF}A58)eCz
z!HSp+h@U}22s*5-YbR8^@wf&cGst4X)yO*=lO1dKGFmig7`%ne5|S#C(q#X-(0ioT
z+<V3Fkq)uFk5@P8#<|<55PS-O#(ose$1e7cuY?%(W2QBsxsreL2a4PDg_NUW`c1f2
z2Fz1V^6OecbW(5&i-8p<N$fHV&hWjiW6xzHW@Zjc7jVKc+1Kf*4Oi9?zTL`8usgh9
zlh`|(9>#{gupT}Ak3Y@u4T10=ZAH+nu4{C|?;Q9PlI}4!|M`!Vj<bKO$k|5(<WSOI
z5o^MSiD3&YVfdK}CvJjA<HVQ|OA=UxQQ#Jw;Uf?WJYsTxeNNz&por^l5>YtU@H*rO
z?O!lgJ$nVCR=k^PFfk_+hsI1+@m@o#Hmbd3Px?wf-DjeYB>Hh){eC~xxE0Gxdz!G*
z5W;jr)Mja0eUG3}7x}e`6&uz`dTccWNAoEFHRjHtkIu4(kzMrrKYyb<q2$F?nje-8
zCPbWofuOouBvk!G<0LP`n4T?>5aAf%U2=K<JuOaD1fks#Faf$JT)+Tz2+mCF_=gS_
zGU-UyVTXB?JvVxQiiiNSPNf#ek$aG}wrKkqw-VP@izY;Z>a?{3ooe?<e*lm`OKHTA
zJf2QtJ9o389$&&N(N~J=NMKRmjn}#RvomK^OxK2z(JM!xbG$osw>f8I#GoW`Eicb;
zFt6va4XlKXoX5~3bdRu??nj#U7SOs+sh#$;(1kY<y5>EoJlbW-khlef8h~<_Z+^_a
zkRX>O@luA0h4Ajb-u$VO;0nRC>X4ja;yF<hs0I}#4fc`7+~zk-n*<fS55%ehiP+WV
zH0L4(Gu@XYI4){jxXG*GJ=ptdHs}*nF+BJ;NeqJqnmS`RMD1D%ALRdpk&Bcsc1<*J
zx~IMM3qHA;m${375v2dBEu<PO>atdu5$Z%OocF+?&z3F_eIEQOvjvPVi5k=#<!A8a
zz8*2*k<lvm0%w@8>d{WWL663-LD<JR3ZtjYy-tSqZ^Y;V>wUSG-L^~Va*57qMn2pZ
zDI(hN7~X@r)z8Y!&()b3_8qV&iDU=3)8ebcTCb=Q!+ujNhly=QeJFbS*;K`)qP?O6
zT(wzE^r1UF`k0!12iehya|Ep6O9;hh&%}ZB%XZngMvj535p5J7C_DeUJ}viX%w1}m
zW%@04PWOM-MUyP~1U4Qx8V@(y4K)Db*BIWkeUg~{G=ODv*U`Xk-b-$^i7$(Wx0Jk?
zu=$&MUuTDQnVJypFlbkTM?ASM0FX8*?!Nq051IFQu{`JoU218KWn>GAEnZ+P-n*h!
zqpr#Md%J`lJ$@W55p?YbzL?rQvY7PaztM{Y0j`CbS2{6l?<O~#8y=yqa!0SPg1>fr
zn+8agb^69;FJMP3Wru^4mkR<_N{j$O0}Pz`KYX}IHiBvRsRixyAKYfq<hGG47Mouy
zv^VCg2?eB8vXkdL4=0}p?ZKOiH}03W^~)pW!+b3ahcQ#hK<!M<nzLW*gi7rxK86^y
zxet448s%u%8Dh@cNlaRKUkI?i3#upF5%!ro0P<Y$Oshjb*MC#lmrc3vJv%6}hQhPO
z+5%usmG{^8Hxz3xiz=7M>up%0_^Kr+ukDG#;2|3xOUbD??K+`ru?U980r`My$e;77
zmvf>{h%#}Ow-L{x_aYlwr#q|O^)<9ZJM!0Q7~9Zim6p9(aU_j8Nqnk5CN*#gpkR&V
zS~-v7?+tdIE6ny&35W~shXC=9)4(f1!p)!SF~|VE{Lkm3ido%v{4I))yKc+|<$B}z
z`h%i$N=v5yE{<YLD~9g7qZykm`pjGA(H83t@2A^%j<li7>@@!X<5$7cZ+moc9OL8+
zK#dUsjTg@ZJOh`6<J+?f&(%q-_@u1Kk6!N<`?kLP%*{>m917-3F7I0pZe-9YzTefX
zcp9FWdvra=PyO(zOuT*b_WN-vQE@ssnQ7_c01&y%u8dV(9p_QSmMAonD>M5f7J?e9
z{Iy<sBx}105i`0fpgeK6*(pilcE4I#BG`K%D$wA7AKNh=^J9@My1WBEPW(kKqDnH-
zl1&nS{wC=WvCAMFuLo$uLjgyn^Y5eGtvs{5$ICx!59E(|n#q+k%Z^X~*va-gTo6#v
z-pVQDnll6c)g<wW2bX%Omwvjf9DDx8+KOXO-F)2X0;f~^svmRemud2hrPJD}nnVc+
zBKG8b@7npy^`_qH%|T1~F2j6x_H2c5+dYdKyK^wtY_5LWOe4V>?e&O@3|d`C7H8rB
zsA?xCAkDsO)oC}~$z~vUWoV2i!6Y-k4_-O+IXmi%@$Y=2#-P|`Hg1HkLYhL)`0Jzm
zwA8X=@_6)FcE&;w2spqlFu_Q|wTKOnCnEkP3cF|Nu;hugKT_Hz_v3^9G2gn8L5n9(
zW?evP!5}ab#TFEC$<^eG1KXz-_*rF^uRDCG8f3^m5_)L8O0pK^bx3g)_*8!PcHf}?
zRASZYTS511gpkTd44v52=1W=BrK}Fx#Kcp7uisYcd`^0KW>4?jbE4E~xXnSy<<|`}
zH^Uu%Y;)Citv`!St-Odjjmoebp^gP8Y>i?jFXlPZ)7=PjNue@<Bcf$<fX?syc`6Xv
z%kpg`jC-L&6WeL<$UNqk5jis-)F-cR97oQ~I02A<L7&fMbclF~%=p9Fwvu=_&=D+%
zzp5cy-gz{owt}+>uD>V6tLjkOTJlAYyDLrv?%`C2TTd}{<jXuA%B_+ZMtT)|i@GA&
zJ$NI0dFvh<JuQ*$cY++RO@c2=c+t@&a*ptoL!{nnhf4)t)$<l#(!)mx#+1730h&Jf
zG964OxW~d~-(aqO9*o9fhT^>09p{vuMRbs&Tsz(JhbfmkXkfh(D~CM-$cc!uC|F%=
zapWy6&ABdt$vtJ`?k(r1!YO}}wSBq8Mo1?<1o^fPeUXdAz`2Z78$x#1{DMQ{T--|t
zbiqz3<hLObJmg*qGkrW_N@fQXdj%0~W4;u1FfD{Hs%xt)gA9S)0oGF^6p}i>?L)J+
z8jscw;6o2-it0qva<3x^c)H?}^+--}I@ezXi2a^+K7$|CNp=cj8?>!Tv>#V${az%#
z%{-T_4;*b+Yh({h58vNGDq;)HW4C>qqF2=m+q^%ClzxpG+6mWe5L4XDw7y7~J3K)@
z!32~$lEtKX=j_&LC<~C(mC|re=(_y{@*8T9TOqTPC5)@Che%*K^*<ImsD`PI<ghO#
z+Jb@Bu~ALspoo(?p3+)E9v5h-_wH|EEvzdWKX!IAf*h?~Zk0>C2)bVp6dUxOuc^mS
zvhB^RE7jfvC*0ke>i0i>9E{CB`M9`tKBqoP#XzGz8k?YOS4XPxqlM}Fu88bxXO5ly
z`pfb71Jyq5daA-=_K;c*TedBz-{0k<stUO=J|*f=!txBVw|FV=5UEI|qz7}fJ`YkW
z7}P5jg`9JG&z3U&J-wjiEKhA#gCL{JTv>v;fywzFA*Y_!9@nxHn2EBpObCy0&sc(a
z8m_KSfG-rEh<slMBckiqqkNS=V<}wyxBefvL-0EG?nPa~ZD$w>nn#Lv-T@OL!?myB
z4XfJpBU|JTUU*T^(MNL$_Ge{5tw(qndde^w6W@$ZZ7W|IrCwa1<`rj^ntn_K@P>d9
zx0ep$d>PJNod|zaWsM*V)4fM@-(K>hbN1M{UZ!yYOz_upCM1$SY}<yd;{Sj?sB-lJ
z3V*HZMX?cj-?vhD?K}eV7|L&&o-Z@U5}ys^Z5d_?<hn0e?G6e%$&iw@kqtb!{?$)+
z5L{+^Gq7G*@PT)6JlOG>`zs1ccGeGg>hf3M>NbWtqA{rVPE*lkJ=`_`eGXk)sVjC3
zjt=EGTYY}}skb>+1GL-A;rF=ew}W9JWCO3>2n14c$P#tB0Y+xAVZI9=>hLTxrFJ;V
zT>>g1um=jh^=j180|ENvXOt8*{D>C^_aCH{AKmwXaNq4*#5D2*PfeEW@u2++1V{l`
zp#>n$WQ2SPqOHCQi))-|B~ziWF<K5Rn<#*t+TBR1Cp9^QUaDy%Q+_`@%68s9??@Tf
zH=PC+?(OG{z}LsH{F8U5&}fXkCH|b`6$um;vcPV)mH#T2;aa>4F+B#M+L-k5Ir&1{
zx$AMkrs)xs@TsvT)&7wx_?uLiI7azAMJ#P$5<l!v`F=z+vK4z|?R0M4htZ^H3Iqu&
z7Dh^JmGM+E@=VkVN|8NsdDxeyNoxFtW=u(Ti{jAEH451_QwQxeB@RtPonI#O&TIX{
zAAK4>*JGLUH6qP$8r(moY|Dzp_8rFuVvxmaNsQa$kmoZEH@}=+I5i4&!~}Dj|LfLq
zKh2pOIc2rjGhf`4u6Fjp7+m8-mnd(C(KkFV(thuz@Ov}bdz>&bTs3%Vy**1k;*4&_
zt9lX$MT`wAa8gcID5OjHWVHZv;JZ7%Ks4T;p|xJLYG>DWA`RC$)TKpEr?a9C)U*0X
z+&Ktt-`LsO=|;N|KpJuR>x4t`kvz~yiY}92w1_q9(j}k?*&_;1LgdFO{;Mo?h?1+q
zF1^l90l~<pH_u-|{MK78m|m(Wg)0ZQMwQKB%{#tr5tXaYPT><G6P?i_GDt6bz4Ain
zJsZ5e0BApU1pC?3;9G5Ygx?))oYtGvE;LWglijC(t@rdx_bqo7Wwvgx1>x`_4uTbo
z6KoQ#GX@klu5`t!F=ThaL-u7wt`HA4gqvSR&VC5^VDCkAQTxsbZcP0dhsuN5$9-2^
zX99IwDESII$SrLngS<hAjQ~_N)eH@<eB>aUbz~SVs{eRtDZ^C}Xw9ZN_hP<fqH>ei
z|8%yAb0gLFa%!J)@K#;c{Fb59+NhBfR1Nz^8Ur0Sbn9?Cdvp<Q&0&1R@~i)%kd^VL
z6OJ?5?S}D^-S3xSntzKmNP9??T7d?{qKrR>T@of<Gll3_`;(ovn658EwQ7<5T_tKK
z7JjKEVe9VkBfr-V8F;;mAo#!<WNf4a69m}>=Bq%^ch2K!{LpG!%OadBt~c>e*)RHP
zxg*K{l6vk<``$h=m@!MRGf6$lt;$2=|1>jd-6?lckP&_7U3JNlJ3V7lVzpZ|`XJE{
zV#3UJrzqg(0A3u)x86kIecz_-abF1NmUuto{Omi!eQ;T7aFA(i|N3woVvGdp{;%5X
zUxGPoJp4kzkWapFVj5yaq?C3~L$j!_YviGwJWp$`yN~{{Sf9A#U5CPkuF0FraW<FA
zG)=)2xvY++E&O`0qsW{K6i_#eQqRQFM=YHWtj7?>ExY$*sN9vZI`LIS_2mYiy(cFV
zLF%1&UwI7@!IuNXP$Bq-bf>-be7<8z<n=oliU?lroh{ZS{n$c|!tZ(MI>GXgAk)Fg
z5z>m!M+-bNi(mc8LT%iKmL!wRF&I$ku%hEo(XDW33rGsBj69eLV7{}WrsGMjM_axe
zMJ4d?&-94;5m=!<EmHz@zV+vb&S!jGMkqJA5*RMB_Hw~0s0^w*@#DI0dRNu86H3I%
z2=beSh!ESqI9fWamxj^;UQ3N8-jq!U-UsK6KUNK_u&I0LiBwL671W(VIjkshvO{JW
zJGGGfLKV1k%wTGHsiCW`xKm<q{z|I@W+8oC!?vcA?iYsIFo`+=UpQ_*<auL`NKvQE
z?coLlEw&NfIN*hJ(c=4K$LgcYce_)W=k&$*%CH^d{|-5!L_7^&cQ8GqOC*S&BZX=F
zc&=!F&)$Zy8Tjd`Rb>u2iJ&ItpO+MlO1Mg6+dWeGF?bW#QO^PC6}?XS5mU7qOZO;b
z`lB7q#9T!f_Lm<r2}>5)Kb$J7^nj$8-|I|ysg}b!w<_?9jz7Kmwu(MOob8Vbpjvj=
z)@?u-i|mESj}K#z*9E$lV8MIo)lzTa_s?e6-RK=p81ub5X{Fg<(5ZeiA?w%s9Y7D%
zUyY_jSS~ZWc);${iJWbGS%0xheaT9JHXrgh7fp=9uTn&xa--j({gHKb2Y9c$KN~sq
zQN0eKFnfbtvv+lm<wp^Y6K{4_w<Ziug)petBxVEec;N)Uow#U|KKgECyc~W`ROZRw
zv0OOokv#44<pu<fp@1v#p9(sn3lE6IpysG@4_PZkY(25-<f6M+kdknKC3Y>uf?7%^
z!8WvW%d|6NRg6_fD&-sv<;Jg7^qkkZp*tnHU0{v{%K5M&_T;c%fUZ0GnER<IdPgzY
zgL8?5!h7zy;;UPpmH^K4tYzQeRB5&X;Z``)1r4(48;G>bkD6Fb)~p55>T!-fsiIm<
zgz>IdwT;wGI`Y6`6yLn>;nX0Q_sJo=hxXbD;;n0Q^KJ`q1*~`cH@~6Ff8R)-s@SgZ
zNN-2N$u1%e!aly+lGAU(sUvnE^=(n*=d!$jVtXr-!hPpZS@S~OJuoBzW06~5I(D5y
z7T>i4)>!xV&U6ibuC)b9P&xy;&Y*$HUVKMF=g;2^%LmKsi)nXkv%Q`#>jW5v6*p{R
zuk`+PdN6v1I_oT*C!XOwdoZ2-`6o@+b&2oo9g|xC;%8{?#A7zfuU+i(I=WenOVQ7}
ubJq^ABLIC6`ZR3EfjH*>cC+~*>Ya>X7-qja0*v_qddYrMlKdlX9QZ$6e4;P_

literal 63233
zcmb4q1ydYd(>4V65S+!`oyFnCB?Ko(aCdhN?(QDkVR3g2wh%nX;sj@L=i_<*!B<mL
zQ#CbpW_r5M)pm81ijph_DlsYy3=D?6oRk_23@pk2PGrQ7J9sx}TQD$p<MLAC8eV@-
zUp+HvR=qc)-g;fBsO%rB?mT?D2l!#QLENE8us)dbPPBF3&nKYXH{*I|b#4ey8}g{G
z1p|3ctv?2A<{t7<RR2X`x;gEAhA|#B;s}AZTK@g+{#e6<?L6c8&X1j?BVu3GRc+CU
zly|+Lq3L0v5ia29cksGNP$&BTe{BAX=pMQMwiRSTZn@7I2)yW06FYx}T%$n;kP7}>
z&QGI?mH#wA$er{NBjbS8Xl3+U>eEzSSsc5c*quLs%}-u^c1VYjDS%S=;5lu&{q&xN
zd%GcsJ?nE^H?yUd**WR2^m6T@+NG+hYINwsptBpyoNwiN*w~F(t_>s$e0rXmeSdvg
zzI&$??mIV(6Bs)IxArUtVnQGV1N4WA1-@Q^Q%7sp<!8^coPzU*Cu08Trf%WjGjOx=
z!R?sUYx>lx*xIb6c3(r&>Ge?oIM+T<V3Jep?AlwY3v-G5p8KpmvLX_1@dd<Gul)o2
zaO%3MHZ8;8X=I-}Xx9JU_!EqN7T+Q>x)T`)VSH~09Dm;7$#v&az5}7HTCT|afl!CQ
zBx5IXTFL0)0h&Zb=JM)IkQ5vrUm|7kel<>+$J#v#l%B~ws`c&4-EFblWI7Rzsap%r
zbr-T+As1NNr#Rfa*oK&g)C2wo3cT`9W{K73T8beaIy@Y?o?aY*ZJl4tUr+WF#~zwp
z%STQS1Mk+y^k=TRt1b#8FXrPZSh1f|2frS_?tb<clK0xFEPs0(>`cAsRhGpPjf^O`
z)`GR1FU~TS3hY-p6?{_q`i5QKt-Phg>G6f}oS|x)`DG^tZM49eGWXp?U~=Sd-`f;I
z@bv7-(;EN1M4Bt?;3Y5>4JpTkHP3j>hgdildW}*M>hJw}5>8NwkJh|ie)$Z;!eeJe
zx?%-Y62Pc&M<#^F2<-NHUj;*+?DHPG3vS&HJ1g~QX3;m<Ug4;<si`8h`zfd@e7eDh
z;$(1-{@B;_U=dGn@g>grsqG%qmLAJ&DpFdMzGGmU<}-ElduU__N`s^)vSG=0^C=ao
zpmA^UJ&A#XSc1Q+=c9)m$m|GqN^7GCK^T_N$ZSRscCOAOSG(O{f@6!*2)(U02iPt2
z8AES?+JD_P&di@<BYCN?jl{We{U?k9z|?&&>#pyo&;ZQKe#=u!vFCpC9~ViJ*W4SH
zlg-v^t-h_6>Et~B3UIbJA`vt-dZ^lW@U6plui{w#R2#YC*|Fi<?UAgtOMwKITPmWx
zR5jq4zr=82&)nulKH?Yk!QVB3MW4~CL)=ctJ0>x_LMM5OQ2yI}uj)7Cr28BH1jDr@
zAucmD!uF>Y4j?c_*^3IatP9jf00=<54eqM~I*;+XBco#FVM1&?;P)UFS?|m2JvV(b
zn8*1U%2l)(%A60k|51Oe<oVN6+8msFB30m+RM(|f7d-u#FsBJxHR`#DL(FksQ~8|0
zWI|=D7<_*uzx6IRzuD*gxc`3fdwzK(=Mj`4u7QI&Jk3X+a@YU9759c@dP=X7T`^f&
zz?EkC&jkkHecdm!hYFk1L_*zx3OoTrXoJ2zN@7E+tH62K+&14_`grfaO5gh0JdJvv
z&vyMd1Gj>}E9Lo5r}uWD^Yns>r`;#T!H<R`Qf(EUKMyFr8+fKUx+UeGNNk{kwx{88
znlz-?{F3tR`}ol8__<d=Ek@LUNK`&d;2|@nA=8RerIBm;tE%P*5sozF&hOr%#rN04
z{O2%s)l2Wqn(t3JxZCRl1IB!u&iC5(F8Az&obNf2t7X}TBdjl|2!K^7P!e}=oF3GO
zItLkeg^vK}fCn)G&PIP~UAQ_bc54m4P2Jr1mdVIEzRiz}yer@LK8uo)ioW~`td`~f
zRDk~=Al7hwevf>0F}!lJC`4|f8&vi96mzQp3jku<u{EbSm;S`~Sh`!@h&sawlkXEy
z@6$@|5qE`b|KCp446#F=*K4rIJ-8R2Dlf3a(Tx7<W-P9a%i-EP-6a~;m&zv+8bRN+
z8>SUKgq#ajP!fh-3;;2w@VdOJqeZ@?s$=K<oE!Y|(&tsI&f-norJ}BWK?aq-Fx19*
z^}cXrWjZ~G`>>xO*!B<msVCA$$Z11e0Xd9+9sZlmU+^llc;kq8J_DE^N#;Yfleu3P
zw$?wxijCSV6a}O37z=#7c>)fw+ArPMVL#7|Ww#d>J^Nun9q~z3RWU^}dwv&%9^DUf
zS_Kb$F_%O_JZuf-)-(775n?B09_!Hf@x?yl;Z!3Wd)Afl50jgPDb5uL>r5VyF`FEa
zsj~wy#!RT@*YC^hc=9wIv2VDYLAr1P1~)t*<;BcAgB|R_NY|C5p52nPPm<VKDz|J>
zz{5@zJ~%rs*M1qZ5Q3#rgNhtj;2|;hiUMeL@HG*Qe>npNXve!UF7qHwfB~#2$WS3z
zt<t=W=>Us9t-Ff7fA$j$E|{#R=x4M6`h$!mG$C%FRc++A9t<FWi6#&nGF{5i50L|{
zu1srb=5aP?n$11j6f29~Ut`&8`q2JB0($o9j|B9>01WXXAjC$lb!fLAx_Pl%yC+`B
z^|d>QgUNa8tGqYCfnyPbbX}}kz8})JesVKo)`gfpJLG_Lt|B7^yaY;AwFVA+k?h!P
z#Mr!$uO|=z0$<ORH1k?CPj~~Vq8p#{y><=>_`1v;fPij~^X@K(radg_Q|X^^dI*3S
z<&8d6pw@sz(*T_xx@q2t0P}Bqwy$rO=Urm@>`WpqM4x8-@h|lsmQ9L0D>`2W2g0k3
znzmsV{tuXdSauWSv4kgj^lhzA@g9?}whsb<<nQAK7EKz3)Vv+nb$!-~FZT;w=rp3w
zVN90$yn3tuw>vDeaFUq;c0gJQ-<Xg%JE;sGwEi;ocP5i=a3jCXIxnX)_=@`aeZF9G
zth{(g@98wn?)!#?%f0^n&a_rY=B0p~{~;bJq@UCP$n?!AAOL*eUc8qpmS_Ljm0B1e
zaM*k+Q(nqmXYX_8>a`uV=qhUkSWk%gl!G=`pN^LMSL_|ymFSR~tM32PJ^0$Ckfe5g
zGmwldG1!^vd+y!l^Az{{9w0{*%$WnD&Bg0JglzCuoH_vxLw^ekiPM`iqIN`H8BfCi
zy5QN>!GK_;a2=&U;d^46PD2pV)mWby+D|iZh)$xF@7<aIvN<BXTcaF-a#(#X1L1t|
zcI}M=;k6%1IuuB4DsyrX=ZpFH6MG~^O-jT={2BX8-|HGQ0>}bp#QH7SQMmWi9)T%c
z=MRaAew1z{AOiB$Zfv8b)skMcl}$W2V9wX$wba+dm`nsAWiuQ_D>h8K6*DzRxXph#
zs6Ybz!XSRzFFBSQ_hPRvVs8_0exm_*RF48KjFq^25Rz{!3;7(Q2KC1xksUmsj&|{>
zxZvs0Ts$^UP)GlWXOK}7r)3y3fgKYQKU_z^MR1(m<pajgRbShxQR|DjEPEGa4oDY2
zDXA+;Wom(5#jC#Q?nw;(gC^($zB6D~#)-g%yn~zF6Z%{OwY92r$k#&$zF+M2KK&8@
z%sFZemTq-kUYCCi)KjpbC3wzH(!a=z?GcR_A6}iXCSdjoSmZmda$K;;T8JXVH6NB<
z=L1fNJ;c3-JHCxhzFdgiBXu|8T&+8%J1)>p1UuZ6IR~AH12rf_?*rgnk@2E5dkj5>
zmqo6p-c?pG4YgBE*|<9A<X*wiadhGvX>k8j9&jPAqw(AEQo#_2Ohz~T;#p;Qe1`1e
zStCwgh-ycJ?}livJM5@Ua0OoB*Zs^|1<<(kzKOzzQ#HQh^4~#IfZ4K8nbf{x#l0?a
zz9Z^N4SksYZJeMO<LSqDKk`K3%9*TSqb+Y3gYI;yQkd7>PB4=lE=9FA)F2gTNPv#@
z{<4c%vz`mal|JX)xOcPTCgCmi=5G#cqMcFY{m(I;T3#_vGWwi!?vBO~2Ay~B>P;6X
zCX=xNw(PP<FNY4-WYxH5>t+0pXZTk@i$>H0=)e(QiBwZt_3w=_(JoVAGJMl{p2{&3
zkba@GKPcBlJdt1-)UHAQVjzZ{S<JwJgn#i~&0JcA5s+G<i=njFHR(wLo;z!(<vH}A
z4woGxHj3YA3>il?jUU@>1>qh8`XL?I!ge4$<^!ARh;BvjrXcNaPs+-H=>_e-7{>Ir
zoXSQs$vLInn%)@v>mOx$G`}4i1jZ^hc(oW}V@oZS8%|tuOzxYjwTXnBIGh{FR2$J_
zhvh}2+G7-+hqqpbKg#H%S6-O(%K-801|6kY$G(>r$pygAq7j{U!}NcI^)g%Rg;ggw
z(-+dr8EsYa8z=Yru(n_9bO+cLBM)Td4%)E6->B)CGikq$(7$FD5yJSX56DQVg#PZ_
zR{7$3Cgd`_gpHF_P8261;Mmn9-&2fW{62jZ_g4XAoHAgcEi_gMJzyUwpAHFootGh-
zLuiO@gSaM$Uwn7p|9PMZsc36=Oy$HsT9DJFR$RJkvR!UbTrOW(s%fwvG`*!6%P`pQ
z&{A?bU7%v#wNEd?+-H@C(0GPjwuO;qZKt2GtU3Ok>kcAJpdT8Y=poNJ_-dGE+FN8+
zX&?-?_=*5-`((G5TqiAFbDu?!vhF|s?Tu7f>{TqlwfJ-w<I_wH3}MPUKON_TFgyA}
z{gX@&o_{gVsjd`U)2x~AzD!-$qrYM-nMt>Grd9vBRJ%L<X_kN#j|;}xoOkc-DN4Zo
za_^+NtWsk$w`JY@`Lf4N93lXZ36Fo}ZvCndXweuQL;tyo5G`4H-3`LPcb2y^JV??s
zVz~T)`Gv14BWny%HMZ~km(#1y`M6|eO*c-M%zThs4WZwCQd0{mQ+^{K>O;u6=7`k%
z44ac+q8#TsKa=1*87C%H+!^PGc=aRg#X@_dOino~iLB+UNu%wa|Dlff;(frLhlk4F
zE3U*Q^ZH1KEu*%{h4HY&0Y((mHtHWpI~E^bI1TuD)=#o2P{b*oP6`gN4oZ`k%+GuF
z>(%U+VZ*iy=PS)t2HW|*vx~l5j_Q$}j{d1Ee+eb=DsQ>F_*G^3kJ{j4YknQLjlPOg
zgH=@&lxXCb&Rc$C=<@7~Q9?bZOL$D&a^Q+xr#tPH<nLWmo6CH44ky<i%1S-1*e)Z_
zJ(!(NxopAIX&d@2r&>Q^o$&$Xqtz2aLc9V0>dh1(mF*MgWiHfI>c7fA>xXv_^a8p_
z-m?!ElGv`X5w<3B&Hyc?MnkkAaTHXaHUTM$(VT%CLeHhkWL{g`ca`O$)fveA-1wN!
zGOqWAUjQ3en*$tMdd9t~TCwsQfKz~GDo2TslDjv(C*)>cQE6R52wc%UX(EdJ*uFK^
zAN!vkw&Di27!{3m2x(bN?Cqsyh{9m&k2cqNS&tOqR^%q;sYO=nIzl3)A3$<Dm~7tt
zJmz%rhk(hvg5&L7Vv8Fe&@wE}e@L0Kl{lKIwhj#>uid7!t}FmUI*ix+=-hcbM_d2m
zR(QL;KmFmo<#=q3ywz-Cg1*OJ1BJO=n?(E`)~kL3U~<KfgyrnrF2p`_A`LK?Lmh$Y
z_%{=rl_`AF`o^|Y0FER0+x?Ao|6S#I!k%zUqPUB%92X%<L$mx8JgsOw`JnC{c~|4Z
zl0mCjmc>k-Nh?XtIL_{bO63Hn*D=gLe#Su!yCMcrX-dZ&RONUn>|}O`vebSBWSrfW
zwWIfa)q_ay9$49UW^U{nj<6ooia&4u%fLR`cF#S)-2V$;ntFGRS-<@U#IV*?`E=9l
z<}}Y634sS~{~0K&xr@@?<@IbT?|qq!z=B{2d&y(R_lF2}9&XB4KPmtGd(_iCsTK0@
zfjEy597xuwXK|{A8^81T0;2zp!wQNPI|nN68<<xzlC)!Qw!#Tkv9L3Ws>dSPhWUCh
zU8_;*C|PA|`c0eI@cNPA@X4&a&jAR9djC6nRPQzlbvQ?q8i;`bh;uad5|Zk)kD}h+
zeG!GeYKmUAk#gZv#-Wr1P=nA`!sYNNk#rCPNg9HeQAY30*Ii_lE`F0;DPYwS3pQ+Z
z*Vwj9=IjGnDnEiO7@*p57RtoRP3!$zfvc<7GA2!bL6>&FcmJUJU%PYvHp1%+q`7I$
z4-^e{Ol2IPBQ5T2j1h8tu(p|obGwQ?@HJ(+&`g)vp2-PIQ2g&8bnH;%O!JaS>c26R
zP1K9EN)jkWGG4_bRj+|`GLxvMobce?v!mJAF$)em>m_=+(gBCbEE;0Y>^WOd89vH$
z_jdgHWsp9K*i%ND&|8gcHum4l&?k2z54f(+M9i(9VZZiswF?Y?cUI(ToOWK8rMgqp
z$P^}<%e;=%auH?&din3J<F(@3wVQzo3ID<0j?(c${fzGxG7JN@f_}{Cj5Po%Aq&}E
z0SbyYlnY%=3Xui~In0wKb?`ZMxf45>n;t{Ts(`+5hwMLIo>H#?=I-m4`9DGv62h0?
zohPAx{o2pG$U{-8@RdH?Hws^@w}ET%!kPe{jtoFE6#n*GB3;TwZ&cQ~DqVi|{(i-v
z0{ca|7D2MiqREg3-Kh<;C(-0RL~sJ@RU;4Ujd$#3ZGax5qyeoeqW=`(j)F@>(Nt=f
zy77}6Wr4ICLd#m>lZQu7*Y7j($o8Y3jpT&-4%pLo6|D&B*n%dT8q67Ju2CyYprioO
zvA@yM^Oj08{*Tp%)w{V75l!D>#9YoaWvAK_9W_?tu1uxS)Ym<R5;z2%F>G~Yb~iH*
zUi0^zxBdBsUa5^pyAMRb_3)g@>&)LNaSC^TB{5;Kq4}0?_hW)9)qNwi)OIGmIM^ZW
zU{pw2H(u1gqLZf>8lNr~>>I8U%Vr1?!uN@TRxLvTKAg*&pPeVq25aw$TOk&l>UbL2
z{6A!O7#9@bxRJYlI-_F;kWzXOr->MGfj+H%N)|)mik_6=z`?_O8>V><WH_WA%gOZ;
zJ*<on?t4C|_A5WkjA60JQ#{&72HG)xWRf=1dT5thA#HjJ7>Dxh&#un)i!YMctJuLh
zN!1@XD7vDpC2KL(em0u`@;_X&Di>%Gq8b&gY92%PgqS^ER_wS+T8Q*52d~nqlvm(f
zhIpv6B*JyzIaG$!65=<i65FD!l!PdcqM&3_shRGPwsCF*#AOjEU53)tl!n|W%xuSV
z5dS!b4jMk)07an?W!LF33&NfTlsGz3GHE96NK&{;d{Vj}FW(||g4$PfQ3cUhV3>c|
z{t_q>*h7=M;BQXY)zX^v$YJn^{U(IDp3=nb@&e8Hwa61zGolH?#)fYG-h35<Uc{5X
z6M5DVE4iHqH~bsk*>Deft+M<Cm`PF4tLhq*=~A@|c3fE1g?wCa4^<EQ7Fv&FI#ox2
z(wx1RO{VM37b&MJ0R*=CvS)XZa|ujmoZEGPEo#$z;fN}zUojGUEz=Gq^UpF8eL1|P
z?$73zH&u;&bnEH-jlUz+%P~27E@{4yM*M@J5)GA8GhZ`&jahdLNIDf09q6Ol)?gk|
zkXxSdXsW9CQz1*T(iY0XZhByn>nNE@dCRnLY^4!Wfm(+82c8>K5HDcKI+3ob>6h#P
zIR<a89k$P;Ra=Og@9b|QR@o&NvqehVUz6!m-=L?|&*RK7mau>sXH0e@5#&Q>gw_8R
z0_2UFptj$oq!%g21GH-*Z2X+Hy84mFV05eXyD*?)wiMp4(Y?n2_tLBdo#V_^d5869
z=eyHD_Op2Ej?F(W@Hcd!Idu^U-+oR@mNisd{$K_zh4VzL2VF})|5|BfKaRkIi=jG|
z53L-YZ{plIN5%*wu?gm+Ha^gkY*y`i{$55<VD>!8+RMy&wqQJ!HIFO)FG^)nq&nfh
z#y`bntW2$O)8CDq$@<!Vx)ETvq5g$Up-c`gVbF=RvkD@E^Mr3KPMo2%bp^G<xH5CB
z1>s-{*&5e{3keRoLh7zN>Jy+B?^dZ|K9uH#N52!f4XGU?9T!URBEd(ej09fOcW0h7
zV7(j1!voR2FQDB4G=y9vbm7w5k2I*+<lUrwIJV<M_WkSyoyx&={$;za0?FloNRKrf
zeOqfkHEU($WqtaWOP*l?{-Ego!?jDhufNr4-Gf~z<y0|PZ{OV7v174wwf@TRYhV-O
zDKBfxDdk0zN#jVHHCOm~Nip$2+|hQ&@-6oE@p`{Wr9V@;{K^&W8$zMZ)w>qHK4Xg@
zpK-4L4pJ*`?NSoPF05tiTpD~Zn0uQE!e#6oLTwiqw<r{fU;z*8pyn#frBJxyH|d!^
zUh*40AJ7!M&U3y^ri9nCcp0?hmlEGBbpP&E%|HYm#@FpjNS{cH*H(V7RSvuuuKXx8
z_QM5k<kqUYZ*G4x)r-#N8^^x>NT0qx$`Gaex~3)}^rc@mxK>^2RPgJceJN=aq&yX&
z@H0V7CgDm&9o!WV-c;p@sKenZhm8`B3_(}H>5XMzg-hy>sh(&v+3w+;e2BD^m*r&c
zs(^k8SO__l7%mo-Jmv9y-z+$UJ7RCR-1mOFSWiA=8~>U+Ffk(F1?weVCA_Ig=FM}s
z0rqI$Mw@WIh*^36t-n(8wHFj>79)3Fm@m#NTg0>Ay#6J7W@tjVb2j*q1fOM2H`K7=
z>d}$s@dbyI{l=$e!F4HHg1H)xe9KL_nh(NvJPij3H=!MoF422o(X@(M20RB0XZ|xS
zy;%7EQ8`4&!O-cjBe7G6Nk!JlHM4Z#<J)*Bc5?}_3uzz^-efbjDY&fk=g3C-EH9<~
zDWIv8#Us@L(;6{5L=Xi#o?tjaS4rm#4`sCrdq1^b1APsCr^<4bFA6^_Q)^BE^^X+I
zrvlR*=TS&gP7;BEczi81xM43#OtMk~@f0hx4kun{GNpB}npHc%4$u29r_V0W?FR4q
zAEsnWIhr6YJJ!VF)lW53Lw}fZUH;Y39@DUp1GX~)EQ7(KY1e)TN<38G7n6MiV%83p
zbUO4Hjnw6uygw=h&o9u`4)%auy;`U%%nU4CgulHRnEs<KC<c@J0qcis6ByRN(V^B5
zTu4PDOqcNQlFbQwKGFY_5cm!V-%Aq7Lk|qL>F<YH_2jY9qj9#eIxi*A1UqJbGpaEj
zc~&l<RfN|q&lae`8frI9p`ONuIfqv4=(w2D#Kg<R7pC!2$SB5k;-<uMID-jIAtK`4
znO7R%Vub=#;qJgrrFvO8b^g_uhdS#&KhCiOU9%c&vttc@jMaNcr2V$yEKj7)lh)P_
z9zj1~owFI7BglEFhHQ>5r*p^0>ZJ2Z^e~nP?oC}0XM{N}jQotVBVNJ1xF4mH@xQzL
z-NF7g7X){o(*zqYV2Dg3(JQd@J!3B@Am4r*-(h!0v<<%~_sN2^*hRETM5(DOA;;mt
zm`k0$_AoYZ-NZ4}D&sQb*{G|S94!Xf5WH0xpDgt6Ao0-HtnGb&vR-B0+56$xe7ib@
zu~vhBH5_um#EgnZ%`;})+d<w2g3~cT@FaZU9By@<Q6<`#TziB1cU#^wTqMLupTFuP
zBylkq08*Qg`nrS%GXynzp<?VHH@8$P3!&aT@ivSN^M7m-<ruZNd0KXpjc$!IeUH=f
zWXG*ul-Pf>h?3dNdJdpv`s`ZAK3k_-=86HozZ6$dSvm$9exz6cBomtG)ino>yyZ<V
zNJSAd;}Jtkn*F-ZuCmdNydba?3QO66V5a-9B5Ixx!nP$1LhRk$&ap3D4v7z0XLLZe
zTOgQ=!<weM_(ajc;#bP(#$CFh{#V4S7NKuhy_1YMshks~ocP%|;EVpmtQ-DxJVh=Q
z*hj;%tmBYia|G#5@$xQO+}yP2ge)YIs_JD^FRs3hsP_?^F`gyC<nC4*QKrvxA}%DY
zC0rx*Fp_EbI0&EM+1ahz@aoYwo^}9m$JU)7*iUr6yRG*L;B<H0&h+`HMCq-4PaP(9
zI8lP$zg<N<1_2yRnBr#I<5;0_O#O8KGq>G!zYS#-`|~ne*U|H)g>!t}-OD;Srx0Yu
z8_5-VQsEUfT~e@3nOo!MeJ`v{M%|yWRd-_mJ!meoczMOWo2!+3;c{5H?xifz7Dh3i
zG7ph+qYI2{Bg$7)YpfJDBe$gPd1JG8e)2cVi~W!koORV0$<DIF3=~zoVd4emf(zcq
zKayXC-?Dh8rj(k?XD0`O3@7Kz2g>kz@A6RIwjRmGMni=&Fj$@@m-&u^y?{CBKtNpN
zl*~LFaIr*bGug;A+Einj8dFJI^hNA^2kHHV_w;0ubM)7bbAaZTXPHYh>UFQJF(T5w
zc%^*qE4Im%=dkk<r)A20nc`*<ehJGXqA>P4#u!p%<_Hf=ow{~CsDKx}7x_;a|9=#Z
zToa72^ccTV4kfb1g+lfX<lM<@7!9w<gcWHp#dNmK+{G;FU?-z5EM~uAPyg0(p{pa^
zHhrHL^6KK@$6e!+6s}i{yr&dA@<@~2MT9)u?lu!JOU0?miR^u{mtOkfGl>!KoJ1V+
z&6u_A7XUtIa*5BTxTJR)5dd7yP?$M-z3%z&rifgc4QHLo?b}bNs-68U7we<;U87dn
zUjGi-@p@H9q|kU9SDBU_-wD@RHwF~a)jNhb-e9c~h#Umr?-wZMKW|j@d**GURZp1w
z(3uSLV0-OU%$J8DQ5H)(cD)xi9v%q8@TT9Z+)|^Rq?m4jA=N(XCvQ!S(9cvWuomo8
z$2gdRojOJS>jGL5|0@z3{6lHg-7|&!A#h`+HZSvNyk>q@K&wh+$z4e<Yz)iO`)&ZU
z)1N$hBvGK*6x2JgoNslxCz0Vm?bCBRjdu*V9Sw;?_s{x@l<S^{{}C*-V5f8vRl59p
zqSHW+d*yZL6|v|xZJpw?p}<c}%&T&8Iu^Y<^%Judk#*@Y-r1eC@4qns=V8d@!Jlx!
zVOfT=*9)c#=6m2%<utS49@72%Ms`&<TbfJ>f}PM{*6K#XPC7xYlZ6!or86;$XzPbS
zbVKNcr3_X$542ZA2Xi4YB3$9E7-eU_(o9@NrVl@|J)(do^35Up+Q{GhsP^~E`mL4*
zCEj%;wLD%sUv0gPDLCC+OH41T-FvUxhFviJ9%bPVrhUjI6Eb}X4&bID5u?!2`+$@~
zl)JFC0Z~B1p>7PP02S-`gIt_{7HvFw4tM0^6WUxRJRihN>(v00^aXY)H)3OOfgWCr
zQNv@P76%rl^ONl-!?S_q?<CA0mPxQgQqqwqG_e0=*es7i=_$0YQH2C`JSd`gAFKqG
zhOW3HWJsi=SYw{$|2bx?ZM_1J?$d^$4$h#A&5;(fw7;(G;<PKF+Z!!XXAMkStiLr_
z2VB*!k7C56XUPN?NoMSJd^=Xsv=M&H!=IETZB-j;<FZ?J+T-0`8(VX;J*Yhdw7}+1
z9|XnSq?JrtNbwW8el)@X7j-J(yTuLrM${(9v#2{<-JW{)4f=lnTF*{B+;MfrW;!%J
zyyN*+x{cyrKnJvwoc=agiCJBYLc<ewe&Tj5EgY-ed2ryOez16QLRU*?Ce)+uhHIRA
zq!gB)2P5h0)+YR@bEJ(nmZ$;RXH<%PmvQy+wcry*9n`E41G;8){>AY3^>8g*;v|se
zD0F9&ZgQ3EG)cADzR)r;UR*C!Xmht0>F)9sYkhbVC*7hi$L;N;0*A;T&$Ihd8*!1T
z?o5>&dO4{XFC?jDZ#eL9<)XDB2<q5+O}vIs@Zm%Bq%w|~R&pPQ)B4UPO&xkmC3byc
zEI+xybGPJSz2Ay-&&R3NYx{}or+h`s**RZxP*c8ly>2NO%s~xU;C$tj+@&Zfp3M#K
z>}R@kBj|0e=x*FODw(js+(7@MG2X<%z0WPp&DvjPMwp?B9)ion{)dsif<1__#E4D(
zsxG-c%*4f@#O4fFP=tT!dq4+V{Q*ZZa#t&}@)?<VOB;c&8wsTDKRy{jd}kCNro*wf
z7xDA=e#$Z>8ExB{iWom1+_e)%S8cM_zf7BQiQEQp-Z!P0!b+%R&At16#WQ>HjhaUD
ze6X9s{c|5x!8#2H1EU!pQ`B}{#RREXJ_XJi<=^-QU#Q4fT>|eT^c}d}GpXspTXkZ_
z^|eEJl_JE8bmiuFC5_0T<E@-C&DkfJGoZly#^T>Xs2>$fKeN4;na<;#8pBQ*+24-Y
z$uO1>VYmW$DBgdFS~pW@=W+R?V~l8{aI;CG|2>+(Q=O>&j880`{c2oWebYGsZN183
z%XQ;W$MZN1m%UH;b9_!KC>mC$IqMO7!?K5GHU}kmd&2O8=p(K6Xt4e#3pV(<n7CW_
z{Y(CvQv5|+@}9d=5ApRz3ag@i1Y25Lw&Q|yd%FS8id{D=nLbC(W%PZViTc2(oOcNB
z=Bm9DM3#Q#*57^M8zq!5vnNs{7QEKI>u8Wb!+sfN_+yvx$9846<fNcWeZ{|UB+kjs
zU}xTSi4Z{DD+=-LhMV5#xGzhJqn2R9EU{{lo(>-W9R8BaWtfWO0j-nWRU%VIcchui
zY`4mSOCbksFMQsPz#<IrH9qZ*R7ex<B%??_USbKQt+fIcla?O07Jz7gy{{$xz^%EW
z6S1g2!RK4t{VX7P2ES)o9myNX-`ymYb=4I3{2l+TcZgi*cal%_1@2R)tELL}mCw|+
zmQSu;riqq+5Pbrn(w(5V6D=TCLGSx_HZAm(afA`}!@N?PSh9A*;m!KvrzQ<8|6)XQ
zK7<<H?q%R36wnF{dcUXf=thB(aV%5ue762cCeC^q03mbe?3w9Z=M*ha)#q7Q`({U$
zq(yojJGV!KNZ1lCBruBM8<0u5c3zgZAG>b7`sgfYJ7}WmtXi>JQzF5PVWLxs_0rZ&
zarF4fY|vAhTl{)Jqn*eE4=GVqg+tm0FZF$pf<C_2EG(T$pBCR+9F90F2_9!<8d2MA
z5G6<w`?Lbhwc)CY?lhn!SYLg?XBZ&G>P@E+w?Dd8{y0jWH@Hu9#$YL;YWdpo591*$
z*2g~-;6eA2W5`S5PQ=RWXbq|0`)t?Ei?`cyzx5I2zCb%HDuFQk&&#kgAN`SAuwyk%
zw@^K_*b%Tx{ce_h9HhG7AX{{Ty_ygSmmN7x8At}vF>!lGe-`DM=@L~v+#t`~$@eW^
z(IhfG7ck%SFrfE$dJ6cVPFrB>WOVi1Zt;#}eM=IT!_pN9Lx`tT@uwAGj5X!I9XPHq
zzxK&gtVPS{aT(I>xO^BY-B0m9=RZF(y#5Q{j&c^8^;RbcSo)OKLKt&3qDlV+Mpl(&
zA{TWG!6DMf^PAV=AW8=4wI!1w<rm@s`sj}<Ua(iw=q+FD^&&gznAR^#y$5QG*Kc1@
zFS#+i-T;$+=Ly1K*4pHFl#Xm}8C*wFNJWg(UAGYk`@e49C}_5rm&^I}A$%@InMO{Y
zjQ-;}>b&Y;uR)mSBEatf9Pj*GZj)(W%+DP*j3nNMSEP(hMO38;!mtY<;q%3HM@bfJ
zRR*-i4NZ5YI{LND%;ypAG}m`r3A*EAuS?|R-FCI#_217ciKN+v=@*20De&hqF@J%f
zJ&~~Jmz5+`<qFj=R6do=qigP!+}puhKp<|!$JsuXJf`iHN)Sg~L?XwiCzny2MtTqb
zc|n}3st}T?5$q<l!Ju3}P!Ie5O|soJ=h7T0p~U_C#X)MMmf{va(PTIoe7N4}$QO9R
z4jFpCdVdz2!yNM4WR1_kRHYm$wx?=j)Sgmv`;#o7!{;5~{U~G4y8?<bay3r)_rgMw
z@X-i<Jv4<|_K@}Z!FvEFrm?#bcmOlKc2{gO&MP~vDiS4!bi3Qn0}6ejPh89}_9pAv
z8BaJIZve9FlL&Cm)Cbz9mJ>8lC=^@5<e11PXaRUO0vy_pB945->C!gHxp_PXlRRdV
zuTV-v##tX|V8YU|rLnhDS&ZF@)hG>1RM`?A87wM>3FiL{ne}}^kN7F`qSDMw_#$0{
znLjDfzKcf^OpHM7h3%qw%;YzQ92HbhGqAC?Rh{+O9EDGWSD^=BoWcttk|BBI9D8kp
z^f!<nUj@EAneyCuE$KZ82Gv}VSfEOc1mqjDolRp4i{Y%;rENWa4~laj^eu|xi~|=T
zU5UU0&3i0lyC&esd-BQOk-DtNKF8K?3x3^Frs~C@!yHlg0mmJjDX-x>etZq$N23=q
ztM@9x<G=G8wCoif%`m8QS$ER`*lu?>8mK$K0LzwXbl0Zs`2tWcWPj%{`igzw>?F5X
zPTjS4QXRlW>_%}_v6;AvVMpyV&N)T{Im68&pPj+B-{_18qH|Dc{VC*8(9fh*uYWad
zQDRuYD8fLv@|bOe!cS%;Ixu2vQDTX(zi7a1wtjoSkG7^K@nf<mAxe=V1reE$oLkM5
zZ@LPxlb>I9$QG2g0t9t{W?A=7xCUTGuQ!WMX1fx3*N&j+leLSS+0xEqfTlr78MB_J
zx(uy10$Gmq>!)<w@~vXR`3i}qc#Z1MT9i6Jo6(r*=N{RfBxIVcye`*LULxuV^G|DM
ziGG+(cl|^?v9j7nD3tn3V@SNaBq^q#0U5|HJM}3rKLBc<_HS!a@+#B~@J&>2=|9wQ
z%^s+V(a@;FM570K7M_)v2d!W%+nG5@0^+^GTNx$eF(VNrO3<hOd{q_3cd|uD$Iq<#
z#G0CojMXB^ch+Z*ij=p#Eri#{bn4SPvu7nidyW|7=5k{;^M0LjvAvi=N+$5erD!Qm
zqPSNRGEM*o44)0p;4U%I`m!?aeKXANg>g(*reU;c1YuzN3aPlF`av}Pfc5^&+<jNh
zi+PIOI=zs!X-c$qk;pj$t}FaXdaCh(A^&wE_Mq#ZZyCC;sD~Rq@2Upu8-t@7%n$6B
zl+|ZOZ9!_qo>eooU3~?=D*-xAMC$iar{2DVL|*1P|GY;=h;4vni76@)f7Q4OHJ|gS
z&j>=1SRD*YG^@De(!vE;(cP<Fti>`epcH~PeCC<h`lw#GFJ!O~OxO%`i~m&NG=m)L
z5sIFb;|BEDgzwm9%_V)Pj9qAoBobE2E56EihAY3XJU_;~TSTq47XJYAPyahkZn481
ziQZAbzWs&-s1pVWOxit{%JTaFN#iasKID#XwIaom)z1&)w|r3r=U2IW8*&|D+dg<^
z(z|ZJR_qPV(U&eG(Ve8!yzx?M#)YPh$v*axDG2cPjQc4g+V662?&DH(uKEoQK<`1G
z_r5v`t}>3zBz}C6ng;m<>FOi&($zl@`Gb>+ewU0u5^u31mn96Soa`l>+y8NRlj4R>
z?y60Fjl$#?H0S%OU>#9}rzx}Q;)6+zuwpK)v3STG_Q+uQAMG%<=GL5tRcWs$Zg2L0
zEBUAQXN3SY!f#9(JaltR8#QC+N%}9Z<j<c24>JM*@||u)n?&$n_I17qib!mS-y&-}
znPa@>N@tyNhdchoGc!XQ=#YxI$I-l)QO`GCeif<pSe>evFJK?$XBiac>}%c9NgU@1
za<8$#W1qMBp?L611e@WTTa1!uQ0?+%Q*Hmgp{rC3$c<_zqwf=1vAq(WQL&3psd%_a
zpm+wcU4p~mU$_Dz+FOk~?K<xQ75n~}YfyVxg-zypnbGsXFQOpMT)dRctRibd9R{M|
zlfOH(UspK)iQcYlz)>(+Rz9`lCCBVafP4G`#W0vRsRJH5BzQsZ0=N*&?`r#p9y(iS
ztLVL}!4T!N99iQ4M1$vFPDP0HT45vc<_$TszjH|Pa5j1UnFF^aFG_tE)Kd0tNAA(~
zR#%D&fE(vf>Wj5e$n)~WLE<C?22xRrEll2R$fkICR%7ebgwWp2zF76aSioQov}$M3
zNE^W=J3{WWLGQbD8@+f*G5=!_3Pt?x(!3A#9wZ>Ey?QuiYC1+FNpod*lJ3E->LFeC
zJ4^U;jiSi-yvZI5W~iTGl08I|k2J=2f(5F{Dcp2$BV4AU3CFS_tKr8*h?mGE4Tq%m
zgOrksB5fwdN3Hvs%oQ37$o<MIFfiWIsXD?T+~QXzR6W$QcsyynX4dptvFg2R;f^tl
z#V8T?D6(Q!{H24Hm@JlqjX0fOuK!?<CFoxVYzF@Gx!RpeY}ou@f-(N7py6Eqx3+$*
z4m$BLeh)QSa{ux{6gJae-9a}$V}<!2Z!_H8>BT~t{|YfE&W>}%E<SDYGe+rqH|%$z
zeD)Cm!xyE|f)`mMAH*|4MWh$TNv(X|W?~0Pdj2`i7n2YG<_pKDQlcjJT^|@^+UD|-
zdNolKtko#7rKg`%RuWydHGk==Jxj-O{3Vo&QHD4=J1%A5m&E{>D3&|4ulW2nv`-wW
zgM>7k#<*(TuYvyytqv^s>qNN>tqv!kEYj@?-3QZzU3fDngDUci*CUW0YOtM3fbT~r
zp+6m(P7t5R^%8gQmwV*(rAxP`LfR%g{jIQd*YrLPbiYwdkss1UqM2bT1svY%aq>jy
z2<|`lG(x`;DLeu|1ZtHzYIMBCqMo&0y215c?Gsna$~HJ-95K}Q;zM_;=<7QNHN<Ch
zQ@Ov)iR`yq97bdkcSZ3|uR@iEHYGuSg9((wk50N1LuPAWa;Q4z6o)SKXEi7=`X!;<
zBGNv8lq)4-YH{b)G|WHf9}(PWJBEFE3rM&}>@#n!4*pD<!7=UPsd(ezBepJyCgd~-
z`fz8k)-dD+;>UQqp#;8z@@UMQxepXKn@H8jU%e~LYxf8J(hDEq1ECxD^FnFKRvI<;
z9|T!l8KALetNf^}B@6k>T8f;@XRQn8lRP|+lA~Yv9_HE|xy3lGL`F?f*`to6pd?n_
zN_E(3r;=SSyAkLjSU>~ej7B)nFIC`BZsSo2l*q1YLF@@~T#m330FT#(hw!24$a>#t
zJ4s%OmXHW)lo#qX>%ibmTvQ_d`W-zm6}(074NDX7OPOV;U;U?YmQ5O(nwyFgKIzj{
zNFaOduZiZVn*n+$-7*HX9JRf#F{#xs<n{z}x@5;nq9HZ2I{EXT_uB<?pE45-kX-e(
zC&Ip$nb~-m3mh(ywn38s=VrIsSkwpIhblx~DvQ+ZY|{?|G7-veaHRp)WZhzsoQ%tX
z?=<9_2Sk;rS8iIw{}<U&id131#&`V0Fc9cf{jpE0p{8k|B>1v)n4u%2Bkdn&881`w
z1=+gDQr%O%IY;H}d@mhNOlg_uGyvS<i4ql2ZV(cd27|u(c_lRXl0t$4kA^ki9Jc54
zYHE^-&KjewfG&&*(KH8cVd_x!iF>T1rcN|vrRWx@H-Nk1+Da^qix^Sj8!T`XZ7Iav
z2#wjv*~sM=T$y6Mk9hf5#}@8f%jG$fTlVEuM3|kFwvzD(8nehh@BI;-?Oi_q$Sf<N
zR-8Po7IT)ysb=oYrIV|W+tj{0XRzS|WOOwEqSW1od5Yf4r*Ibk>bC>_c3pVRLe1O9
z*3$dpSKR8d_JiXu2zqy)wp$0H+#HnF?MOwKX#MSN(>k%-$2scX*5ZBI0#v*8f4;w+
zvd76yqbcKdY<GVjlizXfj7tr1<c`$}EjPR-`GMKk?fu=y2g#+N(}dy=dP`B<jUzo1
z#rMy}UMThII5KF>R#}rEC7UcDo~x>PDwQs#>6~M6Ms9w9k48;z@859TEmK6(FI3VZ
zm8of;rLR<eW&~Sr@Tpi~$vA7`Qc+%kQYG6E$(6U>h2hVUQjZM3r@K(H{i&ZSwM!U%
z9G||wtcE<2W<N8RZ1&8M{ijM5mLvbz6lfmp@2RmGV4pB?j+}BjdSak~35%iV_j&nI
z@cI3eN6hb-=0HpN>eek8XHnr7mELHtDqxapPZ&3~DHdqQ5fB9=hWz`WXFD}~L-yQm
zf#w=M)w8}`4rFTiG6oD&p5K@<`X{ISh+h%7^YDo8OVK1rY18&lLSZMr?&czx`JRtx
zQji_|ZWLoR43F<fZZ?r(iO_)XU!)O&AMR$kphi1`gyUjS|5p?SX{0Kw|7giARfK_^
z`ObQOTHMB6^=PEHsRnxaUVK&C*?uY(nVfO~Yyz|~sHPZ9XiCE9U{(%UU+$x>Al?t9
zzM)B$6wgd<`YYi^{M{w%-LDQFz`l{Izf=q1eo+zlF@g!#w(FhTre=XMxSCFryR(^+
z$qbQ?4E<C)_=Ro5q=B~Vz7WWEUcnL67pv7v?zoxvc=;!r<G}Uw2hSLXNTgm^+STp-
z)uiZIbFn@G^g($C(vbC7)45A%k;HgM9O857PM^<i+}^ImH;1z&IIjg2P(;(shD_YR
zO12?^^U$;VXRuCn5z%^$Ce6*uC*VILKVdzj4_5tG-OfU#Q;uQKsd#rkET2S$H)6#8
z%BD^<ms**8)HXdyJf+g9ZAbkx_j8nrJVm?&?3y4gr^FXYl8}awKI_@fzvMqlaefIP
z0KllnoUv<f|CRIVQuRY;*9?6^0|}CUYFS6ym@=*~vY&8u1)C5b#3qFh52+y<KD^?s
z?~2q_O0edS)sso?AkgT-3&humgirNEiU~xJ6qE}h`a(#Xs`dAoAy)HsnrI^E9d-jU
zKvKKQB^ty6F)x#IEH=&j!EWcI=`!68y-=?kgsg=;FkiI9@DIx4JN3BbGg;2eqrd6U
zQ3IJ>xV>)?S<N-gsr%`P9tiZr+QTwWr2kZ;QB>nHovJiKBGYX{48O1IHVCrLel7yw
zHi^7=ms9@vTq;IcGDM9L)>tqnaiiwW;7<G#{3L&MJ4P)9RH+U1@H;^m*TO9b#-_Dl
zSY(u=3-y98N=n2$C`;V@-BMpm8`d7jeB-mg5SWU5KN^m;xYgBVe3sa+TDnn2h>C~b
zIat?l61hRZNws$j=2&NJX67}h)_NQ{<T7~3m<YV*#;faiCahZ<Jw2hi<K++d<Zn;Z
zm6@DRvR#^yBm8<LY$!rDM@q{2>ceIWGIkv(3#7i!5$g7)4Vsp&$hT)&sVU%MKl8j*
zTuXPFv)mx#PVtRmy%`lDWjQm~{xL5>sT`eDPUU_a!7wtVf%%x7*oJ$=gijey(GaXo
zIgQ(fepjNl%4&vCp2Fq8Dx@qOC&Re*SCEIE7EbhAVG6hK_$oUIL8T6gDKK0vG;Nte
zsI)yl)ESH7#}`3ayqYnMUtF{cmK6Cx$ITSQpIU!C?G^e;e-Ztvznz6F%7-duN7>?3
zRk;qrG4NN7)Py3lc}^{iS&#C5p9c=-mH~N6c=wD;)wW~!(*qhtAdfjXr+uYi1^TeM
z<1vf}Rw-gnyP04SylWF(^O=RCk@P9L40mF8<JFPT0U7pR`=mVrM%M=@`HrkBxuqLS
zK5yVdV;?spQ}w|jUN;|O)egOoz&2b}1>7f=O|)LL)$HUp33~d532i*4;^2mGVfG1j
zY`Nt*rGZ<D)-P(9<sl|9i2t#4X}rd(&r$J}##UqmbOA`6ye5iV0@=SNM-xy1VCLK<
zdg#bBle4$9(7kg^1WEOl=LM>o6W}+pD^P#KYgqhhgxj$OnNmz&-m|J81ki_!1ucJ1
zD~mW=6LFPAujK_HCk4&<NKjih?&yBbh+6X@J-YH#HJ_Firu!D~+{bd=w5(;^f;1`c
z<}_9B=MesW6KrYREDs*d=t!Gf3Z8x{f~JqFfAs&+8eLYm0vPbJ-6!ujz1%hb?JN9A
zgbmReEL!6IS1Z1W`I0Ra3awJ9mo!1wAxKX+tZ5d!=@h^$?5I^TjVR0svl>bNRuk;1
zCc~k|;-|qOU1It|@#o0ZT%qopfw0!N8eyM7A|rYX^AdXY928lDK5TW2>$|}ZN&R?i
zNs=*|v`_^R%1Ui1xb6C;J*%D?tD0eIl^on;#tKDAE|gaMm*(EZ5YlhsO2|0WjJ`5V
z-G7^gm*(Zr)iIFh(3naNRgWbHnbV7jAzmHRSRz=ybr%Ckn0<FhYmfT`tWDIWCq)vR
zF5wpa`@4V^cO&kbH&OYAfUQHIWd07*iXFmAsIBn!!ZFI|mrNCN2W+3O(WBy|V9PD;
z5&jD4*&6X4hYDPZCZ9jtZ7UX)i$yuLMeYBYq-55dRK~`d6c3VWEEg;WnS~ieGdeTQ
zmv8?og(stbEdntXk<AUnDa9aYm+7@u>{3YhkIo97XZhQpaI$KUdX*LjnOV`&MKfts
z^V-A-I<pq(wlD-6Ub%fwYgv}inxUge`<x+VkZC&@8Uc8p`XZ#fw6bRR2X9hpWUhk5
zys+m#VWM3^C(9W+&O+EM{v%nhtH;PZJ}(2m^-Ei@b~-&E=vt%qv1s66`lBuK3B-8F
z#x61lEf;___-*9M*_iwT7AU>j{Fz-X^vP;CC8A(E#Iq;igpPik#@u;&);8j6$Cn5c
zs11t-iy0#eSSWs~O`xS)M#z4f=VQ`Q{jQvOg+V;8eA#8ZgowBWr-UW{sc>BTD?Z07
zrlvKXI#*c43Gd0@ZNWVWT`5J0e=Iuv+O$>u6Ti{%BI3UIoud+|NiS^sCpfe!u!p6Y
z$7G_)tCj28syJ#?E|?ZYhw(Qz^5Q9eIhKlvz`$A;8k0k69KIg#%r6qjp6A!zZtJ^Y
zs^u;0;9eoTN0G49k)xc)#gE$;0((66BjvozP=7mM;<TpI%5+@74~fgSMn6u5Z}$r6
zx48B%-jo9+HRV$Xd_z}2lWDv|FinO6H<noX-qH*Y%EcbEI-IGDYm-9Y#cT8m7gY}k
zNXHI+Sy=9^+|_agW8<ubcWIIaw4FLe{tD{rx*<rJ@?a(B6S9_V@HRJx^$r#gvB5kS
z7Q|##sxXi#M%|Z>Ocp%fGJVGQ#UveS8aFVEi6gm*kcK>B5<3t{tMMb+bf2^e^Hx9i
zV)m@%-`$e7PNQ~IR7$9gTB%xnA`f*{n#z9x@9|`O^p{<I0+K_zo#3_=Pb>W8e^AH3
zU1z50P#&;k;Wdd7cTM14b$W#1_@i<k|4c?g%fEOnL>T{%d6T|ybs*=S`zO7OwvP#s
z(3lS{cDNsYc&D16-aJEFCE{;Zx)=(aBH_{eswA)NLM^iWOZIp5P4A6z!g_sKTqNj4
zSZVAdtuni7Ax3;Dkq!qbmxwr@kWzVD@H|`P52KRSJb!hu(eCP5S5d<0948#EqF2FK
z{7O|6Vi}}7CdTq!G;^_|90<m%BGK8uM2W3m8xATp$R@(TkGUMUaVfl5&DfSm-B`jJ
zc!aa)D8gz<67LcQCr|a#<&(rNvK}7#v)e&Jsj(Cd>TJ_=5B%%Z2#ZWP;gnI;i=~c(
zCH<FO!v_{Du{RQ-`hv3ZT<%7JS7N76^%D&5PusX+24miv6rN$M@PG~&^Xcp0X*wat
zyR6ZVNhQbF4;&1NBeJPh5F?nQ#MnvX*P%&h(2>g3vFRO+tmXL5eVR*V{C<wos!V^H
zNmMKdl&EeQjH#c2K91#Y$0)xF<Mo8);qa-+%Q$T&mXdbYZ0jqed&<2sa_JAR;S-y$
z@DEBMYL3lySc1GTPhVYg?e>F=_5L%WL1Z?c;I7ynS2<o#&I#v<FHNmwXikb_H%*59
zi6O_WyJQGwjm3ezvO<wGB!vz9<ct_H5cwHUXcIPP6Z04*Mx)G~eQQlO=E=d!Dao4!
zLyq6$LpeRLAH1BK&m@Z<3eBcgVDTLd`<QmQ>U)7+TwT0hduFbR$tYh_x{t)^#cT_E
z)KcvJ#<SUXdHgv&+NF_m9Qk+<G(CDwXSrF>$fjB*(W#XCiAsLf0Nz`QHjaqXz3kZC
zLm4OlvP|`V&OU{3&)nsGlVL_#T9Wq<nK2nYc9B|>j+L3{y7N8ndc)~<IY#b#9_M>}
zDJ}?63a(@l=rQ^9$Ecc<u9YS!cv^KDnR;6doyx&7;LiK*TvWcc5sqG<*NRjJZV3l<
z7{Lpk3i8W>Tk#wK97#zIoL4T#O)C1~uIr}n;-b*sfSox`iLGrr<cAl`3c~@+hsq3A
zjyPWJG=S$w)@FXIU+$np@P^Bj{?_)7&YH7b0ruvcP20!vj>#3lJ4<i}&1L^T0G>c$
zztE_xa;)_<zx029gGZh^!Q_Dn@;JL_4PsMR-ULFQZg6boGW3l)r&8agfQ_Ce#C0iv
zW6Tw2Qg>-!6Brs4ZU^f)8d7>wC6Fd)*Ak^w8n(t*t--#T2G{SN;QB)oTz6=K>Fo^~
zQG(hLTJ0*Q<|1BvUN|vpIJE@J9q6Qx7wU1LOya3U!tRM%`N2DG=Z5KT^6ww~U9!5v
z)YgjqD95>_PxCKqCxaK1fUULYS?G07P^oRFT?QXg0Dx#e5E-t?lo~e!>)ujq-4~!D
zg9xaMY`p15I;E81K*uh$#VI_YOjL|l7=u_v#2_L>Mu`oKPbiB^Z5pFfRHw=gUX12K
z+G}yFx5%rnJ%hY#sM#i?wMoXB6O2?Mtj+19Elw<-;Kb4rwfZRIhiYV+4T&pXxNlU+
z=H7g;d84gdwgPO1B~iDaOZ8R+8!758D%$sL>~}n^plOWuDws5;;_8f7M%X<$#tk>m
zaQ&f4u0JrwuI*!t)@!J%v#?TO{#3-n-?E&TH!QZ4R!2#-Z`OhsMU7%A5bGc*Q!KeE
z&(CK(bF#<v6Zi0w?-}D)zVaE65vaEMoh@0nh-BS0VI&6&xnHFkg;}M5G&-0mD<c#g
z@NJBqCL^kYQ3iYoQl@yH7VEHRo0sW|X#c32a-dWpDpM-szyx9PFkh;~ky5KDlatDc
zqZ$gy<p8LLT25Ry#PuowR$^T4S?MjX&_0D*ad^!z1}c>b(+6g7xBxc&KKIZ95m}!G
zZ^&KYtpYZ(ac7AQfQ?>&+D&wEk~wl&TDfc#Y))75*ZznB7>V&|jPFF)v`WL&*)g__
z0|$0;{oZM=J21n(9ivQ*H%Y2>);cjK<_r&i+jC-GnQy^buW(JUU~Q55Cn0rEADF|g
zP|@>+bxT;+eIg4YN)!vvF1Fd(yonFp@dJGR+n*zvw&c;uIkj(v!t%vLIPDNu6fvhA
z4;`q(Xc4I})S)U#e=;nrRj_bN|0!W8<yu!6(Sr0RgKXRwZ0w1v0X&QeQI;`ajgmx4
zts;!pgi7QFtl!g=5w-A}a+-k^qB=xKuv8}QztZ7CZOWX5XLE+m%8(Go;2L=oz-Ftg
zT($yiwvcIjrGm}tmu7h}TWgTKiti=Rt&sQ{W622nrlz^>=G|PgcPIOIO))t=My=MQ
zml~E@!V9y)H=gw@uPJL?CCdw_DDIjP7i0J$g;tg6-(*$8qR|3qyskIeQym)2RK;51
z$V!Xpk-K=u4Q(EJ_6yh@6&$_uGQf=iryZ;TV-#Zo@E9vW;Hod0HRLT*ikzROc_Th7
zK`DJ`3Z4x`;dwwJ)S>C~@E&78tjER%lPD(k7#pH4t4b6>ln9l?GoC;#@<`c9()Day
zk=GAKs_JQ8?1dke0qYX7j>DyS=)xI7aoq|M3nn(GRdVP09mUsyjmi+^<SN))nAq4R
z%u-!C*lffvXR{)kLD+1KMY9OsO^{xdNXMD1Pjg`BZm!$6i$i<2v1jKb<5MH3v8=2K
z3(N4zE5h=MquueOsp9?m5q}#=Ur)SrP>@2mxc}FOi_Yuyt@?wG+85Ic?<>|b)<(>C
z+U(u_E@l^x@zSYpVW$~PU7m%MDb|wvZdlwU*Uc0Q-3|=vf|_5^)^=KStK<xv8|inc
z#GlDUYcMv@?_LSmxX|RW9*w|S!A9XT7!AebI993^&r}me<6#-|^DR;hY1`>nX3vr>
z_L!`UaKo<M?3^B@nHVzPWv$!c)anYeOG~V*<m3)AXGjaJAd@IkwfLx<H(Srm=_j%}
zF#6MC?>9#{>moX+R{+>t0N}_5bcip+q>fEBsXKixMb-)aRB>xDuA30$qfC!(W8dC=
z9NM>s{d;z>YtJNO6HUBAYfU)T5}tWZSzC2<yMfVL)-P0LC=FSsw%LzZbT~>;EeDE*
ziqB<DL(pQ?YJo(-0Aa8liej=7WGNQAIoBQdFtbZX=&qeW8|`ztnu<|!%`mo@XEKHM
zjX)$tbHA9M5>F5|*Yy@KGGvlBEF}s-x<ZC-=yF=G!I}Urrj*XGg)*VlpnnquvSAb{
zNvzZ>uy=dP&Y2AJ!p3ARPhZTD#Pm*Nj8Wl(cfF5$Z@iU>#u#yIvEoS*PrZ^7#TiJO
z)UVRc)|l_KICiSV(W6Vec5IQ^xfaVOGS<A3CxTWCS~a+&a0)%$LJV^j7RJSx)NRmI
za>HxzLTt6q2R59gOSJ_x9C<^0qqt<>D1gXU$rtO?bQcHqUc;g5_HbbTUUu!=#^`7r
zP}W+8`Bix3L{4WF@>K9nijffMtMZqr&;VQpX<6AI3jePCWAA1CHbmCDhKDB&s=iMU
z)P9*>hvt$7h2dN?tQqBP*MEX<J^7z8RmI!x>%d0)4K*eAp?GXevA_$wGX)PvheXc<
zp|A9o(jjTl01T7>B<m>w<%olr0fRS`Z6p+{1w;%c^4J7S6o#ve5iEkWki^1R1@<54
zG5Sn)Zp)O{)m#cG^E9G!vdh~K-p&1YzMn>AnpYRPyfm8z?Hy~d24ZWeCJBvrl#$vF
zCdZU(r*rPUHl;e+!&kesdn+uit#a(-D#u<~<+URnW{<6MYOc%TYRYPwkygM}BGQWB
z6Tz!r=S44^UeqtswKvPk<ve2V8v>h+xAV6^)A(`%oA9d0R*2iv$jSt7zwut)_u;p3
z;My7D7+Ooh>JrSplG9#OvaTb~z&leY%?Ykp?0sPIGN`wd_P6Clql1pLXBdozYDF@*
z4G#B223;wkzac#n!$<o-Cm6bUo3XL$*}wapJpbCCP~92h$%^XeX`Z^qko!<mGDboh
zItsub{ccsUG)iIgf{)W5$0|o2`b0tPJ2;4#qTpOItaTtKiUz<jg*2$~m>8mp!6ZI(
zsB93)iXx#>fr*M|W^WsbA%5N6QqEf71p}=LX2tM{yS|^B4&Ke;T92bkD?~OTHkQ}~
zk1a2XSA)xg(E3USCsrXo8j(Z^RokFhRYu2mFfx(xwrxG`y}3s;lH=nQ+IhzOLXV>_
zEb!tpOB{Kz#nB@x%rEw6=R(gww<6?KL!KBi=hoMo`sZ8vYK!`YgN>X$Zn-3|@mr~B
ze0fGTx>RE{x{(k5zz_5BpP6B4UO4`;CtY*&I*|2*ECpXoJR1aKq^Q4y^dfX(%Lryr
zOHq}f!tUUCkRXgzpw0SYRit8u)4CqzNPl4lH<VfpcToDNnud#2jA5<YVgJteF?Z?+
zt)-VR6M0drJ&mwtEb6nMp%ZDSqm;4{W=Qd_d~X@q6h&d<hlViw?hG=h{S;uc?i}e*
zN2|PsEJ5@t0uz^izo;hxk%d|eJI8Vwds<i(A}l%XJZY3-j3GT`81+p)_U<2Hd}JRl
z&#oXwuqFydfdmD?C^EzfRt2X9ADRB#jwuud*F5w(!a~<zPDEI(k%&^Yo<?(q@g0td
z>6E><X1x2p6sdLS<sBB6TFf79bL6=WuRXKGYcHK*{zQlQHAf3b6GOKe(WzK+9pq%%
zuW=7*e6ROIzs$j=lpk<rt9UqD=^Mp`gN>RnyVR``r!yQn@I%~n-!?{Oa=!ZzbQgrY
zYjB0RTPdfo-anh6&PyR-IdnHyWS~`5q&kC$M~47N`=VPibON;yG539^0_mTtvfks1
zw5^{eXi<1p(4uKBUQj&VSGe)eM|kwf|Ab@;ar?ARPUuLfb|K0!u|;fg2Ql=)M~4be
zW@x5LTxn@M0Ga+Yc%Q@b`T}kVR>QhDCNfCuAp$i;hbju)vIr%z%4jSc+Si8Z9P1+@
z5%QrZ>P**!m59!qvMt%p2k-bXlu3>(E@N$kIKjElR*ysq9r&`8ZTjM1xbSbeQ&I_>
zAlt7$DOMB*WNKJz8RnjkG0#_t4b-Yiz2T^iI7Vl3ZrGc1^BpPD?BF$Jb*aPr;Wdta
zca`JMEOX?gd5#@lX1<lOtcI1y(y2ydwHW7g9SF(L5b0)vjcmXnV&h;l2&~Q4N{n76
zU_(h}Gx*gy2X=j!ZrY^NOF8*sjPHeo>m9hf1er2&(IL<YXyS{GP5FEo#hj+#u<j1z
zy${_d9R{F*X0Z&*i<<H-Ht2qc9oVf5x9x{hu2R2P@rW8y-=$gK$HD#Y<N3qCPqH(?
z4~;ei4vUiKDL(Q@5+QLB<=8^0uixj=ek3bHliy|G*l52fRe;XW3|3zqY(255OczW9
z*7`8c5EW5Q5p9{MQ0=S0L|xf;umzDt#1;j0DGKkeza}D6p?#vu_UZvX^7fx*Esa_0
zwTNs??##d)q8#TaBRDY_YfuATlpGDFf_*FwbuMcZ;|xXu13D@|$QUrjlUeAgu-s0N
zRWL^c`)#Pijz%M=IpJu`IQH#T4*W!hG&785tSz@Vb-2aJXBK(w@sk{W>LkaGtuecn
zvS?#g>vg*In6ya6%mrl^8wDG=fCBM(z@{Wps@bd>j@dwA=rS;=a}fy*>d7uT=>ji2
zHAAgh*wyNw9-_l-q#+(hAAI~^;g{xbg_d}~PEl~*3P2iqZwX?st_3c`DODlpAA+)w
z%BU&QB{u*#R0GH<>!!}N)C(3%H*2$V`W>8_f03nyXR(tRszcY1fO8HXd5DVvsv^pf
zr~p5II_Xc>MKz_g=wLXLzPy7J$5Z4C;^{^Mkd|pw3?>PVnKlW}8LLDFs#U|Tsg$Yh
zZE%f2q;wWSStM1uCwk0O_w&BnKgD7@qL+6t65+h*QxN(9Qbc4T5{|VEva8+{fL4+m
zq3;%9d;lq91UCdW2t;B-OW%d(Bdgd*$qhIw^wJ7TC&3(r_;DqPJ=I!HZNyWbnqcQ{
zW$!0*-tp5t#CKUazQ)OC7CG|R94|e7jK`lm&WmY{h4BVG<uo4I)|u2@>bmw@(H6g4
zeWSehL@Edd=Q=#~_%hetxC0aUVOD#QLdZ~5vp#ewLs%^o==v}5gSw4ZEz&6+ij;H^
z`j-+2DyW#@A#+57y1gmpn#5}8>=?l#_?}>#$CdiRWvhH$;ju`!)RQ~q!2S>N#8W4c
zt|>+zO2VB9jArXFHn<%0W0GMF-?E%pTJicIF)D>$dMQ0&biFuLKP_Ar)(m-3*-$Vx
zQ79DKJk(Ka<gsxeHCj<B77p&}QmtjUOcC+x($V2_Z6s#(#2VYG*Yd90ewvl8kmg;i
ziGp9d45zFi!g1v&gN42tm<2C_7D|f4Du~7uQBGk`<19ob7zv6%E`@`r3z1JKjtkak
zAAq8Q>y!y})w0r#uq`mJDbZt|N~F}9j>a~}=mF*0d#~lt4<&q`X>;<Cr+DyRKFxpm
z;xUd)Ms#gFnCZGCJ(~-OZqBo=ht^;@u46Vo!r6M?sEd^aHCD(pCG%};6mk6Mab9?C
zgd1*ZaJ-cd6-8x`E)7|sDB36N74k0y!F1q2P)0P~E8e>z%2A3~WWc>CNMTwq<Ocm9
z8;+&~6LJ#;<PixAATj}1@?PQp-M?!Tb&USsE0?$>_Zju-F81%apBG;FEt1`F;UouQ
zikT;yhlnQ9eotH&EFh7gS*aoGUQ@V)nsT4Y#jJALb*k$LwnH_dl4ximuob8zo;cQ`
zh7<TejS3vxzS=(*gITB7gH7wi8WVOOci;Gvw0efz^$;w%AApS!!5CB2%ZdochV)K~
z;<You=Gf&y;JutXH70cE%19?Nq3G=UK3fAlA!|ZrYE>|<7}F5QtPqz}gtEJ52DKq$
zgq{^vI~IEw;v-7!5y$9wm$4n59q+%1AN?2CQ~z7v;-CHgALDjRlVR6KI+qF9ur*e{
zLyC2mA=rR`b$HWZdG%#RM{mN|SswZ3YaG1xMn)!t<=((9$d_W_GQ@K!yG{MO_aLe%
zYdKzhA8-b#R1w*fsnifbUi)HPf_PiTCLyINevl{}*r<@kQxnD=T(^uKhTGyYh;Yge
zC^5aX$F`ZfSXh3Z#f2w`r?O(z3!W@QIJJ<{kc7prT9EJDV31nNj#W7YUMd4JG;Hk$
zB)^g`)SuHbuLm26L1K@I!o_AQU@D<q9@&t-?H<k8F`1IP3POy-6b0VFxsGg=?n%d(
zxt6<c`V^hq;(V_d@|6BumlP&lQoh#&mZQXAs}NPgXY;v)4pvrps~6q2k^*22*kVW3
zhik^@z&X_DKwZ^oc&$+-7s0CHG{}IIVp2v*n!q4(vKDNlq(C>dtelEinpX~vogy_b
zRlAcz+Yj@|!b{l69YaLYO9UI)z`*JSgUx2iQ>?E7UY@>D1zwnujFT(hVx)PHN>X9z
z)I4AL@+|j%a2xIA9G^<Rt}?h?Xul{oEcKu|m}k<VT8;N%K{~H}08)l3%zYByKqEwC
zIMOLPPd*R~qdqxKh$OU+G2qppy)x?ZNC9$Tx9!mO0}8lYIk5jDtUh@Hx(iTk0|w`M
zsLippf^ZiJHZBFR3Xg9iefd9;!LX(&KC$U@0fgZ`%Ihp)3h4`qR8j0u{ibY(7ar&~
zf+P`Q4~KT-MAp#r5s@?G&f(Pe+r!ovvQs%tvzxbF|C8jJkojJy+2}xTao9!FBLVOt
z!BhxCp0xnB-U(TzWGSc%V;ovAseJ*Q-WPVt8W_?dfvZ%eTc$`ceIYRBghJUc7z`RM
z3d{_mu3)!Zu)YgndE*3=7Deg`xVqpwV|?j1Px07eD@-)@peJ7%s%%`YU?ZC(PvL!t
z6E9b=87BT!bJkiXIJNv;X2$O(k52H+cV1$8y2dTHjxg8D!$Q{~Enfyg=EK~Veuv7_
zA2|rAlm>RND(ZdFtkyv!B<l;(VS6T|FWwg|*>I7&ytv>J#Uz7T2^JCoR)s7BpA9-*
zs>36wB}fQf9kqBTyLY~q7he8N8vB!QMf(V~E*Ll!gQX@aEO-l#@$!bEW~h!)dW$o-
z`@fEMC+la0ONk08q8w8IjV;ock_TyvVNDZ3)588SkLy{aVjxp;H#C5Wkk3OUo8Y#a
zehhDFWO)~nI4A;XnQoODJf;Af5Y?EP5Z9HY9wI#NAj_0qH+Xb0TnsPUyE=$Moq^m3
zu8=jsD9=c!R~REWTTZ+ewK>DORJ8=CAU3900ax&TLL^m0O;%8+Ozbjz`w93jUp~f2
z)sv~gn0S*lh&LN-He<BmKHxzH0$j@L3VD~8l?y12WE_soeT#Z!2iA-rW|40^_yRk2
z-NMAqh}pxTIO_dSZI?kyTMG^jp8lMXdSA>q1+WP}JACmo>xg<~9jE9#NsyYLc&{M%
z0(@`=$wOKZB|31xOa$VPIB6?HL@uLWL@pW7A>3EAD6(d*!_MvZvbgdpON&o1vaJd(
z!WmDT0C`wRwrGu;Xh^WygmkV<m&{P*$-M5G)xK_Vx%X0fffvPMQ*@_HGWa{j7KP%X
zTV;UBnv#g2-A$<0Q&5Akb;LwrhgWJuohG;3`je;~rI&X?+q^$GFci@gXlD#a0;V1!
zo46i+R>EvtuOsBC;_?B{YWO}~0*;e#twgrqUD+WpE>b8{q)xtQvl~A&&Ote)AEFy0
zK_l6S_UlAWisPe7V+K-zU;V9@Y4uhaZA@@@_AoB;!9z@S;39n4fX!K&N*5q@bB0!z
zTru{$K59dAnZqal2vJXDE2P;1pa0zRs5Lakipgcs^&P6d*p&8jcJ+!c!N&XWv-hZX
z1yRozuL-&~9zCtj6W;5G<tTi)-GUpGL7s;1QB_EqLefy;CR8RMZa@?VDFun7FnJ1J
zDxnJ&iZK=ygZIk*y&p!>CV6iZCn-IjVJcy&UE)wjDCHpnKm=ecN-$Urk%AOn3Z-e@
zaP%|atPFjbq3^MTsBMV*W8(mJCQ@vym{{31s&vHC^$DsmLWGlqD6UfRRoqII>#zS2
zOtg(o)&{Ymh+B4TiesRqc(MUv!Pbgn*HEHnNb6h<y$<wJCCeet36tWvlDm*5J5_S8
z<UUOPI}f=Nau1mU=OFjt_wsw@AahEV3z-Ysb*_wz1y{b$m0C!_g(GYW@?4RMGO;t_
zH-6^`&%g2-m1@FDZ-rOqpCTC@??-W)r_{HZV6*XuIsXgH8wfVCDJFH%h@&U3F}wH(
zNjydzEAyw0@#QbP!uSqDTq!J5WH82{!?RGsZRnxSlq&$pmB4daZO1!50H1<HSf*j&
z`J%{}E3UZM^9-_Hxbu3TIsw(m@VzooxJ%Z-R0kavBJfuGVTBY3qGHKhPHbk_zw^Vi
z=2q~|pc3YoBr5Lw5rxzz1Mrn_H!kt4KVn$USM^1;%DScYqna?JS=LMl;8;dC1<2Uq
zZyE^z8YR%E3ZtV!TMU^-co!i(WvSDmyQ;KLDc2qP1hx8JdRZHhc!&ULa2T8zeDOil
zNEo50DW(b0NO1Zz)lk^&cA?vWv<F#MEcSBImp>Qh#d*lR25=}rB@duc0#feE-wWXK
zT1Z_KAmwD;_MH|0R>+t*0$V*d%8qMe9(?c=-+1T+B<hjGF)tqfHl|)h<77(&&o>Kf
z<N{#l5}3x9uWyt}PBIg*aN^t4*S689?nWz%Jp1&EOmDAo=Plbg{$d`8c24{AO#O5P
z!4>rquf8Y{YhR(S|5X%nhtn!wFpCE)*@7%M#GEq%>O$HA0zHs6L~W&pP@NKNPca=q
z5)Jm<D}g`a)6mZC`$ptLWI+r>F-9^D?t3RaJ;e(zd>tEy?v&3!V+});v0!7x6*Eo!
zbjlRNow}~7HL%d47}+obpt6PJhS+dL8C!x)sNa|ZB&`o^=1LXfx-e3JV8<DH&f;?$
zMiRWG-8S6uwjXAsc_VAxE+PqDbjTUgtmFKs(ExOHu%i%<L);8qDW5^w4Hn61FGQ2L
z!YFb`K+F%-Wwj9NQZtYoF(_V2wsEM#l*QvP`5r!p(LuTux?Ulz3Nj<1C|@=&as&IX
zjrr~q%lz)=pG52m^>~sKi!X3u^+l$xy>6&Muvr?!8!(@|0I=C)iP5b9o2|EUQR9fG
z94F@gl>OU3g0&4QNt>^K<ypoWHFj+qW%g(g*Y?GLUum`EhJeJE5l)dZxzicO<$uoi
zmHNU-@Wtv4&v+T?WSLNPP_Y5<@&G!WRY;bU%7mdgqu3RNO6Zb!3$!3#6X+=FiXv~d
zsFg&4D5$wbQqS6&XR`S&tbH7(DUyJu3Q34Y;y9!@L>jJw0%%NW>tYJe@YmhJq|aiO
z;eRajZNw@P7e(+21-OOoTkH*S1h!E8tJR?=!E2(Y5xG_%F*swHn!1beiCbA|^}=!D
z_3|Deswx0J3CAKDfp`j%2}tTe<EOU<-8JZSL;9-4jV27}f~X(ra1Drqr68Iq%=|o|
zT|Q843~Xgn)P2+_w(M@5-byd-H&zQ#c@t8p9oI#?dTfpV{9nF{V}WKgLYgo0!ik3&
z-Lt3PDHFLo!DjQjRIjrcyh2Rs6tvQV#wtfneU*JXK1^g1ysq&lfBX!e{Qf%`nT%LE
znS(LmBJ@K7SY<ji9MKeW4z8@zpvBx(8RbZSv>^y>>AKTVrYPPI97nt>qJvyWJ4$;Q
zs>`0*G>q*6SrnpLAgcM}VIy(PU?L@o!VYI0!`eKo&SkV)%k<I}I@uzfbP<mu(-fNo
zfYG=ZO0;2uTuT>)vXESIX|w>KVF^)Xples8Rb}0ztkXylO-VVzP}uN>2*-z(vp^Ji
zY$Z%_ry}&kl1a$(auqyHS{)&CB}q~GP7|f?jM`9-BNj|mu}z^e4b>T_j)wFwTY^pt
zdaaPQ=8j^7WO!(`(6rWphnA{_`jrWuTw2t)ltGuuma|T(s2NO7D~gxEz0u-0_6;SA
z*SJiW+->OeGJf^5PtoynRHK;43eOz*3YEzQQKMF<0GP`hY&KnhOD=ogD1<X=<k<0y
z-pOMeKlLs4Y<nNh=d{-5`0}4T!$&@F8`XwkZH0Ah@Zq8{LtvwQ?hXAy@Iaw2q)x8i
zoGtE-r6g`KCK1@GMOUS7oh!J^<GVs<8Cr8-ny~G9VX6UZ%MjOuN>y>ILfVG4CCkDI
z&&piJ+VUD}tBZ8A1#)fSd>2(0QYDI1BnfpCE!xqs4XG7H8<(i)t`sfZ5_C*)cNIO&
z1XqTLe&uXdQgqmovfiZFiVPyCA{~hmsEr7c2$@&9s&u{Jd<4A^h1g1{VQDI%9i0()
zR0T<|A66uSR6`dko>Y?ULTxHIMEGt1n;@<h>N7ztfI=}KbfMf(TSN=~OgZYI6u=>a
z^Ef;T)4zF?@s}A$%=%%@PI1f}fpj=JEi|SKzw*n^vecQQ8YNVtCNIxENFJq3ZrhFX
z{tAd}F06_ZUF;y&WeqmNT`SG0OjlSw_6*7LC=<=wi0nMaj~?c0->CE6dk@j;<z#7*
zk`&5)>dRvBP+?dH9jWp;27~5(*GW~yi5Z%kk|D>(fgY|Fgfoi2X^UaXyesrt&{=_f
z*TLi%yml1UR)kYWVD?pI@noCU;u5{iGA>;v&)a=18zYr4S7gAL5mZdSNK70Uu1OS9
z9hZPfhEgjV#xBaqaYKl5&SW|%R@Td1!~p;(`8P@ENSUYrIW0xZL%SLqI!7r&&qL-d
zq#k61%v+Y1QoM)ys8E|IYC)p-qTA%WqA^ex>;xp+p|%ZbBOsa3np0ZykaiT87OArf
z1FG}|$9#XFwv=BjvfjP|qRPPTMtw+$%A1ps0iB_sspAVNS6i^Mz13o*M#(d%jluLj
z%WwYImwEa4D<oA%-EQaP(!;E#$C$e2CcOGBjBI3s>u{rBqZ=g}UucALWr0n9u+yYe
zw<XM;{05O7qZVz)$4fl_{4+G0b#A+HC*5|A&(^E^c?G9F6c?Re*OAg;lAsJ^MOD|S
z!(dL^A1!98)Q2=7N`y)i;)W2{z(xkwF|54m@eXQ<GP+afin8osErOPKdM3jq4&yB%
zqZp~8d5-saU(_PhBq{~BCoFW0wGdHP;*td%DL$eYY7At+vc_$Pthh^mc^x)nwIPC$
zBy^`p6e?1raG|zj3(ilZ!8sy|Lsa5Wav&3>htS1>H>lKE>YO4!{&jE_k`v?9Dibss
zqckQeG$#$C+d(Q0Ngx^r(-bPBP#+J&q3vZ@d`&|t)dS767-J|J1c7L^&hFR@kr&I$
zUIt=@MIkvT2imd#TnyPNfw!YFkhoA=+;GYiy&!qc?2Y)s=TGq1GtW_}rc{|^x&1OH
zTi;=N|8=MgPvKwgU~@qwoD1(#U1?y`4?&WQ%6QDl`LD2h=EI0ou<<J2dHg#xN9ydJ
z8RO)Uyofq{LFy|>ejZ;;#rh!`(0;9^&s5g_=mJIxLV+o|A%d}nD2b@l3{f?3MQmj7
zIb<zp%{tmyMmNuKu`+TpVYO%3_BN=^2#uZ4NtKb7!F6lkgr1MceHU>t>QcmHlsX$m
zEKtFykW?T}z{jER8B2(Aq^RNe2sBc(Bm@?^ICf~%p${~s0MkOUw4XvHA!U<(bR!|s
ziHadk4MUAK0aFQ<G%gQp-c*#H3Ypr_PNq%Qb#UIZ=8v)H5=^&AvOGcU#57}L<J86z
zMs^!^?uW@;P#=d%1zZOf7r_<Ej+%$go_7Ioq|YuJGA$(tahb9c=CznUFKTY4B!!0V
zlrM%%ec{NdzKnuGO(?u{0A^ZHn0M@p_{KwXeD&ccs8re{GEOgF;I;WbW@7g~B#wuQ
z#9QgEu!&%!XL9M?1i-l>!Di^7n2`*dc}^_+2|Fi0gu#+A&qEJCO66Vm(ipF?JeLo+
zfJGfg*G+=!5TkfKs7pEg2^ckqSZoxLB!;*WQLRVV$k6LLI;%OI*_>`WrPJxqaVz9>
z$&G`!LZvxEc4`cLzD8P!*w=&|yCLfey=CaFTJp3KG?{&b_bK8`XlJPhb%;b5Q^l$w
zsgyc2N^BvqP%VnN#NZ0B(P-epDKfBn>5Dd(@}v?tHqzflAo-PplBP)6qByj|#VU~o
z^*x(}ni6UFxEYYD&;@$A!TErCVr*f&8~{8w8JU@<O@}q#rl~V@vIeXg5<<$fu;y8N
z!Qf|$N$*OCMw|iL6MR;tR=&_Z8i<_@l<Ra*s?lMQ_`*lb4+d-d>17!e^=m=}XxqV{
z>yEt<PrtOxpM33c;&_#a5x{X|{!bX0nIWn-H!-q#gTQ91x>Q#z*bIw80r8}zJG;pI
z%0o<#--Xj2Yn{V<;~~R)-~MiDP0Q+1UUZwn$}4B52C4r*i?;N0LW=n$Ye<rqN-ZI-
z#272&xstYX=8vziy4qr`y+Su%A=Nc9-@)S$6Jw-?*ebD&@u?$S>#=e&!bFzZ1njy+
znA#2P7PMC(?F7(KFF|-pEt+MhI`BEhM2M*(-h^?2DEKbLR;XC0MBqvip)H0Kqax*q
z8QA@nQH@I9C#Ia0qTtw&XfYWczDJQ_V?z`vQPIAR2yzr8pq0W4JrC^LRG_PnYT+dw
zRZ%<ec~WCAaTSx)F_k*e=p@Ou29<3VyIpBn==I>#ca@WmX4sx1O2OoY$SaYAu3ns2
z;zUqyQ73q(IHv^w71z2bz8qQ|5<&BR$Y*|F%`qsT7tR%BE4@sooDVGGqjN33@JHW<
zXc;RtY$UvT@()Qy5|Z($Azf;-wO}J`nEbafu+ctAc#}lb&t-dhp}tWYB>$bwEkZ8D
ztLOEsN+qK@6VX2LB1^3rBem;sa*FxIr+MV@3isZ5FKKFMt)?h>Xnpsmzsu-mh;w5s
zQ4~|HR!C|wCNkuiqucJVFu%xJdx>^$m2SF3JD(?aZNzw_p#2&WtW*$^exudric1|?
zC&xsN*1Tu-DMLJ_%p4SE4ne0Sbe16RTGUm-FppYPBD`~`bBK*FrVh>!l}z6RDpsgk
zr4m6}a(p7i$AaXA@?dFy?1#LlN`dbJaIht_I9y2*hZ>OB;KX1Hu&ETXsznDIV(^LJ
za>ZM4g?@3Sfraad5EG%L#9l#FHc1Uz9U*FtQk@#1u`Oomkf%8luFvITaPk>prPZa^
zTEh31q1VNxkZ6T!R40k+BqpYk#8j#=NfHqy28i(9fOCOURWt{NofSNTHoEU?ofP`j
zTD0hk;&3^6pF5bGF|2fZ{N5M7P3ljQL>1zs#*x`CK{cZ`vu6Wfb1A-27Ya7#@xKzz
z$TaqwCcw3>0xg&5uCP(Ckqv^4Y#3|?C7qnwOof#bPk=xrnL*4Nhfh92{M{<IUv~#-
zuS%AOd_T`~oOcD+#uCLb)+WSBOcWcOcXT=(7MA8|tu3(Do}-&D(DMtVeg&1h_!JRV
zs)$q(iIAdStOd<i7})5l3k+G8db(?#g(C+0BvdDq(J5i#Ags<p))t(zVX+VumN7YM
z9AYg|Jc99YaJQ_4G$<)XvLYM4e4&KrBPlvr+IOfBGbkX7DHosid%a@lr%^-$y`6GU
zGb;3ev7t*PWwA9<G!B2$Wg)G~3ed^apb}Cl#6p}PaRpPU5;aDtPL5EYw2ba?jP42@
zu+F@4^ig4L+2QgG?^0aW#iuPgc?<8_NH+_kR@A7NQL6Dc)o7GT(x8&msMadfYB80>
zAZl>AkmsPe58bLl_Ek!OHu^2BFql~|1xqaO4n`)0R2+Z!<tON-bHTPIu5x1jtE9{`
zx$`Czcb=NfCJLUPH89xVnmPm6Y}{FVBY<Nr&=>qN2b;dRT%1vvN?2KVoDsQ=$Tl(3
z;`w8LfOl<nP2EOoZ2_^0rAm^FP^~qHBj|LytgbDyu(C|2+oIiFpw&G|J3mh9=TXhD
z)*=!kQbE*W`T%1~LdTFL$iRA~@3*9Z4V$MPIv$CX#g~N26qvhUayP6V3WT<DC=hQ8
zftCpM4r44PYJkSXiINoaO^H<^A+Ub!V8+U)fe5H>(6$L&oZ|Bp{FJ_3@z5wk(7zdU
ztc)E1T2!=uqM`{#Bxoc7aN;oBn4_c$x%a3hn7EF_0YoKE3b1LCj5VoE#*FTP@jZ&I
zE50Ypeg{@gD!opI@AV4Mp-@?j5iFjR%(Y2%ftDUdx+zv-VlzU;PE)bd)Z=mLwJ|Ey
zD%EO*N)i**A|e|hYS0Wccc}M)LP6;OQVjhT;||U#W8;R(i12$~ew>Bnmq-#r5>Iey
z`4QH7uP}A+)*&&qt+sO68n79z;cTvJgUT5f{pNzrMr$?~3pPWh^a@h<#CgQp$}7~G
z`>_$UTE}_l+0SzA%%dFGK1xK)LaR%w*Pz?0(@ncL-^H<nnl-$%@pQ<27xfO27}M8%
zFhgzCf!es1r$=QFK@RbejRxs&_25%aZWL>wx1!8FEhN**j_ZVN*9mLO8VGHkLY7p5
zkgl@<;7k?OggAjp62Qe8A+m)VLBD7WE~ei)_60-MmaXHmRAmPC#U<cKG!Wa;xNvHS
z3Vq)wbj7?tR8F23MP_p8k8R|H36C5=s+cGMj!1+g38vm48f#LWjHvHarmhtl6M?^U
z>M2-yRY)^W*2~Z=#pk}ytLk?XG2#4_bO{_zJLGPKj(aV<s%?o@8pLLjs@+CC*+xAX
zqh4#!sMo1gt3+{v6%$ncFsO5QSMaiokfTgb!RQ!#@oP^qx9}oSl4GM$mRnD;w)PT}
z2X6`_!F5dHD-~?EjA^{JU?b-odDtAV8JxTDyB!t8WpvsvvF37a-giBJ?USG6eRu6+
zq?%yxq|#x@ukifK$9U+OS9tpH5-+^E#L?q(tag?VG1QWTO0`O4i!`ZkkC!8AhC*f;
zC;^uA+rHp~4BQzDo{qZERmoDpv=tU%?iryz1C245z5&uTAx{HXpo+1A&%%t5jcZt&
z5XF#0f#6pPMkSGwSVBv@$X;9=z)M6hj=s&Wc<pOEQ>gZ7$=fN~-@(~4%xXnZh@gxu
znYckP-4qdyiGf}q$+?1oTLO+sjKoz;Y*3S6sx{(foyurLeOj2<uZ-;o^`Y74;rP=U
zCcrz2ra77^>SSp0zsTu`5OJXSzz<yF!qvgyHO2Whsb2tniDeYq9wD*gBxaICCaK2L
zR4ZfDtK&?Jjx*Y9P^l)=DiKK%%rP2uaO(KOKY5J9C!P%&&Zfyq`vn%3A7<PB+mR?b
zE7)whZ`7884O^jU{MG`Sff8TfP9!5$)|OWJ$b0YS&wS)(sEt@2e9h5b4HJ?R%`s-i
zr`W&iAa~#J9!5udbmKNhjxF%Wldtgg$6w>A7iT$gbdlwy9^i<RoN6^8j%=U$u4S|!
zrEsV87ec9htXjA=NFgs;s5H3@vW{TduzDO$y$I25Fg7D}uY=B7sQ2LMtI(lfD-~>H
zNs?lSGAcZlBy_1NF=WL@a7o~-;0Kf7LJ$>~f$VcJHzlYEGei;>&qaeN>c~PI1*;XI
zFqk9!Zi|kX78#%~8e<N~JUEH4Nd*%dyscmwHR92T+JrE&2WAcmNex!#l;htP^0tz;
z!Dm5NLcR1yRM3HuVbD4@B`vZf6yd!GitZj@C821h<8_TrwnCd%!cC%Mh)jb<vYV63
z+o?oNl4Oi}GETkPpb`r!OS7Dqou{KGs5Sv#r?vJ93rmkNv;Rg+B`Mn9<_+_WI=9Ws
zrGm|t4sTwp|IHiklXJd_cM(Ngg|!ogANc5>;hwuc#AC-CtGzVP|BI>Wg$!O;$}j>I
z0}U%|Yc|=tV~mf!^AJDvF-K;*oSa|aJI@{E8xOt8V^1CB#lxpqSm<CRr&=>qD=~3o
z5M%o4f<bGh%=2W(!iIsBjSnO_&B3)HT~%hE4N=a-KBc)^sLv}|OZo#`S`hY<T8t5k
zk+3g55)uQkg-RqOLtGrm!Yq{PKm|~I;a%0A5+CwYu|++m)Gm%fbY*QR$*DvpfQ%v}
zr5mX!Bu%9NoI*o5mryju#@M)qsm4eW5jP{M<3fFxGIL0%j~IHH=heqTu{i61?}0cU
zoHR<=iIT#grHP5@15cQ?JWUt7uTSm!JgdOrG>8~P9A0~5d7HVFQ}i-Lonu>VCx^E0
zXL2NB?{16P-(_{p^7J#yeD{Sp;?X9{?N^xGd61|+a)!v}a##<SvaYu@rMfuZs0$9|
zHq5oT7?+4}kP<(_>M`X5@BIX~-uxk+do?dy7Y*u_UIu9zbWY+}h^tCo5tdX~TvlFO
za#WsoG-G9Yw8GA*UEF)kUcUd1w}a_&bYY&yo<Ghvo;b>5-#y8TFE4XyDI<zJwVI_;
zt%Vd!&5(P<V2XJlbW^md3xz;ggWgg|C6X~n#$fW0&|3~80%C$at>jVwjzMrFF=z~t
z6=D+xIO9mrD72>~3gZaAw8gbW0ofON!6vk=w3vt%Tj(|<12;`6#wMa-aIq9AEC*ao
zIRY}2Mf$=F&`Y6$Y7=Z?u(b$Nw^YWVwq2RJMrceb4$skNmDN`S*Yg2za_NUOI^@F9
zuRr!B#bhu^S{_>|EtUsHf5!N}FMOW&=%p!Hriez2HO4r!dxl#NPIB+f+qm<cyEu4l
zo#u25O^b|;ph<(y3jD!;e29Pk4}TYD8;oq<Mz5Ql0c_q#E0>K}|H@h0-<P8HcR?xD
zKmzEk0XA0atR0Ja?>!&kmRmo}t4E6qK?YREa)?L>S}L|JK>$1sEoMoC%)knUl@;Zs
zMa4d!(X`6;k%Yb5cJqO^?dQkt&&f=iS5D3I=u;>7`nQhq?eEO<>X8m<uSt@OQg6gm
zDskYS3{5V3SJ3K<DPzfk__wq}Tl~axu<ve|+z#n=!hAO5w2(nmGgvEBBIp$ge{reA
zX(1`V#ur87axTahB4H(awiMtJJFsG>6e^EPEt~>yij*xfWhyn8M-r8R(6|W$rs0@}
zN&B7)?v+t3B5D|-QK-$p$Q~Hm9sqInHD&g@pgr(Cfvl)8`9iGPuLtY(ZiYUjPD6k$
zBE(Uc=Wx!ErWw6nN}4&WL`*d&x&6=-w_m@Vx8J&rTi-U#{=HSI6Bb4!9MCkybsYK0
zi0p+FZ7bEODnIfU-_Kp&cN72MCw`TuUz|hsOcoK2yv4v~lc&Wu7i`YgjoK=(3D6ly
zmG-fOcieFwci#3PPMmaMV!Kb~8@8An#Cht%)Ny8%-db2-aSWA;64k=2l19R+K&LCb
z`mz$eoH7!@j<FgCcJAZH-?@*U{7_EYwRrBeQ+(^;lYH~xd7ggy7_)N`nIEItn55pU
zlEiW8$4l9B4g4IzbrrLwtQ-~QXEaDz9DsCHSj~&#YZu~15EYLMR122|Q&_uL6Y4B3
zQZ!bq3lf-Gl)K9&TFDD4Eqn)5{-Cl~8r_wWrPh=ta=~wF$et-2;l9e?fVmvxSC!m{
zmU-NOWK@X9p}A9-+zXYOvbqe%o&dKBc@MN8D&hlESiOIJl-T!dcE!j?5$l+s0i8QX
zCrwGy9>!-()D!MFw2M1#*ulGQ+s!REPO^7j4LhOGC`d`24A=H#^A)nCgx<*!ddn4Z
ztz#N7wqi(6Iw~)A+5f&>{L3%?CI0TmewFVWTY~M)b5r)VRPg-G1Dg#2jxYGHZw0Us
z1S?fK$Lid1(|fq<j!$r6&J|X{2D}F4eJlN<YoEnVS?pD8Ay27UxaiY1*i}dpC9Vod
zRfvj-=~RRsu(SfNtSTeVE8`Vm*VHK2?HuQhA3Vfg{;8D3m1Q1(_9S2X)+~=b`Wi31
zG|R%m3{hn}^|2XhwHQ+=)a3FU-vhT6zUE$q>NJdQhlzt>5Htncs*;QbInhKy>$|T@
zL+Df)6F`$Vklak61>{TFjj~`IF;K`ef-Nm`3$maoIXyN^qsLJZ<rFU~kH6`UMg(Bj
zqK2as-vw+<h`mr973$kza-Y(i2%qoRlaS2^Z5*E|nwOTy0Tly3CV-0;U%`eYjM929
z^m;j+?h<+4p(2jyX3TZh?&R(pcXIblQ`~g0&hG6M%&0)6@bt|(WT%AQs}<7KCTj}~
zdMi~@7va4{k|2Oz84)TIA>wn+l990XaK_|qb$<SLe~h2~zW>DG`8Cq1X3@0J^|g;T
z0BmFf+qf{WDP!_Y8Er6I;;yifZq%lOjj7N%TII%r@8F(y{2-_1f&_#wyvfT$7i?QY
z@l%I|EoIn#w=^>{L37vz6}N7uFnNoWxC(Jyi7SF8VKJp5Ea$?BS$OIMj2UIR7O{P5
ziu(>sbKl+9gS2_&*gTJXcbRWJ{31_2@ggTqjFZLNi6$ngPF1i8h<JR*<5q?FmzDa6
z(3~-}_jy**&@FOnK{2or8FJ^*BE_*1+SJwz6^-*C9`3!67gT%o1KkbPAo^{ha<oAP
z;|(SNPAR5t3+rMl{lORv8Ybv%=w`_}b*e#4Cu)S2eRWzH-7Ac45A~qqFNF@B>w@bk
zI0+G-^LUpcKEr4hMlvFU7em$)I%{k6I!D2+QjZKfW-Qkq8sqLmH*x1p+qiyDo$cFW
z7#BziMf9$xcgoONNmyH|(ps&v)~?b`6P&S7F~l_`st@+tOA!3>OCh2%DkK(~&4~PK
zDKmFf`KSN&2l<;H{cV<78EegCJ-_XW1e@WlZd#X0t}w7U{UC=6zH>b0!1kNC_Z>gV
z$yp&w!)?|3L9Irm^n_OOg1A<ulPUuzgR<9MQuRxPKRoyx@~$Fl5U(mpMM!EwTv6f*
zM3s=1t%<UNFxNF4KB_d1E2FVxTcg2_nFc@he#ejfcuuFg%2Q7*@X(*W%%hLI%=1TT
zte%{rvVR&oT8B8e5zM~q89$g)-y!r?A-BQTDy{}jkS%=0Z2_Wz02sJ5TFye10#zC$
z9ZJFUVy>}oe_NW}1y7km3%T^pE=C&Sfj(D(CsH)O1{GS7K^;d-(8rOQQX7HBPH5~1
z0$xkAuy9z=uHw3i_5|%{QNJk)(>B6qLbtU_Z*2i_ON@{9xc2&-TW*=*&bx2t;K(F5
zc4|z-3i}n33_2;aGunqOolc!rr_Rc1h2`a#)>=a91*r&8Q;0_CTlP8x-%|1(xJ=88
z4Wj{Q<0z0V+l$It6w^KFIPkIU{L|m~A^!F!f1Nan$f{-_Gx&yqjhvT)av@-&o8P74
z3I&_N*7Er=wvXMwd*A!hEG`<lX+8iO9kQ;Kpkdpehsi_AVT=wmVRRtOgec;qQ2i@f
z$pwE!6tbS+Qs{Mp;8l_YW45RQNj2!xIHU9otRkGsEytEE^<@}+DPpP~Gqa=0-Fqjv
z`>&;7Q;r;6<vWio@c5&PJpFvciRT)uUNcJPwlVCEi18hP(9-sbX(>JqvI?;cQH2%l
zi$n!6u97hvipMzZ+unwO`NC<U^bao!>Sf`#03g$^-9TIzz*!kMOc)vVv(kQ>y_93{
zB6PjN2vnOex?8B!p}h<zUr<~Nv;*QyaM&z>u-j_Uo_`JPyvF#*GH<)aaNFC)c;`Jg
zaO>?e?AbGh9jz5tgo92__sKThXVyr239GG17MCk5uEwlomdu0^4HJVIp`Q~vg>EaD
z=!F@p0Lu8mzC|ManwiFd{q2q7t>Tjk`g>h&`qAzD+%JEezx5-(gB%zkjm)4cv*}hY
zTMIT9>JxMEHZfNK*p%U_Uz%hh+Qa+a^C?zV>U2A4xW^B5GgJ$~r9%8%3(`~B_$Vp*
zBCL}x(830!oTwIG3TPLL$QO;;qVSsM5T}ZbpqB_qHFUh<Y6)zR86}ONB{1Ky9D79=
zJrXe*M~sbD*t5UMo*z{{@zXhL^J~2D@Dh*y(Q%&pqGj<rldRq|N#phrqU&RF4bBDP
z9Tf@1;)3HGbYE;i2+TvlJC1`Zq%WIOZs@S~Z)ByUWNA}d4tAEjl@L9ZWuCIpRr+kp
zkiK!BkAsq1A&-U1l#&-VFRrI79<jlew_px*S9-LMF5nhU(Xb2Ly06D=-<NR5UE8_+
z_P4Qj{{&{F5<Y7$$7ea&Y6mh!QjbVX_3ab9wm8aH{xej^L9GT+_DI(OtLuPEmHhwT
z-k%0pmY(;0;O}|gbIx6I&#bJitE=|~=*CKb06~xqE;21@vBpx<p%~4CN48?D&@vj2
zEXfg$01+D5o>7FQ4<3#zX=F3Rk-}&#BblVc6=(t=8t4WZMDKg;OYZC4&N=ThAKv$D
zH>;|%s<XPQnspJ0s?NH3^WJms`JZR`FR9|Pun7xE422`2EwZ_Sx+Ido1#s#?sqhOj
ziWzo@|5cCAK6wv+^Y1^w-}$RwXY!+m*vYb*h1<dBM%`4fQErB(@y!RDYxb8n05&2Z
zJ2P~$Lwxb4{}b}zG`-#^_z4G~sh>;E$MT9R3PmZE!J`oQnnYe5oNFyts?7Q>mM(sW
z>}na)xSDBK=0Bh^fMHLGBM&%98(Lk^mamv1<9R8mfn5h{X~e{GOlR3K`NN#)*@)@m
z37`1!DL(NhQrH=C?)zK3{;k)!@T_n?o?v%wk=CR0EOufP7y^>zXdWmuVR&2UN=*dD
zNy+?GD(#dM_$;+-DpLW6pk+d55RrS}6|lwe1R~T6It#UV;N>{0q*jO)Ei-osok_U#
zrm}Hr#M*0{^xjxvdbGi#$CZyi5%aN6O!3%9AK{*pvoO>4Z$s*E!;Exe0J+~_NoG7-
zI^<`W1lY=W=%<vIe+U;&37v`HK9~z>s$`=87I|T&Rb{LjQ$_tcz}Wz<VQ!iSV8{6j
zkf?8ChhaXrmQG;)#WsKJ&wZNn7yA68|L!|<Kej-B<gOtbxJAL{ptn>UU?S%G4L0;A
zV7tQ?e*Dj1+)*~S1{h-km7TJcYNUgQ;i%_HgujO?UhWJ-Cq$tVahNg+M8^sN4NO;p
zIkzjhW`%8~|BZR-XD#UnvObJ<ea?84Kzjl@UH`LbE{vSgH;xFQHH?^8hKV(0;+2TW
zxtNI)ZBBfAiW5J33`QB-FKlr7+ow47{5!0_I)OgEK=iqJqI=qOLe(+Kb8;KzP?1-i
zo7$ICsWQ*02z-oHEA?C}-$waL%1SlAu>r&qgccf-EkP1PXVNgY;I~^_7l&+pZ->zv
zyNuo#a9jrb<UPtK|3aI`KK2kN@0rEShH&x`xIs$3;V&eT3z8XZZp!haiGg;QMd1@P
z2dfU2girsZaOzEEuqNI;F;g$ZbY&4&X3rM6Rq85z7{%c+r4b+^K4nwX1F+2@mC8Ry
zaIi6fe6`PC_)9;|<+s=Q7ytSdIu9%c6EJgg!A7|5uHxEYqX!8%<_ef|v%u!+mKFP-
z*@W=9(InZ%1V8a(zd)z^0Bh?#jJ4#st6ghrJ13PIA*)E5EC$Y=4d{%PO6oWc4tga+
zxXMiuX*$JeVWf=@mork!R#Jb`X^<{t8Q77Ze++kE&{0}#Xm!N5UXiaL2H|Vl2#H2?
zHzFptl&LpzCKhtq_ry#++UD`k9_R5qW&4H8oc-N5Is5B<&d)3|{kh{ze{qhPlPyLa
zA4QX9xlgdPUh!Rc^ZLxL;E_{$XG$3pQ&u`5tK1X+f;iTPK#&)S7e>gfr8@<-4Lt)J
z7l&-V+T+cOJ8ZnQNw$^oV<)?O;_(SS_Gb@s@}4eCCH{A(;077#hHs0-c}BHKeQzcv
z08HXr<6MP)t_-(BuJ{o8L+JMm{Q;c3S6Dc%y!w4dt3_GSltd7zEJTaQoU%o(*^rjU
zM(c_c3FhkIXT36&0e(Qge5ph9Z+rYVf9GepaB72RUtGbSn5~&{$!!2O2hB8gm4%Dk
z@?aBK#BPHAa*NM@>gQRU`vjMldKjrz-&F%t41sIO3tDZWRHTe}A+%w|wI@yez&VZz
z+ljGHU=4YS%AgSERMyB^IqC*4T<3h%W3Av~Pc|I&p||B{ElJC_T`ljS?z5~#83KKU
zZ6Z3CEi-G5?u(9iIwQHqGWGD?eDssY_~@|D_A6UleD*At{$KB~EfIr9=deF=l=j_|
zB<jQCMq63%xe?!LWL4gh)M9T`DzGX1vc!0xF6LjYmL)Vi41s)g#D(vzvHJZjw%_S7
zZ7h!*?edX(5+48JF&=z;3Oked4_{w#Ipo_Z<i6b_7ffpXaNC4Dt;B<PZeZa2)~?@!
z-GR~{z;L7hg+O}0q`^=t9r;Z6JXhor9DNX8e8z)38f;KSD=CBt^R98)eOb*Gu`zyr
z*Qk1&XNzZAwVi2k0g8l6?{qowtv>(VFa13K`Jee$Tv+Rq&v#1O+M5G5at&9%8wHyK
z;^CA9&OYKs57dMB294Vd3H?ikk3aI0+<Wp1T)foBh*TL;HEW8>7=0|tMXStdSBx;E
zGTS!J_wSkW{F`E+thL8CQkilWvmKS%C$<ppm?}!dQMFwqxj6N_9%~^>h0y>8J4zHo
zy93=xLL!4tu^c+s71+)V-Jzk|i|DTAbYD(M7BcL8ZKggs%hV_D<zctO_H!4w_?xGB
z=NoTvzB5bu_#(4Ea+t$+Pa=KT-N-x<Qhm!{!dE$OH#H5C`rtO3Sh_PX)%MoNZhgob
zZ*242vn#y(on>~<<eV^u&mW%Q)1NxR!=Ibu&}Z5(38daxG3{rNf*JWajLD>&$q=|h
zniz6|7xD;(Bk1*&-5v~w%5Vf}>RYHh^Y4{&LKZ4EM7VGc4j&Tcjwl<Kd=;73wEPaO
zT+xF8nJMi?r6i-fvai;1u^@z`&v1N<A-Dn-VT(XyxbO!p?w^kM@Bhc2<In%XQ`m08
zs2w#y=avVX1LWbzewfC$0N98ahL>aRJNijJ^5D;Nd1+MIK&n;*zG4GauX1YCkVXtF
z_2MOLpIq=YHsVQgsq-dMHmZsp7q(YL`hhc5zw5M8Upp68&_cORH$WCl+pSUZTo7?Y
z*3XaBhO1`k4b|fa+8w1cB_v6(oQPl`unQ!qrIT4E2Q9kG8SU5mL<@>J8Z-5y4>I+m
zkMQtl!1{A%dGWW;^UQzy7O&iOh)@3~_j35bIaV(_M4itsS8wo;J0%M#mPsq3Jq4`^
zi(1%N>+!-fYn=Xr6)wNF!)R&55!>al<5T>fAH0{xerAS+BZ)_&K@RH~8&CD<-xqP@
zCj{L#m{BN)!e>}4XyVfs(o7hPl)<ht7<wAba0r8ulBOYLGxbh_dBF<TV&kafAzDMl
z-?yI%cYoBdbVi9<CfI|77CE%pPAWZFncF3m%U@abD2=w$XJFOVbhcvVhFvM!vE}sd
zD-Zwd-F*4){v3bfulyPl_b)Ouc8v3N5QgXMYhHSNU{mP#-Y=%{2Mjhvj!(MQVm`Tt
zPd)x5s~e6y_g=zfK2UYaS2mthTP13lQ#3|le$!A|sjHvElvlz+f21L^+td`+;+5N`
z^qBE{lX8t-FGN)uR7*w4^RRXg<(A96B*DgB$Y`UWXdXdt%U3?F4opr%rweHu&TE05
zGj!90?n**uBd2pFC!QT(j*Z}Ci@7hH<R|W%<zwH>`1OCg#XtG;-{$V0pWsjZ<u4*x
zL_W-L>aW_JiHL~_?_aaFy2B5?z051$yTHm@J=&WQN0XS39G~P*KX@+>|B)#UEp}kS
zf_2bOVU#l1P_{NB*0YF>f#HSk2%m2WkAGT7H`JT02le_WGbO<E21<XZ42Pk5$sx;x
zH1(~YpNUDR!nCR?6x0<|h3b>AxdDeCFeDR7Hu9~ZmZDQBF9tRD*ANFB-nM+qTdkm6
zlpTVW>h$8`T~ttMNc-HhF{gfO#LxbzkMkG*$~u4l?|*~2kKWD5<+nK4RQGc?WlMES
zRyKn6yF~pipZVgSVRtyeaI}LF)2w2o`k+<mWR#x5dL?K4hDB&yTjhTy4=siiF~K1;
zEs8^ybf^ea6=O`99pNK%3&LBV{)g-%sW^p2*X03Ds$|gIfyux|-YztXJiB)^^6r3x
zU9as*I!bp!=yV`$E15tah@GXQhVF%gh1?Ofw>k5BDL?%BE=#KkOFG4|#fSLLul#`J
zH-3Y^^$&iI(PTt_;8*7t-&*GPzj>Lrez3;Qxg8F*g-_i*%V$6P5RZO*p6R0<fBc3S
zj4~LENH>MuzGY+Ea&a~0{JO9*Fl;->tdhpUuRY~>;Bg_3g<c<qsh__LGY>X{fig-1
z$mCMmt2*`7rVCX~;W4aKMqFCRGm7dpe0FwsVQxV<a<6jc1*J71<%ZFev%D$*u&9<i
zUyHJ=Radl_{)cl{Q>z=TnARHRqWDFDI#0OFOhWYUQ~vY+=nK5`!;AdRw@xwfz)@UY
zXPO=a*t~m0)AfLjR{n`MnQ45$U?cmmsJN0RkI@!`Rm+cm`ah=KI?3whHpZB8Zc`I|
zH#Q0N=tUimlPS0qLZzlsZLYt=n$!iSehJkM4l)g!9#atob5{`K!fZea0-2P4X~q>1
zvUom_DbhYY+gXjzQu1394{*8hgJu_rcigkS4HyjkW~R64$%Wl1U-fi4{%bcAW+vgt
zJySgMk20S5jTPGST`uV=-+1%eENv~*nLNrjenZ*)^V|G||NEEN-OBj-KYxjH&yDyG
zKK&s7)t`KfyJli$=Q=PKgU$RfWjG|?HSDay`g+95j%9gASndn!1L!FX3-1~UHXM<1
z{sR2oujf4eS<BM0mri(~@f*A>^?&BBir>u(F?jgXIjv?SP`1<>Y$^&?M7gO}*xXW%
zJP2oAC@fYhu7hZ0MpkH8q+T+cT3BK+h$~v?VhE_!#Y<{J_B?ojIrVM%#kGj&TZX^=
z*Z(MQzVXkvytIQkbftj2TLWxvqQ$6QvC=u{+^GGm-Rk!>5;44Fxc9Ela`^CPSXtZg
z+XkAOgi4lBt5lRLvL!39seq<>eNusqRBc&N0ZG_GX|A}CRb*{o<!Z70s^wLWrSLed
z>^uea#5Jmt-Z%~B+tsSNbYM`$gupk^N=PZ{H#0jMFxY`!7ba(vsaZJs(TLyv=bQZd
zfAtPW=cf7o<?r$9um38Exr@cQk8omfk;fm1dHLlx_*;Mce`a@RFoQ0i|LCXL+Meg^
z8wrp7sVTB#K)#dXQm<KCxd0b8gv&i)BZq+qDeAMQM9ZObmV2^Yp82(TK7!x-9ml<o
z8Tv!t&h&OXhPl8CDgnh6g-W#%E5IdmA|+?22rMieD{2b?Be1=t%r6R^Imd9vGr?VG
zlT8Q*R^yMqEm+c888VtMYO%JSS5*O08JuT)3zksPB-AL8^FmaO;Ou$f(V0Vh`LF*R
z|LK4EPnnx(lg81Q{Neg?quzauEmt}9t|$M>+&oX?n;qry?!XlK#@&RrS>UmUf1b_l
zyabP`s*x(%glglaas@DzDvwD`aT${8hiafBB6}((aSjzh#eYDhI02j=^jgu<Osm*{
zNVp<u@uZ3%`!VUPMLdYvS}<MVTT^`MRXl(d`knxG8hQPc%R_aa!S*KH_h`hczu)8E
z{%@!0c3Zr&bBcfQ+CO2w^-(_Z$e-o0Pke%p9fMEb4abiE46B=4yzyejum5n9-+bmb
zdF{f>{O&hC#`7;6<8S=eC%N=a&hnaYX&sigmA*n|lw5>dl{61){LFhaXT|&_5bf0Y
z=X>@o;p{t(xx<#_%YM_8yHM4*;x$*TQ^}($0H}Bm%b8o%MN``c6f_9Lo0_SC#e3k?
z4~hYKc%Q-r$XA>`(#E=qeJxVUna_g@Vtoo&R6QZLJQpPupNL__&%rd9(kozM!;3GD
z_>s>(!e9J_FYx#N`O_Tx=%b_siXMmu@iiO=WuN!s`uR9!|7vk_3xQ2>-dncUc6s=L
zFA^uSq*+QeC26klWn5yVwHZ)(kUfw{p{c5S_)@WkskH(~?ZP8cwqHIL*w1d9Q}WCY
zHeE;)C}$2@8M-^wk}Ou-rzpf+Eo#`g+TX*8R&HQ&313Q<DOu(R%IV0<F>)39Jve-q
zu)CV_Pk-qYX_jGHE&lyG|B`len1#8|F}?T*@th<6Xv)rg8R-#t;B&Kl{-+P|^MCXK
ze)O|{hReerl67C;x1QVLSHHH##1YG-U1hhc<Xy<EpR=T?=fw1Optq?Ewv^$Hk`8=D
z<5EROil!ktCKG<}t&BK=(Xaxh0-W;9bA!|=E^vgL3wpTVOYD!kAKn)2RpC_V?^_2V
z|Gw?)!lC=U^xqYa6D|x+E3<c{IF^OBHT<`O%;ArFuB1-Losc;{H_BB4a0;1&G$(+t
zkmi2WHA<mBR5G!=^rGX>eg2Q|(Yx+ub7`ew(ciLQ;|>CFcppRR<hmkhvYs;AI>E`i
zzrb!k$9mRT2^gx)ZIfK(H|Uk-;{jYG%vnm8JJCI2#&J?;^}(+@S^Ba+%^*!fo^=3>
zJY<7cU?UBe%u+}h1fb>jgTcAFz%L0KnA}yefxM_HQh#!%DNM}6!ePr(zkG&M=g-oP
zyF7FDn`{i$nQY&UjTY!_^jJFUc>Q(Z%}rtBi1G)$od4-*$N%=skc-P_h@uXs*1tuk
zJK&%F(<L_DkjWWgdjry;2aD0r=b#U_A>H*`pgaYa3ocYT6oXR-S*mo}hSz`S*xqzR
zMNnQ|9}ZV7lq=D?YMsGXnGK6*q@3Y2K3BDG?d~ewc|&JT$W!$|gDXMIgT9vUM~(-W
zJZ!@9z#7kkrB0qfn)`pt@~TS9)Prc6!zlOnNi+Z17-hmJ71B&t?>ja(V*cz;{1m&Z
z=dozbGUrwU8?!GsG5alo^nC%F>x-mGw=<3}ewtRhg>!yMEwy~7Yfh7-{;KK+T*rV%
zN*aGvifi+M4dnp1e9We+X~jlWe?=Rm#fBwRK;g=lJAbuw!SdAA0ZVJ3Q@g}!`Q`6Z
zUPZ%)InNarHadCkxbNYJZ~Xf;zWe>xnVx8IYWY=uaOqc>=*(l|dD^Wxj5r26j`OF4
zb8kT27ry!1@SSfDc<G0)vAXgmiES~+cUT*Km(BG7|K?vVanF5zeeJ^5ChaNtP=iLv
z=WJ>2w@K=#J^vsd$-UR|)_TM{Z)CK)kdB%&oBCG)_F8XUYT~wXzNXC<t0ICHq|jhF
zVc^gSVK{O)7rxY$?~^~iT3$e0!I>(6KfEouiU<7wmYE||J>de7*8xYuzlZNRzue1H
z!<h>yCubk!*whJj*DqJZ)b|87a=>6C*NG<kOm4W9z($OPG-77zBq9b=Rw7cJ?OK$e
zQngFt@0HX@UNZKas?B*&j!U^IkSnAQ*5}aGpt`ofplGu^0Oc-hUGl2TcUoP^^CHcm
z5qC0npPZ6!QdB)fWs~Qg4V?!t%5%8qVZ+5!DgW+Q-ym)caL)3BrC%kAlsK8D6))0i
zO``^~k;5A0&=L5-_u=IqI)?ofMx)hWo|O<sQ(V~jA!cHW-}<c!><)+AchWHG6QXVW
zFti}xIX7l8?26V>!@Am6cd<3R_PisGJQ$TNW?mbVUtz6L99ylWHxxQKY6Ih9y<Oek
ze-8S6SUBl@06f5G+3x1*$aCk9Yp&t%{=ajlWMx}ifm7!EeY4PR`6@;k1@K9o2bkh3
z&6QE+=>UUN*-e$6vmBlMD1+_Z0aP|uNcMcMU{mLC98`s~zp>E!my@GTFj$6z9ISWI
z69kLFs42ORQdB5~(y&arEdJdD)~}5BMb(C5EV1*7x%0JexKO_9c<M{-#3)X%+(Djc
zNxd&NPfn|frThveP{mc&6+Dx?*}7@*@5Ova{d{2Nh|=v^{^dV=ovr>wCR>MjWAj^V
zq^Ie$4q?p{Nj!;-A_U(OMAom=Uwr{qmqrW+{m{aBwp(Pn>}IQMq;JvN&H0VrT;|b_
z8FW;&k*)xY@SO8<-co<gfsm*E<ZX9^3va{jR!*FRnN41+@)&O|>y@C^TB+K$N@<v=
z)sL4q&xd|b>C6i4N#EYN&?;54xIBEhz_#}4@?vI}Q&l-x*s7Ia6IkgZC!w<OfRhIM
zlc9s569&05$Y6H_Oj}kR42KaeceU#IX6C%z;Cby10B~F_fcD0?HaD8Ca1Ehos7O?X
zY;9g-{qio;^D*5SL991IuwsIUP@2+=GHlL-wRa`Xl!By19h90tq_rVqIWMS-_(}`T
zf)O|dlr{NrRrQ3~OBnb%)dpZWt*-ES*;>@*JRx&Q%jcry%%Z5Ik_kBZP|R=r>IL3B
z{WhI;o1Nhbr#8Mpt2K>{Cb6bNWV^NZ($H!NyIZinqV#rBvV2(bku<zEG0KJQ@6ere
zeC;>ZS=&lEeoPn*J!7{3S8W6-NHyzH%As%ZT1_PMb}Sc8<xEWbL2Pl1>+9`3Aq}o_
zW-KbB()(x+=vTw~LYSJ4{FZ6*u+J(l2hbW?tK#n{xpTFaSj$0jrlHNkS3Q1i<L7F=
zs`2!IGyu^kSB6d*g%)d=!4Svf$%t&m@ZIM(SlvAh(QvPW!@Hh)S2no2ajwlZ1f}LZ
z%y6C<o8agbJaIlKunEiyoN<iuRhG^!v3y~TiP?zRLlLd6!H7lFVzA|0M;fV{V`9yM
zoHf=G6?URh2C3C72^wYj*wC^8R_v*i8f`$iJqc#)nP;iG8jv}pYAswf=qx~{DF2JW
zb1_eHA&KJdha+D3!8YH1<_(fgPGY8cedXWdY)%wSW6d;1+8%I<v(frU-F^>tx0Ec+
zfs9<8H=8#Rh!UAL+oN;r=I7Yl-sRW+?K;O#T3qgd*RQPomuQoSR|f&cj<2<bw_nX^
zx9aaly@HXZpOIET>}qYQj?u0fz*Ad~yHM4RQf1*T8>++#V5<96i-F?b%As;?h@1tW
zNzoEyGA-IGB@I-8qJ<hcMcYFAXhi2^%%xtRul~!|dFAvgY>eKa)t&RNx6YfmZi|U`
z=gi%hm$KX>6ZKmGY=WRJnQXD%dy^xxpXBVD8?3FYa`@O0<_=8*(A&uw_I#Rxzv?-h
zRMEvH^+m>>%N6GX(ya38V!fKtR(*rz<jRMuu22`6_eTqtxNtI<%5>aEj!RIk7ZsJS
zfJ$;J-~yY_1b?3SqlVqxoL~RdR~flW%$P%5+<K0c(d%?N^H?*1kuKJ>v8Gj49fIfb
z^m;zKTwNX{1I|OLSj0q#MyM!DJ1=q1%so8w`<M8{C+C=(6P8y!EhVF-XR4j_j(W9I
z9c!06l9u7zo5J>HP7)i^H1Mg)fv}d9X>%*6<;9@R$tjSyobA+DzXfm^<4J}KcSS^P
zA<vw5XEZg<Q21RYwAckN$khGygY3nI7Cc192LpR4y?mlri914j(vox`b2)EaUgNE|
zmN<Q832`ZX-ePyO%(2-YEn|A#6W9p*XB+PWY!1jo{Y${pRd$Eme6W#gt?)#ea}*$+
zGVJV};{5t=adP30vc7hK)wT0XO)qlf*ijZ1XPBIc7!6^t;~4h+5EBY1LVeI1KFp3W
z-Gfxr-x`_-QX4`x4N~e-3aPy*g_cVi<ehq@r9qqT#i3HPP~n4Xj5ewwsWImzP?sf`
zP!Zhb+EdEhVasp-`kSn6oTbxllcqi1+5Ao7qzz)Rri+*eYg<^8RIZ0%GuPYksRT~*
zFk{lv$wy3#s3nTKtPfx3sD6Qb7oK@$jn97e2usTuVtqO$HA@huQgZ{UgK-5I#wa@*
z!o_zo4&U2ixaLFjw0ujXVG~<1j|*PTIO(DKd@5Hqw-NEwfyr56a^A3cIVDa^Fi@*`
zSBG}o6w$zyB)9}l326)_JU3CrS)W_ho{UI3UIpJDjX1Tk$<pODE?-<>V{-*GXQDO7
zfORgd{eZb+_aio{naAB4U~_Y%4N_;?ez0KE&^zInI6Tdzi$4U{;`q#uvzw=^ub*RM
z{Q}+Y9CHhcEF4~7daldVe8iv!{hiFGHmWunrGn&jr44`tdVDdkD|A!{4gbJW?<v|~
z`P6wqQX?e_F1W=N(ZbaUP<*&lArEV2YpOP?sBlau7fKmVI0?i$4xNa3>4g<u{Nc+a
zNk&T!@#f~gCN%>RJ4s~QSlhu!LL5zCZE)7Zcpn_=ximiA!r@#VS_lIF*>j()Nf@%q
z((d;;Ht_^MeEu?@`t%{DrVXnrT5DyrY6G>|;?yg@;(OK@&b~e5<YO&Z4?fB|MmMO>
zZ|ZX*r{$cfd~aN{!7V_mPEmK6KbCVxh1K&)+|p8iRla|Y(wxnprAW6(w<yXt=X?-h
zt7~abSmLf1%<b;(aQe&!7cQ=`zP?Vczm1X-8AqqxCXy-EdarS5>)T8nI!0&aXt-z{
z1lZh+{Huck98;&~%1w%Lxqh%I?`Lx+kIiuT@*l9(JI|4sPczlN4<{+ZbeZ!PR=9L=
zg2{<#77iU^{>VIYhdbU(Zr3sBIr32<x>GNZ)XE;T1Qi!_=Gp`oM6P+AkgH`xhn}V3
zB3D?&N#U!!m&@adO36s@g;FokDFmLiE!gBC%l77oZ$JG*usgKOBCEZZSRQ_#c550D
zLu9A1(!rP*8?`YuD#<M-Q1tVxqGxOEgCWKu5@969i6OFWR(pTIV)xSwwv_LGe~phk
zy2#3MMilvN4ULtylpCr-#b35oVLOzxE$2=tqd|_1jd$rQVwvmPD3!V|K&f}rJ?}wH
zs9XMwl=mrq_i*6bsyCk>mB1)t1HMA#Uy#mo7lgW2u(6@rwREQ}Hip4y#L~t(OK+~Q
zva-s~&KAS04<;kBhNRUdk!f<*V|R3pwccq4`6cG>dXV<?(SR4XD%i-)NNu<U!KS#`
zjLG92hFhz=v-WS9N$z8D`r}Nt?;(pI&3D+|InUPCCC;6lU}|cfxkK|z&rUOUxQhV0
z+n(r_Xa2*CXv2<Fn#Ffjq15AL#wu26enLyxMRlF8snu%+Tv9Y)HDX)I^(phBD&R3f
z?eY9$ClkWNjNx~G{S7vER%x}{<oSTpTfc^l5>)(3+e#OR5Q(s+?P&txtMGryGAb!Y
zozo;1BQYYeZ!2tz{%DPr-IqAr{!zaFy;I!(;2cvk!uFP*k7yo%%T?=eYD#>iIpZ-A
zY;72p&ZW#OcG)TQazVOK07y9ll09)Nd#Y+3YvpPtY(bL7aG*@hN3<s+@{yn8l=idr
z8K8q4gRzEIJEGN%Xmtf=GY0)07tU_5bZLc+jWv3MO>#HDSS5~Qy6rBp%#gbwqv1MB
zgO}JCzK%v2)3f(7H}~VE_w~*5AU+7NIq)F7TNrH0_9G{mj!7ok>~39PbL|bf<`}cx
z$C&LtL^nCiP=}22ZI;*8SXzllY?s;DLo6OU>cQtoLY~8*=NR;I@>D8Y024fO_E?ho
z9hhD<m{e#~?e&kjj=kYyVQ8i{agchWr3EO4cB-;^FHh3>V-c^uyu=%CzlDuQ#LRJa
z>o*y&MJJj=B*qwD*%ZJLM=gx89&Ahi915*c?NTmU&ap(o7EpW;jE!QJd(U#H^Ktsy
zDKEdg#v>0MW_v5gSkJcQDx|$}VP(-a8;Lpp)`-I=V0){;j7l}z_<IeQ%cEBghijxk
zssB=`)33ZWXbSP1FuiD5Iqi_7lB<Xstg$4mh|WYztL=}~R<Fm><`Qe~tg^no#%^z$
zbksu`Vk1kEbeNDitO&XG7z{43HagEvdX|ioWMZD#Ll4uPT&%6{Z**q!et}KB!a1-l
z)vXOSjpt@_I`eI0Zi3<N4i~n6mrL8<VWImGraSl3iVu-QT~aq7%{N(I*<@w)JV|Sc
z>DhS}4<BM?cACy)LY~2}?-=zRSz7qtR6aJ>O2=r3%Nt%^vKMTG+8|rXfi`=)*k*Wq
zm?5~a>S<;nW@}@}v(LN$c7sSJ*y+E`%IF8QS~Gs;Vq2l2Nw6j+vMr*hjTjR^M@qnP
zxdw)B?ZruDN#L2@5e~uH7Q=j*jnV7OCLiJD7teA3eTQgug>+l%30{qP4GmfWCI1Dd
z#EIqdImKy)h$#t?)Ok5IX1J??jTBZR)Z4i+gQU7KTWtW1frVq1%WtPx1(Ap(NoaQx
zS{=Zo^m=QYKfA`#$_ncntBgiHL~_JtL?)rrP7sZK1?GnIvL$v$7uXt|Mr}%aa*mnB
zM`?EtHO%5vwd9c<JlGs`*xpU3aHKgJy*Xebat*2IJ{<>3znYw6G9j64;YPyR?hjes
zc#bv;%(fn8s&hY6(IPoHLwXF;%PcJ|v9i>r-I`*0<`9P#7nzxxW@aHG%V1|SXSC~u
zhsB8}W#3<$4Ky4rq%zkYD{P9;yvB7xs#jF#eN6eY)rL(?Rq;q|CX`J1P`#&r=Vf~R
zCE_^7sNwwf*RW9>a<MH&T3FM;+7`wn7~}tx;0;|r`CVSWc7?DzF_h+)V#A8uVl=`;
z3Cq3bn4N!!?d=s_e{+TV?+aB<uwT`&=F*kmp-ppF6`}|>mtku)!$t|C0b?K`6+@v`
zzDTX=saj#Ji8za)S9Sc#`vp_1_OvC5CYhPDfMYo7v9x}XjZ@2PZLQMl?~vvLV1yVU
zNxH-`fx%)_7-j2hkKSf`bcUgB5Vz*&PA{@J@d;Y38C=+Hl>m!3T@$&{)%W`iHaB5Q
zCGSUNbAVtoem|2a-DC<gXBqVdENy+4rM2gnh)*z`+(SD)%2cvQZZn2?kAAvL@A4{_
zFQ1~_nqpybk;6w9X-`ZrF%#o581@{afwxB}EG(r#JJ$w#M;b(J30GZh8g5IiuMlZ4
zyvs=8f@xi&BC3X{mPDDEk9p<A^ISN8+Gm-YSuSk+7Cn||MYG{B#U5b9e~Bbm+s2r<
zlCu`of~&SmE+{R9x;`z!sKto&Kd%`v9d?Ij*&3c^BEFATUp>XidlzVRg#NCU+aj%P
zsnCkgAvGZJrecnC<TYR?A8Rw{`Sxs2OIEieDH0V_YlC8GZUDo@z=i6~ieO@Bb(JU)
zT9ZDMaDDeY%e_^$wl>+_-DH$*q6~?mh&bvHM;$~b5tox?o2(6AWNUa4Awx)MO-?g;
z_#}tApGKmjd?sFrUaM}!aC38`uBMH8?_eVbWie_R%#(uxn`^gF2MIRK#HyUQ8xwcu
z(A+TWFL8GJb=<Zvmpsb+<i}}8hk;2((U8pb=?`}~cXpWz=Mq}2X=dj<_)O1FF}V<t
zkD#}mGu-jp9MPtTbkFr9Bmpq4ESIM4w7#~jw^;T2mnw;nnmM-^v%bE~OFw)W8x4p|
zm+j%3TpoOvc6-V{nrUH73u`^e&zb~dJm4Tv*_ya;#T6q#Zs7bE;4}~P0aLEUi#d>!
z5h4x~MJ(@rhl#n9Y;Ub|>YZioyZ0zNTbU=)<poJmD(P$K4dmIoMdhKY7;Cw7Zpi%~
zchD$GgmJo!Ug>m@ae8-PJ{u)YAZkI<QKHy;7VWM(wk}63UtHsrQ@=?Z`QK%&rIoZW
zO!zi78`00svpsx=es+P3O*-)epFQ>nk1ibMsaL+q?BYj}q&4Q&CQX2RpQ2oD4%kQ_
zcpP}P`0Wce&F?E>mG)$p_GFhlRd%;7vaxa&D~@(N#a!o8Ot$XBMr|_sjC6<osL$?&
z6)s+Qi*9#@xrId*7Z;eGn__Y{CL6&h%zW~cGEJi3<Xq{qP)m%h&1;&2;JSXSLMAP<
zXpK=iQ+{yyy>GwFFk2;#!MPFVHh-HaZh=II@hfaA2}TmcBp@*+%y3GLmsEpQ3C8WN
zrhF``g^=?r8u=(md~1bd#J0os;B9tBXPHRu<&D=)bN9(bT3w&5WlfdYq<cca3K~G^
zeohh#tCyW$k4LuTOSy4`srij-ofuVAYJor*cf2SyPW)>f^^}c^FxXJ~yUK9rn4gDs
zq9k^Tb{vDIsOympSLtV$*vZZ?$k$PnRy4`v#2mA&2bpir^HV49<LGq8zj|45I>Klx
zw8v6kJ$@*_rZQ1K&@GkRbg+?qm<7Feu&F7;f<(e5hMC2A)_NB>G4&bxy2gc_-@)v}
zOeH6o?R<o8avY+Bk=-SAeR{)7^v*4F@mz;acbeI`1r`?PnO>M?Y9S_1p}&(e>iM>d
zB1U)*&n&Fd!#t>=1lI8!G=r&CITGXxHipR=%O5=Z220Clv2liFii_L7!;lRUJ5y_=
z5=2@UX=6+qBMC+<*0#bRyjpuVY(5%B8&VBq#rU<jMxoM)5XpT?L1bC&J;(IieQa;7
z^7h-8xc9!hSUQ{6W>tF|qk^1QXM&qZ*xfR0td5vkn4sUwtH4to_lT)1Fwl^B9tV(V
z`{SICV7LPt=ak+iWFrl#dyiO=Rnn2S_;7BQ?fwcoqu1$WXHd<t(KJas%}o0q+Gc{p
zwn?Ixu8pyh(P{NKawOt#cafoqeWux%1JnB(<#Mwso4O^;P1sW19$>T2l!)3%rOuJ+
z7E_($+~4_AoN4_5tNqv59K6KJ#tXFU6f^PtOt&BQ;A3M_dZfC`?r@u(^Ow1BzD2t|
z#oYWM4jnnf)ciEv*%%G0_R+2*AJ*n#MylLuF=H1#ZJ2^-&ETt;;}i)Evx_n3&#dy=
zt1n}dA(k#X!?Uaoen8Tm25}e@V@!mRHr8}7wjGAWQTVqc7#;_XjWNDBC@dig9lH8f
zN()s`Xs1LX-(H0($7x0!O|dn6lkMRdI`%kkzJ8kH_Z%kaTKYR-ZsF>36=mF9s;Yn-
znp;*cq%0hV-E9qX9H~`ARk>s=Boji^@{v8c6GnYy^E~v{l~K=&E6Z&lidaf7QpM-T
z_tI6)Z2zw$@g$My&~Bd~wi86AO=Jv4!VujkEt}9yI!w2O!)?pLF=4LLVp*cvsdy`Z
zja<c$?gqg|Zwe1b_whn+AF!!EMzLZR5)6i%U6h=O_ypbf7^A#LFTKdx@D!K(&(pTk
z%(Nb4y7e&K_$X>4Qqv>TU3$YUcF$kp!udAc_AE2=hd6X(ftkf=I#Wq#yK>T=;?e*%
zMY=*`Ni$aY6a(VW$yn=SV`dLq(saZRo_zr|+ku6fabf2-uu0+p!H5SHN&Gt87S&DQ
z;Mf+%L}g*DwSkiNvvHL&U8_}o<*;bNJja8MU=fKuNLs_v?lasw{ioU9Ug3?`&hzlY
z_p-a41;E#4lyvZr*1C2r_~^t@#OBg~$mHHkeaxiM#zNfot&#|&LuGdz`oZFKH1LE&
zV-zbs$Ez776DE~`Z5~G;;%G-lnVMJtjSz7m(m3}_ZIck2n0C~m9e0?BTg)dBcO9Kz
z`awsmS((=Q!9=;-WU#q;F)@62!KNI~Mnt9)uKLEy1~kW*h>7HGy2)K+u17yT&&udk
zmiphPV`iCd-Op6}Av*D4G%}<*BxgV`y-4rk5|=Kt=(J{-nqBbHibFF@&9%J8ao;iO
zd+;fBJ_W#-rj>?-7?LRV+NOyGq0==y{Tr{a)4z;~a$=@9zxA68*`Q_T!fUh`iNc_`
z0vjWqVH`zmKYJ-mJc`+jXiX65D>9K{!&c02q5wRh%8?ksVQ@IfNup_XhHtYyI!z}!
z%v*1~&e7wG%*;=)xsrPZud6AJMaIOjTJGbbNLXJMMx)$IFi_%_2N{XHVb*XLww9p3
z<*OLyss*4FPdN-YOXYp>dkO$EA*4`((VJ=epODPYzl>l5_b9drE!(0Uw`fNR-8f>g
z)#9#C&R|XqiPQATA$A`~Zqx@0HrE9>4HK&m9oSR@OJgk7Bv^_4=Ehmj5g9|26k}`v
zpA+QykU@5t%fnZ=*nf_;on<DukD1mZbmC)RBQiT6bpv+O3+yf}bNO;Yl1wr?yTFm-
zhnPJ)!_;&e6h=K5^)g&qZ89nkFY)sl>rI~S{W#3dMf}G9`W9y{yh;@JiOm!{gSXij
zzC_ZV4O=M>Hsu=Jv=P%nNDxUd5)(<QbU&;#J6cn3OJ!zOY~Qq~aH626vN#iANx-?l
z5LVP$jEz|7e~S}S{}JhMnO9$YgD-sXlMHsfW~s2-Fa>E(OlYq{JLmlOY;4$CYq7bR
zaqPZ??e&~~PuX3D{wDNy)SI&7<9G}qc6p3cSl<|yYJaJPWJ+z3<iJWoWZI|-)<jsb
z{>wxpwnfV(v~0peoG_Wh9G{6;{78$X79^$H<cAq-4p2+wsC#%^Ur6112OF+qK)jDP
zPUITD(Hjhi7^29}HzK2@Yn~Mgq$nelA*v2BmUeucc6^LndknKnERWt`Y4AhZOfucN
zkLmVD=)^}M7BW&su17!Jq<8rumo9Z^CzDLh%&~BIk%hzaOdjg`4bBMCeomhHL^Tsu
z-|-}T>Zc4R@3#EP|8R*{-*_49Hn^Bnw>h`<o7iLmV@v?7q{g{PFvJ)NqF*5UNgRyg
zEn-Y5(@-?bnY45~FPSo8N()yb5l$iu5l%7>K;)=VayKH0r`heFVQcsnlgWKtzVH^W
zzP!K#58ut|#hiQ;2$aEfuNd|kBP1<L(lSJeZ|&CB&$E0vq0{cNbXw`}`pO3U{jH(o
zK2=KaarU=1$=+HSJ(`*Uh_!yUV~q!D6s+;!YQ+-UnAj%7Hl`iLbmEx#$%IEvcrP6{
z$S^iSi!ieH3^wm2r0&WT0eP2m@7i%rV>T`auBEzBi-~=Mja(hRZfF~IEwH)5{nTJg
zOl&(uwo}?-`u^U}DVzu@Cag$PloZG@5;M^{$wYD=nHw_7R#+Lm#l^w*X`2aVTlX{9
zevFCaIL->G9g%9EzFVTdzRJqVS(4W#nVFquesP}J`B}Qt9XeAnoenG<g~j7Ae+<?y
zX8aF-;|<<A^*U<TAq6opXV?EV&ZNZA9EkJnP1sC%;7I}xCn>)QE>1E0E#7b4V|wQ8
zHA^q(Mp&2ezBn#HBts;_5Rv2jV;Ut&x~%rU%S3VyVn@98%5$g)ci(%0;Wp%%^WHwj
zAjS`DjfKIW&)UW^>l>HY*<NR5?KB@xe~RU^UT|xy!A8<leb)F-MfYc}Y0X<RR|~zD
zgpj(}8X`M^HSJ)?;dNAziHJ=?Vj@~LqGe)c+X;^>#>{rTeBTWRWlLCSx<1$_m+JwW
ztA!riSODJsiGM*;qDJ>vX5MaKBkxjPDvC80Yh#RU6JfnWk_^#&6f(etT#e@(7;j_h
zt+R8`93{gVp_3e?9UmswUDAAmwe$?jgBM9;f|<k*oIBAGtnHFXP8Rja+!`yJ>#VGv
zL9|V0a+=w>IVPt%Oum!Q?ikirM!fOLB}SYAvq6?RI(CsuTffP!TcXoB93&SJ#zctt
z)=6wTNEtf8*{@oM+o&DxTMGmXgX1jq2Jh5X(A8SpU{t(tQzI1r<#koXaMhP9NixSE
zTV|#A`z%iU7-_!7D=$C8=K4pt=ia-Soa>+nz3l-z+q-OUZ?L|;!p7El2BTF}heS~a
zMTufdmU_uWgY00Ww2Q6j$jeWy?&%b2i;%iFuGkzJh^!^D9U|KXRV+dzmRMrnN<|TE
z8*!+c@ZfyHbSz}4gJFv64{`fu55Iq4Bi9ge-Wb@FUWf-Y!!bbqVE~(VX~~L#r5KDD
ztc|@BUeqPZ2Mn_wnHwT%aB30FFdE}DL&-p#2OrIFnxdidX`5qo;uGYWlIClyW#?Jm
zeg%Ut6P;kD{Se*Oy>#p%YJ^d=%P`wwXShl4(k1jl(Pl&#0}}1x@-19GBC%5}?R<@m
z^cC9e#c;CNAiyjtn|3+7u~K6gOH5?iK60l_voH<OXc6zCMF@9|k>iD%F+v`yqX2OD
z{1*{FJXR6ZWwhE0toNQLvI%qT&yeXh=Po|a#fxv!ZciZM7!G$B<vlV+zz|~`N!&)H
zjgrzIT_(>{&?^NRYR!Jr4~3}<VaE&Fn%`0Vd@|x+uZ_SO#Twr_sq@>dSRxV|k=TT(
zq{WfRgcH*d6A{5!U7(+l_Z3GJD&kup%H^hk%|WikjT_6ey_sNh5Tw2v0~-{KMwJ4}
z_?@XBWz}PCn=~7c<$W?YBG(kv3{h_`UQ{|xQ$!;~V^qWU!h9$(he+ZDR7a%wHrwec
z8{1!l?VPS%WVZbf)5*O|nL{{<$t1;@5xMS=>N;tjVMYmwodenB^7e1CH9AM9d!#(!
zym5S7&Tk5@Vr$wB{gi~Zs!r@I2E!_q+o}ttjg(63;01&66F#*epvMww0KYc&*6&`N
zDPiW-S!B8QEb0ui-A{uI$=xzL{mZC$HMmVWL?m8bkqsD)R{h2=JH_tkG{fPaWU@^o
zg4r9RHLDt}ah9~6T3L7HtA!a>o<@FVWlfk1NsHJdsQ6bGn}}}QVqv1gp>D!dB3P*s
zQd0+-8}gwra<*P$U1gziJA=(Qneiq|8xAhx=KXvQS8C(^W!+kfwI<9Zq-G4|FgBrO
zTEuRW%nis~pDZ7c=c52N4yPjoi%O2T43#W^PN;s!Q1v}ZY^O==EQ*rlI}Ec8&iB5<
zx!teRGBZrrqfEqiGZ7!B6-^MSA=f^+?y}u~jn%;qaFWxVIO%^M8rIWZ*JKObQ~@@o
z<xS7Ull`noFgC8@al|x2M2s|z>$PU{&}5(o;34*cMTz~;xFicY5bFo9wo7*+VXgl?
zcC)vcj31zFk6`TtMlGr-qv0h6**W^z1x9&~oE%JywFz;uh`I#L3E_uDh@D<RLlso5
zqTUfv#@i^ZBpeO;fqz^Zh>upRr%E8SZOnA5%WS*FWMZ(T+r5WZSGX7E5qV!pokI`&
zbN<2Q!M)dWE!ux{l^nqOd%qRSjjX?~w));jbyHp&{Z%cpep@4jN3Im+<UuK|7SRq7
zEu729vLRX4CwIe;mg#)uV?DU|swWS?Qv;#mztv$(n{MkE(mICIl+5k0ov*MycpL4d
zSoIZ)YD&r$D$q)f(T=C_4&@SdZ6;`@>eWr#OBtkCjYk;#`d>^G1fr&qNJ$8WE5WA7
zcq;T(0dy*BFmF#GE&_6d2%`=skv|nRRLYVg*3g+a#wgujC4B~y#+Yy{9hv`m<1n^^
zZFPxET)SFZl2%;9I;}QaV{d<<11nwE8yEeMv|xf0VMr&n2CNaV-WDUz6-z`n>ClPV
zOvNqQktH@&TyR*#;|MX$7)T9iABL)hMcXY9<-!51zu&DjJdg_KIs}%tG}!FJ^{iNr
z8WXaH3io}7bC$u#w+eCWt07mq<#otiN}31YaU+aNapb7Wk)pbh05p=}Gz^+0LqmI}
zc%orq=4r(XUb(Gaxt?nu)DfFw7>WEEAHR+A#5GfT)A-F)C%F1`yqv+bu%WWCCdNid
zV>8w8J(6Y&j+Ay0MOL>~zJ%i2C=)6XaOBSUlnLisGC$DGPz<V`<(R~CB+-no{(?cf
zU*${FEwSY33f8u1wOdG54R;kk+ph?GH3hk;XUHpRD#do3z;NIg?kJ0ge1(?|J@6R7
zMi7f-c4C3Ki7BiqQJLiGc|KC}?a8&s2RD#f(xD+MW@5J#*z6;s>AKEAy%`nG`v5lb
z?kIe-z(#9UPFgZ<tH_qzSy~;#qo0^#cQ@t2nQeBrQliKZ#RgSBK()5*tDbyFmiKWw
zB$v#$SE16u_`$N#tXAd3!Hg+~08W0z>n%28V~MmAPTH&yO<37mRJta=_U>S%gWyG)
zmR4AWC)lWkv8_P%Gc`JHsWYenOcg36h3uNjQ^U&{Tu5<<5Oo;wYjhDUBUDOeT}dho
z07DdVv|I^3g%KE1fSLzIqlP%P)l)1Lu3F~5*R4Vc2J^*d!<1rBB{B&wzVZrd>t}i7
zq0cdQXoAHfN)idZZN<ipoo&ZNrxWI4VMZonxrrfsFAv$^!^{KDXaHHzQ0KQyl*>Vb
z&HE*7xTV2nKV+t{`>MZUmFC{HJ*qK=G|&0cA34TdC+8T9Ak7AxdSi{(URq=M@&Htb
zi-Z*-5)%_gU2+|gyOi7w$?^ft`4&p0sAxRM_{~<a<?<V@kc#I|OfsKZ9x9u9o}?6p
zTvB+`#I+et2P-WMNtmr9r2&_SS9lk*5JbxPg#_Snxsc}$6$iC>1vLOE%{L_IsEERL
zO3MwA2}9;GA_l<}Wl6D8bw$FHHjIBtK*b`~RxXP*a!uhqUGQF_*bzlSo*7RJ6b<Hn
zKFq7tw!HKD63_hLAJXeDadGuU?mzJa_nrI*C+}-9IUTXGY<TCLHR3o5A$g`D7WH$Z
z;2)$_e)uReup{iQkLbA^JDzj)p#+-)BmP}M+HjB_#J2+2)IQuU#O4+j4OR?U?wFZL
zn4O<uZ7l~?qB!BBA3x5cj~(XRnN41Od6l#8Y%>@*lEe}hRgW4XIyiOYd7nHVkh_fB
zRV|bUnH-~;U$JW(W*OdL4+%3Mabw}Yc}c<dl}*9^je@aOJ7|AewH3MdzY!CvoBD=I
z#BZLodaqs0vH@+HlQ&bhOtqm3rZm2#s{DujDyV4M4AowzK>R!)M`gy<06{FqTCBC?
z1);A912lrmeFYL(W#w{4cfzu81V#hHu&-s>MR!8Dd?Dpq-}x%T;T98}qpYu==K0NE
z;mn2mxcludaCqSaz5ZEtH#X_UoxriG_i$C9UIxUf<j&`~XHH-kG3bXVA9uBG;r)(s
zxtU<Y!P!&DRaelr8`xak&$SG=Q&+81v8X7jhE^-~GDsWNyw0(?;Sdpy9$Vn<d*|5L
z*yZ(C)_C)^Ew(m%yOqSgp)k4i#!<F|YEG7?WciR>{e}yd;Ycygw^J^(TNqca-mA(c
z=#Pq%vur;qf8nCSv69rlrub@Or0}mXl}$$hKvJ{&l*Sac$jB>Q^F(ZoFQ-8s65Iks
zo4z-adp0))6%#7As#4Q%ysKqWWo2rO4O%9HSW`+72n0Q+o|zm)%EdE%o_qdZGdpvP
z$3OB#x-$`z(_pP7Y3Hn66u$G_UuSjm4Z7_ksAjYiFWTMOJjd%h|C)1W4>8@D=g90m
zICXw@GnQo@Uaij$cS4K@oYWbHX-qasaOEi`A7Zf4>Wz5s7Nh107Na){Y_7q{xrtyi
zo;c_2E=?^XlG6WHYcmKNRDOeg#&7@=ohd&5V^e(c(?d?5-s1IF*133Y7ndqYVtufj
z1Jn<7W81-LMy^>oXm%#WxeN)_525-A*_&a-tc~4TnG+Rc2Bui!7Lta-mcqoPhRU}-
z%?hXRMy6&IR){C-p1~r;hAOOgq}W#3(zx7&HMNFh%AigPUk0Zpu#jCD2UFUpDy4!_
zL~7bC!5Bl9hBnRwPa%cK_`&qKxBGnixqrsF%iqA9Z?U}kI*;7@vm8ErKgUlx2EBym
zzVi*vT=+KK)*;Z`lOn~7Ts!S)B1!1Rv&>E%C3krVc7*g(HN~-!kQ3$y#(D0mozw~a
zo@Hmp;TqF-`2eF_ZenG#|CE>;-%{O<U?bOjj2b#?MS`Q2K3-Tg7$XgAH{pXn8s!WI
zinS3BKCs9`56`o7d7D>WTIKE6x9IOW;zWGAg~N%(|F4D8!MV(XPMG;PH}XSfwB-4e
zZ5A|=(MxApV}d$74jwq(QnZ}sm@Y!pAo?|5Yn3{Rgv5s8R|eI%aYC+j119m0DWN(P
zEs23zteizq&Hc()3|4Ib&ss~RTC@Ev(j{UXY1z^kF`?LUWiqIZyg$(C*Lr;OyZ;MI
zYcDa;K8oPDy!;w#8*g&g;*W6r>}S~OpW}_wU!xVzU`-qdi{1duN{kUhVp~j4E`~O-
zQky#oEq53Y+aiiSR9JZ~WFlnF(C@?g<}d)x2b~*rjSKF31{*0^-}@+VZfr~SVFR1$
z`#I`d$-QZ2N6D2}fHf|L5s+{a?Ckix?d<F<KlxL${K#i}y!F;PZ@jwB>e3KIXeBnp
zktpH}##$oV3bqU>&W-%QSu@mSC1=Mknq7kjLYWlobEQnl#R()o+a`*-h)qJIi>cP%
zB_CLtR-!VNcOdl|un<X_+F=pDX(}hUQVx$534Er&O_HecEDphX2Jun}lVF1Fg=)?y
z^SRqXiaJPI2CQLg-O=hQu@z3g)aM)D`NynmzD&1u2&Wkk(Q36pbIvV&my2sJqAIlF
zsZjaF7$Sen#9&28q7KvDLs%P!n#3@keW+#g=z+!oxq6LVo(pMi8Kw!t)Q~y-fTLV)
zGT79<b8}48Kcrw&u!%Jg!qhnm=9?5V4XGkcY-DhGPLf182YH^C(IbjC%2I{lAY;&n
zB<b>rPjq?wV~06=cAM8<UE|#89Y#IhZbea%v+X?^tojvpg!=83^O6a5sRyGHc!Vk|
zCQ$z*fR6Pil(lVa)I|zaxba_Q=9n~njGK&G%6SZpDH6>pNkS<@0irIjm1CdGpn2HN
znb20{fgNp|tY=9=MG=P7F2%^mgR+4%?Q!AEkdJ%}qIS;KQpB6DZ1UU-zrxzq+jNt|
z{`gC$+TLMFqB+D^tce4Rc#)|Q<4KTWiEP4DXPziZN)k_Dyk6T0mW_5EHk-Ngtmn)L
zIYQ<lMrn)O#kC5@eBilJSC=c?IM_%Hgw26%sg&^ylbf8b@P1b|G`w@A{!_J7Oy9$M
zbMQCby2zPR%PbzA;hvKV%*{<=1kx-=UFDK)!s<59bGEk>F^0R2&vWm6^K5SI^2Y1y
zy!q-Do2w&?F(j=BBZ_l{cFD^X)FxPIdyom0fokCOkeAht1j8p|eL{mD632*%F||z=
zHExU6K_^HYysvR!;!53pk1}mj3-)j^=?Wr6uWQQ7186aU+?aWPp&~f1;0sAy19cOI
z&Y?Xs5ytdUMhFoucf9xq-=V{wg0#i?Gne?zi~o%6-7|EOBS40gsC<rs_v<Mg2@$M#
zu(8IQXvMZoWIM!B+Y=Nin1mHSScAQU*1UF#U7-t+Gr2Y7YDjZKZy2#N%yA;OnBn=s
zgUw$5^Y?0^{=P=J+(fXEYY+j|&j(y_&{WH|s-)P3A*R!ebLUp+^@f~1wZg@7>&zdT
z;O@KUIeK)KB#Fo}N1oT>dc*8TQTqLqeott%I{fHoC-~H-N1Qpe#VapuaPe%9JcFcV
zF(x!L;Y6>vD^hLMia~Nss3^tu$#{*EF{b*Sm^~3RTFVxa+GYr?<!)<Hf%&%0g%jH0
zH&4asr<ER};TH`iBzu~0GTZXA-xx?EHIVlcYhz-ZMxYt3WQNyYf0osyC1Nwd+V<Ow
zhC@2ZVwg2|!kov3lnc`skQ=eYQ9F1ZB}6tUD;<%hbfYpNtG?%?TGCZ5m7i(lF3fOp
zOMj5CljdXLeji4#kpt%87_;}hzv;PA?=RR?6^$X!GjAGR$D)!;;x#!@B1Cb7F_v~a
z!ex%tl`WQ+H<+60aMy_ijvbq$+iByRBhOu<j55am#x!-TujN>4xaXcjJov~QE6cmQ
z`qDbDztSTeL92x)-r*_#QVUNj<}Oka=mKaI-oxPvFJdbRg4ElnCg4h;kt$j=74p2E
zk||@uYN6up)_|f`1r&zr)yzl&&&gH0&w8?7Nze-|mEecpF7ZhbG9uC`mRH}#>4+qn
zr4`QvAoQ=*nz&r|d%*E7eUWVu*${6mw)r_O)?USP4;LC2z};y*qYH1~uHpyD3NEx$
zBY{zF8Ri`ZxeItLWvJkX6KwbZn8vph*j#Jvef2lQ+g!TP5^1y9D)M>-TqZp9@L`_+
z-Wdk{j3_q5i64UQ?hJYL<#U{R=Q2l*&T{u%3(U+;plZmnEJW89ZH!{Wka>4IL$_g~
zGr><hG0o?n81mb{cA3*}^+*z1%do1K=z4|WU7ay(t2sun9BndXYh0J{)Q>_X?=%3g
z+q2p&orp^dQtQ{@T5*F4U^4+sO0QtGWkn$k|4#{8%a9?X-jBwa7<DF`@G0$NzV>eW
z_NZv1j9A1(MArNL6y879L_w)pPdzPKLW8Ie0i+f|tU)Igre)#1(~ubIpL-r87ba}c
zG8Zw-BZhf?i&i%KnVViuWplGl)NcjD^MeGNqB)U@528{xjjv8tK^YAlM-I*M(?8SZ
z?NiH~JH5f~?ua-N;y6OYkY|pwr&qXeex3RGY3@ET&%)vqNfeW&E)1m$S%U8}6c`K~
zy<NxLp_o7Ur|;sQ{^K)jZ;d=Ksf>O2>a!-PWsVmE;2No~lp5~M#jPKrV!>3*a9kc*
zsj>dNGK0{XrmCJYVJcV(X`WJ>h%|n8sh6t1Ia(46y~=&)*U!#|N>9oGc~Q=LP>C_N
zMPyr{k}+jSY1N+AY&B}JyNZ;e^5Xqhs_L#F`bk+4Y596xkyW7<=OTtVjFp}BU(?^)
z$59DILZlfXpn#;*Xi({v7~LZTMvhLA4_(p?0@5{_(cLh*J4Sc+z3-oJZ@=&He(#*?
zI@dYp^?F`hb_0eh>&?$9>~(mvdO;x#2maGu_rDb#u*oiQ48V%#I3<iF7>;^^j@3H)
zqNg_^!fwX|BN@6I2XmlWAeI*R=cfez$iDQ-rt1E)EyX+wAxaU^!HOKH(}InobN!;q
z^&POMH>;$SpM->-`u>Jz<z^mR#q=RBPjo!N!O+0c9F)iiQnX>3RI2}aLP+jgFq$wn
zsZfZJEXV9}-`FWupP(h+Ch^zK<&0~sb5SV7S_@DQUVo!C!N4b;25tYs$^%vHo|uK*
zaa7h0xc`}sC_l(h{v8_bO_w_<9lvCD<2xhl$gkPQ^55bwkXWZIai9PWH`|75*+_-E
z7&OP0VU}_fr<XKT)0o0nrY&%Ed2_9oPIpK!jt-Pc*Yu&pB7&fjm63|Mhe7zE%>gBr
zct^@^V}ErZ2mpvkb*6o+t=1tZf>nvE#wU)PkLV8m@AX9(k;!QXF~~9<N%{h{?AMsy
zy_=>7iXD<xVIA14do=9i#gbvy3cVJ@Jbw8_e^TBGe-<&U#vGh4iMA@uJGlKj?R;|y
zUMh)x{S}FI-5t21juu7FrO#n8#i|Zek+o+vu`(U{TC8%Y&pA{v50ka|UHU0gQSObn
z!)g2vjQCdh&zGw1WVtAnoIv=QFiwVDJX2z-_8jHU$z$i8bX#K>JmF3B#P`=bR@R3p
z_A)iK)YrlQYg~7v0DrR&wiUn6<~znnHdsyb;4ZXSuccnn_YWbtI1zaXFRB5duS-N2
z>CDZ|#<ioHLjo(}<zapblpjmmR!++1vqBMkGQRh3@Ge`~c$Vq-cyktig_T~a&cZ0G
zIdd`gHuLD|c`PSg>Q0h(UcxD>qhhI^J}}$U3a5u?Lj^YVLyYq?*7}s%Pun?W*qrsz
zT=n$NltJPThjHV;!8b|kWUC9}`BR@6C?uFh@B@kEkw!`Q*2MWh9|TH(Q%Un?)ENZq
z_B6Lms9t+SM9jNlB5;2x?piVaffM9LeuK<iCngZTjwY_H#Y_`v?di}<qz^*b*^*RJ
zI4QTZUa1jIpg1X(E;Kt1PY;6ID2ZjGK${M&Ww(|!8IGD#x&iVetB~a+BQ%`B#t~x0
zXzZ*c7vE@Vh4ycpY%ciVag|gzuHj{aG0)MSTIwCK;q~tkEuQb)1}&k7zehKPvuX?r
zYP>Z;(e5jz%>#eDno7#Q{#$h8eMq$iDS{(G@A$>Pqezra7omxUg`hr$KH*Brz_~Vr
zz39ne!9E7y3Leq$<UNHe1K9K*jA&?|x^7IBCN<IgG(0XR^ijuFgF<SS#K7b7r9A1h
zK>F)gH7cbvt<AEHDkq^g?isO2@*GMXl`t%t`Y=yrYUJ6t;5MSXszuZ^$(>v>BVa(P
zc)YvZ_*Gj-INMOldD30KmM40Oag>g3wXBUc$eOkTC{@!{!s%eZ`y+n-At&zZ)G(~t
z<40-tRRXaDfn<(mws`V7PiyvS1!s4R2h`N+_J!i#toi&YCopJgMk^+urjFdxM3RoF
zhPj&Eli)JCo1Ls7%27r?R02uT9}(l~7lZ^K@M(Xy9nsM%U$uM?MM0=|V1>>7?e{$b
zY*pmm%W?nt**FVVsz?=^h0qONUHwWl6zoi%7+iEVi6nGIa0`s}Z2d7K&+!R0;`cdt
z$EY+^1+N&~t=eZTw}qZ9yVLB(SbQ=RA0(`#=1{G9(M?WQBSUJ5tdD2Z;1wSYZKYRa
z&0ZWh^k%7%+ADw05{BK*3)Cp8At)Yw{jb<N*5fQU{1QqRA798rCu3Db5?`_X8EnjX
zNwL3|>DO=os*&}ZoVT{Ae>;t5G*%1$y6-Cb1uOsi-iL`2^ZDGmueOuJ=m2PyDnPV;
zvEUjHsCjcdpUT=3vz-&_|K5vy67+<lL=2{jL;)YVx9gIVzEl$`4=YQP+co(_tK}yO
zxIiLf8Ieip=^sLIcbP2s`w09B`#+05-4JOX!Fs+ZR5@xDnFah{nymSFZrK@Ub>Ojb
z@*+V*I*Vr^rea?vB5eGpuhkh7n{&zcs`hyy-$EMA=)9jOypkG~kaTqlK$c#h%8?;k
zswuWo@UuD3Q<8vlE}Nxx1Nk#|UIJ4QZ+)S-&Sh6oHJ;k<+9+?AGQlUGmJNVNdGUCg
zAkfrZDPc<{-&;R^_z(-|sQ<SLkuc!3)8145k1fY5zoDTJ_%FR%mYdR4_+nK>;y-S?
za!yK9pAVD(o#{aerPk&lICn8C<(~cZQW&KGmwZguKkX5w;j!qtk|Bprvph`9IuS7`
z3+c=_ja<0J5kDw;Wy<czxu-_AvF*%IMs!xqx0Y@7bImh~a5<5(;W<U^=pV`gKk8$Y
z!wtTz07;fuaDzGqu9{0KU%vr-v;RC#v@?yLz+<Ix6%&o^4!Kd*+yH5MrD5+t<6(2$
z|KRk)fx){ZMGg2IvwcsV#XBBFDfle2MB?8o2y#j^-_6T|3*^exy{W6BPj>uW9aj3q
z(^~6MK=XZw?FB&`6BlY(7!gQdw?pmGgWz!4$jqdTn+omubP{cySYaL$1t-W)-MQRE
z(pA-MHI^Ccrf4gW$k7xTP<tz2aT1kuaFpJb<-EQ7T<ZP`)Hy8&7Bc`&ZPCS(I<mbj
zk}4zGYdMJLGNky|<X{~jXbR_4(conn_s9WJ>u3&lSou3ql~1SxSR9{)6+f>#)zl4Q
zygPFc4CGNH-+a~36B*5hVz)+Dw6;jY#$FkQ`NC+Ok2O~{i9TImrJAz;Hy0g1BH2H&
z=!s0AiW=WHBLl;?k0h0rMG#wqx=oKG@2y!HUoRU}qe^;X&nm<qK&a{b$}Dn;7ZF1E
zRzb<>E3JHU$D(z~zv;5cvL=k|Np%w3B6d*ChVotozRF=}`9`S(S!CGcCp^{8xOt6%
zNixLz5ZtsR<;zx2J{;q{<?QRJ*T06PdZ*xr9R`GF*^(>@fA<*w%9Yv|wS#2!N~RZ8
z8H6Vdl$#ri2KC-zNr+=qGn*Pi4!`{6^!JiLVkU8^?Q7r`3iTNczOpK;Zoj$th0<*r
zb2{Wa1pX!leBx|&iWsvGk}*-Giqjlu{{rTBl3-J#n7D<9zO5o(n~lbZq)aw8GYhM-
zn9*u!5(oALgXM`li}T06Y?sa?@<Xj6#Df@7e+mY2JMYW;SaWjK^OaLJ#iamcYsP&t
ze~CTHw0WTq^Y)yRg2O92)S}AHc>z5As~154df!M!g4Ypl2`Nui(<vJ9zbCg@RV|#O
zY{sr+J{QgG4kVPm(c_{{<RPI_iwu~ewGuW8V6H$z>8EpA4mo;uYTyY8S2pO+ZNWYb
zvMIRDK4H3JCl6BfKux|?!BMs;HbT{FgLbJhw(k)e|EaXd+f{#`6!<;(_->pmYi4lg
z5HI;yfoq^@?>|me4cty+%(kps?MSL*3s2X?2@4H=R~LUDG5Sh|6Z<CjnSd&5y$0CG
z;sd(tl5;R&FY>o$8Ib73WF2xo?e`=!c|cKVw|;wHjUL?g*D>IQT}?Oh2t(;Dxixq^
z3p}hQBAVC}nXeNS6=An0?`1R4Rjrbx$7Wzwew#fx<5Yw@o(I$e>;sFyrIA1}b_$Jk
zRVU+!X_@a$@6583-lHy{O4mpV@xG{x*B2~tQFk>x8&#E4^o57K!e`fCn|=vEBkbjW
zo7(xdIy=PC9w$<G5JkI?uWmG=SM&MxcCYD;E*1F0AoT7r+{OBLub2nEvezzw=-rJ&
zL+l%W<DQ>M#u7hk=+^rxE2cL*5zWJIIWphAi3bgit%ihWf+ZK!Rw#)vwRGHv$JO5i
zury5OaXLz><=$~EVobS7O5iNJYWkRjM>)&czb}M_m%pZ-AGJG7mm~SG>h}*`nZI_W
zmd`{2E$Z-SDe@?KD!YaM{O3!I#u{JqbK|~UW+^|l!^Mu!!ZBRYR;2Sh^(D~p%P;69
z!N`3Yz!}Zx+&0wpQ~tyeY}(UbhVEEBpBz3YYvQ&Yq1bYJVfiO*MB+bQ)pW0KUE4W{
z=->ch#LlIv1em(vnM~|7HtJ*!u{7AR_9jq!#6Bs9Y@I)QLAKt_A;QO3Mx8LKA&tST
zwWq>T^(+-iE@>&KmpmT|pWh7^(ue~aizm1JFtCne_#s38&HVWOFE7&%ss$oTk(YKQ
zE>`?9Je9Dk@O*1VpEc%e9q4+oFE8u&R4=nB7S6~X6Ju=qH%%okz0%Krm9W#vHYAY&
zu>e{CaB1^^`*XWr1SQj~dXzcd$S?W-RW$x+sn(CnCTdg38OCO}pFAE1tB24nYq7P`
zm>tkLL|VJ%T&LY`PQ``Kb_f_4-b>L-CkS-yP}`x9&V?(=1oV_bj=?$7NG;u^^@}-B
z0{ihOjhkpB;vXAVhsgN0JM;(*Tyzp+OBbP9khBpznw0Ug)YJ+uVITCZisyYPkEu@B
zEy$S{d>LqO9d$V3_F&67GbVLEQR1L}l`ZdZEw!(qt4R9ax2t+`%&Ypbim1T2*2aQ7
zi7V>X_rKB-&e=*W3(>oOe$QX{rmlT#$Y7=TCvia$Zq^p~3L|yTy}^G@)dBE(xJGWK
zm~!z%NM}hFxXGHx*NRw!)AR<{CH)|Bj?|#LaN%mXA3kq7TgS#1=0Uu|XM@4`Lk4N7
zK<0Z9=hHXt9Y%k$vAHL>z3w(9E&@f^4VE_-=h)1*8=M&CH{Ge*uvdD1dQ*wu;qg|O
zr?+Vq%XRJC3|JqSCW`dV3MFf3K8^otHddJrPbjqW3&rlp2g-D^yknc^w3K?Bu4iLb
zq|2C28oTV}5|mo`JT7j{s{mFhkDpOY&RqVhV>#zYf^&3tAid8OLDBn~S7HqPT$->}
zd8_1dIZLSd$BU|H-Pe$-!A)P3)>y1aps!%XoaXVH6r56cmM7qsK<q>i9CnE_vD7O*
zs$+16xeXUD8MW07Yz`N5JEG%gwGZ(;%G{ujqFU>#AV(*|TOuQ8`>!KJEP0%jQ89r3
z=&a9QP1xQr6dA}mVNVjk^3y=bZ~v8HsnV#(w~x;5zp{+uL1xY~rs!GtpOsk)fs%X7
zFA68!d1`2D<<bq+w)gvz<aCSmPAJ0izKJtq_3PjcSeL_yoUGIkAe>|o_URk$`N_DD
z>0(^+Ore<@F;R!9smF|c9C_^V99OkC<3vyD)Qwr$!QvI~pwbJfNF}c;!4dyd;;pl%
zU&AkK3m2a<CWBr;I<6Vak=i<*v2Ot@Mn3D(4(6LsQ}ODuz)<O~Q7hdvwPi2o__`In
z?OA;_;fH9{I?6505=n+jrEPE>eafg{e72QV*&Lfdl4kNUlRj-|1oX;)ZAOZBWi3U`
zz`2rl!(b1jM-Q}%(rL_#!^YI3h7<vZUPS}Fz|6{~Y+#rAj*aoYZ%jJ$p9%SD47z0}
zZ1XFYsTsH9RsUmn5Y*INCC=QaoaZ8bQSq*3x*CFk=%2dS8qNX9u;8rg4AJOpo^m+3
zpQqXz?_;Ee?>OPdTRq@&@$G4#h#7x?JXmowO0dGE60T;qxVM9b`2ZTmNYXy1U`_}A
zU2(G?<DT*LTTv5mZrwDIs_us@Aik(qFcvj`*Q9AG>os~SvsjTwx<-#qI>jzRV1~@@
z4mua_75{tS_~jZx7FY1PUTLykQ1LvdIn1IkvqXoUe!ApSwN9s|O)QJ%ai#P<3-0Z9
zy@r+EQj6<$*K+T_LW$B6rafY1-q_E1l4h)m4$m>~w65{8qxG`3x}@d3gN>5INd<gn
zggLyeQ~7*h!vm|H3QFk`Z0()%_SWPXD>yKL0yg4f<Sz#yzX-hz&eW)}jO35IU1|Ey
zymm9I|EVnZMz2k7O9?phC&mg%XWWZzNXY0UL|oFYJWXpq4YzuP*!k>JO;6X#zRx^c
z9iDeSX1>K<NLid}A!H7Bv{Mbm*6)v*YA}}t@DB1eHT9A=Zv<%%PD@*dFL`iPCeXS&
zcGr093RLGm1H|wYRU@oyC~|7pblxcfw>gMg^I9y&1Dy*pPwOeT8}G*V5DuB09YxZ`
z+txBa7sRXA-;AU+bm6ynCZo(oS~N`qi)%r4V@?77n5p~kRP~hu=#Q~x_43(vF8y)u
zU#6~m2>KpSCyX==>`vv^Kksmi%AdDUM>I?I1>n~brG9D+l_UZOxR}aLq-h%HAtPpH
z_+22OK{SG0A+ZxqLIfy=ERVGtHmQD00^5`pp^9Ocwf=uRwhNjz{%u(!SVQs0(Sa;Z
zr{~PLv6oy_GFBlZYo<=!_S5i+82^;{@A8kT6HQA~2acwY7CN(3kZ{uHpf*hx+!9Yh
ze}gyjfEK=jxP!xHc^5VJkX?RMUm~gZX%r@w#=BpJ?jT3(6UTPr5e<5a4-89%8(pO#
zJw0cgZ-IQ>66yFn|Bmk3kxTePHSG++coCIuX9OA}O(VLb&#jA9H#A_=(3XW0%SaPz
zbFG$vwiHLvA89MHgZ^W;=L>0Kb;AdG9go)thhq`w(1`O7-f$_n@&eHh#!s{LFz<29
zojz)%p`>aOv&GQrH99@X3LfMq9b0#1M|~=_>dJ$^0w1WAOB-U26}C)yM?@1iJF<Y<
zqt2&41z4x^xLSb08a8+X@~o<*APF6*%SrAUIq;W`eI8Zoui|$BJ*L_{qioUUuPU9s
zE+|wqowK1_PW9JM&nFaRKBx=!zNzOcgSH;Z;E+4&sSzw&H=px%DT<=q?%1eGk6lHB
z#+$)K?q|lNgGGc=t;CUsM4o?ieKpq?rM7yj(XhYp&S1@G06{IEwD9%8Cj&R*<PF9=
z_f<dCL3R4yrI3DZg!%~7Zn|YbSw1W%@b9<12CP!_&|I2|BRGU;;hzYmx*$?q3ZxIx
zTW%Bl%+(Qwlv*Mlr)TyFkF2=fOQk1Y$edD~+NUcVn4M6kn}$(CjiDMNqmrpTC*W)*
zHUY^EI)sO*Lx9bCHJ7&fH@zOF<7ha+p6cY*$8j@@8|Fm5%&oqqOxjSPnw9f!((opH
zBYIxKqtu$*1}aq1O1s&FZ08;5IK`SZ&__n(8Y259N%^_XKLw8GCYBpP-ip8V#~{rk
zmt<FuP)AO#Nqp%kp8^F;*x5nv()G=^brzurqU%MG&LO?jBZ;nnutvR>QO3|c;na#-
zS${Lt2}#n0gr2{(N9j2=8k=%l|H(BKwg<>N3t#0HkukHpZcdpjjG>tHPOwJg*hYcy
zkj{{fTu<QEWrf@!oM$)YvJiTiw%^rGF;?#4rN3%eIB1`;p%*wo^!tQ6hD6BURm<R6
z#2kOAcXDy*Q^>{iU_?x@P{hiY*-1GN*mfjg51)AUhr71|8)Y6Z=kP$c#q2@r&|}au
zzqDW!ETb%@fjWsS_}z9VVp83Qk0LNlG9wz(wSoWCZhRW~XFHST<ZKWygmB$)Vv|pl
zuBR-?HMZIcRY#}d^J7zzA#GzP`egP;RSm+tl~9VtvJuoe;#bk$wG<zMJE`5IN(!+m
zG+!A!j@RMU010!ANN8xj664btlLbTTG!64`&lqZ)uicIeLB^nwU1o~e$@Oi=^%a_J
z)w7pIdK$&kls)7n*o}{*+DkqtBkVPF=cX6XPhDqVJE@2&<#cYTle%|k7+{4QYFSf9
z_6N(#6>twfO^!!yWMh=Q+g|=|PwyP6XTTX%$w#u(4-!Ut{5A?U<HiGXL70T>025R7
z_}oDeb=pY!a9*EW-9caGwOj(PLh!8|1`T6c(hCUBX6g-ptPXZPk1o*qTX-RS_fS!e
zY3t1-T);V}v|%!<rzwFYgtzxX!#Rh;5}P%bgi$Xu+4Ef@@||{Su^U?_+Wtb*cPfre
z)R2WX5anwJ=f3%|t7`wQF-dsE)cG0%m6h?9E-lSTQN3&qR|bsEkMuGhe@9R{O_m4m
zl>Px+w)-ib`z$vZCTk1#Y#tCybF_Be<@)xm^($9>xpY_MmPC|BZ;R6jzIF)Cx@1Kb
z9k2@9g-&-L>th7di5q*Y&XwrEXQ%Y42V6csq#E0GPkf2P?oVgFw22Ad0?K|CE#0A4
zRVxp=d>{^-aJEt)|Eno4J`2wJ)X>YE(;h*95MXvz%)(_3T*4z=H)ci{Q#>4{)Z}YW
z=6RTHW||-A=KUD{DN-aQa-&r<yZC(>?CF${zV;a+wBFU9nYW}*mWsO+3RmHyfk>$1
z|Lut0-17k*8`@6R#Mj=V1Lk_qJrieC%I9q$0#57SFoi@CG%~<8yFrx64|M0TVgo3L
z?>VnMefY<B@9BuUgT?(R8e!LQs~nIM_hmW*Uo{-F8ilW=fn+*Y<cbqT17Qqk>WcEY
zOzY?s;afjvK)c<<OYtDttn%p|b}QDLCg6vbN`FQDoxi+M8x*-(#eU^LOrR=@R5k5J
z!G&U(ODmnnENF^)Pat;L9)0SisiXS&JN*Mb2PN*V&(qp;@AYasM^11WbD%N@Nv-=}
z1;o+>te_bL&Dks>T?FvclsP;VM;douqK&L|a#;UeZZ(FSXe`vZPY;JV&T$~jpN*hY
z<>F-zJBR&mA{D&?m#49}HGG4nmfupQ-_k*sq<7$=uj)c3i0I#BbIy{z!7<^CFNaxR
zllJycA~~tuoFEpnuvl_HS;BB+IE$rIl!}|m?hgxssKd9_J?q8zmgVTIf_NOb)Y-*r
z9a<m4jtI0S!~NnI0z8C+%P~7}_pxp27fjj3dEbh!4rzL4%!N!4q*zFdytBqaT_?`W
zQm2E3L?kEozW5%f<ZT~a-W77L9ovB2TI}8*i4LDjNbq7E0H}o$E*oBK7v>MNw(L%f
zl|h!Eo_@oguNPvApO>?(l9Q4xOsxEdBi=SOKM}<)T-!U{y+I0ISLE!Y;;>6nYo=$G
z#02uGgXmNWUO(S48&?&h3e(QBOA!%?NC5uh1t1*$#(Ui7D1LIu$;}QQh~{hz?XWLO
zo>Je<y27y>7*Ob~Okd1!E#Y*tEvsr8tQeq<TFd)o(5p((CJP!a7?h)B*YOMgL^noK
z;UY7E>mr@MlWWm$lX=v|8Ho`4=4z64Mx{#icIr+X8|bH9m;w%Oxy{gJ22I%FJlHa$
z@TPHtrI^5YR<SfIOmk!uCoeQDVyddC;$d*em3r-DC~89S$YjQb(@}^_v7$C$3>^%~
zjV{`<y;lq|3TI&>ZQ5Mq$@~_(HM9Ba=ObBytUT{2(g60Ny=#0__3)IV^(-jY-9#pW
zULCq!4Cv-#{isep6L`#4VG2n<?ygpR`Pbt%MB}SC+0)%aQS@^Lc69B|myr4wod=Zr
zo!kfJi8~5I+^##u40%T#Ql&kD=?zr-G#;=*o2q~-PqeiB-_q6YOK>mgE~UxEL|b_n
zJj+yhuDqeHXB%WlJ46Fd-Gy(Ils9!3CqBIiTSC~IB72i%lq&Z%`p>A+YGKtC@39gp
zt-Csl1?{K8r9=Hne%jp3RqsLm?C-r=KV8z*#}Ea|*VSgcHtu;j(94q4Fi{Vj`1sGt
zhB?3W&V{8-*}u!p>_co`MpHD6MjmMOL9gc)9-fdu<kQWzciyV&6vAs9S6&IcdF8SD
zSz+)C?=@N&cjiY+WnQc~3WbrY3jK!5cBCMC%P}61`MvB>pb&h&^{6o?@j{B35@U98
zQ9Cm;bLWkVYX8N6N$COxq)g3)cE<SA4^lE2-l6cA;O>p6KX}q5Y^~h`x!e3)w-|T`
zFM<%#ImblVDz>!hFY|PjrLao8&oM;06uM?je?PrSV7Ut)jE_kx3N|b)9qdIbMEd}4
zdfBXWWsR<ObUUjOD?qfs!`CyAvxfVRhmcgg{38;AmmOAHh&M2@^*7n#iNq%5F3B8`
z<sgyrg%;XnLY~KRfM;kfBqYu5&A<@l;B*zHpg?5}^kdEq+ps|ijLzHg3QoGCFP(Zz
z?~fm{J2Y+4?OPxknse!yhTdvjlp68P<3+lHjN4LnSf_#t8#-y#I+P-(1elNd)0#eg
z1GmQxrhD9!8INzI9D>pz$vjI82rR9Ij(L~WGnwSpP0e`&quDQk%$H($->JdHCKA}M
z*evTSG~L%d*{DChUkn~isPEBfvhs>!QM4(FeZp>Vn37^jkF5LA;3`+@%vY)thJ0qj
z|Ft3P{tm-24XK5aNoSianC3WR?gChGS7^=Br#D}QaYu1;x@-15mwg3wj2dj3dmC(e
zKe0N-j(q+`YypArDz7{|&Sb1Sa#^+ft_P&73Eysl&nDGc|Aaln^GOboHVp?i9m7@b
zx99aDETAG&!|^m54F*BsD|IG))k3k=$4}_~%Xo<inc&-pYwffLVW?W>rz$oN+j!#!
z**M$^l^`Z7u!8yoqc$R(ZJU!}_Vep(_uX%7ymm<q-4f@{M_Km?W`AnFj90WZ7*R%&
z=&+X-7Fgfsij2Qyn^`pz%H@gAD#F!IA_^qc!C1~>->KJw_pqO<@M0x`Cu90PR#;};
zl5~!d1Er2f2iaq*Ns~l9IMgP@BH7xSq|h$XsBhnGOX>ICeyHSlU-p;zz289U3Gp>o
z>rXqkpH0;ls!3J5RYp%yb>HI#*>F*^XGA&w+WgXIrNwgrkA;0bom+-MT?8sYqKH#Z
zuM5+`f6BQPX8O-aq7O}M0DvNrV_!lH%{QgDWTY`cIybg!oH|^g%?DY9o<%iG#!9pd
ztfP90e){TU5uh62@3H+3h0+&_7;@kY{)k>D@Y!oNUyJVeLY$#A4<PK_M1riK%S&f^
zkDT)ooMm%Yr<4L>ZeDMWAagOv@nnj@T<oXsbiS`q&Unn(Neb7_Dl~azFMYQ=%op3c
z`68r@h++Kjesv1d=>-DF6@e_2uszQ}n`m!;WD>_!`I)RycVAEI-a9+}xB^v}AQ?p!
z&A~2b#8S3YsWla~ij>ap0I%Hn$=_~J5HeFAd#io?IvL9&&w`2DZ<{m@)3cWRLl!*$
zSNBix%8k0UJu{aQt^)H9=&)R19!YUBG9O&Qsl#pTYV1u_M4p(~tH3M$rAuKH7%Mu)
zqib$+^HSHp?!$YAyeR1P5MumjgfA61#e(B|{A)PkmtyqEwq8;2;|sl1|Ej2(8#TPY
zD>O}3HWrFq>;<G7eOLrrj*b4q%PWOu>)%~HB14i9RgLhTv-vvhIrqR$R2g#7mEWfr
zmZ1xdv;DK}4VnBDDv08AamUe7V@?DQs<&wYfZz7mczPrvHxQ#eqsc_miJzCy2S3`-
z%NPsi@f7_T=*S*dB~}d{(BQ~V*rWP2!V6SVg2pv5RdgsYV0_@T(W(6U9YqE(D}MHN
z3Cy=QmuPJ48|xI4b3NOcJ(+Po&h|(fVZ#CP(WBfvzi<np`!)sjKCQS<*%f3s9R~#E
zoR~pR*EKb$J$A}lnBI$Jr3khy&l^Es8G9bn&mJTnPWE{(?FuxY%%rxZ_70b+ddqk0
zVX>KJE_;OaKO-|1K2q7ln0eDJe2Nqz10>$je3m0hX;Iz#-jc*WDFe>g^q#9>^;u6C
zPriuSis&n@nRL7J$5dm>y;x<9Xc)Lv91V`QiPiX{R`LWoNBbf9UFv5R8Vjes_J_QH
z!MdFY1LWC>P2eqN`VlQjq;GggA=r<THTO?dxW^kKD7Y;8e{v|mJMi&idJ(_1E^yG*
z@S*wmu|M7wKz1B<bKOOll%Lt-_mC3o{t^`LptghGb@DL%Diz>CHU6)c)GH=rS6o4f
zCa<n$V0@mN)$q=ngh8wqHELhRguUwsm@_iUT_6DP`|t?ycokfyFy6{K4qgL(16>Fy
zx;TMd<7hGogE=h#owQ7b0-78{qmJ<+sK^TE$G~2JmS>}mP+%h2e{<pG-zQnBr;KwY
zXDGAH8cgR%9@n&|QHcS;5mRlEB<O_SoA3LZ$(C1@g=w1$DOe(H%L@~b(H%wg$mk~E
zGa-mJe06h2Xvil#?D;CqByuC|AyNkUuU>C4;eXz?32%F&iJL^7j@;n4rPER43kG1D
zOV1LBZ`AG42CITMW<=!pgrZcAqJ)dciG+T3K>%%0+Oym~c2Lm^3kQuaS<H^?=q~``
zMfNM;jz@elpL<PJ`&a)JghI!3`0cclO?eWLWgnMRQkQPT9F<4ZwhyU8$s_o~d#Z<c
zY?8mGf%zNSw%V-^B1hiU<tL@J26d`s7CihOL?62g-1V45@L>Y$>})5${l@(;yBLwi
zJ$8Ix;ZvoI3MY6g+BQewSzz=H!HP!6E$Y1F9@gd-r71Z9)B82DDV*Mqao3ny!qM6`
zu(h3ZC_J**g<@Dlav24w)GDT2!?aUBrhEvU_Za~{=>2Ot(^Y<gzE2V=3YPkbXFhP!
zpGo9V466{9sG`dLSxJ;+MNp`EV!*@kO-A0#<wi8V=0CpJ6X3go&b5xTp3xZDhB2Jz
zufA>>mrv&h;UjC1p3TXnMdx)3OIKvd0)cbx320OBY}f8H?DiKfV&(1Zuc}%bM?Md4
z6X%on1;Uqco5z6+3EqntZtH_%=ZI&q3GpCN*K*!c4*p?B0<bL~EP4SQvd3I%UX0-|
zZf<qOu9L1^>tP40JY_p`@{iR2YaR8$q)#u3^*FXMP8d-Ps!HNY)Z3S6g&lG^bo3*-
z`aV89waRKY!+L(!`xVU?!ktj|78R<g14=!(N>R&MOk93S;PmHnh|%y55Z&&mnco}k
z2(vb&XS0ObmiC?#Glj<Pj<G0*%~=$kP*jP?bzmCtU%?ux`HXc}LX#^jy4bM5)&f-z
z?%KYC{NRbok=<BaP4wLk$h>z|7Cz10x!5&y!II#8sPrqZ$D+Qmj*^`AQFiDj7N!yX
z#gqt82&rdlLk>ih*0@KZbw05J_U*=2w9N&5P&Q&3<Lq-Z@qY3KHpk(2baWGRp@Lnq
zGn%5n9ti>yRyt0V$vmMIGi3dj*&!`~=FX96$?-9U9+wIR+QB;%aQCu_#Q>gi4JDH{
zsL@IZQ0>D1)&5>KD01je5-<l6pWd!}@Xs!$K~aY=OhI|2w`-F#Ji^KvQs=tE!uLnn
zSKR2FHrz4#k%k_A1umc+85?74y*fZN5#5j<p*f>bJN+;HdC$yGTcpdMd!QIoC<a6?
z);<Y(Y7ZhY)ZXx?c@BZKwOwVEdq&6(J4r*PN#!|{`(*AhuwS2sp2V6k+|t-4Jc6*q
zhM<?qP?AhOLGX;{6QY(3XIe$^MRyAN_Sp{s+-6(ZN7lfvZRcM%EO_K13FILRKl_Q;
z-k*7eE$`UWN~0<T4cU3Mp`oS0&90@{`l(Srkc$Yip$$2|zanH*wE}ixgQ<Lq%6^k-
z(P-#-H<$Ue%i*g%tl4sQWCTsm=-~)jf%v=`dTvT&cy5=3FA5q#BW4_yjLzAWtm$w`
zo0u#eZg#*!9KszvJqu|oH=y;>{N!Dqn7I(;Kh;MjUo$5UW6Xt21!Sx^89IVjY{@wb
znA|gBP&k|5&BE<Abn*n21v*VGf04N__$7wH3PH8$IX3eJS39`N#<|zb%?CUxo`HpP
zo&r4Q^dDvGPIYQVPGTM*gkmK|Q0{C!JWL2h9A309`pIRv?~)$v@|KahsdVH6{Ag%s
ztxn>=7;!@c_ijUChA-Gj!r%kmkLE1l(`m*Q`!Dyc?bgR>p@-7RyP`_t4FDA7O7NrE
zuk~#@$pzH%Q(0m-p_H3JC{BU{`~EuJ>SsJo!hf?)GN!*};(2r}HWOya(~T{hFadQ*
zX-#2;bN4@M@>9R#Q%!IjrZ${>`#pS^0C4_el*1hJmtEH+5i8T@R=#l<C*oDShVN7d
z$0okWh3{iG)1H?A0@EF;=);0Kn^%Cr@kWL1VRO<fnqh;)e&1SquaK55bsQ$nzjv?v
zQGk`aDM3`<a(X_LXbJpfI}oH`XY`GQ{M`XRr`7}=kV?n=w-#$kRNon|OHlqSd4~DU
zbcl|AgWB~M5$~A#snW1Vt5691o6SNH24uOFDbfE0;2Y@tV@8E#!)1Ja=3}9u*O_e1
z{hZR$hgCQFcxjqP`STHH18%x=A9`BH;#?NJNB_Gu%+x$t0U5S51<=kRYekKF;Mfs!
zMY3_FbBwJQU-~AK6vGb`(O*4?|Lm{ub$mp((WkQ`#yLU%1ImS*sslX4hAD~w0k*m`
zU|>9^3tfoVFtkd#@*ZDenmy?CUd7k6okTS$@o5YEP99mN&F8V{n(;VSvtMXyJF4EP
zDG()m;d?I$sA)|zdsOI>aBV|2JM!SYhy0v<1odc7p#c%x9zuz;^TLC$x|e%964EjU
zbkXUbY6*?KGj6kBfEcqzoO8v%TZ-g;ur5^tVNi0K;J5rnGB2~9H}1$D!yvuw{m0Q?
z!~eU-BbxnHWM1lq;(_iPx}$;vezb?ge9_Adr}n<!Kosvc(VCd6r-#!l2^m3IehuF|
zGPkCBjQ@fT{DevR!g}oM6%&ru9W&D-HiJ>{L~%;j5M6Gkd1zOu<vJ6*gEB;fG8rE*
zyI6)2U1LDd^$Khg!U3W_^i#v0FkH{^4z=4({O8M7qPeT*q-}r7u4O9~_8ENOeLPEF
zqbZ(#dFj6<Y1rH`R!x@wn^y}I?TS|%4OG{|%$l=~>7cfjl}>-#oaJJ+oo{`_%WQmd
zwlQnBPjxD}<$evqA=?K``uAcYj|Ye+4nEbTCeqCBejI~@M(m<Z_f*y~%0hgO!AZL0
z5K|hdsbgHom8aRm-*%+j(Ab{#07%JgDkTSzF+4uZQ`(9Li{5uid=O78J7NFpE(ud1
zoh$3tf4<F4??#BB_E>Y8Ep!cxZ-XDnj+bW@*Ua2g%1t%4%0VGlC(F19R8`#Q`vd<y
z<acMLj8@bj@w(Mps2h#87Z&8n{+D9>fDs79y}c>sdArps?aA$R<y*CQa%dL7csMXG
zCRhVIfp<>3h~={nHudaH4@BJA`{AORAKl}BjB^zk6LW*X9XmRxU~~72%T$o2h~mLm
zH}-+E(&y`Ak?V=)&3?wIr*V$MD3BLn$qHzdbSqlggYfsGALo_N_V1X7guw_8u{NnP
zIb&fa7`$a|z4SFu6K(hvdg?XDz*cR4gva%a12OEhbn-t3+nbIrI`^lIM--P$Ihi{V
zbb;=6zczeNt;-*mY)o%jHK!=Ut>;e-?QG)~FBS_H0FX@v|A@sGsoq;s-u&%(>`4S6
zAcsav!8>T{^S!UteGZMcDyk-+L|aAk>TXZW(KLMYL~OF(?@znXT~1Ew3Zq7JZTmXt
zmTU>Td}D<3I|`~p2t;`JZlxlg5AZYH)~&~UFjDv|1JznZ4p#@q_V#@5@6XRO8#zK7
zGF@!rWR1L+?%*npuZoWMZM?4rYv6cyPxq_#jK^nWGc7CeG{?<Qo8?32CepIu`*gr1
zd+$yg4x${i6z<)lUd5CVGVZiNBl@_AcsOLtxY4<|m=KFU75%=`vMnHXMqlmfDrLyW
za0|)6cckxGRze-T+HyKzLCW@>7kOZC!Y#*UVE{#iOG@u)`0)6lMGLBRfzMh$V<y+J
zvn{lZ4Ft_NZ$9?UC1t#W7VW-`w$T-vfoCu!E|5YtAJI}plI7~iXZxsN@c4FyO8wOB
zW(%y^=iZiwEyK9{3=dg+YzSU`M^;wN-7LNDIT-#?*?*`ok`kQoug=4EvVC;P?&a*F
z>9N6FFSv;jwswV;y1>Y{ch}Z49|;;x#CnvE^1To8^{{MZ_o4X_ptk5k8&p0|YH;t{
z^nv|RAi$Y3q)=1vtZboRff%xh)-EOb&xqc&Ef7#}v4REr<}5N;`+QU9dy}7-;dNGg
zg$f;p7fLS#4I>Ra9$S5<>&Fl;_JP%!G)^c{BnANQ9pvU$n-t2@bV7>;fNzQKUDe&?
zL2`buo8OKgyf-|b*IYCI_dA98KD4dmefF_vSgR~^gvxHCV@@~Rp`N0ZRK<H-SM7H7
zr~}~ob?UW8bO5~HsPlzigjaBT;H!%dKF{rea+HbPr{T^iqN(QlVrQO+$7l;XhS|k`
z<VxqLUgI^&r*Ch2m7YrBO{ouoHHQfEIVA>@LoI~8E^3C_8$n@(=zRE)o3Cw1CELlC
zHYred_i44W_Oouz(_Q8b@~yAeqZILK9nq@WsQb8Rx7saz)Pts4w8DcoSl3q+;i*%f
z?=_3s(xW8j|I(3IuYkwmac^mUqogn)j_{at8FmvJBE^{P=I8#JiPi%FAePvNr#7@8
zogthyaFow&IW6)y^xc+wN=VWU-s~cs5xxCVQ?~9K$kC>he!wVJ!C*;xxVp2D>zwcH
zMU~-0FNSX!KcC&zaEtG+^XlINiS5EQXYqD48P6drsN<f}L)M}^B`@se#c3386AN;c
z714ltB%drn8JG%)k*@1B4V36DHth0rfyx!RhMs5r<@1S#K6;Pv+o#3lUhE(#r;`a~
z-%pLtPptwImWmHH^vH6wP20FIqfpaBU7>-kJ<4QMm@jwk*W1z}(-#X;<IBEkx#gtj
z3K4vE4?V+oxj1}AHm*F1L8$)ettDWkos#U+)7%aqw4z(V3TFb_QvBOo1gyBn@C7lx
zJ)<^cPqQZ~U(%4E9&l<g<zwgpIvn8DYkB2+d*|wNCWK}vHLSTD<c@oMtdr(lFci(0
z`B3D&70>akR17_0Op|{uGGdoj;d@`P4%#l_Gk5brz4oWFIF=gWI_}xN7bv+-SA3l*
zU0#uu`NtRyVN$;|MCH;mgxh<KvE?Z}^I;@bxd<a36<VUJ*g+zB2WU}ZPlhyOP4}eV
zp59vPN>AcCup_$fbyDz^Z6`e)kYcZ4@M(rU)O0zF1#D?9qV;qEEA`Jxe95DI-zBFT
z-j&)tFOFmBPc8obwUId(tL!sH^e?BE=2=LZXPbj!v-Jy5G&^NuQ3mvhlwhMXLM&W`
zorY(Y(ll-`h!|oUvdEObD)F(>rGq{Skn!qCESj_RLU-lq^wY1lQU|`hZx6<pY2(QC
z5JsOd(Z>tT%9n0kr;IAM$^^H+E8ZxnP3FGvdY2{o^XZTOa7%axN)rkvRCR^HRU|*<
zF#qPQW$UT#uQI?xx&|C*>RdeeK0h^zwPLIWbr=rdtL{G1Vx(caHIYh7R{0!Mv_4{}
zoVUJuN(z1q=4Dfds&lKSt91ulS1tSWdji;(U!)4rI?sUJo>1b%scYHwe=?8nIi={p
z3U3L*pyEW=T(gFJv%YtYE4LLi37sK~Q=*qdM;fnE7SQak(3G`FMEf-lS)wxUR5liU
zSM9}U2lB%swk6l!ogiPn{`^<z9TDX*S5o5@j<|df@Ut4%Ke=j%+<MvH#4*l9zUI&}
zsTF_MV^kl~nHMR1SditM%wbRWN5`7`5KUqhvI?m#6NT_#+)`Dk417&aBo^I+koEdX
zs@Q43u_hOKJY#0p;=orZ;Dr*j{-KMICO&(K*_P&UCvm%!A+zHI%nxl1cGm;ZpxbCK
z9Q~$a`2J-lgRlXOpt%EY-HIjwP-463(QZ3bEw^vwYWA#~%mOexT)DX)=v}*G0enVa
z!2=b$K@nZo&JW8NfA)jUQ@%pu5nX<oeD8}cC{f;`$ClSZQrU^b%NqG&L>IRoty)h~
z5njd-n3;#xV~H70F^$B5?KG-wg<{8y5m+>f@jvG>Z@N}ehbz-R7as;mqzPUS8d*p}
zL504KxT{~t^!yoDTYa68Z8cAi%u$v&{M*k>BfT%xo+7+O5EaLX&+audo>WmaD>I%o
z+g~q*mk(W0ZZM?aO4xiWK<#;hBFg=-b+FZil=@swtoFK@6hyo$Q`R}rlcbgqY0B=I
zlbchz^0Z7dN9h~Pk%Qb<_FAG8Z7R78eI7aV|Jis`<h>rkA-&AMQ;RV!R3}syLw3Iz
zYxTbcdyTu4CKOTamGtekj|yt#;C!K_<FQNPR%+M)rCx&TpSs+fpk^`tn&G6bHwkpx
f<^TV^UwnGr<(Ik;=y-BOLw#f=l_bi(8~y%2@J)$0

diff --git a/apps/desktop/src-tauri/icons/Square30x30Logo.png b/apps/desktop/src-tauri/icons/Square30x30Logo.png
index 8778d57072e4c303d652ad6fa47afd998edae0b9..23cc203fa6af53ca2813b8009a19a01a38340e70 100644
GIT binary patch
delta 2027
zcmV<H2Nd}73-}L^BYy|KNkl<Zc%1E3YitzP75?s>+1c5b*Zc5e*EW7(Fqnr87(*aU
zp%4NMi6JF~G?X?p32O7CsZ>xSs#Yy(Q$o|wk~S?;2_<qwNTL)%f!bAhg<|ut<wwC7
zu#LfsvwrM)cV>3x-fGvT*p7{o{;Sj@jjql&bI*6qz2|%b{C{s485N~u0MGPzr1i^|
zElOaN{`WL=FyKhil39D7J#~ij?HgYxANu|F&Fj|n->Twf$uzKI^gQowWN;UyWSGBb
zTE(UVD(Bzq<_X*PyPYq`@rq65KjHik=lmbMWAD@4ZE~51?)ySk>@RQ+^`~WR{n{rA
z=g;>=y0iC2qkrGOtn|jofAjJ)tK;uKcx~CH$VY299Xy>cL`eoSES-?;;IWf@^W)2x
z#{E3U+Nqn*aQ>L0hKfE?)cgLd#U{V4sz2ybL%g+@KRS7FzCa1SQMPEo=i#9v0nT}1
zUHg^7)#y8ca92yWOtVZ&f4aN2(jJS{9^sNBL};v+!++Bbynh_xv+0(|@4s`fxlk;2
z?mm6A%3*PkRF_v6TF6Knh7v*(4`X`5pOcpE|D^L~#}iL7BQ%H5jy8a2X^EHSPr=Ml
z0$JcRutXA9mI2u-7{302K&~CxQkUXzPO;9}NaEei7`r?1Xf`WzVQyaGo|eYTZAXNV
zyTta&cz>^<s+zfzP?t@>wS9`H27+4N!<o|Rq%d2%JxR!PiK0_-Sn4~wLy55>1k5l-
zBaSZ|-sBu<YEJo#Lf_(teD<=(s9?@D3_H5If_S6KLww#<lV@&uw?1?|(kFL`vNM}$
zeP?BR?coJk9sPfAFZDk@FDEq>4S`ej&9`cM)PGoX%!0&$g@eLQH?Fy)dSnqD*MVRN
z=+|N(RyC}PZu^(=_V2u8?D=hcMD0C<nj-)=QIyUHy6W0P<mR_$FD-fNcy1Q3Mg(kj
z1s0p82<DbUZ&&Vl?af2mj>Yf$b`K?p;{fAf_TiyFzV*n0XP)}BI~wc__gcYh)SGIP
zlYj2ztmoG94QjG`g_sUVija^9VVo!zc{HebJF4o;OG=DMoSkjb!bTsVK9?k?dt|vV
zuedzYbwviYEhV7fFzyf!CV|seHayK?Et-+D>YhNbN9j>p>A7YRr4uKx=oF@hYE#nk
z3k@x32dD_RrZ5-~^@i&iCHlf%C14W8)_;HXS*=NKbcYSCFG|IV;|FVxUR;?NNygbI
zM@>X9uA{TR;<@pYAFW9*F!U?!b>h`l0Vm#YA$>zOb@?Z1<5L-JE{H1{XZe1P?f^&s
zoJ^&|>JX1?Jpre<ACn3w%I|$p@~8Ol>fz<nZ%+&#LQIB&{^SL|hwrKEh%u(Sl7Be!
zrxNN*1MD<}K05<1CCDi=qqWYA{xFa^H-@XN4DF2srg{}~^Lvm6f@>#}AXv;=VXDP?
zw(ZFFRlm4@<IpA^HcobPj#NJ9k{X}6m=;kaQKFJWsa2vZ*(D&;%`h#8(2Q{*RGhzr
zyyAT17$O?ZQ_Ndwf-RY%rBh(-?SF)x*abMK!Q56|TV8CjzjNVN>$ZIO(r$qWFt{<C
zc;19vKb~FmtyhA5fTnA@VZ;(AVU;K>A|QaX+-!;N|I02U=g&i^qZ&(Rmg8Kr4cRkd
zm@tnZc!M*C8)!di&}f?spO=d1RzTMctlw*)jK}zAB=hv8=YLdr`sY9F?SHupfycyT
zi_Gk@8H}0GuW&e>60K>f!P$-jNJ*K9x<CVtHXMXMowJ+GF=pa`#YP~A6gHoTtARGL
zvf(s-UA2ANcPnQ32S~}-$|b-m6uMv4iAdQvUx}XPDWX2F6)^_veD48dW<0>=&VG@e
zs(zDocK(&F`SSaS^mA6USbw8jBrwG!G&MD7@4frF^`RN^A9hvmc<L?!a=Um25N7yO
z=Hf>9B0Y9tA0+V|WM@o3SLgyvHY?Ix3!vzLS;(Y<*^ZCTd=Hw&sU`P0Ow7(jSmlgT
z5swrv!@}t;d{;Ff5)*VD8;f}G__;tmsUECYzZ%U=OHgyR5iQs1VSkbek>`03W=jT*
z83q_k%$qcyhLk2mSP&Ws;qdVT=)BQJlV}R=%b1F~rt1mKj8FSrDjq`57&>kQ5!b~h
z)|H{IZW^jj24G8;K&b@I3=kqfGWl7$tpIT8^w{5yf$I|7j&Y1iGP@CB=<AmI$GA~^
z_J0hG8wQ0pC5eT4qkp(^B><b9#nHs{6T-ma>2Z=sf*E?;V@}&7q<IRNB-x-Dj0H6T
zT~R|B?S4lPa}W@4#CY@7bLSgtD9y@ARZ>$dx~3Tkapw$-(74_XTuWSZ5^~E4HMq{A
zn!+?gS2Tla2K6DJwlv<3JkmxW1Ii*03-QapJmmJyy?^@5aeq*CHGK7QAGO+SqHJ+e
z$u8h><1t344#L3*zzC5THOY2?SiyA-YPhATzVpdREYVctP7jSvJlq^o**K5wrK29t
z%mRlq8Jt8Fo16sMX`)TFRk|P=j6<*!E+s<6VgZE1HCuz>k6(`%jh%OkO~!`rWSDH3
zpPS)+vBK$`R%Gf;%ZJ6wP<yfxghrriy-?JqKlMZ_e-=`!FY@?EjuGc`S4`qUIb;;9
z;-s`R_o^2Jn)cO5<YINd^3NTi*trXgEB|4O|8wIuJOTXQ@Ncsubm&tr*J%I%002ov
JPDHLkV1gW3{r>;}

delta 1505
zcmV<71s?kN5Aq9;BYy?CNkl<Zc-p0xYlu}<6vuyS?S1b&Eyp1r(?cUi(xy;J4XKa}
zLM$w6>;d(uB8eg@3W6}BmlgFPBBK`(R3>FF(6EPTYL1drT3u1nD6^bN9cyZwIcN3Z
zoO|v*_g?8k2QKH{z4zV!y<Y$I-$LaPz($XrH753M4(K!xRDTul$vaNp;!x6Y6x1U~
zWgQ++ycRIitzc_+?|!Dgj8O&?SR$}AZts|RtDyIZ_zn?|h)X_Hy>s8SW<EJs`rQEh
zK0%)NVb`)}VTr<06X<rZG8)w}^985H8!-bU7MvxUX|h2Lkk97A15rJOifU24ZzUQY
zc=7wvqc?T)mVXm~_OUZ=QQ!ES#nF(6dJ!*z<}Ik+l=KjR2SAf`sl`+d9)m{3!pK4#
z4J_XA{nF*qGJ4jSM#oN7-v)w+*U*v>R71-{;NT#Tt{1I%C7Fv=8!)p&;@nx<=wz;H
zq5c1XY62=Ds3Y{6h*LAeyQX%D-CQrYsUqGmv)Y(x0)I*wRBJ%X<2m=1*Jc0Fawts1
zn_yEt;vx|zU^z?6@u7ONVAI4Cnyw9ET1l+Rc$OnxMB>P+IuUW0#Wn5?Guf$U{`}d@
zn>UlLt_ifYwQ_85h+hvJX2bd)c;od={Qld~e7O<0pWsmH#FL#+j+4F0h}Kq?FTax+
zGbRx}#ebrwb3_xJo#VLrn%UfY_nU0|VowlvmzAQ5!;rML71f|l!$b;e^RBxV)qqw%
zEiDZ^`Sf*+9otqH6iIR=37?|ibH!hqy^c#RIX4Hg;?0dLxO5p;EqsbkKiQd$H#Qcy
zeBt!0_CsUBSgSa^YI%_3W^Z$ILk{?rm)Eg>|9=rglqL7S!!JJ{1_VLbxA#yAtSO&|
z)+er3JZ{9u$rq~@&c`qjul2Zj`t*s6A3r(+o;j-%i(%-Paq!>(n>YQ)md$(l^2>ev
zxaW`5QlD8EWVtzQRI_-aS2WE&sY?!^Jo50{oN-16C!ahDfJu|aasQHq01OTevvbFO
zzJJ)ToA*|IOaGCf3W-p~;}%$a!pN?RRg0;`PU~@R|ItC-U$u=R{r}M1(nx!IE6ynZ
z-YerePGr`3r*qkYbJ)J^7kYdDuI2OO0ExxK8|Ad|iyl+oaIeL2B;s7iNLs_a$y~8e
zWa7lJoPExzEVyDCQ_dQfg<)6eAU9mQqJJJJAW^}e;D)2YWj<-*mB8mf#W7+07`hkD
zPU%zV>-~$@UfoQo^gE?eAD@1_o3-n1&wx88orL!V;z;tnI_GM|OA2TrHK2;)&p(H_
z{)P)uWs%lwa}#S;e~0%4uDEh)F5{0J{+l==10~1llI*V@4~fMpQkQ!V{V~A1tAD;?
z;gywIzIpM5+`Rb0x<vB9d!@SKKt(Z2awbAiRn3z}AX~}|^!Q_|+3@);{_FYpqdmOz
z{PtSV%#%K8Iw-!<3<z3VzMmc&jJe~s70kJ4GV|tl(RFqQZEei}^z{z#&DRH5{oyXQ
z^&ALPOPZKzqX=b@;_-^NvM8$u8h={;`MN!<U$?imkyK}|l&#c&L^SJAs5393g=8`H
zo49C|(96?c*rTaxhf<|j$VB2`!Gqg^frv`oCY~dDUtuJvNS=BsvqmN*-V`h{Q@2H(
zYgz;Ln@SN8jWcU=qM*#Zfj8=C?c-{*1T^;AOl-rwv2R|ZrP32e!7cT^Re!-nBARJ0
zt?H-M+<Uz2t@Z|qL9ur&D)@UgZ94y`gKpQ?_hL``sPj%K7Dmo6Lz0CWi#QXUA!>><
z#94Z<<P-iDXW$YsCu+%sKuyHqv`LHpL_Icq`1$o)=RVZkoe28u3Nz)*2X1v*yic^y
zp%f~XNnXm-Tv<}D<YSxYYFe`h5x-9?dhoNJIWKp2n_Ib3BB_+W35a!dJv>IOVGb}2
z2rglsB>jBqRu3A~s%q7o;ItVL-8x`Dt?lW#zCXP;#Q^^Tco2n!n<JN000000NkvXX
Hu0mjffjs?K

diff --git a/apps/desktop/src-tauri/icons/Square310x310Logo.png b/apps/desktop/src-tauri/icons/Square310x310Logo.png
index 331c0028a5408078bbb0ce4805a9c8a966e5a83b..92efd64036411abb7eaada8f511ca970516a6f5c 100644
GIT binary patch
literal 90992
zcmcF}^K)g*_jPPdFyX{DCKKDXZ6`OjCz{x{ZR^I)jcsFM`#aC){TtpNPF2^bI;Xl<
zuiks@-77*-UIG~b4*?7e3|UH2R2d8m{MUaE9L&Er=UqMJVBlb2Qldht9$A08VOPkP
z)hOS$bn5q0?+&P~#0#164lSW4q@3gppOI}0Qz_^L1gwm1AQ0&hJL~=?u#9nnwbVy9
znnBYYGbf0%;mPH^IGt$f?QVT>akxB<3eDb*Ub0y~EN?Dusx7KHWMAhzf$^PdfxMO)
za~`TJ{(lbjt<EPNJTZ!!KVFDO9@wg$$b7J?T9>_-8dH7HStKR1ez{z>JiHfxZc+%)
z<sYx@Z<1Syv^>p+d$t-irYF^k|IKbSk_AyaIK;@Gt@HkJdD~-nZTsc^Z799euIrxu
zv!fQPpI|<3>5fES>Kt4L<n_q9Qen8BY!mvi_vUAAcyliUdffh~RGA38p2k64uBiuG
z`S)ut;J?LpLy<YqU;l_QwfWpkKjs`&SQw!9&C0Ex*jK^7D<B?bY>;{Uo7_lP_YWne
zxhm`>?0eW?`_l@!b<N4{6uP+&L*FO|{=(SQ!IR{u2PfOwriXxP3qJ4oVObY0^e8#G
zd#uo9`}l7SlyIX2R5z_TdV`A0w;4UgeM%Eg{j(aA|8Ewenb%ZI={Ro8JtZikm>UnA
z7(3@6nh}wq{3+khYe5I9-i9T}mK<N$C?5>&rWKBjlb0)KP)HX$3B@f}ZnVkY?!@y9
zxG)s~=T}a51i^mh78W8@ltbpds_vc6?w)Oj|Gw_FE$N#qSqPCz%k?QdW+**hL~?TL
z)<_<K4OQwepNKIZ6pkIZ2s_|sCHaOT$={x1!u-R#^{SJPah=ZclJ3Qf?@gb53EEt+
zj|f$mzkbOgm`C^C?zf9D&3ve+nfP__h{+^>bAs&h+)wr^zXyutVy(@okOvLfw*1bU
z4fDaBu*oTKG;4)6`vJaV1cC04lFxIA36b`~J2ts#&fg1f<rdpq|81cDcSSP%>8lM*
z;8E_~&<>CD<qY5iTM=oT8U~t~JbVv&0q-un0H#Ri&9v}(@{2cz*Ui1SKC3$eY`Wj0
z{-CkhX;Z<TTcp6>q@QgUasylxX_~E$eAhxRCw3_c6_u#czH5it-2TPB_U$S1zx`tR
zHbXAm9(^d}zFd3Q7%d>6svoRovc6Y-)1163EHJ*YoA`lVDNY`W$WFdWkHSdwc;&q}
zs6*s$I-#RMVIlC7?RiGw(t#J?PG&u>0S#0Nl9RT*)M@l0fYiwKGpp|N9l`R0kAfa|
zHsck_Xs51q-TaaI7zvrXeoZ&D7u>pJ&9K^zdH<KkjL+~N*_nN<oksdBcQb6HS7SgZ
zAvXQ<zjT%GfAB|(I4$3yNgD`yq01s%nxPY-vgp&B?3b{&oiQZNMvP0p7Ax?%PFLqL
zZnSp*UZ+Mv2|rO|2|6861J`Jf?a{A!V;Z}D^l~>-_JvMRq_U1^)#RRZ1Qh8OLf!cS
z(%VwEI59V0UdnAiI2(R_-OX=TEx?t=tE`7VuzcR%!lHg3C%>qE^7U?E=RPG*VWhTU
zXFrie_XXM+HBx+-)9l}<k7XVQYcL+XuZY7U=0L)rHZTckTMHMdxm#l)Zhslb$NE1w
zxGynsI!~$bWNPre9LZh1zvwcmek3QwaxX^VH(bQT%bhPrE)sFRxsu+7@@l|91Bt*)
z2@O3Zhk*nU^saTgKGUETt#FQ}>5sSgK>k$bi$(39p3N)e?g#gOF$Hv?d|J2DueTp|
zg&U57E$lo+%qE68{&>wloLeE;?iwyTk!whjAG5Wkf=!*{5O)0DPgf$U(fOVE1oXwm
zg=+Ac<hUY0@;@y+7IS!xP)ojOe)!t|VRH36@6>aknDC(r!2v;5;E{Ak(mT_8FksU<
z>hks=9Ed$}2)+diGfo8q=1g*kuqX#~qVb<lz}_cG`ju<YaZsAXVX@lH_ZG8K?!0jS
zcM;rrD~@NccOOHH>mf&P-9L|&-^Wk0x)lr+;LeS<j8IfbzDGa|6BxJ%Jk<$&ciS0j
z4B+z(9xVU|EJNS%UU!B4Gy#Zgci(U@B5XhSPuKpXul~Ft!ttL-RY#V^gxipZzAEwl
zQS+mB&w{c$KC;%!pP)TtGPwuV;{%Kiq6&<-NSrRfY=<$fgv7wx53T2u>J`7Ta{cpo
zwUFl*^^70Zyq>)4`Nd)mpMxUeM}*;^=N<OA&x6{rowoypfhLx?Bb5HFhX+gW1`UZW
z%x@%H#eT$qEXac&p}dK3IzYwX-S;8P^UVRYfjdEcFfo(^2vaSDS~O$(C*k{-+!v>t
z^nDpN1KUmK*^e+nE<rRwq_(Tja(#tF4DbEn$ZZ$>u5-3!f8y%wr|Fd3cCP8Sx4^yC
zxM_1{F6c31$#!gdZ<siK;>fruEzSruqK{^+jhotuWS%Tg?$gR-Vpz_{3!k@V6|60v
zw|-s<Vo4Com0j!ip=ao02Y-X9DY@r(%RahxIHu#QT)J;cmzHt)%wxOI5K>U18NX2@
z2uyHjAao!ip4%d`?_8r&9?9^n1Cn|3G@%G!wK9N+J_|97!v>$}3L$J^&|k~L*_}Nd
z$1!gPRwy{0DlG%VsqT*Zq5q|n<i^k2y;gSX)DO+GQhl(}14peD2&huXG^oUVFd341
zA~e`QTf&`v!S9e$w2Ih!CSNZ&z56Ae?*6B{?i)P5S5&mgB~9C6V9UX6srLUxhr8<q
z@ouH73xkXOO2%!^;Ws>c&ePU8Nlr7=7a3gC=|oGg@DZF}Rj}etzy_!zi{kJU3Ia(?
z91$E=-ChLVWhir0PR?4EFyn0&Q%DHgJjr750IoRP;C-%e4fVNBzukGx`)lQA4#d_h
z&-K7Jca__mfFm9&+Aj)rjcD78QOV1*zKPE_^ZLV5Mt=wO&K<sbCSL5S9l*f|@qnEn
zPRJl;05~(P@8|#+3izs#U<)uyEzSzjQWbdS_}VVO8^!eHOrZ;Z#Q&uE4piXvx<4(<
zPE2TC{mGZ+?fAbWmnkCB?+*KHdR^mxVPdo8GTlN{aRVT=EoR{K#BP_tb;6bu1;fKY
zI<`IFqykef0{XJk94SbKV*<$IN-gKja2VM>gE7z}u|ktg2-fjNz9pH*A$tq9gAKEf
zsgcvP9Si@;+?zG{DqHbhw|z!Uegl2=tGI8L(k3z$S`^9$Sp?#)TDEWVlwL)hw@h64
zw>wsFI!?hhtc5NE3;?l>ydfLGf^E3yCWbh{gXGk!qpE!-gvytYgGR)ep{8QY?myz1
zi7Q8TiV*k8GYg(4{Aa0iIOF!vcy4tRhC9D*1uw4St+Rc$FCXShtxykgdjCs7+k16!
z*IBH&NZWU)A1l{ejUXTQ0YvqeDRKx@K1@b)IHq_@Zb9BLz?8UQ7$P}(n*#IAj7w-+
z!KrqQq7_FH0sOAB-zW1x^an5yE03R{zT6eZ$P?bU3GP5fP@IJ!7?ULJJeXo)Z*2QR
zqW;UKao0e8+jsZ)amy7nk?idK%Yc!nBW+v(#SY})4bpD8OjSocES>IP#lY@ih;XXZ
z6*wgEm<_%U3p8ZF!T+5^R&)a{J`~(S5w`+6Y7t-ygT{WV1MZF>3kY9B;%$v_p^<X;
z&kr5pXBr6hCL^$8+<1~b2W}I|p!yq8X7G1yRFQX!+=u9(u6RAlp}<QuA^pPYd8(B$
z-h2bCJzh#{>So3!q*R!PVuKG&P-th7WE;2HV*qksMRA!SY53d8>v>Vbk@Avoz;$Aj
zzJbH}UNeKPTfT)>_Y8hgz#7vGy&f=oSV809f)N;~eW#Gdgs%)wYow?@e)=Tc{Bme~
ziB-*Md)@DJ_{>0F)%V%cbFkq*HgYwZdWI`uB#KwLGRP(B@w+R5Xwe(5|EQ=^*T;TK
zU}NkD<0bD|<NPh7kEbRq0nUXKmMm9V^{ZRl*>D9h+$7EzUJ^e*7K|U_NKU8-iMKj{
z2g?+3;-=m^rT(~uzV|r(I|_mI-m??0j>w11U0-~!uhU_^&Y9za4Xba?f9&Tw2gCt3
z2uhr;J`7%5E<ibr7Z=IOo-&#WCeuFHFO9f=G~k<bi8J>+F2r|qi7d?s2tk9#WILBu
z@IM1pCC9r4l65_8^Gzy>_@7k;M%Lc~SyMSX_MBSLO}gq0!t=i~b3)NXpo-tauRBin
zJqLNbK7G>i-4;uKnoRLIe4KlKU8ta7VU8Yq1@4&hHP46rlFPx+f2T4l{Ti-kF+4|!
zX=FN@eQn%Wz(@2slFs2|^w@!vhrbpFUxLj;8Xg8mO2~zs#vPOzr39l2!IS{^1dDSP
z?0_(JC9VwmMlp!{`@lC&l^g9FfhtL&WO%zacQ?~;K2^i}{uB7qX5y};)84*;!Rx&@
zzN5;$c0<nke*!rX1$y|0?7{X+F5>C%HurH<t7>Sd+wTYU$>L*D-mv^Dc8KzUSsd7!
zO$gl+2)VIck)5=py+Rp5GbK_v3RZAt?p_MW7sDP%C<1ElD2!a!Ww3!oXf&Bz1t!O~
z<WQW5C!r{AK~GFHGr?rSCd9!s#Nm{o!0orY=TQywKmPU4D{4gE2R5yoSrx?~qK&n@
zUtON>ukSXo*=|BP29J>KYZ=uj??S`vbb9cqG9$2ecVMTLEPEwNM3!L0uyuaSGp|}(
z8Ee97wz~vq2#3~`%Wg<<kzk&7TFA0Z0Y4#5a)1WS8(wI%NywN_(avi*s-v3WVFG-c
z&-2^Bo$lz)+Kq0P<!bUL(_~ez$EoUNy0yld^UOg@z=yZfY{vFl%fmmRn*YOyEMoUJ
zW7j<HxQ0?p6bU|zeq)45DpOn$n9?#-Q5zXV1u{HIk#u4_l`s`Uc4rdx9_|iv9t{{1
z3}LNQ)!h%<TU_yR+?Zmns=9|0osG!JOvoVKv?9|kRR-xeT=LhKSA%ENp7T$~i;-TJ
zwW(R$S<kQ6!EDsHWAR#kqDC1z6#1{4-9;3?lc%thZvF%4^WX#Ypwg^wq-@sS#kPc=
z`cTT>fV_~J$ddFlq&3sk-*z78;^y<j;fJ{-5hR94i^vr#X$=##5b0$Ce}X6AgzMz}
z7)wM-D41FhOW_>F+mRoBjzJFWwWcN7d^3GP0&9KLKFR%$BWxz<WbMm6HEFhAqbU!|
z3&SIfNcdAY^v6yR&2!DlT$DFx17<n_G7y2B&`@MC8NkAbL4M_7dANn}1fvs#Bk`H^
znJ=h)S?0C{Oa&tw5yKU;6L*~9H)wOEARU9Sjk$T?%+H<bMI-9!0&9_RVzY?a&-UEM
z;^%>3|L6Ynr+t_9bA#Nj^Uq@$=+lz~at88*)*Mdau6QJZK<hh*NaAj!QBOl7IKtnf
zT?9Ld&nJ+RuqM!w^1IaW4|s9(P>E1J0|8OQEDl{i$GMgJ>tV$6Ep;Ia;8?8##o#@%
zghX*Y$VoEL3n-y0W!mJ%JP*PpV~RMgXiUClnQiL|#UIPCqxe%FglDh3=XINB`)z8^
zWEh{<hMTb$mufnP?L^@%Vg^2@2!=S|uSrFgK!C^ZJM5SdW(bAAVnu=$|1wF(F49@j
zV={176;8ntRMw6lZZLN)ksa0pK11d>>f?a<SDYGnT=z80=<juHlPm-vVtNAT*I{sr
zKgON%SV{fzM?sOE^;aDJJbZ3CDPQx&VN9=sCav4mysgK?H*1P61Hg(ve3<R)`;^74
zosi|imR%&8Taoe!&v`SY#8Oi5J6z2^SSNlo7(vZ|B8VUj2+mm*X<CI65#`$rX)tXt
zPfO$P^qIl3bb{KDHtGT5KN`LVvMW=II|u7(!WJ9>t-K&2A}ytg-eOrCL4CTP`6eIl
zCx3!h|Mq=71N${T9i*|+bNEUh0xsUxewIaJ*6`LcwLkYfsC44#aP*E<i^7+pP3lc3
z`4mFo$4S0%x!E7KaWi3-ow{4&jbM}Qq?nP2lFwSQ6hY)k%Al8-C3ul?rA9TV12}h_
zD`HraeDgqw)CYkRZv<I#tP)6FTc%|iT;g*W0O@%&PvbiULFw_ecuKU8Vqu_TpEf9*
z@9R)uuJEbh{fqOnd5VMY<9Z&1y3w@U;%C_4a|-nA<zjsGx3x|SDYbL0x5ADbc5Acp
zqerHZl|7F~kWdS%Lkq$}$Vfp?0uSSDZ`dn8<)0-jiUJO@#xX#Qk%m9@TTciU!fV9_
zTEnPPC|blJW82dOggc#1%Es~g5ML9mT)iqV7Ny0c#w;An3S`UVd}fMFz?K@+5A1mZ
zy?~FtHh38@PRCVv=*vX7M7(_5&g<TuY-5~4VU2&to?zgSq(n&u9xsp_7$Nm5?)0GW
z2@^TfSl(5j%N9b)Bm^V7*n^0aKPZodvCu~G3*Ye|Ee2yDAyUZ)asT9q=AuSn;_B-_
zlo0d_g<@4ysB^(2kO^ABP$NN3b4QoZ5~x}60Y*Z~uB39GlLhwQh@|O=c<+Z8VhQ=`
z?uB_d&VH`&^3L}1r*(PgG2cGU5A?a)<%}MOf#l|qHDGRl>LX^=;iV6hINF9nU<b~E
zfxzfCD;GM5tb;$d(n8o;(2^-6Ix;)SVxwM=WmJY(@Kwy=c(9c`0BvxT9}^?3yy&l}
zMC0xAj_4X$CjQQ(UVESzb`(B-gR7er{iy#qgtPFc?{yB&|6B#5m_fuM`$dFQ`iBN5
z`X!Xa4KjprRQ_<_)H==<>!6aPlvQvHUd0N_&-6hmJS12f^eIUM^p`wi;S_0NvY=|~
zOjRy+=~$)sKn!5~@=*omcO?NuH;Pwb!-~lpN~ch2BM^>3QI?*XA@vq2OB>klLa@@T
zOc5**Z44neiJg=h-Yot{8={+BkEZ&k-ph~4=?}IMJP_hW)JfsgBy?b8G-M&<vV6{?
ziAAVMFZZaTu5S;Syf?@&%iyAYl{6$#t(m1NE^P9+ub+1(m3vV|yVV7nR3E029)ga2
zR2!)!DNs!h?skq8d+H_YdAXC<@!Z6SGjZ`4JNu*8hkWf$L85X#IjVxm3wd4nfY1B$
zpOCpyQJjFaxigv8xxz!>uoG|}K@~5be1XRRh!Z5~Q|;O&l?9tPAzn`_<;eyN6&2V^
zLMj_rfxD|0)1I*#(_{=9=WS?{s`ZxM*1)Y$_bg07RnU$j*Tt_XOq+~$qJIR6##wN7
zP6G5sBRcx5+E?+ydK2;l{P0$15Hx#Gv#NhBz{!oL;$m!ISu*gY@n1*g!V_)sy#c@Y
z-xn)$xE<SGeGn0v2(+FWGKa&QQ&FmWcMA;9zN&sOpg4Gc0qkzajnf$D1(!5j=IYYI
z{uE=iJ%IBDkfYn%fR|N+P0)b_t_6Xma5aP?GCcs^4f#K2Qu_f<RluJ)&#~UtsGp0v
zzQty}oy+16bN`CaZH<!Jk3f#Im^T3z3!=<5*RAxcN|xU3*f_vF*Gcd9>lSdiv-1t4
zE;~#d3RqF00@YbFAWjY@@VFAFtP(UQu0$I@s0??z0OzpA^~(z%9RF|)ZXpfg*T^jJ
zdk0bvmC}8nGO-dpSSltLBQZoB<L}$mKf(Rd7>A}rgObR+L=Zj*K@Y8w@WODrZO97>
zyad}1YzE^*nb=f*U%=j+$H865Wb8H0ufO^Wt|GzhM5}<$TnG2J?bbuRkLLO9MI!Tw
z$hc@c92&?}1VKRtEHSuVup+t9BlNm92vs~mF`yP8uBz=C4<%=1o5=qJ@$h}tV>e$S
zgJZMK{RVdtY#XvM733wH$TYjs_?dnCk!znG{p|1}8TW9p=J%?De+}E8BFjbBPHg~l
z&;l7hU};IXC7GA<EiGP_!w5^ov%v(tjRE4UUNvB8Jm7alQBos%ML>C*ZN`8&alSzz
z{?vNWG7YMPOFU;{I9sUrxS||R216)M26`+;y@mn`5I{2^O%sM^0Lzar{L6$y*_x4x
z*RsMRwH>!%LCnaw(EsyFZxLte4TC7n=c2ms1ClW?<6$%>mZqT=Ud75Am686J|JRs~
z-?Ng#3yAP-{ctalsCsz%nmUe1^@J|-n`EKXpc--hhBh+2HN?G-UVxHP(`mm=yT^Nk
z@N2Jt-Y8Mu{jq)J`&|f>_2Wvu!$n9IQ|!MeLXp9Tqi_+doV$?ajf1@PuJhvY_Xkf)
zPxto&jh6>{@r3<RJupm=i6s|OAI#2~k|FDU_<DvZcM`evnVsm^zX}Mxq#r~dOiT$8
zm~vFZa)w1AAqN=(&RY;T6a7jq^%4wZ7%K`_At}Ht8%Bzj+)I(91*7l<pfHBYlxxx_
zi$>OBq}>sd!lf`G6oo}li8D)CZ%8JB9lD;s>-9PtnPeSLf95aNekro#nlzy>sm5e>
zwa6+{q~<F}9uNt*tt;?rReUTC`0Gp&budJ3?y^X7po+50kQOkgDOkVqOB3U(eqf@h
z!P;l<Kf5q~L^3^w{i_=uGcCRj8Q2yN)2t~<AM5YVnh5K<B^$R^HLa>#^k2q_cuHM{
zI^Uc>L}diT<c!I?F0)^jDh#+x?(k`gKN*bJ<cJ|*`&QA5Bgvr)uQkAHabbT+OWD#V
zQkvw!45e9K!H?`pl1h_jjPH|P$y7+jcKt*USm&5$5X~=x_yz4Ft0Y9tB@ZUSmWXlt
z8ordQm=p5{4M_%hM<#xd^zfiak>p%a%do@&EFvq2P3DCbKK&<jg4XpxTY(0E3OrgL
zhu^u`f6TwPt)7D8vxi9Y>2(`U!~lFT@}^>Jf*hcuX&v6{vA5*!&uP2m10n()R?h2>
zPxz8wLaoXY@8ht_kys66z&C5cE&P~a(7PE5>(Sh6wEF3PHIA*{s#r@Q%A@{!C#U=G
zzd(v@^vf1!^vN?d#G&JBv(|GUxA(CBT)@lkd5sBk073vuWTw8~#z13S{_A<zwYD5N
zIxE$|oW*oBejVms54?#Wj~yXP06Gh$92m7nKkhuFTu~EPO9kBWqSR&}v5ru`BX*Dp
z$$>J~d-}7=<Z3+uk!4q}Oe{%U3KmBLAiLDDy&(>z6(w+hFpv*O;}!4oATjLH#pKi{
z5cw_#Om`(dU#Jzclf*<}6e^L~p%+?{WO2PI`q$>wQ{|c0d#V(u+YL1UWu9s<!E9KH
z=uWeAE6RPn0vR0EysO;)P77onRxy(cdb0l+Iu*y-g%TD`C%&~)e+o&2+LJ*&*nf*<
z_K$sDYnGsMW<Ps+x0lNH7g(WjL+|OZP44x3tMJ)QA^NzOYW(^HF{SAl;B|TVel}&F
z`~=TNFT551v#hH<>gMBjv0@gjmZ%XjMIPw#<Di8VNms^8n4p>@)UGnH8p)F811^YN
zOeW+2$$b!b$?d5M@qlSr!tEnFcBh<^@tc-lW?MW?<nWv!j%H^5g&iv)VL8PTFu_{#
zSrV7hziwVtS>=dm><`&Sv1r5`Xh1ZjM2$djK@<`m*7tpsjI^OQK$XQ2A$|A{Q)*3-
zruWcq|DoEyRkqU0{?~T+`d_(f<qu-2Q<nJQ+`>C8{`NI~I`_{!x$kEM{(l3-&rpy>
z5Mb#`q6_yT7Rn3`0mj%e6CuxRsNW+aeYU^6Y(H<p9zyDm%YCV;VQrcEq))c%-4I0?
zTQO58?{;hM!UnBdE*Vr`5=-H#3kCc?hjrZ^mrFyZt*Q*3U|Mr1M>)fK2~T=ac0LGh
zzyND75qFT;Dx|uF{gf=f;J`0s10?VkF3FY16dT*wA*is7l|7^y_@H!?bmqC(v4XTw
zV+iM^YCnHLLpwFWZ72gWRLySfEX~oQp@?hiaHTeuliC;(0b_}iI7Add{$qW!x8xqa
zaGLkTc(|I0uS`0Iv;^e0HNm#+Lkj-;q8?)kcGXqd+HaZ5H9dRc7tP(*A_l>kkI$C|
zKChRB4{HNY?-RDv&b|;v0&$MT<^{Z?;UY~wfcOD9)b`IC>orb-?XSMA$rO#@e+rg#
zlG01!J->0O#+|dDlA!c&uIoiznoH<5k1pQ5f$iwst<&PKl)Jq>@31@kg6i|_@j}__
zB<W}sC~Kr?v>7;P^;$^Al4)WHl3_F%xvM;abvuR_iKJ3Wp^ND1sQhGWMHMHTKXEor
z)(Blc^JcrbBjjqPf-;2VAYdOfv2Yf$FyiB)I8~qwZYM`~l{O^~y4i8<?WG+Rq($nA
zEa4*-i;<M#_bsguy11d}J>wR<rRr@9p}!{{rv&m47<27m_d57`jK$j9XKiu68Gs0R
zyy;wX=AJvTt<~|YinlPm59+^Ku43>Ecu7s%Eg_UWyhgsY|8m<Y;-Y6d++(_O`>1fg
zMvYaMS3QxQrNi_&{*NFt^qR@HT>M9<`rOSlV4#;8(*%bOW};|RZky7sW(!}AWkpnW
zLbtb<W`he<N|;s$pIA$HkX$<$zVS(~IB6ObDa?H}^fbvBi!>^Ybm%2YS>XOrxQRO-
zbfEU;!NRD{JTxQ(`}CL&8LHeY4>jgg2OnF-pR=wE2sS-ZwTW48%#-+33BgrkgbnH|
z`5p0XA!r2aKea978OWQ7uV_+)fi&>950F6R+}OfH$Lkl8x*>v@0!_S~@!-N_ii8N*
zdYqf{uYIdaimO%33-nZekJszdN(1_~)$_&qoBUdNrlQ%c+S+I8Wa47jbhtY8akGPf
zQW8S1HOJU0(^Hq%lU&W@#2nxMfw3?d&xMZiBzH8<GxCf3+i^@L#Y9)ztTV?&T-xN)
zd(~B<V8Oe+<KlC;|Nb`i%V5n99ltt~kA`hy7SZ@ZA1)C;I;uzPEOy}OhoI!gN(G{_
zqZJG6PDu&SPmMaRKpaak@k`l?zOPLZS3?*h$T5dyT4h?Rggl}x;e(jJ242Wj)4Gf6
zVFj>3O(c<%TjGBmg&9z`{F5X$t~|UZSyJewMZ9XQ<vQd$K+qa6L14IP7`jh^IuePo
z(>MTh5~?(#29T}(1jofFdqta&`#kz`ftl{Kul5G-v<E$oU8q3WGc7c>=&#40{k@f4
zdjE^jy7*2nBAXyCo9qrfd){Vwdq3R`XXEtfJYpRdQ~s0#A@%19_8fd2@uzvr1bg4X
zDu!7qYV{u#O7i0dn4G(fJBPoqtsWRx`pd1Mls;X=#wQc~YR(W*P#o{_Y0<qFBS%k5
zK^tvEk>5=N3tixu0WC2pD@B7xB=Fi&e|A(G!7x@*Aq;9DCGeF!t<{oMOb`}EBU!W9
zRc4D?BriPUsg_X0)S|4f9=2(p%qvRHw!Cc48b?(UX%$k%Ls5*m>=T?Es`O}z<--)3
z0?3+>({ol@9X0oM;$qW#l&(X-N2O5`oOA~jtXK~-&<)22p;OK;-~0|IUFKtqzIZ>^
zBwC{!@H|+!I3Nb7rCE+A{qKP$a;g@@8$MEj)V{T;ZE4x=*E`=L5P05Gqto7Zb9x`8
zwNO{|^OPdC9yot-SMoFWkce<<yQ`1@%f59U8qM1*7atoa9${Z+_f~9O{|O;l)4_+Y
z@$V&4_~^&Yv@c6~U9QX@{%J|vi-FTM6V8qzg%k^B^3!M>%|Qz9=93a&1Fc!60!Qt7
z%Wqb}BY4<@v=gohciW_TjtL$*m8&!h#6(erlYVJptWyEu3nuCrN+h9r@fRvKLB}0a
z8s8p;ztgErNB8u`3!-7Wm5|(k7!1`}lyMM92G&R-x(7(U_p@-$2LsUqGa=KN>(YXo
zseif<>o5jU-+g^JTuMufyuE?U9NO&KejX?#-wt77nh#AvN+_6myvF0Daw&vs&fq8&
z3qH+|jO5l>%o;oGv|J4`Z8bXB@fmu9o2Q@Kybh1sY~;IFcZv>IojAAo8fH;`hX#zB
zd>(!ok#jdT-IOxrY<Sij(Z=hdzQtf8hTdxEUs7fAH#sh{C&%Y!8zl`I=0|S0#l*`b
z&#@=?!CR!|gJz3#xM5?9fXj49opk6Al6gYy42cRVId~zV!<Fde$V3snlwy>`rj#KJ
zglMBQsMF{!SO6>Fd<Zl~%o%#2XYB2U>M;aOaM8ET`)$=MNvLK$@M_fpA*e4X&b6dx
zNl^^wdv25@9Lg|qx7ee)IHF)S9x(djfKd)|KH3K-=2K$3IOAG?|5>Y>_{U-31y3-?
zht`hwpP(Dz?urnP&q3jhEZ^%GX}HvL0+UD)QTtaQTMvHZnw-q6ZgR>+NPcbBKY<UO
z#&^I(o%I<ghcDdo(!rc!8-8afX|?TK8uc@V*=-E0_jcQC7J4tMlTq7siOWT>G9~9q
zQlT8Cx#xN#y4_`@+Gd#1x=PDeO%sI9s2lcnjvHE=1Q3pC1ID3Pv9EiPI(9+xE`ky2
zg3JFbno}-pp_Il@I!t^n!6ZEUPF<mEtsQnrUq@0#a)b_~0aefQFM@YoR+Nzrr;p%4
ziP6$57V~j9=f*9IbI|^zHZ+q&7tfX{_%0RST*SHd`*!2(w^oozMXZsj=3e|5T4Xy5
zr}Kbdvn6m!4HKz6Bh81LJ#@@(`)hT3Wfcc``D0Yf*Wqh%<_Y<k_vy++$hxH?fqrbf
zm-j_*SS&#X_imSiSJj;0X7C28-1{%vw~JAIoYz0vs4F?8<tz@$drk4pWb4@vy}nC4
z{hVoV!l#MiINvJ8iC6KMmx2U=Am42?|M@pzKip~mYgmxSd96db_WV;cUojKbfeUog
zj>8F4L?j`><vO8*_M3TYe2FeA%CBi=mk?EJZU$7#dzm4O!WmC~n8(F{53Gn}$qFC!
zB&ogjijw;#Wb0q3CE#*WL3CbW)d6dn)qdIl)*)~;>X}*^;|j0nI8cH+vLaqXjaTk1
zQefI3B|f((MURe5$e^;PttfQ<+{rH7bL#hyIbq}oEuK+D95BL+Nux0e0RHc)BVrvw
z)4xGOm^n_I^nwl4b)IUuUn;#$>Lyv)pP8xAUFX<(%bwugxs`nkYW#0w7_h99Oi3z)
zC<wSAdl7~FF{*4$fIXBqnTP**k@!#>gF;k926i)@G<=LkUZ8s(qQ&BexR`~J(=`%i
zHgJz8wUEcy!f(y}UO;x=u0Dr)EHxZ2V7I?_Ietc))P4*x9Lk-GBLo|fkSkrJ&b?PT
zTjz6JqK;QOTuju`<kY|Lk*45E<p#zwN9jTylu)}*&rs7H1w+J|_t$Me9oYy{D7VuM
zDMczzDHYZ!z>DKipd41aZmRlCIW1#eyZ(XVeovx;OoiuLbb90(aGl?;D(kNhQCW-@
z^yEo)hD<0C{mueyy8u~%DWojUcT_gBueldNc`b$BUi8QWRvIli3ck}9%}+ZGmeme!
z7?QE*OZ*5lHo!tBxFk!Dt-s51{ObPlQ<>6Pd+)@K>3ZSQRylYPjNffCdYuh<!SsIe
zWMo1SH1F})@tBPcu~cn1wa`C6-DpfT?50uM9<GYP4qSV!zv=HpT=wxi?%2)N_&hU&
z^xU=}ghy1yxF^nr)BVE>Tn^?zj9W!-m?IZBmk@s*o+!ar@HtBBy;+j$eLL7v>-BCz
z*GSp@Ta!ZTKF#^|d1Ux-L&bV)tj}CsI2f9RFOXwV>7Ld8@?{lp{P8og@9hVY0ZI~w
zQZ9uEUy`M?H6;fZoALt54)ObLhwC4lhw*sjyoICu(?2B;tYm~%{W2M5d9F*G7NI@)
zx8^B%m1r?Emw0Lk$*mUaRikSc>M+75g{nL$s==sLN=uPmYF3+8l1aldY%#GSGxV4S
z(x2gm(nlwuVAlk&>m$&YSm>zLsDQ0Yl7o^Tqn}vB%Rw%z%<`)sq^wTK7%`85MV<bE
zFq>wDcaz)rMsf2eUe>3FupAq|(r#*oL8>DS?}yE=`__@^l?VKf<b7x8o1u}FyhNS%
zk(XjI<E8sso7%bu-UEjY74E+P>(~y%vnadNyGDV|^QioX<<CdU!n&Fhgp_@Hf?)C=
zep%uJK5ArG$n7CMaFXsK;&(r3p$S7Orx6;4Ry|%$|8O>OAeP2@T=tA8^8y^AM(|O)
z9(Ic}`4>OBw?C;8&wdk3bnh<@n9jq3c=lm!Ugk>b;>mZ+V)`ZmXAuJj%`{yCC^Rax
zdJ@8KqRQ|SI{a1dB{hq0U&tAfR%aB0(Xn7>N?g-?@Md{r;{$-=LtO}VfA223@a2y7
zt$9n~l^D{j8fwaMDl6#EkHWs$s7s--gax*vPnzX@8!qaqHZS$?LddBUrH!~Hk@^TO
z1s|y41(*mzns8dn1-`{dMG-+xdv%2<ssi861y|;xOy?ZQnz=}b6QQO7O7BZw9U?v#
zM;Lo~UlEI8bP5do*lnxZwkBUOjUx@qyiL|}xDQ^Tr^Q3*`?uTEoJw2`&+mTAIo(<R
z+5rwmIU|m1Goj_q?`-}r_ZtTaIqq@+GJf<?K@km^FBEkE2!N&2oH>AhlnZ-pUCHY`
z40;e!&;`wsQLu!NoQ_%>+Pyd~hDq{{N@ngk#^187_k$<7xU;cWM<X_M{+J)$rQWdM
zK7|OOpxWR4wFBQ80|WbabW;fZmEjIVXgyt8Mp;uh5*rjNf1GDUvQmgO?T;fIL$=&C
zdw*6n=}l01pj`A!AtS_L{V9TZW~DhWdKDt5{I@b=Op210s19;7xgMnLxJKbqrQI(&
zp}dkJw}&qN*UUHBK-N3pX4h{FK~Dbpouh9+DJXsw(w1^q-2_N|h1eg4B`_P#1S<el
z!#5Kagf93}U05IE>tTduhPK(O#Dn+yuea>XjZJR_0&bvy=k)HOMFoh@Q_sLwJ^7d1
z(NM|xZc+2geZ0Sp?c_JHHj8cO^N<1%>xdDjFW|02?r)TV_EqfH^ULuO;O1?7c7ei^
zu^T8C3=W7bDu1)0<-)O<OL8C)9Xp`I29pwT!uLusrGqHEv8m=Vq!7}M@KiV1uzL=g
zSeS}A7R`Pkv{)Fu_p$ncoqH&T|7Ab0K!LE3Q3UzD<Aet`t?hRJm}Wf0{NSGZ&wO<Z
z0Ju<qxLiJz?zkB%@+qaRtp?YrY$*x7`FN5oWY+D1hxko9INh8{BcW#IrBQJ+mhst@
zqM<p}VB)OBJn30b-uI=6jDm0&&ysFY`9-wQs&eviE}?kssHI$*W0~k`1gQO_>e4`#
zS_=Xbu|PR8ph^%)xR0&ZhLAk72Q+L{62B(In2V)!2$+D`d++;w@(t+YD3t?d!lAcX
z|9Pe+<n`TI7jS<kQK>)#oAar7{IX@Zf0gpjv_h9f{p{(dwY~V|`y==D<>J`1?M%<o
zw#S}edIm-ynTtYTDtt%*qj!jfxy2af@H_EAfFU_2wF1~JvE~P^p&3lq_j23>V=3Zn
z`M%T)I8w$K2JC$%{v`LW!$4w#r>9SGJ2RS>N8~xY1?fJkf%f~2bqQF7$fat(Yy$-o
z$yBo5K%+fl;Dqx+F|fX5mW7N-wA>tQt~e{B2uvl+x5Y<jG){VRd9`{xpN}1o=x(x<
z*eC{u;YM3092Q<lIDczR@{zt|V*{zXZ1RDBlGJ^JLIR&2bs4YCl-ROQ?n$1Wm&z9A
zWGC*Hm1MtYgT@8pM;HAZ3`}OMi|~?`a*Jqy!5!(Kx}z>(EW3#2!b~ZNlMRp}N%%RS
z*uL|5oZHp)*x2iNx0>1Q{%N%NHRB&;X*}f&mb|*>hO>Yu(CfW~C}wBElh{^v#V+8y
z8mj023`vxwyWwTldv)OKmw^nBZ=4=NiklQdZ~w!M)!wrwlQWOer-dtsqC97~F<>|`
z?-e&9jN~ays*`s@H82~@`Z*Z<@@}W_WKy!It$XkG^_;)vn;ULyZQI|<=_m`mK=c&0
zy6%qp8=oV`do6Z|!NdLx{&yv(dT$O%t8`cfEFL<YXeJ<VFkVtmTt6dk1T#oFdxe$L
z6iCI^&dOR5Dor!WLsq1iZ?1u*qQXUtIpg{epp821Wv)IZQWy(9VsFUCU`^}7PQ&@|
z&+}tpc%YS_B1Td^!KoKY^E9jn_x<E$P+pLWGr;@IbJ1AL$m)cq1CMcvO;_Ya41R;3
z?3)_-w2!FqnN+Cpj4-2Rkc#9uR;rj>uzVt>UvF$Cp+Dv8gFt6()O*gC$5X$+`}Q%4
zl($=jCdh<MW2uYiR@dgfRR1l<c)!U;+Q`czbi##@K68;Ag8SNPt2kF>KN%-ms0Q{3
zCe9wNZ36E=TgGtFDo;EZ+&G*J!YR;cG4Oe#JOBAP+x|2C^)@iW`wApy0>VE2jtxhX
zD*@dE4DDL}@<lPpbhq_YAUn*j2;dGzp{z-wmbD&=Btte#pNYQzVn7_AU9AYDdnJoz
zD!Lk*P~I(kk;Yff(ACmO?r)KfcQC`>h=x)sWj0K0Z2t*qtv3Yu;Ct3!NNGOz+WZEf
zP*vSZ*<{aKm4})0!P(r9p5;#;2cPjyTY!8?J0n2@2lhfRIQp54);Xu`Rzi3<;RjcN
zi-4X_6n<cC;M8DO)+HHhOLSPuQMGy9S?%t&F4*|Lg7&_$)O%jH_>wa(-|Pc)YM-zB
z|22b#6MiN;_S`H~=kj+r-p$0n#K)I_ejGV%Ii)Ag@_r*1h1h4m1_sj~0soL6pW(+<
z209WoD9x($rechmK-f}>HO6E3zZ9eQn&ci69ix6d_dNIXYH8PF^yKoOil`05Zy*a?
z74KhhA2+!#Y-~tsN@?!|GY&JF<7i5_ARBhTPcF(nu&HEeiybQt{X3Zz%!ysZdfwz{
zGgbbO`s3cD2%*Gf%u~C+On>f_TA(FjTcj*X|G3D)N9IunWlEPqa6D*wd$d^2ct!)2
zES4~%2YhP41rux8aurI<DbBA7)RYFyG56B#h-b(E`$&Ee8(TAN5~^|8!6=t;5YzGz
zRpZ}?OmHSUsU=YvBe}5acXR;~UY0*(u0Ii(Zl4IXqk4Qm#jSGRV`{ne{hfA`p<DIE
z9)>iTFfTet<-b#gfe>rDOnmG8Cx+QkLf_b;V%eEnXd^~AOs%%Lj~dW;DXN*$1F(3n
z3s8kbSokV@xTO!!?igmmDI66^^&W>Dd`V-&6vCg&oY!AEk8?cc{HRv%$^&A)*LE^W
zf<EWcZMIc2@p?IR<&DD=g5&j&Y#0?6g$W#_2#Q!7P(;q)^8dhKdaYe2p8VMGu>5Ty
zyGR((ThhgKn}-=deO0;7;)qp}^EZ7g5tCQeQpz7)R9QX-P*lm(gpuOr1o#7KAyjFj
z+le4z1+LAbtsqRULZUXG@}pc>eg$7m#+UE+j~=MIGz6Il^gS=67(~LksJVdMGv4dh
zfc?H?q)rW-B_c@mP5RkZa+WkmC;DJ2jJ5<z;-db{3f!`r09pTgg|D$~4&V29iw4w-
zis8srx>K=aXNuCL3Ukqv%Ve^g+<z6a)~__W&cwb7hL5T)U*K3SPdbx+1MQ?9w>lW5
zdg+Rv-i)U2VckRmCAQ3+U<~9C7^_19Z!=Vs7Zj?~^CFo4>#6SRDOCbst<!VDWd7}u
z?<>Dee2vHbF$2AZyUFpnVK@buqm9n0KLn(-F<pOy0A#B8N%%;wTrU`e>7)X|GG6Za
zeW55rN6?_!al+4=XH|}Iv{6`I1*~oXDUqqMVaraL5j;Htueo$NKhP3z?o|^xZ{DZq
z>0Q#l2F~7?N`Fxp`I%2me3T=YDVXhH&zscIIJK;1G~UTY`!w8^!F|Q{@P0@F$Ok#T
zWq~ca{vt@m`N$C6W>s{O%9QV?3c&cY9rRO9Y1ErDeD!4H>m6gL_&NRS!}Q$2kCG%E
z<4(qpD(Vr;9Y>$-evL?bg2VUvxATDr2gvuPmwmsil<|}I-xV{}MU+DqLh3CzKIkb`
zfk{rco-gZl$4j5zV*iwt?@J&$e8X_K@pM1nN-&zWw9bVq*n={dXTlLwICTH?$psgC
zXy5zVa|+x0_%4EjY|Z7)isQK5;?U$Wys}#QL478Cy#RfC{=>Enf;z@=K{S-=IDnQt
zf(HWLqQX*;%1=Ct>ks*<`4M*6%)-%9RVcnuqA(o>Yeqo;1JX*JvJ9$LMd(!KsZXZg
zbbzMDqRPA&l4XXXx@RB^b8@N$G{ht~t-=&08XWtgH7@hK7_^scH5?vr)MlU1@#$w<
zJgfxAC3<W+O-<&1a4P>Dejx$$z;3WH#A5>o`3-mI(1$uQY=YymglKllYe(Zu%W?1-
zcIX;W2YcT+3>Yat3$HvI9zjHJ@*zc!&LBL_<EW>q-rXCH&!hI}+V`u?7lGb=B94o4
zzWQ8M|74quMhB~I{aMCFXM_$c&Wh-i4Gw|E+jK}&|09JMzl$zV6JhUOAMDKY-&%%_
zXtQ|kLsrx7Vm|gWVh6Z77zy2{egBT^5NFP3swWWdJ^RHEzT99X=QiHb(a@}O0bM7J
z>aCs^Jx9nWD&78Efa<dr;VdnIw?#fL>e>0^T8E_@aT(sWeFfaniz+q(4#m#Ni>jqB
zJB0vL{##X(O=(JFHkA17+W~^524XT+W>b6HFR5itqa~e*s7WPh4n3`AZyj$Rz293F
z-u`xa9BVKl$ocT<9R(9w<4Hf6`NGm1=Zsa*Wr`>yl=o?NN`TqO5n;*^Y+*R+oXp+O
zX}xhq5s(w#6iJ5Sq9U}1l|Z^h^n-mS47z+R^Zx5Y>v#n{7lrr;skXlLc=p?$%gcS{
z<!Kf?T|fN2FY!&gb}Q;F-?aR=FOhOz8vItD>i#?BkG9Y#Q{am)d56|2K98po4sVh^
z$4jL#CO3&+b`j+6%10`}?9sZ3ao>W;czL_F_hSjB0G!^>9QS!!#||<3hNMr!2Db+%
z>!1xE6X<_+>zrzv2nwaU)P1Z}Jh}2e&(+Xe119-fqIP+n{S@2TRnvY++4g);FnIGX
zAWbof-0$KV2s)_+tsaq$=G{_8JWb+P@t(EDwMuyy;q~2_nhZB~P-cEn3zm$EJd)rV
zKz;N6b^UX(1xB~O-Ilcmin$Z-Ns63J{`Z^<A{0OZa%G}8fjh$$rvzlKxiK9<Nj7>)
z89yaXDW+Ejt|_^5Tbeue9DCuD?S0hI)0U*~duP~2>%sC5ujv!bLK6pzFRoO3+|zB>
zX`QYWSDoEaOlPXw5A0KursHb9)PIO^$>zqoP+Nh5lK2UE-8^2Gp8L*;{Fvdc-kKy|
zM(g548N;DW6NP@pZ`~AOtJmKjt}fN%esF=PunTLK_CuESgFW_IIcnNllqVe!3e}O8
zMp)VrjeXdm0vBeXBTmJ*zgd!Jr+l|o2qcXis#wR9A}%-e1Iw9<f&k<=vR4W|1kftf
zu=VLppj*{S+7!9M3%BsK#k{-Y18p?|*HrNv)(Qe&ZL!>1s61B9qTNdcW9Dw{z*G_w
z<Zgr@8*bmZ?ex90IzP>IBr`I92RFA$gU+oqRVgV!(W>&gV*m{d&1>>ot{qWAPCwkb
zu0SI(<|^hqc@z(bt#Di_id|{S`mUWjgN~!>@_lHG!gu7}{J@h#Og%K5OFACxKaHP%
zZ{5ADzLtbiowt9iCmFfce7zc{X`C^16U?=?{<9N+%?HK5BKRKHccT(KS$yp*fl~j>
zD)YPDeh9Y|;bp9+nVjaFg1J7e5H+KpiJ5}%|M|Iw`3W7~Hx6c2qnk}q-yWy~CmoS;
zpk?i$bYbWh$Wgv^%i~S`L=cjyQp&#ea?45iKIg+kw=4IX5dpNI>FzqmCbp>@YqbL(
zNMsd)kEXO+dfV_*2^$2#4E^0sixk>z+?yQCCecL!f;|zF<D<|{(fYh&HRv}qhf0JU
z(=t1Jr3|9Hue!Cps2Ev5$uGsZ#hLx<-v}~ORWOUjCET<)gbpmKx)~`{^_&p&y?wi5
zUJUwLQ#e#yR2jw6A_X*ad|R?JBN{J6ZTAJ@ba<a3YV9)9UZ1QI+k2@R-vXE3$oSeg
zQVs6<BHiV(9d~1sR7RU?&{$qMilgNci+`AGt(5sHfO?w$>sx1ZXeSi8(G3JYNcipV
zARQ6CI_)WsxGv>g5}<~eLw<Rvg&*FJ>M<Q8a@{E<@qCqG%0HJnc(BRoxQhWj{pbeH
zsslg)(kjMZO)1!<S7aBrO$$&?Z!2ERw6W%0zs~!}A3Y&4-G~uAWuV+>ZP}rrFj(CX
z;4^O4?I+HZ|IVn!UmoB0oKbt8SeHR_PC47$9dW<3xly!W#Qe(?0ofm!)U-v!1;RGa
zp=+H*cB<=wJ}s0|>6M}CBpBK2jrla21*&`0&BpPHV2Neb-z4=xZ3O0Bqyf^yiV74T
z-=#}qU;r1H3V?^<iOq?Ysu(SoM~ld<v<$L0;rFsj-kKOVsL*k-<LbiNm!ZgI`<F!-
z|77-!9u^HReBwknpMESJM%tZ(cU*z|?fJX4p6q{^iQ(vJjh(M>xEC~VtbfTEJnN#j
zn9rw4r;tt+zgft9`k1^-A9}c@r}+CRivsK17g3K^)`<8`_IdCk=wBle`}79t%whM7
z14>Ax{_^#s%_7P7@sN}~%%J}$(FQ0#jf*52CaI7CY@~!@DcBRV738sSx%JZ%&eRQ!
zilRF1OwV5AjeGII);Bo%OMW$rgwzUy7l70MDPH@D?i!RKeJ15w#2r>DB7f1YWGTBY
z1{}uSKX5$Fq>)GS&q%2^s-R_L7RsrhrAG5eJQfF&=ual!Htk@`$TFg>U7s``HR+7X
zml}e?+sI-mHdy`%9j+-zkOk@Y{EolZvvGa)?WqG*IrbBgC3EC~7rPQ>_^vj+?Z8z)
z(_=Z9Bdhtseft`}VYW5rExi>w3RU?_z<q=N>)t(@UBA_Sptjd&9~!$EQI8LFk*QsK
zw<DGjQsFy$>Hqi?{k1FNp865VNJGjqJ=n94qCOW=`%`M`fr}>j^`XIi7>{G~8Z~oC
zPX(X4>PaI32gf{ZgM>xZlr$!wdmbn)LhFi>(V4E~5FjsNB|9qz(J|6+zMpI%sQYUG
z10xDve(oz}%Xm(2yz}g&F+K)WPQc1r%dR=5MY8CEl(YR~?3EE=BS}15{~NTu`7w=k
zbi3fno-~h(TK2aRg`^w}m8=IZ>tEp)HqDq=w|m?#+-jnhD&m&3ox4qGgI#`daMQR{
zuZWvxJEQFosow)Y3jxC@hNeux-uQ|p==?N6mV)0!HPR!Dt8T<UTK~3{J-R<p_VVWN
z9D`yx2s!V4sEMJ>b>2W5nt#F=e>}j{a{F5D4I|qGe>UpR_iJ$+;BTGe<%XR1Z73PD
z2Jt|S?(u?hx%xqG?vb<oM7F(bs|mXIhux@Kc2C7y_<U0wHvg{e;>}SD(vM`#)HL6g
zLEF5ymv>B4LsCuDgaWhDDi$x_ygt_179PM)xhM!no%#7yw~}gzdjBjZL}BDx8#WFe
zFsr;2KsKUN(Q13d3(DQi{<TP(iSy7Gb#uLUx7NnfTVy|7lwPd(vedfE7{{aCDRiSF
zGb{QkPu#xeKD|;h)gI!SpHD_ETfKxROsH(PN~tjFpF$yaLk>DcD90=*|D=XAHi!A+
z6uP#RO*mLZsM0@sZHl!+BZRg|y7VI3_%-#YgQf^l=1Ct=v%&f1^kfQbCIsk#KU42p
z>N3?mmi^wKN=C1@=#~hHB6$1Gs@w8u>^J|pY24!WX#jPJvD`X$)Y_G%HN#WgblyKf
zRnvaHC&TsY3Xa(`BV1x>gnf%+N7`Zz)J4O*6f0Y^h-BJ>vcUy5TXpMtrOm*|$+B$u
z`O(sOi!nsh-Tiv94O&iN&}p+6_R2qzVdj=f5H%d*dwzT3J8k>ARdD^>U2pfd4e5+v
z^R3lCYp*Fl_r099f#CPrwW@TmB!_obQ6SX>)p;S8(o)7uOA{0zP&+Oz%wR0#@Ci0T
z*v3@r!P~{B8Vk#1fXe?sm@nx^2F_A*(~>JX`1f;$lyi^Oh{!RZ+9z?S%KrgYvCZ!k
zsnZN_sBA)RLMF=T*UbBwb#d!l{8fiOEr@lINoaL;T<|OACP>0;NAGn#aZo1A&%zJM
zgW`<9<c8AlKR>2%QByPSB)UJZ02r5%S9p^`9x3nS$Qmco-8>2!`r)Mc@|E|pu~V1C
zOZ^`JX+W00)KaD<eAQ{@LLyLU=G@n9+to;t(sjeZ8SCwF@y&l}eJsfO$a{C37R5LG
z9A?gbbJ7^w4uNv$XC!}2+Dm9?jW`zT6O?{v9)P9Ck+qijIX|<>eaG*PHGcS_v;O)6
z12;Z)W&dUGDCG*ze+td_f%QDLmtZzw{LIQ@kL3D?e(HaIblo30+!Kla_>Z2b9ysys
z8<_P~J?~8hzTEm(>&7mO`U~s)S{#Fqxfodo<XwgnD-!$WOoT;AZj~n&kR+L8$I=^V
zANoshCQJi?=`1iO6aBMoNt!S~P9Npz;gY{b{ggUm)^_Z4&pgdU)m{?emsRT^sB);;
zU4@cX!9#m#?X-AXF;@dtr*L4rJ@Y-vX*6MK8xrWV=!;djs>4do!MW4vA8k|POjT5M
zR?vFTQB8{|fl8w*XDK37V6k2x0ic?%DnZ?$5d-dVfJ-^UC7!@?#_*+03?t`Dh+B0V
zFwJ`C-p2h488(lcgQ<ag#PQme{|9*BzkI9T-2NI(@8I8m_3INqRrtA?vFol_s`YOU
z!20_*8wfe;&ja~kAe;r<1ps3Jrh)h{SX$+*QAf%OV%63C?)W9Va?ZWO>$d#$*gxfN
z@BjU;BwzUdQmQDS7n1gB#xJAw1;aTys#aR_&ml$BIm{>WZ~gI*o$+UvZTra@Pe=T8
zFa<xI^N~>o*9DG{@NP?~@++rG0hXFqK>0PJ+Cd>Dox;>kWkM{ITILj<QqGMc8ftG$
z8&aq<m`+Z5tq+{_Q=W-I`VtuvLid%@Tm`LKYh^W*Pi88kwDt}sbnWg=Pz_S1xxK53
zsXQ&l6`ope3<hYd!ifF`?e8$qC+nVf3ISaSQif9W67n?ZJ2>D5x<{1yLuoY$v+USX
z)kjLLS3bp=00O2P<|$D|?N;<&pXe3pc}|V<)JrAv3_lwH=Sz}6lK9IyLv=Sp`BM@L
zdn8zk)PnWA2Qs4btm^Z`V>4g#|Luv-9h(#XxS<v=kl*-i0cIk<Vb!>|?Z2KkJoY1R
zzao#TZeR_kxa_AsUD%31UmsAMgmj8v&3Rz)Ah1${sAW{?6;2iaBA;d@H(q+mPk;W`
zn#IpoKHj$+EyX>Vqn^k1vf4^(UQHx=Zqo;S;0|z>4*vA;@RSJTup9FPe9Ym(p~|Pk
z@)AR(Zi<nX>q-Eml33bQx<_G0#{(j%GfwKV$}6G4!wjM(Ay$B_sj_Lps%4O1qq`Ac
z69i;B-_{u=r9rGclYlaCl*2LvTm_#-qfJpX6m}_@aPk}5`8aMQj%*h~n{aDgu69a9
z_lxRH(fL0DwIE<<tpJUqq_%FlDd=;!fR_h?0U#Uz{1PLrPc_YowvSv=#q=PLk^WGd
z&~8U<7cQ*!92pg6Zt@s*a7F`Sa8(ZY+ffOBiorht)J{kxJ8na6+F$c^##aw+i9+X&
z)gdOwYgjn?T)EW~jc1O|xd(rA2^)T6@v|5H@sWL#Z+i1j6dMD>Gk$u6bO2jmA_n6D
zurLSARglfL;8k15nnBuJ%Hz-xo`33@X8x`t3`h9vA2yOI1>5Kq5qiM(vf2x+P6d3p
z50afWQQj1jf-UctXol3j$q`pGR7q0YR6B|0tICTi6t(;(g?759oSMZcwj?iw_-zqG
zR)qpIqIRep7ME~!T*uXPchYPldc+BVV1$9?&46Sh4X!*cTPC%9G|N>pTWqz|>?Uiq
zT@$WR3XH%_dz4*8hR(c$cF3yk&6k)u2YF?_#}q%Xeh?4@@+~T+Xl@z-QnCm%k86*V
z)O4K^5Do$PK?Z*SaQmp>qW78dcumTxy*>0dd2%MaB**Ou7q~SKycQg*U4hsKj^rdZ
zk4jNpU`S%^g{pX5GBlDD<GCSG4vScBjGjy555D~|Ko<*+G!;0w^7Nsl!m%5pr?2{@
z**{qQ+duXT{f)lziZACPa8$IY-b@5>T*6&(#L=gU;^s&D@(&;H$H8i}=Xf&rZ_D!7
zXOA_WyghC!j`XaTV|y9xg<dHc^1}{y`EYSf>Ui+8GUts{4cJ5)X#%On3<>F&(32Sd
z`pt^pq(md>dt)G_$?0`VO4aE!lI(HFE7RdxyOJ8kL^9R{5j7x%8pM4DD(bbpK~*3%
zsAj64T9?gkK&PF`dP170tMADpQXw08c}DN8Gcmpk&=km6@kx_2r1Tg8H3wQN60+6x
zJv5yvuQ_b0fTFq}1d_T$s|qxxfn{I9%QLur65#+tILP1)N;v&A+gf{5YLu%fyqF<1
zsyIQjE&hc>Djgc`0?frgfidLD0>cx)(ftg*QXSErteThM1t{lo;Em!L06z0vc`mEY
zLHlT>-jp|GU-}&`u3x|E!;>F)_s<VBWNpcpMImHOaB(DsTMfk5Z}0a%a(jv=qeH)c
zLf-x-3#}7JmK)R?(cX={?3%G2uzeSeNjK+tdGwb`AjR={hojj5`~XN=4roLvk%0wy
zWex--x(TgZhpD8$V%9f+tWFct^<!Ej^caGWW+dp@n>6|}NdV%)seve=Ku9SX+c<BA
z89NSzS&UNxUS-h~hs}CuMmeNS#5Ei;YFBFK&5Y!?lJVBf@kFHUZj85bM{UIqy(hY~
zRZML|t&e7DWK_{LRaUnT2>Jj~anM?zoEvQbSJTCmqPR!MBo)axStg}+hQ=Z7wJ8Pn
zejpf<%Bu^8^kbUG!}0*5;bVz_+hRy+z+X9l69HbN8|Uf5vVK_N*fTDtE(J>|$dQy(
zj`6&gBcE^Jg&YGE*Auu!QHJ}2yMKD}!Ry|5(c|Tzbz8hNt7JTzNrbm7#aC}1bpQJH
zWcK0s=8N|&?caaWab&{YUdf<iJz)E;n3)^EoK(U`F_)oO1ghkf#8S;JpfgERA9Mwf
zF{*<y)z6tl9C0l})&hh9GpeBG3P9c`FHMI^tp-Q6Dp0FOXf_h088vZo_=OPtYg_~&
zEz@ahQh74lhuG~=nThUt@_W}~8oSr6!KT4W(P`VfHuZkf!ezWN)~)K%mb*07ShcPC
zO~h#<(E&AwiUVE|$c+Ql{lNSab;J!CvO}oM;cyqO=OOSt1UV00&gCu@M?B3C&Jrn-
z7SLJ->W9IV7h9AF`WU=^sIb-R)6XRyL!3&qX!NKAM#~KG40(rwuNqD;=ms<bO9=ru
zoT20~4CE-M*PzXR!SSFKSU9n=5IrGJ{PrXF^!@SbGu%qH*z)~_2=_ct5`TRgiyutC
zdiMS$U2X54gw=zzZ?qn;eHV>6@p3Dcs6^9zYG9HV$TNr;8cnH&0h8jZ>MEj~S3+K#
zR6r(020Cd;v^Ol$JwuL?XF?#ZbJVK>mE{yG^#+=06`5!$??M$5;3AIlaQy+4*E%ZH
zvtvEGRc&FRrfU{xJD1iLi!{BXhVG%cXgYtS9xLX71<4LLDloL*W{jdqtK@6>YXsO7
zc&qht7;?i@4FF~zYoJ+MAQmB{BJnAjni?inm&6J2;W{CF-$$4W5#)V10ap{OBp1rt
z$|!VSW=K{T<T0t#c9ooXo~omoeL}o9#g`iZ<UBBXS%gg^6`Z&yK-DG2imtSd1p-rj
zOIWBAJ)?E#r38ixa^b6c_U7=qRt`=ygZc?S{_tJp@_sz@RsuCEGTHOazP<H;?Ym<7
zu#CmrybrPX_~FO<cWpW+EjPhe<$yy~pjD+DP*-?H=MV=1750#4MpZi<-cg8IUC6Mw
zl%Za0p%FI_XAKAzgDIk?{;3&pAk@GBiD)H3A$CC3Q>|dz;bvL(h5GL9d{}3~RGZGh
zo-OyS@?DaOi#h}~n`?7uZB-BR8Rjo~ziK+L{CqM+yR%?RqxDL_(td$vy`hREY8td!
z)XwtD6e)&)Jjs?-Pi?K{!C|3ry%27YLy!wZF7&vcbF_3gHNR&<QDH<Rk*w%K1MMai
zz6Rt;I~a~)Ty#kj@;-qJPhW;J$WUb-8ZC~AsTQ6(ei#eO37A`XNN>f9n~AU}=8x<>
zmMqWD6~b}9lz#m&H+*ubzWYe}=x4q?FS2Ld)&sUz)H)44DuJKQ#$(0mKRxoy6F>3v
zS$os<qg(xSAx7SJP^E##N)`yJlIeMr%+_HioySy}t1L+@E~luhv`}p}(M;>e&{7G1
z#^{9h1cR$`_qvDF;pCRkYt*qINUA7j$ggcsv;ChMSZt?(1vs1kYB#J~WezJMsY<se
zkJ~d%rX5f--kPmTn1Zk7#F^>Kbnh5K8>5j~u7u+WG*@V1yM*JonxL%8z=Wbyo1pEs
z2uy@GC3PZFxq^gZ(8xut;&Ru`!T0kBL+#ah6uJgnNr+SaQFSp<m6da3i9ocF;k_5n
zBfr0e`yL*}>T(McP96R0E67R>INOHt#b4g<Cy}T%^M`ip-};3CkOiz-w%pjeIRD6@
zef~v56JF!f4}`^8asQ9cRcf#30GU_2^?>a=4q#-RDFe0-fGo`fTHXWywUEE~-T&~V
z59L4brk@pK#R(oZGYnFmjN(L<H|Iz)J$z(gMPgwo!Ad1Yz0pJ~X(1JfV&exCemR41
z9Z$HvqHzh4sG-g-l|5^sij=v!x1G4Psi`~~&X`?W9U_`hd8W##b7Hy+frz?xenDG}
z!}N*j%~PO89JY4hpaX;^thF7L#^Yi{N>iN-+9Oo+TNFW8=htYa0j;Z2C4pmxKC8+w
zICG4jM}eB+v$WMj6suUo5V8p=Q>ulk$5Asu)L2oU<v1P!FM#U?2y#BWki+#k@=RdZ
zk+^ni3sYqu|MICJ5b>|x@KLMy7+qe(*e(xy9yuO;^b?Qf{le0Rmzzfwm+{2_5N&rY
zYRcu}i9i3?r`BI_bHN*Zc=6Cj4kQoV)$`U~nDv0|Wd<=#mN*%}tmXUy^I17?Q7n0~
zJnUm|b-p>WjROnw^-B3q|K*R;otxi^(enAqOQW1mh7`4CjD_VC%N2oUk}1!`Ax;|e
zh3Drffh`z|M20Gw$zfiP=iIDW^^>fLR8-)4eq-&>>)f)tLCm&ViXx&=LfvUl(-_*x
zlPPD)gqWSYnjP#SsWnpzM;elDyG5$|v33<XQ>>Csey*!+N@&W2DkLc7AFbbJ<c)~`
zM$f5zA=T6-<y|V*iXcqSJtePH<>Uy~6f_cC(cpN7Lg>IZ?N>^wO(Zm&1vG4$kezaL
z#3xHhO@(?-Nn^d~!U<f2MF)cghQpN*kKK_+$>$gf1(sVJe(IqV6wwl1`v3m=$LS)&
z)BIikO_1X6OZ2P`x9<J;SD#^Zkp+{};;z4rlGt2odiH#+2W&617e*HNIpq03P+%h?
zz8F~NrNuKsIe1PP!@F`}xHVt!iv#5nisd4N1I*XvacFKneR}#B|LhZgfN}pKOcpLg
z=uaY~QYV;5W0|rvLqLQzuLX&OCt1~R#dExs&7vh1kccHDsL;t;gLL+RCx;|!m1NDm
zdZqeUx^vUdiP6Fqu@onS07j)k>t85eN6#B==iDr>%ucA%K&Bf}HQ&VWzf=!^ZG!I<
z8B9J-mv_|w=5C^{8M&v5pIwu$%r3V5q1w9?3e+g?rFuoFIfGiENaCEnofsYjaf}J7
zQqsUG0<)na^;sPdaav9DxiSj*LFB?B1@>+n=Q$0-i4!17h^ef@SPQ6BoFRFqnHJ;A
za}wnc2(pa0e;|ps(N!)6&X?k+|NLX|L-#F~{lcDiOxGVh`cgbA`@Tlf6nm3fK6CPG
zJ$oV61Gbmwg%!ho9<srFUXD%XFnU@}3|>%lio43Wp`Akm{evUJKE_9VtX@;Z>h)!e
zjfUw!jyFm{ULaQ_KZB=BEq{5ji9ORR_|)xB;HwYr!QREkQO=Dah{}+{rH)5G5j7P?
zWirx*1t}X6=|RDoj|o=0Ba`zFq;lz?kjqP{th7Yh5R7@O;GTb$-#X*#2c|#op1FAo
zZ%D2L7TfJhs=rfH7bqv6n5pin@qkEhZIulZN*W~(C2>YOfjk|;My;G~6g*6~YMUlv
z2)K+|u1s}Q?ap?8s0n>L)mg1HWI|C2OVun<DY(OR(Su-BP|<-2O${MHVrnjEIrK5T
z@?{)6@R`tMWpEb25ArA%`Z3TqjQ;XiTF#HfL%|R{w~q%d=Sj*G*ilzTmS%!lUp+2G
z!DA>mocFs9)(rz2$E9eN_QyZ+d!O*{d!Skl^M`-raO0+bc{wSvoi3JdJmz}#+|~m&
zWnD7O-@*$kgcL^hc|HdEylikP6vI0TZ1949Z}j4!Qr~G4L&b3Q>O59$EMe6eACu#S
zba<pt%jW~Z8Uc@L9$#GX`238EgR{(CUS_Db93GQQkQB%}5)*yv@czqo;yo8F<EBR*
z#z$|xOH>;tT<*uW)zjmjB$N?|r&CecpNf^k0`*EJ8!aJML`D-#zNt0kO7_)<2fV>w
zsMm9U(#nq40(a7nvQ)J`DI>o}<*QV_P0cG%rg(HhP=`Z1@o!qCOeNEJSvFiHYDOp5
z)}eP8UYkNTySF=Y0_<v7(aN?kWk=P+@Y<kyTq!?D?O}#7XF!d^q25w15xN{<5Q*u1
z_xNxccQ*JV@0Zfg@p$0O<tW&BY@u)kW8PVw<K^>V0mH>r819?IaCs^k?i))7`};s-
zTbVej_*(FRVvfegRzxK}f<L?UZvUo7_7z(Vw#*9mzvfW=Yj@yfwqB9orP=o(uzf3U
ztOH{Cpul|I@A()U%wgiR9Hy@I<iJHCFKip_E00bN7qM<l0b93}uzqtN#-?&{f6i-o
zJQPxtc(vm2#Tkyr_BsCSJj3*|gGvo(CLAr&R5S9fTA9OW-V;E~0KwA|ljUKYx90WO
z_|`4>KVSa1I5az7i20L$Rf+c1pKIH`(Fhf&R{Hp-LOJ#)QR4&;@{=IRHnsh>cb;{5
zNVc8I(l~6sjn+}s<_vYi@YGJCgq$=dRQIx)s;E}dRUoG&tyMNms|G3PvIPtkhLQ*A
zkUwieQwKtYqMnt*Hp7$&inX+o@-{t3f~3jv#YXHP2s1wWzn7!C_L`kR;-4S(-2v`l
zpy*^nYZ{IIvleUnuiST{aD~tNHV0k_#juESp^S3QN9a?CnxfunVz#n?nWbea*evG5
z`X5!@yZ&Ige&{)Vlb(Gy%>DlI#=bG6q{?I78*l<P+!tbeizlb93dQJaLtZ{}uv{D*
zA1PwP`U19Y>chqj16V&<jE3@g0Vj{R>GJB5$7lCBeD}2H&n+=5)i`Pq4gVl6trc7}
zr9%pzOcbRjUYRviC$4Thr!?{YC4r~sYS`4bmVe;NA4~u8=8x<=IRA#nGw(BJ){|$d
z`e##pOI_C8D)8**>Hp1ohDMZRD{hfml~i-R(KRz(mkCV?cvQI9)=#qy>jnke)1^$C
zRJ*%?1{YI7z<Op%G|tjH+FZGIXF``+oT{L<rN6sm$`yWbt*F7NqC#&s>#aUb(_!d~
zgzHE(@x8CaQ7UBW%Nf!Iy|4y&`o=h25;2x4z%xY6pxZwN?y%#rp*}AgUR$Y`PdipC
zZs9VwHWTTvlqu&tIWACp%ynvawVcDd7aGTmG*vIHe=3^$y&h6N+ZzkL67%^`-V?)9
z0ajn+iSal1S?T=#{NUR0p%T_j^<(qeK5W}MAU3TVXbcRMgwJw3sk?k(nen6hq<jAy
z$IOz0l`2CcX3F~!?fC&JGo{LMl>2GV<CG59vk8dRu0gD$tZm(=HeUkF_3-3MjInsg
zed|T<Yy87)f4$bJ-f+9X$IojfCuqpr3(CDnq={s#k%(Hq>m#K;P2z*-y=Dsp#)YG7
zJb_yqpgO7?C-r@H_j_8RZdYDSb(fkPonqg1%ZRI{RjqBN96(|PtF}qKHoB0Z^}d-)
z#RKZb5IQVXsAsCU`ol=+3BDr{_&^~C6aocm1ZLED*4_)9Ek1egw9@&kh51F`sYL(}
z*^3@c4x`0WQY9ekYMAOwf&X^0hTl9l+q3Viy~=^Dla2XiA*JiO2;BiUaK;85F}{r_
zqu07};5B`GaOcQCzq@W~3>()CW6SD(teY5ajE|N@&JTH(c)Zr+eENiRAKeW;vm{C5
z4~<x&nJ}b=>p+PoOG(h;6<YE~opKtyI5n|r%`eMSHR>Gd+%`gy2Iy=VQc3=kKBD7d
zw%J6SmfY8#`|jFj@A>EsH-7uy9?Aat2U0<FspkW3`gI|rlrg@NX01UIup|#iba_bH
z8S8wO5}8zl*ACsI9ddSa*i6W&*T0iH)4imf273Fr-KM2NP#unIf~{H+y<5$Cs}R$8
zYRnbf4YZD2o1S8vH(EtSe{mUnA3PU86nwo57&ViA^L_Hoj-}2%rSt&RNV+vcZGVRS
zlovjc-2~}fo^%iJz7yuYdVx%S!@-dY$}Dupik=)@?PL=dIb!JQoE*5g?Del*Gdze*
zYlg6C?HJZh4#(r8{k1}&1j#+#Y%so1<Np17Gb~jEDs_owtcRvhGqlwwYp()@a#RGA
zCSRteA{mKnW9B^9pr!scGXPAhl3r^gbl4{6>l0sdTeb2A_4UlRT6{2E9bUHMO|@Gd
z{Oo(j!Z&>JSmU4n!Sn_^uRSNJ)+y7OOg7hRZWw`v1`o{*vuYZ))k&*P=r?zb+*68|
zW*lCpIMCH&YUmzRt!(q#x;Sh^xU~feg@~OYGd91bK~0CC+!3IL3Dx4{(Y>aAsBKVv
zTe=&=^B8xH06@+WyyQr($i2_|*y?!8&$XOA-tvB#<(<hsM-EIfk(=P~LfUx7l4a(!
z76of8$6|RU7S&cgSrJ)AEnnX}Wzg~ddVu$R0&MJC0$J!6na_s{0b8@p%htZZ6(iT?
zF?``*sUK^`hp=(g5H_zK!MfFh(eTKipf2dB$=#JE<IgN3TscbQR{;`<h+~12z>Ee6
zn;5apNHT3cI@~0{F<{l6@n$JlcGjcyU`WN*s91D`oceDg#bZIv9P8Q#=m4oE<GNUk
z>KH9<4^LlzwDIWP+TZsFXWzQqdib!0f^X+J*nO5r#<PVqYtp1Ep`t8PZM69;CC5z}
zc#{un&oXEaVo~>c0+p$HngWA%xMWvxz*bAmDs;LMx<cP?c->6IGKCCPJRmNvE40kF
zBe;?$G7ak#g3>0Cj1#p$xh~D=6e#B;267oZ?%1E_WypkeKB3@^y8Z6C*XHELUo1Ey
zSM(PO=qm-tdoHzlAWCC28!2k778+5#(#q=3z>9bDFnU_@%Hxrod%P*<PsDPi-V*h+
z9@V=vkx%~4lXW~gzh}>0wZQglA}pz?7FozA`U9*!)6K@Na>ej<IX-yaV0p-2H9m?>
z8z!)E!+5-EVmL0BN}O@VTM6UUn7K!1g;Kqs1CBJ$5*j+J_)2DaxB(mOL0MoixiD2L
zw4sz1du*?j)hg?v)SIU|+n_3-nlRRWtt~oBbdN4?&LCO`#&zh*xQp3(1skWX=EoMF
ziIcgDJ{LL1&xx|x=hWBN>qIk7#Y!eJg~tS7sbTe7Fd^@ayq~roXtdJ|!Pby(MOU7!
z!)<Fn*9NYWq>s8nOf3Mc9Yag`Fog@QE2JvCB(ID-NHw&^j)>RZ9dR%S;G|@nXdcS5
z<5E>bLr<bFFEHAdAV*=V61jY-rY|0zlV>CDWmkIH=06_|hc{n*#x|V4b#t_Oa4_vJ
z2k<y~ml>E#jres`TXnu%tK_FwR?ePVYMi~W5MyDniMiznE0qSSwaTG5tvw~(>Z1`~
zy1(Tt?uoE?q>05!GpnYpn26Zl%)9G_v#&y6>i`;A&L46LZ1ZL}UHvAWjJzZC`gaWv
zj$!rGI5uurh4pL3qp`7}S~1Ll`P@we<Mjys^sL~`YKB$>#4U!j1*9a*D7aE{P|0or
z9F^E_4_Pwdpk9x5`N77O=5GQbyRKSGONXL%DecG^LaKVwf}Wvx7+_S1CPlP0-(^76
zwlrBrSLa&IP>C{k$Huorwd&t(M||xs9nJpnx1P^lB~L=Q@e;KZQO2LpLxrB?0d)~#
z%^a8ZFQ9uxb-1ZAh3!Iu9#X8<Tn%~Ycx_$Ns7%GP(|@XD!fk7oi9IdWtK1oRX=aL)
zt%|A%T&m+hgPN`5n*J*SHKo1gxx_aFhVlaIH#d<FBxEg(U)r&#-OzHdsXT(~{yxXX
zZanYIt?6~=Ua~w=9uK29<<m=Pcz7`rR3-5phQO7`hy5t$8P@b8-99DKTp<!cF&4sa
ziW(ZcveIym&sEnRIZ<DG_;BsI69+3;m~LRX8le`|kHx4xl7uVwww$GVtC)VgCT3@w
zV!735k$3ma!r7C(yYKh>-6;la9nT~0j|T<5{l;8&+HaTr)f?Arn8c>jCa`YpWHdfH
z5toX2&Ry=NG2^v{@D~>{G#eROvG&H&CV6BuP~_wm7X?Ztfloq#x=-4MmM4RV85*am
zdKTc?*Z)plybJukA*Ez|IfE7^2iF~v>d(?%QKyb;tR0T(yc>aKA|jD@NBuLmUR%5W
z@#r^)f-63^(7N@ZZy%BxPgIJ<loH|&O+i<Q!uHg4%`5AKiMmnU5^B|22sOLYJg>p2
z-B#5BHG2tAg$L75YB$D=ZLk~PE=(9C)s62ue`eh~P4^&z8dDl|BqgMCgnECH;x7T7
zrFs+sU}PXgc}=1fd{yt)OFI@v!pqMpi1WU-YH0P~8!o(ddCkZcf3e!iAD&-PMHZJc
zMLBU?>e;0k%mA+u56^+i7<ZY2&@J#nP(Z2JhjJ;yKwpA$*JRN}JB5&8BEV~?rcKPv
zSNZhe>cr6lt*PUOTd!X@9$|T=iKUg5My0v(Xw{j$t>G*_*b1t9Dq`kvHJe+hCzY=J
z-Ltpi<SgU&3)r1Pz@`r*-z%{3;%jbjnwvgU^2Z0y+`a=BUVdg}-KG)lhun=DjMrBX
z&MhTq#zJ{yttQF%0BNi>@O6lye^OP%GiYH2AG-f;gNgE-EXZgXX!@LXYN&fz`xz$p
zrd~HWa8=Q?4A(YL8JKJzRNYlE1!`?X(g9aTOW%I4_9Q8ub5T#~7#Td<otoGe#Yd7`
zO8)HnYW(ElbA_amrAtcZpNOz3S4H~UI!07gMkRNozpFFD#UQu^wf1mh<JY!z*xJ-G
zVfEas9-GcPn(en$QtJ(>U9Pn`bl<357aJz)-Yun_W{U?djp5R)UizJ>B1)mDPgD<A
zVt6EiJCMMY9Igs%U+9sjC$<M}KOYNj{AoX3_rG>-+7@4N&h@oS2Kl`+RY3(M`You@
zURS&ssq|8}7s<p4@`hC|mYVVj;fbTzVyMIpW><W;$8+!*c;IBb5K83BeJJ#|FxKC~
zrqh#HUM>X+DWs^0S|jCiGpRp)sBz(u$CfTU{L~7jk49LUt7D-$zq`gO52az_k(Rgo
zSe4B^Rmo;&>e+IuR<D{p{QVcoo<hJzC3_!Jr8oaqFWK~K8`hs4Uv|aiwR0}(^P?8a
zFD+*f3mKw11OZtbF(uuc+F_FI&)}T;C{?VYs+opr(FPi=G|>T!lf9(&Pi+R5bV5)w
zn$B2vIBMM*<>ho$MD3j(Dr}b5$kC~mny{)p+_-CVY{9|i`E-U$Ltnia@y%<lOK0bg
zlzDW`C!74pRjH_-M0<U<Nr;N_Qh5r;BW-LNm2TG3gwIyxqx<l;TVlu>M&ZLM=$g@b
z+Vi4W&Rwr{4PRDc`K;I4X{Ty?b2iUr9xD&h41(5l4=N65k4;@f)PRGIZX1Q7IUgwd
z!04(Pgxdnaj>G9)FC5g0{;FWyf7{1hF?i!OyRNEjTYHf^yWH?wS%s!HE4b7}Uq(aa
z)s1>>X+3C_Gsy&jEgdt|eBsiCQ;j$5NI|7cDnfR>>3}soI5T-t&!ZtS+;=iJ7iK69
zw$L|~V8d97O_xNmc->SgokT?S7MAB@clvO1`|*7%+ozwZy>H=Q3v<&AEG<{&D{}F%
zdU55xs=Ijif|!1|iuu_{R-5&xCK4Ke@vLLyd#x&aiU6BF*!%olS0=UoU)#R*qU8%O
zz9xU=J6T9$f{xtIkW_$HosrTh7b)GVHYBCFue>BvjnmEodlsmvlU68jk?lIA_Q=|(
zX3na15y1jmcMk02P)|KHVU$w6FbQ$}V*4!BRF5v^gj!E}Kp<m3O9Q7GMAGfpS^k>^
zVf#WRQ}|iY-L~oa%0rL;>lMTPb?=^zKKapaM*-o;R!Hw!vKF{kpz5dw2m>T-a+qEt
zL%da<l%{92y|uOmTf2imNrGGK?k*tM_3oBJ>W0fUZLAZjYo}3?XQl;zT}^*c%?W05
zmAbboyQJ5_fucw4XfcM?)G;S$yrJqL<u4S}3f`(<#CzA*eJ8)`wdcL9Ha>ise{i;<
zd4Ht+X4=Z=GC<Su)B&X$S#=JT?j1pzB)Y*&A5Z!?rG8e5AXGJ%{-*6v1E94O6#*pm
z4?C%cY8+s$l81LlhuVRg@mxOfi-QSDqp=ttjWKzqh|akp5hx~*A`vUIEk6HDeQ^4z
z`c=oDSiWk0Uj?&=Ygk&UHL9)JQ?;<NdpW;w%PfxFu_We?Rno;qy;)Pt%#-&;Hyh#A
z2Xv<Zu<0W^aECoF+xpL|C(eoo3)kceg9#s*bnws}Ovz*?4GJ~&G;^ALsbfrYVm&K4
zMes)H6>~*bPL8H7Xmsjm{8J35Ne^Abc%3fp8aGF#+oFs|)kYapJ?)&G9U_DMJe!Pf
zv*pcFboC~H%SZu;4tnds>CbL^l(c$!fGCv{IoJ9b;Be4N8yGB|=C5CMZsVCF>4!`H
zwy#v<$LGIQzD=^EBB{~KNrcn(h5$x$6cnye+n2?7ePJL_)97jr^|n}~Zp+ddZRSK!
zQEgX&!GxLGL)Jb)XAkM^w36XnznvNA!a#AI;}CC6AE}bGDBHlMiyj0Nv@O0b(dPlH
zCYx{uGhj9V<-XdINY823Q(KoGc5b|>oEzTt#`E7@^ZA<a_~N2aqMu60PJgE5rO<b%
z;*<T+wd<>H1a4|3tR6q8X@Iu7j!7icxUVL8>9^2l(engy6ymz7$OB}mCzhd+F)Y_Y
zxQ#q~8r&=eO+avSxfF%I6#20jh4C1J8{>4-g*=rxCaAHmIUn))eKmh>Z}ps+C#&a7
zKfUt4*(1wXm|seln=8AQyviMOa^@>@^7w-lEY8)kN~_VVeM1<lf&ZHoE>1l=1%ORk
zf$zAn&s#IRdi1*5%+f*#UdH?}2hC*~6-*}vbpz5^wXP(7SEgQjW1UFOkT}}QYWh{@
zBswW)X2Poug`*8Wnl5X*2h?jF&Y6-LGk%E?OYEB6*~!G)B7&(Q5QEe7MOxocA22!x
zW#}Q6z}r5QPA2tgFUvtQZt}IOuM+ds!$PiH`RSH(;<7kfG?dws!)1Y_Npz2tD<Ly5
z5-y_>B>5HA{b^?v^}4oIIBaMwyIQH9)kkV{*eFk?Tcs3mna@*hb(bgCReU)K)Rb37
z)lm(!>Rxf!bQnslRW?LbI&w-~4QiYqX{JrCt*ZemQdJrBb?mv1K7AqR54R1K*|m2L
z<R`bh>B1kXNeuXNwI#v0V_Nui!@bV062Nh!s(_)lgY<dnbvj}d@KPwMc9Py$m6vPx
z$>`9Vw0|ubIZ+D5I%h~To>eN5@{2Txt4&y@>$%XA%v6QhMWyM1H5i=ZKtP_Im-1W~
z`&5O^kEAH9&SUMmfpqP8B9$RE!(<{}j<9&3;?C}=oIU%*!r3!VEd1n&gNs<0Z!{L-
z+T-)y+?QrC{pDFX{lro>yHsf`wY|DmgGBi$0Bm${2JkWVf&S7O0a0{QEaTYG0v4x*
z()L%=ux)ja4iv+gvSFlhDQq&wcn7))cyf`T4QgGCf9t*JmknrG+J*6)+AdzV_hv#=
z&4W;csdf$2ewI!xbuQ$Z24cJ*^1e)WK_`5+>)8chCv__*r-Afxg*{(Y<3r-OTh_fc
zdhoHii%0y||H6sZM}GI@)7fUOk`}cIWwghL;A&|Usx94ANXaoVDz+!7-nIv~*scS8
z@ldC*^4v^Fj!uYbki4rB+J3Gb>Ztw5x_E4KZj+~Fyh%k#A#cshp|O=w0yrxKOhtoy
z$S^vPU}%g6t?G?3aGpM&@N*=;YgGwXK3>Z8m#^FT!?jl0=U1bux_D?zRy#+NkGnlj
zdx0{arG__{b_mL;(V%OZilslp%zZHLRWnoV)O%HoFrJ&F_b8sBpbH3nnL}SrAg6^q
zmB+2BuS^P>2TQ-3(t>w6Z!s6u*n_iB<ld|l{*w}(pK?DJ^ISPb(4Qb2b;Z;~5mRqn
z70Vxpg%DZVoNKy^PcDSh4=?UIv3qvciM@-zIy=+E@kaHDqs9489~Mvl-TunMPZ7WF
zR0p^3GO+1G#6ixHl5Y*%A{S}KrEKBA(+!-lgC>ofJgL!!NK|^W$^Ev+WUbA;un}2j
z1e`MK(<xWUvi}W_%y@t8#JvR&wOm)F(;%g0aTsq<ov@biYOmBbI<c>7@KE_0Rg`4N
z$S<<-jIO8}CU1LoO6M~z2d>SbqqeUI1%I`_dg_AOfkW}{^!pcnaxuDd?>B~|S&KlF
z<i-_q-}1<8*4}tRW*yr5TYZxaJ1HO3olCRNn?2Jm9JFf&y0WaoP(%MP<EYF+C+FK}
zX%%j&s;#bq5|{~(dS~_Xlp9nbw9T)%)K15+dc1`omjEdtp_L!`c4wakwSn;Lu@bI*
zs+{ZdUvut{G+JrFZ^TtKFh&ECk(n~ym5!FRch%0vD#3KaZZ`L7z%~8Wc6U;4PG#LX
zz@{aah!fc15z=*1fu4x~R8^Qs!KvDBE-<QxRy|LZ3gi7z;UcAw)&QL&kUES<Ov24v
zAsarN8i#X~mdm*BrU>&1@&gIajmK_oRUT{39!b|+MI97Kvu2E?1B>p_yPrDa!OuQ^
z#)J2*{pHoAogaU=^|>FLsU51E%HVbicx+@!dX@5~G+3N8TrqQO2?w7pV#{_9wIv$M
zq!l1EK4}o>WVX7<WbLAX4c)ZaM=F=qnecWJw@i6Yrun&3k+fcu_0mpGq_)4ijXRoe
zri641@M_9cr*(<EBsx$vzm0O_Qd3pPfm7UJTfAsHr^fVZo3vqPy%<9jH?V5_GIybJ
zB*tR;sfN4%>?oZ%Sp|e6kqIGL%4rgl0yQ(=&gS^+uwvy!k$0%xPBjg!nyZR5x=&OG
zXFBXOl~En^Q<YNp##;4V{R`0ftJXxZ11%@S=&H5bx};EK4h3>V?a&jWRLhjZ;Zg6X
z^4Ro#)uE_B$&pw+PSR+WZB6;7XS2AvO@n^HTUX5E@(1!kpMS+U|1OTRyxWW$YJ!5A
z#jLzZ1z;2jb{?yrUFSxXhp9(>wY^|9=7G992+V2P80{Gv8g0PJVmj?OOLwt-uat+Q
z3TvB!Ll+~nZ`5<<V&V#hjJ{igqN-%rRy0=upRIB;#7vTMy6U}EK<WVv8e~KB9U3_}
z#{lnPfm|-(h2aE+Rhb`dC}QliVT^9y9H0F|yV5H@_DK5CKRWa-d9ZZlW5rLMd7`#=
z?o<W0=Up-S&Y0dI8JZbny1Skb;W49PCnQ$z&;xTwQ;y<*K4>)SToXduDvh0w(SLUT
zZKo@B<<czOs?#>r4rz^Etj?(^Wd{N{^_YN8wC_87xQ^bM1w%TitZ<~w16mTW!ZEiq
zphPvH6UbTespW5(Yq}1m^v$j>0ZP|3-{j$F5*4YAFn80s>r>AgIHTXW@)ykBYVQxj
zOn{_$qvY|>{<OKZZja4)0y=~?{h*|^Mp)5RxwL|iRG{Iir^9-4oi%J1hP&RQz{}>?
z?XqT{w5PyZng{*#G{}X3%@gWx-HD*RHX?IS)9Y9{#Ylf$waDpp)L+29Y4yN@+WKN2
zuDhcY3{PEh<`2bjl6UJ-L&XpzZlG=i9=g1#a%Wl)fjUNP!N;`AnOvaC{TW&c<=5y!
zoe;GnWk@rcOa>&WzENLtlIiEwGU{Iaj!4Y1Y8mw$)Uq^^(Y_YbOj-In1*gwXQmI~x
zQ=nyUiMhq*M!Zj=N<~~hriu5Y*5^o68N+<+<Je3QhaWBD*q0nEeXNe;mU)h5=x=`K
zCE?Hf)RmPjQ<Gz>+-q(x1vE>oL)|%*?7IwXWOR_kkWT&PO6{mf(t4`c+inZ<v(tF=
z!3z2Z9r&TTiV^Wv5m*gB^W+LZTj0#b3!O`&t~KcjXq%DI#wH71)<aV)eaqI@j}>s4
zB7y>5J&&7i*0a-U9|quTZqA07hH1}e{cT7^Y;`-sG60xQ-K|E-M};V)f<YNI)3l_U
zCfg@%M{kz!#^Gs}BJWN5t5;vpaOLXX>I*L1qW!<N@EZ9JY789>3Rd$oee&B0ICLUj
zc}Ny`&Ad_dR+CWDc{S~=bwW|&adnEnIviDUL>-2dmM1drwaa!Ba*a2n@_rOcP~2sK
zpZ1a88N;WV;kgdGXmHEM@h04WE<WUn(kxZiHl^}!S}4eE9~^StzPl8z-*NHw4>U5_
z=hou7qLe7FS%H?maM0h1kJctm8!)5az<6m2(0u(n(t0YdjdnNzR~L{GKq<f?u(BXU
z9vMAW)p1P+p&Q9#sn_UlNw3ooZ4J2Uu>w223@uBaMc@`^QjjW*{rnbzT?Wz0AR==k
zK#NnRKrf1+hD$2|Oo1qqs3gE_)yJ{<5~iOTfIJW(TaNg`@qzr6XJ1-zox+wOZ^sQd
zMeURTHnK?W|9CSw&X=l>@z9~kOc^{U!bA5S$MGX6N`p+Fe9p;U&B?%KKhxyG1nHp>
zS4{;5C-s8b5Yrr{;@RNV0Xz*>sxm6NytcMSXYP&HW&zFS%rf&Coo)rKb*6f^jZy{4
z?a<B38E|tb6jPIe&FCn7=IgD}sMGBeNu|?4i#uo~4NQ()<PHpNOv||Bi-9}t(R6e&
z0g(xrAZ0OUA;1Fz6ePDzVT(!76MwAjK^f|W2BMPztt}kc&0TA^Tj>b5tpuXy@U;_u
zR*Kw$ng)8h^k|Pvd9uc<w1otfSF;|a>Nb$@s4p`ov2KJKfz1LG11g{}A$$8sqc;l-
z6wc@$@!tGo&L3WT!S?qxfIby|5*jJsupYA20nk(-p*%HHAkaxIl}FH_GVz@Wc<BPA
z!hE`5D{o41E-B@wMMw4LQJ71>L)0a`45&!Pvy5|*=_!B;{45ZvWeF%dkJWR6k>@4|
zxX81lT3e#MInm0bXbCA20=i5Cp9VXLSeWPN{YsvT6mEc4iy>+P&89@7B|(($igdw}
zJm&9k@#S0USg98Lslio(WuxzQX>fHf6#ZtVGv@Vl|8$Ine>lE$Po5!(9fa!OX*E`G
z%S|)LGLBpyT@h&_xH;jB<W9#E?y#gNQ)4~1?!tmTAG>l`Cd|-zITbT%3Y!Hl3u@io
zS=Zms_TAdl5DRAZK&H^e9@wzqiasfn*XB#OA>ifdZw)e}tgYQBO)W5Ot7bcB^Xv&o
zCo_S(UM3ZsuV3@}nDg@bA?NzvR+>I4luc3<T0?tmM2k>BLExq;kR;Y<z{GfLdU&y=
znLhiH)G3v8K&>nD+0{v)a&d~DU?8JSpE1P*i{B>cZgYUzb2B#!h-Sa}o}<)1Rt*RY
z=V?Bu3q}Dk`K2@~RHR)UBD575^8SQB<h<?<hlQi(ZF_Hnd&7QHL|nKY&lshth$?8j
zv~Ew$3W(a9V%QolErj~*$XlcJqO<^YzYxJcQ#bO?v?oTNsX|-2DX`OzHE?Orp^!66
z3FN>#AVwY-y{0`e0>kdd8Wi<sr0VlX6<CL%I(*gNqrpvwx*G6=NN8ON*ywpRl90|o
z@-!Km5nV4N8Vh-R_ERw)I6jSIl_t;o!`x$it2y(#DnX}?odO=4HVTjG^3k7*;womA
z9zY=&RLNG?Y2nzx!?^p_MHI>|f}+kx=^k#Y-_@prJX`F#9iAF~t#Y@zXdueBQh7Dg
zc4b0Mg>DM4)Cs6#L0wqrfR}FFGTxdETiao&$;+8M9etl3>t=cg=>#S04ya*}!42si
za0?pT9D3f@^bSRPwIQ`hby*Z3=BN&hwCh7&TP70Z{Z;<zRTno95C43hf5|QlE{-Ig
z2Mr0P>xMMFqBdWp^v_(Q`q5_hQ!zw!1sNun$*q~Uwg<knr%!dbYVG`*8MborMaaCz
zP+;2LoAu7D$JUki)1I9ko=oe>-ApaBc0f=)1Q``ZNQ;TMj^w~~Nq3Xi8n}bbnDf?u
z;i7cLxu?CS=6d6PGi@r)TiY8`R13~i19A%J=*AsRp{*)vkVi`wgMh&a8Qi?~w(0j&
zgj@m~l8kTZ9%c#;QyY?+V?cXb`knxejz0xb<UJWMqW37kq8yq9Gjr?C({;d)L8OeQ
zCf7#y`li8-yfWp@k;i6oafudFC9h5`M<J{QIkg@_pgip0mb((%^6*jAWD}J{VkJ%>
zc~+6CBBD+-oJw}eR7I87mOMS554Zlr@ul3K6?3a=p4%U`;uUy)6T2Thh|#G4+s`WC
zM3kx|F&zwa1ggZ5D#dHidiFlH#ew!~x)NXj$5uPP5umK6*5=LH+GyKtBFM9y0k+ps
z>+rYfAgTe{u!MygZl?}>#ZMy6Qa}Kyy(1cMj)cJ{{u8|z8CplG6SS6btSK+n+11ro
zT~aWf5_gcKO{^Nb%w1gBABzhAR1iG9Ub48!Q2;4HkVmApMt72{bs?o%m5e7wsCC7R
zewx+PZ0FKUHI~Yk9igXZ6K=cA>>IlmEtuJ!P*oXK0IR)6<*_NE7Ihow?5LW1N&xJd
zo=nM*cY%RGq8@oD=3F?08iXz+GRbprctE}{a{j10>HXkGdDj1?9jCve=7(#-MqE>#
zu#S)E8reBV)mE9DAMF4gj&~}bDwjqVqMTIs2&AB|6)g=c1ZpY-O-vEV<RMJKSnm?c
z2+}hj)c5K6t{onv;>FQIred#F!Q?Jgi<VVjH`Qo$A&{hLqBU!DyBC$C)%js_w|a{e
zzs_7#nCc4C#Br6oq`aQQ_!P&HnG~P?>S44*9X|8X$kO!K;$b(Ib9W@!OHhUSe(>1r
z*{~Sj@)s#)zH(stD>P~|R_P;EQm^2)o1Ve!ObY{}t~&4?@`4pX>RGJ>I@GZxOe#*9
zwklikG*wHZt)~C(cv>2;tjA?5ocizfKNY6hd-@z3km}F0c|2*7a=NHWt{{a;Hm9Nw
zRJz*Jws@iWn>>Irfu2sB)5#9<5>y__x-K2%2-{~Qi6L)W2-JZIzG>|Z!gmLz27|Z!
zWxlv!DwT~iiW8nu2&KYKO@?h33kXQsZB;6u?|4+E>Zu*5PEkP7F3bsNy)|36vF|fk
zJY5vE^a$O7p%p!hw+PBH8j1(eJ#1)7`$4UvOQ{F~K+Sm=DhTyjHFJ>(@<yo~>43Qb
z7^k=%Sw1(wSLNUT$t)?qee32MYWe(@upZa6$7_T<_04#`=3cW^?5IS;O{3#3v^NQt
zelN;bdN$OPB90-_M2aj`5pg?Drt)bf*`IY43CQ!Oe3~$Mvi5saQ9<7*??xU!dHbFB
z=^UK;UTU5q&XhT>1TAYSyXrlrKw)!q>Nr%->nf}bducg3dI{7DW0W)G_~fUKV|soT
znatq(dCXRhVZL^p*TtcapNe7VDF$q0w4>{?mfiiHD49-=%-@Q@A5abtg&=Wj9-sg0
zVRb<+lr{g!Qb0PUIc!}{l>w(Vy{W_IH=d5Bc9?sUQ|r#XsmB%s)n}N|F;;X^C8@Os
zX+ctlvgZBjK+~UT!_iLPt3GMNk`6(=g4FkA39pYq&4BlmLXP&YpH0zFyUlVnbSNt6
z2FkU?aJ?~iYVxvJMEr;I?gf9Gu~w92Emtx5ZFQEwQ-Pc5#WX-?`B^6sN{y$XF71X*
z-(lbDISD7NmM%JURY5g(PgRHM^EIJW36)EaB)(avv%pX&+Bd_^qSpzOU5{b7%#b=9
zG2_TgHI!T!>Q<?zF~V?Qbh7xC54IZan>KH_x;8LyX4q`i)c&%H=iT&T8`j(WWxH^r
z=KOW#)bf-zVBiF7fuVL#-l|2%sR<L!@2h@uHBZ(8m0nietD99|*MDcv%DWLDs>cLW
zreI({N9W!QXxit50YlL_X4?R1zeiPC4M5uOHAQ^-+v@}RM_qjJGjn)i-$8)4)N8Km
zq<fD)6lQGs%PYy#dr!qM^b`t3t?5vukv_8!`m5fyQuRMu&abN#ifh7Vv<%M|SeQMA
zuYM(uH{CFWRx?uxQpyP_ov|+ZhG9?|>#+6pGKRv@b+dUhn}F*$ekaLPc1@JBA8iu)
zrWew71X#AK>6B5!g;iM5A<L?hfbueQK=}m<C3IgPCsi35jzo>}bkNorL?Ss)pu!!M
zL$XQwOh*$cl(UK=TEs+E2jV2c_~1pn);JK)FYdp>L6}l|wkjTwsJJ=;^hrxVq3Wjw
zM7otD+tdvEx21TPkh=SteNtnABI24{sA+*x0IXa&tuCUuU#1$WJTmQ_QWHE8O0Br0
z+CMHpic9o&!2wD|pd}e%I7l)FlH@W{fjCOtT2hOBe$Jma8uh95>#mGPM=uWRaf5P=
z?aq*H^0TU#x5G|TbT^lN0$fmWfPkzBP~o1^2viAG`BQ3mAW(}a@h;V4)%;)@AZ)L%
z)y%N7G1Trhvt8B2gR5(xK1|dxV~M+Zf2r;_E3ROM@3aSR6L2vImxL9}MTSC9MWN(f
z7bQiQvJECWtko1Mqdbxa#@D&H`|HcN?e2ZxejRa=VWiZD!*dUb<=Px?cu)L?ByD_K
znXK=oonjsvnFgTc<gR~9otZyAzHoanOIIS_^&zqhf#1SYk3WNZ@0rKgl%qVFHqlgB
z=PWb&h;5+DXq<`3+K{M%N_ClAhqoq)<xM$?&Mbm<_}USqY*Rw4H~0<Sq4o4EWki?w
z?Tx%Ob#-r22PeIUA?Rc9i`sh&%M3m}9?}H`s=C=~sXozl{HF&5C@08ta2a7k<&ki>
zo&(p-uzk}Fyigd9^^6rwc%@L5@-M=uXONfVkw@YgYKQgQY_!{^XS9bapH%tOyT7Z$
zqSGcNI2VFDI<(b=2{S^kE&FXeHM4!TfI!R9g-hksOkZe_BTts0M64igfK6~D8FA2b
zg_x4=l7)yGa$>`(3!{yzujH+yrDjJ^6`5{omY+$QNlDG&y5UJ(Gt7Qff7AY;{htHe
z5&;`i=>j(|l?SKDwK0Jj6$@yBtM;^P*r+`yiVCzxW$*Pe#(Sfi@s=oMp{twpn)cER
zfme-lY;)Y~drVlW-kX6ZbUkc)b%qB=USHSpmSRcACH*S)7?r-n)J7M39;@TiU)Y1p
zSw@;>$ay6+TMO~N<B#T3_wX+)ws!A7RYC0(1vYKOw_3`+{&N{y+;epHX5Z&dtW*|2
zN~saPe%pRL{Y(vmBQBi)6v%Y)UxpoTz(#S|GNHk$!%s75I7``JN<WJ#U%b<8a5DK;
zW>V0Nj#8OY<f@;eh1CIS@^Ni&Ylpa|USXE8A%>u`I-Lv+(wYM(51SiM;iw3TQiNq7
z7zTnNz$-HF0yqm8RoJ;b@uk{!(+UQ275AA6lfprc!k`20(JMu)o4S@Nd@7Nnlk=ML
zr9v#_AsGO1sj*rEiB8&^^W3yP>9KuXz-BzVZa{0(J=(x$2C;OPRxPpBvh^*e&V-s&
z#Gw45S|_zWrno_QE}Cyp0H__C9Na{K8})V)3VGmu4w>M5aOli*-Rf(2t(B<Ku5MG)
zWnROs>j;P%0ZZ*oYH(8|W>fKWOOzha_imY<XGo-~JZkY%Qw7y|E)zmh3c@IRbdHUa
zZx-w<;H3guELDM%2~}-dmH|TzOu8bfQW{;Mr6m4lS8k5@*z{R8MAZag`YcuJrVG5O
z21|@>^l<EG3m^N$9spZFq`$;sL9rEF<|FjH^ogT)<x{?L_gr$@AG|Cxa=w2;(UZNl
zL@cFManCg@&L2Ipcvrk?=+d+nuc#I{m#yHIoA=>{*Kb4LfRDw6RP%yV^;umhmEeRX
zS#~$Ick*CuqOPfmDwtCmwe8N(PB%hk2yV)ZR+(UQyqJ)s6Y8oZRAR6z)KPpBUFK3!
zHq?hm4S>Y_t^-a@!Y@Ds{XlV)p;6V`HYgUmc~6ZYq3>zv15r^fh@L?lIHDeyu!w+?
za^tO<M7^0JX~l@53R>ifat}!wDYXp6pHn@TrXp!_Ui6u?J-V<UPYN5g7Ntp~)BDuD
zCGd7g$n7ez1vV?4Zo?wwjoB)rX=?B43)QV=<ZTKHoZA!>Re2ONW>1HQ3F(@tVlw^h
zASL(8G|Fd^Bg}2!)yM@^@2ucscbAp@Q~i2Gt)chYb)@z!@{*}YP-O527~Fo!g%UBC
zK}Mt<B1Ma)o;CGFiWHq`&W3K#>+~A88E|GatGyuDeW%t%4;WI#6_pMl&syy`EmUe#
z4Tdajg#~ncY5H0-)eRx3F<ynUW>r)=T9Sa9nr}gmiOQmXa|-JTphwqm)M^Pn{IMso
z(wv6tQKFDxpgbU+Jn>c3qnT)h-+Fx_s?U<eI`!-n1vWAb6xC$Uu^^myYg$b|8Tx~j
zq0$*)BVJZNNUgGfTfTk}*Im5@`2yqBL^n_?HIS|WES+j;*MMSMIOuMPvWinD<=al~
zKecOS$rau0S^68kQD;m&Z&f*z%b*JlbTyYW{;wqwRaE%Nn-wX7K8f-Ofg6L<)M2P*
zcjyD00LgV3S5;Fwx-+K0F<R!REdceU6s>w4t*nYfRuPLOw30fKtfEeWlm<f>uSj`#
zCig`pes$8B#61B{yK35QR__3o+Ac$1unpqv{A3sXL${FIHnEO85`7PmgO$f<E1~M1
zLS^zGZ85`CN9~Qsxdh@$n@odcN*6*RC#&$%aJR^t%93^;re62<P>QY}M*%GT)3gf%
zj1*>a%A=JS{6WC$2ZEABK-~o@p--L~k;rv^O@*MeGN#N*-oIkh817^zx2B^Cy({#3
zSmh|I>(@z_cDgZ*a;h3cty=Gd6pFH8<lX6~Y>PQCy^h+$)|z`d7pE^y%DXr1ZnVz*
zYk(l&`0zjO$6RF^fhW{7x52_F4lUdl&n+J;#_nSm)|104r#h&e;=o3x5n?gE<5Qzv
z|NlKcch652f{~i<_J>hiQv-4jA32P>@6Y4HovRQvGfv@LTfMg3!qTY*b$11{y9c`I
z9_@Jtrr*;_TH6AIY00wTi`BlTBtCQ0sc%_cCO>V3f5^kq)it_Ty3yoeQYSNKh?_uT
zNfL3EJ2{5owG4g3K)oj6wRGjwqj7RgBA+r9y4IID7G?x03lecHL)>hj8Lc2nmXL}H
z66(RFaeMUb(go)^FqTu^9yvDZOi=PaCU-~RMyHYCk@1%HM73z5x%}IX+b(G$wI|5i
zGySlpp-uf?lX4B97`-E{S7zoH&^>{h0X5~l5xs+YSxrNQZnHAV6)xZhKoFYh9spue
z5#>+i*(k@BWJp^S`a5v*F7iXv0B+Wl!n=gHfoko{A*Q#<CghcuY>Nd23AbOu8>Ad4
z5adbqm~vp08wH{&w5JxEP*Qgj=oF7FyP7sLtMO;WDlKrSO0x0r8D%x7n@-cr%+A%z
z*r71$!*!uRanzMesR4K$B}mcM$D<2_*5}eXdgQtZ&Z)*in@UuV(x}AngoDrg^Kl$F
zaTGrF+@=h9ZxEHn!RYYZqebS;e{d;z;GS0lsJ#k+O&c}IFQm8qr$PSu^AApcZP%u$
z8zP4VZX%lSycQmR>}lll0k&@)0TFqkS|`3}16;d>s;dgx1!^bJIl4noTWMuR;L#Ey
z%}GpGyS9*|S>NuQl64lfCuiInqxM0ARTL<;bTu$;Ft`;UDgccdFtG+0=wqm?04tuZ
zye+OUEFT3{=7HK$f<~>0s9r(bT0tCFkflv^hAHq=?oH4Rs~ID3%R>tHq%n53GD-cH
ziYQEBmZRDI)SaNb7gEh=tLz%-A%%0@#ALnGEwxbX1)Ec|L|l4o@@fQT<ef?4=(W8z
z<1N{N$yBYS6W<mxXnv?_Us7(G`u$WWs<~X0SJPvn5(4Y8O1{@BnqlbYq1*C&$}^gF
zC(4UOngp%FI`UF!z4A<P)Z9M68wC75Am2xwFbr9XBduhpFGG84)a5`o-Os6=Fq569
zkEDW?m3dM(Gwx7dC+$!gGhc%Clc}(4y|<3GLkA2yKSS0&&h7DL1`8PgRUnw@?iG-_
zggMTY-W!3}pupq?7hn6*JnrAU4{ojrnF;t#iLScw)6;hr9k=<(ne67@>>h4(s@tmo
z*i61HTSzMIt=AUC<xd}+`*Ly3=o>{6HB~{tacX$rfu~T&hgdUSLQEVG(l_g(YqSTu
zw0pO0FQ@7AG%Z!_eyes2+POjrB2}oF1C}<@k;m0@INP-RHoZiLV>VH(KcvmoH_8=3
z5eTRXN=a%uc}Z<y5oq?&C^;a?F;r(IDlLX;DzTUV)mDaj+CVF%aI>yzy{?-VG;mJR
zj7igVZ2{QsOGfb(jrLV!SJU`TfJT3-kW&gu&{ID--BT`36&ReZE(PN@=%}uXyVmYF
zFyWQ~HcNXWDuc?^JK)+w(_tv6vaJdSn(AR&sr1BmGlqe_Un_?z9vJ~HA%&_QQsSI3
zY5+$psT%A;kW1qAq0(4FD?JEg0UVKs7X-)^JcLD#uuq~es%abKZN)KD{heyP0|{Pa
zaH(+9r;9qO?Ty0PrsS15hKMFe5VfPFdo@*BK^2osk1!)Wd&~8cYF>ryuk9QmI&vVt
zODkI$nJ9DE+3B`=K~qWYOsiFlO+7Y2zlqbgGvj5e<Bh7rnu4URTWTbr_AaTaJGIHh
zgLl_(%UyfHgSuiKIPeiVx%A27UknB6yBD*syeG*{{k+<%4A{`VMm5vJE3UiyDm2(*
z(~Ec3#`-P@o2^BCffVz&=iWWYU49nIgFY4`l6W&$GUIXyNhiFif*J~k>IYCNNL}1D
z`?Yk%d=?i@%`4D{Zl_08c_Wq`Wbx2mi8ZA_W1t2PKhG7Id3mb(>BEJ>qxu|2d_sWb
zBuW!H)M-*^O}(QfhIkoZRE;Z1uquP!@*%Ul^30MbQfizOa;gm{aAQhAO!uYIim9u%
zr?_6a=hBE0s%cevz_Ie!NF2lTYAPy-l4;fB<GLlpb^geRCE8r0;kVh{qfR<ibWkT7
z&7d(AS?#5%`2?n^oq&#jOm`UA%BWp;2&L$uNV1F);qA#!X(m-<nF2gk+Dr~I>K$bq
zjbs7K(Tt{za35}3h93>UU+PD2q7Qy9M84>vFaU)80>we8D$pSTT1n^bf&xcaq;1s~
zz{<2lV^Jb)f@iUsoTk+~$bGWPF6QE?M(vpkrQSz6eC`mL^~F(9ybX|<$%1+xsxZ=c
zW^J&enFwkSkqt3B$FM0fNE-!fi51O#>l!XZ`)_QWi#@v|eC{hxL3)eY3l|)@+@RP$
z_f<60*{Fisu86X^_}dTUKK1NX0&HaZvQ<qV-W_-o|KC#OvH#(FrCK?+C2Y2qRD!wQ
zIEs7j3vtzD+th)&G;6M$?aF8e)NDRY(L0`1A+=XiGRsUiO5NscR;RX&vq-f<lgR9H
ziq%Q7)(#wx!w(qzkip5>LV!RP0gX9F<;s#ILnJb^WQ2rfe&#re4IlN)K~*sHt*4|l
z&_AJhM<t>ZG#O;<B1-~wLQyzGa*vF-9GSyub|@o&v-?i5{~hJA(ZTDPT$0t!cN~(-
z*BIs-kIf;kh$^xKB9?DvE1D+6*IU||8gCt4tBT$|{MZ%?bQcAMxShg5yCQ1A%+5P7
z#AEI-?$aP*Rn0YX6sQoQonSq-j&73ZADYibR0&StZe}JYS%MgIsAcnt&*q8(JW)oN
z45QHML$H*GTi_^+ON`_gMu&jD0qSz0>F#<m;_@+$v@SZd3(7kxa#(u+k8Z(a>Kf4n
zP>Lw4UQ<O(dqFV!PJx-q$0|=$d3x;&l97D2;t7tDjAPG&8gn%fQq7RD@7G0(&QKt=
zPF!MaEyvt!3!nMY6KJs$Dz{2rTsa)U@ufTCYU4n$iHFauCx;eaZJ_ol12(h|lcns|
zKN$Ajc<JoY9XEPTx#2qlek_(%j%aTF0PcS{kDX_3L|DpDqxtBT($PiXX!mor`{Fyz
z?rpgvDvoOf>ThU{wmA&b!KlDY9i}8-?K{ZjU4#X$Jd89Is!O6iFA)(nfK*Id31ZPe
ziaHWB5R)7Q5%T;T0u&&Y3&8OZndc(S0b}cdp<%<5B2mBriKOljunAIxpb#!o<W%z3
zVpD~+bvE5cMmaX-bbw9zOpAM%{2GB8&F7@oQmgP`IBv>AYHRshe79`&PGgcjdAfOR
zrZHRfx_0tw<XEa)ngTi7MrAm26pk9*f8{|Ma8x3rt`rnaEANMrYqYKu9+JnVK#g*3
zT&Y$l)ecH4sf7vDO;>?o38%;qixo7o7OGhlMW-J*zaN4Ja3T&j(h}QI&2SQzf#wlS
z>&+K{hzb!@nWfLFlf!J}jL1JE4^AC3M)Ae=9Vk3fA_ziFt}#~uGgGmhpVJ)$w9l2u
zff=f84ntKq(7NbKC12sbx=7mr*t|VK%oIkf7fly|p(&1LB=DKfJ%wg`OnK~-V=RT^
zSgbuBEv`IKO!(7pS#CYN+Xl<8HhYx;8yTIz4Y{1&^3Hzex<{rLzkb@P;nzl-du}R-
zSzg2bgO7tc70%eW8cB|d2^~MI3*JsH4s`VmYI#D+LrLS!*<4w7Q9=_rUC)K@d+>8E
z{Ls-Sts+ed)R$v4Y8h(P7NS;!M9{5{L{veAkBp_N^@(#|0gmhE)I0-`q)4L}wMFeB
zv5<ktx`Sg3gQHO37}qIrO-;`XY2xW(gvu`^3YjS8ld9}W;kN-cYC7d1n4o(-Pr#9q
zvT}kz#p4VfqZzLn*a&dQvog5d(M6+^#yxo)pY6U<>tTmTn|z}hnWskm8DO)0ukD+n
zm(V(J%Jq?_sQ7hMrPUsa20bMiMC}Ku=8Ab{u#d{IX`It}Hs!d0anFnb)%*v|_@Uob
z$GRk6?6`rtm^fhpGFJdE`H*>zq#%(Nfokfg-=w)LapFEeE-|<ykJO_0FoVMd9GWFS
z0tSKMpJa5w(d1h4=#(dY(g;TdOgeSZeE~2pwmmHMd+Ko3&fL;@O*^I8)Zi&~U{qG@
z5I1hUXEXOyU*aSRLtI^aKl_EfSgajU^H|Br&jo|1wVsKNFWg(q`0<~gi@*M_ucn;Z
z_W-bIpP-e^#uawQ#btKs)3eLB<;RAu6q!i4ki=1#$DXI}N8a<Xe$^Oa0*XeLJW+c@
zihbOvjJ7l0-8D`<E>q>psDIJ*IRf895PC|NpI%MU47HUOnvDceBSy2;K(n=iB&{Gt
z6)BoZ_|P7(G);x^5Keolims9pAhI|^%&CzxL(>(g9&wN(VrY&kbHLyv$>J~+2;iDP
z8gXPPWnHvVgD{hYSxUeuz?8x->8cT+1zcv-u3%^tQjc$=N~rSIjK}754JFYX3MA#m
zHHS(|pXj5<&KI@QoSg0pfhi8VU7nt8<ZrizLC|N@y10%4SZ-UWNb*}@kQy+oJvYaZ
z)GV(hf++l^{FVz&A#-Y|A2f4Q=RI8=LaT94^!rf`$_RH7pm`y<7l8SBxWzKU!6JfT
z2c>bKI7YcmhFYQq(c}1ThQ*^Pl12oUByfa)lQ=-jfs^Rjq9i*--g-ctAC3dhbHHdL
z2%xB9n`XKjAhpWAx?kkvqpeNXH2`JP8^l-B`8Rd+8m^j3o0{T+l``VCzN79fP!dm)
z+R-?^c+=B3I=vTRNbAFtmzs)&=+Mkpiy52yow@iX(^>H9sDOTt09yy#n(2Wh$IG9O
zbm!A^%l9>gOS}9iX)1+SA*S)@Q}-bZuEOYW0dsMTlrH6FfI!E0GoRP#AMa@Hn!K9p
zc?bd@Vd%pP6m>{dUTd`m>a_+MjV4;HD&nlBJhE64%YTLDml?*J0u*q{ZxOhdvs?4p
zIw7tC&{QBJTuKBom$+#eYD*k^KZ8?}O5P}6W*A(hhH~)wilj~hp+pwdGy+;@2QsGi
zGfI{bK<Z{zYDptjFQuJTJwS_fDi4XkETBQX<OrFNP%+-ERuNG@h~!EOP=d&eq_+FX
z%o#nYaA2Fr6-Ug5LtU!4Dm<leAh!Cc+qwkh)6`f!<H_hyl)5`LtDYQA)gxj)*9O}v
z-$tZd(*vo>uVz-AT4RNh<W&>h#Rv04I6(nUu7IE~55LS&9OWoa2;}>9Z!dE)%s<Vr
ze4J7W8KR_xq*+1Msz8w2oF(uiM}QE1D-VwsL62wzyr=T34#Lnw;Jfew55DSC^~}_&
z%uJAYHmjTVqt^M;d0<L4(t)ef0hX>oOVa3Tt?j4Zqe4`vjsVj)tbZWlMwW(L+;-<t
z>^-mte$Y}R=71_BycHif`qg5JrH?G6H~;61oP$@fxArOqHZpx6)RM>d`~Jwg(M&(K
z$lO{vzbR~{BufL-lY_YbiMw#YwoB317h-lkMXIje-TXB>RjNZQb+`vlfms00cQug3
zF{<?{8nY1^%{p4m3SvdISVk-t(aM&QAu_o-%ICNW$cWcKAyHdIyDeJTA-^deS=W?$
zrQShN4XK|}R{{yo&oDSo0o0X1s;%V#pf(PbLyT)o5tDUms;8U0B^}zSVhyY6sA>&x
z;Cgx0JV@aUHIlou{p79D1ag(f(z!MQ6WN}?&a7udfGd<2WI{We+_wBRvTkrw_+qs!
zj1-c>8^e`rPkFcfr;3Oxg{xYNOh<%nHPWA<0a?|hl|qqg_-LBermC1!K_sPE0yd&<
zX?Z#dK?%^*xGQka2M=;^az*&%9D<^&Dxvw&425CC0ptReL%_@vl+Toi;|xTlp^F7^
z&1jbjk)e@RQOl;4Y%f8m$2|DF2)|WE(CkxSM-^Ge_24V8^O4JY$Q69}4r$2gKH-Ee
zW?4sZxtkcG!A%$Pjo5)o&*`+j?N?JG@lf8Z+RbL4`VxJ^F7AJ58oT%GK@cV?MCR&3
zC(=VFz7k4N*}E+6cz-HRUB!;?6JR6L5V4fp@$nJ=x(jQK$A6Z&td?`f!z80-ONph%
z1GxL~8qVHu9r}uSM6CeaiIqA+919gfk{(q+xiXJDD#vi6TBtQw5G_S$HtUF*D`+Gu
zh|+mPVh(Ax0u}bQ^%6ChF`|=Nu}ACubsr<PTxgUytfyw^`)#=;I=Hih_+<iUNW`v0
z^*F=aUcfC<r4AUJ0BXxXT%oEcc^J0gUJt{gc#YHvC25+dFLA+%bt+@cSMz9)uBKn8
zMsor+0utjvsY&J({!lK9BqJ!<r01cu^F?~jWrwO@s|uYd?^cD<DtTz~E&VpCdS~)%
zc2J9+KxHbmCe+dbzh;WMny{`?h=THV)Zne>2IvF>g`rBPK#f@UG|^YLFR0LznoJd_
z`2pN853d*^DEkW3ilY*RVcmC2bj5f@V&+kXxJtzzfh>uUWw8P?QX#hUEXV^V!8~dh
zCo*{?t7wQ>GuxCd5*`A#556-9-|2_X2H@}zffpc`^AO}6_&()meRvc;QxS-`hAEBT
z=^Eq6r6T$&%8~WROy8)^6Kl_vwIzD>z8#tJ@YtR?-1FdL2*RpbZ%T!DVO|`W{vuD~
zrF4beb4e?kkG~f{?Rx;&v`Lv@F}dac9rRwau2R|aX5JSz93J?osHsq7xqd$$+*d^@
zSfc=njtkEvkF11pX&il}34}grmo>1sGLPlj9GdYGVhTG%3yEAoDwfg8s8y+Idj4GH
z*->bz6_vH@tmQ6QmZfSJR0v=}OrK-~J{=yDA+_4M>xvH|$vfhy8vQMiHW*p~uylaI
z8<4<eroe4vEkm<P8v8~L#|UkjrcVf(0iaG44Q$|nQt_p*kLVs=qN|l2Nfw#bC!1rV
zo=JL(BE#ANQ1sYd)2Z%3tz@Q%U`e9dpU|xdW+=1~Q`7RhN)pLdTvc~Nr*D<2v#!I)
znJ}s%y83LeP&ehPbzmy5ro2ki<C+++jreQS08cGs+$C<G-WL>tDqssVsJX=uUdaOq
z4-_VVzDXcg)S({LVCEj<qPZ*(#dHx&s3gs)utR{O`H^<^t1U<ASewCzt6WhUCKDma
z8k7@O%MqZsJP)6j5jcYg8iR0`%W#l~=LHA?SEW7jxe&QrfG|gKHxZ8M;zcwQq10z|
zh1In8nZ|a-z%`+{loDPjFh1$ynIp@%_rXWuh6`%H&=Hak`o;12+eO@3%s2R>r`O{B
z^WQ6=_B{e@`eaH)T`VPEf9HU6&DU!yPhSv}Rz<GE+&EdmQf&oMBg4Sd63#nq2t#FJ
zq_5!E(m~8DK8U>sIacbV5Spp*)A5Lp*nmI-nTU|lQEsLbx$S-+bJD8fL#oC4tggIm
zpK8}4EMyr<i0x1?;pj<WY5Q-Tdr|BSl^UXONY4SC-wOnTI^Ra%HndI`5$vECE9qeQ
zW7I-LKuO`L@>-~nK%SYa+9BK8Xo?)GRmgP?$AArezm*m;g;tfYSM5|3R%TT9vp<K4
zr&U(llo8r_I#V=gf1U<aX>w||3fi7;+Mbf7g%)+FYG@*+YurrQYu}W%qe-w+aYhk=
z6)A`0!aXqMt%Yz31Z)n%0ful?qC7>txw?mx;@s)o5S8PZ>H$?34FzcQV`!3Yhsb^M
zeAjlDNxKJ1S7#l%kf~#X1}Lv6pj)94Qq(!aLgmSY&L~263<2*~;ODwNazThNA0ij#
z;JH3L&xcR^NXi>hK9)e1eh+i(Xz3~muOKkF%EiGWOSt`>M*(Naw09*U2>UU&bY~pZ
z4woZ$&-u%(NA`R#f!g;7uywUviRGlq@42>wOYe`H&upl%fYhz{J1>7N-v7GGan4pc
zaLijMJo8f2oe0O~7x3ugM{w^`hw#+?1%Bvg9Wx76M6HS-F1sHPrNf1*;w8;`R1T0b
z6LhIgE6VUt2elFMZ?`ga+QrprsyZ6zK<@%Sy;8;#Fi)xqn)Y(2ua8Gk0hn9@=Jzv%
z{rZjNVTR@!%EvLT`WDGiP~0vZ_K}nmC6x&b9I663j_P?-eVBA6m~n<`4T$nV#RStz
zMTI{CJms;`zEc26g#_wpH2P}fVX1-6rcKRmw<V$}eI+|E!Ssci$DQHPy3xL)y=Fe!
z3>{J7s7>mb0){Fibb%Ueieg)s_DE{2`2X4a4{*!Q>pBozC){(xyDx`|C{zI`L=qqg
zFq0BRQdXjZWl0t-_q1inQI_oKv8QM3?v~x{k*D3=j$hl;Ez2WXvMi}(i3(JpA~Ohr
z$f2rGIlY{24kz@t(|`W^08NkGwgpt-0I%MA_uX*rx#z5Z@3q%nn_r7Tj^<=Y3L4dG
zi0d)8vDFuV>B9x)56Q8j*WNl8VC$k7fRZC_HY6`7<|lF;&cc3YW%Wr%AX-SvaU8|Y
z_StLyy-ir)jtwdz(QPTRtcPB<i%xMKQBXx3HBpV`Q3>afbmo!l%ps1aP>JiPRO^^-
zOk;j}3iU<})p`XnISuoZk&w8+R3k>SndAAFw($7#Pa`e1`Fy1GxmsNaclMs{?d`oV
zlUG*1b!Yg*S8g>>yM=&_HW6X=(`)Ui`t=_k_V4_y`IWHum%ih#Ctvf{`;b<FPoEv5
z)6Ov-7pTx6km(SM^9?M|P2-#1c@p3CweLevOR-n<aPI0ho_*#9zWB^VJa^^>Zm#a3
zJscqlQkHp8wJWAoQyb!~p^saNEPOHHs_O(VyTENus3^|`(3lvuELO-8shpC8gMx)I
z5cI_OuzeHQI|MA=EkH1TBw%gZm?Ag!1e1`0FG{OO=A>OCZC5B9RwYD4JdRox8JLLF
zg2bm%u_O^HgDXX8G~&%HzA0Un`Cu%`;3%rR)+NQ}9#a*r>LeI{euH|zQM;7LJV?i8
zHrD!O6X_Y;tZ!8hsS)K2YO+iGJI&Fg{Fc`u)*O<tTM`Df8se!K$uvd1Kz#{Vydz-8
z5c=%eTLIQz2#^mDQu?3M@ndUR?E%%XjW#Jv{Z1?aFZorm;ngCGK$xVE+;_!MzD$EO
zp?4y79&EL=k8!rE`ooBOH>0SITC|L*(NVO!%h=ea2(E@&y^i^r87$7vW4bxTG{W}w
z9-e!72RAloR>3+`Bg8>gq9%4*FAny0U!KX6%^%zve*V{PMNqrNfK58;W~%oug`@lb
z;qjA4N8kTFe>t8>mhk)MhiHw&M?cYvnkbMpB4xH&@{3xSV<rI(O(Q?L*bGk}oz36*
z$M3-pe$V^R@AYtLYY)%8vVkX`zJ{k?x```ScCfeCX2O^vx>~J<3X4k1=6i2R_cn{-
zL^W;`ko>Bsr4@2v$kocG6=V}ZLtwhVs9s>>e1PgaFnb6{YQXeypxp+@)}QGe<@U($
z&D<oSs*uy9;!olN1D*UHN61OTMlVYj2Ssfx{B*YAtomnCUc?g$+NL`oLO&}Dbhi8a
zcjbQsHGMm9NrCB@N%6vp1~N*{dXiY%t7)wakSOOvv(pM4rp$}jik!O;NPtT@ZY1uR
zK&_I;jVP>4h0Lqf<_j#G2rxYxvUN9gD_naP7?XsC^nsLuiiU(fPwr}R5jFRNn#Rm(
z!a9#jRkz}}L7%g=<e7HTiHw9N<G-82UkW|)Ua7iGhM66tqkW99j_&9j0~%FXsXZ><
zU%{2Db4Z6{BvFQ1GD5e16UCS~f*SH#h@?qX{yDU|XVaaXbIrIq`e)nYFa88>;q4Xy
zHdzs8s`oEf(+|FI*NOXA{^WQ6`B8h&2(N7oxzb4&4VBDDStepiYW`N0dmLa8Mj&gn
z_3aSPuOY9W$uU#QusB`d@Nxr3j!ffwzUEGR?>9e&H0$B=<sCfp;wrxK><v8i!ZlpD
zzJr}@>U>C1uT7y^jZle2)ax4PwS9(tu_Qlo!-gHl#$RG4sN<l#a3ti^G$%XpHqEjG
zHeUf6GX+BJPG}wz)5;>1fthK*)Uxt{<YiW2BTmt1NndC|UT;+SR~w^R9PsTjcm-gI
z903vmE6*b>!HPxwdZF{&DFZZ>W^m$Wz{csV*lk-nDtcK?19Q%(v<k}m!iS~c`JtlA
zQm5jw=*-`>Xy{VXlr2Q4S2y7vV#HA%Br(E9$a*faAgV0^)5ikLtjKgS+L!Au6zJce
zmbF5xjHvn4Mw{`AE7Cg2PRXSjkQq>E%R_mJ8rmzsNtExaDQy<5{9XEAWd3SQ)oE%F
z%_4RnX?OY@)y-5Yxc5+uhaZ~4TkdV*^gT5!AF3gW?+;tUAisE}hu{0{bNJlj=P|5K
z=k5GP5>|%4+bTZ)*Rq_X%(rH=c8dU;T={dg2NxUJM_)R8WO?B`KlTHI{k=xK-yI<$
z(wGN}T4Gah^^77Pw%j33DJhUt$udXnrxT!0R?}IC{Z@dh`vs~OfkrjOOfAPkvx4Kx
zNASnre-z*K4UZyA2e`Pghi6}0#pBQ3z%wtb;_~HfZ0+_C#Zze1r@6WnRY(#bY`3Y&
z%LYr|t=DE6sSzBl-)4nFl}}Q-4+~`70__c8{UUJa0ZBLKjszI&7wFJ=t8HI$!50Xq
zsWFK;s^NY_PW>dc6JARImw}%Vrl9nb2fh&6aNWTM<k;a<3vA=n+{AYcx9q-FFtCDz
zftoeeGmpj*uT5nVTF!b>ZS0CaT-atEQvsCwch$*)2d9vc2t{la%0MH8wUFmPBs0jX
zi$yqfD8S+ojjv*0^?HH5S0uV68zM^KEn0K^p4>Og#^|<KiHy$ymgffJne^El4l5q{
zn=Jr>|8zdmVn}IghBQkt8s``d>4g)_PEF&~(Rn;{Y7y_fe;Mz1`(fPmzyh~PfoJS0
zhdI}zX4dds#Z3OafAbsg`Cs~K_z(Wpucpskm=2@Gogd%W-Xga;?ZCM;xA;~7wW;Jp
zy^(*zSC<!;7rx_L|H7c%olaVv5tHQPbSjaNl*COO%Q7cDJ;~O2*b^Tx_R^;r0@Ufm
z-v1OR1sF#KdTEHQ{Rmg~3%qorKs_q3+{m%A6yxxrL-?)_AHjEh$J>w(2ROI3ji;Ym
z!<V19iD#c*$JHx4=nm?rB#W4unw9EnME#sL;ax6R*(XUsb#R>k2fb6e(5R9~Vp&Q_
z`^2ji*uE}Ch)XAhH(NTDlcf&7w=rl~hdQv*s6x`aNh1MAWz5?}B+wNwVGj_NTuAYN
zN5d)MFa4<H_&08f=Zc*5`RFk<N>N9`aki>vmNwhK(o`3<X@thp-WA-`%#20EX7eLW
z^~z&fA(CeTv&su()I{|bGMx;FL#&3#sx;h2Y=~-PPqa|vvxhl-XP=h6UEt>P0rGZ%
zlzjYX(X)mPHtp2tO1^Xduz3K<0wuYz+Cu7h$FjOmmWbSpXf5Vs<zpx^Cb4gy+<ytD
z5-d$G;O@JZ@$fy%c=X{zc<8N5IC&^RZMp(9#K(>nAJSYB7;<myFhqW(o9EpD4bnio
zQo{$n`_cR@UvpplxBv4`3_kzcvp;j^?B4TN_P_Gdtqg8&U|^GQp;lRnXNzzA)rHyl
zJHPYW{#<7?oK0G7a^;e=O)8Yuzj$z#q&^E>1SC`9v`Zoxk|L0Rl}Ke8Nk>5EA`41)
z0$>;f=ni6BzYbJy6qt&0EHnxnUP^H1(WAKkn~vk-e<H`Q-Nl(pTln%btN8MlHt@nr
z8(80<bg+(EV;=R!G%Cb>F{h$vV4_P-@pNbDcb<9_AfPpuM!j_lq@4hpm%(0Q_4ypr
z3&7}3V27eM7TyOe*&x*ly-AXVkW_;zpD8z-3#VnrgCjOg8&fJE#Cnkv(Cc-;QJ{M2
zTLsr$%SQ6+6Ea|zT%Bmq{0a2V$wT&oHEUjMWBaD+iL$Cd&`6?TiO8uVmb;5`12%Fm
zNyz^$2*ar&PiBDnVuYC^8K&kKH1kmkTzx4Bvu#=6xc^iuzGCUEL$qy-l*fZQu=1vv
zm2MtV7;s(hlpJ$`hRxTJWdoko+3WXMpO%CbEKN`2o%bHbqxT=fqi;Ec2T#x7_>n5&
zg$StA^H61Wh%BJ#KOusw0`x)@dld|~D;T!w7!MjqQ}W!4SerQ27$I5S!Q6Z2@ee=s
z!{Oig_)q1(@o(d=44Umb*E?snZdGuL-^h_#wXzf~gx~pZW*f&o^0ANo+0J-8pR_4b
zBUw5p402+ToeNz|mNE!8QmV5FJS21CrJwmH>ZWFoFOwfoy2=g?64|juG@WXCQ4)98
zN&{@{N4VT7FmtuQJg2QW78h%H<md@J@_l#W&;REcc6VBM@eCPbuHh?BY~kFw>)6<;
zBaG%SHNAq`^b#sb!k%KhmlQS7imZl}+$>KQ;0TE6Vk9f14si1#aN^;D$M2EYbhs~3
z8maNw^pRQs$>L}zR5x)q)T7N+Q8OUa=|==^xtFRE$g#Sg0IzfhFO3bkzsL@GS&0p4
ztf91RI+<6*g$T7XBKJnuZ6L(~t}(E`kD!P}i1K+!fkygIIT_@+S(Xh-m0G5Hk$pH#
zY>#MS`!u-!v$>LE?vOZ#&|_|#DKMgLC^C%X^i#dntXYFSg3LV9j3bpsP?UE=dTc_n
zrj`7*8Q|&I<t+H_4##X`RSh9PcJeshao-9ayMGxEonF8l$EdA@QcEI1N63pVi;lw)
zclsmmSCH*DFl^T_Y*#VZt6<cLk!BSXNrZShLUkcvvrIbv!=QnJguRasQF*usfAr`6
zbY6VV&n3V9i^Yr44BmRPb!OvM1h@E&8mUz)^WkFnJwMy5t$f!vfAjZuqTq0{zfa`7
zfEq_SLh*3<ks=hHyrecn_FP<Uca!3oyWu`!)*X>e2DR&uhKwRQniv(!^lvhcjH=*%
zODaHcTBTq?mOrB)Kx-6XeJ4hJ7nr`9W1*g7ZYIRs{5(Ez?>s*6o_pDx?ef|lo_Tf+
zPdvVXXP>@|E7xvdKVL+3>M$C!E2!4%B97$@Rm*=o?Uv*SK-vSMet{n8+inIpbdu%*
zgqXd9Dx?x+Py|Bq4MG_*xn!S70xNBulC~w4RTwByN~+xf++r)&xSLU;)R0CpLW;@t
zZrulxZc;_n4S~_&$ZShQksBF(hDAPE5j9TDT82vgPSr9KksDdIbM@CIHmRcsrJpph
z9aBJcJ`5Wx0HvUnL~NS2t^%!V2&ouDyc+kz>Okw#A)cKH7_eN5sQ@NJwne_dzP<8(
z5EK#8@d*7<8-r1o#l4NFz{*Sm_ug{^kKTI>kG*9D_uoB@Lkl5Lqt~E@*A!Vm=5GNa
z_F)Q<_p2E7su*_a=<e6iZPhUvB%E^FtO%N-RhfcYcq`O3NBKF=)F@;q4Gr>neu!v1
z2>+{}`Sx`GTRKZ$`2CNatuECcytMW7>a7NDZ!ln!3#Jk^gQfVp{+CLy^j+WlO@FF0
zRXdt&Zw<L|In9EQQzSFzQ!<-sgAsQU`=VHj+MFiIDtUUlvRtYIVk#*M*zA!8<Pr}>
zljv!B6#3y(RF_k=RfpSB<~IxrbYhL>S}_`}0L_~@X5t*P^$auf5l$Xn!pV;=;yb?m
z0Sr4`ynKEePk&_>U-|NRoH=_2+gr0JYKKu<IE3ol3_{XeF-WV``B)rv!%=|!HJ~|L
zpt&T2OB%;S<V)A47(_~Y7Ee{Lkfpd<hX<2_Se`d&GY-g;O{=J(bIx#nu>xeCx`n`n
z4n99#I}MoZ_lzdlt;0GHwBg;Ry&K4yrr*gQw2<r<D5Muvi!T}#@@GyL{8WHwsz5Xc
z7UIqv0qSI}9swQd13gbXWszsYFw91z{VNr|G9a7E$Aoq?Z95Zdd6oZi;Ykh<4?h_V
z+Zgutkf$RQ;TZMm7<bNuc<}fMyz~C!c<X(OIDKRa3yYLi63NL!aJlca7%3HyM#u(L
z3|a{~`&G1C4fF`q#tFvM|62)V93V}hPpms50C&xiKz#tv_=`dT%?5*!jHlknF+G)_
z@l1}|gYEdg`?)_c_$%M=Z<?>X_$|+5OZ|JVZk^dL7x*{+_67nrUA4mqOO<c`(J)>3
z!LR>g-`Se3-`&{U7;(9coK%GhDV-(^*w~v&qY&<sG}~k^#nC8DUWt9Y^s>^{9*QiA
zOqvRKA`zvk0|9|J$(fHMfTLBD0FT{s>0%|$M_Yy3L5^Jj^-+ZSI7FjUU}mkrbdq7F
zk)t_R!`qG=!`pt~D8BzkfbGo=o_}%^U;gZ6Jp1%{Tt44GJ6=Mxd<cz0b4Y3xo~A?v
zLaOMI3&qxz0C6qjN##>Zz_2Yr2Zco>*~l7J5f<KuK*y?%e2h(it3GTTwbA2rWFX(p
zy$$Lp!40tzCEF)ugMKCQE5)=HX&E>%pJvrqm3dI?VDdM6K3}XmIc;9r*hDX<1tN*!
z5I1sE=K{o3Fjy*3o0SJ<Lxk(+gFI~)$Vk>Pl-^J!S*2}?7Xvc1q)<*s{tEG0Va$2;
za4^E4vyWkK7g4c>rG+8h{*HMZojZ!hmX`32<I6a8yn(6Z3NTG?ddQ>Va|#cKIYJ`&
zQ9(LxqTi`ve=k96N51!Iz%#vxYQT#aeU4_8PMVlJDoCsmk_Q7DS+cPyrO{$m0CnKC
z^u9`Z#TMAxuUV<&bGtP(Kaj=$<F9<*;D<l*(<{Z*kNw(iWBqH}z1{p)0k=00u+dgv
zDf!r+49CZQ^y|Lvn_GvM-cnm%C*mmL3r?IZbmW;fWec!rN<%F;JR(gm)?l(4Df6dP
z%t{f8yl6R|R)}B{X(}bB^CB5c1Gb(C`!uDTth%M>KxqNFMevEqtGob28W!jWJlq{S
z;{b75!Bj8C%r?-xQeb8(MROs=;?Ze*=%aJ^(6`-%QEPxp=UaIC3p;rH3u`!kImF)e
z!-$VAAwDsK`a&%Xszu%%0;`u(ES{w5ZotNgB>y0Oj0l@?r!<443M9Q7BkV=fD;EW!
z2&>`ELrr=_5u`cK9w3rk=3?4ZCa-wF0HfCAu7asLK63>zBT4m!6MJ%rs%3xVb5qk^
z$B!Dg*^prw?PuU7l0T}O&;+^aT!CaU#PqW42c07u*8=o+11S`Y@-Sy1E>%NwaWP?j
zjUra+FRdaQXBdyV=(g4|>~5kOc5!Gq#C`9Z#yj455)VJ}818xCFpi&?7kA874m{IB
zdT|$7M(H25jnM1G7_{qXw-dDX672Wt=#CTg$24I}WH}7}bvfSD3(Vmb(GWC6i}qKh
z&l8a41kh}9;0nZYfFk8c+0(8fK_^oVBq9k5Wc>#6KWJm=8<XUJ`t|SW{FM*=><9Ym
z-~Hd8sr-Nc#&|sTsF^qJ_67hpTb>IXs(tIXRmKnf?7QFl;m(N@@2{=j9LYR4Z!j_w
zy>>a7-7*0RUkMVXF;_&bq7=@TH3kdX<kj?X0)Cp-s#`2qEY)4XZ3JxW&n2lJ>Ex)&
zM(F{i4K(77Ds+{a_>ghxKo=nCN42GC5CARajYCvhRZMrPm|e{=_i~2%Y>wJOg!@h`
z;J(KW;d_51#pbmh&VHqX=e~3WPrsDn<`dPtb9fe&N0tyjGQ;hS)KA(V<H~-4Ath2o
z7q#SddD@XyBZ;h+Aj@PG1<maZ*>ywtHSuRt5?%R8li*DXOqCZ?zi>D7Sb?V$<{D7R
z>s#@_jr6m2HJy*C<4N7;#F3yaM5@&zY0i++ZQ|JG1D*>ywL)gOH0c4@TL<=6fqamM
z1r5Yui*I?~r1XaZ0S)BtZQsCf?=qr%9fy|3c=tPJ@#s4b<8ALeiU%J&goQ&iYK$hy
z&`LE%HXd+eI;WanGlk-z2D+c^qJ6eNrx&8tt)MfE(HTZ;U(QY}VvAmmKcvdDxQ;XB
zK~cC3>!E2}0=hyCaNUPKrl9=HXkkb>@+D!fD*fUBBjz6iS=?ybn@05MHjaI4ruJh$
z|1G^A`eVQJ*H7o)bK@2K+&>zR(>FZ0y+MF2$4cXyKT;Vy_{$GJ@~+P5yFQexuTsS*
z44F@$YMtqbtZJpJmjRH>Y*Z^9O+iNlIy8dLCY#d-Pd=+EA#fVn5?gJLq$uIK*X=nq
z74nK?1SHhENgzij?ufvRr@G6;DvGEmf-`_iEaC`q9u~4c3b2`0(Ck&v+$b=0evEo!
zjN0J<%crKX{3mDefj?DXwAIDsC-?B&Z>{3F$1h{!%TwszdkDqXE};2H6HE6+*slTI
zEJxH74u(E_8T27TU2Gnx3=+}F@RUwdq$br&*HrFQTEd-Ad|JX+mhx3YBL_+czN|Bx
z>kJ~MbF`UEz&h|412}W%Rm&g(Hkp?kAZn0aEkJDnArb4eul;?RGDRF?fovq+|1?pa
z0HnXuM{jK#y{$Eb;|&~H?Bd;TPw>dw=JCio--n0pTfxGSrbJ}?0gaJ%hhn+TE+wK*
z3kWD%RE^FNFUN>KIEyd;{T%!40JWy*&Pad8gOZI!RN!VO7nYn9NGWopdIFuYl72|V
zTHde}!z9Y)87|z0uZu|Nw<gm<Pm8#6rPNG8H+M$}E88;&KedYozWr$OqyOT=o&V>b
z&i~<C=D)Z7%;vxT3F)YK;{w~H4ElAqiKt+y_Q8j0<M+LA`o4!c?|JOw@zzEfQjvg(
zYAeOt=FbJy%_1xJuX=ph?NrT@K2Pn@)Qd$<8jUhsH-N|a$UnllAH3+4TPlARGTyin
zs-)6nsY=acB-#LO&K7JSO+XhQ;TZrqM>UNiU~OhS%F%43s5dht^EoPqbKrOeOl4H5
zz~*ypocsMfoPDx~wX}laoeS81a2f4G3+Sg2KKvfw-cvc+)Z|UwSy6yl?S3G^%npSV
z6hhKKV4aM`1Um_Qna`03f(wQeHtU7pj5AHdtH)Z}tW3W~$DXW4WFi%kA}47^QYTYe
zu?w#x0p_I}joZcP2Z}DgNV1l_0w9un0I;O1M@B6HrV^l;07s^QEBnCb)(b4&L9=p1
z#?x92@^l~QZ3BB3`skkD#&}~L@o*o@GXvapGQ=Yf&*E)wU&ezEu3-Mi3`cOhbtxjF
zW>{YO%Hb<iTc8jrEfCOm9vVuO$dId+(NchmPiFYkKM&BHCom=Hjx2<<PbsC9oc^k1
z5*NOlk_4XKM@>Ct0cRN1B99e*tmqPP8p^K7p$wa$-d}E;<J6QEt6Er~9tW7I<d{Fc
zgZg*R;b;EWFZKSxUwwQgU3v14J-_kE-+m)kO5@i%s7+VyU#yKEd;IvZlY@6Y^6_|Q
zGYiL5B4Uoz+K{Xy=hxA!$G|G2B6D@YoJLnnr}0cqQsS#<ROeXms_NMjiC)PNP0R*m
z2#`Lz3=xq?PB>@>cI=2tzl_zTR?QXJ@2e-jGr$oi$DI$_^*|%#vVwi}WAbD}jxH^}
z8IZIqnCir6ZUa+SbJSiOqq3Bta;%EwN1Iswz#+W9*GKP_F4msd$HgzagmYWK<)tO$
z>0!iEGnieea7xT?Gs`qeDj4XBiq6ec-!qChB|4UnHOPZ7jYQ=|x@P0goUBWuU|T*}
z5~Fvp1w$@Mijw8CV%e8UXY9T->%byJ#zA%qk(r{_Y|m02O7STbr6E#Di0Ck-p(53}
z`pgh(kGIi2vx9tf3$wvK-f<$tqu(}<$KH1u_rGNkvr7#&-{dFmr4o^GWGFUN)X7rG
zV-P1tBpwwUsHnp4n*gvzT`M}>p3Vn~yjFAEbx(-Xj{@hOr(r5oRTq)8a%JjqN92UL
z@tG;Ooq961Ryg32dt^S&Eg)7LBM=vGWaA`0Hlod>(2l7H6d1A{y|&$5n*)BOjgSA(
z2WvMj?e+fkKN^1e&bb>Wuk3y0igfAnxaK$17QCK8tsdV|pT{46=FrlyyT0yye`(b1
zR^#3<<<s7cGV^5{o}Y%@LOx-9A92wLUo{Izr~60*S4K@HeNX@tF<7Y%nRvWKY~sPD
z4^{Hc(!0Q~66*f2PK+fZ)R0eCEg5<TY~NFD0F5RMTDAyI0LO+J^Xy?1tVN@#Zv=WI
zPH)Bq8ubkIsT7rk4B@c?;T=RK(lhjto!t#LpW4R7uk`bqSAp)~S=8RUf`#|bW9ej_
zpJPB2%qZhX&7w6X*eNxlh>ao)wNc^%0$U_W4nFxwl%Bf2bCc7v`Gb<_7}N_?sR~G1
ztO_tg_t60@bWzevJlzGh_DPgnVAuh&PC+_WG~y5ovmut}f%z)%g>wUZ=E;5FVhjCC
z-LTQk^Lvkkc;ulf-u|u`-2dP#<_?i=LPzP1Ql#t*AmkkbuC|IXuf-Kp^`p~SsT^?<
z5HgU7M;visbX<m11RWG?-QJuH(CGrd_~T?R9&+)j?79-4CFj3u#T6+|$*5328?XV@
zDwh%cpH-FhIYNoGn7gGqF7b_|zf>0$t~~QJGK$*7^k6m~WB%bTDj#a3fAjzHv*E9P
z^6chD{TJ@r>0j=?5hJ(Y^$Ti;lcn%`zc@2{=+TdU?GN<&-T9=`9ZV4Rb{YAJW=Uc*
z6Xrn8Z928xRz~YT<X6_Shd_qfjm&1*Z&nwO5<6^px^lS2#7StCSe+<j)5y(X*H!nZ
z5=bXvj6CFNQ2}$<EFs~P45-!um#$LU>||S%rV=lw=_~bqQba>(Mk5Z;jB-rXb5s|`
z2$pjG3YTd7JNf4JkzKrr8^6DbOP}7y>P~{<#4#*>?IA3GXb$0tgaa3<ruKF-b`)Xp
zs!F>^Z@`sA<#6OeRWmfVuo$41y`$U+uMw7W_#mE>1kdyyX&7>~KrIO{r*xKx{wZz<
z@a1-aoh}tvB1E)53?M+dH$?wt7rSTnu=e6EI;#VmT(07MkIvz3@1Dc`4>d4%jM@+s
zxrZrt09Zt33mfmao8u>vAG21Yv^3IDf|PC&uS-BS8WkAw5NxSjj?w_bG1-aBZB!vY
zd1ru6|4fFnUzN|3A~h`%>seolkZn<=X%0?@Z0DBqr<3!Q<x5(<=HD#}4wcRbty4x@
z<)o`a9E&3YHHv@*+~%u8%)hIT{QfZgbKm-j+SAXiKE2WSx%Y0huMgj7;1;|-1-LWe
za{PV&TO(Qe&aeN_pYKG`(b~>V@3kMHxby0CQ6}vv#tD1I1PPx_A@d|&>}CLGpv0~p
z6<HPCoJ<c$iGMSPZw1D%e0<q(Z>y`jaH!g7v5cOKLWGNCfy}#k#wHI_62CIK1Fz0;
zfhuuwb#f$;B7{wr;(4Hy-rCS(0y+}4hd{GZV5&koyA07(is(=d9IhZFu_&LcZKUVh
z*nDaWmmlwAeWQYGxq<kxB_!`$MCFbtj!=esK-$h(P|DH|&)Jb(M^v@%j=vTsXp<F2
z1iy4aakOLLRtY%rAz+IsVx!KE2$*H?AZ($5G9hz|PXO5M0OM<YtiIUB)hD*G@p1=o
zC&bD51P?t>!=rDT!h?^_V&yJsJJ69;ZSrW-XiF{7`Eyoo%Ye*A3R=^?;{i!>LHm-@
z*h2xb-jJ%NjFA{qXNow7yNV`9w3?D1Iuc;#T7gf0B4hrL&kY4OTA*}fi$q`CBqsER
z128+Uyy~#<YQnt<uxTMEC;^hr3mI)#il0e$D8`~ZUxI;+j(5EhV4=~&!Us~U&vZwB
z_M888V`F#YSI=kv@;f?x(y+X73JR|yV6%uOz~S2W{y!4j`S(8ZfseOlrys1XZ}&O<
zG)~Qr1YB#6$DcV4N7GPt{?U=55|j}~quyc03;Fzp4PGG`g7!<g0)e;3R6P}LO;b=y
zGaW&q9G{$IBwyDkQJFyR{$<5a_$D2Ji73ty$E3Tk*B6T+0zQi3YEwXsQa36_XoZt!
zgX-|(SV6BrksL>JK&?hahY_L~isXRea23I9LwTJZva4Iz`20;={+%7%xID)G(M3cb
zxC3+VTEXneDF(FuPL8}!l{gt5L+KT@o-tqKMWoJ3-9BROHjn}VE9cn{PVLD_7L(|B
z!A68T08Ddi30&Ol<CUj3@tdF7#kDW(pt#n-R943$Z(GDizWos1_Tfbwx`QIo9H4>-
znZmP;c?n{H8;qbF8M}ChrI3KGd{I${9fP%7jH0mNs6d~9Y#?AJkr@|Ics?hm<{Y^O
z4&d27Tu)B=%$Amb-}_f7_SR_VwwXx^Xi?h9=ah9<2;ou!o3*G}2Zm=FV4x?(0|PdV
z<hY|lB02*$QkKN#qQdE^02@VjQ*nTWW(SMkNWO&E20!?nKieEtZvNdf-JkleY4Esg
zuYYh0UUwDH>PJ3Y&mZ~S_dfcqty6b?uy$>&FV~yu(`XBF=|;>$#(>iQ&o#D}{#Y(G
z75y3m8-M%;Xe^2pMU()OXOCmUM7U?t$g>HV0)v~ro~5F~m}s?B!A@USG)t^HQ8L{G
ztff+4l&vz{#6VG^97-uD6=H3faWWK{Rq3lhwNBhzP)2f`t_nEQwOZ8)RK&^E1E3z}
zsMW_vW`~HD3t*{&Vz!2$L4N!soN6O|c^m6b?BMK|T6p<7u(8y{?0XO4{tw-O<s(&e
zcYuCd{Qa2_XP#MkB4;+MpF#K<qxcBa*j6awcBh$|9GmX-Hr8I)#|vL=;mp&!xN)|H
zsGs7kN9XXKhnDcxhvsl{WeT&6DvMh?l&T&JG5=60skV8jEWzOPQzJ|ZDs^9&T&J{G
zikl2n1Y|U8#eMOlD)}4pX!PB{j3PM$GA*o-)39mq=ti<bI(9t3^%qlo^;0qp%akx0
zwX1cAH!4CUExe|A9W(-nmU>!+RL%+Of(sSY<Y(d6tRI(CQLd<p@1Awz2)GrPtpfA2
z9n62Mf?xfuCjf3hk-rCj>qmaSnJ+y5CtlwE<S)KaQqtgc<$zmx`^lN&YcD-?@B4a>
zyyZLN)r~&Q|CDN`lGA)|;?Bh5i}_tECh+|xWE}@)U=pyozbU7|0T+p81!l@3p3Rlg
zsLq?WImxdnu%Y1V!<T+=@Fm00a;dBd$!^6Cd%=lR)oX2%NUp5jQVPMVE=Ls{?Qk<U
zpYXEyBB=n?DFZm--DEHepU6SrA~^;+>LH8?;K(&QMRj_NxH(2J8=zQ@QOs2lCJDc8
zk?!Qf=hpE2Z|~s`esde=+Ev{7O~>$okDo$3Q^(F)CN9O|0PGoN3Ozu0LJk*nbDV^T
z>k;bYkJgZnb$7LeGf(Z{%$HYj>BTl$H-;QNJa}jU?|X0=?;s#M(L}9EY`qF%hZ$EE
z#UM1q-i-*`OEFG<2Z322mOhj=6ITYmfnMB7*uRbD%Z>vcu}5D+>H?r>j0Le8m5n7D
zrRXdt+b1n3Fs0~$8J}nDuP5KFGSAipX@Hq&V5SLt`d_5ThoSIwW%MOu3>EDR*nG~+
z+Q%e{JHWYlRA%V4sxfF8mBGL!zZ<v_pow#`P#F}x(ZV;I05c11EPPuX|KuNkdhp}_
z_~~Y^`RNBPw;n(9MgX_h0kFvjUyqJA7VsUH?l^Ma!Ux~^7xMMJG#qnnS|>u4;#jxR
zG31&2!sG=ms<PPw)<z(ysQ%H$emZ}8u^f~k@y1oi>qs@#3JbQnv8dNBWJ#2H)pg+L
zz|A5*U;kF7(vn_Gice*1okFXs_vy>H6X5_A+*A|C-?`_L<R-baMG?r=sJaT&$!L)y
zIa%Q&FM1<s2dAh^BIl?^IVz1Y!lf~AC=0PLg`!f)BkHhT9{`skJpH*Ye*9;y;N`&v
zzWJ{{h<AP4L+J0329z4a?c!G{Lr`$TeRYabFo|~7*7kAsg`0Tcs~foaQWxo3fyJ<b
z`|hmavHK3;;d|zB_mOE-oAf57?So|ZX-dty6onRCz!-EQw1y#CS%m#wh!<W0PJILL
zq3;fnUKg&4*F;S-35e1xU|wvX1b?4WONz*dC*w3yQ)|Ib5m^%#M*x-<IlIRgkWmn*
z9WACh^4-Lp`;zjlcij`<E5DZE^3wroQ|c}wQ`?m$@v;GrOXJU-_&z;<Bt5l=P19GS
zQi76mE3Kd;H6<+NC_W5%k&L}ml^ZXpm_Xo0X(?q;r+S$FaFYLD|H{wfcYf>KV6*mf
z$G3Wy+OKzT`y&Q6L54V-4i<y&`sMklW8eDG5B{}YZ#bRwhU5yW<SX6P>(_BSnL{}9
zq4zXX_OD40C{nV<ZO7*+!B60&z{c_rFHJQeFW<+;9&5RrWg(v6C=BS7_am@L-4^pC
zj?>c$sr5NpncwlVcAI*|Io+4K%bMiCk;9UzTE(jbcx{BP7DyVTqauzCs8WSbo1`fP
zsZzQ^f?&EYRm%ceY;x46_YmGo15GPfeKN(RFOG5TDzKhK*c(*v+@;HS^4yd7`tN%L
zKlJxLf=)Zbs4v4*(mcRaGs09I=xlXy_W2Dw^Y{&%eRcyo*ISq?B0PNJ5I*pZ<9O^{
zE4b@;6R1UCq27qb(up+?_p+*I5$XQgtpHoQ0oHaRY;{8HjD?3I{Ti)GyPG-w%6}W;
z=rN#oQ_Tv9&`$}x3a(mm#d2H-=}#?7Y`HF=C;XUHJ<VT|hf&jQsdf}IfYEntl6AUD
zlOkD$!RHQJXAuu~_*j6!Ht?CBreaQ636)4p1mOl~rt@>)ri-BU*P1-U+=fl+5tu`Z
z6%s5Z^$QAAKv2^GJCE(Vwqx=A=Hd)T-ZI4KR6qUr_x)7u()BB!xsIRyaCf->x-KTX
zE`V(%`Od#u!(IRAqhIrbtt7dpw%hJ<gv26HUm0b?P`qc*BvVHQl)?YxtAq?{rrPlS
z(I`)VjX5~K1&Hrv{Dr2Lu8ToeM2dpg#FCIv5)hGe@Vo&r6|o4c?CC29wy6fm3J8jx
z?xJv&u-A$Jy(V(`*|-w10pk4B3K629<;aqBbEK22lUA-FG7>t8>F>5;(<)9Tvxnb4
zz^Gr~>7U%kxikA{r5S>19czOTUfI|~5mb;?hIrwH3;5daI*z~bPd|dKj-+v9XZ!SL
z&*F=}d>Pv>6=;MJ?pmC}BPXZv?njq#&)u^KDd(vOu|?CR=tBx=h%mGE0ml6Zy>5WL
zc8JY(gw0lf?OuTWL4htkOpP)n$)zYYz}{|w`ya^hXZ~u48y6^r3^C3!PB~L5Do_=Z
zE13dpO#Z7yyY(G2n0Z2Ds+RJ7@?7xCQcas$W!7!_xk;9xz@{_@JufXPE6W6I89E!X
zzv8qa&q0wJf4B2Oz-dBC#NA_DK`+x&5;5C385oFZL}#g}0Vs8_&;rQOngO4t=xp$*
zlnb}`MZip$;?(;xywtxu`2Iih3(bCX>F=EH|IFVexy(dA-Ro%kBLp_NiszDdK2T5J
z|I)i3{aEMJu@5DyTOGoWkWW<CP~eQc%bhk9@LQ<7f<gHz`WB5}^Pa>F;qZ=v6&LiZ
zqRF8;Ia4HXj&{>(0k5zsU9gkW`uD`T+V~R_>rO^-r98xo<h<{Wk8=Q~&E?*1I`GmK
z8}6reZnaWyu!eCNmSSRLEj-i;)an5mH0*@5a_W3?`aYmq6!@M0VFPE+ZE|z>?A#1q
z+&_;mT=*PzI;-r{A4P}JXq>>>MjPMsCr;xV|I8!U-|XWLe*Pt#`%)W^-S;5=%=bKq
z4}M@qy!!V^3n8EDIHrg!=S~Xh-p+dg`a2=EHh`^Gi0whh{j#lsW=;SDN)c6R#*Qi!
z9r4IRQQWi5I|+<8GyIkRGC)+1&~8hbMb{x!HAmEs$+8T&zY+h^y(AHrfSN>XeB_L)
zmDjM~%mJI&fZJlJL#4I#DTwTx5n0U9;{h&yIm4OH2^T8og5$_^A>_}D7gCwCs=%eK
zX$)?rXR}Do__k0f2R*0c=kh#}w$W1ZVeNk8W^Ba;IiCyWVmWfFj&b)l$NA6y?&n7T
z&5wSjS<F81!3+DJ{`~7TYWpJsHaQqmm6MIR;+xJNKJu3N_doXMvAx~rx&WUj-0dsd
z#9{M)(NxXrs5)?;5-bX@nrf+p|MvOyh>zgHgt7QE;oPd8a<Z{krPIKbqF&aT>9nUZ
z<y1o01Fnf8fu4;e=qVQ{e%lVfN#rX4Di?|yfUJ?7HL_c}V(AAxANLDdB~@>;2(Q#P
zQT<=4s?Avfx&U|H3oI`N_~ei6;JIh7pjIic(3r=kZ~ijAbm@zjt)9T#)IFG;K8&S>
zX;kYOZmzE4!o>^d({yvhsA3xLxc6;1wr~<t)hXP6w1#i{#(5lhtiZUFa(^ey5*W22
z4Aui|uamVpur&y<myz&9cz+&%OpYDYTS={Hng()50s|Ax1vNV#A<Q>dfv@?d6d(Dv
zglAHatb~dH1F}(9Z#j#`hzoQ-3lGbmN?8!FHI&lS+z}d1)u_>#u_cb%wR6h`K8Ha_
z1&F!10KowG{LiK`4a|C!UH5_1b^Sh2mwFnA@yq5pgO^76OgnJbOd!$^)4F-)q1=(c
z3$}n6b8aNRAu+J=a=b8V6_t257V-v|YYy@|KN9Ev#oznc{FguV0!Gunabm6g^7iY|
z3FMEgSCp27neYSuQyespyyN~q-s!gUB%^*gk_5PqSvLEv9Bt-tY_B?=lXe_7_mQ80
zX2{Zs>xxxgMMA+#^ld)gm+rc%qsy6B(fjBqIA-YBTAIgL`YGfjxJtq-CoHF36d|ZC
zqKr$GtC2oex38@HCqB*w09YDL7bzb%y^S7_J9pKb25r(~#U4k*r>dcm^oqDSa^J~-
zPAkC5bb-0~7{B}TyLj^DHRKpzAwG)Vz4>eS{fobZW6if?dG0+pdHQQ`_p!sc|1fa>
z9l+c)_22K{#<eysTpHo&OFew`%nNww>Jzx<(0lOWxmkSai7EW8|KdK}{YV8jFBRzZ
zV;*t1xdm)>bM%Ru)3JX<%5ycfkYa=wiAr@+q$NV~bG4FFNQt&ch+D6Pc<PJ5`@cc@
zZYfeD*JI+)2m~3}#6q4hlAHK5vIUaJjP!}24KlW9OimYqO^M^|)N|jx8~ocWm}Ajx
z5TM;EaP)A1nL|M9rdZ9F<Axa3c+H~-)GG4Aqm<4k@|;H3$nPALlguR4{#ng-jP8@x
z(9+7w4U(Y7d-X1K`>n>H_Gak0H}{h;`9hAr{R7{MXP>)LTig8FpWCfm`TF6w@6C~X
zeQXoGw*P51IRK65{v+wQ@fRPs=YzdQ<4~<X9Ex6{ygn!6Nv|i<LjRJ4FQ54!Bzk{P
za)LhZ1AyjLE#<{aJsfjyZU-j$J=(NlOP7bV{g5TNYMkU`Dx1bNBG6Q&ggFUPZOT!}
z)wmg+c2b(DrKL*t`g*{a%w`@)tjsxzVPj4CVht86;wkzO;1JCfO?a2S(72N0$nh9Y
z{Z0?R_v`Bz<^#;smvOFh2A{j~DXdJL##G}J7LPrOmAejO_GF6a&M^ivDHawoy#2ik
z_}Cx66F>ajr|}oQ=MjAO$NnUiRvy6F&0j>+*u<6YKK{WcuCl{ORta&FiU8vR`;7wW
zbbzcTLv+Su!A>+ARWK>iB5`c5K))l7z@rXLYbSk}OqR0#Rdxy<2S^fNa}7B6T!yJ8
zS)dD_My*Vyx1-}j1_NnIV+q9T%+lF(Ou?k2o_0)~9#R*(^7FCOQ*TpHGAW3iuPUMA
zt^|rckK7$1B?*jKWZAzu^~(Q@Wju_?@Hk@iZnvomuE3G&`_zb5?x*KU9)xmRSr`#1
zPWeUqX6KBZ%hVc{79p<Q48q#>Li{(s?_-_eu=$at_}w40Nb~iy{Sg40Y?b`fUz=$z
z<L;9mLc5pJ=($jYvgILSixxvIRfm`HSGhSCiLwd6u~XIuC`7#etSOn(j+pdAOOjG;
zmA|pZO<%I)_Vjh#mx7d@z;c2G7^gIUp#&+dq=iL687|HHq@V3^R#}@Qt!Z<;(uTS2
zVp8za=z|_8>6zH{fUKP|o-0bu`h21C2~AOpicRIhpvWj-&DI@vN7!8(;TM1EDz^4_
z5QkM1afr`c{&gf_6O{@LmpO^JvW$K=Ws9Tac!>O-09Td*tOY4HqcL92Q|u)vYKt)r
z9eEdusDYQ)ehJgfD$ZSQ<EMXi9V>TJ+irm&MN8WGMEfwxXm$kwfXq#0AZwHDIgk!y
zLKn#|7@!o?WDrZCP5Cm&B#A>j`MEJ-3ezb%(~DIu=wPByz}%U0LoQR$QZ6LthGLaO
zb9~H|i}QmOH%)qy?RDub0<>BM7EkKjQ=QKvxTCW*4Aks3l@m67pbqp1ZIQFcmU+ia
zb%Uh6qX^hiZ<+^UX}kiUoU6K!San#VWBQ%H(trysBz+;_<csHr_~1QnPd@zELn#LL
z{x9`-MuUamb_F&$IjYgodYmu(<-70vnzWKMVsh*hLqUy-oCwV0E%d;NHpmqE9<^p#
zH5>nCK;);J23X3cxhkU@@KR3vwe&*;w(@sMIK98y7o`pk<m~kobfo&GM76g9Tbh&Q
z1ad^}m8-Ig&=k}Tf*m)VJGp^B4o(2haZk)gNfgN`8{O<?7pTt~d8|=&F)MK7Zm_$?
zCx3bk*VfmN<~<})17EoOS?u)JP_Hf_j;9evGZ=Q;Xl;(MdKGx~i2@hS10AZY9S!jE
zPJ~ZB9^zL&2R!lgCe}8dLM5uBJ>I}Z=XuOFYxuQKZs5fWJsiJ3LT9f)zpv3GgH?f1
zpEPRnJ*DaFR=MOJRRJmaT>!@1G9<E+i?CUXaPdrm?ahq&LjyH_{}zE!1n(|#D;jvK
zmPaA*Y2?Vw@~pITOg@G(W8kVdb)YC+#y4{ASfJA>P@AE2G~ftY3KsI^JJ-nhrBT0v
zoJDPva@)Bf`>s)1q0yIiM7U_o&IL>FIc*mT!gPBSC9@$goiD2S6OfaIj~2tuAi~;4
z5q|uAA09Q5+52b0hrZ5TVz+a|Ru4{nuu)lV9$kLhV8n)z7N~J)#)PsHhsq~cy&E0j
zKDm{S9O6{!-`}zRG&wv(RD=ah5qBV3RwDSh>Hi3!fSL+<Z3XwA&)>5HK*SEYX%LQ5
za2g;ft3(8D1?ANj9L2el)kSi8vfIT=uVLYvHln)-&+a3CVoylplsL7>i(GmcZFLvm
zs81I-erJr&{YDF4efAQHsDo<I#D&e5@a+1pqgt&Ys!Sscr%_GjkyL2TM8>J%&NguN
zc_7NkdON_EK2zYiXER*7u#WZBmoXmg@v%(eS={V=5oxi7aX!S)|KuhX$TKaL#&Y9K
z*&b=2k(fqdGPI;@xR<eir6s(8k%62<QdIRFbYq--evHO6MS&_9_9~nLL<T^FK(sL=
z3B#llxU5iM6atS8)bq?~)(#X8Or-17;HI^t=romMf9NEo+%l9ov+q3CPX{%d-8?T=
z27uyE$LS}jW7z1ERWf`5<$Mkqm#Ck;`;yy?ir~+m0gcjf0W|i#^wUwj4|ihFVo3gW
zYa^^wkB0XhyEjL6^na*EO--n8OJLLLUcUJ4GgHSf)tC=yE+bC|*If}!nH9BPO8`;w
zVUAPt7f}yvOjhAPg<zM3^!~GXQV)MkJ^)%?{O0}@7ZGpOHlc>5o?H^q6i_$|57anX
zD1nJ1E<HIV^(aGp7eu)9Nx2@n-Me5*UPn_OO}m&ol9iq-dtyi^)z&-j332ho6rcXh
zE6Bnf8P1FlPp$qE!f=4NQbQC?BT1GJlh-y&EOO>@Xn$tsM7jT!#|vD!kYhAxq1(QJ
z@wmfS6$TYl;u&<u>)7g@;kK_QzOstvp6lYFw?zVCmI^8t#y^`BL#|}L;)VP2+n7rJ
z(yxfq{pz&{FFr{InlzEC<jQ0*krdRpGAG+`pS5>R8MAH?xhE`|tcIGJQlG*9930Id
zpJ%UEVEF{KR)u0X$#qW40*qF$uadVbZ!0-8w!~ABa3McaL4-lC1hrt2OJl$ykRz~@
z$c*?k<{kMwDFKZlIiU)Ks~nDi{b3lNTzTuDf|a+|!lNsb*XnHpZ1RS~pdQ3Q<88F+
zvy`SnU?<X1wc9vQQZk@1j*J2)aiT6k#{0WI-ehiqOSYs-$9#EOmer+Fc&q<;b%)8H
zxV9eVG~wL17CEC#^5l3r<KO)D8#)OoyeAbrh5wVq0;z<`g&KHKh$kTRIXA5aIx*=)
z^kNsRrlb0^f&!oHOhzNev3sZl7~xlb;Tqb#4Sw&9WFBX>KZDlzCaRTbRN^M0sE%r7
z4iz>{Q$MniB+$!80&J`SFFy}-J1P2|{hSspDm0=f$P*hu5F-w!u-1D4DTc_<!!Q2)
zI*y$N4$TJ`52a$~qA}ycG-BmwR=_K_h|4WfKAEq_fufB@EyUW@fO}aR4Ov|5gYb{B
zJ>DZu%g@py-+hN>`E2EP2aM**pwbcfD2%o!7f}M)ZWpM|1ejV7i*QG6cpxR8S<YP;
zQsj|{PBeJL9n$Xtgf{0T*UwqNjwRwW_?tg-=G>HbBLH(enx&uwbVQ+$b2ERJXpTBJ
z1_W#wFr=>_q?tg7qouqWE#`5sboaq4<~B=3*-3F`oQ~0L4^gRvJaAa#Jo+D7KPZTq
z--dyfslJ^1pPOIgxH$nh&kM*!P(sYoCIf%VW_VM1t6%b~NMAn*c7Wxou53nVGm~7z
z=2OSz30_`+yke?Eq$I5;s-g^@UU99gk~v<bEIxSIP|5vxe`5o=Jmi7}4?Zb?nUw-d
zha&veFKytJS1zCkdZ<MU*dK4;!rt$pn$!@*6s<K71y#gxwKV2rT^DsLh@;5*D(S}x
zboPfBjj60ib69EMn;u7U8;PgT8eYbJ|0){I1kXRci|1bI;lW2@Zdm6CiX#^<z4YFL
zrs|>njX}?b(OdDxjx)V#M0{I}3onh)m?=3nA^*$!m0z;(Nrl-f?C62^Kf^Lo^N4es
zl4ie}>Wvp7?pt6`W^pociaD@&T!770w!QZt6>b7D1u+7%%r6pY)M*rl<7R`hsNlrR
z%FQ_d6Yydg4HcO(@GOxm3qtz40Uo)hj1&a9N=*f$l^ENj9J~88B$cfCEAx0AZT|^@
z%`UmDNHOfESqq!%8yF78n3{>%>4DlyN^lcEv%XN-4BWhDWrAM-ssxlWT9XLQ5o_M_
z=+Ext^j7VOytPa^jU0CA1l=v-9i5EmCV;QpFP{)LpyL#PwN+LuDbrY&=D3U7h;K`w
z46wY5k|QxGOiaE9UJL}(^gc-wxbxlwFFw)3m%e-fsC4+kilYQ)Ha>-d1}aAhgHaeX
zXetV#s9L6CDt{qI*kQlG-WF-aatsC;@;sG3O51eN5Rvm3tKBE~GtToNe(|UFv2c{E
za)iIJ9$o=(1!s3G?0tKYnt_Q%J94bc2)R~^@yZLCG<+xif}qFAj<NR~*6%qPartMS
zekN89ebwK~VnRmIJmHdy`pWa5-vbtoMXW<)-qjTZC<>GRoczPRCrd-61;XwxQMsg$
z5~UN+S;3$zBnjYA<fa7z_ZR^`j?narfK3V&#03@@R|?GB6<}Ngo_e;0?ba%W`6f-`
z*v9K<`%fOR<;Aeb^U*7#Y&TB_yZQC=t4Pxn(+e@CW@U=Hz*~ff(-)fvB)jVPeU0Qw
z?U{Yo%T7~*gD0D%39RPl`;~=>GDY=)#p`U)6HG1!kLfczUT^a~cgvvBq$BqH79FUQ
zgr!~%M4eX25yA#c{ImbI-8-<`Wp=5&E^}!t4dC}cH&=i=PKRi1r})j^yn?jY<Ht=`
zS8#LhtJoe~KvJ1T5Y`Zd(*%Qvf;ytG=IQWc>>L?h5~)m;J{G~IDS}``on;cO@n@)h
zPeFz_s$q9{9-Z+zl6r=xzPf{Fo*dxh=@4V`OtXc`09~Xk!l*kl-aMxvJ#-s;nR%3j
zzc|s))g;8mDzLwuVyaoTNtF@pq!!JAoY&Q2QVTo&B<9t_J+T0Kr;7Vz++t{-i}o$k
zdnBH1YCb@<DP0x*e+IC8K6qT9OHn<#qpY4=byW_OMQq%Lrs8D*GnIt!Vktk%--8n9
zl#`>VE~B})%OU3PjnPMrU;Wf|T)2J%Tch*wC~IR}Y@M6D5N|WN2k|a>xchIr!~HNt
zI~{boc;$u5*j#IKS~|ZJVP-*GD6FVp5uE%-T%3)BI$%>|DeHvMq>nfTNM)6)B<9P<
zI3V-??nQGGjR^+|2L5gC=L6^}1=|vsTneR?OO`fRG~uN>LI_XNkmdUlzKKt0u9AA`
z=R|Qtew|$=AF~j@{!2HpzI6=<2dD&77^Q8T+xZ<-k~)o*K^#pZ3@Bo&aI{9>Wqzx^
z4;|??9t&qg04Eo-rc>I48H6!&Y_vsTf}$8<tNS7YBZ2B~{K`J2W<yL(32^wncXAAL
z`j;FqHt=@ZFBu=;rQ#*WNzX;S0^@#+i!YB^tn0T(xoFHGlpZU$c$J{$xGN$KjWcr#
z;3OM6LDL<m+#Ar*X-xXCN+ZI;(HLWzMDIXM7a?2VxX`O$=1YwZ2)RpLTOndyy^jMj
zPC-lFRd_d(jz}d{s-!?lc33oU`dEaSJ7NsN43B?h6QB60m+;cra~R@gy52sU1Q>m$
zpRet{`pm!0TB`c_xnHl~WM`xEmH5=+H|4GFMtJG$KGvGESU$9frR7;PW+Ps``#nlr
zLl$MK(Kmm%f?XOl=zIg}Z6i{jPb@1Qc#)9-fN7B&VA#J0wIq5Ub_QWI^<qQ~_dMmt
z0a()^AgYCPG>q4L;wGqDTNLZ_G?LU_85O_Cg&;<~I)$OMU{YY^LWVi^P5=UTfGLj|
z2B^;zm_HQbsmJ&6@|g<=;|{Vk!%VG#m)3t4<FJETG|K}CqOeY$9}G%SNc<Z4Pn0@6
z0u9=SLBGJLN1#kW6s4gh8!x&;irQjsr6cdqD6V6>cLs;1--~KJ!3!^M;M^;-IC`Rj
zmtGKekr8|UD`=a|y9Z#xC8_m*e83dNdF@I32PVyvY6WMW?&JQ)ayAU*b|o(@bWh+0
z0LdcaNA0FjD;FAjr82rJ+wlxybx+L2s4O<n`Kq!E;Lsg0uD(2S5gO4})<bMNN)M-g
zPIDZWWnX|xtn<sE)KF&}3TN4CP4|T#tIo>e+APn*=_>UiCk6ZF)u$s=YP8VixVG8C
z#f#gxeq$3I8n=Z3>eU20{g=|-V7E31UipzM8@#UCs{RuLo175Ce0?wuFZ}8C-RzSy
zwZ+za?a@YSu!YuM8~gifxN&11D=RBlTA9PlTm|_oaW@$^F!Lz5l**AZRIvm%`Ve^p
zhl`(F@0$ZS+lz9#xVJ{@AIs4#E>&@k9_8C8pTE4ny|RFizM4bXvOTXn^>uG`yqq<^
z+mSK?Tm0<xf>8VCGD`G9IQ;`Vm{I?q^%>Hf1Z}8}ss$F0hS=R4<MA)P0)+d>@)XU=
z3O3s>U~}+1s?`}@K8RBb8O%b2VWk8%-a&~dDPrRYfhI-qFqB-rJn4fo3T1C4nu-!4
zifS09JJ{=;!&38Y7>!!^+#l@VJHO{Bj}Pn(w9(r|&Lxj#5f3e5_A$8+SdX`}6jIqo
zLh0yDptY5vR*%u?IBx@$b9m{zm&%r@sx3ywW0ogFSv#;)R)2Pvx_2V#YjAV1ni2GS
zIc5)25luw1^m$u9vh)j==M96GmuhJ{sh-bjrjUD6)if36p+p?=%lqPP6S6)^0wj%q
z=ba|CkcaCG1}Uzt?PGO)7aMDPXzlMHOS@uEAH_6m3GLD4-rDYqGkI|1ziVYLJokD6
zwLiip_yDc^$zNWG=KnwESAY92o?fo*%{AZB*dJ_%X)!>zy^c$*E!@05joG;+EG^Gt
zZgC0=D<NxW2Hgz99u1x)M%MIi1z8O7&;Cgl6dZ5yVb54mV!W6FBHc^=&dtz<Lk`5e
z$jmwve1t30Qa<x}fpig;OHa%(S66R2Yxx{I*uLesx$>%z3t5M8XxEomqwCIytDC#>
z+>SHWX%rzYnm}`r`awf{=J(EGfB!lvl?-t(#mC^n-lq}M#AfzyqXErz1VL3mElLo_
z4Vzx5VF3Y@q@xsF+b~|HzVghaL9(%*gnTDTk}kF=!bbNA%r@>rT#4|?D?3=bv4o>{
zBzXD7tZZ>}999_~OI1^E_rcG&KNm#_0F(1dIt+31$_RHqlAzO;Zt`;Ssh&IP|DsL@
zt}sD@TwXMMIgM8|a-TE-lamx#Qmpia^OoV?^~4o%^88$YsX3svNmH!!Ox8DEF3$8x
zn@T_cPe9GQ*fhf^yuH$snfNmK$jAe(Kr$7fF(XkKZS7VcmoBxiw!VX%ojnZtJ><m*
zQJ5kKM;ysjf@vf{Bi-yhKU&@Y@(jYAU)W7Q|F?zuJiyP~e!ylS{|I~d%n!{)A0C}u
z|Lq?+GFa^$ntm6?K`j|%9U$ssoDQ+MwTG>(I%@S<EH2GqVQCiAvr}l!Q4|+o*eiIh
zB&DiC3VTV2hH9pH;|T;>G$`d8Owd?K-pwqaP6L~FVD`;rjCC;Pk};EdGSRuOGlpdI
z=X$eIgS&PLk?!ehDinF<ePul91gLy++R8gw`E)<<3P0f$!dpC5U}ho4vrlf~{P|Z<
zt)$GUG?RH;*!g7)v5RUn&Bu&V&?pjajd?Yyh?3MpootQZrvQvLk*yf;`+(*OEX>&j
zITeJ2K#QX)`okO88=S*J?I8?@yLjU9U3|m09%A!L8aPZJ0;%C8Tq%1hUBs#poZton
zynAW+PVOBnR7E9;aQ@{!9(cD-wYQ_@Q4)@ybBEF*uTrz-j<iKm2O|HnZ_-<0^#MK%
z+S)~nHGS+$$71ZPraW4a>6QayANiJ?Y~P7pP>($o{@UCROD}WD(|IAJg^Z%IdNV||
z!2>VC!C;KF?Okkc?&e#YyV!5FFc|j{V2m&(l9Pr<)6tB$U{nn&>0q>%UTl4?*%@7~
z<-yvI?PgE>*J;svT{`Lhk=Yi}!ASE?zJpKywVCLBUtMhtKC#_Biz9Q7^%iOmB8!^I
zDDQyUtf`VV==E{^$_7@iRWUU^kENAG%rDMjW{!q?(5jbX(93xmkPO@~o{I>bG7t6B
zM#p=2`}7+3D(4eeG-pwP2X@}#J!v0QCOCGpJE0HI)h=@LBR*MhE!~u;F3&iVAw`<<
zItQN2Tu3}JJ*WaROEETY4DjTaUqTcQ`4~0g1?=_CVzu`rRBO{H0!mU6L}3FFv{*pg
z7y%p=0Nj4cyXF)}I|M9kmcMG$;VjZcpc_EHf(Us)UP|PQ`!wdN_alxnymV$2Z+-g$
z4jqYb<$~Cq^XyLr^+2U6Ub&JtBjBidtd3A6_;Bh~pxTIW<4TV9-UvxGMz1fkA>8NU
zb%5Ay_JK*%W~r;U8o5Z>el8^<rGbN&l5$2a=3Iu*^xlTU0?T(qc;y+#nU?2)`(Eys
zQ5fRaC-0y5NM69>fL)SnjS$W0n5)+G8m&$b*DtrijrDEpZ112qAbHO)45B>eG_#_~
zKoM~vsS-BQtmviP(Uo|$ccIo9?Vu>y&kTZBexRMc_*Bk=WnX`w_D2kC^6}*PpxDcQ
z?_V`4cl}0D-1pyK+1&g7&E#pU%set!n0iZ^hx5rWYlUerRIj!a?N*n$xa9H_nltm5
zo1eq%Y!lOSBqSA(>vd$s&ogT6lyHiP<+7maojwOn98O8~H}=rdd-}5w-1{igQ%isR
zN%50!*|#<?b#7&(<@2xZ3Eg8P)06~EWDt|wj&oOa$Jc<aKw~~+5c<;R&!f}ZLqu~e
z3z-6ZasO8k#loG5V`~jzNI42E8e+v8g#>KWaUf2@oD%7P5!x5#*L*VGrK`fNi7t^0
z@d(f?og&Juf%f1cT7yfNP3}Ukw~ennxq+|y$T1{0Qlw)_BUzTfyt(lAC7PATP<TCk
z=UjGh+OnYJ83(->H!qEF^i;x93-|GP703yBMkxu&$<bDyFZ4&HI#BZ#Mjv#&PoqpL
z?X~oFlF7_2#;DdS$jN@)=n40XWrXg|EpERPu8ydKN;O2SS)m~@A?fvo!%@DzyN8YS
zU2JY_q21X>n)XlxBalZmH~Y!!gh7$y)v$>uh|?k)<^ADSxIMU5+Z$fQDBA&|;ioff
z{oQVU?u(<W#X}Zfub}ov3~aQOA6svHakC#>{j-he^naUWC;rRM&gx%WZ9R_p#sgTW
zzoj>m91h39FdpU|6k&=m$S}?*Ro%wsMvSCV$L!oP4jo#-%tDh>E?Q7VgA9Wqwd+ui
zo0{xtvB9M@WZhg&u#$=Hwr9@qwgjPajW16$=DAo;Wf6;3MJHBtpEuEg&F<cQMeVg2
z3%Nea$_1U8hJU65DHH8-U&%#cdOpJQUtPoHYu8XoM#!=;>Xmt1-~D}b^9|Iha|%F|
zZc?O{Nb1OL`oyJ?IJYv<*2aTFXoQ`r_(j>_U(NnW?{|{eU{QVNQO;c3baEFel@u3V
zS;Jc&UdF;=jJ2COi&ZR^G(NP?MzmxMWLkKc)EvqdlGPf&C^h0IxN>%YllPTppkHO3
zAo*WIrc<VxdYd^TyC_n1lK$Ck5ueZKl|Bu8YLHB3Za%=wQiSar8FzD(Dm5>2Q1NvX
zh0MiO>oMw$h>y{5oT1Ze;rjX>ws*GC+TX`;*hQ8Ofp9GL@fB%DV}3NKA_=RAqcF|V
zVLljMPg<jkwf1loLz*d@w?CT&`=3aIjZY2Jwe>8g;jHBu|9S<r*8#BErWa+AqMN>a
zxr>+oQaw8HH?!=-_xATU{>EDCsZ+DHyK!jxt%K?6op}}}@gQ%7qr8V8pbw13vJJ7h
z-op0gP1Nesn3-F^!r}sE=ch2&jKwUkmti;%qd(~xl!Qs#LJO8f@MdjRZkhGvCARr|
zi{rC6jFFKkT)pJ7gcT+HK2<LPau-IK+Io%r%FC6zWt|Ta8LF+mleA0}GiW8J6m&7h
z=4ubmJarafrG+#bAqgAk4X<E*@HmoWMnEkjIR>SniKd?s-$uWas5W9P8r@HTjc28*
z-i$@V>N4U^c=6FECPCked74Y~M$bWA2vnqKjbA}8T}2~a!eFqEXP?=_``^EU%?<i&
zB^o6GvqvL(pM+X<TJ_t@L5+l`XpbnTYAwe4HEOd;5mWQIIioP{aYd5)QI)6jyG8gP
z7cKMWr9)cm{K%<L<%$bR@SDC;iw%<iD)*yBmfjm-J*A_Y*Q`Kd2q-hCDsjXW-Ntl<
zhw#vA4~BiLZ?|xBV*@)oJLva1$nsGhV8m5SE<{&kbYa0ZH4RkbnLI9vG|xL|53eM9
zgG;sU=my65PM#P2UoWD;PmPL=-yIffn^`t|jdT9>3uv!1V57|^n+x=_tGj(%{pXc%
z;m51NiFb?#`+se3c>d$Hcn)**yD?ik-D}26ROyUISuY%8z`p%K*vDYhM{jit>+4n2
zYtxutoX6bk0%qo#406N=jfUhvQDCI<5vAlNKD&}4d3F5sDt^o#H$x<@NQMr)JM(ut
zn9f=@<5yW76|Irvfuw}1wAys7`z<_?4SbP4Nm8}b`}@-8UqOGkfiR}g=rr)9ip%@I
z%ZB)2M3dhMeF@m8Sdb{UM(HON4q|SzlH5~^00zQpPi^kA1|}spXqlocBpk76M~RK*
zqDXL@^|0N43XSP+L=+Ej@xl!}@DMFbAvV^^q0!=c;`eG<>yu~Ut)GGWlw4*=`nVA7
zJ(9bOP@Qg|y-$c@(b;6B^WdpjKCi~aezqw9r73Djd^)<o^Kp}SsbpV`O(QF#*%f*p
zLZ8sRDshZTHD*AgqC$Zbo$fBK-rU00_6}O@eGCR|ZcUS6+5zI2PCn8ShKP$gVwUY>
z$nySZnB7Es_(G#M+DeA$KF0ZeCrA5NGVFX}gpJ2X#cnGj6TFEt-S+zR4`{DLV0$fq
zBL(zMI?i{V2!rHLCDGx(JkE}Otlzou-)y$Oa=H;8#=_Knd9!+NuUR<~kMdzW$h+*(
z&xN;OjQ*gH-nC7vU9Y27o5tMY5*8NbIg*>6i+CCDbu#qZB3W>iFOSIQ>rzCb`nPh}
zikyBvr{Yo~A+a@zn}kQ1A<64$*@r)oii)1jO_^79ig%%k*IejE`&qHV$a|VF)C3w+
zF`jwyD%RI7qf*JaZKn|}VYB@ubkiG1YBO3sqX><@C}Jat2k~rHIEXntm5bNAK;3Fk
zwtvab7KxT=tGsI~BFGo<ZUyV&a#Z3vcKR=3dFq`=!dVQ5J9y#6O}z76M-XnN?8!z4
zl*t{d8|Wc-Bcq(4mTHD3PAfgscv4xIhea0S+AAYG_}&KF1@T072U3$@=u%3r7{H%7
z2m5w@l-wHKF8d_2HOe!{_Cdrs_IcZsGM-AG0db8Y;sjImghwROL;Hg+);3qMv$u(M
zYa4@MhpB`hkmNj~#fp1#>1C>1^htsyr<n!D=#AH~KRg$AhS%e9zK<*zzLI13GX?g4
zbzE${Jj}Ox8F@v$!NKfx4s5RtaHOdjq*wO_xcbwTaPHsKqC4I)8tweR{^;6&R*k+o
z*Q_4KT<z{ry>cv#!bM6><559GX^MdOilU3&poh-2O{`w8q28Fr;vwSX7Eqh2BWXme
z!x|50;IEM3madi+F40N(1qb#OAw{YhWSYQJPvrxk=F&_{EqNl6yIeeA)HKswT|R?W
zrn3GKGAd67Fh@18xcTO_HqM?ok4lA2{85c&Fc@#(M(;DIBsC`sp|q1CGX^tI#HN){
zj^c=4lfr@js>V-=6_ULRzN|TPbit$wWf|bqhL}5~f|&XOD0SlJAB}gg-FpT{r$34y
z>f-Xn>$vy6MJCnBHH3>Jo)4QJH<!J)r6fn9CF9Fvuc@(sWFOZq4DrBwsLB7JH(z-$
zCsIZa)Qk_ED9oCfq~6!S-DlfekF9A$sGva+R+Y46Kz&x+fx}9Qt@Z}mYuo6wTj+M%
z7-wyupaNRX{2CcX2!Ilj#;Ar3B%sA-h~D@nwuV>G8f;LMmM2jd2jTdYQLz5^$JqGv
zFx$E@%xDf6ZYeN(g8-XtujaMJ`Cc~8_nrmtBT2aOe@}78dj`X6KeRo3?z^I5Dw(aG
z#7gtgUbAs$!e0Ja2V8U@`Z*#hZH#WOgYLym+_+L>PHuK?fh8mq$u(y}=5<Cx0y(m$
z7Hev5A#%1z-hNp~;-{tuhR>AhagY3#e`G$Six9o{?XT!w2w@ZC{S?%thU#F^oFntX
z6i+>Q7I`iXwyZk~0$kqzRVM5Mp2=r@oR)%8+9D~aL~J6?W!Bl=j;3`ETQnV&b|7aP
z>)bua>qFjC6pDt;I5v7+YM7_shXAL6o&IxJXgtcq_HeL|GcRxA-S0kz?G2g?FP#+J
zB38DN>2WlEZ(_u@13U}yD7uT25IfridhHZR60<;-wZj?(($qx)d~z9b7yN;)5&tuC
zpQeWmGW}g{w`1lq^N1W#3T}L-sEk?x$%%OV3NY^GICJ@T(CKU;3aP54Gh-w50AO$o
zk&qlCAfheDDBVSG@Cr6Y7tu+tV4U|cl}zKol~Y)#A5EXQb}1Q#m;S_d|C#4+WiWe#
z0oxxQ#nJDhd}A=mH~t_DqCZH&!!r?<zi!yy{Nb(sg^x5VN7C8aJ(x-Ez*Mw=EF^EK
z0rL?Q)lkWs($-G5g?4KlYd0EbOwD3pc@YbXbC{lMpgA3J^w#fY7<6eWl0lQ%C6x)x
zf!xL8-Q)tWDc^Pt_&T@=ZxL12+f;hHM`?b^Ka_1=3UEC5wgMzm1*WDVJpTD}*xkN?
zN{ynTF&gn4Zni&*Zh8&1`htR_0Ss|zBE;n{)|yEgO7ais8qgjf7a=LM=$?pp)&#Ed
z-9Sx;O=}d&(@(YHDpgmC;Nq}`LB5Th?$bCl{WU-|!j(%m@!*5YT;<+clL{%dmr*dy
zudSYGe$B*=zeJQ?K|?KK$iArE39xx{h@&SH4EpIr4D1^92;e*&i5%-P-SlD3`7TUE
zXj&nqA=W&Y8mQF8vACcCDT4z0>p*9l=ADw;Z-D6;dbz$%Xs3!t%28PbHN;_^TM4tg
zhyLgawno>{8ehX8-D0h0Eooq(c`RIN+<^z?j^|&0<Rs3v&xD`5^fX4r?oLS}7q=vs
zy@7%450BzVEI7z+w16AG9EFWvX~Yk|dz3YQf35Y|_*$@?*W$TwvGy*^)gD5lvc!Ni
zD!LdKJp|M?647ejMyu1pe(NT#Uzx(x)GX!~7O}WIhvsYpjp>+q5H39Qb3QRST~)1{
z*%H~Tgt8bhX|Ggr$;LzZ<xEw$>*Gv-YpF0@ZQ}UriDC8cEV4`}1&wj}!Vb=#yM!ni
zAx%fjVRc8VSZjY7No`hlOdHd!0_xIF;no;*!idTJgOQ1=5NjubINCbD4dEpj6iTyC
zab2O;tdM;nRUw?EkzgLp08Owncm|78kMV@8;b<2xy|{+Az2gLSw^B}dc^-jTUbx|f
ze)OT=U5;5UE^^<T3H6(oM?4tXiDN7{b6l!5!%H8p(F}fy>O{L9m&YR6sNliV)Urf?
zMo%*y<mm1c=<Wc6eJWmQ!G(`wfuKfX1L@H<gal@ETq2q;*26g6;9)qO@pW{wRb<70
zDS~>uh~>ups8?oCi)*My)w~v0(5U2?ni-+VGe)M6GO_0$k6U|tg96+CFOZ|IgI+Pn
zUjA|=Tv=UeK5**L>{~}yTEB;l-j}f6{SxZ&3Kkm=W2SmHn(;E9u!Ew9ao*$5K91>n
zY@^fZpxxTQjcZlZr{*xXuz<xS>UNl7b4;oPvV^2h+?-SftvAzM{AN)jX0M)8ZyB-4
z#cl7y>SYtzrrl491^U>s=%B-pBVcMKL~Cz|r=EBbMM%61HE<TJNV~ZITRHKKbV0~I
z8Iez5R?CT73xY~0&F>Vs(dj|JMz?#T5RET$)9w9F!%GA$NA`Lo2|Nn|%pz7AU8}5_
zm|Mqj6N7XcdxICT(s(!GV1TPvuH)oAhcLTX!S05>f4o|ZI{|H0nsv+@H@oGec%WCR
zR7m#GXUlC;>c6ID?KP^Q6Q`Vtr1_P@LZY&I0dBXY=cL&HJz!^}KzCOne$rOTk|IxF
z?kKb-kjVpqT_ub#q@L-)Dq5p+=!`ES&Dsb<vSwezRP7Gb;wIuCK}>zT9PNgPSx8M)
z<{b3|Se^xTD;3Nq3mAa<r2KgD*4}ObVDmTs<fE~6!(kB)adi6KXeRe!vws<T{a3I%
zcpev9zlbQPU?#Z>i?z34I=Kh6c#%0GDmrA;%0*+BqEypW0=YHZxLQSHY6kO*1ab?Q
zS(w7ibj*^9Q9t9#D(NA4q?$4`+?-5xFOz_1v?V|xCY34ya8dys_^k#NdS5T>v$TgU
z3?|jX0<~$f=nnDa&z(i5zkw*ukY*|B(R{w%{vx{RbyVw%F8$?h0EyCaPDQEVU49O^
zkia@N;>0R!3nfN)3TCw1+<R-Y2}(h-k>ny;RTm4hZD*N;a%_~Gb8(Tt)!K6+#Bm*4
zy(h3xdkgO$$r;X`y@|)(c?zxF4C9eHmrQ`Z@2ugw*?N^*i@1nqs|4um0ln4;)mk0>
z9<`E9nvK$(%_zfX7;J$e@S=!}zM`re8Cu}Fn*}<%1%@s4r(+3@Emj6(rQe#^7*KVS
zPLLee+P{R|)+PQtsN*9^7BLl_L>v*AQN>!6k|9+^gA5UM9YhJLl`86S74-@*n?#tc
z7nq$2F&kI0kyFxs`)s!uu$3Fx<>f^&5E($0XL&CqvFTKD3f0PCDnOt=T0?hy4STI$
zrYU@ACdaYVcpGM__ah9K7~B}-iV;^=sai!<r*4Nhxtq9gWeSZ3f!q@2m*z0LFopU|
z%qKoaax~<3D66!lWE^ohcFejOG!L@B=o?T#vl~49fhQGUVmYLtAi&IggqNPaiJLbs
zB8sWIAf<jk^u`-l?|l)~YSZKQ1hkxXO>Mu)rbtrKnCI~ZkrWj4qNXb;BtFdTgNbu>
zUZzXuT(z)t8@9<;Hm8CM3DjnV6gfqXMTK=*Q9O-)e+}FH=do0KH-eytYnN}}<f%iL
zUT9$JCTZ~weBiESPA2`7&G4?AqsN$>N5sf7Pb=76ALGb9b#z;WHbYnx>Q%S%GQFgz
ztfDC<9R^y!C@Sl%0sXxKgRV^3qF18VpuzyrlWw508>cA0hNMweeO{78+`~%(>Sp~I
zs__!j0tFL^!~@a}k<3HfrAaUy(?Sqck;FAr3Dn{WrYpcwQpLhbgnAr>Remfjy|>SH
z%K{spibZ7{1w^_MDbAxuP*BO7IF?`<&Dty)$!XC1g?@S+z0ozivinI?!V0F7JFt*E
zjM?fvh$<@>7h{aF7P5eh!YJ*FP!wZsVd-|(ar0UO^{E+2S68U;Foo&mij2I|>T24T
z=!P#m1|*$b>QT9VM(XB0xQeM0k%+^GwlpQp9P^76Y+Uc)<rmK&tPI#TNFEX5dh1gN
zSiD@7NGg(^O)-8<a_crwfD0YJ#utw{dKjrB|42s#0U6CL@EwNrPDX3F5{jm;I(UcE
zZ|2)5YGda|`I%)RlqybRtM_HhCU4=#r{g`m_~KQ(`#twFsEqq2C-i*T+&^4q4#iGf
z_u1kV9ppl{SK<mbZ;Wv2AuZPUwJGJyXwirp0jHNFe5GyFE3mf)^!9*ZM_h2r0;#ru
z@s9^o+IF)RUdVIP3Pi4GlozOki*lZZGB<(+GF%~*A`E?YR56Xi7?m(VHA+y4DyT*k
zGzi#|2#YiIaN(`ZJiZ*FLdKtLC3*X7w;-??P>2>x1g9}q-?=@A*mXXg#>k5?^EzQ%
z#Z-I`8r8dyX8RbXH_;hi!+!gdh&we*CwF4L{vevkDa7F+q{Rr-&PC26bkS4cftne6
zy%sv{HLPB3pjMwjbAAqsEAv=bXku=eR$k)bsPIrA9nd1I1h}Q9UctfIr^;%ZxTo?+
zaf$?3fDD9<9COPN2Hg?9`ov2lXy(WwLyCGlht>9H(93V2R$J0mEL#56ay^Vg1~l#q
zB@@XiUB)`zFvuxYr)VHJI1NnZO-nSwR@NTwDcBMs5O!y*QP3^}7?@cRLF67GordfT
zOW-S3AvEr<m#$-X_#75%@1SmCtlzkbYu8tB$B_lBUn387Zr|26DpxWVup=;~x5(2_
zl;%@cMsCtA3Lg5rxk{6t$ooxfm)O*^0>pK&@gwazMcv(fBK(1VtKf8#sY{KRjU{k$
z69qXj&EqyLsis&>Nk%QZDyy1YQA<0uwMx3q(X{l`azRJOQ?f<AMr*VHC*+eC(f62v
ztrka^PZF#gP7ppki{J_sA*h{-yq|8L?G^+!+gP(C{)&-R{p2Jue>RC4Mm#r*QXo1N
zsc$h3??%0H7xKK1LArtc@fB?Dy@X0o!)$Ul=BxK(x_T0ga0MAvSJ7h$38f4{g-)Uo
zdczL7H`lR#vx-`+iMjbjtQ=mz{K^z&mL;`I$!dutBs%rnfJ}LLC*^RIJ-5uri~-{H
z$zSc*eIfdrAwK_wbJ*U$f|yd!JVg>W(I4H!R`*F%sli>PDZ;B+!60F7jSB_VLdDUV
z{7g|>M4-oMV_5*89brj?mv&kcg58V3gRfb!EYA?;WQQYyu{aC^;x6U$5I`efr|5**
z10>B&Dot!t)K<L<D5&VLi&tK{fWwDpF|!z8Z&TVk=mFw9Yy0E3n`=t%bg|Mzo>H-*
z0M>4VXtl>!I#$DYnDKpB!#F6=-UfQR1#8SCk(1Yu#l@RTsy=ZRn_97f(oC<0q1>hh
zw04_AMUB|l`B?0sII7l^o&Mw3<pM#>{4hmn1ZtH~K`kPxCBkei!m$$}aEw|PB2)-{
zC4j$ewp$k1EQMnUfmQiPY)aw1mGs%~j8?!g51Anzt;k2nDHP!7sE&Ga0=3F9WJL!f
z0=e`WwpuT83NRDjiTUbVFjKo5alFXS+s`}5iY^Lr9gXM&9iTVdL-)oi)^0Y?s7+&f
zZXWZ?bC_G6#?)*L(L%_Bhbb~h2c&T-b5qX(#0gP{d4Rb^;6vXLV((^%pZ~X4abxu&
zf~e1+Mqor~;+4JMKtPThF}-)YU?`<g%^H1I5M$7{-#LmaWgqh5+8V{_v)rT+V7YIe
zMyiZSRM1>RA+=ADK90bXE;s_V((!{UrFz_jvx|vq8{Ncq?<p+S-_QE4_Wn)0^xP62
zdB-UX`Wb_cRfx4FS^o<F0AnjjL_t&lL(b#cm&!M|q1L7>q@K&TLX+tubgm7tyWPdY
zp&Hsd1v)zcf2XLL3L++}agHyXE~=}C69ii-Dw;hLR`?@g>=WeleL{a&W{9+CNmwVT
zrU07&9P^><$RYe1gBo#cVJy*FOrTc5bS=h-<rs?#RQcjrdeq&J7F7Pdjka4B*m%>1
zXtB0di)$|SQ>Uh+qdXRrj6Dd{Bz@t?fpl@wNK8a^&ZFlD<m#0>kQGCWvR!n>YuIc3
zD#CVzspJ?IYH!6{^&V6zD++QwkXa^iaUuJijnNsl&|Y1`+G-6+(!|X40u~P~U}0qz
z&G|Z}W`%sF)-J04@dzd|J!R5bi0cy%0q^;6gv(C>KljhB;L??ID55s<bi`L3O>4il
z^D7wU+eqq5dT}a%aFe@q8Ca9M@NLrUE;5fwE>0g3wXsHyI7;f}IXGR5xgr}}W5Qfa
zR9<O#izoO{u8o`~Vm6x$Wuz~sp)yuZGiI_GO6IWJe-_i#2N8qZeW{Re7PWdEcb`6t
zaZ3E9^h}cWi`!mxSg`F04Th;qg{W3TnJZcV{eBxedwba2eF6J>58>*WMQmS}2#^do
zIXc#{cJi#R5>WFvL!t+0<LJy2X6p%90HQ!$zv}BOWYpWs@V4xnpz0<)A6rCmYn%aF
zz+fh6sCeTMpwVX(2N4oZK?&R<9G!`AVu=<rsy1hNHX6}t)}xWjxQ(`38rTRH=%S@?
zolX{Vv53^eo?Uf0g&~ed=UD3HND&)f%qF~~IG#g1sm4X9p%ETKy>bjWfmgc2Qi{FS
zCmASbD#x){e=BC|51<hrLYigV(lth(9csf0314%J^8vPZ$vf*hs^=SM&dgzUehxG9
z6xG#HYbFe6Q!~KgVPJj*SUN0K$bb7!d-&~7zJh*!4H={<nxf8Xw1ADym$5fEi)w9&
zFAhnetnu7B3MyVyCJ`-rLTjazKu((BwFQbxhGsjYFy*E)m2wI>R(gybmu8WhMp7EN
zNxDmm2R%1Ye>}h335V$!E0rl^X%E}ICvbH78<CQYPO*)%FF%bee*`D*If_9GNJkl8
zy3*Jn3OSmiP_0rU7cd-+vA4U8&7C#u?XP3dC)33-y2A}r>ko>(d}>!j>Gkafqj-8f
zwT;So0JV3vmA-wRd#+#AwqlUK8K=r(njBF~nlu_tEwr3~nNHdbHCp4(hEmWF)yN{Y
z3XaWGaL1g0BY#|ZiflBdPsDP7+h)6kfsNIZyh=q;l7~SYl9Yi?9PX{sMr_Jk4BUh#
zqM!74KAk9%qqUo!N<e}Dgj!g*Vii_VO^zU`EFv!kNb?p3=_W3=e*<CbH!&3-#bS-B
ztEa<8bch{b$N31OtdBexA&AK|bBvTG4(zqCwRs%@s;D=~5qJ*M)6@ZxpfR1GS`E<e
zjd9^z8#`O82$D67i+yAxYP%u5+6sEZOIUAz0ZDa%iy{&U#U8gNphn|}q<xA6o?JNa
zfKD`KG)YSOMRmH1caic1Du#0yr_xJne{rIJ=eD8J5bZ)Bu8o~^oiCeo9#FI?v_FBI
zR7mObsMZ$I?w-T`=nl*zr!h`Dh@vf=JM$FwcU!pYuH%?pZm@$a3ta~^`DuiHyN`|a
z7It=b*>Sly*kVe7OiIO5uBLohz*Say52iB{F3u)>Nwj6=q%OVmMA8oYj7jr4N&LS!
zfOn<ZvLed!2_kYZCMtl=ElGE+Xh6|f%q?y)5>7!QBw>W9IL3+T3XV64iBnx64F(;I
zkdNtHb;ew`&34NIo1TCkty`vI6jiYYSvKYfAjpQuII<9sqra0xT_UuY(^3X9F2fON
zE<f{x5LyrEykTOVO7BOQlcQlZqiheu@j9+_KNE(X-$yl?Wg>j3`VgAcqg;s`XDPRK
zWf(FqSMUf2>ILjzw6%k+4Vzpp=^Kx5sH6xg9gIh9a&G`l_99RljBnyv`_~XBQwV9`
zG2^sUIsKkc65Mh$rW!Tj)F}PY)RcKJx(`(;=)w-kPoMH}neyc-w*q1mDajIIL#y>?
zcTJlYn~b!gQUWa~BJZF~i6kBZYT^naX(;UrgB?wquQsvX{ykJ?>!^l@k>&%$@gCMU
zUc%PKO-wbXQJ<<a7!7+p^apK>(k@2q`Z}QA5*4$Wf15aTQcA}hTsC>)n2U=9sU^EF
zh2V1P*rc{lzk787n?))?YuQyY0dhKNiZXo`ToZ^zLIK#sshH#)1Z<)3Yf><XF;|Om
z$4r9dhRh+Qs%p+--*ccdK$cRX9}IKpce`!2TNc<PjHkD!XB(}|M1+uIs`5>hN`kmj
zWB1)rO3@b8@ijWj$#sHGdQo@t5MYiZ#Ku*M4K!ko9DM09dJ*cpZUU5QxPof3OjXi6
zP1{^yT^)QCtKG+WAn{D~4$Rdb!gO*s;%JGZu71|WFzccS25i;D@(Jc=WNHwdo#T`&
zhzN{_%m+5&Mf66OaDD%G5yln73H5^V2z2L%CTXa281Sr60y9`elu}XRY|7y+RDf{9
zTXd+5O!JcN1KCt)Drzh@O3=4f*Sje~(0~LT!RIx>OLbaO&%o<ym;O<SjN@dQL7X&s
zcg%h}>d`R_vlfqrE6~PnE5z<TMV3@;r2#;!C1%Qjo`WPH1l}>~yr1J@2kqf`bOx7@
zjy{TtjW+bqNgR2lYeXX}Ge1`+_M+@8F%g`j&&syA66_5G&6=tlo5wN}lJW2>(W2r-
zaty$dhH|kWj4@NIVqvO+g(O6sc3z)W1~3P*7>-Fm9EMqeURJ!RW4mQG(O*R+XKR|F
zTrBeCridHF!>EcZt8)ZLcF0*cX0DB*H7+24l=yUBQ&EB1Z|DLNGMAP}kxS9pBwv!W
zh`^HeB#vh=70qC(dWvNvqqG%n4=?BIz315&aJqU73)TBDLvoU6g$eg@F+y4lX_63k
zKoIa|IdM!8DyX9ouW*vQ-TMO8x{sq0&mykP^ZrUNr&S$e8d2=hP#(;pG7l>v(8c7M
z-#JaC$j-#HrK<;zC}fG6wPOnCS>@4H7WfY4|8Mr#3<J*5!_rWS+GK<;J*`wmMfjhp
zU!2hRNo^UU!49tN{TdE8KZ0iUZlpyYX+{ku=7cM)S(ILrIGbLH1UVG3rQ=<6$7j(Q
z-M}#0LYnW2PHh~bVsBAS9JjgDQ*INu@ljhNE-EH)Rn!MYeS(Q}^+0qdHyfX(F|S5u
z^kB{|v<O3>HdRS5->6}}UO}CBL<VsA42+>n>HN-O1vX%u<^3$D5bpLN+HTp1jW#OS
z6HgISgScJfOj>xY+QggCtVSZUV=AB5k&zaRKqV6($#UU)1h_cPXWlI$;9~;|;^ZWP
zW6v)=#W>kfE{-ar9PM$+F@<_Go!62h9EFV27JAth_S(O}d))}<(X8Bo>B=cgCC5>Z
z7cdpgA|)wGE|DDZd7a@IZ1%p)RzKD1VZ@cDM4MVob5T*LTl2iu#4Q)TORiU7An=pw
zr48LJ<r_|@>$QZHnl=OV$@{+gXVJ8k`xtW=WJ3ic0-{JxXG=5q<*3zHFbemv+W8IC
zhew%ntH*~Cp@9&@71HNJR6&YSx`zJf8hYbv7-svTSETnxTE)sNDnXM?F7rI5DOk>+
z!1aPSHxNHYEl2;!@sXcJVN&vF?)38I9ejf^lv;q%$;tFkiq<Hj;NdyizQFJwMyOY+
zm`Q4wu2xWwg#l*eu^X~2E(;>vjO1$^Vl<-O=VE-Y$^Ta0Zed_6ilPv|<Ctbsvi${J
zAU2!3R2j+nDX9U8L&HLZs&QOpA2YK3VSvkI#;M3d1jIOU<5X05H@dJRmy*hD0&WD3
z%F}UcmwYFXsU}OP1<N2ih?IaX+rv(J0h_~Tg<lEkNP;<;%wFUe5_gwxapwaSEgIFk
znKL9gi3vJof{cN=Kg&QgY826!iwEo1oW_k(9s#z}S<#!b>g;)>EliG`*Z)XCt|V;E
zXi>)5QGKzT3?{V)GAdB+j{(dU1c|dG)zvXnA;}kbDl@9pdBkxI!_g+z`j=UXlY}$u
z{7c*>@s$+i(ifK-qbjGeGz6NCi4%g5zhp$Ro0wXFH8?F>$9#tm+r+R_{DMgUE+qgr
zMb)b;cv-C%!BU-y(@keZmFFU-p(c15!zZaYeGYU-YHDvLHExxvL=?$MWk#mI%ZpL^
zDaTkeCk02i5sG1ulVoU|r_`~G+iAOHflXIkn*OTYJR$+$mLAcAm-nL!GZGi?kZrEj
zb3s8N(lj;CMw$+e5O8`*x+}UUxff4?iy}AyE+6cOJ7O?o@<W^%DDrZ=TtNUxr13PT
zl#S{Mj`GrsytrE2!Zj#%`2KXlC&^LNqlV7^q%Bi$QgdwP<}4K@#zuNVnMVujAw7;N
zp#ey<W>(-<V2IgWms_i}>%fMWaQ5xRU8T^2k$@qM;i(Xrmp6`(+uA6_F5G_7XCk0R
zuTO|5m#0~O6IUr0G5t-rEGpJeRg;{Lk08&DZ=}jFag)+>8ih0BXJ&(A+@~#{k-RsN
zw9p7UuIgGqsT^1o<aths_rwInvcI>C%hbMI=rYMG4|wuXr$U$)A%W;<NIrhVsqq6?
z>PKy;v;YsN)hn!Fsy2;Ur6Sc&(zkhFXb#Ro+iA2$B^jFU%2w?m*okuxU_`^iCz{@F
z4}iO6fsM9;ib)>9!2vu^St1~z3sp(#C<19)M`KDUiKq^F^|V=;bjI_PChE&88VqdA
z!*QCbT?=$!=|#iom{n1^^+-UEPqDC!*a%1r3?;?2bl0NF3X*u1fsTEHD4pfk$=!ud
zDVL?4zMHQCnpT1dv_#So1T_LVvBcruHCkhB6!nfqh$`yER_H`smO7}Y${Y1}K-|R#
zirv>-s3UDlCihUuuEsY6IP$)U1`zF=VuE^bxVTV7yaKLtJOu!0<LELbj!-bPJf0No
z$^ER+TpB{@aSC=Eu~m>%Di|85u|V7N26ow|StE%i$O2V=Q=cgpsTv)ZR12(LA8|Bx
z=xB(A#VWFKgkhgRo8T28by`sIfF9he&!Smxa@C!UowUEziV3B2vmPzhaZ{VS*ddKF
za@i#=ISNN9iO!?f9^icoZ?`P4$+~7!FJ%)BL>&_J^e449@em6u3GTdW5&L^XT));q
zdvD02+Gy~Huyta0!%<CKXTfitPjPxmQ5?B3P*sx$n{f1?+!{wxT69p^2uCIgb{yTg
zqC;AOnx<y17~uvC5Lk&aUs5*teIk<Jv%l;!R2L5dw~%{3DIJB$I_S0vVv~B142C9B
z2@r6U#o>ZZ95<D`420H;inAw8@3l>oj<2*`+iXqQN6`ryxY05q;#_$z7Rj-$jjR*N
zda8_~7_@B0D^US-jJ)Yz?q};1)oJxkSges0M?Esao&~V%EoZ5r?6U#5@O^5sscEK}
z_xh$Mj+66_5iOq8MvmQ$5U;%Q9L9MYdG>DXZbg`19^>foDr@@s`#Cb2`B2TUwK_z#
zqPj!fKdWlkL^96&ZC<Ixp;QemfKf*CSIML(;)rc9=FeerEd6b;-Lk+2^{iKE)Wp<n
zn^{1@%ye8}@o<9g`uJTKjb&g7rHEHA?&76qx3PM?$GV`TN?uuX5$jM5HhI*xmZHw-
z5T!*arA7s%M?~;j#{$Jzq>t0c&2dQtauTU<ip0E|MtzP4l-rnuRv;8Ht3`F12-*ef
zO<cGBP6jfyAmUV%A~uqzaBrw}0jS1}MY{%y8ey^4qb%o16l}8&q(Pj<*ohiM<WdtB
zMtU_)Sf1;|DyewN{@cXr63o(&RP^#ValO!<^HK^sG2GJxuQq7LC<P<zC&_z?-lGb&
zl9@Q$OGQg2&WU#IO(luEaS|rmVR59LMpLBit54+^_5-|f?kt{u`F};4rdZv026vzQ
zFnXN_(A!IK;&hJrBQZC>Z*NApczKugY_c1+5P1E$I*7Rx%8B%rzDUqP{jDj18_nj}
zEAn<{h+&ZqwcqQu*=}iIbE_HSKxt%ef=jyS)A0!RKRA!Upn~1)F^@y5Br)zjeF*nI
zxQw-%Z9M<%7B0WiLa&=5sZg5g8Ut0%L?Bl~fhuC2ghX=&sMydKOE7k=D7A1Fp)trA
zFK2&O(XX7yl)h4$CXot@fH~^3`632@V%2M{ODqszlHB?YN#a3~8v&X`Y|hDJLgGQq
z)@D;=%2A&MHwRp@YEpA+E*h|{qXL^zIg;)>-Gg0N9>*@-n7aR*N=qt68SsRTRba?X
zQkM<}i)MW@PT@CoCaXIKRH@;9k+($EU#gfBkc&c%U!O@bwUFW)%3(0#I8tD5zlXWm
z2y=@yban~g<lG_~CjvoA11nYP#wc*{+#a4e^OOAgQ}re6?p?=|&-`l~UcL)=9{n2Z
zY~O>q*$Ns{H4KJZxVg59TD8H8BFEyM2fXRtWHP)Rxxz)wSr{<KmQt(WC<OWey2A`<
zk@XA7>~EXx76vw6_Wk*~ys_;UTj|K}aT1|9RmW%uRO@mfk_FD*PRb|z^vo<i{Ksa|
zes3RV&urt&i#yoa7_h#mS|cDZlSMJWmo%)w(NUh)c*+ntZcxf9P4&hBc?AYGg(T1;
zOC?QN-CkP}!T^zgNb8HL(AW3tNieKGQ?zW9YRW8w3Ypkwv%7*B6X+)Q5ck~jV)BGn
zj{P#rowB*8>@cu@%<V$KUuMwgd$zR7KuY$pbjYB{jS2~VP(onJaO0v#(Gn_;X1mFp
znt;7m^Dg@{9q}#|<BZ#usE?Sc+;S{!(5u?yxwbHROtqF{^~Ml;TLbj>>sUC{$IL>4
zXh?jSc)HO>{i$)1;nJBD&%E?+(d+e4OUOKu7RD)#Qa87*U~~H?aA@IPEYH7{E!|tY
zH!xRU(T)SvL0hosnGe`v!{i0YhbUTOaFcX2V_T*ONGtq3N8aPHh_}&p%L1F6+LR=j
z5u&=O>dNh+8ydnvLN_mk;>sMmr55P*Qgqrh2eOJsA3Kh>KXwRLFYV)nXLoS(S`TTz
zKvmOJ(!+7*3M=)cGD%z<MRDXBBSi-i{))k+L^T=m(D*iWOeL=}<&T(GQfY}*TxI{w
zzS=?{H>9teFQ7b|Yijqbh(zL1&JJbQ4{C%rLrIs`mQjNZaB=emytW``!#ye3QeZHp
z6;(v7ny157IVGi5F-!f_e%6^c+PnvfqUgSXliWymLAh*6x-Q4fQba3U*p7(<t)%E&
zzzJzFQADB{4#v*u+ooBj^w(-F!`k&6*Dhbe3$OeeoH+VU+@F0NT06khJg~S@6~Cmg
zK(&_Q!t*&^IP+WB+<6&|+5&s@iPS_Ywe{K@n=G{U*U)dbPzh^TSvZMGY~3y%H>_0(
z^AWUkT;hC9K`EW4pUHo-2r(vL8&;5xiAxMqJ^62&?Un^LHx1lxbt$hj(hh}e{j60#
zi6qKYN&t?85|m<4T9IRaN2YM!amNx)-L-(7oi5J2yoXoL?4z?s)66MVkqeWH2z)UL
z_Z7!6qC7zn3ExIM9D^LSWVvF4b~+$K#3`pX+*^aVUAX*K{79_~nS}oe%JPY|Q*l&g
z-fQwjTD2(B=uKxGSVS{HxVu*py@!EWd25;YS#-k~$Z~i|jjhgD6e70Ky_NZ*3Y2m$
zb?EgpZ-x5{MRqJDVY!UFc3B}cTXA1YX5pNR5RHR$ZDujgjg^l{&j)Lh;!0(JI7zW~
zCC8;pFXQPmKY`(}jpxtY!0N`!c<X)Nh}pgS(B2y2*eRen3#^{2;^i}6#+4giKqDdN
zVyb}G^tsLOls*$`>zhX<tYfM+hk9+Ehwo59i;uHgw90IrzticUj=x37<td#zAu5kF
zr*4V>qb~CPkYq;rfM-A7M%yh5Y`RX9?P__8FgTKr7CFt&(AFRU4EpTN`Bk674VknW
zE1g{JmRMQT>Qnf@2d44ZyH;@i{4UNsw~d?E`V5k_nzY3*7iaPZZphJD0;r-AlP&d_
zzqr`I!*Mk&Wxh?)O_#dzt7@9+aeNct=JPQcomkpwoSK20wN#0=jpiX705m7wD*eez
zK(kgVZGyMC2R2MvN$)~jBV`DCxn~?D6>Q8X3riSKd%A=r<v1_HD2c8lvZ6f{4Iv#D
z1HiJ7;16!~4~yyXN?4WSQ_<p*bfj>@zZ76OYESB8+&mxQ!iDGY^x034gaY+sp6}Cc
zui*<%egbzKc?c&CeHh)Hqo~zFtZqMrGZ%gxNjxWMKNoA{?4$qb(-*Csc&yPNmZ>_m
z!r3`jT4-@}MxK1M?=r?r(q!kHBKP4Gl)#OQ9CE7k2WWRvbh|VrtDF&ZyKJ{Gu+b*o
z%{I`MZ}E6+S9#(qR0T_VQTUgZyL1ZA=`;v18symS=7=jX?z{Ie?tfqztJhjwY`A*4
zgHAU`QVltZlXe%sKu^yhMu9wsp&-JT_&AE<M#wpuGhLkO;k+cobXr>XE8lUMbn!)M
z(Sb-lgi{kxv*}dS5Km4ZBzf>#o~(FaK5Au)k>IL=sYW&gTdpw3FRzjbwv{OLb&|$v
zrB7xNJ27=oknGSL*^DcrM^W@jtBUl2N*bveH3oif^)f-Qi(Jb=&~zNLf)*Yz6d+w8
z-H+^`22~&%sOxf092rfb8sqxQA<mxvDxQ7iClD45E;ev`9F=6qiWecS-FylgJ1<~m
z{t-s+joq`TL{n@(B;ZNMT_kbRLKT;w7FE%lA~VpkyF<Xri-cW2u72`zfEeK18KK1k
zDqLhmfN>h3PxejZQ-^HyX2f>uY|2WB`=ByZ4!qd4fpu6KG<XkWfo5q`FSmI#y6Bt4
z`<_lPa$Mctl_+j;aUS3Jv3a!HeY|pR8!x}KhwY6a545H6Y8=3r5u-{HIAx<B)!dPz
z$4H_!0XvE0Sm&m_m}c=aAyJyh9KDE*fXxgfEiKh9gn-(#s9?bAc1a6MFC7zrmcx=Y
zq12b~c%YKgE>ouo$%OdZu|{62dU8q9YnnWRE>GgyNC#r%zi8ab@96=ffl_v2Y#yiF
zmRj@LEvS%YeeL|9<c+{d1laV|m<=!*1{{4>8)O|m!p*ZW&R_Z}o;~*y+(S$)S=<f5
zDZOh`K%+{|EIHP;&N5e7tIRubbjfLIGrJlmPy|+u$!l+ci#L9n?;lXntZ6i?e-cTO
ztQ{1k5#~!e%216ok1@_-WO;@8wo#U~aGPznY{aH(edd~fIm(dA8b?kcHyxF!oZXH2
zY~sqws?>NauCTP($~wVpk##fM;{g3ZhJFvIBvriq?Z@%(+YaOEm3_SU{4Q=@?O-sV
zUPn^PlRdfiLQ4Okr-PE=9c0eNGaI-7LgHWH=1lBsmAo=#)JVw;64i!VCUl8!KKFyN
z5Vyu(EDN#1fCpyQ;9f$PH}KejpR`1YSDk-fUt6XTp4Y5h))*}966u9Zbt2=<*uj>w
zG19g)fjcXrsGiU!IYn_U*5@>Biy}#@8cUlTyVB;=#wKA8CBMT#A6G68aqok5RB8ne
zacS+0aOwFNS8sj^FTV2gs6?~e;UH-=>HpNDPTvFlM+T4yb!>3K#yUT!V57zY+=nZG
zM*mUz*{BPsnUthl>{LwdEx4|5piT7xY!cndd@HSrDhHWTMKq=8GD4n{?eOij-Lk-@
zbTP9M?wXbAsI&(0opj`gh4e%gQ#hYxc<JTq7!6V!IXZ_!hh|YtVx%c?ViMuWX>DY;
zMI5SQjY<8TV|SP21i-Oli#T=HBKG#F*sz0hFYlqXn{rdLi9IQbJIE}RnlR$`i0J2g
zmYO$C@}!fY<l0J-*my2c)>G6FYi9uoam&VcyPx(=mGS9>tA|`j79ClN#6hbBt|ix{
zSE%X7q?1XV9L<?lBSATmT1DnZiHipfPnMaZ+KT2(EOn%vEdV?dl{zItZYGycL_c13
zaZ#Yx{Z50P9zz0|D!b}lxp)RM@p}*@BMdtc)-G3Z{`zNd_VO>F8WEqS_Ufh&RKAXn
zhd+$QTG%v7b~J#^E#O%N#I2IM2(`26{&G92z5jB)mSz8rz|fx!-ief?Y0JU{$mC@P
zwJhMas{RldWHgML!`$0yyJdk*Hk%j3D<IdAG!L~b&|{=T^jfJzIDcUi=gzINw&?oJ
z9n8&4;rNMp96LIPX0yiW3Po}HK&S0;dMT@@lEA0{x*d^>)a!M;|9yAhUGF}Oix>9r
z;<LNBd2PU*4Yj&NRg;bq+{0g50`U{G`#lK|cm$t;iB(kn!UEsdHN#V6RbH6l^sN`D
z$vAAY6x2y1y!WQunDs7-<ib;WXy2ln{%-x5?m2BK5a6}K4d0hIHtoWYzu7oWdLH?F
zga?eoFq4)cj`X;6p~u47$gE}~MFom<I4#U7?4QTIwMC93nZYy9{3fETfl7J;$UC^U
z{W#8D`4VcCMQ(W#8z?oQbB-xq^;lg|<h4co%i2JWj$;{-7gu#CHMO&qty*@RozL3@
zCt}hXGZ}Dy(8x^|2T4uE(4Jm3%_EG)F*^MaeVT<4h`;fxU*Oi=Zed`Pl!?R@Oq^Qq
zL*v-^2Lq&FvM>+>z2S(pZPc?z&(rM=@X`x6aPj;)4j-MxohOzsH`ipCq$x>4=6ZRX
zy%x6~%akelX*kT$@8_sg0-U~k8TUW1h>gt-UU+5~7tXcN@6g{O#1-?~C!q6OA{18m
zyZc?gt7C>m7VeMM=V-G*O~7kIj2)=iyij%V@JL1D*z961H=C{L6&oh_KGVuebR$uj
zNjJ*W+uS##*OcisZ5`tXPHlZ8A~Gt$4{3x)dkw!c$J0sgt;joQ{JPv<+T5xb4^w>Z
z%Rk8r&uBbEJ`T~SEXgDJIm#%^QhS%KJJU>CAPLk6$m*!XGBZNF)wCi{;Wb&TYh-L)
zW;_^83&e6{wS8aL2s>IFt!V*<mjf;+P^1<(=CHzTRW%ILj4X@jc#%K)ZMEHkz*eqG
zK@b(B>d(2SN>enisk$5$XM>96EUVWmEX?Fq(~P*7fM-w=Kwi1LiECH4vAjHk<994#
zd1)F+wIVzm)!bRXb<p|2QVs%6s$3P=-X`y~0L|$pKKhL_c<<K?aQ3A=y!8AYw$?M$
zYDDOpi<v%)lX7?s+v?9>LY|K-c7acR7aqtgW9>qHm27R|dE|H*S61q4iMyg>WmQr~
zX==1&wOrQ;p;4I6wMn{27dcb;oKkWBDhZqwh#l9&CbbrkN(5e}(N=Y3vvQtAUpCFl
zv0<W~B3stN5g?FmjKF6R>9EV*Zq<bB!;R`UR}C}aWY<z{TMNAimgGGNqPQkKxm>7`
zzv{6ezYTp4au7sIsTC6Ki6xz19v0S)t3zd!O?1b;bS=&&s-j|}kmeD_S%P7dVnn<w
z(mrmp?G^;KatqmAO(HgHdkS<Mq`Q+z7kFM{hT$N?i4*g<aA_NZ-WWA=_s~h>6vc5#
zf4znE^?l6DRB`P15{@68N4-w-6LO>~>M}=&($un~%?RM=mR>hUr=6izkMYPOhw=8u
zmT~4x3!nY;7RaVv{K!h@2#XYC(?rdMScXmp1D@A4r=Ip$ZLZcPYe~xkTJ(8LW=X3Z
zhz`BVs95{hg(~E{G_MP|NwiG)qxYE7ZB4(*NR0_lmfXlbl|p0xomy*_Q<}JaAh;n8
z-CjwS1myum93k(SxJAy)q_Du=A}p&RKeTBDW33>ocvy)AC#n^0QCih_tRn%MPLHD3
z;P*Wt9wRgQve@7)6dKb@|0lmKmYZ<1tc^)^z0H!gi;~g%bO<u@JR<9(02%c^7ZHDr
z@{COxiu_Gry9GA4wo@b1P`nTMR1?=}$-(3<=5fWpNJN*W1>#DA4}It^y!gT@)^6-0
z%?gg#sL5HH->H*8_>^9EgflPSz?DlIIDB*-$B!;zW_F5CKyq_%T#81DzJ`wbN;w-O
zsR6LDHbznn@ZR^&V{s|LFZ|REX)v-;BEqFelwzJd9#2>zPzh+xzT5F>25ff0y2sHK
z$!4&Ys(by{PPidW*xplEmxc3(D?bBy+hx_(@oP?CT3RhhgrupoPd9mBDn$d2vhxz-
zf?aLPPt(*o4(HW>O$5nQS*B=>cuCLNh&_Ev&p6*=$qXxrGb7{CSO;+PED1f<IzXBN
zP6k#1ROx{$<7kglD?@SjSCb|=0j?9q$RlkCB>%3*Kujhza-?)Uk2q=@jx~Y~@n$M|
zt88lhLy}9ea@MZmg9)1u@{%Trr4TS4k+8Og_rLdU?6*6(aGnIWd+7DYEViZDk8%o&
zWpx~rAhN*4i<`K5c^6A7O`N!65sOPrCXOjh<>}%aj3_*KAji8HkVHgUW6nH3#$ESL
z;gLrd@YTn+QLXcIEd?}N?N#G1%)j?U@=rOWSO>5e5^-MV{morqa&=pE&OMd08ZsC$
z8HhAQ*~Mk4y_igvq^0<VdC`UH2#x)+=XdzyacDN%Q(jZWz&hX4eTcR~IHWal!DYL`
z`72Nnr<MmpHRu#wp=}aXS(IjbBb8U~&Y;S)ikpR}EO$Z|h!R{mAC}L^AiFFsStP9I
zk*hxYbgCXx&KAn!uZ@3J-RDPS<ie}bFxQX^s*F;Ngt8U3?R*p1Zk>&l>14vpzH1?A
zCA8aFxV4E>O_xVGgXpeg-P~?vs8*VI<gHEIdwPJY*LHB_@)q{@hwSb_f?GPJcu@?2
zYC`QfIo8+qIZd6Nso}`+1spv*k9v*l#kG*(wZ!n|6&)yIAWCrUW`_IjpTcub@0Mq~
z7wx%}W`Y<qknk=X&!<tAe!ckI6{G_NCU(V3ms|$yKgQ^}Qfp;R@D^F=7hi|GA8N-g
z*Rq9EWlwI&!<Bv<7U9WDdO)K4;`)F+>a>jXbQyEUPEueVH<(kWhjgII$n+BEt<ot%
zW}Uyv(irIh_M<{uD9c+&DJSVAw?IuC%knhy*ApxBlxL&b5h;bips30l;tJ$Y>YLRT
zK=Cx8G*pgzrVbxtcGacZ-b_Vrp^aThM|2MGj7Ci>T-wCta?vx<#<n=h4LN^#QgM%o
zcPqG+=H9!G;_g#RxUsf}OBZ*rv(rbA<w(f!l$9mal8n5njqvT(0J|?-$E8;`aOBuL
z?l?A&+1UohV|is?Q)~Gb6M$iW@vva`-fAPnuxFL910kM$cMcX_Q9=JkZLvl;m*Qf-
zw#hHbV8_qS6*~{W?4OAhz`H;ll=w0NIlc~PCV;s_XRBPwuhytu#?%M)a^n4o_nRMo
zTL%Xh9CQJ*XSVwY-N2K`m?F^DEK50^S%A!dD5Ek5eacN9SUlW2C>M)zYN*dImP22p
zFL#m+HJzF&BlRp+3@forz)nnL^zZZ`OJo;#sp&WuzBfnura<>r+0?#<r&Q^cPYOow
z?|$myhe94HZjJF2l@&R<JtCPy99dq%vBM;|?cmytUEH{_kKr&41>jVhMa@A`$X`@Y
zxO!y^H*Rd>_#N}O@APq+tgaD^cX~VGURr%pns-@=FrevEuA=D^Hm?RV17`!BgQ_KG
zr0o&!K4?rvgI@e(sgD<lFl|-(1Xv};iDJ3L={7&)^iw_e$kP7YFNS!j>%_eobjo+<
zqEpdhl#%Mh%L`=4T-6!2kK*AttnCxsSsC$`M56ShS_QP+5Bt}D50kgK<lVb}36_4k
zX)+s*)~I&kosz;uT5DA)&=sc>Ih-ug)#H$BI5^74WRmUX^*XqHwp+F;Dsu($F@0y@
zs%ND=$#s|wke+5#%4eIQkUJ1a&qhTwYG;y*r@(M1T-;1^8gGAi7Wba+;o9{bT)Vo5
zc5B2E1)7&&mj{6xO_rj^T)4P}daaIACsr`ZMDii$p&Bi^AdIv~W<#zQtm}IBE<HAG
zv)ddXDeq=LXzRY;qvJwF4*~pCb~1(XQ(ou)uRGy7m%Q{cGlM(3jX6f+n*6KQ0N#AZ
zgmZG1-#WXq+{H2_7Cz3~Q^yb*?S25-y@HAP)E$gC?f5%;CgBNlvYD4o10VXmSg??y
zf&JBoX7^U@7Xu^SWjQVuiRpPM4YdmPW_X@YjKcDcIWN9sS)?+QBF;&qG)To%K_`CS
zR@*HLY_#P;wx98=&WxBPLO4G4`NT8bmE+t>z{v6p&pmS;-F6=<D@`0fzJRGl9ph9g
zoph~{PZt5ts73A`Rh+*27*5`~g7x)1T)w=Eovj{U@!S_0=>#Q`n}!iKHuiDqPExh|
z#Qeb%->U%nB)O&=@)+;ZvFDPedb-G1F2LP9^xmDXwtvCtGfdoWtxE^8PrK&y;&O!#
zt$O-tGF5I3D$3w;B7Qosl|8!?$H9}hxb`9gGIhY1kf7*g&L+HG^i%?zJCFzb?8;-|
ziZjZS$;*p;L<%*GBOGtL>a9wF%IBGk(Ow-nEB7}^H)=$tf|x8I??|NwK-`_QP)$T~
zLL1ZLc;K^`H{>Ghjd<ZC5wbMM-d@`+4QvI*J9(ZVqoI)^CRND?+w}Q~j5|S-YK#k)
zcW~+A25Qw1J3B30xVVnPhv#wU9m|-TZ}Lf;QePD%rWIjL27Pjx4{_u$Y1)>sz0<<g
ztJ_##>tHa<xapmZdO3h1<3YW+9I)91s*!_TDZbKI(k$~TnqZ=B#9SGTigbgYha3Lo
zRh*>X=pG%uZhv+^n(RP;jDfMBOk2}3w|kZpNtwV)0sV<llb5wcWR_ydjUqu4FfI!O
z_Fk=}$k*&mK&2p&f~?rTJ86oG0w?l#Khg8vzZa2_6hu@aqVU&2$$sV2x3sdUReq(|
z=N>0h<8pzJA5GIIAP#S64Mlar5K1wjoL*4wt1Qsk6kkvQD#R!iC*}e)>HGHDZc$*<
zkGdG|Qn6s1QCo>PM#xESj#lchD><m>-9lh6kfAP=PExc*)yykbws7;t9#&RnaOa(i
zSUEJ!y@w>_U?V_<4)SOt+?t)9$sc`m2K~VR*RJj1%9TCzIwOqo5l$ao)<UE=Z)tLH
zz@&oTrC$tOas`w+S78p#jl<D(Wi(^yuKuDNl%|Lx%FWeH!bLj#)YJsPP8!w@6wtIh
zZY}pPz>CZblxae`L=Nt5x^G5ymk;*Jwl0b~(3<6^o0IS`5rpa0t-br?BwD^WGYtOY
zRnafa>^`WK#SGDt8D&@Q&_pfdK;-O4rUsj3@u2kM^PkNbDfkD}PGK3+p~pZT#b-_)
z<}yH9zWB5tX@_uZA-%UT^@;KW-;CI9sjWcX=T(g2bT4QqL1Yq4j31hwsqlm$RAm4y
znSs=6BE;O-Y+++_A9M2!oH((Bqeo^@tC6?7RG>Ib4FZhEIYy&`%?R(k=P>R%wS?6T
zvc)QJ^w2y<aZW_9X{3o+dD@+2d0N@?k;wr7&sC5Sss26eLMkhFjyUp)2j1n#^Ft@4
zBJxTc22CC#dM)RUBB6{-7_@5hYkdx7s%5FKrP(Dlrx&)NvrkfKBr0jS2cb&rm-n?^
zSScC$qxmLkkQ4oG8d0j0g00}BRZA8=*Cys2f6oHbhbBMeEMINnjkqIH%3Qop%|+nl
z<K+0TmpyX};+`vmtVOh|au4kpB~4pK%Mle1#%Wm2{<yuiTQp*mEeP@!aco)M=Lt+Q
zBF>FdQ^!Md@sks6FvxKH_$*#oY+!G@k6Jxq9h{u_>eE)_*xT)4d;1D5yi&*UJLYig
z*gU4D>MV*JQ=OevP0|<I>Cn)S5J#5CDV3r+0=1H?mVNU1GRaRwnxatv#~Wp&Wl@->
zJz-D|LnzZkw(HTBDR)rx+r*HQ1DB(df0P`T98Y_0iFl2JV*4ZyfD69x4t^Ha*k8Wf
z#5L@_2EPZ3NEHFyV&p`-D(~=8`4Sggp6<P?13ElMKa{DZofjg@5bVwhlDJMrbbMqi
zg4V`hU)Ee^(379BJ3ii&h*FSjAzHcUh&VUou9<-PN40ZRI0oxRP%*IDgG*5&6kxMq
z4#;l1s^~3khF)O2O_QO<d0!_4xjq&8hp+h34OX3LX?09veBf*D!d<5q`P8H6O4~{0
z?*%wbCB0g&H^fUXuHti_IfJL3K99Y<F7tHsCHo+S20Gyeqm*PJo?(3%Jvtnih%8I_
zhKr^2ALa`)Wes_kd`oG4OP0dg=2i42g}wS`|8c7PFM-lhWCcSiQV=-1b)f{uP%LsM
z-i&*f7M&i5g!p3DMA)y&20WNT8lB|zJ<mFCI@Uxj!{Z+H`IIU1pWoXtPc~!TbYiSq
z0{q0=;p03>8OWa{QgZraeT;t;{93INBNNXf+4O<?x%a3X8ozNVNb%S`ZVxM)<#SyS
z$LT2K(T^Ct*?Dj)Z8?TJ<lZnEcX+tU1cmMFDf|kboa2;6l2gN@?>LG3@9*L2)m>b@
zy2pbtgm+V}o6}V4IEYvpa`nm%Zd~8T^70(+ymKB)%QHwKax$d?hS?W6^2Ft2Wi8Os
zFuQ0<150^`nJl{9<<;DRJ(n8UV|b-kO_Ud@`1j?1ec-f6&?B+S^w(==A_;_sHOl)>
zL?n}lT0V^!YFdzHDVcFc(g9J*R%D@({ZQYx10d>hTNlk*8<}x!2F6}C%}?z`yl(N}
zSdC+2QZSZaHc3@X$Zh<T(*q|CoOn_h?~gYmv~-l2+$PTnYp8Y6WFAsYUs|UEa(7_<
zkNQ#h`KXnOWyZv_6(mFlx@kYmiZsuQ;hO^8TWKpW?ob>y81G}YZYwc+Y`GJS3x0gD
zNx!mPGUSxoY2}D2Ros8yG2C_c60YCa!{tl6*xT(gpiyJITsT71n}6Hp#y(3r$oYeL
zxMTCE))L|2G7^NAG><Ec`ke*d_3ADHFPAKPG7sE7LF((p?SRYA&Pw@&ySfkXPP$8C
z8o<{UA2RI+(;|aDRJ0v-RqGxHJ~uYm7+V%Z%)wY2$h~4{DX}X@C{Cty8Vyq$lQ<oC
z@7b>o+X8lQL750;Uo#3k_$Qw%EQ_`_CskUX_^#A9=N<EjkIEbX{9?gG`M`m?RV}0l
zqvwKkAlSKMyCx~99qW*Fb;GP17u<bwo6X+4)j75tgBDE`>WntyBW6ME$48|9Ny+>%
z#hgz<Y3)9Y3g*n(?F?}g;naykIC)|b*Kh9P;)PA@Z1*^IsS>~uO{*6#0UkX~r#-~;
z&tJoZi<=B?$B!;xdb-Y>R65qE#xw$wc9n88AB^00KPvDpin5_o-$9u+T0|#qAU^PD
zrA?(AGDjegA_7UKyj0E(i(2iL=_wDU@i5DXedgG-2hzI`Cx^h4C}vTd?K^{<Mbo?%
zmBXz4)R=25A_1W)px6x?2zVc|0iQg~Iry?1#L`aR*|$7CB@b4v1SP1tlc?<F7iG8~
zHS_CPVa3x2PDGIhDy>ee$F~qliA;%08d?sJVc#KDNA*cUil$?7_b6y88ZbyZbasuT
zkLC8-ZfRi4igvd^y4CJ)EEG9LlImnE(zO$h5{_O^xK*LV4@Mp&`;e%t*BNu7a`ez5
zH@5F=w{iLMHrCfW+*6vwl%}eIC5>>4NV^vD?1b~@HgM_UCd)+bI=PJbxh4+=5sPs%
zL-cb-y%;9Q9dogqwC-`&kfktoF?!LNjF=axhvA#F7kcS!A>|czy7pW*<apSwm647;
zkK=#{L_GzmhYb#HOW>F+Sy+sfk%He|@<7@>QOVUC9Tzp>mh176ei-N;Cb{jw*B4Cm
z2CI1YFMDwh9*+{#$}R{G%K6ym+_`WtMl3DgCj&#-ksvQv+~&XMvLBS+fXG^S1(D)7
z?E_IR5oq1)4ZHLq?~~vOx7l`!0-KydS<xMb$e!*DH@`kFMmZ1V&BtnCWOog)z1_!s
zAuzNdAzqu0pL*y(Cycn55MW_`mW8{WZWos>Z{gaNUG#b>DsjwKM&h&}7X^VHWhghV
z?_q6qAM^7K96wHSkvYZ@9uni1a+D07WU5|+w{mS_w3WhF{)>X513B)!kjQPaYUCTB
zseX-i%DtvPv1*c+lwrdM0!s(JC0|quj}25QIxN%8GCHDY(W1yn%3owLlgw86SADOp
zIAMTo3x#JxGFgr-r7#oexYz11akxD=bRuS(d*jWCu&3~jN%@XSiHQY$lb^7z7R0Nu
zCa}yhlo!yS%L0Rq<fB0tVMycmio8AECuQZ$tQg*Qz;+8)MJWX#->t##wMV-c<?TEP
zr}!_<6tT#7{=n5MyBLl}?505*#dR_SrEIA&^x!O&EUP2Zs%7YOQY4irJp7hB@!^l&
zkB8rW47Fy$gK9^qE6BSvl`5$e#qI9)@YK_n@!8LvL$^1O=6S!F+<2ISSY}|Q18JQ0
z%T@1;OH%*0iFpK*sj7RFJ(mmn><E@T+9b(T9t#6CNgqihFHX9XT0z}2JAVFo=S6e|
z#4bv8uTcVk_`7+UH+^5B^%hO+t38$1CE%r#4yxTyZR5VYDu8!y`NdDsCptY;S13ap
zT(#34M}woa$=y4;-hKQ^sR1)*qB+$F2;hWcD_ce6*q5I>TOfxu?tvYrDSD$l6hV3|
z$8hou-3Hq&3~aJx;ofJ)X&d{at9d<YsQg?9?oxIZ73j9c_|g}yqA?ZnRCkK9Xw!-s
zRTa4!<t}pNP6*)Wi~2{~?J<h9f_qLK!G}L|8t-}comgC%VuuBid9dh~(o}h79=+G7
zR<OU<#j`J5^MZ&{yy<2O9pt+vgq;@l9JnY;d0zR0iyF$!W0Ab3@)ErK8KQRo;#K{T
z2ck6Fi*n3+8BtA$fc?dzjE?O!42KMc-FtbBcX1#=_995HHA|mcLn!b5Zm5>Kuf50e
zV3q)GuQ&lhY*gxllz$I9{A?HFQea=^TRxA0m5zkg;oar4>H9Ol=ZM(`zr?6iYTUjz
z829u3sD~gNUL?uK?Y7;bsc5;S#l{QO;;wwN{Zg{fd^_SG<hCY_FnF#2%{4fGb|2&M
zD|pv?k79OyiY1NXF*|y&YlCcMqq)Nh1rTbzqEoip9djS(kwc3t+TGb{<NU=f+`Qhx
zASL6<7&K&#Bb%&1ts0}->ti&g$yhYtw!9b^*tCG_Wkp=Nm0hxei0+%u7uhcg1ab*+
zFrjMNa+ar%^d&(qe3e!-JqXa+@x*c9S94sqsrNl_Q_$5>)uJgo0I+{px-C<fCVkmT
z#A5>8Mp>1gkGID@fVjw8KQzDFz+TMWw;U4biFE@qyr-7^@)sI?b;D4b9jN<Mg1O#5
z5AwpgH*`lGkLOZpU1;o$IG&I`J{5VGV~t5$kRYj65f%|zqc%o)kB0GGm^?PO$94+?
zn|z4lVxwI|y-#hlpZ%7Ti{COxf<`<lNY*25Hxk~bs3jq;T-e9zwSC-m?<^jA>k+p2
zCP$CqfB;TXP>F=R3&I08+N@`^KM-I2W^)>ky<-~P`}$mHxORPyixpI5C4l3|OxJKq
zfu(*W&reRej*;e>4W4@5QAG+;-Z|?`DfPZ(WwI0$l<bU`O4$!(SX17nQJY0g3}X6T
z9nMJ~I=3=T3RmrEy{-s-oe3{FeJ*)FWki@CC<u7i@5MNJ+^ANlJtk$^tnbvKEdvDG
z7eAWSMa%JEF4}rEHTNn-n#VPoOvPr`9(2nkX*CrTUezCKG8ijl&|~~&c^$jwERN`%
z>cre6Y4A{>un+9_H}X+7L=p8~#BI3U!oWrw@eU)5ar6J(8P&dZv-46u*L;xY5b%fY
zkA2~2N(kzgpWngxb9=b+?m0a0&@z?}&2YcyXhg<rzME|c3O<MAE?_D&jB*V7Ige#~
z@PXqvea|v(uI+JS{NC;mJ!;`PHjP>>;kgM;3Bjoi73xVWOeAs%C|(TWqB8cfaM79h
zuUU5I@2eR`>a}5hZeFbCdEdT9+Nbwcr(rkQ(5dD9XwQrq-N!+9a|Q$!E!rlwp7N6)
zt(4Bc${p%K7w-+*cfGT`3!cfv$Im8V`yAq{K->dY>NQZ#QJov@4ZHMuGTHSW>uw@Y
zV|!B9pzbjZBAk{NqsUEVG|JJr&$xU?EZSk~w$iuGUdq-MvR+B5Q>aZB7`KXiqkAdN
zF~m6EI*Z$IyTyS`wn1^}i3rCpthK*%=XC8fHE}agk!y!sXL7Nyt}+Zzt5GHq;`|vJ
zWW0lwBMm(8&<al7wTMa*V>HaUNnQ&0>MHxH>X{eG(0ubON4G;Z<rUV$oxXP&TU#CM
z?Tv7FWtN9;2nVHrL;|!-%KNV#ZsHgx$BD7b!n^q7KJu@BQ91pZ=U6t8$r%A|=@=$c
zBa0^aW;G}=^1W<lvZ8~ER#iynj6OZi&IGmPAuGYuac`x^tmD3zqxVG3t^jMXmJO@{
z5$~41Pe!)>agqf|U&8~a2{T`P|30HvHb1dDl$=E3{HO&?kHfPFdNL~%8HnDG^=ajw
z4!D2#z-niK&=Db~ap=xEmR1U!d3l^~4PH)yVt8p(?Cjz;+-`ATlQSvJ_tPTY|2tcq
zGyiI3`b;m5k0xy0#}}1~KP}!+Yf@UZsSS&M-n`kx>b3J&I=qVe?q9*(_bp<oS>=&=
z!o$&HJfhqp1a}e3pCidC(CKCf`vIowGnkzUx$&M}or?>u(in0dpsDm75v^ynGklx~
zhxE1G1?4r->s@pdQ+bi`?GsUz>nd;;F-0*p^3$G3p3Cho=brk$saMoyeEQdLd6<+Q
z_p>ktQ7;a5yKE7tpMrZmlzsp<p>rz-$LPeu3Bcle_>0fv3wV_Rk8_)d)cj4sKO<ia
zhm^ERdOfcCz6InJ%sj5qF#zV^aex-%30MMx@)(;=A0p1Du&_9fhu$6I#<Ll=yX*Ph
z@N$T7@N46AUrSK855IO>R7GtY<Y)f3AkR8iw|^(j(_ud9Q(v%%WBnQzUqmWbp#D#a
zwBjU0qmf{5XNWI+_6mOKXJ5n@K6?r6Ru}a~j3kMb%k^arN-$4cOi~4;;WBh~4u(08
z^kXjOH9iR)u&2M2{i((gIj~dGsq~?BS5m2Zmk`U1>eHx!CrFj)rvQoHJ8BoIU+0s4
z%yN8bS($UM?#V>FTfMB-Sv9%)xHQsxPkz$vm3cKsm6ilee66wG-J$HW)d}n6zUUu(
z_g()hlrX3~PUT*gpM@PWTTC+YaVZxXOULEDWmIWy&1M2%G^(?#a<`j~(Lmfj4T;id
z<Dtz+P>mPx$Ooqp#yKvZDX^EG$%msZieUE_Y;SJ2?G}&NXp@t8ly443@wGoa?vFpY
z*7<|pp~i=j;i!#}`a5}?KuH9baf7B%G&YYor6@qX5@Rq(@$A#<IP=mbj^8=MQQXmE
zbBMx-C&|+(u5(X3Rll*<YJudrS-8Z~S*^*5$d?LhRcSi2c<9(uvFnnx^KfNS+HCld
z+E6Iip|_EXuESZqRm@r0!NQM{{Nq;sCZU{E_>>CwXPsLMl#5b5(J!ZT=BK6({vH!A
z0CkYhE1O2`kofVR@tNYl;f6m=?70C7F%LYb-aY@p*O|y;4}?kw6ed<dwpX%9kW$ZF
zERISHRp8`-S_WJSgbsAe{c!r@SM7m!gB=GxrV)~89*2)Efa+mi{8SrTTWP-5`AQ8)
z_xjo8FXJ}dZUbP0J0sfJlfOI@e)wnB_P+3^W~+Dgs+HqOf863hxK`n_ikO^*<xEEg
zsGQPTA>YZTjZRqN;4Yls#meDn+<*TPPMumnvzcHt0#YhA7;mM|S4Jt5n}J^$!AQH8
ze~NQA0D+=dCsE4{Rbj>EobxTu4a9{UQdqFaje`*vhLus7YqVA+!K=o~*<O}Hu5!OE
zQsO5oqq_3&v+;oTqRX)7SH((}1=_PZys?zpi?ZB|3O!B*4R*4Eghoy3k>=X6Jb|wI
zRh68i<29{!REOr+3E@&&|BRB)!QDk8D!F@zVgmIo;woiA-tJ4H?RtdEeVy!Godo_M
zh*1sZFw<B-92EG<=QpvvzK=A&I@;>K*ersrzcb9XhOYsUx5akbq@uJH#R%QvD?b3_
z>lZhFKFQHdtML@lY>12oU*wr6yIs1+&5xY^5hv_slIDdgJXC8js!5FP^&UR^2UqY*
zzw|P`{N<~hrV{wkFc;dm-sibgNZey?48EAQJPqkF4lw-9t^mI&+c++Ljf1|GhDVCg
z6Dt4LOd$`xrV(8pU+4F-J6Wv)fqwzZfEoYyQgR_#borbv$#!-|e)mNg6?$2r;<yLI
zz5%6MSge8HgVO^cQ7D{P*-G}RW1v>t?(Z69xy8ypQ?D!IKzD|HR{rhuuR@{2Tz?+}
zX@sY!lUJTFs3HmH5JwGkdTpG&bQw2RuOJUbxYqi7oM!z|zc~LBxQ(~lBx0kD^97{&
z_Fxb`_l_`s>xJ`cKN&x8{QFbH&A6BD^Tcn9aBz^9;VVSOX-M89|B7HMKwJrsP%7F>
z@$^^M@zRUiIDUKv_ujjRqsOLEsl*r#q?*bXy0eIt$MXrSLvZZ^kQN->cPHMoG_VM{
z>0F%`OH)ZlZpr4-RgGsTTCx;xV(`d>hZ|o(H0{bj#KD3mw>m(=X?n|6>}sf?e3I`H
z<nYHM&Rx~jKymWU@)mU1i}z_t>aJ0>IQ~2EvO^}vR;tb9!D6#cWnW8V;}V6Y<>g{=
z@IEEK=d^JLOfKE;WK+q}v8CtUo%|@+Nd#@tv&MJ(Ozg;n2n!meT~m7{KoX73iFspB
zJh5%tys>TD$;3`3b~3T;WMbR4wb}g(+b{jx^_}{<y6e<AyE=jzWD;|zu5)<UF<#$;
z#HElf&U03U*^A>bbnBmILFd3X*O*1yZ;4yk=WIjY7a+=x-XG*#kC)eO^DMsin@tr{
z&XZ`jVErTKxT%`!UsSQ)_3zcZ{Of=+#{^H|S3U;))#2pvw={hj``3Fgxon-Ddlf|1
zZOc+&gXm!O$T8_mI*ecMw2c;~-@XW0GHVp*514bcJ_#W<fd;WZ??|$4TL;F5kFun6
zebbvVHC*c<dcF8jQC9{p*uVdOmnCrqEA|Jfbt}Bjkldpi=CK@|<SEOC>JuJiIlPdU
z7br&g7GQbqoN*7B_e1p2d`v&*sdvz1;f~^5ALg{*7GkQ^@o2q7GqL5BPX(t4G(!#R
z!dL;scyaN{Q3$+lf%m72c7r|JTI_zGx!Y`8{|kg%x}fWe7V2S1<oVBBubrXpj;HD(
zJG)6)-gWbmHSC0B4q3>f5h|#v2MR@dp8&L0jBJ0$Q3VMBeEts|Nt0)0Rpsvc5Ih}w
z4$ol(xm>-zg#I}lYa&nv*+?w^q>&iPH%0PPPZ=M32kGwY$0RmwTTBpfSfE`6@&b$`
z{p+pJPv{2sgh(tBSvmW}D_3<j>lJ)hEDuL+*OB6HiN9o2cyR}@0<R0{9~T4?Oux$S
z?XseK$bhcv$>3a_Ul8P~8LFpIv@HZ2EMo)*)9Iu<^^UW~^x#Pc&mB^+y};PhSF5cD
zf#hsJ6L-<orr>KnU5|v?_G;xVdZBmtZ|bCceCgLQmTx7u>hpIX7yiYsu$>n>$%c=c
z3;e2$;vTWgtmOXpQ!(80?nYFeSN`0s=Rtsut==ht{_~+d{?tI#jI6BA4+=|aNGf$Z
z8nXRF))r<SQL0^!X+eF86N=m%RE0R>f9`YeM~@CSLU_`&$}MN}beBAQL5I$LzCtFR
z7M&6f2-Y@8CZAMSx1dLGKk*q4#4kAEEY&#o!N8~eISm|0H7an<Oc+Y>aUj_X9L?8r
zycQ+9)j1eIlgO9P)@~k55Zk)Z%CabVvs)m3Vz5{Lljb9DONZ#0<xsL|xp>gcGYi2(
z=7G!+HKwRSLE1-<ZcQu~7eYQTX^xn*e*ib5&5~F?&SI05ILC|N8Yl56zcv`VtOwTv
zgl`c9WUP!P6win6mxjt#Hu9~V-P2DJS$>$a`@FoY5zL!&OT=vgGXn(_5Q__%{ru7x
z-XSakFLj<5r=0ilwXFU|8rH=zmcz9W125vO9v2&w=&4X;ZW}VD#%bbD`=<k?a&R%~
zgXmrGSaDHf2{Zdflbkr5&EXn7Lj*702Rq-L{Avf~5LqV&o@qCEKpAVU=T)kxOF>gk
zX4d&MMH5T`f!4O}lGI#IJn5Z+R@=pzlIR<X{^}4+G?O6Xl;8+jplmfU{{YU43h>i;
zQHtFm-s|ESW}Ld=zvEjqVZQ;02@7!aj%&Cjb+p(NdH5YWCIacN$jy@$t8G_<ER(`v
zrF1zetK&TM1MiUWLn!zSzmmKX!ccm2++2?zIVuDB&#ekwT8AhBQcFub$v6vP_0KLy
z)_ZN&B>wS0YbjFe#;(=1s}9DX(k}+>l_Ot9TF)-{b({8$!yYkhk00{|%EM?`pC$=A
zGs!Dq&?Twe+<^QXYh*j3VQfVSP}@?;$O#<NAPc@}>IYh!N6Bji{~1^bC_Xx$F|cTA
z3`Akpl8Urkc@B&X4Z!|D*|L2VhtdZ~l77zL{wLvim9e6%%`<7O!c@{Ayo)%nJkM!V
zkda_dUt>?*j7G!wu>2_i`NzCW_(40^{Uf-w9*z;msY4_yt}_#%dk>Us3FYi4^B@m4
z)9ccoQR{ou1E-E5O7rPKQc#TF2;2LVaq(^|jk3PCmHo&tF*ad3X;yCszwY0#cejA}
z)|wm%$WrAs<lAEeWh8b66bb1Hh`a9e&(wKX2dMFJciB_wV%eVyK*IBnezniRFKs=9
zO^9C`n-FZxqd1t5lclJ9??-(`JGn{d`_J#to-E3MaPbwY^Mgztgbg@&lVdCq=AI(w
zw(Ed_zecwW0TG!3e|)5vF>-XAEuezd^~ywWsncA??P4<iR=aK&8~f_A<_lOVrfsSA
zbc-+E?t$0JVSabR%4$LI!rTz78&^<hpG1z&LC#Xcu$gKR83|nzkhn%>`Rb#^B$86(
zO_--hW>tNWMI2Hb0JXu1UTJSb6+)cqt7-3K7iO544Fnwl%_1kJt-=sIn7kP^t0vI2
zHPCv;6wO^Ug1rCsG{r(gotcT%o<guFBgSsMCwhR{3}Tcm<v%crM{N1x7_n>O9^0nL
z_bLhEBG35$P369){`K#`DNA0<?0F0mv!hhE?CtbpnC|0WlR(-Tm}qv!ReoA*dqH|#
z=?VlXDoTL!F6%LvNd!v^RKp=yxmeVp?_on#bifK8p$lGWc2;5_k16dKx1XKW8ti#|
z=d*8Roq*<y>~rqU!bs=}ZB*BW8=67+`jO9vWpuC!b0KT+F$*)_mxKi_Cp!GWR_`2t
zG^jC4C0nzO4;=^YgfigIwqm-yy;cJ$gAz#i=b1V`Ft)>1(xf$9+Jk}SiBWt^*n&r~
zT1}pu3zIV@wB=IcxgIs@T1T+=Wghm*>_TZ*tf0Xv>c>QuOTCzdt$bN|MhuDxB#o#L
zy!a|^&Nz2}R18>uwxGjKf9Lsm1N8I;doz2$#V@uv5@aLRKIkpQ-iX}EyPK1jA>G14
zmaX`q(YilLS4Jv-QA1Jt@<<NcA-SMwR&!2f6(-}e>f!*rD<^b{qI|u6np(&7atyLc
z6?kZ|x1H1r=r=Vwl~7t}GwDNsjvzf}i*0h8iUC4Tyy+^k*jktwjcEJh91yQF^tu=g
z`D8PnXeff%<yq_axsVFJT6#EYQZ`5qsbS~7)QW{ujxMDThFo#jf2Nk)sGTqQb0Q&g
zNDKRwD&SH^Ohs|}QOpN_>3zI!%0mL!z}XY5sNz@ilb{=n!v0#^&X+~@z)r9(I8WYS
zlF#~x(Vc}yVKaehElRiVjeEGccP1R@n)E)#xiqAH>hBq~KT+g$K0X2m9>Z+O{Reh*
ziZFTab43U5zwj{xZG2B{f{a<V(x8*mP58CNweD5crOjLh7DbRIp3zIL2){LPQZYrr
zLdh`eeoKlWmtlm7dZT4fuknKq)H~ujl!`;8%<fm$xPmN?^?`}|*4K!9xer3%0j%H1
z29Z6HV?z8nn>rD9mtmIMMwla)xv&wbjPMQ<wGvzhXK4X{c<eJu)wE8Ju-zCo?i9xf
zSy200_jba4_~`URm%v1tOJxF$MU+rN$ai|_*ys!Sk|I$+q<$&$C}5*go+Fr4i-`>j
zMuCt7jN%)#?Fn^g@j(rqqGt~Zl26x9mGX9^IfpGJq5GgOf87ZBp4cJZ(y}Ax6x!J)
z{Wn?sT9PT{e-K(M7I^t_P-XCA7KZlET><E(y8xQuE!nmtKgD2zL<GYN*weB1#YKEi
zEr`KOyiJ4&L~^tt17eCAQ;<?HrhY6{25S0dRZB3=#25(aKr+<?o;?N%#6+U&?Nhv6
zBq}*j2!_83ji@R@HCYkXK5%0rTHx;xmB5%5xNk>-5;hlSuytV8wxX}SM0OmOovABM
ziu6G0(5q&9zl#iqK<DWMxt3Lw2sG`D9u{TfqyWODqf9}XL2xJk7X3~l$JG;~!)1+J
zXGYJk4D|@)s60w0k_p>$`5TssyKy7C4`JTBjn@DE8i!bacVv>E#>23+uJ=~%<MhVA
zPBE^(a6END#_^zESo&eln=`z#g8Ybydj%)n%W-LvNn)2bMx8r?5v)i8Vulr#t9L3Y
zAwYGj_mkE9@BW=#Vqc1`Fw(Zl&NrpxYH{b|5~Kk_EBPjpBP}Nz4$e3DSW@$tAcEI3
zysQXBni9;q22^`V47-HaL^GGPX(un$Y>&@LLX>DGqCa*ve7Hd<BX7A=$`Dou$$+A#
zqeJ;+J;{5o7eRIY{h;n<PC2UT1?w^6E(+~H@!khS3I}#UjePR=adae@V|yFz$s396
zDmJSMDUFfJ3{h&Vb5_&c=Cf8+?k2*p2RwC~+0e>jT#WtR(yX^nGrDm%tohfMwH?@6
z_Z*vtl4^gFI4#GE8`!*Wts-YMS_9xj<`+P!?M07c#C2gqrM0;>Fgy~0aO?074jeut
zZD7n74JTXfR>H<V@m7+M%S_t-m!C>dK=Lp%)B^CIQR^-4L<j`X^z?lut}(g7DwLoZ
zw8WV5AZzUYRcFF~5UjxwI58dqVhU1~JZOwoyqU9|6$>9CEf>-RCCPzkGHd&0hIz)Q
z-`s|Wh++3IiK@X9vvi0WcS)s$2)MI~T+@PdT~l10<b4U*&0M>z(HWc@;0rdBq-h^D
zS!t0Vo0RsRm7$k+D-*t50Tovj-SL--mi5;&WA~?!nsbLoo*md~_xK}4?T44mfuvZE
zYRsh%<It!d4*E;GnU&l2^0_#7<14QugH>3kw|an#Rzqo^6f<hnHUu|aAW1}+nvkyO
z?E;3ZI;%Z(`Q{;e``ZcTjcx4K+$n{bj+#n5ReU6bw^b!1q<Y9N19;OuH58*md;bHp
zo*`9(yH^nEQEnxurmR1J6?dYZZ$62I71>amDc9-W*9_0pY%o6Pq6HPonQMpQ^LC!J
z^p#0lrx8m2Sx2X9P~Q+IrJ?)<b6Z==W-LfnC=1D-<4binvBrrV_HJV2rG>FTLTC>@
zDfZdNW1|M%wg|;V!GO&gv*p*fJ)?&Rhq^hxhl3a3*vnPhM)6P8FEjSs(<#OgJzr{s
zn$8-+ji;GKs;}XyhujXod|&?9$<I2u245}<)65;lEweWy%f>M<tsOMVXBXTOBIMS@
zlV@U_Mztxn3_3!4`BFCjab61ger6_?nX;{1%}{zh($>8E1_VbZxUn00Ox+nCH5_##
z#mV5|%ZlABN4|h1juRDt9`orqOQq`gPTurikKrIYRwuBytNOh?3i<Sx^sbyeB7FiB
zMXO9atKs2b@jw#xo65)DRVN$+G(<%cVJMe!^C^g^@IB8AQ|=SruZqU0Ye!}p*97Q~
zR7ZqQ&B!YG*vN%U4@2P?WWrANX20C;+xm^aF<D(S$L-ekb3tBw=Uls@cLT6;zL$G-
zug}@Y^Pu4Ceu>A$GRiB-y%rtzLWnY8&8cUC+v^Z1^|(t$JK}NgmTsi<MTJ3f|ByxQ
z$End;iAUArfuDF$Qq%F2P6Y^^m<m4}A*%l^6GqVDRiR00Hh*A32QV4?NdIjHGfXeQ
z;xKutONRY`w}q^CHq?-gYRYLX=3KeYcAoV4y6F?9^Tby=y?F2&jiHdVmkg1jOC}1G
z`QP|s#kn5_4s=llBu!~PCfyIS3``I1i#Ym))jitAPj>=~O+0kLC(2oakKEXX2bLPS
zU;2AK-L2ms|ITwi1OM^ckH29hzO-<_E7`vGE}O=+S4!>=mSMGwxZ<#qZd*p}PWF}Y
zr9Qz$G4uh6IRsGDQB((eSg`5>sbGcEwd37-SGp*^fvYHC6!AZ)wnl-7j`^v~x+R@H
z51(E$QD_}rNbQfG=br&`jaWV@j?&P*lb`~yGEiftzb#CBJ@_MP&wWw^Zp(q5q?a2$
zALSM5I<@6R?aJ7Z`SHe+9aQoprjb(|F|H@Yc3=WeC4|dN<E&K76<AKCAuODc&hwHr
zLl>WeS`3|$iZike1z!;)%Wo0rXY#Rk7yM)k-e?n_!nSsf)?dBNqZ(9jK-$LZoGXN=
z7eCC9g^>QaxX0LOANZkU&sp3m!?Y*t?frbz-Ihp3GJk0fODFs^Rd$~^j)Sg!a#fV`
zkzcZx8o3ltPRR;O12)rUvq&sOL`w9#IS@-7HM=^mV<-j(mmu)s!aBU*=bPu8u{Qs%
z_V<`RWCp=4??%znCL^J9)YtwPxCs@P_-n`|Khc@-dcf%EDj6_U`u`%W28?RKE|-0b
z^Ql?A6~LrFsvpW~um|&SfBZbCDTPsl&nyjT@KA`p`?UXc6;031Rfvae>NPU+62i0m
zcH>a@FzC>=;_<+FOA-GuyuJz1^mQDjCb!L@Q>_{_$B&-($gdVep$6RI*0S&=n%onc
zm11Y2_oSI8hfYW%CqZz8@SGwM7wO>Z8GUjjs_Af~roGV>MS^qwfU9J^(Vn&{GfPTg
zOv(+`!5}x_cIN8oOF&80qpEG*G&30gb`WxB{JjgBa0K&Lc7*!5N=c(Q(s#h9<(v!c
zxmpY7fwVm_uR&NB$=Sikppcfgn}b^dw^wpuv4ACJ;+;@+F6)3=sM?$@K6sL+c;BgG
z{6h9(#v__#HnZqx*8A-$w(hmep{tejBeTYbucP&2`1_&reZIAQSluZ3pX4ojHHQ|@
z`l^LE_~|}Z=4CHk&iL$!u1z6-iICaq@8cgUIm$^Q%X5(ANRV#buirQh^ucLgWkDkf
z>F0`)WpBF9!kh{0y^Hgx5pU%t#tBefvn#uUP{c1G50OGzp1lJ;V)z;rh~?jopVknp
z_b-Web?_X%N5{tR=acd1I$7JloiqhK&JiXkN)S_h8}wGWW^x8I#muS=3Ji*U&5|rA
zkh_${_kVA>1wvWQ(5W`gv2Mt52Svp!UJG%^G$&wu#1M`6(j%|(^G?+8CS!ULW^}>=
z{Z#&2j^*Afq*l26Ak2)5;{J4uKHRDroYTngxH9j0$@vSD>A<iCBQBcy!iM<@#dK!}
z;W*z$o}*9k6we8`g`<GIVKt|?UD#>s@<}+}CgXDIR)#6eu|Y6dJsWdG{>T<XCG=zb
zc0BXHo9@6}R+17G_laHBk;ZTeNc-Cfq`T{_x))<0WrNQ?2Qcg!POem3G5BM2K-IqZ
zQ}}BWvb4EHX6@sM21s#)c((XkYDh;_W?#n9lX-pI!D4{ccd&y%@h2NTQ4TG;Q%t&r
zCgt9JZEhwHjJT-IylwjVl~<ou6Yg<XAVVa9GDd>C3ZX*?fd!)oN>q;gFby*3CDBAt
zKrsp;2^K&x0EH7#M1glzL}v^VpsJ7|A$H1ghEjKHZMS-#!~5rR^`)=Mh6;l-+jNys
zAf>ME_EGIfu;F&ac?6~kykZPr-n0n3Tf_oy`c#!?ze4IH*GT8jsh--PYQ)M%PA)`V
z=)c!nlcuHRKwT-c#K4OgC_H!U(KO1O$zRy~r&Mc&Q$bSQ@Ma^|rUfvxBEXY#n3<j2
zzGi|_jOx9Mvp9Cq!OUE!BL~;bBkqzAJn1;EYb`(4vBD_$(I}_tbnt;DDa9F68A|c!
zdHrUtmpkQ}DZ>wpn0lC4cS@G?*Sa+v0}TKLWg6&+0n?gv$w7`<a_9G{W17&1E`v6Z
zaqTuS^VK<?+MBg5IqIsp<bt{4315Dcfo$%=uB+&RLfOJ_M{KEdQEp>()3IVe5<8tx
zL7ocH*}a)ZV{)g<+HXjXz;_WzRGm*9P?6V2sQkxukeu_68P$FDL_yv2S;w?U?UOK;
z|B$8S6$q6xy`3)p>%K|MfU#{A&KbH*AfQ^NYIYN+OE*~s8NN6a+QnpArIAh3l{rCG
z#Y9ChnY(S3W0#uPt~IY%CtKrb3P^@K6?}QQMD!25$Dv?lae|7IhAl6b@7rO>PADIm
z<HcK}cWU|%=SP^3-2?DR1||JM6{YTiDG<IBe4LNl9eS>ppyj};%7aJWCOdxBDm?%6
zcAd<&H@Y`Jkdz|;;^;*=u$D&FM5#<QY2oCJX8QErf9HJIfDSD&t7`Fl388}%N}NBm
zHw_`@H7Zok4Z@%1%?QE51AS01FzROpS+ClHCb@e0V$fv9-uTr5gREpUIgZv%<wsw|
z-6YWVtPt1;_K$ZnR1epJy)?|4@BoJcAtC+zSn$@{IIRmRgpfGB^UwCgM#u>dnXH?3
z=6mJSxGuEeRbaSH+z*|70<9avkMX>{b|I#3ADiKQqdO7XcgTcN-JCPS?A^22QV!7=
z1q$Y5Xmv!C&Cu<!;f0`(TL=1G{I9J9+|4+=M!Hr*lNsEenK-8raRfqc>ilkAs3D9I
z1jK8(OD1V+<>47>{sR&I&{EtNQ}8Wv+mx*ae)W=dIam9F*2OAb=fp${<kS6^>l8cy
z*rGqmC_);YN==q|7lOqMq-i~p@rqBzgJ1U9Qf^{KC<qqwH<Uh68!sAYy9bEhT}M(2
z2V0Fji#&K9f({J+xDqe;NDHaKhYc7{KAHliY?mBi>ynHQ|Cp(vX=nGUAz_~?$f)P5
ziYo;qliV3xSV951l6$4)J+Ggylq7~o+cO0*NF|1=hl|NpBX8>+GboyvFAB*B+*}sO
zoPdfa(fftvkHv$-i<>HhF0?`w=kim(V+kiISUW^v+{u#HQ$Eg<4br;sqZcr#vZH(V
zk);+t46Eh&t0ruj-uRX&U%R{Bg73f`3C}rI0Ax?7Qx8M7NO(^$U7j_IVRp2y{a#ZD
z04w@m)uRkn8zg(%@z^IeIablM!=jULzsLM5Ce-Y6U~G8gd{ip<Y8E!fq+0bYcj7Hu
zl670CDXJj{RMeliLH;7we$haQ$1%I_#(`J_p1vWpgj?}$m^9kIJZaqgw5_f|xJFy(
zCT%G9%zS3h-5k2FP*U?^lkG=@$hzsMPfr$Cuo1XM5o&^A%3K;kcl@2Zt3ApxgOYli
zhJZlUt)Rx!{xDF9me*E(@)TfC92kB9M$A#xEcT<x_w;T-U(A00adPJRZR2K7kh@E+
zhSg4Pt+#E&V5Bb4$)g(gmIs<*W)dZU0e9OF2AIqeI-o}XGzjd{h0`4q(8+Q!ol>_Y
z#X4QG*H%mFz0t-VAQUhY<|M9`@;8i|{+YGo3hGJjU-fG09#40GsY<`%yj5xYxOQ5t
zrKjBW;~D;9e^!>E#PA~%Dhz~=b%1%mNRLH##PF3SOYUnC8)yd^avBtPlN*5Oryy|j
z6ta0f-L+_9)3z)iJ_8TckSx;kG#$3NvnD9IWzchkRbXYHe^%Jf$VK*p1-<pe(8d@|
zq?}dXnHi=AG)JH;e9ifaqRbS4#Lm6cjz^)a;$1l{jN$;Jo`rIqFb!hOYqh=eri}g2
zMsx=nUTaD#mX1gyE3P%RBXVgdDYrBB`}UcWxW2qqf5UGICGYj+)-G4Y<`{TwJx%wB
z=?tTD=n3z+(h#F}OR_JD?DvTX9(1+;@1=@$BUW4fsYYMEZxE8C2_C5dAdy=$2+DoU
z$q2u7o91T1#{(u^l{r*(y`kgqbI22mm3BS87xP%cs4p?|YETVpn1>zvdw^BuNbN;S
zse!8%B#<%iF#u-K4yC6tG!^jE;H?TY+OtG(oXLKsK1q`&1#<<PnRDKq3@CO>(@@#<
zlV#EpHjKR5k*QWTCp+BitV*Y;B=m`Nl#M8q%^m6wYdaUUoaiwG_7Q<Im^EVxe_q~`
zfgzW?bf>USgEWeWHP&c+uQ5Eyb@ej}%Y_}BxsT;kH&}``<<P~@TkD}vv<osEOF0%_
zdw(%BKJ3(RA&rz6iL|48<=@#jM{Hsd5JA$wmYBGu_;V@jr=j?0S0Wsjs`;Rup1`ma
ze|!5pXD!?vCo`Iw^7>hwOH2s$4CYja(5D4ghO?YL($c1-lYV^Gmmi6BD&-7rvqvKQ
zAL75u=L}?4m$<rX4A%Im?+@?B?nf4#BZ9&&0*5t6E$NJi`Q24|4z_-wc#}M?*7CRs
zx1sCSXx5S`VP8WCGu))XNf;#2OpS2{Bj<cfqb47b?(78Ou8)EcIl+oyxN<tCxC)jz
z-bUb!K|ZduWUCp;w8-|=CMl}t%QA2}G{?@byQurgb8fJ%<4)01`m6DBPUvrUo`;xc
z*#r&{gW!EgrEhpSzz|u$2&93bu8B(7XARO_BX!EBHMWC39|<q|ha7i$mU$@ShCqjy
zaLP}xNn~^P)({ZNC^=_SVUbR3kl;46H#&RZ`jY^bPbzFS*9N;UpTqZ$V`E-qoLv``
zoyJv)q2WyzfJgPVfSxRkfPYq!y62WWMwi8YaYHY7*z@7Tr{W-q0Li%zWkb0qvoP3s
zc2W+MI^F$Yl{LWL+Y@B1D;~>a4LHOFum!223UAKUyGl)uN@?S$m2mAN6>Uj~eB{Bp
zdlJ~f1X2W7tEVub)qpqY0HUB~kSv_Hs-y7qU0`MnfJ1gY{6@P@qwX;yhVT{~Hj-n>
zJ`oHMjG2bySee)d@h^(QWqZ#FzDSz2wktF-ezX()hvLr&in>NVAJ&j=|E}BYXudhx
z)6RFBVo2Ntg}Hk+WN6Q+zP=YC=?)r^$wiW{xdNStdb$S}PgB?QN2?0x1$=f9wVVP~
zpk1~6D&eiR?11Y9s~jQPm%YIGSATq>cq7F~Cl}!`6QGkX&f)_@<ROr8krc9WZl3f{
zB<ULP4HG4N)@#hCl`e3wlr9j)CycnkvpS6+S8uZ1xavvKTHunop*x9K+Fn(C-=gQV
zjHFRAe)DZ$3hnW!tjd(}=?%<<4A;JsgjEJDwbM$7;HS~Ny#5c1I`FaRP~2N_R_QCZ
z;RzP*P#Ts#KUk6`X}BZ8H3<ECpROx#Lb}cG{#z8E6>A^}ZEOFFw>=s101fmeiq;X&
zg0KQbvk&LGXPi%C1U@)rhU-B+2AFXT-EGF|aJW<UsgRvTG$`($8aA<&%y>hD_$gPM
z(k-f{H>a}Z+{AwXJmxI4De&-Rdd)0eSyQ5ADdFn{WVi-LO2)6bJWhyBeAYk=^APAe
zjq_AK?fK|o{1ySu&|mq+U(r@o7m=X4<`cki8GRE+7KvNgoPC0k`B>R+0jf_7joZA?
z9Z3t%l0TP9)i^sH-vLY<ZdJuc!uRfKA~QI_X1Os#43}r#>kO-d!G<7mHyP~A$`8tS
zgx*d}>T5$(04q2b5G)QokOwK{w_@`a>77cde&N3WN&7UD00-%N0Y$~z+4>PZoRQT4
zoC|uP<+Q?w+5<p=kM|gi`orRwo2Cgmtm80Rf(zK1W7|<-J166q9@<2luOE@1zyyC0
t1KA@lJGaD%P+%ay0tEiA4RorHA5=}~GXg~S%pc@?Ns7veR0|md{s-g<W`O_z

literal 74510
zcmb4q^;aCv6D`3dKyZg3!8N!;2<{Nv9Ts<o06~LGaF@j;cyM=L+}&aEMfdUfzV{Ej
zb7p?nIcH|Ot8Z7=y;T*dq9l!uN{k8v1A{Ir^IZ)F<^#`vH!|Y;lhgLjGMEoAFtXpp
ze|W8&y?Un6EPHQ6zID1%&HkyWzPI%8c`>$RN9^u)4*T_m!3Uits)$rpRz6++SWau@
z*_xmiFt9%Fe-H3%+^PQV&Grr3jll=bSjNkEi(}(1t!ckvR<fUe^L00CcpRW^pkXj?
z0Ouy8>|v>8At@E+y~}y|(CK8>TDPX{z|8xHWGrTX(B=Q{r#BqSb@rVw1?TqT+Vn#J
zXp;}!fqBz#Ea`ff+VgJeYKS6Gt*;`^N6hgomzOJE*m668MriYYf46PBn;<PhT7#ZK
zg0*@fqD}kVG|qP`nEs5zcdNT~M1R%OTh=zhw}Kv}x5fBELPLCSCuI;u**vLjw(>P4
z!QJC2^puC-mGxz>SF!zeb40RhvGH;qtt+mz|6zK}u1p_n=9>PRM_Aon)fdQmnv*yS
z73^4(Wg_T|m#>`Azds_{3pQ|n^l!MhB3Wq`@WZeNXC;hfai%^Ax?bHgM3g2{`+eY6
z>Sxo|d-N$;pRaq`IPAP{jAJ%z@5IcMChrk?<0BW@afDgDGx{iGx^-m=2{#L;$dT(<
ztARA53BkA^IjQtVhkT|A8Pi&9{mF&`aEZ*OPu<L>x*Ga=J881j^6BT^4);S~Bf0jl
z06~^M7|Vs|a{{`bbXX^5DuS4fmEf~hzCI*ChhT}T^D^;t<5R8u*0aHOTb-pITV1wG
zYe&<DH;u$931*`H$)H>7rN`BMR9XuUf>1d|GD7^Jq}POR0L6<IW6B<hvdH7ZLAVxp
zn3|%=(JdZlqjqN5sbh;numjqN#QxUy<IWesyPl9UCJl_Q!IhVm3YH63!ft)};&&A}
zYQYwHr*w;^+;dluC~pwu5{Y)<QaAZT@WsW3Q2(;P=;i|52%^=Jwy&mVSM7A=C|Wx5
z?^NgVHMKR;;9irO1nNMgw~ARAiQgDF_lev1dw)a(`c)ZnImYEH=`ip+r0C(GIXCbv
z(BFl=J#~oux%BZ!TJ$!oVq%2k)3p9$NTh^g8}HRi@=g~fhi7O=31$6ve=iyDXPnl(
z`P#mj6+GoZbp2#1t(P{Y?4!QZ1b4OuCP_|`4)EgR$JS9aXu<iiK36@5%IZno#<-{6
zrM4p(Xo38cTU4vN0yU2@7^_Z-MzVj)U@FMZFg}hy#fSp2^?eu?&ogl%2jaJgwdXK-
zippJPKPm>y3SK@Q=?&2Ed^b15a>wc#54D1pD7m%HhI)kJ81VRfHAF8R!8=hW5t#8r
z1}!{BuOkBfj=a`h)NS+!wA|-;wE7zylrx%Qo2h+gp0o-z7TKPEwVmJT5`w;L8X<b^
zC1BFUiM}<jIUw;Zudm)mu$)>w-*@;sT1Mr<1*}8}Gt-xo=fQB)mDcWCTXN>nlJJ#P
z6NAjn2s-U(Qr2Kg?QOa0&GKkhoho_jC_GR>dvY)|tA3SijfO-~M?VJA`qSh}=WMQs
zhebzRp}*NWAze8n-<{fcCD)6)@6%YQ8#;V9o7j|JHb3nRNuG&-f_w<jswuxFRmjgE
z(mkaphpoc`NLZqb-oAI?Gi2z)t~R9=oD-Ig@Q|Kn!!~B~Ef8GPk5x;Hx0jnLn8wIn
ziHM@TZ0amLcNzK|L-~BS8-3uGv}?v9VFmafxA?ekQW0KVO%wf3goD|{&Q=&9^OBs4
zNFW|vzD`sXoL0N8+l=p=r@<@uYzK-#D;Nu?7QeST)$^LR%{oj}+O{r#s5%cW^{1h3
z93JAnJ}-2>c;@<D7ZUmLS<1HofB*aa^E{zQK@f-`atl<wSsX}P1^IRh9xqPtXs&e$
zsI<YZZ~vuR@S)rF2w53qZ9hc?xHP&0V<cl2aX?KqH?57j+f6|kcIJVl<=7vpqn>s$
zPhK~@pIW<~FFo~cY1_<6;K9Ba8@`#q>%a&a3Nhhw%5O>Xh74M%1@`D5p1H@hlgI!T
zfn33~0((@D!!&;rP`0+ta&bOrCF2XM{uit|FP66snfq;E?i*ADt;=rv$y0gauBJFN
zcpnsm1T9!RA^3iV1Ud{YfA}1!ukYR2&#{VJ`Y}m-|EpuGT9HRF4jF4#LS~1rV~J*S
zQr@7(3_oiZ^cNGy^}@yAgo2|!OKF{~idm*u4B7kAVE=42)$Mrm{5Z~ll~j7L@tng+
z`&jtx9L;m>YB3N|1Xr+xf@d=yOAlF38gqjq`(&6cs*XbK62?70w#iW1?sR6wVY|$r
z%ldpZ2IvtZ(5BU+-u5=LB5-_CQpnwUL|9hNIjBp`aPr!vrSpWQEc%Lh0L#5cJ>dDN
zHq>WjF9>OqVOSK$%u&NgA4IrBTx#F2>KOv`c)uEj8Vw{n*G*KCm`H6kG_GXTnkNsZ
z__bd4T&G^w*@Pflxw5%lI~4ny7u^eVt4icvTUH1+zo`=Yb#?!~MRpn_#~SpiuYN6E
z-zw|a_5$c3HrgMS*;{8=+~n~<vdi%oG_j2b9$yY~y$=E(fgFNuC0V@N0$eDx52BEV
z=sMAw6WG(o#Ii%BpDXA&|L;-?A`WR~vFcx$)^-X!Jq8ADQ|BMtH{a@V<Lwc{l`5SF
zf+>hH-zp!{;mlaGeX5ZFnesCZV2}sBWLuB=GtW+$Jq>KKBDt-`r(7DvOoA#SpM!Mh
z<J7O=^VAyIA&?=7%5yDv3-GlV3F=rkGF8sz!alNpYNPjM^Mb1sy(oMy0}QHWd%TY#
zsDEF{k!qwy^z(50?Xq)Cm82evf30RLKd)G)=87Kw9G5jyWMn^wcfl&_Lh!)}yl(xP
z7Z}+B;4QiVn$2PnHmXvCpf<PvYwQ@3&uz(mzUSTmmy{u&b6<@{nZ$(t)_XSLyKy%C
zq~Qs}-x({QH>5yWyK8D&@$;`M2Csr4cELc}Q!vP!gcg;xv1-w@U~AU6>s5$**(GNG
z`q>dqz~051ePyL?qbxG`ZlMh;C&Ny><^tdaAjzIw7JF(fHtWELk!0UEluYE={3?9s
z6urg{=5yo<cKC77t^A)YBNYQ^r}=qc0I7Uf3v^whe|{J)3eQMZ!vIcmKmN5hQ+wZ*
z<~X6dEWyNDu#FR>r!2uMl0!Zr&)ZQ$KAcopE-86~JU=rk(Euc(3#kEJgtDlMjCQjx
z%Yu&3OenI*4u$t#-#t2hon+3+8xl09@i-Tgn_HH5;Q*@iZd7>BW5M`$C}yvd2sN^J
zit@JCAf0k-5O`<Awp;jIn>^0q1U~O#ia@Mp=YY9jM;K$@@!p!Y5jf13N{*3D)pKC3
zi^cn_F_q8J#XAjZ*jZQKA^Dm|tEJqTQehpeU-!(g_!CI`{xpe+tG$}H^sZTr{p5G=
z%IL#cy3g}SP2g_e^EI^}A3u>onuqPp=V)0)GM_CI)n_7f;`P7Yazp3|!|Ofjt0$42
z8+C6=*pX|IX8y0k&6%CmdoHTQ<q?t`WV`j!osZ*ee#d=&OMd1g7IEfn;w~>o!Z<uN
zezN_fT6e_#pB=%VcbIOJ?yWjv=BzA;+y7onsl@D#^06%+^nFNF^u-L=C4tWE#Q)%L
zEA<9PAb|Fc*&<~fVoyj95S8s8qP|}Ul^UQcD|W_s0Ty%p+B%t*HQzTKQsdFGZPpm7
zZN<=Up~o+u{Pz;NEIf5$SU~f%_rl=ADn%%O)LOY|RK3k7L1x)&eeYl7_ffo7d6)V1
zsS4c4<e2ZAdU%n^ETpFs3#gvIW%lODPtn1kCWX%RkIME;c}+^^`u$!LQT?%<Hh?Gl
zdS#)jW>F|%mtF2&;XkyW=Y5C)GgIS2Ua+<zQGl<Nv(6#F`@#LPsxD}!t2f~9WEDg(
z4mc=@wfXO^>vvpwsgEO#x4GpdHHH7nOKvWdJ#ENazs8mEsR*V?1`<x?!6l$IR(()r
zfCZ{XP>wN}Qf~vOJoD_A*>ov2Xw)B__NbeMdjV2;@VXkjAHICh>o)m9HgL=qd?ekX
zSM3_Z;vxR-UT_ABE>+KM%j<4B(7oYmtU4ZyeowVHlQumOMPgy#F-TA9VtA@EYVtTS
zjBxYiIIit}Ce(vCm?W({U;I1m3nUcTBi~IuzdMOS{hXA987rrlBR1{~!eP0puE<%r
zz>jRl_W`s;0tcHz)9WI{RWbG$90k3SAE3w2ko7<au5y-7LQ;$$Nl|!HIdG8m-79sV
z6qNGP;%PwDs#N{ABIyK}w5VO(@UT|R5WyhGm}w%;ZCl==5sk}`xP7+i`MpbO6C?J2
z*!4)?fpQ;|o%5AOiorJm7!?{=0wKz@Lf7h>192~n{va)vld{%+BZoU}$3H;Y#b{uY
zdR|z+RPa=GV@zh-`J_=;9ApSm+PY9y+AaOMwB1(neIi%u(%&s<1*UXFBjWog_g<Mn
zw#;5^k|S^TzfGr9`RYXXu0kR1Rz#u3yST>wa$RbISViF4RXjC^(Oz{p4hAVP<@pIl
z)cdPjWg|^00!^rZ5T0P|%Qo^v(ZC_HF7{Vd@|!#t^q_MNxKfrAXf|ORQv2wa5#_cd
zU=!1DvlbeF_Z`MrK%NXehgSalx<z$dVA&LX^JZtbu0sLy{XFR@*+H4Jy*J?0(}T^k
zQnK9>U~eCnvS9>2Qzd0@SuwM6)YGi+J599uggb-CF~YB{UZ^o9ohZ;Z;=3VQ4)Ocv
zB`%i>|ExM_6>aoB!zVF%u8EG6Dzm+MuG(1oHNMa8UZ~N%tueLm1IplYb?_@1CE$7b
zPXSN;yfup|lwg2Hed~1q<9u=KL7nI5dE`GM#m1uuUOtb|ey3XQj_lOgoVwOF^vj40
z7XLJkPu*y{`^<nG#jc5Szs2t&jg~|lZBJ#&|8ziWRs^azNL(IGiMvyR1Q@dNZAK5B
zN_hh^i9nk&_456`hgDU|dLvM(+Tzj)yDz${&6gXrX`<nt9J;F?A3b>APXGciXm2$Q
z*fh8l^5Mqz{Ea@4?)B+dDc-S0Q<=qXpByh%se48c^%n{ak!02`n58$T#H4>rg~6+E
z=xOB&RGs06ruRO9S_&Q~I8G`l|B}*|R^Q9lK%Qpo#`LQ1wyjknmi-qb-)%Qp+e_Yk
zam8jJ9D8laH#JZllY8PL)@-XV&EfrLtJ5U}`Kr=*T6{_Bb&YC4<#U%y!L%=H&cJ+U
z&=#S1w3>PBOdo=0N2_?p`Mb+&I_Hb<Vrg$|^w*6RZAvL+SzeR!YiJ*N%aZYa+Sn>P
z|0T0Wk_s%*PBIlx9Crz=a|=r!F^gWLTb?7dFokD!9cSqpv^}&;7w!1w$Yo|zDZx91
z)XTG&2J|R9lA-ZpQH(_nCt&gHtcWQq;!~GC`hZY!;st?If9bJ0NXrB_tXL4-Au6Ar
z@I`)Ui^+w1dz60sbMdLxf2mvgWv{b&jb*r_2M4r7;se->wH*8#U~pd0#r^uBFe<js
zF8g@Y*`f2*eq3Q=GUp0032#XY%Rvxc`eBcYsh(L==_W<p3bN<e*{_xBm%cB|U*E{n
zQH|E7SW}aeVGYrg{<_`IF{Ow}P^v^_gX0&hEqR^XMv=YsM<QvwdU6)EZ@o_9U)y+e
zv$C@Nv-tVWu}R&A6(eoy!=xZIye-$~qzk$bu6l#j@A&YkJv1r6{A|mJAgP_?4x`_$
zCcUoRWIWn4%df5Q9rlsm9q>Vk8(haP@SdbTY!4fc)C#fWJ@XY1fAT=&D6HZQ*XWF_
zlO<R)q&Ct(uV2!EZeeiGjLd<>L)NSD%3^JYtbs30=|B&neH7e2FEVmFqK%tyVWh6H
z9b2UMr-?l3ZtwPrcqRIddhi;>_*}+Ub0U)R;{f0lhzAt_r{$fcNQ`&qefV-l7mz7k
zOQ$T-x!&!e*1G=(z)}Gfju+1RELAOa{q*#H^my_q+xw0*FA$DjlM`17uLTa7kqW$M
z3J6QoO_^;}9qD~Mehu!><Ks0WTujcC@`W602$3mpA0BvKZudMW&-ypXpQlGJ5Hb@W
zlqkn_G*Kn&8~)Qm$E2vb%IS)yj=?1oMje@m00pTdBkbW}tgr00ZXV6(9DiNaf@#GU
z;@%JwYMhwS7?qcqSB_JD0kiq<GX)kdSuPh0F$*0({BUej{{AKf&+W?1urm3+>)z3m
zkw%1h-^k7IkA1}2BQ5;m%~?uXdHUqw#|8T^5<(#I3m+F|FN-w%eebbqpLNY3`CP~q
zIT!pTS)nw^8gvQe#GuwlKpFU<K9r<fO`jxT_<H^dac#5W1}?B}?A8FGS|E%|>9Y%N
z5rzQfzu-kIfSK_9IZh6=24S6+*%v)E@{CK_9w<rGoC<8(zQn(e{Hbm>%fPq}{px$M
z3#9NpOFd6gHq@!H59#JH+b*i%#e6GT+I#&pH;rCwy(pn<Z|0enUF0^5$kkchm9v6a
zl({gYUf&cvsr>ag?q+LUR9071Y{~*eE?0M{9>o!a(xV{3>ePuI8s4z2LsS>-PNJ}+
z(U3q*jpsKDUq=ef$xKTxkM}!pFQ;}l9J`?p`yzPq%+K89ep9+#h4$wX$}nXhs=Z}L
z#u@OjYAwj=GYpCSv}C{Lm3K-<Gb+v<s#QRZ1jm84OJA<>lC0d&LG0cAahZYN`53<V
zc`u2LO%wCvN(Q&&TW{-fT%e`pK{a}DAqjkwD2kAh|Jn2=76-5Ru|=)-dt}zFzG|cL
z+_YU*1qT=`s^uCe5}btde1$I&P>hRy3c&+h;;gt+@-v@xEl(42n;Z1F3wQqX(P%mR
z=^{|`wKHp0CiRN@H&;eP)poYY<|}VK^n1v`;gp&z^OOgt%DR_s6UwG?LShm2M&MM-
zeiak?2Gs0N^P5{x%>sMjob@YfJX|;Vcfe<RW4sqCwe)U+-kE1+9Ctow86Lo0xyIqh
za<)b)YB<bKrYrkB_8*uX$*5P2(Js{eF*y<NVw5HHNN*?hYt|v!`nn~StkZTBaOX(P
z#hL=NE4pv6@60`w^KqQzwqErY<z28}yC)j4-Fdco;^x*#vz#T{pYVLe)lH}M<ez_5
z&$v|8EH{oryZncOv5?GZFm;^;r0@0`Zm(@NX|atv+;1NNm8;ZMK*}W<=V2TW6xIWx
zJ3M1Jo*oG}P^Snm+N&eing9u&`M8Y8oZKy4wL<0<ewS0om~XNJT53hhzY<ol_#<iw
z2&HMnhksi9u)^w!`f<OD7rT+_dZUO?Rl`qg^))f0I8*F`l`p4Hc1lCW$C2Wlfe>#Y
zX8$#>PmaB#UUH&P`5^T$-u_IHD+*2UfIy|I@t4T!!9}srYquC2_frL@lC~u0_Xb~-
z&l$xOdEfyqc!<p|=;P5f1f|~595nL2>GZKT2W<h^vo?RJ3O$T^ho4hYXrtGdU%;v@
zl3OX?ybjvwP7#&T=zsiNMDv<UbMn&n<|i?!Oi@k1^Q#X_LnQ=<n(Q4p-*1Qx=G1g5
zB$DJ@@Pjawnd~q?tS{B`sAmLy>#W=2Y<>?Ccmd!VT+(Oq9y&a8b5i>?)ceo11PT5T
z$vmz2=2$cM5QHDTG8V*#<!2p|-bb(Q_c0|3S!G{EPRo3dc4mGI&)cymu9|F4u`tCC
zYXoQLI|P4+2a%}TM;v<oxBSIJ<ZaJU?mTTXPr9zR!xVi>54Setj^@IR74JO5hSO|$
zz;f{0-@mCd8>$zr&qE1MAH5d}eLQ=Y9vHK+OkOOvhvIrvF>j<E`wOgW7;xFzF~Qan
zN`t}3jzsEqihNqpUl&f})9`g`sAwY6yYc=!y_qQpa}DkhbV*Xndk->6ZnNp685s$(
zG1~x^Y(GA)IJu62V@HTDeIE!nq4f;!ex%TOX=|3&(wsuKjcA-Q9xj5kI}NeCQyC6V
zh>Gbm{|^4l%SYO>ourVZ1P+X@!a?CU)Mip9KANz)V%CvX)(N~)E#~zfPK=xPd#mp9
z$baAXDNgJ(Dnxwm*UpBZ#?<aj=rF5#2sxmq;q5LOD$jxEYHx`f&^rNjF_5IHK~T20
zrAm<XWV^fnaMAWG@q+~E2#<eWP>r@z*(MGJhZimImj2AyI2s(9a~;F~`JF(Zpu-}n
z1(AP_bn={&;5I2Hv~Y9BlJ&K=hxbF^z&GM6pBqZ^aSBea5gKYyev~>0>pma7&34&5
ztJ1!(1+FbCcs;x_h(feOG2h%qvqkNQIy!=DVhUn}Wp>$%q{Z$BaNQ_Wq`%K__iv*z
z@^7ztednYR3~52Yjq^nD;IeqyAa3pij`m$vTy3qAtoc+bJ>VUUd+Jnu$p`q8y-x{A
z*?#wyOe3M+%l+oiGVrpHPWb}Q>l#4a<k(ZEyl_$t(F;~EI!SJQXPp5F!v=lobL_h2
z|I~|q&#eV6h7+dqNwJNUWtFl&hUAzklv30Sc_jVa41zoO@mTfcsG2d9u5|F!cuD4G
z6!LH6@bccEjM+vMrblGz^Be1`pQH4plF?ge%I;6}W)I4BhmkevY|KWdkhDLBL?GN^
z9a*nh^uVL=637U2>Z9YUnJ*tC)){~#?bN7Rs$_EF+oSZ83q{uTiyN2ZhwyR)wcrv5
za(W8paN1yxAR$t;#c$U-MV`dx<2!-|T%JYleGro|Ma(ZkZqng3FV)*wyylj0=s(G5
zHVxlduoQpfw!PF312xCaX9_l!S5xOkY7N)|Mc+$8HPO6x4bsvJpr4Yn(wIX2PsDPN
z#2))BD~A{hggZw@mrk;~As85Ob+y}2pLG)XtM1aX#o3x1D*!@x=1J*L7ImGDG2V=O
zhh2ni%6Re(CY<}*s`#vi$UJrcUr;*Mkd2m=$+0EvVb0*hkAyv$BQ4z?JcO7`imm=l
z{D7@KXkt#qwd16xDo`u!`J<Bn)wlKTwg7f3JHJ1E9`Le4fHs){v0_A7JQ@UblqoJ%
zPE>)=VR~zvw4UETb0qFQ9@&5o^R<IbQ6>c9Eo9h29Kzf<i*}tVFc$Ic(DGu9Hsb2h
zvup<lC2D#fZr%kOeTtlw!71+#;Sv1oA|hWAv(V6gjXhH?#c*K^O2-O+rU|5_-;Y`*
zQfb3~4^vt4nwZ9;mt{H4;*kNeA~D&SJBrOv<T>BV;<*V~Okng&UT<_fIc@-$k5u~j
z1NW8=ou8i$!@u~}ZUZJ;yZw9>csxpuZ$Uduz0PQN8Gp}gt!tzva=)G8MH7j0bA4=Q
zDpepWaGrwa%zdRox4DjSIQwJhkR}{J=V+XZ`c@p=G0&>l7JWWpdN7%PIN5vcUDWmy
zS6-$L)=k_;EKDX$?bl+<61p&g59+nL$~bk0j=2T7j=tDIs&O^?q3dmf=_GC14a305
zuftB&?PgKYzOI)lSwp+3zuKvJ;vLlgn<A|iI^eH{3KO*Zw=9z`#7LO;xvfUOET}f0
z(#uGNS1S5vSE9^bN<VEgD`|`K<`h%?c#RT`i?6?EbI4>}f`5mqa3c&LBJm#zpXjJT
zvtRrx(#E(P@bhx+EF^E|Ud)2R59-W^ackOKkK|W?u%44BNVy0DIO%=W`0-SKzLVU9
zL(K1IFUfDr+^i)uw;Su7T{3$ES^<I;e{-mNU4Ali_7=bS6V89tj1Sp>Uhp0RLZD8T
zc+>>ZMwAj)8Pg*vHAN~y2H-X5+I~|ex@T8w?=})+G?^#i+yG01i3w4LhPfTQeJph&
zD~)}>hYFFTO*q@$VICjSBXa|Ru{)9GzavwOu`R7%4SJHR=#$wt;5&i}zbo&)R4Xn1
z%YQ8g%uI!UdJU@g>gLTlauU<@uRbo5W}7j+2e@d#jK&;NF*UAt)Edq^#%JI-60@$u
z-q@py-7*6P-FK~YSB}A%sEh;Eimv4jTu9n+yx#B+L(t6Tg%TW|V!8tEXzuAiyrzds
zi@H8mfSi;kTFKE7WFZ;#6K7)TYGJ>AkYi0pr9qX4m1Yc^fuAk^s}`+d!w~6>r^rH8
z81buiia_qX+n!6wTp{3|NHd9;t>HIcV&LQJ^bI(wx0P#qUuQ^O*`hLFU`{xlYCd@e
z$80G9wKH3MLBda|C08&{tSDmSmT?FFb8g6j&|j`NR`+-v%zAu$>@&HTMI+LEt-!!!
zqc^)4<@R!+Q#4DGKgGJCJRbCF&lvk<_P1>e?-8VP^}|`~^5*j^le<(>OqptVLT6YX
zM#u_xzMB)C5O?(l<(N}Az$fvlpvhR5o6csJo2!TE6Q8qWi`!@14p|#s^i5BuHLE<5
zxiLm?JC4XAq7l6gB_)D8G0a3r3$lPA!#++l{lYJtD}}KeFH})>(^B23;TEeN3S*!A
zaPU_y(%~K$hlO32p(P2?Vf#SNLuu$FQ0GoVL~!wUw4hG&s(%SnR{m&G)8L%&e!imz
z-_<;R^SbK(eQt*3^#;RQtImrHi8JgZwL8Ir9a(9?0F@hoi8qSDXuM7wEA5g)R5b{4
zr_2p$q*F7T!Kg4pV7mL|;Sm3gb^5RaKN+Js7}%sC%+1PA+t}!1BFezM`l(K`eCQ~F
zg2R+zq0{qdVWhb&1lZ(^ka)?QL#%DneMXMKOR?9q8kpvBai!RI^xVCHevZ}WxruUF
z9VVlwQi)8qwW#Y<a(;~W4G426mYwJDsV)*p<J`7Nmffothn{MTKCzdBgGTeJ?C%N*
zunrWu$5k>bSxhAJcQ7A;E0#PzAaCLbX!wPs?CKg2)GCI2_YK>de`QZ2?Gk0v4%nW&
zpp$)`pKF_-X{#X29(n)u$OHD%s+dL(O&;0NM9(Z0vu8Yi+$7zSN9g?;GW1M~_7N()
z@9p02`cKttS;vKK=5X8Rowf;FgR1dC@Shy*0LeS2R#UGRj-7W^frbkebp~bLpTR9W
zQW(%?s)Hr=@bj2)b+dPYWt2P3pkJM{Bq}%4oVFvW?Gn;w4!F{=7GVTkgwJDbpL=#c
zaDDqhOO=1b*n4RKc4I2aJtuV`7*(l;(LahUz|MdP_}pKrX4##eZu~tR0f5IxuOgcw
zRM+5J$d#%KaU)OEh=)(WO@O^Lxji5{!66$IZSGd<1M806u{DlSobvS%IS!AdZyy_G
zSDKWHa)gik>bT61@<rGa?#EVBE8J?6@kPPcGNFtsvl^W}<$jxje(gJ)^fgTX>B>6b
zz3kOzLy$paB&>W65N83qNme>{4o_x7*8|`7k~~LzI15SSBoU$}+(kVzfF9_6qMm89
z`Tha(N>2d}@St8zLbLcsXWAFli}qLPqxW%-5c!8&oS9g7e{Xr#^lHFrFo^yDG?s*@
zeb_vr_x>P^)T*8}_o?dfQ{y&l8WCPr^*U)JLv4z2oBcoVNI&O17pc~m_5>%dj!D1;
zd{X_?&b?c0qn0WsqQ^&B0Hl4gjv^rKqF{F&y1K|GnsI$C7ZB-oxnpL453mEZ1-|Ix
z`FcgYY*r;+kZt#4lJ|7@VB2_hKf&11yZIaeVwqu?{`eISvc0Zw8D*S;Pl`;6twK<1
z>}t2&*6%<qtnac&9a94?3`>(LvA+4C__^*oBG^j5XfB-sXet=S%!uSg+6ILh8_5x1
zn3bo`&UY0(p;)!Mx5H)YbkUvi$DmL>rEXtoysUxkE9A%^y6kOEGHD=*K$b9pn#$!j
zr$W|+4QhPIU%}C>!!NawKg~ZF|M+FZI~vC$j6|xyOLo{Wc>Ur$IN1@AIT^n~+JaYG
zXk6a%t>smDL)mw^4lKX9(=3IpR3#9NY<L$nv@#SHrV4@BqIfux-N>UUY;g44ZZkx=
zTE!O;sE`GDAXY>f$;zytK(DSiI-ORWeK0F;6^wNvE9ZjR-y=nK3k4(zWWfXYF79`k
zUvf{c_1ywrEtYb5AG?FvAY*|CSR2X89HvQQ!MpFWhA9AdDxrv1v5I@Zz%wACs4lg7
z4|LI_(5_`YZ?Z$^H^m3a-g4S=R-E#Nn6K8YTs62@6Uc4jUPfY~V`YZ@)AfqI#iS6M
z+|NV64UH$59?4%1aX>uO1!o#qqiN&a^N@}07FIr)EpamZD~~@+^TT2|_;kMA7W)jH
z&Gdet=*X1T?cKh@t%*vAA+tRXNw~ghCC<&BdQYR|^l6nO6p{1Ps?dw+VHkX+=|G+8
zU>^*8{JXzqKKU)@Ry@Z31NXACN?YgqLANzF_<78Ze6|T-*-n(Ra>vcN!H}cds?dbJ
zaVP990@)Pl7To-sn(ko_=L68&Dyy=xBy9!oY=-C%?@r=S6wC-Iu}zh&1D0?6RTPk8
z3c<q-YAm1OP~n-t1-+LI$&XDy4Y4ut945*9mTzzqV<C$lTChGS@4Ct&F#H8)9b&Da
zY9BMKe>8Mp=t>WrYC`6u&bdj#Y2g1QoEsKVrX`j$gy;PN=;;gGC*Qd4!C4apDsbD2
z60Z)|v2LDbT^GCks`0msO%<6NJj)h$jfdsZvi7y6gBXSwJ@z77ec7$7(GR0<7g0X<
z$s{sz%vpI#pW3ei)(|f(oIO=wMYhY>i}MVqCfS-=j>krR*Hr6MC>-6!Vfs;FuyG$G
zL7Fd{k@3OV9cQ)Hn{yW%)Q!7~TaS0acm1lMv?<FpRXg-ieG}7RC7%4(18H!Fm@+Ji
z7QCTT*ro%6D_L>2M8(en<QP~j<jzm+aCg`zcEkb&`JB3)7*#5F!A$U}K}^Za;fDDQ
zXxbym9+;hLY5^6<35FWRmTNapOI#gi?3PVYO{mt*2@aT%x7f!Xk6WAVzn?dJ(%LNZ
zbvY6Qo9oQZxwEcZ4aRO*x5p?lrB69!EQG$>wH9Rm>gV=82^GloZ~dHGX(vnLvODC1
zBuTZ;D6Yu*1-n&s_hf>}_ELt?r*GWrCRg>Xru<JI4!Wg-68oUbX&WuS0A;l5GCcJQ
z;NB<#6wNa{sl{LS(6%gkqq*Y!;rS!ZCel~9$D+gh5U1gAN~#!8v?G4lrVamryvoft
zwvvQN6jnMZJM2?ixPRe;0+~MO*+`ft-`oyeoH__w@#68OM~z#NvN8Ms2m#H=T+2R^
z={aEp!25*82eYa9nd)CEH7S(du?N8{q=68Ei(M8+kzV^TxeU23oBDizg3W86`kpx>
zU6U(~TC*f;#6*H=#p%isx=uq2N(Su+ccBgw?0}T9`I;fSGqdq&$tx*#&dwa6#<6zM
zjZoUg-Yb81T8u?-^~5kr%PV=`5BX{oWprHmkR8A5LUqSoNF8RaF5gQ8`&B@`3yxcc
z(~fnX9<z7;rx2Wdd48eJ6YUc(UGIqUzf|;n0t8gt?eO1hu>|uu80YdM6n9)vyfzp*
zKj}|x{oA@p`y-G)r>^NEx1b?16E@{rt3+7UbJTE{K0<UIDzW5BJuRDuR_S%*tv{ur
zyiNCZ$a}Mu;J>ykFN@tKej<?-3xlr^ntJ%_P^2v?Habrj^E|kLi8-fU=n5d-Y~pmG
zb~dxlitWwf1<1?`8hPR>IgeZVUahUwM!UEAU-EDK*(}GqTZ7L7-n_m0kVT=q{XD#+
zMS>(6G>aZ<Zyy6hG*(3C)v|JYC3g_LGIPrYTK6vb{<>-lHB?**RNznerUfU$QhtbI
zuzkZcDkrTolBe+t!<sy@r4xAqhQ*W@WQ$zmm&T=Hw6IRIuwjZmX=6==8$`9^6MTv)
ziP51yLgwb0pDo^8_yW*-bb%jCFHy@40zOP^r9PNhW?B!4X~j2vZq3&Ynu$78ev5l>
zX&0F^;P|RJk6vsOJbl85CL043nd{A@_4;kgq+8^7F1bChPu>yL@m|Owkh6j(#?s&W
zx2pRdaqc}st74`%5gpo{Qa=C7OdDf;QIb(Ox@zY-S+5JqxB1%Cu{J}39<Ia&oM`0U
zoa$_8=4c5;G+P@tXbz0fXYMSI?wn)4!>3m(_L1SAjR1WN(n5n&SwI#NXD{e0_#3j~
z@#Jzs#_&?T{i-3P5jOOaFf8s^AhK7`T<VN2%>^J!1&n~(n&{c>iI<B|;JBTlRNa7T
z?YSlDzLiPdkA_4Cf8V37?z{aGu%{1qP8<Janu9P^g_!~AUi0x7`Zh7{CdDVkJ;`Y=
zb}hhKaretHpjgqDhnfTN9Krax_qY2$n@}Z6TWu6aW=^wetoQ6PRm0y<FZ)b@UE9=y
zt7ke<D#B@B(OO;C<jmz?!t`F6xrk`v!9lOv!w0ZR@nnJ=9-azrAwe!Z$<1r~)@#DX
zW$IAr{k`j=y(os|uWv5In7Wo5A6OBZDTo`V@v<I97gxYYXrs%2X2(+g;0R#+C5_Uj
zM=c(fI4KSNhE>4kzV8adLLpd`pHsq7fR;>iIcm)+<tCX17+&4-&1;PxNN%3{?cUsU
zeYpz$ktHlF^2H5<u(Q<>k+YeCUo^^taXMzJ1TV^aziCwpq8|9lTJop-Ea3!Pdw^$y
zT``|*rCfde((F?Dg@#Q2)ULPLP`$xn(WPo3;p0m7e;ik+u`0>2dCR?R-7U@$>0RjH
z;>1U>QBFjCu)rgS1QFlq4LOa7$IJGU7aujG`<x<+-fO9C%vU)Dx+c%e;Ij24p|~7h
zF|~dx*Yyw+EF2z%_guf1F5|kNb>~mfW8sXW*TvIK3YMoFOCit&?@M}FqO5qQ(H`MW
z$5f(fi6w+s1|I|uD$%ok{I^RjUA<R<Coz*AwvsYfik=eCP=fG^Jh>m=+<k|eilRen
z-a321xUOL1o&p7hrvBc_cN!zNxQO4@<K#?R4jJ}?;XS9FZX~Qy%eoP|-4Y3SVp|(~
zTP8+gyj%Lz?iVAs8{@Q$_Io{<pwr^&PB=|7258vS-u^eZ3_aJd_aLTXAKlo}@7)iq
z!T~bjn;hQ-k*DmT^I7%ZoDt>pU`;76NI#8dVCe^kkFs<>QToZn&$vQsTu$S<B6Hs;
z9<DkgIW`u_4>eDsqlz=q=pCv^4$IJkGA5**Z}1#M-}<6sNP(FaKVo$(MPMv(H8ZDW
z;gIaVs4G?VrsG#0$T4B&Ex6X*5K)MT*!opT>afj;XjN6#U`4iu<QnWWN`c34Q$z1s
zKmOHlGH^<t9m^v)weR?7DF}8Hq%=^favCDv->3cqyjL`xoa%l-b}OH*68mFXEayyn
zD10e88247EXVb1`R<fc^trgJf66z|as_b=Lfo~-Gb9RfVCT<2#!V+;OJr(F_VDw(l
zVvK6h{GMEMGpH}7gh(ThFCHAth*FxyVv>AuTp#y(PYHW0jJJFo<6dao(4g4&l`esF
zZ>F2v{z2SOq8?E!C50(>PJ7m9N1b~h-_G&m<yV<X*U>yVL_1+}C(fpg<Tl5PGfEOQ
za4<r`!mpslwUTPxpMG$GbPL*8@sE5Md!zXIgrzO}Yd#|wh0%;Dy*5L<x(CYnK#A^F
z$G^3k_5-GVdZK7rL{zao5|#Wm5MKbnIk_CZL2Z2(R`i#PfVf<PD#}l*-rUlky!n<k
z@B$cy-}wG?yD@T=_cmjfHkB)M{rLoMBi8=G>Qf!0ILnuuZ@9ur(|f;yiM`5v(x_7q
zxD9PAH@UJH%DiysZNGki*5|J>Yj-4@TvhXMTH+iZ-ffi`U~_`fKwj=_xx&y@XhA=1
zwS(sEd$r82C-r&X<c8F!zfOvDi4>$0Gmi7lIO&@-M@mR3sd(vUz8@G=_k?PG2+bL)
zqJHtu(39-;M=Q(6d;+~JZ&|N9Nw1g1e|`u1H|=VAEiFR*0|HP@;yo(>X?g$}U92DG
zSO=`2{qjQqp&%<W<9H;ZcRuM~{Ue+BX%BKClaHe*C#1zMDrW%zN(qDM&$2Ymv&NrN
zLRT_BzYc#)G4914su=ZF{nZImoH`7qYx#ypFWZhI@74lae6a1lWfTP-B5}$yX>lLC
z`aVTf#etEFU!)!8Ly(v?JzsmYoYi$*kI5cbJ#?7EujnCmykG73;&K(Et6c`O{^e~o
zSIcg|NyLbjqT<)!Fi8}Uwk-`vOTrrBd?x{JivbSCzE^D^A`P?o1?pgCmH|nRxm%{@
zy&s<6_ZN_fOPR}Qr5l7%=z`NLv&Qv1VkbS=9DdFpp&5+#!!|;z<er2Uh~p5Lx7FDf
zTl4CNqi57pMv}<b4pDNjM-W{#F9|?uCWBH6D9y+&JsYOA>uDoQ3KY{(5|0V*!2*zi
zG>L@oxaX<L{wxvF^V^gM!_$21L}Yx8Q2hP(pyV}IUQ`%;mO!nOoHf2h90V+|W^M8K
zRN@9dQltR8+~TmMApO`3E2{CZ#$~Cqa`~uW;%()b{CbF!ScX?L`{8Re&AT$_9tM4w
z>Imt2Ld)Gt*+)={b90(BqE%PP3QwsM@XpC6k2;pyTsP=?C%}t~uxp5NLwJ(bi@Uie
zCG3pL*Of;~*C3uB$Q{ITNP;`h%L*TPJ&8%jm@mDgLoeTUeV3rastS!#l-$v(xJb;f
z!asmPQta?ER`HWW+UXJk{C^vM3TEdY3Z^lexL1#`1-6eAMDl05ps0|H|9lEXyfdZn
z+`J(S{V{AmIWCC)O#bO#_c3dON;|R+W)?zfSdz3qeMV~E$tyhz{!1}@L;hlb;)DXV
zb|}}60#=oD(?35ocnC*{^`W=(ox{Q~A|w&2{~*-`xf!VB#U;J6L4l52!1A275@Qhp
zk-)fZdu6UAPTSHL?S3~E_0J0l&B8b_zq%d?HYSXobIIu(^(GfIpUMu4V;djjRtN1}
zU1laMD&Cp%w5Nw?u~~)Xab|mUGtSb6iVtA*z3|F4?+@|z{XHRt*CI#f!&Iyj#GX3s
ziKE>oOEeC*rl1v$I>P&dIc^HdFOFpXqE{j2b__I@+vvVr&BWs1dN#DK`w3N%t24eS
z_mu{qrqhOzPp&n%iz{1J!8VF_{Ytu9VKyatgqQBjU%mz3$gxkY8p5T<iw(wRAQq{d
z&VO}N^N%in5sQ+M>yfFc%jAb?5|{W4qc2t=p4uSlFV=wlxe}-#DPI|Hg0~hee!_?i
zaQH>(dzr6N%+QNQ4_)aCC+>yw-NI3V^oD?^fwl@$#atN-gC0G&goS%I{Jb$!U?^lH
z9Fhq=JY4cs;is$mtv36+Ld0T7*Au1Kj5?2YQC2wy{k@(>VV+7(%08ETHH?956NM^)
zfCm+~^zI|wee5+IbVHnxnmq7=nKckw8^K2=<6CiT5uOZ_wVFgC7ARJ%30}UYPYubx
zO3dhP$su&}afc9kz}d@r&N=|`*32a8_{P=|PF?!NA<Hj+GE?b=J?4Nzvpzb(mpQx>
zNdeDLCv@2Xrg2T$2v(zAt34?~bS0Ib7omZnEd#p)?I}TXTxTGhN|d;#9G**b8V*}j
z-|F}2T>is-CL-lLDX1EDv~2L75u2UnSNi3A*op$KPdRE3I{HAL?_SRhU=ma#U$K^(
z2lS-hh0%*lG_sg>u_?dK>?Ye{*L!oHXE318fiKv*(x=QehkwaL*J%@Es6S-iVQ;ng
zQzg6~-HTzf&c&xb(g3?m=R}{vOd`h(*-^dyyJZWJ=dQpMq{~Z{8h*QCboYUxoL<T0
z<w(S@y3zo=(#p@W==L=Q6%|e;Ka&t1zm1B%t)m1S677#4QT@In_f|b2MDr>0XOUwx
zyS21k3pf%!TlHmg?Z{f0_#+XA+NjDmAI3SRQl!F1AAMhSl`Jk?LGkrb+@?@ee2W_&
zigch@ZXwR<AvK2Bt5QV!Dx)~6!t^tZO)nqzq|i3yV}@7XqYYKQJ4si2+_nC`rFYOD
z)f1{LyFO940897{9-Bx1yQT1Cv)tM}$&f3lP|$5{hMCN9_9&zfQ>5RuhUKbmN=Wkc
z;8(TlDVI&PA&r`br#6iXXI>M!lA6|py58l#1;wkmrVTv2<)42B?q=27c!V0a3!KO3
z+2k_=AyeqQP`S~bk!0%UkJ7ORr0s>qmmMf2CeE%b3UqzS3;7B8B{<32hp4x>!*Vgu
zbFECj9rNF<$M`qGn4#ZAl{&aeKWLWUTB>6x3-wP(Z;Y89$UNx83Nb2Ngx|36wHD#h
zDt(06kUEjVrDa*9Q0x85R)nb_0I$8{F5_bz(VH*9g<vqIp7dA#1gQ(B*As28IVcJ_
zfPUn6aO26&{oYmKKS~vD=d|yNUXFUf&NuR85Fl(|`El!)5TFB&9Z8fjQ+3L0Ls&U2
zO-4xbt)bSN(d9F_p_hNUV@?2ieb?`Y(Ue<IQ?I)Gcfw1&2F9@JVM*+R%tiHGMgU+j
z3OIQ1UMt#|P>z1R6kD@jSM@#=N8g;4eG#((FG~_4I)l_hO+g`1J@7ReLQP<+@gu|7
za1O1Rr{b38icAfG8u14mmT4{2Gt<$bH{)pNOAI;Mvu64!fQyYB#K5|;xIf>;HCfb}
z;_LW~^4{}M;<QB;7UKD>LM11YV1@OcS=3fRuGPmJF^kWz$8vA!x5XU;=(zmfitx#R
zazE8g%ZW~$ZK=3Z#QP|N^CBlgKGfJp+^Yr%c6`Sx${Hj@WmXNIiTYT;6c-OGkId%d
z<%;v?YuY-TJG{T@ZvU@hdNr<^cq_!!ikl|ixa&5fz=Zb0;flvE87P0>tCz*uHN8H2
z`fXMB6;<IGdKMdOd0c~7Uz=S_>dhX&poOk#Zt&8N->Fks&s9v<OHF)CPf{TNmB*=1
zd3s*>?S~o~IrOAmJ6ocezl?m#wie&QzjQv1k&X8VLt?`RFx=1@ifJms)N6|U&Tevw
z>o5*i1<c`H($5)&igndNZAdMLe=rl?^<E9j3trMz!H)@D>}cl>rAc@WDywQ*lU`Di
zOOSsrT?eYX6X@QEZTT2wKuiGSNK9j4msFz37cL{BGJ!>{0X#DR*uoWE`$Z28LnEKv
z#24oTXLk?GeFL{{p$-QRaj>~1LqVEK3c)4dQN69T%q@MSgSK9^#oDZ5H~s8o4U-zd
zZlhO;OUhhjqOlAKGc7Goa(VcDf5{%bxZ;=FuCBQ7OY;2m$DX3mrkjDiME=3|WS0Hm
zp`(SSn>@z(YBA8`OHPJ99Ov#BXFc~uf;<AgL`1MsHGS9Lf|tS4?M0|Ys-vGBk>K)o
zE#cYwqw*btlufUK-kT1*No$T$?y8E8k{>TL|FrifaW<7#mL#-%qu1^Ee7dNlytgaA
zHW%^Ld;o=s(OLV4uaM=4l&ZqJFz>%uCO-|15dWM*lPZ9vm#r*3&hy?vL`PsCL3BU{
zhh-oO==<Kl<uL^*w407Drhi5dhgQ)|qpYh>^i|rZiV12}hAjRAU+MF+f2il)o|pbu
zFCDs!&x~KYmu!KVPSfs2duVUwxbxnR6?cC+8ex-nBzZVqQXGz3&b{r`)+ZraBD2Hq
zLSq8UTLf)dz5wc*TFN0lKL0D*Yy_#dVJj<EtLUzj9rU2*5R-6lF63Lwg<DB=fQtuU
zIWxAPk^3cWr_nK5PUoz$i?bqDkQcN+lcm*)9E;0~8k|a(mHUt$>GX`2%zdTFqjeOz
z4cK{jLm^<60X%jwz4@otl+WLy|0&SR$#iKKOZ*6T0m&A&CEu2j!l8!WBVA}9aV4M$
z=7g+dRLiQ5&6ID?NsNC+N}$Zi9Nyxl#r~-n5$2~1N7DVP>w(s<IY(?Bne7g@tmjRj
zJ?E!y*VaK^b6)fp6_(%{SW~aJ%3b9(s7UA42~nr}llv0g>-F}5c+8O!Cf&ar=}QNf
zO-v<Y`_TkF;}xr{BI5N1j|{(x#h`acsF=a!m1IVp@K`^7T`O48QAsi|wrppxFGJ5d
zGW=p0)0-4}xQy3l70?(-k=gJ5F@u3Er=fl2eveyJB}LoHh{WtDCnSBQt@UvlN!wm9
zQ6lWUn`TgYd+o2wwI58HskX2g-#l|~2q~8wd_oW|tj?oKku;$^eJIUynME?CT94rI
zRKkf$c_dS0%U9f<&@geLfse{x+4p|4XEpt?u@cQ-rv3*@gZYjbQ;B@_l37Zho0(IP
z*LGtLI4USdb&@PRg#zy{gUJla7y`4^J5x;}I>fJdS!)xKDQ5q%k`f^I4@-sQ`}v1_
z;o7bpFB<N4XiZGQB&qcGWoSv3o|H>vE4%3`!+TobgE03}BKt|0_&ITz?^%(|9`}rT
z(!_Dudn^i>y<GIdY8Dv%tq2KG7WiZ2q|IjCJjw}_(pHfMf=Og3;JfsT2MsS;9;J`@
ze=DJdZ!(@`2ZvgCZ7ZlWu|!!rA9f#p=!dP9e7tC{tQi2gL4++(kHt~XnRYQwY;8}C
z1lF!VCTzovclCccRNk0{PJdz-81M84N9LNee^$aGFeG6kBp}A$`BGH=#o7}Edpq>r
zHnbX<RkvEj5^b0<Sli;lVOaEY1IsvGuN>Bd4an(V3Wut2zjFI|HgmRv`iz?d!fSwj
zQP7@VMejt$jdfEm(p!|t)A_Df2U_l3>E`-YLUXi>)r{FzTCI*ScXj>$8b=h(S4%K?
z(Cx16^MQk5cc29=fu*c;=jAQGs$s}ZtA@x`rZA0tUX{R9PFXFZiH8iR(l?w_2i?HV
zY4M7pZ%OuF3c2q^ICc0h4|%UA?&5Wn1UXeX)PYi|8x^f2p)?$M+N*S9iTU3+2UoAS
ze@mzZRNBc3y!p<hoy#jfbZ#^JN)(|g_jlra#r0GP;S7kVJncP973DQ#m!kkhn}O*O
zF?~LFfOTEPInmYR6XMsfTM8+o(b}CT8ZL2kg|+X$jUkMb^pfO=8i6PK;+&>}R);4~
z!_*tFY>CED9nSIE+vfJ;vgje|UF^M)6o9Q(B3aCzAdWjCa!5Vz)hkZLnuuoq#Su94
z5s{s9qakO-XYr1kqU@jUyLqsg_lY3^4p<-_ZbO$VW}xfnH<m+Ba*A!FHx-;sn=4Q{
ztM1iR#mN_%67)PmwH4PKy@$>ue;m)hTP{)#9HgR@)|fed20BN-sP%C32OIG1s9;h!
z<qIMb)XWK@sc2=$ZQQK1aBT1kUb{#@pqI}Rq&eh-w7VzqcB=f0TSUZls6`vx+&o72
z<)*k1e=_AO8<Aj=*=NK!wzfhqDXq1hPX@Nl@EU`)DQ`?nAHqq3hM#YdwiZ(JU)yIn
zzwO}SDCR1&kOV+-q#xUIA<fbMel<;mNma8}!;^9S5oF8}+)Q?QFrZ$0IbcPis7(`=
z29t*E!B57Sopb14;z^Nb?5qbmXSEu6;Vq5bjL=t4lU={A$#U*ibX4=g0{;4U)7o0@
zG!d88RZK+lz6)1$EQZq>_{HiPIRaHL;c<*9Is13>AD4F}+}wzWs9@|h2o*70OrZ~d
zS8&c$`w|30qr$C}8LU#pli~yZ47kSNXq}k$tS3{7!~8CdAnLK5mSLwo$<ulAvG!NP
z3T6-oW|7i|3y0fUNZ_E@5~JGEldS+H;G^V`w?78u;`8F&%^)x)hJUGU6PozpuILsW
zDaK*})Q#u*X*1um=<3x{{^ErmU{eFW#_XLj!q)sl$?%PC;WKkJ{@UL|%?nW<G$X+W
zmhpi4gZhQxCQ5TF{KvA~+=B_IBDy-3!U_zn)7Ri7+!O$_{5*$ju%2I}ndsj*(XT9P
zx5`?Npi}}#28ds;3=@6oqCsZQQXqF#xpUoNxgZA1ZO8!?-eA6SdM}Ljw#KHR>Aib!
z0(NzQ`PxN8Vg9PP#@z1$;Yjg-8Q{47nxFzqt8salp)jcoh@RB$0SSkNsP{6}gLmxu
zqi3BvNc|aya{L~RjpI@=2aBE>*-hb#of-4K<LBq{$nobJCfdoD%jbrdaLgy?3lQ6$
zSYr=0Jk23VFaW%ls^DeaY(wP`62Hr+%T#`X8|$pKpctdE%jNixCu!DTg+Oimy%zO1
zBBQ2PO^_LVE*ajSZhQxP2RW`1LzaqH@p}CkNySw^lTjg0#!kNxJk|b8bz0WV6f@`J
zP6g>ncJKWPWPw!b0LzBb1IwE7iPX(VOcw~2AB!fV*j~Vlc7^)8pWPT3@~KbD&bt4!
zr!HSu#i=q7F5WFKY@`gnaC87p?~zEqw=8%8&iG1G#@fwk=J=_?)}EOzFuQckDg$ty
zhc4-)%Sh{JG`8;$yxe)*zGTnkm8eTutFB19px`1mQ0PadbT4`S9{|EYJ-^^O;FdLX
zKT%`^<PcC7j4DnA@gZ$3JH7o$c^$f+4tMtYl#Zdncz=m$12;I<rO>2E07a`xtr`$D
zp9j|sAC}gkG6Km+OuJ2xG*S(<K`$C<9}$rA5dDcLPN5fN*S=X1&KTjA6y7@mU%XG4
z{FXBRG*}NNf_JN3aA@Kdj!)jq$<>!&RJb^33;$WFkMikWk8l2p;eAh7e)2;#j=W_a
zw=jnsoP)_(sGot>IXL$U?tBN^D$uM7-BBiNg~NwOv0u%hCR<RO*=>4iY>=n6-gTuH
zcpPt=x`*sAsJ$_GYTIXK9R4jLnao@$R(Qc{YZ9_n#@>B5VV%Xz<m8Q%l{U26O1mpW
zk=u|qM)~X#U_6SL^5T}D=+RMJOYo~eCu*u01uOX3kd7sHDA=<0KNy!X41N~1ghDD7
zr_qPIoq^b^ef_oJPO1!#Qt6=LAu%_orlFR$@{-V-1K$h22q@SpRK}n>0d_*DPC+^j
z)W9VYKGrEN568}w(OnU~YYLoC;NuDWF)KV=gU6>KJtS0KS6T}a6hsQhou{2y4vin<
zg;URxjHc_<TZODz<$SfuZ?1S|f3eGt|9F#!zPpWkWdWlOYKw4w8GU7iWHzIF3Z8mt
zA76iIjIX@9z>C=`t?7yWzR@j<M7~jYYFBD5%37Z2&J4lJ?$%S=7M>bg0JY8ee(KQs
z^-AB(C8#ghJ8~SUKrt$GJak*oX+`NF6mLW1R;ph}oC!4&1RH$@#j4^uf@F$Csa66=
zV1lE2HxH?#TTtpwpdz@Q_7y-%R1@Ox`j9kH-@s)^e@#lUNw2|aYbcTvKfL#1>MR<i
zx0E!2&UqzYh!X|{SR0Op??Lx0w9j}{6kCVtgixD?bOx$>gmfHaMDRBHH1x-`0`S&>
z-%FKSYQoLHJW5`HI}a&KOM(_5jdc<vp7u1S(4rtUb#h-^Mo&%SF%{;;^11OEt$#hs
z<eqU(+~2~__K=$5U&^rOt9<Qqll;3+d7kQ}ELMbWbst5;QaHK1Owt=sPwgr|O?OT~
zSFasUZHFlxTL-l*YD>x0-Qmg$J~36M$ERpc2#adz^`Z%K;c-4l5RpXYePXa0#3OwN
zik4Ee0?#Y8(5xx7QLw2+6|!Eyqe{(#fmSzAL_{I6&@1nkav?`eh9(aN#9Uz@C@GPm
z(Qh1-^QTc3w?8y5IuyMLHWvO}Hv*<n>IcB8C7+MO`Zf%*IR(ue-P6!Mtzd+trley~
zomMLQpgIHT1eg(^86v?X8r1xwDvaciwG}CZz0;oab;H~eq)|qxS`o&Z4Mglv%6(}C
z-4cw9Dl5H&=jvnp`hQvC=iXFBv`w*?k)HAV!Ke1|4}M>HWwg#}+6e26sk`h7P}@#D
zwarjEWCM-5ZP#Pl?Rsk4z*FODKy71@qih0zjWIZ>GuDL32E5jWEK|}^AGu;7EGvuh
zt|ervo}wE_w-qCdRfXmVR1%QF&{~A0l^(5DMwU6$Sei3+Mh+UfIpiv#_>YDlO@^h6
zhB}}c3-mgOge0b(X1G}pL9L{L1R`z;Y#O_?!HZQ;j0lN|>$ggMPl(b^f2l)fu?5~?
zj3rG{(n?CTUZGM?kTgW7McdO|_OxCFQb?Lmn^dY(LS<U1ObE$XNZZ@pK-@hzDzwiD
z<NGrXkJZT9mc)9Dfte9-zK2)0Vc$=U9of00$(K&9^6GPjqqip{XIFXRizEEv<A#&d
zBeaU7zs`PN<_*VFV`o8a6OGYi<2+uu^hnhWp4z5CZ6kNMHJ>etv5*(Sa{CO&XO1x5
z@|<51@)eLuq=vcR#i==nchnPT)S%HcG!la^ptB5%3kCCwEmpfL<h~sSevCm$$$R6}
z#>PmhLS8lo%I1K^i!G*)>ILJ2nujT;3S!zh0JtGVk0Ib2$b%0gOmx`fSv7Pp<LBFk
z(3mv5^zj~xr{*xW8?5zI>Gtb%DT%F8snlpR8dRDoY1LA#1S1x|s&v~z>vX8!*;KJL
z&@@Dli3(@Ogz*mC`u)r7J>6qU#>kAp3EaQ0;A7u>ja)ry%BYhKi9~v@obzKm^K8nI
zJB99R1^?=^O<o_b(Jqofja4>KmiP|fsmbLg6Ld#is@~{4HFl1tb_M0Xjc|4@tQ892
z$VqCJufFtk-tne~IMfxo3UjMU7E`sv8d3}OIy9<6Jq?}F_Np?!kTJW^Wx3U&=h`?j
zL_EfLAVElwB*i;VciCb08}N$lJJ4&N0x~=*#ZZbl3~2pkfsX*-<Ix>5c#%j6kqh>_
zXowI?&lCt<&?1AC*&ZfUL{n5;Iiio^Q0>wyR_NtQtCe78t0YN-O07=4UZ>Vfsn!!r
zB{W#P^Z0IPmLwG+sVe7QFnr(J=9x(ge46mSx6YAG2px4y-DG(356)1pj08pGb$vfC
z{`sO!`1-Rs-%XQGf1|>;Rt&A_dKd${&Su8DgQs@6kKb{Zs+~(ew;$AGo5;7D6wDJg
zU}k*jSwIQ2*FbqN+BXYP1m_*&`;-@7e3Hk%`8zyv?*~Yh9IH)F;Z00eEye_w^yL-D
z?Ae^Tg^b0OHtk*qM}bWe8fk+hoy2O2^A<;!o^-+1QBCl<l9W6!=?^4?VRwdX^E_*!
zueFgGL(<<v?^7LmErYsStf!%ZA*Qhci7^=Qn5t4_0o;%zbY@LCWNruMFF|Aubve#=
z=w=IavjtXHDkQcVBD!jodc8_oOQ?)kYz-<N%rboUc$@Fp)8^y<aT@7WC}fpAcAh;C
z7kuf}MLze{(~KOg(V-Xh)pP@9#$m~8h9{nB^Nrsa<zruTtTdYx#f5>$7C=q5c+OuI
z)V3lLxfwdg<^NXJi$HbTflan(LVP`pm)XW`-5Jx`zKW?zRD>;~jsX$2Jcd>hq_9YC
z5bGJQCw%M=KE~XFa@)c8A(E0>aN<~QWy~%(=9WFJwj(ccP{o=mleHSg6cm0H=TGB{
zRXRlrMcFs;AYKkKm$!pJGC?HSnBe2tC(Y^rnA8tPXhXVcKGx9sCNB(z+=oV~M2CG^
zG?wlLnr8x70gOj1*or_Gj9AoE0`Or&q$z^IAYw2oB$80Cl*%eS@**R18NTSDn$hd@
z=&lNhsZ*;|sa8`a>XxHZ!cF6bk9}@G;u5B-o}xX%-90eJR{5JB`6#(r#Z?-C^nA%H
zO)k@R6Ed-!k}>|qKXbI2DV?fa$1(Gbe$H?6XXv$<72UNwwcSF#l?y&y`tD0Q+`5**
z5lbW?EvndF0vV)v!l<oNPYt7^6{cp!G1V$_qw_p>w#To3^PlqgH$TfQQy*l!c8s)I
zqj1n^d-5Vf(u``7QMfi)ah_Ioo}NET*PX#>4>47+8Ch?c`IX<|zT-d7-pX;7vW!H^
zhDBuQ%K)7Ef{0q$>qTM7q1sv?(?vd;4<ue49(32ZUwqgb;w40DaW+(Zcs7Jag0Wx|
z(8ME&0aJ;?@FqrfhQtVoKqE1XH#+3m>!h~A$jB76>Ifdlb0N#2-BYrx2%oKCiXlyf
zMQ8Z*i-yrE?5!7coicTx!swd~f8`(i3Sa-m84lbsMb8zR_Wdl6`C_Gl*%zBV3@apG
zXEWpL&QrURt>+HRiW-J0n>!9_*Mg_ERZv@>($UvtDCZsfck9UZkMBsSV6zHIR;5<d
zX-L9oC1vl_2#0PR<M6&JM-Gj0=-4>ZV-=b<C9RF(ZH0WX$KqUzubn){FMs+geC}KS
zf|JW*Of+Wj7`!?P-@;{Wiom$Vq=dRuMX4r=NetL7NI}ExW%<<}ublf0ZaeYc&~c`p
zexe%cToTel?=?`?%EmxBjj*QkDSg1x;WU+!q#K7<;~bWhSGJGCdV|^g0BRCQ#WoEi
zPGSv4Z0MeP!HU7g?rGh?NW=5|YyXUe*{4a8aVqI3W6en>$7h%rnPId(!@kKwG-`ob
zQTU+vk!9iY#;Pz?hXdnq%N`|fzR1u0U%$$yzwkQyj!)Aw{;JK4OHkWxm5!Y>Gu~;Q
z+Lg?rc1S^2uV97qoyb#@KIce{4sn;Xf1*^A6kF7wmq0Hi%~M89h5chq4jmffro*G$
za?=P$PK+}%Q)9f|M3M%b<&>qll(P#dFTP+|oD)_$ka>ewPcwmo6Swo1KJZ=q#M@uv
zUwq=X_}nwk)0}Klq%FW=ttYXHwczQk9nE4`%Y2^3%s8v_XK;RwT4kCX7cxd;Leypk
z-O06$fl?1`I6@0xrCy`_ko4y{@c|%9_OKc1xN51~A(37ZLCusYu~j4ilb9eZX%r(S
zM3hEI#nY^(h<%-f#TRJqA0@3O<XMY_-W=!8K1K0L4=bLr+CHY52iP-ykbRT;*)uuC
z-jOkC)>5lLA}!9gPVswBeS^<F^#Zv|*mG->OtPUu_I8;We<$$Nwgc33aLsKSu=QK5
z@`f@q-cC@H3#Gry^dgR~S!+pL1(Vm%P8I1TG)<j7V+{@+n&9@ECb;wH7{`u{a`50N
z&Cw=BR$+Cq%G_d=XTD`Pb559DP?lDOcCHi}W*#+iyMlOz!Kw1pf+smC938!hpLqM9
zVzT}#{MI+WOyfX8ZdUu>%U`sw21M&}F4I<fbhJy+o28OYQy2ze6EPJX5{J}&b3pq;
z^@9{Npp@|%z%2r((Sd|fNCC}Y#<XvEP&QBorr*YbSjDE0I1@$L1`50(RaR1~jE;lV
zE{Um8X&Ah8NK#0e0#vXvg3BP!GG6OE$16+E!ixq&O1)AgO&ne`I$4|5UJsjAnVO!U
zI%>#VHdH#;E;HjBJhhF1+GZf_YJEk&t$Avue-5i$0A!_)Clw@5(Ow<tCRC|0Ssmfv
zo@wrQ(=>P9Hp%hh;~d#L%6M}GuT@qS6Hd=o`26RD^K-)ds$r!k^qj{9GFVIlJ(7YQ
z();%s<~xH@d*HQsg=ZHtUS5C)Z~ddR@;bl&^ye8lFh*flB5)bj@-qg;2c=e7&|k}N
z+M<#U`3=aLGGMF~>L9%w?rJ(NY7|I0J30i21|4cbNT04zj(!bX_9Wg*4aT^TP8V?-
zOys#KSQ9|4T2aPFfWl+c2dyO&XIWze=ru>upbnBYD{)_@eYdV|p(vK>_&Cjq#ZjOr
zc}eY1U3;O444oNr1q#CrJ+&+H)Yf^g?lj%w+kvNcsS{!?kPV3zBBV)zxC*XY!L<^S
zqRME}<iO+}j^A{MTMtii>#;o?JvheH*eI2>PA5w^zaTvERptDgGPmMc?h3u=)?sWJ
zjred4YT);)hax_E1yvuerx+Y*>B55IRk30z@O=GTn|p5hUglb>Jb&gn()|SmoeSDY
za%qZ*0AeY$OEZl@s0^M<O*QF9u7i=OzJpXbNuX;d4P;28EeLIxL8Lca-%*gzHRv<v
z%Fe8$LRwJ@=ffaBQ6fBcZPP@lRfJ}ppaN_(sFw6C?c@>{TmUJrMfjo>NGgMlwWGM;
zywQu!V7+WVQy3nI(k(T+-dJYFSI<*p1DW8C(><=n%y>8O)Gh~PvAAz*NM6Nvs?e*F
zYKX>e+P9Be-n@?!NA`2%;1tu-6Vw__@}4liD!h13`25q3rIym^K{xk77p=5iGKw{W
zi!02Jo4#WdYes2&|F!l_*0ukC;uL_7rhlrAlgo|=Z~HM;JO7Szb1x&)y*`cN(ww@;
zaW?@Bytc7Pl<N*=O+n}}DuNJ4tLSUHMe?oFp+<rX^whlcyPkc$HzGAebdcKi2giq%
z_k-h<wVos~Na`_8F*d4npcqjS3rQ-Z70*Zt;yosk=`Mfa>m@*LAc<3Ad0A$t*b2Ta
z<lP)!1SJ+@!KMi|HIM{qT_GOlJZmeia>2()|GVl9p4tXLO)la0wd1MicJXPhg<&!m
zR>%4~HIXXXOYz+*CTmiWF=obRxap?-+<J5$Hy@he(7_2NrYG=XSYCzsW#Q$QmF3mI
z8S7;-P>+y7I%Uj2@WQL~m9j-jS)q7AOCY|MUZN!}Bm_I9CEnm?s^#mF^k#54ma{4k
z-u^*;?@RxJe6@i#Tm4$v<vUq9ViF4NVv-PnNng(_sA-gvKMeVQ(w_+(N-xU}s1Bv8
zrKj8wf32jB^rsGngf5Aa<i-j%1(W!o>T3m?D#i#>C{_fUK$<FPs*E=vF^;qh*EV#{
z=tZwJ9>7FXviTg>D>yi|heP`&nI5Z>h^OnithBn!t*o%Hv_d=gB&1*rE&)<ODgssT
z){qrzDIz*t@6^FLqn9*u*{yuhYs>%K!BliTOSs+6QyaW9F%?{=f^Szby*g<!#>~WC
zj@)vPn~xme=9~6&@bDg*BQ=}~tv0;g5}tb2(^_?OJ3(Q!G!Rymek~^y<rN=`^8==S
zcwbp33m`VwM<viI5<w-5Gz9^%VW11^=tpfjh&MzmoubP~dVo7ld^cZy@?%tMO$ysy
zS3A#pkBCzEJTwzbsWuyGQ`QU|7<GuKiyH#4vQtWk;LNZhuMS0sI@D7hD3bS2tuReM
z052Qre`<V8FD0g;A-Xc6SgRxnG%CvUNWu6-kE*?p&$-dsQ@qic1h;7D&UJayvE#h|
zfwyq`;iHUHYau!`o@&LBrd_;r$lMCc-4&KvZO$*P^4eUR)2CKAeR_eVvt3%fj10w9
zEi^1zvuH)=MSZDZUxtA^hzzl-<bs02wG@fGK0LLJ(PwsQR`d<UQ-j1e@Qb5Jcbt9W
z(;Pl=fD^}$ar~yk?BBnKk&%=l7dl<x%(But<!P@#-UU|#=^!^`P*NH%c`p%QB6n*j
z(d+-*Yt+df8n@I7QjIuUQ>LB)=nSQOu?_)QA1sHGp77C@<!qG$d)~tFL#H@-{t4{9
zEYy;Q`??})(lQmuHAfP~I0@;ek%8Pc7y1>*8nH+j8nF^zO7<{_>SWj(VZfRgDzWvU
z#oD29uE=APG}`T%7#W%Xj5ZM}iBhk^{wc@gz8;AxML+d3>(m)9K0mEb>74Gduez7_
ze)sqBrkn1emm8ivmEnAj7$FfMu~19vG^?YG)%G#kRBqnmxc~N?+E|aY(xzj&%y(Lx
zJH5bbueW&R)m2Wvyu!J&EmqEZ+BtN@k*A)bF3?DD31qqN8<Xk<(PdeG<Pv5wyO*c7
z5m37lV?uX=$7Z%EQoBApwYnY0%{NH8<J@`c{XG1xyE$>^K}H*Oik{GJ3yW>#^>dC+
zTgf_*XQ1B1*~Q^Vt8{&mSlllk+K;S;yJV^w)5hqME<;h)P-R*AW+cPu$`G-)Wc^2v
zI~{UqF9E|3aSl6KkK2yFm)VuqXfFceOY6@0iWmwXxndG17Dl3}OF32*w`rhu>tjtV
z&^v<6cc`)Tfv~I!mf$BtqLeXe3kEI&d8BgMKq3Jyj8uX129tP9RQ^aruvSSc(5%4z
zy&1Bnz<P@_!P8-5(M%|)*<OS8*$(#}zK8cd^g+^OoM+Cg;uKOVq{fgM!I@yenyJt#
zl(`PrMIk+vklKVsrB1Up&e(`&azeR%Z_a(Ucd?BYl6F|}1xrgS%%19T>SV^N&o6TF
z>2sVr-(_jVvE*}#nnjx_t}Ya*(9K=H2B;U*2SrVA6kFq${zl`eU8#8@*V2A(_w&?h
zGKtL3aAfQr9{tfrdCQ|SWL=@xHoSH!r?cY8I?(M#W8r9kA~8}5g!v%isGc?8)~`1W
z|E_PAJ4h|UH9wSs_IqywcB)>W=FtZ^ks(K<!Oui>AY2>Q)tB!ULxIC+ojZ<y4`2M+
zf1*+w!&jFF^!^L?n=yFjF-h!1+PE!d0B)D=FKVAt*6*B_d^H)^?FB;>Wi7G~t!K!7
zPo!*Kgmly-U{ZtiQCQN2=+GEQj8Lrz6BXEZxW#$xkxCM*8`jj&<g%ShFxb^P`Fz29
z?s*UQ-SS<`uXgF=%Or`xU@2S>3oZ;KCP*APYe)!yCkDJx3Q;;<=yimpw&C=wU|y(_
zN}XytL9^)?8Fh^B$vAK%=l%x^w9y9FWp1&>{FyGVpKS5kvrC+Np~ackTFlR8wDO#`
zQM%QXZq4GV24{pU^ZlEjuBDE1!CAA*d1_aRDs}ty*siUa@%Hi5ELGZPlw0<_iTA$u
z5A%ILlW^{A!E4VbuI<Ttg3AS01a16*3{RA(MuI`GYAk@q*Ks^Zb-3##L!c)yQj6<Q
zKd{{#N=FAd*wDpy387*s!Eq>R^t$$x9Zplr6s((f7;oOmu|p4W^7Ln^9IE5#UUI)#
zYf$YVX>0)4p+dhgA#&<Z4GgJttZ|=`H4_RlG+EG}m(}ts%W$x?)|a%*6Ou4WB?+<4
zX8O^bkuW504b&6m&`8eSn^u{7MW~9<8B`uG0pk~>;Y(GDw&#5h{QyVy-p9$=RTRY-
zi_gOvtOT_YYXzSO9>J>MF=$K~y@HKqF_yrwa|DU=TnxPeRu?R@3xav2LHZS?ntEzA
z$LN$}Vqd|DeHphslA}M8A@wfZc9;269nQSa;?z@1oOx=I*I!s*{#=LE+_9VpD>X}}
znvhj2S$_sqF2P(J-r>88r*_2}{N^UAwy7&BvaY(=_2Q`&%Qf~i@8H1X_felv(u(8M
zb5Qi+BLi13sEZ9nV8c<wph&NMSMxPMLaCV+OHlo0fyPK`D2*L*Ea?X@WumucxMN7`
z%ZB^0^QNEv_CGnMr78x+uW4imhHlp3#F0l?Zk=Iy;YDP!+waQK@6d*a_dST_DH6M*
zK@}(#@B6^61A^_49-HyQqgSyTDi=)TmGh)B7^Q-N(M$jM8NnEXO+pkIkiv%)RYL@6
zC3Hla72)W?E@p3zzEp{n8oi>ElQoun&X8mkzV~fE#%S#XuPrQM1Hlk+(jUZEV?qq?
zB@XSIzCnyDX)9iEK<?w_N@#)@QIg2HOAMs3>ETR}Twm@c%%7?7`gy^ALowb{t9nKz
z93%TO_8jVQ@GYME-w)JsT)WHSsTQ*@wmJ3mGN+%O<J9x#ICs9yLc3rd=rn3{YAM~s
zk~@DvBUp#X#k-NGCYSl|pu)JLJht7*Q;Ux2nnJtAp_|^tawlhLCF9)5CPlBHRDX3Y
z098M-iXfzYfGdms5wP4qXtCco7;fPYMQP<#>ixhVKvgdw7Yz7x812&xN;h~SQ{M-J
zO~i)_t86C7h0TLV0a@FG@Hnk-%klT}m2dnjOb2{@<$@$7<cx)PIICr@6^^<Ylvqo`
zi42o<qZGLeJ5CLQTiI-olASkn!x$DRDk(B%I0X$rW|H{u;W;!9LbO(^!FU~x9Bn~G
zQL)kaR@Tn%UT_{Irb=(t1yFnFk5Q`~<m~Da#w564^A*5e%JHv~Ev)@fE|Un}1p0}K
zgz4z^7a}#HkEs!I6P^>V<Ps#)LkBp_^A<Klcw&MKeA^oq<}29w29+n3s&!N<j>cHd
z=t0NWp`1N$_T2ucLao4eGgi(oGyBW}uYYZx*S|K$tIwb3%<L+2E@iRVWVKmgg-F%e
zl{~detapfiDtZm*9=n&P7D1#iq^3q{C&}C@FTY^8^HeiLXioYgwOYc2zpx&o{m2ZB
z9-S&{L9E{eWi8l6<6rN~bqpjUbvWx3KPae2P%5LDlGEFNR<J6#A?rGoXy9@I?PEAS
z1w&SJY1EEz_~665_}a&*A8g{Jbx}>yITxgXB=S3KG=>QQ%-Sru?_W?xY0|H^nPI+~
zAMn&v6dP{_eMSrPr98sWyT%%yU{Xj@FqM#!qF~a2S3+W;Ru%S5IQAWAgEOo-AeULJ
zRLEx`&FXyjoBtTt{hVK3#+n4@!pKD#^odFYt}?AQs1el0(Tqg;T;+1CtUr+!hxn}@
z4D)*<6mjI0C<~Q%FfKf-2>=)7WIahDs8MojFlt#|tb|ndNu^>OsV%5A9nHOt(Zdr=
z-g}4>?*&ORviT14FD`QWYxBJL#gjbo*%x_ksm9!%5tgs&8oL%eHMtggY<h)Ib@%D1
z`A8HsYEUv>eQAN$PL49O*U(<n!8{}b+C-m+F`Sb28w26O^*+8$2C_Wb?|z26w#H_I
z*Rq4D{qCh+Br+M&8Z_oEWrP#Elf;@*7`PWKLXioA4>Xg~H*_d19!{OZ=NP)Z7Kiq~
zo%!Y0SUvv&$^J0;P<}6CO|a)P1x6~Ub#XF6)}WclfRomzc=%wdT-MV}U%F`RtxzLq
z+cHAakWLQBY4Hzi8M(zstqMtMFwTdXn+n!JVwKbgM`yY;M=~_8A-K!*`Uc(K&TK}S
zjq>jM{{$wTVWGW(F$vy<NDLq6Rwevjkua-E0J$}~<u>diUj%n99R1F&MA!K~AJ7Nv
zwUHwz5%3BVdLm)=HT+HB6ACt0tT7}u{>~_Q3=7+8F@?p>gPDW$Nu`o_YR#PH-WsFF
zM>%-gVfH^<<IR7j&3m4Cn&1C>-{L?1*VlM;%&=0cT-vMiy7Sa7zOHv@R#djdq5WFw
zsTnKue2>hpATmOh&GXeK8vLOjJ3ysT(9MU9LxxILWo)G~1Vn@1`3pE_Fi?N>3f}t&
zZY7ZUq54{=ykEe0AkcYDFh_|4j-ndCEnY|>0brBToh_4)B6)w2;)tvnKT%W-;P9Go
z^Rf5y&2Ro|{7M1Mc7H&{7#r$mi3^7|I>eW&k;rQ^B}=|9E-7o81f@lvDZ88zv+&a2
zWpdGJ6?twE%*xj`p-=TlDjs$8CnJJvIMfrv@qMe|hu(zBqFk7MmV@w??rec{Qr>po
zk7Mi%E1ec%Qi^yZ^b&^bqmFQ#`UrrgF+~p35aH@6O__ZGT9lz%#OKJhGx46~O*E<|
zfEQ(iszRZP^<Zt#zY`Q^1_bFM{?5o?G);{58z{yqc_MVhveLE8zXsLQO5>|JV`D3f
z9PTmo&J+B=-#JcGzRchKFQ243GfK}^STmY(-FRwS@gLdl=D{xGsa>)LmlmjWSz39C
ziSaj+R=b>h;S|q5J<f?+8k}ww;bdhnSgu1}nZrsB1N<|kt@;|$EYYkO^&xVLV52eQ
zTU%Qj;<yd**Cd|IeLvzdnzAL+HKbnHXhbs9!Hv|mfioV1IvnNPsU+ksr&&3`;Uf?8
z!pUE!Uaz61+vjzt=BRa;N=W}iHKcxJjVq>BYgzIGUR$4F8~-C*K*(M5eTT{@X21d-
zj?^T6c9I4|XLVuB%Ge-)X$<Te$vM2IhjSGS33wauSY(Ly;7M$Se9j{61`ogK$4Qfe
ztaMheCJoWOn10<-N@A}BkU<1Bv7r*prEMkdStk^^;`8Wp>IdU=zLbTEe_wXYeH`GI
zGAfL+P8w5lS4Mbcz0L;kO9tiB@ZEgu)|x>YYhqMqQ^*apI~A6CRmPX99GjV?)iO*~
z@8ynTukp#3ze4rU@lZ0k?mV@P`j2e)tmp*_y1QFXO;B~1X2H4TFEKuP3sx$4Y4e#+
zzRt|v6O2p>i#<j1(B&$@ZJ0x*QBuPXy95tWDnh2Imw1FUwCsw?P;G6ku5L_2Lx|Hi
z9u74q>0_%&2Kz55kD3U*a=c1|H$Vx_rC?*fP8f@IqCzk4aA5D-Sy(>F((JQT_PJny
zBEd6Lt;5#C#cR}HEF@{TP{hU>U?1K5+QXqy&U<)DL5Cu;VS?|FbW)kNVFZcF9Fhzk
zB%!wElSmx4fiP=Pj_=E<SE1(<D&7XJnfe%|#$zc4U9xDW#)EhN7}e?_TKOu8q!c<J
z372V^(UQUuNY5sbKA<HvFtq@_-U&sa<ata(`%@`VgD%$URMt{)yeZ3yq48kiy~}F^
zvsiERC7+J~euWM^C`{aGPQZBWHz~@`6c;<kiIP=8Y8F<;`0RgL=7}d3m}(xz6yJ!Q
zYqJY@YHY$(X}f?;*8-*NdOfw6jy7{vTW6VF{u(nA599n9mKM(O`0q4$|MwrFK332v
z%6eSMThk$MjEwl0J`8tDQH?|G8VS5U4u+SneZMi`OVE_4#xanK4PYj*>(*Dk5WElk
zI*E~st%SOdl}I_UaSpX5Xdap+qCR#_hX(3J`%@8R%hEf`u_N#28()7NzwD9GcKB!q
zY8_OAoSCGGNd%h+Hi^m_vB{$G=4pm#cs6#f0$JDhg(DeKR1vwLYCAj(KcpsN((t`a
z(l@0F{-TMHsFHeUTH)p?htCaE3>4sUk1Lf3N;30mO1`Ard&dvaXxvOITMp@`4h`&!
z>2IZA@EY{i`cYa9k_IHzuubYAFO*&nd=|RwG6ZTe5ETv}6(z_+jV*$Ygs97uqMAl1
z`st+!plV`wJdUN65nxE!<KGHv%y*2Del%!f<7>}B;TvB~_>Uhyi<LG_Nl9$|vh?Nc
z<*97|)PxO=RLO>Cr8ZV$yDV32H|VKddV9R&R3|K_=f6Rxcb0?()^>UE*_Zk97Z;g6
zn2^*Jo6z@}(+dxtmi4y5Y$QH35%3-#XF%0Qfb$+zk5?Z7Py3OZ_W}I0|E&FSEbp~n
zpX)z-m{E<^1tj%YNUw$0>1c2_PpV+jPy@n*lqTdl28}YbDh3sUm;|RiMrsE+eB|A<
z76fA&*wiAvj*5p$WcWvrNfJYnN}m{OE|l($HMKBG6&nYU>QFWt`pUR*vY<r6KAR+_
zQ2i9NtYek3;5MY<HiaY!k=;Z?8BK(CCq)VaPVj0GTkR79lU9R#PPp^dA7-R^EA4Cv
z#14(Q30}?M|6&5YCU%8Q6>LpN8^PPuG(ssLb75Mg=s})qh};S&+~ASNXXhbvN>+qN
zUWA%i;h>0rlNaF;{x4*O#@`28QtqVx`@DR=6EY|CoP^IR;`?&Q;(B{IB%?}Ug@602
zr<h$?0IBl&(mXxwAjYhbuv(w>AY0_A$p(39S0AZu4%lSPJ@*>$)Yi|tWrN!Qg0HUN
zs|&n*=J!IHq?WYO<%^$rj+b9-F?}$BG~7kk%xd<v{YxbajorrxRz84H|5-Io80Y}l
ze2m;;%IX;gK*jm^vsed0V>C9jUhl%Fmvf<5oYVubr41ozLS;N$c(xM2jf5eIjIury
z0Imc#OiEsKIk^9wOi$fIXRb<GohC23WLiKqfC&*;tO1i~zy2j<WH2NdUJ_YL+q_@^
z6Mt8B2V=+7Nckv<xaE9mkRb}@Gcj6=)Q>dQ`I1T?w;Bukno6dYZc#yf1=M2F8e$rx
z)r2$~rFC98as2xjAHSE?Yy}k??@yt`;L93Xf8WHLcp{i8m^vg4C24?ZgqmmJgSt!B
zV*qAFFq<iy;#4U#Odu3q$z2dnC_H`hm=f^HpNF3*t^}zFjCl!eMR>0(BR?O=<<5mi
z;f34}{?7RzEw5G2^pS*L`>k_4`RuFMR3J%s`TWyROZzw8;d$`u##7srOV+kTY}?H{
zySBPd$wWpwf0;A$U!a;!#B$*hzy0ga)9N}#ry_T0xH7J~R-r=!FRfo+D`^})09Zfb
z@_uMIen9)^gJIb{jSYno;7Y|@uZnYucRDy}Gbr-#NNPfDT&RpH)e)$SL3J|L#L_|P
z8qg)wbNcPcfr$WK!X5tTf%igB=qxEtyW|uBB&}dl2~C5N@o$GitRbFOB%}6a!7tFM
z??-H9%_y?=#h6HKh@D6yLB*pYm^1)bS#L8oZhi#4Y856Ygti!R64WQ)4S5mdfU0?e
zr8A2hJMu2}&OAuFw;Jbv1E38=JPk^S(gL^%nh+*1>X3}YsJIzYQs)Dp^*WH}C9n-Z
ztBl0F4>zL{gu-zS;M9-gTsZat+$270A0P{-aedkcKOeb_ePE0L>O2%GVSVxcPL%y8
zQoi*0Wj^_-=TNgsHK}uU@g>f#yh3ei@9yELZ8KhMTHRw)9nD?h`>B#s-BV}o>{n<u
z4^gk~qsJoc)wBHeZ`AqG$8Mpw3Y|g+_1}^^6N~u$>4TD#JCuH^D$e_U)K<=QmfcY8
zcT$HtqozOFqW!9W*^JZB0c2=Uz8lh_w1DPxpnW7gFg+mEFz>o5q25zSFoEf>BO0y@
z@h!ASaL!S$?BkZ3eu$@E{8fZ1#)gX;1+}3oYSTcL4d61UuZd`%b5#z>qYUegtm%dl
zBRwTVfka6nY#_Qy8r4P8Sg^NYq{^oK%$iCyD2a?2p;A@aYRJ^$3X9~PUMHiSL-Bft
zV}~B)(4p_5)$1Z+qr};ekY`y(i_xQ+SX-=sX()Cq0$VHr_)IB!(CY|Urno#%V$=-}
z>4tT=I9Fm!tc%LpF*ffNCt-*`bcVyeG#YNOq52Uf8BEFfW6)`pGALK+kJ_48pEZQ2
z@yLmkS6=P#vH$uE1xr-0V0t|B`j;4)nh9kJN?(lY%TwEk0?9QnbCF%@`*|7F0tKyh
zNG5BXp8FKX_k9p6DV0i>S6_aWPkf@mqwhS-nNER=Cu(`(>l$gISd%H0ZR5lFwZvR4
zBeZg+bhw*33~n+QFVa|dlCo16y-AG|iUPDJNJmN9N-Y=adxRucOc$sGR=+dg+k)#2
zT&BDmk`i}ujLQUt*J|BhwcyzJ1FUw=^1@4>!<b+s<6WEzNMda(*4?ZP1#mG#T{y$Q
zVM^B8HOd9uPx>`BS<8{LiX;+fCNV0rHcA%7`kF}$)kbJaj8=nmP)~(kVR1f<e2@xR
zZa8%0%^W}SewN!s0JV##=4QYiDBGeIq#EjI$rz+#kc<dvP0<3fOv&0p)>Vp(NXn%@
zKV15P>9As2>`?o%LmIo@Wu?ITDC`*>$%d;4r2|(9$jT5+#4Bn;*VaaR#B$EK0QMa>
ztghz#n}7Edt?VqRRYs~4Jp1~m>9Wf7^ob}dzZ-dK7lWE^GIG0$k*b{nwGHyrHlr<7
zjwX#3xZVP<&wiRC`yQnz3hMQOZ+zu>rp9aBe$yV#oyw!AWK^q_Ff!xf)WMoM8KIWe
z?|v$g%Qid!A4t3Xi>f^PBBRwaU{91&3gM3IG2VugPeQRg??QJ4(nX~@W@yeRW(BAy
zq=ZqQIYl~9v|={x!%U;8X&6mP0!_j74BCUNowKr#QLo$u@<j^G1Gp3ek;f!~G%Yh(
z33H^8nqm5c+TbJFH(Ozt_$&kBtqk>|B7<M7Ac^(?%~Zm3QVATk)SGbeC*gAv8zQ%!
zK#tJEl4%NwMJhFn9cO0dQC7MkEz>yV(WmN`ipsGdSQ3&=Rj_p>8HIET(g{c#VL~A5
z#z?Ib%#~dcr%s$kVSs_PpbpEu`?UlA(V?P$8kEiO5?>LC4dw72HKE&V{IDz)G14E<
zYBU0;bISPsP;32{|NJRtmrjw|oUz&rXBNN3*_G#+x%t*jfZDa>sclqNX<LD9cl&;>
z=g>Y#jvVQfWA*GwPS1algVXPzlP!`aT|W2eXPF#nGCoyj?o1BOgcHeKptrWBfl$`U
z)^ga&(JF>g(n0#Ob}T#4F$ScFKK&tzTb2?^;($Wvb(C}&ddr^L9vD9uL=J5|073yU
z9{{E{7F^&H8!oWCZD`HI$~i}Sd6{0mLeDMH$rtHn=RrKVW`Tg3M<7ee=0RlK=R*?R
z<#XxaZgem=Iz;{J*NA11M)gOhhPY~y2Dhk^AZ(HV#KwghAI6{t(kf^YRC05HObmr2
zK&)e7=wx8T$JDJHjncK%m7&onsesfJJ1SK6KxG=Lqe^O^Sb?k!omD8hq1Nf6iOp~!
zw$z*(!tbE|0T^F$6$dvn?We$ln}Usg6WR~yB1I=oeRv&2ZEILqqG%!1Cx!7nmjCd}
z&+*E+SE*KVYIcm(-Wgsx`$Z-WAAyP;8aB8VJhhFIZ`YG4-yGc|*?j7`!=NUc)plP8
z*)I_}I@6;%U1#phlQgP(8Ec-Poh{PK7Wu^QKg|c<cMpwG%ksPqoads6i7yGceZJZS
zG>##9N7+H`Yqpimg8r!(Nt{uZdq8gsSHD;3gPM`ZG0Q#L6FMu9&I1joj0%$nptY=2
zMuPcCcMP;E^je1YJe)h_S)FxsR#s@W7U}dBD0GR!_fXBEl7*nu@e)V5Y^-x7U}Fjz
z(nG=9z;Ba$VE9scADDgwQjSpR8eao3gAoN28yr*!#wRfi4F<`Ar2SFX`0%8)&^S;6
zi1$?Ks*rmNxg+l=UM$t|sJ;=mrN{)ImpXeIrHFt;p(02POcT;+C7luKlOam=8RR`^
zFGJo9gk0w%-_Z}v#P-S2gYNJ^xFzf-_0n&;UUbcB;0U@{x9ry`<J5wQr2!Miip@~8
z7r9MT>Tuu|%kTX98J>Fi6{>Y5@gqRabEiK=b8?z=bYw`jYB%xJw&1<6Jwx!@)g-uD
zP}`sl;APTbQP4_<+GK;*XFp3?86}Z%yj^B~?sY!-sXFg@^bYDh$Liu>pxpO6qr=_K
zNX8wC()zWvs72PF&MJ*vhGd1LuW3J+qg-o_Cw+pyF9xGsE?4rlkhP(;1XFuq&!lkf
zd`OX6OTz3Km_O}Un$1{UTBg@oq{x<Vc?(q+R4cF`^+@D(7-@u0PfMSH$YZlH6-@|4
z-4rCze&-bv#VO5Dca#B7tsfmoNMS=*7stiQbw#SmKwL7`+)VuJI2fN)V{gNS4qy)<
zbCCN$(Dg-%O~+`rGK?hHiqIH`+T=i%-St9h>0D@#Py^Ex(kUg~1C42@kA!*H?y9mn
z2i+DFSsa}zLSshai6Ny-Iu{r|EB#V}`jED3)RMytxs3JG&l0$FP>hrQP+aI5Ym}}s
zaVkcl%1RZE+?nwCPcQJPFFj4A-bQ?dYBI|6r+*bwvy2=#fLA|IGTvx9xg8>rR}E@A
zprE@hp?1^cTiHaDU<<~sas@&2@@=CXZ0>mV?8iB}{|_OWlB7Led-VlA|D`%_d*B$I
zuA^9HK&16U${q1%;&edgi2StjAe0^l@rH_CC{UoXmWn?#V6Q6S;z5vVAc)!~R7W7K
z2}Xt994uQ{s4JD5KvQ8MgB4Yl6qbEKn-00{LaHQ;AXLyI2MwcCW#WrCgleeal*Riv
zd0+%mtE6f0@YEy%!Z5h`lFz0?^58=?EgA5Zj0tiUl1c!!RM4s-k>(N7Pzg<gG-iu7
zP-SdQBG3mqOaWvfbTtgodY_V;DzBaYCTI<-O{&QRjrs_Uks6K3gvKN^XB=vyN=qWx
z5keX|3AOP6ux=HWPAQ$m5Vg51lmq%o9!hX_Er-(kjqQPJXkQJu%qk@|rhM5<h&O<k
zyNeI$z538hz(jx6enYABwg{=I#!;(-#}l4@vdwRO{7GzO1)sx6b%NLDKSNjNm^pNN
zP@B0Tr*vmTBISyXT34v4?Tmu%?&hg&bv@~n(mA!jsq>%Y;GXwT<QYlY;hATiWMrhl
z9XHQ#u2bMU0~aXo2P0Hr%7C@bQ5OhFqHE!O;Aa|DSfgZ-FFOg=VvHrJNSH2YN|-DV
zC^AcT4wf?L=8nQT8heG6mSM36wf)fCBP@5Iv0v%76I`zjUdTx(w1@Et>T|pgT!n#a
zl>#Y7g|tEhu|U+dMoD86AxRXUfF^=k4fP>A(1<gGnf-xMFaxP4Q@+0hwIrsT@!3`a
zpoQqrV2tlajhY1DE63WLQ@nwk&>_u9an9njpi|6}yCOu1u7b^)Br6ltW~ZswCKwxU
z(ipc?r<IALFntqLMxZ`wLJFFD&YgtLypZ=oq^1$jd^v$K<T{~43NcRUQ($Ds+(&fK
zT<KFoqRUySQ0ygYj2r1o&|5Qz{Jlmuj#yxGUfF*v;nb-vAN$pB;*vRxhmmv-XP3Xm
zT<b}uZ@LX{24V|uES}mmRQK3zJT*2@=eyLMKq;v2t<pYol5<O+WoGnk^olNG7WvxO
zzs}gm+nAghVeWJhn+WCPrynSHFs#SMK)H5^-qAn3O9`J?J=fAv-3Un~q1H&KHchAv
zc_lBD_5yTUO1G8K&D&(!p-T^MgrrfU?nmh*b-IaVUkxVqMz(rS=q)LEI}MWyIT&a0
zK1ZF2^bE(q#6S?KViYRXz+FocNG+sBs92>Ei}~IPKG6{I#IdXL8n@*)_5sbj4pTj1
zdKn3@B!Pn`F=~@Etl!3T)EbX98g$7@72%r0<UpY~8=42X2t6S4kQW9|B>ZZ%^vEKk
zOOLa(+#HfMneR+9lI)?Dj?!AN_zA<IDMM~N&O<&6zGbL29b|#o?~2ek=-X9zSu4{%
z9C*i@m5HKM0Zx2K*&`vjAIeKWDKXklKh?)tn~}bFWnq*gru;$YQ<*+!SncKf%5Qv=
zo<EHhrJl~P(tCyTi(g{;@NrC9SqId14^M5~R91J?30~F#wd=@Jy8_6rC&QvikNQl5
zm2=NhwNs2Vj?gO>$?`LN?h8-w_P4x^=6H>z*?g_H=a7Kpny77HILBJw$4DU|L?V?+
zO0}Mn)+}O8<e4eGm4fA^jMddP-K;~eSS53-6w<*-fk=wjDrt2D$qjk8%knuJKxss%
zHHFC;=(HePf!?Z6WC=x43)F+i&=)M~9g2%YVS_O>j5pXyNJDKBIAp1Ts)cG2=n*cC
zSE-F>kn7L%4^mJWL~#Aungq}yjh)C8G|q*RXkQ-5reWyb8o`?2;hCCHSeHsX#|sJ5
z849^VPa#wAY7kpRjqi7x5y8Y3t0Xn3RB@FGdDBvxFysxP*Ho6&BW+lDU77ugkaj#a
zw`c~20!ch+QxF&DQVWYK6kkaHd?-8N(x-I{yrN1PNZH*iN!eN|qn2IrSZfQw7wd5v
zI;(01z8Ygwp)BxU|Lc=1w@;BKo@z2d=Fai@>>n_;_b{f>+$K=F7L<<l>T|L)JholU
zQ`;h__02`9U20P`<`<qIN$Vtb6t7DxuRhNcUopJ%p?A<2Gc3;+F<Ns#Sy%IMOlsJ*
zs#MX49YULg*~Mx?rJ7*V;B8kFj?QXEyVaxJYO~r|pxs-f@XI*q;IxRbfJLN+F%1NZ
zs6`#P+>y5nL<($@QhCl&pM;s?Fm)I@U7^!bx@{rtC8(1qMIopps4Myd`N4p=3f=^Y
zMH0X*O@yius)<HDxDcsf6>kMeBm$e3RqlR-fgSR7i1dYFdPgZoL@7s<2#M98CSoN<
zi;DF^5{bN8jYapE8akCg`A`kOMwpaWtNo^hil8>ZRBD*CiK*79OiWPUGseh%%lHvb
zWlCu~paZXe9Ts2jQFJ<(Ji}&!&4kn?q^TjTBvdPw#0p7jNUIiu#W_zA6-Mwn6xk2l
z#=^cI7;JlVAZQt}tt9de$Zf1u3{j;qB2?;@-}s$xac1rXs#QqL7%FW}p8YKvlhdRV
z<3rkaZzP`DrLJq;ls<T}dqC~#d1_l}8B09L%t)7{NSIst0yE?9K-7YCIkWIBp7_QX
zZ@uq6@}_5b*?|<1_!%XMhLX<m?r2R)rCOm<Nl7XR#tP1Rx~(p&t1GOwmS}b7=oSm)
zewAEX6xt45Hj`qdhDZ$|MW`UywN6@I@wvxYkINjrj%V?#!9E#OKc){0GdDqdS!m6J
z>qzi=@PR<)DNu2E7litaHJGG<I71TC!8C=64X#R63u(}CL=89_hwh8Wu~R|akP`0D
zaKV7oRZheY^Vb47H&9GUP*V~sR1BmNK+Tq?b`m06XT!F54@G3#7aHazm85U9j9A15
zwMwbfu(c7Akx^<BP3lv^_+gkh5Qg!6rkwkxuzVh}BB$3|CGRfayUX~zi}gxMg{rBO
z$_N!|RMHx?T8(NoC9NbRsU@u?7)cQCLzAQMAs~w;G^NzFCkRM-1}<ilx^#YM-}yk3
z@e&GcX$3~6ET8<$i@f;Sb5tt@_$sENoIL$;Dx(c*d-iT1Qrk^Dwe_#-ogJx?-Of|n
zB&e0|HR0?@Cxk3pWp?Qgm>7Rc^p@=L;+aojjPj-vZ>C;P$%_t&IP%=#^E@h$TGBMd
z+7xRNObUvl*Xb}fzr^zD60PnmootpumvO96Xd6#~Awi^qP{G9KK9KdrBBjr98{{Jr
zqLy6AyB?O6g_A;MLaB~HeN33V307wz?*s`X=Pjxhe1a#(m@u&|){vy5;L-qU74TId
zH4^4hB}8m4l3GpKJcyGBW!h&h=*$mT@=?^kRLZpy2VO%nL1TSQqU%!<RYej5sRmWv
zJQyZ~zfD1NiC`Ae(Sk6L?j;Fb*QhV9Nd;4>VyiWhW&pL?gr&J(89Crdn+E4Rb5Ftf
z=asDE$g>RZa&R8;22mk*Eqd-e%f5?HU^OK%O=_!SRP8twJ4Tu`saBda>J^&J3bneW
zDi&1}=6Q?Yi%@phH3E;1?)JXqH%0|s+`vc&Rcu8WpGo=57hmD&=bxfpQ@pQ`R8n3$
z^E+U>jPAb!#a%E1y4!hb>w}tZ65f(cO;V{`15mq4p4yfM^~*t*g36u>-Ls1<u6&iT
zkvCB|kC-K%KmF?zMT^OiqqN%#7%L>UPQ5zGNOKRhnjy<F7MB-T>CDpZtkBI`bn|(-
z#VlQamclOwWnYtEq>7aqM$(X8Ua*Z?b{8cQD0F}rA_HLp^@__q(({OcZUyF^6Vhqe
zcLz-Fhn1TH56cx{I2s=S4iVG^{WxPRVj8HXq^Xi7fj&}6qVQqtOqOaJzC!2}Cegw$
z^7f1$5Om8Lk{BIygG;7=5|uklpnYiBFer7`qIrpp@<>VP5Fh7QO)B^_&?X9$3<=<-
z7HjK44AO+6o=Gd1T8*U9Bps_$8&4QL2$M&Y>ZpSCv`@k8lhErz*2(c%hARrZ8<ZGC
zY>31p#d}YoUGidyR`vpd!<s4;J5I$+Q#Di6k_oESF)C?|daXvSmW0}Bt%@}U3WF~~
zRHsqnubj%zC~k^`ed#@<HD&L?l&?Q~im!g_t5oY<oHx{}lboJ?oWd_Kb@c8bf%$7_
zX1rbGTUqbDvf*?z*^ZX%W<(-)oTqk$?Y)vqmYRa<o)Nld7g=3>k!o`q@4L(|pJ!$H
zSGeuKA#U0?L6W4*F0b;+VnVB3r`65zz6f#~b_GlqM+>Jtyf0!wImMdDehmXa{U}WP
z?Ei8LgPe{;>b<VftO`6fiCtAK6qiM>&6d(xhV$PNDpSgyL&Dyhh4%lSz5fojB+K*r
zu+Q(D%)IV-Q{J_oHsgDCXV%Ovu(MczyAVJCToM2oB(+39qLD~Rl!;)7gcuSjPzps5
z0g)6*NdPG<$Xy6n5Wrv^W@l!1$Mkg1OuK1c-aT)x%gpoBALpdI?^ShGcU5<FLo@NZ
zURB+?@7}zb-~5@c*-`Q_fi+(!u`Mn)zA8Yxu1F)I1X@A#9)(n;DEHqJtdX1zdx%0X
z9|zfx^AUSeNXiP)yQxI)L;>8amMy6U-ddq@D24CA+sziiFo`0WH`P?*E65xls*(#R
z7Gt|UltwKQMM%=Zc6vlJU0U;&_EBZ#tawc&FxYZj|Gr_g596^T9ebZB4>*<ifvVJ;
zZY)Ner^r}EHN|PlFuO)yFZ&yq80=n;#4OS_N9e@Mw4)i?tsdP@n{KyDD`{cln8;Wn
z<HLDe=G82sp3|12w7QN{rxIR$`zGJ};fu7|`#6PGtIO)fcNmXuu=vnZV5QcAe#Cfc
z?<%RfFSbSZBFy;CEybIUem78)I|_EaljuKHMdF;!a+l%iD&xIvhIz`*f9|LG%fIw<
zeCCNGbRvt0!^xN(yU&%ID?I=51-}2z4c@xA$Azm~Y;0~Y&ilksM7x!c#0kcl2^xqC
zTrwMio~2CAs$%X;ZOvT>p9B4~25v4>vJ}inkbTdVUwcdF%t5;gOOFa^Kj<7Y!omPA
zGs-;e-6mbEZ4t!~SwUkhO(0_nNswA)kq`KlVk;Vjt!iFG@dalKR}a_>GzAmfd4pW5
z;p|~N#iXd%OyT!0T11>yGdb%yYz3t(FTT_uQ45K4j7CVDU^;E0UYBIr(p?Z{PAH3~
zl&B@7L%8}wVQ<Yb9tqjdL7L-It#raAKhdB;;40!kvszYc5ZY_xWpXIajY#udhFoF?
z#mY3Xoh32zB(gxuF3^hSXtjDwb!M5HnPIBeChEnsl9)JDt(`V>I`G2Fm-+6?&m-2)
zVv}T+we9b-v;QNGo%=jQCV-l`4<?a^TvvAiYH|l=lXoV50GB{$zn2FoF!`fnX6H`|
zhqlI;Bmp<(fAVL4g+KA^Pm;#))i*K*dpYW0wwJIx+vUjIQU3IoKgqxP&!ouIh#UL6
zy#B^bzV(B5c<!YuynS(vwe@|*X+{)Vl9mw1!Lg#2z*2oL&DbVvZFvxEtR1C9ND5tP
z?%DBKUoc(Rz64XpVDVv?nuqy^g<&7Ek)QKqgf`I+cd$tdV=YNYhH^z)7&0zfp?xf9
z9xnC^0}_EWw2C30um}V$1D^`Px$$zKQurRg%>)bZD7fX;T#YJ6-T;arsNDmbctUK3
z|4P+(FpC|k5hN{4w?jN_Y0nAWqp<Xl(CT@>y78K@dqv2`kPZ}03&+pG3SKH(4ykgu
zL`+q|h3`F=F~>K@xnD~8o;YmL`wX)^hI-k@1Y$ALrX3xj8=s)Hu|T^uMYlc0RCkW4
z-W2UPW`A#k8!H=Z>|VvTws6j1w8O^sD{Sw+&XIG^Agw5zI_6_azLooBTlCT7sokAe
zUnppmZflBeG|gZ5<$r|}OONrjw?_0c&#6kR-yCk_aDK<Z<(x#6saRR;#GG1M=E;*s
z`RQjqNz_SMAMNwb#Z|uh@@2mJ{8e6g{Teq`HW`kFL`jQoC!&>@paqnscUTcPQko<l
z7V0cz+2V3P`^xuV)bST?djY1GJ;-&pV7TMWD3!oR3wQ3g9b<^g$|*|<%7w3nTCw<<
zTBx@2u+=POWTu+2;U+htg~?cGOG8VGts>(hD?SCi2n!DL#JFyoW=eeb*i*c9@#$2#
zT8wS^<&DHhCnD;4QG9z@SvV)mEE>c*RxZKHD@ryjK+W^X)D`}Db%J66ZZ&dsS%OOA
z11rhewY-`loy%{FZFuf6%78(-MSuJ@!_<+bj%hi;V&^D}Gs=l07Grl<Xy@pjaQ?~`
z@yt9#BR03*;n?XXh&sJPDz%RyPmSAaMeo1S<oy7(`@~bbD^T<IQQe*)PP_c`f9@~Q
z?wsSb%Oj%5`q0~483vk&wL%;zaZ7M5*uk)|tGvCXwBN~@N|c2e!|{b#P9B}-U;D+!
z__zL4%0_>Ww=S;o?Uyg}-5*}()wkAIS?MzxL8~=Qx7()GGKjILv!0@%6GyU0TX$a8
zRE8Gk-fAfyf$YIxO<8#zTGL=#!t7b-Z-(-w1O`Q%A!)ZT;<@s1>?^a#`VD1*Unt~}
zl!}AG?N&87l$hWY94a1D2cke$72~NL8i~(QD5^FiHE{FG0xQKxPAa-b05z%MigVsE
zI8#t#h~gGDF%U)ADdRW9%gXE-VfL7U$=ToYEoi>4q<tkDh3ZqQfa~g*Ye~GWKuypP
z(A=aBNiAZLQrRJ4(<#Q!<FY(sG|oxK21}ROUXQ1b_4w=)NBQDsPV>oU7C3#X&Ge#0
zW~QOjVQpLay}$n||F6IHHD0`MjUy+H5Y5h@>TUyS9~GV&_r%rX-bkt*IG);jkN?x+
z#M@cKj(Ys*|IxohD>=vY8)Kp<A|GoAM)z*D64;U>JWU~rJw+l4O!_<)c8y_w7q0Fp
z=0Z+_vd}dgpPS*#@i{*KXCCK&_Alma4R?6${7t^~gUdYk!Wyr=zQyY57MYu--Cm&A
zZ4t#W1{)&(yi0FsjS~jk-uMt)CP)VPNRhs<c}+>)hGS2`%mR!b5!OZ?#IxY|syRe$
zgE5B0DC5v7mH;DOT9sKPkGyU)k3yWO7J%cQrzoQe@F`qOv>>;cf|x5|##U=brD#1p
zan<^%7FH`m$if|@(4YD-W5^xAV3P>jHb_fIW}veK-J`H@(sRJZIb3{E7~KqR9peD>
zPU{(qWuQ;tq+Hm<3jw@CjzbmMSP0%tH9HDU$YYn$A7*6ZoWxj`W|nyL>=K`R@)*y4
z@+eO~G|Ra&JzB?GFdG3Q|H0;l+~v?uS)85W&;Hv#%UAy5XZR0)<-g;1f9n#RC1v33
zgaOY-lc#n!@qh3i0DtA)`LW%9P`md$wRZ=#P+jcLqWdj=@lXDFrluZdWn+vOLzZdH
z&~H+2>f66`<Q-i-YhOqbzn+hSYppRtD#Bn0H*YGh-Bdb}W4;R~7G`<s<UC*ei%-C>
zq^xah^3rQJ`2FwQ;Q8mbdGqZ(Ha8P&G)=oZORLkt#!*lr22ND&TR5DrJX|KoNXQ3@
z>?!LPh2D}fe_B{L4e6e+o%<bZE<g%V$9S6{<6BU%N^Cs97=buavdEKjwFof|Vbdy7
zx=|4LSA`Q|p>0%(SU(BjFy6G%6nUZnK#P{Nj6<MGlP`F21i(Z*aWzLvKAUL^QAf~_
z;?+GO%$-u&JzwEneI0hr`*~zO79<lSFTCD!G<Qw0Z|&|U<s8lT{u(MggU?+RNyv4?
zXyh352c+XMiA`9Zo#DwxkMa2@Pw@Gtj_}lDGn_uthUExi2l)^*$GIVH)sk--#v2{d
z{T|t{O+K>3k<yvnVD|G<{3pNhuk(NTOMi!7`)^;Q_2e-|&ei6C_aV&qKJ(Px9n|j2
zj7>k{JhgWRH8Y$i-){5Af8m#zpM9K-jWNd9QWlj5XNrb}V4+zKVYUv>?q>|+0oc7@
ztKCwPwv<-a#6sV|0AaJQT-p;lmmLc&<>-vz$l?-Tetelf@{`Yi4!CrEljmPr;alHY
z;Rips#Ko(Y(RhZWbBw9kBgCx)W1|r09W;`82pbtGrVnmkxbe2qnp4_y!u&%p-j!0%
z>4x4(#Drx*A)&IRA!Z=VS|N%QVxOmw=T)wQ3)N%LbXT*b+MG>oL9zuKo3K34GC<1)
zm4Sblmb+k6oQ1Y>y;Y+jvArk~{bIs)4e^v9Q_x+4nG-Ox>`ge=t|}XEfQC#^O|?>F
zctRfPTv@%TI-0>3IYJf^xBOxuSI1~PW;EI-&m8S2=IHD!k3M>m&px)qvrjDZ^kefJ
zKRE@n0<Fxy0N2O$Bl1B+w$)|4-Db4cX1Eo5^8$&mJxhDZ5-<A-Fx46QFO5kCWB!-_
zk3WN|<=6h!59mC7ltHSc?)Smssoe>vy&Jw16kY$`{{7q5Yj+52=C<Rz_ZDXSVe!-s
z12sEZV7%Vu=YQ_caCG^TtgenQCL+)M%1y)6S52ri!oMw!h>Fy_xGG_@Iw4O(HMg(W
z7+NhMY6)>m%b2^|KyHPR8aB3-cXnX<lCsc(rRgq9%U%B2FP-9_{bMPE@jkD=v%>Sw
zuk)R6UFX#|ZnAlO4vmk}T{ud6wu@<pnYQ}XXFh~%Um5QTtC!&96m;hevuB-ueL1*D
zNoKs?TFZC`kKB069KV^Aa&wu)AgPqCXs)HqvEp7>KLd0w%r0%w)B1|7*oNAmVkm-Q
z{1#S2q^YNRnBZ4dW)p;khZ;X$EIj{Jd~QKJEyPn0FM3d$KjFs&{axkeYkskkk2Kg2
zQ98Hy%}W+4vApmpLdio)R`7yz$~a3I^tZ^;O?r{#<b01O9zVlp9zV+Go;=2rkIk~Y
z96>wx<*-Y^?cw$f=~~QqXPV(ooBm#h{k;yOQGy!lGj0=z7lowfb00_`&As;63gk%)
z=N+wd!2jyM{0bYJJACaoFEIVd<LnL6=C%4j@YL>>(sB4>?}Mc3R@UGjJ)YVms72`v
z`!_5<`{h5u>64#j<wlB#Wt@RJSGlbl-)fo6hx#6RM-(kn+e-@@DeT0(?M*riw1!AY
zT99-hY6;pBa;u~QLkoQ;tPKno2Qamw%)REA?+DAwQ+(!VkI($`XZV$Walq=<F0Z`4
z!*{=Rfft^Clgrn7?C3FMeu>WVEK%Ya{hH?JK-s$qTXVv~8Atb+x4hP|-*mctA2k<Q
zhyqd-)sw@!ZA1nCA`Jdr?mgA=GKeN5(T7&9u*|M<No(qZkZ@%~;+2Hwk4({)>Vc)I
zEv=ulv2m3EY{U@HD6Iu(EyK(SA?bR&y8fmx+*I-*xDnp-C^Kl5qgjULBhU<^c~C_}
zII)a}%HG~Cqy7~lv%yqiIXBninNKY7*@qwJGmjtRkw@p4oi>o95RZVNw{6<9j0Z7;
z?J4%w+w5#6><!wCTuf#xB;vt%N{L%uPUi48oBeHXH|56uAQ};3fp!8@Jz-`oW@dkv
zfB$d%DR%$V-{S}0zfR}zMFzt(%z{7aJT+;o^@0rJgHs-S)IwK%(vM>EX?Cv}e&X3L
z^T^pRaqU_fTv+{Gxt1aqGBLfYX_omGvzqx-F(I~C-Gz%%gCJZ9d@=lHH6MGB8}^kr
z5t3H0y>5Aj+|>FDduU-`VA~mP4h$DAL+^?*9|?2aDHe`(_}R}K<!66BC(HVre`Avu
zzO%-2-@eK#Z$)feU%;L`M(^Ad8b@dh>(@Y&jP9b)J0au)FO6c?n_3FKHH^gTM2l9?
znkw@k3id-;&^=O0fE0@fEqs{!6~>xItKq-#6_^bhP8*{93Sg_8X#GE_D&oSiqX5H-
z_UG_Qgx0LmT@*SeAer{Sx^@}%S3t)?K61FRphM?D!})wpOoW=4H1E^jS!LYcBxZ-D
z#hlN7A?B&4&hUjV{sa#{a)e{9!^{=uwQ9#kAY&Nkq??A(pv7RX&F-+v&VHMn{fPa6
zWt<zF@!{6dlp${U*Y4CO$@fP>Hd6Ajw`3|@i3RnaMX+d3V{b_{w3hKkk7YCBKmNOa
zhJWW5{(D}2XB&=pf)5_=k$3uGnMB_1wcZ!H$H#@IR^$sPv72IWt;453`4c?(<e%Wi
z&CJK`xnj#$1T|7_K(%Ox!ona5+D3Jhd74@e(-HN)UByRJm@XF4Zw?rTc6I2%B2FM~
zL(~r6x4hUqGv05kZ(!R9Ygt5RSLp4*%sY;SUe5ec%VQ_nJoYag<)8mcj`fv2Uj6<a
zFMj(1FTJi@eznc^@mZoz&12>|w2#Bo5s+cd2w+diVlTUjLg-4dos>e-WV}zC1Rpkn
z+eYCrrp3(B*20rb*oYGH5dx?cn@|Zs%8~Iu*MtRuDHG(SRAhP6N-Z_MrH!@`Mh?cI
zjcXr)=_N1I+FpV6ON#4*_JJ(qJp|HlmO1)c8w@uuV$y3YFAVtXr(1mXvx_|Y<B#&x
z)5|O$pN4iE&LK|+9zO&5YZ1ejhKvTVvlp|q(_(8sW`FFLMSjVmK1D3{Cr_r3jbSkI
z6<L<4?|_4Z%c%3=$x_TV{kX!J%J?7?=bcVm4Bt|Ywp0G2U;mT*<)8UAuC0&AmfAJT
zq7T_5@;y;H<luEJA5>uSM~bIb{Vrmf!L>GzKJ;lm{mEZqWhM8)9%TYm05Yx3&;k{{
zQqL&kQ6&M=u;$mAjgi(8(ZTzaX-&)Pq)r_P+x;A}REY*Kib4g~l2FNorJ{q>D0!?5
zjIyo5+Fs1`AZF@H!c3GgHIuP;HsPoL*aAQOr<H7{&&3~Z@x$M~#Eaj4o0aEh*!$!%
zt)H4>_H37a*H;aa<>1ttN){VQ2`7s2fE5QxmD=FQ;X=e*0Q`FPMoEt_l_d|R3TG**
z-lFw11u?hGP6(h{M)&#SRga)^;xGEl`U<UmL})L0&>C(lTUP{^`r&94hc<6@i{Xtm
zbZ>>lsck;<gz~9prugi$pWx}Ik8<SX479^R7^LLm443*Ak5n;Zuo97cW`?U9(|rB^
z<FgVZI1AIQxYS~N&`dspe5_=tmcn;x8(-tXEK`b<uaN#;@PJLQtBM4*!jR%vw1|FJ
zS^nc~{^MW$6Z{*$^!Lby%5Ga4o6?UCPwfy;(+^5g^%3K#6_2&jVtlQ`spF6FV_*1l
zY^^J4S|gU$q9V&*onnmVGZp=QaiOIlV=|6HI~2Bbrl|PBMe3;9ib5|`489AZY_WKA
zIb>sBZKOk=3>C*7*pfCR9ni!ZJeojp$OXm%JGrotC-hblI;)PUmos{EO7G}2k37@m
zkw3D`pBZJW|7e#t|H)O}{@ZV}E*-8dFR*>$2<<ad9PRmHa*#Vug9z_6GQJHJ@f<YG
z!kkULJ~S_EHmf}7ig{mb5v4LyEUMgsPEwap6&Itw$b<82al%Rw<rji)g2XGekhhf9
z5urD4alqDfCEbOcw|3ZkZIx(!jit_jXU+-Fe7VJ^KE1@#pZEmJr|LkKk*67MlzCvy
z70E3otFj$@YP`UX<Iz6~uf6EF^rofP@`2RO`5Q%+dEY#j1p;u;`WECr2_p`l8s<kG
z)=DY<FHI&@g0X-nV;hA`gb|8y%0}9OuVy^{&z<1k`+xs&{<nYbA29vsEW4(j?fTK-
zsmU!JbnmCT$488(R<Os7F^q3?SeQD-m!AFeY;9OZqcqt6P}3;M0l!Y?{2E<r7psI;
z$UA086%(gYL>YLXnwS+7ErPhZR;UmYc+hmBWO=x-jc5F)V<qkTb}LHMyKwZN)%GOS
z)Ip@eNF06RL!?^$nBEY2YfAU^oT<5p)+xv0nJ$a}?h;>g8Kd)ku76{L*MD%CORsiV
zyR=B>$Cj|4ou%D|7LbvXWWHi^Q6S<*gn4AJ3s><O!i7b6?O2tcYp6V`oYCsywjx1h
zE@gmMP-d3T)iFY5LQ1*|Hw+7{Da+KdpMA2Kvvq!#tIzGT{rz30c6a#1!iZ1(c*Lha
zzr-`2Tw?juG<3owx}TGea@=@?V0<c68ezj?v?xbyBG4{|evmsD?l{<jANwPgi*GAC
zJ3^Kcyw{x1gLPp}S%~_>(AH~f!@RJzh?3eIu~1gzA-7emKezH+$ch|Vr-(W>bqe!$
z_V}59>2dz;|Kun6kN)l7Ve0AQjHJ5BKG;09+g;c9+ucL%UzqXz;Hi~ZFNS=5o~dMs
zpZLkY!2W)h{lU;DgsbBq?Y5R#poLq#9(;D^&r0WDJoc21I3gsuQ{U(KXOw1(R`}RU
z0l(^7vf`?C0U5^*Oy&VD%M?5ITe86}w7W{XC*B@9g47B&44xB#A;OM>B#Y>7L`-cf
zQ*Y&TXLFLXF|D&b&i%?F=g7z}?{V!LH#q;_zQc|GG-C7dBP{>yX^uWS!@@KS+ORKv
z=x)T5b@RwypvDEK+n|7GRKLOdU+UWaK+G)yk!{E&RjO1!KdST>W|k>==9d~aF)#;a
z2BO@tyWQvaU)bWgZ*4JN8S&^`#4kSD=JS7PnkPSTgryT*=tX`!Hpt0_89EAw*%>4=
z*rKX(0a&e<p%pJA&As$$JW$4C7!IL75c>PV>4${l4=X?XeI;oJLrJA(H080y;yIBX
z=zP0bDmSQ%4Uj5#v?dMqb6}rTfpJnEn_>7F>)TV9|8AFG{^e)6`OZ53#b1Ac#b-`4
z$npup#s`h3cK5NK_uN7Eqry|GvO9sDd7^ZNpZ?jufXk1vySI<AzGa}sJ*(1iw3?J@
zW&S56=~T)gkGh~tFp#JIRvSl^Epr8vAv&!>+ggiS0jW+nhblnsqyBRB#8_*<M&c`i
zTp9I)Ge*m|s!2N}nOh-qN}PGyp%Ji;VRvNctVK+3JEq>wiKZ2E#1frZ;`Co!=Ja3O
zW%#32ZvNpm*Z%(Zx%g`xcyx~B3k%58^CZjG597DIf0#8svj7vcszPb|<N2aeRUx%>
zcT=Xk3kB7!Eb~J8xf-Dz8D=7wPQa|e`t?07zp%;5tNXMza*ni>hmRTlov+OBxi8Ff
z<aFEX!7woP_UUeO9P&90CbJN%iHao=#*>B%zqmAoVX6#wp+EG){?S+&r@qY`k0Bik
zSq9utPCPC=|MeUlRix&UvLXhH;*8WjVXcC1wE2NMZAQRouxBXwky4B`YBx{yijej7
zDa=3E<KO&ue~!!Nclam2d70kRM;VN>2b!mL`|J9C%-9N!kjiZq1rHWajndZ)>~M~B
zuf>;t;!n|vPO-MJk1<92=?-zPt+_Ka21PYjq2ja)ZI=tn0V9xQLZ15!&d4@n+44X-
zm7@JE=pfRpa72T+z4mj|g`cB-dsgsCT}YGC$os7g_x<ma7PNaxy92J}A3s*VJxrb7
zu<m4r-pJ6~h-qDObl)D6EM&;hi1x#0Is0Ubvy2#D-C*?_*SYk!-r?GsviImQ;-5Up
z>@y3@9*Y?7z<4Y76-XF<=LLtYx(84jJ(gNhYrR0;g;qAQLbqc%3QPeTz}s(c@tyCk
z^Q~`e;(oM4vK#UAlQaC;KYD~Od}V>-M<aqB401<4%yA<{)bDh~8O%5Ykmkh_M}m;w
z59po3D2KtGG91ES0E3}2Ooef(VP-~9T!eNrxR_kM0!NO(;t5!};BPENb)-^xx|t#o
zzLsX@YRZb@M&|>QY1|CdzqPVO&qH<ZoZqw-vpZFToS!24y*~ek|LZSt?b5IE`a5gH
z=N3uRyvjj%fOu-WYo&JIY>PfRJheJ+)?{4<tIC%?_s3YA|0LH|`o7&MkV~~H&x=`Y
z9o4ipC#vZOy`w^CCB&3Na6jDjXM5(P^fW65=M~wovi~j?6ckj3VteY!ED!%{06`O4
zl}t*Vw$HpAhseCh|HUX*#sla_&}u`gt>sKESHb2!1!^d;XP_;H_EwwjwxfGJqji3S
zJvu~=#w5p%a`Mj~<>a5=XZ*@KH@>yXkN)8gc<sN5*gP@Ixj%N6r=DG6+=uP;%mW5h
zHB_XYJLeY(N;QbL#?YEF#4{mlVVJS{>J~rv!3J-Ce~;^L?z4Y=z{zgHFF(A<r~c$|
z&K;j(ex^+p8}`q`u%pDY8E)U_vXUF@C;(ZeCCM7&`F9$Ema|+K_hC3z24fhF{P&}g
zr(~oB9V7Rk;&Pu);Ae|f+n9}^y(gS`M!5c#CuD2bBpc6IE`iDwcf&xbF=0a<jHJ9R
zK{1=vfON*ITgpFFAyUXqZMLD6V1LI7_D5|_%#8V~fBl#Em;daq(O=&~X1nDa_rc<+
z-P`}YxA?sWnx|Gh-e{ZQjfkfo`3cUP`Z70G`~C#0Z3ZNqINBVqHPKNgQbKF3X|)2B
zQZFg^LAr!xfVx5mU&Pc&xoH&DA|tn!%Nh7?T5;ei(5(PcRLkMC3p9w_fzABvt8g9B
z9I`$P_Jw#Gl9rP6lvc~TvnH|MtPXSUeYR^1-BF9~dW+6hPUq^FcxoTBD7fP>(bMNR
z`^+Pp`B%62>F?j*2Y-K)um9g(;-#ZqzVxp=%+V*7*<Q(s<H89e)WI%PxJGDoES)Lu
zM&2K0+<1F~3qRQ4^>44SaejxmA8~Rn;d5t~_?Lg;IFCItO=q?h-fRY=42DBYYKU)I
zUjI(SslQ-YToUrtAcYGNfRcDX%S1>WjK;naD_YA@3Te?=hRV!kUMZ3XUZc|x{RtJQ
zxoR5g6gD^E=s81YE+^gh3YFZ|#3_ZgxSBnb^E*=zoNJ?xS`IZhB`?Mr+VtcrqYVS?
zCJmMFjz;ip<;)*F%K!1N{UZP7zx;P;B{8E;@-Fhnd(Bh3gZMvzJJE`od)bQ0fuxw*
zgNuBqJhf0gNyO;7;l$#jJoWgWW@UXG3=t{QyGv?99j(H^R;01gYj&knp}<;O4iuvA
zVgN2-s)iFZ^?FHbt6?&Mrcuxt>SFrBD5GIp9>P9cO=hI!zpWX(y3neIi_=8DEw+(&
zWX$%J!M@kMw%X8}7COBEcz*Q6I9G-uw6U~zI<)tc&T39_b%a@5A%EClk_3sSdGv`{
zFv{Qg$2a&t|M{=-Gr#f(fA(MhNk+RlS?0V6WG?h(BBpxK-%q)6ah)H%w8AUTU1jaf
zZD#TwPo7xdmmXW-lRy3t=ay&b&cs1;8r(F-16=0$gS*?7mCb~ep<zdbt2c%Czf%6k
z|DJcIbSh*aFTl^kg#K6=jy$l9QojI5i{ND!MhKbTIBKmTb7jCWwG4!&ZMXpafluu^
z@wnlQZ$Z0P@`Xymt*aX(Q|M|rcw?<Ah@_T8U2pwDwuGmG_;aby>Pk3=oQdIUBYyms
z9_8QpU;h;U;eYU3EIxCJkra6v4+u}~4ggT@pM$P>;CX5Vl_J~h(u?MK_H+LNTYVwR
z)8NKX2pDTx&KfU4wWc7r#iF?^;tq32EnCO1ED#^2EO?Tp<{^wYs^)-R{^F<XYMSeV
zl5JlQ_iI{ISDPai+*eogMbqL!3Lb4HNTFhDFrwtSw+c^(%HF1@khFV3uLtc;NPjZ0
zkB~${TP(e`9!D1)`He9z|Gh0<d48XborqNzF^r~p{PZ*Y=3je>@mkKm^;f^l>ULG_
zy!pZfUisQ8S6<%5tq(ai6Z5B^TH^D6;b|U!e4hAN;s^eN+*f4T05=x0v7z6$Z0@wU
zu_avJfYpJptDeW@1mdo+_BK5CHOCi!%CK_LFF=PQA<dL=ri{ig9x3C@6QT1kD|2}@
z4^-zDN_kG%+PS)8abXixc(hIA({66TiN}REznkMSQ#wfasJ$TU4{C`rMKKR?dq%7B
zT$N^vKt*;e+EU|lNefLbMM!lqqjNr=!nqdaw?_Q=KmKF9{NfdU<9~Rag=fw%%JN&P
zb3PoN+N~d}_fJxFzZC`Vm(o#VaF3?Q_F}&H6Tgh=B7@;B#)P1Yat(D5sq_G9X_*dH
zU$XkA2sN2D`&SjAzU1=!w?GvsTG-TA1STp5>&6p$@opHV(YA!Ua(ERkfSVf1P~F0@
zTB|%_@<0`lBK*Z0$NC_b(k950K@q{FN}9r`5Bpob+URtA5KOo0$*+53p?ezA_7uPK
zSJ!y?hucgo_t=T{_|7|j$oZAGQEAbhJIk;BKcAzY?eZu8^0Ta7-sN}x=F8lC#qmpD
zdYXUZfBFf|97~ABKri;avrBQ~5oRdl`@-IuVPoC0x*xH&FKmoqa|C_oeb@3pc_^qh
zqrPGi`0d|N&OM^6?D(5pt}qzFcoYb;c>!txY=Vr=1)~DAsMLa?LD3@C+CL57yF%!1
zs?%s^2aX<rxnsiCH6?0Q9iyn{C!$jQz8HrXEpJAOS1(j!-Fm;|D|<|^TAEOK6kF&>
zt7=mX+}uovzmf63|DXRey#Cr2=Pzy$ot(R6qSXh_Q@a~mrTZ<ZdSG~J)$b$i(qB<N
z@z_r>J@W}xH+C?_)J!;}ib&O(_^DjA>qOrvRg)^!j7%HR-IRY;0*zGsH!Z_jq`LnE
zcDjkcn%Z4B+}X<kpwyVET8>-FJ9JSgY93yRC8Wt0_SFG|)$`?wxu7jFKntO@t<)5G
z?l-IH5c+)>PAR=9;mB#2J|X=2f4t7~-@U-`xp`h&e}ljK+TTXAITmN1WNGd=Cyq|@
z@QEG%;MZQ_pZxj@><@$~JI{|l^;y=oX88I)N%@n1yvy=aIit-1HWku6L;qUD>J8!M
zHmr<<?c96TWuj!NWI?5=_{8_B>hdxrgYeE}<>i-hj-83v-uA8|{XIWJ^8hAghG*GM
zhD0qFw#|i8u5<Nsgp%4r4Md8WTOkX}#xPFd$V0GxS&723z^hNBBzs%q9e)dR&BAdw
z#J*zEKw7qkTqDJ64zsirsao2?56}4<n0K4;nz$?1EZx^;_z(X#zrernum3l+_Y$(H
zUPY>WV0db`12uEMfK6`CQ@hQJz8^fb$)(0<!!SE_l21JJ3v6x=z3HA#3<~8S#X>60
zdoj@}sU1qq61o7l#-O9_@G1?kqp|g@?$D-a88iQ@4Q?JLEFr4GQ4gofXkCq34OTS|
zT1DsGM2b_y)hR3mDCPn1T(IRX@;$>a+yRooaNuWjM~+4O-mh)(`_Erxy3^*`aD~79
zqyIZGOFVq)D}3TpU*U-pJwAB~o;(S5ddStQJG}mC#_zte$v1!SPk8Ohi+nHn3}64o
zH2<f+@&xls5f|Q8cKX8gHCXQ}Lsc@Xo`a{pLd%?xI}cEKkg@sds{$#9f-`*Yn>l~(
zUxU>ZKTk_j4}Q6;xqst1fX-FNPy^^`jWJuakksaBT5n6K{av7t?CvPb=Y%)D>y-yZ
zb)OeYB~z5%;oli4`~d<zL`!>DazD3=sGBVK*NGAGa9(BMCTP?XowLAqQ(L`O6B}N6
zCF9v=ALW1XulzLshrj++PCWAo#&U3c_hIwY<bzA8x&!Xn2h3BO1U1Q84EBcn_>X;s
zoHn`JD`icM=g=B>Ron9hS+el5DrdQ-M*TpWfJ2RpTcn?d-mrYsMEmPXvM<5G)w?)|
z4KkVnRKtMRni~2_Q)FMZy=6%kNUz$&baBBtC@(e>QU)8lklt>bPk^`9mkwzTk}78&
zjd<w~`uv0c{t7lylGYS||JDB*)ecK@pJn0rvrHfB(S1Bc&cHAc&Yfy=;_)_5Jq$;l
zJb|4$#&3P|uadL}T;BaM|LNbj!hi7ZpJOl0xiMDur$X@Y$dg_@kO`wq$;R5?kogwT
zCu9{>R<3?F`1(tZ^_vcB4e1cFAic_i9hH`Rufokmt1UM)#tTKot&LQ$YSvaiCtdiM
z`+b->Cd?fdHZD4BTgq`lak43%w`Yuh-A;?Nd&<8r=rXGQCgqd6v|1TCs_nY*z+a5v
zY@i1@^&9h|t&XCImtIWy7e4=UeD$ff_~E5%%$z-Ws0+vk&r{<zUU7O?)DQ#rn#1<t
z@!ba7BaSaV#j&HGq2C{4C2DR}bW$``DF7<bwlu4n39yyo@lr<&skM#`=kSS$1b>n`
zRa`+kag~!uo)^3+4}5v4GZmal#i0rV?fT|UYn^m4JoeQG<ztH$%&Cy){yB07xvO|t
zc@F6)fC&Ee962MT!;D}58|PWuy-6>b<NG&W;QH=WW;&;_tz%>(%jV57H*XkL$HJ9)
z!}Z0SSI0TO{zlHX-*#*d2DCfJcxV0hNjf`x|AjvP@VC}D{j{aO@8@8}S2~7a9|pV1
zcvndW-pbpJ{VXca1(ybs+pHifD^`@@j^Wi8QaU~3-$!^~<*_Q?Z>=SDwG*SJZz}&z
z3qq|NP^eJL!cgZoz{4>tKV-;?c^&>sYdU&YR>o5C5ySbBtN&aw^_6CxdpTK_`xZ8L
zp#lv$(%kt9Hp|3QSBl@~-pwS<h0)lbTRS6R<)-i}KmQf7!5%Um9bf?5dk@AB_Ib?R
zFAv_0r*@Ys<HLGyxr-TGDJf2H`^wpqUqZy-!r()&6T{J}T5J3`IpjP&nBC%6@WxN;
zOJ6ZL<h+oY*MFgrl&apZQ%AH0gc?i-$3aM~<prqZD&(%X!+VZf!B%%+yXvTMtX!xd
zi@vhh`h^zEgIevP2=>#?c_H_BsPyI?C(c-Y{lB@!`D>SH#}St|&hwqi{{y}D944Bf
z6)j*<hPxRzuL#fmK5Sf7qDc70H{l=uj^kV3zQV<e--mn;F)>$mze%r~@pt~#3Imrh
zGcD}xY5CgIq0f!T$3B?GOUDAZhx}A^HTp&P)n(95EH6FpKyp+nP%EmndW^v&kEfod
zRUZX3vO@I`aX(V?P*C>wVc~=jwG@~6tWu|rJY*{P8x-MJ|9uwJ1et0HaK!?|sh7rO
zxi?2BZb+F^pUxFN!_+BhUV)nb@|Ab$gi-2m3Ky=8INN)KXHI>B&71Gk$ac5msonit
ztt2<eomOkNTT<S+7~Z@WB)vUPP3|*KZ89m#ztMc?Xv+c%^ACGgy$SY+A|c#DYSoua
z@MCHWy_)5;)QGfoy^|gqlu?=bN!4^rASZ`@FvaGpjzP{De|OH*S5z7RPOHb|&IFo*
zlowgOdMgC<S_c8Ajcs5as+j`Zau-Oy>ceZ!JsR_ezrD|M&%H&|8ep`;b65W^xoi<9
zGsMvnt=0l2Hn`l8r+!3kV|e~M%1bXecDL5p-9C?VBg7;m(L8JYR~c}X8*4j!_3y9p
z)YAqXhc+uD+G}9^7ob+oyj+b_=A^7li;ZThBiy(otX|7$w}m{_3ixs@kM-n7q2;0|
z09kE*T2{lZ_`YacwXC+3${u|<g!YUuy)2Bzio>DmJW!$4&B}puE>z80Rgp!OgcjAi
zmb4iUYC`6G^_CV@nbQDnK4LI+O6vR#t9Z;f_oU>(SlQ?cj~x9JqrG7Og7<0?DffV<
z_HLkdcg38!(}(E?rYMlxg4*Qsl$)tsN#Z$->0n}S?q>>!QE9Xpl@qJ+{3EHuTLqpa
z6xR7f(gZiH=fX{PruEm^nAue1&awm2nxjZ96e$nYQ<iDjM)^vtMpr1dsl{--Xmvu1
z;=)+1u?ehI4E1(258J`aInI2-u(^`*kN*A}sM(<#FY@;GbF2;Dq}y5~vOVHxmR74*
z<~@vu%F>d5-QWL?u(LI0G}!Ugil3xoO`BXD*Y{tcGv)Z|SFfR+jI*Z<qk)ufK#NK%
zyw<!9WM!MJ6VAuMs(oyE`^AiIFA#3EsMu=0cM~%+kBqfBTupMPwPiv<`6&LpI-XLB
z{qr2g87!VO;j;^XMe$fio;&g^C(j(YbAG#<s|UK`Jr}RFxVhEaPUn{@S?&qd<J^<0
z)6l}EPCVJ#3FBND<uJ_r*T@-m1WdF{%naFZ-0V8!c3~>-$4~7xRo%NO9PYxs$lO`@
z-YwqPUGvoBo=`dtIusO@O3K#e4mN_MTez_rj873M!E6$`L<?7c<Ndg#iW-+{uts5;
zRxK84pjlRUbuytGIF6G*Sp9hgtfh-X2|j_^kk;fpT0Mp^rwQY_8VJ-bW}2HkEye!D
zzmpOqGY9j>V5(>N|NgD>tZiMQ6?GYAecssoO<GAC8}%@zM;x`o@eQAm^IFu+HMnur
zvAaDY%Tm;ZSi5jcY}8?;{{wQ_V{2{1Z+&%>r#@|wRI53pPR<M~?ifyLz~1~fPNCH@
zy!D!Ym&W=VpVqdbTAQ~veoj$^h1S!R$5?CbD>QuhipN&Z@2mIyeP!;X!9<W};q^He
zKu&SFYgB8wbN<)70J1P|D+C3B@=~;`S@^7cWhP}+mKEPSW#p8x3+4y8GRk1!pmjWA
zJ%#Hldtk;PEA`&we!hQ7$KjRZ-KY=D-P3dBHaxZaOTN7osQIm>lDb{C*RHa0V~d&j
zn5hK`KJx}E79*y1a3(54t@Kr8V_NDm3jmW6%*sP7)nlvnMjBz_)lk2(wP?^n4oh&A
z=4RGkz*4r2MOER->O;!vp}4pU04yJa1aY>MKvuU(DuAIq1!o_N`Py%;^2R$Cv56zG
zQ@pYEo1_e}(G-!L#!8#W_Pk;us4JqxU@dH|D}#MyJjzfVmox>$pg63F804$0^k1bn
zW%=rFtg|=FIC4Z7kAkI>)(895XH-vSFVrFxk=4KNxMNwrF6^x5bf=0<Doq*(6Oo}M
zl|!0<TC42psuZn#Hr0(nOGV4D53OmTJp*Z0TO1TX9M%bbLt3<(F8tmDSss4%q+}0d
zd8p*lKvvF*`C9<GA~<@aerb>fn#|Zi-cc5wh}g3^-}u%FH+J4(sB73bskZ;OEKoiO
z@~zy3P5C{ZvE7b*`);7tK;63nH8~X2io(YxmQl7tsvE3aT;bY<HR85qemP=lR)``&
z#A5IjoCG;-{rRP_y`(8PZqP-fUVb&L#Eaqd<Q;tiM72=~HdrVJs=VUYf{W&IFNezV
zW>ulZ_OvF@*80Y-Rt0LUQf&0sRypx##2YX7`Q|s?M3Oza(ITsRZ*YC^60KwgYo{<~
z8Y2mj=>*{SKR-&mLF3L24Eo@5uMu!A5A&x8F`ir%+cs<cmvB*^m9;H?=c~J%I_E>G
zjjeqSApn{QKyg|Z+SE3g_;xfKSuVVm(wj0tz%I@AU!P6ZZaziT)o}2b;BPnh*%Ovi
zE+_)B%<F>}PFm8U5_PWJkXFlsq7tpDwEExY<rdWcU8YJJKragmgz|f>mI-O*Th!b_
zv|yP!6A>*NUVUeqzxAuHaQ@octPX!f6nBxh)zqWj^^)NIf|}ejP<wCI;2#?KmfNIT
zD<)A$ayIr~VRq>pSKfJ>jkR@_k1nxzbdIUHh|$2&-*=>=FpS1m53ZbaNktVCIVAkx
zkoTxXV6q<icg5|y^!sn@WDnOMH^dKhSLXr{!-+2vC~4|9wN;~Mf@6u6;m#$H8H06N
z>J*FjX~Tc!j~Yfp_{ab7O@`TZTCqjlh}Sp&0a4sWOzeS85{zkKZ7U4({e^2Izs>FM
zLppS*=2hw!iWq}P?2Q*~m;KRAwuV=jo_d6DeB%aBJ~PeSEUa&N?p~ftQ>RI-Qmym6
zXo8Q+9Z6z&^W~H$p3Q^*UZn-5Ocj#`6{q5?Nv(pbQ-5kAV=CTT`CFCRpZWRM@|lS9
zFOG5QKOy6)^VbFXbg@;H(tK2_CA!q@={@(YkY^c@-~uA0ADgv4bh$kh(eC;0_xeMA
z^vVYBoL}X}%?%=(fn8^F{{jogANEkIlqvFePrkidp4z+M#rpuY_vy#>Ao;R+d+*L-
zo7Ef7GuvKdzWXd&+gI7zxz3fV^Bg&PjHRRV%r7V8ISlq4qrSI#7Vom(a3iftt(t58
z3HbtrKwWB+vfAn&J@BE{-9Z{&xl(II^+3Q-;IkE$Mp|%eOPNq9&k?QbCxT;0MM=n|
zB8-|4w1N>jQ_8|o%h!MV5-Y2huyIDmEOCDGA2HH(5<7=TjFmPb5!SY_CMf|zRS>I;
zQ(-*t;G!<C0Y;&%w1`HCMqpue|A)*jKEnFOCf|E*ho_%eU~N6aSn+;pjZLpqGN_4Z
za@}0YIiJ_Mc1_q?&1iRG`uhr#X0;O%x;hO+U9k{2#CoH)g+>~tR@F?}db7&uMMJA2
z<e9@*#bNyNT`Mhey;d=`ALF!n(=0T{1>xES69AuoVQKXYQR3UyoxK5Xy}iwiYn!aC
zuF@ZDVT{sAW^s~papQZmdTrYCONVGiKP;Y_e6W6Occ%Zmw|;83o2eZtfKM_y3q9Vx
z`86I|vds5B#m;z(-Q64P?X7b4@(i<cODrE<WNvYasaeZ-WEt${j0cW9tBZ}bN#fPo
zMIqAo$pv#=Y9jdR{FlQgY1J*hqNCJ`J|i`-)XL1Vv8JujP&6>_wU(ByQY==al!BSs
zEYFnL3m%XbPer`>+BQFU;T23Ypk)@=9$w{o|9O(uv`?yvx_<L)V*kBu)y(7s8;1o)
zR=hihb9qTl4d!9NC=KGM!_N41c1D+J$0vB<dn<hM({oJE2pb#C7JYKIRSME6q7tQH
zr)@;ZQsMfAlt(|;Vt>zv(MWBRQdF}Ql|-sJTHtYLT}L^=c{|96*M=cOI##9^gx;dC
zamA5X6P{B`R}QHqZkd`;-e~2vOU=wco!5}YZ9}VTXis@COS3VnoBLe9zRAkUCOf;^
zjMF|M8OEfvJ8fDr%kJm~SGT``i8B^XeIaCiydR$0ol!d8fBc`^V{7on9O3@+)ZT4T
za616BQ_zwwZ>{_eOT9}h&pgX?vcOpP$lNNc>zk~vU!~KYW`1#=#UqQ%EKDI-(jg4?
zbH+o5%T0L!I4Y6wK?a@Haj&UDDHa<#aVm)3hPzYiN2Ts4QWGjmjqF>7S5|{<=lsub
z#wVQTrFg%p+(heE-AZrKFxb!e{oi|;T(^lxFe<#g^&6Pj1X)*$$b>djVytarZB$cZ
zm@-Eq&nAg3#e27iL=b)ziExZr*?*pg=1#D>w#G{@9^>rUIaXIQto7|&WhW&y`bF`3
zsk^tAAmtF^B;uVn`+VZZU2_&zTlSO-l$zl|#SUu9d8#^5>kw9&B1rvlT5$xIPg+(l
zWmWrGH!&y@s7y#VE6%&12`zq#u|lV7=}t!^9Y1s3-5+rE;wGyr>uhdqvESb#(-FpG
z7z<G=p(Q;;bH>>Qm-k;}Yw$YLb4Qpx_GD4we*k`Jcjo2zep}G@sTI9{eroRr)XF#2
z%a}Pi#n$?d*t+=^%TrIYH2o>!<TyjuCw2SuhkNuduX5vRo9@&+i%W~lFV4}MZ80?;
zlaB((4Lo<MFqJg*_&urnwjHwMDB8vvxvg$#RIl0^l_wSXv-lZO(}q^Sq}38dtLM`|
z5wMPO7FP-NwPDGmsw6#OYR>Qnzx^ib8#jp(Xq!2%?))zM?keqgF3fg%80nONWKH51
zF$E{k_$n|<gP)l+l&b!5#&}Sa7$=ceaztG=2d{Co`z0bX%XhzfnbYTd)waLq7YR;l
zh5}l7r8Vu{tC<^Nn;5q&H?P3XW=fL8jK|u@wQxGI=y7^$<%?A9d_BFaKBg!Z7u0xi
zqoJ~RBF4rk?iSTu6(*$QYP`*q5t5dr-HYi=8RA4q^OUuX4OZUTU~O%ko!w1F<9(0}
z6DigjI<}3K9@bg%Y{2&TO}2+`&`)pD?k;ic+~<h8GasOz8h6H1yCe01xnF*4A0DOS
zj#|~?_eo0c#0=?P&W)|-S>6933*E<=>pep^If+J&vF?)T9y@z`Y;Rw~TxiqlOtXCC
z2+PNom|1F(XD}Y*3<utlCeO4X5h>cwx|8Z*uTg3dL{igKN$ua71MP3E`<zfol=+i~
z9svzTx>6TXU}PelUct0r{%FKIZ*1`DYj0zcF;+V4jjnLD{|6+kDL?QwZLH}a5(mDY
zC5l>zHDx7cLzkHsYJp;YH@OoRTW+Xx5$|>^yR7t|=giD6u(rC&Yp-u|?({snyE)eS
z4da3Iv58})H5x}@3t+4x+l#n)A?3uQEr!F~OXBn(Rij?b6?XCUJPc_X#8ZzXsOQnv
z`(?rBD9p?oT2q#^pJQy*I#<IqAFdijmbe|!>PCJMqdEQI4%aSiv9Y$v*47sN{T*^0
zV67rni4u#Igv7Lb=yEn-FTKF-@CtjQ>p1J^%^u_U+)rRzJtkP^AA+CSdyW6Q&lTH;
z32Jwfy`Y*C_aNylkPUM-c3$D;$`6@N&avG46tkU&Q9I9weNuLDuFuZS7CYNFxO{Pj
z>DdJqmll~@oMmpg6@1Ek6_<{Sd5m{<tfdpw77A6Cs2-x-sJpLD4z-(yP8zh(lHaQ}
z8CNYgq4JQ^DkDLv)~b9h0yB%2VL#<NfA}iSY+_uFHE?0~A46m?(!!VsYugx;U?jqt
z7;9S<Iah4ihI)5cZxhrQ%!`)pBtjJ`Dp;J1h;72==tYj@UnGiRUjE??&Yqs9-Sr#R
z#;mR8Go=Se$2GsQ0Cd*ITsc4F>{G6+%$!P-m!?vy-0DG}+8Ad_jRalCxJj27Di<TN
z6ylyRcg%9*&D>X@&eMjBF(mDnPB*4IZHO$4#sfAs*SK+Wm5t2}27_I)YygsCj6$Tu
zSR&J-Wx7}#qkMy{!CUN%F4E7g617_Nrcbea{Ij$=^R?<;?_m4+pzze>J%ig_S8VqW
z)Z|?#9q&C*MkU8~px2p$)G*vz=ltG3Cf?~V*M69p_QQ0N<6t93(kEv`s_U$8Y_hg~
znI!2kH@CpT!Xh*Cv&<f8frHV&F&Zf8NXfHMm4)2M#!ONh0tF^Z4LP_xZ8-PJgjZIX
zR$3&-8yZWGf_qSQp!MVEiab1}H4W{q;rD;<b+&h|Vd9iT=2_c+p1u4kNqg2CD4G}}
zegkT3j4?6RCRp3@b4_Ebw%T|qhRb!rI$N7d7x7h}5lb$DwQYv^78}EtIokUI>+9Ef
z>-=#}pO|BBH}~%`Z?bOmfYw$IXnEBsNn%*JqNL*-W2^_=+A~PqOjIlCM`J;Bpen2B
zNHvthHOrym<1cKpoEl~p3|BKlyJKm!Vv<%&lz@^k8f|mq!WwJq>um3AG8pdS+{jZm
zti{GcByAGuqMDNC+YH8Uv6*c!Og9<1ZETXzn>)(f^v{sAXG?lXK^!hxX_5EFQ{#Q}
z)c8O^?XD}fcjLC)Kc3pV4HIu8>6+lX5i9NaHl4XCvQf&`&MT~KJWt0QXRiCW2f1jG
zF*&K(#nC6r2CS@XvUc+_aWc*9+#-uh3oIO+Wo9vEJc9m?W8Bx^$Wf>vYJnfFE+o~m
z+N!LS^pH|5%+o{<nlIGfr*qZlA+%8ipsC0qN?*_Wn^}l?{YN)B|IVAlagLEGvTU2{
z`+q>3bUiyt5)WjijgdA+5>NRsEsVsC6^PTyxUypMyK?hu#Dt`!K$aGZ6N`}uH5pOV
zVs-F67Q3Is7|V}dxy-54b0i(l;`gcTl@S1FgZ_aYSYqRx_m<n+6xOb%bY^4HJr9)H
z@YOzKYpqQtZbMHjl{%qL&nXrN)y-YKOLCmknThDMTJ)xJMroh5jhk$2t+2hb!eF$6
zx-4uF6cahDS`yPEBF5>6EFG|&U1N}6rk`FRmjSKrBHg*uEOwv9#7T`7<f`$AX>Rf#
ze4g4J;LH6@sk(P2k#{yvd-qCBZabSZwGmB*Z5w*+ImjYL`vY$7f14Zo-=Z5GV=6h#
zZ2K|V?Guc3#MteV>wr-{;O5F2D>q|0@658Ww8Y%}0#kF-%*`ff4#R;X9jf;aOKWXO
zeF{^fh17`(^=j+Du%>)}P3~5isX()Jnvl4bn_3eoGYgiT?IACH|3}zp1PGBNytVV|
zxM)mdTVdEA`4-f8Las3_-;UZgNYoTz)Csa0_Q~PuFEbwy3>HUdUrmJ3nB3)9+h&xl
zvoUy$#m;9~U%$b{izhjCe1R*wzD3S*IXKU1%s4%#v8fVJoU>d#pYrq<VSmR5N;e3#
z6H)@L-G|EU>7j{E)n`_?s2Bq_R$5)5GZg}p#gL_a-nsq?<7?{-_XlLz5XT538Dhc4
zZ6fJne9RWk?J*p^!`AQ(cGDHw*3vRDnY1}_`g7RUOwA>kiG;O4Bf4Xg$aksK?wHPT
z2hV$#>GSWUZi_w`Gr0Rt$b0XmcnVQQYc`=ZyMRlD(f%ga_TJ(8-nW@+KgnF@DZ23z
z&}A$mGBX4Q3`ZlbTwdYo<%Cu;%lyI;%SV@(S)8Uf8>2Z4b{)e#B^~?fOlr(rY4F)Y
zD=S*jLuxz`skL(=71f|QhofOArxQ*i5&~R0Gtg=qzV(eCF&M66qm0B(v$FRscCzzy
zIt!tVim{UTIh*(j%}DG)&bET?Q%dXcGFq+-St_)U;M4_&--5Jd{1QQJSSEP$fhcOR
zw*Osb+fQJO;q_OqaQ4g`aT`WMzbUM1H>G9-P^t$SiUEgHh-1smt0SIK*WiZLi)1ZJ
z?0V!Khxmzcz*RtuPk)cv5Vs(TeC4{grR=OZEQYPkZLZw>9-WZuX{;fU1j`f#18&SX
zTV-#2nceXP#`zk?I;Pu8{P^;x_!H+o&DXDdmv61!#B^pV;)zz4^i^eMKIH4_eqzRb
zrh9xCJheMc%96XWEG}aE3?_!o+%(;}dB%g3-Hj`3t-b}(fNs3ZV&})`wa#H}hl~NK
z*~2klm=C#jeU0naV>%rVa!bpL%q~vTok_xW)iEBZUp(YeijM0vl1kCgD8MG1dj*-?
z&S{moAfh#)y_PFcW0a_^%+AI9=%p)Mxq6W}86(6D#;aW4{T8j(Odz*Lfz}a#Oj<z-
z6@?jFtG4*4k&A<fTAkMXVygr&DO^)DM6!nkg8y<vw!>h2o$cY9EOtN5#^y~fTsXmz
zBTL-4l3|VK$rU#Vtu0K-U~8=;UVh1-#ED^R1qS;mQ5<`nZEc&{ARJQh{tnx`7BV_x
zmAES;ZHN;OWa9yB-%tjdj?o^BQ?Cy_dJMX4A+htcYyz60Iv`KC7-Splr5D-HZ;<Jb
z$aLr?^USqA!Avs8R5Hb5a|=9iY?|j+4A%L!-f45g{@(r6?l({EPRX~oiPbD=2=|hp
zTZAKi6hKYxY!G>%c$Qk5stS@4cMX!aNnOm@g`ekI|2tgX{VH}hVY+peh0Zf{lH-W9
z7|DP%+Vhp%c+B<d>)g23rrnulc5Z>i<ppLJXPBQ$a5)V7j?um&AA1WPsa;rFTaOm=
zk<#o^Oc@Ts0clpfHLa?rB0)(EOwYyKxW2<nKX{cW8R48Gjw}~;ehVTHllX0&En3hv
zLQ+;~rp93_=TL<mR72CM)h4c7qL_-$7M=%<!h4Dk$w3TJ+-807JoB9=v6Az~YnM2B
zVu4o2OSKxtpC$N*O3hIrQ0+Jw3*$Y@+Kn+s&a@csWZ|Y#C-ri`03<=%zJZ{s4n1?$
zCXjT5xb2g`@)3;oU~^L$Y<pYvI<Q8Oc&qS%w^@e~{oxJv#&5BgzD4Txu%=5A&(rIi
zpk;fsOq<BW#5SU3W31%F(U>DkDaRJ3n7%Oxpr(fqe(o2jeGojgJ9XB+uVF49GEeP2
zg4&&McBIT8h1_N2vd7Ws&#=(_9M|?=XLIlxo5Pn_9lk)z&NJV7l-brN=q1O%v=}oW
z*8z?l2I)Ti8>`&7p3rJdF*m=+(vc-*mu8qfn)ti?&@t*evZ12Ic2$~rl@bDCn(wuy
zPYeqKspl^Q)H6mgM(NIZ3d{@Neu+#sP%;uT!|L91?B|zA+KVBz+=j|5w4kPqm?SI?
zY}k^<;bJ%8XNU(1_1UOZo8)TTui$7LJnsrVo0oC>@14tuqAB{rD{K$nV6OEf8|y1v
zytvBgQ%AXRDf8jN6Lgt!M%GANsy3KT9YzeRS5r<sM#yi~(s)!G3xEnYZS3v6lQx*x
zD*?uR*uDn+4Q131WaQF8S+T)#si<59C5~Zpf0YY6f0I_Li_jr%Ez-4Th)fSFG1e$X
z6cL9tN)p9%;x64-SWIFTXN85um}%4TnW}dPY9Ae*+O6<KxXZlc_u%gF0P)oB2dLGb
zrzDeV44RX<0Y(hdtw-o3ry03j2IFh2jo#+Q{&TeK4D;<LnQ483PJ9F;B9$Sj9Rhm{
z(><<VU*X2}7M+&Ytu7p0WNvwe*<&qS3d21|I&fs8Lh;}$17n(5r_I@q)^Zz~npO{L
z(4J9dW+T4)`){zmb(JVi5p6Tf*0|aKCP^|~Z7*$vHBpdFwE~B&RRW&1EyP5P)QGwb
zlgop}QW<bkD;<mPv6W^NZzH8dh&YrS6SY{`|2EU{V<2PR_|XN9o>(O53d6nH2uw;d
zZ~t^|!ab$%qRW*yj@Y`HV#%unu)2$i^T*7#{Jbpo-8Sh+*xOVFJ22dZbl^(Xj1Agc
zSF22Or{!j~SUw~z5K>xpnYr#U--e?|*b^I*VN6715+aF6Y@2q}p%=H9PK2Y~4vUYr
zXkCDayasF^4N$vVN=F0KJ}7sO2aTt8cc69$rj--_HMB`=m$ByFh%e7ja;)hv)q0d}
z@(`KZWsqKFW%vp=`hQ5rEHK~t1T&o{>BdW_z}O7QWrWHe!+gMSWrLNKgjO=e%-kY#
zOAE{`%`knWgAvb@8}F;n0?@kkQN@&!LgpiNzL>A}Y~(cpanG@MB<8JGS9#~{H;7vq
zd9FkvT-p6cRSSw@B=TP-@e~i!LZpQu%-jN5w?Q9}LM~O0w=2uvl1xl#$!-Hlx2WF2
zbK?*q6h{(G(;r@AYxD-Q$z$y7T<7)IuJYuQXBq8hl^Q@zQw<;$O-37Kn2^MV{cXc&
zkYP+rHuj=;8ws`pwiVoVQ=crqy#j+RWi$w($TeS4TL#fe=?iCyS#5opV?r=>$oaIU
z=P4aJs+KV#7%^D!z}B*@@D<aJBIe?lW5>F*J~NB`ZN*4l-=p7?FyjY_r*>;lyVoN4
zds3-=5InVaW6`|(>yZNzcYo2C$YOGfl?ZFvUIIf(u47bEBHLohJWMY+L+17vWh>km
zy~@?Ww`kir=37rP+j^XCv;@*(EF)YrLfL1S?K8N!!OG1RanfUYW}fAvi!2_SWA1nx
z(GW|wmwPX{Ov{U=bTO~JjmQSWM<AY7PCOiQ`L#V>_}&k|?&4fZJDO!>=MNa>*J-sE
zQE_2@=Ka!))IcpP4LqSXBDO86M2U)1Vx+PRDi$N9j<h_gL2;l_*^U~Cz$7&~zXRil
z;|^>6KV&LCg_toH-g<*mr<a*O+GXQ<jx7R%wPBA|YhAQ*6bbnfyPJlU8yUwRX))N#
zk;p$P8^i7@>}@(m`(DJ4R=is~VPB;a7DbJ`Su@clhl<)$K@zNKh3AeiVuO9XAu=(E
zZPBs`tth4w#dPC{`Buc~hhy~78LSGC;XZ^JfA~DLThHw8J3&_-aGsjn=9zEvSdrTl
z?-HuBupKmha9%pQ8iQi}mWwgqu%=5ld6;&5mdx!kO0RQc_yex@J;==^k1^YRl1_XK
zF)c=>PiFQ}88LRdtgfxFx|+~_eTvz+dFGcFnL9Ge^jwdgHDoEIgPeTiQ=BRRJY^X3
zC>4%A1V8ml5ikCejBkJAWd_*|tfWL{iv9E|H}}6w(wXyBMd`Lt%+iw5#lvqz3l3ZC
ztEwPqFR~uAK?^IS`r05=l(RLp0VHEoB2*&Zl9>o`4uivy5=YYv(i?0IUty;GG~@9q
zuYCUve*C9DLuW?l?`X;Fmms$!=wn^YGTa(N+%hCBZ&P*S`WBCVw#VM4vb!SeZ8%0l
zL4$C=^0lim2eqNFs<>;D1m8kFSNAs(#hPF@Br#T6-mEzA_$&r%A|mT=8pYC}o5W1F
z5>75goH!nV0qcY)iff98y8$(MfO%?@JXm>O)Q@{$H2I+O)b8f*<Q68D_!BQ`V@*O-
z(4BHA=R_*0cRy8&(+uY_lniS+^x6;8)w4J^WSFnBI(mbf{TE2=6f><ym~TJn7Z1{9
zWcrNlE~+~W-5!J0Rc@}dh~MZk)mvm~d6C8A3rsI`h-V{Q2I(kA6{1+_^`JEkr#>M(
z^I5|m{>Fgc_|;e09bE<)p=xkC<nreKfFu!OW8c0KW@;uWIcvUhOAr%dY*JPmzIqdk
zv52u%ZCkjRnCkac5#@t&s+2H;P|!(IZ{UX4ojQpT=dFR`WQz5{bM%r&F~+dE`Zg~<
z-{a}eJVxdmgI(VvYOz@k3XfJxXmui@AdVQNefD;@xVHKR^E<O#d1ILyZ>w*g^I$+=
zD<w#s!lsj*ZZH(p!$|3RFa|`_6N0V5TRoXJs_NTM<MTKoiHJ??t2PtSj$+zT%#rDc
z$BxCsZ39_~W?8USzl+GGyFTY1RAbqD?CxReauT^eCXx4#r}i%EZMl;{s3EcmQ4ZF2
zaB8Z&0B3;Ar$nigiCCTmYEW{}%+I`}L(iU}o1Dhw1BTg6R>!ZhGJKA<nP#r_D0A&+
z=tajtTBM9frH{&pOh#<&?XbObjY}6g^m?;QP0up7Jj?X_6jL)T<`*r?Ct%?y>~3fL
zwg24;-+%5^NLI+*5OqRirnt2A_edF%#EU^TWkVYpSG+aT^0Fz@Dz~6wB8+WgY+RCR
zD@DFE;srfb!d2iVwGbTfHrD<*V(+9&1ZCBxh*(q|aWum)U1ekVJV&}eMV4=K@!}6i
zUB=^2KE_-(s?woqLIBM(_V>5Adh;f$>sQ&^U&XnM?VSxioqU1u$UBBav6S*CshI=Z
z$`xOP1EJTGQY<;-H1#H(5s~R)ZS31pF<3D~5)qk*#Kg2rM9W$d8*`+W@W?_;V!|;@
z$7E@W8uPK^sc{#hrF&Pg>FphK9~_?Ay#lqmNX2;yM5s=TNr)pqL>Dt6%|~QTJmFLX
z)tYmKvnV+#QHWy60?;{(iRmOK=_JQcO&RA~tc}lebMPW9nPaB)5Hrcc^y1S*W}3|8
zqzuUIkc=T)dt0n;SuS5~)9p;tZg+^2m^hBfQ(<#sz$jZmTC0rHU0m+yM8{a!`5Jra
zWjfuXVaX7c0AtDutpK#Pw<{9QUo%)D>w!*;sog!p0>SwCT9y)22y!3<MQSanQHu+e
zn~|tIHX?qB;7x;b+U-TQ`ahr(Ezyh5lDQqOUVV|Bt!+-7I?4R<G}ajQcE{}Q?6SMN
z$@cCR`~5Ytd<)D7V<56!B9mZkOg0YIN>-cU*+vfdtf)5q^Qt(Ex(l)#dU_SMR=!#@
z-mKHMOH#HqmRKyYjY(`wVk5dy#EF@NbF&eNc&jWO=djnu<x&&ef6RDl@A5P5hRXK7
z9dtj6JheLoHBY3s6s)O2$gRdZEm+$o(v)%9C(Vc8jGq^2hG>S`9H)7hzvUpY2RhAg
znuaV#gGigUIYB!<Nv=cEe2dNWGApAW5)m;Ionp507*nlB=-Opegt7D)nmv>q23eoM
zuHy14Q@|L9Gkwz09;l;bd#vpKF6-l$=yZ<+o?HN!Vzy=y#I!5^nzX&7%6K7s)rv~Z
z;@ebJiWFI<wRxLJLuBb?OTk5#3~{z3>Wbw4Mxs7h)k=s8v_jmP;@a+SaccG#=|pG9
z*kh;v2CuwwF@P}Su1~H*)Hqaf#AHO)Vwnks0DT7e8>H!D&FZV+WLLLsuP7i=0$6>N
zq)mWpkf$qm6@wB*ev@iVLL@P2{46gLOKc(%8`HKi^W7Flr(%wDE!KGcopT1w6b3nI
zZqZu!(ET@w{D63BcXeIga~_*~?09PLTK1~1C|uFw7=t)Rp~i@eC#*(!moy)e<pXk;
zdSKHWLxxHY<hTH8p08yQ4Jl4O4%hRyB%&otw4w!^W~BKJd)X#iJHH3|+jOEM%(Wk3
zE_sw`dlV%hm6Tk@h#ir-T{1VsWlBtkjy;0v4%c`7F+1rMI-L{2KTa!xti)c7F24P=
z0l>VJDlV4^653H3);H2nY-j;Sh4@`-+&e8s8h$Qmh|usQ#SI~F*`yxMqB&7Ag;U4X
zo!{hm?<@3L50hyh><+m&a&puVC@LMC=BN(Qe8?bOVK2SHD8J6u_zec5p9(mnO}W%W
zJdD&yZc@<XYSmeNQ(9lkN(F{R&1y}s=QIhCjZslABr_3-iI{1(S?;x&ZCkol!#365
zQZolGw`l4YN4eOh<<$evQ+xlQrgsT%(cKUFKKeYhJ9p}oGHoM{ERqN5kg3jS6-AsO
z3PWLMdt^E!a|7~xOqQqNa>x<QaAc@tsQQXU#kXG$hme=;YH?RiqB#$8ZAX^vG0rx*
zK6sw1``@5trkS$G=|yMhB`4{`3$)AvIYa;D`fT-IWqtSp&M3X^In=0sErkdj8@8V<
z@3B_sLQN8QYe63>QD{SLZR=?&g09r0Us6j{FXZ}K_xm+y_(H6&;KCw7%A_x^TJRos
z5#pfLnkTdST;Kmqx}y_JC6Cau%UIJ3?!aSQ-lsplz#zTEFk2&aBb+E=+QdnlBs&RA
zk*5_MMGIbsDigjT&C^B#S50b_TD@|sOW?vkFyg`97|>j?VzI_wcCn4<#cgKWZDx{)
zc2wKG78$W+rb7e+VU#*@l@Gxr@`K>1z5hz>o@_-wx;!=Bl_pYGmn%wS1#3*G*oyUA
z*#4O+Z3q{U&?BZz=2Eh3M4pYv-3S-lEL3AuLc2<iYVQ3pG)J+h<fujg;4<%NrVeY{
zbfc39CviF^b$je)8*Gj)z;KMwB-q|qGTmpaTc{Y?$q8EVtZ)6q|BMpY#D+GskWaNr
zVy-a>hNvWuTAKt=B7j=cU^=L)s^x+60V$4JT9%rL;~Z!v<cK;?K2?X4sIW*Zon}>2
zl6V?xTMWl*><=$urHz$tNWvPUWI&1->l5qEoaf1*7-KM|ORL?YD0<4O4LzV0l|tT7
zc)J~vLRI(Ci>#F5e`AW{As8!I3u)#s7|&H}B}~U{x=~DQgK<GUMNGYON?y4AItxQ#
zm^pIHd*G?@fb-Pe<8^&+ThaU1etytAwRio1Mf{8{jFpU-aK|>~a>0nfIU#orYYbw%
zUNVvhYg)J{!{uXAHzdzTIL%Pa5V8;`9NN^{7vwncpoci$!fIMpb0U^jv_LyrLQ!u-
znD2)<Q;MNY*B--2VCrff@(OI&Oq$Z{QA{fka(%9WF`ZDwC4LiHw5m1^W&vg*m_Zt;
zT$P1f1s0XHP@sBfkWd+ian_%T;&7S-`boIZgGG~S9_TbFA`$J@5j63~$7zny978Jr
zwN&I`(aIN2492u*wc8<SzUnuP1fxtU9$Nj^YUV0oWLUX>cmPxS`x$ey24gIvf%j)K
zk*9h@7GkkXx96Gf%@P4gSh#qT0#jCgg`;n-{ws9`%?&byQAQ;qz8jv}U4hz%%~O;2
z1!{Nc?(uQusolZPC}cr_O>Y9bUPBd-rI56Q>2Ac<#)x#}NMcJA1u0J8hedSB-Iy#N
zk!2&Cj{G7)9O8UiTDGB@A)1HkE%T<18sh@!5gw-j0IVdKI0BtU$^48dY#9~x+s`^B
zAyjJwC51693~huKh6F3^lGkQ!jE!1|iGw4rRGxBD&(Esp9$FdAG~?9E#477SOD)bs
zn6P#5Hwyorw2TWhI3$2`kz0_5#fSBA*Xja*xsZ!aIj54+!8gK?659xCi!4vVC_u{7
zT!P(t;nGorzZ3*FnXq1MwS=pe_PKuTCZ|uGVs0L$=l%TEyDB?O1liay-J2pdF`~|&
zOTlJJY8J^FWLmj{EQfJs$a4#6#5gy%2sZvW@YFu6z~l#>r*=F2=bfAkhuq~t61U5n
zKKLQtfHV^pk3{^!pFD#~!ruOX^KWhN)~lOrZH}?lki>qIl{>+h7KyZoZBDKu@_gtW
zL^Q>@G_<3kJ=H9<qOq^w)X(7vfA7IfLsb$UFS&2sBq$>4HshtPwC=7EmIl%)D>Wew
z6pWxg2$n@9cP(r}t4Kd-Y|gzL$%Unf)&@tuigGHoL}wEO@YYv{&cn4dg6bs9wu+FP
zLOidfU6C|y!i7&+&5ScxB^jGwtgQuKS5;YAdm1f6iH#AmOlysIwGmZ?R!`a9G<@%c
zf5?Tazr#bTU*X)TpXTV&G0r}cvv}Mq8g_Qz>g8QpiER>=QD31+m0?x{Ip+$QQ_@_>
z#s;^QvpY(0*jvT^e8hQbccPrQ-&)a+G*9hLK45K>&AHan#*3=OK%Qkh{pm&Gq{G%`
zMz1r)k9}#1&pvyU^KWhOqn9?gakY=j9Z?)yIsnxeLquddIC5XfWqn*e3UZ*ZXec(O
zntM=F|9$cIQhJZ&IQ5l)2b99#(bc$CzWOv_zDCf6+7Q-aO1Ipk)Q6gKfe_a?Xf;=V
zF%{{ypnGJ5Ad$MKwlqnRT0s^>0m!_)QlS}j`0(HYgq%tV%#`m73=S1nS&&a&2&VAb
zOt4ll*5HCd!5C9!H5A#g>L7`Q(Ky3eWp+NHzblN#KDy6}k~<-3=ZyO;e(?R@=dH_M
zr4>!_&c$zXW91dj9DkP8)gR;7(Id>xw%FRd!P@!;?YNCouX8OoEkzX=a!M6nt>sS0
zoRB$#8ynJ{oc&RXlkROU^!pTM`~mRP-hHkn_h-g-Z$RzA;;FscdfT(>-9)0KDZ@jO
zmZjV6FdRahz&Onrtt&Q)c<9liJo4BQH*f6nqgU5B|K>J>eMhThiDD_kMvPjlNr-LR
zFBx1$mW_QCr&+mGHJYQY*s2y4oeTP(%x_i2mCmu=1=cmv%cZQ=yn?=<b6AsLNJ__v
zg0L$l4q|v)stgKn)6yTV>Ex^RkO!@*#UcSp#GvX^s<d?Dh??OePHR4qe(50MrT2cL
z>cXtC_`!Lp%bes}7D9YaX>r)dh8zh0EGEoPoqFwUs|BNxa`EjATCqjX%+sAwOl--=
z9=zK<Mbz^0D{u1h8^1v(Ud9+9juKq%c<bWtaqZ@F9G(9hz4i>_;RXxcW1-qJsMd6~
zW!j(jaZ6RO>VYj+$W+KuOFp)K-d1{8=|_a8c4y?<JDS5A`5?kv9zalgFO-g3eZb}X
z$c5COnwxMjbT)ol>bIJHh-`x0_ufthz~bT@U-^YOcD~f-&DS@1^R;a@R!0~S;v~YL
z<W5myA3$s&vW`4Y$=!%NEE}ArVdmy5wqmPV03Vu{7rgh;sYUYD17QNF6`N5nnM$w{
zdqc@m@L$-1CuJ6BVUgtR!=-60QX{=;u+J`8swIOraM{FEX<gU=Qd;uK%A_qVkj@jG
zy;Fxzb26m>-JxP@*_q9FX(LrCmbDJVRyhGh(Ih}FwA#vOpuF??4Zi#0e*p-e+xv4I
zKlV7CS;x{bORMeM%a@*8=liexI)WjJLaG-QV-woR4B~P&H{PUgdK_DPD1f`xmMl_b
zy#{b|Xt^|S>Swf>6UJG@cqn9<L0k4?$5VS(P?Nj!W_!<D(T@#J?XbtnBpaQHM9+E!
z<S#y_b;le<)L^Z@aEHU3;ZTX9HlO+INj~|Rqg=bP!;fBB=kobo216xDB5c%jq%aZ_
z(GK&uG*ojbxl1cx(;BdqiwCW-(`#<JGy^}3_zhmM+z^Se5@Sr8s1&`oYmT?l)P<Je
zEvACca4}Yv-9^PDn800gxS*re^0f(3`4Vl#jSk1d_*AQ4HlS+CSikE1xyH@B8u3@J
z*}DSg<e4E41YH~X8qnoJyXzS28s2*KGS9vIU$M7;0};bFpZhO)==6_q_UO;Dzjllx
z$Apd5A>aG{-(@)1rj^WknOrfZ2zEqK9Fv$1bG_pviKnDk6P2P?t*3ewk*{IimMeaF
z;Dpo(qp`5NlQSIWNPF^}{5bH`Zu8h+LnV!Dkb6$h{W$Q{ZbJZ^d_9e*aj6;nxpLU7
z4ZnO7DhVwKpC-tc^4zhr?Jy#oJh8x;vvX{0?(?IU)_L=_E%tYEqDV+uzM9EZ!`R$l
zY)q`}(mBKf-5BRaUbYn~wQ{Bwwu43XKt2Ahu;VethW4yzJ);ncTo879h$PLEQS0EQ
z9-vC0yZ=dfuC-$#rDeIR1riq~k!9#`Fu7Fqr*Fyf2UIMgISy|uAmV%lSH3rbvq(J)
z!gz@oLe3~?P;Jn=hFNFuv(wzro_6%Nh1XuX$aAm!=L|=E+R2<3<`Z%L(s#MB`U6fM
z`6;H(pW^EJb8K#3p`FZ?+u34UZ1E&qD?+C=L%Y@UKpZMX4YgfxS@M-xZFyYW9C8uz
z+>krNIJIo2Lx$t5md|lFJhj`AULQoBn%t@zzK;amcLg>1=<w9uWn<&dwJgkkwBg?`
zhn!3$>uHkV5G;LcC`b18GE|}6>hYzYn&xxQ4!LlCo7Z1k=f>4xnDtn!4bBy+fHx(y
zCLvM{94^02%?qofqCHg&^R|3)ULQ;<eFarH<_1}l4PnT(>s@t?uj;Bn_vA;awKv<0
zeUe5ps+Mh7SiO`WtVDtOQ2?Ij4q7zGik#Pzx(p<*sx@(qg@j*pv`SIEV0@LE30lk`
z!{^YOf!%FC(`wJ=jJ7PV|L_9eefh65P6xE&8B{Y22`WOTJ&U@O^Vh!VTXfr^)1F5H
zfO=pH{};hZM6W$duQOMyK}t!6N|nIl3g_Jr{+tIHnh_y)rUbWf9^*72bz0pVCWEj)
zHas<%7%9}JiROd!V|$SKH1F?clyi}ybx>DP3dDrEtyUyiA&Pu(rLmBuem>U>7xDR+
zprm8Rc;twqgvXya$`em6apT4=ul;C~i*N7J-_MC-OB7pQ!?@skW&n+_cph35BuLI>
zI31%d^VOZWCc;XQLT^e@zZi=(ahSKYFj3b7gw$KmTEbLgFjb>{7=k}rR!fP}2F5o|
z?y%kTbO*0KaOI3R4i~V+1Wm0q#?KdnSY9w;4jBC6NC^JqzIt>;fbb~H@&s^Py*S|9
zIXH4w8SG`;yb$sB>u>PG*Z(G2p3{!!P$eXE1$qo1(xD~(=M^MbOB`+v1`}>PB8E<D
zhHh)N$?>ZNy=o<s54&p*vQGWR)`@s1c0#6>G>Z{U$Q|YD`Eb1x<wN)xavv);k&ir2
z?M~)um1RvmTcFr9YS?0FGay(!&Ee%2FR`;d;P{DoPM?~m+il@;Nb@ZCg;lmQp8nwp
znR~k#2rSIc@JD`bj{Z*!c<Ze#-gtG3wHqS@L#t&mHe9r&;YuJ0s85zcI)Rv*2T!y-
z&@U=Nuar3j9vlQOnUVk$MSJBrUZ$dXXyB8To@!Ffu>_3xKw_x`qt#SLY)P4+ykP{;
z48wELW`upEpY^ul68!EYs5<=SR;t`m0OP}%#e|rcyzeP6VgB{z8_#oU`IE#Zp}!4p
zy#6vjeCuzbPH067fDcwFW{duH*s_)NwQgwRu^!aK5Zi>vc8H@6v5j#-yjC%RD?mH!
z*CKRUMQ~1VR>;+o<%Use8K#c0=Cr~Tvbw>%$8-LH<Ec%|)!ucnaIcmJ_X5-&7@pcK
zRL&eU+4R?_qc+yAdb`>kIEpQso7-Htu!=Rp*5*DJ-&y78iCIpcnrC5t8dXTsJhWxa
z*IsN>M<d5zkdwqMKK;q#eEL(%T)nc(t1oYI@tu9rzN3{`OysqRB^5;i*omi77)^p}
zP~b=vl!%%Z(pwkV;L2(|(1|U9teEH26RDb?rPTgkJ1?XbTC5%loVc1{xReA{#f2?t
z^UM+{(yxp^@?uNTya_p`MdEyEhblz?bvQ28d(NrzpqeBzT)F%Pzx#WCgSpNl><_MS
zdF6)~ZDFItZ+q!rj0s>?<T->;=P(!a83o=ACAJAs)CzpS$jhz@7m(sTOdLZ3bI;Vr
zxB?Ep*f983G&2%rYzgC`Fm@S<RPC#LBzS6fX<IJx0ck}=4$x-qSD5h!%~QJ_sCnZ-
zznaVP9Cgve%&4grk}_PykR*P~mu4B4&aZIg@+wP9)0{cI%;M5CNgR=;K>{QV%2yf4
zlIM=i4Tm*w^vFDCesP}d-F;qrb(1$=-C=7zr`5LDD5OI<N_Bzn9_zmQzUrv0GRq8A
zDO2MMP!n&I860w@o`hV)^r|#z9N~C4SKEr#Dmk67cdo*IU1+VetlFx^IV=FAi02EV
z0MUlJ!0Sw<s;Y%r3cVlXtHwc^l@i+-u3USSOZpr_LML8Aq6iHYR^=#cYhg4Vh>iHR
z-P#V3Z4-sy=z`x^=JFX+J63*KAc#*NESFAN0$Nd#7N!9XAy*-FV4Y!{w;8yIRMSwk
zeoT34ayQN;AC#o(Bgs>{eQ8|?sq-wa$ftE?pBB}YA<uGV=ekVIcG%k*(rH_)6{5(K
zPjBAXVdds7GqWvDoLJ<<i3Pfy7Fq7dGS{${*6?$!^}pNOOWE5M+MNzR{^LD9_xUkz
zzrD+MzPZ6@m=jrWwV|}s!K?1WA=DDmrJSLavouUC*<Gr_lv<E;!x}qO4z8%s#2ZaI
zt%UE&M7mR5IZ%neD^toMDZWxP97rz_Y91pM*|h*X3Av_%`uUsYs9G%GG^L%)Bg}=@
z7V=Vy_a53z-;PVD#Dd<}B;Msj?8LmVqLwI90e`8SC^~Zq+ulmb<qCajttJlPTjV07
zYRI(3C>Js}_U~G1t?0*vr*=2p+6N}7`Y7?#?f}$ETkFuqNkMw8qKFQ(=gxt_^2INm
z<43Pt<L32U^2`y(24f&eEGX>lj(F`ySGag_g`>w8ICXr1nb{tykmp&IhbfgWwFfwS
zo7&H@k>Rt?F7nW$J%07SzCxPi<-D$@?ymU=NsXX;kd<Gr+N$s6VCOwC(-EymvBreP
z(z()$O=~U~I%%vRu9`VEn0BUiSesHTk;5)bSCDLiJyP{NzCcYdCi4pwym4sp(|pTm
zYFVeIOzeuH#JeP$By3p=$egsQo&*?ETNV_AWvT6st2We4Za2eLIL9E)SC7s`q?uum
zx?sU>ZezUoVTT#Zd!DD=D^R;*VAFS#RJ~`O+WQMLz8B=%cjMxfo?B?mE#i=*j_^yK
zIg+H!m%jKYTid(5{q`DHFK;mzq$E*96bUvm#8|Rax$w>kS1xX_v^>qJQwuCEO%a)h
zEX~QC!x%y8nE?Ve_7%d#w^B}>YxCnjy~Njk^Cs<%DT93{B}L7#LS-{#sH(L3{AcpS
zQlU9Rs}o_RhNqz_(HiZefoNJ+bVxZTlhQTAP|LC}{n#Y9V3eTWNREoa0_BhisR&lu
zsElw%F)j`p*wE^VDWSzzWg+ju78=^nj%qVTuuk15!<nVJMx>T-#zgi*aV(uSXvF1G
z$BE*EKxQ^LXGopUPZd8jlm|4-_+Bpw-n(A(j%|x>9rpEMgc;urPwn>duiF!h3qLP!
zU1P+Qw5`hH%Z8KEQ!$M7ZCHOVr`ww5v!9ygiN^+9y1dS%OB?L&jEG}PD>fJ-w2Z+y
z$Ia_o+`O^H^jw=0#}_$%Y>rN+MV{wAfLNL|BLSk=uzDls)TuV@t_>DRhs0mhkDtiI
z(n2NxM;aBWAmzn-yBma<TF6NKXKSUityakHkZZFp2rpi%)^~puh^jaD^v)P{oq;xQ
zHemo7nFQxrfhJSQnM_G}De@eWunm>wjl2LYEgI*#(WEpMDOv}7tyPdk<t9>6yUP(|
zVa6GrIS<g8i?4{Ypc@_KE+|~g2W}E6heZwE7xL}Bp^8Lz&nEeJ@zn05Ty<fzW1VNd
z*UJ!X*z!>2YATG!8KV(IHsSF{PjT+-GS_czbM@*bo11+!ha|QbV@O(_!N0pb<kj^n
zT)eo-vEws5eD(-Yl+?IzMJ1r6b&gX@t7GWzx!Q$WRcDj)m_|shO5;LSkwZ;IE7MIm
zWKpio3%#*b(MF!r!9HN(&&!`t>N*<pG(T*26B(aUYiTE{Q}q+A$o2x=Bn_2Xk@H}~
zj4g203KFrHMwFh^D_=P<xM*yQ3oG<ORbWI890i{bVW{7;{Px&S9}7_P2AF=4FwXMw
zJotF>)b1Syyg#kzN1CU0hnt{)Qf`7O;Q_ARqEt81IP!yKmqYGya&?UNb3`nsk00Ue
z=|wiT_PBUyjhi?2!tmc<tq@0sI5Om!<HGqhwzm2_``JgE$w{hJoTmy|s$P&@@A7KG
zNl|G?sS3Lxtu=jBP(dM$qLS`Ny`l<j+r+U|q~ykGjhySs?1Rb2*Zp@(-`Xm7Kx86)
zxIT$874XRfSRVBE4lJ|?8%>wTt^q_+qwbV90W(pz3AF@=12m{|5-8OIqoM?RKLQs7
z`GtvQVH8lm1r(a&-1(VhE+z>44a02gb+%$YhCH=**O}k@_`TaA>W3X>{Qh`q@Ad)v
zxlTrwrM?<cSDGB6eiK;?$VCNfg$ozg+1%Xa_|X}bkIWEB%t-xGV4S9q3NyWFKKtou
zb{`vX<?<$1FK@BGJ0h}%q~)sv+e+Bn9I&>&%kg9Lq<L0eh{b@saPV+V75<^8g3zRA
zlog3KySVZqFVabBDuc4=EA|o-0l}pLLo0%_%3&_LP2<KYqOT5fa_GEwa=|0F0<}YA
zLZ;>dBGjt9f-Vw3!!+x`^1TQL7cljOQUS^uq*2AfMMbIwQ}}yls@8MzO^SGz52Juu
zoEnDt7!?<`sdvd!d%vLef$`LCcU|B2Fqa3Fr*>~at)eDnq*+Q5g^M;Ihic74Q9bu;
ze}BkJFJDHpoU4~tnVRWv>eLZVo|vQE@m^iI%Sm%bHh^~2=84Bn@bI}K+_<^Pl`ETU
zZH`bC;s`YN9&BQQBY2Hopbfod4JeG%=0Z}VLNuEvZ7e`)QFGKYWUE$hvTxKnML{P1
zSxMg2dOSdx)?UAHP$Tq~#IH#}Q>iT&ZZ*|00Z3fAWT;nX)W{%*4cv`LeOg!3DarxR
zY@Bf_b?5L}RXQQkr3!^nyyu#$*lvw^r37k>I&cQ^97b7MleZ}kT9`5S5!CelEDt_F
zQ2PKV9d}c<OE4hJ@|?&@NI2J!93{0}N&l5*IXI==wy0WmcSgMO@+B@^T;as21<ssa
zpx0}Y=bqY;J0%@>PqI@dmN|W9(JK}%ZE)kpE;9>lmXA!6=dQu$D#5CBgqYZ5mNRm#
zcxR2!r9u`}w5@f!ZY^bB+93GWDzSRC*C^p?|E5+&X+yP883kyg{H#E+$@UNqtY&LJ
zyT+;rpN$-<*VmG7MngI$4I3t@iS;><#8p`xRLyK<D&BZ^G|^5<i@f5HSNBK_EvqL2
ztCKJ)5OM^kep8(0S>=g0DS&@q!i?_~Pwj)0RNWI$doXxvcX~3IV4<Do;{Xbw1udBJ
zS_QsjS<cK{LejE~h8aoA(n>thG#%%>^~QBBURve&u{qA3USxK*3mC>^sPj@P#xOHI
z#b-Y~&Hm#f;>ZUJdtfW*1NCJ^HLI_5jWuTkIpou;TYH=O1vxQ?YtTcqF&}B@6lH?@
zSCe^B5Pfw5fC_qpO07t%@=2SHA=IcJhZPahkoZbXhpLVCuCm{5tVM#WZ4rFaoa-H|
zs2WRv1M1=cZLTPs3sCl=eOKlsNM%nhrc@^Qt!W{vs>r&zgS4pF4)MHruz70l7t|(a
z-uE#u`F?@g2hCG^*E^gTl$<o*_ryq@X#2{$v%@(hF)^Qe_B7xB-W7&}F>!2(W8+hi
zY>dltF21wIl}no}E%!KeYM!G<=ZKPs@z`_M#;Id879ZW0sn=N6FIKH2OrpiWK1ir0
z-+!nut4*rh;$xFqK6EpqprSo!37#|=Shb8!-#+;w><|m<0&r_Br!@QOrog*)oV7WG
zYVg^L7FVcmdbO+utEx=O_Ownm*4nnY2u3dHB&GJVrkgDQxj}`|GK{4FuR1@vp4{$g
znv24pO=?sd37Mk4WANZMO4E>2G1(e_{CH~e!8zz2=4JOW;HkX}zekLpd5rTttoUSP
zt#1$2Q5&l;8ab90=J}&v>2c-CCYLX5vb{a@`p?L>e@WsE2Uo6dbL09ZbMrk;pI+wp
zi8<Qsge-UDxz~}FGoru?&_;8lfhSevcS=K;sRvG^$%>?=t~#J9C@Qn^HHc}Lx;1K+
zBJEr?RBV)5(30#>_kpa@Wu(>;8mX$vvN%<3ym}6_f)%;7;iRWD1n5$)U<1&Yuwkt}
zMN@8OkqHi<)=0y}@p5{=9$gPKz!hoP)LcjkU1;5IU7a7LN?}0hBxKgYARPvGU3dG`
zrjH~~?KbLzTa#$-1+bYzoE_eaNu=CEP`k4=^d0HoZgDbrUYcc??liby1wd#Z=GNH>
zqhW@K<=mO0oH?_=%E~SmE^e@Ta|d-UaMy%5@s1jMJ0o6s=?d?>bCcsI<~V(Nk?E-}
zc@9~Ym!*hk{i3g3T-sEGQk&iAAtc?pV(Y*lNu`k)Pz|x9VSQdHx2j=Q@%t)xxCW3R
zXu94`Hp?Zc*%pPWOKO!_<KJm>o;4x)(gyHTRzQ>Vk+M~7Y&L4Lt%iGxHt!Qo%MT<_
zxV>hgMwe-*|D|pXS%+m$*fr`6npC}$NgmV|HV|@irwsFcC4ff{C+a?cCXsilR=Opq
z-9N3U;ocErdB6z1w|^c-hOvgd;d-cWj1Mg?98fdIXqbnMoNKf${r(sc;mFbg$B)gi
zy0*jl^Q)}f++{pclAu0_B7X{`ql|anyvgN@8yq<{%gK`qEH3u2M5Jks(-2QrM#V{U
z8`-${>*HlT<V3Cjt8kSqdnRpG9Oay8f@S~{U4jWNBPvbNx=e~i52NZ<peBXOtm?s^
zRimpM07%!s;0pev$(JkK^QGjSRjr-W!Ch|A;+0gEDsWk9Gs+TA>$4@*a^X@@W~%nu
zla9q3gKFSGs(2ooMq~~~*&f!!|CEt$<^BgI%LC6-yG!!zZRZiy_fgzpZ?sCDWmu7t
zL<x}Pj=lbvBgKU!lx%rxO%Sf9$Vix*o#ENf&#<?<&*iI|T)nczpg$&#3{hk;R)~#v
z0=aT&lPi}uSX}CH`t%Y<muE=gm^95Qsgc%cCx?JVwWuuJBo0W+T~oU$Qnh5Nbq9~?
ziftUHGH;bKPO#KODm4vfbDmbU?^*&&Ie!v4(A4Q98CM%yh|2p%Zq>q6)vHV@IHcn3
zHT(i5HUnB)R+x$B*G6?%*NN74s#+7lH=MvUWTqC|QmtsnYCvLA2m7OajEyE{h4+Yj
z`#|y3<XuNg_b`4>o4hCPCiL_H=BeEV)QXcnY4_OQ+$3{*SZOnIJC)}daP!74PkdsL
z;YhK@)OyAM5y6=wOC8x5y4@b1dS;r(A3w^aD{EZ3u*LTFh^Q2}3rXxRjE&Vj)>e1v
zO|?0FdWnb6E(aNvHiqu1G-g&(T5{hyW=FO1ZwtXujX`*&?UY(2BxN+7)RWc&r>_ho
zp$>3br^OwpA1lDqns{C&D#WUsD=+FIGiO5TRBAI-CfYV_9IK|L^bm`)Mg{9ia5G|p
znYSD$LMMyUiZ@rw!l-%C<ticFD!6@UwN%LQmg&~C7-bpz*%nc&eL%DEap0-l8K}u!
z4bI-PgYIE(Uhaga_MS~5?>DGTyn}FIC+!Zybc@~b4cgIEl{M;e;#fHU<_0%!Y%?<(
zmqTb{4m!&k115qzckJ(H;9?$m=p<kM^5Z=Fg)=N1nIg>`qfu6FIpf&UZY7KcDKGxu
zBCox14Qp*!`1zCD<#i@iU6*((v&V@P0zG&f<gl5oR*6$ZNu!g`R^zdGPc}y*XRfT$
z4(Uo|q780<w$z{EKxKMxyD2pq-QgiU^(3(a=Y}>CSqlfXK*^|NVUw~8W#akDRI27-
zsJrHB-9<Ot9JI7tY7s{X!_k0Yx<`_<Z;dJMnWuISKuz8+sL5?WO(v-2_X^m|oq^he
zViGC0{h)3KYKI@5C`k~Tv%dElEz|Ki@LHrL<*0+-{jCd}e`kYE$Ixm=CGZrEuBH&j
z2P%%SK7DD>Pf16@$zx0W#FrlBr+(^DPMw=4M;Qz=@^F<{W9W2ZZmw*R<yoVx^b#gh
z<EKd@&-1Wbjvh#EpYUFrXrB%{$#imPJ;9kPC@MPPmeTkqa>(af2ZLIRS|Ml?P@7VF
z4gg@q(2>R_S8KDf$*)o&Q2v>eyhYVw*Q*ELpUMOvHqA*JS)z@fsin@=ISr1;hB)pJ
zCzjpOE~C6p(w;i>9KNG-{(bY*-Yfa`PC)JUV=nn19CSZcJhj`to^Z;VoX*q?H+R3!
z>7_qLB3%Y<r@X5gql^YQzw-~?=H!_!PkrhbXU;ByfzdE8Q>B`8ijV~mLV<@vALKGK
zGt1{bGtJ(keJ)<w;Of;a2KyP-n!s%e`I#XAMa0W(v=-1(aIw%@W2v<UrjX<`Hlha`
zMAgIHIGQAlaB)kMJ1Mowtez!W4??FdI+&1T>E!xCE2oc=k5_9KWwHR2X3JYjtS07<
zRef2@o|q`b>cCZ3Zd5i)&5O8RC3<kLZ(FsoENRxxT7sMyMKq?<>0%?;8m^GK0dd^B
zi~00NjHh->0F=9Bd)y7M>ARR1eROzgw-0ze{AB3P%(HR*9oBbVquV>j(Cz!XDxl7%
zklR?edTF04m*3*p$s0WO)DmaU&eQ28jK`jvCXM5v&8iq>JWkOZ;;6$@Pn_YgN0zv;
zy2G`r+pMe(ID2BAD2hq5tgHl!yS$AiF6N2PPMg!7gXfdh&3Cmrp`@n8yv5Yc(_)Gl
zTgCOOC$Tp^!o&KtT9$-RDJ`Vd_7+P95uMnwN|9q#wSzio8D4u|1tmi#ojGco(nf74
z4FYaMR@RsYQrAk=tjueRiu$g40w^_b`9uXHJ!Y3;%r30#yp32PYE73ixd$`M_&xH}
z?veQYJyvY;K!q9K3!d7$g+&yPk2(n^ZgX|#n>^e)g+Xu{lGnp#Pz}V1=e@05?{n?S
zd1mLY@c2{9JpRNHrf1ruWBg{b<^s_ij|*bKIY+<muqNT$>0_KbyGVaOBen@?numfd
zP)=OY^3^WBS_MEurCBphJY?XmHOrmGXti?KEFVG9>XtbRTFr>UB0z%wq${Z<&2*&#
zY;=NtTY0R}@Mcrhnw^qX#b&u&tu1au8@#-bHy>gYYt^APqaYepWz%_&GNMImVKQ>C
zqG;Z_Chf#4|F{D;nSv0QwOBkk$GN8rul!cV>flv6omtcrO}F9W%Tv4C?(ThSMc)rc
z<-z2s-BGO?+P|6kW31nNmHF-~#L;ooX4EN~>Z+nSii9|c=<jAc_Xk&a^~F^ldTgG@
zA75r^c^c<nJkCqkTPZ7%N`xIY`|R(hfM9KlG;<+rxtKbeFsqT0zMy43gOp~JWk^dQ
zF;cC$yVex)<poo_8K^YW2|B?FGg2jVsVlf_RlijLV=>QbQZ1AN%;7^%xuTM**@ZXx
z6$d2iTHn~p!40u+i&%&fz-jc%QpPaWHMr&ghfwMUl4VSl;DYIZ)U2OO2xckMyToFN
z=(QL5{Lf7@Sk1Y%dX=5=W#*P2Zus$i{CR5fK^aYcJb7yGR;?8kLTkE%*|c2P_(wdl
z@E6E)2eGMnmxT*DBzdDCR%yjv2l~<rEBxq{HBO(I;qgx_bMoXItyaW%l#>Vbg48Ow
zNg=yacWB|7=T&e@eQ+*y7Z7S2z>+Mgw_f>6v&xfOdSX;Z%9x1_q3Qwm?@IKp%}|#B
z7!%s0x)0C+5Nq&&OO9O)JXH>uk1(mu5S{RWn_zkzGIJE_$x}69y*A>ws;alj;A`4M
zHCpAMyuc94JZBzRBJHRA@b|~8^j~0{@6nq%Q5iFQ;3knDET!Xa+w6PNihf*pYIg>f
zb#0_$?$`-#Tzr-5dtc-9+%K}9ZXh-eCX@wh-T4zXECz6jF@{#h=SH4?dy9A8*<ks|
zG>?B`iH9Frpx0}WrI3!Z(&0iT474Z1^t1##Js{nw(->qznV_|ywvkG8ptV$YnfR&A
z+1kVzpj8tob-k8oNsaI>-P*XI>+i3kUmRu^M59`hy78Ib;%w4dD_)nL)!N3&9H6;j
zQJr`NstqJ^W#wuP9^uAEQDmi>hTWY`CVz!v50+TwSeRZWALe}RH&z+!?sI+r515)c
zify$%#yqvVWlY>NcaQrGYWK%a?asrUZx3o^<B<ppM;>DB`uFI?ODxQMiJkEZq6TAv
ze|~Y2yXt*7S6sIt-vGnL>VQAEd5M>PxWdDa&hf}Yi!3cop}=_LLtMlhG&`ImyE@lo
zzQZA&W=dlPsdWIT^T4!f^RzzSl0)2hi$9mcJ}zxu?31O?Bx$22##hyYdxgWyCnuK?
z2RLyYVlAYH<Q3?I6l>yEBK45y>I10q3YuD0Rh@|G(~0W0Ho0?(ip5GyVy1~rht0hW
zF5O%wPldhl%WU<}bN19Plp)J<=yma7`l)eGC>{3-)ZV+K>H!He{-8mvxJo;-Q_STj
zxV-k8n8+~KdzS6dI!+zNxYDji>mU=7*#$@L{1t3th>c-5NO|%5E4=pV2B%KW@W^BH
zoH{j4JBrE1jx=)(3vSgilCun((MhXqno=Xxni=9mYp-P<9Oe8?#Z3&TE4KgSNn6RC
zDm|n~mFubMYRU*{w3yP^-4;Q|+Q@B{2474YfKvpoPY%b6_uKG9gIj1|i?&r8#N4v#
zle&vY4M=nK!~6p|t1{uP<Z6O?sohw7ioFnHG$Kuh^s`NdqdmxSI#JBE&95^(bDCCX
z_V8TQdj@JBl%LxBT@>6yKenc;)_n%G4}_=o-axGm3cZCzz;fZ{KjirQ7Dr~k!hXKZ
z*bRKRuGoh0qvDX@gj!s)#WvHJ;JAx&@xm4tE^IQt(Bk2T7dUrzp1JvMZP}pZY^SJ%
zvfR;Nrq;Z9>RVB*DYwg3R|-oZsf$7;K96Fd5yU>CwR)?{6?GaakcKg&YtU4ieV87?
z+;3WGH(WKU;b9HD>RAMpKD8bUA!THpHfCOB9s?XYlWVrHlRMH$MTVB~dXuv{Q-3dk
zgIEOYhzfb0F>-rkZivfMG|TANX|8PjE@QXJ$&>%g0n^P7I?VWf^VIH$swMJ4&^@?K
z-~G|!sU1cQc{e^yZ($xAM_j$}P5PsCPA~i-v0Y{_y$O<IO&cR|n8kQk)zXH$oY6R(
zGpOc>2vO`Uezv#9Jonw}y!g^8r%uoD$RqO{JKCe2M8Q@(C(V^^1bh2qKWCGJ&K$)Z
z$)UAbP9Y4fQ$DmNld9+xb>oAw>eJ?Oq4?DUb@8|w?_R59cxrTs$-$sZP%D~6=!9eK
zL|fhXu8ChoR#qe3s!5Wq+%_n|{;<eFZM5tn90<2L5J)36bw{zOE|w~qk>-8UJjJ;*
z$PpYZ(_?l2J8bR0#)-3E#3rqYbghp&PwkLmN4X_)?|s@9$;X<f_U@o|`17=<r#YTH
z!`k(?c<uUs&dK?oXR-G=cJnocZpVWgF$Q0eNodXd3Q<Gil`C^7{RQH%))2=Q=Y;cb
zZgKwYUFH`O&Yhj+^yxWf=UU8mBer%&y#3}baZ~}%AxiIw>C&XYvhqD^Y&#2jMs1T<
z&jTo><y!l9S^$}=EX(V|GI5P5S7j1;z?$*EJWUVk;mbhlYO!#bbWA2_9NL_}Y2~O<
zJVxY@y+mCwFLh4fA>#T&?4mp+D942_)f}he%7jyeSQ0k&zt6_b^DG^Cir(DG+Fb3Q
zLY|s@U@27}Kc3qAeIDD2IePYKcGj-(&g!qSF!%wF9QkLNmWSCK-@xe*OpIuRVEr(<
z9@}1ym#g_f?zEIf#Vvo?Zf}iwVSSaCU)g41u}!ZRv9>y<-&dkYaJeh<MawEtD~{Zu
z*4lL-DZF$FVk;Wd1bRR-Sm)xa3miOC=^hWy_|!)9A9a<&0Y-;}Sz8myCgoRB7;2Uk
zpPSfZ)?i$8B7Z@v*;+01xf#|~*P>~&y41#YqXEkzRcou{<SxT$<|{Lo2X~P0{7x}y
zF}bqY{}x;Oud{gcNfwShbqmhg|DUIJe_PRy2~X{oi-NnE7m6~we1h)O0_!X1dFk?h
z#*vxNvpDrLWMbIQSI8M*G)6)Sxo=Bdu;Hm&^fZJ)VXh`v>wVi)m6aQPoO<_<$eNN4
zQQ8@atEd`vY^YNh$_i1-icz#Q<S#jSB9nI9lR8kZZ8X-DlBi;;CQ4&zQGjF_s;q_c
zh|*Z>O0$*LTdn|_^EaI!sT7)8CLL|jLn_0t<S1r|6aS`suUeZeHWoM4`qzuxGgLEN
zo}rrJ0+>mdJvx_RoWZIk%~sgj`yr!zjpL`j!1Us|T701Sr+}w+dv?YB(u&Ic2el85
zr*_Xlt#<I^ZkuE0o}s_B!PV8@XKm+YPRx9n*{M&`cS8nl6Ol2N7KRv=2&C}d&l}AD
zLTE%7e)~}591$goOz4bUP%oH+Iv~-SbcX}%`vWQL^*p<}R<u@aNo@{SnpdjN<h0R2
z>!0$XpQyI#sq+;#R}aZNp4gh!GgJ==S)PCyWTFLcP%ldN6;pY^h4pYfs!u11PXA+x
z99VY%03yjrL_t(t(?_7J-g0u6lWT_46r8J7k`C3(|CtkPF5vdr9$jE>be^cy=JdI*
z(CW_DDm8OYcxoR$sNLmtb!&W)dj@Q(q#q5Q+IuJ8zPHu$L<n)YKy!5G=4elSj_tK;
zytVb;Gu!_*M`wPHh0YV~>o#MzjcSHSj7Wr<DCm-k_-|Lcc#DC*md+ebL(Y*D6_?iR
zhqOWT(uT8a(@9tB41AT^MzK~UO;SxJD{K)j^U}t+Zo-{R4(1)mL_o405_hKu#r(y4
zZSec*=~vXklC@cRmE1h7yIyMT<+$cttTu0Jww}dLaX582&BOdGMag^+Pq9?d+yh#k
zVbu`PCeL=*9iC@Dy8_m+aO@f8mL9EA<Zm-myD#M12Z^V4TYQo9eFNLi{0!#nU&n!b
zN5uTRH!GEoHBasCmmr6|9$$Hw$S{BG6w`CZ*j~TDJ8OT7`Sw#BoBN~mT4&hL*BHA#
zA~C8lVj{#u7#D($O|dzZKq-*g2+V}&x3G*5&yn+Okg56iPqtKYKq93zk@-Py|7MtQ
zNywENLAT(0<wXi`GZnqq3Tk5$Izhpo3?^>86s?8lG<TqiJ80!y(k^r|-R9sQO{Q(t
zoReK4*jJs1*9%+T09Z~_)aA9;kpnq-?&oR7SrR%#v>2yrY>!@HKf4UpFt_+P3(HTG
zmfv-Q(~nM=@jc|J-4b6^jYNoX-vRi&pZPt**Xw87dum0UzMmHDBgIp@E4s?9+E}So
zHA>WuSUUL_qyB)6wYS;4`Jb^o^%;&#f0<5niaobRrhQBvA$g421Z$HJW9LF8S6q9p
zK`7M;pD!sNBjw!f;5kwoiq|)zMjD2yQutNhDn7Wzm-8<%=tB?5VDP7)Oz1CllEF41
zUZ0$!xyq?i^$_8^9&qg7fRwB_F3lOC%A{YLE2}|QR^u+r#&Qp4p-L-lF4f_1s7o<U
zX}LBLUD9lyLHZWM{5pedg`~5<(vi<GJ$o8kW*F4z93MBH+MRDdZ;vkm&gi|%JP@-{
zOgJ8VP`iV9+WQ1Gd6(JT;omE*ZinM%KE+^no3-_qSlfG*W7A(?Y37TJqiOcj4RY<H
z`0bgAS{M@{>MH*r4ckr$vl}&KCDhb}2G+ij2?2*6c;F9hDy2c7mWbTifmIF&(I-#T
zAb_{Eg#+#o+n=V5_rc9$Gi#x6{wRWKnjBeoQ0`Y7xryq5AeSOds#q(yx;LF31W~QE
z@jg4&F9KAvlG0Le@tkJl`55CIE$NV$S&Yl*kFK$iUSybF$Hv0+?87Y1ewuc7uA0kg
zl^^k7n?$}>N{8I>67pR@O@cMp#`^}guYdj3Kr=EwR2))@<sOVM<GUx{a);#GI~3}_
zE2tf8`2?jiJws>eS$4NqxVH8UR`;Lh*vuE1@BJ8KW7*4Ba5_LUhchwOBz}t;0F4RH
zSmzXDT#a2{(>P9GM#YHNL;t=Q@)tvOZMuFp!<u~ziI*-#{;O$=p|$MHs?{xr{8Agp
z7dA>FHBF}0SR+BM)u=X`1)*qDa@CMU6}C|2dkm@rZE97k#eysOW=``k<8-0j2i2V1
z4Z%6AcIcXU5`i>ZWoP^fd+8NMu1|0J1jmp6B;DzwVZqb<AVlN=2{XR4>*~IcZ{PK?
z-WEnRLoh!CIC5lF-$%vvl!i#PJ)@e2`|>|^Jhgk3fhY~Zb<Xts5>qov>}+1=!p85g
zy7M9@W`Byssn0N!5rcdUbz^ePP))EVMy#z-6AC|W=i}RI29lMDrA|2NN?j#c8>JQI
zj?zeLmwJY2kX1Dt{G|x5QNKV4gf^Y9=`Jm@L#25@P9=JXG`+Ud43(fxDBy*f4pk3$
zg4C2-T6M&({(h;FvBFY9)o(S?Jj~LHW0>RI7*&VWn6`FFNKiMXKYo+7;ad!{>$JNI
z%pH52si}vEl2%QVTP+1d?gtm`qkdi8zW7n{6sLOtPd)X|y&quvD*@QH-$bYPMeLkv
zt~DCtoozlIIG);F@@Xa?D|hKHe;{hE1{_wHT{_P6+;O%xuJXpl-)3g-TO6PLIhMLl
zGGL!ww~oulIG145&)=+x13jX!(3UFkGSEOMBwIBKiHH`yhYe}eq}6o8$U-Z}+%j8%
zrhT?pDLHpF#e0)~RHtf)gw3HI^e7S+teEPLuK`S15bA`CbaEk~jrm$*il<sjzVeCy
zG{w1W;*oxyhUVDZ(q@XbohEmE`s2&2jNfKIyFnDUnVLJx(YY^#R<rJ69FDt@_nszo
zUt7=*pQm>FF_fy2$T&CJk#z4(fWPurct61ACl^age|djrN8S;!pR0iFpFW=2or0R&
z!AUjwuWTeN9y!h2{BgF{FY)Hu-()5}#i_YJ%F*7_?6__E*(SNB<oO6|5^U7Qn8b6+
zN|I}R9(Tw>BTT}p*_mkqPn|?7GLfDh(zZ%~uE?ljYeM)?>D0H3r3SQg&25rzi}tT6
z0n>6LswL%D4=xpoI<z4GEu)AlXAP}AM`66FE-V3DO|Xxjb83dD(2@>qGmU7<XndWO
z{`c7%U&KU8Z{{SY=e|OxyVy9hDhu<8h0Mn`%=n)1)DB)(ii(LvT=vdhw6b3fCEnNa
z;Frzw&;MHb*kk|3B`}{WGJHPDJhk@^YVUCgBDV)%MX_<j;<1OBT|CR?+S|Oc@?SIG
zeuAU3Kf_Y{QTE&p1Gh!)##onPO^YaQ1wLHZ?x`&=C=JU7sR4`>i-q6}tPNnOCz@+B
zumq`vEH||PCa_XmUURmEQUG7)kku{0oAg_)Id4?0XJK_-7r^U;RZ!(zq9yUR615jZ
zw6N90g*MYQ@&y&oLo+JG^hit>YaHo#h0XEH?2RvyGG=P(Bu9^Zk*VopRsI51mF$-R
z=3^FS{6X;44u5ZosF9eQ!KLS)|I6twGj9W%{k;R*&-~0&^7XF+$k#;VPphg<ZgBo-
z;;G#)P@4=~iQ<Um<4-U*{}5YiZ}Zx<|D46{QyiWBG7Ig8*w;PA`8K&5k-G$ITG*(A
zHBqUtRIwF#x86P$m0C%k0H>z%4l8~53+<^iNAg;avkH}5*jxCbr<T7^eAVVy+=@F^
ztLn;X3!3~lrIA)ue{O9^*<A&8MHPt);G<<D?VP7=poT=cbnFsVB1YpCcK5%}?&v&Y
zw@$0Gz})haOwXPrO4<$eLX`t<?_i7117;HWpzzdgSAlx|tP#Eju<|p@!q?v?-J{ry
z=DB&nm|Ue)YTs*6`zZ0$-XEyR9lI|maXaD2siznZ9%gI(9bRAgubAsR#p29Qv6wu}
zK0EZ?rmx`gF~-D1Q3q?2O1&UHe7A^|Gt{cMNeiJ`&`W7mR2#G(^th&Gw-kUzY52ei
z6IMoAfmUfHj(VMI8Qe12Hcm93TGKUX%^s;yJ-KojfEL1Y3ALH0ZA99pV;4!JNA7m$
z4_{+z_!j;2I!Sw$>7{eb%zn8MR4g^#*)3@r!adIYe1AN(_YG<v2v6-6KVQ`3Zmeo}
z;Z8Q9ci4*lngbXNhOb%M-u4Rw)d}<I2ZX0~Z$Rz+P&(f24tIC6!fF7WbUPgBKF#?5
z*WS6t#&KPD{D1D9nSJpkQlczB>L`*dg;MRr@*{3yQ+@zNf_~_SuF#_BrzA$2CIy_J
z2oM)ov5gBPMcV)Y+$2t$rU(K@Y)~K{S|fFA(oJhyifkZ`S<6yvDz+ty5-E!0E_WXH
zo_?6wCm%bzJG&&MIe?!c_jPCfd+t5I^FPHsn7{lM-n#gG^r!Y>XWz%MJ#j1Yya-z@
zK(h_49Y~pgVWc3W6~MfzJea1m9W8GqOI<`vfRN=8ZxvHYt~H0`y0<6*s|O%6a3z7R
zb@Qc)c_i14X7}@|Qj1h+i&>tuRpHM{=U=rwtz0{#CScrDK>k-;MtqAPz!x`z5=hYy
z60#RsFQHI;8?*K_3eI`3X`rwFw=g_#7>Q(GozpNwkf>YMutz9}Iki?qEhro)ZO@Zl
zeggo;$FsVTYK6o%a$;%e@AKP-KKgMI)@{s6Q)Ryrxt|&}gk2l>skO2Fj8@c|Ie%FB
zxKv~1?cdPSFp=pSMmlo?7K`uV!u%v``#gH&4)iB(0f^vo0a`oI%7a#ZW4#oj+@U~~
zjwtvkzNid6u5!&SwQ-?t(m9a;g#UX&_;XNq-9`|SaN%tQ<+@<@;CVKb=lD=7bTEpK
zs|p=l&Z;U|qb~QwR%V&%a$%v=OpY2v!~b*5K?M_Dm5@1Lb|64VP#=2b4kVC-<GhEt
z{3%>odI^i_98$g8F|_jz?A&!2ncf><7>TNm01-@wqQ>V^)Z~#%{Wae)KQ)Aa$UEz&
zMj>89{qr-EmNG50cAtIW)F=Ka2NshJ3J0M(4@y0wn(;G(#P8Kiylwk1apO!P*Zf&(
zp%mX#v7(6r2w{b=01Pvgz|NZw!71*=)yr?=%*;PyAh`!S`tHL(Y7cBUD5`n5o(-*S
zD3yd^CLx4bfkOqAeb4;!AqKPX=P6LV+eYQNH8TYJvk6!Oh6$v4f#MPXugbHme*9h)
zhEbVgz-6Zlpi00<2fD`PYA;uv@s&I{SSvppEsLZspQlM!NKij4k%0umb}r(w^DE@-
zX*gIyPkI-Iw;x7N-;E$yF~Ii`8d1ZWHNK8o7q!h`5=jlt=32V1LYvU8C&0{tBuMbj
zfW|$dO$poN<d_Bk*HzC5a=u1HCay_Hup6*p6pvHk$*g3`KZ7go!Tj8>apv;BpwBvh
zq27D2Ewv9eJQVaiTyFtd6(NKLAp?<P(=RS@bteH=^#_RZ&Qny|j_XoxMIe$$_7QH{
z15CXr;1<20IiD&`_%%)Nx-4Mj?PidHaXI_)g->%Csjb;^GW-3QT<QoY*G?4(fQ23;
z<p3<QV7nKvSo}XM+S9Q43R0;Z*mlDq^!DBa!?bFrbCrt#ViR6t*D2IaBt2blpyV^Y
z7ENeG=*OmkoH%!G?DTDW|NK=U6ZdNEDu32o%&9f{mTRd9(tuqm-+aM2l$A_k_{M{9
zoxQj^JB{hfKSbKP3B$b~MPF(J4m50@hwCkZbP-DXRaC=BLc$Et4qes6DL~NBEd5DO
zEKzOU;rGl-xD4F#A;MjE68`rm8jigTGZBDotH82;kEJSCCs9?=L@5I!joR;I-=@j$
z)humYRUnMPtO!aWBl}^o0qrefsqi}9x6h#9yysUmhxekV_W>AIs_HZ53cj*J%))0I
z>z}K|oLZ}uU1li5OiRzpzxu+dhfn8nEXKwtQei7?M?EI`F_FBN*<lhQ=G2-*I@%Yt
zx{IOi49v8W*uLuk1_pOyZuZxBYxZfRj2keNxf|Ouhv5kW1)hcHEkUUwlxM+^DHui?
zhP0|of&#O0_A@6D^i~S4v|4EwFa`+w?k3D!0N$T=pj82`ts%^GxkW$+LRM-VFR^V@
zu3DBdHs2|Ow5}==s6f<Ikm)fvC=3XgNQpsYWDh_#7K>+bIsYb>-HRa8LSNsl*wKGy
zO(#IPqAAvEZ3-i56mx2kiW;rDG4Ut9(T@S*iHYZHzg;8BCj|g~VD}eqV-v4)i2~h3
z!;IT8iR`YZMOEfsJ*)I@T>neQvmMOOy@kd3X(Z(i3}x;?U;1{Ckwg)T@URSm0U;6)
zK{taT6Oht`5CSCpF@hvy@R%jX+yoM-6mGsdi4S~OVEQE&XHP94zjz+ZfMN9j%7$HB
zgySqgvr~m#s6gOU&EbD(gX<4D@v4@D%T4J70}1Ly0vSknaMb%)u;0XjJq;!onanL1
z7}$$+?{JN1Fl&esXGSf02u3byF{jqxahPBzk8$wlCm(nd$O&L9a$$r2z`(wJSD%$K
z@nCs7x@kDI%>m!Gysd7TU0SQWUa`Sep2pQH?_lBT85p`3gXudk*mD<zxeZ0m!_kWY
z_2Ew?H;e=fGY!-9nK&U0-wcri1X++~0-0?o^b8Z+We->0UB=SFWi00}1@jp)zOcH>
z@YE8Nx9m5Nm$#$33Yt~HUoIH_){=tE%>PEUU{Mb;VgN)y!TAjqmQN$^O~ZqYbmm6%
z_3uF@vlBv!I>Sg2Vy#;jwT<W0A`-QY<kVIXHD)NoNK54vo}WB9`A9Bz3}LsSO%HSN
zx1(bo@WrQy#Df*Lg001=wJ&N>acWVpOVqFu#SBP8VsOW9Y#aI@7Uti<%<M~;$)CWs
z<N*w(??PYVX4vGRsORD8JhZmqdCPEY6GE5}rZ09<S}@HFG+fMITE^@J4bOGKx`5(x
z(5%lcq*w-#38fq;U4&*AI>0_Ob8uef`eW$e`JQvc<*KM43l{YvCHi21U^^EuTYLqJ
z#dl$=t4Q?>VQBm9$YgGWG_AU(^OD=I2!Zc3)4aWvIkip>Gmci&Dt{`$;O_!sdSc>;
z5q2Bea*1wa$LBKMw&YnNIqWk^jSMKejdX-OQ`kUGZT)kWX3G53z}u?czdsN=EwH$7
z9#`hx1lx<~vG!nF<}UQ5MxYH7%X}4{E>;Q^Bm%K8{0vT*!T<Ni?>WvAl(zlMOS#Zc
z5L9ZbD!FD<s-YCXw3;<E+@O8SL{ju2DF=`s3%2_{t`^?Ff_)mcnuC?vhW`G2=<U4~
zW+H{Uxg0ATXv2xxI<sygLOP;b>&?xnp#@HDjRZjpksz(@w{ejUPD~%Mi3mXWVO7n}
z6=mSKoVs*$Y2UzO-;&bIDNiY?G|6qMVa6SUZ#%}RHFKdibAh3D!W0uoF!}~|VPN29
zEa$Iae(o%$=Z+&~4r6=f4)moDL7GEw*n`6bD0VBe)HR^A2N0l?4cA=)>!4wsJs-t@
zh9WO05>)q9>cC3LznUZ^kP$;LU_nAb>3J;Kr|{nLSromCFwGwH4Bm=e{i8@EdurW3
z7*+me%`%DI5w&Y)m~p2#wUr%9%*=*J3Rm0zI&tp7;*lfI8vwlMAd+={=fHtK8`L^^
zT96nFwhz?YdBg_#sjV@mAaoIgLY@J3)MKmFZ_Zj_5LK9i=QvncIFJ0oG_>m?W9>#?
zY9D%&`yh>eIHcg}Wq7&(r5z~kR=NtR_&R0<kgjw9aA}~igh3W8O2ZNvSd;*C5e0V|
zOUv&d@1BFrSCB{yp{IX0GCem2J({TN(G(#v^Y!qZW~+UzZ$USUpW5oe7L}h`o0Z+#
z*TF;v0G?w{ADBFKWVX)CuVcan;J5^is{Q-EbW9qloaYrhA~Ir5t;r%tOBZ^h3#^$k
ze|6>)G<^nV8_W4QEG+y6`Ni`vbP^fs7WAZdqu1IEA^M@1;phTf&O>Pr9&G5q^wNiJ
zJs%e#6BcEVkQtc50KtasT|(ae4VLV8P;f86<03NY8_?5tE7Iv*Fq5gewi+%^xDR)R
z6kgQ2!l`YEVaDC()Yiz>yoA|rIPUz|<jIGRWwR{D$4Nzt{jR+u4YIb+4{DuyQxI+Q
zvo@lw!Kt-x64^CQt)rs0@^R{CT5828<}YJmVH$<}`w-eh(ilW0u?rdV7MOAfl6nAP
zfk_Aan-9)HyHI)=o?e2ZW>K&&qTrrKQO&}zGRXAoLMC$y(&-&R0ibqhR;9PK9Z`!p
zwap=FVO)Ux5qr#hMY40-&rUuv*Gjh5W?w`pYy0Bk(nx>R^Ol3NwwP1vG^f_sj;6^f
z*D9~6)FWEGRaKtCa^W%xOXra<T!iN?gR}`DQZQv20tP?|2;672cKm_@0K-heN)8~C
zxdEy4Fp{bMvUL$^W<gN%;@*;|T`QbgH1O>PaccG8v@*?p>A6?`a^mDePqdn?wcGGT
zK#oR6V0hlrucWZ{YUOfOjXmbnI?kyz%PxfxwRN_tHM0{4p6kMOm*F~jC}l&dqThQe
z1f)np$}}u94Z}=BnpV{u(duGC)ez>UGuE(c-6>8jDpBhKr`E2hbp+|C5j8DklC*Nq
z&g3s1%4V~kKi8o7Yz-|`Me8c02gTIXQD^_&zjz!%9tXL)v8ctIS`?zzayGN>I7C|Y
zJrdP2aV7h3X&R7bFH-5g5EnX^g$&>|?6X@v6yNNe+GZYRyiuH5{d8KP1zCn7=kckj
zqt4XSaS0sNt%{RCTX9rnvsroi?B9+nUHmsGlaiSgHQ{U#-cK#ON#x4wyB$ugQC1h0
zQ^U$3zoBPAhU3)MdX8{2Uc-IXR35@yHNLLe0=(wGYc0R2%)(K{ew>=A3O2je4L*m}
z`xBe^BJIRluQm6x*|m;-?k9!FT-W8)))+a+%*rr(4OcCUPo6k3p3NSY<KstFJId6i
zumR)aBMdMxdtcUC<%N(`nF!J;POVW&P3?1P)QD4SY!cZ%r`G7;I4qD!O^8}p(7MW;
zviz5*`FBB7Rm~J3*SZ;}i}lvJdz@P5;oD}`x*blfQ5OrX%c+HgZ|i?v3t^G+3Nud8
z{d_K$6XWBrbGy3Kwy^n4sYk_`Gv9cNp}ru<5{)LvY)0Rwjd|Y9_8ixnuU+h?w&C{`
zlQv{pD0aT^;xB)9W@_png>7{2u&@EZxEdYJ8K+Nw{d-E=<5H#!X6?1kskI8<(i;1d
zsNh@b0(?smz_(=+?-tM1>R(6mXHV;%3sHzIR9N_yTKF8A=G3SQoEo*c)}0(?Op$SF
zHGgOJOta6h-TCjmaPr~feigL6EojuT9k6Xj#mLCb{aPn}A;{RRwWEW<Y%!;{%Hz-m
zaBAJ4?kU9MH2pb54&Qc<Q@cLk+eQ_4sw38*44INzyRR9=-unjjzghH$v=B$3Mj|?4
zBL+rzYU&^6nAK5cT_7?DHLm&LkdF3EBB=|UT6;hyh2hkw)oi9)qDF0r8nrEI)ZFK=
zLGW!uQKKkKB0DW=)CPRJVl`L@lNel3O8xPF{qn>4k&!G%C2BzEDOF)(l7XBtJNq~9
z4h`LVUI^>=*>5HkR6G3z?Qv?<aZasu_?9{h-%^|KZI~|*YN?f|Sy2nesZqx{wbtR=
z2s#QHa%$1Qw-km`>mYnvi-`$O%A}#x(xWf@;-Q~rvn-!{l5~_x6tS=Yz@$EW_)+t<
z*S`76;Lv?!8kvWba=nTJ$a<XG^#tEi6Xo?5IW=l?i`H>bqb|U=?VJ@-#B06UwMQ+i
z_1YO<bD3-RIJK(J!L!Uk)Ag=CHhJ>lZyi4TZS&b@@A9Hnp$-TeaN)u!Jvy2*PMvz<
zxuL;(Z!(O`-C8>y`37EX&;49!Nz*LSvHDgbT0b?4+)r(-=jasD(YB~H#i>yXYu&8X
zPN)3Ts0)5-v?=F)uKh*2%ICoFOmon5z4@mmPaJuCbo6=S#TWm;>x2doIu``w2pH2J
z+W(dBNSXeO=jA;TWNf&f8p3dDo%T~}=HM6`z^OI9@hPM@w#TVq!#TBU!%r=o+j9GU
zYU_#GHpBH6o|-su|D*oIDMWg%*71z35)%NX<mK6K|72+Jqc<65UFOzwp<um>y~&|6
zwAKC8&}OSt`(FOxkdAg5xSJ8S*iWt1R;g(H)K+<K49_$N4A)zHYU0HGk7l#S<&#ey
z?3k!^I%BKBK!9=eq5WU^jx;i#@w|dd1hZ2}M|+&wR`XM9hf_lrI5o7#sdd~WvKxMC
zXq!_*M>#cgPSgO`GzQFSQHv7m*g#=hDQ<?@`x)is6~JPJhufCt)HaK##hhB_k&f%h
zB(gb9&2IrEov;R_<6iBmsC8j0T8c3MuLFR%Jp0w3Y#;m>gfJcgK+IYZ332UkYE4wR
zHa(|?m{V(MtvfNyc<XR#%uqrYLW-1dRsONb6Zb!!%dzP6_7j}}bi)9=W1K}+PQCG0
zV@kQ70?9=w6Ea}ky2h!sXA&6^r$)4aoLYC_+n7^p1mAX%Q|quvWL2K#88R&i)}pHm
zpPD>z|2MMP<8o|_x+ZE}+=|x5;lq!br%rvx9ohGldq^gJAf&l3n42IgL)2oE$kzST
zqTiym&Z%LOnnZTbPwiS8X1w~(GBcC5%zmkq^Q!ADefqyoJ@U%v=<~+p<bz(fHAZfP
zu$4HsU%c|wcZRkf{2_7j1JX$SHnSoySGJ~Yb84L&X55}hWaA5++AxXiw5Y9ZIM8yV
ze%ImKsMmV!B0+O&-K<Gumqe|GQ>*(~W{-p=4cQ}<cD`%Ni+}V#Cq8*@qeN}PGPX)&
zB`~f4U}XQXFOU#_Ey(Csx~RyvZWYZH3ZfZi+#OC08|<eRj^(15Q@bvP8MnfzF<66%
zO`}&T?VKm@m!5n1V^0G>6lRfI<ctlg+8y~7)0~((ee9c()je8!|0!isk~Bqd_QtXQ
z)>eI-Ysqsi_O+{??h0m4ili`&9;sCEY1>)4`?;4t_H-`C0$|!mQQHI=TUG9c<8mDS
zhjH*=?hlELF(DGSX<dZY>=Cg<&Aji;%BdkTKed=si#fH;#i@arp`<VjDbvu(`4zxV
zl(Mvq+<I<WVe=y=asb9Kra$<>FZZVsJ&ytOSt+fZTHDZCdx9WWu6o3x7ISKCidq*r
zwRS}<=G4M)YML2Z2*WUB21*rX0P)R>i|>7XYU-$y1B)@Bt5we}CTv0WR<%Drbm)nl
ztn{A(^jSkDc53ZFYfn*m9$aY^ua#lO;gOEbz^Qd^?&tM1%$Oor>&QioIT-vZWkO1k
zgz}azg7{km`yZcs`H_p8;Vf-S30vv4jgIEz<m8wK0Jq<s8)nz~91}hz$ha9`XzhX-
z9{E#!#nu>R9QEAK=(cE`;nZ*)4>RuK+|Ot@HDAmKOhks1X%Hl|F1`WaN40{+a(tY0
z<qSL)HZ<FgH9C5%EO7hxf34RPZkC8X&CK^mBPD%-bD5bG`Hq%BCKq#RF{ic#h8b@t
zr{?o#00&~00tpk!D|!(0JZb(xVsP<C&ph)<yK;_pL~W*R=N1*Vioj*F<Dxq4J#^@a
z+X>=NnE8_gF(QN+6l`2Dv-VSICZZBXP86P9!WI~2+(}LiZHrnsq+_Fp8Anwl*zCiM
z1M?tX!~hTzksy*niX@06T$NV@@iKw_oxuO`+=&OKD#t@C$H$>JyP$1BVXM66Z1%XQ
zZl=xRxIA<4+?|^B1AzVnLw{HZYlz4Mput*!p~0**0}KXN85owJoc2YH>X)5bvmK)P
z1iwj9BY?P7PHn5&4mBF0B0?1k8V@L@H8{1#!bWRwcWd)<4c2g7UpKCr?aP8l5RoKF
zCWs7x1hjUb*_#F9=O8&D!9T4QGe4Pt*vwnbYf0EpT}2%og(z)POEEI?cY~6PAA!Jq
zV7e2K2LRkCNcQ_feI*D4CV*M5LV$A>7tf6c#!>`lPt|>ey!xbX3UlL=Z>AFVrlSV7
z;MJc=<H5O|7q*tY)YgECo6FQH*&3A>i9)S)Ge}1$Q7gZW)t}S%b0sh{7z$e30P8D6
zbQYj@S>pu)ziJuD*M9oa@66R6{Y=OslSlLzqMbt!3tLO?BP&KnM`&^qx_;nl7RTjV
zhp%jN3Uebu$Rwcd(OMWp=m+QyCT1|xYP@o&EG6gw6QMrh>PHkS6EhCGO<U6t1!C1@
z73&SySSMQ(s{xt~Zep>@uhzf0>Rf8Q_ZIwK`5)`u@aypA>uy0sh?}AG;Zof*iBPxK
z$}Om9;<j9SJ?rvKW&#n&1@j4_gkpBD7$W&gPcJV~X8W1R$&bvhNDp!>CMG7tRu{8t
zQP@_V$6;K|jJ{68lT$n%v~9%^M;!i9&dkgX8XmsH-SS6^g{@=nlaa-^Ko*#pdA<C;
z{R}UTXyTZk0mL7~hQ?HOoMvWrl&|sO;Y$nv*Q$uc5l0+x#1Tgval{cv9C5@EM;vj)
w5l0+x#1Tgval{cv9C5@EM;vj)vE}3c0YU_fq?;dXV*mgE07*qoM6N<$f-&z)=Kufz

diff --git a/apps/desktop/src-tauri/icons/Square44x44Logo.png b/apps/desktop/src-tauri/icons/Square44x44Logo.png
index 835e26bbbc672a20db3e2cdadd33fb0a31c72655..2deae72918d7d833ec5f4fb142160130a2a09f77 100644
GIT binary patch
literal 3799
zcmV;|4k+=7P)<h;3K|Lk000e1NJLTq001li001lq1^@s69)wx}000i2Nkl<Zc%1E6
z32;?an*PqY>wE8#yd*CP2_#_&5CMaYAc!KZD7GkwrMQ%KJKAlj<&2g()r-^2IBGlE
z<G5Dq=!_fP_K4l62tBs68%rcKO9F@qB!oah_V<#!^{(fiy6=e!0%{M{GhNkx)vMf`
zdzSBh=lhp)fWO*bl(8?jurIf9#_`|}?tJEW@Bb{uAbs{UyXf|LOKL8i`Z>THC`Hco
znGh)oQU8l1LC*d!Nz(rfSPp|<bMYWOw2z1eh}z#<wL@n72++ROy?oc(L>;vJp}QXa
z^CJBMSOyu3=EZ0;5nbDtivGOK93~<fYHf|GJlE&;3op9VZM}zx>d6(tBl<To-~TaP
zUOVsXqd)2-gFHO(=L^g`b${nBljyfrI&s<`ENj6=$JrE3C4A65O&@joeTqT`|EDWw
zEO7VUPDJ<6z!OWHg<~gA(iJ^B(Mf}Q*fAda!L9dx88mQq#YgX~=_7jIN+)J+vz)nW
zEo<JJwzGJrYwbz+pu4Ey&41r?xc}{!o^>9z+(uQ>sQi<K@k?NRqrvs`;E%q4T{sxZ
z2@}AK{1@-Pw~lC;l}Vh@U|DCpXIbaGX*=KkmF=9l!m=)HcdZ@$W`cGfptpYX=r8>-
zWrY#tqks4z`Ogw(;3v!J4r{8mZ2ZX7wtI<aD^c_*dUDCN|KYb!)bF_Xp67@b>@$aJ
z>n!JtcP(f3O4FLX+_L68YguPMWmz*{v#f=^uJz#obC_OmY1zD=+~|)DN|9WM_=a{u
z+4$Q|AQXkd^1{=~YnDGYdDr9j$Cll>`uzurq*<jm{jk30<8QlWXVQhDagGe*FbPr`
zkP;A*0GI(}%7DOp#&6ie+$*1y_4D3YSY6-u_C9|NLk+R-&0jeG>9>FLF6RtF(4P+Y
zX#2Zai@*2YfyPyz^c)<%>GA<G7Zi%!gXy>)QgmAa7dkk%0XYq!qygCh6oVl!O5&+%
z#|@w6iJLbBgS-AVj=P%jS!rm5+R^ZsrA#Qs+%b2QZ#>Z6?eD6f<AXl#wlF4rs$YT-
zUbgM2&2KID{}#$~Mmr@%=-LDx84QI7+W`4o$MvQIlprBn;5^Qt84PZthpt!SqM)`&
zH|GN%)VSuEGxPMCo(0v-gKJw?|MGXg_*PZk;_kSa^yfY?zu$miO;*|X;t9r>;+ip|
z3Z^afQWq`T-q!v?G`_Pzb7w56x@+<L^kmEAos7#FKuUoZlyO9NIAY)Ht{RZ*>VtC4
z<mpq!<Xw2$ha0bY_T0IL=jM<h;6j#U5K;CgNPIKE`JoE!l!|$iYAeoPIH6?jHJVyd
z>yiP-1LA4G&ZM!T?(*pehkxHtVSIPa^gEZ=4Ms9a>7cAD9tos?;xUXzdtiGTl;E~~
z6~S1dGsD19pq)}&TTxRK%d`))MVq5ZGxb%(9!nCr?FV%B&$l&yQXH(Rv66tD28NPA
zd=SVujw#8W>)0L#Lc#M-U$gz?5At}5IuB}jfSln%$&k<l<DN}I4*;G4%&ZmY9S%vc
z1aMCE&u>{&d-pRV^MT?bzrGko$gth6WaFE=57n>P-uA~$TlQ>g?-=N|j|G??od_gE
zg7JZ>8sT~Nq0UsiH=0fkCsU@K8M2w1mKm6ySFWlVD`h&KggN70TkWxw!Xtp@K@M0z
zK#<T}Knsxwj%56T8EHflUDlYqhi;uY_U>m|VvgA&%;ct4JK3;rgxlO+EC;*`uK3R6
zWiQ=(+3G#bFLzn@E`23i&2i3;%`id0-!2cGsaM{(W7$ntKXHFSST_6mNViQ>q?{CY
z31DdnqpO0bzC@Gvtaa?Ml^0)};+T$+E<#aRmRt|23^2~PQVNtwoR<zHF{k>4^`3jh
z?ENv@9Cr@nbRT%4&qcxzV#tJfXpmg_pb#SqVQy&+m8^QdsXvSBD6t#?-;cSz_1I57
z@cQpx?6w>&&vj*YIOB353~0PmXnGKxO&-G40wb45yuM+N9XA7Id85e9FCYXoKv#fZ
zF%T?cC>;%SvJoyRr_Sz544Rc!OLCw}M)y9I+oU0BDoA8xIc0HOkySZCp^~RoKEJmi
z`oKTt0Mm)W8hxha-F>%?&ir?*bHVA?mO-TKw(brdGkds49^izr_ovfv!Q<r!O)f*M
zRW?VL3Z5z9h!^AlyM+*uV&bF;^n`TmZf~>AT18Hb&BuoO_9Ec)VML&eYi=pzq=68F
z8_&qWE$iPvWB<*Qj`XYJ0zM4dH%pY14Lv<|M*jV>3b#Mzs%;1Q(RR>7N4Ji)W*2{W
z8kl^i!9RX9gwckFM1;UbF|JA^oG_sz#E?`8y^e>HDRX({-v_bf5ukZzFD$GB(1eKL
zVfrakv1s99boND2|K2qU;AQ3M%k(S58e<$p0yD?ocm4UZmc0~9x~8gdxulRpSt;Y?
zWq`_~=<P~lTXPVxi&XTOI{xNn1>PZ`XR8az14Ni%>THHXL5`1K2U?PZ=3O4_m4ldG
z+k!b0(wL~~s2npAL8AyxMt7^rL;9;5Ry=(DLs$R!cnq_nvm23z38gp8y<o-*>j&ee
z&4mYDlewmn@W(Pq<|V}(6RLrl(H6qG39rNfMho=h1u-yaKxBYnCQvcSL3F^zKog-n
z9~hGsm^MuY@(uXpz4kMpX&azwekddqspMXEt`dCo!^iKsf5n}T`I+`;4YQ-c76hgh
zE;+L?YB`oEgvmiXyFIERLDM-8s3iPi(3i3lU?_=57*{}i=C?RxyBiO$+=bf9r(zt_
zk#7kMwW^464U2D)(KE=g=Kw=ThbJsQxAhWldl#a(gdwB?h603TW}kJcYTWSB(&_K)
z`fY>6BxL>Oc#^noUYr8K5f~coOL9rm{XpW&gcBExF|NrBy2hX@Boq$F5<ymFRFCKU
z!3Q6~+@)87+cCHYyKwQMg;>2=AlgefYZ0M%Jdha%B)=#V1XW>t*Xu4MaD+67kOUYS
z*;9&C6`G{Ze<CD#lop4pM&FK%$^iQMK8dLe2<Mj=x)yR7Q{ks|0dN9??J=Y?K+0m=
zbQrg7AX3QridC!7CK{pZm1x|b!hdc1HJbMW2AD8(LRS+Zp!y#Oc!J=%fG2Sw7kU^@
z+OSFGj;yOm3K)MJkkpqqZvU)mqZ6g(wM}P7_H^8MV|Dor|5;ElMmLNSAxVnxJizrc
z2OJ1ua6JZ72w@bd{Nt8Btljkls>`o{V*?rs!9p+U8rPzB(gHq^@I+51@pzQO_PFqz
zPdAnmB4dN-YqzjJ)`q_R4h*MT>JLWWd3eBD^A=$H74;F2zX14fqe};p&pm%&?{m-R
z@!7Mg3a+m=@{8>9;u&%{uL_!~f)feh`pzPAKk%$s|1;<YM}BB39Lh0RIHE#q-m{!n
zS1y3As~GC{#9+6?i^mI|P5`b&u%Z&WyZ7U*&HrML3>OB+<qbUhLD!479J%L5Ivqdu
z!ClQhIlOIqL2we<x^`gWj(^3vt@okvla=Tm+|Nm6ykrdU{zorjz}|$C@LZv)k?euN
zFAWWSB2S54)bCh<@Ce39a(Vl{ZVVlgaHz>c?_N&~^^iy=qA-!cqSNN!`pYH_`|B!P
zJ#Ha+%*5f>rrDP~pohcbF-9>E9c)L+YC~(^2DEgqg`t&ztpf(Et%yWwg`rP|s)w@-
z`=}KjMp1YQn)_cx|GH1m9ovQ($|V?EaSKKSRCp307y?F>mt#iRd6-*KiQb`xY=tJ^
zM}=cooL_YiB-{3I=~bsf;?q#Kt{wYYJCSyJAkYODQ4|JeA*hvcBQOq<qQhs{*So|G
z=xi*=U>J5=V8g+v${MKoz^*L~Py+$J?t@oxM$H0@8&xR=k}^8t-24hWCk8Bh$ukDi
zcHxOMF1frKcB&d%xAvlSZxpUDA&`M0YtRDa*}i_rWQ+hQC^SjtvJ^sCnJMzrB=7C+
z!^*Z-u%mGuMn<L}UmK5De;VNcM}JB~N3WCve1dZR#0)bcUym|p$fO)>s%t^e&~WaB
zl^8d11lFwT5+m}8IY<`%jU*W7{#qmmjBAkOppaQXR*m7jLL6vmfx>m1I`Jw<OcI)+
zW-Eq_XCY?l=uJ~PhnM}S3_G6Zx!D3EHk3wweh3ohNGC=1CX%?w79LC@&Nu^z`HJu(
zhw$?wW7(YOe|R?ZNAf3waanle`-lh2u^^ZXS7M0U65>`Sdk{U59V1G7UKd+l%t~dF
za4jy+n>S7<s)R$`L)g2w2aX?;Ny@Q7O!(-T%yJBq57xhBV7d8;K|m4?dBPQTR_8*H
z@W>CM1k)oVTm^9}75^&0$6?rq!69JLkh%UhAFe4~+O&5#J^Re@!HE+~c`}hfBI$n?
ziQFkSH!62gl!csyDtz{H?OX^Ze5U=kK2X2WA4dX0=DMwi3el6<(vX`$d{e-mv)mlL
z`$|HnesKHgvv%)n#OSI}@~pEe)p*>O0dY?Vk#(}1hy{T-2>}6-s{#BE%1VTDB9>*<
zFD1ZaTad&hNi`Hi^v%0p*w&ZYbTGU2agO*|Qt&mcIPjf0WrerZF{uJB^AHF~aa{|j
zjC0PJ0!7xL1wz~?($KuKUU=>hm?V9+_^0H%9I}9{8k}Ufb`nme57ES1-|aWw_|@l-
z=zjzFixV)6G?p$Yi(LPP7Muu4^?lBZOI%VlImor3!HpsnO^x+J&~SF!g=f1U;ez>>
zRx*bt;8;CKXLddnOTYU_S~O=_{krzG8TJ!4WiwFjxg>PeRb_?Oy&BB(Go0pY-Y$sb
ziO6_`Z&+RDau)T2o8dd0ALd-A2bOi<cSD&Ef10qj?jU3<sV~ia(f}Xso~um{Ym6fj
zxa7jJ!tcKx42=sGl~+OV7!K@d0cZ%WI|SG6sUOOG@RPW;d83Dvd*sso@A!H>34p%{
zoFBnTNS;z@C}-Xb<j>^N(7ue_{OhE%tKOx!bL2>WTrQIQ)$sq&{s%u_ANiR~Bhvr?
N002ovPDHLkV1gCQWd{HN

delta 2321
zcmV+s3GVjS9h(x6BYz0uNkl<Zc-qC8Yit$A703VQ%&dKl4SqnCwsuM(E-kjPNEAoH
zJW9hukVI9K)+9{=Z6n%5sah%NOa0^^s2UUz($G|;P1UCTPz6Y<HkC>UFQ-rl5Fmya
z+eJ2z2=jEX0b~2#ozoBdzPrA@CP-cB>aKQoW`2A2oHPG3Lw|@K<o*i)lvmBFW8v8(
zGzEY#h`<bh!O#E$Fbpt*!A^5>?*WnL$h!{)pq*~u^hID%Y!RTkmC}3L+t(d;+BY-s
zoB$-*fL?0@02QBY_!dDu0YL*RD@9-sF#rW3at0>_f_Kg?kn>#ln$s@FdE^>Fj6Fzf
z9TcHgIy+x@J%0dSWx~J=z)YyBsj%$vzagcY;Jp`-0Z8J5Pz)k~Bmf%ZT0Ht3`RDN$
z1QBUwE(DW;G3IqvgHN}$t?%`q$%8Ka+>A1nE_#cV)gZ>C3B*Lq0F&3L*Kq)=B2e&Q
zmHQvS22d0QjT=G;Yyc8VkJq*tI!LUSw6(SM0h<g1O@9o4bUO7rrK|=q_ArAjB32{9
zk~iS3g>}avB3497XEFoBT9-74F&lx+c2m<bCIG1T^gSz-wq7&FPBWARqU=thuvspU
zKWr!l5?~Q>m%xoEtyQs=k)dU6ZOxk*jv1c<U<k}0iVo&mks_AK2NnsiNOXfNSPEZf
z1|VeUhkrmb)5Oor`VvTvFjNYZ9rZMVpXLJ_e!-FMt9bAxS(}s)ct|pGCxfs+v6XVN
z!PsFb2h1mfRe|dP!d#dl%?q?MDJTH81pY~Wo*fMqBf`=rgbm^dLc*j0vZrVer~R8_
zfQ1Vi4WQ9rN66t>un5CC)1+${N^1rYk%GA0z<>Lco&~dlE$p-L3^E!l<pmpSBMcG+
zVMQ9O9ZQPIg5|tm#}yZ0@#4GD*jS6&+Q}#{E5U@)akzGE5WT(E(A{+bJ9i$(?p<xT
zdUZH5)8zw8P!JHn1U9Zp3ADl3Ec@*zmg31L??+i#39^r}vSO5#6=Uku+pu8a4D|Qk
zz<<jxZN(c~4nc(ShIP*2pR4f`?pR2q=KvxEX797+f@M;8e(iU#a^+H_QU%E8C@i!v
z@5|FMY0?DzyXC)m1Yp=`N)#8e5wn-U+Vwp(sy6T}+q7&x9(-^%Zsz!UQv)7fF?$rt
z`uW!nZV<U*)i6kr>k3J*91E~V9+{sAGk-8Jgzay);`HfDC@Lz%tj1}mt*weZxAMF5
zux0ZR3=i3fQZpK$-oFE`9XDb?WCYlt6S(Kq)s>0B-(0={?d?6jFxv3TZTQho9>DSy
zb0W``mKI?~T_p~`_mSTxC5`QkDZ!Mk*`G}$FKs|z3=R&Xpg>0;(rFvr-4_ED=YO_&
z^|vi3uq@wVo&>*sJsr`?fkvU2z6KG<cL~=G9JM|=ED_=8(JsuJR~G@cEQK{c{{~+9
z)i#_t-RrmM?;FC}U;Ha%MT&^0Y}l9*BnC;4F?8Stk{2w%*tqd6G&W9$)+z$MWa&&S
zSvnKv&-dX(+gY4w>p^?_IUH|2i+?Lu2J?oEDLvQ10E4O~KlD7a^;40I4QMqQtT)J_
z#dl)$nnzJmlFBPPbah?A+gnfIZ+~sY<x2y}urc}SSr)d|CCX%m)~X3*(-#t3b0846
zB#P%midPEVT^I4@n}=a+K~-f1ii-<#0+*MM!`%&&@zB?1;^M{YIN5nQFMn8fY*Adu
z0<%|5D63t_E-;8Wp1?;gYX%0=cz54P{OPql*tYc;+CJz(&)F*&9=0)ld<unyItFeP
zD9oE*jiX1-qNnF-BCL}LRM=3$s*pv@UMEWsLr89_2J>d4?(WMt)%`L4`Hxm-3RMbq
zb(MJf`(HuBJ(DBQ%!Egm-+zU}hk6oWV`<e5ItF<w8VrKu1zTVLdE9sZU7-}^{N6iw
z3cGi8_|J&}j<xpSXFvWswzvEsX6fqcN%_HMRUbM?Ba&CaXxqSJkI#((ELk!GogEj^
z)6*Y$*=b+AEzzfKBZ;ucf+hbNxoOR%7k{S9UEOxHpTmbAUdHXWPk)R6Oq^7LO>aDf
zojclb=FG=1HgHGvr?6nrv_#;x;}=4(6bry`@QXN#lG$DOa;$7}RJY{+8zXq>#jRMk
z{;?RuxZ(ml@YVWJQ=Bn^zx=s16x1pq6OnIOA_b5$ad7Y{RNgh%j_oI~;pOc&rPeYT
zgVoKu(b3+U2#XMpr+**=5yVc=ky~+$rC|KSt9x+zR4<-+b`dJ8%JYK#;MjR=SpP1L
zwO$wzHeON%Ya*dF(?E%hrC{8(qZ51H>B5}3U%;%!shCk;iSmkZC@n35Z5#CU4dTMN
zYdCWFEcXBBBfNj)e8^{W!BQX-ys6n!Yd(a~O%;rpw4i0zNq@BL>dGo>;=!9gEQeqj
z5Vt)OG=l~H%#tN9Z=ztl6|i1;6j5x>v%*AdQP?H^&#=gX^;0Vp2yAH)?j|CTI8{^N
z<k^+;Xe&0i&JALV<U%CQE=D&iMLUeK2Z=P1Th~RvMu82c&d`?`5mqI`VkB6%H&$dM
zJ)E&*2X}T(?0+Pp_nA`w*p7qcwk(CJ+sJl61UAQ_AXKnl5`$F$*w(595P4_czI~m}
zz5($%h9Wpi^@$66x!oYBxRcj}DPCCm8#>Xpv04r!M4DLf8eo;-CN!yzju$s)%+MCg
zDzP9Kjz%m+^K_2tmXgJH!p03Hw2AivLAsz|qE4s#{(rc8|Gh0uO`8-sHS{vBsi`Ry
zV{g^ExWP_e&wvz>Bj{;N1!E4_oGuo$7w=0KS`{i|4;-*cZ`|A1xcJ7ZRZhY0?}OFU
zJW~Nv_G_&Q9(III1|TvdB#5mIC+*MWTA~fZCQZT0`KGK`sbVl`7?b|}b?JZhz=8Yv
z9mA4@Hh&g_&AZy^s~=XZzbAqQ=7LnPl$Eu*KFVsmx4;<51_@s)$Tk4P3<9)UnAf%J
zpX(|t2R3^r)V=W>dEoW+FVvCY*+Mjhj4c91%z>hcZr5gA_qTWhsTyqYhMs4y$V?G|
ryT$0eEr(_w2Y_ZY^Qx?^+y4RlLv$jqb~`Ts015yANkvXXu0mjfp-Wgx

diff --git a/apps/desktop/src-tauri/icons/Square71x71Logo.png b/apps/desktop/src-tauri/icons/Square71x71Logo.png
index 19f2b3315d709e1bcf5d5aca2d051c007877da60..def91e691158cb5ea4d57f2a802f9d20417fb9d3 100644
GIT binary patch
literal 8308
zcmV-)AdBCLP)<h;3K|Lk000e1NJLTq002h-002h_1^@s6Rj^tg001C6Nkl<Zc%1Eg
z36xz`neMlTGu-*sy)`FQmCBq{fFuk783I8?d4j?NhgRtY4xm02hqi5fYIj2mP6*nH
zg6#mdATCfq5W_5D0+~bR)Lf}bjkoHKXWsj*eQs3@tC1lIuzZWX)~!=@?>+nM^X-57
z{{KG(yfNMwZ;byR2O$)ca4^b12zfbYgg>KNoPPSkPu~>Rlf3%w%Q^S&d{9bX{BuG>
zAXYRlm|fX>w>+-(_}L0n_5Lwk2VS>94*gcAoib;2!{@KKV8Q#}SwkCRLWmcYAjSwJ
zB;K;T?VaWVDo#IP>3LF0aP~Uh&aoSRz44VbU;V!yy~2?<{#MF~2PWmd`|k}dIpzGf
z&PdSV5GlZBK+B>gviI)KPk7#=*0u+38cQJ?{p<Je_d3X-8$2=dtsAcVgp}6}*!hnS
zR*H9ZT19WX(~_lL`PECVxax%fQe#<aZqws8T=A^%ejC{CNLh$GgGX<@cH5~fD;5GK
z{W}JRhQF;y|NFmQex;QEJ!t3eDm%`*p0S-T@AJHYv9f392lF!U<+m@p^3&?OoQL)n
z%bOOp{PDY2KU>~=t(5YY((#8J&kH=;zSoiBn^N{(D|h_(pS(A<t~^P7|7dMc^{U5U
z5JI5z{>8sTA!UG$<Yzx|+`GQ=wKKou6i#iV(Q7-U@FhX#l)z(Y6YrJrsBKM_KKHYm
zZ**<j`qEv$xJAwHdX8Ng9qkoEm6MSg2Vx~iqa9@ODS@4Rc<xX7)V&)^KOUGG>r&TK
zcIoe85K`TTcJs1#eehBtzq{8djs~uG{fO(W+3GlNd&2Q9c*6BQu*LBnDF&XO8xJb^
zzM^z<@-ydMeCgqHElo7kJayfB*2$s&Bb|{?7UhHQmOnW6k~`yQJY;uX_d%wuL1VJs
z{Pf!{|5x=6eF1Aoz^dQV-@58OZz;=bHaW$v!0~R)xz2fe9B0jX$651;<GuMo*Sqj>
z*Za_J$Jt;9o_pY+XN_$v`jgMfOIE)595sibS3z#n>!N$_`P7)#eVO&p<saNfkPI)v
zsan;svB*cIluQ{*La?B|uIWF%ao*QvMH-SqN>ECk2aH636g#2q^cA<QpYtzTWz`AL
z@0}#LdtAaPfCgpIz##}6z|I4s<G?LLK6cjC!yReXgIuL_>n)#u?9|p($2qPKQ`a!;
zj#Ym7+x~Bpi8^}I!<|=46ar2ed?AmSIvo`_z6e4)^X{`dt};93xHo+H{kJsejd3BW
z;1JLd7z548(-+^dW7em$Hd`+E-NS_5KPqA60lx?lSOmgG_;SjCJqiqsLi}*l7klS5
z(5Zn%daRPD{OY=|Y@d@}+HAXCD4|bm8hGg7vl)H;P|s6JS^^<(EC)H_lL$e5ENg!9
z(lsCZ!nZHI0jdAxYVv-)`1DrX^8L}ZpTGOR-v-!{A*!7<=f15gKC@==@M^~$m5kf!
zd`BWELC6X~T~KL55Eozppqvb^A>gwl+FF1QBsp!nKj+Wp<8=LVou#*5e`Q<I9V*3*
zG+)-Z{Oo7?o_a)W!pn6GuP!)5xdM&+{8Lx$x$H9y3y~<nF&b@sSC@Y8%_AHB<Dp$2
z+BC9fr<6Wc*4}dGnvZ|vJqORQEB%7%ejGvspu&M*4xz#l0uDeuf)E_9IzNdJXjus~
z18uFqJ9JJL-d^@QgfMSgw|3J%-gVh2fc-pCQPQN;`dE!4wp;`RwPwm(no72Q>GI=m
zS@Yresz<+r&bQtChZR8HSKpZz|I8;Z{J;(0E3dIjyDVyo6ok(tlvzSR0GEI$FkA_$
z0CJ%I79q7V6|)3*Eg)wBvswvVWf3g@zHhH|%=l*?|JIE^-u{KpaLVC}@N(feYr*nG
zv+C<x?|6Fc!-~iTB6#h=IegUc+Q|M}KUn#~4>n)+(~VEwuHMVAGf%km9c#BH&L@RU
zQ!s-BrJf;$G(bH85gH@`5I+P2nhQ{+S{}gEs&s%T$DE{;)k)AsDKc$@t{epBe?wGi
z9iF`E;R{aNmHWebN*Flfq$Qb6-h10uH;hl@51jpv|GY-6BNTGH4hETkfK!S|f86@$
zw|0K)FFiw#tM?d^`e_|EK9W3%+q=7j?&k@DaVani$UY*-6d)>6NC$wc><`rMq0OPL
zk|e<J0MjBg<^V<+!YBcS5eT-Jz<swgpPPXDj(K0Xhm!~sGQjHgm1{QK`Jt&r=gn<d
zeNn?XcYW%;_oei-rgZd3UHef*$PyC1sD|nH>{|OHggF_C*62B>H7;3MyLrGW*e=l-
zkv{W?ASKCVg>Zf{0cnE}3J5>6Gn9pDRaG-?06a%vbxRNy2y-?Cp9{g~O4`YRn&pfR
z)C9IZwW6Uewz&CVY0JQ4`!_sx<v-c0@A}c;lbau%-1pGBvD*R}NM)Q~LvToy9fwDR
zI(^6pN*{p)3hwY2FBC<p64BEhH|;5)m~&Ao6(LiGpE@xH4*~U+t#Kigtzj;qRM{UN
z;0(|y#XwgM<pU*ZnlT!UC#hLW{fP#+eOX`p%aTBd7K`4z%Tlt30KWXqwyl4<<A=-l
zUvux4vv(JI4<5dWuM#-qP^v(=neb9_`f}6POzKH(c4l_EwRYaz=JecU$>{7ez2YPA
zMicg6F84&<IyjK`xBe-vx1Z8n^TkhaDqQJ<!y{mh4AqFZQZSE%c1RO|5fku*F3fl%
zHRyqYQ~1;Vh&O*lD%T#JTbIO0VB>*(-}&Z5W#34ZxvPLw;v>KM{c&Y6;V5-i0pXEb
zoR>7n<bO=g5oL|3_Dp;IaZ47@I^nGL#${`=@wO99V^-1)5-5~7N-Bm4Dt6!Cmdafl
z-@nuf21eAm5!#eG?S$v1_yx&|lNDU#DGjB@lS0`V=7&+Eh$ab5))H*J+jCP^Bud<0
zKlJ3z_nvR^8a-*YHzdvG#^J*5o|4-&_F}6KK~v%_0U<?rd?ix!5|SgssHQ1(Qp>`Y
z(@tI3@}>*g8;(CW9c^tQA_m(5iWabM6tI2Y7K&U4mWoulCnORzXJ*zcxpnOyc3iwt
z5;u?_0$K%JPxC-Z>e~|BgW#T0DG4eO?zKh%BLVOzLDmE^H1M9>32FP2j$NAUA1!U}
zpI`Ilr5B$5&08{Yo~d|)`zEaJt^K+E+xjPZdk1p|#-{8EM`aXW2(VD{Uq(FiH^5O*
zm;^^d^oomq_SnhCzh#wM;IJ*ATmt%sy^7=5A`p^FWsen|qJ%R}xnvx|6`(Re-kz*9
zHN55crQ@Ib+K%CCzAE5&Fdd;s2vvq$1`yl@xGzN*8LOQofTj~@34oZCwj_b}Yz25^
zMv6H-d+v4LdGoTXuQqj#m;o$G;jG#O5R3XCd<u>jc85z{TlyyUuiJZI_tX3O_io=m
z*fltqAFc=y;(z3lGn02|h+KHt+?KbmDwnL>@PMl`5E=yPzA0yfQlXfWA0SX7tCHT5
zf*Dos6_kNMa=qe}O3T_m_m!diqqpa*b)C}m1&dHlZ0T~JK=VM=QAth6#1wVVB_cHh
z)TCIpz(bV#S``>d&T9YOFHW5Qu@4Luiv^7lJ(K1r<fZ5thaX`SaWhF%(Ttf%FIzQl
zAy&QfWL(X(3M$?(hD%*rw{~uL@TOng`py1)Z~mpI#tTc%^a*y*we_jT_h9uoZF<De
zbl(*SB%z8}`o0j3=TSfKA*F(efdmAm$q~&0K4Wku0U<ojc+6cs=i3iIx%+|@B3ka@
z2`tb8An*v)g%rGM3>2n<aivaxSp&qAzzK6)bRGyM)t;R?=llP)u=Qgf7%Alo1~;OS
z6oXy^RPs_t3*6OI*d$T(U4OI;*BAjbPJEMd8jrT=>CD{aSDgQr<(*ryXWzX3s?%Re
zwO%j?lwkl%kn^5+W_S0mAK12SBpyjmN9h70@P+U^AHL@b*LUFr9^Al#7x=Kt62v6P
zb^u0}L2!fG(iII2r?oAuzxFq-ZtF%`3e!}!MG8#<T)jvb8B?wis;2-g2GrI|S{v11
zSw?nF@|v3#wtf8ayjv>yFr$bwB-(+JE5&3^qG(GL%D_~K(qfs?f<<`Ip}ge5%zIKl
znD=n7=oG$jbFcr@u6>(A4S5NF^fwK%41WkYSozO)Z-1_RBpN%1w`H5e#8|*RU&8Ty
zIDrq(4<G_51XXq?fExsm2MOk{pd!*DXwTDxx_M43MaxYl&O8?}A6i=aW&t2Nplpt!
z3zR^B6N&_2WC$WLAk#qT6r|7CinlJAcfwm;>e~U+O%kI>ohaeDLW~WmbcX~Z0y<;x
z0s_wi)pa7g05E(4#w4;?E;j8ys6YJ7+S0z#FaG(^J-$-OnSqCZ!V%+@-u!n?-nem#
zIXE%lYg~it`k|D#o*zn#tE{Wg1Z5Fuh5_GY=-=Ygx`hOhWei=zIqdD;LHmb$Txx25
zBn`w;fEiJlJ-{#kT^*xJ+6asqAQA`ktiS{~N?y$EFYK{PGS5jyqHzt7S<Eoj$5FO9
zwE{scH$cVpQ1*OOJivBAZ3nbuNl?zwHJbAu{qq)cfBvSETrpu)rA8jPE0@#!u;_2!
z(>M9U_pxo{j+IN!s5n7HuQ(1UjUZy^kdc78K?Qkx6y>QREZ2v#FO9LF4GS+aVLX!%
zw9o>>j8G#IK{_dg9|x3_s1yZN>PkUb3LrI7#FC(iC;_XHV$zk!yOa(U_R{ib3A5Wf
zFl$~6TmDc%xxYvw(ttr@05hrD>HtD*R%qPStZ74|!{tf)$!9jl_mAIjPQl;RRZYT)
zqmPhfI0?n1xAxA?5z^+%17BZr!r5-r1@9Z3K>t`5a-~7FBxpQ}h+YTI8lgv`=zYdP
zYKe}e|68Y<ChLTBBEpQi$ix9VO5i4|j68JX41&ZZkRpi1AmSVpNkWTL1Qv<Gs9AvY
z;yIXiVGR4$2cmP`2$hxHfI9}00SPmUWUK)xvl$Vdp^hIx#0M&V&fVI*Io>sT^GC+r
zC!ct^z`QJQ)Tp{V0cMQdzvhh9*DspeA`IQd$%12I%0ce|iq8IV42}R(MXnNIh(SYK
zXXyGPaQr7FTF;ZT>n>BoQ#wt@A)FXsrB%$J0Fr{J^mq)Qafw8P(g;^63lhdv9#258
zi;G1U$EjZlaA2KJb?OVLnbZ>uQ<Vc47~c%bD!||z&DlnrxOh2Mp49H{>mG{k==s@o
zQ}Vu_5W>O`<>ii-1cyvdn2sDb`_gmnd5&q#_V)dPb7~?MOQSwJ52vpJ&R^pJVge&0
z<Ji5wgq^)59Gt3Pq(6df4>EN815oHCG?k#J;ey&R0;>jL&PzIkN+v;K5G)GBxI{!<
zTUYt80G<{>`?)|(n=iKgj8oqVP|63?&fB1(jM_BANefzW{G2#eE^Wm8x%H?|Wx!dI
zCbAuVM@Mnd$FE(>g{=6>*1TK_@uI$rOp9PlYtLSE#zO}ZvH9GwY@wT+YFsIsiZ>-F
zBh-vi)Yfs#ZU$y$1!BC2Ql)~f;Q-rm21+Xo<XHqwDGe8109ZMJu`U5?QYE+)H~>}d
zJq^^g0+|%>hc2L|pJ8$o*jon-{n-<_Cq0@D#xSpO94nSfteC5#si4EulJJnkWWhwS
z!eN(H1ptU}-#>Y|ZvOPCpa1T2Klt#)gox?zMjj0~B%DB}wUP5zKG0R0IjPR7lzhTC
zSD<NJ1$-2oOF<Ptq}n+`H6Rir$Yd#6n<!dqJ=Dfs__TsC-N(2=kZ3hfiN`Qm)FGw>
z+<esraFf8OW2l|0qzAaW%Lm!xgZmz=LV$Ueixu+;7SGj@ZirSd24MT+z=OA|^r8e4
z5}XR5>`;^wBy`ZEF6>iIjKr_`{nx*7<2_&gB4Z3e5F9BuRbU8odTz&Ee`#%c=c=+b
zS)okR73x$#5XPuV3mA$Asi>Ao!5E>OKrqG2bOPOw)Ql3;q$y_AQ?%6uXv|t55er4#
z#(>K(?5APYM-?T-RK<lQ9VCd0<fMmEe}INW6bnu@P#5Qb$pM>UEDsEi2~1216pCtN
z2zERmP|1-nxHK4Ga3I2fh)xhUC6bi59m{z9qd&XyviqL-$?cS~=@iT>=2lhCv7+T`
z-&DYqtXzpwZYtVOq{{0kk{Ae2p%gH98dX6T)uj|tMRTfu#s>l)!m}luvOs<!puPPB
znREor4N-I~mhhk0k2~)83zochF0$D)T6_cZlR&g=!gUhR91YucFnBS7xr>0F0f9nE
zz_J0mQoXmp2aE`4au!8yNK&S}o*+~z4-!<F5D^4Kljh#te(CEMedo4)1G_ix8G3qW
z$X66Ee7TY{V`pk(Z(92HlOEaW3%4K%iT;&_R7s*#^qEo0BvH}~$|yCoaL0tEDIHTK
z20+)U%|;rNi0Xt=F3~hkL$QApKltfwn0My6_|#>s_|cDdqCuy)^71qA_-28jyrKdU
zl@gH22%K{%#pDzasLEZ)?-Vdngp@{ASZ&a~4+mhNFf^6hhR}&bL<eGw(73Kj)xO`B
z)#<*8EtQYlzNX$4MU{K}oA!tPEx6jU@46}$*X%$@u7FTEBPG77;3gTNY8BzM)gCki
zQo`{FDh{aSfVw`Ren8;5fagm1zRLY5(PNkxD&wcW`3>^13X-u7Y@f`czhL9nPu-8T
z>vAYt6y?zXv<w&m$PEG`eImS|2nbaY6M`d1n3fHE6^{~VNr8&(!}bE$o}iWwTDC!p
zHjpa`6dgtfCcR2s;>6^v`06uXs!ip8exf7-!1&bO9;@h@iG=A!BBslUE~KQ8f`qT?
zsj7&k+_6fzRbx_L5I8Qvmm7d8exrc#d{wTcRA>SZKD-V+rFBR~=BXL5<u4WrIUAlf
zj3?G@ghAE!0Y8vJf$sVQgPm0etmX=YI;w1AH9O`7QVEcV))LstczYfyjyeV*l_(1)
z%9OfO1a7w#B!B(v4mwuu=?ic7m82|YqQ`;4ufG4MO^Ky#jTe8ou5K=(@q{p#SrI<d
z9WS853&N7UB8$pP&FH5(su`5jghNRfg$O)JvuTbk+jru*p8G(f91){A+zZbM!g$Jv
znAp7kQ7mjf4W=1GzNE-Nm>U*@eUi2wFO|foBpakas9MwIR|p?8npL$z0Z-+XG!2qd
zIK;zLrJ(0WbNX0r5C<oA4)*1KeML#`>{6?Jv1s`P4007o0n6_x-}sT??tA|&dvMK%
z>SAYnHe0hanaVUE8m;loNSvze3Vcy5;1fCBi&v#|N(I7jOG3E5q=|%vq0td++P)SQ
ztqW=WBp5~l%7XfiQhf=XXE0gbjV-%3;KbwCKorBuhBB`xOiC1T0!D(-z?I783DrQV
ziXRGLwS;&*gAvzYl`Z70A&gEQK%p><Vx?<G!QT0cg17B=mgw%0@Tc9>5fe`mo@~jU
z0|zSq^=}6&cU~9Eb*!u#ddIJlu{kZNREx-DT4^F)2c5;j6sH181VKpp!e&?n5K(Pw
z3<0sQW$Sv3dw+&zrePY*U_2I<b^JitbSW5#K{FZMdtfc*ww?q-PoSjqLP?h`#OMJ*
zTRV8D)<h+LSTzR}dMyWV9f`gDkKy3pPPk%9q;$et<9^rghrhQ%NTrZ7cXrgoQ%)bN
z4T}NFZXtMfeUo;^6M(q9duXkFU^q_WktU>5ZOCTZ5Rccvj6}ouM=e+eJ_sd9W+^sr
z+K#^QwGg@mQ=cz1EdxpoNJ6M`r(x-h8qio4MQ0y&cdo<o<IbbR3gd90nz#$&$}37x
zjf7HbR{*yp;aY%asZH=PUV0i8F^+g7ixXxopr<Y@mGA2d{IC~sy83VoiKm#ZL9j4r
zP>i=GwgeU7!52A9SbH#0-iiK$NyH<~s7cO2wyqWFWIbZ>C}y=Y?0Rk&c6Y6X&3j;I
zjl$6CVCY#eriXK@7bBc98imGc;G0Es9((}V%sezT%~w?p>WKnIhR2Z`o{jPZMc_#h
z_{!c@)lLP=+!Tlz^%T(r5_*j|b$$by7TVrSt?gB;c#05n%D9L`vPgMt!uGQ;w0d|V
z562%z&fSfP;hpFkNg$>-A(?2x=B)w;N4BF#w?We~!q6I^>kTlJ<S-pVDleuYH409m
zU^D@p*TNAa*u3ZGXdXWWsz+rsw->RDz=E+aLU>B01h`@ks`Q~sq^hJtd>S>fFryw8
z)YM>6Hj43rk}teA<zU7j88?wg*P%wQ$HdqqT)#98QW0K|hv!dWO6<i{ZWn^Ug5(Z#
zrdV<crru0Vy-sMF%66#;fT%Pppuz)UfU`u{(Ihp2ir<C3qx(a5?*?U<+G6Mihb?^Q
zhE9d@=}e+rD#FkVnyfKV8>>e=LQ!i1mTRJDt9t5d1P)YtnNKipaR$p*HKA)?4qf|m
z7&%ygWtCy_G6J&%&o96iWeBPIxT@{?8jn+hHNezrDbu1=!x(y+stq7S2d4>0=2dMF
z(I7NCEN~GwfvDLSf)R=8=<Vx5rluB&c$_}8_NSrBA2<I^U^1$BUYOr5RdnP_^tA&=
zgxM()Hcl(@ws>hB7I)O);9wE^_vSD#P(Z0*!C<P{rh-7Imnw#<GKmROuZ5;(t2V6K
zq7w#kL_N14RUSGDPDB_~20{TSz?cb#*q|hacn!nm_0QpvM}LBBO$%btEUc1^n4ZG$
zzzDL58u%b^K~S)CjOK{-nt>w&K@{U-nnrtj$I#O?hNVlI(a@B}td<0(rX2M5<<Zrd
z$K<#Zx?9!$raTg38n_+{Z&uNWu=pQN8d@_!DTkDi5Gc-6x=WcNT`;Osjpvb{9Krp+
zy&FB<yAY2xA@Dh@Qh<g`2O@eL5lsv2mrp6&fTLiW7%QtR^=kwUNVUf-@B%SwRxJwo
z3N~%&hPhiuOG_PES~FO(v>uB)GI;FaAq@6gLXSkl7+Q5;QB}1I`HX@^vH$5JfB3hO
zM)esN$`;KyUP6e_wImJf68gHkk%+WF*OD-}GT@pLGe|+<c@l(E>Z&*h5JlI(q$RB*
zZKQk!;E-^!fp9IzDqpZG9-5mnSiEEw1_yKK>KwtqfpMIC;(R1)45ZQ~2KpTZi-6)^
z>KLeaMzL6`o<LJa$k675AWS!O&$Q}RqwJ926CE*gHdvHbK~{WM-EbAY(CZ1Q+D=qz
zRe=Rm0)~pGqM&Nr{!06FUa{o3K_&0|e%P*GDBIY$p&PZ?1m@3g!0NM?qFA(`=_+um
zl0?QBrD0i}2(_!>o>tpJRO(Jy9F<6%>EEqJJ=07%%*9X%Nu(f>P)dv$vMc0t*MX|X
zNYy(Oc9~VxQ^Bu}wx_^Roy|u!UZLawj-MNnG7ydn(bn3Cn7IT!ePh_XsT-Q1Va}X-
z7>#;JC#w6d3a3?qNE955QlfG|jL=Yml>DpAVkiaGa~KIBQJJ+603{g;MI~op8%r48
zkSZvO*fC1g@6`}k!c$TN3d>_CIfbdi*Z=B(BdbfFvi58s)TjNu1+=!MQQsWL$@Oh0
z7MsxDKY^~UVRUzoV$C^=s|%WLD+!mb_^GNfPyZbXkosKhxJsB+;ZnIFRZXlC*ifrT
z*f%0b$TLE1oKYpEoC+Y7Yzq?s;TM$@33$3DO5W&TxcpZP%_{&$PESASY}%G9Y$zCh
zhxx$0+x?dITE1{e9hzsQ(6O{Bl$`O2VtD5&-=ZWS#8oveDs2e?P>IXw1&5SJhW*vm
zJ(#f~)3+4bAyCE6)jQQBgKBq~{#<4D8KWwWR7$2Ml)gaRNFr9l=tz0{ro%V)Rcf`B
z)eFP%_l#Y?+H*&A6}jx&Gid+uf!+B1{kyS!`zU-bz^vvp41-l0DXFBY?xlKo4z&%1
zbbb0z_2pIdQhTnXW7^DCdDme-XH+coaMk-2el@>y=oJQ)#Ae7uH}1M;An$G8UA@99
ze=gz(dQeGtsTg0{(VD*ci9}*qZ9oItQ?U=#cq$!5Yiky*Z7FQsHi@Z8FLcF9w>aaf
z$AmJj+Jh-HrXkS~!C>zICdax2A<EEKRcr<nWs6kP)Qs;^09NsxejHLL;>kig7P7Q3
z3#LcQ#cp(tUpvo5Z}*Y5Y9C<-I}KxHiipt=z4-HWsdrv$L}x=%zaqe?l#Fw(gKLIR
zfXKt19an)Kn+7NZr_sQHu72cmJ<3u{=MfLTkwfBkD1A~*XNO)&wITW{7LZcLRSwH{
zCr~VJeqgln+Yh_);PBD(updQxKb^i2Kqrm0^@)qFsZGA^DjsQ27NSC_u2K?Qx%@Ej
z3)7t{^3}o@)pV+B22zb0`u6o<D%UH*CgkZkt2ONzOE+Cd3lsgS?4kfsmIWpW1Q%Wz
zj?+6@vbTP>;BNY*E&31q_4Z!1R@;{v)n@G(eKzTwmWIS7*Jo1a{sS{>l`@nV(<z~P
zSS4kQBa|qrz|p8-nn*Qi=-$<f!epONEf*mu%B+ZLJ6$+JBkif$vkxLUmE45yz;{Pb
zws-z8?`-^u73|*;He?>Qwxa=NW`<)h$n;XGi;1!Y^Xd~9U!P8_zC?@EgD_rEB$aWU
zGiE4&DCY)D1<q^@o!fg*oaz;lxR7BLQl$|U9}9#G%kfHuX_N?oAjreA_WmyKZ1~Tz
zw|iZHLgo4C&!cP1e*Rq@(?OoMFa=Uw{K9L}$#dSPN1DMj-PX7+m}YQDlQy*_P&=1n
z{ewNQ?H-|WKO#`=!>%8?caSJm9?CDmvOE7$bT{8rc6UDP%CX7kUvuWV$M$L9SLxY(
zddPODVbVEm+34H9m`T0)Dl;+%dL*I}TXw_Ttgy;sbf{|#u0J9~U~wsgUab;Zu-v}=
zWqZr_O76CMY%!poWst9yl)TV*mH)8;eI7^}smrE~v)-4Eo&L#KeBnYVP1sHWgj!JH
zjR=acoxUxWzwfr9v-NjY(AQtBZN7GZ96ny7|N20uIq}R*F&1SD7Du%OYdEV}B!pe?
y#puS0*SX#ngX*cQ*A0+2#v9{}@y5XGH2xn;k~o98`8(DC0000<MNUMnLSTZ?ve}~m

literal 7858
zcmV;j9!=qiP)<h;3K|Lk000e1NJLTq002h-002h_1^@s6Rj^tg0016&Nkl<Zc-rlp
zd5~S#UFSc)bMAdhzt{Vw)-KChY%7wtV4FB`9HThPkYR?%!xAP815<>h3Ifc)WKtoO
z3PnLN1%wHyOie+CrLYAPOfV$z7$O^-U|U{eS(5G6u9kZ5*ZtOe&-u+C_x0=dUcc9p
zfq!Odx~kPzcRlBOe*1ESxAtS;K9d}dDgT%J+;PXC$>%5Z*fBhO+W#}Z{)mN78UCO6
z`IJfKbL}6wj_U$=fZ>UI_N#D@z(GL{qADV$={5sKkj85bMoi;an(w22pVaT8exF%?
zA0kNo*ffS!zfYR(!;pMVFbH5#A+i!aD_-7o#E-x6#^)}sE%;Fn=syCSPnlH`9GbZ6
zut9%HMIICrqy+&LMAjy;dMvAhUA->#NoakN(hN+~am!?-F}=p~tAI9LPe5BghQ@W0
z?};RY;(b&A`wj5Fefso&eWHDy*9p!M3rAh==KaH=_Wq6$`+bN()g$0QR4}qOk>*Kt
zo@n#L)=y*=SlfC|q&qMzz;yz9Z6Qz;F(P8DHEC2mi1|Gz{KCnT|7{K)vG9<)4sa4+
zhBw{%c9rmtj0yIrcODTHi~*5#6K`3;ra^TYXcKicp6Log7ogwj_gJN1R8_o)ND$<V
zbMfn5D?fPp^lv=d2_RXojqt;pZo5+@__~N0M172ypz}bbW%Zf|)jIKZV4BV~O>}kQ
zEt70NSO1<d231<*owR|!evE6>rYe!O=}?sgukm|No%)sM+F4B6g>T>1n+F2d^PGs?
zl>lP{X`9&f1Ji!J8!%ni@R}6UPJwkf)%JY1g-|rMHXEpSXE1W-i4!csFDr<yzGao2
z4B!Ko{eqFO2^cy6WByrzF&M-o=L2gK#+A;%nEHKp?;hiZ;ojtnV%7`p#u&O#Xd>eR
z?`pBNnO%7O0({yZ;UUw^Mr(3r{Py=436H2cm#`9T!qaro64wJv`#?<t7!?v0QE;xV
ziW~3jOff(EBLf_M*GO`&ZM)t+25F|oI-AztDPjWWD$d&Mk(+P+%zKV<)E(gw+eSH{
z#{L{)w1wQ)v66J82-XSLW{T=0d<B!(A*8DV92oitAAi?R^JDiMBICd-*yc$fgjP@$
z#(cz~cl2=gJ%cD7?*wbQj8VF=X**RK73Y5r;3!7{s9V0D_oG{HyAch34G07yU}R0O
znd{RMEyCAqsFf06lx%4eci#R>?Ej71+4{b1{PYKQ@XotOIezR-=4y&H2G!(w#gK`V
zU-?*u8y`H(_MKUlPt5cDnQGmJ>cmQ&>?*TH@yR`cdc*|VMn)facxL8vbMPr+6M)Y7
zOn&?K7#n`CsCqEwEvwJwL1B_duLVqbgad~@!TWx540crc`)OroZ<^Z<ZRWlA9^m-n
z&vT{Zu*T3A1pMfG`}pL49OSMax{ui3j|Pj}|A9pg->CE~R(SbhVxiME-i|g<s}>Xm
z9|S!q<7+Qno&B2^?z`{Z*1$?4T2yWqL=ywAU0q98;oJE-9n^W9l{5h+UFl=rzF*+|
zzdpjD8y(M_w-ie7^=gKtMa$SNyZG<_<7c?3FT^Wkt#DwX%ASb@bm=8<e~Yd>4bOcO
zPF<qBtjRj7Tn8}g=LbdwQIEMDU}a@W4BX)BBJcnzvflE&9<9`B$EY`5w30=QVrnUF
z-28Fw`_*k6zQys!Q^Ir^d_{O>D&|p_Ct55rbkhJ|_~H*RkqVfuDnIdi5#Rj-6(+xW
z7E^hY)QivZTc67Fp)d6D@W~K0?N+nt0?c|<FNmnBh{yqe<Hr}gSu=9PtyiDsEomiV
zgp>q)@?YIX#)OD5Sk?rx3TQ0s?)?~deRd!3xijJq=7i((im5=Q0+j{fE9YbWIvAvO
z#k2LMUVi(t_mcI=_fD77{NiusFjs^pAItE$GkpYsv<UCc2BldKR)>W}jB8WnAYuf}
zH4Lt1t<(yPwKmZtM)}d7-_PNLqoCkdpEm~ej$QU6yzQ6nX8eH~zdvnwd|J^Zh>L=&
zKy?|4Q^Fr!i22&!7>kqR+_rx=zw)EECtjTxUYvn*-^}vWS91hbu_8D&(n_YyZdyBT
zo}XYqO~Wv@aEpNxn(N*EQ4zaKP(|tjxs77Fv6?XkMHtU!_{_%-visdfc-K2(_E6x>
zNo6tes4APH5AgPn9bxf(HJ+a{oLN$I5!^EPa`H=6aAhTm;M;*Gzq60QSF+qOIzp-%
z@${L?SZg_d*6`vLVI>wY?RJq_4@?K;A*~dnMp8yKK6`cM@h`zGCTR8^64LKZG3$k|
z!J33R##0&o=s)dY|A#HL+GF$=P7}_QDAzz$=`G#LJ>UOPX77nPcM)7l(JDv@w4_J{
zq$WsB>jt5)VwFFzF^hK(@y<Wb^5ZxEYu=o6{KdtSJbA%2#%GPeIk|QuAYqZt2C7m&
zzZM5;qMThH6=QcL!xGb3D|HaQ^%baj<r~k;a{0+A?mu*%qn}&mXTDlt#l?ihP2B&$
zFH!q0;q?U%2(F@NS<s3=O`ry*3{nB>5^Gr_h#XAjJc~Dl*l(qHzd6WLQ?Ih<N)1;+
z)o|ptkSj|<IR+!$oYqcGaO3}KY|4N;du94-UxHiAnuTmu`EDccx|6Sz{EdKfW%%NY
zmM?#?kFT8y6Dz$I^7j2dPVVkBZ=7+MB|&F_1;H<YFDbsFPytf|Qw39jpaMZv2o{Cf
zd3e?-PyLYRc?tR6@rMWzRAD3yKm1*3KKVNj@}c|EgrZ4+tD`w$Hspvk8PqP2TjD9#
zR@a@JNQ1!|;lDh#!nZDatORUHzlVX__wve_8nvqiIWL$O1$kAF3TOqWfK(HzF%`i?
zLV8h1y>7{#H}uX5G6lNTviOi=s<?w4<^Uk%tn#6ERFL%Z{NQ&iu(#KtUJ!FV6w|8q
zr45{*C7Ppc_P~Zt<l6rY77>f0c!d>W#3k(0-#^O2j3SjReI+Q*L202#a41FUMxj<#
zY)!Eh!BzxQg)jql*>dr37tmTveqw;^&XA|}d-msI-v9Q13&;DIoU@!STYmP}t9<&~
z$NBgpV=UPWViF%ru4DYG3!AtoW-ZFt3XVm@plDZhE%jizkwk-eP44x8s82rR9izEk
zMstIV=0?af&C03c)aHf7;sVR@BpD8oGj}51<Es!>5-PG)FcE|yq_U1;(GXTsET4KA
z_hydXr+1OrnMH0o&l|NDLBJZzbS=ln|5p!7VWOFIRk(Ig*G)2}jiQ>LX#>Zs+5wFh
zn~uS2sq?y`ppY?H#(OuhZD2b)hITUAJ3&u+6lH``In7G7Mi^Y>`Kw=~l%Gy)qH07g
za~D<T2&#slLP9-}A`U_oGQE)L?`2yUabe-lS)@uN!#sI0&BL!<B22H!NJ|x{$*OR!
zv$(a%SONT+Rovb3r#}BKY_%>}w9Z#DfHIWX#{O-$v2}1i<9$2G2IIJzP^!Z8G8E?(
z#S=#{QLKc)c5d78F}`*2H}F9jZ)3s?cnq$r1XT!Xf^~{|2rXm=AnbvgHdiUs3^OIe
ziY`J$IlSY29N4rS6D$#%1?H+VTq!Pbd8xq6a)n|H>TNyevPv<uxe>I0rA;XxfFrHo
zn9d$|onnkwRFxrnD?j~_Pf}YF3Jb8jqRdttQS5L|QT3=Xn7|NZ3~>d@agiXsg&p~S
z$z=JD(J&(D1t$>35LT1FQqLlVA%p{v?t!~*FY)Rnm?;U_IM3aiKf<P=ofIO+Sg&QG
z2j12Ly*b6CmnbpKQf-#0`B~0P&vE+lJa1enqc($VWV<OXECxr`z*(~<{RUbIv^2!I
zGci5Zv$CWK$=35!v2!>VC$^7Ik?9vwp`|jPq862y7`~tBb1zU0mXLlhp%6q$%0cKA
z@yYALEM$g-(J?r<r$WU$q?Y5r*uO)A2`(*_85;|ki)&0>giHvzl%*%zOJC0b!~J`?
zb2Hq#8%DNAJo?oq_^rQrkswU156G_y<oa=Q^sm)I7HI^Q+JR9NL0IHDo;r4b?>c-B
z=`f^Ra<~|3wTMcsidTnXG0tFnQuOVDC~aB12o7cE$oDh3@F)ya>FEtA38Xz(O<3NC
zkm-k@A9hR_daXxG{p`qn51QJ{V!6V|wvcdKm^*9G8dPJ5yr=A-Sar;=fLNs`2*^zt
zzI8mP=QTS6lf-{$64-5a4jm(Str0cBBAE(j7yq1Ro;ii2J+Tw2HAkfuQHvrfm56es
zM!6PIm{VeJ+516ZV4p?u5kBlClRlV$(+}wsgeH+QVG7bcLTW_l9e}|Jm@B237<`ES
z;k{HeBHWy!?^b1Y&NH{*D3oIgC1r6%SXvR5N`^woP^np57XIvSUg7V~JwuSnki;}h
zo9)x&WNULOy9J!pfHPfVzIE>%?VIM?lSg^+#2LbrA&MY&G2Vkp3TyKOK@LLU!mCA=
z7GlQkx15<TaB}hli{&ysLjipQ(36Ku2GVIrXCN~InNjHLSK=X<bA4Pb&TwJ*4AHP>
z%Xb?h4Oo~8h)Ge6gkm*jxe~Kdbrh?fV#T9@@QveVdG5_8$c|>~t^{3T%+2nGUC&mH
zAdq$rZLYpl>!ESiH_3~qAEsP+Kcl&w6iQX9&f%m;tV>j)0+m`!HR@$@W)JW9_&8hM
z(Z|a4UTk`fzJ6u258{Eked9qgf{sA%fYP6btAmc&r4;kE0$0jH->sXtyzDvsm5YR>
zd2&IXd}^59R3A1>CRMILZa{fy@*>}S^(&;uJwn(RcPlHkX)kHbaR#lq&rVr{4t|On
zjD<?>Wn#8+=k4QEqcW#2o#3@IuW){9fl_&ZFxX9Ret>WpPCn+?_d|xcbA1%ghYa@z
zjP!bn14#fZ@CqqK2cR!+$cGU3!%{&oxqa+>$0%FwNb$nw%Ph~&;H#&It5dkR3@%MJ
z7-PKu1`h4Lfm2tnaO{OA7~BR(rVfm308A2%SUa~)Ae%0vwmxuVjo?vkn)o1hz3ro1
zDJwl`<&HzUx&Ph=anUTZb60rd><XvPIIb2doH-8mX3MS*!-YRfGn9jo927<b2M`OS
z6zPY)jM8Jkr(s16{d>mQ{vpHpZ@|(ePkBYDE*nyTGCEjh_ofPm_J<tWKhG_@2C>-@
ze(iq_^AE4BV2#0hHejW-a7I_(%Fv#S@0Ows@OU<7@8-a^ALh!X2ooxy6{apKVJ2j-
ze=D0Ow(`Nl@NdEbE5#ybrlxsyCQWp6ilKLA$Yle1dtrFkQ;HHDE-AtED18R9MhJQg
z)eMZk56-_HbNQPUHVw?M@1Sz~ft~ENH!>9Vlg*7#i~1;6Eay)^e^&X-hku0s{KtR5
z@iz-id3Dn@lu9E3Y`R&<rcn&kIdEhF&yc;DTekcJ^YdlADz;{Ep^(i8TJ<bUI~He!
z)2D^Ofjrx{_HpaphzIgDuoV{e6!BMuIL^@1n;{>jsLgr2g`m%p&4bq%SF9pg$J@N;
z!NHhYKLa=J8m6aj8;Ir7DfrXhh2o0Gs3$EE`4r?rWo0_#6Yu{pKl3Ml$c4GM?ikZG
z#@x7OI<b{mb=qu$^qS4>1bwB)k8@!APf;qD@HkL|cQMWxTx?0Fg)kIC1!_>3alE$Z
zn0!MR7|619Jjbr_n6XNQo=SyHD=Yl(lM$nLZX)G{!np$eyrX9kK6u44ysw7?-<bwy
znOinYUVtmpj)jE?3BYBbbP4i#L9F0Ccs0xvVtOXCeB!+y<mdnN%dEt915wfBTXho1
z8zuc4o~}!=f9%KbCQTf#)F~<PN}Ts-46!q$QigO&Nd*vE!PgX=GGFr)mpm8F!@zKs
zx9!XGmw)sGFHM)ZZ+?Xf->&h|!#A)rpXdBs!1;n<?j_}Y23D%d(o#em3Em~YCJ=HH
z%9YceQcdtdl56)4#0lqSB6i7E{{5Zz^4ov^6cW^JoeuRs+7K?bvxS`8=-UuojjJkS
z={p!6x{;;jrMlPK#G;x+6IGRJEy-WUfsjroMqaZg@2ZgR5BU8*e1=CJf0FO}55GvR
zH{{{J{5*p_Ir2k$Ir&Bec!~u${*<!)pdqRyqf!*_A+9R6Pax|kRTQ5x#0Fdp-YGqS
zaQb4zzKPq|mO07AXr&&OVZEQF>jkoD)mE%m;Y~bRsjQ$*>Fvvr3eyQ6tKj`wxMS5v
zaVpdzsFa}+3AGra2&z>unUL2fukw|@dzgXoQOb*H9{c({Rda>EeDVn>gN+jvFCtu;
zgjz*$9%2V^OmZA2nf=tDQY=>~RcjQhj$#BWaX>)>X0bf}dV#5h0$|pHV6;UC8=9<(
zZ-p2{wF6%!nZzYd@U2&Vi!H<VGBmuKOeTj&NE9h?6ysIvg>h?djTIzb)dq?LmSR-l
z@h2Z;SuQY=J&ac+Do5mUL!6#^h7)gmfWE#R%q~TUHOyaCmggbN8ER1y)=*6<F=D6W
zM=Vz-9cn|IF%*1->BS;*h09!>e}lQwCDNlIfdq91GMxo-S39T4JMCOV01{eC;cJ{+
zI7xbT3w^;23=ZyPpno&@+!#hu#4)IMpq?aqT~E`a#2$JwhT|`Mle3FoC*QY~Y-R{V
zh+Rxz^7x>@v#))f`|tj-B+95ttpYO_9h>(V;)sTmSg%>4XT(s73(Q@;%6#D*%ga+#
zr3e{M*pnvL-?wooU6b3?QI$8GF#HD96&4XC$O)b+%*N+gx_pZC)E2^YmeJw84EFCJ
zpC7@RFj-plfXBs3emKR2i*NGEn_osU5j~k32*Ny0A@&Xk$Yh2&H}@o$uN-Eee<w@J
zRlHYbr#zeYgAJ3>I0sQ#DbEEg%q?*I)bCQREijtv<K7(uJYDU_NZ90HYWFm;B(jq3
z0rn0lmoC*42|WY^p`pKbgp}^&QsFt~mQN9y9{O|J7#iHo$nXyO`^N}_6vJasSf1y(
z7ayf$U#B;{mrQCCHt0cD<+(|bvZGYOle~E9FL>A6f0A4-P1VB6!V1NLqq1VD6_uz0
zK31%SI4UDyiQd#0cWmFy1NVh|^RMS1sB76~XIf-k%BflIG}!7$i-k-bLDMm_*&02o
z8=Gnolcqm=1En~o;%10+mYLFPOfSDecp*n$&o+hzb}}%X<ITzEn5jKYIy*upwUtbI
zoFK^HG|6&WNfVfUvgu7sm%hb6yfnzf*iFnXo}<b|#&7%)jL!iMV+5Nvgdt=I>Cf(B
zC>-EBw~vxb&!P27cq4SFdv3FqWi`%hHlUnql(w}vYbb#=1gRXGw(g)>9%pWDj<j7O
zmPKmuEVI><%v}C9?pzHGi==x7Nr#)rrnizw4}*j#f^!Ol1g4MB4B@je7YdJYe&MS`
zZkfT+QH&LAU`VG@ps-S0CW@7TOqQ(!+u72SC1tZL%`GBgn<B-X3c{r=hAbPgm1#Aj
zTV6t!7boY{8}7J!D-)Z0Iq~foCSRXrW_p2|DWaKWBELZFS5S>H#*z*O$%dN=!#>2;
zvl-qaVzH)|P)AS%lg*-9#YQ>uJzL55=UG}PbK>RW?AvpYr=I>Yv(pzjxci;t(*rmh
zg>nir6EyjPbP&GM68!|JmuzihA&Y5EVO+D$7rgpLc(qU{^R`<zap<;9oISJ1n{Ui>
z`C@@erHt4L&Q(#AR4PX{JAs&VlK)yAg9#9mBMdxZ0#bem8)WcK!IhYuzslb~`B$7d
z^E@YBeFo8xf$UCJ7Rv;gEH#AXYKqEAs!lnk5sK+pz}=F^qETbiQI&UkN!QHhY79gb
zuO4Fz7pLZV{`e$YwhnW{?lE@l9$<dH#49h&ac;6ikV~vnYeQ_1t}ld5j7J5LAjxxE
zLm2k0Wj$~d%V&A?&wdXf#g_5A2_!={)kh{sW33@lsHw1A&9GR`AlMFCiH^WDs!LYK
z)19r>GMinC2$~E=t!FE|^W3;=oK2$xT$x_rsV7e|v3ZC?hqkcyCgt4O3SvTx7>w9N
zn2TwUxc9CB28|Whq=r<4TxJV`5(YT}6JqOQjJ;xj8iIIbB@S4Mx)d*UEI4n|Ufr?}
z?Jh&d-UZfN1rVHfxH!=suf2AOayer64P$KIIzp`$6Gu?1Dq?LTjV#u*B-I*4+N-8Q
zeIlY-@1Jr6CZ9Zy;5EsISh0zf?6skN%CV&!xq88HJ)0t(luKJ`Mw>zEU<8T?D(0Hi
z361_K1Cf@A;u>-6`Hs78;PuyMc>Rqj6d2z$L|<RF;nlBN-=e~*pCKkGZd&!pR95S2
z>i%Gz-L#$@QcZI8UIBHe*wt1A5TO_a6l)O@)cYHxlOpMmnrXzdI;nC)2U6=49judP
zU2s*I$N6Pme!hY+%I+IR*}Hd?%a;nAJarjsm3+@YePt4Y)791skwy?sy*BFFz4sts
zP^bfuv<oUm4C;kdU)QfLltS!0HlL$htkiRD8vsK)FwGQp4YulD?zR>b5|WJE%+fIi
z+<W-iW3Mqfk!R2Tac<l_!n@zSAFpukY!OHVx2Po94-x7)*!t_Vp55?ub3z+`QEg1r
z*C95EWCx$fBz2Gt22c}I@Ux_3pzbkrkumLdj?ii$ugiG02;_~LESgrqSfc!S7D|6h
zK7A)wE-!O=s=zBRU1sO55%%sKrBsPgNf<-bW7bHgF1{31*JSD|UbX&(hA>Ki@oN<0
zT~fuBIJruxT;<s-57WD4utOG8Ht5HyvwAmyY%p@oo~kav=^)JFd#6|`{xvDTk8Ex?
zg+hfFUbxJulk<eBEY{figcAyK&SL`_G~&H)fI@>lz^Sg;U>-y~icQ|*71U9SYSgMz
zs4SA77{-`XXArsp(`+G&m382#NKM3`YOc|iL+5mjwa_P2YcEqPog*c?$>w$wIfvFN
zSewR}FrlDCI#aLe#nzqX1{*<At<l`L>s?*&to9yx;@TqK&0tfWbbppieh1P`UAMPN
zw#{j^IaiQc1DreV7&OO^;|%hGh<z^_sfcWx=h?u9NTu?SR-($w#4G0s&2A*O3nd~6
z-3RrWVXb!%*TbImhAXX8j@LM0m(^c<(wh}kh~lf*Fec2U$m9mFHeauhNGj8$;Xrl(
zp_~5*Y9z!<^#y>*$psVS^Akyo&dBMy4KJNp$-JdH-!PMhjH6b0k=pVkq3k4^+k;6d
zMh(u#fW@XDlNY?BE_Y(QkAOG{nqk1zh~gQ7ASRU!$n^9iep#E4)p{;}LnpdR=CjW6
zD4Yh!=lAMr!?*6(@e`ZU>GUbV^sb3{(>*189d*7&OoNx>@(OXehm>q5*SnuElgCJw
zE&E3By3EPvCaJ}jQC9`^h$>MujWJb%jFRf<A(b9j`<~VVp2l<ttC(xbnAVU5Dg+1=
zmC~ML&;E-mB+k)V8{?imKl@jK&A#8eszZzw*{Ex`bN5N7;zYBmb3~|BmT{#JtDDGV
zwiBcVDHdlzi+Eoqs!b!dMv(G^Jt@-J!L?G@dXc7))>4_)@6m;-+eJkacPMcf_6JeC
z{3lO7`@r`fIr4}-dh{XJlJPXg{F>q)L<}1PbN!X!&B1F_NM#0)jNtqXmGWg=p&nop
zk4+hRdQ+sb!>!*-%;tLb$86|bUz=iNU9-N5pz81{U+B_To>0%eeLwf5!1n&zI4(y<
zOnA+Ti|efOT|fA1^p$H9=v@`STVbV6yBHX}`Z$vs32M>&=Z`)6z)!AHO&d5W@XNA)
ze{~R*XN?JWc~^_YH20Nva6mg+)uuB=wSl2Y({wAFiZo(Iox1E=CbtpWbQ*)u(j~0w
z<1p+CysN(Av+g^`#%9V#j~?+I`pT0NCr|$BoDx5T>Vgfj0ZQDxt;n=df@zslXJA%K
z%}k^AS;VY4qKz!a`qrTJz;r2N>j+G1Kh`QR>ivRq{s)g8yMN{8n~&(47u(i4oiv?4
zVo#m=_2*(AJ&4!WgCG|qZsF<%AJ-dW-XJb5o#H6hICtI8(9suM)k-L_f={Q01NHue
z*sVP9<nedEa^%P(_S2shf6ZM`j_`;*%0q7d{$CspB>OvJQs0+&%QX~rk~E7-!)p|?
z=9{cKdfIu@j<xG=Wz&vst&|-$0BDmd_3N7SA_g|Fc|0+q`nigo`NY#tf6sEWoO#Rp
z=Nvfj*~2(~3gJO(v+0B^n_73+NN~0#2-|?^EbPsOyP0&~?W8l<MnX`<xk>>OJc{>U
z`o^>GdII26sQEPF{}DScB|^Fhr2UrEJ?c3q;tzUNsV96B*R>@k)KoRqWbd^4W^KDH
z8EM*G$*xs@cG$Hk35L@oV`u{oNYXQrNak51`leU+__1g1zX*^}%bM{0|9f`TK{;~d
zk$;vwyVkMVefK2`d+gYW>qh)Y)4%_;nf>D)o19!Q`TSlzcI+E(X}7ok19q)ztxqfT
Q)&Kwi07*qoM6N<$f}V6cF#rGn

diff --git a/apps/desktop/src-tauri/icons/Square89x89Logo.png b/apps/desktop/src-tauri/icons/Square89x89Logo.png
index c1641b858700f8af1c63122a21730cc4f81fede6..0f29e78c6840f85f2a6f19aa1c217ade4c91ae7c 100644
GIT binary patch
literal 11928
zcmV;JE@#n+P)<h;3K|Lk000e1NJLTq003D4003DC1^@s6RSSr(001suNkl<Zc%1Eh
z37A|}nf80mx%bwsy?XC-I!R~ggoGrJ0EVzA0TGC!;Lf-!BRZqbpyMq5KjSi^qci{D
zhBAl<433IB3doMKg(ZQIkc4dANqXPAYrpF`|MQ(&MSxih&@r=cc#29@ZdKj;-tT<N
z`@QD`cxAjYUKy{9SH>&jB@I@4yo67(=yPv6`JI=pUv$<w`ZH(zrJctA#KG`<Fa+md
zF9PiPu?B2o=dZ3&-~P<!Zl$;Cz#r{l;J*RD3bOXf6o4;7DOKGPrINq<I|xjra9pZm
z{*slhEXp~j7%E|etP;=-P|#m@)CT|W0B}=m?c#H~zJ1dtPy6kGYu<d*Q}15){y(<S
zU=zTc|L#kmLkPw<ownoy*1RM?{-mbXHFH*+pj0#~{?`r$p`W`_Z-2)nr%$L)d|j!p
zZ&GUDj*3!yHml!$=f>$Z4a*nPF@i_OzHrbD;5>2(T}D^y!JmE1_x(GoVR(!Gv(JC#
zX^!}_A3Tzq^*<8eMd|l_;Qgmp)gRyB<o|ZETK(98s(V9k;LhyWUkt;&{^;Y6tBbl%
zJ(Z3X;@=0F#_DAEf=B+}hx)?m*L>HTa$WcCs;YcXefP3IziW}Tpbh_PEjWGg+upyv
zs{ZI&Cx3g@^}jXgxo>;iaX-7y^LwU3zjSb)>v@H8b<ckF-qokQ=7j+<F5>*$6{nth
z<%ci1ZtS5iDkZN|uGi!Ge(3w&A>VbbsVaGc>VNnf>V{8W`ir-pyy0yovyX~7|9-;j
zivU<5#GLpAXTNUsP4~txu}g1$7wlGp;~#pY49Y-)1Lw{+_*-lrL3v2V8ao5tKa}{u
zg>O6KdpkBiYzhN@7~sUl6-yuZm-p>SpHqR)WF_$DaWlTc02TwPAF_H6FtOjUT%N*s
z2KW8S#D!nIAz6~6mDvu4M-Ak9dZZ}2ya<3>?9)#?Z^bXRTJOu2Hojlk=cEL#7*p6X
zBBkXpSYW&<4ZOEYV7+p<<BdrpJ=c@_4<z392X9$@OYe@S4f4^7VNLV=u8Y@oedyiq
zocn)T*K>G@R*&aaaarmC@7)&gt#SLNU-BK-KYHM=ADY~KuY)P)s9=HrLRm!GT+#Kq
zCAS`EcyDLr^h>4j=A7WSmVh6ONCbIERR%W|Loxw$HY<F1zJabnk%zKh8o7mDY5VrX
z8(;syr4Nnn-baB<$|${CneJ@4;j<f`So0Rl36g2a$A@Kjudpw>y72j{cir>1K>2s)
zfiGjsx)0(t3trQ?s_O%1yz8%jSJGbxIBv{sJhSs(o=#sh-&^^9X`G)E{DG>%Ez?qZ
z4y5k^LBQa;K&1=}%|PBb8epm+E#c2WII`VHpU~jkaQzo|EKMzJCx8uZzz`feiUZ^C
z`rI8S4?L9ybH)R4fLUL;DY)h8UAKLX02b`U6*n&$liB`4R!f=AIr+HP{lnj1_@#tO
zS%k4*|6cSb-zOn>Dz>imyHB=Xa8hFNrGY%FRq*>O3O|@sa<T|`6(Dp08357;+!9bJ
zFzlOxymlf$sl5SCrJINQMzHXlHh%p-{@<NVqAeZB0A$Pr^qx}R*bP4z_@*fu6MfrK
z{99X|{1_1Ef+ke*s1_u%3i5NU;gn^K7dEbod+%I#`n#w=3sv}Uj*dzM!Pho_<Mt(I
zpSPglL$0&1lN)!;06!d8a-sluWpG&mS1#kqjld2ZpgIFMGr+cS$m?c8lovK)rf|Fw
zJmv?dy?$xq)t|il2@@HM3Kpf9o=vwr+Vii$fa%=#RC)8Dcc7nc{*hFS|D`}CYY0P$
z^E!@SxAA>zHcGZK_{VGBa^1(zx#;6_6J5<Fx7p#_5&iUW*}u7R<+=}SNW9l8RhqeV
z=KyfexI&=>I3>U@K}rXbz@>-s0O<i<NufLexHG_}5hcH02~k?zgptx}!+%0l-ul*4
zy1#t!<-Z1EJOWzb>A^$0c0Sx{Ke)ei8{jE&62FfzE5A~=$u!TH7oU0N#b5Y`*WTE4
z@_J9IQ#fZgOEJFPs%|lH*%zMv#x;-q=+7wn2QtKh<Oe@;*1GTfbJHIOrNQ~Irv-y+
z05T*%l|%(xRw0=mflJTy;32>iz)XN=7*Dh-$s2()Iv77+3M7A3#C&hSu^M^mqgQ<I
zTUTxR(#N7esIa8rq!Y#}{d)`UX!Y=!M-`uv>ZrJlSpb=)qJmNu|K7(wHu>($7vvBh
zf#<~?q&p3MXlpQY%Z&Y%pXRT+Vf(hvj#T?6l#*zUZ8+_$mA`m+(TC%u{)MoILWUrv
zWJo-N2d;cb;V~{9C6%kd0)P>n;{zfDM+nIbfX5l<StVobfXV@{?qqyjS)l#<4!Zqm
zN7^d&#;^X(hwnag!!`dAp+v6aNK?(1hS02i5ywd#-AmWCXHLK9jF!t@`>ux7err&1
z?nx!ye)<0Q-Z6Ur_v*(cjm7O}b>BI>>OJ!-W6Pznugtm1DH#|*NR}iSM-5Q;3LxvP
zS+NE=V4!G4AR|WQ9l&#dH3v{x#$Pp;;kaRr<=6XI>V(dalTV$0<J;F9EIss;U<Rb3
zUr~|M;tZjbIDhHc8#WJaeQ>HgO}BGaEqc~`GGz%{hW70J){~pBfBiS^U-RuN%Rgm>
zIRDYF%a7hM`q202VmK2pSkhYCcGaWDZ|w3aodNIdXPgH>m<Lb<M-h-^NK_T1_Q6bp
ztO#HafCH%<B~g3LT!2vtQDQupV4RnLCq@-EcZ7KG%>tXIg<*xwmCH}N@-d6GBtsQE
zYg;;oNQvXp^IE@u?Fa8$+|<^tjsjW4XFEqWg@A{${LD|cTv~W+j=kx?#J`Yza?n%_
z(Vh8=Z=876>lTP^-`mqGxT->`0)QF)kSH($8?p+Jn~)woB9IXRTmp1cxEEPBcL3os
z2#0|cfp8L%mzC@t2Zm1o`rgTnhXz7)x14CbanWC0L+4pf+dHyz5^p$h-MSmE`sjn1
z^{bsrE<Eio=>~){oYjyxs~}6I;D@31abwQF^d<ka{cj#T*moP9I0d=}WBmzhSO58k
z<HviYUHh5kmH|b;Oeu*;Kn((Xf^k#;?Te#;C&?efQxYzuwq8na31}a%6@%@9$32C(
zr(~?E!14euL(WVCi_d15K9gHp`@Pa>T_1dBQ*7me$S*UTxAc_1_~lg>JbLoQtxJNi
zh)XZ;{P<me`QfMA?Dmu{qGk!|qtY3v2a%ii-u4B0X4FelKzH-SpE0`<!OlUCm#Q4n
zqymF+3TT$g5tINg5yCu!!6zK(;n%H~ac#Li(?Jjt+@!!a22}eQ43ooXR)}>1Vm@H1
z5TgtjY+}fq&9Ln@DYMm_T+;BG3noW)TuoKp^_y?~{NOtd-Ff5JSKZy*b)WT{YYKaR
zx!wJ?r@VkJVYaOKD1aO#{`8;V3=&f3&NP}bi7+L(vA-XI%~>D<B~exg3d)!%%pl~<
zu)DLcptz)n@2SX5_)2o0aZv-9+y&h<BL=WgpgdkezBdokFt{1Ff>_Q9;&TlnxlrK7
zCh#s6;KDU!E(;C8qhnT%&LuJfiM#r@J$lEj-FK{NO#Q+6S3kVk!=ziklGzG=FB9Yl
zOwCPD^+X9SotlbHPruYdu&kA_hGy>H({bQb9A_<)zGo&Tr+iH2Cy;jr!8nJo7X>O*
z5Ud8I&M*|Xr=KPB8K)eX9`t)A-N-ahoDASO0?HJ0tR0qt>WF~*6q9C*c}<JCT)ZmF
z*@9kc`^^vBLT5y07<H=^uDz%4iXc!|5Wo~ud~Fo7mt7by9aN=RE}g!s!{;QBFxoS7
zGK*Rk%<Jx0wst}5lGB=#3tp9scOK{YobNkyDA>CHalUi-$<KOfdbh9o_qgi7p%`yj
zcw+8nTcnW=Ocrv-gVZh}3UC}g`DP^vV4>*e7&jSU*b-(UE@dJvTQf0Zdh)uvr;0o8
zY)Y>@FJ~`b-=12SlI0kF@<cy=zV!?58J>A!CuI*2XB?gPLw%1wTE9AqDYHF}7-aIR
zR75-<RL;_7M`~W<vPDZfPFTNe?&@<F%~^UzHr3fGSOcnl5;GNsiGoDWgdg}JkVuK(
zq~&AQ!Q$<^ho^q}<NEiz;lNXYJTPTj3!AwLJQ1>5Zd~)lWWhc-myp{2xRQc19!oGO
zYyr~>yp9%b4~^XSo&A$P{K@`FTp<uQ6IMsg6qY?z-8&3~G(VoDKwmiM+H@O>ZlbEs
zNcH;znE)oN)5emfuJ$#nmn~Soaarfu^X4`$S(z}~5rzV#Dlk?8_KpTl)s+FI146*y
zO7T!CPT9v;(J=&X^fs)#`bX1`4eptAAKAv3LEq1$s7x6anhinL%E)@beI*6?<B(j1
zipuGz!w(94W?FGG&LnKc7qlrH>@|%ZCUg}V%Bo-VddBI*J5%es&tLJr&&<g+%yZ@V
z&}5}==WyZRQ+*Q$_6<)Dj!e3fCBT*8zhlYI1)i?q#k!Is06D7fJ9Do)^TKmJ`OT#Z
zPg-q@W`sUatpKC>(5se1&vQK;i#TJPo=pKm(X`|dAXK@@P=WyU1BaVds&Z=gm+!fA
z$D8H_N_Qkw$STujT&pXjkW^X|zzP)bgjABUj5^57po{_#Nx({g(}z|qb@0qSPpShU
zI1w8<J+Z{;^FICM*RQ$kQw^ycVrGa;LZC4XWKu4;nMcJR#Z+~u|IoyqO}htnKio5X
z;K|;>1N#TYho&kh`u`UA!<@&<2DwhC$FOYPThG1WfejnyV8<hVWwPqXz#+>7XJlcD
zS*9U4#fu=IyDjw{*Kvh&Xe!xc2t$rAq;E8M*(;;9`LyO09e@3u?L&Y09)d3v)q;@%
zxDkOVD0K@NOkIR9&=2bKqHC1kh6R{OfZISS4xG5EgkRhnoqH&KFvN`wi>~<j`r|(G
zhH<AfGf~akiI{;@l_Oq4U@I=;Ru<WKqt%dEHLq*QdGFY`HhhPXD8s`fCX0iGgTp;f
zJkzuD?(O?_JhXk^o@aUry_C_bS+wLRQ_RIytQ$NCr)O`)34M`(jPlaZC!UzV0}nzV
zkP=}KYLNA55K;z%AghZ(hMe=DsHAosFs-UzE*v-iL+>8VKXBt{`PRFY5%@?%XT<?Y
zKG+N(4H=O_Ohp!?=?6neBf)q)3y3(w+?EiFyUGXxLthg^%s74i*Y8@n@RAK9#eBgO
zW-4Y{fW@`-S3Swy0H{cy=m!`p1&$bjv`iKxESslOojjB7N}V|8j18||h7D%A0-2h`
zZMWR{z@L8e@{J`mTBh?k5}*B_f?StJmE=?R_Ydr}n|B{4moMtz69c+bfDD;7E~yw~
z7|I|BxE}=ibJ0%=FiC9@1F<yYi4+hr!Mzzqb}K^#i<@?3RoCC$I==Jarcf02^9*1n
z6by@|k#-X>mD0hE`YvFQnpz-NkpLo)IhM`wVcQI@A5ekL*3bXuT}u~yaKl8UP%yb+
zGj1XlXRw<9#|7LX*#HCi|G3GyXDXP6;sIwy=qX+)Dmh+sJ!2Ts5?pd-V9|<ZZ&~}>
zU)`PF^pUOk>#sOc_U?CBGBH&gW&gnVVDZLJ8=F7&rEJ!!H0GME{J1ZfV!A>NeF;AZ
z5d^;UWx(m~Ml)MM5LT{`uE%(04!|3L;2_tX4aE%ZdOn&OPqez5KJx=2*mxR<r8u|9
zS~&p>81?Ea5_M{7n8z8+G$3psk(TH*I7iinRLLdXxzB&4d*L5#DEh?`W3dFdfR$uO
z&8O5`$-*!+`9%4+!2v%2?0|70AWaj98BCf!U>J-W2Dl?7av6(n-dmKn+`I?lLH{;=
zb!wIZUo;&U21+;mV?r!{^J9;kebR>4#62UH;MH<~AY?oU7080UFhmfB2sQbwJE$O*
zi!cdiIIL!%?Ib{DfU#$|CUlIrZ9s-z_x$(0VL0|M!lVqWB;%&7B%K|BK#`P;mvJQ_
z7-unXo?)<3K+FajTPW3wS;f*!(3-vIYxcr(QF5z}gkcNv9tj}16fhfr>1TjynVdEi
zJro_d_W9JLwG6-u0p9>(CJ?zPg`{Qhsh}L(de^?p{)sy`4VCY|_r=hmN041aAS?Lt
zQ0dC^tci}XO^+IK{Yk61EOH+B5h>)$2w?KdGEkCyHQ5|vAqX3KSr`#$c7f&RNbn^1
z;5Lb=foV*Sjr08YsAnw}RKamO3B(eBvKWM^APDGsgfJC&f`MfLI|Ep8AemDr<pl~s
z3?jBLKtcp&(lp4@locYmj3IZt!qiqNr^f*mfQvv%L1~^KcPDh52o>X|{*b;0(hR_3
z7Kdz*^7h~EMeo2iXK&%^3#2Bwk37RTLKaT5tZ>5N=|hFDpE}Urli0Fjr)R|ld@s}>
z2SM$b09TTeB?}{ln4LmA5r>EgIMphix~q)QLkg)Cz)&T`!Qp8+Rmj8f8D~7sV;PA=
zT*+h_u;U7r1;i+eAgeaPtvG{~WgrHEEZMe!Sc5{z3Q_XYm?)27*T92D-_%~r@B-|m
z3=1{@p(l_ZGI<!9Jdl7RDey_SK?o-Z-~<Y8Kr<53^#RY1tlLZq-22#W@4%r0c5msM
zCpvPh5cMZ#DTRCfpjgLI@V7oOTD{>zs`p*ru?(xynOkm^@;){8VF;?cOfW7GDxbSS
z358N0ij^5u91ngdz+x?!^cLXskJ?yzu8HzQC!C3lWI+*@QRIoFL^ckDNuZnnICbKv
z@}r+O0FeTaQ7}@F@i^m23lJH|%7ntSq$=D%QRd-S#u3lu(6}sv{!xjZTMJ;*MZ~0q
zI8VaT$#o<XAtGN<73hajNeX7v?*q>?8+i1YUCuLm_NDrZ-#9n#?b!2tz4WYud>H6)
z=k{w&o;h*z(|sRxx<;M0#yLiz!ZB5>AYU0r*&Bi{C!pX#DFMMV5WES7Xwg2lH0<K(
zU&XNUT?}m}2|n~#PRbw&!?2J}E19)999uyp0p&y;5Utt}q=HcpNd}%!NX3}e#;FA3
zUV^e9Kp8n$*$k5Homg~U1F{PwwtY9mWZwwFQZJM{4g(?LRtlMTE7FNJWb8JiV>zm4
zI0eH%0ofF=Yp6Hav1e~;xP0TEj5`nB^HKnQ2_PRHLzSO>;?yN4{^7YBI#V4@SsAi2
zADJrgy$27;J%{?yKU~6ek%Orw#A9*9?IZ*@!6hf3h>;yYb{nu{BST?=0+9tXnU!hE
z0%AZV0mw8E_~63Rg@_J>)X!rHMd=tPHxlFIqXFLn%H;U%CKwGdw5)AF*J&a4-pVl3
z=Sfag8;kK!n4m1rsT{;qse~|~wo4pbHX>opLr2phEL+fqJ%dBR!&|pm4u9aYBb8tM
zGhQOVF9GCwXBt?$=u?09y0bo&8!5vZC~za4XhCyhmwfG6r{hftiJ&r$k?{fSIW&x&
zJtZ9IcQKRqNX&+`GLVc5^gR?J-3=@_7reKqWFlqrWSk)rXYk@ckc#M1=}?Bjxa3MQ
zav=%8j*&bTh|zpE6+#235Pg|!K)O}P?(;)F-V2OAMOj2h6}e8cC9@Dn6P2m~&!bu?
zL|bDO%NEUG?Qt=ja)OPe3ql~4!_9ZL;nQDv@GAXLofG5egB<;k#H!9ueEPNPzVufU
zlYzrjU>F9+WKm&iRLOk?xSil=YHUM$Ya7nn0K9Eu71h!V4)#rA>z*=p^^aq;1QZU%
z!G3FC^*eylC^+vA(O>~_4lOElQ?x<^x`RUfJ!ODXer(u)X+g%h;`CSaKV<@*1gvHQ
z-KSGtqh#O1hHlc9%OT2B9)d~<F)@v{w2$LgG~wjq7UP5^4OraSj%==poINT<3zZoI
zM$F)sy?aH_l#c!8L!bY^s{%DueW~u^h&wEd2`Cj}ar65w*?9W3*H)ac5c)D93=y$m
zBs5`=Wa&{(3r^`*EXk0~3A8nH%xeZ(Q!Y%igt3_tb__9WpN?T>Nepa$5?-%~H(m<N
zwSei-0EHo-N@`ArOi=q|uoz&FCATrOw<*{ra7Q2D?gv&Vfd?mma51p&c8Q5cJeV^j
zv?hjd{1O)@t+lXnMG^~r8**5n62viHvN1l%P^t=ql7UG@On`PnX|94-t+(xO|K|G-
zee%jbIty^f=e%eZj=dOw=ceEA`U}?o@K!%C3Sr<UqAHhb3pWjhSd7Y49iIts2*#+`
z;=%;17*%o#=?q6}gTVYoprgS>DqclCs9=}}*jF@=JI+RCZW2yBhRP)142N(_Qg<<Q
z#%?H02qoGX+ByW10=RPu7<pQvy&Pb7#e*95&^lSg+Qkejy9K%zB@k;!Kr>Z-B=`Eo
z)e`%5Qi&;b6M!o+4kcq;SA0mA3~3uYZAj;oQ|;8{KfB^zzxv}(y{E23dNDw=BVK_N
zUw6XBb-#QHs-YA}$JQi1{XI4D7^eYKaKxy95CpQ4oHI_`fCii^NtuOZF&?K%EeRyz
z3@tf^xlLr{9&$Mc)v$mWgcy~;0F`RZS=h`%emu}Z6eB5MWPva(krY0vqg6b)qk^V9
z$BHE;+Oq-+n_@^bQNBk$1fZ_?bUwsXA=22n9#9$s9{H)%=Swrt643%SdM1!<0VL^W
zn&24$XZcAib;(tq{PZt2ee=uD)jrPx$kEiWc}K&>lYTvxO0V$TYRTY+p#zC-;Sk>`
znWP?_7O-%}E$SRoS*p7ifDlac1jK#o*Gv&-qzN56rI3s>o=P&bWPrJC3~em|Qq2_<
zN(J2dqbf$aO`LN6B6vlKk-ljZ#)@cAKzjvfV>YrnV~C@=#KwvZ9PXq<zN|1=P{>z+
zQW+={xFlK(sK|(J@V>hh3gbX5rX&GOZjUV4Bx@FcZ8D@xdIoPv!f9IMq%QpXKRj=H
z->>gF(lvy?17yl12xF7Kdg%>Y7R|r-gmPut<A$NjRXu2$NftE=s6$QefxssF7o1bI
zW(cK8c*^?gAk!Ss7A_cwT8NwAlr3oMPARlD3v_izJb2SC{PgiBAngp+UpNPSyCwc$
z`9hp_assH>7@slGUoy}$DKU@-iUo<cz6VG&aEy&BIIf};5MjuOmesSI8npzpo#K3E
zk3#Qb3W)@CD~qg{+#P{zllv122|)!9Rj;9(-@v_bekk?UD>lxVarTcKX&~hPc~4Ja
zZuSjtT{Q1)YpPDZqyc{ZK~O}q)rbWpSdClP5?V<Y>3R%4m8c<fs!F6j_4<hUA|lBT
z6sn$*)MX)I_tZE8sjz<b{ULnqmY-uHF$W*|)LZbD(@(_skitLz<S`898*uBc7=FBs
z;ohAA_V-CtXC$gqz+?AI%;XgcdBCYcx}K6`xisO3$Rgf5R6wPoWV{vNF)FJSCt`@Q
z6E|R}dO+1xRO;(TnW#~hWB;%;+Qkxi>FJmMDzd7V$z4#Oqp`64qCc}@g1Y?{u{>mv
zy8Tmo)FK=wPLl$j?!O7fbw7-{`T?CVIQc;@VBD9)+L3huR0o8#Oo3Wifs%!il*zP#
zollJ8=l9%#e0&-?YZaau1b(^ALf^zRwjTN|esb$RB-0#0UI8VNbTRl9TH3?Vw+ARp
zMO14@Ei6ggUG!Q?R-<6SCAs(naUf*zfhM?IpSTQ3fOFzf=)B7wP;eBcs|sZYM&GDk
zSv~i{Qxg2R1$2!sT=)H=K(3Ecp_t)J2AOP9n!*C408!{sRzWqbhPLK;$oiuTk(8;{
z3UR3zynw7hX{!#U20OB5ZCR1En=zA5mkPM+o~;-RA3@UYf@vC*#^H$vrV)Ci$I9dW
z#~(p8PyIr=aa6D<83u}e2E{zX*dWE?$p2D&3TqGY7q!<ipwB2E*+l0S!XuK%58(L{
zUZ~)N5=Bp<;LtP8E|a@4BN%3(cmMuDNG)7^nZ-!m-yE3u*FVkeSbbk(+dM1NkSWEC
zxDk4mLF^mp+sH~Hvp$^EL<IX`C7G%{6Z=KyrV}7aKm?P40;l(AU5A<SasO|3;n4Jb
z2n>n1HBYaLrcOq+LM#!3VI^>2Vly^x-GHw7^Dr~xOG)xq>TVOw69NPK70-1<)uL|P
zC~{R1z!7a5@#Ms~rP>9T+Z_!ooo^^POeLVGn-ddM?FS|11Vg2gF+G^KhX=>)orBk1
z@2LHU>T6zJGRXB0&-j~uvt{7pr_Pyv>$T09Q&#30<|3I*1*t^FNr<H7d4hX%wmv~f
zc`T*05x~@^L%pF9(bAm$M;A+CGaXln*!LwejRv;w+>4%rn~`U`kg`_7GBYqtBeM38
zIB5!^4Je46cw)yRXm6hbGsbzvRXU@hILtYdV}lBwL#=I&Adn!n0kw7Ot)l3Oeiz(I
za#$%2rwqg`6Q*V8^@L?r!syI2pPtFv`N9MWr6J5zo_Q$mZ~D@-|H$nxrkQ#~l7M2k
z^|4~%sS}1O$1iW1e)Y$*v9%vgCl;pC4NXXAn}Srb0U{aWfyWUBQgg~0Rn91@leJtw
zl3!^fkMd}OnK~z_q=~WVG3<EyX-vt7A<QIVMl&oc1;dCyrm0R}CRiN8G|)f&Aod-6
z73Owyp;RToTx7*eD3lAp%(z6lNl+hB!$Bc}(s>m|H-rYw5<A0?Zn01<Iw<<%7@C>H
z<kSfA#c_Dvgy#f3ca(!YH<rR(4>;lI<dFjVB0-LvJ59Dyuw!Q_*zpmw((vc0;)+){
z%$)tjxH)fCDmh2y8ajA3*NPNr8&rb$SZ$$FQV&#DfK;4lfVFl)%LTv%<#aI@+c)pT
zr1K~oHi?Y645rxtPNZ?IUr3r^t-)soEF;IO{z2^CzZos99WV?5*NZyjWL}iPjP*-o
zT8Y`v7Oc}uEi*8q0!ep2JO#HbFf_Us+jnh2$fn`?(<G91*0y$}Hjmu==Dy12Tb^%n
zM~P29{G}A|6nr&Zp7tNUT`?~>F7@%dMhcIXCi8LIHd~NR&P6)cj$A_v(y0d6BB|Hj
zQGTirYOR;j0vJYZD&(3C?AW;tL*rYKm%9+Nnqiua(lT>g2wJNUO$Ew!sPN_70%u7u
zlVd3VF!~49qGQft?ohXr;sOb1l#)}UAty0S<j0vN=Lu-v1-zN4TU{-NNZ1A@3fnPK
zz8A@45_UX}Mxz}Uo!E_ooA^*)nP#9-TOy}kG{8p;^5GG+`lFTn3MNmg#^ef=!T{B9
z62-6=#p!)8W|FW6+K^7pLps}zY-2NW*#>S~NpMB{7<m$j&cz(NpXo*K{--gc9t9VM
zw9H1BMiV#8422-=W%cx?LPxvYnB?4sC7R#_hp>D9188h&Lp+h<<!T5r(}ZBsEqd@N
z@l^&&(-M9e@T&l=Y-Kefi*7Z^55PShw;Pd5v?6XKG2hN$_31fSTc2xWFI^M&5=r~|
z9aYM-l89R^;6WUok%b%P;mK*Z;XdSNb|Y5EA~x8LWV{{OhPh~HY(+Yg!Q6#0^o<VV
z$t_zj<v#+Sl@T+WVHyoEjGVNLEVvdR*VLCfB{v|r%?*(zY7U`Q!FY8OcI@cHvgPYw
zC*!D8DkxM&dA`(-xd+!k_>BnsK)Wh(9l}uB;`KE|hK{(|0NZSWZDf&&rSYnHX>_!4
z>cEq;Kj!*mWg2nB<1H{{29B49DH90790FN^FN^SG369!>LTNW9N@>IfTVPu)*!qNl
za(Mz(Y)6%iAf_!i2g_`RWi-Mv(^@x2D3D&bw(AfW=>b>*jKyJ!MtJ4~4o?0G`7M2j
z*>P07Nt7#t2+c{HTwRVNiD1lV+pGxY$VBQHkii(YjW|+P6WY?PSdvSiBg^4T`S5&N
z`+AH)CL^O1i~AN#W`V4_T*<-|4nh>*1w{lQ{ke)TEW?v|xN1L&-d>%=hP*`c7Pe>s
zxqz720@G~LshbdSUFbw>wYe@hl%iKA1W$mhSs@_*4WCV5)V&j`O2mi@QYOaCgiilx
zR|YEGb%3Q}gm@EEz;gngirYx1fs~a*XTv<q%cYPoBq{-=bOyXx5-YzvOIC~#`zAwy
z<tH>^$?_cb?w-Vfo@wN#(lCSzg$n$z2tO!8swRYr)`+=~ssaJ(Mns!636X>)nz_Xr
z5VLaN)czp8n%FL_e5atP<(v>a4nw7(R1k^M4FPHRP&&eriip}%Y27)e&zdm<qz|!e
zgPIF`d}0!}-S%xPT6hvpJpKeYWrj>5qpQ_GaX10z#Yq8&YVBFj+`mkBp)|F{IG5R6
z0=dQnPF|P5iq)+c=qsRi-!w*tO5lDDwnegmDqO#SAS^>ElG;X#Kj=mo!Up+a%g8~9
zjD9a_g-|XXRh9ZZWk|+sE;wZykrbCP3sSEOrtc%_oxw7bP#j1kIL1b%apzs%#k|fH
zSatj<xc`BhQ7TPi_pXO9)jxucruj$+t~(>XRH%j=Q&R?9+5%=4#>)aZQr$;l8p;5i
zY6!RLBb~Led_@ZuE^frcXbJm!rZLc8LZz5O%5Ky>em``hmFWbuQZS4dEHecw)&ff1
z>U$CCw5+bz(OCfrvMtGlBsDIlV8~fqyA{DL3XJglGD2?}mStjMat6P?;~EqSgD4iq
zuy5a17$Sz|+%lxB405SvJ!6Q+pqkYS8Jxh>G^(eos+VudFV~VOB_;lXlb;(M&tvoB
zy;!`c1@q=MA(Km?qce;4xmlD-RrK{0(6cv>nJJ$-BsBn|CAeIW|BPvX$&nHjLDXKf
zl8Q0`V)zL72z(vMgaKhBC`SNek*J1b=VaOCY8kiu;wDszML5+8a_PkoJO+c?u&pd&
zG;>Uwm^rc!PHh{#T#$?<urN`w;7Q^OkF_N$U8L$Nh-6xGTeIk1+J-|1#&F=k7}{EM
zm^Z%}&CO{f;&Cir9>a=N&G^mTL+CqLmR8IlcsP}V)M?<H+R^&G!~1elWk!X}vs8g5
zM|5Grm?g=Aqra>DJ!8@kNlt!!YH|XWkw7-N2!@eB%pifMDWkSR#Gz<%NpcwwGg!NM
zRnOwniV6_o3H6m8Ly!^p)ZK_!wP;bx@yq97S$7Be2Pe^YXq<1}ykBP039MK_IdU2?
zCeSt~iGv3#5m>e0MlxKz<VNo^Le>~@c<kBluWO#`+wG7qu93r}1<|nU(wS4Im8#E#
z)uvqt-8ib+bfQAlqrP{M97`(NaDW0HS+OSa;2B)goI%Z!k7?iwrCag+K$py<y%-zI
zW6S1VEL}PW3m3Iu@uF5aHd?^meZ!b3l+oIj(|s|D^nwe{bXvtUJ58IqX~$4&W7W6@
zJx!jw3Mm3OTF>y@U1%e~^>HLS=cb@MyGFM%?GhrIPQOPpA^Hsp+yQ-Oz$Bx_gXGea
z0%7Pusz~gPV+nE~tCb*hwUv>($mUXLX-Q-E-XZMWJA`@jny`3r8_qa$nI_PEF95j+
zN|hppC|Vb&anR(^;dO!<V1k20{MtzC$3`5kw*DF+5#0;2P<pS%5@}HNO^YfSJxQVl
zgMLXuLv7YI4K`^m=uP4`0>NF+14-MD8OU|3^5o166&$oB9s!uJEv#9y5aqIiLwyq%
z7?{L?gX3sx%VA+x3mO|pk{M+S+U{tFrJ7~3kc6Sye?*Asol40j$#-gLm_D{<&ygZC
z3cUo6J~HZf>0`7EU9&>^M$oK?(rn#eCbpAiPJO!o;<gENqB<m_633`GWk<pdkNGYE
zo|>2{RQn62Vc5OB<0uwAn5IBBo5ZSB3vkwk71|dUixoWh&~9vf>X7bO>r6rW#(JZ$
zMuAJRr<x(w@zHDN>KigeU<lp!qHajUNo)FFFWQM(U3#YItsm-(>Fa(yaz_!^5&c<T
zCm$%qBfl&Wsst|vBp0XV)-eOQ-azz&q5R#~ncTqGK;F6KXFIUvu|DMU6<y9I;x-m9
znu9aXT#l1ZUWiQAj`~57r_&Z#PYh~3i{}Ly{YsGQh`K1xDj1@kk|vNfi1ix~l`DG9
zO7wn20!4o$Hxad<h`m=_5W6SorqFI2v>=O$9@^!sxvfD?ID4Pe=NRcCj*U;Q!!cO;
z`QJ56z2>r1Y8fvVi^0~-RpXgmBbe9Ki0-8=XlqL$W|^2jzg4%8f_hU^lkq_$xTcJl
zQn9FUr7x_uR!?^?h<7HYQ|n3e42VFi@4xaa{<W&5t^<jHuN|Rp2>pRPg+Ys3qh3Po
z2Gre9OLng3hE=;~{PydkuRn$$*VmE+YJ6(n<QGp{%0IWsiqC^WspPuS-t){TdU_@>
zrz3|YOPVluZZ_f$j5-TOsTPBx?HFoJSf%}Pedlg%MHI=Ny{UCyu1&Wl;jITQ-5{@V
zYr4zzTpwQhTs=3YY^ZLakraw@H$kq(o6Z*#+n@RI#7yw$ZS~*%FR_~zol1<&Upzne
zC->$ur!EK?bC?Jv6Q)JoC&DV7O=7|P2F&eDW82d+$WQxPz7^7jO(fgUg@}MK46X|j
zQX)wqGwn8~r4S<r_MuvxkR-l)HeGv85fVv2B9NmkoM^9&!)=UccF?q->M06(QGQPP
zaF3=`z(STP7M?+0{%ea|)qminC^-Kkgl1uof7aSov&FvPBW;<te8Y|}LLkBlDG^Q6
zHgwV-l2prtFidG0MilsJyARSPP@0Dj2B#96B)LopG|aJ4s<;^L*$3B~l$3l#K3FFb
zbrXF-^SA~m4HD$&ZlVTX#{nH-Ltjc61WJWA3qwP?Gsu^>+&xyk`Q1Lo$7T!Q=xk<f
z96l)n4UH{{*I(Y6eZwaVyB#5u6)sF}5W&kV@`(}8KwLzvqe?*2``V%jWYZ)KCz?89
zC={z0>fH~Ql!SVPPJPR<T5ITe_&)2Dqb<p5XzS#KR>6j}^^H$kI@m05;W|UI<nH)R
z-h1rIs_fYn9Xfje*O8gk@!W2%#X9D-rQZ1Erp$ToH0)L??kZeZoC}*D<|=64<S43<
zmD5hKOb87!hlQ2}7N)1F80_tlo;ykV;b?`7t_*b#y|!0Q9a}wgil|)z0V_i<(ErGQ
zVhIxD`Q9X|&Ys^C{U^U#3ZA(yM6vvQNM?5<zN55RWi%=4LBr-<i`!EdeLa`i@OmC=
zCM|Y}^O&Il*L*OkK+VXN)T~)pHINrtm>jEM=s=J3ya~|a%V_Tnou5RSJ<T`k=*B5}
z(oPp)7zXsrnUSImO2Qxy$L-l$a-Y7U;6L?qUyV=vTNsYcE{8{XN6_b6MVv2Q-jcfL
zpBmC<ZZu*o)X}IAy~(+0Xpjk9!y>n$mz&Z0-nOL{#s*6m>g|!fHx8viCTpf*jGlG6
zpk-fyBv%jw96Ui?aVCAZZvSx6+jeEadGd#@8tAJz^xCK|dOW)S&dBd+Cvf%xu$L@v
zNnY^xx%Al=nejG?myT&#(ll*L>naQa+=6M^SaV(+PyVKe(Scs+yW_fbMHPcmAy<m}
zL%viYtsP~SV1`9<BhMRh%Fd2!ivG6is$tJgt$KT&J3IQozVPaQkApq$;%vTfX_Nih
z&o*Svey5$74`$h(FoYMgQU+MuXzpyp{1w1sxAs$?P?k%BP}1R{bb>H+14fJZnPn5O
zK`@4@yZa{v_sOfu!JbDYs?M<l_Jvn{jDA)<`^sc<I-24e{vww=>#{_m8^TI}nU-h8
z<3TY$0nZ)RL~jt5sY0_NDP0H^7ErG4y0_$RyRsDQx-US!c=#6%>otxQxQEZ>nE$+b
z_LV?7mA2NLlZ~(Yc*<UW4nq>5uI#7}=n^GF7F(#ey|<OTo!>79`yUR}ByA#s-?yLr
zZ}+b=;04(Ty<xKE*0|_eYl`;c!Bk9!r9M}VJmrM_`z0#X=YRUxx`S87E8~^%%6MhG
eGF}-tJpMl$dyM??x|^Z^0000<MNUMnLSTZqxw-xT

literal 10888
zcmV;3DtFb1P)<h;3K|Lk000e1NJLTq003D4003DC1^@s6RSSr(001gaNkl<Zc-rN?
zd6XUZb>I29zh70owf9ChmL>p_AXY)#M2fOVfut?TvSrWM5;QtGa%4|@<P%4k*fUmU
z?8w6)u|4+jvBxt`>?CLGIP!Q28O6&;ktI<yp@kAjQ6wc200ClO8r_XvU%#!Ye!n|^
zRQ28sbc3{VCiBP!`aRUE<y*Jz^1aJXc;he0ehv%&)xGvB98p03OB~(6p&<MF{|~Rn
z%%MY%1@M@;St;DW>#)u5uAlp)=eB#hq!DZtYqo$WXui*YV99rbW%~+N*?&M_*Sr0~
zd%Nh*g?|npUA$Q^|7W`7-O7E6h+10^RULM&dF9NRe>;6W4Bjk|1r8f{!U6PcxpyyO
z->)h^D8ikB^oRr&1QD6nATp;(WYO<)pRZ@T)wWso`SSg(*lyWA=ROw%MG#%sZtnZ4
zf{4Lu>QE*{?8^r8H!6Jg<jLPYu>kfHem$y0)~6cq0KHq^_5-N-M*{B^8x~LnojZp3
zg^LBjECY^>gSY05VAanTzh4#j)ow&4x`4^|Yw}|QSR-N(2{B^vnzmKtPmS@ved5G#
zy)vgtZY0%mWA*Ta>+9Ro;R_wVYOw!E#GvW{((F{k<bcSVCc)&p!Yq|SVa@&B@bgtA
zdJclc0E38`gGTf3cm)-)fwe`vOJgzi-=t~nQ?I}NyEAh*-2}+l7rVB;^=_+$KQJb^
zTYc&gQ7~rilHYU{@jU~0;pvhb=w$$}_5`RZUc}fSsNh`koS68d$B+N!DR|t%huj80
z&Lw#BUH7SkUl1`ps7nzW%s*m(#{e%?Ip0fwxxR{#Ik44PTME?s38&2;JbCiBo?lC%
z&1&unJmGqV?md_REIp`mYXfZ74X|8yyT!Uu<^h%!0GsO?xf`9!N`Uk2<|TO1IZJlD
zRrV($Ht;TXVoYyft6$i&=Tisa3HR74Zk|~w*~etlru|iM@+X-Dt3#|^0N7+e$RY_?
zC%{}6V6zHv3&&dknClwMwa&%Jf>F+HWWL`e+vR5?i;g!3%W5~w80&rFj08Pa%%AMp
z^U0259FPS!c2$rwH!TfHzab_(n5hV}4B*8V|7HLzs{*{BHWqm+Hwo~ZyS4zZEMUhf
zI(S}Hal>mfVy$zn)Y|gFfWrUw1RrvT`H)!y<jn8u8@%^nBf-z&(`7pN?+W0BJ*{r!
z7629uRxDO5M$CpJc&M|;-+y>Fc+Iyni-25yE$ah#{;b7V=bBDT@n;Sk_~rYa;0eE2
zZ7f$8s)m1(>nHi%0KC*cT?^p3_g)pJiZ1d5uB(Gh_Pw{?Vfo~zZl}`}5iuF~YZ$qW
z0Gz9y><n!f;OsvK^a#gfImiZ{aGN&Wy-PGWr0Nwh=8XW%x&dC$?cBh~mD>I6)pzo6
z-<|YJ1=R&}x|Wd>$s)K14}iJF@|NudK(RLpRMrh}E*N5ry0(gh@7llr*LE#7g89`Q
zG5|gZJ|H$I18%7wym5fn?+4Eb&RW|6>e&`Q$U}#IokxG;AMh)m`UIc<w}<(O@7sm<
z2`bEkHm@dZc7vP~4i*v~{jot*tNi_sY(i5{>RIqMHVm*V0XY9%RB<*amcf4j;ORpd
zXgRC$lfY3abqxKAh}n@psAj2~_ICxaS#y6P2GlbYzlZ(r{W!P$vM{<gq1F@d_5sTe
z{N!B>)jVJM_8C$MF_QBUBJ&adJspPMJW{0p!S~?wR&Kv*oS}y0*moP$ykBW_*9Gum
zHMZE0ii%hf@1oIb4}JRlc@&PS&AxS1H*Gpp!MI-$q%!9uZXDp%IExzr%&Oi-2C%X%
zd4xUR|I^(6sg%7tm1kau#0a~(I;b}49DLuy?AI1gee*S92??y=J-p|R62I_Mz5L@}
z9Aw}f_v73{80jYUr+CXFF+YAN;Qmc1=U(%SwKE;9HwEw_{hj}>N~M3m{odHvkv6Cp
zcuW9XskvRmbYyhp9KiCX0&I-MEH(pcL~?=wg@M+6?0)d$-2F=_KXe;>`7+Ep;ZjX`
zG6_fveKe;=dGzN$!tZ?IQ3}3|^V!~R>+!r}&n)HgFmCE)@JCVo20Hx`Joi<2;WYJg
zP1?@fgape9fO8uns$Pu=IwGR&0FOO}SQs#HOiSf$cN-J_6sT^T>{;Yjidj2UR@MQq
z1(dGFe%^Zj|HQ6Oc|LXkzBnyBbxko1@QE;*c&a@G_KDJLjIjIBhuAW8l_y`ijF^BI
zt|<TEKed^CrODfO&tR&T@$qS*7f<r!|JBVWKHbUVrvoOFmB#wU5`0}|PpvJ6O8VC$
zV_!Z!FmS-kyKrKHWK}L;T{_q-@;%p35d!xNY@r+!a_4Ym7%Q3qTxx7(-`<~N%O{nO
z+^KxKA^g>($G0Jlq1l9)8R0XR6P}H#6w(UKk?->3kG+?lf8TCY6&qNl3kCl5i&cK@
zH!8@K$6US0bAQ#t&wZtvD^aE*#N3Poo9j@gl2gn!S;bGD6W}+K?8$C`5y7UyZ~ZU#
zarcgHKnMd_>VByOQEaP|{X@UNwtrIOhu)#Q*f9LTxMyYt(gwIhNZZh!fr$y>53Z!V
z(%p-14ADAsg`fQw4|4e67QBPd8jOKIdD-*QHv{aoF8<}wDz2aebJwbCaNF1AOSl0+
zWl%M;Mld38vKJu))}SivDp+oNxWrF>U?(_FlCm_y5=Gk~`?~)zTR+jy(8G?eO&k8*
zh-YF7(i*si;9B5Y5Z9r3O&A%2-@BUf+O}S1C-)JbP>%f5L%d^iABj@}W58Oz{ya>d
z?%;(Pi-_QE;;CI9z_Nncv~a+{F)erAdaDuhF#(-7m2c2ZGYDRVuGsRMzqp6(@BAQl
z+}X!lyT+-uLoSawn%-yJLIS(OpJCs}@22_glvA^YSEixefOH0Y9kdPF0%Cy#TwB3G
zP2g1M*}kJfaH50iM2kcBZ0F0*Two$e5F^y50xn)Myfonvvp@ieY|!Pr0l*+?Box*3
z(<5VFI(y*2;RT%>Y#>x#4_#@*pa?(qmI40uiMR34&uk@4hl$-;zW;$~4(~5gB0vzl
zPub#soVz~qATtjnoE{ObPATnLrWRZsTvKsP#kax5ifbvZ39ShsxhkB$0)IG}a_qrw
z&dlthdvZJf$A^A|sz#uOS4SP6ekIKS&Q*lwxesKG{NgGA%MB>jg@3barGVc|x-ts}
z)Hz;!@&xx^Yf*js^Vl<n-~J`XZ=Ieb46|eQwBE)2Kk@+@52TzK5nKnPvEm$%fQbc-
zK~j(eh(QuTR1sB@$?TfW8u+sz$0I*nVdf7*?u|F`%lCTz=jWb4LOXBdB##JfDs)AL
z36~|=bxl%#vDdUXO||mL*7*o|EvoZP<bzcOV}!ptF~v{+(JUYPr$X~Z<-}LucTW3x
zfTQ{?Jn+EBDLs_(`el!62z~~13aBYGz_mb=3~1UQEugJP4AKT^Ksq6qYr^HL@I`Sv
z_2Gao)C~7`zk?qgd<ey3CF774!8`cyJ1w91KsC!w8?#E-Y&Hb&@(6hqNe*(}m78GG
zWL3Hn48~-Dzf|}9(VrISz+l2wmU3@~+`04P3?4GPbjcALK~hDVAW?QMUO-gQ6ikv!
zb_yoW>HIu0mIRmr6DSiFPVNwTep(p&=Z;6V{wU8)yvC?bAtKyTfgiYE`3JxB5bair
zKmXEKcx|FQAC}*Y1TW>bubUZpqkQm6y3%_P6^w!3|9XRe_01e$@7Wr>hoN`e%4;Jj
zGb4gdfgcv+j747&WI9s~8fPGygiLy4K@x!&qEv`Rh2n^%GGi#!g<=z?$CZKog8LE2
zcSZ~cs)z8-fkICZ^Aqn$DfC^Suk!@|=ihVeh?05U<Bb8F8Pvt4J;ADFZ5yU5S%a?3
zoOsRm*TB(m9%Bru${pM9=4=hdMwKuSf?=Qr?U@!Dg@k<>lj7Qn<kD*s!L&2LjTJ&K
z%pUhNuGERDLUAadaH|m94qw;@L%mAat@LvX!F0w?d}q4Ihkl{W7yVH_{{`iDzp{-n
z6XoFoZwTP|pJ0vJr#F_iXG!8wFc@QS>KC2-oW2IZGdc4DgI8{+;)=9tFg4z0dUlLf
zDipT&Q8pp!6cVs8*jO=b$pB8lhEVD-Tx+(tdUBjF2q+)xpinGP=&}q~Alm8p)T6>@
zPrQa36|5MHz<5~VfB(aN{_~kKlM?0?7V?Gxp2tSl(8-G<ppEjuMl52$`?>vV4zOT7
z^p~p)b@wsUGeBRdkFL@HGd0KAi(lmA<!j8k7O`Bz2iNGdcheDllt5C_L@=>nV@2A6
zi4~h>y4Z?PD1ZqAqVi_?I}NSb{|7LHvs>B5PC7;^{P9<h@tM;{F*cmP7Hi;-PjzAf
zL6l{J@&*B3+wgHyd~l`?KvC2S>Kzr+$zbOo+k19!Yu^sG^lYVE7(k?tMp9sU7Dj8H
zL_J$?X*1IP3&xwzB4RNJar-2NNWcizDLxi#Td;{{MlZ?jzlEsii8>5XNf;VPIM#li
zhV@Lln6a5M$7d}KKaDYk%!=9&$@6>0vM8(u6PRop05vGOvQ*#(^>~`U)9Zn}QNmpX
zG!D6?{|<I;+RgTXJ#6jXPAM29iJ{(vE7MSGI%21Yi7_ZH^(5Zmys&HAN0~T1%@{9d
zZj<qt$YBF;PH=6-#t<Zuft=Uhg#uv(q7ES{344c9hOZSEi(8nWM5;>an%vv{ecW@)
z9?FH7lxb?|Bv<R>4A*A4R%<fRh#@TC9V^PU=F(T|FL<02)?jU&tn2b3K*XXbWjDmf
z4u68pJ-cX5Lwy#;r#!7zN|HD-m7FC$1DpAyI_FEq0;J3&b?(^wVWuuzAT3OzqS#7G
z6j|a%7K8*b1WvJzxxk;mKv;&L0;K}ndsm%jPdSJ)TGb?mhc^9p?B4b^loVqvTf2n*
zDs)toFq*~LaVA<Lj5Mxs>DoBwhNrkN-e7bpCbq>50=y{nUQ;Kp#YU}Co2F#>oj&sr
zeSNzay^>Iyav06{UgHI842eRTIJ~;-23o;Jf+>P`7Uz`2#{^L)JG(x}so6h3#i3=7
z6aq}cBM!n80w)*;Dhe6zL!lFb4%pNS2lvgQK16UxY`DAsBXo7`<NV|-<tQKtmHG@^
zoKOnJQjN+~N)@^~ce1Ao?%x50QbOV<m}*|(a&3&yf8`|4oNHiAu)>2_DtwC~zUx+2
zuRG$)=pPkjYW4!p9KFIlcMZ~<%5I<s9D++dagvgzDXKmL*#S1B)Fns}rpGKA7icGK
z`g`wVto|LQl9!MUhph-f4K#tkL#VnC@>&RrQ0#`VL)fu3VN18C<rLpC?C<#~h4L=O
z8+A%y0oy6qPN+|2(PJS{5|mjF6RniX;}8Wx7#b>tO;pN*+;=Aonmc*^U;TSr$9ij`
zSC$wq)S+AE@5EYnX>p*Tx$deLUgVYU+(virJGiB<pUIIFRB)-1B#tymNYVtKnUO34
zY*_+l>DU3jWSF=hq_H7&3EKxgK>flbNqL4+SA}E})Ig{ZXin?o{7cjUVFwgCVCR4#
zZCYF_V5s=RRJ-<4i|d58fawt`+l85{N@H3HjL<UBPK81MQ3%CQh`kc3r;#X4XSwu^
z7JvP@lW33^#ONYbx>h~jyiO0+;a#kweAQskC}Ar365o2ZoARNzQYv;aGn0~}&`wg~
zG$Bb-yjN5#Vm!t>(osWsyRiKbxMzj>6(Nm<xY0>Z`9WMEChCS_NpXP?nmmja5DQWg
z!XBYeh3;Mm#zV&I!eHn73GAKJ;}&8HguT#tCp0IO@lnvWV#O0$L*j%uP$CC$3WXGc
z6iShyZc;w~w<kD0{tR{?$^>g&0Lu!6VOG=0OMShy>w`5<Be}{XBeP%P8{c@1CM{Gg
zah#I4lq7Ye&e2Lz+KI<G0TW?tz~lu>R1kLmuu!jf&R)61@l(%nb!wELGo;iB<th|P
z5JpfaWPe8`h`NQS4~iA2b}RKV)RIn`MAWoK*lj6ng)NT?rOlSBXN7vx(~J|EaY{3G
zG-FRA5t=bHW2Mm+S}lQ+;mL2F=9RP0VESa9R9c?|%i8K<snc!N&@-~4x^iykNyk|(
zjy_57vU1lQ_v7jT&b0wc5JUt~gc!kTN+TZQTD?yFa?07U0Ur3-9?JWa+RGI*=))Q)
zRsy=JO3(?l3IutShk&gL^kn+DT!M19QZG9uU76wObBx!|(b0c9d+)rBa0i_ETuiH`
zgr<NAL)3emI$F--RWl=^f_f--TE6!3NnSqwb)>(J*i!Dztd*K$Sz%*l+k$lmBTK4>
zuBWTPSc~sE#p#PF_2wvhx86lNR%RM0^<;`xI!fXvh|>nn8Ps=T!_7o-nV0{vgSY&I
zVf1tlqu=fTU!`1*=&gb+gYU@PIGg6GqO3?R<z10*tt!;YhAC%|QXeKLQQW(Qo(C+?
z|4qWBXU<?+=Lt2TTIiy)G)QNupK8!e7-Ry|PM}(aSI(d1g;&3h=^4dFRb&yVzdFFn
zi(}?&){O|FHOp6J?ebMM5JFsfot@k7;-ULPj7hjUF~afluW<6*Ij)X2X|_5DgYA@y
z6^f=zWGy4#^>lq(*!80@J061XrrH7B6`(96ouFQ@sUj9AfpjR9ilJ;WFQZ*nW}606
z*-E*qhqoRsQ@iZB{9=r1o7l&+;wwzmU&Ogt(iE(AQ?gsx+P8~?yS8y^WQ3#7eS?lI
zv)EGSlB~)40A4KF*Wr_IRKB_<NiE<L<(>O}ihX+?<+U-T5DEP~+xek8zK;(U+qCN=
zTp78{iE|UYb{ejXHkchxD0Ky#{#(PH`#iV(u;<L<0oAI|RZyr3?e09<jRmm^rA)#r
z1*K#qiwq;B(KG}-1Kj=|OHfWZ`?Mjz6FWoP4r#Rl;=~dfWuP-*-)*zpwQq`h_KmT3
zX8|eq^GE-26MylwWWG*LZ<xJjRn>7F?jr9d+YrEcNvm_bb?ZmivHAPCe5p-XFf>J(
z8c|+94dqHeU+;FdZQjm@-U20CV|rqOljqxf_wp4^O;$Pfr82jDFrw=L=<b9L9Ignh
zE=b6DWfj4cASgpMf)a|&J*Grp+uJRD_ZVLNjA7y;v___hT#ap8+T77w<!#%0xN~nG
zLj(O(O8q#~MPoK(=Auw22*32<T@>wK@aIR*V1vRUc5Y?6oGhv3V^J`2UG8G7^3}Bg
z7BP62u&eXGW#{1g7`@uW7()^(Q6xm6V4M<9dxmR{(aUhGYUt_iU}#GRZ@b&^zIQcA
zT$6KC<6O9`oY`HX5|jujQtE-O8r0h<8c3D}2^AYa*$4$J<qAj{W@Aryz;WSg4Z6l!
zyzT96?%oq~?^}0r`>ul&JBnQRtn%HLEa!)X+1V_Q7@!obQnH>)#|=OGt{-E3`p^0D
zcgL~D;JvP3=VVDG)M^Qj;5y!g-pI%;2H0k0t%ZlVeai=#oUDU@bBZ{@r3M!n3Xxz%
zF?q5wnSpDw2{U7Gwkq^=SJ~WKW#@q7?sA)`qeVTr#>{gdr6P4Lv1zD6JPt`aB`603
z-4K?b*-WUNYf`x6*wmpME(v?yY1sAQB2iBlm=He$W8<Flmz47ko;l_zT8OL=ic+vb
z7=jBeb?f=g^Nvrx`vVM*{Sn8nrWj)vdP0{p>aa#Z3~TG;b+^(Y^HrB!ei!?0`R}PU
zX0sN*jQ2#n#~8(X#U+NQAOu0qo8*1>Nh_<jNNNew*Wkji&|NLErLV~L!A`dH$J`pt
za{0<QpL^~K1Ml9#z(AF2SEiXbTc=Mw)PzS`78@6-ysgU4`z*d@xHbi&7abGRDbq91
zYC*dNr4n@Y!pv}{c1$2R4{-uUArQl)cbq>K@V~zQgZ#t)`%jo`o1BMV-fyxt)p-Lx
znHvL~7Z2K`%KjZcLn~>6I25zc1}tPz9v%hKh7d)DAcV+jR^qA|$?qJbsSvjyp7G2~
z!iCGqmaRo@9W3&n{@v3&d3>06jor%gso_90!21vNF*On~JQH%N7I1nTn%{N&c&ap<
zV`@r?V@Q)MGp!z6s;CvJTVV9O#{>rT;4L_tpSps0!{sz3v|aoU@A?6beEx6Hppv_D
zbD0y?q&j68X>V5Y$>zEMGhbw_?Cg3kQK6sIw-K={>Y~kDEu-Y^6nItIv8UaFb~}@t
z)Is8uB!$!|aiTPv(42*tDZ^}A`Tc+M0>A&%ml=BdyZLWE@O?B#%lzKsPxH!!DqlEV
z;y=F%FPuu58h4CeRKE3$XLc4Ebs>qfo9MlgI>mWtx0FIZNWs&LJuL^#6dG-)x0Ob$
z%(kG}Hk`bia7(b4cMjYN>M>TX3-AI%xm145;&BE`E$7;8T&mzwM`!sqqJm;HoEKmt
zizMEd`Klt#A0_9Zod~TKv|@;zkh-i|GmSIQYjsbdVtL`&OMLE|k5k>W32AllnWsE2
zyf(qP$>;dXFTF%(0o+WMmhvq{R5*V^iCc<ungQ%|{)zDlX#!Fd!Y)s%ozRL?T5%Tr
zH4<f}rA#(FlTB!N%axYLvXvxl;#IB-u*{Q4W{Hk4OUmM8o#PP1V1s~j7r#oQR;N_8
zR4OIHpa2A@6TDyGSF^m|e6KqykZJ~Ooa8`zAypxcAu2}<PfYTqqhF*JU8EA-Mi6>N
zFT|wHl&I?X>bJkj<fJ1A3~8z)E_-?=Muh2Wn)i$3PfL>BT(5#ta4J;$4ecbQ?GjpX
zk^!AUOh`Kjm=ZYMnB}j(eUYb*KSLOn=X(yWR~snvlFs@fzO}0!K}^7S@GReYWs3f;
zd+6`qMYW@gQn?B~%=KY{s$#6Lq#<;UIRv~H(z#Yf4_Je<ZNC2W^IUE`MWM2ZLez_j
z5Vy1BY@yK0<*9G+;wvZEb=v`^>nT3B_N@ktT=Z-|U}!bTtA%vQHKvJD?l))v&Ktr)
zh#H|uoAKHhQ!^8cPhIBP)Op%6L2;mpkzg4OENhH|xPjr@XfwEtLXy5STxy(Q<lJV;
z+(LKfZn}B~>FC@<xuXO10WN_wO+l2o7D3TWurq#3Q590BRJ#Jc`|7K_KKun-G)pPE
zheDx>v4(b<W>2DYqTz8~dhIE;Y~4)|7@D!ptE|yWo^5-w8>mYDm@9em90jWV0a3+J
zo1S5Oc7n0VOH9pNB~HfBFvS)j94ONf4K9N0#?`I5F+O?y-S)ODXnBm8WSE)ycL>L}
zP>crY?A%6g?{>PnH&d!~AQIpca4rRW-YuGe?eSDA5u?|xaO}iasF_zOhubMen=rPF
zS8&ductj!!g>J6azsZ?%kFb6FTd23v>;W;#<fx-wbC@8&D;T4>(E^`B(u8(fIdS$$
zE?s&BCo_cBasNOcCnSKvrul0&Ym~07jZL<#T~(5UVBG*Op3t&TGHS3<ghWs=5#j?b
zjD3~iYemY@AYGk9^!Dwbt7|i*a+SbF;K4hOI!C!P!UuI;e(71p;;&(&5`}0pQPhL6
z1yls5nVvDGKp@?;!*d)v^JNAGZ>JEJXtZLC5t3#|V@l{50^d|z3e6hCH6>|5(pI9-
zG2VQhmW<F<>0_w8lOKI>kSpIFW5zF3W-bNTta##A<1%E;L~05WE-$#d5x@)4kBVe9
z$sUS952au?4WDL7$@C19W3O>}tU{%*na++K^z{wV+q;EQxs#sWh^|d7zWmu|xis|@
zX)sMC+({H}A_{vjHq7G}MZ{uFk-&CPh<X`oJj<~Y2YJhZN2vr6sq-|N6ATZ7jRu(-
zOYvz|6JjKjbQ=j_0m_Abe5pi7)Wci1^t1Qw67E|*zdl{cvWct%V9DnLtW}>JFkeBm
zF@P7MAJxpNTN6+!_0#3I(@J_s!hRAzL!3@B<xVp-eu~T2N|eLRbd-na>g{G`<{DSV
zzCkOvNFf{~iZ)RU2Pj0{7#n8ES(hExN)c;12uu&YIKrvn|41vIq0-Sst$vl^YcFB?
zAEmeYUR>g^)@FV?iZPPeSMiji9!#;!uD*Wm+FF4|9f!@O(dOj<tQ+9PPxrbE-+Co@
zB{L=1AizdNO1_U$rI*^wG=Z;E2xmy#EU}v*_0vqdGtA7M;?k7jsiR>`WH%87-4w$u
z6vAGDpbBd8O3=B9Xc5*_v9?Y~O2Q;(CjK0~W|1JKk<1|BgV+d2lrRiP(wHE$Bymc)
zP@t>R&{y6>F*0oJ2=G2&cB)P4$O<}iaosf=Dj!})SiMnzSFb+usW7y&i@V>kh0`Y|
zICE-(@oTdLNu5Gi$LTDIn<e#iyw*{T^M=ZRDCj1#nd@eP;(P$)y~|=>2?%TjPdBI{
zfyLP-USotJMG6#(9bh0RL`=?1FwoaalBRs_^Z%O8&VCNwaW5fNN)e>aQ%?#^ja!^9
zK&l%Cc)>`nO%UnL0KBp-*!!%IrBp7^)m7x)`?hl6;2;+-Omq6=1jCnWG+J$nQ4^<i
z5?9Cj7D`rD8wOR1g#p5_H)HxRnNO`C)*voIq)cElpG;hY(H0_tH3e`}M8yi#9(d{K
z^L+i8|G>fhkI-&6nV1-(RcrBTEn={HfD}l)p%EL#t_3*F^K&-=@VtL0Yt>!AioP~(
z0$>o-YZinU!^rR~mo87Rd-rB`?e68a+j|)uo#p(wY0jUWVP-0(Qu26>@tOik5EO}`
zZfsBlu?u|4oRk@hp@?W!O&Z$H%pe9uj0CvkG?&g_WOl;w%s2j$Vxg0hCtso%b+fha
zAeBNl)nX}&{>bVr8cBqkDda(oS;VGoY_7+`l#o^Y<P->(HxJ$fz}chi(R}bnShS2?
zo96PRF$Onxvt#=p{R3472CE#rYZE7qPx75_Pf`dw=Bt>D4X`Gh??aiB5cRp_N|0BR
z8Uj;ZRQ8$$@|DUUCyyToJx*73Cxx(+LRclVMFI&h#*(Dj;I&i?ZB^<?fmv5rw5yE+
zd_%(*%=e7EF@W<LE<{X5B2`N~{O|!L#%r88JHm6%pQNLs%)Y%t^z~P{V|NcHj@NOC
zVywy8Jd+zcoAK6p(Bi$HkIAzZwkY=mG_Oy}HZ26*gdHUUQ^cAGYr^??7+&XovN}Dh
zf_P}TfOeY|)4SF;Tx5B~w+_R%pi&kYHsOW<Oa7R7m*P@S5LiY=rg`zjbL`za#C`Ye
zqScByb!wQ|Mw33N(r)>zPs2!7NG>MtM9KwN7Y;s8RnJFVbLHj+5zQ}Av8ITXawZ;T
z4qO%ioe@T;5a*ZIc7{fxORF|F2=HP)KDd5;^78tNHO6|a6&Wfd+QxfFl0r{!m7(o@
zyms;u$B$oN$Ieac*|UvODZ)9wKtL~<8<DeFd4-agMIh%Apn%D5hUTP1Rz{Uewayvg
z?8&k${EjLqKD#+SQ%S8fpcyBaAYA9bKUT*kKW=*6`sC%qK{o(!)(-}4Hv=fO=@x~^
za`3<qx7|9x@bDxTE{t*J^eFxPo$TAYEzh521d);t2lkR1cR}ZD-kkJ7-ldciLNX`W
zdBfu(zg_2&z?uah2F;VAc3zZH&2CuiB4(2oCW=-cy1LGOMqQ=NY(=x=is7K^mEcAC
zsAVSbOfh_MhNr*uI#-8ll*$o%_6+jigZsJb?wz#bnDNOP#+nRNS;&#isfav)%mQj*
zz9B^<lbG!0=zQ8}u1QmKP`!Ha%rkLba_TeZl${ExSK3KRq0&KvI%2|n(w4cohS7Z6
z;ChMFHKwnwYwDEb-A}gUxia}An>yde$zxYJbLJY`ws*5@_a?S&>t_2cy=>Xqi+7Hh
z=`?@9eb)1b!CIZ0P_<AuEuflJ5UC0(KJTK+mB$<*t>EXgY?3!yW_L~yyfKSzh{53L
zC~Trw37AN)P+}1E*DsM>`E)P!t8d6B>x$u^Y;3F-ASNWKT;bZxQMx+rCrKNeetnFy
z=O!2&?Bw=c{oFFtO;2wTV;mmMw2fx;=bSVe!xHxl$t8DwUSTH1x=?euEYFr}k^Jnk
z(K*=%Mieg!SlVsntKa%Fg3YC+`gmOcFJ|Y=Lg_%TicS_0Wl;)c_00A9C;vsoDv3G6
z`0NDL=w6~i7it_MBh!qI*7;6#j2%0APy(Fu1lG<2sOs_R5Y4=XIiu&j%PaQh(#ms0
zeIEQQ8snjAvItRhKE}!<I@90Y#dx29Q^sn~5cMiibjt>YXs>Z2WG*SOP^qy9WI~pe
z#4f)}8=WK&6{=8h%+#JDoY_jLbPyYr5UVtsEna<flpu&G7K<4#Az53OSC4p$&Sg@_
zh<Ei1B<)<!%A$9fq|WED7N&Em<`Sk^WQlY5q($7i3_+dBU?0WOrt42{S+gOB6{^Ev
zaY(ob<o)@X`b*$jMr>hja^OaXgRXXhf>7+}#Fej6t3O3BGeo((AEF{*C>X0ammns{
z+JW=`mRM(FGu4rMA(<K1%#y1|aSKr)bNV+gQuICxV$?yJkj4`zQv^jrWw3){X=vWa
z8j%~8LoA)^v2>tnKFdzLrY*%?0@%O*um<qY6pk=GZ7+0pyP8N)WX`VN#Bk8n(liR#
zpiIyur0FGU^<l!+4vMAS_(-sU%OB;;fEa5Q%8WE4+A;Yo(?yaCSvpF+n^zg&@#<0a
zS^Vk+pG@K11VIGF?jnWC5XMIH869P#055;K=iEqC2t+lh*?Q>$z>y<pkZG#N%-9%>
z?(WHBBH_Ex#Ao!^%?t-!bt>!p7D3QS&;?0ymRkJ+ws8yP@*Yg2Xb@pcfD?mAHf2RL
zH)}x_R%g73%cR%4>~~F3)m)GJY{doN#;4;*m=aV2ij`i1pkqnUw4|(RLjW%mDw&`0
z;R9PR&bebpk3HRZ3^hmcaEC*OFmS|+%IA$((JYsIlfyyRninzWduE<M6m?PT=|DO!
zQENX%ZSpyi`Zz9W;eCvA30@Q8wxgpLdis?#&aP3_p)Mv(o20IVb8Xb6m^3DBU%|Pv
zn8GNP!3tfQZ=u??H3N7q;8_mVh5=>;z<GR;%^$*i9*+2@4?S(>4d2nD*%A&;&1Xc@
zBO)eR&%h_SZsXuu-S%cl2pUG6gprV>Bh+fcNTZ)haUWr^5ARDD>uLKEr(PZ=X^rDu
zn<Qz0wzEu{Drqu~H+8}yRJtn^i<=i7={aB}Yn?J1D5_i=;ME%2QN-BPH``+6GXO^)
ze%f<%N&J@$z2Ck2fBg4>E&aVTZ8;HRSGY6l9}c=mXWgLNe$jqY*C3f`LfS<jgA~iR
z;Jl&LnnX-1_vP9o$tV&e*eE3`7b%qbmyGoFbA}A_CeBt``&v{<!>}tz)7qzxKL6;)
z4j+EpKJi4hT0^jOF)2jE{hIU1M?|b-Dr=7XTkmjCmJNH}z(^StLR%&5&2(qnJWs9p
zI+_I8sk#)g5EPVhSBa=JuykLU1<RT;<>vU{jRHIuC5f@(ecKt;Ujvo>`xjg!S#9Zy
zJ$pX+FT<en50j*kikRTWqZMV9;h=KU^CDEu0!Xro-e*zy>MC8LH)Bt37T}z-Nef|5
zkR(&T^YrtN{`_JoUIk<o_-C?bPopAYpE44?&AYY}Gq*a!hKGZ`q4k?|ZiJsKY7AFF
z^XV(A8QeDxFsl@@Tn}J%VbEcH+I+Tu=jc24??0?Zj^yF!8uiHv@Y-v?S@Yh0NYzgo
zTd=C?ZfZE_h9{mZANrqHfi8YB%pAb-1_73JE`f0!fK}7LmaO`8GSTECPdsthFUIjY
zi@6-}aM+$a`KxE0Pu~kN8Q8K_)pWzdK{q79W{vI4^%vK=X@J+e9LGv^C;1SyFzg6W
zGm*OFy<hv*yU#rK7;@x@_;sw91Mq}9%wc=-<gY)kN$dL+_hJxKgE{VeVc{v(zdX=J
zmv~!slFZ*Fz^j!3tN>V5NfD7K><QGRUr*b$2fp&Hho3)u_;I@$z^kkjxbQm0F+I%V
z_UOdVUFqsN_-ED>tBAcP2#NvfB|n&EGsA`Jdm%Ri@b^lBS0ln?5i<#@#tYfPT4C5}
z5EH9!|L%<Y<Bxvx#h)8nZs=}eJ-&tY=JxJ=?18{WzlitmwYFS<Jj7KG+3H>^E?$=}
zGPqh*=v><9hSfO>-&a|npyn1SM7Zt{S6%G}Egp!f%L?7a8j%2N3K$7VeY1_qpQ=xP
z`{=hGd1Zbg6!J#a<6FGl<7RFtw72a3)x9RP???3q6}=Or$J(M@(MWh5$y{Q&mq@Bv
zSHYt!yNOHP#y7IM8uJSmIM;H(q)70x!TybR>1U6=@W=^(TzcQMl_i%+^_+3cUiaSi
z>s_r9Tdj?@h)Z<w1nlM7C?Hs+2R2yq{mOMrS6^3k>BqscquO;HFIZHkEl$<i4sntU
zM`?29$rs)|zeZ{X?yDPGBbEOWtKahf$<==U_ItJ3?`p3sfH{2lz<*`yRv%{n6X+3^
e1{OE-`hNl5+A+#FNbTeR0000<MNUMnLSTZvlr)O~

diff --git a/apps/desktop/src-tauri/icons/StoreLogo.png b/apps/desktop/src-tauri/icons/StoreLogo.png
index aa60d969183e69a7709c227f1a29a4ba4ac926a6..0a6324af04aa7dcbaa06fded6a19e8c3bd068669 100644
GIT binary patch
literal 4699
zcmV-h5~S^kP)<h;3K|Lk000e1NJLTq001%o001%w1^@s69zTe&000sqNkl<Zc%1E7
zd6ZmLng8AU*4nG9_busk_60g2Bq4#2M596`M}!Hu;W8uQsAoo*85{-YAd2JB8D&JB
z2+X*EC=O`Au;~#rBq1v#orH9j-aEZkS9f)7Z@cf_IkzeeL=(FKo%v(@&Z*O{y576@
z`+e*0eh>Jw{67&w=sDjNdhYkh|4~A4^~wz^u3Gt)74rIg_f1FM*i+L0Ap}Pdb>_VA
zWpz3N)aU#hB?$-=m4FL@zq)S0C$GPD*@xw|qSE4T|K~!8TKwB&zUPV$-jej5dXkBk
zfBIPGhKpCsk^ff|<(&KHgyZq_>F-!W?GI;XM(Sh#i;9vdK{V*^yYkjMxwt3eS%24V
zPh<;O;g0r-_piTdnfzT<6x78l%ul~(<29#ueX-N`M?B6C`JD&9bmp#`uKC!kL~V4c
zz20<a2_Y^BLI{Q$b#u$+TYj)(%V)h@Z<68UAPGJ?s@o)%upj)zPhWc9+KnyD_tBK7
zths6PoUhMW!e%k=MdoMrxU;Oz`b#UzKOEM>B_Q|{2svw^m{F$bia|>8UfPO~Qn<u%
z*^Cc-EF<<>ZvOsp+gZEcajyEc>uuTZde5e8$IT`4_UJM3){B=nPp*6G)hoA%!B2?7
z(>IE18kVlbpITJ4r0mx}@z-D7bm__^uL3MNHHg`<E!Xws9~x)Qy&22eaKv%e{nl|d
zY<Io4ZFjx*9d(@-#%;&zZ?}f`ZFd$m%&RJ`py0>@A3gQoAK&t`l2K5sWUp7I6<X30
zjQOZA!}@z}-t?inzV^}k-?nVg?64800vsyJ^tWF5$o?6huQz|=di=poO5GITX9#6^
zz)J%|odVw)Rk2f@i3+xe{_OUz9I1-dhXEfy{AucY5APk=D)m>W@`hq+%10<ImD0<a
z7tell>$UAQZ(Yu4CZ)b`_x`aP?tW%gf3`on@uJ6`nE!>%n_h0Pas{TEiX$L0;36+T
zZ34vss0xr8p!#Bh8-(E3Jnxv#?|SyYRo}aDHMrm$J_KALOYo%eE|ibw)pM#F<YIEY
z?&MJat^d63(!uRN8a%M|>Er9a_)t}Uwl}l9;a_gM_#>M)9cNaqFresSjB_>)_yt1Y
z5K1gi<bmR67#Mn4;6a_J-&tzp7AD@c;&YeW{S8kPgfE;Ti26vSxoO$z7P+r9;&kP8
zJ8?_PinW!I#FDMMez|o<<eF7mKJwV!)Ae>bNnnyNrJe$C6_ofWdO|CJE4B<7K#dY8
zRfO_-&Lb_LSG@$g_HI3V`|j&jwI;XiU)?;f>7H-i{DbP+So2kzZ(q_joXkubb1G4%
zgH^hj5(<S9Jlfj2lY;J&zg)EV^Y`@-!P6(H8W5Uprx;ge16Uv+EP&V&1fkRhbPW)#
z0*o+j&Q%%9b2hY;@$4*8SbpMTceajhyLvpApNJGX>%0!AGvn2>+lEFC6+>(q2EG6g
z@`_tI_lp+s1&7Z|zbX`>DpX;Hd9UXknuEZE8cq$j<y<eO$Eq5r!T~=oxM~B`0;net
zG*k?B<d8g^r)6;?7^#e7cb$QMYypO6w0Dw|6emXd$N%OtzrAjBB0G94-8Uqw*JRF2
zZSHAEMW`V#vtm*G?3#;~HdZWNQy!Xog+glP<}Dh0sclc|v#0Oc<e-0|x$HBap8dhk
zf347L<;a+7Dwg2IME5|;8wt+r<t{s=nu8-Bd8cis24==quhH}~z5DvU|BUC`-ud>H
z29?pk1qbJ6EjhJEBrX9}3DCt&f3b8y!}@nLRjt^Z2+m!jp$x7M<ZK}20+#J_&*ygI
ztcK<F6HhH{A33p;(ZQ3Z3Al^^1;KTPP?d?I4rTyUi4)#Dlhg6ck%Qf-L&HP)Ck`#B
zeCM)T)<61Sz|6Z@)^TVs({`jgb^26yvMV`~9(H_Qe0)k{p94hJap}p8%kH`Nz1QA!
z(@+=SSio4?cWuvMj>|Y9f)ZV!RHM{)nd%72R?PX<^ZjExLJpFBS_DuT;W94_50GKT
z1z<)1ElTLh8XFx0ih_P%!`y%W^4j^Ix=mMs>T;kwfDgoiKp^PAQ%6|V>22*x9p8C!
z;K+`>Z7=NGf9j<{xz;p1Qj+08JJ#9hxx#XDjzxpqr<5~a^_fSDG3!%=Dk+Shj@*Fb
zYI;I%Y5doFy9<v$KofvofU0;vpkz!cRB$5!l+_Trtjfj@J&VpSzvGkh8$Weh-*`S<
z)u@=BC3xo$c-Wvk93V6ntkV<G#^nnuE?>TGF+Tm_jRjouxwp*g$?iK%i2^SC3j-0N
z6k137zj9Og-X+(rTXnhV6gV7Lz_J}!%z@7Z<e7=571Up$00~1+wR`T28SlQ4r4w&M
zxy?e*R3Ut5(#tBi2ofrR)HG04XRbS^>PwHg(QB8F=50ICtcBHT@Z?cWDF+xM)MG%w
zV?1rSwxJ5QJ5AVAJNBBxxif<$J%2ycey8K`B6ngK$m~0D`<jETCxfa&x$O#S`;7WN
zf#4<w4Z^WCr22d`UrpdvG1}JM=2|>l9jpYR364MjFbyDJ0)ZNWa1}wc21t?!CFaG;
z$Ne$em`~N}4JwiY3Nn^XbB@47!RO<7j$8rA<|$>GN`LcWN8+g?pS|1`{W+<hI8Q<T
zz0i`}N#30GUpTP)=p7$-oLje6$C?Y-oUP|Q3m$Tmi#$Bvht(Cwm@yBDH9Fe%Rzg)&
zx2i&bGGHPG=q^A^LP@pYWo4k_1s}-~6WwFIZjYN+YcF4dBL^}VJKj$thKYz#P8Ax3
z#|59r5=vvfd+<bW_{jse-H;Op4wpdi>F0<<EKA;~`}6NwV*STkmNhN0+yd)3bA+Dm
zIfcQbK*5>`%?RP;XE;_aRxtlB%Q3hwjH(y~aR6QgsypDs5FC|2B0!Og0Arc}i7cdx
zuP;L(4;<f_=3eeNwF+JEoCyTf5E{#y=$ea`x;f$mx9z_3Z!>)RBLoTr&drM{ft2dD
zk4xtK(+5{A{p6zlaqb3<Ds}0id04l~165KOPmQC!%fsoxJWf8XqUOCSErW^5Fra!q
z{2D-VE$D(PF(5_-bREbGirNiTuxAK<_}f0UCJHp9Dp*t(!Qxp#ENUvl+}X8gsL)Ur
zuYnS5A^-N{$01M1%zqsXQ67?HqRy}V=;pU9yKj5mvTTJC)zBqH;apKEEsLwDtpyrt
z7~)|I1<S*5LSQ(gVBRVNKG8AOt$?RFI2AB!70g-$9315s-sfY?^<lNSnBzFObg_-a
ziwtNf1IKp;P;hkQ^Md;pp%LA8S6rk8@7VVDH~!Z%cRwU4zR&%sflN+68p^J2*|_xa
z!!C1jf(u>7rm8A5U{dIsC=x(fxHN;HEKX@-4bW8Wqqf?CQEtO37kGJ4MLrNhz*Ld*
za;OjZ$aeWK6del}X{gi)Xh1`1LczcgFggb8ewcw}IFAN_hyjFkpu!~fqIqic<_E4{
z{cP*Dy^~%3f<Pt{DWo?=HeK@ksAg1fpE(p%kxZ6LkP4wtHA-do4rt)2Qi@zv1Iz%S
z@i4)>c?!Z}1ouC<2MadM2F<Eizn})GAq~T08is5IS6)w$XTZ=fhh+(PF1T(0nNy$x
ztw1b7psRw1RDy`kQ5{xTC^8Xz|NUzdy<;cFCk=j1I=t$Q5~hXqpSYzgRtL{3*hLo+
zAv1{z1(YkGt|xe*0OSgUS}v%hEzAR4OYn(|;2m8I|L~PZ(1irT!6o?K51+&H2eUZP
z8^Z1milZk4o_pHINJ_wwq>@U43iymrtpaetkg+*31wqq!PA3WkJt<}jJ8o}YblW#e
zx}GPmCod)|^XT}owtOzDN5W-s(+n|<>P&D2(g2dP2}-Ce(2fTbY`}5}bvy#w0Tf-O
zzufUG+Q(Z_9-W0<dn}~f0X(t$S*RXBUCvbs40Z#aEsE5|^GZqVxPsFl1p*A2f&<4V
zaG)dY8~Tu=BpyGWG=FpAg*`=G#UH3zGQnklb*CSAWMY5Mnx@Kkf1$48^0&ugjWF~O
zBT(V{k~gtp;}nq1krb)D<8et>=&7zw>^c4uMB}reDq%3!K{!;7<GnjEzhM&;tr9|Z
z>`{*ND5ZLsaMzJq$zv^`n?Sh6Kql?NwuX@!8bl`3IoO}x_s~%K`3Lgi(9x2ve5&$W
zf;#T)*fTz`;~mEbW>(fluKQ|D*%cp%$Ld*GyjcyH<)G5FzTkxT5WWw^)M&veVE3V)
zz&Fx}1m}S$Dm>qUri8giCTMH>uds5-jdFC#ZP^(6ff-9QN?D2WFh{`4D;ODT!=7VL
za7A_0IwOB-SO0ffIBfU#eQ<%$dacOBm({^RPm+oDA2FA!FL!Te2any4BW*uI-_U+o
zY?LYnrQtGz#%m~EJn|%ltvv__=W#=?<{+|E${^Gc4Ah`w_}3Ur_8=NDs9^+<PWrG5
z9NDD6SdT!mi(%}H;N$6TOt|fQc4alaVdIQ6i0w*!CdW<}k_&Wp={lwOu&%}em1Qlk
zd;;4a!bq+iLlZ}#^@I=$HKM9&CJNRdP7XbZK&YGt&1RTJB?P7LivxrJHPkw|`UxC3
zaW7`oy&Yo{-87OXsHpxB9NXoD3aGk<P!xzq%h6bN3Dz~uMk0F3;YA|*I?p5L14M}6
zl8RiiVkuIoEY6%6hQmg|#0XMO2ZlS2!WVg%p#)65o`%gPXnLfWL)_;eLWAu20lfiv
zZvcmTw!(HMu()y^^Z?)!m4<^9T|He$CLIK61Pdx=BBVz!o`myi8F~{yq!dT}ih_%l
zS0fsoh5j=+v>hA5nZ6YARu&?h1{Z~5u`ska0%jwqYL<XVC8)|38iNi-2{Azf47MeU
zzzlH3$FF|<1H|K%7#{3}n{zO~{t`s>0MeEUFRMD!LNPrc(knnZZR6DGA=FgIu;J~^
z$YmRG>SPKXrzgM|0|<wrn$UDPe^$;8*Z@K`P$dF|YS6WEt|%sgI-|*<B)0wh`$#2+
zkr}fQ4c4NvIsq;yJPu?X1F5Y3#{&Z4dz=fHhKAbOIL5|u=<Q9Rp&@}Q*3}jJM^{II
zn*p5?D7=`M#n)A((315;p*jGKtHnmfp=q*jcyK+Srs7iQiY_Sz=RSo81-9VGcp6fc
z94bw3>Nq73&$kPlGcISpeP_lHjRep*qr3>rbxI_Y$VrEE38hqCgOlQ+Mji)BU08xE
z4cbVtb_)cIsuIfv=kjb*n(hk_zc|_Cd8Q!eIQcj4k+T-C*~m!2vM59dt5(fHNBa=^
z`chC;6@h?umT1Z$8UYccm=?tuj#S*2<wm|plXXe*H30}BFSrC%JkZN#DCbwQR#Qn>
z1OykzdkW7u)<j8}68JX+Wb!zfagTLRWKZOFJ=bi`UNG)1TvD&knOlRNo)mn)q_@1c
zm=7g5#eHSf6cExC{I%U!5@#;GcXoaGgfDNVluF7X<WZaZt{E%~j(evMmtagiZTtgW
zMs7jDM4p`-y>nH1tWQ0#HyM2R$1mEyeXgAwnu%yU1lRM6i7w9x#m$KHj5PXWKPp=O
z6%Q1{O$b`_q8!L@QT#ADo%97`oZA%fc-P=d=osDh3%TU^X!{$OG?v_IDl;k?%5J_t
z8eaP@P7Elj$dy;dbk|i;ELxJ{Qyr>qP)apKE5aBa?84Y^2bZrDUdxY)!A2;R*a*N#
ziKv)VP@TJZ<nwLE`o{0u?1;{u>4eoZflNBCq)5zI*-{&S|92yiRhMyUK-Eb`RZN`_
zg~}4EsRk6yq-E7%^!Ik~v1AwIFt`}1;;h#=m$OJNDAlP@bm23&&LGPd4*zGy-nTW&
zjvOm-?dgGd9Y7{;ePvOSFxRiCj=%fc;pmE`svef<oKsbuYHC1L)c`H43!$&8gO4XW
zOF+2G1!s)QxdtIYnfE@MK;Am>c;4FoA6fV4PKLB~f&KoNKqen}btEH?L~--VHC53q
z_e5i>ml?qX6jgCeGt8P=qUw<sPV;o?1Q+lq5s>X3oaJD<9S3suOW(*jt-o~m!1!xd
zC&k2`Iw#&Vkn;hOU!(fUmWt>*?}$fMzbhP{0mbw%I?!LVI%8?L-kC!=yY;@jbNDgK
z?;1YGy{`=2#2Z!T&A-b2-JzMO%&LhRE3Q>hzmX`e<FdZz^4{@ZS*+`ftWSST<^L>y
d7X0bue*iFf7Wc0`tIGfY002ovPDHLkV1mqd2@U`N

literal 4533
zcmV;m5lZffP)<h;3K|Lk000e1NJLTq001%o001%w1^@s69zTe&000quNkl<Zc-qaH
zYmgjQb;p0_-tL~q&g|~YKD4`fuJ!Z^$zWSHeno&W1QTOOkjo(jRLX=DMTLZ<Oo}`(
zPO3rzR1xC}Pys@!k^luoQINzq0&GdfCYG?VWLaA4X{~l8tycS--FbEQz4_4d=$T!K
zd}OM&wx_$N`=0YZkN-L6!c{-J9YFZ?`3UUM*SL7qa~7ay@V0GA)U6iQMdy?#6etCN
zLP6|LsrqsKYVEsf`+n7Xb@Xh5Rmu|)H3s(J$&-&AkM4U!!K1dmzN-nM00WR8yy+pq
z`4GY`r93StM4}gqC<Fya^IZHo3PfuES3ci*zqCBNd2e*hgnlT>IV8dtM@K*Rt(ZV&
zB|#KmI@gTkoiP1nrMw5gf(1cBL@ZVzq7f0W%|(ip*n(>UprZRkA+{!fD57Vy9=F^R
z|7|3Yh|*dq4?%<2Z;O;ZdhFO2X5zv~Qy@#%x}DwHPyUZm?k;OWUqqCk6rv=qp{C}f
zMYDB;Rzj<RL<|K)p_O1v9p&iR)SeODqY=b{7*N)AGEQhJheSEQdF&W-@M%k=27o;Z
zM3nD+wI)PWM7e_2h?4lj+u>j7IDU^77p>#hr6GhuVT_ImuOr0keiR7-C=t<GL^(lF
ztU69+7h(972#p66k!S68;E6E5YS#y~_C9HC=!+<CxjipOf;R0-%-)4)K~{)NsP>Hd
z@017@#oaslnVhR)4A|Pjr3Km6cPgc{4Fg|09XtAZ?;4%D@}-w|?|#Hl&~KxVAs+>-
zAnK~l+NOQE3KD{jtTjk-L;g-~8dwcd)40+o(O9c-O~7A2yo$kG3X4Wb9Emm|V(X|K
zSddS^BWnNtV^+g4+qdS88$te7KnYqA(|)T@v_+T|P!sEb2&$Unu6KNr+dum@9)0iz
z29ibgzc7ZXX}!bK{L!9Oyyb)U(Vto5m80_%OD1kkEBIkuAg!<lrM%wWKK-q!smG@^
zKsvMb-AcLd!CE7tl(dA{m4zT~Dlv0H1nXyb(><T$!N-UB??M@q?BIj<?qYqyviG@@
z^rRDf<xf2BfB1ST;V|2_yv!ZR1)e_wvlSH~vkVDo4HSrRblSBN9=?3}r@zzysm$7U
zE9LA4Ye1`Cg@i)kXb0CgSY1D_Ycbzt*G&)ev9E3BnPQnEr!^PK!s@ioJ$G%SyE?^_
zKfl1i!-nkaINRTFm?!`0H9r3J1Q#k!BWkULL_FGoGFl~-wZY-bQ$N|KAc|Kl_J0i|
zlqjqSy(yQ!{J?gs6|9Z2w6T_v>;916`tk@*1r_$5(YO_1`XYR3!sUe-%Lm^7W*&Om
z2F8~(pZR8*$tU2mdvnZ)8@=OKAt5mz6@^0kwWtN@?1tS+Id8^dL`1PdyceQKBTA7^
zdp!K1?Y#dJ?_{Vj#xIZi6hp)2?g!cWclYo@uEGmv6nYlIMUaB9FlTtV+hdRn@5`>^
z<mm~HO%*tE+U4Xtpfr~DtiQ4lQTmGzF(%kIIkopdg8@YnwmVr{f>Tj8zP>Nbty>q6
zi63(DWP!z?%uwPtxc<ZUb3`hPjS5T)!2*~9gar#%VB)2K&l!gwtX|Kjc0R<GR6jpE
zZ}6?cT17`K%PXa?DMU*OXmCCNRlCVvJJ}f%eShxU68C-NEZ_djIRE(E5<1+-&G$aU
zDXHS05u8gxFk=aqfFh_RP>Yb7*A!2}*RKoMcXy88>3ts>kCbEh)8Fgk^Pd_f<5)y!
zgyI%+Y7hIWPBg)3;g4;Zw@y0{siCGDTx$t<_(>nF6vM0E%_VWE`~utssI2yp?I4Sw
zOQ4EE0wFjNpkDzyli(LO`)u33p6f1dVcZ^NOV2a|>Iym6QmWLHXr+y=NK3?QvhJE7
zP1CX~=LykR8__arEn<a)W65`P(3|XGz%6j$=~r2touV{j$-nD1!q7qioF#B7kj}!{
zm#S38X373niR0@w^17{;DJIWTDJJ;y#{;wx=5-RM<}cL9X-k5xM>SjjP8^Zi!mWw?
zAcjO_a*)s|2D^t@(>2Usc9?u>2+!@s_p>aO0xnJOWk&rcUbdf1`Ywv40JUiGDxiEz
zGG*u<%A(8>#uvX&b*ziW$Aq4)ENik3GnF!nL8Rr-5KFWxAt8<R=~mN<eqh^@of3^P
z@WyTL<(AF&K&clSz)}&W7olQ85JRaftRB3d$+2_H`mf<;AW;=m(UJ&&5WI|#AA)VU
zD&ITk;OI1W4n4@$RjbK&E#W#dRAidz>J%3X(~M2eaQ5;%^W_zC3Q-D>cGIF^|F)q4
zp=nMm4&$m`CTGj|K2$0p)u4(Mhh#2EGAYbn_F3Ec0L9Wbu=xc%vN)BH1cDXta<F+b
zY@VBgXL9UZ^ARdG&A9kXPA19dwe)qZWw;w|7=&ymOc&4b7ytfUO43B4VP>{odFq&t
zs93owP1~y{zk{d#jjr?%!vjNHnF=UZD-<hbAVDZ;*1X9<F8W+KK0v<X9&~?&WF-q$
z@H9wDNDsk~wzxCv*wB3^C6ywx#izU^T)tc-ofKw^!uTAdJt3EO`0?{+SqdyVvD{az
z#OYF_U~Z-A^;}{R6dLK6W&e?X=Iq1*#gZ^r2=RjyM!763&2#$j47uA~Cc-H$&IEK1
zB*^z!I?~XQhV*L4uK`wBE(QIJEnG%!3{V?{@w0}iO;QOHEcqUbOCDCc{N#nh9K7@_
z%5%V|*0LcMf|rM15in9KLmOo#RzTqpX2y8-_+#9E+aKU|6gYnVCC0}lDOI}R=yv8Z
zS%%-)%lu`RfgXpBjA5o9JPiz4`g205BurFYD(gMWh{OJWJx6K$Fq(jb>Y^t##MX7I
zIeO$cqf<|l&ZV2VO(d36q#2OfqgI^1#6zz_gMh~6=AHM^(K|>!+0CYH8LHJQOwW}V
zJMVJ-#S+dAMgP0H=<9}@gs=u21*#AF67X8WQ0?ty(*vtGzTYrDx<F@Qnzi`}wr%jZ
zVM~D<cceLfrpy<A=wMC6;cQD{jGLBTo=0d9w)VI!V1?K9f0#~vGiOd$NG4OH6KT4;
z*05;}-0}Jf38&10x4`smiq$Cx<9VnpF2N$uXUJw0f%s&17_Pfg=8nx3ZoDtgmi6yo
z^7$0Am%9i<7(Z;eb?pZJ`0f;6*!vu!9mGgYn3zDe9)_1it*DdHgfZeg#=yqT_tKNO
zmDz=bD4K;98!D<*%gi*KPB`@DvaDZaxe1>Ew@T2tz~18pavS?eO@}0Z>a+E<V)eEJ
zn|8WX`~*|8dB*49_$-|M-++9lr7Ho8GnQL6-^y>_FvkyGJ{@r{ORKXtOW&9vHR^~+
zED<?aYw1h8p7p)=Q7F%%mBw0&Zwz4xJV%jEg7z&_Qz3J6!mDQ;wq8kc=$WTjOlRrn
zo@Gb2o5j>RUOEL`N8#dI;nJif^nI)WrwiP)p%f^TfLP(h69M<GeLF{A`!;757f_Ad
zQ47Nor%??NoF)-#_=-l*IHns{Lpqhkagrbk3m6O402Yfvp#+sc;a4q=qxspvWBkW~
zA4BJj{OrXGeB;MYb9zcMT`-&;HB6kfxDIF~Q9a`+OeSEiP-W5AEchOi6^G|vGZdHV
zrmkb1mY55)Iy=xt;Ug>+mnzRvJU-8=uA9ksZpBM<qQ#549t0R`2m+xDsHA3QvCI?C
z{tKNwgH#qZCUh8`c#e^a_mWHuFf&`_@|a=hdWUkw*2uSzUF9-;zQV%ndFBciD3mWU
zU71987#ufQYk)ejh$^+hO05*NBu1TU^@t-Z$tWimU%|VwiZ1;+y1E9*cW)xoF@U2T
zlvor7FQs|r;P;rRo?=V?TL}qKDoG$^UOf3DZrSnsV1+9e6@%L%<%NO8%qynn&a>~8
zZ?Za@z)Kqn$sCEK+g6828?|4_+1sN+EHNq^#BtDRAE%n-#MsZ#6Z`1wSVeDc6MeZY
z46g3y#JOh~z3_dyd#)#$7$n4EjUtm;&zY%x3{KoiXJ#W8C(bi)ehq$6<5vu+q{GtU
zEPk-SyKcUdDQAYKUJX%7V=e71R79jkpA=}-N>Q3UqgD+_J?V%bxa7Mxlg<xtY3em*
z7RR`<_%x>`p2izZQ7E4!mF=N3wSz<=PiQRGDiY2hesYfIPd<hwiI*{Ky5S$lB$B8U
zRDu%S*&H{nxs7ePe#R!R#G(@|LeOSf%MfX8?<_x#@`**en!DdVf?wIn=&?yopP68O
z@e+n9vR($)=_H%lgyW_$)`Arrog*z9si=!oDh0YT>qvBH4!!tOT<vn=)nBrC)ed^Q
zdbu>?F+Zmx^;ublM3ZqyY!uN(<7u(QCg+c?({RjUsY0o|#LgT0*?Hp-XHL&?;?-G#
zu!`0iFOdVOnT05{&XRHyq!L4@OoA|&=0{I_lc~u`IugC)IyO=%DM|^rw2)%9=mCD4
z_NApxY8F;)TuY?2CT@*jbx6S&gCGQ<<@|*ivY8~e+&;k6bimAXNFw1Pwdi88SPM#d
zD3z%3IE#c(F8B=g?ZOoYEkb~%7+9{9T}pvQblA-1EvD7l7-<Q=Y8i#EBOx(u2*w&J
zl@f`hgDMF&G=za=so>Y{so^L@h&0AZ&6irhaXQeh6P3dfU`0puIf~hmrD{UZ5e*R~
zZ6!urvCC+@Zb71+eBv4ag>^$_3+FlcN`b+FZZ>Wjzz+iog;K4qrx8s=S*)!MibOD0
zB2%*pV}!tj7#p1rEcnJ!H5y;LRII;3dsZ#;SrKWcC~8?v+&<V*qOk%Ca)`sfNHBUL
z$A*nvY}?jHwlhsNSioX1)}rdL2$6Y3Mp>Io+J^sy)`AE|M{^QKx;a001d~=c(&SSs
z513ZyqD0kb`|Lwner)T0lnyBCefUem96!35Q>PZl^`r@WjVMKELc|zc0gJ)f5Q_mT
z(f_)+S^*U`=BWAvl}jwxBe<PHN_S&dFsG~3?6x6@M!8KV(rp@OB2@p=Nx>%05tJ`N
zd6?O$tt8S}l%uf5G_)>6<`sPnu_mbbNmS>Al|{mE8s%2-I$YA}{Ic4d6^1<#ji)~K
zavOqJtIyR67FiL-c+a&qX;LDPhR~cKD34Q}UrQ=ALL!yJSkSH}(IJ>Xu(pb^L4-<J
zCJ3i-+z=-zq&iY))w!(HZXJv+?*rRfbg`CmF+rRIVdz&yY4>VK&@xt#Sk01x4zT77
zh0-{s(hx~+Gj3v-;)MbxEE9$$0)GbWmT{7nR4R>jvdx8ARjXRnwULNXD1}mCSPmt0
z4#aj7jMy!k7Y=Eie1kE85mCC?OIkiBSw`fnZZyHIwS?u6u;LL^Esh(aJn)h(+RHTS
z2~-VPVia9gh)%6D_ga@Rbe)U}!qWZ&hYsAmXU}#~Fe31%L7dMDTB0#<+bH>(4Q1V^
zDzOSBE^azaD(8|NNRsZ!kji$Uy^d({vDvz6)IIg*>19*l`pl&5-B!dEME^~F&aPp<
zfjxS9`l~PJd)~O+b+bFd(61_`^wousmik`eGxYitx3NH7>mNr*L~&oY<q2sUuC9zk
zgp~CYUXNQ17QS)d(3>CIv*$bdyWf2vtWhW{@M#$tq1&49Nyka=3jJb$D5=d9C5{9w
zL{2TwJB@CKzRGTfm6DxY-JDPs#0Uz{%j+OmI_Q>*Z@K+FZ!10eD3)3)g81H!k&%z*
zv0eY9mG>YB*7#T?6trDltH^S{iA{O0vL$0#zT(<Qh!U+GokqmP82@WacK*)}9=vy<
zHg~WqY^rJQ?HC#P^zSOXj{&<JozfC7Gq18y=BgWR+KA}#L2KM6+6bZr6P66(JSCXV
zJ$-QZ-li3ay~Z}D$js^jZQuU)*DI@U5hd%yT5GKcD!yHbT5G@FP;S-;%eOPBCdJcg
z*|w*)KD2dIQmkRjbDZb*{``(nfJb;lJzCp;^8ec9wP(+F^sm>(Gb^<<t@!yrTl#Wt
TDo3VF00000NkvXXu0mjf1*))2

diff --git a/apps/desktop/src-tauri/icons/icon.ico b/apps/desktop/src-tauri/icons/icon.ico
index 24989c312a7e8339bf7161e65b4ed9b7e1e04240..1236e0139da2d1f09885fb2adabcd90740cebee1 100644
GIT binary patch
literal 161653
zcmaf(V~{4%vaY|jZQHh|F>TwnZClf}In%an+qP}<%-(Z<-Z*DPRMdKEMO8#qRA#=J
zD**r?00ICJ5%6~q0;oU$fTzDRRMda$4GI7d{5>!+|1k|X0FVg@0N~^QWBI@HA^5*{
z68_^bC;$K*0{|c;{l~vx0D$bjYm}7#I0NqQoE89JWc<hY$N)ee7XZM^`;W=60e~GT
z06;+CA2Z_t0AQv7fVlWS?j!*KID!BGdHH|5LInUk6afJG`u~`l69AZ)0Ra5{|M8hR
z000gJ^dI;;2mv8zK!6(qAV7q?tQZ_LHuT?%a1!Feihs}l`2vWLf8P&4aQ|%p007@e
z2n#B^XJso{i7Odk`cAt|tsYK{S5-BwPPo)M$4HJh{6cmPvULv1dyq>56`Ac8ip+ac
zQj8N3Q4|8z>Cse<`>ZiBX=0Y9V`Itwld06aHZ?W%+NC}bj|9obue%ld?3H`%qnm@U
z!!U!IJ+fR$If*|_^PFtMc-Gkc3l%KU=sW#r4JJ5l7$J*d0Xl=Y&&AR4`7F8?TgZ=z
zFxcNj{bf!4lQ~+6P|V^or!yFF^Kj<IBOuNy*^I`Tiute`zu=2E33Y^xr2p`B=+lhA
z&5_scO_Zfm0TDi>PFrTH>A_=MxAaUW|H`*oE^3sJR5nklk-4ei&#7aYZS7gJp2yvh
z^y$RURNWF|R!BI5+Rnos#dqaDLpb(7{FayT2y3S})6`4U=h0>UaJ?`?#u)?Gyf{fE
zaqcL2u)g)-^(uTwROy&kd+PV7=x>AVoVEEi+#S6cK|#?f&L5U@4_4{A5n5*riCAk$
z+cF_g6VRxqiWxV@I5DoQLOTgVnN5xf9B09s2%jCIpiD5@P34<ds>fZ&jWP`tk@51k
zrx|qk3J6R6vT6<;JcuP0`h;cKhVF|tn=Kh8&?}I%HEc%n2u`B~PKX;*7-0(8QH_PU
zbwp=Q2OilH_Ggx#u~$Ks<{d9>BwEoZeB<N0XJJO{Tu)0(V0nBn`_oq;m-9oc<<d8p
zJFLSWF@Sx*UoI75H6&rDpHJIoesS&SdeH>x@9!OTOAzR&G5{w5a#M54>$`p!oSsf2
zSUl=~)TMOOwGYqQ>aC8A9oi8!OOXc36v>l<WhU8tuo9_iCgfF)*X@Y}48{W%z7SiP
zg2%YCtKg=FXUBm~1{Yk{fFdnEn69~&&6djpSkMF!V}WHzU_=)jpdEyw%>V~~<n;+>
z?n#Z$X<G3?e%=A4ute2DpKQeQm8?gfGGFRn?pj8~eFQEbMHIH{^t;$X+Kz2YP4xZU
za6kw4%PF^Mf?dzqsuk{B{dcO&+C%pX7=tuLj||Dte@#t7L{_*;NI&rZV<`V|4XFP$
zl;{Y&zxE9J^PizKDqBe_i(&Gycs*YwnrPUEfCYdlkopJqBHM)j#<nUr9k<MsFPB*}
zRK&J0l<<3qXK!MgWiMjN*F=#?np*&l24gzUEJ!ND#ICT`QWtjXho+4+Y4vJ#E7CwZ
zn0*jS%pqXe_D;{b_I{m$WrRpd5Sv|qKj4P0WV!a%Zrk_xP`jYCs;W@pbZfPI7MX&0
z;%yGO$N3N+OwmCYPZ$pQMxvRkr&YRrx-|R2HN_>@iHQFh<fMDQ7yw-#kWhPmUAB4)
z1DhC}hVVw2xf{NG-<9ZX6H3QE`#Lq24U%>I!ONcY9fB(R?#pW*?WC(9ulr$_F|r}t
zm5Ax(z1sFj(175I31pa%d_n|#whzfm0-dYnpL(Bi7K5*;psTcBUdg?EfX<2<Id+6X
zzFG%os#9hnqdFL0ZlmU_xbJw6>}p4i#=9@5lRM?TAAG)kc<yb}$$>y{j%Ra<Ael9d
zMk<^VEr+}DbaB>Pe*FlT0Yri`GOI1-HP&)-*OVr`9>f{7_Ts9$-h4jQ@7{Qk$@tn&
z4>~v=-+|h0b9z4Eq#g(G@K(+kY^F7Jw(K%gyJ_FS!P2D5F(3x%Mz2scNLhrmdbYCB
z9w(m*zm6}x`-Q5J6|Du-uKPP7#U%lf2pA+E9ymNGj)8!$XVR<IQaJSNO-np2`NE3k
zF;48jHP|bq=gnx94ufd}Lt3RR>ggmpNTWuQhszFCzenR0Y6+_GJ*jDg(09{SOO}V`
zQX|{0h6dG<jrN7=RB(zWhzUQ@=;p;NN|(j-$6*UQRrE7>h%(BY_j_#=bmKE@JG{$1
z)kGd+#x#`ZsS;X7^Md>+G3OK%q8csL1Ct90L*|OwCmDy=^%3Ypse*`%8X;pbF5aMo
z8U<ChG)vg7Y*xMvRn~Kq=6|*>HhwpfN$?<K!a0a`mc)~#&p3qW>*>(Fks_6CMBuh#
zF?Igh;TR<h7HX6-Kfl4QesIoqd|qUmzR!;*&r~XWj&a0>Hlf!g5lx4(q`x%9S@IS0
zd;S2hp9#upV%;rkAlfZcn_=6X4RiYn`%D+tSBOE)N`o(q{EFl-vhXFhZDT0NKeQs{
zX;O$rgiB0|@jV67zBD;GI}<hPuTFxKTuEwo7=lSZKw~_VAvd>iMM<bjDYRcq<UDRe
zD2kMCfgWm@Kx)Sd1b9}yQm4_@7-yn1r_r;Da30!oC&#7vP5Al2$~TI3`U)e9FcwkL
zDyEUtSpcexz?np1B4nY<);M1%3Zi2(vw#1NA4lqi{y=Fo(_`S)yB0Mo9;KxcHpZrR
zVjOB6!-N@+LQx<y-3N`0gn>oaNxedVp;*seV*7RiJPg=+o<}DQB#cr1LV;1DwRdCv
z2@RH4wx1Svoedww?u!~n-{>%Mzja4DQSqAyd@r18Q!`HG+I7g+wbyi|MwT!oj6IVl
z{2R>=Bu#FD@=<|{`>$^S{4c)eKQaXKzrJV3jql~JHn{uedpeaZtd&(T`L4S-?6zo4
zQmTGxS>}fX(xL_F|H<$VhZ#ZxikB%>F6<3gm`y9`)kj6MNg4!86fF%97KX*vL<<su
zNs!fQ&m$qGGf9iq;AXLFU+%!7qh`bQbNAbDTXx!V>$=9@A;96_btH`aKEEm)zgB;l
z#w6)=+{o=Y-h4Q9nl!^)Z#_JOh;B7Tz8M<wQe#>gP0{1`QGELFBL=$aFx{TdWg0U5
z7IzuKwDLS}Y#eIqetx~iTA$h~ZGVyoFb;ZGV<os=d2m$GC^e2^$bRVSyW}>4@g5al
z%(U>ZwW2nR<8|4O)HL$@Zqvf~UfjO(PVqWiWGQA^8aO*vRc^O&y1#x6tR3~an>i?I
z&~8^zEw+{%SIdzW1Hp@;W6;&K*+6nP;9P@Ie);?fi6GfHQPDPYVE%kQ`zQ9qx&{<d
zL1bUY|BzPySAeLKN9_d>zMCC*mEX!(<8|jVik;TSx(UvfhbkhdxhA@q@aP0N6gyLF
zE=#Ge$(;B2+f=`vEl$1VBaAio?8FaAn=AouJF&bJur>5$^-Y{D%1p`#z#@>ycP6Bx
zHNL@YR_YnwQU)2hsv<~E7%j+V*AfVUXLXC|*M8X;sUTyvG?~pIdb#6-pW$>)K`n}o
zOXII9^(IS32jgvq+rq5?`{VR0J<m|qPu@g*XLRPS63>l<P+`cIQawRUe93ldvPmTk
z7CTe@V^^OAxnaEg+r$?lL@Ox9?c4fq<@I{EMeRG~!as;5t_xLdRRBtQ;E!8Q+imrU
z;z!O&M9fhx9R8K<n=h2d`y#%2HbiJrVknWw49DQIL3*;s#Y30FL)C-dE+Vxk`7g|6
zw_#&uT)5AZd)0HvF>=Zx(Z~lc&L-0FgPqqSDUaYS0ppk~q|C~O>GoIc`EpNDO~1DG
z31~WXd1@!M{ey?g=t|56uJ*-0Q2(GTr;F<uLAQ4=HI#7B!{Yg1C{f(3C6r$$!MotU
z=s&Bu{1Pi6-f26f%cLHf&@dymtQ+Y61=b3kH!5F*DBTi3c+gCU3MxsTIJ<v{cuGXc
zgCW{V6RH#@qM39}lnh2bvCX(TyS|-BiVI}ID#ch{U@+Sd36T*PuOGNSkwBWUQ<rXD
zg;Qb=GEZJ|P<Ul@qnuJ8JlZdSnAV=8PiWm|!CzR(!%1A0!M;zdP=*P&U^|9k=qOJh
zTc^|U!af8DBblzUU{wM=R)ogF&fDQ)*?gL#H(zoP_gRQqRe`bR&iW+~16!^HM#0EA
zd<*#)uDFhscP|agwWn?-4Ic_?ZRk9?>2ziO_K^@+we`#`v}-GPfM(eoj(HhxZ+L^s
z<ye4ZG;T)p8*Z;X*DaqlcXlNYt3a4)Rv20Qk%n#y{DQB|eRTdkdqbdu4&(=Jz^tLA
z7h%SU1+3WWFFm)58OdKmztBun%rDnq<rL`1aKo*X$=+l+0?P0cavck5UZ@MkqriWf
zonF-9%9eGd<N$&qF!Ih;m$M@L_v>WMr>VxZI*;f#JjXxtI$**&APnlK1T1<dNo9Zn
zT6df$1m1hJAj#KfH{U^?F1AI8i~G|Qc@b`%j-mw5ShbS<A_<M$cS;J*N1oGaT`w<R
zI>;gezA#D4;gpvJ1WR-}FqNoHiP3HoQ;tkm28G7f!JHwezzaJJce26=$VXJInA0&6
zq<IsdWy1Ol6zUYsxeJ3Cg#=lKIj2Cgsdqd$TzFuJ9C1}NG@+<ef3rRUbBu|Drg$vg
zgy{LXTwfJJLTuP7G|U@os#3zzaWTTDr;c)>MJe`su*oRRF_R&am|O|;#nw~Vk+)uO
zbRcaeg(*?iRBbD2dR|(V7h<+$DAStOn>s}!`(E&r1dJt-nDU6x?)3gt4H73`!+Go1
z!dFV?e-tyr4A}W78qhPQ8TC3y?%1F?$DM*2!67Lqyo8ab1CogrO!46%8BK|<b+*C?
zdJ<b@5WqD!{qTrK)et?dQs1wU(LsrEb{RahV;??j>gUG6ULvxx_LI5(UhoAIChoqJ
z_ZC?BKSITSGF1Hkh6*0WssaE2660T}SXA|qS6)W@-hAKc(s9LD2?0BhdPQxRRV4z$
z9x#?JBzhuYi(#>`F)XskP-SWS9w;)k98O;&w<%uajKSu%oD)7*j$T|SDGek5ZNv-=
zCoG|bylC^L9lz?D_ToX1Co;@5=AJ*j&UM>f?>u&!zRvQR0{Y4ogbW~@iGNIZJ#;cX
zK5Cz2`}1&*gNq<E5MPYu(Uj_oa%RJ){A`dh&i3X2>m#Gm#iw%a7xIk`i6ojkQe#~{
z_o_MN0e74w2ExlUB?1KrE?aq&)$B0!d^dmIy(vxP`$KL%3*Taof$6}lnyMqk=}Z67
zzU07%>wshQlfbEbQHWO-$HZp(Hp2zxdA)>Fp=vtt>E6%g>vB3r&-MLtmEgsv+F@#(
zA3Ch7LvK;ijapMA8yVVu>XDBE^`4(!NBcH<u3|&kTUDOha|VN^yDskjvg3KC4e0*!
z_LXftmBaBzCp#|nTCt@`J8I=eY$Wrui-^Zf8FJgwlt+K!;xIoO!VjP+C}F{Yq35Zt
z?lQyif)5J6^th~teT`MQ>33hFN?uGqi6q25eL;U%ASglLW3b*PLrGFZk6J@Pla04Q
z64$n^Bdujx4cjU^vk!OgGEUl8OEG&!S4-`aTpz;N!JuTO#W|n>%;3mR+^<3drXwT{
zYMOu-4o!wCZf!=l@3lYYTU<*IQ+j9g&FY{q&P72^zJ7*bi!%4~V~Q|JG?LJB_-{p&
z=*q%@)@v~+<7O|1Fg7s03)Q0`q0~*MH4*+Q4U)@Sup`S}=%(cBb&0qU9R17h8SSA5
zgzs)s;rrR&uTIMh?!PTWBq8OE2}wZ|(Bf3`4t`bJ^2>9W<*<zc@K8yaewVZJn6cuy
zpHU%ITbCgiw?y8hOl^8`F(?UY2IfD}Ob%;$H$u?6WOF%P>_O0Vf&iIrVb0$>>^V6%
zl!z1nUVvwNW&O78o4a}XqD!##^2TeQ7?M+eUvE{mb>P9{*$V?jAZNtEOpJD}sm6bX
zvHj6lx9rCc^sF8z!@--|(Z5AO_+7E~b$)%-^<jM)a~A)b_@QbT6crcNZV^?Bv%Q3D
z=%B?GEU=7_Yxf-8yq7m<s2F9@&vB^kqC=fi6D}D=K)RUK27R7HM*{)Va|pbxM?M`I
zG{fJ#V#*dQJtxt&w%h9pd{gyvqL4hbSCoWN$SwgnE!jeR+o{bk^58_sRJMByZ%bmD
z-EN?WE&2voX!JswYaFl8^nh`o7>V@QJ|zXLfieL<jf>LD2x{~0-EXFw&E}6-CcM1N
z%{slSUjBO7xM6@lbB3a~cN7$7RQ#e5S*9=M{*-`Wln@Mbf<Z0ltXEL}@et$hWLYMX
z%)TR{6BwrfStD_PJ=1)|fe6^%q>tc4^^AO)Kz!nq0<Ti>tt$uo@_D=fA|hk}Q_3nz
z-CO=C&+^pN=a%PpkNto_qoiyYz>PPKExDdHR!C<QyC}s`dl^#m6S>G3vWC*&;Z;~#
z4k&?3@Pn0S>Jnn=8bWwf-t4#f#p$U6>UW=viOO!UyuB?oZ)isnT0I8(XKB70;|_<D
zXmGNELY^#4ng}5xrC^<ufWwdcYkWS~T1FHTdWwU5Yi)v=TJt~QR-3p1T2T(!vrj+4
zk+V^2kz;wYtYYuQ-neO+-HW!IvRed=`W4V39CC~&0m{jzQ5Kj9T+y{avY672kSjM&
zS|=*P##%a@b2TXAIqqN>nq1byY|^8}h&=`}c@sZGeh2xWW{B^@H`zOHpJmB+T_H9@
zlubEjdr!w_KTJeU{2r|K+IU^CkTW)IoX0}k2kl%#>N#z)QCHUm3&h;OtPpgwV^Bm<
zQrDv}*Ca9m=QL^S3AO)OZBx>ykbfvpcs*I{;tU&2kz)@X@+@5S!eI^n&@?_gZCgY!
zWv8#!9utK1xl<4j)L6b7L!%FGL5+!t8{?d1xdAH#_2}x3bYjeUf|mCPOt;0&Cu`kT
z=+xQ%L&8(;uuVsNPHEiSV3x$(ylf~e^@l+JA_<`oB6xCqaviF6gHUpzxIL<o08bbn
zo8C`DNoGm>s=)My$}QOpq|A^#u2;wzJlFX$0Wi#ov?%u^=Led?Ll|bpVrME_PmIE@
zF0kG>0#%8?%^Vq-Z0D+eVse&P8~kWVA94G3hq5b3O?o}xMWeXWQ9(*Jj7eQ=e24K0
z&O|S73}B3hoSd4Idyn|k)X4Pu$lGI`>>71C!mPd>@Rlio2sqWz$t)%?`NC#%r=J)b
zwJZ~&{hTTqa>BxPE6mJ<HSbbB%_brJ&{B7tJxJAV&JR*q5j(<W8-#g*!o$#fBqU0t
z0k*<Kk@QEdUIM*&%vjhQ>hg_->az`_S%ryk&Xt{7dYr!YfHrKi=`mSlG6{by{GjLw
zBiJKpQBJm4OLP!>AsIAQoq($IwxRF|q~oMk6h23v{SvK@FGZ&x*xuJSLprmuZzM8w
z+pC!@pD<5J$`OK$#_+_o@j0Mr7{jPDj3UONvP5U0`tgLE7f~pb{Xr#{-mhSKClz+T
zNn=;L_79AiH@MJT=1_;nQgv=)tL3CKpoq;81w#2OB<3coXey?c%YLc;0wtFWj?}k=
zjP$<W54hP@LlBlzWf3N?^TFO*ubc}eZJ{f@o&F{rysuQdeBzbPJ{5gWCI|Ig6A%Z@
zKtI8R&ede0T*jSAlk2hy+8|;2Lb=_nJUUwETM*@|)vI>q8q-ru^2Juc-i91Iexj;i
z;dDslT)HHu_{`nY%Y_<B^ZMHSZ^in5Nj(Yw>IuUC>Io-L&j$biO7{Qh2{jM<q(eO4
zt!JKR@w#>{R}{xIdn<o|z@j{Tg)(B2Em%vJtg^~s%9DjTSIycbkm9BlhYGaP7<6aL
zu(DZ6G_w{`R8TJ15YQ1Qa?|?f+wAN0SJxn@@HK8(v$v1h;p@*QpPcQ-uPv}I0zrW;
za}p9&71fcuOxv&cdkxgnW+~C|G_O>7vhDVY>q3NFuXmU3@oXa`5u#?-$%{}2-Y0MZ
zx+^UpA`jrexQ7Kh*e}N8j%cT;{oK2_ZqnwLv*{|m(Mj~-5szU<-^(Pd$(ZapJK8|l
z#9Y`vzj*Ipq6rSNrY&U#k8PIrV!-h)cOpp*L~Tl&t<H4_Zbv>pQt!=lFWt}%f<M(B
zoYie~N`yS_)5X+cb=x180s<bh?!m<7MvKt<t$k%Us;%Y|v$QtWRtk=NF&?P+y1Qfj
zSo|b%Iu?{j{~%N`b8Qc)(Y1Pq7`2}TE^%CO4tf04;^yiU;V|ni%f#R<&Qw}HdF#XH
zvv6_ry?Aot;F(r^wc`Dbujj<$W#Fx}S{fT(qT{^1gHeAw<DtPG{(5_h^vb|!#FrHr
zAyPm`@lOW0<5svsVy;Lnyb{rgqU&&*d0f^%KZv%^8%atI7W;KQyz8AZ%HIFbGlz|;
z&5{8oBPaa|`h$H<4QRj@$Ti30g`^e(aLMFh0wUID7*q$b)PRq-foOH{ko~;xUtkD)
z_Ku?Gu~k8z{9K78p@48)Z=!%@!^9pDbK8Y2t2CUm_cY#)b;6qXsX~95fv4)d=~QYi
z|E3pG5iNm1web^=MCPB<b+PRa9yEJ){#)x?fttc6l2CY);Zwr_Msoz_oaQ<9&$@7d
zhgYE@gfptnR@8G@4Ls|4<&Y$mN1z<R7U0C~t<Q{%kSbB_dKPa+Kh%`ulT}G~Jfg=?
ze;_Dm>ueMk&xBIdbDf+RYAZ$ix!M%7*;$DfZ`@s)Nj?QS>)|khx8Y;LkjYdEIlLC&
zj2=$Pl~!V<T?Z=)9Fm$<Z#3Uj*i2gh=HH$wuZAw20JtjN>$rEZwvefB>yg9I-F#4&
zav_ti0F3kcpG^Xc_3c(Ro}Yd)@O`a!>hKgM$umyf0cYX6_0@fSCi6eE61*2ynUT!?
zzFKNzWs|AqG_?#cf2SpR-}P`hx61thpkeb4lWMTpi0TBlok7~%4OEEC>*^L;anMFU
zq`NRynJ8}J_99ErQ8|t$lQqI6qcy_OceUcJypD}t%xi;&!W6RHz1-W`XgBkvJAj3P
z(|Mz#m}dZmJq_*Tj+&QI8)R|fTf#;M9X>N1#RKHn1P8gY20KMqk<+^dvT_!ASuo$)
zm7DX*ENMyRwtPtzF(9tqHh=lqUFtqY_7Ar3B>*2N?ojTnEPCx<)S9W>r5`Vr^Q^IB
zLwIqY+;&M`=(a%~fBg<F!$WDj{gW3j3BL(`P|sNo%d{p2%B~Dw=o~{_<#D1Hp5>14
zB_w(tIjoU7nQ`vpu%ChO^tA2rDt>x93oL5C6)c9nl*0x=H9mL5&QPSLodit6gloZq
zh(D&k=0jgQLD8ck7pIJ+ZNxc7IcUHjUuRsf@}3hRai}rTQiIwEEzePfnK&Gg#%6<^
z{jHzV&vh>AN-~NAYHw@gebaRGtGL=Wn%r56FsfCX`Oy<HQi>~6eb6FAPfX!Yj6O+k
zZ%cSrOJsp!3^7@B7kpqX5zrwyVueCHB#gTcS=^*OIcAf?E$Zre@>aLcuF|||to(hv
z6X8y}roG60m$0f7c@G?#a()7#Ks=;2v4LzYCAFZ6!0+fpPF=5aJa=qM2U|fP^Cn!c
z7)RO`t)4iE+0`jbCCt8dOc_^4&~eCn=9IRIEfjZ;<24fmyB3RNC-RjEe6Gk}2ULmL
z#PWZ~i6h2%(pU|qm?i`=c8Lh2NhqAw(M7M>lD-uGAcc)>h59E3Zn(tCrpV3EHYRu>
zJEVy`Wk56Xh&nQJ5p~fHRL45}z}&o3g#8Gfw=PKbY-79b`U0PU;cK>B3Rp(f1KI+k
zhDvE7%{nkM7T%U($d%o7Z%mGw{b0y>92*yW$hO#bgccGk=!(8wimWNKb*}{T4xJJr
z3(snNldc0{mzj^AcYh(1(SFV>RbJs4f`X6Ma7-0W^_rLc;uzk$>bMttB~xE52%<1d
zz9U!ya7W{%AnH3giwb-IBxvNGQ6_vv=(bo%x_#{lVIBo%^kX>dhEaXWCW4l)1&!iG
z1did*yO*r$H&(kpGFa64P1_ms;GmO3OFP&l-*n-~zL1JJb6<p99t=_xLl;mUFl@ho
zgaHX({6+vAj~Y?@RbkgHLLRv?{Q91BN<dMD$3u#S%gJVk>LoVz0u@qk%Oh7YrzSwm
zH$X`7NQW5=#%I5_z7YXpZEa@J4>O@0k*#--@<IBytcqq6kOm}?{7SG~VtY>-P^?~W
zRTCcOOGRde1IT_*;;Mcc39s=XI|U||upS~KGW1Ft*or2m%%tE%j#8LklP?4xpF+z9
zGNnrp7tsMOFr9IoCp+|Jv_7wh)|PhIfIRqDAQR<nlz{}vuPJpX<kgSa;jSkk;Nlb5
zpYi_6bA}M`4}vZ@m>jEc{pe{WEkAPivK$Zv{ZFJR_By<X3egwQ>eISwG8_bjmI_X$
z5l<$@C_Wp0Ww@U$e+)tGuk7~91=MGb!^YB-K0S%XNwx}5LNsF)Y6INX5`yBhl9~Fr
zFd<Pu!P@@x66+gY5tkE=YR_C8*zdijiuofTg!^9p>9$>62z<2a4^U64IXm+g6oFrN
zwUxw0jBsjo0G7nsrRA95ES6PUjiJueV#k0>q)v)-ITJV&FE$XnoGtuTPL=DuL6Q(w
zcE?xGAH(2N*5yL41MX*}`<Yiq8)18ffWGg(?K{xNCmly-Z>oU`43ccDU_Ty=WWEYy
zJoo;!fTrca6E-D^kUwi})-w`RhUu7$LFcu0o$1!zTm!D$kPaybvj{psBDSV(eN#d<
zQXt(z8Kl6-1FysL<v`lG`_<B9L-UiIV2J_fwd_wvR0pC6=6==9=4<&}!YhLN28z7O
zb$@>BGco=t=&pwP(ax;8>G++n>-jo3!Gh?u<Ivf=ClF?+5;@5vNgQ$MMEi}UO1f{g
zjcA?5ej*0)(3P9>yZhZjbasNhc=zge;y2b8Tvvpe*AH3;fxj~Af7=20k4z)|uMFD-
zq@@7>FpB?V*k-Dqz4EflaQAap^YvxdX0qy9avXX9V#14wF=!nVDlFLWjNygh9%;<w
z8dme~`L@$EcSDx+B3H$AiOiO&b%!-pTSXz9tf92vHBiOyOX4v*s5nq?7|^#*r$+wm
zt9KW<<4a-?@b%vkU*^{nQ(b&s+kClRQ?18YFdu%{uou`^X1w2Yw|#Cp&YCy9$yUp)
z(~-2F;0Edj4l&55_2sUeF9^BcN1~_5utuqZ-CwVZ&t}}sGt~-AAl*WOx}m_ZKh@v%
z_OU!=5eFl}L#O0R(I=E-sOgit@4{%Vh(95bqG#6mJukeZ&P`?MDqgJs`>Cqw{y@r4
z6tQOuBEsdeMMDHXQlwg>SvP)Gt)CI2VYBhe3iFc|T*uXZBE4+{4!X%$-=*TCFeHOV
z{@E_e)>4T>)831LSbjptCM%#YOjq8g@7L^@Z^$`kQWQof(`t&9o8aksO<cD)2I+1a
zCoRqUsD-%Fsd&CF%q&s{C;!r#cYc|~P!!JnbzYkJggsQ3o3V5^S;Y2jR&*Q9L?Y4;
zb>`!06~^;?<<Y#<`EVNcHRPj;`sxRxR5MkaVcVV@`V|x2G~2~sWA0!gRor<uFvKS;
zbD1vOkKeD^u*qoq9$-N0vC5dzWsK?cj6GE3PA|w4?%Q#o_eI@}f4@<4HU6W;kW;p|
zZ(S=E-$Q@%SN)sr8<g$$ksHQB=npol(INhqrGO;-LY9PO9_ST`Ar0^>G9W4#VS46^
zGlMO-@~DHmZQp~@ZMyZE5h56sc;;yyt?tf0tUJ@!PyKx-+=eN!XdI!zHTMa56r{x!
zEuS}^!uuQ``<?zIkfuQ<LcnUsh>=q*!~iNPLOInIcjcAtV|y;A)X{GDh4CEU9hB!E
z_jU+fUkleC`+R<#?=yb(S5<NZa0h{i5$6fh<<?~x99B}(ud_GucOS1vE^`&FXGO&8
zky=7Bj3eCpWJED;9K|i0#rHeTSW>B}Mt>H#?5D>c72Kk|iWVnU9rDjnk9l*IBOv!c
z-m0wfGa`#-E>7--R%dyZQp0RpV}qOLhzJsDL7Ohx?M%DBo>ono8}JvuN@^v#<Hk$5
zkEJ2T&O%o2bGHP_J_i}HPrS~wh)UN8Ai*Pn%aZWMoc|2XF+mWp97I$|9q9XBhKl&T
z-SFduKLSqxD`M&E<1zx&Q~tnER8;DA+)q3|TS`B7HWw$cv1?Ev{{X3DBqAk{*8pL)
zSXDoFg{imvQU6x8I&E7X0X(P)o+t^$ce=DZ4U6x6ztS4?j*zwG*X3qC(gtpBcydc6
z^}rb?ds29d+7W8e-{8bdk_=J&l5{I9+Kl3R*(CA(VW^5DK?T&43d9P&y8?ib>af7q
z$8RZ7d&$x6w!f=i4<)o_F*+8mp4L(rJB*yUJjak}_4#}Y5m*CP<z-??s+lGy?;}HC
zMdC0U`q~Te+n#N(*u=9UF8%%Icp}O$gA|hb*a0gVVN`M*fB3<r(nmYusYi>-T2%W9
z7}0m=S6R9u5}`qZkHNW&iW5>Sq}LiSvQIl1nC#RPCSs67UC@srHPVI=1ivntlo}os
zFz~j!mHGGG1@9}CWS*@zusLpvLL;tO0=fI%2ayK1tiCTilJE+X594e57#g7VwhUoL
zP|y#7Jn)hdB6T!U*<t^}(Zbe*_kekdeQ(<2qo#vorIb{J*wT%f#*vt#pDQj$Tg(F5
zb20?ZSOF|pfpbq0TQV}`Y9ANsmBwkqJkOqTx#xX7@@SgPRReXUCg$$e><qUW1y$OF
zYJ)Ayp*7{=((sH`5CKH>8@4Yj-QE}70pD-4NPuerB^T*f<^3+6rIDaog^nf9Vu%qa
zaQLyGK7^qgJ?O^$)v_uCI!-U@v~VSo;u>=`K<BE!_!gibd|b}Xu}0R7V^U)skmb0^
zEKo`4+SDM_KFBei08J#pA<zV#;hWKRA9eXIL^cuXvLZ1gsHBzTKl6vX4{ccdzVC}l
zwt*c7mE*&{fr>}i?-zA~yYWHd6iQsVMI(_AH<ZZ4gSd^20yZY_`FU`9(Lk-bqVIVG
zSW2P$PK;a`{UQ78#3Hx~AZbX4@-!cqr=Yq%_>8p3buxyQ;p0-7E#BATG{v~y&y~6n
z680ml><F8i3u{R5Y*V8LqRvpdt6+~K$j=^F9r%!(05!}pkf`aZL`I5?-ex@?h}mQo
zMmd;1I|zph$l;B4z7pF5b1pF0C!W52k_QeL+b5Rb@w6L>m=c<~jzk)njoUtF6VgpH
znXI~JD~)*W_TNQy4l(PHWBB~xK`^o#sKLtc;$~RQSo_FG$W&sm0|9b&Z}hUJ6uT$B
z0oC0PN)66d?&VrT2w%xH)q{f869L0NUk&lH`Vhy{G3A`9GO4d+p?K02YbuUP8QR|{
z+9sa^5{6E1`NF#1CSJ@jSgS02_2i#CS;e&{GnuTQPQc?Pkd`G;yQ=?y+3fQm!Exww
zn(hlcXP%t0A=1SM=h(+#q3s|CTL6Uuy-+xfXab;q-Nxi29b#NJj_a+wJ!|>SJv}&8
z`D$@4lMgA8OnW~rjNJQaR8_S(X}<n!AM1N0R%8x)?})@Pd9B-jmIxp0bz|j^Hg^Xy
zmIx5L3zQ(wSZ_9b4HTQ<Cydzr#a!Jw7+}F<s|D(4jC;Li7!##CBbj`q1|REV*S{#T
zU&ibF`WvVSlYMJNhP{8cX*sDg>{}c6)E#W|C!IFqFDru~H+Fsy#r=W`_fo`-$`5qn
zL5{-0W3~s_s9XKo2?l3Zk{>-UJ?-p<Itk*jaVNN3gy>7seb?1c1k>#iQp-v6<+QBv
zwS2rI<5I_k4Rt`r3^_fmIq+Eo)`9|${Yc<*d$iOfx&C_P0qfkWO>ouPaP5?#o0YL7
zsgs79m(mk<p7>-$Xi%HrOo<FtdO<2|$>Eu1Fl-Od<JuS}%xNHD))k$0?AA`;YcbV5
zqfbtlIM;z{5&7ylLH?@aDs}^W?u0~yQX&N-PAt=77zQi-C21S}z0SZ82p7RQvX1e{
zX?QjQ#K(hPn~qI+Cu^qrKm95BU1*C);;{ukWr%3iTOe(0SY}-fVeuIRQ$BaD;Dk}1
zM*a|@{t<s+gfsC?M$o?KYjW!b8BRiim%-TGV@xQDFxU*+YDs`V=2+`%lb91pXbH};
z-Pb;be6R+OZcb@IM?!vvY91wCK7p+Ph2n@6*9JNM;h!k)j!M=mDjh+O>}yA5O^gYT
zvL70yuqmx4cO3={h56eIuB0rot&N$oENZI@Qxw9*KJ~Z0Z7<d|M?S3{0mX#g3hc2i
z(3Hs3oB>x+jktgtC~`_*QaXz*;>f0x-~xu<=j!Hq=&T2Qc6oJmgH^HE&Z2QM0{W|N
z8enMmsQ^)^<=TOR0rf0FO7gX99SN45X$3x=^dpdp2-ZYPPTGCX$S9m%<g@i<xyuk{
z_ZqLwX}@=miFJZu6zn6iToU~NvNyavx{W6@tshLhMV9vWcOXwXBKv*<+^E)oI8Z$%
zeD>G+<j?e@AIr<j=iB^GvN$&rQPS{yub~&Muk0!`q38k`0S+39CL)jbGrtX;bGXRs
zP6fs5K#6EG1FVNSu#d|wa!5(me`Rgme#Sp!>Wy<=V*HTYhSRJ2)!D477Q)emL~EH*
z?*8*;q%X-tMc54WHZe@|!n#bZryrG^bTFi*QbFC+&x!W_UPfYn2Pk0Uv6`iuH|{_e
zZ~GhVVImis?sZ>H=uh(o7HyT-t25YTSZvQ2oFFHa`jNR8@%vLMO6zC44K_!$>Y?wC
zjPp>s0m6VPfRZ{ZCVZ8zI`ZN(iX80m#C&F=={UX=?73QZYHWoS^WAs)EkA{{IqPCu
zJm>!*#sAaOOZi_Z9`)5?^S6`M;GYyfREKd^Sxo<W`Z4`3eKpxh%7G*#)Q2PF4h0z;
zmRAC1wp#m(8y?JbVfJjIjHNKjRn-Q|s&uW?NXx9@M_WU~*+T6l;S9K7oETwRSe#IT
zkYi%p@Z|ZAsm|lZ=ZZwcC}3iG9;>B{?~3**4YS<(XSeU~@2>A{h?j4JhXS79IGAN%
zJbXRfF7vgs)$wE4O_YIeJaf>#*ZSaOl&{05b_|=U7C;niZ1l=k>XpxVPo~_(8wyY>
zFDEqrru{piUqP5t&aQXf(I&h~+=#hc6;-D8fYLjs+2Y4I4aRhw$f;c5eL~LrJsXtn
zG*>rY#);2?b6c*{)cmD_4q<=3kK4JAN|xPz)-dOBa@KJ3O((+k@@q&yelR>xK~fKw
z=)2S7$5M>w)GJI|3gvp`IodV$k)3BlFi2gy!8I77U%TZIa!y<7{qxej775CDH=_RD
z>p@i-d*jYw*wuG0#ju(*Z{2%0a#nYRRfI;Ei_@uWe}#KLV=7+b!!!6ilx^evS}wnr
z`@ySIHUG@pJH+*ep`(3pFueqE^7re(coxTf?nd*IVD1HhP$%PY^0oEq^ef(}v*8hv
zj$Vz@GDdfPrj#E0gb2gw+gxHwSGk<r4GB}%{*{@o)0PJR^UxnD$s^fLY~0jC?&JPr
zGxjPU*TKhAIL2*Z^=I8o#y#tf_v#c{uRR6=zMZB0Pl$*!Hb@hwDO$KZs3~Ebnb?&V
zRj_!TA<un1n$GWX1ljYiOQqo^+wL6zqWujG&zWS<6e>qjC``_}y^_{!VKpKLoeTd>
z^nB@CYtfQ{rm`c<f@}~n3L=|;v_BL(At=-Zu)GbI(K!#8>;2Dywzuq%R=U&v&5(R;
zmu)*=?dIF_ZS5D^$5CC1zu`4k!9c7B3D{A0*p=<6f#JpW&v2`**C#|Lok3o6WaL*6
zJ(`$+0YDs>6pGv!GFe(EnOxqF&4A0RWKliOYOxulIas&a>8QnNHR~}1reTim{K%RB
zuW}mIP!Lgnot@JSSYNMYJK1u+qwd#;Crb2X8hmTL+?5r6@b!|RLYA$TYZeO?oMa+y
zS50`;87cRc)Hs+3erwUfc~=#%y5j8SeW6-FrQMZ#1pQ*L-Szf+Uvi(%Dxz1CwPq3z
zkKGZQRCTsy&5cxRz}<QR)?hBC_<nPk-$Q5F)irNc$m;7acD3f>DmFI9(D4FzQC31X
z-Wdgw@!RKp^OH0T=sAs7F5lVv;f0tpVbh+Djf^Bk#vytzd(QQ&IN#Sdit7xvub412
zV>AWwpVNR_*0?4hIuHuAG;vNJ2e}x14Q#DvxNM5yOl-To0>c1iINEMl&UMQ1!O2f|
zUp0I4==4_{bX(nrjouCc@VfHLAg72mzDGQWZLZm;-Y|+nxLS4ZokDvb<UEilCmbM;
z#VCsAiz=xBf2U&rUm*oc8`Kb;q;N!A9ogEl6|*{iquq`1G7sCYp~`jcJhP9iS<ik)
z6kt9u;S>-&yt)sLE6SyhPfli@yLrE^TI+cuY0#l4AaC?I4A4Lge+HNucVwgC+kkKP
z_f|jmgGE2@-2&VL@0H5Wp`150z4ajec8kA{TAE{59%oe_nv&O20;mY@x<K=}FlLWJ
z$xPD4e!Rnz6tkR?d+46{SHPbaqk@yS_}4~MJ>At#f7v@4&x6PWr62qTiz_U~VqvSP
z?*uIa9zRAlZ(1kQLab{qM4JY2-$kZ9BK(=k{=~MqTj|}6kDohU`KO0<zG&l#Q30M1
zDN%qI)a03J@3cynBt5d?LA%f$glJt}WN#;oCQM!qD4%OT-DQfB78B)d3<P9gEXg)b
zC0iogg<6?|j421*M5g#EY06~w=OBS~buYs6<{mygO=sF5uC=*;K1*Z0=X{0n-f70(
zh%)-GL36vZu#6dfr@W(4;0j+$?2db#2ZTqibaCN4U%V4|V0s|NJ^@aQ9q<`y%BB27
zuZp{BwQ#&9gko2=8S7NwSiFF&Cqn#U+7pPg!sv%fqf81QK8xa`Sk>6r(Fw>!7u@p6
zQM_<^^*t=DjE1PACGxd}xtJ7l%uYU_k29vw!|yWU@BUF%xyHD|S_5s6GDJp}0gbB6
z8Q<jHEP8`GI+}q#oX!;wHC!FDvmSY{c-KPGgfOktin=11oRcoI^P<doPTvgV+0kdI
z+7}XXo+jI^Ej?+P$`?t!u`%QK(li3_I}-opM4^IeghmQf=On5V*s_*WQ!o$RJd;>B
zOZyu_L5&c9a2U=;ypmK-&8?=L%2>nRKJ<xO97<?2qU#Ju)V)T>`aVl5yZ+s~b~9Sz
z34ChA7;rt{of<m&*VE>4a@#l4X#wp-FbUUD)W8ueqNKME;z*bPDiqp-R+qRqc!#X$
zfVjY=G=e7h0kBYqKj7TcXEW`P#L$cyfFYS=pxDS51pnnO81)@#WB;(#C7FBUXN~$M
z(?g^BF@CBIg2Z&F{OILMTEE*KeNRFt`DDhitRf{<&@%YMv;eLOiV<iiN@)L-X+p?x
zCT}}0H1ewK7^*r54RDc%U|96{nj<UZAJ*VgO+eY%=t{hKmF-*?f;9sEJv2b{wq~lb
zZts4s7lXqDK34Z6vfraqG~<*Aiq_gy4h18$$rtki!i%k95r95O6v{tk(s^b6#P;M!
z@CpT#^hl>o#a*#?i_L;)tmZPs_Ty{oH&aMBrGhak=RjmQH7o$LED3rcFKkRr_|*}3
z`4-SVVCY6-T^<&qJ?O0)X^j#dm1QYNyo7FrN#LJS?_Z*ZNN3N-?mktt@roRnB>JEW
z<N|+lLW{r#LGvL{xTElg<#yM?RZigQW=ucx#ha&y<=GA3gOVgFV6kHYt`6H`V4xzU
z=sEo=CQxz{#x&r>GRJDN_VTuno&9f}kT2);of`K0Sz3JZk(~K*a`35&ER}?J47o7i
z!||YiTl;pOpM_0eD@{<0G18$-asv6$bPgB1Up}ZuRp7h+)E)+f2=7*Y(XC2LikYjl
zYa<r7xJX4Zm`IRhpc6O=`ZQ2k;W+}=0x)ZD<xP*p&%C+2Y%+yxCa68J>hpH0OSm@W
z+DKP#b9hA8XKE%Gaz|lDrTJN>BX_MtkXfbF`H`?6j>r3mo9uyGtBiOE>Eys)$gUl?
zX3ldhjgVkyq$v8Df$|b{7SuqP4x()ExZJJLjn1NnGQW=Y&EMw{bR=cy=LCmA3;K?*
zKz&~MjOx$}yB_Hp9=m{>e-p2(MTwVWr6fuBZ54J4iJ3A$-`nX&W*m#txb*EQP|WDk
zM0PGt>pvw$H`Lnj*I5-AO6&6`+_EZdQU?OTFX9YD7EraA*#P-EuACaacs%)bWVS*Q
z_SeWW!;_)X51sAt%-WZM@%c=iVDtW(dVx}AJK327IQBd3Dw!z`qWKSI@fyX6vjcxI
zJO6&lf84o_V=SaR?)G0kW(BABEc%0oj={+1_Jampn6#Z4qftE<+I~QK{0Kic%A`5E
zfA7mM%Q7vxZB5nr(K+DgAt;U&QeoFg4is&X2$_?g`Xx;ghU&J&e>s?j4T#I=?&ck&
zeTLvy0sj(Aga@OMHP;+H(j?u1(CLmE$jmGe1<n-f<G!{SE}4jdG)-;*%VY>=M>j;2
zy?ne-0`KwjSpNh`AWXu6X##Gju+L2i)7ue4Zdlc-`~bkQ&a{q}42EjnIOAeyHI3$V
zw(P?akior=n?T$5r_4P1$%xQEf2sq~(h5SId5TB^nM_udv*3_1+ld?zNmj<CV>|*(
zWFk;l8MNP5Ja7V+<Gcx~k4iBm*fzW9mdbTiCeZ+X$YoR5JPIS&{<jNAkp;=pWT^A4
z5Q8k<seQt_gTIq2yVg_#?#@)Y5UNj2+9WIuNM`!P9xk_$^-RHuj0v+EnEh`LyoPd1
z?zIBWH(lu*X0~a~mJ-wy6Tx|A#Fn1W9HS{g%o9cdiUDAvh1-t8deGptEXK_B394B3
z!k=`RgHVc177~i|;Iqq|4`S1P!>_PJ_*XD4?Mil69((1tL4MEoMvKRc4v`#OcE0(z
zBMK$GZKWtQnNG)E(Ij2=NuKTmBWa8aYRrf~9_YfD5g}M0&0v!>qfkZ+NBGmkciqR0
zp5eWYoUAwS?nhaMVqkpBL!m<i=@CKuB@;9fAcaZ=M8Xp!O;*ADR)Xd!%F^Ob!O*~p
zZ*uhfxvLr>k+6`^7!H|Ra)RSeMXk2Gbuw$p%6`~<(g5Su)_6?@2JU=@39B&~r-CB#
z&?5^bk*X+b|2Ttbw=a8wtdII3K)Tap0W<+j%8_3uP7D5%KP*Z0dH>7#uqnx>;IO{J
zOT<6dy0`zzh2}2kS-I^qk+7T|5}2(6A7MPRV(!@uze(SXMHUZQY1U(smB#@4vip3Q
zx_KbFaF`3$x3!fYqi0+OU0IE80^#csM|b)lP~bOYq+I`L8$z!JzqJ#fXw}D=vGX|>
z{PCxkO%CSbaICjphxg-)Hb4yD&C!xozL}AULF#Wes@dvz38Oo^O^zp>#S$K)M()=w
zNA`1Qi?55+mtONXkSd4d-{NhV<NuMFG5%d={BLHa2K*WZ03aRy%gin{V4QVS{*#%#
z=Qv%laI|`GSj;y-N&NCj{6U3kgV!5?jwXzUFXhenW9UyfGc!v|Xu5+lqH{isOGF6?
zy@#7SD$OFWjpkc}MPg`!L?Zk32I;fMmf5w&d#Jt?Oj3YH<ze^I<RqWjwomtW?f3Wl
zH^_&^6uQs|RxX+dmsPZo#jelK@i#OaP4)`T&$Vx;S^2S}5c(?8JTod00Ype?Dwmsl
zo~Mti)a^CmZv;^F-L3BoL}suic)!LY6g>wKt8zrcWthFWS1Gfx^9L97D*3=N@lSF0
zRx{zi<dSa?z^GPW^-#1`_md0}KB|zm-<%|j0aP!=fJ~~le(%HDn7UBsy^@-))x#ED
z(Lpfda2JiQ>pNUC2dQPD-J{lZ8zM6r{Nc;^Yi@^1IMOnk-6h*(icQmdz3=ja&u}th
zwccl!hvQ}_ObTmcwjPGiNA}HUcGdOg2wGSbO8@g`rFp4_I>j>ObrJBqmI#Q0D3s44
zw~`u^LC7;?N|KIOAtFeQ+4oq(MM%4i*QZlVyFv5*mH2wovCNv#L%381hN|54yPO(r
zt12f4%<X$@c=RA$`Rz8@oxOy|)q1ntc7yk!RlWeDi3eKp8k^d|06Wn@wf4NW=SUO7
zmhJjEJI_@c1@3c@81B3NR_&mBwS5d9#o73|;k?%i4?msm*V^ReeD3Lb!-rN?$`ZPe
zKN7Ut9a+4zNdm$8%O5fx9@$5n7$QjJyIGZ=-d7}Km=PLFTegyq5(1;hlCT1`Kn&#W
z*0q5=dx6!w+!e>3>k2;eE&&y6r=K@Ra-WvN0bLaM+%=C1MU3{lK~A?<l!W!*$GBGK
zT1THxv*YWJgQ>tL!=vqP`it3G1t6_m8(|qdvQw`HPBvD36Nh!u%Qis9JtDgPnxK(T
zBP4sOz_)0ixn#k5k5MyXZSc2aex2g!l9`~uA02|Z0k@O3lH*cb>`P7`EX}-ikX~1U
zXB2XVOO?+kP`)aILC+n>O-E~+STttNG?w}aPJYNYa6$$slG5@AK!(5pNQ8}QJMS6#
z+nvG(W0NKiUyIYc<b=8)dib=a%hj(vWfuF{u{HM!`jnZ@zPFBdaZj%=@5jnZ)^W?G
zp+6jFLo@AO=Ds?TnaT64MEs>7Il;mi1TKK>Wo-l;07Xc_IzrinS#~<`oiE_aX@5I8
z7Ny3jthgAT&iT$6)Ms8E2(Ea453%{EU0#jU-j04azjOt$2tb?t-MxoKv**2T<XNt)
z52@E2+$l+f5sbzx_KxLnc!2>E2G>V#F-4M;5ts*Z6zWm)#?Kn&?GEv>O7+nG7UlH4
z8|^*V<YO7jkTe@u%WbEhv_V+jsC(a|SaZFOgUIL(0Y1I~0I8S@vTQ%Ypx=On`DuoO
zgHY!WH38M`*J0gC&@r>mK+)itlGR(bK*YX#^rnM}-wYsyqcJ_;jpzB9>C(vsFBXh(
zvM-yzjDqiki0~j3LYzp$8?)=QcmA=X^|+HSay#(u$qj?>PfO8{PL?vIO>1;K1Y4w`
zj}=ANJ>>SBn8-B$+`rGBcJ?y~h;?Wtx{KAzeqZJ3%FeVp8bO>#Q?gGF2nW+#m7b}O
z=Fts9KO@+7t~J6M^&lfy8vwDfVR-!9N#_6+6AyrN?Cq6n-f86{bV;9cx9A^ErL|ab
zw{e<m!-;@QWvS|S4u}GRr2y&&c<*A@XWE*Vjq|pbcwOvv;^TOcp#sx}0l0cqQss}J
zuHJWg2`Tr2ITnG8T4S05l+}(xdMm$~i`{+pyLA?uXiz885})EPhlii9c)1r`e>>IC
zq>mN*ocdfh)cC-F74`U8>zoIiS824i+!Mxe_*<uV7437zTsjs&N~(mEasO$J8dm(#
zdj{j%dMxb7GI?u+7eFlF0HsDNa1Rs$a`zm><R1pr`9h4LLqdIy1yq&wy#hjmQ{6SX
zCm?~UuHNdo`DZd$kQ4aj4b*va43A*#nc&?^Gk2ry+HKvf+fn~Q8#*hw+_O#bwh&L?
zhZU)l$2@Y^_^wx!lbRczTH}2nm4ajt8ujE6?avZw)hX{2C<M{)6rc>?A})bAn5wrt
zY#?B$ypq6~#(Ox}ScFWMcsrkb+o44cmj|3u>ybLyjG|ki;`H?;1G6RqS4T1Ky{(9=
zGx0#(*V@eO_sTGi?M6RmRd<~LF{*0CR3~?Vv%cHA9*T_qX?_!(Rs)ZTi~H6~`?M6e
z`TAX_?j0&S_1+B{wD91fn9e<($450ilN`n62*;S3(X<;M@h3sdmTE+5w35m~+6ige
z9FK4OF@ERWQl@1Z8^ib=>zm!|tU4i3lrgTjXPqCm_EJWDSaoP0Z>1o$y&tpq5sIp3
z95(<4dz=8M_Qw;o)X%O)HM&UZg*vE4?^MTJ|8PvT1x{WH|M<e5IXP<kF`c&K89|E6
zlUjMQ=SXB+PsAA&!V(})IKhUjycX<}dlGyY`ZoIsNsV0?up{pzgOirPiqg3(kl%2*
zaz`G!QHOAnKL^X+9%2Gk>M!-wcMR2+9)(uDKoG>&-$G(WgwMY)p8WRNNxl#5)G*jE
zM<t}#TH$0NN(nVMbD|e^iK8Ge^oNE3@c%>DSw+RcL|eLPtQ(ict#Nnv#@!)=-~oaK
zcelnZIKf>LBoN#Q5Foe*cMa}3|J-$-XI4GdOTARBI(wh}9WhZvQmx!0ZK_wK0dMk2
z@n9SHrE;&zR)J@0;*>kcI7}hO;(=wp&X&Z}Y1rI7h?AW;fqJ~kmaC_S`ra~T@=|-<
z=P+@2axb^p*vb6OJX&STFGa@xQ42-;S#Z6+Zg2jl{eF7+SjUW~Kco1p4~P*Jgwaky
z9l-7R7P@`Ok2ETg0b8)p(j7!-CUzcyd0^*Mg!=8mzRGiJA;oD@O&T8j?PgYxKqmLL
zOMZH#{wuH&ZWKt40OxM7#OnNb^T9f2xe(Rl{&7F#dw0&3@_r52n)$y(UxwhzRrz}R
z<JB%jSRTRj*5{jP^g3Jd9$*SF38nn<rWlrI>BZBT4&U0i4PRv;8z|}{)jI;1v2-C?
z0u2-kK@XY1A#^F5WrH8owHsUTki>>rjkcFIIOS>p8O>6j5({EDQbuH|t&k}?()Qg?
zY?9_V5v;P^xp64OAs?GF{d@nK?w6OT*h)z+!KWv{or7OB`2!x>w$!sCQb3a~XSXsK
z-2!W_G3zar@|ITk5evX4r^E%#Gqu!#z1NUX^1ZkR11!A^-v4qi@~n^6t1bdzMAjcO
zQ}_^NW<pj}@jsM2j-zs-!@F+J1)aL?E<}S^$e0Z#*EA892+=l+83G?VSU=?1PJB%t
zXjR$O4dD()@j&B;qOr%Z#mUk$v75U)vQO&nntv)qerMV9jeapmTSfp+icXe0d8~l?
zh-P(@`kU>0&!h;=V1OKH9G%o1*o+QY%qt%|Q$phxdNa<u5T3O68Egw5sk+{>b`7z`
zekf3*Jug@lh63?QN*YC~b!$!5Y<1WNjYa<{Y0LUMACkyva>Z*KXBdHUlo%$EnGkhz
zCySs1TLX}vc7&##+b-Xp|42`QDfBtNOPLDxPI?1YZ6o6I5#<|TPWh@6z%F#kXoRoo
zlPP{7vY{}m&`1&~+1-kG6it)UO0uqHa!TcVuCn5tI6e_^g!fC%>xrXya&_OLRjKo$
zzLdk!kW*1%6#C9zw_H&Q%Mg!-TT=a6Lk$_c-=NL|)@O1-1{6ofgqt-_fnndDR6F>H
z2b~gi$WL~>w*)1UnGtM%e^D>64?e@K(nG)!vt&z%qqbq0upNX7Nqn-_)$b=-5bN?n
zJN`<ot7-P=e~o=+GiDV$ElWcgFWXXvB;HFv!t(`LUQ^oYXPt3R9bkrf))UNz9!040
zc%aig01hJB(`D~T(LiKCxj6owSS*X+KJLQ@#PC3rwo?ZzAd6AevG*Flfl@@3-!L;!
zH&|I*Wpx;FSOT28qa$w}13QBCa%j<q7c*QxU#?Llc6#3{THKhv`N<tVFVPQpfFdoW
za~`=(6+aG8TYlIsfz?};CZtw27TaTV+qV<x(W4i#Xx-<<jwJh@oCT7qkU9nv&YJmB
z=96z{5|^eP!k2%%r1~i-9K$|(A|d`m+P+1?!p{5nZ~{eP@Otxy{@fKM#Db8%&Ghf*
z*zyfD|2#che>d^SS~ORfD50tKW2@h4;N~3-ccNT>p|q}xhI3`3b3ok}c?v4;)6z33
zuoZ41TRI#$!Cu;8Ag5Zm?f7^9`{pfQk)+KPK7WiGpj$dh#Xi~>z{XdgiF)t(d(oz@
zXPol3VgY1>(}Afo**6H)etN_2m20+{e#QCn)jKrK;7(&~U(VBZbU*A@NC4uKnOj%{
zO&miNpGY;>+hw1Y_(#41O;a4|91F(|QkWl<COG-P$o*O}G^Cf0Wt5MU6^%w*dGkH_
zp;pKacSx_kSez$%Ue1B^w0K`O3z_qA{OHxpMmcw`%D7hagFUmJ1wFl9Y4w*TWb!vi
zL<7Zv#y<p6LUus)cUyVSH^5(%zz}a2cI;!d$r~O}4Dh0uPtik!?2|h%Na*}7Q*wWs
zm{>ygrX+ggh?6GUg-$M#aQ+Jus<JW*H)|ks&F9bZYKNH~B4t<a%>H6)L!^bxMdrVC
zf@Bcmg{F9s665+9!-%~^xfkoPB`%p*D&-Wv7vpwfA@GavTb~O>nVB^bYkkM{xi+(2
zkc3(%nwbxnLh&NSDs=Z=`f~#m87Lr?V76RtB5L-y&90J{vihq%G}Y)F&f!ecrZTi>
zZ+2hbta>LeDs^{8^S=g6^-3Uf7>MWtG@(EOJ+*Q}`nEv=q}Ngek&@%5mz7~Vq0JmF
zEb*4OCO%KeUyUc>-79Er#vioA8YNwiwBd@g%#*(6-KJoLX8S0E<s)2eR=MHAHw26B
zYU0y}zRwpuTx}xLI;Zp!kg||U?%$0nOd*{887Kuz7-)KhD0n%{+;H8<gzLM_NXdJI
zWDASBE0|IVf`{8E+QS$wL|8#aq`KP;8|K|~<|f<6LP}Q6C6*(t@C4Ws(A|oOPvc@w
zurNkRlr2t$ZHAL9SG(Ox<8!bIrR~UUhesewyoVx<vV`x0W*2G{f{`ud_VXAwSkR)*
zzqsgG{s`QoVBPRdX9lMpKiD`?!K~!Suhw-C`Eg(pv~E0U#PqnE1qHI|Gh%(aOiBVf
zI(j;Iy_M7kn-WOUy>>ob8{kCr1!l1ic&@pe3PKw`iPR3+OIKPOD-VZrAI%^8`y*_n
z3NiE@vako4L_{84N&)~W`0D06)bO1nJnAG|s6`EzZZhxR%19;n$P=>F&Jtj^>%5h<
zH@5Q3HQ$ZIH4n$R6*h0KxFmmcjmqdWia0YSGqN_5%bRFEYQamRhW^!MDn`V^K!xD%
z-@(n+Kyy9wCId4R<V?KnS@f=Juw<vNvbD=^dz~lr-wo1eVVYmLN{Hb5qH+ZMg~c)o
zAIiIAwCV<yFJb2P$mEnF3QqPT){%7<PnHLMcPDiMl7TryLmw+@F#B8r6vcS<iJ-Vk
zf-1Knx$V2A<5u_QeYgZr>B-RD@NWb~=a(%xKxs-u6)XOWnw0iQ3IDf=-Spb>iQ0@S
z->ibEDjS(4W53xAzbrZjoW3!=xnFuiV2EO#J8v;dW|dY9K)EWG%lSwsS*F&x><90?
z3UvjjRGSgFg)4UfP}(KlO-C3a|8=pGJBRfcp-$D*iHKY_$gUmJm_{^D-_@alEhx7G
zP}lQ`V9rvGk|rR91=|+HsE=9?PA&w*B_@(b;(7nfPg_xP>}zEd1uKf63Wwr4e?wT@
zW6frab6EfVs8jOKe^)I3zb7vm-evBgcF4|ol!VTt6UO7WPi(>06B;)KWzVMQkFMd6
z;GRaNhq|TeD5jFbahXJL(OLw-%cM3cWXp~!!kkXqT<Y1>T|al%|EuL=ca8QmxDASG
zO?iv&(<R{_$5hb=tX41i2t7HBh(3PTxI2&D!BwyP!d)WG)ic_AlPv#tF;L~NUBE1E
zv9<2<;rRJK^GD9##{|*H?>H)0x;FQd&O79$WW`ep!Z+7UKzU*NrO@ZNByN+}$he=|
z2q|}JIh{n3PO;srXdOv3EZ?IBfuoYDT2E5ptxd=Iz5@H?YacIOFB;gz)8KDx_dy(Q
z;3b-ye##8J|9Dyd&lcMM%i0qAA9YCNdFekXiR9#e)gfP>)c@3>GpDnL3FrN+A&fL(
z>PomOv7)RDUJnX^N%qjy@Z{mU<p>iSBLV2xm3R(L9d4;1pNh>SQz*0vgsJ!uFF9Cl
zuQj5CrE*qm_2Q59S@Ufx0Uk9NOkwmADJpzCE55(tck2{1bN1AQ`E2!UWz-`Di@LmJ
z44-b0P-6y91T}08PE6zqc^P@fLuxzMr7o<=T#JCxNKU3;A<6Qy)r$e2x26-?_|aX)
zN6OgibtEou?}+55)R%3{eA6z+{zQqZZR>P(Q?dOWd`5c4w|QOU9P~fT->G;lT#~=P
z7r7$znZO2e?M^V2Us1_HA#o<}p6>ChsR*}@72rayJ$Oa-8TW(xUH56t`Tmh@>CnQL
zS3g0g^B4AnjF;~%FImTLgl2F2xvyrZKFh8|a}uw=Bm+#Ntl8{$%EH3?`W^DDux>2j
zOi@E;kAq&RT0NKREz?<x6#1|BW9>nH`VBa>poJTX_4T9kzQkV<j9ndpH~jjq#;F4`
z*3MlAhe6<R0}7DO)9dr)nYd8UO_ibJeQ5UC*tAVhR{g3^@9meEitO=y{Z+4t+{D$J
zw=Q=0mv;%3X+L!wO@;prFU1b%a;|>_wpTcvBG|5nK16i7f0DZ?hZM#8cE2$I8H?Av
zKW)8zdtF(8d#}2?lBq7V`_^t7-L!2RwfEk1&2ITBpsR0Sc<z;yP_^BZ_#SH>O0sp`
zvmB32fEhdg;yDG#i?v_2>Dz0XUhYQ#Tg$-W>fP@D#@<wW`_3;J)g$Z9#iZU&${kzP
zqSh^QR>*3OUuydku96srTDSOz3@?(8joXJ^x;$6B9vhmhy-p`UP8s*p9&b;3I_tN)
z_U~38?yE=tI`#)oK`b6VYFcaEx`z*eAzGx5%SVcA7h_NF{2S_<3gsh+Dr4m8(BS7<
z|8c}xb{>PC=5pFs{Y}CyI@NpIX8^8n6oC+H;2KxqvMAy=7d?!_l%jb`$tTXcfYae)
zqUX7ob7QoD?b?5jX@1b*`K~pu?r;PJJ*H6Dvkw5DgwUHip{8rMN;IA%qcyR%^`E5V
z%hV|00)2Hce3EONfy?jDC2QckuCFNfos5k}6TUkpq7>;lIxqz6{GSsRyo}hfc6v3$
zM=+#9R_ti6_c|Q(dQ^=*$Z30xn9#`kQL;&(*<Qx}PDMKwXhKJ2eMe<I<g6~!C9CZ6
zVeZ!vV^^o^Or&ET*WBKfL;s2;hS++nMv&X_rH4Y(w;4@}r|R(IME(_i_Q1OFZQ&v=
z>W6UV;0`1fAs0{ux+XT1r9clyc@P|U2vM#T|MPId-XEyZHuK)~O^tuGbq^t;WUCkl
zAO+GDX}%L(Y?WX#rC#5D%4>d|%S|LzKVF~caJ27lqH0%=bU7RJ5kDYdm^?_X)aVfN
zn3J>ei*opc!i0~qzrvW>g5(U?3dJLW3IMRlB{nd@;}ElkJ|9Q4Qe#9b_ocJy`$UP`
zMY4R~+bj}}3Gc#0Vr0?Ij~@r>QiieiB8`R1@%P-N^ghJZ*ez@BpRa0kKc1(Vt_Vps
zaF~C4m^k&LdoP?nIP&IqR-|FtxdZz7qm@#QcKTB!c-Pk11ZU%&RvI-nx>4vmwqQj9
zD(ci*oVM=V?a~4Gi)*^QU_~tB%j${K3pD4T!r~j3@=xnP|NX9Abk43!bOhf#thlcH
z#cH0IK&Ri&eO_2=9i^Rj*xIYCi_=R~T}KIiZMuxh%j%dsG(v3va(bf@1V>;WVPWcK
zu!=_+RzXX!IqokuWcd(Rar8Aokh-I8oCBs~7x&ErXPgFm9^N?sedtft&wm-s!ZVT*
z!WS>KLGIgnGoQw=fPp4pWKq+e!Vjp^hP-0!K`#^PMo#42N29dhaIZ!YqtYss1iTU6
z9A))NcG`1W+;2z~LU3&|s6+uS)CT3UQ=pL)7{KGg9bObJQ*E;08q{Du!SuA~p}=cM
zxiaNp^Cs9;ZrWPb_%>(yTJiF_7RS$28Yn?Hwssuy<ph^hIXxDt>)>-=$VmEv3&cB@
z2{_smJL-^){)!S2*`~=AaF9~<OsqvMRyi1|qW}-4cg6$A>-H*+_tr~d^=k5`N2S};
z^I$rq12Y7<e3$uCUpCj56Lq9FUG%>N1iZCfw%ecinT^_eB{I-C<&Rr^;avmC{Ar&N
zOgm_-aW`_6-rcFkujb6sG34=Z;o&ha+$Xb0pu%P`UB26Dj>t`4|Ju=7tlI5<*chJp
zmTa=0%|N8e52kNI!sNn+<P;Pom=!GTuVxdoawn7~-mP?t5Paon;E-?{m_3TAI(?p5
z4{%&)rV88_gUE$69^sR37>Nst&cx%J(SDPrGF%e+q`dl!jH!23LvAQyZ@?np*@46S
zo>FQJ;qfZ?pI_j&Wb?k3CT<7R?q#~}?7LLVsy(=+><ug$xuPbu2C%!~nw%wHkwhbw
zZsx9PXJ&ca%P%QMx~Sm1&-xt-77(bnSs5ZzbK(-T@x;X1dt}d8mcl_2`f5Nl1Ri4e
z_mYE<qO~Adb97m`VAA#Y+BS_my8Sm(XfxOV@WZEoaeKLD|2`DNC10^&Rzo$JW3iMn
z=<lgFp|~6p(0Lc6kK;^wQD7U_X3$&7+C#26*t>hClu;=MNT=cZibVLw`TY5l%mti6
zF~nHlHKF@uXQlSFq>L`a`<E17a>$ryJIdHC1w}uq;LjUM?_*~TdwYem`rh8Yy3vWk
zf}S-5K_r!==^CS!vWFikWrZFZ8@JZ~I?jH3qYWZk(cr|PjqjuwY2skw<iPGHT^$A1
zg)XYGJ<Ci@>_vtmZD{~=0D2rvao`-IW(xrK3n`{JN}Z6VDI%Z1hYwJ?3}CDO*4^99
zv~BbHU!A%?xD%TMr5IEG^eQAjZ!ESlW+$qKhAc9GY{_AVH-A@U#?%~Mp5`4E>kkKr
z)_pzvn1Wmq%#~OMUOU;t*uR%mP6z8?#p4kYm}TvQ7ZXs2+%|<cj51`VKt*YgQ0{vK
zb4~o$m54}_A{wpn?XuyIF=ZfWJ#4O)4HiaS`rtu8r!0(B&sj?*_!6G74f-8gk1fs>
zu=20@_R|mBY#ny(LQ;l;n@_;M5;pBm?d(_I-?6SYP7I%}S!aq5G1Nn9I-mbOc&$F2
zJG|99$S)10E7x78J}!~avB6-t&@-x&*9?tRLH^Ii{)eez+?9if&g=Nj#zYBcG&s`+
zOqy^Ygo%X|q^UgRrCFYL_UPfE|0g%8{ca(U&1p#4yrpWR4Ql2}qw7p<3Zb6VM&i!5
z_>8=rP&s8wfc<Rg+kd1d<Jmi#iOZP}!yyhWH<Ue?^N`<ske%`96~__^rQJt*HB)a{
zE#q2naQuESc6%3L1NU|Uqo3or|6RWy98afOYqodN&ym{@NhnCz*IB-+*!HPo&oE3t
z9mO=;1Eck$F|gBC7^^aEnT5?4sH7dnDr&P%sURoH0@RRoeH4dDk$i=vN-&t%5pPmL
z4SRnbrjR-s4|uFIw3Q85Ysr?QU6T_i?h9WwCFYDJaU=ggmTs6Xhk$+%7E0^i59Y2C
zaGpKBc7~bE^nUc;+b^4zb5x$RkPOtAIW>K*-?ecvnju)f5c2<;g^N-)XkNiQu1kU7
zGC3s{hnVe<YFtz><mFt_kd5_;w<cZFM=5$E8e%33kjXGZpam1_!RV0bMv!@Mdn0oz
zf^5uUSMzMGUy%~pb|L*k%$Ejfu5#rZ`sRK>A5K^=*sMJ?tEnJWE67mA^!aDmPfia}
z`!jJe67%wIBcwm!qwRkb(!1+bgq^40)zzak{9@KVjT;}FAGmJ3QEE(s_i>SmAPRnr
z7UuCGw)s)i3zFfiOmbp1#XMjnW}qOmLAtJOa4Mig^;|bjb0owcsQIM#9{Np#p4g3K
zpr%>O{hK64Kb36iz!xqSTb>VC@p7=JjWV^0tc^g!bu;&XnOZEWF-dm{qP*1KBugOC
zerd?RuT0Jlu&xPTyWPu2dZ+R15dU5lVh7_V=Zb9{-!|UgUrP%tX+COU`ofELy?{hP
zxWw(!GDGMDiuA~w8i03bOsTk4BiEXb$?y$6xi7N_3$%(upg9|)4-cw;IttNzA&cFG
zJ&2rP9UgIQw=OM?C?N`Tf-ny|np{Z-(h0PTuDZi!_JDEPEAgZh@V-GMk?0Jj?GVq`
zg*3G76so}M&7(GzRobvgyd+X1F?$gSUjx87bzF(x<b2*hAuYLaKjCAd%ZabnKqDFK
zDz^$L?vg3;E6pSef;leQaP{_vohq~tU_fv_3n0Xp<>dDMmjm#l)Tu}znkC<KRzr{}
zB{m%9YE3Xd<-=?!!&m*@?ERxdK3gcje?NngoCAKvAlDW2$*7!SKu=pS$GG8K(2(pX
zo&67i>hdH>F;B3xvtBV@+Q*7&<iT0Mup&ZDT7P|D!YU%^A32c-BZ_!lexokXf$g>;
z)ozYq0UQtK@E1#nQc8$=;>Lz!j16O*_~2CY>i*#k$M<)BTo!$xJwaefuVz(Qf!v6>
zFgP<E$coKG<II^?DE}5Pvu)pfd0_37{Ex(-M=~XK_>d!fDP8mTbZp@3bE?bRRmzg|
zd`YTpa_5mqT0*4C#`Lz5&#;h@wzQV1#+2rEF~e>s57}Wwq%_{-k;nBTu24GGSC+N}
zZ2rN5d4wB_ko3mLPN#>88~??3!Ag$7!YLqz_=N)cqD>W%JH!cbGzePAtauG>LQBNC
zqHUispCI1b{OEeiKI%l!Kf`2el_MYZU=2D<bVmPu(FVp<AL}*JVf=8CWI|jl^{>+W
za=;89Zm1|t95BWRK%g6uZ5dNgqbwz(7yPJ<DnAmM>wK{%kznM2r^gSD!`Q>Q7dQ&Q
z`pX%d6A`UaM9gb~;Eyb05R)fW;MAkwD;r#aL{W>5L4}YwU?r9=Mis>q+Cu$BJIZeg
zgZ~v<(%9qWtV#TVY`FTtwqh?I!10b8F^=_R_6O^p#7oxhrv|7j2RGCb3#3jb#i*OE
zTv?_~oV8H}9Ilj^#1qqr?ocn*3Vn}}x%AtNLNq~v(vO0-)(!-|&XFbI$TJEZSI2xQ
zi%FLVm8GcLAuVXg?r#K4AOkf%l>$?7TM!Ez$dKZq+>L^jkrOMBTnM77L(}D=bF1pM
z1fQJ`?`aW56NgiiyJ@$JgGP!=+hkK)bxt4Ta6m-T!~?eq6?)SHTGYk~z!Ah=hm2yg
zkPiZd38+WD)7wC~M{wRK$k7nP&vW-&16v}##)g0};98sSY|MO&*U-5@GFtzG?q?CY
z$vMutX6Bv{aq@JzjlUbzPS66LYd?;PWIE^+plr<CH~27g&mp7(GwUZP0o!+$Qt7^$
z<Kb2(`F+gH;zfHDYDf*Un6}j~qy_%|Qt8csfiKb=gwrLB!t}a<SVAGYz;t9Gi9!>o
z1LWMl2NUG)EOyt&dT?o|m74|E7X&!u`kaWgfz?Dsk_ynG=!G_cHENS{A9CohVOCZH
zcRi)TzFixk2p^(hy)Lnl$FygltomMF4i|K^D?{{Dic?-fc(7cOMh=4W#i!uLo59z1
zrz4?`)pLK|8ih>4XyTeOVrY((cWCS+Iw6_q00R>a@J12zmq=DQ^N3r1eWjkPJ+U*`
z`y;t7KalqrF$7p>xVYFz?eD<U3pG+%o9o?dl}=A;*$?sS3ii(x+xht(IfU%~%XO#@
z0fNpKf)Gz3QM}dJ>73_bR!OQr&mnz|Gy-?mtjy<{9jOG$<JO-tV@_R09-jx+bu&yZ
z(yD$e%|+`HB+4oa%fUwousaJjiYbk&o}(iKTei`&R4Wcn4&`R@_Iu*VKl&nOR`p(4
zO-tc$YulU}Cmybj;>OQuv+ldJK7W<!b)yaC3G2JsIaA>z?Na_&7EMZ^dzIwncA$Ru
zktu-utC7OKv*W_w#)g-#K*>hao+RYbnRF)&6|tR>mj8O_9K|nIIgTqMw*%tcjz6-R
zD$@<7rKTq+7}z2f$&*0j(uC_~h1H`~MRtB6>Bjel#XE=wCE|ABM=wGSeCc73-;O|q
z9=%cw;lJv4jWzvNSB@A<p|h}M46a3bO+mHtUySA?0!F&nv#dCowq$;ZVzEho%<ucI
z_tP>+QK#(*v09A-8233B4z33Po=rQ26+aU4(VIF6cqL|R{~pG?CIr;1k(3X=rx+P!
zkl}#Qyi><C4)c%v6OnAyGygs4*HltQp?q<ajdrdMd9pwxyB3;q@nk%YJI1%6`>ufs
zwtUzXGM1W-kLPa%3fyz@&>n=Gj$kKrq%PnDr`fMH4r9I}+U+{mCGV4aer62pd?r3+
zOcA%;u-psvdcIrFRUSLt<jiTnd(zKAfR}K@gVB?awXf1VA}G67DViU6uspW$7T2fa
z5ETM34J;Gvby{llWGs|GBxK>1&S+MAD7kut1s-M#h2`8%d+eG&K`1{IY@5WxF53pU
zcn4slkIExfIgw>JS#fcw+bD$dx-*A5d@V-r;4vI8oywUf-@G({M5<G8%I|3Sj(f8`
z)+G1Dp~r~@>no96D;zetE|cOYs<r4L9HTWBEroNmMGK+zHbT^<??|jZ({giVg%;{r
z{8|bdYd?*wA|)QC>V-4U^mL9|8AnyAA`nUFXQEWfR&i<K)++p@9M~CQ@|a;TIwa<B
zr_NLS(aY!Wy#(2Dqx=sELY-0*BHvI*CoTcxRP5h2;1Wm6O@~=A+f`VY9S}fOId3B@
zhgsOV4>Z&8zJ>xtLWtse(gy6=VRY|M<WM2w8!ZAXEX9qLw&>G`fqd$DVKFxR$)q8>
zIvAKfE7*N?F6uY7o;AUU<H8mg{5MLvy2Lg)hGDdk3X^}uqF&e7$QMGPK1fBu(9ckp
z3bu#}6I4BRghFMIkkIB-_#gp2vYNbmg_$yod#C`LjUCBH`W`Z;SA;QkLvDvln#RV@
zs9pj0{YZ1e+K0V9z1H7qO>c}3!4ocZZYXTeb>TW(#wY9E|0O!<GetUqGn`d04KFN*
z@3!ugW4&%Kb&)jf5N%prc4U?TdW(b-d%5xf@LZpC8-x8k8v!Y^g;o`-0S30^d7sl8
z;`hiVDV<^)TZ!Q0ds(`XQJgtlMdaHG;Hdso%G5JH9wCu#Y4~|*{}ev~Cg!e<?V*&R
zA*Y?a3b*-3dI{Ho_l?cgb(=pWYV6`7Y#~}gdNDyV>25M8dJq(9yZS0cK1zXRD^=9Z
z2oq)W^yq{p&(!iy()#$5CBmSQT_^7!e@2-+EOS?8D(s&eq5c;Lii^DTrPs#!)(uz=
zpFe}<ntuKydb*<+T4}|M8gS<_PGW})i^;TOtDJ5|)>WIFsD;l#4qwumhx7c?@uUz4
zqHPc%BQd#wU!3Dh2o!~tS&kp!_%vqBF(o$Y!PtPhZ320^_Kz&#R_!)+b}|MA82Ajj
z|Ah&Hxnp3L;!K6{5y24U{)SXD93Fg@;Q<>Fnz^!;Wra_C(}lRb(KwCo9g_I;6%iwi
zBEK|`M#Ga>;&kc|QPy45j1+q;`6LBa^9UC(pQU?usU9bVFfiu|iaW8}y}aP@-$`bU
z3l5XM*bWbeN6P~!9dXj$2=E?*Cs$$~6ci=t=+pBn0cp%gQL3~txHm}7ONFpS(7Teq
za3lpygk@{4@1Z9Wi6ZPS2&7v@-baFO=k6OzpRd~bPt)Ub%}K0IJL=#24yew~rxlqA
z7Z%8q!0Kz<?Obdjmi4PFrmE7mkxGvT7P7t^+*x0T!?(5L>HU%mm@$PmdAPx_jg~wr
zwbVyp@^yU(Mk^N{VKK(1#kIDp#SKoAZyd%xYBTe+O94;q@fY|k2iLZGnG)X#t5DoM
zhB=xGjF57EhlZ?dL#mqHg&6TMe6TiuKfbq_DV!8aJH|O(V!GV_c*EAwBiCZ8tjRLK
zzRaiG=a~cjyK+~p5Q`t+l<tuy3V;hG2X2TYT2s|<yihf_3Y0XAG*eJc+g0hfAI(;A
zDS#`tZG6IAds`coka?QF6jbtIk0Ua#Pwi+IF^kkYYsHkJkkponM=q59Q<h`=fsL*4
z`eXB{<Fnh)LjFm!KqtxGvGwLedBW8quB$6@%F(kA|1ep;YAN9#JhT+Q=1cfdR@sqe
zX@!C~AH8cv9-7=tg|u!-RS_{MC2YMuj9m7U^E0F}M~LXV{@>bb6CTWT(N!V1e9L5u
zbsu*k1{OhJx9_6y+f@UR)w=k&o7Y06os8|*`s<^k*%AJWUpc--JS2gaXxw~N6}rBr
z;17CyTxB6Vx#@HA+>`5(dBtNnza0R@;Fyi%Z#hNj=7JJpOz@9T=S|@kruTmNBO*>O
z1shb0<K~gVXAfAHuU+mu>;L_KMh;@SYZPB@Xs7P~pvk3;X@0`%%PgwUwekhMH%DQw
zjxDM!CkhzCx^VW2UE!tSHwLD!B|QD;LO`Qu88h^xP;K|I=v}*T9$#%3?{_|Rcf0RF
z$UiNG;C>hT;cq2()E4>iVo5KC!-98|SI$B;o-3TxCX+&8Ib=;Mt*NJV6#34d!(T~y
zYkCUY4H!CH)OYrhO!n}UI6JQi@#?<%6MlO~x)Ts^Od;uFXP?}ssS;nhkijT<0b>z%
z>iCoz%rh5Xs{C9}Wb1ymXYt!=xs__C#G02589xMl`S65yRb29q@N$qH@;`;xj-$R{
zF%P4j)wv+F9GDi~U;5b5ZT;1xsIg84yy|c(qK#Hs=sC{4aEr;E)~LgS!P?SA>S6Ow
z=ih&}`@+OL`~l0uv6Sy}ehkT%TU2cyeXHhw*PV$YwPNPnzWeiA^Ybk&`M4--#O1Z=
zA>$$=#Q8Z0`zyt`iTNDH|HmYP{kISMACsuc)@2O<Ab<E@lgJP3ZZwznuj?+Jze-tK
z=?D98I_hT&G7GVfikT8_Pz;K|AUxo6#HVK@pi)Y{x>uV%A*Mm$3>b`a38oJDg-K04
ziPQ5713X9^*4scon#_-_S4z6>z1|tLs?U?TZeB-n>G$2Jma%fp?`BPWKhNz}_{j({
zh~&SOE)@k-W`<M+<2{CSdyN_BuT8&O&#Mp*+vwha20fnmfoN-oX-nzipN}Pptb>kr
z^e!8uC0n-E95nrlWYC!Vx<CCIH@MNi`Y$a<Ci!wxOZ86DsS2lv;oz+p`e2~Lv~z>M
z=gFqQuKN&OO=v>ArZFsKFp=-`<)wRg<WG0t-BB(0;$OUUoMS~y-yYEbzjeT7(cihZ
zZ%D#;QOC6_SIwdUZ^)tx4{r6YM_WGkwY<Lr@flf3&pM8?oIoyKy?HGi<sZ7dYIQss
zUaW8}2fS)qF7^=BOcFA)G}ZIE-KSLUjPBY%d5{GA<v8)f1jkmx=hbi`qxuSucMbA4
zlBQe*XJk<&T>QMoSzR~j-JJ$eKjq53-{8l2t-UU_%coE6S2bs<7zE)sTQ&dHoHyr&
za9Frf(9M5HGP&D#)W5pXmW`dB*r<f&X}cs{a@l>mIUY}+BQgyooqQcQuHPnXIERXM
z#!TC;MW`t$ykZOkCM2CAkMru+JSGB$ubht2pS1_jPWm(rqF^hY!+HxNXG}4n5AizM
zK|y;}oEVb6T3-{_afIeXjpjWnv!70bh)hjfx8i4Lzhi3a1*I1<liI3y&UP<*NZa9O
z+nTtZ?sqf&dXZ6gG2M7r!1R6v*S7xW&KSL2|I7<olV9i*B)eBH+%dFhAE7xQ5X|xD
z-N*Ky|FM^lUdUL>-bR~|ihgHAmoV`k+)L{>4Es<;R^BvpUYFr<)X<4o5Eq>924x#g
zBML1v5cSv{(K&s*`4M!@5-FH+kZZAFcom9{ejWf^Kv@Ax2MPAvTPS0M{>;4X+8psZ
zZM_Y-O3(96_J8+lw$8TEdS_m=y+-G|$kk9{YS8oZ{oqZEcJ>fs4L};)f+JM*({_rR
z$YU~AL*n(bkHkiYCx!Ms0Q{rnrDaZXebTq#W94`0Zu?-f{uY=fN+?U=3JMUl4n3G3
z?c3qq1AZk^)v15VO+{M%O5k<_Ygw&{rKki%`eLU{y!)zIprU)}$KAN5<9`k;V--Le
z6dJt!o4Mgb*Udl9*H8t?F~{z=*zSiL_ModtYeGuDB8Vw8IHWQfKf$QMW8~+}ni+#8
z)v}DOwR$iCLO00S5c(yOHVxsu1<dNpMz6$R{y#;tD9+j9ZJqD@Z%>AXe~+;8NkIv(
zCyKXaLC0Ng3XW#wsfK8r>>K@-@aqD{GCEa74$;#%Rsl)3oAVC*P^@*obh&TePq-%C
z0`x0*rV6>z<|rfs%uflflEvdCjwy<mGLW#5YoSIy>v&?$J&1<quvcS*6)ov%nI6s(
zyo8vke|D%2wH()hF2fYrw8{)yKUm&+-R?|v&MzGu`0bRxxQWb4VI6$}{`MNP{j64-
zmt^9)WL>`Ac2sm<bmR5qRmUmlQ+-$t`<dbNb(o)e>t5FA9Y@{w5SUgHAoKYnjOhZj
zf$$5zfCEMme7~U^Du+}64sHS_2}tW(L)iR!t`e3V<b&#VH?18%cx~Fo&>&%Z3%N1h
zj~t?l`Xk+vy|l|iOH^i8&MoQz+?5A4Cq2JjvYTo|_wxnF_5BN%o|j_7-a1V0Zx85+
za@^PWGpx%OOOqtz%B_O;|C^TM4K~V>@WQ2ZM%W6)uLSx0X4D09saJ|3b%^1bts=*~
z9%mYg)E~N)=ZI_{b%R5pzx=|PGSh#{o<416n6w>qXc+%#1w`G$L!p(s`@-ozYdajC
ztd9L6^D_?ZQ~%fron|h-uI8TV`HDm*(6kUEDpDcHgS_Q}MT4D@;D}hv9oU++Wq^L_
zsK0P|hrY3@4KYq{6GpBYx+%;Mr`*}wpHz%DO_osLx4gie5jFdo#!tCoycea%M5~W;
zIvQ>A&c2fuFmVX7;>;ByJn2DSG_O<emmlzt!{f@E=5lsjYxM|-?~4oUC%`H6xG`Sa
zfqpZDF9@ZAvI4J0EQtd!hI9Z8nInR!fih>nf>?;0x~+dD^Czc)`Gtbp9wi9|w|k3O
z9>;#`E8a7b7x+|)*tJjpvXU5^ZubP0Hn9l_X0bgD*{37kqTub&Z%3iS8A=@){pOvt
zBbwpOQQk3zFz!)Jw%tu6wB)ZM^2`;-irqv;H7#4XRo(#N0x~2#In?#vQi}-j3e&zN
z9B2*ETbqwP?H?I>r>q|yInVy2?}%ld4}_65OEh23`)I5_FUIbFV0wrQMLzP2QG?*n
z^ax|?i$lD$d$ss$)K!`ptOdsMrsjpLl^D3~TdVjuvwwHR73LM{N5rmTXS|%|<{ePw
z&7E^%ll^y_dc_D^Qtc#cY+my=QbUpflk^?(NCgZAZM~ZRwq!Kk{n*XXGImuS`t@gz
z8~d?&@brFuJjq(Hlix>f<8dg^uMA44AI<YM(jQI;mE|J2XR?hNi<<b&mMPq@TVY`>
zNab_c7$H1F{5MrT0m7D1q=~?mK|8<Ez&t<W-ha;iHYf*GL+<kaXFDUbXP1vYD0VQ*
zpeZI*iCu&Av*){(rZ~7pj=#23ir18){mwq%VZX^nSvMX_P>#x9{8)L&K1wxKx3lOB
ziC_?D>l3H)^()9U{DmJb#z^$<MN=x^P6esqgSxT*>@)AHo&3z@glc8JS4m~bhA^xZ
z?OFps5Gjmsm-)>r3Mcg;<j8gWL)N%Sp!<-qq@V3sT0UceS&Z=)2@WRci^&C&e(3|R
zRAmk=f;$BiS2_(;=vK~)fpMVxh7>~e{+rERdb(=s{mxZJ;BH9ep)5Z2!#52S&-m1K
zfq&TtD=l81@3O^d{ZJLqiU}B<fzgo2&j@hE+i;7`MzYt1b>pC?I~5C<E%3Jn*O15O
z#D`E<90I&}xTc=6o^<6OWojTAk}9W2_{d39EGPNz?z&H=o4x<FEu_wQ9~>E(huTXN
zJO=mm(z_}R*k~ho0NW7QMEm;6D2y--s4A}S4Vr`AbgpXK2g4^KNBZnlo96^&6U00}
z;U|c*V`XZgN{kg9++btv+<iMEUA*0D%KOggwA9ehF1l<e#DpBBl*0Y673+KZK={*t
zq6#MkBu&6n1}*rre@>Fk$B9;CJGqUNCBI1sp>(c6g&U}RTEASJwAYXe$Xb?30q7xw
zha5??jQ95ciULvMz+w?Th)c1sJMW00$2C;t3>}fIzYX`1=o^daauBG>#R>>8H})7g
z`M-CTK~A(w%@&cOng3RX|9xg}j_Rd#_uqYv3!Y3#Wt8cw?--)s%QY(z`j#pX?oEXb
z2nQ%=oQBkPJr3<oQ22dD)n^aq(SU9g#DP!!BszMErynf0RD_ZF`RP6&P-@wje{tqK
z$Bk~XkQ!x|97)MFoaHkc1Y;^PiOnh@B~=t11?NEuz@fLy@FrO>dB!}&{P|e+{&>sL
z*5{wP(|ojfInsqCA<<IGn<2hcvUJkMy{%)y%IVt}J4pJV%t{u%nLL>A(;+8u$?FG0
z3_|-KorypsZ;+R;)4wZ2k+XKmq_(3i+C9~3)i^ZqbMT!QN}`W5Nf?`EiJ;~{q-nuq
zHi4=*>A9c|O9X~7X#CT7%MQ(e!BA+)1P!=~SIs#dz;jiK)}qQF3*kBfHzJwwvHJF+
zEyfKVQ`yJlOuct?P{84}6Tttq2ij@xsg^@X1KFU341q8b;WgWKa8i+qD$v}wu)BNo
zmkWjbrweQfZrxNKr6mbX1}26eY!NTh*S};Mr^~CnRrY0l6oLhgJr(`LH<{QA7p<(t
zCeY%7gv%(Pntt7e5pa!(E0wCRCLmiJmGrt1#s;R0o(1NKm8_HD_SitVreQzSg9QNF
zCP;RcCdK7G3CWszZX&(2Iv}>h^LpxnBh<#D`-(OM7A%E1`q>{+)jTkLq|&TDL63O3
ze4mGl@xVLAg;6~s)C{!PbG&V<Ak#z9YJskc4vEy!%G9G3PvI8L0$Uf^EzH@tfr>wN
z3?~TJ*Z+EF?h-$K0})3eT3C%3f6|u5k6HlFGE%1jc!8OFJ7*9x0bsodGzsZ_%!OE@
zdBNnd1Bt)Xzeag8%IcmF*!sJ~ACvp4AW}If-=a~^E%4MgN3^D(s_=4^cKiP2aX+VX
zcUhlX%L;Y+0u>=lEDjaxjN*_p&?)WZ??GGfey*yTxY7`sz>i(6)K&BQ4#+zt_%A72
zlqznD+8QPELp{>J3ATe9vCK8uJ|+0T8xb=`1YH1&J-}8-$+-k6S!*&AT*uc7M|CdF
zyM%}ARH4-Qnyre{zeijytS6_b3bCY<(W(DLH!F|yt3<Ds;iIX<kl^Q+;-#-|8B3mA
zT=kM=6d!1il!P=>pBGFF7G1|j71*7`sM99Jh8pHxr+{sb^7XYrz$IynynJ}gSH%O7
z7;)H{ui5Pq0{gYSk^YfZMu{RTj2Rh;qcDcmn;5hO<Ws^C1gjF5aZ8PMvBeuswa`WT
zlpinNI0IPi-HMQAFIbo$US<>LLPiTAmA|Hv^AdKi5@E~Nd{3)aWH*AS-Cn7QxvOW4
z&rd8cv<bQ3(gw$_&3l5NplMj1@QXoJ*;c%bQ*I=EEI_Bar%7RIA%Eyr9eY)VKy^`~
zNz#5J3K_yXfy&;6!6zH+tH%=DlK~EqVX6Q`hp}pfw7?b7KooUIW=$n^8x8P8FSo4K
z!X6LdpFa><_Nhs9xc%OtL^hKN*#+Y7joC^WmSNRfBECN6q?|uwQ_+w$IiQ2dl_)wE
zpl80+bo_{avVC{u{zEGsTN8}_gaC~R*&(5${!&`Z@$`^JKAlE2WF8MnCQfS6&5ut|
zIj=vmb$u|O{Af4M(%%O?ljDFn+}?0T0>C7wU>?zdBA5$2?}#iC!6cv;{EgJ?EKDNq
z0<DZbqVC=qRRvq0Yjp~D<_OjZ8JS~ZNk=PZ!{_c@&PGnOQr=s7bG}`15a;yJ2J@R=
zc;cWzQ~ES&CEvPpJ3fznn7CmH*(ej^{JI`R&5yu=8HcBo9IA~O#mJPEP2jGIP{!X9
zWrsyR(_6;^D`&!q*NQVh@s<mh#D#*88kxe^q^G74-fwt66Hw_40d<9BSoSTn#E1HX
zSw0xj8)a@jw+R3fU#W&!Pz#LusQ0x9q7IR`(=1N;;-3yBZvHss30S!ou^Kj5zV<?3
z3_6>G2Qk9soIzzN=-=@`>#4uhS~ij|(pa5rAZ;j2Rl&+ueP|r@22(H({HOt@EFL5W
z5;J*TnIGfQIBr}CfaOTF$tK80T;x{pf6abHO7~Hgh;_K3%x>G6K_w`1X<rjUKO+#2
zyIQ)DhZh0#z#<E1sS!Q2Jdv6qQD~WHU%0^Tc;^q_BmUYtkaum|^6s^~!YwIY>4=lx
zp0#=k)RK79B}DNO#}>r9Ri&)_2%$O7!|mb52FisjsYl86Q%L&E1yx8taCD#rl}K6C
zIQ-yvMiA*t&lWA@x_c^KG_VaEnLCx>%@W-|2H8`aGq+NMI3T{rA%_X{+6G|?h4k3G
z>+u9kq*<W|Sp&1AY<^-dJ|ze11~adhqHz%5=z)_(Dr%6{LP?SivII|quBie&4t<g*
zUUV$M0sBV_*YySeB7#)uiRg{rS<0pzw@X^55wk&=3eDAegqn>JzQS90_-~{FG<xn3
z@}uiq8>=_Mxf7y!dK>Jo?x)$ir3!6P)I}Yco4SNTA}M|F4Oqh%y@t*g1(3<wLX1U)
z=EVuj=ujbO8#Ou&W(KFD1q@0AYPZF4fF?#WUV|8XU2<5T`2cl=uWmr`3`ef;@s``W
z#@rzPcxnALLxiF|M!FOumqJSO1Z8)<bRTV}LdPBK@cAt6<iH}?Ht2IO9RCaJE{`<5
zF@ye}JHQbBInr+Wz<I1fU~G;^+~aTZZvkpUc}YBh-MhBW7js%R2y&WR1vOvBBVN^e
zzAKNArMhV{dvjGH4I-K0*f1lE-kAHTGRVx{BC{LjsJ{myXBV-6s493E@x@PLl)&pl
z|M4y%?YA$Nk*!HCI)Vheq`YD}iQcIdIN#(A!_}g*YNX|U4~_I&1Rtxhgy7%jXihNd
z#<IAt#@2q+_oUdm_^PQ#&@Y~Mf(hk9d*8gd%aw_Ow+jqr3e|`U+aD@f$E|~*hy_0+
zN6;n%ll}-L^5ZS$p)TKT)Bz~V&npL6Q@xA3YP*HsDX-qG$X_L{Vy~DOZrlwc{<55|
zt93tX9(6idUP_m^YfAq!;!`=RD{BG967M6~26Y6Z(^QlcmX1hw)xDF`8g@i73LY*)
z##b!mJ6UTWsy%zegdfs=YK){FxU&)}<Qfxd`ezvHLy;drqSntb`X^0u0oVVVX+d#b
zUy4!+#z$$&;OAfdlkZc2b9{7yC?t7<Cu~)%p(bnz2NnYq{o4a$l4BwhtN)71&tMO0
zdI(O~)R&+CSv*{<zbSY*Zg%*(-B@8p&t;Tp&un92^5Vn_XzOv~-e>NhBR<$v;d~Vv
zE+%x+HI^A>*_soaFH-d?7=Mo>qY=V{_RJ--Ihn@CP>1Yv`il6D?cp;>%6vTxQ2c`M
zVP8ct{j<|zYFZsuVeqKLH_B3`Ma18`kD85-{~=~7^vaK?sGlClDApE+Hs=@r%2XmN
zvd8ZbbXh43{Jq>QYQ88ue6`}d!>p~Hl`GFWyjGnpU&cwaE?_P@(VAPNz}*rptpc*+
zZKPq=nzgiH+0h})WTNP)z;%-T{BXBbwwR1#TIIcD6LGCJ&m#Fy*<zHX%gkw}k31VC
zjZE}2?G7+OGs`+^c3|drhRBqLQfR{<YClfX&@J|SCEnhCdzwLQH2&YAe(hv1&DJd`
z5yT13QG^8Sj{RQt<2G5t3gAkxY{ab8MI|NuYum<wD3jR775qonY<o1j-ueLS{Qb}N
z<0e-lhF%(o2(D>Moyw$Jh)ZmTU$q8kIt?VPPIv^;Xob0Qv{<z>eG2$BgU0fs{%9To
z{inXis%xd`p?;jKlLVtxf6q;3-@Zk<WGr(ErBjo%G=&umKH+E%@J&}>@AY0@Ift=5
zLla%>$p)(pr$jShG}AHet|+92Jd3N@LrwqeH!C{1u9>;6KM~9G>i@L4=Oba<L966L
z(W?wIf5)ZyK6as*VQR&nSb5Gxgy$8dXeL3%Zxq*A+%y!c6fZ*>0_2mn>B}J;EO@Bo
zBW$$s_K&2^cKY%#qVSi5Mi!)&*aNxYDppEmxj7HR19pP)i8kxSew=#l$Tyo!d_iLn
zM93sKP)148M9?u)JZJbI<W~ux-e!u1m3mA<P)#h!{ao$qyu^U&Y(k%btcRChRCIUK
zm6f`b?euUCs+3c-@Z;+VXBjaY2bpqWu-e(kPN`Jv<KWL8Roo#K3HdRvT{LZ;)=6ZX
zy*Hy#HhNrIp+peeC>~v01Sxcg9JboJu3-V02UMH%tIWx|s+4<$GM<s*a=N7niP54a
zJS1ujsFoPv(4f7RK8KaX%l!Cj<_&9z#o}T`FUt0i3$saBrqHI~qsuKfGYsZwR@@dL
zYm5||Azx?ag8t}>e(*P~|6CKCZq+}_?yM!(<KWy2BS4Nwm;UuRNgX0jVEas6H>}Cw
zu5L@7#Uh%G2BE~9VEq;RZwEJih#nz!T|59g^UUlh_2J<7U#JxA!FBs&>bJ;06h_iX
z>^4kkGHS0%f8I3FaByVP(^8Lqe;Qrv3IMo$5-bjo7ymS_Ztnj_T0;Xte3kw^0To>N
zi0zlV%?G}?*JKzbZG&oF9|<01dJ+v<v{Myn2B?={AoZWqh!3{O`hU|Qt;kBX5wvLI
zlX`La%88(MbhvYk&g%#%xlMrI>BUU#R2j&iB|p5)+e}@SnE58(lNJ78<Mzl&k?#mI
z)_fnAE-N$ryv6f;KLXSVj07RzRi3|YEd8#(1!r*5`k$$vReYP_tns5X)t^Xz#=oyu
z<VAT>D5&PPoQ^fG(5jf-*i_g4dh_sur(_lrq${1|h4DUcBajVk<I;owq^N0EN)JN*
zRQbRJsX90z@Aa;MTd7$0P4dgqh@4cN1dlM_m6{(%;;ZW}fve|m@fJ#@?TxLKu;!)P
zbu&Nz9?@v~fLhE!;TQp$h;&heftNR6P^RZ#SA(39$HEhQAytNLst&oTKuu(>)0Vt_
znBsU0V0D%D;D}V-&yO~p{TPI-$&VbOIvf7Wy!DapmpvY#rln-rh<wpE=5;&~xB>Id
ztEXSfc8VJ~dHSO_=7L>1wWP)=!>6Y-;@_E4KK!5a=OO1(VZo1qf+vi)9cD#+-UJB*
zTHDbebs-mO6cpFR1<{DSJZ`>E$p<zQ(4-huLKWBe(#m-|Bw$}@k2VQ4n(ByYHJ{8-
zL8$8A?mtZQvG|VgYOo<KpQ56l%aTTUOo!wO!FFW31>}P#iC3s{i{3u%3Jt9t+J;Z{
z*6Ery3s>7~xZ}I5I&Qa5hzXMB66x&O;3e*(6UxAB3*iD~j5MxR=u>!ll=c;qbS0Dz
zhh}9D|MqWRk@cHaJLfmloi3P<A7*kZ+{%E&PxW@uBbOQB=X3pZ2>M-83!riixkxl<
z-2*+IHgEl+OmC^dT1=#~IAlC;8E!jsbY8iK#1<JYl^iL~OQ|k|;gj__6whQkL<XyV
zUgZm4d<Smm{A)Mt03&Baxxq7pszo|wd9$UYXy*oYn;=!XTp!_1Mlt*r7|A#|ipsH~
z@Iy%%?t#z?f7(LNEpA>dVWt@nt2tefI1szp!4iA;rT%$YfJ0?glZk=O8i@s*&Xts2
zEu>Tgx4L?T7|u?gWF0P?qIYY>raEPJriyehAX4=JhtU;#a6p-7AvWKv3v|{eA9CMF
zBEEzzKFLX(=Q^!&e3?wI`K)4kt0>lG^PvDV_<n;qrf{KjTam%y_bzcpAVpTo=PDf~
zXFFXje#MWaHNv4uh2}evqOH)+JQ!WOTqzP%5#e0=Unam)(h-SVP4L;YSzYqDUN?De
zA(uB~xi@U=ZvDe2Tqan;Uv!W=JHGHs?AO@`FZtpIkD3vR|I($IRkp-m^w4+URx1oF
zx^j_4$GUoaB_C*rkEmoFOJXAp2m5}C!@y7fmA~g7o?xC?{kdEl48TIP|NN9S!FMhu
zPp|N+tyPIZH&oUR^2o;F+n)3k<)e>Z7p-f?W^>)DadWXMW(!k!lrfFbIP|sjJZyAt
zzw1@BDUp?ZJy;hFUa=8GO{&oIBiuh>_e$BL^`gU}-eG{Iq1naspt>n&)i<r`Uzk2=
zrTz2G?Y~&R-3wc$XBmoIwC`G1u;-jpVwfYAJRZdy=Iu6@Uq;Y#gUFeuR<u=-g0R)f
zv+QVAKNZy410L$d3xR!f_^vYVaFXK@u;2fd3YMq;<MJ-l>dgPgNmro$!1613zwFIF
zgOl}ZXPc++;X>ApRmfD%{~_$0f-~)+bsO9KV%s)4wr$(!IQe3y<Bo0H&L7*hZR_;e
zb*j$gu64O?*IV`0e4aUmLqxW}zUdau4trr^(Hfij5&;ew##GUq6$XLi(Cz!fhtj0G
zGl`wkwez$9C8n_Of!KhdQs~vCSM|Ald*QzQ8}eV|lkK-<WUAMVnYYnlKFs`tVYPMs
zxBKBmoYwzL9@MvDz@v`Y<!pEFnq)of@qrhJF1hLyp;qG(!MlultsaI;Tlc{Yoo^(W
zFV95Ody*87e3oAce>`YKe(|eV;y<LjeTFcNn8It6>)@uULr6iQAh_gq9Uxx1bWP`~
zZ%+Nu>fd%iMcX6FoxRDr8sW4_$$dQfq9Pry!eMd0rpZ|Df*5%DH2PGZxOopIczg;-
z6#4nLp0-<k7XW(g^n^gpfob@^B&JgT?xp@GF;%~6lmr1G3;BPEsV{6Ag}T?Xk3x2Z
zu19aT!i(FC+)NJ(9WnR;!u~T}yf{U_7>0Z@@SDYp{ST}Sy8~?GF_jH-1n6QO6gov4
zF&r3rnBTKs?)5*=Nas@ZRn~)$;nJ0J9}F9K+R@#kn#W9cYsIwJOl!}MCgP{Xzf%i9
zz|X>&>+e%|$a;0nMr>@n`KcCq2MZ4TNeO28maTREo~RWF06finURN4E4DaXMT$KDb
z>E_$L0RHMW96hs-NpL69q%m5@6Ixte$*8m4wuc{<oS*FN9RIJ)_r00EVu6ika}^|B
zsR(%;@M=UAz(@5HP#Z9VIruIcQ2Vr-4gQ``ySdbDd>wi+?*lRaa1_V}rTX7FyAVsG
zx#t3vIpBNpV|$7yAaT2RCA8mAL;9Tq`M1kG9enQV<44WXdr7wclc=b{8`Vd41K~z(
z_V?C1_}{Lp3`0n?*tG(IpV5=rEyg3iz!L)M%5kozlkL0h8OwOZ-GFN&D*Ne*uuO-J
z>noiA=Um;c5!Y_pmbUGw5p(86p(C#)baVacQ$@YExR+T=#K8#R;@XFfRCmAkEyv!o
zRYf7~rFX)sQ1O|UFJhSMa_b+Y?uYQ)>yLq_6<-JSkNuj{xE})Y$n0ZsK(xB4^fUNM
z?}tsbQ11c*VT%7Pm88H;lqLU-zHayKw=~7qTz%fLd}=e^siML6#!XfabnsY@|KLZ?
z+*a;<$1}?n#!o)(>kQPdIxeTu9+cPcn(A{Zhs9vSkBIN=6vx*u>y%F-7A=CT_VQLk
z=dDc9ugKD_`}oJ;PRh?+L_UF=h7o}qhRm;B@Q*GdNBMsug!n2iGIM>J3!#p~hKV!1
z!Ck37lfO+fy03%C`oC)hZ$Eeez2(QLf)}APT|*b&ug&i-9R{xYxC}I(9yl#h4RMoM
z!`SbWZZY!~-Ph_XcJvp2`1e!(NHKY~p+RU8+y$)&9eC9Stio?U<`H#0ISaiuIxw9+
znC(6hAoHInX~*3xY1Vdlin>*Ih{dySIe$6s)cE{J`GoH%U;kXXdz(8vHT-q8XBs1N
z!SabxZ#?nvKdJrk-2@I<g`Yj01Q(JdVAFLn@}69mZU|*L)vSYDlug_<vlPo<md!$%
z_3d^7b)k^{2ygL_DBI;A_Tp)bj?fu?ERXz{>YubvG%ZWPpyLL9->wk8?<QOom?==I
z20U!t&0Nx6ty(5R^Gz8&h_Ae=C}0HzQ+B#&EUY8m*bQD_)$l9IKo&2#lA3{y920~-
zJ@j^WUV%?tH*nF^H;%vA56U3^1<^Lq<B6d|&I<-{p#roZ**+<%NA6d>b#;_Z$!vr@
zR5SVc-gIpyrW*jnYW!ssJCFr<?*)3P!f&oOUNG00%Rvyo43XoBLacr<zJ22v`b1Aw
zJv;UubR+9`?z#W<;Fxk?CiNN2%Qqr6HJH7NEyeEf(Uvhp+aDvD{;?M}Er9V<6+X2p
zmI~Sg5Nm^Hu^<LOtZvpWaTWi!I{)VD;)9*Luz9`nbvJW89UZ5KGA<QF<ZE&m{^BTe
zpI;Y{#wm9O$oeZ9HGK{j14=1dSIN|I`b6|GYTNVgt#CAo=s}QmDdI@}(Gu!KZ#z%r
zQ^n-bEBuqY;(OAKxAT%iN40aw+r3%G53hu#RHIQAbdjL}1K0)S2k`{#1XF-^#yW48
zEQRsJ{N&Pr+Y14Z_;m0;_=J3HW|}=V+a&VwDLt3##7R^ieWICg68^%WL>Gw^4mnKt
z-6XBZ8??>s6$k)#;$4T9r9V;?k+;8E745!u%ka||bxf3>OBB2AJigCW_jJF;zfpe2
z2PTS$LdOh3w~Y|n%G9GUgAJ!614xRAl=wmG5R96^J216YhF(Ld5a_=YhH`ax%X`~i
zrX2%*KM?gEyt$IM*02k6Dzg|SseP@3@VYy}w5&SVeQgree7t8mPTGCW?d<OUgTdYK
z=i%byb6$*d>G_}ae$oGMYOh~6CTE5u(g?F6R^w>FC?tyRG8+abL3n|{=TT>yVC5x&
z%zzdkW=$Ds@xp60XB$6d&!5TZw%h)E4GVeJy;OQ6%E&S(PTL;@r9?C8_g;ese8+D5
zq~Sxa4L9O2MVC9GFqD(E8ftzm=(hHJ)KvfR4K|Q9ad<ew7Ub-B_0Xl|<EMxkKw&LU
zA%9}+A4`?Q(jx(j_y7_=-RDU~Q5Wu$cA#jbI;TR%a8egScG+SLj^|QyoMhe#B(tsT
z^wyg$Zg2_zmDS<Q-C11!oT~MG?QhYRf56Iq*&b%i0@^LDNzKbD_#jTR;KcFXd<@hG
zc@=ctoIGi+WoUEl@ZIdEpYKK-4xvszC2M#i%zlC38O>q}FXfG1$5&VrMa9A3gN;K^
zqWoKsNMaP74`rReEhtzzgkU~^oBmU+=3BK{w%xW%*1DiSM$+~B`%P2uuG#~!w$1lD
zF%`4qY0-WKvC2+=_18^~yx3QR6bfHEA3l`jD4wk4znG-dXBaC@p`I2Jp#+7sflDUE
z_zkO%(}p5xH^UB@!2j#kB!vxuxE%Ba5d6$hrBPGG0~h%Q+=1=!hZOaWRv8hpA$Ib4
zv*(+cYIi9ZCUF{?cQx>v(bTlZ6;P_&d}lhyeSK~T-Z@P_&*a6UL9>K}*|+2GAi2uS
zSa!r5B389&NQ+OICA2y$X<|@^+?3AKb5nY*plzovwR3RNw4qi^B7l6*HY<|$CI!;>
zp+OCg;Ky9!2BQQ~C26NY$`<pb`8dLlRD|I=cxI1zJoC~tljVenL<H>gnm#Dr2s&QI
zg};1n`$@Je7UNnLo0LMLh-T{=165eTC_2_?UTo{|s?tN_hU3E4^cmiGY|Y+A@&Ve6
zGUl#kU1|uFTVIOa9Vc40#~By$Ev!^&Y7(QwB2L#yjU)$Em{jo?<&5!@;3|nMw0#PI
zsCH;ySJF(>BZbO(s^IiSdTv>;&)2@{0G#s%OI)z1P3(oX?_451-g6{{M6t@hDBL~7
z!ZFH4Ris;SeYHFP#DP`Q!;oxPQ+ho%zees6T{Ex@7t=CZmzi}`IJm$^*p%I)ulshL
z?`{K;f4<9pPQPM?wmB_Jy`sC171QDL2%U^y6Kqei`baR7GL}mbhT2k;m>Wgbq!(_o
z_RMoOy$;rOm{(P$7!76<wR<eelI=U55+nn-)x7SBr=m?Nt*ng7mf3#w;%<U?iFJ6n
zWsxW`fuNk(R`FWTrKhu*J{1f#GPZg4PjWcg%rLE`HS^i^Ni2a=()9`VY8U``1BqzM
z`5E0+iWY3YR%+inYyAQ)GLL<1iX;*Nb&(DUAnYeH)Wdt$<`9SdfRlVEsv8M(Q(;o@
zG#n^8$jNNfeH;S<=b*qSbc9O)wZK2u&x#3?eUJB$JXabi3VQRlC|L^n2o$AH_(-Lx
z0*t228~lopK!h%77Bz)8OY?^!Xa=W6V}?QJ@%@Vb>CH(?b|(wXItc6{zEMSi`j6J>
zYhWci`wGJ5Zj5WNcB*~f3r<rqwf7OTuGW^n!OGN5z~`zDQ?USoG99eT7T7KIH;EG|
zc5Ocg2AL<d3Ks|)Cg^|mc%Pd`9G|bw_AwgVT1A{$wYjbfk~>}RgSpmINAc2NZ%rbU
z`k`iIX%$aT$QpkH{mhJhOvA&G>;;ws9&aP}dLm7f9u*<&d2a>mfd%MIVUg1VDcC#B
z_6I|a&Q7wYslHqYzK{g7l&;f#^!+#@tW7FpMVi#Fg>-On%n^?UYF*{ypVJ;)<pCxS
ze4VA&pCuL!p_V4Vw)rUjG#q9Hq4u~%_>2*Q$#D>VNcN*ZbvimDJ(MsEsk@cQkB?fz
zw%4y4d}rEXmeNUAoPJkzLdx_|H<P%fwDg_&hPVCJn%qCFl&nqQNz_YF+32Q{IRdMV
z7ySg`9zreF9}64dS^f7oGALgDu_4N%1bk}ZCzt2R%N9}AVE+kA%~SLTE0MvF7r`AI
z#-D4;^fe)n&npEU^OxbuSldI=msMr_lsh8W{fxc%3Cu~Jfj83VnCQLYmdwk{QeYg!
zSc`+e!qcvSDA02Dvh`hZA{z)7!B}2c1ia;#yMEuE@7*sZTa&Y{RRL3=Z33~>B?}M3
z(_BO~<*dwM2`L$d7s@4aq+8eZ*OstryKc{;9or-ddmV`wzYaVYxcBV%c<mhx*_C2`
z!yu?P_r6%&_+>s{;xn1S=~<8Eksm}&hJ+;MtNHH^BKtwGMg%~i8Rr?7^fxvFVw!d{
zGH;WQ$K1ksOTTKrwa@<Z)tIeojL9sa#Ff{EV=mm39!%4yWj8tkVS}f4SlCPsgA*ld
zH5oo}FkpQ_uFWY+k?Bz|a}y!vLBHi;=73eRK`;+5RAUpP$OHeq7A&BlUf{9#@ba>l
zW%;{px^ae^?2o;}uVKCW4C^T#dDsf@;^OP_&G*#9Ye>`dO-LIDSw2chk$FFez@Qsw
zRObBTdi78cE^@Oa5GFh;zFc1+=B^c>6Jma{#>0ueM+)v_&zxfFV3_Z)%al?AAC*Z6
z&^Xx>Wg``&3JPm2PlPO9H8rj3)Jb_mlE}us&BA}IvLl8{WpZDN2}H_#<k=dN8=@}E
zn)#I^_$nA4eY`ObjU?DwIjh*qHK{MP(6pV1|286^>i)sU>bcZKs}wXo&V)$wSw4q4
z;BNoFR7Js5t-oc5Xj8x4qkzh{>Jh>+AtVGDQbf~5sQOBZfHKU$AxEWTtNZUOxTL{@
zG<@6#@azUJ1sXp1)pBkUOf+VxAsF)cX8!Ocm{lC&ow7YO#N<zUN2_)-LB&3EdKwJP
zQF=%hSqzDs*$O={E|GGWym&d#HSsZ{a_Sq=vOLecIW^|Dy*ZYXz;KTfB*iW7e7bNt
zmh#eRdh9}U05@gVRA%SM&Fkrc?z4r=uc4z!ej1)%01=xCU2WzmgiAB10W=sl#E)G1
z{a41wFb;fh2jF#&G6yHen1D4c-$=rkRmvFXZ!{@#U<hOyr6=iNyp^yU3a}iiS_ZaS
z<`>e|fzMa4=*Ex|GeVEB>GK8fyhzw<@h~I(*4T+@(P<Dw0Wbhd-X%=O1fuu1XyTBp
zx!_~g6xua><fhAbGvK`(8|(y9ogPYB5)jw+<K4(J-?hC;px5HG{N~VHAzsFfK!#|{
z64Egs`%OHagkH8>aSH|tKm^b;_Prw?*S|JEjFY+UJv5lu#gwuNo8rc6_faSo?+3R;
zmm#LE(58U9zz$dAdvZW>P(b<)d-7D}je|8+8*_UCxPSi;hp<JG+Z9!T*|CkZlbrL_
zs#9YE7U~$1_{!cgbJml1SYKya5thEMDw&|BqrpPFeTB)7>pWJ}mvZ*Wt{9r#ZU53E
zN|xX|*VW>M|G62`vQC?%Q;D=NQzfXI#9@{P)rPIR_`tPwFgsl(o_(=GM*-00vM5P`
zHoGCfz~;v*O#($Ef{%c1iFXKlStd@ZF-d!vXX#QU8TE(b7G^paExs%2)340Pm6G|N
z#xTcZ*2M|UnF-B&@fh}-oVf7~iB3V~PB+(A<=Y8FKW(+oPeR!SYZIweP~)l>)17T@
zdmTGL<}^)AaJLoFI=kNbfK#G@{%cVDt4d=lgfiYDPW-hX;o=qHnItrQM+hcFTFl4N
z1O?aaconAwgenwSq@>;TSvVT7P>_OTC}uREqck@MXzH0#wXJH`gKuQ_4%BCPeCDQ7
zSjqtjK6kT!j2uDug+f0kCa(@|y~P-7m0_!zwP^I!j<?;b=i7v)I955~be9-V>x&f1
z=WBeUr`3CmNYA@z#UuSV$Q5tQ3|AiU>NKkntx^+Qx-rDX8bdM;tNx-cx=>UcV}j-~
zU^S>Y#&lb^@8ibYO3ubiJ}(1Q4K)66n7Zz8S4tEXY_v#BLb52G6;zWA<GA>BV4?|k
zb<pdMTJn@eZP<^H+gz(EBn~UExDw0g>XToCF+0-BRVP95B#?QiT8_l`fkO5{Gr;LW
z{LjtXTmZ@+3PnmsrkK83-{^You}-JGov#B(Izcy4=kapDK%IPa2VH?3!?X!cn>iah
zJFb=EN!peOX9*N$Dhu<q@d_}IED~b%oqQO1-E(k*JJkcM&=0K`J!70dN?PI;xB(mm
zeber%lGu$@HhKjayhIzZfaO-=eys*EDGRf(1(`VJ(dtY!HTOZ2N2f#}gO;>l7PKxn
z1l-#ECvNS)8tG*(V$K`AoGJ9atnL%%xIWa5T90lCiINi8oT@eFwJ@?$`&l`oMwb$0
zGI^Y#+BLzDM3!KL5~h+&=rqke#I9$hm5j~d)HK69yHqf1aBGZ<G+q)-2sw%s=w=B=
z!3JwN02E>*u{}Hi9W<-M#es9>u_ytCNB8A3fUeVmhHU~*!u{M8g8v&A2ZKLZuft6Q
zMkURZ`a|%4`auq3#ze3x)Aj?4K<2ST$LF=?9YP#b1I}9of1gd}k9`GW{Qjx{oN9ux
zBTjc6dl<NmWpsWIIcK4*?VcW($<ctIK$QaNjq9l$NuA2fC7m*A!tz4bGX{9f8WHTL
zpe#7(CT(Ej<urHG3ByqHnCkW{b&2WYW})#J_HaN$_VV*jO`AqU`&sIZ?9p5;(xeiP
zN=|1$hf9EaERm6kBF!RZm~~eMp?$`*#%Oy`<Pb)9YJ`@flr$!qHfwfCL}m8r9q-2z
zCmsD|4<d30OrY#n@3=`POg)dE&`8wev?`Fl5p?Vl)1n$mA`Xh90<B#fGLlKH#9`?{
zDXDQN^0=vkLbK<k)?!Xb>i`xr5XY15cmH*7wOv_CI)6XO&c=_Cauvs03R+m<rP`7y
z!9K>om#tB98o(hS$;K#HCszVh!S$$?(QvF*t*1wR+dN*+OO@tRo7c+`_rsEh6~P|T
zJN2jZy7Xkf|JC1Fd$jcEy+9i_BOv-Rk>ITfaVeT~hj(1F19%C+$Y5~?s@7_#v<F6M
zBpmGl7iFZ2MaJ6MaTEbM%F<Mv^3E0tmS}^-`ek)c23d)>^5~iVtbrRnAFA|QPAsWv
zh?{;Zzp8BLb_G^y1`akby`%8KRngS3Z#_a_*nm>5$x*x(UK|Ik<l}#lz~tyU5%sQ=
zoxrEn{Rk7S#lr+MlFXzi+g811tM%GnJ(#weKI>n0dS8efiz%xkVtw<aygTa489c_s
z39c?O^?Ub&QLVKV!3%Wc{<B#6Kxc0Pt)c1q3zq}UP1tr4{6XSL97qfyVkr3-ega+`
zr82<oZ1w`-(EHL!UCf=qw>*%`gG|;lAhi7tC4YJc7bg$))lD)$Bg_qS1Bz~_k<+k3
ztiWYqVN|DAG(m`gFg74qXyhMDd#Vf~vfF^R9oSsA?V2l^HdL_eSyg%vyVY`^D1H-3
z_Q#=GG9}t9f~xh*QHv6-Rh?0aiLk&}VfKr4Vwu~ZnxK08mj^iDCA~#G65?QjB8!hv
z{cjIi7{H1mUSNEyv%3$CY$s9Mix~PS(zb*m)X^HX7f7?X%3|m3f_G0Txr+wSfeb8h
z0(^}G>ZBA=9H*0&lRHI_sx;wbY>PC&It7E|5ak_*--^IeDG@u#5VBx`aTvdLt5jP0
zjAI#njys+3ILd`@6<!y<IBq$A<kx8bWf<q+AWo4|OIC=QRSm+0B6Y7kz?3!E#Kqo|
z1xUmqI*-fN$5IH3(Q1N<w!p4_9unf?zr#+t5yH-4_~i(beru5<@;AS*(4Tr^+HHuG
zlm6=JF}C91KoaCBh__~y(vh}mLvYh)F|lAyRyxy|4)!C_q9&n^-=}Otfsx0;QXUj8
zw@{Rm*8&d~SY7)m7E%J#epd9|d5z9N1IT5zYwrGJv1$3A>f5(-eTlmcR`9&};x)Vl
z$!OygCkM{{m5~{W1S2=zCpU$_U<r!p@~`@l`4!r<pi`*C?0l-l^_##GhGQ<8(w3}B
zj5l$Zc-D;&tpL?@>1wsb16qT@Fuc4W28O4>D<7G|P2?_=LE_QN1)IEoZt|=risZIG
z2@?D_Cn)CZwN-LA+`EivSu*8S`8+WtE%dXzy2qwELhf5!rQ)NIq@MvG&k!h<!MDHT
zF><=9*prjZYiZuE=V2;(tbQ|k%qy;HN;P9{d8<YX&T#Qqf%MiyLWLHSg%53Q*u}lU
zs(cr<T7MudcTSZc#Xi`gLo%tR&v8&RZ-fJg1o7z%h+Ava6xNcyUNMu?arxIr>d^R4
z+RZHZoaNtp+D{q{&X7i;!XFYgB(nKNp_HK-2>D%|aNd}kfzTSTr1~}J3|Y%~Z#f{H
z3x^gByf>%WZ0W{u==5LwI6FBBzY$_*?^u%8mM_Sk4GkOC9<|UlqGC1DL0PGYNTN7z
z@~1GVG%gXb^ZE@9HStFzodoSz&Rjb-%lRBb6yrIGCbB#UN>F(#aB$?e@mT@<p4yo}
zqFUs9kyvw)Q85HnkdTdN6astj4X{%jvV<Gy`4b>O)k2nzA(dhMlv*79y5e!wQ~l4M
zi!mtjYm}zBiVd9FAVUxqW6gz?>?nVElNDj<UFqIO8J{<%XODe8l9T=Lgmh;$(zhqn
zl2seVLLw0F%F33i&hLT{|HcOb=|*BbtC+qqG?TQH8@<V`z@<<_VEhh(iMTF`+jAeZ
zX-X?Zts_zsAC}ITc1N{LA(VKaS_f<Zcb5-05U=$zNsWRHE>ZDTjW^V{1e0yb!fulp
z{>Pi$Iv+6N$b=z~ODS9mh6zc4u?RCUNm6>!w@cIJ0_M*hH@1sH8TK-WJ4IsNQW&2Z
zJ6y6hdXzE8!WB8VMO9}zGox(6XPn`sWx+-;&I)fN;xtdBqBxD{aEcL<5NOU(sJHPa
z+lQzx>gcbC7H35>DG@GD$m5;HsS_+Mh2fkDPGKUt7q576A+?k|l|^48go_6H@-%&(
zEoV5B>54NY1FWT1=E^v`eUUhBhW4&MQp;M5aLR7DDvUZ#(me>J<V(IIJECrr(Z=(?
z-5_F{VG`y9;Q>1h*h);;N}Lj@BsbdeoQU)oJ;FxgI(md_kyX(5f0OC1CkQz@SS~=n
z*b%c1RyUr$3+$1f@}R_Htg^SMcw<xB%t9o8j2xJ(4jyys-0pT!h@#plP8^$q0W<X;
zocv@K8@MnXlsDDxySi3Ekdit|87r7}*rK@FA}sZ}v$Q8l7bsM#a77A=eH}x^nUV*_
z73G^SDU?(;0}L5_xh=6S*19;x;FVGh7#E=Fh%`ZFhz%L2HZQU(3p24VARrkpeKO11
ziWw?~UL_IQB)-Y3L}LSS2&)hc$!iPLI^>{s((}7UXmYo3F7QE<L{>DaYmIR!29sUM
z)8+u9iC3qVA0~;h18~u66@bXH_p{^ug39=(_GJPe*&?Mx$O*G%Urc8Q4Ytg4L*Y`k
zA`&4-NvXBPopJC%m`Kfuo)?1@@;l8n%EX~R>j06q4s?wbw&Bk2`wwup;6CFHrB7%H
z6CY)QHm#jZtWw-;>i~YtVAXe87i=m?HMgbz-=Y{|Ns$6IcD@^NGalv<^$rQ1#Ri+v
zf9IG(!pi-OE(aLqa6?*ACLT64pnn(3r1A?OgQ=7lkq4SC%UC~7OMIMeZx6U#JY_NT
z$fvN(s`#@C!o|i#V4!lxk9zvUN6InW8Wc}bz#>@WuhXc-jg4M%(5bQY>9zkE)Ry@f
z+o(g2Ds@<9H3#O%#1W8{l58<%eu>xQsx8L#?}71pcf<=9R9Gy6mvFcHsc;l1l}V2l
zJs^tDOS++BQhC^|1#Rhim>TV(Sg<pNBk<VK{SnCrZIN!75e86{;|CVdhKDAw&JANU
z^aO!eE0ri169p&Z!edSM^$7TRzON0ATBxK6RN@e1$DU?vgg{2){riRiE%xb3zXvEq
zWqu0Wf^Z55&4;v^*K!TXqYuxem)iE}OY%;05{gX_XgYC{&<E89ez_Xsgh-K)sQl}t
zMF=S2lPtX<4ucQvvh*bc6-v}=ypFFE%bR&D=F4Q3=ZVH)(jAMTUf&&%aeG>UjKm=y
zbh(}s&ZdconkMRbK!8EJe>x#eVV2QENg4C9l)#e4?_b9D>{C9%^hUf>z=eIEt%jMq
zGLJ^1?f$1aH!QvflVU+Lyq5s+CU&KaM<lIwN>gqMyp;hhazlClB~L@9_{GS*%@%Yp
zGQu2SKzGb!HB=ye1ps74bs-{-|K&!E!on;jDB@MNlp+t!XyVvM#|UL|uiKv$DljlP
zhmCPEZz5Am=On8-hZR}8k@(_59etWkj_*sPqO%`|N4)l$*Yqp~4Z?dj_KJGI2~`?*
zT5Hhe|0{d&dS{G(LnvWu3kr|bM3N%2yf%`CI|rda4ifX6jIM;rm@FzT{&u?W&V<FZ
zMXXk^QxsLpmQ5&UshC_gY$JIhB~2hYr%Lbc@&|Zu%ORQv@xotPuve*BhN!jD3vE1f
zwIzvE((9;_PC3%$HMQF2OvC886f~;AfA`-nyY(h)hp9>~lcjDOeOxJ<GWn=Ug|EB$
zw9BZCZW9aO9rYbW!rY@6s$X=CsL(6>*8{wN#Wth#qX-7;Vy!gPx+Yvtlh+WF;(t$d
zhE*r#Da0B9Mb>$byP9|pj-F4~)nDKLY01;;EC)^VKu%s#i=nZzDECM9IFC}_W-{I@
zjwrh2t5R`&k#@^v+ay~In~*B1xKW{7&f|#p4e0=S2{WIi7<p)zKx+?9noK%4;w$p2
zm7ijWc5ucXaazD~IfXj}Q;h!sVc-gDzdDb@5UaOF!f2@!Vm7Aiwdu81gKBtUtsJKF
z%6ZTk=uVlGrBFDwt>tI3Brwr4x(bHGUggkJ$nnhH&u|b2&XPG$0;QI-#TjCp)hRL-
znqo<7^V3x%Fqp)&1z`z_`_IIZE}--M%pQAcv-!_b;)xeMRPwR#(?2I&ri5B3a=VQb
zA~M+6wGKr^G3za7n2#r|W8&hb<rag`((xo{F<ZZ_ipvr3yRo!$R=J0Cl^pkCo5_#8
zOSmXobmlzH7o)$v$K2=HOcI)-7uRPq=m=;H*(9M2_7Y56FL7PDetbKq@8CSv8$0+E
zw64xt1H2{n>;ov#VwL!-sBM0hgLGlxtJz%2mhx;k2u_qR1f9X5N+sx$@I-(tfnoz<
z4PzoV`Tu^56sT1Ww5m&V=}KXjP9sEvI|Ab<SdlObv{7F(I=;!%RA>m=(&z=hiNL4z
z|H|lB<Twa?Q-FybU~@HiX=>^od-N=(^&Yx7n3tnhfH~->z-dt?7;5-Y-0d6^e}@aR
z%F)@VO0Q!j%7bk|$K~sst7j<J>6U6LTnPz;7Ds$fOCBPUp{nVG=9d5@>CkjTzR7Kx
zzZB&<GJhH{9Q?{^A}kT6A7y4->fRX+GA;g#;;3$~>{S`9F&wEzNXw_o+6dxR<&l<O
z{FV_H2Q}83Q>2v3QP_~;bjIKElT)YjQ{Kju1{spZIGQC>a1X}Y;edlEvt}()kVecd
zU@d{GaN4^5HL`J6oY?#2p!tHf;(K4!2zpYLyA(0P&VDyVw|9M&61jzaG;w0Mn9=)A
zw>J4k*G$ppsWlhIz)rSfq9jJ(akHZ9FD<%%B0wtXmk1T>A_!KRGpd60E3iT(5!arf
zCR9F@dFH}{z;P$r-0?ya-|LV#lyoN6q@?)na(LqPKY?0B%5TMOz1DmRpCzHghLc=V
z@(3O?%xQEHm}tC#{RE6V2$xuCa$Uf)fUBBUvw_vshzhy@zNCC1365uje3s~H3=p1b
zcM)kz^}h8}lw!44T)cVZ3^JQ=#kb?Y{3i+GvfbXE-!dn_*!4Mz>4f!SS!;~4K>#U`
z46Q}!S0Ym<^B>{&)n}<ca6#zt4N%4W6ckT;s?=kuhr`YE`NxE7YR@g(DzMK2Xy=jh
zu78!0M+~2zx<rBnkjt91>N_a>)^?5?FAOayEC-tG0T$!dm!n2SFA%j@vbVv`#mQ88
z&6uID4R9-bEv1)NuO>q~Poj#5NI&-i27=aaGb?v+$j@C8()ZqoW3e~WMbo_`*;#yK
zc@0f2eQD4o<*vODGgtlvxP+e)LmTeBl?og!y@X0Rd_RT@Ml;}1)HOv~b+i=6-Rrw+
z+A=)oJ-GhMuzwsLmTp%AD5!gJdT~70hJT;|Xtbbn%!YOUOL<4>-@VfRly~A#@2f#T
zXmbC5c}Gt@{n=-_UH7WHv@>ZsCq9G%7G;2z8h~-A>51~!`Oz|dPI>r_XeIs5<8eh<
z!h9H#fIu0Q0JBwDcr8ULo&k@AB)fRw%+0&{y5d~t#(Vn5_e2BQ2?b3!>+bH+HMgRs
zL*0GGr|0Rb$2CwW_Wzzz9JwFouS+c`zo_A$mZ54#zcr3r3zU&($e#!352jit1!2N1
zlquJp_xtD_wQaBH^QI4%cipuc=#j$S25e(yKOPyO*4cCNwJv-k7aH@2FH7iOXESVB
zttAgn<p(G=23>X>-P1p-pk}*D@yuSf`;*%jf&oXNf7Bd0yj9PZUpCub5|bFc5XVpg
zALN7qdcrcH;=dI~AhD-=0h@gnhVJ7+vpy<wmOmSEFE1osK(gZ&gNDPN!4+Sn@)sd2
zZ>}#&D~Jsw+LQn>zc)w0`)maKr0EZP;+(1+eChA0R{h`6cAJ3qYf-kRJ-j7b4SP?H
zZ!Ks(FayVD^=P8W-lv=7_e;;h`+Vn>PK(wPdz=cN>(OhR;*zEAAD2N<eSYJ)xBXtJ
zf_{Z@hTMRMot~rL9A7iz@XuWQj<hgAj-2B@j%q|cgNC0E_m|Gyz^R|pJ~nOJ{r#aA
zg0Ax~)(+<)<qeG2emoD)?My=F?%G)KU*;9K>QvBlGBi)Oe|y`jHOVivQ;O^TuOsRF
z--eJcYx%zwWyY9jm^|}PA!3PPKKon)a3QX#@G8D(FzvtMI}X5qO6N>|mmcf{eE**7
zgXh*#rA=0mbZu$z3M!s_cz1Yz%95Sdue-*r^;d2+_WP|iUVv<dae{m-ir>mjvhu+&
z=IzzxzrL~Ebu1a!d8Z!WH?_9F3NuC-#(Jxq!I-Yf);9`>PXl2Ur{)%ZBdN>x+uX4}
z$hRLJwa+a5nM!fT{%M4^6~z6_y3TY6xY$VU_#IHlNdVdZBJ=BZ{9jcl1=)Lh=;f{d
z2>HF==h>?tNCerhCRp(oiCqfq=Jn9hKQ)Xd=QI0a<M?Ikxo5&b)2Bvb`_Ko^VDBb)
z_j`pMO31Ugqv&OG0!ODA@yn5G)$TS!cXj!%{wywZf3K_nKx+ZE%Kl^V@6Nq<v0%eQ
zC4%Iy+X)?%uIoH(y}GG~>77$A?9C%+?5zuEP5yHqBAn--F=9B}@bKW_#pNiK!Si8{
zpRHDI2=pMLgl`D6{pH@?d+fPA4~Xq+E;Y*9ubuP7)F;cy?~Yw2JMM=dfZ8^~^Ul}1
zY|Yo{#?E~%h6BvOStAUXB2DDcTJKjU`i$?+2Jg<5CX;r5))u4FK~wUAImI9p3ZyUw
zm_MS^#O@!(U;d4N{JAA~p`GJbvX2VKx5Hw`_mPR6=QHZW-K>5LFhur(7yaJ58Cg;7
zLHe~ZrY)79=i~W7WLyYV0I3)I@e$zo+qV}e09(XSnPki8wJ_kiK9_+scq*mz`CmJj
zjCk7LuKk9EW&eBhc8~X^q?P_P9n&@vrXwjF7@MpK-nM(dUqTcw;cf`_sJ>uynQgV`
z*|eST@mZ6R9WK?c*%8B+oXY9Xhh7qtu}8G{ucN&=Xd-HR_z~7UkCqoh*<Sg2Pkgh3
zUTh#7oZB7KjlgyC0w;cNjrozz&#<DN*GEMv=0hNP0GwyUtVNFd{TW^FXJJdF(h(Jn
z<pN+3c?9F$ysr|(SYG;UxNqzjb&<q&L0AdQpQYk(N;zb_LJ$K=lY7rtP3U8<_wy2R
z!r<XtNdje^4f<RY`R~nEd*k4`A<??eW8Bs1$O9(~7TRZnyQSXkSwQ<~seq;4e`M|P
zx}UldZC}j(PlYJ8o!1-Hs^5EPzp~L}I}KYtr|XX#Zz>hD8De3bwo!mlz*$w5rGF%0
zPmn~xF>qigFn$*$o*$gN14k@;0Maie*AUgJo#RhUs<a2Ip`zpKt<Umxj=vFKdgS%v
zXG_gv7dj!{#$)BqbS3O0Hr(t90`Zz%F?UVx{Z;19+Z|>pF&F5LqicH7f$xau>NogI
z_p@dA&eKBoAAi31rO`v4ld5f9q%4;u?W>``5H5Y#5^2h;`@sAD6l5CyVKPmbR|tG?
zc=ohi<0`sMV-%jgYjt5dr*Ge3MI7w3pX{it9TntOBJSi(r>|W1l%T-R1w%HUeu_IU
z8REf=YYO<~nW>z+byx50fNxzF+rpxIu7Lg;L*FmIiBe}J#gM>8RbI!ogRB+(b`tKL
z>YozYD(X@*D=^eGiZSjCV87<Oa_|W{5CH}=8&qP?6>OIQxCUOwIlM9hu5pFMeMiZ~
z&uENexa0q_yK&RD?>UVJYD}SCbj9v<&Ky-|{MK%HlXbeo&&gJ9+J9n;om+~iwkp^Y
za7w4!;(xP0<DmEQ<@oAh${K9zC~(UNHiPDz)x-T&gIp7^mV$Sw+I^oRx~X)CZvm3r
zuMBF2h~^I2;74nugewJn1G=OXNg|d&*FpKkkz|<Qv-KT2@8+wc`rpw`tg_Q@!DDr~
ztl_2p44#m^g`ktg!*mH2vVC0PeeZuSJ$zu<n(RZuSm(5&@6jU>@v9a7+37l93MV>k
zX^|)BiPqTqBhnPHpul~Q{KvoGO0Krc2N0(T1;dU3noJCfpbkX}HlrHv_Ie2YNFu(N
zEWyj)2Lp(ScQ$}rWGBy5zV9Pf^24cn0ptFI@K40}Ctzjcq;%SVEM;+iCFxqa`yd66
z@#8Mw^J=i#GV7@4q2fVs&cS?AYW^d@2&7mAra(*nw>&<#=b5`l_dkd2%mN(Ss)_v0
zh{J`>U!<2<DO<{!J{#d=O(XP}N<ReO2xp1$!(d=iqfuZ^5(ZSvL%g-{RYX5+5EYzo
z15~;b<|J?5dHfKZ)4&A}5`Fxz77fXa_UrV_+|!(UQLNiX%1Q0#KY`Y3RNodUQ_rI3
zQ}s>nxMORFN|Zov*6Ygvs|#gQ(pV%WJfpx%e{f-RmUl5K4l@i4)ZmHA5^0FL1%y4q
zzIlA0QdSpBAl2x@I}j#KLmvw?44fM=?A#!<46T3ECH>Tt`2>8~1o*__|1OgE-YwO!
z!|BDb9?oPhz<@s5(Bcl2xKBmYwmThdn85#IN`(6{iTp0vQ&-B)e<_*s9-IIxS89Iu
zi%wtyKWUHhK{ejg3svs*>Me8=)*d`3(LWt;Nd@TA4EIOe`1w#n3xPihMi0`H+$*Z@
z;Ly*Vn(UvGkv_UmqlWY+lZF*<)0h3<kT3jqCo1JJvoF<HEZ39z0GB})>-9FDwU{p0
z{SI?zAaRA{&X@Sv`?=G}0J6|+-v`Lo@&n-rh!NW$#heL?R@C?Cl7Ka$?xjX$X>qHc
zf$dIEO)6w%_d9`unoj03UiFj8kRrBC_;YG-b}y@Zp}E3^`ro7&ocOFF1)m-5nG3qH
zv1RecFN83NECdvB`~f?0(!D-}a3hI?B>Ja;nkEyHQ0}?}L+0Sj)_^+#AU2!>@nTEd
z-tx%r?@!B(mu>l7*kM$fw-4y}AeDhj*uI?6*~Egu^qrO>kGD<r%D>O}9>)VU2h(;F
z^t@}#yaX%qh1VNp?dBe=LP5FwE?b%}Q=6Z^rh}Ad4GTc$w!Gi11_Vn*%b3jsql+0q
zECZpC`IS(nb_zcST*xPrX%J;!UHQ<@1i)AH*>pbF<lFzdFU~$wztD4h8!Hqy{Oa9s
zc$>F63fwu3_C=F2?-jltE42&7$`SVKF`jG$lZp($_kr8qr+3h1w|uHNa$U*kG@Cxx
zd~B)a7RbD0=}Sy22QQ{&W-T-$gSqIz9+!gTSCOVO&fU%JJubYV=WjTOUWlCn7aNl;
zF8XgV!nlDkiV|Vy)vk?npyXYKq8-Z#GML4o7?f?um{(=`0t|_u0*P~=UZ#+>#lEY-
zdE=6UuWFFT{hFdQ_^m;S2#;=&5}v}b0yG47iu*q=o8JZfb{5nlU=??h-{SdXUhDUb
z%RSHMNAL;(>WUXpm}g?pW*}-6eV*E3(3AxoMC~E0nh1I@)9s)WCisCZhHy_3DR>rK
zLbm^yCf~jz6s{ub#Dg`Y225#jEshPSLH`_8`PncBq$;}&UYPjI@=$EByluwtJub$;
zK=Axko^c~5coK>!l*`5K-j4VAq@9P9&};!IUQoMABnvsyVLU>7nyU>Lr}sYa56KsP
zUS?iqW(|BMwShz-+s@oL4sQjJY5%r`p3@-Y-jffH)+3cPZWy)k{LGn7<5P5lNuU`N
zcq77ao_va0e9<+#y|-Bqm{xh(nC-8%8!I6OAC(&+U;B$upYIrj_<?K|6|wMNl@-rD
zBuxSsXo)oT4r35OCN8|1<bffuRXp`!v6-e{l(zu-?|F*cw`Cr>owwnR`}59WzjSFh
zGgStw`i+>D#c}ZmY<n%YJ?V27K6S}HxHQ<|&A|omOlYJlKcki1>kkja>uu-V+gUT|
zX-`S;?HdTE=RtvT&44B)H{aTICwMQdu-#3gNwC6u5*moPGdMAQWu*$bhDT-5zB<#H
zGsz%H&|kJXh`l<34*g4x_}T408wX3dn~d^1<}_$oTKcfuZ1eqWC#VNz`BEECnmTX_
zsn#ePx`F6%l_IqHIMz_IS&g^wt<?s;PjthyM-5}KX7lxV^l?y04F<3*+K75SX!ES;
zP4c1^Xs(`|Y%AK^{_AU{S+R{*@B_$F27PkeDmy)v8%#pqM>AjQKaX*HmJ_+LmKAfU
z!S){ZUc0;LCpkM8RP=)|U^K;M@o@YqF;?_v&?Lx(%q=PJgK%;zFp_=KAoE}qszEC3
zG${>fb?24X0hg(taj^^}Oo+GieMvHK!Fc>?hxWzg$uVP5+#4#C#Q4N>A}Z8%ZLNWE
zSz?38G$dvhCx!tN_ivirq=wlvnPDl11He(%I(DUWV<p7#(EcRK7@(-PT)!)(#iwu_
zW(pl}mOWjLLMJwL`S(FUx7pPY-?gH{)<Y%Nj52K+2f1W!<RtFg+&i)$hudlXKbm==
zL`BlYEs~qmD76|Z@mMq%ju@yf&iNukgh<FQh~9j1IpR(fsb`mIdQkJ#O=QvS48DHu
zngb$7g!KC46QEg?^Mum;VLauKZ@tpMF2Z8Du?{dDGKSo!lmhEFE7FccQ6l``X8*%=
z%;?&lGW^8~lEx$wHlr3c^5b6`dK42Bp|}YRjLZulwC=-n9APf8`5Km8=WGUlCo9CA
z;8I32o|C(-cc8YQ-$x{Ie14xFdvK$=+~NDPZviTNuk{}8;uzMdl=W9RW@r^cV93Il
zlQ)q?5cL3I8MLK}b1|XuFnEcTG=c3CfjM5l-cV<cs6{s8GN~|GEIqHcvNj@RnJ|qE
zys+w`UoG)gmB$&bqSEHf3N{W$fGUXDbtvu{^AtMc)eV;+#4~a1`=|{k3N`{!m{kH{
z3(VaV47el~k_ptap*m8=L6l9>1vIcgSZishLGqj0**Od2i|@fbzdx69H;jG{h$^8r
z8hC$ruuG8V!eze;btNabdK@=W`yZ{0$6M`^K6>_li4F6CNs~ZU7!w!Y$l^et^5+_W
zcXbF`YvuV+4Bo?o7G~bLXbsPv`d{MtPreZQlEHIZ|6`)iXZEv?9&i><gItQCcVYD@
zfSqB5N(2>RaHBk{l%s8OG`1L<(?>AoeaY=3q~HscDOporzoT{u4<KUb8RlQpv4aik
z6TO%D2sbNWtsg>1dA;O(JeNYl?Yv$D^?u!1g5ThP#{43OJqFnO{&dt2RD1CMo8fh!
zsrgOI#jl4I)x1Zbu*3uU8`z}C=TTAvg_l^`8Y3hf?~I?B7j*-J58UPcR{l%>c@$l!
z=n@oY)2G2&3XRr)_MqexC4+4#kX0I1KIh~>vC2ess>CDa*vN72--wRvQ1D;W8R|_r
z{j=?8)Cf46j%j-RA;{C+O8xL6>;ovV5q-%pBL7Nz{D%D)lrx=d*8+Gi#mImC-(v@_
z6>EfWZ{tYgb2va{VmTc=W7DP)?Y40y^_x%eTd!HjU?4-J`twsU3HuQ(Jlh3hWV(Ug
zg`h&aN)kwes_>}pZYDz$I3-BG#|LuAJ=Frur*F-8MQjuM6+sPXOKxc*C^0RN`dHnl
z(`AA!<)Fw0cPTKU63KS4&by-S`a&;_BCwqK-7JBhgJg9<P-ygl$tl6s#WaHU9bjNg
ziE>mh2rbt4xRv2}M4Rb?S-rLk{pXrBf>;?()Gm8%`t)k%jssuk>+AVrlJaCbuJ8BF
z4QhX0XU$MWML$^72}R0q>*V0$mf$wd!A`Dt6D*a<U$)TiCRxE{nZS0G<)krrQBrAK
zX^1V^78Bt}5zDx-if$pt)e_OmtclN<i>NoHfh(#Am}p3ih#Iz3>#0wBArp3!2(;}t
z`M5#%)X0^h@xMSR;S=gyMk#p{WT(Vs8=zqm4rH_=BI-Es_TsKKvJ)cZ$)GD&93zsk
z1(H_$kU#`c^;QN4-wysZ3wqy$!86&~O25L6oT!v2QOn@t%NyMU!s6ps=QD%1AtG%w
z#4Ds5MUhp3eF<rD-_eF$yJ8TvOOA?B2Fry#$bqpYfvKfB>t`Uaqsw5@A?75Q;R@Tp
z7dTPY1@h{vHlU|E9nMGFF<!!aTtiZcP8P?Pq#s9dpoAt-FCy(J^+3!Z5*rngZG<mP
zDE7T`JRI)bDfjs7=8sAL*jD<g7bK=4vBmwyhXkt4<*h32ABGZru7))V{(jplpC!Og
z3Nz=GD%E8!^+R3Gg|p+P0y6_u4Q099HvDhej|57RmKsyH?Fc>u8X}Ak6029PfQ7RC
zNN1E+c-f*W6(SyTO+`sQja(^1CQ%KyMMMMy$-D|G4`GxSawDDoI0wwF2Ii=Sh?%i+
zJ=&GY%u0={EeD<kyodmAWF|K_DYeC9E0RFVeG{Ml(m|3oAvi@p2oX=^eCnnfRxkx&
z|Mel1Of3?>7{p2ahVSPX^B+I7u~|n6QWeSBRS$ZKH>v0oI}$@uH#5*{OV|-QzVW<F
zJsN;tZaPAO-Z`w2HeJl}^VE`hY6bm|r$XUP5c+AH#}D^vu3sFD7>*e6kH`Z~;3uqz
zw8{+?a|NN`64*%y-f#jRbED?6t1*lhjtdhNJgSqFwxT&O&KbIJyv}Vb4&TAMZd`}8
z7|c%V4&4kFYJ!jT=ddCr%=xCq5VPj>gAU7k&g{zSVb>BezP>HVNO=R#&|?p0=QZb~
z05>duuzi*$NIoCx4Y|f_bF{w=1#SQ;3qzD~WNu+-ZiQwp$+ce#(R2yrYY7D16(2#7
z!uh!v_OS&v*#fw(6r%G>24YIW5*+0b&mPXc8^P5D0U3ikj0hUbt8dUCr2Guz$Z&bC
zkiRPHVt+A-TtO#g=(7hSzMkdz0VXqGiuu4*%@&A2BcPT{+;0L$6MUB(@yWJKktDSF
zcEF$+@Xk;Qu3mvkm_qlK4KiIL;&B|*Xi$G0o>|mXnU8?qa4i><q1*-%Zttp<TF?WY
z?GM|}UEZ||7nZ+E9tmS^HRj@G#&hf;mbQUPoNkwA)0UP>cuoTyss=_;WJC+T?Iz}2
zd|g}53TA;Fp9x<?;(TI&eb5VAFDJ%KQa@^}wKmAyI|Is!MGUF_!K@y|yr7f@FmHRI
zgv6vy6U%g#s-WjCVxc5JNQX$tD(<~Dqk1dn6AE~s>iM|la#HAcBENso0?CREWIc9%
zVAKv+VdnBaPcURN0<4ePiZYRK{GsG-g$OopNMqT1<Zb&WKbGMlOvm4Bf|Uz1!yUE2
z>2N{tBY<<|_2ah2=FsTRHwpPJM{uEPCNXwV!$Z9<#vSMr?Kmzpl^CF<bGs+kQIs#V
zjD__S!7eI^LJO@BsV`7s1b>2>Ed!5)7@Vbytp5^bg_Xf}kFkzy(_G>Ns9>G$(jdM3
z$6@hKz}55ev+euS>zj4_;-<FJ2m<JI3at9NPx9yGF8#`S4&x$gC-y369UZq>7N2fd
zdKAULLbtR`pGuA?iYJst<WMb@;&l&8sOytvO`^$TfPS22sq-`jh6i*Y8-9Lsx@9i}
zAIw|?vY45==SK3RMw-QoO|`PjG1oaJlHAaBy~~TGgT57rG$VO32H((~Uy|mAQ>!rB
z4F}WY{Ww5wgt0>&ZK+Wy&y#{c2AfhB$xoxFiZKRyuXGWAtj`#H&l3!KY-1<=6SZ{T
z()%?wd}IV<Y`7aJF43Xjom=_jF?4#%P*v<_MW~fY$%sE{{MT+zjlv@wSaFR+>{Zeh
zN9YHILqh{@b6`}ajxnhhB5z1Ih$!@qik0O~vhDe;a=FD3>*#;NQssXmtL$joFVIOr
zc`n>e%OPvXK)dPjXJ9@FvgAG^I$4HB!48#!@64ep0yinytszDiCsHEC*?ee4Vak-m
z%Nq@T+_Tw&<?L<V8KLt#KU&E3CbPGL<3i$Xoo#J!N9M?CU~w$TIhDzC&@fzCteC*^
zSxjGXp0rdvY7pcP=u#C6RbGVJt#96Spbw}gN)WV|;4Gx-Om6L?DH)JnvskVO;nLd;
z?#KD#&t8iPq6f$Q8s}y0RKJlsUCr0JA2&B7h6VX&5JWAT5_)1h0yrPWxp_gD+XwES
zGC)~qs54l+9DpNKsz3fRNa4hnW-koRAL2TE7m-OYqMn8W!-nwydRTNVlb_Jmr^eHk
zUagn!z;E3HAjjrJMwgDb6_OnvlDtT|cnP6yM&{nIL_hgoxLFpK$^y!Nt8Iiw8Myok
zKdK2V2<4RhyU=i(%x`klQMo&B%t+yXh_C2FcS%}=$nR#qpc52WE^*gGz<uDPw4wBD
zx)4YPm81*aqLUCpVH>E5YMhaY%k2R}CD9-;q!i^%@ux;G<f!nVdbx2h4n?ytn6x>I
zNTtW{2Bu+ltGBIk-d$S8-HjQ)lR<`4Dqx1jrvn3i&Tqd(*N8KIu@-Ntt-~@bK&gsU
zhH(l;k*5w-DtK=~a8PQP#=clLmoKoJu)tR83igqWwWq_@J0CFOQ*R<#Q0)S?#Eh+*
zHE4k-IE!n{*Kbc6_KK!UWLQ#-ON%;;lE_NJC`>UHW6ecLlqf(s!&D;bbgPry)DY}2
zr$Q75fK4hTdBX&Iu_axA%+ja6>cMjM22#_O=SM&YIGfO?TFf{L^L*nKckoheS9gcU
z>0VB~tl+|2O9#cqdZ-)kRf!4?jyUYZ3k9hVd8a6X(9i};xTK8e1WM_w&bKwFbaQ!f
zHQ=DgFkJzh&*SFTPvD0#Cb$)gVz_m2AEe~&NDA9DI<sBe_nuGv{q2}k@dmRxLQ@F3
zE+P`oZz<zFY3Fth7;74wmAMf+iC-{i!<3Q@`gz=>3358jh=EFwWzdkx(G-<xv^vG(
z)KN!YgA|Srz1Tq?Jt)BS?_3@x{|q&U=R>LE;9NiZj@xL*BihoeHBSHM50}U#Y;#xm
zcx!9;#&iX8SL+&5(HAyoV?Zs2qs9LLd_aT0ezdbnXEL!&60juSR6B7}CZ=Yluw%y-
z6xD+;%{JIp2dr5DsY8KGEfX+}9Lnx)Jl4MzXRNy*?qi|shuT0W<SPK>qJ)*CNK~sW
zEg&c0$XRJMBQiA!WV;NE4OP&nPNH0$M7}UA>-8dc{X;wI;qI?j!`-*l<-vne1<ktW
zvy%$Xm<v-pNR@|Tu<1TJ?0R>5OZlv~woab?am#86TXPGHTw5=4xlSbPG&sz-IXsFu
zQ>3J^uZf+HW>{ic$?~w{!QUWXe*gimA!jaxWwwC{M<XBCXNeTy(%=~`>`@Gk{}M~`
zYmi8EaK94JX?k*=D=|GPG50uw03<`L6`V9eP;FHLfvZp}2#k&%#MZ~}1b7jCR7S#5
za(#D~_2d0FzPubvOg?$uvD!X+Ch{zVDlOpbzFiJaj!#c{cVFL{ZZ}++$I#?G*uCc`
z*!kGcuz%ksOib@Vz>2U^5{Zn(orJ}?(2j-FibtVBrd?pqp4~V+@erzPzoxxRvmK_H
zlN_du%W#zHkasu1m?H&mK_%+Pp8Z?E4M~oS6UcNP#iQg*7+2sXRqu3_93F){W5Cp)
z!o)y?nNcNYss~W?A4X*4kxrXf+O`-MpSB1I%k*iE)JHtK0q6y!vt}#xv4apSVWsW4
z2v`<nK8iq2VanTq>50c+Pqrgz_aK{{hg@4X+Q@FEvT%f@1L%2+fyZ|aVDH{XF@r}T
zL_*pcymoFH88B|daXKMR;>s*ytzn85L{<%h6L+I?WHILTE<>#rFTM~FW(s9A>H^hi
z0gt-AJf^ouP&P(t&V_=JpfamK%IQW+at>^k#HyYSEMJ#~{C-HwaqLvgv3F-_)sm)>
zK#C>wI{7jUPm~eL3S2pZx<7_uekaU)3zAkha+yA)vvbhdlfg*7jGf!Ipb$QQ$cW&W
zov@5{m`1y_%pBDO_^h4O#RO);5J`kG2@CD;<PdiD-v&R}fOIy8O0|TksR8ih4EhdU
zfv_RSF6x||3Pl<Z`XlShC<98tF*}enThN=z;<UaDH<d>viP+|;7pc8X7$z(;i6m)D
zBMZZ>B2rZZQH9#b5UMIXIfF(xf#UQIn9~{T9Y`Vws|d{zgk~MKXop48XLZ6hTVYVm
zQVG&e9vumbC{j;Curwt1p{ziw;PyR-Ab0{HXu<O6=;;9GuZM^?a&bxqG#SE_G)xmF
zGxer0$F$I%nuA4cU6`K|FuBQVMURSOPi>a@{R7B>NT8)7jb(GXaOhwOrD7EZZ@@NV
zAVb-XP}UKt8bVcrloOCvgJ@(Vcn+L9u#IkRiw-yzNgpLV&0a&jX@=4WqRniWA_GN?
z0lj7!@Z}ge;<)bv5u8L01{JaV2&TzlnF6jCz;P@-FwhSfNvvPD3Wjpf+tQ0%!U08q
zlv~$l1cI1$d9eU&=C={Y!o}@4`HU`1PsSh~I8eg$WDSPzLeuG}!4E44qdJuGsEdU{
zVJ#g(Bw!h>utX~iGpFreypxFnsAlp`b`UlMPeJH@esbjo1W)QfTc4srSXL_}A|z8L
zCi7DmKGcts*PM+)aSFe<?^}o>ABP6lqm889N`QitPzhNJ45Ki`{qV&FFb*>qV>*=Z
z8bCUez?xGNSaEzOMh=%Tu&;=*kt*tq0G1Izp@ASGDRkrRRr+DWf@Nl5+g%XUF{BMv
zoW&3!pnEzPmDnvXawJq)(B%cYxd;M+J8)3}M*`V)6C(#^aQ8i5M}BGmhYsyR5Ckwq
z7A=V^!kR=Bb8tFa@fAazT05t??(B(Y_M!ktniLV~z{#skO_kBVdko8$ccZ-{gGEc)
zFn?hiiiH}6hGsB0P)50whU0WXDe9q#w6sv?s9`1{jPw!d)9u0<rl#MgU{2pBApx#9
z1h?W4gBel?8=M)Ovpi;s)42cMUt!Ol$55@6(9yOW<#HL0)q;*}4{S4qlpQ-g%3^dn
zDH$5R!^^%ED&1T5+{Up3$fz?imLe$?l4<HuiSXb<dyvZ}v0z~ry1QG@+Ll6VdkQD6
z?!>O01w6K;0K<yy97$WO#)bxOHbl~iU`zlssWald<2(jTNG7OscjP*>7Fbr6H{2>7
zdE{Os>=v}7m%%iWuu~}rVN3c33W+F(){l(wfFztGFtAZ^siiY~@c<<FVr^rbc(-)Y
z#!Jszg~D_d1A`OTz56iVyJuAP&F{dXMP0BR151~+;_=5T)R-wL6=CGP6_c9XA(n?`
z*5nwq6VW!X8GF)O+PToCx+Zm|<w%G3obwcz-HlA54}w|X!h*rcdpEDQNs&<1CgN1z
zj-`(pKWXDY#goMGym$ag>c1k&m)dR(j(on1?c0a3a^+l{dg>DLesXYN5~E{9%<XN3
zldyEUrP*u2I7tn)ztJvf4FTn@x`xT(TCnCewW7{?l4eFq;5AEE8q_8<OvGv6ksSkC
zG4!A`@`zOHi>Ga4Owx5w((FrtTHrU``-=x)==-(0GNctnkxZo>o=BM3ymbJ(c9~eb
zxC={{bz{Y<xrhQudGQhTjC0~yiJG-{`h~bm&?IY{q-c}*Zg%J}vXhGXFbM`Iy?IVa
zMmrvxRGQLq6|)$cpQMGFEn3WW$7`yA7#c3UP@v(twI^n$exCr&ez_kt!orwsEM4Mz
zfuBlQShsEo%H=wS4&~9`KZ5=}qnJ0Z0}JMNAWM~V-MAgkLC=GLqjXn`l<sMr&E51<
z@`<sk#zTWm0WwX0_Id10nxH*#XQJ8rZE0^FNh*ACjkrcVW_joriO2LK6BWN&dX5e_
zzU*T;xhWB{SnJ<pnT8xZFddGMRAHC`9i17hUAq|Pp0^5%7tg`iSP{S6_&5rMDujrs
zCYrPsmgWv}s@CWp=%)0|rlOiC(AyAnaf&P^j}+BBnlo)qR}-eqFVysX^E&nOCYee-
zwOShW(c~o+iGf6<5-59A(tqyv);hMma?Oh!t^WM_&@b~!$qn!L=`P%N&pwO{mvr?i
zlSyF3in(~nOIBjdn)z@NX49)4Y1@sZP~XVuh^u&lve1!B4Bo8%J!Shr(_A$bQQON{
zJL5-EZ~~8DBOX-=gZNuXWrRq#T5@U*C1(@1_oU=R?XgYqk36?+gU9r#S$eA+Y}+z0
zapPSUPiBKCsPF3^$L+W6)<^&DJlsZrRMNtt1zkua69__04(J?J$ALr^XtYSU2#VMY
z#sqe}fl<Q~xA{oji`KjX{hB6hsjVaiZMG&87Y<|TjSEV#Ly43k3D&h3U9D3BEy+F{
z9DSURRPX!GC+7B|?UhsNQ1#1~aAEztv*p$2bK%#e3i!xK$rv3iqpdxSMGIRoe?c3%
zx{|RyQo1h8W0trneS{?S^v*W!#nr`FI%)Qr){dR?tfb8@BE@&45M1e!LDMwEX=W_A
z@f|v}HH^<A1?Hh*GE%BKJU-a6fAsVJ8e(kxSlZcMpxv5Bevr3Y7yZ?|_CLSgwEKuL
zsWZ(q2!mGHc5L*{%^?h#%;$a0$Hf+jT0acv<`Bc=)KyQ<>9t(1gYn@!3gi1_B<n}Q
zl_yF&O%<L6uNl^8(yHloV|zC1fyu4YyFo~uT3jL-`E}%HZu|N~<L0a5@)KTc0G|RP
zOxD%aox1G0_S`GpB<yx57FM}wTa<i-k$^BPNxg#cjN;NL#cx#e&_Eg{H9qJ7xOJX`
zks$(bpNuHRZ6;t(j3;Vj@fFP8<|p>f@n%TfO&|$0B?GF&Csio93}#So?A|`z_{F=c
z(PJB*``n+3!t?wBe#Cw_eDSiL%;o>qk~#N$Znr@3s45KGBI-&f8%?R31ySe2+=P}u
z)8wYG(bi{TcwiFK69XDR#)yT{G(MD!pC752Hoejj;PjT;FpQ)O86pdjvQ+3I@DEoj
zjcs471lw<D$iac<6FC3Z`M+RaqmKNO634IU&b{_aEtxY<hm|3`s)E}F)fTCdPzTdo
zzz`+`0muz%_vO?c+&16B!95cwP9Bg_QXgsr%KB(%0CllxR;%NbFSeIqNDU-H3Wq9N
zQ80z7yYpLRZ`)Vu(caAx4cbiC9LLs$`Xb!DO*J3mXtfsY+BQ(wb!Mi#=8VqtrPt@O
zXRIX_O7Wm7g<}wlLUI`C6qr<5w>oHv(lrqZL7E<0gQv-h`2V<eNkytqN>WiO#W9f-
zidix!qvG}7TWM^$z83cXGDMMfGCfVD?S%pF1;70rjsU4wSXIL9zpj+FpPH$jaz<C?
z;(yJg&s=9XZBQbtgV~fM7{m`ogkMO6s6w`#+BYc2C1oY!Pb~+ex<rKqv@^=rcX$F%
za>Xqb*5UdGc2v9_U#j|#{m54nQ%}97_`a;qHB5Q7@q4{RFnj7=3zjxkuWwIX^yyss
z%(Ly}95BOjO~aI?lQLB3@Fl0TBbjmW$Q|SG!%^vb1+Jtg!^jJ1&l=}Ol1af4(H4qB
zV^w#@7c2g@Z@Y5%&{J&4G1PUR{~TY0!F~(Kgjlw+BXQwBWz*-pCXwueupDsHag!}6
zS(rS`1Gj`o16SirF^5s>6(aclNVVqeyrJxE`&uI!=%;<6e+bZ?I=2^f@Tb@xi*?V*
z+3PRQCe~k*Oe|R;rGZFM3BU)__O1ah7#*m4{okzxyMI^<_wSCI=l-yuJ$d|r?()rl
z%aC*7@cBy;V)1&zXk7;7`=KoDYJ@}ETsd+$zLVhW1vk^SKQM5A8h;vp8u()v{~x|O
z*g|aOs`&r_002ovPDHLkV1kKIPDc$28VUda01Zh<L{b0%0AK(B0AL6P0002un0Gh;
z05}0jL_t(|ob7!FxLj9t?!Wihr%b<dtFClauevO`%9gv0jZLwQA%KBA1Hp72B?*B9
zLVyGaJn~*hfB>QTQB5y)jAaZ4WXp1qC0SON?$zym`pl_&zi;g`BZ(4lk-&V<+u!(T
z+L?3K+N=GmT;S>T^m=+dy`Elwti>49$IDk;bL}&hUw8e9uRXo~+r_|OfV23)7{?Pm
zOMJBX-Jkn-<Bre$XALl$C;P)NLEukpF>okIC`3@|*WY7MP>=mwj6o@dCDy#&^&1*a
zO?1dEV}AQ|babZm-l<;VPm%ZrOIr(^OD^n7tvEwC)3XOAw*Pb@+&4nR=Zr%t`Pj}!
zn_K}`tX_Og`_d$`W`=KEvEq{d+IRH3oB`3Pr~jYMVlecv!#?kf=dZeZ^6f8=)EECr
zskwifQ%Ambr~12V|LO}lbfoAr2LJsk$!MxA8(H!5_rGc^ioOy=(GP=L-uu1-fXz?*
z%>Va`HHqJoxa!LPv0+%f>2GE9#%*5Zy(50@_WSA;?~#WpD%`Gq`mrxgtW7NL`&~>R
z2|2z@yz9d2J|YL+p?rU5&G+x91(RP^Z#@5{?`z6O{2da9|KEu}FL~7!f4+WFz3Lra
z<-Lbo?_(7|xM`>BeQGocM)ntj`tZ)0lvB~b4>qfdI+yqVK1o=}7PSA%buaq7|L8ka
z5PY@a`(EI=yMiG2T*E#3RrRr#zy62o(`%Oj&M6fG_EaanLWIu5#hb2Lam!ZcijHdk
z8<h3DeuIB$NXn5Jg<gl@WlIHLQ<&pCS@g~95)^*1)w%J;*RH)|Y~NmDLL_C=f^b~6
z^6X95UUvH1uDxdQ4gJqZBeWO0N?j-z>i|%P4F3z9O@u;Zoau+=@X(f#1K<75;V*uE
z>*kM0c#p@%KgN4}iW5I)ow4@n<==j^?dnDKg|Cz1RVxhs^Rkj(A67{EfWsKpb%Nj2
zE4Vc?F3qeV4ZA~Dwrq7?bi*rF+%+|DNN@w8j9?=pe(=sW1XsU33uPCjAEc|yTA1X?
zen2jVQZqoX1#<RLV6IrV>rNJvS={_xE^qqs=j{mP@bP+DzyCf@@gki|?%d;Y4-tDi
zX>&#2)&1Wa&R@Q=-t`74UboKRwE+0&xRf&mfO!lyz;j99ss+IFGlB=@ahPcla<c=o
zn}1?G_oc7ueXuk((PF~FM0fT%EBmj%@i`0s;lk%7`@?SOs_a6+GHamxNywoGAqJ{)
z`o2!<=AU?*zrFk5haRr(zc)fTI2H7H%1Hog65ryzZC5P%=Fz^(&Uf1065{3S4c?`I
z&y*DIn^KTfNHoBOVn`)`jvVmfMZm>OaJO&>PF{qt7GdB!-*K;d<=guAHpXX8bWu}C
z8m~Qn<10V-!81Q+E-tw$-z!vU27Kpa_{i<^o!8#-@TCtHAN&Onp3?h0r3OYYfr}Sk
zer4LsipR!prim|j#y-FIKkn~2=fbq}>OemKbc1&T_<mjC;gUiWK!!dLh77(B)apQ~
z2Kn6yh24gdR%WSmC#zi5cgp@3otOUXN8Yomhj*rk_y#jzaE2P{(Z6o}`RCvD?!9k8
zrPD!q)Mrx#e|%e)^YX84zv#i@eVX{hv{uCYC&PdimeMIYvS0tiTkpK$v`x>T=XB%0
z<6F>C5d=T0>wo`r+3DA>NZjPRS8X&z4}kC074DjovR+rxb3sgijN)TZXQ)+y*)rsp
zCnF4{8CR**@P-T#%^dMBeAC9>Prm(~586nXk%~YzS(BA9{QK6Qe)1<jYz!D?(h{Rd
z=Mz7!-m<&0?Vi|!Vp?KOy5&993~1fl>W-e}Jr{cJb<a5Mt@Jv1BXncGxue*z*VeSZ
z>ocoYzvcq#M!$O2CERKg4Bsdz+%YR<xxwHyI9GLW<ufh=Km|bPDYzx@Y6Tc6D*2fS
zDQ7wiR8wo<9c&Z9z)bzm-g@5Z55MfMZ)I?J%OY{cAQ8xK-7)lUypa~82NL{S`}X`J
zT}O;Uocd7sq%$DCDWwhX^DkNPHjz&{FMj>G&$)K-#%H&f@asE@HTC|Y%&Xph=8C_6
zb>;@Y+IA_NhGh84gu*Xp6e=}_Mol5AE2(@y`hfD{W8?#V1F|s(xHVv~2>Ge$5Y<Hj
zGr6@0_RY8aQLp;8w_SPFTP}a&f9Ng33G0cO{<B>Jo83WEKD<Ag8)zIoK(EO^01l+-
zb+S)L7f!_gvn3m^{)=~Qx-ksTauZ9}_&0z5<^T238(;IKE7x3dMOSiO^7y_tw7c1p
zc-A%NEcxFbZNFYs)rD}zstk9IDjX^SZk=huhE)dX0xbqeUqMR&{o4iiD?n`usFxJ>
z&q026HbQ-kiNW?&kbC+Zzrd;={>zuV?geXK^=>I;9P2V*urhS$2e+m8ZF?HG0i`fj
zp???#oMh|5uqf5n`Pyr)c=wzCe&gGcs~5QnmkOv^&fKr~qEL0PJBORz^XTWku>GsA
zF}Q(9lCQsE?IlZo_~_C<>#fS?D(8se@Ejl%Kty`pR}vmTUXSvWM94JJc?d9iL;xq}
z#sHWN7;TIvdmvd3IIR=>hMa-m&H$$!n1az$bmwNm^mQM4-wPfX|Kaxt&Xy`dn)l^>
z)T+KL1jp@BydDq0_xLGxQce;FCl1=2+duf%jmuu2gi;eS@FJh*77H2Fr19XR*zqmX
z`ls6l-~5w_-Jh#Rb1tbJ+nCpO;ezjtue$miq+T5HM;n~i5=ur1AY!z`8CM}BC$f;<
z_oM{<TN9t@qY;54gd}+;2Ji&qMw^m$H=r`WhHl2MN->z<S2%rF8O}nlzVE<P_F12L
z&AJKq!95fqOPm@4|9;w?#KoCl7c5wN_PM>O%bs<1{`FVh(9s_)3|-U&cKnAWUhu_j
z>xcc_`;L7cwsG$KFYVfJ(G9CRZ}9zHE*B+JNtps71BCbkig82$3s~%u2dYVYfS5we
z;E~3TC20<3X^0an0q{Ivbpug`@zc8*HUQ}T2C#OwD|<Q&dCSB1%fGnwhIxUSti+Na
zkL`S|9vNMu$u3`d(Ph6Jy60|}to>8j21pgEEhD=g{67zD{g-P$efO&OzklXqe9Cm#
zVbl5GZAbrxh%dAk6a#Fl+TQu;)$3ofcK+2t{YZg{O0~JmYk;Z&r~$IBDBwC~a22Va
zF!p|k`0yZ=t0W_-&{7gVK(?a7cu-*6r~|v_6z+q<?&mAqpSSt$!(3jz^wQ+3*L~o}
z1U!>8p14S&$(~)g{EYLy`svsFwB5`l2o?QRH1#R!1rd=w)T0mGz2$H2y~`Rdjwa>L
z#}0p$jGI*C@kHoxo^|c|74LZU;%9p0v4*n7Cm@M%stTy00;_<tD&weX1FH?LqDRy9
z)Y3pwK>9xd(6kAh7|;N?OAkipK~w;Yx{@O$;L#+*z)cMMv&?#A)UUpH!z(UW-}b^A
z$#I}-KfWw>W^Q@^zkKjT-_2j1cb~m_^|PcTrpTwh7Zf)A{Q#BlW48=`@U|@uFUZN+
zcvpq6Sx?&;eINee(o3y+Nh#;>5YxLhDk`apO0o(AN|3C^fEt5rC`r4YcDxFR5g=Do
zlHMl+tkqHL7yuS!c^TtY1c(MCFGI=#fQpi(3NUXGFn0sTfrfI%tEj(V?cd&P^R9G@
zxJ%M2`|fz}+h(@h`|?BUUi6G!#rpY&K6Ay_UvtqV*QG_uppC?y>QDsv`*e}t-+k|A
z-}tSswgGj?RQz*GGJo-p3)h~GQbJ<iVGczqhKOEdJep>}QO4yi2DJw;0&q>(5RieA
zylHglHQMzoU|c`Q4g`!loN+M&jspzVm_nimq<jU(2W%e*Y6^SHz*QFm<?}iAPs%Wp
z+<^Y<mDgy3FpjCl<m3;3w&S0wd&m56{Ch5&{HpA(AF<x^;!A(9zH807BrQ+05a17*
z6DErlp)PB(Uedu2)A1)?(S6=EUN*v^VI^e55z)PP;D*oO_zbchK`O=@7T_#lP&S~V
z*yGU#Ic5kq$O~$EL|l>&00^I<Isk+PiAqgLGsEHZ8nEUAa-l?`5AsMI{5xcv7Xpzj
zMWw;yqPDdc?J43Lblvr+6nyd*n?JViz*#$Q`_k$kHwGi?Z66+e;|~UJ|4Nz7R_HS)
zOBJ0W2E-wj_Db~s$e$;o(tApV#`OM$(pWk@sU$%zB9b8)TCXHUx$0S^S~-L%cxFwf
z4$}k}r+9#LJ|nf`D;N>u+BJ<OLUY?N;u{iaV08Nof>NCuh5@nLl&0;tR@M^9E=xGw
z9N%FKFI-&1^UimrvY6a<%WU~quAT#TP3*mU&pnq~-~Q>LPu@JZ<x~32lk5kb1O_zq
zA?ZajvV@RnAA%y{6EE0c8KceV%64XF%lC{Q*}FvcCC-IX8E0xX#9X<EqB{ytjn-3k
zcT(6JLKPA+$`D56{Sc$T;ZsaNE~%0%WL)ch;w)p*kl?mWs$L<en-EqW282v-X;})E
zQ8f`&80trv-<LyZhDm8I$yhVy17hp&onN4<q-)mKF6opF_2$n%bnU*m13!)T(a8_U
z*c0E~bVUjj(*Nd47~RQvxh0(o7p_{c@{Io86&KCVFTEh`^saWyZr<=E_75KQAKX7G
zwhwLpPaorVg=%&%z|c`Ynl7cq`ist4_WirurTKd1YFIU{Wau$2C<bV{nh2CMB1XoS
zgh*1nU^zfX7sJf3l81jBz>r*arYtcx^Pl$?tM`7PBfIwUytDd}dAZd~+fyCLITAA5
z?SJLIf4+94cGqT#%v&JbvEwO*Bp$N_5cf$eiQvDwyBSNedFj6Pl}lIjuHUp~;c3rY
zv0&B3oox$yEYS`xOrum6n5!rZP6vL~i^51kB%I~)-1T*oqG55*;3vO*;%`-hy;~zS
z219fR#zJt(VT1}iBtr`rq>2bq4#ByE<O*DIB@HkxOu$M3To|wrh4Z_(Gd}U~w}wk!
zzInKWn*qjc-knZb-CaugQPDd%M0Z8MOR&gq+&5#|qtlYn#JOmlEXF)W2E>VySo%yO
zBbKx;?mqLZRf{)Xy}EDxGZ%KPJT0B*1%rcHLnlWtcqDYIbs16`kQ))jFak<(31vwR
z6zg?9tC)Mvig&+ywlXumZ}t=az?rGtRE0<>qZ$g6af3r@sDZp3Ur9qVfK(58K8l2p
zw4bCSr5i{J%oO8>&7{SFz7Ak8VF+Ey$QdFTN>5IfJ$F*;{B~<q&jm}be^qy`t<MW*
zrzfi;duFO*2gV8`BXf=Ea;PePs149>u2^E4Qqojir+@)5FqL2{=5Jc}=WjXlv`b#H
zuzT&|Op<^WhI$>Cu0;O8WaN9UOL2fO7~={|7={vDP&^-NI@)Ja5)tA{RVuP7ky|}y
z<vZRp@zAz!7ySoz#le~vM$9cI9NsPr_~h+Gq0&2_9%OtCsfn)%ubnFam_%j*<C1`B
zGnh<Z?J^Gsj`*P(Bw&LdgT4WapFQvOe|P;^fAxVy-F-+}Kq?`Tc0xFbDgri(+3HAj
zxG=bDcy?gR{-X!B9vnOJ=-BM|_*^hs2YmVK5);P<aT4dGFram@Hr6eF)62el@RDb)
z#K?Z2R0!&Gvz`n+#U;6aiqXTe48|i#Wgu}FPm!adi{j1gNqjIkR20!$oCx9tzGWr5
z>Sr(g&@b=a|KgrV6)5hNQg{_31!92qrVL3spVSWHBGO+b)uVTwW-oa`9GU?l1qd5F
zrGWM8s<`vM82ivh6d@Rr=H*L2dg~?YUUQYJ{PLdhs&Gt(q+`gmBV@|VB9~|rx%5is
z{KdH7>J9P&J5`6ziYWP$7@ZwDd}#3Cmi+?<@7*(aVB4XQBZK4aR7I(<xwTG~1klz}
zz{2#4KVn<U!|^e<IzFV59Nc1Hl6G9E1EhF&M~We&T^^}8@j~f5Mmv>a00w4gS5XF$
zq1{TUNP(NY?$@!P=i=<D!e4%N&(uHMNbf|vQR9>~umI*N4L1`5j7Ui#wf93Qm3XVM
z*n8nttp82&j4WV&8d$ZmhA7hUGN~VMWb8|q{o60kUUB2biE6cMFeB-h7DB?PEDqmL
zG6*E9L4?Ul7+RAEO@oDw<sg-qhfHR^Sk|$z|ICY3zx{0g6%u8X8)Fz6J92o(fk*HB
z*6o{bzHem9eUH^&{oM>`p2ILh_o4d-ke@ftN~JB-%khm9p(#Kjdq|$3jFb$+h{rxZ
z8EgG1vWR;3nI<3-fNe5FB|}C8uu+7jgz%(SUcLAY|6{W9^UuyU?)rryY7+xYfEyG&
zFm412rh*hokr|<k7N?8k1Y`=jP6aE?kR+{V8(6-eigcTYFe1~eAXwHuXa2w3y?XJ>
zH%?W`Wg*NY3_$@jk_iTtfVN?>!5|C<OMp9c&0JYtq|hMy=0<#?5cz`hP=LvVokK3y
zZY}CLz5l|Sp5K4tb6)xSXTR#LFMFu)-LF5EJi_mZr(@kcQTx$9S4zWT`_?g;&Kogi
zMZzJquIKa{kp#%SA%hh}Awn4<jDq;zVTdS*5QPlfWZY>7>`um+MQM6NDrS=OIF{Y!
zu3z;2+c`S(k*FRtvVfI@B*SWGXc$tEB+zarm7}8zNYZYC7?6n7kC{}k62O{X5>Fd}
z4ChEeZCv<&e!hCyO`D2twHm@qhLQqt17?oF=>*&Ws8s;hXQ($o4_<9BUUeC&b)e!h
z)IEk8McbhiHL0wEudI>Tknh^%`ValWE8lu6+<fBPH|nkT7;M4slz`Y+F_ioryGKjk
z_;|Gc<!^55u<9%O7FyGzfn<zH6{%R|1PTEWItpYUqd4*1^bk0YQy%b?^gPCMy@2Rs
zkOHVoa*b|A%-~_*qr3Y8r+@12e&|b<Wl1INB;!6IqK1-W&y6PGTfn8_jMFwCrD&!B
z!-?UDd|o1#GzDrF7|X0*o_*gJmM?kLdDXB|XD}TqPhke<A`c|{06$Q&TmYhm(%X)H
zD~Oo%BXB#6y)h92fq*0xrx|XLq{QOi*=z9!2gdoGcO7vKmGApfynR~+{|PeS#5Gj;
zzkijsRz7FP1LrKxq!M8+)4@x#q4sJ5$vC;2fsAzZ8A*XQz?z9<gr#=aBS;>V44745
z-q{Mg4e&`$X9;8@ZQ_sx_xt-^cG0wTKV({kA_;CKAVUMN$cFGZ{YXUOTuDVuGGvix
z=Vut~1Q8SHpdD@5qTVQnnZ#v(y=K`JsQJFHU|QTTzyt$t2huA6ZYmV_0}aYUP`m*J
zgE5!}v`r()HAO6S^jxE?5d$eUBTzh>F)=th8{W40fHPa(dSIw}$CqN){rB5}#{lVR
z0FBDf!o$UXzog-gh^_bR4;!ihVVc|zz{y1<qH88ZQXAkXlrjpWlyr<pIwbs1!E+T#
zV}Ms-Sau%6k_&*;Le6C}#7t=#hmP*$hsSpN0W*A_2J9peRl#wXwjqS~&{6+e0G0)5
zlJB1e%vfc?NdQh>p~N_9fem3V_F2+)t&GXdqz&e9uslO%14C*FWMNv#;vCQj!RZ=(
zeXSB+sI*#g13EJ9`_K>92lqVix=Z3{qG~kc5AN72i{$~ar}(LhB^pit^rSF=7Ksr@
zBRV>ExbTT*mP*s<E%)#6nM1)Dc|tNKd?*n`Qt$o{iqmVMq@BQFS~i@74JS<onc?uZ
z2(!Zqxm66ahQfiPB^(_alf_CAUdTB&lH4K&Boq=Uz)8~H1uTkmi2;Os3UFaFZe^I(
z<7Nt4_ge`ijW&fcSExrR6lx`YaQp!=UK&JQlwtHpbZ!I|ou`YscyWyLzyrK6f*VEL
zBL+wbKZ=hoY0ro@8KfTqei$E_G`O@v-1f6wez7#0JXrdVO$|9R6_fR3ctO8~3FTnx
zPbR8gd!JM<dfx+&K2Y7T<UGeM1W-)IZl%`y<nh=LNn4|lRE_2aMa;~WP;b=H2m(km
zi;=<tY<f)sOD`t;rcKH~AgY#$Dll0MiIhajh9sg=lAbwD2!i$(xm^@^QBO=-fuzMr
zF*p`!GV(SdYZZl3WO5G*bM825b0u(h9(p@gptIk`*cdRnHK0@l1Waz36hx3W7jbe~
z>3(<^(Y;Bgn0BX?&S@x}SS6@?^R@@w@$sqjNclf+Ecg#?dn|hY2{Hgpt};xz-}^^P
zbZiQS&UzLi<+i8Rh`L(`V-5_%f*~XVRl;m>6y@3ks%`<E@9FnB%R!hOu$Y7Dq>J6R
z+Bo|!IQlN&yiv?ZAC`=Q283bqL|V#R0%+Jkors?#&tJu9NFAL)GDiVv#(7dn#{n{e
z@yKLkKj8a}mnkUZ8Hkhtr=tVTyanicMgpFY*#4ss#lb<S>KH`iA|Vn;J9(s?Ze)^q
zm^`74u{Jw0l0ifPjnc+9ku|X8k%!%(k@56&^_KUKH-7vT?NL9@>WU}C0NQ@z^{-r)
z^J;e_3bPkqvd##TjwwcqKK2d`VgI4Mn4B9$s6r&1EYgW~B<v0dPUR{IFh(A<fykGb
z+NW^fmkNt7W|$oY=5{-fkwu14W|BaP46Ln?Oarn?x5u~$oBkbLJ(Zz2N>V9G!eOw<
zMhFE(-ctpj>N=P?h-?N{=R7R9Acc9WBkcVSm&Nfql=Sp&_kwAZ>vI?{R&;Ne$sNsz
zd}<NeQuC3rySO9L2m;c35gypLGdwgpkS^3We{H1pt@r<WEzv1rK)fib4P`x8ylDQ=
zORswqZ_B1&nhJ~3J}x(x!F5l=_|zo!9vZ`=het6y>7h_;z%VjM+5!p3jM3F7F0dND
z56G<nmOPX3dQs}aD?5`$D#>`#h7<{gY61u{y2(Yu5jxB^n<Xeoz_Nh^*$ASyL0L2f
z-=JD9Dp6^J*=EZ2wF$obQi;*+z~pYpSrj7jnS?U9VWeOnAbbikDxw}tVW#{j_PJDc
zA&_@^v1aK?TzF<b5*bhKIC{_;9)IA@BL9Yt-2Xrfh_hVe-=Dtdou7QpW&iw&(b>oy
z91jKg`lhguNG8yg??lhM)p*`=;H72*jruehSnSwe!0tl<#>T5C*Aqx2Inss+vjQBs
zJHnb50}C!@e9Q$B84D=~NZX7Dwn91qgc<1cB{7XL#wAyh?1B!!EG2D<TnRp=YZQPo
zsH#PAo=PL#$<Tj=l$8SG!}k)P7uzg@5!!7a2pQZUM5FGK4M0K|STVmBr?2e5d1rKD
z{hBT;>&qkSWMJ6s@-44F3xEINM)2>qwCaeSShDPKFd$CC(8gQa`{wsP^MVh&ajp<l
zm6VQY89FN^$!+rjd9<MT@Nn!xW-=DKIu~Kl;zihax`e4Jn4X)(?n7lfd~gB>$34u=
z<xtsg!`W?M*(RVqC6Op7<V<QoB8-P2O*)-Q(dkmG7<*zS<5USJ2m!Sr69gX+<UsX1
zCWXy$3c>2+SbPR}s$I!PzE35N2BMInULTD@0|*MpBnnuOQ#fN|FE*~pW5cR;EbMH9
z<K*FmDU>S-%p4FH^9{Nl(Uyk)Z-4iW=cowZ`S`cr{Q`yX2}!|YPsnJgkFX?v<LfTp
z_>uROin8i^kwZaE;Henrp<Sm_le*jz6!nH>iR!Gx=m?NZGqmS&=*#DD$=MN}cUc{t
zEaTAl1a^*_*uB@pR3e4U`XuC00}1kM=$t%4(orxR+OA46!8n0$1nv>&rsDw<oIY!)
zSOPdBjEEsL7~0R|FxCV6?+2gUA0QfSAmz_s{jw>Xv7Y1XvsPmDstguI3HXO4id7Sn
zWefL?2$ai=qI8PFbjs6El%tk1A()ss&?x_}*S+=nnL^>iU%%_a?<C_)G0#a)Nis%>
zhX}o?=Un%k3%>RPshn~Ugh|rl@%yoKSc1W_DT74O0TnvM-U?$NKE-}K1xaazWQL(F
z#W6q2u^=C!EAInF6_aiQLy^S3IU5VkNuhmF5;AR~G6(qM61AeFoDIR>`s%3?g4+sa
z8<6c`n3rLg;T(4#1uy_~$q)~f0=SbtoC8&y))QgFDvot4Y%E%s2Kl)lXwN0!PvRHf
zQP_4TgJDtF8>6sFN=Xoi$pC__Z2_b$vQG+qS?2bh<)vTnp0~a6?p<H_6encxw`A6y
zFauhCZQeQW?B|~Qtp^RGr|O5Uqko9%V<e<bLl`mQW10+>MJ0U10HuL4gWe-%a0>Au
zg;209#uFLR^%QIYIh&(9$I;grp{K)#lWAbKR>ZUmlx+(WMgm@2771a(osAGsewe^G
zi^I-wn4LhP8^}fxb`LeM?ZG-aD!}RvpexC-vd6~ac>>4~zHMlNhb~a5MJU%)47OF7
z4tMVUa)f$?wV)44kc8kd6k^jR<A@VD6oE6vmv%CjEt*L`_itZu<^J)X-1WG|CH(F;
zV?4uVeO=d_^Mk2OZhgH`s|sNV$`Dd5a<lk{2u+YA5t>7gG?+}QBu*(s0?T+ay{J_~
z+^%FWaQckxkb0trLNdvaPcU?580Pm#wD$&3yoz#I#lF2h4*PlZZtB*$lcc>+^-!ub
z;8hzi3og3LKtAMHAWY<P8Cd5ekULEPv(!l=QK>7G8%iUarD}|RHW~^+0Qeq|NHI+A
zkQm&-kVwU_H_cC>$eRdH|E42B>PZtwnWX6yRxe`iAU~YG?maJDT5RkYj8(RLG7N}4
z9w<j#y7G&AmM(hH(ptS3a)U_LG&K|*(vhS<tAu7nF~y0TbHdcMZ7`J7*{Yc6F#|}g
zLQ8}WY)FsWRER~oJOv~(KpQ<AV98<*%dX&_TgLF|A8kkStTtTprqeOA+r?s-$ihQ^
zX9gWc0%7Q&5SlnV100$H%8|lLZqh*;=1M@hsx;K>`%Ftw80dx`-ET&yu3>S`8^Ep~
zDUhTJ4oR6lLOtm|G&6V{Z;&cV3GFIV(ps+TH*xEMJIinQ%*z%k6sR)w_X2YNtr2c{
zJj*+7`au7p7p<szr79PK;?5IdGJ>3mqKZn$HM<q(T)z}a8R+~k=cZuX5){`ff{!(v
zOc5<3-W?Mn@@&YHVp4{T`wfL^5vcc2$zq5fe|!kv+x1N>Ip>*p_UZ))HjiQRZF9J6
z?IQfmU#`Wz1Hk4(5+fCb**bY+F=kz!1%7sy#Hw=)OpL|kAfhWO5TNS|W7wP+K!)9~
zE16C*p6ZY&PXWr(3Dx)-2^pp9rTC+{w2e?oT7vUk`vd>kE1%W*=jZ+Pm%p;@?_cy-
zoTC2*jEjjcSVv}k|7+hFNa<3}w^fAIdgxD*BI0qnkqQrvzY)g^gp87SyB-KRB|wV@
z5kV|*`cmIi*vu(}fENG_${V;0ZbJiW_`w$jvH9R;xal;yJ1@cV=k{aWmFEKa1U~+w
zZ{mx$6tH&|I5;g)EC6ANYFn5-QW4kw?TU=IK7ZgthGG0$&5|Y_NpjncKlde&na|)8
z!mFr_Pk~<ZCF5SCuTMV+8Kvv3`INk2X!y)JJm6PfcIInen77ui(lw;N2k-o?@3v}x
zQ+&l~ZP_KE!DXlvWz%DKv=tL*z29uKlDeU`$si&=XIwTdINcZBr0X+IJChg^N`2#;
zm_T`D>ieaZQ(}e}l5vzW+b*!<{&8%1cq@jy2ho|`fbv`&4?Ps&W1pVJ=+G#5Y81EL
z{Qy$71or^Hst{=PqIbHk+L|3_m>P}U^oUAaRP4r*6slv@8gV>JuLnMm?50|m2!0sB
z4<dLz9SQYSobn%Dz<51isQL<J7byC17iYm^JTTh*-sFWZX>G*E&48BF__A1<8b2zm
zMC50)3E0BXE*m+S`l~u6+w3;f9fzdz;^+Ei$PkfAYHC9I2oYQdR7C8Eo->k&SQ6-a
z(7Kr?(k7oS&Ee;F@55Ml4}{eP%V<L)$xxa#P@Jm6(!fuIM~~izM|PBu&TxHh6)8#o
z>FNwBq6-<uj>N{Fn4;C4ihq-US<Q$h@gu3EPxVJh27<#0q7GyjGlCwGf)^3uFH!X)
zR6M{9IS&kzdnrRsz;kciF<?zp4j=jzVm>|_5T_ztb#U*#q0evj8n3)6)0uYL+Vf#H
zowh<>aNnbxZ`iC9YnCb=s~T%c(lPE6W11x-v<vC<)a8OWa3X|<^1UP#RAFJ693ti8
zt~>W(qH;efavWXu<=})naD{4>JQ__o2qTLs_Tv}Z_Tbr9ov#hO7pNwY^)+b+VC0D8
zi`U2djS_ZReG}u!2Ap_}O^MLacQ-?EHUy_c9Zl+@N^V`rVZbuUTQCrrp)3TIurO1>
zT%nMh8ZWdDOyBl!QEvHWe9KSJ2*+QJ)RD@ko?G=t-Z`)MtPf<;E0M|Nk#5V>)2S>{
zMph8yOX3+)1#KiHMW2+VZRw&|R<y}&)^N7!9Ahcb5C##S92HJ#NFm=XuzlwqjE?TZ
zbaWqVs|S|Z2E$Cm(Jht1=&B3K$!4I$01l0A!NA}uWV4-UOp|L97p)L_P3>Ql@hTT2
zoQy!|N~*o1_=W2(1|3$DN;<xANJ6t+0&=gflQJeZA#6+kzA}7X^k!sntPmDT1*cjq
zTlM-ZD(<0ya=7gyGydJ5m&$DpnRvnsXzgY%ob<l^!CC(&|DLa%cYS;LlD|z)tXi9J
zx{%K0kj>}ARI(i@kt99NeP3!YEAB*Z8f+F5pSpl>;_J|!knV}rg<7FPHfv&RW*qw-
zJ%~AZFC>?+%}$tR2Bt~*2Cf-EJBy4zhYfBdQ4DtAk-htH;RWaGpiq(ZREoSEeHUaG
zriUdKuh%=AE5*p}>kYw4O_CyNsv**qp|6nX5lCi|`hG%I$4qSkvxR9COS7`kD2p(d
z6}}vQxDxETxf1UEVLco^O8r4CsedfE&|@l1r2j%ytW0}%e0kd2{MD4PVtJc&&MUK}
zvtMUV_GK+QE8E-W@oZZ=(y2U5kwVZQeM^WVO*f2dyW_6IIB26tnd#HVgrq0Jq_ES)
zuC04f_IIHo2at3Y!W3<=%$&|65XGqcg}k)5N?X7(vZ$NG7@E2dOD9$!m+669JT3)s
zRvU71B;tK*V#ztS!J07uc^4#<6pt7NI8~F9q>Rn(L1AVR4Q~dnS41P2lI@P-Oco9v
zseS)qH=3AICyZB&{f=L$%YU*AXqnKM5#-d=q5}tNjRWtRXx#qM<=NLyctMVr%DZL4
z>gCB~H?nP=`jJVuX=YGuf8bFmcqED7giC1m6-}&&Fbt)TY7^MG>tW2y9l~t*5Dbxl
zFxsRka$KKBe<==bh_Mokq6{#efWZ^I6g-T>htI`XXLnFVGbdxL??6%(OQAF?(Wpx>
zLx76pbW)89zeLkEh2XStYGnntOlm2>@Z>KsGqVqd6%ob-!%oO&EI-Yvy7hq_JH{t}
zo#>}9BX(k~yrEeUp;XQ%m({uGX&b9P<h%YODEkbBQWxy8ZX^<&$h37K-`<H-DvxA3
zt!I$L?k1@zs-PgFsL<VKVPxzGh6WCyAn!xOe56D#EHe)wGNfi`wt%jYr_UcZC6wH;
zxZpXs#uSF9wxMTY3A)=Cp;+`ep|ccc(N%jj1C0_ubxFF^p1dB9MjKF-hN5{BaX=O~
z8A{U$c|#orvn3omgS3@H0$HqE){Sv*7}(LukH|lChfHhWhG3jqaI8F1RzD)R@WWYD
z!U<Ho0SGUNLb)50ni*s>^2m2~BA4kvGDjIGQzN7cR|1n0)7ZIvCu(vhs&W{P)h>m|
zLKt~&8gz6tDjRQwIQZkF?3n{$Bp_81rpln?Z^yy?%aJ=bk90btBVuO8?Y-qn6;qQH
zr1E)8k0=Dxt55bsX_ZLMjfO;Y07aQMrr?NfFxx}YN+M;Y(8H2A=iEFtKT6H8twxSN
zT8ol|X;?bn>-a?kVGYdWFpMlB)j%jKD2GE}!C_co8gu0iOpbT!BG*)=9qG0_dgeQr
z+gZnsZM#wN_F*=71h$>m=}S|zLx`+2DW^+CrPL_VR4K9JLc^C#7(4}o*XXnG)hwoK
zTd;FS5=)n_hiO`<RLdw=#xXg05N7vkWSmWC)Itc8X`N5b0huA~wbE@h``W1ZIAP@g
zpAz;dv?nq+GjC&FQo(D`)S{<Aj~M5MG(-Z)L>H85hwE1m$TIw(29qZd8EuG^hftQ`
zMWd*OM^UQSuq%0(6CF6T*MS$*A;k#F(S8UkP04#{X~RnfJx?tmaUwsi0j5fk)~}QL
z0S8rEBz5nqCGx1r0gM)ZjJfUmKxHwWEFx5MDAtc+g-7+co3!31xzLP^gZsFSujvpl
zrF3PSEmAO@B<5#xSlX6Adm@x>mBFotwG+o5|B)D=U<eL_AWvVw;1-gG1=mf(5*{K|
zg&&p?gmt}3mFPeuU4&5yHB19?j6e)TqK*g=Oshkyd10hriB3)uU>Ye&Ma)Xu9f~kw
zoJ#5vBqE&vCnJnB4PT-#7`D|3HynX0hoJ(J8c*Zi^gE`ViV5C~&&en?8}qnfG8y^Q
z%_n#|&Ec3na!v<Q2@4$w0l}oMvIxBd>NVXu{-oEFWPmns8h)k>_}QC!(cPQGfxXih
zJW@iXlt9ADBVl`*5q?<Hs>u{t>Vknnpc!K5EIS!8sv#8+Mw**OCj`sEHnW@<z^I;6
zdm9XroGD7rYhysIM>Yhg<Ry-MsN{uk<aoe0Me9izoZM9lwv*7nA@wboW_(V<`YEdC
zhTuQG>$5sKzVxDNVe<$UPr??|EK5e)fE#htN&>YSS&u(D19UEif*mP@fzHk}+S(J?
zctHxMo#Eo>U=ag{OPHRhfguIQ3aO3@K~#euR3TLZ1`T(h?rU;XNc6dYX(T{~ml!2P
z?EllYZFQ$>C_}riR3}BM$<iu_Tusdr{dsB$AmUTcnbNj`D&H8lboxA<b}%+NiF>ww
z2kTZ}gmr5-;GV5_VrX~|Y}3N6Ke`zUJJ+H;MVlptH3E_)$xx}7s8*@J|M5?3Kj{pJ
zYxQEtfneU)jRTSi2WwB8hZU<jF)>!b;e!Q?j#S__NGjTpbbJJ117SpcW%Quk8;<}W
zkH-`ltx71$jfo#)H7)c~Kd16|QccVPBU~s>LnD&J5Gtjk7X+wuf<7PkqY%PGz8l!P
zYXW!t<g+MOMlm}(h~2xFpjs~?pIrir+sGw5kxFEmFm>Fk9CC(0aTF^iN>v(^_T<--
zW`K_7o82(NG%!9<#PHD>EMMM@wtPyflm!d(Sg<gMaygcYBZtc<&Is66Iv$}Xb!TLg
z2^5K%5Q2<liqt~W{fvkGwcNwl4QfgSNda@3txyIG-8xSQpDDRPMw;^|YQQwhII#Bs
zqIwedZoM78-#}ZoUvt%UU1Soya6}5WnL>g(LloBuBN{}c2eL>8K@6xTQT3$v6kq`9
zW6I^}()sv=f?<5Bi1CRzbarI0XmKaHyW3z{CerC7Hk_WsnsuERAFtw}`)5%r2N2W(
zbL^Blov9f|4|*O$2Sk1XGMcSX+6^U@6o;`f`o|>`iC8V@ff{i$IrXz~L-K^vfsvu3
z7(B8c2|J6Fvp`FmCCKQL3bV<vmDIdJDo5uCz;q!VsjWcL7#<~yZi0Hqo(c@0%Z#Y%
zHdaAFgr501Jo{N2aOChLhK6Ra{ow&*Qb{c6%VWX(b~p)((v(=fq8(Cl-2IaYNr^PQ
zl}V=)F%{)<VguRCx5a*9Gyg+4e+yWRp>XXXX@eZ&OZwXMyV`2d3?q<TNyBgq2ySb&
zB&hgSIH0k{H0ppps`D8-)`)wbbmO5We%zoz&}!8;sEV#0)8NSsu6eR<sG>w)JVPO#
zv)^d=a2o;Ety_o{E9YZud=5tkX0U(%7>*p7!r5mnMQ3*w^=bse5HL*YInzBadYla<
z^IO>)+U=Y(a*dksb`we^Y~fh^AG0U!0X}iuSX`s8zeaY7G1z8%>}hGc5I1fgOBu%D
z^)ZZAO8}+1DN3WnjRvgZ0)j@w;7Zp$86ERakO9Y2^M2@-qDU>I5e5_!Oih=u?Y=|k
z>+3-OvTiJ1)P=<hyD&3T#*x9P7)GXVauV?-$fsukXmuMCk4A2_5~Ix~Z;ic)m|C&l
z9xsi>G<RXMFhfHNai+A{Ag*PN=&hqKJvJxq8IFHbL(<JA>o}tq6PAdtA}twu18^!M
zrMZCtLlAjS1r-DpMD?OJ!cxj0h<Hy=4l7s9$Jkf_Tej{;ds_-imULl3Uk5gATCVf0
zfgk8}qSD^Xu`u+w?$FS1ygOSnL7H9Y@>n<=*CoZnKbyj!|DuvER3O*5=^|>T=x)|y
zztJK-*$G|9du-P?1+0a3=|*#UVo;)qlMNts*$Ajk)zx!@p6tkoC+!8*y~!b6S3{vG
zjh8V@tXtcM{{C(Z56@zR?7;Q`95^tJ1q(Z|a6vm#R7lfYsyPHh*BHgyIZk)!=#EOq
zV~3_$=NJR~8VzNdDKQGroK2*A@}-OiLum;js6hu9bcsz_p)6SQ-z@{*<e{!XjQ?N>
zp{V-ZnBg*RwNhLt!5e-ES5{&MJjwNh=WexhXVE*fm0I*=6ox}X1zm_m#IP+Bt5z<+
zrI)Y4+2<^UoiMR~-za`|_a5v&Fs?IOvZ=*S*qp}<pw1s_=ES=*)+X^BpSXIV*@GEZ
zXXsKese{7U9%#ZgM-#_Pj(gSOub;4On;xx(t;yxoQxsaC*VP=7x;sOfg{QfhKqCy$
z2<K*T64n!zfYvP(y$63(Ym9x|u~K}`t}&E~b*x_BgZT?G8t~%EK;ME+^v-X`+)M>W
z2BuJ{H8eq`rX<x_G<EL@CRL{sTMGJwLL{A&IW{&%>xXz)N6R2KzaGzbVRUY?p>bZU
z^%dR67Q3!33DD;zMpAGm8U41-J<w-#;HUG|AriTaaJ>Q=(bU+n-~8jKpty3vQ^Q9G
zroMOY;+`8fF%`N;2WG9|p#r+*r?GN%Hx@0<!?sP0ySI1b(AkwmNXgh^wKysc<n;C<
zsUpvt>K5a~K2xM>nz`DR3ZevZE3vF8*F4WLJ~h)dT1>Tn#C85RwkOBFb0UgKIbkLY
zE_G37s}U=%HPgieQgO>j%cU#kTR;2d?c)(<|F{xx;u@-c@%p6IKb31c%VNChGcK(0
zkrKv6%gD7Sv0_CR`j>Sen{%4#Bh(dhGWIWM*iu}}(+sZSo7a&*bHes<A&AWcsUF>~
z0JlI$zu1ZhB!O$K+Lu;2f%bA}l1r<rzE#p5zkLkah)2wjz9E;l=~HXf)`~WCRE?zF
z?(W)oIQ!_>*Z(0_l#jnD@1(=gdI||<rVkeWY57vTeMc^HZrYFPRc08LX_~xTYT&^K
zhOl?f6c+U5u&loWU0o^I7T3x3mjA79q?w7*QLOfBW8bg&rshtwf}{lkHn(&u&ECpT
z#bl$suj^2oQV=siLpx2Ev&oF6Bc+SH<2O%;AL7RIF!0>*YAri4bNgs9-14Q9H8txb
z%^!_#pCOf=pM3G>=H;J%12glKqO3xgmT8zY)I)pYgzdC<q_JQ@2BTxHtW_e;4c@Yz
z%>b$SFsR<029c2yWIzak+yWcpLj{zkj==Lu+5jAf=~_fN-nXUIP_t^URYs}fxK`q;
zHN(CYHnc|TD8(b`%P8`wVHiA=$wGPC@L2r|XNHQ@&&e5ae-ejxAHSfav365$`h{Q1
zWzJs;)1d(dt`N2*Xr_S1kEod2fN7c1q=5^qZK%aQo-KWh5khckuc7Dk+5934!$%4z
zPaTFIl$)w2&L#Zn`fbFCiQBBu)9xmz{MapxjeDf%57c;}q_PQxB>i;=zcGrr#xFlq
z@PGD?5)H~SpS1avC;jgS9KSFwa>lvOpO<^#r_<@v+ofTIk}01ULCxG?rfltWjpf8?
zs^-`)(z%rHB|y#qH%;m`fNh${^$Cm|o<m`JKn8xfnaH6Ei{onOH#6m}+dNiF5gYhs
z)JtPTBI$-Q@<W}6R}hg`M%_Jpxa>dtua#iuH^O5^_vHR@hm*{J6HnW^NZV<*E`D`S
z_WA#sO0N}>!F_5oHq3+|96v6q*6QY1U_>z(5ns@tC(Qs-MJ61ZBtT$r-z<tVgU1;_
z#b2a~$d{Lt1#2da_4By+OD|oT7Zaa86G=amG9dR}n2I|xXu$Wz{F=Y>v*lpdryFu`
zZ(KrrBB@Ru@lQPKDOo3a2@J_phx3g8*_*rm!&agnkuZEtQ>R2y=!Coe<IFL>Pt1sS
ze+-%#BmstrM8ZVdA_D`vXHlFxDg(cyLCl!oaYikMMVg~@k0p%s{4@=jOXW+78cEp;
zWjdr{qF@Tu#{Tb?gNOdL9vym6qH#jSLu>GcIz==(<?C2QoqlE@+t%Sc<E>rUYu;xk
zmeI5_pBqMKh*Wd5WGoGFZrFq&i1^Kff7(LZLXJZ_XHY5}m7!PElRIKyv?&St*z~S6
z6hX6#d>JX~LZB8?Gf5TMQBXq7-TRA@yZz(!X#ZWIZteJWvZy}*b^c)M*BQ~4Zzo1%
zu70nRTmfY|zCnyI93f0gBbT)6jpl<f8~H8^oy!gE{P_%Ol|dPJWhnSMqjrq=G)$4E
z7itv~hSVisFe^;~l?=*g_(u*@y<MNE1drSjsHv&nPL5Mg_+S4;{IM9pk;!&Am%pha
zebt8&iPd1XBMo8Jg-BYausIhtNddx!g^kb6(Qd{)Kbl1tjmk!27EJj(*87z3r#~zZ
zhDt>tQ#?slgeezp<LFGq+d)MCzn&UBdb|+*)T@}^PmMp?`gKO6GFfZWOS{rne>9!i
zkYy&-gBo?yPC!@*VcBhb{+b*{_8moKwge?z)EiTj(3fH4g-QleaN!7=btnUP{;*$l
zANg!0*!B5FG_X5vM15)y{VBqL<CkzEBgkvY8mC{=p1Sh=+4Na!1$AJXG$O`y-9}CN
zegR6iwUf%xGY_4(o4tW3nw1szkz1<X!=J841NZ+Sjp?5-16r#Uksi|y+~JFsrmeI8
zye)a=Yi(n}0&qKql$8&r|Co#mFB}=Dc?Z8+_4j_W5gmO*>Mr0D&)Hf}Ey6zq8SvjS
zLXVEM*u2G#(YM~<sRfk&4`t<u7me@r)zk!aIQ_AW>C@}!_4Imr;ZJY<KN`x@QsgH6
zT>t<807*qoM6N<$f{9R0M-2)Z3IG5A4M|8uQUCw|fB*mhfCvTv006^2VaosjSg}b&
zK~#90?Y#%QWmR=Q{@wf3+wbdjdSfbe009*Q1QA7JZ^WP2jZvdXej&d^|4G!SiAIyy
zVxox}Yg8-<C?dVX3=G56H#6_OdA;0z&pl=D|7Y!e&U<exQIVl22e0?OJGY#B*4nFl
z*LSTAJas&EJas&EJas&EJas&EJas&32Ln_01DW-G=k>qr9ci97lYe>Y_&qonBSCXq
z`GP;WZv38m<Y^t}{sBGD8OIapcw(K+W4b>1lG~%ZD(Um2l*pkgcka`&=Xakx5}vVj
z<BRCuBqW|l$M2Z}uvpk62C?L(h4N@Af?oZ=hFt&V4I9CwWa6~#Yc4R5Hc2raZH4=7
zj@U2#J{*bQ0h@JX3)Z?VX{&oM5cBi%&BG5gF)~g6O2Q){{WeFUQ0J~&_PYL!HiE!u
zoO*h;d%#|{V%Xn%P+5p4h$Z;FPyjOXw9+}tSgQ*!efNodfB3<beH*d4J%y8(&0@;f
zg{yA6<y+sm?K|%tlY0;A_dGHoaZ(^ibg-VxrRVp&hV`d?!wBt-PtV|4ThDmc7w+Br
zN3kwGbv#zWr^94jg){p<{?J>`ZpuG-OVIp_FSV+l`hKgr?{oF4f6IM!IdrqU=@Va;
zFX(^%+ZNyZo0)2Qy}|YOy?)(g?{D7uHtGA{tT&rK4T9kF&6_{*PjUcjSJA&4%y>e$
z0{;83@@>}NamK($_no}@?VIFTyjFfmWHz4$cWyh}o6mOLDZkqeMdY3Frj51FedkaA
z<<Cxg^`}xu8MKmVMgQvWVGAoi5(3Z2pY^Qwyko_c#)fP|%JsHk^g@K3Kkc<${(E2Z
z(jT>>zb%rHdOf{QX9katGVtGh;rF(kIrxtUHZ6ZuXLwfFi2i`Nr))Qn%`!1O3Q@~N
znBUNcdb!_Zb;HeWTT^-ex2}Bi$1Z){Rav-(kiS|9R7fc$T;$A`FTdzbpZ(y|uV4KN
zvmxzMY{r*?u>k-s7jA^tfBd91pLyr2$Ik0G>v{BgdY_Quaq|g}zYRK$!ne?sJ7e%4
zA3kB(tNY~kz_(w?%olED5GE7<eK3OM0XY+R{wmJ5)Fs^75K;ps1n=|gS~>fbx4r+m
zKl<7iE}fJ0fRuoQ_49{`0W2Fld)3<Kz3k$Re|h1{-GS68X-}A2O=g}3hJL-y<h>BV
zod9!$X{7nwJx%k*uOFPe`ldZ!xO3m=Rr?#e@APFuB*E%qcddTs4t)VRa_;tl4?nPN
z)tlDIlOxZ4g)pDLjbm#H_{4+|d!{8af+5R*fjsyXD@~+leC~up!tCmUkQvWzl(OG@
z$A@lt?Uz1%-kfNJi4v#)kx4j6^LIY$MgRS(w`_XZn#~5%Yb*rFHH7T4IbQ*W<p8qe
z@c|4&iaUYU5M&q$X0y<WL>jXK^A9n+<Ii{f#}{{h;|el1zhx5g`<w-6;WMPot=)fl
z{g!1{tTRpu8}`d#U$Twk^c3);x)cYhfGHVT5kN89M1$k{*$6M`a!?;1K(0Cop3k^`
zx>$SOC;sA`&j!`2UjNlET~?A!r36Yqk^)P|JaJk3%eHQ;A+jsJe>Cu6<ZPau1TxbA
zn*gv%sUxEMf#4ue9tCFRIp#fxIV)_8IOf5zZp^j9{Y!ttV|m4XM~>venQUvvmES*o
z{gs#S&AcIBDedQP=Qt+~jEBG{rv*mmAVdpb0pm6YvNq6}1upFco{=_rd8Uj)W)_jV
z3{o=BDvhWA>kaSy<{Pj2;!9hI<kA$e&+f@xFu4Bm7oOes=JTGN+fqESh0qK=nd>lF
z`*KKgnO@S3-N57_V5AB*ZiLgjd)y!1W7odFclaM~9^3Q98FAns5Irte?QuPH^i0=C
z{?-T|eZt!O+dgsj`uD%x+2qvZYovSLDF&XE2ZRK^T9>$GTB22lh&+J#jFSm;Y@j_2
zbmxIr_XF#h$;(qyDCDORrB^~kcEg@Ml>LXx-}{OG_v3H9(`TWQ|5BVF&C>jtJuA1r
z`I3`9d&%2+w!xkDWIAWEt`&fYASd=h?k@>rB#rB@@3Q~y#}B{duG0NqXvtacQMr(h
z_{#kb1$~3*SN_G>>pt;;-1=ON{h@TvILp8#1%QRXZ6WYKGZN*RM9_qg4FDnIh6F4F
zNT+~e23Xz!ysjH4`UYC#qsX;SAWHXhDT@t0vOD|USA68dAGrIQf4<-f6!c39rvGST
zY3sw!dG58Z{lMz;;EsDTUoaUH5POb-4>{qtzt!u$=f^i}8g4!Cus(M!g2xLPd|cB&
zlUeL#TVL_M6T446nf`txz(^weZs)?6oU!u#A8-eAwdh6C-FAk7XB2=i0(J`Envy`>
zlkfwG$XAOJLI7a^_${E>1ZtiXBPEEh%>$t=U~~_nHrWlMd`KWX=!#{9+Mj;%ia)!2
z-KB3+!C-8?bYMu}4#&J~1b=bOHP89>zf|`ztCP!eNkpX@Fe|(rw{^LH`I9@JMZ)KC
z5sC!=c*4SuivlEq?vP#GAA0`_-uup1zT_JW2K&t~gcg3mKJ(l&SAF#B+5Y~T{ZhEA
zpJCw4f&`C%2P5D+^FqwjrD(LI2z`ktj1?f#w<rJtkD=i)R6StNJjB<lfRmQo?_7@h
z(SDev5@c=4O>ZmK-v9A8{L6)1&w4rK@0=$q7>J}$N-!g;t&e==C$AiPFlQs3_E8Od
zd9*YAuQye$+TXnM1_FM>k|NaOc|1M}z_bdiYwumty*}`tc47Cbe%3QU&;R=Ma(bPB
z%h#+vZSaFP6uLJw%uA)+_6&}*x&VhU+!<)$Pd0#t&k?j34_gc}1Q#LWG9)(u$N&gi
z5`GP+HzleKiCbqSzE+c>SQMD=UWNMMepquM<aopFep;sXkq^G%E88;L&k{l$bI!^d
zaE6`rp&dWDraWSqZE4hGxN~=rUpIXJmCD#Z{&Ii3U4Yj8r>!1*Nvhqm*Pfl_FFyIK
zKczrW7j1r3jb01iLQnf?1AqTufA2Y7>H=ZrFXVhnFAzxJhjriwvjUSfiFylYd6El{
zf%)LlXIk(flr@L~333a51Mn+A-2++;DQ+l9e7gyB^$3jhtb%uB0M;CX7?Jj-^Sc@!
z`?I&-y3*RZNm+te3F7DwKK$s%cZ__cHDhwCW~8s#SwAw?I=E-?*Z-a>0GUWyB?Yv(
z&%0##8>9AiUuFipKY8yNfBcO6$rngTV9Wnz9!W6-<@)xfp8t2p^1c_j?%4v_i#fMC
zfZ0&ud$SU^%?gwn40Vs8)dV6>3gJs30?-Y~P0}r7>T&1;ts2m(ki}r|Y7jq|lj3R*
z=v&3Hzk3y0hnK@HyF5Ay^BI>8djH>R|M=cEwyK-XIVn6rYURCS@9_6W53x|r<-|<~
zr@jU>gystTUMc`nreFC<*z7%LU-apxUD5AKxmF0V&g{RW)BCS4UjC!^o_G0IPs*P7
zv^-XH{`~1J=KAZ~-g(st{cl|7oEUn==fW(fftjYn&EvpO8ECW^8f4a6K&TXeLHJtW
zwE9JC0b~^4NFiF_lpeOqKyx0bG$g#b#CPT;ZfFVgZf4lgw;bWnAna0>N0TOA{ff=z
zpI!Q=4?F0|lJ(L`pap!SIlSY+9eH!l@Jf64-01g~D#sJ$c+Agc1qS=xanaL1^VWYj
z^?Ak#>pdyYGda)jD7;B<c3)`DTkiDU62>0jc*h5Cy8OnmYrnV%!RnxIMfQr1oVn(s
z?@4WOYkil)9m{c)ZHbl%_yoF9K&Do=q?IjX3!odNgFFJKz)$)Rh6Kd{f(i9JVG>+2
zDVPoL6krqqrwzzt03*Zr%R3piaA5SO0%z`>0qdRxxaSKP=|BF^)pz{+y?_7o2=#CQ
zC}Ip-+s}J(#x1VBXZ(jB4n^}Z$NC?4C^)$o1+(3K)tMK4_=?w`^!8I;v<#u!^rVPP
z#`i<Yg5cp1L`U|R(Rj1cewgQX@99LP6*TEHC}>KA-|1ZVs#BK#)q9-fZf)>oaK|l<
ziMm7(0ih#>Fx2Yi2pRczp@gmiJ}Jo83ktsjfKl`>nEH3p7%Ip`QrU4ZB_G23!8wPh
zbHe?l_-_XO+D?YfvpH^VbmHv24vgHK&FrxD!PmX;%(1!o&wu~WCtjmIoL0J&cyRV7
z-#qq;$X`k!`)!#>Pe==(QXVOAPS?3_yzXl+{Y+}pIKtYrCuLK>PT8#30cqwTj~)cS
zuM+OPvCaM4tH!_h{jptF)^T7o{uJf+v*xxFpT6qzJBou_YAY|7Ze`HG{)$AHk-~QX
zVNq$71WN*DT!au@t$N1clQocn%s<qMXG%^ae7ZLTxFqEu1+e0q&A>AfMmt~@06PU(
zS;k-0$&m2?d6mQ&ds=XcHE`Q+92&3YU;N3x`QwLbU;pPsVINQ7J|Pq!F?a>5Ep^f0
z$!|V&Aa(xfCs-G4zaVG2>my&djEk%b<Kbrb(EsG!E55exihIj9{>LINu7z*2-uAOr
zes;QV@M3T9GHJ5SoZmks5u~MvTp+Rl!If;)#b$zWse~-SLZ<vYLb)JxGWje{1DRmz
zZy8C!41jLRHab+j1sJ)2HtiCuG~-U1;l&+5Fb8!153qG8Ldt3)>oV`UeFw6C_|3O&
zp9}B0CsBf5WgS<h*LHCOe5iV0^0DR%J`NFyfexNeT{^JwRe$mBE&sOWoH<Xz6wzH-
z_wo<Se&HLV-@Zbh7+pMFcH>ByC-?mQ{p(l#(FtA848yK-n0eP2P_+Q*5^5)fFoB3K
z<k(#OG$m}k(#gb=GU&f0Sg=G10thnubTQO|B?YkJo2`|A=NUJOQW$y0tqg%gz&SY}
zJqs-RPl<schLjVD?yM1h;`Sfee|y`Tx&w^P|1yE9w2{s?GWoav?+41$)ykc3_~hSS
zkWk8h=dyr=HbqjI74yyi9J%dtfByHo-aLP>+l?al_wKa$wWB-Vt6zKU%2`$TKc8LO
zbH$dzNuf8eUGfJHNKtQSb1pqV)B(cw4Uci|F)lq->=9B${Sty|H!A9<{9ixT$^m*T
zK#CDt17#8DMsWfuiLZ)AKobyE#-kc#6oe}Pch-T?4u+jC<T#v%nDRLGO-ug56E5Tz
zEqm+tDe2Wq?AUdtYX<@%lK6xEvtRn$xA$c?ZE;r{(o~m-P>|m_1xRR9>Prdn;|y0%
z?D)5@{!eR{>1Ey9_jr3M7(c3COTyRbRGW3i`CIzm^M5kyt=gKiguVX=!(1iK-@W+O
zkdQS%*0rEygMraKDL{<$$xthTf`4hn3vC%x^iKue*czz6={^>|x{tuQ&%iteR7v5a
zkS!^^7I2^e)YbyyuVH*FVtlMF%_&bdE<fe9XAL+PzVa9K0nlY|P_!@WKl8GWeC)ih
zh|X2DZD)0^dS2hj=L?}b6@I6YK&1$hAwWZX{`!aidiLHG?gNwcTY#q2F_Q*+47BC8
zbzga1e%WAS<<o>cI?i!qO6ToS0}wSSPzP9zf!6?3r9dNAf))_96!4>0dvZ^!TdjU_
z2l`qo;V-?Z%mFYW2177z_<+#@jD{4v3BjtQY=CG;;e|jp0(wsY9=?cSw!tw}7PiSd
z8<%Z(>wg*O(D*=%6lRQe=dUk)!#A$`*SC!P*EKKx&hi(X<4bv}?QUA;efS?Px$dIg
z)6QqG*zbHbFtG*?mmd7yi#~ksU;SkGzP~vZC}CKcf5k@zdoSi~TY-vi@IAv?kb+9N
zB;*={tU_=SI$4Ej20ll^VqB$qu{l>jPbdYaRj*P*NmfCSWl*L*Vw{DH6CRLc1yoCL
zIk+1zqy&(XQrHn-kyU5{qy%&hb`!Y239O1Fwmny3auYCDWjI(7;rgy;@|D?VzD)lb
z{kuW|W=8%Ar>*k3-S+WXSl-LIaW9YNALPr=ovB>&KhOQ~hcCYTHude4ksN1t@Wg_p
zmgEg4Ys)@k@XOVer(Edy>m##N;%GwW`I74#UAb-_0Ac)1Nr;~yH}9MbE(WBCNSG$$
zWL6PMVN#hU(h)x?0gqR?&IA@OhT{M(7^?e$s4iir0jom_vmLN|0M<=u4blCW0*vZu
z@N;_@u1Ev_^c_HcQV72lg#{~>zTv<}Z@6~k-OpP3+i2aLo;~dupL)mU>rZ@fLxhDQ
z?A=r5p&Lzp^TEvSs~;Zwk8kez=|_e1<?jI}kb*<)7j?9(FOq?L`||Dq5javz&N4(~
z(oF_I@@j(1CSU~&S;^Ik^@9ku%XovXSp{%bF{<&aRZTYv0F}`Rgn(q6hh*Lt13w<~
z{8Z~$h9Q^$L{qW(P(LgnhZqdUfRzJC5v*<jt6#zy01Dk4543;}WdL7FEbj#l?BQmC
zsAjp|6Ex+7psM5$xT|*8P4D_Fp8uV#+pbRMXDUDVkD_?@)pwt}&pY@aK#1XEb36eQ
zfPzD9=v1dJ`AQWfqm@mEJPpPV9}d7QQ)PsXWGFDe3W1;*h;qpj^R)_Eo^LwYHsn?p
z!5AqJxDsj{=usNTBZ%0?3ogJDbFW-Q!tUWZ3#2RKbTACxI16vS0>fb3G)&mG1KV|B
z*sieiCbx<P%pyU>5%vcRn+g#wJhjZ1BQ1LRxY+lTISL!a&k@)-aNG3WA3wbNl(|(-
zNBi5pcgM-Y!LFV3@4uXa{yU)nafhz{pXS4;GB6$Vn3gN8k)u=B?fAz1uj*QT;@O2<
zSZ^^N$;hwQr6`vKpPKi~YQwiB3t(^qu9f!#pYyOKkTRH#?6p}rCb%O|NP|Nf07^0e
zrGUiKkl-dUep5hgMxa@aU|KF93<QBd&<cfDt$C7FU`&~&<=Cd{INZ%!D7Xer+1S9`
zq=9p{G(53sEPwYG@B1!AoJ*Tdlag`Bs=-w^diRG71jE5YI|v(~*F09j*U~u7AFsba
zOIr!|7akUKP;|Re-97!q-qnMh{agDx22Q9qoaY=E!+^og5goa;yxy?P*-9OLSVe#d
z_&B()CC2WIqDFCf$IG8*X3h-#?hxrS8LagTwOXtIDzBG91$@fvYqk(4P)IP&g;W-R
zh#X||J32IoG<#TL=*JCMoWp<x+pt8|ESp@+^Gv!OhLJ)TaEOTch9Ui~EU>H{7)SwU
zZ3wgfaQ$bz|GND{y})Gomlc5=wAmp-5uqAB9)%+Fc&=_;*T<rBRflV&(NpNn_YJP?
zUA}qq@^#Nx+rR3p!M=el#Y{KnD8LUh@LD!nfk3T19qv4|hhKfqr~R?Uj@L^*yDx|;
zM?*P38;bdcBx%wQnG;{$+<w|C=fORLNmC_Kp`<m=)e5Ivo-z#W^94naOg*RkJXHi$
zMnq|-5!VBZloW<-E6l<W5M6n0kBxtAd}!j+FU`2idyDCn7j~pKoZHv7`Gl^*GCOT&
z6vu3`egyCQ>eV;ic;L$~CE+vWR7mqQhj6KoTbQRXHa;HvdV%?930$x4nBce|Z}R9}
znQmv*s+C>qwr^Ut>DilCtvPG;;L2s4`A(Qd0nH$d*@}VDIq5%eNciPiBpNLxA6l5U
zWiCf=ab5VLvo^b5yzQ@ZM=ICee(V_-)RKvY82TYc<CUhB4#Aj7SfUO9rJ!OEMgJ<;
zBV`a&2d34pd_Sd!oH5c?1=>&r5X2WZ9R_A_7#wg-A-cO5pPnf_R2L82R&P9jsRq8K
zYI(zL*%a^XOWDO<irmYs$wLC8qsdjE^ZR*9oK}Ve`u*Q(22Vf*NPa-f+*wfEjFo1~
zy7~+2PF&Z!>D=|pHebAE;Dl`h-OG?k6%h#sHIHF*CiHd;iLhK3RJo%CXfjUlICIGc
zn>GW{wds-&=kCya&CFWMy^FSf@SneXZ*6|U`@xsB;1`=JBk7fx*#b8xY$V1mr<JS&
zL525|+1HUjqa0FwIJD`H0}nko1~9mUm13~c05=#+L%_Bq?=Ap`s6GHXSzUC}5zJh*
zA?B(L5BnCck;O86MNi7i<c0KG^`KmCp;8AL0e#(K)U$Xf%}Xxl(s<#Cr2q?|n=<Dv
zRt)wRx1PCX@Ra9nTygSq*R4LGy}Q^0$4#N>0du9u-!~cg<qFUWTBeNX>cM0TCa21q
zsdD;wG6#V+Otn~3+^joiX$3M={idBx_tmzqdH0vD+r8`hmOL_{S;6{<WMf_$Ef|(w
zy_9$*Le|13OQ5*{+V3kLr4&F3Gmcm2u|;KIDgZg)ro)73aJaU_ip~&2nUKy*m7N!_
zM^e9_mCn#@J^fi1ZhXx@pS|JCO&vK0hT)+R%woPiRhn&1>^U-h<gUXL!#j@7jy^bD
zn><p%Y)PULkh1^W)sC$N9mfQbkB<Uq;aj}T>9sF@!+B@D<o|BjvTdNVH~`0XK@^W#
zC8+Hi1)B914+CiuUlNkJs+W!c99r+h`y<RdUgZ>gsiw%d949Fnj%x=5_7G1H%tS3{
zn0-BG_*>`SeeJzte|`$!kx13$2qUjX5;h&cFyd4$$p8fTd=2lasGo!`<U$3IUdI#v
zZ|W3{s~CW(l)$nXPgzWCSnFZeKA%A4B}c+kioj5?Pwcqj6EE2QM{nxu8bB0=jd@>+
zlnvyw>-n;7mTxacXJ)d&ncQli5zSzxI*swUsmhU~!*@SCbl~QFBg1!(&W!AyZ_P~C
zFxQYWSjdrnnNs{V3Ss`{UAHM~OV?jL^p5wubxpqA7So5r#>}h~)k>2`0Zc^9Ri~!}
zPI(m;SF_N9SHe~IvA}hFq?Lf4BSnd`L6VJbzMxgk%~s@l8&<w_+xYzbe{;0?`M*rk
z7%77~Odm!{=?au}!Gf?=%4ftYpG&D}U`W_T8Wg9vfD?vbF&HjjkTTierU4XF4C~fc
zVBbLD;nJ(3E0-pE^5?90-+kw8ea)JP$<l$Tx@$ATb}a_SVwi14B2{L-GXde6wn*EK
z$YtA5$gDL_8$kZNZNd3gs(HT8swg*SF)=rdgNKjo+OzM_tp^Sqx@Bm5_<`Z_@S%Ck
z)}#!NQHtM&L-1=WK=LIW&iVgm-LhA#Y3mbnhadK`rBP;6tZhm|b=s=M9qFo@Bq1w<
zsl2ihqNZL^ycO5(RsB;-pHcOc9x5z|D{7Y-o)A-YNd5dMv`sTxIce?NuPpDr|Le7A
zhXPL`;dznaDZ&O!sg;1_N<pB)jVS<>qy&l~q*gzZLRITjeOAQ+Dt0i56G+jB1DNDe
z42I>MA(pSDny@8)ZU_YiyPm%4?{=QC>1BO04X*;Qw8?F*evhP<7Xu~(57qUNJQNb1
zFHxG8m?#1E8234BkxIEDn<<2u>~eFUGcq@yBeuNcIsO({^*2@PC5%r@;NXD+dmh}i
z|ECY^-gCq5;RAOZ3WkqHXg=bu(qCHvk|?!3weg}#B^3AF>Zf}<Gn^ShXkQ(_E*82H
zJgs<&=9L8?A<@bw{~jwq0{sfEqHS^ov~sy2X-RP|xWf9Slw>ft;%jk}`(ev27T0?l
z`ri4I9i#6Wh*-&!1pV_6gxM(jPf=uSw@CO#NFNKqY2Zg<R-`V`De;rispwzAa2U+A
zrhu6)g>xJmR(ddUEkv~V;((2QhlT#mvsZlN@YXe#xii&fgE7P9+@#TPN<k=o5f+26
z$zcgq%%Um}SrrO|Yzy$|u>szS1h3bmY1AW_(;W6*!?z48Ol8s{o9#kJah<*9taDDd
z?9$c=(rvzZW_}7k_{uFK|M-<JT(-Y)*Zq&g68r`hKx=y=7<(uT=U%X5M^!xUvJJ2d
z!3A~O&_Bk4CyPLCTU%Q)=SuJ*iXu({o{oaGT4}U>ae^Pwu?)%r$a|RJqRNEt(bAze
z(mlP$<beqMRRhm&pDx|`&%?D(y+OtLMhL@YJhTM387mVBSz-NB>4c%qZXxjFbbd-B
zVk#J;0U-`J6@c8db^|E}Y#gY^#Z%HQGIK;zTh@6}-}`p0TXC5==e0a8xJg5zbQzB$
zqQ~S)(iDeE;nQ{U^~f2M0##x#(^u1PCJ36UjRvFVxygahk}wTs*Q-=vlrYB`%stGv
zoK%==bH%_3dA#ZWtyoq*)PLV!-|&{smK>k`O_ku+E(a$cI@P@CGtKY-pFdi~eRq$c
zt=Eik{3NGg@r6~vU+nwUfheL|q;RiDX#6V_AtL%a6cBVH*8#>!kaiAm+8O5#CF3L=
z`bfH&6c4zDnW~+z^6jtB8Ygd!P^}4C=J|NlrlBq}U0BY@4JaD8jtR)rtMm`CLXc2m
zLD&@hX(*UJhg%H2MS<n*0`M$qHnr&t9iuCEO8?*O-?Zk{J+;6Wq2P7|1EHi6gQ28L
zg(J634JK60r!7w+2pN1IATmkIXS}IyfV#D)Aw{C$L(t=DONvTE3i`Vd68%7mCIhbv
zX^&1w_vm5E{qDb(OJnn0VNYhmX~|MOPJ94uu3KW{=z*!PypMA~eedlD{fU_hiajO?
zF6oWZL7lSnQV61B$AXt45(@$s0wE~_{TnHVBxMi?Ln#8n#w@@t0;vul)kQv;b7^r%
z!-#J-d=c91#r6K`-aq+)&DNe8FyBLpn<PYstO!N&ObS{}v~EfG$_l6+M2+~VV38iv
zYv}c9a9Z^$m9(`I3>2w!Yy-XxY4B+S-PtW&@4aW;s+Sa-Vap4dVMZ_!GLuKNb}a@o
z&){}a$ykbdQwUncBy=wTS|OAYP~%D?Rs>Heg;c3C3BO65NiBvZJ*QqvT~44jH&LYt
zCm91H6%YUY!x8gHb=s`>69<1I$^YgGkQ@wC-gp0QboQD(wq@AY|LDOmG<>A9go!7C
z0EwDVQSI|d0hF+n@RPq|!IRL{J&jnC2m`73c3w>}aFHKm$S&7PKxr9swB(2{B)P>~
zGUTh4UAC+{^MY$zvQDqzoP0P5(UMxQjQnjJ6fU_LDj;B-8=L|*dLK8^Oj`j*D?mCY
zQEX$VL@6#?Tm)fe+v@zg?p(L}b?aL~5+TT>6;J0QIEN(HQvlpv3A;^m2dkx6_|$qv
zzmIMqSp$expr7}Ba4%qJ1q{sqXa-WW==q3gg`twSVCuD!eoz+p@Beu)Y<SJ=!Py&c
zDf#;jYU?YGCk~*kfP^0n*FJx4KDBbf4pw^C-|(RM>}Q;cW<5ecT{sl*Mc|<%P)F*O
zEwzv-n$vNB8q6BkVU^PW<75dqC;Am}@9JfV-c?*!of6Uk4-PTjnv(=0z$Wv|EfplD
zr0Fl~yukJ`0hyM9xe`uFQUosyGma|=YaqWA*Zq^~AERl22IEOL5HWt~vu#ID4#^ia
z>7yLkTt=P%AKbET#W@uF`+nq`oV10&Wx_Hk^C$qRWk9-@TFfM>bAU(519hxYB&&b5
z4h~g}Lf48=F>+aSZ2*&;5?4u!Fe!C4r1~8c+E4&f95nEa@7^ya$LB;#91?ryzw!bd
zX0yk_0%%5yFUKYi%>LVR!K&G*(RuHV`}QK=Zc)U~LqRMYZ2^?|M`Gsny~+ea?H-hi
zplhR)BhD5=Z3RkW66MK=7Y2d;Z46yofZ|Hd^MfWgGC-wP#nI8j*gdq9kIoJYLD;YI
z-AoD4QmdH3qP*Ua+Q;jNd*QJ`e_Ptro3#3g{X>dCR=@__tVGL_s7ez)X`$8b!)^1W
z%Q$yU2<ms_jMK_zc_6itA-A3ZDTvA}M6E(*pK)I>9!Au`L<>USXjKQqYf#TK_#x*(
z$hdwE2m)|FknrQb$s!a7O#JB9eb~Kk%$K~9-Zk~_=lhtLeWaDdM_3Ec$W0}>>+1c}
z|M`J+-EX>b_d^G2nRM1&)ir?W@lXqrgimN*6lt>`ulxj|)d`gbjp%js1o>xj&?*|X
z3^XTz#<bw8PlTH4H9iUqAF5;S=p?+#G(=ceaB?Imk8~7(L&CIeoyHjsAyWF6>KH!e
z3DCi{uU8EqX$D4tV_H%sp|AkUmMRV*l2J`?_*9_`4L(~R1xvLdoyj1bqDYfa@d#EI
zL-7P4+XhVCPs%HGQz{iKg`n@{hLj?iDyp&}NsKkJecDYWXQr+Rt$fK~Gsat?K<{!3
z_wPN5yYD~fWm0DLp`%~?v#Qwf)1-OkaVZDS`B(qd=v?1Ly@ltVdiT9|d+D<?W;#<u
zdEQqmo`kMfw+4PRM}vI0<dolQc^fb-3vS8<SAia31|jCB8yFc2ab(;@UD$AzGoTv~
zDFa3}4O?`IsF6{eu#j8osyP`A;JB6)sT2u@a&W0zz0?n;W(?i9DLFW$oQ%*zD*R-~
zYA|IvNP#Q|f~U1Lq9m{(T;2=?j!fT;nR*(AQ9!oPjrN`%bo6Af>_nh*8PFKvXiSl{
zk7?+kiibH<3m~B?5x0>tRKaOv9o0bMWLty^k<d5+=S*3F&Tb0_#%A!N8+Z5_$H@*&
zef29-!8ITGZ8-$Lg#sk;Kp-ZXUq8<_Iu7SE+tRn(^;7ZmQ!nC{ZKKts?u<p#PxpGZ
zjtR%HVcIsgOj}_Fe&AugGKO+>9`$Aop6`QN`iyiQ8Lt<?we2|dl?K*q2Wr!f2%7B>
zfdfgM8X^EUsKVsIO_2gfk+m2yE)duf5v_3Q4kl%zg<|Lx$W5+X2GosKK3NT>e7|b|
zzQZ_0@#LE79H<e)m^)ykWwwcy;iDxh@MIfUDub@9L}`fO==DB$B~<KT8x}0r;!Id7
zK#RhNM`5H^KS9*0lEH}zr|6D4HC2TSg^F_FOSH9{m~51B?TvSau5G4A=dQkEr16!@
z6B#^C3b3dIp`5FZ)xUJAWxVAOc(!rp1J~JSZoUk>l|m4C3SPBorBMSMH&jf}3hS7!
zjH6PYK(#rAW~+iA3SbcU&NDE00i5R*bQ?7Tlt%(Q{9}$2UkVJIE_rF(K<H-$L9>$P
zGrBemR^e*(I!uj#bqTd6JU>Ovp@b$YI8npRbm0ss$bBFM&S|yVQmua1WZdOI!;}!I
zxD!Y)PJ>({=75=LFgFFu&BAHxL&pgPEI*50101-Km_#K6m0`$61tfOYaFB7@kW010
zu?tA2(xg8zT&@X=<RX>Dkc{e3+Cl{axvYh1)WkJ6-ySj^nN#Jvrw&#B{aFIuqrxD1
z6c|BT2|RJ+@X_j*p532+<#k7ACcJCz7&lK`aVljDX!v<}p@~X$8m(v!ftW@!7)2-=
zN+}p4;iX}i1sHUJi54J<1gc@;$QPp3jQGTEAbkh0@*IZglO%kPP(~L~(}5XSU`&W~
zN-A2nV`wuDY8<8BK}RnZ#RpIqI1Ygw<sJm5${ztpL<Y40hvEYQ9#f1*3dEtd6*{F1
zxGQ0#voH$n$S%*L|5PB;A#vb`T+9r6kWrmWihIyP%b!L$tO8|EyC|cGwB3nZx)a${
zFLG`tGENqz<*0E}#AMQ970Bf*nCSpl-+GJiqb6G35Du3<cT$8}^SAN)kFo+RW(Kur
z*N;Z$zx$R|y%&7y@=LZgPTMeGlfUz14Tpxuuy10N@7#Yt92}WMrAnn<8@8Q7#xY^q
zj<OEKzSD+L@8?5~ny@-rg*3!z<Srn;8dz~ALv@x0JV+5%Iii*g!_I*GKCLdtWJr^6
z9UvqnpdzlxxIyMe)fjcvP*QB5YX6e51)d@dfieREoGG$*Bq9?CIMKIALRlDT6K1Xm
zw<m|5lNtIq>+_n}B@nd~Y$pWyFICVWWJxGGvXFH&!^5byc4NHM0*8Z?)rE}Hjhx$y
zLUtLl=}tIS7HP{yeWr{D58i`@sEVL<)IB`^=?yK6k0+f|kH+yRDL`^UuDN>P?5Drt
zdG8F}T!G&*!r_=eu>kb0-heG9L0o=W3!XoRqtg@Ex%)77>>bAb;R@zTbrlGu(;1{(
z3zkViouPv!x|k885iV%W0z<a}n_mF*p3cyiC*VMe$m6ixG<O`S%C9L4BID>H3{UB)
zARvU1hDS)s|Ce+D6JAfqBdvUsno?Bct$eZSIyQ*G3$#ejtu(A`N|>E#6gM!w@-(14
z4UF6ggbf-@p^9PZKLv-Y0z*<mpd7@2rAP}LLD)p8xd&tOJJdYG4DZ15u5N7Kv<WAy
zPoc#;OgAUPd+r`_=lQkIY>1(KkJie66cu1$ZV%tu_s;J<|HAiPJXbfp@wvdXC^KWg
z^bBywmWpJN&zR^c_Mx-ThfB^q8Lxa!3(a62M<$Qr{ymep_n{IF9<E`2o<7k;D#MYc
zQW<$|YVPzHDnk;7?+2EX6*z@s?mo$>gV%O!#oS5Rj1-S&9EmW-_9>84UWJ&!RClCI
zLlS5dmwqYgw;*hjahrgqC9UEF7)2bM6o5G{>~@CSN`__INt1wsHv#^<?nI7@8JeX+
z6+tR<tI88sEo!YuqS0s~B-Glru&lEmTh?^o^i%tA@|JdN+)zMUR~jmE<sAqO6JPk!
zE%?j#-O!}=$47gb_-{`NRVQS!b)9ed%thy3d2z$zwU!sUrfF(DjSDZbr7C<V)dZ>~
zfe}LM93Yc6(3a`NU`H=5e-7}bKd528I*;84XK=^PGIs2p!1z>%uxcY!)Fz&g!r46$
ziYq0SpUMzam?Bj>Sz;wZ?e#$lL-l|ZMfZW88WPdsp_u}jxdqb%mo|h+pbp)e5;mvR
zFV%%nEOC0h2_6~{zLcEj4CLCu2Tp=0^h&Y+7RKvGW9m8eqR|jSC2xk%rwL^(w4xeB
zR7Tneu%auEE!zih+WIWEZ|%W`b?rzMsD_<_KX0QlX5+|%7DzL#tbw#E`4w+?p5I>V
zxa*DY{G$`+<pU4=s=*VFkpd*bmsnAF?ME+p=HI^FZ`qYbBT5_0pm{u;d?*D{%0}>b
z0!P3Qc;G>eA)s2gD^bh(iafn*7$~OG=*wks(u!rc;G`BpS;CR&5_Sw7#a+85v2Qew
z@<ah{I)lS|IZika=sratC`qIpAZ;+%MC7FS&XNddb$c3dixj$|r-i7f#ZpV1D+aI$
zb-v`X=)J0VM988lAu7O#69(^eNVE+AJ?j~tJ}5<LpM(*aYU)_%hiKMX@XBSda31;0
z9M*1V;e=v0wht`BY1`YdvO5L4kO3kWb5jNm?X*#DxbQ=A3#K}!m=gikAa}%hVI&Zj
zopWlV`o4eM`N!}3<CQf$eB{wmf=8?Xn$9fHmwxHHo_*HeyweZdN~0#yOwxQNNeo{E
zJ_S-bvR39)Pd`wUEY+PIGVV7S%&G=oQdugB2+Vr|2TKwe!$7Cog~9eNy!fmTuX%PA
zGmQ#%A05YzAqzWq88}kUqw|?r6izY0X8_X{)XA%>eui%JBr{JSgyQ{$B*?{z5R2(!
zWSvO(G(Mh?x+FwU?4<a$O(Ee90@)K8ye7xke$JZ}pf*CY|EtKcNvvNzk5jf;ICc99
zY}&L91Iu$X77y6d!tgyF9^7MMYR*DEGKs*T2g@lb5NH&sp%y$)PD4;8l6JxC7UTYR
zBwlmr+1~Wb`|kP6e|gv15M$*>LkS+C0>l%$tczcD;TeDbQEs$Xs^u`941`h&LM<6k
zle!Sm%AsJ(Bq|mmp9u+53c&~?r$$T~*9sVAoyWTwAj|<C1g58fy;BC-oi_Al+i-ec
zhzmA(@I(cNrl)ae|0E97931g;aAxyx`YaXO(HIw5BbEh4`HcHg7m^Y#AQBc(9H$W^
zpcFutcNAuzCdH6NA;7T>Fi!xg^?*;^R1;#TgiUS>ThEu+w$Z@mE!`L#SOa8II^d)p
z&xU591{+ei`$s8^k1$nd2z{Z3R>Y(1h$=?4Ay^6qhagt7;<XDXXnG!&ec*dh`0kfo
z(mpm>x%cDWc+Vz@vj5vE!6Rr5(@|*7IQ{I4w}1MUVqtTw)@ZrOc4;a;p{z%}R679j
z#|D{Z3bg1dD=?U_(by;u6--T#iCqQ}GpWs+^7#~$GGvPkZc4&7Bpks|Fd4eq82bA|
z<a&L;u48ttfuo~MOf@*1m7Ngl@@QmjH9f?ir9MA}<ftGziK7@<CzT3H%J7itVCX0s
zC;}J)aQiq=-qQk`@R4scFhB2OZPviX9*&J`EesB(ft;g#9O1=&Ol*<F{-Od8P_F~6
zrbKxTxcc)N9#)O1Ds)!O3nD376HCaB3s$5It_h?Rw9U9<Nc5+r-}}sF`qh8-k5_%?
zo)5o}u^?uP%f~_iwD29QUHR-&K6j|U_pC;#)G!Sq&c~;auxwTOMyhFWP9`<kQ_rHx
z8~L~e;j4lgA-VBuq)<MPLTLrYsKOAp97*lpN(snSWJy@$^EpG_pf+rY&H;&3UlW4Y
zF*oC5YPgD{C19qj6UK@nItnftvjSd|PAg_8Q_z<&6my3rfl*B$)o7t~q=9=LEMxj%
z4=W=JTTjbl!+Hz-eJ-p#jU+S3JW+u_%^D_-dBhmJh@nQpt^m~r&}>jGfuYp`3I*W)
z?+Q!})BXesj@D!qvOWoKf$N?IWsPXj#K4pqRzU<62CV9WXKtFyzTl7l`eSz;`L{nI
zq*ZHyJe~@W(87zEbJl$P@Wu_V%$7=Zk}d&Uf@<nXbx+j@sQN{gfP}9pHxyGTA(OsP
zT#%SvV(lmeAm6L_!*K+zT6^NhT$gjnf{+QNnmzf)bQVZwfLw}p?Es3VL`Szo+cF8>
z6(B+r)B9&|`?W2Mb+u#Nvj@N<1A!-Cr8%g|R&IEhohhR}=0S`#&{hMMr&3tm;b2Wy
z3U<mtDX<ZoXrOBq5KQT+mKHeFh<Oq=;d8XwN$A9Cijr~kWOyh`Nild65<9QaR*hnz
zgo>uXr&tk4$YyK}==YLEprWJ08FwjGgv7>`vN4<)$-nSj?|8*X?dq>;B@o9;0TO)D
zU|YKW@AXeR`LE8a)?1!rG<0Keh{-~EH?ah<0wfuOCSh>3s)>lBel*drXw@&cf@CvA
z4aI6}pvz8*-$#v_6sgC+jZFkfn<1T%AZ5tqfkKKQ1Bv#uK+l#Y_S{;>L$`SN{7)VL
zUk|+FV;3sq=kVQA2#(g_k5#d};9~RIcC2Vm!=-YfG%;S~*gqz4Xqr(UAdyn=y0<e#
z0VBR1s&$}Jmx}P=`%Hm3B<L{E1tf(%B=@T3!#FAGeczJssZeCb3ZPfLA{uM9aC}qG
zGZmMpT}=$e6--TmZ78s96Z5V;d{_30kGy$9Q$Dosk+6b)eFcC-k9*lWFFND1AB&K!
zg~E5W)-3@imbOd9E<mm4nE$WauT^t~ny;?du_RFC7SvD&VpYXc#9{?diW9SFVgiQ-
zS9EqkCeo(t$<(9|Wf^inz8%=G)x=$&KZ?6<I)EE0*CUl%jh=KTa{WH0>mkCCEZ+K}
zGjZ9A^D57)j7JzcEOBUBVxqw?*Mge-n=swVGZN3dNMh6J1|}yYJdaj6@g1~~Bcj2p
zRj<n5B4I=;rgYrllq)cP^e%zXT@o~KlB|GXaH@jG3a*1eQUsOG((j~RMT!SF<0?%x
zrEn~8Q%JG(Btv}QTVJYu?3#Bi2TC-(=r?i&=C5!1yE;x<^R|y!R<YJ<RBdkAabw4#
z&MkEIB(w0y!xHu$@25f|z!EK`u3gowt=hjBCpHfScnVb3T^lj)L_fFmP_Bcvdm*BQ
z?k5z~b4Zqe`T%{J;5lI8mhVmAj=Sb@OX-^k?9F)2b6$%VUI?sf^KkDy5`Xt!H{;4r
ze-FO(LTufd#T`3=dGgnitHzC>B~=Z9wv{0^kMtOJ+##@hqeP>o20kGS75P;uf#RJi
zp)YnrB|Q=edPmlxxQt<BHxXlr7eOMA*No!PGtj28x`~E3VY+9I=<UhGAk{7xGFkw9
z&qFeN)44C{ylKa+AGvqpbAR-kB89(_5|$YF?$k40H#l&Xpq_n$mTWRoCAs~qloH=h
zTshh#Kpim`n}ZV>Bk2yJTNr9~EYY5bQl>bCF}+L?Of{)S`&1G}+<g=huoM#Qig@=x
zy#nMqOiWFd@cnNd#>17{G107}x9xNs9Sd>KjF0_U7eCx<qUpC#;kV<zzqL<U1YuKP
z2>4}*)|}oqz^?<o7pJHOQ~)=2hz1L2W-oO&M{52MQ-ajNn5M>S)32Le8TmYdlRaWP
zGq`yoh*Gu?Go&eNpuQ3MJONG=Fv=iWzS`%A(_^|3S+qeEaz!R(n6C-DS+*N5I_WiU
z<LK&4zW-5EfF#H4%$)k7bUH)rFt%hmR8#-a?jEu9^_DN%-!C=`kOD6bjaVF<sTdHt
z?{8tx9mRj+6fsi^Cao$GzUCMb!BqcEdGo@)KSECm4??0(t5#H`G7+x&`hLuKN3eV5
zIux_(U^_X~=L2{p1J`~h!Yw!L7q#*XO`5{KvAb}`Z8PZa<!DwU0#7Q1B(kPLch&dk
zl^q2fhjt59;~~qSp?@5c1tlY1v~p`D*9shG9tK0choR+1iY!YE>A;T=ghJmGZ%`|L
z7;51Yom|nwgZLH#HD9X0bFwT&KEFle*+~~HU9^vi0>lSvdNrqBtBJNA2NnV3gsaKL
zl5J8oSy=f>^Ais2F(0K-fLJjIGfct<^}O0tLMuR^lt8aa8W^F*!qKXa6+;OnzQ{r_
z9{7^?t}^kHAML}~(RqwEZ&uM_%IQ-KVxoJ|d-gum0%J|ZMUc`)h3~*kw~itVd{sYC
zuyI0CRX4IWq!hYwbaaRU!C0`dd0%{O91l?ScYy+@K0`#2YH<@}InrIayNJFg5D|hX
zL_pN}L;)l{FX6{KoO%jVlC<)vk%U)U0?mkn<t$Y5z`a9MC2lSD=RC?WfGqpFzB4kk
z@1*v=o<^~wn9cDNyoNxlr8|5U{XiTDEO8O4?K|cIE(}13Q$pQbee99^fRKbwu&%1l
z>l8vo9F#SXuhiW~f{LuPa(V_V>_0e(`|lk_3wtr;4WTW2A}k}PI0ckB)T<oT5-n+8
zDV}Mj(TEOWcxn%By=5iVtm($|v??5^o<w!Ni;QlfXY<kw!`!5RlQ-0kBzi)MK4%^I
zYkK$6*%?ba`-$V1>Ew#M>W7i)qSn@fzK(`t=*l6*LVA|9nrol}LB}y*q_~2&>+o=3
zYC1f4YYBUf{FFE3p6iaif{%&<=wr^m;X_AeHon1cJ%3<)Y^2uKSv1?by3Inis7zt2
z5g`aj?KR~_VFP3m=&>#f9up@ln5iW$D~>4_{?=Dtvv?`sB1NL8m@bk6SXEP(R53y}
zXMnncZ}`arYK-TR$_;RwJWL}Gi+Z#a1C*)G8#1?ocJq`Jb?Y{us=OaN9@vWID~oVk
z6MjtxaH?jZnn)M=@I~M=K6Ws~hBFK_8#*YB;;5hE<%ANS^t}HpP)EYGG8~x>hS{Sb
zs3$@D5weKnWg~UXR1+ypKucM0X>h0|Pz`H1G(9J#=jX%H%siU4Al>jsaJ2cQ7x{AP
zH>QXG8VaC)h(OglSo!RRS}^wSeVGei7Wo61o|^Gf8QbsZ=(G!kPM*$XRaLCnh-h#l
z6$Z3RNV-Awc3=zJ#w8d6aem?fN@`Wo-xO3W7?dQkCbTVSKGK}NIIa}Pwp+OQmYwjb
z4b1pAqs1yHn44f2Sy<HRNf8*)$BEdfsOf4f7#O#eg{ZZLFh27z9^TV~<;(g}sfG(a
zU0VR<ZWP)=LnOwA1=gMxZyu>!L^1<eVIMK?cM%m`RQx#Tji6fUrbdW5rYYi#>eZyE
zrU~1zh@i>^d{Ju7U}j`m%+5`R^#;vhh+G*3b|5BDYCUwzRP#q~sYeHPJra)KuW13a
z5=5A<k2Sye@;UG3zwU6)_|uN`(_hbmb@oWPjuAH0NN02C>h3XfxlW$Rr&aXa@&p1I
zDwI&=_sL~gVhtok$jV4-TanBQUg#K(y^ETksD?}E_mehJQ)y?Ph5d(yap=G(1RKG$
z{~%naO9|iPt}^p9OVBX6iYwGifOsT`!EA8mAY=i`(Y<*1;kD@P?||c4s3!wEi8vCw
z0eY`tK$K@Wug*uX(-!=e9(Jj6{slLuunfHmNvuQ*8bEHq2MWDZgZ5RdWLYj!DGR0<
zqS2~hq%?!t=o~8L3hMP5%^9#c(?YNN`|q7^J^Z;!u;+WejGa?(CSCOIlQ*_)b7J$2
zZQHi3i6`bn6Wg|p2`08}8z<j6|C@7j>Qvu!SFh^cz4z+cUAx!wd$O=~0KH%0{a*;^
zhDtEUn@QnM1a^e}1D<!QPw3}%zujBEO9r^sI7rTi70ciUaBdr3_#AA`#C7VxQpIin
z7gJJ`Il_9>Lte3edT_Tekw(eYE9(oSs)!M7j&B*1z};w*5sO(NPldpqHa-F~hFG<`
zV2c0zXI?&g+QL#Rt3eWfFOb4NsHe(T{62#@o0=~4gD-I978#N7bf7-StaP!gj7y!z
z478D=z*udYRW?o>o3Bqf=oBEQ4^=e(o~N5U47scM^BroERuQ@+WNj>Aybw8zkoFUN
zSX!l2ovu`k4*CQ0XQ})oIC2`0V)?1d+i^dNJzy)QyYTf`*-Fsa{hI6;LHAuaNZD(%
z=VapU^M`@ca(xQ7&0R&*l#~PAsNF`xq%s#LJJ^U@{0~zl)$y645FtD^WstIPQVOZ$
zMTquR81ZV7ZIb{~z9})fNKn&NF8j6@f6?wZt1HAtO&FR2R{amHG;{fX-pM#|pqQr$
zl83WQ=6!~kvSh*Lnqu7RK_cPmxh*wtsb;~C;Bz=~eE&rG7nc_YB}4iUZqnd}TO<0O
z!9Vp`7!>S~^Gjl=Pt#xVYiJ#>k1wbv{}Q7Lh%Sei{&@a}@5>x?*@(8v;(C?!x!9h{
z<-M(`MGtZvCt=V#z03;zFHs^)`!k^@{if#2(Btl9so89iU#0hf^<SWr9KK6ZLv0q=
zC<dIR!<BgV4CtD4*`a)o6bAbSN9sICVxN-C4VatJ0~a?%h;T`$-`k^!vn@V};7_eD
zlA(?gE0@MstHcsBQ&lo)fYup|!M+>DC(sp~>GG!-B~^tI0+D!`FRXa%qfxF0MW@ve
zS)`r{zTgZ9T2vmJoFfxL0h8)X3Fs;IOO(!Z*-*4Gq&LHTptx8+ofKO+;3OK@B@m`;
z#|WMyMy-Qv+0U*b+2O_KGpTNGh{!3YKJ4#~_ea8}biZH*I}!gIXamX_ykWzW<FVN{
zdtp4h1`0;0+Yr%+EjnX8@IKEbyC&QmFXAJC^lL~ygQ=7u{z{3TUpdua0TFW+z&{;>
zDs;*}?V(AnA>(-*^k>@~ZEqoSLDs;Uo_Vq}_jrqGHVcnN$i-W=Fa3Mz1TL4%w{#~Y
zS#(ueic29c6qj}f5g+GN!oq`7c1~;pOSJ_#(eTQ%7`ctE262-bN)k&7be9`Ub)7U8
zRPGCU?~mjJpo+(gh?$6alkhj!X+zbTV&tJ=CL%src=Ae6<sXq>7EH_b{ZlJU4sM>M
z?q#0$-~ssJLk!vwr%BBSP~1M;^aWu0Y;oR9LDJt+iPosb1qja5&@FPav>-FyQS@8t
zW{<prDzq|mr^8(BNfBWoV@{zuupn}~F38yx<d*ksc_u=ma(_C2dgvrvf1#QJ0;PDW
z%O&ib>=0=BBkR0ZWu=U7ar98X1p^nHq?aP%BeC9QV6X^8R;@Xmb`naF1+A)*4+gTY
z#1Z;xsVpc#Fq?{g%`4`GARpDga%*U<3r*A|#`$xy?+J4ltd7(kN6S=&1D~$w8KgR0
ze03~Oj%(Rh87T)7!Md8;zGD<W+-ip>p<r~4js7|!IS&L?mi%=-_ehxy0tY{6NZ0f)
zVXG1mpoidYPKC=Ddlci&^6FgJM~AbXz{?IiBKrWOt0J&kV0$8`jo@G$-4|boW*up5
ztRic3TMIiY{}W!8wcwqX#2<zWC60Jbh#LOeSZbRgM5q8ha)e?>OodwF$>?4Yk7t!v
z>HJuv2>nDz{cqt8N>-Zaf;2{f2?f0E>B!&Okfj;klzIyPEhe?mj*zK8@D%f-iDN7o
zL`JQ(ZNc#D<C<2L<I9>oLw)-LA#JEE*W`+U6m^!SI$B)nnHl%<u&2KWDcS<<4wIcF
zaY`3!ota{|zj8CUGbqir!Kmdhl(N%DBHX}FY;oI+@m5!(j&&{#-39v9w$>xdZkPin
zO**~lY+FEr*J$He5nkW%;mOF70g8}@mfZ;~xwM}$0H8>wv3)SysjM@xDfF7PNS7OS
z`ZY1(I!&GTN96J4sRj;wk!jN@{NY4FT6#uryQ*L@;tvtK>`Ewv0BI({1$<P8w|cgW
zqN{~m?37vpy13C2sr}}5NY}H8;<~CeR2s~5q2SZR5eNPAf^v{33n|Ja#h>!&nDo40
z(=~l@-@~qQaYQNP@(B|%RyygE%p!V64IyFF4;()i)kY-Fa**({hcuC}J?~s9i6Jpu
zAtV=P*6KkkPEu|YNcSPb6nF`klN{K^Q3EqnjtMR{*F6BB^OTGv{?rAbvgdN?OG6rt
ztdQA{gPz-rq4isDSQ{|H#TgcE1Rz!Aiq0h}TI2Tz_TWGUsPpZJYJk!RD5l%?Q|mkX
zsS-=q!J_~dkjL0alLpxB(6itn?{F#|8n&@X`ZKnT$Znxq29w4BGq&~vOqK^_RHGQC
z(QLX}fkf=vZ|ouYQUe5i^HWm-^q0LXF39~F<BCzV)SSb+998(b1*L!6nXIXOSWCrB
zwh@~iGH4HT7Zk3j;D9x(p0Jb;-;Q_=dTr!m<VllmEr<wYhP9<JqM*W%a45{X@WpBt
zH>zipg`P<CJ*B7yeb(1Q(HV>eFc#Yqbn^~zM|@P_q>>{Dv8Rg2N{K6?iFlM~zdpd>
zw3fszc*3irqaIr+%EV60w{!nRM5J8r*Mf}YiE}Ak@ehGmyHeYwi1nelf$EGFyGTFJ
zlM;rwi7KHbz$YUuR?H|}(_h@m>I6X5N2;?0QCkWn_9G|EohlV4BL?$IU#BW<rwUyX
z|DY#B7;v_NS6xS{Okz6#s20T*)*QVki8SXmhs&1*kZTlCh9^#Y$gvH;upP8kyGZVe
zEHlYMrRGS`E|htF+*`q|0mxIniH*rE&~v+%s>0dM^rrQg>?qF0tQg7!j_Hw|cC?2I
zEW~Ri(nb^cpTR>3#|qg$OyGZcsO|p%3p190waDR(kX{(*>te+ws3x&=ZdJ#nDUoBB
zdNm?2S_X=~wacKof`I;%@=Iewoj9MLrg_Tq@SAxDTZM~$4~WgoTAgU9jb`J#i1yA_
zdMzQf*Yhgefsc+1W!{rD10+Kzg5c1e8OHb1F4p>|%l#|qKeL)AxBxA!qn1yS`k@0S
zkj+=Mhc7MG2PUY<2eG!p#)T*N{;y<b6(Y<3)TP$RgpraGx7=!w!|GS>?zyS7S|%Go
zrFE`8g?YcQ?oHteYlQTcQ(j0x2~~J=EL*8St*sgFp@lV9Z2)FCVyYsY%Z#Dm$P^i>
z+%u?9E<zD_f+flzI^DPPMTybEO>ThQa0=WurtGg*HArA_&TvbiNxk%Wgh_WsSWuF0
zhSd{s<eGKxm}FgI3N`ds-nkH}1uza@12z|z;NeLda)>*Y(4&S4E-3k%6tx*VUR7n#
zqf{4gqEp@dx|Wu<im)cTcY22Sts~WO>vmXX?k@9?jxjcmpXTZei}4PA6!%MP1L@LM
zWddsF+6LwOHUVZ@=WQ8cSf|E~*T(#?xs`{z`5V%3ZHQ56TIC@b=t!fr$5}%53Be&^
z_erVC<mruBjI$ECe}Ph8$X4J68Xe{xc2oQ`P)=0~EyTt$RP|12+<b7~$>JWjK)cY^
zf|QaLYOQL9_nuH%=mN1%D|h*gE)j#z0#UDpg(S!nau)C^Rn#hhXb_mx{3m!|0BL7?
zMvwYXy^q+2EJ)l9@#V4eP?Xx9SP2>1GM7ybiL6i68gf!8m*`_(8H9!`6+T#hnL;9w
zhT^YY5+yD>Zm6l@MLR>K_FC*oBrW23&cJm7ZHC);PQz#+i}gYROGrY^4?tg0Av|nC
zfkLr9pgbStJ@cm-2A0OxthKPOz&PNzMM$I%w^f;uxpcSE#7jsdc#Pm*APD<ama@1^
z(XT>~gwg^S+*`xk8F^Iao9o~=r;nH%HE)MZEqpFtF!5M{Tuu2ESu9z___2g$7t0A0
znXwu8e9twXA%0?g;*vT?NNWVVl=f?^BhXPQ3EVW0BW59`g<%>JY@GC=zp@Z?8m{?W
z!M0@KN1?P#XQwpz9=Q?LO_4ifX87v{!{_7|@OHh<&b5`Mv)EdIU%L@Ac}l|CG3d~^
z=F%Ib?Gl{MQ|-)hcN0nCXhrbjW-jbLo}fJuGK;ji1=)_)r)<y+%`~}1dLe4mWyxzL
zk9TZgi1_^(7#R4g0oW~DcW&6pkGS)i;vLbhKc&Emh1hsBF#7RX!G3f6HV!lYq)d(6
zMFU`!nIkI&|Bz@p$-him;q`wTC1~*jqq!|X)}0=hdwxFmMR<FZGj#3@d7OfWgyfl7
z_@mL}VT`6Uk!rWH+*yQ0WqaPcFZvyn%;a2H<^iY34+_3<s`dwYcEP%&QDx`FH3|xZ
zaetGUK+oxZk3iH!nC^a)R3->FPe6p~+^G=R!3J%qk|r!ywznBBE%Q&`Qum_*t#}=b
zXMS(ejIcdzHE2=(Js(UCeabi6@GFRmoK}P-IcL65X(-$j+LD|eLHbF#6mn2Pz<<O^
z8mvH4k%Ig)sv76t@M7hqdWE}jXLNzY5i`4%cwU-#Kmf0|&uaWwo3*xj0cI&;Zgw_6
zz0!JMR1!z9+naQ%Y2o2li)R#PhN30mw}=~@`Md&0@<v}YicgF^#-^?ns%za%wWb9r
zcX~$Xk25Rtl5oIp?_fnRBCAXIC&RL7B=-GE>4{`eMS5Y7l!D@{Kpfga^3QzAloPpA
zHo-uYzY}HeVig7$$q^XfXb-(Ybnuy;^)!KjmbCXN5vWcaz<cYZI;YjL3T957q0wV{
zO3HC+4ZdV)6E0s*ajoFKPj~dS*<U}--cYoE1O@d0yrJl@`Dc;Y?Bzq(%8yj(K#Hc>
zej5e}<(3C9ANPdR%R{7vh;=4Mj~aKXD?lhd3epG+pJ?&v3uJFdd`W<oj4OuZsdKc!
zXn%y|Y4E7wu&0{^-QXutxFMG}PsBvlS!=wdy-7|(z|!nn&TLzb$K<%e5*Gjsp2V7M
zoSCiMT3U`2=?`nIzr9lC%w(e{?_S!9x%k+Mj@K*H-HbL?1=tnh1;V8VDcMJcF3h|+
z5sSw=%Qr|Vt?8F<AU1b)x8Uk>wS#|QlVZwyT8(`BNDhJ)LuO*4Hnn2KZW@<sL-|Gb
zlO`WXzLKJXD2hEb5{>Ul#jnJT*`H>ISs@Q__hHT#lg>kp{UfC(CdEBVk^>FVKm?Gg
zS<|9Je0yPacznUf;%AF~0eK-`d1f{f#Pj0&>-!MDv!QR_6h=jbJzC+f$;PVwpLVL!
zs`3`Jsp@!Ux4}!zrreRgb%XrWlS+rFjS;(T6hfz@$3I(3NSeFg(kF}s_k?f0t46zZ
z%wS+LB@>c%1D4Xj(qA-NZ+^*_){JqN(vxw6_WyY}T&e4uX-Kk)Emg>r5uKMwRy@wx
z)&eRcM3`0xzkx|IKnwxkWI^Tq?g%qtq@s!bNN6Y!PC%~yTg)E1H6y^rwj4OOb;~mp
zHo5_@a>A^R-k*t;MiNGPElK8dM=;a<enmoi%;4CF^11r3{f&wV7!d0(Z)S7C?I4yc
z`Z0b={_V*XPVSkoI)Hh6CG}j2GCJ68S*RIcF3S{6)ioljF$MwglWj8g5gl3#XhM~(
zi%E<gqcy&=;HJz%9DrD<xd}1C!OX)G_wvFM7FO)&>WWA}fCJBPCaj@>xUm7TkSfMx
zO)oDur2Lzop^B!DLHzhNLZbeMm6*Y?@+_i04d}r}R24P-;}hJPM#7bPkief7LYJ;*
z0yy!Vv{393l3y9ZbGds>+4mfSFGbSgCj4Z=8MF!%brH@u<w~k{+yxd|2@vtu{n}PL
zKH1Nhz#KzjT9v9?fVn$$mxipN+AoMy1oyn29t4#+40xjS;dNVry*;zPf9Dmc3;!)`
z#ddd-vRFYGVVC*$?Uz)%`$$=d)_7MT%Qnpo3Z+&L(mfiYa+1^OM6oqv{M(fU+h|3F
z)7HvLo6Dq^MS!5}QPxULYbnpsu?&(HV01^PoiCBM9DlQ9kXpCM+pOfAROVe#=Exl;
zN!&2)PoeB27NxURy)kV7>CWO+zALuGtY+ybQfA#uj_kX0{k62V5xaQ_pgrITQxjM0
z`)iBP(BOv8!xp-^Nvd9R8fG>(vzW8R;g$!g#$P7h^Y31Py-2zYo~BQjxH>fZ{`!Q0
z@PWpOTT<e2l~bijBH&!v{fgP1WD%aUl`1E3FlMBaY7u7Prl3*UCvJbHJ+DP9xltnf
zv`E!r+^S(geC8)sDrM3VVcZ_dIreP@QqZhxSzU`MGwlQnGrv+_>|1Pkf>SztUo*TA
za%uLPunyr`b5*aFf=)OZ$0JFm%Z%mg^2fE(`6fSX5=X=@&@9u?@`a|tX<L#C6}+V%
z>Ywv;CO)0X@?|uebrcaR+%PhVHIJHQ#?w{52AuHo?VTn(>USUZLO8OaIs6G|epv?=
zZRLtq*(utJ@BWD1!(^+<4S`aWD?pjIYJFsi-MgWt1J<kdJ9hdHlmL1lMYKsi{=Qvd
z4?T4^;dKyY0FlGWDebl9%h2){e$AVs;4LEURyHi|4B7=BpOqNJhm@Zv#4`IX@Fzd-
z4B2N=yd9P2;f=MCTVNoC$Le)c?$aBCzlv!GvI)48yv4osTUt?~*(6R!X`BM49fY9v
zq=?7DuHndx=UqYS&C738($l#-BG&X1<xTQOS<%;EeK+yKs4VvUL0<OjKwOjGI|Kzd
zeDExOLZ*XTXHC4@6105WGj+dJg*z@043w&AJL;h|+m-QjNpwxG_t%^8kCWPJZp8&=
z97EGb`n7DDQ?$j+iSi_pehA+%W}D(-1>Ae$Zpan>tk21_7CJ~`UVB;&(2AJZgTp*>
zal+Fy22Jg@F}jARdi6{qzm?xVOUk7Ev^>_(fs@nCTWsp?*8k=!p68WySOXf$skS`{
zMub2cF`$|Gx!JyQ0yJvkOpBOsgDlHH6+@urZGNo#EKyg#J~FI3eth%uw3~xmGmzQz
zIMnf9mvhOxb*k(yO5BnOx8|kQ$_xMqjADQXEebm`>nesJvs%wZIEq6EI8>9KaxHc*
z211#J>uw6it;E!r{R5uddFmqlgPZCTnUd_mj?y{5;Y(rWxxFoyCs3El*Exk#8ki9(
zFs^D}5T5dXc31p-Pob=f_nkMwV;9oIoov60Z?~H5N*B7mL91b5hcj!xM^@ebXm<0(
z$*!t@eCC~E&RUm~=Q4ZCo&O@JE-$7K@HCPw)1MjdQPIW_af$5HW7=>gAzGp{&^w~2
zHetSw%aK%;Q=47V{h&zRGNBiG_vQN`hbCn_sm1oLO3HM6)>bZ{Y$82B2-e{qb<=jH
zG(->(x95xBVr_^I7h(0q`#U0X*h1Y^_lD=v)k|M7NXnMWsth)}hzlEa&%`V`PA!3v
zOS3MYphCT=pelyPhufE(oeXAbuglfgh_N|-4pP<W2oa%hmQKqKtzfH|Du#X^^{4c>
zlV__ba!M@49?X%<HE93s14lp|X}OskwSMQW+Yu|36(N|=$awJ$a#g5wiCei8IU2?X
zR6?A%Y7q2*_DmLaEPMCOt77V5+|j84*U+8^eYS6ggU^cLCx(F?W0nwjjdsWkhZPrY
ziqnF=aC^Q4AKz(n69JmuhE}DnnrIVd1b+uztsO2>o~#+ZjLrF<@t$&0$@p4Y7)Iqj
z^sAgldTE`}r*tmw+F#;k_>-sP!mG&^PKJ~HCk(>XQKcjVAtGlbCK?UTQxIY^4>Xgi
z$~j%RLNL~40F0Du*rp`f1bN>G>U*nSZpU)PajD&}ebTOHDNfj4>l7g)(lA`GdU{hY
zL|0>iU*AqH+`cDEg`jI}w({VJO=hybHOQ<P%p{VvVZ<E&0Q;GuSIj{ozk`})Qdk_5
zsFE4o7`fLgL;G_hcla@?K$>ubbVc;4B}vDg{ZI0B#xc1MIcW}5<jluI$z2?ci*z%J
zDN76M<%Jzd8x$#+QRVu;C(DgEe7CCEpNxvVCMRrmgK7vI`iNZY<0k7o)$E#$eJoCY
zPCx83teO|M&m<CF5SnEa4@6p`V1a$t0AxhvL)82jB5mv-4uRP0vA$QWBtRTsu|h9u
zrk}S=Y=}Q&Z3L)}%#=<l_Hhq`-An64oCOq{$G66a*#;=_Vs^kklv$Q%09@}2<2^kj
zjag0>Hc^$(LmF4*`esQh^L7Y?%iN|%tam;F@XEWC33bZ&h7Eq}@&%VHx5IU?PQS=n
ze5TVG9tj(G3UJ!$G`Ubz;+w<JwouY(2fL41@=!d6j^>~Trg5Dzqj1P&sM-Yrre*tp
z#hE6aHO(M}AU~-O$G^TSGdZd?r1E~|q0uvYWkpZQp^IW<m+p7WfaeR5%aN5_MUW0T
zBBle6nOG<LBYdi)=5^lO=YQ%ERYmz}h*@{uPwN-#1>lbmUt<x-Tv(H5I8Qf8Sc{yQ
z<8gKs^LqRnS#vou{U-GKD?T9%G;`Ac&>D*xho2Mk)9ncjKuj>1IzyM~rU-ujHOqSe
ziptEDX`ya5gjy3}n9q~Xk&j6_hC|o`qiN`Y{mfRPUEI}5BVdfAc^W?C!SQf7xQ!J?
zgL)|QidGj@s=?s`N>PvgB=Kk>Qf<dK$o{u6aeH<5P#tAiPP;^p2RTnS&Fk*GOay|+
zRWtRHDD^*o@(v{_3A4mC0mkR?GMoui22=?~^HB~&2RM|DIpQz(u~)T(x;Q91hqJW*
zc;A7rXSww?41&n73qP{%d8q3Drq<B?jH!b`p;=@}N6TTIYXtYunh_ol#8=lw^3TJ(
z{P0kSU00ACsapd2U7Psb#JxO@+&r(q#gAiFv2Jc8bv^sFokv2;u3@pj|DZF|p=7tr
z@D9|*zo$6VxA+Em@VOH~%B}5&Sy6{EBA7}yG2^dmi5GA%WISj|uEHp?r;*1SpTnxY
zVv(^$C2H6j9x$N31DTVo3eGXRSXA`{W~HNML?(#DHnx0J*gc;MVl2PnENf~FJ~N4W
z_F!^BdY<!{Oku@r-qt!?et+6=G(hATy|5XNv*@kWH&|yPSr^Qu2iGBk;1&<jc&a*q
zxrP2SBs9u%35CJM^4#7;&4_{dS2<lOAd;VUhS6m@MCG<Ss4_U$=gKD`jaq6bKT1tb
zn2W$UX<2e_h=~!f)Me&yB*>nhX9F(HD){w=8L)@8;|ZYYWmE@`^{q4f^B8-1K6FJU
zhMbBg&T=b9XO@YH@N))?IC({5-0+7Km0S}Yx7`PK?aI%D#AQDln5xB)>(hpIsDyU^
z-47ou72(kN5$QZR{)6-R`22UC=oxeOj0&ND6!V?IdrjLxaZ5k>4d9vi{VPLqxGFxR
z@<DoJQR+jp+-~vO8?XYXe+wkY(8=-MdH!{_9hq{r?p9O>K0wc$mb3#>vgJa$gW>e|
z44;94Q1<1-(Z!+#90(-*3zqp$323?!7i08@r~;EeOI9HKM=9X!2I>&3R#_?w7FP|*
zygLNc;vW6~{oeC==)5!Vy;RuWgQ*1RnP=a39+q;jo6dUcHa72=IOlWQUu->DZcf=@
zLmO43A$EhzG)xH6RUrJ`x!H##z#4N>hfAJOsx}Nk10tFWUgI-d&<e(_iq|y<Hf1}P
zSUf>t=jDTaa9CZV7OY3)FqYu+uv}u`o2`(#C-ptrvMB4St6V$vvGXrq^QpXDBefl)
zten(Q4S%vumT~04$gK1Y>jcA@;F-F=h(m143C8&y#3w0dDza`}89A<?e_Uo@;{S#r
znp{*;)#0tFhV1w%!XaqW%GZB;ana_hp<25kR}M62o~5T7TGC%X%zD{u{>xp`UUq;S
zMnWpun9^Xif<xPUovS8+t(H<d)@h?UrSgwg1#JXj&6M(D8hndLqOEN&R=f5LZPN0&
z9Xe&@>jOW#b0kR-)IS{=yFv47xYKX<46f|LVXT;=J#`~*nfr&*!_QKZc}xan1j8dr
z*0v$tOv<*1+PvB3jGm`g>)NZW%$=DyGJ-xqtDkLKA`s78;CrnMM0^xB4&ElinlJcE
zgy$TdN(t@r(Vz?V`r$;;7d2vU0h&l*-3L*TZ=tJ>hZ=s5SBp2i-#sX8Xu1fu0Xc!>
zXns&8r#8AMOI@+o80W>(aTo9vT@w3$Z(CJ+Ur=4#sOG=r<VyeFq+`(U)1V;#n{=$}
zTx$Nk5AuIV$LC!Tt)@$El&@EQx$-+^r`?m*_RNiGW(ny8Yes3Ey`8;qe+MIzyvD#O
z4fv!E<$BWx>%hz<ZAY4A>*>v{%Y-KV(qR<{mf!qrF8s>N&Eomdbbh!I`4#!RZMLhG
zluzXce4H8drtkfAI^=T6;-12{h-Dr5|2`~PWKJWZshqOY(t(wpit=M%Y#Q*ZQ`r8#
z+Vd7SI5-;{hq}8RPtR2<6cpXd=iVF~692ycZhQJ`r1s+*>qv{>KHU4~fA^+9V!7-^
z8l?2P5q#fPu)F$7>hSk|ET3r6^~7X&le_y4_HfQ}0<nnwy-sp&#(P?&(`9CC`NUo$
zU*48jy?(!UP#Dq8nQ~_qt_xxYY7y%Y@ITQB=?@W_ehaBp)v)4g$gf6i{u0Pl>Dc-j
z=)qu&w=~_Rv8;&Oe{T|b+0gMN3`w!O+$P*f%&HHDog!}2)OA|mO?nB|%rCtt!94T!
zqQSU+Al-DX$s93l6EbNY-%&;laMrA?N`^#GY|Egu-d5g0F;lA>*j)NS!u(G>A`9M%
z$@!}nr;0`oy0y8Hf|Hy5Z6$l~<?-{dJGI#ghCPh3w8zDYK-flP%YBM;VqpL8ej9J*
zxbJqE`C|`IsVKfLxZF`clj;8>Li+U?k@H07i!gH~w<eo4E1ooTk8s(}X}g-7&qiZL
z3Q4R-L@K}EZpVX9M16^SKRj~cPkM*_-5=grJD{DmNdK69w|;!1){R_pDIK1MW~#dJ
zmv?xJj5ElUlK=joblwp-VDN7}!GAp!KGWoP0dvig?s8=@uVNpDq}`<SxKOa)`a_N5
zX-^9V9Fp9{_B&H{n-as|yKQ6VBpCdB`om)pU`=R&-#fAVT$Fr_G_|%E7xn2*+;TD-
zxiguDtse~9lN_zV$Ie_T&E3Yuqr=;Nu|hT{*!cYdWh_pAPANTo3Z_>RRcA=>xIwcY
zs)1(0W=^fJscSYEJsInj8WU&X2SOvm&Z1pjW<o7!bbBw>oLBH&e->Hm{gJNOQRSWD
z3jDoc^tUixCk4;B=4-&n;b=Oi=@GUPm$wAh(`!Woy?zVJ*^PKV6{d(1a=5_QO15k#
zbieKJ*H_VWrO%UwK+7X%?9<i95ZG=|Pli^8eGV;TA-m$J&#rCTg-5gAg6d1ttX!uM
zbP2R2%n5+>_TbUx&tda}jXOS{<0Ar+`qfK+l;38_t<x}QXC)%-5ymTQ2PNculY!or
z$IT(Zn!OdKi->)p7zw@t@sbVs2d)wr^?cx`B#B0;Ov#LUi|uvoN%`bt#g?Lz;44*d
zKzqQ|t3iPAZgmA=ruTktlpd-iNp9ot%LgyRvH+9++Dc1v#<#Aeoe4VE^paeeygx`V
zqgA7;9slC3;BGU(*72(SWGK{KT_B5FUf{p($-IHW%3@E}e>zWH&@j9kUORI-g;W#0
zW^g0+fNcy1e-#JWf*{NRj7z{_BaADCQYNxNW<>Vvm800USL%M<2k<gAU*-gV4Bf1o
zc_?i8F!E1C8A+z!AZgHU4&BxVv>!imoo)d*QMe^rh;YrI6Y5=1>k$ZiE>o@?2f_vT
zxti;b#<$+-1zvLUV&Hf&SkhHaxaJ@{ac}|x9LJ_e{N}nFmNroBR<6fuSET*aqIWiS
zfqJlmAHemJyl^&1s=#;k?K(ZcH2Mf}lK*HH6pp8)a*%EjcIP7!W6b6~6c+mylj{P1
zi-P`Fu>O?E-j_e=SwC)1PLikCOPC;cfQHpwXpIAvG#t$xSRm`S&Mc6W7!m|WXac0o
zU(oZc12W@C)%~L+Dx9Hf*_C_B6(TzzYYar6a#&Ec^)x@|{uF9z)6s{k`PEo;VA*X1
zKfObZSgRz#8<l~57+_djU8lN~3%PwAG0f_PHI%-fiN=xl%T01i;uJl1ZG7Va%%UQw
z>A?G|rs(Qho7A;WR3h+pH$g{78#TUF5lka3ENm6(%uS`w?|IizjlXiu+VUaXb&2rO
zJ&u)kcLvG~e+(NE@#6EN964JY70Gzg>|1%gbu+LpXyDOvG?q!I+j$jBEiD%=f?VuK
ziO01Eq7OMNsM)&PFXZ<C)-n35p%*QVE#>f6?8ZIP^^Z8VWV9_L<XfON^t?sxtY`rV
zaX2ghZ^`Oh;f|W2a@g<_dG==@GB@;=5Uz;4eiNPNfx%%#!Pg0$;M^6|KtTH!nV_P>
zVh@!(u?Yzioe-TYBGQ3<+4}9$Z+TnKBf5YpZK7qu=W(|pYB^!v3eeb3P!J^K59E6I
zLb&)gr$QsGOWz{00MQYn%O}RS{s`XJ-*FO8ALD&1W!CC25r_)A_pXo@ny8FUdqmI-
zn=G{UzV0LK8lhx+zemN<r976!UQ&L7_6+^(O(p21Fxw8nJRMs>kAb*bq5$3Z4LZ|+
zX`5W&@}22hd7#;UD~XSV0(L`__?C+HJ^0PX5yBCDG$|x^Kko-UeVpt}zb`x6QG7f(
z0*3cPDd^G*bm8~ChW`A%L}YmFy_BKFvwv@E)nC~MFH1%~Kp}1c>!r1<1OwuLq~9<D
z1>wk{{=V(m2U>IP3{f$CT-!d^1gz5X-#K=@xOP5K<-q5>58kAt4|8UZoP?r%Pf&~}
z8DH-YCao8}u@5a`CVL%b?9qk1$N9IkpiZg7&M?beBHO=Ek!iMLi`AzImS&i@sfif_
z6XC$cXaY>x;}rr6BmyU^$VQRqNePGo9dC!3RFGmd#C;yyu1~h!9ZzDz5&d?bp8R(a
zCLT_|j40#Xo+j(c`Lvg_xBTat4d*(h^f?`OE;WXhUuZX6e|6^^0wQ*yUG2#x0RV4Q
z;pml-+^0g=svMAcA>uzJ=F}m)Fc?GEi8zHubgOTnVPDTwDQ|z#796L?Z=S9kF1|+4
z#_GZ~5<|7IhyHYKyQY)<mwfe>U)&WEPH%ZtXZGr7Hr0xg>gVH$!Q&Mm4s?oiQo7A(
zt=-V2s-@v7q0{m<h3vI;JY~Q>9uQ8bHap-hK`<^WLQo2K48n!TH6)&*$h`R-$h}Aj
zYU~lQ_9oHgOH2=)-@#|u^!v@ubl2tcyX<#4&1a8`?4w-r@O`_?$bNZ?9bT5_$jg!H
zyGxBr?Mu1)9G=X&s;4qIM#MW;W5YOh4|aGjQ|pUE&Y~%DILSTh%n4h3H3%(WpPG0C
zR7^AvqbL<KX$1=F-OoU7y@b$eJN-irUkCmwV`M%2u^8!V($=Ipa&G^>hy6KhfY^+L
z6s1A1%;M!&>-6y;#V+fo<v#NS+q;&h^aDn>O=i2DG`<)}-t^kb;^?Rj2Ez>wp#cXj
zOzaq#2&P31t1C$FsHJa`cQ9^AGOTHnlV}24&H^aJ0JhFp!H!Ij=x<_O_$)!eKJjw|
zY&l$f3@(fu6_Xhg(mwRd6Gzo}ZDDC3={}I@Nb`O=52#OXcrn!awL}j$^Cqyy-!<JA
z-U4QFk=BiZZ%vSeWkHU?;=u|}xj^np5iGlqdX<RNp=N1Cm7yBpxIPq<F^EI=1{G=L
z=atE{c-9}|1Q5RHa;*0*p)lh%wZ5JgLl=F|R7rq-jQ@SDP?*0%1lT!Yf9u}v%JGJq
z?Yn+hhm1>X3Y}m8cXVU4<+nTaP+L+lc18QKV4sGy{k-Kx7TA6RBq8wacD>~R5KzYx
zFx;9bo^!-ZmoVHqNs3W&?5UT*xYM97?7&mJdtK1jGg2)ce8Tst9tOXYguSoZ>XOd`
zH#j<(6OTj~(=fM%V~mz=?>USduM3B#r6pZtYAt8IG8GLPnx<>w4FK`&jA^HDvllS=
z$Em`$!DeD0zN8drH^ecwr7Wm-SRb&IR&*6IkuqK!hzeE~rpzX|EyP7ADWz&tlppH-
z!T+U%)cv&+uHR8|v!H+qT#l0I#E)au3;Z2_bF{AHptx~6<W}&zYO`}^(VI>+h+Y!C
z2I}_6lI;$FWd~(X4JHNf6gJYbaZ?Zx2?getsY8W8Dx1++fHsoM$by!X-8=xdQ~Y`z
znTMjsO{~1YAThIrczED;st>5?3V|8qj!=sbc%Ksr3l8rWUoYicZ7)|_T}KU9y5&`+
zSfp@fN=*teo9*rzt66*wG$?TTBzj{)9SP|6fE}MeA`nDw0;2fG3Tn`NB-{_=`M0Hg
z=&(H1e({>I>jxN<_Y+uA-OyNVAn(rzQsP1#_!a3~TpCvu00P1wHxP+LUL5)4QEGd8
z;^jNd<zEKahMYGecxktuL*0UZUu-sCAUvp7`gsCED+0HLV`i|Hn-N;;09=v6^dJ%-
z9!-HmkYW-sA&CZbpv04-L?Ng%FbNmn@2Y!_DtmqS^BAD}k~BlM%HmbsFbAhXr9pg!
ztix8_xvqkdJC9W`lmUAqXPob^KK{V%h0rapM}tkSp870*UaELA5Z2q7x5tf^%Ok?C
z2J_lI7PY6hl;r%A{0(P}KZeXuN>d{HcR<C!#|dP8oOm}NTdtX4$vXh0F&2a$u9Sv2
z@7N&Jk`XM1R?!Az65G;B@k(WhA}bZF@m=&s`TjNx4H371YU|O=@%Em|NH<R=-vfqA
zG2_*JPAn@$FO6TC^~w|Ee%f8Jf~-1&-$Gl*rmjPgf4p=|zZq(%4aTZhq}^K38dRXJ
zwY2eRv|tk8tF=(AB5%eTZt%VXJQ^(iJ-mQ~0LBw_v<*l>#gsgEOb2Lr;9lOQ5vAFm
z{T2NAi2rlesT7suN`$uJp-FnDm9W1IsvoT9Q=y2Fuj4t$ga0Lg$d*Irb&VGkC>^v>
zaCFt(T6@-oH`1xc+swP{3pzi_u<;jRxZ5(E1%?dqof-o90M@k*slNuqeuWE!0iu*X
z0)!oDumRW!!uFf^l>OKnx^i%yIItR~)d;a&OHsx}=zcy=_$0^=kubw*$I)-6V&Zj%
zh|o^pvCTX4Hg9h4zm#y=^T@)d?Bx7<x-op3&hfb9J(W%k24{Bu%{8i5GII;D=z!%p
zL9HmwhAJ~x1iwvW(;HN-Y$QV#O=AZo=0kii%19&P2!WHIjzIkiz%VG-f?9lp>8vOJ
zcSMUr324HI{B*?Cf5BFbgysSt#NkycQx1V)i(ALId~1qJ7I^-fXYk^n;C~ngZTl{d
z?Gap*-$2sieK)+mOgDXn_mu#*h;**$7CD?zk!9}1ud8Mwy<sn$_?tE*P#NNS;_xsz
zuZ*6!QBVsq-z!%DsgfS7iDU3rm_F)^8kGEmh6}5Z^OA{Q=o`|$W3Ij+S3&k$lF7~-
zQ8tpoU$#|?)j*3_mEB`$kC-Eax1_yKwE(Za>K2V6LFEYK0>_}>_eoea2}9eYUY#Wn
zFsYVq_mEx!6vw4s;@H+=LQJtVuQtb`Gc)+0L8ecRMSY-ryI`LC;DG{2rTgse@RIB5
z@s1&>$wEuNDZ=`Lkv~|0MySa1iDY03I8S6$iUF5V|5SQzUi#m%y?6fvyzCzd#CK&l
z900O&z8$_&HY!Fq4P3;mF0Slp4?G;Ynd4#{aNxUi_bFZAkcClXpz}4sVa<Baz)V3!
z?Pva>&SXJhVg;ojYf1*0VaXp0F99AF-fnM`o}exp9$uj2k1hOPM18h4;9{(AeY^VR
zNFJtRS#f%4ys(pS=sFKC$acq(vRd|jEaW!QS{B#+y&}$!6R!YIUV`p)BVft~saxoo
zfZ4`@@O2d{SOnlEh%bkcD#lOjH&THS1LK)oNhi5McI>@~s6BxJ@&$^3>Wif13u$PH
zF>CS}eULD1sK7k#(OITsO|U@cdvscq@f%cn{=0+YK7$wIog|6J&v}EZmvw_882+-)
zX8Ayay35T9W!S;Xyr!e|&7OxVhGlN&&FUN?tH-L?4^MMU;o^8dvs^{+TZ}-*Ahr<u
zNg;X$;TpD}7xXlbZ8km8Cg0n>fHNe4H`%Q7I6~inh6jnSrcL{bxs;D3pR7e<LvbPg
zrq=Bh$7zHmwfiBW<+=m42Vp0*8A+29dq>4KDKdJHA$C9w*`5Nsu@8#MoV7TdZzz0^
zTv8V>4f%B%9~;f;#D<pK4KTV34R_q>Iu40y60b`X0_)L%JCxYZ08H`yk>n2*b>a;_
zEv}db0s8}3ZS1Pwu3hX@4%w`?opXm5)BZWR&1e#N-xcTg>Jahcxk?)Jwe9i`1TwIR
z@RV`>N#JpLe11sqO7A9U)uDOId8{Um6RHLNZR{_pD{IL1eP|~(GsYTn6_0BdgeqD@
zIUE~5oB8{GjQ}g^x<}>BesEPl+vE1_ztD59V=gy=C#)l`s*#|W6$|6E64W7&r^oK+
zSw=fO50$R@fYhGELFGz!W>?-^aZn58?Ns*ORn__%Ji<<(474u=z+6~vn_!g&`?)|_
z_hG$}WnQlc;wyGk*tLK@j{r=mTn*bsEe>2=yBA9bc4TY{we0n$YSBlv_B{tJvyM{v
zin3%Z$Z4z4K7T0NBa{1>SKpKYcZvU>o`WvVnk_#Zej+Du{o`$g5b;<VRun+PMALo`
zQRmqO5~GHo@AMS|rgfBGBrhAHD6XZFPYn$6>Q*(_B!{9xpc&vDKX->J;O>Ov%SIwK
z=hOQx_<LrT*}FZrsBvm1Dro|vKKM0t_}=!rdeTAvYqw$qcaQOq0|~KEL!i}d5@Bcg
zIMkm^zK}5WxI;@Q8qQF2JIoCi@8q>b#U*)y7S#6#<Rd3Lo>LTpw#t)2nd;iSf#dzr
zMD}XHIeaCUBrqx996SPbOPVbsK|LmZH3E=hXGI@>s1FN&q|yilrrP!3XbyH-LWlB$
znt(t}@{l+SS&F{)wEf~!tjF8_d3?Oc!=U*!>jyYG_MOj8@Dww}cs+WWPH9Pi)A3Y`
zAh$->ThJ3d1TAMgF|{zK$+0^g4=GAKb~}y`+EL!AFo*6#S;u(mTdlpo>gN)jLM46U
z=yS>f#P`bJAtLe7%kJqc-PdP{!&{!uruXF<(j~RNBiYCMP{QC;bbyH$IOj%>(E|JD
z;A(}UMkG2IDi|l|ly{Ig&T<zhmk#vl{>>1+5;~Nl2Y^q1iPn}*EsA|L(i~Yo2mNKG
z*3+J<!%T3x9>f}LI1*?(5iX8LYYR4l+uI|Ci*f@;d|)XxW*vaz)`U2f9GBb}vIotg
zzpI`FM6<#kldIXFt$8Ve>t9N)@iTtPaN$gP@hg!Jj8(O2Ro;C*mws<iG3a>dW}Ken
z`-m(~E-;a%LQL|0o{VUmjS)S;kZ7|rAmG!K6?g?A^A&Xa&g~qOQ5Zk`dviPFnj`?4
zZx3uPZ>NqwBfanE*yi|+bhwMHWmN_I(>QnO{+b|%|3{UR2@iSj<EaLx+j=gHy@j$$
zvMpb7m{D<=<{v%W`Ep^M2;hfI0M$TA<?AN6XKuABt7@szy+W?BH4JS`azT$FDRM&K
zGE5r%TVXvg;b!EIEYO)UK20`%bCDJ{?~y%__gJ8x9tDSn_AlanL8O|axn8dP2AA1!
zvlMulN~tz|OV0zn?nly5dFIF2V>W-C9XoH(RWAN$tSX&5;LY6P%)p-Sp&9DaYSBUM
zLo}7HcuERpdmgAFvZPn2B=9=;;TL+80rj;sHxajGGxNbZ{52UnHw9`cAqFpNzfPL6
zH~EG)MFh>bUhh5E+TeZr=7U*``>-ys!szh1FM9CPE|asndS!l`V%6_JJ81U>s0rR|
z3&}9S8uJHC-}dYM6T7uWsH|O_pJERyYnTds0ZnL>uN8b$*?&9$!!-3XNj-b<rwpJ7
zTzLYE7>^QaMjk#*Glsn%QxK~=u~>Hgj$&Ujr@!tKrEzZ|{*L=t99{}U58GK<s9eCi
z=tBQ~?`(dkMv$&eTJNJ*bW5}Mpx5IV{5Y!&pIF4d@Miswf&g#8_6hH45Vl@b<5YUH
zd48@A1D{&&CRmWq*0;&-!$6NX;`QH~s<^pD&}i?1HBQ@cnH{QGBHTm^1NGrT-MiDP
z9`~Lo|D!`e>|6J4<B?a+MKn+UbL)LZw9<3P3<jol(ALUQudp0zzjh_s&n6B>1HB4!
znSylaM&&;7%))qDOqNOSuQH~SpK^Hh_gk*u%k8C1+gnPMKvq`Ys51PS+%PRNfck1k
z2aIoBwUdT4xpC>w8fL!I>-Aph{6+Ar6+Uz&`!O3fG61^gBTyCX>(F2oRqrlC4{gc2
z#kagh(R~!gw`4_qQAo3LX|8K*o{0b9B}3MXo7B2CmR+<mPlr%dRkr(DQ-BMT=%ZtA
zlFa43#iIPv!7IxhF))%Pwl~A@9>a#?Ek5W<8mCRC2Gcr)^B(S_=-1l^Js9MBroUq^
z@6qq+&D%ro)0AMv5omWQcwMLvMC3})sk||bUzhzxgFPgHjN!cnrtf*e1I4H4RVEaL
zk*}uN=s2P1Fc`gT#Z-kH29sB|PzZlm0<%I7D@p8R%2tPAL=(1Y`qgzRtaY3yuN~w<
z!z14dz-fcTy|6u-1F*+#!S`ihh^zVK7M4zsFiQ13GRnT%x0W|MFJE2k+ew~I0|=>~
zz8q3?r;Dfr+MaGOF_DI=Rp=cjgU#u?nuCkDq2ln>(&TbJ9h~0(@TSc@a8=<0-I?Lh
zUpo;(Ki4EU3Z+S%nzWsl4D=Bhm-%Xqk~&^UUAC?cj9ibyZkIOLh#CC1RxG-TE-@&7
zDmLxdr((CI3s-<pvbjfFqFaWE!I2B^ga8D#z_ZJ&948f){H;Mc(ntel58k3QCHrD?
zslalxd4Gdr68{YZj>DIl^%8)}5rC818L@y~!b3Nv0O@{`#tKyw-IS%05GaK)E6+oV
z2l5XTNZRbh!-*ZogTUQt<|c>~CV-U?zB#<bTs*){Z`=%@jn}+<tHY?fb*LQk`FUMT
z^B#MHpfZAJpC~d2GwWlQhsdBzYaPt2wuF5xub%G7eADqueuLF6Ex#H%uZ7+8ANPh?
zt59hx@1v24+=h8XSIBg^Y^u;h_JgSH`jj5K{A>Qz{(QH_(Os{9xwRc`g?Fh9Mb?7S
zp$2@gk(CD#>7Rc$9r0Q1?NJLNGks4GXGh6;RauK0Sx3WsQyqLd%4E0Z@O;hw6BzUP
zxV18Q4@cv|1Suy^PU7vCR1X@%wkR3lntXd#CJs;E!X~f|$S!zNhmlnW;itU*I|E(I
z1j%gk2S`pL3`Oc3--wT%4DEluaiq=}XXkTt*>88n@?#mxzoy}!Xu(`X;Ty&8zk7*^
zz8*4>#sM0y@4OY1r5j!H)svzg{2XgB`-R0NPX`r`^3UB1FTj3pD6oT;D&;(U?@_3P
z!s9J-QFKX<x$Uid`<KV;2g~iR=O_E8m&|bK)7x;4s%{E=9PTZIJ?P8UsGUrRpGw5}
z+`pA_6>i-olOKJ~dim*aW!P4*tPVRA5AmF?HnB^7MV!^p{H$PG`1QHRvnBq#c@?9=
z^cR=}X)4HC6ew*qn7!ZRCLt5d3@XM47Nd?=z5scsjr%nNKy<PYHrzv=!FIX6pP}C0
z#U9j!;klRNM}r-m7gH{Y?)&jR-{G;ysXp~`;X=2xDNEg@bo}us@u>B8;)PM*)e#})
z1v@s`aSgE?jv-s%GB+>QZ+QJl_Vr76#A**@G@j<CElw7Gx1sCqh<kS*96`V!)+aJj
zljQ|4)%PjP;BFvu(awKM&P3x&(V&QUG^|~wLGJA=pa#fv(cPN~J>L4*{a~^LS+S%W
zDxTchem>rJ7BtI~`v)x|oUITu%?8XTvloo6Hz<Qc8`Jjrr;4-q8@CyjV)SO_s9Y`~
z$=-09RBkvA$nZDCV5T0Fl|>Os>n{%k3|CZcbl@i?i4egodhSt#Wo24+jx=)BYMy#j
zGE7J>+X=j6WEB~%O9e$XAz_eiTA*enu*Em`0Ea5qkDLy0HvFq^`t!&ogZJ0c`&wJD
zhQZ?>9#9_hU9>nt0erC$B%kil-^rD4%PxwL5;igqiV8%`Pdsy=-+$>E9YMsK)Pt1Y
zGT$dYFZ0(Xj<?i+v|%x^omqjd>SR)+s_t^_SI;#AJ2oxnuN@xnT`yA;>Nx@S%sE(8
zb755(!yapwF0{@-gRdL4kKcByt(PfA*hSTk6to&(DR$`O5T_W{JtzqhJECaI9q@lS
z8rgj(B?H2D*XBBopr;>tKtXs<x*%R!H!ONAEN0eVaszY}Ym+DxpNJ`eGko&+03|)N
z143p5Y^`iyFi1ZK)57fY5po(umym?v8?>WoO0b1^7|D@DpcyR`U+#rS3xVVgnf}aj
zx7*CeiNPk0JtpU--_&)AMNd51DDp>&YhCxeX4_FOD}(`tcv2&VC=ww}ZgJ{WWr>W@
zmESae$q7?@<m&LV%mJ{o$oY<F!?mw{ZThRu8IAh6pDbZa05v)}9*<;$CZ$jYyZcr5
zDg5(P^DgLVQm^eJ>Oi8Uv6-*YVA9VRW)iC0`6T`2{yKpP_Q8X9NpOGtafIw8%3-DX
zMQ&2EPeCvD+kDALdyN9ZS_~mWvc!E$TJoVQ;ZFVUJDG9Z&SfUsCcq2-f#!h|F)%tE
z6inwxMw&A1!6ZPur-a{YUAINP_i}QA2TYXFc#nCIghCgM1{H9hHfCY&XnO$cDXar{
zLHCBUT`%%6rGYg^gT+~aa-NQ8jeyUNle(6{^r1-%f=MR)9louXS==4vUESGwUuZ&d
zI5o)Nt9_sU+cLLT(15Upa{Adna`me0IVo3jVUw>n)CCm<aWLgyD;E+mC%O9eweP8g
zDK(vQpMj50v##Fy&S)=qRq3Js^+xvazS^td41^6}Wt$3$4+<#`TNWU0!=tV2e;Cd!
zOlm|TQX3)Era$*<jTs0B<MSZ?Zj$+xci}^NCYJWxB$j$CJJzn_<s%V+bIoTaoX5MN
z+H*l@bF5Mu(0G>vw*f89C9u7Q#2F}kP|spY#PX?%>^41P%<Xm+=%bi*sFQ$1_GnZ&
z`>%L|$~&KTLxZp8Lt=RPtC{n&+hz5Ad>Is412}U_pdkVd0`rh4n}Y}4N@xXR3EmyQ
z3dWHFzKIDU5<9q)g6<OsiX~W7>un8ztqTcDvOPPNb}uXjlhsH3GS}lj|8ZQBE%03V
z7RQT)%X-t|?a+`Dhd~L&d9+#UxQAe(nH}kPWYW+eF&kHz<M1~d^H=v5;mE`k=)M0n
znV;V#cUyx)TVv-%*V4KoVb|`_uSrAaUWE;kh;?mC+t6gRLModuD>pr%4Y<afKzn+j
z0;KAkVCMo+A<FiQa#xaAfya`u>wvf3f-7(O*X6Ib3r04uR|Kr;o@&OfU6~_WKZ&lI
zugctPaq3IQ+E+Dzz93T-+u;}@SYSQCxT)AxJ@#UA#W1z#9>=o;dUs;xBc$=eR+17v
zaL}_6=dI}uM0d$$zr=CF3FMKkX_p#}_^2-shL^w?0r@4zp`WAxi<r#gHc)5A(HS6*
zc+Ho{0Cvkw5;@e`1=2}@jO`d$f*B+t!Oq~v*H_*~nbpT53N#r^sM2Xg08I`)Zu#8L
z?*C2bd!F=moySSffjNi8vadE2Q}OGjO|ZJFwXTrpy(09`^+NVsP);WB+!%-U(Q9p8
zuVy86>-lX-m#g*U)Z@|U!R-K9Xhne^HMJ6G68Nywq^~ZVOaV08OP(Lpl@g991w~;H
zW=EeL8kMUk%Z&1!?UxZP5R7!SPtLvzjqX9s;@6U9e4lMbXyJgO&3yMpC;67lp6Uep
z3Nj@rZv2H^s9Y5h;o1jhIaYGfq|B(ULqYrC{!j<MM;RM&yruq8f-2;qZg}cbC98@>
zwe)Pdo=mVDVDU7zjewz}=O8WsZ_)QYl^ut!9BK|7`M&^LK%~DP*=+JO4<w;T!*>sW
zk4oTeIf?Cq3X8G81Bru6A1YyZ-htQWKsrr+0aOxj+jSBCul>aC`qE1D8u!o}{^CLZ
zeLvAACEst8&Yx&JcLI3scMx^2f-{l-G|T`p<6m1`H-1&|hI@CPUtV|ho2A-*+xn(6
za+aUcBr46Tr$kRnA!N=-OryfG(v&}I>S#CiLM$Eysv)qXkWMK$b1mq_BzkIU!2Q>U
z`u)%EPjEnee%*=2vq!#pgfbUw!CzAtz$^D|nz&_T<NDhaA^zU5gUQzm^lt(d6X3a)
zM&tmAXXw3(jNj8rJ15yBGy13uFm*gR0i~#4PZ3)xBK(-z-?slc_si0HqXN`p==8gu
zEPzXZ-uq`ZXSKsA^{01GID$kvCF24f;1;1|QFCS>eGP~9Z+J9nEuaD+FDhufK1cHg
zz*na<f+>v)9#j}!j*%}mAl%TD0y0IKq{<5%9E(=MpZ~o(D+jCh|JW1t5C5+h!UMWu
zB4>cV)7Amd;k&-Lsr<S-|KoqU<jO05dex%mrG+%qu23tGY7UzAVoAzlJqYPQQy%LS
zA!Hvk(QLzGz~XTtoI{_8p^gD=OQ-|;r240?2f<xOUCbuae|$pS_q+3r<4fN>GFc^G
zw@(f_Z~W5QzH6`9x#_K8BTZcl2u$84F?cpW)3XQan%S}`MSpez#_&@%HgjRq5DXcQ
zpgDe%)*A&K0_SXRpX+@J(#-p(saJ~dCmVQX@Err^0idpvU`Il<2g){5P0)jRUb}Wr
zWMu$-?+Hn{qx7Hz;T8n}r$A1?-~!|XJYS&TYpH#Kodtn6)0Uz(aL261_)(2rcL@xH
zF-rLsT&E2<wB9>aNfN^^y14J~@#xq8;@;A%{=((YRPVUwbXd~yVjM4v5+IAhzR0=K
z@h@02wp^8mr(M0gpj=AvRU%0(m+V9oe279GC<G7z6|XtKT``7RodK#1=;;LdU<$Y8
zsZZbE@BZ^Wo_wnD^t)%$$KEqjCnU=}>o+%k(%17a=-v7UBf+`X?AY?!W+T;pk_RR(
z7Z~0F9<DiD15fYK(wkUmMKwRC_GEZe&lAj^J-h(`mDIu_`sTiD&@|bXWd@AqYpIk_
z1paZ3o*8@=>Dh#h(X)YDq`zZZMwri(6xL6$6QJj^UV(u@{(FNMs%FpoK<{&=wIrbO
z0`ifT=ElSi793nK1l*++oQpIze8t7!N(udi99);yleFOo5AFF_?w&Zy|G!?_4FBLC
zn|Ds+PfSd;o}T|+IswrW3s0vK;$`6gGKy$3smI5negE<Qdw1clue;2_>WMsPx8=ZC
z7?vke<qT+7uf$R<M-Y`3WM4qzY=B2pH$d0xz(NdlRKZ<w)L-6FlAnG&S=^5=UA1@R
zsb{k1`_{mev6O+}#<x}EIlp|~<~P<8Q3xVG#_+`sR$XA~_`?mN(Q@6d;#4!>*J0=x
z^D;|2cn1$N5^XKt9pM#PcZPaQ%AbADUpXVlC`*(O@G=lGer^M18G-p5dMwTY*qSL5
z(9#qVMsBQY8>S3kY=E2#_Xf@HX)71~n=t~y7}ynoZi+VeJ+1}*9t!U)06Y4CCpQW>
zRe|{Hw6MfSCFjD|u5?rc2QI=BiG0Jk7plESm*qd*dGlABx!H49+ViAo{5>&HeHt14
z%eDld!*d**mEX2w1Y_5a2Kh@SOTon(hjQE2jw)<8Ut{wt%FW!c<EOLp5VRk=KY%7F
zTmr>rL!<{Z+*x0J<O@Z-_ueQuC_cO4z{0WFEJnN#=+~dWcxS)3@yUxe|6sk;za^-p
z5lY)#ob?JIR{@@@0*C6Fk@Q#siKCVFO(tLs#$*8&{IlAf^xPcjPjUnd<PqX;BQqOx
zPlnKQ|4s?e+Xl=s1Y24d+a_Lt+4|8jeoFgUq|d%g))Tj70i8E}&*{H_EKo_%-R4Dj
zfa3|7_W+d>xTpZ!nv=MDUZGJ3wm+mXe4oak0~CZt4hcN&3K+_wGl=MC|LNm}yZ7J!
z7l-uU|8zt{4}ARl7_6`kWxOz6xH!1_x0mJIgZC}p^}+7*yu6Q>odf7SNcg@I6r73t
z!0`6s#4YC)R{id-k@D&be<&YLUK_Z{u_?24rjK^edBEW|oP)sLJ*DI~{~-vT#OHVJ
znSb`_7fwAb$KP9D9u}`VwqxyU{8g*3lq*RjgGmpYUIFw?0>>K~`xXTvN7H-^qy1F#
zE7#QiiY?H5%_J-7Mv=R7x%aU340xBJ`PKoPWbpQ{EFVCeRP!5pFn1ET{g>U>WD9&B
zJ`eM?;|K_xw0HpT9wTjW$FA-3?AL;k>L*TvbRivIz~dGny=H+eIpBI9cywN)&<56i
zRipnQfO;|HlYOoErqTq3z*WnIh49D!=EIeP%Xhu=x%NjtkiFmkJ{P}$=XrSR;9EcS
zQ~&AqS3UdC6n^)Ef4=TOd;gKs0e6ruYX+bKmYdCV&%*JUj~#jNeg9+n%Nss+^uSMi
z<`2VQ-xr&aGh9)+9)V|SX`sF)khXHshrjLxds};c#Tfq!$w}GWeeR&sr*Hhsx{*su
z6O)&#Y8*><*u~l_fq`*gp$;6Fp}`%+{CzfHi_G)n9tE6EPv00Or`Oabk7>e>r~J6@
zPsYp9JR9)oo$|BJz|`^?$G<!N+tCuU4uLav5)UO(5w-uatbmRVd+_9&SuE0>IpA~R
z^Ea9U2!-S+rbtLl^8-Xzwj;|#0(`2aac8WtxnE#8CvfZvfw@fr3r%3D1=M1pR$>RC
z_Ay)2=nuz(|NF*kn+0|5``72M*lxy-{v9q|Vdg`2me0Q6qMgI9I{QaTQ|De*Oji4&
zXJ?=6%l&v+U;xiQdeihwXP$mEvs{Zmuzc@(n`h~j<^R6<LqFKB>f>w6K}ww4RKtlJ
zJa;_j-hCiSj;D|R#S1@^xkNlSk0Jl&KN<FSUAcL~?e%7;ec30}>Pvy))f%-XaA2B+
zIynL=X?Qq%uJjODJ#E6hjl4FpXPJOqu|=j&HF_55In~dwyDYlfTAo>eJ-vQY^V=3-
z1^|-aUgkI~CAcf!uT6X3@TAO1Sc$EyJm?w;tA(1ffH48Hc_;%S62=G2ge7etdNQOe
zL1UsMaNH3{uLaU6pgpTq?9*;TO&w9f1LT3}7?%v6?Y?>U;piXk4Zl2)JG6GGeLVU<
z!2|e}YR&T@m-*+v_wu*OB$so`gTtx2raX8#YWVc&fD61VGk|ZVGoQ`((|?~i_TYyf
zt1kTQmp+g$rNxnmE;kh_0<w~apY{BiWbvPu;<;M(_uuNs2**RYYhG6nTYhf)#y3>s
zIPeosVQja=<YqHdzyE|ry-C*__315jm(_ZVxF1D-&H{+c(gs8%q)ddAw7{b)?qQg-
zNj9Kk27WlY+tFUb`0Ek-usA_y9Jtd0?1|_d8nDSKIvGNbgjn}ywv6C&vLYiC{j>XI
zuYu21fE0x|6X4frCKai?r(q^n2|OJNoM3h#aC8kYdz(P5UtmcCHA=`LA#0>6CL|8b
zD*29cUy<xsy>_ge-tcakIyBn@zWc*m2j;WAA%E#>ZoYc;`RBZPFmjxdKYUhOoi#M{
z>cGoe|Ml|D177wHp!diYPK05Khr-8x>7hrR>aj;$DGPZ;JK|MMCQlv9VHwBYOJb7W
z{=+xXC-1JUc*&*@ZC`hLvk*+Mq*wpB5^J{56b^8BUSoka(~_8{H2|jUW+^{u*=09c
z-9@)pSVJO?jG*lw{Ci@%35t6iagT43ruR^Wvkn2z_H(4SbYFWT&H$GaS+<eQ3uMDY
zJ()v?DAc)G{2(hy$iLE8)*m#=rBoJBcR;skSV<`zGaZ@A4PIPAe|sR}4PK0iES?R-
zuM#rK3%Q&KN%H2TavY`t4XrS<lJkH1idQuI{B^%R>|T7XDFwuLRTgH~0R@EJgS*aq
z&6dkPe$B52q0_(3PZJOR+NgQau7O<}y*2BY2l=A!i}>Cir<DVsBh#hdH-BR3(dMCF
zz2lQfpjtX{+AeA<eg3|=G+By{Jn|il_sX*D)0h9#y78;!@X-0Pp2jkFmLu1lEl_j?
zsCRH|&Ti|qQe8IED|P^U6DGQoVY9d;MNLhD|7`GlqgB6j>oKm363hmk8Ec0sOj!V>
z|Av7_|Lf9yGfOw6K-MY9Cj3msZt(%z9mqNjRJWL)n{0%Zgb+YUH!^1aH?<Lop-4Ce
zIRSdTZK3FO(a(&7gQ79!OuC$i75N<PD%Y4fABZj&SV@2-GJGC^Ca#3UR6SBdxi#`l
z7hE2B@x}jA_Qt%d1^hxs#!c{ZE;jb99en-pZNK^>JFa`=)_0|0X-iqAVh7Jo$V$<@
z;Ef~6+g4rjcO(6M4*AXRM#B81cDyVxfEPNlr2d)k@eh3d>l1%;)2*doas<h-89z9>
zvh+|ZU3kItpN_J)^yfxO7u~jb&F%GOq63TqYc2!^3&8X|uz#A#FoxexwwLw$ZEa7+
z)l0eM+TYg7gkcK1$BOUHi~vK;Q}ig3sQ;D-o6YuTB%Y3qTf^@z1u>D|Dg~J)V>kNq
z(_{o8`$lo3=kqZ?<eyu6$iPT04d_lv6D`>;EU>SGFb&FXsOGo-Cgmc!H(?>ffgo~b
z+ZDLo1MY4D`!55=_Xs3UXvB_ypHj1dxDW#S=9Ij0{Z-MO`wy&ncIoP0tl`6d@Is$=
zA(t0xgRNWolKzXg4@|!1>~*7Wyx?-+qPOM3{KgTfoXryMD7R%)yW)=AG8o-*&&t(H
zAHDvc-Y>uS19OXJgYe67!tgY80OrD<Z_m^Z>FOu$_{zjvf8YnB`eO$pxs<Ft(oQJ+
zeyhV6V#(Vw5n$_kwyk|-6*>sge1fr^604|&T~gR{!US(>>G47iHhw!yL-lzA#Vs|F
z8JI=ZY|D*(gVSsHCQNe>=f|QU95%d8cp^ZLnSL3d*Kq*G$a#LiP6B3izZnkd%^te!
z`p#Ie1t=L1%-9KJ*mQPe?7g5Mn~GM(`ItW-N5vUU#wVZ^#w1@x%X%CsiTON7jhGy8
zdmebNkZ8R|Vf{4Fm?0Q}q{PhQr6f2~5Byi2eR=cXoyUG}B-s4db0IZXztK3epY1GN
z{mwUEcE$THxzWR#Z9c}%YKHEpm$>elAf?5oay^vlgA{p4IRKr`xaa)Bczt<k@lE3M
zH%@#udi)2TZ9R9Cp8Mr?ynJ(;7dYtRAT7OlXW#$(={r;RfBl6T{@l|9;GOsf^ZRf0
z*3iDX9Ev#iPuGuLsrm~W-8y1f+9I)bQlL@O*mGR-c3w*PsRfp``IxJ3%K-8Yq-Lul
zTkq5N1eg({j;7f|G7|c^fD=Jd3T@{7d+L9q-)9B~J2ii|kI$sS#G?Eiq`#{KbTYta
z#)q>mLB=oOq{6l<*#}t%;%LE=;B;esk2p*DO&P=A$C`g9V{<dF2M}$GA6Ouf<;P;+
zO9?=`nSR(yv9b|Zya^zZR4p|ch_y(gr34PIBv?1FBiTB>Ugq?!pD>@wH~XZ_Pj##O
z`U|%=aKWuJGpl!;sJlTZb?o?QS_kwpZ5x0@6GB%x1=8&kQUopkn&02l{13mk^~&G4
z;Z;Z8HvIa(TU}h;pItjIm*eI0O8yUyb;WZoblMx<?&KHmIMTZBv)?)cFwuB0ciBb5
z{w)t&w*6=7D(&}^4XK<sPhzAD?3>b<uGyiUtPL+IpVu~ebChRd4@W>#mYY=Hfnr8r
zR-aRf??KXhEoA~JZQdo4u8qo42(m{$csR(G0rYczK%1U(W?+psV*#2eLi?2|!d(X;
zv>gZT$pVP;Bc*^N0XGLpyeX3dm=s<+hVM`3L0J#oh!{i@gUHbuArtv&c!<82G$cSQ
z?3|FUuR+6^?YzJ*1;E8x;j1z5*(r&Q|D>^WzXn3BsJ!5=sZ!|kT{Rm%>VM#Y_aC25
zKd_+@FR}`7uPewhfYpVKlRJXlpMB*nx$CtzCm6q^SeFGI=%D~&U>GQkL%VB1b&6>2
z16HPx)<Y;!P;RB1B#8`<{i`1Q&EI|Qs~?^J$aOKvB)?3K)3OA3{&BeR_(Q<s4}mNH
z7h2<0Kn|OKe{5){%Aq1#<rvPG%LxC$8DPF@fHzj@wIjVO=wVY~Ld)3+m_l2U(UV~@
zyDox6O(R*RI@z#~h*{^X2E>H%5*g2j();XTI)WiogJ(vY_5ZVY^}O~Uod-FDOfcjm
zZ2)oz3^f?XL`XP2mnSrWJPD8jttrh~{NzAfQU)pmxd9RhF(b{{I5V#wPcp~XEqADJ
zaaeBvDprjD@kHePK5&5)xH1PE7y@Q@3i$hg>M_maLnclsftiMqW0lR#vGTe#i_5Fl
zG_ZK+`DH-%{qg2=#}<>B^Y%Zq?V5)Up7%d~_|V9<t6sMlisr1Vn^j<J8KSfdv{rzr
zqfoOAc+~`H<RyB!Pc`R6X==KH$PEU%U4fT}?8q4h&@)s1oy?Q_Vx;Jb!ZqWi%}JU_
zSB|7;Q46c4u~M^WKh^yl4edZoMy^qi92sfumJEcfEQCyGsV3cMHrNVVNQVJ3((T~#
z!LMjIMJx76cd!FP8HmU8gIaLy%~qCW5oUOZhl{gT9^(&upH9T*6E?=5IRRS(b-V}Q
zQxqrS<bEJt5~hTq79W8eWYBrQD+68y@P`Bn!$8mnC{hvPjEDtGOh>~4lB8q6oCYn3
z{Db>FflKoO7djF<@(TC$13Sk6F)t7`jb0*kJ(4s<s`3~skE^{aW4nPT4}Gi8jy~U3
z)JP9T4}ED_?LTMb<JbM()cl%Xe&df7LNQx+N#g*t%W$y;bu@%Cm#F1Kz=O{W7aln>
zgePa04j!l;{@kJT(RZ~I(t><>7(X3n96)ca_#M1qLg$AAuj~#MCh9s5zwS#(<Grnh
zKo}b49p&4~F_{2o-5f<tR!%iCYwWjxq^_APLl?E@P--n8D_O6agfAg^TCk}hY69LQ
zkcO7&YfreNerPiQj_4L><Y?K!18fVCYIZ(Jn)$bYA$zOd$Ls12@b{q9U&D0;!dc==
z*vF*OpvV=CspCn_cwVD1qahAxI0YJj67YtA{4n4R2?SI{_u2P|U#M|v8LmLH1@D&v
zMXhiw)L0}aq@dN<q{e}#1#;Z0q>_qD5;;`pm#!#X4B&&`>J!XBU;1yUwGw|$|Lgyg
zeD&t?=)~Hey5>!ysTSJ4OdO<#W4N=fdgQ(l|L?yN;eqPmcb$mu{D<Xq=2*2=&Gxar
ztU3W_9Kd&cWO=q*DEJi&_7@Qaz)UF7ZrOr9QAW6v5?t4+=~A6e_7)n0Cw+Yq#-Nlp
zM*}i>keDXx>C=oro9;(UxxC`vk$@4U(L|mhClNbBGMOklEjH4wyqDGcHr)W4AINY4
z$^tSVkNWl<An;_+uR|ryjD|gmssAa9Pus>ZP=|t6ff0}w&e-e)g4cLE+`Z6JhgyYA
zjph_krN7T<n;mFgfI@%o4FV_$2y!Gb;I#!->KeaC(j;wQFs5xp!1@t|Bd#lXOEAqJ
zIReETP%h-*=zt#O1rEalATJz-3GQ?5`H%nh`My`5e@$_yZ#YUwo!Fg@)V=qP2k-ep
z_~_k@&);;Seq#RQE8t8U@U%aKaN-mW2FnRT1k!0L#1Tnj8EHJzzax}eNJ^KJmPFi0
zxo)POdfpW%76b~ULqawfNz`T)R;n#Dnjw-nCBZWIr6Ptl`pEeLB#UR_S5J*^u4zu4
zjnJp*;ddmzGd;lW2r%{0&D=jn{cIzUO~-pkLD?K4xBa-%FpN0YJ~0`8ew51>9KXMX
zaHS5dVqOLANEe>x%UqB{Q1GRjbK%gqGvOl5RJBP3=>#MJgkDj@>jMj;k_ppS${MJQ
z3L6?UrJdIj&1xzqH@7g6E2F6;J0eF4j8}wwdbW;O$J9Uhjt&Ag=$)KzEVdt<nf`-k
zAKU((3vYC*&P>gH=J7!O*&XT3*Xp0XYNjz;f4)e_%PI0_$C(V^yF8@RURtR)(P+=P
zL!}Z1ps>6m5LdOC>8JFR(_z|(OGcBT>;tsKw%|$Rh}jzfjd@^kDaLZOibhmNqMI<*
zY2fq5VuE~m5V=*3X{&W8xm^Z)N72Vj*%%}45OlIKpeM5PBwtpSbccV;NU+5Mdg8x%
z67%<&3;;*pKp;OTar7$@YIDnwPRPAN$_x^vWxJ(OUy%^PgXiQB1O?;@d3b>f(){y1
zA|om2x<=dt!YQCe9R`vd_f5Bio+k|i8cJg8);6}Dy@cptffYB0Fm>TL3g@h9sSiDI
z0t)SC&B=bJwYj<9biDATr=Kn3!s`Xpe3E?d-hs-a?FVip<EOHwE0gr{J<d3Q@94;4
zfk2G8rC2o%K6K#04R5<{UAQWOOBd{7gK#9O#Wj3K!t(_3MKXE;p8&8JsIDkXEk;;e
z2~ls=5vdk5GiL~rHzRk#itR}_2x}>Fgq{&(Z+~mjeY$VY?0--C-$~^&)nBIZW-|lI
ziidRM!8#>C23Ta1lV)M3Q6Vv1M`2KSx@hvIZ(m)AKr9|1eCRYW<pOUEF=<Dtn@E!t
zv}*#Q<|-)yxL%$eLcWlPU+|F2JD^gD9-QQiX{(X&%&vii)(0%ac+H#Vv2-Yh)e~)8
zu)c<7SpX%4hSS2nzg&jnEPsvXCcfho-P~th%^!Mre?5Fh+f`2=7%kj=tbX5g`{_Hg
zIgiufIO71GcRYXhpMk2n>0h(Gphkxd{_KPM)Tg(uU#oVl-;Kgbie`~!Z8CbC!}q53
z-AgM9vr93SRzj>aT4={1Kc?gQD0zL#^*rUkRjG2NhLRy_Qc+)x(g{o9rFyrMj&r2$
zN_89H&kpzW4(xQ&eCrGhP{^_$q#|sbMK&YQBP_yqV1SU@fu?&PjP?h!{uSJuT_a9i
z0O6XgiPGm1fZPO^CFII<N@)-@8MbOcsW#eC8|`)#wVDq{dT=>I$RU@@!7sRQixMvF
z7$9gMRd~}mHH6Q2cwp}^CJG7S!*vWy&Z2NZpx*nwr`%(+3(M{NfhV$0>pMBJ&$6NB
z>rWqBe(+15Tyy1D?vC+n<G~+XX*aWX3#Y?z8ase)RHq}Wd%HS3-NSPO;pl?v>Qcei
z{R3`Wl(bOQzyIvt7p^(Gg>@rWb5TobxQR}&(ugp(m|(G{5Vi>zOxTotkw+oOD=8yH
zswUI)gr7up*-D#8RTD$yoz3CGE_b%wmQ<^<!I5!VHQsCh*5Yzqbl)1iLk&hE@z@n$
z*)R_uJ#t{Y_LEtEU6!$VCkz27(*wv_-Wdi!Sqd))aSb3y%F4p=ZH7SXCejAu@93*C
z?m(j8OL$VNRBM^27;zFINkYaAl#bA9v=P=^_-=q)&PR}QQ7JjRT5M{$gvSs07|JW8
zp@+Cy#P0GcJbusK@X!CpJr(2+{_1jTno*MP#%OuHSkl&eTlc*2xBd}-w3r_Fz*PLi
z-qR`ipEgXuZywdZ@$g(9zOHx$j11(|z&cO&ZLPRN7YyY`b{EURmZAQ>;r{-9BvNB$
zX(rlpVn*&;nn4BUV&lLKDCH;N`FYajPr_EJ63YAC&=oTA<D`KonL}I6p`Fg6t!I#^
z<~*RDNf91}R_7vdcWj@0TUe>wAm`h$l%9mYUZUk{6gLBvvjvNb#57#fBLb3%e-KlS
z1wJfw*X#wfr7Zs}0}HdRff4QK*8c<?nsz0(EG=P&I181EK&1@K9sz@T!jX9DqivP6
ziM=GG)Y420GHFOE>R9+fV6aHUp+hRwZMReyh)RV)<#?V<Qz7F>$W|g`D@+*^U=2WW
z8m>U#36%?k%t?WvyvDGvFzyOmzSBiC`AqXC{_8(h4jn!E)n(_CH#DP_Z(sqQIZoRQ
zpgZ^d?V@_lEs7lagFuapmc+!iiaT;qe{S%y;r{*$CMQNGR<FuqaxB1_wH1u5s-WUa
zm6t(?Tv4Ukk;!7{F0Hh1|NayB@Yf&0L(l#lRJ|YN`~Xrd0~&r$Nns>xAyx5Annuqm
z(b}U#^}$5XKb+{rBTCn*sjkHeP3_82w<K=*!z0so{=)f#7d7*`-%n_3PLJ}A%j`MY
z49q&fW+NxT16j@AqxM6A+G+u^uwBOg=Qet_9xQuX1R-)A_)i()P|pBRCI*~21fuxL
zRMEab>YqzZGUP%ES11~trEY;QHTv={W~={(!-xJQaAc|J%3`6A??ZoO5dGy5^cP1k
z<c~$=zR@J-xk!~m#fPLW0Nrv9R9{}m!91{jSgJKcN%BzrYxv{e{%U1vX5q_K=ihGq
zKQ(^QiTJ0d0}(H;H2#}M_DXKd^Ymb!tA-|XYH(Xw4qh}?8NF=H_}DpXC;LmA))cT|
zV+G@DOBgKYR6bV>W929HIUkFQt~{~m$@w`Ut1Ch_BPnT1FJ;;lADA5WFg&O+HGdHA
z{o-fU6NgT?A~*ZX)p+k`$P5!zolDe8RiTxpiq?UA^VdOVpK~`9`qb^m&)NDz1vhs-
z8fhZMq(n0ZRL&9@JQt|ev<h1!rERb_O8YaNzK-Z;*3!!~0~K!y=&Jvi`%&~aZx}g@
z%#m<ak;#Dz=IBys)7LLhrVQXX;0I>b;qi|u=oSqnnsG;mTZMwseH0vExL-$)KKbXR
z#m1fQZtBPWK<ZLiqOwM!a)GP+u6Jc{W!@iH)1RNfU}XZM{i`rGID)}aUl@oW38-sA
zv%tFM&QuQu_wRcgPaK$rmM4C3QGM=DoAL4s?hZV2ysR>SZx-Fnzp|s?_sJZ_2YfxY
z$xVmPF1o|lj+Vx57#|&)*s!J_JJ$DM)7moDt}S6`xRgjI-)z-9RbBSw+_W$EJPJ%N
z3U_H4ZoMTCrN-E@op_ncBzrm0(%7?<!gmBV^limYT(cS<3_hmr+;iV8iJblORy_4h
zw579h<oOq^K%%FcsaUu>YR%tP%<GWWXPRQ$a&sAA>@xNYk6%-*ExYpI*6=&vUYG96
zc!2JLfD8n3SHUm>jm=x-0LlVv_rbt{1Oght0Lff``T<d%%<JJPLBS9pd`BZ+kf`)W
z%9B14J^QIJK0?bE={5)8VJYQ%T{Y;|!oI$R*5KwtOG8)qhlj6no&NIzue3Vv`+<-#
z(lkP?U002;`lygA{{Zjc`<KE!GueA~#`s^h4xk&|yD9w1WDMWU3m1byPOn<$s?qZc
zV)W_(fBgFKfzd4+Ru5w5mO-4gsSoSdR503C3SBp^qR_>{f{#N79QXeFB<7c;zub^$
zCK@rX+ok%JS^R)Y7rW-@$lMyH)^<1F5Ic@elGM7MoNwdcqAzdQ^^Pb^@~?Q{x#Hu(
z`{en}_*i(djP*B`BiW&K1TEu*Sk<`=#v{Pi0=vpoW>ANRfjR>}J>neto9+ASX$kfW
z02$w6Z~^`~8NYQ3v>w3PznMxjBL#3|$|Znpc<|5oZ&(vl!*ys&utvEE^p&)9sElEv
zFx{IPiI$b56e7$g!2AMmU;)6ruH*f&qbja!7X#5Qmb8{RA(B|5QB_X0*-olPwYVn`
zd}9)ug@iL%!Ar~me51iXKf34rLC4i212P#qJBP8WE6&9AqkZF-t{Y$DZ<-vymUY9}
zw6-5(gQc*PFC<Fjuu^yA@gu^0cuu+V%L>a4piTmn*|rU)>l$OHgTO2<m1$iU*%-$|
zQ$%--zvlwu-WnnH4w_ow$+^Vcz2#N)<z{2sb2Iv%W9I{}i__|NFhD{w=1hv8ja3N8
zH{-7?uG2{xtg#a4#w~oU9O}Jw7Jqh^ePp5^cKny_&WbvjJebKKvhm=abF+g)+|w5f
z>lq;*=HByOK+yQErU3?v37Gc3nNDN}KzjiLD!u4^A$WnLP<iy}d1czklXV1|CRj*}
zh&t-u_zoFwsA;S7cWmIj&f>e7`Zzs~7uf-11lMmg_?%x9z8EPuYGl&Wt1b=X=ye0Z
z=#`U$6Pq?oj$zZ<F>F{pjPcR_sN7en3%IJ@l<s0xx(D|tcd@G6dJAZ^88l<StfPNI
zb*)jpW1C7T+-2=Dwh2Bbl7=w<F}9YK9+?xMEZUr_`5hUSM5q#ZyygU#?s$E@878k$
zE4Td2RQjPm|4wUFEu!g^Mg(oj&C`P&G~Tq|>}gWHZCiPE`Y+@4_iPNxT7|~oEk)TH
zd{+vLSBi9ei~${cWi)xZ0gkKSx)Rb?Qaf64DM06CK|-1Va6KVClJ%x6z}M1af>T#$
z{CThTd0(?v*88<9&YC%of<GudJ<=~!X-sOrWHO|<4kuhuXw+g|ZN|EuwwWRP%_+Pm
zcZT$7>lj`H2avt-ClhRZuOM7KSn#lVb55^+Wl^rab*Q}R(#hd*xoOQ9&YB#-hBZSN
z9_<fZ-%pxtA(tCM?q3#i<!BnzY8tJOc=@DA(S0WV%Kb2kKW1478#`a<cJ)@)U$_6}
zpIH5?u8yYJcW0JkS|`8(*-p)oTopftgSJlLCVjz0+iz@s`N8==Yv~KWupB+~?01AT
zi*$h;0D)}Oe(PxQImW=aZ<krA9r-oJZ?^hmEj>&BHSA*ZR?AK)fS#Fw%rW$+-*#~W
z>hRh0-VwY!NxF<Yk~n~LY0Q@tj#DT{Yc_r=T|75MF_0K3r0^xd7~c)n{Cua-UCdJQ
zCi5kn`=$YB>;E&+ziQXWK$#bdlDcXbw^3`hvD~PtrF!*nD{4HgW&0V0<)>PD?y)u&
zj>f1~V^NP9?V4F}3jJ-Jg1r*(az4Iq4xp<vXWn?v4dCjLvaeR}^swgU5>~%ruz%Gh
zt41f>4U?;I)}~chvt}q7=<kc9CuA52*=P#+_>^#~)x>Qz6~d;K*|tKIS&E)L4I6xq
zk(%Ed#T~<kF}!ngf>uG-&e$9O&=JA2fwFtabe8W}BkH0QR7*Rk#SQfNXSrL}Um7;{
zEqt!+p4ie#rlJ>e0vhp3!X<MG$8pRy^DGNsHl7vkv<}GB{Q9KzUxxW-c>lc&zs?{K
z=i+={3u>Aop!;E&E`XGrfJmMMWHOSZ-NR;cF)tElaZ>x~nkhin)yR3&0@PSN(nckq
zr=m~kf9EjRNzUz){o;z(SH!lzK7Z4W{u|CaADhR=!*U^?crKLhCerm2NYR#URd*Zh
z`i8|uZNp-<b^F|61IOnZn3}0$es*cOR$ty%l}itYYU#n2Sa>{i77j*oc_l<OYDa`o
zo?h9)_sIct4YTO4Ef<orUz<xe{78R!{JM#WactVK9-B5yV$JH2sIOA0(_7t6gsiuv
zJ9{Gan^h&-O^qayZ18+D>b4xo%<!8vb{pOK*=&$B#%t&E*%6qtGMO*~UZy{uDcM@D
zz{o$Z74HTAx)HxKA=VM&?M{me;bJ+e%gOPpqQ&aWx^$-cdu{QLzib-v-~2tIzfE;}
zIZ+7_=@d=YQ5%jOfHj9KDd6YIc>X-kpUHl8GXS$?)H(rv!PW_o5|0J@vR?l;>;trL
z08QOx4k*h+sQ*v=eIsgW%M<>c=8<LE0Z8PX^;<#|3p~r5e7Dz2hGv%iO@009hL4^#
zboLE5U37W4b@kS2lsf*w+1O1~>QX`DN)Nv4qTm-$$`7M2FT!<|RGqyxR>i>xP9cQW
z4Y`suOEW92i>Hn(UwrgP{ilu{YhdPh4fFH$<wmpiconl>t)|oW)b#Y8rktONoO-*_
zuJM5PH|yG*j4ix09m4m)0hkZ7lHXX#r|14+S#J5yTeqF(UUcbpY}!5^_Luu3+Je(g
zq)QS0;B?|Q8x-9&VwycqrCByXyp}B5X3>}X@g@Lr#J8!xiOM$Pu-|t;yl#SEyItAW
z?vz{>)w_=Cn?-Gdn49X@77@<_3Q1cpPPD&c(@pio`phrIjT=6<5Pjhb-+sAeTq8|^
z)KStH8Bg|`Ou(k&op_XycZf!3X97B{zs`(6w`FMGF*`MAFW?^J-~2P<0dSXrCGkxu
zVrGUJ3*bedlF9)h{h3i=V(>YX{%Zs|V5A(QZ(U@Z$ahr&bl>Zd-1WOlxcKvzZ@;8+
z)%n*gLl=TQQ_X-rZ{L;h=y@GT>1fqT1?n-d5NbF}1eZ86=Qs$w0L7q;N^uDN{VJIp
zP|5c5+seH@RNAkpIBB`_t*Ep(A6`9oIK2A!p%BLpR&iwiOgOi&_{@r~Jv<*By`v`P
zo{V#~sg_)+w$ySIhBVXh?XrcJMyBvRb^zv$7^_@%PM^5$fmH*${Hw3OJUaifi8_RI
z(@4mL#WZNt$>39jEx~Fzq=UtmYDzh$x#)SDi#7Btoj2cG<L`~`qW5=Mo!?!xZSIpf
zi4Ob4Is@}_^KDN(nt_And9q!)o##7AlHWcjSx=-R1n!W#dHogj#*@pRkG!ezTKwe9
zw{ilc|3mA&2)A%NQs6X1H}1DHAHREkW-`#$@tHJOch#5a?HjqUPKuwg{|w4+N`cJB
zbtS<phQLp0-hVCw$Qih_NLiXKzz%f-%(?K!aA~#x7d?T|kv4*XCM1vUI+Dp0-{JM*
zJ0&sZzxo&Z-LwDOjpyGGZCZ6+b9$*&h|{_$iy#rFMiq!42$wVkY2wm_qLhH>k_4C%
zWjoXwX<MQmIhbD5(m0L0^qmxiU=XEBit?aRXAOtp+1Er$zadq^Y06fu?$6AG=gk~y
zop=1X=8qoTzl_<#bu7)*X6I{54=l;)uPv+DhiY<R-?EyWZlW56Ve=cXh0M`*5e0p^
zH~{lu7QD3;KR)-N4eKt)Ew|lNzxu6iaCm<joOqgsJ2aw@w#Q1dK~}Nay{S#DU79*R
zOZWMKJG<*`EpHNJoAYOKc%5`VGf12EcFKcHJC7AMtzQ50W(GPFx2(RIJ+lD_&12hA
zp(m~HJZI-A95mYvIo5xHTs?jyNvCQbX*q|lPEuk8ev`~XBrTe?)v^ug7EP*c9aiQ9
zIu>g{z#iZ)a{|2@05)sr*#XE;lR3iYEe1Jh2~LkXkQo9pO232yNCqQp8!#(RBvGu1
zx34j|z7D6*MvkxnHqRG2j6?LDvKaB+_-8};tv_?~`ERHW_OJJkEL7cW%94UZ)&}JX
zMMtvus+mc&K(Cbyqo6^J5xVijG4*vML53QUa?otKJjU%Dqp_y4^gU8xN>L~$s0_uJ
zm`K9)=SNCkA1mHtu3PTPQaC()FuZ;G+4}9r_AFy&{}QH-E-ub3Ej_lZmmaRl#fN5b
z{QgBff1<9I!*<ll5T~BYimuZPNY*dk41g~F0xtNIiGlOovB6g~S8vmSK!Ta)1fmuY
zx4NsNZTpJbS{-o9MlYIku|`Xmvt4FkqCH8=v9h&w3Ynkis$=mV8VABopr=Hjl(u7p
zwqCY<wvOgzM#Q(#kex{inPCpSe`^vByZ*;=^^JgsL>NWxmi0G;_2%4_as9e?%%z`t
ze|IHt_s}|S5g`apEQx|Eh>T=UhU;&-bvXehrSCO*BlE?GzghLg1R=AQq>~Y3Pxib{
zeAZ&@WC_`w3<yYF0A5zYl3%pb1FU^W@@7N=qJNW$&#Fp{v2{%l55qHEfETC%jH}PN
z19HfD^?O$LpZhbfxbTftsFC3KBF*~~*g$xtVH>jYP><R&??#c-2o^L;z=4DfjIx&0
zNQ$wnIsF|`Ehr1Hs>F^2Q<v#0Z7^=N9W1pSOfBT$9e|s2l#(Kq`C^LlaEkKkIN3hg
zR@*L!l`c{F6r-`wtjr$>ubX|gcHPvoRh-zrh^fOf&6$O{N9V$YuT4cKzA%UBr|M31
zsiv0OahouS-YmhaDSt7_h3}CAFy1`xtQ+a`cKqn-k?X>Rm1V!(?!)XM0`lyhDx*-_
z*<+UhYrOg@J4`6$VHN(?Zokcb#{jr3-?K4U{rpSIl({FN_L(@8xsx5FA^m<%zq7ux
zO@ZyTrUVVVSblxyLo@g6fPl7LXi5OHt(TpRPT`1(ziGqu^~Te4e;@frzq%4Va^(4?
zfJPjrX#yGqVm2U6){t||Bzc&fU>u*R-Me{9Cler7nzaBsY(UcnG%vT~p=`C3)&Jdc
zsM|s{#-H7cQ?i=>ObIp)h+b<hr%~_)3wIQTA~cj|5E9KU{@Y$F1%JZp7q|WMWdFIZ
zzvbc|s76UKsJ5ysF_u~~gmDw3p4ibU<I2KBRLN<-BI$8RNjpd>Tj0q@?tvOn6GLb+
zEKbReKog%rkwYMoBRL8xZAhIckx(H^xqGPAeazN`at>(eJ6h&*34%hb3jGPnYtm%>
zWE!nMH-RqFrxhVwZ21dE8kf)SS-kxC;|srf?CDt?KfF?(TAF#_ggo)7Y0Q3kUd|m@
zN~h}~k-j^fGW~LJ0Om!w7{9!fA5*R@CAFmLKKFD9K~5SW35(oksdv_Ex1H@SkkXS4
zWNWX@Q)Iwi4<^uQ_jQ3mHb~3n%O0<n#m5obf@1tfB!SVh2Fq->vURrA$mb|%tLiRC
z;N&(T7ubA_NyVeC#1DvD=qqlPtH#eyqGPo$wB4zlVKPm-b9&ynBuQ0@R4NdmhN3M8
zP>#Ab0{2Af9=2a+B)GRE$QFKfQvEK%(J7ZQa#8nz%@;G9XPh3<e_gKsjT3NtoB%8O
zQu?10=r00m)-<><XXJrDj~<8qO^m<fugML&uldSI>8wkyJMV4PS}Py4;s)r6iKN9D
ze@14?TCLf?Not%Ime}12<OCcOFbGUFi%)EsVrMDnJ<6DksU)nxC^OSX#v=|&O3D;S
z!I>AKNKJE!{NATNR4S!x)5eyTFP$3T9iuEFm0m8DK|VoHPEZ)DsL3@tntaV<a_&2o
zl4;wm9jh1So>{)`#G`Z99eZ*C`<^|4Cr?a$et&TAclS2${#qD?`upt!zPBZScE&vE
z%QS(ElNO$OvWE3rhao)$-RMLao<%iRNVk^fqZ75et-K7JGe0M&tm`Pu&kb0}9Rnkf
z+xdAHi0L^PbTF(y?sMA=fVuKnx}60aDnU~)0fw`VY}(GKT=Q;Bli2i>6`jn$c#w9x
z<*u2yI$T^iu_dWq`^zEz`S*M83qi}g1yY?z-l~)B70BKe>npSw+&41|*@d3cT)xQ;
zxD2Ln`8@isJt14UcbAJ&@{{4Gy=jHaoB(A2Wbm}8#FvD=!|_PI*susFo%UTq|5Hqi
zQGG`<!A2&m!>{_LJ^mr5U*7)N;nKECuRQ1N)q2|t+DQ{qx*cU9(__pcxcRJ1@n(QY
z0|pppX%><g!WZo;;H|~>y))&5>87whmBw+IR;L9!>3x)1appivPqN>4HzP6p!LMIx
z&~npQQd&aaIFNA;auINz)6%<7A)ibApc11vo}jdTDA{=V2DRb#9Ob^KA3N+m^^u2O
z@wva-`ii@bZ~mu8<i~z^C7g@CpHAR=>Hw6Ejz?*zNC(D|F^(UZ#o^~l*l?DQu*!@w
z#gjC)hV8uMEE~vrbhhr#erc(>hQ!i40An(43c37Ex94xXNSD2L64Ym+yzQo$Az3PF
zO^VMpXIpUw^fLRRDKpn?5&+eTT9sY!uUmu&0yX({bsYim*j?oPjq7i$hfgj4*FIeI
zv6cA2y`~PdBpsgOPdM^Yirt|e+n&40=lP<Sv|5}aEu$md=--**vtE$@&1P@tJKgud
zTx?n2Kf^rOwf6M?GeQzM0E+&;OR{Fh;OOVn0U$eEJJdoxAF^g3sD$B<Nqke|_nbc2
zCvN)N!NTV2F4^(6dMnNaQPScXgS7!!T*PE#?8q!p!vJWe#_zO9EiWN;G>=q}bEfjL
zGc08d-ue>bGqlMfIq|c4h}`}(PM~us(C_$VvLm3ZKrpVrWkW{N$}&U(NXcn<KqLfO
z%7s|=;4T6FJ|zpKM3zU}sElj$ZJxlTzwqktoC^+zx&QRw+v?AxLr<v>-r9<4_N?_w
z)dAS3EUQn|!+9CCt7gTzSi%GMO<}|44JZw0RA=eEGSQJVVK`Cjl+|7F%1$qyuXDQ(
z&o<(0%R9rw3{aTTYznu=JJPwvKzmw$_B{DJ`m<~UE}u6oz_j<`4_I)o*_QaMc$KZb
zN?In`*c#ek71olw)k~(~M@qQ@Z57MD{3dr|^#xJ;$n?Lq+(SE}geK$oxd`N-*+l8&
zv?6^_BNR;AgoH`CS?%L_8M}$}T$p5Ozawn>uZQSkQvWQIGXJKmx${7l*w4>t3TLkQ
z>3PWtNUqSy8RKU`5UQ66Wf#=(5!ke<Y04<Nw6f)gCxL**Yv=t@w@<wKABXch-gL>1
zchuWS&X3a;HT64t5wmt`H(RmMpFv3z^{EVTa&`wH4@l7lVa*OmB^KMUrGhbRlL?s1
zOLww`j0nb<hh5T~p)*ES$y^ikyM&wsWrL2%xa?I$r<MJ!%(9BCbs9SwZ7I-ddssf^
zqi{@P=wJ;)uc*6jajbOHMVBq#H$DA|>AACSJBGXe_4{M~-?Qz&=F~%V>_{s)^vqKI
z3E!82a=jGuQ!}{#t|gTF9Tt~lRat(MyDBs%rvj$lrigC>TUI9Yq}IlYc`X)4e#Xbh
z=*bC?CLd)4RFl$IBR{2jZ#w(E{d>BAEZEp7KR690M_@SdM27M5fFzx7S4b@>+h*0w
zPDx?fl35rvR;BpTa1bV;yL$YJWT1cN<^g%rZ(0#f&QX+(6D1=l>G6G9s7cH_WBdk*
zw~^1LwHdJ2CH(YY0~vPM=@#@%0~*(q(Wh*BY@_7!E?_b=2LI?B{Oml;iZi1B($~>S
ziq!)#RO-Xwe4KWZbeI;M7G^#-;!Ff@`Iq6sxo^67$J^_PD)?>E2!vx+sb}px+ex8f
zhR&41RmNaM_dEh~BVGbIZk0gNZr7AHF;f=6tHcEFC!~cdw8N2ZBuS=HDf#}iYK(6r
zYi{pnZxrc?b3h{|tW=bOzmHNNOtosKT19*VqQu<V%KW@d-_zohwpsW>JeOt*XtXt!
zg~Vb~f}G3YzK=(Ee4ig|7~P;8wfe_g$9<`n0LCXKs-~KH|Ibb@KXgZ5@vORoeBirn
zJo>;<jE?3pu{yvay-TE{Z+GH#x@Z}LkJDAtPV24VGg6Le#~GC0fPyCF<#BnQ@9$+~
zb>GyE6prPwTabYx26NrX>5w7N*VG0^E*#1DIKFYDA>BKUa<tKh9TG`z8!W+;Fx`@y
zyU_f)$Q)_?N8Vqz_NHe2$+>s+d6$2DIr{n|l#r$=U%~~EvxXO0<F~E240tn|y$tVn
zjo(K4P6?1@LA~Wv1|VjU|9J;Hl`IReQ8vp0xC>&#24f^N{KE>sz{b%Oc}l|*`k#i5
z$)HFT*nR>uB;^Dcc3=5FithSb&fET`dMYbHl+g5}XXpO-bIsP3m`)0#GnS~8Mg73Y
zle>Y5{yY!W)@ajOc3Qd4a}Yh5q)l!*%Ua1XNX<h|oVA<z2Et7k&tOa?bAp!5$o&QT
ze$r!;!|37)rmWy{i5w1ZU*)G@%|rqlX<mgp4=y<ojgfJIy$=@fkvondFC!_$fDF9B
z)gtjM#p!#W2Yin*fbP*qpZroYn!a~x@!>+==}#ysr|}}ba>rqWErq^O8ZR{w#D-7%
zmnVNUG~TRRz(SW?GT1s_nTTy>^XYqz>YND}h>`!q+>z$!&0-2W%WoWrDG{=4fHMO7
zSQI_d#8``@3oa0xb~<^%n{51wS&T_P(+*_=-B8L?g|<*6*p9mnR7FS^iE4vNfw75;
zq9DESv%WjxYTb$@3X;y9qM9O0r!0w(cSrJmK1#pY_%!vXY5TZMTW#vvZ3$*nV0)2f
z%RTJd+Tj)17@c7U42WgXKXW*gVrM)At4-*ze!p4h5%|FBG8v%D^leE!G>X79cufkT
z6m6UU<KF9kz3goLsdKixxehrHP~@ivO|9lJIrKzG#xu>$q0Gvd0cAn7KQR!zh1jEY
zVg=1=>=e~0(nb+AQZ;J|W)YhrdD`=pvI0_iiW7k-&hA55f{+~b>F?s68%1`$5A|sH
zxp-$I|2%sxTI)tx0DsjS`6GUOZ8C%Gu~MKFQ|73VdM^IqQ?od>w19>ZYOdKtqG|gg
z8NdBpUb-M)mIX9)O+WBDu~L~T<i=Hyn}Cwbs4h?AD|h7anm4UQSTjb(wRFPOcqc$p
zYHMcBOpTkh1FfNR+Haz*y;;L$Av{eRb9;cmEPJpSMrRU`BaIco$O?Tcw`HD7NQ(B7
zCk{2doMD%-p^>xpY?i_6#pwbzAXKOM#TbKi1~w<jiiAkD<+|0^CDr<gv84IR{~G%b
z{3fb0OcGU5RNL~_9uv|{x@|{-d&x;%IzzXNx7>zq>&&+QdMLka>zrhnd(b}&R%2^r
ziu@i2=Z@hUT>wk{wd)ILR%0O02poZW+ed}^y!5EFCy@4r3#nY!#j4=#zm-q7zI(^k
zH`awe7KCww$zmCzpPge?>t|#he%~lS_{IUd1<ejX<cStwL{iDPXoVUP%NYF2#7`~W
zk&Qgl=WGE#MRSd&hPObY6*pl=Pqh&j9!7@5W)I5Yzp>;hyFbAM4)fSdn(AR98pmv9
z)fq3L>qTL3t%omsX&#S0bJT1~k|H@Ye*n$&=)ba>^h+BA%ntLBHsWWeJ#Xx-N9Tfn
z-Zb&rx)grk=Mp@({}Ar_YJe-R8bzy-^2N@?px$g<^$gzF;U8n@mI!2xzZ0>0+kPC)
zdm4W>+I5^lX7BbM1oBuV9Hx=*)o!=fQkfzmv%r#80r^GSETHF)3@FG%CffL$F$sC5
z!9K60!f*zVod-WYsoVJO+R2-u+OtQ0xmX%;>b3StI}S%_I|e-;U4k5inSyK6aJt5r
zwPKZxYzvEN0!&`9>8X7iJ9Od>x50P}lc8p4zg-4OU(JRx#vh~wAhVKyoe-tS<oGB<
zpuwGrM(j$ow2P9a)WyglMq1J)Ab*wjnjiGqo8G-;%Wd@_zb**ls%5}+i?i%Rh!DzU
zh{X?Ce#{qe@)~ZD9Dqsx$uZH>#J0w!m214E*i1)uCLc3|o|OeG?;+zpIJUH)=O-|e
z6D4V&!)$6YGj1kXN}*h>nU!qHgzgX-p@94xq>adzj%ibpgaWULC#N7aR&DU`%+pQ$
z+n4r1qYl^Y$3lI^om$zi8tT9Y@p2pouB8ut$Wy~_pPIktRcj`044cui8w3#^x^F*5
z$Me{*ri>E@QUbd=t-<clPj`xs>-<hx(Cz(YPQc&*Hr=-|zrz9OObKS>qpT*j4uR2z
z4(UfS7}(n~qzjQ)x+Gcc1Ab9+#3AiIN!=@<d6RESfFWTTso+)wgHhb-FclX^SzD7+
zbc>P*h1@#1det@2(b+qHL24aop%Pjo$iyDo1t7hAc2YJPXT^R8yrb{Afz)Lv8tz2)
zx@~l)+=c^HMy9dYMux0g(2v@926Hfzeq5$`HVYtwVSv&sJnioT+VonqgEVCz0BM-`
zEA47jaxVMxMq6CBX~Qd`N@aV{iYW5CJ>|JcI|vmqpr$cO#yIFJ4Ibq+oD$%bZQY+E
zLpQ6|+bw~1Xpnz$0Q|XTbh4i5$?SbHH~>3H4$@?xF_n5;+8F1_+$|fm>EBE=I;nqT
zfzoUQJFEX~IhK(s={(5y6M{_u<EnKM%gYfy^wGTtlSOzA4JWDS$zu-}+WP2kRHMU7
z->>NZeR2Ti;!9Oi*PMIa=7i-Vh3aTwu(UmCMvJcNRPm)RJc~EK<!lU&<ghT6&`KH8
z63p^d3kjLF9@mMiG-rf5v$~(1gXsj&5C}ne_WP3^Kracn>kK$ZcQSx%3Qiaz2^lth
z!W7g<s+ZPWhXUmx!55??+0TGvjaa7->5}2dQ)WOJjX~lK(<WQsX?luw7D>7!X@$*e
zub1s~E;>?sO!8JBig5H8bpEy$r=b_VVr@F!JC6WXK&ijq?Fv``%to<{JDdSNR$@$L
zua!IgHqXtt{u%qPb0Y=}_5O)hPf-m(K<mrteIPAB7icMgP&r5#1e9!$iSp2Hmap5s
z@tSaG@O-x(hQ|1xPn2TX5`C_wF5%%V%R3MSz^MRkMZlqr!htoc5Qv&U)F!QntnA7L
z$9n1<dnqxt%X|fcZ|IIFs-0-Gz#w-5IlZ^IiDfeJrlXz?6{}2Hffg>&=)E)=shvft
zOfQoLa~PU5EYc6WZ!Z?BQ*hh_<=lumGWVE2Uw`iKvV7nV@qIqNPZ@xDhr)EK(eNI*
zdTy!wWZtb*z1)zD)23`Um+-Hj-jCP4YC8&LiRu!i#a4xvTYy}1OViS^Rdk2(XFNVb
zenL}#v^=67<Ihrl0~_)g(S7Oe=GtS}&ZL|CjWWj17YgmcvuPsTh~d`Ma2p!Ax<GN2
zP)=S!HaJa{^o}wEwkD9Yv_#v^+@Hi(u#uF~X&#mVWTKI@fpz1z$P-5ou|OtW{F)Yy
z(n+!;m<ctm2iE1!=)svY;0%Bf6w7SuW&d@`fDWbNWY(Wm8!;_50v##!@6vrq50Gkq
zasZ?YNIu9VMyCrF0F4Bt`;-Al#8d)^6f)-^(XJdDyCfVRy;!a^Nf61g3ktjE)?pxK
z+=DD5p%RGF{Sx30Q1sUf{4sV?(>zedw~!MK6aBL}6I=Ip9zXkPi+zsJ(h{od$ho<0
zjPv2hPE=tg92rN>GfCOw7!D?P5cph82EhbWdVQqV$iP2cUx`L>RG={6;2%D)4@XWM
zf#*didIP97Pb7!t_7v*!foogIeEj{4{@-U!K$A?@;>VxL`K$i#;|qoNtR26xDv=9(
zKavYGCvfMTd0cztMud?<Sk3;5$n+VRuS@y05x=Y0+o|m{9H2`L=I>L(6ELa2d1#~f
zLtfh$Sq7k)pJmT)4Jli%m6)`%RRjF0hTpGIUTx}9QPU7P!%0^&hEPQ3Mp1xL=^!WI
z28LmmCK9b>fMhJAW`a0uA#B&tifg=cFHS=?07BWBOK0nFG7>5Ulwsc(ZGP^J+pihP
zH(TqSUEJM(+hO=+4uD^4*775#lJWeR_S^l+48WA6znB)oX*4+n0!7II5cnC91_E59
zeDbtp$bsvvaaWoGaVIT*9xupNM9i_}R-ZPJpV0o2hCd|W4*`D3C=Mkxt*Gt~8$e98
zf7}6GS-zbZm?jJA8J6lSSGCimTrLUj*ch;`OAs?)Z5FmHt-J%K(7pr{@XaiXP514>
z2Kvt-&^UWfwdqz2t#a^*j~&93`}QNqNAPqW5Uudp6L*!Gc>K-PWY3}RxADJds=&+1
z*Zx$xrB@uAzw5S*V>dNhaq9bif@hySgn|Atc5NMzv&{r)Y(cC}q|a_<Gf$WJ(~b7r
z#<Q%zZU)eO?o7xt`v)V?oweAu0o`HE*|2Y+VY)C_+=|l8CeT^|ycHq+eyu7KrY-2!
zO*@dTb&}5(0|p49OEPW%tz`#|MWC@5qrOr{D_lZbEhAPn#Hz`=0eBdQ9wAG^>7t@`
z8(&ZqolV=+r0l&kWxM|`3!<GGxGPCvUzNEJ^WRN`>$Lc6?N9d0R|oAyASaad|7mK5
z&qHws#LpYTJmqXuA+<pcfHnlXNZS!BGD|NtL>*?i+x|!Iz?JQcvP1FAdT@}WcoFc1
z1^i(k*QZHrM5#z4iH!qpx4_PrT6;w7>Gu1L)9ws)Q8{O^kdA4a^jwkCFt*!myYmAP
zG0mz>W#tveA<hc;dL()h|E;ospaEFz{DKV{#8;Ty=Hl+JEZ~7Bo<pucJ!Ka`&WoNs
zaYw0@9C`l=?)~tKVf-(G1L$cDs(aq7o5km*mLBRK8@NO@+so2%Lfrqr9u$i?tQxIg
z@kC<MZ%*IsG++<%-|73~WbVHi!9979h(Ryo6D*|AjY8b)b2w@47{^IGgbn~{vH-dW
z2^6A>&|T0#9x~_?7#;`Ob)eY<{2WjVfW|DaG6$^80Lya`TGa;H;WEPZB1qvzYciXR
zZb<4mIY_4jO=*M$+%ho^8a|<*&tte0nO(stI2$MBnv@lEbpJ9+aHpx((J$-_IPsNj
zGY2+y+hHIB?3wn<@Bov2*s)-OJV^fAzE6~SlL$BU!D9k(l5FZTfRl5WFOeh8MBaF%
zBqXIC!5D|#No>xaUUObR<^{Y#4S!f57y|Mo!Nek}`<qo0{ps<!eN5^=b}gEHiL@!n
z=pWei<{d|v89RZig0mya1SN~SbTTE|7Gxl>XI!$A!I*Y5{jJqUHEq+ZMV&RWU5&L{
zUF><XhA-Z|2Y#Mv6&FRnKRG=A<)9HB-&d3O{zOV1?WAJuWt{;SC(ufcHyrnY-SaE*
zpzBwfmE0yjjhCQQ6?c7o4{o~gJXD5qSeWLW65U~&%n4+vedlKu`R}v=`7^RlnbrMF
zC$?ICCKu+EFjE8VN&WcOwlM5u3D%6r@L2wu(p0hwibyNK$S5!{4jerJv{GQD2~5vu
zEKMuamm6p`RuIQk@*uPqN771h^AVVH%@~eS6rf4w#u|P$?82-yLGs&xvWBmzUe88^
zsYEbbS_=(yH31E1)h%tTVwr6vW(+%1YH$fpQJ*>w>}X7;!DGOz|4%eH%fUC~M~=dD
z850iBRzv}Ip<<E_8$hjIM|xt>M813ug$fXqB!WK8h&~a9sE#K>4Sx)I3;K-!xj~>f
zV5aYs5^`k`XfA0LG3sx24pBFNQTxsuI2*p?fsl;j(Yp-Awti)&H)7{DvUZ)K`3Nf(
zYqBb(2qx|5DcJ0ZQ-7Yx%&4TD>xWc_)^B$)J=Mm?{&f$Ov%+su*&9={wWl#(+ZWcw
zJ(snTnf8kn{a?hzAm&Z4Cr=-8+{*1U^X{kpk-oYs%YhPgG+WcS^Xq$X<2C1?P!U*}
z%>+HO2yfGSj{J)2dpqrCR(L(Hz1Pze<4mA;Jq@R9R%4=jdYL?~VW&}~^n8IFwV_Ie
z0K?)FsYHDms4glLmyI_6$VPyeoS_HA1wd6a)H2ny5^j)#Kp82?eThJ+IF>q1m=>HB
zCPa)e6hH&Q5q7|RcjDTzOgBlY8wVilSDw4!)}UDnoaqEGH8oQR?g8G+b<EL_5o*2)
zEZ|3m&klf?j-2`%?12G5x*3v;qI`+Yjb~(td_xz#(qxm8GXcT@QirjCrPfg_MaOu)
z->sM7FAN~?1`y;cC{}VP4M+t2K%tbHOo0r(0%%X5JRsrvM6U*_a~joYjhLhcBcmpz
zDf8i#=u8Hs7jE|+cF928pYLFc=ELWX0PKv1{ml6~;a{4|fQG5KEaZ!Z{10Cc{2nm*
z+RS)KIt4q1&5uEB!lAVi)oO|lee7AZ^(+s*=A3?2506FDOAnSB;^7^&m{y{_c*g%C
zZw4|(T1_ANjO&j4^@)Wq|HS0zE1I-;%5_^<SU8CL9xC9<-CN)_6Ev4i-g+`^*L+P)
zWbdH==Fz(da0mG7=wDOlH@z@BRo=-g=u>q(7ryTxmv=Zq@vw<2IbCfp1Jwr5j$<^_
zHrkZJ=LAZNKI)N&r4$%g4-8HSv}2$gQSI+Qw*y0sO@tz}OgJ$_>O!jsf)Fet<qOIR
z1X-VwJYOIAR=$cm1_t+|pHrue3^whVgJ<K<_5#}4HT%AIqS8ixGt5KIgCf6`9|I2_
zb<=*%I;;pt)@AS<Aw36*+Mzs5M6_62g(ML4Hpz%vzYY&#X+iS<R3^017IifAG@x^E
zlOo*K0E#QaD3vSli#Zg>CC2)J@jjq12;`{+NR5{T(n~g^EdHzri=lY~F8x^Th*Np<
zX`6!;oXGyIGvN7sOX@MTy0(*t#wqf6uwnFcNK<AykTMJt2+aL$8`0jC5+WO1I1{Oi
zn(XYupWK6`#t~kW;)x29v=$wizq8cB6R)erPwsiKjsKL`4M;U`Rek;c8j!)oQ;T<=
zH!*NS7^f}Qb=x?6<QbHT1#CZS5@9Q)wwf93wFaJ*0sJ`D_`5>B%*8bAH^b(%wr?k3
zI)axHL{)dFwdFYo3NC_z36)`!QumZM4z-&p+U+*lNevMiNYFM)G=2bIm7tc(z!4zv
zUFf2~=p-<@ico5S_K-$YcaX$6mC#;7>KB0=02x2^t%(V5<`x8TZwUub4tzUx$iTd(
zS+*)i_?R8eF(93}0tpKsE99Sd0Jg5WuMq^#I1YB2(AN44DAMD224JM`dD^b`#=;o1
z{L_Gut`t)Gw$7pihJZL0!_tVU9Y~-j;WzMT-I?`9cJRv1MZ_{eB$m)Z8%@zd(HlZ6
ziVzJ6p8;TrYE2=j0?qvrqM`Ub0WkuJYCt$ZC`>6pnMi79KP-F8`g~5$Gv0?o9C3@}
z(~-?T&^>5?hj1b@Q*E7T#+;;VDWefG&X{R1+O=txI$RnO$oD(=)Tj4iX8sUzega1q
zh)@(BnYptRs{QX;jPL%$sbKu4fCDg5DNYxYnz-*89pw%#)gCJKSI$-KWLXNif+zPp
z2;cFrZek3JQA`?)J?y^Tn!gwHvzRv_%N;b>GR*8%;rT9tz(+3d;N=|d{n89x)JieC
z*g~V$LbFvzNCvMOh;;+0qV2u(D84aLH*bK*I7J*rs4tN5I!q2Klm!ZXK;Hxq)&)5e
z6-DF(d~=1-ti10i8k^NTF~<uuq>w&%4p`Gt5L*I}pa(DAkYrBCQR+`MF>%X#qQ8X`
z41i~oiY_6jNBD$WZU)Ps)ZeW7vH%<x`DX7Q8$PZ3ay1Kn@Qv=qYB;pO(T2QO@`^Cd
z03>8v19VHsNce&LuCg*ezY!OdUSMuP5l(Rc?qC7#kc1ot;-bbPN##WvNAClgM`L&~
z;7}(aAwmviOEg_bgIPqspe)XSj|LMU{)U|nwYY#m?yLqycKzw@NTh3^gbsPi$i!tc
z7n#VT$qLvPFyPk}W2F+YJm}z#uN=g4NB4o`!JvHjIX5~ob4RHW?|biJdgt$U8K^J*
z@uFt{S#jD*j#Q=lz<IJIjyPViS<0>V+sOiyn#E&J-;HAKMhpy=F+UwyfG@RF;BH3H
zoBn6aKhqJW2=5`6^AY4-Dl+(fag?CZY@;>bLaW(C*lwT|FQFMN(kL@WF4Gex#<&m3
zBG&<g89ukEXo@sSIhv6aWpl~H(g9P`j&2bc7&TLBt)`HznpR0j7pTtzG>MK0g@Z^a
zaV9JyRYH0YbVXCYJ>%Y!ol?uqW&pm!>Qn3lI0vT;z>{PT9Kkx1q*+G*J=%hF&=-pG
zS>NAckt{$;j(}Q!1axwCU@!nOdfyJUu&<%#C9#r3sMMwX00v(n#w7CrvW2QVyK4s_
z$XLh$I1YrHgOe*j`UN<}GIB#D<VSq;uT!Xun<1lED=h98SUjT8sy2}jIV5gDMv5JQ
zuL8J^kDM29_U1_eKPTZ+3FlIIB|+$2n$j>ooshv=*mzIkBZw@KVc?Jq+wcRronXdF
ztnm}uGZS6Oq~?jY&^PAd>-QbU6MLROE{LF&hajjVN9XP+tTdne#1g*tQ;BMRU&ef2
zLJoiq<7OMlvqxRO{}szM_wy1?-F5o{g(h0@G2H*eJ-Fh$Yth&5V|KpH4j?N5y10Pt
z4p<3j&(Fd4eYl>>A6$|q2*Vilg=IAAE8L1BV-M2>B)X1NN1U3IaZBM7P{&43dv7|l
zyNp@OoN-GkNemA?jTPE0h3dS7cpC8fG)C78jI0LgD*}yq$fU{0H3?U<00zmVYf!tB
z^z+Dq>3oYU4aliBA@34w{5~0frekNh`7Fsrz#aW5Ax&hAbb--4e5bG7!~U~u>TKyJ
zr{lC;Cu{u?n=LbZs()$Oh6Bm?1A(C#xJZw~o`A{^!C)jQ@R0G7t+5&xFHFs7iZ%gv
zJP6kVtq_*EBD{PVeqRwmpM%o4Lf<MNC>S7Z`8kc5J%V(Sk<#k$BxEO$w(Cff22TRf
zV3sR=cqkx;B7C=uoL7R+pFLqY<nTS@3C|%bO%)Q-DX^?Tol(F#S^<O`SU{1{Vxnc)
zR%OP+u>5}`XlsaM{i7b9d}a<0KK>NEAY!Le2nxyc(!K6VWADKgao=0xlyvY;9pgWR
z96%2!7~lT|&nx}bQZ4!IzP|J8LgWI02+OU<@%6_-T(tFO^jFGg6T&7F#IZt@q+~)&
ztMyzmTthb{Xex?ZSgtiut1qG6TtFk5M?0QHqHDZ-Lu)cXvIExua1`lnd(L1=J>Xfk
zHmh^aqC2cav*NLaAQodyLrw|I>>;KgrG)}R>w)@$;jZ&+I&;?PIY<SE#Qg}3qrm|W
z4mkiFu{fn~S$0(WG6#U{)TZFnZ>Ej}5t9^Y6_P_>48TI4y=%d;+MgYOMZQ?HhdB)j
zj^?%?X9EoWnXZCK{Vmi$|5oG<ZH8r4c!@Va$~q~Fnd*)M;Mse6Fk)P@*Ki>`55mvE
z@pEwVCHR#h@`FB#V?cRAgZLDL(Y9w&Og{>=stR!{L7GHJ6B7I8e2xb%l#ZE85ymZO
z6<U<vgD(Q)oC-W=5WdsLw;-2Cu@E4ici|Dh8yLwl(?y`tfig-13MxUQ5KT}GmkVV3
zECg*)Ki)}T+lcgaWR-_~M;39{eUHJ<5w}Ca5Bk(X{c)_UJmEI*;HB+!{zYx~y#yS9
zIp{-JPVW9M{qEIgtyG_SXQgs>lRDE<Mp$gzkFP(mg#P>nL~XMsibN*z`62XIR-=^5
zAyq9btSn%qF^y(eMLTLC(#wd_MMP==sjBnykik(pZz6q<{H|RdlC26iGxP=(vfHxx
z$h7Er8x5<RXoxtKNt=K?Lhpg)LjwLFAkGHLeZcT$!UKrBLTI!ZZ{~4h;Xx-3bV}kG
zEO(>Gc$jNIsW;W#oCz2r5dDlYgNzH1wFJrd?X&|MbJm*bI4nEkknI8JP>HF}PuDp=
zp5VbFmi)@VKkIPJat+oHG~F`dBP2#PoK}R9L!#<~#w9od;F*LxQ+&0pXEF!i7K-pn
z1^E3Qf)Su^twGNzw5IJ8vyVyDTuu?T71F3JbsX_N37)LXwj&#6E*x?O{F2B)glMV-
zG~(wt;~-*{C(7^}{m3m3!uR^&IThsm0`ft?I8Z*wAt-uqsI((6liQ1_WE{a}O`WMw
zJ5<FPfvYev>0^4ahOgiI2!uP&17*H9kkp%plI5kRN=@;^IraF!?5Sw{r=SDKn1U_6
zoZS5*gYp&Y>eT~R2j!74ifisleF;IIkF!<@>{vUDe9p!6$~=xN9mdh=`|<FzRaBcT
zW1LPCju%3@w4jneHk0N#HqYgLJL3ja7t&vtpZ7-jtV>|zsXMcD9YopmnGIin&z_~t
z%vfpC)XWN;-z$(CArTRQp>cuwMl<xo835(WHnn6ydiq1k1}IJDEk!2fCoqkpuaTu@
zN05<&s12COb*0t;7=0>8C+$jwWw;Y_1+t+ho+mKjt)u(LWrbi`zLRAenF0}+lvUtn
zFqG;6>O9coBViKs5;*OrqQ;aLLgwv+A)OEn4)}0#dAP*_ygm=XFi={pF|<~|cLkC}
zW9o6OswYyO?~mIlbQCEhipR6NS`nGjApyAbY*uZJM|eq^iRqEtW^L&yH1r_`TgfSS
zvIyT9LEafh;0`0_l#$C7PzZ_$@&)*w&$oQRg-hz6^tmRf;hfkta->Z#zRJb?(h9!(
z^+%D41qd2w^opw4KAbEpJX{Lpo-3E5$DTM<jsFyM0KHD2mM)90-8`tSyK8xQ;ao2$
zsh_;<jq*otzXFpJ1r~uI;|T%<uacsr>o|O58c!TLj;9aK%O?)ZWB-9!OwX;TRuaLJ
z4uYJIT#o3r-G!m1ZD7%|OvJNuWP`kRdWMT$E18omBI)qHt(XNxkVGJ+yuCq#55W9B
zf#MLc-+<w@0`0nxbpDD^F7`hflG=kbEkonBK6Mxzj{0;~TzA_Y1!n)A0RjmGWCBo!
z5M*jr9$I2dKuE`kr<r#)6WQo62Qw#Nd;d%dV$e@X$D;qX|KDA%VKM-Q^%zJr8j5WE
zcDD+51+z764%Pc+i70ggq#wX3=HZn*<Oc+bqrlKQji6{g&xHd5^9MAdwi)yxZm~!R
z#3TJD?&5S+L^>mkR7x2~-YLsCn=~LXJ1%%;N>jy%k~xI&3Dm?>aAW{amf_a>;fo>o
zPCs&9AM&|DREh(rlnMxf9MjW_MUUTm%D{3t;Lx!p-2L$V2osXGCcZ!(?e<(WGxzmU
zEDpSWF}nZjr?T;%q7I<v5RI^%rU%DICeHtfH~dVpbNxp7$XtrgKNoSmO)a>*2UH3Y
z1I04N`ucF~j_r8!wF;sfV`-(Po<1;z`yV@khxbfj@4-1tO)sMw#yrvH`3kw5$E8HJ
zY_vlmv(cox`__P2CKE7vx@J%$6E8978Ucgs1guC%+5&1*!2CgAe7oVp4{ZcmbpvQ?
z+AF|w>UK1hm3CZ4-H32QXf!Fzk|ENvU<&T!7?=!{rTwmuF-31%pV}Ul(b6X@&uF7|
z+0Itnl##5geP~;WruNTz{`8z(1>%e@K+q+9W#?fNAY09t(e3QUY&miO<On3R^p(g5
za7&)d^#QqIU|=24KWsV@%hMXuj|<wzB~vQ=sFlEded=u(btNYJP?2pekREP<$<#O#
z=-m!&Mt6v<WE=v2rj+iR41r39P&J_SiB1>Emlax7hK0ru{KW!%w*ucK$52E*=R+k8
z%*{-r)@;BjRE-v-3J}Kg$^87oCFM;2;$n2~$4_<RKSdpYdDDEiEXug`uhy@=@QrVK
z<Bx<w4!K|1*QULf28|{q6*2-TP;UUoo50g^DLkYIkgB0TVD)$(){YP0k~i&yUrAAK
zHL-tc4i7zk9QWRT1W)ZdfukoDu@W}nx<2xG$x1)eTkbOGZLVM=el|(dofhobyJx!s
zMg_<q^F&sOsv5KV1PVjIz#5HwpFn9H&|IM`fRb|BzGEY_Qt<Ph^mz84X7IV!FFke$
zh71(ALWUVLkH%v&I<VC&WYEf5BVY4GcV&~Y2Fr?e_Iu9rdz61!d$3FRVahMH{_IQ7
zh5|Do5;nz52qSX<HbbB?M-nLOI#8~w1Z7_(2YwmIjR;gGjYtNOu&CBQ`X~@Dn>qia
zZG}Bp6e3IgyOg`m!WAoG$i{CKQhL{M^Z$GK;GH2cBR<YK6RY@85HP7znl59xv4Sv8
z5k+lOoI$MZ-+;bRAL|Aj3=U`{n<6YOIe2o<0uCNoL2-B_S*q^ywXA<+S>5{{yhIN7
zR5bpa*C+aL+j}R5cK+xaUj1XudTYR6uC?J&KZ-9d(oLn%#xN~MEkes#tkV;yX$RF1
zICco|k0=yeje#OCI#|HO@Ou2f)f@0*x1?yao7i_^4i7$c0{1<798d0@!|~%)w89pA
zzk*`HhaXUn%=DCd$BMfH1|1~{b5YrHfUYG5tf*8W>hOxj)LtOhZv-x=-9=-;q#8sq
zHWj?f5+at;4_tO`WB~LvXF)(m3Q1W2IR|opobuZxCB)e`;we@`FB2uTn^TQ2v8nyD
zRw-);SSm23>0Aa_z5tcJE@J^E<u?g}X<T|jgE04wPqh0#sC&wbHmn06P5?Oo5)(n*
zg;SL9$^y9|tx6M+Lu-tpFpWMReMX~oTp*=#zr~Kxa3lC!jm$~bukSswE{t&k-RPf{
zbKTFZXB^t{rKJ^pp%!D5Bxn=hm`LQ@5=Q#_u=%WhT(V^ZyDwRTt=s#sYCM3`=RlNm
z5|uKvmsfL#8~FHN-G%r5`Ip^BDwAgMv7d~qjpvV?oU(^|su@2KJNor2|8Q*ZoF9G7
ztA427Yz+j}dIZODnW@M3>>%`+$b*>;r`n#{Vl<^^mRATQu0Wl*<SmU8$AHHUYviRu
zU!bvSAdfW@>+vJEY{HMfIYF~s$1_J~asT5}xc`9}JoWTErlyt<r+o;50Tc>lZXvOf
zZHIYiSBz)NOO1tb20(prE>Q^>YzWlnG)_DVtT_)T6@igW0+i~KkBFIRYCtt7qQ<+K
z%4Kj*ne^Yyz<cWi$nXjHqfQ$ezwP;FQJHCNcE??|^@a^LQ$)67z{c>qqMuCE>*(Q|
z?^!F4FPQFlZAUIQQ}LmxTw-5l-GG!FfCDFRAPOYzArKJ1e+1}XtyR8kI(k!wG!~zs
zRcmHMnAx62*x8n2oQHLXd@>BCBkOG6{A{;;kEf>UpADX~15S~6b|{Jygi*@RRm|nF
zcBl{A){WtUontuvyfJK9Tg1d@9vE_f61`9&dL&%d=z65m#hMgJgptuQe)7M*7MH(j
zr+U{rKjiK`7QefeJMkZhHvVF4`+bQzfNrhSCvN`nq007Oe${R7tft9uP^}S)FS&JQ
zm|K?D-Lr9$l~_sFojxYgiDO*IOt8_)YRU|Ff{*E~MtriBXe`VLJTpfQAwhp0ST$J2
zrqvZ(@Y=KRAKn&YWu=P8_s`(I2kEwieS1$}X^u!m6$FKT<O+GX)Yh`+!l`Cz#Dp_$
z02?L&f;9i$plLRN#bX-dn+5ttfM}z@q7^}9O^Y_*65W-ezmfl9N-OQK&$jGQZBF|E
zQcDFUgH_avw`y2~Qga#5qocs3ij}=JyDJQDfDGR#4O<y7`*_(NJ>FwvTVIS3W&=i6
zS;zp3RAQJ0q*ZNWZ9kd^ATLG=z9<Uml%ev20+rQ3d5BkVtK~&t>PaD0!=(MxK4AHE
zlGtKLn(4sV@x7i&ziisibaJ|a5ym$u!(IaIUq}&#37U-twf9i;^H?`Bh;ufs!o@pQ
z;oP0W*s`IBfpH(`x2u9F4bdS|8rYh3kSw`~=JSYZ1w>IEN_mR1p?nY{7+J)w>$l1O
z`K6zZe&yDG{`q8obnt-q*n4_KXHV7R6mbCN81`TFj-mV|e|^iX@2EqJ1~oE%N<1@3
zZM&$mv*d<<m~pvmf0pZLb0M*KPt*3WeT^K6Oi-ynq#8098rh`<jzVC$sd20+@YD%l
zFsCq7kQf{3$K`7Wan%LefdA0OiJ4_Qx@Qjee0>HFK6(^~jvT{Es{*eufnwh%{2bN0
z#E&(mz;!Aq*BYrD#sg?8^4t-PU`V4fBG5lc<$=Kqm^?%GvG-@Xi&dedb|5k~0vV=t
z0?H%jX9P{D6JTxLG%Yhcvm=yYHXoDoB#lo^%t0<6gp`@_8*IR=$+j7Q0sgu|mn?<N
zg-bUJp!A<5S7<25Z1dp?+bIZ$BH)xI`~i*97%;dB@QL0PY8-z8P%DDB`lJNxCRT>s
z=(yS89wIK9@$XL8rjv3}YcI8;CI&Z1QsNJ^XcIHvtr7&-GBSp37jDLdTZVDo)*)<J
zUqOW;e1Rq)X`Y!rpb%-zgKGJRSITHF1qkaov}-=%mJ3DQ2EvJGe0hkn8)6>hS@2VT
zCB*o}L+&4Z{>}AYx?cW?IFhD^@aaE`Nw4e_b^@n>12AvSaPF0F8t^ZE|E;&atr~cf
z!SYg@Yi}-$nVHGCD-ZWjRO)?CGbtuB<;R&qXWyMp%ra4G&5;U?X+>K{kh2ogR&0aX
z@YGrhQ;GQ+aJV5*KB~~?35=9;7#beKZRd{TwySp_P8-;JWFC(`vVgnqn#NPl%wl1>
zgw!2FeqbE=z7mfS8<p6U>B1D<<A#P{CjjKjM0=G?f{9yZ=AEG}0uZU3;n82CgFx9p
zrcmp2x&Z_Z2*i{f5#B)ALPq?tLLDYb8r?fHC1<q-jlLj@n6d^RWdaQP8FCP>u;LM9
zvr0Rgg~=MDSvSF`>zX=@r!ISdK{61pBp^u2yHBGyF66*kAXnr`PIY`Q(4K=-ZO!(_
z89GsPIhY&nzSIe)?ED_`3^1`JZT(KXeB${N#XAlWww8djih+C{XN~t^=h}6+VCxvp
z**1br8!9OF(`%#pf_dA3sv@mAh}%BeEB$D#1ZdRrXtn~h+cdyLf+kiEaX`SMZA3Zq
zx`~LYLNgN(xf%sO0PYJhaZx$=-A~?H|M?r5f0}FMooDfp_r#=ha*7@=vI8*K&X9lo
z^+lZjp&PD$UA3HFAI#6QdaNX+Bw~M=h?;F(F&7v|s}4Q42N%d{UyFEiOdyP%m+l&N
z8a-~Cme>-QMng6Q&5J%gpC<G)O|&unmey6)AuyW?91DT+yheGi!ayDv87^Sw=p=T&
zauweGrZ$#q4Lr4f1rOYF91lKl07s7Gv675I42&WeA?BIO7ZUMfN$Iz>2rM22M$b~n
zQ(e5u?6#xBDtj3UE_FI6E$&(U#l84U2Y|<S4R@aM?v(eI8#W@-fXsk|6}Pk{RJK<j
zn<8YTp&n@~PU+1q06K>r#zW_3%7YAlJ827PCo^DCqmqW(2lyjEX#zYUNls?|7_fYd
zNl_}Hb|?{wm<?%{xU$Z-+4MnEPMpq54@n%M-Ad4^%_C_aLq1nSUy#R+;WEzKv;h}v
z8p5tEV_3VcXyn65p2Q)Pr3OSa7~~>q1!yhzp*kO+y6mCe42*yYqscVlP3KL<ZX6>k
z{G>pm1}KtzkIb$I{v3!r?f`|nLOJiF@`VQ0Uo+(Ymyf=t`m3*W{zT;)2cM2V^~qBe
z6m(x~<F9xZZ!YKyzj)o%x6}tK+x+S2n78K|32;;Ib>241)@6>Xm1)lQv-4rK0{9}Q
zA6k-4ruD}zz*1#dNQCqm+nQ5RDhcQV&oTqLc-&m3A+PD$K}!HjT4FYoID8x^99I}{
z75WPf2FC(iv26%fTumn);^2WLJo-Qt58OS2$Dfs0nCeF~F@gO03S46P`M}ZwiR&jQ
zj|-GW1Zch`rniO3MCNsHBqq?Wv-i)o<uV?Bwkasvdq?V3CVMt^P0`=-m(2tmA?1c;
zX!825V`X-s%>w9g={d9ZA3bO1Pt2*A=~#O+5xLWqW5+<y204I$bp6JN3}ybPu>{N=
zl+dB#C`ty!+JIqd778(+!Egvt#E8Qcw5sz^?Ijd)O{`lbu=UCu&OYxvTy)7AtX?&Q
z(WVFQU__F^z^GMirM-PkiLg~bvz9}(RYbL!L#^SU6**|9#7!`hd|pAqC5bayHKr-6
zqA5<T2zX8+VOWUSbR{hcVV0!e?hJ7-XvJZ?q*UnVk^E}|=e%K!|LzapQvXk{O+K+Y
zKYiBm*8K-gMJM3Cn8x4dpTD-0UibK=m){mnth&UVosM1l1Sp!BaxdFzYqmz2eSTRF
z-dylJEl0JlRdwxD2AwGwI;fx21;|W`$T$TSa7;;)0Gt_651LYIqVDqcS#k!xK<aB=
z_7Mq<wgMUsup%TD5`lcpL!l1z9ZE4!P#74K*f8c}!<$C%x*yh9nQLIr<25{S&rv+~
zw8Eiha;OehAkQ9zC>A;TQx-t1w<a%|)M$p50xSpsw1Yr)8HHWntsF-)iq5S(v-FZD
zgz09s(Pa8|CoAM;?K_?bv?ID1*~e_pF`}ngC!n)I$YxlbC8OEy1kvMkd7+13<0njy
zQfJcjqY+;}Cy4xnnS&Z}O-r&-x|7++>ljiK8DQ8#bKyAR>R|-#Jl3pI*txre3wN)=
z1?R8ArY(ag4w6(*roKs|U<uk=eWXvi2=}zn3I%F44@)&4D-9R4a+PKjC}U!!Wm@p+
z+3Sb^SgH&nVq?-WPpwGHpNyVogzXk!^ImAh&QQ|lA|#(PEsiBNBspaUFpH2Mugl$U
z-st|?|GYN(jUQ?~oE96KryEbro@!3OebFL+?wql5a{aUCoqMg^u=es~b|$8ehChHV
z>7zU2pRw}DV6z&RZp0TS5R9Bac7gJ?XI>-Hz3}<_p2;`@=#1{OT?3wN)3Gf)azZYt
z|GIW4CueX2HxLXWQk#qZJ|^tI(`X5es*;#*I4B+RP&%eirp+&v1bu5<TzXAEF1<}d
zH9{PDY8g*_;RGIk<RGRVEupb(1j$tcsBA5<YVOJbn4UBZme?q4u2s9-((W?g*KA7!
z!Z65ju_kDS1EkLrp6K*WGudFfH8^9`X4?7umhkFqE7fm15N5|g&t8E{HY*#WF#3C`
z)Sx_$#62nc=SNvPh1i>F=@<}JsW6jlh=en=n-Q8P=Fpy>g_q7_a<qwE*SI+M{C=Ew
z{$`xDc^IW(LK3a~a4SYq582W1^G7s=X|^ZlE~((al)`<V5XPxy^A1M8u%q$F8B?1K
zpY}XZHfRjql$v&tC|x7wb0*!7Y=Dxl7b2r&>;&r4_|!(_9S)qG%H^dBoR6%?o8Gh|
znf~o+=}+ISo^S`S?by;&OQ(_(_&z%T^Ntn$^~F+h{X^TfUE=QAc4IU*m%1c{!D8##
z7Le{#Ye(FJ-ZrXhJHt4c!VS}JNi5S)O1THlySUAIr|eO(sV*AzG>acCHjqU=))p|T
zLCk3<!x929Y4f$n$!NF)AO;$Q`4E!L7nMo3IqDIRNRh9m1QyypO0zzKIfe3`1f@QO
z!blP8Hw9RK`4C=}q*&ft$G$JmVE-o$Vm{4bc4Pq6wWIJx`!PbyK?&4I6qA6yP88<U
zQ%V{?W*oq*lP7*3F#stUAhMJdtm)|FWlU!#3T3iawlmO~bhBD{YydW!$ULaY1gsOV
zEkR=aWuHSfE<uK%T(b+$9RvzP5`IylI<FB?nX?pO?#U%Yhh|ZTmau9t!M0rv&N;7)
zb9QaQ=FLMWjF!yhLa9s`A!&rhu@MJ>qH;`Y$nEdxbupV!0(FI*w*k*Sm16FMgF@M0
zA-p?)R+W*#(`*6j0iXktb^;D}K)M@+`8}{D5x<d{M0mF5jc;b5w*$dii1Z%S=t7&W
zKz?G`eaA0e86H2;9R1K=CU=JAr3>e4C!$lu35f4I#n%~-1NwD$oVE7y>n^+Go%Q7<
z<wwNt&AL0CCT}*d)BS7KdguKQ-HDw}1Y)fxG7QuI=ik|s&19zCM>=_9Z0`kZwBj<M
z3_huzHCil%MM^n7FR9=ZGQ$jLTW~-Eo)%2wt>IE}`c6T}*Mj*ZMNgyXrYKfY<W?(q
zYc(*&n!1P&w=n(nCG2}(Mebj5Rbk5rhAtg~dtpDkK8cF$Z`UKur2^>y#4X!GqfCfX
zSQFJ4KqdH-Nyhed_UuXM?gr?t{?7ISu-tcGz|kOY#)JFmwPvsi%{VFGzGWb;lHMVp
zs~VyS<b^<g$-(3Zl}Nznr-1?@x%^BMN5586IJ%5sG_hq(jPuSb;k*lmv3ctd3d2-y
z8NLm|1PM>x*^UE+T>3fPY?pw~m$w#KezLIg;x$_F08AZ~_{86vDuLF9n~6T^7#NT^
zllvDvbDq5J`=oA17wqitA?)XC+M_~Jm&CJJ09|`Vz{SY6<vopxP#D?Pgm<eK{?c1M
zTKe4Q?)kt`{{!!&Hsz^66cXQ0<M*7h7!+^#+sW|@e(1_ef4E*-^8I!~Y<>&TeUlT)
ze56_TWOv4MIo8PoY+7n{`*~3%eGqovJ>Sc&it2g%jyl#i7=O>>+Eg%8i0yp%gpSju
z9wVZu_(Gs183nqLELEoB+a=IY1{zRX%+cJ_F9?C6m!j+|6e=maNd<R<161faW2sLx
z)zm$+IQX?i96uott?9?WwQDi4djPo+3EG@SWkPdV6XwY6GZq{rK+TZWItscO9k|Pn
zx396&$G1)(TL!|C1O@}4Ooto-IRMVUZ5c41YCJ$x<~jjjB!D2<`H`M#E{@TjuH)f*
z7qRz=Iwpn2#&J(xa86O3drlD>&MKlfOg%L+c6uS!;4?>_89aCWOh(2ZOSS}sDUl|_
zNbG8GGV+j?hBP$7w!q{%fzN+X;n|1H0+W>V8nS_{=iwQ`L>Fc1{ESGHfuCImkj+Jy
z>%d?uG%Q67b=GSj`m`jcV0I_uU5$XG&5>Z@!WP=+M&VD~{=w4yPk#NEk2)X!V`^cV
zL%*CIfO!f>`WTXL`2Df|3x4&wYk#EPs8xbSvt|0u8KpA=?RqJm*(J;PJ@eenbQ?FC
zvlZ9f`TY#k%4%Znd0Tm>Y&4W=y3W~|G=NW|6a9Nq?QGYc`C9_VNE5$X_tFP$lyix-
zXXK*E0g)5PQG1ba19Ap*KD5-ss{2qj;R%5PwUDGn+0!VM5_shVVo1YXOCob*a&?fN
z#PnVBIR0pYg_;MwVF<w`1MtopKsxAg4?S7};<}->a+I{Q2-(t(j7()-a~G-SEFhZ!
z$aDdy6-HeUTF_xxl>JuwnjSvz9jpL&Fa^9i&^R9B_!BEQ@<<i&(KgCaf{C)m_Ok+9
zdifBx>?ono&twam(kF<?dKq|>oYJ$gv$lAT*QYiHMR=>%!XRy=(F(!0kc^(PpxCtO
z+Fa9{e~+&cSURThZ-1LIenam=7ST->-)()e@n@0W{w#9>8Rvo>fCWeSz8O)9IyA=k
zjaGxf2TW$*3gjG(z!B*4+nBsE!qL)V_~WnsXz57p{&(zceC!`y>{38{zv}*B|CMha
z$Y1h-8?XMMs#cSQm0Gh~mu3iZ&ynGPe3GVkH~Se(?Pbz>^J%fhf5!oI&}p-Emofn|
z&`#v<rv9`V(vk>_1F*`~_I?>a#w)`ad0@5Jo{K0e6&xW*445+lb_UF=w~RfaBM0Dl
zclt__-jpU9E{;G>Qbr({>RS}Vn59fXAt*=44I~hwfV0K}3dBH(k<Kk*_U<_xy>lKX
z4#%ji?uWc`9m?ksQ0DXaakxlpdW^H9l-KYnOqSJojh)39me9l6f^;K+QDbyYK%096
z@<j)eE-+xWqhqSt#$%5!;d5VGLjC?ZM8_0X59G1?nj!4IZWvoO=TRolR<yNPJ3&lJ
zNxY8BeoBnG6L@EgGrLq6nI{Z^cm(8ds2xYkSX&yc7SN)lpyUW>7Xdv6wQ`9DP8m>E
z9@x)jXbAZ7-=|oaH8Ud2T{25R?ezo8eJ~dmX8@cTWf`9}`pf~?_m9a~S$5#`7{AqP
z^yqqEsWmgUO+10Xl^F0^SaplW12YH0pMA?GOY`nmcOR;K<^C7b35f4YyU)95N56CZ
zQ`cYq_G-DjGnid$NV3}u;m^{0R;9}@mY$lub7Y_Z)waFB6r<vdWm~e0d6>?J%-Fy;
z*8HToXMd780G?{IpFMrRrgZ2L)HJ1rK_NO$NE@`AoCRM@^x+#xZ5u(%{RuY+IIT9d
zHGzo4@S`a^ju@o*FHOV<s7#Ow1wTPhX~P{=z=RKHI53kzs3X}s&(2`qgLUkkm6#u^
zpmNzbwq3po#k|DIY{~;vM1EpH+)T}YCg8G}8K&`CK$V;&l`ln?wG2tXBqxF9d<%<D
zFXO;tH9Y(1GLAi4MbJ_>cdQ>5>=?kd4Skp#FC*yl5EccT%^F@sF}I&0I58UqG5tcC
zcC?+AEc>z!$Owv%B9JlgHbr+bc8d7K)v%GCfjl;PQ_FL9Lm)8C4rEylJx&CSjSHN3
zI>E!AHM<4PDlh(UJ3GXsHE8axFx9-rG1#sPe}*<=FjB521E5X-X9B(2iJS!pNq7MT
z0>@?oMCmR#0z<_nMqe$}M?Qa_`ki0?ioaa`)T$HJCuUwOCm_D(h`+mepdYs!x$L~x
zxsz+J!t`8|uKA8c7vGZ{0EJ}YpYdYG-fFc2^>^mFjXXpTI&JSm4y2RHcQOJSb?Aek
z4}?Zw?JMU}z|aYK(^n4wXac3J3p)#ivIv^>&QE%-tSso_1za9jZGXqJrGsfDNy-Aq
z8RUurzONAwkVrKy*Olf**)M5V79A=TQUt{aemRC55YXcuFyg}%zSO#@qCLm)^ylaC
zwL5A!sPowR`qkKV(+1RQL_bapeVX6oj3%r&ZKjXG%ehQTCaNpd;f<9h4nMPur|+J@
zv8R^Mm`+fZ0^3IVaoN^koV}wTlj9`mO|OJ<?*wS4W(>IP;OLZ#!YvNQw*cuJp>S3v
z=y@zbF7;C@n@+|~^*kBBP2(dAW>QO*#)J8*)daLM0o`S>c3vpsdr-zx$O8jq;PZb&
zX^`wSZf<i5n|XE&-bVE7b9J8YAbLxKEGx)VntOy(Js~**AaKwG22=L=u13ib7$`L{
z@)}3|@t@rx|K@*w?eJXiPdk@dQ|%W66cpcE#DCBoP_KDl*I757bN0?RM>C5gW5Mgz
zta?jlQMa-2&Y$)GKQ<N5L>w{)kUdWq%(LZyffBfHYY==pt!B4@vFFY>>=_WmDSpN;
z?}_xi#(h%9p^E`@tA_4;c_+i@NikVhkFx^Zi4t~hp;IQ5Dgt@J4TyVA5rr@VBLITD
zLkK$%IEu%a{bCGvIE0=^r88Qf`BvbWHs<$A-0}G;{{HiO;cjo^hkyHejI8cQdnw_`
zKT4@7UCtLA6w9WqzO+!sfqe^j^uD7w{KO*kg2d{43A<L8aPF3V>{v5|wPQ3m<Myn;
zrJP$axE3}AR+e4NwH&M{iK$tExme=|f6H_(lByY0A`eT9EIQS!e$S#jMf`}7dUH;c
z){{P9LL?hDeA4PRGYvfA@VvR8Y&<(-jPoa=fb|;%9{H@s;YW=c6FLTL%K&@LWwK}4
z6eO!6okYLx!3Jyz(7^=wzUF)W%mnE+*jWl&9?)k`{*uc9tue7GMCAq@{p`<utnh`e
zeEq{y-ao!2Buc8imR|A>z>yvX^sE2-+R@8?{>t6|p}DXEpZ4CHBU{|jY3HAOoFw3q
z^$5DZ%P;^I>+Jlo1qf{(m9f_tAF#-+iR{+nTV>s@17XPz8xhE1m@=ccEoAO%?~_G}
zj&taylqUg**@a^x0beYvwMTWoUCx<xFL*YA7;~hNN6rA88PL1}fl0hQ+Yts`))E7L
z3;A=ZXwE4-^_eF2KiS4y!^fPag`B_>&pm<AUBqv_?>4O2IfB_~1t*Xk<z}9n!_!}z
z!7~reW9e`eMWL{BvJbnrkKw#?$FOQc(bVuXpAcHhv<m>EwnV+<V18L(YF=QvDzF$y
zYQZC>GAM`tzrFVWvh=#n1HV7M*!?>9%=84LK_Ea9BnSr46hz6^D%fS0w7Xu}TjjFL
zL3Y{Ju6Ii=Z`oegZmq*^sjOW&N|tPyDkV~Zv_z4TD2XCSfB*pu!VD&-p3ePV_sj47
zaqFCO@BQ!V0p&zMXs|EY=$;q<aPPV2eCIpg0hRfF@MAf??=QG$T@{W5@9t49fF1ok
zR=YgYn8p2Pm!1rOwlj(no+MNeBpZXlhl~b;(7kmUS?-^3Ll%}CL@nUypG&!Eh<JXA
z+yey)EBZ1oYBucZzN;*beq6Dp3&YNaK(QvZ2SGbO-oOB8oIpKRLxwXC#u(kRH~N7;
z|MT_hTVMXco6)EL^;;bZIB%BgKkI+ncP^B_?el;1TmN!r94(al<AI8v%_d(|^Jz1z
zJG8354<0HnEG2QN8GVZ0rMw6A4T9_0`F*u01t#GC=$)B>FWn7R!%>b7B?KMTZldin
z@(;6Q)Ph$nXLU}QIrMt_VD%!Uw4-IVsEZ950G8oWxB-EO9E%D$hZu;J8c?mNaDmu}
zs!=D^6+QZRj=kG4zVM@)SZ{YQH8+LzXcu3;@gjCRO;l=&XtzUnwG{v0r@jjd4=iKj
z$}T?hZ(hL0xiP-uu?O(ck1pVz*$Ph2QH2xX3$&tQWZbJehZ{MF+CX>DL96Ryx96Za
zaIrI>9u7ITK^MCqiFHk)qU$qgXZY)Xn@VPV^amnL7{?BA?AZ&UDn@egbv(}^T~_(O
zuKtzBh}BT=7_>1kCC{b<7++gKfQg6{01I=#SAH%<zv*&Wc(Ie`D(}zPBUdQCR;Z^K
zfZ8iCSyM#?F2KOzZ>9)SLo|g6=<vWLIXA)vl+-$9fht*wM?M0a>%TtuOF#IT>3#3F
zA7AZ1{qkFB1irycK!NM0f=3oB`D34c&%3{804$aJ!wx*xqy67BWweL5`--DJ0sq^?
zei>A9N`xSe`E55sKTkLScYh*qix|PCN?5)_0XlkuaVuLRhN)Xc^M7<72)6uEK2&ts
z;eS}EHQs}0CsPxJ7=fPp0N#y^c!kollkev?RCJIe04lqVfMK-T(~d~uq0B-I98~H#
zre>rz;pDp=Y^~+^<Ud-+&fYGT8guy4?JwhZul^p8RZ*)h!;K;=E?2R-+QMJ^o_~R*
zduFk7XNaZnG(PtDN3poLgt>ABr{5bO^M*)!L)OB`h7RIgANxBFc3KWL+b(v-K#!V!
zvQz<e9~1T)$NgFeH6g~G=pT@K+}Z)2{=F0*{tg%2fk>H;hB@c!rEp1hZF<jL{T&(D
z(^6~vH<7#b9&gF8Sp+9FR}v;biG&(`7aix)y$&vKWnAe;-)ru(BRZ@iyC7JC-X`c)
zN}EBULTiwa?Y{a9IUw>riw`r!ziJwj_zH`hP;5%)!YYs=lzQo_37+_lN5jARS2jlf
z`2TJH=0bJt{@uZi-dlwS_-_W;r<#56GiOe|zkFih@xe~3&pRCJ<!Kt_8+ZZynC<%O
zJERdf)!0)&cVz_hL{M)g5Kx}CQ-fwftLj2(BQ0;C8$z#T9X-`llezCXb&$1LpF%;F
zme3}3Xi`oSd<9+<L}pQa=oQwWPl|7<GCtH@SW}dUcTRtEJ8mlRRXI=UTO>X9WZ@)D
z2lqTAlkgXRatjxCw{WU9kLPxt#iuX*TO6ysA7}3Q6L|3KlX&z*6_4FRrK(-5?XKhM
zl`gIv&vE|tHh$x4pT?_K-iuHD>Ky*WM~>qM|JHE~Ix*T!7oE0)%?)6yo3pYxRcWMD
z^T2XiBK1XadP0j`VG82L3lcBqB<T0oz6?C^l-$1|$)AznC%?Bq@A<mOW2E@Y<;V>5
zSzdtb_{DXWMX$kOJ8aat2L%C&fY7D;99(@t@FzV|fpcY!XcZMT$><lA`m%Zw%^CV!
zMf;Y50L`UPk1G$*$z={Q$H(e0tm!DyMxx-R^ql~&e=&Cd;<tZ1dG`4mOTYK*xBhe~
z*!cc2>)s#2T7ZiC$OlXQ(uW^=@Vk1wA<A4>VpwQ;6xwv!+n-$chO0LDK0DsGy#)QJ
z^<K>@q$U>*DN2}6v@E}T1O*i??c8}xEuvN2MjU(fT1`x5B7!riLNp;tqJFdkM>jvU
zx%OsWs$-#PrLrD8CzKH&CLH(XV?8AG6*M^`0t$1?&HDJvzuCd7=eIClZ(w7zjnCis
zB<5@PVt(!k9KZjASbC^}>C*{U<2}4Eg(tu3Az%;KxCVUYCE(|Oqk@~OpT>iW--%!N
z{S?O^s^ELScLuLrNU@*gXjdfXPw6yX@C2lD)g-y`%5|q5pWp$t2&LPR(kILugn@(2
zJHYjeDUO{A(b-EG-Dh$lyZK}=ROGH=efb>bXb3%AEBLD2U3Z1PYw;VU--7YTYK@fD
z=;l~nb}+RFbhoMWTi**u%_Dh_*di6Css*ljYBF!^ngQAMSwLE=HKio(YKM&C4d~6z
zQ}>q}sj6#5=hccmcl|;T{@p+QCwu2!-TuDe=zZ_s!80$u6`_FL1>?VRQ0!HL6QB4$
zA2{>DtWsO_$8iM5BUnVQPH~6T%W=0mpbOO$uC8Ky)7{<r4CV~z7OnOWqK9=<7URwO
zY9%#bbrO~dNs};692O&?9gT~Ea@vu&zR=~rjr^R7c~#7+ZIVt$Wfn-KcQh>%#%-r~
zp>P20vQSBuX9@MB(<nG~5TYHHM6alzg;4E>e7y9f4u0!%*O4JY5Y+L-+n<M%hbWg%
zA*`H6JaW+KBp8<+3|D~5GbuK_1efCkFZL1)h}%E^Fk<+)w)-1s%#`qnPi^34bA*MH
z9{R+nQz3|?<Oukqa3lvc=%tQF@qj46x#HN1F<>!IZmR_)ib@N_#Y<1e@O@I;Epqod
z)|am6ay|65q!MNw@9P_=GsfCTiU4jvk-zO#kJ}r=#H5m)HclL>w8qkXo_HRtnMhVf
z?cS=#pZtiNSwT5b_m7TSfs=B7Bts!ak?x&5&J9tClb~Kl-$&0Aq{6SEe<zahh!O{5
z7J+ebV=Ka9aLoTRAOC3L#1H*=$*(G9N9QmY06EAICyzHu_x`anr#}{rNMc2;Jn5l#
zkl-`<ZsFbAald8;7pcPH#p<=JcP~M=E)UYW0L9CT_p@%Dc}~ThmVBQ6&ASlYC?=hl
z*O>*K<}SsC6xK=jpmudbyH^X|fL5w5U;oG(oMIvoeV-RT31P~2>mM=#RNO;=**%Xs
zXl+OMrJujf{qI7zg6CGhjMerf)GNo}c{A|cDn|W2_BMg@F9I(<3nY~Ot2+4Hvo3z|
zbHMLDy@A!$uOjq9w8!h{#FsGcrTD~8ZDHYFDU&5mJu?Vt;*N6eX_yRE(Ge|V?t7q9
zbfV)Y22FJN_!=gpxa;ETd7#tIM7CY!^65PJTF^CAUW006##oF2_bdahvL&wG?TgT$
z00dPAz~#KJ@+|0yUJu-UjKVAK&Bz8g<Id9B@Uu~3PfwN}VF$dBbBFIYKdv4VgHH7b
z?8V4^Gxt*rf(~`qYf>ST{1$IY8wW~@riq6uw=@6SANf#pa^{{VD)|FX;w>28Ko5W_
z-d4V6e)<8_tFsBE{J7bItWMI4S6Or2Wa<wZg<mas`~yd7WdJx-7Cm}_=?;VhD()hO
zQb<O8Kw2HcY!YhW7n3Ok?fPW79hVtsWC*OZl-`M`jG4UxWjLf^g}v}q+^AKnb&RZF
zYYlek9fl_bc>*Nuqew60hELB?t$>GL{=^10_HLsRl+o;M<AwE4p;QjwQumr*0j1J3
zlbw=?T9xP6+m+&=7rqR<{CtY7^=&kFE+I_^T%X~2HQed^KEhfbUww85ub=PX{`)<Q
zxsAO@Uy<4k?dG!B6|FcErAB>j?8zuMNM9TJp;T+X>*Lz%F|+X~e9*>GFML|CJW(jZ
zQt2CgKX?XcJwr1o)K0In<`y<!{?>+AaXN@bOqzi8d0KGN7Cg-@BcK<)y1)8|7rXXO
zNRLJRWI5>|J1!e)ZM1p!S4KcBd@>M}_T<zjRUuQVR2u`n*OUqsU5mYTf-I`J51x2;
z7UXCCwolybHyH^01{nZFXhGwtdi4b9w^65V!_7DDKfhFwdDN;_dG`asyuJ7pV~Zc3
z$Qw>v8deHAP!pg(O8=z|gqbL^brUjVR0woPpmuTQ^^qYUmyLE|*|{_mO~s_5BOvan
z>iTO`taZF=rMGMedmSps?yo4V>=w(;NIxVJa^HgizVx{^UORsSL72dE%6Mh_vw$-~
zIiy8Dg>q>DUJ&qik^vys`ow8qYa4j+IbhHmA{y-?O(W*jP!&+%PoooUVLx6)>WuJ9
zpWMK`4*^qU2Wea^WZvO*x=xH02dKizQ*E`idbja><a|njhf6PJjIHpFZ9mV~S!Z-?
zgin5J?@MNZxjWXiw_3A_4U+7QMK+^*&Ol`j%&)kDL(rnnl*?~C0NTxo+$01i_7doC
zB~i|pg~dK(y%pLhC^SqRSB$rGMB-ha%9FVjygVLfIZLGzCnCxyEXj#LiBXbcOh2iE
zcILQq^?OlrPJOHIP8+o1ZSMg%2x&)Ijw2zZg%ts^q~2N#y#AM7@RAeM^{B<)YExGv
z9(uh|pOi0CyA1zn1qp_mZ=}HF$R+{->Hh1Iuz;kKcsH@GLvgXiKBygwc4E4jWCWCM
zy`Jc@sI|c;JPHo)^#bQOx4;StXs4LaJP9p9655q0zkcQs2e&Ve@wwl)fZW?hEm+2C
z?`3QbUq!jpfale@O?nVi%(bNjOW<p*?qKZ}uzov3uQSY&gfi-UAZ(&p7T9sH(R~4x
znuC{LY~k|FJ|210M>HVtO`WIo)KJ&M!Zfruq`e>gx8UY%%*th8{U&h<QkG`tI9x5b
zgK0b+PEDo+3zuJeS2mf<zUFo|fS3dF9x(!gJ}`IE<^Bj{%yP?>XLmkLktWm{j268Z
zP};!-qbOdh9Xg#A;kcjX2Q7Z`8i}}+sYNbcoiYw0mBzci`q2x2kT`G}9`@n5oh~BJ
zEiJe?(ZCK(2tasuG#rgv*uB$Yh25zcmvh!48SgP5r0e$e!ZiP~T0F6fXKGeWY-e@k
zJ)jF_TtVFwQr8ct$JKweFCkPx&dms6<X|s3{_iBmuh?M(kfRu`n6$;;#uKo1eF3e+
zD=@F;PPeuztJ6>X9LKpdsg~~{wvdBQ|I&5z$6IjS5OF%d<>qf83@WU(<+*kC2nd8#
zX*9mIL>wXvp}Cb~(9JN8B9|L?YrYb@(kXnegx%2v43Zr_j$i)SJuIK0_+4CELDUOy
zQ={RmsHBm3{i7Fl;q0+I_-N>1^;&|dh6<;YvC!!~{d!|mEIdZL|9qJawgxaOzc3b*
zS)ldHi&Zs7rAtC-Na{#js*_7DPly2{10Ze4I4n@%03|3)IH0@)!369d;X`ov#+X2{
z<CF1V;ExT2<C51TyS`un;sp@dGDG>e1Ap1aORx5_jrN)!VW%To=^-%y8R@rYg9}mC
z%sQ=|Z0*K2!itBPB_HLw?DkIXaW5z-)wOqY{V9duCqJyxZ4>!^^Q5ZoQh0!o{?Pw1
z3)AW;um83dw{kHi(s<@`OemsT09v~<?-<en*Gzali8WenWeBv<nLw6RYSD%{9d2+Z
z6RkQ699!}5o1fXj>c$;TU)6#+Ty6d~B6Q&Ub$DKb+fsXOm0MkNH(g$J4u=keICnca
z#)Q}t7?8)V0Hx$zNu4wq=L{ok^<P1`mf?lxcX9re5l-FfGF_LYv9)n!sd4%eakcf|
z>KT<;)h)W!Jt0{>-^cayDT{Lmja%adHi@S|{3mb}jipHFA>V7=uZjC+oW#QH^IE4Y
zDwQ8oZT>Qa0rD>Ho^F7@f{<i99hDtWZAl6*;GiL3&`^3-l0h&(mLXsdfPSlVDz$a<
z=Uq(QA0Vw~_{^{0!pm2#XRYyNH_rCH8s}|A2FTy;JOEifvAgpN-O<+H$=q(%+DOnJ
z3~=nk5@u%Vn3^UFoMK2Vph%vThl=W0pU>3ym|Si_5w^d}C<Pa2V8P8%4=K_Rzulq=
z+r>j~a9Iz0s^pce7G(N4aWB>Jt9k^=3ky9|W?@Q?2xCc6U98##2}8sxP*ohWXr-)J
zoEOp_1eQ<xIQLu^&pme;j^9Sfokz2O8EgF)QLaqGaZB)>DYy=Sd1YSEI={>}HxPh{
zh%nqv-MH^UVRT$-b4KqW?n4c&!6h88f0)x_pZm2I{=5I-1i~QYG@8=URG5WyG^Ub5
zor*Jt?*J%AgW~8?=yJ1G3Iobzm+Si#`N1-}a&d$=QW$Q%;u){gmifSU*ngY3V|fPJ
zn9~A0c29uSi;;YoDiPNG9fiy%{T`X!tVBRHzRYAb#rEX;uL{6~2SlE$`diIo&3TYO
zGiRy!pyr^~@VNB4(;ea5^DSJuyovUH6G3T^H2b&8iL?7pQ%bqK;Y@wo82~xJVRrSE
zQgYw3o9*BG;F-Da9kp9)VRwHE)#+I*A794&VgvOV593jWK`&>CXhM|9!V2Mnw=OOZ
zmM*iRHCt@KdZp_La3Hx4eTS^)Xc5!rsZwM85@Q%lF_KI=sU=Vb$O5NK#KGUCQh&?@
z6rR71XPIiOCy0Cw^Zg1Vz)V41wMcYfT128upo>vF2XiMJ4Eh;<_jfNNb#@VO4Q-0c
zt<S)tx?zWkda7`#^2YHQ1E8j*69-IgFSRG<>r9<>R9Zo;EGdj4bx{wlSH?Kr!`|>Z
z7HW^<{Dn<Cd21HOPLy!tdd3VzG6Ztm3N*ELYf@q^QgQ4R6kr`W5gsty_i^)5f-{d)
z(C;ULB5HQ07!LNOl=g<Xtp@K=o>sA<3ta)T-<tw4{o2Aaq)>|F!^i`muFomqpqlEf
zZ>?VFR*{+*2knb$vXPLJ$XGG}uI8^Y9mX@|g0qr?Qq^PKNOHOc<1udE>|%9w8yg!t
z7>x$-JQvk+5Z&p#QXj^vU+v|ueI9SY_=Zw}(|nK*@yegtY=@hnTX&B&o{Bo7-Egn9
ziv7JURBN-CUtGfC;tU$|<gNmv0U3h~@z|AJmBUviOPX1r5nwI^(v!m!6{s6x7<+m-
zE0>>sGool8shJ+;9mTsW17dv*ZwyS%(-W%LR*DiP6%HsoQ>bh@Lt(-QG6;fs(5{+t
z)_X#UrqTeWW<C7ouU)}ji(LN{74JA!_kIh*you0jaOC2-1p4{#yb!)ef2)0oa-K@%
zhY3yGZC3yZVeJ*65E~7L+OE6sd>=dguVJS0Fp?z3Ghc4ukN?RPtlr8wRyAOq@!eFI
zGqHx0Yj3WqTqn9NB-?%a@(5?&TPo7K*6yZl7c&7V-){ko`uQR(w3@`)7|;ZUb6|#&
zbm2HhZPr0;7TDj)7^5nfsD<LOv}v2%8dxQmFf3&ZbjYetLsyzofmylkqCDks7?z|N
zTKhfhTyA4~dk?MseT;{FWO<Jnr<HPpy55ae+t1eb1{ZrhJojBm*3aJT-TxbG0OUpw
zlIvS;P<!llv-H|H8e@6t$sYVh7-e0z-(SO^zk`i63JK=1ur!C+`8wv0hn(vk_EO%h
z$X(S181kvQnT41EvxC|jKi7(>zZFwZ%imj6AmbV6szGSAVcskhsC6KHh~gNCtIlL1
zfiQHfg0&kd+=02^N>xalmm=FRY21YR%a}avUO|r8<329D+{A_RuOskB2%H)8#_L!c
zK7%l<ONijrIPPcnpF#n@LUaq`s_;Z59X-XqlWWHrPnDij<&0d?D7DSxMGVGwus^zl
z+0wgk`SLb)w-+(L?Bn(gDdsVaT5a@Qx$K&hV@!mJ?I~7pTmmIGRtbzuQ7U^FE7`IF
zlgPQ?hmSOKGP}Ni0uSKS@ML#r4Xze5Mh?>24oo_bo|`}6VRtQN10WMen-u~Zv~rR>
z!mhp2dysHVogoR05?z~=s4Fh2b)Pi{s98uf9%FsCh3%a^Z13)&+vy;tj>AsO*)c!x
z5xC_ngrD@IZFj5lQoR>lzSzgPr-td;{#&v5--KEKx%j>K)$^G@T3PS(KeIQu_QbKq
z`?5ym;X&@z!zk~$Nxp}@Ru}uNHI%|C8gmP53>q_aOgB81e;N)FCZLdE5S^|ZId#IZ
zEG`YLAY}Uk{2G-xFsWcG_E&E-|29~G8O6m{JbiIK)vl>`7~QJN{PzGBLC2EjIjtM+
z*QGo}4HFpeLw020mQO9Y=(J)y^YnSZBR0Oz|GT*ND{wq%J?=OGd{2;n@&Ft+fa`^V
zBj^;X5;WlnuX-tHRe#y}W%qX->SipRZ*$V?avkjSUcyZIVT_0Sc;=ZMJoW7>SX)h)
z<;T^EtS@LeOWM;h&XcsvC^!|W*P-vC-S)74E5g#r8V0)whZcPOl!KxPRr2}j-cH;+
z>pp4l))=6okjK8;+`OFrP(b2nlr!b|%1Z~S!;{_!SC6VL$Mj8P)ag}JBkTt*DpM|M
zwCF1YPG)F#d$@ID&)weI#opc?M&mxwwKK;{8A$a*557~$0+f<08=^nDUELVn3VY)%
z#QDu1?&Yuk=s4Sp->Sv`CN&1pp1_s$*xUMGl0WkO!{*k%nhIZ?Tbh0h)8&VHx!dp)
zzwgJ{2;+E&t<8OGZ-xwPHD>29Guy!I>=a6K9&^z9os?rY!3*R&7#-jnuc9u6ESqJm
zCk?lCntbfwQr9b1+T8Iiz8icwa6cye1pU3n<2Ab=A1?12va!e_EWXc%6;Ym|l3y3U
z``Jrqcbn4E+?~OC=S%2it0;xD{4U?EF!E2gkLXt(En=#3)kzKNYO9KwC<I_vTJ=p7
zo`g04uEGF(xS1!V&t4Us@pW{DH&G8y<MoTT@#uRNFuxdJdqcDi6Cwc>*qkN0E@z@1
zrzV6-{z<GOw+nXz+`Kr#$$N{dsINhhCe@eKGA#UZN{<$WT?Jfgeb#~dWFE63JDN+=
z^FGSe07*ogPj%d;2c7k1?bUcLf|7?)B_O^8IbMjOVYa!qhwV#y*xA{^px;4~4v;$$
z(Sx|5X+W$vr<R0Hn55YVqw!9)Ia&+b<Lek_o3~P@{UcGn`iViZx?jx5w`TFbiJgJu
zO2=s@i_@=uGV~Td6UC>#yWPC<zt{ZZkIz&d!EEi(s2(gtiIarmY~ZHoqd)AT+ug+a
z?GUwE0}D&XFuO2|TBCxg8IS3blu4kPa^j&2;KRPN<n#rapV-ZfGSFSFeQ~7BRTlSt
za+fKvCjEY;XJF$42aJk{OKLkMz^2p*@Z93=Mk><O(JT#WQ$Bml$EEW-xN_|}ykG<m
zB@E*YtPQ?|Ae`cb?K&j}>}cn9TuP~W@VpXyHUO^L)uodS4cfJd#U{tA-KGMwpcJ4k
zrZ6NeH^uhgIZVyogJ{^rOXqg+EgxCI?slU1`r3stpQ}JWenghj0fruzSZ8p{We;1o
zh^m~hM__2xvg4AgZ~8duTR>?%9R`^Drc=N63$5OfIwa9hgMIIb3Fyx`m|k+Rb1P-x
z4gvLKgJGD-ap4CZDzyNWipMf-!#Ku%dk?GIO*C6gbUSS_0?0_0-Hk=<DF`ypsghP>
zLMmtpdhTd^ySzKT6ZYae7^izT#_7&a#Ch|V6KD5ooV0Dh_P2ELzsaq^ic21)JL3pD
zzv{bFpNW!{cXc~g|K?Wj#lJLLJ{!(eA4IjZGRU17M9#=hyrG-ree?!H^lmh<db@&Z
zeFk$2^H^AzLA_Bytr39ArALF5e`nO?mA*)vYq{wrRrvL<sXZ|yv@?rY={!hLirRh5
zj%_*8YJzDUKz>B23Qb-M>Tkn~Lm}1$U@6|r^n!<WYmDc=dI9j;oT~Gk8m@Of&kZdJ
z=wmXKSAs`IfOc)(y+inZ8J_10zrrJ<pjxDH3Qm}820>@qwzY|Bb|y0drGP!~tLVg6
zF^D%%D$U{Am36%9ktIyedf45TtcURetdmuruZ%$fj!H_8FJ$KXuG?$VxyC5fD(F)$
z1Iz6<OhWr}nS`S&>p8sPC9BbT!8X;Mv;j!X-LU2Wzn*GzJz(*qhpii=xS(qiJOqJ{
zYOTadOr+K{9`&%kyN{jbE_QZzFdTM~=Sk*rDOdv6_YiP>Z<zUxpSbWdWaIKMUN3i|
zJLpEMh|-PcqkQ+@W=`kxakh6W&JHemeSmN6;(rTz0~Rn1jU?-42`;_{T>Q%==j0EM
zhS$Dxd-S#cwdNgva=LT|vz4=1H8?(i7x+;=^pkvu6#M9O+vs#QuztIYYHbFy^NX0D
zpG9M?!oU=ls`gWi`m*C`gxxrpT4~st1bS$fPtrCfm7u^TRg1u+qoPfinO_zd!QKc>
ze&gP&#jW3?B*Dy;(KDVp=`<*3@8ap-zlgzL3$C9bbZ5}&zlv^r8$o%RKSUNi83OVE
zN?goCj}drBD59>butQ+3E8uNSw+NOeButmo1WkPQCUWgjkoVTd?(jvNZhRMp!xmn>
zu!Sd|IEmez#0aJmu%`n6IVY<=!ruN5%!w@Vv35PegCD3M-Ir{IUbyT9NOsMl{wfnq
z7F1UX9tfa{k5|{2#XSmxVD<)ueG)iYnj+3sfNCW`Sn~Ne;&hBoe+R2uJJ{QAqStL>
z98+IH(lk#+RF>~SfWVpJicF5@<JGV=z8&_HO+;xgOY+WtNb~)li}Rf?##wVS&PXxQ
zx-oaHk#}@+&`Co;{~o7z_Q$yMi@sa`WP%e9^?FzS>TdtsU#JDA>oe8+F%_PU%I;K>
zxsIQDBR9<>#Ce2vr-%0b7Vg}tpjMy3!tw%^kI!Ldv4o_d+C&Y-Gtd-VHU*rt)kk5)
z;an6Ws(^ZZaK)ExnAP#Syuf8StJfJXfS%*@&>MuOik~m(KXWC-xcHSE)3X6Cyt0n<
zJ2w#oWJ795lP=bJzXLxcppS42TATsr{R#D_-wgga0ec17I%&7Kpw()RLs)N|fnXz{
z;m@M>f{aO?`^*>&f+||0*RWXoApBqoH?QBu*#{RfJrkg{E4T`01}9jMleFHVB&%4a
zbh%01Z1q}-v+vg_1$%CowO-5^-PPATVj=x<eMJP6_#XO|R{eko{YbMGLhPwWM5&ge
zI!!x%j$yoyo%TNV_xI54HZdCSgW`2Y_g$C!J4i`sh|sCP$x{rY9kiou45KFC^bn)n
ziPO!Wj?w&uC~KZe@^(L=(BN&j=>HJA1KTIAy@FnzWS1`jmwza57k+pcAAfSc`^sMn
z(D;F}w;axuAHmGjqfyD9brS*&^Byv9geV&#+NYbghSeK2HU^EkdCV`)p+Vx7RB<)V
zxU6+N$fRYK+6ZkAz}_+K32Sz6wjlx#nxmE;0xp9NlOI-`r<MoTZ&E)dOF+01b^n?V
z(A??c!fO}d`w<(hzz=YB?^8(q2);L^c5GVwp;`Qb-iOK%l$4iaxzEA}whC!vqb}TX
zb;guM(DZDUa0rl5s)}k3oIULJU&8UJk7G1y<I?L}_`s8=(b^R+z;p`LVlD+HYObQ@
zV(7mqKJY^qtzAj`2B9ysTm$qAv(8rPv4`P+O+2V~clHi4@)AtgK-OHfX(LKHwQP$=
zIXX=b?cD)hyZ+mRRUxPD%1#DC?8#72IV%@fIW;zpaoWWwUdMiP1Ks!*$U9vq&*ELn
zOUcEZUOCFIeykOrd*$u}(^vcLv*`a24Zt7l6~x)@IL7YNZstDiyGwtipDsML7hU;V
z)&9AUPlsossnUvD^G^VN0|^pjF6C7tM9C1NRtwGDJGgVBj;Y2R8-m$|88oQtEVY#H
zXZ%COF`AdBJOL&BXCIGt{f)@Hk{Y*V#I-=BJt>uHuzr7WdK2A@MU6N|wIS~B3(uWL
z6t&>`2}=GHc6!gF6W>6kOsK!O{<7PLaNLlM0UHFh`_pq8r=Z_V_F<nxEh1icQtToH
zFRFS$$0tle@LUQ3G>}NI^ZhDX!*iIgK8_%m!mXQYc=(ZJ)Eg!2wNe2Zsh_s;1SSAE
zv-k_*5w~Pi^4No(gWZiWmQRO>6cTS1w%XC9Ouqmul?IgMS`}AS8#+zw4ayE`R4Y}I
z;~-XTubHFQq{b&1DrNfo2&1UUTK<kt_nFdkH3nblx$$@xo%m&R<8_RZ9Y*)dVHNXJ
zEAFZ3Gx+Y6N3v4b!#~{oMGR9CKhw9`_(XWSk3U2M@b$d{;`Bu6W*6A}HP5a8dVt`E
zI>Y2g+R;m+B=3eZ;kz+cc^vi9J-iTNXMn^RAoa$G@(8<4G6o?^ArX$q7|dgKp@Er2
zV#^6;FzTm>hf)?QJE67Xn?sSsuf2KINYsE&Dwt63mwzjpp^bnP8rk5aBIuCUUZ3`H
z?rS%&y}brMjJcb_C~jsO-7h07O{v(m$ko%idK`a>5ujjJgM<9-woZcjE?w9nB6pK~
z3E6FB!8<v{9&DP#D{zSZTfzuCXboQ#FJQcf3$L%^z3;gf?R`PnQ%cPV6lk!3iTi5S
zfwcS954s4jaXZG!19E{CW;wCDOFM@H={*az)w%-QhcR&AQ+K6`wCE<n5~&z<cXAB&
zq=mT@0Erh=<`(Y`LU*2<w8H6QoNS{*i#^)KAlpGiOg+~}$)Cks<vvt{2C9AqB`?fs
zL5P`pg0PmN=GU>G`>rXLI0Os-ZDaucAY(u&tX>|wYfo2#WA1y7|BY;Kd>!kZmvE!~
zs~pSDl+I$d@)&C2Y2=QN2m>TUpm9cw88lmMG@Gjk!aC|xGniYP$Gq|k=)RAK8AkmK
zF}0~yHR6&kQ;W$iPgD&)j4|LHU-dW?SHM+rWkUGj#ib^MDjMN<-UAwQK2~qGaOwQ(
z@I!L_sVujG>-(QZ?h~_~+St(RW%qZSaz@~vLk7Srxvob>f#P=Z3IqUTu#8fL4AK=?
z08jae->$(yG$Dv91L=#&2;^h{q{T2@x4qFhEL7i*zzeZ@a~1d8e+<*J73}Yl>XXsY
zlZFshsh%<nlZI94?-A&^bBEH3M3S)xMXHjpAYNIsLo2MXJU1=)96^Ozn@M~h4;>6!
zIR<TD)FwPgVK*As5$$hIJw{{d0+C{vT*Y3rj$wQU!*rd2zR;gTxwMRF|33I0(XgoX
zxewp<xMNf3Io#xRt_n;qdRVN?VJjsm=Rb@@-aE<w*rRaC$%9PuAwsW=<?4swxGU&J
z>*$UzV{d!|JL6YTa_eXW_cM>3j6voGi1Pswe?U3~AkxuZYY(m6Roo7$s87#gZgBx~
z3p1$AQ7yg8JcCg$K{OBvEQJY>z8rTVDv*CA_AN$$Z~#N`<s(<U1t-D^ZWbx;oSJtL
zjbog9{#9g7htf(2y=m+Y&SkyiCQ6k#hU{ebXAdA_#NQ(hfR6vAlFxNZ8Fk%NEo-D*
zx@tm5R8`K~D`QpE0B9nzPG*Y!uxJnqFM!g5<bji97y(|*!8t6~K8De#gG(3J@Wc}j
zpuH!240U??-1RD8+hA%YifXznOEZ@^0R6U$QIF`jWsIr&knyx+@e7Me9%cHo4+ONs
zm!&xhu^h*JptA)G_rO>Wd316OBwZ<%$Z8^@f&>yNi8BIPKa0?>Aq*GL@ZJrNuQz2|
zR5MVeKS}eW<X2D*DyRklW<nS96&IBi&#hC7Crh;KFpamd0nmf*T<n0*Zy!-M0PzGo
zglLrCg{jiRly<=|T17LuhOOZXD0?&P88k`{p&G0p_X0#1BJuiwJ3^fG&}y~V7=%F`
zwdq;RFD+nhNsK{#)<rZD0Fm|Z2ovM(xkbxxJ~BQuwb*qPfo1{Ppr7vg<K|rBU#+`%
z`gdMOr@sl$PsshoIBsFH|9c2S0{x`TA+?d=IA8Jo1pq9&%-*9N+x0VI0NO6Ht(2=3
zYMK47m4eiBn#jzHUZ(_=5fBW3QiDG7EMYHTclZKkO7EoxFSv7S6{pTDqdq%@y{$wz
z@=_Wr`FYLD=RSgOkkjY#W4f+BI=eCEPn8)HU@3OXz2}Cm+(j8&MoaIdu&uKV3~7h&
z=PKKyJS)|XOLB;M`si9rskxLUEz-0#$x_sUdr>J>r6@`j@Ur9#xBH@9pMC;_UJ0RJ
zMkOer?t54$m2muY72{Jm0s<Hu)0_BEjYD7nXymDj5P@4kf=KOvW28BeIH>b&3H9;=
zsFm(xt4_vXXZ#wrhR>nm&Y@90i$<A@!7_5!N1Tx{7$NtEi1RVp`)%y+-NEgvHB{@f
zn3<nrW6+qb!uN%N7!6V-gDr$%LGvvUQY}YjA=%vWi+cJo-<|UPIc66Fy!N#<tlqu`
zKTNqy*LTXe-Tigs#P#O|O)aTp7k1siWz^p-!=c4b^k3rb!^;991+j3XCMxMZh^j_i
zRq&}irDFS8d;oU+CI8Py?Gg~^bDE1V0D|{2Cq+PBK)i+4=p`&xK8z@C;{2=E@sU6B
zUX-g2H~Wx68J%9#*%Q(?pz<vt@o0U2UA0Ky=JtAo<@;2Tk*cJlMNfJNbj(sDmSeaE
z47;Q`r8+WM4Oj`olxbq~9VjiU*p?<EqZFjYFLI?$-!sH0!X=1g#n+G#8Cm=#KSaqZ
zq2vcBdp_!+kEL44U4C*pTMrU9NMlvleE7!UFaWB`gv_>^`+Q@_C6+cTl;4X$Jb~O1
zd8>N)e$-0$GB10aY+-A39_xc=P;uwQGbo=$m9hy=2{9QGcZeJV#Q6~Ib{qTq>sY->
zq$8puFJS4|ET-lvTrNw-o-hN_%gd>njd|iq0K!f&s#enkG||jx9M5t5-T<$Cc^|L5
z@-m#Dhct^&4rZ{^`6>qKI!fhv<@z%!uXy^UObkE>GJ*~%129NOH2@S2=nkhvA&|zx
zIU}Gpf72#i)&T#XbVsEUkav5R>H#PXD1{3w`>QYv!UCqz8h#Cp(t~7_u)BQ|t2d9~
zzI&IkaZB1?ut&tZu}(z_&wye9E%3pWoaC9Xx~7NQSAoa>XoC3@E`yca7JQte+X91k
z1mp=&t4eVdk*BB*EO-G-1<=LgLOhgvp&cA$APiq4rP_p$ucIK2<XO2&DNc6(z@yzi
z<liMPM8)?}FL^jQ=Vj%Gt4LRS2*uzY8Gtu!5RaDjJOaK5Sa$=_zf<bFbi;CTTd9#2
z8G@XYR49I}pz7X(a(D`9*2Os4#8&hQHb>8)>^9H{9zdh=Fsi{x&ZS3rAF(^&)MAo#
z(eCb|y}ydv*Q%)18_F}7#mw9ks*Ql%)OeI39+KX(CdTSCkP?l|fU{3H_|Uie_`RPW
z;rVA?MVvR`<Pie5j()U`&E8iKlqn}j{}<O=7=N_jg>}X|KQsR*15nB&6F|?4J1;d6
zns89$(N*}ZgJ~=7XZPRb+JQV^0F|yG|C@0DGAx3+F=$6#fU}9_;CU=mp90Xs<qH=v
zJJ&#Csf^ZUQtZeqx2UucR2j7D(#4tpr4ngHx?HHVz1PBE5F(E%*xv@a&0N)b$YS+8
zZqO-&O^aMupew2X#0dHn6`&fNFytUM1d=)s6epL=3iBw)6nZR<!vAByk4kna{30XZ
zqY}{K53w{A;NBAf^3cihD5FN8<QpD^0B@!R;AyTbGFfeEr7eOKWCUWmb+qJF%uTxq
zHJXe0hi*EFXH>&`Q48-yl8+E2P3%Tjur+#-bH6jC`!QE}m@DAmRxri@<E(?+?;}DV
zaj%8_&Kg#4R#7cCFtad^#ba}rS*W8vN8Sik-pO2~^3bW-9Q9cTXWr%E*fQ{IKe3PB
z{@eu&(+%YLSjmQsvAXveIH3>6rv<H0e?|Jygdh1g?fhQmx}i&9g2o0Iup=6;$DQic
zLQs`$T;^W{)kT_J1AWT6s&GTThsu5vagB+8z=}$O^OwRI?2pc4s{9y2r-9*U11~;z
z4)6ca6PQ{I(AlADEg_OA38XkabXf+B+<N+`!MKZ7w}qXp4Ggn8*x&tbbnb8qa4Ekw
zts}I+p;T#dSVMxTdP<n-F%ftaQ|1k4lCVO_JM*}MZ<&ErWkwYUC<Y+ljV7RqK6d@f
zUVui$$Jr$x(>1!d8L|<vRC88b#33AqBLomgh|^FcBt<uj`>d&F6YBJyQyyK|IXM{u
z#H##`5N|3tAp<Rf&c0KEAD%=dIEggtW0Y*78DGNg_$7pH6*Hv=FjIOIHUAXF-Ha1Z
zMj`VOWKJ9XxQG7QHn!F)D1|jtYQ!;^Vb5TyQAWAup)v1adN#x57e@H;|FDVMw=Tjh
zwUDG^R_qDADcs)w6~q`J4CZ+<3Am>yzwGLZ5#S5}r2vWb=LE!#W`p4QA_GRd7Ww?l
z1~jxo-Kj@YYi*^YB4p4#_q5?5&qQ{AYDktbc}G%&M5C=D^@rH)e+4Vk-^(2McIO(N
ze>TO#kG&gn%cN7NlzEj>E;m6<BJ{gG?5uC0*<3@fzl}5<vG7Y{nGk&!W5UsF{<IEe
z?D`2IH)W(otg;2RkmMVz`9k5xe1bY>`q;pyg<j=2pDDvE?L{E~?ff2BSe87G7e9Fb
zvy~7J&W4x@rH=z``srv45)(gM$-l#90Ej?Ny?VIilcy%XOnll69isQ~WT%~rV_T^X
z<|-|bu_1gwE8<W`d#&zHJ8d;w;UCh>i_#XF(JgEZ&!glt-0ARCHWl8B>EK>?!5k8Y
zOv?bNJ3`9FppDM%CU%--luI@EKBel2pc8OojX{5e%xm)EkD?AQ$f|b?TixG5FJ48t
zvZO#eiR;A(P^mBdP>$aKfT{|RJOY}yB?*Zn<)>u6<#GuL$>AN9^#C+U$)eU4JsKqS
z$DAd0{mJks{XjARWSF$*SDv9%UcjJ#3(es(m@j{T4P&=|1LwXrz~aIR=9gzsDu)>L
zV{|$l^m_Z~4>}l(_K>9eaGWv6@a)mJW%lT}U09-U6veYp%tocBIHCDmj04I}#j{#O
z#HMN67l?u%@lI%m=UNKU?BsNxPgQ}+?GL>GW#7kgJ;Z$tA5~9e%{k;7P~l1DW{ykE
zoQ^zzH*ZM6iWYd6ns-uW2{}DO<*<HIL6r27W@C9Rq1jntCUeFtpG4d?;=Hp_h}me!
zu1S;KL)krna<GCFBP7XwwjZx!yZ0LW+{aXK0*&$mm@1t`C0OFwO2nhF(?f<n#@P_#
zh~iiATzPSN8H15YJm9k^du42Oe-o|fJj&H2m9v%@z9{&ionLhRX@WYu@Ks2_-hi(F
zK#}qy;SH`>B<`P8k08AVj7pF4st;V(0|tQAftUy+V%RKpVkEfeTII}B*zJFn4b@!b
z1BkL7qU;XttZ(7Y8W}F~x<*JT)FJ&~>Y(TmKug~+B^(21fL?M9y>W^>{eBTcHAh~A
zF07%bbzpce&@%3Z(PS_H+jlTL4YTl-$&(bJOPm5v831m<r7FO<27o*O&qv7%FjFaG
zspey;LdJkEwQ1~1LW${^HU9@k2H;H`!mCkaQC={DFzaqZw3~z>m2;NZ#b)<1qaB(+
zLBawOxW)@0*EV5{KyuxQ@eCwX;GQr1*~AD7{aJp0LR^Dn51sCpkavCuWp5s{<@?YG
z&!X<HAV-MANs%H(<_-{LT}0`K$v9L{QuB@>&Gxa;`7C<z2C9`4rY))L{FH<DGl}^H
z>?;;MEq00f&GVEmlga`E{uyUiNm<d(ujSMXN7)2aDqP?k8h<xm7vTj^?5}VD{#$7>
zGPszrAPE_-?fzFejX7I=zg$me1h@lm4Gx)EHeeN{uRlbd4ls&#(2qBWJC9y;6VB9q
z$YS~)%l+5o+lEu5a~dN4qC*1~SDC;9EJ5f4yMNI(PDo3xR&RDfWdIZfN`Ze<r84Gg
z70i`=R7lQEaXKhD%8fo!svUN@k!qZz{gkSS4jBvZ@Pq)W3^(vyB#Bxq%yYK@pPW#C
zp~mK3m3JR90tp#|G%_wN?P65!>X0#@-Htr~`kRb^3KOIux5_FAuod_X1pX{gKEt*0
zQL>NC(JNRRJcE)`Ww*ZWpGLiO5+#2gp)<?9_9(@eWNqyBUqEa83Ilf4>ODM{B@9ti
zTomQLQuU_{0Oh6G3()C5+WiF-EC@VWov`S-WRe1EQi=w?US#@x@;6};vY86{Pv<UG
zf;woBLLwpjdJLpfQ<7>u#NO})bUT+Z6+D27e*(Tc&Gqs*#>lch2H7eG@hami#J^x^
z0#Y#!>L}v`!f=V(Y>USvH`5d<8KG4T{cBpaQh`zu0U8SsJpuVkuSU5J`npJHKtwL0
zW@Oazm%>Hm0T9)<7L+kvqMra2pN@-FN=;e0(nIHr2@((SILAmjuHZ0^Lty}N<x>-(
zhIBzChg0an3SYkv-ykp1C*~lLhw>_tG)9t)*fZb-%?cFc8KiIs*kj{B9)UIjYVk88
zPK65`LP$749eApx<8VqRkmZyz>|>a;(22i-d>p~aSo~4&h@AKZ9bUxc(h7WknlT7Q
z#}qL~LK+3a*@7Pm_><k=Hz_(T1R^X~EiYy@M3q|QLQsRMtGK^iA!{bZdxY=n7+Qn`
zg%V7=J{?O&+T6%E4XN_#DzqW`GBqQq)K(Bh`)J0`!-;73R6Bkasf8>|LD#P$2<P}Z
zNLWGQq5=G{##{*oL6uRLwXZ4&%{djIA1gC6r@(sBI5?`=2l+LgE7IaB8$qxT@A{t0
zwBjTYPmgo_eu$}{%rxJCrPoACT^N%}9F!{`9q#^<)6$7tt|5uCIL^&(bhr$`p)dd%
zy4AQ2i^907HLX^t=SfMf83B8e3Y4ZGv{*<*w}dPsV=!i~fYO8H=H@CqU>8<p3pi9z
zi#>N!E*jCGA>jsvkr3Q~!i17f{C!$j5z>^fh#`MR;51NjPpRrX0n%g<XfacX{{{S`
zoxjX<UviyYx57ribwW!2sZ^j3&ktOO$nfO0=wzOmcL%WWLYknc&sPmrnEU5=+yk%J
z-Kq2?Gx>5ZB~WQZ3O^+EsurulPr`5(LC{b}HG|97tENJmf_We*O1g$pL`9)S7*-LM
z2o<zQJ5s<yx7RcXQKv!}hrt7i<||g)9+m#2W9;`5%+5+mkGKVd4wK#VSr~*|eiu{a
z24-sw_>Q9pJxbt(>kuVXsu5NW4q0Q-;mi|-0P&auCn;n&gyWDHfP%Whe=A0tPC0RJ
zJLLq<%m?Up#?00u<r(^s#U}iD5_w4T8nwtacmWj)NxSI65D4{%j6fnrK>bak??jK)
zSOF9;mYYT5!}X^TpvJ%>zhCQ7%M@1fqMDtjig1X4;)X6QdUpF!qV}E&`Iq?LcLSHp
zf0Y0z)$sFgRs2(2tU|h+zm~T#Ap)2{Rnuk}7*j+l%9yy~^$4eq&PQ<wB%{bjpHYKR
z<#`F~P8%~aP=r0Gj(WNex;iEeMDn5{jsfEYq-iLn%fj1{9b5N)FzjA+KHOeb)flLU
zB;YCF1C&AsH?Q`vv$Km+Cr@H_F2~fY%Pv0E5|G>O2N~CS)GAXTO0|=5mPr)>6-`Hq
z8V0GW;2wVo;eQT?08uRblL=M%Lo^PF0T7H>Yfjk3C7cZ)jzB5LcmIjgn4YbnKa6na
z);=zsZ(?V2#BZQoh8Y1=eo8K`PsV`s++vV)6J-z5JVu_yNO@<I1x^b%GmBV41@S}$
zPtdr5Y_&A$nG&cv$;b}R&zlLNWy7r2=Sq%?6@R(%uk4Bu5C))!&}AJu!U8DmNxv2Q
zuV4ULRAfn#b9#*_x7?{Pr=mu)zzl8Jv|1~Qf!MR5c3~M+1e$)zENRAnOoSYgLDAsc
zWF}wSXPuVRLlzpj*_6&zQ_yzjRo#HbGPGMyEJ7%Lfzf0$8~_O!Nb0M#3B2&~ui(zs
zSMWgVJ8}BNN3l4+gfkDMm_P1t8gDdmapPteVW1l&>uWiIIv7f`6fwE{-Q510aEq>!
z4LT8qSwbNI4&yi!20%|V-KtsUw?t=T8^*%~4?Wtz!tykWR)(b#-u3R|c=SDsSYPen
z{3}hY-soX8N;%$S7g0@3uCN0UL8{W>m_mevDh^fpFeigS3tbrmHUJtkkPL%_2YRQZ
z&!X6pfFj*V-t?B0Gf@jvYw;Dle~t7D2B3vMCO85_2GW&$+GSNADlV%9gi#*_DhW1O
zG#ytLopTI_U%TmS1nBjY&XY($nXp1z&-7@cSE?5o<3Q&v9?wBRF9GS4_r`n<^3Xz~
z1t8k&#r-b8JO^QrV=#;`Rd-McLkv1(%(=pk(|Odaq*O^U=#=on%fE#iYhOS)n8uYG
zzl-&)S8@8plW6WfiRI-5%rr{q_xG{Bxs5QCmg>4+LXkgE_>u%id|c83oZNrvlSr~g
z4)-`5XYo+AOFVSrP#6H6xDqRC3eOouliaR@#!MB%fpo+rBeCB~Sk!T0c@BT<d*-mW
z-@~QXo4EY?9y)sw0?$KOlH@akV>!WV<Yo)6AWNy;IfV%n9!S-pEFdumoIN0wSTY(a
z!yvmy;T1?KOQ+z9MM$G)%%L>-8Qo|8ze~Sa0!)d1Y6&pn0|=I&^!v?HDY5`I)6a;2
zsBe}K*#H8%fsd91GgF?6d%4*OElOo{3m&l;I6Hh$9m0!+Ba2^pA`~2bZMa$6i?a-4
zCNoJB6V(t<w`I|K!<mC}Imdo8!TM?o^K;W!T5(v>m-|U3)TEdis^pwbeC?I<xOnxm
zsD{V*GXg(E634i5<F~QC`5cbTJ%M_49>c*Vro(xb^)~HhRJ@^Qnf{?W?^6iCM!-Qz
z28S?!BtRTfYjuzk0S@Ch6b2x7v_=f;TX8^Yiar!E$R~2Q<z^GeLvwA|PtZ?+a;1uo
ze6)`DKY0w-ukGW~Yx~$*A94u?NkV&6Tfn=exYS&4kXI0-DUvK=V~`PpFjK&xOSfG9
zCXc{?go<w<-hfV9>D8wfzb+cmjZK6Eq;>vHu3s&DPa6Y@RXN_YOAnO`Y@~|h{0$pU
ztB@**5+fU?uAzVt$|aIA9>c1iFdoK`(d!kdiqC=g0*W+b+PI3>QIPMfomCk=s_1kn
z%b;ku8hqo9>FPXar>#^n>^Ff+uV28+m;ODDFTMwl4Za)Gjd@HhB$!?B;RmAmckbm)
zymIN67*`<RPYjU<-zT=;G<Qke-MxU0Q^DfwJxunIMnfk4utZf!`Bkzdq%S~fVu2DC
zNm2>}Twoj^8WSeuL`9{=;Tng+04SYUQ}$^vZAscI07wB|@}~^Zk!MgRjx)6Ps3<7F
z*$0;K&_fH@-R<M`*IKxKwT(eHWo|g9q<F3?V2k+Tc_<*E;t;SgpdZ2q2=P{7fH4A`
zGSrL0-WgQZ!sMluOUz`ZNdq9eKNUS`79dHOkwMV7w94gMF|(+fTl=t*2G{!drfpb8
zn1k%xYSME9(_*1guN)atPoW!q%I?pg7ii}r<0l=!3bLN^02F&rQk4Z$S>pi`0&vGb
z2Gz(|3i7T(6rxPmQ?xc+oPYHtynOkmktRdjxcxMCTG#Q=z2AZ5?I$oe=3-&d#oDa_
zUVP<O5Jv-qoNCpLy2;qcwe`X}Lbr^m$`TiJC0WA2ptO50+PgF1M^S@0aMOJrQ-C~w
zs&tGJhx<_UdYt))sdV}<jzeJp^ekt=2@}K8L$uJOrJdb9mh0&i*k<Be-J%;gr-$g_
z#?&;P`u1r&@!<ikUfjd^S6bNHCBYGgyVug(pr((aEiY}kfRb7CVhHH>m{WejBhXlZ
z-UT(KR_~{_AuB=w*%74%K<d(^>QU2ziG8QZD0lr>RmjqUTtRchvFA%9uC%_AqKczz
zgFHGJMmW@t!INvMj<c|>t~x(KFesJBUXUug<zch<%=MQni~y(fdh%q5BS3~gNpCUP
zQ>qEe(+Qe)JiPMCb9m+QCpaS#`T^X~K@tsc?!u?AF!wA@HlIQ%n8vNmFQVOBL%B4g
zm%Y(IkTPEiu^g0xI;xe1%Iv#RO{(sL;`ng7Bhw*>>Oo1D&x8PuizIc??;-1SsTfFi
zCOUlMP#6HwvLo<KOL5ydAV~qKuvR^$`_ft6fGo#=^}Rq{ViOGdU`@Km-m`*tJ-UST
zI~~0KdJC(!x)=^}gw)ZML_Lh2o|KVt^|&Vh5_tub|CcnPt}md8u2^*Hr*O0N(W;!Y
ziitTjrWOik1-y_o4TwZTtAloJIb8*$X?~mG!Q0LF^mk2O0PUa~ww>;;sL^~LZ1mWN
zcewIS)PcC#kjY3CcPsFdGaodKbc+OCKOiVSYZj;~N0#(Tx}0{^b(=J*H4^qDmM1X`
zfyzvR<}DxR&OL)yuKYXrE_Ff{aFtE5@1o+D(e7-a)BBVOmn!8M_DDoLh4>6A+n~IF
zG6}<0=d63+s<^)}$i_q~qLKEZc=5AHE%PK1ryj;hfN@HHCxasc@a7JlkFuD=Jr|A$
zDNhPUtvTUp&2eK#LWgOP`_C@g0ggCLZHhOEJk)Jdc;I4XWgchlo5kM#02eRp;p*i!
zx_c2k4I1)ps%vaj9{?&(233?1I!-@C9uh4ANh1o&P;>MrQi8nukc%pH{Zjlxi$@l}
z<53r2qCPA6ZX2!E=|mk0SWbb?t7|Y%r|1+dST3ZIF)Kt&<Z;Q-a{(30lLbmXtH|%O
zTdylDRhm<ZnFvquGsh{pbPh)CSFtP;>YU3DCY;vm?2{xLuyl%g1&~T}jN2D|T)OmS
zoWK5y2;6B=e_|Lz0if!vOW}g@mPjl`a16PAwD>)>@JXoILAg{%tum{-yP7ugu=)qG
z_oN=yVSpz8a32&(t!7efnq&czgw8KOlBazf(s3v}07DHmO+17!BEEjX5M+!n%MtiK
zHa7RLMyT=P6jn~mqEeBv(<Bk)nhBtQX`}M*{xAUsL?)@?Lm#f={U2Dy?bSA3e{Bz&
zcZP%`u_2(>vsWOE_cW{yFQ<tY0$xS!`YJ2Hv9k^lBs>tvQ8cck6jti|83Q1~4^4a}
zQ&lYTqWEWm`>%HLf-H5AAEXSH%6YR+f~gJAK9zP8NLWQnX9X^2KKRNjb|kYUC3C_b
z&xT7xOQ|n5yVLA7JFf5!)OQn|+a)?SX$}w_w}RI09bCJxi<M&w$kP;?H_CYB(id=f
z^;ft*BGGn@jv%K)^|=Zyx+tX5VU+H2M8qGTGdh7+MG%xsTUT8@jRX094P$ECpcA(`
z4XCNW^qbOvqsYS`=5X&&ssSAu1E9@5PbCrJ7vVg;qcWncUddKE#)S)O=ydv6TPKij
z8z)v~aO&hN8Z$MK@{${;IWuPP4&hQAeTMd!y5D%X@18|G^x!;pcYC;Seh=3!_0a1i
z2m^;(TNPbt%oLKmIR~}0o2nR7@ypqjHHJV5dFmaWxT;1IP<An<>6=N*XIV^MR=O%s
zY$@?oAgLu(Djv6{04orY8GG_RBc!V?uk5kJl97~OfxAev5;k32j_hZ&^yv5~FwkBa
zBLwW76`27MN)5SIf{)K7FfGQHzw)!V@A!8xvu>;XGH$MY4Ha)rEqK-K*ifcb2&77v
zxhbmhqFCRLo27;beBC^i!U5&ssGD8nIH2L=2?JniC^+VHECb*mCcGx2R$)E{qX7Mg
znV?5h;5T*otA?;CZQ&}$l~AB?ZS`ZcQxPhiq#4R3iVYn^QH*O>w{Yv$4i=ZDaL?&Q
z%*{^;H8f6zbgtTH@#m;enCjQ*)4LtHzx7HTPkq}oKKPLlu3l;5;;Vbu*@$?8hGkKz
z)W$$umBLLo%U11VIybIP(75(GPhPMDWk*wfz2&*6Pt;sln=H-8K_no}1<(`RMnd%W
zD^Ea|+0x0YVk^-C)0O(X>k>F<B(x=x;MxMg3#{yf`JWC$6j?}c4k~3P&4vh}KZWM*
z4z_oGLQ;)c36+q<QFT#|uq4G0sKw82y=X)*$j71{WdwdjvL=cr;c)T3g7a0LR2sFb
zhRI-O$33|4g^wWq8Djy;3o!9NO92EJ#bt~H_aUv~LpctG2OylY9BD%28)d6`wd)0|
z7;b8ZEr$W7rYqRm?4n+gd@%6@=$3A*?_qPJjhUG$R!+|1_%Z4N6S8qh2<f>?T1v`C
z>A}G$L%*LQ3<Es+=rSICY#tjMJ-qb%K2~pxxbdXM)-_Q^=eLXPMlJn`FHwu%?DTra
zvkZcDU<Z#+|5iyxQ#DJoT&~SQMxOqyJq8UPD#4WkCghJPq{emoaYM$k6nTp7#0HOH
zFkL(~F;)~xP>PehCh~6RYhwg{4FM?2kugPEl!VpJ&&Nlhk^Ea0HzE3xDPd`JUlFA2
zz>c#+7UzLP3RJ5!@kSIfk~vvMG-*B^!#0s5qN=v!Isg`*Rn;G^gE;dMr6I;d7(=2A
zKmkP`mT@QyfbK!h8;urV*A*fvy~hu!$Eo+<d*8Q$mtMS$*3Llm-?)1V5C*dQw%Y^j
z@Aq)?`Zi9Sn8S&cdDQDv8;~(5sNHj8Y^08dd(e@`(AuGHA;7}iH2%z=pTU>ExQnNM
zdlz9@x(SNQuX*<NI@NWnwxwZ_n}Xu2D$%q{Ut9+DOS!Ua7K{^7fOtBr(bVb5wm4#>
zikM&h)=WhMlnRMPADfL42=87QOI1stHG_zD!Et~Z^tUqL#3oP~4pLOsdJLLFAdUvR
z_A0g)!>8Jp3%JOc7Z&oQcweRZL>icb65WN73{P=xx}?{X4D0q|Fo_xM5t!gg*GT9)
zl)G6%&IoZR;3LgEj8hjeivedx9>AM9a)#cRqN)hj2i#!(Rk+!-fJ=TEPkrnxws+dN
zdUXfeTRm2<34NMGM0KHs<|B#{T)DP|o41-+Tx{Uf={d~J)uaniB;kQAuAyf(gN6>!
z>tq;>GJMO&7O=h=;rit+8-ZMEY>TX%kP{9ZuZ84mm(`_Cja}n=9bdRTCst#lu^KyR
z+}I~Z)3~v1Hn#1gX>8lJZQDG_&F|iS;Lf-CGW*$k?e|&l%&fhZ(RY3mKhGb5#s~s}
zti{R2+%E&EQ}s1e7Obi0bDjuZeArCF68(RFUG8BmZjuk0&W6c(j$6%H21~fjnG1)n
zxm`%FB*c0p#xHJViXWKevhc6q_+gs;k*4WXeIE<XwICDS6jBY9mGn>Bq11Y!!T?~2
zpPUw)yvr%65I}Ig7ohtlAYuCXr3Nd?=CBfv#R6R&f)nbhxEQaCYwnWf>a%h%CvPv3
z_4ypD>zIQJ1M$wz?`?M%7#A+j44KIQlOkL2Pii*>rp8|7fsv8?V-sq&J9~stv0cA$
zS@9&(jFuv4_IN|dQN?(iIoaA?`DZ`-@=+%QRvY?MMx8b2IIiyfqCk0Ch~>=ZaQ1Nd
z=E*jXFix#)eq6$C>z@_;aL{RKnV%BD0kYx4(<R+XHHINYT-tNkW2{5MvKwW+)HlU7
zmckXP+<*aEl^rUFQAs7uw>{{i-B`<D-|(`qzH2@P_v@gsiitxCIn6p)B_xk-92y@x
ze#G<b3_<BSDk&6D9m-fKWyUNSn-<MP?!$=^F8jnSeV(BGH+q4LUC<xE+)ZpXp;|np
zd)7QkR;=ZyYEgFy)6J5pWHFsy31=kr*X#iiln1+8HAD*wD<oL7!_eNYTrV#28I(wH
zJJ30uU%S+Lw{KW8Lx3k-x;cV-KGVL8hzTRo?ZjC5+ba@`QdG~kZaUZ3g(z!*UcO4|
zLWavid2ugnpL!DlVCE|mw(kVe6->pdYI>j>i2z4>r;~h=1j)xjOS)Lb?<g4pJa8E&
zqxoV%Mv$>}+9D`3=%?B;s@YZ^n%D3lPG)pQYgK|&wB+fV*;w}ow5DMHPO@u97cC)+
zPRZ8N3fRd|X#luq_m`x&e=_y&8mSzpj}~#_s~f=PWXNGh@5r;Bj(_tma)AQd!+vy+
zaw~eqZ7w(1sQaG;-?TZgK&yZ4Ba>n4@<4gI+*y54*~3wD!PQxnJik=5*e(=Th0X57
z3F8L%$c&z0oJ=ZIBF9<$K9QbStS}GWsV3K6Q4F=^l&?;and9c{;<Qb?S{~6;&j5Bd
zn@8AGiMN^TeMqFFDu~N7aav7Uh)RG9AHXS;8xYh(nRHnj@?(K6eDQSZ2lZ0HuTXBQ
z_*~d@?m@95S=#eIKQL9Z6R)dP&N!Y017A~Q%yo5MG0IMjE8^Lqr<o@1c}(}oRU1Ko
zoH&TNFzLFdX02FV5yve|!!UU<iZ@V{$TrY+64xNMkVVlDu7^yH`FF0<icGr(n%+?1
z=89Fm))y9jReh|*5Vu!6al^1}{tOMRzL9F4vkR9hcMB8(i(h^De?%aS(d|RFNWzr0
z+iF6an~UMQssTNH$XJN-gF~>`r91;tvwBNjvPr319O;)e?a;jB%*PAz^4{>^a96It
zd}d6#c!M=hE4Z*gE5Yxftr`->{FcysWYQDn`C1fxWz72rv)Q@l5v4@BMQGzrXg{X?
z#LAHpqy@jOJ%{(AyH3whq@U_Hec)BvG3KLZi7PHy`VfDShKWUuQTTocw?;FHTC@j_
ze}CR44DJK;p{Zt3N=3w2C{oY~aaBla6h9A*upsMrJ|kOiu87s|=$pCW7b!3r7#oM_
z_Ig4X;YLH}rlp%3-CkO4oh_rO*)&!;o1pXxBV_|bE))*+_`*;n(4?{Kbe~ThP5FUw
zW<UHfS8-;mHI|HV)G4nJh#fQ)enxV|rJ$>;`Dv^ya&`N2Tt~Jm;u!7JT8`Rp$=s#O
zNtJ;-`{h$qy8Zyns&h7uI%qvbiczcW(zy{JdGM2Uh~Y45#_q9tf9sUyzLL3D17>@K
zWC`<Gt6EMJdtSBs-%na(jAupwSQ|mt0Q+8qf~QS6jjhD;u3W;;4+=(Zn1^oYVw!u&
zQc00K|Fr6Ud~1o|mEc)n7jtL~R@$newmntDD0O+Ls+;QKH^HuI;)C8KXMrWN1AWGx
z@sVx(#6uBuMMvSQ@-06{{#<}*OJr1PmeL`W5*2K1Nww7q_i6&IRj$RglA?r`I>kPg
zR@}p7=w~jBD_@)(<!mDg$5aMgTwyA=7W-tC7Dn@7n#T2o@kOhyu`FYFXWYZh9}o9#
z*npK^v1->AtZ^}uPDI6VblT44(m8o3&<DqpT*N<(gfBR&F-B)SKMHVibk+9&R1?vi
zS{oc_w?8$gs>R{%Fs{kXTB*9i$Y*+*PsOEzL}z@Vj0s2n>jEeqm?h)ekgXfbmAKll
z4lCpwN$Gwe7rxTdb|?KPfruYKX>BDs<7`byE&k*<w+wE90Q=Ce?@cq=9sNYewPW|5
zWrVt2#fdyHkd4l*8ax|%5Mh1gTBagQBpk<>iq%WQW$P*3ykB>)G|b$T#Y~*L{SQhF
zbmTB;{x-(u@Ekp0e<Y#iT*YjVv{V^5h9g@R!-W%gcUgdNWpkM{aDka%)I$*gNuZ6f
zOMUTbiLieS2Vs8gDAOQIvxZZOo*xwUj17}Z=rF=<ZlKILfjvodiO#5AZHrXGt9mBE
z(=R2$K1-owBarEJZ9!YF_5Yy`;!7nzr#{vj@atvJ_y;Fp-Nsm}8W74PFd@JleVC=W
zU!KedG+0jb)Q3ce|L0T@ZK2*^cQZ$?re+K(RV{WF$TuKe*_RTGvGy=@$G@#*%Y*0z
z<Y+!ZU*u5LGooV_>Ub#BC^;=tjOcKqx<LN?JMp~5To?&0C5cDWfg8q5of=2>kGqN&
zJ7{Es(#gBi7Ta-TvV-`f;z*3AT9|G(#|^@~8qwGQX!G*ZDM`p#-`bAK6Zm6Is!T2z
z7u#B2+cWZD)p(50P}V<=-whH6dSG;WS2}a-Is}V`sOX7}0|V4OP6z{fGy@5PN_wPD
zP#n1jKYut$2Rl(qztV}%gnbx3bz(SO?JD{wVjw;(*dW^N-yo;Sl`K&76O*Q*0*;z_
zf_hnWe7qnRE3FKkaRXsTQ&LM=qv@$uSiBtK?0Hxg;mjsKNXRPQhqwK-jya9QB6;TI
zt=r$aEbfgmG!k4sR6XU<JT~vOtbbFMd>8+vzQoNKs=kz6V#XYA!d|>ry6eMgF>>@R
zdU<D(Xi1Tpk8~B37S*=^Y8BM4Q1Y()ZdD_}?B*R$D;Rq<9jf=5c63R1LR{CJru~Gf
z{`ZOkb0BXt*YtWesuvumqOnu0Px;-}KZJukKi__f%jDm2(x7Hg0Ujm)$h?`Kmf>}w
z_`3MWFq~0Jc53%dqb%G0<3Kq!=K^oW3S!EFm>7l1pg3MYLU-qVJu)_Sk?qMHeG)do
z6(lhWhcCN-WgsN~bofSJx0;;)$~;2R+=d^+qG|#)O>M!;=CVeMd;Nr;MWcE!{J=+p
z2y!=uBNzXy_9(#QFII{DG)GrX*5X%AJZS`P4zXot581Mu2{|GZ>M2Ka#iy_^mr6Jl
zPRG1=FH}Ji-N>WoKt!cKl<`6Ho~>`j<fRj;2ryJiF`T{8g3H_(&wF0O>+}xxB_pWF
z4nYyqK29b}-4qU49=HRBTvQx17ypa%6@V2qxasJHdVamp#r4BFTg84KFHR%Ts8mWk
z-deUW%`iu+eB0}?e774`qRB2lbpEFtk_5}Fzf^+1`GiObZ*V|nCUQgLswq1ZHMg^8
zQh1=GSJF46aTQtvwOSZzbL)sb=jwlZD5F-3AN5_-Y{ZGJmbO(rQd}03Q{jc9zlCX(
zenSOz75a@xU2XQgJ}AG0l#S0KBqKJEoKIj-=UmH^f^DmVTFhYVaCC(|gu}?0w_%Q~
z)>+L@7W?9|w<P{u{qT3df*k=*@k7*6vTX;@nk6aNMhF1>ipnIv<rG#RBoI*N1tZWT
z_>(Ge<;89JjamVtT>&-+pdNyWs~<LXGD<2cKJvd@5sgi=@;9mPiQ=C)7-`1c$RPXC
z%tn*1ms;gNm5PTvbXD#iDD8~ZKq&#O1tp;mTVHFFKkB-gz4LUf+|CC0Ci3I@EjosW
z$wNZ!iXrKyRz3aBzun+CDV=WC#>nyK$n%=P(wY3s7#Vbq<?`Ine?fgiH#PxM%<-BQ
zD5kI*0{Hc~^yHkmwc<$J6Q}7IDm{N;0DCQ(T9P&Ln1xGK@YJ0Oj*xfcoDljSMMC&g
zZDg;3*gscPejx~mMh4QLvIc2pZ+35+YxnqmZ$SW6Q0|+BGNc^RJCb<<(PjODh1nCR
zSm%P@WB%(`riL=NW%hug!zB4iQ#9dEL8e`1o&2oUO~vm@DoW)*NnY2rqPRKquWkQ@
zD>e4Df+N#gm)4JK)1@;FQc8A0PZZdrY|lrq)oi$`MYp?$q3OpISm=wPM(B&JTG^uR
z7e!qy?at4OD;S{gAmkt0W2;j_zK5Aygw-S3$yj}lC>?7}JIe|hD0S8eyN=XXO#iD{
zrnWG<w}V2jwhFfneN$at`{IHlVQ7>U20=NRbIjNF-FSB;#R2WIsHyFxECH=59_H;v
zikUgz2Q6iivOCa6?Abe3J{h?O6WcV9M9oAz%PFoQ`(Ri8A|hI-i_634D1*3<2x&Ko
zAnAZv5>^}#Q_!|}S;vB}B<GE%m=R)Iguwj8wqVY|G&gF1MP#2kifOBFgg$MYv0~lS
zz#>1G0=@nF&Qts~P2e0I)8Na1z(v`)p_v{2rOzh6wAQLU6H3!;e_8$qHgt)*!YrZ$
zh7r=TxCawPYu-kY*uYO!NCnK}B^kvc@koPCYXtL$jp2kecD%W44nOTG3#P9%6>af>
zMZI1DbGQD(Yh_b#T!$7)!3SfXC6%arKoI#@iM{jdDb$;j?rWj7Ujhp^=)u-EfZ6Q}
zbrhfsC#E%(&NV18jSmhv?udq#-9*Tx?$Q|7+Su*0odWzcIkDnbI<unGH1V<Vtku3Q
zNuA;yW=WK9$QKSP>U1RVPRZ4dP4mH$P(Jq+QZgTyQdxvC;Fi_^C(n2hd+zA)-Cx7n
zK5SDyQR4KnC<d!WOp1vBNBkyP4b>~H?1_OM^A0mh#&xM(&0AGCslH@5dLOt<sRTJk
zNgVxy$3$`yMNbtF7d4%W5X%X`s`fAAf-ymS@!^{!e&4?~MCEE=#$SY(|1eI)MRZpA
zV9t6F<q!S^o9msr8K~XJV)Vl1WFzv9d%~L2mToYp-aSc?qR~bSThZy%u@YjgkF{<H
zByGgVPhG^ji0`=`M<Q3=wObk>Wd_(Q#(N3|&4TZ&AKMh1ZUshV5pSvTUp~6JPa;1(
zXk~D!or?mMLbar;m#9V!)(Xw@S=h|Rdh0(59+V&GT+d>apPmMZ2Rw*%h3m2PFbhLy
zaSASM3JG%-iRG;)W!05(;)jdEjVdY#*+~*KWfwLIJTC&2O%3w!iI*Sl$7}lqmm9Du
z^<%eNwVld0)Ljo<emN2N?0yhF=_I04CT@?BDwo~iBeB&!`G#gb`>N~R(uRSw)jhHK
zDB2|>fr`-<$JStX9%nE(t4HzfesKe2=RW|5!O0O&FO_9+?vcZUdcSM`CS5?1c&N!`
z-tDv_GpGGf6(!;i40+c+vHBQ2*y_nXMP95?0!bvq_LT7{{PK}1sBPxyvhg}VNK%-;
zTJnh6olC`2%bA|pTI*QR@?5c+TXXn^O(r4~#`c({IgqM+yR>5M0B`5u(#1Q$jb05>
z8&%!|ke$Xh<~T=6<wA`1&m(sIse_e3E9>aqHE*1=YG+^5cf)GCYpRk5+WmbH;%Pf*
z3gg~r>REV6vi&vX@oH;Hsc(Id8<~3a$6}(x++SX%2!M6hvp`+Y3LCm=^(u-lN<Z-{
z{ab0B>5gZ_OPrgUvdjFAd~-<UzYdjRtwC*`*YBr1Ma0S@v#G&K8Y0Cz`L&y)EBQo5
z7gwdwwL4dCfX|ndA>6~pjst4C#fBE93?6~kb3BgloCo<Dnm*vYS8T*a3tQJgrbWun
zk}bdBgR8D(=(!WhzF5hCS?2nK?++?$0UQ!HguQ-Ook=(cb~{V-FS`QPo7RS%MBBNr
z(RN>eE`5q-HfE&1R9-Q8ld-I{LiB`Zs{hu(OUntzN;_a#{!kL<^mN4tv4F4sfhTD}
zC0jt2*r8V~qqSP<nVR|rtz|>hiA>-+IES0@UA{cfe8(khd>C5E3+`@8*P<#qFHITe
zD*<C5)H5s^^8AwwDP2DYh<}L2!9?d<xGs7Mo?^`xi1<?v#Vxi2>{J^%N7xv3W|ua9
zcf6+e7cI^Zu9yQ4-G0)q|E&a+Y>j-HyT^xK{_VU1`?u(Odz9Zn0o+d$3`u2>f|!~o
z&JH0aovw(LnX6sP!8q4j<l!lq<z%5<zdLN2c8~6hUZ$fBXV4}UX%)7sT{tvM4f(Lo
zg);SX6wsy(mXoM6-LCcanC2tJFIC+C9(UaFMMnzdyjYee7j66weKQTnTX&V8G+Su5
zH~cMJ9bs*Zo&KUz3&ZZR+0-Yd!J=s@BCfEFXdDYKsFf@si_a}Sx1PZB{&}{xgE6VX
z-!mbq*J>a~fHB>>&{vZ7kHI@|xFu!Al$X4ub5O|$9r6&{Pa2I^3eUHB0bRUFGvxS~
zr|nb(sFpom8@Ul^p3&$I|Da|UGDzA5pc>@vd@tTMb*P$t2ggWin8{uzXO$_D{v&V(
zX$Td!*>iNcrtB0RE?yri=yc(D-y#%!^n7|jgi2<manfPT<=os6_u^A53L1vmp1>>Q
z`ZHcu^NG<-&^zn4rzHGo&~$6j7vJvw_iK|K7-Rb*fBH@L7mw+;mpi(0*Q|TwaA@n9
z_!XIkRcD$0j$=#}BWx-IT(6)77p#<!Kk%G+`g!K}X#G75*uPomvAN3mRQr{Upezm9
z{g@HVmLxNzvn7e-|21WPrUeT}{oI1m>L5Z`n{AJ;+e?3MG{pg}@Yo()z1w7NPj+~D
z#c<?@dnZNu@K0zV0JuFbK1go>rb9@PwV8@%>(8|W=ap~L%YxITK}91hL2FWjzDAY+
zqXssMc$v0>ZR+!tWL=w`l|<|$g}Ljg-f(U&W90dgNkl%?PanVPhBFS6uc9255L+`o
zg(|dUycms1^qkE4rRkFDmz*O%WBZ3&Bh7uuCUHWA!a;_x1600DNJ;Hezl)gqn1_;%
zwE)Z4iG#V=>D)xpr@G<5BOC%IvG?*e1cxs}<A?O6PNpxO^ZP1%K3>)f^RqC+8g)Ak
z9Jw+>dV$>>l}eUfJwE9X>-`-iHmV7G{`#ruhAiy*uVmjKQT6bt<>{-R9@(<b^&Kv?
zX1?l3oLGMRbIlHBdlxi<@eNw5@_v}9T*zFRTwDHF`*@m~$tK`V#X+ZDy%(igQ7KL(
z62Wgj4pk(Z-^gf!BwEuv*R%ExD1{~F=4Cn&W^qE!gV5*Cr&d;jjh4Jr!Sptr;D?ky
z36+IUi3yj^a9V{q(pT|LgvneecTv3+8Rw=?%Hc%fyt==yNPQ5p^qcA#l4?*;bh@9g
zK+5sjpWnnzEdt;^qstHjPV2=Ugc0pc&w3EB%0?t_sKShb?QhG^dJE)~sl<t^=5I<#
z5Q&;F|2lV9z<vw!ldMr``8tircOj>Ng41lZT&ug*RfR#Bp1;WyJsW9}|F+`5y|){K
z2f&+CG(Kv3!^z}+JBmDDTK9NZ$|ky-^_IMmr6A^?ewAaO;eXVeik*WdG(V+;$zT1t
z+ibFE`(96!Au!t&V1iTCrfniii?2LvGHpCsa2@t#4apu52G_W>%&o%RBzzUd<xa|n
z%cf4R8!2@JgJT?p@!oI7Pc#&_!aQjlXcQXZcFiBJ@2@F?P)8qT%<!8M16iX|JsKz1
zUSB0bQ-v&dpmu7rvLY2hR)uogs1qs{%&MCJKd%ui<t&0uG$@+{b1V4lZK_<3P>W1&
z>nx@*BXUYywTGLGdMxv;F9hJH9B`U2{q@42y*`*d3|N$G*`P~1xb#LKwJ?f&d*LJb
z#TOYmZ8z8B!s{9Cu=4V4ZKOSXbCKY$wOa-<_xYf2RblWTZ($v}>Ib=%%QHPXK4b9L
z8Sei5a5?SHm4O-iFDMzA-KlJB|5QaPsBx*$l}k8T`_VM73v{52L$+;;6#yR!<2_t!
z)s&X|2cFU{y%lfu>NT|9v1~JFW%J+1Adbs0v)Exc-&}Z-Aq1=1AmWLt)!W_2(D9}h
z)i>0AO)&;bb^4b?<^K=~@0YI@D+MLR7m7g4y7t*?(SPynkx|5rnR(ze4McXjQ(Z)k
zW!&+{h1}JQ`EDma5??^d)5UB}7FJAqhI^kATh`D4`bxRV^d&<kyK&-uDoVukv+U0!
zYQ{O&94=Q*i*zI6Hg+HB-x}M~1a&V8TO;O9o#$JIq1Dk@d*u5G#kA#XFxslWBTG{X
zUo~=m*U+^vEU6A<D<Ww6c;}&~m%Zk4=tbSfI&!9D_n>8P-9n}Q;e>}zYQi90YnL9W
z$?y(;4uE*CGqigA(Wut^?76<2wCb-3*Z8}T9n}oLvyMMjfV~G#WT?Q$8Vb8H&NP+$
zX+&5z5hvpvsgqZ~6poR!`}Z}k8mhs@`AMmdMorRy8IHyH8&oZa3P*%tTfH_GCp>wC
zj884xu4M!TkrZq`yZCUqVd>+1!Fs1w)cUB;w{e(Y??=Ht7`+}iM<tUhBm6Jkdp83L
zALEJ5g5OQ&HZC7#`F%1P${OZp1a+wXm62M1FVVJ}?+sfHq<`6Jy&}TN_x4xUUG6`{
zd9;0d!n|np!KR}=`IjJ4j6}gNY>f(0_aKh(MbH&f-*?o_)H&9PummTo!dUqgn;fhb
z%~UGRy~qOblaW?=K0yaEkJd$F|7LvtM^?)WeOVWD1YP;M%ROHIoHuz~L}FArK>CY^
zD?}+fGIwXUBMRqPU*49a5)PEw3|k9?A`TdnR(yBHbUg;X%fMcO=?eXYaEBgOn|ZMk
zXPDXAD{CO6R#M|{2B#z%x2j`MC5rPycD8)mI58pBqD?0T_6I2!fZga@p&K>c)-$m`
z+uO*v@#~>UFpi!5LFch*!0f(!jUP8b6<Us(^4jIZnXed<#XPFagAjB~f)-=)F)Pof
ztZ{q7oLG4lD4&_ObERk9@yC3=_x|*Cd8J%{Ac~K?v1Vv*dGK|BIWKieZP>%l_|&|e
z>_II&3=HAjcZ5`e@9fq&v!K7GNWN{Xub~4F{Htw3dz#6;(~1?~sG5=3!*<a}k!B-p
zGZva!+d2wLdF+hM*RRO>odHFX+4b|RNeI#VgzhhJWT%!bHfa>&ATFkZ*g^oI+*g4@
zC}iVmM$hCU^>}U>9BcjZ7QIWv-tpDZb4a|pO#0&3(A)cxDWR>|rrl&aS}gqDM(QEn
znp^TwmBAMm7~C?h)TrUkWm95qqUdv)=9eeeXx+TeN+W6XWAc$@9<KS?v{lTK)J%c)
ztSL`0Gb$g&d5TqO;m3k{B=^1H8iPh1n+j2YFc_sRsm`L<Bn=k<rPf4S<?k;`ZK<i#
zhnU|YqP@s*ia2(x6E%Dd_&CSEbX#ZQ*8z7i4pVyi`XR_0&{k7@<H@$-radQEX`&Q3
zLbUfFRJA_@oH1Gn&!<ZrLJASjS#ZRb800>;zov5#vZ*Q86e0ltEFmdTVU=Tn0qxOA
zGrsj4(eyC-fMgHb8NTC4#^0~)xAQcuw=V8aD}uu}M^`qlmwb>p!Lp#q;^yCvu^$_g
z$sgw`ZiSv@*F*tYPcf?!qr`<)$NYo8%tbWc(u7M&16+6D<7060+#`BHg>52F5XC*V
zKvcVaPX$Su27&gp_IN^((VrYh0_#X3ox0eKOE8nnR?n_;kEf5c<T2CXP_&QLw%Nf-
z>%A|9aO>76ZUUn0sE{#LKs_|XL^F`@Mz@yMyJvc5WqESaYDQJ-LNgZl?v5JEr}Q@N
zJ>YMD>L0*259aHy(Cew#dN1*3aXSXx3KXzmr)8(;U5A<dZAZlnZq~_|@yQAO85mdg
zOftLerard00%2S%BQ~BkOdij*@m&+VhJ-h$Tc?3g;IeG*^Fxuxr^>=!aOWbC_1l%_
zy*@ox)=6OZbyaf18U?YE19j6}Irdzx+T~M!59XC*AW~Xc&$zWDrP`k#p=K${Y@ih>
z+^JitKzcdm@5duD!qFSh)K@)uTY&;0tgsYnx#1c}PKzVtaQ><xF7_tp{%a=E7UKqs
zHtBsg2q4hcsf?i3%4<LFO><1os<qS)&TQJQ(ie>fWXXRjh$+(XU(sQ)!UxmndI+|B
zN(u8AwrzUw;vd))ecKdTAL@2ZRJihHOW#To+JP-DMjh*O!!?dEj`_Uv7f))qhpP(F
zH*|u`Bi5TduJ4x#*T}bkGez0Uu*WMA#wf7LaIw#*!96^^EdTtdzt+;Ev-S>V6*b@n
zu7I}CzVmnR?@OWFK4W#9!8qRa8c>A&D{UEwvE3E<Vf&~}r`nwlyM`pPlB^-ICxL8@
z`4915xY29L{T-u}9xtb74SxD8r|o2-vR~3uhp2kK*Es>MbE8TXIkL^?V!2s{qz14#
zf&_Al6qLIm1g8eqKqNJNf@ZRf#ccD|dlfpN*UG4Arxr!xY@iwnAi;<PlT8Hc$+U%|
z-l<4TAv}F9(<~RqJ<9Xl2#Hne=?~JgRMK7i`;&8f@>(wDZ6f#T(`oP9iH*rKFXZ_L
z)%AbVZq|3djyv3V)`)r)Xjmo&i&{ADpIyI5)T9<uOH?QS0T)Q&2Mjrwi=FpgO9Ca&
zCo-@=%Me70B{x%;qD+nTz+prZ@*KL8G0%pujd>&N+|bWdg=h^XY@*5&G9vf#IVdcK
z0Vmn=Xd$*W`}w{JgPUVo`uhu)0QY`0%+7H#j@9=1A*x1a??M=o@czpAn7J$u=FA-A
zk&uuSTSNQi<4S$>fV$f_WT~*Y?!DjMVc6dEh}k%8ak_@<a7r#w%?6|6d`~pLfju<x
zTKc>#suzQ$k~bUm6gKbe`p(D7W*ds*0vpZYA4C_xrTnJQ4&L4139rq=JqJNfqAcz2
zoM4H#;uDX&ST-cs<FB1Twa|aiKtAp>&}@j~Cu*h68yOiA^~w$gqk3@tJqaHK-*!Z;
z+X2;ec#8P%=8cQY*?i*&1OD(;$$8hG-d3W$F+yX7ufMpn0_y2lg1`bw`#{k>AO$&y
zxFGK``^%e|yth68xyR2L7~f_Zw{Lm{#4y36<pCqScBE8ER#a?3d?R(3LdD9Bc-N9z
zkF}WO<<Ec8YF5}KKwoV&Ll$KE?fsQPinWVo`CrtGQ^d@#h}!e)u-kIt@Y-?p**0EU
zCNMJbCI!sa7bHJ6b%abdpOyZd&J5(s(uy%Y4jR=9r(m~5;zFWf%$TQqg09=6#v<&-
ziy2BpCWk)2mC}698WfI@U(mONl%_pccSLDpZETlow{J*Oh#R>lfW-2utWQ<G7xIuP
zy&w%4fkiSI5-fkrs^Cdut?8PCIE=3dfEBQ?)2Ng$W*56d_irxe2!T*?Q?u9k(#ppK
zf_$p-_Xs&KIS>})$d=NkD`uM8hGTt97p~*%Qt0{b2x<>laGV0JjZ@CeijGaDS|(X3
zao+iPL9-zgcj-wf{Hi<f{7@;e{8!_BC!~`W`-7Jc$~9k6cAdf|GQREp67sRH@?sF&
zxw+c>+&QN9wd-cCG3r42F*myrtk{8afh=)RaM*hbM>oZrenMopKl@v06a33PnJugi
z`cXX8a>b^4&xPTzi#Ch;u9`*^8wjKe2e|qzP^(<mZUZo3hO~Cnw0^`x)E^Z=kcB_x
z+Jc>GQNUCdG<af8f3W{nIy?2!s8}^RYLFL;6GYQQz+c`K!`v0LvTfo-YEI=*n=#67
ztAgxI;?OfF<ehu19dlR0FZEIyw9FRXtDy)4@eB{;lcH~I76L!yPJl~>H$lnm9_njv
zOCQ*J+m#F|#J$zW(O)udSdeavaSQpkQJP341BdGQAhh)GJQoPr8QajVK%{;*2nG7O
z-Bw(K`m})bUztlGgb<ke!BSF6*zsl)fyqKYxG0nlo{;4QPDrAN$~wLpvg49Swc_5l
zY7(NvP#H$Wi*@L>g7FWP24wNRW%4ezcHV8KV4kqGwnJm4>8|9g7xERD%04JHZd5GC
z-L#7up@X8u^i&!AS$EGiW-Z$Ie3M@_Q<C!ts|6z#N6xoZBWAwznR<~qJiLp=owthy
zeVmT_*$iCESpx2=s?17I9WQu}_Xppjr!t>!NAFSe&0Y-o1yde*pOXY9U~Gp0Qz*eO
zq$bF$t}2osBLo^xW{$TwEL0so>{QeP{KIwz|7a_~kOroyPj#;hZr8KKJVZpk4?K`B
z_)Ax@ODk^l5I__cWf*YBa^|uG0Ks(?GhtDmqW@Z!V?l#S`Ad!w))Uc5e1xr{Ep>~|
zOKP)*1AY>1&$||?`+_c#Z-2j%sF;O-2%gz>LlC@2%}YvLcaPgAzmq7P*YP9*yCT|k
zJoeLXe&E16d((A4WT_c_cb)899{d#jh=^>F+Nxc^-z55I+(d!9l)&xW3r`I?_?$h~
zHRl7zAS^sZi)z#?g?boZ<9eK!VStM}>G2_bBo6_FO8Cav3HDz-4WARIw^U02y<x69
zk<#m($5)r>%Qzq|IsSbt6(kbuI(^g-BrYj6YK)R0OtyMOUB%5T-E<HgJtevDos~NH
z3l+BC{Y@~s)KnHwD&DL)58@9y;@a86juqyhWEuaC6*mo!YQmb<56U#fHr0y(m$i*2
z>^#fYWvFtW#J%##zozG)u*ZvH@4BmVyHB4aAraKPy)3unbfyoZ{+~}*GjqW#g7>+?
zC-ZOKD~^U#7|%+!d%;)jtb{x0|HS0*{9AE4)(LDO)|8RNPV19Mr?Pxqq5s^-a0<2j
zp<QO(Vg7@B;n5>zGTD6+$dVW0E64(Xg7`~&U!Ablq?v+2Px4v>xC(<dH?vv&0u!EE
z@buj9W=9%M)f6yJO!7)%Du74HYxs>23}t;lW{Wo_^F}YTV^p~oUh&#)ilw-4+IKu5
zC|z}53-7ERz4P+Xb}a`3@m>_sV>5mWmwz_`J-PlubK@c4URn?SIIGJBPgNhI7&g2c
zF(DZD0;>^bfirwNPibwyNd^Z~0JT1|?+>VP8q9^XsHfvr_A7=84u@?dT>0wet4+e-
zpQ)0Oalmy;)ENBbur?m`@skc;^X^aqo$6BTOMcf4=ZIfbz{?U6zAdraC>wOJbh;v*
zA6Y+*CbZ^NTm{>+yA`q{a`sBywEX2f`s8(-T@AqlO!8>^wOmA8Ifd}0$riHD_ld?%
z!oyXOQ^~Sho|W?t!`&gk8#S&!`>9dDSt660JeXXw;bw0fd?2`b;d4Ix{1VKp{2_#L
zk+(V72<E;dk0f_Ru117>62OBvAy2k<V=DUMAoq2~305rCGM0)yfeG_my?{3}!)QQM
zvP*?=WsrV{O6Q-U8G~;zWK_V2sJr^2zPmoukRB#2pOsu0kq_%L6J-PJ52#}LIqME=
z%fhxc1G2PQN<rTgH<e+K__Bo&={Losdhq*^y_=6CQEy7g_n+A#HxCL0OJI9{H9_j%
z)Te9F*kGS`ZdSm@v|>T^Oj~kM(_O}Cg%^#Kg12ka;#;-x<r+r#{iA-zgP+dcWUYiy
zUpoD5Od*;Fls5>7l{A8!`i;y_y!{V??7DGe8VrL5EmXnR#D4uLRB~qc8qMJ2U}XQW
zje8V&?erjKeHWE<W$3Hn+Xnm?Y?7M7Xv;$23*fxL)Ke&HmT1Cs+QI<&@S@Nx&eu&I
z@3)Hpo!dOc<O^=3wff@#SC3AcJVoZF!Y!CsuKG2QV)K0M%fYcB_a_!I1F^s-1^kCS
zGUyx~fu4R7gU5+@DfdYUnDcp`j(LxV>;4y57IknJ$?f5q@Wzc)FiALhfe~CAI$vc^
zK^_^*!Fc8uh<cWy6)cguX<k}7e2WBaZV3E;Y#NzTx%+S<JS80SFl%ZPu_9d1B3ixK
z*v&+{3K}pNqd&QUmpd~G-BG9YDZyuVCz|^cGSiXX{QOB><B;~3wKcq%&2DLt0|fKs
z*Y~!l>)qVzUIP8^f-=)Do^hAfCeKf&d#C?laQ+_#s=2~U#5?tst`l<@v=g3|b&anI
z&Mi!yrp509V{;pVk^#FH+^0{9(q4PyO=eKpd=Q;T+$S>*a0=N{FHkD;rEE}py~<X8
z=(yA?)v<3F0>H-hy{R8W$_F_rkPt7fTDBBF#nWJ&OKU>A)<KR5WV*5Vb0KZsL^zzd
zd_sHCP90hHv43V{$k7uG*meAsR`iJnC5~iCZA(M5$q6KQ_thM`&&9b=DLu-Odb5W!
z78JyvGZ&Q@d#aJ=2w$i3KE$Iw4^%`lL%DGg{H^qwb|~tg{M<--QysU_rR|3T0_q;<
zwe^o*O1j})QX0W_3ld)=d2kfGkSIJrF!n89{*2(55B%_-W+?rm(Kq4y?Cnlv_=79}
zLV8y302h=F6z89>NWp-kXQ2vTIGb?qwh)rvx&1+;K5KE`jLohmFx5jUR6$Y4UR9(V
zj=88Tk~dYHe>P4bd_lGA$a@x9k<dCV7cp~AG3x%oD14hu{d{2|)nT%K9)%75$r6Rs
z#f45j)S?--nC*}`;!<#Y?GpLD^~0t1ap!SNjd;KSEE1s9v=dd+K#WlvBTAjg(q;*@
zS!s_yJuaE->+B^5ofKHKYB@4cd23(88;`R^%O%Lf<2o6Sj9<%`_7m+UVkSYF>KBs{
zc^++e=4vS&BxuMM2SzyMCBC&{d48D$WM(BiKJN-~d=z+LsU}VtI-A9d+o5KS!eoeP
zLn`)af_?@*W#9B5ok+*_SJ;Ic^Pu~W?bw+8JyW7@PY(@E&OPGK#yljz=ROOBS+C@g
zH@zv9Uap`o3I=C)y^0%RNfCv%l<=res!%$Ch%t^440w>%(0ZsI18{B_^3QfP7*Z#C
z&SFSi4!VGsOqLs067;6LVJ7iEiClLV75&VJE9DpHRD8g5(xox);@V^~!pN=Bi_82!
zVO)u->%|nKFGrEqD(StY+aw#p3FiWt`j>-BXJBLhOt04E!D;J{V6LbTA)AxJM5&AK
zszrO5ZfkNT?-iG_KAW=piu7}W=+N7t6wZ0J87_siUzH=^=_#D`12uz`0ze6{wJj`*
zq(>`|C|SzlP8I&a9c+E6udIBp!?=x%oGf3hdlAjw+=iRNx2xjO7*d{YbEpLHBe@WD
zy=878h9@l;y<<O;H$|sN2fh+H9L?3%uq8er-^**1Hb|%oJ-^Vb>yF-RcYZRKGQ2Za
zl;n4t&QI3eP!a(dgjJu8eaLN^y-h}<yFn3$ob1EKEjhd?F4!rH+S)5p&1n1kMhJrr
z0_l&1Ss~Vp0_G!n?6KI2q*M5z>n;nHI;JHm+x<-IP?FhDev^cwiBTY|NF+t2YL(vJ
zKqG^yZlK0yb$n-FjH}}!(B5j;BBx5Jt<$LTP0QE9E1v?4h<aUJ$cME)bPpW8dHOf*
zDOMFelTsvvHdcQV;`uh-DdAvjx+LT4cigD+yKH}y1Qx9Yu3!wS9LFl2sP~|?SZCZn
z^9w+5XPKg-&ZksCFp)6%^+}Jw`LnM1e#0z|)Qq6OCl6i0{gO7s+C4WEf~qEz3u6X3
zWfMCxvqva34v(nN{Me!d+Q+Azqv27eX^!lhyrGzA6qy-6jj%RIsd$|6{GhIB1BX)B
zv?uMIKcReo%)frX`?U5z*^k2sC$){{@-*3p{WbS)J^!<8GHEkF{5;eThq0OEMIaD%
zX3D<~Ask(AhByI~Tb4tZm^i5<y35JrUG7bHNos%&Zy2RIR<Y*unHI13rS{grAkO|?
z`QMX6Xg2RK_XbjH{;2+^VPt?&JVl*1GVYse#wB0+UitL;q13MFc4y{)6|(9I6`t6o
z`O=ik@!oOC==tx{0<OQ9I$ru%1(T<OVBae{EE*TnF|mw?0E&SqiCoH%Lgi*u<!5Zq
zjGG&SUpX5fEo)RH)`LQwn9R0^-tkm(n1R}?LH8oc`sr8H>0<1jNA_sugrMBCH<fUy
zMH9q9#uMb`ii{ikd-#9jr{h5^7W3qKobX!<Jc{`J{BWq>D&YO)230=-&W{t!rieNm
z{Iu?tTvs19buf|-7bHTX6GnGOdZLzY4#94dG?<N9gTPwb!}D|PP<E23+sah(_l&r9
zZC#7DX#wvc2Mx<(7nWyFPQ5NiV0&$t|86cUwyQfrx&I^;n{>O!3%sVmlMc2=78Hk%
z_{%YG69(>3@qJR2Q4<(_=4f`8H=6U--MRp7V%%qo<#i5@WTYRt!Ix;L$4V{LX^EN4
zb}`gaD-ROWYV|nlqCTDk`323HdAGwzy}I(%AD=wt-08h?VM=)LSux0g>L5E$7yac?
zlaHoDc5mh@<E(!#GXDaLKn$4?-!|;`xG7869WkgK;xl$UbJ4!Ljm+%oTo{!RLQ#*h
zTn%2!H)l`z>-Lgth{w4w7AzknI~0ACnr(P;3_n_NMCOZqAQOFVEGzzt4YN>X)Rw`E
zN9J4b(8%WH_xE@|uE@B?KU3+#TU=Wns+4?rM)fx#zq|7ag6&$OY0SunVahSvnF{1T
zlI`n!m_%Ht$32{j*FSlS3itDw%mk2)C$9e%iRR>6|8+7=jz%}zUI5p4U{lbwtXIUc
z8hy{yg6>$EJsCtk+=IGx(i-DG5-xf0FW3H?_x{t1o6`s~XfYtqG6dL_ar>(KSZhki
v@RV=I9yKt{jW4llN*MY7yZJ)6bNvBXdH(gEe2MQ9;Pa9alNYV{q38cURgK%3

literal 75036
zcma&NQ<Nq!(=OV!ZQJf?P209@+qSJ~+qP}nwvD%YT6@0#JC|qee<v47rB;%)k|$NE
zsssoK7zhFg2?^+5A_AHN0Rl4nSHr^kFI@o!1jG*dk3;ld+6Mv%XcrO)h>7XHbQUrY
zkQM?EkbuB{=>l9Jpclgb)c=!+fWj_-fYNw?fFc#-#NlCZVE#42OG=0+{VV@7BNEiV
z@qh@Qehh(tK++^d1XVn;b(Li$&=t|XXFJ@@eB@<)iB5yz9FgAzl!FyuLj)Stz$JwQ
zrRar_v_$+xmM8PUXa|TKQW?l#Hk+YSp-6%hNKm5}>5!8Iz?Jv5anEL-QsJF{u{xje
z0C@J^8Gwm^TFaYj6`kc^6YH>Xrhot8W%3E&Lt;aNOrs`1DG4ttyNd^1)9jZZ1GLh@
z5U@Z_lL-)#8F-$`d;@Sjt41?tD=Kb*X=rxZ^qc&sqrn(wiY47BU`QZp1G>$z5?iB=
zG9_?}E7WL}#Q%WyJB?pooKpgea7ER`07+S=mciRMTbj+?KsjI}$k>go(3UCa_u=-Q
z9Sj}gdD-!geMG*O|H2#9k~To5mga1l+Sz4b<6JW|HHBww;#X8wj{Anhmmq`rZZysl
zvFNF2EvNRKG!hk6Y97gm^PBe77MeQHLc_!)B8WEhj0_PJLp4NF-5NZ+NM5V$FB)Lj
zzTk>XN)n3ceTxYV-OHdpzmBM|F}LQt%8sr_WAUUxnRNf+WG_)@DTAv}S!{8BeKwx<
z(L_lrsDo9tShcrgjtn?X%I>2l9E)2W!W!+_MYgGC_4?3SnAf;9dc7((-q#8U#R!L<
z?*t)ORSQJ5g<n@p6Yw4bo}ObYs^nfgK02<OmMFsL$H05J+mLP2D4O@QLozN}ia7gQ
zE|a>y^h{E#OE56pHF8~S60?A|{~O6b7nyl7{*JcY;d{d$VHyP3VhS$-o)|8OI3Pxe
zxxqX$UpNR;Ofy_YF~R|bC})*h9Tyd6$ZH(GbW%5cQ}g77I&S1UZY6wj(<51wjW|e)
z{lM#NeJdE0OdO@%P^ltoh2VssEe(BwzBd4fO($#CAyAcuptOPG^Kz!ZkxRfI2+gL2
zsl0f=>K{;nBt_*!YK07f{(s>7p96#SKXBf6=X(PJ0(1B;oPE`FWpqUU!I{h1J)Mp^
zElIRtwHXUGD6+UYqV8Luh>D}yGKQb+H}=sS=qMzvC28zRGx4U#QFN?-<b{=06*W0<
z(E?kc>@tSc0-Aynh)PXM8hToXu^B^`x4R%^#`L!H?bqov*B;jy%C-bd!eXR|a>=U-
z54PSM5-5fd6%#8Ea5Bg>D_R8kdJ~8soMQ;q?%QGEw};PXO9mZ<Dd$OQERRMv0ZHAY
zuLwvZkO|=3ylrujSkqJP?p1lz#4RrFmfxabVpHGmrBqyGWH+oKE$NhmX_Ajo);-He
z*C9YcB}CfbGgMrB_O)C1Ve(WY=BsHsu?pxhBgI7U5kqR%h!XMY+7_(7%9+^u0BdMp
zKJty7hQcr0!K8(GWdD5v{1$3&_OdbjBnAcRh!$P{=1L}<<j9stDGcaH4@x@%osKa=
zxZ$ViuAcZ24!23Lp&V|2G~wrm(D`7deLUf00D~nV1|+0<9>Rm%`tq`JVPhj`bQD)n
zu>mF{X7u>j9t#g^;Nvb=z-yKf2=UNR9We~Pq8~hMX*>{e8LhdQt)LCy7@^??PKu&f
zUeU2Sv%0E%uW=@*)7y;|l{x|w6YR)kQgnwNxMfZ2;>wo*%I|K6^P$HT1zPuN?Don?
zS=CD%c!S7+c_JDCM5X}5MI595N2NGHBISh6|0x#unUMeHI1fI~=qb$#S4Kuo55|ck
z9TsD;b1V3y(kXw|z5t7E$IM|L?Y6gU0snrm7J+R~E%;#R?BVGg9FNNfMr(_7FeBGE
zF*@|FnX50uROR~icSyAVw4wG`4HbRt!MAO!-6k_<TR^Y;-2MwFrNc=SgN%%ZF?qT2
zRqbAHy6Q96n;5EOf`zC`tVm&bO%DRDb*-T8m)5qYI{o28InQ|&Bjx?|(iqGYiiUTk
z48{vTBdw7)KDhA{(Q#qaBTKWLtwRhDRvz9vFzHa!ug?W0IRx24bNehFgQv8X(At(I
z#oq?0ARrK$3H2vWPdM_wThJdC`xjfiap(5{q`dM4HD9MX_x?HUXtl*1ybj*03WAoe
zK<7w1U>D7TbJ5}rXC(+ssF#;j+i>wNUdTNky$D8T7r7^Wv|O$CmQ-tWI!g16&v$n`
z!TJ=tgTjcM1%^x9)tac`%n+<g{zu1c%5VEU$TB&3uz_c&GfHa-SR-TviC78=h$Ag0
zWec$DEl(bf$`f5p8mC65udSp}HKN8~YaSLQgChlt-7IfTeElZYc*4Erd+~l2F&$JW
zq+4`@7ros^-<TeHh(lVE(C=P`Ub&VDW23Kgjf!(n=?M-pP$o~xs3O54L$&)QJ*kjO
zAY5F_i#&37w5lYz)g%GASU8==VM!Ck#Y)t^OQUD*5m5jpPt`QlP(I@8T8BD>C?gJp
zwA{3gQIpQzx6@Y@7EdaRzmjC+p((X>d&<-iEy)Eh5Ti)mw{7I*cdeBWebjMRb~E3j
zOcJ8RDv!E2eg41MT=rz#+YWZRCVnu31_butC`5h!7ePhzk5BYJg38&;>lp|LLioRe
zDpuXnMnx6v`?kZqw1fyeDkYKKh^84OK?%(PctD7W0!&#F^pBV*$`RpFP>2Ehcc28B
z9h<;l5*GP#Kw%)77STw6(FWRPBem!S#vl}Vq3Led>2}++H|x^m)buu|`^RiA)SG+;
zSS39W+b<5=PNEbmS!9w4Wg;rppf_ERAaRiV>_jv$5hun6oIom&0#hC8N_#syzELbw
zs^k>}j5n|VDUjVZ$dS?%n0Xvx3lK#SC_$tkMhXE5D2YE@tdIWgJ6X=q(zOrcS0Gx}
z^da2zbUoeghnv0xrT4!Gv9dm+iq9d2Ld_P(ofx13JVQbv3=}RTh{3LJUe1b(ZG`J<
zy3*M>>vlE5@E0YB>?J1XkQH0z>$ihhrbA(A@LY=}h3ebM$F=22=lQB8ND7EdTbo?~
z*QKS1mtaxRq@Fd8V2aI9T3a#|plD!{LCTkz;>FS-=ejUqP~;y8HK^uI&S7#&ptXxC
z#Hz$oUqAiuoWu_CT|^#Ed?tvueu8ASIrC(Np*uTkWl1FL=^`OB>!+X@{a>&;O!3Y~
z&;_i^tnF>LNJi3=6zgp1U!vT2_3x&qys1}RE1pQ%09=TfF7Hu_iii|97h{$As#!`o
zs(xqK-2USvNM;iWhQ_9%cE2wS20aU5*%?b8z>T9us|2vTVx(dbQ!6kryL7+qGT)_+
zROqBTt%BY+no{29C-5oHSA(NQ_pxO6>m`San@dT>G^l&=0T}CyV61+!TBhb1W6zt6
z*!^-@K2g}*s=9#F^OFrJIIjgio+$dyFA@yCOP_<m4B~u`PmESOu7KB8Tq-)8$PsCR
z@RVZ|W;9mw*r9>Vr+-(kgaEf)Xbeav^W@X>^o2R{$0x`zsJG`MzVh1NR;#bKU+DfL
z_C-DmZ0@QC!x6mU8Eg*nBn(YL0u2n=lHbLU*uBLiC8*%wLp~r<XEMVFf1S_IuURl{
zH+-<PISHZ5nS$3r?Iu@8KYm$OnEVle;5Sz%RZ+be=ya9#1tG}M3iyIlD=0a^$;8oK
zSY8iHru-H-+HfP?mD!KO?erApVX%kueJg*jifl}?w$%o)LxAeY7vA6I8u56#d5;(w
zyoCCFW6RlKIfS_WHM7BXpWs4N9nmSi8F|Y-3dJQXs2vEe7a~ot*>;Dyyux14?g3ZI
z`v?>j6=tk+z;t}_@&t{Aa}}?8HzUl3GctS0T7X6{opMhmFwC)kIkFyrsTYjQP=T=p
zfrG<v<S~T)bNDfKY&<gQNtMexNon!`OTPZ%TI4V8mFafsq3cL)JXpzWAbvJ*uk}1{
zQC+8XxyGPn-L2DrtzJ7k(=pXI^6+)bN(=(Ax3yM>>f^xZ+?kkwZEmbW2loobARELD
zpz3ugK$Vg_K0SQ{QpKgM|Ee-RzitmbAcZLKQIs6V(DI9i3>X@inF5akOQGJyvy&x~
zpcWun@EsFd`ODqibf`&4<fhM{=YMoT5c?2qTef%^WKhh`(Z5K68m7`{aZX%f_wy)j
zv*`fEfh)*3m&1ec`~4is3ZOsR-+^k3=YGt+)CTPIbFQaswQ?3--*<|4%IJYbt}I5%
z-^c&=HM+3sO21jJCo(MWd$=}d=G@|kNA^q)<dK#VVZ;u<0<74rJ0IXPdsHI5R&RF`
z*nFR9#d*O!mxA2^k)$P<%u>?SFe9^n;6nh0Sh5bsE#K*4#o`2wS)77|1}IXwFVuVV
zv<i_11$^?cx3w3!(K0Qv$cZF!*Vt-9*_kd*m3KiP=CbeSu7uBZx{_Ju%(pJP7Pt7q
zAjQfp?Q@XcnqlZ)g6pkZSBFkL=C@GV5?63Hm5P!SI)U5xGI2bL1w-3|gWJz2HOkkt
z(#t{lbjV1P`SF)~&3BCHnl<2(u#p$XNTFyB77iExEn<~Z(%eAs{QeAg-DYqcD=bGe
zhsG#4@d@RJxrxa<Yv#F&HPd(4<*O^f&KS2KQ%@XUO>_0e4rX;L=fdZ4Gp#`3D&<OL
z$udR0{28=M+byT)%1^O_+Rk=jO;Syk_*C|Md%HG<)6@OxK0)b^U&~cre0$(p3Qa4S
zkGO{km+6BC;4Cb2Y)c=R)va}+f|)WSI|f`{`R6(=6Lsu=eiM?&w}J>r#TWlCy5~Pu
zBh&xr9(9oSa3COLqyOrjnM}_FJaykO{=1&vr|TO#89S+JU7dBQwrU)WMvz+~#UVq;
zHpvQ3q3uMX2Ut(y-w{;#6673Gf{Jm};rlwpG7=>yQTs@7P8lii>!WD{ERE#SV&SeD
zS~Y4_I~jatZsuO4UHX@<a~)dPkAzL^TYSFV-#dMGcK~aRZ&HKw5&LoTwOUB}d7}>J
zDf|=x3%9?2?Ixhc`UHvW=Y?KIDQ7I9S#~-6v-p}Ue|Fq#T`IrYb-Z#a`FB2@kc8%f
zxXDU<&xa$!qaP+9$**Def&%$q2oRk*W_AW=Zbc)!L+isz6rc<Vh>%YWNp@ij3Fx@v
zTW-X)pH^%?kQ)m9>TGycJK~Y@TZpajmW>7L-^MGH<7YW7bixAPMCRsa+i2<gYE!=4
zYJ}%QK(I5xk4E5GPg}V`xhW`i?U_tlNhr8U^juh!%!Q~Wu{faYwOLU_T;kCd)6%4n
zLt4~*`yL;Z%LqJMa-bJ#Gq0m?#Y>Xrpe;>Zu~tJ8(vXzc$ojH}wUg>lw^K?5V0ao+
zh+^(6S?prOB%T|s>AAw@iF`_uT34q-xVK#ohcV;WEI4Sz_H159V<g7UN}9!55PSn0
zH=)0OknCk<srtxeon`WIKa>hvOaSLV{QO+u>PsPFO$(^pEz269vG$tOv~XXf6P1A3
zU~?4Fx9)`t2IFmF=ni!$a}{gdF7AiQSdRv{he8HT(k8OCGdtt6eFrj6UGr+eZv54^
zDtW|4nk=H2+b*F;d_T$(Q*gl+GtG>JsH|=4;y&xOGu2_2xy~zZl@&hf(938r0PW1^
zXPx+l+eA^JL0Ki2o%c`K#={xzyT>KV-dEjS)15UVQ7URpN+Vg`=g{xp521)p%WeAm
z2X(yzBEN|u$aYSJ@#Ac<P_&@Lt?^IkDc8N;?t8hM#dubZU6r&zk@@=4X4Zsvm7196
zs!iW=w)m&Q`x+DTreOA(oIWSae^SJMKM5K`9HVf=`_c@2>2Jqi{^~xfMbYn)Z))K2
zlPiwo(7#|KC!Z%ylR|jwb<Qc^gPGI1#4S>=ESy0fcF&AWY^0~hvq^~|C%-f+0u9gM
z0X#<b>Ca8UqEj%?<YI+m!V(a6|Mc)W{K%C~{my$2huM2ylwObinNH60j*a(OI9tw+
z8ed3sNSmL>$Pfq<TBj<ovoXPNp>oFZwqAD)Ki1Yp-ynM~vH5;1vX2%rXm&7JbGRA(
zc<<-eos##7FPo*Zkx$4A@W*T8(wO&oCheQ*>1zvwh2_xyYnC)Yd0?MAsfa}3xMJ*|
zvrikzId(aXZD^fn%|aCNJW|J$^(zDVZztYw*E?6A>j55*H)HE_cT`1&^~^8hR$d2M
z`8NW2yyOTF4^derSWG|c`xBp_uU)O*fZi_8yV4ajz8TPX>c>Dwo1^2{{Cb(jt9da}
zLdm`f0UOV-`LMs6Go`F>daMbjr-`1!Z-{?9iX<igSWfPaGrsN*nfJf^bp-VG=Y%yv
z^2-fzMiJk6@w9yWJ@652`qJqq(7TyRD=b4-qg-}wOH`(i^w(riov>oXfy;pvH<Kfv
zqjOG;zr!h}NH%^>LEL>F>Gu9Eg7-cig3zoF&jS3jl?$bAV){GD?qM?xfHlB6fEvLj
zxJC|f?_Xkn&)v>G7JPfha3(f`yza90rxUIVq}PzrCaFvKNfxqVAS>@igg$_a4dyuN
zwb&u46%&&epwayP>RX{Iwa5AfWq`)L!!(!+=F}0^fh+{8gmY5dC%KpZTfQcUspHqs
zG}?N#+Tdsu0{fRr`{NOA(z3C&^qM}DJm<9fO0bCd0|Rs_pdrGeNXeGXAZ-y$E2*As
z!zI(NEnd|vF?udLU*%6BZ_&igJ3^3vFmg3`J+Fl6{&fM(?mIS%d<s{q8>&5S$Fz|V
zoc+Q{Q~cj@1*S3-jYX4(b(>~AiV*PzFKAHa?3$t|a_m*4yKyw(jTbn8jR{p#qK*^P
z*ln5GRK3D$2iq4K_zP(EG)$+`ok_zrsWi?QsOAz`5^;|(w#gd~rqqw{iw|RbF6Q%#
ziAGKXwTG#c-{&?IXUmpPxM=g^P%4f^NEycjE|b^OIDy@!7f;H^!f!e{p<XaOtN<u#
zb+92}cV^FTJl2(_b=`e6a3{s1%wNa>OXTD51Fh9#?g$!KE}mQSgv^aje{|+RT2=c|
zJs(%7DWW`Q&tS8Ac*k@~@GB!qp)>ZZs6m<aILn81kg{SGiD7Z;P5F~q(XH6aJ%HK!
zqA)NbZGuFEn4CLCGjF>zsr*56vc`ymPrwszvdFXPY&Jl&&Cd4U@wU|cQRK_oiL7Mg
zD9)9vvCcJz!t~nx&`mmt`#j?M-r|2sZIVp8IB?9+MXSP~Go10|@brsQ_WLXR%P850
z!v=^;%Y3>k#|qVfbwCo0Ub^UpMPe_EgP%+6#cS>*JTlgwW!U6kl!Tdz+1w22ue|Mx
z=#pJ*YZNt+bb58jO+)Ib+L>Uf#S>;UdA}AlF+Pz_GK*IVs}2ZffHtATawLoCVM@$B
zUR(SRuHSg0O$TfiEQlnjY)>&yfBCixykcZM7(_(|$=~Hm+X*DgA^R#1C1}G}FY7$2
zJNSLG7=_2{Ft$5z6j!2p1WpOf6g2PWr_RJ95S;cO`=uC@%Cy>J@H(=vyR1Ol|51RO
z#@XG0(q~4+5d4ex5$_w?wd+Xe);ZqLAguF?UvlFrv}lcaE7fr54#4WZVOBp!vV*Rq
zAy^C?#zxy1<fO@@*YdE+6|$zq3$Q<<(*G4RIF`!yOdgJ<$uqsM7U$^m7h9?4LgO(J
zx`lX|3MTR-d))!EnM459GKk#9&8{!m<%h;8Qjf#_s!%J3f?xae^UusWt!cI5L==xV
z)_G_(lmWZO={qRX{$Q4!L`z@ZjC<Yjx-&6m+}zU5sb(^+`IcAsRU5_zbLQcC22A{S
zKl2-$VUir54F{1(HsmskVe{?IjjJUnaIfwD@6Hvu+3Z&dvZUf|v>v{yjcy#fo`Inj
znrWV=<2_<*IjxYm;BBj;^nkzwne<^yc9tSy+%nqj&Jp7=e6H47Z^C3o@{EpcVWj@h
zq0FqcYVm8i$2R#NIBg9_B1=ZM+R8w$1=|Eu)IICqCBXdJ%hvStoVeCvpcrJ5m8$ai
zkmXt-f0p5n)J*I$R&&+c&J(X|wS?OeOwxP6aJ+R)b{d?$^G5g1XjO;I%rQwB9|vfe
z|84Ts>T|mSO~0(R-Kp@F`TK5S6S7JCAB)1!U;9{S^G5jup+@j*mGrWGUBRwj?h4h@
z`7(O*nOayVDFY2;6=3C=W>z!?ZfXvP)g$9BLFsuv&?PEiE_ZN68G2F^EqL7EeBy?O
zI}VmgsLNK0xeZ?Za-k`{q|F+wb=l9Jdzk=-=k2y%%5<v(ro!_zT3zt5I6=4v%Iu8w
zLj*S96($f<QX+6T&{!IZF9pq1RA~cG<Smt>jcAN`Z{$DkOJxP#kc{0<iT1o-aAjp^
z??&SnN5n_w?5*IF0v7c1ab(wz8T4w@D`-!u;gWNQC7i+-(lvfc-Wi_YDdlTmGtoxu
z)C`^<n!Frylesy^o#GDLb}0@}MQ(}m<-$Jt28}^7R4^ql^0z<gogZoksc41<jy|8F
zwK*RA(C!I?GO1H%!eO-y<sOPlFv_qdYMaMnyr<@)f9Um!&t(<LWk{9`wiq^5U}eko
zA=7gVU8r4ZFcH!W0*$lj@JDj=B;#>P%FNL_c4u5lARAIb(I{F%eo2lzLG}t4ctzFF
z?#ikZPJ#87-%sN5AD1q~iz1tP2{l@2lQDznqs~e`HW~AN{N==+ZU0q~khB$k)QP{-
zMN2b$(yvoRV@+Eb8fvRqo)WJ*<M8-7r*Jg4_-{skH&)P%nra-qfeGgiF29Ga=T}|f
zL0wUUV+^Uzq^n=7FLYI-_N86csHjKAaB(%It>xvO#1kPSLY85f{QvAUd*jW_gE30s
zlmuoFJ4i>@5FF$>?(8=ja2J;*<m`9b#H$@48qV>O3Qp>jSyo-IFy*7UeLQ)k>TL3i
ziy|JbsH;;bA$(P>+LkCSqqOwhHy$+T?AnBxHGYxwECGtxpOlLklZ}SI7_Fx2_sb@|
zyA0RO?`aBkYKYBT_To)6n>Y+?lWNy~b1lo=$Z<bTNlWIV8ML}2CQ&g<p|-Bcl6Iqw
z$|0qbYX%i`)D6(`a{Hd5UR|q)rRa=(kH$8p&X2=YHkw>g{_=$BFbK{~%#yO(OBncB
zk<}Xuw*p1<2wCezk%E`9{L~tB-YK-OHhT?0H#}j#oW0VLDb4PKX{4y}IB^R$${TD9
z>LwGKb(3z98mGwbpFZy=>{-~kBsXs;vvxz&(^7QX+44-x7NU>_8ebep6I%j1IuVB#
z`Zg5xf}}{{>;}!ThHUxgV|3{fE~Ffm=!0cWd|}>!)>=rFqe(NEiH&m*lyJh?D%Y?!
zX-06WApB@2o28(9(4u?II*pWH(W#u>%NSdwCVvSrFcWt*p}L7Kt)`>^=c<p&YK%7u
zKpLWnVnnt44Zie>`W~6t@yfT!<?N%Ujcu%HzefArsptLY%4{;zs+<&V*`|iBX7X~a
zHC|>jyIr-DU3#+f-GaxU^w%hE9i}Gx`c&ym@G?lAQ3Kw{`S>v|wLZ?p*lz<1#G*qg
zJFu{Ve#GE&jdJkbFf9ux_2m><RrS5XVjJgk1S({7xhc$7W`?L43%%ay1O0Y9{tVNv
zQi4`nT%x6%!ppfVE{WrI2!!GH-Ff?OlA~yJd>*l9_~~Axkc9+c!$`eRGksE-wW$#V
zXS>k1v@hu$6M+y4Qu>>|W^TioTFu2WlDv}E`aomxHiye)-i=-~KUq;CCMZx5EF<yZ
za0}bUK*=pL_#qM9HZkQF4xSa9UiU~(U$8Rqqy#fG_ZMuD>Xit!s+wXnaL1KzpDKNv
z)C}lAx48p#20>FkR%O!m3b@6jb136srMPX4u{axE^>9T>CX}#5$Nf~OAl}K^!(!XT
zi}I#EvXHhc=b;cB!8D=dK%#mCDa-pX!y3MV7EF!@l81aD5+ySi7nDAyz{_o|qzP+>
z<P9qCOrL{NaI@JW*VOrD))<T+7{7$EM$qeGvJ5H1iQTs5ciIq~4d(#3l>rD)5~$~^
zG?>zm=8u?lZZj}xoSM_R2LV$h%gyHNIR(0SMFzw~hgO3wT#arGGB_GALF_&?feivT
zkfaH+w4Ei47m?#nMV^NmbJH;Dnh<FumD2O1y0xAexJ1A^srKt_)AclHZ=VLL(8d(t
zEPd3>c&<{l4aep39Sj|_566fL*o>U#z<}#Q%@S({Sf&|8UFzK`DgLJKlpEBoMeXhC
zOmFvVzgBln<Av=bf4#jS$&v1%TV>V)OU0Kpxzj4zJ0nhWTEe^hD#dJD)vkGLORVM7
zYuGy0UVBFkOD$d_5HPFFe}8+}>-!Kw0V8fc%ga_4+6y@olL3)=I5l1D*Mn>=4GYmf
z0vgedzAM2SD>=IonQlv;BiF<nOuIFyaqd6?H|Xu>a{t=V$vQ?#!TPW@MDWjE6&7#4
zce8%3YTdDgHOv|dqcF9i_hD6;H>=MNtvh17EHZW0x4wWie0^xyFnUbE7FoWFU$wZo
z8udlmGp;Ot^(7V}$2-{kYF+)S%CE8hwG@2E-Dp17w$kexR!d%ogGE7b_F(XI%75i{
zGteUx;howXJ|k1P!l|ou>iTNCDSJNol=Gp(9C|I1CxXp`g*oVFBbeuP+#eV}jeAJw
z|9N|&$8O=H#i$Y!!<*tr#tB7iCos8No>rXuv}vWha;@6RBz2^-&1WIPv>BC1&KNcC
z0ZaxF5Hf9bK=4S9(DQa^yD&w7Sa{MqPU3eW9{q-%z84c8$)WDObNU110hGf@#L;o`
zzqn=u{_zF=$2C)F>9`97glqBtxn{Cp9dy<__x#Vcy#cqN(Yioj0trMC3TTpwr4kuQ
z*PD&lTn#4L86KBVkIHKJV^W*ErL9LXx?PIfWXAD}E)+-HH6=3mJT*5_mNe?Ei)@W#
zQfW4kNfL?3`Y41bk^vq_8U~o_J0ILR&bJKpj0(+Lvo2iwzi&Iva_@Ndj(+$MbT*_1
z^>9b&zWe-RHN645)<ZpyQex4Zy}v08_1E75wnr<jab>e1VUA}$=3f75-j(xF_eG}b
zackM=((+;jD)2*sj#mFQ>AAAUNh3CvigJfKc0&?=m{B_adEpni(S?nkpI+Oux+{G3
zURr<qnDkZq;QgEIC*sRc@Dtyc^<bvQsz*%c>nlVOAN-|)rum`g`_lVV)2u@bIyw#S
z>$_G*YWUM2v`tJ;X$^s^$H7=>IpC!z#HbvwxOc=%rP-y{RrjC;+myzS8^-2e%U>1v
zhO_iS2}_N~YLE3Un&3}5yqGSR{r2}4uf;&l0XmbxG}0dH^XV4YD`!b_cuEx8N#L$y
z(-kwhEu4n$0Il)X-IYU)pw%YXsE)PAC<|-MByFGyOhIwI&6HFDi9ZR+-{DA9z?Uzj
zBvKX94>fi6$I+e&&?3w58pejDVGS7PjhgNCC7?zu-$oHR^UTsz4Ar=KH(EhzY*h)F
z<}UYWtnX2vifml%&^z3%Zwsle5J`nB!A+M*U8GM@J&SO+dd&#^P`i$OdPh;pYRU%X
zBemhhoI`&Jm%_GWkSZ!@KCR-T&HiVwi~YeEepiN#N$3Tz_X}(DG6887h>BjWQE`v^
z)*vg;dTnWCSyTeHf=r4^Wk<|K0hv!vf2~Thqcuv3P3qv0orD^%08LrKjgaqec=CNX
zNH5-s22ZJY)wr5|Dho3djSYn!$Hg1W!y`;YI(@Vru^#Sn#2=5XOR`rl0^6H|roPU|
z#9jtx-KeScVAIG2z-pfP1Qm?%mK-9?h<b}xjN`J6pKYnH;a=F)8uc;0l&IHPi@fE=
z0K%cRw>@dE;n}8Z?=5<M70WpLtr|<BELNZ?L6=ZW%^6yd3)X`*pxW@`w7KJUU8$)c
z^iAx=^4sQEOiK+-6@A^^rt5px^&^H^#Vd@jbpd?uJ-<0SX4luq`p5a)r)c2HC6CQd
zmwLp@mDbxI@Z0as+P{DAYec-m^$aOdFSlfcm7tD3RmovZFS5(?PyBWR29JVAFEgNq
zd(TW=Ygwf{V!m||yUNN}VXw!0&VC)GGsav!C@b`J#?_ip4S6p!&mQAL46Z(N*7~r8
zVMyVPcKdatYvYsWen=Mh-TnFicke6xbCZ4xS~%2nV_m4;I(VwDw<=5iXM+*BvS<4<
zP_g&xF8uv|hJi0KHRtvkn!96Z{Zw<ZSF^A0eh`}6(7)aBXqRj}M~lJO1>k)C**IKX
z_%z5djOfufPT%)~ybE{;XgWf!lcDv~xE`dON$-8I{OviVRw!`*6&>HF>i{UjGf@Xd
zCm_w{8HWEdZ}*Ls-;K;uZG(JZWfb?h#)d0Zyx#5tWJ$_)HGG4kml}CkL#)2mG|jq0
zaJA&DrFBz~%W?==&_|Ec?~ZH#j8MLx^8wGHqld$Ss3LzFpyUFQ-lCsAtLpq?0DDX!
ztE+n-xpO&pdB@v(g#C}bk`IZbK96g*w|{8|Hb&mKHjP>;bSV#y=7j1%iNnpzr>JGU
zufan~%Aj$+94Ql;HfOcjVg1%-)E$>B^4@JMuWSh{EqVS04%qGA&+VV4@?brBE8px<
z4N?n~!Zsw|rlNz6T#od$4r%?pU^(rkGrbYf7e5EqI+2br{2zAk<kgc--79ibK+i8j
z;MB2}EaqZdAe5{ynm|I}94r=h%xv}?&tf&8jR#)d5O=wz@3xy@#WzOtFMve*xT3$V
zJppCd@7V_a%!gZbf&7q$ibyE~jQ#JdQT%yLzp~dOvT+Wr^WMS5I+sql7;}^He)6z$
zf2FgXZdf(G#v1Kqyio{aFHvw42_mCz0w24$xi;V~b}?tmI`8rCjknx+;@*AkXL&r+
z3UANnMH4E>Iv!>53!ic}^73Im4r@m8!x{nyiJE?Qi-z(;o5zLw^w4;8{?K%$yFC$(
z?n<vZ-jj@&_nxroH7H7u^gy_RbMGOutd$V^ZO|UCiIy+)=n(8)LRw`t_VAC~9sqei
z_9=8AJ*59w<{CE*_E+Q#^-2DWiF;T!NUf~t2_UC}r=S;tG{RNF6o9Xa{xTNjtygw1
z9K+f5ugvprnmTBL{0?g>u?UTjNOXKgV<uf@d0-db3n9T}7PJjH?+3aptQC%!y8Mh9
zSV#=|{#?)S^m`rw@qew7gxCT5c~>zQwUzr)cH8y@WyGj@Q;i&_66!e@2xP3Mfl*vl
z3L41yo0N?blc(?rum(^50kh+K=dioWIt~vtuP<REI5cjnHOyxm=<{|MUC)z%tg5>3
zfz_zQy+S}CI>OrV=|J)5A~8#wH-ZLy&6}}Z?Mvh}w}s}k`39ht&_p|f(1I5DIp`si
z3s_KC48G`tvynIo!E4c1*Cv#}GWj|W^XG=YjM-6A#x)?NzK!3q=)V=YDrg<wJCpl8
zYt3Q}|21=oL%W(t|08FrR;5LjuNqSew2SjgDrTE4D(At+i~;=gL*Uk{RQM17MZyDF
zDmK(0%<PBFXRgN?z3gX_fC_OU#+$gXnS81QBBi8W&i->O4CR&cidg!K^blGVrN_BL
zrn~Qv<7`ekUX~8(5s<9BcEB<;eC>P%pK>(Ja!iyMZPmFCz6X{F<^{D39J)L@Gzv)}
zV@?TYj&Xl339l1~_3pvqHkfp(X6I@Ts`{~lUO)?2+U|Q)*g=#^`iRnq@m~>%(`T@Y
zybu)v9MiW-vZAfA4wpyvrnIP}&jmo(9~x~B$25=?#WP%I)EPy~oHtX5^Jb$GNqIF`
zOVL;j`~m9D8wLnx;h1C2#$Iz!z6;_cH^SaM;R+lkX3tzuSj7Dj*!{oHT|5%wc!Hva
z>EvpvhTbqB4mD7m=FIK2h}yU2W*3@;2K12fWgf@(S5%ZSq!I@XyQthwl{ICp%s9~&
z?B!prHp5x_9<oX)1j+h_0>Bd3xCS7%sxH5KSM#tBHWRZnvbN;>y|C142LJ{QAgE7R
z>F5x^s`7`W?)A=Jx_H?ggf@@|3<umGb;b3xFk`6e1wv(d+hprIK?T6$UFfCql2I~E
zD#+c|OCReTOcADYN19F3DP<iRbPk3E<1!OPI8v<QRqJ(Wo|i<xo|P)N&&8T&E$g@f
z%DQu7w{Oaei-(J3bZDeB=!pCZA%+$d7;&+wDH5iN)o2&9w`Mnkj1J5mAQ`a^Yz59i
zA*<f8eC%xMn-Ekca*ejI$0)%3T;${Bc=nq9oW8o&)DTevb^}_NZt#L)V-AsAl}2G1
zi{uQ`vQ9=uQD^$}3agU5MQ1fM+vO<maPxI15_TK#9NRW5?cByFPH+37ZZ^6@O4LH4
z4ZtyjNOOQlHu6BS)J6#a?Bo$cv|h$RufE~wvtf`6G$rILxWwE3<pVc032{ca3XnHT
zlryR{*a;d>7{8$C3rmNJ;SNrgGi=n_RFn+LVy!4gDrNcwd0uFu;oE%IzI<;({1{_)
z-NGWl64p^oNJEyb9ub0>)t`J|j4^fk!ecgmzGq#h4t;am*6585sJ-ZNl`0j`xqf{<
zUOEYgx;70~17=5&eGLRsKEk4GnuKdr6}-?YFu9pmG0DI!SiZD;``xqa3*xZtEvOqm
zn!vFze2!Eg472`35JoUYg_N%dBXR>DxrHTC&*OKl+~3@>;}_Y&;W19J$dewm98`3;
zhwrZm90W!UfBX_D^WJ|e!>Xd*tMKk2>95?aL=ZVaeS$q<(u)CLyzHCXnfxOsI>1FJ
zq$>$KJHhNgP~@sVD%gXT1M<yljCKPPt{j}KAF>13?b{@68~%9A7!{x}>%V5`!)0j4
zP^E!~iiRd3l$B2MJ|EpFU(mS9m9=#|V?abqnK|JI#M5V-I{NwSBb!B$M@18tkPDV8
z?Q5tMVwXmVb3I>AUGJ%r`R17HCQUO^NER<W1E?SQ5@v;H;4AC|t!hZNKsS0LI+|zR
z4tc|8`9_uvpsmx7&*jfDa{5B*SR+_M8+C;6CRKA7UH;IhdV2gI-ZwUBs5Sb2;p=)q
z{(JnfICnG8*;^_)B}qGr{*xA{Ik4r{6AH_^gy(<5WKJQcOap7fCDeLFGdcI1yhG4%
zMaswP%`B{5JGki+G6_r5V_-d%qf-9+Tox8aNkIZS&4jRG!7t38Yc6q&cedvZ#?1u<
zJIzr9NBwo_q}sIIo)1<pG_U)Uw6NCsmtDG}W2u{SM`Jchm9QbsjzPG_RuVT!^g73<
z+pErxo(cB=J1C#d&#9{l?UIaM=Hc}fLD`(-X_}AToA$&@A0qB<7EyW=)_A}gEmf+(
zUjZfJ$IVA!u8<&96bi`ocf%|L<XJ)}>U2^X*x#*R+&vpyVqr--ea0#7*PEj9`uwo|
zy8CY)m}zn7G01&BvW*Q&R-8BkSUgp;6SAnHW5a+ho(;aoEg3lxB2W~yq>wC%JX{kK
z{Ox8QGHMJex)d%?!>A`p-C=FrPG#uMl45(LYo&lk!FB_4BJ%;CNu$A_<yee@qo>DU
zf-hZGn=Z9_@2eFXwYB-YE7BY-VG&Ge(NN!s!`?2=`}e+YgfWJcSluXR<k;c08_k?q
ztbxn)ciW>;z!_+DlhP*F&2;RN^}s5{zCw^4*Cc#aufV=|h+>5823ax+XTetn3&>G>
zQZGSPBJw)hd7`{3bQ6IzAMvYK7OWvkT_#2L*g3mz(o2@m?5syNKi*=xLNTV0+v{MO
zVwR11lEh~B8>xp&o}Ob!2?+~_3m0;cH42<f_E8h!w>kwT4zqx<-cmy4A&4ZKKKbVJ
zqI4b=+X-lz@o8y7BSZ*VyJ9Y9%@2KLE=dgU5YZeWlrZdGI+;#n6<-WusAXO#mj^lZ
z#np|Gi9mxRlYwo=BzM<1fPhc*wMO{4gZdB6K{wet2fe1gWaGyxS<jkQ%$!tQPS`|6
zLMZs2$_LG6V0r;<jc(4acywft_~hk*^Ic~w<M%#tHxsgSQ)0;Kwkh7-G7si8H>k|R
zf`DN%wq9U=rUyMdvCYLhQrb@N8Kx}7c)bd>5J@G$TOgT)z+(Haz!O@L@;?utQsBQ{
zI!(N(r%(|I_uoor?xbBG+~a$u?fv$}^tkSvS`8fCNDj|^hSRdpl#_c00Nl&)pn*p)
zEWyaiW2qGy5GcuF>d+Gv(FEEMoKFQc_NUs6eId=&nUdBaFE2G|5Z_noGuLOv-_7Kx
zRu)pw*Hm)~KibG7EUg00YrOrHvB{h0G(!<1jRqAUD@+jd+-e$HN@BX-2MeS=R}bRn
z8&0UGBk(>y7nJX_sC7<Ot1P3el_K3<8qEAP$@&kEvKZ7LbL#EZ&)vPi0wYr6pGw2m
zg$4ze4sHzjj4v4Y3B$mNl0GiAil<uv2^N5ySjh!}lwa?cKSVIRN)>1mDmdB{3W*3J
z&mii97CB@qG36dXQu#m4)#O-xD*FeNeZrlTkSlDAJ-?z;>6(7}jVZVaF{?8=6_BQ5
z#_E;S1E2NFlO?!4CSg)=8&w`2QihYEF;e!YjWWjc@z3~ge;5*XG+-?x@;OAq@tuQM
z5G=S?&TM~O@edzQV2*e3oX_<|+5rB!;qa)YM2r>DmLH)XV#N4_M2WxyBRmc%5m~PY
zjf>BQprp00<~5#|mgXD}uO+>_+msmozV#X$>WH}23_q!<m6yqtl4pE_Et%7#V9YYB
zwhLH3@Rk^0<gwVv!-$vVP3LkPvso`(OF``n0%iJ`)3zN#XNQO;{4t~PNvW79lguF`
z&%!QfGe_m?kS$K~Jc=F?;2&(p#JZ3;)r}+Yj#H-~q*&q;nbft$Ko0qxHcf;A45{xK
zqHVXRO5Br{kO2!^w5D0gUX<oOP$i;*i8m`taQr^>6Hq^8bLCdiu1n_BLnhKmkH5N`
zKEKUtR_CK5>EUAM8<|1Y(y%-cL1!|_AbmoD+JtzpiT${Ny!xysYd<H}sF|}~e}NnD
z@O0*R@CHDVjF)+|!lM*7spQt$L@C}OW<bk5x$a2E!rm2?4C*7Jo)M>jR?<~?OZ@{Z
ziTTg4rmAvm1zhhB^|AGTG1AqeNw|OpG)Uv46xb?gv{VLE4-Jb^ZD%V*VHdkpY!nae
zh!AcpyMds1ETAQi6v?0=Bqi(|cZr?fZB378hLei_U`9WpZ5*2^-9kl%gyBMP7)+2s
zTL)NK#Rb>-WmWo95(6hYhfl=s$}zADA$d@oSy1XE;jo!PU|sg6wZ+>Q4H=|LX<T_Q
zyGGFx_ZGoKtV7Us#hq3wXq$&kNNE<c^w{99k328qg@#IpOdnQRmZrryIUXPd>I=4;
zvRuR#qZSn>3v0MdG6`%!7ND%F#T7Tj(O`OhKj)!ZMp!_KY)g@V*GgbP#Ki0OH#|L;
z{(FB6rMZ-9YWO#adAQ~9%n7CV-yWpwT;_uqVRN)@2B*o@K`<hVMX79>-rZ<FR3eYX
z%Q;^jqotd{hD4$i{2`6NP@ox3W3Y7RvnwPtyjaY5z3VJBGuHM*$+V!u^IpJ`*Cm+)
zys)a%-9IK$Zm>1xjOBVH<W3W*zvv2cCmI$Qv2x`Q#e_sEsj~>=MAW4UwxC&C#&ctc
ziJZkK1UpvaVg(Nh!H1HkGo(^s&|dc%(s#YWIljsSDpQ(gbZZD5Ak*a7C6n#w*_3td
zwxKp{ItiFL;^WJ@6BpYq7wX`jtuJ75y-X^WQp`EMK3h6XC^kmw(db!pilq63M{byC
z_pdJGtO0zvo_3Nj(x>d|$w`+@6mg^B8)&epB|4_3F+5K%l8+y;#l$~0I(=co5oDhh
zpTLzQw|Li+;v_4sayTm3g7N8&xajb5?rUyB-8_jI2|RL}x2DE7-Ho&v;#}%WM9Yai
zimBeAr3$u?2HeioEa~p(w;ECn#_gJc8`_8c_G3F6VvwU{GLoD|SYP)ut-~^CQ-1kc
zMP1cy2{5F`EUhU~GF)bqXl2Su7c9Q?cCOS$mIodp*DgtSmJwD+AGCBAn`z|pg%gw+
zP}f8G_TbFSudr-Zk$G5YDAY3LHvn2oE;ogIc-0QY(S7*yt7s*$M7uv9xzf^j!@|6b
zpUYP|13xy))|yxy_2uYn9UYas8oYMo02mq+?}alW+mfZ&6mX!Q5{j{4(t)xQun8m!
z3;U6Bx(rh}WHn+6%d%kh>meHHSo+h7G-_P_t^KZR@JAoW=Cd-+$AtREN2Bb&+*%>v
zj_{WSW8K=g;}&n(Aow1-UqUJ$PDXJp5s}sXNQTh9ymew1E1s!f9<ISm(TBgn#B4XE
zjb<2nP7k+s3<%&ywF?}o*4xBXRn4P1-bp`Qewf7LW1GG<U2QfN=g!ab?bJ@UuT)tV
zBfPf#T9QoThMrEibIei_VP~qeI(4doDb{`Jc5pAw6}I3^ljQ)+ntmL5?tHM@<p6wG
z(kcN%WWZ{x=7-y%x=t}e5Z&8cLhbE9Uwa@WL+@lk@R7}Kci7Dqqz28086`U?TNoR>
z)G2dkZW%QDpssctLEGU-Y+_6YG9&kF+n-&88{htu`>J>%Z%oOAE}5~*D88z!kFWsn
zA)pc^p^APEi+W{$fhr!$H=8oll%BJCnlp*bElnK>hx>i7vADTI3Z>G!IW!p&lbAoH
z`a|BN*os);oeyn);9Cx>Evl8re|4|43xX5(a>`=KCQo0fY-hHXj?aefP-tB<HO?$&
z0t-R4(U~|38R*t%W2tQ(@JI-44Ux5G3AU4COvxLkhf7e@35GJ{o*8R$%bp@xI<79S
z4R1WFuDC9o_xLS2J~f6{P6&Yo5<O!=1zXaMkuIbbc3JBxd+%Pp^q0n}C~cC&EQhRA
zbtR|F+FZBjdEZQ>)@b_!BG6`65;s6Rv6-!gA>kWZ=Pw@FNciRs50%FcwUTb#P$v9}
z@iP$;B(|K3_B#I*Xx8+NjR=<bpvsL6T6Ss>KSF(K7ORd*@|Y~@YRnpldu+-1d>F?4
zqC77YaWMJ$)~5MulepbvuC2@Ehu79T@>N(9J0^=>r1qyfJ0!+c<}M+XRskW;sNkOL
zB-BwTnP=IbSWanvhm!dM6eK8L2q`6U5C~o6ehO9O8{6cNME8rMqvdMC1<{DhahJdK
z)zw#TW~F5q?7`hPL8$LXV^5c+rYc-a$ad>q`$}b!k2*wV45QtT;M|;V26^oyW+WaS
zVfPSa@@}9-Owv?r;`Iet(cp3$e9$3~iVhW`sZ$qh44m@hu=J63vE(YLbgL~)b4yE~
zo9y>iYynGv<T&}>YwPc)>6)WVw*?OkqpQ`q&s1B}TZADeBA4OC;-4zyy=&~vO-r0V
zXR1;ns^R0(2j0YKH>5RCw8(~(sO=Rxtbr}nc3m_a?*1;T@7yfalJ!c0Bn!qLf)Cms
zd0i)Yv9Wv>H(TyymZ{)wf6&Tor{=^HIjK#BrX-)mh8e5GaUWVlS4ZmIu!K<mOq!qL
zq_`jouH{R+<&O#MdW>Zu@(fcB;B=|th;}8<u6g5Z!E_}y>(D}_Q7HQ8Ep^)OO~vLE
z>c{QNc|M=_^+YJRLmxl|+U|d!MA*NgxZ+<glN0#I!DpY=m^y)^Ez?i3Lv61{_G(FZ
zhjRDPWq6U=nobo*2;J3wLE3fv;%Jp0Wm`(Y&G*Z<_*l_@OF1dNT@!~aq=I`k3~t|D
zyvE?U@i|lLR3lNV7qcGjAQ8;jzQ5$&J5RgfjweY;v%b3LhKd4Q^WR4!#>7%v@BP+2
z(FhcUXY|dqn&$qVR3{*+?uHx=IWoC<O9{TXUdoYrq2M8xIk)Hz^Q<%6*tCZ@<It(<
zS&M5WcF7a_^8O_F8F^a1)9&pvl%X%e{24j0_Kgvf>EuN|k29)y0^vf2C;<!)^RJ8e
zKtf088}nM+9L+jxwR*2@EdDhnKE_XzxqP*S-;)V+5xrJl8k6ht%phgU8SYix+1<zf
z>yaG?*TRE1)X4Sg;{Ak?&-s4!VKt|Z4)kzsl6WYGr;l5vd{lri2mSQiCg#Apwo&n#
zN5t4EwWy&gkESZt{*QE7gO;FXaGPSMR*Abdl%tLTA3E~w*3UNmzaBe>O9$lb*V58k
zIkMqpEiT#HEq`LOuD<W^g1$Epwc6t71pH7zLF>?Pp<|&5yRHu`Yp-4Fmg^Pe-~4|q
z{5+-W9qsnS>pwia|G<xHw1`Oz<6`{Z19ZUu*uX&l6QI*^D*yLK_d@o+0lMoi$ZWC;
z&%JQ}J(wKIvY7`vMsqxb_XJjf05XAuQVDRS;_oE7sYWts4EO~W*^M-ljI_@(i3tqR
zC=kyW10d*x@dJnUfGI}+$DJGk-%>-Ro_{XDx2ns$)cf!j{N9ScXX&7(vaND=FB!DE
zwdemK`^wu#-St>2-bdb*TzT1gkJxZpy=mV3F80@7$?{5_-3auN8fXvuI5s3>1PtqK
zeUsScz3x-H-t}-+K0K5?`vO`bhN_~Ny0xGJAOT(o*N$z#!ou$GWWJtr_H2NV-abka
zkRW<Iua`eFfb~h{y7@PQCQ_T1^^10ktPdOB-|GwPuUK6N#I0_hIWv?yJ{+4tMB+)y
z3~N_92tnV+%N0Ma4Ikt3?V#8}_fh6jbtWMB`+9`Cxz)XidH3OfY(ByKS^$dOiUTbZ
z%wMsR)c8XEihg}>Pa5C4RlUc{xf;iuy}HdZKBKQ2?Vh?F+m~MJy*mEYzfW$t4Oi`}
zR42U{6vwW7_G?$t{AF$BXP%pTH9gi<ee0XuGbfg9b(fBaT{FU6IXktd#?~fYOdqzL
zb#8ra@=G5ZuKpBJWR}DEX>7wVFKA3hp5Mk=Rbxpad>&^x_U#^fzIoRM3VE-;A0o4s
zeF45Ko+VNcbs`}9nh(7*7vX@uZy>E6amyDDv^q%NoJXHNc3)@f<XP?PYJD6p`~-FT
z9N6-ws}|VCk6!C|%Z5JW2o8|UkLp&?Z&k`$uU%Pa^{ctj{W~}G9iVPvM{Us*@Axap
z`c)tgZRcH%x22h<6m#gRGLcCIs*?g&p(GLXl4Wd(-Wu08NG(nRkAu*kE1%A@9)KVB
z+oZaQZf|38kUA1D(!xbAMhPBapScjE4^!Bka;7`g+?Bi_JttlSk4NC=12;kDW$(Bb
zYQPNUCdV)Tbl<hO9XPzkJ1-+=^nhoaH_aa%uWHm1m$4o;JaOxiRF=btIuRh%z(md@
zGA$ub{Z;OF+c{W2z=rt`;L!@bpo``MGZCn`u~P75|J&Q{rTJT1>MEXw@efjj^;5E2
z0A@b!?z-TZx1&Z2{C?eg4edQAw;CnpE=bw#ad%G%XbbqhJ3#@!NBw6bX5J;kJN~J%
ziv28C#~;>tSK&n&7xlPy&Sb~28dxD&BWV9UH=UWEQu3+$>^;wtElHot^-}-$0td<D
z>!TDHBPB4BbZ@%S;6aajk2v++opsIbg=cRaYOuRBx#+Cc3m7NlqMFNh4PCP=aI>3=
zJo^#*y*>D6)!nk&z~1|}Rj_^y&uQk71-*={L?8?tbHtICF!c+rlxN@HY1W@D%uSR5
z`>4sv9}r|9(p&9)`EA$u#~y!(OFl8I`WU?!dW`3)UmlDPo<*Upk?Y;$!Fw2(3hMXv
zwzG9~vwdC&TSuQeXFoj%-*$~gV;wE4!&22tdaFK(=jW`I8K2v%awKoVlzvP4wgR8K
zWI*(_{47pmy=17Lb1;4?o_^)YzZAnP+#Eg_0ygghUyeU}Fcj(_ThSBmCNDp#&Q`oX
z)t<k0*VbV_d*-^h-Z=Y4b!R-KM|%mJcl+1dHnKOKGpfJ4t#lC46*PqsptPU5v(wMp
z3!1;(W2wIL<a7R}E347JmHjPAfmogzcnN>)xmA{`@~`0a*QdFpUA9`=p#}N09<zn~
zteShpdDD;G-vd6oYj|BnL7_x`>&>H#%))#~>I3{|rOa22PP{{awsHH_3wwRt<3qUL
zIi<k!P+lag@v*NixL2EfiEQQ1{NX?MqO<#6erWMNo9C)pRvXSf0?UM4P<+My4+mG_
z71hH;>5^`wO9TX@8>Bm>Q;|>_1nFHu=@5`^kuCx0SUN;XI(GqKX_j7K<Ky?8^ZtPM
z-kh1abLZZvxc~?6<p5=$fDQ&1%n4;m)$0E~n?L5Co!RW#WO79c?BW*vm5JZ|t%Tbk
z2y1ql0=t3Dqn4-bO<-Lf8j!P#kXzxJshV#USat81N3WMJn~RjmLXU>x(5I7FfH-D|
z=?lzXSI83i0OU90LvSpG>Jb;#w9Rs`;M|dVLqYW_JA8@BWeoz(t?_D>2L0`Cu+xX-
zrC77A_v|$bsMJ~oY%)iICW4o*?&^aCt*Gwo=-<bRjib+UTmY!7rIFEYD=rKnTr_NR
z3Hcq04|?9eXvMRA8b}jSWE);&E(~8H-FWuZt_%Wo!T|+Un0(!LuJu0-;X{-$)<0;V
zV_I-St&U@QX!q(R{4<h2R4%{@y8v2u{RW3zzK{E`x;#J!!`J!bK9K8rav%8IJNUS(
zK-vo*QRgFzYdqS!h7UY@OeATj$FRLSF2XJ4*Ll#w1OaN{T~cs9j?!#OX@))Eeg%kH
zYB1{#?|e$B2JY>O8Bj&L>;|39$<V44%{kd&qie7bb&6})#<%c<7LCVf<!O5ylz+fe
z5>DJX6jDSUqkT<d`!Y;0zlCr|=qv2p^*{X5&uxeR#^eJxvRgtt@s2&AA-hqar55+3
z%S*mJM2#dv={KU%O3FLH7LQl^DJwe76d&~=zS*1_)4Qr`h~p;YH!vVgEbmn|svD4c
z-8t(v(v#?bz7Jcu$v5xHkdU7CjF@jcYgOA9Pxv*F*ed1n2^W<lz2giq@4``(#Y5kF
zbV1Gl4MT$D!~ChNKU5(u=^<yxU%;~1@Xj;<>ajGSzF!O!{nhfL8Ai3tZIZ%6{#1+x
zom5HS{ax$_hbRSrMoxEHu~3^ktwg9g><{K20mBjYC-jI7!c)(_v)%yK7PHBhFTNOk
zyt9A&1=C1da=NW)?cvO<JPZpM*-6Jvg`Ci3f|VBriY4KPEZfrhHxk<ARncoKv>8iZ
zM&b!Lko|_kb7Qn>GP&6^^;!mO78xpGInz~e$uHAtUw8McXG*VdBa=|??0h3C-U|HT
zOT4@gm8#ZtLqY<K3Q-OO3r2mJr!izt+d>BPDt$obO-(LstTwa;mNo=ypMB~F0T5<=
zpsns!k{^1>&FpYVOwGrtYVM(Z<~;2fCESzTj3fYgkpFAhSrqL`M(Y)Z8~4Wh@90g-
zU4quVF7ZDV8h0}?hUXZeBN$_}=7Fc#$P8R`CwK)H-eos%@3SWI!e8-hb#(0n=>`E4
z#OBGT+kHL>p+z+DS~IF_rQS_TZo&`VUY-a#;CxcTNSqZS+(roT2}zafnWfZa{bJ$j
z!a!H+yk?a9d`jkV-L*;f<3af-AN{Gnp*1M1fop0y8M^+M&aKO!^Ijnm_!4;Ow07w7
zheXMlOESeM==nODs;J#-RBDrb_vebX%EKw*hX$O{><p|O=p_ULHk4m^(jlxnM(iMG
zVM%#Wz)QE#mF9aJEe&K-#Z`6T$IW}u1K}ye%G3Td@3-IyeANur;O!3don(M3*)k#K
z%X#Nx*v5{JiXxG#7!nmi_E_;+<zWG==%?@i4Af-dhAB2M#bxPy@@Au<3m=56r84-E
zrZ08!CFh70*xlNmZiOXF&aAssz~#z?wh8KQ*Zp@G`Iz@W<fiRtHy+BI7;4|sfMg1e
zS7z{?{nS5QLx6C{MqGfPADFoTUzrV_W&oW{Fk2gl++Sn;q#d2@3E0el00;fwki$Un
z#=&imEkt9TB`YZD((C@XQ$8!%Wt(^MTs`8p``Xzq@QRY`n@}TtwsFYOe8j?I$f2#S
zpRF#h@uusSE=?J2cg!Atw4w{QG<G4L;yG5><xUDZWg77G1o^^s!Y;zYII&0^Jz5E@
z`c~wh0^!C}?7~n4viJR0VP&B9@*kg^+Xz4=d3+I9pb&h;`xH-?H~k~Mez<5njgYda
zB9ACAqT<KP4k)hD`V5E-jCg_mcH+LqhEZM^BqHLoBr8X=UgO`b#n3P*_`c#XZ!yq|
z2*ifV!yzVUl^ec<{8cC2EDP%jaXTC?rmyBd4RWIe1LKcQtD3!D7|dJ*2Q^fN0zP4)
zHV;*@gqa_R@RH2g#=37u7!{HF2L{jal<MU$zuLJ}4!u@<XOO@8R00pCPUgrDIlDvZ
zq)j*2slysjt~@q=6%a{iaL46chH|hX^VkDZ7yHPq3w?fU$9bo)vda_iFqy^U2ReMj
zCn~O0GjBd4puu}+*!n2VGYs|HrNIz8V3cwX4Rb=vEI8O5eR$S}jY?AcGuhW*Cjo0H
z`peH>WPflq8*p64-RD?3+&&kI68O_G(c7Ww6RIi<_?4KfoTeLnbVgr6ZHec?sCpeN
z2o&xU%KODKqh-ra)4Q{mrx?~_LQZLoVV;a3$L;bra2!k%Hn?yCTyVVZVS<2Z=r+8C
zKPfujKFmCXu6j?myz$Pkk@)%EixuH&4Qb2UJuXe%zTXk<=wWYsDvo@cyiPAdA5dF#
z#sF*Pgmv9IkS2yH=J8yhWIG}Ze8B4XU|P(VNisSio~)cktaDnwk!X%c;7KdP&#tqU
z;6Dr62e$H?fTrTxUn%C35P^T=e^R~{<n`rEmF~$$mQU`u@&~SA1DD)Z-cQ*sMT9ZW
zVzzY)D$zW7E)=DG$OIDK-nY=)Tu3uBCr2E$orD+JMgo!I?iycAv>&vL=bob<JV8k4
zh`Zs;9{WK5qA~zPx$6&SXT~Y5@6Pg53eD*Qp(;007DB*Tf@N(F1M5WaF8evNez3o~
z=D`Qksad)cCooL!ST-;_&L$4~9VYTldhfT;#r(mgTmT^cV4Y*vrl)lLX0Z<>?6S^;
zc(!W5AKet6cfYmI==$7t=ry5Hss5JcSl(u5iUt}^z3}p6YK{NKDFkB9C=b@_Z>WC>
zUqby_$<NSElOm1WeqU<zKn`O)>$xqux4$Er6(sC4cjvb=KtC>yN#yDF7yH0rU_rY1
zb0<m9#gjL-v{uux0|Mco(XqNm5D)>hezh9@`d1$--MCP)cj(!gbkmt9(H#I!<E>at
zdkcZ&v7)A@ACnhCDy5)kD*$jU+<Q5%Rz7<4XX&V3cO$swAp-{p6;3vT)CYWM8WkPd
zd`^^#Ma@SLG^i1Mx1-qEXWXh)CrH{qPhS4`=8wgDg&Q7_iRJY`bHqxG^=2*AtGh}7
zQLjO^(PA#y<I;B&u!lC~um69?Vzx;P>mq^KY=xpcOWV}fB?2pZlG`4;mBQIxpS@`H
zss`|yt<C<HFd9Fl<dWq+IeVRuem|<8w>^M;I~uzp?sjtfL~q6}T?lc{&<mTGzR>(R
z#9-^iY-C?HROmPFO~5+s2(JRp{y^VwXo1)I6iLT9XTE0U5rQt}T<-pu3;DJ}*3>$A
zeb(Q2)US5dMNHNUA?H0dJX@1Hk9*=YN{{lHQDw8?i!apTdQmwpsB!KZyem?&o7S)A
z8h>G%HQhg1on!(|$q}w}5J@Zj6lqU9)YN5t(S|zImTa{k(*6Vs;kpJnV`?zhCSGcQ
zp5~$W$`C$$Na0xxhwqZShmz0L!TYIqKS!~>#)Jzt5`I<3|H!r;fo`B7GN>bTppfEA
zg{kY+W@JNBL(h`Ky5kgMIQS#z3&W%bKl>R9poYGtXnd;5Kv>K=R%%KmM0F7cY#7@>
zB8ho=F+nfRufMMG!WRVl8b0Bm>>fPbrqoF^9l+DqF@?8wcV_b#63Y_o7(0v4Yv*Ox
z<IIfG1R{VNXYN#po~{4Tz0BHU+Ysz~d_eu{A^C0Mx4Q}>rE48K<)Fli(GN_qW2kV0
zou^+mOW%;&S<Ktizvsi}WRa2RGY(T^$JBZjQ=cUTU*tqA1Me_^cQ-2CqIo=j@E!w=
z2PdJs&XvBUydwcNdAz+0YOhG!dH~aSuT>m!*|Am!GSxi`$21Jl<Lr={5)Pevsd#=F
z6UZq&q9*B|6G=&5vp7WM&Wdn{=}KUubC1>>!KR!NTziavf)<v1C3gXb0b>;np}Ws|
zo?v;~4<t!Ci*+k8R@5A<cX6}%FU8184?gBiK~1e<!|Fiqf6!hOCOg<*b@0vxJmMjV
zAP^4YigC~e(;03y&`VXfp9YU*QMXh(zg3%?kB{3SoF+-0wa90yysIpJwf@IgCNMk&
z^}zbCp?e31^+Lsj&11c;zy4PKkOXj<u(Rv{OP3sE7`Aq^MAh70U)F;fjKYFU&_)EL
zQK#7P#Urn1j8KmjyP?$EoAWmGF#Q={&^oyqwF)~<X7=*jCvARf%>SBW7dF~#Y3)9)
z-pZ@cxbQ<Su2=i{h=B_veVmjq90y&jL5r8dSC*`;ap{K$X1m7tq@lhPZPLsSmsRS*
zY}qt9wh#H7G~H!o<B|sfhk`dDXKIjEEI<HjekauQJ}1^|H}eSaxjfv(UipAiA%QBF
zb9C#0w9oLng@tydcnQN`nbYK5?jG!#rQ)8Hax%k^pQc+kv$AT8I2m>iJVzoj$e5w8
z@5mLeNCM4$)&wHKaT(F?$es@i=%u7Mg`)25FFS5Q4cjS>Gi6a<yVPG88VCG7k#+oI
zXq9EO`6Bh{E-WMl?gjjiSOkZ>WHrW=RA<3XW7%1|+&_t%IVMK*EUuaLo!ywqVgi?>
zL*kOT6d{#o4;m)|`^?nT?v#kAitpCqO6m@1TOP1DRrl&0!mW+vodoR2Qvz!4>yBRR
zGkAii{yVLC>Fn8kpb?u+sjEs1DAEX0T=!Ex4=XiHrZIRiQfrb=Q20tB0-qK#VmwgD
z$?h`6y0yRl<ZA<D_dd3im``@#8a<bCo}~lQ-fJt`l0<wBu3Pcl@K8IZdqta}@s@k*
z=b6uKznoXQ<n-j3eYu~l?)EJe9qFq;>N>LT^LFO8cJ!94m4tF$M9g|6&#6R}z<QDw
z5x~Yjd8`FHIf{1wN*bmw$Erl2nJSr2ENP#x_*`gDKwa|eO2t7Q$E*6^h(ztyyJ-S%
z9`UKcMgX{#u<x66+T!|qN<dw13pT7-2NnQ*Sp&FBD4Z_xMFq1Wlc?51cX(#2$>dpt
z5yHd2mD;bZ;IK;E`?jZqP&!=rwpdzuQhasnKa$C!NnSvxoHP7Ya?XSXLy>}3lVsEd
z-i%QsQMB|08H!S|9*~4m42%Fas3uwH;FvXFPF&Mivevr=+elLT&RK_^2C9rThJ+5N
zFqlXw)jk-m_+a}E0}MmLBe6m5l$D_vCzBCBa3m`X&zpy4!#g%3*5cR0YNq9z)tn0(
zF1FJN?U6e&Kopz<sx9rqas}vhoqV?}0XLUVWex{MUANv?<h9$k%zh4~>}K4(oS#pZ
z$7FDK#+c8wE}&96Ax0b$MFA%(^f(Zm=$qg8ifcHE*K&8m$n{TaWE9RZAFhTIL)R;U
zOg<uoi^x*AKR1qw36o_AEbHmIe1Gp+srL08Vyt#~-Lx%_6c&A_wpUIjA{UbDSQ~p0
zJ!>>a9)Sd+8!oiY(Cqg}m%Ce^SM#xTGH<qVJ2$*0OFBo%KyIJOQ0bIg7MMbeB@Sx3
zq`O&$R#IVj?~5(J0h*rAB9n;NzzyMrm>Yi3Mx?OGC04a1k7ewvQFM0rET_WYs93<}
z%D)Tnn0Ifj5>`xS8D))tT$kN++fGL}WnU41JkRz!1!4GOZR731#(L9?{$)(%yMIl0
z>$`jDwI^g7Qp++L^d-vP0~=9o$=3BV#o7x&(Ue1&Tb8|*a;K^xKAOy{(8{B<-7hD!
zh2qn#%l4*lTksL`X%HGE0%4|PipPA6rz(pb4~#9llR@f0weWPF`;tqNyctDr8o+pw
zKq}<TC4z^Ba$y)gKSgCL3uTKy8IwHX-2yU0pA4xgCH4e9n%NafoFLc}2uTS&uK02j
z_Ip7k->2J`<kR0>oA<RDOsfX9seV&z`X*XMJL<pAo4$na?&u0i&M3`IPG+~(OTmMN
z!@+4%JmPxGQW(56i(yCHPqRyjnSv(_$;FFI1K-tXb*<vU7bG4TwV*DDea~6V6U3>l
z5UdOTWEi)p`Jo*d&05lce(I|92Qn&uCE&gPb9?83jWvSa%Pw}y+?k4R!qAPLsgz?2
zi%9r50mtw+pZbOOPy0*ksCXp<QSq}m`;J$DAG&EEJZ5~&HI2C6bCZ^Wh-Tnm1Nwj%
z)I?pXR%bz#!y_Gi(V=MAZ8vCb(C5*RAnp5F_4ExhjhJSxLoDp=PqO=HqYes!=$TD|
z*mDB{0};a6p!YWFb$<r_as=1M7aG7a!%VmhMC>8MbJD%Y#BDdIgMJ-#_Vj3N;CF=|
zLkGX3?0Xy@@w!A0w%_*(!Ylt2MO4aO2riBXJ<+kt(?(Z5OV+&bQb~9S0L_PizUO^p
z&TPV9M@*<c&n0ayk;J67DqmuI$?oRs=X8&6;k{voiN#fH#;`IXlfzu~ABnr*&;Ep^
z`(JVRQlG6+H(-Rye<r&bguNL^TQ&IUooOhqlh#FBCbHiiL8P&aP64JF%%hku?Q^#R
zvObSm!76Gd({SF-<Tl{MyA;Jq!~CMUM#Q|j>rw{2W)n9B8*#<AbJXNY^sz~vn;7Nr
z1x~y-!rYdAuRE~K6%4=>XDq3p0Z4Nd^227RR6?&0m{J7ZPaQqeDfw=tTVM_}>H|wZ
zBjj6Hjn0S+X~$RaNNKITi7Il#$M9f9*z!E^VS*TLeOvcWgB4bA92w@1$t9Ul1Uv5}
zU(XU^v%<7I7p~5(;r%Lxl(2-GT8Nu}VB>c!2Q~R<sm$9<0!^cUAn||PX@1ydPhmr8
zdl9)D)Z@j9Z-wPl#i(ALe1MthMi+i2x$g*Lx?=?<q7OZGx|_L1Di-km+?WRM$wB@5
zkks&$1U1x28>hl0F!SyPZRhmC7Y7JdO3R>^m&M<;tTbSR)Hu@SivASAzD#(z!qu_A
z)$p$!u}+RYlvIazD0*FVC72eDjp#-zm@ehD(uFVZ6a0U00ZsIB#0Mz}=1rbuc_|=2
z%$Ww(;PiE381-ZB2Hkx!y#c*}oJmVQBrSD@$^Hy;#{*otTr>SODE$51MO{kx=IzaK
zn0&%y?0_}RJ?YrlCA`Ef@s@0ScjCE+D%wlH?WvxgX`j&6RU?PiFQ1e+f17ZI355&S
zf$!Z<Vb@K29nq#_7g2;yHpTZR6if<no+U90#vQ`T25r!y;8FX|ciFeZjvnZzROyR_
zz-rpq*IIVUj=e4UyI}JexFp$^P?U?%N0iP};F(mMVd<_@WoAhS&N=1$-kY}+d+)CN
zVnO-4=lB}%JMalKh4!63nTsV%biT~OcC=ta2I@iwaWRLSb#As2qZW=P7qtHt((S4E
z<Pm%?>ii&!)5rWrl=z?1F5>9cR&v549Q4pD58cH5TyVDJQfxa(yK$p4eHrJHz;q1c
z$0zOi;`{n_XsN-CKp)HSX!3wk<6$YGk*?b?ls`A4Gxjz<nj8Z=m>-jXJ@yOv*sVTg
zrNoI_73N1%_)h$uF)=RdfKgEp+G^gB);5G9t@%0di&Q-YDbwB*@P?%qz0Ve~=RUK4
z$o~sC41X@9wM(NsQ_0U#O$TprRkTMbR!E`MQXqXwlqF`S!WMs&-_e@#4l0w#m!2On
zu!Ow-3Pi?OvW!2|{lY$}$w4i!UZ>v7JSAiu(BX7#kSCnRkBe&208i!5i3^R`f!_vd
zl=KPeH>;_H2+h=FOnV8p3x91TMQyU#NZyjv8;$%sXQ*{1G%p+T+(o(5AWnSt3i#7<
z{?JH$?TFbKRd7_jhM4JryQq&%yKkQ}85vSMBpKHR!tOfTZ(ce8IsXo&s&lBdq+<Nr
z{Sje8^L{z2a%&;lxePCT0;WMT=|GHp8!4IVv<brV5{apwD$c7g(xuc8_YJxEcstz_
zL6&suBS-EQuKN5_je;X#W!y6{QpLbe3jc2BG3=4U(zN<FJ7lD(FBWF}JHm;A)oj9^
z0(svYIu@c~Wt7u&jDLm-rDIH278RB@9tZdT&+ga`^Sj+Oizj^DTs>0IPuh{vq>iM$
zHx6b74x+F&joQtCYbYs&XZkYgdekaxbKzZZim7db&$X1Bwz1={(Vns>1d=tBNAd_W
zR0YTC17**dO52g!*{{>?x>9<XTEh&Ecbj!KA=^9iRBAWDdgurF%uz^E%+?-xb=)_P
znE1$PbMfgcDn61)-#Oo)C!ajRg$|e_^@1#w-^gQMxJuOV{j`a3rP0sW`beVpEsz-c
z?)xmqlgZM+EahMATZbP5$GLoZbiwCF3UHy#k(ihVskG~vfdlI&^R_yp-)Sz$OA{-$
z$M3?Yr*J}%V11QOOl4sus{5Ly6M7af&CDl=RXY42u4)mLSeH|S3Yo<Yyw(fd`D*`}
z4uDLN7Bs)B(Cwtt)Y`(UVALwA!DBLrSz@UdjEiY8S=OpF{%39K(OSga^_RD&2f7{=
zd_%uPxZ)rWNs_!hk3v7_t%qDH-7}V4kKT5Z9mTCxgC(UJ2zN5ut|^g|N9|ifDdgNi
z2u?yy*30*&uh)ZhIeD%5Q+wPS?|~)dK@OITu&iPF<$2WsBnib&zE|29#PE%YO3W#>
zWldAe{s3kcp+V@dZPs&jU*U-z>=zPbTlQ1M{KE5Yfj$N8>u=zDZx!yF8=wOJ7^q|;
z#@UX!hL0Ld6Jwg#Sj};JuaYeF!)oFrW#a2Uyqlb#fJipWT_0oE%P==v5G{Elr%uWY
z4ou~5Y##vcWakC<*8OdM%3{q}bDc`WCG~+r&T8`hPS9Wh^9YFVrIT&=LtDog!5?G8
zWY%{1x`ZO@BJErHgc1}r+NJs@M}Y(gK<<v7y29b?GX4_N7s-s`oaaBx_L{a3uu4o&
z`{uW;y|fulp;9ca-<25A7_lu=f!N<@m{kR0sePEgcamf3iT`~uFV1fYceT8P>JhR=
zH}+<CG#dS07=*vZv>N(C!;VFG9-0*9#RPdk&oZwYO&EKROK;*$4`^~;NJdxq7sjBx
zF>ROmm4@hd)J&&@`&bq7o$8BY9cCXFF+LmeUK^VQ;YH%pz@4zJf`CU-!KQbu;Ig_Q
zMD(Db2IHvdeqN#vtP{D+2RAPY2!Vi%^TD16BC^@zAOGERC>6J#3Sh=u5|#*k;q9CZ
zih)QbXqBeDa0SHXrG&-5Y>o*o8He58ap9K$h1M0=I(tMYVREoheweCsxs_yu&pd}3
zS9mgYTy~VMVK@eu5>rK77m_W}mmYuionwdt*F=E*y%v_Z2W2eE(em=z;!PDjYqGSW
z!tV<NJ7S!}Dvc;JFYx-aqs;cmtpO|xy>-;?#9J)16CdCg7JcCIkUIqpg!hZ+(8+bX
zWA?1GRX*e^X6-~I_*Y8@WX)&%w{-#C0nH&`cBsAo_T~#OD9)P+%dib;pqJ~FaoK-d
zyjz^fLx81gL_>Qy^~+CUBj!59>o{H=ZrP2w@O-t;C!ciMuuv^H`Yif*&i5VX5FQ44
zxqfYWVT4lAx<3(6`Qt>kdcwkHRJt%?R;1fdKQY8(yyMdNwvhLq;Owgdoj%Vi03F%a
zYRvB}^zTZ1&KWt#7if~oMO5FE)mNErk(rC73>jY0yxS4xxlJ^-m5Wt0RZYMg_{Rtz
zdaZW~pP^U0F!$QZ{qogeit_j55F}%HXTEmyK!ek-MAamD#y{mu?&u@Cej<r#tI7Ex
z2`VX@RDQ&R4zXt8Wvz3t!STq)G;~^RL@en#oWw~i6v!xosCj!fl7CVV$lksO7JYif
zyu{!sMfp|Hg55LT-aY&l@y}<Insf`laMr)BU&n(AQGnJtTMB>Q*>`?UCfs;S>dNN~
zlV`yWP?oEd?#Aa50pbR>SKqC7?<q^awHyM>f*EJTXpx`WOSGOUzwk>KZ2OL(M&kVm
z^C9n&Ty=`xVnLNZx3d0&Oq{Y!ybcX~k|yv6uQ-Cb^kM6ur&O$*Y}<f##-DKV+9-)!
zp5eTZReDH6(NCW0*|?a%i;kQ74VMyiZQ-QpL9j(*2H*$WMS7x5A9ud#L%6}MOIwEc
z&zrk?=+FsT7GQH5#4os$)DQMp<AaBstuY65!La;5#dZHRiT_x(!}xG}iBh4`cFUM`
z6pA=8N%?0A*WtUXlflq!(9^w}U8bB`@`xMZA?3P9OmVZAKjrHUDPWR<f8tB}+$$NB
z*sEl87WHPR^JGdw%-%jShPK#d&LsCYJr*O$>_Z)Wk){&3T=aX#m|`hfW8i>!G;6H*
z>S12<xpCBke6`Xqju!R|_7~eMwexQPYL_`gauoflq<Ca}y<Na>dx@G@*!!+{ri5(2
z``rJKA%~1M(R)Yq_Szw2etS>+<T$4VCwwIaRmd_w2;P0xicWA*Da@%?SwwkKg_wcY
z3K$-bFkDVOGSjy$OD*@Id4F6=rEe4aEd>(Xoz|2sVJ#J_g7Ag<N4qgn=Lx{lIWFyM
zHSt+@Nzo2#D$})mU_XoBdW>h`&Na{_vMASn`xfQ+g=g>?G+jn3-_H+n@Mn16hc$mz
z$nv*HW|;hF3Sd55AfU$K%C3@zdLk@0^qY6EWg}N-2Zl*LPGizp+v9oT`;75iz5FRJ
z;?SwFEZ?xf_qN(Uh4Hlgk~uBZxxI&#6Pb<UV**#X_Mdi@EN0FG!5GTmvsn4h`+mQL
z>-#5$*by5gC2$SL^TKnu6zt^pD$t80FaC@o?mj}ZUzpe?9vnV+4F~JVGy3k?q)&*J
zG7(J30e-v4R8z&d%_JS*K?<V&A9fl{)B^a-3X4FZqqrdaaq>6!*7myBUw{1|%Al|!
z`6mRmX4FlgrN{i`$L9;uh&DRg!<`L9AU^PRZs{VOCpyra^B>${Y|J<{(W0h}0KmtM
z_dTzDE7yR&NA{y`^X*`KrF~;Im11}ME_K$#OZ$u$79LoU)g=5k8fj3W&Mx|MRV;E2
zw(p>3Y)vL_B9sa4PjH;|3<bUmmsnc3Y$n3v1%K|uswR$qx=`_-AnqRcl9_w!mUvV=
z{ONE2DKW%$GeL48#cq6O;Uibei=56;FhW-H<9Dyb605}p^8HW@+GXEc&bpkc$4i4`
zv5~^PaCcTMc8iTc_k|)4j1M|TN<BpVAbEy2Ym|MRgm%}V06SmU1XxT-kT@(^jX~kB
z{l6H1bK+JTG1ch1z<wX|I(6e`p6Zf9U%7Oc(DRtdK<}?)a-xGdE@DExkn=L3KbI{B
zA2K6zcdR%1g@TYuL9A`-aL(u2fgzkX!1+N|BO7(jQ*YZ*ghwp%^haI!g)Qd5FFQ}(
zOomXPnP&tl=!&gV!QI}#0-nD1g|tuS8dO72(zl0rFLZdc3I52;)dt2#F4`=@(BI+w
z-0dFJz5X`m1s7}q-H?*#z1iWXzuo@UiqTI6AqLTV`l$YCK$5yiIi=W%y!~xxvGCqG
zKl+r*9^uZKVsFRBBBF#F?Y+-W3~1qmT{cBM4g!bTlo%}&%c!XxKXBVe-P?CPe)(Vw
zMMK?r(e*7l_{>^N;H3dI?}qSaef9Guo*({BN0hqN)ryJnQ(tXlQvO;-->4HO2d%>-
zCQEday^uxR^i?hWo6;`4(6Y<Q4t7uJ8$yv4;ln6B($IAtpr%h}IYo=5R3q2XkU}i=
z3t=Q)o504VZ@~CDouN((^UhLMMD(DWb)@x(_ROP}Lfb|UInP!p(5KfW!1K0-Htgqa
zUwXC3VMHb7MJYWpfkoF$9P}N+qZ7ZR_Z)Rh`=$EUXJVWj=!i)ZFGEgVCnlvJ@*9Yr
z^ZHkWT5AxMw0S4|;TJ(ePsL5nd}vWZ(Bmy&r|yzI%~uDa!A{}!J;xCHX~Bk{I5RZM
z4QaK#1>PtCmS+PQY)W!3==M<)j^5xge5=W{V8o|<bospHv;IgDb#V|2-*ho;h2cm4
zv;>O70itW(;i&1P3;tVZC7H=;FH)T9a*R@Mx7`OFbHJ*gWU6)y1opvNyq#B;r-{=u
ztL2T}C%Nz{P*okLTU{mj7&zb`hdBMfnmBPv4D|}{DJOlU!%PmV=vQKP=!jb~aPyFK
zcWmP2+2d7-{g?Bt<ypg)Ts(Rys_1#&#tv-3S{|XE>}Joz!IK)IggZU`x0}glNnGRZ
zz(DNI9(WBP!WYYU?n;q21zr2*QrH&s#0?YCGkEu(kN~;q0rsH8cqkRvhr8l{7~1rv
zgeK0Sf205}8qWUh$28%{JhLnO97t(k%05<%z+l!4yI1<Pgx~U{vO{z~VZxhlB=0s5
z(vJx^L50WA$<fANnnZPqcGR}wYO33arSI;;9+qWqp8Yl&D!jc*+{DWI-Kt&`ZrAiK
zY2Ndx*y{c5Kt!EpgVlD=F2aMY!VE~Yzw;fHxK&q5ps9^x!iSn@)b&lO!QPeXX=HD&
zny4BQeY_5BRn<R#GMm2$1M<L@?rGXij6xsuzgSIugz0M91M$EOTXz)WWzSf<k$84;
zwmasa^Ova2&r)`_dc~K#2h8E%5vL#AS`yfg<R@DF*{_rTH^@AyZ~QLUfh+wWPi5Pb
z4q;P!*>YqT9Ja&7k)xmiOX7~*gZc7T)?(<Eh%(Io^s60La-Le$vCLO8Xeic~`0)6B
z*Fq`hj0THRdAzR~$>Z4Nt?}Wu-<^yFn|Od^qba>bUz`VENAjfIM#AP%qB?9Foq5bb
z4<q7BMjH~li<E0#*P%~*(>?R7ka~T<LtIUzB6W=N9T~eSZAflFb{FU8;rtmr``DCa
zHZJmh64&+(ZYsDR4T?Fp=+vAk4+dXkWVa$-mR%Wzyh%>vIW)u$Ya9m$FKu)Oe#lW&
zyrfQyjcsJ9w8lo?L%aB#LSDma9>r5f!D}?|CHu+4Ab)f(@_OWl2O~~#n`R>o>~=K(
z3OU0&W|3S)9Ox5t$`c3iAfQ1FztLCCbR8dneW|l@qhwA}ezs9@vVGI{Tu?fgMiUoO
z9ENRC`+Zuia-0}_lX8EzK}VN!U@xpBN~`L&_tn{Q>GEorr~N$ltb&qXThcWdG$%?E
zY%uAj>Kr?hEf&!Dr{bJ|)VrLxZ4TG?w7}{jqxrC{4r#U|X>BFi6!qqpLf$(W+M>*e
zgBKMZI>W1%vbDKxja6yU&)?hUz1(Vk3b5?A7wj*ShrxQ{*HA;H9bd~7kJ9y&yW5ov
z7Z7Buy;*bUx5;$og0tUbocHA13TMk9_UKUjYKo*<jfL9)41fgYjyl983v$*o)fSmi
zbBg;oGn}+sZI4*fIeo%Id0rkOUm6QG?~lrn*Tcqsm3x`_KyXuzK(y!4gVJ{BIF67_
z6Sl&fMzeMYQhBPaNq&XfJ`A9D)4=hVNK2=liDk%1Rg1Nn<v^K_XU8ek5P$+Gx1HM-
z1Hb#6o}Sk0w&TJ<mEm%ijoA*(4%VslXj>8Km*Z^<$Op%xc}M9U!m-<4lgY%r`hER6
zj@>p!z@L31kt@yDJj+MW6tEt`ZqejKlV3Fe#Mrd{>_XP}<SYVyE4F}JWc-!0w7Jqb
zJz^U}@$#JPLK1i_X|&?>RB4T6=B~08i;I;pHRuP!`OaBKa!jG(1gpM;4a50K_<ukm
zuc58}|KnoFm0&ZbHU8-gXbs<9cJ}5+y@>+Q`r8UU!g?I)Rn)R}zWQJ#{_6GRo2P+X
z`tZ7CD4l@@0$OChy`s2O3Bc@?+U7(!rF==SL``6eKhrU-_NOE6)+TN~(^bz;8*5ka
zltDx}#)o{k5|_RaEJ8JYb`kpEoK=@<aB)i#Xls~~ip5nj+J0M`U{Jx{J92Rr39wQ?
zlfoEh+C(vARU%9)xY(R;#waN0xaO-^evJ&TR+8>HO;yd9a+k%<kT}WFrm1p`%DkRM
zXxTP{aMEM8uDUX+UW)a6&u+M@<+7X-;<Cw-AF&4>$;Ju>J7$QnXRKwK(H?HaSv8Y#
z?`smgUVObSZn%q&USQdTcLIF>w)Is7_S`s~blSEgA8($Rew!*+sk3f*G-E(b-P%TF
zz(i&;E~^>s$C_CC1oQiKrnR8By08%4@-Cdl!rZ#v?9+E4UH396Gdpr_H@0<EYcU)S
zjX&lUlANoGEm4vah%3#pp;-kE-t@UKZ!{HdVePjnQZ6$ldyV#EdoY=1c{3A37~P<X
z<m(&G<n<%bR{M_^X?quPT+x?p0W{%xY0?+J5PqrFZTWZd1<l@pr9{gv&H(*VWa2^Z
z$&r^9R)H{vz<9|eX`EZ}&d2+_b-Glkzi#PwaWk9>N^7$7L%akO8IA{+{_Tnl(rM=1
zflr3AXs)N-?nQGWBMtH8fYN(mF=tziRCI7e$LO2&$X4i6%jSCB6$+}7N~y+m2)5#?
zf#^;nP+2&C$i|MwZ$5$1i>J&S_37!0&ZL#Vsf}S2OW-O7|Hf#bIS<{N(%Ykc5Xz##
z5f*@QE_=&(AHTyw$4>~ZAIt)}U=%QZ$yJ`@k_-G@>a1;8!MT(_q1G{^gUPw_pLPTJ
zLL)a$GLWg4^chsFg6AYyWF<uJmQsH0^Ofr_@1^SYZIe+Qcf!96V_F1)bJOsHL}s?h
z`)0xZOqW*<SoybXBoq>Aa?G<oDOFv$ehCg=aZ^T%P-@0t8trZEm6k=M(7$xt<RFYS
z=P<K*|6E@y5m+q!p#L0X+4%MOUS2#dFE^X#5N-;{Zz&`jb`Sd;?Ebu^15BLMlyBb$
z;z@=_$X=`?&2P3J!kD@Qw%;uOWJ&TLO|9Em6Nmzme3r>N(;-ILje>u-eldhhsnjrs
zgDwZ`<RSK;G6r{;L*?Coir$p`_wx*cpz@(P(OmWSvOBfl4c@<#;Xg%2;y76=k~Pks
zO^QqMXVQvK+yAn$=ORh}!ATK{Rs9?{iyS*^o-;h_j44%94T$MP<VnQ{>H9Dkx;Dg?
zfhAMw=@`8ITPG@V5oGevGtcT>ukOPTObUsn9}BfoebqMqt-O*~Z_?yP6%LW@ye<&u
zaH-!9cP}?r`&fAC{olm<yYrAuop*d9w@a%}JLm0mnM3tC(ul@1YWx*~ehxe+GH)k=
z9b_0tdIbMPNjlMIezL4ToVoXJN_t#cwvl3hm>_3*^T850tI0SsIxt|>#ofv?xFopk
zad|`0o_sVHAN=}K(?3TM6@_PHxQ#GLZJubP81G?mC>h`>obsOAGNAlCxQ`^M59x7{
z`bXu$HNAO=c=ib#z7b*VZhld%qy3`tsrs~p(4bQpUUmXB;Gnk(;DtohkN{5L=ubg*
zH5@;H8@BsgI3t1Y{Q=mYs9yeHg3o~<IuDIk+#l0$I8t?W&Axx*YQFqht=9IB`VJ6y
z8WwK_awsXWcu5mSQ$d%@#Mqf5$=scHpUC^NR}jE~v?jnBc}m!(N}?eA_aAGh_W3)|
zOYQTK!J+Y%eMfS<Ti7Xj?>Xy)fhfHyvpz{na8Fgi|Lbkf(&1ub699aQ;}j!-5pooQ
zy>ke?tnr8heKcs%g9Rv_Rd;k*8;xs(qGaP)16xx@4K%)Gd~PaVwg>*%!#ZXSeNu{)
zY&MCN{#4;L;KHg<R`yr?FWu{()!dzexQ*VxD2XiLr5xnpnr8P^fB<*fw}i_q>56PE
zQ3TVdq(k@Ir8VBG%gv_*By?HAyd*ldN%g1B{I%*=`j{Pe;|q7GY~1DrlK!T-LFL@l
zVM#=CoCo<!uvBu?j=1+}X>Je5p@tMU*|4DSHV_)u1{*Ukdc{qsCuH}osF8}vzW#y?
z82XJ7%=kBe?b&kH@D6#LLbO?k5g@Al1}Dsm_^ux)rwwZ;zZ)3FoZ2HAQTO5IM6{Bj
z1Zvwn)2;DQlZ!AKf9yw2>o5c#!Tja#m%GB(rhr2zH_ejDtz__@CkQSTay{>pt=re8
z@%?$!J1Q&&MS9uap0!g#g>0-G5J@ji4;>k^x<#v{-{l866jJq<CDt!rU_oi!X+~Q}
zL!;KjhL(t_y}6lDsMa4}_pp8(42%@NCq3&s%MH>D!}h5Pi4ahERxBx|9-F!Ttxub{
zkior-F8zqDjnmM%K5Yu^!FoE`Z+|Ne@+LDWjNErybYnAC`zE%sCfQ%`;03k*c)LS}
z_rd9EaU&yTVp8Uk?ioX_y(-ziSr>dwyr-288}vF(mseclf3$8uT`5KFyX0Qz^lbFS
z(UVX>NlNrtz;cJAh1b#IjKt#F1P1EYm6f*|cEqCX%%PTtZbYzQsrgHI$VuMFlRtRk
zd!=}M<bN!T{I8XppdSRCq!cck<5$=-Z`J<AU`^@vcStk(@)x$LA|AH2Kh{3FHz#ru
z{cSCO@)#H3r^WjpRDD-J!ES&k2kI53s?|{7{N3;KQ?HWji@oxAS0s$8^MBH5mv%Aw
zYr%y4{g_j2{NMb>0QRrpV*pr!gck3o={b4<*_yH^vlkvDn7l7u$Uo`LFhcwwV`UB(
z>eWgGYQI+CvF)y-_Is=4<8Z9c(vA4a?Z=Gd{TuKE8HPA!6}Z%}H$x<yP53<ES7>Sr
zeZMVIBeDHj&$+KNU0VKoL@y^!qy6B0=34SMc=JP^;RW;CJ3CAuG`ofavo`0LU#bY$
z2C)~vt%sWKv)N|4t?G9*!}-|a<VNC`D0R|%-==hke4A(;GCN*z?R^$GwY--PKen!C
z(18~64N)?(y=~jRm8{0%GERLF4SN=HZxMcM;w+l*t)@a4S+xsJOn(Ew|Fkm9fS)w1
z*pgWx&y6z_$6-Iu<)n7UB}T`d+U@v@8w;D9RN2`iHH)bV@MUU({Z~#_qZ7eTy&fes
z{lPY@z<_ZmNzP}*%rMgMToV(w#SudfS9KyP;?KxG8c)iH&sSY|;+5o<N0HS<D_~EU
zIg}_A7E{f2{*BkQ66zW#B$$@(34`ybtfQ4P&+OcNwHwH<N&HA;?RwPhp8kjBc_3#B
zXxnn^fHISYnNSozKB`4!DOt;HsTNnUZrbSE*IS~*o1|HK!`fJDqfT4X7aF36?Pb)o
z@6+lTKjfOmX4Y}b&l^4-2}><#j!UJ*;W8Dj6>yCoxc~AH5A7>h`!f-{$9o&#1WIh2
z?nL1@Mn9MO&|gm0MiQ|{WLq1-8hOUc_d53n2Oox`#y0^3Z$^}hSjL0{p)SEiCcUEu
zO^1(~RQ-9h65ZS~rqdze5GLY*ZEHip#?zJb+HK_Ky?*Z-*)Itlf{e}#W7nc<`NOwm
zWPSJD7#$JHpu!24yIn<VXLN~@XHY;6-1iGaIjW2YA6^EYfZZJsUv^+k+KjNMcr|U>
zDZ{*yj6Q(_c6Mxx2;cBPfFE85ORnDjZryLS*2e0b8b$mV!{NS3f_5A$IblYokt|Y_
z+VlUcIGDB2(j8_#zjYBKb}q3XM@MMX;Z4lxxh~Ly$iK2)yGOs_V)n27^%akxr3q<;
z_lp0*8vD%}{d;$8Wnx{TMpI#3l0h-zW%`Hwgc$}5HNA6@+;xIl8%+xZp>Ntd_zFto
z<jyKo49gb!l|@mw8O0a5f5`vwu(geHGT}zEn|~I44`7d^h~us7FG<aAt`K=HBz!nx
zNO6(Vw@UYCFV+M4(Z@C3<{}5d284fM@C3XIXRZ5*NZhtZEn*Z|kG~euDm}V+J%2>E
zG(qs6aGOOVy-mrR+a2T32^%P@>YFb7XsTg^1%!d_2KT!qFx6Tp(n&HIW(NbC39r@2
z;_xH{8i$}lD5Sc(42)=B2ig0<UBDksJ1w4LYw_JifJ&!M$a3E<)kj>{d8YJGDwr=R
zdy?ix6H^Ej!n_i>n6&g3{?P&GilLhxZR`e;69p6UiX04l{@z<GeS0G9XRLm-T&NNR
zSITsMrcwWu$NUe4a~M^=Bf)@L((lOMt^-(bT*k?Ljrf(?X;g$vz@~zMUvT#BOSUWO
zB~qd0^?dalM;6Hl@gw#Y!m)}mvOwSJl*e_+Gi`Ce!*oI@fLBGns2SHVQM^ed{tc&R
z2lIbIFt5)UBqOyl)(szRhy5Tmq$vM)i>DorTI+&_hoGg&4TPn9%p{BYQ|#>cY`)m4
zA)3MtIG0x!Qb1RN>e)p6ef&Iyu_LyVl<nJBsplnT3omS{eLPzS1}=!ME0fKH3#C@S
z%-scH|2YgzM-<P`H-C{Kf$G1;UHW$)fOkP}q$qx)=0W$CpS=>>{$L?ku(v-T?Ue;A
zJG4nXUyNX|kCsuGcU;(~S+_?)CrFDxIhyTH`Xn7M^^<?`49eqPv~3lB$Qvp|;tz|#
z?VQg6VZMbn`LNbJIs(#>m)jqM_e8Q#uQQG#zG~{EE-X-*L#c#U<9~3NV@(xY(z7r@
zo2Q@Wa^gabZM`a1{Caw9?htFAuIugq36>GoH&_-g+=+jj*v{a+Gv63$0r_L!=q!Bi
z`lyS)p!eF*JfqrIB3#P(eabd}3NSe;<i_`Cx#bTnF0j!E^Sed!FRbP{y{XBC9D7$o
znw8C{#G+D@v7NXYfhh>C^zYy=%Wx8p){^!$<5Mr9pxE6_pN~(1vwrQQMXb7p`&0X?
zKa^ERO*+ji`kvL#2eQeNDW=mSL6%e#y;rKl=kh*fcj~6X%|0!|{>Bvyrj<fwyh8Ul
zcADglW4lfNE~J~n*p;S4ktCadAKIrjeML6(JMSB(gn{u}OCJEcZ7db#L!@cO<);wI
zqJpF5v|D(OV%4RS;^@lDV&2pQ!6@Gl$fLx<9t5bTg)c1V<DZhOPHDMcM+QfEA4&Q=
z`fc2&@}fXtQFGZJv3+?s+fW9CN%W<ZWI`8&dF)F6Qq6;!-WK|XB?Iq5(EM#@5A>tz
zU?m0fA5~P&P%39SP6tBFD-NuUV(NNwVU4<=RM)W7Sfa`I5$6$WQZHec<%|>&XE|%G
zp%;QImAiXK7%f%v>Dm|{{(wZ`3{l06xKba6gNXj}OOC#b)*=kbbmpc-D5(>q#9Vyb
zYyOK_cmtE4US{{T8+&Cp&#FfsTk_hdf&VaxuSLBexK68d<&~-UTfrY<|9svmOynG3
z?R4Ng3R5~&@Zoj#Xsn`+Gr&kP=^VNBKy_sGQBg?s98V50P+@n4*2P#Y5L*#F0s)T%
zuTjngJ4FE9Qp5N5EEQ%vl#h5iGjz-Jr0$<$)GLDVMn51|@-GAMdmj{%;68a<EX>;#
z60fGedhCsjVq)jWQDLh+yBB5Jl<eD5DNQ7Eq-T1n8pD2>^|<Ez7X*071CA6apv3Qe
zdG>{fsdzZJO=2ydX&<VNi!_1~Z}`c@V9H>e4bAqms`2T+S*$KU0^1TjeNeCb{9X@&
z?@!ho(79RXlJSy#wAVV^n2h{0nOyGkZ@QjVrV6fG!9vdoxB^QCo?weg3eiGBa0)rj
zLav<5v-9ssp0@Cn4dAFmh0q`7u_;RF?vqg7n*|G#=ndn2_oyi83G?>u+lfXJg8c7w
z5MH1QZoHf8IoO&oZBNeFq3Qe|B3N7drj>QuNO4|WY29jd=hmAV%dotyH}dd;(6$c}
zuYMNvVjKwtr;mGHU_3(F|C_@?6p0zH(&A%zOTDtnufFGN{X5TP|H3t)+Spfeu9SQ#
z;IlpU5<i((Si$7GAs?lrhzWm?^Mo|5vz%ZL#E2$bj7mSTI~9EpqcBo6F%7G+zkh9)
z9U6;>HQ;gvZdGDE19NhYi#(%vH6{3)KafG~ZRObU-yJ5F-UKVFBn`Rn3lZ8dYnd0~
zh!#Jj3D!%qQGFkf3hqAJW!-P3Q;OUWwzTkk9&)<k&sW;2#a=zwqzLw0RGLQJJrmvD
zX$3GeF=Iqp(8fKNNNs!Scp^z;6PVc8AC*X!Bs#NXVD^Q&`TIq!w=0Smy(>$0xnHG2
z%|pZ`o%N=L1QvkpJAK{SFS9}mmt?v$js%7n_mOU697F3OL3HDRL49YRgDQ5)!ET(2
zT|SK|wC6pAJQbJ3yYWm<kD%}pBTqS*-{KE=IobOaCVWO7&XzV~FPpP>w|F2Ii4FjY
zOh#c63dNR${d7;oRZ*Y&9Jaxdh!D7&7btT&^irYFCNRQVbE=@clB+(tcwx8fedXf7
zTdGLqg4MrVc9ax2CF8w%gYNQ}-Wnf%nu(-Xz-9SR76C=`FTC%2s2FN%W;R(3jtP>%
zxo;Hc@LqgY?>md(K#i7v$x`LZg}o6b4JK4k$#tSh7b2#hc8H8*;(mAb@wn00e!JrW
zTTb?t&5r5od9!0^$D+(ar8;-~I9<XO^Eg!w!np=iQB$0?=D*Oq$qT2E#Ya~+1Vm@>
z6QZs?mKzM2`VI#@aS?}3xS$tr84p)T(;BPp2At&6#xx|cM3NNlqX0KIB;JTI`X%Pg
ziKL}OUsxZ;7Y7RFU5n=rHo1g>hq5fq9}VmI__h=1MBBqvDDD3_mT-LQW1twfEg-?H
z9KT+IUHu^%E*_HgMC-gzgfUDB$R#K~KNXujnj1c$3?{}9@G<=RQY<yTlLRZHguPcT
zM5|SyxOut37c)0rdFo_I<f3CaeBKU1prlP~mHN+tK<u;f6_6i~0F$7J@HdWNP`PdP
z%=FCCKat#i%yAQ49WtGEhtbRPVI-7-*7ron-yyc_FN3dAW`52uKU`lLqrY$KT-GpA
z$*m58xF510=GN9;ZYc|mXQ%YLr~P1LsQC-J;x)p>{K}dduP(@$_}ygR*;OHFpY_H@
zGA!+DJIl6sv!j3N>^cU%`iPVd1Y?Osy01U1l=%9V;<I$Mc+s5`d}=O!+;S4(tE|Uy
zHpKnxlpj0r%kSk^%+kHQKi~PDdzjgDbr-%CBsQc{R{TLbns0d(G?)a|xbC`bw2;?J
z6Ka@UGaI$DkR!}Jf&<2V)p>HQg-Q;e?|NW|s9xzmiEIr;Z#Nq}iRxr3HN*NUTeA?q
z>iV_&Hfe22G!>wHEJtXb38Ex@ks86ER`gznAq3L;b>Yrtck@?Vp6+vk&WZ=V6DqAi
z6=CQ2ADnzKT-0TMjWr^QOeerqe)_EkpCp%R*%#jZF?*EvARg(1Piu*U_3~$jsWol3
z_*iB58&kL*q>#EupbE133DgVQu6pP5zIv?vS?NBR@TTO{EN4i^O`k%&v`GJE52s_3
z+F`0gRkbvzIPf^%xv{ot@m+e6*J@;!x2+=d@T@C4jCaYycG~0C{;1(wdD>4q6#{pM
zl$GgFo}ExvEvjk8?fN6|bQUWrWnY)(q%GmB%`55J{z-panf^~oEVj$0dYRI!ii4iy
zn-vyJ<~vk@n!JtHPyMAL<eFgp+s_^wga9|>ZPbvaRBw<_gkqef>RUV!%gLWZXqUg8
z1a57~CcBHKGT=~GKk80ye;l(nFZkK#gW@eyLk~?D^)mTPGY<(<4}SjmN_yh>P5hhl
z@RPZ7ge-gN4fD~ypWp85-~enu%M+LvHG!jtrnvxf;K`3xCz};<_|p157gzON;DQ{t
zSN3c~50f<D>kdAd&+)R|2v0OYGsB!rmyMB}G+{yl;lxDTNtp}f#R;Dni^q7Q0jKM0
zABDP>tZK@%prsCouCc)?bSlC=R_U)6&fg|XO#Vr}vULi5rXZe_qC4yX`4&@u^pe7{
zDmNFONaNi=m|kn4<6(}W?GmDt^Y^qS9_4mkC;G41o4Re*`hsj}Q=-5CuQ}>B<LcBL
zJ636_zCht$PbdsIFyH%@I6IINO_metAKo3C$=mZh8w*MczjsU@413p&p7h!qQHj~l
z3XDkn<?2R><L|&{^3>^fi_@O@Z<}oEf9qd@1gF2{<hdEvtIu=kDqlPkQE1F&C8qHz
zYEz>(;S;FeEqpYV#Qgia+f_q|s)xRpALpkeTG#0gl<o&Nx`;kW;8t(akOm;0k0!J1
z!TO_gj~UqW2;Yn0{9_TyH?Xja|DXv9VNb;Sc9MJ7^wM}b8?#Zmlg9F70(a$CwPyqE
ztZW4@g<E;527dp0suT$da{1t@-hqfXNfD4=T*4EwlKYxW{;r=3v>=fjf5OIia-l4Y
zm#J@<&C{Drd%NcLp#$Nv{a)HY|5(HaPQw7A3aoapO|6nux4HvRE)JW(w(EZYqCj20
za9@mu(nJ*sS;fJ<P3B8Ad;AWFcYnU^@8T7Ox2XBxE$`#b>+V34=k!d2M90p+m?f9V
zQ_7FgpHqzV#aweB<{kYtviS<lY>nkgndyZ^E?ivX+}R~ATr4v)*<gC1&O)_8E!0F=
zkERfXjHChg4l8cI?-F?Q3Il&{wdJJ<1bP`cf9PlNmxn1dj_~Gt-^M*}JHhBgk*J=q
zH0N=7CZW94q*2v08<Jyg167=i-sZ;6a^5Oz;Z9^ZwmokO-WG6Esj?+Ywl()v;$?>l
zV1H|g3)VK^^6nd2bIs9rF!jh8;@ULiq~=%W3FLij8j;F=0z#E?Vj%*p>NalnPF%4e
z!fCi~JJr{U_)h1y{k>Y%d{X^AwJ{i1pUdqRq7&vkJc$L6^LrwFD5C-tGq8VumF0^O
zfgwrVS5W6#k>H`mER3lM-usphGBSLKGjkQ<xI)JF2z^E9i5FH=m%^b@#O#VkFbCl|
zpIlHPpXsANrx_fCiQzie+*Bv?)&}G&Xs^OzHDdDoJg1(U<@5_>&YfLgYPQZw6_yiC
zHI%pkMN^WF*3=wokt$mlp|vj7uiYyRes&4|wYts~D+%^;gTMVtb1uXFzBls&KmHN!
z`B0W;A5oloCNgpMjfN(YT6894RwCJK%B<naPMo(K-Rb0xd!{k`Ez#e}h?2Bo9(;=c
zIB=&KcpbOI+5u8^z;fC)7i`BGq$-7&5gT!xj5orGL+|48lfOr1zrb8#0oqq=I`^8|
z0S)}DmMC0X9mp91TQlht@jG;W%lTb(9up<#=Hn(~2u0^@PYs0TjWTM7oKp&*7_)>S
zKsHGz6TqIlX5W!TUYJbC5YRCCXYc1LwGt|m4UYBQ$UATUD6!6QdU}b#4+xY`U0M{x
z5CxubBuYARVyKYBOW0Zia)xE8CAeby4EPuF_~gkd>y_vqis>JXIWpGZmiI+?pR5r1
zRaWZD%*|A}aB`Wm&(3l7*;y`KtS~(vnQG0;A*|$lnxTkVUdwaTx(Xvbq<3cv9C$Y=
zy*mN_7PlR_0bg41ul_0>qib0PxR!%^-p_S+=O`~k%$$R`s)!oxj=4s(ckZq>;M0cp
zu4rZ}{@nr~Eu3qs>R3(QN&{^bz=+5x+6|}d$OCYW>y+D?zJ89-*qyEYpe<d<67s1v
ztBjA_#-Zg)oS*wT{&2IyVxIct#Rgt;5`a_;vfy-0Z=4$7IJk>>Fd@Nd7GT=xH#Pn_
zg4Y@OXO?ubx&~ny0xaOyzHonQl=Q_ds2~@>;n6zzLk-loGe&IR4E!sTO>P>$i`QTO
zA!aHuQBuM8LetGi;v7Y?FeXunTvVQ^6l8idxC}=5T3m=ifC5oR(x50$6Nyw6E6Otg
z7iR*zrzJ~Kk<Sj1$;I>!Ck*Y2IB-{;H@~lr4ja@PHRdm@FnO}fx#t!*^Xz3VoLORO
zzRpx5q8x_Qav=@L+Ug8)bH>x2Aly|-?^eLS{&)L0cO40s9#FlE`TRXndROus*z<N)
zY6+9)o8+>-F-A%7jkw{AA<gLVZI@hU&pRs#q^`Mkgsd6X($!t9`6R9Sv-()B`j#Ch
z$8|cpvCi8l9uqNV+HxnxMAs^?k*Wn&RhA$j>o9L55r+@FjoBwp(WqWP<x^F_`Wj;6
z2#nB@RvS9t8*ZHDBsg%J<e<(fK&z#Jmc1Zt>zh)iRW30n$Vh}@V50#24jX{P1en4g
z0hIC{M~+mWPm+KF7thfB`37VtUs~bD@i*|g>p#l$a@E9A_+G|@M#m<&$#xf!%WIn8
zB#AuqOcf;gUG8IxsEM6IausZ7f{_%2AV@l~QB%Z7>1&!w+o;TCkLfaaXL4jzkz6Jr
zUrgv5P3SuivFFZ++uj}HhgCxq7AF_E^vo=09+~Fk6PG!6c9BapkEt+Axs)X`R$zVQ
zQ+l@y{*Gg=<+WEU9eAtY-#kWo6Y#GaBb$e>Loz`hE7b*__-@E;cSu@l2ZuJTvs-b!
zt?yF6x42$A9Nvykt@dtz%k}N&G*~!Q3oNG>5!}WBv_aJ_qG>{PwG_E@rMOddB2_os
zW>g6iEf^7c1&$tkCr_Nbk8DnoY3i$d+Y%(>NxL0aFK}(=9_!b)vHmGYgfLj{?|_}+
zT^6s<#SVtwI#C*DARv;!CINlU8vFu@f5<rZU<f09aO7ac*;b6$)aA(uphH$J*SLP{
z&D?za16-P4u@Z&~Oh+<XfW+QcTL)O`A1GV(SXQf8_)V6jD^s2lJ5f<2HQGfi#=f#W
z3Z+Pq{3hkgW9uz3Qi3l<Or)%uNDCg7iqHHROBBQsknv)&xjssx2?P80a`RmYx4f^3
zAJkc1Y;ft>86NqAhxz;;U*y>^&vIUpyVs}#yGiNY1^By<yArtoJ5A~BvDfM`+ezuQ
zfD{X{gpfY@-AS&$`3RYUqFHy1vN{-$O^@vq|I_0MM@=35sje>Z^p@+3PuX&OOEnC~
zUY!%<j^8fbE&oh~9tjdM-&qzV2|JPG!As%KmRCU}3pb~h*TJVART&z*f&F7|=Hkp3
z3CG&^NYZX)*20A)gxS1YkdTSoOFajU;I!O-X+n>)YuGg6wh170+qI(U3<Z<xkYn1Q
zC*%8<nElWr5F?<G3TzngzWxTILlx5|%>?bF(ol!dOyIwCagpOAZ{_-<A7XZ;V&|fK
z^GIw_5gR^j4VRuR;1M|6gK&RwMM?sZ>z-t;%W-}qB?z~7^$}%WCQ{K<P`1R-5&&g-
z7x+zUgbaj;Sydk;S%>D*J^ZTA+*t@tL-5UnTq$8-Z;7F66~}Jh&(Zf@!&^RZivQyu
zf19tY%+M_MwY8`#n$@=*&c9XOze5RNJqg$Z{HoXZt%1Mm_X0$(!E)sig}$TA&0gfO
z?+$R!8%C%uiuNd7;yT=Jt=DR?RMJ!}06L9<j^jHb&<XyQA3t5#X4R(QwAN5$LViU>
z6!(~j<+4ffP8S~_IRPmMZQHSST|p;bnD~H3)a1avH?y$#JoU<Hyn+qrFu4IVtQhXf
zgbNUj#v$iy_0dRmeFuI+hir+jmX&|q^Ju6332@Th1E~Zc`hO?|Ky!&91j0d0%CGXd
zc5j6+lMu&JZ_nNf8<lA(X5eKgU#M|t;7y!3@*(C|D$cbi?l^l-Y~F-t1e-*8wi2=s
z86iA5M*zeqXj-L-SEo&@Bw^5q|7qVuqZL{8CoN|tmn0@1`QAh_C-$C*geDb_tuw@i
zCZ)CnD=k<xs2T?>UDQlo()4{jV*k79?799J@3}j}{h#|aqI@20f+JpH@VDOemY{dv
z8*qzVdRI-PCxEvO{`KRmY$|o%Cl|ksN*d&{n#aC<j!Wko42(;Hif|Pt!**KtWlIEf
z61<bLZyV-kxv&t8#OUJ|pb1GF8~rpEi6EBmMKVb2XY<}R<1oGVqNM%atZilVbXmZG
z)Ws_a2TikTB#vHU|67Q2kHgB`avYBWM-IQ2c(H^^MCrF-urYO%gyUwFd6|Np8K;xG
z+JNchr{aFv`6mTJEBepnDVS<PjtH2z88bxzk7WK~N|?!CV|+C4tq3jRe_tWt__#z;
ziC7XCkj5>Wg3KqRKHXsdz};Mb?4v9<B%nvec!nU_9;KEz%2gXnzYsGAd`T!0f+H~x
z;@N35Y#c|NdI=(sh+(O+Y}%`tmo);4kx+UQN{toyU4CmwiLyx9_pzdGIub#xX~)Uu
zn)^;(m4>ZUT&>z-tjm#NT4m7-eSG0RlzHOC4EqO<(_EGi#<k5=Ujp#2lajZ-d7Enh
zZQXM-@L$Om-K}G-8|NmTOIV6evrvAXLO4RbKF=5b<h0=&#bFU6-9k<Ym$L;Vt<UW^
zfYjn2cW{0&02nnux77^`__eRtN(%Cu+20x%rF@_1Lnpd&P7%nfV9RIAdlh<CuQe{F
z)h`18(TS5fgMHUCG4e(#la{I&KY)O_Ai*pm8e2nLDCaTh#1_y-4DSHDaJg3UPe%>G
zmb7o~OWTcT#cB(FUvmG2z=$u-F}Ohd^I6Lo4-6)zmSLmjo4N&2Gc}qD_w;E@*BH&-
z#ED}cq7pUDeTk)2n%G9Pyq9aXGcp2<Tt^myqU|{#_e~;y#kE_h*}nqb6#NGC@;7n-
zZpuqpz{__{ZK6M=U3tABf3+FcXbK^)zsvWvhBo^O!7zW*V+lcMD3gL+tt-ka5EeC0
zKkM^f{`fMdD~m+BU<vw~mELQes|~^5W6auPc3@@wnDo^dkFn!Gpp7o3b4=$~YWsf6
zu6j(b^CpCY3Fqd%K{gyW<)f!ApW~ZfDe#^T9-zJ)kw_i=)#d;P{C3ZK+ceX0aRXor
zWRU^{@WSccj;;S&MnJL5rv?Ex&JY;GnWS}=wj4~jwd^57q_KuDi6trdt*kDqItWy%
zs<<e%C~k1*z`ZP#&yvLF2}9rX3J_-7^3Mw>#UG#g=fz5H-Q_My&<6OVMLq0=w0-{8
z(B`rTUGBfxH&`3_X9JHU`Y#ZGigcr3Pf>z&LQ@6FPecOCqXfaKPGibv&_BVo$3I4`
z8JS2%QE}3zXdRojps3OJg@DODD?(V3zcwndUXgl<5Y?^z-zsU=LBxzk=HeVgub1PB
zN?=xtu}jEH41dZ<4}r5)7&XVdZ%0YWF~quW42v$u!eo1T+7KmG^!c^_`~vfpGMQ|N
zGxI0$hqGPLvmOUq&Fb3#FB@W|(?pf#mh3<R2(|*+mjV2(H5@dE3)7sN{xTjRxxC`Z
z$6w&#hi4f%Ags$7;W|X#l;yYDW;<(t3;ad`aNORg18t&UUsgSkaUwAosUdxtV~QT^
zbXDn~V`6y}nUW&ghkXq@&X%>=gu?LzNme3|1@EH`D-YemEpq6<d#NvEh;^Q7V}T@8
z27sw8AdS^;We2)7V!{MmYEE0pa4s`v`L};92(8#}K_T4T&w7R%i@)Cx83DZ^4BEVk
zSxtYxVo5SBlPoF;hzRjBS%P{%E;-1x*M5w;`1Xy`?z<#JtM7}%W~CsxehYrT1YsWp
zeWK=A4ljKaBoZ*?>Q<cB#v2eN?U$*rl-O!RsdQj}6VHLX()~pWQ0^F3ov_uJ+&=Dm
zIgZ2~m}AH|PcwQb;B$X^fybYDkz%pH<l=ee8#DOXyj!B`Wd(ot&%3e#tleHp@UK2^
z=b2^8^d(gEv&=0$NhTO1o2l{5FF(WN^a>*rR{Uuh`CXm-mgsNjfr}MLr2wbv$Fcac
z#ZTXs3`81;rO=0w7F@=kS#-7%k1g_POMQz9U<g1}L}RPVO2-_jr=K5{rWv+BfatcV
zer?@)?iss$d#yrh%{u*s<Ln=O6DzYzD5(c1ghL_$1)QQQw<7dhEq`Yjx9^<=q{THm
z#D6p1azAVEa^4G*=p%EpVaHMe%t#oai~P%2DPXYQsyG!%-HoMcl4iNG%;H=FuQI}k
zYd=Oz-V{fb1GYqc(fy6FPzZrbW)PJ^z~66QBKiw~HQZku42}S-0_Yl5K)z3bZ1s8R
zN^JH0)i3v5i<sEYLOkRp>WO)t&dwmuyAdZ$91nTm!CAie)n~|LW1_gq3zr_GG`4S5
zuE+MlzkX!b<8;N!+9Mc~^p#Tqdg(J;jqqE2oHg&)T~IGd)+N^3Nb)h^sL%A|{p7QQ
zWV0iz)aUv9=bqu?AHR*#fXCvT6@yYkU<!U~d~!iRDUh9QAm!?*YOp#C*dDEwGjFWx
z_UQ|dY@<%+FRV$>k|wjP7#ve}VJ~X~U?DE?tU^_7`)qM*8P9;I`)NVWj3Sc_5$Igo
z|88byE)d6&;f$u9o)gnUX9Tnb{Ov2XU>luZfNr#u)u}mYyuZB$3&a%sUWe{)xxVS|
zX=?gq@(J03qOT96Ls&KTX-1)GMPw6%hq(E=A4D@utx-cMDHxV+rqZZ0gt`vG!uf^k
z4?{2{I=1aE*r+NK<}2LaWNeDc)G}ZS32}A<7g^bAm~6bg8p*CsoZsI?XSc#9v||iu
z+4Gk8FKU9^$}|T;VlSGSeb<GYI#uR({@`)&%jCmRUYvZ8W+5gk9)JxZ0=JUb(;NI7
zG0N^3Ssk8y6`F%y+1UP_f!}T-LM8;m4KB@nlY`^$A(tt#v^dG1|M_#g@0~YNttM2<
z7TCtxY<ljcBD*vEnW#ML_G@wdln6Kppso80?A=OfCGFXY8+J)r3L}fv$lx{U2&Bm`
z!q9PyH-H6g^4McvQ=3yJ>R%S7F&0Xkzb}NqqrL>qm4sTQO06E@`+JDu3rOb>si`m0
zgXra<s031DUx<LS1&GLQjG&&22M{7)vEJejHdeuXNaOnr%7yc5=V`EEz!CtIG0i{h
zSmOfBD!DxB%A+9$4&$r$DV1&jH9@6jTL!nvdb$6sd(k!wRgUv#h84L9O|IX%=xWP~
zl`=G{(3CF2LKscxwu|*}&nY$b8Uo<bqQ&Ux96Xj7$Ze4r0vCv7>XIsZ6r=W-n29#{
z(*Q}iR1yD2_JzzWRQa|09;KPgGF%vCX7O33YbO~wc8yE#?u-W9ZA$OX!QcL*u1-zB
zR}T2)jT7s$4U)n%7iPc3;qiBo&qka*bCz#ERO0U24pFO$TrR$QQ?kBo08F`krx9?K
z&c8Ybz*Wt*?>iPuD}v3{6OiM{q7=zjdWl!duskD+9EOicR~$vSBq@yoTn$6U0Y_AY
z+7hhH#w<>+urxnUwLV89S){2eR4NxJ2x^_{&-&vfOxEh;=7}16faB(_taplU8#&j`
zPE1vVR#K7M->4<VM$tZxi3boN-i^x&mkuSwR%o1}E<1|;UDqaDS90-9q@g?|ckffe
zWa<hS6-MC|G~tLMyU(gfVW5Z>G?hgm0#=n0G2Dby%bblT!%AIgPQMGZc3E83aF~V&
zn=ZvJ8q?f|G*QZH8+HvLF-AaFqQvELi05En%)>7x-1n=`u-u$sAluJ!?J{R(A7J>X
z1;6F~-j2bqt{C{Y#`$+q66~b~f3JO4jY$n&0}0j3r<t68n6aU|2!lBuee`LHr2^L+
z9A)Ob$jqwk`ZKzoHT1Q(e2WmYgM!xB4_iSlW=m^`w4#99vZYz@;trJK`-<u!l&8fO
zpxAc=>dPQ@qnSi8dm3gh#>`%*voy0vtujZWF-M}St%L>TW$=9|x>tw5M&cPaV_>uK
zY<#{0aB5Q!4x6?PPdx#v(idGia2kpr`(~|lA`IQ@umPl*f1*~13owx$hdwkCQ30SX
znU|7*+039q-~8t1eR3t=^!hV(`UT7lS2|7RE4>egAiGCX+@mOz6mbPs7BB=rIKNSK
zOyEFA9fP#CVM+wjx{D$uxTrvrjp?L;*7GpeEUw3P^rcP4vL20A4MU}k@vqRY7})D^
z-)}w3<idGM`92dHa(e2U^zS{03Nu#;{A-u}cBF<YmJS@e?BHLe7xg%A`bjMG*>R7V
zOAq6RMf!5biK1EVzyC1`h1WAOQex&p)baq>SpT-ZFX(Pd1F6WrI(yG0%Q+%oLTEa&
zu3SW+OGFZ1d63ft;sGd0lTc_bz`|)59@G>^pgIL}O}M-SGjmN=YKt_yMRXYB=^UO!
z)=8Hg6QUZRJTVvur<dxy5(Ff10CFx(#uU1++*^l2bS$?u+Dc-<n`Q#8y4{8=i#Nh?
zeo-ZIBAUDKUq@IZ=ttU-OM?(mH=22CLlGld9Ysx$XEOKtSgK#*<eA4H%2CJ;QtIoY
zIGCp}B#A@fii-_U#o`|fDsp3xAF}Gy(s|9&Wlg=Nh@~C65K-64+=Txb0wCr@Te-<Z
zeRf<=dWk~BZDgP&;wC3RB*1jRcv20?N<Ky<aJC`S<}9|k4x<NsKKCbQdHU1~6!MaT
zlH<(mpOGCY5%%?M0Dg7}{*4TN8(^gS*{@_WQ1?k(J@9XQ-nF8S^wG<YhD=R<6Mv*g
zCK#gDoZ=hb{4Vc)`#t0beU_$e0B#!CBT_)B0<^e(8~dwj1Q?>4CIPu(fi{s(z!;Fp
z2V`<0){5Tj8er65=~BW<BciTjif4V6Dn5JfP=q6pS%N}YQ&<Uzn|&q*zNw`uP=h3C
zSTRCGZ*kK}2%v6QFbeo2%20gMK4irP7m8uf+5#kb#(>%u+HG_H6fG_sA}#r41B)C1
zarOnVGl*&-=d(dZ64os4K`SYUokP@|rnD@VI*B?k-hg^iW}zkxO*OOi4Bm2)%+xT2
z{0M_XLzG6c6!&;c9Dt#{kRR~K=Abg2ureuXgl(FtMFKG8+GOsIg?B_Xrd8Y|@W~2a
zY4KDW2ql{Vy<2sukv4s1$}SqK#<fbM+aRd%g8^Up`b8di^hxr$h^!jn()|5I*(Lgi
z4|N#*R<FS;lG3{^@OSxrojqcgHh|q_^<CW--K)Nr>&`UEjQC6~e2slW?;;E`l$XzN
z|91+!;qE(4SZ;k~wZYH+vkM`$G8>nb<NoQ)Z51Ee48!w$f-t}jeX@m+OxCB_OsG~O
zlao+ek*YH*)S_jYG>E0bO|eKp57G>Z)Up9b?#8GCjf$c^Cmn&aCe}Tca^*=K6<L$M
zG6<0P_&lCoF<=+a1p-b1zas##WXl;M;GS+u01SZIm3q^1SSB$h<@`cXM2avzeoFuZ
z_^Iz-qzuW)Hv}MKjdyZ5<Bn5K3NUUn8<-$fe2uG5#&~s_{uC?85{tD(N|ikftPBt@
zdSv%oqw4%5tUT)(dM9}WVjB=q-4p_m8V{lh7-Ot`-nMXfn^+r9hWs`57mM~*iBsnR
zu>`!0$w-2O+M|rbB+q!_V8El#%<zrxJVrKKB_B*MSALw8<TOJEt~D;<)ttZk%Dl3P
zJzH4+>#%YKYyfLv-t7b%0(&>$@A|&S#ixJ7g;S71pB1K;zQg#?J%m1-zw{UnKN4`~
zO}EmhB_vUrk>3vGO}T%XqGP@@*b~5eWJ2G#<)pZ%fM1T#sKzYKl_{5(D6cF~Z7k79
zDyHL)S!`a`05_mS(#+DVNRD|1{|TSM2<*LHF?s~5OHf@_H0oI+f{Oo2N@FJt(K98<
zN%Zih$qO*)tfFEB!u=IFA95koO;n&ZS#vF0K$@bQw*Kx+{g?04N<S$9XoVPCHABRG
zNoEp(##8{7{lo?!1VC~tVr_^~O>08{BzA!yM`GEntKbu&G6lSBk)VH&aH5agejk6Y
zX32+@B{=tW&C;nFVKc^WD1umO2Z&M7H}_ovpG2?GiEnHI#*<_6FVZH6t;lsttW&OT
zuG1z4Ny@Pau`upY+I<mSV`Vw!@ZNxv7Z&-_*F}|FAs3FaP<e{k%3};4zTVml)`4HW
zg1~Rr@8(eeTPg|G+3~hJRoNWan}|CbUD&$wcC&b{Ar9`whl4SV*$d2-A7ik1BfhuH
z^Jng-n3I-X$C$j-B#xUM;7`kWTj@X^au8+-1L5vj0#`GxUaK=dJIm7Y94ob1YK<kT
z(E`n6*#+Q8O02Z*&f%*(%E;8Ra7C<5XjWtVAYy4c=HjD1;h<*ZfTD7(qC9KeUs?*C
zCLXbtMBNODk%OfcpXk5~HjB;a<p%t|H3Y_~*e^DKjE6E|vyMBuejV0r={n}Rm;vK5
z6awH>0FeT0wx4yMiHebtv}V(b(5@V@Gl*|qigXBhYDf_?V~0x%2)G~vIZ&9z%asU=
z1LQ^qC{2WnUJHHWwwTJ)Q;ONMnw8~c8Y{Etnz#TOgo#hqFOUt2<h(rjT%KGmM<x@P
zv}CzhBmIkkF}8+AE9BcXAh7_cXP{N+P;~#)JE7X$kR>W`WKYOUxx(ka^bj#K6vGjg
z8yC2|_y8k^uWyG;chyf{3E=Og8tha8=z64Xz<xPebgv(@)=-%p4yjyz2DK8C%O65{
zi+uO_FW{;7ad7Mi<rPU^ZP<{|W@KDLp)Y>xz;(ctNU}Qf3zIA?&rn{uM72IcQ!mlf
zWfCRzYJ8LNCi=O3g{JO}u}h~MCT%X@;sYdMrnaJ)I|G@=!~kZAz``-8&O_V~w^fKX
zRWM`+<HW|-MU*NT0+5knA%QXyfW)<nlp}TW(;yxJrey8467yXAjp2~3eg{sOHWGu4
zE;Q-If?tWI7OwA0j=iMxS^*(Vc@|<J<D#YwyKRWu%ryP95sb<g>%Yw*_Jn{I`^XLr
zP#De9e^ArE&qfo@J_{Egg<7pi95v9AFcdY36H%X*SdvgcEv3doLRBK?_mc|;$z=w~
zX9p-13ls|(a(R(Bq${u!`9(qyqR=vWw(7aHQ^XS+C?wBhaKvXNs_~~^ewZkpC7T(b
z7ELob{WXRT9!CX%1HXD1QhGN4|GMw2I&+1}g13WTb^`vc-){^2YRBL=w?ReZ#&eV}
zKZ{lYVWyv$X}<O3uW_pX9x|e<nk4!x`RpDB`bP*7DKR}qxqg{Sb%{!So=S6)T0D(L
z^4O&ncFuww3w8^5CvdgwFK!}feLfe7FTpHvJ*Fw0b^^`JbBfFu9JmwqT(4N3wb^Ti
znMsK(L0MDO0UN}U=z`(QB8JN$r7f3$Q|ecm8kWumAU=AVIAf<`0$t2}<i3bM-#%9(
z1sKV}cKVSNW&yX20F;{l;$^VL#=w>75<;ORqftBtb*WM$B}~N#D7Xvp!xBm)5FO%W
zGx&uPnZZ7CBN+yc!01s)^wHF3VDb?~WjUcyt&>Qqa3o>aR)7^^D$h;Yr#JNq4L!qh
zLt=x4=oJXP0kYl@h0G|q>=1?Q0EK*!TsB8Ommw=Y%UD{#CAQ*ohl>}-$)iX!HtG=+
zG=KWVhbdRikk6M$k|t9#_tQ7A4?mZ`y5Lv40Ds3?TOSFy>&76iuF|@RY(Rm!iZb27
zzd7)G9jD9hUG}vLJRv_;pgMJ$SWQr_EivBT&s%R<<aO8Xp_I!qxxB#Xg{OJy`B|Pk
zJ;m&Ng-U%9ycM$9giIzR5It7%z@2|h><88|y|x~lZRlx>grteh?w<=5k}%h(u8r}}
zThdHEp~z3b=ph)t3F<4Nk1E5NjB%=A%i$!k6wS;N1fGe`GaZYBI~y@w({Kesj3H2r
zg2v9FOp{RQRhSkHO$(s5xqsVcAiBR6-Cuy85&-$l`O1wq!59gxmEM%qk~n$~BEwuW
zcwqrgnuv-zl*<$JmB<cfDD8vMYc+ji%2aPY_Yf@4X&Tb)r`|v}1^j8il?{%PE=m$g
zY`ymx+ssurN%S(6XqIJNXQnDi#Thc*5cyy)`CyzvW|(4rh(f-ftn?Hp=E-Mm>8>=C
zI1FHDSnNABzVNm0GPiV^Y%WWzYfR64lfuXdnf}2w;O~ZmwczhDX6^eeU`1`RZ?`e+
z|F2+cu+1jA`p?Fo-75Gu7j?F<uLO)_G})nmg~=Cr+Z*1=-~8yOIC!XJa=Rrs<=TGu
z(6DgHGUb(7E-f$c#Ea8>=ewtP<e76^ye!>lB0R4_HXD-7T5#9`pzd7hUnSu8TYrrm
z#c*#s#+K<4Nx&7jSW&21n0m(g!UrZ4)$5f>f)Sg6S*)S~G{tb~qvN6p{S^)?8FofY
z_pA}HDK7_PAp%l@%-kgx<z~u*wVIN+IDzz)CKRRRz9qK6fj^}arsS3>cA8cQ*1}+o
zDK$!8%134LCP*m}18A{CW*|dhM42eap?y~ExcsDI;hd&f)5Ns|6^RaS4T~)i-PJ}=
zDl$YheXcFTzv;{<c?QDSD^!z3D$$F01bAYDnJW?cgOsxS7$_X1zc@&tRHDDsPoYpW
z_wV$%1)e_j9E-IV39}(l)MRG<0kZuexuM}#JotMa|4PRJyd2=)=q7GC6Vc>}2h^4_
zeB^yU%G+Q60lqt>`Sa6tV-S-?E^+SS-YRDDO!OaO-|!(mc(=!=-Wkz|%UoQX=gAi?
z^1x%~`0f)IdGXv7bBil@e#QidNL3;U{IS+y8*P}1{H{cY4P-HO{hb~vi7MhpuR**F
zb1!NN6N-H|!{A|95LH0bUl&5FCFouh)_T^u@1!VaA~pa~1B3u5>XHj!#CNGjVDsZm
z3G--mL(n$&cfs;00Wd_s7W*__22n54_Fz^suvcV@_L}LKj^p-nXh>Xzv<1nC-ft?E
z5cG%SM-=@>G~>sVNg}%VjArU-d+kxxnBOh%&CAtoY=u^*jSsAj-y#4eSWD_crUghu
z6%(Q>CP}%_Wg<0CBRa)$;|b2sXH7AYK5s7*ef!xz8ZbCer@XXenhTWYmdFl{uv|H7
zaxzL|2iF+<UYX!uf3B@>+bas%YeH8Q{Op|byT5_Xv3$wnJ#YPfZn^30Jbqf5a*9z)
z{M4Feq)f1ha7+<0%L_5jOl!htFm0&D2Kv}PHpE+RKE{XckqSU7T%MWbk>}5I|Kk^V
z?Ad9~oLORFrD@V+^ZAf$E-<z4Q$wHtG3|qC-lsq`rNjgTz#>dOttpH_aj#<dTBt6#
zDn72rhY%P=&WP~_^alKjj06Koe7@-K0f@$60(sKtMFF_ut_Hxaub_#MGyT1t-tQ_5
z$@n0B$swKSFM_yH3S~a7Jig3J%5_PuyeWU+1q7J_ejy+%_+*C^#RD*QjUwNtS)7OS
zk0>J1`$fu;Ac8b3(@9Zjwt}setUA<z)v8t+nkgLG)L?X_+?r9HTBAwSkotdFhWiFM
zdZ?e<uNmP@cOT~Fn}^xAKcsIo0|Wicu7rI4cb?||{^x%}xv|9f4X>jvrGQ%Jy4v7p
z7vNvLuidUjAW*jnt@_h#%-Z90-*+u&*WZAxfPeLQ%@R=|m5VvvcF%{n?!?<Td%kJv
z%gdUQ#cH#-+U_w)tP$5*#`w7vQdFo`hI8cz^}I$5&7;KvhenIM^Y)|sz&m3iZ<#aG
zQ#|<8W$u6IGLJqs&xMP1n$3Q)**;^T4l*Gs4W%>Us;z5pE8I%RD@c@YZC-QXDL6U+
z!}}Dq>tMENYaEJIUkI19I1>+;iTo4ny4ZKI0ff#KC>4X!@?-|+l1AInEF~>LXfP*<
zK+bq5NH>N+lTK`da74YZCISh}ajU^q#}Ns_7W1^#kWBFmY2uL!2}>S+zoNJYhK^|Z
zMx?$ToPG!zGos!oV?!{-6jsM(w<;&MW3M|JIkYMP+j7296w#<RsMYH<qlAnXGTuMR
zb;m}z<Aw?Dx?>MFT|dadeOdg843s2+p$-+F#!8lGHbZ~5z^8ulZM^lvH}Ow?_&0g%
z%q;8~+?XY8E1!QOM!9-i&$ZtZ{2O3%cLYEvpfj5682svG0>6l?0kw;HUVq!Wx%tMo
zb9veXzPd78&H<cK)zn=q1te<9>gBE_w&_lrx2dmH4=&U-moI4ib1{VgCQ3z)>^;sW
z-f)~Bdry<4c!_7vP4n%Crg`9@d7gcCiRsx4S`Cvgjv5`*4+7hP*mdWXIZ4@YDw@iq
zV)6ye!8>8>xT3kFD4S|D7PtZ&(+yj)2qXItC8u3<b;+cQ#Wo?*j2zcx#+g7k0ey-i
z=b|@UR>r&LA8GYpV*?Q2o31<7@}JrYEn!Vj==uscsX!|4NDz|bKV<q9nGqN`q!`+7
z3C4vdVEK&LU9167jFUzpieuxlTNR4w43;JeQep~?@y}*jO4a0gqi(<-5;IaPaQ!t0
zx$B0#+;hu*Zn%Dsy$3=mO8_}ZSBzmPp>jsim<^~;6=|&G(P7?7DuE{ZOr8C&+r$6$
zg`eObeCRXWe|iQrYUBNFk=f1#wtk(za=@Pk0`0mpkmywHCW)^O@Vf{oFGKZGfje$|
zC%4@4KBlH@D6Q=nWFx~&^&1)N!bEL&xV>Uom^OP&(Gba?EDbO<nXDq4SA;o<hqtM)
zQVjO&$%N7=&0xl3|L_pk>>1(ik6s6#sxiGV&m+%GasPv}Jo4~qUOYF;a(#@jI6-lE
z&=m79#y9~%MH81{;es;ufU%=6bd5)|l1QSRjd_=3K&8lu-`*6nXm`gE!=w-_(f_3w
zhRM2faWJ;}Nm|0t1_VeVkz^{GtiiP0SI}t(XsZCm{nyd(M2LjkN0Cg7G~w(4e%>Q9
zsL4Cgf8>ZJUsOz=QOrM=plhBX0EQ5o+#UhG{UAEMt=eE+lA^N2Q9?70sMeQ>>I;VG
z?&;5P;@W-Ob^U%`che}>AIUK`9)i?b5Iabm&@4w(E@r4L7pN?hs4q)pqQI6O&nYqk
zikuW7DcTA^bse(!M8v>}96$fNALnns@4xWOOoe2)xLTsV>iPV;=loma|J(8cyn4Vd
zAg*4@aKqs@apxT$V0Ky(erz52R#c3{mv<5Ycchkk%<1fgLyI127OXPGDI~XFV(_JF
zk5sOa<R9_LFDb=J0#mc_<g{i$C5+`V>>Zup-Nz<)@9U)9b(vF>3q17H65oDclBb`}
zFnwW^W`2asL_ftraW$HLSj?S{DGfkrEMeu4O^y+e3ndVJ-$edN=Nkh~+Xy4*2+%QA
zxJ)fRt38{6wy$|hGB9Ab=6zd7AgzOM!grOiGo<>z3!-b;5Yk{GOL5&x#^fP81o;Wg
z;1NY>NU^*Km!8o?D^l1~qJ^vumY5o9brXvr8Hr-)mpY2IN}bxuEGoW0e_w+`g#tGn
zALPz!k8t}<d%5Otk-;GaeUkDg5lD(g*<<;9$kI%X@=~6aTAoG{l1M;O&Lfn%10|Oy
zpcR!W#EYUH+501*&c&inZ8~D&mMs7LH$TST`S54CxYD35t&d$;bGLP_b_xFV-?1yP
ze|7H8m97Z14e;|4iv6j{wmwtf=)@ho{?6}XYSPw=6PKIK`*wS|!kN-U(r`NG=QhT+
zw641em~os^a3g^vqKiw^pt$d<Qr^qj3v9y-Y<D7w$(Kq$o?^ZMXD?~;mtfEj7%L95
zXU`Bn^v;+c`oTJjOA9>x)DjPTdya=5g^Oo~sg_5mdnMw*kP8=K;+lm1{hDY=3T-Hq
z7$ywIxBc%dKy9?15Hu0#B{f)T+)41eNC`%|5%FI*wP2>R<a-KU$JH$nkYic<g6XEy
z3K_8N#pJIM$(@J5+62t$h%?&MKkPpQ#ZjwnPd@L_Tu6wk35lpW4RPPeHF(q`MQv$?
z#_}XyG{;bXjhk-{x%HMIZoB;mH{Y?B@nRo+=QPYM!${TC>aNTx$|rLymh&vt3zRD%
zmAX$O@l7UVC`DIF_SuQVQ(e(S^Wt(8W{?((wO$TUokVh~mo-)2qc$CK=v~A7^WXXi
zfBS>?F)iuKc`>eZ1Lfub-cd^LjyZq3;LBA@2fiBl{5^ra!M?4{mAQ`RO6)D(!aZ;J
zVdfS*>J1SqQ`eHaEv|I8xUh_5978B&q9p*v9a%B~ZJj)4flobXX<-d#xHiQtq;`DG
zab+oKos%$KMVtpIlh+Is6{T6!K9dzVc?$YYd5jf9#wYT;;pixDxJMe-RXKB}#$yj%
z;-Lo{JoiTd<pV<m?;K&|?i{1HL-iS$Uy4l;4q3Q1&DUnMnO+F8@I{Z8)B%%8lcqbR
zM!;6jZx;&e5@lRPptO*v9J57SOm!U>%b2SDX^u@=hFtEWCp7_pKFAlLG$G?PGpAr>
zI>FZ-f#(@RVP(ESb#@-FI!S*x#dU|P+<AK+cfbBHH{LqVfrEokNXu+X)y^i({T|H=
zSx)|TgN4O_N))hM4@~&61S6T+1qDlp;-;on(de>xcx=5#xqegn%h(fagoYS7O&o)m
zyM##u5?(E)uYhxZt~vIBQGV_}et`e_6TeS<aKNa8mP2?~IG>+gfWON~bwvY#R!{0`
z=JT&T=2p^>Q}F9@KZD^B-t?wVvb>a~E}a}qfsVFO$r_cNQ70|sBT}`iBx}QJUFRTI
zXWqD&(juV3IZT-;TQ#=TZcAd}g&;&)a7<0&3dEZr#Gqg+|48tTh^vx<T1^y7RmG)q
z9;LGZ1AfBbc$UM5HHSZ*@R1*0Vd26eC%-$x(+^E@=9@nCql46kM@aUUj75FWgB5Aj
z?c9W>H=b+eA>h|y*vnYgrp=qTNibHrardqz+jo=|7pchf4zz#M+WM|wv3;M`(RT#H
z=>O7zSEPnP=<oB%4J($XG%IsZo@}uE`~u$G0{v=<Ye(wb_<E1m-#x%hx8B0O14B?S
z%??awj<_0;Ojm84KZ%BvI0j!)IGQ23E##5kkRq!Zq$Yt#9THC=wNlEiDNAZ!FloE4
zPoUF+q#vLm;GP?kW(JxPQMPD^cx5HB@X{aFx&7mZ_#ghS_wrAF`p?K+H$*Km9VNRn
zs-9Tc#`@nj_&W@c>#%Z#Z2(t2pMTX6HxRAXfIq3^$km2<(_4R-X0@McMXJ<^4?gAH
zt{iyE;ad?NZZ4MXn^sZc6BqHfU2e8zCv*Ui)KUw4<Eauim@6@6xR2=G(t*a4vfzsP
zvZf*Gfz%-oBcc$5tSwF|+-pT?7PQCZiyozmn*OY&Z_sD(NFR57AmOg>uhN`eVd}{W
zFFZKK6SF?qXqd*EM(}U!GvdBLCmY2?!okG7=4$tgVckX^+C29(i`7)UNu40A%E0M+
z8}e&y3oi06ExYD!OI9he#_I1(#2JsmphscCmC#;paQ=ZB7r(wt?(!1HGt1m~E!=fy
zKeya|l)VQ_P;?w#09%iUXGNTHo`G1Z@A%d=Ddowe6O!DoO9?mM1}7hZ^DkPd#nd1)
zH56R=vkqxRc1kM%J10V`R$`LYD0Jn&#RegQK-0upxcUix7WI2I-uojrbMYUS`Gx=G
z>*TH*Glt2Y>;EMN|N4D5z{`$p02}rn+w8*DPiV{FZ;3M9_Owq=)eHE`gS_cYKaAGn
zEG<_Jm6x>M_UO*qerdL}{ocG6Jy|$|5CJi^rJ}TnDeJHuxG5O=;e6<}wxlagDaUbW
z5y_)2x$@0aO>phBGf*gMaz$mqD-nFIE6s|hSd109d7t8<rvIs!z9FB|@e=#r1^Yi-
z=ib>GQ;*DZ=Cj}B(l5iMYxgkrro9wyEt#_8l^igepc-OWvzC5aCfkPVrEb8qc6>?z
zjC#{)2XGyPjUbseG!?Ic*}<pSXYB`KlBg^+xo~!wliyh4*(b}405|W;aO*qs+<3zT
z`wt$)^beDB*AfGuWKIeMf+tA?#;)MouEJu}3vJ}T)EAIop}OnMw>a-nD8aGY;fV*O
zE@E4smr!S!Y?`lND+O6QPMZ2}p18RdS6A4nf~IbxNPa0XFiBK4+H$Uz!@sY_kN?Qs
zTsk?&XMXo7atB9UMIbq%_p*Y&yOeyTYye#`-wlvGCfx<V+XH|1^V%`e`Z-T?uE5*w
z`5_9qYnYu|vEaAWAe_<Pj!kb#+sG%$Jhp1AQ3=fAc10$o`>d7_VHbqcA^sW(AnhdU
zVpP&xb7OCC-UE9sdtQ?zCoQQZrzesMH`<gcmm(KpM9kzNCpGq@)}FM&@+9vN%5gw(
z7Wx(v`ksu*^@n5*Wf*_UAmi`eOLS?G*+<G;{PNSx|A9w!qCn%;QNn9S$c+ai%TS+-
z@nYMHAZ=QbrYN_h7)Jzb0FWyWZW^XoP8s^XQ90yV#2pzeHko>Ck-6`dSvgx}#1FW3
zB;a-X1OCQO?cvyoJ}A0qBNOf%k<3Uj6S2HnkzUMz7Vx&pi0I<tu9p^Im8xc0RH>S@
z9dkYWq%nwuH!s5Yn4&ZcGZ(aVqngKTiMgrlWGeln58Pd2DghX2$W?T18AmPnjfUrn
zkBS5!RgT1tGQF51{DV6G{Xcvs7tby8t?ypO-`k%Shul5**#-E!;G+kCc5VaMFcNS>
z@Uu(suOHXectUDZ0dKhF!we7I$n=Z_zZLt%`t3NeDI3)h^y7eOZ30$oOgnv><2qe2
ztww7y;%qv;<(b0uTV+7)mJ*0Gh{foa>2FS2v<*lgkN_RYwf9~3pqecLQVng6zi_ym
z*bcIuN$ioz`b&u-9|e?_1B%lLg(sUPzCL@+FcTl#%ftsY@!UK!U%kM&&pyhTYL-g}
zMhI>nXV3MclmaNv#LgvXTbqj)K_=ab7IalHO>e!7N7(OC8np5Ml<S;6wZdcHo#&|s
zrYWCkvQPWGWo&@EUO&#UHxDv+n~Zcl5*rfFAnZFaI=tLqU%0)T$R#Spo`-k@CE`}H
zAD63|l@(1*?uVopyRJRrb&(u@<INF!Mr8X5>^lLMPFW%<7n0Ip;rL?UGsaCv?QImc
z9b?B?^~gMLWAkyP$K|t=fUI4>wUG-I7td$Oe$C_Oe*V4u<sbbGE-cnyKx#Bz0r0C`
zfPWp6?e=-c6@hw9WUJs;R~-ClC01!XdE?=GIk^ALOwNeT?*d#LmriT>t#XO9ihZuB
zj_VeVsk>()=WH;L5Cti4VWQhauXfgd%jMmI?2t&zekS(cm78`gx~#rwU1$PABWemD
zRMJYjHPL|5iMDDJld^eDUMdP_At!FV5UM^b#U9y}EPeGXrRj+LlXb!|O?a@MiH{94
z@iC9vFVA!SYv=g(XP@BV-^_F1eFwPaP5W6|08g?S#k_9}q=`x4^#YGv(Kk&?B(P_t
zQsdP9i@f;gG;`0FX<lwHs`A{lr=P!i<N(*dp`Sqst2K>J5~63Doc(UX;0HWPCC@ZJ
z^-PSvBdj9%<P`NpQ5ES&Qu=F}s`N~#3*fD)WO@KdXtWSX6UmsCaBsI=mq#}@3u8w;
za(yvT!`W<H5SMZLbsBtH61pSyE+<2`mQ`9PvE!qQt}+C{q-5LNiZjpqTvHt8pZ}{5
z^AmsNKB8PmEHT+u9^3`^*RS-ggTMRMTV>x-96)#QZw~xkVoI0ayX?FA=D938<q^$?
z>@D5G_1AouX{oDi>i1a?s<m3b)A!m{QaVnNMxLfkM4j4Tn|-7Kl~PPXB#Sgn)<&qA
zv!!k^*L5dd2DTZ88<W=MPxFCXhhlRsXDcvSf#Q2NK6;6+vm8&<1hGd*#oWFD$Q7)=
zIvZ%?a$Al=iVGq6rG(<Sm`r~S?@*24M4lsWJ4m0ZQTk%Uul>yPs9PT6Fa6BD3=J1p
zUTlykpF&??><|lc6;3`m&ohr-=E9RRgo{3hOa0uux4;d@4srZ#eGH9ep&;y0L#0W5
zvB|=`$K;~V0zRkDDZ&}};lHhHVN>C%u2w)@#CqwFRFf9pBG%ic8>We>aCZTJWP`O#
zkdhGAj`RRid$83sS?ULX9#!l)=5gu~$VsrC>kMqLY#&BSrESrZ^s!rtjeR*6ap&4_
zAJYnAW|&9^B6$Qp&p#A%!`lz@>7RKIfA_!pEPdDSCvK%GuV26GLG9kJS?_Df#6~#S
z2rIJLF!L+!1=!@mHk{NhQ+m^HL?5qaDMVx3anC1MtO&Pg+B94T;x=V(Kg>=WKzig>
z`hExHPjz;?K2nX+`i`YlmsyY!eHW%(frKd8hG4Q<OsH<EUpq!(4)02HTUz59TBH*(
zVukZU8De4M`6bIw#9LE5BvJ-M60>gA1Vym~jl2Y|h!?;k)9@IY4VXBnIsc!R`1WTP
zm|xCux>+YPnB)1c&F~99^(TD#KYf6`NAi@H;PG#s;?&n?s9kCjE=An3ufUJJ?mA9f
zH$v%P7P1~xVkkFhl$(_2V&=;}mlr}V&SjXYD9RE>D|G_0u=qIK@STKfPk2mAdGA<J
zYiQ~XsMf53)i(3ATs{T4fZjA(b>YgZQUX#U;GU03h?4GVi!gBlPCeq(0#~okFz~cJ
zvRf9Wv55Pe5(n)<!p&x4rP~H!<6TN^MXCDdjuQnwPk$xmUGKV;zxLyo`Q=}Ki2iH#
znVN)aD+ayP;9tA+uUb0rR>8l~g>5aRclCL_BqW;8aM#^G1bUcyqinOnT9&=`*5(48
z;(n(G!0lqJ#3}W6hNKj%Ch{#U1nG)tI4g46lH2sQcK|mGrL*Uro0icUoCw=uJ}$7x
z+6?T%Gxi73Nu8)Ft}Qu-0AG9>5^K<GDAO%h!fSH{jLkr#15qRP+#2xsmpwlB|DPq>
zpXIsc6MX%JZ?IIYGB|jc^N)r6jSv4aZ~ejRc=3@L7N5-WzSrH&-~7Zr4&N$@xvQ`%
zHTh;ER^}D+Gai>`GEA=crisZy6IR5#;mV}Tg&5ag#p>*T`a1~&KdG3ORAx`~dfVL7
zbXIm<eADX7De%+mKS>BOfOk*FCIF@dThokTYp7i=!^p6rG^$M*HPfvqeag<NpY}m$
zNd_(k#54@W5*KlErqtLxYe$g9aGNp^)BRaWhC8EZtUR9oiso<s;5&Hy$tfOuewN&x
z!Byqpwg>*z>wJ6QUq7<V#<+rkKsy3Iy8{1O<6~{c<HW(YG0=Y<vx{Y8^h<wEMe<Y%
zXmR<@d(lY?%m4@e76D0RKHK=id?gE0zDi<K9^8B-i=Zh4$;RIs%eip@y2a)i2Aa?A
zbT0p9RbM_6#FGZuxOf7?71PNYqG#<2M)ELOd-ft4;x>1!u|=Q0>28mUFV^^ff9WLs
zVaTI1-{6m*`yCFAe2_QZ^*(MrGR(Dm8(f$^$x~mSp>c75TD;6xAAgePpRe=79~<L+
zAMa=8Y|P41z@@W_^RuuZk$YkbaYa9(w3xc%<fb*Zs4x--tl_z*;Oyyy;-JsMyntWP
zjC339W?w7Pn|tPhwQN@<dk@m9PYshP2Tmm=qvtzfGJXUWCli9KB^WlvyPXMVii*j-
zbyblJad$1mwCM-tsyVs`B(V=RbF#hqOsN4EN^Oj~KFn4X*$49c%wKySKl~4W30=#h
zbGBK++9D#W7HP-#>xslpz`rr0y`n0>=HS1wDZQQFCv~5k8sfU+?`C-=wuvz=Dl=^s
zVcT`LT|O-_+ie}ef9=n$uD>a3?%2Whoo?@M;_5A@Fu^3Ir@UQUCb3Aw(Dab<U0QU*
z86#Jji8@+XxypU*F1n5|7#Fv2GFN`vEPm6r%9i6YK}a>t@PwodC;X>hID_^Arka!d
z>8amkV&GPeU-uENz55{7-UPRg!4DjhXdO89DE!+$n&bCB|L<7LT;gB<Kd)!cv1=GA
z<az8|EcHn!XN9ZVG+!y4(vX(jreB}c+igcBONi1NF2PTaJ&<tkhkYu`)*vU>VX}Q)
zxi7Py5$)5M31{C)L7v{9R`jOb#~OiM2QtaTl+=JDij$%Sq(x6t!*ALbz!BCUb=4S~
zkhSi+E-x(`L8`796`*D4b=}xH>z2rv5YAkVxTS9&f9Lz(&;RhBexHf!PMGE;ZA)Tr
ztZWVZ8!^h>*lB;aF~rxmHtBkhmmmDH)fO9Ed-NTq?_U&0D3gKG7PHsQw}aKUOaZO)
zx7&NQ0s>u|Y5Tsz&DY9$vx6)VNLz{7g(>1~ixbM{RHQX}y|P^0wV*O$q+4f3*KHZQ
zI$M@oz(`O^sw<mwxbG$U%^J>Z_ujn+eSYUZo#Ta*7YQ<1zH;{SrWRhYcs)@w$IMj3
z#g&NX@)2iB5f9Bp{OOAcbqZv2V_aDNGLg5!zyFm>gk!NGHpWON{&%NxR2DV0B~4>R
zK%Pe5NvypsUMjT|B+WOMRXp>sND(&X-ozfH7JYXetzsp{&6X<UZIeyAK#+TOX|PpW
zIWT|4n-EITkx`do>^w24Avbm&7gr_RyyUrwuoAiZ8;Lq2*C|9Tz2}Z#S$l>2Ce2T6
zf|cACNnonhO|Uf2oQ`?hwXf&4eTP||o3`t#Wr(`^;9qZK?|iXa0?>VOFE#i@Y0E}K
z?B8=I^`^M$Og>tg0Ni2lNTb_Yal0L!fi>rE-6yGD>w;ohF$3w4j^j9ez4L0@Jp?V-
zO{2_)b7Ki1NC|+pxdXyU4e(R<R=Pk_ZYUXtjyjkOM$wx)7OLbL$T?CDT(2b@y&>Q`
zU!CWx-*|@pVvYw+f1ZoW&r!_pCk#jNbYhHmPd=<T`@EvwRQ&!QdwlkD3q1VD{Up%>
z^(10ZKfrTOF7wrI%&~vJPkF%tHL8oB-hx}eZp3$axi|?MbDwqzvYB=BQ$A--#wP4J
zwf4)kq%GMyZt(!4KwQ5nwXA)2U0b$x5unxkxMwcJR_^K8K{=1~07!_F*!F!iuQm}d
z_usi;O`QZSgxX0ba&OHm1-|VLY}%g1TGA5?5fB1kUP2VayU~PlEn#lf<1HuN$kOZu
z8&uXQdhS^4-wF8B8|kduo5=WEmH^bt34W!B>Iwb1L*(*9rU7Vbb+;Ox_4}m6z%uKO
zTa(7PyUac-;dil-c1Q&4Y3FK+YV}d4&pHlc7@7HN^<onO><B>`QD?+gozB@2j#SJP
zJ=s~B4X|1ghBKfUmzlhznW+WVz9SxsGZDZ4+s}~8C(Ku8d1~hKl=A%s{Q2Cd@$pBE
z*wpne^}{#5q<Hb!8nwzfqUMq*xt$3HxV-!rNp6<U{_aHvMq>I4F0sZX*O<U4N0?fb
zg<9ZG?};UZzUTAYcVknc%w9_;(dz(nS^#*BkuSZ+oiF=c+S1#FbbE?wRWo!z6nrOL
zIO)ttVsYY(k3tySdl}<^pE!xizAOO{&xHlK4doWj-*7~rZeyFwX9-}cHm!s-wVY5Y
z9VVX)5{r*=*Wlk+=U<JLF2`Bb1AZ3-V4WcG5`(|BPz>h?Xfz^n1<z)9*<e!VuCp^0
zi+q~d;%ensNx>v|w5#@}KDky*c&D7uq89C$r2?vJ?$Z`cyUf?N7jp(WNkuilv6*;Q
z<aZ*lTi7Y_uws7u`%c$a%E2svtWhmLpcx+X`R!kSj>Y9ka+y9JpZ!A<YM9B45C$bO
z5@RfaMbpL)$a$aquBJR+C6*36#waHlka?={5@r1?=g(Go=)3dWaAQEd>LMFmw;e0h
z*d(A<A4NAOtJmA#C2ryTNh$0RyYS~!<nPe!Q^}|0=Ic1#Y7cJ97Le-S=|1w9#66nn
zQ{)E4Lt=?z+UGHjW7B9PiesWEF~rjl0VC#XW7L$trjCISZUMeXa*48lkL_Rc*@0h(
zKrK<!VojxPGdq((pXp^;lUY+%yi;A-8u-}-_}Bk#53x%XV72tH^Q^udbN-HxVq9xP
zb6h@m!Bl@8oCr<pYSTSN0zXYB*wy-v_32tLcUF^aecw5*<M-7fYFoW%6{<8Xs5@eZ
zSA_+q=W9y?(%{4B%1+E*1)2^n)FKA19)Tq?s|l2KmD#AYqc?_p`SX`~`uP{=EA?|>
z@iAs=FObWQ;(H|muVh-B8TX<m?YEVw$h$bJsn%*}EqxK&CTqE-i^~s^$u;<c-<c&-
zOejiS10hO=tEK=JuY`4|r?!jKeqlQ*+m6C3i#}85V+wt8jFg49voe!zz)rt&Qd7$X
z*zyY4bEK-12^bQwT`LABtdY|62rwMp_IxzG9-X+Kwt+W<N?UcnfFEZUFlw3=|LsfL
zG;jA=KwpcriEWU)1zl7OT^I2DWQ~WPevv8{@Fm+TwI^NCl-^$8?>MGAWt%BpEgQfU
z%;)b7ek+ojiH0H7c!o-OiqlV@qtUD}G!`&091=<kD#PimT_BYS+#x!sNN2-|l)E@j
zLd(eHwpEL}vtspXBGVe)<IXuZv=c|Ip6Qa;+Kbsq2CW`;shDd-)iyCmxr!WX&(VMv
zpIzZAUw)E8K}7r}Cl~&lOtz1}8^l*70>5Z%C23B)R4rOr7R$K+AR;lkvJeM}YLe=|
zSymdCsi@POJ-fvHUt40|0cm;e+-go@68Bh3Jux<uv~+ieXTybSpL#kmq0B8CK?+=#
zfn<qVDh)Vb#%l;edRtmaJ#B((T!@k;+|Udk5C@(d!|MN5a&p8V_24+7Ab?L+iT+lq
zX-bPTLjY`}Qv-aF1VkN(5~C7GKgR56Kw*DCt(fqIZ=T~1KlcO|R~|JHoSsyL=~xk4
z0Y6s?{H;&&L0`c@piUsIo8o4`UjN%xz~4DWy4}X%G7Ggw$pmlW$%nqn(AXGz_DwLn
zr({IT%5qFYtkaS-l3LPQ@c<py(Ln@Oo!i(E<YUUqI~3FoVnm1M(Ds(MeA?Eq?@+(e
zXX32cCLf@Kotc6f)@kj=r$=%NTk`T9Rgf@Y*-0q&z^E;2{<%MTntC!#(HrOanct_b
zmMQoX_<qr}<O%|tsA8<_?i3O{)T~;AL}#r8Ap+9ETL{6_%2OOJUCWoga)}@L(LVAy
zs8pOwt)qN@3gni0<W6EPFP5@oigVAyZEvyp4g#{){c8nhxaiH);@?4V+YhV#J`JI^
zCvnU{2tX71#{;rO&oo{YwIe0bHu=Y0XZu!TA~-uz0K|A_qdV<$l}%jD5_^%6LZ?Mf
zx}Fmeadv*5(~nJY?(AhMD>2zzg_-5Y7??QRG0)BOUseJ83V>f-@j#%i$JlOSPj^DF
z74Ua%`H?K=FMq|fi|)_g%;d!vxqSH?!$aeY@10<9xSzhE(BzI+mLi%p%UMn4o_WwV
zv%lpdb`gJ_GqdqPy>HywC25vz8uHiqed}O$l$<%uS5E;h+)fslsjlNVy{X%oDkbh2
z3h+!10SOJxYDV_^eC>-bFgg7q1I1xxS57irf1FIN4^LWgd3k(4OX!RKZwqZou?snt
z+#B05S0sRx2*@y79W)3FEYzQ4Pw6t3FDagXzRaGzgFN?K+#x`vT)*>u8~pCBm{Q{_
zi;CGxO$PR4DNA61%bBpges_V6OB=~T2&IddY>{nu58LNhv(`N44wV`sBZ}E`vF%Lk
z3<xIl+GS^^1ltrh^<4U|JB}gH5^N=PA+m~mF(fNB1w)%0b!lpm$*Fm!XJ%P0FOVcv
zN|^yNxhCfqzJXuz$qkIQ2+g*@zi#YCW4a%6YtjE#BNA{!@UtuMuNvnk6vj)Ooctnt
z3QG)?ZX#9zbMt4Joj*@5H^j)uC?n%T42(*ywr31PwUx+LqSYoz)E0<PX_=3X&9NSf
z+m0u=ZcZuD?L0!-4lEtt4oI?j>K%w~=^$1lZUr+r@Y`_YRvG^mF%Ym0?Fl&b{2Y%w
z@;KRy?RtB9=}+;)tm%Ug`u(PJvAlvX--=(5ASIKUFSP>g$vebrzeNB%FGHjjnOb>}
zz4;ID;CC+ZvF{%=nUE&fr$ent37NfT9Y(Jf2e*(rd#b_R$MP&LL`F&LwDzZoQHEo>
zIkldJDdyo6A15KKCcr5HagmuZ4Da=rJZ)2$Tg1&207wfSSRx?y0PTXUj5OwZWD6mM
zl24cyeLrTQyuj?qS!Sl^m|d7RWy!@_kPUOD$*43cU8<gDs{A0ip#cW>+~9~*XSn$m
z!LN1!{+^wMuY?4!Yw)Wp1OD_~s448ta(V7s%uYSdMCncj`mRNLIqFfF3+HFJd?7=z
zG{o@eIK!hu^bHFTJd<}{Ek`Dj%>)s39N8|$_AO6e=^|?f0;NSKQX@~NFTgEODKxTL
zC|GqJ>3P!2l|>_ZsC{oE3=OAhsUngJtLY!{XhsoV|I(9auS(7v=j_5CQ)P;rKZNfU
z@V%mGRc<ALj1xm`;SD*jgzmPlIW=fXTt&vbB(2H!3(QuYW-NaX7tU#(dtrgm@j)(}
zi%eZUDUY6Bhb^?)8LZP0vMUvLvp(lfCEQ+X8jz*HUuOX9jJ8ZU{@TT#hHbka&699>
z2(r6`Ll5tj*5qQ`Oz*clinAZ29s*epUKo%QE-#{esHrupT%28GYI>I0*(sKm=ZWKn
zQ2}ycp1z#qN=G!BWu|M7v(z|=pDQwa=z7A!K<oN<27Y!7{@rZBl>+~EQhL|@-V^ve
zj^ihk#tNp&%=yJHF}ZR-!}(hnC|pM&J4}-%%as`xUcAWZ(>aRy0VXE)Fg!6z|5)Ax
zu1L;(trD5uaV?R}waQAv|I+!U#UxgJn_jLFu{${YDkk4~t!ezh`iGj@`h}Ys&Yv2)
z(mf^LAP@axKHvD#GfXdBpj0TbP&>(F{UI{he#5~<_xDuR7()X;OJJ<gBK~_Oamh&8
z5^K;I+>{b7;r?kyV=tu1EYp?mGM>Aa?>>B%_q|^lnAjF(E#{uyh>kB-`}1vr(#nF*
z{8U74AaC4)cHnBgKQ$h<2}#?4(lS1#nVyDor#T$$xilNlKjcy9_o*$%rfj)+Hb$86
zO)tn?J~S^echs5<7Av#NPt7tnH^<WAJk{!wDF>7ZGvqQkLX|_}C7X>oW-Avc*Uu5F
zCShri;fY%b^L?%BZg&sbWc{Z9Zy76H-gjL~y@<sX=?!@0QhK)!{?*^5{K3!rCg3G$
zCQL6rz~z|-8O)qusBj&*?6_(B)Ql^XmoKukbcygxAANlzjEs#M$zX6SZ}d%R!`-Mx
zM3U{2f+Ni&>zL*$hTdUgS=BbG6Z}qmP3;7h>)YeE2}t{JY1Q4-jo5z53Bwa1CtsN1
z>1UrN$VTY6$@%3k;DypDIK=m@*zXx*UWPCbJ3weMCB+k93TB7^>niNn)42BL=|3R?
zDlp=`5RbX~V~iK?Wb$&tnR81F5A{>MWXtBXahHnW9R|FXM3v@C1WcZ5a_u;*lwHzO
z3U-qRkxCR+9cbBAI&OH2D73T;OTpTSRpM&ZrmJuNxX1E*M40sm{0!M#hFrnN4-><^
zFVD?0H8ai3>@@ZI3P~c3Ng(6rDCDFSp3N3&Hl|r<Twtm3B7_mS(kO#tC&=UnJJLtm
z2ESfw|K$NcSE?dVw*$YF;O{XaEpICZozSB&I)F|*D%I00t~^7qm}4+=9sPxC=?h0q
zA<KHQ%-q6BX6H|ndod*j;|vZDGBTVq;^FdwbgZ>~>eD$Irqj|V*Kp3Z-q7YyvX5&z
zk$Men9l;ds&Jfi>VOrirlS*h;S6Z8(G$Pm4;5*-Z6y+_G^M;sO`Wm%lnoMTUi11eL
z&*OVS5Hk2d-irQC?@iBSTx=~XvD`+ngxR1eApjyt$ag_dpjKaCuJ$y;nLByv$ur#h
z_FHTUbSvk!Gf*kb?sGq+Lrk`$;?n7aYwnO94IMTDhaz*u9kCY{fGNUKiOUg(7Vw-5
z;0QxY3iF}RFWkF8-%vs$YEWL8;@s2}i%T;sFE3JWR7hwN`T^OnWP*3(xN%%zrFn+s
z#%by-5@rX;^^Y=Iyp=#oC8gJtrX<@3)?x754fxlO?0TFYQsnya_GSiGv@gI8Q+m68
zw@tBsHTc*5?rxixkS*rO6>}s_DO~XcvrA8qQ^S<P!xS?I8OZG=@*?Wd3e$6^n4UdL
zCMYsAGRF9xF$$#t1_yFRO{iBB8Z~WV;ad$gTNEH&?bglK=?O4Ip*8gmgODQ@?eLy9
z18ozQ4#T3<qbx}AkAQD}^(j_Xrpe{{snjnpS-YPwTXftqgXai<=>AG&jYQB2Na_G-
zJL1k(Om2ry3;3<HAhrYP(dP#tGu4L}%HPD~<;z@{JiyT45Yv~PN5Fx!)2rG6Y4c7z
z9nx)ic2ZoB5kU~P+<~brrL9f0b1Twky2iKCp%&SA0ZGM{Isj5(St=<7S&vAsaCYhx
z@zet4@)EWBJaJMp=gx&CBQ@$cB94|>t~||R{S2OJ;^`Qb&r_T@z);~<BTco>of?N-
zCF;&~x6wM^GWgXlz~4(!-gR@(s~6k9>6k5nf9-kOmn;UJ!f?M~2~oYq^zs8-Ui>C~
zE7vfPzup+l3PC@SiiwkDCMOq|ynK>O*vH`DIAarI42%v^8q6BKccpA4gI0e*<Gy2+
zZf`k%8|3M9TlR$x1EQI0OETynE@=&WF$4yhk@1iho;%Ok(=QO_r0__@xuwscLWzEq
zSJ>kIqW=qc1^hw?j7=dG&D~sV^jy*+0%?B)!~Mleq5{)WJyCT+zd$XTX1@9~{o$=V
z_taV5_O>BgG}F~MG=#CmkKH?SK5OWc0aDOJx-HLLZZdH=OLL{|Qnc9WAf9R5MoL2s
z5p$}A%k>w7ru0~l{D0HZO;V6+nz>8T8r)}g<~%Q){VJtm!CZ@2?R|>GNtJr-GAqrC
ztTfLPvqUBcI5KpEj~u&$KRtCn=YtWlr9CZjW5s*3qB`10bOV2P5UyIi8-Typz8$Dv
zi-ZmKP2)?t8KSR1O~6+s_}idsaSOAyrBFmjUvA8}1*`LOT%7w7UZzH%N(|-hqAz=t
zATvlrl}576<>>_`r%sa34KO%3W^4un!vmCtoMcc*s7n{$rsD*rE6@5;WGV2?a%r>p
z)sNYLF9o6d&SWNP`iFfM7ArjZ@KX@1nCQMsBKqrjvc4s5srBB1U%0>61LVDFYS7ZR
z)B7h;f%31d1juH~7a8$i+<|7X3$i4jMx=lTjTA6FHOa-vIr;{NS(u4kx%5s&y~CB7
zJ^=TFNEVmRH`#Ywh>t7H)#)zm5UN^1g=sSr@c?HOK?zd=T!>?{uBeqYm3gQxN{s?3
zDw;5{M+&HBDF*w<1x>1r3skC?sm1fuk~v};Wc(t<+%SE)gY<<1Tsttt9fwAF;8KqB
zlE;%;B*h@w@!Zy~_bUm0b%ns+vXFJo`>J#XdWpc#mchUN`%cbmOF<=M@;+g$pBpCr
z3g?y{W_tNyF0FitQn;6)+)WfRhsb67h;@@@vdHD>IWA9~B$pYWe_)uA@iB%+2N@pB
znc$Q9N<vh%Nk7)FY>R?ej_$a8`o1IZ#fs-Pday+V?3%NkY75F(svrEyW7L|{WWzkm
zwe!r>#OmK?jwHrE5&b3b$NcqkP9n(Qi?S}8a4-pqaR6%@=+d%7)|Mi+f<#GYVi9}A
zVkpF*Nf;EV)u&jhJx5<~J<mS<B5!=_F#dvM2|80;r`6sW0_`{L;wa)u6Ao>PWu!$`
zQp>)XXJ`C?EwvWrmFctSN!f2n!dZcZ8BJ|bVml;+*VSS)bpo~VIEaz6TAyXI_NVw!
zjaocqPL~ZvDQ5SR336mqNa%;;gB)4kC+9bq7;SQ3WPlegIV0fO_4Ja1pB;n0>#43p
zO~97}{A!2bUwd9_sTY5{Ec`mfaE$Td>+t=(R750foa5}uSMbUa#c&Tp`J2gS_Tz<p
zL^Nr{A{9(CIeC(7*vG)&7^4$o42}-cKa@A=vbAzTvyzw;+7$ezb8f3LXnOxF8rz|w
z>8iIKcY};(cs$_I2VY=v>P3Q#)uk_%zla}NBb@-&SpUW7=NHUN#9guCiv*DN^Gyki
zX@~AI4Gm^G;sDaLYOw>PK|xj}2n|O4Aj?$c+mr^bWqNXw3m2vs860PBQi`&)*MuQ(
z&Ngd->{-ufA}%>ab<v}~B6fg`;n*#r<m@X_09Eo8#AYDp6&Gz~Q5uPA>Sb~BwS%UN
zRN(3;rgjJUPMWLKlS`~b=NK&=C(EeqZRolLnJ7O|A%YAAF%*Uw_T+Mm9}Foy4VlYn
zcvq(jXeZ$BzVFt-zdfCQeL&G>+W#)Q1HWY8?>T|3JdE`tO#p}zt|_gjD$*RDTp+2l
zqbBI19?w#3o?~(8PYFZ}_YX6Wzkyt4FDhFg(si22JX5oC%uJsqlPNJUIKt5A82uxI
z^zA8_Mc=3<rfQD#p6_fN(YhTS;5Us%eA{eOb{^Xwa^c(@&prJ#ex`x1`nbIOCF*L1
zj6Z0u#kl*tEP*fXK5P6l1i%Yz4uIv&&S+)NpVlR?EZfD#8ezqH0F20M2ta6>t|%o<
zFk?c$L?yb+V(nQ<;Wa$<#B;p)-Vw4niL`Y62Gh`LbAf4fUDs>Dl|^qhe9E&C1AB9(
zRkw6R3i7u7mLX6gQB^bxlT!T&8nv_xnDqk4GfSf*-Dz6U*7g#u$nNPp#c)4ikZ}!A
zY=W3bMWMI_{T#V4M<K{E5QZEWD>8QXAi)>JHqogXUA-E9_WxdNdb<X{&abw}`ghbB
zXeZ$BcATzbdH{Q!#lOp#UdL>KtmAuUxt7c~BP#njbW%rY2@j0Og#Bc~n@E!5G@^OR
z&1vS!e`2^uUwDZA>@^g_gQ&1bqM9`0B_^k5nVdR9CM?m{Kg8(x7^8cK8Q5DeAZSWE
z`$|kK;mBrM?Rs;viI3j2tIleU-WD?bVwDHJ@er{$N7gS=shwf2{-|+F$!4k{Im^E?
z#=o2ctVjTIO=1hM1i&sP7ctk$p%*UL;l47uZeSt^QzM`jPk>|*N*<jjEz<JL)V@VA
zbAY9V^St={X>PdjIFn~1Jnfm#+D>;^8op~we>vbrA?MCCIe2SgIv7hPo=5`qX;@iE
zjEHYz6s&>O$R!<%+G-7L?q;CcD!V85H0kKW;Ny!rV<aVc?;D9J<7deQS@J=KVwhzh
z<8$;#4o>tD$UI%WhwX!(U4mcj82oK)uEmPF0&xK5j;gIqVhdS)y9fW;Pn(^0typC>
zQxR)Le3n2FTS~@5dp?P7U^>D{`fM;v;184NV>IJAmZD3{FMol6kiK9){kdx?WR93Z
z9I<N9NEVrzn`C<WB-!Ws3^5oQ8)bBSl+s|4APh(vRyv5A(wERp)7O;7;jJGDxcoxQ
zZ~xh2tTfJ>z5r2N<$U?i@WX-uZ5pp{M1OJjIU`^i|1aMgQQm-D2t_I;J6EN-9rkl7
zAqapIIy?YgfM?nZ2dE@t3}<1`N3}W0eC-JavNv<`xu+Nz9c5sAfVs<2+umSA`m}+I
zv^euki!%vIT%4;jJvmFQl4nuef^$;S&vyJV+`T2%yTheVts~aL%sZt4Zm2EIV8sE`
z2HbFa35yn2sI`>{0SJWv1X(hEhI|lG$YeM;lHuq9Yw$Ft8{1-NbxP-!z^`6D@OM2|
zukW@i0jw&c+e;|l4*1z6_&3i-Xcf5VBA%s&uP~5M*#bc%DYJD~tImqTVp@`0qiLXZ
z!z`{$Fi18WGRDM4yu@;Iin;O^%*g(X7!Yr;#2_3Y3L+YMndyajX6Daw`gsXD63Jkc
z!I2?~{YCPn423+5?1S+GlHv>B{qiE8{mkQ(YiChjjM4?pFZ~gbs*nkXtjkbDf3f%*
zHO9L8+Arb$A`wU~fLIf)4WPA@U67IZ_){Og&51~(6veF=nBEK8lSZCmZ%9xkYcL^`
z>1VF?2&K%mMq+yCJKy5A*S(Sc@c~mPH0?1cw_o&lk#cIa6=oNvSSn9(`QmvF+>l}B
z!V#v<HjU1o0^j1g?E+}SFEx;MgkE+$&Q7dZ;7b%^NZ>mHpcR4g2n_cR$$A-ben8I8
zFwvLg#JEp3=bJcUsgPu>k1Zi%>)`L0#7htU4H)HB?+(0u@NYq+?~x9?Yw(-5HV7y1
zM1&S1P%>Q4IJe`vsn=)qS7|n434+#A2|u!yb5Rqd)Rx~*q7Ttb7O2GYEG>W0r2CeF
z0}N!ZAs_BHhDNEb+e~UKR?e|-@;p4BA(!uGaA<`8ue~>owIjRl1AnKMyS{zp-Xzs*
zv3Io=yJbtJWy^~k46-0}93(*yWa0s4;slO?AV@N3aWFPK#yH~-`4TH|GQr5mG(AY-
zd~ha<-IV2)#8#_Yy^!7PCc8;KF7NT}%Ux>;{{M4Mom2PLz3(oMo5bpVeD~EoRduTB
z{QmngGFrsQl^k+82MbqsuyFljAa@;6)Ii>u#htBhU^}>hVsVZ&Um4a*^OoX2r~NXg
zBO5@D!OJ!QkCK420aqCT$yZM0$#jHc5<#c!BIJ9ZA0H9-8ESIvMN$EzQ80q<jj@g7
zPURf-jr<g<^&5EowQu0)k*Bf$&@B9N4z)@XTbo;)F1xyR2OC=ps5jTx2GFSa@cqNm
zy+;v=G)0}3!0t+87tu_gq9v0U%;Ys1RVpDBitx~Ne2;YfvP_4jlxxRf%YUBrf3p7j
z*guxXiAf)n{uELh^_?o$4^%ow-{8+yku%0*?9ay2-3LEyyT=K(P{V$~-}1!(;1_!b
ze%@562iA*8KP0i&gX0z9g>{Y)48j@*#e@_X6H`<ifj>aZP2;JGPJoD;WDEH2B)gd6
z995LrLWNX?>NkO%2FmUX#`4E8LO=c-2k+FP3hKcMZr@o(belqsInf`E7XbbaqA-B(
z<gvW-4XicaLZLV-;|$b1h06DLlGy)ZBKng$KuJKlCZaTonMNnNE}yoVrK9eo{!jPq
zko3cbK$1ep-yf+&sQ~%>6t;FgguCNowtNafw1!I`eiK)&l;L?E=U$N75^{fSx)%q<
z+$ewEu3kp9A%lmc$Zp<aqN1pr0PP{s0ZjI5ObCS%_hp=cv=7JzuF}TiyLk?J@*NjB
zM-qU^ViEgBeH<F~xJW8RB~mU4C}o_~z$7Cho$8&vmU>xl!>05O0)A<O>4h8&9|^b%
z__N2|EAY49hoscBz-1gfi^XjGagcM#g;qc_tRo022%;K-xWVPKC<2HG0D(ZnO^BHE
z<PZ@{2J{^T&6H7c%ZUB`2;(Xm!6t51-$K0e9ps!bjOPww)c*tu?mVaWIXU99J7|Pk
zObGmlq>3#pZT&ZFg*Q+r?UU63wULg3d`R!7Tz@Y5QQ*I|_|Jhr9KLG83KO16b^zw`
zrU;1qg88g;{}B;LeiH$pwz%}$1oY6o7E1Hjs9r*}6=RZIsScIm+T=>PM6B}p0uxD6
zmFkUk)S9cP#Vc5=zK_RhKhKqfb!}EXHwn44-YugoEvvkp3ShfYb&N$Eu?j#|f6j(f
z!B9EJ!)UI6*>VX}C68OB(-zSkaxqp)4W#TqdPXv9%4to=+6~yEhcTVja91h27w~6Y
zQ~x`3F2KVK{`Tu?W|H&Bm`3Jz0+#lOQP`@BygS0;V~9FS1C5}DD6Aujo18=<Ii)X&
zfhGX-!%efAGDruqAV<NU=Q#8r+Qv%oG43=j!h?&P7(>~cL(Y{IWJr}*3vOX6Sb(6c
zw9-+&mW=k3208{mfu2Ks<qwtqVhKk1|7D*<x*_TQlZ7^<?^^>X$-meBGj5EjtNQ35
zASnSjB=M*+rF4(d)8L?3+K-+3RqSkigrYl-f;-3R2@yVu#cza*XhfS#bf|NQ@0XEp
z?1!J5RjtxZbfhs!n%8ME4fPk=W+C$cbS?suFBNY=<&=m3kb#wqeq`_~xIV_o-=EK+
zM7BOvz?6tys47Pb<Pg>z)TyyZhbA*w>#992rpuU4=S+Te#>npAZ^ue+{J&2LAPw2O
zk=WBdzWrs`UuVrL`?Gm4@?SQnvnx!C%Vx1r>1Zl^LFu7hM0SEQLXrx?Dgq(|QA4Q#
zBnfB&pzQ?Ge=gMqQgj<EzUQ0?6v&83MLpvhf^ZWn!8L@<_mcwqWP$bz`&o|%n$+)C
z8NrBH5y%U01d04o_m`h#*e}^JJTITp{q4u3lP6jHR)sZWMxH4+DhH7P(c}9dh)@MQ
zl|3LM9AoMBqy2@#EI*TKcn8&JiHnTN?!7J?*MsLz%EY4Nd3(qg%IpzfTa3z&;NmB$
zAW9OKWD6-Otyu4*_<y<&YM9Dtz~sT@YslOHs%tQkAH!6690i9Ae&hnwt_As9mShuL
z^fQWF#5+{wSH@(-4_HcXXDK6#Derk8&@Pl|;C%i;z~6q|?ho4DqXkF9`DpRbVwHtF
zRrXp8j8FL3+Nz^k4dMIbF`)Q*4_;J46g62YpdaGwEEQ07-H2=iBn5<UxZHNYL;^9H
znTR+Lm}Ea)SCrs6WfcAWN`)YAgXXk!42k`+vTP#$JDvi55e|xQMG>Cz0<b&N%fm_Z
zf1Q9}9!EM$*OcNh-T)Z{MEXCu0bL?qBpRzKpgMiolq#oV19@$dM5uu}RpM10L%4$?
zUtb6ENE<`Wr@311N%v0F^E8ptiHqOVTacZSDZ%N|r5l)<8ppnUV<?Z2twL}?Sl1<o
zW*(CxldSV|qfb^POba+B_Y|KIQMF%c0OE4<lSU|2!qyDLdjtOV727NLd;7c>fk1nj
z&wnq#-yR60+leJzWYu@XJ(^*JpZM}V96CCQjrAI?U0ub87uT@1QkRA$-{E2##Br(V
zMi|xEPCyZaL=3`+#D5Z%3DnJmgGQ_#(0=+}stYpBg}_eBoTLVdR-^r-x2m8T)@@bK
z1CH|3IsYXHkiVZ6IK=?u*eJ+G!XyJp8UXDkC$i%Zi2$<DxGiDJYDDr_jw2u&2O08c
zp5!Cve0%~YxfUsIK-(8|Vo|ydo{mM(e@PF9B%~_O#(-XNcv)2k@F^5Ha<~neteK$w
z@-gzo9Nu~J68`wr-@)|c2|RJ^=kbYSpTJ|sU5rf#tZx8|w|0=vNlA!ZoAN5gl99A&
z12_E$8V(w3O>9$X;X*dk+8zAuBl`ot7#RFwK=Aib5M&te+l%7fg1_6GxdxxMHdDR8
zAj0Hy9)};B;u6@UQW>BAY#GlyKaZ<d*75#@Roq(GMzawjm#6BvE}Ynf7g5P5>NZnj
z!(kW&k`NHsSrs6OKpGFV+MqckiPK!1ln4R?O!eB*i9zh1lX?1V1JE7-W%VbWn`{6w
zDv-FpjQ?j6m&nqlS`8Bb^6Bf^-ihX|AtEc2k`Yi72`O4jV!;JKle_`hfk8?=%7{lc
zg4mVezm|ocL!DWTiQxI<Rgss}CAevR6!J^lo#wc{5o2~PrUpmc{F9|K2Pl;t+_<`q
zS6}-&qNs+I)yp`)@h@@p`cpV|`SUoi{}47duVZU#2L(zS<l14@I#88}*|{03j>nvH
z;GnrFPzi|G+3WrO<?{~*e!Fl2hD`>-Jx=M(-ru{i&pubivD($7N`&iFSmFw$VxIlv
z<ntywz{Wbog?Ko6Y!1gyOk;Uz3-4WA#nsDO+=IaLsF<X~z2hnD)N{%DO|7UJY%8D$
zI%yvuH6eh*(tuPCB;cFsdsSnX^;A<LLlP$fKZ&Nw2*|)UR(~DNOx#t*{p;9&eQ)w^
zQ;#O`b(=-P*?<)Lpz0dRCg{3km`cK7Y!HzMRMAo@^2r4f<TGVrMiGw5VBSwbNisu`
zM0DyspbB(qB0%nUkNWK9@cza3@bSX;@TsT2#HHTz<$!AuQr^JQjR1f8>K|~WqGEnt
zP2a<v)r;8L_z0IT@5fkS0<#l`RLq7fLaJS!+{}o~wyL3MM6JNM-IvGd#bG2<q0JL(
zSw~&K-@d<P-$3B+7b~sT6MJO?c#y!KHNW1#uebIN!0pE{PE<3FYK1KS0#j2HIQ5eg
z*#2A<AAPim4=%1^d9lKwuN2HfZl@@g8G2q+mK;BBB!)wh49Gq}dcRQtR6}dl`z?2y
zCIE^+v6WvX0Lijn68zEySWu#_PJz}$j<&?yZaVU)XTn*9kq!Wo89f9;$^Cs9W~;$X
z;9<3ixW0!tqOfVo29!oZ9>YQSS{kqjF3+Eyi!_o_|2+~`DC(A;ou8vZD>=OT<_Gxp
z8^4FG$^w>G-o+=6{~V4Sd;y1#mJw_Lum0&DVR`j^l=4*DAxOL*UT%_0UlqMkjE~GS
zu_Z5nmO?lmK@l37X-J7+y7e~%>J0~58zCA2MNhV_$=<-<)%G<o=N}OKnaA%%HsC$Z
z=Wji>yNG3v=yY8x_(i9y+Hw-Rn3OJRaY;_;rJ92EkUP<m!R?u+=W+6>DcoGx#KpH)
zuyAb$&0559@2)Ewagd4t6yQf8*B2lIB6$;}@lZw<vT=~PuCxotWIdgxr`ncLG7IU@
z?DCU3zjOyuEP(3&r==O?{xc$=%Fj=10Ll|!sR_F0pxjHx+u+x(!dP)o0)B{yf~bfP
zFobjg5Y;x7&q)dbNhLI%Y$(zYDARHICi%Qn*(YxLc=L_-@U1t$hA3!Yw6q`f#x~x#
z@c-ia&GR_;(dV&My@7?rH&Dz^OLYPz8FH-Ll6kL)vC(}@S#$*?k}#O)S*62u2WRd9
z7?MmT&}=$bT@O%iO38*)gw*O92>j_k_eSjRo%8Q;AW-|(EBM8*;O{W9x0jK1O&QFh
zt54VwX!6@6c^@7XoTJ6kB(O^9mkL}`8Lh1?S~?E)?VrZs!;@HFui(QER`KDb4Q#A7
zxe*6R1ssbn6fqzb!7C$<nyd;0)Sr*k05%>fdjad`t?9!mVv&D*LjWj@nT?Vv_CGQB
zSv|>8k5pFykVG#j45F?fee04CkO5GO!9<XZ2SB+jNnz&>d)$IU(g}_?kkyH#MB=jK
z(`atWW3a=~h$G{`=7xZm3lY_Gc>8q%|G(h60Xe_SbE297IU%sIeG8jA|DGkCLVkjY
z3g<ki-q7^!@?Ht!Won2@?n^_uRQo~MZAf(irf_YSnuw4pAn3<IJ)k)U+ys>J22$&7
zVDRr%N^dXVZ$Gw^ygWcMkUqH>4E))%94@7|SMX<K1j@pba&gOg^pZu`oq)K%y(_S~
zvc=Z_i7Cn#pr#tCnI^@YxU$Mny&6#NAWFp&KKCOdc;@*!u3y{4hwrc9=0b&wgAgI0
z@x(cq5D-U?^Zf8-S6#9NP;5b%cnsvDS57x&45Z$D#C2H>pzJ^fnv>G~O_3252Fy3D
zjh*tWcH?S^dI@@dg1VI$&5n|ZRBJWqo|9s~H2x`_fW><XP$E@Cx+`Uga9Ms>HYurb
zh9!jxFI>HY?R8*s+QafS2jBbdTX^e(uQRYIFGEgUb$q6bOm|!n73o!Q>3sY=D3q5f
z`%o$GF=<;+_bnsWlY;DQ&CqoOxLY%|T4O`7!vvraP|SnRQUS$44hDV<1%8uDFbMd~
zv4+iwy-Ehsi^G~|r%Bv}e17aD_*urcQ$1<Z-8^-O5QUQpY;08Ut#4oAqvmGEaOm(f
z=I2M*y+pO=sIm~9nZ;T1@Kg8L&4590{P-+RJTZ;c)oomQZyi@IZDDI8kTC^5!zpQo
z!TxTFUICTy)-#Aw#=#_ip96jfWU}7BCJb7Pr)8~!dXlH22m~ARlq#bMA0I&?v#RVT
zRRJO-B!$R=A<`qjcgp%cw*^;ad1MU&RXvD}f(mLp1=7K(_n`wP%rTMkbECL*>k|It
z|NkbYOUH3*=>uH+_&+mIbUo^5ME9z^9z1uC;}W#%)}vepE_t4lL0bGn#6guFvwVxD
zZ-7|?tQK&r2f2X-0xEwVxu`dN)EeN<!1NYmrKGfnWY_g(ui-(!k0HR{;c9ym3M{3?
zj+eOG`TSxp!LK9$Zn@2c|0Vc!Lkk|y_3KD1B;#F-Qo+O0(kAXKZD4e~fJ29-v48(0
zippaUl1!^aU|l7+vLo~3N6I7k@h^<w)1Ry1%H<7Qy0DJLn+^6JaF-oU1kzHDPTG;d
zxN<JWnl6ioXy3lh4X`+W+jFvhlJ?u?JKdEBEnNr`ZqF5tg;g0>#v*91gqEO^I){84
zl54A@5<3Q|Epbdhbr3}kzW4TjgzHd!K#I1Ul)Vc$f>04SO|(>B10n*RSK#`D1bCK$
zw1JcbIHhV)bf11!s(1+Bx3UM&8Ce40(r^^SEkHFu>&+s9<_?;a<H6_ZbG_{a`1@j%
zEq`ZrA;w<C0c5!n#r@0Y9|HXHYk5Z@p;tPgdA}?>Eya6s0ZvVpF)~)f&So72HtY%P
zY}fJbJJ)gL$|C0XjpOja8H|sY*lrL6WG9fKwl*L(>LKdY5T5Vj$tUOW<daiaT&mz(
z-&n!wGKs`83Q-5`m`yv%tvgV_myJF&SC?Sax0`;liYO$(|J>G&1A$U~_;dwdP6E=k
zaJYqM;y#m%)kM>2gP;AblkrL9h#{`7OVx!)wIL}6+}MQ5n>(JAAXtiFI7>T+Y;;20
zUUogA#2#6rU-tI3IddZUSb0Pm^wQ2KD;LwNCedI1E!BXK2RmqlIn+b4zHns{Q>5^|
zf*(DDztgdMLICW-41<9m4-EL_5L(R*W`~A<ndYBt@TQ;?$H$NT*l}FGvWS}t>)5GK
zRU8L}f{(Bn;@Zb|aO=h@re?-*=)g2)W=C1aB|AYFnn*rUiRpYBYfYZX!Gq)Y%YVIu
z-~YYqsBBZiOq!JzU6tr*CF;m&X(>P!`H=IqQhgP(m9|3@_+t}p$z+wZlT_8SLWKDc
zDgN_E4gRE>vHjeop)K{kto4{gSn>%d0+0YqhEHj9B#~VZs9Dz0u@2-RkRA@=_6&L^
zL~1UnKpX9!P|}MI^H)-UR_K_%bJuZ!P_<+;XP`1>bgYMF<e}1}BUFKcHn!IT__5dE
z@5a^B$F|A|o!Iu?MgsN>elaBY+h>$HCevQfeypsJBSTMFq)u`~^a7EIE(BtVTYusC
zqd0NAimTUGxKQWTW*r{2lFn1(O@XDw4J_T-z}Q3y`wvcF|Gr5S^Le%raB__DDo|N$
z5)AGvHZeWx<M~fd;2ZyK2?dq{MEbt8VL^%Zx=$YK!ZMFpu{!%nv_22BN4hbk0W1N$
z_IL6?xnOK~OTwe#bNPz|WhP!BN!8WV$DBvbQ^J-~m#NW+jOCY6KqSfN`~xx|%9;jJ
z#js16$@|j@Tj@2BCJNGnp}U7^*QRW_uAiN3B}Q=o6yg!8Ia5$jl~RFKE=W)7ZO`-h
zF$DOtu9^L9Uj!gk59GdqUknWXOesROttMZ+Lp||A+D{>%nvF`moPty+xrI6cQP9oF
z6Nm7LV{=%zxrQ4HYuMbZ^3a?wAK~^^6&K&x#z&Wzu<yVG9y>IRQn|?LM8c@4Je3br
zDiKCUb8y)psCo}eR;Tc2699E5iJotM+eAPEK1Hzg5c-b2b|(Hm0lXzaNSQg!&$vmd
zesIZS)T)4nnz5y7j%_YZ9G}E^%AKf6o4hJtuCo|rxU;!WeK|=W+PR|P{u=m-7$}!t
zA^|88!T(vrl7oP_|AO3z5Yz+JC5gARn$ZjR+qZtf-wi9ffxjDr9y%1*%G$VZvHcyW
zT?g^0oBAN@;;C%4qy<g7&9po<Rl=1zIsv^_qd*>k!v|(@<j@S(H@0!@`ZAUlx6!DD
ziF!a)Z5OVt;`Z$|yzty7Ffma=sC@0xMj)>f1XK##aLF_gQ};{Umgj34Xs|%8+K9_V
zuVBx=Oe4_LGgs;asUrGD=?Nq;{K;cV&MN1t|LL&6?aqGYRV1B1lXpb_QGErn+G`Jj
z%viABqh;qvxwBf|sJUk;t;q9B1E5^3%*nYtxDE(1<btIEiUS}CK+rxHVdSD3P%&6r
z)e(D;(wng+MGs>-oktVNU9M%`<DLfs4GR7a6YV*|FJnwk;BPqtzt<RH)IboB?_I43
z-C!aKijiu<Tkk9&Y&LQD&=e-8M%hKy3}ocn#MmgNpC856b_LgOtmD@8HB@#Q@O_U7
zLABPvjhoAuo<7P2D(n@_3z4ozMn@IEld`cW-8)gJ6%7_#xI>-Fiu9B22OAK2l=UnU
zPlp!TrFd+tXC?s3Pz60@JJZkR!1}T3D_X66l5twika_xv%8&tk{S-8)6AGkl8!cR4
zzfyBfdH)*Zi3DYOd7C-MRF^?{2H>L>P*DM+|KDryV^6`ar5mvq1R&l6&X1wOdj|)<
z1uFHC{OKgx2Vux5rvyZYD+24V8yNw(vbKpUmlwHi+`^3&OihjA$l+P++ds}?f1??4
z<BvkFh?9?x;P_*+SiG~2TQ@eawpK%}(S(=NVXtO>lJlBQMdp6AtgaS&Iv7wMot#VS
z<A&!Y&qM__v3*MskL2{$BQc>5+Qwiy>?DtlzfZb<T2hh~w35P>v`-j7+Sc?Wu-MdP
zRM#`$Hu8r&GHzMSEjN-ZO<hDZ-3^xoo}`nA0ktmr5m7=AOGZFlwsW#pO~2sBP~aDP
z1pe$Xdsq{&fACu%902^Cj&0rFvwMa^T&X~2WW|kZ34q3sby!C45lD%n)7R^(JN)zU
z)glfan!>>Y6bq2!G-6T@NT)q~a2|&bO=D$w8><^TIC5y3zt{RLLyT7_`NQq|(bUPB
zwFaDiR*5cdqP$I{pXH6W!iZBcfCjl;53uEN>7pohcXL^<hfi#QUIr5-YdX2OCSc}S
z>ZrqZFH-72Wk<Ai{Ioc3|7G8Sd8Vd|u#QF0Ke`aIHYSoJCtZQy+ywf~k{wGS>P7So
ze(?Z-zg_6rlbV3LgTEEh-N4_CfY|5C0)HEC>^z_3Icj4YC9qH=UyW<kku)F|g-Xe#
zIDlq=vGF2~pP0erOUqnmu8{Yc18;BF@Xp)U@$uz5*ne=G3BlO-2q)RpYs5u>$;mOy
zOi#$rVJ?8zx@yTopkSd5etN+sATwM&4ITwD9lmVeri$(};|#lJFF=yHYtCbXH&bR)
zqDWc=u!Qb3hSfaG^EL}HAtPpv>K-^8Ix$LWKCYdOir`t?UXuxFwKw5Ry5O;WPu!J=
zG65}*3daMmCjv4afFyt>y*ufa)bSi`>vtgV_lp(#LOtNAZAP7l&Rt3ezW3m79og&4
zQ064+K_@~4Q5CL7HTq;(ZezTXhc@fL(@!44fqfIWc6|klx3`qBPcSj4*PHm@{oDBX
zqb1Dmo5YbLGnkwzvqihnpv00e)$}55UnU7ao8VeH;i!J}$)YzHws4#7d@OADp)wGf
z$0Y-J_^Tu{P)b6!zOJvIBu8mtqQRepD9Abi$^E3F(2O-+&N(fTC(yS%7Kv6tm4=da
zYit<_ht~_52&d(lXft(Lb`JRnNzKy%L1{aR!#M%6I#jh;vr>Vz?r=ZB-+tEiu^o=h
z8a8+!kTuyo0Y8QWf5wCE**7b**~sNrYi^>LKdcy{w214_T)F;Z)N3)uMn~}cb0gS!
zyozhr*RXJH1yu?P@;wxbzU<n2V-2@&ZD4Y$gu{ntFgHJrLe6J3gU)H&^Af^rDdcj^
zYHPYB;_H8Han4c;G}jiL9)YGWs!X6viM2|B>A)Gb1|~X*(Wk9oL{sEPPF~dwF~WI*
zbUT(_OEFpUr~*HKZR+(U20#n^{GIk-nD784ZOG7NLr5*jNslGsqM`$puE9}&4ykz5
z*N_N6u%j{@(`#&S@MB2u@1jPxovVfOcT)8R2?g%{O~2spK(SIII$gCt@OM1cjj>f*
z#^|W07LXJTNtbUn!&IXR662|XCH0km`s5)z_SiHQ7FKX`VFTM+HD(&J{v5EjvW=DH
z9S$Mhe_$Mk4o;z5C@>M=<ROjaRM~6$MQQP~HN-{h-6{r1*)62|%f3CMr)NE7ZFkTq
zvw9+ye3T$vSL@YszP6JjU{18FRt{~zY3@QMK$)58F2WXQQ*KRb=2{z4d*nQ{aZx=T
z74Vb3Uq#qt#aAop+YEI0IG?KmRU6wJhHO8Lz1R7>fgeMFKYeWa^N`6vhFSG<L!J2i
z-3jmQ1pZdTlLQwvsw`luwy4ZoQvWBP{PtD@^;&>@(POT_5pUE}-jlj!r4n#^=_fvM
z2#+6|XRH6!tIJqfuJS{oxB*WHRJLk(|J@y2{pb$n=g0Bb;W><r7SK!(7^z-_Y1JU*
zV6$$~@`iC18)4TJu1Z*^dFe?(Q6pLCc!s1Lcn0yYU3P{C+oDIOx7UU~%NS`(04=Sz
zQ^3}DqLPo2>zhz$>vob;B<s_X3Rp`}CBXPdMKGjY!rX1h=k~ce@OEPzZXwrx@*csT
z{%UVhdV2?dw^ZWpn{DpwybS~Xz0T(!5d8M%T%nAO+5#8hkY&86^;N{8{iXL8F)~Ww
zsVW^-8IQQ{1WSl98jU9Bk{{SVix*!!ffql29QzMVaKVXcl`_hJ0;vaKjH@3n<4<3G
zk5hxm;w%@i{%u<)G-wjOs(#zid+8_1i(6wu>&+azC))ISeHxt)Amj4Qm6Gt@)U^}`
zwP}T_9<0lQC$q7DDII`HYO&8{gIJ{`Tb=*RGf;cX`E}(Y>l#U3Lkp3&9FUUW#j-Mx
zK8Alwdq5Ps+_0n>gxGGZaSQZTcTBI~*LISD!H*%ppE*wM^Y)}3K+6Jb|En|j@c@Be
zpR!OK!TQn-?9^@}@6iI-Vb@U37kKB*Wj^fb=jTx>=c#EdXZo=o&;Dc5f2F8gr=s#P
zFgZSknHMIoy|aUluaSDN#&ra#NhP@otJMZ>F0El^c8nJrm;SQKa+yxl23+=%(2{Io
z0at_~WgS<K%<x;ICMY(T5HyKvTg=q~Q1){*?z=?rSBAmFW|6+UC5juVBbiTf4?0y>
zy`6-<nRl3Y7h3kokGdt8MNn)alsrSU&4CGnc7?KMB#%O|gv#~~s=+3vatGA&h<jUa
zZR>KcQ+j&@e+GlrPbc0J37~E3VX~PP|NG1N^+qB+3IP^3-ay_d^FFQ-5L4IS7~g;G
zHvaJCck#w+*HN$6P%L@yNzYG;cxacB)X4*i1*kTW&lU0X$s_pU7oNb=&m2H`G>3XK
zLcK}JKr$6p=k=3{kv8+EXQ_)7nOm@xg%+-vd~c0W#y450)9BWkck64kKGvjdSQ2h*
z=l$!y_3BFZ7SNrSjV`Rpjw#@2#OoXa^U0dI`XjYZIV@!KqFma#_=m3bC&w#drIM@k
zXMMaL%aR9m7IKRympyD$@1P!5kjsxLVMFu}{=TH-mcKg~xd#P*x3dfp3M_sgz^^e^
zo|wU{)z>gH_9Az-X#|w5#<h5m&k58j0lxd~o4D}K9UM76j*};6F*`rT3#ieMEwF6v
zM*onpkBo?v;Bx%212}$c2CM5^SYD~&$iW%;osurOKEH}ZPB@m$64i6iz3S4&F^el|
zuBS-8oR^c>I}*t!DR`=gn2JF#m2(V|W$Q3`Zh9h8>agaQ5CyA!cOoWe4xhn$TDURK
zK?MNG&2;9~5{NG6m00n(#-g;|uw-NrQtgs7$-=tQu_0Pa97rW-<S_l%D8{B@+<g5*
zh#ZwBr(&q``E^}yt?RN2fO`dhE4;Hl_saQG@AIxj0^TF=cbiN4*Y3yKdRn18j^&lh
zxV`ahOq4&(DZrY?QLPZl7tQ+)f<}moZ!O`&_wL~E(Mde<<Qxth9Eaz+Xw;RP&$=UJ
zIzX*K<-r_GO-y5EQW6a*ekx#7CZak@m*2Dn0<8;c&Z;Ba%uel>vxMQqAfPQ`N(oT7
z;@AVF7t1QW3TUmhL)Bzb0z&e^BsB3~y2P6G*tKS^i*nfB3DZQxCStnyNULGenuqnC
zZMy~&G3`R7y&T@F@(MJegH_>(9!BJ1d~6!ee{mEay$amgei!A@nUpcH<9f5#Qu55(
z9#RLawEW$ZYrGfmXOHYf4%meN$jGSSz>lH8pG`=51%H+lp%02MI=vqYOMil#GY7{X
zMeNGH)x5YO**%8z{(M0i?XG;dhL0|<V{Ts=C!U<a(Z{A_IB+9kH9#BE2&gV~3!!pT
z4QVHkIX`ATG7!kPwGtrkW<qGwZZ{(WOJZh=s+|^-e6*aCz?iW(ec~=wf_vf;<r!MV
zLiLu``wbm1erNp*Z2Lj$^VhW(^!4QR)Bo~Fd%ntVFS{3!^kmIR{Yv5kv==~sPOc%J
zSI(KlCr-{|<wl5$?_R}LcnPy(&u6Tme!!0*!7qjYe=mmiJ&^zg0l(N|@M8$@r@zXN
z6tS~)2RAnUGmg#t6;w$LprXB;BOo~^b4)TLb6$X~!n3rvgPS)u@#e%WJbq#tk3UXP
zfF&;NUnli|ON*%tIL#efEb|;9tc77q>`r6?B>_mWR{7)=>(sii>iC^x_GK@N7V~`4
zjME0U0j(KoVgfYB)|_9@NnRw)vGqOZV+`0WQQwOBPyR{7bIW+C?m}{VRqro(fyRw$
z3r&3OM1@h$P~V^9!gnSxS(?Mr!Y01|?QPuJd<F1B6h@{~;n)3xzZ;{xyWr2hR&QHR
zp}?JQsP$$#i$j@5_Z{KaiO_T=6sd77FPE0q^uA+Qy!tL~uKy7Z&i(@XgF_K=bs8OS
zBAKKL(%}}=4qV?uWxIhlUcZTp7ngD9@HkF9K7#`XM&WvHA{A)d(w3;JT%WFG%Gw)X
z7o|uDhgGkDPiDEmY(kiziaw+pgzzve_FKj|GYu2HXTon~^&fjmNeXeoz1t2q7gN$u
z!rN0ePeYvSARf)O^}R_cK%IlTeYK+AmXJ(Bll8>e!$Wo%A0;jUc6042Dm$BSQOE7A
z?_lQevxx-JW@~9(N22q3+jUKfZg@(6ZU=t$_>Q>K#7qY_4qp^>m<Yd&F@uEnwsHOL
z*G)+WB5NkH2HxC}lely39f;)+`=)*l)vy8FAtT<2MpWT`e_Da&g~4L9>@h{jB@{fA
z^Qrkoh%1-ZaP^}N%*+;X{P77qc6bsaBNPQl`af0UlnpM~2TiT263Mky=e4u(%pKUY
z!Q4uV!kV=GQjk*>bB(BP&Kt84QieV!@c@bYOV7-<{p%P78Bt_n2qZXLpM2s(Y!O2A
z=SZ~;Hx$;oGSfa?WYpZaCVJ+a7WnN4<VcmuloIo~@>4a~z-IFn8jT8y&IoRAoP%5N
zQ6AeTufE%w>;ir~NZ@b#yoW}>{=qLEQ1DyVbsWqcc@lSST|(vd8V*nWIe7jwwwsGQ
zRo^YC6y8YD0J-QRjxmoo>Bsk_SbS$`2aC71@%@n{9DZy9$B$28cBaHeLna2~32><_
zn9LkBBv$@b)dH*_8B_d|EbH>K=HikF$Rn-$QGRYsLg*8xIaolFAU0*NEYEoY_Egf3
z)lbpJwCZwTXWOfyqZWr(wR&v#U?S4%`6nWRu8?ezKF$F$<;rB4a{X>C4~o7&<uPDs
zhg*PcqZu?1MRl%DoEK%RY@f$^?L8d*<X2i0m%+d<9w_kJu}s7E1<0Z#ea7|=2Yw6z
z{uI0HK4&M!?7<V*SiXfzi(kY3@t?-j$fr?>w^5I_*;VKuCwt^2;yEoGk^m$)WD74@
zLx5BOYAOEVrA^Gt6mazDI1U^f!}z$5Teo*`<N6Lf3N6s?tyEBdI&$7p-W4EhuCH}p
z4K`gCOmkBMTAHU!e^&c6*R))DG8xGt2#E-8*mxr8r-BqMbDcVw2~=u1-ZJ1N@eXPT
zs~on1pg(9Mrjia?vjFvcWyBwaT2m@^z|t8tXoYHB?jwh_oj0+%^%@QxI|bLzw=9&0
z9Q;<iM=w%99}<9`l%e$PW7_}jrh}W2yAzIqIDgw*x*aQ5+W5=?l**I1dHavBUAu@Q
z(?5rzcL3Yr8iIJ6n{(=>m$9Q``>6sCRh?BWsk!i_!$n0%#kg~)g2lxu3dL27jQH5u
zA@?Dv5T+MFqK{j3H{_qPOAjx4J>7_|r%QFH=sYWaU;D8ozK!0%#75;IXm)BtGwB+X
zGC0^Z0u6D}uhN($j8Tv|dy9&Y%poBjn#^coWJG&gEwW95DRo2{`W(B`68Bo9F3bUc
zRxLqztQ+|dQ3LDSZ(_542?vk;1d5}xR=mXBNa^h~rW<y41AjM0*^L<wL;%R*l0{uG
z1o+V(_%l*^J6*Tk)o0J8`>|#pb*wGnz_HI_bLAE;-2OdG6`sfJ=ob)rQ>cWi2%;L7
zx+aN$+F|j%F(+4DWmGmDa~)15;+B>OgAi*gAsY#)^mQ`Mo@<KHYoID2TXSO)o0%?H
zAXS{(bhkEKo;r_FIqsCT!Ad_?s7pd*jSbL*&8maaKETv2>pX3}2PN!P{A3FF`Xol(
z(c#8vB48UcSshT40DTVQfa^R`#S_{1Rfb!0MdA?fA_w)xO>9&z0$vk`Pkb4<{74Vr
z&srZ@tEm%!dk4SRBk&vkuitO?yx^_`fIMIAAj_Uy*U1i|^Jks9Z}1N`XUR<?jLqyr
zd3+XYOCMlu>21u9{3yoDpF_iOP>a^!#0_rLNewaCbx7^5tl$%UG8I`XTU{{_rJIi<
z_ADTosaU++;<T+#&u~lmS=Ba`c1t}*6$23}-k%qTwl8S5+G3<L!8$3kerg{2FH3q)
z=4=d*@;TbE`fSIrOpK-;p`~)zHUP_5s^bFq`LT#ETds49b#)Hr{80cm_TWVVjrtNc
znpe??mN7Q-IHqQwOoE5RuHY9#fWL>hnT(Y=5coUJj3YgD*VKLpz*GF#o6Tq;mkX*w
zI0cix(I@yjOuAR_cN6J%2Y)XC5-oGK?vUGB`5tBto<Oa#gQey3Sgl;Z{OBo6jC>L`
zR8b2z;Y2=SA_Uahiq!$){JLPL${A2G=Cn|`IuCIuMHCYEQ>xO10(jD+Ps7cs#V2=~
zyI}C^FVe;|-4R`HTK!LmLB<o(W<;a#8>rivgee<=(I@1L6W?b_NKkFNT4;}QE$Z9@
zO(+uSgu5qe(5uQsv23wUt`#RF9X}5dMrbq_vC{Ymjd%?s<A*Un_p|VlY(E)6D7TEY
zIuQ6VB>2VP;BU{kjfHST7&WU1q6OOV)Kl+fN&?-G8bAK{uZ#iF$HH+Z<Cyx&v^ah<
zZ>W88_Y3^(*V-NYne$P4HQmbg<|;N;uAwC6F+cW26pP2P6K|mrl6}C3>lV44wJ!H9
z34m$n$u;qHx8I~EpdPEU^>n){H8U&v&-4h?jW}iV4%t0epHu!&`Z3LW{D6b<q=Ty$
z>!?+>P_J*GwzH0~S><-$#(*b5)gr`OPeOYFG@#Sv%u<G@6uRxW0u6Ab*NZd>Vfn%0
z`o!HytdBw}<4#ePs&g`=j_<?{{3yqjotuqyRGYU@i*5ip7o!u8VQl;{ZZ($b%g|cx
z3oWq}_amR5e+>ryjB&9Lo`~act+sai==l%-#%4xa?A=v>Mk8?jyc_7{_rnQ(#if-@
zTOOT4d2|+A>$h=b^$#$<bqurPKZ;`h0CvJ{G=fdp=E^N_=Nl#jyvfC^E$2i|Su5xN
zqa;gEa(>&;Wf38#oj)hk-;UPN^JfrJe?pZH&?3@n-QA=b%Q40-VUc_eS5D{e+X+$0
zdGuV{)C0?gk!T*ei>I|esZ~JSo*J$;RmM*&IX{6vis8jM6h#4uc2KQf#b)DUgw8ff
zqjQ)Y{|rhavlc;7Da0xF;x22cU-08W0ly)ofCzHM$*!S5od`e-yyRTFc4qzY6TfoF
z5&moxH|Q<6KYZX%kCl%$!sz5YM#ko`v3d=cm;WD3=AXsf*pEXHA&Axx1e<WEe?4`a
zC(iE@0924Vi^dTm_Soq~sSEk1JM&1OnHU^<is?~ip(pya8s~bXcIfNK6WNw^!>o1K
zu7)oGQ5xp-`L%^IAvXzu&}>`U8aPEtM-f`;LaTR*=bW4~Qm#7!z65=&h=2@z5Gce&
z=K7815?1P$QIBuHFHK>5`V$x%Jq$q>&z2-36X0`qQ+h>*V+R921_VFHNkp!jbEBYo
z>6>r=x%HP2J7;v!hu$TC3v@Oj`-{8Z&<`f~+czzeE2ESvFfn@sW0Qxlv3ecvE&U73
zmOqP`vCqTxrm-0>quyNS7y=hX+5D1%hj_(PI3S%%Me6C~8=ab`Yx7z2OW{9NR6|F@
zNiJ+x1fq={4hcq0n=yOgrHgwSNkInFw5kM&Lq5q_kQRCUb?dpbWMRJ7UJGs;P9Tq(
ziHbpz66^I;pCR&)7h^;}(P*w<tMLJLf(1CfhmpyHn3?=}<Z`3dUC5i`XJD0F9}N8H
z8T@Vg+O~ed-{qV=gu}BdSj2?g_yS(;SofnN0XTK)DRJ%`U+Zll#9wL+{l0hL#}MFe
zKe`|AXFlMRyG4S8+<H@U$1pZ|5bG-+V&(StF;{*8Gvhyoz?;H$u!^9u#!W^&w*<$_
zvkor-q`lenL%OZ9H?S{Ve<w}*_I!*NUB~*Ve^a&ug;P(f9YoLR8k!)ePaMCHl|gQ0
z-C6Mgx{iTOGi-3TkJn;`?u(@35eVqgUB{w5TPi8q(nUdxz=ww@Ttl^a30sXTfFGbV
zHjn)iKZasq%6c!Vj-ZN^>?N)wy$(di*wz)$9sJ!v+Y9(H1o&Ie5XZE>n!ww%XX(_e
zz_~sNz`1i5v=sFY*Md(4O7{-_><RV*elZ02#U6vd_3Xx&L<`&VbC}upNd%21R+cZ|
z&W+bGJMyEL9Q_PJcZ^koTDS@?EW!6ma9wIKu6kE-1xur0Nd~Kk02}kH^c?~Wzh@mF
zqyldw7SwAnrE=KoAaP~@qY9EFqJQG=w`>VIwAT7wM%f#eoW5p429&gr%vYN;I9ie>
zKtQL-5FsMBshpV0QF^2B1c817^~M#fH9kf&UPoc{AZGS`3gz;A%9UXnct|OVrJ$j}
zk0HRH@qJ(5@4;iWYY<*yG$sQeNkQ+>pL26}GCcshr~qgApjyrQR<RgVgb<}zMumue
zz@IIq3<G`)0e%b#{?5e6*4w>Y4)X_|L9<rF%JQ37zIh&VV=tmS@&bfY!cMq`O1J~x
zEyMFjHOO&b5P^%hpX_#{^4F=HmtxXMmk}M+=g1P`ntR(8{3PIpYyi{@g|R8c|D-LM
z4O}Jar@4H~-&VaY<G0stI;FEK$sk3nSUpgYd3+dg{*dJy67LIc86vEp(zuP~+J~rx
zi^vs6F*bh;Bcor0>-mYrLNX&OL8}9Ce)v;*#bDr<E<iVkY8AJRZ_$pkXR}>^yLkav
zLoE~ns*<??cu&L#bfx9CiM39;s~#?P8`DopZ}($UM`seLE<{GMl$PstpR;|1T(O9K
zho48iR$)SL=k^<z8Tk=Rl%GT3jiW-GE~vnx*4bW}<I=TVol9Y{JCKaHDwsxP?-5I<
zY&!N$Xb=lkJS$yDP_{WQ0kx_sL#DZQvgtekLj)w}R)zE|!oao*<&RITDE+<Vv)ArB
zNpS+@Zsc|x@Wlx7?kGf9N6=iwTI2iJYJ3c@P{7#iQOu9Mz=TmhM@eI(3y(suv))fH
zYiai&AMAdfHul$fd^_;7$9G-BJ*pVVU$KZC#}`r9Sjg=(mX(1h(*U@u8}Rh$mz}d`
zf3bez#IO9B<9JU*0oT8>Y9{vzBx}rF%<Ah5{`O;cpL0907--H^c%)Fq+@a^us8zAD
z@;a6lzlquMix?mI6k;X>o2WIG;RZwqM%ZsnE<uyAuT%{kh(q}Ut}5@%I<ry*v|CPF
z{3z(ii%}Y<h&ZZ2phb3N?dQ-z6MHQC6>2W7^?XYb;9p9FPgD|ZRFq>m5l4aF`0HbM
zC?M}lz>BHb${IH7@3UU-<~$D6IW+bq<Z>g{bJOaB67RE~`5uEG4?Fl(Q8dTNIbl@)
zv;XwrFVs&XcF&srsQnRuvuDrB(?;<h#%}z#WJ|Vw!7uI`_&Xij^PKH>(eIp7yX7Cb
zLJ{)^pF^Ws!TQSESYAAjnet~aI`TY(H;ZZ{34s?D;gdw*=BZMpF=h+mqOy;n%pz3k
z05`v+G<boCl7uMhPvr~be4sQAtlySZNMxj7qWLR{z_Qe9uB`}w1hndKY)J>UionK2
z>O9H`3L!$W;3I}FO2~^T_I#3FU#VTfcKtF!r;75(0qooVB8sIc>tX5Ihw3?YG0tVL
zB@6|A@sNW*`M|aj_Ye86(`Nw*<3W;v&a&uGZN%q`Zm=nYGsbp+41-|nboLJX>3eJa
zH|yBch@rqQh5&zB3NRyL<clTD9eNgx`VQ7t-of(X_b^d>0aGK-LF8spAwp1JhAZ;$
z{1QB$h=He+GTGK#z)d6sYH-0Iqqu(}0+Mkej9iS&2%LCY;Qeohh{GlvDo;+|D-qvV
z^fhOfarIi?mg&QG0T7jLt2w<6&QXMeil`Kw3FN5yPPBtc?R{+3uOJlL$d{)vGy5#c
zBl}Z9X{~zwZi~J%_{9%7_~Tdz*A3#@X0zEmPkYXuJ>60K?<F0W1A?w!KXdcMiNE(}
zj#K<f9M>}gg8Bo0r?K6}^$Y&pLE9PpoyPP6{@q>}!;c>=Wu(m=_!OFrD%O_Y$LgK$
zV50CW#><~VDYqXr?4Z_IgA;6X2b-Ld3aBg=8PTYlk!-A~s|`~{T$yU?QLs!P@Z^gE
z2j(0sUaumgaOJpQnF}R%*Dg7oJ}a&CS``Q_HyaTI<+o?zAb%4vDmddPdZUP<9n`7|
zSgv0~HN1^nX%yr8A4hrgAYAfC@*~iMM~61IzVEDOXalNW@OK|8_9&&d9sIql&3?h(
zdCnyB`CiElg6%(h^^Kps`O-_VbLLEE{lBMr0H;p9;+#82lBM%?A@G&X#V50Fs2kYY
zZy-G`ixanw-{k>|;lST{p1puS`>xEfDrY~A;pd8&JNPV`^$Iptu3+`fo0up(jmeSE
zVl+38MqEd;v4Nnu&7K37T!>x{Zk&_Zh03iafkj>es!8Z$@~8uM+QonP{ScMSO+E*u
zFH83#;hq3Y9AAQ8b9QOu)9L{2qj5A_qu&$Z@kN;%tGEaehAUXDyn(IyN1SvsI(;0o
zW6vcCI4t{EReek{PKS5*K!6_|#&ly~Z3o>G@Y`br#MkN5E3dqwe9WD<PAj%`OguaL
zKaWgK<Sz-w-A{=@23~hNpWptbU+`zlrw{OVlSGDdDYcAM2{Jl@FK7l>U%P_J=536)
z$1pYW859dg(V%u@@fH`n@SHry68O0?e6Ik92m-mwI5jzsT&aYKL*!lzv2=L{o9j2x
ztgpj$%N&H%Y;L2`+(H=E0LrLSDYn{h$Db*bgb9Eo5|r%ZIb{?nGLK50H<z$g`v8^Z
z6$sx)dHgU&M;~L!M&D<W_#;uDeg9p-uRae1{!Z_%SMZCT!Jj%~hwFBCRm<lyF!;Gp
zbWX%^^A@(3pE!5nuWU=pP*#VQjx)&KPMvzmJ9q9(aN@+T{<i0p{y`8_0zv6UJ%GP&
zApH=6-`;B~)5^k~>uXoBv33<jF^j3vr%)=MMC=w&kGB!UH3-M&2t(KP;rcmFLdxaJ
zaNHc%0Sp_&ohbuwm6K^W(oW<MMGXXDm4C~`8v?r4=bJJVmm7#U$T?#uIAd_)5J7Vp
zmBvSG!6$=bdF%kj#*ZRjm`L4Q%9v*X_`wGM9%S|17w|Ko4RZd3*9_MG*}3yS{cERA
z{fT$(+?U7&gP{ok*#Uqv(TNj(|4GO3zZb_*UQJ2dZSbeR|G@^oJ<ix#i4ert+PseK
zwT}@uJWQ5ez{JQi@N&~=pvishA~e~;PvDk;MKURdIDAv3{c=hz5dpT=tHK)0@nuw=
zE)+_^NUkU#?~WiRJcQvUD)p;auUteRHc?{GA5)Qe_MD9|&wexgfxqQ>^#T55+(QWd
z-PE6M;Fq>Khf;u>5rP-K@tvQ%s6tD-ivJmB>%5&lecC;H_H6jX6TkZVu3P-2FsOwj
z1!PV35%^mGkoCBGG%lIs9=X4|vxfEcj}TP1G2$J;Xz585@`vEKV`vI;!PU4fUZl!o
zML|uThY1O_KMN5H$?0`M5dq#4Mfgq`d65UA8XApdRGQaN2^J7I4dhFc7#%%=(#X7(
zY@`WQyFUL=g8!~$_1$&w(;5kL{+QcruK$~JuYLJ%o<9Aud-m)vcJ%!Z)ErcY1PI~$
zF5>vFn%sa#;J;hohg}j(Nd(1_DgFtA0NYy&SlswyL>mFda*v~2JceTKAcQC*h?=NJ
z5keFY#?<(feZx|$M-HyYA?KEmqiV+@Kp3v0+PH$1`VDM1u5u-$!pJ-(N1sBeG?$vQ
zvEV;o;KvUV_|X&iIR{h-5r(z86N}#<lK#|F8F^j9N&s>@?E+`RPoDU-mt8l1Itc3|
z1sIoL+e_<qW7&iw`{C`ffZ7(C{n$Fc?5^|4xc1<d<-x$;MntTty|$=L-h=I}>)77B
ziKr2v=+9v!cL;fJ9<DP6;p9}nPXxiKw^TW|jv(AZt$7EP<^menM6NJ`;>doCln<g%
zm`JB0t0=>66?IbY<$i#F$b9}?33p%M?{=PEz%P0MKfM>l{Wt&3xz~QGFYe!GdvH@L
z&<UIWBy`-rNaBFif#NQK9|MEG)3FZ&_&Xk(r~}4xkjs}bl|PB8nI}=NZKGPbjg87>
z1eJFYh5^?pltDb9I@IC985Cqx7@=NyPoh|yfkVMY>bkNtf#LMF*nd~SkG%wc`&l1c
z@S|_=b3Q25{tIgjCyx8({uyWQT?#mH;@AGU@0I?SFsz0;L!&Ps^$dP7F!(d6>rmj&
zp3mI?e`@YM1eCN@xz%4$-4U_{a5f&D%7^3nvK~R(e00E%_8vKd%~|w#Us>lII;A)L
zxj*oCx>hgXm-`0?zvvhITumkCPq~fe>TjHT?Wh0A>C>@$_N?fc`)6FCmyLMCSH-hO
z>f?<<^qvsTELCP#Rp;&j_|?Ayfq$3zJfz?^`z2^~zzt^;X5N=xK$=<T+JE*d6!!)E
z?c@3Ze|r26Hu&R+YEQ;-`0)<>7rye9AKgB4#!l?$ZR=PnsPje_cv`%D?KjtAgumiY
z#mOYvs2A|#p#gt-*Mkmz7>>>EKvRsg{d!uT*VT&YuXg%982Ir+34Yu|@bkL^BG)ZA
z5gPyK{P`C*FI+ggYtYXg5dhkLF(hNdrAxp4av0UmdTz;!W!|SX(GK8OrK<E8^KbUC
zW=#9BX1p2Mb}n;p#+c66O~!Qrzd0g%KH93>bxfz{&?eUI_N>gkrpFj#p}8y3@mTv>
zJ<qx2*g@x<elP9RB=t@*o{t%0?{66+dVepXbxeorX5XX!Xeu{%dk&(@vG#ucH;x0}
zpY-a@&3|?7{7;{iqJQs(KYMF`%6+N=Pd&9c5ru`<gm8|<af2FBrHD%ErHU-d+J$Ob
zFSYg9L9G4VEUuYzPJzFDadbUTrb{XNbK7(1+pyGIwq?ip^z~j^#&mfvgU#6<Cw6%!
zecYpUY%lLcbU5}NrSx`O1LX7f+>#qbjkmqp=;tRsd8sBd{`%+sLr4HT9lqd&3;)+D
zMEKXFsL6(<cyGavA;6FO27Wx$;KvZ)?{v0D;2#$JT<p{FMU1c#hT&iPFK>Nn=c%Vo
z_pSHaTl<^qdwba>mEh!wfB1JCukgDOIih8{uvN%K3=aNep$!6lao@n-7Z+_gw*7j;
z0jYoRXWx5o;NP1$x1O!r8rb!{h=-r^Lx%eXu2b-XaO-cKd+p2rdJwDs9!dauBi-XA
z@4XLx>uX_D{~gaOdz4OQramb6#Sq{ZLxA6&bLNPad+PM!Gv<|be=WzhUoUIUVhHey
zA;6z~Z1(&HpY!hTBz?~A;O{i1(>d*9dwh3&fnW3tetQ*Dl4#DK@`JE)hQR-s&wSS(
z7W{ie0BAcCQpVu>@Bbga8U{OG^SrX37zM?k;Lk!*ui($xdIf*hF`X8WJ+xmSwI7>x
z-H!VP2ETpU0p`35_`6#12LeC3j_nTq_Oo`Md#~Wf5a91L=kz&KV`2opH|aN;t6w|!
z+E0CzGW}kE{j-#=IrP?P1_Pe!B|%w(Pd@RFf7kU&e<uicIBnS6&>-ONvN#@stiF!-
z*K%z4arYbi>feFDe>cSbUcukPyF<pg1_3|+DFz3>r6#w5pVNG|zV^!bFaENu^3%V+
z|6ULP<r(-zhav@^{G=iRLA6PhsXH$Y^Y<h0?;Vgb7ve(z{$$)h;J2^$u!EnsCUJfZ
zei`RKxW)f2ssMVUiM<?AxbVgIf8&?Kpz<}}A0hDTN|O&2_&XhIcJ~XU_G2GR@M8$@
z<KYEA1_wX(6#P_rSA;o#=B|SOE)W2l2)yJl5eRpF$8mBlhp4vICx5WP-<hHh0{-@6
z?*@=EVca+P#Sq{Z!+{?|fFDDGUkna@F(ml)Mt*)FeBrqTx6$1Asuuh22Ket10ica0
zdL}-N)9!_f|NE~-QT>;N@I%M(-I%IU$T1HA_%Q_dJDjcW@ZLedFNOktr(^HNoXy_O
zAbc2GbnC5G@bkZM98i#tKyE9FYJdBc^Iteaod3)j)&K1-Y@Jxno^86G;L}h1uRjjQ
z{a22gI}rrckV@Dm<u1B_zvBab2vT|<R`44!e3vmp&bc@6x1OmxGiZmd7y|ra2=I$O
zIKOP5nDZyxFs#4P40is<KYjhn-y>JwURnF^8v&s0G+uVkQn1j;e>Clg!asL~|4XtE
zWk6m63Lg|dXy9*~`@;nO<j(=-oLv541V3#(c&zp=u_qRB6gp19bDRQ|aQl~ackv&*
z`s!cU>b0onLqPy&BX!^`&aw^Q>68E4F9{)j+j0B@VN~O)CaKCoUBRE8c7Nb+9rpl(
zU;P>g{K>C}5&Y@#{ei#JwH`R|$8j7-ju5WzjU$L^mqZ-A^vB=%iGNGq_FL8Gp&$Tu
z0ujXuJa_!p=ED5gKNWEQC*iocC~8D(`&6~A9)bUUg1>cK@8EAA_waz9HgR{s&;4A9
z+4=4$!l>F1vHM#a;m-g0`s+WlvDZHS2ao{B&8BeAoqXw;(D8oD5#Cn_`%zdYOK2dd
zy^YELZCTWvUQ)&)Yg^Fi@!2md&AoRWlUih*IDdyRt)IJsXqP!#_uBWIy8?gsIk(MB
z^f0E=c|`B`*be-A9NUkidRr)j<N4kw!jOQEuZL0a&(3}KOYhuku7BSNfZSqn8fP7{
z4bWfDoc#5lfr$Su5dXaE7IINkM-+uz#7=N^3oEy%3#A`kw|w})-_x}oQ1I{iULG3o
z$5f<^3+0d-+;d9^!kvZ_ix%KhLJt+xxp!Ru0U-c((~++xV$X9YfBl)r!QU6L_#YfM
zH_tulBI;BVhJu?P=n5A$!a9N9{;q%Un>{~l;J2^W@0{&%KOEpsdUC^I-JT9~9LIIt
z5`Pm$wFL<8-^M}x|4wuKcgbD8Yx9mDZ~|Z#8>LMe3ZFUl>+>kOzW{+hk2w00>*mMk
zwNiU4*}h73!{oP3-%uwM+UT=>b6GE~^>t<uh<;yw_Ob2P>pY*q2tfMS{s=(!vF+FE
zcg`8(QrGJ~w*8v+g?f2+9me!+h((6ZuZk_oM%)B+`H52Bh2uI76<f`5<}S797P0$^
zK=}XFJ@4PW`sx?99wgvDfCNBqFFB`AKP_y1=-Fp~^N<tcXW|$?5d%MhIR2#T<Xw>C
zK)O)5gDr2|@+u}nOaDMhcJB@(+48bG_|2G3=TVC(sf^YBI#g>-Zs@H)r_P~hpt+VF
zr^oOjZ5bm+8Lp_unDaVnygoMhjwh?T{F<3{dY(LjI}o+Dm2L;Vyjsh1;>*ip+s9-R
ztz?XKtho&XYGGHe(dV+Sr$4Lx#Miag+HvxH2CA-1Ez`rORuQpt6(atQ5bl4BV*mWP
z^Di#wvy)rzC(peSoq0fj{{RyJy~X0xsjs@!n%t(AL_t5iaN~(cL?`1Yd@e@#oPaYE
zBYH~2jtdcwIc|X{gE~SC2>jM@_A1H>@@YR`XIn+@9JD{K-|60Z=lbpQX?X@pRn_2c
zBM@z~$%^f7c@Eu(WD2yM?ytj`w(Dj+*G^o&b-#-stb_t$Ge#Ub!n=StTo%H6%Zc5$
zyh8rF<NH2$)6UT+tNw)x5cgBZe~1Zyy}jg|It6EL?&-LbrSvnO`OWc0BX*)l?DM?h
zKB%5}1NT7L<(Rf_yk5>vV}d^BLfl5*uDk2V{;$!`Gx7R9#OwQ+4=|qr&foP&H{%*%
z0MDJE#;CU=zj(V)twsO!^`F_uI-D33MZKIoOLnaXi`zfM1fad{0I3N}OYe%gb5F--
z@!;rGkG3C{?Il)KmzHM5+}uyb3h=UT+e5THj0B*=raRevm5Iasp3S4}2XA}o?CJPS
z0`Lb@q<^$M+8%9>wny8e?a}sVd$c{;9&L}dN86+A(e`M2v_0A$ZI3qC+kXdXB)5K9
S6XJXT0000<MNUMnLSTY-Y|<A1

diff --git a/apps/desktop/src-tauri/icons/icon.png b/apps/desktop/src-tauri/icons/icon.png
index 390285c04b37e35343b16f30479d2c032cc72faf..a0e6f093d0feb04c0ec6477a9849564d2408e79f 100644
GIT binary patch
literal 233530
zcmd4&<y#zI6EzCY;4-*NU~q@QCAdQ%NP@d-&=8y%+}$NWkU)Y4hv4o`fIx6}cbLQT
zyU%m3_fL4g^z@gWu3fde_Nuk2BGun3U}2DB0000iB}G|H0080j76E{U^7?b-HTwVn
z0su;~QXjo?j@nQ&EOk6MTF0BeIc-;tn|=2!U}RFFi|u9xryweVc~D}w7lhUns-Y4k
zHjWaME?y`UOu5`B77*bKkhC;7#XW0kYd?o|#cLdX?0!=5GcgYiCyNc?b8lpBDQRgr
z_)~H4*SD(e&tFM$yP`z-|G&KSUkZ{g#9!C)O?!P$Z2vv2NEgc&Al*e8oPzJoG@!FH
z@62`<SOGGvx83QosCdTtqmLye2MbX#Ddc<aQ-u8A%KFtHC{e+S?hlpEAF1f(TSkBx
zrh~+kvo1%zw}Kr3GgEzZmse6>(*SlkM{7*aR5SnQCDV8C7^J@wf62aRZ%1_up|Vv~
zaOv#+IT_@P%`;=?Cnnj6>N<!XA2quC7iex0mIM{SR@}5y&<FhI$)^x=ExXO{QOyU}
z*ME<e4_8_^ZzVdO-i_z^?HY}%I{*7vI`^G;*lqjIb?6(x?_BES6Y~GpT6apm89`87
zWcN<vpL9{zo%c)a_clJ>U{YGDb&rl(REi0=ob3a1A<If{gB4fZVZ{HR_lkyhS=>R3
zAetxK^2WiPRULajlOk1!8oB^>E;}lhBpnx^lZGAX=v2-<Pn5?!&uMN+awgts1n}#E
z6*rkWTZ|J;>cf3AU)rgNotEufhq5VKhgB``BGRg#pQMZrf~oJn>-`EBDB;p1XL|d8
zpA!asTZ4uLIPCQW9-8?{|3zd|#6}|(LW)zM=?3_33YY8atOu~kGVp$;dUg^)d9_#m
z|Mioo!as><8d%Z?KHr#?Xt}LW2SHuQ+%g17MG{;N*>544hyqS0+;m*h@nWAf{tOk>
z9P_=m|Nk6i2n1O^J`QW!h4&QhWQ_@9-vKbM<uLqtjR*c3`HS{gW(cy{=+uY_dk88K
zy>9Rc$p5vtIcj0dW{~W!xzfxD3#qwZY?qbnC6pCF3v+iF7mgNfcQQaOPFl|%#JSmd
z=$|HGjZG%A119{RZ{$2@7)~nhPM0p%-Z@!qh8^Rbph2))U;t6HcCmIt<LX^I;Gs57
zB`UBhka*kl?w^7^dPcueR2|^IUFDS)tnO>I%NDreH*~<uIxm|`QfX}AQnnld1E>&~
z3ZU+>$&k8b5MeqrUb|Egf1B5Lwd)u7@L`Sbz5f5VZhW6F5^2<WdTXJ_>~8<GvdL_6
zc-pY6cZ4jkiGYC316n<>_VFJ7b2V|=_9XvvXkcqgNeXI0zf#11R?N^YKp#w62#)l`
zFS%{v8(v(;e|?9zGThQnY$KHar4<Uo4g2IS_qh8JkO2@h%>bPl=++mLgc*5eW*Z1=
z>o$vd^Uo-5X8sq%eipJQ`IXe=?bpA&%@zLccQCzm;fVBg`$e;h^4FvDRkk>zHrdYP
zPh5@OPDcd>C<_QicJODE54<d5@=GK<QG+7(XLR7`q*a=gG;^`!gGllDXb_6>Yewp4
z!4vWDOlo<5^gU7P&q+Op@u<7?QjBYGku|;)xcCsIVBbfI<4RgbIZLkbG!`SGNb%LG
zcAn2vOss`$!+Xv7i=Y3E*;olr$VJdb_f!Kd{~~9n;F0p;g^C|3!@m0Zj7|7|RwhIZ
zt2|~)dvUQhqfxIC5JoL2@8k;@Rm6nxO$#v;BtM{Ak1rN3Qkwi~Fs*1^khiJ|?8fHg
z4bHK0<1@6zUE{f8SpHtE&!1)|x>I}a{HJi}bhc+xjh&ClK#4nn7-2$`S!w1XZ|?q_
zjW<BR#wPgT!963E8L9DN?K^sxB8p_FUQsKclfJ2|vzKz!eGa$%DN?4A;5tv(kTfSl
zUw6S1ADb<9M)beE`#!K&jbxzmEO+$JS2>GowI%a4M#OQ&wdS*K#)9etOww;%wcmi|
zS?-E7O|lDgG!Gn>e|C7ws@_a|3QF!%DHFP%VmVEOi)|i5%m3)dUC|XsbjDv}aHG&L
zgt1vUER*|N@NxCE#C{j98B!osBGp6bQb~g2u_DSN1L|0C8#yAhu^h(9yZ>Gzb9*n>
z>D*K_pX2$iQlkbG83(k$36T{y2O|I5Wh7o3Oc5P|o_}tlnjg7p3;YsE_$Dv1Dy?MS
z6+huJ4i~mEtvcLnMePlxkGhS^_Txh`!@>I4WwFTIZ9*(@?^Pq4?-@R(dpS2lUdAh$
zuTMcWmyK$~)K6p2^}bF&z7Qe&D-7a$IW<?E*dt?DbbpU~ck;b$I%E^E5;5arycIy{
zLPDfZlL(j;1(*r4g)E2#<#}#5-Jj!7p`(WVc^P$SJ`E1HDH#%Delt~cZt-90?#C3k
zM-*$uYHRz`+@TNA?qIqynr%DKWRbAX{bkN(BHYqNw)aMQe7tnOh75tvj?+fwDiyS{
zM8~a5ENX)UIb!sTC68mD*f>$h#rIq}|9Cmsg>06&eJM!D1^=Ua+Ti@=GxW*<H4A6u
zpDq7va7kz<ypOF9Kto@nhe?5PxWbx^a(e3C_kf8M!enO64pF|4#|Fud66NEX@_g)-
zbg}|;M7me$^>y4OK6Bo(+LUuv{JuInx=PRccdJKU;#0&o{d!bNA$Of2kp1pPbx&_=
zA6U2m;-Mfn&Xwz2Z2E0xwe9Tf$-7ueDe@!(*(nB>@WYU53=6oJ)W5*GsKSEYfE^x0
zZTJ%14K0W9Cb=eu-In1CeC;obzTJ<fBBbQ4x`SzNMio#c+=W`<9n_^_H@dZR(^jyc
zrVp}f@H_jyGx*KaT#q1@(RGmo!{~@H>pepU=^2>Mln_(W48U9-$meUPic4xQ`I$7L
zw3k(?NmVxXJLGHX-P*)I2B!|Isn20qI060_yuOSiJO1NdJ})zOzi3l|-xK>WY4O|I
zC51b_)zqA|OlU1sLaz?63{bQ$M|qvxjQw6F775tC(42Ab>C-GjLaNEUx?rPOkZ8sl
ze`1w^9kP)vMj^qbA=Ra@ecgnx5bEZ$Y^?=Hpf4xOX5-5Z>t!SSM#N@>bIB-6T)Qfy
zQ1E!%<Z&-r!Rg^}jI9BLhc7jhm!wXv=G$i;7Vzhn%X_QCw^$RLTW+}vUl?2=fV3gz
z2x@KPLwGSd3-3X}FY>>bot<-^96NP;iv_E;<w;w}I-KYKyc}0)UqZ>riYg4rCFF~o
zvtI)SlzKrdj{frTF4Ux!R(#f8J9|^+?dY*V<>vba>UI)oSxw==#7s&qo{U8yPa(-P
zPCyigDJ}w?USw{LtoSb7DLc)F@-F6<HSa7UB(yQWG+s3;@nGr8Ql7t|-v#s;QqHy8
zZEn&`KPrET`x~Cx_~vCLU7tgcq41gMA3W3IQ0LzQbbGVnUOmU1<?i~F+Y1ec(F5Kr
zD(l2w#E+2=IKzOkg0X`l$zd3{nJ^QDSw{?B((cC<zecaUmo#SVhZBww6GM3KxeO)?
z9we5UX}U%%md_Y4v<l%RWog^m5&yF9KYGhn@qK=|`Mmf>_%}4FXHTl)fbJ?%bv%#~
z@qw%t4J?4LfOz%}X3I4xLai%`DpV7;Zkt<(f{4PtAWVR=oyQJl2bw8o2n1WXhIo*e
zxl?iZ{L_E&&4b1^??zFT@W0h-Bxh_eyCtb2>p0PgzDFo@667!0r-zDAhZ=?*pDezh
zx?t5NB$`je>S3QCko_D5b<z{&1NwOY?t7^yd(ugg_2f<8qPV2W-$^6X@HU;OvNhxV
z37ulUIbl9|n(^z>=nb6hWQm3U4}^%WCU=-w2zhQUjR+kk2RO8IB9o9D`xG|&Y|#EP
z#0uSI#U%~o2*eMjOv23uG*Bcg(YLyyHzM3wfsatL$^wgd$>MUxs-1JpR(QG+5bvij
zgHaHB<>%kpA@RfY$SJngx#p(cPHs8Ff4@8HUlp7A0-0F!D{Be;<h^=bI1l$Op0r^7
zz4VzfKM0b28UCf+YgzaDKzr^}uKQOjY{xTPBtWAo8a5hTSsABYU>ER1t7D7q0e@=2
zPxL_1p5{+<X#S4=zd|p$$`<DCiw|t;Ua*!P1#${0!J49iv2gSM5Qk`0a!2sDqj%6^
zu%LhEr*ZAeFCEVt|D1QXbFoUbjpPUklB9${t%EfE^e)()0`Ees(DMkllUTCvrvcSI
z4Arg-31y12z6{p$h^X`2DjKK<_(-PHMnM#mkW!iADiNkdZwgw3f<Lq!cO;FQU-O`1
zCe49wr;emO9IQ9F{<Urtn^3Z1TM{v?@x9n8<-<J?3sZS9Z30@G3HieZnwocsP=fN&
zcZ8yxX@(M}Mx~~Ys0HW?5nvcV10uu&ktBoyWNRDS@d@vSK^l^?3lpR8T&h)U^6$TU
z{$Bp-a*O{;3$c6B*}QsYQ>BaD^}Y~{rKA{MxucM4-&QjiTeOFob$d^pm;eL^CW|uP
z?hf<FC#AFwcFk*!phsv#Cj9sd=ti+r3c>>HA=W&14&#|#>W6iuq7)!Nc+o`bhr5f8
z0&P<xzkZLgL-L;fAn5FpAlC*F8kHs%)sd?HxZ7j!>FKCs6=pOaC$#c(eqe8N^ixOG
z5MGG&>=0(xR-w=TIqTO9{!E^m_y`xp^5c|B%CX#5RN0E*+Iv?rO>)z?3$ubKj8W#`
zz@)bfP}-M73NR6pEYj$YDOd`Y;(K|ika3p~7q3-WMCYdpqgLa$oUDG^e@U(lU&7O@
zN`J|SU?^_F1^z=9x#2^r0`L5oZ!aWR&tgwM@$LL9O#L*DY|}=R%iMXbZ>s#z*Xahb
zj_g@r@47)tJ=zzS4U@7YQ%8}-ww1?^##)>5Uh}Q(l)<E=B7pePlYj5^!*Th%+)L|Y
z8Y0HJUYbS_cCuq9^X9m$k-bm3BvEqG&5Y3AYkze$Vg%}%9(@1fAwpx(=W^Hq+pxxG
z0@*$qMvh)RV}Fu2l+pC%X=Bx}OUL+deC{y4qrkLMxC48F2y&sPKb~I)AEjM10VZvK
zteGE$D&KuXnp9pBrH@6`1)x!nvIb$W(HTfip5158lbj{xEt$SoqpEOb&V7t~hiY;q
zGBevRX@{544_D2hf@Z#Ad<5kevft()E93ibl=9H;Q#loJx5sYdD-ZU3(kOUx_WhM<
z{oAB5QC$^Z@%;)zobl1)4;hoTpmM`ZnyL47dJT`}?kIEx;vZ-y$Z}eG0i^O-omoGl
zbC(Ha&Co?D5M(jv1El@{c+$wRCdVbE&}0ac{3{?|14M789?w%(pB)D;{3-9t-90Z8
z8w2h;J>iwwRU;q17Uy=p+#80qecsscbZiuOw)1Gv_~)AYY4z$*;FcSQP6vfcH)jya
z^8v-}5V(Tck3wUm=L>)YJ*R`W>0xq`qk&4Ah(e~0Xc6`aQiv+#5!T<$i2M5#0*;NB
zuTxuA1$hj;@&gW`zpZY3p}&@GqX@3)UcEt0#{qaP554go3PrNXAYnCv@KY7Orw42Q
z$`<=I_T8h3Drt@cv^fl2Y^B0`1VlC-r@S81oNr8hcwJYFh!emsT%D!fMe@c7Nf9<Q
zDP##W$aAQJq<{Z)2%>^)VEy!yOr-rkJF~Qj-oFUR{sNxJMxZ5r0aZH^Pgl>1e50>d
zB%{UfTWB_>eEHjRckvs}5Ax1)PKzoY*bbC{rz><^j5qhmxv~-ik(|`I36&zhwb$HF
z&!s<~`}}%&Gnc9D@o#6a`5r2?HcnggwQvi^Iy)zUFw+3ht^#0@a`y<#jPEEps6dHS
zlH~juO^6A*>RPB~1ffKm){XtzmikBm;pw>xH+e{Gdi>4N=v@9$gjnpR%5(0-@3Bw;
zXUvm?>D5VB{}l{g?Vn#VjV*+3hdV~1)&=<;+^-{FYIBSXOgOUICF$vlx;|bAMp4Q~
z(zr8j?pTBKpIvikAV6b;3pzgIok0VbC4$u8I)5>mgS6h5JBt|$Az&~gXV)<@I*e>G
zNyv+`w2rjD3{P8@w_5oU7n$0nh!v190r=9|pv@p*rBi4RT=%VZ!`?Yr2zPEh<Skgg
zZff02p|Tgd{s#5i!gMyNoO}O+799ArznH@<px<QO7yaVRP7YN%wykZqMm$P~=OX@Y
z1t<x02os3*&~S`fea9Ir54V(a`Gd;x4nW5#2~6r284c|vEHVTnhoGo;R{@iP$+k#v
zf#Tl~C^hB~^;KO8b^JCOsXITJ<lfZwh#}7#=K2l$?%AAt4cIGlkLHg>$&ua_k4+|E
zL4D;Na&dT}WuxIdT#qoiu$7Nh6SF$Ed51a8$NZ(?N#RN2_jZ9?otQZyP~EqrjRMmf
zx<9@QBBh0tyAbLCQj>a{=pd&1^v<p<v}#~lLYkr=Nm{f(*vlKmDKv20EVA})U_G7W
z7|M5LlpXesDx$7nkYy(gBKl-#6yCO^f*kCdsYCGF>Kq<voIMFoy2|I@^OsXVE*rt@
z>#xlo&c0(=Y^&MslwVj~5SSCEp|e`<J)QRs0?ti#S3gg2TG&i#K9_5+x<*=c9H?Pb
zkG!)Fb0%azi$S+`#V!L_$N#t&PlR8UuYOc{ul&-&K(}KppNx=+RcT5ojY6I<Rdj<<
zeQ8gVtWnoRiK*cNs=EJo-L!8b|H;{>l8VEMjbfCy!|&hlh<J;G`LlA%JpKLQrW#!=
zA@G$;*bSWJ8j-)KdU?jrzJngb4n6z~6dS*Zt&*e5A2)%Ksc=8Uijv6Vgty6D90_1O
zVveub&_7WjhH97^X_$se<-$Ahx_S$cevaV%451AlDje2zL=oyetR<@<>*qS&U2w#t
ztb9i)f_){2qOIe={EIBV1l<nxAWn}3)6T#&X)sV$9&#OqpbUv3!R@MZtizsI3qQR_
z9i@sg)F>xxmw23XhF`uozZlm~c}dX%TQ*B{RH$zcUb>!Ex_DO`1Zqz_3q%^NdTzP=
zwYu8(IP_%KX)`i`Tp1tpT{Sg3hY=Qu68uP2cEIQtHr|p4Zvgg~`K)mfV;z7=ZygJm
zuwpYPf;__(*pF+PH1Yuu^4SPY;})E@8?v3@b(GEjw3PRTa3DU*%nYmpsd2iLtUjGT
z$?#t5Q6RRa7`oK3g85)FPB6#La7;@>UP(oBs1H8MglUn>%-dnd%RK(W57*}}?m2G^
zjAO0h?^aUO$x6BTE)4Y^_1^{_VKcuGmO2f@YH9<8;>CTn3gkx#?@@f@>gz$sI7iyC
zMwU)jvEutUF^dNK!7UjE#KuEW?GMN3yl#`EP8XUs6%s`UDaB3o$!(1ZS4(4dqjyEu
z88Mf9K8nEr1XBhxN1~;wFo(+p0wxx4-7%XU#h}rf@eiD=h@rk|c~99L{#Oppc_zkD
z#%Q&6a~uSFQ>nBAtp4MA&)JnrIbxe_aXKptIi81`1Zz5Qzo8r<6R?Xz^@TTt_K8e|
z?4@+eIbKpfSmeI2)aIoIp!A@^|2U5f_`!*!4=ZwlqIa@`iNSJjV$=cKH=-D%!4Jq-
zWu|6`HG1Kt6P=^VQ&}7vOK?aywVyRBs8y5;i#R83M)Y(3{Z^ht&DC8AwiXjp+1MX+
ziX41HFbC@Uy#F%eUF6fEl73%s;?tP(F>fQZRO4%9{PnTR7f0VW<Vf=$q_=(8L?<%0
zh@(f}cM21rHGfo+V}J*Qt>CRC@j%{xmpG?m4~%@I4cwQ@Z(ygP(|?Bv!6N`hBI1$&
z1ik?nH)X-gGpL4HGZ*lE6c-nLb6k`#;@t$nl0a!dTB@WlYUU8kRbRwZGD!xP0rFEj
zCA9)bCVwCmvn{;*cu3tJ=$obL>r(o8_2L8kspK}`1Z(8F#Y^0&=7W)!PKnyOrAm2O
z430C~C$BkKr>8e$T!K?Mp3i=aXSc2NHmCj-!76H)H2iygpj~hM^LJDjDopTEH2Tx{
z#V0+*i#w(bYJY}ilZ(oT<CHl^?QyU<uPK-o{0-<K$wx$^KFx6lApM4ZV8|uaf@#{0
zIpqj*2NtS#ZUqN6J=4v2UH$pKYHyw6$YK*!9=>S1Qx=|u3cvsHH}I6QY)nPRU~DhM
z9XB0OdH9~d3v1fTiT1w(o9T>6A&j%9IeTT<;pD-$QQYJWv-6knzt{RJ;2}@NXU6^J
z$e{_CsDcwy!V(9b8!G@d2z)XQ3)EOUz=t4oMq>idSx!hO;|1y1xga5xNXKXeqVLfE
zru?-J1KE6fWscED%$Fg;Zo+E}ZIlimsT^Jv&Uci#W~2>)?b~*QG2YeEXj@IJ2q}GF
z20HWNvMsy7OG>i&!x9QFTzNn(e>CdqqsA}z<7K558RtLY#?w>yyo`z8q1)!Y2GWzw
zzf;@hc|9%NW^ady@1ErlomS%}6!L3%-BF~IxaiuQ-1Kd))dLjiDxkFpWJHgXC(TWh
z-oVO^2;hLWCZ?bEZRbS{R&=S2LPwi_a5tBYz(ZS%+V+5gl!Yq<dS4^SjXKC6*#KCV
z)|6A|=yNkgAwp;aDDgZaLmrw*!1nc~HnfV#(ai(&Cva(1(W`%<F4me^(}O}`7M)fc
z?8Bjt*3UoU-~4>@^0)kLBXr2X$;ZsAyIE-j_Thh&dhVr!aAe}fi1ED5(M#!kMnxKi
zLyp+n)rjxaUW9TOH%xk&Qj5*t#KkUkQ5{<Fsn-K!ocFE`zpV!}e+^(`z9+yR&CJJ!
zYGe2<AzP<2h}x5*XU^}n9ynqFk>P9;!kP#!(m+zCJn9}4?Q~KnW>-tuBKdg*Vp8ig
zVU#i4=Q%RV3gkh<A`Aj;_P%I`y=D!a13-|7;TV_p4>}AQFEqBC{@~N+w@2{tR)^a-
zA}T}ihbn5nBQ^;S$ACYAgL4VkS4_D7&^gn8P39eQ#8}HWs%-T;Q&poHrxFx%?@yy&
zWwpr|9*I_&p0o=Lu$3858WRD(u`+}QkR=^f=Iy|%9|*U&hNj|2{Zlw=bv$0`(i7zY
zAJH_?q~g_bN9?=Y{A8~@@bDEn)x!xdVdX(eBuP7P+7Np0e35G+h&ytV1`JJXuoRuR
zB_RMa(I6aICjqG8F2B*qp(W~O@b1WW0gK7T@B|~xA`ab-A_AA4&+7V5sLR7U1%vQ*
z*E;Vlm!4~->;z(9iRu4}*%GJ|eoyhC^Pbf%bj4w8K6*UE|0UBoh{+v|`JMu4MY$Rj
zE)~7ephP%P99xYaWW9qOP6>Dj4<xz9JyQG9+47i{gicPrjL)-dknECfOI+1|sb48C
zh!0a@2B?0GOz+Q-1~?`QVDseil9jXf2s6ZCQU-zxTDx37<LUl%1!dC=kIYn8$SDq>
z9u5WCT!L?*ebzcuH;WnIQYu}sPvm%t`hje5>xrw+sIPIUanRBx#75$6eBQP&`F(I+
z7*75Xi9QFm8w6fZm8Gn>vKG)1FcvkB>!|GXskHpYyYMp<xBc{Xd)?{pdd6EWmMn^i
z30et47d$>Zd779U<gG!5#9XdKes%~ij@?aQ17A{}1YITyU2<NOh+yxX4HzA~FW`}-
zbA?`92Kl_9X3Q@CTEqa7O>59;hDb|+jLbtb-%))65f#^2_)$h_AP%xLi1x0Cv7ivl
zJC2Bc9$nqgE`x+h2Kx_`;na2)&z^$4g|~v;bm7Pc981>nU89ztLNakNr`DnEp7)O(
zpDn%JxH%BsxBU-4kH5^)hbilHl+HJu83efhILT<cS^4K2w$^qgswR9S2g(sf0bSgh
zaA~xvOaFbf7gsp0l!TNNSa}3g#Ct#VRn(idKZFJ8JHYQ7`l!aOnxC`&3c;=!GP3$S
zS2Go&3wrV(>?dyitI{(-&r2KTnD%3;+n!TWj8Pbs$^eO+a{w$&NF2u!OtFRjk5hUf
zGW64iSsrsts+Yz@gB4PjU&gwI=s7BN|A$rkrdH1;7hU${$H0MhpP^vX8?C%DS}+aR
z`c3rl$&zc=pXo)YUDWWneFgHWffF$$UZrr)`qIQm_R{#+W#SxuwM>$<TbHnI7jT4(
zHIPjcSxjL=Cc_GnjPK8QvghveM~x0Z_;FWF!eSXgj|Cq9CVU5xlGr#+HPi%%!XyEB
zZ$4N`_Uk8T5UKFZ3Q5ucGysf<R)exAQp)m*VYt@F!`Pac0-=&yfh&XsT67S^Fqf{(
zDr;q_xz4LZv~a5P-pyN|ja=U+7yCdu6J`>9zw=0Hc7Lmhb8;f!kJ_~#g#T$?6GM5K
zve5OUfBrkg5*TgrGtyJ7Ubkw&R$*)PqV=I%rb+JM!P{iz_4wPDqzOb($JExOLE>RA
z+;L?ic=8O}H(qWPC&r%eRS?#)36bp_gS6TKqk2VZY#Fj9l{yf%K&(siCkrQGow9*p
zs2V%1hdT|mk_$mw_A7I+RmRg@5bV(PN}+P_PaMqV=b9Wrfnm^=tji2C0FRQtyrMMl
zKtlNo-Z_PCegceX_0f#7x%fa{EI1T#<><{R^zL2y$=iUUYey1b%Oz@*UbvC4-@dPQ
zCdJCUBa%3KM{_`los+Pjjni^g&l&5GcRyk`8ZdCJVJKD_TU2Hk)%-SDI=BVuvqFDZ
z*gX(fw4snRm}LDTCsv|k4FBx9(G9~FQ-#-e^gv@Qk#GUvX%nqPgswDmT2n;L1cvI8
zq>dmTOEgYoq;teQ>8fm6%W2ynd0a9`&s0_N-)na86C?d`8ZJ<UZWdW}r1NPV*W|g^
z^}HBr^tqW=TOWe$zvVlV2Ti89V_`ZY{GW<w!~a=9XXvZ1e24dTFpnd~#a!D~dET~m
z0H|^|*fqH2Gbb-d)VWiaL%ms7+8SAQkcJX5AYL+nu&Dt@SMG;Yf(4}xewQM~#TAK~
z(%Ncvr>0i7dvRK1^p}<Sh#F;dkjh{aU^2$N57`tyZYZ(7vvyY2nsl5EVOK;FEaVvM
zN`r(wp)4B|{jC&O@&zgEL-?L6Ea?3gdu$GKd@vF9uP#+hqzJ`#lw)hmH_s>V?nLTY
zBMmAR(Mh3)a|z$I)m1M?Cq^%UXc*E%hnxAS$I{o!cHO+}tR=Vh<liT6C`O4K3_HJt
z45#SfdrYL9dG~Lz3cFRf045~8IcMZ5j$;|pFuEJ-W`crVhDO6NfT${r{SuZ_is-_|
z4+NJCdv-~-u$LdvOj+lGz&`*wU(<R5Q*=;nyErXjr`At^@?A=ABwA^U|IfRtBL!FF
zkAb)h?O18XVk*3h`uC$C7dz<?JXtVU#^)ziQdm?x{Dl7H*kpNfpDlFN<Y6nzqMq(@
zpLuOIa;u8(RX6uaOM=qWy5^@FJ&0xXgo(SHXG-+(-gDQ9ng|d5cv5t0rbMJ5+7ph?
zQuxvE%%TCsQK#BzYSJNiL7NuTRmdD?IB!Qj!6GH+oV6$&H^Co$^KN9XeS=-jpJtov
zA#;OLvqyQA4G!r1Fjy<QV(L|d9Fx`A#NZ9SYBDX)TVG4*%t;(jHv^RipxM^hHUNYu
zgA`#YPa7Vck>`2Ca#vW1Tg*&)Wxq}u1CaYq;XmA;PzTE1Di>DyJnoQiyxb$2JZ@(e
z_c5~|ytnRFN`jhvvyFLs7+}}ja#XcwDkSlk?yF*)Bads@bwuN`6lSIQ4L|8ik~OJM
zf7L7*-|rG0Rsrd>l!#4@@ETp()t82GgalQq-$gs{k7&3UlA(dp2&K$m&HOoWHDy{1
zY6PW?s-MpQkQ3-}X46g>TvYPSpY;b)EMQ|xjYJw?dsG+!#=y|DK-CgTkWF4u<O{%6
zAxg<H_VhtiBuI3Y_EHV#3$;4G=4z0Aw@}=wRq!MEFIPhU54``SD)Wm8{mpx+!=KJs
zG${JUdnbzzD76c<#A9iw^6$(tLaK!XFF~Yf%to@j9tYKAq!m}kzzZ3K^qWLJHM-wO
zm#ocVV-YO7(rdX9>$u<Ma%YX8t@(_0FH64b8{gGSIKSrD^-B7QArv8!i_KW5D`U`;
zQ{E+xOxo~BZN5m_5`6m=5LZ}>fcYNJ|CJ|w24~DovwJPgz5ryARK`(C=#yhwGFe5K
zS<rnc%K|q4b>H<!e8Gk~{|s=lx?X~s9d5tm{ez#L>X*-jXrlHG`18=RFtRS@n)eSo
z898b7aFA3%n%g2w8&JxafhLlZ)(q3ryhF%^bZCUSRpY;<fnEb>k@&(KcIs(uS6Qsh
zVdRGprBNt3rn>oebJ~;1dK5(UFo^(1kSv_>b9hvgPb*<W6pWFc!G{%T_B}uoc&Cg7
z8$=E%ArRGa=Lw3Tg`}>bBSeXiu%a<{CC@^Bd0_8jN&eOJ7v#xjos`{kwdA2(sp<O1
zY!Rl-+&ajBMjQKq`F}#So4Spn|CfI9A<&{=00Z5{5=G^bsKX`OSm1hvEua3{RxXoW
zGtQ=UWa2i}urH8dH!edu;>V?DSl|e2r#|ECt}lpqAl|YwMU(wq<ZncjRn(`1g%|QK
z&by<e$m*-CQt9oei^f|7o{dSaec~nNl005`M8M8gF4smTm%u^=R9VH*zX){xowEh7
z<B#h2K(AwP(_)Zi^k3uztqlb;HM$lJseFQRG#NDan5w6GIAix7*HKTSs`kX8-Zk68
zm-@Tf@b-t?K6@<^Ad?*^0gTSE>S0AVdld5_bG4D#rD&*cgHW0cF}JqMZXGXi7xbEn
z@y?mY&rzBgf!`}Aahv5PK4jBKjV<mw7!t~U#Pv!z*yUp#+^aOIaIWdH{g|I5?s0-N
zVRQYI3l8AFbS_=h`PUA{0Z1b-uM?cdSI*S>>UV-)GZl#_fF_Yhrv4-oU%cz#XDw43
ztyVbjgD(x?;2QS>#$8Ofs*)$x%qTedP;QKZ5PpSj!WYc5+Z>7*{Q}~~`(Tm(e}iJb
zw{^NecT;`+*Lg>ywR(qh&eO4Vips!S;HL*pnAy)01M(yTZ|ucabOkU)lq7}llMC4L
z9svfB+d4%KBtz3q_Qy?_JcG`#IPZ;eS%?Qk7UnGwgT_*m^YwMz&2Ov7Kk%1XV_^MJ
zP$BoTw_6JMyu|`2@b#9aB>+4k=FcaXmvuGs&_=<65U<h$@4bP!)UxeVL343IWK>9b
zh$_kv#l1T_NHr9$=(85tpx1!<<y5`Y=P8^?yi5vT1Q*U-`t+}6id}}SNCd30IcMtW
z3VAnloxA5baI|1{UG2(`IIOr&;Or1LJoz#<UJh%`YF!S-;|lB(VRQ;%_4)s6F4JiK
zTL{v%ujfJ{Lc9_qLP2SBvHWf-HSPCxNtrAkU##mY=OX}Ve&!j^E}<XrISv82E1{XU
z@YISo_qnmtib%7!55NsqnpPm8h09S14Lu_KeEN8ex*u+uvS*iDDB>qJ9ykFm{e5fa
zPKYSVN&ijGL!XUu>J*KD(M<cvwv6QVeOjO3sasDWFZ&V8Qt^O3PJ7wkpHshiuMvep
zX&L^H(5>`np_~NI=TGu}PIs$;N9kKMv>eB<<<ys%#B7V;y+jC)gF!C516`=3ZX`+z
zn+RsTTGDkRFj9o^lU<<^1R=X~t(Ex`m?j2)d-49cl#5>_qg+qy+CF9epo0c2obIFU
z7~JE=CX!6Ob!26-p;npMI)ObQ1+ax}i%XLbNC@<n0q1Qp3sa^qAjo`oqQ5>(*h(lg
zCfFN8cz?_cvcZ-gVq^iD#v%rZtTmz8>Hw8^;@{lS>U*+x*?UG0z#mQ4_nw#QedLvI
z8yF=X+I>6D`tOSwTx+6W^pO>ZMtaRoXT!d{JQ8><BbWvaHb?H9<Co{EIW~`4JUfZI
zKad>I$blh-hZjRCf%1GQPgrh$5kG{&I8jWk!Mp-RX2IEdMj&RMd}Mh=00UI+g{~by
zgb)Ji#aGViP^TET<x@vSB7@h#O0j>e1+*A@K94#CJ%0A1DLO<nE~R;q4EkYNMIhmK
z5xa9xb_Jpll{pPNV^C2N=%#e{K*XWiY`RpE5#_TBiRRp0bQDM*QKtO#@A=YmBH&cU
znDFNVuLrWI$Nxx{qGuK*p)VcWN39zc-oiJ-J{IlmuGf9zX|eNB_f}t@kS%gR{viEB
z1C$G2hVpCKm9#oeVu7Is1=ySCPO5i7YzrncWB7Z<+modA@Q=wBCT#fMxYizf4b#zV
zL-M@<=ek0A2=w?>0sheQklbWY!l3IGx@i*qq$z8<l`5?0<e-cp(G}(zzCIm8TsyUw
zVTi0mBGJg)e2O5JCfndmYW)obw<<7=G=q(%SSr|qLn-F@WNs!R9ko6hFoK%*Ohfg2
z93N$YV`WrZQuW#Q6Z{c=cf!^Bd&>3)#YnO)lH-vHzsu01HymPqWwKh{C{5=mfEtES
zzGRtA;h6$y?b=v0>oQaKeB+|@uYvxb*w{JITPb1IDTk8Dz#_CkO8`0Df}R#G<OEjM
zhCXX$1CG^9M}Un6x^cTE$P01mZrqh5L5a{TWT<(b(Dh+Uvo0OfEK4TxLwTLZ2QT}$
zb`xrn*BBm8C|;&r4*Im8BiEgOT#u<v^uNd;Ncb(2+)`q7_gqK3>;G!_XD5tkmco2}
zMj;#LdFo|*fC_#8IkOvHV)$S2pOYd%cQM0Nt+A^G%^Dc?<Rg#1)++SPF?#EyT`h6m
zA_w|?iGWxIu^dly5m4%zNJ2q$1&(UO8Tof2Hvppf5OWJ;N@nbs21rlPgxZbcaUV46
z{30QitV~E6<={!tw~7qN>ONg}?I{JZhaT1X*owFS*ZC9)!1*2f_XMYbgux6DcKYB9
zekXg+m+;La&^G`c*+Hoc0R+;hILWI(jbq9e4@<RI?(2*dHI30IDH~2gdXAsSHs@ia
zm+~mLCdhc9qPm-#FuRfb!>?T2tz%97bdR(AIM)%kXZf{=ijM`s=Ms4{=i3;UaUKQK
zMuYH%7Do5n$<=wQ5T2>~du)f`_nTU%`}k*+2=!f>D?3@qJ+UrM)ldw@89=SAs3~j_
zrRi8wokmhI;wzBJlPN85t%x??sU!dTemX+y^#hw!%CCS1zE%zzMjr5(29U<ZErn$5
zH?!P?BngH9<p+dv78(P-Ml;t7CbzuUNq*cqA&^wdG>DOeeYuUg$)<yvDl^$ESugHb
z(IAUTU$@nrCF5c5{Li<E_j7U74iA=yIpfc2bN_JxLg-Lw*#nBP)u(8&g^P}Z*yaP%
z3F6(HT9XM1s%_o2<?#NR@=nu_q~*1Nqt-#sk(l`r8>SYZrN}D<EKAXNwHL|y#&!W@
z+G;Os%Dhi#qrdT;z@dll#^6yILAylL)XspSB4xDJkL7;oj2UkEI_Z{|Im+GS(@a08
zW9#e)^OGcE5zXoIGt8JpI=!(6?B7+q(Z1~yI>-KuXQ~v(Ggk7i$5f1?^Lr+u)Fy%c
zg*<AqA`TzwFELVe8A7S*2mGyXr|T=XPZY$~%Hmvv?$qK}&uw{rcaM#BmpREY7)Qpk
zd>=Wp4}Ik)G6u1X#O$@4n6sO|>e;2S>)gqGcxWrksapP&ML@FcJ%NO!p&t>!qGSU;
zgApg*bdw@OQils;QE>gt?Ti6}rDzcY2==0qH$#!EFym6l$<3ju1}3fJ&nkL4tJo~%
z7rsNCgbpV2Tri?LLlFfNd{TCH<BVcUMUpetThwELxKW%m5)~)frK_<iacnDxoean+
zCVcqjsl=iJF)!2p{c*O#$7dv~{Uaom&5tqvHTWe@%3%{#HrK2+t(A@S8@4e?nB_tL
z7&I|C$|^Swq%LPYnMN$z93$~8F^JM0O;LWWd!g%mz>8zMMDRX%DsD)zgP!paS3S&~
z-Rl^|4H)1(0c;<nCv}F=>v~o3KtJZSvrcs3Rcp|sk{^dc+s1!I6nLRNgsHuDm~U*z
zf%)8$-N^Y>mUyH5O!*1OtO7m7!f_bf_e5Eyr9^ecgWSIrKk~#Sts=SO1Znv}!UcBJ
z5ezHFg6dxKzuwCkBB=wV@ur&o<;XO_iI*==CZdbCHA%PLoHwfZJ5T6PwLPvU_oL?D
z2O~(M@lVY!HiUkY=H}JjGy3&i$m{%Jc~VVvAvL-dxaL#g(?EDel+EG$tR=R$YR+cU
zuAX5@jKp`CP|*_h5e*NVhsugp3doo4tTUS=?JNoc&u`BvI0c2E;I1cI`d2DH@Hk52
zFReNw)Qe=CmSsv5cK5_~8Uj=+dx7@jY9v|b^GLMuWuJo8DC^J1eit>J;`+twSqq#B
z$upiEX51gub-+(?=5dx?TLla-ZT%*%+uswwe^CEd5J`O5t85kQu$ig$9z!%P+u1!1
z2smGq=n>Q2s9O$4gCd<?QX<CsSG>Vr<SpK?L5>PVt)>andSwWR0^R5dO(u?lo>O&T
z^o1q|;|wQQfd<+1kIAK|_yJ%RrcNer68`y=(Y;#HnB8M~boyyy6@-+a1vK<XwRDI*
zQi2Q697*yRO?}9OVD%05mTDw|-pX5$Lk%ch2#Eu;e(t?;{|_|V2g=$J1cq@9N6x@d
z)UF4lE^>^A9X|w9IS%i_b3_|788OnmjCFNROGr6OQ~YY&Tj=v@kA6jn_DU)AEYbO>
z-D*_^Rc(jdOba!^E^$M-KRS7%eylLH#(!m)pCor);(SR)6q>ls+w|`G`zJ5m#u7_s
zzisdZ0ZO+#!SYa0G;To)0Po?K2uvP<96f<Jk&Xir?FAr%M2`lR>tf~O0k-$4n-g9!
zAy(gwLL0`8&(F(rP9gw;En4bRrZckyl!_ErT%o!*A(AJfJpC-xz-akKk+3DKuhx4e
zu3Xz)kJ207wUZ3>Z58+SYnHPFemzV60Iiu!<;#U95(8d)2S7<swJ-B`)&9pgg^&YY
zOZkL8uJV98sX+!oJPn<%+xA@1zoZJh#Bs?r^$w?Xl3rqCc?@;7N+)Y_7K*|b?pxl?
z`;*$8vWQV8cj{zyx&i7CBGcTU#R!t!m~}^LdYuGGloN0@b^z%-=EL5L$1b&Vk(Qh!
z4@!R3Prxh2H+7FxDF=b2P5%^B1a_X32iAhfRb5<=xm~V*^P8ADDHY5^)Jw;uH<)!9
z3aryZb^s>dbT%8f0Un|S$*@6z1$A-Y@^XCtX8ii&=}Xq>Z(;YTC`O61Go9OIkFCfb
z$>B(%$E%SdGy)$Abh#HSa^H#v+*D3SdB%)fuzk8PF0EhAl^zuA@ZmS{?*ZeEf-!!$
z0J{%(*7%7q^4VBe5gd&`xLhzNODh^xR224z3?#)GnXLPf{GVff<Q~<Gi7(P<f=F2i
ztu#O@6h)&BARP~0GfDwDhX?D1LcH!>$!T5h=Q$9jHxr3oy$jF6ZT4e!Jp6dQct3P2
z<;QIxe&pwIv#b}j|5vGWO@^L~5(V#Id0sLf#3G!Sc<oTAvUT9+zT<?V#P22Z_n2yv
z#>`3HOGiS=W>=!5;>E+-xz`>L2AHEIwSR|g%*u(}4?x&|pp?F2vYPK`B)ysXGB24g
zmn3mf9?yr6zXdIV>wKwF0!~uZ9~Qu}Jcd$8Bri17-gpI}sb74*he;LnA|dA!bzxvd
zGy{m&bnzQ{)M>R~SmgrE8&srqc8cnF;Od1W-Jb}-%aYdK_-h|b#qbiWFuY+?s2PPu
zj8d-C#Y2kh9_m!cQ#_zUw6qh6u+z5P5A6}G@5hpA;diqfBmthQ{*Uh~wa(!CB4YAN
z7_o+&!A3H4Y@B4e*STY%>n2;4c#|%Nn>Oi3936FJi*AS-9+BB(aizwgj{Hk57<!-&
zcz_3GYw4|2)2R#kHhSg))>z9|<|#O1-=rc4Zz-<@E{~>-s{6t2p2ojM>(5Z0cZlJ~
zvwLSHzkMgJ7`M3n1xU$rFm*ubmx<pv9BQ0(c{4LY&vw%iV*hJ6>L3)+OLa4NKpo4b
zhR_Oc)g#<Kaa0NVKFk+NjrfBqarMkx<?eU~V8h0d3G4wZdW)cPodTXw7r8`>ph5qi
z6!8Synca0(7cFHa9&MhoC?}2>e14Jg`P%_oPrC$1)Ec$rHZM_k3acMzaF@E-!X>Vq
zx1XwVUhu0rEeUZYa-;#JfVE)~$z-4sx$T#4fHaQ8T9_dUsf&=Yr8@{BRU}!z3d8P(
zblNyb7WPAI(H5eUVf=`H=w@4doNy%yKxe7S<nt^DgKSbG$Y_KR&|gO(RNh)x=2Bj7
z<LYzhWDV+ZsqLlO`_=ZxTF-wz^GduJKKgqnLIK;G2VieXavVdxUk@?qF`w?|i83$V
z>v<j)2ds)e&U@z9^slWy)k#AwleNzTx`w#G7IxlXB49`ea{)L}W{@Yt7*7+5J8MFx
z!<;__IN<ns1-9E+O@i2i3am=`0cTjUSOj%*^H$Gy18S&uQ_0I5H@g^E4UlKA=Sm&X
zy1TVo{eaKioFT7sLE>ZoXY2|d)zMKqy)S6u7L9kFs9m<5*L*JjyTrN8_{4(zYcn)5
z5Jx%XR?+H^VtSe=xN8qNss}_u5{NF#dS8a+?<)OXJTFzNDy5q2%&YedT;UW?FFO5z
ziE^=B!e6fedTjKETXev&lMTk6wQj3oLqwuClA?{N2)U4x>eM7p>C|s4-dLsnqKxcL
zkumN4h$npzd@s2{Y+|b9N<vzcB{j*-eMO{%!Ntv{g0yYcd8k40iD9gY4jXR{W=k!U
z_o{nlLD|p@!(_jH+|4#b^!^@Go!Yf_U-s*^v5Mz;C&+m=1A2KD>e=qKv}mKQ`5ymj
zDCWdaDgIkJ!M-^x?(jG2jl?+<&Z^r<PemsDO=?bexA~v8<N4FxQAAZUY;15r(btjS
z-3xn4I&?;Kf(FJRfxUuTpzS-;Pe{Ef^;}jSZE+cXnZioX`dfPn7vkoR255&UlYlge
z=errG^~QK`sP(DhuWB$(z(HCwS7nF$gLvxGZ-0_k-~Vr*0$!&6c)4bYG8S;y59Oux
zb+2fiTyEWAb@#ecnf1$iH$%UWr@*+`8eX<#B1{4aAIuA7DI}F{tL^FRlZ&gLU1Yor
z=sQufe);8SGWJXshj<s5b*o_8U*oJi`8f~izO2}3cwgtVS<TD!z?WzKn{dN{<@LlI
zc94K=C6!*We(~Tueb-&UwK>f;d)dvP`c&7NypI~d=rl}47?%o@-ihI3H<+?;<VFVq
zN+o;k%W}|-7%r471AP=G0@m3mpwW)qD+IdmH1rjlfa+<uqY3f9jo$Jgq8TvuSL#Mz
zLZ3BfjB<m2A;GO=Nc^0ahWXnjwDHcaCJQj0eem4e99<XThXYQ~k>si6RfRZ>pO0-P
z#~t^O9qJ2HtgAAHx9mCy?okg#8iLeF2SE{Q0XS%ir)t^HhKfNi$Wkxj89ZMmMW9*t
z4oqgsFDSA-Fh|8%eWF(Q2Vian_rDE*@<1OQ^rj+{tL<U%;<G9q#Y}HrKNSD}z^GBc
z`w}U*_n!BUPei)Vo$no^^8WJz<h9oxY@F3h{apR{i`8y%Fr|>*A}-!)@q8P>;5N;-
zHAypU9xwe6m-m62pzkr~8{-mjUi)uo&=Q08gzaNC!^IWEG`~9^6#RAzYP~)#I5{!;
z1dG)ID4FH61HTPIedg6r?e++<c-n1G0UMY5(vpSPpA)5{6wzpCmC82P(Xn-S`sBb&
zJxnrd3Q|Z^4);YV(#niYDdyF(4i2>34nnl-mAEw;ga!Q;HU^BAy-4wCodp&!!)c1k
zt0?LEH}O#b9!(zJ=Lo~F$aKf<#STBtstGCrs|hln?S<%e(dilI{obeL)^z?PS}i<C
zn|k!i$vXARa)1C_N2;IM+pV+X87dn0_gr*z7;I?^+xEFymZ0x=!Br_GQ1DSbONfG@
ztj%v8?)QDC4a67M(occ}R9xz$wG-3ofVceb)@+J}T1=Zlb4x$>LicXl{f`_@^=<j)
zUXVlv>vq*PC8Fy9La~KopHB`@Kj;raMc)yI*%eMSzr5+Qz53+j&@QslxU^Dp!#LZ9
zn}g>a-MU1tKF#Kb`5Rz^)wNTEY6F&qCBbhHsxuw9p!y7DG>;i4)Dw?|vJV5uC)h}g
zh~E;-X<=+osPaS0J0_x>7wAL&seWUb$m0T*I@A4lZ-)_~I-XRGjPk?Je8m$J5@1Sr
zT_*1QyKP!A;(TG~Z#1+_P1>fEQt7oofERPj)dnqp+T=uP6A~R!J_{Xt!lQ~Sq3sS0
zh2dDkzPu({m+U)m7IO6Wkd%>+0j0-sk$kFO1%K<1ojH2-a60<WaJru?OzmU{H|@?j
za6XnPe;fQ=5tbJ{DF+ys%IrI%i~n~YR|2`E5e$A!K2y&xrz_FwX*9eHTI#<XHQc!g
zG4h8f>V~)qXkh}Znp&h7F6N(o9t4uCxn}PNu%TxvNOQQ_l@aj)vFnKz-}AWiLx=W$
zbhLarSn6n-{XDl4LU^LK3Fn$dSmTSM-`8=oa;SzRuvxlAfz$e-q92GJr`bl#XYzb1
z?(I$XK{iV}Iv3=^r|LB^3N`E#fjn!Daq7#ZHal0m+aYfW*JJQsITZNE?s=%sPhp*G
zFMgG(iyF-??qw378h$yIGV=2Wx>DRNFC<Bbn8)Km0O5Vrzl{OU*=Bl1!Q;FEbT|@~
z<S6naGA!4VDMHeXh8`9t6H6n_QXq*T&9HZ8=*DnG7O;l+82a(4;igAkS{OY}8}>7z
zT9;YcI=suiL7>KNN<c<hE&_=Jt)??|of3DPRY7#}uR;AJEGC*XLr-?re(lIJH~zS4
z#fghD+rDz5;yyFIs`<z>s+rxlG72VOA~TJRj2O;D5)?1yJ;0@w8Erz`r?S3h!P9zr
znirx+HEEB^BU4kGRrDhYkX3B^UXq?xHmZwEqrN!cJ(s|*M}mHd#FwX^Aw9fz<NwI~
zcBQCpu0=wvypI~F#{zcK)3Ym0C-7-_Vn1+AdvunV(Ie!W3pgJgz1_9(iH)4E9voKY
z6$+?6@5~de@q&K}yfBpbCzJO>bEo{;zrWc8O@CypoYyk1_PO3xnL--LzOt(6P}uwi
z@rDe~=Zjmt`PXr9;_op$Q&pUv=I<e@XCjNItiGmiMD`EGfV4L|P%sbS{sfNF3DalJ
z$s`H>@c2vjoF<RP^wHC$QK%|t&k^Tf<C)1)s!v=I1Nl=_$)pVfYEga17G3@q(u5!y
zafac39j?j``x)Fcn_8hUJ8wXDRH!wSq;s9H3(|a~j0rT*4Pa&tt#vs#7XmQIovA%@
z%>S)jgAOUpNAI$F6BM?$97O+U=&}4c9)EO@&XLpX)Y%x+L6qs~Zw>W$91L5%`h&!q
zw|pCm(^Lu1safI2H(mQ-arsih<JopnqHXA<Q@K$4(5^Q6AY(H(n(FI=H#!mY7Fp~T
z2brEJhzgaCK8zm5?bf}Aj6<`xr4%1HMZTKgI>l#-g0GN{c{eC1oybKz$+v5BqTjy#
zu;{~o6wq#m{yGR?QiRrNM;>SO3lqioYGqF7QYO=9XA~nw)sfS8J8d-D>EB}GE~6@y
zh><riYPUjM+PB80>P<sc(^tdACcDdjORKg%t-V?ojm_rQGdzN|sDm+>DHB^~s$$p)
zWaz@9+|!6T@0@&GZJbN%ew?Q-6qAVWKMnEZk-`z0=Ho+76}mBzGM~`m7vNt{^3e8<
zW1*}YvQ^?wEU1ldeZL+JSu(w9lFX8ZUUkPo7D@SxI0w-!?>*pQE9|5rpnYk2IW<V%
zyH{yTB!CtzOuTvxaTN=eRfAHntGJ3=m{)k@a`oCI=9mAMS27H(QxnBjS9z6FG)r*O
zmR1{p%SYAF*`0MWz|`M5oMdU9EVrfYx_D|d-e~mukDj==j#x?ECYMS3O;n@Jn~P59
zO(HBrM~V`IhmW3qZKWiR)BoZup40A^b{kD?)As9uV%GLL8^=Njn@W=mdWf`A8p<25
z7qBlNU<;u}=cmnAp5E?FhFx*s31lYJu)o|khU$W_@`NidO)pUeMe8B;DaudNcU7<B
z#yQrB5o6lv^W{cEg3l5s=I%RM&Py~a@Z-FGEy1cQhfCgfhhLAW4d!^oi^Mk6N_ZqE
z#;<)S1C?Knv}A6GJbw)yMj}MGH@5d}WzrxS=kxG;^u<t~KaiDcNlplZc;4~4fon($
zq{7_f)>M*w2)g1<^!SJCh;;;~k>E3Tu>S|cKs>*Ghv2vag5gdN!gH0!Kip8N*}tz)
zVJSk5lE)BzH-sN|@`-z$`o8nZ#a+Hou7L4-Adw0xs2^QpgIEnf2|xK>Mv^P;f!Z`k
zk5Bf!u}VNKrjrP191uv+3?QhXp9+E713mIqM<NZ*7&#F#-k$?XSzsyx8om91C;@dV
z9tSABAy}xF7$x#MbwE+5Wrm8J5UNQEV>ZIpqPY6KSK*AkE1dabv(;Vs9UpkbhHKtk
zEaaZMaX_rUBuWPDSop!gr;dJe=D}AWZ#ah@ZG?CK%VC(MKE3QHQ`E&*7;k-46&)pa
zCfaizx+wVHP?EpEBS*#ze(+=-x9*GlQqC$I@}7AAL-UW`p*bIE&!5JBEz$zuGz*o6
z7{dx@;xfPLVbhkpef1lL%<Kw-zxn;w+v_(P2x`JvSJ?C_lbBnlWq}l-oZmj!YhHdk
zi-MBt3;(Q5Z!(?S1U%CE8+x;!q{TU8X178oe^w&Deg-An9|UrJ66a);1%R^hr66M)
za`q#pzbXPqV-M}LcTfVidr~xfps9Dg=<Yh!;nUndjFZ2b|I@2U<T*v4i;Dn~8*0^D
zC&?=^Ucv}ZI0NzcAj$bE(IywVPyKt8@RK4#<==S2px!y4F9}gy<t$ySkTO6O0gng3
zk0`+zNo_$#t)Yuy;!D`TBs0+%7=R25K!Z2|7SLkgYGDEq;%Gq*$pT{u1WDvbN3RGA
z^eIMSNsC9}9B%ld8!*1T-&veqs&2G4|IzhpFMGQ|#zcBD@vKG1yFtq?=~>d_efRhy
zUq9#`{}-oR$ldXY17ZDm1jE*gfOy7HuU-4ZtAa~cgS1po%}!cc@+Sim(&K0aJ@~gD
zcp_tEY*#KGduZv7-w3FPcov^q8mDfYexLAZz_BgXW0cSFy}H=2v%n2w7JfYhvL5zc
zI%e}$<PX~uFX_paEZw)BF4_R?#Fo#lE%aDd-D*Y{X}G?-bHi)xQtt+|NSDot@vo(N
zRxg7wD$%nWuqs?7a+3R*13+d#Vt0;Vgg(D%jvk}zQ8y1yr!;a4#$jpTHeZUmFVXZR
zTq4`iMH%pr{yvueQ4v60c$~C#=dZ6%bo>b?K>xh+?Ak>^%rsP8b*u)!(|iOHUVtD-
zKZrNw#p-}4BJ}_jA-W(Sx(FqG0!CCJ5En1xSm^t}-66xh5qS{Dya!b{kjxMmEmO`D
zm^3qR`vxKXJkX*dz*Mp~x<g_aG9tr~d@iX>h(pmubYuoG4mr3ni<{p6QuM8`ou!#t
zbpy8i<%?GDxhyGspVfGpX%IbL-Sy?2i~D|;XAR6vMY#7%hrmk(NWyzE1$E32<eaEV
zPflNHl%U=i0YU#J5Ydt!hOFh_jwgY~r$ksT*!I!jp`V^>EV?Jt3OS9_E7AhsG>Qbw
z&sjMuXXLlocI1z*qaANcuxyi)+-m!I{iqb-SJ1nAC^t0H@sc}DjDGAvv)8)z(`IC!
zQFrUjEo)w4jtuM)4RT~t7QbXqBVm>p%weFso532^T`;q`LIn7L#929pwX~!yHjGKQ
zcx~7px?r#va7X~(cLf@rmeW!4B)30baQI~R8_VxHCO@&PPm=-Td>F&}s?(1<$u<RF
zu?zL<PyPaJbpU<e@w(O5CnJz#q!5z|=?RjJaLfS+RT0o}4NMSgRkWxgMJokVG2;Wb
z1;8Vr6ed$(H`yI4(jeIkkN47TsR+oyFAo6CEYNZwTnmDvZv=n%A-JkA0$m8GF+kEi
z>w?BGEeKyC-@Axc{pAgCa-Q8<@S3|b=Y4(q@TOHdDL;E3dF}NI@g+I^4=o;k{J1;!
z70W3(cYgLr=q)j!wgEc5fJMZ{ZXQM=w}A5ar{oV|0ltM=E053run}f6xtzxqZadI;
z^jpu`lS$*Wh_nDW4WpDP<_kt)ZBNehhgXK2Ntcr^dng=?oi)N&pOF#F<%Nm-_(ilR
zMxG{Yf78sd9{Z~QY0L5z&E{ft{n%b}-HMA)cLPo^azxI3H22Q~Y(ye=CSZ@n<~+n)
zF9CcA*pg$|WW*hIyk?fpAr%93A+j7@EXMJa;P^hx`)PhoQab9UDS=AOB~Y4srTbU1
zJKc#ZjlN#`qw<9k@5cndg!!*RWB2XuP=NO5#)*oQ2#Fd%Cm`MRcM}Ub8~}wp5G1XN
z4UH}+>0#7mN<>YoDqi%3ikT+)1bBLD;dcXx!^$H-szWA11fdx@TViD&Pz@tYI(c}-
zL7<)o8V=AjAbqLy@I(xxLO@v$21yZ+Xea47BW^hv9yVM)I1%ul`oPP~fGzUKW#ZDx
z6}PP@jpS(r^K2IZ9mS<qP}G{9e5iilPgvH%<bGE?cI!NhVj0rPgE{3m$?FA9>bZnT
zmB_&(3nH*#Ba0tC0X#G%L_TNm$>`DdE;Q=V)0g_Bk;Z=|(gNT#jGj!X-+|Lx?zPY}
z%1MX>gV<Km;^sh+Z#%DS`ffuETPt4GlPj913%uBqx#CSZtbSLcwNM=`?{GG+d<mAD
zL^M+i?$qp_liY8VA-fYOtd3!L`dL;00|KjZz&83kkGp5Rb*}@zlVK2j&T}U4Xb612
zB~TBfpw+(3nDD24{xzJgtm9+GKauB>Vn8Ke8U@76e3iW8>pSuSN-FVYz+~*uT_eO-
zCi!0fAW5hiHAuz?G3t(xl5y-7r1l5IkTr1<^u7S5%z<cxL6Su(jv5g|)00>T8NL!Q
zOwzVMCWTM;p*?ZX<4CORXIKydQ^gXzLO)Q?0(A#QJp&dPIzh%u35XZKX*(WS>L!wf
zm{eg|c?63MtlE{q8~)@*v(=dOvr&2M@}aB$t&%I7x(Ik~QLV>oNA6f=wf&M6?FYVo
z1d?ThVla|Dur$@VR<D7Ah)C%eJN`u(M4kyR%;M|!H3heFwr?&xaHR3%t@<67rvEg4
z{74Ic(=Y~{{w-$2`Os(%g+2o?Y%tC^H?;NY*7M4yZ7;gHuzcx?!srA}=`n!*2<>t9
zo?A9{{eu@Q)GOHu`^+<5sUUf3lu7ERO!YFl!_RD#sGPx6qed%w1ub?P0tSk}7Wyog
zQYCtI#^UZjN&Xa)aXb)k+~Ep%l>B|E>~!0NKb8FBgi4NoY6K9o{>jo;aK*@1WW9v(
zub^-Z@3&{;vCn^eA-?<x+J8OQ@3;UZbN{5{Pb7tHwSgkxGeqi1#|4N={vCoKjRX|2
zQ5o6Mwn9SfC0gWZ-~lrc$Cm<ud2K?XkN_$IXw)%~2Zk#QGf{-e-W<GKMHK;p3IQSq
zDmHxFA=8Bz^0Xi)IdN^nA_2qBBAA=QmdpC^+TXw4t}Y#~_wv!JUOaU5-;{F&Bk9hc
z?MRB}<F%#cw3zw0nJb$6f3)l`A8mo#<PS}o0CjOgz6uZ#XJG^u(NZM?QDDG;iKnI^
z9y%t&Qr5KRqWym{RbObOv;Q=nX`}_fX%zHfWZ4FWoxzKZKwxYlW12b1VcMLCSPY(;
z-HvW{FtJ{UX4TJ)XUAV|S;i^aXK1Z|DYIjuVqN_0AeeVEylC#(^m^{`91je^h1y9c
zRg$MgKGqtEzHQo(RW;XCKMeqd60n{M0h))m=l#U#BE<mB`!$)899@6p3*7GuN~VHj
zex8sjQO1&R&Ghf~_^10(TlO^MpDgrA*8OT`JbkaTHB<gPN^htxOkd)~Kzi1%E=fTU
zU-Xioq~q^05sFoJ`Z~s`JB_?}{6M1!bzF438Zk(=6DpU$P?Eu)8hN;ZMC3;}76D%&
zr2`q`sRD@#EKPbGEiv?#faySDs<#B+r~pej$Qq3VGRg**2b>n>spB#NfV*)qKo8Ph
zgUn%B1%%TxIQzyiyz;+aYA;P6udXoG{PY!r*Z*~;P%@qqVqna@34#cR8pl2@9Tv_`
zGwi=(5zKLfBr1eqYG=T<rjp1XngmF@5-eEw;gc@>z%XGnj~#A2@wt$0n?@SXFwz3x
zG>PPct~Xb<2aUcLn^7o6*JU^?LLxJqv4AtV#3h%U4KTjrg0kJLE%`%i>@7pZ-kdgy
zJC#rXt@STvHVq9}SAL&GEgPYMb2h)ll=dJGB69ho<Sl7yEsP3>v4WxZY!2Zt8qcca
z&#5Tr1tu~;k>qf3&Qx=L>TH#yT_`8KI+V;0`)KK#FGbT2RZ^sRIl<wi7D(iD3i_9A
z*q_UYk$Irjjw_cxBGog_BgVPpoC(I6qzjKViV3OgX*&Yq?!J@hJGGs%C|2;kCJgEw
z0h(=}JgzQ2xZV@scZ`CRNsuZMl6?kxj6pWWK?tEqjZ_3M7{0{e2>7N?d78IPi$wf8
z6MYQ1oW$`Em>Mp_=Vh?vJkZQ3g@B-OK**IlFdYYd<%HIFv2T8)`3+Qza5InK_;FnD
z>h-w(=g)KIW~Qqv>@(hS<?s!EJ<wBmPWJ{pRh@dQDVh)Zyy!gmok>B^zaUN|*#oQb
zM%N4PODeQD4<)Ki8@D~-icHpasyP11ndbDOzQ@yLIG4t=6=?x*n#D-2f3z57H)c%N
zA6jp5CVb9JQwh?ftihn6HRITJ`4AuI3H)48UVBDq^<JD(Mn8mT2;?%W3w`#r-(}Jm
z@m%Sjz41+EwlEGa^uY{68U2t#%NXF`V-o%6G8hG&s3`f%9topgVucM16AwVO)7lGw
z5NehDiFwB)CI!RyJm7es4Ro3Wi?>OCEWS|Tpb3Bp>t8|a3E?m4%#(!PHM395fZEFh
z+DTqNa}DQru1k0W-FpCZqVJ3q+Qu?n8wLqQ2&LfaFhZu(0f{T2;sK~pfc{G7DeNi&
z2<0GNKqHid4&Z^1h=DYZr$f^6N>%g-iFE@Ec1B>5Gfb^0BVa}FMi#P_1DZDAo7x?Z
zlE0e8sFSTn1gbDdkO11am_vB%7_R%dZMf*h4Y{eQW7Pq3?OQGzx#kahiiKz0C@4wO
zGmT|$Ud(?!S16c|-?bRFW;`%E1DIK%{2`MQ5RmFZ7dRQi;Ex>@cycxnWFIi=9sX3)
zBc{daK+a9$*^aaTI87q?FrO%nUcg;$R(g$aU=%#^8p@=F+Bfx)!hHD1p>Lyu3oh$3
z<+3lf6t@0WrBKk2=?feMNQ{0Qd&ugyulbZMt&R0&t-fvDP3Az~X3_FIaFc6dA9?xr
zGGIiaZ#Q7~#YvJn{}SNz10xw=+)7w<v3xs50-|^r|3tuWYZI6wnV%<7_hNTHmGCL?
zYlEM#8%9r<_6fs1*7+woaa{;#*k5!P1#Jp?xA6aI3xeVzA@LAs7XgY6(Yb%cGl&U<
z$$UNG0wmvuK2vbKIxloRC4be##>Y>^k}?reg^%z^B@i*?5kN*kKO~8u+ATn94Le>5
z7Gu~jOp^?ONsEer5&~HSQw0F2158DdqpCrjqlkmi%3T^qgvo`DNi87&ht0$J<M^px
zzff#FXT+JCS*Q-M_3yfD<<;-ZWXLl3*+sZ$J0HRJ$KB~~@{EbOsSpPrsl#vzklZ9A
zgSgP6W9DjoFzo<<ba2~aE?j9l5t>iVxJMs&)($d_(=O5i;53S2!C`B%V{ecxAERqb
zp6PEuM6O!5N*}wlY()weJW~Q$(_QrXb!Ms1@CUu2^LO@dI2Wgg(T`;oSa0Uq_h(SK
zs@9yZZXSP;J+WdBYMuwfq|Tq<eF>w?73r^XrbKom+0sWw3KCX7kj((2<oXx;;;Xs6
zLeZ(8mCD5JP8YbdNisj3{HgO-=01ASo0br&xw(wVezE(WBH5|jB_#RyD_s3)h62jr
zPe(G_SKT`$!Kc{-ck9!iE(uV!`tiS$EpjIy1YKr9svw9UG$Al1-BAHRU2A;Inv@@}
z4UP?q)brCL?)IWPFJ5zei%)KWdJjT!sMOFqmc;rYDv$)G9gdlyG9tGC)QgZxA)twY
zs$16kft0T@6#*=wV!!|+Ha!&w(g5=^oYm*~FaGKEd}2-BnV)J@N1`o%ym$1X>)YFq
zp5>TwXCL#?sy5xc{qXGzfJLIn_`OAriAn;f&z}LN;Qt>U@WO(VHEYr2#}?iBhI)O{
z{y&YA5NQE$8U%G86l=<(EBa8mOoR=0;@qq$Gc6$v8gSe3hhJWU<c5KOjbiAmBF?{V
z0Pb8pJiol>gZ-tlk_0~25~`EQ_UDF$Ui+$F$ji}RY}Dtg;{$u`4Qp=TH8+O+Ny5h&
zj3QS?KZWfQ#R+ZOt5)_pfYDDaszk3%2DF;=7pu3(;6|OFV<B)`U1DF0DHc4*;93gq
zk6rV~=AE|t5owS#|B1_O!oZL9_DNT*_Tosj1W4$vHg<oD<$kpJFF^?sM4)Z#)1CYi
zE<kd?$w(k6D!NdCgdnKA_~ZNRxCN37P)h<;*H1I}pi9Emg$StPs4Z!X#{q(Al>oU6
z`V!v`fV+g=hY(3!gwbN5o*cuPVTM{Ha4ctHZlHvySp;fDF!Bkgn_#342&rq1_47o&
zpn^pEHEXg)#9)&Bazh{=F5n%1emyVuOM7vlRbR#Sd|}(*&h=ETJX;<C$uwm-s4h1}
z?IB@j%zM5+Cq#qxO2p}0olh!axEhgIRtAqua~xYVkh5*fc!xhnw!f#YA}5XKI?@8*
zG>GKGXLD)Q%PpVtQbmO0=Vg^H%g7bA6p2}2yZ~nQ0-^z47*yTdB|p2)tPJ~pu{pT&
zis8NQ&>P1(q{0_gNK`VHTvOm1|5wvptoD{R+1u9N%&V<H6-ngnPaUX{2kZd`X9Li)
zUUyrnleM5c{$&Pm42G=I`?FYTPtre$Wy$bh3%I+^u;g{-{fRD~WPMZsBpQE(7|={S
zCeUf<U3bz?XZR<+|FjG+(%b#WTK|NZejBDZ!62v0F)$e?Jl*i8yFiF_e=+O7V->9K
zQ|~cuZzGHm48;xb;(|qa1a!&rVt$(%14Nzef%KI)5Ht=UGUUJez<p|FFBD2b>Iqi>
zLq&%1L5Af>;&8>p>~Ik>D1x^L4ah+%B)|efV$&OtaWTM@WUzyp&?Z8|un;V{7|1vA
zo)27aa;I)K8`9sNz5F|)r4>c;2;k4c$70g4FEr}mLbUiTWGue_@#S#xpbIl&X}M@3
z<s^owPsg3Xz54<oqO2pCH@)ah?W6m6A^zp1@%)Um064`%yU<CDlq>cb&Z>6?)mpgm
zg0kJSnq1g8XW3rBEP^pB7P^-eDT}ctgf)chn1^eAWu0BG9%*iHHvRFXE6=`CeVj?s
zmc39uijvj7=WXrb=X}}om+HC9O8cCxuj4JXsxIDmK;5##U<@(XXGrvJAwHy*sYND(
z>;od&;{pbU2!ce|i@j-F2^{ko?ym!fT9WkrDyfkho+ic-?5$buYSteoe=^chgunI}
zAaR53GWkgoaoq8@_4@jDf-c=Nef@px8xSYzj^R%--|xWs9Veh}```}upzRG1?+!@r
zvtuBXEDmA_U8!g9u|Gf}XVlL%9&@N-NRI=&xCjWyC%^~3<Vrj&hyxH4<2h6ju&Qie
zv=6EXIMiograuqi6~R1OAml*O{s7NX_PI>)0ZefEWkLezD-k!8n-hm&+VB^e7#|XN
z*B@PPwu1Q(Vb9p^^7a4HldG8GSwaGcV-SWBX8qZ3&=$$r1%}7&@qkQLnKY6GGb4Rz
zV8RF(+#1KdPr1U*7~GY!U$6R$Dg2+tNsY7sIK?AL(dP_ocu6nvWBHut?t0}22XBHq
zWJg*CcpiWqUwQzZgAC_j7P1IK6C17pE`C+fUOYP4+*3T~tJkhM|CRY%MlU>}|DM-{
zfcE$=WVQ_V7<+FGgR0M2!8~W{8_a-}c_<<-OoK-pTv*^ng~1$`=-a9%BZ|aEML-|m
z=XA2;)SyK`EdXYHiAk5?sV2kzCa~;j8{8J@`@4*N^fI50(o1jE)1*IbwnIAq7zH2#
zn}W|fV}K6n58#Q<fA=DvgaeRx10;~Wy2Ncbg(@T{Att%MTQV4*ul9Ax&ViU@7!ntu
z^H_-lP=D3m(@bA@WNJgpev&M%mkQClMeh;NMnOR!=^_I13LtbtnISRd5wJf3Y%UN9
zuKW~eSHQYHhJjvSSx6il%3!j$0O3**P*xH_=4zh+>6^N8XkWCguA1+taex7nJMbs#
z*t)fX|Mt6A*^7%u>P0zm?cUy(|7%~NSGxs1OCOKN8k6^h!e8*ito`V{OMq2`G;JZJ
z2}bUJE{EY6I6BL*Z{8D5MxZIDzvYofK-&MOaS|gf08YV3(lK@Dl%&T>{n@ihoBqtJ
zR{bq6?y(2YG*riB<jR0mQi)$OO8!&~^h2^9O$ZC7z<b9KwdV1npC7^{*Yw!6<Fn0O
zxidfUs&!X=aO2AHa<cyP`B@0)t~qP1$o28dZ(&hb@<T(Mv-wS?;S9nHJ#d=)6WnYt
zunGeok?7wl)l`I%H$nSh8St`dcCFA6BDZ;hVcuhyYys1r#4NG<{Y2hJoxUanCaZkO
zFQ2;J_WqifO`mkin*ANm_S@Zg$M~n+$tT@=+|{?ueBxJKDLJ~l{X0ay1kz6wA>G8l
z?nED}4Z1aEWLA^hpPE_3g-ZOpnzInkujzUFXmbK+ypa$C>HHDjK^H!;>5(b~^hkit
z4<pH7#PO8?I2ZvLuBRMIRtaGJ07sz+Q~?|svN2Q4BWjj_R!OM?q-(47xn!afQ8!J>
z096FU;{YlGqy;HBOv8bHcpm3pyb?e6&b`k3{IPl;KjWrL`d<C1;hq7DCM=v$XU<OQ
z7+|(FTWg8xx3X5w-uG}dgjWR5kc)&P5L$?u42E!U|51T?H-cqGs0C9$O5V|Fq;aw$
zEdWl%AS*aEtCz@FCaxMe_r1BGFqX{);aRU;$>G=42aYfuFe4An$ZnKS0QwNh0jw7=
z%8-!@$pWzc?TErzT>szK;L__Wc5Q09InLJq{3}-6aPYNfUG>)WqhtA`5YP{=z)V#T
z{N!YVI{DjXkI`>l{Yjf;&S-kByKUX8&0=94T-O8VG;P+6wNc_=LlS*wN!S&p5*4Aw
zQ2}ssdeyC3V;kG@5;L9Tdo<f$@+6jBhNe%%zK)lRBD~S<iR70c0LeC6N`!RIl399e
z^(!KU=EohrX7qP&_v<X|Nnm}Q@Z0cytPf8%)9G!0@pUn=FfraaVRKC)3Q#}q*aDxR
z98fn(kc!w@FrM`%W<z=uAQ5=F2q1R8hW%sJ0R4<O6^UD*Ahm$@K%nzUI}w6FU@-zd
z=Rvs!Doy~nLQ&{d-895t+7W6TIJm;XT#>d17J(L-1vy}z4H;Of)7OMV12Qr@=Te<d
zLl*(uL2!5$*Sum2UiGH!&eYtIdY-L*={cnvKiFF=bAmkdyZGe2kExSij%L4{&*gFO
ziF!CQ4e(+g$Ph?Gj*z}7LY~JD57HiroFk3qTs53Me9{gejWps&3xHEFRO(Yr9>WzY
z&%JR&Zp}Nx+2#60Z<sK9R{0166O3F%3`+JHy(A7LaBhN0n;U!(;1$5^feaRbTn=pP
z97JpZFZuO#c<I|F>~MLq8BOuR7P0d~uUK*Y<2P-1(VJHHj+7mnOoga-iVbDj8Roex
z2IB30MvnDc*S^nTm20c5`R0a+YwXeCv(fNdFev%QZo0JE*BAnNcQF)3bYi0GLx;i3
z(*im@UspswC1uk@wuTQZwHT@%)4KlH&tH-K)W0<npsniTg*kD8jM_8uB&o)UHA%2)
z1VG;>Gj*LjJM(ucEaL7uffN$>pCaY~bRYml>}bmZ6WO2U3MAWsVh6zFb?WjAh?g03
zcmeSSLM2s<kFPBmOvV8|v}JJoJk;}zZ?8y@k>*0gd;r??E0jk-s8t1XA@F$*Sdh91
zP#!-5$QcqFMj3oVV%cFhu*$@I!Hx@noLV5nTC_r!Mger8N{)lk%0?;#gwZaHC^#(m
zM`!W6x9-73m#lD(&rH?xV)I+hDqa7cLN3b`>+z($GxcN6_{Z-s9gc-XhDYydftQ9M
zI2jxnFqnl!w}6L_$S{}5@{lilx9Tl5^-Gf4|D<v9A}s(;v7q(68tIj|dhI!vUsT!s
znP{q6-FbQ0+;Vdf0U6yC@&G3{8`?xh^I(GibCd|U_GPbd#`*!H2xb)^{3*z64~((%
z5gINo`q?48<paCybz4K>%}&*EL=J6mw|w~8(shSlI&$5|UOal?n|JnaIeSfI)zCnp
z&&k>(mhUbGp3R6q)VYcN%(XvXVC&vhYt2_DhAy(#t-2Zw&sRUw+x-Bez+j93<((3h
zwc3?WtzpjquBF}jv_xDdJVp2mfriIWBV!+exs|3rUh^BX+}n$NVgeu~bArBOZGT&K
zr{#1VNImh_S1N#Rr#=O<>sh-V6U6g%UFV&k?<YxM+rz)xD4=U(&~f`?ClUqYbEp$!
z*H%I05(G}%&-j((2@=ru2k3fCr2?R&Pj<gC5}+l6F%m$^hpzKO7sU+_5L6_QOp-GG
zu>kl&3#d!3{2OVPLQ^vIIl%f+hNc7-bHKh;2IjMb1QZ~e1?>~i%z*he2v#RjpnhTX
z_k;*A5f=mG4H=jSr|0p@zi~A-t<Tvr^E34xvGaePRk`wY+Ntp5#$qsiQ1I5AkOk+?
z?;QiOWrWg%w-my(@_1;<5R*#?^BEfrG5f{3N4kh~0FcJXjr1LL3Pm#W&tyzoy>|EY
zd$YSgXU_V~v2~Go-Cu3z$WDW0dpWncBKq;nI0P-X$0#IQsmlk|8WLlAR!I36m|TPu
zi;!U*+@1jE1q8ECz!DAGfs3bZU%=yEn-&lMsO}#*BJ6r-+L6hDtPNqCVZ_8_lT{y_
z@sEA_XzR%@99=#%_w1epoeleQS6xxz7k;hLnyvN~*E;8Jdn>O~64E1Wo%}O^y@DaX
zMPg_dgBxEjZKjOo8is(d7&r+e3{nK>t~&&e&3yDMz0Ju>iZANUyCC%hqF2Y(X5e=*
z_ti3;WX*1;i`J03?#C(d>!m&VcewKX@4)ii<A7v*(7v8}`ZjSdE&>uh0J_kCt`3z7
z0CoS#aqBC)&a-+R+KPxqJ;b3P4+Lr{=z9|MGYNw>DN<Q!13bf^Hco2eJ9QxwJcBcs
zrUY41m?mHv45m8Y;0|Sd+rSzNxWN%>P(`FbQ$oowpID5rZ%U$Ia`ewc*swoBo?MrV
zI+)c2az0?wzauc}<p~HOd`g`V(Kb&aOa3T~VDvbc3oX3;E&n1G79GDgpDP@Y|9;lJ
zGq>GCgDouxedb{r9DDm-{vkVD`xcMSHb3-*YwdNtM-kq35F%QIxBkfi+<(jnhbqE6
z;C*&{-`rEvT7sJ*0BM}ONDF{dr0Y*+z?EX2U$OF>x9-ku{wrhJtB<c|{K~)BX*zw&
zs>3i!WiBHhEHeU_eTw)eu@;bd;yY=tJV`ur0$dLQVn0AdK)4L)*T9T^7}?dd-34Ot
zC`_VbNe{KjmN@)iP3*s~E}nR>6&^myuw1jb>sodoE!)i7kdE&j^&WZK{qwi}lNb20
zuuY!y1wWPSIcM}5S3eqfjizn&m=|w<D|cBBkEmre2+F6V!r+Vn&U%T_vlv2${9~9(
zR1FR+Q!zjmzm&*`Hx?HMO8Q5HzAlNrqz~qH-qp`YeIGB@(TScORCn!qG(sBw#DABy
zJ7(44Q^Yg&#EeH>9~S_Oajwi8+oZlEX?Ns(Dp4e6KygA>(0u}CbTj$260&24r`mgc
z-0jeLzRNH#E&%8@wCRZcr<1n6AtiY#2;xMqeoiV=y3o%|BC1Gmlff{hQdSTsWl}Lf
zUk&v$`Y|#lgP#G`84@=;B*CQZiUKw`vRvT4X^F`Npa5WaQef><64_=8%xnOT51#b^
zD}*#?rmh=lvKZDwosO1~(OAL@U=J1W_>_-ddHcsgDf_vTMg0Nq6B`aLJ~4MPihyK|
z@A{rCn^$Kpe|Wy;Ee(z_=iUEpGcN`%{^282`0o9UW^cLN!<;AHf6wd}-_`Pi<fTa?
zjguB>0q_D2-K}*}==RZ7!xs<ieE%pLeT|%~);I0R@yp-0&2)-O2!#c+cK|YMaavy|
zX@Na`BC~P&*o4|5M+E>)1R~|GPGBn_9|h!5AX<bBYLMQN8X2(cda%qeq~CyS&4Gz!
za9I;-kXx0g&U4JqnqvBBDE2?l6nES<=N~=J!d%bb;A8HsS3WR*>(@{2KJ$3HUv^_(
zKfnH78DU6-hPZggTe+PbLn{n9tzA{g-;~IVa@cDGM$Q7P9)=cmyf#OJ3Ct2KZ+8;E
zOumwzJ9Yl_bDg)_N<0yxFYyc0an5TO0C7T%-So)Sj}ne@+Up|F={wUT1VzYelmFr^
zeKZdzk$Q|2=(WBlGWX-Lfs*X09rFnSz_|K7jU05`{>W-rPdH-VeDx+sMg}Uq>-U=a
zv`G926p>G#29@;nInv3V&;UAr<h-b$DXl!De-rg2KDSf|=nGScnGgU@-9IP(24K*I
zTp3Mp+hnBh!zNqeWjO;GArunhK&a8c-IKsVRU#KitT+x#9FCA}y5N=zBjW<uKotRm
z1n83y&tP<Q1=eM35O_Z96@B8)d#CZ9|NiMPS6JalWAXO8svmjLLTfHKIh{CD1l?_w
z%YM6r&A(G^z<2#1%-G5-is$ngCo-mPJKXxl6;st|a+OY#e;Ow}(gNTG7>OHS@{us!
zJCNHmu=Vv@3me`it5FZH*XkF(e8|4w7sen#e&cx<1EY|l#bH(;Ei$&}U~CXz69BjA
zbCBy#Yi-{~NkM<m9|Po5fSd+`c_3&g2SFM7kgNc1SHLau1mF<Ls5VptHu^v{LO0Gp
zHX2KI__5zV5Ps#eE)Prc@mrTZvZvuMhbQTbsB=-st<LosFT2f(j2+FE=bp9c4d&3m
zHn^S-X&5|Ffn|mnGOK~Xvw&<LQzkyJ0M`H}J*hYSkqFFSiYuV3T3Kx36Ys8935}9|
z{2C-<fH)m@x$t!ic)E4_Q~<Q0f`rI-!Ztr$0O&5hTk9XY#U;;NjRN91d@RSL%pB?T
z-!1^?mzB9qyJ+Yf8#Tr4Vu0+D+i$H7>Y(IsUBY-}J`~?XC3}_dV~0pGR-$5n@;<$#
z$mCyrm8zJc0)UVJmGmt=KA_tX5<tdF78M6{QH215X)#VkfnkwH4#PGRc&VeonNV`%
z<3&P0I7X{;8468_@kxP|R0OylOv{In^}%TrU=k8QZ&2-pOelqnS(oaZ#wbY;1h7{O
zh%bNbG5!bd|C&EEuqxM(Pkr>h=BM5?UtfrxITE1XvpGA<)|Ym_s$y*Vbtx+2j4@jn
zjrnS{?{AMZ?)by`28m5iW}%!$8l6ZBfEQ3CAN$FN!TQ0G^7hKco7ZR8|61NFt#y|c
z-0^iBSG;wtIewmi-<ScfjDq*{08s-V(;s`K(m?|yfUQ#GKO)7^-g$yylipu{A3%yp
zA#ofK$H0PVAZ!7F8&kZMjw{*rq7#T=2(lFh2vg^JR8R{Qq}!|(!ngm_VRx!kEIl55
zZuQanV@FTc2Wi$BFb160eBKF**VdcM%`Fo*+N;Md67?Y9hG8HyBtkA>4RK_~B?fnL
z<i_;MUfPEcngT~%0iTkjK}CRG1uUruh_|$=+^iBmeWllcwg&2>*G_`^b)mu_f%=n$
zJqbLorD$=9(ACAOW|UH5{Jl!bN*c&$8BqKDw&DBax$EoHNmK<x;?+-!Ws+IHJ}Axa
z?}Gnz5zws&=)A)cv_TQzH1ki1J39l8_y`g*eSAsK097i)1px5@DDkW7IH$K8j0{2i
zYD6Fu0${~xKs*XyhDHGrJ^(iur}vOegnlXlY>Df$q?hOFDHfPOEdp*mrr(}Db%BZF
z5~BwqWTQwG0cOSp%Mc%ckN_ftXojcez0f-BgwjCgFjB64R0RCpKi`TEfBY_g#n7sP
z$DjJholBqm>Dk)6IGHo~O13wXH+%aSH!Uw(o}X(@*QuUvBQ9yA@hk)t(P_K@BIyEX
z-oLhYw6e9l{*~kQnqRZR;)FZd@(22t>X*ND$l3L>VVH#)eAk6Byap_nQQZx9NM~Gz
z0Lk=7@81KU1x6d|MIMZi9chdJsBA(`F3SK2@^>L+1B{$qLKiY<fRTGkZ2rQiP4*(l
zrb}OmAt&H*NZ$Z!8RXvz5wy?}eQ1W9Qy+G66ev0gk-vMdb>(klg7USE=3IU4*hS8o
z@rzM&eM&c^08<J!vyUUQ0_fic6i2juueujQV9J#sTVNuoB^JHP$S%&kbRTLYK+jn_
z3+rS^bNi%>ZnNm)5kPWXTshD_A8l(B+YTon3!yQZVc%ZRlXT}gxieY>6cYk<VonMU
zRX`|qTerE-iMLb5M|{5YcX1-`()(-Y1`SHI%Yfv5+7`i2GYwEz$I`(VQb>MBojg^=
z#MP5}c&>?yq=X<>9}T3aM^#e?x(#^%$9n&c?;RB&<Y&ma^0r_S_fj5bz)Ni+^l>yK
zN7)kCJ_!8iI4un1I65R?x*P+C85~zHbTWxRsYVX*i^lc)U7b%g7D&hrw2jY1cytMG
zdCf(boUGa3{N91;X#biwoZ0)5!?y$<|1FOeNW~i_pXvK}v9;hWV&V9S*QT9+8qaQ|
z1;Fz>I{t1F6P2OzuF8&|8#7kDLwNSk@_f@B?Vqn+{MtVIf|spua^vKv)<l>s!yFn@
z-KmsWFr%Or)u={?CGck*jAr~Q>DM7eQ9$P6f77RPl>@Vom;>YjctrF6MW9&&^J9bi
zP^yJ1vL(S9Ay5w?n*!36TzV2jH!!3rY}-V=mcw6vt}c!(WlX1Bf28WpOwu!ZX3(a#
z`R%bUxHu<Q|4!3esP~mOI9txR0abGDA&8!k4C3+?I5I;(|7MBal?40i)MHt|5f7-*
zN?TLw^ff(9{~jeFH3o?1`m``eGx*g3DB7g%=qYiK{cXn(De>Z`Iesj=qucA!Ac6PW
zM1qb<kKXhbzwUY#AHyV+B{kfwl>u!&UdJRz-FFvffWD8%_sMk%yy*4=Q1=n@6yp2S
z2tlWyP-=ztS?_eds>q-_R67-7<wAUB+OMxZY^s2ghl-I1reJ>hImraoD-st1L_(yO
zNYxPJz)1W7f|@AnQw|5ioeaow;3`wV14lIiR^))ie&DfL30`J6GN#E1eMcCamiAY$
zEkb$pOQ&ilDgxBs1dTc3gNqW$fJ8W5$FKd;b(op?xbx7H^VPocmfze`deN<SyI=VR
zl?l&0;-cw<Yo06FY#OI?q$7amc_dxHj{a@uoLxHabKEP8G?y2fBLi-D-Zf?WlADUW
zyoMO-l;H+p<Od*3TX%Adx_!!M4a(AS#-Q#;>;A#A;F4%m79<=nNm~IkF&w%?rlkOV
z4d=m{(?GKdkd8jtXX{FcmVm5Fpe7;f0#U<<Uk|{2AX_S+;pcGs12+EoHt9dQ;5W;~
zV*dhv@XZg*edEK=4BpfUyvI3fUB7w7qkd5LE#719J@XfM#3~3#Y|goEL~Rad1w(NM
zFtVKt;<(b2+m^tz4;*jl`E*DNew1uYZ<I~ccnZEYq!3h45j>rAysEKpL;Cun6Ta$H
z+w#8zvX8xUlsA83suPa~NY<C|16U0Aw|}2T0czn-yC7&M>GnB{;eYKBpzbd|F8#HA
z+it&ruHqws{j~=Gk>X+mA^ur=<k0n@ksOM0os40B-O1~YUX2GRiPJeUK-HjnP1Mgw
z8c4H$Qwr0OY7GUATeL!e$b*_VsPeSp1JL&|C%^<1ZrrpOB1_^@6S&M`ptm7)G&uwK
z;WTi(3gjb+%DlkDQHIKq2u>6sYeldOAM_?=JW$026#!~+ar{ClK1=*03AHhL49rT7
zxBcoz#Bwzw3fa8*WbmoYPcGfLpNar2{7fT_7gnSNzzZPxZz!+daDL^=$J`p4{gsA)
z%`5xtbFZ;^X?4J9#c5=%g;CzjndOi|9YVN}ScVK20I>|FOxm?ZOZ)XF!&$unP)Y}k
z`~a8}n*vb*KyK@GFk=7Lr@-7A;QD~;K`pi?2bQ|fiN6Vmri8ofLe@Owcm}gx3Ez0c
z#<w3d!>4A9P-cySl@HKhhkx(!rCWZd=F-F#KV|`-lYhZp*E?w4{HTolo+xDEg6%(N
z+PPKmJP*?15NgKE;S6yUHcJei#Z-MmWI#$HOA&CWMqMYZ@=eypYlxqA0}!*H2!GO$
z#BtQnKNSH<&Q*lB_*p3AfVxzbgt?a7b^GnBpDWh9w$DxEemaY4W`7KSC)|N#Uw|^}
z>m>f9IB0*L6aeiRe%$%TV}WGG-`0)jwZ5HMze;sUHNs;Q;>4ms=f$M*h~GnPGD3VF
zln;Pr^eY|&{aY0VMD)|AM!gMVxgewZOuY?h_X1PIOG@;#DNi-lBomAa2pY}M?@$3i
zBtg>xEDmm4fG~l*Hp9ha21vC8{kr71Whw$qrJO*bZx$GTN}xoZJ5nNRhOi9}oRk5a
zAclDVvOXE~RllO~xeH~8OrL`Xk1ybD|KneUZ4U9A6D;lv|7FYmg@@-)rbj>;X*^ev
zjsTv=LCHU7W%=gfSs$#|Jb&XBJAB6n&UZ>{42Y-<@(U+Vf6g69u>=+zg&@<Os0xTG
zSVZ_deGr>!PRcq$ZAfl_aZ4`&qMyrU#RCA#sSh$W9uPIi))bi6R6ecnJfImu)+4=*
zg)9J?K-A*!8UY+>!IdR^?p}_6y(bKhED4ly8K*o*rNq=%k9ZIK%8}aRj|I<Qt64I0
zb?iZ_&%XAnh|u5iLigN_Z?f~bRj852zhNMvB*Y06;mEE92DdU8jwbyPZN4EGj#gs=
zpX&1TraG1U$){iCMm@=I=iUUK*RvG$A2o_PE$Za0{*_1q;u$+-zP1{mizq<IbIhfW
zzs5;7f!mYB9RH4110)u|UA2?CU1IecFZ78!{DijG8C7(=0or>75(XbVetZ%X0-y+T
z3WXQR3SqSZI(Z81nLt}I*jZGh<_x-kRUCu}f|(>kj3tYjU8oBYwMIC8ZK-HW&O_Y&
z$7+40CZrKfLLN}JB%dG2@GSrhNL)cCP7){?0_P1fe0xfu#W>~$gj%u7nhau=Oq@7!
z7K1H(Wy-@?2*x6X1~4f_l#B$lsWnVkaHm?>HZq9c_?c_?|MP*bgr+$*w9dTo-y5an
z3#Y0_{d8uZ#tSXd0^oTX$%jdQW?;;ay?aewt^f3Io$r)3^}<`qAY%n!;Za158L(gu
zhN!7eURo=wKD6R)PV1=*)d|z5DKXv^;Y;bRENF{13yf^>(1KJSqvVy|gmmWsx2_kp
z(@dQ@|3(D1EEPXc);WBl5lDeTu82Dyvhh#fb;ScyVVKS5azn!sEgb&T;ozzFAFe)e
zXSLOcr`|tqx1`UBWoB7l=Gyn0qO`l}&ewOXd8s`(xDB<2Uht!q>XFX6!jT;p7}&;O
z7YulzP_BMN-8!@+;pwrxp8G2{Kb^UFagOAInBeUKpiBFoT#`iGZpu4z06}AbZe$>S
zO*#EU9bL>1XeUh7M0ezVZ3H1c9=+wSLk?64H|7AGVE3DJ=3Pl%%L5Z7K<BtSCPncK
zx;<iuSK+D`iV~vg*A+8C6&6YIPGpJdFk>^Ic99Vm6!f@lLSSN1tjdX`ZqO`CLSQ_m
zl6*2%SL%Uy#G>t!_4y$qCb~aDR0L<7Y=z0t_ZISKkP=sA4b&omL5pK&A8_jo`8sgS
z3<(%6FdQ)0vqWRDkhd5dZoo7Qa6$s;H78apIRz<#AQeNAI){eHz&%>W)w?$1=qr}Z
zzxd?$>MMFy?OtnL_s7ebkG!MhDL099cAv%zCei}nc^)>;4h2DE_vE>#hy?_9?gR4{
z5V1Nq3t=dDKTb|<!<BfjOG#hhrF1dD;;#xnrSHiRkbAmFkcmT!tB?X2ECU`9{ybd(
zsN^pIO8$!yqR!wq1Z>lQCoA~-FG+my?$DJPr!X`S+4Iq{4?R_X<PWA=M~}1!IZ&xd
z_oL4gDjmpP^Tr%o^@~fb$@;qCz0UfH%P`;cAxy4Ge?%rPF=R$0dN%<D()ve2llcG~
ztr3u+GYwh$MoQ05>w9V6y@vQz@>eK8$G}Gm+vB-#+d7w`1Fx&R-L17(KTgbZRD$H%
z0w^KFbuHdex9OPhB#GXTj4K*IYzwSz8+ZLGxwn(OO4c2Ns6^+Vs1EcCpl$Hlg+n4~
zNH_~^`5)I3#V%*UqyUKDYHi=6WDRuk@A&o!5m22Mt)(O?poag$xZ6*Psn|PN9flKo
z36PXAxdBxL#5*NFfLLZpb%SMcGOpxiBo*|3dqAEAAugwc9|5a!91Fby4=$2(H3wEo
z$bg}rwiPasUxG=}RoI3J%M8Iqpr9F|fijUe1sWO|VT79*@QzmTvsdrMzN2%_mu`Qu
zInlG}m)6=>-u969xlcW#H+C9nJjan10MGMi1l1!V@A(I3TlmaBK7rT0v6tqi9D$>H
zvWSd#NRuyJfJd=!J@Lh2moq8?sOz^(NZVAt>d4q&nWQiv0X8*yf!da4a9e$_!mF#~
zF9S;cL7e;ru%x?xBKl<=3;Sow_~2(k9GJ8HQeUpnkjHL&xPJG~9<1$q)K^e{f@Y{P
z<r$m_oz#Ykm+dJSJ3d@*&DIA?>+M}<yc|`J;9IV>`-EQ*A94&RZvrYKTy2`8#ABJj
z;kv|9QzsPF`BM(1ZnERu(}C+%(vSJroowGmzLj;N;^yg0r%riSV$?Z3w)gEK0+O^Z
z*}JE26nD9?EKV=|=`i;R)rlwRNpe-7Lc17<A1BGUNk>n-0)0H4&Oa^|)D1gx{dVyp
zh&)Im_YRs76A3km;l%DgCPUJ((yTtYC#{I+GB8rcNpW$Zdw&h@6Tcxr59rv407#31
zTslFlBN6N#IV4^S@ljD?CT|5Qgy^lGl?*>roC=9cGr+tM*k0i3t$T1;&<YGpPXMgN
zP;nW8I&laX@`8aFG$z>&3bK15pTS6V|LSoJ!DUEA0S6NXf@2N*)@xsaClCLfeROKR
zIhecfldB8UTMyKK@NkL(r13(Dlmz%Z50e`>x3c%WL&lol@S63xb9ZL!y?YDhiWQ8P
zizd%yB^=uYBf)bl@ly~uEo9;J0Y-*B+5;c94Q6pj+W>P+@C+3MCWJww0pbME$bdGa
zkrI$r-FX1X`)UHHN?=w%EHMO&5po8{eaCw7ho1~Z2uBpl(m517_MZC}e)wmL&8o`$
zC+~w$r-I)6nJX&x^^f{))ijakm+ksR9`b$!QGmeU2x$3Cjv>1OC~p8(Y+_2kA5u|}
zVVLxQBQ(0829g?5>TwkTkmQ1zLat<JF{53?q&7Vs=;FXDlp$vB$H|DK?d`;`yKbd4
zS63#4zXWzqo>h`$W5S+RplSX=JHaPpKzh7nWYEP2NQwaM%-2x~7@QmeJ9`M)UjOki
zbjAk>`@gfdK=b)@@{R!yefWv{U-Dey)1kh^9{b81r`sMlaS9}LMNA4*w~0x8>Y@yn
zItzkSw@*6)oX#!=bs)-GSd$E?STIc@2P%Rg)ws&YickRCV(={BVh2hgKsE#!#_{zz
zfo4;}5e(%8VEBHC!U4eYB}yhk&XTZA35(O)f>sXs+R?JTT2Vk!)u=d>5u837kGGca
zrr-ZZ0ak)#dh`3kf7vqG*thsXE&{rx$NIY$?sG}w|2xtG-~|vpPRTyM_o9Cs!uYF$
zh7>mZu;ehmkdH*UEHT(8`S3_&53d9t8Z%HK1C-tnu=M6SWdR#_Ktz%!`jq70#FEb#
z;En}Bs6gz$s&X1-AX;wU@}cb2ssLMLkVFYs6v#@B$BvZo>z@n+H%*bth4w!G?knz@
zx$j$16#a)C1t%l<=bee%fb+_G5sEc|C&Np(|Gb&auR=5MAyo1QWQLMILtzcDYO6LQ
zB*mhck(luqo?6s;a;i>3O6=4=D&~Ke(NAJXqik#SpNAf=#Lr00v*Qj_omfiPn))ZZ
zwf2d%O`^9?*!M{`jf(<J5Y)fT{tx<m`LqHdA?|5tUbpJH<0nTvsnh~g%IRN@#}VrL
z?zw#zPavNAs}cPPl0l7dXupBD>sC)Rf#s8qza#xS!P+Td|0mo4l31#QpQr?MQ9wQb
zssK<53qAK&w~HMFjjZ0?5Gx7P_w*j7`_r2Q<K;qzcCw`9L3T`U@lA#+GQfF6Z=vCq
zFY)zxfcXr$5a^!<`tO&>9hI<rpk!%Z0ox!nLBNpo*F#hQdQa2k#J$O+49HKE@wIy&
z!ms?pC;fq*(VQP0|MDa5M{cP5%i@KeI7x94Dmd`OMDfCXMrk}f(gNUl9?6GD$tf6{
zOB*g-VXu5m$t>=6q`AV9tj7=$Oc}vsAu>kb=Cgqq9pHR?Ju_FG?O<f14U`xnqX0(Q
z_$nFugaC~Il#a@Pa5NGi>C=<u|CF5k5VSv6E`?y^3ADiB&q5jh)Ehl`=RbO4+Cx|_
z`MJa4eHY$w^uF(RAMeR}_VjUMn`J(ff6XT>ly7d-YxVOsyvZ3F+(k}*1d(X79t+5f
zab#CWOl)UxdH|Pz50iGu1CPv*&Oc`P#|VHn2@*ot{U&y`$xJ$yvZ)R>E(&51K&*UA
zKxp+3&6HQ<xi&*k&)X^5r=zo_udVq{@a^{IzP7!uCcec!0qw+{$OzS=Yra4m#6Lmb
z|1`gVu48#R8h{gui{u%^>ww$$P1_BX6_PFs==sOcy@vne1widNM@$rm5rD)(S>YlH
zLBi-11Zo=*eXl$ssl(^G2q0;oLIUEkfll^XyRRgIdVvtPv_OHj2^y5ZEww~QJ?`ZW
zu*>8MNI1|ExNBbf1LOol|CB`U{Xp)RgzZTbO{Sa%=`hG0!(>zl&~uK+3W8{d9k)z6
z_bfzlZ7<&c`7h$bU%S0IQkf{t`FFqj5%*vIBqE#a7f`xP{&pSHX1jXNzF;iB=K2uL
z>f^NsKl<q0lZU$uFVi?hA}s)30MTui<JcyOnY>-L3+28{X-$uvofyoPw+&h4t9y;?
z4l`n=^56G-H)jW8!$#ZQazhDYyNW7VMy3H{aR$O~=;UuQH4=bB#6W^(HQvf7doG1)
z?#~t&q6GtPO(19Y;eG!c;+CgEx3^amW{rnl{oSX2_=#r+D5MUNVI+6+uVnf9Kdm)q
z>YGNdwKuQ6jxQ0SL5%+x!nX%FGNZugHlQ*Zd;F7&o5Aqtj8ZQuoqwRG%F5@Tx_)J_
zOY`Y?QH>^2(g%C|T;dM4ExT{G=G{uX&Tt^{hgV&Byj8E0#A6O#yNi#XWlZSncIDHs
zelj}fE&vipzXR8|J^T}*f=d2$|A`%6;yM^VPEs7S^HZGcy9$8hy0*$7_995?6%7I;
z_PP3sgbS#yPDUxJJnAe^(#2JLT9cwcjR*9()d@ZxAt;Dncl|WG*9(Po$FDMUVrQWX
z355U{hAsf;ZJZ&QA8|c6aIOvPusHb*;elm=V|6M5fRd1?90Mx%1I|$(6H4TWFCsLL
zfJO=?jh2)OKua1m8lcxL(#6U$WL7%j9UuA#ZhQQ&KTsSk9QMC_#s0?EzVSlw2S{FZ
z(=>3+*!Az;z<2)9Qf*lXLvp9b@^4-I%9i_Q9@^J2j85ZJh_nEBfi42-4zk+q$z;ue
ze5tabJb1xcXYh@~R`Df9Xh1eXH^&7w?#`HJ|5OpqxPuTGm`l?T&1FdP!qrRH!7?0@
zR08DI))c^e0J$W=DEZF<xl9IM{ZRpb@fp|e?>BQZ&SSrM`{ZrE*KCon?&Nj`$p_~^
z_R{nEtcz~1wPxzW<?Z%4Ti(oTL8LVP#0Xc6{|cG?F!XH#hSqX~%EeVGRAAp6u-MX;
zz&@i{y)GEqD}LjSG$K9#T^Dz-df`tD-77c1II+jwZTq<@&3??Ri`Vq3xqsUuDDJ0K
zvLysvsoZr3|Ma<hauU1O2gm*b9Tr>%icrZY8Q;eOv_u}*_UK7+j~Xj<j{xFvMdBeK
zbZ6ft7V4i1A_S@h2JzbA#8)`s?zI4jKzG02lkvGq&X?-e6(2zVEJ^<HRw0ER@Gf(u
zq-f~O`;%lJO9<(0>1aeC*)B-Mf*K*H`)8aIKPNJPDgY!bgR267iUgMfXIc^$W(<|I
zZ(op#2$+k2JZ;A~0F>{RFsGo90Vke35CTBHMB1^K3IPVQy?a?zRRjy5(8p2l3GnJa
z`b*3&M`776IZp*2Uvsp1&!HDW5s(zFyM}gbygdJsN2Q#cyYct0a}GUx*uCw4Ki0pH
zt^MVv4}I*He6j#f<CKY$u#hE<=OVhj!IK3o$w#j5hnT6=!iT4h&3@+bdq4M~C%=2+
zCui=QIA~A*xjA4uJXdfY`A+12_FdCr?tu`d^bwW^fLsm;e6Sz_+yK&zz-Z?!b%^wp
z?DRbj;WAi4Vxi{X<G0kpV%Etu_{<mYn*QM*Q1Vw+uqXA|>JQ9<y`jIy*!y+Qt2GPO
zxOw)*SE5FYZ&HM*HLeUsfx#IxP+83}yt+e@qr`D|0azjzWSZAT8nR7Hc9aHRQUANQ
z>~-1S#x}fhGp+1-_3h*2+lKKw3w3lu*dg;J8}*bik22DUD+gtMlN>|mnA`uR&OaG9
zCk8<Y(BJmyPl|y~GEdY49X4X;qPGzyMMr`V#P6W?_3<`ng8Cy$``W-KDL#^20bL+S
z{2aSbg`_&7^A~dmbRqII1EZu!={^?;Dxr#-_}s-?4QXmc`>A4+hxYC0m}pCoeo8ut
zC7uB^De;9=ue~jRJ6+&AZbZ{A>?moXU|<3@1~euZ>YD(smz*#J>Y;=iNq8ZH7cfPM
z@grIZO_EZsc3uU-L_mrFX<>0zpyHMAzBjxIUQp$(6k>&O!#8@Jm09gD!JhZYznshS
za|bT?8+UQuzv8D?JLkM&v;ERv*pVAu3BMSXF6_(qDmKOQ`MIR=UyHN=cmWp!9S8c@
zUWZ^<Fw~l!yyNhp!+-vx@BYe%kK8`^ggpLXb0nKvY?l2`|IRTnzb_O<SQjGSCzLy&
zAAtEnZ}d}%UqX5UJYe7fN7$6G>>R#wXM{uZlAF1pd0+L8H!U@qB#P=JoRdiUbF3k|
z&${mGh{9YHn&R9|ujC;wA&f#nq(8;VcbKyIEv^t4U9Wey(Ad>5IgTy^Q?$;2@=HV;
z{<H&K!mvMqk*^XF=?G&zx;Cpx7RBiVONmIy`QlEReip{t_~`d2L4_hI0*G25NbgT+
zG)dS=QIHfIZS=e=u_oj3q=-n0hGZu|N1m5->4~2}XDp$Qx6}RWB824aPka2NSkk{E
zWTcNgaU)a-Ha-`LYM?v8>+=y8A92FgMOMe+SU*muC`y`VRlp>Ug~@%X^^5T?gxD^b
z)>IP@PrbJzrqr&9!d2ZSj2Aw{ubm#zYb8Y_=yj*0O-r(f*vD``5doVLqYlUVB2YD@
zDgu^GiRwm%>N<v2k<ofAGy<xN8QhRoUoa5}CcKEj7aXDF2qcFe8StqXh-@4?(85{$
z>-aBSeXV)4ddxR?dHrhZroS)RrFfw9d`+DCxOR{3xG2{sUer6<^3S`e-==lqrq$qU
z*W|+zthE)VTvE60IAEvo0*|x+I7LF)>%<VX=3nVQ(R+^^nf>5nx4!v1%a8vQ>o*E5
zR`Eaedy``Ma0J7xLYDee*Q!ME)bS^mP(t_&k#E9e2Id<MK6hu;&u26CbhPge4^@xM
z$DV^HKl$5bK9qUMhfFxTYVKll*ZLdmd}$m_-&a~MHJ`T_tRV(xRAP9Y6okwAp%jK0
ziMgf}N2aBap%g(NMMQ}$vG-M-Y-eL%JGmlG=!#JocbRI{u}*#`5cSmcN$0B*xk9lC
z&px4pCyl!5NY&#fkb45rt1djb@2)ObqYho!J+|ge;QLO}PkjE9r9+y{-*NnFtJk`U
zg^n*lQZZ<VzssqwO?ZeUf$f#RdIqk~TU>y4NfFxw!*=KbMjHyn&V}vsm=pyGAA-(B
zg0LjT0+A-#uLV~{8jZC)Z6rj=Uy{ZzN&c!3iwiy4w-oBcuNGG-WJ5~;AN7GRwglD}
zIr?%y-DL1gU@pVZ+{#f~#Svt=+I3ZzLNo=0tLtNULei!U;nGH9NlOfgDbIKy821B<
zAAQ`%o6dO=Uc70eeY|$0nG+MQS?yf^=C)bV^RoLF80qb`wwHGP_43?&c=pvLJ3CV2
zs${ZUUKufv;jA>^^p2}vN+|%ROr!<CDHyr|(|@Jpn$~oEd}9BdAH99~u{X*B3P-1N
z{-@u+3{edsNa|GR6*3@tyfVTEr%y|QS_6*A1x(w<j~<m`a>3?SMvDEd$N%Q!AGK1=
z!!k1%&Rz4184SOv-khtiAKhzDjP5~=MhzrW)E`>H8Gvv`Bu3XjWE`n%3us(i_azP<
zi?nqwb%1eKsQBwDnb6AKxD%!>Svk-#`XpD7w@S#=X(ruoq`K2Kdrx(ziBS(Fs4kSC
z+f9f>07)UCj)mN0<8Jyy20n{j@ZzM}zD=S%)Je8u_nR>EyQO^HbNw!|U-GjK>fdoF
zJOKqr?mxND4qV?!?)ovit%y(bFVMeFMnYYNN9}~)AwKGJtk)tvO_dOz8+Gngk)^FI
zI_Fd!7ndRD!bL3q=%5`s@heA1^|~trKwaXOCZ253Z2!SP;@fV7Ed{0wFk2Rb&wzyz
z(AWl4hX60b(25vZwD>Y&P(^@R45aUe7Gio4t&nC)Zt4k!B^OvY9^rqy^c5H>W$dMJ
zv028>znLiPS<_Z-JdYwNOU@nIaZRpP-q<(b`{%!+NcM^_>>>v|^sUSzBO>%WJv-4&
zgiYfGAJ4CMV;Uzt=);iE0K%fbbojo1dZcmS_l%NRc<=$!z4J>_m{Ei%Qvl0k^@lBe
zs0M@xkQ9(ZdJ!Vu!YvQ_p>1WICY$-pjC*{V?)%x$I1d+Ie5oC+{_}=EQ|~LSwYRLk
z5zBSG)F_$#o4pLV6%3<mA&O-nBtZa^@But^Oz$m9I_YGFuRHK~?%zGD*4|0~aSk1K
zm8zpukaP^$>#my~jyh6;)wxP&2}hv&_hX1VK?K@~to^+%B-)*MSCUVzJE0p-ey%qd
zb={`3M5t3-bms4E^B{HK@sghoz@R~#r0{6}s@CtRbx2*r!~}InEQb@hqPkaAz{Ds=
z8&T-mGteG)Bn3=7$8U2g;w41wa}>XT;fdo2g<4QyNAJ_8p&Y76AxnRi^y&EZ?@<wu
zOcp44TM=-NCvjgWur>#@3<=K$8U`>w1T=OsG<rD#n}N1P)5;4s{?qUU1JPzkDI2Jf
z0Np232my@+rWZq0f*$<N4X;7fU*-XTin!#XMY~UVRX$&4=$xi2QevoFv35G!|0tZP
zhL^r_)GV*|A!M&wss+))=xPU!9bka>UG7-627#U*Pa%zG7-<1;8iX=>VGPxVD{q^9
z^nJB({)a{}Yk%`gLewYoU?i9>^s26vlV(ae<uGN*YKFk%w1tPJ0+G*|m<<nq&<hCo
zJei*Wn#w*{I(y8KJHOzCHP=AVJbS}y(F`r!!KvM`5=N23Sqb#726_ho<$@g3(hnS$
zsJop6LBE$IRz+s(<^ZU!F-{;+SE5mgpJw?TI2s`YLC!4V91-KZd!8Q8uGJVInPbPi
z0NuTIPykg>w0Q)bu2#e0$^9js{0VU|o@<{#OiT!Qoq0T6N2~+l9q6JWK?F{;AwH29
z*o_i&41N-_eo~|)#f47HPb2chqY%X<XcPPBd}u?d_Sl0s6zbf@bAEOE_*}L50-a(;
z5%1$dO5Klw`eOr!`1jTMq;Wv<I>m*YMsYfv1C0QYZMIfm5HEl(7C7z=7#5hsh{I4b
zfmQ~nTEOyJpmsLUC_xnlO+(U_47ifIeW|+tIO%gr{8R*xIFJeikDGXE(#HiWH{-Q?
z_L@hk$6d!9I)BK#<TZGnMDl(xO^)lvE_{2XRybqj78dS(eJ_vbNo7aK4_pZNM6flB
z1Cd{f@)!2y$|R6@-V`xuJhMm(fYT(DJuTzdH#^sOsCD4KnNEb`^SSW*UkL>_97I-G
zz{m<gWHy4pX@2U_vLTK~jtEf?a*mY^=VrX4cb?oM)5+hldyOp4{jdnVT+5HdS?gcV
zGu9A-z*mw#rQRpf-#E~-LSkT0I~>#VvTTW?bHLoPP9&;eh?A3IgLfrh4N1p|whKDe
zNi$)jCy7R1^n6(-A+AsXIzMrNpiq;}?UH|M)Icr3X%|%8i8Db6+R%NhF;B(-?GCvu
z!jFp=y5AF+{~b7Ak3EFu97NilFqz?ZBLk`^pi@A%Ns@g0QJ~d&9p|G2_ScGlWJJ+f
z<=ajJ@o~@y0Nsv=T}p{Ix`JdZ63_j+3ll~BOL!GAGLR?()a#cJF!d!-2PlG|KBq#z
z7Wy^lLOR+Ci8eYE7i|yt3_jPAL6^KEETHCaG`BJyoXxoCWr!U8Gnd6hK+FkHqX5a^
zh4ekiOc_yWP!}9e9SiaE7hI1m!~Nz=Yo^&_?E0&b><(H-^b<{>ROpdnm0tWy#&_;M
z+uHKSXt~X+e|0U-4%7f^1Tgz(DTDSo=w+B#W4jrTk4+TDHvhy9JdKkcX#sE=L=5b<
zNniKQ9k_E=%>1=eES7Hnjtr}ZNIy;OfCEX`CViMw5+m7FXyc(nkpQzz7qg#U@)jD;
z2K=ArXJ2QE;uZDQLVe4`<>qkzW;9$+!H{ZPOlE~Efx?KyFf}LiVIHXU2AHb?#}-Hv
z&JdAIFlK>wL;BrwV%_m~LGWFYJJsP*qDwl@WE7xy0eX(#MhD^qqaH+a1v=8gggxIL
z9dtT=g}Zkr<gOWgw_d;P3Yd66C@Ew7nsz1A<kd(Z`L-!g*GM6u@^$9?-N%zCA(AnI
zzPEUjP+P*N%Y-gfLKi_W88~P(BmP$xHz83rD7+>vd^(cEB*`cK0xVue)MZW-&vH8B
zlTIN;>wqIqaSIfWLy!VPGNQLABB=K4(a)os8$j|v`Zvw^9}Ob7vG+ryjD`f78G&#&
zAh$4X78oL1&Hbt4=Wa+}NhT;2A`rxC1400lI6*SZHU<2Kh2OaLRXmKAxgQ0&UUtz(
z3wEFRlTrof*Hk%R;;a?xSG~CRye~FqoBp|P8{y;UQ_=6hD6R$PIdJJJuLjsI&Nwg6
zGYGJyu>K8Xwv@5}PK`(lfYT_ne?7-SttsxUKK4gOKA4=Dv-yv{)(ExR3%TXckd!)C
z6NWHQYi01r6oiv8G3y=u%*loSb@!h$SC)%>)8DxMqB~gG>TF$g6{@s>&@_2uFfI*n
zdz2$P42+Fxhc{YMNFGKt7ubJ1{!ml0ulSM>|JnpJr56{fBab`$Hang=;kNv*n*$Kf
z{^KOB;OjOlo%jhWc_8l;4{;*v(z7QpwuZbr$^8UEo$87^$JDLW*VlF6`E~+s7YX{g
zbqM;&$8(qA&(o!v@!bA|q9ML-orDvm1Q`T%?1<aP6&DkoJqG%A>LC+Vgg%(gV{~yJ
z+LA{?2@;h6Eij_GLlsu>IHj9Rhy)3Ex-ugk-H?1WIYvbih>JU|4A2Tir3Q#mqFDSw
zuNwghbpk#ta)gwKC`DTmwJZ>v0|aXrH}af&45SW#OMU<Z_p7xTL<FS7ue}H8zC(4N
z2A-Pna7OPcymjw&e7bqGZn6H0`;EPC#B<*9$9pYemgq$j+s=H+;H5tdkNcI)H<WSq
zTe3W?FL7R;0L&o>kmNs9rc1O8YixJX99x0r8aDjqO?|6|^jI-XA20MsU%}HP64e(~
z{`80Y_`;E?L*aqnXZdXI+uyE-wZo*dqGV$b@fR|n9qCydTe2{<%uLgWnse^tJtyyo
zbn>@&+2}W~_&Aenz~Dvf+W1Po*fJ<ra%EF&NSJ*b<_P%E2v8`{qCyFiX0oBg<A-&!
zrw%nr=DZ2>zTNT1Nl?rDH0&KGYdzaf6aiHD=zlA=f0!hG{aHxYiGbvVXcr86rkxPp
zVm?4jC~PMn1>G|Rx$D_@hoqN~;F84E?GmUEg?2*gp1pUVZB5ck2!b7-fHrEN_6?j^
zu&It+N&hs2(6;c8v%l`vlfode@Y8pk==wGKp^r(q<aLcFIt0I@7)q{>Z>!F=MoD-~
z5@d|)?S*YJUl)Q97b{7jpwD~kO_1;{D8W+}_vt=~Oc+0(_;ppc(XX2}j7X${2^A#1
zDS=-3*p66O+A?~vpo@Uk5Fl)z&ZHs*lKx*20u`}P7XhRQP)LA61ElbzA)Y)Mir4MA
z96Lug*z@jOy~wwJaKPC%s@W?i9|btkD6FlXfMuE3JUrg_Gn-!WzN<?Y-5pJ}`nF!~
zh|AttGNbw-@ZuP_P4HTUHfs^vUjaVCEWsMf@ZHxABiC%&H&0yjca=hptIra(^D>PW
zYNQ3gX%zZ1QGbwoUW9w+9{yP1w4QwUFznmDT@{?0B*X(r0+lS#%;CVS5xTBzdvfWH
zxz_Z8zMp3b0LGi}xQzkps^8D>zH3@utGRRC%eZL`BZ#ejBPPId64nZd-cgDEJ_eu6
ziDE0+Ck`<*J<U`nt#_h1*PVaN98b()V#%1gE+m0|l3Y|$Qzk%^m=YOalE_t}i%o%O
zSG_VxO6Jc>Es@OnW5gio*5h%2>WteGzho93cjhsNp+l%k5<5v1ySnWzPC(*kkiZ6s
zgP|r9c8Gy$8(~-B5OW075JS!WyY+!Fq@X+fIN`Sc9Vc(Sx3K;CCBMqMP>5s+5#3JB
z{uKi9G^t;gd{OTjR0|ck8XY8^f4r|C@d{A$05w*jA|T-w@VFr8C@i>=uIkrCy_R%|
zcP;4mf#w~EkkK~ZSQ@H%`AH4uGp5!IZ*%mLqJXvvl02{v2+sn1ht#qREkXgLjHQ7L
zKJfq&UI0CWfC!0417NNpus8?&@?|%1DLEHX@*(50f6iGYb^1<L5zyJv*!j=042)L#
z>`T_4wd1F^zVy#t-gm?C(S=pNil*Ou@!JN&>wkT~l;L6UTt8>|l@Q26up+>0bz#ir
z+%BkPVjEw!!d$t5xhony*Z=I!tNx%|%rQELX%X<kjkEwb4MVSw1&&lFmnQuKe+Scc
zzW%iZ;V;_Yb`}P+A=Mbb!js1W5i$eyX#N&Aq>s2~9?81k|Chc00JH46&I8eP_6avt
zPMs6F8)#&L1V9oDV5UgXgeZ!VgQDYj{OnIp){Ok#glCWC8IP^;$kvl(Tfs_J4yI(0
zqC}7s69|$Z03yc*(5bpB*NrFbGv7-4>{|eBi3AuLwSn7Jb?><+pS{-l*T4QX9o_u8
z799Su?a{{O6?@;199p`CGz&s(QiQtvNdVD-04DZYIJ76AvM)5kh*Ugzwt|g5TNO0^
zn$x97&X1@iAMcCeP{i#Fwx_l4k<A$TXTz=pzdH9%e_Jxlt`=RP{<`dNOd~*8{wT96
zZ2daA_v-K!Qg=msuA0t=;JL)j0ry@?LD$6`2!ZLj3{D7tULzkz*u#HWn4e*PX3MM6
zqzm$-8IdL<oMYqj4Lri3eou4#>@3K4buDE4ef2|~lxmSBY}~-YOOi5BQlcYI)*Jy+
z6eK5rs}h`Aq2qzzwL?EhuLtu1G<$<Bkk13aLJ08fE#A2vRs{gS`cZ)FCTvhdy$1;X
zN5lZLW~r^{XJ#vlyZ}-kL=*sZ0w93LFQjl{?kK$Xn%6~Z!`>h=OK;xOxb5xUiTj$L
zDZCEtW&;k-?{D33;M#+?AA7@_?>PRxfBc<$|MK0hDc^cu``rE?PW!n%_2#tq{r_fP
z^xE(3n4;=}K^^Vs6HrknrZ!YCfju}83!%SB@1k`8V6FkT{m98A%P;n>s*e5G_h0|!
z|8;gsoPgb`fN#lxbeG-nG8#%f!U-cUN_e*S^zUEOKJ>pm{B&R*yw}33Ue|$gG=wV6
zpx>|H^fHFV5e&-pdt80^*EDHSA2n!22RfbL#$O*4YlDgAf#imx-vPamH6cd+*qIM?
z$QA==FII4HkD-V%O;M7#f@hWiE^P4Ki@8?Jy^_P=Bjqfh$G@YopjOAy#@2(#Yn7aO
zc`|ZhA4w?<jlYWL$vWr_?t|;dm5z;1%W+v9IT-@0`^|)E*P9KkE7S8*03;?X^!&PP
zke6}6JC*FIlOu4t7rE;ieeD*N9#&&6ZbE%;(8kfAaMV9W6r|m$-2*&ES&EG@<%Rhe
zIQ>wcW;B}ERgYRKJEy2tSfnn21aDxwUq2PVo{Lizbcqr{DgxRvrv<c4Gf79(1Pi`Q
zs$okN9k?ax-$XZ!XfELf5Y&070{9!Tfi_t9-~ixa3^1qwrfvmjF9S?JDA7JTlH!zv
zs(&D|&rUTFfg@|+sq-cL<(uCGcRu-WGAKu*$?&G1oohXK<@)gK=xcqh@TiZ?ADz5q
z&+Y%HRnERU+bXUIyD&8|2w-v|EcP8Odsp7vf@|K`N%o)269|V;R+C`%oCHYb0m2pp
z0mA+VP>WN_LKgtc1%Pq@L6}1kF2KUgeR$n}w?FytPdvMQ{OF;7{MW90<HT=2`Pu)^
z#m#N3bMfw^-SMq3b{&A1;qV{N^MebgPqh1YWiWgDpMGMLz3R1lO_o~-MkBbi1@QEG
z4pAJ#&~Bf`<-fLRil>Os#4r`U{(lW1I+WRT`;EuGCn>8Y6jcFL96}XXh^7Nb7An}c
z6hJ2lV3gwb0$AOw;LNJ9wTTrUaFqaq+HCV=Co$iyP$=g5MU<Z=dkp&6$a7#!wgTJM
zdb_Iq?bV2B(<5i#sg12b^kiFjVVd}*%b+fc@2h#{hBcKnCLpBT`4nPjY4;Vm2)JVa
zw!L=;=Ckb88E{b;Z=aBDaZG$=zPhrYz8*L*iX*}y!3#BVp<M}mklHyP;vl)61C*Po
z?=bz2ItXNFHRNYU#IV!Aod8{lrk;gR`z|nvEvPE$kgU21?s(8*V|PH@Ji-2Q?vT$x
zBu0^}M&Cr1C6kHg)*vOOPE}YD3A$hao-Qpc1ps$U0Q_1XU=5@CX@LCp3Zhkj<QxzW
z1v^aQg$!NFL)!*xmY*1oaAvE3*DcJ!`(JUJ`T5WP$*4Usb!boHb$?@h_?tfsU*ni;
zbj&St@AwtioV%lhmC>uNjqK5rjo#sF+HmlyrkOudBw=SrP*7gA!E_eEOzbt4nFfFc
zU{8=LI0jWU1=xOp#|!{|9&G`nmyBubwZ*Ul*L+|Kh8uIqM}F@7_Thy?Kl(#gzWtgH
zKlk~+dH?d63-z_%bp*Z@#;ybKvK>4%ZH;>6rTqMVT$nxh<~#3Mv+sK}f~yX;0GbxQ
z@N5njdqp%epZ5m+wKFf)b|<2%kGIXCAK4l$Zy(?Dwq#-Yl-Wu%Y)OpCc@wk%qP+pk
zECw(;36PDrH+y$j!IKwRfQ5u_oOX`<jjJca%Stw6M5#fN!2M!~X^xVpo+f`a)M7+k
zfQ-vhkS_*MdhZ6F#im~O#AhI5W~(u+U0IIS<4n7=Z&ZE23J1c}cIY=A6B%$9$<uCY
zKHg{c6DNSR{5A3>qgq4pcy9cLLry(VHm6<wTq;4Aqx0c??ix^eZG+tr2q(ac|JY%w
zyAYyXq4R^sfQHxmo)YtD8IcL5&&2Hsu&mE;n_riXiDVmi?zD7OQ4n;@@Voe)?hkH{
z+D&llW$n~RX$6O}FoAHjEa5qWZGn+bP{F%f5&TvG(9bQ{0|4fY0E>Ufj%AL$GtjSa
z&=aSTI0aH8D}@Q+(X%Do@v7Ir2Os)E(#tnT6Y;VCZLxjq7gq+S`(KTFt%i27b>LvX
zJ9)=sYi;xY_s_3y9(!#kf+-7x<YzhL`4B3YgP<`1CT>9x;*m9p?1wNvz!X3*N$wIN
zN`&l$O|W(WAXo)3n^5&12h(1Hvh2XC{`Ouoy|>f+<9~l<yLEQ@+rD$|-S^!%bM9Y$
zVfD+u_|)dv)vRE}!(BAsn|thX0A9vJr}Z;~Cq5WP>1a^3%#Z){WA;lA0{r2<75w7I
zHbxVzsi=y!KfaZ&b#d9R{(%<Of7l5oqnrL|S>@1-=gqYT-VOaxNx4@_!Q-U9FM!r8
zz=4GTikx)%VKf5!<oOEvm~%&CPl81|>iad<OUiLt0#=jlv{?`5^_k$Oggz|`<i<!W
zB(qa+Mwg?!KQ*HX#y^v~f0Y$x11ySox_&u*PMn8Ns?_jdB<V5jm8eJ&ItQ_wMyQQ7
zA_-jXFy3c?75fB^R{EaDIpBQ1CjqQ^cqG%gJ*>ruw6svQ{<R~VzRwO+UCX~yCqO$@
zx=H}ASAqV{(LSF8IuBYNsA&Q%!PLLy+EZ15*KkM`0adJtPyxB-uDhWpYpiO4+Q13L
zlm<3{`|)qg^#=i*G$nj*r-V4HVA}-Hy*hy5wE;9*0g(c8OsOFc0AD5k1kwn=cEZ$3
z7@KQV2A=B{5EN~A|EpeawuZwjfY#h>bp5;FYa9`@=C`{;d*VQ3j?HhH;p30P=-IPS
zTwH}R9YAO@FwqdeZUJPg0O>M7z6@Yj04i*oxe5U+V{>um;90u`Rn^nFR}w?E+fM^3
zCKb&|IPtzI_@SRU(R||vlEJLWCr)$^|I6=~eD6aaIQqW-{nX;Iz0Pso9pAKL_xild
zhsGQ?Ex!JJ`{G-FZ?)G0TMS1yDL0e(=2R<$r;9tUdwAvEhrYH10DpI(`G(idM7Mo<
zd$`ei<*^SWN0;7gdi@lzNjoyGqeFoS_X1pTFo4MpK#okS0O0Y9)~@z}2w2*%52qKj
ziWpVW-_$7(KdW{1DFVe<6FCAds`MgE{Y6lKom@6YnDc^US|<keAy%$)MFMpw#1N2v
zXO5Y|&a@0vR4hPX0PYXjTrtprsiS`p>S3CoOvK_0gt#>|thIt5iQG8Q!e`vqX51M~
z?po;Q;Jw_xR32~zfmRe)Z(qFYuW1%RMHr+I$i2q?8IY-q6X^N{p<>K}02odSps(bR
z4ut6uonZuk(lywtii`?=hD1CHyV3dy!a_gsGXUhX;q~C{5s#1&gBaiAWlV%p6Cs!=
zFsSd0irDl*IgFUU|JUOHt_~0ovoH-6d@c{+mwFX6%K#2MUBT>!07e%9`fC*=Sn7$w
zL#|xWOVx--0;XE#;{c8v$>1OS_D|R>O_Nq*^r<KMzwnkpzWo;_*=m%1VB+xN^{sbZ
zvcq2Q?|fUsy!%aM6i=-{fu7G~8_Z${V7ddQIRVf}Ac!MVMjZ&^Nq}eqAe@8>S^wq$
zRB#9Y`ViRj0M$BF<q8DZ3Iuu2+B^lD7g#j_Hf(|^``8o%`cId|Lmyl(?*8C9Jbosg
zDCax9&-6a}%7<1SdukU6_~sqE4#4i95r-jMHGT8D=FBxeRYCJOmIOjIxaU&&<-h&d
z<~?7csQPO({+-5w#!~eDyUG%-Z6te(ciiwJQE$kRQ4v-U><NrHXkc~$;NV_t<;s)j
zg>8T{>lI>((iec5`n>?jK42r_Osh84)At3?4+4vM&VZ=?N@>%lL0RxVbIxmfjLSp_
zkMg8W(7!1A;r7{ZkrQH3K!wn3QN>}Ky2FV=BUcCAQa!*RI6E<_Hi+Bef-8pE>rz89
z&>D#oAx-!I{^b(muS7+cTJSmqN_v4x@@fY_jTmz3G21;pX{gaB9t9bDZAWdu7!Que
z&(IiC&RxW5lrN~x6*?ojS%L|;`k&U$MG8zH#Lw}55$B2=0yNmT3|<#;04TwU*C-5#
zSc>nPIDjz5`-dHYC=O8t(*)!!sDr}m+lm0*90UBd5TH?3L||-~3VwfN;G;c&1ET;I
zK3PHdKmcp!EtoC<cK*RKOUH_LqDgXJA&($0;O3(Z`0x`Sh2Qw%f3XK<7L&8-?;pK5
zxbMtY>tx4K1h1HR?O&gTtABnt%;CoUMejS`P?}qA4NPmQFgb(}bea&&Mo>)#2HG)H
zjTnNY4OL?TAen+7nt&>30t9o|>=+;zKw!H7=?cJT10Wwkg>VM;n?O(?Za~oJKnWd-
zik(5z+G3>%AN%R22EX--Ycqq%;A0<I`<-`nM}rrodT4jN_+ys?usdkvWeE?i-~Hjq
z<k72JW_BKp+0d@8^wKUq>MzQeiC_I)#!lVTFD`Ds;>25;c>7`V0W{{O4Pcgd;%zhl
z*0w8%uo<Zh;L@h#x`pwN<UcgDLKtVmtA>Oe6{lvyOnkN<2BSv$jOgtI`a0tiQq?zG
zF$J|Lx<%&!qeda)5&SSz30gMvm`V-XU~Einf4O80qe@yAR{c5Mys^n04LbgG&V@AP
zQKVi|0PcH^!cdd#2oeYa7ILKA?HJ9#c}NJ|W8Zi6icDb8PoVZVNQLMA1F{>woUnHK
zqpO6G_)Y_*2to)!fV{>U1t4UDNS_#4b6q`Eno+>c*GZj9{#?=>gq~>Hg6Rz^?aUew
zlGq?;L;3{}r$hQE;A*(0&!IQGKTH@T^d^?lK@yPQN;cOILY$da7{cQgV9i)KjEDoC
zu(E=;wg8^WDp)TAm_8OjaIS*(D1fal@&MRXR(%A%eqON&wi6BlcxKhY&4*qIfArud
zilTt#RCMwk7va92|7sDoyeQz_jnDqV(aDw19G<@JpFg}k^&OA>ZeU;WxvF=^TW6xz
zymc~y<_L<-fic63^fiL11fV?tDEbhTJ%Hvk1o0G97K;)}2+ASAa0Q^Z3V@YCsLqK^
z4+_j5g_gbW7>sQ|RW`8X(Nre1@A$qw?Fa7eZQu1seA_~EX|X$c=Hf02@Xa}P9e~~8
zjR3mYR^ElJW&gdeh4-)DpJ?uj8^IO-FfF!<iT3{F!0dG}7!(kM2!B@)Eg2Xk0W>47
zokqixn*dfeF@G9jcN-_xLN<)%ZHZ7Z(sp(5LYQ-9d(1ZHL_5AAPJxt_>Fmtf`~pLV
z0m8!MWKc)cQ2@nuWwLH%EmE~m6;N4ZXjvK+wT+GUR$vxHs7G@7h%lEZzN4M?1UBbQ
zi>Qr8{vO7n#5qUGBbJ1e)_L%~4n!hY^Ii_x_cdHY9If5wEg3p5^|Gn~P_rQG@6%e9
zSm@OdXqqGl5Xe`40Dpq9dqhz-M%5@71CR{@$hImdN0_5$F+yBEj4Fs40CA^+s1-nr
z4q=QDxu?!7wfdS;AdV+hO0Y9V{)0Gtbbj#*asaND5*I>l0IEMBY9K;U<XnhT$tj)y
z;?lxq2=K)U;ILey(u6P*1@Nv8z^{!e80`(9Tm)!u2hg9aAicz#2Iia!*MR*PcXiSK
zT<Pbqe`yX*?Kx#0y6`Y`S_j_O2s^)!mLzWRRgI!7;mOTMAG<Jk_B#(x9=-nP^vVC>
z>FuSz{O^7}F!$fnAAHyM&m;@iB#>`!fZ6I{ehq@W3D8N&=m!=4%m9)}`V9IjQ1vz-
z==A^wIlxF7Cy-ot2-PTpG7ZsDFmVPDrX}`ZfakV`_Q?wtqIMMJ1H$ok$2aNNbpUpU
zH#~;7d*^F0{y5keG|b^+#x`zBi{-%;i*Jakya`2?gK1QdOaN3<GNFfDTa8fcMh~Dn
zzzLK46rgo;&_2GXoJ+)Ayu81L!DIw98a62U!uumQ07=i5RAkP^388(AR>`&wu>84#
zd>g<b4+=$yEar+a6(M!wf-)c(&>$Q945m^LK}Ac9jCCqeq|`+%zQb@iroCOV0gZ$@
z0n!Q=586vcFhNZzyG|9*hwp2)K5tUG>IuQlG4b(CNH|LC9|LE#w9acZBm_Vq1d@#v
zUuFCfBM*blGoNeRRXnFL3d#}u5<m~j=1@x#iJe%duj-5*#)Qj;jS8X;Kw}y#rmVvb
zK-9vVeL$#?o=V3v4=|a-=!+sl+LwX7B6V5#I1p_>hk*_V`2l<-Sk#Vh7FxQ%`!)pl
zTo}Mj6~L7)#bn@`Ccx2V0jIM7CiVnSod%fN3vgitAf|H4Iz8fAD0>4XwUGL9^`0xE
zd(PaOO~T}>+tJcwTAtqiYNKW4Y4o#U^~l;IUp~`2{R1awPyAn3Prve?J$8EO-9PhB
z*G6~z;3VAe)=85MM__s*fT9Orn?!yLsuBXcC^^FZLx64%g5Ch2p8>INdj&ZFwvYXf
zjfsLuix(&BH{i^2WuH2iWlx?f>?cpBuwBl~rHyBP>cvwJ-5oE**mVGQ$Byx0KdNj=
z8nEY9>NOmKJv4I_6uFYTDhOu+=y8Zk6JwQO{=b5)KDYd(wV;6+Z;~gXI(7b@>exLB
zIvc;h-~>-OOD%7c;2E8bIF^Dm%y45+)I&tH!cM3h=}XY4Ec&1fuulO=3b3i=ZKIkT
zMShnoB$Jpn2#BY~PJ(2F$&vBoamRyrSJp?^yb%4U>55?b)R9k-0<Y7acf1?~6FlxN
zCuc^e<dB^sDXVjJ>RPwXM8P_TPzwgtj)6K=J|)6ao#&K+d@V+}UrOw@&sUJI1rX!_
zCH0z6);%lpX|9~o0z*K=1x70YbYn&aqP92!lK_~q#=m1sSEFtOqC@Cx3DJ}Hgq;F(
z0zydxkmDt4e|RmN6twULC@DnOrDi$=qX4?0fsX>f$q28Wf!tb%je!#l1NY#f(?HU|
zC(vP;sbI9q91-DwdhowEr=$bH4(|S$Ly&|~W~*SK9UVBnk)FQyYkhL*_^`QAI<ogJ
zKX~6W?Pu?J$Kf~py*6C)lmGGGuaCZG*o4=-XVPSY5<>Js!W`34E`<gLp?|D-%mBI;
zU>h%>fpQDLb~9)O5v1t^Ja&G@e(A|+`_MB1oY}U?dJ#7>7((0(wzI}lKk?=DPyWxN
z9Q!1GZ5ZP2c<IKj1F$<@@)3m*gu&$XWjTO$G#Aaa4?z#32}Idj07aWs)q=#3h<b(!
zYbiJVQIZ}{;G8!mI9>C+IMBd*u(eamL*wre)aWyeM$s@~qah>|ZUf|;2BkJ{Bp(X_
zJs31!OAA`k3t$mEg3i%!m4PL)7t+y)2#Db$uBQhOWBGK5nQ>`KBpC=t2&4SF)CZ^$
zm$U#o8+9vSuCGVOK&uDp(l}n1M>88s57e!NxvL;mOmO=hv}Eels6ls8KO0Csiy{v!
zp+CXe&LPt6inc#jMsURfLjU4y<cOqf02oXkBYa%S3bg5x3OZ;>o**))=}+mGUIoEA
zN9xESh$jHzDS*Z#03rlPVh=hMgiTDx@T^Aq0aZ;3Rk9-^4u~gdr$uh&MBD^{Wom;(
zG*M_q7Vd2We7ppBd(0BQxSnZ)cCvy#I(w}O25AL*4goy9A=gpw9WCW_jURX$qfrUd
zld~|_oPb_2f>yZal>l(>*Xn{h@hkanW6&*r=ZTN}>$e_Vd*te+SAOI_{>tVch$f>~
zzkAl?-7c8^5KPSVl+;lP(X?I;!FB<#g$@9wZ3>7}gy$CEllMXKr}stn$xUb%K?bG;
z)=u>A2UxjtP+a`@%JAZS=Ql1~7^K)CVRw8pk6i~~cf5pyr_wNJo4~ei$ZQw(Or3;@
za0+^Wb;$ulQvq}<FxW*+#Pevv%&E1j8PA;(JKWhkeovI*SUW~r&oYuro$|;i2|^$u
zFt%Gkfkp|9b<Rdg#NotHaCjbJSt2pX#n5T(JHo?ACd+s`EQ70h0RdDaHh%PUiF7R+
zUDlg*LA#cTDI(#)8<fmf$zo{$L^MU0ulHK?s#zIR66C0zz9%JwD1q;~<jHmvtgc_W
z0i`XD6BKtqFk<|<)RH4eUJjY|%5%Up3fAnGg}<Yone}9mSqivrhU6k=I{%n^2C!)W
z=>|YQsUT{W5Vw$oSwTFF>7;;OC?*vmLVylIf{09w8d0?fZH9%M)T2S3f_5z=hej$V
z$|08%elP@>wH9v1b%KS}vV!fRf(cwl62R741+O>&aQ<n4tgoU(f+!F=rG!q#Y7h@<
zM+wY!Ce6ym8cf8KSI1!td5Q4IS2uj;K^+0i`IKb|fAZAbe-fU6@4jOC#^3s_U)dU5
zapi2ZaB33Db!*CgNlr1}GzA3cpl?{HwgB?25}Ggt&z+xzU;FTOcJH~W9ZV(wbG>`I
z<&!_ZJUaW))!y23o1<<zM3Uf61<2j;O*?iSfZg$uj{q8>3F5tZIfU8H9!MGhVO&9@
z6M|_4CPi2nEwHs*gN-Qwngca@rfGz<{m@bq`Oi%)b&Y<2R5&UnW0_u_&_u0nSV4yH
z{-9#`S>ai-$;>p5OaL(w&ti;VDKp@b<QTpA+Y6%*g3!VUv0tCPkK00lAZ(@>BHxT1
zo4T0~9~XwWs-UMvl}UKxM!uHe)qH~2{<kt%W565+Ru^#VQ)yw>Jcro$#P+A63%@sj
z>xJu+2W3Cq`W*XT+w=OI3uM2`{!7jT75m7p+5n0Xi~7{v5(TQjntL?XxI;qd!v;(w
z@I>hWqC(K$<ZuaOuZ|rt|5J1@q>wUV6aXE9q=OCtK%>nFfgzLt4K<K6fawB6Y!IoS
zdkXiTI0O|yEF1;}(@hCgzk*>qfd4Q8c(?~J9|8Qy8bC;mp|I<ovE3A4W~PEYOBT+Y
zj)Z6`=Pne)MVt+E5TnT2I5sfZoFSYlgx0ahG=jXuHj^*jASFn-LqB!)zTcU<V)mz}
zdk6mBAOFVY;CuhcQdBik3&TD+SA?J-*>9^fuvtO6RYE(Sga_`QgMa(M?QF}m+Tot{
zd!J43|KX=DJ$u(mcYDlRsnsG#p7Lv^5butccI-L;yW=Gv2BOde*kTZhsrEcX2|%+M
zKx;C9Au6cl$oR+Tjw3Ua{;jGIDqFg;EbiVW>2azfuj|oK0Lay#Qz*|&Z#xXIj|r5c
z3Mi-&l{#OcH?%l;2asUrL9Ht%v_KYSzl4a1<YFMajJsM`)GmUmQDKD?eUYX-iFA!v
zS<<*c+JH&}hHR*LNaX1?DAG>|tWa6mI^3otw5ZpS0-#2jOd51m1>9bjD)-c&bM-?I
z1XAZOA1ExY-itqpJ5)j)5hwrW_Mak5CSdUAbpDtvh|U~dTT)eYJHm%;S`{Q6L&7{b
z36%)-_n8|&>W!+POnL&A&%4kYxxYQHm(>2$H!2KWb4)jkMEFPf0}(m|Qvj%YlT20+
zb`Z7?h=f|<x=}JW2>@bgGfbp7Zt#PDTf8?hB@qSi$2kD8-iHCS(h?d)Kwrhw6?$05
z_Ed20Nlq!`RYjyr$0d<8N)yp9;-CPc00!N%APAbw98u=Ri)T7DCD0qC)hEy2^JDMX
zv*$hc-Cyo|!@a3J{K^*OgT9F{<%Z{>TY_D$Y_^d@GwhfzKQL$i%?AfXH8s)RvS0p3
zUs%59U#$&#&hXc?;aV%C=3?xQZ|1S<0PK#JevmRuY=a<%BnqM31enMT#8F@{_m8Fv
z%fcvXZX^6lnlnuE$G*Eh8I97nqVbRAdPv}k1vbwsGWZDX+W|LzsXOLrtJ#3aX)#8N
z5kMmjAVy2YWPP!ThByeLktJs&&ro_;x(9_7G&>a}(}oC&Nn$8EMd??+nU0rwMrt_~
z8893#Jqx_Hx{lE2Bk<m-<EWb}AQ(*0PIDq3D1W<Fz6AAaRlPFMcH{}PM9zr;c^h^7
z0nhNeNnW%BT*;q)M{4cyJYe~xR03!XpCf9bV-y1<vs@Y&mH_?pSaD{dKr|)yu9*o;
z7zP&McSKyms6q?_LM$s34+C5AxYozwI8Xs1miMI=vH?JfO1E^MR1miUat0bx6~q$(
zG$#=q2n?nQNCT&ZQLtqmL1YOjpd$^r`VG5JB0_-2I2=~ciUFEPRxPY4i@>6@xp&?g
z45UpG5Yu0sG~#eT1+B<HyHVkNXc{qCg9rnAg78ufbpp<8uJoUpdFme>vd4e@u8(bQ
zAHHP?opW1aH_oWS=pVARA(%3R$4*bcPyXJZ2&Sjn&lI2i%b&h*_iq-W^RMgN3G?q7
z{coMI>j3PImwYggALmujFlo_)$p*j(OTloi#rYJ==tN`%$?9kzN`Zb^(q4t?B_EHH
zu1d<o^g+*((MPD6qgiFmvoQ&=raKHELF1jE>M(a6z)(6OwYrjwc{U1Q*sEYLL}<T+
zw8+60h(fSR4hFI&Y{0M=Lwi)g<h~Hi5Ag&rZ6OEChFMVtArdM-LF1#bVoR6j_6U0-
z-a~7123N^_vYc=T^mzT{-F8$=$d$r*Bte!>6kbBj^!I<VQ&Xon{7MVw7C1CUTJ}m=
zV}QsEI#%>M6Z@$0Vg@5}fFK1}d8C5wg%WHwf-=WC^nwj0<;yV*gNcg>Efd5@CXGT!
zk`TfK%LRFT<Xz#q1)V8vWo*Ujh$;-kWWT`Vk}?>rpn<Mv9SuYSI!H)Gr=TPq0*r)%
zCOe4)D4|b^CGdn$RM58o?GC`?ObEjZ7EGTs4osMoFh5zqG|J>Q18Ab-Ks_tuo<M=2
z1fXGnx?D~-0aEBm8Ec8I=1ch~Iv?|it<!(JzjNh<2OqSP?_CaU(nw4-%xpC*q1enJ
z9OkAwnunkM!(o=j3+?UV%m3(8=RWtFSnaYa>T~&wT?b%yyyT;*vNEvMW*oN6rS2L<
z?GrH=oJ5lfpj82Mv7;I~0P7V10-+731J98+@%csR4_W&eMtGPnV1+<Q5lHJ*o@`?i
zKoVEbj6<sD4#gNDOiNrstTq?`40-|dyA=$F1!P4AX*qzR!q5%tqGjDGzZ=95l^qyX
z9V$a>V#{=*zd!%D$zRdmweRnkfvzKLCGM#ofOZYL9V_B)o>#UfZUpxYa8bIpp(R})
z?N9Hbdu`q8I}XBZc%JmH$Fx+kB}4sIC4<L013I&Sq)+Lt7YM3?gXDP`u}P4@-vn5G
zw1VEb5{i5q@(hJ&(Ag3PK#o;-kAx?rl;4RUG7X5L7^1jAh!P^`hzg)FrwA62B<&O_
zu)8IvKq6N37!Y+rzCp@m?-e3K$o*&p&bdH+int@30lf9lJkxy_5U0d60$4>A-O@lZ
ztRPM;EFKxcbU1)LNgK9HbXqXIfb5hyzz<CY9aF*KP6d;Vky-1l*vLds*zR&!A(rG_
zqZfJTT33f_Tlw7R6Km_u?>X~KIJol08I$$b!3+%)TN!j<5`OMeP&~2SY|by9{iDyE
z|Mb7yHU5|1*mVGQ$4fYPx+!5;LNI!~87{o}{OU#9%eG8AnL=rCg3hO-3RZ`r!iVK`
zDgRD-?jo0iMi?V6?((Nlw-`f0Xe(mvV{SFU7e<<tLq;QFksrq5Js8D}P~)V6eivZW
zuOQ6}NXrrA)ey>R02LOiYffHd=h!4+tr(Ul4v3?WZndE~%|=a=2&xU_lj&*#UEOuh
zk@2;xK}OvbPoiqCmR!kw{JWC-v>f93hyoc;($)2-^p5CPWB0WK;+GT%3t!mWtWCrO
zOWmG|8<7Jdvb$O)s6_$Vy^oefC#-46uohbYTjvTW@*(7SBXEyjiu##gSl0FPoU?$+
z=G;`N>_M90av_)?hA>2Dpan_PfTR&Y)G!vseoSPUj2N<zF;|TuagsSDnA>MkDM#pN
z+^arz_T%Fj5wak%(<Ek8^B_^(5Ub+sHuksxBA8y$%;4}1Ib=@`;oALu*n%dkZ3i$c
z41@{uOezwavar}F;7BKfv)MYF+gvT0VFwDh@K{!)FU5oC-5PuV{Vc7zcI#7Be&nw_
z{<yVQ-ZBkfdSH7MH1Y;Kb*^Lo%L5jsXM^m~-k1LV)^JEN(8|f#9hb-0bpUq9OFRO|
zixK3(>RpLB@V7PwXYG?09yhn0xD`fO384*OCI(n)0$k`z(-^7EM!^^&!ck%w<@+V#
z#nsA0ge>l+82$!EaOgOoD34|6pM!G)d2V5=XQ8(ZkRpPRSCCtb_WO{PLnwpX86ECR
z?-@ffcAUT_!-@?4B8O~PLOzTjn5gk}&gFU{J$?pV*y~Qq-&GInPy~`Le@=);X<@!o
z;SmI#u#he+-zOTHq61^jf@V|%xF72fs5Y(^1k&6wr8cb5Ohc_QNaRA%OmMAz#dlLA
z1Pw3}`jC_t19Xw7*T>Wg(m<(u0H<1<E`qpSDmtK530grw*DHe(owmG!EDvD>F@&aJ
zjcI~O5{Tmjq9lSO#*)s^n%EjN+*I?4q(vi!Ux1OigQT1n6$H`}Qc*d?`?1OcDA6B8
z(V}Jm`MCmK_udTRgAsH;QNi3y2Ky!put5mJGKQ^T0R7w$`p{_>FxA?InZ*!3|HwJm
z9u;QKR2$awRS^MtX}R;1n6VZvrk6gKM5pXyj||{F#Wa|>19`s>tzZs5biXP3Hk^p#
zv;XJmOJ|;OH_Gm~tj4YbusdGTp}=q+oWCo9SD3^!%x53D8{Tlut<dUNNQW_0WeNK`
z43lnPE)^T5sO+CW*3?-JBQK2XBh2YzE*}dF<t9eOJp3F>&<OvnAj>M~^(*N0EcAON
zj8aQ_=|wq&tV{{!w@^rY%T-!r!dz{hm~J$1Sd~D3av~ce)gmvU$U;IIIHw@T>@}ZJ
zxL?=i<a(V^(^`Bf!S;+08~3_0V9X{clHeK3vB;i41T3U;2R1e+SFfsmB)(Jg6`c5x
ztNc@>g}W3Y!BB~eV@-Kvam{sWGaz>0Fr{M&uE#w0a2ue+&T^9P=R`iL`bm>#F6Yn^
z(E4DVq7(NZWG6u?7=qN6RSJ2&4FNg?K?H$mLL4=~L<uyK1~ifg;smP?SmyzA{74Gr
zR?^lJn-U=(MS;X&pj{26GQlF!6hLnc;D)&j-u(6v6whX`^+X4vMg+0Rpxww|VPOb|
zrb8I!2C^aYA94sfeQ4~RhtK@MQxKM&C=SEXC|!Qo9qNnw7>-|iS^Mhf(z8oRvHJ9L
zd3&%{*d%P4C@<jIl}Y&1M|#ohM6~@}|B-*w9j4-H?m7UM+t_sgcE?LRc+wb@PoJKO
z`}cOrsT-fX_(=ANM?M|B`<B<k@LUF#YOqS!KN-MW6JUTUfGA1sk>il8hirXx0H~*|
zl-y}_iN#ZBcyc6Ybt~BHS~C3UsD!L2AgA1Z3Yi^2X)`7f63GmW9rv0IAhZUdW{mJ$
zUYy(Z5mIkLFvw6;$DqRU!V2QbU`tsdiE;j&*Nw-dQF5KL_s&XP)-U!=NqcqcURrES
zB&cpM!)X8!Iv7I+#PMPShRs{02Hj)$<M&;&objFjt{Q@nkDWU9BBG<t0~$(NxNdMn
zM=zzB<P1>ir6S>{u))_Y#YzoS;FEQ_4h;;y2yv2~4@7d9(1~?+e9}->nirui093c<
z)<V~|l(azx8KUZGXwqQ<CQO(+fUhKhC^D@1fX+Z{ur{CXC(?u9st@Z`oN%cqqEVdQ
z7<B;}+d15E!x}U$b>ZBTQ*d^54rXU9gj6b8K-SM8oESlC&O$55p_~pN+&2l!XM1qx
zXP>aMt=Xion;+^G=hpbte|-$?X1ckZHMbr*y;{C*`AnW2oG*+SCGf$!N5ytJHPN1a
z<R712J##?`p1b4n8@mp`?s!QDPa6ih!wdO=sdGOC>A_!^NMifjpZpCtb?_)0*mn@l
zT*$x{n8oJ_7Rv-33@Zjl<l<=%xeO=b*g#QQNHYuFK?U303VH(z!=Z(|Kyq0|q`usy
zP*yor77#(q#AINRC`YY&4Yv7-D5orvg6w1%0|hoFFqN&s$OI+^w58nC9`_e{32ao+
z0YUvAHF^kV`wV$$#3SM;oLOh1Rzvj6)+frkoHbDZRHN^s2Ku|#XhxS|0UGTlNXmCy
z7N`t;(f+SX4E^+j(C<|DSjh@_jx=F`zf&hc{tQKcG|iz%fbte71tVlU%*Ue>fY-53
zb>n$-qyuiuEWHd^cYvKK%GnbsR2nCRNJhk)0$cW=9s<G`%o8XfW$8g7UNRyf=>?lZ
zk&d7o85rU<Ck_Fo3KD3<5yV)VM<s^XYk&!Xq!5UHA94rj9<f9S#FD?svV`xtp$j)&
zQ^IqP%)vchm<5|8Fxav%j3SsHrZ6=!(9SWpK7epBg|a{$f_?DIzxYRRVQWwvoS9Fy
z%lm$LkZp?#`SmaWq(EE0wgGIVy`pPZK5R!zw}0dly}^I?J#*&nCsynqf2oKjI_B{Q
zw!ZlP?+sI?=6oIYXm@=5$F2jgJ6@zwv%ztQE}nZK@oIf^*Kf{EeftmO>(v{=Dl2~S
z_kP;^zwY>9Sen}do4uTfT|+F#6XF;ts5sbFJI!H?ZV4sW>RQ<7R?zKQ7>+FDSpg+Z
z@MQE0C`zPrvB^atwh$wDgoPo3&~RCq=7}SO7D~+R8!GwA5nUi6;t0~RfE;yqh&|5L
z_oR7`3!oT{)V?z=&iweg5BxaskBz#P1@6dgyXHQGaHxQc)cx12{hD7;e@~V99BS_o
z62%d*=)L$n0%0HU@XG}CO3J$H21^3h%NMk*v1$g;F*`9OEVGo|6v<s`x})Skr;+d4
z<q!-($N~54BL|HMpe&@Ps0Ruwx&0K9Wi4J*fTio6LTOV%4Or<>&YhH&;C@(C9kPfH
zjUZ107@;~}*kA_{iG|1`Kn6de1gKg_>dpm~uFixOj!av4%XK-NJRZP3PcFcNk2WDr
z5=g2N@=*x6F_6Uu25Ag4c?dIz2xK|L*SGDXUpf!};a5KelZ~Y)x7*w6#RDJFr|9c}
z0N~jyiV`lRPygQG$t!;R_wOv=+_~=H(bJ_VlBtP{)m?w@-1c%`oz~rPd5&ENV0Zk5
zMqR(IrExf_9lzHD8QPdzY(_Il4DG4enZa)q!}cwsUX_dnTkx-b^C#i0*ZoyExO6?i
zu5pqRp^w=6BqtjZVF^<L$lTxTX0X0(VY^pBicy%gP+FYy+4x(?xSWpa|2eN5ni!%e
z!Tq4$(Xa$nVJ!@ysx}}?x1cxdLY@z8Rpw~iO{=-r&Q6>(rfR|<D{x8MFG~`lVaJ5U
zXgL2YKZW(Cb?*v?*XNBLq4BdQ4Srm^UN*MuKu~_00x$~FT?as~xs6v9z+Xi=ouUKc
z4Adk#iQH>VdM+W<>nUG!L_mcx^lk00>=7F)uOLvt6Cnjs-ki<_I|gV($x#wwCca;p
zkjR}xz$DcjC0imgz|H{oFV?b9EtTYY0X=?A0bz<J4DcGG&;TPL=x~*Ce-uRyMVayT
z$f+smTG8pUmOi%?-!o;FKoNvs!VuyJokasl0<bV0!F)4-Jqsb69|Z8=XPU6Oh2*{f
zCeb%RVj-(NLt-N;NesgXqHY3H?G^-`1^BVQ|F5ApDzn9AHIW6+{?umnEXoy0>#CP_
z)S}h_oasIF)Wp=ncP}(v@iU)!(Cmwo=4dVa(hok`{lcBTOSn5O&#~(O?2fN6e5o3z
zbiV_xl}`gC<8@3YnQOMfnVDudxu+RU9ch}`;|()$ED9#CjH<~i3mffAR|dVwsIaKW
z6JzH;yA2<@|KGyl**Cy}>32XQnuEaNq+CKAqZQ8~FH0Ea7DgEo`*4y*qmQCNCB4wn
zah<h+1R3CD1QIR}3o&nBK>=OJ%k$97R_!1^3xn*O&58|M+SKBw#J?jrc_^<cYBvv=
ztM+~mEKOVwYoi=3n9ZmGphUh}+Aq<#5q)`vsf9i6a`$6r%o$q8ZF3BLPhiKRUb*)q
zx38*(jx{glQcL^mE`Z8C@OcgX&UohEW9{poN(z)tMx+72{bf8+BQ15*5<ssa0TCPe
z&0yMwiJHo!N2_g6<5$Rz>Np_bl8KkH7IGLQ$`6I0L3;Xzv>r%u8A@oP7C^}2Kgi?I
zdlQ|=ini0?-U5gUAdFAtmRN~kAulbFI+2%vTf=t0X!s*kAw(WRXh<@;*)TAuQ2jB0
z^<{u?*-({1yFo1j07d{EtV#(g6rx0RVyb?qLTpHsL+jQ9_8<SmufZqpe%vm#_C%%G
z-rOwj`e(>d`FaxVw6Y`3Gq`W<Qy<(r@zlpBqophQ`R0Z5y=N}g%k7TKdF(m>yW_uN
z>~-*OF*2#cPS}a3n{6{Y-wb9BwWHZ9I>ExtEttDCtdc9N4VUtwfNWHNMR6arHQ3-M
z$ZcMYijhrcdUl9ed7D9DLW9jvVmRNu6E2M&fThmsU^aRM#4rn(b0-uaV#(JCjY!N!
zjGE7oacM#rMbJPEcVu#7v}Z?<6>BieF2bO=WQWDFO^XYV+wB5^p|NHZp&WY{G$0Dw
z5Ms1Q1_EVe8(?h%pvtmrc&_;TlRpvNcJlATZ0BZ@fs4uzQZy1o3iQhPyiz@>7-RTa
zh;f`a;F38`0mzx%LG)v&+K2o_VIM7)BM9<#vB`jZ-HxXR<frH*&=r+7$J}B77pLY0
z0>Ia#LUlGsa7m7VOg7m?>R{v$ALTf(4uG`M^_>VY{&-$7uTHsj$()cRFnIye35W^>
zn7&tY36Po3EtRVZc^XpI85k0EVqz$(>Mc$u5J@{*O!c7ihue_uzmSzE@>Eiv2F6Gb
zj;MPc;4-KN$xus8s6+<>OG~-812ZPDzX8%fkguW@oJD3Jk1Xv^iH;6Q2($WO92U@;
z$zbnW_u8NN?GM7g`;VW5rOw`>D$0poc+VRz_8#B(MzHMt?Jf7tZ!g37`@XI_usgot
zW7h$A*^My~+OKHrn{hj6gcDIGn(a)*ONXYDeK$-;dtckAre6bjd?e4S1=8N{7u32I
z33<(yDLNA{n4C@Q;=(NK+dl*I3zMcj+cwRKHuC07I?C<F$~HXr?3%gv^aXhM=`--$
z#tH<`gtpm$i`|dFCHM@qlYKDRItG*R5;VdIKx2))0T2!jDN@fU*NehEgM15C)2_{m
zt{vuEwkUgGtDdRs(10mT7&H>f>0%e6Dghfz^Z@LW6_lrKuzi09=O3_D|GcfT0TzZw
zX7P1lvF{%x!Ng)54o3Gr{p;o}*B>*TXdWFATULR=hz_kCcZ>5PU^#_oF*WC}LV=~N
zxRIS`_|zqQUNwM9^NOK&WIjo2xR^`~yq2o7@fH%G2nlJA0J`d8>>Y1_)<_^cZx4xr
zcs#DBK+VmkggzdscH#4O!x0^YfI!BZtUET-5#>c`e?%MrimcJ@3rT=I1#NXq+6U+e
z2=~CUkHwuC*$5kg`(sl3s|a3SoUh=*rBA|{3y(rs<Ti<8Xg8-|va@7nr}x6b^gfuG
znuaJ&h`Eol&BF{}l%Z3AXcF^Hu&flzNXc)()B*Aeog>8fJm~@<L6Ax;14CL9<RDnu
z7b;IRz~!j{s!(Qd_*4K3H%{0e|M_2opZWRE!fa=MX3JtCjUK$?T<@+g)K2#|$E@&;
z-k06+^&7hmz{`S^_d>aP9vIZM<0;dOrW!NJzNN`%&xv+4e{#Ysye2BzuQEk^xU$hy
zfvt4Q3^HS(-72!VY15nA+lB*sC*i=+8FS!@S+j5NEX>U%(FC%m$v{$emRg=s9EI#U
zY&AOIJSk4R%bNw<{n%Ofr9b)%eDUFP)OcsQfdsxYaAD(VxUhkUJKm-d8ib;v);lAE
z0x%W#^)<H2vF}@Apb1fcdHyzp*w-{}qh-2OLjHJeyI(4+mAeYN_DBKi%Y|Lvv{f&+
z)wadlus=c*eW8`y^cxL(`|r14`sTFU$evmKq`C6I`=H;$CN735=*Yl(DF7yx$=Mf3
zfN5@&Yv%}_c>tVwXQND!xXabMdVHCXvFD%H_^0xsf45y$HkQ)-n*CpM1nTqx|5TEn
zM!+>Q(2@RkxQXsN(nir!5#}7dCoV*N7Q9pf3GY;1KY$>x6?Oq4Z2;tBF!8Y#BdSv<
z4hx`2Tw-^O{D~Z4VP+<V$Ikx|JpSZ=hKaa?wSmcK6h-S>*4nDf0s}=9cA(Rmjb^5o
z%;NMxvoN;^GwppaKRF3;(1bEKfNksx5+f`~gQ6sdMs~c$PTX^Z_jeLj7W+#iabQ|u
zKuAPvut87-Q%wtdW<$98x(-}wp0oe(fBaAIr*}V9EKVFoKEgyAeEGZ25C7~B;G1OZ
z8vU2&*mVFdlTmZdcTDD<xsSpKTG3?Kj^<iZ$<p5GWZ(5|vv5`0%-v>+iEDx~ITYk3
zDF!*^RO3cbOiks*?2_3&ba(*{9-WQ$9+@%+_D#V2bP{!1u?Z0eRr8YpWPO0q`4aL?
zfMG9yG_44F%_>ym!(Q(Osv>~6Dxnot(CNhR*1gxj>;L;};qi-?;6tB%0RHIidtqfG
zhuMh*T5(ns7R&f-1x@OLYXXQ(3j$~pqrVKO_us=+RXkEwgGV!1dBRq`C#~(Rl-1UH
zQLXlha<eFH{{_#SC$>uiiG{t<7nY&X`rfE~{e6jPz{T}P?Ujd8gJiHWr)C0XXO~;D
z>5_A%CODWiM^lQ8Y4C4fPDPs)vF@Q5^SWH{E1?1*CDm2mU;E(l!q~!=ZFwE}>;BbT
z0+%A7_0;@>+R!Nxks)%C$<u5H;Rce|8802+?>lxQ-xu7#x8_TPP;!3*fz|nNB-MdA
zbgCJwsQrV`{9Gxa!tqqc5m{(N5#+@NJa^_Um~J&}RfWw8;8A133sE(B1q8{Vpt8-X
zN@0{P!<h@u!s&B&Wf0h+5usBsVdke6&C=9Kvv>X|EKco*iB^aBBbW|As2@=qOg|CX
zv>?g=eTI$@$^_s9+5oT<81+X0GZO}`*c-yqYzW<Q9e(CdJ_Y~j!ymUB{ixVCeQY8x
z2HDWu{q}Q%J3s3BE9^$xyW<-)b{&9k;mE!=_I}wN=IUcKkU=M&Z?&V@nRYn0f5I%D
zYMR;WW0-l3v8|IqVfH`|3*nKBRY0dxW%El_wr_7VI(&T596ml5?KwON3rlS?HIXzE
z#9VRq#pSWh>b8a9S%ASNKzA5HzZ=8mpb6c61ihhw!N9<16vC*iAg_?p$N5|mb0O6}
zOu}23P70W41TftRU}@n9{M~mPgAcsnP4KIq_$2(^pM4JEsAVzY4l2`wWa}pe>BiHR
zS^<^avdX$;)!)eN)>>Y!Z5MVkFUc49ub;o?kNVuzbUV~=|Kd}P@Z`_6gM}X+jV|<h
zqjO2KaRmtrVM!pt{C?9MwRETwN9I+dX1{%^mh5TALWIeY6YuSYz9cV>U<z>^iR357
z-BpaMJaXMhkVS-Qqpmi_bqi!qg_Qlc*8!Icj59%q@`ne>EsDk(7|H$yJKZP8AgC+H
zRTa=wC?f3Y0F?*8PJ<-UU9BYhICLth(t;~0xTXV@9`RPRFgX#!>c%;+#UO)b)K07J
zZw|^o`x`~RnMT265(cwVVX$y0gsCedGkIe(nR}ao@HkX3Q<fR@hpVvJKMPNu|I)}n
zVq4KXOi#{5i_-_-!0aJdnqP#usYRHYoPbs%0aSx3bIkXXP_sd}AG=FpFM!D=cKIs-
z!T~(JaRz?*Q(uHnJb15N+3FQjlMBhr#Kc5eF8}Ff^@$(6G<e|r_`SC~cE>kn>^cD7
z<iqd9&Lu+6kL(*!JD6$hYtJM{j&`D@t0$tRSBEfpbzmp1vt@LsOaoI6xCAPSOPHFr
z*?|L%(SgIW_Q;7jbMV-N*|%@PEX>8p#3Uv$Q3fsKR=fQQ$~A!ARs`K%1ikGT`dtGX
zy#&_!F>DV57-kj8oDNYRy|M(MD&w4GRAomA1?Lhe)L@6)!19ngrgeG%QyT!YO$+-b
zXW(zX{{3+4u~YCbe(yKT+IFvKH>ak0qpg)o+3){mi6PjZ<IIhZ=T|Sh@bYSX4V2{o
z((tigZih?%z~&?94$i~E>=gt(b3M710dnN;8l@<6o{HV-RT2+Cq-|AyUp~W#mm3XG
z#9hn!N;f>$+=m7=L6W@|WI(C~$D025je|UbAm!JQi^%&V+vNQq5}w|7yl!{Cgfk$=
zCusoxG^-;(lFjl5QwUjV7u`TY)wP8$m1CCUo`k~xlrrFx$0>k{CMyyX!u)y!FgXdZ
zy45Gje`wk!&+q%c2kBEo{8k2QBY<Z{0B{Ka?g>rw>rp-%#b$0YGE2u}n7t-4^KWT{
z(>FyXJ`6UTu|)=Jo6o?d^=FC)o(eJ(#ziZdFw^ZBGdDd8a}%>LKQ#$clPxouL>602
zqm=Y88^PN4CY)VA56@g&w&yo46zJ$qwr1M%(@V{=%vby6{Xe>red1U9*}CXg?i&8x
z@r@t54!}3naNzHbvb)OV>s#@ZnTQwK&2V9<Y32`4$NO$c%-n5JHFHZ~8wb*13B5F>
zy7)Nm+l9$6J9wmRj~$wWqgTwr(JN-mp~JIgVNWZHClf5ILQ6+^`E(1QdpdwouL*-;
z4E<pO{cdPC2LWsiLf9My&>v#=yZ~|}01{D(_Yq-Iu6R?3Tk^zWV=#|h=NZLVN<f&~
z05*mI8v}sl(7?IP3TDm@;Ml@d@V|cG@52A}hyTeuy?j2KY#jgD#rXZ5mFf@vHHy5D
za^KiF@+Z~5=mfjNn#uReYV}zNip>D3_F%MXBklehR8abD@ASndL4H`SPj~5eE#IrR
z;D~!J_s`$gXkJ_6a%VqTvqK$tgJLI<zlRd`p4+JF5qO`M;dACrm)u(dx8rr<E{NL8
zpk^r|Vjz_QoZL_fy+b<q04Qo_**+@&BQ_v0;<3J7I05vPLi!BomsQk<e=_Nx`WbL#
zMOcY;KN3y>CZ_?SbGZ#F6GcG-D(GLTJqhh@!26C`5v5%zQdrplc<hS+@Ws%ye<cbg
zqS(w&M`q7eiJ7}04j10hsyf$4rgaD^(=Mw5)_W^(se8$m7Gr-~*a`)wGvJODC7lL~
zwJM=WT2U*SY0W_xM39!fyL;IqKR2iz`R(=56I*)k?;8Kz@y#-J9e{5tDBm}d$S97X
z8Ba%($^QAa*>`ffar7PSVBvOCO<Ysi#zLA}Nc$rg<|#x`&rVGZ2FDJ!>=nlr&54ss
z=EU&@bNt9mG(Xz}Lmf}B%btZ|R6?;{!S=HTM*Rc^{SdagP1xE_V0#om4_~OtM_tye
zNlT<g;hxE)in(Sq{I1ar+IT9}!jIS<i6Qb!-c;hmAp>IY_^8?W85R``vI;hW5VrCZ
zj!Z4U55Md0z)yYT7o#UHoY|gjUH_96z;Gq|{r`Y^@OA$B#fYeOIsy1+p4lqffS{U6
z^R0pfXE+zF{pKl>B|#ZPHhe;WcsSg0fE4}I+N<r<asY+pHG<a~{~ArGqkg~juP+bm
zqXOP-rd$CnSl~2*Iuc4)<l=cw6HqO`$o@M1V4bgKroQ4Nb=0qa^R8$ezDD~PxpUPY
zohME1`};1tp?(#8P0A=SeV~zlBSE?70GdtwtYD?#0KEz9AIa$g-*Fy48TBabpekXI
zr{$$pfJasV;4@J;`R`&goh0F&r8t;B8JXFu8jYD-65BXw!sdY}Xv|h%o3<+P#gz_J
z@ldW8MS9K#!}~_%@}H#k+$RU+vri9;)#CXG)9%<E-yCDt0r<L&+Ejfdl3qKR4JVTQ
zGi|eUxMh~E@5KAw64|L+Ow~M9=CK)WX0V#&U`)T5Y7YlT_D$I1S1iHt6AR|}$whPg
z=zO$yp<_bqi;I>iD<SRY(7#|I-L9bDZ@{1*L$4o0zaK+)7(zb{pqB#-vH-FY#Y-$l
z_D(*PwbBCWwxWe(e%vkpVuv{Vo-)S8U@!%&7LB2GdO?sn3Yuf)=+i(Sb^1mjbn^-h
z6;tqoZ~j~GGk@}P&2ww#w`ZF-{(A`Q;L_-KfAz(mPsg2rin<DvT|`RqqKl=B5XJ~*
z*C~H5A@8m<Q{*Jw;nl}GJfDoPLi1wq333+=0GC3Se7KhUdEaqW17hp^T5=}<q`e26
z)1eW!An(E{81oqv8NeP0JMAbT1E{7$#rQ7}x!23peo8<J0^Cy9KoANsP#q%t5&`1^
zk0@G#x=K`)QPB%Ud9V{?BSGeUMWnkZ#D+`Qm={J+75RVr+U^|Vs83OLtD@|t!~E<S
z0KnJBLeuye6Esb1CgaFVwgYH(0xmHLD{N&M<Rc6Ht)ko<<hGX=b~LtrzYb@2?2d1y
zvFiZ5B%{uwKA)A(BZ;uiezwsL_bj!-y;sdNj=UoY_Pz(o=9Oh0m~>D;H^cd?ghpdD
zTADG%^;a*NlZO|gQ&%p)wWk)N0|%xcMivrApjl-`-2!?~S1{-XFc^j~7{xFePC!2k
zVJk%lKO_x(Y>S&B%NZHXq%Xs<Tg}DN7)m31eor;Q>&PD=YOHBvkyd84<GcJlEnlnc
zR!vM(ZFV+7YU8{XKol~Euz_IfRt5*54d4IfAAq0v<DYJB_s{ianm7H54F+dc1|Rw}
z-QG(vtj)_Xic=fJCNG9iA`L&RyZUJ~D`r=m0xgx}<Dg?<IGao0wBe4o&$R#IM>q${
z%jf$6ZEgG&9niD@nOADsL!h)q?R;J_Js>=T`VJ+qTq_SeWPxRaz3qF5hTH{M2d`&<
zmvTA)(r5|aq<#v@nXnYaqk<00`Ag4Xzbm0!dsZG2A|SPa#v1*~wS#V=+Fp$O7feDS
zB@<ihU}5QBbbKY0phlK3-Bdzq^Ky&&3If2!e|x>Y6S-^rcgHv9*mVG2qUfG~<DX#|
zLNl6+TG5`_mf3$*E8KHa+w6TO*ojvJHa<`k0D}z+-Lix*N=FORNpbw>G+cdbzq#u8
zqB(JF!5rN`olH(NO@e((Q|x|M+Kp!{3^8{<Lg+k!UfO~_GVt+lis~!q4iUx&ND<D*
zMk!=un3c}8)^&pyg77_~?O<QBKY{{iv`EWhj7Xd^>08gAQ7?6`#Vd7cb9T*jh;gB-
z3yS6R(N<Lw*I<L75>Bu7Vc*m=e9s$y2!83#f0v~BMsFd0{YPzU^UAg1XHVC8-xqh-
zYE;^)*f2p1=m22u7sFXpB6JA|uLyunX)V|9>+lQXoxTnwvL!vqT=%;>5xPb>ELjJq
z4ESvdmZ`abTgw<5U$Gb0@<-bHl5!vA_kF@*joQ?3LCw!|YgDI=B7WUhbx_<fy8U7J
zA2pn;2_vvrz86Gd_*E)`T%-E9(Vf%E09D{)CqP7auxA8v0jNE%a!F8C&@mjohAX}!
zpW;UFU#%pmv6rv({pWup_;c;auJf=vUb?aC0K90q`+79uiJ%$JHahXXy%W*?Yg*Bs
z*P3$iokiKWzR0WQsF%Y=Q9v9HikWuO+rM`Tu0DR)oI1YGoIJi{j_sRCraCQ1f+oq{
z42MW>%FXiAB@D2?eQ6-KO_PJM!vYA#?+*d`BW#UZk(f@2a6ZOHA^|Hln~7V3&!RDA
z16_B8Q>9mp@D<D!(3T_p7nqvJM(u$0olQ_H;$tGtK#Iwt`QAT|5@}M}IDo7Q;JJ-1
z?3>;X-|?F7Gr#khUol`)Sd8BNXQO2Ks($wLkdc5F!wK*s^UPL|T?nu?+~zh23KNA1
ziN>&ktrz<{oSzfeS}La}w64S_F?}i#5XpLRpkz(H6M&z)ssPU@djLTlEZ2EvXI#cA
z0QBpwi-02@R<aUN7Ua4>zci3a9!0NT90YZ6@T_yg9^JMe5MumI$PqsxCnmBq>kxGj
z3;%@`sq)68A4ThD<4@v0_&I$yFsRf=hCc$EV8IHeA^1p8w@>f3m%wcLYkdCNUwC^S
zS7U6s=g%2`aRtw>yw%;YJN~?5*8%u*4UJ~~2e+=dPr~W29q*f+hz?!d3isaJFbl6Y
z!Ng5vX^x~BnEqA)WtrMeGRzLlPWFypcK}Wv-X9%5x)+WgSWIT;C!p18lE_N0Tfz2P
z0T-V`GF%3u%9z4p-}?kcWdLagq*^viQPMOpnHqZsfYyeDB6FdjOBz{eTs&n8Q{M%M
z^bb1)%IX>is_XdDLHT01^>a0HY+6ua)>Xc{<;JH{-*76FPtvqBrBgRIL?2KM&=@$k
z)rW&~SHtZ${iWn%U--Sze0%SqrR2RobEf>+A1cbhIKkjW897v8z7p6rbuXx@48WlD
zi(nj>4$zjx%#Y+Uw@|clf{L2SXlg*fkh(lje^QQLN&v~|kL6lK+(#1R<Pc~YqE1J!
z-K5$&hVR9w)(U$b{I80EP8Cojf5+MsE9$>Ps!$ONNpH~ga!3MI3$XmJNJo&40hI#c
zf5xH{!0nwyb{C}~TzP~x3=#x^N(Qm^A5$-=z=wMK0VIJn?Eswt+!2&}rjzr$`|BG$
z>U3JYS8>>cB*f~2P7;|U;g&;qGElt`TU}*YVTVOwM`clE)hHYNHyj4v^{fBg9lPVd
zHFh0<KZn8RhmRksW-=8t<GE%#I<S8-IeJUe?71zhrfvn>x<1c>_F#~~AkQH*S<#Lf
zqoaGK>~*i)Z?3!YpgDDNui3L_q1j5>n6b2@44^+K;q2K02AL(5TolZ)5TSSuq(xvx
zDL^`^0GCZu6d?h~3u@-VEOOdiKNRHmx$KUo1-2!18`b(K>zu!~vUgLwi!^0QsYA*!
z!Wc8f>-;~zS34aNPP*2#@{#MFqbPtR2^^5khTppuWI1t%Lb$NmgHwB73o9p<n-4wp
znchru{|_uC@BGMx;qU#r$0B=C29`HMHCh2P3#A=G2}20Xq=T;sQm+@5z5wDsd9843
zxZguX9Mm$N<M)QR3yQ~(s-ThzjT(7%>bwR*T<h;3epcI4{9z3G_ev1e8+7b{h5yCa
z>vd&kW}NiLha^pKsFkxGKc5ps0k8_73M(X1TKt`tt;qx0JcrK?I}sT5^EqTj3Z?;~
zu!5$ksOw%5lz{yn5rObi58rqbsLnE9!s+J0WF|Rz<wSV!H4U?HYYgohtc{OWm2DX;
zZp2(yg>HN?h@xOKjO--{vgN{#&KI!#<RD*tbYwTrX64q($ZmGivX_@tZU^b$D>w&r
zNimPQtK=>xVRz`*bpXZ;zQV_~F~hE6?Rcrti4Pr~jE}!1G5g;Z1~ab)+dPzwD%c*S
zkQX^L<22hlJ=weV*pj*S$bNI`iaqAo{-tQ|{%L5m8fK6IZ1e%1TQ6Za%ponTDJ$%+
zf(2wT6jcCOjy>)H(qRRo5fGH0qvo9o&&$5*Oy}ZdF|MpH&xW6&eND}31nyaQiQen<
ztxo>+=NkCc+&%RQWIyOs@poL~co*f@215;x_LA3#(e<#etKY`HuTxd+$}kZzuTTJH
z2(LZ$ZaBa8T(Z4=elQbW_ly1bsZVX^_n&=nOn{sZB1z`!NO>=+5{fE?2z%HEg>;LP
ze6?rK^)gYFn;Jnq#<7=w;Id7HYP36`q;MGWM`E92oM279i+XF(pZZeyk-WyDj+0JE
z0ar0PVINPk$-BZT|5KMWI%fcpfA&Ia{((yTiZevQKXp1l&j)2dLW^yM#rNdYhtN`(
zXCdpwyniT$AAe%go))U_wNQNzOEPg9(`3pwdW^^7vyCff=NmV@e>T4Azc*Fqrcqiz
zFB?K`Q>em0k(kIPCa|O{QI<(*i)Lkm1zUz!qRe#|O+pgQLMOTcrlSB%Vz=YCI2(q=
zGd37Jlf(AogM96wZocyLpjcn&7wdzx=$9x?^umUo(|S7*gI%ZK<vCua4!~EA@T0I5
zw3DS)Gu(5a6CS#`8SZ&~2y<_PvUTNXP{MYK{YHki)hq`4=4b5j8;+Q3j_xz3jvp}l
z_boOjJ1trdwvR`n|L7%*?y;vmZx?69q6%S@8yKZ5sFRYh$A07$l&F`Fjl|&v>gc^F
zQM$^x-yMJ6``k_U^rn)vSuMtgf0-ig-~bsa#pY!#y=~UZDBIn0H1tr##yjNLs|cu#
zr6LMmIzj|++*X|5!TJGMs@Tsni25yf(+%%8AN=%BnF0o8HopDWQ+wepX?ZDsvEo2N
zHiDvCVc3eThO3Oay=hY%G-NL6qB(ufN1{A7)zw!!?7b)Eqm2I@XaJG*)Zlv#0~vDv
zyXu?yK#*5f>E2hqhu5`m4C|+0+>_>|mdkt&_=%}K1T<KV4I{UTH2RUeKi^aQ9zS7h
z>A6Hex(uR0XXydra8lm^8-^@@%-sVS6~In=Bmo>&L;~!f^lqboC_u~%-81!^zLBH8
z=cbb5Qwzzhe`6{<@ej+=99Y}z7E#pg9pAeLt~_+g9N)KS4ld4`*~zA9VN-#?Vl!$;
z%dF^+hOn`<1s6AZ_TuISTv*?>tE*kR(H)rWVb!!nc*@x1nk1fuPO=1Z(J5F=08BGK
zXM_I3S+)JhsMvgDP;NXqw3}yA*k0{r>)V5Ts~BcO$41$??>iF-JIAh*aQTgwkprMH
ziXD&eO#<zBU#Ddbo|ufUcw-VSz9p`vZ>y?!X_O-AE(dHF+G=Kl1M_qCilYb3HOCK{
z6DJNvd-l#kyP05%IvAvZx!5n^^kz=Ec$yv&x(u<c4nR>=fT_F@vhqg^>u0G2oA0QB
z*L{^#FCqjq1QM@}rRLT>LfuaGzDolrL|?0}X>>jo^QqNRXTTX}wftVccv{r^t~w8B
z5Va|de6_ZDx=&t8LKdoJbmbTv`AiL$*2syT5rnWY8o^@cu)XEfd(9^w_|?H|d;jYf
zs<;2hh0$;RpD5DuwL1a)eOqOHv0}Ec$N><zn<84Nk5CewGyYtaK+zWV0;tQ~-Fb0N
zfR7010a6*Bm%A4&f7hZ{75+5Guh$rv^HS1RUw!t%s6a#DeReJocE<bE^0rjXM;rk~
zEYvjAZYiq|lAJL60z&F%7@qU@1TeS)2A2v^5g@7a_ihthMk))r3{Z6e=yxmuG!>El
z+A+Q=m~4$;VWuSKDherAqa4<+^U$+XK`WXIm*O{l_jGu}zb&DhS?jL$W;@Nzci(z*
za{G<1NRI8<3+-4rB&fN84+}an7I_X3CDt^P3YyId;-oTILRmrqX_3N4e*l-Zx9z2k
zt!!<z2j?#K?aJ!5U0LbFMt2nTdgY#c6dizS{_SzJ1aq;0Br*^tMGqRIXR>Pa$go_!
zXHc#`&@0!T>f5yoy?m{omV+`aP}y+&%t;?c?+WQ}-}nT}?s##=%fJEfy;{C;Tk(9<
zj*cE`hezMkF#FyU!_1pZ*_;~<3+UzeAPkF6+w>0ZTeQcH>@!y$Js2H3dLWvgn}H^F
zAVZBE3vjVpLcU%|y|aWmVF+b_q`UyqJ^-c(Fin@G6%^DBuZH4ry22TdA2G>$YcMDd
z0PVS#r*(GHgZTA0>jXwk4D*@w&L~rFdF|gWihdG#YaKQv7!-~dg?JU0;mNu#y5j%Q
zmS}HznKZmILR!Ytwb$W%6)&3gvk7XGobe$aj*k_i?@QZTaAf~$;K<rz$%P9KY)>_=
z`tecn+7GRzpL*cM;saDw*5g*cmY`dOvz@U+m>cue__pZ2VY_?XGRfac*&SC7)YsdI
z@Tenz9)fGFTa(Dt8E^)jzC)BlbQK7s*K4Hilm5=if6T(D`w!HmhjdL96&gb(WKX4K
zuP#Fy<6eT8r?)0Vl4d0lyYCmWwgfgu;&Z0D2$EJ1BVQ+YIFm%RE4&=ZE~8p?WD3gv
zH=_zV2|mLWEbhr+?-2vWqEJwYbl7h|8lZNKmRhg9aw&Y{&nGbZ`i<erAPLLO_q^&2
z$=h#veRJRJev@YftZig)5v8TjU7_Ykcp@XxR3a*%L6RfCk_fd9EX1*aPAi6m&IBCZ
zzi6W47NB7PlFC3-!Z1VUAcN)gL2>5XR&nX<rhWG8nmzOE7HqB$&0srE(zLn`pmALi
z9sR&k<4V|vr4(_#ZQG-#3e&xBSgn1bo3B39uhyUG<*O^(+4^Xh^%3)W!DDt;>;-Fr
zcE`8MxQrcuaX70P&xX_SHP=o?SASP*_J1HO+NaVihf&spKJ>FjlJ^eo+Y85!A2C-Q
zKWvU1Ih5>KoCWNHhb3Qwp@sEc2}Pb!NfJl*I6E0?5t^oz&4yrx{R;9?1$i1kS$HLL
z4wkK3yORD1Jz{l-SB3m(?sd^HTgf_V=jJo+Pw@<VbXjxq>HxSJZg+aT+G}O}>nS7a
zs$?&<37SLpQ`ZXj*G#b5DH-4QdTBpfToVc@a#b>+=h)QifEPSogs6MH9A16(cbboE
zU5e7ISIoz+|K&mX%xj0mnbC`p3MlQcTOp~fD#6;)G1DoA6Cz-3*y_XMfEU}vjCpSE
zI249=BtEp~B$G_)N<#MI+W)$iUr)4LQ<7d*R=$S=`CgN1D$wGpJXkwNHLpN!4d;Bx
zyY3$H_7&I3t6=ZIZ;3!0L`6S5EdY9E7}lp}hfYv!N;uz8@>`Sw2q2^?3e5d;`CpP$
z&`tm*lM?0+WDq=*vLGQsL<nnqT?e0y*mQzD&2RhOx#*@}wiv08E^J<Z?3(0`+uqtd
zFn<Jk{S=-!+oRMQp@R%spaVc{kMX|e7oYPaG!O<ML=h?<8YVslSn`MnNC}NNhelFD
zdoqW1$3k<W0gF>H>|bn~SKhGb8arf_h0X08E-Y`ubI-1iE<UklpLu4@E}!ke=2jQ_
z{URx{=%&ET-!#?O|3izd1XV5}=w$0fFu1=5%YV8(x_JLqaq+RO;^Ku~x-lA-1B=bL
zUdZV0R5sW}3cmTrW$FOblYT2%N~YuM-!Nrv{P6@9UXu<BRR6Xn?DiJsr|hxguZT{a
zJY<d@J)A5pEJ7ne!51{>7S=YfvmKJXIOIiy63<v#R>a6hk{*`fA!#p9f#7^c+VZ-k
z)y7})pc4IS<j29BItpTpcS7g2$g6V%SYVEj0ufI0%J6nrQTH&qu60_iT_gXzs7}a!
z%78!fiGEIM)-MATD<drRdh87QeWi9q5<DFMXXE`G_gJNY7+h;<0!8>TDJS4{uXw-t
z=-t1N#X<WO3(33w>G|@P|A(@|5~{Dw39!|u7a-BB3L!%TfSwxO4+>HJj)yKcJ}yjD
zXIJ$6*Uk?|_xKO8<w^*o6tGt2Q%%P4#z7j%^SU+CcNl?l8?hCy-g68_c(TJDdBE>E
zP$NNgDIjmIR)^5*LPx9IRQd|l^-(#bt0o{tKtnnJXxMAQp?Ako^CSVDvG*>P{}Bg(
z9e^le`QKI}fKEGy_Q8^ThKRcba@*psGvwci4>p&QZ~GUW=*ZvS9<FT9G$+jWzw>*V
zHypna1_OX+FLt4{0ky?OtwIbO@EGxdr7Fk>tTvaTb72C=Xt@eZjzmaAH_!pV@1SFV
z?<J7nx!6F5$U+jA&`b(wHB)G{GHAAQNG1!2rUO`*jA3cdBHVb(qM?4q*l#1PU}LQh
zXU=Tdi>Eh67oXU$r=Qv=E-epW&@H0T$WB#N^5%))#GB{htHC4{l+Dp4J2^N#fYncI
z=NG@&uQpB(VDs#Dw!YQNx6<CQH>Tq8l^lazwBVa-TxJeH{a{Ws_a#&DE5EZ7oct#N
z5%>m>RV%&ydk@2PH{2Xuf8)vI$Q65`(`f-Jh!45|Tm2G>&731V5-&lhIRsSdLxCNH
z^D{L3DU0nOq_6dJra~B0OTJiuhi-O+`DNdzfe!wv4uL?es-UOCp|m@T^u5U2MeSp(
z`SA#mo6l&ZUo-f8B!Qg;&+5u)bjC?0c2)qCQZ)5Rc90R-nUR&bE^l=STFoJ#MgyK&
zAls7~H1~T4$ltEqPDSRW4<Q<{&_H+8hlQCF=9&|4Y<~IiKiQsc9{thz#ydWBY4itw
z@U^1=WhN;WQxsX90>F=a#=DZ_3ED*zTV-v%Q=+-@F=vNPxJ86PQv#I7_mCqxNpcO5
zXvo4o7;5X)m;dS;3@P?wS^~~Jkhd^0uNwo^PNJhV>h|1T)<VyG@e!M6#y*kx>jD+^
zBOEy&&q+vPK#U3?q0dAp;Vb<H2oOMHk39p~AX4t1mNiuWj}Aa9w$KU#n3_rf_Jo*4
zhlr2{E*F$dzl5$pz4pb{8?Kp)-u$~^5T4rXUfjI#@D0uPzVSWKZY;uu^#PPv(O(9T
zmxOuHH$yxVaxIA<S_GyDD~o^#tsNUOu|^cjDPxros!l3kg3f^D4w`8WV6qUxFoMW5
zAqpoT3My#CD3y%eKyzp}b7(elh&vg?QzM9`Gl(Vw*gqS<{yozMUN=V<uq?u;-!EZx
zC5208HjCBM8^!Xo+r|0Q+ji|jKib~TX9oS~)y-`GtJ~25Fj#%jibmB$c`-M=FK?9>
z{&XWdf8Vyf^i;pt+8UN!L<`C^O}`@L&>y>K!8c}HMh*Z!n2n?Zd#7Ia+LpcP=OAxh
zGaPI~2xag3ldp<yzU`ICRi}=_%mVhi$0)ymwao%KIHaH+#T=!OLy%%gUO)yP4S$IY
z{gQ=VD0=5MaQr`)R55%nlPxp$eS_~sz3zGN^7ysN>X`9&sHXNv9~Xrq5?Ae2i$me%
z-pBLp-bC*yx7D#&Eo19{&Z*#<1@0pnK3?G0h}QswhYnByf<}^pYKWuaB2IN`d}qb;
zR~WTG-8Y$1iHV02at7A7`*7`%H^ceW$CHiCv%Tr?=HJg78`p27pL+PKGYh;AD7IXo
z6Hvtl^&5f^Y3E{aQHaL1#N!;lgS~a==Z?kif8<5=V`RT^_PzT|r%EThQ>PKINsl5j
z{9Qq6JWhebb~ti(Er<AW)YntfJ+-68RSdMh9^sKsKVw5$EvR+-+#*^n7gq*Q3IKr)
zX$c%q-(dVcq8!{`h*^bXEL}+<3jQDjj(x6Lrhu7+5kRvI7OO!5gK`0$2m4YDMs=F;
zbg-xK?cYBY-SmrTwrvOLR`0#H-qF7G)SGNSE#cB&NGhDj6C!j@q_Xuw<JrR&M%WGk
zFBtkd)?ni!wEUH&w#nFNSgS}Z-riU)41g-icup~uP~y2MDq0q+BO+ODQ~>l+<P}5^
z1#K2iicvkWgg6;NqnSdZkwV-ViDQsLIBj5J(!lh|&>X)W(Sk*Qpb^<Dg#JbWtE;KK
z_{{p~+?SW_>4z`bvuCzo<6<uwbb~`h);ux^C;rlOassM`9R#g%#kBIr^RW9+T5UbH
zRb2Y=Mt13$?R0H@E8R#3qe10Y`RE<z|McgMUFYDX8<&X#z>|BcF&!M5`Hmln?eU+;
zv&^QWe(&Vb8=_ae>W#_aV@IGp1yGm*R@QQeW6rNB3_ik|dt~RQ9OY*jP;MV<@Jlo{
zTqox#w7H(`)CI4$RJ9SV+4z2>?y|IFd0{8o<8@{mOB;(}sR?BKrh8xnQ{}l?8nKK$
zMs;aj4coi0gAFnf_*9f-{QSBsaJ9ogc#eg;6u#%75j+_+Zah>=0PxvI3!nk6f4n>9
z2wI*6js#h7Y5{x}P+lLKAl-cR9p)pS{dcCYgJL$g{X?VZ*{g@ebHl%QzX08V66f-P
z0W*Q^;L(sFEK3{?;(@3>zT?daYNGPX%$gtTwc|%Y+7!?Gdn{u2;&Lw=PmO(cmIJaQ
zAuzu?RFB}NhT1t)dZO!ekNenNQ=iFE--|BdRsx`;fcO>?@g6b!m?}Z%8kciA0sc+n
zhzEj_2y%koL-s%B{}KL2R(q$B!PH*t$rID@hd~5E5JrZaiI--m%=A>_Xmf9J$4@uI
zgMYm{SRG6?+vW$~_P3M8nG<kvV_=XHjN;McxYrlYC1#uxB~_359E241({;j5la@*-
z3BBV|Ond{4J60SaCjyZHyw~t|_9%Exz`2SL8u7dEJLo_JCG!lzK?_1?(Ya-!p@ldp
zpwTFy(aKG;lR`W>glHy(Xr>RrL;#&hfXR6<$F7?-)g6l#u!I>qlb##E^0S-SrDrza
z+>@KdnP)cb>iMDRZWfE_c6h|V!rNyW2VtpsBLt1AXD3HbXRvX1w_Lq{Gr#n}X1@AN
zFW=hOPS^Xrv}=okn~vA#T<?7CLb|J0@M4e4!~sC^eFRJGxBeZ-4*tZj*xrt->Etc1
z|BmMItFE^*i;>xTMFDgB0XA0*^j10M7>p_?P-Slb7L9&c@Pmd?KGx!wr6nhzj>rY(
zRwGEpU*;__ytIfH;j71A8_znLALq|1u}e1Nj;zk-?(~QKx_gc1T*p5DUo{jS$xZ`O
z<`Af3;5Bveu-q}In%)w0LJn5D-uY<=miX2E<To9MK$`$@Q+PfG(Gk%4aPO3i8Mk^H
zia%)O0iV}?+J~9WA-MMV+oJm)`NM3cx%bFi{LX)R-u~i`Ru<`ae-R`=wi}d1fL(wB
zlx6Od$D-wFs%FRVel2=HM}|pW(OA$U@SE`XWqNW(+-B7w;MTw%YJhD8eWy>(y}!!}
z^DEy(PECD&-J!`D9lKv?gX7MLyBPH~tq}@Yzo&n|l@VM9$PNG-elkiV=p(#E>;<5G
z1k^Vp(jQLwOfuy2$c=xH`H%4b^yCQIdysU~AOnZ_e>9+|2M908VB<g6yl!q!{N6u_
z!q%%c`e%Db=8h#Fc=KO{Fq}gMK0QY{!i1Vy5l6;dI&pHDII2QX9x`CXQNol#2o`}R
zt`uV9uXUGf`1LZ1WVWDBR7ol66jphXc!ipRFsV}c8X@j#5kfc$xrbzl)fN`wsDfsr
zfcA6-t?3LJ6FEeaDTM6-Kx<@zi3*YlV-H?42?uYQF%X?VMq^?J74+7IcJ=IrSw6i!
zxb(<6oPTo5u3Q+x>hdreY?*7C)$9$ea31z0S7Q}JR<*N>Y1IGnW_Ib%*7D`gZ{{nf
z`^Dz^py&;U#lQ}RgXeJzb~?(t2*JzR0pPn}DtX1VL2=|~hQ(^H6D>90_NMPQvvUVw
zYBn|3y)J;gS442`Sqtkc6_hBci^hLgk+iPGDcxeO4N2Y=8-0cO74G(ay7*V#a{?*u
zR`p<WA?oP_FC;LW^QiXPhw|l{&VYJl*)BkG(XoI0N{$n@z8^l<&dAu8Y9~VeQMlLD
z`;Q?OJ5mDf&Dy$X+Ca+-3D|Y11LZO9l<F6;8IAtEa=@JrwU_qbqxP5gjx7j6*z6AA
z<bl`2#kHrCwY4XDlg;D*a5jG3udb(`xbLee4XmoX2*7qj2$srnQ0M*0I-#K=@U~X{
z)63$lAyOU$1@O<l9FQ$BUyr}zN|-#N#6T(G6DZ%!`WocPXPO@14cCf+iXyOtu%3F?
zcu1}>74z#k^{}71J+$|>o_Dq*by~seIYEyDhMjsyv=D1URMa4#UO$(0%HL%0wM(EQ
z%0XlRn#L0Qe=00tX<r}0DSSvvz~(^sc|>Z!FNFiZp2<w(y1B*V17C!oJa(yjw)cu7
zuWi2TmhZO1EQH}`Ky9^iN`(-sfzLeGs?s?_r-n}-pHMX58s($WXR%L3%BY;wlm;x`
z806Q;^(U}NARM}G#Fa!*NG1vr@Zfq=;5;N86w<0-433-(ELFzsl+3k2ZUVJyCQYIM
z`lAFkM-7NB^7&7&G!co0?GhRtbP7_4r&9=~h7fdyP<1Q>9e|02$V?rchb!K+6p?Hr
zikz+Gu<~pVmY-TJmY-P7&ONqfm!I8$^$UGS*I|#zlW%XDBj3KiaT1^jMcE#mD}&MF
zL+C!*w;K<w=PO@c$(A3#)L-7{WnF7|Vi|jk`M!DKxnp-+whjP42#shyZo#X5BhPz<
zDdXr3ul{~x%t2(xz;(C9u>S<WU|`|QV-;kB07@#;11M7==8>^S!yg#Tt*J^Lv9aZM
zPU_dhEVX|QRQ4ciVOLwKOmfU@8Qi{=f^JWfUFGs=Vt2ur2gka(*-hS_=SvZQ#}aob
zg&F}EGoE84FWqOigEe63BK>+jIvgd>9hxlX39_r;3_DW63!oSJRXK}lq?{G0BYhwK
z^N*#5!Rx)kbAfG=Uv=es;p6xG`zS9rM|08b|9N1aJT=PCj{c&l09$29&F^D$g}veN
zslkYr_JNxI_zH?Lk;@H2P646>a!7tzCfh|qdp)D?JA%Tt*L#q-g%yW*j(T985AjRW
zASVZ`7lepstnV<^2*^9u`mU*+IlX7<{Sv6(`w~7Y0y5F%3`zWe%MQpHKu!RXYU!|8
z7l4+<iU8_cz(|00P^3r|Cn${m4L~QZpdAM=+sI(%0Ltj%my!GyU@ri<-Ck__&&M#;
zxMpro^L=*(L3M1sdvS34b#HCncIthwzFk0WM`ZlDxAS-!g;7GiDdegfMEX%tQu97_
zas|&1cm^B2r3z1$YDD1NB%Bv%=*=h#r9l7+Ie%=_Ie<W?KtTq4is-cA<&ZbgDL}3T
zq739Phy#IICL~}bRT;F-VF=+MfoQ#ja?GX~S=&f*NE$gr%?zS;3dvM%qL~qx=?q||
z1egMd=0iBJe;N+FZqZa#gj$bKY^Jbvu4`AGUbPn=Um2YL@^Z2KY~QS(8%F)j;y|7@
zj<mz}+n1UL;EHAh<y6rd%x>S)t=2!Yp00dxWpv@8&3ygB)@ZHY%X*g6kS~A~>^cRP
zvjf0mGP?OM$HByPgLHZD+H3!20@W3;a;XPbT-$=qEKefm9_PrvDlHNEuw;)2eJIR>
z(LW{LI6|j9GbMQIiTC-2Qimv-@x#wV?K;-t2+v=EmkJp7Rkb^x<h?|K)qOe^y?f+B
z&sgy9QhuOTMM@I!*u14(T|eh4(WZEO0$t9*1G>+;KKEOV26zo`G>f1!kCb<FK^o6_
zbV{TuO%`^_LN!|8?W;p6bl+;^)D3sug8;HJgHAjTuekaSbNBtfl1;ZJj?6{x{9l&K
zU;3Z0mj5r33ZTZyRXN1pi+q5EA>5!wU}_%`Kw_7c18@%8vd<^T0OfU^ViT(U$#qb8
z$2(TvF~Bcj%1H@=equ=1fuD=J^#bUWcT0Gh#5)3exu5xBdSt<xC!m*=<aeyQe!f$K
zIsm#^3<5bNz!fqTo*=Jb5-q2ZKR$n|0w~oKsJRhG0F4Bo9ab<mKZ4Fu38Nx_7<)31
z`DZfWi|YYM<e%KIw3NK(;{fK$t?t_3-M4&a@~SJ|1{c<bHm`ChP{>a+Kl%&`F9Y2Y
zZNE)-9H;pSz@bQ7(6(yN00961Nkl<ZApM;N9`ARG^o1ZOt(?ioX_GIyx2k&GOgRvE
zUq6?KU(YqZN7V#!ZRori)*&JCB{d{eu_w9Kcnv(*EifgeBT_6U#7jAfz>E?IHam3x
zMO8(7f_9^T=0pj}^bq3N6wJg3g6S^6RAFEuw9txS_S#7^fBgcSf@={kjLL2X{WCqd
z^w?Ule0rr=dwkPk3Ssqp7q&M?QII9Kw}Jz=?{6F<ZbBL7n<G1Xc&l3b^u@usPh3pT
zeR*ZHe5s#z^GuZuy@_+Y9B~&V_!f5nB>E5cG+V)y|3{W~v%^cTiS{nu3>Pk5g7!q4
zCLLtIuABkruJL4qhL9kB(VORdzp(pxPIk2Ix<QVolH(KmToXHCY17~MyJX@euP0yB
z6sKE{M(Rq+^JPrvf!?X-;zw)V%&i4lys!LbUFD}GfwfqRJ{aRU`?_`S^B@S{T-FKY
zu~xsedn5ZHjejuW!~-uiNi2rn$r{W4xgPVbQb9K6+3ET`umvIm>a`jc9a&z&80Zgs
zuz&srICl6o$#ZA#-kxfm`2UWoH-2z^^s&$XMN$D(Raje<J+xG%E%;VIG8;{hEN&x*
zse!iS!b6I7cV0Br#;;L<@ySUq+w*tCySCEp&lz<EbU1LX=@zoQ-`$b;0X_-TtL9)X
zM_tX~?swI9aMwd(P~DDHL#UzAw7%;jB>8`O-%kPPWzg0Wa!(<votprm_J2i!Tpg3b
z;=vT4Rmk%wPz>KNWyKHg*EsYZvM}F#^%V=z+dmNmu&3MW_P*n`zml9fdaJ!~X#i<i
z64Rf~3#ZpTVylo+#X;t`S)E6KM9JsZo*DlZa#}!633Zkx?}&`JsR9z&=Ff%Wp<D9>
z$IzL_h~7B_Ugt(7ZxR|H2n9y^As8E}qNKEGrfY>|h^3|#gl~Yy8=^B&VZj3Fa&ol;
z-#<ZWz>FGTHUo&ycSy6K86(Lsg+_Y>&Dk8n=@FQzA(-g_zyttH1Q0YEFmY-crmk5u
zC*WERgN8ZuFZE&d$t`>F>5HS4ht3xl9$U4S&Ua03vuG!2eA{Gj@U|n#@&D1zly(He
zr+TLMrER-@_eQq<@Je>!;nm^AOB<ur6iJ59zuLje+9CKBb^v%xMAyG73EBs20KH@T
z-`-sBrchQn<V8WnTUe{#+u%xW&F?EQhY4090E9q$zj^CTqHMK;aTt^%d0V$d73Phb
zBn6)L3>dvDX<enh*9!jfnEQ}DKey~~J8R2-)UdzQ&btC}FBEn<`}IE81Vxu`=b?4=
zvi}-Us+u}&S%Y#aT=wjxZ=F;zkXimBgG7-WDa7%F#L9_SZt15K#$|r}Fx8zJiKgll
zhVOE?6oY()ubOvUQ3$>M2(CHyE?8cFG8$#8qxtA{f0QO?PV}=Uw*K3x0NHj`R#i|8
z5OOZd0xDBlOENWtv9d^xT1Mdn(B&jGyxOqo^+QHh9r<fZXAwK98$LMMUeCzm_o%?m
z5kgdjkmQ|ZdstS6clMam>ZMB5uTxlBwIXCYHQht@!^y#WPN80R&ydq{Lii)(Lu@IN
z0L2kf=OAPPC86HZ2H4RmghN8ge=*DdHlhHgCJUI|!=#-cq7Hzb0j&zWPVhAiJt7Nx
z+HbpMDti4V%W7Z-{VcoVHGeI+>c~xSVP!y3e@3Rb?$)TzEukl#FGpp540Rx!&&a+K
zA635Fr3Y$)Af`B2hlI~7I|hM4YpazsT3+bfUQ&_tx`PW6;0(Wf7|L}mg@1s5<913U
zQxfVRlMrf~NLeNm6osTn>XiK5dMc2aNgWQ{->9-#Rha=kCZ&O}*P&N(F)$6NY#3rS
zRsqRG2F=+aBnvs1*#T6YE<mS*s?AP8^FRzoj_fr@-g*E4Zcd<|L2tPS>(6b%%2Ss{
z%MYHn=oGA;?MJ=M{A4F<pWG8JeougXTBa<dQ~e9wYW<IvN9XTc&dz;lCB1NFGu;@C
zvf&uP(08O>F5_F&0T6%Lw1bwp;_qf<-_A{)j2g*4*y?T21Cy2`*xH(ajZ5rxV_9FB
zBNVMLyX5|Na!g%ay2n|=P@i;Kz4AGA`CZvwEv@Sn$gzPMo5<CeDU#qBtQQaj;;+=p
z@%}hV?7qV<fs*}j-R}h;d*-AC)XJi9miNdcdQh}}s}_vm^R|<3g?VuI0I^;?PSdPK
zL#yM7gE}4VV6D@Su}Hs8XRzjv9;@yTj}mcTL{sH+zgSHjwW2H_E;?}IRo@Za^`)Q9
z;-s~(5WV}C3j3elpBAf3*&f4L{NvISg`QbCLb$ms(fC)$(pH~}EtdR^>~|CmWKy7<
zaTgtWlfB%3ZfoR>GK#@Yn@sFNMs*@XSnJQ^dUxVfm?!WY8iOJ|9ubh4V#=`)#L6K+
z(%8uDh{FEfB3`6g_aGL#M8;px0D<^5f@JAmyc1L)p$^<Bco+3M=j@PC62Y4&pwho)
z1MB}QSePF{dnV(E6ukp>rbt<joae8p8zA3+ctahSxZ|Cj;FW)z+VxR3EbVu^`UjIE
z`)`Evmqw7;lFL7(sFl$!uV7QEJZk@4(q6I^Jz-i38_M@x#LsrOCQmB2XUAR2O%rN8
zjIsMjoifj7<FpDBLY<>XL|sXzjco(h3r<Xm?xkAJL20F=>4Dql;tOnPJSK@j&pMHv
zu?bcXpw<DUAhNK60r?LJgjsCOS{vf^X-J-{AW2Gynkgim5j3V#NG3}NrUp=UdH`*J
zssj*oVrZXen#mIf;K*AJ8i1Pswo}+X--Ao1SF=lBK4Z_{w`wn(-iFPKebet(``R$`
zH}}SS{w7Sm2J%^ZX49;FYPmRf=Y{^WpE=ii=JaasVpc0&cqj5QAK#)50FNY`p9q8I
zO}Xva>CV0gZ#Ys@LwG6=U}LR-i)WfJJzJ8RAGX@nvNbK|(>y0@rTRC34{B5I^%_2R
zpL;d?{<~^)MbCc>%J&Ri4RyN|fTY{JFj&QcoS_stTy2}=`}KKopE;1R)(vp!X9_hq
zKd7_;A{S9x0zVBPc}Z7c;FXej6O8VR+aEXoF%ujszBpelgi5U#*l|*{w2>)Y44?Rf
zM*rONDJCa_CL=wcs$57*1_2C)eOQ>h5{?~tL-Ne&PxPi*`|g-c-txVd?C<^(BM9Tp
z%+68KOjh)QphfC#l=_GQ;x*7NibZsjyxR|n$kg~bF9#=KJR$x)qqA?d<L9_Y65XT5
zU|%BXMxYMEjvLXrV`4rK-o@OMY|K?!x^$K340x8GBUim6mDo6b6_ioV_sKXKK#?x#
zBuLpLweuC{fO-Kic229s8&h&*6qSm80K)%Gl>Ut@>{%KC#P}fB>=`@}+&{r$j{K{f
zwQHyG@Z<-+vmIRjyJ@jD$Va95_FI3*99X;oF0A#q9kh3!y6;I<5K=U>l0scrN(!pu
zq`szCy}}7csiF`^fK&e7^C?!f#NGj(P6%@YY6OloHB{6|bNw8x7c7_T&>VWYa2eSy
z4m{_%=Rgn_fqt(nQUR#OL3kQ`9}00(j?r;9L<2(OBqAA7vn)wTpk9F>3kCUm*5*L~
zDf*5nata~{wx%GuP??yTBNdRu1w>7hI8Gs&Lz&|O?92!%tOjXYsG1RUPA$TTQ~S(`
zcU@<Y<()70VDt1ETzX<TJNLj@d*-oKyY}3s>1~GxLTLTfndJJvdVKl@*q+?H=eg0-
zKmEk^y}xsQ>vWgT50`#k?&Dk90Wi>>1TYI#l@Hp<Y=RL!J_J;fQvxh64`J<6LJEKQ
z8uc_}t65gH0u}lH)QE*96%W?)V|w@Aj;Y2))*c?MQ>S{AiY(|Do33`iwVr&OF5pG_
z>O5#{z#FU4I5m!*r=d2*V+8A)ZvQayps2J?8q>rkq9)qwot+zw+yn@BQoS_42+K&Z
z0*Xs%vf!K|$7!1L_gDm^WLK9#P+H%m05raLT6kj)neRC1^>b%044~ib!&L{~3@d9-
zC4=G0U?RNcCx`J<AKgmtIfv7nkCW6_RNtX6d`Jepz^?5Dm?&ZRUX8eVI~2JI42-(|
zl>P`IKo7{3R<h);tLXO#k9z9qB?y7$d>vQ7AxgD6B>!HGO9qjlm*PNS*`pB?H%<ww
z6rt&NDVo+>SndIh_&NXVJqcv+y=Oy=Kg($28ztxQah9P@cTC8|#x^7$jA;PrVNgex
zJje;a{C@%vCkAFaDa<dVQd-K*vvB<+Emhm%uVGYhaN;}P)2?p(-PEr3vQZGd>z2P|
z_Re1e7dN_??{?3dZx);brk6z=8twEbAb^AW@%)nN6*<eol@SDmoFPGu_*{x}r4FQP
zmngxC1Tjt(Q_%=_pYe^UybL^dc+s71g_N11)35iKE=#@(B43orW8MM#?=|dCD3!<e
zplh$_gE&HXoVb2;E~t&SkQ3=DinCX8BWMT_TthAi9!-ev@_I}bLqJ4BfM^+;FQHaJ
z39WVx&B+3i*$l#&Ap~=Murn1@9RtvAfH|-i77rbO#W&t)u0`F%%|2|OTZfBJoiCof
z>oNPt-Ot&lAMZji?A&za^s9d1(86{9<dNp*|K7tJpZqVwY*4)%oPcjp2SDQ5Dr(70
zXu~kEWm!;Yge-3~TI;I=ICriMGm8xf<B}qf0tLjpP)0m%F?+~S9<$1BW_f;SF&=S|
zk$m1lo&({Gnmk=D@+H+i5!m<F?(-7rDAmFI4(V6NK$%E&iolsN$;B%(Uoi8Ul;lpS
zX3_bLF@j7TGV)KSyIy<x{0mMnUSgZH-Z>S(s%=sUDJmt}R+!ujBB%MRbDp!@b=r9y
zJPyWK@aHT--B}QE^P))L+T(u-KL5baV+1}k9lY`1jN&ujo#rbNj=#{uj_=cClm-wH
z0)YDS)DQ?~Gqup6q?Ag5>lI0%!3u~fD8qeS0&E5^k+yegHRAV6$mI80=1vT;8vn71
z2>*Re+qmn)5vucnX`lE8G$J}J4T9(s@#xgJ(c~{i$sq-(puy6=R2fmRyT{rH=vZOg
zh+!l_{%9dYM@jM+94*SRqLV0*GByChE_e-m1r_X_A3@S7DUBDzHCRo8L5wktWtRT@
zgV(jxdB<y8!7Kl8WH)+QYLaie^#@^T_7tpc_i0PqXt+iSe1uR=oAmQx0Uk2K)FZ+3
z5WUBquCOR6sG+7(Nl`!4->Edv32@e^CGV8D*kXY7K5=)6=5@sR(;!8mdYTLHTzhij
zM8H&Mn^K>AjVz)7<j(WDN#;SE1?F*RYQW<r5CUchHPHu|481stDrrp1mjM)EXbh(f
z*tte{fYV-_=0b!5Dj3o7A#8U;2)h9^&Igc0C6yy4lQ}eIGKl9gF!Noo(*abS1geP+
zz|4N=%<PAg*Is8%zV|kB`-NxWxw{^;pZ%>zv(MgnHmi#H#cOBY^am4jOFwzv)`xy<
zYq*+S?!16+Q3pUTNSTudD}p^3QJ~_Lm7bfn8o*<Zbm91^7}{-s)<i&^`*7kGXw6dO
zN&z%oW-jN|_Pn?W4sU&|zTO2{z&(^Y8F)>9g0U0>zsY1B0ZAP#xMslbJkt7YK0e(I
z+IPRw#dQ?)>iboCKv!H70Hic<43m(b(yLxVP>w3Z$#KcW`gAy^u_U!=I+h1l){1TW
zuqPc)@CoxVD1t$zfFy5KDo33e2|T<MfEs8A-*|?V4z3ny8q*wLVqTV~Fxxo}$B(`x
zdh)3|d(+9D@0<(X@`KC8Z~pv$9X+PWC&S03vRIpK4H`A_VI&oeVKi4h;K876=W=~#
zEA)Iwt7d8LCg+uN*nVE0YO|DJCJvHg{i`S(k+g)|Ck_+c)>_RWM%q#sSLYkJK%+Jm
zqQa;)gdq>f8S7m^<%>1DjDL9P0zF10HZTan_5K+Cnb1;0AB_C5DG;Ip6ftUb0e+oS
z4jHB<5@1kKbDLIB!T!Y|OV>GVjvBEcS3~#zs}lLS`D6!f{%BTi4$@H>z3bK=f~C1r
zu(my*V|KoM&AW6CuR`7^&!B7Mg;?+x9a=5TsGBVDJ<W@G0fwZ==)5b3M7$;9&ywS;
zGQeJShfG{-bTy~X&#SuWY{->kAU6sM6lv;=Ao?05r1TB`r)Y%CH|$JGY75&Nle!>p
z1J})EhwRp|(jngx_<U&J3+!Ql+f}}YD`)V;tnd_|Ft9o<RJEY|O1f|O81kS(&zx3j
z1`UYtbqU+QTWC!b(3&nFna?0v?15QK!A`_bCNWr?g!Y_(E8e#cuDJCYbNeTjo4@n3
zj}@Q&!kNvb*{gr}l~WTZzXZSY{;lDq^m29rUNY_Mug55={w7q#y0s7u^9>ZIAeAVN
ziVHBo2-Yuc!DA1OAWlNcDYhr&ZYJ1G<jim=k;f10{gBhgIc2CoO`SyWhSmhTRo0Ta
zG{xzJ>4e#RU4LGl;8`_}Vpwo{MBE`Vp6C_0{5Km<otJC0K#7PR$xtPYtDWtM$I%0K
zIAh`Wc>Yrz20Vw@ww1$uDFM`ofTBc>^5Q6fFyR@=U??b0wZe>K(23PvZ;#KiSX+JB
z$_9i2>w>ON-Pm<>RUcsp{cK>4?z<gkXO1U>Y-7-YQ~!1{x$&Tn_KdB7CQ{-^XQ(oW
zr3_V2xVm<okXQ^za;)^GC`w`ZmzNXQ$*ayVX$}`-aOv*n41LY;u5ZX%Cjh@u?<?nr
zxzW6Thf+&jM*yrV3mjfBhAgndT9@*<Qa|_DXpO#>lPR2_(J|)wMUGZTfY<^U-_yPT
z!~+N=zpdv?&JmthYJh{O0wNF^Sm@+1H$8+h_YfNQt9Vl8s}%W(Z#+B`zVTDG>YCwj
zVBYeI?=y?D*TCvlpArmM>c@|TJinB}5<w$*Zlrs&IGub(xy;xj4eK+4f2xkJgyI;u
z5K1DdfAqJONNNWSDHASrn^+DY&B^dpV5x1zKly!W7$h&+NBo@n1>lRHDRfl%Z*mlQ
z8}#fMTGp)>c?7a8oPP>hKUb}ws1YvX)=`4N<#4@)R9<0E6<Sw`?*Zh6k)N^+Twj5m
z6Zt#D*(w71Ny}N(_TU%la=PDfd0f_3gbt)A0%ia<Dgze>F<iLRhUF)xVC}w1=-(ZJ
z{bB~;gWC{4w+`XvHWWqE6pKgU(9H+nhyR!NnD2P+E$xksOPj4~|F>T=@t1zKolNZD
zWnEt5TigNI>f0)NDh!iky?@?f=@A=3glP+?YzAT6g@+#4fb})Y4S<>fMW8qgf|jnt
zi6RgbT4DCIn{Zzc{~u@3%dE}Qu-q;V7WeY@&iKn4RK>2)o>xw|!{AdYPI+xkY@~*_
z)zEXQfK_%_n@p{Hy?^>$PmM<MT=gWQP6MY?#L>{Dl&q!O*L)-y*ji=8wak@CP6<e=
z36GOIvE{w`@S6PO&XserY79iS$%+2w)z9m9^t}6~u0-}6iTQvzb>dydh9Ro_MN{St
zzYv8}l30G>2fYH5F@qYX8gu{%JFN|u7%`66G?$9TQ=o1^NvO=q3z+pD8EdhtZGOF%
z>b`N;yc*gKv5OqSvszk49-}&x_06kig*h7aHLLGsL4<|1U7uHhVKlN6kJ&|r%KjIx
z1oQuOi2`x~FwcwEp5Y%v0Wh~eCZ}9K8D#K@H;6AJ0R{kv7l#lwu#Bh9r)!!Ay+^(g
zd|3X!Hgq`))5)u@n2X-=xd6)P;ixR$eB%$9y$d(M+E$khAwukeFycAIDBmR=)Ddv^
z8OO}>B#FV-=ej1*I;xK&kBkc?VJe9o0*2P85fG9OZT&(6$wpm_JV}>hy*_?c8+<a%
za(+nvM82aA3@=BF6z4>!L!k~18g_CX1bIL*Avy;1J^7pse??A0N!lv>lN<oqXWgFe
zFMf{O!x#E>Z1~xjqf?L-RqYJm@fPeLprcS=x*+G}&>5gti4KLq*30Zvloe!U1;es}
z?JR)RUIG`ETX5-#30S|k1KIrvn8$_?o?nJ22_WCI5BeK@^WNKUhWEbZ=H~hB=Qdkr
z|Mwl4c-{NIq5-%J#<!>gz!#*f`ehmP?@6Mz+1@^9vvdeih@HW3rYKRv9RN}o4%gwH
z&vhYg7-%#BCZ<Ixi=z!rxw(v79dU^Qmka1T_T7#YfR`fhv3FOjD~fo2^_CiCjm)K4
zjy`zYAHG)OBUs$!1C$h}6#<$9A2-Ts`_=r{+5t+btJ&1GIM7aq!eeQ>{Ns4XLQWTu
z(cqXx3?4JO#V63NaLNkDNHC_KBp|{GXHR&DAW1A;0~?|PgdPofB;+=^Hn!?CFbliB
zg4Cf|tTKManP<H2A!$TRG!DUuE8ddy@{Lh5TzLCz^!6X9uiv;aVe+Fz@iXTbX&D=G
z0l3snqu8pR#2qTYHSf+CyWFWV?RmWpNvcae(HJ8fPw|>_1bjSN_f#WriugU}R2>MH
zj!*$1PsE4xEzpVB`GmQ2LtP=@99y3bs76eZ!=zqo0ZS!ODF&}O5&p0WfX-J?zeGrh
zoBA*#2G3VS1VMo5q=duR_=mO@3DB&b79ujP_I<nn{{=_w)GW4dzhO3d&;3CV%=d=2
zxc&McO7_g(1gqO!GKje?Ya>XPr}oLzopO$VA_L-f5u~LKt;g)w`%*FloGO#^rmd36
zDJDl+XJ;u9BqJ<_-D^wk3^W>5*&jB_@*WysisV@_kd3xD^X_@qZHSZM8FzIue5ZjN
zhN^ZlXc=(?=yPvhX@AH$VKvgiR<^7v%T9xLT<lh3y^SrafFxUr%32g{EiArY*&Np|
z4h}gF;_%@6Sqbz)rvY1cq9afgnDz@GD*_nh0R7CsW*)-Ys7c(g!TJQ4jS#AhEfY2a
z1L353?upF2;riE`8?QLoJhypnG!vcrzh_$eumJJ0L;=1<9RM77vzL(CGrt|028@ae
zcD?r`Bw>?baMH2HJFo;}hH(1HRe0*Lj3h<T;x|xz3NRWW*iBLEdg|9d<Uyk$-Rm@7
zbBtWsA7;kaHwxvw`5pQxOVviIPJMar(uN$ZU!(f!1&sc<Gr$dJ>M}<u@$ys&)sgTc
z{hCDR^Xa`(L*EI}z6rV*H*@o%9VSo^uEKh-{G#`2Lx__cy<+48P}qsUi+24K<HGq&
zK0kgU-M{|)p8gx`{M`M4ihL-7&-;r`z-TyxLrbrLx!IG+Fkc=`$2b1mWaCwb>V#xH
z*m1H2-cy)bvKA2l>P9=}2;eah*^MGyHgI)>r+E9Arm<HxS?4<C_M_g8%=Y#SxmJHr
zgPHOAdHsHUK75C^Zt%n>ny)AKtnkqQzK678)0K@0EYGc*1iF?g0EHGDY%S-4Od%p5
z!~qESJv>K7oIlAU(|Ym#P)0ensujm^|7-!X6B!vWwvwLlN98<$-w|i=uf9J|jK3;4
zIQ{NhXXAI=Yl1TAkILc=*L`oYZ~i9O==Erkvf^StHgf(`q4!n&%qrAR4yuPXsdM09
z9_RJ(`6CCH?h$c_qKeK5-$NMrE1_4M4{864WB_tDq)j=xhHQWt`QhhUV10570{)KZ
zN$|7J`^*6ce;1>AKfOUlUw8(%96JT7oubR>_r)Pl!;DEYJB~W!Xu$c!D27GDt_}yH
zxs@$!DQO3BKqNI$=u6jO>y$(xNCLHOFEDiwK%Rr72oOmCGXAIolcoT}w8C!2Fboq|
zUu{4+Yyxxvf(sd(eLR7)YYjMeE;qMb^9F;o;ZYhKn2WEv9WK-HE$jgB7}zK7Dyz|I
z7*@&o^-m&k$Rb0O!+C+a%N(rj!skA@4&5z*ppyWi22Z9`rsSDnR9kb5;yP&XMs2!l
z<WXv}IaX7}bD6;F8g(|FbuPEg5lR#&p}w2*<-yj^ouPI{n+<wx#1+by=$<|+Yi9t1
zXodI12w4C7+RNNcKJ~;>qYCn#i$eWwfRg5v$qk7^q%lqt9+SItqNCQZ2|$>*oU*Bm
zAwD_9fyg6r5JJtq)@``fy38i?u9I(JDMDnojG`}&7?E6olftQ!?}f^=07XRSqPPB5
z5-lLTZ)_cSyd~J231K;uHYejxHVBPcj3sSi@bRbK6JC0NQ3A$Dm=jRfd2{WyMwKq@
z>tbwmZkR42WDQ3Q5NO|}t+aEXj{rzXnm7~c+w!trO2Ip48tJ>baxE?wl|CjKin()e
zwx$JYM1&1qUC&s5=G8k&eK>OjIQnPD9N^F*a(VD{u;-vHq*Z)@{7||VN#gSbW(eQC
zws3gv+i#u@Z@=5xVKx}0_SL7}A01qJ6>Rj;3h1+-4y~X|6d}vK<L(I`T@$wpaVls0
zJ!#-N&r=H^Y3^T~q7W4&#W~{VgmW?UtWh|O@HiV(CII?EWDYM9en1^n)Av=If*L52
zte_!cs0|FpN6IN6XrGqlXk8IW+P<C>=2ts|ukb%Q9qL%1;m$Z>w;278MfzyC$ss^T
z0Us)$<!IZULs0rW2amVFjtw^iq!b56`nd1PIZz$~rU)`1XQ0R{NHatU0!T{(L*xul
zH^dMs6NBj+*nA*{hwdrh+*$_bR(jC1ljhL;VKYbz+YI--DI^H*@=FDL3p)UO(~pV^
z!;yXFpC$2Rvf6*V*c?6q?ZzZCinT_CCcX^T*EZnp&ul|$0;MM^XtWJQp)68ThyO08
z>CYXG4^T(mN*Z(zpaf4Y_v{;e_gx=Ms#(GMew~B&x9N66)4O9)y2AA?0+26_!T)2`
z^SV18df+YNZ(4VZ6zLoi;6?uUEB7+>iP?N2<h&}YS>awP>rp9K%=0$b3BYA(A{25Q
zO{%UwS`l8KTF=pmZkE}EnoVa5gtQLTD6fqN=bDQ$gNeprIC=D4(J<?dVwic&T>P$o
zfUq?@?_3o_=L}Q@IWc6U<o+S$V?qLCe<_E}&ZQFHd|RMoJD2hhnB7l4)RYjtiu_F!
zR*^KmdO~tPDuufit#Yd%Y<>J)EC8hKNo3DRKwZb~7e+Ye!Y^yn)D8vYEQ{>(Imozq
zoDiR<&uEQDdQ+VM693_II^C||&}>1uUteR60U06zv2g-a=kvIrJBDgy?45eu6`ks}
zpDN1D(Qq_^S6=n)(UJW(!$z-5`^impYU7VP%+YTBOfvmMo>k|5)rFo8!}BUAsC>hr
zCgKQ36_~i9`<`_YSX_#te<{OMW2z)NLUF_>j%9e<9H7KR*;g@`9Er1GMX@n9@M63<
zKS6pMybQmmd4D#zf*26|kISIeitrFze!u1=kds0OZVdNZk(W3S%27}P9~~b??~cHz
z+ypW5f^sMlKpX=^86-ua#6>11)_ekT4$#<V#NBo2gA`K&h>C>R88(D+qYd|bvV=#^
z58&K(7gqZ@^oADZJ9|xKjftz-TO!l^7PggNd0Z9;)h+M+`JyU%p^2iWF5U@A17*^h
zV5-QGg{ray6As~#ht}YMdxp@NMEJ0RW(OypiiCo~s8&c*xY<DgE>}CgZ3p>LS59U3
z`{v!tC3|qTGt4fc7VECLLO&1h;C$&ks1uSrXmvi{|F{0H2Fi8Ps@)Q0FV}8^QV2a{
z!R@C<W>lxev7<Rs(9cUfg@^)BK3t4H!NVLa<0Kfw6$A+o8l%w>I|dxpOCg!N2Aq%Q
zmkajCYVFt}xg%1;ud>g=%OLTYFoxl92nY7O4ko5gB*ScV(5|lfS5wKWui-OOv(#)=
zj2Pj;2`Hm|W+Ym4?h&)V{S$tJqScNKk2T>AHfKZXB77<bWH_E*9%$`(kji|Z-yQO<
z%_H<4)0}``A1*<*IB@m-po)t-9pBm!(VBDaTkkt8a!qAt3E9DGrYR9TFWUHrJ{<2U
zK%Y^x%TPEwO9sL)gjkx@9G<UWDk+KJrH&1`EGXwKMvjb_J_s)mp{bb5OzYIlbnuo>
zTRSw}!N}fl^4-yq18;zh!H`&s6zw8O)bI-lqeT!HlCZ^>z~%0KcRT=n2I@NhI-#On
z5#@eY&ImpOgnStn`LnZBCkh?uuVnHY8Ag3+9-oY=a9sSnyBDW$>PMh@HN;BV^PqH`
z9?4)Ahz@A(U%w*|yJPu_Q5K{@VfxxBpt3v)gz5?e;Rz_A5FIxqHOjuw_7r{4b&Cc=
zy)A+M*<m1V0KRx11vOB_K%D?<$T^^<Z%7hE*g>AjQ8$Li9*W>I_YUCPXbUd(da#w3
z)akGhx4{H41g0?+5WJ@o&gC<{#T@`Pu*2ePcT_#|qm6hz>GscN=T`5vlh_BCG}N_m
zyM-zrLRD_U=RSQ2E}ko(h0P|g)#wCIP;tV}fKG;@6(G$moFIp(NbN)>Z&y#P4Bv5*
zmXl~56VR<6PQrWT`)u6VJUiIV<?R(|sAD+(m%{=5L}L*b(|gqc8tpSupzFn&^?G@h
z-mTBC;}wwgQAlxT{{fwVxa5awpEXj$hzBA5gd-e$nV2Kz0AJ(`0ECSS3_1ab0^sM`
z=nXF)&HqC3(=>osojNn&XVCqLxF!f{St6+qsuO|r#)W}XC*B2R6`Hc#E+*`2f49{*
z*g%j{mGn@91Y>WUaFqjqrGGZELgvDnZDD(eb#`6qStv)K^EwwyNC?hFL|T#Lk?63y
z)UmsJMA6Ml3Dq*tdNI7bzaysB<)!W}<A9yC+ns+)-+jKbtImNMSFO`m#6l|}*g23s
z0E7aF01%xU1|M9EtWJXxB^4b)kszv?2q0+$aCio1c)YJ7?%{#LOH>adG*C232y4Hv
zIHxoI?POmvAHMsKzy^D^``g8}SG+Acy8m|A>JRDq7A7zyu~hgz)5u=)-^A`m$ADoJ
zP6vqL)c_i|MO+r&F(5)HBODOnOFBnN+KW*D{+n|DQinqMb}{y7=*W;!NgOlc)d<s1
zHR$xWACdEV==qd>!7hrIGCqo=m3^;O079F>k{Lo9!~m1Q*OES;U`U2mqkb{If&%dR
z#BnOwu|P+n<`~q3KKHkj9AeoYue&0WU(E|p$Du|>hzuxB03Hkf6o-Wz0IoE^Gy`%F
zu)+X2U_lJ9IZEJ9{-g(IHrHS)>q0LtU{L0eR+uhOGBH*dekFYATYG$qI{@|A%0B-K
zh0Pvq#k0vX7d~zCY#mySDV{Jya0Urn*wr;pH{jDB-z0bl;pe0U5I1>ItWT%OTAOB4
z#8^kRUaLMHF4tG%aoTIZr2+VTn&?Svm+SlL;G2GO0U<9s&a!u_rso)CWJ&j2Vs(kW
zJtClgtJbLj*)LbZ=j9FsHmv`yorV`ABTA{GKoNCYWqI%w0(87~A~`A4%Wx+X0Tm8K
z2O)sCg~Y&$$#u#TP<UN(=Cn^*UZ|m`PqNau7+dj%RDdS$^MuXZL`7&=k~YsWm~I}2
zW5?bS4f1XlLi^N2_@*B*h|MZ-E{tq|I|UIr08~m!rCM^1v<y)8jihe1q|GaN#BGXQ
z#7oW%Rn(EB<wZu<=a12a<l6=B$;fF|)LQU0@Z{)_F4C7%BOPFBnuK5D&+@Z;{dqN-
zI+HA#iaiNi-<@(LILbcr-yR`fMQLOQi5Dr=AsQ8Py+3<2hy>ui%rpUJ8x}?xMs7xo
zKdUd2bEBd-bPVDtjyXDN{P)Cr;}85!6J~DP9;^*c9ez`C)#10pR)0WF3d=~;t+`#A
zNWFi3{?I)`QZG6JSS@U@M-KB;=tURYOW?SE2TF?MV1tZ*BOnBc?xCczLCi%e6v<Q6
z&*Z*5=W;jA{p)k(a_T~;qrbTu5<i2YI?ZIkIs(UwfX11Py+rn7(Y>sjNPmQ~7(DOF
z5klwJp$JlXSfc}eq;An-QlYL!=I*n~XYqTehC>@<znlhv!vE|LkaHkG2BQh;2&v=2
z=Z_r(<Qvr026zgP_Y<`PNH8dA8TjnoLwM-fH5ley;zyL$KxP9N6c#Q~4|(JY44y42
z>{PI0?!OGiW#9ntq?MJcdB42(`@*o5Sd$iyoVgPkQ33{MUNy|lkZ!@+>LvK>o!iiv
z!r7;S_7p~*JdvY!E{$ze_)_suN|kYtP{-W$uK2OD7nKNKPDwHfv*IICiDN*~xU%eP
zd|f<uKiBVV**DaR5{#u5>V2vC0d;r6x)i8hUder4_E^#Zbu|QKRLP-I)^TlYXgPYI
zJ+UGT3}y18axjJZG3}xxKoSQ6NIF_6;5i4#>2w|E>af^J<M{=gbsqv}ku<7fRkraG
zEsjJDjM5<--Ty|InY%j4%B@ioPX72r>$X!=C5?v5gk=DDV?<CCITN-tYV)}x!pP(L
ze@hH^gvOCCpcx96tq|+Tws8k^@1>HQSe17{y^m#x(RW!VuS=ZASW~%H<^H*w!P^F>
zjdUYEFTulCq})-3jnok!C|igH+RaX1bh<q<BrnUtQPeYlDh)V#UTQP#FDpWtl&uZ1
zH=T!UD6s&&MSRX1e3Q_5K`~nk6U_thf#mysyKVOVrOnY=@7RIYCD)#Kk6rJLXi<gH
zUBv#pXIJ`FXfniq{=`90?Ixwg@Mn@*L1zgGelbG*QuRWPZ3WcL7!5z3L#%T(TpFiF
z4Wm?wVkND{aCV&^R|vmm;roVKoPIxlU-OG7caFxJM2^Ub@|+6M1W+CTiBl1|P&owh
zIUxgRXjNxmTth&OxJK(d7ci8fFue*JxtzaLT=91Oss`DA;XkkwBk2PnNvb15&H_0n
z%2&{N58tl<8WnWr0*IOcJoZEepSt@J42x|(&*A_EVFcUh04{DVTU4za7Av1azR=}3
zE&~TZM*v&d7r)rI&-@=r+@9F%KQwxF^={i~PkStSiHJ+AQ{IFpo>+x@Ki7q&Lm}Nn
zq!LI_Ew^-~T6OF=OC{1Zl<)r4+^k5oYQ)d^U9y@2So+(q*P#z`O)#n_8Q-|Gfv=m%
z_&I)d5b6}c_)FU9s>|RRcioPw0C1#1B|)*MiN>Adngi~n^Sr{E1$4a5k#G@9-I#_V
zVS@c7`lED!I06`4#{q;*15vY%nq7p+ZONRqVG_7!nmm0Nnvl_u2<zYH2H<?=6<PBa
zX;~~GGH~kT`yfar4OE4l4Bz$#Q<JZlWhvnplN6kvMQXA3ZWr<z%eFE+?$9ESyGBv3
zIsmMBZ?)|$1IKzal7p|C_Bi{jr$Fxk<_&nFLvl)-WU&72eXfmNoVuTU<|+ZS><=9U
zucDz&7pPRP_63kOa^wsN!Xr5hO1a26pgMmatTA#w5PHDJfsKN2`NRM$P9Ri^9pXaB
zZ3LwyG6~(6oD<?)gFzNIG>X7PSTREGl&uPw?i@_^#y{|%W4rf`&Efj?p1D^xuRZyl
zX0@Liq7gWJi%Ty28vYvE*IYk0%EE)I<&|nAiSHlh)d>$m=8~9Ue&oTJ*op(-mydci
z_yO0*=hoVy#GYjIJYj1S$(j4idoAnpjJ4GHI})F81=PqYuRvNSGE^>g{;tf>Me=M+
z)tOM1zAL-*oC~d*s13TL04P7tX-zjDct4e&pkhm`VZc#5mo3&rMGh*wvP>lhivEF*
zE@)!ZT}!zKQ8u`<2#_=?*xa`8$A7#6oBa(KrKun&yzWM$0p~WJgKoM;X{lau_7ncx
ze>siI!~sx9I)}~dWB)j}-Fur!tNG0GM~i;{qHQPB)Zx!XR(Qh{IaFp1?)tL}@YKTt
znB5!FO^AE|Dmj)2)WyP%`3~cb06)DlNejd;B0dg5_ac90k?$<+^K+Q;uY=@yI3}{Y
zQN<ujH#H|s`a%kU9!tPE8X9qW<UW@skOjva5PerB0<NSJ6hf88$VZWUpnGYP9DabA
zY$>f_V{5|%Eav<XeIeupqoYm$0h(J84kDrysS9AVq$Omvkc_hKxicYOWNuQgL_z&s
zwDerTx;PR@2&Afj9NLZjaN^jvnY8Q|VG*93Zoc=oXXmeNa7>R;KnZzXK!Fw<35;U&
z2;#+k(aB%7OOgmeWpqe^p5Gl2yaNYhVLZQRa#TlNYyFwHC#8WN{IA49h1+Ynni@%{
zs}Q){Rr&eUx<<~Q_IBV+X%&Yk7&;_IoB(3~W7~LD@)L(aGyq)Mz)AZGfl$#Mahg;p
z3h$@sW(A!lzzE@3lBC6)J0bw+0I(yVDmp<FV<9iG8ltd)rWWR>jwXAXKk$2joq6|m
zcD^?=bw&FXSAPI{BYA$P*1sl%x>TLV9jSE_r3PR40ebKFk-qBysOc_ph?v}pe3uGy
z{Yv`76eI3sTv>Jm<at$DUCjCCb$(t;-^P^rgcYwOI^S?}B2XQf8vXN805+;hV5}vE
zeSx1^kW8e3^`)P?a$_a>X%&SRvCF)K0zbMA)fS+1gcx*x?&I~#{=2Gyy1I#Hp1K;t
zr9j8X)O8R--@x|p*22V60L>O^QiSlaKiz~g7uI2v_USXMY{2^<jAHuyv2*tpQ5YmS
zbRX>I&pr&7>9|ZBfU#6S)+;{$fuITtV>0{rx&LhAForN{xya1rJ<Ac;U=u$42dgmX
zmoPDJs01l#$|Q!9x~|@fywqqq)YLWfs9qq4zr(<L=)SYbf&}=vc>w`x7~QMu=Y}9I
zvoT&R;HLn*Mn&W5e&T(5>4q8xtqTM7Nv_wYXBi1MH9V&b?Gia{vQCOxM914X22>h=
zjDLpvqd0^J;ZY?;QM81PKn3w+00x(fy?SX?lp{l;d3V1~U9Xcz%5Y(^7-(8vBwan-
z0$R!hFdFt@Y2g-_ow+*7ij@Hj%v-10@BDv<t?9|!W`HsxIYtZuVY`lYEG_LKKQ?qo
zY7^ro=>jRaqnvLoqgzMDR6eMXx?JEI3D8b|;&3WFFCssRG;zz;G5X;1P7i(8DFQMK
zUw3_FN~2e?PbbWZ!$4F&Jg^81#DSp_TGe`x<0S%|o`2EpaT*BfP!RmB4gycq_$<v&
z@>X+%Z38qc*ikNG^oAF5$5vGa85x+Di-N!eGgEua-qv^hqD?2heUPp6I;{iEo3H<F
z7@|?7J`VMBfEU3T6{j(vX|ej5_MHSZ_)09ToB7m)NIF(>aQP={j!@no9Y(sx@pl&g
zQR79%5KGl^!;-g{`$x9Du;uHV_YNL_57$d%UUPCZwWo&No2O{CH33=Ykvfo2<15I3
z8e1j%DP`3!L3a6jdH&I``e^}&P%tW?6(*XR)D$TNNv=e(Ht>XA2$_$oKfJ)ma{mFY
z($RD!6IgJ6;wgZn9YC{b;O@_M;fwcQgsj?x3`qf8vqbwfH8BlmR-b^??XxzCI?=#B
z_b&$dYUXmlm)W?C8~||Ush>aiRKI%iha1t<#2`DDJ-vJ<bmD1xGHLQ56ike)?L)7>
z3V-;!YtW{NM;riwB{4b`@~@*^J8#vCjrpgCt9rG(V>P;-ZSudX(yeUlm6+s__q@L~
zp0888-hUc->pHxge@*Pu-*qymGnf=*s5sD=GqK|(s$lw{JJm3qq^Oxk%?F@~04Gk%
zMm=s*Wq>hBWv~JOVSlW`h#H2=0$Tvd1o8&3JdCAvtB?&3rSe5jfZC=i{4Y#=>Y(Jc
z@bDj7CmBq+W~Hg?B+5=fHVoj3!`}vA+EG<?vvRxh!>#D>ciVuPml|6ZVjdYKa_W9w
zc0n88V0j=R>rx-@46qtwLCKj>uRAH7_#CNEK35~|b!T>ID7hchu+xz$VxWl-LUc8~
zAnbcDMWm6sq6uoK)u?O38sak`TT$BfYU!WmvqN=&MEJ>lU-Sn2>IN16LGmANznK6`
zPqN|1G)^h(MOC<CQm^zqtgxoLGO5iWFVno!o=o<%zx^L(qlv$gmX`)`Jkz}OhVO-}
zoPZLoE2gt0r>+i?KA#RsA&m$@inP4XOAF|Cv?SF%BjgZrH4%|qg~*EcHafJbdWjAI
zqFs1D_|o4<wqwGdFxZtxBZ4?;^cni*T6~wb@QAohtVf?uh3zGf@QrNkOz<+uDX4{n
zJfyM;sHBe#cWq#`;gCxo2+GIhd^MSmYx*s599$zKNnvoLuL`5$<ft=4PMVjJ!OwO6
z33l)Zb~I_?3<IC5uoFOM&Oo~zz!Q&*;Lbn22pOyq^pD0L|HEx1F_Mu=xbO6*Z6j(%
zRW*EkD|`5NFVg~m%h3Vgfe&Q2y!+=<=-oLH&rDq0{6ewOea3d$vtn#jL5_S<h{7#6
zclHu|^uz10@0g*Rx7p?gi$q*hq}HbaC@GNOZKa$kqaG)iTE~sPDhzv_Smeze#;K0#
z^`Wkn`n<@+ll!f|T*C^_BMpur5-JB;=RkKZs|ipw=+1eN{2E4p4&L`BCI>@OowiIw
z=mZop@lw8ym%+OKuvJ0WWaA%VB}Ru0f7ryyvjWquz%&^~#k2uBV?l&Uz8XPF7dY2&
zh^>rYuTJOOv%0~Ks91RdN|8r&0G0ll;eI%I^gSlCr3oRL?Op1>Au?fMASTyBIU>|g
zo%SVUL;xpx^(#<bTns-AMJzDtb!J66C<tNPkpY!HFjlHJZm``@M!(025Fb>aYF$j5
zvhPGlYUDuEDRfM-Ui#GW6%-SwD<4SC*Y!gXwL?$m-^m~=w*Y(&0E;E502GS<G^qfS
z%IYX5oYTF9L_jG6q;|<z(`6w|OUTIqu*H;l)Bhf%NB?<I4o6ir8Qpx{_d;RjAj>h`
z7t(X>9$p_g62(2bA{yOOuP#9bB&|}bN!Jd(p6puIS0a2g`o#7Rh<HYhEIPLMH+TEv
zdV85a@~na)4<rTPv*QK&m&%*5oV!Nb9+!s<qRcn7VdU@Ns8u~_ZTMJv=>V1C^{N6q
zNS$9SqE?gk)FG+2?@EK6o=KhJ@OcG#4CBg$>HyRR-s7;2&5?epfu}4Fxe*5eON*x#
z0%&&vSYIpPgCD#IgK`zpd>|#zBq>Bhi@B+3c<9;BK!3Piw4$kG7(D%B-Sphxa*h5k
zQwM;iXUNNqqF;XQui3!%T5$-^T)fj(Rc4c<EhSC(40Fp?jOgNM9q#$!GCcg{EjV^{
zNDp$WBOatgGTORV1%CVqfR)s0r50b6&yV!Sgl*`}9Y$Rj9Lu~*)0;6E-!IkE_0$u-
zeoiDouRB*wGORlnvf^3&kd3Wxr?a3@g8@_GBu2`I0sq8_fmlDvu$K0p8ESsY11_ln
zoOzN?08tBxf7qoFz%(m}Tliu}03Y56>vi!n)Mya0U=Rf;=kMz2w6aghKE&amNjj9d
zPNQ8Z1N1_0zM^%m7grWWA>?@q2bW$A2bNw7X_lKfXc(+3#8N;!2c+JH1tu<oZfoQL
zKO@$=CAK$1-D(IW!|W>MT)l!L+flikw~Px=Yvj8|kj9MpSV@NK3-416FrYRe5fHWW
zpJl0LUI$0$@<r`rA?!o$bSRYydOWJvphjOpe?HH`{#W$FBNRqaNJc*r=Z>7b5FG&C
zHfg+L!UZ`15JHI>4Cn-q@kd7hbv>*lsaGt_w2j5AyYSa5h%##@%&V{a0cbW4LY8Ob
zoN0L*H(O*q2ZsRF7z;D|(V%JlKlk)t_enVeuAhVOE#y34uAfR+8+h*;FrsY{dXYcn
z|09lc>G{KQzs!*Fr)Ni$@pjhq*JQt)=|N@AD+!OQi8RWt^WkWucjWM8s&c5EBk!tk
zkP7cGgP*(n*}AshG4?$p?9>!>4y?(6d{|h8pw5eGlCY!asvy)caA?Jj;K-9X*0dNq
z8Om>xx1$QC_8BVq8x1S?o!?%DjqVC$WsiyAz*JCN*WBbBtoNRS$1mJdw3Eqp5v+fF
zJ-he6z-2xzLk9o{6FU0&;}?6?m)~Pd(uQE&K6&QD(2m+R3?qw}7Ufd$mc&~jPoa@)
z!H56g0<12lu&_5Io%&{*o>8k2iYS^mOY2iubRtoIkqvDfb&#20ZEn)KCuhLT+XS=G
zi{dmjzRKJ8(*PLidij3!m~}bzr0X1=^cLF515o~f?>xxUv$JfFn~r!ezath2Bq;U9
zv>mErmIy*+J~6t<SeKhcPM9)@Fn@#-Wz6C)sLOy(0hZ|?G7upuFo~o<shbwVOM*hm
zBA0TsT7*Ztsj1Y0*GyL^@-8yg^a0b>Ra=h?Q)x@M=ES?8*<6GYV^Y)>K+}xmJR-0O
zuFfSNPN)u@0PYLG7Z)LOBtNp00kTomabd&jy4WZR;KTE(dEi6!^ggeK{&r+G*b&k1
z;4QmW#Nu>NohvI4^5Ik0CRda1*ZsS8R<3oeNZU#!gi~=;LZ6rK=gyl>5RjsOgKdE+
zB4%U<KgWr>-DD|OCj;xc$+2PL`%~nc`8k5Bil___!fG^1b93u8cfjoI5lHh9DGM@!
z!Po<(5u9=7N)e$r2+JQ&pEfV>o@^)2=#>TvACdY(a5bVBe?+dt_&21|g~YJxz6oet
zi8q5?j!~J8)a`0%T;|OP0a0`Kk`|zpo7d1wo$We;uH}pUayqUgV1&c*2|Uh#k^}3A
zoXh_zL1EmozFe@M5>NuL=H?aZ_Xvz7McW>V;luWx<gi0NJc!>x`<f1reZq^V9T{nz
z0j7{FOz#6oqzv;9|MMj{ef9#Rc9Y1yn(hP}K)W#kQCPy=kNv4lOpMP%wqAbj`-b^O
zA&MPvxsJ=!0l>kAcRT;$r-pF$e{RIn?e6HQ?3s(7hUw-EPT1VFQ)EXeG%Ao0x(&ba
z>lbJOip2p4L&`KW?Ca9}em-5H!dj3+(N&&M=)vN`=p79GlAHp1c{z8=eQ|M^XSgL?
zGgO1Gv8{T&JD`7d7RGhVmFzQa*lWU!KHRLUt~LCg+8EVL>u2KxN6j(TJOCjIDf<_l
zfRuH)ow`}dlUg#tjhR9;{!MfQn1>OgBhbdrEBZ;F<Ah2gDu&Ypn4%GdHAMn2GoZ!j
zY?S<1yUuZIgBJ}?spDM(pwS5+X`-%63C%_auD|-7kY$w!5`<7<vetvPy(W>4?XMgF
z?V?B8ICS~Oxd1z<Bb;-ulSllPm;cu?JyD$|D0<Aw%jXIV2`Zq5SoD3y$pcQGphgdf
zOR)2As`v}W9RYO2oI?Xn&5uko3H?aUpBw^C&tMlr(nb)X97+J=G82gUgc$WRBb}Ri
z3+am-0fBvjnrUYM%m1)&FogavGuNMZE9}{G4fF;nYBxBj+4s}yly0r&=aMp2pu9L~
z<s7_#BUW=xTxUyF_Cu&25v-;tVB$TBjx6$uMC6Fo{IKj4Aj{D?#sGx>CPzn~AyVF}
z9dw^rUmH!oY*=&i@~o;cc7$Dd#)Svr*V&Jg1(kTH41Xa5)5_TSa*TV`1Q6n%6Z6q-
ziV`3Y^kM@;io+g*zwQ&@@ejNdf$o>%9<b5Ixzu143+fa&1cO>+^1e*%LBd}Eji!M+
zKePt-J#-E#(}R-g`LQ_~DsH0iRsyq=v+$*-KLMkByNIK9vsXR*{Tt~c=Pq~Sf0;V~
zJdpXjnSbh^XR!6@cB9i?Ucb9o+j<<PTJs3mVnG`Udb!9sGy_;)Ux7dV&;^*9$9!-=
zeFL13iQEucAFpF4QAFJX?7CG-6L5+CUAH!+sWDAVBYpiY*6>%XHipgswai6?K)0`i
zKrR>ac7!J<ta~JPo7h4uG3-qiqU1rJ2V8ILCJ1&?c5nk^26X~IV+cq6w?+hGj9ktC
z;|rDDQh;JaXn@UnR4ZnasmhwfT9Z^3%L60i2DEB!Kr#&wqBu;8QGy`GE*;!}MoY*T
zeHM`!VU^dvD~|3YojF34$vc_|0L%YdQwCa-0mRhdFNE$OgPHb8II!;~809Ho3c!}7
z>qx8B2owoA5@0R*LyUYhPZ9cbj0~_ikmJ|$-`aUkjJzwkQzdKS3drYjAJ#uTnv~q9
zdTa9bC1>p&w?^kXX)Vk_P{?1_rxCwze^uI8_5VGDfEfK`JlTNaGLh&YuoJ-C2yKwW
z?k+&PO+Dc$H-Y_sw3Zu<MuBC30iHxIjI7Y=#xWQa`wC)6v(g+s@LF@|;A>!YJ2h1h
z8sZTsjIRdAMg7Xd5qO_6;wZ|+pM(L=3%t{QF2xfu!s8Y(EBYPpqjmscD}aCyfB=Fv
zrn!Uwh@25g#o?2er=0IcvMlBO$0Bc!z~`X+ugu%2Qv>x+{;uZ?5Td}dQ%#zyIRr$~
z8*?n=Z<QGyb2ya4<dy76FvJL-Hz#;KNU$)*1r4HYppiQn_EH-Yc_^dG|Khh$qS!C{
z)5-@z;8^9bITJv8CV-?J!d;)<gg?9MIjF)dLU~!9g)u<`1{P)(;OR?Wh6@`{WbI_C
zJ%Z(5TQ5KNTRMwh?hXJo!o7Tl@B!?0xmA4nee=<`oo+We=Bee6+3Sxjn07n~{cIa&
zB}8q}z>>&ID;dD!kDi6kFC=i|_4Ba3T0&<kg5G9HlOgBUYZftYiOZ<mgNXMr!FXDB
zS62;aAA42>_IFp8a7l#PxN6QzCusRTmnnIS0i3I>^vjg>-~(!?EPxl#$Pp(1C-H-%
zMd1R-YTR~ckCd0-dLPIx$c({}rG~@&)RWje9w2^*pem&TDhRRwf(#(cEJc9X0AON~
zBdG$(P$_DMgN?(=V8<@3xySzSc#g9kOV}aPyef!)z)lsWY0${wWTCnMUeus5HAQQL
z9EiFj+hrncVqOq~`{B?+KE!%|3t5UAu`n}nHC$ME04hkKEZ6~19)eTfQ|^JH0P-Hz
zzhjh(Q85YBijzY7>oMfX9TifY*800^D)N0=wx<`$ks2MUAX3h{oZKHfK?0S^Rl7zG
ztso`54@!!ZqCjzElpBEge#Y}lNymuJJ(WC$fC_4KDufb&=i606xZ6Y#G=K)C0x)_L
zf<H(9X#4{x151tpasfz1n@AWIAdX124Rr!c*n#=^SHODL8srKvDuv6sro}ZWLQ_HR
znW^t_UWA<n)^m`HONa~NbyBB^l_}E12L-G!(npjEH7r7b{}Bzq)DJm@a!@4-{2-*B
zNxi?6`)RsN9cOjI6=GwfB}P<|S~%C}^{4mU-}2;(gt<C;v^;;nK?7?%^U0Dg@~ok0
zOuYUQw1}atD@1BXlu0)nr7IZ5!4Ka{2;no+MhSWpc5wl%-pcqKQ;SPI<(#I#XM}?s
z-Yc3;oG(_FX=C{)eipU?rj`OoVgvVosS6+e(`O+MH>u>CNZ&N!8bY$>Cg-6yyZ{e9
z_c7Z^+EEF^C)Vu8|3+R8-OPBokIUQvz`<SJ`uUTq4Ril@OqrWMYQnAUN6&n?dEK!)
zASoM=m)P`$bLBXJl>m1@h`&Wf^`f8u>{-}5--PMu4&)<iT2q1TZ*fx(BG+LH@>)cM
z+W<R;zn5oL=!ya{hSXgS$`itHDF96^cphk-qnF9Rv26MA9D{YWU%2NKDEr^J3Njg1
z&qFbI@*{7^P15xw>hoch4&mlVO<CxN>X~Eb8JrAoqCh-1WoQ(Gx2ORY5rMQ1(4G$<
zN-D^4(i|a)N7|%1xLqPOiS)}%&J}K}pt3X+A?JylqU?Z3cvOZZZCBX{VV$*wVq^fD
z{APW8m5>fIuo(g;*l&U24amz3ilT&GewK}0P(YDqVj%d%;DQh}HS(ou1aiE%G#uIC
z<Yh8?!$L-4WH4Itwg2%Z6sSn$f;FY&enB(<*DYEGZerImN4eI{gsI{6u3{ba(?pE^
zpmej8Xx>#b@V*k{tu2p9k3l-zsUw6A0PVkJWPp4Gl00Db0I$yh!BS#N$pL6cYM+8U
zzDMy2aGef10Z0bKZ{dbYw{xX7<*5P~r2tJN+2O&cBSc0?99x(Ak<;i(`Q(fs&L$=T
zGbWy2$9xiTew2ekP5|Zi(fDJ!3L}32gQ=@V1u@>^*cDOIV`a`yK9XWF7_}La{_tMJ
zmqPQ>=!m0S-Uo&Q<!s3QY8WmTwKn+t8S*5Z!F9+0Ka-eJ5@X8TPp%K8GpdeR?QXab
zfM}_FXNrTV{-D78fyaZ<lgIj~b(1A2Qzh7*+f!;Fg^swk?XG7f(hi~C5#&HoDpv1d
z6$52nMMb2)nSB8?5(CdZIfVc6p{F5(O#nMm%+yuKbQ+Toh6Q}#u|KjAN=bleZ`e=2
zV^my3PvK=@{9h&x01m!ow(`60Od3l+(FphbXg58-{p5vDH?Q3PHrVd3(@l>zB;CL`
z31uS+XYTy?S-9i9$Dt^ZO==)-m1L~&hNQA&%aD}Iy}P`<hkrSgpxz&c1~`J>4pl5K
zI#T1V@c)>jK(+Pt2J~Tf<y(%6;FT(lof>)AnIA;e@gyvR$UIH18rkZ;$`d5{NL7r}
zeX1W~MFd#=gC1Zh5yZ(ZAF(PR=KHIrfoy0YPAh0lX{SH~IX2*pErf_1U=@JlU{u(e
zPbPkJ#Pqxe1`T~2Rg}v|Qdx}ZYatVlaN<RSKkNeZH!2uz7m)T!C`LI=4yfG^rT}YF
z$ZZdX`8JI5Ey%MW<mI*#5<(J@rU3XYiNid-dnWgZ{4c@A(kYNs2WvG$&AW?=EgNPL
zo_3{*Bt^^-EZ%HxI(A$EG3I#ngh9#*hxNVh)~Kk5TvwMa5D0;`M|p3*hrM=XRE_)E
zIpA_XITw`RXZ8viOsc6jtPHHgMcM}E{K=`ns4eDufeBoqQYk$FI1PZFogHKGGpC$M
zbG#hZ3~<y~KVfPgH7%m(h@5BNNftpTvMY+5=sBgIbtMPG|Cs+ru__^|wz-Oh9D$}D
zlcCdu`<ai}6e8S@_dce=2=<qX7%ii7@H!u!8c)OhLh9$xc{G~x8*Ab02Ox|L;5l@q
zq0&nU9dZUT`MYFmN#&Dg2~Ahhtw-0A10B_RuCOg?5Kt*06H#l9i8=vt53}JW=cGo)
zkk`R-*5bHoPMU%n*0Vs$fy-S9Mc13u961xwgZV=NG#eqTF6Z#UKX?v?#THmIpd1T1
zJpw&7q84=8ZMgf1--9CGF51y-d%Jq@1KY*J&v<9>Wieh>4nS!$*vvoqKh4JPdQB&u
zxNUX&%Y#mHAvrMr3fSteBCyO|11V30p7;nhyPNRwPn?B!zVj$-U9zUtK*MBhSq3`q
zt4(6qOEy=RuK3p9u~zGcSRQyM4J-?Dd5ZisCYR|ip-^F6zo*f+t83POoeG#@B0fYR
z+tPNq)TUM*1bL4iNait;EP{MpjeQLxiqnI}!7t;HD3>JMi3`9JVLAd6G_6HPV7Lj;
zKo}Ks{|#h`qbLt5%?4nQxJx-ykq{LW1qp!A;t3&248#fQtp^ZbXRpjcKCm!Y2k38B
zFzi;8Za^mhAy|a`p~|5Q`;b?C$ci4M*#L4ofWi(rDxvfVcCkyKs3OWk7bOzhN<uc=
z_4gonS1|%R$aQE;TqIi0u4G*FcM>HN@|mPhSlLgmGyN_(b}tnp6gD>A`o7Gx4jNX0
zDw=7Tyhr^EIG)q)#g2^Veo_iRjJ<Za6XyUYUJCZ<Rg%ITr&l=itElgWXMp8yLJfxy
zTPar-8sbQBRTm>EZ1_n=mP~s|Q7UV6I6<JI<j!#9SxU|Y*F(ZN>R|aO2P0<uvj)@!
z>=rx2PMbalcs|LoL5D_^3+X47`&AHP)Q`rW?px0HBY%ZcR@!(+9A*oU4k{?n_+#Xc
z`<^qB=m>AF<%hH<79(nd3fm6)3gTXbUR(Zp|IvtI!d?3mND4{rL0*oW67lkDe}YSs
z9QNUG2l}1&hb9GvOXPQ@MTxT~r{A@hkl9bKEy{=!0Kjudea@-siS|kmN_2WPy(mZm
zU(@>f;z^k~7(fThwucrz^5KiH-rIsIPO+tjv;k+eKb+&|rsv_&b034X-qYD^yx30R
z;?HfBcl{2$49CmF0l>lj<)~Q6dggQAH67gka63wx&tCk5oow$j?dBZx2ip$&!#1Iq
z>os8)o;d?>_vc&inpf|E)#Vae9b<aPHX(?&R<6>`)Fc_nwbJLBfAS5sN4Tro^mu53
zC*<Qj^zLx<iS<eVHFxXt1++v^z*zZ=dmc!5L(5?)JCY4KBvk}KT>m<T^wI%>cBrB8
zCJZ+IY@~?LgdY|Bpc6ccY-n-<445I9Dybj|1KZsInBC8pA)aJbc$Olgnj<bXoCxis
z$PmHrl9NQZFdrHiYykAvEp*o{40>$vl?g_oA4LjT)rV2hg*4xUtn5RH>VDV=U0~vn
zqD<78SArc&y9Fpoi})%sx-~i!VLVh6qY6Yv2xP7T3+qUfiAa;`{Hhb6d3Vkahyouk
zuh+CDdJ4)wNDIG1%S*V16ghXD1kUBlSHu1)-ouw!Ext^<Lflg!V223oh=7$4s7YT+
zcQ~15rkl73R7i*}Z>-e<c=0R%D)^I87VjBPFT(%m^KmbDZd$_)Y1qI+fgb|o_)}PU
zt*H<iO@K5-<Erb^)5Z`q#gOXPx{_XxE1`&%k|yc+C8ZIT4F98pNkUc#_cQAs)#gyZ
z3iJP1`bU`^YU3-<G<NtK0u-qs1dNG)QaK~q1FD8cV5B#fxW|4>IIKp0G%v2s4tKqj
z@4M<nnF|zF5T_muHzlp4^{FBRW5|(PpF#+nR;e8WLK4tH;lJ=!F|0elwKj6+1(l`y
z&eHqjA?kjQrCYpcN7xOVHmF5b`8;825gGpn04Amah(iM(`RFQ~KEDFc>_L$i5IHVP
zK+eGY)Dm3Sco3ex^!Z{knN7+dJH1)m^}~ftWo~=<ME@@{2cUKWy4m9w!^YD4I&j0E
zHB8!j{LF`vR~-Ky8^?*suvU#`UgibZGKVPY!~OT2g^7s-PM(~F?s^HG2_XfJA?o8f
zaxPhsY5?ioUK{!GTKqa4pq>46Js!K)c@}k=V7&T3*ti&~D@{@BXI&H^5rs?8X;(aH
zuS*;{F0C0)7O-F72m2mSDyT;7nJa-wb?P0liCXJ2M2(YRF|uUXsbNYO7@S-OTL9Aw
zyw%y+0D4_48^qimKoVCp$)izs`THIke1Ptzh29oGKHvzSAy$ki3Mh&c(!2|!bPLjK
z8}fXF@-ei(p^2zu40lS!oN7@f#;TG1kGTn~H^<4Gwd=(g(TO5Lh?K|Gku>qeI8}f$
z0v2Ic)PN6ioWMjJ9V6?qX42ESm({sRmab@>TV*6b&$md?>Xp)8NEAg0f$sLFGCXIT
zwV{pJLzjwBL#;wT#N^}30Qy|>|62JV91WKq@SGF0og7I^Re<LtVOkAy<-W0I1e{@D
zR|Y6L6e<Q3ke7gl6xZK`FpOZBWzcL#&>~51t|p)`QwVlcW{1d6&Nb?sf@TLx(Jb8q
z=Ku)@1tKIJ%C*CE6jq|3@kjU{1+A!yr6mN*0U#pCgZEH2svsQ(Omd}szm&&1%?ziS
zSA%m7A!NsmwfsF%VhsWu0atCc@B&;ds9TM;Id^jv5d+bd3xSz9B@WfBn4_T%<(QRL
zL(S<TMNbr#*Q}&wqTIcVJW6$|^;W~<Co(NV298@K&IF;4(!LuBxwQGvP@jaUeF1c4
zD`><9KJ&>9xc9;H{||fr9dB8Bl?TGljwjz(w^HZss?IqmM?exF0Rjm`HYV60g3UP0
zV1Iv%$DchO<ImY(490lO3~9(95E3X$-Rf2cbyrt+S9e#AH{X-@+2Q-G^uGI+2$qIF
zjJi($s_WLh=bp3A-ur#mTF-jc^8l@F6#0~oU5-)kiC$|3qwEr%IrT?nH<?2eB-jo<
z^|s;k?9ft;SK8whm;lftK!5hg$D?@u$6C=1|8`Pr4UV4q!}RuRzYh6q#&hrzBn8H#
zn<<X_c=%H%(ds5Ru-rv9D$(i!gKee8@Vss<d#w>#>+im+HSh&(f|_T5W$U{WVh!?2
z=-)Lpu=_JQXukGymq0MutCfRo6h_UiEpCBsZSdR}#c~V^B09Fc1rfK8TWf<;cl{Ox
zIujJ3#EAU@q!${^sI@}X6ZPf;-o)n@#TvHL0fv1F>cEJY;sr3y18i>tgVhSdtw5lC
z>hYH$@}NLg%`lyfF&Ph#W%Or^ayCI#%>>O2VnlJQ2u=;Qai6z--_SouAS5MQV3bA7
zpPtnKNgqHrVGe3;W?n^pbdoG4^*tRta9##tVkhHvbZ$7Akc!Dw)_Q2tA*gW;YOpOm
zY~!?>N^~leoM=x~!6LgqT)^fHRx${8d`h&mQAJL6Oy8d>FXbvwyF+IERgb`gf0Qp^
zI!&~}dwF3c3$op|zCHyaYXfK(iPAG80-9HYDBaP0By9jP395n)lDLJ*FvG>6L?{w}
zX|zJLx*?h!`kQt;(xZrw69JSGL>fuW1L^`fy?wWS4D~SKDW3E9V}CS~8dBx2`V>*C
zMA{bZ5M#zu(n_C;5>ny~(byj;7xGvg-TRgloAoWV6?G3_enNf2;5bI1nx|H*b?@nT
zTDrT&MjbY<`9ioLUi+F*v4CVNg{tWid(AoBf@a%mL-v@ds0mh`PoR1cQfMeTU<d@?
zBcku%)E9I=QQxe3f+6`1@gJ;7V^s-rT`IH|q)=!k5uSK-fRB9q41(q+X8G85JOpgI
z5Tcp%XlMjay!bmvq9~8UPJ0kM{^pIzlP_If>b#O3udoDw9&+Q6-urg(@qZu1ojV%g
z^55(aUmTsd^qKUUl{cb4Sk>OC1?Lh)F=iO>Q=d4Ecf8{!G@=-3GeDEZ#`+3#ayD<(
zx+k`92Cw26wWQuHV0UCzE!PNtLJX|81*|V<Z2sDUrvK?G7eXIz7ye1woa0SK*iLm!
z&F}v1HFvcKFN=y+a_Wk8AHyK!-F<O~7-(C7#&Apn-X`)Wz)`iF3eSRnpNM??+a2KS
zpu)}w7!E6pNmPg`4boO`3Y<EbRv1sF7!Ajmj>pK!wT}b`sseGGQ1C9v2D&V>kl=oY
z$Y@`f&qxjNG{Gd#nkONkSWQr*O7uZq&m)V&2!v1ZQz~95>-c$0Y!Xr=1sIO`3dxJ0
zklss#l2D-I%18y?Yl1+c;Ac!a5w3NN@Os%*Z@r5hmH{@d&CAD5@5j5ozNdZ$AN;Ka
zpuP)S{mW-y!5<wBG$ABsEX2V<ndh}$G#?AQDf)Y}x=i+#6@Q5Xpnmi$2E+kHCHNQ>
zh)^;1-ar-Qi0JEr62cOr%?g`D9ZyS60%(-CGZ%57ZY>b}AW1GIp|i2@Ls*>3uDji|
zl;E(^pE^`hz$XPu_O1}<ztI6BQ~WzzH;_aT-H!#gp~zq=SM-5e1N4E+Go$XzX$*fG
zueC*9AJ63uMoo8|o-1Ne*1qs<0|mdeQui;(1%UB+-Tfi&BYG5)<jF0e?tN|y&{rgc
zEUIiNClQkG+c=;m1#%oVIPLFCcUKzZ<W)M^<)fC6;j(eRq@#WRc8HgcP4K}FokbOI
zA<swhIhagC=IkYspp9<3hbNE!3d(YnwUg!cusZg=>)EG2z8lVX<vm`32>?ChuFs2p
zwTVCe(WUV1w|3LHH=bYrSk`JR#f$A*F&JL*&t(=Zu>yt+JAeF>3Eujq8yU`O_JC;?
z@b_s`Cv6?8>OG0i7M`#4>(#&00+2+3djK@rTqh7ZV4*(B=h||{c$U?sP(G8!MHQeH
z3`{b{=4&m)8Ddalmb;dQwJY3nEVwH-K%qrj$i6@Ad-hIn#}xi(PMQ+{g;{CSp9!2_
z<^}RmfUu|#9PoYPW+%Yrki66b5NDtuen0>W^9qA0aRo}uct$@!l2XN9GRjcqIoY0+
z+)R$>`zV8=&^=Vf^W<|10o24{gn+D!Mm_<mA8!F7R!CC=IPX{rjXU!kVYQds2B1Im
z%JdxiT~fO-t^GRNp1ZOdOod{tL0ztwRD2dpm05q8Dqwv=z~;BTL$Fp=GWu0ok6v|i
z#QMrP`bn$8_5Mlkp12q~QfXWO*AA%3{xTE1CTc`IU{1Icc`#!q4t^qD<paOn^R%WI
z4X{5n4hSSPBg*shB-oU)d*IpgN6~0>(QKrM&_*105d|%TNHN)=$q(Xq6r%Rnj?nIr
zOB_MSAv!CB8dOXwB$GIX>nTV}S<5W|67!L2Utxdk|Fck4i;lzY9l0JfIy~AI?TXoy
zyNP1&t1g*hB&P9`MTivIGZ7u;f9@vw3OYpRNv13evfo7ttOaNv)|e9L+X7ZqyZ_5g
zF0-_rGax8{a%^;@Rfxdazju0M3flx#$q6O*>}6dWqGiga?gVLpW1qpu(ehrF&-$d6
z?;HBnq{70%0L?hSg;Qkka}Kj$4MjC{`=htUO0eA9hv(1z5w<5MvTnN29^=G6U!Q&C
z7wTFmuhhpYGy$N81gu%HKHI@(-m@6J<3ua&#3#=GVcEWBZ`f?iVLaWg!QCaQqTqS%
zjkSyT?4vEb_ElG5HZ9Se2R5g|=CzlWo?I<Z+ut?$+})#qHPLL1-oEc&=K$D4iB-Pr
z*XmkY65RWho<ykPJ#K!tUb*|@Q|=$_0B*M2DhJ=w7izDF2FXjgY`|?qrufEM?-b~p
zwCTzQ8&kzkbN>2k6!fRmvnM`4CC-4&#Q<}Am82E}y%k_Gk;<72gf{zxya$+3;=q0Z
z0pd)c)u1GKSmuZE$Q;K{`kXX3NZN3GUdaiEpj5Jm^^PfA^OzWk1yN(-Q&gL2bH9qD
zUr9lbNod;dr;#_u`WMoZRdRGb9NXFah?G3X-T@jY#mLAKE^iJbBzI{Oh=7ku@Y=?!
zDuL{6VZ~Gp0T32^t&;QzfSUAL&tFAyoc*s<_SC*%#KU^x%(xdM!$|?tw}{=(qkxL)
zFzO+bV>T8ki4uSI5+wFSn>#_{Tx|<`MV#8GMJ{L-$3=yc>68<>iw=klbgaCL#u(3r
z7-ZBqD456@M=hjL7ma8Mjm8|pu#Er>Oa}po^Sge&<WbW`D?oQXL~l=k?oxpEvW)ey
zi5A^6W@Nx-R65N<_SG$*)eaFQ-Z7lc194jhn-!+ix+1>HqzX&A2Z?Aaf<Mf{<(SX*
zeU|mqu2EH$Wk5^@pHztWPra=t7hBMAIlnvwVXdOe+Jn}{vzT3zE%BjHpJY292Vm9K
zus}`MA)+Y)YyS!DNM5T}aOhU%j=#S9%9@i(!uCQp=BMu?Xq+OJsv6nZL!*2Vw$=*#
z#&4~nKV3x;?r^nlsz%%*sv<1(4&e0qqd2$qxvZ1Ux2M&{@2}53`VaDAQWtA~#Xera
z2>?ChmKzr*)*I1t-`WXp|Gl!>8XP<K+s)gqelL=!i5V+M3HhW9NF-*8I33{h=`)z?
zq`33W6-)*Nx(fkz)@rlemWtN{ex1=@BLf<luU?b8-o6F$U4h<$vq1osJ?p2^=hk(?
z?EAY(i^>(SU`LU?R>8Q%>#Ba)<!OY=jZ5>w)MO;09w<qnQs6JS9~zS@nlg!4>1+y&
zwkV*NnCUDu?|)Pk)9ii^D2P&_PH>Z~!VZlB&Wp^az_%4L`kL+RDsqKIgA#x|LRE<M
za99wzFjf&JmJTN~KOyUp;1jDJs)j-!0fV<6n;X|_VDtAbLbBMn25I#jAW|a{>!@-y
z0w6t{dM-b&Vn~?!;a*jbjGg4?La@{Ec~z+sGadz3Y)p)`1gr(1sDMHKPA$&EzUE6H
zBZPdtRP4tq{_(w3lQI^TzK&bf4fB*a&+ltm2PXc*AJ`HB@llX_sMZeB^OZOYWga1<
zTnrT@0?J8e?|8lUxB({`In041^qg7qs`E^Jb}`IS;b10S(&r}ArUF^n$0Vmj{sMwY
zf+T7qiMnW|OK3G05XVhKXrd@0Y^?*EYt+K2*qySq2y_;K?lREc8=|*dqBSQ3v<dMD
zijZZg6G~{ccINY60HZ#T4@9g=rUA6#&x26x_v{0T47uj34Bq+jz}kqrkwCQu^#QzA
zEjyy%Wg=a&{{21U_dmWzcvMM-Nt9$)tJKY5Plr@YKi&kB+%RQ*e=_vYk`uYz{pg<C
zTk2Cwc4#h1mCxvsV`BX84bbfcm`+Ok&Iit8b>}>gY%<DcGl#sF6%~5jeb^kmgcmP<
zIB%t`w5YPvTlvS{mlZo?WD04@zOo;$@C3jwf}Q-~-%p}FKb1yH?;q!vM#nCEFunQU
zyD*!Qmo3u)g%n3yO+Mhh^|Q~N!opGm2lvilIxf&&0Cv`-sN&?<QBig?|96l3`J<o*
z3y@Q$Q6u=-Z)tl`33s-5tvR3px?ZW<beO`4x}yrHNhpDi(`Z1@;BOm<lb2Ceu|)vE
zcImB1<xHIXs7FfGJ8g&|0)k6<Bdm}OX%@f2WLRQ4HqCQkXfrb|C{Tn23S#Teas<-=
z=_p2P6k$w0=?E~cfG$k{bjdsgSlSaXlX^(R>~?^Zj8rB8O12#)dDVz3Lv~w>NeWto
zM+qU2sLXR^B7LlsB<5GK8kw~N^t?LqltjHCh&iEPpp;q|G>S+;P-ROgpws>n6BMdF
ze>38t^Tk3wCjDD8FcL0+P622DcH9H2z*G*J4S5_d!PSCt1K9>|WGuhmdj5d5WjMgs
zX7tsrSc1Je8d^I*GZ|+DRGW6-$x+e(&=El4MfkuKa1TPxH%SDWwXsO)(nJJ3ho-!w
zpcI!}X%(=7E@`~i+W;jEV~VK^CwJPuq0+h@+X8A61k{U{Z_sN^%Mm8!2s_y-!cmGi
zZlMv+qupFUr#+8mQzi=NgY}2N&ICyMKzpaa+!nC7FTlcbiS`_|5lVE3Tu6u$kyy#&
zA_s=+A+kPA98e3YHo~c&%_Z)}cC_GZmr;W@-)2he^KC!t^NVhwI8b}_JW6E^32-%n
z&J`NqZ})<&a6j?m8Tgh{nwXCrBYy^6MzWn)H1|8IaShz=syzwUDRj@31l~|gzArs9
z*(C@v8B?LV2aL8-b^pN+U%;6QXAvZ%@lQfOs%FUA!vWf@CCth#ym03C%T|(>VHJhj
z<tN`X&d(|1|4Q(u$CU&?R~zZkZU-Ox+e`5~U)N50cMqn=vNIc>jIUmL1Nt;r?kZ`S
zC7+djM8rOQ;v{-+Jd8%1BCaYly1-;xB(`0z-!<v#;oqkQwp!fx0`nB8f4>IL=>k?l
z9czm-kZSMe*gm_%1Pi)w@u&=NH}a$ZHULgHRbC=I@<#nlvd9%RM0Vw4A9tPm7LQl{
zo!O{hu@m|;8L8?S1!E0xR9zK8hG{WDmSxC_jG5hpr^k&1X{(8Xpa9|kY?0$%fKCKt
zmw+XHU+U?HSUEsCFyf`q>;_EU$|seOxMoEDp+Fs!<h&*`>^hRj{cxG5s|b?N=qkNl
z1rW6=mVl&ZD2x%%I3QU97rZlzu@9XC72gran;qh~uWo^kM**EHpg{gym203EhP)D>
z%wUI(TT3UI)>KqN%VG!by56hxetmLi_bek0Htwd0fpH9k<fg&gM*1|@W3<5xiJYmD
zxBexwBvMbLIeC&@=0r$8n@P1Y?5_|(7*=6I<WHIh*95?fl#FV@W3x*1;z_@dRG#_o
zkd1;g$a&v*`2eb~<$KNiZ<D6>oD^xr2>ijev6vt$rWlMj5zd-u%{pke=Fw_)5I0*$
zx)I{J2w@M%lK_Khh}m|@+Ec9@*d}x;775}OI}!tv0_e2?bO8boCB?LBD-b;$Fio>a
z8_)G>$evDHchVAc^ZQ!P%g6A94lxU3;Vu;kGG#zZ`@G1JM+%HLBmzV7N|aD3c~AER
z(r}dLF}^Qjcv`2}PR6&WlNEP%#4L4Dm-J;ZP)hR@(Q?2gYlL_qAWvw~0!JrT+DkyY
zN9!lTpL}!`FTHdcVY-c3K9%1!Iqot<E1hRAfX83{%`%K;SsZq|JH_YTu$>(_@k*Ta
z|MMPK5&-y{Ei2Y${pizgp9|jnLOYpjuWmh(H=~7ksdEPg(=}Z@Qq8biO+LT~F&=&-
z#%o`Fm;*zD9L=b&J@kv$2jSYSS99EwhiuY38dS@o{j@+0WOK7T)<RIZjhalDOd-@B
z^{l+Ej^;9S^By-qk9zf_r5`aXpKLXgrp)k1RJjw8c~&5slnm!jMkU6hg4xtW%o6o2
zf!9S^cZ@6_Vm2OOT1?3lg@b7nr-%}&x|lP}Gy6pzF<KB1S%53z5KRg$mny7WEru{e
z{@=R~I8W}L)B@;KAOdhfNC1(n%8=9=S-VA;)-*y!r6x(`h!vt(ifYeUXW|X|x05B%
zHGLLJ04R76v>dXSIZrQ8K;$?~NkJhbz|i-)nK!3;095@tJ6-E2)ExwAE7zdF5~wP=
zD&vJxuhIL;9_b01B1k2=4!m(Y__zKUYK>Suh8p>A7carJBg}_ElNElSng9^B@NJyW
ztdZ%Oa+ubt)4X%&Vd^$~9+^}~IvSch(REV20DhL>0m?r2Bc{X?VWS|Hl-3|>vzD5L
zS*2UYvBiyBMPWEu4cXdR^a;pRC`Aw_m?6Tb$dJuKByoVoH02;(HmQ|Wq1hsi3XP~r
zvN+Cw=}yVs5@A+ha2klmKqD+!-(Y?*K-L0t4rou{*P?`meMtQ!u|!-bClbg+Lqwr|
zCH*^q<FZyAEjeCpgdWybzL@?P(x=lwqTr{<Uah>)WW<yMnUAbodbtVoc+@?W391~R
zO`XyMP~t7%u_^h!=!;lVBCum^(2x&@?kTxWMj)p1%~KYw2#-9nji;YEgP^e`!QT)v
zx~HlLNz_5R-Nolm{t}9EE9)dn-C^<E_pePK{**^kuRQE=B>`{`xlM=JvDLUS_xf(|
z(2-U;8=cwsc-cx;!e%;$$!tp_v#MTJBsIB?t$u*dJ)YwJd#}fA8lc&(cxIjCZcTBm
zKH9hIEo*5(P14^(gsz*W(*i1p;bD1m+wdF${+-&|_UdNVm-Fga@*whBD3Csp^wLOz
zKUH-k?aGRFQi_sz&$vHBe~@9gGs9$*b0scSGX0@;Nrs}BU^*KjD+kER336ilF`AGd
zj#All8OS9@mCPa+MS+0S7sCR16ks~i@i02}IAo82opy<Z6(Gw*5NL5Puy!s$qZ6=>
z0Ku?DUU3td+YJQ;Y&oCO?k6wsLcUfmLq(GV!o+f9KyJp0ItfQ6g8qq79MTklim9_V
z0kaLIcdra>Ry$(>9GY|2z{dyxolkC`kU^4?7I_3xd$tZ<H>h0+Sc>C|KELUuYtP?R
zPHqo($sbqnc9pHfa%g~7di5T^@i}$M&W^<<73h44DUK!vx=C|YS0ge?vLkMgwBz$w
z0rCB~(&O+P2221{OqgAPbXl<@jaBm6*H+piqXMd(#EF64yV9C52O5*rRt!RepCCI@
zf{Wa+5g6zX^>PvfoQ$T3(iY-Y6G^9mq(z1mA!b2^G39r8i6%k}veJF_gw+2cVD$_z
zychtZ5(V|GNK-5?#SJp5kdWFXSp+u%RIPv!t5Wv~=A%;5r1uts1Y9l4iHK<2QKweq
zHuKyfF@}<Ix}-C!lR<n*>-U$N9I^dDK7*YtH`OCjo{m$(36mof_+*3wKO<^2V<~Iv
zYa2(lKd(yZkSXm?xU|N+1N;H;z0n|R?q+~?JH*lFcJT0{ClNF^{H#AGII3hCG%(j&
z#Per<2ZQnH$y~b99am@n`P%H`Kfin9z4EZfl>}hdL+-ro>F1se8@+e7!rOko5$z04
zt$sMY>A=^8G-F(pBVBmXZ>-80X89$oZ30K0jd15}*CU_g=yU`0w?yenUb@csm#G5R
z4)A5ZE&yUcd+5(A0D9=p`gpY9>qJBA`wHBt(7(c>+<(?!$Y^66AxUB+X(T%O4M_m3
zdqL1W_1Y(s9OFrj$!LbjILB;40aPmnqAP?1;}euR#B?f}`em63JQxs6oFEP;cuG%J
zl)|K@qrPoO>TZMx1hj#b$O-J7iv24q_0b-^S|Mox!xn9#G=3@WZ=JacgQ3ii)Ax#T
zRpulvlmjt&4p3k&$>Tv;R;n4#9cN;8av~tCVHvHG<08j-Pv)dk9CI50Wg^js7{_Xm
zLsdOj!(wTs?0z8zijEEifk2P|71ohzSNhT-OY1jBmh?5cg;vKRo}d!Ih8*$cYpo{j
z*_+q|Uw7vSBz=5C4xG@BG5ReDP*p-VnyAwNa>~jopeUvD{S5W9po54<bArRp+74Y%
z%N{pRA1j~Tk_-;|!DVWQ8h}{ypMpM(0fs~fr9UbTL`a#w2q$q0Q)q+BB~A75R3osm
z8WVjdrt3-C5LEp~+*=Cc6hYEN*lZzcH4wKGgq@IiCgd^S=vGMQfg%C6#bAyR8@jIB
zXMn92!6*O$P3&J066yqucZ!<#1l<cI(iljaAsUSkX`5<nN<`HJNQYCRnm&MN1*m&c
zZ5qHCZYe3%aR@Z18u3rGLws;{`W6fa>cqcmMVPg)A}@+M$+>i-MTfT3r=9pn)Ml{O
zo$}&VdJIMkWTdfnOq?L9^)-`;Y09Dz;_SIG{^X-4QN<g`^Px9IlEuRr>-@qpUcUGt
ztnWNC=`~ln)AG`PU7LOAC-U+N<NwckTuA`_)JK5r?2{h|llG6a!fXG1R&0z;t^IL&
z-M+VDnrEygC-H&Q-wRa50F$!Bne!#u%>*}HcNOxiK)V}Yuv3TGWOs8K9;&M?-`5+u
zHU?DxJ!fvB-<FXsh3q_qM;EH>$aT0-)aL>u1nDOvVnpz}1bi}Y5kLBp#~LT&0@KM1
z<IxP+gzRq%*2*U(1h&boGUOmAzmHi#0e^_1%)Jb$!sUr#!=^263JL5%LQ7Z!8~2x0
zE||!Bgd*g&DN$e@g)FW!UImW<4opL!CF6rj`zmB4txLAD8IW<}LX>eC52V*5PC%sd
zX6!o08zOZ9)M8K*5!QT=kt*h+Tl1Ft|3MV86P@DG)V3%zYS9+Xm5>#cOa!!QIFRvq
zjfgf&ZFaaqKd5N}P<RzXy^?}}ASAls@_EwD+^P84g*L~wI{YnnhVH<e)L6ha#Xkmj
zWDng%^0WDVah}#>LACv9qvj$$49Xy?n6@C_laIh!iR`IBhf;V6U_}9ltyRU$a^OUS
zW1QMXbCTq$Tgugh3@9UjA_~O5095fZdPVb?beTw~sg`lr$Q;A}W+X$%Ow4e<%yA|{
z`it2*5>c~>xZOnDi4k=oB;62=xf0|{LE=9&rJ^iaK5ubYVzv!zyex9m`Dn)Ol7xK3
zjCzDf=)ahbEkZdZ=gS#J)0~rJy4RB=K%<qQ(Tvb+#7Gjt#Uv@9S#_2TW{nU(^I!j(
zb3wHLchX(fZn3WYE)J0@ayrF8n||>~61PlD7F&4%(jM@RpiZW@mRQ((OMdEkCSFcU
zcPck1W!G9zNi!-V8c@;((m258PKH1D@Ns0-B~;Zwr(t~Sl0M_o+=24k#%FMD^;21|
zvC^Fu8^5()eCP+VV#grTKQjovk{?$RfIo{ASmoHtKk`#S@>SQQ$=?4t%TJHaZ#<kH
zTz)NvIgtW&hL?Tg>24ojf&#}+#b`HLxN83rGoxv~c+^)yi)m}wXpK+TcM<+9llMQR
zhg3LTtj80Z?EeOt3eio*^(e?wmCu^%ROu%|=%XhS<ep_Erjv{n^d_Sze@%>hM?MHC
z>`yVn0K?f9rn7D21y%Sn-V8`mmvr)J6BhGRzv0O21TA)<iwg?j&$Dzn2u74aF5XnA
z6+k8_3{MizB47g*Y6k?{KzL534f;ui9wh-ZiyZ-b_5&AYKw}{YX>cRU$n%HfUV%8L
z%~YZ0DnU`H9snh8G&dg;Lcrj%^sbrcN#~b{gw{uAKY%g_W?a^>gE#>KHTaxkw+2l*
z#SHtao_cH^2y`B}O0F@k&G<)q;Jm?d02aX>xzRMBS)bm{qwDzAq=0vIS>5g9|6wYA
zwL4zS3bZ{@w*giSe{N6kJ*B;U6$uJyqC#5%riH*<2Tp8!Pu}hdLPcoPA*Hs8KVL;+
zelp=;i3qnt#AMFY==iGWNSXcNk1rz=dS0YLc4Adl9l9Pk9X|#A7!~<HP|#N|;*dB1
zDM9`X#H|={D`bVg=3L36fE1A0WK~TaE7kkpc6$b_zC@fK8Al|+u$=zOGZf@EK?-5T
zOpF8(Aw_})8b}&V7BixtN-ebE&O~IzX-&leQcBd*2+d}~qE^(NGdo)*&hfabw6gf>
z6LFVMj0O2xG*&;~x+JjNR)Quu4PL8N)IWlyzPbIcx*+y@`g}rZ1T?CRAO`^hL!3nO
z*sI;oI%rEzWMZ!JT4+*-*N*9J&|(3SE{#_Pn9d4(@Q+VnXLKG2x21S6K8Lms=jQg|
z(%=Y=pZiGGZ7j5BW&b1V)knU4lCKl#=SuMZa~@X`fIsyiJ4jKEtL^*~|8ODs>Ic(!
z{;k{N=dxtG7cX~j$8fr#Y+AJsCSp&~M}Kk}FTC90`Qkl$+Gw^ZpoJKZq~BKa{Bt!i
zKWZW^217eBZl~gFy<n@fy$hh`&1`HFC$xFc#zECS1%9faWez{fa*PL4j7DROh9eI6
zGm4f}rP1s*1>JxueCpwkkd@n*<U6c~z(N~b<;4u^lbHqsy<AwD`=A}L!PWY8%`K3h
zO2NY-AXl{{h$4f~yn`^$lE$c{4H0A&f^mRg6NoNQsn7cX=2t?@s4v?VKEV0~pg9kk
zKnSA|Apm7rnPMD?$(JO~6Y0hiAmC(&%5rWtIEgj^XOtMo7&!X?gu>WnL5Pq7Ja1|S
z<7*?6WsX$`Ur+%39#2qe5}?tUrOH*okHdW|#6+vaO9!W#pSo@2x)WQ^yavmfovW8}
zv9V5dW249@Jy|N!IC@Gkr5pp7kVplma_V9eZS4b-GnU_@sRwQaa3W;d26T6D5~O`-
zJtA&J={?W)gX$DW;MY>0|LrSxO0$Uo$k$EpGWt2Sbd0(wz2>?KlJ)+n4Mne|nHdok
zS%*4Bm^6fsl2YJrAZn$E8)WVipfLxu7pMh5Bd8^}pjgX7Nx<~E){Y10UnH4dpwyXv
zP9|BNnUn`9DaeuKW8||bD#}R9oD=6p*g`XEp^>zard`AV8BIw$Y&e)<Kz%IsTcB1!
zf>tX<tC4a-Kx><uOVm2hX&4eLGIYxP_5^XXJisUCa&`2+^IMQI_tiZ#U`i*8St;Ad
zCkw{iQ{x{ePNeWYr))e;<P!@+zI*~=_o+EC3K|r5iSS3sT8TgUqjOl>AerAC@l#g*
zgMg(adfmMkWEb(`nGcrjv>lgK{^C~k>Gw?Xi{s1P46Z!B@Np#p_%k1JL(ht>VibP%
zeM$Tkry6k@u5Uk5#$hAuG_S#UwysqPRgx-rU2J1>d>lt#Y~il(Ml3HT2zmi#vj~$Z
zL7~>ut26#;y?&<vNZ+k7w_OJAr9rumACb5T!TAIoDtt(AqxO#py6^Wh4961;M`KJz
z6Xe-cSx54x45rA65yr(Pk2eympBI_iRB7WND3jFiD6G}GgN{Jt2u5}1IWJu6;722l
zc?Cn+6?kj1SuWZ?>AX_lQ9C%&QO8&@^Yi4zPBFPcOd?G40h2E07J)I1X=Npva}{Po
z+LXhPrvh@>s03o9Ndl=$rEM=pBUL0uGn9;Q&)iK}NSRJmA`y-F`zir!61Y;`>u8|)
z04Q`S@l^Zzi~z`UDX8*>s$+ICY-KEcPCj^S%Ag?03k5zEA)=b3n;8)CX?1>Uc10X2
zt}?G8I3s~lj3SL8uG|3Q1z3>h;@Xq}?YNCNsGnCu65lHXZS%iLF2S7K>YKkdhF#xY
zQHPQeRkp@;^BDYp!DoaMptlH*k1`q1P!ktO^h}rvQbdM9^0n{z3+&IxRoXz*Y#^p;
zn|LtIfOY<xb3oiKk&>ZMSA!U}ABYSX0XwIG%@Z_!DlUU$GDH^Q>=RLvoKeo|p%kDA
zvX8kPmdNo}8T!)!w#ylReB#I?Q3H**gJ#%88g~#Ubgzje^>i}Dcr+EWs7MfkW~+r}
zGv$_EOlzOe42#rs5A%9r{~(qiHsLD=?%C#I2|C~Brbi%8;(LOj4%MhIE|K0>ez#P#
ziW63E70&k?9kcly7{a4SCVgMf8*M9aCx(dBzz08k9_KHfLlF0MzYy^rE~JVAoz4<+
z^zr=h-zpn%lt*E+yIFktYlr!%O@AV;JpR1Ll?33=eaLM-oV~oBgnQoH!CjB0@nm#y
z^JD4$rLRPqbTRQ}^O8M>0kZre)`u02yjbD(8*fCn-9)<s%!&lFnUJIy+~i>I`)u;J
zX2s4@bGIZgRWmdTOMQD<_(_@~Nhkr3-=_^|G@@WXKz}gCcs!BHgL~g(aZJ%QLmo^x
z*iVZsWcfCa=@Hb=<Uu0r(fjD_;pI4u(qpt9>$S>p+Gb+OiYF!3odylVu5%fD50MW~
z)eo5r#`A_1v+d2mhW7NqS<zrmh!jYQgDpz3fTd*`Ndz(y6dI808&&y|>(I&OVMDH@
zb#9n<77`B1rLU^NONdccZHNv4Rc$3f#k8x^Ybx9yN76vx&&U0Lss2T+k9xnNipQWT
zs~5`YlY~H<`J4dord=|zQ-%}e`+9zPY|Kh28+LOfFvD215#%n1H3(?3LEu`x<M=Hp
zTnl<dk0@Y_glc)6{g)&}tq9f5*XM1FG-z+1o)?7ya{*lILGv|JSGHcUBZDi!P%&T)
zSPGjU2x-Jmd2#MXqK_e86Q@q50qQyc2A?S8&#ZrA`cwN$s{b%yb0~x<k^WLdtr$@=
z;^0r*lEyq${T1Rim;*ov0$pTkkI`D2tO2XX0v5Rvl)pmG!Jm>yg66e7NbM~r1Lzxi
z1ldzUK*<)hq)5j;n{8k)&D0h*K^k?C#&aT6l*}PXy1X_i`J7B<7>?+<vY*6p1FcpQ
zoo<R&tAR!{M$D5o+K(@!wZ_VcdN^i5tT2gRzPcD|$(okZGP=m@ew*b`S!(03x;BM)
zVCXvcf?7fhwl;#^r_3{v;GedDb|=C|KYkuBA3u$lgnrxzq!bWzZkr8CkSZK~>DLiq
zkf*^?cThd`_MO=?>h5=?=l|dHxRL<;g%7#2x2B(cEN;wye<Qf+=i+F4aB1^n&4Vj%
zMieIOHP6T;tC7)7T3|XmgNyw!s+Tj|bl_%m+D+CBuZA)5Sth}Q;6X>`vqH~{2g$6m
zRNgUH`4qA!0U!vT`unshbBx9#OfrJ?2N(_q$fgq%)szHPMdmh`VO9+>EjE$OwpkuE
zFGrq{t$z10;p(-joDzS>rgqZ5^7Un>=dyZ0`-`=)qg@Z%1?u8M7QUPkA8lGH;6v-5
zDBuJGQ{Yk;!R?b&p#{8gbZAU4BKcox1<>SzFt>BkB_LrSN-XH?vG=+Vp9pJbra7er
z6;)b91Y~&tPIkDCR>qMK%~Ax_RQlx9mI$dr_sV<*kF!<+X&i(C0oyFRIRmoJkFh>X
zQBT=`j4V*tFaaL!m#PRm6DBnwapP5f)XG(EZic#kMKob>Fuua(%KkS_f_MrzD_`-C
zFl$_f{^@=+ZC9_`;zl3&KA|d2U&9GaiVU*PA=R6}Do{%Z3?^Vws>&ZL_l3v*Sj4en
z9SGJ6AcY`aOy*=~pIcxG3jP-KDO(F;O#s3aVVWXpB#0X^;%1Db9df`==SW<NlFACr
zIdQF&^(kHv)dW~Q3MT(i<v*jqI;D1%R{b3K1r?;=?{qty6u6}@f^BeLyCQ@j5xMG$
z9V;;|#u(-oMg5Uy+?!~|b7-c^XeEn?(heem!pH)<%(1<_gPko(2tuTd2D<GATAc)~
zHWdj8^BQ7W*WyJW#zeL3O8kZD&I3A`B-cb1J&(#T;-}1tTC2tWUlaL}`%`o!TvDL~
zM7s~Ud6@#e<p6UF0Y38ai+J|A(})^d?Aprr6CV<_?kYw~l4cVxocK)?#pa|HFLo!v
zssCjod-y|Fg8vuyxRL;T5s%H;Cx3n=ecOFe(EZ^e7z{3MKGNK~_*$`ug+b=Tl9z=&
z$xh&6e}o{I;kvzdqnS3)YD6d#+VP2|P6l-)_qYW<6mbpOpa{li@*cr^G_phnBRMe3
z3XG>Cj3zr6O$I!6H_Is4s|+j8j1|Z$g7mjAEjBR8*N_!E!aC-$n}jz&N+cYlU)4x^
z3ZKasnfZRz|IkCycwgz)VL|Kl*O|SJJ>*dWgT$4UED&{71_cr4s?az9oFwV16tO_A
zQ@V5e0k%#MVTdZ$0<E^Z7ij{JnNTqXCjkt9Qm|lDK?9M^lJl6Lc+ETX#j1W~K1pAh
z0!qSWLwt7fpd=VLw-$g#AF(&4N}qzi&SNWVOJi^|h0sOdNR<GovL>&3mMWGY?+kX-
zfrXwUDWR&gSxZP+qi)PfCqDR}HRm@O*))YWKi<c|U8^wWFE9bZ3k>myq?+Fd!BNy7
zd2EkAXKi%L$dEOpp^gT)765ZV<Ta|YVii{*J%%h4L+gMEmD(<|a49&Ok^tS`%15E&
zU>=JKU2+0IiLLk!Gwe^wg=`B=uz!N6(LmIQ5H}*ER57<pH0COF76P`LZPDKiuZ1rL
zH~}sk1IFv5I9XwuRV5)$$mxD9gqTO}lT6U_Oy0UZxU?&@ZKiw&SupZHA)rP?2VtU{
zkX19x$~8=<=dd-U)0H3&yNnJrlNGd*Wuyt29km$ABGhklbApXcy=HNQMl;buq=jZ;
zJOZ;Mmevc45An&>wu+(Xmcww>?;kE<s5AXtzGKLM@>g8lAfJ~#Lg-#0vSl|ww;SOz
zkF4R@qsI|7S6MrRupQw(1tc&?G|I5mUBJs{KY+>P!laWfb!Xw`|Gl1l^q+IVv#Sib
z^7xA$R}z3Pk`%Zx``F)Fh~Ii34!hr!<(q@`?Pt=(`8#OSqN#2UzRU?=XpAb+^EjVB
zf&f#@_x2*6(8%0~E2=n(xra}L!GwB$%^v?9lEs~lxKj3;WdiAM_jfQHZDE>kBd^9f
z&o3e<T;-QTHa?l<+n5&HT;-Ek5og!|L4s7_+jt-?N<s%DBnTXr=m=0PxL9A+6_;im
z?1Q<l807mVE$qHlNYJ~O8LQEw0Bl?AMjvE{=RSE(6^)XWC|Hw$5Cz?7g=i9Dya8;T
zEU|dAya(wo&_1xZ6kysHL8g?F2(krMM{;A9yQrc@N`$lsliKF4^=MhBpO#8O!(DFE
zBommN(1@VoF+Y?4Wu6&5n<JZUb~Umf_x=@TC#hR=3gmd8`T%tS8=g#{Af&2;l(6tA
z)Jw-nhLbE%*EAz#S{uNT;<W1CRc+UxeN6~VK3QG+#0`+S0RFkg{O2~iavx*_vd%~F
zlEsW>>4DnFBnRxGBB=%^eay*$R{z`q((^)O1;4U9{7+E6j48^zznnK^lt-lYC&8a*
z|D%Qk|1?I}ND$CCY%}C}bL#sy76KmiYc7z>pI`lCQJqF8*N=zjpAmxUG%vaBL~VhR
z|Cfg>Fv<OY=}#El$4PzE1h@=t7wK&i7n7C{E9CJqpn^hv76v4sMZ{at&nPj%Xts@E
zc9OU92pu$%c{Jliw9-XR4x+HlC$z|O^tYzi-q?|3G>On^w9srd&}uf&Y&6kG>HIJW
zLlST1!^lNo#l@O9nVguK?Y9#bswFe7_hX}~cGIf9e_5bC7b0zvze0rPUfjgf&zwTs
zSjCJHO48O;<{v9<M(Fky%hMM>g+c#V)=d_>c`*Lt_535>Gb;vH-2J|U$CU)&zxyFK
zZdPm;+rcNkZ9aO-hZ<4)O_S-x!On0l?Y0iE`kg4siS=n-Oi+;4eLlj=XIC-JNDxG%
z<3fhpshVV8P^57aoz6VE-4)Dr4`Qyn#5et5tX2MO%ua+dmPaFaGi1dWvvPuLHo~kN
z5avK2xvN|`Fv&!=5Z+8z&9&;Sez#EL5dfD*Ym35-CUP}i6ZWVH$eUuFp#xG$8WLS2
z3D*BJ=~MfeR<wkk2IQ5_gdg(^*SQImq@7L3$~DB!xd6#L(7OhhkPK@_j%e{ffazE^
zFVY2&S!oFz`q6}kAz_5!Wf6DLW8>j-bwcBL^GN%q^tZHN=)=(%qRBd${H=_{`Aw51
z225(0TO$<Ya^VD+0-zc2@JN>i4^#hRnOKPo2&gG)N^g2^%EX1;ss4A2yd^)9DGnR8
z6QZH%{QK6qSOD)%2((Q=5nOlyCJ>~EI}deO@UB(;d|Z0RTLI{VfF$ozwLwK0m;+)x
zWdF4mr5yZ82uN}{I!AO!DI-9%^dteY@jp2r;>$1!K!^a1{G}<vCjCu>KY{(jPJv`D
zVEDhWP@y~L&2(tojjr|Je1NqVOQO(#M@&h3g3%>PFqvtpf2@tCYe$pXx|pvg0?Snt
zFD~MW7^g$8qy36ofR?;UvcnS$N<=QPgJHgg{*)Yv2tjBfjpxxw7toAW(1;h1L_GvZ
zQO<JoCp+kG32H(Lh^<Bw?QR2|b_*@iL!cyy?s;lUagrlzkrQJ*bddq}!zgvtAxCe~
zOi?%-+D-~e^p=2L4`?S5PMq1nqfeYb5UpZHMT-ieRU$RWh)S=wjEn1!V}0X^tlL=X
z=GEkp&EikKZZcb&UD5de(jHe5fG_GHcl|V9&-%f`@0ttV{JBQdxM4gvo}tRpw6(-q
z_OuDm2pv(FW<`a`IN))gtLB$*!_^D8@xU_nEzR>xet$f{#nnxmTHnB>wH>UjU%>IR
zPf&<wc%BG7bDbWV#EuC<P6o!aZB90*&oAsYDOE+R!xQYJ!k6vW2s!c*Y%brNxRkJ?
zUpw1Q{--w-67bIqR%(*8wUI0Pw{H$u!r+;~j%HxLrSB)vtws=p1!U7r)D0yUS3%+|
zl9xM0*Ub|Z6SqQ|*(QGgQgBUyh5ghv5nER3+fx81m9|{{*U2lO&}!2}c?6o(nRpUm
zkv&Lx05S$iz7O1bHu+l{lcEY)Es`~UDni31IHG+dhGj13+IzZxt00i|%uOgr+6iJ#
zz(g?>YiAvFJ8902RUv#6fwD@x?n9t~ohm{`9XwFr+5*!1H(de^RrLNU=p$0cKG7h~
z11B-=%FD%;Mw2E4mUPhTQ9!XaLM=I=YTx|l#k9r<fSOpk5m>qiL|PS+q9iDGVI*l2
z)jtjX4fzugakfb$QmOnY_|w>5qgSD~NbMS(wJ%AU8szR*o;_NDmNkw1vDzfvPuxdm
zMjhR!(x+0Aop;xi6K-ZyE;*qQJ{I9oIUOFepdVA!Z=;R1hq+gp1hk4}$!pTOjSvMb
zL^1IYauj7BgKQl;<W9t`zXsBH39V!gI_ZA2;$=i(N4*C!3<e`??-YoL0Gtq!uz^mi
zjb^KfG@)cdR6|`MZ&z3+Y3(>_PjJ`H90}=Oi<%W$oeG^!hya~HV!vKH#B(oi;4@F0
z!gQ*YKNlSo{7o~3To?CXedlSMzx2thoy?_WRXn$ikG*{~JICXGSKR%+w8xbM;ER69
z4L+Wo?MLb7-rNh{@LUq*&C%#|S%p~`MorAfl_o0D?+>xqS;X64`)a)F)%W3{yY}PY
zN=p_I<G2>73rvC>{XECHogJJ!a|zEreIAcJ`x1`5d<N$?&XBw~Vl>feG|(W@5()f}
zpb1&#n!ddo!I#~=7HfU4-m-BAzt<)ZcuK$`gE4sP^TQsxbf==m2eewx(e<5$uonv1
z#Y@xRrFgdz01e4=;s+u{$~|6T@G~4q2>`|8X~4n08UULofxW#7(<ud0@h)g}1N8Qa
zK~XhBSd<l`vm8vwET~bdwdmi*6`%;sD7s;rYF<PTGO5VXhH6GR6bz|btFXS)L((dU
z`{C*bP>?*V5&_u~S!IK{@h;W1Y<h$$C?u{nNlfo>SPNfkQKPhWO`U1a-|_<&K6%rL
z4jc26d%}XeR|)hIy7n^_3UZ`B9q%&e-$@25eC?Y;UVhjme0nHG2aoi6YGNSCh{#1t
z;%BWJX#prj!)XCT1oLx$NXW4~$-!9}RsTZ%W9LF5{Us#%8zE|l#yrjVlY=M!>6MsU
z4mfdS7N!nBP||qnnF_NVLXwE|M}G^qgn2upB|-Nn1ua4Y#HvsNqZ_+3IY-O0Wo@`M
zqZ}7$8mTtEj;Y$hkznhUKYfBAoFfq=6BtXZts^91OOtzM(jv>xU@|+2%@MT(duT)p
zXe5hh#w%#X3y6{y+b9#UVK5z_zqP^lJ$Yad7pc|ipxtd@zTHNr(_oI0y=~5#8q%AQ
zy+|m&-0qCYSd7IM`A>^lF94o+W*v_|a~zZ65^Il$A(*IZvNL*7q1j$We{=$;&wVIw
zC7l>ywbKti{no+c<j$2@|NnQ7D+$1t^pG8FkUf7sZp^=>72fq&jA=F*UksDx947e`
z*(k?XKlE07_g8#9?!RRj3ybu7ImV+LJ6q(2M;S3e!(<XdWTOhp?HDW9?ZG{_?Z?-D
z)xF3^87{65@Z7nxICktjo_pa!`26uToIJCI&Hj{Cvf?;H+AK>dPDyQ!HVhg?Qv6m3
zVv5IFHDyL3Y$M=4k7<MJJiDQfZak=7y?YW9iG8@ATX=GizDW}6f3@Eg2(z}CY3V1e
zLu0gSqQZ0fQe~*{n*blY5d#%TeWw8iYe4G)uy_rP0hUOb^3l2r0j3k4e#C4Rgru*+
zZCYhOTf18ffG7#j03*eg^rl%%hL%f8umdaJ(cVXi1{1ectdAjmGe@blOxYQbNP{ZH
z%d`R_b{b)wZFNNsmxDXQ+2*_#@bNiHhQTA;Ql~OdCjshy5LWH0unT{OKA7|d9714h
ze0eVo^rq9##6z9WmdnPth=>4*Z80GpM0(_FVwcx`O%n*8Fu1$YPahEaK-YoffGKdA
zNYbu5Q;C2zQ6P5Ivvv*zeO98hdsU1HDCpC|pd=tj6aIsQOr;3=uUz$?lEiPfLU%b}
zw?9D|guOww*QcMUFkK5mBIi59sTuXj1MZb`?}$fBm>WQCdvo)Z3ZJ!)Tna2)59I{N
z<cq)|a_Ttqt4+`t8&vcvIJx1=%403g#nStW?Eb@_g<sF?!Bh2QptY7^G&_&c><pW7
zk;X+7%GhBeqNHGv-Sz1Fl@;x9lw5CNYdglJsDWm)gSk!z-A;>%g;bbOaU%p)I$pUU
zc?Y1Rm)1ZG^twWV{@gR`c=7l-jEghOX)+k!?qNb!n$4wfJiAz)I{TrrNh+p6j6NQH
z{nq5@1%1|+wuN7L@Z(AX@FhQ_{N0*<_KCRF`|hN=_7@vzHR_Ky(q^-bAOFt3jW^zY
zKU!&tev#qQYKZMoh0!>~WE!%t4V9u)6}B1y7TN*kJ3zZ#q1~LJm6S-60tZ?NuDbIO
zzVg1?5i~<&nBn|tAI}^+ha;cAh^LRdjHi#D#o5g*46_*%&u9iXO-UHU2zy?{#EF17
zx~`Y%5s?k4e26&Z>vsQ{MF~&c<Q$eSfx~+iN$IKizZ0GpCa?v1ea~9eFMJ`<Kalt!
zC87MSpTporst~meKzA{b0*h(D;w){l51k|NAdzmRU^TZ46jSkVFY=Jcg(0~H@@sJd
zpc^w)bXp}#U1o`kNz2MSIZqE5j31SpG;nxTe|zHs_^MnWYKE4hfTstTbx->DbPSS#
za6pvtM@fWO4^o3FZ{o^J5SKRr-Xo4yvcWSLs=Z~|h|Lto=o)(FDfwe`!CYcorsCm#
zonLg~K=fRSsg!uwjK8*?M842-5}0e?{N;@VDN@jeDoD@2=2y?01bGF{3G_8oWy6yq
zP4KQHIa&(zWFVlyls}J-Z3bi`Ko*x0{6m8M8{#2B@PF71k#<U9{4WB%1$hM~8Pd2}
z5@40YeqN?b4JfBoSY;s(@X%N)2Y*$u=3vadaXSNg&q$P(9v#_F3%k`5Gj}D`Ho>SP
zp|y6Jv;-7dH~8K02-L~a9f&1Q)?TyKYr4_3dxVLrbgt+<Ncppm$&^@*wEhVtXd#Yz
zXeP^O)A(V$gqYd}Rfx%W8>7)WaETH^nks0b*X>}w*Teim2c2Gwl%XzBOic-?sY;wW
zwS$xAH?Y;;#<V<%qUy`>RsIH~<0C@!EZe}T3x7~1VU>qruRFri4{l9A|3V$5yz=<c
zA6F89FZm(iA&I(Sj6L@zNef%UOW`#Kuf~sm&;Nww_ElKjnIi2)IC?U`&J@VFtkjuS
zUYlY!8%=;@AT!fR7^0PgXvGzJX^i=1iTPHJh29w5xr%$0*X`}$+UxEtzxJ*70Fwf1
zYXdxc@&cZC@-&`!>NK8v@ggp)_OU&s=vcCZC?y3nqQ;9~g-Xot+e!KILy2l`sM^<H
zqKrqRA!WiFLQp3%>5!0_6nO#IT99$1AS13BAHkQgURh9WLoI<}DOL@h1k*DTAjtp)
zcoG3xKMw4>Jz%+DCMS_{a1-b*6Jih|ossELg@_s4)LO9N1H~iE1IPlJR`?tYNr!<%
zWM~r?aybV`I*htjKg<7WV5^e?Ni%?g9!uqF`#{+L5|D|fM<{@`L@bHmOhB?WIW8x!
zt2bk=qjaXXZtWR6^%hv99(C5e@<VG|IGo<y;#}=pfYPt6=g;haYYUh)u+5ohb<5^I
z9{2Ibr?hd=F)|9MSjh3e7#Z+=WT8WlXpZ*+$l0#R6e?BAz_Kz@eBe>VxD1HQmPTRN
zpq5XCv{fN$2S{1vkEEjmEbI}pCY}_bJSP?pkMl<ZMvg@0S5P4t*A*QC6EbE{!h*EX
zZR&sP^{Op1{h9BHnTU>SoT%x8<aWBooR)wk8Y)0$#y+-QEmKk<CLxQ+5UCMDg?nIV
zgbnZ#k3f!~tR|QheN6N77)(gGs43_`x(AJ9i3x_JSV&{Vbhpz4(r5!%UnB1VLI!$R
znD1h~N2J0A&JWgc=FB<t2NNbU&x#EM<%Hj_pcbYg86*cu!bWA$$H|L-LdkWW#{0U{
z@aVfY$4`9jO7Q>7dt6BXzNCjhPf64ZR?=_yr_JQrzq_$>W^(7@d*dJco*%(<r-zGM
zQxHbHajryG)a+7~IAzJdNWPKvEoq&H6wlG;0K|lAa-c^V#^@#$7Mn%6)ULwCZh_u>
zj%K$&(h0EC3-G4<4&Y6%x}IOSKb+wB`E5M=!bLpsxl?%J>618dasyjC;*F6sB5pgd
z^)Dv`zGufV*aAVFH|VNRI|sCR2yE$}YcQiJ?D^tSK5wl$s;U23<yhw)$|PMac~G+$
zYiBwnfY|*c6Fdzti!1h8A8Y{esS0}!Q-!En_Ep7p!Hr3Y>9j&TA`zD$ta8bM*w};u
zGX-Kp0T^jetpExsq~Ab9D}s~*5@xBWo$O$AZtE+1-o$@A&s(a08vD}@h$p-`ZGeCc
z356e~Onj^4=tbCgfMT_kz`oK`OLV<Gcg=D7;9nE@kz=UAK_>ls8Hd5(f2+*J^-sA8
z>N{WwjwCsxnr8t|&zlk~)m}z=!}ggK#<uAMp*EOTfRW!l7r@A%+G-Y@h7tfyYOJk6
z2SMKpfks3eK@pFl4ge|rH5K}&vA;QBVQ+|LlaPE>f24p^0;ir0kZ)7#NMV0Y0#ryx
z-dxCkqV?dw7g6}M_L1K+?ECdK;GCUIv%iLvc_Adh(mV>_*QN}bXzNa^dZ*m4Z5S^x
zZeWAFm#jbiy;{C4%T3OOv<8SoDXqi2+(I_l!Vb0Fw2er`PcvO)a$&EzhslQdY#rxT
zM|kd~EsRNi92qj42Vt1)poLc2L#y56>4PH7krV$YY9JtiCU#sJ;PmQe5R|h?94>Ur
z<ih`FbNcXae`)*mmB*j;xRL;T(GOXDY1|DK(|7%|c6|Nc-yEzB?z{cL^sjx#58%>z
zieffJUWOR%h?1VR)*U=&#xT?m6LmjvpqFRJCMnjdRNRVb%{Z@cX)8dqj*?W+I&p=$
zPKAYDg~hoNJz~{%r>tN`HpF+|yo9@N-;Zy7&;6K8G8{j@fzN;bEFS;#89edqNt`;p
zip_1(B&fJ|*B}=(>YK9KmQ@z27H(>VE}Ypcw?`OlhTnvLY{bu;!%!za)zLfaQ!_eD
zJCj<ITGiy*3c8uP*j8%^P!cc|?|^^?@{<5N7X!5BfyIM5{--4<eQ!7lkc^=!fsBQh
zPLi2mU0;-WA{-|G>?Rlz>1;-G(ps|9&k0;9nGnEmIcxZHg{<d^tz)AAGd@PDZs~{8
z_vg)?Y;TQB$K!zd8Tk-g%_h~U8=Np=7_a28ELlRv3$8fshZ!2#_boBdq{`g>H1Xq(
zjkXI|+E;bjt&C^bcvpfUa#B9o(TNI;c9+Wo`%!Y^2h{rhN*Ji)PBJB7BY`qO!EJWc
z!BE1#oJYF-7-}Jn<`4n(q{$46k^l<)tpHI^Y<<b%x3dDYdSa#{NLYz5sc`xzFuD*B
zY^PfPlxPOENk45kIMiJ~n1NiDrtp0$nL%BwSy^tibz!`kT`0a=J8ojoeWAhI!TZ`h
zuT2+<{gb|mzOHydXbEFPgqod_djVT``dX$;N_h@>J=nSkK*R_dJ-mpWtcA5~nJxe#
z%+PICIJhUp^>=l#G?${;I>6TAgaE9sPqBJ&2OFz7rqomFNLvbF3+?U-&RzOEihL`J
zvCxgv{vWLuAOB}LL3~%B|G(77l?336ddLE4Bn#nE@-_dW6<z(~oBgwcdv3iy{q}GE
zf$-8=gmIQ*It`hr&f``5d)_{W{zqh4B7c!2087crn6kjhEG!eaO+!@HyyyEYq+&O~
zqzbSz3~+t~#H$tBM6PL+nCpR)f?lUYw>?9%IbpKXZTseN+t)1PeP4YqMmrf!UD(0V
zV;AuFW2f=>GcV)ViB+s^4Y>Skv}m!COIfNTLbO?E)u2$L3H+E&!0rM<dzdw;U%%nW
zE+j!-OFrcV@OYW}o^y}e%~1PI%UYgH9#gsCKqCS<29i_)4`DQct<ylW2ecLxx~1vB
z2GCuBv;ZbFzpXH?Z~)3eN3twdmadoz$&!_a|4BMl*n2Xn#7uaa^*3RhC}5{RmH1a9
zpa29Q(DjpmrmZ0B;3@;&1bR4mB4V7KXCm71TWaN{J3j}1J=mD%0qdkauggHmfwyDu
z<vDW}>ViOQU+7Ja1ll)JhN?-h`(G%!|7t62)xLX6ejn}mJE1|dK$c`dya_bmE81XI
z37ilaQlV9_X#*6smH;gpPNMnTg(Y1C8Tku&I)sCN%5kMkS_s2#g|r(m^xxunf0;Jm
z_bf_A2`*j&HckWxsclD9KM_s2@)toV)`{RY1QFd#0m74Cca85Ulws+;-wibVaj1Yv
zXY09;RL)J)?CN&A<XPKpH14bIC#D-%GHYHN?jN<Z$|Wi$-XkqILz|=}sB`$%93agL
z_QXiJ<(1857>!HJiWcU=Hm;sq!lBz1aqrFhao6p8as4%I9Nd>;eklT4>cvn7VHJdB
zRs^`XGsSaHoyUhh@Ekt==@+m)nxQq9V6gcj_5R6+D2^NX=`4BTJ4ZVk)|mU^w(Kj9
zKlgDZ0r+Brf4UIvO}^=0rQyCG+a8=7+<MbJ&2N79-@v6c@~$p1nkv+$OkY`4uCURE
z+{84p#D*qhEJLO>lw(ujl2p7Axul>rF(_<rWkD;ctO&&-bvTW%Hm#6s0BJ}{UnP3&
z2n+2Boo0z{D?_VOqR{|uy{d;>Z&<=Ne)V0L3^N>G?c>OEXYts>XYly5r*Y!cI@UHf
zc_${5kw!B`949hzMWwc}$rZwNpG-wTd`93gPsbFu%E_q-*=MUs-07z0Tmv0muCHtQ
z<-Bq8fCayCnE}D1LN*l0ckOtE{kI1QSv+3er`-moL<$^-4DY(RGQG~~#3R>84qU)<
zQoD&FR#6jTqV~k~y78>L5!p0YYO3S{q-(>gx*fy)T8UGVK!2Ac-O8U|$WVL=DCn5M
zof-gHFW4nUTGh)JHh!m536}+Cmn7);AD?y(o;C`oEdvLud))#V`IF?7RsU+qghBnx
zmSE^!v?*wY(ca3#0iNAoPmtY;vFABOUF~4g>uTWS{y%#U&_qHkqx2MLi0w}tkVb&8
zQ8DX3ZU<%BL)hpENpyah0-D^5bevIKp+5r79}5tSgj8CwkA%o{Q}7o>JPn$xUFoan
zvUcmp{j59~?f3EbHKBAt+4h!NkT=~3K9ej9Y*4;$e+bi}CN#tuko2rP8PeX+2mbmf
zVl53(fguNH_|6ckRK_UF6tg_SU<Aza3~5kdU$2AL+<p~abL-W(|DLOH%dLype;`HN
zrT3;xiQF1z$V1AYNTa(EqDLkRWX6=@s>TYgdBY8O+qd6~ryf3zU;K|B4gcr^&!f{@
zDq9QJVXeQGhMkwb?%ev(RUtE93I2cCk1Gkl7YY0COW*U4o8dJ-wlO$6xar#4oA3L^
zAH>F1fbq1%B=h>`27gM?t2@4u<6PCOL@W!6ydYV%j$4>SUM8nG?O}SGUAM&5yn_i*
z8eAy|5rK(D0teF&Yb2AgN{WCX+EI-8R)xi0iTPfEZf}Z4tK_-d+pcQiwi|B8d*5|8
zvMj^N^ILfOx$}7JkrR0A$>VtW#0FM3X`^kU-R_~?>at$}!>*TYbUtv`X3b3<&4h7y
zbj^f5w0~=nQN=$@qS%zg3`RBRpNkz9Y^e}ZMNTTFL~|f*fN_Pa0SvYStepl{ZZx=F
zAn*CbK<$F9FcN{>fHlXxAyE(nA)^dLQi?-n`x9zIy<pb7r@*f*d8(v&Bv1pSu-GLq
z@~Kb>VC%Kh?^2b|#6V5zm{_Qvi$ee<HMMibNQVY~n?#`VFT_7dJ|xMo#=JLRvC!(U
zcsHUKpo&c&s)h!rI1g8mn!O6_YttRZ574BqHbkJEZH?iAc6f7WlOk3`L-`1f17~eB
zf5QvaPI)BU(jggT)3RWVf*1t5kex8E6|Vj%0nomGn-YKuX(uR?4#M7&jNZzT$tc~d
z1Wq3ViY=fVi+B`ENE_@=NE6TX*CeZb{I`2w=PYW(mYRKTodj49XXc722$@TDYU0g4
z^t%_ZeZz8Q1!@>Mx%{bWA<d`TuBV$KkZhXn8!9N6Q(8ncG7I7nlTcPSNw9yhi^F#=
z<AFo_aNq6waK{bvIJlP}HJY^zP$rb87MQYT2CWZD&WJCgt-odjbYmcm3G6GWwV9Jr
z>HHk-dFLIt_bYD1AO6=z@lXEYuZ5diG4^)%5+w7z+wGVB&h}_6zoPc{m;bnu0Q`jy
z+4yLK*^_?#kF<gt|G~!K+|JbpZfbtZdw!_g8Z^S`c!u%RwmJI^XQ?BLOZ(8W0F~%d
z>(3c%$QvgS(Fk_WD<ZgSu#ov|9&4k`O%n>*1Qmtk0K@9Jgea6E`)a~5ln{)o0NaBK
zXZjHuL4vuY#C*5H(tLqVmq>CmG#VLil!veC;qXm+@J-)vFUG?uUOu;p&p&krpZ&~9
zJayzOPMtiDjZsEgg=n=qXtd^#P-9j726VSp<3F}hk<Y4|jyDF;hn^SL4|NEF>XGZb
zvuTbB2~Z7gh%;of^JI6*_#{aM13?SezCc1RCFT!m;y{8vjS}<J3YgfYE)py>6hPG_
zI|2t)Nt<a%ya1{Y*;ZI~Njkhlt6u(N1UbDfM)dS*iGDPY+4Ls;V$eTT_)Jz*7eK3o
z9ipNFGtyjlToN~|VIIE*;j&$;25~u&%n@K@f_WN}J=jPdCn+Y;Ys!Sm9T0ZCf<Agr
z5nLl5R}vv{R<zG-$pU>;>IjPru#J#94S9zISnGrpZFSm!8$n!Ea|kpLNVM>npOR5!
z&Pfsl`~XoBhE-IR<PI67RQbb={jtkmkG`&m2U4~>)WqP<7TGND1i-l$1B}iC)sR|A
zbRTKYpGOZAeRCGNdLQet)hlNU#;grt)wEUkE(5diKIIG4T3pV@LHQ*DHuymAUPhb!
zrl-LQh>QY=2!R}yF=mxUsV^XHDM{p5+PWx^O)CtiBBeav=;4NyIox{VA|AT!YTR@0
zUL3lyhs6bgC24b_NunIHAVZagthUIy5a#;G?Sl{%trf{C5RhNOW}kRB+)^O|AUaKy
zoi+-j$m67Z#}B?8hwr@}fB$=a8ZREpvxV@cAG<F3s_gmnxBmW=4)97F;4k%YB?0*F
zdQ@0W-}W_~=(c~mIXt&>aNkwU@A&2)#$epSXgK3cS#&@g|JH$PmdQJxsv0@UHUoLS
z$XObxi>f|h_{w;bv8K67V?vog+}tkUo~<a8F@HdNh+1gz`x5yquE;!CVBI_<UxN@^
z+rZhK5Umhsrxhb~i*prvy#mel1W}_v+6r*TwR5=RmizE+-})fN+fy7nv4$reKaNj-
z`Z%6><^qcojmicZ(Hz?C1+-dSByp4JKs+s=#yA3tY7eqb{Bm*9&P|Q{#8tOGO`|5G
z2Bt~QTmX>>CRZLF6{K11NrikUzq@`WKzkl&&WUDA8HDIA&^REllT%xxWXE9>+~Mmt
zleoyDaFlG&YS9EtdZIGNF9?80+RAvJ21SPlD>_5hO(y|7{BIK?ddFzrpYI%+M$mi4
zcnIRlKv7W=qk4kjSzfN6?hqJPk=xJsn_9YCqM+hD+>YP_Rzn>l4VsCOt8uk$RhJNU
z*H4iFBP!NlXX6S8Inj4`?4$bpkEj1R38RS5!aw>t6#7|!kB*1M{zOB8`~CE%2?UJ_
zAshWv>=;QCGbHufU0@f(QbzEqk`#h3UXbxojDT_?&YLE0OGzaMenx`yy4Hw{!r-@{
z>&bZaVC{^qc&cPq6nB3M>ZM4CA`I@*y6ixn%aa&3D#%j<Gksm(auRh=QHqpvPDO;Y
zm1cQ~F-<p2XoZGY?#$tqYnO26jeGFWt^07-ZA-Y}x(+(a0nnB#w3y|XWn;EI4wC>u
zgGMk_b&+RjMUO#}T@}WdhA4MRl!F-4QHp~9L_D>_h(ohPvap4CPl4dtd5qHtH@@a(
z{M?8CA%5b0KN~;s@Wx=@(p`Ud)*d~7H2a;Ot2MH&JpK|MR}z3f_aWQXQsedaEF`b~
zz5eLJXwTwO^E=-AgBWKmj0Y6_sf>_kvuKIhUK#<1zh586vDbCZS*|OtL9y2Bv*4lT
zCsu9JYNkLgYHR}eCzJ>f1fJ;ln5#M!f#3>PEoEXEd!x1iOWP2s5EZtw5SP}0bOY#w
zA-b)ElYzPU0<BJtv^_%5s*pB9nKHQJ0RGx{ydGPdBRu`mc|7sRS$y`<GkEsMDlT5S
zfD8?^8$EQob7(fYNTZZ%<Dw$5Scz(;^v4zcE~1j2DT7*#Xl0j1PY}Vut|v}=Fjwgm
zyeo$HE2`ugz;py$I#J=8JE+%PA|PpC0CRh28lYrrS2mMTb~mBDqP=d>TS;IuF#+OA
zRSR-Tz!){q1Yj3sOM9}8JV}Wgp%kjLXT(4Lnr9X%$P?@;$%UOBIJ8`wv-A(U&Q>9^
zPM-#uTCleO;-<iz0g%}pT9q$9GXWu!`*r>QnyQ2G8O-az5CE+yRq)Av$HJ1obag!e
zBOCIk5316V#k%io9nrQNhs~Q5A*1YywSUrpoUY4&)&a@RHc90#;_5$cmFO-C5tI=h
zLQ$d$gJDo!c#(`Y=zcNMUv1P>?=Rzh2zgbq15U_T2~eSa>&e?Xug&@UJw>gi-G`%3
zYowOClAk64wd6?Yld>AZS{scolDu|UciE(bvZB5{jlUL5YNTto(q6zl*Y3rAHy^<L
zckRcWw=ChBgDuwRM=TIpjuB5G5t_yc7PY{rQs5h-<_Hv1BB1;nYMtyvnC`@wZ6wGC
z4a{Z@6lII8n_2II&OIgUG?E+zXl><ao}VB&lc9Cz7}Em*=C0m@fBAbqiof@b|DpNV
zC)NkoF2CVtC*AEAjt@Te@ftk%=WpLv9)IEEN&@f~1^?!2Ze32^`teb=HR<+x_}2Hl
zA6YSn;daKOejM|~t<}%DQy@|Hyuq-$Y%&cQa3gPCvCEOUYR|P`PWz0Dmt0+nlq$KB
zF{@o?$C*G#Fla&<zbtrDRO70Q0uW6i=)^%rJ#_6uazFzx$bt2KhzkRtbumOYjj_-n
z?m&rlr$pM$5j6Y6u4Y4zH@@m1-uU_(Xs5x2i+wzK<UBt2@OgapvuAMP#h0+U9-)fb
zXm#e$Y|kN0=YgP!N-<|4Vo?Lb#Ux$c^@>t9JR^)rRV9@$pW}iY{fG}BGyEhKOi2Kn
zD5k)03s^l1tXvOAn2J-Nw^v#L^gC1fHuH@Inc)_ICUhZr1<(eXS@74kj5;rh{JcWy
ze9rZ6qit!z#n;V(r+EPw3czy5T4vg)r7QEb56v%D>!-60y}vJ9#cyha`c0C<FBw|*
zdi#z5XwYzt0LYUEObYanJv$uQ*qvS|dpakn#@(w`w<7&(8WDzwnP^Y#hUX-LSmMf5
zGj0X_su=^-(4w5>0tJzw@lPUp2K+~=|F{`|JhU3^l3oA0duT+~4olVwRr+V1qp|Zq
zf<GmV*7sLOMpIwpxqMrs_Qw(W>fuPQhr#*oZuL+<Kg%t4K@PY>Q{!p4R)F>RH25>p
zpcmQ3jJem&KhIbnVVdO_k0+STa->0o<xUTG-mn+<-*f;E+_@hQ+_?`|A7~=#(nX!2
z%x7#KlrgbJ0zPpmywL+4lo4;VZ$cNPh*54um<=OLw_;>lF{axo@@a~keilYdQYOff
zt_|%=G>S<Uz)W)HdmzHJY@o_YB+pFIm`spg52TA-{N!)`F#g^*{=4*vPwtEkEx+?)
zK~%l*<?WAu()W+9Bmw_#9#;~8KR5Wl?$+hxs~??YTXC8+%J;qdM`9!^*rDKGNG2;8
zzeOuAf9f^_Q{Su;b8G}oHv#z_zq9%JSD#!P!xj@Cx1DIfsI$r?8L(*r(lV!nfEF_a
zCkk3DxnAjLle2H7EMBS+k%cGTK!qtPkV^M(7GirRKywhG6#&g7MYlzQL={@S0#PeR
z&>HdrUzuy-tKWJUU;VaQF&h_n`OF4B|M)pP^0Bjc^64`;edZ+AW+E}#?Jc3znnyy4
zEMZSH(X|4UDys%T*VtBW2A<EER%WzM(#B0%0F(r10#Fe-lY({%Y+j<#K+=8ph$^)O
z+Iu8Xpot9O16U#=tr<!zsLxD9Ck8UK02dTpE)I{iDH*bk0vN{QOmQr!pkz&hJ)=g1
z3NTkh=I`zJoc;lu2B`v_jRDfV!<+$w3H-fbA~8nPqn>OWGS<L)l>B>I{fnn7L;fMR
znVi58ADc)XC>OwpfimVOx)nz0kogdsDp!c#D(G4}L|}xPBBA}^-UPLwy@ZZS1Zr9U
zj1bU|2>wrX%A+CVzbHkBW>_Xf`lHIfQ=z#~u+%RbGwHRVug@F@rt1_pE0DRS^!=r(
zcTSKz2CHjb*Qgwp_V^9H*AY#D?k$)bG*wFk+~}Yf2+60>pz0JiwQ*QO1f0W$x-Qzm
zk$}-G%aKho<XM469AZy*9yi=^1Ma(SFYdqN0PZ-{!@<2xG}-}>N^79V`zXfh<xB-b
zGg2i_O*mZ8*U1xdN1R5e1{CZY$odH;;}qE>!7PiBlf<@i9hhX8=slj2>LS@Lhdh2s
zlNt0RHd8Y6FA)Wl3T;FubHtMgszVhTi!J=*Z~kcb<L~^B@zalPkFH<%s!t>f@mD>+
z^(TKU*T8EVUU_`+k1Gkl7d(WXwbXju%?t6@JUY#`(=dwiZ+`a=#m&}!>}+KW`&+Q5
zha~{K9;F^5YZtfqF?UOQyheg@57PxV)ZQ##<sUjRKtJV$!oamx1LMj$6uVsUmY1Hg
zj1TeH5+MVmkQb^F8udphAs|Sb7B&;yth)C5FeMYzBA^?DBv)s|87RT6f_@MnorY*+
zln?-&G(j&d(P~#rwoBS1rcxqkWC&XU_ZDwCv=`s}-n+50Il(i>F5z<zU%;b}p2Q1B
zPT<mc(g*9J*<3+;eg&=05)%q5@+~i8FHqu0OuHtjU234bDQU73TtbyxCKACxN_xPo
z{)df=KtcvEP0QOtbe6zYuVqedWJ0E7H8f5_$lFASfwZX=6l`b{=GlKC)md}cneM6T
zo+T;llBd|YBJ7edD0`3*8j2xm1MIDEJ><=Ir^zTQ<SaiB+FczE7UHC}Pvi|nub;mk
zO6A2RCw+WAI7jr;&tVn5njMxUkJ~BfP<al%_pgaTjpC*^xL%?9!%z%UDfEBa_vv&S
zLDK!MK@0XijCO^H(u%Jy1sbaS17iNSgD~v{e4UeCfZk$R(mLRCL*7vluy!8UIm=07
zSWJjFA_xq(cT9_)gTEyC!e6lj-2%Co-iS4^Y84vu-&O89)ly3Wq>8tSo{0uN;5(rv
z?|~?jBqay#JfC1RonSJapv((&;}-TWFX7PP{dm<a*WkW8_u!W6df2y2qmVNYd$r7_
zDDysRkI=dZm9)pgRn*dAQ$P7E+#I9(hZ5*KLOG3*^;3+tTNrOQF&WZGU?OWo1*3Qk
zs$K~d8$`g2nS>c4rUZ@5%1B5nCiha8&AC00){=0O=(Q3A7Xt*-A<A24Xe~DJfBZk+
z8~*Uu{8W7G$j;!Zr8j-Jxv%xkBkLdhK%SF>>6H<|FZFRH0r*pb|3dTrYZl^nJX+*~
zW{Euewr_fW+*`OB{Y?q}qM)VKw^oae6|B<rD&$?8$JPG5LVMEx+^vdMpGEgEZ+CX<
zrg(i+5V|c@Hav(dl`tnD3@rydvPR^xm^{p<(l%iDjS~W@nl!}f-Xo@@s_w=WlYB;6
zw<K$9a<IgLPeDEh6}GYntr5`L1llp_B~)lMb9PxPC?QD4K(j)p9pZJbx(2U%{q;cp
zAkLm2;<;y6@wrc&$7de7h~qC^z=ew~#PI?;3oB^P?L(urfFN%0$7G*)>up;pdHH;>
zq5(XCkV{WDoCOF71(<;~0=6##E7#f>9oPbvPyw18;Ok3KfGR+0moSGyqF_Y*P;EJ|
zcZ01UA7|xnr?~4I7Qzqkh=v4ztA_OcpdYD#l=!IEfKJw^m0rET`qrBk?g={)+P%Tj
zgpx2BOl)w!5c?F~u)rI6Nnt1MQ=9$Q+=CNPK``VlVIrhX0a!BT5;RF3-1iL$lLW#W
zK<$PFY}FW7K{+vo0@%|?v64P0!T$~c;I5Kb{dP3TBhUFIpwXgt6t)f#X!|?B>PeXv
zq2SMY|HK=ipr-~=20J)QUp=>kpZGR_1aK!!WYT+D)ywy4Z4N#JNfg+^w<3K6bN|zk
zMmOVMATLJ9W<yM-Gt4IJXN_K(;Krpn9KP)k?z{CW+;#hY9KLoQdzTwX+5~+~QRE{O
zWzPBqG)lzRhjctN*=Og=s1)L)nld4akdI?z!x+;+1Cv35@vwnumLMw<Osj}hNnHy_
zy&>o|xD`X=$INuqkzA9qR$fk?SBU6%Y|+(rU6#tG=M%XwB01>@!B!i=vjfZyjWNHk
zjeqg0-xvPC*Z#Y7_3UJ@vharAzk6TwwNG96{XZbrz$-|=m-e`l09+RQ=NfnIU5dZv
zQ)QWTC)s53E#LV4>GJZ8<;GfuEE9!4hw8};KJkf-pd+5JQcV;8HdF~2-c-0;*M2Go
z8AtauDBI?9T@zKAzV)5YAVy6NWG^R1Guv*7@QP`DDk{m0DQyv`yIVA?5Ke#@v)ZXu
zprR>6Xj8%$ZCu0<roRaq=T@F=>LgPv`zPWuKwqojCjB9Y!%=`%7^A%oc0_D60;HV^
z>0E`XnW2nx1dS5=7h_!YwyW`#Z@U`fof(e3xP>E6UBaWES;x~)J%<Y?p2B)HhsOK?
zv=<JdHMfkY*+m(rOw{A;lo?xku4=timmjbLV8tVRInDiNz;J{5!4-OY#g3MffNqHf
z2?WuY67_%Cb;b+raHW?7h*<!J;xzdJm>#^hzO_8gkagcqu!3C(gAM_pfUcu|bis^w
zz`=%F0fg4r_@s@M5s}hn#zP&w(gc)~ib{M3ln_Sm=jRa3%1{q1+6}|YU#2Obu)kz9
zVHHLt1*|Bj2-J{(rQY>C!B=DOOJhmyCmUH4-lEql5H`Es)_iVi!M~PL7&_r{1U1+r
zG>Z&=Xxy)~x&L-W2mmW!wiimYd#>#kMqyRXGT_2VARm&(KWjRaRUU*qJ;J?y>GyNR
zuMU6ob}awTnI+vYdCgEq*@9Ntt3sqp5?J-o5&=mV#F>vOdrAOuc5|ZFtcrq+#W5Za
zFqv*5DkoTKHgS003huf78V>lk+_Hp22YOhb{(VgHxKotHHj2DJHWnLX8P8Ofs7sn9
z(U7){F!YOYgwZg<c#vW^Xkk1|F`g#KT!k+JST@;f_W}`*Nq2$uBUl1cuGfs#3~`Fw
zD6Q#W2**Nz5M5iEU=jEsQrUt~k|lGyNo3;)>1GGPvzwURw1Is$?<xO(zw~|h!LR$N
zxWCgJEX}{>1NR)vUi<jzKYX}OGQINn?|)oL0Qe!hZ8yECyA-|alPIfehNJ%IU2p%+
z_^PXJD>v6OWYdT<SlM%Vj$e2%MSVus%iVGvP?rZ6BS7gH^I13YnjC>cbD3@Sh4P;?
zlg=9x?|RnnHDBM_M1fUR{38=ok<dtj9+be)EAs>ZW$-hqY6FJe2qGmo)e{J1#LDs!
zM~X8CI~E|4ezmZ_1B}ax10>lJ6YAa!1GMu9jZuW=PKmjV3hh>fxK$u(&QNWZ$de2~
zW5yNR-S;iv?pH74+x~ipjg1+ed-f8Z_{2GU_K`Dq>7}DsJKaE(uAsee6`D)?kj%{k
zX#)ifb#wX3O?)S%>b3<Z=0X7;pdheC`T*<+PtdB|2c7v6*^p2Jkz)=>7(n~(+yY2R
zR4GD8lLXYaC04V8-@SFP?3v`_ps0$qSFBB-0ZsTD@+4;GvE!guRAd5`{yryWN;*^X
zA$OA*C&EZ~JS0%N_Z(C&j66y3+-$!WXtD&r+8K_&U`~5gC0a&i18l@WMH(zdUp}$1
zOZK6n;6$L6s=KO0q{-HLF(OH3-K}k+M5YTs??(x&&ij+*1DX8L%)ib3x8{rlscM7>
zuyziZY*jGWpP_$t`Xh^9fnLHgLPhN$ZU>Mqhh~Y421o)x$$-r8TU*L{^|iKut!Zo2
z5OPw@5MY3coc1Q07!5X2X7oGK&RCpJaO;grxc8bHao-IGaO?H^aqYnl<`xs6K?gKJ
zF&!b#a#pgW08A=~Oxm*(&gUouxgm>*Bz?{p)hNbrC&FmEf#FVy{!W7NG(uL!C`gFG
zS^`E8wJ}j1x0F9DajsJ=G>s&d&X#LvD@k)C$(IC$D`wjE(7i3@<WcSuQe>owfGh;E
zJ}`+ZG}Ef=c0x3>d4$hzU|MY8@IyD^U;W|_gg^Y=pO43bh0#j*h7aDja^dEeSD&P&
z!4*Eh7x}o70BEV)jQ7Ti(bxS>gy8VjXm#*aZ~WHg&4(T+S1-)M*({+7lE?Q;(z0gA
zwT1-9-mfv=mc0Z6(w27>i~@h02<VKpn+cX5yUN{&ZqjS48SF65V3m=0ZTouHdWYH*
zqaLs48*pvqROINhP*v}e0o4_t?@`a3|1B(e>EX#HK;wfV0V|0QW%|@^m)0~92t{Ln
zU3w7^w+f@2ZnO$%8DOml(VhbBeuQ=yqthsPgfUKM2wEj(og7tXjGzn5t)zI}JFnwE
zKeUzOrDI!o>a*wY_`{d*^i$8^?DNlJQqG~dybsO2dyp<JBka)5pD^Jshzjj#YI3HM
z!36cvhBO%k*f?8Z@djbMlNbsS{o0E_P9tG-oum`Mze|dyNU55lADH=3A;He(?Rk#g
zu0<^f)@5^TBv6qSPP907NZ91I5>xdmmjsYok<<NGb~!8H)9><qXfU$`P1k;?i^6G;
zHA!Yp061|F=-*iv>#?igkGl9Nxz8pSlo-I1C%fd1b@#7<Sb`YUd@)3*!riqsR-JDX
z)J71U%%J|;f<NcuI^_~JN<{4lNvA^G2@rKEkmN4~MWaKcQCM!Qme{$(MKha7$sg%=
z)7N}hxh0IOtmO#3A~q!yN`V848V`WJrb=Gg0Gtf5BcUV%)W<LKF{YC~M*WKz56`2*
z5X<ct_ufH_{1q%Eb9mKN2XWtZE4c2e1@50C9{|+^Mc5b7D)zxp<b^SFy8oD@;zgKL
zT!I3AnWY$y5)5_{^!o{h!xW=oh-nrh(@|L0j@P7)cL)mfR0I%vU&W$We?#{#0;<Hv
zL9QpS2u4r@Z6h)z37K)BPb~mNrzB~V^}@F^dt4BIfC$MVZO&*zhLSWqvh5O`Zh*OL
z5pl7JELp|fUv&%q`7eA&_~YOCU-M*iuzPL$Ykp(1bN(%x!;6%*Ur7SKh{r2D0g#P4
z4%@+U{O*6#2<G3qF*-eX<3nH5y!Wm*m+R{pX49z5@*;E<zxD$i55WH7c9?C$x~<s^
zwfWu~n~J)BMa6c!Zf4(50IMQvn&`egpogs)hgqds8-T$%6AzJnPhny43UHh-CH%p*
zVV!kmW-xJvcmzmb|C|InOmv8*2q>_o6$+kFmvKT*P?P?$Am=jL#-r`rI$)wT>%-HC
zA&u%$N3t^w(Tyrj2FTE;krv#?jM^oF)g1Z!5LKr{(1~#PfkhmCXb;}|y(P9TPH^<d
z2A=-Z1w8ifIlOr6C9J>LMm)EK=DxjX>{~&)(nH#b7#c1}yoXK_$t)8YjM_ON(BA^8
za~0-DC6G~4F^g#}0b@Ncyrs}FOYtRF*!l}5xTDD*Z;Fo3R_nj3q%ol-WeqwP9|eJi
z=)7CYMj&qq{5)|$Ut1(H6u^S1ML2_;Tp-urZc1^Sq-f^q-rr<;z51ef3JF(45(dLk
zluW7|0ZsyHVpIINI0;mt9McEj(<F%}-~Y;|;OfuNBwLX+5lEL**f*`r)I@}YfM^Gc
zNCTrCu*zSee>dkVG&*h(AdN~4cMz_f3(Im+G8vS|YBh;xjR!W^P$XbRS`nf+D0BX%
zz*rzC3*`aO-;`uZhR<@uRNV(O<Tyf+4UtWDFdA(k8w`;|W6bvg+<a#b_uTs`+<EUc
zxcA=cap;z1B=d@qY?PQhyM^(yeS|wX(q4&Rkq72^4YCd*pHpGZGb&YvC^HK75hf!M
z+!>CW=uc9NCJDw_h^&-^i2)5di`?p~@#pE<5mAp-{X_|hr~G6iQ<Y6O5m?gtCNdv0
z`N=VnEBtz^(ngD2W6q863R)yO7qq5mO=PO)z{xJ{9crJ=Qy*kWGK(-bCHvq$rs+0b
z`|i8(Pk;Jb(*OAfer2>AA9~%*jrabmC#V1UN2fX2q+Lk@{(B#<-~>Q!$|!7LDgA~Y
zYbV#ef3tsj@W5SfNniKcZ!9lepx_^}?JETV-YjaSJdPBkH@qSD?g?6@)W2nfE91Y+
zW)+cQo$tHtZ;m_e1aNdZfS)8Kph2U)h2Y`Suwv0yx06~s!UYMfB;BmG6D1N+BU3-4
z#ZDwQ%FGGAW29g#V{mapW_oG!wPT=ALK_k<VAU-kk{Bfgq@Wwo+`Sp-&{P4%(*oEo
z0^)KZ4Fa?$A-dxj-9FIVDA3^6KnZkn6mw&g&4OY0?oy1`zGE+5`!xsf{X02ceqkF=
zJ$w<5f8r9Jf9?z}ot?+1wS@M8J!l+QK(ucT(cU-=n+b}vDrZ%RY+CaB7Hh&<?k;<0
zxDG+bQ}RDoFLtU5DIuV7B^|lsaZ0P0RP~PA?>6dZtssAzwR+Z!O#{8t^k<o0CCJfc
z9fc+JYz!%o*9msDoWz~a5FzzjaFDs2YfBdRIp!;%2jqMM97b;rlzLB^r9f>u!1N1@
z)M#7)4ex$@(8^1_?dmOjd2O9u(3XZAlQuSLoCJ>==!AoE)=0ab5F2Kgw<rmazms{O
z)ARm&bdItqaOr%2d>n-3EG&7>Um5WM33_N`G}T-;Q6dtb{s%5YBaM4H7c)edA}F^}
zOgAwZT*9!wf$4C7G%B#N)W98g?7@Q%-GO^vvk!Maa1HkF?IP;RqA#<I8TvCC$0J+Z
z`2gt~<`CcAMgIH{(<9qxWI((`{GJ&iGesam?<B@>K(^y42E!EnL5$%z!ekaA3t~p%
z1m%$)j6*I>#YwL_s{`uA$=Qjt2E4Fxq49~RC@A^dQIeE%%S8Ax#7VJ~)3`8x+i{3!
zX?htfMp;VVpZ>v#F}tKna>K<19SC!l0`v!D*_>bj9Ynzh*&P+W;=5jr|7CqU{l|az
z4+aO8@A~0Gt#5ed`SGv+$D9QsJR*AK@n=8cS9b7kVkP~izcm-%^{=-F7Y2t8J(#}n
zP2Y}7t20a{fyjYY2nqIf{_}QE@z)+-WsUMGU^5wglHY+m4lH`^b_lfp5JR2F%toZq
zYK|9;-#cZ<&r^(r?8hU5z6Z?1f3*yppT~buRYsooit2K?rtEf~qNt>(1_#RS&2E=1
zZ^^_<*uAW-N5^g61e6f4EU}vN7?puOufp5X=abd|L&~zYo!$VoVW%N5DuJymKspQ1
zibAx<G3JIqd#gmVnImdts9IB0tr_xehN=@HXe2oF&@v9ab{X&azFV+<Zi-`1Z{pcc
zZ{z7FPvFE8IX1>klyeJc-?)hM#xBxpI>4SLf)0I#0)vf;T@o8T<w-<9XCdJB1;=A1
z5=x)BBB|KWglH5l=O-y&K*?@)8H5|+&aw<~2Ne<0M0Qt){s~obfwrb4&k#RPY-#&Q
z+W@8y<n9&eK{(?j7l@r+y+0_M{g(jlD<)F}^h7{;6GeM#Qohz^up68{d*QqS<i7Ja
zzZ-3>aaH6F^kP9=?YVY9z3O+`canH<0#Jz~b5o6f+7J|=1D1SdGOM+w$^h#ZDol4s
z>!GA%HmnFNrUZate_cby*<*WYQD$WFu97EW>a%kaPrdgo<l_q%?_9uO=K^M<O*E4d
zdzL!5`+;TL|KP2-_ra@i&;18*;6NK_OTaItIm&T{ay1wALb}#EvB4S~MZuMM&`r^N
zXc5Kja~OSc3(0E1lMUOOCB}mgqhXBUG+_tO$t=R8@D)Dw=6PC1T{mS55GPB{uhjI(
zlFyu;r=QbQAZZcLv~OQ%+l+=Jn78CwkX|8?24(|Ri?DW(n|5LOBx!$1buUO*P!ji%
z)({hENoA15$|U&PXHfe~mhK*o$i1<Nxij?p!*F&-h4=pWJ8=H=ditOK&F2OOSKjc`
zRXE*xe(<}$Tu|bC1qt{IAFr?kz&F|BxP`sRdw#SN-ukZx<MV^758jf#?akkbt*rvn
zQNTAp$3d;MWwg$du=rt$T=q}h-t`|fB*5nYuIR3BZiP6JF|)QN0OP7gKL&95Fo4d*
zThCvzeBb-kjm>Yh+@lr8dp}(-2QB?T4nqF3xS4O-2#MiKy*&#0Br2qw2n4h_D7lej
zR*5%2`~eF7HX$Li>#6|98;y;R@stve6cRc>34!njDputil)&Z;=u9JYhGcP^qLsGL
zh;u}Z3{j^5dAt|hF{*Bbs-0lr)-GOi`y5{L4FzWFGn{yNfagEEhG#yuQ6ByLSzP#Z
zh{0SN$)Oc2+`ku{yXKHy6Z0m+`UQb(dZZH&E)YsV*02JBmQAUWOlp8x{4VgThCZV~
zwf2poEqY_nSycI5bp$jgKz^PCU`mj<sH$z?R*u<d9LqavR?3N-3PicY!!ffw_`_sF
z6D6{0P$gI#2~gikg1n9MsaaJ`{+EwaRS)gu<>izRsfQxDhDtdr=}SNhtritm-fb)G
z6APx*sr@zGKis0{7F5Mbl#E8H_J4CO3~BznDA}xtr&xA2N{qHt=!sbWM4YGf%@<Kk
zq?G-y{VU!Y>3SrTTu_uM2bhg7VYGD){f)DjZm%N50DG1by!OHUc<_PSaqnxd#@+Yq
z$HDy_prdO$n_)K1QEg25dKoJ|Y7u>2r#rNrA`g;ltWZv<g*M~XSMMFmIP<$>ocL&j
zycuFbNerV<Qo+;VlB%Z)6N+k+O%$<zh@vN&^qE4X+sjl^n|k&P>2m_4(${>eN`QCC
zoN{VZPD-vR|CD5$?Orp;->XuZZ-jFwHen~-Z#dTT{iG-h@dMNuk&zm5I30zEqE^^D
zO-0EN+3g{I^q+lmc>csz`n$h<a&Tbpn|>)w%F%OMANU<Y0xa>oA{O+gKVD%806l2a
z3bCj0b>Gp!ZU1&SK0jDmx+?vuw|*CfqZku1_aSVW>Y1`)n9AKiw&A*JNIR-^O@G7X
zYbvKcK>MDsp!;6_mw5ptY5MyL&(H?02n1Z^=`q`JYulxNKdlxm0nvKTND5p)Iybf&
z%fP*tgJh)&;7yq}N1ab5*pHRbsEWvCcGpNr%&=G8a7qA#+$RWu^5~?}Q0Ul#9w7s!
zsZ3P>S4A>S#4KYHA)@_ySXD?0pfQQi3?j6m6z$CtDe(rHGsJTR%B2$3{0MoAW{P73
z%K;AWo5SJP^zg2~p5fB5AzpfT2S+}!i6hUvh)d5N$7rF8{Pz85JhXz@16{Olj1ew|
zi0D}3g2t*brl^wuIRzU*fH_t)49~1H=yzp%K0&bj(~>wd*5P=g5U2$RZU<<f<^ol(
z6e$hTc_MuRo<gweYs7iG50!~7x1W;t^i?Ry(u?d-03&p{d42yutPfACL0U~5Kx7&~
zocsK}<Ls*K&i9)=%?&!C9JLyj`I}mM!bTDmvewR&Pi)j~nR?iC0F4e^6L969c7rf&
zNiW~d@o1;SV4Z?LNoEWAlX_1q_@sfKlP(&atAK>~79{pG8)3S$hW^Gy3^q<<+`oi&
zIL6+U827$v1@}L2FK)YMKkmBkAg;NJ1PAC1bClD94Rf$YmbgUIl%$^e>P{t;xE@Bp
zq-vOvK`Ob0j2IS#*C`RSQ=({AIQX><96LF~%TJPPr^tcPaoQvhtCE@?wDzGK9a#fC
zUoYOnbbFxn%BqLd!<T!Cc@Pe%5iTJ+N7|%=`8V)(rY#%`?tGE;eC`5pyc(r#O^k%<
zqyfDa1EbakQ?CIYy(FYfIS5rmQ<DJ(J0xMyM(22rAl||3R^T7~?01J7mwqPw>}S^o
z2ll?@x8ps*+n&1kJ0EsRqF1^Bf9j*&l6%Ee|0}Jpe)B@~rjJgt)j_M-N#FghA3;^^
z!FV*oguLV>=5g>hsa^;9^TR5CTV$8l__Ynt)PFS36(+T>vFnB>*5{0=r)ehh#u(S1
zDcoz$!*09BuAi&;Ozp7Te$Esbr%bGSw+}W}`MEPz>%mHIxYnA`Id<z2N9M(D@2|Z*
zRs>UH7H%WxMrBNI79>-rJee65OHtYwwd=sdGZvi*CFvmLbK3u!G{27ujac;t$h4@F
zBW~qDFF;8%;H{hufr!B$rX;zVlLa7l&Q5XaNFS#j-ocAc&hYX@U?*)LxM>jpU_hV0
z%~vmC{#A>ZzovyDB5bSz)727_bwNRBUioXknR?CU{h()23rH#eyVjynLe!)Jwul`)
zE6ZRO(o~wl%)&7+xYfp|xJ^S3WmlVC0aLJvqd`|g`_%^ba#CUcw(QbfNS$2Zh@_~4
zZr&Djy-1J*S`h{kt^FzrNZMUwV-tj=yvHU~+{+OIrFIfvp{Co<W8r2itbJvQ!5<w0
z{V@=XE1tNJ;3wh|!9+-+VHO}ND^9Y~utFLKXeU532D&`u0sQ)t;AAgZ09uPd$OKPm
ziIr4EZ(j&7?UTx5h3T+DPVE~K{>ekcxg>cc?o<p$n67VNaPb2Am(F0awT8HyV0k&f
zjfa=<n%5k}gRi+7x8Jo7d-ryLmR0yU3hEQ(!osIS!loCD@aqT>Zar$k&H4hh2?Vtr
zru$yTij<7I7$Ir}7;lyM)&K7d{jC(Ou8hvf$e!2Mah(>YR9aUo6$t}s-$|u!Tn7_6
zq7g;i(L_?3D|+6~baKRCe`WlLf}d$c)Y?WyLaiqVmUz-%q!|(g)G{r1p-Sv>D*Hi6
z=oo!QMohvWOz0knge#PWCFbXHbeH=m56=+YI**-8GyL_h`S<zhQ(?YmVJ<ye{_aE1
zUiy>I3+m~WrLR0*kqLm*8q3W$-o6xm<r9-~n1@jnzWW_N95&n6V7QZEnh6Px$gXNS
z?kjxf)9p7{yT$A9(q*1?js<JasLTGkjM_P)S?gBdaY_VaPPX2+wdaZ8s}IutVI&+$
zckF%r`}^Lm(+!ZfSE$!2ba&J>IaX7OlQA^;9h1M6*>SNa7K>s(yDbu-zC}RE0JS`%
zx|H+E(*jCb;$T6>WGXq!=Ys`pN=^!Rv#2OIuy_~;7V42Fkth+iQ&RUMy@3*8D@WAL
zQ7#n#p#)9RL#L{brsx7-GDUV~jEhh9ar`qIIQ8@Z=g$P#M1tz-Ih6PB#q927<a>LV
z(5&<Th$ki9`Hl+RZiS4_lrZ94`-c1yNT<c_A^M~=1+mRWGX!l=uv6<|m7iq+A~%n&
z3Uq2itNb%g25b_A_D-2nu-1>IasD1;N{P*>)({E_Qr5vY?t$#YM#wYq9kJSFv7(ZY
zogk9nPc!QYc}?)iC*h$0tpu3Y_6NP3$mQ5kg@{0w)W9b=0jN+-2$BzZ6pz&SxB@2g
zCQ`3t)kT*0M@s6FNq{EJhsOarVl0W@cp50X6*>!~`X`E*9MB42<6>1#Y085%{tKd*
z1H}l)HwxsJMwp%7!1&T73@%;3czXlQXo`LN8o24!1>Ez%0o;Axe%x}$9_(Lfv(5ku
zZDj=t(!|ztYQkQY<O$){k}i|NbJ)BjIjk_L-=lNmL__qsbc0iNOLn_V3@wp21Ktl_
zex$;0{U`F^NLh=5TS#tOFcgwnAaeiY*26bGgZY5e3jx=2tZf*KBns!qdssNU&=o+^
zI8^BVvV>9)9wUS*mq-f<UDL#wQhop>_wpK?0B9l**1k>x5*wp?A!OcAGc2&MkfXJ{
zgYvEb>1``G_So6-`@Z(4^VxVg?DWc=lf|#y^YYr`7cQgZUU|H-5&&76z4X@Qz0o&4
zRUu!VWLf#HxBbm{dCy@C`%?Kct5wJSN>+y1P4W}6ouOksq-w3@dRZ3cNj^k^u+p97
zg<P6mU$hn|?K=jU5jl_+hT~4v6;))MhD(oKkgL;B+ntcOpJ|iVdUXcT)qhVp1Y8i>
zFFW|pVSCp9)#Svzz6#+`RnKEuVm#xBV@xUxkWvNNtdO)sTtpPp<UQDFPvvr{BI4Jh
zjes@^?Il{!=i~r&QlX*(VTC4Dj1)L18EBAU(F{Si0G2CYDMZzdS<Q^jLrkU7aEx+o
zivF1lt4|GZ<}-bqI6B6;VT6qXi<sQM2hr_&5$$c`eP0`4z6o3^OH3$$X-|_rf+YZT
zRYF1l1`M;-5&*8o#J9oN)uKl)LBcj|Go~TPmWIy^of3GLVPxkSXy?#yaOX(p`Vb!O
zxBG#vpAfX<T1rq6As8M9l#^XD56+nPNyXQY$J2;6LDsG@FlXE?C3J~`o@9?CO+g93
z!y{m4MDzH90ML0LK^~gC2uR$9xF(bU6ak|<sRsUL9I|XPApr$S{N{5&I0rOIWikoK
zM2M^6;Ru*+1Z6Y;$}J$fG)Di#7S^6$!{*CpFkM?i8ceXV665ggd+?e!T!s5ze-&=K
zeHnXJXdYFW@6#E|Nx{cQ$cb1FTT8<&L}|KcChpoAgkKY~VG|@Yx5x^E8aC@z%^dUt
zlr$E^n)&+Ddar~f_5A}f?!zDcT8U>LkFc;LeRzfg*<x3MJ#`Zp+Sf$U1{hrMXC{h4
z@@Ct-yKiL}fJXpoVrR7}lzPCo0KRJvv&vsl1ZN&4MFq(KaB|7(T#EqW7tzKeh@f&!
zxHu5`@gxj*Iw_$w9u-(zDA3s3M|ppY^!nxU;om!gzws?Um(4W~w&TXmqt8wL&o{62
z&(c8il_cPmmjK9eY()Fg1If32Jc-&5?Tj`?U-{baNw2^DLF{nlFU)U+Q917w&s0B(
zhc5`MzGC-Ve2w+Y-kw#>QI3)TvjeT805y2t7NjKv`mBT)vI?Dhih;VwsS#a`XfDB8
zQHotXIMi0Yyh%-#+XrW#90bBm($J#z2F7wz4-otGp7daGM)dM!f`Ef}tf&SB6=i)3
zVnD$;<bcA-0Kv*uJ?LlP*>fFh<BdU?#cEo|NrLJ1%U)U{rHz8*Maj2-Du$>+D+ROt
zqh^k<lk<2X7AuZgRX0M#Eew*nRYjPc8741Hap^N#IQ^+joH#KISMz4MwXz2*4=v&P
z*Y>b-=RA@FDJBs>F>Ra|Xq6S__?S%{ucBDTQw{>>OJ9=}(x@j*NC3nCx^d@}KGtT`
zIRQ{Ld(okxxhNU%Ktz%*47|%^hnf&GDj>b*>N3=4*S(?;HFLOYXpSUpO2(p1na&M;
zpLi<lGD$&Kt}7)8G#NqXcuu_x%(%*#+3FIZc=+gub1kmUNsgB__~|?l3P3FZBFX2}
z0wBm=kR3_@T1ki`rE3ceiweK{Vuf@mL}xCf8T*i?>t-7z&L7FJc4Sbl9ofYCOY0b&
z*+!BNuy1dHTkq`Pz6bZ>j)(T)jyw0@z=4)j_@sj|Em)OLR5e8I*7bI38V%MeVP#A@
zk7kyk!Je+A_CK^AFO|HmEAd{SRtj700;Ns?Ilf3`uS2K<P>jXRk|svhE(Z9u|56~L
zyS^$hBZ+IiZ))5jCF$ARkc{`%_#WCWGKp*3Z<x?utMu!85drCT)5t!hBtP92xLU6j
z3Boz3@jcwMsU`5l#v(rg9ii3xPbz*%5^RiE#!fZaCl3-z24Yg>4A4$XEc9kb4h&Jf
zIzf71vHb1-@Jal{-}>cj-@;AZadiA=j`aV_4~;X@2)IHBd<7){a=GJhF5DM?`!BYW
zec!e@JiYU#hu)Lka`QVva`v0f0<y5@d(t*a{AvE)?yFrjmOZuhHwQ)=1>6nIar3qQ
zT0R+Y>4W2Esf4F)oWu#>jn?(*eXn1|HH1sGdn}=L47!jlF}U1o!2V@MFfPpNXqony
zJr}{)?IvBU=gE=Lw58yf<YIlxhyV)<X;rDjvVbV~RE5Wc3INS^z}BUd94I*9CK}9q
zh6rf1aoGEDnpG)3KsO53G+`TLK?}$;hN{#wp|L*-U?q~YK-iiAj0^x+j)AtA4>2Ym
z%@C1G(AF5UlcR9s$Og_oIVn#)4V>8sFkR@Pea`}x-@Jr<ch4iaCP75PE$mrOQC?aZ
z6!S+)Y?ELw)j#<YaNuXDVukz*GI7!tLaj|;It|P%py$~QQZrYn-%o}BInL>>1W#dq
z^Q^A>11Qna_#K=CsBjf02CNcEEdaTm^s_PwxgzT+=}<+Ig|x`QlKqakD1K}Nj3>&>
zrvOJ#H6;KnZLjjO)DI^)X+m_U_Zt(M1GE|edPM$fhWP!Hgp?D@evGY`2DtRpPI&f-
z4Q#)hmz|=(zWp=Ye5j2F9$dsduU^2N_by?1nQkyT0VT>oj$%w1m7pLF?Qj*oeg@RP
zr@^0L{D9jPuC1dw0agmQnp1;5Atw~bSw_#i5G;A%1W(W)g6_$=FV8AAsLCdC42vt$
zcKG;*3Ow}*pxq9U5t3x4MN00Iz%NOGjiDOU@1{6v_lpJQDxki9y$JE`9LY8<@Jo{E
zV1Gs5jOZs4(~_Xu{b)&mPXM?;2wj3tdmOK6Ybj`3KobMU8H%VaBxnHbCzRZ`(+YF#
z8ItS!2p?#a@$x)=_8<K|e)6AvFuQ8;aQD*evp?|s;8%XmuZ$}XADO<KgMZWu_b1=_
z?>gxX@81}l7~FT~ThdqE_bpf_b04ZcXyX-Xo7+U|kiI>Py?Xhh4*T=F3T4*+y9T+k
znM&;^c8qm^-Z%qXo$L2)GiAoS22lHqu40p^1d}SNUD*29_4lw(YVC*JN`x)}@U(;4
ztJv%8PDbijh;JQuSTL%wyqW2rR3&TbbDy7K5*L^_Ss)+r7U}f|B=_&#@^o_(a**F#
zoW6jX;Zf4WZ3x|r2s)IX36W5UWffXcfF@P5Bq!U<5fC!4Tyl#5odgv_4o0n_O^}d*
z0gBVx*nVmYCqFg7v8P5jyPBZr_0YYqhvlz0h^rr5!pikA;zq=U;b4}dubu;3$TI>!
zeOeV7VhL3v`>76vji_l`fRO@)s9Yjo{eP=czhGH=et_M7EC!^>nIv;wW|ymct^9ey
z!FntN#m1p%KTzN&CAx@u)AW4`Y7r+_J@Tkm$!Ou2$$cT-!&2ZsIsm2<>HC*iz#IV5
z#3&~ua3gGemT|6tRuZ7sj<9C|SZGN?u(dY9=N?<bhdw;O#?cK-kM|L0G4||<ap!$4
zyykU_xbyx++;Qg|mKKQ+LPt=b7#1kWl!g)vt}JC1zrIBH-+VsEebP>$iZqdlmPtx$
zduCUw(2^{TSRC+Uapg4ITnqYaET;MrBnp=2REz{{zfF^eJblPNqkSsCbPBBOtymg&
z^*r#qKTkHl;)=+V4@_Pb-iRe%mY7@B?(`mb?b`6K5*7o3DEw51wfO4oK~L=SXrJ6K
zf;@SdXj}V!vV{LIdS~~byq9u%LV^BGQB<rwm@i;Ps%AvQZ2;|*)RKU1v%*|wjQGY8
za7T)?H;;ex{+}=Z+b=(vT{Cw}_iXvWx4ks@;D@gy0blkBfWZE7)DHHg-}+Cw$)TUv
z8lN59a?^e3n_l}p*xJl78dk^%>O;k9n)N_zX@ISvUHvhKwYz62(V916n`qL91=HO`
zLH;*;soA^v!6~;n*FK38bkVowDFN<V8=<}?_^uV6Hz+awm**<jFV-)<zNa7*wV?e4
zBt~avT;~M%BuCGKgP9#7z)rqqN9zMBkC9Ojq3*51&gM1XI0M86jshkSQbIsIU^gyi
zv&b6aOm3IF2Y7No1#~P~uxSD!6cW#h<c%pYXav+IQZXR1lWi3Uni<d|oq+=A0cEF&
zDs3^-o9nuAf~eRgbr$5ucd+s35GOxA#PJtKSl{koGQWcE-Ag$5mPK6unmNoJN|41g
zJr0Z}1!k<KMw$~+_1R21PXaL0U&kh``d1zRqXL=;nK+emSL4#uUo7kY*O4f@-g1GA
zuvV8K_LaX>!$Jb&otXX*dP8j*Mg%A!C^*m&5wb%JeWztXi4Jw@)zn9iiMS9CQvyIe
zezMml1Z0}?j6O+EQ}CyxtC5805{H949R@izPVL~O&+XvZhgWgp$v*O(A@<L;ap#@$
zc+(q~asTU=aO>SYEbrm$P6B>LM8i@{b2x~QL5|&+PBz=eNxo-HUqK0lYG*5qMqlNB
zK?zL&2XS`dx;co4^f`Is>s@i-k<BE@BLtF?0UCE>oqd)Hhadp_GrAW-mOk#ZD(u@Q
z*Z3p9QQ)~pE412l|A<eAEmRYtvNb52BR_=iNqTZ#2zaO$224IS1d+#(WxUTmvzhpq
z9JLz-tXJ!b9LRb19u>RDf`kHa3!v8TSCvVTix$rd`90O0&~^Z|g(#UPB!Rwe#3j0&
z3f;~S(Jd21H+K+}34Y*x{}!MA%xZRU>FV}s_~AD{yY`14_b6_KSMuY_FaeM<F$!a>
zG`{g~bfdd}W-vKFxN6_c={vsi2gAWAz-XtycxozS#)kIH)_P^k-_hA;4-5EFIR6s*
z8kfzRaNpc|u$P_gDhfiH%dLOg`nMh@umxtOEe5C4$P5KfgB)%2P6M{nD-a@<E;z^P
zb;&?YwpAwc{HTuW0orG;9haHL2)E0+y|v@!mIOP;2{)>?@NHKz&H-};P)h)a6QEoH
zBa(6Tq5?ZHX$%m2Pvc*T3>X4#3}c2EwP$DqB_1iV%|_?pT_wS2k?4;L)0}(>2!*I*
zbddB|NrrfykbwkYn=*wK%Ag2IS*9vSWi;CX)^{*DIl<1+469F1aQbMD^BYa{=ep?J
zHID;t>S5)c9y&L4kVhf53t-eQFq;s1A@g(9Wr3dyentbNa+GRce{RN3g;)|ZGEi#=
zSZ=nfaaGeIZ~&F<)MP57UyF6LR<l&)YmgI@7*&B}M4*&*0og!D6}tNS%tp641GA+j
zjzn4E(?d#vD#YYQSp{U&BOn8{1NsHFS2J9EX&dLB*uj}2+gN>mjC?!C@_dNfZ*SnC
z2NrPGs~2(agA3SyEsd1OYZsFl%AFjn^hZ-3IwHdBgFm!7cDu+VtaL^vR7#K9F&yw|
z9Ejv^nK55Gk+i0?q0PyJz6Yxhvc|3QJ9NyG{-$Jy0{)bsefl2RIa8&tq&<fI)sC1B
zgQ|WZg?a*?mCk#Xfo?a#siOt{@D~ei!}t*oTdH1!$9nKOks`7aLfB&sNGkqKVbXyi
zI+<ia+p2lj>Qg*H82s{EgxXn^FN%>SH|>#5pWNGAh>!pY1#puD%CQi|VwDaLWT09|
zs`7Ih3*=;8lL)#D)Y6;pm1uYRh;PpkA8KQ3EyK5e-M=a?o{sW8iwo^D!SCGi!s;hq
zpbbYf(_gudFS7)|cC-?En(z3E`S=ZgJf5xXEOZx}@A|60jXdv#gK>s2jUTZdo04Q|
zGu$rL)nC#cm!oR>Uh*>yoT6t#@Tx2WQvxhJn&?V*BH3H?-Gu|#v#jIh`)vFSGh?Ae
zN0pdv3_b|@@o$F+I5js>^x{!3*YdTzU&eBR%iw(%M5@b)iguh%TGp*5Q-t$qqE;35
z*=s>Zn8G@6U~GT>L(sBK7$^x)`35rUEj?%+D<ou~VLS<6*|@PH{bN1^wwW-5$a}br
zCJ|wfdd|c!rcopNJ$kQFlm~k`!tM+_@ZO71He!@flV|0rd<}vOA*szw`pD00WBbSu
z=O3Tq+%o|#t(DkLLd1s_(0kny_T0CK*7ZG9?T7`a#)AU+SmaiTMIea)-KQFy)RC?Z
zJ$tgCc1Togi4#Uk==6e#e6(B=H>0jBZ@#Y-&gHw;bO4yELDel?n@CzvNhxgr?Q7d}
z+Hol3k1PvJ#d5?L0K?iOu0cl?g?NONd;qkG^tV03)~N|DJ-?0fPxSH9=Pu#&=Xa0|
zLM$${ao0VIc;jmqaPLE1+<JEhdzWK`9lG!(n>$e(h4lmUo+F6fJ~uB&KWJ_$w_3%^
zlmV0N*cX7#vCVR7I_t_{(bcC!ht3HR{Dm7~Vn#YOP!bbAK$b~`Pu2c}AbhIu3HDbK
zC{sfy5zv2=dLOItDQS>?ZX=&e{8WJ~x~tPhg{8%q4U0bXi#gWM0tvZPx=qRla_P&v
zpY75QF-1<k?qVgT<j2~CfcEQ+Z)D^_Lv&cLN&!6^2i_I%Ye|J8#MaPEgZv!<(6yj^
zvcL$Q76_!G&EGd&5G5Mh=pb`^8pH=E(dg|UzPmu<h8~`Kb`{_K?th&lTM8RpoIg4H
z)%(wG9o=}PPX>IMB>=J%=hFvoSWe&dY*uaONtndn__iMn<MaTww`bvq`hT>jIFnbd
zo{jhMed`HQuGn{H$#a`)TtRtgz*JUkNrb-|mLO9B?)7x!Pchdj6e5f*)Ow;|eLE+)
zsTsEI>XwDGv!KrB^G_W-ubY{+AT^mNZT5bbdWb^+e75djVmdFXGH42Ox=3YQNY&cx
z_qhtv^WwY;YJtcRtPE0An9qrd=q5o4fVBw-X`l_j5DI&FX)6eF&}f2P;7F*4&WY?#
zRz(=hXo#(B9Ly6?a-pCDf*jChk}BDV5(GjJsNc=XgRKG)sSvd@o+c=J0WePtwHB(7
zbZP115q6v*qQUn57G@{<*nVaQmmV47%u^Z8oS$H)86moD8Qs?(z{;!lVewEGWg0O-
zF6#?~O{#Dr*rFS+CIGAjs4jL+<i)B*3xE`KYc4!>;L{xYEa3C6==pFWKpNPYzo#Q`
zlmt-K&(j)=2<WIFQ6?hRUlJ0Z+C>w?osa@bv>GU}Imq$h7bZCK<Oa@udKKrNx`azF
z43G`TwKB!c_srv+-*NzVKDY;W-MfIjd)!PMvVMkONQ01}7y(f`f>4N{CX1|PE(^fu
zO=n3fll64`l1O_2pG&WVxeM9jF-SUg;X_c1BQmplCO69Kkzo`;`qZb-h``72zCinQ
zP3Y&8{IJ=L27M0j>Oo+f548i}#6a9R>m$b!_;{>xR$^%>K(`m*=)*Z4`-2kgcBH0|
zo=9WDJ9OE&)RCgYQFcrpf>Afya`b+&Y@G80r_JG!L&^8O#)lG-J>+i{{$)f$F9GcX
zypa8bKOpF>CI>atkc64dPP=YMB~w909+Z|Jt=o2^La$Y#vAm7st`g~?MSSdcj^O>@
z`?L9c=jvt<4?cNp`ioz+K73`52YwkP0J5>Q<7+#6llOi$h>}CoY@C1nTi+iqtsKJE
zR)+p42pQ{A*;#(rBA@`Rfl4Y}&iFNm*B&adS!=qh<*H8%#I%R+T%9c7joW0ucM<no
zb#AXFGuX~gz<Re{Z(Z2R{%0O$BVwD`3)lSvcAX__1z4u;6CKa}aZsIciDlQYri65N
zb#GPZ#Ns^%*cy@269)B_tn#;W#jv4K9H}C&@f~a|O#?Co5%yPS1rfK;sYR_`OEr|E
z+4M#;K(kHAfb^^R<LHM}LlT`o7Mo(3H>S$llamsNV;~^~3^@|491>qZM$wX_K-?@4
zwhN$}kqQp5kN{m$Jfi-D2+)X)D{%(;z{Un9FZR*@+z{tKyMt3NWjMDP;bOam_?9K?
zecfIhc-1l%Zt9{)BJ_8F=}xXtxr|>*)lU_pNJ#TXw<!VZ^VZr(a?5Ct)N3Y&QieuZ
zM&}KQtlFgj!B)Q-1jT|^d$EMjuwa!W)x9{to-{x&3|S44xOeN*0>@5_aOBBLc>Ggq
zIP$qQoPKtM$<7QdR5;LS;l`VmaQjWmxaG!0+<ngy_8g2+5dn06faX<Vg<I|vh}d7+
zGsz5gH<5W)jnhqSeS2c(v$&F0xSS*zdU9EX&zutycGAR$EprtiQ>y?D;^d9Nq&=$c
z#Tu7jdm`?!Rs;QAQYCKzU-Td9i5e$vl)%-tB5@vdQ~0}tq->L*1f!J(SlSa{IxO)=
zzmTDtq>KhSYiMn4*!5?VGPkMJx<9pv09l)wtUK=qUuZZKK#>Cr^t_(*_7U!Z5&wL0
z;M)N;et@9^=8sSd{H!8c6Br^eu+AS)q9DHjuV42!t=j-;P@vZi&}-&M_xBOq3ZyqJ
z;lKRk2k=k+=^soEE*<Jlf|q~xh0!nl&Hi}n6>A~<Ws(5Mh8Ksu@Idmu|JF?Qe*5-l
zb>}Nz^<B+FhhK-S?J0JKEc6p{Y<8-CCSa}`CeQ90)TKl{T}+NI;54`GeGUCL44&uF
zc}=qbkR}Tud1dK<fFsS-g1@^E_I@mrS^HM)Qn|jKTf`P*bxvO8cm*c+{DfUPFg)&4
z!}0mhMWIAVfTpM}P%a}H%9D^iL5r(8lAr;jHU}Xs3;P_p`M6^+ltMn0633ObF9&7)
zL~Bd%g6EMTsrW^S&5<2zaHae{69QEgP)LNtT33`peePL5z^Z@iIVx9x1%_%WgDf;e
zGstRSM0x{BNTY-$5^^hSmm)MYR|y-ASZpLdKxHz$3e){bi*|}=ItEq;n4TD6^Z7AO
ze}0JPk4*6L#S&}H1kKx)al@NdaNVo+V)42j!_>nq9s@v3tV$)1G3;!Xt*&acGp;%c
zHPaO#4{Fk;(*Sb9SX@}lW0Wt!RTdNc3<02VKdqN|78~fbLmo#Xb=*ag+TWhx{L5n;
ze{ly-KCy+TKDUNr&un4iLZ8p$fw>m$xN#W|+_ndI-LZhf*Uw?!e2fke3TGuI!wORp
z=Bgr$i4)KXG5<h}g<ArY6S9etD%M>z*JktLN~9vln!_fm%n6=9C;t9ZR7-pMBIcxx
za@DNoQB9KS&mk2)oo@}|6!00|x1e9^>2oEoVosC{SaN0vq$6+|0%6Ld+!8SN(R$Tj
z`%cKOOI(27e1JzknBmyNAtM6xo+jIEn}-H#NdR13VDtHYKasz^6Qp36Dgsn%k6Lx_
zg0+zXgWUu|XA3MqivK-pVNybE`=^=!Nh?5GbaW3Ya=@AaB77!4*NUHyR|^6LYHakE
zMS@DqbpmvnGo)Ab5#1Ib-MfH)@I$|dU;E7?*@2aV?E#*6|1%rE`qRvzxsm|<ReV@Q
z7h@&<#=kq?xaB9eM;Es4z4aaKS3mG>Y;9-g(}t4Ec)nxuJF^|1^+|SMH#)P|lqBOx
zO_!VaSO#q`<8y9-@!b48B?VTfxaTU7sD=di(q1u4mlM?0{yb^HXYW4H@?s!JHn?2z
z&7U%=;Q8>iFCg6ysm-Ojug&D?qGo!Ss~!|FvDDuLOw7}slLfCjD8ane|F@(`iGWIE
zl$l^gyM^E**0~ao9CO&(1hm*`@zadD2?f<oWf1Wwk&ZCSX2cMFOEd;pXMiF+JL@U@
z>4Zpjw+=*xSb{$H9IIMefXPQd!V?7r;xtFxE;$)Mi>TYBV&gi<9;D8YB@7Eh)U?h<
zz~&YvC;GT>WQ=D&+sDI?4DkHf5wfKY4!!9Hy!M-~!ELWz#0()Woy(c|O&``x4QMH;
zERPz!-5lA3$t~8^p3qX()&H1<EwVzAWJ#c>b6u!1U`ohJhnyLS7g=Jwo#DdEJ9y#A
zbv*ajDvloA!toa-tX<zmit7%xaOd?s+;!s|ZoXv!w_ZDsgG)_P?o$IDk^?TtYhIEN
zI@csL#5;L_Nk72(Qzfb!LR|ON34&CNV&wKD2%usGLCUKFmfH1<!#cDtycaD~P14%>
zVruloLW~sbIk1bs4*ktceGdHcJY(+D_c++s1e=(!Ny&j1ZE}5lH@a!#k^1&!z2eue
zWqY#DzOEr9{8H;-eh%2PFTnbl0)PB}7DyBGA+Xk$S9D~TZd-FT1hXE{jVvftfVea|
zmq<&%YeYWz6(#arR;;+SsGmuc|LVwrD>Qab251o1;@(+P#{ne(mYDeG^FW6tZ`=Z4
z%@3LKp}$*+Bmu2-g6O&tns+x)AjbE7>(Aivr`9GbOUvC0vk$)h#mztY^eeFy5PaEa
z{HI_2uBGHPzdM|qA6$3UJ?UFt_x<RP3XH}TrWw=yIKIo`^MP3&)B-3)0K>EA2==t(
zm>(`*a0!49+G6ACGkJTeu<%85MAqizu%3tNt<Ue|h$1D%DXc95Lt4>W!tU7rMzE_B
zY=j*v8GMah5bUnv<t>zlzy=_mWGK?MHZdR*)8ZLsuceFIn2Ii$P=zslKcAp@0-%Ev
zYup9TLiWyMwc~Yj$8udfjL0nEwBp%ef~tv`EXjfdH~N>fIxXR;m^hVEi=as)DpFe%
zK83y>Zy=&Trsq=80h=r!&L8(2DKTIcvI!8CtWuUV3YH%Z6B?7F#$<(RzCbV+p(11;
zO%PPHX;T_Ox5b!!YoqNUXgpx!r2<cXbOR56;vyb<Zi=nWA`ZQ232*(bt8wp}58~oB
zu(_5a4r2t&82iF$7AF$qZ!^n(rP9<yQqUWbWTr%cs$Av)kc@IOLc0re=v-9=b~a`>
z{oFR5d+ZXPrRx6K4V*tY<!Zfw5C``sxbucZJap4C?mo1P+isf2o`n=)lWxWm7#Elg
zv^tJTXM@ehrmYPvbmh87A(B~y6E6f<n+tIFcSQ(W6+)I)4B0q{XX+jQ!QIm?kU0lU
zjVuyir4>kbv%vY4&fF7IUs(B^5OAQ^aXhZ<l`p8(Jx@DO&}VpGXto0POIwhGKc8mZ
zbF8}8<sjEy#e7_mp~vqCo4Vrkm*_YeafN*cL>l=|{;v!hCnCO|rO@!9UZMA0h@RIA
zt2z8xa$iH;oB@~ybz8=+@9$d-{%d^=nQ-#0C`l%~-js=qaE@<N2Rdya$+!6gXp2+F
z4TLjbsDVr$$Qy`!F!NH(H-ObCfiAU^k`WrWPSL)njq?|V_|EtKRJpMplyj}5e0lt<
zH=i3mefE{s3JAU&g8y9nz~Q~gyIz=-8>5BJQv9yB{+)0*YhgH=VLB6N$L67Bky$Xj
ztgmfz{CZ<@0&w|gfHBa8lIwSznrV+)#QbAt$!U)6weEqRwe_*N7Nnz)IRx}D)YZdq
z{+H^(Sr5f~yVqFkKA`%`UVk0pA=e3yEbO6+-lGS0-n@dKBllTw{eoljP`<lz2HQG9
zWc}rRztA73M>FaS;`(u!5fKvxZG=ss1KXTL2S8H@;|$P-laMz7Pxi6!5RnM^wcPpi
zi2(<HnNL>8QM3d&`0LO3-ysDzaxg0y9pLfCR)Mlx0=*p791twfz<Y}Xj45f6LUGhb
zxv`CCSRtIHz-EM_Pi^D(f8zo^^3*0)iww8Ebs69O6L(?$+9jMnSD?YYPw_o-{THof
zT_ABb&~mM8oSlP@23-oqB+Hz%LKa`53Tu07g!3oY@$!*P9Q)iRUi|zf&K}E<l~c4)
z;F>-2xa05&?mbL>{2p$;s)xM`EhIcHP@tF<GSX(7w!4<}{<8V=F|hid5>9nAj|3t|
zS%^_T#Bdbh@go&F_g472ABtElFCLM+A_Zy-t}5cA^Zwl4aO+kAsf^kM0^Jv+2LfaY
z-?IQuZdE<$G>EVc4_|2Y&Mba<j*abc@DF!cba|q&Z@Vbx&m{qJ3)ayJeodD3b}a$Q
z^vS8XMmtipjyb0L_5#Z*0ggOU;L+c!(Cbi}sot+Q#ZK`ik;GbD{{)qj<MxTVU(dc$
z-<=ppvLN@r-A^2>9lxOF5#Wjxc}Sn%yCn+ON7l6^_l6Qgmn93dZXMS^Q992hP-%2V
zKP4$(#7?<9)DGx2DzsW7H1EpMysd{PK6eIx?c0AQ?<R{W!of=~On&j6&GDJ>D+vh*
z{;CK6W^_$=U;HgE1VOc2mRb3(xBgFY+Pn_^(FBu>K3>84Jf3Ky>8}ZsJLbBLwkQ$M
z5##M4!CH|#pEbK5`(W;^I6b`11E+>C)FZ0O+wQ&+O3q@pP1W63eS!L-^zA`?z9|LN
zgnS(7hv6|9t&_ttSkDIwHZQ7G+q=gAecw+TBaT>Rn~Co``p<2Ni0CcW$VM)3>xSTY
z+AejdyN~%SqgJV?KY?u;cHVeH;SE6B16&bkPm(qS{RDE#lvG)pai$>HB(+#_eQgVe
zz#%P4XmYZr)B@lnK;TD70_Z&?36O+991KNts6><&h}s1LvMg>7!{9&+EX<M8Us+`t
zB8rxzNq@0GcDBN3JHjN3vAR~_;YZi;p~qgt(Nh;t%|-a0zyBcK`W<)S(t3%sl=tK+
zT1j~ljB0_$oE^DBrFcM+zJ!ECob=GC*x8)m<neVJec~*he)IxfJi39^Ga1S<!92P+
zbg+ke4=>`r+ZJ&99UUAx(8FBP-~@!CA({Iy3~ugkni;X50C6HU;c#MAbowb^QuRF!
zF&f3#8inXj1N4g!<hD!J!P{gS6az23P~cmBEW(3d5h0(H2)3y2FKbrAtq!~U9=q`*
z2+k+zTnhM1*wfKU5oNORJSFfs?**N*(4Z~^KAj}A8Gfg^UzIH7%zJ<zS=Gr*2Ozrr
zM}N*#SX1)jkFmRrNJ@FSUC8c7C4Et0t{Y(Q0cw)~ANbEXqA5*is13Ec?70e@ct37W
ztEoWRI^0!UC~{!y+DN$`Ky;P4?I!X)Kd~e);Z*@0f>#?YcH96%04%vs)J{+XCmkHp
z+7j1MNwlT)r>KFA74w>;<eWS`bZs&xpu$`WXfF)WxV1pz@H~F~7azgj{|CRC?OV9I
zJuF`S#h0f4*LRPzVf9L}5dJHg0C<i6z47~gr4i1(cQ9EWz3nxBBR+8O)#3K`7!#^E
zc)=*?PqSfJ7=9(~7RB*Zk|PP~RDe~fUQom!Mhlg-bU_129cQ2bUiTUB6|xHTSlggR
z;2}j%7ko=uypHgvUw^>@*6OLI^66FI;4^0l%C)%4{b7L#Wz^4RsV%FQ08I<c82|3I
z4c@CAAA_H|3GJ%(Id79*GFR=F^C+}!Apg9qPr2)TZ3DBuq<?+>-P)LtxDV22SEVtj
zHbSdn>iL*dBsHA?A`dnd9catEwKE~oiz$|+Vo}P9g<6rQcph&+CR$?F#c`OU)y<K#
zvaoFSQ7uo(Dy7N)2Bw!PtR2m;_H2dq^C2z`fQyp~I~kK6FwAB+a{dLpeD(!w?#%Gc
z?|cwH^iSTxfwCCMhRwl?1B&#lB}j!R3Thbuy}1x`J(_5s3V)0<$G7mp=P%%yN6+KA
zBWpNuY#rlbf*xA9VR0V!-gFQT+_4|`+_#9^4=rN8OLLag!Y`5cD^w%7tVSG^>m`kP
zx~J)Vyby*!yhPB;^AM8}u-y-^u^nThA7E!pfnVGc$zZ4qD<01$;Z8z!218(HtHA&I
z(<Jv=0>cW$mQ?BdS&0{+&^`T|s(4o1Q}~`Le@+M-w6Dp4ov+J@d*-UAKNs{wCn^Z?
z=hlTLTm@+|8LTHpOtwHB5@{8Gtu>&F-zNz5@7qqLNkHAlgA&WV`vY{lz{9^&;=~gb
zPrk5(G!N-pf^Eb*atNwd>GgH2($BWX=*X|E3BO|*Vb4%F+ba3(>JtTSZR$Q?XT_le
zTKOv~;5Y$BB-F3X<<p4)nVyFc9Mv~K#)Jh4Fd;B=6g548P79cClxXc4qIq+P<UkMq
z+yD9-`1xOYWO8uvs_w?@Gv9w~@Z0~{ybgRb_sjF~S1<vvY&OJ7@}3{>1ULW7t?9|F
zhwgY+`@Xy0gSCw*rdbu{MzC>n?%D#tWl);Es!NS`vGm*wJqIRB08~PhA2n%BrxD;P
z|C*$4L3@dZuw~Jh*oc2$3zYoQJl?!}L{XxZRlBthpp16Es72b>W%(B1bOWI(m%YRt
z0^xp3-N4Mu#rOMcGJ%i+mp;{Wzg=rU|7`)%yBLa@j6@1e0P08U&Z+M;S`t-n2e|fz
z`%GSEfRDR2)9#qZTCH<SgiS}hvY1>(ud(1@N9`v%0D>6*)FL3Qfo8~NLKN_w$Po(*
zsp6nkFT4R!Qa~I54*W_`DuMZQhDK+I^1uY)N`$hX;Nrt$y!6BvYv&5|hb2aNh%o}}
zWCb>+1=e?nEEghb2Us1S!ud-t<I;ML*S_@@{Nyja9Xrzy{eeo+QW9K+9N4m1&gXt{
zAx19+R?qC<`NuEe$<JKCvyY$0*<(XYvI%0u*t^)m-G`U(z~L3#e&Y&my<q|SmK#8a
zPDp_~FU7ow6IV^*T(U_~+V`;y31a<xN<dg7C&XYFU~4DD+ExIjJWRzYk;wb(luW{W
z484~!fnZY%6%i1DqfeH2*Ly2`!}msvI84_nWK#;tBAJ^PrDNxFFxQ|>X*Bijx!<p&
zdE%s}2?QeoI^)l>yaMNQXGIMCYOO>=0eq^T=fcym+t?9}bsurMBbEj!8N<)}|2YYO
z-m?~zxJ{A+OUuC0N`OnpDtzo$3N%R+$mGd&%ka|Pq@ZxQoVOpxtG5AIcfbgIY~}3t
zMK=Y&>qEw%cgX@9DOfk3U7i57ATMnQBlG!of%yc;IwZ9}YDdzSioU5%h4BQ`Uf7FQ
z>5V5XKR-E2>#x@g&`k@p4-V13r9zn`_^$8$kL8m`FJ&v;<?i|75AHqD|KwA$f@?ST
zm*FG$s|x)urf+)nV)T}W`{T1a*Is>B`i?jKNVu^z!+266EBGE~J4}hIwO~}U`f)&j
z-n>2|@O^R_r4u+$VudVrBkKM6Cs2bj!GbC*!WFu*bNLy(QjMXsI|1Ntkw(5+3mXBj
z7OdTh^-Nt0oZ>q!lLWq!Mm_U3V<9I>B(D{*kdY@2N+lpu0;&S0^NbFauPt8sj*~&~
zQJ~&0w1cr8zP(Sas<sw`KW@7$lIhp8ILCRgsR)~fFc(8*7Tcz2On)L3(cfAUX`)dZ
zXVOtXf9z)GDi*ke22iy{f5<<8rHd)}d)}fZ8{U!7%u8Cc5G&mol0zB7eG#TF1$h3~
zc5vc_0S0-FDGFp%z0z1+S%I_#HzyS~hXux2$pNm6BTT9-oI7_Mr&fn}{oAj?zx(B{
z$AuwD4dmRHW+r+7QI4C;@YqLQ#3w%RGM@X)HpXiSnuu{=rHjKi%;A=+d${@94sN-z
zhwBfL>ki!@8Ef-%|C&bv%{9+%agBoRI#&o;Y$rfDi%?_%W|IKJNr>%Xi0x5`tzm@i
ztN@wtQ4pRMC9*2u;7{!V;qzI*lz&@QN?(&J;A8@<o-Ocy{HKV||IT`V;Yb2%QPTMl
z)Pp|1v_Od1sMWp^`p9unXZmII&c^gSchcM!xs4zAVDEeK>UQW{0IAiWTq6Cs)FL&q
zk3*Jg<HfckDMBE5Mtz52h`UyYdzVM@uUOejhDyLke`$vCDp_mmWzqeFlV1zQoN-V`
zQrA(<$<NkR7_ysXXl)$X8a0uY;}+u}U2CMrFE@Ry9l+Y+Rz%3rI)S0fgM2NCwrPR-
zvD2EO762mwR`J&+2!t*zgV%x<n9`{EfLQBJguS}W0PS#w-i;%4?~Kah=eF^_@A$W6
zp7qd(gTa~dS8qK(IJ*Aj&IkA_mH^0Y*p9ECTZ!NITwaV88;y4Pp11$Kcsg6aU^K;q
z(th@ABMNQ}z~Qx2uXbhOd76q_E%KKxTKzRwA-Zh7mP**eg)v9MaRsoygDz*|>lbyR
zw#!56)PP-I>~idLVlMu@HTX)q!yEHiBA{piJs8d=T)NgPl<ym2Tk}1z-{geA69#?0
z;xqg@Kf<>lw1;m0<mjpaMEL<Su2<6zP_)2*hB`4x<qfTU;69%nt@)E%;$WXm&R<lC
z1DSacxMQzxDz2v~ym8xDO!kyp3S>mm(DAqyDFrG_S|2A=OEYQ}(EH5?6|T9fM7$DU
zbhO0dKevgKr$!i*BTTCt5g868q&!GE$0?3&oyN20U&6-D1>|LcIBFq^=F#h2g=Vvj
z3+oqg{M1Ff{%fwmzx;)FVU)&L?~{`rkme;G{=;MVZ~yMoIQsc>=mkr-_ol;m(}UOG
z!PhS05V7=I5mMsJ5DmV{*|L{l3sTz)==0D$Qk5VCnPZ)zDGW2|{Cz=WygrbP1B@mS
zwkHvGMgjUHgqUlEPtZOEehTdLw`$*0&Q2?r;dLhe`SmVvyDmhXxM??mXPzwajo((`
zYu^*$(gjKYe2<+XFq8EZ(x<UKb{o|GyNvY7$er}_rP|fh*6Hbptg?#u*z(u)?@&G_
z>uJl2-nWp1-z5s#=JVA5dII7119NlaWnin@ag`XcbBY?Z4Tm3lmcTjyM?PNQh0l~|
zHdGnVwealT=2gS3KKYSfdsacKM!7flskKRc3L<P%rvspR0h9=lL6p3n9|gAcDk_}5
zHBevAHgaeQfpL&j>H$#|(o5GSfBb$%t&l1d4im3!MiuB|2p`DSEVtkI)-KUV0?fB(
zSh#guw(e}<BY*fD{>I<_FZt5^{&tRy51h#U+c#{F*YYptB;c=50w4<^4!gnL<h?(W
zhATfXoDK$G|CS$1m-igT#s-Zc5tJtBdl}N$AN^iUwC6I)y$iG&q;}=o^}he*rM~-j
zU6)?(WPMMUE@%Sama&=h*vM8bc-p43>m%#k=k~+ev6qAn2!BAyJ$2@yJ}>kZ#3lyh
z8T?9`<54R=@@CI>fm{lb(98qs!XmcN>#t=Sj-e->RHU$<wKH4~Uj-7_yWD5~cE0L~
zkZ=gpD9Ez`cf)k{J#jZOv*+E)V=VF`v&F`9FaaQeJf+gmE91rzt?KZ-f0;OtibRr?
zxS=FMRw4A<1BN3xkXE?y)&O(O3gffDr+#4_$B%DgT#PZAWJuB&F*)J&I#``;;g4VV
z7+$z=1T%`TRmRMDnklW&MpVtC+d7Cwa{;ZSjZ5oWxasaWyz@KmLDWgHb8du3K70&M
zedaW}aSwMMz7-GNdNW@CnuECeo(AT+^!W<@Ps|8tjYSBPNM=NtQLi4$JSju#i^zTz
zN`l<S0rGx`@pg#q9YQFyhhGI4k-UKk@r5MpQ~LROow=8uy{s4t*36dQHI(W>SPRZX
zvZKS=-lQJc1pn|S8yJm+8$cTTf==jMKeYpLwH{V7pb7GDl;+^iXo37wX7?N?#R9oA
zTeN8do+hXvR&KOUUz1Tk`>8A+2RZ6GG6zT5UpztBpnu<H^hvaG<6K@&i9Vqw<Px}N
zPl%0kz{9_uAt=~h%e5;n@Au2NuZ@h#Lu9fg1#pImwLYT+W<@gPz}(2N@9}G!k8c~D
z#;E_S#`1R@Bd<K_%CUM<AP5C9qUqOV9qr}-u#h;VdoD5OL_zh~os_X69l|Lfw^(xf
z4zRS4m2<aDklwb4fBwJ!2L8i;`9yZr;?>>l;_)9jKK{-BkWo_nW!eV#E0qAy1>Dzo
z_h0LVxBbG_<lN3(x4x_S;GOTr=GKH4IQRW2ccwKc+PwO!auW+kbXhca$UsfXS7L_?
zo3?Iu-vcg8I_Q%v?On#cyP}t7roMp6mKw@npU=H~tzfQLB%3Q?l@d0LpBYzzjFN_d
z`<yjMT|a|J8vFX*_vvfx2Aj9lVCH2!{qsag$tI{TgWl_7f!5Ke_5P$<wvEfTSgdd8
zbpQ+&t@ZjfixN9hW%+Xe)@{Xt_%39{@R-^ZgQ@=+JKX}gjUsB_lT>agh*02`ecLz;
z9&(g3D%Axi0o+#b3}rF~BB-Cn3TcucA*}%_Qvh6Z7+78g#-{^(@>jR<>{DBq72B9j
zGPIKhZ+6{o8&7OMf!{y!JDAO8XvbY7(HxqMWi%V}{CR1_HBFir%_dmgSVd4}m~S<Z
z6&Ysv3~|!rsy9hnSnBS@^#=~&n&oSeWm6zev8OwSo3Cr*!TUNme0_-UngZcc32f!S
z&_lYs^HN`&nD%`j-wu%NgcuJ44939L1lXAb*qKq4Uttymj37|pXAdLc`*EdjL_HSH
zaeZ>SvB;UtGvX!K3Ym{ud1j65lnz<dImAmZWcZ<<0B*l0#pXIN7|V<}i{+@mPBtck
z9zVNpuWe`nCmFmx1w{5^laAakx;M4)UN_`ZXY=cEmql4hHP3x(_nF)RR8cCM7BX&;
z-DHL+IJ8e!lkG`*`^g=szeZzkD=Q%fw@?4Z4BKa9lvO|KZe0NB|BLR4TdAU@;n4t9
z+OxG=LjdggnjC0ftQOR3Tp-aA@EQR12_=UFYEakXa?f)-1O9z-jg-~sOuaOq^9dx;
zFGoZ+NpC8Ur1}?mZ+TPG^GKoq4U!Cx%5rgKf`wZO1p6BJ_V4;>Ja+U#ws&s6yMd3q
z_T{aQJiNPH{PKDH6-fZ(<S)10aNB(KmS-pB>ZsGcCVc0cemtDy5k@2ORwwr{*&QsS
z79zVB*Ku&2&k6igo=4yONSzb1_%jj!S1s$}(g5v}`OA_3whE>)hJ|l-2Wx#}Nm7iM
z$0)uI&w1{jgA<+jMj<1He!!tNTBw_kn3&Yt1N^mg)9oDDs2p44%0jE-jAke7Si&sQ
z=SL7Nak4GTeHaF|00961Nkl<Zlk}|LZ$Z4?Ztzf_KcSjHx%25U3?mLvP@=x0gEi}n
zK|5?!5p#)%wMuFuN51mV#KOddgx4gSO>AUMpA@<FfXN^0n4^qZs#Pw19S2B~3hkc!
zY~QuOb%z5KW8gEtJHTf?(8pxFj>%*jov4jQm}0)&#bX<f;Mb4*XLRB=TH#)F+c%-p
zz6xoyjCOkk`xf`&z|tHJU)ROLLWQ-Bb-Z}$6rMeP6z4Bp#Bf?5uTs9&RP_dB1HD!k
zt+0u1V;@?L1wD;17MmTs<K8`Z$6M#ny`@BSumHA7QPrcmiss};0Vdl4raJ+~{Q#ST
z3fp5~Fsm@4mOp_4VZdyC>ap|OJm1T5o~TNde!TeB)9oh-yQ~El_?b;lu)RR{(uY?h
zfIU1kStL2+D8!l51rFbt<NZI;#QGXA8cW4bAO$@wn-KIbYgu>!2I2c^+Z6fup(!r+
z@##Gk2_S;Gjqgd}Ueg`m`_0xfa}bn#WC^|(m!UxB+z54%I6ngY{knz-n}soIsQ0hl
z<1#}p0gf@8yu{){$R<J0ekRAWpD598sqU3=k7~QUYZr1*xBA?3Xv~a+ex=TXk+n|7
zM1F9Wfqw_a3ButChPuXTqq=p~KR&7Ud1`zF`JPtol~*9O_MI3p*4hn0ss1MZJ=h=2
zau~A-*LHyT22@C8eU?d3V9!d1J$HwAVRHlT{_cNKRz)N1CGpmI{PwNq`_FA!E9A@R
zVK!U;13%;@YQ#%X2lxGaQT0n=A;0?0_k=;vKsKE+E7>K`wHY-IbT-mgtIOpkt-Zc2
z)XRVY={H(2;1dN|hr2V~IuhVA44WFzS1YM0RU0mKNQ1q&Qwa1ww4f~O%0pxJe*8V1
z#W9kiOFG=fLKRlwgKkA%^TJ_(mE!=58<`Q3j78BlCaPL>MzZz;nAz_Gz1b?e&8{}0
z=wrG<pZra~0m_qVBqUd5*_pTZsc{^b%0x^L9oVT639a=Y8@zu0-9m(ViBt+#H#e$s
z<@mJr;Ms8r8WhZ#1gGBe<|{;}UL<&H_W{4A%>HxbT!om9E6nc!=9dCY2O*9=I>4hJ
z*}|k8VP`Z%BZ^VvL}=^cNdFo9=Fy)+D+v)*O>{cc=U+k+FJb>Rci`ZGz1Z7pU{5c^
zVz0o;9B|vU2k?$pA3#vP8e9D#F0Ku5VRei%Yg3%v$Z+z~CQe;EgA?1wki<{m(Ef+8
z)VUtTY=ZTCh@bzHRUE%`9lq~7_G5wO?a~O_=cy||M7jXuDKN>veRhKScgDb!`u8fp
zCx6tKNF9rPh0h^FOm1v0U+)M0H_zV7Ib}i~2ho~su~qH0fE{ovp~B))j3bZdxNy2e
zXE|gF!(<}*@Fdnl2>|!7oD8qd+S`3VUd1}duzNON*Po#hRY00V9Ipg9s7v+w`;2e>
zkcRCXwcoXm_;a}l0KYiwSKYteeQs-9*PZcW^n7!G<V2Ug6JkP0M*-}=KEkobXdY1l
zo=q_99)0$0Hb0f1$I9zK6MOYFv(W}Jq~fH~y;i--@l#EFjdUbg)DYQQ#bKtpz{QG1
zIUkDD>-R*a)CkQswcryfUAOvVzdQM2Osf?!&oTs3x_PPwSuuZw_PqiTE?tTd9m#R?
z{a523|JeKDAN${bChNpE?p+Sw@NYJgQ-5tTqg40H3kmoukO0V|mpu3tVby-kV0w0N
z%S~UE9@uwtI2cY#8t1WFLPRt?^lgtCh-T^F?f?_~SzH1AeXSP#RF2OD-Tb~`0WPtw
zy@p$S6wqx(s{TX&rCayX2W9-<aSW^|a6wT_QAn{+Mg?`kKob$aC>##x0;C%y0AN6$
zzm%U+2G2==*sAKpgNw}u-|2C=)2N$~o<|ccu~R5((`$)4ShLnw^r=?uQdn|hi%l~K
z+E8dyU}BMEA-WOxJi!tT{w(zrM48pfnQ#P8PK(sjpoY}c3OdS$bRP`0|Ez9tB5C0J
zs5XDkbMG}fSAv}zX@#Zb0M#VK=~FX&{MWZI$;Q|o3=osmT}3gsjn!fezxCYDA!YmA
zE_$7-5yfqUVHXE(xE}|uJ%Cm-2jUVr&&LO-5<(hsEbpn%z9z)=)OW}_C|7}vv%s;7
zz|k`~UN|?wvoD>-k>kII&!75j9Nzaj?Cadk2icqt@P|(xN8F9^{vY1M=0?#xaPfG>
zo;s6R#Yq4W`o=Ww))0an!}1!~awYIFbZ^Okay(6wfLZ;@tT#nHQnWMk8xC|Dp!v02
z(AK-ccmQgu(@2477T}SO&G2>K*}||dPbiJ_M;Qts5c<2KxvxEY4on>3#RQDo%p7Rx
zKQHK|2?1dO0gu*PW*=Oi4B-2z9wsD+`fyq6@yiEs39?&q)&g*xB7G}YSSabxn7aA`
z)CQ&Lh~83&#r+}HPgG1!HF;=<qiIp$h>D7C+55R*ujpV=M@egYqcR(OGF3Z%O9o8#
z!;J;9fRS>JYVu#kls00b&<M2Ha0!a-BkBO@!9dq`WX`5iig-7o<dItdcJ0MPjFOy^
zrexesOA^pA*4IKbpPk^nZ+#s;`sruV-~8AUql5F;e%EsPz`s8``^0DQW%h9LvHxQ}
z<O-+Ja-5Wh{zX=9=FQepeD5vq42keJ&4ZBLLG?!PWOE;s4L+-j*XR#jc#trt@-TM)
zS~Bpb9MNv<PdvI^Qo-LcB^rarjqqmZn9j!6U(|ZgzA@%{+q)oj)5~!mLjGlBJJ}0-
z#q8c*_4Wl-)X%9EuCbG?+Oe{Y1Eh+lh@Gjib|p#h>}Ps4f9`y2_dAE*^t1{z`k%g?
ze2f}vx^{A0KIQtUa&4tS>)G3N_|#XK{@Co4iPox(huP+?Z5jGr5rjM*MmeQJHcTW&
zDodLer>SanS#cz9{zE&n^{cBA%Lh3r2(xh+{_!twV6#8Q+SUkFl^{-H#Bl?0C&nMV
z^ef!IPlI{1(*1~{9+G$-%lqy_tG5?rm?I^JvjYLT*8`1fDqyh!+98T*gmM$e$0f31
zj#)87yEDasy&0~(w!$?B6Wnma4LEe&S7YzO{do4m2XVUpS-w>XMe8oa_>)J^<BvZ!
z5S;_%E)cPf$a_@(l+6HfFGSEFwxbC3i0dw$KWaCqxQ-$xEU?3YzC@mtm`zCSuVU|`
z*$Bud^fT2gDC*~xq;AFTn6CkyOP<#kJpr@qqieCa7~$cM&M+R7t_4HEzv6q=yYtnm
zd4JtqazZ?TvZO!KZcu#8k_I;pSaa#C-8W7+Oz&|)(Y>N*eXZDi@7KP+Jyp2ea}(SR
zB~P}>+r4hB{LPC1lW~A31@_$-IVC%OJ=;6nP_QNKelK!Wv%Vy?b9TMGk|9N2+Anck
zx-Kyzv}YH>QTxo2FsewEOlwKPVaSla7bTa3xzHa=AUPqZAvk>Q^*CqsL{rzQU0Wyk
zWPfxNv{Zp8rwEA<+k+768zE*FX81eb{2naMHN(NUpD*CSpK8VnjQ{;<apAA(<A3l3
zKpxHT@Iz6M+&#_)liP0kin!TY!fZwxoZ$Qxfa_yyj+n+@UzSO`r})5aKewK;!C`Lk
z+Rv0=<SJRS%ygBl249t^tl?emR}9Lp2Y#2D*8`~a*X@|<JBQ1Fovwhu_%6fu>5UPK
z>{M8AuhS5G_HLio%eC6Vn-vK2+^Qm}o}_}ZWQ)&DSXLn|TH=nY9z!kA*8gqieb<J(
zTe{Y@W)xPmQ)wHcGmdd3*Y2?m-e4Fe@RgHKc8uw*6Bx`y3k2q+*in|`fJcljR(F%C
zk*BDo!ekQ~`@X%Gv=3+#BItZJt+4m%0G$qv2}bzPuW#bTV_R6?*~Vm2N^dkKD1Ql$
zo%;+<ZoPnJ+(i(y5yo?f!Y<mK>yb7O>KJ3d!8V=?(7P_c++m<`2pAs#E_N#n=>8<d
zp;m>m6Cm$Js5%kaO9A#@8)EOl2%WhF^t!iTsdp1zxcJ-Hn!ZdE*8HKPR*7H!?Q?kM
z=nU;WAtwNIFHQ4+nfz3_k(4fz{M7M|$#pzhrwV**ibHnAB=1{cHYOsT7#>pa&!_Tz
z3I-NfwZc~W+=_pf0ytN2Bs`?gHFAL^1C#*F^&(t254`Zy49%vr{S19EK_BA=iTIB8
z@$I_t{U=kyChaTtv|o=Fzzfpqci*$yu^!Eht6;aINdjxq;ufK;XMHcLz<Gnw)@5zS
zvioZnvS8j;wuZuhIS{j1g+14Vh}$9a9<2Sq$%UbHTHTvU$gUu5=!hmYF5$NQ(0nAc
zRVE3Lp$9%Ok$XYMI{E(aQy=W3z!|m_7S?jKy~egdLv`iYbOcpBo9ow?z9)&EX*x)8
zW67SVLTYkwnI1$z_qHaBc@<)HGsNb4fg9$R@&0#yL%fl#XEBx@SWfPLJHE^w|AQw0
z#13tt8Qk=Di(-s!`(SwZ`Zr*l6*AvzJ+XkP9o8NeVIT8*u{c|63;68Y-CF)Xr|eg6
zAs7;EiNWqzV+g-rT0UcUe~WLfAqHZ9QJc~Auy<{w&}Aimnk1!199$((M+*EhcR|iR
zNUiAKmCX8WOg5`JOWOixQBo41^U<21SWqVhwHeIFXXk|<Qkb)i*H`HE&ma|wukPJ&
zpnn~O62G8=lAY0QT2{r#W}$5f+mP)8>0p*62d<*1Gr6^5l#wnEU&}WoSO^**$v{~<
zMox;Ts?I8O7J%MDh*mSg(a-Iak9}ej{pl8lBL>p>_}l3mE{)dk@TrfZ)9CW%lq6k*
zQ3FBLLlku}9gi{G8DTmGMtxx8T!pm@6*jlQV|RmAh5o?+>(@kB+Y@4SF~pfP#uHmH
zp4<rV;&zCa*CJflB%&V462?f=6*S^DURwJ@kn|8I06~QQc#8k}bLTL~O6<EWU=IU2
zSJYq6NUxt}{wevP!{?3M5+YUIqvuR0;8)0o|9|%WG}f~0N)N=oGv4XVFUE|VGdU+&
zq>3!Erj|-lNv(!Tf-RTrwgI~>!ELw!{b<AX58Hs<wqUev*ha%fce`Opr7m@ADpg6A
zL{_OpQXGm*<~$FPkrA0OzWKd74`(vgwD-O*C|g4?L9*T<Bj0rIx##S&_g-s#>s#My
zILfCA0yf;v;nI|yZP;Y!*$9x)7X%=54&AZ}B6n+IL}bubJH_|^`HXJM`Q?lz=p14+
zz#I<ue&LPrd7XoI|K}_tQhwpsnq(JT5d;1u6{{H{r{3fex)!Wk)BYE6<YjJ>PY3w5
zW+?`{g3wW>zs@N|GX+*QfX&MZ>mP*sk-b);?tpI-Yy_fX6r?NoK4eeuuTw`yP7sF<
zhLlz6eY*WapSyF+<a>kVMYF;4Gzf(=?FEO_sGyT(hMWKs|6hfixa>1nv(~f0nmLtJ
zP$K&hJX)nqos_&v&hGwEgp=U{fA;5o9-n{glj-sFu-u40{U5iIwbY*ZPs0)axL;Z;
zdi>!$TK%&{F`a$v@qa6AwKh>#C2x|R)aG^QO|YjS9e~q@FpU1)51zQ<jJ|ra7Gy6y
zYt;u>P6bFJYAN6kLxd1$uqa(x?FDHFUuWjf27SE*!M-<vy8$0U>z~4yLFAH8pKs~S
zx;O=P3`fcnkNCF=eag^yk6n7A`+T|?aE~GwGQb-^OwNF9BHmb=>Y09Cum^f)Alw-J
z-$EjpG`I2PWBx_v1lmp)-M1OJ$WO1kA|*uKq$Gl&x5Xm;ZV)KHSBg5=@G%DI!!~+t
z)@^X<iHHs2;lUig_dACemB;mHHbhMs^P1Sy<V>{ijd#C}iW=J25z@4WH0dIVTZp2Z
zJK)si42#(e<HG`zL5)ElxOKh3tq*D(9yJ&q1M?w~_9||FeLRTp&WAPL_z-yGUErlx
zYrOqlfqQpPaJcs#2E+HTD2C{?FJW5jV|Vxx(lkR|RmkEPSKk}rxBvPvRvwA5aRn@0
zJfBmZSvOW~!OM{qe^ud~1*ISw6f=pe+=d_2-%ENV=G?!7_f2;{SW;S^=hHmFk_w(E
z>Y~QhdWyGREpfD4pw*U&3yyx(xVy-cjgvy-<{0bT^^Txe6f;1^`d1@tF>|oe45<oB
z=6nO6z{&=tf1%)&&KoB)Y(xh_Tw*FoW$`<r1o1gVkyF(zg46<W9jM##R1)|XpYV{n
zA$opIO1|9IXNY6C`*F^8u*U74)p4eyI+fmVYd19f<^WkP-ob1puk2--EeI1nhNhDg
zW#B#!M$T1af%K`wdC=Ezg^A29E<v^Duj|&3f~pQvoIX`R=j=~o939tK%QF1>SN>#N
zFuS7tx$W%pe;PkU$B(fCAd{sNJ^kwun!J;rD<8Z3<(QPj$d34i8)offaY!`oF{I@Z
zJ$td7-<8URzq3wNrV$@R<rc%c^J-LYM$bj^npblu9o7FSk<aPWYqOt*m-5nyHR$F3
zqP7qCD8P-4F2$wVe}5~ypAe~u2!h%JU0&u<40(Te|58aC>LG+1tt?W{51<W_NSM+N
zRWCn`q;=7{jhl@t@iv-R(E{DXEVpM6UtkC<s<y~oqj|f@a2m+(yb~e3g3xfd!F5<=
zn3|~2NQYM<u&DuXdBv*shTk=Qv1$QB0(>rojLc)7iP7suXtx@C?Qb7p_h5k0d?2%`
zE>YGc@@y3^-uW&*9K3{f%FTR{Wj!(e$dSdX$Xjd3QkAPlgZa4O20EirjN2bXxP2Ws
zK9u`@{BdA&J7Q$u#&zK8TQ%OhT3~l)j-!J^9PQu0bh?WM6Yj$vqlH$!hTYMNnAdy6
z)kjknNb&~X{AVY)`oaQNJ{zG;odU@TAP1oI8>&4ACS?|2c%SBj<<I#UX>`w<Ge_al
z`qvqH_pBxTBT<`?@PgdC%fTy`g<yM)-nyL>qXAU}EYRu2h!_b_C)4Ihka`Luey1#<
zd1W_GB9A6&$*txIf)tcFyOuT#Ljds!962T=mYUSDEp98_^#Wo#k<8dSlc?-{+Zfzu
z`84EgE`p9*mx;qcj+h!=b81{v?pvix(Sqk3SYTk$vqufA;zL^`>wVFBrm8$~^y#Y_
zcfL&7L&ItjG3J_9(Nv;;R^rHn5Wb%ehGMAWNe(zKPg%2M>_uS8nmd^T>gE!sO2vVQ
z)ydb!Pn9~b)Hte&ac~r2G$`@Rl~3WBE1ynJru&Ot^s)bQD_Ki|daa-6<Hyti5Dzd<
z&S$OY@?WgVak;tv$+Xuw2SkN3>3!^MkTp|poMwMm4Pbxwey&FkyrJ_&DuFQ#qWY!g
z982Bmmf<q7@*<q)Aj07Fo<5*`&nYE9W?JN~c*j{<-$A7Bug%x_yHZ7p3iu2x=n?k!
z@VfqC%E9SvpB{bNvwS{Xq9c<&3v;BDXN=+n5i-djTCk&DK0|@bxD_V0&&7HTKtcvQ
zA0tqHQzyfZZ*Y+=S`2c8T<@+5Ya%G`3(|v)Eyw{aa}C^U{3a8Yj+J%8X-lc&);P~}
z<n>zVwToGU&5I;3LRtzjp8wVaufKMJalMbKT5yz2n@uO_VgKYdp8eqObCtlNo+3$G
zh?6#=xC6vFl5~Zgfh0+}^s=t0y|t7T7DbJ+h;Xn6?A)wbbZB=c!fVe*c>5LL+SLZT
zy9LIx1}7)SI61tHc`@SqPRK&?vridqm{$Yb9ld}!CC6lnCaQ2S9OHNYRv-CFjPsWx
zkV`_Sk441cyx|nULee5G2Of~;jJ59^1D(<#60;mWn!r@J5WGVmj-~<9lIH2I<ap_O
z#Qv+D27^SDn#ysLbJ;1?WlK8q+)z$dFni{495qtL&Z<-1{dW6|o-;%QEmE~HqSLU0
zpzGLn7)wc+>6gp&hDD-wG0b+jSlkA}*nN&@E3(H_{<yl4VEvNlA9#+AAsuSW!|0xk
zzT$zWpnH3M{(t)H%qZJ3bAf=28#_%b8^Ek6Nf9bZ(5goajiB#&E-AUsrRVhfk~ldm
zMQzZ&kpb;o*2GEn9m@LHwcBSI=fKu$t#j4T0Cpe>;h;=rz|l#KJkIemSAHQbn`+iH
z*{3(MPyalAN{$~>2SAQIx_BjvI?t3<GdsWiF;-`DL9!aprCbcFMvx&Ti3d*<vBTsp
z9Q5w~s8OxXUf-J5jI^W9`Uu+=zE8dTKU)#NsYu#I4i<^K&y*8shR>bJb>Gsz+rqo=
z16_Y@!{EXVL&St^v$L=yWEHq;@&KXx9G~-Za2qS}vKp&=oH#4GhzJoNE9uS_FnE1r
z?#IG%y>d>K)N$zpyAz*xwddx<6m)lR`=R^&GNj4BQZX5S<Dt=!je<7`OL^GlXXkhA
zW`z`J#>0By5KhY_f8Cn9v(YoTeZ9apez%Vz+Q)o824aCr(kMrk^zi*#zlA0mO8Csu
z!flTH$q7i~9`dZ`XKs|R13;g}`FBQ@q?_HwIZo^2<QUkw*WlKN6~;p<%xf?iA7eDw
zK~auSRTI?YwNU0fBCWIxh+4?f4)%txU|Q`9f1xbU<THHtyN7u9r4m;@0c@>^_=*Vg
z_(+;|Z$?0Dd==7{NZ-cNJ5>q0X$A}HJUfNPgy_uDdeg@xrDgs%6y<Jg<aqyDjlFvn
zvRqmnyOKjYQGfzCv`YULIwA7-E&pz%uVGHmES;Z+URX~~EW%@M^*bF3ixV9F5W2mF
z23Yn$-|VVn{N@r|qw);Y!Dscuc>{X17avJH881Y{g1Ex36hrs?vk4Ia=M*UF67Dyi
z_^1JcD-ZULymmxmq(BsoB!F<07NKDe_HX-VNRHf(CmAwYryK!mgH3-YhoO`e<Em2l
z_1Xub3aV9TZ(~xRrlM#*(a&SjzbHyv-h4DZxBf^vD@$~u$Nq;2DSh3y!~EnOKh_RF
z8lC$rO{^?gt+&@7cA^m$mOG=zhmQtAa=)e59E+X~Yi1j~$Y64peKN+rE}A8dfXlIm
z@O!WWXpWE9hlA@*k>=c4{Ch%J$s_Zcmf+u7lZ|EM!k<ra{sD&J|Lz<J-JAmFA_N+|
z@eenKQ?IeTlp*}(Mm)5LS?}FSwgRMrVMEh;4|aNYPL*P1u0RNX8Y~->`M6J11w*@3
zBmP;-5m!?lmT{>;VMN1@U{mzbi6;*kzsr|FHMOM(_!(KtRMfcgWWsHM=?%a8J3|a7
z`<Tr8{`wGOt#cml96gJBlef{y+Nh&~O92xi{>5#?Q449jiYzBGpu)$bKS1e;l28Ea
zs2ri!1-33k*trYr?EtrKH5d&AW-n$$96Ul4%@uB?IyX_yqK<Eb_QX+&ByOXqN7x&^
zgCtE+G&4|tzQfS~U;R5L=$wyn<xyb0tw>9-j+`-O7Qg(HNZ;pvmpbjqZeB-}8w;Mj
zp)($ewn%Up3btgNMdB9WQ5)QHp5mPs=jgOWw8`soNRHX%#2q|r=#m;OXTQB1ukU2<
ziGOC~Z0B+7CPXVjcUtGEn`5Dq>(X2Hey`HUNVRi<!u7Ho+=TV{^n&?9N-xhnoN(7l
zekP7D;9-APf)|VlrLX)m69c=<k?`oARz@tPMCA3S9J;`Xll92o3qqif02^MtH_peK
z!4En$N(664Thm24&%%lWAJyyMwbz8#q!6A!NrqpAr>Mgwp(RolC{3ysb<ABksT$|X
z`p07e?~;1!PqdN^6<YquP6PayIsh_J(rEn)O;e(st;bQ+6V*ss)ZDN|_4LgsT3X<~
z$S#O{L*p7OHu*1Mf7+kcA`5-C219u#BQ$L04EXEzA7bJi%h7@ucV)f@uXP@_o!>$B
z0dyZ|()&*gxdGuA25~+m2119!dq(mq>L)<tx8Md?q3aYTz&{052@cM82Gm&eLXN8{
zY0%^#;E>fFa0EgpLO1L9{^zJ0c9;jW*W2%c)B^|0(%Z#ts9|*JoiB3=v`?CC&MrEX
zO^0`5Hf(}pdUQY}Nz0<f#m9y5-|Z&&gWntB#s~XYR41ygCg*BrU5w@jcy0Hq=;l3!
zHIq0;nzRuU?4M-(HBCFnvW_|zetfH<<_LwSA8qoNByyQd8r-=F?A)PTeT2ol#B4U^
zWN9r#6xrNe<Y~?_IRY87w2R&G+n6^K=B<#Uk#^?zgYWL+>f03_ekR7{i=w{fO7gU@
zoW*Y`du7IHiEZzgUxHp(o|xUJK%qq+sOeaECow#iFNgKcsIG##!Rktm*Pkm<7orD1
zTJIbJx^o6|DR4e52k+KJpekz4d^isslIA{N(J?o#?1g@DI{?mBtXmUueI~~(&Om^m
zNr1alr4%|4qQ>LPg=v4JQcbD|SlNit+lp8hLH06_8hA%Q(>AuM)nVr`*7<I*y5zt-
zH^$bR+`H!(IOyJ$49d7z^@q~}&~fCJU5XIU+A`rNS5|6~e|1V{f&nNgK{W@#Uhj;)
zmU^;S6@S$p6OEDtsl=Hp1VrzGzbD545oY8}kq}lL*Xx~&L`$DVQSY%<e10q3x_?rS
zA5#ZFHl?I#KSI-zHp1DQJkgR^u}IQ}`>|WJ%Mw0*9yttN7Mo&a)~${wICYPb@IXYS
zgNT9+zm)M9vBr`8ba5|{dtH)U&gGiVxV3M1V-Qs=)%$y8Jwm{xX^0mQa+?BQi!1%r
z!->`|9oF+t?mmd7h$9e1F*QnZq@|@zRqsDQ0+ulk`|3BFF!Fa0yXN_L(GsDC+1`ON
zpJVifNI+0Rr=KrxIi+l<o9<F1WqC{&$piu_E~3}_Rj6@E4boWw-2%h>r^`>PBASl6
z*+0G{lASGT^tNhjU5>fS*!yqI@CV=B!=l_pQOu>gAc*FXqtjZ$E4yDs*$kwi5h;~X
z)StAG#AN(4Hppp0h=6Jk>vc)fDplaCgzdh*K{fYa5tut40wdDwpVk<Ur*%~nbtU5T
zC~4cY8{%>Fku7ln;<$}jwTGkWdyGa9gi6}gC*v``_P0*Zy#ze;2(aFzNZZJir{{Mt
z?x)K-owLZZR;ne%>D26UXi&Xl>E^XtFPay(oVI=fMQy9ADel~?v3IxN_RQ3v$#vb+
z$Xblla<Cva&rrL-4{*;sNFUk5_#uv>f9>*`k+HB8mW@TA0kTB4HT6-o?E=Z`bTiI^
zB@u!#a;2(5WSdSKqLE<xO2loKm(zY88FbIeH~{uN<=nZ_#d8rnSuim4_ItN>Jvw8E
ziwPXjWxL<$GqJKfB5~6>g-dInVPr$&iYUoXn@gE9Kt3LKm}H)S^q!FW(cdcv$qc?|
zSTrtB;S#`xIxC9dr+<_~s`CgFM3~H}I)>P#QH>^#6RezH-WPu|j~_z^zy_3RU-Au}
zG;tLdvw1z6EV!RK{fgS8#|bHTnhKs8YnIwG1lhXKg?0F@o8}T!ZpPm{bVC;`7sW_}
zp2Mm8SsK8R5>4ti;2F4Z-JFl0RBb7`v7G<uDBd^7F?;Lx$dI_`|JkOyG&P;kv|L^=
z;+o!|q4R&RWQayL?$P*&#UThfXr9<-8<Fj#0_o90Gq}^v6B6#ijnQqqL=fan;uJ$6
za00win2VTBIS6|3u03nG5nAcOGQ<+Xm;4#JNk<Lw!XP!u^a4es>a@a@kH?^pVKS)j
zwSTye@pKon`A|$0&!H5n-3z!id=s}vFQAp>sGE|}gE-9@_6OzvL6Cfcn7rH|!nE0I
z&y|cmwHqd1ww!}Y0}l^s>FPVKP|Pb-L>kl%nd;GKpA>PH9rK)>-h{id?F?Q-&2f)7
zaIId2?|<tU@4Y+6)}sk7pAS-OL9*DFVp*hWj<_e2Sq@s6;#>{F!g)5I)Tb~gDnxbs
zS_zG_tw(uHo|7|_;_Ax_<ZT*P86Rss>|6ADHoTj=K|WmUxx6++nf%<6rLw%rg7*eM
zfpZRQy=d+}z$2CLXTd<AN1zCVLk9Jzs-|wJ>tIExDC){3X4dUw5g|a0O9N0E$wa#x
zo}dmKy<J=SIgW&I1|*H->+OBiE-5vu6!4|B?tV>DI27Bm<rN@?vaTg%;92_``Mb64
zQ%MHnQ-tnO2x?9sL}IB<5TYMTRo8?jNY4t>jxl7Q(h@=ENN6Q5r2s&JQtb%Yc7lUR
zT@Qu@N+#gaE9pqP_$fGk3>^SF=s^_=dUR#IKv_<4v^Qi=lx%E9Z5+GOd)j)pGZLVU
zVvK^il#yHN_hXxC*vv-}0bRMyFd2j2HOSCko<;)fvs@z@OG|{Td9MQKgKiH`I>68w
zuJC+j*q84j{5}8%U7vOSTPVjH=n%Ld(5{0wAKR2dhr%|YFt=%WP#>i`hag}V`x<P`
z?K#p<xJh~+X8E4@57JQ7JrEI1S%R2@uU6(4=>9B6m1<DTr1E{*IH<u{j^332r7D5;
zdwOw_#h}vED^I0JDw>ZGzVX##+}+({=wI@zVuVR_r>Y9PvGY4fQ*lzc{W8J*T=P#%
z|CG@w;u9pK=^8wm(^wDv)NV(-N~Tm6*caHhEGo>Vh1TZFXKS1-El^JTnJ$(jXC}vR
zaTCYW>&VH=7VC`htiV71FGuKH0Jbjx>np^T4(6ctWe~s5=fq{`gLxOus8iCo;j@(W
zXEV*<-5*kG?jlULP|;n>@YX8}REwG&q%2c(${|#qkZSW&ct1;dHShGg)SPcE?Tx*i
z(?jav1=1@ScH#LJyv9v%31_{yk6#x{O^bM5vOWb>q)I$*BtSLh%cujD0#Zp}jJ0zy
zIvZ3C;1&K{SuHyr^j;AT7UVNX5pXL56&2QXB=@K#yRN3+I0R0dCrB|!+R(}d*|3u?
zR4^~-6TE}w*S6DcFypTd2ebT@Gr%)ks*PfTQOO}-0kS%ZCHfBtf>v^D4nd<1kM^-(
z^G>F{)1Y-O!mNz(!MhWTr(=xgBh;9%UPsfA%l(so{1`g`)TV23!fpUbi8V8fhyD6s
zcZj@2<p4k{kI`L=krI)a3_e9tTq+<=0JnhfHM~ngJ<FcEbqMqe(=&R5*ZIITFxr+U
z)XxYOvNK-}E?@Ez#7QxyL*HeDqvfsMZ<ZF9hnIAEN4L-RUjl>f20>B+B35!*g4im3
z?>9N&xEVQdDUu0@b>Rl>FGq8wTrOrPiS7A;Mt|@=S6<1YIj7DOL|SeW4sOL6m+)Gg
zW8+`t94<ov3<<EiW+WmoTJ-0P^eBXYx4tco=-aPO@Y-t!sFM?vRmHh<f!!mlw72oj
z?(bn%9wCXlj?fY(IU;8NXG{MmT_D#f-jc(Sc<xAa+v<?qFf{5HiCj`3q&n~lRm_Zk
zE66v5%JECA`=LZ(X55-&fxE+(5G4YxS4D-Sv%q)0KEZo$EpYy+1m~%-k%_jLdM2OW
zjC;VmR~1NeVrbKi8xRzsZ9HuTaSle@FLUG+ws+Iqt=&^-jy@~moUC*+?A)tyc&|je
z6CtyPIQA(4mqgILpeiU(1LWvf^FA_<e3~LeB&@2%$^L5Hd$?*sK^~r3&fzhksepbI
zu75t4_l&J|v5TU8b0AXA_f8Z+-<%ez7zx?DKpYiw7rYpkTKHfMIIuo&^!?9{ClCe&
z><svM9<F^dtVV<ugMPZo$0B)^>@_4Q92@uEK*7@j94i5|_R|iPFtkEQej-<`5kEOJ
znp3F*a^`}RAy<HOBSPyOko15zUZswjqj*|O(Vy?4!XzaPjSAyK{1hBNh7N#5krcJe
zKA=lnRD-&x`$*CS_V4cCWPgmjLmMZU;o4n~kac_n$-*6+aTNnAb?sF4q)~nlW|}YW
zOo6x9?(c4sSR(B;_ia7`qb)DO`(w7i(Alq<Rc*4swo!-PxPQB^g3wp$1-X|vLYsFC
zY~xzmY{PRACx8mpo$>Qe!tQaoqoV)W`X0F-?7iNDQZm&tBiz^Pp3a{JQJ9N<L{b>1
zBO~ij76^X$DAfOKsD?52mrk!@G3LnW;|?4Fepa!;nezFfv_=M)y5?Pef)ngGIV|zb
ze|ms2K0;B<v>ml*yRUaH;b3?TANIeGJnOJyz)hK=oOACnLH}{i+!yMyL!`hc$-LnS
zszi9~xz1fuVPx!yXE7NIx<XyyWNZsE-&C9!Q(d;89(r)Zu0J`?RnAY{2?w+HF)Vi2
zsjh2c4@@zb&GAoubBv@5tZe|@u6(xSe$|<<x_^6~Vd*7x)0583O7$QI$S%Qqj?4>?
zMt4%j?aY>?&+Hj`<ISg0z>P$csw%^^H|A)yVnzUbC2!ygx(VY6WFF=6^VggO;S+h7
zK0KosDvR<>2AiW!t`@O<;goy6L_BoquO9-Hv#8P1lnj0jo#0@@p>?t#ZH9)pDGBO`
z%<(B_Mjwbr{lYYzc{p;ff&(m9(JVU)iZCppKc@}3l>^G@U2VSY8FW1c&vQpfLJX+8
zq=)uh1psNNs1qRTn_lZ14GG#H2!KWZ4#A{0-VvQwnpssjkZwmvHi4CMKxZw%bKjfb
z?e`Bcm<&)f6C6!Hq)*OEOz$n4qy2C{{7F523>^S}6gYk*j&fAhte!3oKr|)lUw-ey
z9UR`9AZ^9m`HJREyBDFe8X?WBub+_hSVz-E*&6-W#;ovf7{SVSF4kK5tt~$L-bMTB
z(Vnj4_Xgi!<)xg$eMXMIE=m0cuh(-~sgQ%cLkKX4FqV&i+aMp}KjPHuEXy3m{(h^o
zcUjQ4oU4=<dym>}Y_7y9U`gw1xE@y<fjF_DV3XqNCH;j828mXH-jjzRZ4B?vBgn=Z
z5Cwzx$fjUJ624Ezf?9^_n0n$FkYr*EE<8b!F{B_C;hSGQ!13US%jx`<n4pudA&nxu
zzVnZfB$c!$r53>Cq!Q~tBFvFm0t+I*L_o9<NA#NTM)aAe#8XQ7ZR*BHL`!PdJ0$@V
z>4YcOYw;3oj#iCflh}x`o-oRu4yU;Yd01d~_!{UkD@wza1>)8S&;G##*WX!S{d|Ir
z4NuzSE0VfI73A{s!xQd|QK@s1^?*h2)y-R1<|(E`UMX#_{rlWh^L;V``Dgl=PB+85
zuP-=FL1}<A6{R;np#y{GoD@Hsy^RtYo}16%->rd=n`1#5L|P?_t#j)?c#U&FWi8k+
z+8*L0vU$2M8(A~TVeq0%{n~K_^f6P^Pw3G0LkY5W%n`5~VI}rC#mps4%$xz$chIYI
z9Dq|>lzV-!=xlv13Hs<g2n*li3od;SI6_9;T}mgIbD;{8uA(3;3$%9BYWRIxO22Z8
z<A|F|q75Wu_|HX1dI>fzB)sQ*?H?ZC`IqnDpudZ0(Z{gb!O{43oyDEFZpPo9SBJAx
zJKs;_@nh-$$U<8*d#~_Lgd`tK?=T~pqRFzD;qJ}5`0)KhEan1n5jQZ;fZlq8-dcl{
z_*B*^mx9~aL+(~Q=z(_`2qE-YL>ffRu8hy1V|kZ@(Ux+DKWsuQryEZH#yjr*ztXop
zjHGqb;#F@JFEr8`WdsH<G`4QrRJ{XxP558GeEm52GY3XJ95_9U;UAb__nnNMR}plC
zB31md=$t!pIX-|lB#!>4LM)n=Udnvf^+~W5q+S9<!Ge0X>8L`WX&HECzl+FX-|*2s
zTPsk|U}ZZ(cZF*06TI;K0p5CN7gc<Mx?Z?EM${x&&(GuP?zhk{ZZX+U>sAoODbko!
z|HRl6`H%iFdPO_{LIZpN<`f_8IkFZB;pkMxM2&hV6`&gZp6}sV^KRa<(N*V|N&rJa
zEk@50t^zn3zlV7_U=|%mf6WY|$pruWt5dXk!1^XN;SpoUYlwx6%za#52dC@S<#*zx
zgyZk#pcql@=Mlcq3_zHUu~Jse=TaJ=lj7d(1_$>RZ1^(C40=vZ;FyGHk=M0Yo;%j}
zK8&(mYASGCglNYMda}m>0WjcR1pnOcbgml85JuoGc@g@yZZQ1?@pBE*I`lmuLbFAK
zm8}RH7c+JS#1PwciK8feuYGXgIY0jMEP`K3o!K~?`kjmT9ctsp&rkp>#WM~Dllv@f
zpiY5x5cFb3=6rbZp^z{rdw@E18tmCM2;r|rO^!1Ki<=Gdb3kh~LZ_D?%1XTU+5ms^
zH$TKHZ+(ctbPtp1F{i}#CRZ_AjLJM&jpw-g*DI<s{c$y){|blbf&SPXG8yOf?foL{
ze=SS8zjicyZ}!-^U&=`;wW4M~MUBIq1xAArw$E*0bGyTEA59u6!=l_Mu{lW+lOfSk
zz3Xs&GxX%;g*a9+1LAF=R23K`=Xwa(c4~z>!4bgh{9|BP<rlK}TpX@DJpVVa>q0oR
z&(ysp5E_wRNQ59ekVJcu>aaGT+I5h2XDfkQGR;5SWwF03D-1M&_h3dgNDXL?#MMnZ
zLu{X>n+^}3IxMEtqM|_*RnbBhhb+k3>a&q%PkbigFL=^{6Kb;OBA_zY5NHn4M3~%@
zaNWHvA1c=%0itf&flI?KNg6Ywno>?{=ORpp1pP1Yy+62vCLW+FN1C-K`f-F_XB{W=
zn|QDPP2^d|&z2ln`luwz*!WYvpOzvSeK!1D0g&tS_UMBrur=IYk<cz9e^Zw}k_9do
z-0n>Cu>pz9ZRMVECLQY(4YOR1J}Z(Ro-g`19A3kv^`FIJQE)0CX^-*Tvm<=z7rI#6
z%&@vrVt?FlDI`CyU?K2$1zjbL$Qc+7l@tn$gqwff_=XB|$|Ylelc}C8@*-4LS0zJ@
zn9>A`MT&P`p5vGQT+Ystb7g~S0Q@kx-A1e-WdW{5U9OICUN*f!yZGt4_Ipbh57^&*
zHI4WVhRm5fu-+vtF&i{pQ-P1*-CZ|dy^}y*hcyb4DI76EM9PR4A5O4)JzV9g&tZ;5
zkRmdt&SDPA-9)^gyzrO&-S8TplB9WHw{2HvS127V{5WwbsFFrSMvJ^|G3t!ZSu+J4
zJHun>x-69|&t3JLdH++m-%2m(_Zg71BcyFGCxra)R+}7PU~sa)^|$)C{=oppha*(Y
z6m>m8QxVUvLY$SjxBnK}Nrwcx_a@b~Z{erp_%U?==%C!=9Mk6N|9(CBxj#QI_HpOr
zSv+;&SJ59HbCg0Pr0IBq+miwI_g1mFwTA8UtLXMJdFWNm1i?;EA|!GIiiNZ#g)X$D
zNgRvU83NrXrMsSwfXPiZfqiP^6J{V~fh@KCbJ2oZ>`M#R8z0M&yPn`~gYj47!q?!7
z!}Ud%Txx0PNN875p_kCpcU=q(=?EngeSN`cz|(zb(D1}wXKPP>>*2YOaOuV)h{}yD
zrT&*XJAPxfmbz9&DVwDa!CX$1;2kw4{0wbegA3E`hs8zA0paIJYIN++h}xoEaaFSh
zy!2_%F-~-oq?8jGlZ}hi5sxCh1mFAaJxpeYh?5~3NzNOfL7Mc?Npd`U=kEjY6d+^I
zd4KvxA!!CmaZ%K7f@n+%WM?2>j#S+U`-4uy{Q$}ci>Wl}AsutMV`+w9j#g;2M61H)
zwnY4ll2P<uNos%^9g(xMJAM-v);}*u18H)^GaL;E`1ZHD_%nZg6Kk8m;i15_ylNfC
zFksq;q!>4|#F=5~T5}52p;ZIHRVr5f9&sxoH=A9>xuRRO<lHH_;t{28w}rP}nc_>o
zN*liPWuSU*Hkx6+Jvi6th+3m%L*sd_dGzcQ^FCOf;!p+~Ku|7gnjZ32OFwvmu1{GR
z8t73DQ$IC_He7!ppT$))MAq*fICmvM((?Nm%@Cdox>s0+KU{AzO;o#q=Cv!Cl+{lT
zo*^g#l}NWfPoq+%u3ir9lgne}_Zr)uJnun*4RQu}Ki64p;%~J>=QLGd(}lfjZl!^^
z)$lzNB1~Km3KGdC5IOSt`$K&2!2tK}9b-JBCS3%bnRsx)9XMB4*Ku$70>-o5axFjK
z9pkP4(X`r|sau4f^yA0a0g#C?sos3K9X<7rI_cW4-Q557?853(X|Me#29rbGsOWVw
zOvXb@CkNO+Si|P#CbrJ4VQsy|<$?qW(x#oaHD9^_<`Y5%WR?=nYo)Z}Ve0Oxm*Li@
zZdzt6Lnur_lAz{XXL48%?cXOmn6EtZ{Rh1NK(pILJ*Pqn&s(tTuw<ic7Ix;aw8=IM
z)?ib@lQ8)$4;(rHcBQA$3%5=9V8p)Boyg*4x4hN(SWg8Hqx#L!KX#GTwK1Uk;zDte
zT6E}(jGsqzmLiuW<Uu#`u<@e<93pCn#|A|G2!@;ul#nRHcWkA+KV2KasYE^{Way38
zj`6|u9mLs$^W?62qDipUeh42NeH%yf_t45$c!Tm!j?z}d^iO&Ah;{`j@(~IkIskrH
zeh9Ba$A~_XHg~E7U~wSFHSvNiArc^`3e;GfKo+If=rc*RNjCK~%`uzZ#bA01Ywagd
zmJ3k_%x8G@g+6}v%ROveNO81Z<KTeQ5UI%!l{E^l!_6s~kIK8&dErF5)LfcVDvh<x
zyvh#GA`Hs|;E08R0d^@8m9y=2Gwj}(;NW(F^$QtB#J`|6;^zFgVfEK#RThlj+s_tB
zF8MKHoZLMHkBAW<_gYzBzVt6FL9{5^)J#1@E>4OeSNcvH217*j-j@{xLWf>bpGDQM
zH1Nu1g5Fw+$w|TJk>5?!Y3F^xqHPO`mh898VO!@8P4$tsIZ}oOn3KcJO<j65oYFp|
zaDck6Y;b#+TMEK|b$e{6=fn!J6zR7jBx?AxBw-ss%WFQbu=C*<ckc|bvwMPmpVD<x
z#MGa|N(uGc^nIthiQ(c_eDmPt#Y(>3o!5uo9M&)YUHlXsKjsbqd6Uy-T)+75XYnuJ
z$kV!h?dIRCfAQ(Rj9zO!9?$w5xd;)2Hs1o(WP+XP2@VccvA(u}t#hl`*z9oWAUOhb
zUh)8`Jc!iHIBz-!BCV0-o>gv<DfH!y9UBOX<U?kB0L%xz`~5+?hwbd=(~W$BJ#7i5
z41qrTFkez5jpf5_(x)lh=>jO#{Z?yq{k5Bi?O!REESt29gI%bv+x43dI~5Gm`cLwT
zhH@Qpp>F&PdJJ|!=SNw2mnjKa#)EB`L?{915=0)hy>RqmC}Q9!*hjH*5DOUXI}*Bk
zVwjxL;NqC%9iX=%H75JJb3FI#O(gk<c`5P%Vi-F4IS_I6>e1KGBFvGZC(i5J&{Hab
z)vVn3a4S0Q(x>@<_mn&mK#?{p`Eb5nB4)Z)A^}>nCa3ndL{JO!xq;KfrHCwW6p&<v
z4@1I0h-cUxyo|NZW9qBXX1Ty%IK}hd8{tp>nJsK>H#j~CDmv`Rd(T<nW=#PopTgMS
z;v+L`yOdP5x#h!Uy$@bLbS`TPXwZ7#P}JnW#Hh*`H{PD&%a3Nl-C%^ooNgPBWicT=
z75SY^s<S~O!JSC+fzlZ-G*sS{=_OMwx<f6N)?0JGwnHdbWjl+z(hxDwb;Hlc{Vbot
zLmxnI_KfMd%%>Gr*NEg6VR%5%u%?Nmm2ZGV`UxWFhg_TZ-y{QV&a^5l>H-vlZ|hNv
zJ=gg&8YYWYLA{X1xwN0LQy)+u7@wm3I9M};#93ES`WqSglng#ErH09#X->U3#4(<X
zN*o<ead+<o`v*fzMgs41Z;WWcJ+1|@Fjrpy#cq2YvvLRT?tG){65Aa0$)NfEuP^GM
zl9^6><Ug6mkFf*br|_h_wv)Fm|GVAj>ED?b`=e*C{TKO{pZuR7?VPXsvwdkNrHepn
zk0+?6Qyk3uI6CT})7il0<|?+%b+NKWWdouQ9(N>{OW!X@JAEcCO|1@{CLRH@o;fWJ
zgqX)*u>|qBk(MM69+AGjyo%cNTK{opS&g8l+eCQE@LN;f)lad*st^1x47RhCWTAt7
zRJfTKIuI^Fi=;&3i@Kw__d6qfN~y=7y1<jyFu&Fg_Dtb+5tQDijHYcY9?tWdqiz+B
zJ}t~%%Bzb}UP{=yl!8k!I1Yplojl>nkqHCix&+*)51~#J5$-6*oi<oKPkVtxxZnBK
z2bfI{kR()qubW*%QE&&HcmuEA`wcYFj9dG1qeHU{B=SS~e-O+sxqlY_VG*Fz^#b5)
z4b`j+TVa(_aaOr2q4DU0sMAMUMnp3*U@&JH)28P@oCKSTguIheAaf<nGW6%yFqqv!
zH+uw4RiP>uNb(upe0_p1d~uzP%IY3)a9}7?fCAj-gxGa?cT=W|Hat4j<SH<$OQzJK
z)9^K}v5&>q<cM{1y#MwTU-`EM0#4?hD5|NmC611V+s!Cz389W5m5|#UVX~h@uGT+W
z9U9}Tn9J_^`2_1&_yhhX{5+I(Y9WTt#XD!oeO9m+cyJ)-lBh&DYHCB}ny9gTImXSm
zrKPkohI|;~91uUwHZSDyIR=z-pnOTS%zyqn8&qAV0ckJ<LFf=-Ww8Hf87cF2l(cQB
z2-`Pk9g;ttbSTnqIJJ}0bJZ&5#iGX1;S76wLpJzF$3raUGZycOqY4rKBbdK%RVG{#
zt9lMelpt?+aWcJ%>-*oRv!p1asM{UZFMWAh-9G$jGX6gS4uBmIhQ;&$Ajx|Ft4@05
z|2QlAgYRAYFY+%u_TP`suRMai!44Wi0L=SUXs)g%Kr_X7Ji=t$#?EdJtE+3+KDUbX
z%?{d~RGOGX71~{D<4V$};s`9J5jR|+3F^FRE&I{9GB9~R1PM^@-}QizHrBG@L%1N=
z;<SMrA`;-{39n~X?v0k%@j2Wg41H=P>6ka}#EMQw;uhha{(K1?)%gjy5AKdVtmj=G
z|2-RYjkq}$b-sYXu1k;9ZB)yshIs(8VcDiE7olhXdH>Wu*gk;Mm*J)*C(vt_CQ=@9
zacF}fB2pr%o3^l$93PG%4vI85D%cVyfZ+M(zrTmuH*X=&Cn(C&*=ZVq)z&5Kj9$a;
z>~(ZnRP*mMN@5_%$hR2kC!_E3{#*hme~XfoAE!A;?!6{?trElnwTmpUGYU3#4Q=#N
zIOP$4AzFH~8kPb2&#2uTA;*Ne1ipeNwjW{wZo=a>!*PFvH(r_I-})0P*uGHX;4pCD
z6io0n--Zqa?V;7MxwKgT9E6S^zfPl7xmlSfJ_0xAt*N<G)Tp^tgO!yOcW)LL9vA4W
zWSGxt%;)MLE1YexyK{&QK@$CEjrMK&(3+N;uv;S@BDo16Vx})W<)C{~spq_S5}f`e
za75%f+<gX5%2V$=H$Vi57|Ra_ivLfkPx?oC0BM_ufkbGv{o#J@k9VvDzBd;}d}%}C
zNP*WlB{r9|S(v3b-97uqX$~QsGjVHJ1l!~u<vo<$<yINFrraox-w^@0G>gHP-%vik
z#O}!iJ3D>s9rV%f4^dV#?y#A}6(TC+RW5-%6jlj<cZy?VQHE}7gT&|RTgTtR?(pSB
zp2qY^-Es5UpXisbz4Fs${C`3m0GSe1Jww0v_J7=Df3#>PkN#hZdNO+M{lAfZ?ED{(
zAKv;BhO-HVi#|_C&KFZo-$)_#6j4N^jxi1ok8yO^MXSAnt<5!To$Fy`qlL6Zz1D^J
zNA=b1o}dAY3Q*KwIZcDS0v&)5R(Jp9yq9n0ArP-g;9CEJVDq!Qs4|ajrG%V7UTDO`
zN_4XcqS+9}4DmwSRNN-wa@+<B_(gB8x46JX6v2})BjSin!N=*lYRSR7Bm(>NvT-W3
z?3@gPjD6*Td+K^(vfhL+_$XFCg&{?4d*pUpQI9bSbjUlCebJ{(g!m*oG)2#bDEM5a
z?n`>TR4PR9Kc$Lx?oILH^Vg8&V-!Wfd2c@I7_D>-bu+`&!{1?DdL}lRI;9%_h(vx^
z{71-t>;%y7O&O2{fh-~qjgo$^JVK7%^*Otitig=rP1cQ#`%myxwbas505s0ldRb8&
zx{f5xF_^xKN%2R}iqC`O&}(WE5RdTY>wSFo3tg;k0&8o)(IG`|a(>oFuryH^q6Wq$
zcyz8;fT0F%eeoKgRV@q$o2gbA;-9rgm*gDO8z8}ClHh}@GkoUfGYtC_4xip#bWSe8
zK;c-P!Wx2-LHR8ETq{QmUE08*wR9OH3YHS{D{fhU$2;$CMJ{nUmshBvR#X9CUb>O!
zSX;j&0(8UO0f`H6a<4>AIJpH&t`yX-c)zymQ}^oiJ^XfOV;B^b@Ci=KrPDVudF3*F
zZxwz$?FFeo`l*ulh`FDpBK(#lQC!Z;`e=WO!=nNA_xl{>Po`6p6*b)=gI^Nmm*WCK
z$n>9<fs@g%C}3<FWKkQv_6E`<#s2VWef#*idS30%I$3L@YO13#UjI}5;*A%Vp5;%`
z@e|+x_}Np|lcrz%^Z#p|{=!Z>e)>0)Y*D|v|JBL8;p_R6=l*!S*}H=Ae2jTH5snV0
zH*HZ1E1J5SH7GD&3~}$?KKA!oXm?kzxw(O@^Q%~0rxZbqa$X^BMJysh!AH4}<{HEo
zAn_VrF3Jw`+V{(ub64WVD^qfZ7Uj!fi&)R2uD#pq`PR)tw%nq&?F>4C>Dvur@T*PN
zn$x`xp>Q>#OXM5<ju`MuqklS*2`#IWnlX#M907$Or9hkZOTQV~3;mxwG+}CpmKn8z
zB5ALy5g0pe3II_!<~A1>8QSJ0+`+K*YXE7ur(vHLD;cgWYLnHxL6bN5?zcWbgFZL%
zk;@e5pElf;Y#VRx{a2Xd0IjHJ^ku#3l%ao;_)S1Yo}hk;{w4Ym5+L;eAT0omsI0M-
zP6dm$NcX}$c&&%FdM<H1mDRsgIbd_hI!%(Th?w~=PJoml))htlrEKc_x|AePu{V4J
zk8k}d%92n3%Gl4bcX)y~-`K?Gf3}OYtr|xs5)x|(HoJd1!0NAfr!mkFS{CxL^>E+c
zEKXIk?Z|L}K?=G>+AZhZ9B;lf#pix;6-lb;i9nOcrHMlS$PwWT$q4>tr#Ak9L%0lK
z)Au`r=MfJ>DEV8LUNC1qsDv?xG$4-p6X>i9s%?lq!jk>EUIcm5fl#q1s)FinB{+XM
z!Qma9yFuNix@|gFL$_!7@cW4$Ki5tu;PANkL=8PV%FM9}n{5g5Nl-o+d?IQmRH~Oz
z`YA@7MKJ|m<Iw{BqbUyekFmFZ5|75Cx~OJoqJp1i!$#knN1G!?iq;AP?iMJBMl0!}
z(^@5IIh>4d;P%Pu^>}t~k!Nw*NqZYb)c;50`qjTQDnDe!zn|9QC&U2=k$`D)viSPn
zT+RD$cks;b^s==_rp3+4t9O0_=U1P}pV<Dlu+hGZ(PE4li<s0(8`Wv;>eMA4M5Tt~
z!3g925q55Mu(Gkqj=;u77wxX(VJYHC+6}T6MOxH+MTmoSA#GX3n3@NyU!&NIm{^-m
zU5x=6EelRxw^XI>;6M4<1^U)2K#iy~Sgw>#UvDKvOEJ2|eYQCTu{#Iop24e&$0sj&
znc3BO0;CVuqzuub0J}z)9C5*dMLd3ElSte{uolf3G#~7QOV@0(f>I8w?8zIN>IK+6
z1a;1q7Lh1GVPG~*?kfHMOoBG_L(-tPNo7<GdYuF>eg6*j?%hS)nWHRfMKpwnx}IOe
z!T5FD9e*F~yu(d^i0LmhE6MSL+wMx^ADIh@BOfu`PRu?-3>>^+qvgNSH9N5tBCuMo
zVt!QIxk%q;S`s>TI;QOQaTF;|2O|?G7!EZlZMuGbu*^BgaXfw(msY=sJYGk`kQg~0
zL%jOR5uSXii{2`*x(W=Az1Svo?-aF0y#gM8VO$$B<=Ec#U$uzxJwm{n;eG8Ha4Kgl
z&oFc<=#_+wtgf_i<Jt(rlM-2;>beg~Ms1BcXV(m<&Twm1tkJCSjJ)-e>o?IV@1)2Y
zRrG4vt9Q$sm)vRKAuJJgKEtW7;XcQJ=P`G_I|X34Yh)3ihPnf0h+ZZbBz&bILd)al
z-51-7e6JFhT66XGrY7#I0?gTzw3>Ia8q(5e#jMvtVp0V0XL-UzP5J~9csn|r;sAj_
ze!t*wgv0$lj*pHpnT=63b5Q9{lvH%L?E7-ThB6F2r9i5>tX(n9?<`(Hr`1D}G+2~J
z*z3QH-Qk<{v^remX{Wu?T3IQZ>8)vV?Jp0@H~!J0`spJ4{e(LJba-PnT)gmNk>34e
zH~yLbMV_Af-(_`)!{PIj!{J-;#kJ4Gk8b`FHdY_Ow47o%KS9|nL>_}20taVNQwW-%
z6wOqqni-Cc1~@)yq19T&`o=mow^p#W-bU6+L^A*tTJ4Cd2q@H~GAx>`lqzVbhT1{~
z-n-Q@T79cYq?++^b-T9o!s5b!nq)T6Z8{2j^7jEcV72isx)0ue-*yo$e0BZ(PJ7?H
zH>Rb;?79iN?KiAPw$z4?WSABt`+fikc!wlp=iBBX1>ODv9B0hPeYWjeWkP^BxTsK^
zB8~c4`&)X}Ip=73bM<Uvk4UuFrQ>88C%AWOfLC9-iKMl_qU4U@ZYRv+9-_L$)uZ1=
zmPu|jX2BmOQ&L>741Xp6u?mqf@5Shf!$Yqlr@@?~U=vjeiJ<o0v8)L7r~(GO8!97D
zEwM-gBtVTlcOfiL6J%C-UVx0VAQKWr9%6s=Iv!d7V^}OEi0c$_GQ-a90p5Oh6F>9$
z9#%IhjE2gc(dd>CB|fbVssz|!X`J^X!!j{*=tB5de-uZ+Q5E!#-9&QnCmVpgm14Y`
z;MV(7JoZV7`htZKq_V91ZW(Ft?y7fgb^QiV19#Px0^3vT%o}s}!!iuG6iK^@=jOAL
zBSYgEyxG2!3Iz||g;6?JxDb23A{A9&^IU>fF98Ww5}DNGu#L*=N|l#Lg8o81KxZpo
zBpdwHlFAZELCJX16iTxwCPPn%TB{S)q})n<8z|*U$(_-##PQJ>d;0?%9`-RB_Zilw
zoJ|uK0`D{0rELJ^Su@UL)0=i+hW)t-R>JGDldW*Xzo<qy8DGWT_>H<heZQ<Rjq_}!
z-ODyeb?e@&`S3p)Rd4?0q`Wur_xsap{C@%+fMvrqEALL`(Y^numwoCtTG1!}PkDOb
zzZ2C3cKXjxb_Ori=enQHAKm^XT<$)NX<gRC`9VA{Bt0OzfNk`qm`C%rL=-JBUreyO
zbAY|QHuBagR@YXrzShP1Mh~qHMR6k66{S*1&>}}**03Opkq2!7Qj8_mQ&?S+yVOlZ
zNi=~1fhXDox9s3P4&1zPkiQ4K1dEz=V>9C)VgcUxhUG>!stQ@Fv9;gYg{Z!syH2-<
zyUjD?5qL<Bjhw>$vTg(2gupn^;lw?{iUxg&<?f}bfE$@Ep|{oyNq-V|Pd~%;FE9qU
zLk5Cdpz|qWl=ot^S4EbL;QsG@_Xg@{f`*#x@b!!RA@knNHgNs$YnW6!$g{RSBQbJf
zWCa08N#~#Eo<#o2nb#<Zh)o%%0Nk_S3sfm<wf{B`4Eh%3Kh;xTVsoqeuoQg;j)ilw
z<aMH}KuU}{j`SH+H?N){UDv_*C0tthBH}m`EqN~Z9OLy@5Ad;%_t0GhdMnhL*!&er
zyNM*NX1@beY1x<=twXpPL3$=Y2At6eoSkr6AV<~83AKqWC0>xXTDbPc3?F-DmF0@X
z2?&LE!YJIM5AyuHPQ95!>vX6tzZhAT1~bUncMV)3w^`(Fl{Gfk15Fu2@}xZ1^g4n?
zdMd(ql{GFE;{73qWYBZ1ga^=BNwB_^;_!CK{ZxEP>|bQ;Y|hxqGZa$MC<mn|+GEnt
zqzgf1d91ugk$%F8gjt)GP9stN(F7;QWc2$uIqqXN8KH`1T$|7J`K(Pqff}^~VpSnw
zVq0r=8GRD@s-v3LPmWI9<29HiIm&W^;p7IckKe0L<~Pcs?o%MxZl&EkO;=H2{@rQ)
z{{L-Sz5lzD;@<T1e)rRU`~*4xcKF3HTD<k)G`{iQ?IfT0EA8az|7|<D@ZTbq^1=M|
z+5WB9%GK6m>E(?t#^+Z)kM;OGCW{fK<q&nWaAZ8!R74x6up%{YL{m(s1B}NB_IEP0
zT0N|9ZsOwkZLDnyGC+JNYVy(|N1!c?Y}RI9Xk!**@dpdZjGlu%Eqx%#TSS!DHkdNV
z+lo01Lg~Qh`t!+RT;|k<<K{Oq@5Sr&1yQg?4zkcsafE%xAMYqzG^IIo_a~0LgQ#SQ
zGvK2PBkI}tg9Yx>1!AjM0M-j9T77baDr#ae&U&vNr({&znu6F)={Gft&S>}>78L0c
z^uMUFvYO)i-@b*zgA*jJIm&9G?OLRvN;}&|e|iJA$KOMiw?x>7h5Cg6$dNyl_;HyZ
zMfdbOYh7&wF8Q8I07cS441+1_1y7KTm!$yA-~^Dh*mE=gL4>@FE6M#+`626D3heJ9
ze-cL0UJc?G(BE^+=Y#^hfy=93!JL{NH6&V8;$ZI>SKr;lr$4iXUa!K)`XTXq&6v|K
z=sqRp41p$RL#!RJl-&7zm)naKIj~k2!octl0zZ0|bg^^+&*Qa~7H(b}U_P#q<zQhP
zCQb%OkSjS0Pyt&Zeqe*hU#msjJPMpjy&2AS7#Uv+OakkyE7H0tx)tizs4qeG!d*)x
zlx{uR^>_y`r1IGMnioKCwZ_(^1berH2M~U$TN|f<K-*uKW2lrSQw6krgXR(m3{e9q
z(prhL2zeSYB1R}0wc#C(COEk@!r@ULC;b6t6B5vxqXF&3CF}8X!7l~*6fY5&7Q_e)
z;qu;8b8436Y8K_llP=on3bHuEydL6Y_BIYiSL@;IR$11gIEu1%mXOikK!wGPDmwg6
zr`5gRnpSsi77X<-jTHW{96!Mh03CiaqjsgE`js~(@jJiXjvs$4kDvO>?RevV8YRuj
zw7OltvwMAZegB&{xB5)_(Av-8LigdgXbOxL$5>Qj@wPd{3W}x}8K7OFQcr)5*=&m0
z-4h({?xE8qp`mqbZ1>RXwK#`Wlj<Nv{aQ&tup1)-b8!YliA=89uHBoUpk9qhgR)gJ
z{4U18V!)*;Y2IK11w21CKSVrespQAw!WKZOjJ6V#!cEX$vnS*E-#Nk~ZJ-KqD!>2K
z_Nm_mIeCLAUD@NQ>t!c_E0LBVWB#HMkOyhQq{PxKdShfKa37`)0@wSCaqVu<<<w}m
zQry1T$2)J_LeiR|s3t^56?n96kVY+}ag4W*zJ{2T<_PRh$%qSdF3om4!(Z?ql>(;w
zRT3aQZmK~h2Y}H6hY(n5Ks*5!MhV-HNVw^`DcZfs6tlJ|VMOEqY5e9&$c!W7QUEHx
z8c@2BrYZI(FMynBsbU~snIbjP1sLLq$Jcn?ciPmR*hpU{=*RG_D_&S8iJJBHIc!Ng
ziL9?<yxVg(bU>N2()eY`5v_?BCr~!f>Ezhkt8sX5fsIRTOvV*TOZ_<b-M93%-?K=L
z{>|6*hq-UNdd9nJ4JbSp*F6tkSs^ZqaSH6dPPyqC#(U<!&TRX=eifw2J0_kg8>Zy^
ziZ6*T(g5ckP7uFr_ZhAjy(dFEf;DNRQ65tjuA&-zDkmhTDkBmfmFMLm*h9To#^Zw7
z`bQ@N9G)E3qrn(uIpe*Q3_UT6B$rQ7zRg!jKJc8;Kp=eHv|jS4gLc*xku8*%ERL`{
zcne3<>*Z*1tFACelem@V=~|vg8z}1ei;Mc+UtLu9ez(Bhtwq%jyr0wS;}6gA6Yc=q
z?+DcO43qku4<~r%f8I_W{VVO{$v>Y*7yoA~+3M%2W`dpJ*BAE&-&<_8K9fJR{smlE
z`$QZ?moQrNF)0Tq>p2?AHCe4M@dM1fu%Ad!RDr5lU^E(GG}^<R+Z}YfD_GxJ$JX{L
zR#tLu_(IBqNz?F#Naz5S6;dw(`bTX_!|RTM4M7y{$QoH>swx-k2P~UYCce5Hs42Le
zp2~iq`%gWM2{_PR>gL0!XesA!!3Ia5Vopui%?!Jcl$bSWo0owLOGHOywex@3_wt)R
zM>=5{oc_%t9DzF#SQ4xJ)J@HGftQ4_#GisLdwkT!)J{n$9cnL4KT;E%?|=6Ons|(o
zBVG~^k$FIO-0f`P&dGN$tUpAWQ)fRRLx}-Xd0#~VNcNYber>_)Ayg3nVi{lxpMp(S
zq<SPpz|ogjYw;iSsaf<NiUBR50rr&b8F2k}02K!hmL-vi7sK8r5mXJ1ml9cm{%6HK
zoXp?Dx%M-dmn4D|BTnZyI2hpCwM~5DQ(bgdD~!k9U^8l=tVL%;wdsxeFz#}_QMC(P
zj!RF!-o4M=c<AEFno6ic7+U!7y$LQo*+xXw3M3uk&^OcU(B?kM7p1aWJCj>yVcFpl
z&ZY*MH9u_5in%A*X$Nl6XZj!5$??96UcbU2A>Ytm=NvsF`8wo7$7lI1{-A6Y=>gQh
z*2NgDl^E5O_PUT{Xlp^-Oz)`C`k^k7l(U!WsJs&)&wZ3nl__Oep+A^m|KJ2W2Z!iW
zls}vBzDyNZ^cpJDYe;iHL_auqQFl$pP12^?oic8r9rw^qJ7}dD^R<TaUECYKSDs8h
zz@)lYHqAIs<E)(~9kh~jL=OB`iR0gzm-oIpt?ztLRD)CE{n64)`@?wrlsEu(gp;_z
zth#wJt8V^{JURDYx1vY?NQNtaDNoM-dW2@<Wbt-=xcl0ycW?>kRz8znSp96g)w#ql
z)o6Z%MKM7`vZowH37JdmkcZsFTo$ZRFdPms7#!fv?Jl~#6>Og)je%8kyTmUcNzxi=
z-f(?uTZ1NFO<?DhU6GAcs4?yu4LMZ-AHN%#VEe{WLNkQ&{5Ivs$ZuTE(DU9DsOFtQ
z5Ug}?IY%oU*~}pMkC4x_DAScc1<r*(|8hyB|1bYtSl^B&p*hh|=`c8lS2#Q+cBJh@
ztq#LD69ytPI*<b0b)Z@_==BnO_uIG8KRyQX5$duK0TGQlJJ}Xyi#^;KehYclVxk)f
z`B?NUxqnZzlYhbourfW55|A1oi2&tp9vCrDoQj~TLmBp#V-AhJD*+3ig_TI^^K$JI
z`S04AICv`LXp|!56g)e*CUOAcc#gyIOE}m0gc=-jh8A2J`Sx4Kc<k{mdTSB-Ck<v}
z0~9>VR7shBGv+@8ggg_UchJ8tsg;-5jMTmq0s3Tfl+QtiI2P3-`nl6>;lpba{M?@+
zgf2wPj8JP)v=a*SrL6(k)_d3H#0CVu;9TM;`1hQaqSkjXz+<w(qF!k$a+#nIu3dA&
zouj~el!wJU_~6$U=U3_mMH!*D7Gr%Y#=(b_5)s{FzuE(`GV4H)o_;J5zWt-0DVx>Q
z7*9&v+auMzJ`RtLF&d7jbuLHwtXRp8qu!gyqiI<-S4;W(<m)5&pGr_;Zk63mR?yB@
zky1Xt8lpeFij&#Rx<9*HPO7~+ii$Le(snx`!L9tLYNo$G$KKyBiv8~v&Eejn>Z??i
z9e;SE{XYZ_fE~+*WKkUy3mp6)iQf7_);#pTZbwi4g)F}K@3+#{7ivs!bM*V=t>HHp
zYuS_O`ITql&6TIIl3zkm6__ptSk%-kz;C>U?+HnVY?E}4isC7nW`yDJ7^6Xsd$-zH
zStZrM4Xm%P@CHO3*2ozkMLB}a(37rmi+P0kq7i4nbm^5e<g)p$`<Jv{wL3LiC|^B`
z*^fbUUu1B9W;1XUma3LyLkbn?)W(=RxK~j-?J!tQbSdgTC3)<03IanOh%ITV+xGwn
z90nstE#0k>{6go*?%RnF8G*|+7@`!tTpQK<)AJ?5(tB4A@&47@NLnK-7F2%ZN0P`!
zS<=OO2mb&_==moc;al|1&&oRNnaB^r|MEI1zq6)4k`5r}AyxvQT$e_Qfh4N^-iDjy
zPAEntzr-~H^3Pa=pFBd;EE(M8XKE=2!Ms9YAQ?<S#mIQJFkF0y!TcsxvPXoeT~~<H
z84eGQaQ((6KKUss3#>62dxy(Va4FA<NqADx8gbl~ASSh#&fdB}H;BGXT07XzUFn<}
zce_P0ES*jZ_ip!D6|mjOFdJ8*>0$PcIU;I64G~el#pHqAd~rU94fb+0Y3r1oOP00u
zK8k=iYNVYrW94c(BBw)mBS11N;mM26`EZ0(KW03Af)OGkPoF@V05s)#n=y9ZkI`!R
zdS5;VIi=M0I+ixVR-%`sKt{Rzs>0Fn2q(uU1nXna?_)Nfp@y{2rCffJ3Z(B53a$U=
zNg!^Z3nZ*kpaEKOi(&ngqWox%*<v4uqn9z5-KnRG!?Gqx-#G1NNtSn#6}p>yRXzLq
z9Jl}0qPq9&ygoQ4y_kP-lz(RQ{}4C;Kim-@*r=+m@6T}kKhKl%e>KO$pUUGa|Gjp)
z{y&JK<npAvj`xq=ou$WXSZ_ZSUt0Z{c)j~55S_=Ym|$LvP&AYx5NE(-R;9E|$f-5!
z3lLmdps1!eJ{sWUXb)-HLw98bTicu1*j_=WO}SoaXu^SKyFriK2(Bg|DPpPHHGR<#
z`VVvcVf5?_W5~I3uhIzHYI6g9FM~;)zJB<&AYwNJ#OVbrc@z$laL9nG0tln^aJx3v
zbSMI(kBu1qPFq|zOt}XCe&If-MtFdn^0udygnl0Qky_de=<V9*C+&#p7;UhFlQ~{|
z{yLIufTEbXKI9w)lPqv{9{a;r(O+CgmglIMrSHo?-Tx@UraV81{ul{RqkbU)(pQbV
zS^wYk;l0A6D=Q5Qp$xgYY+COu&mcZkh8jF1y2eHnFKxS*^QlrLU%es%CZ50wGpT3-
zaMxXOY*IAQ1bgFGuzK!c)*z5aQKE^4c=z2SJo0E4ot|iCkdh{kyg6}!BPY+^B6lli
z_1q3`05zg^*L_Nh!r?_af9$VZ=_@Eeo+UUQr?`E6f~S6FUEp+XG8I7cVRec_ifmSe
zPDmg!BZD1Ope&c@#+DNb%IZABU)B>nn!1se$4kr|0~|FyqhWztG!AVDkil?25R^%!
zdAXkjm5hoIQo9#pQAB8QjV1~2L}-)2r#yZdBcZRP=2+L5PG{H~3~<u#qdz>vl-T-Q
zq9;N;!rh>%5Q1Gqde=ycKAaIxi{=vjEom}j5kdL_?GswCs1D=d>=q73@0Www&3aZJ
z)`%8q68G{}x}L{ar=0&=bu|3@i~8XA7WK{>^ZIa5RFrR8-tW$gKK`&f0Cp^!OF9<S
zezB<bUyGvGUd!VP|A$WUu|J(f7yg%>y!+**p5u7-VtF)vb<s&L#2YK0iZ87EOuX5>
z#F5*0-p7>q0+dALvOMj(Zp{0p66&w9gQJ3(<5cEya&&;!%^p_PR<N<LiOsDpx@%Ha
zNE<T+grtU5tq^%ILP3teya}X;6}EOekB9C;*f01YARPvqWH2&X<Il~C>~~^p?5zBG
z)_%?9g-w~xHf9&>OVNMrBXN2E=~5<_1_<`~WuqM?s2$qr2}>c(*`j$l9n%**sO@1<
z=S0}1sEvL|@Tap%Nla=ZnsArD#jFn`Q)h&^Z8UA1$vUcXfLr~qGnCBg%rUY56|7MB
zo+Ey4^5b~`5$gbu+KCDPSxSI70?Y$YfgVnpFJm+gy$H(DPWuX6uBLx6r9yK?d|k-t
zl|jEz(xFCbGH>NQOhhFXCOywuxB&zUpG@Dzc=5Anrx#II6(VlCO(?)VZhW|fPkfA0
z0Tqt-P5N31YR*{`7C=}}@8+_>#pdLkc22{42oxm6DYq!zqZ~?cM4sok{^kr%e|}w1
zA5nx|M#{n_JMIy9s;P+W1n7~q`!W8DeP)=pIE7Mq#LEmNJ4o#Psj!|;iI`UuJ~M~9
z$@vpkIuev4@?@liO?CL9{m=Cg{I;4M07kBom|^{PJ4K67$%tC#mN+^X;$(1)<Nh(m
z<31MU5VSW^4nIy};k0V$sW~aqgMxlTTZKFe>D*|lfC=)b%SOKycNuS*H$xnZ-pBFu
zgLqutt{2roiKu92Q41^SCY_+Hu=pnhcK&Wr?|-|f5AH7N<3%N#;?i!i4DFvq`~Uxr
zKO_!-9ruT~#PXk4_r~+;-fw5g=09xXu}|mG!+$Y}H~+mfPB+SWh`ar7FYfh!Fze-)
z(sR8}rx$ylLAQMw^Sa=2!bLUY2~X`Ptw_&9lv0L7Uau_jf~AUQ`$st3+d-Chv9`H}
za~HR8?m`c(cFN^R<aIM=parz3=&g*HFCcy2H9in=VQ1h(V$)X?I02z0sN5S<Yx*ns
zO+Akb;KSNrXH+Cu(tLwY$y;P&(5Wd6`f(>g9<OBMoC+^e<2?wcq;Bm=J#wKNjBe+g
zx8z~=>WaMm-DfNe&kb%+kre5^+n}>1s*cnk>g~7puygkw($+-O{sI-W1PNNn3f|fK
zZB+39DMjrh_~V=*dMFx&bMBsux@i3iA<#GgmIm;t0d5a$8@>0}43}M+!b1A9@ec=E
zS#`R}+nn&>ww>NMA0n$P9g~gmE<{E`3n~@@(3E|Mi^n-i46rwN1y7v&b12KPs9jJE
zY&^ny@9g7|M;}3V4Hyq1%(=o^<{`Iq6<l9i8CXQ^`0IL+fwbFFk9uEQVgxn${||w$
zf+3_dK)ct%?GGlH3@XlP&q=^bx>YPqLzg;O%E9ZIT(-*-@R%?ee7@tixaUdp)kFD9
zhf~SZ+*-`-Yh0P5eTJ<Uw<?{{^{s$Kx>-L@$(K%RfOZSwxU5o{UV}~#SXpUdrAvNq
zfs<h$qtOZaqX9<4A?8HhYo<U{FrrD&zOs&4ebTR8BOYsW9iA=33#k#+q`=oko^+6<
zEgq$!Ji%!89`4QWVX`>Dydqic3R#xcX%eTc^kQ10IH~I4-&r(wetTZ;y)>)#4ws{R
zS&#ndo;LPp#{XaD_(SFZgvaU4qCrs|S4DOFdK|s>A7=5T|4kk}@`YA>`7h@2#=o1y
z$;twEaijm<?1TRA*6Z1$>1O9s@kZxqthOFP*+i@~HK#H$iWW>w&P`4$&5>$05p$WL
zs7UJa2uBCIxOsgQn_FvG-&n)ST8Cvz=^UJ4&V)12tVjg`69|bjP>L{zuyg~cGT;xn
zNc)Fuk_j(U$`5KQ0Y@N{F>?9l)8xVcg;*+y5~$uP$Zh9x5tNDiSaicszk&wF;12<N
zL1le)fZdOCN{o|XgBqMbQDZ+2PMJ`~fp{1cEoEJSKhr3|(a{udzfO$)2`W?jQ@4rq
zA$qNgxHtF#juvksr}mKw{hQbW2XVaX`VM~-%}f2XIRR?)8Pe6Ln_t(`T5^rlU7k3Y
zt?C%aT(T0%&=>@B&KYbre@mk$-)ZfCLdISqed*p#LJQJ0kemQ^yR4}S3$xIzrd;)K
zJbe?F7GFUcucM+Ct0cyf6gWOO#LXL<`1q&R&|9rAo%jY=(iMOwiK0q6pUh#kXXw-|
zP50l=OOI=K_tYYJi<_<R-sUB#e&+3z+ZG?}6gdBA8<SzlrE#vpCKS@KDBiA9|FC5I
zwNs=G_i62ou<4g0FdE0eo`ZwVq^yV4^Bnf?*MTejb55X%6WMhJsX%Q$mSv)8LB%D6
zR?!|pim0R>NlgBe;SO%??_e@J!fZZ5T`hPaGF(R`_YuMM#M&2+(|1j@;KNF%MWK(J
zN$PdcidtxAJr=$qCBJF8gPrkJ^k*MpQtXg2D=}#p5$Hr+thCmN$r49Vx>qN6|5AVc
z&NoPr@Bep{e`fUmO^-js4nTM;n--eL^Xl$+j=SF-Mag&b_@V!>9X<K0t@y%!(9O>O
z3Xxp~)q6NRd1Ds$d-Z1P<LTwKFJgP;Q}Jqg36o-oc`-y;6ETKV<7B}*Wj5U&q*E2O
zl9kfJ>2!?g?S0(4-9nZTe7cJ5bDLN{*F&cz403{6DOX0(3z<G@>sibwO%S13NW|i{
zM(#vMcO<#Dr9j&tWezwJ%{?xUgagt%nLwgu-LOtCKSIctv$CexB^Ex4Oj^cBPLxx&
ztvq0b+f}+KIEdf_D)ll$Js@d^!HLT$hmH$45+X>HBcZOK0clp@g&%x?vKXLAC^R&5
zgx*tfr@vXbkDDi7Lq>9D9ASyzkGoi9_Af>D9PLXLK;qH^N)FUi0I}=odpD-G@w*^L
zi=@o1@yDpJo*91~Q#RO!0@z?V2Ab2hw`V~vjMYH|?xJk&4K)bj=OlmUUIBW6l=hgT
zkNxq>cxe4kqN-*{X{@RWO*F-O?;hcaC)Utg0|qCJ$YoncJh?TB5tnNJ&8czl_L7MY
zxG+m7l}SYSDBPj?t_EM6Z&F%pniO|#OmXGOwxoYJQxc@21Rhf`#VIMqjX5jk9E6g-
zj+85NY1v~7)(bB<U5_RO9tvaWYvVYM>pCSj$qEUXj$!j#(38{dJjqW}$s>@oB4nKg
z?Y0_yT3{tGIHG@)e~+*j*0_G>SuBb@v|1FM6G2tgCE1@<5}$9k$>~l9BoTj!QbJLN
zJnA7&drXc+RH9h)F`8Y)$>J(Ti@TUr`>2|!s$sU#jn}Z2ZQ${Z3;4w4$M8>H|6W~G
zb)IGA-@7yV`akx2j#o&%-{_x3`TwTJnFH`Il_I#+pI5hjD~Y;)KTjUI)QYeCJ8`q|
z@3qslU#goqPG+x{N3%C)?V~H{xs_+q3%$>wmtABaY`*AYR*l#ZVDg|wz(R(SsDni?
zc(>ugWFVSiUW_r@Kg7}AE;`*F);88~?%WpEw>!vMw26_(P|b>4<jK?9nLIcn?tsV<
zTL|oIXb@S48AT~7@a%buuXF&M5jOQy*Zt2)lyd%342lci?DLeI6f*NYlI);Oj?M%A
zTL`>bgkvmd&m{BEu~kTLG~!@VpYU*uf40$*52df|75RO)lj7wUKE%P^J*4fa<g{7y
zK{jq;>*rYqZ{7R5Ks-kjwGky*fQk#*Pa=QI`P0wV04UX(eh~s<!k{_|{5R?VsLf^^
zM#1-?O=g^ZGMQ=mUezi?ugjSliPq#Xu|rT3Gezc_{$5TZmF`0C(9Tr$PmR7y@c6%R
zt6z%t(;P>m*Rb9D0+Oi5>xJOlBw672@E9N7*v2P5v&vk68IiM<aW4RwC#t#TJmG#H
zjE1EO+^uSPEa#cMr@H)RyZ<E{(xBDOaO?UEU;1OzW;Q}eT^_YC!Yz`(6SMOZmy?Y$
z5q%Ze3a9%L*T#9Dl&O*zxX9TVe{&Xmnjoy;iI_oZ?ZfV?LJ%oFXsd>_QMug|d8Y>J
z<1`U#j|>ig(Mf~hQG;?yBtT$un-BpKO`dT{pOA*tc??iCKT#Ck=e3$3OER=bayMOJ
z<gBU}7|rjXKfi|l`~!~ot9s1ke$-(yN!sY9m$8~(jL)r{ub*DKj8Cmy!b9CI#_0h6
zupZY<lww|-+#x}%Qo5`K$ko~Lqd3kSfPV#NplT+~w7hn2ifey0jn{r7iynF`i!T3p
z;tOPP{yCcPcTb*O>>R%wchd{l=su3^&XZVAwzx)oR!^`fC#YyqsH&TTXL%pcssh@v
zXaVp7uP~iWFu8k--Mc$zcS(wP6<gaISlc4bfaI0QWhb#A>RDf#Gcb=(P}HTGSAr61
zzK*PZNKmrP%fXS}V0%*3vM@=QmUi6=-4DS=xOCWN=d9H-#JQ9ru(yPfjv009<=|Zw
z>xL|Q>Z#H~a~=rsCiSwoK~B(r3ho)dvopZkZ+wU(pP?*BmXsnLLwzfBTbJnBVlcnP
zI^!IU8R?UZIggP=_vBF-0Z<IRt0Cp95=TMm{M8}g20+vx$d?bgdowiH<?;h$B&@2`
z-tK<P?aqB!n?>IOtJ8H+URTQ}Yht1Eb;i_4h2USh$BIR%sBN%t1LQ2y36b#Sd2_<0
zT34t^5XrxBzP)7eq^no=@z@iqSXl%5$1xLHEho)BQbi;{|ID2OXhw5cHP_vzSXMu8
z-JLEm?l>_n3^eCR)aZ2D*u6Wzcvzy<ilu+Ysld`92!T_j$*PzLa7`@{xVvVz4wP&v
zN_pHI$mXi+1K`s7MmV&TfG?+&$XgbspT9~ip=UvDjWaR&d7I|3AQd&WxEVD#z6(tH
z@{g2AiTO`xJdylbEkeB-b`IzvG&R9t%JY!^&EhEXgQyXc+;fz3<etS{uE}qjIcDVn
zjwY{TIR6miau@Svz?%)1J;o{WWEEM~K{wyPO1_1ad?Q}XSFx66@k8zPnmGMYG-r_@
z?itb4sG4e45>#>j#&LH12#zxc;9tubXi(OJs>I;>6z}}sv-rY)*2c&Gcq@78ucT4@
zSyES@*SF)_qjzy<5~CZR$7cJJ*yw&58|{mzng)x4WM!wQx%rU5iH=+Bng&sXyU<{a
zUNpgUKE&+q0ru~;khfQ`zPX02t#xc{cG2o&3Zs%y6J(%XB|UqRA#PN3D9GEJQ{Z6D
zfZH4z;Gkqn_EgJbI+<5(1sp>52JOpvqy|46LEH3w&9>7GFr%i1!6GKVC-}T7I}Ot3
zaVcXUP^q;Pw(zXsMlei7qm8g5TQeakFFgAJ8W8D;+d8VYgKUJIY#o#NK5n0Ui=lsl
z!>KWje5Q8w(-yiW0Az+<qI}Z=kbi>8Xc|C-{WX;!H!T~n-~~Pw^U$^#(9kiEy*hwu
zgXiYAQgKr52Tpw-0KShVts7LVL+PKBrZ?E&nL(4^C0T;Q$?Mo&`8?8iO&yU6NxH!C
z(GhOkIFBcuA{3y;@xF=RnS(}_M~I)?MUGLIppi}B;5jaezTZXPfmiBnwjn`F;XES^
ztvtoSeu}+2Gd%L~6?TFQ>JObo(;JX4dhb>ZVDWdY7Sm)6rMAKK>j>qojJfacZ5eC`
zO`f?8L{K%u&l>x={L5Q3?()%8W;r|rMu#<Kg9gQv+8_tDwU#U>g-;X{xtK1O*Me21
z&|@eaf<xDx5VRk+SZAMRBT1$Y7w>VDKPYZvQ6I{BiAlpEM~V(w(I%%a+u0g-;mgxD
zQiA<S&5!P=D*1DX;M{ISSYOEyH7&HF3`IkT8Ziyej*sd%a{wNIGf>ofv!dSnYTOyW
z(!v+stIByEqf@8xB3|GSgJu__$yMALe+R4CQ`qi)1{<9xu$mHiu)w?+u*N*g@N?kj
zONmUKoXs@T^~hl$BU50pm|_3k2@da3Q=%@`Hde8HVGU~=J>*0nWYj_yJMq=%9OU&c
z=E57O3Zd(n$dL)y`jR<=&4bc2E1G8G9~k8&huwsV9F%EpfEq6&7aC9>5Er$5pOl~(
zj2~zf*i&$w)U>&)MNmx260LL*;qjFQqNyYIN>aaMF!N4|=bpWR<HJM5`2r0|G%~DQ
zi3=7bH3{Eb-TN)B;NY;8BOss8aPYt7{Vn=e!_Vb^ruL^IKq17=ngHAbz(ec~#W>|S
zxe*Q{MvMN9iEZ&{P}b>ZujO3=<E{)4CM(v7)}Rp@U<GBC9iV$s<v%OyN@!cBu4{c9
zP2R)hwJ)PA<}7x^W7&*x{rx>$erOfFUW3U<43vRG(khtq>jpl%JiCWF0@7#@%X@A7
z)Ay&^5aJ0+J7`NoaYUQ2!MgSS3{QS$#p^@=5XT{yasF9YYC$4>O=^g<>5aW5kAgYw
z9H;=qF(RLl1vy<MQ;8#KBLB8XkVkU)G|lQV=B7sDdkshU^ATw+5L?)%!l)pL*1k#Y
z+Wiz708o(4{l-{%Pk{C~B4fXTG@<8AB1r>G%G=l<-^66Gi$!&elBxpYiYs5Zvt@K1
zB)v<bSb4h2a=qjnbF(1&WG*713MrBbj%(svq)Ci++Mw5ou(n1+5TixtLe$3CIl^bh
zM{%5u_P^0#%UJrRE{eV5Rx&@XqVbh>e17qzNB#qRaPkA}PhUY%^$|65jLWMSo?JuJ
zZ(%)u66boK!+QI1bQ5k^!IcC>HPhxqh6pIb)(j=*aY>f8<Sn|!0<*;gv)x1N@3ztE
zbg{O+ijA!eY;1PW?qwXoaA_fJChZ8#s#X)siJYaq3Do#T6d7=`KhOaP^6qj;KCele
zssfrG05C{5Xyl>Ic~7Mp^c*gy>cvv5hS^@pVZOlw5*9f%LOYN9s@H2!D?_KGY7#Zb
z+hV;a61;Kk0Pnx^p_Kd)RAO4>T=QRGt#dKn8$4eR3xfW;oO37RPEnHfMbqeC;c@;x
zt2wHY8bj*@NDOC%_bKn6Xx^2eaN!8ZwVN^UvAdAi{O8E;Xq-f%+8aSL{Pv^4xyxcU
z40i{<oT#&j<~s2N44H`Pm|N?L@wc8BN<7rCl!dFK9CcFQX!0^HtUQB=(ixmDrtXFX
z4iENl>-Gga_Sh=gs})zUNa<mC-Qju)exkV_yv7?~vFy$va4^3bxUk|S5RBr4TSE|d
z3%72JSdyEfX;R0N9vt@B-tBUYc!HG664v670t@X=?-4@c^Zv3D?Fg3F))15>O0-s=
zpn8e&sa#JD_W~FnH~eoxgvyC_8YS|o%6D5EZx;FqN-MpdfDlNjBOu*xQ#QzxHqyL{
zEN-z-T2UR~aP}ekv-dDAZlP@Y{4B{~O5zSOGVoCkN!mr0^!WXhvzK(3x*0?=;6R3u
zGT{plPavhA2`xw(w9^RPtj1awAXmFXB-msH1*Id-j*sj(8|?>j*ycpMeyXEcpo}Ky
zwI0FKn-}rO)-Pc&yN7#&H!+#tK^+gVsE0UM`~U~@7m&xBSkIrrcJFi8=sbzF_#ze+
zmCg(>Z-_uhQNM(+j`^(QC)w94C92VuzToB?v&k`b@9iRQwHX=MI=6w%trfI;R!u-#
zyXp+Af*k<j4U~>R7?kX}C{bGk^S%?v4W7;z=wYQvavs-jfb9;k7F_y2P`dLlue{8w
z6}oakML>j37J|RVKd`C;`rh<(q>G;PV#qoag+v$(rg-`JYlzb+_j8bO6k=vw*L5pd
zkLSfnee3w2Axm=>!l9-lLPqrZ`QpG>=f14woImB)tqUN(CaKv8VC6p{3W^wzR1%1@
z;87PRmSY+Y>^OKD0hNkr1*Ph%hm7<f2fmchmOQVC)wq{yH%Zr*h2dcCS4XBxtK_vG
z1~cmDTGR<(6`Bl5lcSjL;Arv|F0OnDi^WvxI@#x&<Nfz`aQR_U!vq_z*-*%s=H`gt
z5KjtvQe3BC@HzLUpl1@)wmOad01t5Ys$^1^Yo~m@LiY4CIl|N(@MwRI!O;S(m6QpJ
z#sl!f=XD3HI>8(dTlY?XGg^-3@82N;DQCW6U!G?MpSAXLSs|qRF&}~ZDU7M7!if4)
z(0IyvqEn<iE^@Kl4bn}V<#J=YQd^V!+KQS25&Ck1$zlhi#chn{MBF<et`oT&{Cv{5
zizI3ziF-)Xb+poT<^sqX<k8f$LCtH7(gyUml!$+1^b--dqW|SdgiQan6QC1EXtyf#
zx-q&b^}*<3RHZ=*;D>A~XU79Q&K!V$<HJu<7T9d+IV}iM|Er=gN)}^jV=ey}u(pj!
zwU6m+7XxC-79XN+hA5+b>=*mkKY9syyp7HLNlp{2b)LX_yoqTw#jG5mC<%TG#B*%Z
z(XgeW+#Tidh^|aZU6^697~x<~M2GUc%bbCY?R9K!lQTfXvltbL-J~_zlny0moJ5C+
zH=zHtd8?QwRsV7|>ii!u2y|E;)dQfq@kj$y$&E@S0WqYc<GaD4{2$)EC8r;z7|0n=
z<76Kz4nwGJr=RF_7Bt_?f;<vkbyjJU635`BXWz$S(Fd}bl&+bukQ$#nU9aES|4m{2
zCmqDJOB)YDZ&n_Kn6NlbxgD&q+e8Dvx&TVvU;gIX?Gjl^Uc;wjNkK_uFo0@;LQ5@K
zt)$H>*12}_21aW%Z0T`@s#Tlb^6FZ6=}Ix=Dams(O#`}a+T1NIA!T-UE_=ERZAUG{
z$sBv*=Xvf@>O&kxnp+i)4-fF+2V3~qC$`b*YDItoLQCX#odfI++$X{#S7<4YKszUJ
zLVf#Q`7v0Z&S9>RQ%{aXj{Q4RRs|dotj&_RCjQg>(0Qg8;gA!b0aNE(+aKGkck4zw
zIC6;|8-2=yli_cez(+45j?QQw7#$ILuf}2`jC~;s%O|9?Xli9jn44rw$pA<R^*ikP
zE&avoA|;o)z>ULyf<<wiVSGYzD7}?O+oDQIhC6K`jXIjfqPl&ljAD+5-Xcp3bGfUK
zTAAQXvnR=rQG=_P#DG#{2|@i0T4{_<7Nebz7D0{9d8#M?rykNe;y$TM1ATV<$c{4y
z-~k>KXf#c;F!it$#GGyFqMj18AJbPfIokO{$n$fUS0BT?*u`wILk)}2#B)^9A@&x#
z*quFxEZW9;>v3G@J;R)VG(L|>Im5gfpr|QLK+&rC0UlZxP9Ep6U4%-=z`U4XZ|4~M
zJ1yjS4=d}d*gn63we21{os69ZDu1K%#(9Kx95EU|ENPM?7KB{mGTo3&Xn>^5%^?w3
zUgKkp{*9sUH+gOWtUc!f8{~Q|`4osb4c-t2*;RK5q3W7MSmp%quT!A2PMc|iyp`b1
zm+xY4cLzy6L0Qh7(c|l=D{cn0J9-hr#k*+d9Z++5N%saUb|#Kl!yha0Q}G`w0i-Bj
zTm4#TAR{mlYC>#S#gIb4u!l3%c#}U7rURVw6O74e7MV+}_@Bk-nPi|(EAUU+`q%!(
za=#AdcCH(<L#!v0{F#V?bbrb>VA3khpEeeY9UP3`z=hsduvm<Fyql^(lq_)l>OLNR
zc!PBprkw^;LIGSVNF!-US8$#o?0D$zhtfXs;A?JM?Aplc-Kj8-%t3_%_!=d04`Fyh
zb?#iB;WIzCE?`XQ+4$y6EFC6%Wll&a78Ld{FeHJZd@}mEGWIjc<FnwSb_Au!zCUO%
zIsq0#aRTgllHLa)RV=J)Z4|}s`!RF(<oOWXH$y#gb={;rx2_MWd}-yB_9)OaQ{*Y-
z@V5|0E6Cy%F4-f;R7y#S??DEi(j&x=QI$wF^3p?s^ZU+$q!QO8&X7`hYm^~N$N@++
z`ft!p6RhPaItkF-im}+rkkkeLJu0hNFyQ~PTkqNNuX&s~01xz_%v)SA<6D{U+|HGA
zs`N80rUG@nV4d~^E%fro(Q7>hn)kEvh@F9=+Cvjh&@_iQnBBwP<T<pHZESWvhKs!~
zVzu=c>Lx)^jfFG7a-9-4S~oKvQQHP;#*2PA#bPnR!QLT`_oSMjN4*KQ*RgeO1zlq1
z##Gx|bHvhF1KQL(d@gB%Vn))$0dYzUVr+s(&H>O`XP>#Y(AgqV-o&V3tIy+Vs$hvK
z5NyS+62WN;SlN|z3{(P`=0zDgj~nzhrR0z5`S*86xcb%yNLy1Zin%t;@jQk+UdN&w
z;P&A6n8i#sl5(KNK)3un$LSow8{1#_0TwNB>s)OBB#L_SK5GIbxppC>nfAVM?8%!X
zjTO<F@zS?ecENDICUwoeyS#P4AF$7qJpU<4LFaI2=RX%kN(z9}JlZZ;82X-5AeNfu
zxf%y{wsPh(?2n(vR_AlB*%fgqXv_wKV_bXh5YK$}0@^DTX5<g62oFcdLDa4@g#-yh
z99#V(C519CA#hJ@PKC19p*o^P!)i3Uy$*J7^|^Ge)dI@`i(lp6r{0FU#}L)h7rSZ!
zz7{Jp)e=4GrbiJ!@n0x6&r$v{FdayV9+l}*2T&e$o@a{e5Q&fSA<ThrGJvkvgH!fg
zs*_ZiUgw;93S$(LLm-;j<dh}c)vrK;O?2}uqzSbmlX)zvf07QPXD;0b)!}6{O;)rZ
zKU&JF2p7TrV*F+9XT$-B5{>?2wBrUVS%$S%8=Y2z)kiw$6S=Xjkn;X0t)tG4kLEaY
z03PHayH6p*Dh2>iNg2JM9gBYDJTNWjQv0sA(aEl$lU_#IQ0KvY%oq27>WCZCR5-!T
z<onne{Q%wMB6TaocIR_g&mTb?pU1qKV^)u_sI8hnAwY+R(uY{2r6fY-3{bvyv44!C
zy*=E_I#?yn!1;A-o?k_WI0Hm_qm4SR(9RpQR>T1y5)vZ=R82q$RFe=5U{_6Z2k3<5
zD3_H7Y2$LDcj7_#$ls`lVe_9Ly79ULBqmB)^CDCu;y)GIYcX1F*=R}L_oZjAp^isd
zf2?$Ni{=`F{(E?P|E~e@3{6bXcJ2USSCJ63`xRTIf<Bt}7bsN9`yvnlP;#Tz`Ojc@
ze!Z0xI_Nnt-hp_G)rLE}t*@y}4bV)TOAno%po$n#M?jXpQ~rWt@M36uKLBY|WaX&d
zsSxMQsxnM{kBDL!nz)Nuv4?~4E4bMEdCbe9@EwR6lTC5s`YtYC*}zIK$Fx(i5oBRJ
z7J{N?Lq7UuK7c9gS){9Fc!DUI3Xn?q24iAX5j=bfl`m=OHx1gI94E&$#wR6n0!DpJ
zcbGm#(2Y`ZQr;P0*(;T8W>`N_^}RO9?^2^2xt?lX3wdt<P;aUExItC=Zh}OLqx&br
zF3O-b&%9$pj;z%JiGQOaQ6cdrNPEOoQ13w#zZS!}#r%wh^ZVq)k(0)vJzAcswT$A}
zngEk>E38$tv?ewOm@qDBZ%vUuNB`subL1Z*j}qibj7}P1C2w)hjo!Hiy(hb<ZuF%y
z2Is(dr#U-5qT|c~cz}nh-Pa5QBSR9kcv7?Ur{-J9C~<c+CS5Uj2GU;<$X=ATVzkiB
zA7O`}Y{poW2fV39)d{Nv&Z4^*&#&X&^gHO_GPXKT<9z35u-17DQE~yZa)Rlij{*~k
zlBf=l56yAX#c<RupD8UpX~EA}z3cd>kK=<KWY@aVwQze48%!X~k!FeXP^T8gEh(p~
zD^gPvXMpw*Q>s(;pXA?N-c&5SAQTFz+Rv6+aJ>gKj&qxsnj77boj+i?cq98+$$C_C
zlb_zI@EoW#@(16&fzjX)Q9j|wj{#OCw2=<_N`3`*hTq1hd=GiHDhz#!irkLMWIP_g
zsPW9aIHLT&Lj6kW6JlSg)s-d)M8>zN6W1fa6atlu=Qd~~ds!+)Ar8YSw1Ob;k=!9F
zwk~_^W~Y$?yi=$MKSlZ6{70Ptb*#83RR&V@bchJ(N-Sj_Iq+S}F3DL+>kJ3e7qHcN
zMk*B?S#gHh^cZiyvxA@g;-kztVbw~i3J|~4KXWBoO6N(t*sv&%BlVc?#Y$w9fM-)j
z=_P>{fNSc^#xu`pUS!zcnc>k-2`;Y%ElcC35W2|^%CpECP^B%kkESR;&BVE)lo^%i
zkr>Z}jQ*g(f?`@uR~Rbjn_kdba>PMJ>r7ya`|bEyr&M28(khBiPOjRZe_JW0)1V(D
zijlP7jfBhd-`1QcQ>tU@K2e^#)8^peW1UM~bDHm`sGloal<>#XhQ5!5{jd4|ERH$<
z-)pzfU5(?7r`w1wb`iaMSm#s~Lp%&3<D4BI*>UCoJdh)V1SKkBQcPs!RO-*GDx4$C
z(aSl{O-*NH=aGG|6yr?hB5I@CdK8`3LntWsUmRgx9-yv|nVeQ)4|ivGac}Z{wBn1{
z>^_YP-OpmZeF=!RFfXT=F=t>d`$eeD&sSkZR;0p3STa={%y<D)TH@qrfRlp*F8gWs
z+Sok5fvxi^==G>y0Zku*HmP$Vr3#2MAi^Y+E)dqTRt&f{^%AjLuq%jx?bJq?3dw}a
zd2VB#3*7Dng2>0A@<qWo2?=P>UIiO}YM9h&rFie19enuyEhL>8ijtb1h_1Qx(OsaE
zZeUv8#m?~S$g>qaFNrHTWkXAm%jXcYpOKz4_O<?G(3SlkWs*PFQgQhjEjb7b|2t^j
z${}R{3~86m)->s@qCs>FtaY#B1i18xG$mrA;0#DePBY}fH2%$5Fr-F^T`UU2RSlB+
z7iUOKF%L(O9N==X3{~91qBz9i^bK6>eF?LIPyl)ka~2KSy}g6oD_eNzp%qj`h0&o>
zK19$`jJTGh@^}T$-c$4JK8Q=wkd!sEQ^HWVIrUO0dldJG$Bc|wLbAYfJoPyt=#h{i
zr|ooJaNh*wZgS(tT>5Y@kuQ-*zL-@kw@U_pJ^&We1|>PkI&F+BM}7+P5Nr|!l>s5)
z(Oo<LXoyi$JLN-T89KJ1e3qZ50s0Z7gN!rEJ)MO{A;djyUM1nZp+REUePxO%LdZN6
zBug9snG@9Gg2=A)kM=yO0-&g$a{s&{q8P0t;@p2XPvZ5>7~Lm2027gk+(@59GqgI>
z{{0A#GY8;-9%8nQZ7mS7MZv=Ojw*uw4aSr>OO_ZBY-EeJ9_+I7l?>I<|43;o&9AUC
zP*#+`K1NxcAg)Jfq6rG@;O_WC+!=ib?f3$=I-kS^LI&EGn4GqtYJzI0Is?j%5A=Ku
z4i_0vX;37KKS$ZjF&ah~_K$Gq!#29TE;hH<v3+h8s~c@5*3q3L3AI_3^HC`ir3p$B
z9U_N76+TTHK;Y<rykzm88Uuznt>KEL51gG6eSbzSSizR+ixn27=xh~ecVlEZZN@3~
zclvnc`Kw4;V-)2?Oa8pxIOQy<NBOm#|B4L(9dSY>e=eoL41b>j&}-)3C4^SXhRFs}
zNq`(#YdN6i{F|5zmE_f_wJ;e>ArE@)L^u|j5BK<k`-2RMLC4O1Xu}4F8hFIl6q7{Z
z)jrEw0Ju*SJ%9#eB*YMKNgx|gb4%$20vFSB<OWpg<j~J#RO>p$;pBO2cRntqXXND4
zdCC#@pTGLfU7Xu~8eOV7ses{ekUpZkHzN*9%m!!Pozv#-ls}jJIf;sGO3PzY1F6lg
zd0r7WL5y^gv~cVF5oU9d(WcTk)+k^vPdY}j5Ko)(`jHCp0JAYLKB+M|mhU+YrY)8H
zV-RQ6LHm}QH~C*f7o7fuAurBFV|Is?_XYm5qAIRYkw?$4%wq_izti*(*=HLcG2Ct>
z17fQ^fBR~Vs-Ob&KAGnX`|DS72BZW~h=Hj(0~tBwS&SZ$|FQ<>E+%L$XLYl>!oxv5
znLMrW?D(jTGY8-S9|pfVXifXUOYe7y%$R7S#*b{57#aD>eYAPs*V4L%7~}L+Njc2Q
zr7gRIPOAqr522(ggYpDLc>v&;C2beY4(?9w;O_Vj(1|Z$i#Y?I!fNLV5?sQ(TwvCW
zxHmx^QHMbfkJ3S~xbLz?pF0<1BOzp9gh4+=|M&p6Z?w=|k!phN3q7oDwvo0{-9Rhu
zwwHD3vPFfE2!w<TF!{@JvKDw+)EgkSrWVL!Vtwf~z_reVl;U7J8#QQm8?@FUq@4&C
zt~5Bl6Js=<<Js?CMTH?6s&OWHWg%XuRjJYIT*0lwZ(vsKf|UQr3lIq31aJ(QFb+rN
zmHkvihyDq)Z;XF>KgU@5I#UNUW<TXU>GwM5s<ZD0#84xz4<CyBIxc|A*$1~IFLLOC
zH=@Ssk5z|3Q3-Wicz#i4TGSB59c9rXa@s^iPfV(hT+LCD*0>}A+(uoMSQH1?pS*;N
zE5Cr*V#H%ZWr1}x!ti(>*Wcg7r=K~Gs#~*O{hWHoXc--o-&icjEAMy*k^2)a6$eTi
zX6uWrAhzZLsNBMM4K_BUfLG2*p-%b&4Eu9*H(E&B6?fQVG9Q)7MbfpC^f9I<HKv0I
z^Ff38lpFz%Sn&sFrGfb;E-DXvHtDMP!*nyW<Uz6aCXxosVWHttr$a*uj0osZ8FLc6
z7?u|%4%Q6)g;ROHSA~@d^6whmqnyBx5t_wyWqBw?066kz{)<)sIO8wQ022UHV5OC?
zLv?N~sn^a&akZAk$g`R%k20jFiAcev25!WD7?I`dc!0;51Mol(-mtj5UC29<7h}j*
zBP-ejnNeiII_3y)BqfWCY6(O`({kVv!PrJGt;tEvLly_62|D>@wDSunYl?7>QItoh
z>mefpGu*)K*)`mqe4BL!#2NS;R$Gr?HQz!}FEA^|SWx#at7W$Cd)&^1(gGp`Q;Fr4
zjVy^lao})xg3(|PcRwIxpojHyYpgS{O8p7CVgyNHE^RkRTe53$e}YBC$bi^lxfhN&
zT?aI{>#^LmiT+ECoYlTlB-fy~9wBL`SiM-|nJ)sn*CU3PUwrO5X0sDC=>%ml(|A{n
zLtSH~bqOca8`v2=%XQCW^vDUIaTYFv7T7D<&$RP2y@Ow-Z}<J3ZQJ&huWZ}aWP7r0
z*JRta?V4<JCO5gBKKJ+c{14~r*!x`jz1E`aEXx~O6ttTyUg&dsPo8IUiVGf&3c-Q7
znmM%c)F1*!ez{z_dwuGhfKN=yhGDZYP+s8l0|%;wOeE4Khq2bGe23l(5-7uE(<_v>
zfUiJ+`-h-@S?Z~w1jPpO^eCK#<v(I2d4&y4$gWxXgDEc^W1#aoiNVOdwZDAoXAABQ
zotR_iv_uUU$`IdfCBtbrm8T9{gvpQgA0E|8hzx4zW71`h(EcQcv|g3g2u*qCAk}Ph
z_%_01?45_}WXq6Q_Gz)>JmMoDOGkXCo7p(&iQ*#Bza3uQpVRej@K6xE?!KM4&!A~1
z!m-*pPd$6}fOoVc?9rI0fAUqr??X{!@Y*B2bPOFwPX9~*8Cv9-zTo<qj=<-VG7ida
zI-UR$4+8U3D$Bs>C67cG;zjj^_?)ph;ys=E-M0>$uREv7gThczytz-N(-=-UA}V&s
zbawrgobOxVg!XI48A3H}FHP&LN+cJWr-i=l++n<ED-RFV<e;7kGmwMqqY`?Q+g@T{
z!oTR1!1rDf&wN@VB@rRMg~B=p&>;j^hOzPt_q-svQ_U4%=8Sn=!e$%3Fsy9E8}aW*
zXs=caaaTbnL6J1(NTBqF)h&#Yt}Lc>o_^P!(Lx0ayngs@bu38iTp6YEVCNc+ysp4?
z_8<U~VM<PgR~8cK$d;nRenW;KX!W$-g4%+!CmF68a9<}O$;U_|`dpxMd_LEKUiWS9
z1#_Wwf8HSy5dA4q7^A^vBk~tf6Qj<R`CL&NanTcehDP{Moz602q%3%O^>z}e-j6?P
zQ>is9^hSSDPUVxwbE!><?REw`D8{l#_>_K7ydQ*!qnN8a4w1dLdg)_QVlUJ!|GFl5
zHGAHgHPZnT4$Kfx$@%Fnm<^V6W*FhGP-SS-Ghw`J0B=h})0qC$)T^3FUaLb>MT$hl
zygxWeEGo<oW*ziIOUOP##xt5#w>^UGzweZ0b@eX*zzd3{Z3EpKKt(2nN@^i|Z7JD*
z45RC%J^-%;C`?d^iYRvDXe@hDRRsCekNvipqjD|?Rs#gcv;<8?L{!Ep3<6AxAac2U
zeeHN_)_J@|Ru&Q@#(mH@TA2vTtwfx^buyDm-xWjhGhrk69eyeD*IzdQXaYIO1g*pD
z?89Q6rUnhkMcELzN;0xu<PH@u=q=7$n5*u(gy4y9`w@ABV6rw1@652E;?wUA7PMXu
zb&!0WIYuQ_tHlg6rAkZ5UXTTa@89)(U#Nr@Nd3VAgDA17JH_mB)_pbf+2yq^N>VJ@
zwVFwpEhfUVfvliYuFfeaBh_x(Tfged-oRUE)c28s{~ngdYHSG8_XLDZeoVqfT|lUB
zTQCM>x<Z{i)${ryc{T>Nyu<39`4L^_P&Z@>#uaKC=@7VJvnYttR81fRi4|wg9ckna
z<7PB~R<MWwWdR-D5j|bFcRr9dHa6Tpoe=T$3^GV3OcGH_5SbzA&yw5Wogm9I1M;;t
zxO`PfTAr;KIX-G&oT4Qt23|+-`fjN4eQu{v4PJtAc3-?P4LomouC_a(sfdd*P#+B2
zy&U6yW+D9j2e-5RkyV~0K-P?+JBGPIP(vMbB>u~GFVs)&gey@>dc+SW%H1lkJ<fzx
z%KDuVvVWLX8eU5wy-<M-t5Cn60VYRH2kE4cAA8RlNg%_I2@OH(D-F&ODFk)Dc_Sz?
z@}KwmAIdM0`99FkjXz<kDy+onCX)9v&hD)iGOn_bWQLgBzj{NL|4}c*F&C7op@}|2
zR#wIv3yxkgmpuPs7C@rlh(2N&6;c4v)nE2;obPlr)qB%PWl4jBLcdTZjL`ESEpAP3
z87CRxb2#I;_Y55{n$AwUJy1soGwdJW-`k0WdQ{svEq_%o4JY#^RMr03Y&sNrO@w4a
zH&Lfe9Q?z}qA8WxXr{7yHO$4FU~?eV*y|wg3M!B$5$Kb|q02P1Of&R27J(moIuXA7
z5y_38Qh3<c&JdLPQeo3SQ^SCn|BB6i2sBFE5+qe-_`-)j6ePzWiCc%YEI}mNkgH!H
zPgQx;J0DgLtVB^$?jQ?9ng2$t1pfDQmFGu=&?S+R^ZyAOb|V|c#06h)E{oGAfLvM(
z5<gO$n2%CUWF=xdGbN#*w$TFt2#qozArzZSnT_Sw5}P`Hv#k2fjdn{jVB$bAZ6X&d
zV}iulevr5O(|TS{BG1OSns?glOJA(4p0b7<JrQMf98GY!DFJjaNJy59-xnKpn}s&X
z@&a)cqx8bcvySb8{rd)C4A&-ZzL>h$D_S1qZ3=zpJ3`u0_PM%wbZCPwTBu8+UE3tr
zqYRBASvaU|L|<C5%pb~$Iv<k$jH6GV6A0Ia-ozgZpy_WjC!!VhFl1(xoEIuPUq|>j
zGqp_(m66?IGpNsi$x-T9$7*#pe3!~9wZp&0{-3#at%cwsGDeebXiKv2(@ZpA6~)p~
zq!FD2Q;L83rnYtXt`TG4h_%&)@-dBCr7ViOkjvn#O58XVXU^6x&plrog}n0;K>r?1
ze*9!`iPkEyjp+b^<$$#=u&3h25sa7Q@<&__LP6_LsAP>SL?`$ITGyL!0B`7tBd=1#
zR}d!8jxE-<Q~2Xtlr&E??hvh*NZB9S_>MjlTw7w8ePS<#gXPyOfQP_{g-@c-Kj1b(
zs+pVsX-Bf^!}Awz>NL<<Ad=!NS@m<iY$UNuwbXe_6dxKF-<_OdD-B;$(trao`<e>1
zZNdis^~j=Hu*J~j1XEgP*vsho6Qs-=ZEX$KVxYLOLJtU?ilYT4(x{}fe<1@Z4>R8M
z344;>7kPWSn><v~1Jan{1xk_6uvZd`p&PQ~G!Up!UJtHRKno$iw0&5OaPxm7(ML?o
z1Q3J`d&Z(Y>blQ%qM@tFOQzp&moD)OqQiR>eLpTK3q2{`ZY#x&OB*yQpB|b}r`V_=
zH=Lx#UT+0UUy^=Xf__s(e@<Clbb1P1>=8B7BMeXU59XZ7(;4uH`f_bNZ}8>nw7%s|
z+O|3GL_+-V1-5hqR>n*4k-_4yj8YfM3dTk#)*+IHbc|GDA;!_iIp$M3Y;%>@(ydF&
z&~RwO9Q#t2(9|xnwgiAYQK6EY0@E`Cg|7=h|M0p*oHc~tWR@x!K<>@m8}ZlKZy_cy
z`uT;ISshPRkT!w7w5(T!M{!VD1-88+o;|%YaJA>n5IQ;UzXLz6^3L7^_zCAnDpg78
zFZ0?YAs7f1koImB6<`bE&HCUnnwVYyra@iNvL^RjFCn6*PuetP{)_D(=sk=Uq>h%f
z>5tmEUir@Wcv$Wt5JIhjBvG(JK8hPTXU_Sv+9Z%F>Gr6N$95;CYi1ovdga9C7nA+I
z#~o7Z##}y4#9!*BAIdR_lpOBY%O3x-F#Yy5iBE3%)+wPyXt6Z351U`DV8AOZSpNZ+
zAA@7#CJd%eFcn_W35W>yBM?7HPeu~ln5!EAJ%TfAu3du-znJmZ;oa)9k5iE%I{Q<z
z_DV8lUJzZw_~CzNbN7)D@{=z$ChT)D1zTZ0$ETE`ryzFz>QCC}E*n3usWMOCQ63Y{
zM(~~7vd<Vz$X3cM3xb*0;yTr&t%7>Xf~ddrqm{yz{2YC@I8?NZMgh@mgwf=5v28sc
zSTLZ>rs7gCi|k}si44~J7SYfC6VcBGJm`mlvQ^DE7ytw!7cwR88F!DEj1?-@D~KFM
z)BzfeD8^O=I3PBIM2)a&aAPu#q$q_XpqbF>Ec2%!xaO-+^cswm_{wqI-)BI5$#p#;
z^;qQ<@Dz1o`EH?LAktKNz5gBA;vu4~Qc>YfS;w$r&m%=t=U_8|i3ZYlf$9KJirlbc
zjjWmV@F=t$M6rLSqhhcLi`ds0$c$SOr9GRcquUQin=1b5>J!T+G&Si#!XqdSrHA68
zEk|OUcxxZWn$g&{Z%@(gh^srcJg0ahAj%{x>@7Dc1TNl0zaTkRQak=;U|&!oQwd*<
zjJlQ%edF<`i(?PlC&mYQ`p{kB#@O=ZyNz$($;aWI!{|vHdmu10NfVJ9LT?d8%$^A?
z#fDX!l5+&3Mnyp1Woha*w|B?f9Onh!wR&aXQTHfY5SzVm09#9^)ja)6vrJ3}jNWM>
zwOQI(o6OA#3r4v>V}Kp_B*|>l^2n0ZJY-hw+=q#EpQ*b`l(W^p+Q&0;+Is`j%Jev|
z#?e+)nv#$ji)Jg~g**tI=q525zDbadIXVOh^?`~sF+h;CAZSd4P|~dxrP~5Y=bp>B
ztxQ&MBD7>$hH++?=wdO9xNtv}?S&ShxwrL~QXU>(RW-Bu)N&Z{Z!l#1(OL%qUH=xo
zI?xp<^jg$tClpv!E2n{pJ|fxBx>bNq_B(?2Q5?uyK|yr3B`Yrui)K_o$oSUODk%4i
zP7&~rjOs(Y_*t@EFcE~j+8mWgd!{~D)nAe{E@~;FnaPye%^;tOTIkj2Tt1hOc=<mi
zbUv69YA5bjmmDdv!yN*3Rf7^C6V>cI)Uf>ca6a3xM2G8+hS-lBBdv)h8LW)mJrdn@
zQ?VS0mJVF7hxuaRD2#?%Vf=2o(9Do3b<BD5gkoT$rD%+KPk-S>(~3|m;KDrY@Bov5
zpfBpdgYa_w@SFUj+xg>DxnnOlZIPvk&JcxaK7xTrOHkP}&%+=uJ0&rlgLb(n4tO|t
zAseve8d?yZHSK1<&QEP?*H*4dCY@8!Fdz@N5~u;>PO}ii)MqFI4`H^VI*R}Gs-|I{
zdjDWg<IIDrF-6zj7~SmZ6Snd^*UtMX-m0w&>McsGRP9Qn@nRnLFLr#)ZdvL^k^tfp
zzr;%lY$GHP>>yuNl&pxd^Cj+mY{3>qppqq;-zsvrd*8gn{Z)~Y(WFPMwiKCt@#pk=
zzI1Hecf>DEh;33c9&4pjI<)8$DIYQ|vZ?H!I`#GaMGmC|_!kdUvdKG4hKQdk|CMB9
zd6>MdLKs-|Mr|nqh{>#$GiK<zpFaS#e6FaPM7yJ-kV&y6PU)E9mUAYc)8_p?DkcDf
z@2HR;d;|r8c*d+m#s&y$14W#}6mIffSbzTAxoU>;QM!Tw>u9U4Pdh|%GTRq4GNRMV
zwIb>cD5P14aef?2u<#D<eWKvZuiD7-yCL1{hClY-)Ecm0A8~=*Lr>rZ>*`J9ox*s`
z^{21HNs=f{EwKtZ=UXBHB?n(vD-92pn5Wkp?*su4M=(mYd1U@PKZzu{S7#ipD8;!_
zfiixK@r1YDTG!!3h!v&3T^j63k9eG?8jSqE8#hw^(;h&OLybFHpic+XF_nBR$C@!C
zNX!&7_YXTo)D!m<BSVTXHkT@_YH@x7^XgB<>#_$i06U8;Vi*5@wakgof#v=7)>9>+
zCp2;sQQct!CpA-90mkkBEe^JCjVtY#mPpMByu+cz)x1zp>cuC1+!fyV>S@O|tk&d>
zH>$d~vTY?Aarc2u_6nm-$BxUWAGcCfNYtIuj-A9Dbhq_TP&lzH1Wt}59GkpRSE7wk
z$V5-J=qkuf`;n!}dmdUG8ZtMl1a{)XT_la^T3S@KcRsChBMyY|$)hF*ye&4d((E{I
z=xx@yirE~H=gf+UsAqj;fS?HKQbOX<8F4I?=1ar{OQhDW=r|9xG)KaO>ZJj(M244I
z9shu^mnB#;ZYERHU&F(Inv8d&8~ycV6elxP`PDG}M^l9aC^-7IhZ1-B@W_9q!`NB!
z3B^er*|cz&G^OoH_?<R0Dr(agLK}H_&;9L(i-L6lK}mnUIe};s*b=oUiB5e)^6Ei?
zhe?e_yO$1}FpYY#9cOIBPC1A)FDDn79bZGgHXXQxMKwF>CPhUGmOg9zlV`IwQp?Lr
zl^NVN9R^g@Q$`VcJ!o7GQdqOmE8RwYKXS1%2VTWI^0^NSO$~T+&1dj|A`iH2E|S~k
z8ygtpf414aQ%Z_H$)00U;Z`+GA$6YXt*zvXi6d#mJk<gHrJ*D4`%wjpV1>A%9i2GF
zzRk0;zr{|ZZhNLu68sNodjhk;tnuXUtE=(S;CcVw-ETg;#^&<sWKVSJE3zM161K8(
z<n>&7WV>S+mE?|~2Am8!Dlxr0BpY1E0}Tj}lf?=!)-{=iw-yRpK?9*$y>JfBX2AIH
zo(*@gaH1q&%@g8srF4!IF38^DX>>(*yJW45s)VH~ml7){0`Ra5b7afy4$R!P&Bx9f
zcYR>Yy5$YXJbkP8@%aqoa;N0eQ=pZW1GCYvmpHoplmbOi>TDL4^T%T6#IQX$N7gkq
z9i=flI{9P*BBIKIA4Q`~>;{x=+*cHvmL>Xn+h2%smxM$vBBqTiQQZ9hd<X_)3X~}C
zC)m`$iCyo|D+{ehoOcY@7DfK4Vg$HB6idmdfGo0)Y@U&jVN3K-Y%oszRRLy#!XWZ|
z?coHxPWM=6_pGGCWn$E1%ai-YZVa&s=8kMUgcdk2`?2h0q9VHyxV0+7;yB#va85d7
z``9h1H^y=^wj<nIzLG6cjJ@p48M9uxAaWDxrD@Ey3u_Q0Q;h&de`6G(0?{AvymHwk
zrRlO(Mz?^e?C~8-ai+}^x2goYZqdz7N_Ql@jsVoXawqvwfAXVPSm!^6VRkhf92R82
zQke>taMulZfiYXao3su;s>!Cc9(XK0r1wMYzz}@hwi1ZsjjjxEEfQ>_T;RmaO+?xy
z5!}cndo-ZRXBt%5FYNdu7RK_}ulm7)=PQx~RPA5ef<pbabVHKU8}(_vt`ccEW{H6q
zf1~!25D@@R%q5mijD8jWTSTY%KRil@Yo_q>;OlaDwHr@7+BSuIqY=)Z{<m}}hb*PN
z`h?D-y8KNEH&`|vRj^`MY<jv~7+8(8Ki<oZp6yo;n6>#k?48;G_BuI4Wyucb=;$%M
z3omj{IHv}H$f+^NeFI#_O&+4F5U+p%)}7FqqSX?~(OX6)WR5gmgZsK``Hh{^JFj2H
z3-TKQ(})GoSF{a4sEeUy!{)!TiqZx)1JFLf$YH(gl3plFxpCjfBA$<l&b==@dsjO9
z@mH36`U1sWA}H){wajWbR#WFotk`wfV3%m3N_-SuzQ~?zC<Fl~OsjJp{&t{$C<0p6
z<KNb0gc-ja$V3I&Rgd!A3I_RXpU0F0v{6#tlFJG*18`kQgI=iwk}?}vSvw`%hGVR)
z{|0Q|H|)aa1=fj=gbbszHOmr$+dI&&X0-8SaJf*Zhixx3@e!qK_#yp3vns?+tj7>E
zWIdte$}s(<B|2GN!t@dUB_WXu6P2W)yd^@fbheJaD=yyLZqPH*;m0bY-qhc{HRjk5
zJn+s_dDl17#^i;JSJPFhW}va|qh>=?L(1d*_-YA8&Lq(Lg!xA=&`&hs3;RHL9;P1@
z@wJHhliB+xYasYl;QJ1$_IiK~ox*PzH2`V2*!`gLU9p(Tza~#noA6O3x=e&u?6thi
z=La3ym5G}&urC+7WL5Ca>-r{z3U0&Y0iG0gli{&^i4ds+I%{)vaj$}Jw%qMM#_5?P
z5N)mt34;HMcL`RDuBfnFOU9zywZ7U}0&>#pgdMb4v5N$zu>gNUip<N{N;jn_F5npO
z;tRH^6Rd1;==u9jjHC)D0dY$S)C~tiAXU$Jwj{Je10!V_N1eljl{6K9Wd=j?p38~F
zmvF)uzvmsUbt7-o{W|$Oh9rj1D+3=Z7K=I~jhqQ^G#8ojN4%a%_Tz0ko{WFR85$^^
z#8c3xz3aT7Uc@?u)XEe8Lt}TKtE(@TM@OnwP+{J>j_oCWEGD*3xHPW13<!4&UY?OG
zrerENJwG)!`iafKLHha&Ek7SZ0#EHoDB@E#%hi%YuXp!1_p%gyMiq0JPi2`GRGO$g
zRY3A`hE;?$cPd0tFGGR}SAm@M5J9hki&~5e*)}TWVwyF~VfDCM)&2R6MYt-tLrnwS
zkCovyLcesur-D?&lQ7|7;z$Bpp*WDs!wI~7*I<hHlER@ql%ny;?9^Ovw3#HAv<9qE
zI6?ZwrVLEehq@o^Um)Tg@s+r2*ukB5>+NjDoKkhn+NQ~G9G?1ldltvW#vRdY{fK0G
zZ{|6910BUsf$L7PZ$USZ9HA&nZ@e*q;p!?Zv#L(<`Z)-X(8Gbv?0Finkr8EB9+j>f
zfj70gVVuh*smi4NGB3o5A7V4?vE&bT2>9DrUY=mqzr?%X%2ZP>OrE1>6eB;+J8>F8
zrDT33q>F5@P^+^u+n9KM69WI+i_d~1XC$)WM0kFz-~>%>Txbm0P!Q$W6pNFEWMWut
zA2bVTGjcnVN(L-~7EdW$A7)yzW?ta1uo_u7o3)ts(-K=}9u8imah9}7h58$Xt++ue
z)ds*ct~saKI~JNqz-Msw5_oQiq}bneR9c5MW)7PH%cWBjvIB*kz{l=w+5yjW8wzR9
zhguH)2w5+O)m;KiV;Sn?!dMyO$M{_dtsr)HrVvsd5hDp0NoDdOWP^OxKN!107-kv-
z-v#Uu{fVVB?{;aPa@{!9Pc%72lY3GLEaxc|L*=W_3<{O1K$I+mc;7r1^JKo9JyYwj
zP~rl_zC^f((bO)jA7X2mN5fPOFIGK7etCmoB}9YS-$(|(=7jI-uum0n^zbNxAY8sg
zddQ5F+Cm}VCY&JkVh5`WDILR=<W{@Ji2D^^qKg_6_}b)VQTs%>d&A$a2WTI@6`itV
z5${jF*5#)g4%;@w7m_B@^;m=*tT#s_7r>?PeXg{JWo<?drHTU^L-KtW3TUEX6{xsa
z^tMJ#8^WWWX&CGnY0KHK3M0G9t72fogf|RUK<ZT8&V${%pboogy$de<hqSVSz(1wm
z90L|T>1^aNh)j-|JVE_pJ4ywNw;YfKZ*U2<m5Jiug>C<Krt6#pe8<QhIW^~%iz;G|
zz@^=3D5#(F?CCQ`E!Z4u*`02!QEL`Z3FD>|j}s6(rBw4Lu}c*#5tXQpgOW@UgHk#%
z!z7Z{SLrB`vE%GD9ZLHA51({&!t$4-({41xL)RnKjH>i>(~4KI0j<K%ZA>-0ry$7S
zv#G>)C?ccIXIeu|uy=2su>MU_x=I(kWjs7J%p?jE@+^*0Y#r?a!N|b6%=lY&5k&l0
z7FONy#UeUHZ#_|yq9|5Cel?*K-}25S#w6hx<rXSJG$2Ce5y|PN7jzr-t^`(%38N=M
zRt<H-jvpNT3nj(vP<4dVlR8I=PQHDZFZ)tc0D@o{+;BOSWl>IbVR8*XyQa?rTl1+m
z(8?3vbLBt^IH8f)wxaGZkj@J{>6>__8xtacf7Nz*s-1|}a4(k#C;`dFsQ;(JB5L#T
zJ13V%^A-2~iqygakewUUGb`!Av<BbD)S}d6+c(#h8H6uxB%#8lljd9hkcmQ95gQs>
z%IQ$?GXSz7jXcdZ(Ec8&0A@M|54qNMe_TZc{O>H*$-RKeG@zz#e`BA~_OUl&X0|Mm
zgE03{jIV@G5ZF~pFBF#dC5cJzlr@D=vCCHzn)D5Xho8+|nRKoVxH?5tQbCTZc;Sx@
zx156j61l9H*f4VvIYm08LZVWs<!^O*jCSL=F;<n!w2lLN>dc~YPRK2h!EFBhNX_;_
zVs5fy4eS-o=Pnn{-K`ZpjvYzzW(q_V`-}1#Vex)nWD>8^Yq2!sBv4#bI!x1h8(*QJ
z^2?BVYTm}|?3gk1mH(gV?^Q?o9oe*OjVx>=B9x;F%L{SgNdKMwv);K4Q2&ts{*C(M
zCA>lwL}ZJ*N4qTtMw`Xvj(q;w*=x?L1*~w}P>iE;p601SaVm2GWhO(>6a&)YPo_d)
zN}&416<36nX60`qQ(PmH2MEAFb5Q=KWLM8bJ@}NG*=KS0sTc9?tReuo7+pyzb^IN6
zsw>ub(|426g%-4Q5S5j~do2U~K9J(59mq0^#~T9eopG!FhS#U@2O3=Rtu)G4x6R()
zpcZx4(u~yaN!5Wi3@AEsd*gc-aj`HtunN=4@>*tMczVMFxSkWwmhkd#BJLrpI4cg)
zMFLol1wx<J$LX7PdERf)k}v|hcf|Zd<WHuAQmOM}3n*SLT}HeA>T;j6n`7)~&}e3(
zi2%UviaCoKI)>O}LMY|Q1{LXDgle#>d2m(YEaIT&uv@OEKFRMRBZHzKET@c8)0fp!
zPW&hrk-c_wtw%b>(0toA@oBKgQ=(y$OyfRoxg6O&k?7ZdXxRzID!79xH&4#gnkY?<
zoct3}&Igu`5Sfo4QAKyXw^YAPL!+98$uR0lB{8L&CxP#c<tfn{Qi{w34jU)EIWEcm
zo8TvF#mLA+>T8*FyXndePWgOTukbwXV^bKrrfjCvdlUXQnp=hn<rxn%o(Bp$oGAi0
zk84awv`mBv7tizhjiRk=<cG*woK<iu`tVV!Bb*(;ps+AWvoW`zplZ70{$0IW?Rk8z
zm2+D3nYd`nw0=gXSe!*(7x>+(qJ|~6ogr#``TeZ;{`aihpsYpHFb+bLjYuqJh=8%l
zZKuOd#EIVYga>_;+FAx&6x@$q03}0Ul-g>VsVwr3E<mj(MJqshkSIm8*_o&P(>G5E
zgBU`OJzH*(Mb9@x^&JsXebmQ<=8lVHTR<aiZGtEwY7+D0Tjufb7ladCld3_r#8vYw
z{`qMqi?WCgnTVh-9ix1B5mO&(7F)?KiA1?IAGjS^AzN+j$3|;?-FpQ{JM}{dT0hEC
z2v$Cp;aziUi|0C6p6l%we!LZ7sUEO7XJLcf&G!m@B<(0;3WYw&<E=%%;~XjC=cUR^
z&$)WlIN1I$s#6r@HYT$0LEul&#!7k{v<8XG&CnVds*&KUF6I1TU(fk_Ck2fr4Cp9x
zNn?^+pohLNi+&ZvA%=F(q}xi}8yTn^C%otA^io-+gi6gex7vPB1_Vnnw5O3*>kaz6
z;V@l*TeL*fZX87d5q=tGD`;FyLa7f^F-ak#YmSMPvJOFbKpC@RqBJY2lXEwow^5Hx
zYv-sQ&uGGE(d$A=-HsNZ7C{gzo`S!Cxtufd4Bd3gnRHPpmLC<{Feu+|q5{k2LC=#R
zP7HTX!zI-DWpWpPl?Yc#gA3G-J~C$=rI`tPm{28#cLw7d9I%VW96_Ow1ys=p)6dLH
zyTrZTi=D8pdSnb0&gH`TBZ<5GMaId(kev5&cnvcl^O48|Q5#5ZoL8kC-hFYli2nb-
zjt3SuEXsZDA82;B*4xe1F?mQ-A=)gXfkV!}kv$Vpp+16s3tB=0C+WGSF-cVP#06j`
zP;XA?Ll~HnRn)m==B-?1``TjlWBB?+WCPbU%MkNKG2Q40ScT>p^uyf)*igxc;5M`<
zC`s|avEX&sh-4Wlq{j1qh{O7+&2ovRCS}aQaHNMOrd)$XpWxiTf{=7*U?W8)lX}Wb
znw_ZR<yDhSaRTp>%N0WP2>`P)JFebt>L6*Q1vP91VYdo@<Cj0meWn2~;#Zmw0Ti$4
zyPo`@*J?0yB*OzYJbVmvE~BQFFTOzyyqWEvcC^=*BnWvy3+45-hdRTadY-}lS+e*c
zrwPAEF#xan#|f|%Mhkv{6izc%<cDaEp&i-s$24|K$~k>0JCGrgCsk6o#je@Y32j_B
z3k9Db<x&FeLXkk3KhEn^Z4fJPc;Vwp<oFWMoiVKq;G>DXH_X|TPJ@~}nrg<11pG3j
z&56gu7WEoyoEruztERy<u!=WgX=#<`()Al@(O%$~R4sXnO7k)h!HE6*@cPUr1Z!`0
z*)J({gd_4*)yx4;3?rzj0D3nQ?i?w|w-i6>?`8S`Eu4mWC=b<%^+z03B1r5q^N+(h
z>YqfdRR0Vishf3Rt=7b*i`B&aJskAZgjS4{6Kym{oMu`;zmMjU9{;@#ua2a3%=`aF
z=YATaALx_pdg946`ECZOU(MM8H}ctIF269tDC|71u9i(|LGV>4{Z&GSm%(*fkDCuh
z5_rBFbq+evCJn|`ZSX_wcko8EKHAi&#|fp|MApli=X@B38PTy(_c1UD;F|x0vZs^E
zv!+p<oaD;~cK*BYa}%F-Nq%Zs6G8M4ff8~aDsEvOB7d4#AWCO@p;=3rHFbET^IZhf
zEXfLv$h-d{FgykfO*zdb(zZ3gFMy3f)_3}gVxyfy8Xd4Qy&Jk;Xvt_6Ntcadp$tv0
zZ44ZaY3_}fBM7*2?v|YVb*WfKPOY{SGcP(&QI!EHJ{|UgPE%N16#8pQQ=alrUvG`-
zT`z}VIwq?`iHWP>T!>@3PaLsJK+Sk0JsTA(!hk6zodBVVv=pIdvlvTld^x;1DFjdY
zZ#MOKLVGiSP+yx_o2oLKZVvTTFOZM9WfN<)r?7XZmUW1it90p1*-tj|g&lMZW}l}G
z4*T>OnneAXO;a?&F!5&utT2mTY@t$-?KD4@iOK*N=}uGDq<jlEV~KU4+o4o)^GRn7
z7ORe^juE{TgE}}u7sQ3uWb~5c^6J!Gqc%x-WQZ6l-PJ!UBh`=y6_oGYvfA;NjGqDr
zFE_7W@qhb*5VC&B)3V*0?`o@5G??wZV^$g&gn@5N#W<7yNh4$}W}U}lVT<whI$rVc
zsN`(NT_YB`%ozw<{)<o2>ZyFz{eClT0z+9Uh8GX6=%=}3s*^n)C>1q>LVy)=hN_Sr
zRAi7A#ptj^vw|U~$v)Y)#bTOP-cZbX-le!ERcJQ=0aP74BCy^vZ2|o^&T6L{72rj!
zi>TKa&7Yx&2JfRwf;w%Ei$l<AE0~5F79$lbE!&U4Y>Rbl_32H|e+@nW!oh@23>!M|
zr*mX|EOIA-bR;P9o<XpBx_P$9(5x7woZA=EvD2C6k1!ixIUn>d*}J1y?#lkU!>EWL
z%EvA=&6F!m;w<TXF=;{oya54^q^(QO)r^!bvlmdf5DYL$XPOciVR2&C-qmE8>rbsD
z@TD$d?S{0ZPr9~~?F1bFk-(ADSL_D~Tx2)f2IX`Wh78S1LfYZt3G;g5yttt8m{-V)
zPCj?D&ng?5$dHi7;L_+iGeE`rGO9I4-N=FAZIf_Hl4$qo2yStYS%=A(>lO&{Wq3Kz
z*cn6dC&L4oCa)lW(BXI8p!e~syllfDviZmYzZj_AJ9*D}1}in{4jRwP3DB98o`9u6
zK&faCA}`edNmA20VEI1A4E%SDISZzok`pyRV&j~~;cOt>xg8mwNMbYNQ`JXz$eC3I
zJXFkr_86G?Abxl2!pQ$k9}kyXD@yBt9jMPFB9ROzJd21>!HCUBp~qcOq3b?>YNqH(
z$&wgA+lHU6=mfcds0V?+_9&G!QV1x7*SR-!EKfL%NT3N}S0#3pvkvn4m27lqy((;I
z`83J>+cM_of+h0uET6_CrbI6Z?Rb5Ls#(iLZZX9IpYVh$)8$4w01#IwVf<OO#f;Cx
z2;cnb|7k}yOiu|uy7Y7V__gM4i0w891%+*CW>^cG%TU(go5lec(|$xhr;ZvN?x4NG
z<oK7Q(x!pUFLG*Pl_Q~?mM-726M`K2BxnF6PpZFj20@B;RFY)Ct`W2<60yakj;fCx
znSLGew2z^#@%KWpebg>D<UwQEb-lXR&0iL|uR1Z8cf!OV>L-fz!#;sImSp_FrVZ7A
ztzUT$|9utJsjZ_BwwcYW-<M|hvm`5oguwx;^pv;>-RM3*+Gj&xZ5ip->%3;P{hvEA
zbQgN@f6o7bV@a>}2PJ6wOF$Sk2Nt~9Z50~XoWwF`zDziKDwV#P-|8%HOy|58*9^!B
z#2I<x2IUxq(bF;}Oc#5a%btAfFoIzE2P&?PSGF1lhyGnjplhqA_K2m*YQpoM=d=IA
zer<z1^OW{6(wFYKvTTsd;bkLT8Rmb`=|~5?R1f>~3hk6il@6O|ur>8;Q##{E_R}=P
zkz<p){KAQ(j>gTNp)*K9r(QS4nx_?G%iC}rRe7-kDx9;Cln2;aqP?(%Ori4HVGJ9R
zkTcL3HiAa6<(q+_nN_Ni5ODnF!bS>omBAptLTHZ0Shg~%lTfWR2hj^DX#jU1_A5Td
z=;i9Pyn&V&P6bu~%rN>z2myPjQ_NI_5E0q<yq=|fWFS#!V#-*OON{e{e(rD-7pK?S
zUK&$yBYUF?u=6RZdKo47eHJi0;Uf-7U?cF|)|-G`*Mtz0;&EJ3E_3^$R>LqC)z}Ii
zT$64Naie>k-=K>>gS<aGwz$|Pf4vz~rck}xXZ4PFCBZeIsW=J6%9*<Y^6--%2UUED
zb~KBo&Pzy;|K?EQbBSiy^3`Z30l`>5RmN(`q-%3p>e?L#^-rv<n{AZ^r*`n*<|u?~
z9#^3=AWD3;7T5T#<4<T+3c*A+a*~dCD)Fjx0rtIu5?|%QU0Eb^8+>&RzAS^EJwPVC
ztAoX%X0G9kxbjMaY-#sty2%&#*Od#2jF^Cla-mF06;R<2KDUjTZIm$Kj3`zb)ln4)
zx**_@lC(IN^rmLwY|<kcO$Mqk38s%JV?YocXtmCH4A@N~(f^n?nysoUY&)kYt+adf
z>$O&U9@|5*kAR8h{*w-jzB_u&`qu3sTa6z-e+E@K5FgCW2t-K-EAWaYm4F@d3Iih7
z#B#R^^GT2gfTop~l;Yi3DzgpgG!v*swE;^B3+5v|P$@mk^<DNS-TQbAb9m^9fCQMi
z0Bvb~E$sqaH@dFHs{q@q>Vy7fX-L>a!~}z)9^q<(oooaw%Z6S!^9Zpag+fbQc;cX!
z^28znWAjOaS~;`JX=*LdkKajv6@E5PL&|pm94ZQQ=-!w@z(wiUFer*^z^Gm&#F6xH
znG*C&O(&WVvC}VomnMpKd+ZPTm$?}#+HDDfaHMn%TSrp|<q970*@^jwxGCB5#|*ao
z&K4C8`_rB}@LYDx<_i>Y<YGQ`8Jv>G7BrPuqcY{n8jL1-PI(Hx70zMM_<pT(5w)g&
zZ6|*shsJT*CC(*`?s<??(3*CE^ku=dNX5%2N-0-Opsm)+urP}t1MdCP(B>yxAs%dJ
zrwyMVbw3TQ^O%-|NowA|T^-Q8Yy{hp^ToW+AJ^|?+<lMixi3d~11F>88FR9FT|9%^
zo47>&m7$V(wzqtQIZNG|^OC9Ru{HOoi+qDQS@78p)Z?s_M-@efk1{??qD({dOn0C8
zRVy~qXNVp&LhO8MzcX_JGP(T|n;V#HtX48sGSt<UCbkJrT7;y&m1)=i$wzyTsO2RP
zqdA{V*=Hw1RrM1lWi-A5^!09lF~fIa|7?s#M<2DK?a15nIk%foW`{#Z|FBhqjj>G!
z0ux7W@ifYDU9=XR+*NKN+0{Kx@h&8*ivgg!0xAl4pCiy<0yBEw0b?}T%W<<<-8*34
zKXPdu17*0351by_bVQ`r*kr+GdJ@4&g*_$jl4aHQfy_Lw3VokvZsHV=!j2|Xd72{0
z`CJ=XnZ9}7#9%?NEn5)2y+T<9XlV9lOzMJ0!Q^UhZ1uY9t0CD4Z9oM~Y8gBV(h4aX
z6QX5$IwHr~Ui629ornGt&u1_<lrTw!KelB2u$~r@2P|%b48j~^VjDCayQ|?vNG1)&
z^{y~aKPlQpIjrWeRF%%Lh!QJr2*oHlYN>}}AsS8cJROTQGu4QTGz#;;=CMx<w-(M{
z6317vxXA0uvOk>U*_~2qIXIFz>}qm|zhpx^B2U>dLnUXLaY=?VQq=2ln*VB`^X7x~
zaf3)=r@K^Qc(UHX;>$zVyu}U>z-Yc&D1*Cv;#J#=(L_Vq>(isONj#tKzW5s{6CKQc
z!e0ID4IU%<KofYpH5@ou8On&k@;HqJAh}~budxyGJxE10#sH|PK@c@o@wR-rM0z6X
z{T*Z6tA@P8(4Czz>HHLRypZ+{N|j2BN^o8jA2Dz~PpQo5ct%GJ7n9X-Nww#n)o~Op
zmhkv$FFHx6KmXsb2qYl2J@5K+m(CM#5nL|KIW^zKnZYqw$Z$jL|EN5T4Y=AWp0)fg
zNf_K~7hZ|0Z%8~;{NRn>OZPu!-SPc^sq1zP=;D$NCO&gzrLY>rXTY`9?wh>%NygN>
z-6ihX4BE)1bh^RYBPOi}nzVVWB8-aQ>=CxY55MJ*SakBt@pQHb9Yqo`@Y|;k&rRA_
zN^bxuRHUkQED#l$aDV<8`67k}!ETt-0wF`1nWZ{=NU{r!oo>1UHJ%Td{BNWS#S#DW
zT`$#gqkL8H>a2e)!u&kQBms>{zkEnJyYeKz{L2D~uaow$@y#;Xzf7|d5v~CSILv^N
z<1t*XQ#I)X$>X~YmL8+Vej-f3+P~%|qh(ZtNZpMPUM1^+{K+>~*i^&nZY2AUKgsYa
zU)P5}ZaJ#;9rqBr+*|)elTg}r5IoH(Q3RjPP)Wm$?T|0@Egx=->tsr_6CAlVk^eA-
z4ZA+htPz~^HLf_nY;vu|^{LyCq%l|_3$I5_>*C0EJ$+KhbTM)Ljlya?R1;~{bE+Mi
zo=aTxd+IjU;)_kr99m1iqg*czhIs2!;OeS7lA8Dn=yPyuIBb4O7WM%)=j$Eef{n)a
zZV7L5Nh`T?-KSo!_RqC9c;6`IUiVZv6|7%YJf0^+c7pW7fkxc~ppf8|=o<5$Q{<PK
zl~QTSqC&t)_UW>D%nAxe1_@FGjO0m#Q_^N%@jd_ZEcM?q5lC#Gj?EEJubMRwBU78m
zFFI94u_ms(w6-x@-?2S3U=YfOJ(N(4XTRLPU>uuVghyY6D)1Hx|Gb6Gy!USg)xgUh
zdvymmVA(EImFi@Lp4=)Hp2{V`_=0@lp$^`EylEW5ML`Qh#k96omE(sg|EQc8rTHWG
z(k)ix!*(RFUvR@G8Lfkc^De&#o06eMj;W>yGnt>*W1l3#bB~%#f&vG5>DIv=JC-SD
zLlaW;bY&tH9Q2p^$JdmWG(_HT?ar<=Sk-Hu8;q+SNChJ@2V}9Yix(XiW1b~aMhQLN
zgY{$LD5|zZ8TgW6m=aGlMC($^m{Y#pvjw#szFzFL)S>zffnZP$oci5w*Vq#OZg8n5
zDU(+!c87{U5Z^tAGo7=KQXib=z?Fv(?wFNdbC=@WEiz2BsWx|n^o)aT4NWb_%E)hZ
zk^Ha?iQ~UgxPF#!gBIJ3Kt|zZ$kiQxAp)He`>MHumhUx!x3>W+8mfBjaw3xb?Ys52
zO~`;52n%}-@qMFz5L)XXJ3jUS8a9}9h9A0XoBr7Nm)OdwYPGU7vQeqCp1luGwZ7QI
zTRxzQg8%M4?h*~f+L|JRw;_?P80YPmrJ7)>Y=E7oc-=S9%tf2$9l*V3sFflyLK8tO
z(oCxg()d^2-G!6VJ9X|0YO<zVu#^-Th~Z{SDQK9c!iw`pb$xmKJFm2@!Eb@+f1wVa
z2?~6L&86t;>9^VjnmpO(hK#4*9dzo(HeKPRRA;qdEiylwsreztxKLRLIB<|;&A}b2
z>-JVZ2jLXrusrTtz`I{B1md2|x4OEPsmR4+xyN^2&6yel^r19uUd$?@D+(htAvH4*
z)a7iAlXfwymr}kE3bDcKJUz?=@ko_O6g+b*Z>Ojj#=}cs*o)oBOU6O)5hpgY)Y@0o
zZyX!M2hk?Z+OzNq*41}RDMeh>v8`h~yiW<bG(fpa1eZbQ#}}l6ik+CdK}dOJUh-Dn
zvP6YvgQEC>u$(>M)G<FeM?cOyy-zT3O;98j(5%+E&(kIz>=gyHo&EGgiGD)XZr7wB
zTXq(}dduKs+viX-wvkEXl5K6EU>Dolx3eUwA_QHrp9ECehvchjz#4BMq1QFoXuKGg
zWfjaaJmsTAADVi%^e^7pzDqG9*9&hcbVn|M5aLiB?iXW>v>X9V<3bepE#BATQyz4y
zFi9t@^?Xlp4vhng_$0pCL&tIr22M%{f{W0iBOhTF#Io^xmESM`WSxyQ@UT1HMe&Vi
z`#Td&9+%q=#x@^L_D(q&3J^7<$C?kFx(wfCTrIm6YI~7m{zUQFZ*ZO4jP@Km)+02P
zq@U-4Z=918VA!opE)UFR^(&m(%aTLmJBo6v2$Nj2Nj<SA0h2TkRv?F!9z-C%l!K1q
z!(U02!IpXGOO<gfPdO5^dI9kV|3RkX`yZBO!=ASP9;WpAFr&p0uhJ}|W6n2pHYI(9
zVJwyN0J)yOO`MS(>oraM`vxv#f|$P!M4tyWnGQx<Kn=Y7pt%Hb3TdsIb#YI5^&yy7
z3n1v5m<w-Ca2^o!zrj)YVO>3r{&5huqbgakYG#so!RU5wcA+A14Fok`9V}W@&XoE#
zan)P|Ub{{eCQAyI=(`^FhDWM|tKfoh6_7l7w0*?D5-5gKJebxDYvSKnYFkowpDOoE
z{PWKOXlY<+rx@X3yQEM$xJEo6)f(x{_$0M0tusq)q@1giwg^X=<00GIwmfSe+~8%i
z*@J_!!_^7s`+k3?PzZsuCnG9H#I6YJlKnah7vnlI6GrwOie8K}s4dmP3cr@AfHg;|
z;7q>7NI^h)kykb9aKV7l)q5M$S?l7uydg2sEU2qqxyavT>NJRI2@;Sl?8S=V-0DP0
zWt*;(U6Wf}7K?>`v&))@tEXk!p>2lz!s=pLhWcjEK1+EAf79REpB=GJiLFWPBr_f;
zkNevbt%b(xqtWZ#0vG+s39id%4v}x);r;P1t4^i26W#D~PQqKPPDl$XGYP7C;Fm(t
z9r`{vwrmB%|JKA8tn!S_-52)-^G)2`j3_z=7%MJ6A>Gurtv#7}{#eCTHj+zCO{-(~
z8ve&+5E25up{)Fy<_Lu4M}&c9N%>SUlg+B&4+-AkzKbhw_xDTU?|&3<evf??1-r*{
zpQV=iLd0)-RMww}`~a+pNhbNm;?l~$pH&NCwyscubW^`}(q(4t#LD~2#kvsrK9;Bi
z?$_nFx_C!rnF;nbHpg(XF~*w^{&M27O|Z$l7|ch?vABP(1IpExg421HTi8ey@ZM7X
zpkSbVIHlMW^TVTjpO;xhRwcB65DKyZolQ<hW;}2z`XsT@7?AUc$4QLKOnRIVlc@9F
zEQ^^OEO7T(R29@vYP~;)`8n>I#gp0kDSa3Ws~G+CO9CVkb^cKw+nF4NK9@PRM{U5c
zm~5|Xg<8_}Yl3N&zJ7+$6O|%mfPOOXGm9_<pm80C5?#3maT5$&&d&H3o|2cGK{a{X
zL9(e`L6@D-aMAOCsstKTAO&+{px$HH_Ud|C(o7C3lHNE^TcKQDvLmVK3I(vcDH3R_
zWc|TeJaOf&UQks+8mDYq$<;>a9w*XWFCry<;8Nx=y#g(%11^(~_WdSz_l;f66BG->
zoW9I@9)0qIRus5{e?Izcc;Marv=1Ta4X@X|DC|Hl35Zu_t_Bma&+_2SI{op0T>8AX
z4b;g&+kM$_$lpFEiPN<#KZUkId4)q0W*sg7^vV%E&1>r)(`9~6K;syvUw&-X5b>gQ
zYu_Al=0FEO%2$X)djCOqt1zXd>kCt36PdySZmh2IsP_wHg}gzq!&XKmz^kwxDI{`~
zgjzFWIJx_X{huni6VbdG$Asc$Wd~k}wbngPu~e>oGt%u4OM#o4?%I~Kl8S&gv_9a_
zy7s{4*^tz~PBwVelO!&<(#G@L<bMS~@INN){ul-9cs!zX{VYQmfwf8yn45f$$;qd7
z#W1Y6b2k^OK^E`v6o~_wK*lBrjd-uehDy>S!3~9Lf%}3{u7l&Dpu-Nz9N{h?zvQ;S
zZ=n0~+`wa7Pv=-!Lb0qUe7EJCIxU)kx$mlekECB$8(p0&P@7#X1An-tL;rK+H^G9E
zsNxM;uZ4n-MSkz;oLcvS9JbySR*T*5yh;3|(qRq_rB%B;@;X3|xo$jk;JJNujz`bR
zlEP|cWiF-O1$tdNxmVT+dL&}m6b14tO@+psLQ&fLg|96c<ittYm8N*M$s-vf$>SiH
zA4uvRHIV)k$|tDVZ(iT&cfCo6Pez86jw3Il4+CV(mgJ0Dj7;`Jn++^sv~*XAG-#6y
z(lvQUe_+Wp9BcEt$;-D4<M#N=xYhmP>vMkpC9lW*#T_<8TidfR_Uew0EVw?pp%G<5
zR6ucqk2tFzsVoQIeLINLV-R=U^PEK!g{!kP+F6NHgYp?tz<Fmo?1>Q~W06&ieSm4I
z4XwR+a6A2*Ne8zC$7<_us(`=4kz$#gm3%ycryBIiN#b9eJ2}%W%kFZoNcce4+Pmiq
z%{%@{R$*=SX;mh8als;UKVoYy_jjrPmxgeMu=3RWOEs~(oBgKDOtrY1W)(r!sk!YU
z4#@0~n!lBD&DUzf&Iqrg!f404W#ib~CG?YW5Zmt`SnrMG?EXm&fER3a=kf<D$)ZtE
z3_B!D>#-#ZjfKiRbBq@wu?uSJ7OuFwNLp2*3Wj1tz{%S=@$%PdF`L3<0NuL^`djAM
z1Q+hXoLQ=#EM)m&-gxC(d182@IaH@!KCbVwmDA`>d|ylsTT`!iO;NZNWq`y;(ry{A
zVz5sG?FTGwLSNEw-SLO|eO`na(RYX+$m=hS7t~A}!*~Y?6>hXU+o4|=L{pKUC00ev
z;6bs{XOWMqxckbBWj#uj+}z0wY#AL`YJ&NQkxSzt1YlL^Z2BMys}Zw-q@M?4R$P-L
zBBy{Q0d$jg-*jmg>medsSsm2rz=rDX?pb^v>{1>rU5}<T8Q9UydAt>`{Oo2P5K_xQ
z4a1Wzjse&f(8{EkKFiC#e_N#AsfGK02z@T0zZ9|7&MC3iaCvaL!|Oiozaa8H*NBHK
z1Ro_6OKiB?xdy)73GsZ(-~UoNYuwmQaej_Ud!Y_U4V{fqnmaFy1O$d-8yDg!(NRF^
z6C7D`(%-B~2eqlqP?ka>W>qoc^Vd3B+UqAz^G&2gf!~WBd1Q&bq^!2*ss)b{*U}wP
zc&l^~6X038Umbu(vXC%YDEw=@eeM+P?~>by{kQXO;XjM#_b3^X;$QN*aA0ypA^^AA
zlQG~wtU1xu%>$`g|2ZmO<T&NP<FV8@o(b>1K&*)}|ArnTi6}7y=850#+7M3tHAtrr
z2k#EC<M9Jovg-$0{XSe!MzOM0N$1q^Rb!#?DLEAVh%*F$E)X4(&m~C8GGY=ol38dM
zzLudxvb&)156gW>>Xf1t=#-0&h<GLBQN7(@Hd&GSnbfA6r{+LvWOT<OM1#meDd9Dz
z$Q7}X+-Cp;j?@Rwh@dD;vv$IJ5mvLz`)`O2@w`%?QM%FGq&%klWjhtug-@ubuOM@Z
z<?-%CkY)UWOkCzOB1Q$iXY}SH>$%9?^}oCMh$v+w`aLm5sVhwZIaXD=o#Fb_Gf*0n
zx(vVAC_+$7aT9VnFh#JhX!3pO$iRDZD6@(}A%f$*lH3OisX+a{OwY%wG!#Z)e2TC2
zsjY9<#R)V`EGa!yLvs1-1r_Q#UH89lbk!76@{sFhoA|wN;i@(&u?EghlUmmd`mUyG
zcla-_!+}Nai)y>iCp^v*xt_mER2P@|TCY&Y2Ta#bY%RmhVO}mj;#GS-<`{o#76n_Q
zF6Nn+sV9w*LK-a1k~PI8BH$0xs7fyljkZKFm6J;#)_^N4P+}uw0<$RWrL+VNM3Dk9
z2j)b9W?Yii&r5$qOvvO79So#4Mk{~NmXxumC3&pR(uJSb58}Vs0fHP|xApT5ohvF)
zO0vk)To)f-DOO8J*d4)v4Q(e027i5R4o}(BXCOK*q>nYVogx`A;Wgm;T0;uSy1JI~
zdBm_cgxT*H%)Z+{Xw_h640`odOAfzzlhKsX7%$2zE9K~A!|>Ql*A)YYiU>K>AQC2=
zN>s%1dx~(Gq7362u?IY<S?SB&2!70DlOl`SP>XVaH`2bGh!)cC39N~?+lOFKbBg4O
zS4#LDgwaApW`g%WerRAOFiAceUmE)5NP}BMpmiEjUPCT+?aRSlt}-fK?Ae4Pc({%A
zqj^dO7~9a@Bb>}H7Ce$GIBWXV+SO+_q2>cK<Eck`=}8fmLbZ{<f!&(G6x<)qG$|1$
zD&oB+16Siy=ZhYw&J^dwns?_A0ciuQ=y{EoZlhEIHKA|&i6E%^3k{1a?PWmFpp)^-
z_Nr2jN%so)<Kh1g)Icl0aQ<3O$I5)$5$dAAtIrM4&epJV@;v_F#lMD5cO3~bu9iti
z=*sqmCdNu{1B+^e?>zTk;?nu=;WJPD8LY28g~hDF-pzu=ytdc3aP`i2@XA}ii?!8l
zuH8=p?t&wf+I&%Hh+e~jRLUh`J%5^|G&k!Q-QEVWw9O=3syYbgA%78-E;p`PYvG}O
z-?o5_d!TQms+{_JeJ@A<iUM(866G3DGay2w*!V{cCS@rOfKqktPkNmlKg#3G0r(Ld
z-Yk10z}Wy5<uO@XXE3cl48P8zH1{U&c57d5N8&P<!^z`&et?teT?z>`x=AI97#!Ca
zoK$GFBRuis7C!#zE$rW$;FTBm@aC(BI6j)9({7>NAt+H>nJ#Is2N;AA5?vtXg<52F
zTb(_1Osb_R5yAi5v5<@?kq9f^uw;zX+%JW-8olu810f*p1)u?h8&l5}@Wbb?PXbg=
zsuW}3;o<PBR0l||-@&a~<8Nhud~cL%b&i6mF$Uo*f4CYfZMAA+C@;0Kl^s>9<$|c+
zos190?L*0Fjmn*HPCzwK11f#{LPt$ST*T3_PC-(mZ_0%-l3Kp$rXP)mP%(M9T_++t
zua<`LxM=~5mA{#R)iO}dsB_~e@6L+Qk0Lp$6zHo0L`K*P()e)@<3}i#C{2>nDaI`f
zFm;U0$sitWDx%NsF=>AYYqiTGKytd5BFx7Ny!yQ%+W7|V9DNVpd-4Cp@H!cP>8)X{
zvNbZN^VKENm{|IoI5>J2-#&U9k3IZlJbdBj(Q9vET8;7M>p#HtThC&3<-Dp+3b9Af
zCvuv6C}2}c1jUGhBB>gdqE>zb4NRxAhIV^JNxi{@vXqRCanQ)exD#$I>-_UFz`+q#
zw+3_7oI-N~JaIWfQBxoy@PAQ=5D;mRFVD=g<41j*IRFp*h`0-ygDV?qx*0I*?Fe<o
zZPVr--O|?A*+Mk3R?z3%-V&eyVso{|T8*bOAe`IRNJ+1S2!JHzI-50^-dV8j!0K8X
zzxr=Kj$ioYD|qwu1HAs~A@=S~bu&q&l#pwCb)`E+L(B78{NT%qWaC%8c&>Gp`fH2c
z6G{(gUxFx+T5^#Ew}wYPN|ZZQks<C$pvZ&@8L|3Zki@i-#*lmG{%RO8L#bx8ttvna
zyJuI2?S0i@aL7Q4D5d5sQfBF$hOqJ=NS&yrzt4{=k<Y^tdiB2Fdg$A@$>AdS032{H
zT;9Ot`+%9^2E;n%nW6Va)}LGR^yI)s(s)9QTN)F3BPxFCpsJ*?PpcRTpe2OdK*~^s
zV2)_Xrb9lQqi2_)9sgX(tUh0Ufjk@HYe)kou}Wn%mubh+!`jl?B703b5lr67Nkucl
ztks|{Ow!gjlQLrI_CqN~hf}=z{XTk~O?<HT4ZQIBU&q?oHc+?3;W7Oj7K$>b-})3w
zTjpNp9GYf<5AQyYTlZc?nyz9|&iH26)=1?q<Jo8Gl8$3y`TYPJk{%0|`zIo*q~U1i
zA=ZDVv#u$`ut^f_N!l%vg90tjbtg43CDYDuOWmb-477Ben9UK>d88e^`Ev*nunHKK
z0;aBj4N#O37MgCTQB6c6<m~vUjxz_~0UuHaF9bCf-Enel%h8b~)*K0ke`(vis_p5f
z$1hh=05R%jU{0Y7h8(z+8(x{dH!Ka4LIgQK_bH{kWrO3R3de^fdffzH{L*E7=_{9U
z`{od@zI=ddSC4Qqn6st;{S(JRjkMz)Si?};7_>aWu*R^X8xz%ps08GEJ#0`|XMnb6
z;tyB@m|#4u&R>5P_)*7BBYzK3Dl*}sMH4;>RQR;m+ePm#_iu(;%lupwfb|McGGIc@
zSBNZVx&T`07ecrEQC`x|BBH=A@Ik5LK3IpvAXK$Vy``sX-)QGH8cu$+0XfT5l!D8k
zag(M%;)pWiT^08{@zj?|5=vt^c|~ZnGClBB9j2^oR8xl(3V~j&HZtPZ%d@nWwJJX0
zqFiagW2rGizC^lOo<SyRi-BRJ@>IEP`l`r<bFK(-R$`wz-xQ6~RknLECPPIV__DpG
z<@V(mgS`pf_`w*P8(X+~^Xqu=^}m7D-ZrA99h7qFeW;^Nztir)ZY9z>L)6AfXHA}R
z4YWFIoHn5L!_L8Ecs*z;#ZbSFOAstD8bz80Z2U=oH%2EH<8OO|3;Y9vE$>yw#N1T3
zFg@U8&(`frA$P#`J|+6;6czW5n^tNY^D1JbuMElnt%8NlQ`P09qUUyYd}PO&1MmP3
z-JCdlu?W=;?u{K7b_Z*_60Gn%KAMwA#iB!F*@h})TC4AH@$fA6T~J5O2HT=_w>P_k
zTM?^un9dtaZk0%L;M{f(f9}7rioxI^yz%-mUVHVBQw7wvxZBBDl!$rcTF&Q4VoP3#
zhm<8XAa&IqlID(jl7H4_LiC!7VO(+qgbYYgf|Cknm|E-nc_R&6CsmKLj&qWS@DYu)
zOqS2JNYvm|YY)s3e`1Yogc@jsKaTpN3=wf0SQ^+pG=HuzRbps>$<zk?09SgY4ucGb
zmt_r*X<q@ZQK=G4eCo-XQCQAg=cYJUL6a)CQF{o%2$6P(QC1{jN#fTg4vRC@QA6#G
zRb)!9&B-#W;g!!K5g^UeTlYT`o^scu{TNJY*HR3eG9hO%M;vD|_Vk(Vnd_ahthR6%
zxEz&JP4wU?#Xt^>&leCRKAX>2Ub~$~h*yBcLR9_8U=hcHM5{J0#Mrqx!S&as*xDA7
z-YakZJ*=)?1S%zkQq=9pczz+%HCl6IaZbHO6|E&B>QTcj;>-x)PbLJtH(qi84BD57
z-`DWFeV|UzX|JKfu)mv<P8wN=du|zOIx;{RL&F{~cmK2Jq?7@-XV7zE)6G4>1p24Z
zW+I@H|D^haDiBh30IG`SjKFrx3#zN}Su22#_Be9@9{dsFw?Ra-{MWFVDwSGUd6g0T
z{Ml@k**Rsg(OORuC0`K<j3Xt#v58Z!km-F_7JNn^0CE~B;Al9L4fW`t#v!2sy#zn^
zl}q^9FI~U~*9Um%#Xa1-F+w>f(qPIWMsx_FDu5~3kVtK~gL@r{L7S(B4+dL1(i&}j
z)U&)LIb}r#8s`*9b%6B+U_xQ&{Mb$xWWr50*md1A<L~;QYx$q+7HD<Wh6D)o&&Wm6
z@=bv(QdWrCD(Ec*<ThR#+xrfMii0%8sbV*E<m7sm;bx1Bm#2-JJW4|K)6h+*05J-Z
z4cub){weL>;q@EjeiIkf3mMWo2?78~s>f6&gw$!hBBbcwB`lotAci!K(wa0Cq@^;!
z`x!Z8s#2t3X3#pBqfkYq$f2wm4xu*JQg&*!^V|(HNim&_v2&-u)_RIdPs%AL18QGe
zb84X71>S#sf)C$b;QYmPymsyXgE!v(DpppuIMTLsh+!52ty8B#eI^FI^EfDc!*2^y
zNmiz423^qv9s_Xz)U|ePtF0P>(Ji&w<Q%kHYiQ+E>#x^!da5}G+%9pM9O<5TsOW4d
z0sEOrk+QZd6{FRF0TL)rSIYnVS4txh5<vX`NDYzyPgN?Qe9hVMQ66Uwz=J+?AsSyj
zWGnl>ivgDkX(tt@ucL;-2JVZ7wqUht{Ha42GxKXqsHCq$TL0APiy8@0J$)cKuiqF`
z-Ys#<(^;@+h%PT+ZyGG0$J;xJ3LwFB0*uB5S{d-@BWrm2;~O~GpW?Mw5Ag20$LLdg
z;v_|@P0^V&Jh2K0iQ3Ij3QX+CU`!ZNK-2x+hRoQ{6pg1+)}@glIRNsH_yfLIyyc5c
zFWxipgUC22gK|9qY@1bro>c@$K3^q(EzcZh>I|p>bh`b{9dO3m!TtOz`-{BFO!ra_
zU*X*_iyzAJ*zNew!4Ex;gUqc&Q#ljjFzHE5SyG{3iBJv3wsEuPWx52?+SfDgt?Poq
z`$1WsIcM@2_KY?1SHmw3qct6p^a?58#c^5-;^Odx`;4kJ;aNg0XfAO_NRg^xq|7DF
zyn~XaIYxsc^iK|f`6W(qJp6Qw^-Zuq&*-qmTi=;*SI%=6s5bv^<Jt$`#QGZP=<Cxp
z)JLOsMmS6jl7A(J+Ai2j5*tC#r<wd34f6hqJlV|h^HR^F&O(~B(8@bV5-RmGKQw?M
zoQ6Y)$|;8;m_w)MlZ`r$qRA|)v*=}$wVFT?9TxtPrqI$WK;?hABOs|La$DdSvqc?~
zk|?DKYLYEHJ3i9m%mH|S2QSt{33j$HRBB&3(*`hr7z<lY&dho9L5H%3t^B5{k&{@+
zaDrD}x{2Xvf-Ft3y|s$R9^b~f3oD!hEQ{LL@S6^eGd=-R#~FMlPi*OVAq=V%o0Tg{
zK9<cNijumWRY=ncYnv_ni9b#4iLc<jcTe!r^Lw~=XT%U{yOkr!7!Oo~;<pzE|GQ{6
zT7v1F(O7DBCo!Z%EGkLNe`y8qwg?Nc*pS>zke`<Gy4qzIaa%4`f2&P>ocNET05QYP
zbb*EhC@P@*0ZZpN2-}78;rR`jurxz}d???;V<&1LPDNHBfD>N7_vFm!^RR8`AQ;*t
zr}fBDSh{EBbsjkOCRDCiH3mem*|{^)Q{JL`ll%2phIuEh$kABm+>*Mb3X2SbJ6#wd
z<XH)=!0I+<UD`uaEAAs=(b}&_Zq}}akP|+i@N%LiM^(>p?dl)kkN(oHbEJRgT7+J&
zK{07?uv4K}q_}*kgO}g^JGl1Y*Rip71$AlUP&2NI?2uBQmQvbhQA*A84?-DV<Cz5O
z-ldJaMuD_77U#esZN?8`bCjsZN7rcuD4`-OD-zVmV~%bQlDNXl{aPx@bOP=N4{V-F
zLQ@+r`?A5H>WA)u(gN&maYc)i0hU#alK22sg88DxoClLiXUzeyD?K}Y)W?|v@W2n(
zIz%@>Izsl0Zm8nA`^Dl?`kt)gJ$E&IO0|0Rm0LJE9-@_}m@gK%d3z6c?jB-G9f5})
zT0^Uwvw%oZ6r%U-2!iHpxQh&ogRc(ok?3+%YOm(~h1(4S#|IVqM-@7~7@z+17C!eg
zTex#;f|p-9z<ckUV9=kVou|lKnREkO>i6MurbZ-W_|$p{xFA$WYBEHwnX)rY4lXuQ
zpDMtaBOnnc<$^8pwdw*L6NbFK5D=Y+QV)%T|9v#37RcvfgK*qOdS=ZP;<j>4XT-y2
zY(uLC#qz^$gnZs#KUy>Qn&Me%cN>%f2Ck*09-LuUTtgHIgLj+egJ~(aIT*OAe2yfj
z+isSHqHH{vd}q1q+LKNdNr)rjsT1ELm*z<%h2uO>n-3nr5vgd8BA7#J8WoP`>6$^Q
zb4KUpE`_3?C#Mx-Ob~Q$<s4pn?OS;C@~3h6+-I<JYk`xy6}QvgTx(%g?c>?k{%hR4
z_X^fmALiP8@2rbJl&_@FXg><)g=8z_Clf=`l#@D_Heq-zG(;>l2g9tfN2N#+Fo|=H
z_&GJAECE8mq{`2prFck^d)Lo*DL>^6gaCofWhYtf5;VH*JX&NaBar~s=wJUiL2;`2
z=g8he{{sJ$ieiE?NtkC;G&L7E3KjC~`2V)|AJCSi*;ydCkGbaA@FpWOOh%f@$}FQ&
z37HbIgM^TwTiv6@z=DRwh&8ijdNs3pXbo!`X4YcpK?5|f#x&D|8q`8S3kiXw1_=Zb
zDv&9eQn~atBEv^Kf8RC7&f0#T8(G3-MrLK5zbZ1~-FNS~=lthC|K9uC-~RT49K8eZ
zwhxW4a3e)1)V%GEhEFWtqG2{M$i~`B+$C^4NZ@c$!2bRWMk8#-gIeDi<U_6x-rYTf
z?cbWfOD~M!+`~uV!o_27<j5*LR%L;?b5Au`km#;}H-b^ZkUr=}(hE6a`cWFPPz6B(
zvq?*73G9k?^293q{{Q3x?C(DW&wYLyKKtoyxN~z(8{g{c5L3CXy{a3MIy<6-$7jdt
zbw*;;P(yjf8eJ_7jl3zEw3JNf&`6hI2kQv&Sc#q)du@UvXhD$owVbVq2)POb{VotU
zB}5fiI67Ez{^|WlfR%)r5s@u9uA8`agy5&5ITYnHlN__vQuX0!0cES}H!C90xdt)s
zM%3ezHQa`KG_cb~O`FV_;W=h3j4zmgYfPUcDEY)lie8VV2FPJ0NvO(<q&sc~gxkED
zTdF+*bY3MtO~lf+xF10hRll?y!OHk3{OmvbA^6ZU-vZ}Od<2r=3KY!*p1bxEJpbCi
zg2j9Wo9kz3&GP-0Ifzic5J#D(qiZ9iDy+gpoB}hg-jqta6q>e#3j3tkvm=8+HY5~^
z=S|OnjVzHQ>0Zmaqvw*3Y{uOmkPeCz>9Dd)eO@CfB#ycx0peVcaaTPK=>jN^b47g<
zuoRF>ha0Q}Krx^ygGGfj%}QjYS`=*P#{(R_1Ms#EiBzOR7O8Hjor%%D=F0RD)BJu2
zjFrf(fw$)2>%$7FrUexB^CT@lnZqnY?GQo*UU~T@yz#~zIDKXVE?qhaXU`m^ch2W1
zz$3X_gW7pW0Ats}Llxk<GOhBWMTu-UdGlKoE!@0O!eG$C=8+V>_7i8|cYW;{xN>C=
ze)CgX@Wx9AQ0zCvT|m+x9al99XcKV=obtPb7)TyhTGVj45tHvURiRFbi|goh={Xx?
zPGEj^oXq$IzJ_k(dc!PoSGd+-U2WPEksF8E3Hp|3i5(S}ShYY+xdR$qS!y8Mi%>11
z=33!-E0m`<sdEs{SKh)^fdL5$@6)nKU77k;n^!Y<oKi97f)XAr*G`|H_cz4O6V3p`
z)xsR~UIbQrMreQ9psDjq#^_e&h?aoz2PE$=J`<Du*ce&kC@Gc0qv4vty7S1)_YQ|#
zf|#dkkgjC#>CgRR`267KV2}@?s0wJR8dgWgVSVK^m-V7?rm{8{%5?-vh@x_?(V<qv
zATs#xgZ)J-gW3JLMEN;n80iPC|G3}aiLelsihrmxsns<qA1uBf31>;tNtmdX1dM$$
zBIF~6p0qh6rJ<x&6msM>CeI}O%(t+SR^zx@un8KTCpHN}2cT&O^rxiPxSe?2HpLg+
zTKn;ijNSowTZRCwycvoes!0FbRm{2OShhzq{_0C}-F1x2!yaw|C@G?u0`ckw;wgP?
zjf<M%1FF$);Kq#|xPD`s(*qYz!XxL7!FV_zo<Kz%06E`H=MkCYF@LD>U}(6*dOkq{
zIQ*BKl?<yBuzCP>1qv9iWbnwtN8s^4as=+&UXbMQbD!HK(jXcK)D*yo1vLfatIVk3
z22N=MksMXH-|23WmN53CoDIFd=`yrwjx6C}J6trj{1s{?x*IM#9J1jDcD|znvCK*d
zVZrK{kke8)X5u;BbK#?Kd877VAPHb;2Tv$_Cyldw#=54WN2zc2v<089tk2*iDU8g9
zR$1<P&g_~gg2Sm~iq<K;kE(c>*Y_@pXoRAsftSRoL1#ZjV_WVq&(4{qV6?ro=u3p9
z%1(@+1tC&3N#`KB%-4Y`l(H6xFgS!G>j?2rp>9eT<s%pju=*rt2UVK!$O@OzOf~*`
zuUP!Y(Iasb1)A4#Qf)*P*BtfGNJo%kl%EaB0ib4~au58@hDp%fge4dC`pAWrd%~^9
z{YKe3X=-{nu=$p}Usl^v8j8Ci>bmzm!1pr03hfGrTn&=`6^2YDbA^r=>HuK=zZndm
zKrVnb18eK~eOqfk-qF!J0B`S*0vX<fsPT;^*~tG^h#RO4uo+F+ocMPk4W^82+4!rf
zhPAa33<p?8%bMOD#zD-3%BDOTu-YD_2ksrf%P-!7M=qRzhtD0OW8r78GZz_>bUD)3
z=uc(9VuiRWumv4fodWucodb#%+7@Qh2Cl!+z;K+vkrM;>J-_!6_{8si2wr}E7e4#h
zEx2}N3e7x)m6Z{T*aU;+B13MyELSY1J>U{%*qES&HT=Oq2E*Hl-R1BK6YF0J!TNcq
zvG*E%g@N6f5JRt32>Qkdx0o?jgg`zUIxI%zHARH%Thv-=zMqy&x0f34`M&9EPTeXb
zbT)~grxCq0NwUr`;vlGkqrgOFWKDB`W|Ptk#M%#1xcECJ9Ezl_N+FvPAmbuYr;d#o
z#+{<CKvB1%BnTL{4gNkuy1$h7nP`@rpAjudSAt=1PJ^g(r=(YQI?1u7I(Do+KnL3S
z5QY$mBBTV^GH064=SDp0plYs1%Sk<r<M<9eBM9%OsHK5i2+rvnLStpDO5)=UA|wsW
za5L;e*R0YIfy1ZwU9yjs4&;mQ6py-6=&W#8PIju?3E|TUD3>4|9ORfICrW@!_N0~%
zl&U}{Acv~O7R))64R;LXGc0HK?Wp~DM@R1fyv-va0ZxuoC~7q$pu#j^1ob{e3G{V3
zmO_dIyP-fy14oVx;h~3*z-zB=!N%H<dW6$++(cBtkpndX1B`-@G&nEe#piFpYp>jd
z)2ENX#fzum_=z=0hZ*w(Ff(hgU-x|C-_hLjcNo;zc{{<gR2;z@M^ymayII4|-3rz>
zQh55qC*bLio`7rDrts-s-+`B(+lQ=0UPA^A%Cjv;#GGsBM6hZ^9IFmah|Z-!?Vght
z;5$<310J9ooI~kEGBh|;%dz}BBf(Gqj)i+MYT`pL#ej<5I@8bKehaz-N<>Qs+12C(
zsG^#$uy`%;6^?{s^nL#=j$QLQSg_Ro>)ergphoQ0r$VpO7XwAIj)z;vLv1eAC9c_w
z;98{R*r22~=9dZKR}!Wo1`4huDLX5ed~gFxDuGh^XY)buv|cJkuGpsl;eDHJ7s9ii
z5G?1TWqyKt$T5YqNB5bDe)RpMDJ4QumLg;w3FPmn@h9yGbH;Qb=qlx(@eF-s`txQB
zTF+W<okaeM(sTMj?v3aNupfqV%gzEiN7yD<-D7<O7^3GEP@Jt`#E?-JMF(|lBY&fz
z>L)D~#Xl7ZHD`33hU)%vD5y-B%a`l6*8zCYqjvz_=8+_c5bm``y=xTdJ(92E4N}dt
zL_L<<jghY+t_d6-R`AiUI0M&i?!jzP!rFKsWG`$$5;tyza4nvs_fdKv!~9zfH*Rdf
zty?>A^w>IFxNs8AJ#+-dgB*&YrH+9LY4cF|K)D7pL;-MCm{G6Oa*Mu^S-PT0U~d~6
z5fw0AP2t?xRe1Cdt-=e>9fg1PGdE#&P{LrCOWu_|9G*+rMD<#YkQIS%v-sU=0t<VC
z@|jJQY~-OlPa`=JUQ+loIt+#(2z07jrbrxW8bF;fOB2NJGp7lObeK!;VhLK&rT38k
zA;df>*VOCa2+W<yXmB|~4s)W%7o@`HKt7@>jwa7523I;+##`-j$LyJKI!O(upbC;3
zcU=a#r{;vj@-abq<T&=aDb{sbAcPZ1IqhuK9E22bsT}>A<$+m_O86y`%cr$Trz@Nk
zN_lJ9p>)|pAuCx2PTb_EUeg>=G)k|F{|tz|kF0$}7p%r#)-)MvtctLLp%zPexl%}j
zbX(Z647?iDjJiGj>LF5I#%D=Cqm7&5`eflC?Lx{3BRT}6f+359z$Vh&W&*ISKHP)w
z`Z1u#HIQ+I1*0AbG?}J4MZ8R^0?L|%y>uda65s<Ky#w$z4k|h$FIL&u4Lb1+3X*i+
zCvcjT+=Ym9$%&Wa3Nb!`#jJsiBSZMk?|cIO^(U{u*4;xG<N%`q656Q9j+MCt5;prS
zhK0z9l$lFlJVe2e1on0h;j`Nlc=eSrJaYadJo3nKSXmuGQ#DYOyxB91X@|1NR&%t5
zJ_c;S`2r$H6t9JhI19MU4*_m1N;rEyf#3DDYjFJ7CHV0ly#fcj=mfCnkw)MKR8q*+
zWj9MXbBKrp&NOtuFkkzCx7!o;xkhe*17T%$Vzfh$>UT|GTDn5Cl{^;>1*IJ$){Xpw
zjkceigcmd#R1TPG&Hdx7t`;e!jsXN)8cjfV(Ha^O1&Ors!hhFM2@ETM*M+K2x>|st
zCOXd%MTicLoul(vJpPslUl))O7?r^9{RJ4!2>J!V`DOSV%K^nfLHjO*HhQ1*x9uV|
zYP<ywH|JW2rviN|Cq%U%yhM&AeTmE``FwQ{IyXhGi3yWk1jp4Kjh$iKlZe5&yVMN;
zLNQHPYtnp7RRVQos2np9a#grWnjxt`7N2K8!aQ}Lr$a1G<Q6nZ(=hDAYqrg}g9kdf
z(g>&$2f!bI-T`>fqjvz_&OuLHGnEIN2u~g3qi>`CEQQkaZ*LyceX}1w%Tn0iYhd%p
z2)_Hfo`kDc_TYsV?!c{E`}AHU(-CP7BWH^qv{Wt#z?y_-OJYJeX0sBWd;U7S`s!Uc
zd*%pSyl?`Jomgd0eNhpqkB~~)sjZAq!ipH3A^t}xk4~T+LKbm~aP!o1q3c&#Y7Khv
zQV!qoJ?G&c{Jl3i<Toir5@xw^;bmjPQb`2FmE9cE7YeCIS>OPh5+I}GLl<|k8grd6
zH9$)0GIU1GnMcDE)bWmo;`fpi4$DNr3#ms}gQdA++t7pUG$T%q3UA^L*|X+BTrgg`
z>DR1L;4)eh?X&($V0Cw-qOv7<Id)eqy`eaWIZN_gG0ouI2%Q#XpnG{4zfTQif&pZT
zMzW)Zs7{LJpLN0{sy2cxX$|Bq2&H-j@&~I<xMQEvLZ!kWH~@5t$|Dd6iuEg0KSI$P
zBnM*2o<RGAKE#RTfAIYeD3A@WbU;pp(CY1XKI1;yrV<f)Jm5Kz!zg8#){#=*qv(n{
zUvd-8y_5Ip{qX*t?uu|k(LgQbs_0ay^b?&eIT83=Dzb?#F{S`S2&e&Al=vG?uQYAd
zO94ON(K`Td>mVq8K^q5cLRfF7duJee*`p-vZea}jo~#k7{ySRH7V<2C!-E<YvjiS_
z_!wNid<^c~JA`MSy$x@^u>-}lfzb$ShQ&~7=Z=u1H@MmYrGy&$<QXz_8@O_13*Nl8
z11C>x!1;^E;p~|W80I-w4^)UCXk-wg4?3_ygIXpPSjFrXxwwh#i&Fobws7kjZX6X{
zetZZY`sfMx?O(qKD{HyX-kYTeIYfJ5n<O-ni}{x}*Cn_)%(3z|%m5&ivb;Cbp2|?M
zlc2QrKSW?s@@Fx*`VeMhrAwR#YepLM>IS#S+O&wHO~=0dy?)`gU8~c%<b3)kVtOgW
zo$CCk5ePqr2@5AK^CjH_eLm!Tg7^@b*a%74q7Xx9UlBxz2#r?<%G>zHbJU|ze*pPG
zGw1AVVG3smbyZW_TfQ#j9|XKan?%X?ccgdm-$7tXubIh*%rQVQBYb|aQITu->vakF
zZ>jl|VPYhR6huJ-s<d1I5SI*}cDx_5vxK$fC7inM^m%i)&X(Zv<DyZ%v~t$-H&sqc
z=kPm4+8ne0B7ddd!xF$Tor$H)m}Q(}qb6I@Jp%BcNACc<t%H1ARUDyJt%_b^8!5!J
z_O9Ax%|g8HX6*tuQQnnJUWz5v0Mxn{P2Jk+3Vh?&UxvL8&*0^k?!l|CZNb504#Qzi
z=>ZO%g%qa-gmRVoWv)Yj2m%WYwQ%>|9^ARR2b&vXc=(Z{@bLL#^j%Ha5Gj#!tY%U|
zq~}J%Ob%@z8pW`0WWN(91o84aH(Ge;VgpZqXak=A!nSQ<EwQ`Q(5VyUk+Ybf?xtw}
z>>?m)?b)u#nFMA$&pDIAG;$)Q7*8PjD$KM-;&-@GLwDp}b2JuCK`JUbUDym5(Wp6U
z8ECYtw<+X#gMH`e<F>Q5mXv%N-(<E&V>uS?>2Cay>!2SEJpzJAjJ2|mH57lN{;Tz<
zGCW#SQ!14l6dC2);(VZ>oRz3{nCr3GmGT9&)Q*!=dVjNI08LUz#GgsCAP9mwvLrO3
z7gT_*Fd$oA5x^3>NaDltK_>R;)2a7Bjw9C^C71Ooc&(~Jp<lK0H@qiraNRoV*kkfQ
zbJT}Xk%oYF@o5k(KWJ`f?qALdy8wzqY59N5-D@lDuv)Z-7i*r&8nD*D;*ts~!AJla
ze-06f3e*0&_h5I0emuz0I{<Ivpwd5R3*sAV*_=25A~VZf|J0x}o~(;sylmZw<o6xP
zI5*e|A<_*@01hV&9PHOH8V%uNUvVCu`S4k|dUXe0eEv3UZ)2@Jz$nL#YPz|He5-9x
zE+MPsh@+fyo3m*F&p&qqUVZg8oH=`xNQ1|Zt<fe~78O?yWXp|NVlF=XTLUV+ERFXt
z_m~0{CBS62ffFZlIB{|Ww{Fg1FiZf|MBD`mN(yRB#Xyh&6|$CIp4wv_R_++eyy$hj
zh2jJexpFDT%ECUPsblXK&{ImR++fhP`c2hI@2r`SYFHuw>de?7IOychQK+SB#8CtN
zuhr^XnnAzM?u<E<+Af*%yrB%S!vl~(yfh|O>Tg2~Zc#Z;fxzlkJ*mi;Rs;m2@4b<&
zgQF1<^=G>Pxk~#eQ}|+*hnr}*$s`9L9bn5@;WVfQzX34*;Az*sj`Jujh7sP+*!Xi}
zD7okI%&Xk9=lTtX@b}3fQxR>#LIETI@?5DlgQOuGt9uL6uj@LjE4i13ziD}~pj4#a
zZ*v$VqODveXi<2;?kH6d++q%hZWp}fG_8n!G3x+upGdBVLTyLot?&o23V_!+w*4-9
zA)p65dI#Wb8D=$cA(xVUC%6_-cqSw#scx>!gcU7%b=QdjF0f~e#{z+iNlE&BU35Tu
zftMw~_ErglJb_0qoQB6PpMYC8_u)C>2^>IEV2jfs>71MHyl&)6>co6_-l|d9C(j4e
zBK7LkdvNXAHXJ{;PU1pm&TPWUK*WWrhIs;3&4A}ES3pjXB(6n?FwPziOho|9XDzI(
zq_BB(2sf@zDdNIixow(;%Pd$5m_zK4<CkMN`Hz2&ygPZN`w@LTZ2G)`Qa(YbSKUaT
zKks$g8j@>d$9raibZW8^?6|Nnk>#(&$&2M@@!kqZ97-RRI}pBdX%&Vfzm@FaR;(g8
zMlO@{_t;U^nK&4pLvh&1m#9Mhio0m+8`h?k+QsSzH7Kz|qh5#8-L#s4`v$1fAeey|
zSvTD1bEz?tdl$M8T8b+ju{H-a1!9EDQWqqntH~=`@nZ0h)iz{89|{|Z5}?h4x`tX-
zsq01&96>&!1ca5}X-X$P(kifJXouf{2;eAs;vAT`>f}>)Xous4L}PNs+~JQs5ffU%
z_h6R>S!hVu!|0wFeF5RKYtlO}C;@vn;s{8?A#)rs)InKbb_7Z!8Oyz{TY>}n@c>8f
z0KBaOS8`o2LC&FD>HE_)?DV5=s!^fN#9P9q5jSZjA(0T9%Wj5E9ZUU?T)VeZ($B|_
zZNj&F^AXtInZheCZ^4^y?!w_5Tl%IXD&)C&I(CZM90dO{{%7YzxxhAo@c=t_p~~L`
z?rlvdJwUw&E*yvT)fJe{swKjmU#^xN=~ZbN*z&ZXBZD#kt7}ppt(&aCnT*=I2ceOW
z#jHpOM8qWks9gs^!)^b5O(Rgm99pMx`ZwIWPC%xpf^N(FKa+E^z>L3N<Z(i&oZML}
zKNM)#PEnBnWu+^+p+vffFU0lb*Sn-Xu{7CwA;HMR`xNYx<;4ZDh~=w%4`dCQK74dk
zeI0SvL?;9KbSt5-8|5xvmqfObmG|@Wg`h@R929Cx&Cg1nuRx83I#{AhZHpz^R>Xi%
zHSV&<3W8|D_!%*GN1=L6J*lBKc->VWZ5f$I71kjAUb!Rs8h_rL{-qh{;wH-vPFTNk
zEI!qEyzW{ik)9X?SmlPccj|rtA}fI^*g^YPc{8N?mF%gcSV0B!`tVmpQ--2dq#3_O
z5Ymr#Z1fJm+c_|*Pm+>0=n6gEio;YX3-eBYN{e15MY$)fuXI8K9T6ZPJWc*>hY@2V
ze*M8dlfuU1G5oHNpN9{B=nP!Bx(9Du*@B(jDdd>*A0V`uVuVdB`jo{y{Ck3NP=Ikb
z9FS_?qNw1Nmv6z9H}1gY$4<lLN6%6x!U$f{sV!ZGrbBd2EUM$FgvA_SgdGG;?$AYK
zoJAd+CvCZ^40MakY<6_o&H3p1D0X)`KPxP&_2tW(lSN{Y`K}uwQb5R0a5X$FtK#!>
zx|z8u9_9rTEBppRmO0Xj8WY;~c=^m!(XZnKs1s$K-T0U+z3ZrkI!;36l(I5a#}i|1
z`~@b~NgT*8a+=vtD~&|$YAxDzr>=9aLJ0{SP8<`CFZJ95I$_Qnd8%S;B;BB@j>!<x
zJcp(!MS+fK9n^3qL)A=a!b7$HS{b5gGgixC1WKY@(|T~Lrz?&cAL$jS6mZ9#5e38O
zCz%5#A2R1F&V<jVp(}CC#`UVEKcIa|NMvwcj}<sV>dcZ8z+z46tT>Xzix1H;Zwc(!
z1eW{h0?~%uR1`zc2hM9|8~_vz0_09PUAZ3*X!H)i+d8mthYDNe5#bHly<`V<Ew|rk
z|7+1}*C>T3vO`oeVHN(Zd+Qu|&^J*T9p_20NzZ&y5i#(oC(ghJKX?Le-kiV-FW!OM
zxA$p-#4<uGHKYUu=G^ad$2D9wd=v6Ch2hGGzU$fNZV)-}gC95#<pRZtJWixf+a}^N
zv1&qfL#JFK_6;vY^F6@R`qd%qH;{tG-#Xq=ql{=(o^w@34pn0wIObXn8a85I01K#b
z5l3|HOt_=qOmVLSV949^s~qUL)myRwW}G`=E>kX@*r#4u2lBUt!JBT2xn=2`xO5L=
z&b<91Fugfk5}9-4F9c3o7tZUjoW0ze;G#)7CAQ9WsGR>DIWO)E1zH^e@)AqR5(wpk
zR*ovUXq6upXxhzTPEB^q*$ZSfK7_+>+Tl-q4Hp>_Q!Z;x4Ybv37=RLxAN8Q+EE=gx
zRM5a@Gk(&M5!V1PM@a6K?jvgK1OGvtwWvR#^Je$VAuz3);3-hO0~L3Q2_NOSx-&qo
zmgW83AvQjObUE~@0DwhZYWXU1X;>4u9}jHw4#3+uYJwHpk|1De*utb%HPT-8$M08C
zlx++Wuyr6$vGkoBHlmpsKt4=K!@sUtsA`6WsR@~Nb#vI2B0M=r-6XKHTM|Fv^ogTz
z?pu$-_Ra)ee)%rEd36_NhXrW^U`ZfD|H{}`MYk?tjR^9h*ta$w!)veIg)=9Q!m%S8
zP}LP{`}1W4l5mJff?@R#od8;>k*#e8jvLOjRLdn-D8`(w-E3f}cCbx7<cK?^YWlNR
zA}G{uC1x?|7o@?!1|<q=^B3J7I~Lsyzq>MSu-xJ@E1QE&on85(Nq>rFkr3HZWu$fZ
z({f9k1QNWXC`>e=bc<({AhP(mB1Mhg(mFFoCEmX-5llbNw%g5}kNe|Sh1;Xg;>Jr~
zP^>`QLp4e)Q$xRW=QrFdJ)qn-jfC|EsBt%gXofN5+$8sHRXFq)d5d;_x{lC@^DR{G
zPMc1JkIMaZXNL9%BK<{=D^?M7v9nmw8jEgKfQh{^QtcB2tfK*;$koz%vwMrxEqHkm
z&X@V%XP&D|_)aQn$$K1CB*~p3#R2pG6!zCtLJCQpG}sUlnNj$A43!p?F|DvgU_ni!
z`td+V?*P2bqfN>Kel9DhadG2|R2;yRtqx2X^ZX(Q%WZ@m(N?R)&n?&V4~8ieRSmaq
z91>Ay^XQlw`(P1GRaI7CXPa~=L9#qDHWz3U*x#!F_FGt8U4gIus>|@q(=&ME$_~8t
z$`%~#7nB|t4!FdrAqKU=+e+fn8fWt}=<jPcSVN$wu@68nqOBtmOtuP!!8+w>wC91o
ze}QeOf+pO5517p4WmP^48i||n=RGq-o5Hq}T7Ur9MxzoUahicx7p0co^?Okc(io31
zgW8SxwS-aqh=2^xG%ds2%2iMVK#eQU5l8-S!Rm}U17c`9$cjP0e4o^LS~fWGu-ynY
zzzEibNvlpYqwUCvf3Y^9a^v68Brr$Jx*my~wyGfsBGZXz&1n#4ARrTF{6l%4_Qa!)
zYsHN|OKv=)x}H8;B-+zSR#ATeLZD=0pgsk1@}><MI~s<`=%60aMT#rh)gc_gQKN0h
zl%Pl*=gu5s=MdqF_qu&@Ljw}z<Vs}o+wxWdsV#N>2Rllf@}j4aoD6MNiqCz5Ox_fA
z0E&8s9zITX^%gm-e!Rn@cL3hD!H;3n7W?=Udb1TF0v33Qn7t78lnE8GvmR)LvL`G3
z<E|bU_3s|c;WvNdD$J&HszVzMGdOqdC|o>$9F81agStwgz{WmeY*jjzHaI<&oEWnE
z@x|$^fyrb+_5V*jc@{qK#3{IOV;^36=^os@Goej|<c3Ams6!Ccz*w#XNr?OVD2P~7
z6C>NKLZIc*ox|O4QFLZex%mp5Hcz3ZlH^V#ujD&3pq-&5TEUR<_pnl*YS;@onj=j$
zQA<&MD6Qj2Ug1$UmbNJe<Ey29%dwon&LQ0pM2&TpI-9&{7nm1$Kh^Jx{;YyQX35;~
zvej$>ZGhJW$w0&5k*%uFIm+d$T1jz^_DE@c=j5n5Mv;ULN7U0S>Qk_~968AiNo*Jz
z<wn|49<pYXrSIvsK>QTP!F^G86xFgV-&Z~Y%>`-q+by$y;{=70S{xYThPfjnt*Vif
z32<lAQYjq=vFjQvuWr`DV8hF$s6l6h_ZxR+;u;V=0G)2WUD&%%NDM-w<=5SDVn5Rw
zY<HYxzTLRtxyAzfu=;yG2SQ2Piue}|w2PK7fqp#5(K`Td^Jv>@!f`+gB_^?@dzq1a
z)Ho2Xu1scyFhzKT4y2oxZ|u1FVTs*y&)tH_WC|-H)>D@?yz=TTc>RsraQgHyxOCwZ
zoI15ZrE>+<=%W+R-8QuLS6@X(Aj=YJz_+_y()XM_a~v*QJWdY4%P-x58`pMWRx~gk
z<}g5KKyt0*&?wPNPPRtqUm0R?FOz?JL}gbjyNcwv$v(NJz_LxZk~Z6TlrJD}iaVsi
zzm^g1lKOd9c4-3Kn6c`s=JvK65O$;W7`4*5QFoOXHA%EiDo{%XPYnzXR84nyL8qgW
z`j?b$XuRYbD4mzsJ4PqOVs?Um&*3Atf@dJE2fYrhHqbfOh*>vq=N+)HiyHqWzs(co
ze!pc7RPmmLcHE@7euBA$a$fR5xe+eSOtHTxKDzRuJ5>rJ1+;@4ji@W22VJ@ZMMc88
z>8xLEmuuZU`IsbF)N$%OLf7XbiaeRq8PFvCD!+GrX3lo-#iWjp`t`oBMa9u77Th_o
z$C09Ro`3RzDUBfaUDF~05@5PXg#Fps5r^LphEDfHB_Im2f~hD)1mx748s&fi%7#k+
z)1;~9Ep`6t$AcWb1MoJF1{S;cH?H%F2rldm(}t~^oo>Juxy5KhHmUmq06^Z-Y+Azp
z-VBDAOA9&bmEjQTwuKuvcHqX%T{v-U10KC}3LbiB69!nLUo}uuo?Zh#Wu!YYO5cG!
zQ&Q~Y1+c$c(*C)*z6ziC`b#jKE#URncc>Nd;e>etoE|{p4{pb5SX&s6hC~jWQ-JLy
zW4bxIsTSu)gi0*<lG=FsRF@$oFsz2Jn%k!!o{Xtx3Upo#S&(y!tZgs(^XQA;CiQFz
z74t;fX*lvAn>=40g`F0?N!emdy&9O)TB)K#(AxI~bEUY$>NT?U)~hwnf;o=SnbG((
zY13MY1G<i1oJT2RQ@A)@d#D27lF-OmaN!(NwUjy0gIlUXU|_#~afE}!eV3#t&Hy@p
zIDZD|=&!w0P;5FX&vNToA~?|O+uCp^MH%^;Qgec4$55;D6Pzu(m-PL-B;;CyDv}&s
z^4~@T6(g*(;29iulBge*&6A{;%&2+*(8X9ZWhA#a5-P(z?Qlne-)ZYkj<03JN|4o7
zzn~&M%1sbQk<kpL1R_w7An`v{EF&cpfg3H!y%7h9WVXqH#65-`018hQ{7OF_<merM
zw|O+}Vxo;Ss=AN|#bGZT9)D5JOLT&%cU%WHw5V6%bu_eS<!VeVF#Sk3R`R&98PH%r
z$KKhQz&6(CZ>~^%{`m_hU~P3sVm)OgFr<_Tb~bSNe$o}n`3xr$Ob?(@&*7P8&cV~q
zoQCUf?!!wjZ^NBC6WS;S18jB59PQbB2B*(%NbW(NX}vBjfeVBqE-B-l2+D4^xzdk&
zP-w@CLMilL5(<jYy}nW3FKCR}GIbWTw9V(f8z0No9K=?1^Nj58*l19Uw$(s%_zHX;
z68VSP>yQZOqy^NF3M1QAQG}T7tmT+={O)gvcBV*3Afz!I9j+vZz4)AX+hBH5BUfFo
zNoOsTV-n^c;OIagaK5KHB0fRJ2Mza|jiDPORj$-ddU_uC60SrxIC30$()g>rK`uF5
zwl2iv>UD&<W<@=jcX3cP8jeUv$f`upN7g{_L&M5a<jbpK;_p4?j~ItL19}Igye<$4
znfBnlIM{Jf-4HL~jNjt!njBAVpE^&DG;pdwk_FOV7!euyY^bU*At0;(Kq+)-euam}
zAc<QjCv(Oh`tcw~?*P2*gBx04b!^kHOsENmENuzaN;krIVbik5lQPo$;El$zVMz;9
zgR?FF$zwD`sZxOXyntt)zfR12)bYQ3`6O(tt+4l9RMu^;Lr$cxrUz7n_9&ukP@;E!
zr-0!gfpZTXhf9}^!kxPlc<IG$xPE;X<_nbbtl^=DH{i)9Pr+=8%~#YI#7Z>TPMq*>
zn`wLp?LDMMAgy{WY79oe=bisb-RP1`uSTsJ6N<4Xl{g`O(d*jmMGr&i2el1B?Qba_
zvooO2qvo^Z$BjUz?^0@&mqGGjToo{0yuB96;B-Bxakki7LTa{KYQ(W2OQ-hF;bcX3
zrJx|P2Rch2z(Y2tVzt$oLL<Q{l-;6+V1fAaTAdP%D{1pY!(z^eJRQNo<u__aLWj4t
zemyGYyKxT=icC`{BNLvp*szL?q^uKhD9F9k>#~Z6z$vijHh3(SMbI32xD%vLz!e$F
zqVF1EH^grG@u$e!h|i3dG#avEzYLBXR@JEEECNWZPU#<HDQ!6qq6mcR)8GIjeCZ94
zsV0S>ZmK2Wa>|mj;)a2i3c>r&8~}V%UA~n|+mCm4^bWw=JWvW)Bt%mz1Eko*n%D3<
z_%C^=i6!psYnP)o*C<Dg{1!G(WH4SC!olv046$#7JhZ-Ew+$@i!+brK>AmvGEx2;^
z9-KXM6fRvl38zl2QLIE-{wRv36m)9*O$0*TqPd@_q?@sPr-hxZ0<x@yjrBG7`mf)F
z$>9Qawr7;4c<9Uq98M6>^Qcjet0FRSqvm<AIJ&c0a!yj}jhBNXH5;9>LO~huS0usf
zy8Q~ODzXwqaFT{0%yy{+(BWc_9$nm?kIZu}@TrBFen$+M<sBMJJ)G|#mXn*Z$kqE^
zEK$7k&JFq}hf1{jLpMKmHq`>?`Pn~h?L{=o=TplkgDDFBPS?1Jc_Q8Ccs(Ac+GjMQ
zcCP&$0058ONkl<Z#ZhDEB_MY^azaGnxx<R@l;p{b*c`b@G%f*}FT0Kq-J-$jR57rV
z=Z~YVC%Xn)J5Ad(8TNpR*VqO&f2WjGuGi=o(KB)pCM&58a=<Kh<c@=@0mS0McvqD&
z7@gu^%!59Ko~$`<A^oAjh`AihVZbs57BO2YArL@?oC9nJoXh-iLm`d$S@suyuBq84
zYXl&QN!0+@6;PW2Q3{}U03P({9e}rcB=tfzleDN0_$B#OS7mLv@s4cdnlrFSSEEFP
z%h3DI;PMkk;WvKe09M9hs{c2>lRS{ZA@gWS4DsrCNJjbE^)0w|eH%`l*nr0_pM=wA
zH(`*XBY?H#9=2+9h+(a7M0`OxIv;>+|AzhyM>(80ew0pqXN$?aO!QKcl}D1@n8ps-
ziF4FQ+39o~iD=+7qV)1J&+d{FgKmuEhC@Al$d|HIb2NIPlr0P`%d{XiM1bxugwLt5
z)*~bFQ@32@JP47D3)|&0oia0CI#S^;zt1RL%Iih1xm!j@DFCviYOJFZBaWh?6k-vb
zOh)9zkm`tJx{yP+Y66K@#jvmjKi_{7ERwYp{I-q`22ZUz3&`t3_*uQcNLUSg8RF4;
zlpKvQxs#TX2tHJN&AKx3Np(66Vh@M#9ulw#;yUOMm;qf5@9A)Iw%X9BW0LjWYIUgU
zM7Wz8R-HSod}e0!xfVe|2~QNTT(3I`f}uI8WXg~M-|w6o=U(XkQs<zc{XyxJq|1Bg
zxFF#g<U%lE$?i)=(?q)iIs;7&MOA5)$s+hu{dhp5cL3h@QO^OIIX+$U>JT?!iYiSN
z<G$RjtF}eE7Mq7?B!(&V{p|{#dHNJwd3_J=-I~D0+Rz|1e2%nXhnXjVQ|Z65VG~cF
z0l0T>0(b8sPhbq^FC2sOj~s*5l_69WRxo%}rYM6!lYx<*b0Gqhix$cSKFlmq#Hg?c
z=GaAfB)0sdcbU-+XEs<Y>~9Kl7T{vTAL)vX(Qk0I#!eQ*aPHSw+)CWiNY2>Vc1j^)
z4Ut>O-z!|~cWg;V-E#i=j(`xzxi8I#+%tA6NJ-d55A8kZQ;^PmD8mx--btX_H%BK*
z(gn&`H*=ylEIMDoDbvGPxM=H4qDXX5gy5!etBGM*J$h6O?7D?|{uW8<Ia&{dkk1a}
z5R1*tPjzFYeHUU%z-EU#F)gnn*BB6_#s#*BtrPCFXd_Cof-loBTlyfxR@`<^R0ca}
z8pyG&6>qq^;S$5o(ai{4lFk|vXTcg5c@Ktex<`+MX*U)L!ga_cy~=ygyoe(?em_Hc
z$siW}E_4Fe;X#qFswtY3UaJu^^f&k8fsAgihkpDAj~0q~3+)si@3NZU!uC#FYSm@W
z(n={F8mZ_e&^ajoDn%5ah3S3*zvtU7!^Ovs!L+DhIxl^Ll%jtPjI7y8*bp00*Bj;;
zj0PDT9?szlpT7pb_zTa&Z-4d;*gH6c@k#>YaW0#Hp9F8P5ssC@`3$QR62K;F{4&Fe
ze4X4OO!>-cSrpbKq7V@vC7Li6zcY|K(fAUpUd$Np*qm6z3v4=sLg7pBcCFicV7qJ8
z0Buwn;p$~B^#E{-V&~yymf<`DNzwj<5V*q>7so=^LJTVXW$y1_5V?}P)hq=P88NNi
zauNCYvF(g;sm`R_izvcmN9b}zJZkq^e<dCyEo$H3AC}nBBk}Pizz$B61?J&gwV91c
z?3fcRXA>&~)cC0bWAmoyMYo_JvJAB@KL8$h?xDD!U?hBUJo4A)*uGhfuSgb(Vx*p$
zf_wBHMUrg(&3#(B9=}-}A1|AEf421wF3n<y`n&sp&J#a(?kYq_ES?HJF9hFf*CRS0
z6Z-IV>w^&10nLFt`xt<b?0`60hyavWcZ|+JQtj3dz5RYXh|wbeZ}X_z#iE63FHMr;
zi*hnYML>!+rA|CJ#HNXEzP*+O1@@S;o;jC?^1ZWp1EVH|Z~mssuyyYcUVLE--n_aE
zi)ls8bMjmbt324|2<WjS>XM)HG=sq?g}Scc)mLuA8*ki$Q>Tu?<;$nw%-K!IP)}e{
z6EdKIrEObc1Z6vSJ%7E<ARA23Y22cg+7bKk*oDfIIz|G;MRdz`;uV)LN4TB7RA^=~
zM$|}9kEk)G9?yYOKONyN7zWD6^X6`Pz6uq1?3r{dedn*v^)g)U#zegZCj-jX9fDO>
zjTE?6T^m=V#h;A>;RaisjqdmRmxp^H>U|z%2cv6cWQt1bHKQ^lIVc*u8pf}=WG`P-
z4^ADPZo`>y<J|C*GwqiZt2gMLw37cfCq<5Jx)H&=g;F?k1H8{~AmOR6u)IEm4-(dE
zyu%t9o2*`p<aJ$ZR2|6!wk|^oOiC`}z0?`;SGo>oXX-i#fvk5EbaDs5PQs#hxr&Z3
zl6;;beZ9(-xB%)1QR2Z!oLZ$IveYDumY`NDl-QY(9Q|UeZOYyOc)+7~0N%Et25V8a
zNqvBZs;H+Z3`C4_et>;niVvngXI|!X9}0lZgLEH5`Cn|8yLG!F3ExkA;sQ)QdKzAR
zWgA|9Z5t+sB@72C<O76ArJTo3Q??4Ty~@bt*H?yPI)^*Acj3;R12}$k9nN1o2In3*
z3ajfwD2oP)5*dTC!wVK@FrwK(Z*y#E@mS`hdhAA$bJ#NM_a>U^(dY7pCqEm*N%k+-
ztO>c$kk=MPIj*Z0$DnaSrsbM70@Y)y0J1<$zmucGqWG>-V2sZ7jm$z{DhZ6sN63YG
z&c5B^zqI~bJP$!jX`|H?%~Gi;pR1>S?wdDbvpZR>%Pi-}*PIeR0B5g5&Wh7LYTSh3
zE;(?$Z(TB62%m#zq`e*3==i+3(-KSH+{pTW<r;|p5U*M$Pth#l9|&=VDF<fbY+a>T
zH9$+8==1vh&WP8w%-7$IqFp4%BWedFqLXefvV+{TjTBaNswR>I-T&@gims=oTR0)q
zm3R(jzjGhCibyIW;zgN%LZzH|@mLpQg4Re5q*{L?A*<d6KTqno(4Q6{C+aJ1gwhfi
z02WOFMS~r`GN{_c9##bO<H3&J0eG87+ZI^3wwopcD9Tw=H;XiZv2TRIGna?Z>Xq3|
zaG1coX+5|o&dKJ8QRCrZ1CxUq#;XJP@JG(UQ%|3U*WcKIS6<qJz1=zF8Q18Op`iAs
z{)}5hV8)syyYV~6!vSsN`+HOP+-DErrI+r&!;c(+OBavB#`+2=d6iWyrCduH+_%VE
zlCd@BGk<S%f_!2^IA_~>_l!0Au=iQkM4AJ2u2M&g>mB-4xK>-fvJ+s9-8+hA{DBz#
zO3P)@aPS5``W@<NMf~A@yn~H}6oYkOYH^7en&!}64x;3Hbu^;ga(FyW16~r7=8WjL
z6eF606%Q8G<jlXL(iK!mWUd9F7yAAsWhwa_r-SY<&GYM**EFcMQ*dO$@2#H9vcs&#
zGC0}xACI#2t6~{$=UT~jYPq0@R0TGFY?<q8R`cv~zXcJ|x)#<m(v+BdnhGMqyzys^
zd>F5V{Q`cU^8RCaXma0LjwpaMtkPKB9AD=qnH)lgYY;@Nq)C-`_M`7ZDQ0fY5Yl#v
z9I!(obElmWum=d8W(tdXfgAwHlN`&350@52KOVs79e}ra5E7l#w-XpZSsy}CO(02E
zp{)W*%S&?jvGbjZ+i7BS7dJt|0)ui`h%(6lr3n;^7G|>ohQkCNzkCWFzkD37-`Iy2
zU)+MbcMbsC1`hI!YPL06j;%|yAH1gw_-gVz1<WW^Wd*Okd<(9=eh<z*bObIvdJ2vo
zU!x5SQ32winT(zq%0NvD@U}Y&{2h7@EFJ93Y%(08SYi=YXJ_j=RFZ~t#9>+ET)#&n
zC#i6>gSdS+WM<hIyXU46oSG1IgF>8VhSWD-Lr2I^GIM}la#3jfonW(;P9U(wn&}8%
zLDM=$0wprp60{I&-R(6OxpBgyv$^etiPnVQqiCIjc#;|4Zm_L3OoZP$<jH8Wt%8BI
zoH(<>#s-x%oYk+B8ooo*AMyOy*<5N+r1ywE7s@=%kz01$B1c848X^xQI9B|TF8tFi
zof8qGK<}ZygDwVrszK1)2O>L873|Uu^=BnZF5PmmxG_EF?z696*OEZp2wmG;<InKE
z68U&OyTn-8E3izEn;yyh;P$1fK2v0a+hqnvEQPXJU=jcZ%>W>4rroRP$AcKX1Ms$w
z653?(dfKkRqMpEExd)rWGv4bwZoX!tTr3Ao!gN-2H)D$iJXgzg<2vwn4e<l8takfu
zN$mV{XO6&y3rFDg?I}F}+-;Hxt{2!mC?}a-H}q<O<Uu#auIKVo5f{Rr-@JxpggbEZ
z)FxcKbP~>--hg46Ls>FUK%r{43$8%dt-_LnF9n31A2r$vJDEj-&Nkyyq{MK524ti0
z?sQR&PeD_!7BGX4{tVSETg?^EO^gJEHE*Ah&#_UG*pdWQ@UGB&cFr$$A+&o;Ie)q@
z)GpPk1N4&cNLV2!Yk;+(A`}uLKe`5SAPADD9>M0SI5;7qJfV=w4r1a-d@a`9jZ+JP
zcZegR2GbA^N-s3s=0Sctt@JO%;J66sbu}QY@+Z1+UPwbzEr7C4rbYE+jPO6<`OxQ$
z;QTffen@bpf-}-_`1p8=TJd|tWOk}Pg5zUoNGP!kX{XKup!yM<r!k|cX@O;qLPDj7
ztZ>NtiMN?H^rs^n6`fvp8f*nvX{<b><O86S)S!~I$y(F%){s0kuS-#2w7E;#G)ogA
z-SXWMeF}9{?G9(;9OyYOszXefLXxaw`Si@6{w0s5AMe=c9e}rWU|CiTbvt<}OO8X+
zEUJTIJ3lhas3R=W*DBe$sjqzyK;dVQ7yjWydI;bHwVcP)5g}H|)6%~aZtQ~(;qDGQ
z1xGj5;Tykc9kzES@bZiIh%k6KFUX+hTE}M{$>O)f$cdwT+#*JUAsL^0cMnJk_{fnl
zoIigY9y)gv)>cPQp(9Y@)}48@D?2-1r?T(61iTL9xl}0UM6^i!iuvmh>C203O!1dk
z!|mUqOl*y+jTaXKd?8(XS)p%CrVyvT9M$)CQ3ow|q*|wx<4Y78ijmjSH0#au7bRNd
z{C;o*xoj$|0dYp~JZkN#&Uz5Ed;-VMWS4{U<)96<*XuZL?lfuSu7pTvm?kgg#Xu|m
zJn8s}yl%T3w`y0prDOmbIr)Bd+O&>dbp(RtvFa2xer60qG~Y3XT*7B_>)Dy`d1n;x
z{gqb(Db92g^n5yCLY%WMv2Mv(bOcMiq)^_daDL~JSMNyHtC(Y78;Xc%4~j57g2V(}
z3P)n-J~dg>W}IfShD(7LqW6w{6+!Eid`b~MdLxJ&IFA7LI7Bh1jMdByp#e0XvvR^M
z#xrb{SWd!H=*I&Zy#w$LjJln?qD<w<>>j`>noahu-@5ctB1^2BPE(l8SeehCel1UP
zU%C@fnUM}5J(2~{{z3wigA$tk7FJfq@Vmb15<LCPS$O@mE&78kfQJKY>O;{{$lN<r
z=mt|6y!@L%meb}j*<ZltK6?#beDM}M{K!$b{OCzIvVm=hS#Fqk0xAXTpkoAeecSc!
z2n;7ue-JNIigU*HfxRiidxKH5=*M#c9`P(qpvR%^jPS-vtrV?sx~B!q8IUY)cf;-E
zQmG`7>^3vhb#!_MEFl3#f@6hY+f?bl$f#mfJ8hPLs&pDf3fH=0`j#VI`Wg}YF$W`x
z?R0YF0bh_v7V8n%?WBfAXo@&uR5)B&V3u0fAH<w=F?yX%0$xHW8yo>IFO9S7<!^ik
zh)WR-V&{J9&2|KZ(q8fv#IYq{NL%oz&Vw8N=q$QZ73{RJ`|&(HwbA*2bm9yyr7Qu%
z00LUTLpiQ#!}Cq@$5CX%*!bcEg!9t*@y=2_TPi?mcOBI*G5XgT4$h;k13Iv}65ZF6
zq)D43L%j=W&ZOre6k!wyK?gu+PSX+*09{%2Ugz=d#{(I?1Ms#EeYg(al&)dv?)**4
zzw@@|vKhJ=ck9br$nq2pCJR^;WzeHnqwbriMgwg46?StBllMUO&eM$DkHxHoIq?K?
z`0z6i!!u8vhBvS6!b`7gQR5&?G-G!^IzC$$A)qnYmm{GN@yO<prwQc49O{b82(Mn*
zf``r?g^L$Xz{!*Agalw2A*u{YEZl{3<v(6FCdU{17S-NtnjLfX55=T?XJ_)5Tl3+*
z4a%D>Vp<B*Y~xOv7Nv!wBeGOY*Yzou%IYMtGIJ8}<H-1rM<M7z$deic$1Z!?Jj#fY
zv@Y%kfX%3|OfE-*(ccgsL#NP`B?F5v$Uvc?Oto<i3k`<swgJcHGT6V=A&Xt)+~Hvw
ziaDTGsu}v>b$r03<U#nar`6PmcH8?#ms6ntb0<QYL6IhRems5RhYNSkEGECwCDeru
ziCWoWO?sqlG>b%c9DhR{+$AwCg;ht;y^2*5QKLZDf7f8ktum(|mWQgGuW%WK^r<PS
zFs=5i=>0)js7MEE#?u}{77Nj9!0(tW4y6wPssk=|;@$1XgBiU8@D7Z!*}c^!)g*(#
z_+Wmkf~2GnPN_cf5U?rKhe$SqEKOlLDPVVJ4rk78!0fQX-t_kwnn>cdXRu=^W%E+i
zFGLqe$}0iX-q_tKVK7MG@}sBVu_sQzt=rht=MG%IzDI@}Vg4MUISX@q6ZWWubA6@(
z012!PM-(|;yS7bSffL8q;r#hiaPFZ^SXmvyVqV|35qH?wfq+ORIKJ0H?5+`x|Fk)k
z$Y0^<DD4{oc>jz<z}8oR4TpWoB!G1j)Y2z!f$aHuQL(eCGo=x*s#-T{>i!UkR(!Hz
z9H|U6UUQ77g<~Mo6=7{P0tO7(ejReZQLn(}Q+q{5R;9R2ZfiJjrj)x2E$N}+sXCt}
zPJB53u)1l@GC7cV@=kh{(o^klXQ+!hNEpR(IgM2nMB}D~a(4Zi&-W9yrJ_!PirWNN
zMis8nF*Cxbeb^m7i?jtQkE<?%KW1r{N07FrT|-zSL>5e$!mD?NjCqLs`LMG7gR|L9
z^F=2`Qah;pM=cWh?3CTlgabX6AHlAf+i|l4D1e++9^jj@1PREws5dfpbWowqZ&Ku^
zG%($|e**gPPLJLJcv}aX!m8bwHR=2dd9wPo2lKntqCS8;8AFEsE`$rll~MAb#e6L0
z)0zgZT-kw(7dK!&7h+L}T8wYbHE3pp)G+%dCS$35O1gVcx5Az6iW>NwJhlnvzG)M7
z_YUEO7w^FvZ|uMUq6LGT$_VM9ZQeQ(v%iS7&!uMLVNTA&&h8=H-I~CQFRoAnq7OWA
z3aUyFhK?f;_RT;ta-20l13FntCnFw}|6YSk-H3EEH`^&Q7NUOpPHXPs&QzGf&cD^I
z;D|~b2YOLKX8yezNRF%>K~dwYkUal3NX3fbR_BH-qDNsIRCaEPrIhS_^c7tr#8Ign
zoQQk^6Jv>Yc+aw<sX?rUdP$3rG!r0MidyA=b?Tx<f{4lp%ua+o)0uaXC5>`1ro>}M
z6o9)kh7vVff1TRDP6SREn5;G9(|60>JA6w$_l`}sw#D)+%JukajGP8`JfwPV87r`f
z)NAHikAPy)b8Y2zOV2b56SRmL$O&?(p^z<2sk5^rIxnfZ1GiqXS{RuVtnY6qm%@kQ
zw2IH0R_w?<KxEH#g3R#ij>U61gftn-CPA$%U{Y-1StHlBX<)v8|JnBAogTdu@H;S?
zcHY)-@N;Rh0*iX5+AXfbAX|Yf8IUL3Enm`zmh-mwC?GlSrRVR#-u@g`R*~Grn=R{%
z>%$$gpdC6g!~JHNLV#n&$~Lx!>dEmT-QTa^?wu0yYz$xh)feG=e*e?(6(4^XM&k^o
zvl5D`;XJ<eEqCuf#uUza=60aNd;lxM0Te|EpZ(kw__a^H?n;I7IYUM}aUj1&dN;<n
zizvskn2sEi;Z%N~$J*Y9USpe%<*;bhYQ~++7p@Ok{_(qP!{;s9)oQ~=+5HyWEX|l%
zQmBJ)xWKDMtLFLy>%>kA8&S>Sve9LkT}4q$e?c7``M07P`h(j~5viBXkCvVg?ng(t
zGF-nqYS9VP*YzCbb#iD!OdQKcwNx-F`~}3KOREcaLEsj<L}JLRbL?x(=8=35Q8G|T
zN2w}dXDT?J`cL9wbe%y)dz9DERWa;F-l6J68K!zIs+7lE3O;Y^F`=mkH|n%%=z&rB
zE<KV=Bz-SJO`3mqr&!q`;m(Qkz`le|6ftk;1Vp!AQ5-=Tv@^F|x2;;A7fnTAoRg&k
z>VJUy8<hao6&%iYn>5Mu7V6!mU10x|emvmOI{<I{;0LR0w*FO;<YdyfrmsVm@pek(
zcf197KG|xyaR+ON#a}EM_~gHQ16J3#GMb1pVUx74Vss#FQFk5x=#ABgO48&WXp62~
z*bpgZO;Khzf!VBud$$XyW(j=gsfXaZzUwLY`mehH$BwVUtf*mDl)PzhZ(z$Ys-l{n
zpOyWJvBK=b=GqvpUb_b`ymX6r2&AlTQKlLfpF_H4Z7JL_l5wi}%caS#cb^M6=V-F{
zd-yvY6_NKFR4ZR4Z(#Y-w_>cDuAKeXJIYBFLdey2lw37BCZiI1)Gq<f9iz`pfqaN@
z(}Q}Yz+0dtc2Udc7ue;YizFdF-3bcNuW}iLyc(iEGhp;~DJxsPS7xQ%k&D;|PnUE%
z4Cim@e7Y%JLq;DF4uoHW8#J@G8tU7-+<A3_96%pE2Nle*4vgVz%=bw;Er#u5a$mIK
z#D9<8x27mmYrxNho9?OZhocrToxrsp(wWfam@kx(m8B|$&I*gK>zm{}+O$!mBd&ez
zk1UV24V)5EF%TD-FIh#b&>0yrk|@GiMODJ#d;%$z$yRsjcG^1t@51OEfOlxr$-QUM
z!sSVt-#vT|8mJ&^Gsx4NkUosQIb;!^oay!SZ_L53j0f<>t9$TE|KbW9J(*GaUF?i!
zq#kniealR+x;bH8F$WDj^0)l4ZZNW0c=tQmP^gSBgQ84e>s|q~3BZMmC*j+_{R8lA
z-~J?AxOg0@rY5Zd+;&t(RH0c>eCe1V+dP^ERz^d3^V&8PWyOMf@ja0cse7Jmy!O6M
z9$Y?STF0>!auDCqk}dtHZl(c{^^MaBf|@%gFhNlTZY@kQ{A^e>O6F>HlHD~_L@|vp
z6Y7{r1~-zgqVvQ571`8S+!5Q&nPv5R9laE4zT#K{k5D_m1fd|xq_l7&3+fjUnbhpR
znBFCaW+~2hC(8tY<Tb5xkIsq_13Q<8KA_MFHNXxlT%D-<szlVm2|pPb)Ehg|z0wxk
zwod%a6(;AksSdi#ZMasRH6>-bd8Q~jsBqJas}ywS8S%afZHnoaP%#j@UYfv=9*rFy
z`X9B0g!`R@Akd=@lll|xV0E7d<3+?LLLz@hSor$XIW`APe&NsruB0Jk`3MF>PJiK?
zEb2K-%Y9M-Y}&=ux}Av*aCc4i<DDHn2jFcVynxI0_T4s_e_@=gePr+O_4%yYN>kW`
ztj#IXZqSfu3~e>RtyBzTw3)1}jp4U{^ET`sEZ`fy<sxhz8^P=lJ7^(FkXg5tjMHus
zspuoCa-VMGqJo%iYC250Odw?3B(Wl)t^sy-O41WJvbF}__zfGdKbe!Bz-zB<!Qm8n
z0vY6}GH9ER+6gV2Vq-`PE>B=lEMPHTz}os6i3df5UpEl0Hx`9KX~*g(D}N|Nis*(K
zK~!9D>&`|zM15-1JA|z$ek4%tGTh5nOJLu4w?lq6k|cGv#N56)A)%zLizQo>7@d%A
z)qoy9Y9z4RLw|DzJ88iZtU)x%c3mv&6ED%7Aw`nI;t9rqjk%te+_K;-sCW!Jn1LMG
zK@>FKE$fnv5!Rq#=!uB5&tD+)QDjR?LY>DhN}xne%e{BLQ^jfY8p0dCnBCEomO5!c
z!$Mo$sw3uxI-me-^~0QmAqU{KE(B1%UJUGsQ(@qY%KJtq#`-H{%G$S9*z9yItzEtV
zaT>I90R9U9tvVp?Ea*Cof@JhBLL>Eo^D<ImA)werhg6F9VhH&FnarH}z@6f-+JmAw
zY{uCTAf3I|Hbrmw--Xd50PoPKo5QAttsl*^RhXCes=EizQS^^NR*HTXK6TQTH=w-k
zMdQO=Hzcg{+DrTJV?Xi*`1N0T1A7g?(W3*>_^%NWuw7UlTI~qj*)%1p?AROmjF#&x
zr_|*%@LgEuhv$7bY2e<S3esi>AN$Hj;Jd!(gYfaMx&W)ILpYpa=^`3)%pyDV>rpmu
zS{O;A;lWm*cnum!+9_M=A|Wk=rtWI!v+O9v;fzrSCKq47_XF^Zgm>D*!G@pV`3_-9
ziC*%8A~PEKP*s5u=7OUWLQPi{>?#WxJRkGR(b`68y~XVTiWWaefe8CbJ+7RG!q)et
zOAKz0)f6E*4sTP#V?@o4qvHAsou)=Im%*jvm$525I1dU{TUn{PIwB5(R8vPZx->q%
zy@8WqH#InS@+Sn|ojHzCyuR+25i17txM<YGNf$>a<b8sFrH)&KVIm^J#!nFu?JkL*
zj|9%>wAiz0Yb)GBLIE`h5M;sJekljlC_m1TB=4<i!p?K4`h>n8)&2a$B9dfNZ@de+
zz8L+}oFNZrL_q?!3&-~&A7Foe7pivNV9%5$nY~aqeIuZEWAqNdJ2LoDTELZ`MCHFW
zZPIIdze+N}m?s+`BUZ)bbbHXJogxdhZw)kc4XZ0Tv~>c%@vm>dkNwDJ;a~sKYfzL6
zIC?CD;V6Tq#<W3zWFf-EzNsrL+U)_re;ZR<<4-RylW-Z!2-&%qFB;goQ$TT;z*A42
zf$#qAr{J5v;WC^!wGQ*5g!uxcj9W-B@vnHJtTd^CGzBy4Y#3J|ZD`U8P3@(%XeH=9
z>_}n0Eef={aSkH+ogU@69d>wH$x8HT>p{OvY7^O;prP+kf4~6()a;SI#moGO`=V2=
z;&5UoUor2lo+i-LL8!0S`>U@g91u=D8hA?+2tm;eR-pEEDkQ=&^fnrXERk@qiSB?{
z9N8fs8u>N!e6X9shouKYBhcudNu5MW3WO|o81B8yyAb|51-J4)vPUxU)Y>;%+WQ<}
zS247Svvr{kn%Cyg-yJ7U0STW6Uw|$~#VI%uFCrl)y_13>ggJ16sy_krK7!1|S*>f{
zK9=_aU3b!UTAfn9t+tW_KByk1_ngqi716oUiWHqk<07cj(c&JpLY+xdjC-Vu<=w*@
z(xo!TvgyzGUGB$&9DNGl9T~jH=k1l($L-U<ILg<*X>0OaaZp}Q+vYeu2zfSu8u9g{
zcDOJU2O~j_UrLD+fDhHi#wva0)4zTTp8xz^c=Cg%;KN^e7EYaB1?139Clx)NX{O|`
zZaGdDPUXQHmp=AUl*l7@w}V2Nl9IKu0@%K{AcEsVXO6*zOUGdA-UOa~?hf3%bpX|(
zgi$_#9J>+9L9m(t;lQ<Zlnm}d_s*^IvPMJ-#DKWmu6`iQx8|(<65WV&!st-W#n<H6
zH0Orp=NNfM%cxZsF?zQMO2aEP;}YqGrby~+x!Ri?T8_!zpqsF6sB$kcB1Yh%rvI4n
zv@3|31o}B8!HM#ph4&qP18eJdX^!3dU^@Q-WfR}Stg!MP#28w-11m-ZN)ATGjAh8*
z^J$CmCR@YR@0LO#ih?WirO0}5PMY60rKgALiQs2<=9mqYyN(_x2M1YHaj4``j3K`z
zJgi|2)0t^$Uu-!oZ{WG)99OIcF-Hj#I6~~@uDWiJBjGbXpIX|Y*Ff{sl42mr><Yc#
zB%Fmiq{^Sm>o{xxd|up>NLQn10nmNcxwiRT(g{GcGabWlG=zMFB4+?~*+89FaPRQd
zCZlFpr~<I}>e9mN#{(L@1MrTG1nOqm6zQ8kxC$TmmU(rny0!n=;lrE12WC|T`4GDW
zmQZ89U4>1=C1=CMk75J0Z8$Y*>!KsDHm35p&;9moc>dYDaN*G-@S%^Kfrri?p=g4n
zggdHxQr}JtTyNCj`;tSS7KwJK%pt<HtrnTR4YVW{l)%nz1Ica+n;Yx!E#I^O2h#<-
z{`xk&{`w9a>=(3&<NK!5IehI`Uxd+k2-Cxw+uEuL4Mtsa-l!hfRn3!aN;jO&CLGy<
z;r+6Q#z2}c%N+qXyJC*;2dc}~qp%_(ArxfexgLv;j}xI=b@1kb<q2*^fcs-4xQuD=
zG5Brjm|$B0jU_`jK!JIcgs5d>syWb5=_zVUFGaL5=Ifk5geaDj`Q*D;6(X1mtJY9+
z?jlL*l<4=^(h~nc9X2k?Q*|LS^C^d&@*RRokhHXRN%VA&1*Ue(^nRz^_0C4JYv;TE
zm>iSX6oRaU^oF}<ZvA-8XoIcbfe6~tNd|<bim^qp$phj2!|Os9K+hFR=%Pa(IW5e_
zlgZTLBFT_7ITCt0qCpC|*?qUs)t-<O<n?Eckv}E$2`#rwkc-4f2BR=|9y#QLF${(o
ztQ|?9nAFgg&=k!9>`t#XqjWH=VgB->zI`j)xqdvr(K`U|@R&Dmd~%pvd^OKjE?(dL
z<?7s#Po!1Rz#z+r$cGR=^^(EuR20y3M1&Nda%DkdRE!VU#`>5H<m)f*!z(Xs!|AiD
z@Zpa>1dl&?9EQUI%%%-g6&ejyP@@9{Q=}0pZ@=C({4It?viF5l3>TxSAin2dzk!2;
z7S=Zh@Uf3Q3?Kd28Mt<J4_?1=Kq`QbJbVr=T|5bs{i+kuSmbIVE36rg=?(e~@5n}y
zW1AG?6)hu-A~70fDoaf_GZs+NG=xXFGAjWlw<)vwYmttXnr*&*RKt^=0KBWpNl8-{
z`I-Jr9eUI-NiBbbU6!f*7FknFD03Ei4+X2{C6M8GG4u^a(C@!~SY;EUvn5eGS(s4m
zAp()h8RQsI$J+2EMY-;>lJ7}d*0%F}wSx9tUV|zCc5e*bd-NHI468jSq`&2TQLRW2
z`LqPbfTtqxH$wjklk!$Qf_SfO>U7Q&5$fClcidwBHR*5^sCkqv2X$b=de8u2nSw!k
z1Pk_g*$=mZl+MnM!qjH&9sToruCIjtA^`!i_X&}dD{maD;Ab_3!C(~z!!aB`m%xcr
z09QX#H%*hnUi%tM%A4o_qzxSY>#{lM2>|cX=pBG}Z1CeyHh1P#y7iaG*~P!UKfhYs
zKK$+U`1mW*!^HvQBNpq>yf|+xN>b_)h=>^MR*JC!X}rC<I-r{3?YlGh`G4{f{N|^|
z@brhy(4WmCBT5e}7Mw<K_*zVd?Lz#JYjX}9-I62Sbh;Yk#zvN)7D>H$(8DRWHC`E~
zaPI60xbW}^Y7Vqm037U!@u$5dYL&+@O-M!7|G;gFo{<@Z*st6oH5V8*XF&IAY09e`
zs2{g$(CA9^9Qk7Hyrc?~-ycu}i&zz|Rw>^!Nu4<zjDj6o|I>}tyo5`|9m4IBUo6{w
zY}?B5tF9g85vajiDxA~xMn)r+&#6P|&I9Ms-$D~X#C;qFRy9Q>M7oi&h&x2GX5`}9
z)az4~$MA*T6fY#n?fDRnfim+A8}O1iJFwjkS<hNFXFQ0mdSvHoZ0g);<#|*Cxn!*6
zqBKR~&4|Rql8%7fK@yKa;vsQ0_z<N))10Pr5WgW-nHc)u#$Wj#jM6Z&rRzeU8coT`
zaY%@okLw7I))BBDq|Om{KF#wnK)V8`9v;E@4*+C!3wv7?r0EE59XtnBGik=zX(-yQ
zf7-N|3+%_cF?tf<0~qu6mA~IM^)ycg`5X8CIV9NvnyQ3yzK~`&@)(J@iSFw5Z!tn9
z?MjSdw?4?A#TxtZXaJiVD=?eX@GGCZ0)PMSd=~!ozkCA@CWmn3Xa*~5M7!rsgObbh
zpiDQ>Wj2(agKjXo!HX(dFcADvJ`Rc*VIVVK0NlA<!p$2c+`U`D9!CCp+!&Qaag~6H
zyF(($YT0Co=R`?JnUffah5BaR@I2e9NP<Po_Kl=z>f|%A4<=Kq$D>O(H3B;|Ka`*g
zQHanq=e6R2a|ae%(ii!B$B2>t=yt8glJ`Y|UROqkjW1OV1dqYvML&JdLb$06sDS3>
z*{Xz;iSY>Zxb7@?0~?RjT|+?TT2E8{rqaJ~ih95F9Q{SP%3y(+6A;}m<sGQ8i(eMp
zYPmi+pq2P}6t7>vKQp&3y5)La;<TG1tT$AzGZ<j~PMs^hc-Hr~i|sxO@fAz?gm%C3
zHX%>?+#%XzN{Biwh7>6ole{ml^Ox(7P9;k(^ZWdHQU{AU52}TMYkQE5V9>6?#^wq<
z@sS~n#{m0V4eaezX`3(L*8a1Qr&tV)NW|8!`)cpUgC4yD@Qx0Cgo^t5cG=$ke~q%E
z!^7#7=H||?!!TckVljuRm<yvEAMBcQsp0d!--<FCZ8n@EB<&B>4Nzm%AS%#M$<5~G
zDmDH2^lx5=AOE|bhoAkK7vSdg9avdUU}c>X?{&pAF5Blqkje0$!^#>Jm`&42fq2>C
zOlZD024o4qAWunCfYb)DGC+{@SgNQSi~hyNx4S`0VCRvccEl5xfE@-Yt&Hl55t>wo
zDi~7xLNRi2?%7xc>m|*6_#^7LK_g9U<#M<ZTF-;@b;OI{V2w9V{eC0obyiLn?l97t
z_+A7t+i82*mtGQ!`UEecbL=P&E6sE09HO|sewXqK+!?U9SQ>!U{j~pq=lu0Mf`L(o
zM-6RQD_jDoQo!Bsp)_|y2Na=@`cYkLI{$i1qG#xxWNT|^1V`y{Jt-kJAV8!zpbnNB
zakk%r?wDqRdve5+up8nEfWG3<-)tKE({ZBc!ezY(6Bv;hb7TBwm=kDz23ufUq1Znm
z)doV*Inh;$vqE!fNQxd`=StQW{V~1dFu#T`$#L<EQRr*{gLDnDbRC}h$}w!5#H>sP
zS6-UaOdhtk)2+iRFi2O&O;WsCG<UA~3h2j!9=!wbjt_jWYM8?-f3<0oYMgDt>v#Vt
zl=W@MU;tHFK)EP5icttrqhm2L8XaqC7U|x~(QVVR+H=&;Z=s^ffdtmq#xTfpc;&@i
z_=i9C0{r;j`#ik#;%yiVTUbAmL!M#1J@+73wiN2sYXoRee~8j-JMMT0OQlM>Y3Yt)
zjeCqlexK-$MJyKaajRIb%MV7G1r?nKCFc?ysZN+3s?uV~mdD!B_>u`g_@4gUAE|gW
z=cSf0hF81lHR2s3An-w`4D;W1^2>N0p%Tyn^{9j3*W=eH6mEHsf47C>(VqB>+5GYa
zFqc82&rp(RH_A~8{|?o;=n`A`Bd)Jt=g!c$x5Nz&r8;B5q|(=uBqR9^9C5RQi03F~
zTQ1HBpSldhVYL-ZU*Hp9C79ML=dG$gR9MJ!^d7AX{I2!$v4?^@4^%t9T!C*Vtq5J`
z=K6CMChxw|SUVZ#8*sUvdR}hiqw}N3B%DK$IoBWWUN@x+g)*Cv>4z*EK++BY+BJCO
z$u&6r7{Fi%aQ9jT*WV~$ypqAqy%%9o?N)iRlGd>QV`a0`<NxpC=pBG}eDFgzuiv;`
z!u9`4l8nbyyI;I~@26leknCF1Kv|Wtk?E&2f@OoEn`TT6Xym|usU)W~gF%80Ap%@R
zx3ZGM`uY&I?#|(#{p`!|V}Iv!@Tp(B3X6IHn@4gOjdQ9TsHD2g&O%w;k##KZptwYd
zN?{wcze5CXAiTE-&^@xdsfMtRdjZs)dGt59Q(-y*@};cN+l_c+EB9!L{1101td2Sw
zK|UYrt>j;;(6k5H_I^=mF+Yfje@pEdm#CJ?VX%B{=dB&5M4bTTWtjoCU0fL3Mi}gt
zcKQh`v>%Wa_0a+{)1B|`dNT*YoV)NnYWO;p2ZAi=zs(4{FTuHSY609y3Yp=iuM&oP
zm?T?YDw5-2y1y=Jd&cE3GGHWoy3@wDMvSrObMUd;dC)aQKN&1<4@GxkyI>Z{8R}DG
z>73xmp{ky)C3;=d!*vaJdnX90WN-9?=`?7s=qPsNkBIIn?h&FCq5B1%qTzs_=YX&Q
zDmO%BvK;bc15TXTgq0PPJxO8jRt3NL$tjdY2~|CX8@r!|j0B8wD4I8al;?EWsqV*v
z8a)Z{0S$!e51UW_6-bZ#XM=40$(_T`SGQIkOV6zTZkR82A*oZS+luns843ju<QZW{
z-T?`YvuvMKo(Jn>P;A@ne~#sb_{wOQ!8jdI3EroE`6_(&)7RnB<rDDCGiTwUbL;e(
z*<r;z0m&h25Fmu55FHrJN;XM13LXdf?_wSDlI8Ej;0hBX7m8$wHC86Y6xo}6#|~$p
z-y!^QF?2?PQp2YXf>?`Kk==1Kh%g>X_Bu9Hwq-H4x{nc@ujgj6v7s-a5#o5W<zhD9
zq@zSDN3`MoM?HN8%YFK~9tGbo?C8RwF<-Tmf%^IRb?avkNJ)|KrKpe3A=@K0dLq@U
z=g&?|a6mNIul4d`@C^(K-x=VZFwa5>6&YzgPp-`DA}f43S{b6eTGctwWR<TMUALCA
zT5=ZDd0}T&>*yUd;ad?zfCAyL;{?&khNwRf5KXU%DoC2fC5H8RR^%(nLE9p-a$S~l
z_H}>%3`WMOx9aul^hYC-2USGLMZ=`LKpiCeHY_p40{;vK$vPZ8ejHZEDKte2Z+yOh
z*Iqb)$=(9$vVgtzPP29RY&A;P##MXp8?)xM7vp;E$Acfe1MolwZ#+ePZ;>XS`F(5f
zRj;mON2)ir{z-mxd^sHt&cLibphpvP_-$K~%qKsoC`D>J10OBorm`t3``tD-jgIy4
z66la%^17v5{QCMBs<MU`p1TV#y|@JrJ-h)Qdge4-dh{5zBwoxLC<@7$hN#dQvIX|E
zMj*~04;#FE&Z2l1{&z$}1YV-Vu6-`<SPYFK=GcWgk<K8clD?A$w81t<hNbO%jJT*q
z1+P~N$b_A)5t8Vu>;9}PZXpGdQ$jA8Z~)>t6C6woKy8epVnF(q?j~qvYsmqTsd6!)
zNMt1Lzl+4kjqA)|JS%G!N71kw4ssfzQ45i<o||`<;seoT1a!w&i>GWnT_mx7u>S;w
zM}&Z-bFsk{>jRiARn~hncD9rx=w^|iuG3|r4ffo)>Yg|Xx+JvOkrv8n)GR~~=E^HV
zBx^D*?NB~S*G9)=KSG@v<&d}}vi2~LwPIC#sN=vhWNS5~5crh6eqYbah@;XVz@1+~
zcnr03r$!f!tzGxl;w;OrwBskLNDW|=9)Xq7CJeI_Mk$cdzjbFHiuoL-i``~rIEJhH
z{|btFx7iq;O(*S(KTtJ?0(tfhz`Hei2jGDXev;<Z%WvfQ@&9ZLkN@Zp=93q0{q6Br
zKJq7F1S_y;XROMG4{gnCdGF~hI_Pc(Btq1OK0tbb#-yb}s^rEfrbGuQM3^SjZvZ!u
z+t;UX<Law$^u!oG@WIpY)Ke$n=&=!$1;BiYdIid_GDF;nE(}?WLC@0pc)nZmhbG1&
z8$mc8mN~NMi$;^-z~Lh_4-`r9&TKYMF?wmgZiK$DTlyv*oCQ6fhW1`{vFzN!DTe=c
zBQS+!nT@ZxR_{coqs!EDvl$%}b7*2RU-xIZ9PRwa=NcJw!LSLg9$Yc|9t%1}+dVoQ
zYTd{NhDr~+=i#jNp7T6vD#Y<^{aM-ab`GMB<K=kKEXcd`Yb|Z#-fg#bLY#nvx;EO>
z*|HJD#nS{Ny5mNbZn~xkcn!D@85ThVyL9==3z}+h!y0=I+`oQ2Qs?_c98T_y;3cw}
zC+My+hHW~Pit>GmebIlkjMz`uA18jl>p-|lq@X+jbClJN<$hH1m%(_j3Bz=i(7K{n
zz|FfQ?CejVsHQMGoYCaX+gosL`!`^mt&J;~y*jU7|K%_h{dku~&jEPgBY|oCnZH}K
z+dn!;HrC7P-t^g9KLVq{00w}yvvN}?q^(2>mwb470ImHd?c~C8$52W0*SKkM0lhQT
zHGQDfO5qO<g4&xJ#-kM0*GDkN^uVuNhrj>#J`ex==U;)_clKel3b3}uUG`AHm=m;7
zNl*SA*zl~HCvirUUXw3ZBf(@OXKULLtr6^!<<%de@u3JWNUU|k7DGj>bFf;Yj!{(w
zGj%u|o#4%0ogUA(^JeKAb7c41<RI)qxqA^S;xIJ`@dzoKPA(XKn=g@tjy#N@Rii|V
zPU=7>I5fXe5Xp>G&;xM9Ag&qZfCOC}MHOOhTg&6@dp!FexfgnE?qGQSyXzJOKW&K@
zfhjO8KjZTchH$Aw!LBPfLneL|T41XWNDdBD>9O4a%4caDE{jGGCM0CyA7#u78Ig|5
zMLK@lqF|Cb4Z<N%6oxO89b<mJWu01;hnJ@6x(KUSgs!~$#Tr%#I>2*D-Nz8m!i!3i
zq+z3O2wdk$Q{EB!1Wdl|I9O=-bI4!}qrnl#(lL~E0gGY=_jY#R_SRiEnC`%2vJZ8&
zfZ=EiSGRu|%4$;N*?L~I*Z$8%vt9Pl|GPhW1mJ-VjzyYw(azG}_!B97{a3D}$DTfz
zzcP95=HD5A^x_|fgGCGTa%#{sg|w&(BKc+81aJewPHPr!MSG~mLyRipe!@76%xy6h
zq7AN&18#jA>qDvzc>cL<c;SU@ICEwLo_gv8JpTAGSlbvtf$4!#{1B7O<q=fU#i)iH
zebgE=F?Wp)L*A0+i3yAy4Rqa>0u*XHJZ@>2!Ilk75dpVg8XbDQGyT`{_8!$Omu%?=
zF&z`r401n04Y!ID`SpwZa)U-i?+kMlL+B`MYB!7bH7Yde1v#qW4*u1_1)#arZf@=v
zC}Gd_1;f;KJgRUWX1Vk`yT|h@@ah%Aej-Gm-=|Pfgr%dyW4GEMdR*zL_alhwmy`ak
zk-`5ZhfuKb7Uw~nl9&UJ`~Y)~7~m)Udr`fhP6T)ieU4lpNFOC$P<{oh1rZ$+z3vXD
z$6%M};OhCH;l^tg5KH_0N~%nq164hYg#q@sM`yYd{42jgl@>$FfT$zNwhTf-c03FM
za;)};l&Y9&s9>MGovJROEay;FGid6PP>j)F4QAEV^w#dDt6{c2ESkfYr_GE1C@hM8
zyo;kp03P_@%yC)Yn@{1_zphG)m)G*m_5JDRi_g9JKfuwIO;{PMQuNPdKuq#MV~A*g
zm;N+N>{BbJ?0+<x^qgz1TeaIY43nM1wMz{8jMW9ycK}*gUm3#ccnJ6I&ES{*<yH8J
zpLhX2^{MM{a4?6pjSSY-Gn4IQL#G>J*wRC&69aC2KW}0j(aFjBh9(gwom~V7Vj4jH
zD017$6zCj;C?-a``o0ePUizgQ5F_mC7NL@+Mp6d9N}>Zu;EKn`^toKQd^ZQo0e8V0
z*I@~Si!eLTy)b?$oMrk}2Ato^?c{|BXVnee>vMZA@pM2JH09#ap!^*a<T}P$&<FYx
z46&tm6fqzqOK0EDi=*docMKM>FR-uE8PcPu)UqNo)}>JzCvgS4)}DkyOya{hx)PsH
zCcL*zjVS~ncUZZf`JFCG;e<jpnp#Syw?@~2o_$P1u?~QuOYZBcSe3{R>GNbxyPj=F
zKj|&XX=OgRVW2!;{0B+3<YCZ!*Vt{q^c=e>4HOW=SaCqcpY;F9;Lo9`r!X&fVKTo1
zllg6!7F$qMhtM`9Bv8R1ui&*i|Co}WDGY{-_O<_A(QFre^#9%%y#w&B4EDT>`sV&&
z`<q`=Liy@yc5-!h@@(-Nul`lo9E@Odbjmsc>PFopX!I*`2Ke=*P1H)XxK#_=BiWQY
ze6axOsgR171iR5dxnU9~YG5=-VQqCt>4D$;_1o~1|L{flC;#({aOKK2j8_1T9LZrY
zU=$(NZ$+NDIvRdW^0)M9wf88j+yxe7<HD53QZ8dTa+JSgRBlel(gx|D4$%^Y=iLKh
z85C{Q+KyLCy)0%|0h_=&5Bjy1C14Q9<9sU@<ITPkRoZE}^JJxB7DT&%K(~Z&DQDc7
z$N-*%l!U%9#H8VH-Dom82j-{=yw9XJ|K14i>#fri62C#>^H7#)RR~7*W79;Bgfu(y
zx_(vY)495zuaOb16*&oU?fB2;+6bJ_o}Q#;^x~qkwzNhCMC+VGK#IZ)I)dc)Q`1R8
z#GtR1bzzG~`i2OXM}?*Mr|6Uff8QF6EnT`@Gs6s=hT!+=WttX9i%tOFBis|}dI4p9
z2#ab5X5}s{sza!o1+-YngdKmH1&l{)aBKh9U~l$nHA;`Jm+j6!nKdu{i{+)&k9TkM
zDS&rv@Do<lH+CRxKMu*)d~$7g>Lb&|waKr%_Ls&VIsd<bV=HH2cY2o}R;(Bne2)T9
zDUV|XP>WW>L#r?&f0uFhRYp{BaATs=uiO-R)PlWhBr1o7st1q@faA@p2k^!lyKoFi
zgHN1<#~wcpM>bcWE&&#Elqa@R<0Ez&<b_R3S@BUECIKi)QAW%?a=IU8jyte4CDF7&
z$jdV<Y9X1VLm0i#BbnhfK_+GFb8FRb+wQBh(4+XjJNtY{BP??WLf{zgj~y*&4+&L5
zh<XuqSSszpW>L_f3@n+jIOQF~9f)3jEIGF*q(mPI&WXJo;Apdp!T3tm#Ql{FZmhL}
zMdA0($*GYIeFtsEVpV{RSn?^Kl_kQ6gE}%nZ8M&iMd$J@#)uE-h`rHE{4~eTc2uij
zG~MC%m9Pj~TYTOuW+dk=>4iWf6cU0HXqoKiC6cN~AUUYe9~o04(zR*nzB!1-_uEOi
z`mm}q=cxfD?6UAu2~|@-L$$&Lf^o1SK?lPBE5l8gRd2$TtzU$dYy(4y`4qnJ$Ln?)
zl1BY_w?~fvyce8+=H}j{{gtnq*E|1gl%H6y>b>IEU;l5L-NP4}lk1N(!yKVEdAJnz
zM}lBmLfsT1mg7oi4)<#0AX`p|`UL-Uf>E=iDyV3oA_-y~*!xH0Uc+dV!RpEg4)<&L
zwO_psKmKFS!q5HFm*DEnUC37wSl`HCkaM(5&H!!PDm){~;i6g3#}*KsDy~wPEx4_*
zb|dF~$z@1`)%N*RXq1Deut`cJ)rl74eenCSq}gK<%-#IE82?!MowjL`B_hX)`!BP_
zI5i=k;wA>>{zNMwP6g+y$pC9ES<hc1%q7tx)1Z%9&EhVZv!GJa`m<lMR@oC=?wyU^
z!fJ$AUKX38J;Vc1^J|1MhQf`CAKC*ukHQVI72F#aq<eqdB~j904B3NYW@w1A@R(zX
z5I3d+RADoK8a8L{%?Jvl-2l}YKx$xM#oIct&&N~NlVjwFk+o?1T*#WgN=o+Bk;ICi
zaKM-<GA$0fIda`ng39~`6&CBFUY%@^`ZAifi~duX$EGQvsAn**5b{4H_#gKk+zY4|
zNn1gi;NJ_91BPq?FWmeGkS9rzCd2Upu6+NZdGmH}{NG!nM*!aS!B1S-+?h_2Pk!eL
zeDqI^^M`*hZ)VeHZ~Rbt;mEh8mrs6IGi!_VpxlABE$qQoxl&9iC&<c82SSMQP2Eba
zB<j^D+BZK|IJ2C$ZYd^AB9V?^&eEiZDy{k4v8~72+6d|f;I&ux;FZ_*;MD0gc=Cx8
z@YrL=U}JL#Rlywzv9ym2K&W%}O^_oNj5P8A!0ujQ*FnsQ<qccT-~Zw*nh^q;hsKC|
zYG{@C#d%L-)@e+lqAqr=hMP)x7B*PXd^1icdof+9K$}UoOyuuaNnSuEwBLg9Jv7=A
z5twDQLA84p&33<2B1f@}$n-`dqqTkVd*vpmaatnk+4%>ANDV7~LTggoyy+)2HKG?F
z|D>}B+>G#D{J#V;yFZezjt38VJ@&nNPt=K0=T{^AfDo9t6rDfab4v%1nY4^gh|Z00
zB5*tD5m4h>CKgJC3f-?zso-vbf8I(b=~TPQcRG`7r#+2l<)Y$La4vwKQaeA(fpjqp
zTi$}IiBpUH0qjd7d6QleWKr=$(-mqesH`H19WUe=S>Gs$97qVGX&{3PMxz0|bo<Al
zt`CZFc67C9cmDBV^Vz@qR!?s~-rez*TWUYvjUih>lEEnX;5V-(AN<)gY4d5dGhZ7#
zI{d)tKaj4kJ_ZMiJ8)R-lDAEbPPE2fO4!mgXJxJkN7G&*UAs+wR~w9o@lkOQZLAXN
zgdHXi^0LAt*Vjx^gh0y_$`Y#t8tOoJ{`@99{@77C`_LK;2RRgr8p@Ktg)vT*lx3s<
zjsJKhfuH)B8zfyk9%f>kBc`h%O00QTI9u#U!*$^Ndbbo&j~9EqyODE)F5U#eyF7(X
z_Tp1lPe!-S5Sgi#yOlzQJB=Cx`fn;>^tqJiIHkEnWymZebY$~1!1~D)Ds1n3*uudM
zz~N+0n{$hhEJk5<2}N;8%4=;khq|g7;&ISK=mxIjJaGgJvPXX@>LRHAL~sIVDuRd)
z8AEMNYgg{8T8(~m03re*#+;03s4!GRZfOcNzLo?CEq3kwokuB}R$T=8$#8YFG<==d
zakVwFIyKnR22yfR<(S+`OPoPNNaX&7R0Fs2_7s;@oisJA0rsQyq=S2ux}(C*SXY73
zKnA;8(XHeE5FQ{ZM4Fw6zt>x4(-$&S1nXlyzeNoYBo`}6;0l#WRwOD*lff8E{_g!W
zOlGfFqwEMt08HRlADdNI?)B0CdvEj(z<X-APd-W?du%oR@XzMS=!v4)n^a9TJb&c7
z(o3g)ACyf3JJV}W!XYFXLeskOs8Bo_)}fj&KC<MJ-EK;P-o*L&`w@CK@t{~TWu<q)
zAqe&Hl<&1%J45>z4OC4FixP9v07s7v;qv88xculbIC5mfjzWRe4FTZH0ajMB=JnSn
z@C(0iD;*DWH~zZKg-y@G;U!p;9RS(bLq3^5C8~bp1i3Te4o<uy%B-h+eCjf-TDB*M
z3fF0xRIU0d?pX1>*yb&Uj#1xGhLuXYK}sE<8e{@#hH+~GM@|E5oJ^ry04ydg>~FX3
z0JJ5v<Oq~dEDovux~&Rmssa%rQb}Zk>M0P_I<N&G=!7~(o~DRmP5fG9K3K{rhLm(X
z<)#R*E%ov-!qk|X9Ut=$%yV@IfW>_@=WTb#QV@bbNVFbv*X$fy0gil!cTbetf^_^2
zGUk_nRW5`8h)9GcSNMSLP^qKoPAcmT2qz_0;*#S;#rtNw4I41z!zcjWU&3yKI$`Q?
z=sC;xa8%BzC)JElM^9%aNdL0pD0kJu@?TEx;2ELwD8`>}rXUf)o2VNS1R4%TaP8jD
z!@=x@Vw9t-_+WJo&wj;0^|{aX#{a!JdI#V=Id}&cq$gL#=|_HWl$`o602a-(+?|gH
z=Y~(6{a?X}^^d{+Yzy{_8_=W$8<*e!u;D^uf}$N#52X=X*q}Tjb_YUZEL9Nnh=%{D
zVwf5@HHrpH$IS@ekBvew%|WO@3FA=$XCK;t%a@PA*>fwfzBYh7XOW?*0l0DNp!wu4
z-h}xqg<LoUlzXKe*dy+cgq3UH+W!u7oNS!JqUyN#=NP?L1VfB{G%x}BmXb3uLhel&
z@?mqO*5Bh*IzMxgJbF{PS!D<$NtRMXtQ-Jpw1Ryi5;%5_5rAR_P#i=D0Hgm>+DTXJ
z00;trjLb?L01|>$B}TJ;p=2{IivWl7Ese%sR}4A{-gHTcm*x;ebv@FsaJHbXL#)sb
zQzX$cmr~Ma#L45i(~>^TgCILykqkuw<TaXa=T>k)uf*552>3eLntQ(rM~f7R5F)Lm
z#q{HblXTK0S~jT2li?O2^tQFpAjwoxOJR<Ugy@AHLGwQnTce^P|AiU|istd-qr^d-
z8$rwH4;p!NBDvf+I)m&mYWZeLGUB>C@L8mG<TbYZZsGdYC*g2*r5NTbNLe1w;ia#e
zRG<B|-uS<FNACc<X9qvnX@WZ2Pk!wvdE#esNKcl{-n3}v`MJ%nPoIA155r(^67C&b
zfrE0J^73qVI5Ne-LMh00$3H465;h-GhSP|6sqsiBDprWvc58z;?VJt5mEfiGSw;qM
zqbW)zkgcxfaO~I!j-MFQhQE&*;y0#ERi%_Jpb%ct188|OY|U#CI3Krdl157x9p2RX
zY)eNQ%E8#E>iP$H-r($LH-LyZsJU;E-e<Xa`q`=y*oP7uB?gEZ7m%Ks8XqC|1&4rx
zy0%FXf-xUTq-e5?cnrrL0a!ngK)Fa@anQovU336u*mjLj073%l0*Yb^b%hQ<0nikP
z!Zft8<7O^oJvCrzyi{mL4VYF2Sio)TL6h?O&tOr4WUw0$jeeC=!03}|?<;r{O9k1~
zD3q<gRY!!HK&0%{DZ(XA3092IwV-3d@wDD0uO1OoYTfyywJl3g3Ob~7poUW7^XPPX
z*+$nv3a|5Xq)L2C!y<pr_1hJ9aC$wg@;YQ5!~F4ocrMV@zt7R_AT*2s5u}e087hsk
z$VG7Z1og4|fq?+0hcv}O(n@vBZGh7ST;KksW?I}X2H9wg-N<L~{3oXMbHDwTTU$Tg
zGoyC^-qXW(fkAqDV+0@iE5qc(_b0HZ7VYkQkZz7Yc=r36i^sn$-Cay!>+mWRFgN}Z
zYsFwQ5sieHBVZe+Rcv{a`A!dVi#~J{^Qc4f@h&`~B~IPQN+W0M3P-<UWC9OT*9lZr
z4RysVd$fPU!Jxs2n%f#{6BjWIMz{-PE3e3M0h>_LXxB;m8t<9}{##_la5tm9fd`-_
z->%h;$Qv+b=|#$zr(kJb><q;KTFOC@<X`~!`y1w%ql2LrokE&tlma+$9$@VlI{>qN
zfc?89T?1nrT+`i+?Z$S}U>n;u8?+7D*fus!8l$moqwywbW7{?xJNfo`zrS$row+mT
zoSDO|glVoTD$Zj26ol>niRQ4o48L@I-hqtY?&VkC6OY6C?RqIU4^G}hl^4wM;o?D-
zGQKA<8BF$UJ;@Tsi{P$o+qPsD;A>Wl8f)IJJZH=-T43@|BnH7ejzaQYGM9rCdBCdk
zK)$`8VC=eJQQS8rDQ!|gepF`PIRy+M3T$z;?C1pXvn7q4bBkXL$4vpT>l9f`(prq<
z=5rEN1Wh-%-6@$;KX0s|cGP(cR<&9`QzhwMfbEe#3pWp>P<`Ss@+!}Jt2zyX%CknV
zT{;YSuQS5V4n#lM8~7H)zHB^0Z>+0u5=<2}Q_^h;Ab2kkZ*yu>-k*`?4=C7)d@L}3
z*IXnO&LSUmH_|^B%VLSE-)*`sz6nDJeReFUo7)GOIFw#n=F0I?jae7iYQ`UO<pZ&i
zK|#6LxxINlF6#_Ki~LdJ7nWG(Zq==Er(>BGv*agjS>G<I1N<;acq9s#E=J^F_6pj~
z)+xQ-8nd0nKAqlM#eoD4uqLu7q!}_NOXLEHq`$|UygVjRQGnHP=-TBcTxo$4FePks
zwO&b@fQDCmw+kLn#%QkcBoN}HX0!8ELQiQ3Xz|erh1jklYLcx&%882{UCtr1vMNi)
zFN)#$%bF(=C-$A!Sp121$90zcWcdn>NLVq-jpAVu2KL4j={D|QA!`n@EQINpf^n*;
zE?oBs^c$B5&YKXpl^`?{Ra=11PaB*~c)(SdW@CGJuuC>&{8c}e3<CL+(D-N0%C+r}
z@Cb=3Kl`6(BsfXuqQYbFh#?VGzCv!PA7MOs1^!gV(46>wrPhZ=Q}`eo_=LvbtiA(d
z_a}|SBG5#_)PDZb>tD<3v<ued4DZg%_v!zzmZAuR%Id<2mm{Fijd=rJu0=Dw>9<`5
z-Yx<E(}(+BkRUSR9$9J&qMCT#ClufL7Nb>W#9g%1fP&~nbVA>Xe=xI)%&TcEL_Q&m
zMBk9&zk(N`qj}+Dxh7Sjs%2lutkVuJZ@q7$lT~AO8FZH?;We7V4f8aG7c6Qr5h0=A
z7S+>+-0M7<)qR@Uku#yXeZ!g!{iEYLBJoQL<#8G(v_%@rLvw0@T5&N3R%r~eM99$q
zt}cJCHXuy!5YV^{aJZSs@Il^#Ap_$qTTu-HjyO^Bdl3dbajH2doVOi5bt7Js5J%DN
z&^quRq|OCDWbHF1(HMQq!V^5`3KS%1a}s!^z*FJfM2uzK$VbqhSeh@LA?>VTlUQ_N
z`%{H!K1A{1x8#@G@8e$;??>6=3^YIgwgM;9pnmfUOSsa~8lE8|YYkD;$jdR!8OeE!
z$-s{T2M>SfV2Lven<O7P(d7K}(l`EFCkW|%@>}i$mUv)<FZR7<IZ8rt-qV{9NpI!v
zxmDp88~xAsKZQt&nWFloouA+RCST^?o9q}4O<D4kUOj4{n?4>ANZuTx8wSXU7*yXv
zg!r$*;%RlY1ZQaVC=7(Ivi?o(^Om?KL;M_Z@yDoS*{PiJmBVZV1pxfCx+10O$-apa
zFT*Yvp`uA6A%S9HykjPz9D>d`jM43IiHWbfN!>&yRbR0J$!wbyW`70?qU-NHnKbN_
zGSM2LSH;L<4ACie1L@X}imjkRDm0<|$nfAs>YJo+zxfdY7OnZd5!r`M9QYGbD*<YC
z3;-b0Qz+ze3J$jtv}9*|VSqXlbO<m)$;Cm;1sBU8=322#kOb!mxnB%Bm;b_gWo&Ty
z^!?WalZlD|D)D9c5BfQx)uxGP;4_{R0j>X;ioO_GC8Temik~sN{nKLRGurRMrV>Jv
zZ-mcdWO~~~NPlSEvYY&Sy@^D0@{8HN`mwiZ-;mK`6h<l_2k3GivQ6Q<ZK<SGA|gQA
zI#5e=|8YC$MYc|BJVR!BI>l>EVnf>U-(Uq66OiKcq*TI5{AzHpsExjfM`HVb>!T#=
zWBd|QE)1^fJJ>Y3l=)R;`is8rw%PWlr}tia$ykGE?8XYoJ9`yWs%f~bB9<PN==ij|
z5Vd(pF_hSY>nfN*aI4b5<H0EE|KdH3YfTZB&uVP%h=`IZp5Xb~*t6P*SRM+PUk!U;
zoUL!4(h1BVRK%84uTN>H)BXV-pAG&Z(7)D8hkcG*8bGWSdjn&EMJ;6(>D{G4qqr_7
z$wgQ#nEQku{RKqi;2CX$F3>D1bM=tNk=1+4XD>60)6^FyqpsAa3H#zr-z|LrtYB1&
z;Sb<crLC=xhkPH$fV_1g6eFU3Hj*TBa{(~V0#i9&4B6GnqLIPV=rVNQzTNRkJ)^W(
zv;H2IUhzev=BIb9IDMysDsnive@+YjsJ!#A=cDTrwF;4N0r<4G?^dr*u(hvKJ7<`?
zN(cSoR+WLLe{2t*8zL_yC?Zx*^pEv-)=*x$)rV6ZCtWYB6?qh$C6?r8IPSG@jjGmL
z2_gFxVS!2}yFW_-d%8mt-*H!DHS&+VQ*;?lDUNX4hjF{WTI_GHl@lefsF1|wnKRg!
zCy=<fR?r*%&b&q^ZnT1hta^L6=6J1JIE3JRHow))+|%%QAf+EFLt#G>fBJG$W9(&S
znkw|lfaq}5EuSDzm6#>3O|dT<s#=l~^Zw@Ie9Oegf?1}YtBhiyPM{R+E{ExWLHv$H
zEhb3@7$0aio(GL?y&#27cSm`$k~q(zPP&LCdc9NflS&T&*<uH{1~XOlyK<<McS!yb
zDEv9bD$A$1X-0D{IrpfYi<m04yFIS_eaZ1H7(l1#3Ql*;z@-nDx9x8KEc1f0!2lii
zR+2%&Iqp_tAQHNvg;<ao`K3ZkN<yFtWI!XTg?fJLHZx!!5XXmQ4UkKb8^3n4m+L$k
z&zx+o|1J?s**k~Bj6@Wblzb4P0EjelErqCpR((devN0v3fImOWiao+&%VBSBiVzxV
zvwN=bFF7sI9({{GkUtB;HvF!Uss5&Yw=h-Are$YW!h=aqL!yr`lD_-n>gTkKocg`k
z#3x*JQ^Xdy=9K5&63Cus;a^qkZmHX({mF^&wh{sFHF+~xAem%2DO1QQ;`bXJDpe=O
z3gN{s9Wd>YI=}?!PjWI94>4_Nepc}vkA~yNDSl0s2a4%|uMZmkEqkC7rT&Zx8qeVq
zRU&`xA&q&-<Lbewt&;y{-nUa>7;hl(C|oPjf%g2DjIZ=UJn^$)w9d8@<jqnJZ?|8x
z9|&RQmWH)(F43jUjKobl{6O<wW;++1fT#C~IH4L2ra|9?Tn*r5TsAwIFB7}%tKgET
zvVLXm=N$<nNE?^C3?xqs;|h1cosCeJ>DK0PAw`fTz{{mers*zbN>yVUKtfR*EvML_
z%Up~jpW#GfnU#mZ6pn{Dum=3aTLdnCMg;IW1iugg)o_fojp4<P`U8m-%7}9X$a+AF
z+F@NdPYuixh#X`@f<f(`Zc2CqPP^v{Yb`cG<W-8hp-ZvQiJh{eRd?=U9C>FKRw;4Q
zk(1q@j`W%R3d<6zAr3Je33V4$hv)7b@^xo*hN47IlyFifKjG@M!u!60#EIZ~oPLXz
zIz4u7=BanRj~zkDnvb?YXAR5aH3dm!e-wrKVRE;HM5}*`x54b#WGQ^c99gO5^+l%t
z`>QxW`j=^tV{+6C^k%9pYTl1Lub)I~mOD9C2hTgt22w_$(Q`lc?~F-N2b$jg3^@P(
zw}F=M%U(4B>bKleXnB3vdTSptGT=u++ecHYxf-n31Z%6W5S(|)65>IG4k3pPj8mWu
z{t~)BwztCCcCS@>5bXJ5!HLNak-E4n$)Ictz0$)O=HdSC^`_t&QRo{LEhlcKu_O6O
zf!&a`qlwGR+$7tn@u&Jmmk^um;reqQm2E$64;0IWBz9{A#!t$~Z%TKXM0#%+`>eV+
z;I7C&MpL!4gFrc>-|1qXR2ktNYJ;=^s21{wfcA#YCRj*xyzX2ywP?dR#&bKJ!E~55
zEc3X;!l!@XYi8qiMx|q?jEE@t)A6)!ftmjE#xC9zuVe*Y5sh?JePovp*M1%6kDkkl
z3*QdDz%FS?g^hlU9t^7ybpK2mjgy|w_;U65!(^g5LVzY$RNa|z8y~KRhUeU4fmTC@
z-+<%Aj~f3HbtutZoYK>ZIn3%U9#1zOMA((o1pD)DU<suvtMf6Vme(I>HW!UDT|Sif
zYYwjep|f4u`&KlkiT%xE?v$$HH}A_u;(yZtJB?z=)g=X|5gWpRitoM{J0;5|^P}aR
zj{u%9f*3!+Ou@^lNqVBwF?+EorCfRIb*Un$F<xdNmShZSW-uu*;`jqP#CWPrV!vxh
zUr&Rjq2Q3M4_tQLg%r`=fc=(yG0hB!<@vxAcdsi~)xY;vWcL;6BxLiu@Mi)1_A7V}
z;uEGpN9v+42atUk1^ATU_%<dyX_;B+I7V$n$_QA%ze!vswEjga{(zt?eEJpcQH(nN
zB)5=CIbf{>Rc@OU|0aTS8!27=r4b@T^3dTg%#rm_p-TQl(Okrr!YWUbtPfOp%=*)h
zF=|BAh7*teL%{=A{EwIod&1a#>MawRx&kV9h0lz)cU#$q{EV43Rd(E+P$9=#Rx(}!
zDm`7uIly6t#x}EnR&-%LE&=BJnDGgCer0JTA>pskz*wF)>QlCe6=cuR$vlsTMfB0W
zNJ9OLXK<jHEl>9;On)VbF1J|`BsXs)v<Uc`Y}yI?+@ND@{$|x+(OfQMd(A?GnP?Jx
zoKQn>Hvj%(s^iH$a=$-dqqCOh>5@(uiX@Fdum@*$`W&AEE=Cfa-zS8IVtCIA(|HrW
zb9-BO9PPS8%A#xNxE%cbQ1L-q%|%mf3hVJP%wwU00GVVFbaOGsNxVWSmf<;f1=j#B
zrbz6rpXIf$3(gKDz0SXfMee8B89sP%nKf4?p8qR{o48mW;`gyCULtx;Vo#nH8J-z&
zw|dK*L13$hvR(UCbGFR|G_Jk=bGD?8X~z!Hfbhv5kgHPZAR3`+0=P%b!vRJmJiCCT
zKd`zi7))epI;MT<6#MUb$8(?qthwh7si11kN;>;#LI#;$#l7q<m7C?8+RM~D!5plQ
zX%2*nlQ2lRg&I|pYM+R43!LmC{;V2=U~RfQsaWI9eJlBz&p<6?=>RZM@0U^OVEL1$
zH@;_`l^geh1&`GtmxWqT!TdO-fj23pOy~Wzw*(0we@09o*7RxD`<Hj_{jaz0>Wm5*
zYD5&rHwSS&ga}6hXw%qQwO~C@bd3F)zRE6j?z4`e=^m>Dw9*6drPFs^c;0vYDT8O1
zxl_46HSV3zkSX~uWS+M$&nShPIOK9(-l#Gk#eFt2+`5^|E$c)&G7b4+Vju&?>nzi+
z@I1u&y2wpM@Ge0m9q(!`a9juM7uflf16C{}$NWaTXw0;KFvRetk^5B(ekfAG4H}>|
z&;LS1o9BI)EN{v{aFFeFp1c~vp28xLAcjYfcS!S7im0ts4UdYV9Q2p-U{sbnS^E>v
z$N?GGxx}PGO8|b~1eXJ*@yCVZC3wUT0Y>izsEJt!_zmz}Nibsb{>Ghv@^ZW1c(t{1
z32n0aZvs-MiZY!)!nH}~J2>qua2x3D)M#8N{PvUE$qsrI-jg@|hf2dGvU&u^Gm!4r
z=kxjei?hwiI8sP|%8@pb#;rO>FTjg$u6EuICZF8OeIw(4`#|C$srjeYIRsIF{`+rJ
zWz@5fg8-@YM!TF5uC(hK46(tJuw!&r>ZJ(jD~kI7hys?75YK^nxPNLDRn&%3{4=LN
zt1!!YY5865P`yoR(T-36Rnpn%ZGP+R0l`?td#TlhO+hH+%Nf<HhkrD*si`OYw#cSB
zVH1@w(B+?+`RJ^dUad3M(@{FIfA~=LQkS@aDyx&DbU$Ld$Zn_E2<b5Sbdz__UyM14
zJc#rGX)hpH(F$($j8)7rGva0Qa|)N;rsP{DYS!rs>k|eE%j@dYr9Wy|PxY$e#P?rf
z=3b<D%@>?U#v>P3&!yX{x))@4VAWwDyf|v(QY1`|!h>_rZqt5s3*=h7mzy8bib)HG
zjC@B}MKmf2c(jROO=5%>)2Pu#j(kkY_1}ii#Ro`0lB|+(KGC&~j4~3b6dC*0Ea+;N
zFi5T4I9q^dYTO}-n>M;j#$w1FHnVvi!tfI!Oowb2dRDI|<FcUsKseXBs0Vhld&Ei@
zT1C4;?Mv*+=bRiZInh5SjWlVk%?J{8<AEPPXr-we`>_udc;?>?YY185lIHtVT?{m0
zNW3JGL0ZL84Cm2ixOInks4O{Cc~@$?J;?43YPhbC-9lLV8(jFtr?LGm8m%z=ou<~G
zPNco}c*|uXeD5!apttZ}YgteHP1P?>#Kk2^=q(3xy1}2v)>xOTJ+Zv%%Gug5%RuOH
z?a09g0R!KCvvxIr-Z&m}-RCv-Gos0o+SRrhwK6E&FGhgL>fbDoQj%iOQ3fgM)S4#_
zLn(|^fkxgD<Kel~Qt9`$*lZ-lF7I=z<qUDq#bdkh+o=FiF?#N!pCZ$5<6|Uv#~KQE
zoJL|u_1CMnZ9X-6aZ+$t&UZVAPjVbAXsJ3kbwc_9{<#?!F_#ISv+~{C7Ep->LKH(+
z1V!)vh^YJQvGO%2P8icmz$?ZjNtc+A(rWCl_ke(T*UD|imF9h8s_v0guNuhcKD>J-
zsUZ1ym&P+rf$Q&R#z?`hv`k3`rp<@K+6uFh3I?|1jo7N}*vg=of3XsX5;KW%ISL%o
z@v7EWbMdv|8&O@D0ty8(-NmI8$iAL|D87T+8x{zu?e_b%qW-we2kgDZk7jedjYA1r
zR>_q`mKp_9?*#Cx&l#rP2PwmM=NLzb9e>GA2cG?*3{uM8p~zvuX`LeM1H_P|nB-j@
zM!KQ2r5KsEFD%B#*=uXD1qxKd-0k0Q)~=gAXgK#Y9u$>7N>~N{!Oku2T=ku#bA&x5
zrt;TP<aElFef-Q8&Tip2tC5&R7*U2DgP{L@wr7EHq2FN^Z4DO$O8d^z7insKj0cA(
z7VQ1t^&mCIohOOt9vTkTAKUyHbi7JvC{_*?f|Y%ud}IEBxY;|CNt{Mb4Fhnf)fQI|
zhXsd{%Y*0gneZ2>2@Su*MSVmC%B#9_d@W~W=+|Nqls(bcDB*q@VZviC(tK80V1SdD
zSg3GZSal(g2kEda5=Y0Ku{!yCyv<RD7Hect1xq@s?WW&=l4%I8GUx1Ea!`*^|GeX<
zGt~6Cb4jLTsz`K%Gq$rT`6cZ(wE=jZl5nsC4evRmDrIB98xi+Enfc{L0**rT5_=f+
z0_I*Aqpm+F!E!fT;h&Bhguec@p6ghbHesDe`1R=y%W~zf{jamNZm8bRuQ;%({cHF8
z{Ij@dmygT^z()@gv%TJhm8^*3p;*Xsw+1a?N~iIxLr<%HMrdh}g8z#3kw&)rLqd=G
zqTy<Y<Sf>pmLw#)DIx*KW~>bO!?Pk@i^!OxblOmOC^enj*bi|<7!nCpo<xkt`EJZB
zXN`9$y18w1lD%<v{QeSJ%7o-q@)Ho^hm_s2u;h}Tk2AlN>P+PEk$~kLy(lX6exbkV
z#eN4L2@w#=`qd}2+u8}71ps1T0d*;nu|BM#lwPW8bD4f(fCGGi#U)aM`@#6+qECBJ
zA}=IE(i@D`p$ShI#eSe}Q?2zWwq(}%?UOP%RCQ#kx5eE9pUn7)GQFbD_3^KK9Y!eC
zy-^3uiwffFT$}(aVC1S)sjq?@{c%gOoSqx;FnUBSxEU!%DncapYZ#Gr+0p`L-8)u+
zH~Y%WZAs0}LHKA`t4F%%S83S61gfZdbls5{vH50Dja}dP_AfL4H)57!5_qvJGpLAb
z`uijKDbLuJYVuGO1#`M}w{}yzVz5X~o}Z5=Gz%Td4qy**RuX!gwmW+qvhNQ48!8sI
z+21n}7*;`_pm_Z(CY7rac67H*Jen??gh?|`oIzhUg};~*2iQX@b?e%!CO*3Aijfji
z2A1|g4)*Bhqn$_B(i@D<qAt6a#V3^;{8fTiVHIkw8gEoMwe(@gpJ9W|<cOOP&3h+d
z_$gQ;w0bB$qnsuK>d|NCn@(9Q&T|Y#;3~;^9F8P~WN~faeGr=f3c4(DyE@{^ZSSXm
zTulfPAQ47=f=nHZu(bC*m}|~9%I#AEv(=8W`EJWHDZ`zInwo4TvMVry?ke5-cH~>_
zjhq^gi*W!I_tx$@Zx!NZQ`Gz5l@l_udFB!nJyS18pN4`cmWAbph1VA`9wM0C)1%Iy
zNy?qFGq*2zu2qLyR0Y2Mvh*nqA!w_;u!&RQYWf0qa0NSRnx<BO52Mcp%~UvGZ7H(W
z^#MM0p0~U?OFPJ>G2K*B=&LsG-o)qH>po}_N;GvgudpOgobt23dG3Lt^-n<iCVsT(
z!~&tt8!}0c2loA;;Y4LYX<f&z<m@4Kvgh%en<;xRhrChEZ{W2XrgxU&J24L|vz3hR
zas&(G5s<1~y#|1Nv&Fn0H3-Jucc&FYE9<==TmEJDXPO;sUG+6UZT-j7zZc1Y@W}xX
zWnt-rBE>AdI$XDlib)|dq7DsH{{ZoavKTNDec7gJKZS-$up+^A$D}qhP)!5CBmkt5
z0(huk-UHk&=s~SvOn`*vkn(;50O}UNNFS^YOhDu*`18|?><6By*+tN(aK;!$A~O`S
zITt4IXcO`kYeE1bZ~E6MRT2A{4rScfm(bO+%PP}(3}tZ<Z~&+ha0Z`|+S8qosOzZ`
zy5T4v2%NNGDz^37B;(PX2+61-#*q(RxTg<<x}PzKAH79#mep7EjX5ZsVRfsC4#Gpc
zO21R|A0bp0${yV(9uuFA8iHRRPqgPwx#g455kbS3S<3Yutu`(1R!i$oNA+uMON}#e
zUk(di{W@-;t+k&|JRMcInAdkMIr8Uq<Euf#@x-k@?RM=Cb3HykJUl%vckg@C#%h9L
z>iQp988g-z$JCs7=;XCV+D9Da;Xx!=%yDd&upso!s&C12%d{V`{4oyeWL|c)N+V*p
z-<*URJd^R&8mVdFqIOFI`RZ=#NWTofaOu=E6kQ;*PrBz)@gh<xw_ewMqmg~^qJ2s!
z1QhyUB?tw$tU`*+b%QPI7kbCD@G)A5OYz}n!59FUXViVb=z*H19$_;a+aE|R1~_p%
zFu59QI;p{^U%zDK26omEtIDscx%SY23|X3hZ=$LUFmB$Er>#z5zqS(ca=RXvMGv4N
z^a^x<d8x?`<cGz$-Dqk1V)nj~;x@@4jmvhG6i5IlotFx~soKfrQ%UE@&Cy<D_^u!L
zeeyuPu*3|<HbcGh4b)TLiJq`uwNjr(z-#P&snKTGq5k34Es_4nAui?`PezS<uP`)-
zqGod(GvzE=Rr_pw`^~&H_6};v24#tFcHDJ|yF5*fhJH~A-Gw0>9d)Oc99_2YLo}`*
z_Ya4*if}jJ85Tqlq&0iaw*^=dvhXeeXWL<qiU;5V^-;<RENr6)<8_EOv2L^kOQlmF
zDHUp)L$t+3FPni%3Bn?c%npSd?ctOiC1E-%b{~ZYfPSaq5XKwUj1R4D62JZ`OJ9|O
z48RH-B_TFk1a+O>1DJ#p(}HwuH@7*7pgThWYIiz|?-r-lN$=7afX_h6q$m|&WUoaQ
zf8V*nZWNuV6(=3<nj`$$!+=&43hXB*oQRX}5=|$Wgis?JTE(l*H7&6hD&ktTP^?wa
zcRez=m+ZsA@&;fTo&cetIETzv1%ga$5nokAEN;vYSBtaSwtOds$|aS79ET(c5VknS
zzlIOhE|4&|lUu|i=E}kWqfC1>$L+>8)b^Q$^v=iYxegh8f6meATgT+e%}%!TyMGkP
z4)^v+XH|wZ=~b}%ZXLJIE3tkrD*vUK%ZpGXT84RqqrajY3gmC7o*V){|K!&*|NQY$
zbuTviA^T>wU#GV*t>^A#3~vQfvyW;U!9&ro;z)&)nPS!eRu^YbCY=lcA2xxs)tBRC
zM9zhnu>8}9s>f98*ns?R7$hFDz}+UJq#vl8d$UrbJ0EGcRD#_DPm;vGqd;OVj!@l!
zyY8zpU``xMn4oBUHb1_gazN@S%;|a$GZ<bg0mkUI1&5gl_RqfPE<nu{Je&CgJ`6Hm
z*O$!?kf}|4u8s~8P;V~2>|~p0#jF;u$%&2YuBLYz3~Wl8pE_kP6ELW3$Lt$E?{$9&
zkmRdjwM!$jqU{Bo30h%Ax7>T|*9)e>Y8>Ihg><2O*>8h2LWyl7uQ~?K!A~B3?1;5>
zLrhwr=p~M-SGH<xFTGD++m1GKzk4*(|5~%$JlMeXWo+it9GuqJO$o~HYe`e@lSJ2s
z_SmZl!&9O&S<yG!|2^mp<FW^YM23<D*&*BwQH6=OjRd&)5i@HI9{5b%$IX9bGyYgH
z)qY%SY!|%-j${g{oKY2KDvBd;A7$*slBx6@<jMdlK*k}J6h;#HwHDiUC?5-x_Ds(n
z?+&`*`A%B_s@eU`tvzM@Xq{RLCnlIA`~K!zP8p=pldgcIF{Gz}(%_@QLlgS7^dD9L
zyoNA952bGmfz6*Q$SE7L&Lap&v~>aCn|!5)ftZ3%0hE|vGC&8<>k7$bX`Kda`I*nR
zO&M&!YYK^dLj4>Qor&Sq<MJm5epe#}w{w?=*GZ<IYo-?)*^N9KLtyIMnjAd=wj++=
z*XuT)GoeEh=@TmpN(7mQ%nV)zxhZsKqx_vsjme*llt<IoPo+Jg!H#VhJEur<=LEMv
zrJog0;s8j$mm$4G`q?uf_S(c1NnV3{Y)kax<~lT8tU-4fwBL6ah>j~mKg!DsQ7^<?
zig$9we%>r`uk%BY@5?(#N#$)pUSluP%zAp(^lh?#VUIxNt)!Nx3oa~DSmOgrVw$v_
z{ui>!8a|kxNVTO{-G9-Y6eUWibXeeoN9snXiW1fv{>Y$c(Uefzm$QV!@$>wa+MUr5
zIzqBXx8v$fxhEu3hxc=^kk6MII|al&2_69t9UtF&Ly*Sd9qG7=z+N&;f`C|mX$(_f
ztuKit05Ed~pY)3l;EFt%qy~NVE`UO5ko2o=b6LOP@`--ZaD0{GTBw4XBc7I1@_EJs
zr^>M=qS)s!i6e=@6R8&jEV#Z8>adaLDF~gJ#phtT<-dX(5iqeh*NnGG$E_asGVb7Q
z<V(j7<>sMX+sdDkdF=w?Nb$zD1Df8Vnhyt8R-@h+i@bdK7}tZ(mJZY+yUQ{xf0^lJ
z_bh`foh_ChOMbeY__J*FtLmJsk@$A{iLMVpQJL2VOkIJlh}il8_L$9x?j&>Tjg&@s
zyt(m?0Mb_AW5IyGC_fD191khWxx}yUnBH%s_Ot1R1O@VC0i*~-2oh<hEe6a3@f3eY
zfbZzh-)`>3I|itKQ<{(DBq6XN%vndb9ugfsf6}v+1NbZI?1)8$>|H;?Xy2vk-DnY8
zW(N{`CE$MEqHzV>5b_J66wrhNc9UQh+m?FIzk!eJfZDBK;_G3p^Dun?BfOBcRRVmn
z0l?(<SM<1dTV(I|7M|pz+8u6l3ZvW2Baheigx$u!_70#yATn<zn~2opWhmj-O*LUh
z)~d5A>iZZT-3u7*eK&IPwl?R9w9<nE!p8f(jdBu*-IvVd$xmvT$VxqGL*zJyYB9X>
z#&J=`Nn`<z%?NRLpsbD1wMRuLI^4u`yrP{jZ<%curMU>v=3qb0>Q<-Md6$`5^~$sJ
zmS6W1O8xIxJxG$VE-LlflB2FMeZ~OfkItULFU|O7pqiF_06!MB!*;u|>kZN=d-EVs
zX#$RZ{gw)N$M$RP1Kv<zI8s#MNgCma8Z*Ne(IcdP_O&_L+4|wjf~RZ*HB<G{<L&L&
zkSPy~2V88}h*KJKvF=3mU>0TC(S2I+!N-q?VzYpuh+HiI$*T&gmk+u&paHIbK;PrE
zkBACzZ`WAsj=AYz9>DL<CRyMkS_BZl5R0tIAdD6OSiMMU#T*z-wT=H`rcux$J%0NI
zDzS7Ay${;&mf3lNC*~(v0lnDpBPJg<ZER;EKO084sT|Hui@mXy(6j}Ll8FRT1LH$#
zFu=cLtpudhV1_Q8ov9b<)Ep_4utCT163a#dogWAfGC;%g@h!+Re{C1j{DE%x?7Wf3
zD!(M)^*HpEalcN$z8r6q8(sLbtnj|~<hS}2SkgpvGhE;9WI?BFCu3V2nUK{%f(aOj
zkrYE2oT71kPZV%caLa3!=@>I%^WF6RyASR?4i8wQNrE7z3-PRat@5xK4RNDZ?R_LQ
zL<t3SMwnI8cV{oLk=t1z>$tLj7O5D04|6Grh&!SN_qPDwSRD$M6f`&5KzUN|sE9Ms
zO)ThH9X;*=Dg8R-4Tbpj<lgEScID&d#exdgze7%btq+i@3iQ(rMdLO>h9K1?GbP|G
zJl<Yr1t6{w9}B?aGzzShTSjvEMsw<}m201fj&U*N$$9o{%J<C)=IP28BcP=s#yUI=
zd;M`7+PuT>S?kFlHLh<oNUG4z-cqTHCOnl2*$)BhliErs8-vxoF)h3eXs?RmG&|n_
zp`h{DUW;1sds_qBp7T?>MG>E_v|kGqaQK$lQ3ICs5(8B$k2PGN*GrUU|7xp?PJ^Zu
zRNI#s5~xkk;s2g0Vsau4OwjHNXVBf2D5p})D-`iIT3^j52B}Qg_}Tj1EnbB5{9_r7
zL{^GqEyYnnH=+WMpjanOAP6vMi|-@v7T<+RNcI!q%2M9p{M$4{s|XIy+;IORPUTzG
zQ}Vfg`glPD*(rj4QF7qJ0a(iKp<^iRUsug{lO;%648RqBb_Z!lT^c-VIi$yVzQ_-j
z%~r~**7)sN6x!L2JbH(}3#dKBY=Nz2hNe_eF(y)g20%-Kq$vh9p)Gsh-0B}Z|ArXC
zEK-gw|H0-XD_Zs!3{fn=Bh94>%RB3U1Zi(vpjx%89-MHte-6j<w*-m>l@x2NEaYPd
z!IxuVjZH|LL5d>*mOQZ9q~{G^w?Y&Ue9vp_T8kXy0?-x=$a++CxZk`6F;#!C^$ri7
zpTqk+s9u_Jbt|y+NMh>!%)tEn-fQjjuR(j~*2O?O&wqc_#b*8XH$G*VAyDT_546A~
zKs*|D2P)-NVia4}$7e6TczB&d@g=J_B<R}B)TEYNh2lyY2vx)GRb6Y`)v$&W3`jWl
zI1sHNa!PB8LJ76evIHL74wv9&<ilJ0TNtxuFi`xpM<K4~Gb^C#RI$}pjh4Xa7(mjy
z<1X(WkPFOJ0dz-g{8b5y0GJ}rvO<nV0Ol0R5wH%=WB6`%uuAv)YC5Gru-9cNiJ^o#
z3lea19#RgQ>kCNT?Pr7Eponxhl4VDCx%qnX@Jp!VdT*D{R8Osglmw7=tihKny%_jM
z7s5I!?+7>)flJ8Gs@T6!7BQsucgDv`*9i-)(ZPMFmV_XQNqL+mg(CzE`_a8uZ)N&r
zS3)S)Eczd@2@fhPS4OvtE(L5<b8OwrYq(51H%yL<Qq52Jo42Y~{+?*JM>=(gs<*fs
z9v%PNc#pa%pt$%?O5i61rYnwtSaFQ9iEt{gy*yIcyvZgJTinqDJ|00kwQ&mmC$d@|
zAHus4?^>Nzm5Ro=7mrOO3wOTycA{SxW{=@-=(8}o$Y6;AT<&iAON&)1ANCKs4>J`g
zQE{>xL%#sWJck#W)Hkhm;36z8fn;)ItI~)2gq8Wy4N^cc(CPwkCyE1IrC(kg5+;h|
za4dnbmml!OzOmL9l`g<s;~@6bndSat9*Z7QIGj0i6%5uKf3t<m_z!W~k0psq5x4it
z#_XkQu5vzC5{L;YS}}UobflphCk&PvBx%ksF<iIDaf8xG``wAeYVuoh0)NuIsgCsI
z3sUy~>ie<pXdz0H2J!UiQq;SlLHD+No>nHr<RM`>5@e}?+}*UA+25hKjr~cSxOU-^
z$yS)*N~~Xdeor17>;Bf<l3lU#+7f=VLwg53%k%%vvI8{+f<g^LLEO7XL0Tf))j(Ch
z*$KrzU-E8i<k`vI?FjcUOT71>od3BPyz~H{vr$<db0WO@cfOH<Oyb-_b?Z6WXv!R8
zN2=J<FF{A#R|5;bsRRDnQCDot!KCGe5qGc3g1ecUZ(SLBNpYw^8hW{fA4}=g3c+*0
z%>^Q${59TjVTi0~I^?o}Xp{hb)uSooEJGI_9NKjP$i>2P1VAN#FWt?s^wT8EA1&1*
zErDZs6`!QdNBDf=F|j~NgTTqbbt&Iu^cAPh4#s)ukj~ugkK^$?u1Fgd!6FmS6(;Nw
z5>kPM1VwI!a^5ejHnXjNs}&JyDN=Ox0aFN}4^xLVeF`zdJ{2zGGgktqDuxzr=Iq*$
z$2`R;(=6Y<C`0>Q){3^Y7Z+g5dwYH7t+lrE#lJV#8t27Wzm66te0j6;%@s~&373MT
z@2_Y|3CV^w1Fr6@U}7QJzWG8oz3;=Kd*R0&XHXUeMBEdx+=PwQ4V~#uz)!$wJO<zd
zSC6d?SGyHw=aWajk&a3vnL`#pxc5=QNEii%0Gy5}|AV57S&A~#FT8u<u0C^kvN5n6
zmiQ+n2KX9KNrc4%9M-U?$IpI9hl?Rq%!TUmed0d?i@i0=FJ#yJm4Ip|8&<%`zxkH>
zF>iH5SVa6dMc8s*BV4SEqycisuHP<&Q&8M=4Gna9yLcc|W!e(vQs{ELqE|3nF%05H
zo*4-MX>;*>Cq<sY*L?|aG49+ocWZFn!Q(6Ot&dWh&Xd|cD3J8CaVA;NTn}~|L&GuK
z>8JrX>!`s&cfAzHB3<a4-dN(N^##wFQNJ#5yMMcd{hP$x`r5Iy*VAPY-~SS2#4Lo-
z`}AX&!zH`v(cu^UR2o@;ChX(TZEOia%$tZViD;%u1=%9|d0c&N@Su&@;3ReCDV@6|
zPcX0uAyj2uv&^Vw=?9G}zHBQjYY{G?w1bOSRYub>ovOq%Jh7wIdX5@!>tW<xk2+{D
zWEiMM4$cMs<PP77H%2x}muQ~uMeG&{x?~0%k9It<K;~}|=-V~ra9My_WMFtaIw!zy
z5=v@7ILc<&s&2mHyxiBTtt_Edm6&Tdf%=Xt9Eq`<Qn7KI>kXL)3=(~r!M{O5_i5g4
z_H-I1MZT*mVj-SdJE}FG{Mg%nd~FV!L)&$l{4Qr4j^=06ASi_FDFDu2?iKJ2elV{8
z{kh3@X?KYdikMS15@~^+Tgy9Nd57=DyO~$K@0XvKPuJbIUJnPny>2kXMAu;z<9Nqd
z*5qW5_G-u=eg1ZFm9Ol%Oh!|uN`U^OvfG;B35sXoqo)UIrSfmk)02SK>y)cMNP(Xo
zke%TWg0O#Kqx3~~MGpBfvlW_fgj}XjySjpQxrOa@$ZswdI=Vk2rbhj9`YE<dHFI$I
zaS3R|Kv}@YH-cN50ry#@`QIo5#~^~PEW*F(1O3Ie^<EQm7`+(uJwA9ST0Y{WvMqLs
z=im=Uu#8K^p$r;Cn6)~NUOkW!G}B+VuO%DCoD}*-cst^14moE|AirFZtTxzsQJbMC
z{552oFW|k0w^`EHdSwo!Ki{L@6WdiUs6Ge8!Ok&3_61Wzdo28u?Be7m7{3IRXZ7}M
zqc5iUBHZoQXe)DC*PDPy3r{=~&@M@eKb*d2Nju-x{2IF@IKHd3Z&-=FANyb0J0J}Z
z5>AMoR-_nNxfYFMIN3l1h2<}0HQORE=!hm8^1XS_%*`o+Di}a|t3fc>z`%zP6WK?%
zu%*ibmWc?KaEt(?k)g@^a%!W>frAb9g(sRu)eDZhv=JEZ<J=J<2NkdY@N(m@!bFAo
zkBv)uTo1bfSThzV^!AHsR~JVY*zrKZYO`juY2*#_7_Mxi>G;t|37E7C$lV&i11kV4
zq^fSJdEL4{1Lg2)ssf|Y2$8@6xVbW!{;|H8{}w&gTu6tqp#FC|@$L7-lPyw54E$}g
zYl_Rgy3fnSI)6R>Fy&fLWn-|;9n8G;{@_C1wMFo(N7%8Eym~VA0(ApdA`gu0FP$_O
z+NIOQvWrjp(A08EvgglUO3H6G8BXrz86x-R*NW5FrJsEZH)7de|5qhq(!iV?fjn;{
zgYI5($W2cCLGt@*vx3epa4}VW(thXAA~Cv2Hm{U971}CJsYsD67Wu64Rp7B(Av+*b
zp`KNocN5$C=DdI5hpVd><A*Dx5d&86fHXXEMqnR*b_7piA#B0LLGrL*BX}v>5MZU?
zYGDBSeDCp4FEv;YX^Dda=4Oa$Q>{0mCIB%mI_>~00APgeus9CH2H0Rokpfr{ZIYw9
zcjt~W=$6g$jTR2SkbkR|NV+W~hlv)rtLG&Yd!gUM3VsnKG7~7?M`^<nrP$c>D?0!<
zBP_~eU*$71691eTQz}hNZh`%NbufhVS*?)4kS@EY@i$Pg;lRlJO~0Y^{IjM0UXY1z
zDt!eXyRzQJt4G%Ab9{N{eOdY1a+hIPH}BK`Q|!=CHI$|NrW`s%6MHZeLP1EEv5`aj
zA?em+ooC0)_vPW=YMp(+j<u@f+`L2WZ&=h+huKnfKAF?+xg?x;a)hH)4A~IyG<@;C
zxw>Ep_Sf=kbf0B;R5)2Gshi;|9dqy$a;%b|ocJU>WWt0ofMplb;{|ij4YOHb7$(CO
zMj*Nd`Pe-N*)o9FbOC%;!$O{UL4_pAtB<E!)fq_`6<`4FYYv|7=@7;CeBtzY=|$75
z-gr5%PwjMRFK+Mc23ZpbuCnzlbWlz9#L9R;-}7eIX$%99BGP3XxFlxi(-kIXVaK>T
z$rSIMteOPJWBP`TaId%mq<u-w$+`gTVKqG0$7b*#)dm}(@fmIzmE~=y6Vj{0)Yn%;
zC=+70!uIRrKD3+SV&{J#M1mt6h(S<pJe#EW;C+{o{~Gr9Udq{9M<vN3p#ik0yNh<P
zdficzKxvQ60NFFlT8lmXLspNA=1Kct)0?O;2QEe&EOpkhkrIx6`IGC8#*;(XH?}Wi
zft=3=D1RxrpegCsL@oX(MuyEf&pXIbnh2+2Ah*>k3+UPrMfmM09Hjc@0;`j4Ys8b*
z=i`rg^^59g_{S_J>oH)okc9FYaEt;U_#1AL(v|ZDDWyfrdqd+jlMlh>sOU2`V#)-6
z4?7a9`o}P=Gv}3p7_nIQksV&9PqC%Q<!a#q@P){b%PyHG9$^mqEE!2#RK3XRRl@!w
zb={$u1jz*moSXRs?>&9az>D8pvoxoi&O(EW(tUvyLHB2FK~b&Vtel$7_1m_zSwow#
zTWINa5Z}GRFd6ITbBWDs9GqKM0+}O$=DByRLV~wpM&B1z^h8a6D^s<;Mz0@lr)LDl
zzRw3&iUVD+G4?*BD15MpkzZ;pFc$&&mQ?fI^5<Cc81X@EdTM_G#8|Xw)WMaWj&|yO
z!!A~vl@-~pBrZ;rozfX^dbUC&+&@F$Bh>ENXn_K&z!%@Hbja`&+_)j&_k#n9H*^K$
zx^)?aSe;n3f7H492gl8A!72PNzJ4~49r~DbEUVx(7TL%AVRlwu?u!fTAg&SQLeac6
z`CT@S9>q1-Pw?VXevHye0?Iyxe%&)476sUmC$KCNU<nH=YO^VVe%at27lX65wHMdl
zg-$07%F4ZJ6lQEv8LTVx+5)_gYw*vq-tY5UA91zYT?;Hr6r+*a+F+soWlG=wc%F!;
zYAV+Bik8UzV}I^Zwzrm@-3Vx_8~c8NsD~VRxBqhO{w7-6<}Bj>aM;o_)Kmi_H{M(L
z8}-@?b6H7X+p|FDqk6>&|NfM`u0?7r)kOc5E0ddJUV>1)v<q`;L38gt))F(OaPkD|
zac&#nhF*J9(-+t&!&C2ZGerzpMh3_FRfZTN)Vh*v8ewj|p;+0VhKDw?l<vmAV9*ce
z`Cyf8IkZWlaT6KT_%j4mlzT~)U#ENS&p6Ir?26rz(wb6cT{Y5G3$WghQP<eGKKBae
zy1>O_OESppzyv$_o~Y!W!m6|yb$6=QBUJS5fQA=_JTq7f!blL`Num7}w`r%QseJmu
z&@kVGs@NLOO!?aTm+QM|3bvJuoa&X=4e^*3-j~;hD-vInTnfYdK6yP0xzMA%$by?X
z(VV`0ivDVM?FK`<xke&W^BL!i4K#C}E|D>W69-+pzK*3J=CV{_wqOx9RIO5SLrF$I
zF%xkYIF8B|8p-jirposkGiH}dO;fSH>IMjA9Fie?6x@uN3QRIfe!lUz09+87ib!_P
zOt)aj#j^pp&1Td7)t$BDUj^&wg{pB^3u38ktc)Oq?c}2z9booDIgo8Ik4oOi$|6V~
zAh#Tu&lgPz7_YxK>6AIda(aVV(j>|jP_O$6`bQP0i#dPVjv*?DK5zU_L>u@LH7k)j
zWzR`y_VGW~*19h-&V-w1HNg9s9WuV_Jl4^+UMN40R*!DgHPfuE-8|#}wI}P{5ZV1r
zd(Dol7Hj(Tq?qFM!Rdc6)O~#JB$CWh(SQt;Rmo^N@yAo#03Cms4f`MfgK6ud>328C
z+e;~kg1GlBb>3Tzp{NP#pT6Jt8mD6{2{zSewrMzu5xcu1oYEHqtEZxd?7i0^?8&d9
z6zq6#p%+p|hAsevxC8!1c?^;R4!&n-q!}n|y|f|>OM(rba;z5Hw0nDc;D(Rj(!CUN
zCJ;Wx#eU9ZQ*?q+!!=SjlBW~^z;mN=aEtLSGL6S30F-|i626q94fbzHyP<LCIv==%
zJJMDnW1?cFor4A7g565l{4J;`_q@ZIDTx!B_>r$G&18*PMP;1pOWlmTpQvqAMQ4<L
zE?}!zARKvQ(pfV#(pVV3LEq4wA=}pe#KNCVcCYwsznh&6(EsXsMOmX%kt>IFp_hUB
zn?wKjlB1*IEbhoBqx2HlFw81nXRrOii%=T}y!}0qA_OZNX(hLBU$78E#1qM7Ui~Y{
z#k7p1mSF}NCN;!4+>+=92Oq5W0ur_xM^#Z_j|@#d)WHN~p+&vv#Gr5e*&)jOjaJ(R
z10sk0`YeI2BdXK$T_lW201$~hJC~F}S@dxgi^&ohD7GhRg`%aL*Fz2rgwb6S2|Gw#
zIGn#r#Quzuz5kLXH6#M-&l7k5m^f=wnyk@F8BMu|H6>oFA^MDAqaEex3-{n`)zKg#
zBtEFPHZGNR!8vAdsi3(KHU=VzzBUntCp78~T7hnzeub6;G?Dvb6SKB94J(O{PgAk}
zGykhRCu9h=$;@I&NgyGjAUT!SGOjTS>)H*mR?)G<f}^3^n(+xcA7NKYmKAuV;ctw_
zR&t_5uHWwkr(z4Xl8^7oqCh0_OjMt-9ENh|o+52PIr!8t>+Fz81e_`H10yjc$Z$Vk
zUIpD~PYQ;Cy$D3gRr_p)-eO>7<fqna!xQwlMUEHgJN?dJx$T3#OdrHDa8Z-jgCM32
z)D{k_*W;qajZy(DJe61tZVcD{_>re#X`}|&MKa)mDJ)bg@OAI{ny9))sz8a<gNaCy
z91*D7%&Wj-%qoZx#1dAY)+>IAaLS$?6tr!nJuj%7UD(I6Hn`#jHuYv-IO}=;+JjI0
z#;$cX|Ht*gyI=!KO}0lt)h7cfAvAF%CH<aPgS_aQyYG&vRlZ+f;gfEA@Rqgtx}K(9
zPN8epWj|Ad)mv`XO1bu=Eq+YtGe-Bc6p@<xBnY2YjD#@w0iqB{RcNV#5g@;iCo6sk
zqeJPC8-<YJ{Jvxa_vnE1F@vb?J*)zGw*X<^n{~7q2r3a3&NTL;FiT{$VC<g2_DMIs
z5&doljJWvzNRa>+?-B+ho{5kfDnwfwG>2*v9PvV+^}2fKU1+!GlOU5T0z0d$X12Uc
z|2z?O;@lK0@ecOAS;j*E1*?a$x~X#Q_|R2lNG|3Wgm^bha6Lz+q_-_qbKLk&j~T=K
zC|$l&Svq~igz|_NT4!r18E!S8tbmr^3$KSzGV$zxsDiIZTR)ZZ=NTdX=Ra6%Zwm!4
z4;1pt{G%s9@-zF7{SOg0@iZGq44*~QKg*-cd?zs*6XB90{FA^Jx!gqmE#tvS(NGE7
zM2~q&C<QlPGR}lQ<+zB*^<GmJMn3eAkuo9I3-E|U7y0-#QW{n{M5Z<PyPw=YA(^+o
z+gLbU=W1!r@drO3q1;IY43Y-vQv-N_SE{_MWrb&{EcU@mtJ^@CJ0F%87F_rf75N-N
zz_Pv`9{%Cg;-+T6k4RfLPQo7I%7YRk+s36vdGzPM=!@BY_|3%=KQh*s<;%AyzmS!H
zdN0;%GL}TEjh@4x-*1i9*gV`snYZDi5Hwi)UY?;ERp`qoE1hH{qEE>trayRB%C>vU
zqlK<=!KByzR(ui^`M7keS_qw&M5#Yz9Ib#&<!M)=L$$!co10SdQ^2lLK(3$%Xd{Kk
zGrWR>mtITnCqBUIw#3@J15Nk^fqyt5_wmdIsLDY_o^)JtrxhQ|HA|0)SoYh$zRC9T
zD{NYqy2K*|Kk%c(EE#F40=V|kul5x<pDMdbD!n5fh9(u0VlN0}!FwKAO*Qjfny-}E
zKtD`Ww7jhe<J8K;DGE%U+`n*&k7f<R?=UuGU9+PVE85FEaRqX!%?capb77)-ee)YE
z%kAA7EnnJ|H=r8KSC4`JUHwQ$utO%=jG`*~=5)@)%-lPzJOOk)<#o9}SKq0epVe)}
zG$+Xh)JP5$T<oG@7g39qjE(ZL_WfSuQ)uro!@THT*AH{?WH|aaz^jnS2MM&tGQ0pq
zgfyiTBQn9hr&+?1VCjH<LmFq(<?HS#$^x2zf&4e`X==jQ5INw;KWjlF^H*79qnMjk
z95Fvdet(X)a(|=m!W>fUad<diX3a*8kgRLdbHKlP5V#T3@p+BC@0QF?{ymy~?u_7&
zIYg>5t4;gfXvjThZngMy5qZ}y%Dl4D^32l?t;YWIznqL^-<hf+9c+k<#Y}{@-#z^~
zVlu)IxZz_5l-hJVjGW;K@<)2Ux~IHGWkjf{X1Zr5swqcerWZ56|2&M*rEy*AF`Qa6
zL=bpI5%o0n)9D9wOrc~02}dP23yRrILpr%2aJ4aP<ZLlFa+*q>JaU`7v&Cs$I3J$n
zm1OocwXo#O^Qc|AJIByr8~{tQ+MJq|h=(u~r+-?FuF~t_kQDv4jbK9|g6fVbiav8?
z^{dg8TS-S}#s%G(c2exoX-?_Q4B6d3-|7N7fQ{HmYA^b93I0z3P(VQ@MHwW1_peOc
z=`t2$dF<UbdpDLU&2H*+qM|sU=|#fNY{z<fhQtu@W5Eo_9y7zT75>@_1$}ti4bM}O
zK{#l5udWXdd<b7Vwx9*$uM(@q%dNGSN%(HzgPmS7Kk&d?ckyZ39LI2>wBb5;?KbLB
zH3s-wy(AduPOqDc%~MZ_E{`nt(S+k^3869<?_v|FP#)vj3H7en5bPb6V|zzX!>!zI
zab*G;P5dRKjF9@%BQG$Bf_24PRJ*T}pu()B!(Z^&`RTulf=-3~*JEJACeaNb^xdou
zAfC0pbExukVLI=8P%1Ca`Vi#8DcW^acQd-r3yHs^vzUf6yA>H7_ALcOHw7LBVwC=_
zk~&O6q0EAgkmJBh>;oLQ4Cb9n%lT8*UC|mi?xfdLqeb)_$B#bd#dhg9y%o2WF#F85
z>A1YZx2iE22^JrID0mYgelu=Esd#kMC9+FsXe@0uw!fo>&h376*6lQ)yCtp1+j?~^
zcPh>Oz0im#`nmUv0t%N+%$=QIP!2%VFE=~l|5G@Mu3yzT1O*EPsCyknh&yd{4;$?~
zbF#oH6{|HP!gCdvv393s>poj}+3fUzh{*>sd05JsSkj3UuH<fF?+o~W%ea*DqlsIx
zKgKFwQ55fM*@47Pnv0rxWbxD7uHAo@U#$w+Ji~MOA@$xYLc0zk_~`ZF*nxl;a<#$@
zGZ3ZgUuE4f9!kZ~#Smcep6#Mx2b_20Lb{%7gXMA`z3M;(QzbS<zGWnDh1(VG2b<Tv
z^3Lb9@->lv`mevwZe+Tl$$|I(pV)i<fF#X65Us(P0deT>Mox?DyHq+xH&0&|>=|5n
zTV{y^8c%=9^bc!_z#kQ=V#zg<bF*q(nv5BqKlg%3N1XlExUNHT!%V%K8vo7-c>g&2
zq7k6y{^yvWNJIpUca;h*K;dB#aWg6?65H~NVa&sdjC|y5U&+uk%aCzum4^4)Tn|F)
z|5bOTUrirT6a>N!3K+q#c}SrM3Q}2=C5TuAL|GaNRSc9Q?5JoUBoHuAr7A+es%5VM
zf}jD>Bti^$%qb9LsRR)cMXR!zpp`{P;Ac9~(?6o~X=XmnnKyIan>+8^r-9>XmQMiU
zjW;SC#w5W9i(#=e{DjCOc<d%4>S<){&B_;6_F_-eQT`_c;jU+QcjU{Nb}MkMfX*lQ
z9)ng_jNp6AaDq8q{*pAW>QRr?<FY3KMWQit6LidG`VzLYV}VG?ndi6pP)yoWcig58
z{0Nj_8Q9s5eTMGe+~~tBEQQx@8I>P&xYl*;2|1nhSf5Z2F-w<C#{%vS#Td$Ng%HQJ
zi_*lg+VMJjg6$GoMkBMTPWbA$IyUbZujZ+GE)GAMTnEt`8C`ZS`!GQs@9$dCc{7ij
zZl|cDdZN&7S;v`T9;a_^kpONsMEsz1Nx(nzEPtQXt1>kxJMUA)U?>u=-cmT-Mdmi8
z2Q^8|T+~|PGD-J4GVD>EpLeG+W2j-IOZh86e<7OSyTEZBTetbcFsLak<zfGPbitN}
zEOh+&fzJAk73Y3~?!T_<97e~PSTl0GD#(r_h@T_qIV`iO7U!X!!mTFDmeOJ7!$~Q6
zyf!ASahcVe-dJi^Ix{EoC_taF&y?WhN0P6vAJP^BkHU4Ae7aqf^FlTk0KjR|{L5Wl
z*YtLyIXF}Ik=`ZNR6)~vm!XedF>ATmmD8>Rb;*nfq+~`w%Q>C1%e!+yb=({UbKo17
zB3nYAZZ_#dG#S(-+U7r3-6@MWrUKFqW?5H4yR2yHOs$RQPz|u~{)ri9>M6DXJ;wqj
z+kUBi(;gihS55dD?k8{ij=P~;R@|J-u0$pYy%0>iK*!g!XaD@zpcLaK`1EqS2q@yS
z#NsqhO#6FpGC1w4;s31}<tI1I9zuvm8wI~c6ucdE#|!R&BJyM1nsKtu>itg#8VSW=
zYu{Sn>_%)HO6n`$1pM9Ck2A&h`ajF_rTX9s^mBun#2cFNL+|pb8xt8Z(=!aD`V~91
zzH;;SGg{FuFzcyD8b2%-s%P6?l$^}pM9IEwUkT}mH5f^I2ZXF`d!3^$kNe8RXcuU%
zaRLbCuu&LSF*n4MtV?&Y1HsDDo8Sy3ColiV_BkAxn$X%P@Gz@4#FzpmE2<`Sz16sH
zn9f!ST6A-6>Bs+MJzCp9KXaw#Y#7B0gQz}tDigK<(&u5l(SD`~J=JCyso2MUnPyaH
z-de-IAvzn~p?PtuqDyFgRUGO@MvEN}o&-3;-)&YONcGmrcx!nGm_7pC4jB`;Pzr&Y
z#YkUi;dFIPzFGlf(KRKzHrp%y?7_mkO~~Iz%DB$3vl@K0%0bSHvJwJ6hiKPJiY!A<
z*TPky<m2uk`>W;7<l1mfw}}l&+R&S%VyoCiYm0raa#h4SAY{8zb|3IS1%J;sfhASw
zMW>Yp=}40F|7>-0mN9T#NLOFVJH|S?Myz@%BPk=f2erzWhHhmj4U=pQ_lJSEAPE+*
z6DR2DEyKS#D#R|`akN0`r`249TT2wd<(5pnCM{7yn6;OICBmYhYR#zhpHN#D|K&mU
z4op+r1sde^?Br^Ot}*gMNCjtLN-|qa0Xt9m@*<}^a42~W!QlGDid)msq@}2l%SZ46
zxlFyML={_t45U0rE4MMj_5xPZDDkfm`j)o*`pFa#zU7x`%X?GH@C)vU>zETF84qOK
zN-|wiVuy0`6c$4aC2*~gzuLHlsGgUgc4?Eh->Notq#!gv$WANPFVxt!%8@bi7FPg6
z2N4yZTr|LnNnr_gZKnm80R!c3D1qdE(am?_epG0-#TV*?Ni=yXpamW{?9cRzrTz=x
CI|7CP

literal 121756
zcmeFYWm{Wa)GdqzcXy}I;#S<fxVvj{w<5vaDFq4?EAGWLI20}J?ykj2PVPSM^ZtbM
z>8$I@&d!(Yy~Y}It|?>1sHw<dppv4(z`$U9l9$$ifq{eG!oeUTLci{O=bm9;VPHN<
zOKAD7oW1#ES|96gph154MC97*p4BAI&WZ>ek|gk?%95aj!}KGE;1CBS!jqHbg^5K?
z4S%zGGFr;qf>%L8I<piFMI^JtrbeU3z#aAb`H3`vr`}_qLdSRW@Wry4qN23FX3lv1
zZDVm>S66pYrE<YQwf*u17VH0w|LX`ODF;7FZEa5xU?nMHo?wMUfy({k-7%4cwSJ%t
zkAiFoD0O_Xu0;Rx;bSGmowo<6`mu^JV2S#s!3f`sSnhkh!s>2--@MN8V3NiTAKsEb
zga)wp?8^FW4TR{b(u5S=7Yf)i@NP2-zq)l~CKk(A3H})MNCIa+O;cV|-fo3uO1NLa
zBJHHX<-zzG!Ewk~1C_RL{M#LY5b%owE7=*3Y^@Gs8eB_US?C6)4X!pp3Io$(Fg&M&
zXu8!r<oEK0N$Hya$<tTkH(!x;y64&gI<duNQwaK$c_fvKY|zx9Xb}60xC8K&M64y}
zTF&aH;b7Kg9Lcel)mORryDZcDAJ$<>VzX1fWhrZIMe?i$7X6;w@YEg}qgjX;3ysy%
zYf0(aDuQ&R+iB;ASDc)>uKL)$Ccom3Pl}dci3Ozfz2tz>p8-9)g%ww(lvfXDey(yQ
zzbBA=Le~;UU|ko>zUK}Bns!9#_Nza=BoPA6`B1I)G(X99ZI2!URTct9f9zg!Jx_oh
zfbNrvVp7RC0&-hMs@MiEhs3N;g148_3%;F`Kio$~K5Z_~)+oM%HABM<zL8g~JNYXU
zy3?)`$5gf=^XDDMCib?v_Jb3LY3%OR^f2X1ahs;;Rxi>f9zI2AR4x_SBcR7}6(KM<
z>ii0*bndqmOniakRjYmn3%?kX8B-Wb^v41&A2q)V%@C<2XPc~y(?KMGx8;WFFT<B_
z!(%HhBMz9tv~)U?tM8+8i~H*~09!f3s=SYn>Qh3?Tf1_iE-goyzuT!Ub-el;TSsN$
zgHeg;EMlc4ex7COS4|wm1CroOL${`?noNBUvP^@VAGN8z92IPBNA)toi^5(l$w~li
z4z!h-zT{Q-Gt*+h@sXjN(88U(zkoeK<cqo)y@UjoWS2QAubNurIz1$4sggNC;l#G0
zxb$nJZvN2>iI$M&<>w{-=$D2e3YJV#;B7h)8_QxN6TX}Rn>3ce#QK>&xy#b?$ihj(
zX;DmCJ0;gvp3n_l4b!Gii9YR#nNrfjQz26ZJ(}mCL%|BW<(;Jhyd59E3>7ogO6~jO
zY_M3|)7iY=5@OEZUmvLIu8cSEgDyNHj3{jD0B$gMZVM_uYpWO>E-~Ic9-Q_I+?Bb*
zUr=0YlE~X#ElafuV)uo>zp1|31Eb?TCJdRm&z~;!DDEWY)zMGq(^&(!g(r;tw{X}T
zSAh+yrH9=GHH=sBgpVz5tESDa-d%~_ug$p+E|6x(N_0gL^l=&t0PCop@G_=~Cp0tB
zGjdRyi|K7qlJHG;rxHTwYy!PV0NhsnL66wn&gShXSx=W@{42GE^LrbA!Z`tKU7bf8
z5x(gRUDaP9J!1BMc}_Y5i{@tuCten{|GMx*=hjvL)54N-F8v@3J_=TN1cY?AT1%v%
zd+okVZvj2!v3TlqxTGn>BkJ?R();EFZ`Gwgo(CC6^U|XzzbpyAUJ2z=Vf{xt;}A%J
z*_SB~7mg!H$rS~zbb4Wz%b0$5CfAjV`^(&a0A8U4tHMm)2Wo3q;h;#<axx6G@kl%c
zzlZF{lmf5&t4OgPrJ+bu79oJMonuRhhJvK$UK^2HXiCcN)rB$-U1VN7J0@QiXGPZ~
zb0G}PZ|seez#@rwuco)IaTl`jmqi@H$va=Kin3^cgxUvLKr5DzEl?!Z<gt2~(x3lt
z4D|8BDsfSv8Aw53AI@!7nWjtpW8Ifu%X=U5V4#!u?<JS?;5bGA_&LZ!nX%EtRTChF
zK6ZrO7GPHfa#j1G-y<M+?Att6upz}`n4y}?{K}4?P#PkTd$pA4`;`ya3rzOz)h`#K
zbMo5KTeeq7{p$2i-Ag$H;<=cwtsNf&XDL}V(GC4e5rO7M)5pGAo2wr;-3QuG%CyF>
zz6p76-trRMdYq!X5~<FEru{$}PfnZvuDRovl2=*_IImL`tsjQqhomLUXseXP=w!j$
zc&e{!QLvN&S0dYVNu5*A_0V~?=B&JFc3iX#65o2z-ZamY%zk6Iv0)8a{{I)E*#(Y6
z9-uZ&9Sx72a{zjm^#c0gdqC8EFboHM8OI86d3gt88NwwW6Hr^)Vty^1bF-?Lwbd&G
z;y(Rk8gLs_d%HP#3y#w`1T8y3a1!$bgQ?3%9U8Qf^AtUvo@{?S*~WE~ZQ%tgcARX!
z#QMbCh+2+&o!n4XiV;8lb(}bRmK=NK6})`l5@WyZAh!-WOe%G6W|mo?c$~WT)pjf(
zEi-p|#xDfk{$>PTNd3=W9X*N?_s~6!kLUV-Obn73=&Y>UZuY}@#93HMeE5%EP+PzY
zjuU}>PgPW5pAaKC5bOa;J@9~BW!VOK;fP`fXP`d=g5$nzU&dAkJOo8iL)4Y(h%%PB
zj>s0K6Cb!h=RB9Da@eWL@*8aMS(|=j>AqQ1hTNB?r(UyUXmbf(zco45Fnp7)6+)`h
z3;Z0JDAD7#AZGkcFB_&@7GS;bu9IKCPKbbOBErJLk@pE<nQP4+I3Bs2+f<vrZ<}w$
zNK^r;$d?|2o0Q$~uId1Y+|5C^P)!04_+!cztXEr_Hp=44>NOE)5{Q?1U~&kO5rib*
zf;%TS@xV(<UUZf7aG}@$uU(^?!|1o`VJgVs=6jUTwj@p{b2nHZT@T%wTHu7}ES(7t
ziN4vqJ45b{jib)ZvDape10T-G7xv(B7iPJ4hCG*`0IMJ}j8~|OsrZg0@zHZ~GUfpI
zc3m2D0YAvU)umA1yaX=>x5PHAzHKhlba?SVI_^TJRC(a-b@gxs9mM5@xOfKHdN{e?
zsKMu_wUCZW)>fE8cp?d`P1vnI#a9N*H9-QaCLl9|Z)y9Q2LJQO3KOvQ_CXMWR&cxd
zetYWlwWa19v@AV;TX1XYzX~~9C(_0yLi|hZa}3l{hAgD1f^V(a3GPsOnvuam-fLaM
zG6xR>;SUvK+|+`W+;;&Zue{`s?08w5G6I(%BdZ{y?f+&f3t>6schUacS4XLz5iprK
zX-MUNmT{m^p05gbMF%q}wtQ(W)bNt%Z;T%xF|cM>_Zk%jih_<|o4E>F+<iZ0KHQB{
zqqo^b;|K1CKA~z|<VVaNzoB)U0GjOOz~L^Y=_u)Ot?ga*-mKNqjE+f&1^ufr<^QhJ
z=_}vHJyn-Oc?B=>j=1(=!Wd}xRP}9k$}b}L5+-MO6oR&VSJQFH916M%1BvlcLWiL;
z=GUH;IaH<c7*Wr4FW}{d9HpP>g%B*1BPKlHS^vu?6b^`Fe)$P`^m6;?CKNe^L(ufU
z8_s_~vTnP)9iE>IGf$GlB+%Xt6?fxp;lVU_o{M$8Tu|ZRy)kMl+Uc3=d0c_W|JO;~
z|8rH}j$iqd9#^{sflKj)g90f_?;q)5pbJ0K3>m)=x)=mN+RL8j{S-~1QEL(!X<vN%
zTnxv4=%W<hiyL%8bqE?D%5AKa571`;Lr{QF%3AL={i7^U2oFkJphrvvov4Z4I!c`k
zV~-*r5Xmep6e99aF+i2d^*C0s#qRL=W$c)e(|zm66hM1wa42-6+z44K>OPzWPBw^w
zt@$VfhCOmmGk*(+j<v01xF<fif2U?3^L^D1x^U!EC)xIzBn(%1VHeO<`_>>9w0C>2
zH0(HctFthFZ@S4zw%=(y><1chxY}Q2J#BSf@UE_{J_kk)j~Pt8cp33kQd-2@p8&FE
z@^1>DEQV~rUp8W0Co|f<VD>yOKJj|5^BQud*T!V#9)5lHE6QV~d;Ra4^Wu_ub(j#;
zJbGkXlnxoRylY52J>WU4-f=Xm2&s6}!7lL;dp;7&eK-vdgsV&3EmR_Jb>bSSpu**R
zs4+bRU0YK@u`)&hp4z>*@Ib@Le+1$U)Y|a^uLfWFT-<(2o?*<#<<9`tEF>=mZlhhE
ze}$Y9AwS{ty!YjRQBNC$s3`f?R!nqFZua;0?^;}=$lp+xZLFHqLrA5m_PW5}K+?xB
zcf@MQ+>ee;2c_3VG#6mZq_9|e$|{&FJI~qk;y>(@xNePiU+=6hfex*>4%vCX?%Tx3
za$k}-#@4T1?;N#{Rt~OhMUk3ebtQTIFQ$+W&lg<ZE%<EwIBrk**!X4*=>CJem{8Sn
z&hFsyGS=3HNo$d#*zlgT!{N(G(9`Sh2jJd+A*$%h8C?*5FcqvT@66`iMF&t^>9MY2
z!nAu*ck;3mNZ|xYn0#q-^aPXTKKSQC5J=J;Q=r@XEqF{03f7?LDeCK~IzM$5r`w+6
zOTqAu*X2#WqXH}dme^T3>?2N3xo=WP)cU}gh%QZUZAHa%^M5uyJZQ9OU-q3@<7wWo
zHgHNCOYBwUfpTMa_lGKsiijp9p6^Jec#zb9Qiz9p$;K?{3fQqM@Jq?!^4a}ySy604
zqw3UOqr;9s!9pW<fZtmC-nZ-(Q3`c70Sh4$UMbo(f}+$0BcE(RCVkCS;9F6urjX7r
zS--XCRj^~-Ij~(*k9Y1~>~z<fBG1qDb+FuPC|q-4Y18+pAZpxFm?6LWCE*Z;Bl87P
zkh^01B7-L_mj4~A3Cve<yBT>4Mk~BUs=XC^=!Engy<Q7KQfh?Sf`!wae%@w4Jt);R
zciuf8?NFOAR{u~4UDWU}mB5n=<cP)@lXBPmF9po&8WrX5(ucJ-8_PaWF`L-L+J7|Z
z4~x?!!8Ta^9hU#x;@o*b)qQQgVMnzCAL0`D0*E&5a9&Nx8r4O}LYSAZ*z*GW=0e`p
z-e#OT#+?28aX?J>;RG&busm?c{&bQtuc~FM>x;k(ywL$ga1_8bD+W@W>6)>VBgXKb
zW6Q8;VjgOni;y@!2_6-TcxW42rxNenyS$*n#uJG@5U4x=uUgkn*^HGmpIYQqH-1|G
z&g5;ZUFNu*N(x%C#hWy29>85@zt>M%a~WevsYcnM_F3l>0YAP#?r21@g#)tKFxrjq
zU|_AFc?CwoEqmMu&76Jx#v;^1%0g+Q9<%u5l0FH{PEhEagwQ_x6*Cotc*QFKv~sx_
z2<Jp+olcBZf#1@{yzpJKnmeetf<4^s8-@V71q%ed|KQr4VE~Zs8rdtWfdoxvKxmg9
zSR!|I*Ay^pME!XW$KxCRHBu9c3L<6t#wI35&5#I&*Xq*1_GwFR*cI?El=W<{syl1$
z4)#Oy`l-R$ds8g+zqE|6#>veP1{b>Z!e+>_T)=x`Mu1M=g;SE~v+9p8SWK5vIhQa-
zGroB+vAY>EO2{Yk*ibATP|hhc#HqyHqERfeBSGj#FTSOZI4~K4*H}VbhutmFC>w>}
zSNkp=aJirLZ!L1G`JM$@%tsM8p0{7g-s<$(;<D}U=r)c@*$Kklb4jO2w1iAg2~dFd
zB#GbZs^f!XvtIHpyZ|UUicZ)%o9?$0mwsr%0n2{yBi8r&5e_vmCAuZuv_nQwg6C7<
z7WqSvdf(>rN+~qpHD(ip#HC#M_#M6S1!{5ic@YttgJL)tS#|)qoSno!t=bl!Orb=2
zMg|@V>f#%j(blv1Gfk+hf$wH#m-nTSc{0eZUA|bK7&9Q(J`9LKH=6A_*B-5`EUH6-
z2a3J!4or?f$5^Rm9sCtAhj9hS-_q%%FW)<me5w;|<B)Rah6eB*T9^n(bD#J~uyvV{
z4YsO|3$#)sd~uXn1s25x%G%{Qw+xE@I*tomm<O+Yy+1~d^OJQP9`jz0soRD+7kzoJ
zXI+ha95SX`*p`iyo1~yq_NyOaubj@lJ!%3rneky@elx?yx5Z99+wj{UJffEz%?rj;
z<FkgyTx185Ym~z8<*i$nrXCZUWy0f&f8F&7t=RHTAc5?)U~6uhMW|DAF)LalWW5*g
zSv6g{8x(c0&-;-_-F&dz;5dEu%+eX^B@#4o8`Qkr39J@QpA|D{dVFY<ox4qLftX2S
z`*1QGQUI-~CQIV?fBl9!fySk%3DYw=x+_#({|yk%kJw&fTMweh`LP-_Gq%$cD0jog
zve8Ul*N>PweEPKckhV+!5A=&0(^lT5>G?(bolBd%Y}?inh2JYbUp=_AAB$Y~3-7T-
zu?4p|RzU96{<0rdfcYu|+hgLF8=6(+{HDm9@)Ex%)OxVDk32u5y66*h+&4p@1fcU)
zl|8enYI<?MP>*q(EVEK}f?&ieOg;*hk~8Aq7f_=8t#RLCQna*{cRs9p!XXu+#WY@}
zJ^^SkcbWHQK|SV>{ZqX5S@hyF)NkhOc2fN9=G^h}h`hC%m3#NA;I?}YPOBCRIfz)A
zJ&LWzIvFOQ=Xxuw;5~3r7Xr15(#Ys*wa>V&6BsxepTxQ65Y&|0z|AQ3Y=t<n4~VVk
zD#+TElgFyC_(m{!Fh+ar!09ZPMk;(1XYpKGTMMwMf*^1?QV<A@RKl6=C68XG*3DZz
zJ;D7+x~$)yxoLTdGAo_OB@D2M<2j=>YdU<s+ZdI)Axd6CE!|jD5UAfU39KHjx<VM4
z%RDjWTfYPI;Tr`jt`cqCP{T4okSqWaeA%7%H@tHUTsCs_u+_O&eD*J%cg<qZjlZ@n
z@Jq;qJ#SN>pv4W3ByB@bVFd|i?-EPl38EY;9iFzFm<?^87Ml_;_dTToY%c(VgFxPF
zD#4P6(USC2qe|h4pcnX;PT@)P;zZ=XIBS9bWQk+jrHih69#UDsWD(CFRB{9-d?o}#
zbZP6qbg}05Fi%~(2yTX28QW>|!xp0NH_Xz}ck35~ALIjPy$aeami?`x%GXJBNU=ZS
z;92Hcy7QXZfN<FbhE7C$#Kn+X!+!@4wMh>GYC%s252hGcs}G%rB14QYL===fFl^|X
ztP)!AO*w;!_NSiU|AHB<|8*6ICmW8{lR*BxVTlO)xqKVaxlqBTI@x#eNVk8u-)~MO
zO`7t`90G?db&eoQnw)dE{TM!^KMSyVLr|Hv)XM1B0(>Z1)~tn@oHJx6ZCCT0N^iv&
zw^i8y+b(JJskDV=VfhCA*UrI7foC%bY1_qyN5U2lmmttW{e|3In`Q+>x$#rF@<#ke
zi>*z;?78ZCX_HNpJG9Q+i_Ybjnssj<Cqn`>M1M2%6bG{z;&W8L)B-<rQX*J&O=Q7%
zK8r$5DV-)3>)fCjGo6V)vg;}>5#L6jsk&5*8aA?jHHRiz8<@cO4>q25+<;tzg?(nV
z>t!}+z||tto{m6g4fPP|d7zw#i=6PKb&(-~9M9u+!0L<huXn%hxaoI|DnegJ-X0)*
zV*Yz6dB=pQJ&IG5{GFb~K&;i8cD`toTAhim^V(r+^x{$aUW<gzbhEPQGS%rEa@$V9
zNvonytbqA<-&Ps<>wR<f@r>;;ZAylY5*f)GnE5Ni?w@1=m{~SJbw#kdagkwsduOc-
zgYBreTCj!;FodgaMs6PIr!KjB%v0ms3-~%KL=es^{tl5k`wJztwlCJjw}@L|&~4B4
z>Z)H4YC}pbB8*s{sAG2!cM}s>%Sm#tTC)777o{FMmIz;}N?(3WzvCmTe$~&I>XRjW
ziN6;j{=7iPExTrCK}5rqM!p8bd+}NC`;oP-G-p4D?>%R>iMa%t<sz&~&Po&Rcooij
zTJZ?DZjj@@KI59@{-_eq>cMiJ&opvO4EQyjICcPaqNi@`Z^oDaNjf~|KusbhICYFr
z+3Q(2S`yweiwc3-fESjew==kg**;Y7BVyB|LD6_<jw2cusJAH#N?>ag-1YMLuAa3c
z4M%fGvlSLZwl(-S%k$t__oLTu(RZ{RV@AgRDhXqBu<zBp8ZskDQxVA5{D~Hg|B_au
zf4U*x8R68?BrUMy)wxgl(2({m#vm$Yh4wm;m)vvw5QXaPPulC$W<V^S2Zfbs585>9
zu;F?JBP@{w9Q8hjWoJoeFY2O_K+v7(UbrTWk`e4KU*Rt-{+K=X(Ci*h!z%LHo9?LY
zp_G8E+F^x`qW!}Ml%C>DnBa;O`MG^L4I<-*y)>ZDlLk3_rlRL5)vr|00&xRb&S~jg
zM#AJjv*1HHg1Rz+OF`gd*rXT-O_QV8h2D5()=o$V@N2e90Fp(?=XV0jt?$IB>G?=k
zTB62{N$S;5+(_|sq%tRe598ffWtCsE0k><7C&Zqrk$n4wyk~{sT3Q&}{Ok*<Uab{9
z!H#-|K!d-n$g%F0GIll6Ykzg5gz*a9FqrVl;$gLunTU}P-D5tVDf|BQnKDa^B#*Zu
zW4&*~hQ1QCy5WEfv=wkkC^N7PJ-M*|+C{ik5XB~9+jBMJ3?Wl%u?Mr0ZN#x1reC#m
zR{)E`LATm}Ym1(jIZ%!)7+-VWe9Y)+4K@_p|5!uDC)V7?unJ3tcHAZP(2y|^UD5Vl
zXtDr!{W0X<h{DgJ&AG~P_-Kvjg6)Ix;tZV|EPcjR!J7})S$u(Un}LwUOhJtzQRaXk
zzmy-KgDa(gS)q5odT+ZuMO;xkPWnQMgV%KpodYW^awV8>q<4`m%d|pTbI94~wgGz{
zo!4>>0VhD@`CX2W2)9lu+^8wHN{<~d+7Ovfk7UIsrf-k#=w>%YY|EVDuE$LfDi2NF
zF1t|SH==w?>%Z*(6-9fBf4~r1^z9q(-I6R`0^hZ4T(PxhCGQDr>jk%c+JgNflB^r?
z8TI}wEc;$c6l0hHfQN8)2GAmPYD|@)`01<$zu+x!Rgt^))O;#%U)(>}oj#j`>ifHd
zUw35JGn)aX>j5wFs)FAvK;VEvEVp6z89=06un;~<K-~}>Ph*vjwxxs3oj6v&mCnIU
za=j0kHgCtd3T<!bu26+xy8ws-U<tH*Ox^agA#ZuFzfI5aErTDP0KrZUZ!ej=Cqkxn
z^pBh3FY}OynWtJWjEjSR$%<3ut!<hYxU1Y7p`jJ6<L8?9-|V*MKRz?gjCw_YiR2?n
z3Dfe=QgtEJc(GZ4^5DqO7z7NnHaLa~j&+RaQ;J3lPMpt<$U`T4S${GU+RoY6<lP-Z
zUdI@hx%Kz?6&PEHNxa@}Wr<$mMVV59ENIs@!;R%EO<st;3V}M5**GPNLg()3wh5xo
z07GgT`4}s3<<ty)UhQWc-I6nrbifPZY)t;tL#e~x)`ie)D=v_?^c?bQ5l787wDs8i
zrJ!gSa<_^l;^}d<WQkR&3e)_~8}X{jA^sflN$Cpaq>9=mkhlEMZiC&S$$K5$6ryh9
z>d*<(va)D8395yZOw=qw3yF$1+9xl?Dy@x3#?5PP6RXQDmlEGPP^1yFkjpw(dW>T+
z0M(Kl%p=m%?J8WEm*UJHe$?nhsZ;^xvQ)?=yby@s>+{o@aQW28s8e>ow`|B~zN>nD
zYB1s!`E7xIo7?G$#^G393;Dd5@Iekwg1Ym|kn4PXvZ0Cj(<CS*RTnPQhN4<o;@qC2
zL!wlC2#4z{n<P<V96%GB*vP)^xSN5|^rY@?Feip05kZ~HFo*R(sj=eY(o4-#`!a{>
ze!$Cf!*Ms5ZW*mMth6u|BXp@uF^Nh9oPu?^=BIge){w-X2ji$1V7OhMFWCIpKx>1=
zpPq3HnQEDyDvSJ(ZF@&|YA;}tC@V(xQAuBJ)s)xVk>l=C%|2YQ!%gu+i^<#i+3E|E
z&J18DIG;q#KY^xI>Nn?7iCUXRX6DDaA#`Hb55$%G3F1rKuu%-*L^Hu(TKcSh<j(^z
z;D2g_)WwG5sP*a(hb$V&dG!6dvz>CAc;p|3A2#AMC2}y9)xwXz@lDzBDeKXrFcHJ^
z*m4bXa0$J9Lc+8o{W&dOfiqVdX~s^gNv)ax5j#pAZA3gn0v$I##I4M0?f&G`fr-KP
zUWU-Pia;Y9i}x`ZgYk;2*sn?TLD>~>HV2b_hJ<!KS&x9OkhjINnDEOP$UO+q<DClu
zsg^z@T@vhd<=5kb+?Lf=fn!jTuH1+Kp}B`3lYm%UU@HuiZUryDFnMpw)-!_bId4r*
z++XH5$9@FX7N*l<BWAiu{neHX=tyO59FDk_a_z@lQdj3HYSjJOSj=Bp7J*Hp-s&Km
z32n1Z(0;cY&s6-wF9!!dPfRba6rah&tLeSzB_dQ)R`)ofNgjRLN&hWk?%TF*^XK|0
z604xM9@Bust)JWA9*(~n5v!Z;J9jUI`rKs5yh3C1|Gr@x$8e}4LQtfY+%P{Q{e<`I
zp+M4<=|dz&tLb;Db;3TN=>B`?RMPQnIkztU&xEeu7#*4YOP*zYlH)Kmk^21N(rb}7
zp(p=t-%&38TI8kXRaGvj+x}Q%2NsaA@(S8mdXeRv?&viT2z#rA=7sU$VzsxXGLLDQ
zzJ6FN2Wwv@9ymG<wW~bw=+To)3fw_zZHm9~zYRwmS7Km|BQKH^AapM2d^^C;CX&>b
zKn_MXSC7zDl~7YR@zfqlOaAV(8;Twy$rF!_^73ksVOZka`8{`0=Q!Y19di&vWx%!5
zlCx6pCcE~Q=qLJfB?#02>!Tg+pn}{$dQ$>o5q`uYBt`v8s)0~_5jvXQL*GX~imoOj
z{b82oSr|sJ%n*(nWf~B^bt6*~7~%d_?M3*bd1SVZog+R0g;#53x!jU-68E6x!}ewB
z{8Q4G>bT$)>N4$-2B_U!GpZUX2nTOzWJ7d^Yabm#I3KX~fEfjo!2WQtNulk_(4*IV
z=%y`a<nFOxFYt3^1uJe;Sr^FYe=j0lnN1xcaS}Q7Cb@6&jz}*Hx2Bb_+cxT#E<xN4
zMr9{QsTGPIg(H|-oQ1<S!hn8l8sBlx_xFOGmBL^Xb)8xQ4qnk`_3iJZynH-Z6c&fd
z7%O>S;w$?F*<*Hn7cJC0=N$uf1tGJ!PV=#@GOSxQ96R5wmog&O?iIFQz`RCpW{KQ5
zGi8$R!cQn0-LX?Xnc-$iSOt_BV2$#%pf?8NPXoNrkO`t0lBtJmNQ5vW)?V&Ed7I!A
z48xs7(b)(l<`T%U{*p(|!l@F<<(wWu1`<ggina5>uIe3%JvY@bu_0R&eJ2<B@~R4X
z{Ku4qSBT~IQs&z*?HTI{CY^)rcNbbq?*Z>uS!7^U+*M0`g8S)e92=BxV++l1&<Zvg
zjh`X+_N9>^Bw67U)w9>_Jl(}=GrhKWT^ZXlxuW16wQL=W@Uv=vZ)Jp!O25^y1-O$b
z&oF$FYp>?d;BL=XgCII=;!M14wfQ<w2|e6!lf*1jy_3XVJ}%LZ&$#f)16pob8XY^>
zLKmOw?rcr>n5wy{kjR~hPGBgq%D&utd|nD~Q4d*`Z^i8|_~z~<v=dv8>eJ11a4tsT
zF(viwxr#2yA=3td38T>)rm(Are?-L$iFTG4@2d%7mo9SLk7!RE4Qe@~$Q8?IL)pR)
zN`ZXe5Q)vFs$p9|A9iB1$uTBk4kSbINahE5ClW0Md3Y+4V^akLxXoQL!a=NdFJoUS
zz|$zeY@h1d+7r_kPEG0fGLPv5KG3t6=*@_KH5F{#+X2L~qc#&|unViK^OfZa+KO4d
zhqhua-4~uRG{o@Kj>&r_Kj>2V21`Y4j41Ghy%%SS99>rf_Lw6GYDQMp;&j`ReqS(C
z=NP3k_H{FHBhj0;K*=W@_-GmH{pEA))gq^>GD3-cGIpJ0nyfwNGMpA%H0>YcVhwLN
zbT-Y34y?M{W~Ou1fSA*;Pb-$NQ*0%f1txD_yuczBo4yFn<=RUi$4rB|afKe`#lg-C
ze~XP9kXGv(1<nLBIWOvTy`V;=lr@qTW^fi$D&aE5c(4+7CbrK>w-vNS`L$6VW+1eE
zhhj-aK8f}_tvbbyTMkb$ztu_p{)(>9g>RSZt<$%4Au}cP>CO<#KC68C`WbDHA?`1y
z(G}2A{K3Q8l)e|s!~{sleXprnF#-wONZ}R|bMT{MAQNP;HZ$OemJ1O;1{xOKiY<B=
zBj<{(s{BuC>j^&m@_OtEj*X_dxS-3{#JuQAJFW2-I#)pqp>7I3q3C;b5SRL_N{VTW
zw#i)_zbyGjhkG<lAi##?hF7nWpEZXICZ4d@R9&rrsqW{W=!ifXp2}qE#-?7qmbiMw
z&#aNulJtn0Ru~rOY(z{QwdTVV$~u%!xVnmI5#P6;ioc5MDaVpMwUcRqUn*gJeBeuj
zU>DaJI<NgLyC2vWefv8kG1u7Vypd~g3lb2ycoVfsQhfQOBZjCLMk|201tHk9_P)#B
zVjouNU_8aiW2NdMm|!9TC}-&8d81khsQcA>Bhm&ml^JSXTqhhD+AceWS|60XhJ37q
zZzIAvxLI@~jI2FPA!AT$zF9Jd7J$@~^pBCucJw^n-k_1xUK<om*BCumDm<9DH5>&q
zt=rd`HIJ=c>()^s>Wec5A-iSJu8wo-#mf=BU%_n>#<g<f^`idVdpkO-DVkv)WeIK~
zcg}Er1C^%$T6!lLW0Kb~?-r)L3S#DHRDnNDl9|0kx?7`aOLpiT-xCiTf_KTybPw(H
zGNX=Rl;E3W%ybFpIhKsdH?O`pLl|k2-ijc79iFiljtT4(r`WMI4z(3<O?s`OXqmC@
zK}UzSZQzdtWwQC9O#&8h^gPihy>sIBT>@-7;xc2+VB8AA6il^#b=Z@)?<2&6ZRqoU
z(kg{k(FfEu0gMJiu`naOY!cpZH{{dU(RBmjfJy2$OZ$bZd#YO8YR{*62sQ_=&L4Eu
z4*h9Mf8&T)ZrsRkcPd+W!-;{$uWZ3iVfw6mWL<ryuU(Un)aj>;vEf21q$juGvw^0y
zFa1KtCCyu9+UV)0`A=WaXntb!Z&Z?Rw#{<b8P_-JkP~Q&W}{8D;7{}j_LdjgW0zW=
zb|AkNCc_#dsh6;LZ)p;2J0;NaTx2zN@(^*dM`arL;gV6weNUf}P)!l<2_f#a5opRb
z?Vo^TV0S-2_T{qZ8%7sZy*VvhZPESN#cVWWe`hTvQ+;aPe;H~8dnNxc8i-f6v<TzG
zG=eKHlz=Ho$b^}Pp_hJ#_%T{b-CmrcIEF(9VDAKzMvUUh1}hT7f#pnjM_&<F=0wws
z;78UZu!R1bdt_A14l_$?rjtK9O9HRAnIKzQIsuhC{eyc?n`0S@kb%$!w6AJ-2x@-m
z(rlvyp?~h!W?*FkbV<fdfPT5<LTrBjkCp&*E_7+yG48TAC~AF$HLHJTH9r0r<P17r
z_w-P6!$y!^>|M&nuaGndJFY}`*|f{5Ppon@j{=bEju8naGY+n8+N<MK+Dnvp4Aw5)
zZ-n3tpoE0+N7)LEW>^dd5+KLd`OmmJb}JB@DhD2;@Cb%#F;l1Q-%P+sSh?z}{EgK0
zIQJ)C7JK~&PR%_4Ws;hTOb^O`k|d8fER;!Kn@n$|yxQ3vv&wVAODc6eL)IZsLX?23
zmpH-Es>p1OO<<D8E|Ne{Lik89FsDw!oC7{8)Q~%ZiJe8Qi~a>8h;;#I6>w!8V58GV
zOXdBEvZ74$o3nfeH|m(llOO}Rxwvj8x*hu`tkdG2BBRf>DVRERh0BS~j9oTsQx+cL
zo%)mzP@5|Gw@(=+NjS7W4Q81E&?C3haCp&9_lPuTEI;L|^G^q}Dgv9#^*H>bvNr(0
z`%AIrH*DHxA3=_$F7Es1k8eX*WWKif8Fr^vY29Lo1qUsE1ol3Vp|8ad;hKE{;j~8(
zDw&#fYM4#M{|rZiNEpw7*Y}kP7garf+?K%NM0#1cWJN{^j}ylLb5@%me#>3XdXZ+R
zroK_^S-`nW#e*L|vGGQOf@9^<G+3o3ei5Uo4OLalJ|+w?!A8D`CYt|e+O7_+XE}T>
zuji_~hSpiCS3do1%w9xe5;=jP9wfHt2-q0cQ_CoxL~~ES7njUV^BcFME54@jPciSW
zoW4{UB61dFL8{ce_>>5yUiXAEtAtXJ@h%o<Zchvt5RVnKP*-KF!sDT1^oQ}|Gr-KB
z5k|w;Bzk9@0EzN(zCUU+!x&Y%N0A1WBRJ9$>4DS|jCn_{pdwPu{&kY7_LeFJ;7Q{N
z&hg2Glxfs1P4vWYo=g)ztpBytV;C{UOiwlg6<iZWe5$KAKTF;g^7(+I?oKW4_WmQh
zs@~&KtcB*g-{IqgE5On%mNI6Z=b7v@EMr<?nq-TyJde>-WZfZH0_{RQ9QZN6g!VWT
zPs#)#Vp40|t>-*u4l@rqXd_k0Xx(O;PSw>oFvmr3*vLnZmVd>|WBkL6nkVNWS)TLt
zo~=R7Yvj8+n)zHWCV%_PFVP2~3<C7V@|vzBJ6zIEc7IP5M1xs%Aq@Ef@<i5@(}SVs
zd932y@t%YQP4Ug`M+%WF`kw0My}cU2hVh(Z+CN2x>US*zPU;0gw}&6WtGdhq2X)qy
z#Xr-&S!!GVMnFFJx@UV!^x_DuPbn%Kijhhfjb)_j&5QyC-FN!YWX}Ag1L0gHu9HKC
z8#&$fb7eyzO|4xR<S_p<UU7j-se_`2(60Fct8YflB*ZbV?NM+BDtxhnBXgUg5L3av
zq;L3uixmD6v64-&TyBNDO|$LfA5P}FXK>LuZ071I{n$@9?vvhF1?D#NJdWE^#ktc~
zP|2=(o|jLmXIBVLrP~W}rDj_}Y|^VM^fU@nu)yYvl8rO7kJiF5Drb2wERc&)X6#32
z>3^vIG?GS6N_OawRg`|x76_-q`WYv&*p-L(=LD3lIl?&}d&~mEVwEhNW#JP{yGW#&
z*Qk>b(O${L(X%@+Wvu#O)bB)>1Zb)7#sk&V&L}rBJf^*kMCR5cPVYt(5?KU2Lujwq
z<wo2A>w;6Fi+f>tRX3($B-iD(l8O3?{w$^I=$W-z0$EX3l}wNXw)-|CPw=k@L5Mo4
z432n0jODwxE(`80)vP#U6xSG681dZPK4M|vRy{_2e8b1k2s?VOHIJ8$axI_f35}n)
zxM!g&WaMXTp?<DvzWvVqUi`R>fcH#WbLQv)v>|kMIA`3<dn#^B{FPgy8y(EMG+~Wx
zwtBVz+z*5ZB-APts*UN#)LYF<<`hc2TR%O<Pg!QiK8)ZHzwl;;5!>y|(H8PE0vLu5
zIJsQ{7#A6h&)9>~sWydrA-5LU#WO4;3BE!f;o^+-&Pb(C#(Bv7>Gm;|j{`(^2iZL{
zMUPsa{D-o-fVeq>&4QnQ!8IE;O9U$<N|TTZg;$Yd5W7<Fm_`O59JBS_xN}~bPMV?U
zp(Hy8J0M8sM)yN2b64Cnd42|Zv{5!H4#H+C<}~Gh(nLm>oT7$h{Blt>AFah5nbEes
z-1eCAF!)wiG;|p*d;fXrkAQxfXP=T<5g%q2pYoo#k+h<9@AIAZYYc;eV}73=Tj|#?
zyOeU=%f9PGomtC&*-}P=zd)mCE2^#aDbBsb(|K&*r7xdpO4c8_DNL{ZmI~0LhcPgK
zeGrDdoAYsu^o4!TD7}n_vOBb;^;s+8-QkE={Ih##+B<p!$#(#f)3F15iGdx*goD4j
zxGL-^fjb->LzTh{%|CTiPfvmEmO}Z@gqO{^B#GV_NyVJE6Uq4%N84<}V#_7Bsazhn
z=+jCBUa&vkS(<(bfQ%)uhr#s~*1$jE(lgg}0@m@rv2tOxTjZ0`ohMUQ-~6uSebfcw
zUoCA1FZlMY0fb#>Rena+P%N=LByJ!454{|rSt?JEUOj26ea?ytxyb!?k_qa!o(v@<
zacRxG+%HB|9JqLFrV`y-t^4hlHWoKJI_)1wkw$*1`4?N%Xy7{h=^CxXLV3vO1uglR
z>dgUYSzz)`BpJ0eDt}^XAbl%@&#$QpQl!o2XT=SjF<Znp23Cn5^z6wjaluKz@T!AZ
za5qdMILUP|gh)r#$*`@Eh_lDkTcUYD2`IX*zlc&S_|^41_m?_<gIho;7qLZeW2W2e
zrkuSl<fpFg0?cAl@+)UM&FgU}6;>nxPp&-~B)eO_=}4rkzf`^XpC%4lZ-JoDtW(DN
z_bd95&MnET-|Oxqc(KzXWxWw54E{LN<l-;ZXIkeI<mY1BAtWz8^+cV%UT471$oBo#
zA5-LUE%(!Jx?~0`B2Bi<`M@+|T%=i`Z4m&`IQc?nXXfr`_0PEBT+C)sfQJ`Wj?Zh*
zoFAlq5SrbwBqvKv=<HapI<?PEZ_pMRVA6Imy69$hS$SkdLW<DpW_}h_;4MVY)Vki+
zg%q(k7%TXJS@9f+n7J>n<m$X;<`bG!-T+}Y<U~9-AM@vH$0F?eJs7F4ubQno20y5n
zWQeFG^f_GLhxZV0zZz8Kj7Ui?Qkxira7gqKN|Jr##Qr+a;m(qbbk-V(nq8Y5ctam`
z&+A*2n_^?oj*wW<dYt=EQpdvv^rYbwZr2!82ArvAnmmqhmS84w1}S6M64Vn`$w+d$
zzM-L;(HMT1gCAr4TsrcLb`0@cy6*Ex2HEQgmC98N<H?>7*AHZPm8G&P61_36hW)s}
zNs**YXd~Pmi~=;|egOJSe!wN257=J17JE9k&C4b59Z!Q{XQ9OPm3FYyef>)8QH;I{
zGY0LVwm8;L30MXFS8Muu)pF3aNA$T~b(6)X-+x+8>4&Vm)j~}(_Ra-tY8naB{o2HQ
z)P}6k*q=W=tp!0?Jf<k+$jeo(V-o$@%nJE3)NGp3L4P5~<do-3>wp!VPgTkLA{*KH
z&E&AHlFt0d;I9h7CU#vbjhmUjq^Ltt!)eFStYD2OP;?^rv3KMJ%q^K}R2n<u(O5_i
zkeT<N$iJe(%h31i*PV9T2`VajiUsAAXJrl>Hv0lk=_^jKRbfJ0YNa^{e(8qy0|lqf
zoP>xw3PU_#QyKCJQAPpc<ew4skpzwPF8X3+2oVHn+Q|#6nIIQfWC71v(E+Maa@7Ud
zNW>zu6_*|@yZ;{$zhu2%KZlF4^;qO7*GY@|bgEg>!ru=}?^1!AOwQVt-g#z>AO{cd
zmA0NKxwEg_+aJSHmHN95Q}{EwY&}<YN2z>Ii%Xu5II^*R)egl74?x5;LBY}?msQ@D
z)X+IdEOZU*>&?I$(TuGyjaVc64m@m>hclW2$d3ZC1mQ)jgB$i2b?OB61b()q8jiTj
zrS`kC?Zw>8*W45<p?pxfs-RIy)KAnM9@z=Yd_r~#J0RJU>+Oy{p-m=YMph=s;A=g#
zr8Ijmv=MNn-}T~7*G`D`YO!zfNz)X)HyURQMP!}bN_h~Ib10C|%L{IW{bbVlBpg<S
zrcZW5es1-7u`jmJsh15QoOj1Zba`)9RjXcTMff}7Pru${T^yjg31M^3cc?<Fxp#Q0
zHz^_^?OBudSM8cSZAQzaX>-A3p7Q*YuB16o&6c5By_{6XC^5(U@bwwW%AdEFZLij|
zN7tyc34v>0Zj(~>Lb<n2B1iv@&XEC_LY?|Hq^=IyxoYw)p6!yD4L7DLws(!KKe#n=
z6`YRJ_b}Cb1*;=^J(I&6TjRjX7`ey=cdwCt*7h>yx#3jdw=m<vwNacD7a^SEKlnMM
zM~K~Mz;D_6URG0UHUHD~#TbH6YrItL>hQEnjx?ny!}l1!ZYNcUq0y`#b2R?&QC39o
z0gKXP?@SzuZkHe5B!m375aqaV`u9|6)*~9wp2J9LZ?&{^ZZf;5=n&*31#vr(Hz_-s
z2kZR;-0!2s37MMP%>dP;^ZZ+?>Qg%<>Wcfl1ir45#UFw9U6W+6PGKK=cD<*p%5IV*
zD)!km*j%6$54A(~?2=n7_*R+Hwpjg|O}>OqE9BE}2pJd{hzsS-OB%Tl>c?Sc#H`9c
z(Iu_t-|~9CBeuDzaS!M+@45gO!W(Ioj1gS2f=L+PN<eT~lGJ_XTSYOJ1%~|lO|0}f
z@=>9{X)sbfml?PtHN8gUQ|Fz}8v11iC)eJv%V>^7@n#72mP`mUt+^z68&g8;A8l)i
z;m^&~pS`B3<&>`nBFX2S+w2z!2c#!jpOujWo{v85xUk@;==v7q=5caT`gx1o?Y9`<
zaN~X3o5q}2_wrt!9`I_HpJ79cVtAjKxQ=do)<;{1E5-ctBj3;zBq+j~>xUEan4f2)
zjHoT2-^w_(H#D@*K0L0^g;sr3Hl77axteEGAm`V+wU<U`&cPW2$l^+6)|`92#noSt
zmPqC^Gb^u~sn&+Yo=31;r%p?<MC~%mWRDP6hYUCFiQZYDX4T@_g{`{0qRc5Jcc51z
zU(;mzcA1r6tcxSps$Eb;#TY39A%(tEqa+XNTSdm^HARh@ib7#3m@(Q_+EufX&$`Xe
zxr7QZD&=>%8f?g<@d!Bx8DR~BkJJtLmN15%M5#)jxa1fk1_5B62m<mHVt3n2r{Fnq
z_JqrU{aFsGKGbBUy;uV@zsQ3Ksl1h7agXj(TPmx?1n#v)>a~{2_U%o(sS7>8jnPwD
z1nMyJXlc;7U+NR`Y$i+$byI}NrUFg2Jb5Ev5fjBY0V}A!x8(rtV3>um0a;6=1H#pb
zgwje~W`YZPRvZ?P8y{K`H!OiF81rv4oXT!(XFb7|3x6En`+#O}A`@G>PZey+xEzKM
z9oCkq&0Wwu!GrEU+}4cnCg7Yqj@iwbgnk>x%0~K9DRpD+bV*W51gQD#W154QK9&2n
zDA+xqF=B)1)f2s0s+H^vY1||adJbZn?rfhX2`gZAo#8wUv>;vd;!$Y;T?WAZWUw&V
z72J){$Sp0((ZQeJ`MFYzA%}uj1?25RH2hWC_wgS-ecT$kb5;_>h~q3_{WFo$xb%~e
zP0lF=v?@$pMIUe}24wxaoLQOJ=e27NnytgR`Th;;U(K_XosKx%oqN46CK#LbU9yO?
zPDU4i^!<Y;#&=l&@7_Q_0v2!(J4q-p+kT2H=<d{}UwZyOUFR+IP{kcoMdc~&Yu96V
z=x5|fJR9BRPs?CyXoiQm(Us;<>->wZ{99_%`ImZa*W0vK=OGHdSB`{dSlsO7D8yxi
z38aWC1$oZQH`ghZ)?R#NcL0}m>aQEIl1Q=hzH3ZR?xVekHFo{^`%>h`W;rl3Gx!IZ
znb_mQ3Pgm&tZjw}RyQ8gQAcZNfhmiCtMaGLk-?Fb0yDe(ZIahltWxUYRPlJ%!Ej5O
zc>bBS1UuzzLZ;T5Z!W?i&ISrMs84x{1)S+uQlLls!V1@Z$&p0+)&dpryj8Wx5SIg-
zxR9%eO(BJaa<d_ykaGNakoE}vCn<T$c(UE3?)T&_XzM6a7K40b&=XCr*E|XAKPU5`
zG&xM2dvZ9Q=c*yNzep;de6L@j^>DfM{6ae<*r(;>i(WT9C`vZ}gmu|~m0X<rliApL
z1+uQh>r&{T$%FcbgxDWrt|o*9sbkEopRIKef4=*;<xR0KkNb5haaT|G_@~U3GP!4N
z@+#%6X)LBVZ{uBQm2;d9+#9e%GY!`8ZhU^m2g8%lv5i^IqprBg)jq<Tp;6O%knmHF
zt<Y7eAI*azOL&31>xz37sfVKlyNw;(LB(fW{Hk8($YY!Rs3{yAM>1~{lB)~gwSj%e
z_Pw(-H<zt|hg_wFzbU(Sc+rGlRNjc+HZybP?+<f4vGC3Wzwwo&=xgiwO?Qh-iGF5r
z`p9x`jzI;Ntk5lq^TCw4ca;%l)j^|y^`E{fyKbrU0cVJrMw8d-vH+Q+mbwsmbOLLk
ztc^`5hR+SEu048<8}j(`{hhH&o6V)eQpe$ZV*@@0`bzk7AV*L`@_|{Y`6VTkEJZhx
z2ex&^n&)^6S1G*XjEUYSpAW;b0!(joo8RWMe&MODJTL!3y-<WjTV*-c9#)AXY`sSh
z!}l_X$EvdM=zSMDMv(2miCL%MoK7F+UD3!T-!Yo!MUhvhmeLnrM%qs>du1eY@c76!
z9`k`;KS~9;T)Z%|CZZ;6oCY_U-Jqtkcrxj=uhPycQD`RGW-w<4MGwiZdSIHvij!0L
zIYl74@-wzn&0vTU#diRJ_kejyFp&lIDYGs|e$#*ZX8vgm;m_09)1Rl>v@PgaRjj1j
znei-4%aV^)mmgtqBZy}Q_Z7)IYkO-%1T>i=->05SOfuQxsB<Zb)}Cc|CsfwHQm*j!
zBZgL@%o|3Ozl6_;FK7+j_j#q$Qv2Wt+K&vF%RISb<~a)Kq~>@RHhReC%y^+!1Th8<
z0nKmGc9f>?ectt+YYA;_PX>Q86`~k{^UsCRO@&J<3{&$3Ah$6$qchk|ryN;D7+($J
zK30Uaiw~ntFr8)91vIGdN_+72#@OlEi}UprBQ7G$syCkg!SAD{%~Nf?*x(GhqUsLy
zop#GuAgPVYmb{0?H=d_nl#o5tCyhj{N`#JI*;0j{OSfPHUSo2ENA)<muP?Xpg2$@P
zLF&0;(DnvOT;LZKuMT>P3X7${bQ$-!O#CLNJ`u~#8>ihfN9`rU%5PNvNo5x{13$=a
zDSSPr&&Deui)wvZp`vy3tFNzR&~lEXsD-8NUC3|7a{l}tgBk%hf_(T_A0zHI8f)>q
zR~7xAW*O`CrWxBq!^+m2!oQdJ6HQd(O{FhBUsF3MS3&d;yWd2Axb8dVi{K4KL0((#
zy$tX8dL+Lww=v^}@UY9ioZ}l9?_=Tmt`VTct`OQ}_nn3BlW~7MV6@@zz&mos5QMdY
z>Nt!;@Et3NX@B)QUHHxNTt1TVrBSN1a@+qYL$r30St!wG_aKK|DgQ%R>Asg0pYh|w
zVu(SVNV23=8u>PPml3}Es!DRb&T;?i0c7Fyb?Vb&+Ih>8t-}g9hbR{kDOe3XOBLh<
zL970!v)?@N133<M=6M_yN3_zOeUd8i5n#abtm9?%T!ovQ_Z!5b*jf?Mc2>w9ELxKd
zd|S*4C^wUiKEr?do&1Gou$u2pMnf{^y#d~igW0phJ4a+Twb1p^?h+0f>r*Q1BJ$=d
zM&_#l)J7o%p<?O{eHt$XllX}^lE4qknrPn@uZJ=Hz^kycre2xIWp4v!dTdLosH1xY
zz8ifce;8yK#kmLn%EGGDtH>*|hdM(m{OOy@TO_PQuoP%7rQz3+`@gdU$L4bZa;1Ns
zNLMi2vO?CV_0=BHZ6n1kZs?pgo~0JAhCsd|zh}Q?7YBX!e~xarEI75~#6Qr5idu}&
znAGc;1T>B8IdE?x4$+4VVf{n~1O+BY>YD^1O*dMTP{}6Sr(8%o8Y}c@x3A-VN$1X`
zNP6^fV%-BJaw#h*4|chEC?|_H>EhY$M={>t-GhjHs=RJ957h!wZDkgX5<$Ndwkp<w
z`c<hV@R;q)?>vglpCzIhBgiAx)tq{y^*r-)-#dMk6Y3kz*wQongey0UN};PYQ_c!s
zk8ldr0QBnJ_T~i%Tv};g5&0{eZW3_ynv|OPnu=cvd@+HG;1mB1d-R^|gGuG0-$+jC
zvc<0RFsdEmt?_;fp6>?1&EU7NN^cZ%<EQ6I!Le(V(6lrJ&N_+${b&ZnR9ccA)X2=&
z5nQnwU6-wk%M~ebmAjV_J4*^L$EE(zAFglgL9cq8kPHg~nDTtT@k5ZEIJy&#OXoS%
z@Zu^NUAMi!M##AkgHQa2GKXTcF^8V#vo{+aT?6BD@XmpT7)tTw6QNqYXY?F|4wY-y
zQbMiUu&rR}kzSiMcK3v;!1}2#?d+l0YBGn}pBbPSb;MM5$lv0lNQQQCJdqZ6D~?bs
z>F2Y};cJvOl6QVZ%`+vWG}T#&N!?RuvF)C<d@`)_qZw=P<IL7w%%0C62z2pwG5!#i
z_N%=Vgw!K2x@GE(kaK??qU|-0*t;zzQf|J$YUOW_RvR2jtQU`vioZfaPm*)=9+dT7
z4nLlgz9*prz=xQ0QCUxZPMw(@Ifyt@PHh+d6P7;o0Jaro8rk0>3v|!z<G%Z*sb#`(
zmcYEPF^DtyQsAIAmS@x`X^`aiS}A}wjIRDMbPoF+jUpp@QrA&5se++$-i%+67q|#V
zyTt^WV8}goy!Qkbd9wz>ZEe>V&x7Fac_eG>k&Gab(YZc4^<41jcKL`l?1Os&C?u7)
z#z6Li73S^xr|1svkL6nEU4tBjrM$1aLdWPS5g%rBCjSor$3Qs0P1ig`bMhLJJi&zl
zIt3H=Li5UkJeST0-5Q8fIu>4N!&58p__A`WT?Ed=Lh6LHSM~Q={k>U#E>M#GTwb>6
zSNZ)H6~6Sg{<%{Uh0+4JX9?U(5*StsI0^+pu7wQHN%1EyWQKVMG!<-C{yUe#D<Fez
zs<bnO4CWKzcT>ZHbBHt80B+hPbjILoS2S3XodokUuv|ww5t@XMhDcJ31H{E>9uqBe
z_}l;B0j|1sjM<|#uB_DyrHHP5XxL35tyY;kEWGrbLC2=B-5Aq}c;b1(3riV6y)aes
z@bC%1MN;{18=e1#34d$>;qOA|{MY8$E~Vz(DO5tkD@~J`v5<RyWU^RZQ=0~<0TaLs
z1Xlo-Jg8B-at}ZH&t|##hJc%n)p+~lEI03L5XS~JtJmJIey1Djz8EotD^n!P30Gb5
z7Iw|tO*ctU6F^fKyB8*JfXoW%gwn1SGyL2sU8l^aaJU6?U1;Y@*9nPL5?3SvS+DZ%
zSMH@vuk9`R8F>C{ug%|M^1GobxeV}5%Xa@T`=1_Zu=xJ)lAu11pd2yux(Im&X&YRk
z#dsi7GF$w~%P~OP7T<q9ar|}{R@9L>2tv4N7Ut^k*ufetH;p+t0n0V$Mx|Fkh^7JL
z0fvaYW2j{*fA9SdFg|0LIyTO}S{+0%XS$`Gg?rP94QT?8f5ky_51Lg`+u*a$MI<WN
z%HXOx|2luX&VMbugH6@>U%Hk5C7A%ocGUU9dDr=mb~D&sI{#DKr-nkK9!7>YPE2xO
zA>!44d5Vc^A}n=?nxGY63{fz$55j$jbjTZfY20`XKmN-HdGMhsdsdXYkJfl)yUq;~
zvp)=(uEf-$V5qHY)}4Iy-gD5NC7HAAo4uDq2fl+&o`4CErZ9FF?6{{GX{R-4RUx;6
zq9nG^m(RChIUP9rb#kSf3rR*l_~&^M@O#z2vr_u?_mTnax8r+BLQmsAAo>+w_m=^c
zvwr6ay?<d5TyzckZGS7c(mR0O^OmMSY754G-Vtmng<n7lc~%et(_BbWXywJK;%{}~
zza|CQF>%nW!F4;~g>m@$wJ~iwiOfyHQXT15A&rr=sQ$@A#KdGP%1kZdXa3IzNYf5e
z$D8b^#OSGe`9>JMt%yP;;B%i?f%;B@L_nK-{@IXfRp^=vsPh-E^B?*3H&y3<mgl;J
z_#nZhp!us#9H<3Oep*CotABfIllrYK0T|&CGAe^~)HxIzOaMl^sLn0_VS|<bnQx><
z%HR*wYXNVaoZzM-5%<4)irfB|DXdm7wFX4HKz5_Dt0+^ohDeUcBIHNWs7W}!i>qEW
z&W-mOCdax|T1tFUh~`5YOAW?5H74R18#xkZ&vG+8JL6vj!fcl8M1`5=A#S<;M@e%n
zw(Zsojay*%Yd~v|hr&`tNexI)?4C(2v@#*dm0X1!$W;m-epitE3P1lrKps^5+F$dl
zWy@d6YF|_^jv=F;o(*t04p1p9dv(wi=#L6|Yl6!zLVrVGe}8}uItpcwRV|W}o~v+w
zbBai5(Omd51PUjea7^I3u;^$^)B*(M83n?Sslzcrt9UO$F?J|+B^ywKAtYZ+ncX|d
zu0u^e^hZxK9W?0FQ&Ov|J8<VPYRa52T@85tsV@5u*0_3Kh2Q*xoZtU^&iF3nMDH`N
ziSfU7new^4{nx_yXYGvt4PEQ&O8_?Sn6a+Pf6croF#_6EvA=xm*q?Ucy%+U1!0^%{
z{K=5Ymo@AB*M2g}c?kS$u<{?hiakpvvyPj=TBUx)bM)fT!HJkVsd3<la^H`SbN5e8
zVyR%N6^Le0nFQGl1jRa80ND@bC=xE9oo|xUfZ$4|?wa70ch2yNg?Sd9S>m}T9WOm^
zc=k!h7e3RWzEtH~%>|ZiGPK@xwBMl!gl?SdL_jSb=Z+hGnA{l@i&PA?>tOc-5Htj9
zV8JM@UOPQ6WOkV=bpKAI_@i0`Q%XI5&&R)4y$`YYwYT24ObT$ta~gVWe!&a{c`fCA
z;tIe1Vl8lQC7|F?#Fa-ui=UTragaz6kW~whg?>!5<@1zY4GtxcAzq#-KA%!_AY23$
z;86qzyt4{z2Zv^acBVX)3+7<VHBXHbE(n2bLp6cWf+^-5iX|{rvKLys?yf61@z-zX
zU;e8{*&R;s?aDmXYPldx&-yzw6wZS4HA{UZ=lwtPE&lVt3QvEtL#3Ir7)7{T$~8jg
z3jD0AiXG+p7%lL#K37E9VBlS2;9uLQgbfn@Ho4G}OG^+D!sTHEG+N+iT?Rj_%h#Xv
zpNt}Fn8B^}V%p&2N4=O=wfqN?^gYd(>r8_K%fg;X!yEq2IM=_Uf>kh;5TY3fW`Mm2
z<A}I&SGOYCz_Aa^NhE9`-IHkNIMz%R>t3S@Q@8G5>W+}x(!%cbrAKpq?r+R-VyVe;
zJy~=06UsQuO%gce_G|wl8ctwcii-`kt6|rJ5bYE)fjN|=959NtMWD<Oas)MsnsQyQ
z^fvYBpt9E<yMM^V&z9AFubp2m`H_;n->cGfc!sY9nXkw4FRJTag|Gc2p*Q%K^5+b!
zzWK?(>`=A%OlC+hrX3+f`=m>ag<Q(xCW;uSSmkS7hy=c`;^;cKX;xTq%2)RZn#COa
zMw9ANMCjU3Ng&85Hzc6yFcOfx(B=EzatB9`ba?o`KEt6y6MQRN!dgWzoM~zAAgBw=
zE`Xgvt?l^6a|xAcrB#V&=VtXiU$!WSjaZFuUDZDt<9+1UKOa@UY_L#UbD^b|93$Wo
zOaMGCrml^a9h*IkkSnFej>U*8sx|I<ONCec*d&bujy$Ym8chi65bQvip{OBOfO<K<
zw<rrh3sr|`2G${22em83a+g+$?OHU6u`40LLdKqENOQVIa?C(|ZOOfn80II*yD4|x
z@T1fl`$+Q?S20u$3A3+-`tG8ozo2k30|_B77xiSe=nAND#p|jRMnPpey+_{DGSItn
zhA&z!>~W^g^cU?p5NiMDReKe?oM!W1N&YL3|DY>yYO9|z2{=UyE`o{{i*rmFG;GNl
zGy=Kc63P&(<w!ut%8Wp=;;mN|z9J9`d|zzHaNIsCd@P5@uQY_+nElU$#Lf^k3<Rd=
zL`c#3K?=7(`%;UaeAlZue5}P6J~PKPhbDQ_&KJpyjG}QDmYrd_s)S>XrCj=?NWI+r
zwmmKzgqNNZpq?WWT@T@p^W65o(DVNFwEfpU?*|wQ18xk)m^d0TQGvT(tGww)VrK8#
zg@oheaRZ5JWkAXiT`F(>ZJ>&}agZjEfWC<8bCA9WD@UQd0*OUBiY_=fnPKNrq?J<*
ztF)Hu{QAdoKK-?raHiYuN9b9`NJVp95iyvhDZ0xoZanxlrgz*-tD7JuAe=GmdWAB1
zK*$tYz|oFk1I0NZ&k7SC7k~>(u7K;0-OE;auU%ib`H3sP?gjYXN?%vV2>b4SZot~_
zB@4YdzaoPK!WCVU9@Br2Kn#+A{`Yl2t&?73!6;${HA9;O8Jhi5j3Pt}M?+Wm>GXL3
zMbkjBkx&OdD^M|xw*^I#boVTL!ouU%7Cr!bo~=={LR<-otw_eAVi8khKx#wW@tl9~
zSKrJ}pZGn#{jHqc`<fiFD=(W0%2}2+DaG$*b%)?Q&HK+++h5rDynRFS{!JK_$OidY
z>*}=n1i-^%(@-(Ojp;bM@;a}4hvD@<SYgkdO{8%HF5HEL7IE`veiC)<qN+85m={3m
zKm%nAVH`9^IS$!N$kL0@T7p&z3l1~q$WB5&pHORMytGi`Lr*mM=vV7Jz3d347g>ng
z#iATWb3_Z<J4hCk1GD$Af6tp~by8ep2%5swJ<9ksLhcM*<9K0N$p!L~t&oRh<*%ib
zt~4m<1yI+U+4n1UJ%s~MR_tYqez4p}`;LEo`JOA12Fm9V%4C8fiRhF2+#vX?D_iG1
zp8#Z#2=s1>mZAfoQn315FU}6$8zE>~@D7WrT``m#2L~nsS3asH$|nI+h1XLo4!U`V
z@I{3uZ&Jt%JD;sHmPS<K00~ntIVwd0U_^0=rK*O1^jF@(UwPjLaW6I4vEOnc>x?wI
zRW4`mJ74|#4!|XMPM>eWAM23%tvwsvDB<sd%>7^XrLaq@Ok@>)?B}oHo_8KXG$hXw
z#I-TqFM?eFyNEaoCI%BCCO{>GAO=%KOcl&nQNQJL=<-X@Z5P4+M1~%P<V3+A%iDE6
z@EODJd^zA)J0u+M!2T{rT}p0sXv%knDnw1W;Afg-K47|ekQ)yEAl)R#8A0lX$-7|o
zcEJfG;&^tcaPf0t(IM}#`xPA!@)-nHSCan*Mm#-I9(^uAe+00q#V<qJ{ekJv;O{c1
zx!%;fOal5wK=hxha9`|o52Qa@kp9n=N6Pfn1mzR;cnVT@5kQe7*tGCuHUb943^<4A
zVAB&-Cwx?e6@|A};9wJ$GT|`+bE83)AUj%N%nG$IBnVO@upkaK7DGt7kg;!Ug7^Qg
zujg<6-yf!Va-8mT&PtwPINO%U(OCHBd+xu{%KyC0{VzD-Z#{GWQ9G?%vaW#P<rMfY
zjLdI?ZK!p%{Wlu;x329!O!}j(jPHOuZxwj#i`dQyj9Ub|j0VNLmp~zmpb{Z*1W|-U
zaq+z%g0PMTD<A>dK8kdfi{L+(qemS1F{L6APrWe4zyG6<uO7AJjSlI)C61}1o4FB>
zSy92pjFT)>sYXriyy=JOs*s6=YQWg_u;*UTsED~QEW>gtNTB2nav21DCxy$Aqa@^&
z0l6QZ%W7ZBin$-Cdr3g443I)+S61ug(Jd1JwK}j;9%}3NI01rEI3u}%JkW6pZ$SH_
zfP(!`zop*i3s{D}F=WZ7MIvNG(WF1+C=#4f8d$s$!DXd7AXEOlOb*^22i!CX$8*Q?
zfVl&%{4^vdBPOaL^&ldQGQ?zvSQJN~0o~&XckemK-~QoO@&5nt=S-VPy5lFYJ)7fI
zX~1ah_)AOX$0ls_yVwYS>nXG@{VvHR;{y;n^V9Tv07S$m0NXnO0H}vxPeA9z<6Jr2
zqLNum7GW}jNfnbRuItcN0<CW0kdr&4=RQM@YElsXvK44A7e6<b!4XUTqN8FB|MSaD
ze&xT_IBFfsGc8^W5|(mD?nXNw28{nYx;Txd%KbO}1SX!PqZzJdXj~)ge>KF-qS}42
z4aZiB_?iJ$v}pUwpz`gv&>7a?53&4J20_;K=Kh7ge~=KY*75fef!^~;uYK<ZeQndT
zP$@eF;!K|a*n95Y^GjbLP(G&{umPlO?e`71hG*?%rZBvMp_dm(Fr*gf69kK-$d>fZ
z7c8^_xHb~@RD@?!SgZlD5Wfg{TQCwL5*B0%3z8ee2}VP*g^XLTImpR;fiHaJ1XGPF
zt+0EJS@hN>0H?i*eFAV1B><%lfNEDI_dWpIGac|c|Lv*sms4h|!f~-ok7s=B!!b{N
z&aiJ*n4ZenJuB?KB4W>#Fny&WQ{Xa(>t>j=18Ih7<hXi-#37nzh0|S<z;cEx2<b7Q
zsu6$m`7!?GhXclDTD(wcaUyZ62wr;5gsEV;8Hu1ZO}CYB?=?S6t#N>rEP+Z$?SQcF
zei)lBI`c=`%Hbt}0CKBXRV+m^;D#l1Wworf_&<iW^Y-L?437hP+I&}r6MKqHulD-t
z0}jE!y=)-&>pKJXlMC&?Mt=-YY6k_=A0x={jK8!L);?8U5n~Wnd`Egd06l+#@@=@J
z_`a$2Ox22nDVHK4((?CGRrq8Z0(HE-3inLIM^C^DS3%Gcc79fIU6^zMRU<?Qq2`$0
z&SGcizL@a0-}+|0@$3m6{ni4LSJYTAouNcU)^y%(jJ#I-{^GDmoRX|OMi*4)Z@kWb
z<hDOU9y5Lf;Nh`h<iHa_!oHobkOw?_#4`4hWBLhYIua%-mYusYuDdVfhVK|BzG4h}
zauI1S7DPE`p&mo%ilEibkp+i65fJAgUw^jAzxh*3ZRZN#tYpk}6w{O1jrbmWZSSD7
zgU&*i8}_}GojdPfIZbgvK(rHf-L6dS5v;;O4$selGg>(MQTp}^{kgcKF!#X}Nr02m
z&F|D3PA?HahBW<Ud%qWyd#(B&iEpR_(AW9vAb5)ox(odcNqv_<9b_P@xB$bl!CrA+
z$o<3(nWL2CJ`o1b4QMWX?t$s45l~Eh;2LPl`>HY^6UI4wDk+}+^;N^wO~+$7M7IiJ
z!F^8AE{p|+SYu)diPT}7MbwhJoa&K~fAT}$&yWAgf2MULroP+KHtBiwbCI&su`d+%
z&s#E+a%{4~3#WPvczE~(U?X$?mpcJoXrrHvwxKR|qn~p<-a2?LP5Pg^S{KGcVOI!O
z7}$GMIR3lv)W?^(_Xl#W{O%d-Qj9DfD`w;ls3~Fsr0vipV9C)+>ij={YzQkUhif@=
zts;=QRh8d4KC_l{|7-{8oMZpgEgahaW>&Hc7Yf0ou;Y4R*Hs3@(RRwSCkywz+&OZJ
z*VABVwQf)1XG-V2A@)CLzat^^40)vAKJWSTgPyY7M~6s*!#2I8><{`*eSL+%(6S#b
z<$68Bp_GY3Pd?}hjbT9oEb^A(eY&B7NI-1yS%-sv;TKSjFiM+Xj24{$z|?yx0m@@h
zeD<s)2G&IQgo6cVdCOS9@zk-fqEzkx=?L}<N}dVDbifd)As`@f1vz11!LqwD%Rhei
z_wrN!_5;-CC&+g!kZO*cYVEQGgumV$X(BdUKiA=b@3{tz4Ila4CpbCLpp$W)jegGc
zp3g_+zg>-f*7<m!0Blb=i`V&ISe?JDF~Lxvn?N^Fj-h-Fm>r9_ZBn>-85VxN%bhPC
z=kC8gLvF{B#knHDiJ+liI!d-8M1=hA=ir%Rmd^f!!!5U3!Zu>d7EuD%Bs*DQyt0Fv
zuXz_OXR#>K2$;N1*ncYo0dyUF>o_E7QT;np1il_Cz8?tHfss}0cVyr`&}%#Bs<$}Q
zu2(IW_zV&AO7dRuy}<}T$^@d|1?V6-a8m9I7#cMU*#q}v2+kE96XBFZq}NX<y8uO&
zP;`|0E`%~9V?+zKk)==$*y3@T6>WTD3VCN=31Nz4ArFMEg;?Q>4iw89CWTLC!pU4Q
z_kvr7^y|u)g*rk6L`Fyz0t{k8UVJI#{wr_fuYAV?{L=6JIlC(poE)DoNrC5w@OQ}O
z?3;0X-#@vY&dHp|{^&8r5IQJ@m|`mf|7k27S&PQ~a@6_D8Abs3ZGavgn+ZMT_9Rlo
z6#<T|D1UOq@msm$=-!w=`(5R8zkZyc7NJ2EIyu@^ByqTo5M&`sOEvz-=N#Eso9Ap^
zj(cUz?<$fS%ugUrxc$Z-BsW#8TBsZ9R|{9%t^~1S)$;T)Wqw7;t&%$}it?UyZ?DCk
z7S_Jxir8{#kJW-$XF+Vy+GgmF_Wmvx`N;6XAIGYdzkRu1uVp{97^we$Zt(TsIflu8
z!=%IB7QrDhVvh(o<W0~YK{)B#6ZiHKh|^*rQSUQlg^vLaj1wdkq$@}cnib=Fn-wNP
zHdj)sBvz?7_(}&pnZr%f&<TZOP2u>f3`_eBOL;MVS#d%;7ur_nsL*u*84=%nCgn$N
zd=n4cw3qoKIWx(`2=nd@-dxL(#=Z$*YQDoA-|2`ZI)tXh{yj0xawepz=g}zbbTe!}
zgt%N`E<Go}v+Z|2S2lT?$G>d9v~2M8&%L5}<TaaT_-rp<ley6y-=pmN-i*EIG8jSk
z<mF`|aI_`-_mzzKDfqqr=y>6iD+E(bRI5m$m{f5cgVBJ`JSn_1AFw=Ti={AY`phNc
zKdchAW=Ps?Zn^4vs8;rpWGNCE>Ia1bcPQ0r5ujf<shnIWjCiaqf|t6U36B&+09z&m
zdHMZP$RMr={QclL6!_Ij(e^J_{HiPdrf(6feaFAPeg7$J{-Sk1u<7fu|N9#P`v-i8
z5ZE&n(xK3xs||y219@Qoj~hxJbRhKaZ7Cd1K&1Tq>WbCD+ATkKZ@q9{97~&Pu`J0I
zoq*4Fl*iPucN`Xg6FcF=D`9zDSk7VD!irNms<bV1awT<!l^l*7cKn}j`T-^<mG1G7
z1~pW)e|f+Bx*PSpJp<XbJb2e8Iaf@F-2X#$G;dIy6lQltG_#~weJy4kguhX@`i*kl
zn-Q*WSp(Z&)~_}=<Lk&-+y1hl73%AFyiWkOa|*DQ3rN<`_LmVZ#<d0OwYB}%7`QjQ
z<9o#9X~TQb&zwA|3cZysCpyaKY(`5$KJ@<!(X4?qry&(wDriU16~m{WGT2Jaa$x&O
z#mJwz^s0|LJ6V})b8ydVn4P(oRyRdWK(tTTe-}(n6oKvNlJflVo>#w=t9u6(d*S|5
z1U76L_%jM^U`j!M&jn)zu_YU>wEC627bvAz;FI^Bb2y;V_W@8ha0~3M4K9)q>H7i{
zNyCuNf2fnNsuiPPO3k9U!Rt!tK~QuB%5H*{{`f%p?@utUunQJ9NOVN$9}g|}`lzKy
z0@9&QK`!MYB*EEYe?q20q{5dHVcx)49Zm*t^jesIP*@ogmW<Ly=ve6HLMIp6Ib;MJ
z?dDX{DSqZn?_j>WLO5S1kluj9jCQS#c-<7HL&EhFaPXw#^*>%`;@~*BZ6b{}d#@8F
zyIsQYbml~(z5eR+cC)Va({u@B6YmvgyzXQTZGRczem_c~wVpBUrIi%;5rD@<GA1Z)
zs!uKm^ApPBPmJ-@rwnFd5@#bw!DNnw6Y%u$3T8rRWox}ui=U3{I4dVwOivu-h6CS6
zC&^JUm>sbDHf3g}2$(C0^32g9&{|s%8r2n5d(p!01?^%3pXSB#oPK+MI0$Ci4}6jf
zl<jabkW`C+sDm}Y{orl2tj1+%2Y?KA1L#n9pf{g){XAzi_1+d;0;9#T?okwmR}J@)
zi~*rg`g4D=y$(Y8zU<Jka6=smC*=r45UWUDjsUuaOpsimJYKzI$~ncl!ca+^@OTP~
z0(qpgBbdJjveyZ&A*=|jSfQ0G?HpP;Bv#QN;HkNcdw1Q&U%2aLj-6Pd(Wz}Jy{k96
za=^}}<DR(=x4w3odw!&W(*p!y1(6Q>ZwuHH<V=`?87bb0*TW|Oo8@G^mdcZJwEaiT
z#@E?~T36fuT-o%w*#0Ao4c6H9Utjxl#O_H?Q(i8wdCWT6Rl`UBdxow!a0b_bz{Wgt
zEarF%lE|*{GnZ>>3CQLQp{a5EweKQv1(RPU4AZy3-n~V@PIBd`!==u@*ZR)~t$WuC
zUPE*Ie$XEZ{JrlL!M_Nc#be53p;v8}<AI`r?*;gw1wd}~{(!;mfPrQoWwlD?G)aIN
z;v5dXKUfVcI{3cnI}{f3K88jCQaTD6Eoc2&)YzvQ4r#AT(mOs$(Fve8F3A*^7yoZ<
zv8X4{A+^d;1sfI%mAVnMUkQ4*kcF_UWfEYOu2m8zq^{V<@YFHOkKgxp4()8PcsQZr
zDnkpP)>iqMGBNG_k1Oqx4~*x$Vqu<x2P0nle?~|=2DKXzb*RnRbx)m}udQ)io)oX`
z)-qz0H7I*Vxz^7@_>)b#SFBs-KkB_=?QQ=xKmHON2lx(v$HmhHC<D#$6~{|s8K3{U
z^2Db*gmH*%8<Yl59jVgJGFCKOdyhecU||B=6>h%z`!T^T5>3!Cp>~~e;3^?Ra87yh
zMWNLZ)EROsSgW}H47;rS^Rn&T`#LMCd&v~ZwP^8YK&FGSKn`MiOnn(t)K2>qdJ))r
zJOdr9^6gjJgBd<rRL=tfAFHbO0pX$)#A%_@H#+d`@9hKVDFmc9|1aN{>5m0^&o6@!
zMwx&Z9j^KZ@7I)xO@BmSfkYrFJq;{KE@cO$_`KFBRs{!ij4)e;AX4UISa<-^D`CaL
zvV%?zU0eRiizHw%u`Dgu_{j&qkHlJnxqv{-h6t<*)T+XPamTBo4)-2j;m(^Yy#4(l
zwdpRlavjFZf`q7xF}r8D>j!7JCvS86j=~L5JQ>deF9Y17tyW&=e<5`KY{a!oUOoos
zeeb!vi_IcF`1@UMym<m~D`+R=n}<UZ)1_02)O8KV%(TboE?N%md4N4Lcd^vXAU1>t
zlmj;i^`P(`dipq=TvRkH*ZLZ8rD;yD0_=PC2Ri8TNKYbHuHu!!`dsO;9i<cm4*y^I
z*|qnW;ibjBAkQfdfTdio=O#E90}PCTwCD5Rul9Awc&G^Es#@s&b*Mhl)2pL;Mnio!
z4jHyG)>7_RCJnvhrmQkuu85QghE+5bOrS_ye(rv9Vh~ZRRf0fBFodDwb%FBXmh!@w
zu=BM-<=c?XDLFz#m9WQA&|*UW^of+~cU{k$Zn&L~JozLu6IE8C4yOn*&w1VKs)t0G
zqtZ#(wJ7W~jy-#XSNu?wd%nMpOjNP;YmsOI%S0iS4C>h2aNv7u-0;a0q@O*B-95?I
zjzs-2g44Aw_F2!h?sfiaiygX(DC`q}ZAk%Cuk$~TzW$qLuRP**wB9ASkXUA$5ug21
z%(3Si>>A5ioOgWlxWiQ()~@ZC1zMpq=V(-CxbeU{=wyn7g4v<$zDAg;8(gM5H?KT@
zQjpMLb8to&nC}g>=FLEJ-;07;26>U5etyU@R|+d#q~}*4{ZrbNOm!{y2dF4Wx!cb5
z0)2n4a6i!Z7XKJ}BLXQ~_1fPv(BJr{LsyU+((~)ULYTphpMLAGzb8OScK`=!hIT5t
z!ZxUvXeh-l04Znru1pvVr|c0BMH3lPv6tTySFVIEj&<l9-?Z@dNci3c{O4tO=4#mc
zCYb#1kR(d(gwR1S<d5JGzIg(^@0K_5=ihpUY~B*@3Q09T=Q-WmDtJ{jWNJQPSG~)j
z>mshcvBIIdELYs_sLWPz!9J+(LxM4s131PogkWY7o`>o<_y2$PaqOqR#;s4c33tr!
z=yIcf?#fUCySbho8`b%5)Ei;#I{(cnwAMrT8}%6a1i-`Nyke>1uqSK$<_A-L`rT7}
z_S<tjx0n;nx<1iON4;j38rVGLmaD%X)hZb|Oc=(mf?ZPrsd9WpdFEK*WM^~1N>L#f
z5v<(QCj(O)%)t4MUW-?T%nr(m-cXtZnc{hj6n4RwGLa}vg^)od-8bj&-Ij)ezOZ_e
zALWKXDYp*Fux)S8EwH~Xcu2z6R|k}j8(R9)Pg=^)B?4jw%ZAjHoB;}DfTI1bhxA7-
zV1i-<B120O`YF88a<5nUJQST186q+oXJ}c+=K^?8l(&xwA6Pa#f4?Pq4x&#A9Uycv
z@LMPs87(Fmw~p`REw|pu?|uFg?4GQV#`!r54FxJ8bY58GyS}5rkNusiiT1_Fq(STo
znpLpD1QJeyj)Ck%Wv2MuNEOT;FyF>@o+H}Z<Q>0wkdOZSOH}`Ci76c4s*UjyhBWin
zxQ9;wHfbC%O69+vw*SSq*k@gB`wiQqj+l*)(8*AW`Si&=r8$-G!H+1<J-5QQp9`tf
zgp)xwu&EuP`j2dr&WhuT9e1&F{8m=d48{%d0ocD!2!Od|c=E84tMt5aa44?lV&?`u
zat#=~z8O^hT9O!h-|t03MR6jSQ2T3gC7|#9Uu^9ygQt|N`{Cmu+9%-kT?B`A2&lS#
zE56^pFEgW6W<jTn5C)qHb%^$*{f)n;atfulh*Pyx5tO?GOfSIGcNG+&ApNN#Wuhdu
zY<!qP^+2Gg0m*bQdoU%jGB9ZFaN@`ed@fgRkAypnBd#g`4q@&=*!!H4J`b5Ic^7U#
zepG}fkHYH?y^245>~kbbmT+f4uI?PyO(CUB@-BA45j?$wS!iLa6?C#rFfopameAlN
z67NLAHX;_}D$se*!w5OX&S968XwM{X`R5I8|I9Lv{!WL_e&i%iYRosr$7yB3>b~Z-
zZTnwri+$GPvZ#I?@U~qCtifO%aNj;=8|eH`VbY!-oxf~Doj>O`Ng9F8Jp7eYp&h2g
zqI}~8C5r-<nr#;HbOeP&@r98HvoL|$n0v2%H>zXgfx}#Bm_8s()P+t0-#iM-X({;|
zX4>m&nOr|`y1}2GGoIvTi0!}nrfx(^;$1l=aHja$=)kN-WN7K-&{)KkRrk=wzMwa)
zR2j1Tr7!W5A;TUi$(8CDkp4<_fef#*9okMPLx<9!7%8~$fj|%lQ3O#SM4=FbLKFyr
zDU%z@QG^?GEW{MAZDerC7*i%Z<<%UNt$zW+-tL4_LU-H<*9CB;!v4VFRQOs9J5s?N
zfzC>yu5hkk>bufkVzHYu6*uVWJWn2ej>dSEO!Ajqr>CCxR)u<9c=CxBU-?W%W1+?V
zN=lep-25_Pml0av+KA~OW(o8p=yOQ^9JHQ?&Jx;QMwgZ#hvtEC4!)tujrWgp@{4Vb
z9!XiO)CRWD8`Alog`Iy<==|lp>-<l5{Cewvon(F;u!qNmM%O7XMjfJAVNpA%Wexmo
zA<idQX<4q=bt_|)T`ab8qP+&4D(bGe6<BBqOYNcpwOZ=^OAU>4(qChXDOvnd1T<H^
zPO%K92<8NWi3(4AmniuPXuDJmC{R&kQjwj7M9!2|xO0P6dqJj?VocDV+xIs3>8ce1
z{c61TUQUtg^%n<~`~Y!-QNqC0ulS6ou5>P3?6jY}ga)FxAn)Z}$XkUn!U%*_2x}16
zK;j~U$br1)Utr7HIxD&zh?K{2h<%t98G<p2O?$z-{Jf#?c?<W4Mbh<_8hk5*xoctS
zNmyABvaa@~G5v0dMR;)uZr^)1pZez43P-{^jIuBCq^U8sufiAF%RK!D!mGaA;GI8E
z;p+Pn?29Lm<t1dtGHU0Mu@#7xkZc7OpNILA=u!r4hjzeZ5!foy5hf?c*ts_%e>}rX
z6cSSp51#;RN!$NI6aLoG_TLl|kZgePw+U*Cb+DOF|F7cj%$;uS$+<@*t`p&Cv2Xeg
zx^0N6itaF216dBOL^!!v1bs_ET2tw5y(<Dm$+O2vp?6m^(A+ChC;`IKeXpz7c|lhc
zw+yb^BgPf&ZZ(3;7o;`z7K>sqrS@M}c_fx(v>{hN9S&RCZ|zHeKR`(<>&f<di-C}r
zy8#aE7Em2<1XdSX+TUsz7^M;w-)p@nBqzXjN_k_MXao^NV^Eod$^?W>2x>x5DSMHo
zG)636+gV+8srHl-q9BnD91cZ@y2@jr@Ra~wX$%C0*VG)pF%7}2&^V@?n5XEBXsI+P
zOY4Ph&Q;C5%#2Mj*E&kjFxYYoaJKVa1Xi4Z>I958`TSDK%D>Ec%eMj^d}k9ocMP(u
zSZ<&h63xTP5}a6oxfFLiA!?^+RwHRm@$B<ezVYphuRPb{t0%_EXKUDUy|P{~!r%F7
z`)`!6w^eQb)4YZeV8SN=9v*CqRYJ0^wI+cH$vO#*N`smD0Xl6*G$FJ?u+Fg1wzS(y
zlJ?m6MG{a1y@H^pL#+FPlwZ!s4Vd!ka$O<s6r1Z@yV!y!Du_{xDL3}@?1OvD@{TF-
z4v@N(<BmagBf=_n<6w!8^!5Bw68{Dj{$NG0xB-!_x2;fyEP%xhsRV|fzrW&7h6sSg
z%sw<li@tSKNsg3eKB+*@$j1rRLAs!{4;RNKh#?qLD$`J#7UD^$G?h3kx+zu!JDdz;
zLj*;uNW{<*BS8cB{Qz!`U>w*NLJ}%3)Zm5*r8+LO79gY~M7knja@LaP6?QjwaQMi#
zY0|`!j(Fx3zlZrWU_Pi}c4sX9{vu1M<GbHIja^#6#3@GFxFCi31db{8s1mgTj(&TL
zkA1btmtSb|{F1N`1azVZH(g;~D+8{Dhlfu9MwJ0>AD#b3EC0($=f8IC?*@;Vi%8Qp
zGn4zN2V<nw3~dH<UD06AQz1>YY&Dl8zLM>)<=y}{eC~;2%Ie=Hf?Lp{4c;vRmQe@;
z2qGZ}!I;6k(mLoQrD+dfyMiP|OP#D}Rre}<)uPgtp(McdOnQ3Kv7r^e+9UDxIST`#
zo(!!G?h^%voB~%JIqmIdD4)mlI0agG+Gmh2mK=xPZUTzWYf7$yy5jx0Ovw{Pm!W+W
z7Ap|fi>^RC<)}^z!K4s36=?`s6<m3|3ui^???LE|E+Ui{LiqPq_)C%Fa0YW3j735w
z%DyX=$LFQg+7GRVE|nKM$EL_^iYXH@bEZ8K^71`;y>C6)iqX9dKJ>>6Ty=HCEw7s(
zpI?TmLp4K==GeoQurtO-Ki=TKeLClPb)*xH?reob>MSQg!4;7+T?H3A;cs)V_07}y
zpW}WlmmV4Lk{$tgo&R>y`LA8Mu%6^=Eu#{ng0+^(u^rUwV2!XOLbqGYs`CVFE;w~1
zajYlpE0fGX${=3G+oY)U^Ohs;6oJqfh(aZb3h7uBLlBnM`=z}tLGe8V+MVJQvYDc}
z5C!0D;hDc`3crf+uYJ>=fy|)iq*uIugBe)%4te+wOn=JfwLM!}S+(hJ5RC@vh5mS6
zAP6AumWzwZ{R5@~@i;_A3a7>nxU9!TaOAd}4mian(CvcG0WSz)C<JvSZbCe%L^BXi
zL(l|ifK(NY1*sIl-(U!E)KR`tg@0_pwt==%mBJD5wmp_-z8;b!g>h0b#S!8_h$Cp$
zn*>DQ3=+ti&s!<;uBTdcs^eY$<iB^g?*0Y=9cViwf$XJ}xKrhSd}N9bd?sUYM~##5
z1g#{b-*gZiQoP9eboO57&!*}8R|S6Y9RLrHOC?zp6H|#QOpb$C!%8OP-NFP&18~+1
zbpQ$-x+w#{h`}a~tfk~_aGk;_P!Ou2P^&@|DYXhjWrdt}4V?tqE0#2IMZ3RZs82&Y
zCS*C}RtA3gJ)&RPrq>}^p7u2NFEjV)nevoQfW6T`**=#cl3%~QZ_AEC`Ivs!zzz8+
z>M87t-aKA}&_LcJ5K0mJD?18l-{R9s>sS|;6w(J17{VwZ3<IKA2xEhZK#j$gdkb6w
zX-7y-6g&e{fv66ZNu@d|RCWkK6M}It4bX~1!vRm@B@qHurXmPepxuTYV~&{$EMmy=
zBGHKqG-IJwfl6#kM#uUpyx#h11zxO8P=9`fC%>3*^F1MM+2ZChqGihmKiS{|pBCo!
zjqyTKFKmxtwds+Ehfe_3Hv+iab^aSA{9S0B|CYA>SN)7)f(9$e5)(DZ+d?gepbIv4
zNKG)2D}x~e?Rp~Q3FI9|mJ|WY7>JEhsR;E*sD%&*rEIVxw3cCM(X!lLp_6t|o1?g*
z4Q;9<?Itr<g+!6ib^Ri|SfJDQ8WL1ppLZ}Y_K{TtJ{i*Q_jU*L<$erT_ou7`E|UlC
z69=_40U8<!NNL%NlqNmJD8ZPb3P&6gN<s7+gO~o?G54)yoLxa(Rvb$)h#HIu2~12B
zRj5=eR4O51H6W}OT@fc1?QK-<79E1_g0LJZK}9fis5F$QE<_Vb*eE*ZS)$k$L<-4_
zAv+0;+_C%M5_@V>1g?UsT0&EBH7W)UjtifE;Uu|cLmN`geLkIft@Toeg*;>_8t1Vu
zD>uC&#I~1+7c-vxW}RRER7iU^<b|YOBzZ$5KlM8Q?M3+W3BdNp1dwdPyr1>%m%iwH
z{Vzb<f5Y?s%^a1KW-cbD7Bx70@&u`EQ4gAoJ4;=ar4~pFB<%Ig4K`O?RuIy9L4Q1k
zS{33Ds(~R6ia?uop}hnvOTyA}LMv&LxE4;j2(H*aF9I5&s&p0%-MMipy9G&yTJLV)
zv9G-r<ZzLy(l@u^lv#go@lXHfbTBUHE!trynP6y3-|*`Wwg(Q6A<E}4(lb2-=L&*!
z2-PV=asuX`Z)0^CG%r*G>Od{3g`a<(DM=!%EQbUpA`B{2Ds?Kg3UM_gs073jgrS1~
ztQPBotrPN&lAj!KFC;AXGxSP<C<HmKup+$T#*`h`wYXzfz+Bp3u^V8;ppjuZN;tHq
z%k!Upo<PD<#UTUU;~E2pAXp3CdYz}fX|Y)a$-B5^;Ws~3W1#|zQ3FZJoe-;s{hJ&3
z&sW?3g8TZfz3nd}CK#9UR>1Jm<br#6oa=0X+-1}o!m-24JazbSUUBVxES+>595Xz-
zq_n$AmXtf_#Ss}H2#Ps=C4^ci#Gz6Nixzv9LVF$-mn;iQIh{_I#C6DNqs1z}BB1t1
ziUuS=ObDuUS1hp$3THeD3E=RmSt$eXYDd4p-?B>MzB-BMyZkvpt*-t#hFk-O%z;jA
z`4=+6fecZGyp;k9TVBLrLI^8x;-n)>x&+4HBt%`lnygzo7Znc29dg$qcS4#4tSrY!
zP$3L!#FZ+QN=&sD5mg5x17}>}#wf+;#bts7g~GrDg;`Lx5>T5<`OfcHq5Z9Zv6|(I
z1B(QchGi3wc7?Io4qfT;%_ED9*C)uuZVJz9C5rgwO9>~BR@fak`1-emFTP+f2WqTz
z#kc!Cd;-8$>;Sx^2!HEo`){=J-%dLJEgF@mU_=NTUB)VPKKO+{;I12PVs>H-w~|qr
zF|2eUvE^nqh0q9L2!SaAo~n{(&{}dVEIJk!GgjJNI$06;ElFv@V-N{3^gM#g8-HL5
z_MeGB18iE5_QaGv`NNKA{q253NldS5cSHT-;rYG}ZQ~o({-5S&>F)?&b*Erp-cRZB
zJ1|nz(vLs{F$NP1=Ko?Goh8L77*n+TRm{*T1XGSyN*#q1TKPhos5ohZYm+C7BuT)E
zi3!6haa1FYD@1WbT#bk;0YL<D)j?d`(W3Hw<f+m*Y5CFH=h%B<iBEiNH#Gu+R*T76
zmzgUQY@<bR%PfERpT5P>V>z>jYAm{yHMRZEbP}e4@Z3^|Cm#!$xw*n`f85fIBUUsX
zC=4$6VjtG!@V61d-{y2$FGSm4JPFXl<Dwz>m3<-Y&slZV{9l2#9A|3Rl|1|0VgB6*
z{{uhqwx482BVswpsaK_3KWqBey;W!>j`?L+Sa2*X=Cs-g-Ly-ZC*+y}N@!y0VUx&I
zh@y}n3J@1yb3rA<NkT_k<PsKBbYl<|oGUBXl5i+P2|!V$yMYwXY2g&uYw7n|_iiYV
zmyCag7XFA1kqlQ^@(v!SLp}higX7h+;)OwXqBjB%;}8QuR3-}<2mz{LxhzO97>oqv
zXDIECdj?9BtB0M#xh_sSIL!fvI)}|Vbh9p<mLL)l1R<3uCI~9T)tI<y2x7qnLRFR7
z!12Z#67IYz;CKFDKg;bp&Dhad3D~m|GqbY5_zeMzFLn9lfAa{HN`)-SUS=q@zWx%d
zs9~Z}=eK_^;47bXeCByeXJ3<6;;ViSp8#x88^G)Qx2Mj3D+zytU_aoj>!7_VgU}yG
z5rGP!Mg%S*%q!HYhTY8>zWLna{K^M@g}bl)0VW#<3SwK7V**Q>DN8NK+(ORWlB1JY
zGMj_uMcZ4$BH)J=f}q%JWAjB)`x4#mJXvRvG;8DNQmf9gf9kb3H_fp$!S;-UjFc?-
zV!dw>Y_;!6-Y4jlL408AtE&_P11CRSE#vEt0fx+h3PEJKT3Cl#{kn=&t2)$mFtTcI
zpD|Jde*p;$CUlsf^zsjbVzH6c;^zoJ4I;f{pd3J`5Qq?<#9=^S#tN<g7OSrKV^f^V
zP-k&!u{I;=rUaz8q(Z(D5=RkX%`n~!*gbBTODp{PpVbKon5jF+l_-n|1%l%-lXvaq
zy}$4Qo_=nggL`(+4a((9taT;q%g^FGS31)To}5ql%8M46t+QPAb@Y;6>~pc}{Ll1w
z9qP&X1Yny5|I-@*UHG>DMgzas`E$xH_Wu8i4h8$w^;b2DiHHfa0FwoTNkEW>Xy$Oa
zBa(<pSi=Mrma-+%w1dU+^!(>|>9fzUZ~6^Ph4)eoW{4^gYLqN@q^V#tLkLvDurR>E
zlIJZldz5x^l&*b&u02L#k7G4Kw1SuzCB^9qCtE9=SbBuJulhfjjrXvSW>`v30Y|^`
zH&To#q_i58va6w|O8A_vs^$lhz``V_*DcVV1hDKDX#eM2(W>v801f1X%0TM3${<L!
zzqPR3hFm%z+9H7|IgVliOi+vwj0&PfN2T}q0#gM35TzO#rkjS)bP<6ltYX3d5lC|(
z$r|Lj!#am^jyx|6l!`u$7S9tFONcrM&#efDTZXYJj8`1(q#$c%&JvG14!mZPfBm5k
z@*BVL1$H#2$i}sA0X%x(kh63FgtiT6kJpH&gv_3c>3@;v{5Kr<*HdV1jPSR<w*ToK
z??(V09_O`%KOEvu4fG;HJ*pCGg)of>(tt3D3DcM`S3;wV)ho>GsIzZhliA%7v$G+4
zX2%)d*(9o0u-%;b!;5_FTPOI$<1g^Y7r((1bHBq>^eHClS5nP)QjNxe5bJVM*CDrU
zvTTXmcF1gobqP*8XyHmj5E{Z-L?x^ukszT%Bt+d5$--{B%SU<Y#oy+RYyT#R8j{j|
zPKNw;Oi2U`q+r@x=laGyx@uleU+1sAS$`S0v4ajkVSnrTT7P=7z@B2DSKo+x`63}5
zO0Qi>04$RR)87hMbT5LiFb0ya92o?r-?b1m#m|c=Dt;rxqC^HJ#*`y-zt7<#j}j75
zt&GuZ?qp_iKU0&tnHt|g7>wa;NR~mjv<9}CW6Mo{z4OKxr4|U)NT`MoD1}i_V7O*q
z%%Qt7e)ji&mw)@8KF3UBC*jV3RNR&{B^Ai*#>NUB9zFqJ6di!q`EO61|JfdIPHExm
zX+wS-M#K^m+nC5!h`JFbiHY-wiV0}eW2UBrU3<pZb7hk&4%XPeyTY!i2Gf&usMnD+
zMCKi>MMFCc>COe1)UhYn%hfju-+xEIH{N`L4}bY_KKSWJ`R3urXvB4L&9PeSpI1qW
z_iGG6P{CAcgi%BgRWPANgA@t6I66ZK%mCHdCggiqTzZaH`fX~JtH`@KY6dJjEp_%r
zdL%lFQLywX`GF*`SLx%ltnLRR1GM+Eh2x&-xAJ>_0i}hont^wK=&DtyGPDV}PXv^~
zTH<0cQ0W0+z!)u*41r<-Q|vn^I}}Ex4E{w2AT$serCEzuY=4a>zx8`mqb4qD&}uJn
zZ1Gz>^TMYI!hmX}!gynn>E;YO#t$(&eu#;&8RDSccPeyR_y8ms1mdWLhRHfiRfYXK
z0(MSVzP<bv-v0~#lh1x}j_Jvr1Tz_FWQPLudaiZO>JZ2}+x{D^{JqY9BZR-x{sw&l
zz_xY*P_Ogf@VtNPb^dbNU_ZFX8gZQp6^xBBX$86gbRfzM%}U73M3dPoYV6-%;n0;8
zuDp7J-3P~+nye57HH?k19mB#=;l#56Pkc!@HXk#$9I&!t=%$851&hInqRtUvnW{SW
z&m7`AZoZDU-uim}>!&}?2R{Bus#K^>HORshR2zj>+~lZ9aJta{RBqL@P*&af6)lGS
zvO+W&ksVQ%R=&Z^j;m;8r8j+VXOEF`@t8qynEyX}e;RCAcHQ@ZzqR)n?(pW9b7svm
zPz4YL6b3>BNRTvVQKDp0REv@&QgqmEck~BGxZAS3J36|<?N&!9q9eK$AzPu4tyU;x
zQ-di|q)6J}h=G_<g_`H8oL=Ue-yP05d$0bm_de&`tO8IIz(Uo#5jQgP<-60l_nx)Z
zfBlD~ABekqP1AW_>X(xJVso$%ltV23ZD3H`@2Ay4yWi|J5MH~lfc7)q13DqC98fTk
z0}%H9@nu>9xly{Ng0`s%`~J*8mMP0iaP|6g<aWgP<SN;c2X9eVqK!u@Pc^T&y8ApY
zZ#|00XDH2>@nD&amD8MBKf~$ubDY{Z!P?3Sr7aj4Ls5V+b7u2veEO+p`P}1Q<{Qsl
z#L6;f&aTj`%&Ek^s_m}4fnxbh3(v96|4r)rzuWu%Z`XVsHvn&EA>i@lZ3X4WA|(AX
z-~D}9loUF|x&kvV&}ojTa<qoBDA`yoxaHOnx7{@6wmX)%>#kKUTv%m!bBL&gL(62Z
zVCP!F<Btkk*9=#7EeHF;{=_hGLZcq1f{O1RIk?w^7Q_g1pK&-7UVKUU;>C({qcJ~x
z$IozPe3rleJO6^iodb$f4NZ2$tH%%C=o#KCpy_84X?KGPtm9~Ui8FwekVUXyvJV)E
z<~pseU)$r^{~0~WpSWmr)WZ6T@d5sCC;OxV@X|URc1A+d`r5Y5fuznPO!s|Jl!=PQ
zZt4e<nT{AJ9dR(IDx!BlFDGGr9qdbUjFi}c$7>aSDGOIK5C*_V*U)Aoh6y#yW=FiR
z^)%03dJ54Dn-vW5oIwHB)_850)inpRDf7xv<^^kO>y#@6(`<5l+Bm)(uK?c3#phV(
z|J~L3FHZK-^GFXxrpR(~Ey(-;+mz^}z|S(MELmQ#zFKhR<{@|7KIT1luXE?^o18zl
z!urwx@g>YNc6SXsPg$P)oaO5Eoa+ac{kbryVBRQ|SA5#%df#)q>9q5jB6g#mpM_<T
zFmr|{_mt;$j(Gp+5AnBuc#VJXyZ@ACYlJx=`0Oys3-whB|Eqz?3ywNrLN-d(>|;#u
z7*GQ~7E*lAbFXK(v*6?ZioZ+8<ZoR7b-@u(RD1VjTCPAB`<wg#7Aa5Kq6E?%&Nd7n
z<^x3pz}PMdIanRj@)m5!P$Cm0v!VEpN5aw)Wa2QAVZ?^?!!FjSJ+@wI$U*Xu4Nypl
z@j2>3f?iWO)WM{2RP!3dk>?r9gJm|$5-BZ>shLx~X`TP;pZt$?{%?Ps|7&><%y9#7
zd^x@>Xzdp^_FX|O?SRY=kUGcAMl{omda4*xG9C{(dt%J3H!X9|ZEL*my{EYCrgb*f
zmk?Xx4-I=e!nG$ok6(u?ds%?+Cx%Ha%%f+%N-&g35xv+THw)`<gIC4Jv^*t9>9p$w
z+6F*-`Y%;QjA1T0pSwKep3VFC_y624@K65WzsK&bVm1{oM{nZDDaPc~Zi-}JGodjz
z!0pnL^!24k+LQnJ7~tchyw7)@0FqpclV?DiSl5#cru&k9qF_AzdBFJY-^rn{*BY3}
z0Z1%BYYk#OCMOyL#pJ-`X%MpnjDaFkid+~Dl;r{B)*-mqROt;gI$rhPsvalvVEdN^
z6C$EBVQI3~Y8k+_p$D(_8D4BRSXkv8Q}>Q9#|XeXVDkU&>-^s=;qMLY{pGD70e!P1
za?=%g>6d*W&vFVGU|mTwEvb)$W|pDOuw0HgePV-~?povSTUNN|mNVRTVT02fOO#oO
zZ!(T%!q!F4W8V<2?!xXq991x>U|I>a4+UJL3HosX5sNB#Of2xhU?vrF9}AxLlJtCP
zT700ed%7LH^nSl3*ku`yU)$xv@_qc+gMWeF{=#oC+CNRb_7Yy}*BM0}kC=Fj&2X*;
zsmN?b9cp=eU7h-&EzER=Mt#qJ7HoU9=i*1F3`h*QR*u&T{YlV#G#Qef+n{t@!_Y*S
zZcCAfh7y|qV?eBu<&fn;4Iu`M?KLD4R|ZzG7K$7O1(Z4D*0<}DZ$8C-bB<3UC$|6g
zEHo1B|4Uko=&P!`Z^VNZn*-^!x$+(6_#6}d-m=O6E!q1Y%K(pI|96?rzds)>?Cu2y
z`H0L9F!c~W%V}nYY9<V1z{#Z{H{HC-Z8x3d?pscA>xGk?J+;YjID#hQa3btZJTE`)
z+1XbPrZBAxv&Jy5p{f<{h!cAxo0(LN49*8!S*1r`)3|;RT{Hv|Y41m4eqH)`+I#zW
z`$Vqyt^IEF`Y}1r?HzD_<6}JZo<qL;=w~UjGt9;>(qi1-Hjt_p_-Z`H8l0~|YK+Ze
zF-=7(AQ{Glq`kf<vb6~Ak@|4-CjX@Or-S%41R9C@wsA0#IM_7~@e?E3xd3+fKVqbF
z5;PrG!ALOqu{OvbP3AF$MiO9Gbd5x!papBAW<Lu^z><Z+xP|8D^^(`RRmnH`JexKK
zs(rU|n`6Df`kwB=NaQmFe}tK<@&1*L6R-ANm9+M_p>cTQu>bcW;qQA{=l`vZfOykB
zk;e_d@#Sp|>B|kA{O&_P$j0P;3912ZKA@Qxs>U!bhMZm<bK6bp+<nUl?z{6m=g*&H
zX}p4}Wmdz%RCwZw<6xp3O&cb2VKx)0N~mk0@rwGc@c7^Wr9fK0J`;+vfYXrko>JPR
zH`OVN4D~+YFctY5hdNEKvuz3@yS~>5X#W_fAU5OD{vr2W_+hT@UgG78&yr{B)aCB$
zI4Pt;;z9#ZS9mi+%o0Xj#O!<fbdwzPI<g=1-TczNze6uNe}Kf~@3H!O$Uu8vZTjCU
z=idd-`eX<sJt<*g^k<R%Z(~1XW6XgK4UAfCErUY@f?zWx%alQ;tPNq1EruWQoe~R+
zFz^HHBxiomFrCkFt|F5RBj9|6H5OwsOl~N1!4{TmkYP)MWJ)bcg=bpTulnwCV}$Yz
zyqM$5@#VMyc*`e$c~vpbpQ+COEg=EDKG^^D-Ch<-S1S0{2)PWgehBjcZeppY8I2#X
zG+5%osda9@{{;8kc9uJCI>U*Lb;jcXSmCe|E+4_sMaSW!;b<yU71R~fH8gXH#w|UY
zS!rtuP8W-?rh=`~Lj*dATzf{4y=)s&(0b>UquuUbyGEeBAMF?Xv`*;G;|7Bl&-J4@
z58d@MT-*8oGT&`5CkA*s`xdbOE8h$CAx~I+gV#E+=vCXDy7X27#t>Qf?ZJqRjt|ez
zOU%$o*#L<|7)!Y7E7t|uz3;LRkszH9fb_ub7z!jkQy`H}?q}jvj7LS$=mu!4Vlop~
z86Il{6XE|XQ}Rq14`FT8FtCcjbY#spGsS+B??=%L&|Sy={yuA?WgfV2hC9xk<ie>{
z)<y+J95oe_*@WwRhg{w}VC(uJTe}ku_iLKDL44pT40Fq<%#lK%1WKVcP>aUKARRDS
zkcGC^%%ZR3`~7x;{oew@-rG{=|5{cZ$18y2%R8)L>fq1-=gVw>P711-C6fWmqa{wB
zSm(A|PICLr7r6b_vz$1yPLW%j8jfc0($q6MROXeZnnE>$DoyxvV)lF@sRssrs8by&
zFLeTGBG>3opNLr6%G2VcD*?JsM6-6#H!Y|g&H>S4mt?e)NPo!(M|(|1+c5;>p}l{l
z)$vbVjWKI{;GRFvAAaSZFg#enuhrd)e68<*QM`H@t+6&h@?v5dU^3fDp@9m%-zB9Y
z-h(Pkv;md`XDeZ^AB}!gbs;ji^<<C~11w;A#lDpQcFGPB4WT}9moGMPF${_i3CGC>
zSkmtYL?EpWj0sY~+$v@6St;T4X2qG!V0I*L8N%Al-MJQ+y@G?S16IbCpZVy=_@M_L
z;{3)YMr~+X)R7raQNXZl7!Evn(IDBJ%1t?__Src);_CJR7q1=g;?)^fF3z~Nb;SOq
z3H7|fsv|25qd|s@Gjs^PFjNL=l&W^Ix6xN{3KlJAj?seS%W(tnCY=C|jefozAexzy
zqFzUjMpXNPYb?WI$(b{o+<yB7?!4m`Zn<!tjrCQsTxcp`Uc=VDW8OHbxnn*R<`byr
z(A40fM>~W#SoH}46}<Pc21{FXY18I9BOL8jbB&X3zc_o*)(tOB{32;^yzxZZk^I8_
zm=@O8g_EteWII|!ptmY$$KQ;@`2icN_jC7cpWx}IKSw!Oryg938a{nZpCOfif_Q3j
z8{lta1LSXfcMB7d0BOmI0nS$+HUFubqH72w@g}@PGMsPGfh6|}k;vL12k2tPKo132
zkRtXaf9?PIVESWynEtca9E5;@R{Nh60J(uY6Gj7A&EfnlGnO|T*6Ftx++OeZCU8XZ
zx}?6MP)+&Rd+z7QKKMgyuAF9nQt{PiD;hr!<j9mwV1hMqZY{$iV^|DX9;~rEKE;Jq
z$9rySC|4SERG~U&GC$(V;hYyQ9rDtX+r0G59+xl9xPEQM;iZOoT`{s?201z^XiB9n
zpf*ZvVOF_UWC$!|Fn?2vvty&5?=0c(RX70eFjK(nomu?fPCEa$C*d!b5<6R=Iml^d
zV>VV#a_2+mx%a)daMLa4SzkUuky)Gybq(8x4f9HADwxk;K8I=^;C$~E-R{yJ-Y3Z2
zN0OcIN$?`XF4~9RQ%H@pQoQtI-^-y-&4Eubzc)(p(QaC%54TD`1aCnCn3@%Oq{sGT
z?6vj4ZST<thtmn~x#dUM*?WQQovRe5R%o(=*KjiF40Sw0tu;d%cl<V1RTI|%EW+;e
zQvbq!-bbx}x7(MVR1hz%SAWNm&^F8`<N@3$e3O<|FFi9LOb<0k<V2I;1VN;W1Gdo!
z$e8GrAd%1*Nr0JE@(e}=tPLIOw^Wb^HQ%eByI;@uCYm3K#U2bexVF#9rDcBRQ-6WG
z&pp7-{)|g6?&Fj$jK~Hr29sioCH&uEZOEnuvkz7>3JYcK8J5a;P_we+SXo=+>`Bj^
z@Ac?MYjmkX)v>#G!1kp>o`3d`mtL51^@RyLFIDVq%{jO};b>k_8;_1MST1P_m|Cc;
zGIt*5Z}i7pe1C4tsQYf|{NI{E>$^?(dn2&FyyLy*j#mKhHsD``WpkE#dq{H#=T6<k
zhkoRPJowRjIel&n5~lg-p=W>6P*qUXhS?-Q`gNta27JS!U%Uv;ck;PbN_Rsu(5pY8
zArM&%{LzlRpO*S*1<)q}ri;IUKhSrq>st-KQq|o{j!da{Jsv=B0e(X>BB*+d1Xsan
z1rOZ)GyMJ+{#)GjG3Hc-m-%ZV0*V1ugU5%7Srds)+u|Cmc4=Ywb|R0@+w{nMtu)WG
zpz&{a_PymwI(RJ$#B_>))=D@<5XZxnf^3bZ^goSu#W9&t;@&?Ggg}!gMtx{VEP@pc
zMK=o)z)=pH%X6|bHR?Qt&E68KU#<iE_JG6PL+-!jK7Q;&e}ODt=IP4^)EeZYrnN{2
zO{|MXMH2fk54flhu|@*bLWR0E%pB~`bFLi-*(E3*^OU(V7&wMYQ%1{kmevN`esYbw
zepFypQCp#P#m=sB_2Qh1&+PKzSFiKpllxq~IOpJU&HnU=xp>UD#IBUMk)g_AW|X-q
z(^>N>`4ajH4})Xpg5%4(UIuuq^MB>-m;8B}oh1e`=7T@*!#wn{@8jlsg`-2*y6zB#
z`2^<EQ1It7s4I_eSV*BuIqp7I;C|t!&!TV5W%>;KH05hMy=yOeHvE?)L%a5I6A3U3
z<8cx;{ZpW{yZeQLuf1a+y~Tj`6c5@t?`WU)-YNqU5pj`wFl%Ov%X8dw+Yj>fZ~QLf
zy>(c-{Msaz#zc-oh0P;cp2f-Brg+_$ZYSEaRlf0E?h3i|kph*Tav*sC&>}CbD_}b4
z$uuAl0dEKZTKxJ%H^b=kCs77yGJ|B0<)N9;$QeinQB3jy5XwRsWx|P5Ggz8JBUoec
z3$XWV|K6mHf8octYcM<7=Z7EsBp<r_Q*0m1ne6YOV!Fl(!MHH(ySUQGj9@jOK~4=8
z!6RhRP)dDYJfWz1YM?SOtp#av>|ueu0=X!8<|$20SvHJU=Zw$HSvlv}ytU!J_phM8
zcr)HR4tFc|E={@k+z~H5xyz*|_PO@#jDu@6`-c^kDs}E@hL&b%m=}g4BUGZyYmaw&
z!wR8wcxq9$9tL!*^M5_(`&az+SO)mECbhl2bpCI)@V|Aif7YyUaJ}Nh(vVMl>{od2
zht~Pvk9+oZ9hWW&%~YrkmAVQOzH7o{q&{ACkwxy?=`&8zz5^)b1~Zv{A*VNGFBIrj
z>erpfRDH+lXJJ4MPs4X_X{cSgC}(U5f{OO0XH6$?SzHIGE_(4VyyUdD@X1@igBT8{
zN8Eh!<6JrUG&|cDDTW)ka_3b)j|=ZuEbfh;1O&i^VkvzkfPoO3;}#w3ba7wb+Woec
zz&%6&?KK8q^oC-f3x2<g62bo0rl%&5-cgho0ZbMe7sbbLfQVwmB%_oWU=3tO8RyDo
z;W%~60hFG?2$=}A$m{;z1e*gTua=l@)p&QvkALK^aOe5&<Hc)7)IPjdBGEaKPI4$F
zS`@2^ib%o6Oavbrfbf0?d8wE1IkhSn7km(`3CKp^Mg+A(rHZKps|7M0VE2~EUktLx
zqHvVMIir<|(TSSzshZW3H8<a-=wAdaYM3?bUY&9Au_G=$zQg55_qhD@F1wee99)@m
z*m&yPpu-$DGE7R#L1vi()45-0xTVE!ZZtxYKZAY$>xcc{Y~g=H=lfS3w2oB($CvNL
z_DFN8?VLg~-goz3N3wP9eyC==V)@!<gy}vsQ>C7RI`Hw@7InR`0iXw=CKH+H&D%2g
zq3^)gxd?VsrS=ek&VjGT{HMP*=%yM?ne<{7NPJy??qfP%mqM4OT^}c7A9v)w<r(w~
zqP`MpjRzsDEqbnbqRi%w`|tW$KKs>wi0*mhWQl&$Re-ckJO+=`X@Je02DZG_ZuKF-
zG$`!YwYB<}G*PF_fW+`udc{AI^xE(r?TmbS<jam2A>TA+TlAYd@)=_=8Hn|P1SpY(
zVWK-=G}Z~q0mT|9GgvL)?An~Q3l;bwnK7XOctfi#$g2@YTNSyj`MK}^WmblF^TM^g
zR;ADq8`G&=z=}bf(xxGI`peKD#AE8x=Q^$i8U^D!HH7sN)(43kDH0=(l}x}IkCQ<B
zo2ej`L1sg;y(P*^LYaAT+mPjR2IHF1i8;fw4IAgiY<zr!`+xc-yjrw|gKJZEp4{Qm
zBfDJs+74Hr-e>pXgx#$f`}IEa%rGx3^HISx&p0%Oi3m;YUr9EMh}N;;@$m}aot+B!
zuGRU+lk{u}S7p5C-apS|vc|YMV!SlwrN=#P9$0qX8PqGTjwifCiu3d;^$o6onjl8s
zomhNF-fOS1XopFv8?seidDp37(7s)(_SymMtsU^Md_NM3o$Pd_i>+0aj$m!V>uoKA
z7wm7P+xsW-pzrY$v{MZThFU9zc8&Y)`f<Mc$iJjKSi`Mc`PNfZL?)cCAhPDg#u(jb
zMJQH6o{^+Ej+WOT{o<aAbT0>>P4#QJ0ooEN7ZHTM`r(xnh>kN5WrEVB7A7*FHDKd&
zHxUUiiOXO+a$+z6Qi@U;S>fD;Dfvnbx{MgpH7u{`d($Z{viX>!tqG%i%+Gz|SIEs-
zuI%qd>1TQ|DTy!^_vDli9S$2HixJU%AB2Por1#zT5D-Hs_KsxO6po3NUUNVoHwL%F
z@E#ZwoGl%W8knd+oxwcE92l}op8R1LlnsMn#c*Xpxmhtd=~y{4V(q~tZvEu#@$2B2
zT&>xDcAv|SZ?pCARW3iV!}iNZ>|dX<KbvuAg!yp5Y*aAGg#!^LjfT%wpB<wyvie=C
z^Z!=oTRm<7jxXP9&5$Bw=wZ(K_$HQz?`QX5i{<$`yIXK{p!f!SB7nIrK(7nOkzRq;
z9*p0U)}_6<5B8~|vamN!CmOGd6NvUxdHSt|rWwB5!KV|jwxh1;5&lBKS5KJc`porS
zq@Bbt8;wkFy@4pFy_2E#nt%nLfW#&6U2`HfV_Hu+x%z(2oPC@t7ayj~H)w`CH|z{!
z{BE=-c6gk3IICzz#G->6Qfs|y7S#{*_5A4+r9K1$wL1T9dNqAwpN7DoZu(ycDWo(1
zkA*&=BBBc%dohY>8y4S^7HxC_l#GZ9q~8sYyR}N03!_q59eGY&IEqgoi)w+0D80td
zHb6dGW`ApsrDDv_e*Z6noZ!m-9*B)dQEV&3gl1N>qddr>a=^vH?<Kex`o7Yk4N~fq
z6Q-4FO3XS4e>zExK=_@;NZ@$5sLJr639z29M#zFBGh7|c!rZ`-w`9{1cDh7<#gNmG
z8yA{_jf!G(PI;nc>9nwP-x@c6bQ9$sRF%o~342dp=knLDap~bLu6|>eYcI{&xxUY#
zYd9(g%$CO-3^NV{_U7)`df*rVcqecG-t9X7#g0{6NnKYgt)4-hAf{q(ch2)qj#*xV
zdftuUN?>iPizGSUUxw=qdsl7Ae6(`D&V8?S;`6%TUfa)LOMxxgv$5@K{(aA<UX$;i
zkJG34sOj%n8YKeZjrwWn3}&P^JQ^zz?T8h@6HQ?{gyWm0(FGcR*C>f$I-7Fmg&*Vk
z_H)!bbFy+7Zw|f*A0V_FP18UQRPlL5*u4EaQ5_&1p)&3BRr?tL+D`q38%TqxXF?Vv
zg{iPf&+kBPOgxpY=`peROElI`E`VwB56Onn1~?1r46)K702veo3`)c4jf%AsGh8EN
z(tS?kb$oBi`6`Fk_E{=M{M1K&mBy{HJ=u%sPP(ND3WXkGk{ZU;A_r2Z32(QA29X%q
zj0qe7m)0$Qu>q50ibNN7Bod67d~5<d3Dt>>5`mCud|Z$Ch!99b2jcx08yjcqXpCbf
zVAXOk9bqqx$u5Nur7~;C^NM^>lW)u!oPnh?Lzdoqp7S5Q8PyD}r|ds>$n{6B@bcGQ
z;?l$0TzziB#jE>VZ9Ip|%WMw|uGRV-p8VggI{$Bnv>rDA-)ow;cdgEU;qOiWN12Ur
zjYnzNzJA0rPb_o)2XhpU_i}@$evsX1&opL{mE9GcR<7(9F?j9!?l0b~H_=D4Ahc~Z
z+IZdwO?%-6lOErx3nYyE8jWarruAry!);}Bk%iu|;iBG~E@uE?AsTogFF^Xr0qH&0
zE>x(YrqCgG-S!iF{n39;wmZgb&SGld4X$qztZ$p9j`6u&(brUk#VxE0`q_1oRuJiR
z-stkDtq)K8$VP7vMD#+2=!_P-5GYx60cz2I6IB34FxG^CpWGuZC;>9#u~{$#GSTHQ
z80{!!u8a%erZaPF+2EWZcAWJ2fBG#5e<G00Ryf!?WIR~rM?Ul`)P9+R=@Hf%)JbH(
z2Y&*@wjn)+Zr7i-D?!#75EwOGBSv&O^nGVa7aA<lu8By_ho)@;0+L`AyrGp&YD{Bv
z63myZNvKTZO~%`rxH2#vnkKGJ;=094cq1*ID!dp>onz(&vIp5k$RBkK3deBNP_EC&
zPgM-g=d7JQ&Dzi2#2r8T1E?y~YuCB_`G@)9zy1=R`*(Zf*M<yEmR!y)&bObMcb(2(
z-hi>vaRYFCd0Sq>{yNoVhi@Ft9r5TRd))QjQw*1tY7%#tar)N<LR~CCeVuq~=^G1Y
zYuTF!esN#AAg${U)8S`6lKWcre{Z4=1zuYtpjR>lQV9!GzX11YU}5=i#`PMhhoY^?
zODbeaV07Dff_HU%y*``(ye_`n9__6|EBbM?D1v3)OgXXo9xj}Jh>I_Ng;BYRA75MW
zVu&$%AQ|5I4*IttI47+0BZX0JH~~su>KC7wqh|)xdHJ{Qf7&ixqII&i3J!S{E7~yh
z`wm%4c?7+*!h`~-@knL@3XmIY=E>qZz}nE*q*a8qkQrF9p0lTp0%6g2TXuT`ne!E&
z<<!v43ihsCXH>57Lm&LxG=7=M{0NMtPW}c-O%WM>sbH%K%zhKer``mUqLwvj10O?;
zM~&b_zy<QCy72vIn=MH@eY#_gwkUvCf?B|IYZN2hgx~Zcl2tqPhlvP+^c@Oq{CPr!
zdTNnCK6KbbB{0IoWtjaOvo|Dv0m`p7j8|%gCu;^5_Q`H48Eu^4_MiF`xBt`!`Jvx^
zgkSr6Pw~5da*@qV&-JCe*908z296Pc?~RrB+e+vEW(j|9Y;CakJH|M?6dYC8Ib}Rf
zJ=WG-y|l$+k1X-vheu2g8fN<uYOcE-vez4lf4%j0OrZ09l6)_A*Gtc%w>ROxvI)@W
z5~vH4x3CDs>w<_+I<lbj&3?n$LQEHIqe%~M!^tx#7u%^<lq@0!+Rz*KSqu-lAs+V?
zdGxKpk7ZWRx%K>~*x7l3+4eQ^!4S2x8=L@5e2o>7M|8pj4ujapWr#3)8?D=p=+Ry|
z1_AX8cMDDT7W`p7pdESdo9EZHtCW<n(C1hno&G;*{B0J=byhLC$L5AS_n54U1P&Yk
zLuMRe3}@D-tS?V+O|MH$l`kqc7MCwwbIG*e@ahg_zQzxJ;FoEdB_`DbV-xIeT3cz;
zzSm)@4hOimfQi*pd&k*CC5D(_Ijvp;0kl!P3(Y{^$KRMB2W$&*<OCR#+%FRn6$-XX
zXhF1hHl`m}5sa36bWluag7@KJ+Xf&ZT5WKXwvB?s1|zev*|1O>n5t#}&{9r^3@<k<
zJz6tbI;6aLg5Evg#1FimUv)Pl=JWj1Kl&<5cEnyee1{PJ-U`_NohJh{?_StnzU`a(
z3fN!X#O=T3hv%Dr809rQ&bKt10o2x%Wy${GC0sL)Av86{?(@|zUg6-tv$|=>@(4S|
zGnpjFI7-WC&3+Q|UpgqCuGp(FExAgyGnZ+}bQ-7IU<VlQJ8t+}MtWR9#NTW8|M=eD
z!=GMzf5r!Cod$g`A~zP8q)itq0lLltnJp`6n}l>Wmp+$37rol`hO0!}Sh09j#1Fai
z_MgDf;CF^?zuh+`5@Ybb4v(94S2D%KtC*0Umwfb%ESmnblE4(!)3XB(&!%$|O#e^(
zoizALZ^SnJPn-0@ecGU(-Z6~wKQ$hc1wR0j`}jH}GT*~7wc<knkWubBGl5)D^5}Y$
zg$Y|<?R#U|zuIb<qbn7q-Q*MR`;YLt&cW;m#o&BEZG7)NaoQ1By)Jqos_DV~Hu4wp
z=wz5DPXodEkX~6ka9(K?oDUJ!PKCxp?V(9m6`U$Q{=Wm7c)P|2g-yDB6K~)6_@^WO
zOmXqwwNommRF3wsYNu2xR8E*XW$xnN8>MQ5s)1Rh%xaj${Em4Im4k^>w&#{hyF*@j
zVU_JiRxvLe;hTzUR}3G!`{Uep;UqhkFEWTM9A1r>DT`d2HwOF5tDNgz&%XanobTne
z7Jqpi&CGEFaC~{YtpISCfoED>X7}iE3K=5eu-0*~dyUWi;SO15D90(jwbPHM9cRb>
zm)^t}r+XhJDQ^s2KOi?0%AOk_A>7BeQ@;;oJ^tIPkD)<n`tqoE@lPKDbmH&$808oK
zuWLBM?IP;nVg^APG&2(oceE|ISs~aGvO#pKG1AiSC7Qr2EU4455wq|*)ACrbRLz{#
z(H)$>@L{S+gG|;IPamSFIGmq{8dwOD3Q!i4^AgiOi?+JbO_DuLUyl_i3x3P8@J@7O
zKv_^fL{vp@uuYa8sV%Mmr1kcvCCQ~de<A`VD`3eq+8T$(#bzFBU~Q<}v{`|VG6A*V
zZE)Xv6~rvno}pW3eyt(Tm-zVmeg!e>992hXbm<Gl-z=z4gKW<%GzHqOUpm>P$pk6D
zl!7h7@mCZ3Qy2E|-hp$1_Y#XZI2W(6VEcG=J~SUbHU&;Y6Vb#;zKOr%T~OdS?KcKp
zL*P`Xy~L&?7Jm<whuZnrcnFPCY8MK8<)Lyy<s~!*jm8E*n9YUh3}#a}nk$n`*sTV*
z=?Hz=^Oet79(lIn{`2pr@diJc9a{?@uK>OmS{Z5GW!_#o|JV3j-lWd|+l6)LaDqR|
zd3pN}xaa(>n8xB!@~q;quV3N(g%Nk$Ii#93xJL1bx~z-OO4~xQ7@gZU&C!KsL3;ag
z+Fd{WDLxhLJ_^wH;cHg{VcUNr3a@Fpr&AHMwOF;~2PA!<5Q<h{WTj^wV{=X1{m)YV
zfV4q3ePg3OT&}HXUKZtg#!yu=Zaw$!vAz2o)y@G$v4qbKqbef2PUq@S_=`}4L?kfi
zO@g8Wt6q9hy*+JX=u=!TC`f7Xh{f1oUC2pDYmmg=NS46bN&pu<=F>_b82l*48YHKS
z`;CnCc3mMc2f)VuCN?lPZ8oe7JhihJjaqaE&U+edP&GX!U}!{2zszK70vJB_z+WTF
zHks6u!1h<u5;SGOxuA<h4)RfH`7EjUn@lh{*nyH4#I=RA#!${FO%2{j>lq=DpCTm0
zf~XWA<_6G8NK>|xPrG^zpQ%I$^pOlG+EWk2HG)c5L4<8a^dHb58>B}#l(-l2@pTyu
zYYCh9qarbC8fapFYXU#S8z@RJ^?--}q~Z6!bd5nVrx-1<GB`mst6|jRt-K|KzqhN-
z|Fzuy*a`6X^1X-x*ctg~!2ZD%whta=efa?nrdQ+HY>z+uUtVT)<u;aA4ZhJ(P+Wj0
ziTm`{5U4#lcTj4lv+sg^`tzi3GXZ*g{{;89(mx-j_MX{IYgiif|Gw3}N$*c-D}LDj
z`{+YpVnGWh&!+KYCZ70BAg85l0UL>4YJ(!rYgmVb$lgeRl*Oi_FLgw;r_=BGB!~w;
z<n~*Cim!k5A0yWb@-sPJ>(-MXkN`pR^o@*;fLTNUB<kpG4Ejl$^uz_wj<lW}8jUVa
z{;zC|ZwQc)g&e?zwMXi&X;b~8yI<la^bml)DWfr+9MB462t}^kangl?>I^uOaB~``
zt-W&J^4T^8ldTEPc|P*MuaK7)m{j{<v$i4ZTN{g-wssh3O@B37`nC;AA(&jT1IS8=
zE0;(PZNSw~*Mh4%G)daRFP*H9p8B*G9qkhrRXZ0%V!=-IN)vxC`2vK-AR15g);3<l
z|KU62J@Fb+V`gF#rxFo~*npYzd&!H#2x67YKvOHllJL^=CI8~zUgz1vEjC95n}Z?N
z41wwK$@3k2G4Cu6puF{af8Olg|26EC<n{6f<aKy<cl$0~o>CMeUby;MoS%`I5#D)3
z=Nuhe<_~}GDu`jc8sKnK&>FZbO2=*t#)um3*3LJu2gOI(l$Q?9?@hj)4R8n>P#+4s
z@9q3Mm4L@<n!;P>q1H#BmqrxsN40~66OW(=xu!|glwkriIoLu%l<ffWrSSS~5%ugQ
zYQqJzUBven<Sjc3Z9Q<qj=y#@HpcgI?)*c{4kx(7<@kRVV}^JqNbZmv)M%>)Fb1qO
zWSL-dX>D`^iBDUpSf2?l3+qj3r+;|`H{_L3I%ctBh!)V=n@lC@`n#fUVgL}P#}SCm
zfF@4ZSr#4ejIug_jY65uvd{oDf(bEucnl)>!p=YQCCyc#sT~i!=a(3iw=kXWqhjKg
z!vtYpZ1lpvTbu_k={*ToOk7hG@%<eL*^uygAB5wccK%f@)Rhl=`6j{r0d98@%I~iN
z(r2sjP&uV(!md7W2O>AX3(iSg7YL2()(DM*#`QP_y`MQR-Orlvr}G+rSG)B<<N}0M
z1-J%kFVqg|MkA*nJeOGw`55vg!*70ipC?|tj8{kH4c8|}98?FG+%8CSZzTN5>)w;U
zb$kDBf4=8i?)~4$?cZq_fO+Q>fAgjY919<YZ%X)kjkkY2gg<$+gg^QAU&eM|pCc<3
zwN7~E(r;7d!&qD)%PL-e=><ObN87Ay8V2KdqO|m2a^*(;xcF`&Z|kyW(FY(dMl}+n
z+Gaq*PQOp`3;*^ld%DNGYZU?NBf-k|i+qo%uQ#j}k{OYPldgARpX*hznZ})OXa=%D
z_%k0tHUg7}rXac6CDxou2m5MUU`)KG!V?W>tfi`F+<M{18LypVx@R%0hXQE^xLWbz
zp)j56oQ*KA@li?_NQ=m#*~}u5Pg>$%hje!ge$iL9uyTWrL3&N7L@VN!3@A}5YNN$(
z){y|iULcYblb$`1>I`J@xt|&Z$a`AnIG2I90jZG;V+R;Bh}jL0Gs0aNGN0GH@7`Zz
zv~)K|)d7f!`~H5Rr?r`G_x$nw@Co{ln7QP!@hbxKpXDG0U?l=yN>vl0ubtqUev#Ht
z#8U&H8m_);1_DPQlKecl)G)a8JNhbo0J{5an*znT@LBghtRWV-2ffClaoXb_1kz!h
z9=Gw~_ch24J>ln!Je%h%pZ~&yKm7cQc$wk6A<Ii%+<u8kwF9N?DL`H;;qTiIE#I>6
zi@f!OKi&x8Prl7+^|%2zzI=~ee7Q$4R(1{^<I2vL7!@0+I#dldpYoM2KFim>w9m$A
zOEwTpE)gof!8W&JS%t#lgUn2NHo|ENZ`aS-73Yxhr%~(PkpcTkfVMffu|eqnj&_Dc
zKHfuXI20jUVl(05i8P&HQ{a&;AR9ndDA@q=0hki<CBY7Zd!5ZqAc|!IHca-kssdRY
zfBV;%>#L#&C3oHS7eO7>_JBM;iBi$j6?64yP6zcz)S-2mGo7umBm!Q)86dn?6W1lJ
zMQz+S8+vF#t5@$|1%qixpGgg3;>q8n*J|l@|CxrX32PS<|3Ax;^iMHy@;6q=Eu36d
zCTgfO!}}a1GywtbC{f9=nPF(hG*<`gPj<NX&Yxjz<-Huv4?=TAa_^HKO~pj$z1N8K
zjf_lOsg#NtfGIV+x1}H@m_oyf$wN~^HSbT~y#lYjg6>oE8J<UI22x=UfA@(1*fs}Y
zo#bNE>OEZ(+cp)ch)X2+1w<khcui<WQaxxQCWhywKJpjhWBXonk~k|q_nf@Ra`|$@
zZ~WGa9L;yBy+;D%$J1B78k(Yf@EZ2<$Cu*<;B6la^y;1ID_|gbled2@ou#}{d*9d6
znZ5?;;_?xBne*bcPcyG~$g`!^DahJAKK(l{aQSk@+9`{~y{NH^*?1jIPr7}-b|*9K
z%Lm)3+_w{cI1w%)0c{4s0(>9af`}ye-s5O*mEa;O(8B-mG2Oys6i$Y|fu>4RR4@xF
z$3iv=aBx0U@*!j+rC1F=Gr3P{wSWYqop(#->LDaiKBx%=h(D{E8Kd%6&Yu1#lfBE#
z_6vMram@^e57V-wP@rHVXA`8JbsGn)w4}$rr%>AeOG`@ZbmE<$u4gQiK8~Ubn)A-x
zPGXW@kM$p$6O)H#NTS(K>kOE5|I+aUY-|X|BVjZWW*8a~oLW?EdjRJS<}{4*5!H3i
z-r;5LzU@ajeexkD)lo~jONx%}6WP=BClx?{C1W&jE3yRp2Xx2AM!=M9j72Q|LS0AL
zzlkV7kLmBCg2iiJ0nmNUd|Eff0-c(It`KYYcfC<n5V#NlX-JQ!J(Yp9-wQ_%b<iFn
zL3iIx@Bb1~=0sULCo~QGi(h-0%R84)ozu9QrNJ`KZ9T@`;Wp#7lQi<}bpEdowfv^A
z`!}8ZU*qk+oz7q0`0c+n;&I#nyp3}K-VQo{`Ht)Szg>fI<L%Yd*!6}?;JM4cLy?b=
zz<$CQPt#oCxBktGkU5suLjkbnmEX?<t1pE4ELi1A>+#>05rvbuZ`T3d_niP2eyN4;
z(+RgL{=NIYp&4ks2IBuG$X{JJp?fER<W<EJd}L&mD;jp9D^RWo*%-1VC0mN}u*erk
z(0AJew5+=xL%(-bv3NCz$*7t+H=X`r);I3u@X8f*4q}U-rO$f}M*BFXTf-!FeS~1T
z<l0cYt?3C8JDdN7Qu&Hcrs!hg9|^{nHsGga%%^4`8s((5gqX;tkKBNSE?5g$L1fnp
zo68{<uM(lc(5Q(-KtX1X$-HJ>H%zY>_IHoC<-!kg{_GEOIG>^zd=l+TC+E{>`V)ec
zO>6Aa@?KIym4lRu8G#u|fc}Sq9fZ4d8VY_j6Y453|6Azar)gc{>ZzO3+sWN67TJV+
zHNKm`>$b3``%063Z#B>>@@--7uMT>0LFZboF0O5ir1u=?d=Zl3L?i?Ut!DiC|9q7v
zo_!IKDV1x;vYbW_dF;i{G8!&nS608tDdp|B?|-Xw{@-ffe{2MFe0hglw3v{uLRDYp
z(zVYpF4sbZ^q$PtT-$ny-}~*C**t9+E(JK(X8ljhjpqJs5-kvSsnOuo$Cz60Z#Y5H
zS>7glAI~CzuWb<8tM4p>d&Qn8^>f;r#QKltX&V9O6xTpAhh{D`RoMBO+)}Oy#YiZY
zl)(xVOG3T|**Hv$HWo9<dc{9+1I(gdes4J+3Y7+kJu?OO-}Q4?yBv>QhP58af>O~N
z#oI8oit%v;5!V2%6JPgO3k1Mq4@)m|xgYu0v!QK?ovE=fK0x*@zcH=~68|9USpU-V
z`4?;2HAQRsV?yySN+BztEMR#Al|rphd5d!f?+oGs39xbC{ea!wBW^kO5$?VHCz;h%
zFiXOOMk-nxfsMuAv_wD^TBg57N5!B&1O~+74|WK4C}gE#idaA!p`JlqMRX_@f8U4D
zH5KSMk-Pq6-rw^FRLQ09Mau(_w&2&VKm+3aM8!(t5v2R;uMqltgFeEw`29-jf{2U}
z;*N)#%E{A~-}`sh_}mwtMzRCE3jtdz!)3ny!l!Y*VR-UnP?jDW0C4OB@I49nzq@q)
zuh*(r2&#a*Ugp~Vml>7otc-5su(}2aWjW^?55L69+L(`hXp^nEqj6z6^j;TS@nRG}
zN7nNl5|Cnj6}rOiyO1HD?0Z|4Ku6&7y~x_WFi`ql0Ih~CxVuZV_HBcIQiLmsFejnU
z5kVTL=ZZ`rA1Te$GgyMMgnAy70SP)*!0)DDckop&L*4hDW|UjC*$bGk|IdQsV3`Z9
zsu>MVbJuM@$it8QJ2Dm2xX=K&Shxtq%VvtT5*vU}Sbduq7;XA*R08x7rq+pBUtwG<
z{ak^b&wr<^)Q-wvv|UZ4)W3AKCNwWbgWf#&{Ts5(lMO%`VPwJPO68$Js8y()#cS*;
zOpcfVwNp-?x`+Gj`f&~?P4rce1@8w<QI5%hv1K!w_C0TT5|Q0+21>Rh<V&%U8w3=?
z*OApfhiV3O9oYNH00`enRlCS&ZIcyMI}4~}y=+{3k0LR#RZt|9swW-^)P=~SNybCb
z);Gmf+vq+l5%o%B%;dwRghtF0@&l~tXMhM8#Ul(>lruMFeEv`N`JMmuDaiJM;g<KD
zTsh10*B)kT_Y!NTPQZB3`a!(AbpGFJt*XaiK*yJN(#2!erWDOGFKzuHcVF0`$i~dw
z1iUaPkNCppo?>&Y;N~;S)J+q-+grwe)btZQ(<L(Ol?6zip1rTqY37qbPa^qw7K=S}
z6Mwfp=p_rbyF<MJkq9Y)>P@sY?o4oejQce{h6*;J*v}_|9VyunjL$$eQ0CJB#gm2U
z*NdWiQ7UEyUjcQ1Iy^n1WYo!LMIg+j#6p~>nJLvwIoO>uvJWsCeU+p7N{BPcX`^`C
z0%nq)K5Dw-K3z@cQ;@vhjiKFrm|k{c8vwLmVI+&`ehXR2{l}L!qaaxS>LLP=bpBSc
zD&)RrG-JAEZ7_sJgvuy2LW7|u!=ZSoLq>2`fQ&hR{zo{R<y0<^Q+;Y)Og|mK^kSK%
z<zo<a^JFHn{lktwTN1JrFyl!0%tK>R&6TDRs#%!)n>tMK>XM=*G_2B(aE_g)iADg@
zYy61lgG5uQP^2|^PPLx@y^zP4M5q`ajCoRqMY~S&+DbIN*VY0fc?QJ(w|&o&SAdDn
z%V|J6&fJ#q@Yj#{m%s4@jcg;{;k;*Ke1fC-OFVV)^Ng04$WE?z4dU_T7y<a+B>eFv
zVtrrZ?Y}F*KD>6q-|N1;!J8VpTA|w+PhI|Z+;ib)@vgv8qpBG8`J>-|nxFoO_b^^A
zaK2%F*fRqb>12Oh{q7`tZQO7CwaDUUVRzq?>m_}E^7Z#!E}`}vctl=le=D6;v2^}^
zebc;_v*2AUq%N!g=0}0}=f;M5;#oQs_QTTygXA7l1l-(<QXO^)hrx6vNXha+A`FJ7
z;%b=gdZs(d{Gg_pHMpjt(J9mFkZH9~t#iDuskLU5Ll&cHO>zJ<LS~dKi)1<<Nq~`E
z-%aSrm?lka+PcDZ204q9^o_hL>FWYbB0ENByj1w3O>y#0Fg7&+f>khL5bKc`Tk8e#
zEYx-<A==rY0R<34gQbl76c^=yvw22lJ0j=8{#E;q%%=NsG$_JE9z`A+Dl>p=S;$tD
zY(*$WN>K#0ikpM4h51BjX3$iD{HGBTSKrUE&@OKwHK(aDk<f4{;kAhmo(<yT`;y!P
zqdQ=0S_)Vfi+(f&!fTJD8Bl{1MQnN@Nh!=R1~P`mz=T9dZ+dc05y(6zZ_T*){G4C=
zSC27qTV$ETd&f9mLTts?p8Z{N3!}5A0)aId4}B*l|8KkZ|852QypHqhu@m6;;tJsP
z7XI%R?Ee;jFy)P|4Z;b`l}BXD%S?85c>d}ia@*-2;b^uKrvT5v;dOrhkDlj8fA}s2
zrJ<R5yfbYKttL`l%e-6Q@%427oy%V<4~%9%wC;gDcfc0*mkwg@S;YES)H>K(dm%)$
z4EW#(*dY($1RZvyG{N7#nJcpcD3%p-1jS4ltp`J->5-7vfkEzL1hSYgNm>i}z+#NY
zS5Qr0x(m}C!*mxW2Q}4vLgn|U^^n>fFn9YjZif0g${__WO(6ccF3Hej!5yxR?@eij
z(ORyX%=_?tm-Z(&Wa)JYavc^R(%A>L>3@BGfell?rl~(FA&4ZvAQSB+EE*T@$G7Of
zz$%hOzkUfTfC^|ZIJKY|)WN96<3pnrnd~X|z!<qP=yRc2!6+JY6NtKgDIr@C@>M8S
zgko8P?X7^HhxdOzfodu=RZxfcNWu#QmOi;vBLp8)75iKZ1&>dqx#zPO5U19uJcVUJ
zu<MnOeUM^`#m9s|6C|zT!~5#fvPpaK!>Rbk4%Zk7anR8&+DL4ijdJ>SgPVH()xUm$
zz4<mp=1}!ma>m0kUwPqQ;+uxmn{GymJf<kh8wmE{O~C%I@%G>9xyYNl{kLCr=qtAY
z#|^;o<sGpMSUzG<EwQurI7{V8POiR>{n_;}rI<M{yz~N}`@)cqK6HV+3VTxHlFCoo
z$-0dLPLO|M^V1Rkyw^pR{|!@rha^Z(bST|p^%V{6;NMM%-Ip|l`OwD0Cd42G5xPc$
zMXMF6nKIo4Er3EOmW1)Dl9kGI5`uzk2IUZR23iaABRJZDqw9vfYmV7IH1meKI$}28
zV^;4{xqZB^@ZQB&A&3?jQy^x5YTg$36rBr-$wC#*65~D#$6S-@zy_oM7mHwD8PGTS
zX-$Aq0n&DBl6>r?XZ4FH#!9Dhh|<5rhY;II0+T8N>9PvaI>Kfh5ir^@&<Ip0bA?(>
zAZ<E<Xu2aNr(A`+6zbGudT_O%bxfk{Q9lrE6a6Gp$OGe_Qm{*kT~_RxkS{|qmcXH?
zL-SZoh53;N(qEmN{AlH<-8Jp}Q)8O;`O-B}+U@xb+A{AGKg0KGhe7deZb`7}#dopR
z>bn@@utt$KZ!+;Z)r6Hnl7{+d0G09rB$^|gxCusM!~gjIdx?uX7s>M)bvBUxMkjdY
z>Zdt6+GgX_S?uySPX5Qx|M3do9WwpP8<>{Abtfv{Rl?sJgZ*EBScj^IwHd?tn3uLb
zLs4!p$WAe>_E8|uXFT%o(+o!i?|aWFv~e8Oi4V{#+@AJiuM2Gb81dU9RrTdk+Cv2B
zA^X~w8A=ya(}u9b6P@XAxJ4EygR<ar7aIWIJ(eRBJ6A(J0eb-R0UYkYcnwak3iGLQ
zco25ozJi?{*uMk^+c4SlOpj`&M-%4LedhB6>iIsdnZ`*=5G>Z1MM<O>j2R+YhN7Is
zB5b-m`QV}#V06<<uG380%zC0pkhT-yjhg?C%$0~}3sitq_}fOHLl*-7LBpT6Lj<xs
zkm!;*kQlHCStO*T2{ntWeVTCSof0?z$tBMlytmMR*ODw>;^?5p9$6$;%CRt95wd}8
z{TqUMLveN3F=*mOM94omI@)E()}UB|!3vaxf(z@P`Us|bN;M1byK9J2(Fpx_h7(;T
zLL!r@cE0~2ZPau>Ybh0M^~qyF;%BY*nUoIM5*3U|83DcED<31A+qF*Q4D`M$qM-v&
z6B+=k!LoSm9IS6ze)HF_@W|88Vh2a9UH9tnEL;0u<I?rVSXnzuaq<L;e*=^M_X^?f
zji9T-J5>IEi~t;8Ugcsc><NRtYIyeYZ*$j8|320f)XfnpV6#KM{N<+^FAcc$><UfO
zaI}|P_hJE;E;UUT3Ve4GrF97Goc!o{`L`ogOI7Tap3)KtWii*Lzb00V20RJMlvb^n
zETh$j5F;T@s%4U_30W5Eou9*O7uJ?wX)NqdU~d8km2l)>zflfq<*=SJnIBPAhd4Kl
zoPaS#GSoM%*-=NzBRUpJ^uEu-4mT<Vf<>?*nM9Kv$V`x7nkE!jwNc_`wac^jX|K^u
z{3dOKd;4m+0l}2yloug?jTXS9B5y;(K`!w*hIN3=wDk(GvFL{+I@(=*Hi%~#>6zh3
zAOzMLWPwgIaEfPuW<z!luae0!S`~;d$xA~yQidzSU<F1egklg1Sv80GEQH!90)+;h
z{}L1%kS`16DwIp9$ij42IK1wePlD#()v@q9L7k#5?C+D#z^8()zUOcuU8CCW=Cw`n
zOK`pE7wUK`*PHq~)1@{8s&%zYk6|=4ISI*WWu-Tma-}px=V5$OIej7Hk3YT3=f3nT
zwmif;MYUn2IL)-W%(Gj6#M06RqcbOa-W|u6V+7zG6b|%VCH#H2_Wtr#5n67zD3H$?
zYz&!g&3W$9Z*s?(pQCB!VP8#y*DXH(xhEO?zyoZq7R=|4`9ZhyPqw>W7m0mI{+IC8
zMO)yWhEV$U|JqGSHy8}H;wzDGGJS<hkw&}T=*Fkr3ELEq4-DDZk&T4B3=^#?xT&&x
z1YCvD38*Il5+ALD7J@5bo`DV&H&B`^?6>ox06)YTi?3>w8c_>cgZNlHT#zUt!LKgi
z`YE$64+Yrfv<`qK2LIStWb?R#*VF`<_@^X~0BKj1vS7#5#U%%FSa-Zz;$(`GwHnk9
zwlmT3i2#@{rvD|Uzvv)~CEVVau)>fWyzOM8E*3Y3P$SepgT*_=d4m(!+Iu22Z^n|F
zA%$Njo2^moEs>iMS(!0dhS3^~H(+HGWRNuf(cGs1p9%T0VX)*|RHB-|!DSy-H8b#y
z;A_w(z!TmDQmgkpkHH>llVW={t_3>&Nub_)l^#(rChsLOs%jgol`N|zHBAZ4q9YWB
ze9Xk%koF09HF3=l`3%VcGOhyhaVY*@{Opw9`-7*Eayz<iddh4CuXCQb{M!^o!SL*9
z)Fy6-ye?kU+llb^M)v;l1|R2G2KYT&`2Q?){%^MMzkb;NHGi;ge9b9gcQ~b39y8s$
z%8S=N&4rCma5UeJ+4Bw4*+oA8`H~;}#C?pGg{o5gM0!MfU6}s8_GN(5V|MrV|I+4~
zxBLB=iK?Otdj39TJy_S8h1;~Vm|6sbjl1e>0Qp$RhhS}B6jW1XvM1D2sGJE&Y0@A=
z&+tGvstl6`R&EjU6<FRB4(Gw)ZCnQ<A(|ZD_|{NGok6`|)Zx{FHmEod8zJ~qSaL)P
z@L5>tXOLxzwWdwaGbZT3a~oCx)&{6wZ9p*81_K{8A+sTP62$#;OAU}7y3!rKc1aS6
zgr-Fmy5gU9{)rQi68;i0AvQAqjSG*X(FDju5@VjcBjS~)1Q3nIKS%<dMB^QCWX8~V
zN9||K-C^j)B*$h$3bR7VIz_Y2;Bc98s~|5e`LbiU32WzJ{RAv+1a9GQ9Hf}8@-!73
zUV~~sC_lVYG&)v^r<Jd^T#;VOsXY$>ubsKF_WdO^M*b$AK<gJkWbiM#uXzITPb8>I
zOyBmRN7VHTqQ}s@Y5cM#FARx|oGCqLZpnD+i7CJNdynF>D{;30xs(+7fX6TWOVBwh
zXKuk1MZ3cI?h*dp2<-o634d<@_J7sdajXJ3zPyuBlZZvy^%(;<X8-8xY?aGwj2>Vz
zzmAAUm~d_9IllbWF&}>LHipZNdLD*d=)!&iQ@<bfL(A&->Te*@YA+sGTR;0iSc}YQ
zN!YT9ML(J2o0fZkSTbwKhn8|+$Ob}QSg_%lG_`VY73PORHG#Tzcxq~yF{7fU#v4OE
zFBrNJb4nU(nB}lh!f?rO`kd!t4Z}vL4wQN-xT-+oep#Bp$X0cTt0O}`Y<0u=TTyWc
zSy%x`hVelP-xSi?`WhRGe`Z1hP-Ic-Z^2u^+m8LNrYp#av}Te*BK}(=siN<nwBY)e
zihq_!e$kCElR&UbIRIIZ`q@mP1kht8#udjbfn0)nq!e*#jywhDmBt8-2n|rF(5Q)y
zb_Nf4@xeex^YETWPDkTwYQ4_kYzMIgxvnrS)*0J1azEl|o>Ltfs;k1f7}idCYCP6M
zIe=y#3NZ{u9-YO;Rg%<RJCb)S=I!RGk5EP9tJbo@(>6FlAS5b58mcOY_o2Yk?e2Z#
zaHiw0(Ev!JOtMu4n79T=hCGQA>9tK<Oh!aXDE_BzHf&v~__x3F1ap50D~URrvoze~
ziL1XsQ|+*P>H>B&JSP1euK?bmlmD^K{|$O0B=FIZZ8!$a8dtafn1NZR%uh0Jc4F-7
z5zjvVID@j_-aF4TSaKZh(n^<Fm{VDt_*o?SbsK4E$%wwscGk{l<(1DloIQ;-n8J`1
zmSSKiM>%-`s*dTAXXomi=}|D?sVk534UL~t%K>veq|qukqM3{=ACQ$}Oao1oakMYU
zr2=OS429FT!e9U=&%)&z#+y(b3BD3slSLP~P^G;($P7jeo+dgEDJnkr2T)*4j!2I2
z(VQki)z)fs)C+usJdy#;4aGjd|M5>B`2i|jI^&I50A1AxP&O&yk51y3?mLqx_X|yi
ziTMXcf<18xi3%Y?aZLeak@P0kAX%6`wTVo36&%si9z%oDs8Tnyc?m@0oFth`e#ORE
z)L6t=)aE#2Ir24)n=rIFnp<Wf%yQ5rk1q_n6Hi^k<gzk-S|}Qiae<hZm4RI8OQD&7
zn@6RA2X!WxP_=3j-+g3z2!Tik_y<c2Y4a6QQ)_ykeJ>#n*+<1d`+h`cpEgQDqghpK
z5L{Xzh(uSw=mU_N%R*T@W0*`l|K_)zVSoBEnQbD0*0M4_#S1&X&*bPuRyNO)udTp>
z*8f=N|LxDW`i^5sWbdwh|GP!!|JGO{tF6d4hxn~kE^Yq-H=X)PY*x~^N$~B{YdrSk
z!xUN0Z5K{a4;!Y3i%x!N?)UgEHsA(zKuQ#(PuSB=|DB$xk3YB8k`*~+nNbWgilN0=
zXd0!Sd5(6b%#Iw>qlVe6rf#OxI;EB)YIjKG4spH-Qzkjql!z@cBs4*BwWFTb$dTnp
zGK?`~V`aGHSUn{SS72!q>bWr7)Zigs8=59VeOzDoCVCtgtXRB8kKlMU6hRJ18H#tZ
z))ftf!bD452~oOv4B>H^pjM+3Tqyn~HUMZe3F;XjwlK6Na#~AOkJEp&mhI;oWKmYv
zHU?b?kYr)qU}IXLH4?6>5wQqVOOt`-(H1$=U~}uk``w68sZvEEpce_n-{g4HV|6C=
zhe_JP9I_H)3rtaxjh4w*mMPYU6e||9rsy)vtWq5W1f||nE<FNnS21&txu7$PdWXT0
zNkf(kd2X<|#i#*if)9TkJuJNG$yTGgWoi)G-F!#t)2=OuCPD$-u<f2dHaRVZZ(0+e
zpc*i({$F~B!}}hRkeUk<JSzmlzx|zO*xG%LysYErP+1+F;L85zxwiAQ!1zD08958D
zH`wQ`Dg18;_J5Q6{x=5uzf&^+k5>T4m)CGn1u3SK>tklyQ!ed%n)4@q80Rw7SEw}9
z%|#x5Tp5)g<IIUwnx<iPlso_uF7Fp&`W99K(b`vArn<D4Kp^f}#29R57!(=BAfqVr
z;C-%8S2cUr=gf{8=F^6%s;QbIru9Cx+o#q8921;x;_f!M%^ArsQnc}Psy?v4jmL{e
zjHj-`f>?}Wx@XB>682XDmteRC>!)E}1qZp=6zZ9hRR-@OgzQ6w_E=OhjC0Y5$VXK`
zfuR7x`oKnrKcz3)42p;V6cG(bn)k#5@R6l2HaY?N9-!hQ)U2H~a2Mj-^NKavY5Pr=
zbl9!~vM%n|TEWJK!Nz}Q269oVBtMM21<4f6gOR=3n4w@(ByCg!08I?eQEY4iZrFlH
zV*#-_l9fnaVzL5L49S+p6sw{5k59vBLl~b3$Huu}^?dnJVf(VDI-KEVbBtDG9<s(F
zb%vdr;9p=pS!O6op(qTwwd6$>S5Fpo&@>^%(mO)ja}wUCXy$gs(l;)WzMoK7jm0J@
zr5gH(%7jdS$o?mJ2*hSsyYGgJJWWI?SA?Rp{O+fp<GGigpvY$tg@WbLDR!ri^YYdo
zvb=JZ^7P3YETNAt$18w$tQp|3&i~CICdm?1MiUA*pxWE#%I;@4z4HCcd=(^as!ZlD
z@Bjiq{l3*lM-=b-D64A)O;t0Sg`K8qEOyb+td#;vyUvf~zE;B*_L(Ll%X0?9f^v{i
zlol13&npi04w)QIm`>)*=2IFsp<zPpkEnEyxjUe4rjcfqVI`RE7|A;${hnoT5^+he
zU_+h9H-UubjK@`;`P6f;YcS6WW~|sUNYYN6hpK|%5zP06Vy<Xoz-6%kFbEAQ1}`=y
z%tTvR$q^YMVxbNYKhgIeqhvPh(sR?T09>5d!;qQ`d!#1=><D6#q?7TO8+v~EZCtMQ
zf`vL=e@g_+0-~ToyDG5JfXLV&tIN|<Fp@S1WGFuI70?h!6VnlW^lnH|whb`_4~vRv
zz4M9hiP-eO8Il*+Vi>N&5yjGwVr&?0z|u*>Xv32apsAG1IIceldzS_8JdJCpn;A{D
zkDnjm>M6L248uT%6n;qImYB^4;4Maj^s*>327{b(kW-X75@Q>k2k%1Th|`YH+HV1*
z<Fh15s}WgH7Wkwr=%F62Gy7kV6Kdk<#P=~<5|-C3fAZN&eB-Id$;t`d3#v6sgHueJ
zD?E4U_ZW>f8J#)beWyi^b^fmrX%&uD0LK^J&7?rE%N0dkGCh2bYvimg-A`Q~h5|3j
z_TgiE>5(B1z4rsGuI9`uhikNDF)!o;(9aHtMamegwUp(6ye!BHivaU##{T{x)5(m<
zbi#Z(rEy0zdO)o^%$i*)-N*TPByJf*EJg|p@njv7VzdjrTM)=CoWK&_E3(7YDXvlK
zxral8Tm|!Nunf)yLQ%rnS(qL`xf@ggStF<yyxI_EgC!W>dVEVc_lRUzQ()~FoWW!S
z4}vV{@N*;BX#8U1j-8kWXrpy+Kmp=zKA9{L9$%6IAQIe+EPDP+TyLj@IZ33#WbTtz
z4JJVO!7D&pdtMtSePayP_}~{rdYq`<un`Kkg3r2?JqJ+*5R8}_uQ(MH8+-^%6ib?<
zi_9=tjwuQx55+%U8B&Zb<tmI$D1!~pVAbF&kI99-=as9ELp@chxx+OL>KkyL_|))T
znY$yV?i%XrNMy8>X3W5@P`DMcdd%c#h=^c}AulXNkueyS3`Ye;o?#<GP}iQO4xgEp
zElAHZI5hzzOW+9Y_tXMu{gsdb<GY?!={0h>XLUX2D__6LS08zTqMXIgTSJ+RY1rqv
zmwtmmF=F}bO~KDWk3)WrFYm+#K>GIfZzrAqn<f0c1)c3%z?D!uX04&D#~e%^##qa6
za1&L10P0awb9wJGeEyLs58VDS#^V7;M;541ak$3e8;^6*OhqhNmXT!{Hp>wT#5g<^
z)9C@z?FolRhfJr3%<3a*zfa}2soXA&Kg2Uf12qbf48dYrO?|T3(T=#IUC2tyy+Q)?
z+u8)nLg<Y8AQfvG4|9zcxv>9I@RiS&gpt6~3ap$HX8TG#3HHL?f%S<XX7Fl2U5G3u
zpdvz!`VwOYXk#!&$s+krvW@^~NfUOQ%u|t$@Vbvm09+{IZTxX0ll4~s#8kaD&_*H=
zEG7$LdXE!%2#FNf>i<oMC^n*D-!HyZ02m-kmUu=wXPb=R!e>Liy^jVvjR&V5?*->A
zV)C$(h)FkMESlv3^3OADKERF!<l_OwQbxHVj5cAo?is8`BqM|Rx^nelp*r%+CyJ{Y
zoNMsD!TS(|ljM3q#+U&P?<*>Q#H`w4Pd$hsmx9uc806~|c7v>1!ZJdnAh(9H%o&Yy
zhU1K)$QcYmj<j!}sa=p7`c8$>?FO_jG;Hmz(|hHU1#!#;ZdI~IkX$)+A?K0DxB1NH
zAHx<q?K_;=5oF4<7k`}$W%<l4m?HlslmGXI&R^bYIrVEnKslBHevjJ$AM5<zQcGmx
z$TxG`)iJw=U&ojMdA3UB4p8q<skyZK2bgDS?l}Jt>ZUY)5};zqDe@76!4k#{uu;=K
zuWAks4mg}_b5!k8&F3^tgJX)*eP+!LGk=ZBZR34~5bn#GGC=5bMmnLWns&66XaLmi
zkyT<)O$Z2*R`n1iV5Uz(jP8bw;wz66j~Jz%8cYE@&l<8-h1-Rpf%P*m*@J2tY-QCa
z|AUy8=nWphcoTKmaRtx}5E-DFkr&YmATsc?EI_?!+RhR*9}BBy+BpKICP1}S21xV-
zkQ>>{(ltXiG3}$be@Or9EQZB^<k4@Sbt;Vh1g%S9dRp2V<%nwAG<YBFi=Ci#TwiG7
z00=H*GNI%cTVibR(hsDA46zwf<e~Tv2V|p?Y$>B$vW!o8mQKRb35mQA4-T$AVwvxG
z=5wg#9<6J9Q{x*K4XFZA)A!u`TCYgWVv`g|1dTtSYOb<hJ&7U1+99P~qqLipc7vi?
z;pk`_I0|CO3&U`jGaQtZWl1qA$!vzY7&z28w9!^-*fj(~KeD3RlW7mNQnJEx>Riq<
zFYNOtpL-a|uS9hP7*kS|Bc8qVZ!k^6^4Z(S#)BUD^H}HqS_Z9Gzr7x>0FE#3?u%wM
z<%t1)%d>m%D61>?$JKp}XhYo`@%T%>#pBQZF;*Q*<rr%U8rOiy84OOawtN%g@iJa(
z>iURzeaOu1Q@bN-H>dU!YCXXF89wT=j2JR0;>0gOg+LR{Q?fYvrIkWI7bvL+Oq}$k
zi;?Yh^?|)D@i!xi;3b~4Lostv+ujr~KZNZkAzurQccU?E-VC!NsON!z<`QGvOFPL0
zr#TagbB6aBUNh8Z*c|daX#5)+8TB@hBW=tDu%-*-@kUVN161EcBAKU+pA)Y!4w%*o
zI31&uB`>{065NQ0p+qtMHzol3C_zm51V-XoKK?uT30Ne?-6np5#^)!IxEOL6TuTHD
zT!CQsoMY?&Y!mnx(PmJx49QB&aEKk3WaErtNhmiR!&AcY*^u(*T=3G{`i9}?lBaH>
zI-_aOrUK_s=NGK1g{}!m=#h3T)G(Ke#U^_}^{AgS^)GQ)Js0-z6y$c9GFzvxCn%<y
z93G6ZQU*_oykIyg7>@^xh9in$4w{AVp(bz$l3S+H1k=Zc%7lLhd7)>x>N$J5<mIhH
zKJ)oUA=^SEdTk&K%ONjc{WLn;XZg&{WUI^V{T&nkjxX<$Frc@S&i~C4{=QqV|7*Lw
zsvw19xUo!itzm!fQHINB5u@x+wsDQ;ftw%TM<2YG58ZQ;bEj6xGU3|(0ncB%&Qn*m
zdF<)OdGx7ET)DnW?K85h#F(0_Xt1^d3HoKDp=hV1zi=8folClEbP0439yM(Sx`^Ds
zbr!mm^vKc|S&VSiv@^fqXI}A5*c+HysHch)3fqS5r<HOg)T-e~SiecBXW;7)E3463
zwvG;YCVI}}f-FwF#o8jY9Wm}VPd2-;uv!r^lq_n(iIcTh#YgtP&%*Q6EHo{NO)eS;
zWD@fah-iqAh<|aAGoAbo+r<rsIO4E_utwS@BtZW$rBFKUMne6g?l3efz9Sr}q?BEW
zREuB>947D_V~W-XSxhMY<T<u1v4fIqm<7_`x-#5=)ziv&)zZv8rckyXhilI$O-&5?
z@o3|q322T+sbsRN2z`-7#UdKBm^JIU?e$iRJx!%(j*Z+7=cm-oE(fz`qiu6RVb>Yu
zXBlKC$g4FD4o6tY!~c~9<zPrz7L0}?#-jn{AV+)*C2CwG6-tZD*g_dE!RAKJb1&`k
z`=5J+Np%$w7f=s`!C-}#uYH>7;ft)Dx|MQ$t@qV7ynP6NZ&#iFYq|aL3gCM#5%5^&
z|JGR|OY%V<R^;mg+|D7@{33g^8MmFim0$hwU*Io%^1YlnWvQkxnKc+yZaaOBA9%>X
zx&f&<*xKjO7cTO(r(Wh8PhaElXRh<i3p;G@ZZoT=7;6}mmORg~HVc!QcJO@5WXDHG
z6z%b?r1iY%0^?J$PZnx61_Q|}u3mdN>lz4kIKi86f|d&EsX(dhUlc}XAiFg@{L;EG
zJFmF8p{WBO02kH?t_r$0F9E+W;<4Uh@-bp8c?MY);dU!+@f8BYK97<=XOyNlv1=pI
z9gsHuSbTg9DHy2Ff#{O~ZSSSqE@qgljZr|N4RP`d2!#B|RfuXr6IcEwlGH3QN1zv4
z<RgJm+dP1{9f@*4FCq3&Qm2z;kmZ=X#0*O8AR`|e%2gPw3(IGerOg2Q+Y$~g30vO)
zH-}ju_~YxAXb>iC-)n^Wd?D?gxrpy9rPXwwA?ZS$QtP7X!l9EK!6G=kubH_^OsmU)
zAvYzNU8OK<ab>WEJsM$UNS+M?NpC!6JRUL}4H%9}%0U*6uLp}~P+A59&tp$r=TE=(
z2vheGCOQnNSBB*VS9brDgS|&tJ8?VZ$xQ<JKwe|<Ki2tw``ha=0&sjezN9Ziw(Kb;
zOY9zA<p)0WaenzH{zJ}f4tex?!>6CGm`p>`n)gs-%IZ*98N&J)HkX#T=j7dd_^$hq
z4Iry{`SJmeJ$jYTe)%~*|MeGm>X|EC+dg96)MS~4hM>r>RzkQ?3)A{8;HKxomWY3H
zLxC5%kf3(|s-|UKx92z?r{zeMS1+Lfs6pmnW>8OI_gNTjgm4<0!Rl$Do*1gRj~2;_
z^@(&BHS#Ujz#w_BytOveJRkGkGaE>N$p=19`uqr`Cvu+41aTphNN$MvZ847I`=U`w
zCJRo=fmA3dS+LgxSYoEVMi#sVa-x;C==a+!BhkvZzgCE#ibN)RzwoEOHy%7TYW-si
zVM7BTgAy~$$j3sl1m#)?YFa-RG6}p_>M6YZHKCaZ^<42)h;3FE6c=r*bXt-4g=Kqe
zY$JMv2}qNd*6B}siIT0i1#R+0)Vc(_X%Q1YW8wdu&S;t=Ci+qv#$?Qhaej(%d5&pw
zg1zYodp*b6g5jWKeR-XYjdhlnhNu-@e)%dFFK=`GU<);uur$Gszzapb#I?OIv$yjo
zE9*BgK7BrRImeLy@#S5)0(krA{NF6$?~TCz-)T$aP(LzsZ=K1}Hb42pe~F*|<X>U?
z(DBT(6$h1Its#rW!Wfu&IG6}}1aeKu4GfI3TGpH#c}{P@=~JtG>Vq46>J#@sQ?q?A
z<%yTK`O4QX@x`yaz{8JU<>gDe?9YxsJY|_NC`+tOiGO_uqfV3E0e8~t<5RS%^qPQl
z?W+djk?=9;(1$&~uffltnJPy+!qq3>!h^y6E-#evS<lfS%#Q?L$H_A?@HN5e8q8#}
ztiWJ{o1P7gjLCxGPG)FR=khGvHUt4_+|5h!-|hDNt+`xcop%|)((?caeNbu!LY{oW
z@TFJ4jS0KxcK>hs_P@apC=m+t7<DVqDhO0M8Jkakcj1t_*mN}xR4m43h_z_)86M==
zfgu}8*!!=AW^3~%!(af7^I(OSzoAU7DsCP*7*(`f@IDl0?WIim-sjrWI#0G8O6*v~
znCS5z%=+~eMp->Bfu!&%6MZjSxJ`r`L<EaL#RrGTW{-nrkHh&hSW}SMj3O_|%m&5L
zDPDZhFq=)VG-PJRw7P`VjLeKM#Q?i(uvt!)t+9Xj4Yqe4Wo3MtwR5+Im!#SY$$BT~
z{NIALsJwM+)#C=>`0}p37&3HkmBXDwe)32DJRkq~Px92ont2mc%0|M@y!HVy&LVp}
z%LJ2!pEU+1B1|g7ONUB!1;$Up^3bzB_MBQboI10_2X9^Fqwl*D{+8ol|Bxph-QtU1
zd6_Rfe35TF`V!Ay-sWglk!3l<;fO(L0{N^b?Q3%gHN^|3B4|28^<L~-3nWCp)$}W(
z;k=HQpbnUW9s#*>a7Ea89!}k(I46`#Fggp<1I5ikI1u7-M!R@e4;hBMEWn3=S7VeS
zgUSk7>jMy;e{Ms>t;R$^*E8%fS(`B!ij$ABF^wW~?d8t*)sBf_p4JJm36K~E+-3ww
z-~*(BFVdL>njXW#N^fN@y@=-<`zz@hgGNF=fMj`0NEW;e>i|16*nuG*L9q^l4Ol$~
z!&Q%SAwS{eXOx|11Yh|O%rp-i4DqQ*_o5HmkRR=>0HiD6NP8S5vLjVpPh#9hgQJX3
zx}-%(5xz>#KRy{?g}saz#fk|E77d;myVHG~)@<4XZa?X{?|qxxd;2nX-#OyMsR72k
zm!pa2#Y;2(^z#?_!_Pg<&eXHCvCQ?o$0_qwHZGhG4c4*N|M+s;037T5zZ01VRtn7C
zCcD?S`P3(Vj1NEflRWoAP1VG-K8fo5SX9MB?Id`xN77hcgef`8!@im<kmL>orj=!<
z$#`K81}`e(LRlGAtdBh>R!iP@_7*<)p4<4<OgY+{@aPNI_|jJ{@~2;YnTMae!o^Gb
zOr|w98!;ZQFc@T5V^IuVrQQF&;-$6mZ;>FVy<bu7s#x5us}DuS)ZnL3A1T*gfN~X<
z&xHwh`4mhK1UJ(bZ3v9*_`01SSn`sfJkW4_vbc-4k#%pAzFVL%!JH@T(*x69Y?8IL
zwLZoIhen{A{<|w8(W#Mzb%3@}z#6g%5;@Rz(|;fXYL{BratPyUNLrd^hbpATpqGB<
z>HGj3U~Co=1apIA7AeEzpN+$D9d0N~r-hZ1+DZ#|ca$rS2~5N8-_>F5q)xirg;&h(
z(h?!trb&Ad)G6erP21@*E7Cg2_hfnPYM|X4X^T9WD7!S`fPh%c=So$Bc*A&DaLdUh
z-gnC;AA8_DA9(Nrx8F5lWiy8oFg{H3tIIGRq4^SjwNf7Y<0tutfA4qr&EI^S&B1Aw
z&urlGJR(<yW1asS)%m|(p4V{$@I6}izgGx<Zvgg}x4<Xh6}Ryi$;l4RuycK%@Bi2j
z^O1*smKQJ8%$w+0-tqH$+WX|{*4<NGg&lI1wI**tCvMV-7aF6~9*!E}+FpiiL;fNx
zWuDc6<J5}d)Tx{g+;o8tz3&!&we%bwOnBnyEk66@7x?^_F7xQ4*SUQ83iC=RiY12Q
z4T^F=X0i}HtF1YEHwm{ft<p}??Rvn6|MX3i$2p)@q!QdjnIFKFXCPY&1<MF*T!7|C
zn6(q4i3GsF)>jd19=80sl|Z(Wa6IA~zC{dz?|#tH+br+^T=WcRR}3k<&UG9HOqcy4
z$w;O*6!&-ZrrrHZ=lmCcUm_YI$@C{4vkr*RcE{aH5hWhm$U88p`G}6pKBn6>UgEK^
zP#829>=5!X6f01!hwIwu&?EuO=gJEY3(a;QSo%8n4A4jn@bN98<I}_+3?7JEfd$|G
zB$v}Z<6revQ{Y6pgBJWJLTC_xHL(b*r*1seyrHQflbrSO3h%jjod@nc%Lm_kf(Pze
z<JR-bq2R9w3=G~oYCn%^j|?#mX%1m$hMFT-TIJp!x`+SQr|#mRzxzA<-T(48$gdlU
zv12M33wh7q5uLxhX~N#?hyC9y;qR@0{f|`u#~0p>guiHza(If}tph&tp^x(CKK66G
ze6^veq=j@_qn!l2CuH5<&`P+l3$D@*Icm+bTp}_MRtDCF0-IRowS~DFcBY0a(~QBE
zGJZl?8F@~udQP4!dGOX-c<@8F@*f+|-u8q?9>2`zKl41F`{E@YdHf33uUtcQiQ#CK
z(b6(SULay|-bN6>cT-)e{XR(S+P%F8X@c>NuLV=b-SZL5_TbtxaMSmNCHT@B)Hivy
zt5{h)t+Y{_02iB5qT^if{|^Q{$z`vnsIwX(226?!j(z}fhuvl`x@g1e=oo~)-`sT3
zv)cEeu~GULS^E+tXp%U2RwBz^T4%!41hnwK_KcRLYo^)=V_A%a_R+eaa)Hla3WF2|
zEy0e!j-gl=2J6c5DJTbljH#LDg~trDi{K*TUmHPO@;``0pME3YTXd%#+q)Vc)&ltO
zduU*<(kGSr*4tk+S{9=Lp;1M}Q8$ix)lk)*Tn3z6KF!_toaB9XpXNjNoZx}`*0}lB
z0okb{oPFmr@C~(@gBXmrVeO+He_(ObjOL)EIxKMe7HObZI-)qegWkQ&&;MsX%`JDG
z<-h#v|AOj;LyB8hsk|KL{TyH3eGR~yCHx)h{9o-h;RKk^&v39c<$dpafKPn?U*_u7
znx>9!YTCP>$XL@he%|!_|F!i%SLr4%*M#C)iL`$Bd8TBgV)D=!m|#SRAv6fy!psQ!
zjc|1zp5M2OUV^oOvbof-vFTYqQS$xw-OBfW<W7*9i&yq|<ZD;?qt9LBOJBUsbI)An
z+O+{DUuHO7ryQ+gV<L}FQ=KXzU7Dfv0$lKliG)C@6gLAu6%MY!^%s<rcZTG+)w4o%
z7|rh;I0<1mz7DS|D^m_nL;y@w0YJOE50hnt;H{9^=(BHwRMEL;xYP357PAdhZZI;7
zT!gkB#<fE#_@);MWTFzzM2~*cLj!Ci|CtzA)7zVbLTP$UfOKIt$@VrSK{hUU2AD!H
z1298DMj`2Lv}PEe^enGOCx~3R@~p7`0_Z#{O`52B^NPe6T=hN@H+@Ukqu&7ZKK<G@
z1uhcz!ZpeMBr^R&;}hN_=RNcJoauB<HJeiy%gL2x?z-h9A9~L@K6?K-?z?-HGv|h6
zOF-6uHh6K=^%QX)F%D}X_ZfbY(Hv$>ujN!*1@pa<sxI)hM1~eS6l@`Z;P_(AV0%t|
z|1KZ-*$?vn{GST`k3auw$jfs$Klm0+z_HH%^{z$xGC(<A0UX2r-`#!x8-e}bihX}q
zF^c&)4lmc-efN9#!5{eRT)EbS9cDDt3Bfbk5zcK7Lhsw1wj{N_A9~n@r^4VHa0Y4v
zW+K>JDMAE%bjk~^caA81OEK{%Q-s}_aHT3(-dC1iP?ieM+DgO9rsvGbRnC2KgCG5|
zdtg@a)Jwa3=}#~5**|%iFMaJ9UVIsvW=t_U&3N@JgYghC1>TvK3n1z{UA31G7F2_&
z1v6LNM6e@e>mrmJ%F<?l(pN4(eJJ>7(&GU)3wM(bXm|Zti~?2@NPzu!#z;^GxR@7^
z0(QI)_Pwpmye2E%UcocHX*Z_Ir3`?e0FeGNKX40T5}=9Xz-0Yv%?-t$PJt=X5dt+T
z5mG~g={N!E`=&tgDHakGh@;R1WJ|(u4F(&YwbP*~u~yl?4qH!w%oH~dDhuCea2s^e
z7W<UBpc<rr-S{74skL9^6JNl^+eOYw%1S_RUYXCQ%;z&)0|T3LW^I+b@4S`w-LcMt
z_nzWCw=Z+y)Bsj(JpK)hOsUjkoR4Nt7UM1Mu%zC}IocjDJ1m(`bE;`h(+Fw|QVM28
zD3=W7s*nvkeoAc$)R&Y`HdM2HKJcRt@PGSf!himke~rP#itNHFlZIDa2mD#@``-xc
z|7Q37Z)~`FwN=OQ3gGziF1Vz9XkMM=@UrLD+i&GZKlL}*-geAq9x*0Z-KGdy4LjYW
zHMdr}-1*jdZ!sKAqbA*?-D?u=`8dfM@QvW+ikU`apb%^USrHlnv7z7@ghs;eIF!o6
zz6yDhF`Q*AZ^P>I%F4ho8Y!c-j5|-A;?BQxnxFs0_p`S<;fcqu@P$9U!WTcg%hw;-
z;@Z_QraZ-H<qV_MljMUk?yU)_ei{)1jiEeskOkVQATzlB5|qo3moQv0ES(GCFrpG<
zZ-j|E8wF>-T%fUnkB)hru}<8dn{X1c5*+`;5hwqU74M0Yu#F@`pVR;njct;5LVRpV
zyMAdil*EGCATc!3N&b?1vWY4HE5WMRbon%$xFA{#r)EOBWTIH~V-t{Kf1@1H4q~M6
z0PI*9YzV^*SUY3L3y(-Z%r8GF_(M-KjoAWCFT24@boz^yzuv{y9rqv_%zGA!zJ{NR
zc&v#&0IJlDV>;VqHlLuiW1Jh#u8z3-u5&zi-#I>T?-|~6*BYlzW>7YuHB=Q%Gs905
zQwUjULL)b`)JFp*`#H12A=9IhqoX0SSrLMwGLRgk42_R1L(`iT(TZ7MKJP+-jDY4I
zlVuby4w%>1`OuHu#ozhwevH5KOaGFUa)3QE;$ZGxAz(PZ9ADmbPJqWc|JOJDizsDv
znu9BF_S`9c^56TL?C-&B;^Q<VVMXe-HF8aQXwl%hW;3D7NAJw~5{p_|<(;%y>TO=H
zMv@$1I&}`3IuHoO21#6&he+P61d|5_yZSJxH4r@rl&Qc$16LbiILTPrftAaim1jMJ
zLBrCzXLYmSq5CfI&_`~D|7gy|i~D^2YukL`Pj>k7mtN%gmn?gFf^y{?!;RDAD`UvQ
zi5XldJ{tD=ZVsjrW_z&rvU1|~;5jfl<(VGE-G38U{Zc9UNMZ<(Aybcw=7z1Y4&A>c
zhVUeJJ&kU0YGd$E%#s(PkG$)$=!sUx8u#NV^)JEnt)?%o0VGbpCjC3E224aLI?y0I
zfQb%&CV4DMmlM#&Fth{#?Gy%48DPs`c4S9Nu^JT>r(m$+W1|I^o`q>5{Z)diHCP|J
zsPORMUGUTunrIT`V&qV8?+dAnp^6%UjKRA(^Vu$LKBe(Bjv3>u;`X%x_uqU658Znc
z58S)S9cRa^tr{45paLe;9++yko{=2phWT~N;a<Vf{(!@SA(L6jyv{=~v=yWPQ-;s6
z$t9u#(nTcK!E{O;_?Q<!%nL9;kqg72XK8F0y)dSlZ}F*Lc!2-x`jr3rKm9#U=NWFZ
zVA5*>j&=U8AL*686QCS70LPbi^yD8-{CU03(Pd?Ab;M8n$S<?ES8}*tqhe4OWLSYC
zr3>c{G1^AXdKZjwY&4|lOU}|pO++z?X>T-2<HGcxkV|zP>fQv6Ax(^`wG*W%G@t^d
zkjGVlvqGa_RcSm_v0xpEvS;9$3L|G3PAtm@uyR=$6*a?A!(drBcWRY$Keoz`{pCBE
zR}Ig7<2rx($Cvs1AAgM}9)qjTuHl!@P@F!+@Z>7lAjg&<)<Lc44EzxGu0k<}@oA4(
z7@dM@B4mx?445M!AA%_Y@ykS5T#^SsS1-fsm1qEDB4IF7yh>OD#F$`Xw0$#;4V72p
z@i!3#FmdG~Cc*RxqVMtn+K?YK+VjWaFA^LIC1%spB@UW4r=jBt^b-gJFCfJQYb&sD
zfE194r&u%OYf8DH4A(-VnOou7ML4_+ejfN1E>8c{5_U!nsB`i2+0c>$e1oXNh{0qz
zk||AHGoMa4IM}9|yhNUDbN)=h*;_ZcZTT!8yW<S+zx@<9pBXV;&tOTwR4}h->M2Y-
zCRdCx<i_A#Nj)vt+b=lSDcIjBIoL0lR+d@?3PB1*27=9_sggB8cA3SGw^OtV84@lf
z2fFBK;AopME8%z)nNl6V)OyB+Wqof0sdxBG|M4d|+->;({8xX>$$W$9K#q+8k1y{|
zC%`{@o&Wa=;jd%8TffZoYRPaU{LGL4GSzI%-a&<`2?{FT?OD6czO?&iK_Y8Dkkd2^
zC%p9dqRAwt)8&iym}<$EH9mkxk?6&rlI;T9J)9t219lEJt_f@rrmB1pngVA7i$6Hm
z#UwfdRcZ(v*r`y?3YHIYR<~gMqGvR&8LTx7PQyKSpX8p8oa3+kZ)>(*I^r8&+UARY
zaEUK`@o8TCTFL(CG=p2tv3$!4c9dg=;n~k;j;qfpn^~A>%Ozpyv@&VJK3fQlg0b5A
z17xuX+gN-}bgs3Dq3=Q=_BPlBJ0DDZyr;cS4Muddy?~ERSo9MJ{K9A*oGgHiM)y8x
z8vxq0KWUACOq2nJpM|DERAOv>G#!%OY9J~o1xcZe?R}=TK;?llyl3T#lCQ(ki7u<)
za2Kw>WYC$%SAuUeI4m}S13>M=l<X9B4sjl^7+YYh;^tH42ir^!ujA&s42n7D&RFjK
z=nC)uz=yd117~^Q{tIlJ9z$c`*(rQ=4|lka(<xfH;C+xm=5p$Z<#3WS*(*4h4B4Lz
zn9M9wXQ)CVao|7<f^k!pfhjCDkC_rlnc)<j3BK_(6}Y)X)k0_76zzy22PF7J_^1eR
zCX!00ikoJv&zGUN%HQ}eew4%gBmVop`v_}yud!RS1d&%cC(65k@b~)n{@)sDJ#GNL
zx0-@uo&UFOY($jIFVkFIC$pZP_=&#-a*FNU3d9B;)dH8QZ;le}WPLZen}|MFRrIyb
z<LzT^d`HL%diBo1tYxe9(CbiGl6oMW9MvmcZ3x?Gz*!BjdL}f}NFGcGK@m^~uZr`L
z$Yz8hPS;a`L*Tj>N|!OJvWN~imY-@US1Yphnv<IupZu9~eDddSX1-JL>{qYzmCqdT
zwJ$!-GhYy{xG|jHpuBg5{Ej93&~UH^`PgBNGF$~_N@Ic=px#qlCO98sc$3Ypbgl|1
z(J$=RV+x;(#yu_+%H;lMd&<8=&Qr5!SQ83y57LYidMXAT+dt(1gy&;ZW75kSFw&(n
zCadADcm;I8n9dncOiV*W@Dh+3r;3b(YzgueSUM>b!-)FKVCw~FjzW>td8eq*#)mK@
zA54|90&>Zy-Hh4(WsY`VrkP%1TpV%sY{q>b-Qb}Q-@}6sp5@N>oMh$HI6R1RP}O)h
zN3Ejo1-)|v_wW#&nPAm(u%}E83-%9lcJ~YRXO>wb)JO<oO47+(Vwz+0J0Q3n;zNdn
zZvt_&iBrCMAJ!PYmsu&=EBq!{2}g7&BsK;Ds+SN9r8a!o{O*90UsEKz!hiDr_-VFY
z-sji<=?kphx5mDWX`XVd^M75%UyhA{jxX;5*gw-1+|@PIRs86W{7uT@X0BfglfU;q
zkn=n}Mtlso={x@=BN`1G*R=m_no#_+e9=F>CI2O}y)JPDjm0I{_{Qn76}HC$7ajE4
zxLJ(}ehD3Lik(Y}mM1Ucs-Otdw2RsF#u2^u17gsKG6nV<*m9O}Wm!Ea8E<(;MNK)H
zW7izz8R6bPcaD31Jmaq%)NDO_#N(ge=BvN+EMNbvii>_g^WM|&{impxR~Xz1g~Gsk
z4k}OWglrj_JWR=X^8QE2ddEm&k@lvuR}QZ)z{2W7;E=SAcG|8EywlcCfX?u+v%Qae
zfdu`heSebv(X;zaO_Pbw)3!rp-zTr<I2bJmTcknKXC|Z?IuU9Ua|BjF#*nWC-+x6h
z4t8FK`JU2Dz)u3#4sXLWTmTJJbH{Y=8k6f6X%1ha<T|G}Dt_PxR{8Kp@8bI&y1+g6
zo@9A*7|wbQm{io)Ct($lM+<3HY_0fdNCnP6xXSKe#25dOGVul{L4xWfSTU>ZJPpK}
z&P*xxvAzP=_~203#D>*Jj!SHx4FMuCkv}7m`yq)>u@J5lZ|iBvvYN%lAs+bM{UMuQ
zR;0MjfAtT3j;k;JW4`#=9X8&x!M5|q9s$RfcX|WxcGCI3St-hQ7WPlYz%oL&H>s;V
zKJ|mYz{c7gT)#F))pkT_?>nnhq5(}Z_emOgG12Vi1}I;k(Xh|8Ijwn$m`Dhe<k_yB
z(^`U*=^F|KC%i7$N82egCG7cFbZQNahmBG;YoMtFdlZ|20c52HD_#?bjZRyt7}h9_
zhN#+Fg(Fo;4})3Bc)w(P)iZpdq1>p*H>Q{qmXqg4ocs@l{JH<&472ABc=j{9eB+N_
z;+fxkf#?6t5_|WqQhxs?>+f4d@5nj02-ysZ%waqfJr}|hY0wpgG?|Azy2MO?B+)ZI
zc<M(Rn^1#%APuT^1zLO4dJ75nl9E&MUuw=0jNcy|ZJOp2n?pMkz(^MnXrx0Lk`a&+
zLyb~cP|W=)SHP|c!}Ulebjt1(IJzFz`HDp{D01*K$HDbI4qv`Zb^S7VwZqBHIe+fM
zV?O$^(|q8A_jBuACs{ceVT8)TyrDUmgwI(dHrmp37Ql1RDwqmcFHx#lv-V!g+9w+x
z`88$rL@+~YU7;jJNK0Hl2+Y%j9|(%RNmk80r$q7Xags#ri|@UWFxi`QtYWj4^*i>Y
zc!<uCPK3D&ZL#r!X~wL5u4Xux@?Zb6zrwHl=s)7pGZRkSxx%%k=9|j`z8i$Ux4{1V
zJEHS{EtCJT4Dfr02XL(Oe@(C1NRHh;$>HH1AOGmjaQ@r}+1jdb&PD??ZDId3jrYCK
zeV;%O*+#m+`qy?}>@|kyWP!+}UXwp;FS#%J1$bR>j!S%l6m6Sihe>77bt8g{oWejN
z48^Q5Vb`8zfzQ=c(RiqUqEw2ZU~+IO%sq$~EJ`DRncX1Nz)WC*a^QvhFsGd4EL~AX
z15Y`2<m(Nb^bAfdbKftmbKfr+xO&K?&usI|?_cD(fBqs{|2U^Uw}yGo8S+~<SX$3H
zw;Tr3quPbSoeX*6F|j5bGqI5v8Qu9pF#w-+-V9AIsJ0#T=|XB!W7bMHV<R9*yB~Fg
z(nkEo_b|fJA<{N7`QwzT-8%saIZ7t9(n*c?l?($UQzQqUhxf(}L&UTggBW2xwbXNE
zSb*+2_MY5k@3G6&7q3vbJuaLTKJmUK-v8h__kZ9X?znS<mDOSJ(6522rrDjNs;#k+
zDYD2q)Ij1-xdAS^G#U#=@dJS}euE~C5B#v<*{^vnzhqciiJw~xQE-5Zeh{wlZNn_u
zSq4j5VI^cn48G^0s7XN)GnR$L&?Y2&E?aBu*pMZDtXF6>G=av&b;H&w{NXOEKV9;7
z|Hr?|-}>Y~V*30cE4L2WuYLEOJ=XcZ#`CQnBLK&jcc8`Z?j}cjd%XYtALPzke}Jv4
z6-^UPHog~m+8U@x7n-8|(wyXHksIDOo>Ns^I~@jzlX}Q=(<%fKgxT({NiKtZ%+j}e
zOmW)z2}v-|N%c;m+g=NC$DM&Ral*5L&4N@hCHqx}kQD(D$On)OXo(Eo3AHMj20#7^
zWfrHh%nSPthLvGBF$}jeMla?JmmOxafm0qiIpXZkjye0Y=lS?i&E&B?F8;4OJo%Zg
z@$?@UcFvyR;_eB~d~B7qTL-B&1wvayRC1uOg5-)z>zK#|@HY4<cq4eDSS3uQboRsD
zo+a@CqE~<779`K*6p<5)X5b`r6RJet|JL@oSKRxCdlsP-aH2Gk=^yq6@l+cTjE2C6
zVBJujGAs{;`dY(_pFiU2pYCw*_%?QXms3keJa|vR`+s(m4}SO_?z(T2<r8Iqld4$o
z59jD%$Z9Z|U`iWofn5x4Y6z9GHmyg3SOWB71ye}3*YMyfWxgLQh(G)zmVfm>z-$h6
zBe*6q^?f8CMrmx?baVzzw8TiF7iOCDmFVFRk8#R$SV&PcQM#G9Grsd_@X=XP1hfgq
zHlPg3zJgp?L4R|fTmSM2{_B7Gm-tVA=ASUWxK4h0NbO%4a(H|>UIDy=34h;xo&TFA
z{JjC#|Fym5P;u?SDJHuWcisH}54`86+1jd@Hz_VvyZwAG5Jgjf4*kKqPcrKYb{mfx
z|Ly5HtGR#(WLbdQHA46j$5fThH82&bPD9u${>Tmc?I??rj_}k56G`f0LTs;8N}dOT
zVrG@bE3;`pEAj$H%TSI8ay!D#y>W359(S|WLm|T4!ckD>Q8s}@I6TN1U2>Eohuvu4
zEO2Vf=z}ZV`N6Z?IX$9&e3z?Vyv|d<dx;nRvEk_K3d<im&E^lRlijz(DDIi7#!;u$
zN=yy(PVqLZExg7ZvZnf#Y?p&7qvcXaH}NM{1<9*Fp#rUse+S)*bX)*>MNayNc<kgH
zT|R&@UGkuJ;d%JXP%c?EHeh26Te}ShFYa^kcegow?2zi>gp=0t(YtdV{KXOP|L|Gv
zzITPu`XHROrognO-kt}gLMB0`SlY0L@B&qm(h1a|SSEKuY+&dcOK@O{<Fu>7uD+>Y
zK8Jb^M+YIVV)HDVz1j2B*Muw=Toa9zlBbY%4OYKd>aW`RygOA{D8SmKXe~6Z>a}eG
z!b(6}3vLq?7A`h<4yd#X<=U?-a&Z;@^$s8T+1vQP{=a{c|NKAvb=K?|+-8pNJ6nF&
z2!C$?_Wv^>{K;_xaD3q%O8SFrdW!k3<)&M2;UgdVYh1rpGn@MbIDWD0N^e?7%|Q&I
z=@nn?Hw@C*|E8cArI%UmmAVG<C}B%`&lYizg-3lQDkrV^Oq)dzPn7tUI^RB*)HtX{
zf}2FSxDy)dqajc5A*g)tU7zeJ<v=I~P?X?v39NNZ3Ob=SO6`Tb3C+RW!o)#27Y0qn
zXr_z~l;M^m->C7M6}qahwuJq@lbrv)J30SLJ5-Oo%*(%fm8bvpOT7G#GG4yv0w+Fk
znhT#=XZ_v*qXEo-!vjY%PsTurai(nqv)FFJRIe?$vZGP<oEjI#)d+f+j&qQ>0&V<n
zd`}f6i|q6SM<<!46QOoW-GpMC8OTN!MzLv{I(Dxf@Z=xt@%$IJdGYJJl#TG<J!3xn
z@l785*adFCXUzCi8J^d~<7bX~XCB`E%tT_RZHpjIgC{@}wDZBDI+9XtaM`nc%VQ6<
zgZe<Js!;5!8mdNUyfUw#s)V`@jbFYl-2Ohp!(VXZPFgPvlgOI=&%E#46B9{Rv~Pjk
z!_HE38aW$2dM#+*E?Wb?M)5(88{fTz3W)DX3vB>IOl+w4u-KPY;J2^y<A3!-y!6Z!
z{@#D{r<@y{WpBv_H%U2W1s)>+?>HdfSm*!Eiho{hGQDQlSYPE6AO7p??FrMV>tO!=
zY?6HXUjfIzDy|TV{SAdaviTQMX(Gc+Q0iLnUdXe~7Fe`9QMRyudIY6sA8Zz0-z!)H
z+L7tBM_fzQ&_{?}HSBhMgu`t{FmGv;$q`JCVj(M(a-`&g=-_AK$=E5iLWa;7CG&xZ
zSSids96DiGTSimEXiLe;20N<Z<UamHhORA>zyDrtd*AKc_N&{>p4jKw7xsAW3s-pJ
zcZc}1tBgOi!t(c@AisSX8HEJG>cHdc2sKAefb>T6WQFhJZaBFLrk#I#v`n`?N&9_c
zQhH!?0hAsourK+G7S1jm)&jC+%kl_@70j<Wu0OuZ)1TSqg|F;0y;!j>!fiL@{P_Dv
zeBhVv<GmkTW%)!Ap3t;`Lr=3+#U#PN*RXl;*f$ztnW-bmt|8en2E@YvMVRhwmbxAd
zZj#eb+-Gx`R!}#w5oo}<FxfXQxK6q{Nmt>;mzA|s!rDn;>xHl;YGatw)KBMwV52=Y
zzC*AU=gu2H%hFL>wf}hzstM`ga9+W9ZP#3#TU6M!2tuU+%~6FNa?G<Um_OX+SN;z_
z#<S1w@tgnbc~0MdifbvwQI2)~ukH2%tR6Q2Z@a?Z63*XFI{!CI_<JL;|F>umjF8nU
z%ytS!<BU)JxxdL|GUV`Z8VO`^A0N(I3vheSt-mD%Ci$24cKxp;0Q637lI}mA>U<aI
z<C;*YG8?i4G|Kzh+xegy7wK}_HImZ$nI|n2n<jm;m`aqMiwBJF(IJdR8(!`9u}(0V
zV&ija6q>0ppLDXqa-@`lut(O|K=}shsGYBEXbf^Mp{~`!XbJ<d<ffq9a+E6-`T7LE
z>hbG2te<7@;H_MEu;Rk6?o&T`jVph&&GUcoGB5rQp2PK${Noo``Q$lP?^uQvOMM9Q
zy<l^jWs%rsLSy1d#koUwjP&0hI;X}qe?VIlpj`*FDuLKoxbU-~71r}GnKr=D;hdvK
zj(Fk^wz&K!m$~-X6n9{F;K3z+@#ClY_@_>A_Z=g~E2c9oaGqwr4xb4^OtMMchDzMs
z2N__S{+F6O33&>VMMT8J*X%=nz`PC<{&XIS|GWtWzj4qsife*tmG@!V_bxR}T@So<
z6^a6Gx(_Zs<;n8EBOt96R5}<x`b~%riVgMQIrR>4aC~gvf)wX0G1@tz2XU1ZR5Kop
zsu|<s?bDyqTgRBN66&jJm<zi)gonWlkN7|Ty}!iEFZ@Hk`uWRj+;@h3d9~jDJ45(;
zW3d05S5v)t*#DhJ20UH?yvr`e7r31vMk{{gV}BcKHrU#qMwY*Ci)Ucr`}VBAu&dO?
zFT}#KK)WKC=z!Xu;b|*LDDFZ26dVEL#OeZ+?ww+@gw#sQUVnvtQF~v<q*RbZZi_)f
zkyYqpm<?^iAf4}kNZX9Kh#HvK&=?;`S}v*xtPNUk=RhY)HHC={N`k>S5XSN>*dT|-
z#!w4nqGSf<D$Ko70HuX|YANRfhC803XvkOQm=k;WQ#rakfbj<TT_?D3*Nh9lu*Ll0
zYh3-kEuQ|&6Fl`lKf_ZeR~dceBxir{3~RTnVie|kzHPLc-hk+(bA)eK1lk2NVLAzB
zYRpX3yE}X!%X=ZWmZc?F15N<d#PQ-YyZp)LuJI@T%S9gl(si0G<)+b)`|n!e!B5@B
zd+*-l_PbZeRxPq2lq&{bS2Qz%7k(Z|c&Ur1;;z35&4EUHJ&8?P*d+wQAJN#TQ3(@$
z9j@~lX0=jP0p@R--qm$p3f_h04^_Mm91^eTa~V}6HC(--oVi07tcFI=SZ!s1LG5DN
z=xCpu9DTRM^1YRsXrH7S3x85mXh()MDMZOgi>x_Knbbk4;!S9l)YI`2Y)9Z#3x{(>
z7+}8aSspk1-M|0y{MDcQ@7RBCm!&(_ICR{g3^=~PyT&T-dzZ?7^UXiC?#$q6BW8VJ
z{5#h9_lm9}WXSd=)!~#+e&iRqaQ-1)zB-KrqL{+h61;SwV7JCGUR##8yb7S10!!$n
z|A|P)7*B*ek)Gj6-#t*;y{HIeS=78o#(JkO?@I)wb*D>MgC^-(@+UAoxH@?a*eI8Z
z+=KQpA_LCGvvjb#?Hu%MG!?QY6o9^Cp0PnApXX4Hg~1r|GE8tr1KBY*@lOdWg~AdT
z{-Tr?2Dwre4aKO&ZZyam=yC=tIXWzYB#;Uw6Xs7|;ki$5@%cZT@TX7AnV%c;eLsIM
zANt9&*gRwFvJ3n0M8H#N{Svz47t|h_I20+uS3)viRtWjXQjP;5QWUD)85f`0<<ZY>
z@r^HR@$4fr+`e#bx!~UOBR=@v4Ia98lbbJ$C`Vbq*e8zpT=5uYGvP=Kt3PO2z8TyU
z#F#MQPebvSH04LsK~urEX_F*0s#Gqp@<YMbFzq)&-6&0j_nSJ(^diLXTp-S=@4}Hn
zq9ASI??S3#(-=c|ZoN(T^6xY}@mUxwC5C@||HZU)SLmxJIufNZ(mMS~?{`c}Xl!W;
z;c?Sv+ejA)Ezyw4#u#a10&0~-Yi4UgYGjB|CWL1hr7+6+NLX4vVC}~;zV_71{PHjS
zQ_AIKIJ3;$E3ahTyqk3X-*WO-Be{5Ob_!?i_@l4?Z+7C+OphCY;|Abu-T;8zJH>o=
z&iCE_L)?4UPjlt^G<fxEGWb~>^CeaZ?aRG-JOJ$#cWvc@-3nkKflLy|Ocok|7P^#P
z;&y9>6CLMlIO&<5vm8A}b$jCMGp$9U9825AV(}<x%W&`S!j0)Rt<rNcl-^0WFN?ET
zxTa}e46SXik<cvUB^1Me43q`rc{(|VAvTNt|CvBxV3-MoKw*?Y;V1?*dFhcA4<{8}
z%V24MWO?v9sCVGf9$R0W^4Z_I#&7+>gx&RmANX6h@PVJYot-_Xj~epKv{R!hJ=3MA
zBX^+@5F?a>jC=&;IEE-4Ou6#(Hedgf>wNtWuJY28+vvn{W_8T{cQ5ntdr$J<J)7Kq
zehHSd@ID<ln!3S@4{L?Aj<JDFIJuJX_2&$?{|({vZQ!>A>ZGx!%_m4%!y!sosJ#ZV
z-dvbh%DfIl(%J<Wzi|=@e{2BKYRUT$P?e_S)T{akPKABG#;gmv&$M(Dec!-^3&Q-s
z^E>~@Qx=Ba$9usvDSaN(=eFMr7_<0$R#<cZ>}4sW`?al6P*?DiHFF?mrovB*Y$k>{
z1!8Mz0tTU%WW2V|`p=H}_22jk|Hc3AH#u>3h3Up9_zfI40Pl(hAbaOP8E;pkpEq0h
z-`w6`<4({Xtufo4bMsAibMGBL&DQpuriu0=+PTB^R+ybbTuWAx_Rlo&bpIdGgBv)0
z?S3}4Wu8UzlfDnINPt~UZ%^%2kVesHfop6e`geUmyXs7nlOnAgt=;$cwb`u}E^-i}
zyRbx~BI)hLrM<7tPp9Q17|=Qt6=?!gZnKCOm?+C~N^>O4CbZJR;gT{MLoo=AjYDW$
znDlDG#9G+kIykQ~ipEk-JjK3}U2CvwbIgfDI9=lNGDO<uB^zf7e)!Ly=GJ>F{`tRt
ziGT3F|6^|XpT5rD{J;DVE9X|Ib{g`+;JxBBL<M^vrr|t?<)w^b7>?!s?v%&Bbd9fl
z?s>lcg)3}5RZ+}J?$})6!}qT8pZu*`xc}x&&TS6K^JuQqI2z~i2lJpFu%0Xnp8_|B
z>7ix+(6TeP?AF50RJgbUU;6u=U-`dV@+I&)0owO*;@7BkZyKm-2@`%3;P`p1-IU+%
z@Z)Rpp$P~OzqEy3d&NEV89si1)VJEx*dX+MsyqJ3?v8TqykY&kvio9atDmOS007%p
zNkl<Z@U+)R8Cm4N_*l3Tbf5lTOl!c{#$$Ksn$pQF(``|VChecJ$Vm8iYE+`Fa|~Q^
z(ag%VD4<X^u;&%sULyN<hy2V>J;;*}U*W&~`(NN>ZkR3&TPfmqrtrW1z5kmf{JpWg
z|7*=eIOYI+4*(kPHl05$bZ_b<rq?_xt4loe{=dfdeoa+3y^!|B23F}<$@Dw}LMD5H
zL*s7L$K7#sjnh6<(7U-x9}!4}R#>q5je39I+NE~VHAzsd53KH#DyNc8p4v(RrKeoz
z3<WwxgJ@4?n9y3ItuA{}(xB~gGjRfKR}ImIO`{CUd+<#n4aSUnkv0^`Iq-9#sbIFR
z<fT#!U@+E*421h|(RHvfFmp<7gu)m~4_RdyO*2M&4%J=EQpV2LJkNe+&dX20i@W<=
zX@n}<;QQ`>FQ5IB&+vDC?w{~~`UiiJ_k8RuS1#6AWAILCRLMsf>&u|?nirnj;!B^o
z$RnS-#50dwXTCS%{L+Yz-+h)({QL#p|Ij8k-Lw>l3v-2ik83=Y&co+y09k@eJXABo
z^?k$j9pTE3;o6a5rxuQU2(W34{{Pwg^CwHP?9LDSoO|8<EwM-BURg_TRlT9QF#rYt
zXVJ`nGaL+|k&GgZG|D7OKgcMPWc)$D&`f`TOh!rbgBBA-6G@5UGK38WGsFmESct}8
zX`s8&-Kec=&wY=`*yC;Pevf{**RNlHk=2z|S>0V#{T#^7sK|KnHh+H3`JV4Wwq&?-
zOZfeN?D*Ax+b}zZY8syZH0<&#rK~-qKdZcAq^ulO<%x||<zL&n4k`|9VEuIBSO0aw
zuJ?pH*K$X6?%%ab8kLYYaXj+2yU%^a@aI=u44G<+c^i$aiAKdWzEaKa4#<NuE#T2K
z&CY2&-%R+tG<+D}Wdx%vq_qPK>W4b~-YVEx2dhq>nIP(;vIT0j$em@(AD{5Q{a^o0
ze(=g|zWL2NoPFT}qbzGbtUr}H|3}?k7aV|(>k7b`!Mk#51+ZuUj4P<_uc7sfzxTKP
zJxultdj}`cGB%mr>C)p)83y_Ssc8_;=^v6{gc2JB^~NQU^{=hhJsmss^ggA9PF0X5
zwl;y~ZRQJYbD!Z-7<dA0R4s{;pp~t)`uE0_O`;dRZzPO#A@UT`jS{$Y?GUH_W)<L7
z16kO?(pc$+pS2CIK^<Z}Phc>F!4mWbUJjWVFVD)XCl%(#Hv=1@Y<+DEJ;NLS<%rk5
zy~pmPWQrn1pL^qy>-UeToJEFk_2w1!#s~Z#|LecY7k}v~Zrt&C41*rrc>O+q@Ebqi
z2Y+zH?7rdLMvpIETH)(2tnrIqKf|-ntawP@0<NN}T=c0IQLH*&X{Lth*f2Ua?4MY6
zjttw!us;$Gr^<*B;3thOa5(eA>v*_V^S}EK3|54_9fMOS>zY~V_4ZZpizvhNUxhus
zYov#o$Q_$~erN=meZF&TTyZqH3e5@$8M0lGBt96Xb@OvIoH^@NhX37vR-+ToO)x<|
z=_9Jz_Su?t#boDG7NZNJFYqSu6EGy}03lfmgcXvcvP_NZfUMyLG$c;rR|Yn$)J!mu
zvH}AOt9i-ApDWp4KjPo~xBp{~4uz%9o@Jyz%|<_uYyeawTdV*+e#aV~GQ80F&&Pbq
z;VQGql)wH<{|3YUGu(T464~#q*G^lYBLS$x1P<`1XzQrQY4yLPUnkSO%((+L^1jZ-
zATd3O(|mN8(<I8=|DL)E4T){o>`l>5+-^hUuV`Cv60Km25NcKe;w0*}o$;sx2DA<r
zYSSVCn8X2*0HHu$zhK9!{^IP^@4MCcpdMETm%6Yv@TqgHoY6R#O`w`7qhq1hcb+dW
z5c&g860Dt48o@Z>{0rdhkU#wgd%XN-4>_@8dV`$7$`Y^ayv?_-eVd0zx2dTy<_ueF
zpNFaP@Bh#K8UOx2_#0gK>P2>MpYSjK(X0IKKYW98gNyuIfA25x-~Y9XJpJsz2j?7B
z-XlSvwiOh<*k`@)8jpo?-*T`62M5B#v1NBG9F)SbDx(sn&Z7*K3DdZS)k9#syKpWP
z77q4>-~Y{uzw!5S_KsYX%+=1b_a~D8=R2ZY&&%}MLLMi5r9FR0VSk5nEnFU*CmR(6
z?LJ9qn*_llT_mffg9Es9Q8@Pu+<MJhG&^kxv<`_$iY_2b(JDDnoHX7RrfwUfCh$pv
zw*X39iy@6Ia6`zE<hr1pglCnICKwPjXT58s4NZ{?vCOW{(C<2)``cUmAO83M8vpbE
z#eYHX{t@}bHA+{vjr~tl=l_KJ{tp5B%fbop(*$t*bm;uk!ktexIoTic+;cz6<x9WB
zgPjrc^Ls;ri&CTn>57F~qF|0h1DLD_On2{}O!hiQ2%LYc+L1#gjYCuT6Slgam|Hf#
z)*cSEwp|HGaxsi%L?&q-gbp`Aq+JncDC9oNIJ_n`(ZtAv0G@C?Pf!er-tkT}x*=+q
z20hQfU(7R`NGh8mWD*jjgW1Hd3C3gS^_1a?w<NYDTz+2Ztyq5V|9-%?{^ULt$1Jl%
z>4bms(m&+o8?VsMR$1zwqn9sZZ9!ensP%+{`v?4c|Mq{#*>h`5j+JUu@C#r3C7yr!
z^X%>S`NQ8U`Q;Z2KKpejFDvFKFwDh4CDezO@k8Nw*RXpCJ4c3{F&sMYPFRZHQ<oZ2
z6oWgR2A9Bwc;|v5p{_kFKUK&x;g7!I_)CA?;nXl4d-7*hE0YtLg}@yR4TN)z_kMd`
zcH#TRF1I14hQvPCrX;GQvet%ts4>?fwX~?`Y>%fCWil1cf6j38wK@X$t%l#V-^0sY
zW0JN@6aeva)>>7YaPBpYW_rSyM#|}0$skD@X0TI8t_9NZ%4p1<OyU{{a5U|4^A9Kd
z;@^3J|JA?ySNT8v-~NbamMqoEFj=9=Pl?X|{g4i`XaE++$NR8uiP=Nw^_TeBFaB%n
zA6AsLV#Lu{j5g%AhB4nI4{9gKM^AlDv_%Y56AR!@0#KZ~ALY>3UZbQFEJI?1(q7!X
z#Hzh*v-vk@1;#kA9{N=6Tr<5CFiAbrx#pxn1w_*(B;iAZ8#vS(2bsp3E#%@gvB#16
zpfRCMLa!CQ1j5T=YxPKgZ6jh;6@mec&4jG>Y<EsPe0}~IID66Z?cX})55Bd-xZY<;
z21vipKYZi=$*cFj&C|=j!20rwoH_e5JbURgyl{D)7oG)m$K1SggLiM-=EnUIdnb;)
z<C?c_y~{f{-{9%Zuk$B5<TrmS=YRYw&+zyDC#%%?jPb5e%`BrM;c&;Wy{&AI;J8+%
zR;jF?ENk^?bxxJiwO`k??EA)Kr>-=z@>LaeN}db%Zdl%W)$y4x8;<YzNqstovJ`6P
z+5Jtib}lic4k0}0I!j$r{6lxCk>IDvIo>t9YTm!}TyB0|lBi<^jt(4KmxbQCQlF^z
z1W49pwYrW<#zaDDP^N_YHqp<*BSTJHSe-QvjS{7|v3Q3j)CIzy4P?WnHfge>li;}_
z>Mf3~k?5AF;iR<|9v=2E-<a~h`PYAiKl#pEeD}}qaOs8Tx_p4eu|NPmsgwUtLgx3R
z`~D9D`vbVc0psaD|I#n~I~4f}`$s3yGrbKdNeF!j>8?ZGoAVOr$omp&b4`kU%n20f
z`2Tb-BJ#+G-azuwToBQuplhN<48<T=`9<kgkV6^MA{Ss<heMfTSxcI6pviimMMjzs
zodySKRs~(YL`arvVBcUu<Ps93N!15o+BeRdw1{oIY&5dIRlK~guKeRZcP``gKb`V>
zzp>5n>;Tb>VX?{Y-ulP9_TbOBxco)>{R?cI|1zI_@n<=|<`@oY$l<FOm-*Gd{bgAD
zGSywU@fQ5?TND1pE8BeY<=^6+{eR4t&i@^b>t+7IKY1Nl`wGAIZ!U9huV&|=FshW@
zk#Yn~dY*7ssfYNTdWXb15Exx8e)@M_HdmKHTIYO*LNkdsMb<h0o@bfiPrp&}#h)z@
zYGxB*HuY<OCSun$(|w%aTl1SnKB!694iOC?`X98glu6{P?K$sG8D6#47OLLeQ4mg!
zmCY^T+|!1eFFT51aQ{nT_~e(U`qh%@SZjBYv4lzE3AX_@F;?c|HT`ETI0e=wG>|T+
zX##-|=RXS?(1S)XlNl)0r#h;F%zPl$ox2&UZ)E%j|L(uVuf6^cIJmV<|G7)lq95&A
zRDRt1{*MCo|MYc0hQ;yedsC}E#|QhIJ^L9xbLp2jI4MDFBo>ie%ruqzX*)Jc6JHwZ
zx+cLTVM-Q>(0wz-H~Reu)HjJa;zt%qEE<}hO=E>c6YYKTn-bpu61!i2!6QzQ>U_dq
z75+4^uyd}}daI`kYTWZSB(dh{2j4=COOGZT*K5SX1lJTWO$lc)=&1R<4J+MW?3*T~
z*<m-ThPsj%NaO-k>;i;cm7Y-e)N_Wz?TUZ)|9!yS2m4etY^<E&-O-zT=l1Wj(SMFS
zKhN^Y^K4ys5z}+@&N|k=4uh`<$LlrwClzHmL;EG?pDy{@iy43Am!Ib6U;G~-_8i~8
z{a>Lnp*Ix%KmYAbuG}oyc-k_nl;awzo*+v;xTzE<Rj8a$I)W6>a~UQhWqPd4j$n48
zR5PJ2)ldGl;41aewUxK^rS_pqE6c)LuQ(puuITmsbC0&X&FUcR{_D_0#Mjcbynu)Z
zH1BKU^r$Vw-!=P@_B~A20u7lkZ4i_e%C9OIPvFAm4Qd1bAe<wOBsQK?+Jpu+|1M~{
z7U_IXnt;LfIoCwVW*ztqwYEQ_>3YTa=TrxNX4$-E&Ns@n^Dc<Z-&O5bEM+OwlJV}9
zil>VU{4f9h-(lzQ2t7Dq4#ry?iw5B190>5}&hnA}C6B-NfAoLJ<L~|D{U7K2?d37<
zXMXyxj{M~P<>!Bu5}~RbA_f)H7VGyw7aCHMO2Z0BexjKmq-zJP^S(>cGWkg&c~d5U
zBq1i9NsBZMu=|u_5Q=LqqNz+<l7j4a%U&DaPH(kqh-ZO>=GubWvc_euu(yxhC8&rC
zB)@dZb2_gx*Fb)gSnz#Q08SmXOB(?nK2w#x05li*vV_g^!s@EwxBt;Ye(?Hj#<LT0
zTTmkW;nm+ElOB1thRxT>igS#Q$BYka_V)}&V;B#VhZo@XMZ@l<<<^qn+eemH4}^Oo
zn2KX%<#SA`J+AEjK7(Sw;b_MH<3GHE-Egd(5hhb%Rw>ho*W)+Z`>OVjc{YaWv7<bJ
zY7!C_t028=ig+CYd@8?Gj|I9`T&-jlrX#~k-<mO8GEu^(F1(LUA_73v_51Td6D5GQ
zRloh)wGNhXxur=uWNiN0HG`a@ueQUt3kcQWfn)8Wp}%3Ms}?nK;SWh>g+`7*Xb78v
z-!usEoYAD&@#jMAyj5`>)+kjd@cvw(J=dIHyVS1XS_DL<hSI4=W@^vR@Hq&+SuQK@
zsZcANl$Lj|&G<Kd`LFY(XP#p3-W{x~Q-hFG*ChEMdw+R?+y9X3{SV*!%Llvtd;Xk!
zs*nKl>4p6t<HVBpf0IAViP<Te@7rL=`xO57f&J%-zi~O!;}PdKKhK3TKf`!hf|?dm
zY<&Ht!+>g;@{u5y7=k8He`BpHX;~Id>tuzw9e=QM6^TYA{^F}iJZj7MlN3koGz;3f
zZFBK<=)5Sw%g4fG>H@(lPD;&G?*!*eoTjuhQAwCQB}{|uo;cNwH;nOytI$f#nv1wb
zn7R%Gx#j}hT+|!+S{)#B!C$DiF2hsLS^n(5JLFIQ<Tj-oQI#`tyTmuI{s9lix9Jya
zWZ4SVtdL2cax&t0w`PA^dE;f}^_P_GJ3@b1(LQ|tEz58J34G(5j_>`&LvG!8h2zmX
z411T@8NJ5g>=w)YoY%g8z(4<|2R!q$1}f#`g!uS;VOOdtOi!SkfGd55LlY7d(+8X4
zAI4e@jaOT+{hM2t%JMMdr9Z1s=cAdO)9@#(0@A{nOz0lrk!~hLJU=wb4I`En&mW0v
zmsS$kI$Ng2N|N8N>dmP}Bf;cw<|&~n!#UtW6Y7G?W<pGC3U%6yIE6};T9umSwh5vT
z8iKm{p3|6JP>0v2u6>gbn*ePahN>z2@lVoBG>w3h;I-hJj=Q_Sq~KrwrN70roKWsR
zY)vm7F%G?Nv6K%2`#(;xmB+Z=eu&#Y=0Le<02ar`^3Z7xrQzbapU37B2~5NVfQizl
zRIRKjdp>P{LLruU8o$uO{Am=Qv?RffEpG$k8)C6<RRylq|D(}sAoU8CIZ`1q_Yt0l
zL6iTk>yYtYNn-yRE~4S$+UUexSP?W3tR^H#rF$Pu0YiO}lRD7Fn<+J!`s0PWx$lM$
z7cS(!I0jV0`N`krj;EeA+`m!rTmSSn$MplMdPd(ab8Y)oUb^>N6uCj{5M!6f>?*xt
zl{^#F)l5eoqP}rO*xgo&OnB>6;XB`~xcY9zy;~32zW)}p*}k_WHhokKw~qc0)f4Ps
z#&7=m4#(q~%a?`O$QP3sY*YDZ-&GnQ_yF<O-rXiX_t;rAs7dqUg#<kp6cn{G92)N2
zG~B*kGF&C`?5ADVgoX<38dpI}_Vi&^5($=~iL^Az=_DHcG)21`YTeocBN{`l(s{A2
zecIsp&v?HJ=UklPRULKs+o_vt0zkvhYCPuxwBIy0w5ur>|CVmk*i8E2clzeipGQ?Q
z>Bj~j{N1bvnnoaLM9a`HPiDf6J5ydb`xVZwUu19Rh9@7&f(f{206rlrfcNYy9}|xM
zFrBG<K!oA_34iiflYev6W2G=lY;All*p3<>J`!&#K6Its>bHA;S}WAl2e2_KdC!+h
zPD}nsrks>a*ftie2~XViYpY)-2@h%$=O69Hl_CN0XOlt=#>2=igu>J=ncNdrcvI}1
z;4l&9ZQTT=qlkzFqHe{N8kzxLI6`5G(lY-TVzc3z$*!Gp8$|``xbO^68-DZGce(%Y
z7Ah00<bdTncYgz8CzvcF%a*WqnO<)TV=Wkix|%vnq*<n{ZosXZ@Y44jyAK?**)fMl
zx0sbjsMd(&h{@>X>+Fu-<Y0Cin>()G+2OZ;<ACR1G%RO+2Q8|8sxL_<eu>Z9xiD2n
z<fJY9&FiZPgx{`_f_an6c<s+ih6BH{N+EvNq~^`7Xxbfpf*f@NDIy0znaj4&^c>TU
z1TeM1jyw-d-cy0miL!CQ&|md|MDekO2j-fozJc}|9e&)|yY4EZK{_-EYHH9D*CGV%
z6yI$MD%VIbHB9>wngCDEj1tYJIjB8PpydL1rN+@rsWsy>=U=2O4fS}`q9Z?aE&6y!
z>to-Z_qx4&NPAy-pUMA+Ahn;a4Zx>s1t9OcuYWu^{==M@j}JqAwEO<__C^eKS<}l`
z$%_>)HL}tY^y0*xLZxZ^XZv$85*C^J&?m+tA*xi;1VPbO$KRj}l1i#VTyJ-T$B=>v
zsVR}RF6^mvFC{Xz6v9x<wS|BsxnKu4zpjE$ybF@ZW=HR66W~-6J^;}xK7KDL4;{oI
zWsD~@@21!{&~UBE<mTF)FL?NT>ymKsV$PrbcSpST+I37e!8v8ASm(8!Kj3h7mm(XG
zXG3h(Co@a*duy01_~$#JDjizE<`!hR@b>F){VGhS731T5a2{%}UDepdU`!tc?vH+e
zL$Un{zxA7U83SMbs-UyLV`!vi+7$k_pvC9wf?hq0uT7k9%DhikDlQNtmxq?OUv|tU
zj(*`Y3!2wGl0G}@7vlSvV(aO9;hc1=t=q!ddjCgSe&UJQ@<NhxBKe#fBaFsidxnjR
zhN^6Sw@c2iq>wws)sEUZT<ro1m8?2yP23DMx*R&16#)?`h$|#*rg}*xeT@h}jsN$`
zwf+p1dLBU)nuF58w1!!&OlxK4gb9Wt2Wx|;$z+vkGJVXo==)y>AM5rXWZ(ZGVE+%i
z@0SGvusA-}_`mT`w6%;*O2m3;kFiaIAU-$-NeZoLn-4K@oY(ks67|W%B4Jt<f1=?}
z8;PbYw^FRR<$~a|)6=NoxsPZX8`LuG1t$_++d9TYjc`!Yl%RG^krruJD|OX)#U}+N
zJWdzJdH+4rAsseLi<E&KC*h{>)O6McaXL*%hYdkc!v$UO7yRB@&E?M+-g$M#@BPjd
zO1FcnVVG~SJG;l*`@c`G=pm-SW=mM<V@;3D7KsyFklIzSvgVD2Zd_3g9>VeAl&UO4
z(@{qWr*HlYS+>m1_%%k=K6!4qd-ssv{jEK|@Uxbc!t*Mmk=)I{b{+C#f&g`jva}Mo
zWb$nYp8bL0;RD0n>m^GoU725cUtPl<i93CloEMRwkvd<-CQe8kpQFoO`fqg3FFDnC
zfDa>@PHWCQZEzu5Af88&<mbQXT<zBcO%vdpUj+oEigR7^Xt0K8f1kD_*yj9ent)0Z
zf?uP~aNbO*DfqQhD*Vru4rbx+vi7mcl?pQ_RK_5ymWMOPY-SM2sLN_`ja@VVpQLbu
z$LSKEtTTOl7)qYZ<?n~U{?ei3IUG}tcJ~+^O(}XpZwMy$Xn^+*H$JyKT9Kx(e}WW5
zSU!>A#oejtAPNy-(9j$-#aD=)@7-WcBKhzU7J(f}UJU0=e|R3Di1w$6&9S8W`*z>!
zR3nM336XJ5I|_h?52nrZmSiVHS(i%-pCnC!!~)!|Ka$;aIz=YR01TJ{p8Bj|atOcm
zPj7Q@atEg~5JQm-`N4zV1XCi$kY#<03=k=>wm>9{c((~%mCd|G^1&YL?<tc}#dus&
z2a0_vjcbaiF*(zEj|V3&VJYYhYJTUR>~k=#`1}jTOZb9?w0o~foJ6mmzILu{44Yy{
z+<7<qd_^SVt(Qv%%LcK2YSxrEc#5B|5fNezf{!kNbL*Sd0$5u=jMM-q!vA!LeC=+&
zMR-n5g!S`=d?-{^O9s`1Jlb*tnh5R&0cz2p7Txf?fd>9}fgo51Z;3kIP6AOd{7gU%
z+9}`LFE=F0N_|66hN-`HLC&e(qoJ&!%Aj{1>Vfdq+anG~`&4>_ihKOE=no<MeNZ*k
z;}QOT6tMrJKn?j+Sp+W-fKOHTqZnH=tB)zGJ?`JQN9`QL<&32@A?x}5zlgzz#fS~i
zZ$p%tv-oXe0ozGB`E0mOTv+!*s?z<wK~fQ5Qk;|Dp$SCXS@&yV5+o6Qh=eccjA<<*
zk;n~wJ(M==B`wN{zPz0*6R2OiQbXsYv&-!kh!!D8C6X?Yfa%;`*{M%=QzM*z23A%x
zzVSP|T)TA>$to&!Ecdp!vG*+=j^CxomcithY#A$kj1**MfH9d*w`=BCBNRRVx}F?)
z3Ey-ARaFtN{Px9(ubIES$ujPbzQ>FanRVQ}eZ+77#)zlCXy|8tPb>-FB4y+gJ@%#J
zGN~%3<aej9uwK?S7-U?1%i+qJ{-B+<JFBQh%TKB(Xi)|dd1ptp(VS-qDnP0nj159S
zDnz2ZFnyoX&%^jcDTcz*rcWx=gcH&!?j*{9=sD4l1YP{OX2P!<d*1|6iLQ$f+5T0C
zc&-ViOra5I{#0RoP&uVkp$s8P>Ccs-)Jw|hb3$*+^387@aO3tv_Gh=4={`2Mi)-ux
z0r>bnk&ma&Uw))}|Md2%ipg@yYC@&^Opi~v`Q}}wvy#EGWob?5Eqj|;!8Zcd7>u#r
zW>;+Iai=|V%C_(DtCA+6L&(x3t2dp#B!ykOggs4n{&T;pTU^@pfQZB;#%bSxM??`x
z`~4P%Z<~O+4k>eqIe{aY@MD-w<4l({3X=E{&=R^_Vnf^YXm6)Z6<FR-&OMd!%D0aB
z&bO~4`7zEZ!+edhJm&4)-=ipoU@X=wk;#%L?@5j|1B}?nb!g(_@}7VEqZ62nm1?G_
z)+lvSc<@G1rU@l*<fhNGddTkNEz}sKIO2EyfBWq3)?B>oITXzYuUQerVjG(x>B=>e
zX*flfbS_sx9rOyr?tQp_t72u<Mwy>z`r2z}&!3`4o{J(~7QNDyW~$Kb@7mQwv#LQ7
zSIdr9MZ$T&M;1GUGnXw@6>j5#BS0+bda6;3aoC!ymt-CZ&}7OdhA7nmQHWE&wyKt9
zRZs`MNhAw~qTg^%DumhsD@yO8W$oFFi8_AspWfj+-@n3f{eb(&Zy-QESbjXh-;Y4&
z|Ncnpk3i@D*ip!f2H@jq1oW}c`SX$L{NL~Pc4(<pIT&51C<>1DAM)-iH@JW602EeN
zE$e4sX$|r|9uY{Jfxr_miS|#ENZhVXU*Z;soN5+Miv?O2!mcfAO5W=3{hNRlk@<H|
zJ5yBGnIP>Iv>Q~^Q5%FpF&`k~G$haYJuIn7ObT_Aaw;V$@|vtM+M?8$zckZbBw8B(
zUTj`4+`C!xyT5atN&NulX5f@zw#pB-|2ZWm7+WA>v37{a03$ip<XD@xvbInlMU*V}
zMR_!a=~$?1|Bt>%M93pVF6WV#fmp1~**<y|hr?zS_aE%@N54Pf;?tHQ^F_*9l8EJY
z$KJfCE_GZ?R41Ag!&p+2Nm)cum-E(3Gx|fHz!;%_ZDW0-D^+UY7r7rA8;aO`%ry>e
zgDTw>fOIW<n}k44hhWn93ruHl{<$2JN%Wm?uJMmd@fBKqf5H#wt`}%MD55IBwTh9Z
z=+k&hw2G33ELaDVph`6m2NM#YQQVSJoE27{u`FH4I2@P!@i*`DpZ#ZV@)xhZMOi=O
zsJ_YG$!(UF&R}|jxq0Nrr}KYO!ruqh`3sM6dlp#$i{oR~0`)8Mp5?*e_qe$6RjeH{
z89(6qJNw+fv%;BkTWp<MV|6pbIhc-XCKIKcc$YT8Mkc=xEpgpXL}LToi4JZ@_6B}!
z8T?&h;G-e}MY=>RQWF-P3kpi6_ZZ?M^Xq~%fJo+|hqdir(jwl##F7{rHI9SQ1h!}l
z3yQe_q+|w(8~{=8dEgO>Zb*!wZ9J@ntPs}Df-#0a`h%P7?A|8J##D95dha6lj=s;m
z@%QNUSHVb}_=OC}Fp^_zFYpPH_~g*TO(x284E40xrMsYuZ_RCeUzZ`0VT{G8!P+55
z)0-TZ_gT&_Ve=#Y#UDQ8i!Tn@Iw#z^6+GpQZ<glA@d%@L8lhGasp-_;HM*y+mHr^-
z?bl}f{I58Qo-m!X=S<Xw2y=*1*PXH5({~A@Z4)A`8MP*ISM3H@H9i9=$ARSbVqiK|
z);29m8<x?2MV4ul#JY|Kq3eq2(iF>hs(AO#Cezrp$wx8I!-m_};^T_L#s#bGd*A#H
zXBEkmY$)`GhW?Vl<}jPoymfV->+e3~?)`_1#v?>ZU`C$zxO(vC;A)n)o=W177hV91
z2H@jN|NEiDkS7bCkPi_c^rXQ)AL#Z{(_1e%d2q<v_x~|JbLoFdIr3?6$45sT9zEdh
z-8Ht(oa4;-b(U9q^p~J49n+CAn?OA?)O9EfYJ)9shiVruU^4Fk=;l2ErIRJpxd0{<
zaY<9zG#R}T@?feibj@uf9o9lomU;d{H_)g{c}$Ywl57IfR6tc~@$sxpPP<FJ50YRZ
z*F?se6xMCyS|v<>MnH@p76z-Zwq<$al_TDK{VFCKQ9DOrmT<1*t=)e{k@w<DX-p3z
zg`e83#h3zXvW{<pDv0&abyY$+Z8#1I`A@rhZ4ks*a5k7WWvCsoef$zjo0kz=^5FhH
z-~G-8U;p|V_wH8IHD0@~-F1s5X?qQ+GAc?MNoOMch^PTAbHC^r_8tg3w`L4C`;5m`
z`<Bk-S7|r7YHoTb6yWgQMH8$Rd6>7Q)--S`Aq{r*CK8Y`|GTGCMK)mlg5_wZBFp`G
zYUcJ&nw%99wK(nln8ch&LTX?WRV)daHA1*eN}<LiYf!Km*h0w%LT_LxdcJoVjY@7^
z+vnchL$)96b9A_ib7QP+LWgqt`8xNGzs=Fn9o9B4Qmkxr&<>s`*oO}{`Txj*ecpTW
zUo-%pXc>TfWGAM4hz8>W7ykFz_w%^PSc8(@`Z5Q5H+l2!KjQiG|0XB15wqDL7{|%U
zHYdk>+`GHX>gpC}&Tg>2HDq}$Lswxot(lCVoEYkvmn2D?)ZJXPUvedO(n|3<lhY~Z
zo_4l+)DK9@X^<AlO$u%|Feo-6>FtnCL5NOq;o{yj587t<(iMLtF~?1Mn-kP1R^~$4
zq-&eh?1!a!oO9ao##l)N^1iZm&an5O;!pnYb!xYVgbd-O>>O|J{1c{nK#{Elbi!h7
zA7i|6kCi<9cM;(fKV2JwCs2pv7|nPh(M%&b&tns<)YCc0vL1Wm*En1LJbkl;*b~0{
zt$lvx#TCw;6K>ofpb|RgkI*Gs#@&As&zm-0ok*y#Vlnur#2atV__<%{v-hxzI7M1%
zvdfRKzt7!mQ!0}kyKe|w;(bZWM<7`V%!N;-Nt805k1I|7gyYO5;rc6eSRYB0e|GGu
zG+D2urkm1wDHut-E#{CnNhFU(njj;^WI{0%ddos@XekPq%^dstC)|JchzAe$+1o#4
zJUs!OVN8W&C89OXS^Bb$SmEa3AF+G%GE2)_tX}wR(nXucx(<H0egB8K-hLRJ|NAEt
z%46maEE<5t@i9D<d<~Y|Ikxw&Gb#Ubo<IAqvXXCdSni{gSW{D#6COT1V0X7qzrV)D
z<|bR`R#{o=v$o~KO{U|T=~$_zt;K6vC>z3CCsZ(0>!>e}(7U0tK$nJy-f|sGXOfrX
z>YT0}y7>b_*PlF2?kTjImgm$^C_w}o!j~_EEjde)W=EZ$uuRz9Cy5EMXh;fIG_OyS
zq8N;jj9;@e*buB3{`g<K%ijJidb!t%FXiXi8(-nh_}lb)%ODOT7Hj$e{`cfRV?qO9
z^Q74kuk^5f4N-+)o(OwK@}G9dcSzuaU;!Ie9~qVGvvcxYF0cM=L}uK7u*d7Kp5Y5$
zTH@xd+M`8g&ZRLaxSE_NU8F$cszp=BzNUF_O240R<*f<7@UJ-X0%m10OsCe+nlu+^
z63QeADw0P3hM$x4Tn*=k&UJW+1#WsK&M`{>WinPaE?Tm_!PSbfp@Bw|Rh7om+FNgU
z*GZGCL!==wrY2bt?vQ{Ji05Dw&|5O}mn?bD%YDbADYx(Jv;E+J2ipf693C<&$A~R4
z#v#^!hU>ZnRr+R$UT>L`={7g^{)EZwHp{DLS%2!w0peL43k2X}&;OGotm32TOyx1*
zuE)Opj{^2T^?i%t$Tna});QkZ=KDAP6E3a)0$ZzJM|Fj9eTd2wV-=)kG97dK)(#Ku
z^%yR#u(`Fx*7<b?!ydzBs7uFe?4@Mo)LXxbHro6!wWLmd(k+gUN>)>C<%jJg)OrV;
ze%1+moHPsbub=88xLVCLKld+f{y`E#6k*|1Bsq^@2+sN4xlt1w7`!tgnr=AS9Yq*Q
z$%0M&U{x6|W&GgfhrIL7yJSU8T??7%VN`i*@4vxjG@~F!axyy%(!U%-29jZI?tL9-
zjhw(6Kt)D-oeB`lX(E;wM66c>h(+)+Q71LV_ShZ$fU`?~nL<`jj`+@Zc6ja!OKfbx
zgS-B|jP>~doe1U57(EZwCq+0S1a0$HJEb?Y+`9w24@w5hJtjL<=p(!Dch`PbI(v3a
z!hW<vXOS2|9epm6$-K45Ze^QYs)9x|qiG-}BRF%$uzJR@cdw?%B=JR<Uz~*#!Zhcm
z|3A|xRFd9C8Yv=z&4u2;Fjz7SmJP;wBcH>A5!+Yx*?#bly@LbB(-ZF@VQQ=uvR;rH
zdOJ>X88FC~F;X)rA8>2;n;edBVNJ=_`R7^QdNxr%JRThXVb-dTpXkR=81|P%1F$$g
z83+KOB-!;D%l!e9y)ifUzrptL_jzjVm)KnX3YZN>)ge<iMnuT0L$&1S;FzQRZEoLO
zW_4|YtuvdfZ7k7W%IPgZRXVDfM+M3$RAn;Z1ap|S5!23u)~&$OO&ySy;T0!l(@u5r
zs7uTvk_fwD$2tf7YhpH&lF$51)ixPz!HR%y!Z!3Uzn_)WX@KVyhw)87gH<$UMF}xa
zfno^DYli*pDc|{%x4@j>oF{)R*)v=}_$@~DZF;?R6o-)vkscxgAdiLG`#I#nzL{9)
z1c`u483Kp8Z-TVgi8QiMi;)Z`8KO2o9D<l0)7c>pPhREH%3np8a`V<bUjM-vo_%hK
zo$U&oV6AtWQzy|Lnj|T)0}wR408Mw=2_rr<Ce{emEaS@SW4`)}J?71NyLP>tl9A#<
z@@2<EDp?bCPROPiY1I@lIa9kt*Yq4sC9AWUB1YJ{n6rD^MR&n@)I(yHfOHmW5|t)`
zIIq%C3wdGa4-La*%b@SO-_c3Qt=s$DzrWAJhkG0y?=ve;K&r6*QLG4P9c7fc^ca{S
zx%8OT2keesV(<8M#?=AV6s&JtW@+;&Y;SN{^{_Y=4ZtTa7WiXM`1`2#{_pvm73r5O
zUFy?2>@(g!;@zF!=Jvs#aB=nL*joM?gX|*H>V%m)4ile6M5)~_J3D*q?A)U0EwjA5
z#`?x8n_H_auk>IQW>d#_q?BWDmEdX*Z@YkZ3n3Lww7X+ZE~ahaYGiuhYVE7P-*L_X
zuPGNvLMRKGUR=Arf~iiwVZcXU0!e;*vg?&phMA(m5rCD>q}V(@hcrX`oKK<u+7`la
z%{wxF`<queIN8PaJoG=bYaC9lbL-@fDe|TGn2jm0wuhD6PwHV`FJip~aFp*Ej4_B&
zj4=VJP_)+h8XS`v8<@QLUn2%5twpqoV6&X<(Vuf>_?IwPlw-dC-FrOy+0U`Q0lPcC
z;D~UlsJ4heq5^65)~S3jB_jr+XYFeG{el~BpYXL`gv>TpzsdU*a~m|?kA&U1Bqy0l
z`*UgOZyP)5pcAoVt8@T=(PSB*U4o#hP|jfMsf@S3UnQN0Ca;8a445JnFxdZ!5hOF@
zh2P^3h6bApwX4`YI%NOq5j#5v?C$O{o*be&!DbF)9JcU8&srU|11pxo4C&hyj0n@}
zfP>NN?2oT<G`mNoCk*;aY@K_a;mQR}uRpimczlOH`0#uG$46QplQ-}IC;!L0y)HNa
zAAb)3ec}`I@!6+84#MB#egJ+*vm=61V^?8$d6n{bh3U~DSNDF88wY>P#^6hwUH)0t
z`p@8~8P)rgZsu>ADQLxXddztAfSm^!gWeh&o9Ea%zrphAkmc13S%%rHW;*jLf@<m;
z0uu8dQmMa7LxARH`}F7Izv(HN-~20)x(ud^XblCWYkQkC9hyWAKZ@WOC%&Y?NTh2q
z+^AzklcWbqs}c|^^jBfHY<c6=2VA*!6Vn^x>e5TQ#PZg`Z-FIf{*5R6NsfrO`)we4
z@7<7NZ7(z{CL#dFG||h%Bt$=TH_cTV#~kKuF&+U>6FC84!Go~{lj#n-<5xL5_{(H=
z#J#%@dFQQ*Tz+cE-fr!QdnR}dbi5pB$&j75K-)EYCxI`K@i`a_a<*^5$>EHmpD`MR
zHIPdO`&8c-nt()A5Vdx6&w);UMdKkLi5ex@S4I0^k#4gvw{jX!l=ZWQ-cWEeO%x#-
z-4XrQ{&iL(WY&=N484J6IJ9JicUwF<9&_{dK06Qh*x%n{G&-iPr-)RD)R@f04?rFE
z2AS#6Gd+4)fuUwn?y)m|o&D*%jLIEUYqD&}%H~CeD;MYwH{Qb$=0`>N`*FekKjb<p
zJlX9R4Zz~~<TXeNrXpX3d}S3kUSoE2!p_O}*gkoQ<>DDGt$dyJ!3&U`Vd9RNR0q^L
zLlCS{pk^|Cz@0mL+`B(uFj!@6eUr_z>#VE|Sy{8V8m5zq*;J^fK0L<NjdNd^`K-<r
z1DW$*nV+1%%!d@mg4XQFyB0wWG9b}*Ksvf^jZ&<X13&`ACW?bcHg3skBH+c*ayb3b
zVD&3NJ`|SMEV~aTeD~XLquBwjp5e4)B|FExqd(!OzE06!iF<i58O9VCX`p}a-sp>e
zfwg%wbTY<z1VF@3<jp=gxErcVpN4v*AUGPP&rif6>Q@Z4c;=n8IXmO;a%T87A7UfN
zyz<gRp1wR}c@++JJqqB-of@Bin-|b+s8Ytib|`i&uC4-E21kb(4{pym|Jj0*;~Fu|
z#BVxALdv5}dmN2QC3)9O*#9R|z8LYG$W)`sL*KLJCrzX>o5A`;%gQ;+?hQv~8~%Vl
zKb;FC&B7P_!Lns}Xb=PCY{uT<A@?8ba({c9qvJ!$a_oz}RA3x7_Z>xD*SL`6n42N}
zY?Z?F5gjuwA98o}HV5PDOzLfvG5y{q>zkituylcZu!@?~z6l}=!rx*A@F`gVd@6PR
zAH>_Bb3b#JEOD4243-A;CM%Sq8RL^}-rD^wa`O$=`_FM^>1SBVF94Q_JEpA1enns`
z);N@7M&o0SNB6mNZ@|)Um95PU);HD}t_)e(@XbI~I?9Ps&7dp|8X`|+-itCxCe{w^
zZ{B@?I8mpY)8;}ZGH(_%FYrrwqe>SzNPGf>(|clRrG4ISAmI$i+^$#K*kcjJ7BF1#
zhD(3;&37419w4T~X+>d{n3j9oJ^3biKJ*1xye{8J9{yz5u%|aBLyX1R9wxB;OvrhN
z&)5XlK}U@2?Vbr5R~Bs~V-p8$+O<MxnDT7MsJzGF>>XC~FCa4I-o3kAy}rezOGEZ|
z>wvasvkU2{F%p}IHl<J7M-h#bn)OQp2^d>&{oM&qe~GTIe^UITw?OI-kfH!{ZAMEL
z)P(%kmH&0Dtz~|>76^OMQpi7ss`d(x^)18B6@%oVKQsoLS$aK7f0$A9{LhcZCtSI<
z%l6JL`-l6C#)nkZ7^ujskY#=y<ETBn?<|=V^lXpJcQI7%n1k63P9}F5&2}htgfe5$
zU+2v7SLiRDCGW40CV{8$Ot<habpDUNy)GI6KK5w<`svsCf1twuUbjz}$-RnR&(K@j
zq@KcTbi&T@%RC&tM9*%rHT)7A!!NT`T%^{TNqxku9{Y4K5icvEWOQ=O$?<*e+#1jy
ztg*4V#pc!;%d10%n-&L@Gskoc(-Wwte)8<(2F<BBT6q?oLhbjsrrkMfs}P7=f@bF{
z5xb3~MA20KrU?o#zYlg^wwKDi5|_A0CKO4$2IBU-b#%5+tU!NYc;)-IxpU_l*3LXQ
zAQ?Tg!n=FFj>-&cSHkaYQX4Hs3XJI?rWZT_JQu*49L0FEnPmOp=HPTUmvx`UIU8eq
zf?X5aByC`nHfsS7v0#kw;P}s3-TEwAD{#bXuiod<Q=eh5q8uN1)tJ=tv{da((K;vF
z>%OMlK&ZN|=@*u}S1QVBg~<$6sdEmHryIuB&`~>>PI%E1O@DK0NMc5*N$y1RT4~2J
zxJ8k|YZDqDV}!DF<O4%h8kScx`l}g5&!0uJa>B#iUH0}LvVXYCXmmhXPJk-(T#hVr
zsMg-6!3jn)#ANhkjefQS)QqdUJe<7E;p8fldY77#!Y;G4bdk-K=P3Fc*xn#|9>nGf
zy8M>M+L3>B`~D9H`#<5n|3kt43nQS#!KYa%Fn5BR3Oj(opvPeKX{ynT@$o*l_rJ;A
zgYU82zsT0`ORV)i$H1It%7mFa!cqDZU}G^jYOOdvIpOH|0e5Z<7!23gJhQ>sOB<}M
z59tk|T!!hSrV4z4x(aS*(k93`m)go|g!tQe-gT^kJ8o@?hleF0izRS=YWbTu6|_<?
zNo;IV-vUjPijA3&G}glD<k~a^idZEZ!f=>#_s%gtc<pVhokWY+p*_p?@t?C-zD}=L
z3#ddhg?p>tCiKUDodphn_W+P2C9!SnlIY{`0GoJQr!_dG33YZ#()<{}woOb}Ie3Yo
zBg+OHPTu8sc9W(2Swv?%cyO0%H_vkE!ZIg^wI@l6&#@;)0Jqk?UZby_g4DdY^U91S
zP^l;k2fK!yJ0*kl0Y`ha&#p>Z{+0yTU3;}$kK`qqGYFztO(g_S=emx90!f%rX!H^i
zsWAdZ$#SK?1WRj{rKOy#C^<aY<LLfA`}>C+9Y16;Jw$Z`#`*n!<_DNs9hIw4br>u?
zS*9?3(3-M7;H0|C-N_v$^+Re-5SfwZeKuFWK!5oh`C!faONZz0aIGIlXjT{8{>AaB
zZ2*2cbpAgC<B%s=8zeuIS7d9J)zu5sQ%89+<z#e+gM%wr$yv%Svfg`vt>Kr+iZv$g
zgsD5G(rM#Yi%?VPl%wMV4v%hg=hiZ-tLv<;Z?Lw$%5ZJSV97hqm6MvXRL>bGg}Q2l
z01{o_x`n!H>znRj)9Ji*2JBwRJCP)k5X8D`>ImV_Z+}(hUbis)skF{?M!YsY>kGqW
z!Ih4ezVj}1eSi_gsUx>TCiONqkAH`(=p$A_vtzw4zhsE<hCi|Rhrj*56`kpBp6TBZ
z?_A6X(9UL@Bni(?{1(-K02qV13`~tW7YcihSlB-PbB3GGQr8tCC%pCQJ)XJzdHT!B
z@xFIT5>0$*(-)O4`VyJ{i6_6(T>+>lwad73ZOT`EdBEXr+t@U`K1t+yEyUfOH2v@|
z9lKv--rrwao`{m1OW{XdvU&>cd%Xb+mcSN5UBbzcp(>}mdE@)cberj9j5_CkUTRFH
z!IIfG%ubDub(TJT+s9&1H)UFH^I-B8yW@8mSG!cITv$5G&<vT@mUB=25@u;VO!;#b
z$f5aZ;eC0$>*GS_{{e#B77f7S_!Of8DkY{5y?#b-;{tA4F+DkA|Ktk0<2Si|^hazi
zeU+`H7a3;fQEDdD5i`cr)B(aaSfkYSJ`W%6vh%RO%8=!i4Ytm1vUPTYrPUt&Ws6g&
zrZv+OD94^RP&YEQX#d-gxlG~;7i@3SkGX`LfrKb{3N==Z1hB{lh#3P3DM93Pm{5fO
zwPkiE-xsUc9Qs2T4lLjOvny=x+$JwdoO2*bZVIkE{B_inSi2f7+P?UU$>P*+lA>>#
z&>mZ0OpXgPd&uSu9t8pMFbOIknoNXYH4s8-TZe#V3ie1q^GCw>L>xsv<Y4kPC$n4h
z?Rkt;Jb19pt(zCPcyXDdy&6Jxf|GUvcRH5|k(x8bBs}fDOX?!2u*fs++!*mQzwBXl
zJ>~nKq)WNer*&tO+j*-czON}+wBa+%OINK0lS9#m!IF><g5Sak9BeBG+e&T?$NM85
z?7hsOXM<~FLr2uGJ^@2PVFnbYk5QOaha8k|aX5LGlkyfbcSvR}E4}l4ZtLgx+WKes
z*{3e^U%vLwd1L1RX1EmIQy1g0-_wG7aV(BcYXczjQm{`A;qRl|`#&Lx$CQ|%Fc_{d
z*j%R?myC{%xqtLBJBP2+%T`$%Jk471IhOLXIAbZ@n3@SSr4JdliZDf)ad3FV{{9_q
zTphBqw#LTR78_?)SzR46IAf?9E8<Du3sfyb+sw_fV%kuYj?P;e-}Mw3Xb^L03&Whr
zn?SUPZC4E1-Y!joJC)un7^`HNkPnpQ)r?!W_IdO5cd^+7=NyibVYbQrqi=CEyGpOW
z7Jf-^;uDL(da_?!0c4>Vdm^AUMX>E9*tJS0(1yfcp~;qSWPn{?CW(>IVg#u}@elBS
zv<MdC?SVB%<&d4@Z}ZIN{}AUYR8Dx~2Y0#j)E5}62%|$!LNrmM-`MPSi?Yre1U05f
znl^9#=X(8&?YlLTlaiumnNGC@7Q$%W*yoA~McuUqQ|<cZbP{3Hh^VxoL8(EJv5@zL
zV&J2jje*%nIo^lSbr|o%_{66zW;tBA1a3*l><~e5T7lMx7&3YkW{43>Ri7}LUgQ4k
z3dghCOzM4<nj#x89Bgp5_Ze1;EmnJLJTqM7>u1h$VJSznL~y99!P?H0|3shl9|z&@
zL+t&Zbn^cw_WrVv0e*6gfIhuC|Hp;>pHREoNy<~iI`U=9`tlalq2=V^9+e(&YxEk|
zPfl3PUSMnRbFB5gz*2qzN5xc+DcuOfp<<8>jMmgTW^Z?o{k^-~y0*;n(mESw*4a3_
z#&Ee$f61cGCl;1trJOqInc(V{(4>jay3EG}i=J|bXeM=?lmC&JzYwR_77~^u!?<Do
zOOhSmvi`y3%5cdrJ}&v*x8B0Z5kiT&8F@BfT<&n^@Q=xhCE`L`Y>eeaGK6O8Z%}|{
zBKIBu()hG%1OSr9n~(xyFiw-cm`3y_EKCi1f3koAG;~IbhzmRo$ciBcv$q(R+YIbk
zFcsSm?sNUd1<svWVSHRgSY9L);&iePQ+gU2tva6+)h*sxCQJ`AcJ5Evy0FZ6QhO1g
zq=Z6}0^Usw?C?d?HIdHi{QYZbbD`)%F%a_HuTiEauy<P-AHd{5sY=gjAVex#E7X-z
zmrd7|kx36D1|t=<J7ikj=3so6ae1Fn{eV)(h{@??tE~5*W0<W|WJ3y*lUYm87(^Xn
zO8Uc!t+RdB`b+f9Bs4l7!DoG;^M8!%eVQ1$XaE++PpQRlsvtlrOb<$Z$fcE^<Eiz3
zhiiww&;Ixtw-0}pTl_A|#bvezFS6SEEW`XfPL;7cq0|x1)rc{eOc9w<>x})w1NIJX
zlV4wAX?czH%?&ortg^B;WU!Ta&cM_o1Jy*RW`3P5M&^QI8W=Yz2qc;B(j@jt<P<bo
zXm#^NKOhN0(C2Fl4<|-H7*7WCsccG?8NT%=Z*q8W50h7@^H6OjJ+AHl25L%7wvt?G
zY_k9FdGj9%j{r1W0Am5;je?Rw?|XnC1&jno6X0R(?1r17moh7w{CFi84QcB*h}e)(
z@1=g39Z<<bc1Pdk>9t>_u4<GM-hSgY=l;eQ8LaxLxFG{dfbpf1&CreC)dZiH)Q{f>
zE`)hJ=hoE;mp;3U?sGc#K_4M}Jq<gAuBdenMEtrY>kGv|$$S32uct6RRCf1Zv=7sf
zZ>EfdS4N-~*P8s`Wq^}0)TL5n8FhWgae0U1**hG~u2AY8LPn8q(J#)kny-<Ey}vaE
zD<<?lj!ZHNlT&1dej%*)lrx*k+OW@Bw&q<M7Z;|*v1kAu?F9JKqx1g|xBn1GM#u3k
zX^b5+Y8kOM_#DsMGwco@useQ-qscoQ&fZ{m{}pnx%v$dYZ1unDn}O^sm8qDz6Kb8|
za9&q!y{xce!v4WNdwaLJd40gr(mGpbHrP13&dU0L<&Cx(C?`<Q{2#5`sWOcLPRD-<
zdwbKw{YbZph;;MqeZ2@u1WBTY6F!?UU=4^-iX~WH$$00ryIjA16<bWHYlm|cgKU!r
z$KT^<_AbR>vo#(Hge~bX|BJ*4upt2&?*R}p06NpVAxJYD@}KiQ0F7O8-~ecphM8cd
zBN5dQZS(;)AQ5FqfedSa;AWTS%j`~G;mq*oDP#jNHQNuixqa(Amo9BEKCDpJS~<s2
zJbl6S5rvs~?|gqd=N!EvWBcY9gTq=$vICe)8cb52(|wReizviGRtQ<&!~0q8{Su}l
z*xy!;cVTwo9r+|E2ffr!qk5tZ0|?~Jz!AtSjHkz3+5gW$j&RPBnS#97V31uRH%nw@
z82B7u#Ch$cfQThGmLluZvjsg{Fvwt7SXMG&c@x%_bC$Dyl3nlwpLO|h6aGG~I{)`0
zh%Z(Ei(_#-0vBi^PrXNeS&vXE`uTY>yUx<!dCF>=(d;&d)h!+#yh_fHmEvi(hA*<-
ze;#WuFmqE%J*09opR8xB=M0z{r&A6O_c_?VMRs+WrKL4C&u+1PW|fuoA<G*U1*)0z
z@x>>h8ECwRP3!qCF*0}lGcAwcL~5%zkU3Kz^?UB-+F*@u0`g^8S<Ben9`ou;Zz9<d
zbzS>}MmuC$?Q`$=8x+M7Vr*n<8);npy!)RG4uE0`jL8Br;6r*m{9nXGMerW-Dv8H@
z1C0mRK9#yTZR3?&NM71lU^Q*t049<El`Qxx)EGOUp515r<U3qm`8BHQ1muJ_U%$hJ
zi)##4g`?fm`M{FIBzv_$iVn;bps=G?tvwO2mvOXfn2t({B4<3JlOEY<_)X9_c#dc5
zePDCH!!HJcDSX+kX2NJs8STUP0A`~$2HF^~p}%t4dRe;;q7rf##W!F^mHq$@$0KSt
zVSV``RyMFEIR9t`)Cdlw44e*wH5MxtD;b&XQP>`ZE$HVt1MAr8^;z!;OV8wFh0-_5
zSU#2hG>c==0DLq;z@J{DpO3)2Lmsai7cm%ejP$TJ3q?$EZi2d!ObTp%nIe0d6*p#9
z?J$|$<ZyPA-N_qdW{Hj7=UMB0k@eo^S+<*g{&z=IZVIOMMaT%oR@6G<;Ao$t!@JzN
zHe?Vu16$|TS>711yq@7!U^cBOCtg}u&pa0GE%T+#&Pfyg=6zmGYMj$b5KXjIZjy8r
zYyGY}A1bSB23I=%;@fXAt#>g}dx9EDX8OE)_}}16NoH5Q(!lt=yD>Jh{H^5P{@3`w
zMRITTE7rdjw!j#hz}$(aeKG|*=L?t9r1~a>tZ8gi69>Ss`}faO5;Z^_R|Ji(LQ$--
zJ9&l8!7otA8p@R2-TS=r&RIV9xpN#JR6aU7tXouC!zR(zwl^X*iC<Hiq1?m>=b11%
zw(M`uSijKY<hYKC05L6#UxV$jSRpHX!7uurV&O`doG7C^zTi*CN?oQ&kgeMz&i6$f
zq6MwIwDG5q#Ky8|1k^#_K1E@NVW}}g)SFkCpsZ*bKVSU4(_?N63R94ooL-jGw;4;h
zurV00d7;nJbA4=8VWq(wKICV8Vf6EuNb$l6@Dry4__*l&pOo<T;b8xdfW#vojD#at
ztTbtLO+m{5rPdNhg$ok5UVfe;KgW{$3Z>g&JiEp2>`k_(-=W6_tHo#89Da?}{&SdY
zjgm1lH==S=U$ewuG7C5yGmcLVIXb${?HfauhHI>DY<Of~bBX13FTW~hHM6l&O+ZVH
z+3wPT^0ku}-zosx;%b_dLq8~o*j2w4$cD=Dx=`en@BaBUc6M%I@)C85qoi*)xqtG<
z998eq?`;L?U_-NO$bDG|_bCGW@0tEhTrU{JWMrlY20d-yQ)}ZZh|%CX-_<?()rSeZ
z2Tc+b1(jd|q>}v3#t6uQX5sa4q1x7DcEC)I*cpAB%PYUiteRl#F>k+lowFA=SUqDo
zxEG|8#z))|eHAszE!|wYV{50}suUV-fVBk=ZkL?@Owi;9&jGFdeVE)QE@pjizl`&e
z(*64|I)v$=QqDYiuZgf0=>`y`!Bi$JOjN~-Ei_#(Nc_8bj?~WgEwzgcMI-Mtf#X3)
zjBJ{^X7bN%MqvwblTp~5!e;cXWx1EJJ}fx%;xgG*L0+j30#fbxX@7ck{!dEy`!EFY
zg%jZ7SRC)a0#Fw&ntqb;L^cz`YvN@a@Qr|K=_e;+=$UgAb`#fofwJCXR&BFaU1w+S
z6*4nmwfG!c{jagwdk$+isF*Qx6H1+V0wUI15t|C9GY*fBI5^zq&dnbE;VSE!Yn(Z|
z!P=Q6RyO^<wJKd`20S|8gNjb){Ip>}G9Ru;W(8xxSRu2D7RuULVPG@feC<AOz4<1R
zk34iuP0tRQRoiTz{4u?J)kFW{I>~;%Y04oX{P~Y)7NvobK*Z7z^d521it7#4RPPt3
z&PaSrB7a-hKRg~43|^H0iW;R>MH)GwdS}00zQX?WRkj9SBa>CsO&Fcr<DJ)U^Yg#(
z9J6uF=)i{)HOjmuvq9&BnnXMC$_*c*AzP{gk&IhcrhN6UI`TeHD<+4m2U#CX=JOUt
zM{u&|Jgh(Q`~AkCNm5rxCyASXh!T#`&aDojX%eJOmzoRFllc4n>IJMRFjB-u&qx-E
zzVXOGNPx5^BQrU<$;nJcZZdi{qbDqVWl&pP+cjR?ixw$fDDLhOAV_i70>Pc)?heJ>
z-J!U<yHi|>yGy>@&-=|}CNt+}Cg<8~U(1q3%``86X8y%Y?&dK4vq6h9_y;Q#a!f%K
z5y4Yn%9)F?PqaG&?!bl1a&e_-R;{R?oJbPq5-h)JoEGPXC(|><nC8ZrSnO5CJW@a|
zp?_D`&*b$V;QDsitslB4EU$S(9t4`;VDd6{15oAUqw6@wQfL4973}eEbgi0$YKIQf
zfK!<UCO@shKV<#20?UI|TZ+>~1W{B>DGnm70?hVtE~#h{tZ7UI2k*99YY^qc#~-^K
zCgdQot!rmrtM6VdST)y=#`=A6XCn1=vz``1K$E^iiDaV%XtkgXurcNKGMsV|<}>PH
z<E@^mmCUEnFr11%#j-?UzG3i9VWY|#&mrhXfb<i4U|}tE<B*x$#F)t+Y2UG;q;5H_
z6wQK-E}v*QMH`2Yz6dvu%x9#wrbRUMfn#xXoPr2y0b8{BW*C?ATCSrh;7_&;hmSNN
zH7)iGqyox=f7#4Wi6*6T-5)G$_-};)r(x}F^w4U8z)yfLpNNS;KrUvIJ`juO&13+E
zljRMZzz@8MIthVY%H#=6HV9HTcyqFPzsoWI4p}Vw@7%bf=nz_>s-v||!XVk_-GXO(
zKQ4ngn2G!p4R^qRe{aG8-kl?{E?eN<T%K;PMf+K<CB<s7kfiT%?bNo4-a{QoRCIRV
z3oLgF&s4EYzD;OFynUCml{k1vQ+-@z*!pSyLLZE(H7eY124<*y5FW4Z6p@@9Ao+0;
zzSWfeWfabVeTH>-4>qP|>);_;==}qk;q=rxTgSxPDygW6wEuHp1<B9jcu2cbv3Sf(
zuFN`Y7_(0j^n7UdgH>OVIcoPanZol&PUonqn>`;ArYEqbWuz)_Yp1XcIBW2@_OA3L
zXyP&uX~Nf0e&&PwyH_{51&m+41>%0qn`k+H;w!eej!k%sO}tZ<s=(YzeytP>q;%MD
zW}83vNk)_vZ|@6z8uQ2rCM)hUeP|-L=BaORcB{m>tbP02b`b-rM%ToR`c!Y=T05U*
z`Pd9sigeN5zh(LTB}A>ScQ2y5{|v!vzYF@2#BxGKQ-t|`nEmA5T$Z5x3YfA2V8gDl
zP=NHw;$w7`f%)n(j<jn$pte7<6q@TCP=rJK@s+C*yv=kX4KP=QiV%SDw7WIV79u(2
z$h_CukX*$%{XA2D19Zur{M-GO>inVDb_r&w1t(s-3L~%h=D}!wiQJndL*eX=V?x1d
za^Hsf#iPbR#(%0djv$Tp!y{kYFAFUR>|=q@kpvm7Q%WlhE!hQ*(i7z*F=pJWSsfvq
zu*tV2t0!R8)4=J5OoN^>7T00<4b~G`1H>qJ6=n9FU#=t9ou4+kHD<;&v~>O&?rk7s
z;HzuupRy7>5$ri0mYT)1J;>XeBpE|VVpuEkfGe*weAFDIL%=6suZiZ5Ct!@Zn*-ki
zz*d`WWUAKfhK*l(i{iA3g6nKH8o2S;CMEn0dFCt%I00)x6l@l|L5^rv{q(6i091vp
zrYCJjw)*~Sshcjm#viE~hOlW#rq;#PvbRNK^Y#?~h`!!h<fq~a?=xP?@&_kI^LSK2
z|7pitR%Q+OfSG-z_RFPuFO#ToVGSHWFYzaNes;?;H*PQlUaYf`#Pag2{4{@s#(3D;
zf4aJ~?|>b~5UG?J7RnqVfC5lCCYVY#+J=vHNINgX@ClCM<o}GomN6zfPXX(r(~FsT
z5X|?N4QoWn=sfj*2(xR6KzUtHM;GC%LrI#oG}^W_W`9ldgU?E`IKNMd2}U*i|1)t|
z=4tOYDvNx~u93WzW94L>3$$vN>QAu)xDw7GjZlJK%Ymn31GobH{6pdhOjG7w9a8bH
z#JH}oDZ<j{F{$d0yp^_fo=>nh1p$k@T2rX{rZ!hUlOs#$P7@qlB#xzcWHGOA+E8<i
z)fL@q+s7YlMZsg(;|x}nRW<c(t$lMZew(@E<K&mUHwf0*flWXjH>CP6UANOD-Ou2z
z$#YM;f@f%mJ;X_<Suo`%&7!z1$s4*B*T7-FY1K@^=^CK>^p&g$Oe1##{e9`~4R>|r
zZVUu3vb<9Rs8zN@E<{>Y299;1Fg$Hbi-hcAeiKB_<>EP7-Ojq~w#~iI*EA7m?cccr
zE_oUhSH{*kPCQKMygldiO@G|rYpzYCkuEMI?Pd;830Vo`<o_e~2u@K^F#jC->67)=
zubzt!@1X*{a!Xk~;Otx2W{<tsF5RgJ!vfWAvkJZnskA+GYDET3wfx~TIl$E3aVq1^
zoYS5n(VD`9oIM~Odg&K&ujX64=?%tJ_vFYx|BIyADC`^f%wuXWDGp#LcFUHfyg20~
zPKpGCFlA&_QwE3iKkyhJu@XE9)6qG5@Vz0U22{f<&`L03pP4k8v@ID~wO@~^PsXVg
za-{lX$$R#JezNnZJT76Zre-8o8U(m0W%oh#n@5FfW|voFCKx`62aucD3v>PKE5-OT
z^%s^3Y57yuBnGU4Y!M49R8Ds8gPl$2^>u`Q?3&ufF5c0LO`p}(U+y#<NjF*Vkd64N
zT5b-*GBldY_R*QP3No{{Pl(i{Y2-9j?C*Dcqj8v1ZqMw{f`kpAWV}Db+j3apr922g
zT~pZkh9Q$LUEjihBE||-W%MFtmeWo%ts+9y!5bNpejt;uMM{kFF2HrP$gMuyg;)bU
zA__tV#>gol|L~Tnrf!dHPI<Pm&18Qk_w&3k!Sx$T&cWFrr$-<vtB<t7B1?uCXIWZI
z%xah0#O4K)XD9{_p`FU2bl7iy&-grJtkXz)PG}7`#`JZWt-=o4SFpv)Q<%^iq@Fm<
z9H~$NzU+=!3BEsD4yIqYd5GKU2l>$8C5jK&ZZLs!PIz>rD$ks;RWmsv%3Pg&3e859
zr{zZ;{p{#~G*5<P<K?a<2UJ$7l;B|4Gic!%{14GL_N@yWSv)CjHl3U}P&u+Cvz)23
zxjaB+Z+?tZzT8;J>w9^rWSR1w%2davP81sMq08Jr-l*kb9kvE3+v!?W0qFy&iE=%u
z18;N;-;C2Y((z|_^@yXDf89M&K7{5k6RAJcDb1qncNxP62}V8>uxEc^Ti^WoXcWRH
zY@;)()U>HPtQtnLcLF<h0(VrrU@Jv4j_Vq3<=H*8K%#WF#L9)j)EAwp*s&#~wE^ZX
z78c@ViXGfaow$X$YB$DVgQ7@;h)!^Pa;}TU7L}G6WyOtgHY#DgFk|4v4DDb0{ceLv
zM`4g=LUM~j*e_v>nET=CbT@TObpIY*^xECty>v(Ll<ES^VhMrOw>OU%TJBbnP3#Qc
z88K$G3A5yRdHGBQc+CX(&D3M<`Cw?mR9DE|oKC!&+`JtV3oPxM{!9mkV3s)D0565f
zvqb0s6i!FN=%Xc~+6rQK2#_u~FO%wpwE<$vl}b@A)FsmofuUQns5(>QS_0wcjHvH%
zAIK&vU(9s%PwQswl+mg>YoKXyoDcifCY&L_3X)d>K=LKCyaeM=zA^GZ<rtFXLXe^~
z{Hq%iVzh$5Gq(v$W^AtMzLu2PtLj<_J?(GX2&bPi8|;WK*2tKlDqBiVLw#RqL{=6`
zud6+TepV}kUd=?*YF(53^$Ij}rCh|+NZ86QoOnLOZL_@s^ZuH4KEiV$OgC)2ejh&s
zW%8L_q?TnX9iu{7F)F+bL^|+jsPNYKa}OQCFDwRWm+)l$Sfq61FJvKHe(=dkJfZ3Q
zpc%qb{<JwT?SU?W2QcQi5)Oy2HTCg`+JGWXhan#J2GTq(wUlVNRHU?kcAK_L2`raK
zXN6hFo&uMUD7KqUnFe4z*~#!zNwhR~763F2McgZ<9BqT=1zU$@i`}6MF=I&tyrPr8
zJNIl{G2TyLRSG8TCybHnv_mbzo%EULnfgckHju+i*w)Rp1q-VMjHV}meKsluCBNx`
zjkU~62~@nUGEjOw+#Zq^``R4pbIxIY(Q37ip;yiK@SCk%^lM>&RB&4JdlR9Y<kS+&
z-o(sYGtC-$1+vQsW3K9kd|B3Dn!pOy{56aw1PNO9<xDX0|0med{NnUaZb^Y^7Lyw8
zD5%mAj?JX5xMzud%tK61(Ls9$W>#MOx>?m{j;pKXmEuyYx0$Cr><KOdZwogJ0oy20
z>W(hL33rh2#6$J~auaG7Am|?JOteePfMytMu)gc=8`?&({)u0TOLHFv63jP_NT)B|
z?DOUcosVc^G8w2&ib^^IS^hm-yYQVX6v|!Z51jPWm&K=bO|$?9p2eE2J-+&wh*63(
zfFFVW%rowCPm%TALr|qU3!J6jbsJ%1TvMYR;<#Mff!TiHyiiIeEDMt+MN%p?P;G$7
zh~{o~Ed^iu<h@x=Te1(XloYTUs(A6e5KC_<$R@I^v?=0;M5Y~M)DxYaT#RymBj2`#
zN8sM^=a>==Eq%SgMQmz_?c7$)W*Mef&wt=f<_BXpTw?h%P5!$eQ72;K`>;r_)kIX3
zA6)nLcPK`*0Lqg9*j%bV-64Hus5hBaMmbHQ3R@P9pO<>r?RhL|Th_$TY-tvflqxcj
z#kC=@uA~7vu5~8%Kl-Y_=R=Y2*_VKh<=05Y{v->ey)!+Tg&IvGH<T6Ll0;1~&k@Ix
zQMn4MDv)DF60WEHLoM&AC0D*iRCmPREt{@r>N3oMlyL@u&|b)KF|#NoOY$|QoX<>M
z(A3T~^8A|E^ixRD8LCz1(JFn{L_()uoz=on;*l%~tHbL@UE4QxC*%gPtxEFUl`OB=
z*I{43{@Kf{{(bMQFaqMo51(>{`#0VpkLQ%sFATxVZ^r%SYr;}&m6QGZ>Dx<4NJ@po
zh6@}fXd8c5mJ<$FsEowmg#CtaMCv}?!xVyvdVFmD;!ys+U<~kfzGMqDni_q=TYdn4
zHBSN42flsFtgz?1W)nq~iT>K3?qe^4YsqbV_&_lICvCzNLY2s$z}Dc`;bq*9+%T4>
z-N(;_R6EzC-QhIkanwKKYLY5>rv!-%rqaeg61XO+!GP*bQ-=dT*CO2rh2FM-XP``t
z2~Bye0!gjjNdx7z6L+BaOOX{mtKmd+29Ir<$(H@9KU0J-zerSX-aIP?LI)^*ir#oV
zkSFo~-nPs`OC~!&LEkCa7N}Djtd5MoiE3;SlxZR-#<S+Ss(?$fmHA_le__1)!IWM*
zG(s0Y6p9=fy%cL<hFY*x_2%xvTH6=dArmQj1%21)H5<S4OmVQ4I)6x0U*8}CBQ-00
z#BHEzvf*nnWt%nqN*49W=4=Q~2WDpcI6-1>9`3&$KZ`N=dFJ}>=jmM}aNw|1U9^FW
z%8gZX7-EezddI)E>IP4f2Z5h}b$~*@Ro&j?r7dB!5+pN8<$An+=r*oq9|2o;xbpjr
zOEk2wCFlbrDv{BA+?h~Vc#2HT={UET?_?~EM|8BF8$xficl8b5@pFt)^=J~+D(|r9
zElE@sA=<ytsBwPC=l6XV#s;fkCCQIFE|%g@QMz$)yJD)4@}=acl#Bf)L3U;LAT8su
zvj>$<tZPJU5`*1&!hV_^U4$ur+I{yeXpnKhX>qirH`s~w?v`|1GN*{5#14&Xj4M$w
z$s=e$vP+U&moGAdetu1PT6pTeGXv^X_~c%v6hb)dk^=`-Ea65_HCaVz4?vq(_BNQR
z*Ok_@aMfz!$@imlrFtakeuOT9;!P1V4Iv<XYMzg>ex=ZHQ<7vDbh$lhOlej`I)7<+
zuld{sBlC62ai*E^>77ysTM4a8c6v9SRNcL$e~(y`BZaY?-V#Z&(!Vbd3n`jUQD3JG
z8<LcQ=%@2j;&8~Yponpyv^JhIT5d56GAKkYw5$nGH<_03H`Uj32=JOG+yF8VaSohx
z)4Sc`!|uPs=8U;~=q?aSDg0Ckv=qA+%IuOxq9GY<F^r4m{4na2Q3a0KA~b)Z9Rha;
zw4p=w0Eke7dx#*4al}K1VEu6nk%|B->BEJJayn(i2`4j-y5sO~rw<38EWihAaM|K)
zUu-940zB|Zgy=`zp8ye!=iefzBn(9s=T-vr${LI*6zn0QvnJmz*+(25O}xeoN6h0y
zusKHmthV#$Wb$QtaD=37n}ukd+q*g(YyFqYgvIX{i*p7p4C>D5m;%@3b%^-&ZKGKd
zfn5*N{owSI;xv!EuLaAdwS~{k_^zTw1dEo^VjUv!`g|~Iu%DpITMWtfQIewLD~Oh$
zw|%Ah6qW!7dY9=fS}y0COVx?yrxur5s^$y#sr5p|)wHF_*(HWckZnWG1Z^kF`LfY;
z<|p@5^AGMDKAg;ZuXsCH-?yA>w^vG(JXs$!Lkeh?M=SrHB}Gc#ccx7#v2<sIq;2OE
z*#pq1KZtUN(I56}oYdxV05Um>0HX01+XATYNfFIuf>9-h(p#)3E(5bTG>2+rw5%f!
zf^(z(Qwq^Ma)+d^jMlR}cZ9GBi9f|}vU`b&5|+AnZM=x)#evx*%Fl82M@{FRKRzq3
zJaR+HWxKN%iJI9rDJ6fPM}b~h*Y_m|eD(2H{fa)=Iwum}Z{nc0_cB0E=n1OA22Y(o
zlT}JN&t9`cknUCKvhvk^#Q4Cm+uGN43(vlog)XyD-(v=69mH_3OVzw^w&%h=yEx?I
zvi>e&hDrNe+0;eX5|a!y`eOR$65wVlrKV`F{UUb37K_-z$2Ol8;^N=90Zk+XHC2PT
zz<?(3r2Q#PGwZEVZrg+fH?>kay9(i6l+GCI1${t#mZhoLbGI>7@;0aE;t>^0Du%TJ
z4nBh7Q1GKck?|kYjI48KIIvQO0<<VLSkFq2a%3zBQ?Guuc=A2BM=S(I1Pt0&ASmf-
z7RYosJ12y&{1~>_`Ik{c6z%lxbTSy4Yc#k=jD?Q_rrP0t0tiN$sRU3qz`JL=lZ6&v
z(V~=~i{yU|;pw?`D8=_S#W)>+m12^=r@QmC_hQ@Gtomkk+E+9#o~(hQ5c9=lwdD;I
zXTW!Z%EqSt$?E&P2BwBd08EcG6pjYGqpaFqPJ`2SrV@WqC0Y{u_IDS?-=fKFJb1(T
z&=7FrI}z0V*hV&=P?(5hkj^Q}wgW8YG@rg_X}!7X4N6Q*&u7_pce<`HnF)vCve;u^
zFLC|cl<{Mcoud$juR}psmj&6f_@fjVaYXbfL&RD|AhgFh9sa()k41|cQCvJfGNE<b
zVg>P%dN99mu~>SzOGzmMQdmJl{s~!r7ilK$BWjd|tAB+e6&|2d3QWjd&V^2JWJJtH
z0fxJlJZ#dFR~zkf|7)hI7dstI*6bGRHI{&d+3ph)K<Tdc36fAXF*e1Clq2f;?lCsW
z^g_(R;<d0A+09(mkx@XvtiypMmBaTg+5F*ZM>hM8dAnZsh{9inFkb5)mhzZeNpEYA
zQQPiI;xNrdl7y;ZuG_L<4vJ$X{B{pFmd2*}BeQQ-6xgi+=UkwNH2_8H?30M&gp%p;
z!?<X7GSjkGO~@~wDLBolJ$oVB0<uE1aQ?W-R`7!ig+y}Lr<MPsPx5j*XldRA&93nQ
zzYnktpPqx72F$p6b`rG)w_e(ho^K+}31iXbSASP%xVqma>0N9Qenpg=HjLi3jFu=Z
z9<417O$yjpis$*adVp?DA64<rM=t+D-zy>&;DE`6`!IGn8MsmoLQk*BaL}?4K>Dt(
z%iknBZ(+eU*aSaSSl5od?_vydcZt$z{{9Jxy!SfxJ2}i(Tsj^&4>-{^L_@*g`)2%d
zk#BA>hRHbDu`TG{I7KQFR85%Zx_%G$$U;zSmCiRkr&l$=S5KlvY4~*b#z7Z#QDt^A
z?=NlF66u+4*wZ<N%HMgp*rC%?dV~=Vx<th|c%3FeKZE9LhiQ>skQ7A{9WB{MA`;d$
zf|_eSoP6vLx(~{nx_eM^UO#i0G236&?w6I62t11A$bV0)gS?EkTa~}Aw!`vk;|u>q
zb|1rGajt|7SsRBVO*J7;i5}!u2bbd!^jdeD>T0wUf;_44uT+X|!2qleJjDM%dTdHB
zCfiJw9P>U=WG;abN45LKEv(O>`LxrKdUOT7M}KCH`!$6DSnjCB``u5&z+)t-IhG)2
z;m$L80=WtHXcPwe`R?p~LbLKgxvH$G(3L$iW9OtkIC*i$dNJW6{S$qw0X5u{R+9n`
zJkzSMXShz#Yf(&4A7W8+$_<tO^lR5}>LwIe4)#<UU8LakF&m1N4C)kM@Bd{5H;fC0
zN3ZoMq@eZIET?L!9XdhCt<RBHe!UzdJVTER(=<5_-G6t<P8cQt#jZ$x7bljGsN>nX
zmWgAquE{G=bpKZ)O^1ORuakoGGqkn3glV4p6jv_E?T`??-)(mVok-M={p3+iho+E_
z9*rM3Tl~FcCM=b$Zv9tN_rkmP3}8mNcScv&Eo1XbB1OF?!mg_`gFvgCy`A@ON6bj$
z<AnTfjx@BxXBX#ebRi2<M!~H-ht4`Q*JbS?LqyqfpX*sIX;q7Q23Ulu2{b;Z>7+s?
zGQ>|d^9+_S0&^KJjwfRqYh4MJm@Jm-c69XhW{2wDlBy=v-{$t2*+0C|_&#3R)i=BK
zVd$?OOfI{wZe_)5eVqo<4ivSHR3Ovi$xRnP-TxkoqNLyMgm*O9;2c2=MD9_%o3tc9
zd!z)#CHoyVZ|$6ZU)$!QM~KB+sN>;6V6XZxpa}dcbBN|^;RLlN94@M4Qe=HoD-_on
zE*v~2sB6RFz9r_HU;VXN62tI^RqiuLz5qr9bQb%Dz8MO}MDxQ&7gchx2y=h1ki&V{
z*FM?qfKV3AJT7>$&gs^hcHlL?NylzGMHt_;Z!O+JOgvx1MSP(iFSA&9t6T1zdxu)7
z70`pO!>!~|*VlP9wL;JN?e|_d^}S!Y2_B{>G(83};{!Y&xAr$5PIZOAKeJn(mU)DJ
zh4ey26p2@NyfcD7(xs4ah^owvw`7bd1p9M_nH(vpxS+G){wYI2@CLQ&2`|?q{UGFb
z_HE?zbtfxyhY;)aC}3JM2t#26re%DKg?$x%acD&}$QS*<BML+);ZWBkx^vhhqobHy
zdirMX+b#C_r4!os*}x+`=RFuj*WE2v!(j99A{wh255YTfk_r<+aI|u^jkqq=8bW54
ztHt3aFH}o3^?^P!br4}e*FcrRoaH>z8I<9StZ^g#siUx^y9exGIb4fn^G&3Nkj)HS
zg#7j4fJUC}qIvd7fzl+W!FV(>ZdmjHPmezSK-p+*E;)^-c4E3g`?2G7V{j5oOiZ@U
z+86)Zz67q@n|bkft_cQTtY0ZX6v%E*%um(ahSu5nl`&-?k*?|&Ga^H4${?+TF#d>(
z&9&XqOP}GW!{yTN^Y-DeZ>wESG5vv*Q@a1^8nsvi9h3smpe2dT4c*%Jr>ZFRJ@&fc
z7)Jt{VF^@|^y`Ac?2k6B1b$ud>6{uELbCZrEpiq=2>+-v=T=8l`X($&Bnte?fZ57)
zhl3iM8CjiyTR?6iqHj{d|J{IEf`B%La%-~uJf3)YdNAC138pgy2O~qa+32L75jSv=
zKzvZFK48*7Rc*$Oree88i~iNRC9q%?9}R}(P2W}D?a|Yi#<cz81y)U0<M?883}Kck
zZfg-;fKGZvc;K%FH9Ya;9W}VJW+)d5TI)BM2&D~gO7eyC%`cbyGpX1h+5AWeZZxdA
z^ukGiX%6RLdmS`a?@}}43nP)C{N@YPO1|EwAhR(Jdk^VtTN%a=6;W$1If*tL`C*Z6
zpc$@1-3S2pV|Cw+J}xgy<lhx@zH&43wOfct$yFQYHw2o(yVf2e^1ttL5m0a_Kj-b~
z=%XgRaE@o+lh0_8`1U`Cp(cN6wv%6J=iX)Bd{cC9aSN>RzP`MDGykCH-eNjtR&2eR
z@Y825$fWP*<k`%!e?5s>hGhCeyc&16pH<C;YQMo<bKFcEe88i!kdUavntjLM($v!~
zsWx|zRV<M{x1_Z{A;vF}W$Yp=6~ESi*FbTh`Q7BNCB@0kW3D6j53+rRNRA=*%{}tB
z_uAp5wlT|eUg8pg#hxJbYgi*%zhH&@jAiv#DI?!z82_e&&mRZf4MU>_X;%;HuN~JX
zLhEkBKF#awny^ig&wmJP+<KOXAell7te%iGY6sDj3*vw;B}sNr`Eeb}xQ+Hr<#JLr
z5^|eE15G#GaK(=kF2q^y7GXZUgfr=1tiBIvMltqX2wz|1Oncc){Jx?ROq^QyHrlE6
zNg_sUW}zJcIHLfvjrIX@^efw>XPMnJW|?n!FcBbXp)s{^{|WPtbnKKOwV3=OKFv|>
zGs{YGL-!U@C|0XlloLb!?~-^aAS`!^U*!RTv$;lLwbgCpar4dh+Wt{5!mG#4;Mv7?
z(>=Jx_dr7{+snTo3kg3PXUYI#Pp)ivmYUMh@J;!|Z^wF;)e9o*ApMuh+XMmXtt3jR
zU#%F--?ix_0~<|LGaDzO(O4Oq#omtk!@(+%!ZqVW#VSS|j;c&R9$g4Rgv=Yj9vS}s
z_Wq>Lb>ScT*d@YtLVMWL&yXT!>}PFrSC_0eMq*X7g803smD$sSj;CGtu7{?EjTVO<
ztC}<W^DN3@%A)1zPVvn7h1Nyzg9vHkTtB_?yuotAHv4wJx4Z~Krh2cR6pkWvbV6GQ
z?uy3{==U0EcYI5}vAAxG^So<opgWMUc2p;j{J2TmH^Cb)yr#bE^6hKFu&>+6o*!i^
zQwJs*s|v7`?O2i{p6^Ak3yCQ(yFWKv&7R#~ZszV)RT?N0=VF1V8-R-$7?dBG+sKa`
zy^eY;^YX^9+M$l85&Fu3oq*@vzH5oefSST!+ojgv^yqil@j>R`eCKC$`F(0qlavXf
zeopbdE&(G=>-xk`>%Qr1c<fQEYmlT(y1y=Qw>a)iYo6qwZGL!zKR|Ll92|sbLL0+|
zT12)X_lc3D2v{fhvFe=kp+o+wgW0X#v6e_P-8h-73zl?pMtth%vBkYGT6p+5{|OSc
z`BcprS|R5uB4mUAp{MssxVWI8-kxFhHM}5czfUL!M7jyEv9m)ZVEFx6z)LA!Yp3rS
znEgIM)80<o@i2#O*HJ$_Yb2SC)Y)|(W8GxsD^1%m81Mq<5QWOLBJxkrX1K)9B}#(c
zG(^Piausu2xR9kpOTY@Zbu0e*lJ*_9vG$VN-Ska|A5n7Bd6Re+?;*uC`N4oclxW`J
zNo6?>s((uvSQaK{?Vy56`EgMU)vh35n}S%B+G2b)xEXd^?Xrt~FCplb{qI<U6r{ry
zkIDcaQLqHM`Z;3}Kt-_+zscQ)M6^MxSGAHoLzb-TTebV~SFh{#1)Q{(=#9|nqAS?{
zB#0w9E6$?Z{cLk#2Zm2!eq&?kFInOJ6}kRsV7{^yF_}VZEGwZYAwOYpHE5toWIe+W
zlKneH1WfcjK`$eZpfgQ%o!X}#dPYP{m9@*?DH^+nB@1zwmNTgWr*1b^;|N@s2p)!f
z2{os{f7-^ef@_?47XEey?)TBS3RA(~RRV~)-Qia7cS5BvOu1fctqZ!@<Dd>sBc>V>
zIR8@W?V2M-ePZyv*YerHXSP2WgSP8v8?VY3Zjt?W&(6jmnq7K%t%_!G$PT@bSABEp
zk14xPp~XTDU2cP0*TQ8_+t;P1b0P)1SqVkt3m$pn_J1-*jv^sX$eWxdp7$q})LzwW
zceGb7$#K?ZE&XOWOAM3#2aG3pMa=P4d;UasEH~VrzpBbslOQO(+ucS&o=P`@AjcGc
zK1{wH8`0`(J`n|mt#6l%#{B@TKzX!PaIJ9uNM1LUyuw?BQc}!jf)NW{>qq%sZzoCD
zdmtEPZ&av%7d4`PWqV;oLIbw{15bgW`tL`w9b!YkK`-HSD7h#oV6h(b<GogMPXk&m
zkQ1RZiJaM{6|bCxPkfH4nG}kt;}Dyo<di(pS>cVS2g${T&Pwipjo!ReE%0#v{d^jq
z4@^t-28fXMX)E=M{M@s<U4RICLl(=YAKUR(-88QTx=N!;5(@eAY;0T!{<U0QVypr1
z5t_7YUh<_fR~haPryO_ex_Wl<I+oKBSP|M;OmTBRnuLvsC7#RewrIoDS;u^6TdGB1
zg-0OMh~l$68V#6AauA#$hbkxPv&R1GE*poU?yQVwQJF(;69^TAG=In9ikbV^XcSk7
z_}XWrz22RSN)t}Uj=LFxO^AgII`CcNu*{PM$kGi+Huf|?u}w!}hFgR&M>u0*f!lR8
zn^NI;XKk?!$faIz2eOa&!X&dodT7Ayl@Kn)1CCsVvFfuFEj#H&&x=++lNhJkONE#k
z(EXJ;=>6~O+cPm3YyLRQ$A`w^&1Ozwb?VI;C>n2L7!{3%Y|LU>_w`!EH*t#KEt$#$
zRNI@|yrAq?>Z)dPeV@$aD;^#6+0R(DwEsmOOHmDt7YbeOz_EO7Sd#y|4a^ubSZ5F8
z6@;^`sDA_opglb2Qf1Q2-QBs0;4FFcr)vP263X`l$DIYl{fmtJos^P$L5d2@h`WX5
z(ZgPQdDUOeG@!mSGv0Fh{!B7>J3zAQY#q+1xxC)q#8v+H=os~Rp|v#s0i%<Kpe^)x
zDc^s;h*fVoPdh{@mk(jRQD|h&9hjbPF7^_M6`88EF$zPQ+hg`ssnq{N<!^WD$o^%0
z_mKc}0zzT@JwUgpP*Cm0QtCOUQ0m#HzX*FKWZR6O==UF+LyHD{s;s01cWuwqwdm`M
z(D-c&Dj`EPN%`gKm0Q?iVAGukoR0mk+Tp4SlWY&Zqc@e9QN%xXkTy8&sgGH;kKHP8
zs-^n;IJXH=VQ<jWu34|qZbZ?yE7C%{4&wBMp+hSifG<L16a2ezIE9^Q)gkVBw+pAd
zwNJ*a*4%w$=rc90H@*O8CQc2&K}?N!Y>cfeL(TuWY!)&mAkK{5kDKF1cwKTxrr0R7
z-_xkQUafEt81vz<SY;us{e*&hqwPLU!=N=B(b}f!>a4+>$I~@<!t{4i0Xo1N?d_b8
zseg1$v|||xW-oqkzqI(@=Z>fQNU!&!DW{`{uQgqFaTS-O?1IW3l2XZ@qZy&sRW&v=
zKbnm7>`sf|Z+OxDP@+Ya0W8|&oRZQ5lu!wwNWzb3en=I57Wf-o>gn`I6mMGzsQez!
z1JVY47hQ>!_<S`X?38m;S3ocx;aOcGOP9Zl+a0vlRflZN`=b`Ln)N3c(^!IOhpYCx
zTJ$hx>(lrxEfOS6EO`>KjDcO%I@g}-Yp&%Q@6f(?7uyc5UgOj+=)3|RS(lw3IRPpj
zUpoLWItBv>t)^GzN`MIOy^a+Dyht=SVdm#sv>?v3*eWjX`pT=!gpl-HF)Io3l3zIK
z1D~76>E^WtdEn+#p~9z)R5=%>h@mEB$FCa;)%761Eks8AX0K!j(WlN5zIQxY5tNk0
z<g9;LWiXp5X`T;5)NQQ?YN?wp**`vzK3<a6cC`+uq;UT_nd1vI64evaS|X{HK6-|a
z4?Q|C)Iv}@Sn*aeskFDX$})I;Jv}3faer?T)c5_F^Y@%Ejq~m$dqu5X9k;|tnmnPD
z*rd>b?h6n~(M$fTeJLoSk@~zT>b@3P3CGBb_2VNC=_TIuewJ_Vv?Kca+_Q(zM-;gj
z1-y0VO-9axWL+MQtRrnz{;i-cVxm|~;|~GWG`rGt7<u|2xqfSFWB3iP_IOl}CEqHw
z)Fr{P+AW=<^{r<{8d`SsNc<U(v4@?C4)=3Ktn+wt!AvIzQU_8d4yeAGjfTM3!JHWF
z`gEs#RE>^Wi<(7}FHY<}Z-(f~WL{-t(@R2e&~W`pmQ8<)vZ_a4*dC~X&BUSKL(9)1
z8sjrz8z)TRY-)i6%{->L;7bXUL27eK*O^WIaz^^ViI9Kx*PTlfh=U~u!--B`UuO#|
zq}lWES8rk%I^FKMMsz{BRn&EG%|CO3pul&W2iMq^n+riEp{A*Z=}e=a?qL<Vm8UI^
zR|)+8s0xBCEAx2PCm^wQff4WCKS5>NkS;B3VQ|W{!}$p`v#(u>&a(8v=er2h48lw&
z2S>N^tQ5cxF@5Q^LzHwkkX6aS$VN&bp$K{Ey2xHWtzLij5CXpB!hm(KrZr#ttAy7q
zE-CQb(=;Yw6#*<$i~SHJn5FZHBO}ZZeSts_o(kr~Vs^ds3sHg||LnZBxbWN^Hw#X*
zG^uJPcn*_@n%F?Rs87ky^zB)$8<73ZZs}rSLx5-A@68hh!umX)%P{2pgd2kJkW!dz
z-nDHG>$r}Bj5gnOD%!lv1^TP>-GzvF_;+CmAg2(CQi>9~0gY|W@I|$v`JK@!uiVLU
z+2jX&;c@(Ojv@?XR`h(3J?GwwqJaC5>>+kMvNg?TgxuL-w@;liuWm*|xPb)1)ax4w
z_=L35A>VH$i-+RPKX&z|=r_Gzg_dhB?05QzQkd-^{&IO+_A#w>L<v=qMiYj0`I+tT
z5U9Pny{D0Q{Jw^1>+4`<+w1KQteVcoVVxQ>2giQ|sJDjK>%UrQ30<(}>?SooAF5)+
zrV}X)|K<ATZ(~$X@=KUg+k*CEiBS<YFw@YFvKO^1{+%}^Dr1z7G9P-g^6L<y=Sv#Z
zj`(qLo6%dlt1nZUG*@~@0C{BL?9(*uJ0RhfHhf=&3NXf==SLJ($CCp8IUqbpr68ne
z(>;?o5ox7z*%|e#a$OUTEeSzU)>Gg&HTHX*JvH*ByE-mObZxt!7`Z%TBI8`O^(%(H
zkIm9)k>B>7l*Pd>pQ8Zj9H76<RHjfZGb`#8rqIxIda-3rLiz4Ha4rA;GFY(u48B_D
z&ZkogbxJ>*KaPXT-~V2=T$<l>usUt+2;O9U*AF2ma*f%>*(doMfqJw(RR!_uZ<^Sc
z^c;+vw>TRG>O*SQEz8^Z!`(X1iqK4<2Y!*X(nEkX1wyh$=-Z@$)=tXDTGXYlUCyPi
zlW@-s5%ZZ1j6r>%Vw@pg*TaoWz5bpnZR%7bGevCU>7t>~t-kijZ{k_mHzFhVdBllN
z7czUTkoCav6xq2z*?^NsyVa*eCelM{yRtH+3LOq$nYAOzf&>*M-)AY9qFZ;Q;;2~W
z1R2=tnN%N+IgkL}n{C%5rUj}e73O_Z<1@+-Zr4*rUj-Be+nj7S#}$-9XRH$&s{-g2
zNL9`?@3U9>FCj^@(1_+xbm|#g9j#<imNgBVy7W_%HSIsHu<$nJ(Ge!<@^vjA`f26!
z$4Z&6*Z-+0?Q6lYwp-wTukqU_hXpQ0I0`uAe|fY0LdGZ&3lbyDb2jrUWg)U|=*7xn
zy2_lTtlKM3k^b90@oDK#IQr||y-gL5t<IpxlI%585D0StR;>{y2KxJ)LJ`QpW(gMg
z%Q-*#qgApxWA}qF&#==p+H*AcL?MdH!uT}fTXNw)p_e8gibW)DDqT~7N!xrYP>d%G
zPa}Ff-<de$0VIjZXL0&|xAj8ijO6-PqUX;7=X`UiTtGnEDhy2}Pn(gLO~FxkNLgnC
zm8o(#T{K94+)OX<*z%uhKDUU8+}Q#ZP`o0hHd^*;-+Q!6EWnGP<2tcPknNioeL;A~
zCpBI*mU%Tm`$JqZ>hYS3h}Zt?TZ#JuqsIb-lya>KpdP?Rp~<xTxaQ~N!QX(&GVtZh
z49P)-5P*;(o{A~3!za%FomURd!uV_T6CfLfy@jQiaz^WFPN3Myljif>5%YDLIoGep
zG4$o?3r9!Q5Q1&9=C!_0OGJ)!^0b_Go!+q(%dR}WuF)kqtEMJSgp?uW<z<0d9X#i_
zCO~7&jDAgnfg#$ljGAPxXNGZsC*q^0q00?(md4%_t~58b1WY195>tk6XIqR3*ekab
zRTnykGTxJ7-RD{f@P1v21$2P<`IcEwUq@_WtFPVxR&*2%)d175C@Eog#n;_GT6P>2
ziLGRcOEl-%9S)&UUqVONF%|cndPDtC1N+myy9ZSXV9dP*OLe8ZTEoxxufbT|K)p_P
zx)#et{a)driB(i+ATTz;L@UzP&UVhPz|rV23|KUzuZErYl}Lt#<FmBAKnXREJXY^O
zr2FN+ll?oy?hn1<%OqRva>kDKg;BZxvgy{*(h`_;i#i6m!PW?G57r1x-Wu=>-&=X=
zcK+$#yg+0Kp=dTt@7s+GZo<pZ(yiL)Y8r<m<5*j}-}eOHp5A%z{yZ+t`eX#_#@Msz
z6c*nY9&~_O-KBE9SW|U%^Y{R1nPwfLVn7X7(K%|8eZa6ujdsp}N{V^(e&uuu`Ebb0
z%n+LJtZ7RJEElfbs#0U+y4Y;uC#Z$Eie|}BS$Cqgee0cLZHt%Ax);+Rq+ry#SV*Jt
zLAJXb!{?1uk|PyQP3IWoa$Kc)^`OYu5`PVL)8Npeh4ue^m%>$625W5IPZ?h3QcpTl
z{Y9neAk<m1yy~Jz8J_3d1H=_AVxmzcicI%QQsn%1S|H#6JLePVya}JrSBNjG+pC-w
z{J;47-F~<VwO*pY78<xgi2pu)LLJzhd+tmX!6~M<_~pWr=HV#2y~kYGGx^iwqx<6t
z`s2ly9ZRw&lgdV_Ke=J_9!n*kganM-j>6oMFC2Et(6YN~M{mY3)uh#0lW}=8-l$iZ
zbxu{5mzLO=gceO6cYc5L<TttQyOW$6$D;#S@ZJkYWaGkJN(1;FBM&3Y=dBAJ8>GK)
z;J}h&RFr07n<Plg&Lp8ZkN+;E!t48MY$k?-r|}8^WKI{`ZJKjRQ2b0^nFYa8#m9uf
z-BK{8kIU!OR|nd~0U(EYBTjUKAtY94<voLn<=eH4h2dl4wagOkw;EA*)xg9R`cKnv
z0GVjz7fUJ%)`T$_oSz|bBSq;gpqBj-D=`Tcr6s0x%l~db5c_RVcPzv_o!c&AgQ~mG
z|7;w!+)Qi6Gbf+(?X#W^u#=TBdV*k(mq)0K1;(6<o5#&3tMeVFTHkZzFTZpY4Yj20
zXystou4VL<L-MQMmGh753*yIC_xrC$OqGy5CXkC;qf{1u)a=%n!$uV@?*drDqC2|2
z%K)g8E$KuDOc$<S;__eq>W`S{e|O%K%CIy&JUo!5gQIXzF!nPHRbvjXo7TNkOj!Lr
zb#lJoYuOr~k1z);nlH4DXuQ_#Lb4u>NRSZbo*S{SU)YI#k?KheKrM2`k;wREv@XRU
zmsp#c#U^x<4L1iOXoHqOO30(K7cQxdSQu)%e@WrRExe9R1<Ma5BbNjKFKYDAg2FeS
z7UYq_;!!Gc*Lo|NC?l?LW}kg2AR<JwOJ)dpIgj!BpWHXbp3dn_F7a1dJaYCrN>QV{
z<3g5)g-^Pj5y;B>nE+_%3>WAXp5yJ1#_a1bb`B}+?d}@i`3RcOyxEZY)xJutL%E`l
zK(W#7*3;?fsq5pB$Se$w%GsC1iQJ{qsY<hjH&dw{`lHnC?A8{S(AT)wAoof_$!MK9
zht5HCA;b12i#iXu9LBfAS*BatpDUy36$XH;un+l={elV{kclm5jL+eaSn*xujghI!
zru2@&!)Y8H*B>?b%Hk&MxZ)IE3S^O|QPK#5f_msR@7D+VG!A<nAlD=vTykn{8Z?DA
z`r}_*6K<N}d%I;cJjwuqEXs^R3T5aL1cr0MBQbkN)O2*!Xp4Ijs%ljFdo+>LGIEqG
zaIC};WH+?jhiCyoaPtCmRo;kk^T|j|3FPN<NhwI9lA0q<r=8D>N@|;mB2;G*(LZ>l
zT~OWiubz*XZdQ+`>@RzvHL3;ncODQmzDZtC`pqwpQ^slKw78w0h$n~22|V6unW+)d
z^oRVdCP^fKK3P+icB3?|TS`UQN<b<~Jk8dop!GCPQ=uq4?mdpl;qBYaT;F=T$Oov)
z=k5H1W|3C4W`u4FkG5e?)I^xndsUl13oS&7Qvspb%;V@?i0#eIkftNZtHhW7srD0P
zI@Svm56B($ds9VqS;-C!jdx^{ua9BTgA(otCCZT_)~LFLDR7Rkn=ch`5*BE-#S6?F
z3l0N@{E8LN?Cu08`I{Y3td+xii5n?@S3{fk;FD(4`%kOa0WCA|gN%Iz44?)7r;PE=
z>#_e@qk9}#^vC#49SKu+nvWFv>o4`(at3{0CrBpA(5ln8fQwNU#dO-FuJb-Sjr@H1
z7cvb3tf`#U{oP=+hX;igSML;lZVbX$h8x`xr};?|ds#Ea$IHv>jd>kF_)-|0o3Xd@
z0D-Wi+l>=;s&)}<v{jp6_9KPNFDNQcZ$LaWl0*9_pNMv5ho>toi%VnBA}@>%wm=PZ
zh+9^%*kKgv+WY;Rb9Gkz=1;VlZytZc+ZuFy_u&rt7!`KcW_C23k$(LJRfaPt5I5i=
z$4_}u0N@<yKFV<FCZ35b=0+xhb&7C&kVmc36Uv0<bF~5+lV^KNM8j5*>Ig03ppar>
z^PuUh=>Br70DR+)!F%FQuMn(-gZ&|dz2dtA_XL<NWP}`r`QBg<Ou7_o#+urK%U?Y4
zWdVdo!~$H{UxbGGn);pxOqX3Qu@v|a@Vb+A5CHK~UEdY4qo%y@9F<z(Kd#f<#(MBw
zD|pKVQg?mqvKe^!4Bek%w7NK@>=h8YXUF3cmhQsjD<vnzRwm7-Uuv!<No#}u+}Dru
zUFuF_Z}7Jv$ey~U)V~y&gwe**5Ytk;Ex0fx<x1-KD_nVb77&mw#P5O3^X>StKzo5m
zv3k^PQ_^aF76}(CFF1{OgMV$eXOFZpoC)GXmFO}KWl48b$iu0zu0PhT&GTHisI+Pt
z%fiA<cD`*;d%MAm<=F(%@_|JWW4Q$=N*euqer+<@h^e+~p|8DsmFON6d1^T6gyZna
z9wVZ!(%z%eg2-__vV<?oz$q#c%m3w=`dDHB5lsS|Vq_~21&71CSIwl36P?v7rWVgG
zqyOEbx|=CA$xCtCb@+r@X}GmGgA&biR*k*Ak<?1d%O|b4KTh=3#+-LYtfx?>g$MDo
zh5G|Ph3dBdnVxzes7mU<9IH2G(WMw?8!JDtZjoHCCE<f^MM4p#{wR`oQMw}*Y^AF2
zRy`*NrYi16;mc+GD<jalJhkG(?68A^k^GKVVkkAwS}qrn=xlCwTuE9OytmGlBVP~N
z#wa^-MC_WqK*%LoCp$2cAI8j$r%0y>X8DCAK^hD}?Qjf+Sx&~*v_3d$Xl%{H%L7p@
zCh`K(CaI8zZ1~tqJ|%SkAT{<>;2*8A>w`o?&Y6x2TXc<UnQ&io8}SH8?oT<8TnTtk
zj!E393H={Q&+_Th34}Kr2<pZ_fai*Gs!>xQUqas!Ajq7CKPsiCVb?@)DOypQiRMJD
zhdKI9ybQ@2^GtC%()e}J%5H62Z8)Hm?82eS3X|aey0BM(ZH0zEWplky1bjeOXmR|R
za(-@-913snHs@X*5km`gyMDDmv;58D<jit5K+`TgfC)(`#}#SkwfK7D67JEWo?6D*
zZ?C#7>8gmWe}16w;(4nYO4p0~cQsKjF__vqu#lW9Xl&pl52t708cU`!-Xu@n&?O6p
zLaIl1?Nx1#rsC9@pnF~njq#ge(=9?%Z0pZ0xdfG&O0^E|xdIvQZ^n6}meM#>VkTUo
z%Q$k0;oS_^XEN++IvOMUTOF@tc}D0mQWi0pP7Bo!I}(@t@4g<83lPLeYrlLtJWTw*
zT%$6f0qw>gx}4&T__UdH?<$xDBnV#fIGQFa0^HjlS(Go{a_73=L1~=0X_Ef!ZWt||
zb~(|LKeIg#QSq58l})u+UdlSHGLsBf3NkaFYV(RV*?f;rE9A|o)8Jir8$goc<r?R^
zr=UMdw-OSC!SC}Ng2x_&BO4Osw^EF=C_eh+ONXc&T=kChh;+c4v|H#n+um@_Icnn6
z)+p!%no9QHCD^@>D>O}|y_D$}rrg<FFbUO~he&x@%r59Ris?{*)t7H_J<c+}DblaF
zsKUc&Krm~s>}dWht<qVZp?nu%Cpq2ak%Z7Mh@Ac?&1|D>#iGgbn%+EcCb{UBIdW6N
zCHnA63=1bJ-zwU~qJVsC?`3h7jF3Om6`a?9j#la7_s=XeCWkbtwo$1@aXGDpTs)Tu
zrF#1dh*46U1|B<K9&JhLy7`N@8brr0X)9^?b2T(oliss%x*oTKlA44R_4JQ!id;hE
z#C6XfUx9kpY+{fY@;yK_X9%)Lc^r<&F8xaIfZ$uXsHdO?CiN(R%y9{HezJS4UuzF}
z(gk;;!*70S(bM|Nj54*ucNnV4EV~YZxujl*n&{Bd)oN#b4ccOPPE*IuFGR$g^dRK-
z2&(pbH;uPwyZEw%WW22Od|xIuwGO|j4L2%%6;dpHSakNM2&+lFCQj;vXHM1pJ=$xi
zt1djgk{*j?j>(7I)#rH!6zeU6L>?$2U|c~AYaG>^ztsFpc1lFEB-3enc{R(BP(loZ
zx%0gX>Yi`r{!b64`Q%Fhp*?8cya^yDA_{m<%>Uf<fKta?)mDCbEoMuL-Tk?&PC-V0
zlXrx7Fp1Z9&(1rhc@t7#+$1<ukkC=P|Fx9%WL2#$E$(YnOi9Pb2}yN_QwmDTlKVs2
zt+n;{0(7&V!6;uDjlZ(%Rr#8OvlKee_Ok?lWW|(vc-<EHEHkzzc@qFA)0kRXK#>B$
z<Jgy0=Gk%L`M);(8*PRcOEgBi+&~eWWd;(0y!LK|=+}0q`qLG(>3+lnk<0TJ1AbWq
z!KC=O!w;E0$=|KK0!ZJ)6ai;cTr>%lS$DX+?06R;bGf$^XdtwBj(eLKiC`8xj7ld9
z(a24X4s84mL~S8JARJOP2ovU55vLkJVvn|LZ@HkfSY!uP{}zujO%^)^PLz3i-LCDf
zRf3GG!Rue4oIEZQ<t8C%$GUJFOaYu?XEx{8A8%^MENVm3Ue9dPzB}K!?arOf*GNCT
znpCpxyCcFPYuJPuf4_?=s{XQEBecIX2|Jagvv+LH#pCAs*~GEDeyD6JN!rG3Gv6su
zwSPs?)PjjHofwcY^}I<nSe%qZ4U{&q;ivtZpaPZ~)?)dqSaRV+CI5lD7R&HyzV?=r
z0!lfZhNxtQ11Hbnr!$GDpR496iO$}Dsx&-V3-05oQ?<0yEJ8Xx2GzGeb1%}3so;$h
zs;@@HE`x>f^PqlCvWm<#nv%^>l5S*XL2A&4bM@P_TnshHm6I3Hb{;zf*N+QrAMPJF
zPs6BGS_J&2`kCfFsw{(*9OG#S=ELAW#qn>XQOFc8`1;nl{H~d?qnh?RbfkwW?Su$L
z0_QM6|1slOKWfX4^oy!y24vGP4Jm5Z*=Tp`Nn&U}6X21`qGXoO973#sHVM*C4n)Sd
zAh8E;LR+1BGYOxY1bDt@S{~A!_Ap|GtF#pk0u!=?zFiyen^gmQqY*?VYs+XXdns+c
zQx5^$F29KT7cP!9OK_8l-dLg3(8PF$t3=x&CR|!kem$KSKBl@jNd49T{=Et;$(CKN
z?`9XHol~+oaCcyenVq>6@Z-3n`+H6s*B-L&W)wJeS`Zrtbk)jUQ~qSZR%Aurgo?Lx
zd^wW}SE{$X-{`+kNT_m7f$Ve~1KeB8#iSvC<|L5*+c6!@Mo|f6W*gw7#v-8&5i6)d
z#8EW_hVIPu&yc+q5~)?s8CK5Ie*hHn)+wqVfuA16xW<*Mc(ZLn<#N+Z;(|v<zU={$
z+TdOz^Gj|`s&aN>(9H=bGlkm+RZ_TCHiZt)-7cLjr=Y8E{6)CpO4Gk-^yt9AN{8Y=
zpcoAV$#2ii>j=CrAjtJYPl>9j>rsmh=PD|g&;R?f2y8NWU&rf9cCU{0m<*U;s7gxU
zxdpUcDxf%+Zny=y^I>oRX{=9zEl*l9Q@^AIQS)H@WGLzIpoT`5;rUdZ)WRt{%2Z+;
zGg8`%R+}gocd>!9Ald%v4p4dFOW8KfU*`JL-1J4^JfWzaHOJ}XR=F$2-9QR(!{AKX
z6`trre7rG0UILUiIj<xM$&<Pp1W+7XXWMWnv6ZsZC2MgOyZ)5negho8<uqRT>biVf
zI(ceULOtyhLNUgWjaTG6%WYo&BF;1v=QB(%r77o8Q;=#vtny^gKNso8et4sU^zKC=
zo>q*%?HcHt`CbN{F1xjOpZZ-FQcR<zp>5mkvZZRlF0n!CUEW^=s|{9n&RRcbyL%+E
z>o9~N5a!LhS}H7elVD`H-b6XpDn(_rAs+u>zyLr$n+BYZ9TQWM0-K(~gX#~kEjiQ@
zr2V@7#%%_L6$AFIhwnA=dE@1rV6gum00Ke%zLsNZaomk2P8|~^U@$O8n~1B3&Ua2(
z2_zeHZSxDdrDQ(4;8D*ykyR!c3j&=TeV0Vpi9qObLG%&a#^!yNW-`~Lk&~{I<0%<o
zDrM|OFl+L<i!@9NiRQ*Nkf}v6)WB$VjB_<cvc+|8aV#2u$L{79I{znx0)P1LGMOO8
zayY%`Cls;qqMEw33&P>yv}LyI9BC@u@d_BLA(hYJ#>#Lo<m+Gi3}5=<m>W0uxN&`#
zqr(Z-_$&dxD|W$6&F^u0MTV;#w{JY;&h1^!oLS-N%Uhf~w@Q)cl(X7j(36;6k#-n#
zP7?-tSY=4pI6zX(U=li$t^#yU5ui>wcFJv`ZT({95qs?SdMldf<+M0@4+BYsgq={J
z4hvpW=f89fA#)PMW(Cm(FPT#-i_=Jj(mEn)nk1-?n8@c819P~0yG{wHifA`-H*Fd;
z#sF(Kw`kt^_z@h96wyfIkC|60%w-{_J0zcK+&zaJF6{hUB&PBHZ{vW$D5%)zmUuKf
z#%Ybo@@`|f(D{GFI{!!Ak1iU3#j!XZb(l=ZY@d_qLrQl{CPh+&+v{JJ3HR?Eqprr9
zt`pv)>PJk2Gu}_Vu9Q((lIK0X^u<d&|NL2Q-`V5ccXrr$I7Tq^aue>eS>Ad-fFk#&
z`@`)c9y~Z;d3nI)%V+rPb7#EyifgTgIR*JAJLAM1PMc{ky2_bHUT)%qs0m!GDP@1&
z_O>;uiOG7MYn~>7H_7TCnf4oWA+7i6$~|2v=p&^3s7c6zNs}Pj8Fz(lWU!v1HKtnr
zWU^136+5qW2PsLchtpj|!!3~RIzT(3x^9*4EOLT@k2dL*on}ZouWuU<;d~-vv)@0}
zm$$ILs7C&U1Sf!28RL;2m-<E}#8QpTfS>w}Dg4B*a5US+QDXAmBdiq{$Kv>a*X>WA
z6X2YQi^vD)MjvteN2Ra5*HoT_fqXcB|Hrt!$ooc9zW@C{!a+_x%=Dk!$S6gBnQ?i<
z@obx(UB-qOR$m|;sx?_A>~4>^dhH=As}@%Wsh*LTDbV>p>DmSx<C~4zIgSo1CL_b8
zi|6?7{f!s+Yk%#tTzqPks#eC6vX#$C8Wg4ExuxGL7>{PW`tl9_>|5`&cEzz^wp)Cs
z-OwMMOS@}h<V->)q$?VWMMLIZT{+b%be!`<I*Ez#E0b8^Ceyi|vNmi{7{4O%DU0gn
z9$VKvIB^DSi1|7v(VJf@gu<oLc@4DlIz1w4S6XZ$&hUZp-kSGF+a9%%eX+p0PJoll
zEe{fhM&=b0sok;fGPQZ!GOs9T`ZxEUpMh3wp}0;{(x?_%_P<K1@o$ldmWR@C1`NjZ
zyhX5sqwyYsVzZ+2Y5(Xx>yL5!_uKo6JVuP}4?|iX<M#4iSLnxk%<p}Lmu>{K$f5!G
z#4-WogP+*)7!AUE75>NnFnvhaUq0Z6@i9Mu^A`j8fFGb{N1hM*sMb83yiINjtT930
z<O6%0I-IM?^Nc_H<J&ykIc8-&L!G~fOA^<f2G+!MxAfmcFxLC$k4{QX4wcQdHGcUQ
zKf~Yrl`ru5FP_6>!e~6Bs$DFY8m4bmu-34=)Z_kx1Fl}*@hb%7l>3~z*3D0n6+uU8
zmYCbLxdJ*Dmz);j<oPt@HB15`Cx$pWSBhi~F`19wMcaM4%zqSG-hswwI$DyZ>Z6#m
z-S>dj?pf!&=sFI4s*hCYXv3w@?k>L>{X1w$GdIsQ8mW#?(kMS|GboxLaFNNMJm&Db
zThB?8a7au%N8a=E71m6t_d!aWoNq#0@*d8=ZmI3E3!y(QzD7Ak(I?A<s)EDmo=3y7
z;)gW)ALg_En74ngLE|GIw0;O2FY+F@_+UeeJQnQ#L9XMA24Hdg6duhan)eHGF>D{b
zimH;+^Cy_PxKLMhSb=H=zxf+)^Trzw=na(NAoCY{r%6Iya7LFlaWInH!oNwJ@|DT7
z=IEfNmk;>*SD)cu{@Y*T>woEKhD!w}<C0k!VuhRW+6hjTUST;pI*#subEfjRn#kf7
zkyAL0q@7EWrl%_JX}>!UOKZgIJ4=A1khK$Qhfgr?{V#KC0_|q+q%irMw{OeAh)lQ^
z`tPhU=44Q9vDeeV3gP>W8Iej_{F=Ex5l3q4I(X`>Xqf(KYNBh+j?xT(#z$Z0o@#7<
zg82^GbxZ6%wq%Xcyw9d7?6wpC+?p;)+u)^5Kv?HQQz@0m*=SG<bs8GwfCxCjNRPai
zBSxs|isNzzYcp(KoQhXo9E*dWRt`W%o%ylS`9En)=f^|m|2X%b_bpj($itJ@Ihx$0
zu<J}XrqWr=YWElUn#>CIO!$L;evQ{J-sQ_*JJ07ncZNLAm`ogH6*vN>>n)$^<25ym
z!3P3iy{XXQtj5}m&wchH&pmgB`*-$v_v%A-9*z+8d;qbbpgKeCG=>`aTHl(o)b2EV
zoEp=2cJGEn!q%1Pr7m-AO>)sCu8CHT7_sOaOfHFk0HoA;O(=dLVYlN^*AXV_92Y=%
zM5EB61v0;DPt1=r$;MTkYiy(|*^hGglq0W=$&Nb}HQgd9iLLOQ+JcVXLMWWc;{J4e
zZ`Xv1lt7m@5h;%^;VDQ%NYQR^5t^Q+$*M;+)tClJUwgkUnlmS>h!`a-^!fvO1B;$G
zPO4*$ru+1=WvuPJ2PN&}Px#}*==`6U@b{S4dy$_irCIhV97h*A{~v+Q|FQ009Q~CQ
z_IG!<fB0RVTK`wbZAPg!+0*)qy`QRuVLxN{LCH6M`zkM=d%%}pJjdt0u*uR&!EEBF
zYX`<B{<%kG&ZwR?!xarbuN)uE5QOvRx487w2D`gQT)F;`dv{N$W)5o&C!?Cxwc#U4
zRRaDo(7lkSgfEpgmmVh}+BTsL>YRy)Xc8AZSI9L9*iq?(1!>dd%(2&Fsn^7H(0Jsc
z<5<{PshD6pn+V|Kv`um<;cLp2i`CC{u>g@yqY|4V)l-c{cYC27o28V~;6%HO3DJZ^
zIJbssJQ&>E=cmaskTmdEAK`V-jc!&k@qQ!#rX6#_2yplnlXkKhx~c{}l^93}Q!;ZB
zLjOH~k2yteNHJ7qM~3~;eJ0fb>nrEL&J#WsI{zP?&VOFzA)gvOz(NJEI6l&&w=%@+
z_qcobZO$$KOQ;w!lQXMkaa-CV0ghT6HWxBeaJV<)kACku-~Y~CKKJ}OFMR17o105i
z6_m5O-G7TbV#+2;!P5MCWBhJ+G_FBmWw^>O{`?xVdcutxd)&Hx!qd;K@rBQwV=}AT
z40>ssnijUzjz>;+@^2@6jr(bnBn_r4|1{mM>oO*DjC@Ji=<#=J@K0!wh)9@htbjXN
z04)UHp%Ns;DNfL-(U0mWx}1xkefOfMDlr5}B{c(TB5zaTf8v0YrYA;uVd_FC-Hk)z
zn3yC3HjS8xO-CB;leQeK<uP-(iP1D>Src@CsM<&$ilz&E9I7VCJ(y22lv5rF@p-3?
zlPaCiCL=@E&lRj~Ic{Ce*%`lst0(jZ8*%Ni*Z?e!MFWtMLsVJl{6BoK&j*G5=Q8Us
zxv;!^p2NdiJRHBwa_@_%twWJ;?b0@NR9A4W##%#O<dl<|m%ekCAG~~@&wPG^ul~$M
z&YoXIf$7BIQc@oc3tZZwAoE7Df-$}@OiRaP9|rv%&wuVIzVI1GT^q)u+7~XNyOVZ4
zh@}g%C)KC9;5!#gW)f$(gwN1U?DIvfwW^Wm{Fd(JlbGOWVv{ri(w&qvNE2g|q^%Wj
zyK+c!0wg6G2FN<`WN1+ZlJrAbPkZgU5ubj39k_;M$i_$;&eL!mq$5w%#9AToRcH)^
zI*xl9C;Vt;q^(TT%<~pH!AHqD!4YkXB|0Xa5?dr(iiRK3WEJ>uVQ(v8x~qsJ7b5x#
z#9mcGB(WeEtPWUNUE_tH&p5nYa&kQ5-sB}j9KGS%PZsun;>rJm!~Rbi?8Ap9{5|e#
zxM%<t$4~ts0R>oMbd+&p_jh^W{Ig6aQ*6%!=ClTr6Ya#+HuGg&c?SDnSm2!Ft=D&X
z_w9WyJ-y18zH*kQpIIlf8Plm>4@8Mr5<lDQtcm6>?OwKtQJ<BL$)1b0EXEL-?s4}V
zey48$Qli>CiLT9{^Kro80<Q@yu8(lPOGAG;iFavKZR!!!`V46N*$(}nl?{eF^bL$A
z#5!rY4oP^Crh4?bSyksa5ACkq#U@PV6b~sEK+}{zO{9gQkG#mLq;bD=vK9FMxA*2j
zmR;w4*zY^%-uw1`-P6-OGgt{=un+(Vk`kA28$cuo({^IHDh)4^Bd1caDzTJ^<)q}Q
z#5EWva%{;iDNag%P>#h!qNSi6+ez87L`uXoxR}BK0!aXk9Rx4~%+fQ{d%xx0bH4m>
zw{u^2&vd`nJ-vOuDv+2#zkcuCx14YJEqRD!Au5<xyCQ*my#TnFPqaFckc&jf<f;;S
zNSBV6KXLANS-4hA@%kbu3JXbqg&-y8y+s5?8a@RmVFdSmyo%v5;FWJ%EZZx%vh)T@
zK@EPnDFi@)6af9k0{68?+DE}YTe|mO<9@uFMx{22rG*Q4e|`#MmCvBlT7*|B0c5jI
zlU<Tk=Ajqw(QVSHmdo*5^xQiOc=xS&jE<La--Bbg>#oD7)=CIFKp2{$8y)9e;+oeq
zIn1<n!|2!1k+Uku$Fc_v=TLQbzUX0qGkRR>9d|uN#mpL_LY9qN1t`bj*Ud4YHRa23
zp@V|Sp8E$bMgk{6Mo9AIC_Cp;`J<~yC=wIF`Syd8lexEmqE%^p?3|^X3n-lRLAtXq
z5D(LCn~I!;{5d6iek!I07ws1vH9=2-0cRBNdM~)IA-k5<E;*5M#R2uCLNYsa0QdKT
z3;FT{1x-H4HgNRLChqu<#yc-{aOo^#Hhc~3?lMM4?u7ERTk>u4vwkCjefrt^-{@eU
zjZZQN;sm%a4*tI0OhkQ--S;x#Z!=^6HGZ6d>Sz<Kl?9xe`(xCCTTxQS5QZxt&jTqP
zcYo}d%qYsZ>g<r`(mpN-;xD_o*)G2Gt#|SKv*&Tw-G^|`J>wWXTn8JV(}`f2<8I!4
z#Ln)XdtLJgs|-@&hm-i+TMKKW?7(9}k>;Pp6T2?5J<fKHI)Dn&I(A0KRIE?3pGo)6
z+{>Tup(SPM#(9feu;)t)u7p2eds}CR`|c9qTyY%Hn%{xUxooiD?C1Cu^f)K?I1)N5
z1Qf;b>{<!;$|u?N(Ragm(35VMuORXV#69i=DwkZ+dYJ=UNGAXnRgvWE_g!lOatw}a
z&uS%ITPRW>($Kb!(a|w9hkU&LOb0JMGY8W(I5+=2Xi}&TAM0^P>}TxX$BJ>!6aF?o
z_NN2juqZ14!L~pJg!<Sh<}bAH_U!+M2gd(P80#a7x*%l%t>Oq&<Qew_TikzhZmn;O
ziMw`B!S{W1+Xg>)?gFM?yo_6KAHu!&jpNo^n$Vt(c>+=1S!PUkrlRlas<Cyte|FsS
z3ih>y;Q5~Jkus^9yWS`i9%-klkUgHP^G|+8kxLq*Y#*LJcI8qDGk<(l(C)(t!*S;C
zS)48x;)MysHs3|NX?<9O`>;y+;S?;64xfnN{vw-9XbSa7wlhzEhsueZa7mTOf|Lrb
zj@iT{w_;9}4RP!=W&dq0C16&wFs)G|5V*%Cg$t7($Nt!PA8_FSOC_IF2sI+~`2Ruy
zQ1GdaYA}Lo$-~u)D|qkxRkW8@5b-(8Ed2=8$|%b9!>hR;0)Z3&qVwNwo&QFNg|0@w
zI#fs0I*i5H_wd%${|9%E{VbNE1sEG9-Ka|BZ>k_gV=hMWak7V{v?E8HB3P;VfF->1
z<^taS@dC!iYq<A=hj7R3hfu4P5Qg!3ApOED^0|s5`kb9k+0LDkFdbvLCms+57dqxb
zOi+*UovT-OobYJ%-=)O8{QjLtTPk+*a3%!g?$6U%bDC41p7Yk`C5@9pn2IKtdyRo|
zCOjO%TGm*n#afz)u&RqMcG%S87|4zZfqNFR>#5J_fzCZdJT62DQ#S3O9w{Y?_Rg+u
zB()kQb|Ra4rV^_?44oo?;f6xz^-!@$;=;rt<u$M~DNxWVK%i<Uc@0E1!uuC4VX3`{
zR%;PuuZDN#zYVq)&C$DZ0wIy;{BOwEe}6jx$^<~LjqZSq#@Jz)u!Fg!Y5dsxS2%v;
zKgE3O3PKK(7+KD`z&tt^P6!Pg%3!hUv?lH<gHlYqo4wM;cTS(h^NmZm^Ue|6d(S9F
z57z(yowk879J>a(U)*kFF|Yn2wBVxuz-sG$N4M`hcXrHbsOP$HQ36=d{yRiKb{yo0
z@{k%ztZL&9mkN%=NNj+~ksVS}Fp(vP^p|+f7RY*B+;yh=e`lOQPHr<hM>-WGc179b
zs>79f$^j=1H}??8p93c&m+V+~);3wuR0tPZBNL%eAaND}j3OJNVDId9>%Gc^d^yr%
zE6cqR#yY>3)C7vs*G@xG0EGZ-35%UMgkcMv?g~uULRmGi7`~1x^Dm-S8AY{uG_!0L
z2&4d5*9&m>82t>|`S-Q=zk!6m>v0`O0nKB_Ko=~o%smfq8+VWY70h*4&^0R{rD547
zGXRzCY;(gERmg9rY#bi{fJH*nR|KsUg1|%6wRq`;8NBw&RUEykihJ%E!ELt<qf++K
z?E+yp0xL?SUe1o!azRd7aJeHCyZhB1A;k`LjU>E+S&>67%MLMen|oeOtY9~2$RW|C
z2QcOPiPV<1kU^X^uQt)HJMuhs6YUBSK80+8jEO*8$ONLEHa;~1N{ffwEGZ#r5**jV
z9!5LoE_}J)f+~g(Wn&Usu<$Kp_hy!ds^CscZUpce4uLsqFAfb%R~30gb3&nTrZ(<%
z&Q>!-8L<+HK@kzhazFM!@Bj;h+(O&VBaGTGQ5V)k(5yhZg?BIfJ18g&AGt5)&M;@T
z)H`SNGbrJ&pS}Npo&T2X{Y3`2r&a)>^WP@I-!%^ZwH~w53PVS41;NLag;&rDe+%~<
z`C0gM2+Pq`um%hhm`z58%2?=`G>dXOVJd!++r$HaVPR~1n3T&gsq4M7i+J~)d5nyd
zaOWK(xbx0K7#^vC8R&KljJ0`pOiuTibgGdxFea7>rkpZz4$k~=;X;R>2FAp)J?c@%
zamF++*za;rzz_9|q*ZaR?&g%IWk5Qnx5?RO-61w-y32gz?;QRG*1UUYyY{r%AB%)U
z1{WS1^E#inbSl6_qn|<uk>g?D9^_1_XIfOOZ;Eb&d0<gt7q4<FX3AbaUhNc2j)gOE
zA!;!#z$_Kl9<lbnI04~8ftOSiNx@=F7hMh!nKqasSR0#8u!&F!nm9Z6CunzO(L8hq
zYR#jL=YZ(^Z>-K=Q~(0OKv0@6bnGbTipJvHdwAj8Z{qI5kK<6~IOd`mbnP;T6bv&6
z9+dJ6om%f`HD}uAu7Bx%mWjb8{u$3F`0%i_7~$DxFXD$U&fu0?o4EV<A>4dZ10~-_
z*tG~l8x!XeX<lT3K*vQwyJO%fXLn3J2e2cLb5rorE)lS~OB}%=t|d~pR5M2^7yeVP
zHhv9B;TpO0X(3^4&ZS^SkC$-^l2~A5;kD`0viZ}>qKU~_5;*w+gv{3-D2~UoIw-kc
z#STF(<rPp5OTOnzHr@5R>l$_)d<*;iR9eb;N#+)d>1)9~X^vc!LuPcstT<su(#M6V
zL9qzo%>N-RF1S~$myl5{hcKpv$cC^Sfvw3CjjTc0YvA(o8C;%!9`*7#MsK=*)g(zE
zkOE*;upzCnaXffB|3L|V{fzxL@|Z~xhQ`L>`4!AxK8NWG{|rZlK7-p1{dsiN2<AIy
z0c}7Oll@4=V^Y`o4azw(D0Q!kyEvPS@yQ{-v59|9D}`#+2Q%T_x0dkETgw<eRKgt}
z7{Ui`AHwiR1q6jC1dKIMU{vZFue`pDuxsI0bfF83f4S{(x}$=l-Kyq+T*o@@8LCq;
z{LUSN!=;;3t}myewQynIo%j_n+vHHP*<&jv3_9zCWF?a3HmCyoztHRFmqPWh`z+_0
z{_J5hY+{<@66>tv&qtY-5{1B@+|Vb#?x_T>pu2aBmTbYmsK<d3R1B0VS{f7z4_A$l
z7c`vtBXCj>vin*Vo_l^h8F6RNY{9k*!%<w&Sk65dtVKyRFxQ&K#kudG><?k|<_|-A
z!78cf&g%RJB>e4Ko&WwH`R~gDz}hYWffAkn4bu4!_yMX8H{g}-#KO$`xU~3f%(Y*{
z9f$rhj@CYmh3<K*n5!U707uE_S3@KA4j@M1&}3$(yN<1UGtE8nQNB&uVgkjaK`1QE
zhxoJSX7J*RmvQuH4Y%JhjAKWts5N|OrSSIK3wYs&a|k>IYaM&o9xi~}_2)~Ayi12;
z08<<#bFY_8el^K)1j<Gs${E!c%Lmu@-wgv`i>wI9T?}2)8at#s^jO_eo(M?ncr^4H
zK(F%JadU9;f(7fC02K`joRmNmnf96Zj*8g;ZpWY54YQMCNI6L`onknJ0}}&162Lq)
zkuySTfv3?UlB8A7B8~Qq;(x5kCoXKkY;y00q&V}HkNMUQacS;*@Kpt)H$8+(W6XIB
zqVvCTI{#}maZr)*ND6?R2LnuZ-Sx!6x%V!<Mx;N^Y$PIM4<M+NF?!1#Si0K4((F0B
zeEv6abok@Acl@uy;218p-bI8K6vaAq!v=~ppmcmVD0U8i>zKb3&1!O<n3HR77$5_s
z2^CMlGVtEH6`VcWLZzxPG!%DSbF(498rn;m{mer@{eM+hKTtsw-fP*DlJCed*h#ze
zIQBTVi!HL?@{YgY8`x6>BnLfI{8Ux$XOJDA)^)C-qKKVVhXjG$G{fAhF$-m4>b1n{
zna<>OjB7STjGnOpGUK4!6oA3jO<i>2dC9RaF6@bl#aJep>=~tSA^X^=v7D8}s-;BA
zH{slGAWbGL76cZS4Gc%HHW}|DAzeE0#+k*lH6W|uF)-J94zo)yz}IDr-~2Juhi@((
z{(_x7Y#6M(fUIf1RvHTy5|#{00kETZf~KZUMRy(lujUik74I*?Uq562K|BAg8~b1D
z@0C&*Iy{b2WeAIx&*Rd<%a~jK72JO43mC0`7Htz@$y@|etmQX0ioN!g2W7py%S~cw
z(^J%yfMs9oY(b>+4mSBAlZ;k<Ux7#=3K=sO+sWVgaiL)y`Cb<E<CxTBfin4Cp55S=
z^j+y5tmGuyC1)!ur^B_$?G*KD%#yr;qQW3ghKp~L${o{?pTfZi*N&D7$$Z5yp41LF
zXZ;iPdgnX-ghYj$1X^oWz(wOl+Y{#uCs;9eW~74LklhfbZ2#`W6gUA#g`de@6)KuI
z^=SWBKXPXskn#{<bJHOJ%m&N`)<m!f<3DHD+-8{++4Zp&Fbt1<gyt$PFaHSb@FGe<
z6XUmj4CUJ4BIAD->HG&J{Pj2XAC&O71!I3wOi+Nu{M6JV(Gy^`*O`IdKH~nDq(<G7
zBOH`!WdzkburfD_<+%%ZZRX#gGXEcNNAoY?aOD9k@@1?<R}w}&gN*@`0cjruoo$FY
z+bX9+S(Ul)xru!!So63M#qodkz4!#NHcAYHRDm3p`N+ElLddOM*>wp*Z)fZtH0;R!
zC~g#$(+xY3xUQ*>8xf3NuX`Z2LiSMDbpt&Kdnv(=i^FT~$q48b$#X&yOeZdRa1Un$
zxWe>h4Fi3~YF{OnW@tH|*c8ooZ7z9CiIrRoIs)Y`gP9qT69$#r4)o?e<d4rLX@L3a
zB7Mv@H+)K-ld%@ob~7?xp4Mox!Zf=N8-Yz1h!{RfAQ;SdUc-FrC4dcTjax8w^GD(N
zm8@VD?8?KYBpiTUgX#2Z<g)1eZ@kWbP_BeK)~y{HLb*}L@|8nanm>=1FMbt=YWL!%
z=9h6e_yFdkE9lq-s6>;;)<BV$oOUWnV9Sd2B%Ck%i##IMJ?@-QJCTid=A@iZm)ui6
zcM^7kWs0KmY>M4uZsVTAyiOrRz2kpouu>V3&ha+RNofhWjYvTe!E)UFuZjXliWkl#
zee5{u^^VKkKXPU`luiLGiZRDT>4B^=9em;W^vnyWN5Tl#i!USG@oLvV<eGdcSn$H}
z7I11Ea#IBJd*@Zo{^VZr{6)+%DJV&@Of81veZJ)oHu-ng9S}B=|G|P`V66d61hNF5
z0}vau%vmh7UPsr=!}oj)k3NXu@q3-;sP}NN&py-nJDd=Tsj-&<U>cJo1;7sD#EJW9
zY6<}82SoZWGk1BFQO1sr{RchxcfZcR?`zh>YhnhpuQ7CV45h{p7O!5w)%F{hyZBEq
zR{Io=HXp^1e;4MX3kZ1`3LY#XfDMQgh~kMr+-<2u^PLK`8GuO&g~W|6@ry^2!JZlI
zIBc(M#~jb-^Df>sr9s;Dk@K9$k@Hc{VaATnK_V3+=YUV6cC$QrLiUz+NBY!bDx@gi
zxu-U|J!U=`5ip6VEfD?kWqffbPpj1fMc8%zdtOQ8Yx#7A!p`GI;jwa|7FomCs}RED
zL>#By1zDtXCQWd}c${Sf<iZ7;Mf;-1U@4vqm_$Wk6Ea`I=7-6yXRZcF-WeRhm=4%P
z@DU)OI+#N&ci+WA=XHd39-2HfM~-9o@Nop?dj1Ka-LCT=^x)t8*nd#MUtix{tJfB+
zNQ0F60RUV&F-Dk@0sy;12|!lM#B9&o2d7`WrCJ%K>K$m!k79Z5JT5Q)8Lq6nfSVd$
z#L=P8qpN|1@O>C`K;(f9!;%G*2O=-|7Ecd#o5<60Sy^tQn~(J4;=!?cB_u9|DkI^M
zvy(3Pv2%~T9QW84qK7a?J)Li6Kbz|7DR;{&biY&xIm!<WDvbNt5@3smF%_l(S$~_$
z1F4wA=O*OvI;?+kBbe8c2^ODpvh(Mj@jk8AG>}U^<eu;2R8OCmP_)KM!7Xmm*UPfI
z@3%$cBQCB;VmV~a;)i3MoE8L>b^dXoV5|X~5FYy|Qw;$Hh|Cfey3<(fyoSiOp(wym
z;|`3B-GfqfI3tLz^7j{DH!dxi*~$uFmtbmYngKv5eumkA)@%Po=fCYb|4m)9b?-;z
zT@?Y9;RZ^LI$8^JSe!kNcjo^97ni<^TMj*j!;POn$8@m}U4TId1s|3}z(ydYq2R~s
zfr4hlm8a$1BeN}x*t3HvWx^A!+C`^!!NiVp-zxEbZkEID3W6!`hBKEt*9?z~k-=-e
zYCYyc$U9(4U2rXDJ#fMGFD(FU&#9h<&A4PqcM9NI0+Ac~vnFAnP#@7M0go%1b2cCA
zWUv>M7;d0XZ<KLH4d8;w5Tj_Ol=%q|JL?1sYYZ4BA@)Vd`@|MvlJm5`2-bvP6G9t8
zfGRv{f{4*IGni?=f#vRdFz7&g0fvX~L1Xw1RBFS;_r1IC-@?vcbpHJk{#M_fiB%j8
z?mYtl<Kr_d1;8$WG2BvWjmqpm>ih>i__u%Tf9+LAPO@VFS}W8?4xwBh!t&fzEX}`<
zH)nny7v@jn=HV}6toC6n+j%TSmlGnO1{;gWL{K__(m@iSv-ZoDGw3Z+VsCcrW&}W+
z*|=uXKcYerksJNEYCtLk)-X8%G?a4$va??02OFrsTh9{y3T8p%{-XH5DGf&fPzWY0
zUUJK;LwnXt(cvsNfL3MvIs10*Q3!Cp3L$3-!Mq0dA$z8_$E2TK8U~bOqs%=q&RKCq
zy{-dEG_dph*s&Q-jgoB2<WHr0j(<YT0dRtm*~ElCYY=c50gXa=8l7kk^X(sErTb$<
zXaN8!)x)R{-+@}=7(73~S~-LL`}!Xgo&OEq_pft%hP4E4$pm26VA2AB*8VHjnq?y0
zV7B6$xj&Wy?ob<^@1Z$1j#_gBOS6};y!akox%f3SE64GHkuPJc@&PP{m(j9w$s|F;
znhvaupp*yYm9o7zrNaBdhL5vw8P`ib^@LA70P?UK#|++)mQl~-JKeeGDR+P(Dg@hP
zCc8`poj9mxN3VLKfeRja$#YZWth{3~T7hxt_S}?5+!luLnVgRcqCR%rm)WrdX6vZ@
zxafSy#r1)k!bc8~lAQU1yJtw*_>`?H@(aL@?2>y6n}UEZmUFshMyYf!?($96<;O}7
zTU11_1=|S5b^vSPQwbH-L`hY_wvD;YJ6Pzvigt7vga|><z;NR@>do6wt{y5BDh00v
z!Co2tvm&jm?JU|bdIbO`Cnu~F0K4R*n4dSTW)rgjHL{*gbpAW4^QR3?7&h{lUAdMQ
z_!vHN6Kc&d%wIi^rKPiY;rwr4wEiL7GW;bp{5!D_&7#fo+1tQa3me(E5Kw-i>(58o
zoDjv*j@7lXO)`CusR*6dotz!AYg$uC$zv)Ud~S8X?*5x{5?>aQlT85VnxraMX`prd
z4;9RDT)mwW9K>-kQrv&{IPZW99V;c%4}$A1m^<~QhjJlHhl(M&xy^6y#-PV*Fq74B
zHr^+=BmQDK1ZOIQUTI?<&SMiNKFcOK=xt%YpQi}gT-$FA2ntm+QB^}AiqMYU$A!-K
zvDi6>(6->|5}M6BFf@D{%C#{lhm@3Elfs6Qwm;ZMbp8X4{aqh!B2COZtGi3BReL@u
z0CrMJep1cMoLXu&|Mr_i`nK2&P_Vye0)SukF?RFqSXn%brMdICvivfxE=^;+{t4VV
z{1}FVdvP^-A6;Gmkq2S}HWtQ4U>!iKpm648p*-xe_iaL6Q@Ke_ufyLOF|^#9DbJ3n
zj^iJns|?iYg?UC!q-;D-g#e^9EJqbqC(4V>fbva(DmeS)vAoEFYlr|_Fxc<4@ZnX@
zExktMbhd>FNzdW#8td3hQ=c;Si}E}oN5x>XU%KkCWCl!`8)R-S<ZcpT*`7(<`D_+|
zl#lgokq2PAFs2P<ff6-Q@kZg1hfa7AGb`W0V&^SHya13zrFtty>mNpK=q3c^s-tYk
zCnVDG?|m0QA|K4*n@>+azH}0-PQ~LwDFCqJQb4GwDOiA~iPR%;gF^d)@VD1>{@1>r
z0l5;%mw%;EL#2K<T8l@pF#A3(E<KN#l^@_({nI!${3Tfb7#5@R=-LG+<$<ALO&e?@
zDCI+G-_fqyJdV~Cnx|s`m-S9X`I<|OPwirJ>sc!J3gogqT9xk0t~}CF6|8@VaKZM_
zJ#ff%{BuU@<P;2?1RIgV%~L&|_qp_u^6(wbMRuG?8{zOb*ojWgxe94wpJmSd_}Mxx
zj+{(e)^;3ppGR6eWW+ztWr=Cxp=ApTo7nQE#X`?wBPk9nM^H=%xC~zn!B-V9cd*!g
z84K-KvC_Q+z`*w_I5hHMG@2hksd6ZLuaHA7q;<a^Hu_oLtvdg`NcbDn7lv7p2O>KS
z0H;r!R+xem0K2P7qgVSQ(TL7}=Lmm&7EDz1b|(TVLk(0KAH>SSJmzQ5;oXIA;NtT4
zar5vOaisBiu)Z1d<}BJ+0+A0e5E%oqU1(i`)``t-W@=*#_nGef$w__72yWc#a+ib<
zFs<7ElM}J)$^=uB8@M}i6qD|d9mFagDfc7+vP$fO0a(khHs9yF9R1#ooE_3#ESKwH
z&}S2jv`Dc@C-3?Y+gvrlMJr_PVg9FoW4V_cSR@f<62Q#TfeWvQo4Jtg_hUXn6z}$}
zEw~2e;XUa(AOhPEh!_D?QB~szbQKY|u-JJUGwqkK99@Ft5P?@kbL37mhHgcrei+&d
z3W|oT=%PVC>wBH>w^w!k8+n}iRY)2jcBK@MSwA030ik4Qb<oxVoEhrWnnS1#-H+w@
zBUqe0i+3*nTb!Reja!DlfSZOskB-u~8lFYSEhzH9mJ!(%7^C6oQmh(ah9wo-4<~MW
zIjcP$*~jO<&9?OHy7aN*Y*%owA*8N81YRA=;|TKOgS@vO$jxwb0f4JQ0F;-?>EacJ
zg<X~Q$2|^xY1f+b88~|!)}1h<>4BWH_Bjb`;@nvv3G?Aqj!&!1g1FaukbB|<Q};n~
z)BxNwo=6lAiBV6s*S8kv6)7^us{nKXYY|Wh6&i!@)uCaqVlLux>lG}u-+|#}D6P;K
zx*d(?ZK&3cK>I;qub+?j<tt~Of5|9oyMV&;!2XZ`?xP7ntORJa+OO1faGA(EjCGX&
z`(Nk3<AlF$9{aER33WHbq);C|jA~;Pt%W(v&%TY<uT0|H+`q>ihkhD|hdzal4KW{H
zfI$a}JXmYcwIP)8lZim!WDVpae0B~k*Xt(VW9OssV%qI`qf<AKCU*VHBz391F0L{D
zr(D{`L{K^<EjmXsuRi?U(4Sn|xY~XfuDc-R4tsgX5j)*@{C75+a-@v<^<GtWI(sfi
z3E5>XW{!fX+>i6!zctC<+3b*KHyJ34;EiC}KtZFXMo{sFph;mRd><Fv&tkdr4!U*)
z1VXKH42_YGpjtl)KdAH=!BAFoZT)9`59s^{Cj9MAo&Wl`XIA7X!{KEzt$m{a*iS0}
z22QH;=TBWee)liDqR9KK<*o&wMd!a;bpBhgDxr-OJgRW8C{3u1jG)qJVsY*Y7UzD9
zmoI)DmDxYSEyIsttp1Z|Bg8^<DK--#oe{;1388fWUk3o`Y)_q~-X+~UCHBG=v6~y)
z#E_>zSWEr%UBi3p?C0SG)Tf(n1qGMnw@O}+AN-(<^`8y{*r3oUXV=BL2V@?P%P9de
z%Q$oP<d)a))kh)yFBz)C&G&O{m0h3zY^0xA_9B}!5ZLMd^Yux#*U#?9CgXnFqa8@e
zmKHz+Ya(d&QC34J>jpFwI(7zEmd{|Z{Te#aWf1uY{4tD=eh~Gcn-Em$J%@f;&?v`v
zX)8bL+ja1Z&VNutIA*e1mvj`hUU~Yt|K#$1Apq_x4nRr-RD|b=)MuHQg?THBf%MB;
zc?!+L<ES@Bu{?Vj3v+Mc^-KR3&d+}nw>H0o@!ChRf)I;l1_oUy(qL;~xeJp{1XKx1
zspL>|eCAolPJWq9j7mCEDjEZF?C&2prLpXg6Ulz+Hb-guzsd#BnF1uf_c;$hIcfyT
zJO(&RB~qCUuVqK+0OV|V%g%&@SGoG-d<4heKRv>^IIhpL0g5)s+3h)>Oi*UT!##?F
zbQ)kCKY`@XPvdlp8B0k-Z*1QTw$Q9lqB<)62o#kNMzff2y?}+4m(hwYgAu{^YiJJN
zkNVK9sMN=xJ?-!wa=T~wDml<#MIHeAJg|QVfcvTdNO=Ip;9ErY7m0{=ht7X568>(y
z&cC0r|Hf7&RA6IkUt?(e2x=pTv2^t!7Uti@t24ig+QJ{>=<t^?QhNxIwO9%-AyO?6
zJTNmt8zNF2cq)L_C8&fS5Z{GKjv$@0&@)M$DsTc)8)1ej1QMq!gv@rB(34x2kKE&L
zB!^s|P6-mL02LrpC~y{GoDv+VXqpdKs+eciQ-QRXvI&yuM8V{zSV$E2_qJC`m6H*f
zom4{WMDIG?e?m4)_xs2qc8hWerg#ltZ3rTT0CiOLD9XA9wo6#(zKJU<FJh&80hT+^
zRL0QIooF;~MWr#GxbwNjLRiDBhqiIWx3_fugA)GG*Vunhl~O-JaQUc**+41vEnxrb
z|M!^+Am#ydI{q1@y30gV<DzYtK#(1H+SeF9ax-d&j$(QC5*8PJj2~b8eN;+M;il#n
zaisb&w9&>~bO8}{pvea;5SlKcs1466!}H2<fKWz?Gayiw0^hq$&wTDUA9Hh3ED$Gg
zyX45<9NWF5lvtHxpZN!;9Aypo<&*>%6W%fnfMa`1g^@do#5Qsd>BNY~+8$$`{E*Lm
zfSk!eYNSI7#J0HcccXR_B1O8_Pj?sjR3NqFHHE7fS0NUL4PXHuRaEpis=5gv!g6>P
z=N6~2*!eLcy8@*G)ay5+-nbRD#u0dasbJff2QA6hg`ijdr*vf6%U%~}_S61<zsUd@
zU^;j1@e6m~edJXl|6|Ni4-Y_e{(DX5zv<_^!D&g_dHcS`@R6HPKQxZzt20<ycn`17
zd>z%&H*nj~qZqG#1Z`?#F}xhF29yUvgeY8sF>PqC49}~8NP}2qJN}qVm-q%SIb&t(
zOb$3v3UX}VU#J&){O}#~pu#!W^Bh$G1XV)Vi6wS%ItJ%yI+TYSxt6>s36D76;-{;C
zG|Z@Qz!yk_Jq~)w{lwFLlUXSjNeqsIU`py^8y6a6de#ay)9w>7EDXpnG)k!HF;u(}
z02V9ZS-iLWJuG$JK@=^6Nug31!)WtEs5OouDD~|13xP^o*?Ef2fA8u1*M2_CWVI@3
zYg@05{&4m}^2w120Cpu0;0Zl7H5oDg;-3)dk1>a9@BnC!5&rrZ`|qk?pY0s`4|dH`
z=@xU6GjQY>Y9nJ<o}0n^{9Blw`EAsKn{jODi#S~U2)Zi7Vsr@+cR<RIGvC7%m?-fP
z@G8*c#l?k<V~DffUBzR6N?h(-D_lY>ql?3a(k?k!Bcwl@&E2_>YL`wEV(I|HFA>U>
zcty^fbop)}0pu$Nrx|yxhjY#y_ed0bcK&Ym7CT)(EL;*Hr%}v#Vo**vOy?jRWw(d5
z$X6S2K7+MUvVQPTQBBl>QD}JRhBLU-n!-ZsRdmce0H9hqijmR#P-z@RP;NME{p5Nn
za^4AB%`_(o_SpuV|DXqd|HT)xQUR=KJvE8P&BG_2@-T%+3IOb8KLGUy%=W(*KLEi-
zK$Mfdyud?q{1|G(V_2NMh^6^+c=OV~z=hJE;HKuo7_EH-T`(5SWklSLEr!7eLxae4
z;OR0vzYIlQ-gswmvq|^QobU!zUW8<x0<jShXXL*4?_9khxz2l8fe;rRr7FV<0Nvtv
z1Yj*lsVt7zRS8&!e~=#TZd5X}yN_pw;O83q^h`q&PknYg{K;7-<Pt=a?EX0mVdCVr
zZgQZt5fn5^Xriiz;Zqr1Gl#1yKfrwJMYOwD01yIy2qVKEM1A-cRO^R(x;UG}?FyMs
zusJ9qWlhJBwv)jA+W+sn0wCo9Ft?t!wtRueJDTJIkm&q(R_8xx=fCBvk~Qwfb?5T}
zA0tO@!O+M}Sel!`(%jp4<MQvJGXD)6Y5o+3>mLQf$6|CDp<Rv-7`BKa17q8Xk3cCd
z1i-LL<zr@Y-;&7=pULr%PY(1f`OjwDfq0{pn%)yw#Up#2NCPWFj8cuUJV&ry3$_fU
zP)rzPE_C>rOCj=6e17oTLc}i;=^Yn5ez?cM&pICd&b@G|$2Zw(AT18qAs{j=6#EFM
zhKkpOPh~`A0ZX0NFyDR+t?)dUEtD=}sCf?>LpP&bJG_d_2QU;-a`<15sEU0__!FIf
zf76%jlSqLw+<AZ5bY9qR`+uyxAK%-Un0Qiu_q%_$b@=cnKBQFe5o?VhC;Ro9V}GJm
zS?8M@`>%0(y588IuJgODcL=U^KeUMtP#<i6y3TX%>zZAA>`xoGpX=@XSHI5J{}NSN
zp;D`();tEKYiPGGV|M9Bm|J=g0B|Vy0P5ZtA`TJScB0-#932~VVXT2taS9xfPDa{E
zC-3;_yWadrV}DaFL8|ZXahpqp28swuDX0?R_J;`fepunn7l2Fe7)0$BNGn)tz&3)7
zI*HGLDUj^a&K~R(09kj>Ie)?N`^%;VnF_#-HO_-~nJo;5VB3X7lo%9P#|4?ehyb?m
zQ9)ggqZu4SS@~#(Z{fnycQCW~UCei0h2b`;wVQBg^g)at`!Je^ZbwjVWXXFO$&n~l
zYJk=$Sg-%N+w^CBQ)B;4er`7TzFq6t^uzY2O+M!0yZIXTPaC;C^=I!(o4x(okC_?9
z^J<Ds_h0>o=e|5SF~NFznygF!cJmBiaxxt?PBQb)5wU`70tD#KOCTLvYfoeN@J(n8
zAHmAp3>N3k;r*-s4j1RYg`<s6V!Zx2)ci3lMl<M|1t_JV;KP~~bhrbh0(f2po)<u|
zmmH>)M+hfuc}^4oahI-gbwCo><0b}K%g_oS(l7w3P2k@974E!4;Sa7@blV}UX+xow
znHA-GcobRrgk<;b76jz%>unEtFW>X$A&8vcB1zv%JNoSQPOL8@o=|ucprV_oQWKgz
zESvXne&KsqSa}Uyvjj~V_4>`I4n2fg{RsS04Qre9$cSICwf4VY3sO9poG$zBDSG?w
zRg2dEN>!e=wtJq)JH~8z-LD4G`R{R^{|y+QI>tKM^Uyea4AtRrEX~hgarRxDo&N^j
zUzoz-#-}h={VW>Z9a!Nxba)|~^jq6Tx7$T%G<;owrz_CP&!vKFV2MDMvLb+p3(>kv
zDw!@M(m_Z5X90}dqVS1N0T<r0xO#~Zg&jmu7ZiH2%AgRRn^^Q_#z5)e@8klc4toV_
zUYq@Fww7=_3@n?3&}YD_wxx*?5nFihP}NP;{6o;BvC_GSnfAA_(0UWyXaUR?rP2t-
z58a1)^JbK)%^r8Q#54(R%Hn2;s(WDUKQQ4>bpHLVO2CQ&6`7Uu;X>u<{W$&y_TdTu
zh}Qs5KmC>V=;$XO(z^T*+sM#*X&q7kNCB|HF9nw@sI*48+CX*a7<^Sn6s}-?c^a3O
zzlX@oVc5G34gVGx3q*DWaY$7nvoj%#?SeVV4{}G5!0td&rDJk(B6&F*zQ^)IjruVU
zH-C)KI1K#hHyJ<vQ3svYBBF35KCG1oYeKMzR}<ET@j(rfOdD*W%cs<%Ad~2s%zBp!
zF}mqqKZLbm=G>Q-8I%+aaZx}ht2&zAQH=OU;K5?P^8(Jz{d>$Td=D#~_n=h?&5`36
zKlTxf9{VtAjd6H>8AWG4V8iMjDFCDZ=;N~<kN@k+*v`NC&W|4czxU(#f1geO@-=`l
z_G?N-KeMhHU=I-f`qB9hdhqXco&WagrKzYI@HB=F--P<eQ7q42!Q$-Om{~f5E6dMf
zr1BArH9n8w;1+~vVa3kDQWr}3U<-uSAPn0e<t4^K0kjIB;3Z@KTvtyjXZ&-PLZo0V
zq103uzEz<VC_Md#25){ZL>RUZMoTbeB|gfnhNATFretStozCAD_WCw4-r-Dx4@Uuz
z6a*agB;rxVag1$;;{w7*9aYstpeq16SPtLD#f2BJ*f|GlJMeTBjiI|xZ`_J%V=N)_
zQBUHYT1Ttj4^ee{4t~-3?`Fc^CMA-@ifsrc`r3XS|6`xK<PmUE-+lM&%UT7;tqpSr
z7SZ|dfX=_4V4nf6*_L-tw4MW1UKCiy%HkXr=ikN3@>viCXqNBAk@{y*tKNl>4OZ+`
zMBGife=j%OBL%HX@Vp9qzm!B1`?*7%O2+{T3L44_5LC*j9}Z9*CHMhj?wrBG<rZ4Y
z3s_#90o%CXAXR}<fHe_J)PgZBM5Yb4VdAnE2M4DG2WOi8oCCldfe{ttdX$aeRbm!w
z0HaW%8Y<o>%DN6?R<P803$yJXp%uNGSoQ{})^A6xelsfdQ3OG$$1)h%@7>z>t?2wk
z=YO5Y%xsk|D`VO(QB8kjYU*KwePsT#?<W8;PHNy(1pK#OC-P1*hgN(61l#Q+pcJ9r
z96_Ub2rJ8XU}5$>EG)i^*_CP3%eUcZ{c{*9-w#6`R_rV~SW5Kw@hIO!2FA1zh90yE
z;v&EcpgbQsnGleo_|MvdF^uKe2#Z%Nx~&j4YQscrv|6*UrUOO<8+PG&5scBW*23B_
z4*^0R>JyLi(~>6M<ugpI8ep6F6L1nO6nhxNWWNYtz^59jY82(54owkOqWAIs@)YLV
zuOqYzPy|#fH>1|L71jDN1m)_QWInOu6<}vAWvx~v#kT$1r>7o?PMmnko7zX_KL=$3
zpa9t8$A9rIt^606ZE5xL@J5XN2krbt=f8bp|1Hovuj-=GgDkH#Tg%H>m_3W7rFUR$
z3uSK<W3^A>P~{WQ!6;Vj654zPmP07=;;tV_ieF;cOG<&1hSolm^5N+cv<|?j&wypv
z#Qx7j%Lv0oFq>HZ#|8wBf1UwryD+vJv-GWrc>oDPFHYQxvf!OGZkLMj=wPx?(D12>
ziW){$#UA`C;aSYKU&KP^WptuNC<LekM^PWXHICUWH+tN=-H#+~;lxUG{@bVXA9UZp
zTXg<dd;3os#Jp^5=bmpr_vQ0R?l(&TfW1csoSb~z+;jZD`4`%&{I$q*A|mpn0FVM;
z`w9T8kt`P%1MSul7U$l_^5Q$N(GoOOF;smBM{1uzwR}5_im+@hqifr-EHGucBT)vZ
zq!=I_kM&6b(6MCz#fCyr)Ik(3!y-<|%XjrQ&ko2Wdhy|(j{9vw{v*fQmnlu_GfCKy
zMnF|my%AKsQTR|;4&TM)l^<e$Wg4C63KV%L2cxJC-G+MOR#d7Zg-Jd;hyLI@XDI-r
z0NA<$fSDuTZ+Ky}_<K*E`Ql$s&yf9kM(*PkKu!iEO<!g3U&~hjTe$b%lfgdy>`!-^
z@V8U@Q`+>w-|H-x76Ro;9p%bB7(RRlS__x4H1{s9E<KMc%g<t{bSuUhpU0uf{ovpT
zT6PI-vk1dstjJdiu!&lL6SV*-kWz``Z-j2R0&6;1bZ{K56DGTRfXK!{I<6l8aV9gQ
zBy1?v@>`0F1kD~is-vXpsCZ3iB6Oq6xUldIEVN!lH@phV4BxL~^w399Z{CJV<q$|K
zXRXRf!4fn1w}xrH*}Xq)BgbdA68`$x`wvL?yFq*ZEhGH(Ope(`Af>+w92BRMeT|a}
zIA!m?`<I^5x^%+Yt_4W%Z<*g#cTf9M=GWIDG(h*1%h=-oW-X(=IESVA_p#i156oSZ
zR1-tx4`QVL5Guh<VCA7}+vxHN45Ij1tJDL4VwXJ=!q^V1?K*KmapA$%<UadkvQ#~l
zE-Yffe=OI_H~<PBd<43IiW-8ieAuXs<?tL9Ixk~6Jd3Vb0K=jb97eTz47K_Zl&T}p
zo|ip+S0Uhz0Jg8|-)X|%!I1e4O8D#RyK4)AeXe)-GsAd(RYlSA)YE6a_{hnVtWKTU
zf6~7LGXVgA6DOdireFd7Dv^3PwF(soc7`liBn;M?hfp6rgl_8|tSrr7Y4I#BFF%9J
z%g>_Zjbga^L5x%$K*K)*RzAACf^N8su2}}73zIPTlQf}NdglZOGZ>Uc^1>$Fe=^q3
zk^nV43J|C&0$oR-s_>v-%mS9WFXMdcMXYqrBjjZOj8bVFBh3d;tKWojbvQ}aL+%{N
zMOmOgfIUM0Q{)j*-2I<EeOhIn)iMFt%g>Q<`|W?T6a=F`(AvAl+K^L8py>QX=f4&E
z{{Fg9F6_h8AfQfr5z7k~u(b3ZqRtXD1t|H4(5N2Aq4NDG`$qr@5ZMUrXbBxVkB~bt
zW1lT-deD;s5fYYul-c_dG<>R{tcFnXY6w&XN?BMtkLB<@=G$*zvGo?((N!4Rfu;b}
z$}!Z3Zb7AX1VO1DuOytwhU<^8{`+=Nso6o)`47177oGnGuNhmV%VbUWHC&>PoPPV^
zPV#=<m*l^LQ~&^&(7>d*`|e-*InS$pEix@bAiaJb_*Uxt2R-;j=f8XR{r!wj>00um
zLNQ<>gZ9cCT1ywPv~&)}wBx`W)j+LuE1H!LpzePFz8Z#7WmwjT*ubEZa0hbNJ_Ujz
z4aEdS9vC5*SI~|wVX1Q#i=8*o4lki=TXDQ@&_Jzv4CTr(RBDG&D%F8(8cNQ1pRN(O
zgDoVQ-H5UOp!@!VqVwO2`~GX+53@DC*VHDO`<tiFJo<l5Ot7Auq<u^NJ75I>2slZ{
zk6-nP{2yxN-D5dqf>PUW^dkj;6abrvqGrbkCm*ewC_-!T3YM2HpuKVtVYCR#T`2P4
z>m~x-gs%=E2o53e8qg@ktbekwwhQJqj9Eb^TtH|R(1{ih+U3~37Yd|(l*%Kh)sCW4
zA491!46VJwGjOeVi^*`10ze9Yy<7lTrAlON_qEE^)<d8CnJ<T@P7&|-?jJY+9DuyJ
znpSVTG1<BM?qB*}l=8o3qsXrPeh``8ZY2EeMw#E19YWM=HQXziOG1c7j-oMg6ecq0
zw&&4l&!g3vMYp|(m2eiuUIJP+_vuHJEcsJTfC525sWN=Ojz(!5L1_p<Wf-M$1D;<=
zx_nwgr_Vic#2Y25ip+2Oh^iv<8%QCM8+fr+C1q^wUH4lPY1f`m6{*4^8W$o6h)NL@
z1cbmYf)t6;M35pPEH$7sDM<hepvby_Gyzu;M5^>6BucS`qCp5X6eaW`kdQX>4!hs?
z{sG_5-~2Lj%{A9G&ok#dXYO;~=ge>vxKl`cJ0;sEHLjh5{zIDZPR68kvekv9P}`6f
ziufnyN6G+0QO5h@Gou@_2+1u;?=&7*Cg1`yZi^vY{Qms;x8weiJ(KgmCy6JmFHSL7
z0Y=lfjHCZR-k3dv)0-vF9{9z@aC1JR@9g$OFM<*a0#CIBn^w0kf#Mkk%g0YKbN(SR
zBfMe_=H3z=ufg(mLI2GQs)NlblY+`ornl1X$tC7!2jOxps!JW;-xUYdoioRF<wFIc
zjA2ARIw<_rbgBw>Ya&fW&OjgLI0OpDvUWE&-E~_*yerDd&hD>zv%Y9Q7^YIM;pdZ`
z8o}p4jR|(IZC_cg`m#l7Ioy>Rmn<uuX50dribFkaIxQfNVjf%w8E$PT%PkJ+ZYxLg
zhVJS{q4RiqmEWuNE6;|?(vVPkj*vdoqySN4JStj(hgutkqR~NfjJ$caAA!j`Me{|n
z%9%r3^g_cCvms1Cd!p`UbLdJ*6_aO<)~kEnrv<kHwX<(FHutfMyTOc9Fm+WgOimsA
zTuPVMZ=<<EMF60se+$h|(4K-kZKy`O>?9E4ohq7QUz;b;!dQ-~WO)Pc(9e(Ay$RPj
zp8*PwNer9pjpxsP82QQ8=1i#vZn3bvw;FO@O!4ulb&srVLCRI%A2*4tT^ILm6Dg?F
zVGwZ^=6Op7>>(C5WC@eEILBW2EqQR+mp$+0$DiMO*P|o#VRb2_!5GP>Z_zNwcAj~`
z#wk@N*U+AqX#wVWcv`T<zE=N)rc6p!4}MU%z~!qaB~J`vlY&EbGyOl^;3&k=hb?Hi
z*#v{|g@Je!_^ZR-r>;DyHGyBz4_lln&`NfZHK|^?wI8@BZQ^nUYq@=V>nR79M8<gI
zTCdP)(qFIFYa9zOtm--56FV0#><R1nOStpg^xdR|NCAGzW;e1#R*t)2mSQ5j+O=<&
zKtkd+4}&62V`2GrqNne6qHtUYO@Jc$WV7-LOBnm`VeE}7oNt&KF|i|i+`3W^af3Rj
zP|I!ffd^|Ac~`<W4H>kW^?CDT3)ge*i|K2PM&IjUf4h>n)_A?_uk%u1gqP!u=gF^-
z$oCSq4&!6Kah~sJ#ojn1uN><=E^7!1;_NNHOk-`0IQCG?(l&E4UJ?8#0(3c&+L)CC
zKy<-5+Q+hke31sj61)>7hYX-)8^)+OoFKgz2r^Z9CkC6Me!vD6eo8iI38!y73p&qm
zU0m1c@OQHde6H6zv1FkTx2dUKXpnjO`mYy`OnRmz5d5OIzInKMKfHtxxZYTPfBfka
zzl~o`22ERssqVtp%?At?2Ko~;GT12M7Uj;@U{sZu3Dq_0rNPUA2kg^a4r{Dj({1d=
zJKAF@$JbZi(L5<x;o!-&PXBA#Zz@z@RT7z)y(gSaPf)pBW;>H|pF&9w`%?lxX;KAD
zmh%-1T&j%y(evdCMl7a<?f3a=-Rma=u?IXq)i4lg*cn{jtI%po$MZ(9uwp^_T{Ka_
z3mM%jY)8kmUZAJB!P9JV@mdT62k!OK+J4coP$tgb`7%u_G}yR9GY*|rTa^GOHRY*a
zh&F&ob~WiXxONW>(#{rdmAGUY0p^wWO;D1aX~)3fZTIm#&skX8eAYW@Y3cHkV)^9n
zpUxo&vA=|%F}B9R6^{7vnjB?2k&qw?dw_Kf9-m}BRJ<IA&47n^flj>mYymgKy2hO6
zHa>Z2&;$!n?`VTkj#YXLVY$HipP46?@28MyK(>l%p=4K<4B-43b*>F$qhs&uvt7;P
z5l35e6K^QZP}Dui!O^i+aSwR&-D$kW*w~ig*HG{n6U$qP?ogTuXva2&z+`!g<7eGU
zt6)*g^%(=`?L^~H6Yud)hXyYiCXdFfS`PV`lIi$8{nR*dy#mdf?n+L!6g+sQLjkTu
zkjk5U-;*q@+IGo<_YLnC$jP8P#`)a#$~!8#OMq%Wt?Q#}s<m{sVJowwkTb1^fwLIH
zKinZj{-r&tMw1R<t8GN?Da<9jMv4=R?9FC}h-B=A=8O;AhKsY2=Y6dnv6hSAGrm>_
zQ8^wb21m@}X`9dfm~XU2Z>-T$w!p*pU}NYesEU#ts<NPfYX-h`8n;5-39u!0RhL=f
z2L*7H`{b`o419fG;hB&AH}+~XviN{Jl%TOG{G9>+E{UaU<f*iJ@slK<#l$%AyS@0@
z!_CO&8>(Me*rc_{nQ+kXZ6-C<0Ka6Fk6yORM*}`Hi@CbRTY-5a_^I!f#r7oyB-0_z
z@3DaHefZB~n=h<A-1h&<OKZ38mre=$MN9SqOHX`Dhk+&-Kw`y{<IeeLGdfW%?;8?!
zI4XS>1*@^j+^M_LV8m~91qE=>-*FJ=Gk?RKV}hG~`3eenlk*rTAq>(+%n7FpMcEPA
z3spvCftzxPKFNH7&c`-)$D5!?!TUL`6`w>%f!<E?9EMIBFUo7$QoRVR1_*V|%nH~>
zYql{Y`i>xtyG^bLRM)pU(uq^+^Qi+YY|Zmgq5+gTyfX3c&;)xksE<4g`JZigC{f=p
zbB*Y0c=oVG--jtpLDJ)^A|=nHRije?^>hHfFZFyrMCmh*Hvf*3+&>vH*_oU^F)&a%
z7as$zysr=klL%6?{qH`C%~@;L`V9{VNpDq#L;T^OT=m9#m6rIPkMZmlp80iOvr!G#
zMGM`tapQeX);;V)+^eWk>a6l#i7FQvoc8hZu_}e;AG7F1{?8eH)l8$ULu$t(z`(kr
z^AjB&fw&hyQ~X&V)fsu<tQEHJttK4HC@k!n<cJ+CJlvz2!sO3FYX5t>&txJ5H}d$c
zO$Til;1_~;se{U5k2@4<_?kkqb8ieHiaBzG%N5oxv3vr2@qnHgeRcko(9ElYAPlG1
zEddACV$r~Ocb$^rkD$KoFw$%E7Zq(WU8d9D#w`!yTQ59Yj)XI!YfyzkVQ|C}QLt?9
z$UAs#Raga&ab%GP-eX6p_|N%jk$u#{VRJaVoGlLT4s$_oY)Z6mwlr}q5!FiBr1a>$
zX?dJg=+hx;w}QVL7$u{A&+NN|&uZ&y&F{SW)t%zj{`GlSQ1Q6eFMH4{Pl1DduKcqh
zmDd>ISfj__%_YtgS+AkqRgRtxgT4vn>{nU4cLrHc91ZH>y{Fxp((L^-C2<+CB%`w4
zlta2*PylX~-F5Y-F6Q*b5m)%Nx{h3hO)I%M^t?teU0qnoT}B;xTpGJEwY`S76UXNO
zOF~b`iYn-+Ra(q%i<5_M3c$?0;yAP&7PAX)sKcNoXl%lqgdg*-AzkhhJtGFq|Jed4
z%9syWBK|P@Hg3RB2yv{jt(MS1R>W3(_}#nJBPV*c6ARdoqz}JtmptaVbYRp|1z7l*
zNrVRGruyF4EXA45KlKTck$UtO3~Pa%EE{G4W(0xS)L86?Yr6D`WgDCPTi+K|F*Uil
zd;|;ccSogxC6^nM!su=E#Q8OxYuQ)d2bV36I@-k~uEAex9k<>#L>WLvI}!!tBnf5@
z@0H@io;&OFBMpu)Xozvs!&uV>uLdw2q(Y`UEwQtEdAW)_YfsXMmZIV+3eG{4xyd`#
zqQV#H=p$3us(EfsP*M1>l4N;m!D$|ujzJLq<e`oc+7cosa%xDHTfK%QWbzLR{$#{l
zElt&~u)jsSd#oN6vOcc4lM(Dd)sT=qfRD4{Gzse;&@n`fz|C&v+=J4*zhfwrv=8kb
zDnQIC+ji1&M?%Yw1aH*Zz2ad~1~j!#=Lj8fvpFS|4^50P;nIc16;5MTNdkW*{PK3R
zj6jpg-gO!=fC(AOOK}1x6wu7MHxIZk0IF(se`uZ78i~I|Ua1)W%7G<+&51-#wj*>7
z!E-Y#+M#IvT~MoCagb0YvP%^I;!H)jSa+RA!YMp`Ge;UPlg3r<k*MLLYG(To<~w&s
z`SzY!k8WE}rmffQlbW-)5;m@_e>ijJ-#MZLN#JoHiS!yH5{o^jGkWXuR2BJn0o2#a
zUDJG{yCYk$ciUjlN0fG4ZPkwy$IOqtaBLOsfAkQN>kbo>l8PU&UE!RaZOm_7gfUSP
z87mxh6iz6@XnkZ^AjaL1UxYlhdW>SgQuUROJKus+1H@(ZJf|%)+lSGcZz0y_$7^LS
zEQy*^)w(Cm%$zBu7ys*1t1^J7Gf*CW`PeU{Tt=bfT3Y)S{PI!(4!7dcZA=C2fJs1q
z7avJ22I8smcY%Eg1DEQ4%6lW<%810b{ZoDpC$$m(G=wDg;`QLTZcFbwn8vQZ^u>x*
zUCdLYf^7S~Gu%GJ<abM_5?dog=w><}P$Qc(#8)PQXsB-ZoNQwrKM0yrza~PY4_u)v
z!=Uy>*bMj!-nf`h8eYpAH-zhb5(`(ywb+^+80;2?x?Wfl4UKqF`#f{AvmLZoviMA@
zdtFfK0!agSM1M)<Pfr_RQTLlhsQ-1eYI{K-QC-gI5u>g$K|eux<2)a4W$Mlb5v|XQ
zx+EG`1V{$fNCE`mRZgbG-`_L|%hz18tOxH_>(&966<;d)T?hl8ZIr|jcT)J^epX`6
zRg?1iSAW_eZ0c%&7m$Y_*S2LQQXF?I27dYic}E3Qj+=-A62{xdm{Mg#k#3JeKgKPJ
zNDX^@0&-@&CR;j9AF+al4>fGf*uw|oZ#A`v6~oM%5%<kX0&}h+oU8<`7DdX%-W~*#
z)Oq3=JYK1<ynfbz@W~ShWnrQWz$f}is;SVvhP*xl1(fcsQ&6fwi*-LQ;<`?|x$Yx(
zcN?BA3gG*1^q8v!JcY8SS7j=Wpk93Pbatlbmz={(-=-nkmbr~zOMi5BrXK*j-@_{t
za4kCki<N{iiNW<5)q6)xx2`H4?jp3`IhQz08rel21Uf@aNk@4qO;g(F5x$(KAGi_o
z?H=B^QPmA(2#q-Z8m&`X1L&BT71cQ*GJamQK?1}*aP`dgkg`T0*x_qjPdF~HtcHcj
z>~!1Xu!rqxfPeJndL7T6zz;e*Trx(afCo(rJtq+rR^O<%I|%xGwe_A<Z!MFL(ASYw
z!T*Vdcv*l9oX|PViX@y<`<Y><Ea^uOQ>3_DG}DY9klDXc6)?tqON?7ly)?PRh_|${
zHP*PcV;epB*F`=Rk47<L5VG-(40xD|d-%2x5t8PFOaEY<-Kwi5Dhf1+`h+;O`QAq>
z-ieBa<7U1p9Q^PcxUl2VT4RAwVYze@|EHFpRR4@~Y6(JW3hPV+N!QGK<WlmReE@DE
zG1^6t-HZlT=o8`iNaN`~mL(s2>(;;JNJTAS)5^KI2KApVFRJ3E6%<yE=Lw(Nut@$U
zoV0exCq^$x{MauJK!T!X^P}?|J}o)&MQB_?43`x2X0aq3FA-#=Xu0^rFRzui)!Mst
z<Um-Dd(`uxhl95?kj?Ij8>6>!Jcu0JS!26UNmJ8DLZs?-8Og!B8w5Ah%OO*?U_j5P
zC@1z?8F4Lj70>ox#h!tozLBwU$Bj8_1d22<EqbM;F2WQ53fTkb(%XBYk1O8X_tG#>
zKPu^imMbnP15G}7;=}>7h11y_c@8!J@${!{2~oqz6lS#(d2tnm_I7|wC1nKtyfS>e
z;W^+*$hdnaj-Px#_vB^Wn<$<V+&XcF-`sWh%lt!{8wfJd<1ULaaKq2NZ`<1)XY^SD
z_w5U1fP^^RLja*vjhc#ULT~;}J9zO`$6!O`R7|m&=CZCErnx3&F|Nch^?b+k)mZw?
zTBN@eX<;*&A_5e3z`-B{MdMfX^O{ER5v;SOr#)jA5CxsqANRdglTAo7sctkLQpIRb
z$!Hm!u*}j(y%_z0e;$<ov%_5ki1+-R!rv^!_qKrLpOxqa18W!>?cnSG-~HboK>{)n
ZQn;*^esEyuq!IvcmS=6vDu44#_zxx7;j#b#


From 304407e5232332339e4e4b796abd4022dd2469fa Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Sun, 25 Oct 2026 22:34:14 +0700
Subject: [PATCH 033/126] apple signing: App Group association fails early
 under automatic signing too (API capability + newest profile, steps and deep
 link, exit before the archive); console plan/verify apple-app-group

---
 CHANGELOG.md                        |   3 +
 cli/api/wrapped.gen.ts              |   2 +-
 cli/apple/build.ts                  |  35 ++--
 cli/apple/signing.ts                |  75 +++++++--
 cli/console/plan.ts                 |  27 +++-
 cli/console/verify.ts               |  16 ++
 cli/data/flags.json                 |  18 ++-
 cli/lib/console-answers.ts          |   5 +-
 cli/lib/console-apple-group-plan.ts |  84 ++++++++++
 cli/lib/console-plan.ts             |   8 +-
 cli/lib/console-play-plans.ts       |   2 +-
 cli/lib/console-verify.ts           |  25 ++-
 cli/lib/targets.ts                  |  62 +++++++-
 cli/mcp-tools.ts                    |  18 ++-
 docs/api-coverage.md                |   2 +-
 skills/build-and-sign/SKILL.md      |   7 +-
 skills/console-autofill/SKILL.md    |   2 +-
 skills/store-pitfalls/SKILL.md      |  18 ++-
 tests/console-play-plans.test.ts    |   2 +-
 tests/signing-targets.test.ts       | 239 +++++++++++++++++++++++++++-
 20 files changed, 590 insertions(+), 60 deletions(-)
 create mode 100644 cli/lib/console-apple-group-plan.ts

diff --git a/CHANGELOG.md b/CHANGELOG.md
index b029e3f..e4d8c7c 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,9 @@
 
 ## Unreleased
 
+- App Groups fail early under automatic signing too: `apple signing status` / `ensure` and `apple build` read the App ID's APP_GROUPS capability settings and the newest profile the API lists for each bundle id (an Xcode-managed one too) and compare it with the target's `com.apple.security.application-groups`. A profile without the group (or the capability off) stops `signing ensure` and `apple build` before the archive with the exact portal steps (Certificates, Identifiers & Profiles > Identifiers > the ID > App Groups > Configure > tick the group > Continue > Save), the deep link `.../identifiers/bundleId/edit/<resource id>`, the plan command and `signing ensure --refresh-profile`; a group nothing can prove only warns with the same steps. `apple build --allow-app-group-gap` overrides.
+- New `storebound console plan apple-app-group [--bundle-id <id>] [--groups group.a,group.b] [--lookup]` (MCP `console_plan`: `bundleId`, `groups`, `lookup`): the agent-first developer portal plan to assign an App Group to an extension's App ID (start URL per bundle id resource id, portal labels, answer sheet per extension, never-press list: Remove / Delete / Revoke). Its final Save is the agent's own (`buttons.finalByAgent`: a capability edit, not a store submission). `console verify apple-app-group` (MCP `console_verify`, API only) re-reads the App ID and the newest profile and fails while a group is missing or cannot be proven.
+
 ## 0.8.49 · 2026-10-25
 
 - `play listing` for a language Play does not have yet uploads, in the same edit as the text, everything Play requires to commit it: icon, feature graphic, 2+ phone screenshots from `store/renders/<lang>/` and the tablet sets when the other languages have them (a set the folder lacks falls back to the default language's). The dry run lists the uploads or refuses with the missing file, instead of a 403 "too few screenshots" at commit. `play images` creates a Play listing that does not exist yet (text from the listing file) together with its images instead of skipping the language (pitfall 102).
diff --git a/cli/api/wrapped.gen.ts b/cli/api/wrapped.gen.ts
index 20dc859..eced4ef 100644
--- a/cli/api/wrapped.gen.ts
+++ b/cli/api/wrapped.gen.ts
@@ -136,7 +136,7 @@ export const WRAPPED: { apple: Record<string, string>; play: Record<string, stri
     'bundleIdCapabilities_createInstance': 'lib/signing',
     'bundleIds_createInstance': 'apple/bundle apple/signing',
     'bundleIds_getCollection': 'apple/adhoc apple/bundle apple/signing',
-    'bundleIds_profiles_getToManyRelated': 'apple/adhoc lib/signing',
+    'bundleIds_profiles_getToManyRelated': 'apple/adhoc apple/signing lib/signing',
     'certificates_createInstance': 'apple/signing lib/signing',
     'certificates_getCollection': 'apple/adhoc apple/signing',
     'customerReviewResponses_createInstance': 'lib/reviews',
diff --git a/cli/apple/build.ts b/cli/apple/build.ts
index 97ac211..855451b 100644
--- a/cli/apple/build.ts
+++ b/cli/apple/build.ts
@@ -6,8 +6,8 @@
 //                          [--keychain <path>] [--keychain-unlock] [--allow-ssh] [--allow-app-group-gap]
 // Over SSH (no GUI session) codesign needs an unlocked keychain: --keychain-unlock unlocks it with the password in
 // STOREBOUND_KEYCHAIN_PASSWORD (never printed) and sets its key partition list; --keychain <path> signs with a build
-// keychain instead of the login keychain. Manual signing: stops before the build when a target's App Group is not in its
-// installed profile (the developer portal assigns groups; storebound apple signing status/ensure names the steps).
+// keychain instead of the login keychain. App Groups: stops before the archive when a target's App Group is not proven (manual: its
+// installed profile; automatic: the App ID's capability and the newest profile the API lists; the portal assigns groups: console plan apple-app-group).
 // First the prebuild (build.prebuild / apple.prebuild: e.g. the web build + npx cap sync; once per flow run), then a
 // Capacitor project's copied web assets (ios/App/App/public) must be newer than the source, else it stops.
 // Finds the workspace / project and scheme (native, Capacitor ios/App, React Native ios/<Name>, Flutter ios/Runner,
@@ -30,13 +30,13 @@ import { parseMobileprovision, toXmlPlist } from '../lib/plist';
 import { nextBuildNumber } from '../lib/release';
 import { exportOptions, profileDirs } from '../lib/signing';
 import { keychainPassword, keychainSigningArgs, parseKeychainList, showSecurity, sshBuildRefusal, unlockSteps } from '../lib/keychain';
-import { appGroupGapsFor, appGroupSteps } from '../lib/targets';
+import { appGroupSteps, appGroupVerdicts, type GroupEvidence } from '../lib/targets';
 import { capacitorProject, webStep } from '../lib/web-assets';
 import { archiveArgs, type AscAuth, distributionErrors, exportArgs, foreignRsync, remoteBuildSession, xcodePath, flutterConfigArgs, ipaInfo, ipaVersionProblem, pickXcode, scanXcode, showCmd } from '../lib/xcode';
 import { bundleTrackingIssues, ipaManifests } from '../lib/privacy-files';
 import { ascClient } from './asc';
 import { parsePlatform } from './platform';
-import { discoverTargets, findBundleId } from './signing';
+import { discoverTargets, findBundleId, readGroupEvidence } from './signing';
 import * as rt from '../lib/rt';
 import { shipPhase } from '../lib/ship-step';
 
@@ -179,12 +179,27 @@ export async function run(ctx: Ctx): Promise<void> {
     if (p) profiles[id] = p.uuid; else if (!dry) throw new Error(`no installed App Store profile for ${id}: storebound apple signing ensure`);
     else warn(TAG, `no installed App Store profile for ${id} (storebound apple signing ensure)`);
   }
-  // App Groups: a manual-signing profile carries a group only when the portal assigned it to the bundle id
-  const groupGaps = style === 'manual' ? appGroupGapsFor([...(scan.main ? [scan.main] : []), ...scan.extensions], id => { const p = installedProfiles(id, teamId)[0]; return p ? p.entitlements : null; }, () => null) : [];
-  for (const g of groupGaps) {
-    const msg = `${g.bundleId}: the installed profile lacks App Group(s) ${g.groups.join(', ')}`;
-    if (a.has('allow-app-group-gap') || dry) warn(TAG, msg);
-    else throw new Error(`${msg}; codesign would refuse the build.\n${appGroupSteps(g).slice(1).join('\n')}\n(--allow-app-group-gap builds anyway)`);
+  // App Groups: a profile carries a group only when the portal assigned it to the bundle id (the API cannot). Manual
+  // signing: the installed profile; automatic: the App ID's capability and the newest profile the API lists. A gap stops
+  // the build before the archive; an association nothing can prove is warned with the same steps.
+  const groupTargets = [...(scan.main ? [scan.main] : []), ...scan.extensions];
+  let groupEvidence: ((id: string) => GroupEvidence | null) | null = null;
+  if (groupTargets.some(t => t.appGroups.length)) {
+    if (style === 'manual') groupEvidence = id => { const p = installedProfiles(id, teamId)[0]; return p ? { resourceId: null, capabilityOn: null, profileEnt: p.entitlements } : null; };
+    else {
+      try { groupEvidence = await readGroupEvidence(await ascClient(root, bundleId, config.apple?.appId), groupTargets, 'automatic', signing.profileType ?? 'IOS_APP_STORE'); }
+      catch (e) { warn(TAG, `App Group association not read from App Store Connect (${(e as Error).message.split('\n')[0]?.slice(0, 120)})`); }
+    }
+  }
+  const groupVerdicts = appGroupVerdicts(groupTargets, groupEvidence ?? (() => null));
+  for (const g of groupVerdicts.unproven) for (const l of appGroupSteps(g)) warn(TAG, l);
+  for (const g of groupVerdicts.gaps) {
+    const msg = `${g.bundleId}: ${g.why}`;
+    if (a.has('allow-app-group-gap') || dry) { warn(TAG, msg); for (const l of appGroupSteps(g).slice(1)) warn(TAG, l); }
+    else {
+      const auto = style === 'automatic' ? 'Automatic signing: Xcode renews its managed profile at archive time, so if you just ticked the group and the API still lists the old profile, build with --allow-app-group-gap.' : '';
+      throw new Error([`${msg}; codesign would refuse the build (stopped before the archive).`, ...appGroupSteps(g).slice(1), ...(auto ? [auto] : []), '(--allow-app-group-gap builds anyway)'].join(String.fromCharCode(10)));
+    }
   }
   const opts = exportOptions({ teamId: teamId ?? '<TEAM_ID>', style, profiles: style === 'manual' ? (Object.keys(profiles).length ? profiles : { [bundleId]: '<profile uuid>' }) : undefined });
   const plist = toXmlPlist(opts);
diff --git a/cli/apple/signing.ts b/cli/apple/signing.ts
index 09fb9b0..22330b4 100644
--- a/cli/apple/signing.ts
+++ b/cli/apple/signing.ts
@@ -34,7 +34,7 @@ import {
 import { isBuildCopyPath } from '../lib/privacy-manifest';
 import { exportedIpas, ipaInfo, scanXcode } from '../lib/xcode';
 import { parseMobileprovision, parsePlist } from '../lib/plist';
-import { appGroupGapsFor, appGroupSteps, type AppGroupGap, pbxTargets, type TargetKind } from '../lib/targets';
+import { appGroupSteps, appGroupVerdicts, type AppGroupGap, type GroupEvidence, type GroupVerdicts, pbxTargets, type TargetKind } from '../lib/targets';
 import { zipEntries, zipRead } from '../lib/zip';
 import type { ShipConfig } from '../lib/config';
 import { textTable } from '../lib/table';
@@ -71,6 +71,7 @@ export async function findBundleId(c: Asc, identifier: string): Promise<J | null
   const hit = (r.data as J[]).find(b => b.attributes.identifier === identifier) ?? null;
   if (hit) hit.capabilities = (r.included ?? []).filter((x: J) => x.type === 'bundleIdCapabilities' && (hit.relationships?.bundleIdCapabilities?.data ?? []).some((d: J) => d.id === x.id))
     .map((x: J) => x.attributes.capabilityType as string);
+  if (hit) hit.capabilityObjects = (r.included ?? []).filter((x: J) => x.type === 'bundleIdCapabilities' && (hit.relationships?.bundleIdCapabilities?.data ?? []).some((d: J) => d.id === x.id)).map((x: J) => x.attributes);
   return hit;
 }
 
@@ -173,10 +174,51 @@ export function profileEntitlements(list: ApiProfile[]): Record<string, unknown>
   try { return (parseMobileprovision(Buffer.from(p.attributes.profileContent!, 'base64')).Entitlements ?? {}) as Record<string, unknown>; } catch { return null; }
 }
 
+/** The entitlements of the newest ACTIVE profile of a bundle id with content, an Xcode-managed one too (automatic
+ *  signing: the list serves the content even where /v1/profiles/{id} answers 404). null = none readable. */
+export function newestProfileEntitlements(list: ApiProfile[]): Record<string, unknown> | null {
+  const p = list.filter(x => x.attributes.profileState === 'ACTIVE' && x.attributes.profileContent)
+    .sort((a, b) => Date.parse(b.attributes.expirationDate ?? '') - Date.parse(a.attributes.expirationDate ?? ''))[0];
+  if (!p) return null;
+  try { return (parseMobileprovision(Buffer.from(p.attributes.profileContent!, 'base64')).Entitlements ?? {}) as Record<string, unknown>; } catch { return null; }
+}
+
+/** What the API shows about the App Group association of one bundle id: the APP_GROUPS capability (and its settings)
+ *  and the entitlements of its newest readable profile (manual signing: storebound's own; automatic: any, managed too). */
+export function groupEvidence(b: J | null | undefined, list: ApiProfile[], style: 'automatic' | 'manual'): GroupEvidence | null {
+  if (!b) return null;
+  const caps = (b.capabilities as string[] | undefined) ?? [];
+  const obj = ((b.capabilityObjects as { capabilityType?: string; settings?: unknown }[] | undefined) ?? []).find(x => x.capabilityType === 'APP_GROUPS');
+  return { resourceId: b.id ?? null, capabilityOn: caps.includes('APP_GROUPS'), capabilitySettings: obj?.settings ?? null,
+    profileEnt: style === 'manual' ? profileEntitlements(list) : newestProfileEntitlements(list) };
+}
+
+/** Reads the evidence for every target with App Groups (API only, no writes): the bundle id with its capabilities and
+ *  the profiles listed under it. */
+export async function readGroupEvidence(c: Asc, targets: { bundleId: string; appGroups: string[] }[], style: 'automatic' | 'manual', type: ProfileType): Promise<(bundleId: string) => GroupEvidence | null> {
+  const out = new Map<string, GroupEvidence | null>();
+  for (const t of targets.filter(x => x.appGroups.length)) {
+    const b = await findBundleId(c, t.bundleId);
+    let list: ApiProfile[] = [];
+    if (b) {
+      try { list = (await c.all(`/v1/bundleIds/${b.id}/profiles?limit=200`) as J[]).filter(p => p.attributes?.profileType === type).map((p): ApiProfile => ({ id: p.id, attributes: p.attributes })); } catch { /* not listable: unproven */ }
+    }
+    out.set(t.bundleId, groupEvidence(b, list, style));
+  }
+  return id => out.get(id) ?? null;
+}
+
 export function warnAppGroupGaps(gaps: AppGroupGap[], tag: string): void {
   for (const g of gaps) for (const l of appGroupSteps(g)) warn(tag, l);
 }
 
+/** Early exit text of a proven App Group gap (before the archive / at the end of ensure): the gap, the exact portal
+ *  steps with the deep link, the plan command and the refresh. */
+export function appGroupError(gaps: AppGroupGap[], what: string): string {
+  const nl = String.fromCharCode(10);
+  return `${gaps.map(g => `${g.bundleId}: ${g.why ?? `lacks ${g.groups.join(', ')}`}`).join('; ')}; ${what}.${nl}${gaps.map(g => appGroupSteps(g).slice(1).join(nl)).join(nl)}`;
+}
+
 const git = (root: string, args: string[]): string | null => {
   try {
     const r = rt.spawnSync(['git', '-C', root, ...args], { stdout: 'pipe', stderr: 'pipe' });
@@ -303,6 +345,8 @@ export interface SigningState {
   /** every signable target: where it was found, its capabilities (present / missing on its App ID) and App Groups */
   targets: { bundleId: string; name: string; kind: string; source: string; registered: boolean; capabilities: string[]; missingCapabilities: string[]; appGroups: string[] }[];
   appGroupGaps: AppGroupGap[];
+  /** targets whose App Group association the API cannot show (warned, not blocked) */
+  appGroupUnproven: AppGroupGap[];
 }
 
 export async function run(ctx: Ctx): Promise<void> {
@@ -351,7 +395,7 @@ export async function run(ctx: Ctx): Promise<void> {
   }
   const wantCaps = (t: SigningTarget): CapabilitySpec[] => (t.bundleId === bundleId ? capabilitySpecs(s, config.games?.gameCenter === true) : t.capabilities);
   const targetList: SigningTarget[] = [...(scan.main ? [scan.main] : []), ...exts];
-  const gapsOf = (): AppGroupGap[] => appGroupGapsFor(targetList, id => { const b = bundles.get(id); return b ? profileEntitlements(profiles.get(id)?.list ?? []) : null; }, id => bundles.get(id)?.id ?? null);
+  const verdictsOf = (): GroupVerdicts => appGroupVerdicts(targetList, id => groupEvidence(bundles.get(id), profiles.get(id)?.list ?? [], style));
   const state: SigningState = {
     bundleId, teamId: s.teamId ?? main?.attributes?.seedId ?? null, registered: !!main,
     capabilities: { present: capPlan.present, missing: capabilitySpecs(s, config.games?.gameCenter === true).filter(w => !capPlan.present.includes(w.type)).map(w => w.type), extra: capPlan.extra },
@@ -370,7 +414,7 @@ export async function run(ctx: Ctx): Promise<void> {
       return { bundleId: id, name: r?.attributes.name ?? null, uuid: r?.attributes.uuid ?? null, state: r ? 'ACTIVE' : 'needs a new profile',
         installed: installedAt(r?.attributes.uuid).length > 0, why: p.plan?.why ?? 'waits for a usable certificate' };
     }),
-    targets: [], appGroupGaps: [],
+    targets: [], appGroupGaps: [], appGroupUnproven: [],
   };
 
   state.targets = ids.map(id => {
@@ -379,7 +423,7 @@ export async function run(ctx: Ctx): Promise<void> {
     return { bundleId: id, name: t?.name ?? id, kind: t?.kind ?? 'app', source: t?.source ?? 'config', registered: !!b, capabilities: want,
       missingCapabilities: want.filter(w => !(b?.capabilities ?? []).includes(w)), appGroups: t?.appGroups ?? [] };
   });
-  state.appGroupGaps = style === 'manual' ? gapsOf() : [];
+  { const v = verdictsOf(); state.appGroupGaps = v.gaps; state.appGroupUnproven = v.unproven; }
 
   // storebound-made profiles that nothing uses (automatic signing: all of them; manual: all but the reused one)
   const inUse = new Set(style === 'manual' ? [...profiles.values()].map(p => p.plan?.reuse?.id).filter((x): x is string => !!x) : []);
@@ -400,7 +444,7 @@ export async function run(ctx: Ctx): Promise<void> {
     for (const x of choice.expiring) warn(TAG, `${x.attributes.name ?? x.id} expires ${x.attributes.expirationDate?.slice(0, 10)}: make a new one soon (storebound apple signing ensure)`);
     for (const n of scan.notes) log(TAG, n);
     console.log(textTable(['target', 'kind', 'bundle id', 'registered', 'capabilities', 'app groups'], state.targets.map(t => [t.name, t.kind, t.bundleId, t.registered ? 'yes' : 'no', t.capabilities.join(', ') || '-', t.appGroups.join(', ') || '-'])));
-    warnAppGroupGaps(state.appGroupGaps, TAG);
+    warnAppGroupGaps([...state.appGroupGaps, ...state.appGroupUnproven], TAG);
     console.log(textTable(['bundle id', 'profile', 'state', 'installed', ''], state.profiles.map(p => [p.bundleId, p.name ?? '', p.state, p.installed ? 'yes' : 'no', p.why])));
     printCapabilityReport(report, TAG);
     cleanup();
@@ -443,6 +487,7 @@ export async function run(ctx: Ctx): Promise<void> {
     if (scope.profiles) for (const p of state.profiles) if (p.uuid && !p.installed && !a.has('no-install')) log(TAG, `would install profile ${p.name} (${p.uuid}) for Xcode`);
     if (capPlan.create.length) log(TAG, `would read the App ID's capabilities back after the write and fail if ${capPlan.create.map(r => (r.body as J).data.attributes.capabilityType).join(' / ')} is not there`);
     printCapabilityReport(report, TAG);
+    warnAppGroupGaps([...state.appGroupGaps, ...state.appGroupUnproven], TAG);
     cleanup();
     done(TAG, `signing checked (dry run): ${plan.length} write(s)`);
     return;
@@ -469,7 +514,13 @@ export async function run(ctx: Ctx): Promise<void> {
   if (!scope.profiles) {
     printCapabilityReport(await capabilityReport(c, config, root), TAG);
     cleanup();
-    if (json) printJson({ ...state, style, scope, plan, done: true });
+    // automatic signing: Xcode makes the profile at archive time, so the App Group association is read from the App ID
+    // and the newest profile the API lists now (the writes above may have added capabilities: read the App IDs again)
+    for (const t of targetList) if (t.appGroups.length) bundles.set(t.bundleId, (await findBundleId(c, t.bundleId)) ?? bundles.get(t.bundleId) ?? null);
+    const v = appGroupVerdicts(targetList, id => groupEvidence(bundles.get(id), profiles.get(id)?.list ?? [], 'automatic'));
+    if (json) printJson({ ...state, style, scope, plan, appGroupGaps: v.gaps, appGroupUnproven: v.unproven, done: !v.gaps.length });
+    warnAppGroupGaps(v.unproven, TAG);
+    if (v.gaps.length) throw new Error(`capabilities in step, but ${appGroupError(v.gaps, 'the archive would fail at codesign (empty application-groups in the profile)')}`);
     done(TAG, `capabilities in step; ${scope.why.split(':')[0]}: nothing else to create`);
     return;
   }
@@ -539,12 +590,12 @@ export async function run(ctx: Ctx): Promise<void> {
   }
   cleanup();
   // App Groups: the profile carries a group only when it is assigned to the bundle id in the developer portal
-  const gaps = appGroupGapsFor(targetList, id => finalEnt.get(id) ?? null, id => bundles.get(id)?.id ?? null);
-  if (json) printJson({ ...state, plan, appGroupGaps: gaps, done: !gaps.length });
-  if (gaps.length) {
-    warnAppGroupGaps(gaps, TAG);
-    throw new Error(`profile(s) installed, but ${gaps.map(g => `${g.bundleId} lacks ${g.groups.join(', ')}${g.url ? ` (${g.url})` : ''}`).join('; ')}: the build would fail at codesign. Tick the App Group(s) in the developer portal (steps above), then run storebound apple signing ensure --refresh-profile.`);
-  }
+  for (const t of targetList) if (t.appGroups.length) bundles.set(t.bundleId, (await findBundleId(c, t.bundleId)) ?? bundles.get(t.bundleId) ?? null);
+  const v = appGroupVerdicts(targetList, id => { const ent = finalEnt.get(id); const b = bundles.get(id); return ent ? { ...groupEvidence(b, [], 'manual')!, profileEnt: ent } : groupEvidence(b, [], 'manual'); });
+  const gaps = v.gaps;
+  if (json) printJson({ ...state, plan, appGroupGaps: gaps, appGroupUnproven: v.unproven, done: !gaps.length });
+  warnAppGroupGaps(v.unproven, TAG);
+  if (gaps.length) throw new Error(`profile(s) installed, but ${appGroupError(gaps, 'the build would fail at codesign')}`);
   done(TAG, 'signing ready (storebound apple build --dry shows the ExportOptions.plist it will use)');
 }
 
diff --git a/cli/console/plan.ts b/cli/console/plan.ts
index be96c28..2c68c40 100644
--- a/cli/console/plan.ts
+++ b/cli/console/plan.ts
@@ -2,6 +2,7 @@
 //   storebound console plan                  lists the forms
 //   storebound console plan <form> [--json] [--lookup]
 //   storebound console plan play-app-content --all [--json]   every App content card's steps inline, one owner list
+//   storebound console plan apple-app-group [--bundle-id <id>] [--groups group.a,group.b] [--lookup] [--json]   the developer portal App Group assignment the API cannot do
 // Read-only. Offline by default: the start URL, the ordered steps, the answer sheet (each answer certain or "ask
 // owner", with the console's own labels), the never-press list, the known UI facts and how to verify. Deep links use
 // apple.appId / play.developerId / play.appId, the ids cached by earlier runs (.storebound/console-app-ids.json,
@@ -12,8 +13,31 @@ import type { Ctx } from '../lib/ctx';
 import { formMeta, isForm, isPlanForm, PLAN_FORM_IDS } from '../lib/console-answers';
 import { reviewDemoAccount } from '../lib/credentials';
 import { consolePlan, type PlanIds, planText } from '../lib/console-plan';
+import type { ShipConfig } from '../lib/config';
 import { printJson } from '../lib/log';
 
+/** apple-app-group: the targets whose entitlements (or apple.signing.extensions) list App Groups, narrowed by --bundle-id;
+ *  --groups g1,g2 names the groups of a bundle id the project does not show; --lookup reads the bundle id's resource id (a GET). */
+async function appGroupTargets(ctx: Ctx, cfg: ShipConfig, bundleId: string | undefined, groups: string | undefined, lookup: boolean): Promise<NonNullable<PlanIds['appGroupTargets']>> {
+  const { discoverTargets } = await import('../apple/signing');
+  const scan = discoverTargets(ctx.loaded.root, cfg);
+  const all = [...(scan.main ? [scan.main] : []), ...scan.extensions];
+  const listed = groups ? groups.split(',').map(g => g.trim()).filter(Boolean) : [];
+  for (const g of listed) if (!/^group.[A-Za-z0-9.-]+$/.test(g)) throw new Error(`console plan apple-app-group: --groups "${g}" is not an App Group id (group.<reverse domain>)`);
+  let found = all.filter(t => t.appGroups.length && (!bundleId || t.bundleId === bundleId)).map(t => ({ bundleId: t.bundleId, name: t.name, groups: listed.length ? listed : t.appGroups, source: t.entitlements ? `entitlements ${t.entitlements}` : 'apple.signing.extensions' }));
+  if (bundleId && !found.length) {
+    if (!listed.length) throw new Error(`console plan apple-app-group: no target "${bundleId}" with App Groups in the project (targets with groups: ${all.filter(t => t.appGroups.length).map(t => t.bundleId).join(', ') || 'none'}); pass --groups group.a,group.b`);
+    found = [{ bundleId, name: bundleId, groups: listed, source: '--groups' }];
+  }
+  if (!lookup || !found.length) return found;
+  const bundle = cfg.apple?.bundleId;
+  if (!bundle) throw new Error('console plan: apple.bundleId is not set (needed for --lookup)');
+  const { ascClient } = await import('../apple/asc');
+  const { findBundleId } = await import('../apple/signing');
+  const c = await ascClient(ctx.loaded.root, bundle, cfg.apple?.appId);
+  return Promise.all(found.map(async t => ({ ...t, resourceId: (await findBundleId(c, t.bundleId))?.id ?? null })));
+}
+
 export async function run(ctx: Ctx): Promise<void> {
   const { config, root } = ctx.loaded;
   const args = ctx.args, json = args.has('json');
@@ -21,7 +45,7 @@ export async function run(ctx: Ctx): Promise<void> {
   if (!form) {
     const forms = PLAN_FORM_IDS.map(id => {
       if (isForm(id)) { const m = formMeta(id, config); return { id, store: m.store, title: m.title, fillable: m.fillable, scripted: m.fillable }; }
-      return { id, store: 'play' as const, title: consolePlan(id, config).title, fillable: true, scripted: false };
+      return { id, store: id.startsWith('apple-') ? 'apple' as const : 'play' as const, title: consolePlan(id, config).title, fillable: true, scripted: false };
     });
     if (json) return printJson({ forms });
     console.log('storebound console plan <form> [--json] [--lookup]   (then drive the page yourself; `storebound console verify <form>` checks it)\n');
@@ -53,6 +77,7 @@ export async function run(ctx: Ctx): Promise<void> {
       ids.readyChanges = await readyFromApi(root, cfg);
     } catch { /* not read: the plan says so */ }
   }
+  if (form === 'apple-app-group') ids.appGroupTargets = await appGroupTargets(ctx, cfg, args.get('bundle-id'), args.get('groups'), args.has('lookup'));
   if (args.has('all') && form !== 'play-app-content') throw new Error('console plan: --all is for play-app-content (every App content card inline)');
   const plan = consolePlan(form, cfg, ids, { all: args.has('all') });
   if (json) return printJson(plan);
diff --git a/cli/console/verify.ts b/cli/console/verify.ts
index 5310af6..f513920 100644
--- a/cli/console/verify.ts
+++ b/cli/console/verify.ts
@@ -2,6 +2,7 @@
 //   storebound console verify <form> [--from <file|->] [--from-text <file|->] [--json]
 // --from takes the JSON of the plan's verify.capture snippet (input states: aria-checked, checked, aria-selected) or page text.
 //   storebound console verify play-app-record --url <url after Create app> [--write]
+//   storebound console verify apple-app-group [--bundle-id <id>]   (API: the App Groups on the App ID's newest readable profile)
 // apple-app-privacy: the page text of the App Privacy page (the Data Types section's per-type summaries; the App Store
 // Connect API has no App Privacy endpoint). play-app-record: the JSON of the plan's capture snippet (input states) or
 // the page text. play-content-rating, play-target-audience: the summary page text. play-app-content: the plan's
@@ -43,6 +44,21 @@ export async function run(ctx: Ctx): Promise<void> {
     const { readyFromApi } = await import('../play/publish-ready');
     const { verifyPublishChangesApi } = await import('../lib/console-verify');
     r = verifyPublishChangesApi(await readyFromApi(root, config));
+  } else if (form === 'apple-app-group') {
+    const { discoverTargets, readGroupEvidence } = await import('../apple/signing');
+    const { appGroupVerdicts } = await import('../lib/targets');
+    const { verifyAppGroupsApi } = await import('../lib/console-verify');
+    const want = args.get('bundle-id');
+    const scan = discoverTargets(root, config);
+    const targets = [...(scan.main ? [scan.main] : []), ...scan.extensions].filter(t => t.appGroups.length && (!want || t.bundleId === want));
+    if (!targets.length) throw new Error(`console verify apple-app-group: no target${want ? ` "${want}"` : ''} with App Groups in the project's entitlements or apple.signing.extensions`);
+    const bundleId = config.apple?.bundleId;
+    if (!bundleId) throw new Error('console verify: apple.bundleId is not set');
+    const { ascClient } = await import('../apple/asc');
+    const c = await ascClient(root, bundleId, config.apple?.appId);
+    const style = config.apple?.signing?.style ?? 'automatic';
+    const evidence = await readGroupEvidence(c, targets, style, config.apple?.signing?.profileType ?? 'IOS_APP_STORE');
+    r = verifyAppGroupsApi(targets, appGroupVerdicts(targets, evidence));
   } else if (form === 'apple-app-record' || form === 'apple-age-rating') {
     const bundleId = config.apple?.bundleId;
     if (!bundleId) throw new Error('console verify: apple.bundleId is not set');
diff --git a/cli/data/flags.json b/cli/data/flags.json
index 2e3f8ba..88b6faf 100644
--- a/cli/data/flags.json
+++ b/cli/data/flags.json
@@ -499,6 +499,7 @@
    "all",
    "allow-availability-changes",
    "allow-price-changes",
+   "bundle-id",
    "capacitor",
    "cdp",
    "chrome-profile",
@@ -510,10 +511,15 @@
    "flutter",
    "fresh-profile",
    "godot",
+   "groups",
+   "keychain",
+   "locale-map",
    "lookup",
    "name",
+   "no-install",
    "profile",
    "react-native",
+   "refresh-profile",
    "sku",
    "start-url",
    "step-timeout",
@@ -524,6 +530,7 @@
   "console verify": [
    "allow-availability-changes",
    "allow-price-changes",
+   "bundle-id",
    "capacitor",
    "cordova",
    "cordova-android",
@@ -533,8 +540,12 @@
    "from",
    "from-text",
    "godot",
+   "keychain",
+   "locale-map",
    "name",
+   "no-install",
    "react-native",
+   "refresh-profile",
    "sku",
    "text",
    "unity",
@@ -1204,6 +1215,7 @@
    "from-text",
    "godot",
    "group",
+   "groups",
    "halt",
    "headless",
    "home",
@@ -1578,11 +1590,13 @@
   "console plan": [
    "storebound console plan                  lists the forms",
    "storebound console plan <form> [--json] [--lookup]",
-   "storebound console plan play-app-content --all [--json]   every App content card's steps inline, one owner list"
+   "storebound console plan play-app-content --all [--json]   every App content card's steps inline, one owner list",
+   "storebound console plan apple-app-group [--bundle-id <id>] [--groups group.a,group.b] [--lookup] [--json]   the developer portal App Group assignment the API cannot do"
   ],
   "console verify": [
    "storebound console verify <form> [--from <file|->] [--from-text <file|->] [--json]",
-   "storebound console verify play-app-record --url <url after Create app> [--write]"
+   "storebound console verify play-app-record --url <url after Create app> [--write]",
+   "storebound console verify apple-app-group [--bundle-id <id>]   (API: the App Groups on the App ID's newest readable profile)"
   ],
   "desktop": [
    "storebound desktop                 the app has this CLI's version: open it (in an app folder: on that folder, which",
diff --git a/cli/lib/console-answers.ts b/cli/lib/console-answers.ts
index 8294abb..036fc47 100644
--- a/cli/lib/console-answers.ts
+++ b/cli/lib/console-answers.ts
@@ -25,11 +25,12 @@ import type { ProjectSignals } from './project-signals';
 
 export const FORM_IDS = ['apple-app-record', 'apple-age-rating', 'apple-app-privacy', 'play-app-record', 'play-content-rating', 'play-target-audience'] as const;
 export type FormId = typeof FORM_IDS[number];
-/** Forms with a console plan only (the agent drives them; no scripted fill): Play Store settings (the App category the
+/** Forms with a console plan only (the agent drives them; no scripted fill): apple-app-group (the developer portal App Group
+ *  assignment the API cannot do, cli/lib/console-apple-group-plan.ts), Play Store settings (the App category the
  *  API cannot set), the App content overview and its declarations without a fill form (cli/lib/console-play-plans.ts). */
 export const PLAN_ONLY_FORM_IDS = ['play-store-settings', 'play-app-content', 'play-privacy-policy', 'play-ads', 'play-sign-in-details',
   'play-advertising-id', 'play-government-apps', 'play-financial-features', 'play-health-apps', 'play-production-countries', 'play-production-release',
-  'play-games-services', 'play-publish-changes'] as const;
+  'play-games-services', 'play-publish-changes', 'apple-app-group'] as const;
 export type PlanOnlyFormId = typeof PLAN_ONLY_FORM_IDS[number];
 /** Every form `console plan` / `console verify` know. */
 export const PLAN_FORM_IDS = [...FORM_IDS, ...PLAN_ONLY_FORM_IDS] as const;
diff --git a/cli/lib/console-apple-group-plan.ts b/cli/lib/console-apple-group-plan.ts
new file mode 100644
index 0000000..c54d404
--- /dev/null
+++ b/cli/lib/console-apple-group-plan.ts
@@ -0,0 +1,84 @@
+// `storebound console plan apple-app-group`: the App Store Connect API can switch the APP_GROUPS capability on for a
+// bundle id but cannot assign a group to it, so an app extension (a packet-tunnel extension, a share extension, a
+// widget) whose entitlements list `com.apple.security.application-groups` gets a profile with an empty group list until
+// the group is ticked in the developer portal. Agent-first like the other plans: the agent drives the signed-in
+// developer.apple.com page with its own browser tool, presses Save itself (it is a capability edit on the owner's own
+// App ID, not a store submission: finalByAgent), then `storebound apple signing ensure --refresh-profile` and
+// `storebound console verify apple-app-group` (read-only, API). Pure.
+// Modeled on Apple's help ("Configure App Groups", "Register an App Group"), not yet recorded on a real portal page: the
+// labels are where to start, the agent adapts.
+import { bundleIdPortalUrl, PORTAL_IDENTIFIERS_URL } from './targets';
+import { NEVER_PRESS } from './console-forms';
+import type { ConsolePlan, PlanAnswer, PlanIds, PlanStep } from './console-plan';
+
+export const PORTAL_REMOVE = ['Remove', 'Remove App ID', 'Delete', 'Delete identifier', 'Revoke', 'Revoke certificate', 'Download'];
+const CHECK = 'document.querySelector("main")?.innerText ?? document.body.innerText';
+
+export function appleAppGroupPlan(p: PlanIds): ConsolePlan {
+  const targets = p.appGroupTargets ?? [];
+  const one = targets.length === 1 ? targets[0]! : null;
+  const answers: PlanAnswer[] = [];
+  const steps: PlanStep[] = [];
+  const add = (s: Omit<PlanStep, 'n'>): void => { steps.push({ n: steps.length + 1, ...s }); };
+  const a = (x: PlanAnswer): void => { answers.push(x); };
+
+  if (!targets.length) {
+    a({ id: 'targets', question: 'Which bundle id needs which App Group(s)?', value: null, text: '(none found)', status: 'ask-owner', source: 'entitlements of the Xcode targets',
+      note: 'No target of the project lists com.apple.security.application-groups. Pass --bundle-id <id> --groups group.a,group.b, or list the extension in apple.signing.extensions with appGroups.' });
+  }
+  for (const t of targets) {
+    a({ id: `${t.bundleId}/capability`, question: `${t.bundleId}: App Groups capability`, value: true, text: 'on', status: 'certain', source: t.source ?? 'entitlements', control: 'checkbox', label: 'App Groups', action: 'tick', where: 'Capabilities list of the App ID page' });
+    for (const g of t.groups) a({ id: `${t.bundleId}/${g}`, question: `${t.bundleId}: App Group`, value: g, text: g, status: 'certain', source: t.source ?? 'entitlements', control: 'checkbox', label: g, action: 'tick', where: 'the App Group assignment dialog (App Groups > Configure)' });
+  }
+
+  const start = one?.resourceId
+    ? { url: bundleIdPortalUrl(one.resourceId), deepLink: true, reach: [] as string[] }
+    : { url: PORTAL_IDENTIFIERS_URL, deepLink: false, reach: ['Certificates, Identifiers & Profiles > Identifiers', targets.length ? `search the bundle id (${targets.map(t => t.bundleId).join(', ')}) and open it` : 'search the bundle id and open it', 'with --lookup the plan gets the deep link (https://developer.apple.com/account/resources/identifiers/bundleId/edit/<resource id>)'] };
+
+  add({ text: `Open ${start.url} in the signed-in browser (never sign in, never type the account password: if the page asks to sign in, tell the owner).${start.deepLink ? '' : ' Identifiers > search the bundle id > open it.'}` });
+  for (const t of targets) {
+    const url = t.resourceId ? bundleIdPortalUrl(t.resourceId) : null;
+    const gs = t.groups.join(', ');
+    add({ text: `${t.bundleId}${url ? ` (${url})` : ''}: on the "Edit Your App ID Configuration" page, find App Groups in the Capabilities list and tick its checkbox if it is not ticked.`, answers: [`${t.bundleId}/capability`] });
+    add({ text: `${t.bundleId}: press "Configure" next to App Groups. In the dialog that lists the registered App Groups tick ${gs} (exact identifiers; tick nothing else), then press "Continue". A group that is not listed must be registered first: Identifiers > the blue + > App Groups > Continue > Description and Identifier (the group id of the sheet) > Continue > Register; then reopen this page.`, click: ['Configure', 'Continue'], answers: t.groups.map(g => `${t.bundleId}/${g}`) });
+    add({ text: `${t.bundleId}: press "Save" at the top right. If a dialog says the provisioning profiles of this App ID become invalid, press "Confirm" (a new profile is made by \`storebound apple signing ensure --refresh-profile\`). Read the page back: App Groups shows the configured count.`, click: ['Save', 'Confirm'] });
+  }
+  add({ text: `Then run \`storebound apple signing ensure --refresh-profile\` (a new profile that carries the group), and \`storebound console verify apple-app-group${one ? ` --bundle-id ${one.bundleId}` : ''}\` (read-only: reads the App ID and the newest profile through the API and checks every group).` });
+
+  return {
+    form: 'apple-app-group', store: 'apple', title: 'Apple Developer portal: assign App Groups to an App ID (the API cannot)',
+    ownerBatch: [], start, steps, answers,
+    askOwner: answers.filter(x => x.status !== 'certain').map(x => `${x.question}: ask the owner${x.note ? ` (${x.note})` : ''}`),
+    buttons: {
+      neverPress: [...new Set([...PORTAL_REMOVE, 'Revoke', 'Account', 'Certificates', 'Keys', ...NEVER_PRESS])],
+      final: 'Save', finalByAgent: true,
+      allowed: [
+        { button: 'Configure', class: 'navigation', where: 'App Groups row: opens the group assignment dialog' },
+        { button: 'Continue', class: 'navigation', where: 'the group assignment dialog and the App Group registration form' },
+        { button: 'Register', class: 'portal-register', where: 'App Groups registration form only: registers the group id of the answer sheet (a new group identifier, nothing public)' },
+        { button: 'Save', class: 'portal-save', where: 'top right of the App ID page: saves the capability edit (the agent presses it; not a store submission)' },
+        { button: 'Confirm', class: 'portal-save', where: 'the dialog that warns the profiles become invalid after Save' },
+      ],
+      rule: 'The agent presses everything it needs here, including Save (a capability edit on the owner\'s own App ID; no store submission, nothing public). Never press Remove / Delete / Revoke, never untick or edit another capability, never touch Certificates, Keys or Account pages; stop and tell the owner if the page asks to sign in.',
+    },
+    uiFacts: [
+      'Modeled on Apple\'s help pages (not recorded on a real portal page yet): Certificates, Identifiers & Profiles > Identifiers > the App ID > Capabilities list > App Groups (checkbox) > Configure > the group list > Continue > Save (top right) > Confirm.',
+      'The App Store Connect API can enable the APP_GROUPS capability (POST /v1/bundleIdCapabilities) but has no field that assigns a group: an extension\'s profile has an empty application-groups list until the group is ticked here, and the archive then fails at codesign.',
+      'Saving the App ID invalidates its provisioning profiles; manual signing needs `storebound apple signing ensure --refresh-profile`, automatic signing lets Xcode renew its managed profile at archive time.',
+      'The deep link uses the bundle id\'s App Store Connect API resource id: https://developer.apple.com/account/resources/identifiers/bundleId/edit/<resource id> (`console plan apple-app-group --bundle-id <id> --lookup` reads it).',
+      'Group identifiers start with group. and are registered once per team under Identifiers > App Groups.',
+    ],
+    driving: [
+      'Use your own browser tool (Claude in Chrome with the owner\'s signed-in session). Read the page as text or an accessibility tree first; click by visible text; adapt when the page differs from these steps, but never press anything in buttons.neverPress.',
+      'Tick boxes by clicking the checkbox, then read its checked state back. After Save read the App ID page again.',
+      'Press Save yourself (buttons.finalByAgent): it is not a store submission. Never sign in, never type passwords or 2FA codes.',
+    ],
+    inPageLoop: '',
+    verify: {
+      command: `storebound console verify apple-app-group${one ? ` --bundle-id ${one.bundleId}` : ''}`, source: 'api', capture: CHECK,
+      expect: ['Every App Group of the answer sheet is on the App ID\'s newest readable profile (re-download after `storebound apple signing ensure --refresh-profile`) or named by the App Groups capability settings.', 'Exit code 1 while a group is missing or cannot be proven.'],
+    },
+    fillable: true,
+    guidance: ['Open: developer.apple.com > Account > Certificates, Identifiers & Profiles > Identifiers > the App ID'],
+  };
+}
diff --git a/cli/lib/console-plan.ts b/cli/lib/console-plan.ts
index ff11b8c..bd0142b 100644
--- a/cli/lib/console-plan.ts
+++ b/cli/lib/console-plan.ts
@@ -12,6 +12,7 @@ import { type Answer, type AnswerValue, consoleAnswers, type FormId, formMeta, i
 import { APP_CONTENT_CAPTURE, APP_CONTENT_CARDS, appContentStart, PLAY_FULL_ACCESS_BOX, PLAY_MATERIAL_FACT, playAppPage, playOnlyPart, SAVE_EACH_PAGE, SEND_FOR_REVIEW, SEND_FOR_REVIEW_WHERE, startLabel } from './console-play-plans';
 import { FORM_BUTTONS, formDef, type Name, NEVER_PRESS, PLAY_NEVER_PRESS, playAppList, playCreateApp, setUpTexts, typeLabels } from './console-forms';
 import { PLAY_CREATE_CAPTURE } from './console-verify';
+import { appleAppGroupPlan } from './console-apple-group-plan';
 import { APPLE_PURPOSES, IARC_DIGITAL_GOODS, IARC_DIGITAL_PURCHASES } from './console-answers';
 
 export type PlanStatus = 'certain' | 'ask-owner' | 'owner-check' | 'agreement';
@@ -87,6 +88,8 @@ export interface ConsolePlan {
     allowed: { button: string; class: string; where: string }[];
     /** The rule in one line. */
     rule: string;
+    /** true: the final button is the agent's own (a portal capability edit such as Save on an App ID, not a store submission or a public change). */
+    finalByAgent?: boolean;
   };
   /** Known UI facts of this form (verified ones say so). */
   uiFacts: string[];
@@ -110,6 +113,8 @@ export interface PlanIds {
   signals?: ProjectSignals;
   /** play-publish-changes: the production releases ready to publish per the API (null/undefined: not read). */
   readyChanges?: { track: string; version: string | null; build: string | null; rollout: string }[] | null;
+  /** apple-app-group: the targets whose entitlements list App Groups (their bundle id, groups and, with --lookup, the App Store Connect resource id for the portal deep link). */
+  appGroupTargets?: { bundleId: string; name?: string; groups: string[]; resourceId?: string | null; source?: string }[];
 }
 
 const ASC = 'https://appstoreconnect.apple.com';
@@ -538,6 +543,7 @@ export interface PlanOpts { all?: boolean }
 export function consolePlan(form: PlanFormId, config: ShipConfig, p: PlanIds = {}, o: PlanOpts = {}): ConsolePlan {
   const cfg = p.appleAppId && config.apple && !config.apple.appId ? { ...config, apple: { ...config.apple, appId: p.appleAppId } } : config;
   if (form === 'play-app-content') return appContentPlan(cfg, p, o.all);
+  if (form === 'apple-app-group') return appleAppGroupPlan(p);
   if (isPlanOnly(form)) {
     const part = playOnlyPart(form, cfg, p);
     return {
@@ -583,7 +589,7 @@ export function planText(pl: ConsolePlan): string {
     L.push(`  ${tag} ${a.question}: ${a.text}${a.label ? `  -> ${a.action ?? ''} "${a.label}"${a.curlyQuotes ? ' (curly quotes)' : ''}` : ''}${a.where ? `  @ ${a.where}` : ''}`);
     if (a.status !== 'certain' && a.note) L.push(`           ${a.note}`);
   }
-  L.push('', `Never press: ${pl.buttons.neverPress.map(b => `"${b}"`).join(', ')}`, `Final button (the owner's): ${pl.buttons.final}`, `Rule: ${pl.buttons.rule}`, '', 'UI facts:', ...pl.uiFacts.map(f => `  - ${f}`), '', 'Driving:', ...pl.driving.map(d => `  - ${d}`),
+  L.push('', `Never press: ${pl.buttons.neverPress.map(b => `"${b}"`).join(', ')}`, `Final button (${pl.buttons.finalByAgent ? "the agent's own, not a store submission" : "the owner's"}): ${pl.buttons.final}`, `Rule: ${pl.buttons.rule}`, '', 'UI facts:', ...pl.uiFacts.map(f => `  - ${f}`), '', 'Driving:', ...pl.driving.map(d => `  - ${d}`),
     '', 'In-page helper (plan.inPageLoop: paste it once per page in one short call, then window.__sb.run([...]) and poll window.__log):', ...pl.inPageLoop.split('\n').map(l => `    ${l}`),
     '', `Verify: ${pl.verify.command}`, ...pl.verify.expect.map(e => `  - ${e}`));
   if (pl.askOwner.length) L.push('', 'Ask the owner first:', ...pl.askOwner.map(a => `  - ${a}`));
diff --git a/cli/lib/console-play-plans.ts b/cli/lib/console-play-plans.ts
index 51978b7..9fe47ac 100644
--- a/cli/lib/console-play-plans.ts
+++ b/cli/lib/console-play-plans.ts
@@ -534,7 +534,7 @@ function publishChanges(config: ShipConfig, p: PlanIds): Part {
   };
 }
 
-export function playOnlyPart(form: Exclude<PlanOnlyFormId, 'play-app-content'>, config: ShipConfig, p: PlanIds): Part {
+export function playOnlyPart(form: Exclude<PlanOnlyFormId, 'play-app-content' | 'apple-app-group'>, config: ShipConfig, p: PlanIds): Part {
   switch (form) {
     case 'play-production-countries': return productionCountries(config, p);
     case 'play-production-release': return productionRelease(config, p);
diff --git a/cli/lib/console-verify.ts b/cli/lib/console-verify.ts
index 730997d..5db26ec 100644
--- a/cli/lib/console-verify.ts
+++ b/cli/lib/console-verify.ts
@@ -19,6 +19,7 @@ import { APPLE_PRIVACY_TYPES } from './app-privacy';
 import { typeLabels } from './console-forms';
 import { playAppIdInText } from './play-app-id';
 import { APPLE_PURPOSES } from './console-answers';
+import type { AppGroupGap } from './targets';
 
 export type RowStatus = 'match' | 'mismatch' | 'not-found' | 'ask-owner';
 export interface VerifyRow { item: string; expected: string; seen: string; status: RowStatus; note?: string }
@@ -360,7 +361,7 @@ export function parseStates(raw: string): { states: InputState[]; text: string }
  * the privacy policy URL) and option labels must appear; the App category's "Not selected" is a mismatch. Yes / No
  * radios cannot be told apart in page text: reported, never counted as a match.
  */
-export function verifyPlayDeclaration(form: Exclude<PlanOnlyFormId, 'play-app-content'>, config: ShipConfig, text: string): VerifyResult {
+export function verifyPlayDeclaration(form: Exclude<PlanOnlyFormId, 'play-app-content' | 'apple-app-group'>, config: ShipConfig, text: string): VerifyResult {
   const part = playOnlyPart(form, config, {});
   const st = parseStates(text);
   const blob = fold(st ? st.text : text);
@@ -444,6 +445,27 @@ export function verifyPublishChangesApi(ready: { track: string; version: string
     ...(ready.undetermined ? ['A release counts as ready only when the public store page shows an OLDER version; a 404, failed read or same version is never ready. Check Publishing overview ("Last published on ...") or pass the page text with --from-text -.'] : [])]);
 }
 
+/**
+ * apple-app-group (read-only, API): one row per (bundle id, App Group). match: the group is on the newest readable
+ * profile or named by the capability settings; mismatch: the evidence shows it missing; not-found: nothing readable
+ * proves it (after the portal Save the old profiles are invalid: run `storebound apple signing ensure --refresh-profile`,
+ * then verify again). ok only when every row matches.
+ */
+export function verifyAppGroupsApi(targets: { bundleId: string; appGroups: string[] }[], verdicts: { gaps: AppGroupGap[]; unproven: AppGroupGap[]; ok: string[] }): VerifyResult {
+  const rows: VerifyRow[] = [];
+  for (const t of targets.filter(x => x.appGroups.length)) {
+    const gap = verdicts.gaps.find(g => g.bundleId === t.bundleId), un = verdicts.unproven.find(g => g.bundleId === t.bundleId);
+    for (const g of t.appGroups) {
+      const item = `${t.bundleId}: ${g}`;
+      if (gap?.groups.includes(g)) rows.push({ item, expected: 'on the App ID (profile carries it)', seen: 'missing', status: 'mismatch', ...(gap.why ? { note: gap.why } : {}) });
+      else if (un?.groups.includes(g)) rows.push({ item, expected: 'on the App ID (profile carries it)', seen: 'cannot be proven', status: 'not-found', note: 'no ACTIVE profile shows it: run storebound apple signing ensure --refresh-profile, then verify again' });
+      else rows.push({ item, expected: 'on the App ID (profile carries it)', seen: 'present', status: 'match' });
+    }
+  }
+  const r = result('apple-app-group', 'api', rows, ['Reads the App Store Connect API: the App Groups capability and the newest readable provisioning profile of each bundle id.']);
+  return rows.some(x => x.status === 'not-found') ? { ...r, ok: false } : r;
+}
+
 /** Page-text verification of any form that has one. */
 export function verifyText(form: PlanFormId, config: ShipConfig, text: string): VerifyResult {
   if (form === 'play-app-content') return verifyAppContent(text);
@@ -460,6 +482,7 @@ export function verifyText(form: PlanFormId, config: ShipConfig, text: string):
     case 'play-target-audience': return verifyTargetAudience(config, text);
     case 'apple-app-record': return verifyAppRecordText(config, text);
     case 'apple-age-rating': throw new Error('console verify apple-age-rating reads the App Store Connect API (no --from-text)');
+    case 'apple-app-group': throw new Error('console verify apple-app-group reads the App Store Connect API (no --from-text)');
   }
 }
 
diff --git a/cli/lib/targets.ts b/cli/lib/targets.ts
index fc8e8b9..227d3b4 100644
--- a/cli/lib/targets.ts
+++ b/cli/lib/targets.ts
@@ -110,17 +110,20 @@ export function appGroupGaps(want: string[], profileEnt: Record<string, unknown>
 /** The developer portal page of a bundle id (the id is the App Store Connect API resource id of the bundle id). */
 export const bundleIdPortalUrl = (resourceId: string): string => `https://developer.apple.com/account/resources/identifiers/bundleId/edit/${encodeURIComponent(resourceId)}`;
 
-export interface AppGroupGap { bundleId: string; resourceId: string | null; groups: string[]; url: string | null }
+export interface AppGroupGap { bundleId: string; resourceId: string | null; groups: string[]; url: string | null; /** why it is a gap / not proven (one line) */ why?: string }
 
-/** The agent-first steps to tick the groups (the API cannot do it); the never-press list is part of the text. */
+export const PORTAL_IDENTIFIERS_URL = 'https://developer.apple.com/account/resources/identifiers/list';
+
+/** The agent-first steps to tick the groups (the API cannot do it); the never-press list is part of the text.
+ *  The first line is the headline, the rest are the steps. */
 export function appGroupSteps(g: AppGroupGap): string[] {
-  const url = g.url ?? 'https://developer.apple.com/account/resources/identifiers/list';
+  const url = g.url ?? PORTAL_IDENTIFIERS_URL;
   return [
-    `${g.bundleId}: the profile lacks App Group(s) ${g.groups.join(', ')} (the API can enable the App Groups capability but cannot assign a group to a bundle id).`,
-    `Open ${url} in the signed-in browser (agent-first: you drive it).`,
-    'Capabilities list > App Groups: tick it if it is not ticked, press Configure, tick each group above (Continue if the group is new: register it first under Identifiers > App Groups), Continue, then Save at the top right (and Confirm in the dialog that says the profiles get invalidated).',
-    'Never press: Remove (the bundle id), Delete, Revoke, or any Certificates / Keys / Account button.',
-    `Then run: storebound apple signing ensure --refresh-profile (makes a new profile that carries the group), and storebound apple signing status to read it back.`,
+    `${g.bundleId}: ${g.why ?? `the profile lacks App Group(s) ${g.groups.join(', ')}`} (the App Store Connect API can enable the App Groups capability but cannot assign a group to a bundle id).`,
+    `Open ${url} in the signed-in browser (agent-first: you drive it; plan: storebound console plan apple-app-group --bundle-id ${g.bundleId}${g.url ? '' : ' --lookup'}).`,
+    `Certificates, Identifiers & Profiles > Identifiers > ${g.bundleId} > App Groups (tick it if it is not ticked) > Configure > tick ${g.groups.join(', ')} (register a new group first under Identifiers > App Groups) > Continue > Save (and Confirm in the dialog that says the profiles get invalidated).`,
+    'Never press: Remove (the bundle id), Delete, Revoke, or any Certificates / Keys / Account button; change no other capability.',
+    'Then run: storebound apple signing ensure --refresh-profile (makes a new profile that carries the group), and storebound apple signing status to read it back.',
   ];
 }
 
@@ -136,3 +139,46 @@ export function appGroupGapsFor(targets: { bundleId: string; appGroups: string[]
   }
   return out;
 }
+
+/** What the API (or an installed profile) shows about one App ID's App Group association. */
+export interface GroupEvidence {
+  /** App Store Connect API resource id of the bundle id (the portal deep link); null: not registered / unknown */
+  resourceId: string | null;
+  /** the APP_GROUPS capability is on the App ID (null: unknown) */
+  capabilityOn: boolean | null;
+  /** the raw settings of the APP_GROUPS capability (any field that names a group proves it) */
+  capabilitySettings?: unknown;
+  /** Entitlements of the newest readable profile of the bundle id (a managed one too); null: none readable */
+  profileEnt: Record<string, unknown> | null;
+}
+
+/** Groups of `want` that the capability's settings name (the API has no documented App Group field; if a field ever
+ *  lists them, this proves the association without a profile). */
+export const capabilityGroups = (settings: unknown, want: string[]): string[] => {
+  if (settings === null || settings === undefined) return [];
+  const text = JSON.stringify(settings);
+  return want.filter(g => text.includes(g));
+};
+
+export interface GroupVerdicts { gaps: AppGroupGap[]; unproven: AppGroupGap[]; ok: string[] }
+
+/**
+ * Every target whose entitlements list App Groups: proven (a readable profile carries each group, or the capability
+ * settings name it), a gap (the evidence shows the group missing: a readable profile without it, or the capability
+ * off) or unproven (nothing readable: the API cannot show the association). Pure.
+ */
+export function appGroupVerdicts(targets: { bundleId: string; appGroups: string[] }[], evidence: (bundleId: string) => GroupEvidence | null): GroupVerdicts {
+  const out: GroupVerdicts = { gaps: [], unproven: [], ok: [] };
+  for (const t of targets) {
+    if (!t.appGroups.length) continue;
+    const ev = evidence(t.bundleId);
+    const rid = ev?.resourceId ?? null, url = rid ? bundleIdPortalUrl(rid) : null;
+    const viaCap = new Set(capabilityGroups(ev?.capabilitySettings, t.appGroups));
+    const missing = (ev?.profileEnt ? appGroupGaps(t.appGroups, ev.profileEnt) : t.appGroups).filter(g => !viaCap.has(g));
+    if (!missing.length) { out.ok.push(t.bundleId); continue; }
+    if (ev?.capabilityOn === false) out.gaps.push({ bundleId: t.bundleId, resourceId: rid, groups: missing, url, why: `the App Groups capability is not enabled on the App ID, so ${missing.join(', ')} is not associated` });
+    else if (ev?.profileEnt) out.gaps.push({ bundleId: t.bundleId, resourceId: rid, groups: missing, url, why: `the newest profile lacks App Group(s) ${missing.join(', ')} (an empty application-groups list means the group is not ticked on the App ID)` });
+    else out.unproven.push({ bundleId: t.bundleId, resourceId: rid, groups: missing, url, why: ev ? `App Group(s) ${missing.join(', ')} cannot be proven: the API shows no group on the App ID's capability and no readable profile` : `App Group(s) ${missing.join(', ')} cannot be proven: the App ID is not registered or could not be read` });
+  }
+  return out;
+}
diff --git a/cli/mcp-tools.ts b/cli/mcp-tools.ts
index c7972ae..deda4cf 100644
--- a/cli/mcp-tools.ts
+++ b/cli/mcp-tools.ts
@@ -40,7 +40,7 @@ export const notSentProp = { type: 'boolean', default: false, description: 'Comm
 /** Every form `console plan` / `console verify` know (cli/lib/console-answers.ts PLAN_FORM_IDS; a test keeps them equal). */
 export const CONSOLE_PLAN_FORMS = ['apple-app-record', 'apple-age-rating', 'apple-app-privacy', 'play-app-record', 'play-content-rating', 'play-target-audience',
   'play-store-settings', 'play-app-content', 'play-privacy-policy', 'play-ads', 'play-sign-in-details', 'play-advertising-id', 'play-government-apps',
-  'play-financial-features', 'play-health-apps', 'play-production-countries', 'play-production-release', 'play-games-services', 'play-publish-changes'];
+  'play-financial-features', 'play-health-apps', 'play-production-countries', 'play-production-release', 'play-games-services', 'play-publish-changes', 'apple-app-group'];
 
 export const TOOLS: ToolDef[] = [
   { name: 'check', title: 'Offline config check', command: ['check'], write: false, network: false,
@@ -458,15 +458,19 @@ export const TOOLS: ToolDef[] = [
     description: 'Upload the event card (16:9, 1920x1080 to 3840x2160) and details page (9:16) images of one draft in-app event per locale, size-checked first.',
     props: { name: { type: 'string', description: 'Reference name from apple.events' } }, required: ['name'], args: i => opt('name', i.name) },
   { name: 'console_plan', title: 'Console form plan (agent-first)', command: ['console', 'plan'], write: false, network: false,
-    description: 'Read-only plan for filling a console form that has no API with YOUR OWN browser tool (Claude in Chrome, a built-in browser, Playwright): start URL (deep link when the ids are known), ordered steps (what to click by visible text, what to answer), the answer sheet from the config (each answer certain or ask-owner, with the console\'s exact labels, curly quotes noted), the buttons never to press (Publish, Submit, Create, agreements, help panels), known UI facts per form (Play: material radios and checkboxes take a JS click on the inner [role=radio] / [role=checkbox]), a ready-made in-page helper (inPageLoop: one evaluate call times out around 45 s, so long flows run in the page and you poll window.__log) and how to verify. Forms: the App Store and Play forms of `console fill`, plus agent-only Play pages: play-store-settings (the App category, which the Play API cannot set), play-app-content (every App content card in order with its page and one owner batch; all: true inlines every card) and its cards play-privacy-policy, play-ads, play-sign-in-details, play-advertising-id, play-government-apps, play-financial-features, play-health-apps; and the first production release: play-production-countries (the API cannot set them) and play-production-release (its final Send changes for review is the owner\'s). Drive the page yourself, stop before the final button and tell the owner what to press, then call console_verify.',
+    description: 'Read-only plan for filling a console form that has no API with YOUR OWN browser tool (Claude in Chrome, a built-in browser, Playwright): start URL (deep link when the ids are known), ordered steps (what to click by visible text, what to answer), the answer sheet from the config (each answer certain or ask-owner, with the console\'s exact labels, curly quotes noted), the buttons never to press (Publish, Submit, Create, agreements, help panels), known UI facts per form (Play: material radios and checkboxes take a JS click on the inner [role=radio] / [role=checkbox]), a ready-made in-page helper (inPageLoop: one evaluate call times out around 45 s, so long flows run in the page and you poll window.__log) and how to verify. Forms: the App Store and Play forms of `console fill`, plus agent-only Play pages: play-store-settings (the App category, which the Play API cannot set), play-app-content (every App content card in order with its page and one owner batch; all: true inlines every card) and its cards play-privacy-policy, play-ads, play-sign-in-details, play-advertising-id, play-government-apps, play-financial-features, play-health-apps; and the first production release: play-production-countries (the API cannot set them) and play-production-release (its final Send changes for review is the owner\'s); and apple-app-group (the developer portal step the App Store Connect API cannot do: assign App Groups to an extension\'s App ID; its final Save is the agent\'s own, buttons.finalByAgent; bundleId narrows it, lookup adds the portal deep link). Drive the page yourself, stop before the final button and tell the owner what to press, then call console_verify.',
     props: { form: { type: 'string', enum: CONSOLE_PLAN_FORMS },
-      all: { type: 'boolean', description: 'play-app-content only: every card\'s steps inline in fix order, ending with the one owner list (tick the IARC Terms before, Send changes for review after)' } },
-    required: ['form'], args: i => [String(i.form), ...(i.all === true ? ['--all'] : []), '--json'] },
+      all: { type: 'boolean', description: 'play-app-content only: every card\'s steps inline in fix order, ending with the one owner list (tick the IARC Terms before, Send changes for review after)' },
+      bundleId: { type: 'string', description: 'apple-app-group only: the bundle id (an extension) whose App Group to assign' },
+      groups: { type: 'string', description: 'apple-app-group only: comma-separated group ids when the project does not show them (group.com.example.app)' },
+      lookup: { type: 'boolean', description: 'apple-app-group only: read the bundle id\'s resource id from the App Store Connect API (a GET) for the portal deep link' } },
+    required: ['form'], args: i => [String(i.form), ...(i.all === true ? ['--all'] : []), ...opt('bundle-id', i.bundleId), ...opt('groups', i.groups), ...flag('lookup', i.lookup), '--json'] },
   { name: 'console_verify', title: 'Verify a console form', command: ['console', 'verify'], write: false, network: true,
-    description: 'Read-only check of a filled console form against the config. Pass the page text you read (App Privacy: the App Privacy page\'s innerText, whose Data Types section shows per type "Used for …", linked and tracking; Play Create app: the JSON of the plan\'s capture snippet; Play content rating / target audience: the summary page text; play-app-content: the JSON of the plan\'s capture snippet; Play store settings and the privacy policy: the page text after Save; the other App content cards (ads, sign-in details, advertising ID, government, financial, health): the JSON of the plan\'s verify.capture snippet, which reads radios and boxes from the DOM: aria-checked, checked, aria-selected). apple-app-record and apple-age-rating without text read the App Store Connect API. Returns a per-item match / mismatch table; exit code 1 on a mismatch.',
+    description: 'Read-only check of a filled console form against the config. Pass the page text you read (App Privacy: the App Privacy page\'s innerText, whose Data Types section shows per type "Used for …", linked and tracking; Play Create app: the JSON of the plan\'s capture snippet; Play content rating / target audience: the summary page text; play-app-content: the JSON of the plan\'s capture snippet; Play store settings and the privacy policy: the page text after Save; the other App content cards (ads, sign-in details, advertising ID, government, financial, health): the JSON of the plan\'s verify.capture snippet, which reads radios and boxes from the DOM: aria-checked, checked, aria-selected). apple-app-record and apple-age-rating without text read the App Store Connect API, and so does apple-app-group (the App Groups on the App ID\'s newest readable profile). Returns a per-item match / mismatch table; exit code 1 on a mismatch.',
     props: { form: { type: 'string', enum: CONSOLE_PLAN_FORMS },
-      text: { type: 'string', description: 'The page text (or the capture JSON) of the finished form' } },
-    required: ['form'], args: i => [String(i.form), ...(typeof i.text === 'string' && i.text ? [`--text=${i.text}`] : []), '--json'] },
+      text: { type: 'string', description: 'The page text (or the capture JSON) of the finished form' },
+      bundleId: { type: 'string', description: 'apple-app-group only: check this bundle id (default: every target with App Groups); it reads the API, no text' } },
+    required: ['form'], args: i => [String(i.form), ...(typeof i.text === 'string' && i.text ? [`--text=${i.text}`] : []), ...opt('bundle-id', i.bundleId), '--json'] },
   { name: 'apple_preorder_status', title: 'App Store pre-order status', command: ['apple', 'preorder', 'status'], write: false, network: true,
     description: 'Read-only: per territory whether the app is available, its release date, pre-order on / off and its content status. Enabling or ending a pre-order is an owner-only terminal command.', args: () => ['--json'] },
 ];
diff --git a/docs/api-coverage.md b/docs/api-coverage.md
index 2e79da5..3c3e0e4 100644
--- a/docs/api-coverage.md
+++ b/docs/api-coverage.md
@@ -676,7 +676,7 @@ Specs: Apple [App Store Connect API 4.5.1](https://developer.apple.com/sample-co
 | `bundleIds_deleteInstance` | DELETE | `/v1/bundleIds/{id}` | owner only (typed confirm) |  |
 | `bundleIds_getCollection` | GET | `/v1/bundleIds` | read | apple/adhoc, apple/bundle, apple/signing |
 | `bundleIds_getInstance` | GET | `/v1/bundleIds/{id}` | read |  |
-| `bundleIds_profiles_getToManyRelated` | GET | `/v1/bundleIds/{id}/profiles` | read | apple/adhoc, lib/signing |
+| `bundleIds_profiles_getToManyRelated` | GET | `/v1/bundleIds/{id}/profiles` | read | apple/adhoc, apple/signing, lib/signing |
 | `bundleIds_profiles_getToManyRelationship` | GET | `/v1/bundleIds/{id}/relationships/profiles` | read |  |
 | `bundleIds_updateInstance` | PATCH | `/v1/bundleIds/{id}` | write (dry by default) |  |
 | **certificates** (7) | | | | |
diff --git a/skills/build-and-sign/SKILL.md b/skills/build-and-sign/SKILL.md
index 9845d21..77c0e52 100644
--- a/skills/build-and-sign/SKILL.md
+++ b/skills/build-and-sign/SKILL.md
@@ -19,7 +19,7 @@ when the owner said so for this run). The MCP server offers only `apple_signing_
 1. **Read.** `storebound apple signing status`: is the bundle id registered (else `storebound apple bundle`), which
    capabilities it has vs `apple.signing.capabilities`, the distribution certificates of the team and whether this
    Mac holds a private key for one (a key file in `.storebound/signing/` or an identity in the keychain), App Store
-   profiles per bundle id (the app and every extension / widget / watch app / App Clip found in the Xcode project, or `apple.signing.extensions`; `extraBundleIds` adds more) and whether Xcode has them installed. `signing ensure` registers the extensions' bundle ids, enables the capabilities their entitlements need and (manual style) makes their profiles; an App Group the profile lacks is reported with the developer portal link and steps (the API cannot assign a group; then `signing ensure --refresh-profile`, store-pitfalls 121).
+   profiles per bundle id (the app and every extension / widget / watch app / App Clip found in the Xcode project, or `apple.signing.extensions`; `extraBundleIds` adds more) and whether Xcode has them installed. `signing ensure` registers the extensions' bundle ids, enables the capabilities their entitlements need and (manual style) makes their profiles; an App Group not proven on the App ID (manual: the profile; automatic: the capability and the newest profile the API lists) is reported with the developer portal link and steps (the API cannot assign a group): `storebound console plan apple-app-group --bundle-id <id> --lookup`, drive it, then `signing ensure --refresh-profile` and `console verify apple-app-group` (store-pitfalls 121).
    It also compares three places a capability must be and names what is missing where: the App ID, the config's
    `apple.signing.capabilities` and the iOS project's `.entitlements` (`aps-environment` = PUSH_NOTIFICATIONS,
    `com.apple.developer.game-center` = GAME_CENTER, associated domains, Sign in with Apple, iCloud, app groups, ...;
@@ -61,8 +61,9 @@ when the owner said so for this run). The MCP server offers only `apple_signing_
    `apple build` stops first and names the fixes. `STOREBOUND_KEYCHAIN_PASSWORD=... storebound apple build
    --keychain-unlock` unlocks the login keychain and sets its key partition list (the password is read from the
    environment and never printed); `--keychain <path>` signs with a build keychain (`--keychain <path> --keychain-unlock`
-   unlocks that one; `signing ensure --keychain <path>` imports the key + certificate into it). With manual signing it
-   also stops when a target's App Group is missing from its installed profile (store-pitfalls 121).
+   unlocks that one; `signing ensure --keychain <path>` imports the key + certificate into it). It
+   also stops before the archive when a target's App Group is missing (manual: its installed profile; automatic: the profile
+   the API lists; store-pitfalls 121; `--allow-app-group-gap` overrides).
    - Capacitor: the archive ships the web assets `npx cap sync` copied last. Set `build.prebuild` (e.g.
      `"npm run build && npx cap sync"`; per store `apple.prebuild` / `play.prebuild`) and `apple build` / `play build`
      run it first (once per `flow run`; `--no-prebuild` skips it). Then the copied `public/index.html` must be newer
diff --git a/skills/console-autofill/SKILL.md b/skills/console-autofill/SKILL.md
index 251dac8..29a198d 100644
--- a/skills/console-autofill/SKILL.md
+++ b/skills/console-autofill/SKILL.md
@@ -45,7 +45,7 @@ the UI shows. This is the primary mode.
    `--all` / MCP `all: true` puts every card's steps inline in fix order and ends with the one owner list: tick the
    IARC Terms of Use box (before), Send changes for review (after)), its cards `play-privacy-policy`, `play-ads`, `play-sign-in-details`, `play-advertising-id`,
    `play-government-apps`, `play-financial-features`, `play-health-apps`, and the first production release:
-   `play-production-countries`, `play-production-release` and `play-publish-changes` (managed publishing). `storebound console plan` lists them.
+   `play-production-countries`, `play-production-release` and `play-publish-changes` (managed publishing), and the Apple developer portal step `apple-app-group` (assign an App Group to an extension's App ID, which the API cannot do; its final Save is yours, `buttons.finalByAgent`; `console verify apple-app-group` reads the API). `storebound console plan` lists them.
 2. Send the owner the `ownerBatch` of every form you will fill in ONE message before you start (AGENTS.md rule 5): the
    `ask-owner` answers (write them into the config, so the plan has them; never guess them) and the `before` steps
    (Play content rating: tick the IARC Terms of Use box on the questionnaire's page 1 first; page 1's Next does
diff --git a/skills/store-pitfalls/SKILL.md b/skills/store-pitfalls/SKILL.md
index 95f7ac0..967824b 100644
--- a/skills/store-pitfalls/SKILL.md
+++ b/skills/store-pitfalls/SKILL.md
@@ -1465,7 +1465,6 @@ that fails without the fix (see CONTRIBUTING.md).
   attributes first, `text=` last); `shots capture --dry` prints them per size, `--dry --probe` opens the pages and
   names the MISS with the size and every candidate's match count.
 - **Guard:** `tests/shots-gaps.test.ts`, `tests/browser/feature-fit.browser.ts` (rotate), `cli/shots/selectors.ts`.
-||||||| parent of ae8d773 (apple signing: every signable target (extensions, App Group check), build keychain unlock over SSH, api confirm docs)
 
 ## 121. An app extension (share extension, widget, watch app) could not be signed: bundle id not registered, capabilities missing, App Group not in the profile
 
@@ -1481,14 +1480,21 @@ that fails without the fix (see CONTRIBUTING.md).
   and CODE_SIGN_ENTITLEMENTS of the Release configuration) and what it would register, enable and create; without
   `--dry` it registers the extension bundle ids, enables the capabilities its entitlements need (the entitlement-to-
   capability table; `keychain-access-groups` needs none) and, for manual signing, creates an App Store profile per
-  target. It then decodes each profile and compares its App Groups with the target's entitlements: a gap fails with
+  target. It then compares each target's App Groups with what the API shows (manual signing: the decoded profile; automatic
+  signing: the App ID's APP_GROUPS capability settings and the newest profile the API lists for the bundle id, an
+  Xcode-managed one too; a profile that carries no group, or the capability off, is a gap; nothing readable is
+  "cannot be proven" and only warns with the same steps): a gap fails with
   the developer portal deep link `https://developer.apple.com/account/resources/identifiers/bundleId/edit/<id>` and the
   steps to tick the group (drive it in the signed-in browser; never press Remove / Delete / Revoke). After that
   `storebound apple signing ensure --refresh-profile` makes the profile again (a normal run reuses the active one, so it
-  does not pile up profiles while the group is unassigned). `apple build` (manual signing) stops before the archive on the
-  same gap (`--allow-app-group-gap` overrides). A variable bundle id (set in an xcconfig) is not resolvable: list the
+  does not pile up profiles while the group is unassigned). `apple build` stops before the archive on the same gap in both
+  signing styles (manual: the installed profile; automatic: read through the API; `--allow-app-group-gap` overrides, e.g.
+  when the group was just ticked and Xcode will renew its managed profile at archive time). The agent-first plan is
+  `storebound console plan apple-app-group --bundle-id <id>` (`--lookup` adds the deep link; its Save is the agent's own, not a
+  store submission) and `storebound console verify apple-app-group` re-reads the App ID and the newest profile (after the
+  portal Save the old profiles are invalid: run `signing ensure --refresh-profile` first). A variable bundle id (set in an xcconfig) is not resolvable: list the
   extension in `apple.signing.extensions` (`bundleId`, `capabilities`, `appGroups`), which replaces the detected ones.
 - **Guard:** `cli/lib/targets.ts` (pbxproj targets, App Group comparison, portal link and steps), `discoverTargets` in
   `cli/apple/signing.ts`, `tests/signing-targets.test.ts` (fixture pbxproj with an app, a share extension and app group
-  entitlements, a decoded profile plist, a fake App Store Connect). There is no `console plan` form for the portal page:
-  the steps are in the error and the warning.
+  entitlements, a decoded profile plist, a fake App Store Connect), `cli/lib/console-apple-group-plan.ts` (the plan),
+  `verifyAppGroupsApi` in `cli/lib/console-verify.ts`, `appGroupVerdicts` in `cli/lib/targets.ts` (gap / unproven / ok).
diff --git a/tests/console-play-plans.test.ts b/tests/console-play-plans.test.ts
index c65df5d..1210897 100644
--- a/tests/console-play-plans.test.ts
+++ b/tests/console-play-plans.test.ts
@@ -30,7 +30,7 @@ describe('agent-only Play plans: shape, URLs, never-press lists, the owner batch
     'play-government-apps': 'app-content/government-apps', 'play-financial-features': 'app-content/finance', 'play-health-apps': 'app-content/health', 'play-games-services': 'play-games-services/setup',
     'play-production-countries': 'tracks/production', 'play-production-release': 'tracks/production', 'play-publish-changes': 'publishing',
   };
-  for (const form of PLAN_ONLY_FORM_IDS) {
+  for (const form of PLAN_ONLY_FORM_IDS.filter(f => f.startsWith('play-'))) {
     test(form, () => {
       const p = consolePlan(form, base);
       expect(p).toMatchObject({ form, store: 'play', fillable: true });
diff --git a/tests/signing-targets.test.ts b/tests/signing-targets.test.ts
index 0104925..b3c6bc3 100644
--- a/tests/signing-targets.test.ts
+++ b/tests/signing-targets.test.ts
@@ -9,7 +9,11 @@ import { decide, NOT_A_TTY } from '../cli/api/gate';
 import { USAGE } from '../cli/api';
 import { keychainPassword, KEYCHAIN_PASSWORD_ENV, parseKeychainList, showSecurity, sshBuildRefusal, unlockSteps } from '../cli/lib/keychain';
 import { planProfile, validateSigning } from '../cli/lib/signing';
-import { appGroupGaps, appGroupGapsFor, appGroupSteps, bundleIdPortalUrl, pbxTargets, targetKind } from '../cli/lib/targets';
+import { appGroupGaps, appGroupGapsFor, appGroupSteps, appGroupVerdicts, bundleIdPortalUrl, capabilityGroups, pbxTargets, targetKind } from '../cli/lib/targets';
+import { consolePlan, planText } from '../cli/lib/console-plan';
+import { verifyAppGroupsApi, verifyText } from '../cli/lib/console-verify';
+import { PLAN_FORM_IDS } from '../cli/lib/console-answers';
+import { CONSOLE_PLAN_FORMS, TOOLS, validateInput } from '../cli/mcp-tools';
 import { upsertTiming } from '../cli/lib/upsert';
 import { ascEnv, BASE, capture, mockFetch, project, restore } from './helpers/store-mock';
 
@@ -280,7 +284,8 @@ describe('signing ensure with an extension (fake App Store Connect)', () => {
     const r = await capture(() => signing(p.ctx(['ensure', '--yes', '--no-install']))).catch(e => ({ out: '', err: String(e.message ?? e), exit: 1 }));
     const all = r.out + r.err;
     expect(calls.filter(c => c.method === 'POST' && c.path === '/v1/profiles')).toHaveLength(2);
-    expect(all).toContain('com.example.notes.ShareExt lacks group.com.example.notes');
+    expect(all).toContain('com.example.notes.ShareExt: the newest profile lacks App Group(s) group.com.example.notes');
+    expect(all).toContain('console plan apple-app-group --bundle-id com.example.notes');
     expect(all).toContain('https://developer.apple.com/account/resources/identifiers/bundleId/edit/EXT0001');
     expect(all).toContain('signing ensure --refresh-profile');
   });
@@ -296,6 +301,236 @@ describe('signing ensure with an extension (fake App Store Connect)', () => {
   });
 });
 
+describe('App Group association: verdicts (pure)', () => {
+  const t = [{ bundleId: 'com.example.notes.ShareExt', appGroups: ['group.com.example.notes'] }];
+  const ent = (g: string[]) => ({ 'com.apple.security.application-groups': g });
+
+  test('a readable profile with the group proves it; one without it is a gap with the deep link', () => {
+    expect(appGroupVerdicts(t, () => ({ resourceId: 'EXT0001', capabilityOn: true, profileEnt: ent(['group.com.example.notes']) }))).toEqual({ gaps: [], unproven: [], ok: ['com.example.notes.ShareExt'] });
+    const v = appGroupVerdicts(t, () => ({ resourceId: 'EXT0001', capabilityOn: true, profileEnt: {} }));
+    expect(v.gaps).toHaveLength(1);
+    expect(v.gaps[0]).toMatchObject({ bundleId: 'com.example.notes.ShareExt', groups: ['group.com.example.notes'], url: bundleIdPortalUrl('EXT0001') });
+    expect(v.gaps[0]!.why).toContain('empty application-groups');
+  });
+
+  test('capability settings that name the group prove it without a profile', () => {
+    const settings = [{ key: 'APP_GROUPS', options: [{ key: 'group.com.example.notes' }] }];
+    expect(capabilityGroups(settings, ['group.com.example.notes', 'group.com.example.other'])).toEqual(['group.com.example.notes']);
+    expect(appGroupVerdicts(t, () => ({ resourceId: 'EXT0001', capabilityOn: true, capabilitySettings: settings, profileEnt: null })).ok).toEqual(['com.example.notes.ShareExt']);
+  });
+
+  test('nothing readable is unproven (not a gap); the capability off is a gap even without a profile', () => {
+    const u = appGroupVerdicts(t, () => ({ resourceId: 'EXT0001', capabilityOn: true, capabilitySettings: null, profileEnt: null }));
+    expect([u.gaps.length, u.unproven.length]).toEqual([0, 1]);
+    expect(u.unproven[0]!.why).toContain('cannot be proven');
+    expect(appGroupVerdicts(t, () => null).unproven).toHaveLength(1);
+    const off = appGroupVerdicts(t, () => ({ resourceId: 'EXT0001', capabilityOn: false, profileEnt: null }));
+    expect(off.gaps[0]!.why).toContain('capability is not enabled');
+  });
+
+  test('the steps name the portal path, the deep link, the plan command and the refresh', () => {
+    const s = appGroupSteps({ bundleId: 'com.example.notes.ShareExt', resourceId: 'EXT0001', groups: ['group.com.example.notes'], url: bundleIdPortalUrl('EXT0001') }).join('\n');
+    expect(s).toContain('Certificates, Identifiers & Profiles > Identifiers > com.example.notes.ShareExt > App Groups');
+    expect(s).toContain('Configure > tick group.com.example.notes');
+    expect(s).toContain('Continue > Save');
+    expect(s).toContain('storebound console plan apple-app-group --bundle-id com.example.notes.ShareExt');
+    expect(s).toContain('storebound apple signing ensure --refresh-profile');
+  });
+});
+
+describe('App Group association under automatic signing (fake App Store Connect)', () => {
+  beforeEach(() => { upsertTiming.waitMs = 0; });
+  afterEach(() => { restore(); upsertTiming.waitMs = 3000; });
+
+  const MAIN = 'BUNDLE0001', EXT = 'EXT0001';
+  const cfg = { ...BASE, apple: { bundleId: 'com.example.notes', appId: '6400000101', signing: { style: 'automatic' as const, teamId: 'ABCDE12345', capabilities: ['IN_APP_PURCHASE' as const] } } };
+  const prov = (ent: Record<string, unknown>): string => Buffer.from(`\x30\x82\x01junk${toXmlPlist({ Name: 'x', Entitlements: ent as Record<string, string | string[]> })}\x00`, 'latin1').toString('base64');
+  const managed = (id: string, ent: Record<string, unknown>) => ({ type: 'profiles', id: `MANAGED_${id}`, attributes: { name: `iOS Team Store Provisioning Profile: ${id}`, profileType: 'IOS_APP_STORE', profileState: 'ACTIVE', uuid: `uuid-${id}`, expirationDate: '2099-01-01T00:00:00.000+00:00', profileContent: prov(ent) } });
+  const GROUP = { 'com.apple.security.application-groups': ['group.com.example.notes'] };
+  const page = (data: unknown[], included: unknown[] = []) => ({ data, included, links: { self: '' }, meta: { paging: { total: data.length, limit: 200 } } });
+
+  function api(o: { ext?: unknown[]; main?: unknown[]; extSettings?: unknown; extCaps?: string[] }) {
+    const caps: Record<string, string[]> = { [MAIN]: ['IN_APP_PURCHASE', 'PUSH_NOTIFICATIONS', 'APP_GROUPS'], [EXT]: o.extCaps ?? ['APP_GROUPS', 'ASSOCIATED_DOMAINS'] };
+    const bundle = (id: string, ident: string) => ({ type: 'bundleIds', id, attributes: { identifier: ident, platform: 'IOS', seedId: 'ABCDE12345' }, relationships: { bundleIdCapabilities: { data: caps[id]!.map(t => ({ type: 'bundleIdCapabilities', id: `${id}_${t}` })) } } });
+    const incl = (id: string) => caps[id]!.map(t => ({ type: 'bundleIdCapabilities', id: `${id}_${t}`, attributes: { capabilityType: t, settings: id === EXT && t === 'APP_GROUPS' ? (o.extSettings ?? null) : null } }));
+    return [
+      { match: /^\/v1\/bundleIds\?filter\[identifier\]=com\.example\.notes\.ShareExt/, answer: () => page([bundle(EXT, 'com.example.notes.ShareExt')], incl(EXT)) },
+      { match: /^\/v1\/bundleIds\?filter\[identifier\]=com\.example\.notes&/, answer: () => page([bundle(MAIN, 'com.example.notes')], incl(MAIN)) },
+      { match: /^\/v1\/certificates\?/, answer: page([]) },
+      { match: new RegExp(`^/v1/bundleIds/${EXT}/profiles`), answer: () => page(o.ext ?? []) },
+      { match: new RegExp(`^/v1/bundleIds/${MAIN}/profiles`), answer: () => page(o.main ?? [managed('com.example.notes', GROUP)]) },
+      { match: /^\/v1\/profiles\/MANAGED_[^/]+\/relationships\/certificates/, answer: { errors: [{ status: '404' }] }, status: 404 },
+      { match: /^\/v1\/apps\/6400000101\/gameCenterDetail/, answer: { errors: [{ status: '404' }] }, status: 404 },
+    ] as never;
+  }
+  const ensure = async (argv: string[] = ['ensure', '--yes']) => {
+    const p = project(cfg, files);
+    const calls = mockFetch(api(current));
+    const r = await capture(() => signing(p.ctx(argv))).catch(e => ({ out: '', err: String(e.message ?? e), exit: 1 }));
+    return { r, all: r.out + r.err, calls };
+  };
+  let current: Parameters<typeof api>[0] = {};
+
+  test('the extension\'s newest (Xcode-managed) profile has an empty group list: ensure stops with the steps, the deep link and the plan command', async () => {
+    ascEnv();
+    current = { ext: [managed('com.example.notes.ShareExt', {})] };
+    const { r, all, calls } = await ensure();
+    expect(r.exit).toBe(1);
+    expect(all).toContain('com.example.notes.ShareExt: the newest profile lacks App Group(s) group.com.example.notes');
+    expect(all).toContain('https://developer.apple.com/account/resources/identifiers/bundleId/edit/EXT0001');
+    expect(all).toContain('Configure > tick group.com.example.notes');
+    expect(all).toContain('storebound console plan apple-app-group --bundle-id com.example.notes.ShareExt');
+    expect(all).toContain('storebound apple signing ensure --refresh-profile');
+    expect(calls.filter(c => c.method !== 'GET')).toEqual([]);
+  });
+
+  test('the managed profile carries the group: ensure finishes without a warning', async () => {
+    ascEnv();
+    current = { ext: [managed('com.example.notes.ShareExt', GROUP)] };
+    const { r, all } = await ensure();
+    expect(r.exit).toBeNull();
+    expect(all).not.toContain('cannot be proven');
+    expect(all).toContain('capabilities in step');
+  });
+
+  test('no profile and no capability field to read: ensure warns with the portal steps instead of passing silently', async () => {
+    ascEnv();
+    current = { ext: [] };
+    const { r, all } = await ensure();
+    expect(r.exit).toBeNull();
+    expect(all).toContain('cannot be proven');
+    expect(all).toContain('storebound console plan apple-app-group --bundle-id com.example.notes.ShareExt');
+  });
+
+  test('a capability field that names the group proves it', async () => {
+    ascEnv();
+    current = { ext: [], extSettings: [{ key: 'APP_GROUPS', options: [{ key: 'group.com.example.notes' }] }] };
+    const { all } = await ensure();
+    expect(all).not.toContain('cannot be proven');
+  });
+
+  test('status --json lists the gap and the unproven targets; the main app (profile without groups) is a gap too', async () => {
+    ascEnv();
+    current = { ext: [], main: [managed('com.example.notes', {})] };
+    const p = project(cfg, files);
+    mockFetch(api(current));
+    const r = await capture(() => signing(p.ctx(['status', '--json'])));
+    const j = JSON.parse(r.out.slice(r.out.indexOf('{')));
+    expect(j.appGroupGaps.map((g: { bundleId: string }) => g.bundleId)).toEqual(['com.example.notes']);
+    expect(j.appGroupUnproven.map((g: { bundleId: string }) => g.bundleId)).toEqual(['com.example.notes.ShareExt']);
+  });
+
+  test('apple build stops before the archive on a proven gap, builds on --allow-app-group-gap, and only warns on an unproven one', async () => {
+    ascEnv();
+    const { run: build } = await import('../cli/apple/build');
+    const argv = ['--build-number', '5', '--no-prebuild', '--dry'];
+    // dry: warns (never throws)
+    current = { ext: [managed('com.example.notes.ShareExt', {})] };
+    let p = project(cfg, files);
+    mockFetch(api(current));
+    let r = await capture(() => build(p.ctx(argv)));
+    expect(r.err).toContain('the newest profile lacks App Group(s)');
+    // not dry: early exit, before any xcodebuild step
+    p = project(cfg, files);
+    mockFetch(api(current));
+    r = await capture(() => build(p.ctx(['--build-number', '5', '--no-prebuild']))).catch(e => ({ out: '', err: String(e.message ?? e), exit: 1 }));
+    expect(r.exit).toBe(1);
+    expect(r.err).toContain('stopped before the archive');
+    expect(r.err).toContain('console plan apple-app-group --bundle-id com.example.notes.ShareExt');
+    expect(r.err).toContain('--allow-app-group-gap');
+    // unproven: a warning with the same steps, no throw at the group check
+    current = { ext: [] };
+    p = project(cfg, files);
+    mockFetch(api(current));
+    r = await capture(() => build(p.ctx(argv)));
+    expect(r.err).toContain('cannot be proven');
+  });
+});
+
+describe('console plan / verify apple-app-group', () => {
+  afterEach(() => { restore(); });
+
+  test('the plan: deep link per resource id, the portal labels, the answer sheet per extension, never-press list, Save is the agent\'s', () => {
+    const p = consolePlan('apple-app-group', BASE, { appGroupTargets: [{ bundleId: 'com.example.notes.ShareExt', groups: ['group.com.example.notes'], resourceId: 'EXT0001' }] });
+    expect(p).toMatchObject({ form: 'apple-app-group', store: 'apple', fillable: true });
+    expect(p.start).toEqual({ url: 'https://developer.apple.com/account/resources/identifiers/bundleId/edit/EXT0001', deepLink: true, reach: [] });
+    const text = p.steps.map(s => s.text).join('\n');
+    for (const label of ['App Groups', 'Configure', 'Continue', 'Save', 'Confirm']) expect(text).toContain(label);
+    expect(p.answers.map(a => a.id)).toEqual(['com.example.notes.ShareExt/capability', 'com.example.notes.ShareExt/group.com.example.notes']);
+    expect(p.answers[1]).toMatchObject({ label: 'group.com.example.notes', action: 'tick', control: 'checkbox', status: 'certain' });
+    const inSteps = new Set(p.steps.flatMap(s => s.answers ?? []));
+    for (const a of p.answers) expect(inSteps.has(a.id)).toBe(true);
+    for (const b of ['Remove', 'Delete', 'Revoke', 'Publish', 'Submit']) expect(p.buttons.neverPress).toContain(b);
+    expect(p.buttons.neverPress).not.toContain('Save');
+    expect(p.buttons).toMatchObject({ final: 'Save', finalByAgent: true });
+    for (const b of p.buttons.allowed) expect(b.class).not.toBe('final-submit');
+    expect(p.ownerBatch).toEqual([]);
+    expect(p.verify.command).toBe('storebound console verify apple-app-group --bundle-id com.example.notes.ShareExt');
+    expect(planText(p)).toContain('the agent\'s own, not a store submission');
+    p.steps.forEach((s, i) => expect(s.n).toBe(i + 1));
+  });
+
+  test('without a resource id the plan starts at the Identifiers list and says --lookup; without targets the group ids are asked', () => {
+    const p = consolePlan('apple-app-group', BASE, { appGroupTargets: [{ bundleId: 'com.example.notes.ShareExt', groups: ['group.com.example.notes'] }] });
+    expect(p.start).toMatchObject({ url: 'https://developer.apple.com/account/resources/identifiers/list', deepLink: false });
+    expect(p.start.reach.join(' ')).toContain('--lookup');
+    const none = consolePlan('apple-app-group', BASE);
+    expect(none.answers[0]).toMatchObject({ status: 'ask-owner', value: null });
+    expect(none.askOwner).toHaveLength(1);
+  });
+
+  test('the plan is in the form list and the MCP tools, and the plan command works from the CLI', async () => {
+    expect(PLAN_FORM_IDS).toContain('apple-app-group');
+    expect(CONSOLE_PLAN_FORMS).toContain('apple-app-group');
+    const t = TOOLS.find(x => x.name === 'console_plan')!;
+    expect(validateInput(t, { form: 'apple-app-group', bundleId: 'com.example.notes.ShareExt', lookup: true })).toEqual([]);
+    expect(t.args!({ form: 'apple-app-group', bundleId: 'com.example.notes.ShareExt', groups: 'group.com.example.notes' })).toEqual(['apple-app-group', '--bundle-id', 'com.example.notes.ShareExt', '--groups', 'group.com.example.notes', '--json']);
+    const { run: plan } = await import('../cli/console/plan');
+    const p = project({ ...BASE, apple: { bundleId: 'com.example.notes' } }, files);
+    const r = await capture(() => plan(p.ctx(['apple-app-group', '--json'])));
+    const j = JSON.parse(r.out);
+    expect(j.answers.map((a: { id: string }) => a.id)).toEqual(['com.example.notes/capability', 'com.example.notes/group.com.example.notes', 'com.example.notes.ShareExt/capability', 'com.example.notes.ShareExt/group.com.example.notes']);
+    const one = await capture(() => plan(p.ctx(['apple-app-group', '--bundle-id', 'com.example.notes.ShareExt', '--json'])));
+    expect(JSON.parse(one.out).answers).toHaveLength(2);
+  });
+
+  test('verify reads the API: present groups match, a missing one mismatches, an unprovable one fails', async () => {
+    const targets = [{ bundleId: 'com.example.notes.ShareExt', appGroups: ['group.com.example.notes', 'group.com.example.other'] }];
+    const ok = verifyAppGroupsApi(targets, { gaps: [], unproven: [], ok: ['com.example.notes.ShareExt'] });
+    expect([ok.ok, ok.matched, ok.mismatches]).toEqual([true, 2, 0]);
+    const gap = verifyAppGroupsApi(targets, { gaps: [{ bundleId: 'com.example.notes.ShareExt', resourceId: 'EXT0001', groups: ['group.com.example.other'], url: null, why: 'the newest profile lacks it' }], unproven: [], ok: [] });
+    expect([gap.ok, gap.matched, gap.mismatches]).toEqual([false, 1, 1]);
+    expect(gap.rows.find(r => r.status === 'mismatch')!.item).toContain('group.com.example.other');
+    const un = verifyAppGroupsApi(targets, { gaps: [], unproven: [{ bundleId: 'com.example.notes.ShareExt', resourceId: null, groups: ['group.com.example.notes', 'group.com.example.other'], url: null }], ok: [] });
+    expect(un.ok).toBe(false);
+    expect(un.rows[0]!.note).toContain('signing ensure --refresh-profile');
+    expect(() => verifyText('apple-app-group', BASE, 'x')).toThrow('reads the App Store Connect API');
+  });
+
+  test('console verify apple-app-group end to end with a fake API: missing then present after the refreshed profile', async () => {
+    ascEnv();
+    const { run: verify } = await import('../cli/console/verify');
+    const prov = (ent: Record<string, unknown>): string => Buffer.from(`\x30\x82\x01junk${toXmlPlist({ Name: 'x', Entitlements: ent as Record<string, string | string[]> })}\x00`, 'latin1').toString('base64');
+    const prof = (ent: Record<string, unknown>) => ({ type: 'profiles', id: 'P1', attributes: { name: 'p', profileType: 'IOS_APP_STORE', profileState: 'ACTIVE', uuid: 'u', expirationDate: '2099-01-01T00:00:00.000+00:00', profileContent: prov(ent) } });
+    const page = (data: unknown[], included: unknown[] = []) => ({ data, included, links: { self: '' }, meta: { paging: { total: data.length, limit: 200 } } });
+    const run = async (ent: Record<string, unknown>) => {
+      mockFetch([
+        { match: /^\/v1\/bundleIds\?filter\[identifier\]=com\.example\.notes\.ShareExt/, answer: page([{ type: 'bundleIds', id: 'EXT0001', attributes: { identifier: 'com.example.notes.ShareExt', platform: 'IOS' }, relationships: { bundleIdCapabilities: { data: [{ type: 'bundleIdCapabilities', id: 'c1' }] } } }], [{ type: 'bundleIdCapabilities', id: 'c1', attributes: { capabilityType: 'APP_GROUPS', settings: null } }]) },
+        { match: /^\/v1\/bundleIds\/EXT0001\/profiles/, answer: page([prof(ent)]) },
+      ] as never);
+      const p = project({ ...BASE, apple: { bundleId: 'com.example.notes', appId: '6400000101' } }, files);
+      return capture(() => verify(p.ctx(['apple-app-group', '--bundle-id', 'com.example.notes.ShareExt'])));
+    };
+    const before = await run({});
+    expect(before.exit).toBe(1);
+    expect(before.out).toContain('mismatch');
+    restore(); ascEnv();
+    const after = await run({ 'com.apple.security.application-groups': ['group.com.example.notes'] });
+    expect(after.exit).toBeNull();
+    expect(after.out).toContain('match');
+  });
+});
+
 describe('apple build over SSH: the keychain fixes', () => {
   test('the refusal names the GUI session, the CI runner and the keychain flags', () => {
     const m = sshBuildRefusal('this is an SSH session');

From 2c5e30090ff1ba11f82ef3befd52f5347b846049 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Sun, 25 Oct 2026 22:50:52 +0700
Subject: [PATCH 034/126] credential broker: Play tokens from POST
 /api/google/token (cached, single flight, local key fallback), grants and
 APIs per package in validate, Play write preflight, apps check and the
 desktop Accounts view; Google 403 names the API or grant, no retry

---
 CHANGELOG.md                          |   1 +
 apps/desktop/src/i18n/en.ts           |   7 +
 apps/desktop/src/i18n/tr.ts           |   7 +
 apps/desktop/src/screens/Accounts.tsx |  17 ++
 apps/desktop/src/styles/accounts.css  |   2 +
 cli/accounts.ts                       |   4 +-
 cli/api/client.ts                     |   9 +-
 cli/apps.ts                           |  75 ++++--
 cli/doctor.ts                         |  23 +-
 cli/index.ts                          |  13 +
 cli/lib/accounts.ts                   |  14 +-
 cli/lib/broker.ts                     | 327 +++++++++++++++++++++++++
 cli/lib/credentials.ts                |   8 +-
 cli/lib/desktop-protocol.ts           |  16 ++
 cli/lib/google-access.ts              |  34 +++
 cli/lib/google-auth.ts                |  98 +++++++-
 cli/play/client.ts                    |  11 +-
 cli/play/games.ts                     |  22 +-
 cli/play/google.ts                    |   6 +-
 cli/validate.ts                       |  42 +++-
 docs/README.md                        |   2 +
 docs/credential-broker.md             |  85 +++++++
 docs/getting-started.md               |   4 +
 docs/pitfalls.md                      |   1 +
 skills/store-pitfalls/SKILL.md        |  17 ++
 tests/credential-broker.test.ts       | 339 ++++++++++++++++++++++++++
 tests/helpers/preload.ts              |   4 +
 27 files changed, 1145 insertions(+), 43 deletions(-)
 create mode 100644 cli/lib/broker.ts
 create mode 100644 cli/lib/google-access.ts
 create mode 100644 docs/credential-broker.md
 create mode 100644 tests/credential-broker.test.ts

diff --git a/CHANGELOG.md b/CHANGELOG.md
index e4d8c7c..2b7f477 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -5,6 +5,7 @@
 
 - App Groups fail early under automatic signing too: `apple signing status` / `ensure` and `apple build` read the App ID's APP_GROUPS capability settings and the newest profile the API lists for each bundle id (an Xcode-managed one too) and compare it with the target's `com.apple.security.application-groups`. A profile without the group (or the capability off) stops `signing ensure` and `apple build` before the archive with the exact portal steps (Certificates, Identifiers & Profiles > Identifiers > the ID > App Groups > Configure > tick the group > Continue > Save), the deep link `.../identifiers/bundleId/edit/<resource id>`, the plan command and `signing ensure --refresh-profile`; a group nothing can prove only warns with the same steps. `apple build --allow-app-group-gap` overrides.
 - New `storebound console plan apple-app-group [--bundle-id <id>] [--groups group.a,group.b] [--lookup]` (MCP `console_plan`: `bundleId`, `groups`, `lookup`): the agent-first developer portal plan to assign an App Group to an extension's App ID (start URL per bundle id resource id, portal labels, answer sheet per extension, never-press list: Remove / Delete / Revoke). Its final Save is the agent's own (`buttons.finalByAgent`: a capability edit, not a store submission). `console verify apple-app-group` (MCP `console_verify`, API only) re-reads the App ID and the newest profile and fails while a group is missing or cannot be proven.
+- Google access through a credential broker (`~/.storebound/broker.json`: `url`, `apiKeyFile`; env `STOREBOUND_BROKER_URL` / `STOREBOUND_BROKER_KEY_FILE`): Play tokens come from the broker's `POST /api/google/token` (in memory until 5 minutes before expiry, one request per account and scope, never logged; ya29. tokens and the API key redacted in errors), the local service account key stays the fallback when the broker does not answer or does not know the account; a broker that refuses the API key stops without retry. `PLAY_SERVICE_ACCOUNT_EMAIL` names the account (env, profile, project file); a profile opts out with `"broker": false`. The key file must be mode 600 on macOS / Linux. Play write commands read the package's Play permissions and enabled APIs from the broker first and stop before any Play call on a missing one (`CAN_MANAGE_TRACK_APKS`, `CAN_MANAGE_PUBLIC_LISTING`, `CAN_MANAGE_ORDERS`, `CAN_MANAGE_APP_CONTENT`, the Games Configuration API) with the exact permission or API and its link; `validate` lists them (gaps are blockers, SDK config drift a warning) and `--json` carries `credentials.play.source`; `doctor`, `accounts` and `apps check` / the desktop's Accounts view say whether tokens come from the broker or the key file. A Google 403 SERVICE_DISABLED / PERMISSION_DENIED in the Play client names the API or grant with its fix link and is never retried (pitfall 122, docs/credential-broker.md).
 
 ## 0.8.49 · 2026-10-25
 
diff --git a/apps/desktop/src/i18n/en.ts b/apps/desktop/src/i18n/en.ts
index b93dd8c..b34f6bb 100644
--- a/apps/desktop/src/i18n/en.ts
+++ b/apps/desktop/src/i18n/en.ts
@@ -2085,6 +2085,13 @@ export const en = {
   'cm.ignoredNoReads': "Ignored apps are not read",
   'cm.ignore': "Ignore",
   'acct.devId': 'Play developer id {id}',
+  'acct.viaBroker': 'tokens from the credential broker',
+  'acct.viaFile': 'local key file',
+  'acct.grantsTitle': 'Play permissions on the credential broker',
+  'acct.grantsOk': 'everything storebound needs',
+  'acct.grantsMissing': 'missing: {list}',
+  'acct.grantsNone': 'no permission data',
+  'acct.notRegistered': 'not registered on the broker',
   'acct.noDevId': 'no Play developer id',
   'acct.devIdLabel': 'Play developer account id',
   'acct.devIdHint': "The digits after /developers/ in the Play Console address. With it, Play Console links open each app's own page; the CLI uses it too.",
diff --git a/apps/desktop/src/i18n/tr.ts b/apps/desktop/src/i18n/tr.ts
index ec1d1ac..03dc74d 100644
--- a/apps/desktop/src/i18n/tr.ts
+++ b/apps/desktop/src/i18n/tr.ts
@@ -2087,6 +2087,13 @@ export const tr: Record<keyof typeof en, string> = {
   'cm.ignoredNoReads': "Yok sayılan uygulamalar okunmaz",
   'cm.ignore': "Yok say",
   'acct.devId': 'Play geliştirici kimliği {id}',
+  'acct.viaBroker': 'jetonlar kimlik aracısından',
+  'acct.viaFile': 'yerel anahtar dosyası',
+  'acct.grantsTitle': 'Kimlik aracısındaki Play izinleri',
+  'acct.grantsOk': 'storebound için gereken her şey var',
+  'acct.grantsMissing': 'eksik: {list}',
+  'acct.grantsNone': 'izin bilgisi yok',
+  'acct.notRegistered': 'aracıda kayıtlı değil',
   'acct.noDevId': 'Play geliştirici kimliği yok',
   'acct.devIdLabel': 'Play geliştirici hesabı kimliği',
   'acct.devIdHint': 'Play Console adresinde /developers/ sonrasındaki rakamlar. Girilince Play Console bağlantıları her uygulamanın kendi sayfasını açar; CLI de kullanır.',
diff --git a/apps/desktop/src/screens/Accounts.tsx b/apps/desktop/src/screens/Accounts.tsx
index 7dc2f89..9a897b0 100644
--- a/apps/desktop/src/screens/Accounts.tsx
+++ b/apps/desktop/src/screens/Accounts.tsx
@@ -92,6 +92,7 @@ function AccountRow({ a, busy, setBusy, onError }: { a: Account; busy: string |
             {used ? ` · ${t('acct.folders', { count: used })}` : ''}
             {a.kind === 'play' && (a.developerId ? <> · <span className="mono-id selectable" title={t('acct.devIdHint')}>{t('acct.devId', { id: a.developerId })}</span></> : <> · <span title={t('acct.devIdHint')}>{t('acct.noDevId')}</span></>)}
             {check?.principal ? <> · <span className="mono-id selectable">{check.principal}</span></> : null}
+            {a.kind === 'play' && check?.source ? ` · ${check.source === 'broker' ? t('acct.viaBroker') : t('acct.viaFile')}` : ''}
           </div>
         </div>
         <div className="actions">
@@ -122,6 +123,22 @@ function AccountRow({ a, busy, setBusy, onError }: { a: Account; busy: string |
           </Notice>
         </div>
       )}
+      {check?.grants && check.grants.length > 0 && (
+        <div className="acct-fix acct-grants">
+          <div className="small strong">{t('acct.grantsTitle')}</div>
+          <ul className="small">
+            {check.grants.map(g => (
+              <li key={g.packageName}>
+                <span className="mono-id selectable">{g.packageName}</span>{': '}
+                {!g.registered ? <span className="muted">{t('acct.notRegistered')}</span>
+                  : g.missing.length ? <Chip tone="warn">{t('acct.grantsMissing', { list: g.missing.join(', ') })}</Chip>
+                  : g.grants ? <Chip tone="ok">{t('acct.grantsOk')}</Chip> : <span className="muted">{t('acct.grantsNone')}</span>}
+                {g.grants && g.grants.length > 0 && <span className="muted mono-id" title={(g.enabledApis ?? []).join(', ')}>{` ${g.grants.join(', ')}`}</span>}
+              </li>
+            ))}
+          </ul>
+        </div>
+      )}
       {h?.error && <div className="acct-fix"><Notice tone="bad">{h.error}</Notice></div>}
     </div>
   );
diff --git a/apps/desktop/src/styles/accounts.css b/apps/desktop/src/styles/accounts.css
index 251f916..38059de 100644
--- a/apps/desktop/src/styles/accounts.css
+++ b/apps/desktop/src/styles/accounts.css
@@ -24,3 +24,5 @@
 .scr-accounts .acct-fix { padding: 0 16px 16px; }
 .scr-accounts .acct-add { display: grid; grid-template-columns: repeat(auto-fit, minmax(300px, 1fr)); gap: 18px; align-items: start; }
 .scr-accounts .acct-add .form { gap: 14px; }
+.scr-accounts .acct-grants ul { margin: 4px 0 0; padding-left: 18px; display: grid; gap: 2px; }
+.scr-accounts .acct-grants li { overflow-wrap: anywhere; }
diff --git a/cli/accounts.ts b/cli/accounts.ts
index e95199a..d5b8403 100644
--- a/cli/accounts.ts
+++ b/cli/accounts.ts
@@ -22,6 +22,7 @@ import { resolve } from 'node:path';
 import type { Args } from './lib/args';
 import { applyImport, describeProfiles, planImport, setPlayDeveloperId } from './lib/accounts';
 import { activeProfile, defaultPointer, defaultProfile, profileDir, setDefaultPointer } from './lib/credentials';
+import { brokerConfig } from './lib/broker';
 import { confirm, type Ctx } from './lib/ctx';
 import { textTable } from './lib/table';
 import { printJson } from './lib/log';
@@ -42,9 +43,10 @@ export async function run(args: Args): Promise<void> {
       console.log(`no store accounts on this machine yet (${tilde(profileDir())}).\n  From a project that has its keys in .storebound/credentials.json: storebound accounts import\n  Or add them in the desktop app (Accounts).`);
       return;
     }
-    console.log(textTable(['profile', 'App Store Connect', 'Google Play', 'Play developer id', 'vendor no.', 'default'], rows.map(r => [r.profile, r.error ? `unreadable: ${r.error}` : r.apple ? 'key' : '-', r.play ? r.playAccount ?? 'service account' : '-', r.playDeveloperId ?? '-', r.vendor ? 'yes' : '-', r.profile === def ? (def === pointer ? 'yes (accounts default)' : 'yes') : ''])));
+    console.log(textTable(['profile', 'App Store Connect', 'Google Play', 'Play via', 'Play developer id', 'vendor no.', 'default'], rows.map(r => [r.profile, r.error ? `unreadable: ${r.error}` : r.apple ? 'key' : '-', r.play ? r.playAccount ?? 'service account' : '-', r.playSource === 'broker' ? 'credential broker' : r.playSource === 'file' ? 'key file' : '-', r.playDeveloperId ?? '-', r.vendor ? 'yes' : '-', r.profile === def ? (def === pointer ? 'yes (accounts default)' : 'yes') : ''])));
     if (pointer && pointer !== def) console.log(`note: the default pointer names "${pointer}", which is not a profile here (storebound accounts default <profile>)`);
     console.log(`\n${tilde(profileDir())}: shared by the CLI and the desktop app`);
+    try { const b = brokerConfig(); if (b) console.log(`credential broker: ${b.url} (${b.from === 'env' ? 'STOREBOUND_BROKER_URL' : tilde(b.from)}); a profile with "broker": false keeps its key file`); } catch (e) { console.log(`credential broker: not usable: ${(e as Error).message}`); }
     console.log(active ? `this folder uses "${active.name}" (${{ env: '--account / STOREBOUND_PROFILE', config: 'account in the config', project: '"account" in .storebound/credentials.json', default: 'the default profile' }[active.from]})` : 'this folder uses no profile (several profiles and no default: storebound accounts default <profile>, or accounts use <profile> in the project)');
     return;
   }
diff --git a/cli/api/client.ts b/cli/api/client.ts
index 17da151..b5d9584 100644
--- a/cli/api/client.ts
+++ b/cli/api/client.ts
@@ -354,13 +354,12 @@ export async function authFor(store: Store, root: string): Promise<Auth> {
     const { jwt } = ascJwt(root);
     return () => 'Bearer ' + jwt();
   }
-  const { playServiceAccount } = await import('../lib/credentials');
-  const { tokenSource } = await import('../lib/google-auth');
-  const sa = playServiceAccount(root);
-  const sources = new Map<string, () => Promise<string>>();
+  const { PLAY_SCOPE, playToken } = await import('../lib/google-auth');
+  // the credential broker when it has the scope, else the local key; throws now when neither is there
+  const sources = new Map<string, () => Promise<string>>([[PLAY_SCOPE, playToken(root, PLAY_SCOPE)]]);
   return async req => {
     const scope = PLAY_APIS[req.op.api as keyof typeof PLAY_APIS].scope;
-    if (!sources.has(scope)) sources.set(scope, tokenSource(sa, scope));
+    if (!sources.has(scope)) sources.set(scope, playToken(root, scope));
     return 'Bearer ' + (await sources.get(scope)!());
   };
 }
diff --git a/cli/apps.ts b/cli/apps.ts
index 3260a47..ec0c4fb 100644
--- a/cli/apps.ts
+++ b/cli/apps.ts
@@ -14,9 +14,10 @@
 //                                                                    desktop shows it read-only ("no local project");
 //                                                                    apps remove apple:<id> | <entry id> takes it out
 import type { Args } from './lib/args';
-import { ascKey, playServiceAccount } from './lib/credentials';
-import type { AccountCheck, AppsListResult } from './lib/desktop-protocol';
-import { PLAY_SCOPE, REPORTING_SCOPE, tokenSource } from './lib/google-auth';
+import { ascKey } from './lib/credentials';
+import type { AccountCheck, AppsListResult, BrokerGrant } from './lib/desktop-protocol';
+import { PLAY_SCOPE, playCredentials, playToken, REPORTING_SCOPE } from './lib/google-auth';
+import { brokerConfig, brokerPlayInfo, BrokerRefused, BrokerUnavailable, BrokerUnknownAccount, enabledApisOf, grantsOf, type PlayNeed, playGaps } from './lib/broker';
 import { errorBody } from './lib/http';
 import { done, log, printJson, warn } from './lib/log';
 import { appleCheck, type Bytes, dataUrl, type Get, isServiceDisabled, listAppleApps, listPlayApps, localPlayApps, MAX_ICON_BYTES, playCheck } from './lib/store-apps';
@@ -39,8 +40,8 @@ function stores(args: Args, root: string): Store[] {
   // every store whose credentials are set (env, or .storebound/credentials.json in this folder)
   const out: Store[] = [];
   try { ascKey(root); out.push('apple'); } catch { /* not set */ }
-  try { playServiceAccount(root); out.push('play'); } catch { /* not set */ }
-  if (!out.length) throw new Error('no store credentials: set ASC_KEY_ID + ASC_ISSUER_ID + ASC_P8 and / or PLAY_SERVICE_ACCOUNT (env or .storebound/credentials.json)');
+  if (playCredentials(root).source) out.push('play');
+  if (!out.length) throw new Error('no store credentials: set ASC_KEY_ID + ASC_ISSUER_ID + ASC_P8 and / or PLAY_SERVICE_ACCOUNT (env or .storebound/credentials.json), or a credential broker (~/.storebound/broker.json)');
   return out;
 }
 
@@ -71,7 +72,7 @@ function googleGet(token: () => Promise<string>, base: string): Get {
 
 /** Play icon of one package: an edit is opened, the default language's icon listed, and the edit deleted (never committed). */
 function playIcon(root: string): (pkg: string) => Promise<string | null> {
-  const token = tokenSource(playServiceAccount(root), PLAY_SCOPE);
+  const token = playToken(root, PLAY_SCOPE);
   const API = 'https://androidpublisher.googleapis.com/androidpublisher/v3/applications/';
   const call = async (method: string, url: string) => {
     const r = await fetch(url, { method, headers: { Authorization: 'Bearer ' + (await token()) } });
@@ -96,7 +97,7 @@ function playIcon(root: string): (pkg: string) => Promise<string | null> {
   };
 }
 
-const principalOf = (root: string): string | null => { try { return playServiceAccount(root).client_email; } catch { return null; } };
+const principalOf = (root: string): string | null => playCredentials(root).principal;
 
 export async function listApps(store: Store, root: string, icons: boolean): Promise<AppsListResult> {
   const at = new Date().toISOString();
@@ -104,15 +105,15 @@ export async function listApps(store: Store, root: string, icons: boolean): Prom
     const r = await listAppleApps(await appleGet(root), { icons, bytes });
     return { store: 'ios', ...r, at };
   }
-  const sa = playServiceAccount(root);
+  const token = playToken(root, REPORTING_SCOPE);
   try {
-    const r = await listPlayApps(googleGet(tokenSource(sa, REPORTING_SCOPE), REPORTING_API), icons ? { icon: playIcon(root) } : {});
+    const r = await listPlayApps(googleGet(token, REPORTING_API), icons ? { icon: playIcon(root) } : {});
     return { store: 'android', ...r, at };
   } catch (e) {
     // the Reporting API is off in the service account's Cloud project: a clear finding with the exact link, and the
     // Play apps this machine knows (app folders' configs, store-only entries) instead of failing the whole list
     if (!isServiceDisabled(e)) throw e;
-    const c = playCheck(sa.client_email, { error: e });
+    const c = playCheck(token.principal(), { error: e });
     const known = knownPlayPackages(root);
     return { store: 'android', apps: localPlayApps(known), at,
       warnings: [`${c.message} Fix: ${c.fix}`, known.length ? `listed ${known.length} Play app(s) from this machine's app folders and store-only entries instead (not read from Google Play)` : 'no Play app folders on this machine to list instead (storebound apps add)'] };
@@ -152,12 +153,56 @@ export async function checkAccount(store: Store, root: string): Promise<AccountC
     } catch (e) { return appleCheck({ error: e }); }
   }
   let principal: string | null = null;
+  let source: AccountCheck['source'] = null;
   try {
-    const sa = playServiceAccount(root);
-    principal = sa.client_email;
-    const page = await googleGet(tokenSource(sa, REPORTING_SCOPE), REPORTING_API)('/apps:search?pageSize=1000');
-    return playCheck(principal, { apps: (page.apps ?? []).length });
-  } catch (e) { return playCheck(principal, { error: e }); }
+    const creds = playCredentials(root);
+    principal = creds.principal;
+    source = creds.source;
+    if (creds.broker?.error) throw new BrokerRefused(creds.broker.error, 0);
+    if (source === 'broker') {
+      // proves the broker: one androidpublisher token (it may fall back to the local key, then source says "file")
+      const t = playToken(root, PLAY_SCOPE);
+      await t();
+      source = t.source();
+      principal = t.principal() ?? principal;
+    }
+    let apps: number | null = null;
+    let reporting: ReturnType<typeof playToken> | null = null;
+    try { reporting = playToken(root, REPORTING_SCOPE); } catch (e) { if (source !== 'broker') throw e; }
+    if (reporting) apps = ((await googleGet(reporting, REPORTING_API)('/apps:search?pageSize=1000')).apps ?? []).length;
+    const c = apps === null
+      ? { store: 'android' as const, status: 'ok' as const, principal, apps: null, message: `The credential broker hands out Play tokens for ${principal ?? 'the service account'} (the app count needs the Reporting API scope, which the broker does not hand out).`, fix: null, docs: null }
+      : playCheck(principal, { apps });
+    return { ...c, source, ...(await brokerGrants(root, principal)) };
+  } catch (e) {
+    if (e instanceof BrokerRefused || e instanceof BrokerUnavailable || e instanceof BrokerUnknownAccount)
+      return { store: 'android', status: 'error', principal, apps: null, source, message: (e as Error).message, fix: 'Check the credential broker: ~/.storebound/broker.json (url, apiKeyFile) and the scopes of the API key (google:read, google:token).', docs: null };
+    return { ...playCheck(principal, { error: e }), source };
+  }
+}
+
+const ALL_NEEDS: PlayNeed[] = ['upload', 'listing', 'iap', 'declarations', 'reviews'];
+
+/** With a credential broker: the Play permissions and enabled APIs it lists for the Play apps this machine knows (at
+ *  most 25, 4 reads at a time), for the account check (CLI and the desktop's Accounts view). */
+async function brokerGrants(root: string, principal: string | null): Promise<{ grants?: BrokerGrant[] }> {
+  let cfg;
+  try { cfg = brokerConfig(root); } catch { return {}; }
+  if (!cfg) return {};
+  const pkgs = knownPlayPackages(root).slice(0, 25).map(k => k.packageName);
+  const out: (BrokerGrant | null)[] = new Array(pkgs.length).fill(null);
+  let next = 0;
+  await Promise.all(Array.from({ length: Math.min(4, pkgs.length) }, async () => {
+    while (next < pkgs.length) {
+      const i = next++, pkg = pkgs[i]!;
+      const r = await brokerPlayInfo(cfg, pkg);
+      if (r.kind === 'ok') {
+        if (principal && r.info.account && r.info.account !== principal) continue;
+        out[i] = { packageName: pkg, registered: true, grants: grantsOf(r.info), enabledApis: enabledApisOf(r.info), missing: playGaps(r.info, ALL_NEEDS).map(g => g.name) };
+      } else if (r.kind === 'not-registered') out[i] = { packageName: pkg, registered: false, grants: null, enabledApis: null, missing: [] };
+    }
+  }));
+  return { grants: out.filter((g): g is BrokerGrant => !!g) };
 }
 
 const tilde = (p: string) => (process.env.HOME && p.startsWith(process.env.HOME) ? '~' + p.slice(process.env.HOME.length) : p);
diff --git a/cli/doctor.ts b/cli/doctor.ts
index 612d04f..cfd4830 100644
--- a/cli/doctor.ts
+++ b/cli/doctor.ts
@@ -9,7 +9,8 @@ import { join, resolve } from 'node:path';
 import pkg from '../package.json' with { type: 'json' };
 import type { Args } from './lib/args';
 import { CONFIG_NAMES } from './lib/config';
-import { credentialStatus } from './lib/credentials';
+import { credentialStatus, maskUser } from './lib/credentials';
+import { type PlayCredentials, playCredentials } from './lib/google-auth';
 import { log, printJson } from './lib/log';
 import { textTable } from './lib/table';
 import { androidSdk, type AndroidSdkLookup, detectTools, findPlaywright, installCommands, type ToolStatus } from './lib/tools';
@@ -38,6 +39,9 @@ export interface DoctorResult {
   /** Store credentials of the project folder (env, .storebound/credentials.json, profile): set, missing or
    *  placeholder (a template value, treated as missing). Never the values. */
   credentials: { key: string; status: 'set' | 'missing' | 'placeholder' }[];
+  /** Where Play tokens come from: the credential broker (~/.storebound/broker.json) or the local key file; the
+   *  e-mail masked, never a key. */
+  play: PlayCredentials;
   /** macOS: a non-Apple rsync first on PATH (Homebrew 3.x breaks Xcode's exportArchive, pitfall 54), else null. */
   foreignRsync: string | null;
 }
@@ -50,10 +54,24 @@ export function doctor(cwd: string, env: Record<string, string | undefined> = pr
     usedFor: 'screenshot renders and web captures from a terminal (the desktop app brings its own)', install: pw ? [] : installCommands('playwright'), url: 'https://playwright.dev/docs/intro' });
   const project = CONFIG_NAMES.some(n => existsSync(join(cwd, n))) ? cwd : null;
   const sdk = androidSdk([join(cwd, 'android'), cwd], env);
-  return { storebound: pkg.version, bun: rt.bunVersion, runtime: `${rt.runtime.name} ${rt.runtime.version}`, platform: `${process.platform}-${process.arch}`, project, tools, missing: tools.filter(t => !t.found || t.status === 'outdated').length, androidSdk: sdk, credentials: credentialStatus(cwd),
+  return { storebound: pkg.version, bun: rt.bunVersion, runtime: `${rt.runtime.name} ${rt.runtime.version}`, platform: `${process.platform}-${process.arch}`, project, tools, missing: tools.filter(t => !t.found || t.status === 'outdated').length, androidSdk: sdk, credentials: credentialStatus(cwd), play: maskedPlay(cwd),
     foreignRsync: process.platform === 'darwin' ? foreignRsync(env.PATH) : null };
 }
 
+function maskedPlay(cwd: string): PlayCredentials {
+  const p = playCredentials(cwd);
+  return { ...p, principal: p.principal ? maskUser(p.principal) : null };
+}
+
+/** The one line about Play access: which source, and the broker's state. */
+export function playLine(p: PlayCredentials): string {
+  const who = p.principal ? ` for ${p.principal}` : '';
+  if (p.source === 'broker') return `Play: tokens from the credential broker ${p.broker!.url}${who}${p.local ? ' (local key as fallback)' : ''}`;
+  const broken = p.broker?.error ? ` · credential broker not usable: ${p.broker.error}` : '';
+  if (p.source === 'file') return `Play: local service account key${who}${broken}`;
+  return `Play: no service account key and no credential broker${broken}`;
+}
+
 /** One install command of a tool, run only with --yes; sudo / admin commands are printed, never run. */
 export function installPlan(r: DoctorResult, id: string, platform: NodeJS.Platform = process.platform): { tool: DoctorRow; command: string | null; runnable: boolean } {
   const tool = r.tools.find(t => t.id === id);
@@ -95,6 +113,7 @@ export async function run(args: Args): Promise<void> {
     : `Android SDK: not found (play build needs it). Checked: ${r.androidSdk.checked.join('; ')}`);
   const set = r.credentials.filter(c => c.status === 'set').map(c => c.key), ph = r.credentials.filter(c => c.status === 'placeholder').map(c => c.key);
   log('doctor', `credentials: ${set.length ? set.join(', ') : 'none set'}${ph.length ? ` · placeholders (treated as missing): ${ph.join(', ')}` : ''}`);
+  log('doctor', playLine(r.play));
   if (r.foreignRsync) log('doctor', `rsync: ${r.foreignRsync} is first on PATH and breaks Xcode exportArchive ("Copy failed") outside storebound; storebound apple build puts /usr/bin first. Fix for everything else: brew unlink rsync, or put /usr/bin before it`);
   const missing = r.tools.filter(t => !t.found || t.status === 'outdated');
   if (!missing.length) { log('doctor', 'everything storebound can use is here'); return; }
diff --git a/cli/index.ts b/cli/index.ts
index b1e1386..fe3c5a7 100755
--- a/cli/index.ts
+++ b/cli/index.ts
@@ -105,6 +105,7 @@ async function main(): Promise<void> {
         const loaded = await loadConfig(args.get('config'));
         const { acquireLock, lockKeys } = await import('./lib/lock');
         for (const k of lockKeys(key, args, loaded.config)) acquireLock(loaded.root, k, argv.filter(x => x !== '--force-unlock').join(' '), { force: args.has('force-unlock') });
+        await playPreflight(key, loaded, args);
         await (await COMMANDS[key]![0]()).run({ loaded, args });
       };
       await (args.has('json') ? withJsonOutput(go) : go());
@@ -119,8 +120,20 @@ async function main(): Promise<void> {
     // one writer per app and store (cli/lib/lock.ts): dry runs and reads take no lock
     const { acquireLock, lockKeys } = await import('./lib/lock');
     for (const k of lockKeys(key, args, loaded.config)) acquireLock(loaded.root, k, argv.filter(x => x !== '--force-unlock').join(' '), { force: args.has('force-unlock') });
+    await playPreflight(key, loaded, args);
     await (await COMMANDS[key]![0]()).run({ loaded, args });
   });
 }
 
+/** Play commands with a credential broker: the package's grants and APIs are read first, and a missing permission or a
+ *  disabled API stops the command before any Play call (a dry run or a read only warns). cli/lib/broker.ts. */
+async function playPreflight(key: string, loaded: { root: string; config: { play?: { packageName: string } } }, args: ReturnType<typeof parseArgs>): Promise<void> {
+  if (!key.startsWith('play ')) return;
+  const b = await import('./lib/broker');
+  if (!b.COMMAND_NEEDS[key]) return;
+  const { warn } = await import('./lib/log');
+  const read = args.has('dry') || ['status', 'pull'].includes(String(args._[0] ?? ''));
+  await b.playPreflight(key, loaded.root, loaded.config.play?.packageName, { dry: read, warn: m => warn('preflight', m) });
+}
+
 main().catch(e => { console.error(`\nerror: ${(e as Error).message}`); process.exit(1); });
diff --git a/cli/lib/accounts.ts b/cli/lib/accounts.ts
index 940e340..2c57242 100644
--- a/cli/lib/accounts.ts
+++ b/cli/lib/accounts.ts
@@ -9,6 +9,7 @@ import { chmodSync, copyFileSync, existsSync, mkdirSync, readFileSync, renameSyn
 import { homedir } from 'node:os';
 import { isAbsolute, join, resolve } from 'node:path';
 import { maskUser, PROFILE_KEYS, PROFILE_RE, profileDir, profileEnv, profileNames } from './credentials';
+import { brokerConfig, profileBrokerOff } from './broker';
 
 export type Kind = 'apple' | 'play';
 /** The store keys that move to a profile (one developer account's), never the app's own ones. */
@@ -36,12 +37,19 @@ export function profileIdentity(name: string): Identity {
 }
 
 /** One line per profile for `storebound accounts`: stores, masked Play e-mail. No key ids, no values. */
-export function describeProfiles(): { profile: string; apple: boolean; play: boolean; playAccount: string | null; vendor: boolean; playDeveloperId?: string | null; error?: string }[] {
+export function describeProfiles(): { profile: string; apple: boolean; play: boolean; playAccount: string | null; vendor: boolean; playDeveloperId?: string | null;
+  /** Where Play tokens come from: the credential broker (~/.storebound/broker.json), the profile's key file, or none. */
+  playSource: 'broker' | 'file' | null; error?: string }[] {
+  let broker = false;
+  try { broker = !!brokerConfig(); } catch { /* a broken broker.json: doctor reports it */ }
   return profileNames().map(profile => {
     try {
       const id = profileIdentity(profile);
-      return { profile, apple: !!id.appleKeyId, play: !!id.playEmail, playAccount: id.playEmail ? maskUser(id.playEmail) : null, vendor: id.vendor, playDeveloperId: id.playDeveloperId };
-    } catch (e) { return { profile, apple: false, play: false, playAccount: null, vendor: false, error: (e as Error).message }; }
+      const email = id.playEmail ?? profileEnv(profile).PLAY_SERVICE_ACCOUNT_EMAIL ?? null;
+      const viaBroker = broker && !profileBrokerOff(profile) && !!email;
+      const playSource = viaBroker ? 'broker' as const : id.playEmail ? 'file' as const : null;
+      return { profile, apple: !!id.appleKeyId, play: !!playSource, playAccount: email && playSource ? maskUser(email) : null, vendor: id.vendor, playDeveloperId: id.playDeveloperId, playSource };
+    } catch (e) { return { profile, apple: false, play: false, playAccount: null, vendor: false, playSource: null, error: (e as Error).message }; }
   });
 }
 
diff --git a/cli/lib/broker.ts b/cli/lib/broker.ts
new file mode 100644
index 0000000..41e171b
--- /dev/null
+++ b/cli/lib/broker.ts
@@ -0,0 +1,327 @@
+// Credential broker: a server of the owner's that holds the Google service-account keys, the Cloud project facts and
+// the Play permission grants, so this machine needs no Google key of its own. storebound asks it for short-lived
+// Google access tokens (POST /api/google/token) and for the Play facts of one package (GET
+// /api/google/play/<package>/storebound: the service account's Play permissions, the Cloud projects' enabled APIs, the
+// SDK config files). docs/credential-broker.md.
+//
+// Config: ~/.storebound/broker.json (file: env STOREBOUND_BROKER_CONFIG)
+//   { "url": "https://broker.example.com", "apiKeyFile": "~/.storebound/broker.key", "account"?: "<service account e-mail>" }
+// env STOREBOUND_BROKER_URL / STOREBOUND_BROKER_KEY_FILE override the file. Which Google account to mint for:
+// PLAY_SERVICE_ACCOUNT_EMAIL (env, the credential profile, .storebound/credentials.json), else "account" in broker.json,
+// else the client_email of a local key, else the account the broker names for the package. Off: env
+// STOREBOUND_BROKER=off, or "broker": false in a credential profile (that profile keeps its local key).
+// The key file holds one scoped API key (google:read google:token); on macOS / Linux it must be mode 600 (a group or
+// world readable file is refused). Tokens live in memory only, until 5 minutes before they expire, one request per
+// account + scope at a time; they are never written or logged, and every error text has ya29. tokens and the API key
+// redacted.
+import { createHash } from 'node:crypto';
+import { existsSync, readFileSync, statSync } from 'node:fs';
+import { homedir } from 'node:os';
+import { dirname, isAbsolute, join, resolve } from 'node:path';
+import { activeProfile, credentialValue, PROFILE_RE, profileDir } from './credentials';
+import { enableUrl, PLAY_USERS_URL } from './google-errors';
+
+export type BrokerScope = 'androidpublisher' | 'cloud-platform.read-only' | 'firebase.readonly';
+export const BROKER_SCOPES: readonly BrokerScope[] = ['androidpublisher', 'cloud-platform.read-only', 'firebase.readonly'];
+
+export interface BrokerConfig {
+  url: string;
+  keyFile: string;
+  /** The Google account (service account e-mail) to mint tokens for, when configured. */
+  account: string | null;
+  /** Where the URL came from: "env" or the broker.json path. */
+  from: string;
+}
+
+/** The broker did not answer (network error, timeout, 5xx): callers fall back to a local key when there is one. */
+export class BrokerUnavailable extends Error {}
+/** The broker refused this machine's API key (401 / 403): no fallback, no retry; the key needs its scopes. */
+export class BrokerRefused extends Error { constructor(msg: string, readonly status: number) { super(msg); } }
+/** The broker has no such Google account (400 / 404 on a token request): a local key may still serve it. */
+export class BrokerUnknownAccount extends Error {}
+
+const OFF = /^(off|0|false|no)$/i;
+export const brokerConfigFile = (): string => process.env.STOREBOUND_BROKER_CONFIG || join(homedir(), '.storebound', 'broker.json');
+const expand = (p: string, base: string): string => { const x = p.replace(/^~(?=$|[/\\])/, homedir()); return isAbsolute(x) ? x : resolve(base, x); };
+
+/** A profile that says "broker": false keeps its local key (also env STOREBOUND_PROFILE_<NAME>_BROKER=off). */
+export function profileBrokerOff(name: string): boolean {
+  if (!PROFILE_RE.test(name)) return false;
+  if (OFF.test(process.env[`STOREBOUND_PROFILE_${name.toUpperCase().replace(/[^A-Z0-9]/g, '_')}_BROKER`] ?? '')) return true;
+  try {
+    const f = join(profileDir(), `${name}.json`);
+    if (!existsSync(f)) return false;
+    const v = (JSON.parse(readFileSync(f, 'utf8')) as Record<string, unknown>).broker;
+    return v === false || (typeof v === 'string' && OFF.test(v));
+  } catch { return false; }
+}
+function profileOptsOut(root: string): boolean {
+  try { const p = activeProfile(root); return !!p && profileBrokerOff(p.name); } catch { return false; }
+}
+
+/** Only https, or http to this machine (a local test broker): the API key never travels in clear text. */
+export function checkBrokerUrl(raw: string): string {
+  let u: URL;
+  try { u = new URL(raw); } catch { throw new Error(`credential broker url "${raw}" is not a URL (https://broker.example.com)`); }
+  const local = ['localhost', '127.0.0.1', '[::1]'].includes(u.hostname);
+  if (u.protocol !== 'https:' && !(u.protocol === 'http:' && local)) throw new Error(`credential broker url ${u.origin}: https only (http only for localhost)`);
+  return u.origin + u.pathname.replace(/\/+$/, '');
+}
+
+/**
+ * The broker config for a project (null: not configured, or turned off for it). Throws on an unreadable broker.json or
+ * a bad URL: a broken config is reported, never silently skipped.
+ */
+export function brokerConfig(root?: string): BrokerConfig | null {
+  if (OFF.test(process.env.STOREBOUND_BROKER ?? '')) return null;
+  if (root && profileOptsOut(root)) return null;
+  const f = brokerConfigFile();
+  let file: { url?: unknown; apiKeyFile?: unknown; account?: unknown } = {};
+  if (existsSync(f)) {
+    try { file = JSON.parse(readFileSync(f, 'utf8')) as typeof file; } catch (e) { throw new Error(`${f}: ${(e as Error).message}`); }
+    if (!file || typeof file !== 'object' || Array.isArray(file)) throw new Error(`${f}: an object { "url", "apiKeyFile" }`);
+  }
+  const envUrl = process.env.STOREBOUND_BROKER_URL;
+  const raw = envUrl || (typeof file.url === 'string' ? file.url : '');
+  if (!raw) return null;
+  const keyRaw = process.env.STOREBOUND_BROKER_KEY_FILE || (typeof file.apiKeyFile === 'string' && file.apiKeyFile ? file.apiKeyFile : join(dirname(f), 'broker.key'));
+  let account: string | null = null;
+  try { account = (root ? credentialValue(root, 'PLAY_SERVICE_ACCOUNT_EMAIL') : process.env.PLAY_SERVICE_ACCOUNT_EMAIL) || null; } catch { /* unreadable project file */ }
+  if (!account && typeof file.account === 'string' && file.account) account = file.account;
+  return { url: checkBrokerUrl(raw), keyFile: expand(keyRaw, dirname(f)), account, from: envUrl ? 'env' : f };
+}
+
+/** The API key from the key file. Refuses a group / world readable file on POSIX. Never printed. */
+export function brokerKey(cfg: BrokerConfig, platform: NodeJS.Platform = process.platform): string {
+  let mode: number;
+  try { mode = statSync(cfg.keyFile).mode; } catch { throw new Error(`credential broker key file ${cfg.keyFile} not found: put the API key there (one line, chmod 600)`); }
+  if (platform !== 'win32' && (mode & 0o077)) throw new Error(`refusing the credential broker key file ${cfg.keyFile}: it is readable by group or others (mode ${(mode & 0o777).toString(8)}); run chmod 600 ${cfg.keyFile}`);
+  const k = readFileSync(cfg.keyFile, 'utf8').trim();
+  if (!k || /\s/.test(k)) throw new Error(`credential broker key file ${cfg.keyFile}: one API key on one line`);
+  return k;
+}
+
+/** An error text without Google access tokens, bearer values or the given secrets. */
+export function redact(text: string, ...secrets: (string | null | undefined)[]): string {
+  let s = String(text ?? '').replace(/ya29\.[A-Za-z0-9._~+/=-]+/g, 'ya29.***').replace(/(Bearer\s+)[A-Za-z0-9._~+/=-]+/gi, '$1***');
+  for (const x of secrets) if (x && x.length >= 6) s = s.split(x).join('***');
+  return s;
+}
+
+const host = (cfg: BrokerConfig): string => { try { return new URL(cfg.url).host; } catch { return cfg.url; } };
+export const brokerTimeoutMs = (): number => Number(process.env.STOREBOUND_BROKER_TIMEOUT_MS) || 15_000;
+
+interface Answer { status: number; json: unknown; text: string }
+
+async function request(cfg: BrokerConfig, method: 'GET' | 'POST', path: string, body?: unknown): Promise<Answer> {
+  const key = brokerKey(cfg);
+  let r: Response;
+  try {
+    r = await fetch(cfg.url + path, {
+      method, signal: AbortSignal.timeout(brokerTimeoutMs()),
+      headers: { Authorization: `Bearer ${key}`, Accept: 'application/json', ...(body === undefined ? {} : { 'Content-Type': 'application/json' }) },
+      body: body === undefined ? undefined : JSON.stringify(body),
+    });
+  } catch (e) { throw new BrokerUnavailable(`credential broker ${host(cfg)} did not answer: ${redact((e as Error).message, key)}`); }
+  const raw = await r.text().catch(() => '');
+  let json: unknown = null;
+  try { json = raw ? JSON.parse(raw) : null; } catch { /* not JSON */ }
+  const text = redact(raw, key).slice(0, 300);
+  if (r.status >= 500) throw new BrokerUnavailable(`credential broker ${host(cfg)} -> ${r.status} ${text}`.trim());
+  return { status: r.status, json, text };
+}
+
+const errOf = (a: Answer): string => {
+  const j = a.json as { error?: unknown; message?: unknown } | null;
+  const m = j && typeof j === 'object' ? [j.error, j.message].filter(x => typeof x === 'string').join(': ') : '';
+  return m || a.text;
+};
+
+const tokens = new Map<string, { token: string; until: number }>();
+const inflight = new Map<string, Promise<string>>();
+const infos = new Map<string, Promise<PlayInfoResult>>();
+
+/** Forgets every cached token and package answer (tests; a long-running process after a key change). */
+export function clearBrokerCache(): void { tokens.clear(); inflight.clear(); infos.clear(); }
+
+/**
+ * A Google access token for `account` with one broker scope. Cached in memory until 5 minutes before `expiresAt`;
+ * parallel callers share one request. 401 / 403 throw BrokerRefused (no retry), 400 / 404 BrokerUnknownAccount, no
+ * answer BrokerUnavailable.
+ */
+export async function brokerToken(cfg: BrokerConfig, account: string, scope: BrokerScope, now: () => number = Date.now): Promise<string> {
+  const k = `${cfg.url}\n${account}\n${scope}`;
+  const hit = tokens.get(k);
+  if (hit && now() < hit.until) return hit.token;
+  const running = inflight.get(k);
+  if (running) return running;
+  const p = (async () => {
+    const a = await request(cfg, 'POST', '/api/google/token', { account, scopes: [scope] });
+    if (a.status === 401 || a.status === 403)
+      throw new BrokerRefused(`the credential broker ${host(cfg)} refused the token request (${a.status}${errOf(a) ? `: ${errOf(a)}` : ''}): its API key lacks the google:token scope or was revoked. Give the key google:read and google:token on the broker; storebound does not retry.`, a.status);
+    if (a.status === 400 || a.status === 404)
+      throw new BrokerUnknownAccount(`the credential broker ${host(cfg)} has no Google account ${account} for scope ${scope} (${a.status}${errOf(a) ? `: ${errOf(a)}` : ''}): import its key on the broker, or set PLAY_SERVICE_ACCOUNT_EMAIL to an account it holds`);
+    const j = a.json as { accessToken?: unknown; expiresAt?: unknown } | null;
+    if (a.status !== 200 || typeof j?.accessToken !== 'string' || !j.accessToken || typeof j.expiresAt !== 'number')
+      throw new Error(`credential broker ${host(cfg)} token -> ${a.status}: no accessToken / expiresAt in the answer`);
+    const exp = j.expiresAt > 1e12 ? j.expiresAt : j.expiresAt * 1000;
+    tokens.set(k, { token: j.accessToken, until: exp - 300_000 });
+    return j.accessToken;
+  })().finally(() => inflight.delete(k));
+  inflight.set(k, p);
+  return p;
+}
+
+export interface BrokerPlayInfo {
+  packageName: string;
+  developerId?: string | null;
+  account?: string | null;
+  accountPermissions?: { developer?: string[]; app?: string[] } | null;
+  grantsCheckedAt?: number | null;
+  projects?: { projectId: string; projectNumber?: string; enabledApis?: string[]; billing?: string }[];
+  sdkConfigs?: { platform: string; sha256?: string; projectId?: string; firebaseAppId?: string; bundle?: string; drift?: boolean }[];
+  /** Optional fix links the broker may hand out. */
+  grantUrl?: string;
+}
+
+export type PlayInfoResult =
+  | { kind: 'ok'; info: BrokerPlayInfo }
+  /** 404: the package is not registered on the broker (not "no access"). */
+  | { kind: 'not-registered'; message: string }
+  | { kind: 'refused'; message: string }
+  | { kind: 'unavailable'; message: string };
+
+/** What the broker knows about one Play package (once per run and package). Never throws. */
+export function brokerPlayInfo(cfg: BrokerConfig, pkg: string): Promise<PlayInfoResult> {
+  const k = `${cfg.url}\n${pkg}`;
+  const cached = infos.get(k);
+  if (cached) return cached;
+  const p = (async (): Promise<PlayInfoResult> => {
+    try {
+      const a = await request(cfg, 'GET', `/api/google/play/${encodeURIComponent(pkg)}/storebound`);
+      if (a.status === 404) return { kind: 'not-registered', message: `${pkg} is not registered on the credential broker ${host(cfg)}: register the package there (google_play_set) to get its permission checks; this is not a missing Play access` };
+      if (a.status === 401 || a.status === 403) return { kind: 'refused', message: `the credential broker ${host(cfg)} refused the package read (${a.status}): its API key lacks the google:read scope` };
+      const j = a.json as BrokerPlayInfo | null;
+      if (a.status !== 200 || !j || typeof j !== 'object') return { kind: 'unavailable', message: `credential broker ${host(cfg)} -> ${a.status} ${a.text}`.trim() };
+      return { kind: 'ok', info: { ...j, packageName: typeof j.packageName === 'string' ? j.packageName : pkg } };
+    } catch (e) {
+      if (!(e instanceof BrokerUnavailable)) infos.delete(k);
+      return { kind: 'unavailable', message: (e as Error).message };
+    }
+  })();
+  infos.set(k, p);
+  return p;
+}
+
+/** The Play permission each kind of work needs (Play Console's app permission names, as the broker reports them). */
+export const PLAY_GRANTS = {
+  upload: 'CAN_MANAGE_TRACK_APKS',
+  listing: 'CAN_MANAGE_PUBLIC_LISTING',
+  iap: 'CAN_MANAGE_ORDERS',
+  declarations: 'CAN_MANAGE_APP_CONTENT',
+  reviews: 'CAN_REPLY_TO_REVIEWS',
+} as const;
+export type PlayNeed = keyof typeof PLAY_GRANTS | 'games';
+const NEED_WORDS: Record<PlayNeed, string> = { upload: 'uploads and releases', listing: 'the store listing and images', iap: 'in-app products and subscriptions', declarations: 'Data safety and app content', reviews: 'review replies', games: 'Play Games Services configuration' };
+export const ANDROIDPUBLISHER_API = 'androidpublisher.googleapis.com';
+export const GAMES_CONFIG_SERVICE = 'gamesconfiguration.googleapis.com';
+
+/** What each storebound command needs from Play (the preflight before it runs). */
+export const COMMAND_NEEDS: Record<string, PlayNeed[]> = {
+  'play upload': ['upload'], 'play release': ['upload'], 'play rollout': ['upload'], 'play share': ['upload'],
+  'play listing': ['listing'], 'play images': ['listing'], 'play products': ['iap'], 'play subscriptions': ['iap'],
+  'play data-safety': ['declarations'], 'play games': ['games'],
+};
+
+export interface AccessGap {
+  kind: 'grant' | 'api';
+  need: PlayNeed;
+  /** The missing permission (CAN_MANAGE_TRACK_APKS) or API (gamesconfiguration.googleapis.com). */
+  name: string;
+  message: string;
+  fix: string;
+  url: string;
+}
+
+/** The grants of a package as one list (developer-level permissions count for every app). */
+export const grantsOf = (info: BrokerPlayInfo): string[] | null => {
+  const p = info.accountPermissions;
+  if (!p || (!Array.isArray(p.app) && !Array.isArray(p.developer))) return null;
+  return [...new Set([...(p.developer ?? []), ...(p.app ?? [])])].sort();
+};
+/** Every API the broker saw enabled in the package's Cloud projects; null when it reported none. */
+export const enabledApisOf = (info: BrokerPlayInfo): string[] | null => {
+  const ps = (info.projects ?? []).filter(p => Array.isArray(p.enabledApis));
+  return ps.length ? [...new Set(ps.flatMap(p => p.enabledApis!))].sort() : null;
+};
+
+/** The missing Play permissions and disabled APIs for `needs`, per the broker's answer. Unknown facts are no gap. */
+export function playGaps(info: BrokerPlayInfo, needs: PlayNeed[]): AccessGap[] {
+  const pkg = info.packageName, who = info.account ?? 'the service account';
+  const gaps: AccessGap[] = [];
+  const grants = grantsOf(info);
+  const usersUrl = info.grantUrl ?? (info.developerId && /^\d+$/.test(info.developerId) ? `https://play.google.com/console/u/0/developers/${info.developerId}/users-and-permissions` : PLAY_USERS_URL);
+  for (const need of new Set(needs)) {
+    if (need === 'games' || !grants) continue;
+    const perm = PLAY_GRANTS[need];
+    if (grants.includes(perm)) continue;
+    gaps.push({ kind: 'grant', need, name: perm, url: usersUrl,
+      message: `${who} lacks the Play permission ${perm} for ${pkg} (needed for ${NEED_WORDS[need]})`,
+      fix: `grant ${perm} for ${pkg} on the credential broker (google_play_grant), or in Play Console > Users and permissions > ${who} > App permissions: ${usersUrl}` });
+  }
+  const apis = enabledApisOf(info);
+  if (apis) {
+    const project = (info.projects ?? []).find(p => Array.isArray(p.enabledApis))?.projectId ?? null;
+    const want = new Set<string>([ANDROIDPUBLISHER_API, ...(needs.includes('games') ? [GAMES_CONFIG_SERVICE] : [])]);
+    for (const api of want) {
+      if (apis.includes(api)) continue;
+      const url = enableUrl(api, project);
+      gaps.push({ kind: 'api', need: api === GAMES_CONFIG_SERVICE ? 'games' : needs[0] ?? 'upload', name: api, url,
+        message: `${api} is not enabled in Google Cloud project ${project ?? '(the service account\'s project)'} (needed for ${api === GAMES_CONFIG_SERVICE ? NEED_WORDS.games : 'every Play API call'})`,
+        fix: `enable ${api} on the credential broker (google_api_enable), or open ${url} and press Enable` });
+    }
+  }
+  return gaps;
+}
+
+const SDK_FILES: Record<string, string[]> = {
+  android: ['android/app/google-services.json', 'app/google-services.json', 'google-services.json', 'android/google-services.json'],
+  ios: ['ios/App/App/GoogleService-Info.plist', 'ios/Runner/GoogleService-Info.plist', 'ios/GoogleService-Info.plist', 'GoogleService-Info.plist'],
+};
+
+/** SDK config files the broker says drifted, or whose sha256 differs from the repo's copy. */
+export function sdkConfigGaps(info: BrokerPlayInfo, root: string): string[] {
+  const out: string[] = [];
+  for (const c of info.sdkConfigs ?? []) {
+    const label = `${c.platform} SDK config${c.bundle ? ` (${c.bundle})` : ''}`;
+    if (c.drift) out.push(`${label}: the credential broker reports drift from the Firebase project ${c.projectId ?? ''}; download it again on the broker`.replace(/ ;/, ';'));
+    const file = (SDK_FILES[c.platform] ?? []).map(f => join(root, f)).find(f => existsSync(f));
+    if (file && c.sha256 && /^[0-9a-f]{64}$/i.test(c.sha256)) {
+      const sha = createHash('sha256').update(readFileSync(file)).digest('hex');
+      if (sha.toLowerCase() !== c.sha256.toLowerCase()) out.push(`${label}: ${file} differs from the broker's copy (sha256 ${sha.slice(0, 12)}... vs ${c.sha256.slice(0, 12)}...): take the broker's file`);
+    }
+  }
+  return out;
+}
+
+/** One error text for the gaps that stop a command. */
+export const gapsText = (gaps: AccessGap[]): string => gaps.map(g => `${g.message}. Fix: ${g.fix}`).join('\n');
+
+/**
+ * Before a Play command runs (cli/index.ts): with a broker, read the package's grants and APIs and stop early with the
+ * exact missing permission / API and its link. A dry run only warns. No broker, an unreachable one, or a package the
+ * broker does not know: a note, then the command runs (Google answers for itself).
+ */
+export async function playPreflight(command: string, root: string, pkg: string | undefined, o: { dry: boolean; warn: (msg: string) => void }): Promise<AccessGap[]> {
+  const needs = COMMAND_NEEDS[command];
+  if (!needs || !pkg) return [];
+  let cfg: BrokerConfig | null;
+  try { cfg = brokerConfig(root); } catch (e) { o.warn((e as Error).message); return []; }
+  if (!cfg) return [];
+  const r = await brokerPlayInfo(cfg, pkg);
+  if (r.kind !== 'ok') { o.warn(r.message); return []; }
+  const gaps = playGaps(r.info, needs);
+  if (!gaps.length) return [];
+  if (o.dry) { for (const g of gaps) o.warn(`${g.message}. Fix: ${g.fix}`); return gaps; }
+  throw new Error(`${command} stopped before any call to Google Play:\n${gapsText(gaps)}`);
+}
diff --git a/cli/lib/credentials.ts b/cli/lib/credentials.ts
index 186a8fe..ddbbe09 100644
--- a/cli/lib/credentials.ts
+++ b/cli/lib/credentials.ts
@@ -21,6 +21,8 @@
 //   4. the default profile (none named): store keys only
 //   5. ASC_P8 only: ~/.appstoreconnect/private_keys/AuthKey_<ASC_KEY_ID>.p8 (where Xcode / altool keep it)
 // A profile file: { "ASC_KEY_ID", "ASC_ISSUER_ID", "ASC_P8", "PLAY_SERVICE_ACCOUNT", "ASC_VENDOR_NUMBER", "label"? };
+// with a credential broker (cli/lib/broker.ts) Play needs no key file: "PLAY_SERVICE_ACCOUNT_EMAIL" names the account
+// the broker mints tokens for, and "broker": false keeps a profile on its local key.
 // key paths relative to the credentials folder (`accounts import` puts the key files in <name>/, mode 0600), or env
 // STOREBOUND_PROFILE_<NAME>_<KEY> (NAME upper case, other characters as _). storebound.workspace.json names profiles too.
 import { chmodSync, existsSync, mkdirSync, mkdtempSync, readdirSync, readFileSync, rmSync, writeFileSync } from 'node:fs';
@@ -44,7 +46,7 @@ function fileStore(root: string): Store {
 export function credentialValue(root: string, name: string): string | undefined { return value(root, name); }
 /** The store credential names a profile holds (the same as the env names): per developer account, so the vendor number
  *  for reports too; an app's Android upload keystore stays in the project. */
-export const PROFILE_KEYS = ['PLAY_SERVICE_ACCOUNT', 'ASC_KEY_ID', 'ASC_ISSUER_ID', 'ASC_P8', 'ASC_VENDOR_NUMBER', 'PLAY_DEVELOPER_ID'] as const;
+export const PROFILE_KEYS = ['PLAY_SERVICE_ACCOUNT', 'ASC_KEY_ID', 'ASC_ISSUER_ID', 'ASC_P8', 'ASC_VENDOR_NUMBER', 'PLAY_DEVELOPER_ID', 'PLAY_SERVICE_ACCOUNT_EMAIL'] as const;
 export const PROFILE_RE = /^[A-Za-z0-9][A-Za-z0-9._-]{0,63}$/;
 
 export const profileDir = (): string => process.env.STOREBOUND_CREDENTIALS_DIR || join(homedir(), '.storebound', 'credentials');
@@ -158,7 +160,7 @@ export function isPlaceholder(v: string, o: { example?: boolean } = {}): boolean
 }
 
 /** Credential names storebound reads (env, .storebound/credentials.json, a profile), for status reports. */
-export const CREDENTIAL_KEYS = ['PLAY_SERVICE_ACCOUNT', 'ASC_KEY_ID', 'ASC_ISSUER_ID', 'ASC_P8', 'ASC_VENDOR_NUMBER', 'APPLE_ADS_CLIENT_ID', 'APPLE_ADS_TEAM_ID',
+export const CREDENTIAL_KEYS = ['PLAY_SERVICE_ACCOUNT', 'PLAY_SERVICE_ACCOUNT_EMAIL', 'ASC_KEY_ID', 'ASC_ISSUER_ID', 'ASC_P8', 'ASC_VENDOR_NUMBER', 'APPLE_ADS_CLIENT_ID', 'APPLE_ADS_TEAM_ID',
   'APPLE_ADS_KEY_ID', 'APPLE_ADS_PRIVATE_KEY', 'APPLE_ADS_ACCOUNT_ID', 'REVENUECAT_SECRET_KEY', 'ANDROID_KEYSTORE', 'ANDROID_KEYSTORE_PASSWORD', 'ANDROID_KEY_ALIAS', 'ANDROID_KEY_PASSWORD'] as const;
 
 /** Where each known credential stands: set, missing, or placeholder (a template value, treated as missing). Never
@@ -206,7 +208,7 @@ export function parseServiceAccount(text: string): ServiceAccount {
 
 export function playServiceAccount(root: string): ServiceAccount {
   const v = value(root, 'PLAY_SERVICE_ACCOUNT');
-  if (!v) throw new Error('PLAY_SERVICE_ACCOUNT is not set (env, the credential profile in ~/.storebound/credentials, or .storebound/credentials.json): path to the service account JSON key; `storebound accounts` lists the profiles');
+  if (!v) throw new Error('PLAY_SERVICE_ACCOUNT is not set (env, the credential profile in ~/.storebound/credentials, or .storebound/credentials.json): path to the service account JSON key, or a credential broker in ~/.storebound/broker.json; `storebound accounts` lists the profiles');
   return parseServiceAccount(inline(v, /^\s*\{/, root));
 }
 
diff --git a/cli/lib/desktop-protocol.ts b/cli/lib/desktop-protocol.ts
index 1a174d5..3c86210 100644
--- a/cli/lib/desktop-protocol.ts
+++ b/cli/lib/desktop-protocol.ts
@@ -315,6 +315,22 @@ export interface AccountCheck {
   /** What to do, in words. */
   fix: string | null;
   docs: string | null;
+  /** Play: where the tokens come from, the credential broker or the local key file (no values). */
+  source?: 'broker' | 'file' | null;
+  /** Play with a credential broker: the grants and APIs it lists per Play app of this machine. */
+  grants?: BrokerGrant[];
+}
+
+/** One Play app's access as the credential broker lists it (GET /api/google/play/<package>/storebound). */
+export interface BrokerGrant {
+  packageName: string;
+  /** false: the package is not registered on the broker (no data; not a missing access). */
+  registered: boolean;
+  /** Play permissions of the service account (developer-level ones included); null when the broker has none. */
+  grants: string[] | null;
+  enabledApis: string[] | null;
+  /** Permissions / APIs storebound's commands need that are not there. */
+  missing: string[];
 }
 
 /**
diff --git a/cli/lib/google-access.ts b/cli/lib/google-access.ts
new file mode 100644
index 0000000..b73f275
--- /dev/null
+++ b/cli/lib/google-access.ts
@@ -0,0 +1,34 @@
+// A Google 401 / 403 that says what is missing (SERVICE_DISABLED, PERMISSION_DENIED, a refused key) becomes one
+// GoogleAccessError with the exact API or grant and the link to fix it. It is never retried: the same call fails the
+// same way until the owner (or the credential broker) changes something. With the broker as the token source the text
+// also names the Play permissions the broker lists for the package and the broker-side fix.
+import { brokerConfig, brokerPlayInfo, grantsOf, redact } from './broker';
+import { findingText, type GoogleFinding, parseGoogleError } from './google-errors';
+
+export class GoogleAccessError extends Error {
+  /** Never sent again: retry loops and the upsert layer check this. */
+  readonly noRetry = true;
+  constructor(msg: string, readonly finding: GoogleFinding) { super(msg); }
+}
+
+/** The GoogleAccessError for a failed call's text, or null when the text is another error. */
+export async function accessError(text: string, o: { app?: string | null; root?: string; source?: 'broker' | 'file' } = {}): Promise<GoogleAccessError | null> {
+  const f = parseGoogleError(text, { app: o.app ?? null });
+  if (!f || f.kind === 'quota') return null;
+  const lines = [redact(text), findingText(f, { withUrl: true })];
+  if (o.source === 'broker') {
+    if (f.kind === 'auth-revoked') lines.push('The token came from the credential broker: its key for this service account was revoked or deleted at Google; rotate the key on the broker.');
+    if (f.kind === 'api-disabled') lines.push(`Or enable it on the credential broker (google_api_enable ${f.projectId ?? '<project>'} ${f.service}).`);
+    if (f.kind === 'no-app-access' && o.root && o.app) {
+      try {
+        const cfg = brokerConfig(o.root);
+        const r = cfg ? await brokerPlayInfo(cfg, o.app) : null;
+        if (r?.kind === 'ok') {
+          const g = grantsOf(r.info);
+          lines.push(`The credential broker lists ${g ? (g.length ? g.join(', ') : 'no Play permissions') : 'no permission data'} for ${r.info.account ?? 'the service account'} on ${o.app}: grant the missing one there (google_play_grant).`);
+        } else if (r) lines.push(r.message);
+      } catch { /* the Google error stands on its own */ }
+    }
+  }
+  return new GoogleAccessError(lines.join('\n'), f);
+}
diff --git a/cli/lib/google-auth.ts b/cli/lib/google-auth.ts
index 106f798..aaec4f4 100644
--- a/cli/lib/google-auth.ts
+++ b/cli/lib/google-auth.ts
@@ -1,5 +1,7 @@
 // OAuth 2.0 service account flow (RS256 JWT assertion -> access token) with WebCrypto, no googleapis dependency.
-import type { ServiceAccount } from './credentials';
+import { playServiceAccount, type ServiceAccount } from './credentials';
+import { BROKER_SCOPES, type BrokerConfig, brokerConfig, brokerKey, brokerPlayInfo, type BrokerScope, brokerToken, BrokerUnavailable, BrokerUnknownAccount, redact } from './broker';
+import { warn } from './log';
 
 export const PLAY_SCOPE = 'https://www.googleapis.com/auth/androidpublisher';
 /** Play Developer Reporting API (vitals): https://developers.google.com/play/developer/reporting/reference/rest */
@@ -42,3 +44,97 @@ export function tokenSource(sa: ServiceAccount, scope = PLAY_SCOPE): () => Promi
     return token;
   };
 }
+
+// ---- Play access through a credential broker (cli/lib/broker.ts) or a local key ----
+
+/** The broker scope a Google scope maps to; null: the broker hands out no such scope (a local key is needed). */
+export const BROKER_SCOPE_OF: Record<string, BrokerScope> = { [PLAY_SCOPE]: 'androidpublisher', [STORAGE_READ_SCOPE]: 'cloud-platform.read-only' };
+
+export type PlaySource = 'broker' | 'file';
+
+/** A Play access token getter that also says where its tokens come from (no values). */
+export interface PlayToken {
+  (): Promise<string>;
+  /** "broker" until the broker failed over to the local key (then "file"). */
+  source(): PlaySource;
+  /** The service account e-mail the tokens are for, when known. */
+  principal(): string | null;
+}
+
+const fellBack = new Set<string>();
+
+/**
+ * The Play token getter of a project: the credential broker when it is configured and has the scope (POST
+ * /api/google/token), else the local service account key (env, profile, .storebound/credentials.json). The broker not
+ * answering, or not knowing the account, falls back to the local key once with a warning; a broker that refuses the
+ * API key (401 / 403) fails. `brokerScope: null` forces the local key (writes the broker has no scope for).
+ * Throws at once when neither is there.
+ */
+export function playToken(root: string, scope = PLAY_SCOPE, o: { packageName?: string; brokerScope?: BrokerScope | null; warn?: (msg: string) => void } = {}): PlayToken {
+  let sa: ServiceAccount | null = null, saErr: Error | null = null;
+  try { sa = playServiceAccount(root); } catch (e) { saErr = e as Error; }
+  const cfg = brokerConfig(root);
+  const bscope = o.brokerScope === undefined ? BROKER_SCOPE_OF[scope] ?? null : o.brokerScope;
+  const local = sa ? tokenSource(sa, scope) : null;
+  if (!cfg || !bscope) {
+    if (!local) {
+      if (cfg && !bscope) throw new Error(`${scope.replace('https://www.googleapis.com/auth/', '')}: the credential broker hands out no such scope (${BROKER_SCOPES.join(', ')}), and there is no local service account key (PLAY_SERVICE_ACCOUNT) for it`);
+      throw saErr!;
+    }
+    return Object.assign(() => local(), { source: (): PlaySource => 'file', principal: () => sa!.client_email });
+  }
+  let account = cfg.account ?? sa?.client_email ?? null;
+  let mode: PlaySource = 'broker';
+  const say = o.warn ?? ((m: string) => warn('credentials', m));
+  const get = async (): Promise<string> => {
+    if (mode === 'file') return local!();
+    try {
+      if (!account && o.packageName) {
+        const r = await brokerPlayInfo(cfg, o.packageName);
+        if (r.kind === 'unavailable') throw new BrokerUnavailable(r.message);
+        if (r.kind === 'ok' && r.info.account) account = r.info.account;
+      }
+      if (!account) throw new Error('credential broker: which Google account? Set PLAY_SERVICE_ACCOUNT_EMAIL (env, the credential profile or .storebound/credentials.json) or "account" in broker.json');
+      return await brokerToken(cfg, account, bscope);
+    } catch (e) {
+      if (local && (e instanceof BrokerUnavailable || e instanceof BrokerUnknownAccount)) {
+        const once = `${cfg.url}\n${sa!.client_email}`;
+        if (!fellBack.has(once)) { fellBack.add(once); say(`${redact((e as Error).message)}; using the local service account key instead`); }
+        mode = 'file';
+        account = sa!.client_email;
+        return local();
+      }
+      throw e;
+    }
+  };
+  return Object.assign(get, { source: () => mode, principal: () => account });
+}
+
+export interface PlayCredentials {
+  /** Where Play tokens come from for this project: the broker, the local key file, or nowhere. */
+  source: PlaySource | null;
+  /** The service account e-mail when known (masked by the callers that print it). */
+  principal: string | null;
+  /** A local key is there too (the broker's fallback). */
+  local: boolean;
+  /** The broker config (its URL and key file path, never the key), and what is wrong with it. */
+  broker: { url: string; keyFile: string; from: string; error?: string } | null;
+  error?: string;
+}
+
+/** Where this project's Play access comes from, without network calls and without values. */
+export function playCredentials(root: string): PlayCredentials {
+  let sa: ServiceAccount | null = null, error: string | undefined;
+  try { sa = playServiceAccount(root); } catch (e) { error = (e as Error).message; }
+  let cfg: BrokerConfig | null = null, brokerError: string | undefined;
+  try { cfg = brokerConfig(root); } catch (e) { brokerError = (e as Error).message; }
+  if (cfg) { try { brokerKey(cfg); } catch (e) { brokerError = (e as Error).message; } }
+  const broker = cfg ? { url: cfg.url, keyFile: cfg.keyFile, from: cfg.from, ...(brokerError ? { error: brokerError } : {}) } : null;
+  const usable = !!cfg && !brokerError;
+  return {
+    source: usable ? 'broker' : sa ? 'file' : null,
+    principal: (usable ? cfg!.account : null) ?? sa?.client_email ?? null,
+    local: !!sa, broker,
+    ...(brokerError || !(usable || sa) ? { error: brokerError ?? error } : {}),
+  };
+}
diff --git a/cli/play/client.ts b/cli/play/client.ts
index 647b893..81239dd 100644
--- a/cli/play/client.ts
+++ b/cli/play/client.ts
@@ -1,6 +1,6 @@
 // Google Play Developer API (androidpublisher v3) client: JSON + media calls with retry, and the edit lifecycle.
-import { playServiceAccount } from '../lib/credentials';
-import { tokenSource } from '../lib/google-auth';
+import { PLAY_SCOPE, playToken } from '../lib/google-auth';
+import { accessError } from '../lib/google-access';
 import { log, warn } from '../lib/log';
 import { errorBody } from '../lib/http';
 import { noteGoogle } from '../lib/quota';
@@ -15,7 +15,8 @@ export const EDIT_GONE = /Edit has been deleted|editAlreadyCommitted|already bee
 export type PlayClient = Awaited<ReturnType<typeof playClient>>;
 
 export async function playClient(root: string, packageName: string) {
-  const token = tokenSource(playServiceAccount(root));
+  // the credential broker's token when one is configured, else the local service account key (cli/lib/google-auth.ts)
+  const token = playToken(root, PLAY_SCOPE, { packageName });
   const API = `https://androidpublisher.googleapis.com/androidpublisher/v3/applications/${packageName}`;
   const UPLOAD = `https://androidpublisher.googleapis.com/upload/androidpublisher/v3/applications/${packageName}`;
 
@@ -49,6 +50,8 @@ export async function playClient(root: string, packageName: string) {
       const msg = /^\s*</.test(text) ? `(HTML ${r.status} page: wrong path or casing?)` : errorBody(text);
       if (r.status >= 500 && !safe) throw new AmbiguousWriteError(`${method} ${short()} -> ${r.status} ${msg}`, r.status);
       if (r.status === 404 && method === 'DELETE' && attempt > 0) return {} as T;
+      // a disabled API or a missing Play permission: the exact API / grant and its link, never retried (pitfall 122)
+      if (r.status === 403 || r.status === 401) { const g = await accessError(`${method} ${short()} -> ${r.status} ${msg}`, { app: packageName, root, source: token.source() }); if (g) throw g; }
       throw new Error(`${method} ${short()} -> ${r.status} ${msg}`);
     }
   }
@@ -141,6 +144,8 @@ export async function playClient(root: string, packageName: string) {
 
   return {
     API, UPLOAD, packageName, call,
+    /** Where this client's tokens come from: "broker" or "file" (no values). */
+    credentialSource: () => token.source(),
     /**
      * Read-only edit: opens one, runs fn (GETs only), then deletes it, also on error. Never validated or committed.
      * A failed delete is reported (Play drops an unused edit on its own after a while, but it should not linger).
diff --git a/cli/play/games.ts b/cli/play/games.ts
index 009683f..edee088 100644
--- a/cli/play/games.ts
+++ b/cli/play/games.ts
@@ -9,11 +9,12 @@
 // configuration with the fields Play has and we do not manage (icon, sort rank) kept. Nothing is published: the
 // owner's Publish in Play Console makes the draft live.
 import { playServiceAccount } from '../lib/credentials';
+import type { PlayToken } from '../lib/google-auth';
 import type { Ctx } from '../lib/ctx';
 import { confirm, need } from '../lib/ctx';
 import { dryPlan } from '../lib/dry';
 import { hasAndroidProject, type ItemPlan, pgsFindings, type PlayExisting, planPlayGames, planRows, readPgsProject, usesPlayGames } from '../lib/game-services';
-import { PLAY_SCOPE, tokenSource } from '../lib/google-auth';
+import { PLAY_SCOPE, playToken } from '../lib/google-auth';
 import { enableUrl, findingText, parseGoogleError } from '../lib/google-errors';
 import { errorBody } from '../lib/http';
 import { done, log, warn } from '../lib/log';
@@ -36,13 +37,24 @@ API: ${GAMES_API_TITLE} (${GAMES_SERVICE}). Enable it, wait a minute, then run s
 }
 
 export function gamesConfigClient(root: string) {
-  const account = playServiceAccount(root);
-  const token = tokenSource(account, PLAY_SCOPE);
+  // reads: the credential broker's cloud-platform.read-only token (androidpublisher does not cover this API), else the
+  // local key; writes stay on the local key (the broker has no write scope for it): made only when a write is sent
+  let projectId: string | null = null;
+  try { projectId = playServiceAccount(root).project_id ?? null; } catch { /* broker only */ }
+  const readToken = playToken(root, PLAY_SCOPE, { brokerScope: 'cloud-platform.read-only' });
+  let writeToken: PlayToken | null = null;
+  const token = (method: string): Promise<string> => {
+    if (method === 'GET') return readToken();
+    try { writeToken ??= playToken(root, PLAY_SCOPE, { brokerScope: null }); } catch (e) {
+      throw new Error(`Play Games configuration writes need a local service account key (PLAY_SERVICE_ACCOUNT): the credential broker hands out read scopes only for this API. ${(e as Error).message}`);
+    }
+    return writeToken();
+  };
   async function call<T = unknown>(method: string, path: string, body?: unknown): Promise<T> {
     const url = GAMES_CONFIG_API + path;
     const safe = method !== 'POST' && retrySafe(method, url);
     for (let attempt = 0; ; attempt++) {
-      const r = await fetch(url, { method, headers: { Authorization: 'Bearer ' + (await token()), ...(body === undefined ? {} : { 'Content-Type': 'application/json' }) }, body: body === undefined ? undefined : JSON.stringify(body) });
+      const r = await fetch(url, { method, headers: { Authorization: 'Bearer ' + (await token(method)), ...(body === undefined ? {} : { 'Content-Type': 'application/json' }) }, body: body === undefined ? undefined : JSON.stringify(body) });
       if (r.status === 429 && attempt < 4) { await r.body?.cancel(); await rt.sleep(2000 * (attempt + 1)); continue; }
       if (r.status >= 500) {
         if (safe && attempt < 4) { await r.body?.cancel(); await rt.sleep(2000 * (attempt + 1)); continue; }
@@ -53,7 +65,7 @@ export function gamesConfigClient(root: string) {
       const t = await r.text();
       if (!r.ok) {
         const msg = `${method} ${path} -> ${r.status} ${errorBody(t, 800)}`;
-        const off = r.status === 403 ? gamesApiDisabledText(msg, account.project_id ?? null) : null;
+        const off = r.status === 403 ? gamesApiDisabledText(msg, projectId) : null;
         throw new Error(off ? `${msg.split(' -> ')[0]} -> 403: ${off}` : msg);
       }
       return (t ? JSON.parse(t) : {}) as T;
diff --git a/cli/play/google.ts b/cli/play/google.ts
index 9691763..cc61886 100644
--- a/cli/play/google.ts
+++ b/cli/play/google.ts
@@ -1,7 +1,6 @@
 // Small client for the other Google APIs storebound reads with the same Play service account: the Play Developer
 // Reporting API (vitals) and Cloud Storage (Play statistics exports). Read-only callers; retries 429 / 5xx.
-import { playServiceAccount } from '../lib/credentials';
-import { tokenSource } from '../lib/google-auth';
+import { playToken } from '../lib/google-auth';
 import { errorBody } from '../lib/http';
 import { noteGoogle } from '../lib/quota';
 import * as rt from '../lib/rt';
@@ -9,7 +8,8 @@ import * as rt from '../lib/rt';
 export const REPORTING_API = 'https://playdeveloperreporting.googleapis.com/v1beta1';
 
 export function googleClient(root: string, scope: string) {
-  const token = tokenSource(playServiceAccount(root), scope);
+  // the credential broker when it hands out this scope, else the local service account key
+  const token = playToken(root, scope);
   async function send(method: string, url: string, body?: unknown): Promise<Response> {
     for (let attempt = 0; ; attempt++) {
       const r = await fetch(url, { method, headers: { Authorization: 'Bearer ' + (await token()), ...(body === undefined ? {} : { 'Content-Type': 'application/json' }) },
diff --git a/cli/validate.ts b/cli/validate.ts
index 4d43db3..c91fdac 100644
--- a/cli/validate.ts
+++ b/cli/validate.ts
@@ -40,6 +40,39 @@ import { creativeNote } from './shots/creative';
 import { creativeWaiting, localCreative } from './apple/creative-assets';
 import { fixFor, GUIDELINE, hitLine } from './lib/cross-store';
 import { listingFileMentions } from './lib/listing-mentions';
+import { brokerConfig, brokerPlayInfo, enabledApisOf, grantsOf, type PlayNeed, playGaps, sdkConfigGaps } from './lib/broker';
+import { playCredentials } from './lib/google-auth';
+import { usesPlayGames } from './lib/game-services';
+
+/** What the config's Play work needs from the service account: uploads and the listing always, products,
+ *  declarations and Play Games when the config has them. */
+export function playNeedsOf(config: Loaded['config']): PlayNeed[] {
+  const needs: PlayNeed[] = ['upload', 'listing'];
+  if ((config.products ?? []).some(p => sellsOn(config, p, 'play')) || allSubscriptions(config.subscriptions).some(x => sellsOn(config, x.sub, 'play'))) needs.push('iap');
+  if (config.dataSafety) needs.push('declarations');
+  if (usesPlayGames(config)) needs.push('games');
+  return needs;
+}
+
+/** With a credential broker: the Play permissions and enabled APIs it lists for the package, the gaps for what the
+ *  config needs (blockers: the commands would get a 403), and SDK config drift. Nothing without a broker. */
+export async function brokerFindings(loaded: Loaded): Promise<Finding[]> {
+  const { config, root } = loaded;
+  const pkg = config.play?.packageName;
+  if (!pkg) return [];
+  let cfg;
+  try { cfg = brokerConfig(root); } catch (e) { return [{ store: 'play', level: 'warn', code: 'broker-config', msg: (e as Error).message, fix: '~/.storebound/broker.json: { "url", "apiKeyFile" }' }]; }
+  if (!cfg) return [];
+  const r = await brokerPlayInfo(cfg, pkg);
+  if (r.kind === 'not-registered') return [{ store: 'play', level: 'warn', code: 'broker-not-registered', msg: r.message, fix: 'register the package on the credential broker (google_play_set)' }];
+  if (r.kind !== 'ok') return [{ store: 'play', level: 'warn', code: 'broker-unavailable', msg: `${r.message}: permission checks skipped`, fix: 'check the credential broker url and API key (~/.storebound/broker.json)' }];
+  const out: Finding[] = [];
+  const grants = grantsOf(r.info), apis = enabledApisOf(r.info);
+  out.push({ store: 'play', level: 'ok', code: 'broker-access', msg: `credential broker: ${r.info.account ?? 'service account'} on ${pkg}: Play permissions ${grants ? (grants.join(', ') || 'none') : 'not listed'}; enabled APIs ${apis ? (apis.join(', ') || 'none') : 'not listed'}` });
+  for (const g of playGaps(r.info, playNeedsOf(config))) out.push({ store: 'play', level: 'blocker', code: g.kind === 'grant' ? 'broker-grant' : 'broker-api', msg: g.message, fix: g.fix, url: g.url });
+  for (const m of sdkConfigGaps(r.info, root)) out.push({ store: 'play', level: 'warn', code: 'sdk-config', msg: m });
+  return out;
+}
 
 /** Profile facts for the checks: config + local credentials + public URL checks (no store API). */
 export async function collectProfile(loaded: Loaded): Promise<ProfileFacts> {
@@ -231,8 +264,11 @@ export async function run(ctx: Ctx): Promise<void> {
     if (creative) findings.push({ store: 'apple', level: 'ok', code: 'creative-assets', msg: creative, fix: 'storebound apple creative-assets --dry' });
   } else if (a.has('apple')) warn('validate', 'no apple section in the config');
   if ((both || a.has('play')) && config.play) {
+    // the broker's grants first: a missing permission is named before the edit reads hit the same 403
+    const access = await brokerFindings(ctx.loaded).catch(e => [{ store: 'play' as const, level: 'warn' as const, code: 'broker-unavailable', msg: (e as Error).message }]);
+    findings.push(...access);
     try { findings.push(...playRules({ ...(await collectPlay(ctx)), renders: local?.play })); }
-    catch (e) { findings.push({ store: 'play', level: 'blocker', code: 'api', msg: (e as Error).message.slice(0, 400) }, ...rendersFindings('play', local?.play)); }
+    catch (e) { findings.push({ store: 'play', level: 'blocker', code: 'api', msg: (e as Error).message.slice(0, 600) }, ...rendersFindings('play', local?.play)); }
   } else if (a.has('play')) warn('validate', 'no play section in the config');
   // Game Center / Play Games Services: entitlement, APP_ID resource, store state vs the config
   if (config.games || config.apple) {
@@ -259,7 +295,9 @@ export async function run(ctx: Ctx): Promise<void> {
     findings.push(...sortFindings(healthFindings(h, { unreadable: 'ok' })));
   }
   const blockers = findings.filter(f => f.level === 'blocker').length;
-  if (a.has('json')) printJson({ blockers, findings });
+  // where Play tokens come from (MCP validate reads it): "broker" or "file", never a value
+  const credentials = config.play ? { play: { source: playCredentials(ctx.loaded.root).source } } : {};
+  if (a.has('json')) printJson({ blockers, findings, credentials });
   else {
     console.log(formatFindings(findings));
     log('validate', blockers ? `${blockers} blocker(s)` : 'no blockers (UI-only steps are not visible to the API: App Privacy, Play App content)');
diff --git a/docs/README.md b/docs/README.md
index 0d6d79d..9efa6f3 100644
--- a/docs/README.md
+++ b/docs/README.md
@@ -26,6 +26,8 @@ The [README](../README.md) is the short tour; everything in detail lives here.
 - [Skills](skills.md)
 - [MCP server and the desktop machine interface](mcp.md)
 - [Safety model](safety.md)
+- [Google access through a credential broker](credential-broker.md): Play tokens and permission checks from a server of
+  yours, no Google key on the machine
 - [Idempotency: every write converges](idempotency.md)
 - [Pitfalls: lessons from real use](pitfalls.md)
 
diff --git a/docs/credential-broker.md b/docs/credential-broker.md
new file mode 100644
index 0000000..749b6c0
--- /dev/null
+++ b/docs/credential-broker.md
@@ -0,0 +1,85 @@
+# Google access through a credential broker
+
+A credential broker is a server of yours that holds the Google service-account keys, the Cloud project facts and the
+Play permission grants. With one configured, storebound keeps no Google key on the machine: it asks the broker for a
+short-lived access token for each Google API call and reads the package's Play permissions from it before a command
+writes anything. The local key (`PLAY_SERVICE_ACCOUNT`) keeps working and is the fallback.
+
+## Setup
+
+`~/.storebound/broker.json`:
+
+```json
+{
+  "url": "https://broker.example.com",
+  "apiKeyFile": "~/.storebound/broker.key",
+  "account": "play-publisher@example.com"
+}
+```
+
+- `url`: the broker's base URL. Only `https://` (plain `http://` only for `localhost`, a local test broker).
+- `apiKeyFile`: a file with one scoped API key on one line, with the scopes `google:read` and `google:token`. On macOS
+  and Linux it must be `chmod 600`: storebound refuses a key file that the group or others can read. Default:
+  `broker.key` next to `broker.json`. The key is never printed, never written into a config or a log.
+- `account` (optional): the service account e-mail the broker mints tokens for. A credential profile or the project
+  can name its own with `PLAY_SERVICE_ACCOUNT_EMAIL` (env, `~/.storebound/credentials/<profile>.json`,
+  `.storebound/credentials.json`); without either, the `client_email` of a local key is used, and for Play commands
+  the account the broker names for the package.
+
+Overrides: `STOREBOUND_BROKER_URL`, `STOREBOUND_BROKER_KEY_FILE` (env wins over the file), `STOREBOUND_BROKER_CONFIG`
+(another broker.json). Off: `STOREBOUND_BROKER=off` for one run, `"broker": false` in a credential profile (that profile
+keeps its key file), or env `STOREBOUND_PROFILE_<NAME>_BROKER=off`.
+
+## What storebound calls
+
+| call | when |
+|---|---|
+| `POST /api/google/token` `{ "account", "scopes": ["androidpublisher"] }` -> `{ "accessToken", "expiresAt" }` | before Google calls. Kept in memory until 5 minutes before `expiresAt`; parallel calls share one request |
+| `GET /api/google/play/<package>/storebound` | `storebound validate`, the preflight of Play write commands, `apps check` and the desktop's Accounts view |
+
+Scopes: `androidpublisher` for the Play Developer API, `cloud-platform.read-only` for Play statistics exports and Play
+Games configuration reads. The broker hands out no scope for the Play Developer Reporting API (vitals, the app list of
+`apps list`) or for Play Games configuration writes: those use the local key, and say so when there is none.
+
+## Fallback and failures
+
+- Broker not configured: the local key, as before.
+- Broker not answering (network error, timeout, 5xx) or not knowing the account (400 / 404 on a token): the local key,
+  with one warning per run. No local key: the error names the broker.
+- Broker refusing the API key (401 / 403): storebound stops with "the key lacks google:token" and does not retry or
+  fall back. Give the key its scopes on the broker.
+- A package the broker does not know (404 on `/storebound`): a warning to register it there. It is not a missing
+  Play access; the command still runs and Google answers for itself.
+
+## Permission checks
+
+The broker's answer lists the service account's Play permissions for the package and the APIs enabled in its Cloud
+projects. Before a Play command writes, storebound compares them with what the command needs and stops before any
+Play call, naming the exact permission or API and the link to fix it:
+
+| work | Play permission | commands |
+|---|---|---|
+| uploads, releases, rollouts | `CAN_MANAGE_TRACK_APKS` | `play upload`, `play release`, `play rollout`, `play share` |
+| store listing and images | `CAN_MANAGE_PUBLIC_LISTING` | `play listing`, `play images` |
+| products and subscriptions | `CAN_MANAGE_ORDERS` | `play products`, `play subscriptions` |
+| Data safety, app content | `CAN_MANAGE_APP_CONTENT` | `play data-safety` |
+| review replies | `CAN_REPLY_TO_REVIEWS` | (listed in the checks) |
+| Play Games Services | API `gamesconfiguration.googleapis.com` | `play games` |
+
+Every Play call also needs `androidpublisher.googleapis.com` enabled. A dry run (`--dry`) and reads only warn.
+`storebound validate` reports the same gaps as blockers, the permissions and APIs the broker lists, and SDK config
+files (`google-services.json`, `GoogleService-Info.plist`) the broker reports as drifted or whose sha256 differs from
+the repo's copy.
+
+When Google itself answers 403 `SERVICE_DISABLED` or `PERMISSION_DENIED`, the error names the API (with its enable
+link) or the missing app access (with the Users and permissions link), adds what the broker lists for the package, and
+is never retried.
+
+## Where it shows
+
+- `storebound doctor`: `Play: tokens from the credential broker <url> for p***@...` (or the local key, and why the
+  broker is not usable). `--json`: `play.source` is `"broker"` or `"file"`.
+- `storebound accounts`: a "Play via" column (credential broker / key file) per profile.
+- `storebound validate --json` (and MCP `validate`): `credentials.play.source`.
+- `storebound apps check --store play --json` and the desktop's Accounts view: `source` and, per Play app of the
+  machine, the permissions and APIs the broker lists and what is missing.
diff --git a/docs/getting-started.md b/docs/getting-started.md
index ea6c825..6301f0f 100644
--- a/docs/getting-started.md
+++ b/docs/getting-started.md
@@ -115,12 +115,16 @@ Store accounts belong to the machine, everything else to the project:
   `.storebound/credentials.json`.
 - **Order:** environment variables win over everything, then a profile the project names, then the project file,
   then the default profile.
+- **Google keys on a server of yours:** with a credential broker in `~/.storebound/broker.json`, Play tokens come from
+  it and the machine needs no Google key; the local key stays the fallback. See
+  [Google access through a credential broker](credential-broker.md).
 
 The names (env, profile and project file alike; the project file is gitignored by `init`):
 
 | name | what |
 |---|---|
 | `PLAY_SERVICE_ACCOUNT` | path to the Google Cloud service account JSON key (or the JSON itself) with access to your app in Play Console |
+| `PLAY_SERVICE_ACCOUNT_EMAIL` | with a [credential broker](credential-broker.md): the service account the broker mints tokens for (no key file needed) |
 | `ASC_KEY_ID`, `ASC_ISSUER_ID` | App Store Connect API team key (Users and Access > Integrations) |
 | `ASC_P8` | path to `AuthKey_<id>.p8` (default `~/.appstoreconnect/private_keys/AuthKey_<id>.p8`) |
 | `ASC_VENDOR_NUMBER` | vendor number for `reports apple-sales` / `apple-finance` (Payments and Financial Reports) |
diff --git a/docs/pitfalls.md b/docs/pitfalls.md
index 4f58aed..55cc3a4 100644
--- a/docs/pitfalls.md
+++ b/docs/pitfalls.md
@@ -9,6 +9,7 @@ fails without the fix.
 
 | # | date | lesson | guard |
 |---|---|---|---|
+| 95 | 2026-10 | The Google service-account keys moved to the owner's credential broker, but storebound still wanted a local `PLAY_SERVICE_ACCOUNT`, and a Play write with a missing permission ran its edit before Google's bare 403. | `cli/lib/broker.ts` (broker.json, key file mode 600, token cache and single flight, grants, `playPreflight` before Play write commands), `playToken` in `cli/lib/google-auth.ts` (broker first, local key fallback when it does not answer), `cli/lib/google-access.ts` (403 SERVICE_DISABLED / PERMISSION_DENIED -> exact API or grant with its link, never retried), `validate` blockers; `tests/credential-broker.test.ts` against a local fake broker. Skill pitfall 122, docs/credential-broker.md. |
 | 94 | 2026-10 | An app with managed publishing was approved but never went live: `play status` said "In review / ready to publish" with no next step, and the Publishing overview "Publish N changes" button (production + Data safety) was easy to miss or to confuse with Discard changes. | `console plan play-publish-changes` (final "Publish N changes" is the owner's, Discard changes / Stop managed publishing never-press), `console verify play-publish-changes` (API), the hint in `play status`, `status` and the desktop Releases tab (`cli/lib/play-publish.ts`, `tests/console-play-plans.test.ts`). |
 | 93 | 2026-10 | A git-ignored, never-captured frames folder rendered store images with no app or game in them; render only logged 404s and `shots check` said 0 errors. | `shots render` refuses to start while a scene frame is missing (`framesForRender` in `cli/shots/lib.ts`) and fails when any load failed; report.json `missing` is a `frame-missing` error in `shots check` / `validate` (`cli/shots/report.ts`, `tests/shots-missing-frames.test.ts`). |
 | 90 | 2026-10 | `apple submit --build N --version X --yes` after `apple submit --no-submit --yes` (the documented two-step flow) printed the plan (every item "in it already", then "submit PATCH submitted: true"), logged "not added ...: already in the draft submission" and ended with "nothing to submit" without the PATCH: the submit only ran for new items or an UNRESOLVED_ISSUES submission. | `willSubmit` (cli/lib/review-submit.ts) also submits a READY_FOR_REVIEW draft that already holds the named app version (iap-submit: one of the asked-for items), with the same "not ready yet" retry. `tests/resubmit.test.ts` ("the second step submits the prepared draft"). |
diff --git a/skills/store-pitfalls/SKILL.md b/skills/store-pitfalls/SKILL.md
index 967824b..7392b6d 100644
--- a/skills/store-pitfalls/SKILL.md
+++ b/skills/store-pitfalls/SKILL.md
@@ -1498,3 +1498,20 @@ that fails without the fix (see CONTRIBUTING.md).
   `cli/apple/signing.ts`, `tests/signing-targets.test.ts` (fixture pbxproj with an app, a share extension and app group
   entitlements, a decoded profile plist, a fake App Store Connect), `cli/lib/console-apple-group-plan.ts` (the plan),
   `verifyAppGroupsApi` in `cli/lib/console-verify.ts`, `appGroupVerdicts` in `cli/lib/targets.ts` (gap / unproven / ok).
+
+## 122. Google keys moved to a credential broker: tokens, fallback and missing grants
+
+- **Symptom:** after the Google service-account keys moved to the owner's credential broker, Play commands either
+  still wanted `PLAY_SERVICE_ACCOUNT`, or an upload ran its edit, uploaded and only then died on a bare 403 for a
+  permission the broker could have named; an error dump could carry the bearer token.
+- **Do:** configure `~/.storebound/broker.json` (`url`, `apiKeyFile`, key file mode 600) and, when the account is not
+  the local key's, `PLAY_SERVICE_ACCOUNT_EMAIL` in the profile. `storebound doctor` says which source Play uses.
+  Before Play writes, the preflight reads `GET /api/google/play/<package>/storebound` and stops on a missing
+  permission or API with the exact name and link; grant it on the broker (`google_play_grant`) or enable the API
+  (`google_api_enable`), never by retrying. A 404 there means "register the package on the broker", not "no access".
+  A broker that refuses the API key (401 / 403) needs `google:read google:token` on the key; storebound neither retries
+  nor falls back then. The broker has no scope for the Reporting API or Play Games writes: those keep the local key.
+- **Never:** write an access token to disk or into a log, put the broker key into a config or docs, or loop on a 403.
+- **Guard:** `cli/lib/broker.ts` (config, key file mode, token cache and single flight, grants, preflight, redaction),
+  `cli/lib/google-auth.ts` `playToken` (broker first, local key fallback), `cli/lib/google-access.ts` (403 ->
+  GoogleAccessError, no retry), `tests/credential-broker.test.ts` (a local fake broker).
diff --git a/tests/credential-broker.test.ts b/tests/credential-broker.test.ts
new file mode 100644
index 0000000..e99e8e2
--- /dev/null
+++ b/tests/credential-broker.test.ts
@@ -0,0 +1,339 @@
+// Google access through a credential broker (cli/lib/broker.ts, playToken in cli/lib/google-auth.ts), against a local
+// Bun.serve fake broker: token minting, caching, single flight and expiry, fallback to the local key, the package's
+// Play permissions, the missing-grant guardrail (preflight and Google's own 403), key file permissions, and that no
+// key or token shows up in any output.
+import { afterAll, afterEach, beforeAll, beforeEach, describe, expect, test } from 'bun:test';
+import { generateKeyPairSync } from 'node:crypto';
+import { chmodSync, mkdirSync, mkdtempSync, rmSync, writeFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import { type BrokerConfig, brokerConfig, brokerKey, brokerPlayInfo, BrokerRefused, brokerToken, checkBrokerUrl, clearBrokerCache, playGaps, playPreflight, redact } from '../cli/lib/broker';
+import { playCredentials, playToken } from '../cli/lib/google-auth';
+import { accessError, GoogleAccessError } from '../cli/lib/google-access';
+import { playClient } from '../cli/play/client';
+import { doctor, playLine } from '../cli/doctor';
+
+const PKG = 'com.example.game';
+const ACCOUNT = 'publisher@sb-test.example.com';
+const API_KEY = 'brokerkey_0123456789abcdef';
+const ENV = ['PLAY_SERVICE_ACCOUNT', 'PLAY_SERVICE_ACCOUNT_EMAIL', 'STOREBOUND_BROKER', 'STOREBOUND_BROKER_URL', 'STOREBOUND_BROKER_KEY_FILE', 'STOREBOUND_BROKER_CONFIG',
+  'STOREBOUND_CREDENTIALS_DIR', 'STOREBOUND_PROFILE', 'STOREBOUND_BROKER_TIMEOUT_MS'] as const;
+const saved = Object.fromEntries(ENV.map(k => [k, process.env[k]]));
+
+interface Seen { method: string; path: string; auth: string | null; body: unknown }
+let seen: Seen[] = [];
+let mints = 0;
+/** What the fake broker answers; tests change it. */
+let route: (s: Seen) => Response | Promise<Response>;
+const json = (o: unknown, status = 200) => new Response(JSON.stringify(o), { status, headers: { 'content-type': 'application/json' } });
+const nowS = () => Math.floor(Date.now() / 1000);
+const defaultRoute = (s: Seen): Response => {
+  if (s.path === '/api/google/token') { mints++; return json({ accessToken: `ya29.fake-${mints}`, expiresAt: nowS() + 3600, clientEmail: ACCOUNT, scopes: ['androidpublisher'] }); }
+  if (s.path === `/api/google/play/${PKG}/storebound`) return json(INFO);
+  return json({ error: 'err_not_found' }, 404);
+};
+const INFO = {
+  packageName: PKG, developerId: '5550000000000000001', account: ACCOUNT,
+  accountPermissions: { developer: [], app: ['CAN_MANAGE_PUBLIC_LISTING', 'CAN_MANAGE_ORDERS'] },
+  grantsCheckedAt: 1761390000,
+  projects: [{ projectId: 'sb-test-project', projectNumber: '100000000001', enabledApis: ['androidpublisher.googleapis.com'], billing: 'linked' }],
+  sdkConfigs: [],
+};
+
+let server: ReturnType<typeof Bun.serve>;
+let tmp: string, root: string, keyFile: string;
+const realFetch = globalThis.fetch;
+
+beforeAll(() => {
+  server = Bun.serve({
+    port: 0,
+    async fetch(req) {
+      const u = new URL(req.url);
+      const text = await req.text();
+      const s: Seen = { method: req.method, path: decodeURIComponent(u.pathname), auth: req.headers.get('authorization'), body: text ? JSON.parse(text) : null };
+      seen.push(s);
+      return route(s);
+    },
+  });
+});
+afterAll(() => { server.stop(true); });
+
+function writeBroker(o: Record<string, unknown> = {}): void {
+  writeFileSync(join(tmp, 'broker.json'), JSON.stringify({ url: `http://127.0.0.1:${server.port}`, apiKeyFile: keyFile, account: ACCOUNT, ...o }));
+}
+function localKey(): void {
+  const { privateKey } = generateKeyPairSync('rsa', { modulusLength: 2048 });
+  process.env.PLAY_SERVICE_ACCOUNT = JSON.stringify({ client_email: ACCOUNT, private_key: privateKey.export({ type: 'pkcs8', format: 'pem' }).toString(), token_uri: 'https://oauth2.googleapis.com/token' });
+}
+/** fetch double for Google only (the local key's token exchange, the Play API); the fake broker is reached for real. */
+function fakeGoogle(api: (url: string, init?: RequestInit) => Response = () => json({})): string[] {
+  const calls: string[] = [];
+  globalThis.fetch = (async (input: string | URL | Request, init?: RequestInit) => {
+    const url = String(input instanceof Request ? input.url : input);
+    if (url === 'https://oauth2.googleapis.com/token') return json({ access_token: 'local-file-token', expires_in: 3600 });
+    if (/googleapis\.com/.test(url)) { calls.push(`${init?.method ?? 'GET'} ${url}`); return api(url, init); }
+    return realFetch(input as Request, init);
+  }) as typeof fetch;
+  return calls;
+}
+
+beforeEach(() => {
+  for (const k of ENV) delete process.env[k];
+  tmp = mkdtempSync(join(tmpdir(), 'sb-broker-'));
+  root = join(tmp, 'project');
+  mkdirSync(root, { recursive: true });
+  keyFile = join(tmp, 'broker.key');
+  writeFileSync(keyFile, API_KEY + '\n', { mode: 0o600 });
+  process.env.STOREBOUND_BROKER_CONFIG = join(tmp, 'broker.json');
+  process.env.STOREBOUND_CREDENTIALS_DIR = join(tmp, 'credentials');
+  process.env.STOREBOUND_PROFILE = '';
+  seen = []; mints = 0; route = defaultRoute;
+  clearBrokerCache();
+});
+afterEach(() => {
+  globalThis.fetch = realFetch;
+  rmSync(tmp, { recursive: true, force: true });
+  for (const k of ENV) { if (saved[k] === undefined) delete process.env[k]; else process.env[k] = saved[k]; }
+});
+
+describe('config', () => {
+  test('broker.json, env overrides, https only, per-profile opt-out', () => {
+    expect(brokerConfig(root)).toBeNull();
+    writeBroker();
+    const c = brokerConfig(root)!;
+    expect(c.url).toBe(`http://127.0.0.1:${server.port}`);
+    expect(c.keyFile).toBe(keyFile);
+    expect(c.account).toBe(ACCOUNT);
+    // PLAY_SERVICE_ACCOUNT_EMAIL (here a broker credential id) wins over broker.json
+    process.env.PLAY_SERVICE_ACCOUNT_EMAIL = 'cred-play-1';
+    expect(brokerConfig(root)!.account).toBe('cred-play-1');
+    delete process.env.PLAY_SERVICE_ACCOUNT_EMAIL;
+    process.env.STOREBOUND_BROKER_URL = 'https://broker.example.com/';
+    expect(brokerConfig(root)!.url).toBe('https://broker.example.com');
+    expect(brokerConfig(root)!.from).toBe('env');
+    process.env.STOREBOUND_BROKER = 'off';
+    expect(brokerConfig(root)).toBeNull();
+    delete process.env.STOREBOUND_BROKER;
+    expect(() => checkBrokerUrl('http://broker.example.com')).toThrow(/https only/);
+    // a profile that keeps its own key
+    const creds = join(tmp, 'credentials');
+    mkdirSync(creds, { recursive: true });
+    writeFileSync(join(creds, 'p1.json'), JSON.stringify({ broker: false }));
+    process.env.STOREBOUND_PROFILE = 'p1';
+    expect(brokerConfig(root)).toBeNull();
+  });
+
+  test('a broken broker.json is an error, not a silent skip', () => {
+    writeFileSync(join(tmp, 'broker.json'), '{ not json');
+    expect(() => brokerConfig(root)).toThrow(/broker\.json/);
+  });
+});
+
+describe('key file permissions', () => {
+  test('group / world readable refused on POSIX, accepted on Windows; the key is never in the message', () => {
+    writeBroker();
+    const cfg = brokerConfig(root)!;
+    if (process.platform !== 'win32') {
+      chmodSync(keyFile, 0o644);
+      expect(() => brokerKey(cfg)).toThrow(/chmod 600/);
+      chmodSync(keyFile, 0o600);
+      expect(brokerKey(cfg)).toBe(API_KEY);
+    } else {
+      // Windows reports 0o666 for every writable file: the POSIX rule is checked by naming the platform
+      let msg = '';
+      try { brokerKey(cfg, 'linux'); } catch (e) { msg = (e as Error).message; }
+      expect(msg).toMatch(/readable by group or others .*chmod 600/);
+      expect(msg).not.toContain(API_KEY);
+      expect(brokerKey(cfg, 'win32')).toBe(API_KEY);
+    }
+    rmSync(keyFile);
+    expect(() => brokerKey(cfg)).toThrow(/not found/);
+  });
+});
+
+describe('token minting', () => {
+  test('one mint, cached until 5 minutes before expiry, scoped request with the bearer key', async () => {
+    writeBroker();
+    const t = playToken(root);
+    expect(await t()).toBe('ya29.fake-1');
+    expect(await t()).toBe('ya29.fake-1');
+    expect(mints).toBe(1);
+    expect(t.source()).toBe('broker');
+    expect(t.principal()).toBe(ACCOUNT);
+    const mint = seen.find(s => s.path === '/api/google/token')!;
+    expect(mint.method).toBe('POST');
+    expect(mint.auth).toBe(`Bearer ${API_KEY}`);
+    expect(mint.body).toEqual({ account: ACCOUNT, scopes: ['androidpublisher'] });
+  });
+
+  test('parallel callers share one request (single flight)', async () => {
+    writeBroker();
+    route = async s => { await Bun.sleep(50); return defaultRoute(s); };
+    const t = playToken(root);
+    const all = await Promise.all(Array.from({ length: 6 }, () => t()));
+    expect(new Set(all)).toEqual(new Set(['ya29.fake-1']));
+    expect(mints).toBe(1);
+  });
+
+  test('a token close to expiry is minted again', async () => {
+    writeBroker();
+    const cfg = brokerConfig(root)!;
+    let clock = Date.now();
+    expect(await brokerToken(cfg, ACCOUNT, 'androidpublisher', () => clock)).toBe('ya29.fake-1');
+    clock += 3000_000; // 50 min later: 10 min left, still cached
+    expect(await brokerToken(cfg, ACCOUNT, 'androidpublisher', () => clock)).toBe('ya29.fake-1');
+    clock += 400_000; // under 5 min left
+    expect(await brokerToken(cfg, ACCOUNT, 'androidpublisher', () => clock)).toBe('ya29.fake-2');
+    expect(mints).toBe(2);
+  });
+
+  test('the account comes from the broker for the package when nothing names it', async () => {
+    writeBroker({ account: undefined });
+    const t = playToken(root, undefined, { packageName: PKG });
+    expect(await t()).toBe('ya29.fake-1');
+    expect((seen.find(s => s.path === '/api/google/token')!.body as { account: string }).account).toBe(ACCOUNT);
+  });
+
+  test('Reporting has no broker scope: the local key serves it, and without one the error says so', () => {
+    writeBroker();
+    expect(() => playToken(root, 'https://www.googleapis.com/auth/playdeveloperreporting')).toThrow(/hands out no such scope/);
+  });
+});
+
+describe('fallback to the local key', () => {
+  test('broker not answering: the local key, one warning, source "file"', async () => {
+    localKey();
+    fakeGoogle();
+    writeFileSync(join(tmp, 'broker.json'), JSON.stringify({ url: 'http://127.0.0.1:9', apiKeyFile: keyFile }));
+    process.env.STOREBOUND_BROKER_TIMEOUT_MS = '2000';
+    const warnings: string[] = [];
+    const t = playToken(root, undefined, { warn: m => warnings.push(m) });
+    expect(await t()).toBe('local-file-token');
+    expect(await t()).toBe('local-file-token');
+    expect(t.source()).toBe('file');
+    expect(warnings.length).toBe(1);
+    expect(warnings[0]).toMatch(/did not answer.*local service account key/);
+  });
+
+  test('broker 503: the local key', async () => {
+    localKey();
+    fakeGoogle();
+    writeBroker();
+    route = () => json({ error: 'down' }, 503);
+    const t = playToken(root, undefined, { warn: () => {} });
+    expect(await t()).toBe('local-file-token');
+  });
+
+  test('broker refusing the API key (401): no fallback, no retry, the key lacks google:token', async () => {
+    localKey();
+    fakeGoogle();
+    writeBroker();
+    route = () => json({ error: 'err_scope', echo: `Bearer ${API_KEY}` }, 401);
+    const t = playToken(root, undefined, { warn: () => {} });
+    const e = await t().then(() => null, x => x as Error);
+    expect(e).toBeInstanceOf(BrokerRefused);
+    expect(e!.message).toMatch(/lacks the google:token scope/);
+    expect(e!.message).not.toContain(API_KEY);
+    expect(seen.filter(s => s.path === '/api/google/token').length).toBe(1);
+  });
+
+  test('no broker: the local key as before; neither: the PLAY_SERVICE_ACCOUNT error', async () => {
+    expect(() => playToken(root)).toThrow(/PLAY_SERVICE_ACCOUNT is not set/);
+    localKey();
+    fakeGoogle();
+    const t = playToken(root);
+    expect(await t()).toBe('local-file-token');
+    expect(t.source()).toBe('file');
+    expect(seen.length).toBe(0);
+  });
+});
+
+describe('Play permissions from the broker', () => {
+  test('grants and APIs read; gaps name the permission, the API and their links', async () => {
+    writeBroker();
+    const r = await brokerPlayInfo(brokerConfig(root)!, PKG);
+    expect(r.kind).toBe('ok');
+    if (r.kind !== 'ok') return;
+    const gaps = playGaps(r.info, ['upload', 'listing', 'games']);
+    expect(gaps.map(g => g.name)).toEqual(['CAN_MANAGE_TRACK_APKS', 'gamesconfiguration.googleapis.com']);
+    expect(gaps[0]!.url).toBe('https://play.google.com/console/u/0/developers/5550000000000000001/users-and-permissions');
+    expect(gaps[0]!.fix).toMatch(/google_play_grant/);
+    expect(gaps[1]!.url).toBe('https://console.cloud.google.com/apis/library/gamesconfiguration.googleapis.com?project=sb-test-project');
+    // read once per run and package
+    await brokerPlayInfo(brokerConfig(root)!, PKG);
+    expect(seen.filter(s => s.path.endsWith('/storebound')).length).toBe(1);
+  });
+
+  test('404: register the package, not "no access"', async () => {
+    writeBroker();
+    const r = await brokerPlayInfo(brokerConfig(root)!, 'com.example.other');
+    expect(r.kind).toBe('not-registered');
+    if (r.kind === 'not-registered') expect(r.message).toMatch(/register the package .*not a missing Play access/);
+  });
+
+  test('preflight: a write stops before any Play call with the exact grant; a dry run only warns', async () => {
+    writeBroker();
+    const google = fakeGoogle();
+    const e = await playPreflight('play upload', root, PKG, { dry: false, warn: () => {} }).catch(x => x as Error);
+    expect(e).toBeInstanceOf(Error);
+    expect((e as Error).message).toMatch(/stopped before any call to Google Play/);
+    expect((e as Error).message).toMatch(/CAN_MANAGE_TRACK_APKS for com\.example\.game/);
+    const warned: string[] = [];
+    expect((await playPreflight('play upload', root, PKG, { dry: true, warn: m => warned.push(m) })).length).toBe(1);
+    expect(warned[0]).toMatch(/CAN_MANAGE_TRACK_APKS/);
+    // granted: nothing; a command without needs: nothing
+    expect(await playPreflight('play listing', root, PKG, { dry: false, warn: () => {} })).toEqual([]);
+    expect(await playPreflight('play status', root, PKG, { dry: false, warn: () => {} })).toEqual([]);
+    expect(google).toEqual([]);
+  });
+});
+
+describe('Google 403 guardrail', () => {
+  const DISABLED = `GET /edits -> 403 {"error":{"code":403,"message":"Google Play Android Developer API has not been used in project 100000000001 before or it is disabled.","status":"PERMISSION_DENIED","details":[{"reason":"SERVICE_DISABLED","metadata":{"service":"androidpublisher.googleapis.com","consumer":"projects/sb-test-project"}}]}}`;
+  test('SERVICE_DISABLED: the API and its enable link, never retried', async () => {
+    const e = await accessError(DISABLED, { app: PKG });
+    expect(e).toBeInstanceOf(GoogleAccessError);
+    expect(e!.noRetry).toBe(true);
+    expect(e!.message).toContain('https://console.cloud.google.com/apis/library/androidpublisher.googleapis.com?project=sb-test-project');
+  });
+
+  test('PERMISSION_DENIED through the Play client with broker tokens: one call, the grants the broker lists', async () => {
+    writeBroker();
+    const google = fakeGoogle(() => json({ error: { code: 403, message: 'The caller does not have permission', status: 'PERMISSION_DENIED' } }, 403));
+    const play = await playClient(root, PKG);
+    const e = await play.call('POST', `${play.API}/edits`, {}).then(() => null, x => x as Error);
+    expect(e).toBeInstanceOf(GoogleAccessError);
+    expect(google.length).toBe(1);
+    expect(e!.message).toMatch(/no access to com\.example\.game in Play Console/);
+    expect(e!.message).toMatch(/credential broker lists CAN_MANAGE_ORDERS, CAN_MANAGE_PUBLIC_LISTING/);
+    expect(play.credentialSource()).toBe('broker');
+  });
+});
+
+describe('no secret in output', () => {
+  test('redact removes tokens, bearer values and the key', () => {
+    expect(redact(`Authorization: Bearer ${API_KEY} token ya29.a0AfH6SM-x_y.z`, API_KEY)).toBe('Authorization: Bearer *** token ya29.***');
+  });
+
+  test('doctor and the credential summary carry the source, never the key or a token', async () => {
+    writeBroker();
+    await playToken(root)();
+    const p = playCredentials(root);
+    expect(p.source).toBe('broker');
+    const d = doctor(root);
+    const out = JSON.stringify(d) + playLine(d.play);
+    expect(d.play.source).toBe('broker');
+    expect(playLine(d.play)).toMatch(/tokens from the credential broker/);
+    expect(out).not.toContain(API_KEY);
+    expect(out).not.toContain('ya29.');
+    expect(out).not.toContain(ACCOUNT); // masked
+  });
+
+  test('a broker error body echoing the key or a token is redacted', async () => {
+    writeBroker();
+    route = () => new Response(`upstream failed for Bearer ${API_KEY} ya29.secret-token`, { status: 502 });
+    const e = await brokerToken(brokerConfig(root)! as BrokerConfig, ACCOUNT, 'androidpublisher').then(() => null, x => x as Error);
+    expect(e!.message).not.toContain(API_KEY);
+    expect(e!.message).not.toContain('ya29.secret-token');
+  });
+});
diff --git a/tests/helpers/preload.ts b/tests/helpers/preload.ts
index 9fe5d67..35c48f4 100644
--- a/tests/helpers/preload.ts
+++ b/tests/helpers/preload.ts
@@ -14,6 +14,10 @@ const machine = mkdtempSync(join(tmpdir(), 'storebound-machine-'));
 process.env.STOREBOUND_CREDENTIALS_DIR = join(machine, 'credentials');
 process.env.STOREBOUND_REGISTRY = join(machine, 'projects.json');
 process.env.STOREBOUND_LOCK_DIR = join(machine, 'locks');
+// the credential broker of this machine (~/.storebound/broker.json, cli/lib/broker.ts) is never asked either
+process.env.STOREBOUND_BROKER_CONFIG = join(machine, 'broker.json');
+delete process.env.STOREBOUND_BROKER_URL;
+delete process.env.STOREBOUND_BROKER_KEY_FILE;
 
 // Commands run in-process set process.exitCode on purpose (a check with problems, a declined confirmation:
 // DECLINED_EXIT in cli/lib/ctx.ts). Tests assert it where it matters; it must not leak into bun test's own exit code.

From b59665c6618093f26563914b59fde1d4affd1089 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Sun, 25 Oct 2026 23:18:12 +0700
Subject: [PATCH 035/126] storebound 0.8.50: version in package.json and every
 copy, CHANGELOG 0.8.50 section

---
 .claude-plugin/marketplace.json        | 2 +-
 .claude-plugin/plugin.json             | 2 +-
 .codex-plugin/plugin.json              | 2 +-
 CHANGELOG.md                           | 2 ++
 apps/desktop/package.json              | 2 +-
 apps/desktop/src-tauri/Cargo.lock      | 2 +-
 apps/desktop/src-tauri/Cargo.toml      | 2 +-
 apps/desktop/src-tauri/tauri.conf.json | 2 +-
 gemini-extension.json                  | 2 +-
 package.json                           | 2 +-
 10 files changed, 11 insertions(+), 9 deletions(-)

diff --git a/.claude-plugin/marketplace.json b/.claude-plugin/marketplace.json
index 4919deb..01cf4d6 100644
--- a/.claude-plugin/marketplace.json
+++ b/.claude-plugin/marketplace.json
@@ -9,7 +9,7 @@
       "name": "storebound",
       "source": ".",
       "description": "Take a mobile app or game from nothing to Submit for review on both stores: skills for every store step and questionnaire plus the storebound CLI and MCP server.",
-      "version": "0.8.49",
+      "version": "0.8.50",
       "category": "development",
       "tags": [
         "mobile",
diff --git a/.claude-plugin/plugin.json b/.claude-plugin/plugin.json
index 3c2fc7c..5852018 100644
--- a/.claude-plugin/plugin.json
+++ b/.claude-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.49",
+  "version": "0.8.50",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/.codex-plugin/plugin.json b/.codex-plugin/plugin.json
index 5f1e53c..2089618 100644
--- a/.codex-plugin/plugin.json
+++ b/.codex-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.49",
+  "version": "0.8.50",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 2b7f477..e25097a 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,8 @@
 
 ## Unreleased
 
+## 0.8.50 · 2026-10-25
+
 - App Groups fail early under automatic signing too: `apple signing status` / `ensure` and `apple build` read the App ID's APP_GROUPS capability settings and the newest profile the API lists for each bundle id (an Xcode-managed one too) and compare it with the target's `com.apple.security.application-groups`. A profile without the group (or the capability off) stops `signing ensure` and `apple build` before the archive with the exact portal steps (Certificates, Identifiers & Profiles > Identifiers > the ID > App Groups > Configure > tick the group > Continue > Save), the deep link `.../identifiers/bundleId/edit/<resource id>`, the plan command and `signing ensure --refresh-profile`; a group nothing can prove only warns with the same steps. `apple build --allow-app-group-gap` overrides.
 - New `storebound console plan apple-app-group [--bundle-id <id>] [--groups group.a,group.b] [--lookup]` (MCP `console_plan`: `bundleId`, `groups`, `lookup`): the agent-first developer portal plan to assign an App Group to an extension's App ID (start URL per bundle id resource id, portal labels, answer sheet per extension, never-press list: Remove / Delete / Revoke). Its final Save is the agent's own (`buttons.finalByAgent`: a capability edit, not a store submission). `console verify apple-app-group` (MCP `console_verify`, API only) re-reads the App ID and the newest profile and fails while a group is missing or cannot be proven.
 - Google access through a credential broker (`~/.storebound/broker.json`: `url`, `apiKeyFile`; env `STOREBOUND_BROKER_URL` / `STOREBOUND_BROKER_KEY_FILE`): Play tokens come from the broker's `POST /api/google/token` (in memory until 5 minutes before expiry, one request per account and scope, never logged; ya29. tokens and the API key redacted in errors), the local service account key stays the fallback when the broker does not answer or does not know the account; a broker that refuses the API key stops without retry. `PLAY_SERVICE_ACCOUNT_EMAIL` names the account (env, profile, project file); a profile opts out with `"broker": false`. The key file must be mode 600 on macOS / Linux. Play write commands read the package's Play permissions and enabled APIs from the broker first and stop before any Play call on a missing one (`CAN_MANAGE_TRACK_APKS`, `CAN_MANAGE_PUBLIC_LISTING`, `CAN_MANAGE_ORDERS`, `CAN_MANAGE_APP_CONTENT`, the Games Configuration API) with the exact permission or API and its link; `validate` lists them (gaps are blockers, SDK config drift a warning) and `--json` carries `credentials.play.source`; `doctor`, `accounts` and `apps check` / the desktop's Accounts view say whether tokens come from the broker or the key file. A Google 403 SERVICE_DISABLED / PERMISSION_DENIED in the Play client names the API or grant with its fix link and is never retried (pitfall 122, docs/credential-broker.md).
diff --git a/apps/desktop/package.json b/apps/desktop/package.json
index 62a3769..2b138a0 100644
--- a/apps/desktop/package.json
+++ b/apps/desktop/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@storebound/desktop",
-  "version": "0.8.49",
+  "version": "0.8.50",
   "private": true,
   "license": "MIT",
   "type": "module",
diff --git a/apps/desktop/src-tauri/Cargo.lock b/apps/desktop/src-tauri/Cargo.lock
index ba11a53..46fcc92 100644
--- a/apps/desktop/src-tauri/Cargo.lock
+++ b/apps/desktop/src-tauri/Cargo.lock
@@ -4096,7 +4096,7 @@ checksum = "a2eb9349b6444b326872e140eb1cf5e7c522154d69e7a0ffb0fb81c06b37543f"
 
 [[package]]
 name = "storebound-desktop"
-version = "0.8.49"
+version = "0.8.50"
 dependencies = [
  "base64 0.22.1",
  "getrandom 0.3.4",
diff --git a/apps/desktop/src-tauri/Cargo.toml b/apps/desktop/src-tauri/Cargo.toml
index 1611078..1c930f7 100644
--- a/apps/desktop/src-tauri/Cargo.toml
+++ b/apps/desktop/src-tauri/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "storebound-desktop"
-version = "0.8.49"
+version = "0.8.50"
 description = "storebound desktop: every game's releases on both stores in one window"
 license = "MIT"
 edition = "2021"
diff --git a/apps/desktop/src-tauri/tauri.conf.json b/apps/desktop/src-tauri/tauri.conf.json
index ba5ad4f..87770a9 100644
--- a/apps/desktop/src-tauri/tauri.conf.json
+++ b/apps/desktop/src-tauri/tauri.conf.json
@@ -2,7 +2,7 @@
   "$schema": "https://schema.tauri.app/config/2",
   "productName": "storebound",
   "mainBinaryName": "storebound-desktop",
-  "version": "0.8.49",
+  "version": "0.8.50",
   "identifier": "dev.storebound.desktop",
   "build": {
     "frontendDist": "../dist",
diff --git a/gemini-extension.json b/gemini-extension.json
index e4f2853..6a57412 100644
--- a/gemini-extension.json
+++ b/gemini-extension.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.49",
+  "version": "0.8.50",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "contextFileName": "GEMINI.md",
   "mcpServers": {
diff --git a/package.json b/package.json
index 7e841cd..a626f6b 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.49",
+  "version": "0.8.50",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every store questionnaire (incl. account deletion and App Review demo accounts), privacy, icons, screenshots and previews, TestFlight. After launch: crash vitals, review replies, price sheets, analytics and Product Page Optimization. One config, a CLI (Node 20+ or Bun), an MCP server and Agent Skills for your AI coding agent.",
   "license": "MIT",
   "author": "CRTkafa",

From 5833776a4b00233327ba81848f0f9966799a0502 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Mon, 26 Oct 2026 10:20:27 +0700
Subject: [PATCH 036/126] analytics and reports for a collector: store-only
 configs, --json snapshot, App Usage and Play install stock numbers, per-day
 sales ranges for both stores

---
 CHANGELOG.md                      |   4 +
 cli/analytics.ts                  |  47 ++++--
 cli/commands.ts                   |   4 +-
 cli/data/flags.json               |  11 +-
 cli/inspect.ts                    |   4 +-
 cli/lib/analytics.ts              |  89 +++++++++-
 cli/lib/config.ts                 |   5 +-
 cli/lib/credentials.ts            |  18 +-
 cli/lib/reports.ts                |  92 +++++++++++
 cli/mcp-tools.ts                  |   3 +-
 cli/reports.ts                    | 138 +++++++++++++---
 docs/commands.md                  |   4 +-
 skills/store-analytics/SKILL.md   |  26 ++-
 tests/analytics-collector.test.ts | 264 ++++++++++++++++++++++++++++++
 tests/analytics.test.ts           |   2 +-
 15 files changed, 651 insertions(+), 60 deletions(-)
 create mode 100644 tests/analytics-collector.test.ts

diff --git a/CHANGELOG.md b/CHANGELOG.md
index e25097a..1176b4d 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,10 @@
 
 ## Unreleased
 
+- `analytics snapshot` and `reports` for a collector: a store-only config may name the App Store app by `apple.appId` alone (`bundleId` null or absent; every write still needs it); the Play reports bucket also comes from env `PLAY_REPORTS_BUCKET` or the credential profile's `reportsBucket` when `play.reportsBucket` is missing; `analytics snapshot --json` prints the snapshot as one JSON document on stdout (also when every store failed, with the exit code 1) and `--no-write` skips the file.
+- Snapshots carry active-user numbers per day: App Store App Usage (`sessions`, `activeDevices`, `sessionSeconds`, `crashes` from the App Sessions and App Crashes reports; a missing usage report is a `notes` line, not a failure) and Play `activeDeviceInstalls` and `totalUserInstalls` (installs overview file, else the country file summed) next to `installs` (Daily User Installs).
+- `reports apple-sales --days N | --from YYYY-MM-DD [--to ...] --json` reads the daily SALES reports of a range into one JSON (per-day summary and totals per currency, range totals per currency, `missing` days listed, never errors); `reports play-sales --days N | --from ...` gives the daily revenue per currency from the estimated sales reports (orders, refunds, charged, refunded, net, by order charged date). MCP `reports` takes `days`, `from`, `to`.
+
 ## 0.8.50 · 2026-10-25
 
 - App Groups fail early under automatic signing too: `apple signing status` / `ensure` and `apple build` read the App ID's APP_GROUPS capability settings and the newest profile the API lists for each bundle id (an Xcode-managed one too) and compare it with the target's `com.apple.security.application-groups`. A profile without the group (or the capability off) stops `signing ensure` and `apple build` before the archive with the exact portal steps (Certificates, Identifiers & Profiles > Identifiers > the ID > App Groups > Configure > tick the group > Continue > Save), the deep link `.../identifiers/bundleId/edit/<resource id>`, the plan command and `signing ensure --refresh-profile`; a group nothing can prove only warns with the same steps. `apple build --allow-app-group-gap` overrides.
diff --git a/cli/analytics.ts b/cli/analytics.ts
index f6f3f83..9ca6b63 100644
--- a/cli/analytics.ts
+++ b/cli/analytics.ts
@@ -1,23 +1,27 @@
 // Store analytics snapshots next to the listing changes.
 //   storebound analytics setup [--dry]                         App Store: create the ONGOING analytics report request (Admin key; once)
-//   storebound analytics snapshot [--days 28] [--store apple|play] [--dry]   -> .storebound/analytics/<date>.json
+//   storebound analytics snapshot [--days 28] [--store apple|play] [--dry] [--json] [--no-write]   -> .storebound/analytics/<date>.json
+//     --json prints the snapshot as one JSON document on stdout (the file is still written unless --no-write or --dry)
 //   storebound analytics compare [--days 7] [--paths store,storebound.config.ts] [--md]
 // App Store: Analytics Reports API (Discovery and Engagement: impressions, product page views; Downloads: first-time
 // downloads and redownloads), every segment checked against its md5 checksum. Google Play has no statistics API:
 // the monthly CSV exports in your Cloud Storage bucket (play.reportsBucket = "pubsite_prod_rev_<id>", Play Console >
 // Download reports > Statistics > Copy Cloud Storage URI) are read with the service account (store listing visitors,
-// acquisitions, daily user installs). compare lines the snapshots up with the git history of the store files (listing
+// acquisitions, daily user installs, active device installs, total user installs). App Usage (App Store: sessions, active
+// devices, crashes per day from the App Sessions and App Crashes reports). A store-only config needs no play.reportsBucket
+// (env PLAY_REPORTS_BUCKET or the profile's reportsBucket) and no apple.bundleId (apple.appId is enough). compare lines the snapshots up with the git history of the store files (listing
 // text, screenshots, config): the days before vs after each change. Read-only on both stores except `setup`.
 import { consoleLink } from './lib/console-links';
 import { storeReadError } from './lib/google-errors';
 import { existsSync, mkdirSync, readdirSync, readFileSync, writeFileSync } from 'node:fs';
 import { join } from 'node:path';
 import { createOnce } from './lib/upsert';
+import { playReportsBucket } from './lib/credentials';
 import { ascClient, type Asc, type J } from './apple/asc';
 import type { Ctx } from './lib/ctx';
 import {
   type AppleDay, APPLE_REPORTS, appleDaily, appleTotals, bucketName, checksumOk, compareAroundEvents, decodeText, effectMarkdown, effectTable, inWindow,
-  latestPerDate, mergeSeries, monthsBetween, snapshotProblem, storeErrors, parseGitLog, parseReport, pickReport, type PlayDay, playDaily, playObjects, playTotals, type Snapshot,
+  latestPerDate, mergeAppleUsage, mergeSeries, monthsBetween, snapshotProblem, storeErrors, parseGitLog, parseReport, pickReport, type PlayDay, playDaily, playObjects, playTotals, type Snapshot,
 } from './lib/analytics';
 import { STORAGE_READ_SCOPE } from './lib/google-auth';
 import { done, log, printJson, warn } from './lib/log';
@@ -55,9 +59,9 @@ async function reportRows(c: Asc, report: J, start: string, tag: string): Promis
   return latestPerDate(parts);
 }
 
-async function appleSnapshot(ctx: Ctx, start: string, end: string): Promise<{ daily: AppleDay[] }> {
+async function appleSnapshot(ctx: Ctx, start: string, end: string): Promise<{ daily: AppleDay[]; notes: string[] }> {
   const { config, root } = ctx.loaded;
-  const c = await ascClient(root, config.apple!.bundleId, config.apple?.appId);
+  const c = await ascClient(root, config.apple!.bundleId ?? '', config.apple?.appId);
   const appId = await c.app();
   const req = await ongoingRequest(c, appId);
   if (!req) throw new Error('no active ONGOING analytics report request: run storebound analytics setup (Admin key), data starts 1-2 days later');
@@ -65,25 +69,36 @@ async function appleSnapshot(ctx: Ctx, start: string, end: string): Promise<{ da
   const eng = pickReport(reports.filter(r => r.attributes?.category === APPLE_REPORTS.engagement.category), APPLE_REPORTS.engagement.match);
   const dl = pickReport(reports.filter(r => r.attributes?.category === APPLE_REPORTS.downloads.category), APPLE_REPORTS.downloads.match);
   if (!eng || !dl) throw new Error(`reports not found yet (${reports.length} listed): wait a day after setup`);
-  const daily = appleDaily(await reportRows(c, eng, start, eng.attributes.name), await reportRows(c, dl, start, dl.attributes.name));
-  return { daily: inWindow(daily, start, end) };
+  let daily = appleDaily(await reportRows(c, eng, start, eng.attributes.name), await reportRows(c, dl, start, dl.attributes.name));
+  // App Usage is optional: a team whose request predates the usage reports, or whose usage reports are not out yet, still gets the rest
+  const notes: string[] = [];
+  const usage = (m: { category: string; match: RegExp }) => pickReport(reports.filter(r => r.attributes?.category === m.category), m.match);
+  const ses = usage(APPLE_REPORTS.sessions), cr = usage(APPLE_REPORTS.crashes);
+  if (ses || cr) {
+    try {
+      daily = mergeAppleUsage(daily, ses ? await reportRows(c, ses, start, ses.attributes.name) : [], cr ? await reportRows(c, cr, start, cr.attributes.name) : []);
+      if (!ses || !cr) notes.push(`App Usage: the ${ses ? 'App Crashes' : 'App Sessions'} report is not listed yet`);
+    } catch (e) { notes.push(`App Usage not read: ${storeReadError((e as Error).message).error.slice(0, 200)}`); }
+  } else notes.push('App Usage: the App Sessions / App Crashes reports are not listed yet (they appear a day or two after the first report)');
+  for (const n of notes) warn(TAG, `apple: ${n}`);
+  return { daily: inWindow(daily, start, end), notes };
 }
 
 async function playSnapshot(ctx: Ctx, start: string, end: string): Promise<{ daily: PlayDay[] }> {
   const { config, root } = ctx.loaded;
-  const bucket = config.play?.reportsBucket;
-  if (!bucket) throw new Error(`play.reportsBucket is not set (${consoleLink('play.reports-statistics', '> Copy Cloud Storage URI')})`);
+  const bucket = playReportsBucket(root, config.play?.reportsBucket);
+  if (!bucket) throw new Error(`play.reportsBucket is not set (env PLAY_REPORTS_BUCKET or the credential profile's reportsBucket also work; ${consoleLink('play.reports-statistics', '> Copy Cloud Storage URI')})`);
   const g = googleClient(root, STORAGE_READ_SCOPE);
-  const sp: Record<string, string>[] = [], inst: Record<string, string>[] = [];
+  const sp: Record<string, string>[] = [], inst: Record<string, string>[] = [], ov: Record<string, string>[] = [];
   for (const month of monthsBetween(start, end)) {
     const o = playObjects(config.play!.packageName, month);
-    for (const [name, into] of [[o.storePerformance, sp], [o.installs, inst]] as const) {
+    for (const [name, into] of [[o.storePerformance, sp], [o.installs, inst], [o.installsOverview, ov]] as const) {
       const url = `https://storage.googleapis.com/storage/v1/b/${encodeURIComponent(bucketName(bucket))}/o/${encodeURIComponent(name)}?alt=media`;
       try { into.push(...parseReport(decodeText(await g.bytes(url)))); log(TAG, `play: ${name}`); }
       catch (e) { if (/-> 404/.test(String(e))) warn(TAG, `play: ${name} not there (yet)`); else throw e; }
     }
   }
-  return { daily: inWindow(playDaily(sp, inst), start, end) };
+  return { daily: inWindow(playDaily(sp, inst, ov), start, end) };
 }
 
 function readSnapshots(dir: string): Snapshot[] {
@@ -100,7 +115,7 @@ export async function run(ctx: Ctx): Promise<void> {
 
   if (sub === 'setup') {
     if (!config.apple) throw new Error('no apple section in the config (Google Play needs no setup: set play.reportsBucket)');
-    const c = await ascClient(root, config.apple.bundleId, config.apple.appId);
+    const c = await ascClient(root, config.apple.bundleId ?? '', config.apple.appId);
     const appId = await c.app();
     const cur = await ongoingRequest(c, appId);
     if (cur) { done(TAG, `apple: ONGOING report request exists (${cur.id})`); return; }
@@ -121,20 +136,24 @@ export async function run(ctx: Ctx): Promise<void> {
     const end = day(new Date(now.getTime() - 86_400_000)), start = day(new Date(now.getTime() - days * 86_400_000));
     const snap: Snapshot = { date: day(now), window: { start, end, days } };
     if ((!store || store === 'apple') && config.apple) {
-      try { const r = await appleSnapshot(ctx, start, end); snap.apple = { daily: r.daily, totals: appleTotals(r.daily) }; }
+      try { const r = await appleSnapshot(ctx, start, end); snap.apple = { daily: r.daily, totals: appleTotals(r.daily), ...(r.notes.length ? { notes: r.notes } : {}) }; }
       catch (e) { snap.apple = { error: storeReadError((e as Error).message).error.slice(0, 400) }; warn(TAG, `apple: ${snap.apple.error}`); }
     }
     if ((!store || store === 'play') && config.play) {
       try { const r = await playSnapshot(ctx, start, end); snap.play = { daily: r.daily, totals: playTotals(r.daily) }; }
       catch (e) { snap.play = { error: storeReadError((e as Error).message, { app: config.play.packageName }).error.slice(0, 400) }; warn(TAG, `play: ${snap.play.error}`); }
     }
+    const json = a.has('json');
     const rows: (string | number)[][] = [];
     if (snap.apple && !('error' in snap.apple)) { const t = snap.apple.totals; rows.push(['apple', `${t.impressions} impressions`, `${t.pageViews} page views`, `${t.downloads} downloads`, pct(t.conversion ?? null)]); }
     if (snap.play && !('error' in snap.play)) { const t = snap.play.totals; rows.push(['play', `${t.visitors} visitors`, `${t.acquisitions} acquisitions`, `${t.installs} installs`, pct(t.conversion ?? null)]); }
     if (rows.length) console.log(textTable(['store', 'reach', 'interest', 'installs', 'conversion'], rows));
     const file = join(dir, `${snap.date}.json`);
     const problem = snapshotProblem(snap);
+    // --json: the collector gets the document (with each store's error) on stdout even when nothing could be read; the exit code still says it failed
+    if (json) printJson(snap);
     if (problem) throw new Error(`no store data, nothing written (${problem})`);
+    if (a.has('no-write')) { done(TAG, `snapshot ${start} to ${end} (not written: --no-write)`); return; }
     if (dry) { done(TAG, `dry run: would write ${file} (${start} to ${end})`); return; }
     mkdirSync(dir, { recursive: true });
     writeFileSync(file, JSON.stringify(snap, null, 2) + '\n');
diff --git a/cli/commands.ts b/cli/commands.ts
index 01665de..949dd4e 100644
--- a/cli/commands.ts
+++ b/cli/commands.ts
@@ -35,12 +35,12 @@ export const COMMANDS: Record<string, [() => Promise<Mod>, string]> = {
   'check': [() => import('./check'), 'validate config, copy files, data safety answers, products, subscriptions and the app profile (offline); --aso keyword audit'],
   'validate': [() => import('./validate'), 'read-only store readiness report with ordered blockers (--apple / --play), plus local renders checks (--no-local skips); exit 1 on blockers'],
   'report': [() => import('./report'), 'shareable store readiness report: scan + check + validate (read-only; only the stores with credentials, else it says why) in one self-contained HTML page .storebound/reports/readiness-<date>.html, opened in the browser; --out <file>, --md, --json, --no-open, --offline'],
-  'analytics': [() => import('./analytics'), 'setup (App Store report request) | snapshot (impressions, page views, installs, conversion -> .storebound/analytics) | compare (vs listing changes in git)'],
+  'analytics': [() => import('./analytics'), 'setup (App Store report request) | snapshot (impressions, page views, installs, App Usage, conversion -> .storebound/analytics; --json prints it) | compare (vs listing changes in git)'],
   'health': [() => import('./health'), 'crash / ANR vitals (Play) and diagnostics (App Store), read-only; --weekly writes a markdown report; exit 1 over a threshold'],
   'art': [() => import('./art'), 'pull [--store apple|play] [--write] [--force]: the live store art (App Store screenshot sets, previews, icon; Play icon, feature graphic, screenshots per language) into store/renders + pulled.json, so checks and uploads treat it like rendered art (upsert; differing local files kept without --force; read-only on the stores) | live [--json]: the live art with thumbnails | replace --from <file> --to <path>: one image of the app folder'],
   'onboard': [() => import('./onboard'), 'an app that is already live: the live products + subscriptions with their USD / base prices, contact e-mail, website, privacy and support URLs, the App Review contact and demo account, sign-in for review and the account deletion page, from the stores, the code and the app\'s site -> config and .storebound/credentials.json (--write; read-only on the stores, never changes store prices); then the owner questions nothing proves'],
   'catalog': [() => import('./catalog'), 'diff: cross-store parity of products + subscriptions (missing / extra / mismatched, prices per region, offers); read-only, exit 1 on mismatches | pull [--write]: store texts of IAPs + subscriptions as a config proposal'],
-  'reports': [() => import('./reports'), 'apple-sales | apple-finance --month | play-earnings --month | play-sales --month: download to .storebound/reports/, summary table + CSV; read-only'],
+  'reports': [() => import('./reports'), 'apple-sales | apple-finance --month | play-earnings --month | play-sales --month: download to .storebound/reports/, summary table + CSV; apple-sales and play-sales also --days N | --from/--to (per-day JSON); read-only'],
   'triage': [() => import('./triage'), 'TestFlight crash / screenshot feedback and Play error reports grouped by signature, device, OS version, build; read-only, --json'],
   'aso': [() => import('./aso'), 'rank | competitors | suggest | audit: App Store ranks, top apps per keyword, keyword field proposals (Apple Ads popularity with credentials) and one ASO report, from the public iTunes Search API -> .storebound/aso/'],
   'prices': [() => import('./prices'), 'export | import a CSV of product x store x region prices (diff first, asks before writing; Apple future-dated changes) | ppp --base <USD> (purchasing power price sheet, snapped to store price points)'],
diff --git a/cli/data/flags.json b/cli/data/flags.json
index 88b6faf..7a49ac1 100644
--- a/cli/data/flags.json
+++ b/cli/data/flags.json
@@ -38,6 +38,7 @@
    "days",
    "dir",
    "md",
+   "no-write",
    "paths",
    "store"
   ],
@@ -908,11 +909,14 @@
   "reports": [
    "csv",
    "date",
+   "days",
    "detail",
    "frequency",
+   "from",
    "month",
    "out",
    "region",
+   "to",
    "type",
    "vendor"
   ],
@@ -1282,6 +1286,7 @@
    "no-variants",
    "no-wait",
    "no-web",
+   "no-write",
    "not-sent-for-review",
    "notify",
    "off",
@@ -1421,7 +1426,7 @@
   ],
   "analytics": [
    "storebound analytics setup [--dry]                         App Store: create the ONGOING analytics report request (Admin key; once)",
-   "storebound analytics snapshot [--days 28] [--store apple|play] [--dry]   -> .storebound/analytics/<date>.json",
+   "storebound analytics snapshot [--days 28] [--store apple|play] [--dry] [--json] [--no-write]   -> .storebound/analytics/<date>.json",
    "storebound analytics compare [--days 7] [--paths store,storebound.config.ts] [--md]"
   ],
   "api": [
@@ -1718,7 +1723,9 @@
    "storebound reports apple-sales [--type SALES] [--frequency DAILY|WEEKLY|MONTHLY|YEARLY] [--date ...] [--vendor N]",
    "storebound reports apple-finance --month YYYY-MM [--detail] [--region ZZ] [--vendor N]",
    "storebound reports play-earnings --month YYYY-MM",
-   "storebound reports play-sales --month YYYY-MM"
+   "storebound reports play-sales --month YYYY-MM",
+   "storebound reports apple-sales --days 30 | --from YYYY-MM-DD [--to YYYY-MM-DD] --json     (daily SALES reports)",
+   "storebound reports play-sales --days 30 | --from YYYY-MM-DD [--to YYYY-MM-DD] --json      (per order-charged date and currency)"
   ],
   "revenuecat": [
    "storebound revenuecat diff [--json]                    read-only parity report; exit 1 when out of sync",
diff --git a/cli/inspect.ts b/cli/inspect.ts
index e3313d9..12b65fc 100644
--- a/cli/inspect.ts
+++ b/cli/inspect.ts
@@ -10,7 +10,7 @@ import { existsSync, readFileSync, statSync } from 'node:fs';
 import { join } from 'node:path';
 import { platformsOf, playCategoryOf, profileOf, sellsOn } from './lib/config';
 import type { Ctx } from './lib/ctx';
-import { maskUser, reviewContact, reviewDemoAccount } from './lib/credentials';
+import { credentialValue, maskUser, reviewContact, reviewDemoAccount } from './lib/credentials';
 import { DATA_SAFETY_UPLOADED, declarations } from './lib/declarations';
 import type { ProjectSummary } from './lib/desktop-protocol';
 import { log, printJson } from './lib/log';
@@ -42,7 +42,7 @@ export function summarize(ctx: Ctx): ProjectSummary {
     profile: profileOf(config),
     icon: findIcon(config, root),
     variants: Object.keys(config.shots?.variants ?? {}),
-    playReports: !!config.play?.reportsBucket,
+    playReports: !!config.play?.reportsBucket || !!credentialValue(root, 'PLAY_REPORTS_BUCKET'),
     playRelease: config.play ? { managedPublishing: config.play.managedPublishing ?? null, countries: config.play.countries?.length ?? null, category: playCategoryOf(config)?.category ?? null } : null,
     games: config.games ? { gameCenter: config.games.gameCenter === true, playGames: !!config.games.playGames, leaderboards: config.games.leaderboards?.length ?? 0, achievements: config.games.achievements?.length ?? 0 } : null,
   };
diff --git a/cli/lib/analytics.ts b/cli/lib/analytics.ts
index d51f895..90d99fb 100644
--- a/cli/lib/analytics.ts
+++ b/cli/lib/analytics.ts
@@ -23,6 +23,10 @@ import { mdTable, pct, textTable } from './table';
 export const APPLE_REPORTS = {
   engagement: { category: 'APP_STORE_ENGAGEMENT', match: /discovery and engagement/i },
   downloads: { category: 'COMMERCE', match: /download/i },
+  // App Usage (Analytics Reports API category APP_USAGE): App Sessions (Sessions, Total Session Duration, Unique Devices) and
+  // App Crashes (Crashes, Unique Devices), per day, version, device, platform version and territory
+  sessions: { category: 'APP_USAGE', match: /app sessions/i },
+  crashes: { category: 'APP_USAGE', match: /app crashes/i },
 } as const;
 
 /** Standard over Detailed (Detailed adds noise for privacy and splits by campaign). */
@@ -54,8 +58,16 @@ export function latestPerDate(instances: { processingDate: string; rows: Record<
   return instances.flatMap(i => i.rows.filter(r => best.get(r.date ?? '') === i.processingDate));
 }
 
-export interface AppleDay { date: string; impressions: number; uniqueImpressions: number; pageViews: number; uniquePageViews: number; downloads: number; firstTimeDownloads: number }
-export interface PlayDay { date: string; visitors: number; acquisitions: number; installs: number }
+export interface AppleDay {
+  date: string; impressions: number; uniqueImpressions: number; pageViews: number; uniquePageViews: number; downloads: number; firstTimeDownloads: number;
+  /** App Usage (only when the App Sessions / App Crashes reports have the day): app sessions, active devices (sum of the
+   *  rows' Unique Devices: a device seen in two rows, e.g. two app versions, counts twice), total session time in
+   *  seconds, crashes. */
+  sessions?: number; activeDevices?: number; sessionSeconds?: number; crashes?: number;
+}
+/** installs = Daily User Installs. The two stock numbers are Play's own columns: devices with the app installed that
+ *  were active in the last 30 days (Active Device Installs) and all users who ever installed it (Total User Installs). */
+export interface PlayDay { date: string; visitors: number; acquisitions: number; installs: number; activeDeviceInstalls?: number; totalUserInstalls?: number }
 
 const num = (v: string | undefined) => { const n = Number((v ?? '').replace(/,/g, '')); return Number.isFinite(n) ? n : 0; };
 
@@ -80,12 +92,50 @@ export function appleDaily(engagement: Record<string, string>[], downloads: Reco
   return [...days.values()].sort((a, b) => a.date.localeCompare(b.date));
 }
 
-/** Play store performance + installs CSV rows (country files) -> one line per day. Dates are YYYY-MM-DD. */
-export function playDaily(storePerformance: Record<string, string>[], installs: Record<string, string>[]): PlayDay[] {
+/** App Sessions + App Crashes rows -> App Usage fields per day, merged into the days (a day only in the usage reports
+ *  becomes a day with zero impressions and downloads). Sessions' Unique Devices are the active devices of the day. */
+export function mergeAppleUsage(daily: AppleDay[], sessions: Record<string, string>[], crashes: Record<string, string>[]): AppleDay[] {
+  const days = new Map(daily.map(d => [d.date, { ...d }]));
+  const day = (d: string) => days.get(d) ?? days.set(d, { date: d, impressions: 0, uniqueImpressions: 0, pageViews: 0, uniquePageViews: 0, downloads: 0, firstTimeDownloads: 0 }).get(d)!;
+  for (const r of sessions) {
+    if (!r.date) continue;
+    const x = day(r.date);
+    x.sessions = (x.sessions ?? 0) + num(r.sessions);
+    x.activeDevices = (x.activeDevices ?? 0) + num(r.unique_devices);
+    x.sessionSeconds = (x.sessionSeconds ?? 0) + num(r.total_session_duration);
+  }
+  for (const r of crashes) {
+    if (!r.date) continue;
+    const x = day(r.date);
+    x.crashes = (x.crashes ?? 0) + num(r.crashes ?? r.counts);
+  }
+  return [...days.values()].sort((a, b) => a.date.localeCompare(b.date));
+}
+
+/** Play store performance + installs CSV rows (country files) -> one line per day. Dates are YYYY-MM-DD. The stock
+ *  columns (Active Device Installs, Total User Installs) come from the overview rows when given (all countries in one
+ *  row per day), else from the country rows summed. */
+export function playDaily(storePerformance: Record<string, string>[], installs: Record<string, string>[], overview: Record<string, string>[] = []): PlayDay[] {
   const days = new Map<string, PlayDay>();
   const day = (d: string) => days.get(d) ?? days.set(d, { date: d, visitors: 0, acquisitions: 0, installs: 0 }).get(d)!;
   for (const r of storePerformance) if (r.date) { const x = day(r.date); x.visitors += num(r.store_listing_visitors); x.acquisitions += num(r.store_listing_acquisitions); }
   for (const r of installs) if (r.date) day(r.date).installs += num(r.daily_user_installs);
+  const stock = (rows: Record<string, string>[]) => {
+    const m = new Map<string, { active?: number; total?: number }>();
+    for (const r of rows) {
+      if (!r.date) continue;
+      const x = m.get(r.date) ?? m.set(r.date, {}).get(r.date)!;
+      if (r.active_device_installs !== undefined && r.active_device_installs !== '') x.active = (x.active ?? 0) + num(r.active_device_installs);
+      if (r.total_user_installs !== undefined && r.total_user_installs !== '') x.total = (x.total ?? 0) + num(r.total_user_installs);
+    }
+    return m;
+  };
+  const fromCountries = stock(installs), fromOverview = stock(overview);
+  for (const [date, x] of (fromOverview.size ? fromOverview : fromCountries)) {
+    const d = day(date);
+    if (x.active !== undefined) d.activeDeviceInstalls = x.active;
+    if (x.total !== undefined) d.totalUserInstalls = x.total;
+  }
   return [...days.values()].sort((a, b) => a.date.localeCompare(b.date));
 }
 
@@ -101,29 +151,50 @@ export function monthsBetween(start: string, end: string): string[] {
 export const playObjects = (pkg: string, month: string) => ({
   storePerformance: `stats/store_performance/store_performance_${pkg}_${month}_country.csv`,
   installs: `stats/installs/installs_${pkg}_${month}_country.csv`,
+  installsOverview: `stats/installs/installs_${pkg}_${month}_overview.csv`,
 });
 
 /** "gs://pubsite_prod_rev_123/" or "pubsite_prod_rev_123" -> bucket name. */
 export const bucketName = (b: string): string => b.replace(/^gs:\/\//, '').replace(/\/.*$/, '');
 
-export interface Totals { impressions?: number; pageViews?: number; downloads?: number; conversion?: number | null; visitors?: number; acquisitions?: number; installs?: number }
+export interface Totals {
+  impressions?: number; pageViews?: number; downloads?: number; conversion?: number | null; visitors?: number; acquisitions?: number; installs?: number;
+  /** App Usage: sessions and crashes summed, active devices as the mean of the days that have usage data. */
+  sessions?: number; crashes?: number; activeDevicesAvg?: number;
+  /** Play stock numbers: the value of the newest day that has one (never summed). */
+  activeDeviceInstalls?: number; totalUserInstalls?: number;
+}
 
 export function appleTotals(days: AppleDay[]): Totals {
   const s = (k: keyof AppleDay) => days.reduce((n, d) => n + (d[k] as number), 0);
   const uniq = s('uniqueImpressions');
-  return { impressions: s('impressions'), pageViews: s('pageViews'), downloads: s('downloads'), conversion: uniq ? s('downloads') / uniq : null };
+  const t: Totals = { impressions: s('impressions'), pageViews: s('pageViews'), downloads: s('downloads'), conversion: uniq ? s('downloads') / uniq : null };
+  const used = days.filter(d => d.sessions !== undefined || d.crashes !== undefined);
+  if (used.length) {
+    t.sessions = used.reduce((n, d) => n + (d.sessions ?? 0), 0);
+    t.crashes = used.reduce((n, d) => n + (d.crashes ?? 0), 0);
+    const act = used.filter(d => d.activeDevices !== undefined);
+    if (act.length) t.activeDevicesAvg = Math.round(act.reduce((n, d) => n + d.activeDevices!, 0) / act.length);
+  }
+  return t;
 }
 export function playTotals(days: PlayDay[]): Totals {
   const s = (k: keyof PlayDay) => days.reduce((n, d) => n + (d[k] as number), 0);
   const v = s('visitors');
-  return { visitors: v, acquisitions: s('acquisitions'), installs: s('installs'), conversion: v ? s('acquisitions') / v : null };
+  const t: Totals = { visitors: v, acquisitions: s('acquisitions'), installs: s('installs'), conversion: v ? s('acquisitions') / v : null };
+  const last = (k: 'activeDeviceInstalls' | 'totalUserInstalls') => [...days].reverse().find(d => d[k] !== undefined)?.[k];
+  const a = last('activeDeviceInstalls'), tot = last('totalUserInstalls');
+  if (a !== undefined) t.activeDeviceInstalls = a;
+  if (tot !== undefined) t.totalUserInstalls = tot;
+  return t;
 }
 
 export interface Snapshot {
   date: string;
   window: { start: string; end: string; days: number };
-  apple?: { daily: AppleDay[]; totals: Totals } | { error: string };
-  play?: { daily: PlayDay[]; totals: Totals } | { error: string };
+  /** notes: what is missing but not fatal (e.g. the App Usage reports are not listed yet). */
+  apple?: { daily: AppleDay[]; totals: Totals; notes?: string[] } | { error: string };
+  play?: { daily: PlayDay[]; totals: Totals; notes?: string[] } | { error: string };
 }
 
 /**
diff --git a/cli/lib/config.ts b/cli/lib/config.ts
index e0a52fb..6fb69c8 100644
--- a/cli/lib/config.ts
+++ b/cli/lib/config.ts
@@ -658,6 +658,7 @@ export interface ShipConfig {
     billingPrograms?: ('user-choice-billing' | 'alternative-billing' | 'external-offers' | 'external-content-links')[];
   };
   apple?: {
+    /** Absent / null only in a store-only config with apple.appId (analytics and reports reads); every write needs it. */
     bundleId: string; appId?: string; primaryLocale?: string; listing?: string; info?: AppleAppInfo; reviewShots?: string;
     /** App Store name in the primary locale (at most 30 characters) when it differs from app.name, e.g. because the plain
      *  name is taken on the App Store ("STAR DASH: Stone Age to 2100"). Default app.name. A `### name` block in the
@@ -1189,7 +1190,9 @@ export function validateConfig(c: unknown): string[] {
   if (cfg.play?.billingPrograms !== undefined && !(Array.isArray(cfg.play.billingPrograms) && cfg.play.billingPrograms.every(b => (PLAY_BILLING_PROGRAMS as readonly string[]).includes(b))))
     e.push(`play.billingPrograms: a list of ${PLAY_BILLING_PROGRAMS.join(' | ')}`);
   if (cfg.apple) {
-    if (!ID_RE.test(cfg.apple.bundleId ?? '')) e.push('apple.bundleId: not a bundle id (com.example.game)');
+    // a store-only config for reads (analytics, reports) may name the app by apple.appId alone: bundleId null / absent
+    const idOnly = cfg.apple.bundleId == null && /^\d+$/.test(cfg.apple.appId ?? '');
+    if (!idOnly && !ID_RE.test(cfg.apple.bundleId ?? '')) e.push('apple.bundleId: not a bundle id (com.example.game)');
     const an = cfg.apple.name;
     if (an !== undefined && (typeof an !== 'string' || !an.trim())) e.push('apple.name: the App Store name (text), or leave it out to use app.name');
     else if (an !== undefined && [...an].length > APPLE_NAME_MAX) e.push(`apple.name: ${[...an].length} characters > ${APPLE_NAME_MAX} (App Store limit)`);
diff --git a/cli/lib/credentials.ts b/cli/lib/credentials.ts
index ddbbe09..b3fe947 100644
--- a/cli/lib/credentials.ts
+++ b/cli/lib/credentials.ts
@@ -20,7 +20,7 @@
 //      The demo account for App Review can also come from env: REVIEW_DEMO_USER, REVIEW_DEMO_PASSWORD.
 //   4. the default profile (none named): store keys only
 //   5. ASC_P8 only: ~/.appstoreconnect/private_keys/AuthKey_<ASC_KEY_ID>.p8 (where Xcode / altool keep it)
-// A profile file: { "ASC_KEY_ID", "ASC_ISSUER_ID", "ASC_P8", "PLAY_SERVICE_ACCOUNT", "ASC_VENDOR_NUMBER", "label"? };
+// A profile file: { "ASC_KEY_ID", "ASC_ISSUER_ID", "ASC_P8", "PLAY_SERVICE_ACCOUNT", "ASC_VENDOR_NUMBER", "reportsBucket"?, "label"? };
 // with a credential broker (cli/lib/broker.ts) Play needs no key file: "PLAY_SERVICE_ACCOUNT_EMAIL" names the account
 // the broker mints tokens for, and "broker": false keeps a profile on its local key.
 // key paths relative to the credentials folder (`accounts import` puts the key files in <name>/, mode 0600), or env
@@ -46,7 +46,7 @@ function fileStore(root: string): Store {
 export function credentialValue(root: string, name: string): string | undefined { return value(root, name); }
 /** The store credential names a profile holds (the same as the env names): per developer account, so the vendor number
  *  for reports too; an app's Android upload keystore stays in the project. */
-export const PROFILE_KEYS = ['PLAY_SERVICE_ACCOUNT', 'ASC_KEY_ID', 'ASC_ISSUER_ID', 'ASC_P8', 'ASC_VENDOR_NUMBER', 'PLAY_DEVELOPER_ID', 'PLAY_SERVICE_ACCOUNT_EMAIL'] as const;
+export const PROFILE_KEYS = ['PLAY_SERVICE_ACCOUNT', 'ASC_KEY_ID', 'ASC_ISSUER_ID', 'ASC_P8', 'ASC_VENDOR_NUMBER', 'PLAY_DEVELOPER_ID', 'PLAY_SERVICE_ACCOUNT_EMAIL', 'PLAY_REPORTS_BUCKET'] as const;
 export const PROFILE_RE = /^[A-Za-z0-9][A-Za-z0-9._-]{0,63}$/;
 
 export const profileDir = (): string => process.env.STOREBOUND_CREDENTIALS_DIR || join(homedir(), '.storebound', 'credentials');
@@ -66,7 +66,9 @@ export function profileEnv(profile: string): Record<string, string> {
   const out: Record<string, string> = {};
   for (const k of PROFILE_KEYS) {
     const env = process.env[profileEnvName(profile, k)];
-    const v = env || (typeof stored[k] === 'string' ? stored[k] as string : '');
+    // PLAY_REPORTS_BUCKET is also the profile field `reportsBucket` (a bucket name, not a secret)
+    const own = stored[k] ?? (k === 'PLAY_REPORTS_BUCKET' ? stored.reportsBucket : undefined);
+    const v = env || (typeof own === 'string' ? own : '');
     if (!v) continue;
     // a path in the file: relative to the profile folder (inline JSON / PEM stays as it is)
     const isPath = !env && !/^\s*\{/.test(v) && !/BEGIN PRIVATE KEY/.test(v) && (k === 'PLAY_SERVICE_ACCOUNT' || k === 'ASC_P8');
@@ -346,6 +348,16 @@ export function ascVendorNumber(root: string): string | null {
   return v && /^\d{5,12}$/.test(v.trim()) ? v.trim() : null;
 }
 
+/** The Play reports bucket (analytics statistics, sales / earnings reports): play.reportsBucket of the config, else env
+ *  PLAY_REPORTS_BUCKET, else the credential profile's `reportsBucket` (a store-only config has no play.reportsBucket).
+ *  Null when none is set; a value that is not a Play reports bucket throws (a bucket name is not a secret). */
+export function playReportsBucket(root: string, fromConfig?: string): string | null {
+  const v = (fromConfig ?? value(root, 'PLAY_REPORTS_BUCKET') ?? '').trim();
+  if (!v) return null;
+  if (!/^(gs:\/\/)?pubsite_prod(_rev)?_\d+\/?$/.test(v)) throw new Error(`reports bucket "${v}": the Play reports bucket, e.g. "pubsite_prod_rev_<number>" (play.reportsBucket, env PLAY_REPORTS_BUCKET or the profile field reportsBucket)`);
+  return v;
+}
+
 /** Credential paths that do not exist (a machine move left another computer's absolute paths) and an upload keystore
  *  the stored password / alias do not open: each names the field. `keytool` runs only when it is on PATH. */
 export function credentialFileIssues(root: string, run: (argv: string[]) => { ok: boolean; out: string } | null = keytool): string[] {
diff --git a/cli/lib/reports.ts b/cli/lib/reports.ts
index c922945..0a99dce 100644
--- a/cli/lib/reports.ts
+++ b/cli/lib/reports.ts
@@ -148,3 +148,95 @@ export const parsePlayCsv = (text: string): Record<string, string>[] => {
   const keys = head.map(h => h.trim());
   return rest.map(r => Object.fromEntries(keys.map((k, i) => [k, (r[i] ?? '').trim()])));
 };
+
+// ---- day ranges (a collector reads N days in one JSON) ----
+
+const DAY_RE = /^\d{4}-\d{2}-\d{2}$/;
+const addDay = (d: string, n: number): string => new Date(Date.parse(`${d}T00:00:00Z`) + n * 86_400_000).toISOString().slice(0, 10);
+export const MAX_RANGE_DAYS = 366;
+
+/** Every date from..to inclusive (YYYY-MM-DD). Pure. */
+export function dateRange(from: string, to: string): string[] {
+  const out: string[] = [];
+  for (let d = from; d <= to; d = addDay(d, 1)) out.push(d);
+  return out;
+}
+
+/**
+ * --days N (the N days ending yesterday) or --from/--to (inclusive; --to defaults to yesterday): the dates to read, or
+ * null when none of the three is given. Daily reports of both stores come out the next day, so the newest day may be
+ * missing; that is reported, not an error. Pure.
+ */
+export function reportRange(o: { days?: string; from?: string; to?: string }, now = new Date()): { from: string; to: string; dates: string[] } | null {
+  if (o.days === undefined && o.from === undefined && o.to === undefined) return null;
+  if (o.days !== undefined && (o.from !== undefined || o.to !== undefined)) throw new Error('--days or --from/--to, not both');
+  const yesterday = addDay(now.toISOString().slice(0, 10), -1);
+  let from: string, to: string;
+  if (o.days !== undefined) {
+    const n = Number(o.days);
+    if (!Number.isInteger(n) || n < 1 || n > MAX_RANGE_DAYS) throw new Error(`--days: 1-${MAX_RANGE_DAYS}`);
+    to = yesterday; from = addDay(to, -(n - 1));
+  } else {
+    if (o.from === undefined) throw new Error('--to needs --from YYYY-MM-DD');
+    to = o.to ?? yesterday; from = o.from;
+    if (!DAY_RE.test(from) || !DAY_RE.test(to) || Number.isNaN(Date.parse(from)) || Number.isNaN(Date.parse(to))) throw new Error('--from / --to: YYYY-MM-DD');
+    if (from > to) throw new Error('--from is after --to');
+    if (dateRange(from, to).length > MAX_RANGE_DAYS) throw new Error(`--from/--to: at most ${MAX_RANGE_DAYS} days`);
+  }
+  return { from, to, dates: dateRange(from, to) };
+}
+
+export interface DaySummary { date: string; rows: number; summary: SummaryRow[]; totals: { currency: string; units: number; amount: number }[] }
+
+/** The days of a range as the collector reads them: per-day summary and totals, totals over the range per currency
+ *  (never added across currencies), and the dates that had no report. Pure. */
+export function rangeReport(days: DaySummary[], dates: string[]): { days: DaySummary[]; totals: { currency: string; units: number; amount: number }[]; missing: string[] } {
+  const have = new Set(days.map(d => d.date));
+  const sorted = [...days].sort((a, b) => a.date.localeCompare(b.date));
+  return { days: sorted, totals: totalsByCurrency(sorted.flatMap(d => d.summary)), missing: dates.filter(d => !have.has(d)) };
+}
+
+export const rangeCsvRows = (days: DaySummary[]): (string | number)[][] =>
+  [['date', 'key', 'title', 'currency', 'units', 'amount', 'rows'], ...days.flatMap(d => d.summary.map(r => [d.date, r.key, r.title, r.currency, r.units, r.amount, r.rows]))];
+
+export interface PlayDaySales { date: string; currency: string; orders: number; refunds: number; itemPrice: number; taxes: number; charged: number; refunded: number; net: number }
+
+/**
+ * Play estimated sales rows -> one line per order-charged date and currency of sale. charged = Charged Amount (tax
+ * included) of the Charged rows, refunded = the Refund rows (always negative), net = charged + refunded; itemPrice and
+ * taxes are the Charged rows' Item Price and Taxes Collected. Rows outside from..to are left out. Estimated figures
+ * before Google's service fee: the earnings report (monthly) has the proceeds. Pure.
+ */
+export function summarizePlaySalesByDay(rows: Record<string, string>[], from: string, to: string): PlayDaySales[] {
+  const m = new Map<string, PlayDaySales>();
+  for (const r of rows) {
+    const date = (r['Order Charged Date'] ?? '').slice(0, 10);
+    if (!DAY_RE.test(date) || date < from || date > to) continue;
+    const status = r['Financial Status'] ?? '';
+    const refund = /refund|chargeback/i.test(status);
+    if (!refund && !/^charge/i.test(status)) continue;
+    const currency = r['Currency of Sale'] ?? '';
+    const id = `${date}\u0000${currency}`;
+    const x = m.get(id) ?? { date, currency, orders: 0, refunds: 0, itemPrice: 0, taxes: 0, charged: 0, refunded: 0, net: 0 };
+    const amount = num(r['Charged Amount']);
+    if (refund) { x.refunds++; x.refunded += -Math.abs(amount); }
+    else { x.orders++; x.charged += amount; x.itemPrice += num(r['Item Price']); x.taxes += num(r['Taxes Collected']); }
+    m.set(id, x);
+  }
+  return [...m.values()].map(x => ({ ...x, itemPrice: round2(x.itemPrice), taxes: round2(x.taxes), charged: round2(x.charged), refunded: round2(x.refunded), net: round2(x.charged + x.refunded) }))
+    .sort((a, b) => (a.date < b.date ? -1 : a.date > b.date ? 1 : a.currency < b.currency ? -1 : a.currency > b.currency ? 1 : 0));
+}
+
+/** Range totals per currency of the daily Play sales lines. Pure. */
+export function playSalesTotals(days: PlayDaySales[]): { currency: string; orders: number; refunds: number; charged: number; refunded: number; net: number }[] {
+  const m = new Map<string, { currency: string; orders: number; refunds: number; charged: number; refunded: number; net: number }>();
+  for (const d of days) {
+    const t = m.get(d.currency) ?? { currency: d.currency, orders: 0, refunds: 0, charged: 0, refunded: 0, net: 0 };
+    t.orders += d.orders; t.refunds += d.refunds; t.charged = round2(t.charged + d.charged); t.refunded = round2(t.refunded + d.refunded); t.net = round2(t.net + d.net);
+    m.set(d.currency, t);
+  }
+  return [...m.values()].sort((a, b) => (a.currency < b.currency ? -1 : a.currency > b.currency ? 1 : 0));
+}
+
+/** The months (YYYY-MM) a date window touches, for the Play sales file names. Pure. */
+export const monthsOfRange = (from: string, to: string): string[] => [...new Set(dateRange(from, to).map(d => d.slice(0, 7)))];
diff --git a/cli/mcp-tools.ts b/cli/mcp-tools.ts
index deda4cf..c1432b0 100644
--- a/cli/mcp-tools.ts
+++ b/cli/mcp-tools.ts
@@ -412,8 +412,9 @@ export const TOOLS: ToolDef[] = [
     description: 'Download a sales or finance report into .storebound/reports/ (gitignored) and print a summary per product and currency (amounts never added across currencies) plus a summary CSV. Apple needs ASC_VENDOR_NUMBER and a team key; Play needs play.reportsBucket and "View financial data". dry_run shows the request only.',
     props: { kind: { type: 'string', enum: ['apple-sales', 'apple-finance', 'play-earnings', 'play-sales'] }, month: { type: 'string', pattern: '^\\d{4}-\\d{2}$', description: 'YYYY-MM (apple-finance: Apple fiscal month; Play reports)' },
       date: { type: 'string', pattern: '^\\d{4}(-\\d{2}(-\\d{2})?)?$', description: 'apple-sales report date (DAILY / WEEKLY YYYY-MM-DD, MONTHLY YYYY-MM, YEARLY YYYY)' },
+      days: { type: 'integer', minimum: 1, maximum: 366, description: 'apple-sales / play-sales: the last N days as one per-day JSON' }, from: { type: 'string', pattern: '^\\d{4}-\\d{2}-\\d{2}$', description: 'apple-sales / play-sales: first day of a range' }, to: { type: 'string', pattern: '^\\d{4}-\\d{2}-\\d{2}$', description: 'last day of the range (default yesterday)' },
       frequency: { type: 'string', enum: ['DAILY', 'WEEKLY', 'MONTHLY', 'YEARLY'] }, type: { type: 'string', enum: ['SALES', 'PRE_ORDER', 'SUBSCRIPTION', 'SUBSCRIPTION_EVENT', 'SUBSCRIBER', 'SUBSCRIPTION_OFFER_CODE_REDEMPTION', 'WIN_BACK_ELIGIBILITY'] } },
-    required: ['kind'], args: i => [String(i.kind), ...opt('month', i.month), ...opt('date', i.date), ...opt('frequency', i.frequency), ...opt('type', i.type), '--json'] },
+    required: ['kind'], args: i => [String(i.kind), ...opt('month', i.month), ...opt('days', i.days), ...opt('from', i.from), ...opt('to', i.to), ...opt('date', i.date), ...opt('frequency', i.frequency), ...opt('type', i.type), '--json'] },
   { name: 'triage', title: 'Crash and feedback triage', command: ['triage'], write: false, network: true,
     description: 'Read-only: TestFlight crash reports (signature from each crash log), TestFlight screenshot feedback and Google Play error reports of the top issues, grouped by signature with their top devices, OS versions and builds. Tester emails are never read.',
     props: { store: { type: 'string', enum: ['both', 'apple', 'play'], default: 'both' }, days: { type: 'integer', minimum: 1, maximum: 90, default: 14 }, build: { type: 'string', pattern: '^[0-9][0-9.]*$' },
diff --git a/cli/reports.ts b/cli/reports.ts
index 1032910..2cb88fb 100644
--- a/cli/reports.ts
+++ b/cli/reports.ts
@@ -3,6 +3,9 @@
 //   storebound reports apple-finance --month YYYY-MM [--detail] [--region ZZ] [--vendor N]
 //   storebound reports play-earnings --month YYYY-MM
 //   storebound reports play-sales --month YYYY-MM
+//   a day range in one JSON (per-day summary and totals per currency; days with no report listed in "missing", not an error):
+//   storebound reports apple-sales --days 30 | --from YYYY-MM-DD [--to YYYY-MM-DD] --json     (daily SALES reports)
+//   storebound reports play-sales --days 30 | --from YYYY-MM-DD [--to YYYY-MM-DD] --json      (per order-charged date and currency)
 //   common: [--out .storebound/reports] [--csv <summary.csv>] [--dry] [--json]
 // The raw report is saved as it came (the TSV / the CSV out of the zip) next to a <name>.summary.csv with only
 // aggregates (per product and currency; amounts are never added across currencies). --dry prints what would be
@@ -14,15 +17,15 @@ import { mkdirSync, writeFileSync } from 'node:fs';
 import { dirname, join } from 'node:path';
 import { ascClient } from './apple/asc';
 import { bucketName } from './lib/analytics';
-import { ascVendorNumber } from './lib/credentials';
+import { ascVendorNumber, playReportsBucket } from './lib/credentials';
 import type { Ctx } from './lib/ctx';
 import { need } from './lib/ctx';
 import { toCsv } from './lib/csv';
 import { STORAGE_READ_SCOPE } from './lib/google-auth';
 import { done, log, printJson, warn } from './lib/log';
 import {
-  APPLE_SALES_COMBOS, appleFinancePath, appleReportDate, appleSalesPath, decodeReport, parsePlayCsv, parseTsv, playReportPrefix, type SummaryRow, summarizeAppleFinance,
-  summarizeAppleSales, summarizePlayEarnings, summarizePlaySales, summaryCsvRows, totalsByCurrency,
+  APPLE_SALES_COMBOS, appleFinancePath, appleReportDate, appleSalesPath, type DaySummary, decodeReport, monthsOfRange, parsePlayCsv, parseTsv, playReportPrefix, playSalesTotals, rangeCsvRows, rangeReport,
+  reportRange, type SummaryRow, summarizeAppleFinance, summarizeAppleSales, summarizePlayEarnings, summarizePlaySales, summarizePlaySalesByDay, summaryCsvRows, totalsByCurrency,
 } from './lib/reports';
 import { textTable } from './lib/table';
 import { unzip } from './lib/zip';
@@ -30,7 +33,15 @@ import { googleClient } from './play/google';
 import * as rt from './lib/rt';
 
 const TAG = 'reports';
-const USAGE = 'usage: storebound reports apple-sales | apple-finance --month YYYY-MM | play-earnings --month YYYY-MM | play-sales --month YYYY-MM';
+const USAGE = 'usage: storebound reports apple-sales [--days N | --from YYYY-MM-DD [--to ...]] | apple-finance --month YYYY-MM | play-earnings --month YYYY-MM | play-sales --month YYYY-MM | play-sales --days N | --from YYYY-MM-DD [--to ...]';
+
+/** Runs fn over items, at most `limit` at a time, results in item order. */
+async function pool<T, R>(items: T[], limit: number, fn: (x: T) => Promise<R>): Promise<R[]> {
+  const out: R[] = new Array(items.length);
+  let next = 0;
+  await Promise.all(Array.from({ length: Math.min(limit, items.length) }, async () => { while (next < items.length) { const i = next++; out[i] = await fn(items[i]!); } }));
+  return out;
+}
 
 function show(name: string, rows: SummaryRow[], json: boolean, extra: Record<string, unknown>): void {
   const totals = totalsByCurrency(rows);
@@ -57,6 +68,28 @@ export function appleReportHint(msg: string): string | null {
   return null;
 }
 
+type Google = ReturnType<typeof googleClient>;
+
+/** The CSV rows of a Play report month (all zips under the prefix, all CSVs in them); null when the bucket has none. */
+async function playMonth(g: Google, bucket: string, kind: 'earnings' | 'sales', month: string): Promise<{ rows: Record<string, string>[]; text: string } | null> {
+  const prefix = playReportPrefix(kind, month);
+  const list = `https://storage.googleapis.com/storage/v1/b/${encodeURIComponent(bucketName(bucket))}/o?prefix=${encodeURIComponent(prefix)}`;
+  const items = ((await g.json<{ items?: { name: string }[] }>('GET', list)).items ?? []).filter(o => o.name.endsWith('.zip'));
+  if (!items.length) return null;
+  const rows: Record<string, string>[] = [];
+  let text = '';
+  for (const o of items) {
+    log(TAG, `gs://${bucketName(bucket)}/${o.name}`);
+    const zip = await g.bytes(`https://storage.googleapis.com/storage/v1/b/${encodeURIComponent(bucketName(bucket))}/o/${encodeURIComponent(o.name)}?alt=media`);
+    for (const e of unzip(zip).filter(x => x.name.toLowerCase().endsWith('.csv'))) {
+      const t = decodeReport(e.data);
+      text += (text ? '\n' : '') + t;
+      rows.push(...parsePlayCsv(t));
+    }
+  }
+  return { rows, text };
+}
+
 export async function run(ctx: Ctx): Promise<void> {
   const { config, root, resolve } = ctx.loaded;
   const a = ctx.args;
@@ -82,9 +115,46 @@ export async function run(ctx: Ctx): Promise<void> {
       path = appleFinancePath(vendor, month, { type, region: a.get('region') });
       name = `apple-${type === 'FINANCIAL' ? 'finance' : 'finance-detail'}-${month}.tsv`;
     }
+    const range = sub === 'apple-sales' ? reportRange({ days: a.get('days'), from: a.get('from'), to: a.get('to') }) : null;
+    if (sub === 'apple-finance' && (a.has('days') || a.has('from') || a.has('to'))) throw new Error('--days / --from / --to are for apple-sales and play-sales (finance reports are monthly: --month)');
+    if (range) {
+      const type = a.str('type', 'SALES').toUpperCase();
+      if (type !== 'SALES') throw new Error('--days / --from / --to read the daily SALES reports: leave out --type (or SALES)');
+      if (a.has('frequency') && a.str('frequency', 'DAILY').toUpperCase() !== 'DAILY') throw new Error('--days / --from / --to read DAILY reports');
+      const pathOf = (date: string) => appleSalesPath(vendor, { type: 'SALES', frequency: 'DAILY', date });
+      const shownRange = `GET ${pathOf('<date>').replace(vendor, '<vendor>')} for ${range.dates.length} day(s) ${range.from}..${range.to}`;
+      if (dry) { if (a.has('json')) printJson({ dryRun: true, request: shownRange, dir: out }); else log(TAG, `would ${shownRange} -> ${out}`); return; }
+      const c = await ascClient(root, config.apple?.bundleId ?? '', config.apple?.appId);
+      mkdirSync(out, { recursive: true });
+      let rowCount = 0;
+      const got = await pool(range.dates, 4, async (date): Promise<DaySummary | null> => {
+        let gz: Uint8Array | null;
+        try { gz = await c.bytes(pathOf(date)); } catch (e) { const hint = appleReportHint((e as Error).message); throw new Error(hint ? `${(e as Error).message}
+${hint}` : (e as Error).message); }
+        if (!gz) return null;
+        const text = new TextDecoder().decode(gz[0] === 0x1f && gz[1] === 0x8b ? rt.gunzipSync(gz as Uint8Array<ArrayBuffer>) : gz);
+        writeFileSync(join(out, `apple-sales-daily-${date}.tsv`), text);
+        const rows = parseTsv(text);
+        rowCount += rows.length;
+        const summary = summarizeAppleSales(rows);
+        return { date, rows: rows.length, summary, totals: totalsByCurrency(summary) };
+      });
+      const rep = rangeReport(got.filter((x): x is DaySummary => !!x), range.dates);
+      const summaryFile = csvOut ?? join(out, `apple-sales-daily-${range.from}_${range.to}.summary.csv`);
+      mkdirSync(dirname(summaryFile), { recursive: true });
+      writeFileSync(summaryFile, toCsv(rangeCsvRows(rep.days)));
+      if (rep.missing.length) warn(TAG, `no report for ${rep.missing.join(', ')} (no sales then, or not published yet: daily reports come out the next day)`);
+      if (a.has('json')) printJson({ report: 'apple-sales', type: 'SALES', frequency: 'DAILY', from: range.from, to: range.to, rows: rowCount, days: rep.days, totals: rep.totals, missing: rep.missing, files: { dir: out, summary: summaryFile } });
+      else {
+        console.log(rep.days.length ? textTable(['date', 'currency', 'units', 'amount'], rep.days.flatMap(d => d.totals.map(t => [d.date, t.currency, t.units, t.amount.toFixed(2)]))) : 'no rows');
+        if (rep.totals.length) console.log('\n' + textTable(['currency', 'units', 'total'], rep.totals.map(t => [t.currency, t.units, t.amount.toFixed(2)])));
+      }
+      done(TAG, `${rep.days.length}/${range.dates.length} day(s), ${rowCount} rows -> ${out}; summary ${summaryFile}`);
+      return;
+    }
     const shown = path.replace(vendor, '<vendor>');
     if (dry) { if (a.has('json')) printJson({ dryRun: true, request: `GET ${shown}`, file: join(out, name) }); else log(TAG, `would GET ${shown} -> ${join(out, name)}`); return; }
-    const c = await ascClient(root, need(config.apple?.bundleId, 'apple.bundleId'), config.apple?.appId);
+    const c = await ascClient(root, config.apple?.bundleId ?? '', config.apple?.appId);
     log(TAG, `GET ${shown}`);
     let gz: Uint8Array | null;
     try { gz = await c.bytes(path); } catch (e) { const hint = appleReportHint((e as Error).message); throw new Error(hint ? `${(e as Error).message}\n${hint}` : (e as Error).message); }
@@ -100,27 +170,51 @@ export async function run(ctx: Ctx): Promise<void> {
   }
 
   if (sub === 'play-earnings' || sub === 'play-sales') {
-    const bucket = config.play?.reportsBucket;
-    if (!bucket) throw new Error(`play.reportsBucket is not set (${consoleLink('play.reports-financial', '> Copy Cloud Storage URI')})`);
-    const month = need(a.get('month'), '--month YYYY-MM');
+    const bucket = playReportsBucket(root, config.play?.reportsBucket);
+    if (!bucket) throw new Error(`play.reportsBucket is not set (env PLAY_REPORTS_BUCKET or the credential profile's reportsBucket also work; ${consoleLink('play.reports-financial', '> Copy Cloud Storage URI')})`);
     const kind = sub === 'play-earnings' ? 'earnings' : 'sales';
+    const range = reportRange({ days: a.get('days'), from: a.get('from'), to: a.get('to') });
+    if (range && kind === 'earnings') throw new Error('play-earnings is monthly (--month YYYY-MM); the daily revenue is play-sales --days N');
+    if (range) {
+      const months = monthsOfRange(range.from, range.to);
+      const where = months.map(m => `gs://${bucketName(bucket)}/${playReportPrefix('sales', m)}*.zip`);
+      if (dry) { if (a.has('json')) printJson({ dryRun: true, request: `GET ${where.join(' ')}`, from: range.from, to: range.to, dir: out }); else log(TAG, `would read ${where.join(', ')} -> ${out}`); return; }
+      const g = googleClient(root, STORAGE_READ_SCOPE);
+      const all: Record<string, string>[] = [];
+      const missingMonths: string[] = [];
+      const files: string[] = [];
+      mkdirSync(out, { recursive: true });
+      for (const m of months) {
+        const r = await playMonth(g, bucket, 'sales', m);
+        if (!r) { missingMonths.push(m); continue; }
+        all.push(...r.rows);
+        const file = join(out, `play-sales-${m}.csv`);
+        writeFileSync(file, r.text);
+        files.push(file);
+      }
+      const days = summarizePlaySalesByDay(all, range.from, range.to);
+      const have = new Set(days.map(d => d.date));
+      const emptyDays = range.dates.filter(d => !have.has(d));
+      const summaryFile = csvOut ?? join(out, `play-sales-daily-${range.from}_${range.to}.summary.csv`);
+      mkdirSync(dirname(summaryFile), { recursive: true });
+      writeFileSync(summaryFile, toCsv([['date', 'currency', 'orders', 'refunds', 'item_price', 'taxes', 'charged', 'refunded', 'net'], ...days.map(d => [d.date, d.currency, d.orders, d.refunds, d.itemPrice, d.taxes, d.charged, d.refunded, d.net])]));
+      const totals = playSalesTotals(days);
+      if (missingMonths.length) warn(TAG, `no sales report for month(s) ${missingMonths.join(', ')} in the bucket (not published yet, or the service account lacks "View financial data")`);
+      if (a.has('json')) printJson({ report: 'play-sales', from: range.from, to: range.to, rows: all.length, days, totals, emptyDays, missingMonths, estimated: true, files: { raw: files, summary: summaryFile } });
+      else {
+        console.log(days.length ? textTable(['date', 'currency', 'orders', 'refunds', 'charged', 'refunded', 'net'], days.map(d => [d.date, d.currency, d.orders, d.refunds, d.charged.toFixed(2), d.refunded.toFixed(2), d.net.toFixed(2)])) : 'no orders in the range');
+        if (totals.length) console.log('\n' + textTable(['currency', 'orders', 'refunds', 'charged', 'refunded', 'net'], totals.map(t => [t.currency, t.orders, t.refunds, t.charged.toFixed(2), t.refunded.toFixed(2), t.net.toFixed(2)])));
+      }
+      done(TAG, `${days.length} order day line(s) of ${range.dates.length} day(s) -> ${summaryFile}`);
+      return;
+    }
+    const month = need(a.get('month'), '--month YYYY-MM (or --days N / --from YYYY-MM-DD for play-sales)');
     const prefix = playReportPrefix(kind, month);
-    const list = `https://storage.googleapis.com/storage/v1/b/${encodeURIComponent(bucketName(bucket))}/o?prefix=${encodeURIComponent(prefix)}`;
     if (dry) { if (a.has('json')) printJson({ dryRun: true, request: `GET gs://${bucketName(bucket)}/${prefix}*.zip`, dir: out }); else log(TAG, `would read gs://${bucketName(bucket)}/${prefix}*.zip -> ${out}`); return; }
     const g = googleClient(root, STORAGE_READ_SCOPE);
-    const items = ((await g.json<{ items?: { name: string }[] }>('GET', list)).items ?? []).filter(o => o.name.endsWith('.zip'));
-    if (!items.length) { done(TAG, `no ${prefix}*.zip in the bucket (not published yet: earnings come early in the next month; or the service account lacks "View financial data")`); if (a.has('json')) printJson({ report: kind, month, empty: true }); return; }
-    const all: Record<string, string>[] = [];
-    let text = '';
-    for (const o of items) {
-      log(TAG, `gs://${bucketName(bucket)}/${o.name}`);
-      const zip = await g.bytes(`https://storage.googleapis.com/storage/v1/b/${encodeURIComponent(bucketName(bucket))}/o/${encodeURIComponent(o.name)}?alt=media`);
-      for (const e of unzip(zip).filter(x => x.name.toLowerCase().endsWith('.csv'))) {
-        const t = decodeReport(e.data);
-        text += (text ? '\n' : '') + t;
-        all.push(...parsePlayCsv(t));
-      }
-    }
+    const month1 = await playMonth(g, bucket, kind, month);
+    if (!month1) { done(TAG, `no ${prefix}*.zip in the bucket (not published yet: earnings come early in the next month; or the service account lacks "View financial data")`); if (a.has('json')) printJson({ report: kind, month, empty: true }); return; }
+    const all = month1.rows, text = month1.text;
     if (!all.length) warn(TAG, 'the zip(s) held no CSV rows');
     const summary = kind === 'earnings' ? summarizePlayEarnings(all) : summarizePlaySales(all);
     const files = save(out, `play-${kind}-${month}.csv`, text, summary, csvOut);
diff --git a/docs/commands.md b/docs/commands.md
index 0d3ee56..fddd8f3 100644
--- a/docs/commands.md
+++ b/docs/commands.md
@@ -127,9 +127,9 @@ run in the background with a log (`storebound shots render > .storebound/render.
 | `prices export [--no-subscriptions]` | API + local | current prices of every product and subscription (Apple current + scheduled, Play base plan regions), both stores, as `store/prices.csv`; subscription rows feed `apple subscriptions --csv` / `play subscriptions --csv` |
 | `prices import [--reconvert]` | API | diff table, then (asks first) Apple price schedules incl. future-dated changes and Play regional prices |
 | `analytics setup` | API | App Store analytics report request (once, Admin key) |
-| `analytics snapshot [--days 28]` | API + local | impressions, page views, downloads (App Store), visitors, acquisitions, installs (Play reports bucket) -> `.storebound/analytics/` |
+| `analytics snapshot [--days 28] [--store apple\|play] [--json] [--no-write]` | API + local | impressions, page views, downloads, App Usage (sessions, active devices, crashes) per day (App Store); visitors, acquisitions, daily user installs, active device installs, total user installs (Play reports bucket, also from env `PLAY_REPORTS_BUCKET` or the profile's `reportsBucket`) -> `.storebound/analytics/`; `--json` prints the snapshot on stdout; a store-only config needs `apple.appId` only |
 | `analytics compare` | local | snapshots vs the git history of the store files: before / after each listing change |
-| `reports apple-sales \| apple-finance \| play-earnings \| play-sales` | API, read-only + local | sales / finance reports into `.storebound/reports/`, summary per product and currency, CSV export |
+| `reports apple-sales \| apple-finance \| play-earnings \| play-sales` | API, read-only + local | sales / finance reports into `.storebound/reports/`, summary per product and currency, CSV export; `apple-sales` and `play-sales` take `--days N` or `--from/--to` for a per-day JSON (daily summary, totals per currency, missing days) |
 | `triage [--days 14]` | API, read-only | TestFlight crash and screenshot feedback, Play error reports: grouped by signature with devices, OS versions, builds |
 | `aso rank [--storefronts us,de]` | network + local | App Store rank per keyword and storefront plus competitors from the public iTunes Search API (rate limited) -> `.storebound/aso/` |
 | `aso competitors [--term <kw>] [--storefront us,tr] [--top 10]` | network + local | top apps per keyword (name, developer, rating count, first release, last update, localized genre; no subtitles: not in any public API) and the words in their names you do not cover, same rate limit -> `.storebound/aso/competitors/` |
diff --git a/skills/store-analytics/SKILL.md b/skills/store-analytics/SKILL.md
index 2598455..0cd275c 100644
--- a/skills/store-analytics/SKILL.md
+++ b/skills/store-analytics/SKILL.md
@@ -16,7 +16,8 @@ CLI: `storebound analytics setup | snapshot | compare`. MCP: `analytics_snapshot
   (`stoppedDueToInactivity`); `setup` makes a new one. storebound reads "App Store Discovery and Engagement" (Event
   Impression / Page view, Counts and Unique Counts) and "App Store Downloads" (First-time Download, Redownload; updates
   are left out), checks each segment's md5 checksum and keeps, per day, the newest processing of that day.
-  Conversion = (first-time downloads + redownloads) / unique impressions. Source:
+  Conversion = (first-time downloads + redownloads) / unique impressions. App Usage (sessions, active devices, crashes) comes from the
+  "App Sessions" and "App Crashes" reports of the same request. Source:
   https://developer.apple.com/documentation/appstoreconnectapi/downloading-analytics-reports
 - **Google Play**: there is **no API** for store listing statistics (the Play Developer Reporting API only has
   vitals). Play Console writes monthly CSV exports into your own Cloud Storage bucket; storebound reads them with
@@ -28,6 +29,29 @@ CLI: `storebound analytics setup | snapshot | compare`. MCP: `analytics_snapshot
   results (read them in the consoles; `storebound apple ppo status` shows the App Store test state), Play
   "Explore" search terms beyond the traffic source file.
 
+## For a collector (store-only config, JSON on stdout)
+A script that reads many apps needs no project: a config with `apple.appId` (`bundleId` null or left out) and
+`play.packageName` is valid for `analytics` and `reports` reads (every write still needs the bundle id).
+- `storebound analytics snapshot --store apple|play --days 30 --config <virtual.json> --account <profile> --json`
+  prints the snapshot as one JSON document on stdout (logs go to stderr); the file in `--dir` is still written, add
+  `--no-write` to skip it. A store that failed carries `{ "error": ... }`; when every store failed the JSON is printed
+  and the exit code is 1. Non-fatal gaps are in `notes`.
+- Play bucket without `play.reportsBucket`: env `PLAY_REPORTS_BUCKET`, else the credential profile's `reportsBucket`
+  (a bucket name, not a secret). Same for `reports play-*`.
+- Active users, per day. App Store: `sessions`, `activeDevices`, `sessionSeconds`, `crashes` from the App Usage
+  reports (App Sessions, App Crashes; `activeDevices` is the sum of the rows' Unique Devices, so a device seen in two
+  rows, e.g. two app versions, counts twice; totals: `sessions`, `crashes`, `activeDevicesAvg`). They appear a day or
+  two after the report request exists; until then the snapshot has the rest and a `notes` line. Play: `installs` (Daily
+  User Installs), `activeDeviceInstalls` (Active Device Installs) and `totalUserInstalls` (Total User Installs) from the
+  installs overview file (all countries; else the country file summed). The last two are stock numbers: totals take the
+  newest day, never a sum.
+- Revenue per day: `storebound reports apple-sales --days 30 --json` (or `--from 2026-10-01 [--to 2026-10-25]`) reads
+  the daily SALES reports of the range (4 at a time): `days[]` with `summary` per SKU and currency and `totals` per
+  currency, `totals` for the range per currency, `missing` (days with no report: no sales, or not out yet; never an
+  error). `storebound reports play-sales --days 30 --json` groups the estimated sales by order charged date and
+  currency of sale: `orders`, `refunds`, `itemPrice`, `taxes`, `charged` (tax included), `refunded` (negative),
+  `net`, plus `emptyDays` and `missingMonths`. Play's earnings (proceeds after Google's fee) are monthly only.
+
 ## Flow
 1. Once: `storebound analytics setup` (App Store) and `play.reportsBucket` (Play).
 2. Weekly: `storebound analytics snapshot` (default the last 28 days; `--dry` prints totals only).
diff --git a/tests/analytics-collector.test.ts b/tests/analytics-collector.test.ts
new file mode 100644
index 0000000..4d26a56
--- /dev/null
+++ b/tests/analytics-collector.test.ts
@@ -0,0 +1,264 @@
+// What an external collector needs from `analytics snapshot` and `reports`: a store-only config (apple.appId without a
+// bundle id, no play.reportsBucket), --json on stdout, App Usage and Play install stock numbers per day, and per-day
+// sales JSON for a day range of both stores. Fixtures are made-up report files; nothing reaches the network.
+import { afterEach, describe, expect, test } from 'bun:test';
+import { createHash } from 'node:crypto';
+import { existsSync, mkdtempSync, readFileSync, writeFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import { deflateRawSync } from 'node:zlib';
+import { run as analytics } from '../cli/analytics';
+import { appleDaily, appleTotals, mergeAppleUsage, parseReport, playDaily, playTotals } from '../cli/lib/analytics';
+import { type ShipConfig, validateConfig } from '../cli/lib/config';
+import { playReportsBucket, profileEnv } from '../cli/lib/credentials';
+import { dateRange, parsePlayCsv, parseTsv, playSalesTotals, rangeReport, reportRange, summarizeAppleSales, summarizePlaySalesByDay, totalsByCurrency } from '../cli/lib/reports';
+import { run as reports } from '../cli/reports';
+import { ascEnv, BASE, capture, jsonOut, mockFetch, playEnv, project, restore } from './helpers/store-mock';
+
+const BUCKET = 'pubsite_prod_rev_01234567890123456789';
+afterEach(() => { restore(); delete process.env.PLAY_REPORTS_BUCKET; delete process.env.STOREBOUND_CREDENTIALS_DIR; delete process.env.STOREBOUND_PROFILE; });
+
+const iso = (offset: number) => new Date(Date.now() + offset * 86_400_000).toISOString().slice(0, 10);
+type Req = { path: string };
+
+function zip(files: Record<string, string>): Uint8Array {
+  const parts: Uint8Array[] = [], central: Uint8Array[] = [];
+  let off = 0;
+  for (const [name, text] of Object.entries(files)) {
+    const raw = new TextEncoder().encode(text), data = deflateRawSync(raw), n = new TextEncoder().encode(name);
+    const h = new DataView(new ArrayBuffer(30));
+    h.setUint32(0, 0x04034b50, true); h.setUint16(8, 8, true); h.setUint32(18, data.length, true); h.setUint32(22, raw.length, true); h.setUint16(26, n.length, true);
+    const c = new DataView(new ArrayBuffer(46));
+    c.setUint32(0, 0x02014b50, true); c.setUint16(10, 8, true); c.setUint32(20, data.length, true); c.setUint32(24, raw.length, true); c.setUint16(28, n.length, true); c.setUint32(42, off, true);
+    parts.push(new Uint8Array(h.buffer), n, data);
+    central.push(new Uint8Array(c.buffer), n);
+    off += 30 + n.length + data.length;
+  }
+  const cdSize = central.reduce((s, x) => s + x.length, 0);
+  const e = new DataView(new ArrayBuffer(22));
+  e.setUint32(0, 0x06054b50, true); e.setUint16(8, Object.keys(files).length, true); e.setUint16(10, Object.keys(files).length, true); e.setUint32(12, cdSize, true); e.setUint32(16, off, true);
+  const all = [...parts, ...central, new Uint8Array(e.buffer)];
+  const out = new Uint8Array(all.reduce((s, x) => s + x.length, 0));
+  let p = 0;
+  for (const x of all) { out.set(x, p); p += x.length; }
+  return out;
+}
+
+// ---- pure parts ----
+
+describe('App Usage and Play install stock numbers', () => {
+  const SESSIONS = 'Date\tApp Name\tApp Apple Identifier\tApp Version\tDevice\tPlatform Version\tSource Type\tSource Info\tTerritory\tSessions\tTotal Session Duration\tUnique Devices\n' +
+    '2026-10-01\tExample\t1\t1.0\tiPhone\tiOS 26\t\t\tUS\t100\t3000\t40\n2026-10-01\tExample\t1\t1.0\tiPad\tiPadOS 26\t\t\tTR\t20\t600\t8\n2026-10-02\tExample\t1\t1.0\tiPhone\tiOS 26\t\t\tUS\t50\t1000\t30\n';
+  const CRASHES = 'Date\tApp Name\tApp Apple Identifier\tApp Version\tDevice\tPlatform Version\tCrashes\tUnique Devices\n2026-10-01\tExample\t1\t1.0\tiPhone\tiOS 26\t4\t3\n2026-10-03\tExample\t1\t1.0\tiPhone\tiOS 26\t1\t1\n';
+  test('sessions, active devices, session time and crashes per day, merged into the engagement days', () => {
+    const base = appleDaily(parseReport('Date\tEvent\tCounts\tUnique Counts\n2026-10-01\tImpression\t10\t8\n'), []);
+    const d = mergeAppleUsage(base, parseReport(SESSIONS), parseReport(CRASHES));
+    expect(d.map(x => x.date)).toEqual(['2026-10-01', '2026-10-02', '2026-10-03']);
+    expect(d[0]).toMatchObject({ impressions: 10, sessions: 120, activeDevices: 48, sessionSeconds: 3600, crashes: 4 });
+    expect(d[1]).toMatchObject({ impressions: 0, sessions: 50, activeDevices: 30 });
+    expect(d[1]!.crashes).toBeUndefined();
+    expect(d[2]).toMatchObject({ crashes: 1 });
+    expect(appleTotals(d)).toMatchObject({ sessions: 170, crashes: 5, activeDevicesAvg: 39 });
+    expect(appleTotals(base).sessions).toBeUndefined();
+  });
+  test('Play: stock columns from the overview file, else summed over the country rows; totals take the newest day', () => {
+    const country = parseReport('Date,Package Name,Country,Daily Device Installs,Daily User Installs,Total User Installs,Active Device Installs\n' +
+      '2026-10-01,p,US,5,4,100,60\n2026-10-01,p,TR,2,2,50,30\n2026-10-02,p,US,1,1,101,61\n');
+    expect(playDaily([], country)).toEqual([
+      { date: '2026-10-01', visitors: 0, acquisitions: 0, installs: 6, activeDeviceInstalls: 90, totalUserInstalls: 150 },
+      { date: '2026-10-02', visitors: 0, acquisitions: 0, installs: 1, activeDeviceInstalls: 61, totalUserInstalls: 101 }]);
+    const overview = parseReport('Date,Package Name,Total User Installs,Active Device Installs\n2026-10-01,p,160,95\n2026-10-02,p,162,96\n');
+    const d = playDaily([], country, overview);
+    expect(d[0]).toMatchObject({ installs: 6, activeDeviceInstalls: 95, totalUserInstalls: 160 });
+    expect(playTotals(d)).toMatchObject({ installs: 7, activeDeviceInstalls: 96, totalUserInstalls: 162 });
+    expect(playDaily([], parseReport('Date,Daily User Installs\n2026-10-01,3\n'))[0]!.activeDeviceInstalls).toBeUndefined();
+  });
+});
+
+describe('store-only config and bucket fallback', () => {
+  const virtual = (apple: Record<string, unknown>): unknown => ({ ...BASE, apple, play: { packageName: 'com.example.notes' } });
+  test('apple.appId alone is enough; a missing id is still an error', () => {
+    expect(validateConfig(virtual({ bundleId: null, appId: '6400000101' }))).toEqual([]);
+    expect(validateConfig(virtual({ appId: '6400000101' }))).toEqual([]);
+    expect(validateConfig(virtual({ bundleId: null }))[0]).toContain('apple.bundleId');
+    expect(validateConfig(virtual({ bundleId: 'nope' }))[0]).toContain('apple.bundleId');
+    expect(validateConfig(virtual({ bundleId: null, appId: 'abc' }))[0]).toContain('apple.bundleId');
+  });
+  test('reports bucket: config, then env PLAY_REPORTS_BUCKET, then the profile field reportsBucket', () => {
+    const dir = mkdtempSync(join(tmpdir(), 'sb-prof-'));
+    writeFileSync(join(dir, 'acme.json'), JSON.stringify({ reportsBucket: `gs://${BUCKET}/` }));
+    process.env.STOREBOUND_CREDENTIALS_DIR = dir;
+    process.env.STOREBOUND_PROFILE = 'acme';
+    const root = mkdtempSync(join(tmpdir(), 'sb-root-'));
+    expect(profileEnv('acme').PLAY_REPORTS_BUCKET).toBe(`gs://${BUCKET}/`);
+    expect(playReportsBucket(root)).toBe(`gs://${BUCKET}/`);
+    process.env.PLAY_REPORTS_BUCKET = 'pubsite_prod_rev_999';
+    expect(playReportsBucket(root)).toBe('pubsite_prod_rev_999');
+    expect(playReportsBucket(root, BUCKET)).toBe(BUCKET);
+    process.env.PLAY_REPORTS_BUCKET = 'my-bucket';
+    expect(() => playReportsBucket(root)).toThrow('PLAY_REPORTS_BUCKET');
+    delete process.env.PLAY_REPORTS_BUCKET;
+    process.env.STOREBOUND_PROFILE = '';
+    expect(playReportsBucket(root)).toBeNull();
+  });
+});
+
+describe('day ranges and daily sales', () => {
+  test('reportRange: --days ends yesterday, --from/--to inclusive, checks', () => {
+    const now = new Date('2026-10-26T10:00:00Z');
+    expect(reportRange({}, now)).toBeNull();
+    expect(reportRange({ days: '3' }, now)).toEqual({ from: '2026-10-23', to: '2026-10-25', dates: ['2026-10-23', '2026-10-24', '2026-10-25'] });
+    expect(reportRange({ from: '2026-10-24' }, now)!.dates).toEqual(['2026-10-24', '2026-10-25']);
+    expect(reportRange({ from: '2026-10-24', to: '2026-10-24' }, now)!.dates).toEqual(['2026-10-24']);
+    expect(() => reportRange({ days: '0' }, now)).toThrow('--days');
+    expect(() => reportRange({ days: '2', from: '2026-10-01' }, now)).toThrow('not both');
+    expect(() => reportRange({ from: '2026-10-03', to: '2026-10-01' }, now)).toThrow('after');
+    expect(() => reportRange({ from: '10/03/2026' }, now)).toThrow('YYYY-MM-DD');
+    expect(() => reportRange({ to: '2026-10-03' }, now)).toThrow('--from');
+    expect(dateRange('2026-02-27', '2026-03-02')).toHaveLength(4);
+  });
+  test('rangeReport: totals per currency over the days, the dates without a report listed', () => {
+    const tsv = (units: number) => ['Provider\tSKU\tTitle\tUnits\tDeveloper Proceeds\tCurrency of Proceeds', `APPLE\tcom.example.pro\tPro\t${units}\t2.5\tUSD`, 'APPLE\tcom.example.pro\tPro\t1\t3\tEUR', ''].join('\n');
+    const day = (date: string, units: number) => { const summary = summarizeAppleSales(parseTsv(tsv(units))); return { date, rows: 2, summary, totals: totalsByCurrency(summary) }; };
+    const r = rangeReport([day('2026-10-02', 4), day('2026-10-01', 2)], ['2026-10-01', '2026-10-02', '2026-10-03']);
+    expect(r.days.map(d => d.date)).toEqual(['2026-10-01', '2026-10-02']);
+    expect(r.totals).toEqual([{ currency: 'EUR', units: 2, amount: 6 }, { currency: 'USD', units: 6, amount: 15 }]);
+    expect(r.missing).toEqual(['2026-10-03']);
+  });
+  test('Play sales per order-charged date and currency: charged, refunds (negative), net', () => {
+    const csv = 'Order Number,Order Charged Date,Financial Status,SKU ID,Currency of Sale,Item Price,Taxes Collected,Charged Amount\n' +
+      'A1,2026-10-01,Charged,pro,USD,4.99,0.00,4.99\nA2,2026-10-01,Charged,pro,USD,4.00,0.50,4.50\nA3,2026-10-01,Charged,pro,EUR,5.00,1.00,6.00\n' +
+      'A4,2026-10-02,Refund,pro,USD,4.99,0.00,4.99\nA5,2026-10-02,Refund,pro,USD,-1.00,0.00,-1.00\nA6,2026-09-30,Charged,pro,USD,9,0,9\nA7,2026-10-02,Other,pro,USD,9,0,9\n';
+    const d = summarizePlaySalesByDay(parsePlayCsv(csv), '2026-10-01', '2026-10-03');
+    expect(d).toEqual([
+      { date: '2026-10-01', currency: 'EUR', orders: 1, refunds: 0, itemPrice: 5, taxes: 1, charged: 6, refunded: 0, net: 6 },
+      { date: '2026-10-01', currency: 'USD', orders: 2, refunds: 0, itemPrice: 8.99, taxes: 0.5, charged: 9.49, refunded: 0, net: 9.49 },
+      { date: '2026-10-02', currency: 'USD', orders: 0, refunds: 2, itemPrice: 0, taxes: 0, charged: 0, refunded: -5.99, net: -5.99 }]);
+    expect(playSalesTotals(d)).toEqual([{ currency: 'EUR', orders: 1, refunds: 0, charged: 6, refunded: 0, net: 6 }, { currency: 'USD', orders: 2, refunds: 2, charged: 9.49, refunded: -5.99, net: 3.5 }]);
+  });
+});
+
+// ---- the commands, as the collector calls them ----
+
+const md5 = (s: string) => createHash('md5').update(s).digest('hex');
+
+describe('analytics snapshot on a store-only config', () => {
+  const d1 = iso(-1), d2 = iso(-2);
+  const ENG = `Date\tEvent\tCounts\tUnique Counts\n${d1}\tImpression\t100\t80\n${d1}\tPage view\t30\t25\n${d2}\tImpression\t60\t50\n`;
+  const DL = `Date,Download Type,Counts\n${d1},First-time Download,10\n${d2},Redownload,2\n`;
+  const SES = `Date\tSessions\tTotal Session Duration\tUnique Devices\n${d1}\t200\t6000\t90\n${d2}\t150\t4000\t70\n`;
+  const CRA = `Date\tCrashes\tUnique Devices\n${d1}\t3\t2\n`;
+  const files: Record<string, string> = { eng: ENG, dl: DL, ses: SES, cra: CRA };
+  const reportsList = [
+    { id: 'r-eng', attributes: { category: 'APP_STORE_ENGAGEMENT', name: 'App Store Discovery and Engagement Standard' } },
+    { id: 'r-dl', attributes: { category: 'COMMERCE', name: 'App Store Downloads Standard' } },
+    { id: 'r-ses', attributes: { category: 'APP_USAGE', name: 'App Sessions Standard' } },
+    { id: 'r-cra', attributes: { category: 'APP_USAGE', name: 'App Crashes Standard' } },
+  ];
+  const appleRoutes = (list = reportsList) => [
+    { match: /\/v1\/apps\/6400000101\/analyticsReportRequests\?/, answer: { data: [{ id: 'req1', attributes: {} }] } },
+    { match: /\/v1\/analyticsReportRequests\/req1\/reports\?/, answer: { data: list } },
+    { match: /\/v1\/analyticsReports\/r-(\w+)\/instances\?/, answer: (c: Req) => { const k = /r-(\w+)\//.exec(decodeURIComponent(c.path))![1]!; return { data: [{ id: `i-${k}`, attributes: { processingDate: iso(0) } }] }; } },
+    { match: /\/v1\/analyticsReportInstances\/i-(\w+)\/segments\?/, answer: (c: Req) => { const k = /i-(\w+)\//.exec(decodeURIComponent(c.path))![1]!; return { data: [{ id: `s-${k}`, attributes: { url: `https://segments.example.com/seg/${k}`, checksum: md5(files[k]!) } }] }; } },
+    { match: /^\/seg\/(\w+)$/, answer: (c: Req) => new Response(files[c.path.slice(5)]!) },
+  ];
+  const virtualConfig = (): ShipConfig => ({ ...BASE, apple: { bundleId: null as unknown as string, appId: '6400000101' }, play: { packageName: 'com.example.notes' } });
+
+  test('apple: appId only, App Usage per day, --json on stdout, --no-write leaves no file', async () => {
+    ascEnv();
+    const p = project(virtualConfig());
+    const calls = mockFetch(appleRoutes());
+    const r = await capture(() => analytics(p.ctx(['snapshot', '--store', 'apple', '--days', '3', '--json', '--no-write'])));
+    const snap = jsonOut(r.out) as { apple: { daily: Record<string, string | number>[]; totals: Record<string, number> } };
+    expect(snap.apple.daily.find(x => x.date === d1)).toMatchObject({ impressions: 100, pageViews: 30, downloads: 10, sessions: 200, activeDevices: 90, sessionSeconds: 6000, crashes: 3 });
+    expect(snap.apple.daily.find(x => x.date === d2)).toMatchObject({ sessions: 150, activeDevices: 70 });
+    expect(snap.apple.totals).toMatchObject({ sessions: 350, crashes: 3, activeDevicesAvg: 80 });
+    expect(calls.some(c => /filter\[bundleId\]/.test(decodeURIComponent(c.path)))).toBe(false);
+    expect(existsSync(join(p.root, '.storebound/analytics'))).toBe(false);
+  });
+  test('apple: without the usage reports the rest still comes, with a note', async () => {
+    ascEnv();
+    const p = project(virtualConfig());
+    mockFetch(appleRoutes(reportsList.slice(0, 2)));
+    const r = await capture(() => analytics(p.ctx(['snapshot', '--store', 'apple', '--days', '3', '--json'])));
+    const snap = jsonOut(r.out) as { apple: { daily: Record<string, string | number>[]; notes: string[] } };
+    expect(snap.apple.daily.find(x => x.date === d1)!.impressions).toBe(100);
+    expect(snap.apple.daily[0]!.sessions).toBeUndefined();
+    expect(snap.apple.notes[0]).toContain('App Usage');
+    expect(existsSync(join(p.root, '.storebound/analytics', `${iso(0)}.json`))).toBe(true);
+  });
+  test('play: the bucket from env, install stock numbers, daily user installs', async () => {
+    playEnv();
+    process.env.PLAY_REPORTS_BUCKET = BUCKET;
+    const p = project(virtualConfig());
+    const month = (d: string) => d.slice(0, 7).replace('-', '');
+    const inMonth = (m: string) => [d2, d1].filter(d => month(d) === m);
+    const mOf = (c: Req) => /_(\d{6})_/.exec(decodeURIComponent(c.path))![1]!;
+    mockFetch([
+      { match: /store_performance_com\.example\.notes_(\d{6})_country\.csv\?alt=media$/, answer: (c: Req) => new Response(`Date,Package name,Country,Store listing acquisitions,Store listing visitors\n${inMonth(mOf(c)).map(d => `${d},com.example.notes,US,5,50`).join('\n')}\n`) },
+      { match: /installs_com\.example\.notes_(\d{6})_country\.csv\?alt=media$/, answer: (c: Req) => new Response(`Date,Package Name,Country,Daily User Installs,Total User Installs,Active Device Installs\n${inMonth(mOf(c)).map(d => `${d},com.example.notes,US,4,100,60`).join('\n')}\n`) },
+      { match: /installs_com\.example\.notes_(\d{6})_overview\.csv\?alt=media$/, answer: (c: Req) => new Response(`Date,Package Name,Total User Installs,Active Device Installs\n${inMonth(mOf(c)).map(d => `${d},com.example.notes,${d === d1 ? 120 : 110},${d === d1 ? 70 : 65}`).join('\n')}\n`) },
+    ]);
+    const r = await capture(() => analytics(p.ctx(['snapshot', '--store', 'play', '--days', '3', '--json', '--dry'])));
+    const snap = jsonOut(r.out) as { play: { daily: Record<string, string | number>[]; totals: Record<string, number> } };
+    expect(snap.play.daily.find(x => x.date === d1)).toMatchObject({ visitors: 50, acquisitions: 5, installs: 4, activeDeviceInstalls: 70, totalUserInstalls: 120 });
+    expect(snap.play.totals).toMatchObject({ installs: 8, activeDeviceInstalls: 70, totalUserInstalls: 120 });
+  });
+  test('play without any bucket: the command fails (nothing to write)', async () => {
+    playEnv();
+    const p = project(virtualConfig());
+    mockFetch([]);
+    await expect(capture(() => analytics(p.ctx(['snapshot', '--store', 'play', '--days', '3', '--json'])))).rejects.toThrow('nothing written');
+  });
+});
+
+describe('reports over a day range', () => {
+  test('apple-sales --days: one JSON with the days, totals per currency, the missing day listed', async () => {
+    ascEnv();
+    process.env.ASC_VENDOR_NUMBER = '12345678';
+    const p = project();
+    const yesterday = iso(-1), before = iso(-2);
+    const tsv = (units: number, proceeds: string, cur: string) => ['Provider\tSKU\tTitle\tUnits\tDeveloper Proceeds\tCurrency of Proceeds', `APPLE\tcom.example.notes.pro\tPro\t${units}\t${proceeds}\t${cur}`, ''].join('\n');
+    const calls = mockFetch([{ match: /^\/v1\/salesReports\?/, answer: (c: Req) => {
+      const date = /reportDate\]=(\d{4}-\d{2}-\d{2})/.exec(decodeURIComponent(c.path))![1]!;
+      return date === yesterday ? new Response('{"errors":[{"status":"404","code":"NOT_FOUND"}]}', { status: 404 }) : new Response(Bun.gzipSync(new TextEncoder().encode(tsv(2, '3.49', date === before ? 'USD' : 'EUR'))));
+    } }]);
+    const r = await capture(() => reports(p.ctx(['apple-sales', '--days', '3', '--json'])));
+    const j = jsonOut(r.out) as { from: string; to: string; days: { date: string; totals: unknown[] }[]; totals: unknown[]; missing: string[]; rows: number };
+    expect(calls).toHaveLength(3);
+    expect(j.to).toBe(yesterday);
+    expect(j.days.map(d => d.date)).toEqual([iso(-3), before]);
+    expect(j.missing).toEqual([yesterday]);
+    expect(j.totals).toEqual([{ currency: 'EUR', units: 2, amount: 6.98 }, { currency: 'USD', units: 2, amount: 6.98 }]);
+    expect(j.rows).toBe(2);
+    expect(existsSync(join(p.root, `.storebound/reports/apple-sales-daily-${before}.tsv`))).toBe(true);
+    expect(readFileSync(join(p.root, `.storebound/reports/apple-sales-daily-${iso(-3)}_${yesterday}.summary.csv`), 'utf8')).toContain('date,key,title,currency,units,amount,rows');
+  });
+  test('apple-sales with a --type other than SALES, or --days on finance, is refused', async () => {
+    ascEnv();
+    const p = project();
+    await expect(capture(() => reports(p.ctx(['apple-sales', '--days', '3', '--type', 'SUBSCRIPTION', '--vendor', '12345678'])))).rejects.toThrow('SALES');
+    await expect(capture(() => reports(p.ctx(['apple-finance', '--days', '3', '--month', '2026-09', '--vendor', '12345678'])))).rejects.toThrow('monthly');
+  });
+  test('play-sales --days: the daily revenue per currency from the monthly sales zips; play-earnings --days is refused', async () => {
+    playEnv();
+    process.env.PLAY_REPORTS_BUCKET = BUCKET;
+    const p = project({ ...BASE, play: { packageName: 'com.example.notes' } });
+    const d1 = iso(-1), d2 = iso(-2);
+    const months = new Set([d1, d2].map(d => d.slice(0, 7).replace('-', '')));
+    const csv = `Order Number,Order Charged Date,Financial Status,SKU ID,Currency of Sale,Item Price,Taxes Collected,Charged Amount\nA1,${d1},Charged,pro,USD,4.99,0,4.99\nA2,${d2},Charged,pro,USD,4.99,0,4.99\nA3,${d2},Refund,pro,USD,4.99,0,4.99\n`;
+    mockFetch([
+      { match: /\/o\?prefix=sales\/salesreport_(\d{6})$/, answer: (c: Req) => { const m = /salesreport_(\d{6})/.exec(decodeURIComponent(c.path))![1]!; return { items: months.has(m) ? [{ name: `sales/salesreport_${m}.zip` }] : [] }; } },
+      { match: /\/o\/sales\/salesreport_\d{6}\.zip\?alt=media$/, answer: () => new Response(zip({ 'salesreport.csv': csv }) as Uint8Array<ArrayBuffer>) },
+    ]);
+    const r = await capture(() => reports(p.ctx(['play-sales', '--days', '2', '--json'])));
+    const j = jsonOut(r.out) as { days: { date: string; net: number }[]; totals: unknown[]; emptyDays: string[] };
+    // one zip per month the window touches: a window across a month end reads the same fixture twice, so compare per day
+    const once = months.size === 1;
+    expect(j.days).toMatchObject([{ date: d2, currency: 'USD', orders: once ? 1 : 2, refunds: once ? 1 : 2 }, { date: d1, orders: once ? 1 : 2 }]);
+    if (once) expect(j.totals).toEqual([{ currency: 'USD', orders: 2, refunds: 1, charged: 9.98, refunded: -4.99, net: 4.99 }]);
+    expect(j.emptyDays).toEqual([]);
+    expect(existsSync(join(p.root, `.storebound/reports/play-sales-daily-${d2}_${d1}.summary.csv`))).toBe(true);
+    await expect(capture(() => reports(p.ctx(['play-earnings', '--days', '2'])))).rejects.toThrow('monthly');
+  });
+});
diff --git a/tests/analytics.test.ts b/tests/analytics.test.ts
index 6b97c4b..24fa5ed 100644
--- a/tests/analytics.test.ts
+++ b/tests/analytics.test.ts
@@ -51,7 +51,7 @@ describe('apple analytics reports', () => {
 describe('play statistics exports', () => {
   test('file names, months, bucket', () => {
     expect(monthsBetween('2026-11-20', '2027-02-01')).toEqual(['202611', '202612', '202701', '202702']);
-    expect(playObjects('com.example.game', '202610')).toEqual({ storePerformance: 'stats/store_performance/store_performance_com.example.game_202610_country.csv', installs: 'stats/installs/installs_com.example.game_202610_country.csv' });
+    expect(playObjects('com.example.game', '202610')).toEqual({ storePerformance: 'stats/store_performance/store_performance_com.example.game_202610_country.csv', installs: 'stats/installs/installs_com.example.game_202610_country.csv', installsOverview: 'stats/installs/installs_com.example.game_202610_overview.csv' });
     expect(bucketName('gs://pubsite_prod_rev_0000/stats')).toBe('pubsite_prod_rev_0000');
   });
   test('daily sums across countries', () => {

From 1030cdff0ca6c071ee0cf2b64eeef923d4f79ca0 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Mon, 26 Oct 2026 10:27:48 +0700
Subject: [PATCH 037/126] storebound 0.8.51: version in package.json and every
 copy, CHANGELOG 0.8.51 section

---
 .claude-plugin/marketplace.json        | 2 +-
 .claude-plugin/plugin.json             | 2 +-
 .codex-plugin/plugin.json              | 2 +-
 CHANGELOG.md                           | 2 ++
 apps/desktop/package.json              | 2 +-
 apps/desktop/src-tauri/Cargo.lock      | 2 +-
 apps/desktop/src-tauri/Cargo.toml      | 2 +-
 apps/desktop/src-tauri/tauri.conf.json | 2 +-
 gemini-extension.json                  | 2 +-
 package.json                           | 2 +-
 10 files changed, 11 insertions(+), 9 deletions(-)

diff --git a/.claude-plugin/marketplace.json b/.claude-plugin/marketplace.json
index 01cf4d6..3018ecf 100644
--- a/.claude-plugin/marketplace.json
+++ b/.claude-plugin/marketplace.json
@@ -9,7 +9,7 @@
       "name": "storebound",
       "source": ".",
       "description": "Take a mobile app or game from nothing to Submit for review on both stores: skills for every store step and questionnaire plus the storebound CLI and MCP server.",
-      "version": "0.8.50",
+      "version": "0.8.51",
       "category": "development",
       "tags": [
         "mobile",
diff --git a/.claude-plugin/plugin.json b/.claude-plugin/plugin.json
index 5852018..9e731ce 100644
--- a/.claude-plugin/plugin.json
+++ b/.claude-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.50",
+  "version": "0.8.51",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/.codex-plugin/plugin.json b/.codex-plugin/plugin.json
index 2089618..a391d94 100644
--- a/.codex-plugin/plugin.json
+++ b/.codex-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.50",
+  "version": "0.8.51",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 1176b4d..2151261 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,8 @@
 
 ## Unreleased
 
+## 0.8.51 · 2026-10-26
+
 - `analytics snapshot` and `reports` for a collector: a store-only config may name the App Store app by `apple.appId` alone (`bundleId` null or absent; every write still needs it); the Play reports bucket also comes from env `PLAY_REPORTS_BUCKET` or the credential profile's `reportsBucket` when `play.reportsBucket` is missing; `analytics snapshot --json` prints the snapshot as one JSON document on stdout (also when every store failed, with the exit code 1) and `--no-write` skips the file.
 - Snapshots carry active-user numbers per day: App Store App Usage (`sessions`, `activeDevices`, `sessionSeconds`, `crashes` from the App Sessions and App Crashes reports; a missing usage report is a `notes` line, not a failure) and Play `activeDeviceInstalls` and `totalUserInstalls` (installs overview file, else the country file summed) next to `installs` (Daily User Installs).
 - `reports apple-sales --days N | --from YYYY-MM-DD [--to ...] --json` reads the daily SALES reports of a range into one JSON (per-day summary and totals per currency, range totals per currency, `missing` days listed, never errors); `reports play-sales --days N | --from ...` gives the daily revenue per currency from the estimated sales reports (orders, refunds, charged, refunded, net, by order charged date). MCP `reports` takes `days`, `from`, `to`.
diff --git a/apps/desktop/package.json b/apps/desktop/package.json
index 2b138a0..e1ab65e 100644
--- a/apps/desktop/package.json
+++ b/apps/desktop/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@storebound/desktop",
-  "version": "0.8.50",
+  "version": "0.8.51",
   "private": true,
   "license": "MIT",
   "type": "module",
diff --git a/apps/desktop/src-tauri/Cargo.lock b/apps/desktop/src-tauri/Cargo.lock
index 46fcc92..f1ff2dd 100644
--- a/apps/desktop/src-tauri/Cargo.lock
+++ b/apps/desktop/src-tauri/Cargo.lock
@@ -4096,7 +4096,7 @@ checksum = "a2eb9349b6444b326872e140eb1cf5e7c522154d69e7a0ffb0fb81c06b37543f"
 
 [[package]]
 name = "storebound-desktop"
-version = "0.8.50"
+version = "0.8.51"
 dependencies = [
  "base64 0.22.1",
  "getrandom 0.3.4",
diff --git a/apps/desktop/src-tauri/Cargo.toml b/apps/desktop/src-tauri/Cargo.toml
index 1c930f7..3b51da9 100644
--- a/apps/desktop/src-tauri/Cargo.toml
+++ b/apps/desktop/src-tauri/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "storebound-desktop"
-version = "0.8.50"
+version = "0.8.51"
 description = "storebound desktop: every game's releases on both stores in one window"
 license = "MIT"
 edition = "2021"
diff --git a/apps/desktop/src-tauri/tauri.conf.json b/apps/desktop/src-tauri/tauri.conf.json
index 87770a9..ae91aaf 100644
--- a/apps/desktop/src-tauri/tauri.conf.json
+++ b/apps/desktop/src-tauri/tauri.conf.json
@@ -2,7 +2,7 @@
   "$schema": "https://schema.tauri.app/config/2",
   "productName": "storebound",
   "mainBinaryName": "storebound-desktop",
-  "version": "0.8.50",
+  "version": "0.8.51",
   "identifier": "dev.storebound.desktop",
   "build": {
     "frontendDist": "../dist",
diff --git a/gemini-extension.json b/gemini-extension.json
index 6a57412..2e82de2 100644
--- a/gemini-extension.json
+++ b/gemini-extension.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.50",
+  "version": "0.8.51",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "contextFileName": "GEMINI.md",
   "mcpServers": {
diff --git a/package.json b/package.json
index a626f6b..1b89e5b 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.50",
+  "version": "0.8.51",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every store questionnaire (incl. account deletion and App Review demo accounts), privacy, icons, screenshots and previews, TestFlight. After launch: crash vitals, review replies, price sheets, analytics and Product Page Optimization. One config, a CLI (Node 20+ or Bun), an MCP server and Agent Skills for your AI coding agent.",
   "license": "MIT",
   "author": "CRTkafa",

From 05d0e227a1c52627bb52a31b5109773d6bcf2cd3 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Mon, 26 Oct 2026 11:05:08 +0700
Subject: [PATCH 038/126] release: the dev-channel job never gates a release;
 desktop-dev retries the live dev latest.json on 5xx

---
 tools/desktop-dev.ts       | 12 ++++++++----
 tools/release-candidate.ts |  5 +++--
 2 files changed, 11 insertions(+), 6 deletions(-)

diff --git a/tools/desktop-dev.ts b/tools/desktop-dev.ts
index 29f8a30..fd089f6 100644
--- a/tools/desktop-dev.ts
+++ b/tools/desktop-dev.ts
@@ -62,10 +62,14 @@ export function pruneDev<T extends { tag_name: string }>(releases: T[], keep = K
 }
 
 async function liveDev(): Promise<string | null> {
-  const r = await fetch(`${DEV_URL}?t=${Date.now()}`, { signal: AbortSignal.timeout(20_000) }).catch(() => null);
-  if (!r || r.status === 404) return null;
-  if (!r.ok) throw new Error(`${DEV_URL}: HTTP ${r.status}`);
-  return ((await r.json()) as { version?: string }).version ?? null;
+  // a 5xx from the CDN / origin is often a blip: try a few times before giving up
+  for (let i = 0; ; i++) {
+    const r = await fetch(`${DEV_URL}?t=${Date.now()}`, { signal: AbortSignal.timeout(20_000) }).catch(() => null);
+    if (r?.status === 404) return null;
+    if (r?.ok) return ((await r.json()) as { version?: string }).version ?? null;
+    if (i >= 4) throw new Error(`${DEV_URL}: ${r ? `HTTP ${r.status}` : 'no answer'} after ${i + 1} tries`);
+    await new Promise(res => setTimeout(res, 5_000 * (i + 1)));
+  }
 }
 
 function commitDate(): Date {
diff --git a/tools/release-candidate.ts b/tools/release-candidate.ts
index bb0ff92..bb4e8b3 100644
--- a/tools/release-candidate.ts
+++ b/tools/release-candidate.ts
@@ -95,8 +95,9 @@ export interface Task { id: number; name: string; run_number: number; workflow_i
 /** The state of a commit from its ci.yml jobs (the newest run of that commit) and whether its record exists. Pure. */
 export function taskState(tasks: Task[], sha: string, runUrl: (n: number) => string): Exclude<Status, { state: 'green' }> {
   // the background test jobs (ci, acceptance) never gate a release (the owner's decision 2026-10-16): only the
-  // installer builds and the record count; tools/ci-status.ts reports the tests
-  const mine = tasks.filter(t => t.head_sha === sha && t.workflow_id === 'ci.yml' && !/^(ci|acceptance\b)/.test(t.name));
+  // installer builds and the record count; tools/ci-status.ts reports the tests. The dev job (the owner's dev update
+  // channel) never gates a release either: a hiccup publishing a dev build must not hold back npm.
+  const mine = tasks.filter(t => t.head_sha === sha && t.workflow_id === 'ci.yml' && !/^(ci|acceptance\b|dev$)/.test(t.name));
   if (!mine.length) return { state: 'none' };
   const latest = Math.max(...mine.map(t => t.run_number));
   const jobs = mine.filter(t => t.run_number === latest);

From 1953aa59d8e6645471205986644ad3c143f5147b Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Mon, 26 Oct 2026 11:05:27 +0700
Subject: [PATCH 039/126] CHANGELOG: 0.8.51 was not published

---
 CHANGELOG.md | 7 +++++--
 1 file changed, 5 insertions(+), 2 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 2151261..9c1cfa1 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,11 +3,14 @@
 
 ## Unreleased
 
-## 0.8.51 · 2026-10-26
-
 - `analytics snapshot` and `reports` for a collector: a store-only config may name the App Store app by `apple.appId` alone (`bundleId` null or absent; every write still needs it); the Play reports bucket also comes from env `PLAY_REPORTS_BUCKET` or the credential profile's `reportsBucket` when `play.reportsBucket` is missing; `analytics snapshot --json` prints the snapshot as one JSON document on stdout (also when every store failed, with the exit code 1) and `--no-write` skips the file.
 - Snapshots carry active-user numbers per day: App Store App Usage (`sessions`, `activeDevices`, `sessionSeconds`, `crashes` from the App Sessions and App Crashes reports; a missing usage report is a `notes` line, not a failure) and Play `activeDeviceInstalls` and `totalUserInstalls` (installs overview file, else the country file summed) next to `installs` (Daily User Installs).
 - `reports apple-sales --days N | --from YYYY-MM-DD [--to ...] --json` reads the daily SALES reports of a range into one JSON (per-day summary and totals per currency, range totals per currency, `missing` days listed, never errors); `reports play-sales --days N | --from ...` gives the daily revenue per currency from the estimated sales reports (orders, refunds, charged, refunded, net, by order charged date). MCP `reports` takes `days`, `from`, `to`.
+- Release: the dev-channel CI job no longer gates a release.
+
+## 0.8.51 · 2026-10-26
+
+- Tagged but not published (the dev-channel job hit a CDN 502); everything ships in the next version.
 
 ## 0.8.50 · 2026-10-25
 

From 46c841d209ebfda4b3d2bcd020afec4785a47e52 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Mon, 26 Oct 2026 11:08:21 +0700
Subject: [PATCH 040/126] storebound 0.8.52: version in package.json and every
 copy, CHANGELOG 0.8.52 section

---
 .claude-plugin/marketplace.json        | 2 +-
 .claude-plugin/plugin.json             | 2 +-
 .codex-plugin/plugin.json              | 2 +-
 CHANGELOG.md                           | 2 ++
 apps/desktop/package.json              | 2 +-
 apps/desktop/src-tauri/Cargo.lock      | 2 +-
 apps/desktop/src-tauri/Cargo.toml      | 2 +-
 apps/desktop/src-tauri/tauri.conf.json | 2 +-
 gemini-extension.json                  | 2 +-
 package.json                           | 2 +-
 10 files changed, 11 insertions(+), 9 deletions(-)

diff --git a/.claude-plugin/marketplace.json b/.claude-plugin/marketplace.json
index 3018ecf..a0aeffc 100644
--- a/.claude-plugin/marketplace.json
+++ b/.claude-plugin/marketplace.json
@@ -9,7 +9,7 @@
       "name": "storebound",
       "source": ".",
       "description": "Take a mobile app or game from nothing to Submit for review on both stores: skills for every store step and questionnaire plus the storebound CLI and MCP server.",
-      "version": "0.8.51",
+      "version": "0.8.52",
       "category": "development",
       "tags": [
         "mobile",
diff --git a/.claude-plugin/plugin.json b/.claude-plugin/plugin.json
index 9e731ce..e43acdd 100644
--- a/.claude-plugin/plugin.json
+++ b/.claude-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.51",
+  "version": "0.8.52",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/.codex-plugin/plugin.json b/.codex-plugin/plugin.json
index a391d94..eaa58fd 100644
--- a/.codex-plugin/plugin.json
+++ b/.codex-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.51",
+  "version": "0.8.52",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 9c1cfa1..76a4214 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,8 @@
 
 ## Unreleased
 
+## 0.8.52 · 2026-10-26
+
 - `analytics snapshot` and `reports` for a collector: a store-only config may name the App Store app by `apple.appId` alone (`bundleId` null or absent; every write still needs it); the Play reports bucket also comes from env `PLAY_REPORTS_BUCKET` or the credential profile's `reportsBucket` when `play.reportsBucket` is missing; `analytics snapshot --json` prints the snapshot as one JSON document on stdout (also when every store failed, with the exit code 1) and `--no-write` skips the file.
 - Snapshots carry active-user numbers per day: App Store App Usage (`sessions`, `activeDevices`, `sessionSeconds`, `crashes` from the App Sessions and App Crashes reports; a missing usage report is a `notes` line, not a failure) and Play `activeDeviceInstalls` and `totalUserInstalls` (installs overview file, else the country file summed) next to `installs` (Daily User Installs).
 - `reports apple-sales --days N | --from YYYY-MM-DD [--to ...] --json` reads the daily SALES reports of a range into one JSON (per-day summary and totals per currency, range totals per currency, `missing` days listed, never errors); `reports play-sales --days N | --from ...` gives the daily revenue per currency from the estimated sales reports (orders, refunds, charged, refunded, net, by order charged date). MCP `reports` takes `days`, `from`, `to`.
diff --git a/apps/desktop/package.json b/apps/desktop/package.json
index e1ab65e..8b14fc0 100644
--- a/apps/desktop/package.json
+++ b/apps/desktop/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@storebound/desktop",
-  "version": "0.8.51",
+  "version": "0.8.52",
   "private": true,
   "license": "MIT",
   "type": "module",
diff --git a/apps/desktop/src-tauri/Cargo.lock b/apps/desktop/src-tauri/Cargo.lock
index f1ff2dd..3711bbe 100644
--- a/apps/desktop/src-tauri/Cargo.lock
+++ b/apps/desktop/src-tauri/Cargo.lock
@@ -4096,7 +4096,7 @@ checksum = "a2eb9349b6444b326872e140eb1cf5e7c522154d69e7a0ffb0fb81c06b37543f"
 
 [[package]]
 name = "storebound-desktop"
-version = "0.8.51"
+version = "0.8.52"
 dependencies = [
  "base64 0.22.1",
  "getrandom 0.3.4",
diff --git a/apps/desktop/src-tauri/Cargo.toml b/apps/desktop/src-tauri/Cargo.toml
index 3b51da9..907c06a 100644
--- a/apps/desktop/src-tauri/Cargo.toml
+++ b/apps/desktop/src-tauri/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "storebound-desktop"
-version = "0.8.51"
+version = "0.8.52"
 description = "storebound desktop: every game's releases on both stores in one window"
 license = "MIT"
 edition = "2021"
diff --git a/apps/desktop/src-tauri/tauri.conf.json b/apps/desktop/src-tauri/tauri.conf.json
index ae91aaf..c8933aa 100644
--- a/apps/desktop/src-tauri/tauri.conf.json
+++ b/apps/desktop/src-tauri/tauri.conf.json
@@ -2,7 +2,7 @@
   "$schema": "https://schema.tauri.app/config/2",
   "productName": "storebound",
   "mainBinaryName": "storebound-desktop",
-  "version": "0.8.51",
+  "version": "0.8.52",
   "identifier": "dev.storebound.desktop",
   "build": {
     "frontendDist": "../dist",
diff --git a/gemini-extension.json b/gemini-extension.json
index 2e82de2..2c978f8 100644
--- a/gemini-extension.json
+++ b/gemini-extension.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.51",
+  "version": "0.8.52",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "contextFileName": "GEMINI.md",
   "mcpServers": {
diff --git a/package.json b/package.json
index 1b89e5b..081b8c8 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.51",
+  "version": "0.8.52",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every store questionnaire (incl. account deletion and App Review demo accounts), privacy, icons, screenshots and previews, TestFlight. After launch: crash vitals, review replies, price sheets, analytics and Product Page Optimization. One config, a CLI (Node 20+ or Bun), an MCP server and Agent Skills for your AI coding agent.",
   "license": "MIT",
   "author": "CRTkafa",

From c247b7e54afa8e0e4286c57fbb1cfc13a87c997e Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Mon, 26 Oct 2026 16:52:29 +0700
Subject: [PATCH 041/126] release --resume: skip the desktop publish when the
 version is already live (a second run re-signs and the server never replaces
 a published file)

---
 tools/release.ts | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/tools/release.ts b/tools/release.ts
index 16e3ec7..3caac77 100644
--- a/tools/release.ts
+++ b/tools/release.ts
@@ -395,6 +395,13 @@ async function main(): Promise<void> {
 
   // ---------------------------------------------------------------- 6. publish
   await phase('publish (VDS seeds from Forgejo, Mac files once, latest.json)', async () => {
+    // a resume after a publish that went out (only its check failed, e.g. the site was down) must not publish again:
+    // signatures are not byte-identical on a second run and the server never replaces a published file
+    if (!rehearsal && resume) {
+      const live = await fetch(`https://storebound.dev/desktop/latest.json?t=${Date.now()}`, { signal: AbortSignal.timeout(20_000) })
+        .then(r => (r.ok ? r.json() as Promise<{ version?: string }> : null)).catch(() => null);
+      if (live?.version === version) { say(`desktop ${version} is already live on the stable channel: publish skipped`); return; }
+    }
     const code = await bg('publish', ['bun', 'tools/desktop-release.ts', 'publish', '--out', out, '--host', host, '--channel', rehearsal ? 'rehearsal' : 'stable', '--forgejo-tag', tag, '--yes'], join(logDir, 'publish.log'), { timeoutMs: 45 * 60_000 });
     if (code !== 0) fail(`publish failed: ${join(logDir, 'publish.log').replace(HOME, '~')}`);
   });

From ae9d26d3f67d4f91483f6ee6ab11cef8772ccb80 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Mon, 26 Oct 2026 18:09:50 +0700
Subject: [PATCH 042/126] Updates are agent steps: --yes ships an update of a
 live app (Play production, App Store submit / release) without an owner gate;
 the first release stays the owner's (exit 3 OWNER_STEP, --first-release);
 apple release is a ship step

---
 .cursor/rules/storebound.mdc       |   6 +
 .github/copilot-instructions.md    |   6 +
 AGENTS.md                          |   6 +
 CHANGELOG.md                       |   2 +
 GEMINI.md                          |   6 +
 cli/apple/release.ts               |  38 ++++-
 cli/apple/resubmit.ts              |  15 +-
 cli/commands.ts                    |   8 +-
 cli/data/flags.json                |  20 ++-
 cli/lib/fastlane.ts                |   2 +-
 cli/lib/release-kind.ts            |  68 ++++++++
 cli/lib/review-submit.ts           |   2 +-
 cli/lib/ship-step.ts               |   7 +-
 cli/mcp-tools.ts                   |   2 +-
 cli/play/release.ts                |  25 ++-
 cli/play/upload.ts                 |  15 +-
 cli/serve.ts                       |   2 +-
 docs/agents-core.md                |   6 +
 docs/bypass.md                     |  27 ++-
 docs/pitfalls.md                   |   1 +
 docs/ship-step.md                  |  29 +++-
 skills/play-first-release/SKILL.md |   4 +-
 skills/release-management/SKILL.md |  22 ++-
 skills/store-pitfalls/SKILL.md     |  18 ++
 tests/game-services.test.ts        |   1 +
 tests/resubmit.test.ts             |   7 +-
 tests/ship-step.test.ts            |   2 +
 tests/update-gate.test.ts          | 259 +++++++++++++++++++++++++++++
 28 files changed, 562 insertions(+), 44 deletions(-)
 create mode 100644 cli/lib/release-kind.ts
 create mode 100644 tests/update-gate.test.ts

diff --git a/.cursor/rules/storebound.mdc b/.cursor/rules/storebound.mdc
index 18a30b6..2b9d056 100644
--- a/.cursor/rules/storebound.mdc
+++ b/.cursor/rules/storebound.mdc
@@ -20,6 +20,12 @@ storebound plus you, the AI agent, do the work. The owner is not your pair of ha
    testers. (Also the owner's: canceling a submission, starting or stopping a store experiment, a console form's final
    Submit / Create that a console plan lists in `buttons.final`, signing in and granting account permissions.) For
    these you prepare everything, show the dry run, and the owner presses one button or says yes.
+   **Updates are agent steps:** a new version of an app that is already on the store (Play: the production track holds
+   a published release; App Store: a version of the platform is or was on sale) is yours end to end, no owner gate
+   per update: `storebound play release <aab> --production completed --yes`, `storebound play upload --track
+   production --yes`, `storebound apple submit --build <n> --yes`, `storebound apple release --manual-release --yes`
+   (docs/bypass.md). Only the **first-ever release** of an app stays the owner's (exit 3 `OWNER_STEP`: after the
+   owner's yes re-run with `--first-release`), plus removal from sale, live price changes and anything that costs money.
    **Bypass mode** (`storebound settings bypass status`): when the owner turned it on, you run these owner steps too:
    MCP `owner_step` (dry run first, then `dry_run: false`), `storebound api ... --yes --confirm <operationId>`, and
    console plans' `buttons.final`. Say in one line what you pressed; every action is logged to
diff --git a/.github/copilot-instructions.md b/.github/copilot-instructions.md
index 7ab0224..2082191 100644
--- a/.github/copilot-instructions.md
+++ b/.github/copilot-instructions.md
@@ -20,6 +20,12 @@ storebound plus you, the AI agent, do the work. The owner is not your pair of ha
    testers. (Also the owner's: canceling a submission, starting or stopping a store experiment, a console form's final
    Submit / Create that a console plan lists in `buttons.final`, signing in and granting account permissions.) For
    these you prepare everything, show the dry run, and the owner presses one button or says yes.
+   **Updates are agent steps:** a new version of an app that is already on the store (Play: the production track holds
+   a published release; App Store: a version of the platform is or was on sale) is yours end to end, no owner gate
+   per update: `storebound play release <aab> --production completed --yes`, `storebound play upload --track
+   production --yes`, `storebound apple submit --build <n> --yes`, `storebound apple release --manual-release --yes`
+   (docs/bypass.md). Only the **first-ever release** of an app stays the owner's (exit 3 `OWNER_STEP`: after the
+   owner's yes re-run with `--first-release`), plus removal from sale, live price changes and anything that costs money.
    **Bypass mode** (`storebound settings bypass status`): when the owner turned it on, you run these owner steps too:
    MCP `owner_step` (dry run first, then `dry_run: false`), `storebound api ... --yes --confirm <operationId>`, and
    console plans' `buttons.final`. Say in one line what you pressed; every action is logged to
diff --git a/AGENTS.md b/AGENTS.md
index ea2ee8f..e1b9812 100644
--- a/AGENTS.md
+++ b/AGENTS.md
@@ -21,6 +21,12 @@ storebound plus you, the AI agent, do the work. The owner is not your pair of ha
    testers. (Also the owner's: canceling a submission, starting or stopping a store experiment, a console form's final
    Submit / Create that a console plan lists in `buttons.final`, signing in and granting account permissions.) For
    these you prepare everything, show the dry run, and the owner presses one button or says yes.
+   **Updates are agent steps:** a new version of an app that is already on the store (Play: the production track holds
+   a published release; App Store: a version of the platform is or was on sale) is yours end to end, no owner gate
+   per update: `storebound play release <aab> --production completed --yes`, `storebound play upload --track
+   production --yes`, `storebound apple submit --build <n> --yes`, `storebound apple release --manual-release --yes`
+   (docs/bypass.md). Only the **first-ever release** of an app stays the owner's (exit 3 `OWNER_STEP`: after the
+   owner's yes re-run with `--first-release`), plus removal from sale, live price changes and anything that costs money.
    **Bypass mode** (`storebound settings bypass status`): when the owner turned it on, you run these owner steps too:
    MCP `owner_step` (dry run first, then `dry_run: false`), `storebound api ... --yes --confirm <operationId>`, and
    console plans' `buttons.final`. Say in one line what you pressed; every action is logged to
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 76a4214..54743a2 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,8 @@
 
 ## Unreleased
 
+- Updates are agent steps (the owner's standing rule), first releases stay the owner's. `play release <aab> --production completed|inProgress --yes`, `play upload --track production --yes`, `apple submit --build <n> --yes` and `apple release --manual-release --yes` run without an owner gate, in a terminal and in a pipeline, when the store says the app is already live (Play: the production track holds a completed / inProgress / halted release; App Store: a version of the platform is or was `READY_FOR_SALE` / `READY_FOR_DISTRIBUTION` / `REPLACED_WITH_NEW_VERSION`; `cli/lib/release-kind.ts`). The result line carries `releaseKind`; a re-run is exit 7. The first-ever release of an app with `--yes` is exit 3 `OWNER_STEP` ("first release of this app: the owner approves it once"), approved by `--first-release` (after the owner's yes) or bypass mode; a person answering the prompt (no `--yes`) is the approval too. `apple release` is now a ship step (`--json`, `--result-file`, exit 7 when the version is released already). Policy in docs/bypass.md ("Updates are agent steps"), docs/ship-step.md, the release-management and play-first-release skills, AGENTS.md; pitfall 123 / 96.
+
 ## 0.8.52 · 2026-10-26
 
 - `analytics snapshot` and `reports` for a collector: a store-only config may name the App Store app by `apple.appId` alone (`bundleId` null or absent; every write still needs it); the Play reports bucket also comes from env `PLAY_REPORTS_BUCKET` or the credential profile's `reportsBucket` when `play.reportsBucket` is missing; `analytics snapshot --json` prints the snapshot as one JSON document on stdout (also when every store failed, with the exit code 1) and `--no-write` skips the file.
diff --git a/GEMINI.md b/GEMINI.md
index 3677fc4..144e9e7 100644
--- a/GEMINI.md
+++ b/GEMINI.md
@@ -19,6 +19,12 @@ storebound plus you, the AI agent, do the work. The owner is not your pair of ha
    testers. (Also the owner's: canceling a submission, starting or stopping a store experiment, a console form's final
    Submit / Create that a console plan lists in `buttons.final`, signing in and granting account permissions.) For
    these you prepare everything, show the dry run, and the owner presses one button or says yes.
+   **Updates are agent steps:** a new version of an app that is already on the store (Play: the production track holds
+   a published release; App Store: a version of the platform is or was on sale) is yours end to end, no owner gate
+   per update: `storebound play release <aab> --production completed --yes`, `storebound play upload --track
+   production --yes`, `storebound apple submit --build <n> --yes`, `storebound apple release --manual-release --yes`
+   (docs/bypass.md). Only the **first-ever release** of an app stays the owner's (exit 3 `OWNER_STEP`: after the
+   owner's yes re-run with `--first-release`), plus removal from sale, live price changes and anything that costs money.
    **Bypass mode** (`storebound settings bypass status`): when the owner turned it on, you run these owner steps too:
    MCP `owner_step` (dry run first, then `dry_run: false`), `storebound api ... --yes --confirm <operationId>`, and
    console plans' `buttons.final`. Say in one line what you pressed; every action is logged to
diff --git a/cli/apple/release.ts b/cli/apple/release.ts
index 53c1680..ab0f77c 100644
--- a/cli/apple/release.ts
+++ b/cli/apple/release.ts
@@ -1,15 +1,21 @@
 // Release management for an App Store version.
 //   storebound apple release --phased on|pause|resume|complete [--version 1.2.0] [--dry] [--yes]
-//   storebound apple release --manual-release [--version 1.2.0] [--yes]
+//   storebound apple release --manual-release [--version 1.2.0] [--first-release] [--yes] [--json]
 // Both take --platform ios|macos|tvos|visionos; without it the platform that has the version this needs is used (both: asks).
 // Phased release: 7-day automatic rollout to users with automatic updates (1, 2, 5, 10, 20, 50, 100 %); anyone can
 // still update by hand from the App Store. Pause holds it (up to 30 days in total), it is NOT a rollback: users who
 // updated keep the build. "complete" releases to everyone at once.
-// --manual-release releases an approved version (PENDING_DEVELOPER_RELEASE). Public and irreversible: asks first.
-// Neither --manual-release nor resume / complete is offered to agents through `storebound mcp`.
+// --manual-release releases an approved version (PENDING_DEVELOPER_RELEASE). Public and irreversible: asks first
+// (--yes in scripts). Releasing an UPDATE of an app already on sale is an agent step (no owner gate, also in a
+// pipeline; under the ship-step contract: exit 7 when the version is released already). The first-ever release of an
+// app with --yes is exit 3 OWNER_STEP unless the owner approved it (--first-release, or bypass mode;
+// cli/lib/release-kind.ts). Neither --manual-release nor resume / complete is offered to agents through `storebound mcp`.
 import type { Ctx } from '../lib/ctx';
 import { confirm, need } from '../lib/ctx';
-import { done, log } from '../lib/log';
+import { done, log, printJson } from '../lib/log';
+import { shipNoop, shipReport, shipRun } from '../lib/ship-step';
+import { consoleUrl } from '../lib/console-links';
+import { appleReleaseKind, enforceFirstRelease } from '../lib/release-kind';
 import { type PhasedAction, phasedRequest } from '../lib/release';
 import { createOnce } from '../lib/upsert';
 import { ascClient, type J } from './asc';
@@ -27,6 +33,19 @@ export async function run(ctx: Ctx): Promise<void> {
   const appId = await c.app();
   const want = a.get('version');
   const state = (v: J): string => v.attributes.appVersionState ?? v.attributes.appStoreState;
+  shipReport({ version: want, url: consoleUrl('asc.version') });
+  // the ship-step contract: the version is released already (and none waits for release): nothing to do, exit 7
+  if (manual && shipRun()) {
+    const every = await allVersions(c, appId);
+    const waiting = every.some((x: J) => state(x) === 'PENDING_DEVELOPER_RELEASE' && (!want || x.attributes.versionString === want));
+    const out = every.find((x: J) => ['READY_FOR_SALE', 'READY_FOR_DISTRIBUTION', 'PROCESSING_FOR_DISTRIBUTION'].includes(state(x)) && (!want || x.attributes.versionString === want));
+    if (!waiting && out) {
+      shipNoop({ version: String(out.attributes.versionString), state: state(out) });
+      if (a.has('json')) printJson({ version: String(out.attributes.versionString), state: state(out), released: true, alreadyThere: true });
+      done('apple', `${String(out.attributes.versionString)} is ${state(out)} already: nothing released`);
+      return;
+    }
+  }
   // the platform: --platform, else the one with the version this needs (both: asks)
   const needs = (x: J): boolean => (!want || x.attributes.versionString === want) && (manual ? state(x) === 'PENDING_DEVELOPER_RELEASE'
     : phased === 'on' ? !['READY_FOR_DISTRIBUTION', 'READY_FOR_SALE', 'REPLACED_WITH_NEW_VERSION', 'REMOVED_FROM_SALE'].includes(state(x))
@@ -44,10 +63,19 @@ export async function run(ctx: Ctx): Promise<void> {
     if (state(v) !== 'PENDING_DEVELOPER_RELEASE') throw new Error(`${tag}: only an approved version waiting for developer release can be released`);
     const pr = (await c.maybe(`/v1/appStoreVersions/${v.id}/appStoreVersionPhasedRelease`))?.data;
     const how = pr ? 'phased over 7 days (phased release is on)' : 'to everyone at once (no phased release)';
-    if (dry) { log('apple', `would release ${tag} ${how} (dry)`); return; }
+    const kind = appleReleaseKind(versions.map((x: J) => ({ versionString: String(x.attributes.versionString), state: state(x) })));
+    shipReport({ version: String(v.attributes.versionString), state: state(v) });
+    if (dry) {
+      log('apple', `would release ${tag} ${how} (dry): ${kind.kind === 'update' ? 'update of an app on sale, no owner step' : 'FIRST release of this app (the owner approves it once: --first-release)'} (${kind.why})`);
+      if (a.has('json')) printJson({ version: String(v.attributes.versionString), state: state(v), releaseKind: kind.kind, dryRun: true });
+      return;
+    }
+    if (!enforceFirstRelease(ctx, kind, { store: 'apple', what: 'the first release of the app', consoleUrl: consoleUrl('asc.version') })) return;
     if (!(await confirm(ctx, `Release ${tag} on the App Store now, ${how}? This is public.`))) return;
     await c.asc('POST', '/v1/appStoreVersionReleaseRequests', { data: { type: 'appStoreVersionReleaseRequests',
       relationships: { appStoreVersion: { data: { type: 'appStoreVersions', id: v.id } } } } });
+    shipReport({ state: 'PENDING_APPLE_RELEASE' });
+    if (a.has('json')) printJson({ version: String(v.attributes.versionString), state: 'PENDING_APPLE_RELEASE', releaseKind: kind.kind, released: true });
     done('apple', `release requested for ${tag}; the store updates within a few hours`);
     return;
   }
diff --git a/cli/apple/resubmit.ts b/cli/apple/resubmit.ts
index 9b23312..5bed343 100644
--- a/cli/apple/resubmit.ts
+++ b/cli/apple/resubmit.ts
@@ -1,5 +1,5 @@
 // Resubmit an App Store version after a rejection (Invalid Binary, Guideline 2.1, ...) with a new build.
-//   storebound apple resubmit --build <n> [--version 1.0.0] [--platform ios|macos|tvos|visionos] [--resolve-iaps] [--dry] [--yes] [--json]
+//   storebound apple resubmit --build <n> [--version 1.0.0] [--platform ios|macos|tvos|visionos] [--resolve-iaps] [--first-release] [--dry] [--yes] [--json]
 // The platform: --platform, else the one with a rejected version or an UNRESOLVED_ISSUES submission (both: asks).
 // 1. The rejected version (--version, else the one in the submission back from App Review, else the one in a
 //    rejected state) gets build n attached, by explicit number (never "the latest"); it must be VALID.
@@ -13,7 +13,10 @@
 // 4. PATCH submitted: true. On "not ready yet" the items are read again: a REJECTED one left over stops the run with
 //    the item and how to resolve it (retrying never passes); only when none is left is the submit retried with backoff
 //    (right after a build is attached), with heartbeat lines and a 10-minute limit.
-// Submitting is the owner's step: without --yes this is a dry run with the plan table. Not offered through MCP.
+// Without --yes this is a dry run with the plan table. Submitting an UPDATE of an app that is already on sale (a version
+// of the platform is or was READY_FOR_SALE) is an agent step: --yes sends it, no owner gate, also in a pipeline. The
+// first-ever submission of an app is the owner's: with --yes it is exit 3 OWNER_STEP unless the owner approved it
+// (--first-release, or bypass mode); cli/lib/release-kind.ts. Not offered through MCP.
 // `storebound apple submit --build <n>` (cli/apple/submit.ts) runs the same steps for a first submission: the version
 // is --version, else the one an open submission holds, else the editable one (Prepare for Submission or rejected).
 // Under `serve` (the desktop's owner action) the plan table is printed next to the --json result.
@@ -30,6 +33,7 @@ import { openSubmissions } from './submission';
 import { ensureGcSwitch, gameCenterInUse, gcSwitchPlan, readGcSwitch } from './game-center';
 import { shipNoop, shipPhase, shipReport, shipRun } from '../lib/ship-step';
 import { consoleUrl } from '../lib/console-links';
+import { appleReleaseKind, enforceFirstRelease } from '../lib/release-kind';
 import { allVersions, parsePlatform, pickPlatform, platformLabel, platformOf, versionsPath } from './platform';
 
 /** App Store version states a first submission may send: the editable version (Prepare for Submission, a rejected
@@ -112,13 +116,14 @@ export async function submitVersion(ctx: Ctx, mode: 'submit' | 'resubmit'): Prom
   const marks = state.choice?.action === 'reuse' ? toResolve(state.choice.sub.items, resolve).map(i => ({ item: i.id ?? null, kind: i.kind, what: labelOf(state, i.versionId, i.kind) })) : [];
   const blockers = [...(build.action === 'refuse' ? [build.reason] : []), ...plan.blockers];
   const dry = a.has('dry') || !a.has('yes');
+  const kind = appleReleaseKind(versions.map((x: J) => ({ versionString: String(x.attributes.versionString), state: stateOf(x) })));
   // Game Center: a build with the entitlement needs the app's Game Center detail and the version's switch, else the
   // submission answers 409 STATE_ERROR.BUILD_INDICATES_GAME_CENTER_ENABLED (seen live); the same upsert as apple game-center
   const gcUse = gameCenterInUse(config, root);
   const gc = gcUse.inUse ? await readGcSwitch(c, appId, v) : null;
   const gcPlan = gc ? gcSwitchPlan(gc) : [];
   if (a.has('json')) {
-    printJson({ dryRun: dry, gameCenter: gcPlan, version: { id: v.id, versionString, platform, state: stateOf(v) }, build, submission: state.choice ?? null, resolve: marks, rows, skipped: plan.skipped, blockers });
+    printJson({ dryRun: dry, releaseKind: kind.kind, gameCenter: gcPlan, version: { id: v.id, versionString, platform, state: stateOf(v) }, build, submission: state.choice ?? null, resolve: marks, rows, skipped: plan.skipped, blockers });
     // the desktop's owner dialog shows the output text: the plan table goes with the result there
     if (process.env.STOREBOUND_MACHINE === '1') { console.log(formatRows(rows)); for (const x of blockers) warn(TAG, x); }
     if (blockers.length) process.exitCode = 1;
@@ -126,6 +131,7 @@ export async function submitVersion(ctx: Ctx, mode: 'submit' | 'resubmit'): Prom
     if (dry || blockers.length || state.choice?.action === 'busy') return;
   } else {
     console.log(formatRows(rows));
+    log(TAG, `${kind.kind === 'update' ? 'update of an app on sale' : 'FIRST release of this app (the owner approves it once: --first-release)'}: ${kind.why}`);
     for (const l of gcPlan) log(TAG, `${dry ? 'would ' : ''}${l} (Game Center: ${gcUse.why})`);
     for (const s of plan.skipped) log(TAG, `not added ${s.id}: ${s.why}`);
     for (const x of blockers) warn(TAG, x);
@@ -133,9 +139,10 @@ export async function submitVersion(ctx: Ctx, mode: 'submit' | 'resubmit'): Prom
   if (blockers.length) { process.exitCode = 1; done(TAG, 'nothing sent: fix the blockers above'); return; }
   if (state.choice?.action === 'busy') { shipNoop({ version: versionString, state: stateOf(v) }); done(TAG, `nothing to ${mode}: ${state.choice.why}`); return; }
   if (dry) {
-    done(TAG, a.has('dry') ? 'dry run: nothing sent' : `dry run (no --yes): nothing sent. ${mode === 'submit' ? 'Submitting' : 'Resubmitting'} is the owner's step: after the owner's yes, run it again with --yes`);
+    done(TAG, a.has('dry') ? 'dry run: nothing sent' : `dry run (no --yes): nothing sent. ${kind.kind === 'update' ? 'This is an update of an app on sale: run it again with --yes, no owner step' : `${mode === 'submit' ? 'Submitting' : 'Resubmitting'} the first release is the owner's step: after the owner's yes, run it again with --yes --first-release`}`);
     return;
   }
+  if (!enforceFirstRelease(ctx, kind, { store: 'apple', what: 'the first submission to App Review', consoleUrl: consoleUrl('asc.version') })) return;
 
   shipPhase('submit', `${mode === 'submit' ? 'submitting' : 'resubmitting'} ${versionString} with build ${number}`);
   if (build.action === 'attach') {
diff --git a/cli/commands.ts b/cli/commands.ts
index 949dd4e..90df327 100644
--- a/cli/commands.ts
+++ b/cli/commands.ts
@@ -59,9 +59,9 @@ export const COMMANDS: Record<string, [() => Promise<Mod>, string]> = {
   'play listing': [() => import('./play/listing'), 'app details + title / short / full description per language; pull [--write]: live listings back into the listing file (diff first)'],
   'play images': [() => import('./play/images'), 'icon, feature graphic, phone screenshots per language, optional tablet / TV / Wear sets when rendered (play.tablets); --variant <id>, --prune'],
   'play data-safety': [() => import('./play/data-safety'), '[--force] Data safety form (CSV import through the API; skipped when unchanged since the last upload)'],
-  'play release': [() => import('./play/release'), 'upload an AAB and put it on tracks with release notes'],
+  'play release': [() => import('./play/release'), 'upload an AAB and put it on tracks with release notes; --production completed|inProgress --yes ships an UPDATE of a published app without an owner step (a first-ever production release is the owner\'s: exit 3 OWNER_STEP, --first-release after the owner\'s yes)'],
   'play build': [() => import('./play/build'), 'gradle bundleRelease (Flutter: flutter build appbundle) with the next free versionCode and the upload key from env / .storebound; --dry'],
-  'play upload': [() => import('./play/upload'), 'upload an AAB to a testing track (--track internal|alpha|beta), versionCode checked first; --dry read-only, asks first'],
+  'play upload': [() => import('./play/upload'), 'upload an AAB to a track (--track internal|alpha|beta|production), versionCode checked first; production with --yes is an update step for a published app (a first-ever release is the owner\'s: exit 3 OWNER_STEP); --dry read-only, asks first'],
   'play status': [() => import('./play/status'), 'tracks, listings, products (read-only)'],
   'play rollout': [() => import('./play/rollout'), 'staged rollout: --fraction x | --halt | --resume | --complete (asks first)'],
   'play share': [() => import('./play/share'), 'internal app sharing: upload an AAB / APK, print the share link (asks first; --dry)'],
@@ -74,7 +74,7 @@ export const COMMANDS: Record<string, [() => Promise<Mod>, string]> = {
   'apple subscriptions': [() => import('./apple/subscriptions'), 'subscription groups, subscriptions, localizations, prices (equalized + overrides + --csv), intro offers, availability, review screenshot (asks first)'],
   'apple iap-review': [() => import('./apple/iap-review'), 'IAP review screenshots + product states'],
   'apple iap-submit': [() => import('./apple/iap-submit'), 'IAP + subscription versions into a review submission (first of a type: --with-version), then submit (asks first; --no-submit keeps a draft); reuses the open submission, never a second one'],
-  'apple submit': [() => import('./apple/submit'), 'a version to App Review: --build <n> attached (by number, VALID), the open submission reused, the ready IAPs / subscriptions with it, submitted with retry (dry run unless --yes); --platform ios|macos|tvos|visionos (default: the platform that has the version this needs; asks when several do)'],
+  'apple submit': [() => import('./apple/submit'), 'a version to App Review: --build <n> attached (by number, VALID), the open submission reused, the ready IAPs / subscriptions with it, submitted with retry (dry run unless --yes; an UPDATE of an app on sale needs no owner step, the first-ever submission is exit 3 OWNER_STEP unless --first-release); --platform ios|macos|tvos|visionos (default: the platform that has the version this needs; asks when several do)'],
   'apple resubmit': [() => import('./apple/resubmit'), 'after a rejection: --build <n> attached to the rejected version, the UNRESOLVED_ISSUES submission reused (missing items added), resubmitted with retry (dry run unless --yes); --platform ios|macos|tvos|visionos (default: the platform that has the version this needs; asks when several do)'],
   'apple offer-codes': [() => import('./apple/offer-codes'), 'offer codes for one-time purchases (campaigns; custom and one-time-use codes with --codes, asks first)'],
   'apple win-back': [() => import('./apple/win-back'), 'win-back offers for lapsed subscribers (asks first: they go live on their start date)'],
@@ -89,7 +89,7 @@ export const COMMANDS: Record<string, [() => Promise<Mod>, string]> = {
   'apple status': [() => import('./apple/status'), 'versions, builds, IAPs, review submissions (--wait-review, --cancel-submission <id>); --platform ios|macos|tvos|visionos (default: the platform that has the version this needs; asks when several do)'],
   'apple creative-assets': [() => import('./apple/creative-assets'), 'Header and Search Results: product page header (21:9) and search results asset (3:2) per locale, or one universal 5244x2950 PNG; uploads to the Asset Library and places it once Apple approved it, reporting waiting ones per locale (MD5 upsert, safe to re-run); --add-for-review, --verify (read-only), --dry'],
   'apple previews': [() => import('./apple/previews'), 'app preview videos per locale (MD5-idempotent, poster frame time code); --dry'],
-  'apple release': [() => import('./apple/release'), 'phased release on|pause|resume|complete, --manual-release (asks first); --platform ios|macos|tvos|visionos (default: the platform that has the version this needs; asks when several do)'],
+  'apple release': [() => import('./apple/release'), 'phased release on|pause|resume|complete, --manual-release (asks first; --yes for an update of an app on sale, exit 7 when already released; the first-ever release is exit 3 OWNER_STEP unless --first-release); --platform ios|macos|tvos|visionos (default: the platform that has the version this needs; asks when several do)'],
   'apple signing': [() => import('./apple/signing'), 'status | ensure: bundle id capabilities, distribution certificate (key kept in .storebound/signing), App Store profiles installed for Xcode; --dry, asks first'],
   'apple build': [() => import('./apple/build'), 'xcodebuild archive + exportArchive (ExportOptions.plist generated, next build number, API key signing); Capacitor, React Native, Flutter, Unity; --platform macos --tauri <src-tauri> [--path-free] builds a Tauri app for the Mac App Store (signed .app, sandbox entitlements, profile, productbuild .pkg); --dry'],
   'apple upload': [() => import('./apple/upload'), 'upload an IPA, or with --platform macos a signed .pkg (App Store Connect API build upload, or --via altool), build number checked, waits for processing; --dry, asks first'],
diff --git a/cli/data/flags.json b/cli/data/flags.json
index 7a49ac1..798cab7 100644
--- a/cli/data/flags.json
+++ b/cli/data/flags.json
@@ -228,14 +228,20 @@
    "enable"
   ],
   "apple release": [
+   "env-file",
+   "first-release",
    "manual-release",
    "phased",
    "platform",
-   "version"
+   "progress",
+   "result-file",
+   "version",
+   "version-from"
   ],
   "apple resubmit": [
    "build",
    "env-file",
+   "first-release",
    "keychain",
    "locale-map",
    "new-version",
@@ -284,6 +290,7 @@
   "apple submit": [
    "build",
    "env-file",
+   "first-release",
    "keychain",
    "locale-map",
    "new-version",
@@ -758,6 +765,7 @@
    "alpha",
    "beta",
    "env-file",
+   "first-release",
    "fraction",
    "include-drafts",
    "internal",
@@ -821,6 +829,7 @@
   "play upload": [
    "env-file",
    "evidence",
+   "first-release",
    "include-drafts",
    "name",
    "not-sent-for-review",
@@ -1205,6 +1214,7 @@
    "expo",
    "fields",
    "file",
+   "first-release",
    "flavor",
    "floor",
    "flutter",
@@ -1514,10 +1524,10 @@
   ],
   "apple release": [
    "storebound apple release --phased on|pause|resume|complete [--version 1.2.0] [--dry] [--yes]",
-   "storebound apple release --manual-release [--version 1.2.0] [--yes]"
+   "storebound apple release --manual-release [--version 1.2.0] [--first-release] [--yes] [--json]"
   ],
   "apple resubmit": [
-   "storebound apple resubmit --build <n> [--version 1.0.0] [--platform ios|macos|tvos|visionos] [--resolve-iaps] [--dry] [--yes] [--json]"
+   "storebound apple resubmit --build <n> [--version 1.0.0] [--platform ios|macos|tvos|visionos] [--resolve-iaps] [--first-release] [--dry] [--yes] [--json]"
   ],
   "apple review-details": [
    "storebound apple review-details [--contact-from <Apple ID of another app>] [--dry]"
@@ -1688,7 +1698,7 @@
    "storebound play products [--dry] [--only id1,id2] [--yes] [--allow-price-changes]"
   ],
   "play release": [
-   "storebound play release app-release.aab [--internal completed] [--production draft] [--name \"1.0.0 (3)\"] [--dry]",
+   "storebound play release app-release.aab [--internal completed] [--production draft] [--name \"1.0.0 (3)\"] [--first-release] [--dry]",
    "storebound play release --version-code 3 --production draft",
    "storebound play release app.aab --production completed --not-sent-for-review   (commit with changesNotSentForReview=true)"
   ],
@@ -1705,7 +1715,7 @@
    "storebound play subscriptions [--dry] [--only id1,id2] [--csv store/prices.csv] [--yes] [--allow-price-changes]"
   ],
   "play upload": [
-   "storebound play upload [<app.aab>] [--track internal|alpha|beta|production] [--status completed|draft] [--version-code N] [--name text] [--not-sent-for-review] [--pre-check \"<cmd with {file}>\"] [--evidence <path.json>] [--dry] [--yes] [--json]"
+   "storebound play upload [<app.aab>] [--track internal|alpha|beta|production] [--status completed|draft] [--version-code N] [--name text] [--not-sent-for-review] [--first-release] [--pre-check \"<cmd with {file}>\"] [--evidence <path.json>] [--dry] [--yes] [--json]"
   ],
   "prices": [
    "storebound prices export [--out store/prices.csv] [--store apple|play] [--only ids] [--with-automatic] [--no-subscriptions] [--dry] [--json]",
diff --git a/cli/lib/fastlane.ts b/cli/lib/fastlane.ts
index 36a04ab..1cc3ec8 100644
--- a/cli/lib/fastlane.ts
+++ b/cli/lib/fastlane.ts
@@ -617,7 +617,7 @@ ${secs.join('\n\n')}
   const ACT: Record<string, string> = {
     app_store_connect_api_key: 'ASC_KEY_ID / ASC_ISSUER_ID / ASC_P8 in .storebound/credentials.json (the .p8 path, never its contents)',
     upload_to_app_store: '`storebound apple listing`, `apple screenshots`, `apple previews` (dry run first; submitting stays with the owner)', deliver: '`storebound apple listing` / `apple screenshots`',
-    upload_to_play_store: '`storebound play listing`, `play images`, `play release <aab>` (testing tracks; production is the owner\'s)', supply: '`storebound play listing` / `play images` / `play release`',
+    upload_to_play_store: '`storebound play listing`, `play images`, `play release <aab>` (testing tracks; production updates of a published app: --production completed --yes; the first-ever release is the owner\'s)', supply: '`storebound play listing` / `play images` / `play release`',
     upload_to_testflight: '`storebound apple testflight` (testflight skill)', pilot: '`storebound apple testflight` (testflight skill)',
     match: 'keep match for signing', sync_code_signing: 'keep match for signing',
     snapshot: '`storebound shots capture --source ios-sim`', capture_screenshots: '`storebound shots capture --source ios-sim`', capture_ios_screenshots: '`storebound shots capture --source ios-sim`',
diff --git a/cli/lib/release-kind.ts b/cli/lib/release-kind.ts
new file mode 100644
index 0000000..1144500
--- /dev/null
+++ b/cli/lib/release-kind.ts
@@ -0,0 +1,68 @@
+// Update or first release? The owner's standing rule (docs/bypass.md, "Updates are agent steps"): a new version of an
+// app that is ALREADY on the store ships end to end without an owner gate (submit for review, promote to production,
+// roll out, release an approved version) with --yes, also in a pipeline. The gate stays for the first-ever release of an
+// app (and, in their own commands, removal from sale and live price changes).
+// The kind comes from the store, never from the config:
+//   Google Play  the production track holds a completed / inProgress / halted release (the app was published)
+//   App Store    the platform has a version that is or was on sale (READY_FOR_SALE, READY_FOR_DISTRIBUTION,
+//                REPLACED_WITH_NEW_VERSION)
+// A first release with --yes (nobody to answer a prompt) is refused with exit 3 `OWNER_STEP` unless the owner approved
+// it: `--first-release` after the owner's yes in chat, or bypass mode (docs/bypass.md). In a terminal without --yes the
+// normal confirmation prompt is the owner's approval.
+import { bypassOn } from './bypass';
+import type { Ctx } from './ctx';
+import { declined } from './ctx';
+import { log } from './log';
+import { SHIP_EXIT, ShipStepError, shipRun } from './ship-step';
+
+export type ReleaseKind = 'update' | 'first';
+export interface KindAnswer { kind: ReleaseKind; why: string }
+
+/** Play: the production track's releases say whether the app was ever published. Pure. */
+export function playReleaseKind(production: { status?: string; versionCodes?: string[] }[] | undefined): KindAnswer {
+  const live = (production ?? []).filter(r => ['completed', 'inProgress', 'halted'].includes(String(r.status)));
+  if (live.length) return { kind: 'update', why: `the production track holds ${live.map(r => `${r.status} ${(r.versionCodes ?? []).join(',')}`).join('; ')}` };
+  const drafts = (production ?? []).length;
+  return { kind: 'first', why: drafts ? 'the production track has only draft releases: the app was never published' : 'the production track is empty: the app was never published' };
+}
+
+/** App Store version states that prove the app was on sale. */
+export const APPLE_LIVE_STATES = ['READY_FOR_SALE', 'READY_FOR_DISTRIBUTION', 'REPLACED_WITH_NEW_VERSION'] as const;
+
+/** App Store: the versions of one platform say whether the app was ever on sale. Pure. */
+export function appleReleaseKind(versions: { versionString?: string; state: string }[]): KindAnswer {
+  const live = versions.filter(v => (APPLE_LIVE_STATES as readonly string[]).includes(v.state));
+  if (live.length) return { kind: 'update', why: `${live.map(v => `${v.versionString ?? '?'} ${v.state}`).join(', ')} on this platform` };
+  return { kind: 'first', why: 'no version of this app was ever on sale on this platform' };
+}
+
+export interface GateInput { kind: ReleaseKind; yes: boolean; bypass: boolean; approved: boolean }
+/** Whether the step may run. Updates always; a first release only with a person answering a prompt (no --yes), the
+ *  owner's `--first-release`, or bypass mode. Pure. */
+export function firstReleaseAllowed(g: GateInput): boolean {
+  return g.kind === 'update' || !g.yes || g.approved || g.bypass;
+}
+
+export const firstReleaseMessage = (store: 'play' | 'apple', what: string): string =>
+  `first release of this app (${store === 'play' ? 'Google Play' : 'App Store'}): ${what} is the owner's step, approved once. Updates of an app that is already live need no approval. `
+  + 'After the owner\'s yes: re-run with --first-release (or turn on bypass mode: storebound settings bypass on)';
+
+/**
+ * Applies the policy to a real run. Returns true when the step may go on. A refusal is exit 3: error.code OWNER_STEP
+ * under the ship-step contract (with the console deep link), the usual "declined" exit 3 otherwise.
+ */
+export function enforceFirstRelease(ctx: Ctx, k: KindAnswer, o: { store: 'play' | 'apple'; what: string; consoleUrl?: string }): boolean {
+  const a = ctx.args;
+  const bypass = bypassOn();
+  // the desktop's owner action: the owner pressed the button of a native dialog that showed the dry run (cli/lib/ctx.ts confirm)
+  const approved = a.has('first-release') || (process.env.STOREBOUND_SERVE === '1' && process.env.STOREBOUND_OWNER_CONFIRMED === '1');
+  if (firstReleaseAllowed({ kind: k.kind, yes: a.has('yes'), bypass, approved })) {
+    if (k.kind === 'update') log('release', `update of a live app (${k.why}): no owner step needed`);
+    else log('release', `first release (${k.why}): ${approved ? 'approved by the owner' : bypass ? 'bypass mode' : 'confirmation prompt'}`);
+    return true;
+  }
+  const msg = `${firstReleaseMessage(o.store, o.what)} (${k.why})`;
+  if (shipRun()) throw new ShipStepError(msg, SHIP_EXIT.owner, 'OWNER_STEP', o.consoleUrl);
+  declined(msg);
+  return false;
+}
diff --git a/cli/lib/review-submit.ts b/cli/lib/review-submit.ts
index d411190..d7b9585 100644
--- a/cli/lib/review-submit.ts
+++ b/cli/lib/review-submit.ts
@@ -286,7 +286,7 @@ export function resubmitRows(s: SubmitState, plan: SubmitPlan, build: BuildStep,
   }
   for (const it of plan.items) rows.push({ step: 'item', what: it.label, now: it.devRejected ? 'DEVELOPER_REJECTED' : '-', action: addAction(it) });
   if (ch?.action === 'reuse') for (const d of ch.strayDrafts) rows.push({ step: 'stray draft', what: d.id, now: `${d.state}, ${d.items.length} item(s)`, action: d.items.length ? 'left as it is (named)' : `left as it is: ${EMPTY_DRAFT}` });
-  if (ch?.action !== 'busy') rows.push({ step: 'submit', what: 'PATCH submitted: true', now: '-', action: 'owner step (--yes); retried while Apple says "not ready yet" and no item is left REJECTED' });
+  if (ch?.action !== 'busy') rows.push({ step: 'submit', what: 'PATCH submitted: true', now: '-', action: 'send with --yes (update of an app on sale: no owner step; the first-ever release: the owner approves it once); retried while Apple says "not ready yet" and no item is left REJECTED' });
   return rows;
 }
 
diff --git a/cli/lib/ship-step.ts b/cli/lib/ship-step.ts
index af8e3da..8681609 100644
--- a/cli/lib/ship-step.ts
+++ b/cli/lib/ship-step.ts
@@ -29,10 +29,11 @@ export const SHIP_STEPS: Record<string, { step: string; store: 'apple' | 'play'
   'apple upload': { step: 'upload', store: 'apple' },
   'apple submit': { step: 'submit', store: 'apple' },
   'apple resubmit': { step: 'resubmit', store: 'apple' },
+  'apple release': { step: 'release', store: 'apple' },
 };
 
 /** error.code of an exit 3: what the owner has to do. */
-export const OWNER_CODES = ['AGREEMENT_PENDING', 'SIGN_IN_REQUIRED', 'COMPLIANCE_ANSWER_MISSING', 'CONSOLE_STEP', 'CONFIRMATION_REQUIRED'] as const;
+export const OWNER_CODES = ['AGREEMENT_PENDING', 'SIGN_IN_REQUIRED', 'COMPLIANCE_ANSWER_MISSING', 'CONSOLE_STEP', 'CONFIRMATION_REQUIRED', 'OWNER_STEP'] as const;
 
 export interface ShipErrorInfo { code: string; message: string; consoleUrl?: string }
 export interface ShipResult {
@@ -155,13 +156,14 @@ export function fieldsFromDetail(key: string, d: unknown): Fields {
       const b = x.build as { number?: string } | undefined;
       return { version: str(v?.versionString), build: str(b?.number), state: dry ? 'planned' : 'WAITING_FOR_REVIEW' };
     }
+    case 'apple release': return { version: str(x.version), state: dry ? 'planned' : str(x.state) };
     default: return {};
   }
 }
 
 const DEFAULT_URL: Record<string, ConsolePage> = {
   'play build': 'play.bundle-explorer', 'play upload': 'play.releases', 'play release': 'play.releases',
-  'apple build': 'asc.testflight', 'apple upload': 'asc.testflight', 'apple submit': 'asc.app-review', 'apple resubmit': 'asc.app-review',
+  'apple build': 'asc.testflight', 'apple upload': 'asc.testflight', 'apple submit': 'asc.app-review', 'apple resubmit': 'asc.app-review', 'apple release': 'asc.version',
 };
 
 /** The final result: the contract keys, then the command's own --json fields that do not clash with them (so readers
@@ -297,6 +299,7 @@ const VERSION_FLAGS: Record<string, { version?: string; build?: string; intBuild
   'apple upload': { build: 'build' },
   'apple submit': { version: 'version', build: 'build' },
   'apple resubmit': { version: 'version', build: 'build' },
+  'apple release': { version: 'version' },
 };
 
 /** The argv with the flags of --version-from added (a flag given by hand must agree with the file). */
diff --git a/cli/mcp-tools.ts b/cli/mcp-tools.ts
index c1432b0..17c7cf5 100644
--- a/cli/mcp-tools.ts
+++ b/cli/mcp-tools.ts
@@ -194,7 +194,7 @@ export const TOOLS: ToolDef[] = [
     description: 'Replace the whole Play Data safety form with the answers from the config (CSV import). Skipped when the CSV equals the last upload of this project (hash in .storebound/; force: true sends it anyway). dry_run prints the CSV.',
     props: { force: { type: 'boolean', default: false, description: 'Upload even when the CSV equals the last upload (after a manual change in Play Console)' } }, args: i => flag('force', i.force) },
   { name: 'play_release_testing', title: 'Release to a Play testing track', command: ['play', 'release'], write: true, network: true,
-    description: 'Upload an AAB (or reuse a versionCode) to a TESTING track (internal, alpha, beta) with release notes. Production is not available here.',
+    description: 'Upload an AAB (or reuse a versionCode) to a TESTING track (internal, alpha, beta) with release notes. Production is not available through MCP: an update of a published app is `storebound play release <aab> --production completed --yes` in a terminal or pipeline (no owner step), the first-ever production release is the owner\'s.',
     props: { aab: { type: 'string', description: 'Path to the .aab' }, version_code: { type: 'integer', minimum: 1 },
       track: { type: 'string', enum: ['internal', 'alpha', 'beta'], default: 'internal' }, status: { type: 'string', enum: ['completed', 'draft'], default: 'completed' }, not_sent_for_review: notSentProp },
     args: i => [...(i.aab ? [String(i.aab)] : []), ...opt('version-code', i.version_code), `--${String(i.track ?? 'internal')}`, String(i.status ?? 'completed'), ...flag('not-sent-for-review', i.not_sent_for_review)] },
diff --git a/cli/play/release.ts b/cli/play/release.ts
index 53fd29b..5e99e16 100644
--- a/cli/play/release.ts
+++ b/cli/play/release.ts
@@ -1,10 +1,14 @@
 // Upload an AAB (or reuse an uploaded versionCode) and put it on one or more tracks in one edit, with the "What's new"
 // of every listing language as release notes.
-//   storebound play release app-release.aab [--internal completed] [--production draft] [--name "1.0.0 (3)"] [--dry]
+//   storebound play release app-release.aab [--internal completed] [--production draft] [--name "1.0.0 (3)"] [--first-release] [--dry]
 //   storebound play release --version-code 3 --production draft
 //   storebound play release app.aab --production completed --not-sent-for-review   (commit with changesNotSentForReview=true)
 // Tracks: internal, alpha (closed), beta (open), production; status completed | draft | inProgress | halted.
-// Without a track flag: internal, completed. A production release that is not a draft asks for confirmation.
+// Without a track flag: internal, completed. A production release that is not a draft asks for confirmation (--yes in
+// scripts). An UPDATE of a published app (the production track holds a completed / inProgress / halted release) needs
+// no owner step: `play release <aab> --production completed --yes` runs in a pipeline (cli/lib/release-kind.ts). The
+// first-ever production release with --yes is exit 3 OWNER_STEP unless the owner approved it (--first-release, or
+// bypass mode).
 // Draft app (never published): Play only accepts status "draft" on any track; the first production release is sent
 // from the Console (see the play-first-release skill).
 import { readFileSync, statSync } from 'node:fs';
@@ -19,6 +23,7 @@ import { usedVersionCodes } from './next-version-code';
 import { readPlayCopy, refusePlayNotes } from './listing';
 import { shipNoop, shipPhase, shipReport } from '../lib/ship-step';
 import { consoleUrl, playTrackPage } from '../lib/console-links';
+import { enforceFirstRelease, playReleaseKind } from '../lib/release-kind';
 
 const TRACKS = ['internal', 'alpha', 'beta', 'production'];
 
@@ -49,8 +54,20 @@ export async function run(ctx: Ctx): Promise<void> {
   for (const t of tracks) if (!STATUSES.includes(t.status)) throw new Error(`--${t.track}: status must be one of ${STATUSES.join(', ')}`);
   const fraction = a.get('fraction');
   const live = tracks.find(t => t.track === 'production' && t.status !== 'draft');
+  const gated = tracks.find(t => t.track === 'production' && (t.status === 'completed' || t.status === 'inProgress'));
   const notes = readPlayCopy(ctx).filter(c => c.whatsNew).map(c => ({ language: c.lang, text: c.whatsNew }));
   refusePlayNotes(ctx, notes, `play release notes${a.has('dry') ? ' (dry run)' : ''}`);
+  // update of a published app: no owner step; the first production release: the owner's (exit 3 OWNER_STEP with --yes)
+  let early: Awaited<ReturnType<typeof playClient>> | undefined;
+  const client = async (): Promise<Awaited<ReturnType<typeof playClient>>> => (early ??= await playClient(root, pkg));
+  let kind: ReturnType<typeof playReleaseKind> | null = null;
+  if (gated) {
+    const p0 = await client();
+    const prod = await p0.read(async id => (await p0.call<{ releases?: PlayTrackRelease[] }>('GET', `${p0.API}/edits/${id}/tracks/production`).catch(() => ({ releases: [] }))).releases ?? []);
+    kind = playReleaseKind(prod);
+    if (a.has('dry')) log('play', `${kind.kind === 'update' ? 'update of a published app' : 'FIRST production release (the owner approves it once: --first-release)'}: ${kind.why}`);
+    else if (!enforceFirstRelease(ctx, kind, { store: 'play', what: 'the first production release', consoleUrl: consoleUrl('play.publishing') })) return;
+  }
   if (live && !a.has('dry') && !(await confirm(ctx, `Release to PRODUCTION as "${live.status}" (public once Google approves)?`))) return;
 
   if (aab) {
@@ -59,7 +76,7 @@ export async function run(ctx: Ctx): Promise<void> {
     if (sdkWhy) throw new Error(`${aab}: not released, ${sdkWhy}`);
   }
   shipReport({ track: tracks.map(t => t.track).join(','), url: consoleUrl(playTrackPage(tracks.length === 1 ? tracks[0]!.track : undefined)) });
-  const play = await playClient(root, pkg);
+  const play = await client();
   let released = fixed ?? '';
   let nothing = false;
   try {
@@ -116,6 +133,6 @@ export async function run(ctx: Ctx): Promise<void> {
   }
   // machine-readable result for CI scripts (a Jenkins stage reads it instead of calling the Play API itself)
   if (a.has('json')) printJson({ versionCode: released ? Number(released) : null, sha256: aab ? createHash('sha256').update(readFileSync(aab)).digest('hex') : null, name: a.get('name') ?? null,
-    tracks: tracks.map(t => ({ track: t.track, status: t.status, userFraction: t.status === 'inProgress' ? Number(fraction ?? 0.1) : null })), dry: a.has('dry') });
+    tracks: tracks.map(t => ({ track: t.track, status: t.status, userFraction: t.status === 'inProgress' ? Number(fraction ?? 0.1) : null })), dry: a.has('dry'), ...(kind ? { releaseKind: kind.kind } : {}) });
   done('play', 'release done');
 }
diff --git a/cli/play/upload.ts b/cli/play/upload.ts
index 0ccad8d..ed4e200 100644
--- a/cli/play/upload.ts
+++ b/cli/play/upload.ts
@@ -1,12 +1,14 @@
-// Upload an Android App Bundle to a Google Play testing track.
-//   storebound play upload [<app.aab>] [--track internal|alpha|beta|production] [--status completed|draft] [--version-code N] [--name text] [--not-sent-for-review] [--pre-check "<cmd with {file}>"] [--evidence <path.json>] [--dry] [--yes] [--json]
+// Upload an Android App Bundle to a Google Play track (testing tracks, or production for an UPDATE of a published app).
+//   storebound play upload [<app.aab>] [--track internal|alpha|beta|production] [--status completed|draft] [--version-code N] [--name text] [--not-sent-for-review] [--first-release] [--pre-check "<cmd with {file}>"] [--evidence <path.json>] [--dry] [--yes] [--json]
 // Default AAB: the newest in build/android (storebound play build), or with --version-code N the one with that
 // versionCode. Package and versionCode are read from the bundle; the upload is refused when Play already has that
 // versionCode (exit 1), and under the ship-step contract (--json / --result-file, docs/ship-step.md) it is exit 7
 // "nothing to do" with the track and state that are there: never a second upload. Release notes: the "What's new" of
 // every listing language. --dry is read-only (one throwaway edit: version codes and the track are read, the edit is
 // deleted). A real run asks first (--yes in scripts). --track production sends the release to Google's review (a
-// pipeline's update step); --status draft keeps it for the Console.
+// pipeline's update step): no owner gate when the production track already holds a published release (an update of
+// a live app, cli/lib/release-kind.ts); a first-ever production release with --yes is exit 3 OWNER_STEP unless the owner
+// approved it (--first-release, or bypass mode). --status draft keeps the release for the Console.
 import { readdirSync, readFileSync, statSync } from 'node:fs';
 import { join, relative } from 'node:path';
 import type { Ctx } from '../lib/ctx';
@@ -21,6 +23,7 @@ import { usedVersionCodes } from './next-version-code';
 import { runPreCheck } from '../lib/pre-check';
 import { shipNoop, shipPhase, shipReport, shipRun, shipWarn } from '../lib/ship-step';
 import { consoleUrl, playTrackPage } from '../lib/console-links';
+import { enforceFirstRelease, playReleaseKind } from '../lib/release-kind';
 
 const TAG = 'upload';
 export const UPLOAD_TRACKS = ['internal', 'alpha', 'beta', 'production'] as const;
@@ -83,11 +86,15 @@ export async function run(ctx: Ctx): Promise<void> {
     if (shipRun()) { done(TAG, `versionCode ${info.versionCode} is on Google Play already: nothing uploaded`); return; }
   }
   if (used.includes(info.versionCode)) throw new Error(`versionCode ${info.versionCode} is already on Google Play: rebuild with --version-code ${nextVersionCode(used)} (storebound play build)`);
-  const summary = { aab: relative(root, aab), packageName: info.packageName, versionCode: info.versionCode, versionName: info.versionName ?? null, sizeMB: Math.round(size / 104857.6) / 10,
+  // production: update of a published app (no owner gate) or the first release (the owner's step)
+  const kind = track === 'production' && status !== 'draft' ? playReleaseKind(current) : null;
+  if (kind && !dry && !enforceFirstRelease(ctx, kind, { store: 'play', what: 'the first production release', consoleUrl: consoleUrl('play.publishing') })) return;
+  const summary = { ...(kind ? { releaseKind: kind.kind } : {}), aab: relative(root, aab), packageName: info.packageName, versionCode: info.versionCode, versionName: info.versionName ?? null, sizeMB: Math.round(size / 104857.6) / 10,
     track, status, notes: notes.map(n => n.language), replaces: current.map(r => `${r.status} ${(r.versionCodes ?? []).join(',')}`), ...(pre ? { preCheck: pre } : {}) };
   if (dry) {
     if (json) { printJson(summary); return; }
     log(TAG, `${summary.aab}: ${info.packageName} ${info.versionName ?? ''} (${info.versionCode}), ${summary.sizeMB} MB, versionCode free`);
+    if (kind) log(TAG, `${kind.kind === 'update' ? 'update of a published app' : 'FIRST production release (the owner approves it once: --first-release)'}: ${kind.why}`);
     log(TAG, `would upload it and set track ${track} to ${status} ${info.versionCode}${notes.length ? `, notes in ${notes.length} language(s)` : ', no release notes'}${current.length ? ` (now on ${track}: ${summary.replaces.join('; ')})` : ''}`);
     done(TAG, 'upload planned (dry run, read-only)');
     return;
diff --git a/cli/serve.ts b/cli/serve.ts
index 9b81220..f5f08c0 100644
--- a/cli/serve.ts
+++ b/cli/serve.ts
@@ -151,7 +151,7 @@ export const DESKTOP_ONLY: ToolDef[] = [
       version_name: { type: 'string', pattern: '^[0-9A-Za-z.+-]{1,40}$', description: 'versionName (default: from the project)' } },
     args: i => [...opt('flavor', i.flavor), ...opt('module', i.module), ...opt('version-name', i.version_name)] },
   { name: 'play_upload', title: 'Upload an AAB to a testing track', command: ['play', 'upload'], write: true, network: true,
-    description: 'Uploads the newest AAB of the build output to a Google Play testing track (internal, closed or open testing), versionCode checked first. Testers of that track get it; production stays an owner action.',
+    description: 'Uploads the newest AAB of the build output to a Google Play testing track (internal, closed or open testing), versionCode checked first. Testers of that track get it. Production: an update of a published app is `storebound play upload --track production --yes` in a terminal or pipeline (no owner step); the first-ever production release stays the owner\'s.',
     props: { track: { type: 'string', enum: ['internal', 'alpha', 'beta'], default: 'internal' }, status: { type: 'string', enum: ['completed', 'draft'], default: 'completed' },
       name: { type: 'string', pattern: '^[^\\x00-\\x1f]{1,50}$', description: 'Release name (default: the version)' } },
     args: i => [...opt('track', i.track), ...opt('status', i.status), ...opt('name', i.name)] },
diff --git a/docs/agents-core.md b/docs/agents-core.md
index 0482818..2cb269a 100644
--- a/docs/agents-core.md
+++ b/docs/agents-core.md
@@ -15,6 +15,12 @@ storebound plus you, the AI agent, do the work. The owner is not your pair of ha
    testers. (Also the owner's: canceling a submission, starting or stopping a store experiment, a console form's final
    Submit / Create that a console plan lists in `buttons.final`, signing in and granting account permissions.) For
    these you prepare everything, show the dry run, and the owner presses one button or says yes.
+   **Updates are agent steps:** a new version of an app that is already on the store (Play: the production track holds
+   a published release; App Store: a version of the platform is or was on sale) is yours end to end, no owner gate
+   per update: `storebound play release <aab> --production completed --yes`, `storebound play upload --track
+   production --yes`, `storebound apple submit --build <n> --yes`, `storebound apple release --manual-release --yes`
+   (docs/bypass.md). Only the **first-ever release** of an app stays the owner's (exit 3 `OWNER_STEP`: after the
+   owner's yes re-run with `--first-release`), plus removal from sale, live price changes and anything that costs money.
    **Bypass mode** (`storebound settings bypass status`): when the owner turned it on, you run these owner steps too:
    MCP `owner_step` (dry run first, then `dry_run: false`), `storebound api ... --yes --confirm <operationId>`, and
    console plans' `buttons.final`. Say in one line what you pressed; every action is logged to
diff --git a/docs/bypass.md b/docs/bypass.md
index c82b6fc..ad50749 100644
--- a/docs/bypass.md
+++ b/docs/bypass.md
@@ -11,9 +11,34 @@ storebound settings bypass off     # back to the owner pressing every final butt
 
 It is stored in `~/.storebound/settings.json` (this machine only), never in a project's config or repo.
 
+## Updates are agent steps (no bypass needed)
+
+The owner's standing rule: a new version of an app that is **already on the store** ships end to end by the agent or the
+pipeline, with no owner gate per update: submit for review, promote to production, roll out, release an approved
+version. This holds with bypass mode off, in a terminal and in CI:
+
+| Store | Update commands (all take `--yes`; `--json` / `--result-file` for the [ship-step contract](ship-step.md)) |
+|---|---|
+| Google Play | `storebound play release <app.aab> --production completed --yes` (or `--production inProgress --fraction 0.05`), or `storebound play upload <app.aab> --track production --yes` |
+| App Store | `storebound apple submit --build <n> --yes`, then (manual release) `storebound apple release --manual-release --yes` |
+
+What makes it an update is read from the store, never from the config: Play's production track holds a completed /
+inProgress / halted release; the App Store platform has a version that is or was `READY_FOR_SALE`
+(`READY_FOR_DISTRIBUTION`, `REPLACED_WITH_NEW_VERSION`). The result line carries `releaseKind: "update"`.
+
+Still the owner's, bypass mode or not (the commands refuse with exit 3, `error.code` `OWNER_STEP`, "first release of this
+app"): the **first-ever release** of an app (the first production release on Play, the first submission or release on
+the App Store), removal from sale, live price changes and anything that costs money. The owner approves a first
+release once: after the owner's yes in chat re-run with `--first-release` (or turn on bypass mode). A person at a
+terminal answering the normal confirmation prompt (no `--yes`) is the owner's approval too, and so is the desktop's
+owner dialog. Re-running an update that is on the store already is exit 7, nothing sent.
+
+MCP is unchanged: it still does not offer `--yes` or `--production`; an update goes through the CLI in a terminal or
+pipeline (or `owner_step` in bypass mode).
+
 ## What it unlocks
 
-- MCP: the `owner_step` tool appears. It runs one of: `apple submit`, `apple resubmit`, `apple iap-submit`, `apple release`,
+- MCP: the `owner_step` tool appears. It runs one of (a first release also passes the gate in bypass mode): `apple submit`, `apple resubmit`, `apple iap-submit`, `apple release`,
   `apple preorder`, `play release`, `play rollout`, `reviews` (replies), `apple testflight` (testers), `play products`,
   `play subscriptions`, `apple iap`, `apple subscriptions`, `prices` (live prices). Dry run first (`dry_run` defaults to
   true), then `dry_run: false` runs it with `--yes`.
diff --git a/docs/pitfalls.md b/docs/pitfalls.md
index 55cc3a4..f3f01e7 100644
--- a/docs/pitfalls.md
+++ b/docs/pitfalls.md
@@ -9,6 +9,7 @@ fails without the fix.
 
 | # | date | lesson | guard |
 |---|---|---|---|
+| 96 | 2026-10 | A pipeline could not ship a production update of a live app: production was treated as the owner's for every release, though the owner's rule is updates end to end and only the first-ever release gated. | `cli/lib/release-kind.ts` reads update vs first from the store; `--yes` ships an update (Play `play release --production` / `play upload --track production`, App Store `apple submit` / `apple release`), a first release with `--yes` is exit 3 `OWNER_STEP` (`--first-release` or bypass approve it), a re-run is exit 7; `tests/update-gate.test.ts` |
 | 95 | 2026-10 | The Google service-account keys moved to the owner's credential broker, but storebound still wanted a local `PLAY_SERVICE_ACCOUNT`, and a Play write with a missing permission ran its edit before Google's bare 403. | `cli/lib/broker.ts` (broker.json, key file mode 600, token cache and single flight, grants, `playPreflight` before Play write commands), `playToken` in `cli/lib/google-auth.ts` (broker first, local key fallback when it does not answer), `cli/lib/google-access.ts` (403 SERVICE_DISABLED / PERMISSION_DENIED -> exact API or grant with its link, never retried), `validate` blockers; `tests/credential-broker.test.ts` against a local fake broker. Skill pitfall 122, docs/credential-broker.md. |
 | 94 | 2026-10 | An app with managed publishing was approved but never went live: `play status` said "In review / ready to publish" with no next step, and the Publishing overview "Publish N changes" button (production + Data safety) was easy to miss or to confuse with Discard changes. | `console plan play-publish-changes` (final "Publish N changes" is the owner's, Discard changes / Stop managed publishing never-press), `console verify play-publish-changes` (API), the hint in `play status`, `status` and the desktop Releases tab (`cli/lib/play-publish.ts`, `tests/console-play-plans.test.ts`). |
 | 93 | 2026-10 | A git-ignored, never-captured frames folder rendered store images with no app or game in them; render only logged 404s and `shots check` said 0 errors. | `shots render` refuses to start while a scene frame is missing (`framesForRender` in `cli/shots/lib.ts`) and fails when any load failed; report.json `missing` is a `frame-missing` error in `shots check` / `validate` (`cli/shots/report.ts`, `tests/shots-missing-frames.test.ts`). |
diff --git a/docs/ship-step.md b/docs/ship-step.md
index cb44b15..c26809f 100644
--- a/docs/ship-step.md
+++ b/docs/ship-step.md
@@ -14,6 +14,7 @@ commands below keep their normal behaviour in a terminal; the contract switches
 | `storebound apple upload` | `upload` | `apple` |
 | `storebound apple submit` | `submit` | `apple` |
 | `storebound apple resubmit` | `resubmit` | `apple` |
+| `storebound apple release` (`--manual-release`) | `release` | `apple` |
 
 A write still needs `--yes` in a pipeline: without it the confirmation is declined and the run ends with exit 3
 (`CONFIRMATION_REQUIRED`). `apple submit` without `--yes` is a dry run (exit 0, `state: "planned"`).
@@ -25,7 +26,7 @@ A write still needs `--yes` in a pipeline: without it the confirmation is declin
 | 0 | ok | - |
 | 1 | failure (build failed, network, timeout, blockers) | `FAILED`, `TIMEOUT`, `BLOCKERS` |
 | 2 | usage (unknown flag, bad value, bad `--version-from` / `--env-file`) | `USAGE`, `ENV_FILE` |
-| 3 | needs the owner | `AGREEMENT_PENDING`, `SIGN_IN_REQUIRED`, `COMPLIANCE_ANSWER_MISSING`, `CONSOLE_STEP`, `CONFIRMATION_REQUIRED` |
+| 3 | needs the owner | `AGREEMENT_PENDING`, `SIGN_IN_REQUIRED`, `COMPLIANCE_ANSWER_MISSING`, `CONSOLE_STEP`, `CONFIRMATION_REQUIRED`, `OWNER_STEP` |
 | 4 | the store refused it (4xx answer, ITMS error, invalid build, rejected upload) | `STORE_REFUSED`, `BUILD_INVALID` |
 | 7 | nothing to do: the build / release is on the store already (the result names what is there) | - |
 
@@ -37,6 +38,31 @@ Console API access, Data safety, Content ratings, Publishing overview). The link
 Note: `apple upload` and `apple testflight wait` keep their old exit 7 for a processing timeout when the contract is
 off; under the contract a timeout is exit 1 `TIMEOUT` and an invalid build exit 4 `BUILD_INVALID`.
 
+## Updates and first releases
+
+The production and review steps (`play upload --track production`, `play release --production completed|inProgress`,
+`apple submit`, `apple resubmit`, `apple release --manual-release`) read from the store whether this is an **update** of
+an app that is already live or its **first release** (Play: the production track holds a completed / inProgress / halted
+release; App Store: a version of the platform is or was on sale; `cli/lib/release-kind.ts`). The result carries
+`releaseKind`.
+
+- Update: `--yes` is all it takes. No owner gate, no bypass mode needed ([docs/bypass.md](bypass.md)).
+- First release with `--yes`: exit 3, `error.code` `OWNER_STEP`, message "first release of this app ... the owner
+  approves it once", `error.consoleUrl` the page where the owner acts, nothing written. After the owner's yes: re-run
+  with `--first-release` (or bypass mode on).
+- Already on the store (the versionCode on production with that status, the version submitted or released): exit 7,
+  nothing sent.
+
+```sh
+# Android production update
+storebound play release build/android/app.aab --production completed --yes --json --result-file out/release.json --env-file /run/secrets/ship.env
+# (or a staged rollout: --production inProgress --fraction 0.05 --yes)
+# iOS update: attach the uploaded build, submit, and later release the approved version
+storebound apple submit --build 42 --yes --json --result-file out/submit.json --env-file /run/secrets/ship.env
+storebound apple release --manual-release --yes --json --result-file out/release.json --env-file /run/secrets/ship.env
+case $? in 0|7) ;; 3) echo "owner: $(jq -r .error.consoleUrl out/release.json)"; exit 1 ;; *) exit 1 ;; esac
+```
+
 ## `--json`: one final line
 
 stdout carries exactly one line, at the end, also on failure:
@@ -104,6 +130,7 @@ Reads the version and build for the step. Accepted shapes:
 - `play release`: every track already holds the same release: exit 7, nothing committed.
 - `apple submit`: the version is already submitted (or further) with this build, or the submission is in review:
   exit 7.
+- `apple release --manual-release`: the version is released (`READY_FOR_SALE` ...) and none waits for release: exit 7.
 
 ## `storebound status`
 
diff --git a/skills/play-first-release/SKILL.md b/skills/play-first-release/SKILL.md
index 393544a..894b677 100644
--- a/skills/play-first-release/SKILL.md
+++ b/skills/play-first-release/SKILL.md
@@ -87,7 +87,9 @@ products) and answers the compliance facts no file proves, all in one batch at t
     new app shows "Not selected": set `play.category` (Play's name, e.g. "Strategy"; `storebound check` warns
     without it), then `storebound console plan play-store-settings`: /store-settings > the FIRST Edit > App or game >
     the Category dropdown's `[role=option]` with exactly that name > Save. Contact details come from `play listing`.
-12. **API + UI · Production.** `storebound play release --version-code N --production draft`, then in the Console
+12. **API + UI · Production.** The first-ever production release is the owner's (`storebound play release ... --production
+    completed --yes` on a never-published app is exit 3 `OWNER_STEP`, `--first-release` after the owner's yes; once the app is published every later version is an
+    update the agent ships itself, `release-management`). `storebound play release --version-code N --production draft`, then in the Console
     (you, with your browser tool):
     a) `storebound console plan play-production-countries`: tracks/production > Countries / regions tab > Edit
        countries / regions > the mat-checkbox "Select all rows" (or `play.countries`) > Save; a "Go to Publishing
diff --git a/skills/release-management/SKILL.md b/skills/release-management/SKILL.md
index c5dded7..21bf298 100644
--- a/skills/release-management/SKILL.md
+++ b/skills/release-management/SKILL.md
@@ -14,8 +14,8 @@ presses release; you prepare, dry-run and report. `storebound mcp` deliberately
   `--versions` lists every version the stores know. The same stages as the desktop's Releases tab.
 - `storebound release plan 1.3.0` (MCP `release_plan`, read-only): what is left for that version on each store, in
   fix order: config problems (`check`), the version on the store, store blockers (`validate`), the next move, warnings.
-  Owner steps (submit, release, raise / complete a rollout) are named with where the owner does them; you never run
-  them. "could not be read" means unknown, not "not there": fix the credentials first.
+  Owner steps (the first-ever submit / release of an app) are named with where the owner does them; updates of an app
+  on sale (submit, release, raise / complete a rollout) are yours, `--yes`. "could not be read" means unknown, not "not there": fix the credentials first.
 - Many apps (a `storebound.workspace.json` above the app folders): the same commands cover every app, or `--app a,b`.
   `storebound ws status` is the portfolio table across apps and stores.
 
@@ -31,20 +31,26 @@ presses release; you prepare, dry-run and report. `storebound mcp` deliberately
    teammate may have uploaded another one meanwhile.
 2. `storebound apple release --phased on --dry`, then without `--dry` (works while the version is being prepared).
    With versions on more than one App Store platform add `--platform ios|macos|tvos|visionos` (pitfall 79).
-3. Submit (owner, UI). Wait: `storebound apple status --wait-review` (polls with backoff, exit 0 approved, 1 rejected,
+3. Submit: an update of an app on sale is yours, `storebound apple submit --build <n> --yes` (exit 7 when it was sent
+   already); the first-ever submission is the owner's (exit 3 `OWNER_STEP`, re-run with `--first-release` after the
+   owner's yes). Wait: `storebound apple status --wait-review` (polls with backoff, exit 0 approved, 1 rejected,
    7 timeout; `--timeout 72h`). Rejected: `review-rejections` skill.
-4. Approved = PENDING_DEVELOPER_RELEASE. Owner releases: `storebound apple release --manual-release` (asks to confirm)
-   or the "Release This Version" button. With phased release on, automatic updates reach 1 %, 2 %, 5 %, 10 %, 20 %,
+4. Approved = PENDING_DEVELOPER_RELEASE. Release an update yourself: `storebound apple release --manual-release --yes`
+   (the first-ever release of an app is the owner's: `OWNER_STEP`) or the "Release This Version" button. With phased release on, automatic updates reach 1 %, 2 %, 5 %, 10 %, 20 %,
    50 %, 100 % over 7 days; anyone can still update manually from the store.
 5. During the rollout watch crashes / reviews. Problem: `storebound apple release --phased pause` (up to 30 days in
    total). Pausing stops automatic updates only; it is **not a rollback**: users who updated keep the build, and new
    users still get the new version. The fix is a new build (expedited review is possible for critical bugs).
-6. All good early: `storebound apple release --phased resume` / `--phased complete` (owner; asks to confirm).
+6. All good early: `storebound apple release --phased resume --yes` / `--phased complete --yes` (an update's rollout is
+   yours).
 
 ## Google Play
 1. `storebound play next-version-code` before building; the versionCode must be higher than every uploaded one.
-2. Upload and start the rollout (owner confirms): `storebound play release app.aab --production inProgress --fraction 0.05`.
-   Draft apps cannot do this until the first release is reviewed (`play-first-release`).
+2. Upload and start the rollout of an UPDATE (no owner step; the app is published): `storebound play release app.aab
+   --production inProgress --fraction 0.05 --yes` (`--production completed --yes` for everyone; or `storebound play
+   upload app.aab --track production --yes`). Re-running it is exit 7. The first-ever production release is the owner's
+   (exit 3 `OWNER_STEP`; after the owner's yes `--first-release`), and draft apps cannot do this until the first
+   release is reviewed (`play-first-release`).
    Changes made in the Console (listing, App content) are sent from Publishing overview > "Submit N changes for
    review". While a review is running that button opens "Do you want to restart your review?" with **Restart
    review**: the running review starts over with the new changes. The owner's button, never the agent's; to keep the
diff --git a/skills/store-pitfalls/SKILL.md b/skills/store-pitfalls/SKILL.md
index 7392b6d..48595dd 100644
--- a/skills/store-pitfalls/SKILL.md
+++ b/skills/store-pitfalls/SKILL.md
@@ -1515,3 +1515,21 @@ that fails without the fix (see CONTRIBUTING.md).
 - **Guard:** `cli/lib/broker.ts` (config, key file mode, token cache and single flight, grants, preflight, redaction),
   `cli/lib/google-auth.ts` `playToken` (broker first, local key fallback), `cli/lib/google-access.ts` (403 ->
   GoogleAccessError, no retry), `tests/credential-broker.test.ts` (a local fake broker).
+
+
+## 123. Updates are agent steps: a pipeline could not ship a production update without the owner
+
+- **Symptom:** a CI pipeline shipping a new version of an app that was long on the store was told that production is
+  "the owner's" (an AAB to production refused with "play upload is for testing tracks ... the owner sends it"), though
+  the owner's rule is that updates of a live app ship end to end without a confirmation per update.
+- **Do:** an update is read from the store (Play: the production track holds a completed / inProgress / halted release;
+  App Store: a version of the platform is or was READY_FOR_SALE) and runs with `--yes`, in a terminal or a pipeline:
+  `storebound play release <aab> --production completed --yes` (or `--production inProgress --fraction 0.05`, or
+  `play upload --track production --yes`), `storebound apple submit --build <n> --yes`, `storebound apple release
+  --manual-release --yes`; `--json` / `--result-file` give the ship-step result (`releaseKind: "update"`), a re-run is
+  exit 7. Only the first-ever release of an app is the owner's: exit 3 `OWNER_STEP` "first release of this app", approved
+  once (`--first-release` after the owner's yes, or bypass mode). Removal from sale and live prices keep their own gates.
+- **Never:** tell the owner to press a button for an update, pass `--first-release` without the owner's yes, or decide
+  update-or-first from the config instead of the store.
+- **Guard:** `cli/lib/release-kind.ts` (the kind from the store, the policy), `tests/update-gate.test.ts` (fake stores:
+  update goes through, first release is exit 3, already there is exit 7), docs/bypass.md "Updates are agent steps".
diff --git a/tests/game-services.test.ts b/tests/game-services.test.ts
index 8554834..a365d6a 100644
--- a/tests/game-services.test.ts
+++ b/tests/game-services.test.ts
@@ -265,6 +265,7 @@ describe('validate findings', () => {
 describe('apple submit with a Game Center build (live 409 STATE_ERROR.BUILD_INDICATES_GAME_CENTER_ENABLED)', () => {
   const fresh = () => {
     s.asc.gameCenterBuild = true;
+    s.asc.put({ type: 'appStoreVersions', id: 'ver-0', attributes: { versionString: '0.9.0', appVersionState: 'READY_FOR_SALE', platform: 'IOS' }, rels: { app: APP } }); // an update, not a first release
     s.asc.put({ type: 'appStoreVersions', id: 'ver-1', attributes: { versionString: '1.0.0', appVersionState: 'PREPARE_FOR_SUBMISSION', platform: 'IOS' }, rels: { app: APP } });
     s.asc.put({ type: 'builds', id: 'b-8', attributes: { version: '8', processingState: 'VALID', usesNonExemptEncryption: false }, rels: { app: APP } });
   };
diff --git a/tests/resubmit.test.ts b/tests/resubmit.test.ts
index ac9259f..54fe538 100644
--- a/tests/resubmit.test.ts
+++ b/tests/resubmit.test.ts
@@ -45,7 +45,11 @@ const CONFIG: ShipConfig = {
 
 /** The live shape: version 1.0.0 REJECTED (Invalid Binary) with build 7, submission rs-old UNRESOLVED_ISSUES holding the
  *  version and the gems IAP; pro was never added; build 8 uploaded and VALID. */
+/** The app was on sale before (an update, not a first release): version 0.9.0 READY_FOR_SALE. */
+function onSale(): void { s.asc.put({ type: 'appStoreVersions', id: 'ver-0', attributes: { versionString: '0.9.0', appVersionState: 'READY_FOR_SALE', platform: 'IOS' }, rels: { app: APP } }); }
+
 function rejected(o: { pro?: boolean; ver?: string; gems?: string } = {}): void {
+  onSale();
   s.asc.put({ type: 'appStoreVersions', id: 'ver-1', attributes: { versionString: '1.0.0', appVersionState: 'REJECTED', platform: 'IOS' }, rels: { app: APP } });
   s.asc.put({ type: 'builds', id: 'b-7', attributes: { version: '7', processingState: 'VALID', usesNonExemptEncryption: false }, rels: { app: APP, appStoreVersion: 'ver-1' } });
   s.asc.put({ type: 'builds', id: 'b-8', attributes: { version: '8', processingState: 'VALID', usesNonExemptEncryption: false }, rels: { app: APP } });
@@ -181,6 +185,7 @@ describe('apple resubmit --build <n>', () => {
 describe('apple submit --build <n> (a first submission, the desktop owner action)', () => {
   /** Version 1.0.0 in Prepare for Submission without a build, build 8 VALID, the gems IAP ready, no open submission. */
   function fresh(): void {
+    onSale();
     s.asc.put({ type: 'appStoreVersions', id: 'ver-1', attributes: { versionString: '1.0.0', appVersionState: 'PREPARE_FOR_SUBMISSION', platform: 'IOS' }, rels: { app: APP } });
     s.asc.put({ type: 'builds', id: 'b-8', attributes: { version: '8', processingState: 'VALID', usesNonExemptEncryption: false }, rels: { app: APP } });
     s.asc.put({ type: 'inAppPurchases', id: 'iap-gems', attributes: { productId: 'com.example.notes.gems', inAppPurchaseType: 'CONSUMABLE', state: 'READY_TO_SUBMIT' }, rels: { app: APP } });
@@ -199,7 +204,7 @@ describe('apple submit --build <n> (a first submission, the desktop owner action
     expect(r.out).toMatch(/submission\s+new draft\s+-\s+create/);
     expect(r.out).toMatch(/app version 1\.0\.0/);
     expect(r.out).toContain('com.example.notes.gems');
-    expect(r.out).toContain('Submitting is the owner');
+    expect(r.out).toContain('update of an app on sale');
     process.env.STOREBOUND_MACHINE = '1';
     try {
       const j = await capture(() => appleSubmit(p.ctx(['--build', '8', '--json'])));
diff --git a/tests/ship-step.test.ts b/tests/ship-step.test.ts
index 133b817..851da8c 100644
--- a/tests/ship-step.test.ts
+++ b/tests/ship-step.test.ts
@@ -235,6 +235,8 @@ describe('idempotent re-upload (fake stores)', () => {
   const LISTING = '# Play\n\n## English\n<!-- play: en-US -->\n\n### Play short description\n```\nNotes.\n```\n\n### Play full description\n```\nNotes for everyone.\n```\n\n### What\'s new\n```\nFixes.\n```\n';
 
   test('play upload: first run uploads (exit 0), the re-run is exit 7 with the existing release, no second upload', async () => {
+    s.play.live.bundles = [41];
+    s.play.live.tracks = { production: { releases: [{ status: 'completed', versionCodes: ['41'] }] } }; // published: an update
     const p = project(BASE, { 'store/listing.md': LISTING, 'build/android/app.aab': makeAab('com.example.notes', 42, '1.2.0') });
     const first = await ship('play upload', ['--json', '--yes', '--track', 'production'], a => playUpload({ loaded: p.loaded, args: a }));
     expect(first.code).toBe(0);
diff --git a/tests/update-gate.test.ts b/tests/update-gate.test.ts
new file mode 100644
index 0000000..0d9e237
--- /dev/null
+++ b/tests/update-gate.test.ts
@@ -0,0 +1,259 @@
+// Updates are agent steps, the first release is the owner's (cli/lib/release-kind.ts, docs/bypass.md "Updates are agent
+// steps"): the kind (update / first) is read from the store; an update of a live app ships with --yes in a pipeline
+// (no owner gate), a first-ever release with --yes is exit 3 OWNER_STEP unless approved (--first-release, bypass mode),
+// and a release that is on the store already is exit 7. Against the stateful App Store Connect and Google Play doubles.
+import { afterAll, afterEach, beforeAll, beforeEach, describe, expect, setDefaultTimeout, test } from 'bun:test';
+import { mkdtempSync, readFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import { parseArgs } from '../cli/lib/args';
+import { appleReleaseKind, firstReleaseAllowed, playReleaseKind } from '../cli/lib/release-kind';
+import { setBypass } from '../cli/lib/bypass';
+import { runShipStep } from '../cli/lib/ship-step';
+import { run as playUpload } from '../cli/play/upload';
+import { run as playRelease } from '../cli/play/release';
+import { run as appleSubmit } from '../cli/apple/submit';
+import { run as appleRelease } from '../cli/apple/release';
+import { makeAab } from './build-fixtures';
+import { ascEnv, BASE, playEnv, project, restore } from './helpers/store-mock';
+import { installStores, type Stores, uninstallStores, writes } from './helpers/fake-stores';
+
+const APP = '6400000101';
+
+/** Runs a ship step in-process with stdout / stderr captured. */
+async function ship(key: string, argv: string[], body: (a: ReturnType<typeof parseArgs>) => Promise<void>): Promise<{ code: number; out: string; err: string }> {
+  const out: string[] = [], err: string[] = [];
+  const o = process.stdout.write, e = process.stderr.write, cl = console.log, ce = console.error, cw = console.warn, ci = console.info;
+  process.stdout.write = ((s: string | Uint8Array) => { out.push(typeof s === 'string' ? s : new TextDecoder().decode(s)); return true; }) as typeof process.stdout.write;
+  process.stderr.write = ((s: string | Uint8Array) => { err.push(typeof s === 'string' ? s : new TextDecoder().decode(s)); return true; }) as typeof process.stderr.write;
+  console.log = (...a: unknown[]) => { out.push(a.map(String).join(' ') + '\n'); };
+  console.info = console.log;
+  console.error = (...a: unknown[]) => { err.push(a.map(String).join(' ') + '\n'); };
+  console.warn = console.error;
+  try {
+    const code = await runShipStep(key, argv, parseArgs, async a => {
+      const keep = console.log;
+      if (a.has('json')) console.log = (...x: unknown[]) => console.error(...x);
+      try { await body(a); } finally { console.log = keep; }
+    });
+    return { code, out: out.join(''), err: err.join('') };
+  } finally { process.stdout.write = o; process.stderr.write = e; console.log = cl; console.error = ce; console.warn = cw; console.info = ci; }
+}
+
+describe('the kind comes from the store (pure)', () => {
+  test('Play: a completed / inProgress / halted production release means published; a draft or nothing means first', () => {
+    expect(playReleaseKind([{ status: 'completed', versionCodes: ['41'] }]).kind).toBe('update');
+    expect(playReleaseKind([{ status: 'inProgress', versionCodes: ['42'] }, { status: 'completed', versionCodes: ['41'] }]).kind).toBe('update');
+    expect(playReleaseKind([{ status: 'halted', versionCodes: ['42'] }]).kind).toBe('update');
+    expect(playReleaseKind([{ status: 'draft', versionCodes: ['1'] }])).toMatchObject({ kind: 'first', why: expect.stringContaining('only draft') });
+    expect(playReleaseKind([]).kind).toBe('first');
+    expect(playReleaseKind(undefined).kind).toBe('first');
+  });
+  test('App Store: a version that is or was on sale means update; Prepare for Submission / in review / rejected means first', () => {
+    expect(appleReleaseKind([{ versionString: '1.0.0', state: 'READY_FOR_SALE' }, { versionString: '1.1.0', state: 'PREPARE_FOR_SUBMISSION' }]).kind).toBe('update');
+    expect(appleReleaseKind([{ state: 'REPLACED_WITH_NEW_VERSION' }]).kind).toBe('update');
+    expect(appleReleaseKind([{ state: 'READY_FOR_DISTRIBUTION' }]).kind).toBe('update');
+    expect(appleReleaseKind([{ state: 'PREPARE_FOR_SUBMISSION' }, { state: 'WAITING_FOR_REVIEW' }, { state: 'REJECTED' }]).kind).toBe('first');
+    expect(appleReleaseKind([]).kind).toBe('first');
+  });
+  test('the policy: updates always; a first release only with a prompt, the owner flag or bypass mode', () => {
+    const g = { yes: true, bypass: false, approved: false };
+    expect(firstReleaseAllowed({ ...g, kind: 'update' })).toBe(true);
+    expect(firstReleaseAllowed({ ...g, kind: 'first' })).toBe(false);
+    expect(firstReleaseAllowed({ ...g, kind: 'first', yes: false })).toBe(true); // the prompt is the owner's answer
+    expect(firstReleaseAllowed({ ...g, kind: 'first', approved: true })).toBe(true);
+    expect(firstReleaseAllowed({ ...g, kind: 'first', bypass: true })).toBe(true);
+  });
+});
+
+describe('Google Play production (fake store)', () => {
+  setDefaultTimeout(30_000);
+  let s: Stores;
+  beforeAll(() => { playEnv(); });
+  afterAll(restore);
+  beforeEach(() => { s = installStores(); });
+  afterEach(() => { uninstallStores(); delete process.env.STOREBOUND_HOME; });
+  const LISTING = '# Play\n\n## English\n<!-- play: en-US -->\n\n### Play short description\n```\nNotes.\n```\n\n### Play full description\n```\nNotes for everyone.\n```\n\n### What\'s new\n```\nFixes.\n```\n';
+  const published = (): void => { s.play.live.bundles = [41]; s.play.live.tracks = { production: { releases: [{ status: 'completed', versionCodes: ['41'] }] } }; };
+  const files = () => ({ 'store/listing.md': LISTING, 'build/android/app.aab': makeAab('com.example.notes', 42, '1.2.0') });
+  const upload = ['--json', '--yes', '--track', 'production'];
+
+  test('play upload --track production --yes on a published app: no owner gate, exit 0, exit 7 on the re-run', async () => {
+    published();
+    const p = project(BASE, files());
+    const first = await ship('play upload', upload, a => playUpload({ loaded: p.loaded, args: a }));
+    expect(first.err).not.toContain('error:');
+    expect(first.code).toBe(0);
+    expect(JSON.parse(first.out)).toMatchObject({ ok: true, step: 'upload', track: 'production', build: '42', state: 'completed' });
+    expect(s.play.committed.length).toBe(1);
+    const n = s.calls.length;
+    const again = await ship('play upload', upload, a => playUpload({ loaded: p.loaded, args: a }));
+    expect(again.code).toBe(7);
+    expect(writes(s.calls.slice(n))).toEqual([]);
+  });
+
+  test('play upload --track production --yes on a never-published app: exit 3 OWNER_STEP, nothing written', async () => {
+    const p = project(BASE, files());
+    const r = await ship('play upload', upload, a => playUpload({ loaded: p.loaded, args: a }));
+    expect(r.code).toBe(3);
+    const j = JSON.parse(r.out);
+    expect(j).toMatchObject({ ok: false, error: { code: 'OWNER_STEP' } });
+    expect(j.error.message).toContain('first release of this app');
+    expect(j.error.message).not.toContain('the owner sends it');
+    expect(j.error.consoleUrl).toContain('play.google.com/console');
+    expect(writes(s.calls)).toEqual([]);
+    expect(s.play.committed).toEqual([]);
+  });
+
+  test('the owner approved the first release (--first-release) or turned bypass mode on: the gate lets it through', async () => {
+    const p = project(BASE, files());
+    const ok = await ship('play upload', [...upload, '--first-release'], a => playUpload({ loaded: p.loaded, args: a }));
+    // Play takes only drafts on a never-published app: the gate passed, the store's own answer is the console step
+    expect(ok.err).toContain('first release (');
+  });
+
+  test('bypass mode (the owner opted in) lets a first release through the gate', async () => {
+    process.env.STOREBOUND_HOME = mkdtempSync(join(tmpdir(), 'sb-bypass-'));
+    setBypass(true);
+    const p2 = project(BASE, files());
+    const viaBypass = await ship('play upload', upload, a => playUpload({ loaded: p2.loaded, args: a }));
+    expect(viaBypass.code).not.toBe(3);
+    expect(viaBypass.err).toContain('bypass mode');
+  });
+
+  test('a plain run (no contract) of a first release is the usual declined exit 3', async () => {
+    const p = project(BASE, files());
+    const before = process.exitCode;
+    const err: string[] = [];
+    const ce = console.error;
+    console.error = (...a: unknown[]) => { err.push(a.map(String).join(' ')); };
+    try { await playUpload(p.ctx(['--yes', '--track', 'production'])); } finally { console.error = ce; }
+    expect(process.exitCode).toBe(3);
+    expect(err.join('\n')).toContain('declined: first release of this app');
+    process.exitCode = before;
+    expect(writes(s.calls)).toEqual([]);
+  });
+
+  test('play release <versionCode> --production completed --yes: an update goes through, then exit 7; a staged rollout is the same policy', async () => {
+    published();
+    s.play.live.bundles = [41, 42];
+    const p = project(BASE, { 'store/listing.md': LISTING });
+    const argv = ['--json', '--yes', '--version-code', '42', '--production', 'completed'];
+    const first = await ship('play release', argv, a => playRelease({ loaded: p.loaded, args: a }));
+    expect(first.err).not.toContain('error:');
+    expect(first.code).toBe(0);
+    expect(JSON.parse(first.out)).toMatchObject({ ok: true, step: 'release', track: 'production', build: '42', state: 'completed', releaseKind: 'update' });
+    const again = await ship('play release', argv, a => playRelease({ loaded: p.loaded, args: a }));
+    expect(again.code).toBe(7);
+    const staged = await ship('play release', ['--json', '--yes', '--version-code', '42', '--production', 'inProgress', '--fraction', '0.1'], a => playRelease({ loaded: p.loaded, args: a }));
+    expect(staged.code).toBe(0);
+    expect(JSON.parse(staged.out).tracks[0]).toMatchObject({ status: 'inProgress', userFraction: 0.1 });
+  });
+
+  test('play release --production completed --yes on a never-published app: exit 3 OWNER_STEP; --production draft is not gated', async () => {
+    s.play.live.bundles = [42];
+    const p = project(BASE, { 'store/listing.md': LISTING });
+    const refused = await ship('play release', ['--json', '--yes', '--version-code', '42', '--production', 'completed'], a => playRelease({ loaded: p.loaded, args: a }));
+    expect(refused.code).toBe(3);
+    expect(JSON.parse(refused.out)).toMatchObject({ ok: false, error: { code: 'OWNER_STEP' } });
+    expect(s.play.committed).toEqual([]);
+    const draft = await ship('play release', ['--json', '--yes', '--version-code', '42', '--production', 'draft'], a => playRelease({ loaded: p.loaded, args: a }));
+    expect(draft.code).toBe(0);
+  });
+});
+
+describe('App Store (fake store)', () => {
+  setDefaultTimeout(30_000);
+  let s: Stores;
+  beforeAll(() => { ascEnv(); });
+  afterAll(restore);
+  beforeEach(() => { s = installStores(); });
+  afterEach(() => { uninstallStores(); });
+  const version = (id: string, v: string, state: string): void => { s.asc.put({ type: 'appStoreVersions', id, attributes: { versionString: v, appVersionState: state, platform: 'IOS' }, rels: { app: APP } }); };
+  const build = (): void => { s.asc.put({ type: 'builds', id: 'b-8', attributes: { version: '8', processingState: 'VALID', usesNonExemptEncryption: false }, rels: { app: APP } }); };
+
+  test('apple submit --yes for an update of an app on sale: no owner gate, exit 0; the re-run is exit 7', async () => {
+    version('ver-0', '1.0.0', 'READY_FOR_SALE');
+    version('ver-1', '1.1.0', 'PREPARE_FOR_SUBMISSION');
+    build();
+    const p = project(BASE);
+    const argv = ['--json', '--yes', '--build', '8'];
+    const r = await ship('apple submit', argv, a => appleSubmit({ loaded: p.loaded, args: a }));
+    expect(r.err).not.toContain('error:');
+    expect(r.code).toBe(0);
+    expect(JSON.parse(r.out)).toMatchObject({ ok: true, step: 'submit', store: 'apple', build: '8', releaseKind: 'update' });
+    expect(s.asc.all('reviewSubmissions').map(x => x.attributes.state)).toEqual(['WAITING_FOR_REVIEW']);
+    const n = s.calls.length;
+    const again = await ship('apple submit', argv, a => appleSubmit({ loaded: p.loaded, args: a }));
+    expect(again.code).toBe(7);
+    expect(writes(s.calls.slice(n))).toEqual([]);
+  });
+
+  test('apple submit --yes for the first version of an app: exit 3 OWNER_STEP, nothing written; --first-release sends it', async () => {
+    version('ver-1', '1.0.0', 'PREPARE_FOR_SUBMISSION');
+    build();
+    const p = project(BASE);
+    const r = await ship('apple submit', ['--json', '--yes', '--build', '8'], a => appleSubmit({ loaded: p.loaded, args: a }));
+    expect(r.code).toBe(3);
+    const j = JSON.parse(r.out);
+    expect(j).toMatchObject({ ok: false, error: { code: 'OWNER_STEP' } });
+    expect(j.error.message).toContain('first release of this app');
+    expect(writes(s.calls)).toEqual([]);
+    expect(s.asc.all('reviewSubmissions')).toEqual([]);
+    const ok = await ship('apple submit', ['--json', '--yes', '--build', '8', '--first-release'], a => appleSubmit({ loaded: p.loaded, args: a }));
+    expect(ok.code).toBe(0);
+    expect(s.asc.all('reviewSubmissions').map(x => x.attributes.state)).toEqual(['WAITING_FOR_REVIEW']);
+  });
+
+  test('apple submit without --yes is a dry run that names the kind (no gate, exit 0)', async () => {
+    version('ver-0', '1.0.0', 'READY_FOR_SALE');
+    version('ver-1', '1.1.0', 'PREPARE_FOR_SUBMISSION');
+    build();
+    const p = project(BASE);
+    const r = await ship('apple submit', ['--json', '--build', '8'], a => appleSubmit({ loaded: p.loaded, args: a }));
+    expect(r.code).toBe(0);
+    expect(JSON.parse(r.out)).toMatchObject({ state: 'planned', releaseKind: 'update' });
+    expect(writes(s.calls)).toEqual([]);
+  });
+
+  test('apple release --manual-release --yes: an approved update is released (exit 0), released already is exit 7', async () => {
+    version('ver-0', '1.0.0', 'REPLACED_WITH_NEW_VERSION');
+    version('ver-1', '1.1.0', 'PENDING_DEVELOPER_RELEASE');
+    const p = project(BASE);
+    const argv = ['--json', '--yes', '--manual-release', '--version', '1.1.0'];
+    const r = await ship('apple release', argv, a => appleRelease({ loaded: p.loaded, args: a }));
+    expect(r.err).not.toContain('error:');
+    expect(r.code).toBe(0);
+    expect(JSON.parse(r.out)).toMatchObject({ ok: true, step: 'release', store: 'apple', version: '1.1.0', releaseKind: 'update' });
+    expect(writes(s.calls).map(c => `${c.method} ${c.path}`)).toEqual(['POST /v1/appStoreVersionReleaseRequests']);
+    // the store moved it on: the same command again has nothing to release
+    s.asc.all('appStoreVersions').find(v => v.id === 'ver-1')!.attributes.appVersionState = 'READY_FOR_SALE';
+    const n = s.calls.length;
+    const again = await ship('apple release', argv, a => appleRelease({ loaded: p.loaded, args: a }));
+    expect(again.code).toBe(7);
+    expect(JSON.parse(again.out)).toMatchObject({ ok: true, state: 'READY_FOR_SALE' });
+    expect(writes(s.calls.slice(n))).toEqual([]);
+  });
+
+  test('apple release --manual-release --yes for the first version ever: exit 3 OWNER_STEP, no release request', async () => {
+    version('ver-1', '1.0.0', 'PENDING_DEVELOPER_RELEASE');
+    const p = project(BASE);
+    const r = await ship('apple release', ['--json', '--yes', '--manual-release'], a => appleRelease({ loaded: p.loaded, args: a }));
+    expect(r.code).toBe(3);
+    expect(JSON.parse(r.out)).toMatchObject({ ok: false, error: { code: 'OWNER_STEP' } });
+    expect(writes(s.calls)).toEqual([]);
+  });
+});
+
+describe('the policy is written down', () => {
+  const read = (f: string): string => readFileSync(join(import.meta.dir, '..', f), 'utf8');
+  test('docs, skills and the agent rules say updates are agent steps and the first release is the owner\'s', () => {
+    for (const f of ['docs/bypass.md', 'docs/ship-step.md', 'skills/release-management/SKILL.md', 'skills/play-first-release/SKILL.md', 'docs/agents-core.md']) {
+      const t = read(f);
+      expect(t, f).toContain('--first-release');
+      expect(t, f).toContain('OWNER_STEP');
+    }
+    expect(read('skills/store-pitfalls/SKILL.md')).toContain('Updates are agent steps');
+    expect(read('CHANGELOG.md')).toContain('OWNER_STEP');
+  });
+});

From db52afce1d8c2af65389268c7f7807727a631f98 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Mon, 26 Oct 2026 18:12:19 +0700
Subject: [PATCH 043/126] play release: read the production kind inside the
 release's own edit (no extra edit); the not-sent-for-review tests approve
 their first release

---
 cli/play/release.ts                    | 26 +++++++++++++-------------
 tests/play-not-sent-for-review.test.ts |  2 +-
 2 files changed, 14 insertions(+), 14 deletions(-)

diff --git a/cli/play/release.ts b/cli/play/release.ts
index 5e99e16..b1715e2 100644
--- a/cli/play/release.ts
+++ b/cli/play/release.ts
@@ -57,17 +57,10 @@ export async function run(ctx: Ctx): Promise<void> {
   const gated = tracks.find(t => t.track === 'production' && (t.status === 'completed' || t.status === 'inProgress'));
   const notes = readPlayCopy(ctx).filter(c => c.whatsNew).map(c => ({ language: c.lang, text: c.whatsNew }));
   refusePlayNotes(ctx, notes, `play release notes${a.has('dry') ? ' (dry run)' : ''}`);
-  // update of a published app: no owner step; the first production release: the owner's (exit 3 OWNER_STEP with --yes)
-  let early: Awaited<ReturnType<typeof playClient>> | undefined;
-  const client = async (): Promise<Awaited<ReturnType<typeof playClient>>> => (early ??= await playClient(root, pkg));
-  let kind: ReturnType<typeof playReleaseKind> | null = null;
-  if (gated) {
-    const p0 = await client();
-    const prod = await p0.read(async id => (await p0.call<{ releases?: PlayTrackRelease[] }>('GET', `${p0.API}/edits/${id}/tracks/production`).catch(() => ({ releases: [] }))).releases ?? []);
-    kind = playReleaseKind(prod);
-    if (a.has('dry')) log('play', `${kind.kind === 'update' ? 'update of a published app' : 'FIRST production release (the owner approves it once: --first-release)'}: ${kind.why}`);
-    else if (!enforceFirstRelease(ctx, kind, { store: 'play', what: 'the first production release', consoleUrl: consoleUrl('play.publishing') })) return;
-  }
+  // update of a published app: no owner step; the first production release: the owner's (exit 3 OWNER_STEP with --yes).
+  // The kind is read inside the release's own edit (no extra edit), before anything is uploaded.
+  const seen: { kind?: ReturnType<typeof playReleaseKind> } = {};
+  let refused = false;
   if (live && !a.has('dry') && !(await confirm(ctx, `Release to PRODUCTION as "${live.status}" (public once Google approves)?`))) return;
 
   if (aab) {
@@ -76,11 +69,17 @@ export async function run(ctx: Ctx): Promise<void> {
     if (sdkWhy) throw new Error(`${aab}: not released, ${sdkWhy}`);
   }
   shipReport({ track: tracks.map(t => t.track).join(','), url: consoleUrl(playTrackPage(tracks.length === 1 ? tracks[0]!.track : undefined)) });
-  const play = await client();
+  const play = await playClient(root, pkg);
   let released = fixed ?? '';
   let nothing = false;
   try {
     await play.edit(async (id, ctl) => {
+      if (gated) {
+        const prod = (await play.call<{ releases?: PlayTrackRelease[] }>('GET', `${play.API}/edits/${id}/tracks/production`).catch(() => ({ releases: [] }))).releases ?? [];
+        const kind = (seen.kind = playReleaseKind(prod));
+        if (a.has('dry')) log('play', `${kind.kind === 'update' ? 'update of a published app' : 'FIRST production release (the owner approves it once: --first-release)'}: ${kind.why}`);
+        else if (!enforceFirstRelease(ctx, kind, { store: 'play', what: 'the first production release', consoleUrl: consoleUrl('play.publishing') })) { refused = true; ctl.unchanged(); return; }
+      }
       let code = fixed ?? '';
       let uploaded = false;
       if (aab) {
@@ -123,6 +122,7 @@ export async function run(ctx: Ctx): Promise<void> {
       throw new Error(`${(e as Error).message}\n\nThis app has never been published: the API may only create DRAFT releases. Re-run with --production draft, then send it from the Console (skill play-first-release).`);
     throw e;
   }
+  if (refused) return;
   // the ship-step contract: every track holds this release already (and no upload): nothing to do, exit 7
   if (nothing && !a.has('dry')) shipNoop({ build: released || undefined, state: tracks.map(t => t.status).join(',') });
   const prod = tracks.find(t => t.track === 'production');
@@ -133,6 +133,6 @@ export async function run(ctx: Ctx): Promise<void> {
   }
   // machine-readable result for CI scripts (a Jenkins stage reads it instead of calling the Play API itself)
   if (a.has('json')) printJson({ versionCode: released ? Number(released) : null, sha256: aab ? createHash('sha256').update(readFileSync(aab)).digest('hex') : null, name: a.get('name') ?? null,
-    tracks: tracks.map(t => ({ track: t.track, status: t.status, userFraction: t.status === 'inProgress' ? Number(fraction ?? 0.1) : null })), dry: a.has('dry'), ...(kind ? { releaseKind: kind.kind } : {}) });
+    tracks: tracks.map(t => ({ track: t.track, status: t.status, userFraction: t.status === 'inProgress' ? Number(fraction ?? 0.1) : null })), dry: a.has('dry'), ...(seen.kind ? { releaseKind: seen.kind.kind } : {}) });
   done('play', 'release done');
 }
diff --git a/tests/play-not-sent-for-review.test.ts b/tests/play-not-sent-for-review.test.ts
index 842d858..836e8cf 100644
--- a/tests/play-not-sent-for-review.test.ts
+++ b/tests/play-not-sent-for-review.test.ts
@@ -24,7 +24,7 @@ afterEach(() => { uninstallStores(); });
 
 const edits = (what: string): string[] => s.calls.filter(c => c.method === 'POST' && c.path.includes(`:${what}`)).map(c => c.path.replace(/^.*\/edits\//, ''));
 const release = (p: ReturnType<typeof project>, extra: string[] = []) =>
-  capture(() => playRelease(p.ctx(['--version-code', '5', '--internal', 'completed', '--production', 'completed', '--name', '1.0.1 (5)', '--yes', ...extra])));
+  capture(() => playRelease(p.ctx(['--version-code', '5', '--internal', 'completed', '--production', 'completed', '--name', '1.0.1 (5)', '--yes', '--first-release', ...extra])));
 
 describe('Play refuses the automatic send for review', () => {
   test('the 400 is recognised by its message (and a bad-request reason), nothing else', () => {

From cb20912f0ef17aaf6a3729dd94635f71ff20def0 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Mon, 26 Oct 2026 18:17:15 +0700
Subject: [PATCH 044/126] storebound 0.8.53: version in package.json and every
 copy, CHANGELOG 0.8.53 section

---
 .claude-plugin/marketplace.json        | 2 +-
 .claude-plugin/plugin.json             | 2 +-
 .codex-plugin/plugin.json              | 2 +-
 CHANGELOG.md                           | 2 ++
 apps/desktop/package.json              | 2 +-
 apps/desktop/src-tauri/Cargo.lock      | 2 +-
 apps/desktop/src-tauri/Cargo.toml      | 2 +-
 apps/desktop/src-tauri/tauri.conf.json | 2 +-
 gemini-extension.json                  | 2 +-
 package.json                           | 2 +-
 10 files changed, 11 insertions(+), 9 deletions(-)

diff --git a/.claude-plugin/marketplace.json b/.claude-plugin/marketplace.json
index a0aeffc..f3c9e29 100644
--- a/.claude-plugin/marketplace.json
+++ b/.claude-plugin/marketplace.json
@@ -9,7 +9,7 @@
       "name": "storebound",
       "source": ".",
       "description": "Take a mobile app or game from nothing to Submit for review on both stores: skills for every store step and questionnaire plus the storebound CLI and MCP server.",
-      "version": "0.8.52",
+      "version": "0.8.53",
       "category": "development",
       "tags": [
         "mobile",
diff --git a/.claude-plugin/plugin.json b/.claude-plugin/plugin.json
index e43acdd..82bc2fd 100644
--- a/.claude-plugin/plugin.json
+++ b/.claude-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.52",
+  "version": "0.8.53",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/.codex-plugin/plugin.json b/.codex-plugin/plugin.json
index eaa58fd..e7ab8b8 100644
--- a/.codex-plugin/plugin.json
+++ b/.codex-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.52",
+  "version": "0.8.53",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 54743a2..7067715 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,8 @@
 
 ## Unreleased
 
+## 0.8.53 · 2026-10-26
+
 - Updates are agent steps (the owner's standing rule), first releases stay the owner's. `play release <aab> --production completed|inProgress --yes`, `play upload --track production --yes`, `apple submit --build <n> --yes` and `apple release --manual-release --yes` run without an owner gate, in a terminal and in a pipeline, when the store says the app is already live (Play: the production track holds a completed / inProgress / halted release; App Store: a version of the platform is or was `READY_FOR_SALE` / `READY_FOR_DISTRIBUTION` / `REPLACED_WITH_NEW_VERSION`; `cli/lib/release-kind.ts`). The result line carries `releaseKind`; a re-run is exit 7. The first-ever release of an app with `--yes` is exit 3 `OWNER_STEP` ("first release of this app: the owner approves it once"), approved by `--first-release` (after the owner's yes) or bypass mode; a person answering the prompt (no `--yes`) is the approval too. `apple release` is now a ship step (`--json`, `--result-file`, exit 7 when the version is released already). Policy in docs/bypass.md ("Updates are agent steps"), docs/ship-step.md, the release-management and play-first-release skills, AGENTS.md; pitfall 123 / 96.
 
 ## 0.8.52 · 2026-10-26
diff --git a/apps/desktop/package.json b/apps/desktop/package.json
index 8b14fc0..a8430ee 100644
--- a/apps/desktop/package.json
+++ b/apps/desktop/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@storebound/desktop",
-  "version": "0.8.52",
+  "version": "0.8.53",
   "private": true,
   "license": "MIT",
   "type": "module",
diff --git a/apps/desktop/src-tauri/Cargo.lock b/apps/desktop/src-tauri/Cargo.lock
index 3711bbe..9d3ef94 100644
--- a/apps/desktop/src-tauri/Cargo.lock
+++ b/apps/desktop/src-tauri/Cargo.lock
@@ -4096,7 +4096,7 @@ checksum = "a2eb9349b6444b326872e140eb1cf5e7c522154d69e7a0ffb0fb81c06b37543f"
 
 [[package]]
 name = "storebound-desktop"
-version = "0.8.52"
+version = "0.8.53"
 dependencies = [
  "base64 0.22.1",
  "getrandom 0.3.4",
diff --git a/apps/desktop/src-tauri/Cargo.toml b/apps/desktop/src-tauri/Cargo.toml
index 907c06a..1ee00eb 100644
--- a/apps/desktop/src-tauri/Cargo.toml
+++ b/apps/desktop/src-tauri/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "storebound-desktop"
-version = "0.8.52"
+version = "0.8.53"
 description = "storebound desktop: every game's releases on both stores in one window"
 license = "MIT"
 edition = "2021"
diff --git a/apps/desktop/src-tauri/tauri.conf.json b/apps/desktop/src-tauri/tauri.conf.json
index c8933aa..702ed71 100644
--- a/apps/desktop/src-tauri/tauri.conf.json
+++ b/apps/desktop/src-tauri/tauri.conf.json
@@ -2,7 +2,7 @@
   "$schema": "https://schema.tauri.app/config/2",
   "productName": "storebound",
   "mainBinaryName": "storebound-desktop",
-  "version": "0.8.52",
+  "version": "0.8.53",
   "identifier": "dev.storebound.desktop",
   "build": {
     "frontendDist": "../dist",
diff --git a/gemini-extension.json b/gemini-extension.json
index 2c978f8..e7e74f9 100644
--- a/gemini-extension.json
+++ b/gemini-extension.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.52",
+  "version": "0.8.53",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "contextFileName": "GEMINI.md",
   "mcpServers": {
diff --git a/package.json b/package.json
index 081b8c8..5b29575 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.52",
+  "version": "0.8.53",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every store questionnaire (incl. account deletion and App Review demo accounts), privacy, icons, screenshots and previews, TestFlight. After launch: crash vitals, review replies, price sheets, analytics and Product Page Optimization. One config, a CLI (Node 20+ or Bun), an MCP server and Agent Skills for your AI coding agent.",
   "license": "MIT",
   "author": "CRTkafa",

From f109c519ae4ee5a9d9967830be191c953c829547 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Mon, 26 Oct 2026 19:12:21 +0700
Subject: [PATCH 045/126] apple build: --derived-data (default
 <out>/DerivedData with --out), --path-free (Swift/clang prefix maps, no
 serialized debug options) and an archive path scan

---
 CHANGELOG.md                   |   2 +
 cli/apple/build.ts             |  33 +++++++++--
 cli/data/flags.json            |   2 +
 cli/lib/path-free.ts           |  99 ++++++++++++++++++++++++++++++++
 cli/lib/xcode.ts               |  10 +++-
 docs/pitfalls.md               |   1 +
 skills/build-and-sign/SKILL.md |   5 ++
 skills/store-pitfalls/SKILL.md |  14 +++++
 tests/build-sign.test.ts       |  17 ++++++
 tests/path-free.test.ts        | 100 +++++++++++++++++++++++++++++++++
 10 files changed, 276 insertions(+), 7 deletions(-)
 create mode 100644 cli/lib/path-free.ts
 create mode 100644 tests/path-free.test.ts

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 7067715..b471f55 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,8 @@
 
 ## Unreleased
 
+- `apple build` is hermetic and can be path-free. `--derived-data <dir>` (`apple.build.derivedData`) is xcodebuild `-derivedDataPath`; with `--out` (or `apple.build.out`) it defaults to `<out>/DerivedData` instead of `~/Library/Developer/Xcode/DerivedData` (without `--out` Xcode's folder stays). `--path-free` (`apple.build.pathFree`) remaps the home folder, checkout, out and DerivedData out of the app binary and the archive's dSYMs / Symbols (Swift `-debug-prefix-map` / `-file-prefix-map`, clang `-ffile-prefix-map`; dwarf-with-dsym stays, symbol upload keeps working), scans the archive and stops before the export with the hit count and the first file + offsets (never the paths). `--scan-paths` only scans and warns. A `--out` outside the home folder prints a hint. `--json` / `latest.json` carry `derivedData`, `pathFree` and `leaks`. Store-pitfalls 124.
+
 ## 0.8.53 · 2026-10-26
 
 - Updates are agent steps (the owner's standing rule), first releases stay the owner's. `play release <aab> --production completed|inProgress --yes`, `play upload --track production --yes`, `apple submit --build <n> --yes` and `apple release --manual-release --yes` run without an owner gate, in a terminal and in a pipeline, when the store says the app is already live (Play: the production track holds a completed / inProgress / halted release; App Store: a version of the platform is or was `READY_FOR_SALE` / `READY_FOR_DISTRIBUTION` / `REPLACED_WITH_NEW_VERSION`; `cli/lib/release-kind.ts`). The result line carries `releaseKind`; a re-run is exit 7. The first-ever release of an app with `--yes` is exit 3 `OWNER_STEP` ("first release of this app: the owner approves it once"), approved by `--first-release` (after the owner's yes) or bypass mode; a person answering the prompt (no `--yes`) is the approval too. `apple release` is now a ship step (`--json`, `--result-file`, exit 7 when the version is released already). Policy in docs/bypass.md ("Updates are agent steps"), docs/ship-step.md, the release-management and play-first-release skills, AGENTS.md; pitfall 123 / 96.
diff --git a/cli/apple/build.ts b/cli/apple/build.ts
index 855451b..87fa428 100644
--- a/cli/apple/build.ts
+++ b/cli/apple/build.ts
@@ -3,6 +3,7 @@
 //     (Mac App Store build of a Tauri app: cli/apple/build-mas.ts)
 //   storebound apple build [--version 1.2.0] [--build-number N] [--scheme S] [--workspace W | --project P]
 //                          [--configuration Release] [--out build/ios] [--no-prebuild] [--allow-stale-web] [--dry] [--json]
+//                          [--derived-data <dir>] [--path-free] [--scan-paths]
 //                          [--keychain <path>] [--keychain-unlock] [--allow-ssh] [--allow-app-group-gap]
 // Over SSH (no GUI session) codesign needs an unlocked keychain: --keychain-unlock unlocks it with the password in
 // STOREBOUND_KEYCHAIN_PASSWORD (never printed) and sets its key partition list; --keychain <path> signs with a build
@@ -16,15 +17,21 @@
 // profiles from apple.signing), runs xcodebuild archive and -exportArchive with the API key
 // (-allowProvisioningUpdates -authenticationKey*), and leaves <out>/export/<version>-<build>/<App>.ipa for `storebound apple upload`. Each build exports into its own
 // folder, cleaned first: xcodebuild refuses to overwrite an earlier App.ipa ("exportArchive Copy failed", pitfall 53).
+// DerivedData: --derived-data <dir> (apple.build.derivedData) is xcodebuild -derivedDataPath; with --out (or apple.build.out)
+// it defaults to <out>/DerivedData, so a build is hermetic per output folder (without --out Xcode keeps ~/Library/...).
+// --path-free (apple.build.pathFree) remaps the home folder, checkout, out and DerivedData out of the binary and the dSYM /
+// Symbols (Swift -debug-prefix-map / -file-prefix-map, clang -ffile-prefix-map), then scans the archive and stops before the
+// export when a home path is left; --scan-paths only scans and warns. A --out outside the home folder prints a hint.
 // Full xcodebuild output goes to <out>/xcodebuild-*.log; the terminal gets the result lines.
 // Local only: nothing is sent to App Store Connect except reads (build numbers, team id, profiles).
 import { existsSync, mkdirSync, readdirSync, readFileSync, rmSync, writeFileSync } from 'node:fs';
-import { homedir } from 'node:os';
+import { homedir, userInfo } from 'node:os';
 import { dirname, join, relative } from 'node:path';
 import { ascKeyFile } from '../lib/credentials';
 import type { Ctx } from '../lib/ctx';
 import { need } from '../lib/ctx';
 import { done, log, printJson, warn } from '../lib/log';
+import { derivedDataFor, archiveScanDirs, leakNeedles, leakProblem, outsideHome, pathFreeSettings, scanForPaths } from '../lib/path-free';
 import { pump } from '../lib/runner';
 import { parseMobileprovision, toXmlPlist } from '../lib/plist';
 import { nextBuildNumber } from '../lib/release';
@@ -148,6 +155,14 @@ export async function run(ctx: Ctx): Promise<void> {
   if (sub) target.notes.unshift(`Capacitor project: ${sub} (${sub}/${cap!.config}; the only one found; set apple.build.workspace to use another)`);
   const configuration = a.str('configuration', cfg.configuration ?? 'Release');
   const out = resolve(a.get('out') ?? cfg.out ?? 'build/ios');
+  const outChosen = !!(a.get('out') ?? cfg.out);
+  const derivedData = derivedDataFor({ flag: a.get('derived-data'), config: cfg.derivedData, out, outChosen, resolve });
+  const pathFree = a.has('path-free') || cfg.pathFree === true;
+  const scanPaths = pathFree || a.has('scan-paths');
+  const home = homedir();
+  const pfSettings = pathFree ? pathFreeSettings({ home, root, out, derivedData }) : [];
+  if (!pathFree && outsideHome(out, home)) warn(TAG, `--out is outside the home folder, but the build embeds the home folder and checkout paths (binary, dSYM, Symbols): add --path-free (or apple.build.pathFree) to remap them and scan the archive`);
+  if (pathFree && (!derivedData || !outsideHome(derivedData, home))) warn(TAG, `--path-free: DerivedData ${derivedData ? 'is' : 'defaults to'} inside the home folder, and dsymutil / Xcode record that path in the dSYM, so the scan below will find it. Build with --out (or --derived-data) outside the home folder, e.g. a shared folder.`);
   const version = a.get('version');
   if (version && !/^\d+(\.\d+){0,2}$/.test(version)) throw new Error('--version: x.y.z');
 
@@ -212,12 +227,12 @@ export async function run(ctx: Ctx): Promise<void> {
   const auth = style === 'automatic' ? authPreview : null;
   const steps = [
     ...(target.framework === 'flutter' ? [showCmd(flutterConfigArgs(buildNo, version), null)] : []),
-    showCmd(archiveArgs({ target, root, configuration, archivePath, version, build: buildNo, teamId: teamId ?? undefined, auth, settings: keychain ? keychainSigningArgs(keychain) : undefined }), auth),
+    showCmd(archiveArgs({ target, root, configuration, archivePath, version, build: buildNo, teamId: teamId ?? undefined, auth, settings: [...(keychain ? keychainSigningArgs(keychain) : []), ...pfSettings], derivedData }), auth),
     showCmd(exportArgs(archivePath, join(out, 'ExportOptions.plist'), exportPath, auth), auth),
   ];
   const unlockPreview = unlock ? unlockSteps(keychain ?? '<login keychain>', []).map(showSecurity) : [];
   const plan = { framework: target.framework, workspace: target.workspace ?? null, project: target.project ?? null, scheme: target.scheme, configuration,
-    version: version ?? '(project value)', build: buildNo, teamId, signingStyle: style, exportOptions: opts, out: relative(root, out) || '.', steps: [...unlockPreview, ...steps], notes: target.notes };
+    version: version ?? '(project value)', build: buildNo, derivedData: derivedData ?? '(Xcode default)', pathFree, teamId, signingStyle: style, exportOptions: opts, out: relative(root, out) || '.', steps: [...unlockPreview, ...steps], notes: target.notes };
   const webOpts = { config, root, cap, store: 'apple' as const, tag: TAG, noPrebuild: a.has('no-prebuild'), allowStale: a.has('allow-stale-web') };
   if (dry) {
     const web = await webStep({ ...webOpts, dry: true, quiet: json });
@@ -245,13 +260,21 @@ export async function run(ctx: Ctx): Promise<void> {
   if (rsync) log(TAG, `note: ${rsync} is first on your PATH; xcodebuild runs with /usr/bin first (a non-Apple rsync breaks Xcode's IPA export)`);
   mkdirSync(out, { recursive: true });
   writeFileSync(join(out, 'ExportOptions.plist'), plist);
+  let leaks = 0;
   const key = style === 'automatic' ? ascKeyFile(root) : null;
   const realAuth: AscAuth | null = key ? { keyPath: key.keyPath, keyId: key.keyId, issuerId: key.issuerId } : null;
   try {
     if (target.framework === 'flutter') await runLogged(flutterConfigArgs(build!, version), root, join(out, 'flutter-config.log'), showCmd(flutterConfigArgs(build!, version), null));
     shipPhase('build', `xcodebuild archive, build ${build}`);
-    const arch = archiveArgs({ target, root, configuration, archivePath, version, build: build!, teamId: teamId ?? undefined, auth: realAuth, settings: keychain ? keychainSigningArgs(keychain) : undefined });
+    const arch = archiveArgs({ target, root, configuration, archivePath, version, build: build!, teamId: teamId ?? undefined, auth: realAuth, settings: [...(keychain ? keychainSigningArgs(keychain) : []), ...pfSettings], derivedData });
     await runLogged(arch, root, join(out, 'xcodebuild-archive.log'), showCmd(arch, realAuth));
+    if (scanPaths) {
+      shipPhase('verify', 'scanning the archive for local paths');
+      const found = scanForPaths(archiveScanDirs(archivePath), leakNeedles({ home, user: userInfo().username, root }));
+      leaks = found.total;
+      const why = leakProblem(found, relative(root, archivePath));
+      if (why) { if (pathFree) throw new Error(why); warn(TAG, why.split(String.fromCharCode(10))[0]!); } else log(TAG, 'no local path in the archive (app, dSYMs, Symbols)');
+    }
     shipPhase('sign', 'xcodebuild -exportArchive (signing)');
     await exportIpa({ root, out, archivePath, exportPath, auth: realAuth });
   } finally { key?.cleanup(); }
@@ -265,7 +288,7 @@ export async function run(ctx: Ctx): Promise<void> {
   // ITMS-91064 (Invalid Binary after the upload): NSPrivacyTracking / NSPrivacyTrackingDomains of every manifest in the IPA
   const privacy = bundleTrackingIssues(ipaManifests(join(exportPath, ipa)));
   if (privacy.length) throw new Error(`${relative(root, join(exportPath, ipa))} was built, but Apple would refuse it at upload:\n${privacy.map(x => `  ${x}`).join('\n')}\nFix the manifest and build again.`);
-  const result = { ipa: join(exportPath, ipa), bundleId: info.bundleId, version: info.version, build: info.build, web: web.bundle };
+  const result = { ipa: join(exportPath, ipa), bundleId: info.bundleId, version: info.version, build: info.build, web: web.bundle, derivedData: derivedData ?? null, pathFree, ...(scanPaths ? { leaks } : {}) };
   writeFileSync(join(out, 'latest.json'), `${JSON.stringify(result, null, 2)}
 `);
   if (json) printJson(result);
diff --git a/cli/data/flags.json b/cli/data/flags.json
index 798cab7..9493636 100644
--- a/cli/data/flags.json
+++ b/cli/data/flags.json
@@ -73,6 +73,7 @@
    "allow-version-mismatch",
    "build-number",
    "configuration",
+   "derived-data",
    "env-file",
    "keychain",
    "keychain-unlock",
@@ -1201,6 +1202,7 @@
    "debug-dump",
    "declarations",
    "delay",
+   "derived-data",
    "detail",
    "device",
    "dir",
diff --git a/cli/lib/path-free.ts b/cli/lib/path-free.ts
new file mode 100644
index 0000000..4587520
--- /dev/null
+++ b/cli/lib/path-free.ts
@@ -0,0 +1,99 @@
+// Path-free iOS builds: no home folder, user name or checkout path inside the app binary or the archive's debug
+// symbols (a privacy gate over a shared release folder found hundreds of hits). Used by `apple build --path-free`.
+//   - derivedDataFor: DerivedData per output folder (hermetic), not ~/Library/Developer/Xcode/DerivedData
+//   - pathFreeSettings: xcodebuild build settings with Swift / clang prefix maps (dSYM and Symbols stay, paths are remapped)
+//   - scanArchiveLeaks / leakProblem: scan the archive's .app, dSYMs and Symbols for the home folder and the user name
+// Pure except scanArchiveLeaks (bounded file reads).
+import { existsSync, readdirSync, readFileSync, statSync } from 'node:fs';
+import { join, relative, sep } from 'node:path';
+import { posix } from 'node:path';
+
+const trim = (p: string): string => (p.length > 1 ? p.replace(/\/+$/, '') : p);
+
+/** DerivedData folder of a build: --derived-data, else apple.build.derivedData, else <out>/DerivedData when the output
+ *  folder was chosen (--out / apple.build.out), else null (Xcode's default under ~/Library). */
+export function derivedDataFor(o: { flag?: string; config?: string; out: string; outChosen: boolean; resolve: (p: string) => string }): string | null {
+  const given = o.flag ?? o.config;
+  if (given) return o.resolve(given);
+  return o.outChosen ? posix.join(o.out, 'DerivedData') : null;
+}
+
+/** True when `dir` is not inside `home`. */
+export const outsideHome = (dir: string, home: string): boolean => { const h = trim(home); return !!h && dir !== h && !dir.startsWith(`${h}/`); };
+
+export interface PathFreeInput { home: string; root: string; out: string; derivedData?: string | null }
+
+/** [from, to] prefix maps: the home folder, the checkout, the output folder and DerivedData, longest (most specific) first.
+ *  swiftc applies the FIRST matching map, clang the LAST: pathFreeSettings reverses the list for clang. */
+export function prefixMaps(i: PathFreeInput): [string, string][] {
+  const all: [string, string][] = [[trim(i.home), '/home'], [trim(i.root), '.'], [trim(i.out), '/out']];
+  if (i.derivedData) all.push([trim(i.derivedData), '/derived']);
+  const seen = new Set<string>();
+  return all.filter(([from]) => from.length > 1 && !seen.has(from) && seen.add(from)).sort((a, b) => b[0].length - a[0].length);
+}
+
+const q = (s: string): string => (/[\s"'$]/.test(s) ? `"${s.replace(/(["\$])/g, '\$1')}"` : s);
+
+/** xcodebuild build settings that remap every local path in Swift, C, C++ and Objective-C output and in DWARF. The
+ *  debug format is left alone (dwarf-with-dsym), so symbol upload keeps working. */
+export function pathFreeSettings(i: PathFreeInput): string[] {
+  const maps = prefixMaps(i);
+  const swift = maps.flatMap(([f, t]) => ['-debug-prefix-map', q(`${f}=${t}`), '-file-prefix-map', q(`${f}=${t}`)]);
+  const clang = [...maps].reverse().flatMap(([f, t]) => [q(`-ffile-prefix-map=${f}=${t}`)]);
+  // SWIFT_SERIALIZE_DEBUGGING_OPTIONS=NO: Xcode embeds the compiler's include paths, module cache and -ffile-compilation-dir
+  // (the checkout) in the binary's __swift_ast section; no prefix map reaches it. Only lldb's Swift expression evaluation
+  // uses it; crash symbolication (the dSYM's functions and lines) does not.
+  return ['SWIFT_SERIALIZE_DEBUGGING_OPTIONS=NO', `OTHER_SWIFT_FLAGS=$(inherited) ${swift.join(' ')}`, `OTHER_CFLAGS=$(inherited) ${clang.join(' ')}`, `OTHER_CPLUSPLUSFLAGS=$(inherited) ${clang.join(' ')}`];
+}
+
+export interface PathHit { file: string; kind: string; offset: number }
+
+/** The needles of a leak scan, named by kind so a report never prints the value: the home folder, /Users/<user>/ and the
+ *  checkout. DerivedData is no needle: outside the home folder it is not the user's (dsymutil and Xcode record it in the
+ *  dSYM and the __swift_ast section and no prefix map reaches it); inside the home folder the home needle finds it. */
+export function leakNeedles(i: { home: string; user: string; root: string }): { kind: string; value: string }[] {
+  const list = [{ kind: 'home folder', value: trim(i.home) + '/' }, { kind: 'user folder', value: `/Users/${i.user}/` }, { kind: 'checkout', value: trim(i.root) + '/' }];
+  const seen = new Set<string>();
+  return list.filter(n => n.value.length >= 6 && !seen.has(n.value) && seen.add(n.value));
+}
+
+const MAX_FILE = 600 * 1048576;
+
+/** Every needle occurrence in the files under `dirs` (all of them are counted; the first `perFile` offsets per file kept). */
+export function scanForPaths(dirs: string[], needles: { kind: string; value: string }[], perFile = 3): { hits: PathHit[]; total: number; files: number } {
+  const ns = needles.map(n => ({ kind: n.kind, b: Buffer.from(n.value) }));
+  const hits: PathHit[] = [];
+  const bad = new Set<string>();
+  let total = 0;
+  const walk = (base: string, d: string): void => {
+    let names: string[]; try { names = readdirSync(d); } catch { return; }
+    for (const name of names) {
+      const p = join(d, name);
+      let st; try { st = statSync(p); } catch { continue; }
+      if (st.isDirectory()) { walk(base, p); continue; }
+      if (!st.isFile() || st.size > MAX_FILE) continue;
+      const buf = readFileSync(p);
+      let kept = 0;
+      for (const { kind, b } of ns) {
+        for (let at = buf.indexOf(b); at >= 0; at = buf.indexOf(b, at + b.length)) {
+          total++; bad.add(p);
+          if (kept++ < perFile) hits.push({ file: relative(base, p).split(sep).join('/'), kind, offset: at });
+        }
+      }
+    }
+  };
+  for (const d of dirs) if (existsSync(d)) walk(d, d);
+  return { hits, total, files: bad.size };
+}
+
+/** What the archive holds that ships or symbolicates: Products (the .app, extensions, frameworks), dSYMs, Symbols. */
+export const archiveScanDirs = (archive: string): string[] => ['Products', 'dSYMs', 'Symbols'].map(x => join(archive, x));
+
+/** The refusal text of a path-free build that still has local paths, else null. Counts, kinds, file and offset only. */
+export function leakProblem(r: { hits: PathHit[]; total: number; files: number }, archive: string): string | null {
+  if (!r.total) return null;
+  const lines = r.hits.slice(0, 8).map(h => `  ${h.file} @${h.offset}: ${h.kind}`);
+  return `${r.total} local path${r.total === 1 ? '' : 's'} left in ${r.files} file${r.files === 1 ? '' : 's'} of ${archive} (home folder, user name or checkout):\n${lines.join('\n')}${r.hits.length > 8 ? '\n  ...' : ''}\n`
+    + 'Stopped before the export. Causes: #file / #filePath in Swift sources (no prefix map reaches those literals: use #fileID), a prebuilt framework or Pod that carries its own paths '
+    + '(rebuild it path-free), or DerivedData / --out inside the home folder (dsymutil and Xcode record that path: use --out or --derived-data outside it, e.g. a shared folder).';
+}
diff --git a/cli/lib/xcode.ts b/cli/lib/xcode.ts
index a961fd6..cccad53 100644
--- a/cli/lib/xcode.ts
+++ b/cli/lib/xcode.ts
@@ -18,6 +18,10 @@ export interface AppleBuildConfig {
   configuration?: string;
   /** Output folder for the archive, ExportOptions.plist, the IPA and logs. Default build/ios. */
   out?: string;
+  /** xcodebuild -derivedDataPath. Default <out>/DerivedData when the output folder is chosen (--out / out), else Xcode's own folder under ~/Library. */
+  derivedData?: string;
+  /** Remap the home folder, checkout, output folder and DerivedData out of the binary and the debug symbols, then scan the archive (same as --path-free). */
+  pathFree?: boolean;
 }
 
 export function validateAppleBuild(b: AppleBuildConfig | undefined): string[] {
@@ -26,6 +30,8 @@ export function validateAppleBuild(b: AppleBuildConfig | undefined): string[] {
   if (b.workspace && !b.workspace.endsWith('.xcworkspace')) e.push('apple.build.workspace: a path ending in .xcworkspace');
   if (b.project && !b.project.endsWith('.xcodeproj')) e.push('apple.build.project: a path ending in .xcodeproj');
   if (b.scheme !== undefined && !b.scheme.trim()) e.push('apple.build.scheme: empty');
+  if (b.derivedData !== undefined && (typeof b.derivedData !== 'string' || !b.derivedData.trim())) e.push('apple.build.derivedData: a folder path');
+  if (b.pathFree !== undefined && typeof b.pathFree !== 'boolean') e.push('apple.build.pathFree: true or false');
   return e;
 }
 
@@ -125,13 +131,13 @@ export interface AscAuth { keyPath: string; keyId: string; issuerId: string }
 
 const authArgs = (a: AscAuth | null): string[] => (a ? ['-allowProvisioningUpdates', '-authenticationKeyPath', a.keyPath, '-authenticationKeyID', a.keyId, '-authenticationKeyIssuerID', a.issuerId] : []);
 
-export interface ArchiveInput { target: XcodeTarget; root: string; configuration: string; archivePath: string; version?: string; build: string; teamId?: string; auth: AscAuth | null; /** extra build settings, e.g. OTHER_CODE_SIGN_FLAGS=--keychain <path> */ settings?: string[] }
+export interface ArchiveInput { target: XcodeTarget; root: string; configuration: string; archivePath: string; version?: string; build: string; teamId?: string; auth: AscAuth | null; /** extra build settings, e.g. OTHER_CODE_SIGN_FLAGS=--keychain <path> */ settings?: string[]; /** xcodebuild -derivedDataPath */ derivedData?: string | null }
 
 /** xcodebuild archive. Version / build go in as build settings (they beat the project's values). */
 export function archiveArgs(i: ArchiveInput): string[] {
   return ['xcodebuild', ...(i.target.workspace ? ['-workspace', join(i.root, i.target.workspace)] : ['-project', join(i.root, i.target.project!)]),
     '-scheme', i.target.scheme, '-configuration', i.configuration, '-destination', 'generic/platform=iOS', '-archivePath', i.archivePath,
-    ...authArgs(i.auth), 'archive', `CURRENT_PROJECT_VERSION=${i.build}`, ...(i.version ? [`MARKETING_VERSION=${i.version}`] : []),
+    ...(i.derivedData ? ['-derivedDataPath', i.derivedData] : []), ...authArgs(i.auth), 'archive', `CURRENT_PROJECT_VERSION=${i.build}`, ...(i.version ? [`MARKETING_VERSION=${i.version}`] : []),
     ...(i.teamId ? [`DEVELOPMENT_TEAM=${i.teamId}`] : []), ...(i.settings ?? [])];
 }
 
diff --git a/docs/pitfalls.md b/docs/pitfalls.md
index f3f01e7..ca3710c 100644
--- a/docs/pitfalls.md
+++ b/docs/pitfalls.md
@@ -63,6 +63,7 @@ fails without the fix.
 | 27 | 2026-10 | A real Play first release (an agent with a browser tool) found the steps no API does: the App category stayed "Not selected" (`play listing` cannot set it: edits.details has no category field); production had 0 countries (edits.countryAvailability is read-only); App content had ten cards with their own pages; the IARC questionnaire is one long page whose Yes answers reveal follow-ups, with an IARC Terms of Use agreement on page 1 and a final "Save" (not "Submit") on the Summary; Play's material checkboxes, like its radios, ignore native input; long evaluate calls timed out at 45 s; "Send changes for review" ignored a JS click; managed publishing is off by default, so approved means live. | Plans `play-store-settings`, `play-app-content` (+ one per card), `play-production-countries`, `play-production-release`; config `play.category` (Play's lists), `play.countries`, `play.managedPublishing`, `console.contentRating.details`, `console.appContent`, `social`, `products[].randomRewards`; every ask-owner answer in one batch; `check` warns without a category and counts the open App content answers; `validate` reports the category reminder and "production has 0 countries"; `play status` and `play release` say what is console-only; the IARC Terms box is never-press; material checkboxes get the inner [role=checkbox] click (plan and `console fill`); every plan ships `inPageLoop`. `tests/console-play-plans.test.ts`. |
 | 26 | 2026-10 | An agent using storebound spent hours handing the owner one click, command or answer at a time ("press Next", "download the CSV template", "now run the upload", a compliance question in the middle of a run): skills said "let the owner do it" / "by hand" for navigation, exports and uploads. | The first rule "Do it, don't ask" heads `docs/agents-core.md` (every generated adapter), README and the store-pitfalls skill: the agent does API calls, uploads, builds, exports, console navigation and forms itself; the owner presses only the final public or irreversible buttons and answers the facts no file proves in one batch at the start. `tests/do-it-dont-ask.test.ts` checks the rule is there and fails on skill text that hands navigation, draft saves, exports, uploads or form filling to the owner. |
 | 25 | 2026-10 | In a non-interactive shell `play build` stopped in Gradle with "SDK location not found" (no `ANDROID_HOME` there, `local.properties` gitignored) although the SDK was in `~/Library/Android/sdk`; `apple upload --no-wait --yes` sent the IPA for over 10 minutes without a line (progress every 10th part only, no per-part or per-call timeout). | `resolveAndroidSdk` (ANDROID_HOME, ANDROID_SDK_ROOT, `sdk.dir` in local.properties, the Android Studio default folder; only folders with platforms/ or platform-tools/) hands the SDK to Gradle in the environment, never writes local.properties, stops before Gradle with the places checked; `doctor` shows it (`cli/lib/tools.ts`, `cli/play/build.ts`, `cli/doctor.ts`). `apple upload` prints the size, a line per part and a 20 s heartbeat (api, altool, processing wait), per-part and per-call timeouts, `--timeout` exits 7 with the resume hint (`sendParts` in `cli/apple/upload.ts`, `cli/lib/progress.ts`; `tests/tools-path.test.ts`, `tests/build-sign.test.ts`, `tests/upload-progress.test.ts`). |
+| 25 | 2026-10 | `apple build --out <shared dir>` still used `~/Library/Developer/Xcode/DerivedData`, and the app binary plus the archive's dSYMs / `Symbols/*.symbols` held the home folder, user name and checkout path (543 privacy-gate hits). | `--derived-data` / default `<out>/DerivedData`, `--path-free` (Swift and clang prefix maps) with an archive scan that stops before the export: `cli/lib/path-free.ts`, `tests/path-free.test.ts`; store-pitfalls 124. |
 | 24 | 2026-10 | `flow run release --apply --yes` ran `apple upload --no-wait`, which printed "not a terminal: re-run with --yes to confirm" and declined, yet the flow logged "4/13 upload: ok" and went on to `apple testflight wait` for a build that was never uploaded: a declined confirmation exited 0, and the flow's `--yes` never reached the steps. | `confirm()` (`cli/lib/ctx.ts`): every decline (answered no, not a terminal without `--yes`, under serve) prints `declined: <reason>` and exits 3 (`DECLINED_EXIT`). `flow run` reports "step N declined: <reason>" (status `declined`) and stops; `--apply --yes` adds `--yes` to write steps only (`planStep`, `declinedReason`; `tests/flow.test.ts`). |
 | 23 | 2026-10 | Capacitor: native build ships old web assets. `flow run release --apply` went straight into `apple build` (xcodebuild archive) with `ios/App/App/public` and `android/app/src/main/assets/public` 3.5 hours older than the latest source commit: the native projects hold the copy `npx cap sync` made last, and nothing ran the web build + cap sync first, so the old game would have shipped. | New `build.prebuild` (per store `apple.prebuild` / `play.prebuild`): `apple build` / `play build` run it first (printed, streamed, nonzero exit stops; `--dry` only prints; `--no-prebuild`; once per `flow run` through `STOREBOUND_PREBUILD_DONE`). After it, a Capacitor project's copied `public/index.html` must be newer than the last commit outside ios/ android/ node_modules/ store/ .storebound/ and `<webDir>/index.html`, else the build stops ("web assets are older than the source ..."; `--allow-stale-web` overrides). `check` warns when stale without a prebuild; build output and dry plan show the bundle's sha256 + mtime. Monorepo (`apps/native` with its own capacitor.config.ts, android/, ios/; `play build` failed with "no Gradle project ... in android or ."): the one Capacitor project one or two levels down is found and named, several ask for `play.build.dir` / `apple.build.*` (`cli/lib/web-assets.ts`, `tests/web-assets.test.ts`). |
 | 22 | 2026-10 | `play build` built a good AAB (Capacitor 8 / AGP), then failed its own check with "AAB manifest without package / versionCode". The aapt2 proto manifest was read with element field numbers one too high (name 4, attribute 5, child 6 instead of Resources.proto's 3, 4, 5). The test fixture came from the same wrong encoder, so the tests passed. | `aabInfo` / `encodeProtoManifest` in `cli/lib/gradle.ts` follow Resources.proto. `tests/build-sign.test.ts` builds the manifest bytes by tag, without the encoder, and the parser was checked against real AGP bundles. Lesson: a parser's fixture must not come from the same code's encoder. |
diff --git a/skills/build-and-sign/SKILL.md b/skills/build-and-sign/SKILL.md
index 77c0e52..844e24a 100644
--- a/skills/build-and-sign/SKILL.md
+++ b/skills/build-and-sign/SKILL.md
@@ -64,6 +64,11 @@ when the owner said so for this run). The MCP server offers only `apple_signing_
    unlocks that one; `signing ensure --keychain <path>` imports the key + certificate into it). It
    also stops before the archive when a target's App Group is missing (manual: its installed profile; automatic: the profile
    the API lists; store-pitfalls 121; `--allow-app-group-gap` overrides).
+   `--out <dir>` also puts DerivedData in `<out>/DerivedData` (`--derived-data <dir>` / `apple.build.derivedData`
+   overrides), so a build is hermetic per output folder. Building under a shared folder, or anything a privacy gate scans:
+   add `--path-free` (`apple.build.pathFree`): Swift and clang prefix maps keep the home folder, user name and checkout
+   out of the binary and the archive's dSYMs / Symbols, and the build stops before the export on a leftover hit
+   (store-pitfalls 124). `--scan-paths` scans without remapping.
    - Capacitor: the archive ships the web assets `npx cap sync` copied last. Set `build.prebuild` (e.g.
      `"npm run build && npx cap sync"`; per store `apple.prebuild` / `play.prebuild`) and `apple build` / `play build`
      run it first (once per `flow run`; `--no-prebuild` skips it). Then the copied `public/index.html` must be newer
diff --git a/skills/store-pitfalls/SKILL.md b/skills/store-pitfalls/SKILL.md
index 48595dd..aa40e01 100644
--- a/skills/store-pitfalls/SKILL.md
+++ b/skills/store-pitfalls/SKILL.md
@@ -1533,3 +1533,17 @@ that fails without the fix (see CONTRIBUTING.md).
   update-or-first from the config instead of the store.
 - **Guard:** `cli/lib/release-kind.ts` (the kind from the store, the policy), `tests/update-gate.test.ts` (fake stores:
   update goes through, first release is exit 3, already there is exit 7), docs/bypass.md "Updates are agent steps".
+
+## 124. iOS builds leak the home folder: DerivedData in ~/Library and local paths in the binary and the symbols
+
+- **Symptom:** a release pipeline building under a shared folder outside the user's home (`apple build --out <dir>`)
+  still wrote DerivedData to `~/Library/Developer/Xcode/DerivedData`, and the app binary and the `.xcarchive`
+  `Symbols/*.symbols` / dSYMs held the home folder, the user name and the checkout path (a privacy gate counted 543 hits).
+- **Do:** `storebound apple build --out <dir> --path-free` (or `apple.build.pathFree: true`). With `--out` DerivedData is
+  `<out>/DerivedData` (`--derived-data <dir>` / `apple.build.derivedData` to choose); `--path-free` passes Swift
+  `-debug-prefix-map` + `-file-prefix-map` and clang `-ffile-prefix-map` for the home folder, checkout, out and DerivedData,
+  keeps dwarf-with-dsym (symbol upload still works) and scans the archive's Products, dSYMs and Symbols before the export.
+  A hit stops the build with the count and the first file + offsets. Xcode's own toolchain paths (`/Applications/Xcode.app`)
+  are not the user's and are not hits. A prebuilt vendored framework carries its own paths: rebuild it path-free.
+- **Never:** point a shared build folder at the default DerivedData, or run the privacy scan only after the upload.
+- **Guard:** `cli/lib/path-free.ts`, `tests/path-free.test.ts`, the hint when `--out` is outside the home folder.
diff --git a/tests/build-sign.test.ts b/tests/build-sign.test.ts
index 8a491dc..1b91c9f 100644
--- a/tests/build-sign.test.ts
+++ b/tests/build-sign.test.ts
@@ -408,6 +408,23 @@ describe('CLI dry runs (no store access)', () => {
     expect(j.exportOptions.method).toBe('app-store-connect');
     expect(j.steps[0]).toContain('CURRENT_PROJECT_VERSION=42');
     expect(j.steps[0]).toContain('-authenticationKeyPath $ASC_P8');
+    // no --out: Xcode's DerivedData stays, nothing remapped
+    expect(j).toMatchObject({ derivedData: '(Xcode default)', pathFree: false });
+    expect(j.steps[0]).not.toContain('-derivedDataPath');
+    expect(j.steps[0]).not.toContain('prefix-map');
+  });
+  test('apple build --dry --json: --out makes DerivedData hermetic, --path-free adds the prefix maps', () => {
+    const d = project('cli-apple-dd');
+    const r = cli(d, ['apple', 'build', '--dry', '--json', '--build-number', '42', '--out', 'out/ios', '--path-free']);
+    expect(r.exitCode).toBe(0);
+    const j = JSON.parse(r.stdout.toString());
+    expect(j.pathFree).toBe(true);
+    expect(j.derivedData.split(String.fromCharCode(92)).join('/')).toMatch(/out\/ios\/DerivedData$/);
+    expect(j.steps[0]).toContain('-derivedDataPath');
+    expect(j.steps[0]).toContain('OTHER_SWIFT_FLAGS=');
+    expect(j.steps[0]).toContain('-ffile-prefix-map=');
+    const e = cli(d, ['apple', 'build', '--dry', '--json', '--build-number', '42', '--out', 'out/ios', '--derived-data', 'dd']);
+    expect(JSON.parse(e.stdout.toString()).derivedData.split(String.fromCharCode(92)).join('/')).toMatch(/\/dd$/);
   });
   test('play build --dry --json: task, versionCode, signing source', () => {
     const r = cli(project('cli-play'), ['play', 'build', '--dry', '--json', '--version-code', '12']);
diff --git a/tests/path-free.test.ts b/tests/path-free.test.ts
new file mode 100644
index 0000000..8278817
--- /dev/null
+++ b/tests/path-free.test.ts
@@ -0,0 +1,100 @@
+import { describe, expect, test } from 'bun:test';
+import { mkdirSync, mkdtempSync, rmSync, writeFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import { archiveScanDirs, derivedDataFor, leakNeedles, leakProblem, outsideHome, pathFreeSettings, prefixMaps, scanForPaths } from '../cli/lib/path-free';
+import { archiveArgs, validateAppleBuild } from '../cli/lib/xcode';
+
+const resolve = (p: string): string => (p.startsWith('/') ? p : `/proj/${p}`);
+const t = { framework: 'native' as const, project: 'App.xcodeproj', scheme: 'App', notes: [] };
+
+describe('derived data', () => {
+  test('flag beats config beats <out>/DerivedData; without a chosen out Xcode keeps its default', () => {
+    expect(derivedDataFor({ flag: '/dd', config: 'cfg', out: '/o', outChosen: true, resolve })).toBe('/dd');
+    expect(derivedDataFor({ config: 'cfg/dd', out: '/o', outChosen: true, resolve })).toBe('/proj/cfg/dd');
+    expect(derivedDataFor({ out: '/shared/ci/out', outChosen: true, resolve })).toBe('/shared/ci/out/DerivedData');
+    expect(derivedDataFor({ out: '/proj/build/ios', outChosen: false, resolve })).toBeNull();
+  });
+  test('archive gets -derivedDataPath only when set', () => {
+    const base = { target: t, root: '/p', configuration: 'Release', archivePath: '/o/App.xcarchive', build: '1', auth: null };
+    const withDd = archiveArgs({ ...base, derivedData: '/o/DerivedData' });
+    expect(withDd.slice(withDd.indexOf('-archivePath'), withDd.indexOf('-archivePath') + 4)).toEqual(['-archivePath', '/o/App.xcarchive', '-derivedDataPath', '/o/DerivedData']);
+    expect(archiveArgs(base)).not.toContain('-derivedDataPath');
+    expect(archiveArgs({ ...base, derivedData: null })).not.toContain('-derivedDataPath');
+  });
+  test('config keys are validated', () => {
+    expect(validateAppleBuild({ derivedData: 'dd', pathFree: true })).toEqual([]);
+    expect(validateAppleBuild({ derivedData: ' ' })).toHaveLength(1);
+    expect(validateAppleBuild({ pathFree: 'yes' as unknown as boolean })).toHaveLength(1);
+  });
+  test('outsideHome', () => {
+    expect(outsideHome('/srv/shared/ci/out', '/Users/you')).toBe(true);
+    expect(outsideHome('/Users/you/proj/out', '/Users/you')).toBe(false);
+    expect(outsideHome('/Users/you-too/out', '/Users/you')).toBe(true);
+  });
+});
+
+describe('prefix maps', () => {
+  const i = { home: '/Users/you', root: '/Users/you/work/app', out: '/Users/you/work/app/build/ios', derivedData: '/Users/you/work/app/build/ios/DerivedData' };
+  test('longest first (swiftc takes the first match; clang gets the list reversed)', () => {
+    expect(prefixMaps(i).map(m => m[0])).toEqual(['/Users/you/work/app/build/ios/DerivedData', '/Users/you/work/app/build/ios', '/Users/you/work/app', '/Users/you']);
+  });
+  test('duplicates and a root slash are dropped', () => {
+    expect(prefixMaps({ home: '/h/', root: '/h', out: '/h', derivedData: null }).map(m => m[0])).toEqual(['/h']);
+  });
+  test('settings carry swift and clang flags and keep $(inherited)', () => {
+    const s = pathFreeSettings(i);
+    expect(s.map(x => x.split('=')[0])).toEqual(['SWIFT_SERIALIZE_DEBUGGING_OPTIONS', 'OTHER_SWIFT_FLAGS', 'OTHER_CFLAGS', 'OTHER_CPLUSPLUSFLAGS']);
+    expect(s[0]!).toBe('SWIFT_SERIALIZE_DEBUGGING_OPTIONS=NO');
+    expect(s[1]!).toContain('$(inherited) -debug-prefix-map /Users/you/work/app/build/ios/DerivedData=/derived -file-prefix-map /Users/you/work/app/build/ios/DerivedData=/derived');
+    expect(s[1]!.endsWith('-file-prefix-map /Users/you=/home')).toBe(true);
+    expect(s[1]!.indexOf('app=.')).toBeLessThan(s[1]!.indexOf('/Users/you=/home'));
+    // clang: the last match wins, so the home folder comes first
+    expect(s[2]!.indexOf('-ffile-prefix-map=/Users/you=/home')).toBeLessThan(s[2]!.indexOf('-ffile-prefix-map=/Users/you/work/app/build/ios/DerivedData=/derived'));
+    expect(s.join()).not.toContain('DEBUG_INFORMATION_FORMAT');
+  });
+  test('a path with spaces is quoted', () => {
+    const s = pathFreeSettings({ home: '/Users/you', root: '/Users/you/Visual Studio Workspaces/app', out: '/Users/you/o' });
+    expect(s[1]!).toContain('"/Users/you/Visual Studio Workspaces/app=."');
+    expect(s[2]!).toContain('"-ffile-prefix-map=/Users/you/Visual Studio Workspaces/app=."');
+  });
+});
+
+describe('leak scan', () => {
+  const dir = mkdtempSync(join(tmpdir(), 'pf-'));
+  const arch = join(dir, 'App.xcarchive');
+  mkdirSync(join(arch, 'Products/Applications/App.app'), { recursive: true });
+  mkdirSync(join(arch, 'dSYMs/App.app.dSYM'), { recursive: true });
+  mkdirSync(join(arch, 'Symbols'), { recursive: true });
+  writeFileSync(join(arch, 'Products/Applications/App.app/App'), Buffer.concat([Buffer.from([0, 1, 2]), Buffer.from('/Users/you/work/app/Sources/A.swift'), Buffer.from([0]), Buffer.from('/Users/you/Library/Developer/Xcode/DerivedData/x')]));
+  writeFileSync(join(arch, 'dSYMs/App.app.dSYM/clean'), 'DW_AT_comp_dir ./Sources /Applications/Xcode.app/Contents');
+  writeFileSync(join(arch, 'Symbols/0.symbols'), 'path /Users/you/work/app/B.swift');
+  const needles = leakNeedles({ home: '/Users/you', user: 'you', root: '/Users/you/work/app' });
+
+  test('needles are named by kind; /Users/<user>/ is dropped when it equals the home folder', () => {
+    expect(needles.map(n => n.kind)).toEqual(['home folder', 'checkout']);
+  });
+  test('counts hits, keeps first offsets per file, scans app, dSYMs and Symbols', () => {
+    const r = scanForPaths(archiveScanDirs(arch), needles);
+    expect(r.files).toBe(2);
+    expect(r.total).toBeGreaterThanOrEqual(5);
+    const app = r.hits.filter(h => h.file === 'Applications/App.app/App');
+    expect(app.length).toBe(3);
+    expect(app[0]!.offset).toBe(3);
+    expect(r.hits.some(h => h.file === '0.symbols')).toBe(true);
+    expect(r.hits.some(h => h.file.includes('clean'))).toBe(false);
+  });
+  test('the report has counts, kinds, files and offsets but never the paths', () => {
+    const msg = leakProblem(scanForPaths(archiveScanDirs(arch), needles), 'build/App.xcarchive')!;
+    expect(msg).toContain('local paths left in 2 files');
+    expect(msg).toContain('Applications/App.app/App @3: home folder');
+    expect(msg).not.toContain('/Users/you');
+  });
+  test('a clean archive has no problem', () => {
+    const clean = join(dir, 'Clean.xcarchive');
+    mkdirSync(join(clean, 'Products'), { recursive: true });
+    writeFileSync(join(clean, 'Products/a'), 'x /Applications/Xcode.app/y');
+    expect(leakProblem(scanForPaths(archiveScanDirs(clean), needles), 'c')).toBeNull();
+    rmSync(dir, { recursive: true, force: true });
+  });
+});

From efa9503a505808772d333833f8308af6699f97b0 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Mon, 26 Oct 2026 19:16:46 +0700
Subject: [PATCH 046/126] storebound 0.8.54: version in package.json and every
 copy, CHANGELOG 0.8.54 section

---
 .claude-plugin/marketplace.json        | 2 +-
 .claude-plugin/plugin.json             | 2 +-
 .codex-plugin/plugin.json              | 2 +-
 CHANGELOG.md                           | 2 ++
 apps/desktop/package.json              | 2 +-
 apps/desktop/src-tauri/Cargo.lock      | 2 +-
 apps/desktop/src-tauri/Cargo.toml      | 2 +-
 apps/desktop/src-tauri/tauri.conf.json | 2 +-
 gemini-extension.json                  | 2 +-
 package.json                           | 2 +-
 10 files changed, 11 insertions(+), 9 deletions(-)

diff --git a/.claude-plugin/marketplace.json b/.claude-plugin/marketplace.json
index f3c9e29..62a6889 100644
--- a/.claude-plugin/marketplace.json
+++ b/.claude-plugin/marketplace.json
@@ -9,7 +9,7 @@
       "name": "storebound",
       "source": ".",
       "description": "Take a mobile app or game from nothing to Submit for review on both stores: skills for every store step and questionnaire plus the storebound CLI and MCP server.",
-      "version": "0.8.53",
+      "version": "0.8.54",
       "category": "development",
       "tags": [
         "mobile",
diff --git a/.claude-plugin/plugin.json b/.claude-plugin/plugin.json
index 82bc2fd..96538a0 100644
--- a/.claude-plugin/plugin.json
+++ b/.claude-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.53",
+  "version": "0.8.54",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/.codex-plugin/plugin.json b/.codex-plugin/plugin.json
index e7ab8b8..4f16b98 100644
--- a/.codex-plugin/plugin.json
+++ b/.codex-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.53",
+  "version": "0.8.54",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/CHANGELOG.md b/CHANGELOG.md
index b471f55..8398677 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,8 @@
 
 ## Unreleased
 
+## 0.8.54 · 2026-10-26
+
 - `apple build` is hermetic and can be path-free. `--derived-data <dir>` (`apple.build.derivedData`) is xcodebuild `-derivedDataPath`; with `--out` (or `apple.build.out`) it defaults to `<out>/DerivedData` instead of `~/Library/Developer/Xcode/DerivedData` (without `--out` Xcode's folder stays). `--path-free` (`apple.build.pathFree`) remaps the home folder, checkout, out and DerivedData out of the app binary and the archive's dSYMs / Symbols (Swift `-debug-prefix-map` / `-file-prefix-map`, clang `-ffile-prefix-map`; dwarf-with-dsym stays, symbol upload keeps working), scans the archive and stops before the export with the hit count and the first file + offsets (never the paths). `--scan-paths` only scans and warns. A `--out` outside the home folder prints a hint. `--json` / `latest.json` carry `derivedData`, `pathFree` and `leaks`. Store-pitfalls 124.
 
 ## 0.8.53 · 2026-10-26
diff --git a/apps/desktop/package.json b/apps/desktop/package.json
index a8430ee..a81b07a 100644
--- a/apps/desktop/package.json
+++ b/apps/desktop/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@storebound/desktop",
-  "version": "0.8.53",
+  "version": "0.8.54",
   "private": true,
   "license": "MIT",
   "type": "module",
diff --git a/apps/desktop/src-tauri/Cargo.lock b/apps/desktop/src-tauri/Cargo.lock
index 9d3ef94..35039ca 100644
--- a/apps/desktop/src-tauri/Cargo.lock
+++ b/apps/desktop/src-tauri/Cargo.lock
@@ -4096,7 +4096,7 @@ checksum = "a2eb9349b6444b326872e140eb1cf5e7c522154d69e7a0ffb0fb81c06b37543f"
 
 [[package]]
 name = "storebound-desktop"
-version = "0.8.53"
+version = "0.8.54"
 dependencies = [
  "base64 0.22.1",
  "getrandom 0.3.4",
diff --git a/apps/desktop/src-tauri/Cargo.toml b/apps/desktop/src-tauri/Cargo.toml
index 1ee00eb..4b0f4f4 100644
--- a/apps/desktop/src-tauri/Cargo.toml
+++ b/apps/desktop/src-tauri/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "storebound-desktop"
-version = "0.8.53"
+version = "0.8.54"
 description = "storebound desktop: every game's releases on both stores in one window"
 license = "MIT"
 edition = "2021"
diff --git a/apps/desktop/src-tauri/tauri.conf.json b/apps/desktop/src-tauri/tauri.conf.json
index 702ed71..c57141c 100644
--- a/apps/desktop/src-tauri/tauri.conf.json
+++ b/apps/desktop/src-tauri/tauri.conf.json
@@ -2,7 +2,7 @@
   "$schema": "https://schema.tauri.app/config/2",
   "productName": "storebound",
   "mainBinaryName": "storebound-desktop",
-  "version": "0.8.53",
+  "version": "0.8.54",
   "identifier": "dev.storebound.desktop",
   "build": {
     "frontendDist": "../dist",
diff --git a/gemini-extension.json b/gemini-extension.json
index e7e74f9..4fffc39 100644
--- a/gemini-extension.json
+++ b/gemini-extension.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.53",
+  "version": "0.8.54",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "contextFileName": "GEMINI.md",
   "mcpServers": {
diff --git a/package.json b/package.json
index 5b29575..616eead 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.53",
+  "version": "0.8.54",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every store questionnaire (incl. account deletion and App Review demo accounts), privacy, icons, screenshots and previews, TestFlight. After launch: crash vitals, review replies, price sheets, analytics and Product Page Optimization. One config, a CLI (Node 20+ or Bun), an MCP server and Agent Skills for your AI coding agent.",
   "license": "MIT",
   "author": "CRTkafa",

From 0858f4e538f28e0f25372ee0d8521292f7958da0 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Mon, 26 Oct 2026 20:13:11 +0700
Subject: [PATCH 047/126] path-free: a shared build folder outside home is not
 a leak (only home and user-name paths are private)

---
 CHANGELOG.md            | 2 ++
 cli/lib/path-free.ts    | 6 +++++-
 tests/path-free.test.ts | 4 ++++
 3 files changed, 11 insertions(+), 1 deletion(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 8398677..60e8bc2 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,8 @@
 
 ## Unreleased
 
+- `apple build --path-free`: a checkout in a shared build folder outside the home folder is no longer a leak needle (dsymutil and the module cache record it; only home and user-name paths count).
+
 ## 0.8.54 · 2026-10-26
 
 - `apple build` is hermetic and can be path-free. `--derived-data <dir>` (`apple.build.derivedData`) is xcodebuild `-derivedDataPath`; with `--out` (or `apple.build.out`) it defaults to `<out>/DerivedData` instead of `~/Library/Developer/Xcode/DerivedData` (without `--out` Xcode's folder stays). `--path-free` (`apple.build.pathFree`) remaps the home folder, checkout, out and DerivedData out of the app binary and the archive's dSYMs / Symbols (Swift `-debug-prefix-map` / `-file-prefix-map`, clang `-ffile-prefix-map`; dwarf-with-dsym stays, symbol upload keeps working), scans the archive and stops before the export with the hit count and the first file + offsets (never the paths). `--scan-paths` only scans and warns. A `--out` outside the home folder prints a hint. `--json` / `latest.json` carry `derivedData`, `pathFree` and `leaks`. Store-pitfalls 124.
diff --git a/cli/lib/path-free.ts b/cli/lib/path-free.ts
index 4587520..21b5f95 100644
--- a/cli/lib/path-free.ts
+++ b/cli/lib/path-free.ts
@@ -52,7 +52,11 @@ export interface PathHit { file: string; kind: string; offset: number }
  *  checkout. DerivedData is no needle: outside the home folder it is not the user's (dsymutil and Xcode record it in the
  *  dSYM and the __swift_ast section and no prefix map reaches it); inside the home folder the home needle finds it. */
 export function leakNeedles(i: { home: string; user: string; root: string }): { kind: string; value: string }[] {
-  const list = [{ kind: 'home folder', value: trim(i.home) + '/' }, { kind: 'user folder', value: `/Users/${i.user}/` }, { kind: 'checkout', value: trim(i.root) + '/' }];
+  // the checkout is a needle only when it says something about the person: inside the home folder or naming the user.
+  // A shared build folder (/Users/Shared/..., /opt/...) recorded by dsymutil and Xcode's module cache is not private
+  const root = trim(i.root) + '/';
+  const personal = root.startsWith(trim(i.home) + '/') || (i.user.length >= 3 && root.includes(`/${i.user}/`));
+  const list = [{ kind: 'home folder', value: trim(i.home) + '/' }, { kind: 'user folder', value: `/Users/${i.user}/` }, ...(personal ? [{ kind: 'checkout', value: root }] : [])];
   const seen = new Set<string>();
   return list.filter(n => n.value.length >= 6 && !seen.has(n.value) && seen.add(n.value));
 }
diff --git a/tests/path-free.test.ts b/tests/path-free.test.ts
index 8278817..0a2e628 100644
--- a/tests/path-free.test.ts
+++ b/tests/path-free.test.ts
@@ -74,6 +74,10 @@ describe('leak scan', () => {
   test('needles are named by kind; /Users/<user>/ is dropped when it equals the home folder', () => {
     expect(needles.map(n => n.kind)).toEqual(['home folder', 'checkout']);
   });
+  test('a shared build folder outside the home folder is not a needle (dsymutil / module cache paths there are fine)', () => {
+    expect(leakNeedles({ home: '/Users/you', user: 'you', root: '/Users/Shared/ship/app/abc' }).map(n => n.kind)).toEqual(['home folder']);
+    expect(leakNeedles({ home: '/Users/you', user: 'you', root: '/opt/builds/you/app' }).map(n => n.kind)).toEqual(['home folder', 'checkout']);
+  });
   test('counts hits, keeps first offsets per file, scans app, dSYMs and Symbols', () => {
     const r = scanForPaths(archiveScanDirs(arch), needles);
     expect(r.files).toBe(2);

From 3dc3104bbca558ee886326b7a979e0cb01852219 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Mon, 26 Oct 2026 20:17:46 +0700
Subject: [PATCH 048/126] scrub: /Users/Shared is the system shared folder, not
 a home path

---
 tools/scrub.ts | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tools/scrub.ts b/tools/scrub.ts
index f84cf66..e0569a1 100644
--- a/tools/scrub.ts
+++ b/tools/scrub.ts
@@ -27,7 +27,7 @@ export const RULES: Rule[] = [
   { id: 'private-name', re: new RegExp(['Yon', 'ga'].join(''), 'gi') },
   { id: 'google-api-key', re: new RegExp('AI' + 'za[0-9A-Za-z_-]{35}', 'g') },
   // absolute home folders leak a machine's account name (placeholders like /Users/you are fine)
-  { id: 'home-path', re: /(?:\/Users\/|\/home\/|[A-Z]:\\Users\\)(?!(?:you|me|user|runner|name|example)\b)[A-Za-z0-9._-]+/g },
+  { id: 'home-path', re: /(?:\/Users\/|\/home\/|[A-Z]:\\Users\\)(?!(?:you|me|user|runner|name|example|Shared)\b)[A-Za-z0-9._-]+/g },
 ];
 
 const SKIP = /(^|\/)(bun\.lock|Cargo\.lock|LICENSE)$|\.(png|jpe?g|webp|gif|ico|icns|woff2?|ttf|otf|p8|p12|aab|ipa|zip)$/i;

From 47638621784cc0b23ab2362f1163d97b0dc643fb Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Mon, 26 Oct 2026 20:21:17 +0700
Subject: [PATCH 049/126] storebound 0.8.55: version in package.json and every
 copy, CHANGELOG 0.8.55 section

---
 .claude-plugin/marketplace.json        | 2 +-
 .claude-plugin/plugin.json             | 2 +-
 .codex-plugin/plugin.json              | 2 +-
 CHANGELOG.md                           | 2 ++
 apps/desktop/package.json              | 2 +-
 apps/desktop/src-tauri/Cargo.lock      | 2 +-
 apps/desktop/src-tauri/Cargo.toml      | 2 +-
 apps/desktop/src-tauri/tauri.conf.json | 2 +-
 gemini-extension.json                  | 2 +-
 package.json                           | 2 +-
 10 files changed, 11 insertions(+), 9 deletions(-)

diff --git a/.claude-plugin/marketplace.json b/.claude-plugin/marketplace.json
index 62a6889..9ec05ee 100644
--- a/.claude-plugin/marketplace.json
+++ b/.claude-plugin/marketplace.json
@@ -9,7 +9,7 @@
       "name": "storebound",
       "source": ".",
       "description": "Take a mobile app or game from nothing to Submit for review on both stores: skills for every store step and questionnaire plus the storebound CLI and MCP server.",
-      "version": "0.8.54",
+      "version": "0.8.55",
       "category": "development",
       "tags": [
         "mobile",
diff --git a/.claude-plugin/plugin.json b/.claude-plugin/plugin.json
index 96538a0..d36edb9 100644
--- a/.claude-plugin/plugin.json
+++ b/.claude-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.54",
+  "version": "0.8.55",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/.codex-plugin/plugin.json b/.codex-plugin/plugin.json
index 4f16b98..91c89f9 100644
--- a/.codex-plugin/plugin.json
+++ b/.codex-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.54",
+  "version": "0.8.55",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 60e8bc2..6a1d003 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,8 @@
 
 ## Unreleased
 
+## 0.8.55 · 2026-10-26
+
 - `apple build --path-free`: a checkout in a shared build folder outside the home folder is no longer a leak needle (dsymutil and the module cache record it; only home and user-name paths count).
 
 ## 0.8.54 · 2026-10-26
diff --git a/apps/desktop/package.json b/apps/desktop/package.json
index a81b07a..fd1bcc3 100644
--- a/apps/desktop/package.json
+++ b/apps/desktop/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@storebound/desktop",
-  "version": "0.8.54",
+  "version": "0.8.55",
   "private": true,
   "license": "MIT",
   "type": "module",
diff --git a/apps/desktop/src-tauri/Cargo.lock b/apps/desktop/src-tauri/Cargo.lock
index 35039ca..3ef0c4e 100644
--- a/apps/desktop/src-tauri/Cargo.lock
+++ b/apps/desktop/src-tauri/Cargo.lock
@@ -4096,7 +4096,7 @@ checksum = "a2eb9349b6444b326872e140eb1cf5e7c522154d69e7a0ffb0fb81c06b37543f"
 
 [[package]]
 name = "storebound-desktop"
-version = "0.8.54"
+version = "0.8.55"
 dependencies = [
  "base64 0.22.1",
  "getrandom 0.3.4",
diff --git a/apps/desktop/src-tauri/Cargo.toml b/apps/desktop/src-tauri/Cargo.toml
index 4b0f4f4..ed11aa9 100644
--- a/apps/desktop/src-tauri/Cargo.toml
+++ b/apps/desktop/src-tauri/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "storebound-desktop"
-version = "0.8.54"
+version = "0.8.55"
 description = "storebound desktop: every game's releases on both stores in one window"
 license = "MIT"
 edition = "2021"
diff --git a/apps/desktop/src-tauri/tauri.conf.json b/apps/desktop/src-tauri/tauri.conf.json
index c57141c..f1b385c 100644
--- a/apps/desktop/src-tauri/tauri.conf.json
+++ b/apps/desktop/src-tauri/tauri.conf.json
@@ -2,7 +2,7 @@
   "$schema": "https://schema.tauri.app/config/2",
   "productName": "storebound",
   "mainBinaryName": "storebound-desktop",
-  "version": "0.8.54",
+  "version": "0.8.55",
   "identifier": "dev.storebound.desktop",
   "build": {
     "frontendDist": "../dist",
diff --git a/gemini-extension.json b/gemini-extension.json
index 4fffc39..c2603fb 100644
--- a/gemini-extension.json
+++ b/gemini-extension.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.54",
+  "version": "0.8.55",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "contextFileName": "GEMINI.md",
   "mcpServers": {
diff --git a/package.json b/package.json
index 616eead..9655b43 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.54",
+  "version": "0.8.55",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every store questionnaire (incl. account deletion and App Review demo accounts), privacy, icons, screenshots and previews, TestFlight. After launch: crash vitals, review replies, price sheets, analytics and Product Page Optimization. One config, a CLI (Node 20+ or Bun), an MCP server and Agent Skills for your AI coding agent.",
   "license": "MIT",
   "author": "CRTkafa",

From 85cf494c0a580d333351d9f9057f87d436fdae96 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Tue, 27 Oct 2026 17:07:37 +0700
Subject: [PATCH 050/126] apple: release type (apple.releaseType, apple release
 --after-approval|--manual), device-family preflight, TestFlight invite needs
 an installable build

---
 CHANGELOG.md                           |   4 +
 cli/apple/build.ts                     |  16 +-
 cli/apple/device-families.ts           |  41 +++
 cli/apple/listing.ts                   |   6 +-
 cli/apple/release.ts                   |  63 +++-
 cli/apple/resubmit.ts                  |  12 +-
 cli/apple/testflight.ts                |  51 +++-
 cli/check.ts                           |   9 +
 cli/commands.ts                        |   2 +-
 cli/data/flags.json                    |  11 +-
 cli/lib/config.ts                      |  10 +
 cli/lib/device-families.ts             | 111 +++++++
 cli/lib/listing-plan.ts                |   8 +-
 cli/lib/release-type.ts                |  54 ++++
 cli/lib/testflight.ts                  |  19 ++
 cli/lib/validate-rules.ts              |   3 +
 cli/validate.ts                        |  11 +
 skills/appstore-first-release/SKILL.md |   2 +-
 skills/release-management/SKILL.md     |   7 +-
 skills/store-pitfalls/SKILL.md         |  38 +++
 skills/testflight/SKILL.md             |   5 +-
 tests/apple-release-gaps.test.ts       | 405 +++++++++++++++++++++++++
 tests/helpers/fake-stores.ts           |  27 +-
 tests/signing-targets.test.ts          |   2 +
 24 files changed, 899 insertions(+), 18 deletions(-)
 create mode 100644 cli/apple/device-families.ts
 create mode 100644 cli/lib/device-families.ts
 create mode 100644 cli/lib/release-type.ts
 create mode 100644 tests/apple-release-gaps.test.ts

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 6a1d003..cf58150 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,10 @@
 
 ## Unreleased
 
+- Release type. `apple.releaseType: afterApproval | manual | scheduled` (+ `apple.earliestReleaseDate`): `apple listing` creates versions with it (MANUAL when unset, existing versions untouched) and `apple submit` / `resubmit` set it before submitting when it differs, the dry run showing old -> new. New `apple release --after-approval | --manual | --scheduled <ISO date> [--platform] [--version] [--first-release] --yes` changes it on a version App Review has not approved yet (clear refusal otherwise, with `--manual-release` as the way out); exit 7 when it already has that type; an update is an agent step, after-approval on the first version of an app is exit 3 OWNER_STEP. Pitfall 125.
+- Device families. `validate` and `apple build` read the device families of the last live version (build bundle `deviceProtocols`, device models, iPad screenshot sets) and compare them with TARGETED_DEVICE_FAMILY in the Xcode project and `apple.ipad`; a gap stops `apple build` before the archive with the exact fix (ITMS-90101 otherwise comes after the build; `--allow-device-gap` overrides). Offline `check` warns when the live families are unknown or the config and project disagree. Pitfall 126.
+- TestFlight. `apple testflight testers --invite` checks that the tester's group has an installable build (past Beta App Review for external groups); without one it adds the tester, skips the invite and prints when it can go out (exit 0). Apple's 409 NO_INSTALLABLE_BUILDS is handled the same way; `distribute --submit-review` prints the hint for testers not invited yet. Pitfall 127.
+
 ## 0.8.55 · 2026-10-26
 
 - `apple build --path-free`: a checkout in a shared build folder outside the home folder is no longer a leak needle (dsymutil and the module cache record it; only home and user-name paths count).
diff --git a/cli/apple/build.ts b/cli/apple/build.ts
index 87fa428..13e8a89 100644
--- a/cli/apple/build.ts
+++ b/cli/apple/build.ts
@@ -36,6 +36,8 @@ import { pump } from '../lib/runner';
 import { parseMobileprovision, toXmlPlist } from '../lib/plist';
 import { nextBuildNumber } from '../lib/release';
 import { exportOptions, profileDirs } from '../lib/signing';
+import { type FamilyVerdict, familyVerdicts, projectFamilies } from '../lib/device-families';
+import { liveDeviceFamilies } from './device-families';
 import { keychainPassword, keychainSigningArgs, parseKeychainList, showSecurity, sshBuildRefusal, unlockSteps } from '../lib/keychain';
 import { appGroupSteps, appGroupVerdicts, type GroupEvidence } from '../lib/targets';
 import { capacitorProject, webStep } from '../lib/web-assets';
@@ -186,6 +188,18 @@ export async function run(ctx: Ctx): Promise<void> {
   if (build && !/^\d+(\.\d+){0,2}$/.test(build)) throw new Error('--build-number: digits, e.g. 42 or 1.0.42');
   const buildNo = build ?? '<next build number>';
 
+  // device families: an upload that drops one the live version supports (iPad) is refused only AFTER the archive (ITMS-90101)
+  // so compare first: stop before building with the exact fix (--allow-device-gap builds anyway)
+  let deviceFamilies: FamilyVerdict[] = [];
+  try {
+    const c = await ascClient(root, bundleId, config.apple?.appId);
+    deviceFamilies = familyVerdicts({ live: await liveDeviceFamilies(c, await c.app()), project: projectFamilies(root, bundleId, target.project), ipad: config.apple?.ipad });
+  } catch (e) { warn(TAG, `device families of the live version not compared (${(e as Error).message.split('\n')[0]?.slice(0, 120)})`); }
+  const familyBlockers = deviceFamilies.filter(d => d.level === 'blocker');
+  for (const d of deviceFamilies) if (d.level === 'warn' || (d.level === 'blocker' && (dry || a.has('allow-device-gap')))) warn(TAG, `${d.msg}${d.fix ? ` -> ${d.fix}` : ''}`);
+  if (familyBlockers.length && !dry && !a.has('allow-device-gap'))
+    throw new Error(`stopped before the archive: ${familyBlockers.map(d => `${d.msg}. Fix: ${d.fix}`).join('\n')}\n(--allow-device-gap builds anyway)`);
+
   const scan = discoverTargets(root, config);
   const ids = [bundleId, ...scan.extensions.map(t => t.bundleId)];
   const profiles: Record<string, string> = {};
@@ -232,7 +246,7 @@ export async function run(ctx: Ctx): Promise<void> {
   ];
   const unlockPreview = unlock ? unlockSteps(keychain ?? '<login keychain>', []).map(showSecurity) : [];
   const plan = { framework: target.framework, workspace: target.workspace ?? null, project: target.project ?? null, scheme: target.scheme, configuration,
-    version: version ?? '(project value)', build: buildNo, derivedData: derivedData ?? '(Xcode default)', pathFree, teamId, signingStyle: style, exportOptions: opts, out: relative(root, out) || '.', steps: [...unlockPreview, ...steps], notes: target.notes };
+    version: version ?? '(project value)', build: buildNo, deviceFamilies, derivedData: derivedData ?? '(Xcode default)', pathFree, teamId, signingStyle: style, exportOptions: opts, out: relative(root, out) || '.', steps: [...unlockPreview, ...steps], notes: target.notes };
   const webOpts = { config, root, cap, store: 'apple' as const, tag: TAG, noPrebuild: a.has('no-prebuild'), allowStale: a.has('allow-stale-web') };
   if (dry) {
     const web = await webStep({ ...webOpts, dry: true, quiet: json });
diff --git a/cli/apple/device-families.ts b/cli/apple/device-families.ts
new file mode 100644
index 0000000..2ae18c2
--- /dev/null
+++ b/cli/apple/device-families.ts
@@ -0,0 +1,41 @@
+// The device families of the app's last live iOS version, read from App Store Connect (cli/lib/device-families.ts compares
+// them with the project and the config). Signals, merged because none is documented as THE answer:
+//   - the live version's build bundle: buildBundles.deviceProtocols and the device models of buildBundleFileSizes
+//   - the screenshot sets of the live version: an APP_IPAD_* display type means the version was submitted for iPad
+// Live version = READY_FOR_SALE / READY_FOR_DISTRIBUTION; else the newest one that was on sale (REPLACED_WITH_NEW_VERSION).
+import { compareVersions } from '../lib/listing-plan';
+import { liveFamilies, type LiveFamilies } from '../lib/device-families';
+import type { Asc, J } from './asc';
+import { type AscPlatform, versionsPath } from './platform';
+
+const ON_SALE = ['READY_FOR_SALE', 'READY_FOR_DISTRIBUTION'];
+const WAS_ON_SALE = [...ON_SALE, 'REPLACED_WITH_NEW_VERSION'];
+
+/** The live (or last live) version among the rows of GET appStoreVersions, newest first. Pure. */
+export function lastLiveVersion(rows: J[]): J | null {
+  const state = (v: J): string => v.attributes.appVersionState ?? v.attributes.appStoreState;
+  const pick = (states: string[]): J | null => rows.filter(v => states.includes(state(v)))
+    .sort((a, b) => compareVersions(String(b.attributes.versionString), String(a.attributes.versionString)))[0] ?? null;
+  return pick(ON_SALE) ?? pick(WAS_ON_SALE);
+}
+
+/** Reads the families of the last live version of the platform (iOS unless named); null when there is none or no signal names a family. */
+export async function liveDeviceFamilies(c: Asc, appId: string, platform: AscPlatform = 'IOS'): Promise<LiveFamilies | null> {
+  const v = lastLiveVersion(await c.all(versionsPath(appId, platform, 20)));
+  if (!v) return null;
+  const signals: { name: string; values: string[] }[] = [];
+  const b = (await c.maybe(`/v1/appStoreVersions/${v.id}/build`))?.data;
+  if (b) {
+    const full = await c.maybe(`/v1/builds/${b.id}?include=buildBundles`);
+    const bundles = (full?.included ?? []).filter((x: J) => x.type === 'buildBundles' && (x.attributes?.bundleType ?? 'APP') === 'APP');
+    signals.push({ name: `build ${b.attributes?.version ?? b.id} deviceProtocols`, values: bundles.flatMap((x: J) => (x.attributes?.deviceProtocols ?? []) as string[]) });
+    const models: string[] = [];
+    for (const x of bundles) for (const f of await c.all(`/v1/buildBundles/${x.id}/buildBundleFileSizes?limit=200`)) models.push(String(f.attributes?.deviceModel ?? ''));
+    signals.push({ name: `build ${b.attributes?.version ?? b.id} device models`, values: models });
+  }
+  const types: string[] = [];
+  for (const l of (await c.all(`/v1/appStoreVersions/${v.id}/appStoreVersionLocalizations?limit=50`)).slice(0, 5))
+    for (const s of await c.all(`/v1/appStoreVersionLocalizations/${l.id}/appScreenshotSets?limit=50`)) types.push(String(s.attributes?.screenshotDisplayType ?? ''));
+  signals.push({ name: 'screenshot sets', values: types });
+  return liveFamilies(String(v.attributes.versionString), String(v.attributes.appVersionState ?? v.attributes.appStoreState), signals);
+}
diff --git a/cli/apple/listing.ts b/cli/apple/listing.ts
index 8fdeb45..698b799 100644
--- a/cli/apple/listing.ts
+++ b/cli/apple/listing.ts
@@ -5,7 +5,7 @@
 // refuse with the reason), the build, and per locale create / update with old -> new per field. --dry stops there
 // (read-only); the real run asks in a terminal and applies exactly that plan. Locales marked status=draft or
 // status=translate (listing translate) are skipped unless --include-drafts.
-// - the editable iOS version: versionString, copyright, release type MANUAL; with --build that processed build is attached
+// - the editable iOS version: versionString, copyright, release type (apple.releaseType, MANUAL when new and unset); with --build that processed build is attached
 // - appInfoLocalizations: name, subtitle, privacy policy URL per locale
 // - appStoreVersionLocalizations: description, keywords, promotional text, what's new (not on a first version),
 //   support + marketing URL per locale
@@ -21,6 +21,7 @@ import { mergeAppleListing, overLimits } from '../lib/listing-pull';
 import { counts, draftReason, draftSections, type ItemPlan, itemLines, planItem, planLocales, planVersion, short, type Skipped, type VersionPlan } from '../lib/listing-plan';
 import { createOnce, findOrCreate, getById } from '../lib/upsert';
 import { appleName } from '../lib/config';
+import { wantedRelease } from '../lib/release-type';
 import type { Ctx } from '../lib/ctx';
 import { confirm, need } from '../lib/ctx';
 import { done, log, printJson, warn } from '../lib/log';
@@ -117,7 +118,8 @@ async function planListing(ctx: Ctx, c: Asc, appId: string, version: string, pla
   }
   const copyright = app.copyright ?? `${new Date().getFullYear()} ${app.name}`;
   const rows = await c.all(versionsPath(appId, platform));
-  const versionPlan = planVersion(rows, version, { copyright, releaseType: 'MANUAL' }, platform);
+  const rel = wantedRelease(config.apple);
+  const versionPlan = planVersion(rows, version, { copyright, releaseType: rel?.releaseType, earliestReleaseDate: rel?.earliestReleaseDate }, platform);
 
   let build: AppleListingPlan['build'] = null;
   const number = ctx.args.get('build');
diff --git a/cli/apple/release.ts b/cli/apple/release.ts
index ab0f77c..aad0498 100644
--- a/cli/apple/release.ts
+++ b/cli/apple/release.ts
@@ -1,10 +1,17 @@
 // Release management for an App Store version.
 //   storebound apple release --phased on|pause|resume|complete [--version 1.2.0] [--dry] [--yes]
 //   storebound apple release --manual-release [--version 1.2.0] [--first-release] [--yes] [--json]
+//   storebound apple release --after-approval | --manual | --scheduled <ISO date> [--version 1.2.0] [--first-release] [--yes] [--json]
 // Both take --platform ios|macos|tvos|visionos; without it the platform that has the version this needs is used (both: asks).
 // Phased release: 7-day automatic rollout to users with automatic updates (1, 2, 5, 10, 20, 50, 100 %); anyone can
 // still update by hand from the App Store. Pause holds it (up to 30 days in total), it is NOT a rollback: users who
 // updated keep the build. "complete" releases to everyone at once.
+// --after-approval / --manual / --scheduled set how the version goes live (appStoreVersions.releaseType; the config's
+// apple.releaseType does the same in `apple listing` and `apple submit`). Allowed until App Review approves the version
+// (Prepare for Submission, rejected, Waiting for Review, In Review); an approved one (Pending Developer Release) is
+// released with --manual-release, a released one is final. Setting it when it is that type already is exit 7 under the
+// ship-step contract. An update of an app on sale is an agent step; --after-approval on the first version of an app
+// puts it on sale by itself, so that one is the owner's (exit 3 OWNER_STEP unless --first-release).
 // --manual-release releases an approved version (PENDING_DEVELOPER_RELEASE). Public and irreversible: asks first
 // (--yes in scripts). Releasing an UPDATE of an app already on sale is an agent step (no owner gate, also in a
 // pipeline; under the ship-step contract: exit 7 when the version is released already). The first-ever release of an
@@ -18,6 +25,7 @@ import { consoleUrl } from '../lib/console-links';
 import { appleReleaseKind, enforceFirstRelease } from '../lib/release-kind';
 import { type PhasedAction, phasedRequest } from '../lib/release';
 import { createOnce } from '../lib/upsert';
+import { ASC_RELEASE_TYPE, changeText, RELEASE_TYPE_EDITABLE, releaseTypeChanges, type WantedRelease } from '../lib/release-type';
 import { ascClient, type J } from './asc';
 import { allVersions, parsePlatform, pickPlatform, platformLabel, versionsPath } from './platform';
 
@@ -26,12 +34,16 @@ export async function run(ctx: Ctx): Promise<void> {
   const a = ctx.args;
   const phased = a.get('phased') as PhasedAction | undefined;
   const manual = a.has('manual-release');
-  if (!phased && !manual) throw new Error('usage: apple release --phased on|pause|resume|complete | --manual-release [--version x.y.z] [--dry] [--yes]');
+  const typeFlags = [a.has('after-approval') && 'afterApproval', a.has('manual') && 'manual', a.has('scheduled') && 'scheduled'].filter((x): x is 'afterApproval' | 'manual' | 'scheduled' => !!x);
+  if (typeFlags.length > 1) throw new Error('--after-approval, --manual and --scheduled are alternatives: give one');
+  if (!phased && !manual && !typeFlags.length) throw new Error('usage: apple release --phased on|pause|resume|complete | --manual-release | --after-approval | --manual | --scheduled <ISO date> [--version x.y.z] [--dry] [--yes]');
+  if (typeFlags.length && (phased || manual)) throw new Error('the release type flags (--after-approval, --manual, --scheduled) are a command of their own: run --phased / --manual-release separately');
   if (phased && !['on', 'pause', 'resume', 'complete'].includes(phased)) throw new Error('--phased: on | pause | resume | complete');
   const dry = a.has('dry');
   const c = await ascClient(root, need(config.apple?.bundleId, 'apple.bundleId'), config.apple?.appId);
   const appId = await c.app();
   const want = a.get('version');
+  if (typeFlags.length) return setReleaseType(ctx, c, appId, typeFlags[0]!);
   const state = (v: J): string => v.attributes.appVersionState ?? v.attributes.appStoreState;
   shipReport({ version: want, url: consoleUrl('asc.version') });
   // the ship-step contract: the version is released already (and none waits for release): nothing to do, exit 7
@@ -96,3 +108,52 @@ export async function run(ctx: Ctx): Promise<void> {
   }
   done('apple', `${tag}: ${req.note}`);
 }
+
+/** apple release --after-approval | --manual | --scheduled: PATCH appStoreVersions releaseType on a version App Review has not approved yet. */
+async function setReleaseType(ctx: Ctx, c: Awaited<ReturnType<typeof ascClient>>, appId: string, name: 'afterApproval' | 'manual' | 'scheduled'): Promise<void> {
+  const a = ctx.args;
+  const TAG = 'apple';
+  const want = a.get('version');
+  const state = (v: J): string => v.attributes.appVersionState ?? v.attributes.appStoreState;
+  const date = name === 'scheduled' ? a.required('scheduled', 'ISO date and time', 'e.g. --scheduled 2027-03-01T09:00:00Z') : undefined;
+  if (date && Number.isNaN(Date.parse(date))) throw new Error(`--scheduled ${date}: an ISO 8601 date and time, e.g. 2027-03-01T09:00:00Z`);
+  const target: WantedRelease = { releaseType: ASC_RELEASE_TYPE[name], ...(date ? { earliestReleaseDate: date } : {}) };
+  shipReport({ version: want, url: consoleUrl('asc.version') });
+  const fits = (x: J): boolean => (!want || x.attributes.versionString === want) && (RELEASE_TYPE_EDITABLE.has(state(x)) || state(x) === 'PENDING_DEVELOPER_RELEASE');
+  const platform = parsePlatform(a.get('platform')) ?? pickPlatform(await allVersions(c, appId), want ? [fits, (x: J) => x.attributes.versionString === want] : fits, undefined, 'a version that is not approved yet');
+  const versions = await c.all(versionsPath(appId, platform, 20));
+  const v: J | undefined = want ? versions.find(x => x.attributes.versionString === want) : versions.find(x => RELEASE_TYPE_EDITABLE.has(state(x))) ?? versions.find(x => state(x) === 'PENDING_DEVELOPER_RELEASE');
+  if (!v) throw new Error(`${platformLabel(platform)}: ${want ? `no version ${want}` : 'no version waiting for App Review (Prepare for Submission, rejected, Waiting for Review, In Review)'}`);
+  const versionString = String(v.attributes.versionString);
+  const tag = `${versionString} ${platformLabel(platform)} (${state(v)})`;
+  const changes = releaseTypeChanges(v.attributes, target);
+  const kind = appleReleaseKind(versions.map((x: J) => ({ versionString: String(x.attributes.versionString), state: state(x) })));
+  shipReport({ version: versionString, state: state(v) });
+  const result = (extra: Record<string, unknown>): void => { if (a.has('json')) printJson({ version: versionString, state: state(v), platform, releaseType: target.releaseType, from: v.attributes.releaseType ?? null, releaseKind: kind.kind, ...extra }); };
+  if (!changes.length) {
+    shipNoop({ version: versionString, state: state(v) });
+    result({ changed: false, alreadyThere: true });
+    done(TAG, `${tag}: release type is ${target.releaseType} already: nothing changed`);
+    return;
+  }
+  if (!RELEASE_TYPE_EDITABLE.has(state(v))) {
+    throw new Error(`${tag}: the release type can no longer be changed${state(v) === 'PENDING_DEVELOPER_RELEASE' ? ` (App Review approved it and it waits for you: release it with storebound apple release --manual-release --version ${versionString})` : ' (it is approved or released; App Store Connect only takes the change before approval)'}`);
+  }
+  if (a.has('dry')) {
+    log(TAG, `would set the release type of ${tag}: ${changeText(changes)} (dry)`);
+    result({ changed: false, dryRun: true, changes });
+    return;
+  }
+  // after approval = on sale at once: for the first version of an app that is the owner's step
+  if (target.releaseType === 'AFTER_APPROVAL' && !enforceFirstRelease(ctx, kind, { store: 'apple', what: 'the first release of the app (it goes on sale by itself once approved)', consoleUrl: consoleUrl('asc.version') })) return;
+  if (!(await confirm(ctx, `Set the release type of ${tag}: ${changeText(changes)}?`))) return;
+  try {
+    await c.asc('PATCH', `/v1/appStoreVersions/${v.id}`, { data: { type: 'appStoreVersions', id: v.id, attributes: Object.fromEntries(changes.map(ch => [ch.field, ch.to])) } });
+  } catch (e) {
+    if (/-> 409/.test((e as Error).message)) throw new Error(`${tag}: App Store Connect refuses the release type change now (409): ${(e as Error).message}
+It is editable until App Review approves the version; after that use apple release --manual-release.`);
+    throw e;
+  }
+  result({ changed: true, changes });
+  done(TAG, `${tag}: release type ${changeText(changes)}`);
+}
diff --git a/cli/apple/resubmit.ts b/cli/apple/resubmit.ts
index 5bed343..66d1944 100644
--- a/cli/apple/resubmit.ts
+++ b/cli/apple/resubmit.ts
@@ -21,6 +21,7 @@
 // is --version, else the one an open submission holds, else the editable one (Prepare for Submission or rejected).
 // Under `serve` (the desktop's owner action) the plan table is printed next to the --json result.
 import { sellsOn } from '../lib/config';
+import { changeText, RELEASE_TYPE_EDITABLE, releaseTypeChanges, wantedRelease } from '../lib/release-type';
 import type { Ctx } from '../lib/ctx';
 import { need } from '../lib/ctx';
 import { done, log, printJson, warn } from '../lib/log';
@@ -97,6 +98,10 @@ export async function submitVersion(ctx: Ctx, mode: 'submit' | 'resubmit'): Prom
   if (mode === 'submit' && !SUBMITTABLE_APP.has(stateOf(v)) && !held.has(v.id)) throw new Error(`App Store version ${String(v.attributes.versionString)} (${pl}) is ${stateOf(v)}: only a version in Prepare for Submission (or a rejected one) can be submitted`);
   const versionString = String(v.attributes.versionString);
   if (!a.has('json')) log(TAG, `app version ${versionString} (${pl}): ${stateOf(v)}`);
+  // apple.releaseType: the version goes live as the config says (afterApproval | manual | scheduled); set before the submit when it differs
+  const relWant = wantedRelease(config.apple);
+  const relChanges = relWant ? releaseTypeChanges(v.attributes, relWant) : [];
+  if (relChanges.length && !RELEASE_TYPE_EDITABLE.has(stateOf(v))) throw new Error(`App Store version ${versionString} (${pl}) is ${stateOf(v)}: its release type can no longer be changed (apple.releaseType wants ${changeText(relChanges)})`);
 
   // the build, by its number
   const b = (await c.all(`/v1/builds?filter[app]=${appId}&filter[version]=${number}&filter[preReleaseVersion.version]=${versionString}&filter[preReleaseVersion.platform]=${platform}`))[0];
@@ -123,7 +128,7 @@ export async function submitVersion(ctx: Ctx, mode: 'submit' | 'resubmit'): Prom
   const gc = gcUse.inUse ? await readGcSwitch(c, appId, v) : null;
   const gcPlan = gc ? gcSwitchPlan(gc) : [];
   if (a.has('json')) {
-    printJson({ dryRun: dry, releaseKind: kind.kind, gameCenter: gcPlan, version: { id: v.id, versionString, platform, state: stateOf(v) }, build, submission: state.choice ?? null, resolve: marks, rows, skipped: plan.skipped, blockers });
+    printJson({ dryRun: dry, releaseKind: kind.kind, releaseType: relChanges.length ? { changes: relChanges } : null, gameCenter: gcPlan, version: { id: v.id, versionString, platform, state: stateOf(v) }, build, submission: state.choice ?? null, resolve: marks, rows, skipped: plan.skipped, blockers });
     // the desktop's owner dialog shows the output text: the plan table goes with the result there
     if (process.env.STOREBOUND_MACHINE === '1') { console.log(formatRows(rows)); for (const x of blockers) warn(TAG, x); }
     if (blockers.length) process.exitCode = 1;
@@ -132,6 +137,7 @@ export async function submitVersion(ctx: Ctx, mode: 'submit' | 'resubmit'): Prom
   } else {
     console.log(formatRows(rows));
     log(TAG, `${kind.kind === 'update' ? 'update of an app on sale' : 'FIRST release of this app (the owner approves it once: --first-release)'}: ${kind.why}`);
+    if (relChanges.length) log(TAG, `${dry ? 'would set' : 'setting'} release type: ${changeText(relChanges)} (apple.releaseType)`);
     for (const l of gcPlan) log(TAG, `${dry ? 'would ' : ''}${l} (Game Center: ${gcUse.why})`);
     for (const s of plan.skipped) log(TAG, `not added ${s.id}: ${s.why}`);
     for (const x of blockers) warn(TAG, x);
@@ -149,6 +155,10 @@ export async function submitVersion(ctx: Ctx, mode: 'submit' | 'resubmit'): Prom
     await c.asc('PATCH', `/v1/appStoreVersions/${v.id}/relationships/build`, { data: { type: 'builds', id: build.id } });
     log(TAG, `build ${number} attached to ${versionString}`);
   }
+  if (relChanges.length) {
+    await c.asc('PATCH', `/v1/appStoreVersions/${v.id}`, { data: { type: 'appStoreVersions', id: v.id, attributes: Object.fromEntries(relChanges.map(ch => [ch.field, ch.to])) } });
+    log(TAG, `release type of ${versionString}: ${changeText(relChanges)}`);
+  }
   if (gc && gcPlan.length) await ensureGcSwitch(c, gc, TAG);
   try {
     await submitPlanned(ctx, c, { appId, ids, state, tag: TAG, withVersion: true, appVersionId: v.id, platform, quiet: true, resolve });
diff --git a/cli/apple/testflight.ts b/cli/apple/testflight.ts
index 63c272c..8f70951 100644
--- a/cli/apple/testflight.ts
+++ b/cli/apple/testflight.ts
@@ -26,7 +26,7 @@ import { BUILD_WAIT_EXIT, type BuildSeen, expireCandidates, planExpire, validHin
 import { parseDuration } from '../lib/release';
 import {
   type ApiBuild, betaDescriptions, betaReadiness, betaReviewReq, buildsWithVersion, getsAllBuilds, type Group, groupFromApi, inviteReq, maskEmail,
-  parseTesters, pickBuild, planBetaInfo, planBetaReviewDetail, planDistribute, planGroups, planTesters, planWhatToTest, unknownGroupMessage, whatToTestFromListing,
+  installableBuild, noInstallableBuildHint, noInstallableBuilds409, parseTesters, pickBuild, planBetaInfo, planBetaReviewDetail, planDistribute, planGroups, planTesters, planWhatToTest, unknownGroupMessage, whatToTestFromListing,
 } from '../lib/testflight';
 import { type Asc, ascClient, type J } from './asc';
 import { describeReq, execute, type Req } from './jsonapi';
@@ -113,6 +113,17 @@ async function findBuild(c: Asc, appId: string, number: string, marketing?: stri
   return { ...b, detail };
 }
 
+/** Whether the group has a build its testers can install now (past Beta App Review for an external group). An internal
+ *  all-builds group has every build of the app. */
+async function groupHasInstallableBuild(c: Asc, appId: string, g: Group): Promise<boolean> {
+  const builds = getsAllBuilds(g) ? await c.all(`/v1/builds?filter[app]=${appId}&limit=200`) : await c.all(`/v1/betaGroups/${g.id}/builds?limit=200`);
+  for (const b of builds) {
+    const detail = (await c.maybe(`/v1/builds/${b.id}/buildBetaDetail`))?.data?.attributes ?? null;
+    if (installableBuild(b, detail, g.internal)) return true;
+  }
+  return false;
+}
+
 export async function run(ctx: Ctx): Promise<void> {
   const { config, root, resolve } = ctx.loaded;
   const a = ctx.args;
@@ -193,9 +204,35 @@ export async function run(ctx: Ctx): Promise<void> {
     await execute(c.asc, reqs, { dry, tag: TAG });
     if (a.has('invite')) {
       const fresh = new Map((await c.all(`/v1/betaTesters?filter[apps]=${appId}&limit=200`)).map((t: J) => [String(t.attributes.email ?? '').toLowerCase(), t] as const));
-      const pending = want.map(t => fresh.get(t.email)).filter((t): t is J => !!t && ['NOT_INVITED', 'INVITED'].includes(t.attributes.state));
-      if (pending.length && await confirm(ctx, `(Re)send the TestFlight invitation email to ${pending.length} tester(s)?`))
-        await execute(c.asc, pending.map(t => inviteReq(appId, t.id, maskEmail(String(t.attributes.email)))), { dry: false, tag: TAG });
+      // an invitation needs a build the tester can install; without one Apple answers 409 NO_INSTALLABLE_BUILDS (seen live
+      // on a new external group): add the tester, skip the invite, say when it can go out
+      const installable = new Map<string, boolean>();
+      const ready: { t: J; groups: string[] }[] = [], waiting = new Set<string>();
+      let waitingTesters = 0;
+      for (const w of want) {
+        const t = fresh.get(w.email);
+        if (!t || !['NOT_INVITED', 'INVITED'].includes(t.attributes.state)) continue;
+        const own = gs.filter(g => w.groups.includes(g.name));
+        for (const g of own) if (!installable.has(g.id)) installable.set(g.id, await groupHasInstallableBuild(c, appId, g));
+        if (own.some(g => installable.get(g.id))) ready.push({ t, groups: own.map(g => g.name) });
+        else { waitingTesters++; for (const g of own) waiting.add(g.name); }
+      }
+      if (waitingTesters) {
+        const msg = `${waitingTesters} ${noInstallableBuildHint([...waiting])}`;
+        warn(TAG, msg);
+       
+      }
+      if (ready.length && await confirm(ctx, `(Re)send the TestFlight invitation email to ${ready.length} tester(s)?`)) {
+        for (const { t, groups } of ready) {
+          try { await execute(c.asc, [inviteReq(appId, t.id, maskEmail(String(t.attributes.email)))], { dry: false, tag: TAG }); }
+          catch (e) {
+            if (!noInstallableBuilds409(e)) throw e;
+            const msg = `1 ${noInstallableBuildHint(groups)}`;
+            warn(TAG, msg);
+           
+          }
+        }
+      }
     }
     done(TAG, 'testers done');
     return;
@@ -293,6 +330,12 @@ export async function run(ctx: Ctx): Promise<void> {
       if (await confirm(ctx, `Submit build ${number} to Beta App Review now? Apple reviews it for external testing (Test Information must be complete: storebound apple testflight info).`))
         await execute(c.asc, [betaReviewReq(b.id)], { dry: false, tag: TAG });
     }
+    // testers added to an external group but not invited yet: the invitation needs a build past Beta App Review
+    if (a.has('submit-review')) {
+      const waiting: string[] = [];
+      for (const g of external) if ((await c.all(`/v1/betaGroups/${g.id}/betaTesters?limit=200`)).some((t: J) => t.attributes.state === 'NOT_INVITED')) waiting.push(g.name);
+      if (waiting.length) { log(TAG, noInstallableBuildHint(waiting)); }
+    }
     const added = target.filter(g => reqs.some(r => r.path.includes(`/betaGroups/${g.id}/`))).map(g => g.name);
     done(TAG, `build ${number}: ${added.length ? `added to ${added.join(', ')}` : `already available to ${target.map(g => g.name).join(', ')}`}`);
     return;
diff --git a/cli/check.ts b/cli/check.ts
index 89ddd21..692967e 100644
--- a/cli/check.ts
+++ b/cli/check.ts
@@ -38,6 +38,7 @@ import { iphoneDuoNote } from './shots/spec';
 import { hitLine } from './lib/cross-store';
 import { findFastlaneTraces, traceMessage } from './lib/fastlane-traces';
 import { listingFileMentions } from './lib/listing-mentions';
+import { projectFamilies } from './lib/device-families';
 
 /** The newest .ipa in a folder (apple build's export), or null. */
 function newestIpa(dir: string): string | null {
@@ -173,6 +174,14 @@ export async function run(ctx: Ctx): Promise<void> {
       note('shots.capture.auth signs in to a local stack with reviewDemoAccount, the account App Review gets from apple review-details: put the local demo sign-in in captureAuth in .storebound/credentials.json and use ${cred:<name>}'); }
   const duo = iphoneDuoNote({ apple: !!config.apple, duo: !!config.apple?.iphoneDuo, play: !!config.play });
   if (duo?.level === 'info') { hints.push(duo.msg); log('check', `hint: ${duo.msg}`); } else if (duo) note(duo.msg);
+  // device families: offline only the project and the config can be compared; the live version's families need the store
+  if (config.apple) {
+    const proj = projectFamilies(ctx.loaded.root, config.apple.bundleId, config.apple.build?.project);
+    const iosOnly = !proj || !proj.families.ipad;
+    if (proj && proj.families.ipad && config.apple.ipad !== true) note(`${proj.file} builds for iPad (TARGETED_DEVICE_FAMILY ${proj.configurations.join(' / ')}) but apple.ipad is not true: iPad screenshots are not required or checked (set apple.ipad: true)`);
+    else if (proj && !proj.families.ipad && config.apple.ipad === true) note(`apple.ipad is true but ${proj.file} builds TARGETED_DEVICE_FAMILY ${proj.configurations.join(' / ')} (no iPad): set "1,2" or apple.ipad: false`);
+    else if (iosOnly && config.apple.ipad !== true) note(`device families: ${proj ? `iPhone only (apple.ipad not true, TARGETED_DEVICE_FAMILY ${proj.configurations.join(' / ')})` : 'no Xcode project found here'}, and the families of the live version are not known offline: if it supports iPad, Apple refuses an iPhone-only upload after the build (ITMS-90101). storebound validate and apple build compare with the store first`);
+  }
   const creative = creativeNote(config, ctx.loaded.resolve(config.renders ?? config.shots?.out ?? 'store/renders'));
   if (creative) { hints.push(creative); log('check', `hint: ${creative}`); }
   // the scaffolder's own placeholders would reach the stores as the app's copyright, contact and legal pages
diff --git a/cli/commands.ts b/cli/commands.ts
index 90df327..6e05b40 100644
--- a/cli/commands.ts
+++ b/cli/commands.ts
@@ -89,7 +89,7 @@ export const COMMANDS: Record<string, [() => Promise<Mod>, string]> = {
   'apple status': [() => import('./apple/status'), 'versions, builds, IAPs, review submissions (--wait-review, --cancel-submission <id>); --platform ios|macos|tvos|visionos (default: the platform that has the version this needs; asks when several do)'],
   'apple creative-assets': [() => import('./apple/creative-assets'), 'Header and Search Results: product page header (21:9) and search results asset (3:2) per locale, or one universal 5244x2950 PNG; uploads to the Asset Library and places it once Apple approved it, reporting waiting ones per locale (MD5 upsert, safe to re-run); --add-for-review, --verify (read-only), --dry'],
   'apple previews': [() => import('./apple/previews'), 'app preview videos per locale (MD5-idempotent, poster frame time code); --dry'],
-  'apple release': [() => import('./apple/release'), 'phased release on|pause|resume|complete, --manual-release (asks first; --yes for an update of an app on sale, exit 7 when already released; the first-ever release is exit 3 OWNER_STEP unless --first-release); --platform ios|macos|tvos|visionos (default: the platform that has the version this needs; asks when several do)'],
+  'apple release': [() => import('./apple/release'), 'phased release on|pause|resume|complete, --after-approval | --manual | --scheduled <date> (how an unapproved version goes live; exit 7 when already that type), --manual-release (asks first; --yes for an update of an app on sale, exit 7 when already released; the first-ever release is exit 3 OWNER_STEP unless --first-release); --platform ios|macos|tvos|visionos (default: the platform that has the version this needs; asks when several do)'],
   'apple signing': [() => import('./apple/signing'), 'status | ensure: bundle id capabilities, distribution certificate (key kept in .storebound/signing), App Store profiles installed for Xcode; --dry, asks first'],
   'apple build': [() => import('./apple/build'), 'xcodebuild archive + exportArchive (ExportOptions.plist generated, next build number, API key signing); Capacitor, React Native, Flutter, Unity; --platform macos --tauri <src-tauri> [--path-free] builds a Tauri app for the Mac App Store (signed .app, sandbox entitlements, profile, productbuild .pkg); --dry'],
   'apple upload': [() => import('./apple/upload'), 'upload an IPA, or with --platform macos a signed .pkg (App Store Connect API build upload, or --via altool), build number checked, waits for processing; --dry, asks first'],
diff --git a/cli/data/flags.json b/cli/data/flags.json
index 9493636..aa55fc7 100644
--- a/cli/data/flags.json
+++ b/cli/data/flags.json
@@ -68,6 +68,7 @@
   ],
   "apple build": [
    "allow-app-group-gap",
+   "allow-device-gap",
    "allow-ssh",
    "allow-stale-web",
    "allow-version-mismatch",
@@ -229,13 +230,16 @@
    "enable"
   ],
   "apple release": [
+   "after-approval",
    "env-file",
    "first-release",
+   "manual",
    "manual-release",
    "phased",
    "platform",
    "progress",
    "result-file",
+   "scheduled",
    "version",
    "version-from"
   ],
@@ -1145,12 +1149,14 @@
    "accounts",
    "add-for-review",
    "adgroup",
+   "after-approval",
    "against",
    "agent",
    "all",
    "all-pages",
    "allow-app-group-gap",
    "allow-availability-changes",
+   "allow-device-gap",
    "allow-existing",
    "allow-price-changes",
    "allow-ssh",
@@ -1265,6 +1271,7 @@
    "locale",
    "locale-map",
    "lookup",
+   "manual",
    "manual-release",
    "max-level",
    "max-ratio",
@@ -1348,6 +1355,7 @@
    "root",
    "scan-paths",
    "scenes",
+   "scheduled",
    "scheme",
    "sdk-dirs",
    "search",
@@ -1526,7 +1534,8 @@
   ],
   "apple release": [
    "storebound apple release --phased on|pause|resume|complete [--version 1.2.0] [--dry] [--yes]",
-   "storebound apple release --manual-release [--version 1.2.0] [--first-release] [--yes] [--json]"
+   "storebound apple release --manual-release [--version 1.2.0] [--first-release] [--yes] [--json]",
+   "storebound apple release --after-approval | --manual | --scheduled <ISO date> [--version 1.2.0] [--first-release] [--yes] [--json]"
   ],
   "apple resubmit": [
    "storebound apple resubmit --build <n> [--version 1.0.0] [--platform ios|macos|tvos|visionos] [--resolve-iaps] [--first-release] [--dry] [--yes] [--json]"
diff --git a/cli/lib/config.ts b/cli/lib/config.ts
index 6fb69c8..cda074e 100644
--- a/cli/lib/config.ts
+++ b/cli/lib/config.ts
@@ -18,6 +18,7 @@ import { type AppleSigning, validateSigning } from './signing';
 import { type AppleBuildConfig, validateAppleBuild } from './xcode';
 import { type PlayBuildConfig, validatePlayBuild } from './gradle';
 import { type OriginalityConfig, validateOriginality } from './originality';
+import { validateReleaseType } from './release-type';
 
 /** consumable / non_consumable: both stores. non_renewing: Apple NON_RENEWING_SUBSCRIPTION (access for a fixed time,
  *  you track the expiry); Google Play has no such type, so it becomes a one-time product your app consumes when the
@@ -678,6 +679,14 @@ export interface ShipConfig {
     screenshotTypes?: string[];
     /** The app runs on iPad: renders, checks and uploads 13" iPad screenshots (2064 x 2752) and iPad app previews. */
     ipad?: boolean;
+    /** How an approved version goes live: "afterApproval" (released as soon as App Review approves it), "manual" (waits in
+     *  Pending Developer Release for `apple release --manual-release`) or "scheduled" (not before earliestReleaseDate).
+     *  Applied by `apple listing` when it creates a version and by `apple submit` before submitting (old -> new in the dry
+     *  run); `apple release --after-approval | --manual` changes it on an editable version. Unset: new versions are MANUAL
+     *  and existing ones are left as they are. */
+    releaseType?: 'afterApproval' | 'manual' | 'scheduled';
+    /** releaseType "scheduled": the earliest release, ISO 8601 date and time (2027-03-01T09:00:00Z). */
+    earliestReleaseDate?: string;
     /**
      * Also render, check and upload a 6.3" iPhone set (Dynamic Island, medium display, 1206 x 2622 -> APP_IPHONE_61).
      * Off by default: App Store Connect lists a medium-display screenshot as required for iPhone but fills it by
@@ -1197,6 +1206,7 @@ export function validateConfig(c: unknown): string[] {
     if (an !== undefined && (typeof an !== 'string' || !an.trim())) e.push('apple.name: the App Store name (text), or leave it out to use app.name');
     else if (an !== undefined && [...an].length > APPLE_NAME_MAX) e.push(`apple.name: ${[...an].length} characters > ${APPLE_NAME_MAX} (App Store limit)`);
     if (cfg.apple.appId && !/^\d+$/.test(cfg.apple.appId)) e.push(`apple.appId: numeric Apple ID of the app (${consoleLink('asc.app-info')})`);
+    e.push(...validateReleaseType(cfg.apple));
     const enc = cfg.apple.usesNonExemptEncryption;
     if (enc !== undefined && typeof enc !== 'boolean') e.push('apple.usesNonExemptEncryption: true | false');
     if (cfg.apple.screenshotTypes && !cfg.apple.screenshotTypes.every(t => /^APP_[A-Z0-9_]+$/.test(t))) e.push('apple.screenshotTypes: display types like APP_IPHONE_67');
diff --git a/cli/lib/device-families.ts b/cli/lib/device-families.ts
new file mode 100644
index 0000000..0630f22
--- /dev/null
+++ b/cli/lib/device-families.ts
@@ -0,0 +1,111 @@
+// Device families of an iOS app: what the last live version of the app on the App Store supports, against what the
+// project builds (TARGETED_DEVICE_FAMILY in the Xcode project) and what the config says (apple.ipad).
+// Apple refuses an upload that drops a device family the previous version supported: ITMS-90101 "This bundle does not
+// support one or more of the devices supported by the previous app version", after a full archive (seen live: an app
+// whose live version ran on iPad, built with TARGETED_DEVICE_FAMILY = 1). So `validate` and `apple build` compare first.
+// Pure helpers; the store reads are in cli/apple/device-families.ts.
+import { existsSync, readdirSync, readFileSync } from 'node:fs';
+import { join } from 'node:path';
+
+export interface Families { iphone: boolean; ipad: boolean }
+
+/** Families in TARGETED_DEVICE_FAMILY: 1 iPhone/iPod, 2 iPad (3 tvOS, 4 watchOS, 6 Mac Catalyst, 7 Vision). Pure. */
+export function familiesOfList(list: number[]): Families { return { iphone: list.includes(1), ipad: list.includes(2) }; }
+
+/** The families a store signal names: build bundle deviceProtocols, file-size device models, screenshot display types. Pure. */
+export function familiesOfStrings(values: string[]): Families {
+  const t = values.join(' ');
+  return { iphone: /iphone|ipod/i.test(t), ipad: /ipad/i.test(t) };
+}
+
+export interface LiveFamilies { version: string; state: string; families: Families; evidence: string[] }
+
+/** Merges the signals of one live version: any signal naming iPad means the version supports iPad. null when no signal
+ *  names any family (unknown, never "iPhone only"). Pure. */
+export function liveFamilies(version: string, state: string, signals: { name: string; values: string[] }[]): LiveFamilies | null {
+  const evidence: string[] = [];
+  const families: Families = { iphone: false, ipad: false };
+  for (const s of signals) {
+    const f = familiesOfStrings(s.values);
+    if (!f.iphone && !f.ipad) continue;
+    families.iphone ||= f.iphone;
+    families.ipad ||= f.ipad;
+    evidence.push(`${s.name}: ${[f.iphone && 'iPhone', f.ipad && 'iPad'].filter(Boolean).join(' + ')}`);
+  }
+  return evidence.length ? { version, state, families, evidence } : null;
+}
+
+export interface ProjectFamilies { file: string; list: number[]; families: Families; configurations: string[] }
+
+/** The Release build configurations of a pbxproj with their TARGETED_DEVICE_FAMILY: the ones of the app's bundle id,
+ *  else every Release configuration that is not an extension (bundle id below the app's). Pure. */
+export function pbxFamilies(text: string, bundleId: string, file = 'project.pbxproj'): ProjectFamilies | null {
+  const blocks: { name: string; bundle: string | null; family: string | null; ext: boolean }[] = [];
+  const re = /isa = XCBuildConfiguration;[^{]*?buildSettings = \{([\s\S]*?)\};\s*name = ("[^"]*"|[\w.-]+);/g;
+  for (let m: RegExpExecArray | null; (m = re.exec(text));) {
+    const body = m[1]!;
+    const fam = /TARGETED_DEVICE_FAMILY = ("?)([\d, ]+)\1;/.exec(body)?.[2] ?? null;
+    const bid = /PRODUCT_BUNDLE_IDENTIFIER = "?([^";\s]+)"?;/.exec(body)?.[1] ?? null;
+    blocks.push({ name: m[2]!.replace(/"/g, ''), bundle: bid, family: fam, ext: /WRAPPER_EXTENSION = appex|APPLICATION_EXTENSION_API_ONLY = YES/.test(body) || (bid !== null && bid.startsWith(`${bundleId}.`)) });
+  }
+  const release = blocks.filter(b => b.name === 'Release' && b.family !== null);
+  let pick = release.filter(b => b.bundle === bundleId);
+  if (!pick.length) pick = release.filter(b => !b.ext);
+  if (!pick.length) return null;
+  const list = [...new Set(pick.flatMap(b => b.family!.split(',').map(x => Number(x.trim())).filter(n => Number.isFinite(n) && n > 0)))].sort((a, b) => a - b);
+  return { file, list, families: familiesOfList(list), configurations: pick.map(b => b.family!.replace(/\s/g, '')) };
+}
+
+const SKIP = new Set(['node_modules', 'Pods', '.git', 'build', 'DerivedData', 'Carthage', '.build', 'dist', 'vendor']);
+
+/** Every project.pbxproj under root (depth <= 5), root-relative with forward slashes. */
+export function findPbxprojs(root: string, depth = 5): string[] {
+  const out: string[] = [];
+  const walk = (dir: string, rel: string, d: number): void => {
+    if (d > depth || !existsSync(dir)) return;
+    let names: import('node:fs').Dirent[];
+    try { names = readdirSync(dir, { withFileTypes: true }); } catch { return; }
+    for (const e of names) {
+      if (!e.isDirectory() || SKIP.has(e.name)) continue;
+      const r = rel ? `${rel}/${e.name}` : e.name;
+      if (e.name.endsWith('.xcodeproj')) { if (existsSync(join(dir, e.name, 'project.pbxproj'))) out.push(`${r}/project.pbxproj`); continue; }
+      walk(join(dir, e.name), r, d + 1);
+    }
+  };
+  walk(root, '', 0);
+  return out;
+}
+
+/** The project's device families, read from the Xcode project (apple.build.project when set, else the first project
+ *  that has the app's configurations). null when the project is not on this machine or sets no families. */
+export function projectFamilies(root: string, bundleId: string, project?: string): ProjectFamilies | null {
+  const files = project && project.endsWith('.xcodeproj') ? [`${project.replace(/\\/g, '/')}/project.pbxproj`] : findPbxprojs(root);
+  for (const f of files) {
+    try {
+      const r = pbxFamilies(readFileSync(join(root, f), 'utf8'), bundleId, f);
+      if (r) return r;
+    } catch { /* unreadable: next */ }
+  }
+  return null;
+}
+
+export interface FamilyVerdict { level: 'ok' | 'blocker' | 'warn'; msg: string; fix?: string }
+
+/** Compares the live version, the project and the config. Blocker: the live version supports iPad and the project does
+ *  not (the upload is refused with ITMS-90101) or apple.ipad is not true (iPad screenshots and checks are off). Pure. */
+export function familyVerdicts(i: { live: LiveFamilies | null; project: ProjectFamilies | null; ipad: boolean | undefined }): FamilyVerdict[] {
+  const out: FamilyVerdict[] = [];
+  const { live, project } = i;
+  const fixProject = 'set TARGETED_DEVICE_FAMILY to "1,2" (Xcode: target > General > Supported Destinations: add iPad)';
+  if (!live) {
+    out.push({ level: 'warn', msg: `device families of the live version not known${project ? '' : ' and no Xcode project found'}: if it supports iPad, an iPhone-only build is refused at upload (ITMS-90101)`, fix: 'storebound validate (reads the live version from App Store Connect)' });
+    return out;
+  }
+  const liveText = `${[live.families.iphone && 'iPhone', live.families.ipad && 'iPad'].filter(Boolean).join(' + ')} (version ${live.version} ${live.state}; ${live.evidence.join('; ')})`;
+  if (live.families.ipad) {
+    if (project && !project.families.ipad) out.push({ level: 'blocker', msg: `the live version supports ${liveText}, but ${project.file} builds TARGETED_DEVICE_FAMILY = ${project.configurations.join(' / ')} (no iPad): Apple refuses the upload after the archive with ITMS-90101`, fix: `${fixProject}; and apple.ipad: true in the config` });
+    if (i.ipad !== true) out.push({ level: 'blocker', msg: `the live version supports ${liveText}, but apple.ipad is not true in the config`, fix: 'set apple.ipad: true (iPad screenshots are then required) and TARGETED_DEVICE_FAMILY "1,2"' });
+    if (!out.length) out.push({ level: 'ok', msg: `device families: live ${liveText}; project ${project ? `TARGETED_DEVICE_FAMILY ${project.configurations.join(' / ')}` : 'not read'}; apple.ipad true` });
+  } else out.push({ level: 'ok', msg: `device families: live ${liveText}; nothing to keep` });
+  return out;
+}
diff --git a/cli/lib/listing-plan.ts b/cli/lib/listing-plan.ts
index 7e18bed..40edf0c 100644
--- a/cli/lib/listing-plan.ts
+++ b/cli/lib/listing-plan.ts
@@ -69,7 +69,7 @@ export const versionInfos = (rows: { id: string; attributes: Record<string, unkn
  * string changes only while PREPARE_FOR_SUBMISSION), create a new one, or refuse (the number exists, is not higher than
  * a version that went through review, or another version is in review / pending release). Pure.
  */
-export function planVersion(rows: { id: string; attributes: Record<string, unknown> }[], want: string, attrs: { copyright: string; releaseType: string }, platform = 'IOS'): VersionPlan {
+export function planVersion(rows: { id: string; attributes: Record<string, unknown> }[], want: string, attrs: { copyright: string; releaseType?: string; earliestReleaseDate?: string }, platform = 'IOS'): VersionPlan {
   const existing = versionInfos(rows);
   const editable = existing.find(v => EDITABLE_STATES.has(v.state));
   const others = existing.filter(v => v !== editable);
@@ -87,7 +87,8 @@ export function planVersion(rows: { id: string; attributes: Record<string, unkno
     return refuse(`version ${want} is not higher than ${higher.versionString} (${higher.state}); App Store versions only go up`);
   if (editable) {
     const cur = rows.find(r => r.id === editable.id)!.attributes;
-    const wantAttrs = { versionString: want, copyright: attrs.copyright, releaseType: attrs.releaseType };
+    // releaseType only when asked for (apple.releaseType): an existing version keeps the one it has
+    const wantAttrs: Record<string, string | undefined> = { versionString: want, copyright: attrs.copyright, releaseType: attrs.releaseType, earliestReleaseDate: attrs.releaseType === 'SCHEDULED' ? attrs.earliestReleaseDate : undefined };
     const p = planItem(editable.id, { id: editable.id, attributes: cur }, wantAttrs);
     if (editable.versionString !== want && editable.state !== 'PREPARE_FOR_SUBMISSION')
       return refuse(`the editable version ${editable.versionString} is ${editable.state}; its version string changes only while PREPARE_FOR_SUBMISSION (use --version ${editable.versionString}, or change it in App Store Connect)`);
@@ -102,7 +103,8 @@ export function planVersion(rows: { id: string; attributes: Record<string, unkno
   if (busy) return refuse(`version ${busy.versionString} is ${busy.state}; App Store Connect allows one version in progress (${busy.state === 'PENDING_DEVELOPER_RELEASE'
     ? `release it first: storebound apple release --manual-release --version ${busy.versionString} --dry, then without --dry`
     : busy.state === 'WAITING_FOR_REVIEW' || busy.state === 'IN_REVIEW' ? 'wait for the review, or remove it from review in App Store Connect' : 'wait for its release or remove it from review'})`);
-  const attributes = { platform, versionString: want, copyright: attrs.copyright, releaseType: attrs.releaseType };
+  const attributes: Record<string, string> = { platform, versionString: want, copyright: attrs.copyright, releaseType: attrs.releaseType ?? 'MANUAL' };
+  if (attributes.releaseType === 'SCHEDULED' && attrs.earliestReleaseDate) attributes.earliestReleaseDate = attrs.earliestReleaseDate;
   return { ...base, action: 'create', reason: `create version ${want} (no editable ${PLATFORM_LABEL[platform] ?? platform} version)`, changes: Object.entries(attributes).map(([field, to]) => ({ field, from: null, to })), attributes };
 }
 
diff --git a/cli/lib/release-type.ts b/cli/lib/release-type.ts
new file mode 100644
index 0000000..f090f07
--- /dev/null
+++ b/cli/lib/release-type.ts
@@ -0,0 +1,54 @@
+// How an App Store version goes live after App Review: apple.releaseType in the config, appStoreVersions.releaseType
+// on the store. MANUAL leaves an approved version in PENDING_DEVELOPER_RELEASE until someone releases it; AFTER_APPROVAL
+// releases it as soon as it is approved; SCHEDULED releases it at earliestReleaseDate at the earliest (Apple:
+// https://developer.apple.com/documentation/appstoreconnectapi/appstoreversion/attributes, releaseType, earliestReleaseDate).
+// Pure: the commands (apple listing, apple submit, apple release) read the version and send the PATCH.
+import type { FieldDiff } from './listing-plan';
+
+export const RELEASE_TYPES = ['afterApproval', 'manual', 'scheduled'] as const;
+export type ReleaseTypeName = (typeof RELEASE_TYPES)[number];
+export type AscReleaseType = 'AFTER_APPROVAL' | 'MANUAL' | 'SCHEDULED';
+
+export const ASC_RELEASE_TYPE: Record<ReleaseTypeName, AscReleaseType> = { afterApproval: 'AFTER_APPROVAL', manual: 'MANUAL', scheduled: 'SCHEDULED' };
+
+/** Version states in which App Store Connect still takes a release type change: everything before approval.
+ *  Once the version is approved (PENDING_DEVELOPER_RELEASE and later) it is released with `apple release --manual-release`. */
+export const RELEASE_TYPE_EDITABLE = new Set(['PREPARE_FOR_SUBMISSION', 'DEVELOPER_REJECTED', 'REJECTED', 'METADATA_REJECTED', 'INVALID_BINARY',
+  'READY_FOR_REVIEW', 'WAITING_FOR_REVIEW', 'IN_REVIEW']);
+
+export interface WantedRelease { releaseType: AscReleaseType; earliestReleaseDate?: string }
+
+/** The release type apple.releaseType asks for, or null when the config does not say (then nothing is touched). */
+export function wantedRelease(apple: { releaseType?: ReleaseTypeName; earliestReleaseDate?: string } | undefined): WantedRelease | null {
+  if (!apple?.releaseType) return null;
+  const releaseType = ASC_RELEASE_TYPE[apple.releaseType];
+  return releaseType === 'SCHEDULED' && apple.earliestReleaseDate ? { releaseType, earliestReleaseDate: apple.earliestReleaseDate } : { releaseType };
+}
+
+/** Problems with apple.releaseType / apple.earliestReleaseDate. Pure. */
+export function validateReleaseType(a: { releaseType?: unknown; earliestReleaseDate?: unknown } | undefined): string[] {
+  if (!a) return [];
+  const e: string[] = [];
+  if (a.releaseType !== undefined && !(RELEASE_TYPES as readonly unknown[]).includes(a.releaseType)) e.push(`apple.releaseType: ${RELEASE_TYPES.join(' | ')} (afterApproval releases an approved version at once; manual waits for \`apple release --manual-release\`)`);
+  if (a.earliestReleaseDate !== undefined) {
+    if (typeof a.earliestReleaseDate !== 'string' || Number.isNaN(Date.parse(a.earliestReleaseDate))) e.push('apple.earliestReleaseDate: an ISO 8601 date and time, e.g. 2027-03-01T09:00:00Z');
+    else if (a.releaseType !== 'scheduled') e.push('apple.earliestReleaseDate: only with apple.releaseType "scheduled"');
+  }
+  if (a.releaseType === 'scheduled' && a.earliestReleaseDate === undefined) e.push('apple.releaseType "scheduled": apple.earliestReleaseDate is required (ISO 8601 date and time)');
+  return e;
+}
+
+/** The attribute changes that bring a version to `want` (old -> new), [] when it is there already. A scheduled date is
+ *  compared as an instant. Pure. */
+export function releaseTypeChanges(cur: Record<string, unknown>, want: WantedRelease): FieldDiff[] {
+  const out: FieldDiff[] = [];
+  const have = cur.releaseType == null ? null : String(cur.releaseType);
+  if (have !== want.releaseType) out.push({ field: 'releaseType', from: have, to: want.releaseType });
+  if (want.releaseType === 'SCHEDULED' && want.earliestReleaseDate) {
+    const had = cur.earliestReleaseDate == null ? null : String(cur.earliestReleaseDate);
+    if (had === null || Date.parse(had) !== Date.parse(want.earliestReleaseDate)) out.push({ field: 'earliestReleaseDate', from: had, to: want.earliestReleaseDate });
+  }
+  return out;
+}
+
+export const changeText = (c: FieldDiff[]): string => c.map(x => `${x.field} ${x.from ?? '(none)'} -> ${x.to}`).join(', ');
diff --git a/cli/lib/testflight.ts b/cli/lib/testflight.ts
index 31381d7..41c0639 100644
--- a/cli/lib/testflight.ts
+++ b/cli/lib/testflight.ts
@@ -320,3 +320,22 @@ export function betaDescriptions(t: TfConfig | undefined, langs: { id: string; a
   }
   return out;
 }
+
+// ---- invitations need an installable build ----
+
+/** Whether a build can be installed by the testers of a group: valid, not expired, and past Beta App Review for an
+ *  external group (externalBuildState BETA_APPROVED / IN_BETA_TESTING), ready for internal testing for an internal one
+ *  (internalBuildState READY_FOR_BETA_TESTING / IN_BETA_TESTING). `detail`: the build's buildBetaDetails attributes. Pure. */
+export function installableBuild(build: { attributes: Record<string, unknown> }, detail: Record<string, unknown> | null | undefined, internal: boolean): boolean {
+  if (build.attributes.expired === true) return false;
+  if (build.attributes.processingState !== undefined && build.attributes.processingState !== 'VALID') return false;
+  const state = String((internal ? detail?.internalBuildState : detail?.externalBuildState) ?? '');
+  return internal ? ['READY_FOR_BETA_TESTING', 'IN_BETA_TESTING'].includes(state) : ['BETA_APPROVED', 'IN_BETA_TESTING'].includes(state);
+}
+
+/** The line for testers that are added but cannot be invited yet. Pure. */
+export const noInstallableBuildHint = (groups: string[]): string =>
+  `tester added; the invite goes out when a build in ${groups.join(', ')} passes Beta App Review (re-run with --invite then)`;
+
+/** Apple's 409 STATE_ERROR.TESTER_INVITE.NO_INSTALLABLE_BUILDS on POST /v1/betaTesterInvitations (seen live). Pure. */
+export const noInstallableBuilds409 = (e: unknown): boolean => /NO_INSTALLABLE_BUILDS/.test(String((e as Error)?.message ?? e));
diff --git a/cli/lib/validate-rules.ts b/cli/lib/validate-rules.ts
index 8470651..43d8906 100644
--- a/cli/lib/validate-rules.ts
+++ b/cli/lib/validate-rules.ts
@@ -63,6 +63,8 @@ export interface AppleSnapshot {
   /** Screenshots of the version that are not COMPLETE (cli/apple/screenshot-health.ts): a submit answers 409
    *  ASSET_IN_POST_PROCESSING while any is left. */
   screenshotsPending?: Pending[];
+  /** Live version's device families vs the Xcode project and apple.ipad (cli/lib/device-families.ts familyVerdicts); undefined: not iOS. */
+  deviceFamilies?: { level: 'ok' | 'blocker' | 'warn'; msg: string; fix?: string }[];
   /** Editable or rejected versions of the app's other platforms (an app's macOS version has its own state). */
   otherPlatformVersions?: { versionString: string; state: string; platform: string }[];
   /** app.copyright from the config (undefined: not set). */
@@ -215,6 +217,7 @@ export function appleRules(s: AppleSnapshot): Finding[] {
   else if (EDITABLE.includes(s.version.state)) add('ok', 'version', `version ${vl}: ${s.version.state}`);
   else if (IN_FLIGHT.includes(s.version.state)) add('warn', 'version', `version ${vl} is ${s.version.state} (nothing to prepare)`);
   else add('warn', 'version', `version ${vl}: ${s.version.state}`);
+  for (const d of s.deviceFamilies ?? []) add(d.level, 'device-families', d.msg, d.fix);
   {
     const pend = s.screenshotsPending ?? [];
     const lines = describePending(pend);
diff --git a/cli/validate.ts b/cli/validate.ts
index c91fdac..539f453 100644
--- a/cli/validate.ts
+++ b/cli/validate.ts
@@ -38,6 +38,8 @@ import { playClient } from './play/client';
 import { listOneTimeProducts } from './play/products';
 import { creativeNote } from './shots/creative';
 import { creativeWaiting, localCreative } from './apple/creative-assets';
+import { liveDeviceFamilies } from './apple/device-families';
+import { type FamilyVerdict, familyVerdicts, projectFamilies } from './lib/device-families';
 import { fixFor, GUIDELINE, hitLine } from './lib/cross-store';
 import { listingFileMentions } from './lib/listing-mentions';
 import { brokerConfig, brokerPlayInfo, enabledApisOf, grantsOf, type PlayNeed, playGaps, sdkConfigGaps } from './lib/broker';
@@ -98,6 +100,14 @@ async function creativeWaitingOf(ctx: Ctx, c: Awaited<ReturnType<typeof ascClien
   } catch { return []; }
 }
 
+/** Live version's device families against the project and apple.ipad (cli/lib/device-families.ts). A failed read is a warning, never a blocker. */
+async function deviceFamilyVerdicts(ctx: Ctx, c: Awaited<ReturnType<typeof ascClient>>, appId: string): Promise<FamilyVerdict[]> {
+  const { config, root } = ctx.loaded;
+  try {
+    return familyVerdicts({ live: await liveDeviceFamilies(c, appId), project: projectFamilies(root, config.apple!.bundleId, config.apple?.build?.project), ipad: config.apple?.ipad });
+  } catch (e) { return [{ level: 'warn', msg: `device families not compared: ${(e as Error).message.slice(0, 200)}` }]; }
+}
+
 export async function collectApple(ctx: Ctx): Promise<AppleSnapshot> {
   const { config, root } = ctx.loaded;
   const c = await ascClient(root, config.apple!.bundleId, config.apple?.appId);
@@ -173,6 +183,7 @@ export async function collectApple(ctx: Ctx): Promise<AppleSnapshot> {
     creativeWaiting: await creativeWaitingOf(ctx, c, appId),
     screenshotsPending: pendingScreenshots(shotRows, updateLedger(root, shotRows), Date.now()),
     configCopyright: config.app.copyright,
+    deviceFamilies: platform === 'IOS' ? await deviceFamilyVerdicts(ctx, c, appId) : undefined,
     build, locales, reviewDetail, ageRating,
     expectedLocales: config.languages.map(l => l.apple).filter((x): x is string => !!x),
     requiredDisplayTypes: requiredDisplayTypes(config.apple),
diff --git a/skills/appstore-first-release/SKILL.md b/skills/appstore-first-release/SKILL.md
index edb266a..4f90081 100644
--- a/skills/appstore-first-release/SKILL.md
+++ b/skills/appstore-first-release/SKILL.md
@@ -76,7 +76,7 @@ answers the compliance facts no file proves, all in one batch at the start.
 14. **Submit.** `storebound apple submit --build <n>` (dry run: the plan table with the build you uploaded, by its
     number, the version and the ready IAPs in one review submission), then the owner's yes for the same command with
     `--yes`; with IAPs `apple iap-submit --with-version --yes` does the same without attaching a build (step 11). In
-    the desktop app the owner presses Releases > Submit for review (plan, then a system dialog). Release type MANUAL
+    the desktop app the owner presses Releases > Submit for review (plan, then a system dialog). Release type MANUAL (or apple.releaseType: afterApproval | manual | scheduled; `apple release --after-approval | --manual | --scheduled <date>` changes it until the version is approved; for the first version of an app after-approval is the owner's step)
     means the owner presses "Release" after approval.
 15. **Verify + wait.** `storebound apple status`: version WAITING_FOR_REVIEW, IAPs WAITING_FOR_REVIEW, one review
     submission. `storebound apple status --wait-review` polls until approved (exit 0) or rejected (exit 1,
diff --git a/skills/release-management/SKILL.md b/skills/release-management/SKILL.md
index 21bf298..34f7a7f 100644
--- a/skills/release-management/SKILL.md
+++ b/skills/release-management/SKILL.md
@@ -35,7 +35,12 @@ presses release; you prepare, dry-run and report. `storebound mcp` deliberately
    already); the first-ever submission is the owner's (exit 3 `OWNER_STEP`, re-run with `--first-release` after the
    owner's yes). Wait: `storebound apple status --wait-review` (polls with backoff, exit 0 approved, 1 rejected,
    7 timeout; `--timeout 72h`). Rejected: `review-rejections` skill.
-4. Approved = PENDING_DEVELOPER_RELEASE. Release an update yourself: `storebound apple release --manual-release --yes`
+4. Release type: an update that should go live by itself is `afterApproval`. Set `apple.releaseType: afterApproval` in the
+   config (`apple listing` applies it to a new version, `apple submit` sets it before submitting and its dry run shows
+   `releaseType MANUAL -> AFTER_APPROVAL`), or on one version `storebound apple release --after-approval --yes`
+   (`--manual` / `--scheduled <ISO date>` are the other two; allowed until App Review approves the version, exit 7 when it
+   is that type already; pitfall 125). Without it an approved MANUAL version waits in PENDING_DEVELOPER_RELEASE.
+   Approved = PENDING_DEVELOPER_RELEASE. Release an update yourself: `storebound apple release --manual-release --yes`
    (the first-ever release of an app is the owner's: `OWNER_STEP`) or the "Release This Version" button. With phased release on, automatic updates reach 1 %, 2 %, 5 %, 10 %, 20 %,
    50 %, 100 % over 7 days; anyone can still update manually from the store.
 5. During the rollout watch crashes / reviews. Problem: `storebound apple release --phased pause` (up to 30 days in
diff --git a/skills/store-pitfalls/SKILL.md b/skills/store-pitfalls/SKILL.md
index aa40e01..578902c 100644
--- a/skills/store-pitfalls/SKILL.md
+++ b/skills/store-pitfalls/SKILL.md
@@ -1547,3 +1547,41 @@ that fails without the fix (see CONTRIBUTING.md).
   are not the user's and are not hits. A prebuilt vendored framework carries its own paths: rebuild it path-free.
 - **Never:** point a shared build folder at the default DerivedData, or run the privacy scan only after the upload.
 - **Guard:** `cli/lib/path-free.ts`, `tests/path-free.test.ts`, the hint when `--out` is outside the home folder.
+
+## 125. Updates sat in Pending Developer Release: the version was created and submitted with release type MANUAL
+
+- **Symptom:** an approved update did not go live; it waited in PENDING_DEVELOPER_RELEASE because `apple listing` created the
+  version with releaseType MANUAL and `apple submit` never touched it.
+- **Do:** set `apple.releaseType: afterApproval` (or `manual` / `scheduled` with `apple.earliestReleaseDate`). `apple listing`
+  creates new versions with it, `apple submit` / `apple resubmit` set it on the version before submitting when it differs
+  (the dry run shows `releaseType MANUAL -> AFTER_APPROVAL`). On one version: `storebound apple release --after-approval --yes`
+  (`--manual`, `--scheduled <ISO date>`; `--platform`, `--version`, `--json`; exit 7 when it already has that type). The type
+  is editable until App Review approves the version; an approved one is released with `apple release --manual-release`.
+  Unset: new versions are MANUAL and existing ones are left as they are. Updates are agent steps; `--after-approval` on the
+  first version of an app puts it on sale by itself, so that is the owner's (exit 3 `OWNER_STEP`, `--first-release`).
+- **Never:** wait for an approval email and then look for the console button, or flip the type back with `apple listing` runs.
+- **Guard:** `cli/lib/release-type.ts`, `tests/apple-release-gaps.test.ts`.
+
+## 126. iPhone-only build of an app whose live version runs on iPad: ITMS-90101 after a full archive
+
+- **Symptom:** `storebound check` passed with `apple.ipad` false; the upload was refused after the archive with ITMS-90101 "This
+  bundle does not support one or more of the devices supported by the previous app version" (TARGETED_DEVICE_FAMILY = 1).
+- **Do:** `storebound validate` and `apple build` read the live version (READY_FOR_SALE, else the newest that was) from App
+  Store Connect: its build bundle (`deviceProtocols`, device models of `buildBundleFileSizes`) and its screenshot sets
+  (`APP_IPAD_*`); any iPad signal means iPad. They compare it with TARGETED_DEVICE_FAMILY of the Release configuration in the
+  Xcode project and with `apple.ipad`, and stop BEFORE the archive with the fix: `TARGETED_DEVICE_FAMILY = "1,2"` and
+  `apple.ipad: true`. Offline `check` warns when the live families cannot be known. `--allow-device-gap` builds anyway.
+- **Never:** drop a device family the live version supports, or turn `apple.ipad` off to silence the screenshot check.
+- **Guard:** `cli/lib/device-families.ts`, `cli/apple/device-families.ts`, `tests/apple-release-gaps.test.ts`. The build bundle
+  attribute names come from Apple's spec; which signal carries the iPad answer live is not recorded, hence the merge.
+
+## 127. TestFlight invite on a new external group: 409 STATE_ERROR.TESTER_INVITE.NO_INSTALLABLE_BUILDS
+
+- **Symptom:** `apple testflight testers --group <g> --invite --yes` created the tester but the invitation failed with 409
+  NO_INSTALLABLE_BUILDS: the group had no build past Beta App Review yet.
+- **Do:** `--invite` first checks that a build of the tester's group is installable (external: BETA_APPROVED / IN_BETA_TESTING;
+  internal: READY_FOR_BETA_TESTING / IN_BETA_TESTING). If not, the tester stays added, no invitation is sent and the run prints
+  "tester added; the invite goes out when a build in <group> passes Beta App Review (re-run with --invite then)", exit 0. The
+  409 itself is treated the same way. `apple testflight distribute --submit-review` prints the line for testers not invited yet.
+- **Never:** retry the invitation in a loop, or report the added tester as a failure.
+- **Guard:** `installableBuild` / `noInstallableBuildHint` in `cli/lib/testflight.ts`, `tests/apple-release-gaps.test.ts`.
diff --git a/skills/testflight/SKILL.md b/skills/testflight/SKILL.md
index 42aadae..f076722 100644
--- a/skills/testflight/SKILL.md
+++ b/skills/testflight/SKILL.md
@@ -39,7 +39,10 @@ changes or deletes a group.
   commits; storebound masks them in every log line (`j***@example.com`).
 - `storebound apple testflight testers --dry` shows: new testers, testers added to more groups, (with `--remove`)
   testers who leave a managed group. The real run **asks first**: Apple emails each new tester an invitation once the
-  group has a build. `--invite` (re)sends invitations to testers still `NOT_INVITED` / `INVITED` (asks again).
+  group has a build. `--invite` (re)sends invitations to testers still `NOT_INVITED` / `INVITED` (asks again) once a build of the tester's group is
+  installable (an external group: past Beta App Review). Without one the tester is added, the invite is skipped and the run
+  says "tester added; the invite goes out when a build in <group> passes Beta App Review (re-run with --invite then)" (exit 0;
+  Apple's 409 `NO_INSTALLABLE_BUILDS` is handled the same way; `distribute --submit-review` prints the same line; pitfall 127).
 - Internal groups only take App Store Connect users (Users and Access); add people there first.
 - Testers are an owner action: not an MCP tool. An agent prepares the CSV format and the dry run, the owner runs it.
 
diff --git a/tests/apple-release-gaps.test.ts b/tests/apple-release-gaps.test.ts
new file mode 100644
index 0000000..14fd382
--- /dev/null
+++ b/tests/apple-release-gaps.test.ts
@@ -0,0 +1,405 @@
+// Three gaps found in real use, against the stateful App Store Connect double (tests/helpers/fake-stores.ts):
+//  1. release type: updates sat in Pending Developer Release because versions were created / submitted as MANUAL
+//     (apple.releaseType, apple submit, apple release --after-approval | --manual)
+//  2. device families: an iPhone-only build of an app whose live version runs on iPad is refused AFTER the archive (ITMS-90101)
+//  3. TestFlight: inviting a tester of a group without an installable build is 409 NO_INSTALLABLE_BUILDS
+import { afterAll, afterEach, beforeAll, beforeEach, describe, expect, setDefaultTimeout, test } from 'bun:test';
+import { parseArgs } from '../cli/lib/args';
+import { runShipStep } from '../cli/lib/ship-step';
+import { run as appleSubmit } from '../cli/apple/submit';
+import { run as appleRelease } from '../cli/apple/release';
+import { run as appleTestflight } from '../cli/apple/testflight';
+import { run as appleBuild } from '../cli/apple/build';
+import { validateConfig } from '../cli/lib/config';
+import { planVersion } from '../cli/lib/listing-plan';
+import { releaseTypeChanges, validateReleaseType, wantedRelease } from '../cli/lib/release-type';
+import { familyVerdicts, liveFamilies, pbxFamilies, projectFamilies } from '../cli/lib/device-families';
+import { liveDeviceFamilies } from '../cli/apple/device-families';
+import { appleRules } from '../cli/lib/validate-rules';
+import { installableBuild, noInstallableBuildHint, noInstallableBuilds409 } from '../cli/lib/testflight';
+import { ascEnv, BASE, capture, project, restore } from './helpers/store-mock';
+import { installStores, type Stores, uninstallStores, writes } from './helpers/fake-stores';
+
+const APP = '6400000101';
+
+/** Runs a ship step in-process with stdout / stderr captured. */
+async function ship(key: string, argv: string[], body: (a: ReturnType<typeof parseArgs>) => Promise<void>): Promise<{ code: number; out: string; err: string }> {
+  const out: string[] = [], err: string[] = [];
+  const o = process.stdout.write, e = process.stderr.write, cl = console.log, ce = console.error, cw = console.warn, ci = console.info;
+  process.stdout.write = ((s: string | Uint8Array) => { out.push(typeof s === 'string' ? s : new TextDecoder().decode(s)); return true; }) as typeof process.stdout.write;
+  process.stderr.write = ((s: string | Uint8Array) => { err.push(typeof s === 'string' ? s : new TextDecoder().decode(s)); return true; }) as typeof process.stderr.write;
+  console.log = (...a: unknown[]) => { out.push(a.map(String).join(' ') + '\n'); };
+  console.info = console.log;
+  console.error = (...a: unknown[]) => { err.push(a.map(String).join(' ') + '\n'); };
+  console.warn = console.error;
+  try {
+    const code = await runShipStep(key, argv, parseArgs, async a => {
+      const keep = console.log;
+      if (a.has('json')) console.log = (...x: unknown[]) => console.error(...x);
+      try { await body(a); } finally { console.log = keep; }
+    });
+    return { code, out: out.join(''), err: err.join('') };
+  } finally { process.stdout.write = o; process.stderr.write = e; console.log = cl; console.error = ce; console.warn = cw; console.info = ci; }
+}
+
+// ------------------------------------------------------------------------------------------------ 1. release type
+
+describe('release type (pure)', () => {
+  test('config: afterApproval | manual | scheduled (+ date); scheduled needs the date, the date needs scheduled', () => {
+    expect(validateReleaseType({ releaseType: 'afterApproval' })).toEqual([]);
+    expect(validateReleaseType({ releaseType: 'scheduled', earliestReleaseDate: '2027-03-01T09:00:00Z' })).toEqual([]);
+    expect(validateReleaseType({ releaseType: 'soon' }).join()).toContain('afterApproval | manual | scheduled');
+    expect(validateReleaseType({ releaseType: 'scheduled' }).join()).toContain('earliestReleaseDate is required');
+    expect(validateReleaseType({ releaseType: 'manual', earliestReleaseDate: '2027-03-01T09:00:00Z' }).join()).toContain('only with apple.releaseType "scheduled"');
+    expect(validateReleaseType({ releaseType: 'scheduled', earliestReleaseDate: 'tomorrow' }).join()).toContain('ISO 8601');
+    expect(validateConfig({ ...BASE, apple: { ...BASE.apple!, releaseType: 'later' as never } }).join()).toContain('apple.releaseType');
+    expect(wantedRelease({})).toBeNull();
+    expect(wantedRelease({ releaseType: 'afterApproval' })).toEqual({ releaseType: 'AFTER_APPROVAL' });
+  });
+  test('changes are old -> new; the same instant is not a change', () => {
+    expect(releaseTypeChanges({ releaseType: 'MANUAL' }, { releaseType: 'AFTER_APPROVAL' })).toEqual([{ field: 'releaseType', from: 'MANUAL', to: 'AFTER_APPROVAL' }]);
+    expect(releaseTypeChanges({ releaseType: 'AFTER_APPROVAL' }, { releaseType: 'AFTER_APPROVAL' })).toEqual([]);
+    expect(releaseTypeChanges({ releaseType: 'SCHEDULED', earliestReleaseDate: '2027-03-01T09:00:00+00:00' }, { releaseType: 'SCHEDULED', earliestReleaseDate: '2027-03-01T09:00:00Z' })).toEqual([]);
+    expect(releaseTypeChanges({ releaseType: 'MANUAL' }, { releaseType: 'SCHEDULED', earliestReleaseDate: '2027-03-01T09:00:00Z' }).map(c => c.field)).toEqual(['releaseType', 'earliestReleaseDate']);
+  });
+  test('apple listing: a new version takes the configured type (MANUAL when unset); an existing one keeps its own unless asked', () => {
+    const rows = [{ id: 'v1', attributes: { versionString: '1.0.0', appVersionState: 'READY_FOR_SALE', platform: 'IOS' } }];
+    expect(planVersion(rows, '1.1.0', { copyright: 'c' }).attributes.releaseType).toBe('MANUAL');
+    expect(planVersion(rows, '1.1.0', { copyright: 'c', releaseType: 'AFTER_APPROVAL' }).attributes.releaseType).toBe('AFTER_APPROVAL');
+    const sched = planVersion(rows, '1.1.0', { copyright: 'c', releaseType: 'SCHEDULED', earliestReleaseDate: '2027-03-01T09:00:00Z' });
+    expect(sched.attributes).toMatchObject({ releaseType: 'SCHEDULED', earliestReleaseDate: '2027-03-01T09:00:00Z' });
+    const editable = [...rows, { id: 'v2', attributes: { versionString: '1.1.0', appVersionState: 'PREPARE_FOR_SUBMISSION', platform: 'IOS', copyright: 'c', releaseType: 'AFTER_APPROVAL' } }];
+    expect(planVersion(editable, '1.1.0', { copyright: 'c' }).action).toBe('keep');
+    expect(planVersion(editable, '1.1.0', { copyright: 'c', releaseType: 'MANUAL' }).changes).toEqual([{ field: 'releaseType', from: 'AFTER_APPROVAL', to: 'MANUAL' }]);
+  });
+});
+
+describe('release type (fake App Store Connect)', () => {
+  setDefaultTimeout(30_000);
+  let s: Stores;
+  beforeAll(() => { ascEnv(); });
+  afterAll(restore);
+  beforeEach(() => { s = installStores(); });
+  afterEach(() => { uninstallStores(); });
+  const version = (id: string, v: string, state: string, releaseType = 'MANUAL'): void => { s.asc.put({ type: 'appStoreVersions', id, attributes: { versionString: v, appVersionState: state, platform: 'IOS', releaseType }, rels: { app: APP } }); };
+  const build = (): void => { s.asc.put({ type: 'builds', id: 'b-8', attributes: { version: '8', processingState: 'VALID', usesNonExemptEncryption: false }, rels: { app: APP } }); };
+  const typeOf = (id: string): unknown => s.asc.all('appStoreVersions').find(v => v.id === id)!.attributes.releaseType;
+  const cfg = (releaseType: 'afterApproval' | 'manual') => ({ ...BASE, apple: { ...BASE.apple!, releaseType } });
+
+  test('apple submit with apple.releaseType: the dry run shows old -> new, the real run sets it BEFORE the submit, the re-run is exit 7', async () => {
+    version('ver-0', '1.0.0', 'READY_FOR_SALE');
+    version('ver-1', '1.1.0', 'PREPARE_FOR_SUBMISSION');
+    build();
+    const p = project(cfg('afterApproval'));
+    const dry = await ship('apple submit', ['--json', '--build', '8'], a => appleSubmit({ loaded: p.loaded, args: a }));
+    expect(dry.code).toBe(0);
+    expect(JSON.parse(dry.out).releaseType).toEqual({ changes: [{ field: 'releaseType', from: 'MANUAL', to: 'AFTER_APPROVAL' }] });
+    expect(typeOf('ver-1')).toBe('MANUAL');
+    expect(writes(s.calls)).toEqual([]);
+    const r = await ship('apple submit', ['--json', '--yes', '--build', '8'], a => appleSubmit({ loaded: p.loaded, args: a }));
+    expect(r.err).not.toContain('error:');
+    expect(r.code).toBe(0);
+    expect(r.err).toContain('release type of 1.1.0: releaseType MANUAL -> AFTER_APPROVAL');
+    expect(typeOf('ver-1')).toBe('AFTER_APPROVAL');
+    const w = writes(s.calls).map(c => `${c.method} ${c.path}`);
+    expect(w.indexOf('PATCH /v1/appStoreVersions/ver-1')).toBeGreaterThanOrEqual(0);
+    expect(w.indexOf('PATCH /v1/appStoreVersions/ver-1')).toBeLessThan(w.findIndex(x => /^PATCH \/v1\/reviewSubmissions\//.test(x)));
+    const again = await ship('apple submit', ['--json', '--yes', '--build', '8'], a => appleSubmit({ loaded: p.loaded, args: a }));
+    expect(again.code).toBe(7);
+  });
+
+  test('apple submit without apple.releaseType leaves the version\'s release type alone', async () => {
+    version('ver-0', '1.0.0', 'READY_FOR_SALE');
+    version('ver-1', '1.1.0', 'PREPARE_FOR_SUBMISSION');
+    build();
+    const p = project(BASE);
+    const r = await ship('apple submit', ['--json', '--yes', '--build', '8'], a => appleSubmit({ loaded: p.loaded, args: a }));
+    expect(r.code).toBe(0);
+    expect(typeOf('ver-1')).toBe('MANUAL');
+    expect(writes(s.calls).some(c => c.path === '/v1/appStoreVersions/ver-1')).toBe(false);
+  });
+
+  test('apple release --after-approval --yes on an update: set, then exit 7 when it is that type; --manual puts it back', async () => {
+    version('ver-0', '1.0.0', 'READY_FOR_SALE');
+    version('ver-1', '1.1.0', 'WAITING_FOR_REVIEW');
+    const p = project(BASE);
+    const run = (argv: string[]) => ship('apple release', ['--json', '--yes', ...argv], a => appleRelease({ loaded: p.loaded, args: a }));
+    const r = await run(['--after-approval', '--version', '1.1.0']);
+    expect(r.err).not.toContain('error:');
+    expect(r.code).toBe(0);
+    expect(JSON.parse(r.out)).toMatchObject({ ok: true, step: 'release', version: '1.1.0', releaseType: 'AFTER_APPROVAL', from: 'MANUAL', changed: true, releaseKind: 'update' });
+    expect(writes(s.calls).map(c => `${c.method} ${c.path}`)).toEqual(['PATCH /v1/appStoreVersions/ver-1']);
+    expect(typeOf('ver-1')).toBe('AFTER_APPROVAL');
+    const n = s.calls.length;
+    const again = await run(['--after-approval']);
+    expect(again.code).toBe(7);
+    expect(JSON.parse(again.out)).toMatchObject({ ok: true, alreadyThere: true });
+    expect(writes(s.calls.slice(n))).toEqual([]);
+    const back = await run(['--manual', '--version', '1.1.0']);
+    expect(back.code).toBe(0);
+    expect(typeOf('ver-1')).toBe('MANUAL');
+  });
+
+  test('apple release --after-approval --dry changes nothing; --scheduled sets the date; two type flags are a usage error', async () => {
+    version('ver-0', '1.0.0', 'READY_FOR_SALE');
+    version('ver-1', '1.1.0', 'PREPARE_FOR_SUBMISSION');
+    const p = project(BASE);
+    const dry = await ship('apple release', ['--json', '--after-approval', '--dry'], a => appleRelease({ loaded: p.loaded, args: a }));
+    expect(dry.code).toBe(0);
+    expect(JSON.parse(dry.out)).toMatchObject({ dryRun: true, changes: [{ field: 'releaseType', from: 'MANUAL', to: 'AFTER_APPROVAL' }] });
+    expect(writes(s.calls)).toEqual([]);
+    const sch = await ship('apple release', ['--json', '--yes', '--scheduled', '2027-03-01T09:00:00Z'], a => appleRelease({ loaded: p.loaded, args: a }));
+    expect(sch.code).toBe(0);
+    expect(s.asc.all('appStoreVersions').find(v => v.id === 'ver-1')!.attributes).toMatchObject({ releaseType: 'SCHEDULED', earliestReleaseDate: '2027-03-01T09:00:00Z' });
+    const both = await ship('apple release', ['--json', '--yes', '--manual', '--after-approval'], a => appleRelease({ loaded: p.loaded, args: a }));
+    expect(both.code).not.toBe(0);
+    expect(both.err).toContain('alternatives');
+  });
+
+  test('an approved version (Pending Developer Release) is refused with the way out; a released one too', async () => {
+    version('ver-0', '1.0.0', 'READY_FOR_SALE');
+    version('ver-1', '1.1.0', 'PENDING_DEVELOPER_RELEASE');
+    const p = project(BASE);
+    const r = await ship('apple release', ['--json', '--yes', '--after-approval', '--version', '1.1.0'], a => appleRelease({ loaded: p.loaded, args: a }));
+    expect(r.code).not.toBe(0);
+    expect(r.err).toContain('apple release --manual-release --version 1.1.0');
+    expect(writes(s.calls)).toEqual([]);
+    // already MANUAL and asked for MANUAL: nothing to do even in that state
+    const same = await ship('apple release', ['--json', '--yes', '--manual', '--version', '1.1.0'], a => appleRelease({ loaded: p.loaded, args: a }));
+    expect(same.code).toBe(7);
+  });
+
+  test('--after-approval on the first version of an app is the owner\'s step (exit 3 OWNER_STEP) unless --first-release', async () => {
+    version('ver-1', '1.0.0', 'PREPARE_FOR_SUBMISSION');
+    const p = project(BASE);
+    const r = await ship('apple release', ['--json', '--yes', '--after-approval'], a => appleRelease({ loaded: p.loaded, args: a }));
+    expect(r.code).toBe(3);
+    expect(JSON.parse(r.out)).toMatchObject({ ok: false, error: { code: 'OWNER_STEP' } });
+    expect(writes(s.calls)).toEqual([]);
+    const manual = await ship('apple release', ['--json', '--yes', '--manual'], a => appleRelease({ loaded: p.loaded, args: a }));
+    expect(manual.code).toBe(7);
+    const ok = await ship('apple release', ['--json', '--yes', '--after-approval', '--first-release'], a => appleRelease({ loaded: p.loaded, args: a }));
+    expect(ok.code).toBe(0);
+    expect(typeOf('ver-1')).toBe('AFTER_APPROVAL');
+  });
+});
+
+// ------------------------------------------------------------------------------------------------ 2. device families
+
+const PBX = (family: string, bundle = 'com.example.notes'): string => `// !$*UTF8*$!
+{
+	objects = {
+/* Begin XCBuildConfiguration section */
+		AA01 /* Debug */ = {
+			isa = XCBuildConfiguration;
+			buildSettings = {
+				PRODUCT_BUNDLE_IDENTIFIER = ${bundle};
+				TARGETED_DEVICE_FAMILY = "1,2";
+			};
+			name = Debug;
+		};
+		AA02 /* Release */ = {
+			isa = XCBuildConfiguration;
+			baseConfigurationReference = ZZ01;
+			buildSettings = {
+				PRODUCT_BUNDLE_IDENTIFIER = ${bundle};
+				TARGETED_DEVICE_FAMILY = ${family};
+			};
+			name = Release;
+		};
+		AA03 /* Release */ = {
+			isa = XCBuildConfiguration;
+			buildSettings = {
+				PRODUCT_BUNDLE_IDENTIFIER = ${bundle}.Share;
+				TARGETED_DEVICE_FAMILY = "1,2";
+				WRAPPER_EXTENSION = appex;
+			};
+			name = Release;
+		};
+/* End XCBuildConfiguration section */
+	};
+}
+`;
+
+describe('device families (pure)', () => {
+  test('pbxproj: the Release configuration of the app\'s bundle id, not the extension\'s or Debug', () => {
+    expect(pbxFamilies(PBX('1'), 'com.example.notes')).toMatchObject({ list: [1], families: { iphone: true, ipad: false }, configurations: ['1'] });
+    expect(pbxFamilies(PBX('"1,2"'), 'com.example.notes')).toMatchObject({ list: [1, 2], families: { iphone: true, ipad: true } });
+    expect(pbxFamilies('no project here', 'com.example.notes')).toBeNull();
+  });
+  test('live signals: any iPad signal means iPad; no signal at all is unknown, never iPhone only', () => {
+    expect(liveFamilies('1.0.0', 'READY_FOR_SALE', [{ name: 'screenshot sets', values: ['APP_IPHONE_67', 'APP_IPAD_PRO_3GEN_129'] }])?.families).toEqual({ iphone: true, ipad: true });
+    expect(liveFamilies('1.0.0', 'READY_FOR_SALE', [{ name: 'a', values: [] }, { name: 'b', values: ['APP_IPHONE_67'] }])?.families).toEqual({ iphone: true, ipad: false });
+    expect(liveFamilies('1.0.0', 'READY_FOR_SALE', [{ name: 'a', values: [] }])).toBeNull();
+  });
+  test('verdicts: the exact fix; unknown is a warning; iPhone-only live version is fine', () => {
+    const live = liveFamilies('1.0.0', 'READY_FOR_SALE', [{ name: 'screenshot sets', values: ['APP_IPAD_PRO_3GEN_129'] }]);
+    const project = pbxFamilies(PBX('1'), 'com.example.notes', 'ios/App/App.xcodeproj/project.pbxproj');
+    const v = familyVerdicts({ live, project, ipad: false });
+    expect(v.map(x => x.level)).toEqual(['blocker', 'blocker']);
+    expect(v[0]!.msg).toContain('ITMS-90101');
+    expect(v[0]!.fix).toContain('"1,2"');
+    expect(v[1]!.fix).toContain('apple.ipad: true');
+    expect(familyVerdicts({ live, project: pbxFamilies(PBX('"1,2"'), 'com.example.notes'), ipad: true }).map(x => x.level)).toEqual(['ok']);
+    expect(familyVerdicts({ live: null, project, ipad: false })[0]!.level).toBe('warn');
+    expect(familyVerdicts({ live: liveFamilies('1.0.0', 'READY_FOR_SALE', [{ name: 'a', values: ['APP_IPHONE_67'] }]), project, ipad: false })[0]!.level).toBe('ok');
+  });
+  test('validate rules turn the verdicts into findings', () => {
+    const f = appleRules({ deviceFamilies: [{ level: 'blocker', msg: 'x ITMS-90101', fix: 'y' }], version: null, build: null, expectedLocales: [], locales: [], requiredDisplayTypes: [], reviewDetail: null, ageRating: null, priceSchedule: true, availability: true, iaps: [], expectedProducts: [], privacyUrl: { url: 'https://example.com', status: 200 } }).filter(x => x.code === 'device-families');
+    expect(f).toMatchObject([{ store: 'apple', level: 'blocker', code: 'device-families', fix: 'y' }]);
+  });
+});
+
+describe('device families (fake App Store Connect + project)', () => {
+  setDefaultTimeout(30_000);
+  let s: Stores;
+  beforeAll(() => { ascEnv(); });
+  afterAll(restore);
+  beforeEach(() => { s = installStores(); });
+  afterEach(() => { uninstallStores(); });
+  /** a live version 1.0.0 with a build whose bundle names the families; screenshotSets: display types of its first locale */
+  function live(o: { protocols?: string[]; sets?: string[]; models?: string[] }): void {
+    s.asc.put({ type: 'appStoreVersions', id: 'ver-live', attributes: { versionString: '1.0.0', appVersionState: 'READY_FOR_SALE', platform: 'IOS' }, rels: { app: APP } });
+    s.asc.put({ type: 'builds', id: 'b-live', attributes: { version: '4', processingState: 'VALID' }, rels: { app: APP, appStoreVersion: 'ver-live' } });
+    s.asc.put({ type: 'buildBundles', id: 'bb-live', attributes: { bundleId: 'com.example.notes', bundleType: 'APP', deviceProtocols: o.protocols ?? [] }, rels: { build: 'b-live' } });
+    for (const [i, m] of (o.models ?? []).entries()) s.asc.put({ type: 'buildBundleFileSizes', id: `fs-${i}`, attributes: { deviceModel: m }, rels: { buildBundle: 'bb-live' } });
+    if (o.sets) {
+      s.asc.put({ type: 'appStoreVersionLocalizations', id: 'loc-live', attributes: { locale: 'en-US' }, rels: { appStoreVersion: 'ver-live' } });
+      for (const [i, t] of o.sets.entries()) s.asc.put({ type: 'appScreenshotSets', id: `set-${i}`, attributes: { screenshotDisplayType: t }, rels: { appStoreVersionLocalization: 'loc-live' } });
+    }
+  }
+  const IPHONE_ONLY = { 'ios/App/App.xcodeproj/project.pbxproj': PBX('1') };
+  const cfg = { ...BASE, apple: { ...BASE.apple!, ipad: false, signing: { teamId: 'ABCDE12345' } } };
+
+  test('the live version\'s families are read from the build bundle, its device models and its screenshot sets', async () => {
+    const c = (await import('../cli/apple/asc')).ascClient;
+    live({ sets: ['APP_IPHONE_67', 'APP_IPAD_PRO_3GEN_129'] });
+    expect((await liveDeviceFamilies(await c('.', 'com.example.notes', APP), APP))?.families).toEqual({ iphone: true, ipad: true });
+    uninstallStores(); s = installStores();
+    live({ protocols: ['iphone', 'ipad'] });
+    expect((await liveDeviceFamilies(await c('.', 'com.example.notes', APP), APP))?.evidence[0]).toContain('deviceProtocols');
+    uninstallStores(); s = installStores();
+    live({ models: ['iPad_Pro_12_9_6th', 'iPhone15,2'] });
+    expect((await liveDeviceFamilies(await c('.', 'com.example.notes', APP), APP))?.families.ipad).toBe(true);
+    uninstallStores(); s = installStores();
+    expect(await liveDeviceFamilies(await c('.', 'com.example.notes', APP), APP)).toBeNull();
+  });
+
+  test('apple build stops BEFORE the archive when the project drops iPad that the live version has; --allow-device-gap goes on', async () => {
+    live({ sets: ['APP_IPHONE_67', 'APP_IPAD_PRO_3GEN_129'] });
+    const argv = ['--build-number', '5', '--no-prebuild'];
+    const p = project(cfg, IPHONE_ONLY);
+    const r = await capture(() => appleBuild(p.ctx(argv))).catch(e => ({ out: '', err: String((e as Error).message ?? e), exit: 1 }));
+    expect(r.exit).toBe(1);
+    expect(r.err).toContain('stopped before the archive');
+    expect(r.err).toContain('ITMS-90101');
+    expect(r.err).toContain('TARGETED_DEVICE_FAMILY to "1,2"');
+    expect(r.err).toContain('apple.ipad: true');
+    expect(r.err).toContain('--allow-device-gap');
+    // dry: warns, never throws
+    const dry = await capture(() => appleBuild(p.ctx([...argv, '--dry'])));
+    expect(dry.err).toContain('ITMS-90101');
+    // the escape hatch passes the check (the run then stops later: no Xcode on this machine)
+    const gap = await capture(() => appleBuild(p.ctx([...argv, '--allow-device-gap']))).catch(e => ({ out: '', err: String((e as Error).message ?? e), exit: 1 }));
+    expect(gap.err).not.toContain('stopped before the archive');
+  });
+
+  test('apple build passes the check with iPad in the project and apple.ipad true; an iPhone-only live version never blocks', async () => {
+    live({ sets: ['APP_IPHONE_67', 'APP_IPAD_PRO_3GEN_129'] });
+    const ok = project({ ...cfg, apple: { ...cfg.apple, ipad: true } }, { 'ios/App/App.xcodeproj/project.pbxproj': PBX('"1,2"') });
+    const r = await capture(() => appleBuild(ok.ctx(['--build-number', '5', '--no-prebuild', '--dry'])));
+    expect(r.err).not.toContain('ITMS-90101');
+    uninstallStores(); s = installStores();
+    live({ sets: ['APP_IPHONE_67'] });
+    const iph = project(cfg, IPHONE_ONLY);
+    const r2 = await capture(() => appleBuild(iph.ctx(['--build-number', '5', '--no-prebuild', '--dry'])));
+    expect(r2.err).not.toContain('ITMS-90101');
+  });
+
+  test('projectFamilies reads the project found under the root (and apple.build.project)', () => {
+    const p = project(cfg, IPHONE_ONLY);
+    expect(projectFamilies(p.root, 'com.example.notes')).toMatchObject({ file: 'ios/App/App.xcodeproj/project.pbxproj', list: [1] });
+    expect(projectFamilies(p.root, 'com.example.notes', 'ios/App/App.xcodeproj')?.list).toEqual([1]);
+    expect(projectFamilies(project(cfg).root, 'com.example.notes')).toBeNull();
+  });
+});
+
+// ------------------------------------------------------------------------------------------------ 3. TestFlight invite
+
+describe('TestFlight invite needs an installable build', () => {
+  setDefaultTimeout(30_000);
+  let s: Stores;
+  beforeAll(() => { ascEnv(); });
+  afterAll(restore);
+  beforeEach(() => { s = installStores(); });
+  afterEach(() => { uninstallStores(); });
+  const CSV = { '.storebound/testers.csv': 'email,first_name,groups\ntester1@example.com,Ex,Friends\n' };
+  const cfg = { ...BASE, apple: { ...BASE.apple!, testflight: { groups: [{ name: 'Friends' }] } } };
+  const group = (): void => { s.asc.put({ type: 'betaGroups', id: 'grp-friends', attributes: { name: 'Friends', isInternalGroup: false }, rels: { app: APP } }); };
+  const buildIn = (external: string): void => {
+    s.asc.put({ type: 'builds', id: 'b-1', attributes: { version: '7', processingState: 'VALID', expired: false }, rels: { app: APP, betaGroups: ['grp-friends'] } });
+    s.asc.put({ type: 'buildBetaDetails', id: 'bd-1', attributes: { externalBuildState: external, internalBuildState: 'IN_BETA_TESTING' }, rels: { build: 'b-1' } });
+  };
+  const invites = (): number => s.asc.all('betaTesterInvitations').length;
+
+  test('pure: external needs BETA_APPROVED / IN_BETA_TESTING, internal READY_FOR_BETA_TESTING / IN_BETA_TESTING', () => {
+    const b = { attributes: { processingState: 'VALID' } };
+    expect(installableBuild(b, { externalBuildState: 'READY_FOR_BETA_SUBMISSION' }, false)).toBe(false);
+    expect(installableBuild(b, { externalBuildState: 'WAITING_FOR_BETA_REVIEW' }, false)).toBe(false);
+    expect(installableBuild(b, { externalBuildState: 'BETA_APPROVED' }, false)).toBe(true);
+    expect(installableBuild(b, { externalBuildState: 'IN_BETA_TESTING' }, false)).toBe(true);
+    expect(installableBuild(b, { internalBuildState: 'READY_FOR_BETA_TESTING' }, true)).toBe(true);
+    expect(installableBuild({ attributes: { processingState: 'VALID', expired: true } }, { externalBuildState: 'BETA_APPROVED' }, false)).toBe(false);
+    expect(noInstallableBuildHint(['Friends'])).toBe('tester added; the invite goes out when a build in Friends passes Beta App Review (re-run with --invite then)');
+    expect(noInstallableBuilds409(new Error('POST /v1/betaTesterInvitations -> 409 STATE_ERROR.TESTER_INVITE.NO_INSTALLABLE_BUILDS'))).toBe(true);
+    expect(noInstallableBuilds409(new Error('-> 409 ALREADY_EXISTS'))).toBe(false);
+  });
+
+  test('a new external group without an approved build: the tester is added, no invitation is sent, exit 0 with the hint', async () => {
+    group();
+    buildIn('WAITING_FOR_BETA_REVIEW');
+    const p = project(cfg, CSV);
+    const r = await capture(() => appleTestflight(p.ctx(['testers', '--group', 'Friends', '--invite', '--yes'])));
+    expect(r.exit).toBeNull();
+    expect(r.err).toContain('tester added; the invite goes out when a build in Friends passes Beta App Review (re-run with --invite then)');
+    expect(s.asc.all('betaTesters')).toHaveLength(1);
+    expect(invites()).toBe(0);
+    expect(writes(s.calls).some(c => c.path === '/v1/betaTesterInvitations')).toBe(false);
+  });
+
+  test('once a build passed Beta App Review, --invite sends the invitation', async () => {
+    group();
+    const p = project(cfg, CSV);
+    await capture(() => appleTestflight(p.ctx(['testers', '--group', 'Friends', '--invite', '--yes'])));
+    expect(invites()).toBe(0);
+    buildIn('BETA_APPROVED');
+    const r = await capture(() => appleTestflight(p.ctx(['testers', '--group', 'Friends', '--invite', '--yes'])));
+    expect(r.exit).toBeNull();
+    expect(invites()).toBe(1);
+  });
+
+  test('if the 409 still comes back (the build looked installable), it is the same case: warning, no throw, exit 0', async () => {
+    group();
+    buildIn('BETA_APPROVED');
+    const p = project(cfg, CSV);
+    // Apple's answer wins over our read: the double refuses the invitation as the live API did
+    s.faults.push({ method: 'POST', match: /\/v1\/betaTesterInvitations/, when: 'before', status: 409, code: 'STATE_ERROR.TESTER_INVITE.NO_INSTALLABLE_BUILDS', detail: 'The tester cannot be invited because the groups they belong to have no installable builds.' });
+    const r = await capture(() => appleTestflight(p.ctx(['testers', '--group', 'Friends', '--invite', '--yes'])));
+    expect(r.exit).toBeNull();
+    expect(r.err).toContain('passes Beta App Review');
+    expect(s.asc.all('betaTesters')).toHaveLength(1);
+  });
+
+  test('distribute --submit-review prints the hint for testers that are added but not invited', async () => {
+    group();
+    buildIn('READY_FOR_BETA_SUBMISSION');
+    const p = project(cfg, CSV);
+    await capture(() => appleTestflight(p.ctx(['testers', '--group', 'Friends', '--yes'])));
+    s.asc.all('buildBetaDetails')[0]!.attributes.processingState = 'x';
+    s.asc.put({ type: 'preReleaseVersions', id: 'pre-1', attributes: { version: '1.0.0', platform: 'IOS' }, rels: { app: APP } });
+    s.asc.all('builds')[0]!.rels.preReleaseVersion = 'pre-1';
+    s.asc.all('builds')[0]!.rels.buildBetaDetail = 'bd-1';
+    const r = await capture(() => appleTestflight(p.ctx(['distribute', '--build', '7', '--group', 'Friends', '--submit-review', '--yes'])));
+    expect(r.out + r.err).toContain('tester added; the invite goes out when a build in Friends passes Beta App Review');
+  });
+});
diff --git a/tests/helpers/fake-stores.ts b/tests/helpers/fake-stores.ts
index d89233f..272ec93 100644
--- a/tests/helpers/fake-stores.ts
+++ b/tests/helpers/fake-stores.ts
@@ -76,6 +76,10 @@ const LISTS: Record<string, { type: string; one?: boolean }> = {
   'apps/promotedPurchases': { type: 'promotedPurchases' },
   'subscriptions/winBackOffers': { type: 'winBackOffers' },
   'betaGroups/betaTesters': { type: 'betaTesters' },
+  'betaGroups/builds': { type: 'builds' },
+  'builds/buildBetaDetail': { type: 'buildBetaDetails', one: true },
+  'builds/betaAppReviewSubmission': { type: 'betaAppReviewSubmissions', one: true },
+  'buildBundles/buildBundleFileSizes': { type: 'buildBundleFileSizes' },
   'apps/analyticsReportRequests': { type: 'analyticsReportRequests' },
   'apps/assetLibrary': { type: 'appAssetLibraries', one: true },
   'appAssetLibraries/images': { type: 'appAssetLibraryImages' },
@@ -162,6 +166,21 @@ export class FakeAsc {
     return { type: r.type, id: r.id, attributes: r.attributes, relationships };
   }
 
+  /** Whether a group of the tester has a build its testers can install (external: BETA_APPROVED / IN_BETA_TESTING; internal: READY_FOR_BETA_TESTING / IN_BETA_TESTING). */
+  hasInstallableBuild(testerId: string): boolean {
+    const gids = [this.res.get(testerId)?.rels.betaGroups ?? []].flat();
+    return gids.some(gid => {
+      const g = this.res.get(gid);
+      if (!g) return false;
+      const internal = g.attributes.isInternalGroup === true;
+      const builds = internal && g.attributes.hasAccessToAllBuilds === true ? this.all('builds') : this.children(gid, 'builds');
+      return builds.some(b => {
+        const st = String(this.children(b.id, 'buildBetaDetails')[0]?.attributes[internal ? 'internalBuildState' : 'externalBuildState'] ?? '');
+        return internal ? ['READY_FOR_BETA_TESTING', 'IN_BETA_TESTING'].includes(st) : ['BETA_APPROVED', 'IN_BETA_TESTING'].includes(st);
+      });
+    });
+  }
+
   children(parent: string, type: string): R[] {
     return this.all(type).filter(r => Object.values(r.rels).some(v => (Array.isArray(v) ? v.includes(parent) : v === parent)));
   }
@@ -205,6 +224,11 @@ export class FakeAsc {
       if (v && v.attributes.state === 'DEVELOPER_REJECTED' && v.type !== 'appStoreVersions') v.attributes.state = 'READY_FOR_REVIEW';
       main.attributes.state ??= 'READY_FOR_REVIEW';
     }
+    // seen live: inviting a tester whose groups have no installable build (an external build is installable after Beta App
+    // Review) is 409 STATE_ERROR.TESTER_INVITE.NO_INSTALLABLE_BUILDS
+    if (d.type === 'betaTesterInvitations' && !this.hasInstallableBuild(String(main.rels.betaTester)))
+      return json({ errors: [{ id: '00000000-0000-0000-0000-000000000000', status: '409', code: 'STATE_ERROR.TESTER_INVITE.NO_INSTALLABLE_BUILDS', title: 'There are no installable builds',
+        detail: 'The tester cannot be invited because the groups they belong to have no installable builds.' }] }, 409);
     const u = UNIQUE[d.type];
     if (u && this.all(d.type).some(r => u(r) === u(main as R)))
       return json({ errors: [{ status: '409', code: 'ENTITY_ERROR.ATTRIBUTE.INVALID.DUPLICATE', title: 'The provided entity includes an attribute with a value that has already been used', detail: 'already exists' }] }, 409);
@@ -267,7 +291,8 @@ export class FakeAsc {
       }
       if (!id) return json({ data: this.visible(this.filtered(this.all(type!), u.searchParams)).map(r => this.view(r)), links: {} });
       const self = this.res.get(id);
-      if (!rel) return self && self.type === type ? json({ data: this.view(self) }) : json({ errors: [{ status: '404' }] }, 404);
+      // include=<relationship>: the children of that type (a build's buildBundles)
+      if (!rel) return self && self.type === type ? json({ data: this.view(self), included: (u.searchParams.get('include') ?? '').split(',').filter(Boolean).flatMap(t => this.children(self.id, t).map(r => this.view(r))) }) : json({ errors: [{ status: '404' }] }, 404);
       if (rel === 'relationships') return json({ data: this.children(id, rel2!).map(r => ({ type: r.type, id: r.id })) });
       // an availability's territories are the ids its create named (a to-many relationship, not child resources)
       if (rel === 'availableTerritories' && self) {
diff --git a/tests/signing-targets.test.ts b/tests/signing-targets.test.ts
index b3c6bc3..8f681b3 100644
--- a/tests/signing-targets.test.ts
+++ b/tests/signing-targets.test.ts
@@ -361,6 +361,8 @@ describe('App Group association under automatic signing (fake App Store Connect)
       { match: new RegExp(`^/v1/bundleIds/${MAIN}/profiles`), answer: () => page(o.main ?? [managed('com.example.notes', GROUP)]) },
       { match: /^\/v1\/profiles\/MANAGED_[^/]+\/relationships\/certificates/, answer: { errors: [{ status: '404' }] }, status: 404 },
       { match: /^\/v1\/apps\/6400000101\/gameCenterDetail/, answer: { errors: [{ status: '404' }] }, status: 404 },
+      // apple build compares the live version's device families first: an app without versions has none
+      { match: /^\/v1\/apps\/6400000101\/appStoreVersions/, answer: page([]) },
     ] as never;
   }
   const ensure = async (argv: string[] = ['ensure', '--yes']) => {

From 5f2e03dc7d987f58eef5ae24fb7300b1d6226fc0 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Tue, 27 Oct 2026 17:07:53 +0700
Subject: [PATCH 051/126] docs: apple release type flags and config template
 line

---
 docs/commands.md               | 2 +-
 templates/storebound.config.ts | 1 +
 2 files changed, 2 insertions(+), 1 deletion(-)

diff --git a/docs/commands.md b/docs/commands.md
index fddd8f3..050b729 100644
--- a/docs/commands.md
+++ b/docs/commands.md
@@ -87,7 +87,7 @@ run in the background with a log (`storebound shots render > .storebound/render.
 | `apple game-center [status]` | API | Game Center from `games`: the app's Game Center detail, the version switch, leaderboards and achievements with localizations (upsert by vendor id, read back; nothing submitted); dry first, asks |
 | `games status [--json]` | API, read-only | Game Center and Play Games Services on both stores: capability, entitlement, games_APP_ID, counts vs the config, pending changes, console links |
 | `apple encryption` | API | export compliance answer from `apple.usesNonExemptEncryption` (never guessed) |
-| `apple release --phased on\|pause\|resume\|complete`, `--manual-release` | API | phased release, release an approved version (resume / complete / release ask first) |
+| `apple release --phased on|pause|resume|complete`, `--manual-release`, `--after-approval | --manual | --scheduled <date>` | API | phased release, release an approved version (resume / complete / release ask first), how an unapproved version goes live (`apple.releaseType`; exit 7 when already that type) |
 | `apple signing status` | API, read-only | bundle id capabilities, distribution certificates (with / without a private key on this Mac), App Store profiles per bundle id, installed or not |
 | `apple signing ensure [--keychain] [--no-install]` | API | missing capabilities, a distribution certificate from a key made here (kept 0600 in `.storebound/signing/`, never printed), App Store profiles installed for Xcode; dry first, asks; Developer ID needs the Account Holder (403 explained) |
 | `apple build [--version x.y.z] [--build-number N]` | local + API read | `build.prebuild` first (Capacitor: web build + cap sync; stale copied web assets stop the build), then xcodebuild archive + exportArchive with a generated ExportOptions.plist (app-store-connect, team, signing style, profiles) and the API key; next build number; Capacitor, React Native, Flutter, Unity projects found |
diff --git a/templates/storebound.config.ts b/templates/storebound.config.ts
index 91a5bab..b25122e 100644
--- a/templates/storebound.config.ts
+++ b/templates/storebound.config.ts
@@ -51,6 +51,7 @@ const config: ShipConfig = {
     // usesNonExemptEncryption: false,
     // ipad: true,    // the app runs on iPad: 13" iPad screenshots (2064 x 2752, ipad13) are rendered, checked and uploaded
     // iphoneMedium: true,   // optional 6.3" iPhone set (1206 x 2622, iphone-medium); off: Apple scales the 6.5" set down
+    // releaseType: "afterApproval",   // afterApproval | manual | scheduled (+ earliestReleaseDate): how an approved version goes live; unset = new versions MANUAL
     // iphoneDuo: true,      // optional iPhone Duo (foldable) sets, outer 1398 x 2034 + inner 2007 x 2853; rendered and checked, not uploaded until the API takes them
     // screenshotTypes: ['APP_IPHONE_61'],   // what `storebound validate` requires per locale (default: medium display, met by a 6.9" or 6.5" set; + APP_IPAD_PRO_3GEN_129 with ipad)
     // TestFlight (`storebound apple testflight`, testflight skill). Tester emails live in .storebound/testers.csv only.

From f64f125de64bd88a096533a127148da1093f0d90 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Tue, 27 Oct 2026 17:08:39 +0700
Subject: [PATCH 052/126] docs: escape the table pipes

---
 docs/commands.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/commands.md b/docs/commands.md
index 050b729..4e3b204 100644
--- a/docs/commands.md
+++ b/docs/commands.md
@@ -87,7 +87,7 @@ run in the background with a log (`storebound shots render > .storebound/render.
 | `apple game-center [status]` | API | Game Center from `games`: the app's Game Center detail, the version switch, leaderboards and achievements with localizations (upsert by vendor id, read back; nothing submitted); dry first, asks |
 | `games status [--json]` | API, read-only | Game Center and Play Games Services on both stores: capability, entitlement, games_APP_ID, counts vs the config, pending changes, console links |
 | `apple encryption` | API | export compliance answer from `apple.usesNonExemptEncryption` (never guessed) |
-| `apple release --phased on|pause|resume|complete`, `--manual-release`, `--after-approval | --manual | --scheduled <date>` | API | phased release, release an approved version (resume / complete / release ask first), how an unapproved version goes live (`apple.releaseType`; exit 7 when already that type) |
+| `apple release --phased on\|pause\|resume\|complete`, `--manual-release`, `--after-approval \| --manual \| --scheduled <date>` | API | phased release, release an approved version (resume / complete / release ask first), how an unapproved version goes live (`apple.releaseType`; exit 7 when already that type) |
 | `apple signing status` | API, read-only | bundle id capabilities, distribution certificates (with / without a private key on this Mac), App Store profiles per bundle id, installed or not |
 | `apple signing ensure [--keychain] [--no-install]` | API | missing capabilities, a distribution certificate from a key made here (kept 0600 in `.storebound/signing/`, never printed), App Store profiles installed for Xcode; dry first, asks; Developer ID needs the Account Holder (403 explained) |
 | `apple build [--version x.y.z] [--build-number N]` | local + API read | `build.prebuild` first (Capacitor: web build + cap sync; stale copied web assets stop the build), then xcodebuild archive + exportArchive with a generated ExportOptions.plist (app-store-connect, team, signing style, profiles) and the API key; next build number; Capacitor, React Native, Flutter, Unity projects found |

From 2dc20b61de5a6e6679324cb0ca6422a248fc2f93 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Tue, 27 Oct 2026 17:10:59 +0700
Subject: [PATCH 053/126] regenerate embedded skills

---
 cli/lib/embedded.ts | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/cli/lib/embedded.ts b/cli/lib/embedded.ts
index c963dee..6429370 100644
--- a/cli/lib/embedded.ts
+++ b/cli/lib/embedded.ts
@@ -26,7 +26,7 @@ export const TEMPLATE_TEXT: Record<string, string> = {
   "profiles/subscription-app/listing.md": "# Example App · Google Play listing copy\n\nSource for `storebound play listing` (title, short + full description) and `storebound play release` (release notes).\nRules the parser follows:\n- every `## ...` section with a `<!-- play: <codes> -->` line is a listing; one section can serve several Play codes\n- under it, `### ...` headings that contain **title** (optional, defaults to `app.name`), **short**, **full** and\n  **what's new**, each followed by one fenced block\n- limits (checked before anything is sent): title 30, short 80, full 4000, what's new 500 characters\nOnly claim what the app really does. No prices, no \"best / #1\", no other apps' names.\n\n---\n\n## English (en-US)\n<!-- play: en-US -->\n\n### Play short description (max 80)\n```\nWhat the app does for people, in one plain line\n```\n\n### Play full description (max 4000)\n```\nFirst paragraph: the job the app does and why it is easier with it, in two or three sentences.\n\nFEATURES\n• Lists and notes that sync across your devices\n• Share a list with family or friends\n• Export your data or delete your account in Settings, any time\n\nFree to use with up to 3 lists. Example Pro unlocks unlimited lists, sharing and themes: yearly with a 1-week free trial, or monthly. Payment is charged to your store account; the subscription renews automatically unless cancelled at least 24 hours before the end of the period, and you can manage or cancel it in your account settings.\n\nTerms of Use: https://example.com/terms\nPrivacy Policy: https://example.com/privacy\n```\n\n### What's new (max 500)\n```\nFirst release. Thanks for trying it!\n```\n\n## Türkçe (tr-TR)\n<!-- play: tr-TR -->\n\n### Play kısa açıklama · short (max 80)\n```\nUygulamanın insanlar için ne yaptığını anlatan sade bir cümle\n```\n\n### Play tam açıklama · full (max 4000)\n```\nİlk paragraf: uygulamanın gördüğü iş ve onunla neden daha kolay olduğu, iki üç cümlede.\n\nÖZELLİKLER\n• Tüm cihazlarında eşitlenen listeler ve notlar\n• Bir listeyi ailen ya da arkadaşlarınla paylaş\n• Verilerini dışa aktar ya da hesabını Ayarlar'dan istediğin an sil\n\n3 listeye kadar ücretsiz. Example Pro sınırsız liste, paylaşım ve tema açar: 1 hafta ücretsiz denemeli yıllık ya da aylık. Ödeme mağaza hesabınızdan alınır; abonelik, dönem bitmeden en az 24 saat önce iptal edilmezse otomatik yenilenir; hesap ayarlarınızdan yönetebilir ya da iptal edebilirsiniz.\n\nKullanım Koşulları: https://example.com/terms\nGizlilik Politikası: https://example.com/privacy\n```\n\n### Yenilikler · what's new (max 500)\n```\nİlk sürüm. Denediğin için teşekkürler!\n```\n",
   "profiles/subscription-app/storebound.config.ts": "// storebound config for one app (profile \"subscription-app\": accounts plus auto-renewable subscriptions, an\n// analytics SDK, no ads). Every answer below is a starting point: edit it to match your app. Credentials NEVER go\n// here (env vars or .storebound/credentials.json, gitignored). Paths are relative to this file.\n// The type import is optional: it only works when storebound is installed in the project (bun add -d storebound).\nimport type { ShipConfig } from 'storebound';\n\nconst config: ShipConfig = {\n  // Every compliance answer below is the TEMPLATE's, not yours. While an area is listed here, check / validate block\n  // and nothing sends it to a store. Derive the answers from the code (storebound scan --write; for an app that is\n  // already live: storebound onboard --declarations), answer the rest, then remove the area from this list.\n  unanswered: ['dataSafety', 'appPrivacy', 'reviewNotes', 'ageRating', 'accounts', 'reviewAccess'],\n\n  app: {\n    name: 'Example App',\n    profile: 'subscription-app',\n    copyright: '2026 Example Studio',\n    privacyPolicyUrl: 'https://example.com/privacy',\n    termsUrl: 'https://example.com/terms',   // Terms of Use (EULA): in the app and the metadata (Apple 3.1.2)\n    supportUrl: 'https://example.com/support',\n    marketingUrl: 'https://example.com',\n    website: 'https://example.com',\n    contactEmail: 'support@example.com',\n  },\n\n  // Accounts (account-deletion skill). Remove this block if the app has no sign-up / sign-in at all.\n  // Apple 5.1.1(v): deletion must start inside the app. Google Play: in the app AND on a public web page.\n  accounts: {\n    enabled: true,\n    deletionUrl: 'https://example.com/delete-account',   // public page, no login needed to request deletion\n    inApp: 'Settings > Account > Delete account',        // goes into the App Review notes\n    // How people sign up: 'username' (a name picked in the app, no password, no email), 'username-password',\n    // 'email-password', 'email-link', 'phone', 'oauth', 'other'. `storebound scan` proposes the account data and\n    // dataSafety.accountCreation from it; only the 'email-*' methods mean an email address.\n    signUp: ['email-password'],\n  },\n\n  // Sign-in for store reviewers (review-access skill). The demo account itself lives ONLY in\n  // .storebound/credentials.json (\"reviewDemoAccount\") or REVIEW_DEMO_USER / REVIEW_DEMO_PASSWORD.\n  reviewAccess: {\n    signInRequired: true,   // false if every feature works without signing in\n    instructions: 'Sign in with the demo account. Sample data is already there; nothing needs a second device.',\n  },\n\n  // id = your folder / copy key; play = Play language code(s); apple = App Store Connect locale\n  languages: [\n    { id: 'en', play: 'en-US', apple: 'en-US' },\n    { id: 'tr', play: 'tr-TR', apple: 'tr' },\n  ],\n\n  play: {\n    packageName: 'com.example.app',\n    defaultLanguage: 'en-US',\n    listing: 'store/listing.md',\n    icon: 'store/icons/play-512.png',\n  },\n\n  apple: {\n    bundleId: 'com.example.app',\n    // name: 'Example: Short Tagline',  // App Store name (max 30) when app.name is taken there (\"already being used\"); default app.name\n    listing: 'store/appstore.md',\n    // Export compliance (export-compliance skill): decide it, then uncomment. false ONLY if the app uses no encryption\n    // beyond the OS (HTTPS through the system, standard sign-in).\n    // usesNonExemptEncryption: false,\n    // ipad: true,\n    info: {\n      categories: { primary: 'PRODUCTIVITY', secondary: 'UTILITIES' },\n      ageRating: {},   // every content question NONE / false; change what applies (user-generated content, web access ...)\n      contentRights: 'DOES_NOT_USE_THIRD_PARTY_CONTENT',\n      free: true,\n      reviewNotes: [\n        'Example App keeps lists and notes in sync across devices. Pro (yearly with a 1-week free trial, or monthly) unlocks unlimited lists, sharing and themes.',\n        'Subscriptions: Settings > Pro (or the paywall after the third list). Restore Purchases is on the paywall and in Settings > Pro.',\n        'Privacy policy and Terms of Use: on the paywall and in Settings > About.',\n        // With a remote paywall or feature flags (storebound scan warns, 2.3.1) you may add a line like:\n        // 'Paywall designs and the prices shown are tested remotely with <SDK>; what Pro unlocks does not change after review.',\n        // Google Play has no review-notes field: put the same line in reviewAccess.instructions (Play App content >\n        // App access, 'Any other information') when the app has a sign-in, and say in the full description what needs\n        // a paid subscription (Play: Deceptive behavior, Payments).\n      ].join('\\n\\n'),\n    },\n  },\n\n  // Auto-renewable subscriptions (store-subscriptions skill): `storebound apple subscriptions`, `storebound play\n  // subscriptions`. Apple: one group, levels rank the plans (1 = highest). Play: one subscription per entry with one\n  // auto-renewing base plan. Prices: USD base, Apple equalizes from the USA, Play converts per region; overrides set a\n  // region by hand. The disclosure (price per period, renewal, how to cancel, Terms + Privacy links) belongs on the\n  // purchase screen and in the descriptions.\n  subscriptions: [\n    {\n      name: 'Example Pro',\n      listings: { en: { name: 'Example Pro' }, tr: { name: 'Example Pro' } },\n      subscriptions: [\n        {\n          id: 'com.example.app.pro_yearly', period: 'P1Y', level: 1, usd: 29.99,\n          listings: {\n            en: { title: 'Pro yearly', description: 'Unlimited lists, sharing and themes.', benefits: ['Unlimited lists', 'Shared lists', 'All themes'] },\n            tr: { title: 'Pro yıllık', description: 'Sınırsız liste, paylaşım ve tema.', benefits: ['Sınırsız liste', 'Paylaşılan listeler', 'Tüm temalar'] },\n          },\n          intro: { type: 'free', duration: 'P1W' },   // 1 week free trial for new subscribers\n          reviewScreenshot: 'store/iap-review/paywall.png',\n        },\n        {\n          id: 'com.example.app.pro_monthly', period: 'P1M', level: 2, usd: 3.99,\n          overrides: [{ region: 'TR', currency: 'TRY', price: 99.99 }],\n          listings: {\n            en: { title: 'Pro monthly', description: 'Unlimited lists, sharing and themes.', benefits: ['Unlimited lists', 'Shared lists', 'All themes'] },\n            tr: { title: 'Pro aylık', description: 'Sınırsız liste, paylaşım ve tema.', benefits: ['Sınırsız liste', 'Paylaşılan listeler', 'Tüm temalar'] },\n          },\n          reviewScreenshot: 'store/iap-review/paywall.png',\n        },\n      ],\n    },\n  ],\n\n  // Google Play Data safety. Types not listed = not collected. Typical app with accounts + an analytics SDK acting as\n  // your processor (collected, not shared). Edit to match what your app and its SDKs really do.\n  dataSafety: {\n    collectsData: true,\n    encryptedInTransit: true,\n    // Sign-up methods. Google does not publish these ids: compare with Play Console > App content > Data safety >\n    // Export to CSV before the first import. The delete-account URL (PSL_ACCOUNT_DELETION_URL) comes from\n    // accounts.deletionUrl; `storebound check` names any other row Play requires.\n    accountCreation: ['PSL_ACM_USER_ID_PASSWORD'],\n    // Can people delete their data without deleting the account (a data-only page)? true needs partialDeletionUrl.\n    // Play's \"can users request deletion?\" is answered yes by accounts.deletionUrl. Ask the owner.\n    partialDeletion: false,\n    data: {\n      PSL_EMAIL: { shared: false, collect: ['functionality', 'account'] },\n      PSL_USER_ACCOUNT: { shared: false, collect: ['functionality', 'account'] },\n      PSL_USER_GENERATED_CONTENT: { shared: false, collect: ['functionality'] },\n      PSL_USER_INTERACTION: { shared: false, collect: ['analytics'] },\n      PSL_CRASH_LOGS: { shared: false, collect: ['analytics'] },\n      PSL_PERFORMANCE_DIAGNOSTICS: { shared: false, collect: ['analytics'] },\n      PSL_DEVICE_ID: { shared: false, collect: ['analytics'] },\n      PSL_PURCHASE_HISTORY: { shared: false, collect: ['functionality'] },   // subscription status tied to the account\n    },\n  },\n\n  renders: 'store/renders',\n\n  shots: {\n    style: 'app',                       // calm gradient, device frame, headline + subline (game: sparkles and badges)\n    copy: 'store/shots/copy.json',\n    frames: 'store/shots/frames',       // <lang>/phone/<name>.png, <lang>/tablet/<name>.png\n    out: 'store/renders',\n    // fonts: { title: 'Inter', body: 'Inter' },   // the app style default\n    scenes: [\n      { id: 'home', palette: 'mist', frames: [{ src: 'home.png' }] },\n      { id: 'detail', palette: 'mint', frames: [{ src: 'detail.png' }] },\n      { id: 'share', palette: 'sky', frames: [{ src: 'share.png' }] },\n      { id: 'privacy', palette: 'slate', frames: [{ src: 'settings.png' }] },\n    ],\n    feature: { frame: 'home.png', palette: 'mist' },\n    // Raw frames from a web build, the iOS Simulator (ios-sim) or an Android emulator (android-emu): sign in to a demo\n    // account with realistic sample data, never real user data (store-screenshots skill).\n    capture: {\n      baseUrl: 'http://127.0.0.1:5173',\n      query: 'lang={lang}&demo=1',\n      shots: {\n        'home': { path: '/', delayMs: 1000, device: 'both' },\n        'detail': { path: '/lists/1', delayMs: 1000, device: 'both' },\n        'share': { path: '/lists/1/share', delayMs: 1000, device: 'both' },\n        'settings': { path: '/settings', delayMs: 1000, device: 'both' },\n      },\n    },\n  },\n\n  icons: {\n    composite: 'store/icon/icon.png',\n    foreground: 'store/icon/foreground.png',\n    background: 'store/icon/background.png',\n    out: 'store/icons',\n  },\n};\n\nexport default config;\n",
   "shots-copy.json": "{\n  \"en\": {\n    \"hero\": { \"title\": [\"Tap. Match.\", \"Repeat!\"], \"badges\": [[\"100+ levels\", \"and more every update\"], [\"Play offline\", \"No account needed\"]] },\n    \"play\": { \"eyebrow\": \"Play\", \"title\": [\"Easy to learn,\", \"hard to put down\"], \"sub\": \"One thumb, short rounds, big satisfying moments.\", \"badges\": [[\"Quick rounds\", \"Two minutes each\"], [\"Great!\"]] },\n    \"levels\": { \"eyebrow\": \"Worlds\", \"title\": [\"Explore new\", \"worlds\"], \"sub\": \"A fresh look and new rules every ten levels.\", \"badges\": [[\"10 worlds\", \"A new one every 10 levels\"]] },\n    \"stars\": { \"eyebrow\": \"Stars\", \"title\": [\"Play smart,\", \"grab 3 stars\"], \"sub\": \"Finish with moves to spare and collect every star.\", \"badges\": [[\"3 stars\"]] }\n  },\n  \"tr\": {\n    \"hero\": { \"title\": [\"Dokun. Eşleştir.\", \"Tekrarla!\"], \"badges\": [[\"100+ bölüm\", \"her güncellemede yenileri\"], [\"İnternetsiz\", \"hesap gerekmez\"]] },\n    \"play\": { \"eyebrow\": \"Oyna\", \"title\": [\"Öğrenmesi kolay,\", \"bırakması zor\"], \"sub\": \"Tek parmak, kısa turlar, büyük keyifli anlar.\", \"badges\": [[\"Kısa turlar\", \"Her biri iki dakika\"], [\"Harika!\"]] },\n    \"levels\": { \"eyebrow\": \"Dünyalar\", \"title\": [\"Yeni dünyaları\", \"keşfet\"], \"sub\": \"Her on bölümde yeni bir görünüm ve yeni kurallar.\", \"badges\": [[\"10 dünya\", \"Her 10 bölümde yeni biri\"]] },\n    \"stars\": { \"eyebrow\": \"Yıldızlar\", \"title\": [\"Akıllı oyna,\", \"3 yıldızı kap\"], \"sub\": \"Hamle artırarak bitir, tüm yıldızları topla.\", \"badges\": [[\"3 yıldız\"]] }\n  },\n  \"es\": {\n    \"hero\": { \"title\": [\"Toca. Combina.\", \"¡Repite!\"], \"badges\": [[\"100+ niveles\", \"y más en cada versión\"], [\"Sin conexión\", \"Sin cuenta\"]] },\n    \"play\": { \"eyebrow\": \"Juega\", \"title\": [\"Fácil de aprender,\", \"difícil de soltar\"], \"sub\": \"Un pulgar, rondas cortas, grandes momentos.\", \"badges\": [[\"Rondas cortas\", \"Dos minutos cada una\"], [\"¡Genial!\"]] },\n    \"levels\": { \"eyebrow\": \"Mundos\", \"title\": [\"Explora\", \"nuevos mundos\"], \"sub\": \"Un aspecto nuevo y nuevas reglas cada diez niveles.\", \"badges\": [[\"10 mundos\", \"Uno nuevo cada 10 niveles\"]] },\n    \"stars\": { \"eyebrow\": \"Estrellas\", \"title\": [\"Juega con cabeza,\", \"logra 3 estrellas\"], \"sub\": \"Termina con movimientos de sobra y consigue todas las estrellas.\", \"badges\": [[\"3 estrellas\"]] }\n  },\n  \"ja\": {\n    \"hero\": { \"title\": [\"タップして、そろえて、\", \"もう一回！\"], \"badges\": [[\"100以上のステージ\", \"アップデートで追加\"], [\"オフラインで遊べる\", \"アカウント不要\"]] },\n    \"play\": { \"eyebrow\": \"プレイ\", \"title\": [\"かんたんなのに\", \"やめられない\"], \"sub\": \"片手で遊べる短いラウンド、気持ちいい瞬間がたくさん。\", \"badges\": [[\"短いラウンド\", \"1回2分\"], [\"すごい！\"]] },\n    \"levels\": { \"eyebrow\": \"ワールド\", \"title\": [\"新しいワールドを\", \"冒険しよう\"], \"sub\": \"10ステージごとに新しい見た目と新しいルール。\", \"badges\": [[\"10のワールド\", \"10ステージごとに追加\"]] },\n    \"stars\": { \"eyebrow\": \"スター\", \"title\": [\"かしこく遊んで\", \"星を3つゲット\"], \"sub\": \"手数を残してクリアし、すべての星を集めよう。\", \"badges\": [[\"星3つ\"]] }\n  },\n  \"ar\": {\n    \"hero\": { \"title\": [\"انقر. طابق.\", \"كرّر!\"], \"badges\": [[\"أكثر من 100 مرحلة\", \"والمزيد مع كل تحديث\"], [\"العب دون اتصال\", \"دون حساب\"]] },\n    \"play\": { \"eyebrow\": \"العب\", \"title\": [\"سهلة التعلّم،\", \"صعبة التوقف\"], \"sub\": \"إبهام واحد، جولات قصيرة، ولحظات ممتعة.\", \"badges\": [[\"جولات قصيرة\", \"دقيقتان لكل جولة\"], [\"رائع!\"]] },\n    \"levels\": { \"eyebrow\": \"العوالم\", \"title\": [\"استكشف\", \"عوالم جديدة\"], \"sub\": \"شكل جديد وقواعد جديدة كل عشر مراحل.\", \"badges\": [[\"10 عوالم\", \"عالم جديد كل 10 مراحل\"]] },\n    \"stars\": { \"eyebrow\": \"النجوم\", \"title\": [\"العب بذكاء،\", \"واجمع 3 نجوم\"], \"sub\": \"أنهِ المرحلة بحركات متبقية واجمع كل النجوم.\", \"badges\": [[\"3 نجوم\"]] }\n  }\n}\n",
-  "storebound.config.ts": "// storebound config for one game. Everything game-specific lives here; credentials NEVER do (they go in env vars or\n// .storebound/credentials.json, which must stay gitignored). Paths are relative to this file.\n// The type import is optional: it only works when storebound is installed in the project (bun add -d <repo url>).\nimport type { ShipConfig } from 'storebound';\n\nconst config: ShipConfig = {\n  // Every compliance answer below is the TEMPLATE's, not yours. While an area is listed here, check / validate block\n  // and nothing sends it to a store. Derive the answers from the code (storebound scan --write; for an app that is\n  // already live: storebound onboard --declarations), answer the rest, then remove the area from this list.\n  unanswered: ['dataSafety', 'appPrivacy', 'reviewNotes', 'ageRating'],\n\n  app: {\n    name: 'Example Game',\n    profile: 'game',\n    copyright: '2026 Example Studio',\n    privacyPolicyUrl: 'https://example.com/privacy',\n    supportUrl: 'https://example.com',\n    marketingUrl: 'https://example.com',\n    // Developer website on Play: the same domain must serve /app-ads.txt if the game shows ads\n    website: 'https://example.com',\n    contactEmail: 'support@example.com',\n  },\n\n  // id = your folder / copy key; play = Play language code(s); apple = App Store Connect locale\n  languages: [\n    { id: 'en', play: 'en-US', apple: 'en-US' },\n    { id: 'tr', play: 'tr-TR', apple: 'tr' },\n    { id: 'es', play: ['es-ES', 'es-419'], apple: 'es-ES' },\n    { id: 'ja', play: 'ja-JP', apple: 'ja' },\n    { id: 'ar', play: 'ar', apple: 'ar-SA', rtl: true },\n  ],\n\n  play: {\n    packageName: 'com.example.game',\n    defaultLanguage: 'en-US',\n    listing: 'store/listing.md',\n    icon: 'store/icons/play-512.png',\n    // read by `storebound scan` (fill in what is true for your account and app):\n    // accountType: 'personal', accountCreated: 'YYYY-MM-DD', // new personal accounts: 12 testers x 14 days closed test\n    // targetAges: ['13-15', '16-17', '18+'],                 // App content > Target audience; under 13 = Families policy\n  },\n\n  apple: {\n    bundleId: 'com.example.game',\n    // name: 'Example: Short Tagline',  // App Store name (max 30) when app.name is taken there (\"already being used\"); default app.name\n    // appId: '1234567890',      // Apple ID of the app record; looked up by bundle id when left out\n    listing: 'store/appstore.md',\n    reviewShots: 'store/iap-review',\n    // Export compliance (export-compliance skill). false ONLY if the game uses no encryption beyond the OS (HTTPS through\n    // the system). Left unset on purpose: decide it, then uncomment. Same answer as ITSAppUsesNonExemptEncryption.\n    // usesNonExemptEncryption: false,\n    // ipad: true,    // the app runs on iPad: 13\" iPad screenshots (2064 x 2752, ipad13) are rendered, checked and uploaded\n    // iphoneMedium: true,   // optional 6.3\" iPhone set (1206 x 2622, iphone-medium); off: Apple scales the 6.5\" set down\n    // iphoneDuo: true,      // optional iPhone Duo (foldable) sets, outer 1398 x 2034 + inner 2007 x 2853; rendered and checked, not uploaded until the API takes them\n    // screenshotTypes: ['APP_IPHONE_61'],   // what `storebound validate` requires per locale (default: medium display, met by a 6.9\" or 6.5\" set; + APP_IPAD_PRO_3GEN_129 with ipad)\n    // TestFlight (`storebound apple testflight`, testflight skill). Tester emails live in .storebound/testers.csv only.\n    testflight: {\n      groups: [\n        { name: 'Team', internal: true, allBuilds: true },\n        { name: 'Friends' },\n      ],\n      description: { en: 'Example Game beta: try the new levels and tell us what feels too hard.' },\n    },\n    info: {\n      categories: { primary: 'GAMES', primarySubOne: 'GAMES_CASUAL', primarySubTwo: 'GAMES_PUZZLE', secondary: 'ENTERTAINMENT' },\n      ageRating: { advertising: true },     // everything else NONE / false\n      contentRights: 'DOES_NOT_USE_THIRD_PARTY_CONTENT',\n      free: true,\n      reviewNotes: [\n        'Single-player game. No account or login is needed; there is no user-generated content or chat.',\n        'In-app purchases: Home > Shop. Restore Purchases is in Settings.',\n        'Ads: optional rewarded videos and interstitials between rounds. The App Tracking Transparency prompt is shown before the ad SDK starts.',\n        'Privacy policy: Settings > Privacy.',\n        // With remote config, feature flags or a remotely changed paywall (storebound scan warns, 2.3.1) you may add:\n        // 'Shop offers and prices shown come from <SDK> and change remotely; no feature is switched on or off after review.',\n        // Google Play has no review-notes field: put the same line in reviewAccess.instructions (Play App content >\n        // App access, 'Any other information') when the app has a sign-in, and say in the full description what needs\n        // a paid subscription (Play: Deceptive behavior, Payments).\n      ].join('\\n\\n'),\n    },\n  },\n\n  // Price changes later for many products / regions: storebound prices export, edit store/prices.csv, prices import --dry.\n  // prices: { csv: 'store/prices.csv', baseTerritory: 'USA' },\n\n  // Same ids on both stores. Prices: USD base; Play converts per region, Apple equalizes from the USA. Overrides set a\n  // region by hand (Apple needs an existing price point with exactly that value).\n  products: [\n    {\n      id: 'com.example.game.remove_ads', type: 'non_consumable', usd: 2.99,\n      overrides: [{ region: 'TR', currency: 'TRY', price: 99.99 }],\n      listings: {\n        en: { title: 'Remove Ads', description: 'Removes interstitial ads for good.' },\n        tr: { title: 'Reklamları Kaldır', description: 'Ara reklamları kalıcı olarak kaldırır.' },\n      },\n      reviewScreenshot: 'store/iap-review/shop.png',\n    },\n    {\n      id: 'com.example.game.coins_small', type: 'consumable', usd: 0.99,\n      listings: {\n        en: { title: '500 Coins', description: 'A small bag of coins.' },\n        tr: { title: '500 Altın', description: 'Küçük bir kese altın.' },\n      },\n      reviewScreenshot: 'store/iap-review/shop.png',\n    },\n  ],\n\n  // Google Play Data safety. Types not listed = not collected. Purposes: functionality, analytics, communications,\n  // fraud, advertising, personalization, account. Typical F2P game with an analytics SDK + ad mediation:\n  dataSafety: {\n    collectsData: true,\n    encryptedInTransit: true,\n    // No accounts: PSL_ACM_NONE. A guest account with a name picked on the device and a server token (no password, no\n    // email): accounts { enabled: true, signUp: ['username'], ... } and ['PSL_ACM_USER_ID_OTHER_AUTH'] here (Play's\n    // \"Username and other authentication\"; `storebound scan` proposes it). With accounts Play also requires the\n    // delete-account URL (from accounts.deletionUrl). That page also answers \"can users request that their data is\n    // deleted?\" with yes (dataDeletion: 'yes' | 'no' | 'auto90' only for apps without one). partialDeletion: true +\n    // partialDeletionUrl when a page deletes data without deleting the account. `storebound check` compares every row with Play's\n    // current form (cli/data/play-data-safety-form.csv).\n    accountCreation: ['PSL_ACM_NONE'],\n    data: {\n      PSL_APPROX_LOCATION: { shared: true, collect: ['analytics', 'advertising', 'fraud'], share: ['analytics', 'advertising', 'fraud'] },\n      PSL_USER_INTERACTION: { shared: true, collect: ['analytics', 'advertising'], share: ['analytics', 'advertising'] },\n      PSL_OTHER_APP_ACTIVITY: { shared: false, collect: ['functionality'] },\n      PSL_PERFORMANCE_DIAGNOSTICS: { shared: true, collect: ['analytics', 'advertising', 'fraud'], share: ['analytics', 'advertising', 'fraud'] },\n      PSL_DEVICE_ID: { shared: true, collect: ['functionality', 'analytics', 'advertising', 'fraud'], share: ['analytics', 'advertising', 'fraud'] },\n      PSL_PURCHASE_HISTORY: { shared: false, collect: ['functionality', 'fraud'] },\n    },\n  },\n\n  // Ads: `storebound validate --play` checks <app.website>/app-ads.txt for these lines (copy them from your mediation\n  // dashboard's app-ads.txt page). Placeholder line below; replace it.\n  // ads: { appAdsTxt: ['example-network.com, pub-0000000000000000, DIRECT, 0000000000000000'] },\n\n  renders: 'store/renders',\n\n  shots: {\n    copy: 'store/shots/copy.json',\n    frames: 'store/shots/frames',       // <lang>/phone/<name>.png, <lang>/tablet/<name>.png\n    out: 'store/renders',\n    logo: 'store/shots/logo.png',       // optional: hero scene + feature graphic\n    // Google Fonts; both cover Latin Extended (tr, pl, cs, ro ...) and Vietnamese. `shots fonts` checks every glyph of the\n    // copy; a character the font lacks needs a font that has it or fallback: ['Noto Sans Display'] (else shots check fails).\n    fonts: { title: 'Paytone One', body: 'Montserrat' },\n    // phone: { w: 440, h: 902, dpr: 3 },  // raw frame size in CSS px (screen below a 54 px status bar)\n    // tablet: { w: 1032, h: 1352, dpr: 2 }, // default with apple.ipad (13\" iPad below its 24 px bar), else 800 x 1240\n    scenes: [\n      { id: 'hero', palette: 'fire', hero: true, over: 34, frames: [{ src: 'hero.png', rotate: -4 }],\n        badges: [{ y: 0.42, side: 'l', icon: 'flag', iconBg: 'red', rot: -4 }, { y: 0.66, side: 'r', icon: 'offline', iconBg: 'red', rot: 3 }] },\n      { id: 'play', palette: 'violet', frames: [{ src: 'gameplay.png', rotate: 3 }],\n        badges: [{ y: 0.3, side: 'l', icon: 'bolt', iconBg: 'gold', rot: -3 }, { y: 0.7, side: 'r', hot: true, rot: 4 }] },\n      { id: 'levels', palette: 'sky', frames: [{ src: 'level-b.png', scale: 0.82 }, { src: 'level-a.png', x: -31, dy: 10, scale: 0.7, rotate: -8 }, { src: 'level-c.png', x: 31, dy: 10, scale: 0.7, rotate: 8 }],\n        badges: [{ y: 0.66, side: 'r', icon: 'map', iconBg: 'blue', rot: 3 }] },\n      { id: 'stars', palette: 'gold', frames: [{ src: 'results.png', rotate: -3 }],\n        badges: [{ y: 0.42, side: 'l', stars: true, rot: -3 }] },\n    ],\n    feature: { frame: 'hero.png', palette: 'fire' },\n    capture: {\n      baseUrl: 'http://127.0.0.1:5173',\n      query: 'lang={lang}&noads=1&seed=1',\n      shots: {\n        'hero': { path: '/?level=12', waitFor: \"window.game && game.state === 'playing'\", delayMs: 1500, device: 'both' },\n        'gameplay': { path: '/?level=3', delayMs: 2500, device: 'both' },\n        'level-a': { path: '/?level=20', delayMs: 2000 },\n        'level-b': { path: '/?level=40', delayMs: 2000 },\n        'level-c': { path: '/?level=60', delayMs: 2000 },\n        'results': { path: '/?level=5&result=3', delayMs: 2000, device: 'both' },\n      },\n    },\n  },\n\n  icons: {\n    composite: 'store/icon/icon.png',         // 1024 opaque\n    foreground: 'store/icon/foreground.png',  // 1024 RGBA, subject on transparent\n    background: 'store/icon/background.png',  // 1024 opaque\n    out: 'store/icons',\n    web: 'public/icons',\n    // capacitorAssets: 'native/assets',\n    // capacitorCommand: 'bunx @capacitor/assets generate --assetPath native/assets',\n    // androidRes: 'native/android/app/src/main/res',\n  },\n};\n\nexport default config;\n",
+  "storebound.config.ts": "// storebound config for one game. Everything game-specific lives here; credentials NEVER do (they go in env vars or\n// .storebound/credentials.json, which must stay gitignored). Paths are relative to this file.\n// The type import is optional: it only works when storebound is installed in the project (bun add -d <repo url>).\nimport type { ShipConfig } from 'storebound';\n\nconst config: ShipConfig = {\n  // Every compliance answer below is the TEMPLATE's, not yours. While an area is listed here, check / validate block\n  // and nothing sends it to a store. Derive the answers from the code (storebound scan --write; for an app that is\n  // already live: storebound onboard --declarations), answer the rest, then remove the area from this list.\n  unanswered: ['dataSafety', 'appPrivacy', 'reviewNotes', 'ageRating'],\n\n  app: {\n    name: 'Example Game',\n    profile: 'game',\n    copyright: '2026 Example Studio',\n    privacyPolicyUrl: 'https://example.com/privacy',\n    supportUrl: 'https://example.com',\n    marketingUrl: 'https://example.com',\n    // Developer website on Play: the same domain must serve /app-ads.txt if the game shows ads\n    website: 'https://example.com',\n    contactEmail: 'support@example.com',\n  },\n\n  // id = your folder / copy key; play = Play language code(s); apple = App Store Connect locale\n  languages: [\n    { id: 'en', play: 'en-US', apple: 'en-US' },\n    { id: 'tr', play: 'tr-TR', apple: 'tr' },\n    { id: 'es', play: ['es-ES', 'es-419'], apple: 'es-ES' },\n    { id: 'ja', play: 'ja-JP', apple: 'ja' },\n    { id: 'ar', play: 'ar', apple: 'ar-SA', rtl: true },\n  ],\n\n  play: {\n    packageName: 'com.example.game',\n    defaultLanguage: 'en-US',\n    listing: 'store/listing.md',\n    icon: 'store/icons/play-512.png',\n    // read by `storebound scan` (fill in what is true for your account and app):\n    // accountType: 'personal', accountCreated: 'YYYY-MM-DD', // new personal accounts: 12 testers x 14 days closed test\n    // targetAges: ['13-15', '16-17', '18+'],                 // App content > Target audience; under 13 = Families policy\n  },\n\n  apple: {\n    bundleId: 'com.example.game',\n    // name: 'Example: Short Tagline',  // App Store name (max 30) when app.name is taken there (\"already being used\"); default app.name\n    // appId: '1234567890',      // Apple ID of the app record; looked up by bundle id when left out\n    listing: 'store/appstore.md',\n    reviewShots: 'store/iap-review',\n    // Export compliance (export-compliance skill). false ONLY if the game uses no encryption beyond the OS (HTTPS through\n    // the system). Left unset on purpose: decide it, then uncomment. Same answer as ITSAppUsesNonExemptEncryption.\n    // usesNonExemptEncryption: false,\n    // ipad: true,    // the app runs on iPad: 13\" iPad screenshots (2064 x 2752, ipad13) are rendered, checked and uploaded\n    // iphoneMedium: true,   // optional 6.3\" iPhone set (1206 x 2622, iphone-medium); off: Apple scales the 6.5\" set down\n    // releaseType: \"afterApproval\",   // afterApproval | manual | scheduled (+ earliestReleaseDate): how an approved version goes live; unset = new versions MANUAL\n    // iphoneDuo: true,      // optional iPhone Duo (foldable) sets, outer 1398 x 2034 + inner 2007 x 2853; rendered and checked, not uploaded until the API takes them\n    // screenshotTypes: ['APP_IPHONE_61'],   // what `storebound validate` requires per locale (default: medium display, met by a 6.9\" or 6.5\" set; + APP_IPAD_PRO_3GEN_129 with ipad)\n    // TestFlight (`storebound apple testflight`, testflight skill). Tester emails live in .storebound/testers.csv only.\n    testflight: {\n      groups: [\n        { name: 'Team', internal: true, allBuilds: true },\n        { name: 'Friends' },\n      ],\n      description: { en: 'Example Game beta: try the new levels and tell us what feels too hard.' },\n    },\n    info: {\n      categories: { primary: 'GAMES', primarySubOne: 'GAMES_CASUAL', primarySubTwo: 'GAMES_PUZZLE', secondary: 'ENTERTAINMENT' },\n      ageRating: { advertising: true },     // everything else NONE / false\n      contentRights: 'DOES_NOT_USE_THIRD_PARTY_CONTENT',\n      free: true,\n      reviewNotes: [\n        'Single-player game. No account or login is needed; there is no user-generated content or chat.',\n        'In-app purchases: Home > Shop. Restore Purchases is in Settings.',\n        'Ads: optional rewarded videos and interstitials between rounds. The App Tracking Transparency prompt is shown before the ad SDK starts.',\n        'Privacy policy: Settings > Privacy.',\n        // With remote config, feature flags or a remotely changed paywall (storebound scan warns, 2.3.1) you may add:\n        // 'Shop offers and prices shown come from <SDK> and change remotely; no feature is switched on or off after review.',\n        // Google Play has no review-notes field: put the same line in reviewAccess.instructions (Play App content >\n        // App access, 'Any other information') when the app has a sign-in, and say in the full description what needs\n        // a paid subscription (Play: Deceptive behavior, Payments).\n      ].join('\\n\\n'),\n    },\n  },\n\n  // Price changes later for many products / regions: storebound prices export, edit store/prices.csv, prices import --dry.\n  // prices: { csv: 'store/prices.csv', baseTerritory: 'USA' },\n\n  // Same ids on both stores. Prices: USD base; Play converts per region, Apple equalizes from the USA. Overrides set a\n  // region by hand (Apple needs an existing price point with exactly that value).\n  products: [\n    {\n      id: 'com.example.game.remove_ads', type: 'non_consumable', usd: 2.99,\n      overrides: [{ region: 'TR', currency: 'TRY', price: 99.99 }],\n      listings: {\n        en: { title: 'Remove Ads', description: 'Removes interstitial ads for good.' },\n        tr: { title: 'Reklamları Kaldır', description: 'Ara reklamları kalıcı olarak kaldırır.' },\n      },\n      reviewScreenshot: 'store/iap-review/shop.png',\n    },\n    {\n      id: 'com.example.game.coins_small', type: 'consumable', usd: 0.99,\n      listings: {\n        en: { title: '500 Coins', description: 'A small bag of coins.' },\n        tr: { title: '500 Altın', description: 'Küçük bir kese altın.' },\n      },\n      reviewScreenshot: 'store/iap-review/shop.png',\n    },\n  ],\n\n  // Google Play Data safety. Types not listed = not collected. Purposes: functionality, analytics, communications,\n  // fraud, advertising, personalization, account. Typical F2P game with an analytics SDK + ad mediation:\n  dataSafety: {\n    collectsData: true,\n    encryptedInTransit: true,\n    // No accounts: PSL_ACM_NONE. A guest account with a name picked on the device and a server token (no password, no\n    // email): accounts { enabled: true, signUp: ['username'], ... } and ['PSL_ACM_USER_ID_OTHER_AUTH'] here (Play's\n    // \"Username and other authentication\"; `storebound scan` proposes it). With accounts Play also requires the\n    // delete-account URL (from accounts.deletionUrl). That page also answers \"can users request that their data is\n    // deleted?\" with yes (dataDeletion: 'yes' | 'no' | 'auto90' only for apps without one). partialDeletion: true +\n    // partialDeletionUrl when a page deletes data without deleting the account. `storebound check` compares every row with Play's\n    // current form (cli/data/play-data-safety-form.csv).\n    accountCreation: ['PSL_ACM_NONE'],\n    data: {\n      PSL_APPROX_LOCATION: { shared: true, collect: ['analytics', 'advertising', 'fraud'], share: ['analytics', 'advertising', 'fraud'] },\n      PSL_USER_INTERACTION: { shared: true, collect: ['analytics', 'advertising'], share: ['analytics', 'advertising'] },\n      PSL_OTHER_APP_ACTIVITY: { shared: false, collect: ['functionality'] },\n      PSL_PERFORMANCE_DIAGNOSTICS: { shared: true, collect: ['analytics', 'advertising', 'fraud'], share: ['analytics', 'advertising', 'fraud'] },\n      PSL_DEVICE_ID: { shared: true, collect: ['functionality', 'analytics', 'advertising', 'fraud'], share: ['analytics', 'advertising', 'fraud'] },\n      PSL_PURCHASE_HISTORY: { shared: false, collect: ['functionality', 'fraud'] },\n    },\n  },\n\n  // Ads: `storebound validate --play` checks <app.website>/app-ads.txt for these lines (copy them from your mediation\n  // dashboard's app-ads.txt page). Placeholder line below; replace it.\n  // ads: { appAdsTxt: ['example-network.com, pub-0000000000000000, DIRECT, 0000000000000000'] },\n\n  renders: 'store/renders',\n\n  shots: {\n    copy: 'store/shots/copy.json',\n    frames: 'store/shots/frames',       // <lang>/phone/<name>.png, <lang>/tablet/<name>.png\n    out: 'store/renders',\n    logo: 'store/shots/logo.png',       // optional: hero scene + feature graphic\n    // Google Fonts; both cover Latin Extended (tr, pl, cs, ro ...) and Vietnamese. `shots fonts` checks every glyph of the\n    // copy; a character the font lacks needs a font that has it or fallback: ['Noto Sans Display'] (else shots check fails).\n    fonts: { title: 'Paytone One', body: 'Montserrat' },\n    // phone: { w: 440, h: 902, dpr: 3 },  // raw frame size in CSS px (screen below a 54 px status bar)\n    // tablet: { w: 1032, h: 1352, dpr: 2 }, // default with apple.ipad (13\" iPad below its 24 px bar), else 800 x 1240\n    scenes: [\n      { id: 'hero', palette: 'fire', hero: true, over: 34, frames: [{ src: 'hero.png', rotate: -4 }],\n        badges: [{ y: 0.42, side: 'l', icon: 'flag', iconBg: 'red', rot: -4 }, { y: 0.66, side: 'r', icon: 'offline', iconBg: 'red', rot: 3 }] },\n      { id: 'play', palette: 'violet', frames: [{ src: 'gameplay.png', rotate: 3 }],\n        badges: [{ y: 0.3, side: 'l', icon: 'bolt', iconBg: 'gold', rot: -3 }, { y: 0.7, side: 'r', hot: true, rot: 4 }] },\n      { id: 'levels', palette: 'sky', frames: [{ src: 'level-b.png', scale: 0.82 }, { src: 'level-a.png', x: -31, dy: 10, scale: 0.7, rotate: -8 }, { src: 'level-c.png', x: 31, dy: 10, scale: 0.7, rotate: 8 }],\n        badges: [{ y: 0.66, side: 'r', icon: 'map', iconBg: 'blue', rot: 3 }] },\n      { id: 'stars', palette: 'gold', frames: [{ src: 'results.png', rotate: -3 }],\n        badges: [{ y: 0.42, side: 'l', stars: true, rot: -3 }] },\n    ],\n    feature: { frame: 'hero.png', palette: 'fire' },\n    capture: {\n      baseUrl: 'http://127.0.0.1:5173',\n      query: 'lang={lang}&noads=1&seed=1',\n      shots: {\n        'hero': { path: '/?level=12', waitFor: \"window.game && game.state === 'playing'\", delayMs: 1500, device: 'both' },\n        'gameplay': { path: '/?level=3', delayMs: 2500, device: 'both' },\n        'level-a': { path: '/?level=20', delayMs: 2000 },\n        'level-b': { path: '/?level=40', delayMs: 2000 },\n        'level-c': { path: '/?level=60', delayMs: 2000 },\n        'results': { path: '/?level=5&result=3', delayMs: 2000, device: 'both' },\n      },\n    },\n  },\n\n  icons: {\n    composite: 'store/icon/icon.png',         // 1024 opaque\n    foreground: 'store/icon/foreground.png',  // 1024 RGBA, subject on transparent\n    background: 'store/icon/background.png',  // 1024 opaque\n    out: 'store/icons',\n    web: 'public/icons',\n    // capacitorAssets: 'native/assets',\n    // capacitorCommand: 'bunx @capacitor/assets generate --assetPath native/assets',\n    // androidRes: 'native/android/app/src/main/res',\n  },\n};\n\nexport default config;\n",
   "testers.csv": "email,first_name,last_name,groups\n",
   "web/appstore.svg": "<svg role=\"img\" viewBox=\"0 0 24 24\" xmlns=\"http://www.w3.org/2000/svg\"><title>App Store</title><path d=\"M8.8086 14.9194l6.1107-11.0368c.0837-.1513.1682-.302.2437-.4584.0685-.142.1267-.2854.1646-.4403.0803-.3259.0588-.6656-.066-.9767-.1238-.3095-.3417-.5678-.6201-.7355a1.4175 1.4175 0 0 0-.921-.1924c-.3207.043-.6135.1935-.8443.4288-.1094.1118-.1996.2361-.2832.369-.092.1463-.175.2979-.259.4492l-.3864.6979-.3865-.6979c-.0837-.1515-.1667-.303-.2587-.4492-.0837-.1329-.1739-.2572-.2835-.369-.2305-.2353-.5233-.3857-.844-.429a1.4181 1.4181 0 0 0-.921.1926c-.2784.1677-.4964.426-.6203.7355-.1246.311-.1461.6508-.066.9767.038.155.0962.2984.1648.4403.0753.1564.1598.307.2437.4584l1.248 2.2543-4.8625 8.7825H2.0295c-.1676 0-.3351-.0007-.5026.0092-.1522.009-.3004.0284-.448.0714-.3108.0906-.5822.2798-.7783.548-.195.2665-.3006.5929-.3006.9279 0 .3352.1057.6612.3006.9277.196.2683.4675.4575.7782.548.1477.043.296.0623.4481.0715.1675.01.335.009.5026.009h13.0974c.0171-.0357.059-.1294.1-.2697.415-1.4151-.6156-2.843-2.0347-2.843zM3.113 18.5418l-.7922 1.5008c-.0818.1553-.1644.31-.2384.4705-.067.1458-.124.293-.1611.452-.0785.3346-.0576.6834.0645 1.0029.1212.3175.3346.583.607.7549.2727.172.5891.2416.9013.1975.3139-.044.6005-.1986.8263-.4402.1072-.1148.1954-.2424.2772-.3787.0902-.1503.1714-.3059.2535-.4612L6 19.4636c-.0896-.149-.9473-1.4704-2.887-.9218m20.5861-3.0056a1.4707 1.4707 0 0 0-.779-.5407c-.1476-.0425-.2961-.0616-.4483-.0705-.1678-.0099-.3352-.0091-.503-.0091H18.648l-4.3891-7.817c-.6655.7005-.9632 1.485-1.0773 2.1976-.1655 1.0333.0367 2.0934.546 3.0004l5.2741 9.3933c.084.1494.167.299.2591.4435.0837.131.1739.2537.2836.364.231.2323.5238.3809.8449.4232.3192.0424.643-.0244.9217-.1899.2784-.1653.4968-.4204.621-.7257.1246-.3072.146-.6425.0658-.9641-.0381-.1529-.0962-.2945-.165-.4346-.0753-.1543-.1598-.303-.2438-.4524l-1.216-2.1662h1.596c.1677 0 .3351.0009.5029-.009.1522-.009.3007-.028.4483-.0705a1.4707 1.4707 0 0 0 .779-.5407A1.5386 1.5386 0 0 0 24 16.452a1.539 1.539 0 0 0-.3009-.9158Z\"/></svg>",
   "web/googleplay.svg": "<svg role=\"img\" viewBox=\"0 0 24 24\" xmlns=\"http://www.w3.org/2000/svg\"><title>Google Play</title><path d=\"M22.018 13.298l-3.919 2.218-3.515-3.493 3.543-3.521 3.891 2.202a1.49 1.49 0 0 1 0 2.594zM1.337.924a1.486 1.486 0 0 0-.112.568v21.017c0 .217.045.419.124.6l11.155-11.087L1.337.924zm12.207 10.065l3.258-3.238L3.45.195a1.466 1.466 0 0 0-.946-.179l11.04 10.973zm0 2.067l-11 10.933c.298.036.612-.016.906-.183l13.324-7.54-3.23-3.21z\"/></svg>",

From bf95ee55c498431c9ee396821648139dffd9a5bf Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Tue, 27 Oct 2026 17:13:34 +0700
Subject: [PATCH 054/126] regenerate the api coverage tables

---
 cli/api/wrapped.gen.ts | 11 +++++++----
 docs/api-coverage.md   | 16 ++++++++--------
 2 files changed, 15 insertions(+), 12 deletions(-)

diff --git a/cli/api/wrapped.gen.ts b/cli/api/wrapped.gen.ts
index eced4ef..e3836c5 100644
--- a/cli/api/wrapped.gen.ts
+++ b/cli/api/wrapped.gen.ts
@@ -62,7 +62,7 @@ export const WRAPPED: { apple: Record<string, string>; play: Record<string, stri
     'appStoreVersionExperimentsV2_getInstance': 'apple/ppo',
     'appStoreVersionExperimentsV2_updateInstance': 'lib/ppo',
     'appStoreVersionLocalizations_appPreviewSets_getToManyRelated': 'apple/previews art',
-    'appStoreVersionLocalizations_appScreenshotSets_getToManyRelated': 'apple/screenshot-health apple/screenshots art validate',
+    'appStoreVersionLocalizations_appScreenshotSets_getToManyRelated': 'apple/device-families apple/screenshot-health apple/screenshots art validate',
     'appStoreVersionLocalizations_createInstance': 'listing-store',
     'appStoreVersionLocalizations_placements_getToManyRelated': 'apple/creative-assets',
     'appStoreVersionLocalizations_updateInstance': 'listing-store',
@@ -70,14 +70,14 @@ export const WRAPPED: { apple: Record<string, string>; play: Record<string, stri
     'appStoreVersionPhasedReleases_updateInstance': 'apple/release',
     'appStoreVersionReleaseRequests_createInstance': 'apple/release',
     'appStoreVersions_appStoreReviewDetail_getToOneRelated': 'apple/review-details onboard validate',
-    'appStoreVersions_appStoreVersionLocalizations_getToManyRelated': 'apple/creative-assets apple/listing apple/previews apple/screenshot-health apple/screenshots art listing-store onboard validate',
+    'appStoreVersions_appStoreVersionLocalizations_getToManyRelated': 'apple/creative-assets apple/device-families apple/listing apple/previews apple/screenshot-health apple/screenshots art listing-store onboard validate',
     'appStoreVersions_appStoreVersionPhasedRelease_getToOneRelated': 'apple/release apple/status',
-    'appStoreVersions_build_getToOneRelated': 'apple/listing apple/resubmit validate',
+    'appStoreVersions_build_getToOneRelated': 'apple/device-families apple/listing apple/resubmit validate',
     'appStoreVersions_build_updateToOneRelationship': 'apple/listing apple/resubmit',
     'appStoreVersions_createInstance': 'apple/listing',
     'appStoreVersions_gameCenterAppVersion_getToOneRelated': 'apple/game-center',
     'appStoreVersions_getInstance': 'apple/listing',
-    'appStoreVersions_updateInstance': 'apple/listing',
+    'appStoreVersions_updateInstance': 'apple/listing apple/release apple/resubmit',
     'apps_analyticsReportRequests_getToManyRelated': 'analytics',
     'apps_appAvailabilityV2_getToOneRelated': 'apple/appinfo apple/preorder validate',
     'apps_appCustomProductPages_getToManyRelated': 'apple/cpp',
@@ -122,6 +122,7 @@ export const WRAPPED: { apple: Record<string, string>; play: Record<string, stri
     'betaTesterInvitations_createInstance': 'lib/testflight',
     'betaTesters_createInstance': 'lib/testflight',
     'betaTesters_getCollection': 'apple/testflight',
+    'buildBundles_buildBundleFileSizes_getToManyRelated': 'apple/device-families',
     'buildUploadFiles_createInstance': 'lib/xcode',
     'buildUploadFiles_updateInstance': 'lib/xcode',
     'buildUploads_buildUploadFiles_getToManyRelated': 'apple/upload',
@@ -130,8 +131,10 @@ export const WRAPPED: { apple: Record<string, string>; play: Record<string, stri
     'builds_appEncryptionDeclaration_getToOneRelated': 'validate',
     'builds_betaAppReviewSubmission_getToOneRelated': 'apple/testflight',
     'builds_betaBuildLocalizations_getToManyRelated': 'apple/testflight',
+    'builds_buildBetaDetail_getToOneRelated': 'apple/testflight',
     'builds_diagnosticSignatures_getToManyRelated': 'health',
     'builds_getCollection': 'apple/build apple/build-mas apple/encryption apple/listing apple/next-build apple/resubmit apple/status apple/testflight apple/upload art health lib/store-apps triage',
+    'builds_getInstance': 'apple/device-families',
     'builds_updateInstance': 'apple/encryption lib/build-ops',
     'bundleIdCapabilities_createInstance': 'lib/signing',
     'bundleIds_createInstance': 'apple/bundle apple/signing',
diff --git a/docs/api-coverage.md b/docs/api-coverage.md
index 3c3e0e4..f1ca57c 100644
--- a/docs/api-coverage.md
+++ b/docs/api-coverage.md
@@ -12,7 +12,7 @@ Specs: Apple [App Store Connect API 4.5.1](https://developer.apple.com/sample-co
 
 | API | operations | GET | other | wrapped by a command | owner only |
 |---|---:|---:|---:|---:|---:|
-| App Store Connect API 4.5.1 | 1303 | 826 | 477 | 232 | 166 |
+| App Store Connect API 4.5.1 | 1303 | 826 | 477 | 235 | 166 |
 | Google Play Android Developer API v3 (revision 20261008) | 145 | 45 | 100 | 35 | 49 |
 | Google Play Developer Reporting API v1beta1 (revision 20261008) | 25 | 15 | 10 | 6 | 0 |
 
@@ -337,7 +337,7 @@ Specs: Apple [App Store Connect API 4.5.1](https://developer.apple.com/sample-co
 | **appStoreVersionLocalizations** (14) | | | | |
 | `appStoreVersionLocalizations_appPreviewSets_getToManyRelated` | GET | `/v1/appStoreVersionLocalizations/{id}/appPreviewSets` | read | apple/previews, art |
 | `appStoreVersionLocalizations_appPreviewSets_getToManyRelationship` | GET | `/v1/appStoreVersionLocalizations/{id}/relationships/appPreviewSets` | read |  |
-| `appStoreVersionLocalizations_appScreenshotSets_getToManyRelated` | GET | `/v1/appStoreVersionLocalizations/{id}/appScreenshotSets` | read | apple/screenshot-health, apple/screenshots, art, validate |
+| `appStoreVersionLocalizations_appScreenshotSets_getToManyRelated` | GET | `/v1/appStoreVersionLocalizations/{id}/appScreenshotSets` | read | apple/device-families, apple/screenshot-health, apple/screenshots, art, validate |
 | `appStoreVersionLocalizations_appScreenshotSets_getToManyRelationship` | GET | `/v1/appStoreVersionLocalizations/{id}/relationships/appScreenshotSets` | read |  |
 | `appStoreVersionLocalizations_createInstance` | POST | `/v1/appStoreVersionLocalizations` | write (dry by default) | listing-store |
 | `appStoreVersionLocalizations_deleteInstance` | DELETE | `/v1/appStoreVersionLocalizations/{id}` | owner only (typed confirm) |  |
@@ -371,13 +371,13 @@ Specs: Apple [App Store Connect API 4.5.1](https://developer.apple.com/sample-co
 | `appStoreVersions_appStoreVersionExperimentsV2_getToManyRelationship` | GET | `/v1/appStoreVersions/{id}/relationships/appStoreVersionExperimentsV2` | read |  |
 | `appStoreVersions_appStoreVersionExperiments_getToManyRelated` | GET | `/v1/appStoreVersions/{id}/appStoreVersionExperiments` | read |  |
 | `appStoreVersions_appStoreVersionExperiments_getToManyRelationship` | GET | `/v1/appStoreVersions/{id}/relationships/appStoreVersionExperiments` | read |  |
-| `appStoreVersions_appStoreVersionLocalizations_getToManyRelated` | GET | `/v1/appStoreVersions/{id}/appStoreVersionLocalizations` | read | apple/creative-assets, apple/listing, apple/previews, apple/screenshot-health, apple/screenshots, art, listing-store, onboard, validate |
+| `appStoreVersions_appStoreVersionLocalizations_getToManyRelated` | GET | `/v1/appStoreVersions/{id}/appStoreVersionLocalizations` | read | apple/creative-assets, apple/device-families, apple/listing, apple/previews, apple/screenshot-health, apple/screenshots, art, listing-store, onboard, validate |
 | `appStoreVersions_appStoreVersionLocalizations_getToManyRelationship` | GET | `/v1/appStoreVersions/{id}/relationships/appStoreVersionLocalizations` | read |  |
 | `appStoreVersions_appStoreVersionPhasedRelease_getToOneRelated` | GET | `/v1/appStoreVersions/{id}/appStoreVersionPhasedRelease` | read | apple/release, apple/status |
 | `appStoreVersions_appStoreVersionPhasedRelease_getToOneRelationship` | GET | `/v1/appStoreVersions/{id}/relationships/appStoreVersionPhasedRelease` | read |  |
 | `appStoreVersions_appStoreVersionSubmission_getToOneRelated` | GET | `/v1/appStoreVersions/{id}/appStoreVersionSubmission` | read |  |
 | `appStoreVersions_appStoreVersionSubmission_getToOneRelationship` | GET | `/v1/appStoreVersions/{id}/relationships/appStoreVersionSubmission` | read |  |
-| `appStoreVersions_build_getToOneRelated` | GET | `/v1/appStoreVersions/{id}/build` | read | apple/listing, apple/resubmit, validate |
+| `appStoreVersions_build_getToOneRelated` | GET | `/v1/appStoreVersions/{id}/build` | read | apple/device-families, apple/listing, apple/resubmit, validate |
 | `appStoreVersions_build_getToOneRelationship` | GET | `/v1/appStoreVersions/{id}/relationships/build` | read |  |
 | `appStoreVersions_build_updateToOneRelationship` | PATCH | `/v1/appStoreVersions/{id}/relationships/build` | write (dry by default) | apple/listing, apple/resubmit |
 | `appStoreVersions_createInstance` | POST | `/v1/appStoreVersions` | write (dry by default) | apple/listing |
@@ -389,7 +389,7 @@ Specs: Apple [App Store Connect API 4.5.1](https://developer.apple.com/sample-co
 | `appStoreVersions_getInstance` | GET | `/v1/appStoreVersions/{id}` | read | apple/listing |
 | `appStoreVersions_routingAppCoverage_getToOneRelated` | GET | `/v1/appStoreVersions/{id}/routingAppCoverage` | read |  |
 | `appStoreVersions_routingAppCoverage_getToOneRelationship` | GET | `/v1/appStoreVersions/{id}/relationships/routingAppCoverage` | read |  |
-| `appStoreVersions_updateInstance` | PATCH | `/v1/appStoreVersions/{id}` | write (dry by default) | apple/listing |
+| `appStoreVersions_updateInstance` | PATCH | `/v1/appStoreVersions/{id}` | write (dry by default) | apple/listing, apple/release, apple/resubmit |
 | **appTags** (3) | | | | |
 | `appTags_territories_getToManyRelated` | GET | `/v1/appTags/{id}/territories` | read |  |
 | `appTags_territories_getToManyRelationship` | GET | `/v1/appTags/{id}/relationships/territories` | read |  |
@@ -620,7 +620,7 @@ Specs: Apple [App Store Connect API 4.5.1](https://developer.apple.com/sample-co
 | `buildBundles_appClipDomainDebugStatus_getToOneRelationship` | GET | `/v1/buildBundles/{id}/relationships/appClipDomainDebugStatus` | read |  |
 | `buildBundles_betaAppClipInvocations_getToManyRelated` | GET | `/v1/buildBundles/{id}/betaAppClipInvocations` | read |  |
 | `buildBundles_betaAppClipInvocations_getToManyRelationship` | GET | `/v1/buildBundles/{id}/relationships/betaAppClipInvocations` | read |  |
-| `buildBundles_buildBundleFileSizes_getToManyRelated` | GET | `/v1/buildBundles/{id}/buildBundleFileSizes` | read |  |
+| `buildBundles_buildBundleFileSizes_getToManyRelated` | GET | `/v1/buildBundles/{id}/buildBundleFileSizes` | read | apple/device-families |
 | `buildBundles_buildBundleFileSizes_getToManyRelationship` | GET | `/v1/buildBundles/{id}/relationships/buildBundleFileSizes` | read |  |
 | **buildUploadFiles** (3) | | | | |
 | `buildUploadFiles_createInstance` | POST | `/v1/buildUploadFiles` | write (dry by default) | lib/xcode |
@@ -647,12 +647,12 @@ Specs: Apple [App Store Connect API 4.5.1](https://developer.apple.com/sample-co
 | `builds_betaBuildUsages_getMetrics` | GET | `/v1/builds/{id}/metrics/betaBuildUsages` | read |  |
 | `builds_betaGroups_createToManyRelationship` | POST | `/v1/builds/{id}/relationships/betaGroups` | write (dry by default) |  |
 | `builds_betaGroups_deleteToManyRelationship` | DELETE | `/v1/builds/{id}/relationships/betaGroups` | owner only (typed confirm) |  |
-| `builds_buildBetaDetail_getToOneRelated` | GET | `/v1/builds/{id}/buildBetaDetail` | read |  |
+| `builds_buildBetaDetail_getToOneRelated` | GET | `/v1/builds/{id}/buildBetaDetail` | read | apple/testflight |
 | `builds_buildBetaDetail_getToOneRelationship` | GET | `/v1/builds/{id}/relationships/buildBetaDetail` | read |  |
 | `builds_diagnosticSignatures_getToManyRelated` | GET | `/v1/builds/{id}/diagnosticSignatures` | read | health |
 | `builds_diagnosticSignatures_getToManyRelationship` | GET | `/v1/builds/{id}/relationships/diagnosticSignatures` | read |  |
 | `builds_getCollection` | GET | `/v1/builds` | read | apple/build, apple/build-mas, apple/encryption, apple/listing, apple/next-build, apple/resubmit, apple/status, apple/testflight, apple/upload, art, health, lib/store-apps, triage |
-| `builds_getInstance` | GET | `/v1/builds/{id}` | read |  |
+| `builds_getInstance` | GET | `/v1/builds/{id}` | read | apple/device-families |
 | `builds_icons_getToManyRelated` | GET | `/v1/builds/{id}/icons` | read |  |
 | `builds_icons_getToManyRelationship` | GET | `/v1/builds/{id}/relationships/icons` | read |  |
 | `builds_individualTesters_createToManyRelationship` | POST | `/v1/builds/{id}/relationships/individualTesters` | owner only (typed confirm) |  |

From ef80cd276058259df1787d1982246a65e762b95e Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Tue, 27 Oct 2026 17:17:39 +0700
Subject: [PATCH 055/126] storebound 0.8.56: version in package.json and every
 copy, CHANGELOG 0.8.56 section

---
 .claude-plugin/marketplace.json        | 2 +-
 .claude-plugin/plugin.json             | 2 +-
 .codex-plugin/plugin.json              | 2 +-
 CHANGELOG.md                           | 2 ++
 apps/desktop/package.json              | 2 +-
 apps/desktop/src-tauri/Cargo.lock      | 2 +-
 apps/desktop/src-tauri/Cargo.toml      | 2 +-
 apps/desktop/src-tauri/tauri.conf.json | 2 +-
 gemini-extension.json                  | 2 +-
 package.json                           | 2 +-
 10 files changed, 11 insertions(+), 9 deletions(-)

diff --git a/.claude-plugin/marketplace.json b/.claude-plugin/marketplace.json
index 9ec05ee..6ee0c76 100644
--- a/.claude-plugin/marketplace.json
+++ b/.claude-plugin/marketplace.json
@@ -9,7 +9,7 @@
       "name": "storebound",
       "source": ".",
       "description": "Take a mobile app or game from nothing to Submit for review on both stores: skills for every store step and questionnaire plus the storebound CLI and MCP server.",
-      "version": "0.8.55",
+      "version": "0.8.56",
       "category": "development",
       "tags": [
         "mobile",
diff --git a/.claude-plugin/plugin.json b/.claude-plugin/plugin.json
index d36edb9..f1567c7 100644
--- a/.claude-plugin/plugin.json
+++ b/.claude-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.55",
+  "version": "0.8.56",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/.codex-plugin/plugin.json b/.codex-plugin/plugin.json
index 91c89f9..70292c2 100644
--- a/.codex-plugin/plugin.json
+++ b/.codex-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.55",
+  "version": "0.8.56",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/CHANGELOG.md b/CHANGELOG.md
index cf58150..ba0057f 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,8 @@
 
 ## Unreleased
 
+## 0.8.56 · 2026-10-27
+
 - Release type. `apple.releaseType: afterApproval | manual | scheduled` (+ `apple.earliestReleaseDate`): `apple listing` creates versions with it (MANUAL when unset, existing versions untouched) and `apple submit` / `resubmit` set it before submitting when it differs, the dry run showing old -> new. New `apple release --after-approval | --manual | --scheduled <ISO date> [--platform] [--version] [--first-release] --yes` changes it on a version App Review has not approved yet (clear refusal otherwise, with `--manual-release` as the way out); exit 7 when it already has that type; an update is an agent step, after-approval on the first version of an app is exit 3 OWNER_STEP. Pitfall 125.
 - Device families. `validate` and `apple build` read the device families of the last live version (build bundle `deviceProtocols`, device models, iPad screenshot sets) and compare them with TARGETED_DEVICE_FAMILY in the Xcode project and `apple.ipad`; a gap stops `apple build` before the archive with the exact fix (ITMS-90101 otherwise comes after the build; `--allow-device-gap` overrides). Offline `check` warns when the live families are unknown or the config and project disagree. Pitfall 126.
 - TestFlight. `apple testflight testers --invite` checks that the tester's group has an installable build (past Beta App Review for external groups); without one it adds the tester, skips the invite and prints when it can go out (exit 0). Apple's 409 NO_INSTALLABLE_BUILDS is handled the same way; `distribute --submit-review` prints the hint for testers not invited yet. Pitfall 127.
diff --git a/apps/desktop/package.json b/apps/desktop/package.json
index fd1bcc3..d48b786 100644
--- a/apps/desktop/package.json
+++ b/apps/desktop/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@storebound/desktop",
-  "version": "0.8.55",
+  "version": "0.8.56",
   "private": true,
   "license": "MIT",
   "type": "module",
diff --git a/apps/desktop/src-tauri/Cargo.lock b/apps/desktop/src-tauri/Cargo.lock
index 3ef0c4e..d3e271c 100644
--- a/apps/desktop/src-tauri/Cargo.lock
+++ b/apps/desktop/src-tauri/Cargo.lock
@@ -4096,7 +4096,7 @@ checksum = "a2eb9349b6444b326872e140eb1cf5e7c522154d69e7a0ffb0fb81c06b37543f"
 
 [[package]]
 name = "storebound-desktop"
-version = "0.8.55"
+version = "0.8.56"
 dependencies = [
  "base64 0.22.1",
  "getrandom 0.3.4",
diff --git a/apps/desktop/src-tauri/Cargo.toml b/apps/desktop/src-tauri/Cargo.toml
index ed11aa9..f7fc08f 100644
--- a/apps/desktop/src-tauri/Cargo.toml
+++ b/apps/desktop/src-tauri/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "storebound-desktop"
-version = "0.8.55"
+version = "0.8.56"
 description = "storebound desktop: every game's releases on both stores in one window"
 license = "MIT"
 edition = "2021"
diff --git a/apps/desktop/src-tauri/tauri.conf.json b/apps/desktop/src-tauri/tauri.conf.json
index f1b385c..d2bf6b8 100644
--- a/apps/desktop/src-tauri/tauri.conf.json
+++ b/apps/desktop/src-tauri/tauri.conf.json
@@ -2,7 +2,7 @@
   "$schema": "https://schema.tauri.app/config/2",
   "productName": "storebound",
   "mainBinaryName": "storebound-desktop",
-  "version": "0.8.55",
+  "version": "0.8.56",
   "identifier": "dev.storebound.desktop",
   "build": {
     "frontendDist": "../dist",
diff --git a/gemini-extension.json b/gemini-extension.json
index c2603fb..8c34180 100644
--- a/gemini-extension.json
+++ b/gemini-extension.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.55",
+  "version": "0.8.56",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "contextFileName": "GEMINI.md",
   "mcpServers": {
diff --git a/package.json b/package.json
index 9655b43..c30a69d 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.55",
+  "version": "0.8.56",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every store questionnaire (incl. account deletion and App Review demo accounts), privacy, icons, screenshots and previews, TestFlight. After launch: crash vitals, review replies, price sheets, analytics and Product Page Optimization. One config, a CLI (Node 20+ or Bun), an MCP server and Agent Skills for your AI coding agent.",
   "license": "MIT",
   "author": "CRTkafa",

From 9a878d6562e6a061d660bc901e068ba3aedda1da Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Tue, 27 Oct 2026 18:58:48 +0700
Subject: [PATCH 056/126] apple upload: find the IPA of a build made with --out
 (build notes it in .storebound/last-apple-build.json; upload --out; the error
 names every folder searched and the last build's IPA)

---
 CHANGELOG.md            |  2 ++
 cli/apple/build.ts      |  3 ++-
 cli/apple/upload.ts     | 24 +++++++++++++++++-------
 cli/data/flags.json     |  3 ++-
 cli/lib/xcode.ts        | 20 +++++++++++++++++++-
 tests/path-free.test.ts | 17 ++++++++++++++++-
 6 files changed, 58 insertions(+), 11 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index ba0057f..fa80824 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,8 @@
 
 ## Unreleased
 
+- `apple upload` finds the IPA of a build made with `--out`: `apple build` notes its IPA and out folder in `.storebound/last-apple-build.json`, and upload searches `--out` (new flag), then that last build's out, then `apple.build.out` / `build/ios`. When nothing is found, the error names every folder it searched and the last build's IPA.
+
 ## 0.8.56 · 2026-10-27
 
 - Release type. `apple.releaseType: afterApproval | manual | scheduled` (+ `apple.earliestReleaseDate`): `apple listing` creates versions with it (MANUAL when unset, existing versions untouched) and `apple submit` / `resubmit` set it before submitting when it differs, the dry run showing old -> new. New `apple release --after-approval | --manual | --scheduled <ISO date> [--platform] [--version] [--first-release] --yes` changes it on a version App Review has not approved yet (clear refusal otherwise, with `--manual-release` as the way out); exit 7 when it already has that type; an update is an agent step, after-approval on the first version of an app is exit 3 OWNER_STEP. Pitfall 125.
diff --git a/cli/apple/build.ts b/cli/apple/build.ts
index 13e8a89..d877447 100644
--- a/cli/apple/build.ts
+++ b/cli/apple/build.ts
@@ -41,7 +41,7 @@ import { liveDeviceFamilies } from './device-families';
 import { keychainPassword, keychainSigningArgs, parseKeychainList, showSecurity, sshBuildRefusal, unlockSteps } from '../lib/keychain';
 import { appGroupSteps, appGroupVerdicts, type GroupEvidence } from '../lib/targets';
 import { capacitorProject, webStep } from '../lib/web-assets';
-import { archiveArgs, type AscAuth, distributionErrors, exportArgs, foreignRsync, remoteBuildSession, xcodePath, flutterConfigArgs, ipaInfo, ipaVersionProblem, pickXcode, scanXcode, showCmd } from '../lib/xcode';
+import { archiveArgs, type AscAuth, distributionErrors, exportArgs, foreignRsync, remoteBuildSession, xcodePath, flutterConfigArgs, ipaInfo, ipaVersionProblem, pickXcode, recordLastBuild, scanXcode, showCmd } from '../lib/xcode';
 import { bundleTrackingIssues, ipaManifests } from '../lib/privacy-files';
 import { ascClient } from './asc';
 import { parsePlatform } from './platform';
@@ -305,6 +305,7 @@ export async function run(ctx: Ctx): Promise<void> {
   const result = { ipa: join(exportPath, ipa), bundleId: info.bundleId, version: info.version, build: info.build, web: web.bundle, derivedData: derivedData ?? null, pathFree, ...(scanPaths ? { leaks } : {}) };
   writeFileSync(join(out, 'latest.json'), `${JSON.stringify(result, null, 2)}
 `);
+  recordLastBuild(root, { ipa: result.ipa, out, version: info.version, build: info.build });
   if (json) printJson(result);
   done(TAG, `${relative(root, result.ipa)}: ${info.bundleId} ${info.version} (${info.build}). Next: storebound apple upload ${relative(root, result.ipa)} --dry`);
 }
diff --git a/cli/apple/upload.ts b/cli/apple/upload.ts
index 114d989..28ccd4a 100644
--- a/cli/apple/upload.ts
+++ b/cli/apple/upload.ts
@@ -1,7 +1,8 @@
 // Upload an IPA to App Store Connect and wait until Apple has processed the build.
-//   storebound apple upload [<app.ipa>] [--build N] [--allow-existing] [--via api|altool] [--no-wait] [--timeout 60m] [--pre-check "<cmd with {file}>"] [--evidence <path.json>] [--dry] [--yes] [--json]
+//   storebound apple upload [<app.ipa>] [--out D] [--build N] [--allow-existing] [--via api|altool] [--no-wait] [--timeout 60m] [--pre-check "<cmd with {file}>"] [--evidence <path.json>] [--dry] [--yes] [--json]
 //   storebound apple upload <App.pkg> --platform macos [...]   (Mac App Store .pkg from apple build --platform macos --tauri; platform MAC_OS, uti com.apple.pkg; altool gets --type macos; no SDK / privacy-manifest check)
-// Default IPA: the newest in <apple.build.out or build/ios>/export (and its <version>-<build>/ folders), or with
+// Default IPA: the newest in <--out>/export, else the last apple build's <out>/export (.storebound/last-apple-build.json,
+// so a build with --out is found), then <apple.build.out or build/ios>/export (and its <version>-<build>/ folders), or with
 // --build N the one with that build number. The bundle id, version and build number come from the IPA's Info.plist.
 // An IPA whose build number is already on App Store Connect fails with exit 1 (a stale IPA left by a failed
 // `apple build`, pitfall 53); only --allow-existing (flows that resume after a finished upload) re-checks it instead. Before any network call every PrivacyInfo.xcprivacy in the IPA
@@ -27,7 +28,7 @@ import type { Ctx } from '../lib/ctx';
 import { confirm, need } from '../lib/ctx';
 import { done, log, printJson, warn } from '../lib/log';
 import { compareBuild, nextBuildNumber, nextPollDelay, parseDuration, WAIT_EXIT } from '../lib/release';
-import { altoolArgs, buildUploadReqs, exportedIpas, ipaInfo, ipaVersionProblem, showCmd, UPLOAD_DONE, uploadProblems } from '../lib/xcode';
+import { altoolArgs, buildUploadReqs, exportedIpas, ipaInfo, ipaVersionProblem, readLastBuild, showCmd, UPLOAD_DONE, uploadProblems, uploadSearchDirs } from '../lib/xcode';
 import { bundleTrackingIssues, ipaManifests } from '../lib/privacy-files';
 import { BUILD_WAIT_EXIT } from '../lib/build-ops';
 import { type Asc, ascClient, type J } from './asc';
@@ -238,11 +239,20 @@ export async function run(ctx: Ctx): Promise<void> {
   const macos = parsePlatform(a.get('platform')) === 'MAC_OS';
   let ipa = a._.find(x => x.endsWith('.ipa') || x.endsWith('.pkg'));
   if (!ipa) {
-    const dir = join(resolve(config.apple?.build?.out ?? 'build/ios'), 'export');
-    let found = exportedIpas(dir);
-    if (want) found = found.filter(f => { try { return ipaInfo(f).build === want; } catch { return false; } });
+    const last = readLastBuild(root);
+    const flagOut = a.get('out');
+    const dirs = uploadSearchDirs({ flagOut: flagOut ? resolve(flagOut) : undefined, lastOut: last?.out, configOut: resolve(config.apple?.build?.out ?? 'build/ios') });
+    let found: string[] = [];
+    for (const dir of dirs) {
+      found = exportedIpas(dir);
+      if (want) found = found.filter(f => { try { return ipaInfo(f).build === want; } catch { return false; } });
+      if (found[0]) break;
+    }
     if (!found[0] && macos) throw new Error('usage: storebound apple upload <app.pkg> --platform macos (storebound apple build --platform macos --tauri <src-tauri> makes one)');
-    if (!found[0]) throw new Error(`usage: storebound apple upload <app.ipa> (no ${want ? `build ${want} ` : ''}IPA in ${relative(root, dir)}; storebound apple build makes one)`);
+    if (!found[0]) {
+      const lastHint = last && !existsSync(last.ipa) ? `; the last apple build (${last.build}) wrote ${last.ipa}, which is gone` : last ? `; the last apple build (${last.build}) is ${last.ipa}` : '';
+      throw new Error(`usage: storebound apple upload <app.ipa> (no ${want ? `build ${want} ` : ''}IPA in ${dirs.map(d => relative(root, d) || '.').join(', ')}${lastHint}; pass the IPA, --out <the build's --out>, or run storebound apple build)`);
+    }
     ipa = found[0];
   } else ipa = resolve(ipa);
   shipPhase('verify', `checking ${relative(root, ipa)}`);
diff --git a/cli/data/flags.json b/cli/data/flags.json
index aa55fc7..3a24466 100644
--- a/cli/data/flags.json
+++ b/cli/data/flags.json
@@ -366,6 +366,7 @@
    "locale",
    "no-wait",
    "older-than",
+   "out",
    "platform",
    "pre-check",
    "progress",
@@ -1574,7 +1575,7 @@
    "storebound apple testflight expire (--keep N | --older-than D) [--version x.y.z] [--dry] [--yes] [--json]"
   ],
   "apple upload": [
-   "storebound apple upload [<app.ipa>] [--build N] [--allow-existing] [--via api|altool] [--no-wait] [--timeout 60m] [--pre-check \"<cmd with {file}>\"] [--evidence <path.json>] [--dry] [--yes] [--json]",
+   "storebound apple upload [<app.ipa>] [--out D] [--build N] [--allow-existing] [--via api|altool] [--no-wait] [--timeout 60m] [--pre-check \"<cmd with {file}>\"] [--evidence <path.json>] [--dry] [--yes] [--json]",
    "storebound apple upload <App.pkg> --platform macos [...]   (Mac App Store .pkg from apple build --platform macos --tauri; platform MAC_OS, uti com.apple.pkg; altool gets --type macos; no SDK / privacy-manifest check)"
   ],
   "apple win-back": [
diff --git a/cli/lib/xcode.ts b/cli/lib/xcode.ts
index cccad53..ed5f4a7 100644
--- a/cli/lib/xcode.ts
+++ b/cli/lib/xcode.ts
@@ -1,7 +1,7 @@
 // Xcode builds without Xcode's UI: find the workspace / project and scheme (native, Capacitor, React Native, Flutter,
 // Unity-exported projects), build the xcodebuild archive and export command lines, read an IPA's Info.plist.
 // Pure except scanXcode (a bounded directory walk) and ipaInfo (reads the IPA).
-import { existsSync, readdirSync, readFileSync, statSync } from 'node:fs';
+import { existsSync, mkdirSync, readdirSync, readFileSync, statSync, writeFileSync } from 'node:fs';
 import { basename, dirname, join, relative } from 'node:path';
 import { parsePlist, type PlistValue } from './plist';
 import { zipEntries, zipRead } from './zip';
@@ -266,3 +266,21 @@ export function remoteBuildSession(env: Record<string, string | undefined>, mana
   if (managerName && managerName !== 'Aqua') return `this is not the logged-in GUI session (launchctl manager: ${managerName})`;
   return null;
 }
+
+/** Where `apple build` notes its last IPA for `apple upload`: .storebound/last-apple-build.json (gitignored). */
+export const lastBuildFile = (root: string): string => join(root, '.storebound', 'last-apple-build.json');
+
+export function recordLastBuild(root: string, r: { ipa: string; out: string; version: string; build: string }): void {
+  try { mkdirSync(join(root, '.storebound'), { recursive: true }); writeFileSync(lastBuildFile(root), `${JSON.stringify(r, null, 2)}\n`); } catch { /* best effort */ }
+}
+
+export function readLastBuild(root: string): { ipa: string; out: string; version?: string; build?: string } | null {
+  try { const j = JSON.parse(readFileSync(lastBuildFile(root), 'utf8')); return typeof j?.ipa === 'string' && typeof j?.out === 'string' ? j : null; } catch { return null; }
+}
+
+/** The export folders `apple upload` searches, in order: --out, else the last build's out (a --out that build used),
+ *  then apple.build.out / build/ios. Duplicates dropped. */
+export function uploadSearchDirs(o: { flagOut?: string; lastOut?: string; configOut: string }): string[] {
+  const dirs = o.flagOut ? [o.flagOut] : [...(o.lastOut ? [o.lastOut] : []), o.configOut];
+  return [...new Set(dirs.map(d => join(d, 'export')))];
+}
diff --git a/tests/path-free.test.ts b/tests/path-free.test.ts
index 0a2e628..a6b599d 100644
--- a/tests/path-free.test.ts
+++ b/tests/path-free.test.ts
@@ -3,7 +3,7 @@ import { mkdirSync, mkdtempSync, rmSync, writeFileSync } from 'node:fs';
 import { tmpdir } from 'node:os';
 import { join } from 'node:path';
 import { archiveScanDirs, derivedDataFor, leakNeedles, leakProblem, outsideHome, pathFreeSettings, prefixMaps, scanForPaths } from '../cli/lib/path-free';
-import { archiveArgs, validateAppleBuild } from '../cli/lib/xcode';
+import { archiveArgs, readLastBuild, recordLastBuild, uploadSearchDirs, validateAppleBuild } from '../cli/lib/xcode';
 
 const resolve = (p: string): string => (p.startsWith('/') ? p : `/proj/${p}`);
 const t = { framework: 'native' as const, project: 'App.xcodeproj', scheme: 'App', notes: [] };
@@ -102,3 +102,18 @@ describe('leak scan', () => {
     rmSync(dir, { recursive: true, force: true });
   });
 });
+
+describe('apple upload finds the last build', () => {
+  test('--out wins; else the last build out, then the config out', () => {
+    expect(uploadSearchDirs({ flagOut: '/o', lastOut: '/l', configOut: '/c' })).toEqual([join('/o', 'export')]);
+    expect(uploadSearchDirs({ lastOut: '/l', configOut: '/c' })).toEqual([join('/l', 'export'), join('/c', 'export')]);
+    expect(uploadSearchDirs({ lastOut: '/c', configOut: '/c' })).toEqual([join('/c', 'export')]);
+  });
+  test('build records the IPA and out in .storebound, upload reads it back', () => {
+    const root = mkdtempSync(join(tmpdir(), 'lb-'));
+    expect(readLastBuild(root)).toBeNull();
+    recordLastBuild(root, { ipa: '/shared/out/export/build-31/App.ipa', out: '/shared/out', version: '1.0', build: '31' });
+    expect(readLastBuild(root)).toEqual({ ipa: '/shared/out/export/build-31/App.ipa', out: '/shared/out', version: '1.0', build: '31' });
+    rmSync(root, { recursive: true, force: true });
+  });
+});

From 28a50e7d2e3eba05a5226c14ad9c1bf4712336c5 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Tue, 27 Oct 2026 19:01:14 +0700
Subject: [PATCH 057/126] storebound 0.8.57: version in package.json and every
 copy, CHANGELOG 0.8.57 section

---
 .claude-plugin/marketplace.json        | 2 +-
 .claude-plugin/plugin.json             | 2 +-
 .codex-plugin/plugin.json              | 2 +-
 CHANGELOG.md                           | 2 ++
 apps/desktop/package.json              | 2 +-
 apps/desktop/src-tauri/Cargo.lock      | 2 +-
 apps/desktop/src-tauri/Cargo.toml      | 2 +-
 apps/desktop/src-tauri/tauri.conf.json | 2 +-
 gemini-extension.json                  | 2 +-
 package.json                           | 2 +-
 10 files changed, 11 insertions(+), 9 deletions(-)

diff --git a/.claude-plugin/marketplace.json b/.claude-plugin/marketplace.json
index 6ee0c76..b247852 100644
--- a/.claude-plugin/marketplace.json
+++ b/.claude-plugin/marketplace.json
@@ -9,7 +9,7 @@
       "name": "storebound",
       "source": ".",
       "description": "Take a mobile app or game from nothing to Submit for review on both stores: skills for every store step and questionnaire plus the storebound CLI and MCP server.",
-      "version": "0.8.56",
+      "version": "0.8.57",
       "category": "development",
       "tags": [
         "mobile",
diff --git a/.claude-plugin/plugin.json b/.claude-plugin/plugin.json
index f1567c7..e9ef474 100644
--- a/.claude-plugin/plugin.json
+++ b/.claude-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.56",
+  "version": "0.8.57",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/.codex-plugin/plugin.json b/.codex-plugin/plugin.json
index 70292c2..300ce52 100644
--- a/.codex-plugin/plugin.json
+++ b/.codex-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.56",
+  "version": "0.8.57",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/CHANGELOG.md b/CHANGELOG.md
index fa80824..6d65fcd 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,8 @@
 
 ## Unreleased
 
+## 0.8.57 · 2026-10-27
+
 - `apple upload` finds the IPA of a build made with `--out`: `apple build` notes its IPA and out folder in `.storebound/last-apple-build.json`, and upload searches `--out` (new flag), then that last build's out, then `apple.build.out` / `build/ios`. When nothing is found, the error names every folder it searched and the last build's IPA.
 
 ## 0.8.56 · 2026-10-27
diff --git a/apps/desktop/package.json b/apps/desktop/package.json
index d48b786..428e5a1 100644
--- a/apps/desktop/package.json
+++ b/apps/desktop/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@storebound/desktop",
-  "version": "0.8.56",
+  "version": "0.8.57",
   "private": true,
   "license": "MIT",
   "type": "module",
diff --git a/apps/desktop/src-tauri/Cargo.lock b/apps/desktop/src-tauri/Cargo.lock
index d3e271c..9e31a73 100644
--- a/apps/desktop/src-tauri/Cargo.lock
+++ b/apps/desktop/src-tauri/Cargo.lock
@@ -4096,7 +4096,7 @@ checksum = "a2eb9349b6444b326872e140eb1cf5e7c522154d69e7a0ffb0fb81c06b37543f"
 
 [[package]]
 name = "storebound-desktop"
-version = "0.8.56"
+version = "0.8.57"
 dependencies = [
  "base64 0.22.1",
  "getrandom 0.3.4",
diff --git a/apps/desktop/src-tauri/Cargo.toml b/apps/desktop/src-tauri/Cargo.toml
index f7fc08f..6912486 100644
--- a/apps/desktop/src-tauri/Cargo.toml
+++ b/apps/desktop/src-tauri/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "storebound-desktop"
-version = "0.8.56"
+version = "0.8.57"
 description = "storebound desktop: every game's releases on both stores in one window"
 license = "MIT"
 edition = "2021"
diff --git a/apps/desktop/src-tauri/tauri.conf.json b/apps/desktop/src-tauri/tauri.conf.json
index d2bf6b8..04dc72a 100644
--- a/apps/desktop/src-tauri/tauri.conf.json
+++ b/apps/desktop/src-tauri/tauri.conf.json
@@ -2,7 +2,7 @@
   "$schema": "https://schema.tauri.app/config/2",
   "productName": "storebound",
   "mainBinaryName": "storebound-desktop",
-  "version": "0.8.56",
+  "version": "0.8.57",
   "identifier": "dev.storebound.desktop",
   "build": {
     "frontendDist": "../dist",
diff --git a/gemini-extension.json b/gemini-extension.json
index 8c34180..2a9f249 100644
--- a/gemini-extension.json
+++ b/gemini-extension.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.56",
+  "version": "0.8.57",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "contextFileName": "GEMINI.md",
   "mcpServers": {
diff --git a/package.json b/package.json
index c30a69d..8c4bf4c 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.56",
+  "version": "0.8.57",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every store questionnaire (incl. account deletion and App Review demo accounts), privacy, icons, screenshots and previews, TestFlight. After launch: crash vitals, review replies, price sheets, analytics and Product Page Optimization. One config, a CLI (Node 20+ or Bun), an MCP server and Agent Skills for your AI coding agent.",
   "license": "MIT",
   "author": "CRTkafa",

From 5f73fcbcf4e36d33fcd779a8982d384475ddf17e Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Thu, 29 Oct 2026 16:19:53 +0700
Subject: [PATCH 058/126] mcp --http: one Streamable HTTP server for every
 session (token or OAuth introspection auth, project argument per call, roots,
 origin check)

---
 cli/commands.ts        |   2 +-
 cli/data/flags.json    |  27 +++++-
 cli/mcp-cmd.ts         |  13 +++
 cli/mcp-http.ts        | 214 +++++++++++++++++++++++++++++++++++++++++
 tests/mcp-http.test.ts | 105 ++++++++++++++++++++
 5 files changed, 359 insertions(+), 2 deletions(-)
 create mode 100644 cli/mcp-cmd.ts
 create mode 100644 cli/mcp-http.ts
 create mode 100644 tests/mcp-http.test.ts

diff --git a/cli/commands.ts b/cli/commands.ts
index 6e05b40..f644811 100644
--- a/cli/commands.ts
+++ b/cli/commands.ts
@@ -10,7 +10,7 @@ export const PLAIN: Record<string, [() => Promise<Plain>, string]> = {
   'init': [() => import('./init'), 'copy the templates (config, listing, copy, declarations, privacy policy) into this project; --profile app|game|subscription-app (default app)'],
   'import': [() => import('./import'), 'fastlane [--dir fastlane] [--profile app|game|subscription-app] [--dry]: Appfile, deliver + supply metadata and screenshots -> config, store/*.md, shots frames (read-only on fastlane, never overwrites)'],
   'install': [() => import('./install'), 'skills + MCP server for --agent claude|codex|cursor|copilot|windsurf|gemini|opencode'],
-  'mcp': [async () => ({ run: async () => (await import('./mcp')).serve() }), 'stdio MCP server wrapping these commands (for any MCP-capable AI tool)'],
+  'mcp': [() => import('./mcp-cmd'), 'MCP server wrapping these commands (for any MCP-capable AI tool): stdio, or --http [--port 7787] [--roots <dirs>] [--auth token|introspect] for one server every session shares'],
   'watch': [() => import('./watch'), 'store events for every app on this machine: rejected, approved, live, rollout halted, crash threshold, low reviews; loops every --every 15m or --once; sinks --notify os|ntfy|telegram|webhook|ingest; test sends a test event; --dry, --dir <folder>, --json (read-only on the stores)'],
   'status': [() => import('./status'), '[--app <name|store id|folder>] [--json]: per platform the live and next version, build, track, review state and rollout %, without uploading (read-only; read by ship pipelines, docs/ship-step.md)'],
   'events': [() => import('./events'), '[--since 24h] [--app <name>] [--kind rejected] [--json]: the events watch recorded in ~/.storebound/events.jsonl (read-only)'],
diff --git a/cli/data/flags.json b/cli/data/flags.json
index 3a24466..d813c82 100644
--- a/cli/data/flags.json
+++ b/cli/data/flags.json
@@ -645,7 +645,21 @@
    "to",
    "translate"
   ],
-  "mcp": [],
+  "mcp": [
+   "allow-origin",
+   "allow-remote-token",
+   "auth",
+   "host",
+   "http",
+   "introspect-key-file",
+   "introspect-url",
+   "issuer",
+   "port",
+   "project",
+   "resource",
+   "roots",
+   "token-file"
+  ],
   "onboard": [
    "accounts",
    "all",
@@ -1159,7 +1173,9 @@
    "allow-availability-changes",
    "allow-device-gap",
    "allow-existing",
+   "allow-origin",
    "allow-price-changes",
+   "allow-remote-token",
    "allow-ssh",
    "allow-stale-web",
    "allow-version-mismatch",
@@ -1172,6 +1188,7 @@
    "apps",
    "archive",
    "aso",
+   "auth",
    "base",
    "base-url",
    "beta",
@@ -1243,6 +1260,8 @@
    "headless",
    "home",
    "hook",
+   "host",
+   "http",
    "icon",
    "icons",
    "identity",
@@ -1251,9 +1270,12 @@
    "install",
    "internal",
    "internal-only",
+   "introspect-key-file",
+   "introspect-url",
    "invite",
    "ios",
    "issue",
+   "issuer",
    "issues",
    "jobs",
    "keep",
@@ -1350,10 +1372,12 @@
    "render",
    "repair-stuck",
    "resolve-iaps",
+   "resource",
    "result-file",
    "resume",
    "review-sent",
    "root",
+   "roots",
    "scan-paths",
    "scenes",
    "scheduled",
@@ -1387,6 +1411,7 @@
    "threshold",
    "timeout",
    "to",
+   "token-file",
    "top",
    "track",
    "tracking-domains",
diff --git a/cli/mcp-cmd.ts b/cli/mcp-cmd.ts
new file mode 100644
index 0000000..390dcb2
--- /dev/null
+++ b/cli/mcp-cmd.ts
@@ -0,0 +1,13 @@
+// `storebound mcp`: stdio by default (one process per agent session), or `--http` for one shared server
+// (cli/mcp-http.ts: every session of the machine, or a team behind OAuth).
+import type { parseArgs } from './lib/args';
+
+export async function run(a: ReturnType<typeof parseArgs>): Promise<void> {
+  if (!a.has('http')) return (await import('./mcp')).serve();
+  const { serveHttp } = await import('./mcp-http');
+  await serveHttp({
+    host: a.get('host'), port: a.get('port'), roots: a.get('roots'), project: a.get('project'), allowOrigin: a.get('allow-origin'),
+    auth: a.get('auth'), tokenFile: a.get('token-file'), introspectUrl: a.get('introspect-url'), introspectKeyFile: a.get('introspect-key-file'),
+    resource: a.get('resource'), issuer: a.get('issuer'), allowRemoteToken: a.has('allow-remote-token'),
+  });
+}
diff --git a/cli/mcp-http.ts b/cli/mcp-http.ts
new file mode 100644
index 0000000..0c30e08
--- /dev/null
+++ b/cli/mcp-http.ts
@@ -0,0 +1,214 @@
+// `storebound mcp --http`: the same MCP server over Streamable HTTP, so one process serves every agent session on a
+// machine (or one host serves a whole team) instead of one stdio process per session.
+//   storebound mcp --http [--host 127.0.0.1] [--port 7787] [--roots <dir,dir>] [--project <dir>]
+//                         [--auth token|introspect] [--token-file ~/.storebound/mcp-token]
+//                         [--introspect-url <url> --introspect-key-file <file> --resource <url> --issuer <url>]
+// Transport (https://modelcontextprotocol.io/specification/2025-06-18/basic/transports#streamable-http): one endpoint,
+// /mcp. POST carries one JSON-RPC message and gets one JSON answer (202 for a notification); GET and DELETE are 405
+// (no server-initiated stream, no session state: every call is independent, so no Mcp-Session-Id is issued). The
+// Origin header, when sent, must be a localhost origin unless --allow-origin names it (DNS rebinding).
+// Project: every tool gets a `project` argument, the absolute path of the app folder the CLI runs in. It must be inside
+// --roots (default: the home folder); --project (or STOREBOUND_PROJECT) is the default when a call has none.
+// Auth (every request to /mcp):
+//   token (default): `Authorization: Bearer <token>`, the token in --token-file (made with mode 600 on first start;
+//     never printed). Clients: claude mcp add --transport http storebound http://127.0.0.1:7787/mcp
+//     --header "Authorization: Bearer $(cat ~/.storebound/mcp-token)".
+//   introspect: an OAuth 2.0 bearer token checked at --introspect-url (RFC 7662; this server authenticates with the
+//     key in --introspect-key-file). The token must be active, carry the `mcp` scope and name --resource in aud
+//     (RFC 8707). Without a valid token: 401 with WWW-Authenticate: Bearer resource_metadata=".../.well-known/
+//     oauth-protected-resource/mcp" (RFC 9728), which names --issuer as the authorization server. Answers are cached
+//     for 60 s per token (hashed); the token itself is never logged.
+import { createHash, randomBytes } from 'node:crypto';
+import { chmodSync, existsSync, mkdirSync, readFileSync, statSync, writeFileSync } from 'node:fs';
+import { createServer, type IncomingMessage, type ServerResponse } from 'node:http';
+import { homedir } from 'node:os';
+import { dirname, isAbsolute, join, relative, resolve } from 'node:path';
+import pkg from '../package.json' with { type: 'json' };
+import { handle, LEGACY, PROTOCOL } from './mcp';
+import { runCommand } from './lib/runner';
+
+export const DEFAULT_PORT = 7787;
+const MAX_BODY = 4 * 1024 * 1024;
+
+export interface HttpOptions {
+  host: string;
+  port: number;
+  roots: string[];
+  project: string | null;
+  allowOrigins: string[];
+  auth: { kind: 'token'; token: string } | { kind: 'introspect'; url: string; key: string; resource: string; issuer: string };
+}
+
+export const PROJECT_PROP = { type: 'string', description: 'Absolute path of the app folder (the one with storebound.config.ts) to run in. Required unless the server was started with --project.' } as const;
+
+/** Inside one of the roots (path compare, case-insensitive on Windows); no "..", no other drive. */
+export function insideRoots(dir: string, roots: string[]): boolean {
+  const norm = (p: string) => (process.platform === 'win32' ? resolve(p).toLowerCase() : resolve(p));
+  return roots.some(r => { const rel = relative(norm(r), norm(dir)); return rel === '' || (!rel.startsWith('..') && !isAbsolute(rel)); });
+}
+
+/** The folder a call runs in, or the reason it cannot run. */
+export function projectFor(arg: unknown, o: Pick<HttpOptions, 'roots' | 'project'>): { dir: string } | { error: string } {
+  if (arg === undefined || arg === null || arg === '') return o.project ? { dir: o.project } : { error: 'project: required (absolute path of the app folder)' };
+  if (typeof arg !== 'string' || !isAbsolute(arg)) return { error: 'project: must be an absolute path' };
+  if (!insideRoots(arg, o.roots)) return { error: `project: ${arg} is outside the server's roots (${o.roots.join(', ')})` };
+  try { if (!statSync(arg).isDirectory()) return { error: `project: ${arg} is not a folder` }; } catch { return { error: `project: ${arg} does not exist` }; }
+  return { dir: resolve(arg) };
+}
+
+/** Localhost origins are always fine; others only when listed. No Origin header (non-browser clients) is fine. */
+export function originAllowed(origin: string | undefined, allow: string[]): boolean {
+  if (!origin) return true;
+  if (allow.includes(origin)) return true;
+  try { const u = new URL(origin); return ['localhost', '127.0.0.1', '[::1]'].includes(u.hostname); } catch { return false; }
+}
+
+/** The protected resource metadata URL for a resource URL (RFC 9728 section 3: the path goes after the well-known part). */
+export function metadataUrl(resource: string): string {
+  const u = new URL(resource);
+  return `${u.origin}/.well-known/oauth-protected-resource${u.pathname === '/' ? '' : u.pathname}`;
+}
+
+/** Introspection answer -> allowed? (active, `mcp` scope, our resource in aud). */
+export function introspectionOk(j: unknown, resource: string): boolean {
+  if (!j || typeof j !== 'object') return false;
+  const r = j as { active?: unknown; scope?: unknown; aud?: unknown };
+  if (r.active !== true) return false;
+  const scopes = typeof r.scope === 'string' ? r.scope.split(/\s+/) : [];
+  if (!scopes.includes('mcp')) return false;
+  const aud = Array.isArray(r.aud) ? r.aud : typeof r.aud === 'string' ? [r.aud] : [];
+  return aud.includes(resource);
+}
+
+const bearer = (req: IncomingMessage): string | null => { const h = req.headers.authorization ?? ''; const m = /^Bearer\s+(\S+)$/i.exec(h); return m ? m[1]! : null; };
+
+const cache = new Map<string, { ok: boolean; until: number }>();
+async function authorized(req: IncomingMessage, o: HttpOptions): Promise<boolean> {
+  const t = bearer(req);
+  if (!t) return false;
+  if (o.auth.kind === 'token') {
+    const a = createHash('sha256').update(t).digest(), b = createHash('sha256').update(o.auth.token).digest();
+    return a.equals(b);
+  }
+  const key = createHash('sha256').update(t).digest('hex');
+  const hit = cache.get(key);
+  if (hit && hit.until > Date.now()) return hit.ok;
+  let ok = false;
+  try {
+    const r = await fetch(o.auth.url, { method: 'POST', signal: AbortSignal.timeout(10_000),
+      headers: { authorization: `Bearer ${o.auth.key}`, 'content-type': 'application/x-www-form-urlencoded', accept: 'application/json' },
+      body: new URLSearchParams({ token: t }).toString() });
+    ok = r.ok && introspectionOk(await r.json(), o.auth.resource);
+  } catch { return false; } // no cache on a network error
+  cache.set(key, { ok, until: Date.now() + 60_000 });
+  return ok;
+}
+
+function send(res: ServerResponse, status: number, body?: unknown, headers: Record<string, string> = {}): void {
+  res.writeHead(status, { 'cache-control': 'no-store', ...(body === undefined ? {} : { 'content-type': 'application/json' }), ...headers });
+  res.end(body === undefined ? undefined : JSON.stringify(body));
+}
+
+async function readBody(req: IncomingMessage): Promise<string | null> {
+  let size = 0; const parts: Buffer[] = [];
+  for await (const c of req) { size += (c as Buffer).length; if (size > MAX_BODY) return null; parts.push(c as Buffer); }
+  return Buffer.concat(parts).toString('utf8');
+}
+
+/** One POST body -> the answer (null for a notification). tools/list gains `project`; tools/call runs in it. */
+export async function answer(msg: Record<string, unknown>, o: Pick<HttpOptions, 'roots' | 'project'>,
+  run: (argv: string[], cwd: string) => Promise<{ code: number; out: string }> = runIn): Promise<Record<string, unknown> | null> {
+  const params = (msg.params ?? {}) as Record<string, unknown>;
+  if (msg.method === 'tools/call') {
+    const args = { ...((params.arguments ?? {}) as Record<string, unknown>) };
+    const p = projectFor(args.project, o);
+    if ('error' in p) return { jsonrpc: '2.0', id: msg.id ?? null, result: { content: [{ type: 'text', text: `Invalid arguments: ${p.error}` }], isError: true } };
+    delete args.project;
+    return handle({ ...msg, params: { ...params, arguments: args } } as never, argv => run(argv, p.dir));
+  }
+  const r = await handle(msg as never);
+  if (msg.method === 'tools/list' && r && typeof r.result === 'object') {
+    const tools = (r.result as { tools?: { inputSchema: { properties: Record<string, unknown>; required?: string[] } }[] }).tools ?? [];
+    for (const t of tools) {
+      t.inputSchema.properties = { project: PROJECT_PROP, ...t.inputSchema.properties };
+      if (!o.project) t.inputSchema.required = ['project', ...(t.inputSchema.required ?? [])];
+    }
+  }
+  return r;
+}
+
+async function runIn(argv: string[], cwd: string): Promise<{ code: number; out: string }> {
+  const r = runCommand(argv, { cwd, env: { STOREBOUND_MCP: '1' } });
+  const { code, out } = await r.result;
+  return { code, out };
+}
+
+export function startHttp(o: HttpOptions): Promise<{ close: () => void; port: number }> {
+  const resourceMeta = o.auth.kind === 'introspect' ? metadataUrl(o.auth.resource) : null;
+  const server = createServer(async (req, res) => {
+    const path = (req.url ?? '/').split('?')[0];
+    if (resourceMeta && o.auth.kind === 'introspect' && req.method === 'GET' && path === new URL(resourceMeta).pathname)
+      return send(res, 200, { resource: o.auth.resource, authorization_servers: [o.auth.issuer], bearer_methods_supported: ['header'], scopes_supported: ['mcp'], resource_name: 'storebound' });
+    if (path === '/health' && req.method === 'GET') return send(res, 200, { ok: true, version: pkg.version });
+    if (path !== '/mcp') return send(res, 404, { error: 'not found' });
+    if (!originAllowed(req.headers.origin, o.allowOrigins)) return send(res, 403, { error: 'origin not allowed' });
+    if (!(await authorized(req, o)))
+      return send(res, 401, { error: 'unauthorized' }, { 'www-authenticate': resourceMeta ? `Bearer resource_metadata="${resourceMeta}"` : 'Bearer' });
+    if (req.method !== 'POST') return send(res, 405, { error: 'POST only (no server-initiated stream)' }, { allow: 'POST' });
+    const body = await readBody(req);
+    if (body === null) return send(res, 413, { error: 'body too large' });
+    let msg: unknown;
+    try { msg = JSON.parse(body); } catch { return send(res, 400, { jsonrpc: '2.0', id: null, error: { code: -32700, message: 'Parse error' } }); }
+    if (Array.isArray(msg) || typeof msg !== 'object' || msg === null) return send(res, 400, { jsonrpc: '2.0', id: null, error: { code: -32600, message: 'One JSON-RPC message per request' } });
+    try {
+      const r = await answer(msg as Record<string, unknown>, o);
+      return r ? send(res, 200, r) : send(res, 202);
+    } catch (e) { return send(res, 500, { jsonrpc: '2.0', id: (msg as { id?: unknown }).id ?? null, error: { code: -32603, message: String((e as Error).message) } }); }
+  });
+  return new Promise((ok, fail) => {
+    server.once('error', fail);
+    server.listen(o.port, o.host, () => {
+      const a = server.address(); const port = typeof a === 'object' && a ? a.port : o.port;
+      ok({ close: () => server.close(), port });
+    });
+  });
+}
+
+/** The local bearer token: read, or made (32 random bytes, hex, mode 600) on first start. */
+export function tokenFrom(file: string): string {
+  if (existsSync(file)) { const t = readFileSync(file, 'utf8').trim(); if (t.length >= 32) return t; }
+  mkdirSync(dirname(file), { recursive: true });
+  const t = randomBytes(32).toString('hex');
+  writeFileSync(file, `${t}\n`, { mode: 0o600 });
+  try { chmodSync(file, 0o600); } catch { /* Windows */ }
+  return t;
+}
+
+const home = (p: string) => (p.startsWith('~') ? join(homedir(), p.slice(1)) : p);
+
+export interface HttpFlags { host?: string; port?: string; roots?: string; project?: string; allowOrigin?: string; auth?: string; tokenFile?: string;
+  introspectUrl?: string; introspectKeyFile?: string; resource?: string; issuer?: string; allowRemoteToken?: boolean }
+
+export async function serveHttp(f: HttpFlags): Promise<void> {
+  const host = f.host ?? '127.0.0.1';
+  const port = Number(f.port ?? DEFAULT_PORT);
+  const roots = (f.roots ?? homedir()).split(',').map(s => resolve(home(s.trim()))).filter(Boolean);
+  const projectArg = f.project ?? process.env.STOREBOUND_PROJECT;
+  const project = projectArg ? resolve(home(projectArg)) : null;
+  const allowOrigins = (f.allowOrigin ?? '').split(',').map(s => s.trim()).filter(Boolean);
+  const kind = f.auth ?? 'token';
+  let auth: HttpOptions['auth'];
+  if (kind === 'introspect') {
+    const { introspectUrl: url, introspectKeyFile: keyFile, resource, issuer } = f;
+    if (!url || !keyFile || !resource || !issuer) throw new Error('--auth introspect needs --introspect-url, --introspect-key-file, --resource and --issuer');
+    auth = { kind, url, key: readFileSync(home(keyFile), 'utf8').trim(), resource, issuer };
+  } else if (kind === 'token') {
+    const file = home(f.tokenFile ?? '~/.storebound/mcp-token');
+    auth = { kind, token: tokenFrom(file) };
+    console.error(`[storebound mcp] bearer token in ${file}`);
+  } else throw new Error('--auth token | introspect');
+  if (!['127.0.0.1', 'localhost', '::1'].includes(host) && kind === 'token' && !f.allowRemoteToken)
+    throw new Error(`--host ${host} listens beyond this machine: use --auth introspect (or --allow-remote-token behind your own TLS proxy)`);
+  const s = await startHttp({ host, port, roots, project, allowOrigins, auth });
+  console.error(`[storebound mcp] ${pkg.version} on http://${host}:${s.port}/mcp (MCP ${PROTOCOL}, legacy ${LEGACY.join(', ')}), auth ${kind}, roots ${roots.join(', ')}${project ? `, default project ${project}` : ''}`);
+}
diff --git a/tests/mcp-http.test.ts b/tests/mcp-http.test.ts
new file mode 100644
index 0000000..af1f031
--- /dev/null
+++ b/tests/mcp-http.test.ts
@@ -0,0 +1,105 @@
+import { afterAll, describe, expect, test } from 'bun:test';
+import { mkdtempSync, rmSync, statSync } from 'node:fs';
+import { createServer } from 'node:http';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import { answer, insideRoots, introspectionOk, metadataUrl, originAllowed, projectFor, startHttp, tokenFrom } from '../cli/mcp-http';
+
+const root = mkdtempSync(join(tmpdir(), 'mcph-'));
+const app = mkdtempSync(join(root, 'app-'));
+afterAll(() => rmSync(root, { recursive: true, force: true }));
+
+describe('pure parts', () => {
+  test('roots and project', () => {
+    expect(insideRoots(app, [root])).toBe(true);
+    expect(insideRoots(join(root, '..'), [root])).toBe(false);
+    expect(projectFor(undefined, { roots: [root], project: null })).toEqual({ error: 'project: required (absolute path of the app folder)' });
+    expect(projectFor(undefined, { roots: [root], project: app })).toEqual({ dir: app });
+    expect(projectFor('rel/dir', { roots: [root], project: null })).toEqual({ error: 'project: must be an absolute path' });
+    expect('error' in projectFor(tmpdir(), { roots: [root], project: null })).toBe(true);
+    expect('error' in projectFor(join(root, 'missing'), { roots: [root], project: null })).toBe(true);
+    expect(projectFor(app, { roots: [root], project: null })).toEqual({ dir: app });
+  });
+  test('origin, metadata url, introspection', () => {
+    expect(originAllowed(undefined, [])).toBe(true);
+    expect(originAllowed('http://localhost:3000', [])).toBe(true);
+    expect(originAllowed('https://evil.example.com', [])).toBe(false);
+    expect(originAllowed('https://app.example.com', ['https://app.example.com'])).toBe(true);
+    expect(metadataUrl('https://sb.example.com/mcp')).toBe('https://sb.example.com/.well-known/oauth-protected-resource/mcp');
+    const r = 'https://sb.example.com/mcp';
+    expect(introspectionOk({ active: true, scope: 'mcp apps:read', aud: [r] }, r)).toBe(true);
+    expect(introspectionOk({ active: true, scope: 'apps:read', aud: [r] }, r)).toBe(false);
+    expect(introspectionOk({ active: true, scope: 'mcp', aud: ['https://other.example.com/mcp'] }, r)).toBe(false);
+    expect(introspectionOk({ active: false }, r)).toBe(false);
+  });
+  test('token file is made once, mode 600 off Windows', () => {
+    const f = join(root, 'tok', 'mcp-token');
+    const t = tokenFrom(f);
+    expect(t).toMatch(/^[0-9a-f]{64}$/);
+    expect(tokenFrom(f)).toBe(t);
+    if (process.platform !== 'win32') expect(statSync(f).mode & 0o777).toBe(0o600);
+  });
+  test('tools/list gains a required project; tools/call runs in it and drops it from the arguments', async () => {
+    const list = await answer({ jsonrpc: '2.0', id: 1, method: 'tools/list', params: {} }, { roots: [root], project: null });
+    const check = ((list!.result as { tools: { name: string; inputSchema: { properties: Record<string, unknown>; required?: string[] } }[] }).tools).find(t => t.name === 'check')!;
+    expect(check.inputSchema.properties.project).toBeDefined();
+    expect(check.inputSchema.required).toContain('project');
+    let seen = null as { argv: string[]; cwd: string } | null;
+    const r = await answer({ jsonrpc: '2.0', id: 2, method: 'tools/call', params: { name: 'check', arguments: { project: app } } }, { roots: [root], project: null },
+      async (argv, cwd) => { seen = { argv, cwd }; return { code: 0, out: 'ok' }; });
+    expect(seen).toEqual({ argv: ['check'], cwd: app });
+    expect((r!.result as { isError: boolean }).isError).toBe(false);
+    const bad = await answer({ jsonrpc: '2.0', id: 3, method: 'tools/call', params: { name: 'check', arguments: {} } }, { roots: [root], project: null }, async () => { throw new Error('must not run'); });
+    expect((bad!.result as { isError: boolean }).isError).toBe(true);
+  });
+});
+
+describe('http server', () => {
+  const post = (port: number, body: unknown, headers: Record<string, string> = {}) =>
+    fetch(`http://127.0.0.1:${port}/mcp`, { method: 'POST', headers: { 'content-type': 'application/json', accept: 'application/json, text/event-stream', ...headers }, body: JSON.stringify(body) });
+
+  test('token auth: 401 without, initialize with, 202 for a notification, 405 for GET, 403 for a foreign origin', async () => {
+    const s = await startHttp({ host: '127.0.0.1', port: 0, roots: [root], project: null, allowOrigins: [], auth: { kind: 'token', token: 'a'.repeat(64) } });
+    try {
+      const auth = { authorization: `Bearer ${'a'.repeat(64)}` };
+      expect((await post(s.port, { jsonrpc: '2.0', id: 1, method: 'ping' })).status).toBe(401);
+      expect((await post(s.port, { jsonrpc: '2.0', id: 1, method: 'ping' }, { authorization: 'Bearer nope' })).status).toBe(401);
+      const init = await post(s.port, { jsonrpc: '2.0', id: 1, method: 'initialize', params: { protocolVersion: '2025-06-18', capabilities: {}, clientInfo: { name: 't', version: '1' } } }, auth);
+      expect(init.status).toBe(200);
+      expect(((await init.json()) as { result: { protocolVersion: string } }).result.protocolVersion).toBe('2025-06-18');
+      expect((await post(s.port, { jsonrpc: '2.0', method: 'notifications/initialized' }, auth)).status).toBe(202);
+      expect((await fetch(`http://127.0.0.1:${s.port}/mcp`, { headers: auth })).status).toBe(405);
+      expect((await post(s.port, { jsonrpc: '2.0', id: 1, method: 'ping' }, { ...auth, origin: 'https://evil.example.com' })).status).toBe(403);
+      expect((await post(s.port, [{ jsonrpc: '2.0', id: 1, method: 'ping' }], auth)).status).toBe(400);
+    } finally { s.close(); }
+  });
+
+  test('introspect auth: metadata document, 401 names it, a valid token passes, a token without mcp scope does not', async () => {
+    const resource = 'https://sb.example.com/mcp';
+    let calls = 0;
+    const idp = createServer((req, res) => {
+      calls++;
+      let b = ''; req.on('data', c => (b += c)); req.on('end', () => {
+        const tok = new URLSearchParams(b).get('token');
+        const ok = req.headers.authorization === 'Bearer server-key';
+        res.setHeader('content-type', 'application/json');
+        res.end(JSON.stringify(!ok ? { active: false } : tok === 'good' ? { active: true, scope: 'mcp', aud: [resource] } : tok === 'noscope' ? { active: true, scope: 'apps', aud: [resource] } : { active: false }));
+      });
+    });
+    await new Promise<void>(r => idp.listen(0, '127.0.0.1', () => r()));
+    const ip = (idp.address() as { port: number }).port;
+    const s = await startHttp({ host: '127.0.0.1', port: 0, roots: [root], project: app, allowOrigins: [],
+      auth: { kind: 'introspect', url: `http://127.0.0.1:${ip}/introspect`, key: 'server-key', resource, issuer: 'https://idp.example.com' } });
+    try {
+      const meta = await fetch(`http://127.0.0.1:${s.port}/.well-known/oauth-protected-resource/mcp`);
+      expect(await meta.json()).toMatchObject({ resource, authorization_servers: ['https://idp.example.com'], scopes_supported: ['mcp'] });
+      const no = await post(s.port, { jsonrpc: '2.0', id: 1, method: 'ping' });
+      expect(no.status).toBe(401);
+      expect(no.headers.get('www-authenticate')).toBe('Bearer resource_metadata="https://sb.example.com/.well-known/oauth-protected-resource/mcp"');
+      expect((await post(s.port, { jsonrpc: '2.0', id: 1, method: 'ping' }, { authorization: 'Bearer good' })).status).toBe(200);
+      expect((await post(s.port, { jsonrpc: '2.0', id: 2, method: 'ping' }, { authorization: 'Bearer good' })).status).toBe(200);
+      expect(calls).toBe(1); // cached
+      expect((await post(s.port, { jsonrpc: '2.0', id: 1, method: 'ping' }, { authorization: 'Bearer noscope' })).status).toBe(401);
+    } finally { s.close(); idp.close(); }
+  });
+});

From 806899391718c912a8e6739efa49fecb9589d393 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Thu, 29 Oct 2026 16:21:50 +0700
Subject: [PATCH 059/126] docs: mcp --http (shared server, project argument,
 token and introspection auth)

---
 CHANGELOG.md |  2 ++
 docs/mcp.md  | 28 ++++++++++++++++++++++++++++
 2 files changed, 30 insertions(+)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 6d65fcd..c0fea25 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,8 @@
 
 ## Unreleased
 
+- `storebound mcp --http`: one Streamable HTTP MCP server that every agent session of a machine shares (no process per session). Each tool gets a `project` argument (absolute path inside `--roots`); auth is a local bearer token (`~/.storebound/mcp-token`, made on first start) or, for a server behind TLS, OAuth bearer tokens checked by introspection (RFC 7662) with protected resource metadata (RFC 9728). docs/mcp.md.
+
 ## 0.8.57 · 2026-10-27
 
 - `apple upload` finds the IPA of a build made with `--out`: `apple build` notes its IPA and out folder in `.storebound/last-apple-build.json`, and upload searches `--out` (new flag), then that last build's out, then `apple.build.out` / `build/ios`. When nothing is found, the error names every folder it searched and the last build's IPA.
diff --git a/docs/mcp.md b/docs/mcp.md
index 0e8b66c..efe9cb4 100644
--- a/docs/mcp.md
+++ b/docs/mcp.md
@@ -24,6 +24,34 @@ per-request `_meta`, `resultType`, cacheable `tools/list`) and, on the same proc
 Manual config for a tool that `install` does not know: command `bunx` with args `["storebound", "mcp"]` (or the
 absolute path of `bin/storebound` plus `mcp`).
 
+## One shared server over HTTP
+
+`storebound mcp --http` serves the same tools over Streamable HTTP (MCP 2025-06-18 and later) at `/mcp`, so every
+agent session of a machine shares one process instead of starting its own. POST carries one JSON-RPC message and gets
+one JSON answer; there is no server-initiated stream and no session state. A browser Origin other than localhost is
+refused unless `--allow-origin` names it.
+
+- Every tool gets a `project` argument: the absolute path of the app folder to run in. It must be inside `--roots`
+  (comma-separated, default the home folder). `--project <dir>` sets a default for calls without one.
+- `--auth token` (default): the server makes `~/.storebound/mcp-token` (mode 600) on first start and requires it as a
+  bearer token. Only localhost hosts are allowed with it.
+
+  ```bash
+  storebound mcp --http --port 7787
+  claude mcp add --transport http storebound http://127.0.0.1:7787/mcp --header "Authorization: Bearer $(cat ~/.storebound/mcp-token)"
+  ```
+- `--auth introspect`: for a server shared over the network behind TLS. Bearer tokens are OAuth 2.0 access tokens from
+  your authorization server, checked through its introspection endpoint (RFC 7662; this server authenticates with the
+  key in `--introspect-key-file`). A token must be active, carry the `mcp` scope and list `--resource` in `aud`
+  (RFC 8707). Without one the answer is 401 with `WWW-Authenticate: Bearer resource_metadata=...`, and
+  `/.well-known/oauth-protected-resource/mcp` names `--issuer` (RFC 9728).
+
+  ```bash
+  storebound mcp --http --host 0.0.0.0 --auth introspect --introspect-url https://auth.example.com/introspect \
+    --introspect-key-file ~/.storebound/introspect.key --resource https://mcp.example.com/mcp --issuer https://auth.example.com
+  ```
+- `/health` answers `{ ok, version }` without auth.
+
 ## Desktop machine interface
 
 `storebound serve --stdio` is what the desktop app (`apps/desktop`, in progress) runs as its sidecar: newline-delimited

From f2d7beb7cef2f030e59859f271b8c717a8540d36 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Thu, 29 Oct 2026 16:31:41 +0700
Subject: [PATCH 060/126] mcp --http: no request timeout (tool calls can run
 for many minutes)

---
 cli/mcp-http.ts | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/cli/mcp-http.ts b/cli/mcp-http.ts
index 0c30e08..1fe8c03 100644
--- a/cli/mcp-http.ts
+++ b/cli/mcp-http.ts
@@ -165,6 +165,9 @@ export function startHttp(o: HttpOptions): Promise<{ close: () => void; port: nu
       return r ? send(res, 200, r) : send(res, 202);
     } catch (e) { return send(res, 500, { jsonrpc: '2.0', id: (msg as { id?: unknown }).id ?? null, error: { code: -32603, message: String((e as Error).message) } }); }
   });
+  // a tool call can run for many minutes (check on a big project, uploads): Node's 300 s request timeout would cut it
+  server.requestTimeout = 0;
+  server.timeout = 0;
   return new Promise((ok, fail) => {
     server.once('error', fail);
     server.listen(o.port, o.host, () => {

From 164ba390ddd9a4dc98c15aa543d328d9ec4e783a Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Thu, 29 Oct 2026 17:29:28 +0700
Subject: [PATCH 061/126] check / scan: project walks skip dot folders,
 worktrees and git-ignored output, no stat per entry (244 s -> 46 s on a big
 game repo)

---
 CHANGELOG.md             |  1 +
 cli/lib/node-packages.ts | 12 +++++++-----
 cli/lib/privacy-files.ts | 22 +++++++++++----------
 cli/lib/scan/project.ts  | 30 ++++++++++++++--------------
 cli/lib/walk-skip.ts     | 42 ++++++++++++++++++++++++++++++++++++++++
 tests/walk-skip.test.ts  | 29 +++++++++++++++++++++++++++
 6 files changed, 106 insertions(+), 30 deletions(-)
 create mode 100644 cli/lib/walk-skip.ts
 create mode 100644 tests/walk-skip.test.ts

diff --git a/CHANGELOG.md b/CHANGELOG.md
index c0fea25..cd423a9 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,7 @@
 
 ## Unreleased
 
+- `check` and `scan` are fast on big repos: project walks skip dot folders (tool state, worktree copies), linked git worktrees and the folders git ignores (Pods, Carthage, SourcePackages and ios / android stay in), and read entry types from the listing instead of a stat per file. A game repo with worktree copies went from 244 s to 46 s for `check`.
 - `storebound mcp --http`: one Streamable HTTP MCP server that every agent session of a machine shares (no process per session). Each tool gets a `project` argument (absolute path inside `--roots`); auth is a local bearer token (`~/.storebound/mcp-token`, made on first start) or, for a server behind TLS, OAuth bearer tokens checked by introspection (RFC 7662) with protected resource metadata (RFC 9728). docs/mcp.md.
 
 ## 0.8.57 · 2026-10-27
diff --git a/cli/lib/node-packages.ts b/cli/lib/node-packages.ts
index ac44c79..ba58bb9 100644
--- a/cli/lib/node-packages.ts
+++ b/cli/lib/node-packages.ts
@@ -3,8 +3,9 @@
 // folders (package.json "workspaces", npm / yarn / pnpm-style array or { packages }, as Bun reads them) and local
 // SwiftPM packages (`.package(path:)` in a Package.swift, e.g. Capacitor 8's CapApp-SPM). Used by `privacy-manifest`
 // and `scan`. Read-only; never throws.
-import { existsSync, readdirSync, readFileSync, realpathSync, statSync } from 'node:fs';
+import { type Dirent, existsSync, readdirSync, readFileSync, realpathSync, statSync } from 'node:fs';
 import { dirname, join, resolve } from 'node:path';
+import { skipDir } from './walk-skip';
 
 interface PkgJson { name?: string; dependencies?: Record<string, string>; workspaces?: string[] | { packages?: string[] } }
 const readJson = (p: string): PkgJson | null => { try { return JSON.parse(readFileSync(p, 'utf8')) as PkgJson; } catch { return null; } };
@@ -67,9 +68,10 @@ export function localSwiftPackages(dir: string): string[] {
   const skip = new Set(['Pods', 'build', 'DerivedData', 'node_modules', '.build', 'SourcePackages', '.git', 'xcuserdata']);
   const walk = (d: string, depth: number) => {
     if (depth > 4) return;
-    let names: string[] = [];
-    try { names = readdirSync(d); } catch { return; }
-    for (const n of names) {
+    let ents: Dirent[] = [];
+    try { ents = readdirSync(d, { withFileTypes: true }); } catch { return; }
+    for (const e of ents) {
+      const n = e.name;
       if (skip.has(n)) continue;
       const p = join(d, n);
       if (n === 'Package.swift') {
@@ -79,7 +81,7 @@ export function localSwiftPackages(dir: string): string[] {
           const target = resolve(d, m[1]!);
           if (isDir(target)) out.push(target);
         }
-      } else if (isDir(p) && !/\.(xc)?framework$|\.xcassets$/.test(n)) walk(p, depth + 1);
+      } else if ((e.isDirectory() || (e.isSymbolicLink() && isDir(p))) && !/\.(xc)?framework$|\.xcassets$/.test(n) && !skipDir(dir, p, n)) walk(p, depth + 1);
     }
   };
   walk(dir, 0);
diff --git a/cli/lib/privacy-files.ts b/cli/lib/privacy-files.ts
index 779b942..94a3450 100644
--- a/cli/lib/privacy-files.ts
+++ b/cli/lib/privacy-files.ts
@@ -2,9 +2,10 @@
 // .xcframework, SwiftPM checkouts, Capacitor / Cordova / React Native plugins in node_modules, a built .app's
 // Frameworks and bundles) and every PrivacyInfo.xcprivacy inside an .ipa or .app (XML or binary). Read-only; the
 // directory walk is bounded.
-import { readdirSync, readFileSync, statSync } from 'node:fs';
+import { type Dirent, readdirSync, readFileSync, statSync } from 'node:fs';
 import { basename, join, relative, sep } from 'node:path';
 import { nativeIosPlugins } from './node-packages';
+import { skipDir } from './walk-skip';
 import { parseBinaryPlist } from './plist';
 import { type Manifest, manifestFromPlist, parseManifest, trackingIssue } from './privacy-manifest';
 import { zipEntries, zipRead } from './zip';
@@ -63,15 +64,16 @@ export function bundleTrackingIssues(list: BundleManifest[]): string[] {
 
 function walk(dir: string, visit: (p: string, isDir: boolean) => boolean | void, depth = 0, budget = { n: 60_000 }): void {
   if (depth > 16 || budget.n <= 0) return;
-  let names: string[] = [];
-  try { names = readdirSync(dir).sort(); } catch { return; }
-  for (const n of names) {
+  let ents: Dirent[] = [];
+  try { ents = readdirSync(dir, { withFileTypes: true }).sort((a, b) => (a.name < b.name ? -1 : a.name > b.name ? 1 : 0)); } catch { return; }
+  for (const e of ents) {
     if (--budget.n <= 0) return;
-    const p = join(dir, n);
-    let st;
-    try { st = statSync(p); } catch { continue; }
-    const descend = visit(p, st.isDirectory());
-    if (st.isDirectory() && descend !== false) walk(p, visit, depth + 1, budget);
+    const p = join(dir, e.name);
+    // the entry type comes with the listing (no stat per file: a stat each made a big tree take minutes on Windows)
+    let isDir = e.isDirectory();
+    if (e.isSymbolicLink()) { try { isDir = statSync(p).isDirectory(); } catch { continue; } }
+    const descend = visit(p, isDir);
+    if (isDir && descend !== false) walk(p, visit, depth + 1, budget);
   }
 }
 
@@ -102,7 +104,7 @@ export function projectSdkManifests(root: string): SdkManifest[] {
     try { out.push({ sdk, manifest: manifestFromBytes(relative(root, abs).split(sep).join('/'), readFileSync(abs)) }); } catch { /* unreadable */ }
   };
   walk(root, (p, isDir) => {
-    if (isDir) return !SKIP.has(basename(p));
+    if (isDir) return !SKIP.has(basename(p)) && !skipDir(root, p, basename(p));
     if (basename(p) !== 'PrivacyInfo.xcprivacy') return;
     const sdk = sdkOfProjectPath(relative(root, p).split(sep).join('/'));
     if (sdk) add(p, sdk);
diff --git a/cli/lib/scan/project.ts b/cli/lib/scan/project.ts
index f0b8f8b..01dc57a 100644
--- a/cli/lib/scan/project.ts
+++ b/cli/lib/scan/project.ts
@@ -3,9 +3,10 @@
 // Xcode INFOPLIST_KEY_* build settings, Expo app.json, Unity ProjectSettings and Godot export presets), entitlements,
 // privacy manifests, the Android manifest (permissions, services, target SDK) and the app's own source files.
 // Tolerant on purpose: an unreadable or odd file is skipped, never an exception.
-import { readdirSync, readFileSync, statSync } from 'node:fs';
+import { type Dirent, readdirSync, readFileSync, statSync } from 'node:fs';
 import { basename, dirname, extname, join, relative, sep } from 'node:path';
 import { resolvePackage } from '../node-packages';
+import { skipDir } from '../walk-skip';
 import { isBuildCopyPath, type Manifest, parseManifest } from '../privacy-manifest';
 import { type DepRef, type Eco, matchesSdk, SDKS, type SdkDef } from './sdks';
 import { exportedIpas, ipaInfo } from '../xcode';
@@ -104,33 +105,32 @@ const SRC_EXT = new Set(['.swift', '.m', '.mm', '.h', '.kt', '.java', '.dart', '
 const MAX_FILES = 25_000;
 const MAX_TEXT = 1_500_000;
 
-/** A linked git worktree: its .git is a file pointing into <repo>/.git/worktrees/ (a submodule's points into modules/). */
-function isWorktree(dir: string): boolean {
-  try { return /^gitdir:.*[\\/]worktrees[\\/]/m.test(readFileSync(join(dir, '.git'), 'utf8')); } catch { return false; }
-}
-
 /** Every file under root (relative paths), skipping build output, dependency folders and VCS data. Native libraries
  *  (.so) of any size also go into `bins` when given (they are not read, only listed). */
 export function listFiles(root: string, bins?: string[]): string[] {
   const out: string[] = [];
   const walk = (dir: string, depth: number) => {
     if (depth > 14 || out.length >= MAX_FILES) return;
-    let names: string[];
-    try { names = readdirSync(dir); } catch { return; }
-    for (const n of names.sort()) {
+    let ents: Dirent[];
+    try { ents = readdirSync(dir, { withFileTypes: true }); } catch { return; }
+    for (const e of ents.sort((a, b) => (a.name < b.name ? -1 : a.name > b.name ? 1 : 0))) {
+      const n = e.name;
       if (SKIP_DIRS.has(n) || n === '.DS_Store') continue;
       const p = join(dir, n);
-      let st;
-      try { st = statSync(p); } catch { continue; }
-      if (st.isDirectory()) {
+      // the entry type comes with the listing; only files (for their size) and links get a stat
+      let isDir = e.isDirectory();
+      if (e.isSymbolicLink()) { try { isDir = statSync(p).isDirectory(); } catch { continue; } }
+      if (isDir) {
         // compiled frameworks are SDK binaries, not app code
         if (/\.(xc)?framework$|\.xcassets$|\.bundle$|\.app$|\.dSYM$/.test(n)) continue;
-        // a git worktree inside the project (another checkout of the same repo; submodules stay in)
-        if (isWorktree(p)) continue;
+        // dot folders, git worktrees (other checkouts of the same repo; submodules stay in), git-ignored output
+        if (skipDir(root, p, n)) continue;
         walk(p, depth + 1);
       } else {
         if (bins && n.endsWith('.so')) bins.push(relative(root, p).split(sep).join('/'));
-        if (st.size <= MAX_TEXT) out.push(relative(root, p).split(sep).join('/'));
+        let size = 0;
+        try { size = statSync(p).size; } catch { continue; }
+        if (size <= MAX_TEXT) out.push(relative(root, p).split(sep).join('/'));
       }
       if (out.length >= MAX_FILES) return;
     }
diff --git a/cli/lib/walk-skip.ts b/cli/lib/walk-skip.ts
new file mode 100644
index 0000000..2015fb9
--- /dev/null
+++ b/cli/lib/walk-skip.ts
@@ -0,0 +1,42 @@
+// Which folders a project walk (scan, check's privacy manifests) leaves out, beyond each walker's own name list:
+//  - dot folders below the root (.harness-worktrees, .wt-head, .ota-out, .native-build, ...): tool state, caches and
+//    whole copies of the repo, never app sources;
+//  - linked git worktrees (another checkout of the same repo);
+//  - folders git ignores at the root (release-out/, artifacts/, ...), asked once per root with
+//    `git ls-files --others --ignored --exclude-standard --directory`; SDK folders the privacy checks read (Pods,
+//    Carthage, SourcePackages) and generated native projects (ios, android) stay in even when ignored.
+// Seen live: a game repo with several worktrees and release folders made `check` walk ~60 000 files for 2.5 minutes.
+import { readFileSync } from 'node:fs';
+import { join, relative, resolve, sep } from 'node:path';
+import * as rt from './rt';
+
+// kept even when git ignores them: SDK folders the privacy checks read, and generated native projects (Expo prebuild)
+const KEEP = new Set(['Pods', 'Carthage', 'SourcePackages', 'ios', 'android', 'macos']);
+const cache = new Map<string, Set<string>>();
+
+/** A linked git worktree: its .git is a file pointing into <repo>/.git/worktrees/ (a submodule's points into modules/). */
+export function isWorktree(dir: string): boolean {
+  try { return /^gitdir:.*[\\/]worktrees[\\/]/m.test(readFileSync(join(dir, '.git'), 'utf8')); } catch { return false; }
+}
+
+/** Root-relative folders (with "/" separators, no trailing slash) git ignores in this repo; empty outside git. */
+export function gitIgnoredDirs(root: string): Set<string> {
+  const key = resolve(root);
+  const hit = cache.get(key);
+  if (hit) return hit;
+  const out = new Set<string>();
+  try {
+    const r = rt.spawnSync(['git', 'ls-files', '--others', '--ignored', '--exclude-standard', '--directory', '-z'], { cwd: key, timeout: 15_000 });
+    if (r.success) for (const p of r.stdout.toString('utf8').split('\0')) if (p.endsWith('/')) out.add(p.slice(0, -1));
+  } catch { /* no git */ }
+  cache.set(key, out);
+  return out;
+}
+
+/** Leave this folder out of a walk that started at root? */
+export function skipDir(root: string, abs: string, name: string): boolean {
+  if (KEEP.has(name)) return false;
+  if (name.startsWith('.') && resolve(abs) !== resolve(root)) return true;
+  if (gitIgnoredDirs(root).has(relative(root, abs).split(sep).join('/'))) return true;
+  return isWorktree(abs);
+}
diff --git a/tests/walk-skip.test.ts b/tests/walk-skip.test.ts
new file mode 100644
index 0000000..0dea615
--- /dev/null
+++ b/tests/walk-skip.test.ts
@@ -0,0 +1,29 @@
+import { afterAll, expect, test } from 'bun:test';
+import { mkdirSync, mkdtempSync, rmSync, writeFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import { projectSdkManifests } from '../cli/lib/privacy-files';
+import { listFiles } from '../cli/lib/scan/project';
+import { skipDir } from '../cli/lib/walk-skip';
+
+const root = mkdtempSync(join(tmpdir(), 'walk-'));
+afterAll(() => rmSync(root, { recursive: true, force: true }));
+const put = (rel: string, text = 'x') => { mkdirSync(join(root, rel, '..'), { recursive: true }); writeFileSync(join(root, rel), text); };
+
+test('dot folders, linked worktrees and SDK folders', () => {
+  put('.harness-worktrees/a/src/App.swift');
+  put('wt/.git', 'gitdir: /repo/.git/worktrees/wt\n');
+  put('wt/src/App.swift');
+  put('src/App.swift');
+  put('ios/Pods/Some/PrivacyInfo.xcprivacy', '<plist><dict/></plist>');
+  expect(skipDir(root, join(root, '.harness-worktrees'), '.harness-worktrees')).toBe(true);
+  expect(skipDir(root, join(root, 'wt'), 'wt')).toBe(true);
+  expect(skipDir(root, join(root, 'src'), 'src')).toBe(false);
+  expect(skipDir(root, join(root, 'ios', 'Pods'), 'Pods')).toBe(false);
+  const files = listFiles(root);
+  expect(files).toContain('src/App.swift');
+  expect(files.some(f => f.startsWith('.harness-worktrees/') || f.startsWith('wt/'))).toBe(false);
+  // worktree copies would add their SDK manifests a second time
+  put('.wt-head/ios/Pods/Some/PrivacyInfo.xcprivacy', '<plist><dict/></plist>');
+  expect(projectSdkManifests(root).map(m => m.manifest.path)).toEqual(['ios/Pods/Some/PrivacyInfo.xcprivacy']);
+});

From a108aae53f92292539d0ba0add64533bd1300ff2 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Thu, 29 Oct 2026 18:38:11 +0700
Subject: [PATCH 062/126] mcp --http: --broker-profiles (store keys from the
 broker vault, memory only), --read-only, project by folder name under the
 roots

---
 cli/data/flags.json    |  4 ++++
 cli/lib/broker.ts      | 32 +++++++++++++++++++++++++++
 cli/mcp-cmd.ts         |  1 +
 cli/mcp-http.ts        | 49 +++++++++++++++++++++++++++++++++++-------
 docs/mcp.md            |  6 ++++++
 tests/mcp-http.test.ts | 39 +++++++++++++++++++++++++++++++--
 6 files changed, 121 insertions(+), 10 deletions(-)

diff --git a/cli/data/flags.json b/cli/data/flags.json
index d813c82..0879954 100644
--- a/cli/data/flags.json
+++ b/cli/data/flags.json
@@ -649,6 +649,7 @@
    "allow-origin",
    "allow-remote-token",
    "auth",
+   "broker-profiles",
    "host",
    "http",
    "introspect-key-file",
@@ -656,6 +657,7 @@
    "issuer",
    "port",
    "project",
+   "read-only",
    "resource",
    "roots",
    "token-file"
@@ -1194,6 +1196,7 @@
    "beta",
    "bid",
    "body",
+   "broker-profiles",
    "build",
    "build-number",
    "bundle-id",
@@ -1363,6 +1366,7 @@
    "q",
    "rating",
    "react-native",
+   "read-only",
    "reconvert",
    "refresh-profile",
    "region",
diff --git a/cli/lib/broker.ts b/cli/lib/broker.ts
index 41e171b..fb8f3b5 100644
--- a/cli/lib/broker.ts
+++ b/cli/lib/broker.ts
@@ -325,3 +325,35 @@ export async function playPreflight(command: string, root: string, pkg: string |
   if (o.dry) { for (const g of gaps) o.warn(`${g.message}. Fix: ${g.fix}`); return gaps; }
   throw new Error(`${command} stopped before any call to Google Play:\n${gapsText(gaps)}`);
 }
+
+export type StoreKind = 'asc-api-key' | 'play-service-account';
+
+/**
+ * A store credential of one profile from the broker's vault (GET /api/store-credentials/<profile>/<kind>, a key with
+ * the store-credentials scope): { secret, metadata }. For a long-running server (`mcp --http --broker-profiles`) that
+ * keeps no key files; null when the broker has none for that profile. Never logged.
+ */
+export async function brokerStoreCredential(cfg: BrokerConfig, profile: string, kind: StoreKind): Promise<{ secret: string; metadata: Record<string, unknown> } | null> {
+  const a = await request(cfg, 'GET', `/api/store-credentials/${encodeURIComponent(profile)}/${kind}`);
+  if (a.status === 404) return null;
+  if (a.status === 401 || a.status === 403) throw new BrokerRefused(`credential broker ${host(cfg)} refused store credentials for ${profile} (${a.status} ${errOf(a)}): the key needs the store-credentials scope and the profile`, a.status);
+  const j = a.json as { secret?: unknown; metadata?: unknown } | null;
+  if (a.status !== 200 || !j || typeof j.secret !== 'string') throw new BrokerUnavailable(`credential broker ${host(cfg)} -> ${a.status} for ${profile}/${kind}`);
+  return { secret: j.secret, metadata: j.metadata && typeof j.metadata === 'object' ? (j.metadata as Record<string, unknown>) : {} };
+}
+
+/** The env a child process needs to use these profiles from the broker (STOREBOUND_PROFILE_<NAME>_<KEY>, inline PEM /
+ *  JSON; see credentials.ts). Profiles the broker has nothing for are left out. */
+export async function brokerProfileEnv(cfg: BrokerConfig, profiles: string[]): Promise<Record<string, string>> {
+  const env: Record<string, string> = {};
+  const name = (p: string, k: string) => `STOREBOUND_PROFILE_${p.toUpperCase().replace(/[^A-Z0-9]/g, '_')}_${k}`;
+  await Promise.all(profiles.map(async p => {
+    const [asc, play] = await Promise.all([brokerStoreCredential(cfg, p, 'asc-api-key'), brokerStoreCredential(cfg, p, 'play-service-account')]);
+    if (asc) {
+      const { issuerId, keyId } = asc.metadata;
+      if (typeof issuerId === 'string' && typeof keyId === 'string') Object.assign(env, { [name(p, 'ASC_P8')]: asc.secret, [name(p, 'ASC_KEY_ID')]: keyId, [name(p, 'ASC_ISSUER_ID')]: issuerId });
+    }
+    if (play) env[name(p, 'PLAY_SERVICE_ACCOUNT')] = play.secret;
+  }));
+  return env;
+}
diff --git a/cli/mcp-cmd.ts b/cli/mcp-cmd.ts
index 390dcb2..e16bc25 100644
--- a/cli/mcp-cmd.ts
+++ b/cli/mcp-cmd.ts
@@ -9,5 +9,6 @@ export async function run(a: ReturnType<typeof parseArgs>): Promise<void> {
     host: a.get('host'), port: a.get('port'), roots: a.get('roots'), project: a.get('project'), allowOrigin: a.get('allow-origin'),
     auth: a.get('auth'), tokenFile: a.get('token-file'), introspectUrl: a.get('introspect-url'), introspectKeyFile: a.get('introspect-key-file'),
     resource: a.get('resource'), issuer: a.get('issuer'), allowRemoteToken: a.has('allow-remote-token'),
+    brokerProfiles: a.get('broker-profiles'), readOnly: a.has('read-only'),
   });
 }
diff --git a/cli/mcp-http.ts b/cli/mcp-http.ts
index 1fe8c03..36ed269 100644
--- a/cli/mcp-http.ts
+++ b/cli/mcp-http.ts
@@ -25,6 +25,8 @@ import { homedir } from 'node:os';
 import { dirname, isAbsolute, join, relative, resolve } from 'node:path';
 import pkg from '../package.json' with { type: 'json' };
 import { handle, LEGACY, PROTOCOL } from './mcp';
+import { TOOLS } from './mcp-tools';
+import { brokerConfig, brokerProfileEnv } from './lib/broker';
 import { runCommand } from './lib/runner';
 
 export const DEFAULT_PORT = 7787;
@@ -36,10 +38,14 @@ export interface HttpOptions {
   roots: string[];
   project: string | null;
   allowOrigins: string[];
+  /** Credential profiles to take from the broker vault for every call (no key files on this host). */
+  brokerProfiles?: string[];
+  /** Only the tools that change nothing (no dry_run tools at all). */
+  readOnly?: boolean;
   auth: { kind: 'token'; token: string } | { kind: 'introspect'; url: string; key: string; resource: string; issuer: string };
 }
 
-export const PROJECT_PROP = { type: 'string', description: 'Absolute path of the app folder (the one with storebound.config.ts) to run in. Required unless the server was started with --project.' } as const;
+export const PROJECT_PROP = { type: 'string', description: 'The app folder (the one with storebound.config.ts) to run in: an absolute path, or a folder name under the server roots. Required unless the server was started with --project.' } as const;
 
 /** Inside one of the roots (path compare, case-insensitive on Windows); no "..", no other drive. */
 export function insideRoots(dir: string, roots: string[]): boolean {
@@ -50,7 +56,12 @@ export function insideRoots(dir: string, roots: string[]): boolean {
 /** The folder a call runs in, or the reason it cannot run. */
 export function projectFor(arg: unknown, o: Pick<HttpOptions, 'roots' | 'project'>): { dir: string } | { error: string } {
   if (arg === undefined || arg === null || arg === '') return o.project ? { dir: o.project } : { error: 'project: required (absolute path of the app folder)' };
-  if (typeof arg !== 'string' || !isAbsolute(arg)) return { error: 'project: must be an absolute path' };
+  // a plain folder name is a project under one of the roots (a shared server keeps its checkouts there)
+  if (typeof arg === 'string' && /^[A-Za-z0-9][A-Za-z0-9._-]{0,99}$/.test(arg)) {
+    const hit = o.roots.map(r => join(r, arg)).find(d => { try { return statSync(d).isDirectory(); } catch { return false; } });
+    return hit ? { dir: resolve(hit) } : { error: `project: no folder ${arg} under ${o.roots.join(', ')}` };
+  }
+  if (typeof arg !== 'string' || !isAbsolute(arg)) return { error: 'project: must be an absolute path, or a folder name under the roots' };
   if (!insideRoots(arg, o.roots)) return { error: `project: ${arg} is outside the server's roots (${o.roots.join(', ')})` };
   try { if (!statSync(arg).isDirectory()) return { error: `project: ${arg} is not a folder` }; } catch { return { error: `project: ${arg} does not exist` }; }
   return { dir: resolve(arg) };
@@ -116,10 +127,11 @@ async function readBody(req: IncomingMessage): Promise<string | null> {
 }
 
 /** One POST body -> the answer (null for a notification). tools/list gains `project`; tools/call runs in it. */
-export async function answer(msg: Record<string, unknown>, o: Pick<HttpOptions, 'roots' | 'project'>,
+export async function answer(msg: Record<string, unknown>, o: Pick<HttpOptions, 'roots' | 'project'> & { readOnly?: boolean },
   run: (argv: string[], cwd: string) => Promise<{ code: number; out: string }> = runIn): Promise<Record<string, unknown> | null> {
   const params = (msg.params ?? {}) as Record<string, unknown>;
   if (msg.method === 'tools/call') {
+    if (o.readOnly && TOOLS.find(t => t.name === params.name)?.write) return { jsonrpc: '2.0', id: msg.id ?? null, error: { code: -32602, message: `Unknown tool: ${String(params.name)} (this server is read-only)` } };
     const args = { ...((params.arguments ?? {}) as Record<string, unknown>) };
     const p = projectFor(args.project, o);
     if ('error' in p) return { jsonrpc: '2.0', id: msg.id ?? null, result: { content: [{ type: 'text', text: `Invalid arguments: ${p.error}` }], isError: true } };
@@ -128,7 +140,9 @@ export async function answer(msg: Record<string, unknown>, o: Pick<HttpOptions,
   }
   const r = await handle(msg as never);
   if (msg.method === 'tools/list' && r && typeof r.result === 'object') {
-    const tools = (r.result as { tools?: { inputSchema: { properties: Record<string, unknown>; required?: string[] } }[] }).tools ?? [];
+    const res = r.result as { tools?: { name: string; annotations?: { readOnlyHint?: boolean }; inputSchema: { properties: Record<string, unknown>; required?: string[] } }[] };
+    if (o.readOnly) res.tools = (res.tools ?? []).filter(t => t.annotations?.readOnlyHint === true);
+    const tools = res.tools ?? [];
     for (const t of tools) {
       t.inputSchema.properties = { project: PROJECT_PROP, ...t.inputSchema.properties };
       if (!o.project) t.inputSchema.required = ['project', ...(t.inputSchema.required ?? [])];
@@ -137,13 +151,29 @@ export async function answer(msg: Record<string, unknown>, o: Pick<HttpOptions,
   return r;
 }
 
+let brokerEnv: { env: Promise<Record<string, string>>; until: number } | null = null;
+/** The broker profiles' credentials as child env, fetched at most every 10 minutes (memory only, never logged). */
+async function profileEnvFor(profiles: string[] | undefined): Promise<Record<string, string>> {
+  if (!profiles?.length) return {};
+  if (!brokerEnv || brokerEnv.until < Date.now()) {
+    const cfg = brokerConfig();
+    if (!cfg) throw new Error('--broker-profiles needs a credential broker (~/.storebound/broker.json or STOREBOUND_BROKER_URL)');
+    const env = brokerProfileEnv(cfg, profiles);
+    brokerEnv = { env, until: Date.now() + 600_000 };
+    env.catch(() => { brokerEnv = null; });
+  }
+  return brokerEnv.env;
+}
+let serverProfiles: string[] | undefined;
+
 async function runIn(argv: string[], cwd: string): Promise<{ code: number; out: string }> {
-  const r = runCommand(argv, { cwd, env: { STOREBOUND_MCP: '1' } });
+  const r = runCommand(argv, { cwd, env: { STOREBOUND_MCP: '1', ...(await profileEnvFor(serverProfiles)) } });
   const { code, out } = await r.result;
   return { code, out };
 }
 
 export function startHttp(o: HttpOptions): Promise<{ close: () => void; port: number }> {
+  serverProfiles = o.brokerProfiles;
   const resourceMeta = o.auth.kind === 'introspect' ? metadataUrl(o.auth.resource) : null;
   const server = createServer(async (req, res) => {
     const path = (req.url ?? '/').split('?')[0];
@@ -190,7 +220,8 @@ export function tokenFrom(file: string): string {
 const home = (p: string) => (p.startsWith('~') ? join(homedir(), p.slice(1)) : p);
 
 export interface HttpFlags { host?: string; port?: string; roots?: string; project?: string; allowOrigin?: string; auth?: string; tokenFile?: string;
-  introspectUrl?: string; introspectKeyFile?: string; resource?: string; issuer?: string; allowRemoteToken?: boolean }
+  introspectUrl?: string; introspectKeyFile?: string; resource?: string; issuer?: string; allowRemoteToken?: boolean;
+  brokerProfiles?: string; readOnly?: boolean }
 
 export async function serveHttp(f: HttpFlags): Promise<void> {
   const host = f.host ?? '127.0.0.1';
@@ -212,6 +243,8 @@ export async function serveHttp(f: HttpFlags): Promise<void> {
   } else throw new Error('--auth token | introspect');
   if (!['127.0.0.1', 'localhost', '::1'].includes(host) && kind === 'token' && !f.allowRemoteToken)
     throw new Error(`--host ${host} listens beyond this machine: use --auth introspect (or --allow-remote-token behind your own TLS proxy)`);
-  const s = await startHttp({ host, port, roots, project, allowOrigins, auth });
-  console.error(`[storebound mcp] ${pkg.version} on http://${host}:${s.port}/mcp (MCP ${PROTOCOL}, legacy ${LEGACY.join(', ')}), auth ${kind}, roots ${roots.join(', ')}${project ? `, default project ${project}` : ''}`);
+  const brokerProfiles = (f.brokerProfiles ?? '').split(',').map(s => s.trim()).filter(Boolean);
+  if (brokerProfiles.length) await profileEnvFor(brokerProfiles).catch(e => { throw new Error(`--broker-profiles: ${(e as Error).message}`); });
+  const s = await startHttp({ host, port, roots, project, allowOrigins, auth, brokerProfiles, readOnly: !!f.readOnly });
+  console.error(`[storebound mcp] ${pkg.version} on http://${host}:${s.port}/mcp (MCP ${PROTOCOL}, legacy ${LEGACY.join(', ')}), auth ${kind}${f.readOnly ? ', read-only' : ''}${brokerProfiles.length ? `, broker profiles ${brokerProfiles.join(', ')}` : ''}, roots ${roots.join(', ')}${project ? `, default project ${project}` : ''}`);
 }
diff --git a/docs/mcp.md b/docs/mcp.md
index efe9cb4..dbbe6fd 100644
--- a/docs/mcp.md
+++ b/docs/mcp.md
@@ -50,6 +50,12 @@ refused unless `--allow-origin` names it.
   storebound mcp --http --host 0.0.0.0 --auth introspect --introspect-url https://auth.example.com/introspect \
     --introspect-key-file ~/.storebound/introspect.key --resource https://mcp.example.com/mcp --issuer https://auth.example.com
   ```
+- `--read-only`: only the tools that change nothing are listed and callable.
+- `--broker-profiles a,b`: a host that keeps no key files takes these credential profiles from the credential broker's
+  vault (`GET /api/store-credentials/<profile>/asc-api-key | play-service-account`, a key with the `store-credentials`
+  scope; docs/credential-broker.md). They reach each tool call as `STOREBOUND_PROFILE_<NAME>_*` env, held in memory for
+  10 minutes and never written. A project picks its profile as usual (the config's `account`).
+- `project` may also be a folder name under the roots (a shared server keeps its checkouts there).
 - `/health` answers `{ ok, version }` without auth.
 
 ## Desktop machine interface
diff --git a/tests/mcp-http.test.ts b/tests/mcp-http.test.ts
index af1f031..7c11426 100644
--- a/tests/mcp-http.test.ts
+++ b/tests/mcp-http.test.ts
@@ -2,7 +2,7 @@ import { afterAll, describe, expect, test } from 'bun:test';
 import { mkdtempSync, rmSync, statSync } from 'node:fs';
 import { createServer } from 'node:http';
 import { tmpdir } from 'node:os';
-import { join } from 'node:path';
+import { basename, join } from 'node:path';
 import { answer, insideRoots, introspectionOk, metadataUrl, originAllowed, projectFor, startHttp, tokenFrom } from '../cli/mcp-http';
 
 const root = mkdtempSync(join(tmpdir(), 'mcph-'));
@@ -15,7 +15,11 @@ describe('pure parts', () => {
     expect(insideRoots(join(root, '..'), [root])).toBe(false);
     expect(projectFor(undefined, { roots: [root], project: null })).toEqual({ error: 'project: required (absolute path of the app folder)' });
     expect(projectFor(undefined, { roots: [root], project: app })).toEqual({ dir: app });
-    expect(projectFor('rel/dir', { roots: [root], project: null })).toEqual({ error: 'project: must be an absolute path' });
+    expect(projectFor('rel/dir', { roots: [root], project: null })).toEqual({ error: 'project: must be an absolute path, or a folder name under the roots' });
+    expect(projectFor(basename(app), { roots: [root], project: null })).toEqual({ dir: app });
+    expect('error' in projectFor('nope', { roots: [root], project: null })).toBe(true);
+    expect(projectFor(app.split(/[\/]/).pop(), { roots: [root], project: null })).toEqual({ dir: app });
+    expect('error' in projectFor('nope', { roots: [root], project: null })).toBe(true);
     expect('error' in projectFor(tmpdir(), { roots: [root], project: null })).toBe(true);
     expect('error' in projectFor(join(root, 'missing'), { roots: [root], project: null })).toBe(true);
     expect(projectFor(app, { roots: [root], project: null })).toEqual({ dir: app });
@@ -103,3 +107,34 @@ describe('http server', () => {
     } finally { s.close(); idp.close(); }
   });
 });
+
+describe('read-only and broker profiles', () => {
+  test('read-only lists only read tools and refuses a write tool', async () => {
+    const list = await answer({ jsonrpc: '2.0', id: 1, method: 'tools/list', params: {} }, { roots: [root], project: app, readOnly: true });
+    const tools = (list!.result as { tools: { name: string; annotations: { readOnlyHint: boolean } }[] }).tools;
+    expect(tools.length).toBeGreaterThan(5);
+    expect(tools.every(t => t.annotations.readOnlyHint)).toBe(true);
+    const w = await answer({ jsonrpc: '2.0', id: 2, method: 'tools/call', params: { name: 'play_listing', arguments: {} } }, { roots: [root], project: app, readOnly: true }, async () => { throw new Error('must not run'); });
+    expect((w as { error: { message: string } }).error.message).toContain('read-only');
+  });
+  test('broker store credentials become STOREBOUND_PROFILE_<NAME>_* env', async () => {
+    const { brokerProfileEnv } = await import('../cli/lib/broker');
+    const srv = createServer((req, res) => {
+      res.setHeader('content-type', 'application/json');
+      const m = /^\/api\/store-credentials\/([^/]+)\/([^/]+)$/.exec(req.url ?? '');
+      if (req.headers.authorization !== 'Bearer kkkkkkkk') { res.statusCode = 401; return res.end('{}'); }
+      if (m?.[1] === 'teamA' && m[2] === 'asc-api-key') return res.end(JSON.stringify({ secret: '-----BEGIN PRIVATE KEY-----\nx\n-----END PRIVATE KEY-----', metadata: { issuerId: 'iss', keyId: 'KEY' } }));
+      if (m?.[1] === 'teamA' && m[2] === 'play-service-account') return res.end(JSON.stringify({ secret: '{"client_email":"a@example.com"}', metadata: {} }));
+      res.statusCode = 404; res.end('{"error":"err_not_found"}');
+    });
+    await new Promise<void>(r => srv.listen(0, '127.0.0.1', () => r()));
+    const port = (srv.address() as { port: number }).port;
+    const keyFile = join(root, 'broker.key');
+    (await import('node:fs')).writeFileSync(keyFile, 'kkkkkkkk', { mode: 0o600 });
+    try {
+      const env = await brokerProfileEnv({ url: `http://127.0.0.1:${port}`, keyFile, account: null, from: 'test' }, ['teamA', 'other']);
+      expect(Object.keys(env).sort()).toEqual(['STOREBOUND_PROFILE_TEAMA_ASC_ISSUER_ID', 'STOREBOUND_PROFILE_TEAMA_ASC_KEY_ID', 'STOREBOUND_PROFILE_TEAMA_ASC_P8', 'STOREBOUND_PROFILE_TEAMA_PLAY_SERVICE_ACCOUNT']);
+      expect(env.STOREBOUND_PROFILE_TEAMA_ASC_KEY_ID).toBe('KEY');
+    } finally { srv.close(); }
+  });
+});

From 398d8cd375a49afccfe51e7d9ff3ffcf9839dbe8 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Thu, 29 Oct 2026 18:41:35 +0700
Subject: [PATCH 063/126] storebound 0.8.58: version in package.json and every
 copy, CHANGELOG 0.8.58 section

---
 .claude-plugin/marketplace.json        | 2 +-
 .claude-plugin/plugin.json             | 2 +-
 .codex-plugin/plugin.json              | 2 +-
 CHANGELOG.md                           | 2 ++
 apps/desktop/package.json              | 2 +-
 apps/desktop/src-tauri/Cargo.lock      | 2 +-
 apps/desktop/src-tauri/Cargo.toml      | 2 +-
 apps/desktop/src-tauri/tauri.conf.json | 2 +-
 gemini-extension.json                  | 2 +-
 package.json                           | 2 +-
 10 files changed, 11 insertions(+), 9 deletions(-)

diff --git a/.claude-plugin/marketplace.json b/.claude-plugin/marketplace.json
index b247852..43b2bab 100644
--- a/.claude-plugin/marketplace.json
+++ b/.claude-plugin/marketplace.json
@@ -9,7 +9,7 @@
       "name": "storebound",
       "source": ".",
       "description": "Take a mobile app or game from nothing to Submit for review on both stores: skills for every store step and questionnaire plus the storebound CLI and MCP server.",
-      "version": "0.8.57",
+      "version": "0.8.58",
       "category": "development",
       "tags": [
         "mobile",
diff --git a/.claude-plugin/plugin.json b/.claude-plugin/plugin.json
index e9ef474..51296bb 100644
--- a/.claude-plugin/plugin.json
+++ b/.claude-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.57",
+  "version": "0.8.58",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/.codex-plugin/plugin.json b/.codex-plugin/plugin.json
index 300ce52..00cc3f1 100644
--- a/.codex-plugin/plugin.json
+++ b/.codex-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.57",
+  "version": "0.8.58",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/CHANGELOG.md b/CHANGELOG.md
index cd423a9..f715ce5 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,8 @@
 
 ## Unreleased
 
+## 0.8.58 · 2026-10-29
+
 - `check` and `scan` are fast on big repos: project walks skip dot folders (tool state, worktree copies), linked git worktrees and the folders git ignores (Pods, Carthage, SourcePackages and ios / android stay in), and read entry types from the listing instead of a stat per file. A game repo with worktree copies went from 244 s to 46 s for `check`.
 - `storebound mcp --http`: one Streamable HTTP MCP server that every agent session of a machine shares (no process per session). Each tool gets a `project` argument (absolute path inside `--roots`); auth is a local bearer token (`~/.storebound/mcp-token`, made on first start) or, for a server behind TLS, OAuth bearer tokens checked by introspection (RFC 7662) with protected resource metadata (RFC 9728). docs/mcp.md.
 
diff --git a/apps/desktop/package.json b/apps/desktop/package.json
index 428e5a1..7b9f632 100644
--- a/apps/desktop/package.json
+++ b/apps/desktop/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@storebound/desktop",
-  "version": "0.8.57",
+  "version": "0.8.58",
   "private": true,
   "license": "MIT",
   "type": "module",
diff --git a/apps/desktop/src-tauri/Cargo.lock b/apps/desktop/src-tauri/Cargo.lock
index 9e31a73..496304a 100644
--- a/apps/desktop/src-tauri/Cargo.lock
+++ b/apps/desktop/src-tauri/Cargo.lock
@@ -4096,7 +4096,7 @@ checksum = "a2eb9349b6444b326872e140eb1cf5e7c522154d69e7a0ffb0fb81c06b37543f"
 
 [[package]]
 name = "storebound-desktop"
-version = "0.8.57"
+version = "0.8.58"
 dependencies = [
  "base64 0.22.1",
  "getrandom 0.3.4",
diff --git a/apps/desktop/src-tauri/Cargo.toml b/apps/desktop/src-tauri/Cargo.toml
index 6912486..05e2417 100644
--- a/apps/desktop/src-tauri/Cargo.toml
+++ b/apps/desktop/src-tauri/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "storebound-desktop"
-version = "0.8.57"
+version = "0.8.58"
 description = "storebound desktop: every game's releases on both stores in one window"
 license = "MIT"
 edition = "2021"
diff --git a/apps/desktop/src-tauri/tauri.conf.json b/apps/desktop/src-tauri/tauri.conf.json
index 04dc72a..deaff30 100644
--- a/apps/desktop/src-tauri/tauri.conf.json
+++ b/apps/desktop/src-tauri/tauri.conf.json
@@ -2,7 +2,7 @@
   "$schema": "https://schema.tauri.app/config/2",
   "productName": "storebound",
   "mainBinaryName": "storebound-desktop",
-  "version": "0.8.57",
+  "version": "0.8.58",
   "identifier": "dev.storebound.desktop",
   "build": {
     "frontendDist": "../dist",
diff --git a/gemini-extension.json b/gemini-extension.json
index 2a9f249..fface3f 100644
--- a/gemini-extension.json
+++ b/gemini-extension.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.57",
+  "version": "0.8.58",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "contextFileName": "GEMINI.md",
   "mcpServers": {
diff --git a/package.json b/package.json
index 8c4bf4c..59d9754 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.57",
+  "version": "0.8.58",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every store questionnaire (incl. account deletion and App Review demo accounts), privacy, icons, screenshots and previews, TestFlight. After launch: crash vitals, review replies, price sheets, analytics and Product Page Optimization. One config, a CLI (Node 20+ or Bun), an MCP server and Agent Skills for your AI coding agent.",
   "license": "MIT",
   "author": "CRTkafa",

From c500866295fc6db877f3639ff8d164254c66d29a Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Thu, 29 Oct 2026 18:54:58 +0700
Subject: [PATCH 064/126] mcp --http --public: key-less public server (skills,
 pitfalls, limits, listing lint, App Store search), rate limit, 64 KB bodies

---
 CHANGELOG.md             |   2 +
 cli/data/flags.json      |   8 +-
 cli/mcp-cmd.ts           |   1 +
 cli/mcp-http.ts          |  53 +++++--
 cli/mcp-public.ts        | 317 +++++++++++++++++++++++++++++++++++++++
 cli/mcp.ts               |  21 ++-
 docs/mcp.md              |  38 +++++
 tests/mcp-public.test.ts | 270 +++++++++++++++++++++++++++++++++
 8 files changed, 695 insertions(+), 15 deletions(-)
 create mode 100644 cli/mcp-public.ts
 create mode 100644 tests/mcp-public.test.ts

diff --git a/CHANGELOG.md b/CHANGELOG.md
index f715ce5..0102a95 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,8 @@
 
 ## Unreleased
 
+- `storebound mcp --http --public`: a public, key-less MCP server (no sign-in, no store credentials, no project folders, no child processes, read-only). Tools: `skills_list`, `skill_get`, `pitfalls_search`, `store_limits`, `listing_lint` and `aso_search` (the public iTunes Search API, the only network call). Rate limit per client (`--rate`, 429 with Retry-After; `--trust-proxy` for X-Forwarded-For), 64 KB request bodies, CORS preflight. docs/mcp.md.
+
 ## 0.8.58 · 2026-10-29
 
 - `check` and `scan` are fast on big repos: project walks skip dot folders (tool state, worktree copies), linked git worktrees and the folders git ignores (Pods, Carthage, SourcePackages and ios / android stay in), and read entry types from the listing instead of a stat per file. A game repo with worktree copies went from 244 s to 46 s for `check`.
diff --git a/cli/data/flags.json b/cli/data/flags.json
index 0879954..3ef2998 100644
--- a/cli/data/flags.json
+++ b/cli/data/flags.json
@@ -657,10 +657,13 @@
    "issuer",
    "port",
    "project",
+   "public",
+   "rate",
    "read-only",
    "resource",
    "roots",
-   "token-file"
+   "token-file",
+   "trust-proxy"
   ],
   "onboard": [
    "accounts",
@@ -1363,7 +1366,9 @@
    "propose",
    "prune",
    "prune-languages",
+   "public",
    "q",
+   "rate",
    "rating",
    "react-native",
    "read-only",
@@ -1421,6 +1426,7 @@
    "tracking-domains",
    "traffic",
    "translate",
+   "trust-proxy",
    "type",
    "udid",
    "unanswered",
diff --git a/cli/mcp-cmd.ts b/cli/mcp-cmd.ts
index e16bc25..24dde9d 100644
--- a/cli/mcp-cmd.ts
+++ b/cli/mcp-cmd.ts
@@ -10,5 +10,6 @@ export async function run(a: ReturnType<typeof parseArgs>): Promise<void> {
     auth: a.get('auth'), tokenFile: a.get('token-file'), introspectUrl: a.get('introspect-url'), introspectKeyFile: a.get('introspect-key-file'),
     resource: a.get('resource'), issuer: a.get('issuer'), allowRemoteToken: a.has('allow-remote-token'),
     brokerProfiles: a.get('broker-profiles'), readOnly: a.has('read-only'),
+    public: a.has('public'), rate: a.get('rate'), trustProxy: a.has('trust-proxy'),
   });
 }
diff --git a/cli/mcp-http.ts b/cli/mcp-http.ts
index 36ed269..124c3bc 100644
--- a/cli/mcp-http.ts
+++ b/cli/mcp-http.ts
@@ -2,6 +2,7 @@
 // machine (or one host serves a whole team) instead of one stdio process per session.
 //   storebound mcp --http [--host 127.0.0.1] [--port 7787] [--roots <dir,dir>] [--project <dir>]
 //                         [--auth token|introspect] [--token-file ~/.storebound/mcp-token]
+//   storebound mcp --http --public [--port 7788] [--host 127.0.0.1] [--rate 60] [--trust-proxy]   (see below)
 //                         [--introspect-url <url> --introspect-key-file <file> --resource <url> --issuer <url>]
 // Transport (https://modelcontextprotocol.io/specification/2025-06-18/basic/transports#streamable-http): one endpoint,
 // /mcp. POST carries one JSON-RPC message and gets one JSON answer (202 for a notification); GET and DELETE are 405
@@ -9,6 +10,9 @@
 // Origin header, when sent, must be a localhost origin unless --allow-origin names it (DNS rebinding).
 // Project: every tool gets a `project` argument, the absolute path of the app folder the CLI runs in. It must be inside
 // --roots (default: the home folder); --project (or STOREBOUND_PROJECT) is the default when a call has none.
+// Public (--public): the key-less server behind a public URL. No sign-in, no project, no store credentials; it serves only the
+// read-only tools of mcp-public.ts (skills, pitfalls, limits, listing lint, App Store search), never starts a process, rate
+// limited per client (--rate per minute, 429 + Retry-After; --trust-proxy reads the first X-Forwarded-For entry), body <= 64 KB.
 // Auth (every request to /mcp):
 //   token (default): `Authorization: Bearer <token>`, the token in --token-file (made with mode 600 on first start;
 //     never printed). Clients: claude mcp add --transport http storebound http://127.0.0.1:7787/mcp
@@ -25,12 +29,17 @@ import { homedir } from 'node:os';
 import { dirname, isAbsolute, join, relative, resolve } from 'node:path';
 import pkg from '../package.json' with { type: 'json' };
 import { handle, LEGACY, PROTOCOL } from './mcp';
+import { clientKey, createLimiter, publicSurface, type PublicDeps } from './mcp-public';
 import { TOOLS } from './mcp-tools';
 import { brokerConfig, brokerProfileEnv } from './lib/broker';
 import { runCommand } from './lib/runner';
 
 export const DEFAULT_PORT = 7787;
+export const PUBLIC_PORT = 7788;
 const MAX_BODY = 4 * 1024 * 1024;
+/** Public mode: one JSON-RPC message of a read-only tool never needs more. */
+export const PUBLIC_MAX_BODY = 64 * 1024;
+export const PUBLIC_DEFAULT_RATE = 60;
 
 export interface HttpOptions {
   host: string;
@@ -42,7 +51,9 @@ export interface HttpOptions {
   brokerProfiles?: string[];
   /** Only the tools that change nothing (no dry_run tools at all). */
   readOnly?: boolean;
-  auth: { kind: 'token'; token: string } | { kind: 'introspect'; url: string; key: string; resource: string; issuer: string };
+  /** Public key-less mode (`--public`): auth kind 'none', the tool surface of mcp-public.ts, a rate limit per client. */
+  public?: { rate: number; trustProxy: boolean } & PublicDeps;
+  auth: { kind: 'none' } | { kind: 'token'; token: string } | { kind: 'introspect'; url: string; key: string; resource: string; issuer: string };
 }
 
 export const PROJECT_PROP = { type: 'string', description: 'The app folder (the one with storebound.config.ts) to run in: an absolute path, or a folder name under the server roots. Required unless the server was started with --project.' } as const;
@@ -96,7 +107,7 @@ const bearer = (req: IncomingMessage): string | null => { const h = req.headers.
 const cache = new Map<string, { ok: boolean; until: number }>();
 async function authorized(req: IncomingMessage, o: HttpOptions): Promise<boolean> {
   const t = bearer(req);
-  if (!t) return false;
+  if (!t || o.auth.kind === 'none') return false;
   if (o.auth.kind === 'token') {
     const a = createHash('sha256').update(t).digest(), b = createHash('sha256').update(o.auth.token).digest();
     return a.equals(b);
@@ -115,14 +126,14 @@ async function authorized(req: IncomingMessage, o: HttpOptions): Promise<boolean
   return ok;
 }
 
-function send(res: ServerResponse, status: number, body?: unknown, headers: Record<string, string> = {}): void {
+function sendRaw(res: ServerResponse, status: number, body?: unknown, headers: Record<string, string> = {}): void {
   res.writeHead(status, { 'cache-control': 'no-store', ...(body === undefined ? {} : { 'content-type': 'application/json' }), ...headers });
   res.end(body === undefined ? undefined : JSON.stringify(body));
 }
 
-async function readBody(req: IncomingMessage): Promise<string | null> {
+async function readBody(req: IncomingMessage, max = MAX_BODY): Promise<string | null> {
   let size = 0; const parts: Buffer[] = [];
-  for await (const c of req) { size += (c as Buffer).length; if (size > MAX_BODY) return null; parts.push(c as Buffer); }
+  for await (const c of req) { size += (c as Buffer).length; if (size > max) return null; parts.push(c as Buffer); }
   return Buffer.concat(parts).toString('utf8');
 }
 
@@ -151,6 +162,9 @@ export async function answer(msg: Record<string, unknown>, o: Pick<HttpOptions,
   return r;
 }
 
+/** Public mode never runs the CLI: a call that would is a bug, not a request. */
+const noRun = async (): Promise<{ code: number; out: string }> => { throw new Error('public mode does not run commands'); };
+
 let brokerEnv: { env: Promise<Record<string, string>>; until: number } | null = null;
 /** The broker profiles' credentials as child env, fetched at most every 10 minutes (memory only, never logged). */
 async function profileEnvFor(profiles: string[] | undefined): Promise<Record<string, string>> {
@@ -174,6 +188,11 @@ async function runIn(argv: string[], cwd: string): Promise<{ code: number; out:
 
 export function startHttp(o: HttpOptions): Promise<{ close: () => void; port: number }> {
   serverProfiles = o.brokerProfiles;
+  if (o.auth.kind === 'none' && !o.public) throw new Error('auth none is only for --public');
+  const pub = o.public ? { limiter: createLimiter(o.public.rate), surface: publicSurface(o.public), trustProxy: o.public.trustProxy } : null;
+  // no ambient credential in public mode, so any browser origin may call it
+  const cors: Record<string, string> = pub ? { 'access-control-allow-origin': '*', 'access-control-allow-methods': 'POST, OPTIONS', 'access-control-allow-headers': 'content-type, accept, mcp-protocol-version', 'access-control-max-age': '86400' } : {};
+  const send = (res: ServerResponse, status: number, body?: unknown, headers: Record<string, string> = {}) => sendRaw(res, status, body, { ...cors, ...headers });
   const resourceMeta = o.auth.kind === 'introspect' ? metadataUrl(o.auth.resource) : null;
   const server = createServer(async (req, res) => {
     const path = (req.url ?? '/').split('?')[0];
@@ -181,17 +200,21 @@ export function startHttp(o: HttpOptions): Promise<{ close: () => void; port: nu
       return send(res, 200, { resource: o.auth.resource, authorization_servers: [o.auth.issuer], bearer_methods_supported: ['header'], scopes_supported: ['mcp'], resource_name: 'storebound' });
     if (path === '/health' && req.method === 'GET') return send(res, 200, { ok: true, version: pkg.version });
     if (path !== '/mcp') return send(res, 404, { error: 'not found' });
-    if (!originAllowed(req.headers.origin, o.allowOrigins)) return send(res, 403, { error: 'origin not allowed' });
-    if (!(await authorized(req, o)))
+    if (pub) {
+      if (req.method === 'OPTIONS') return send(res, 204);
+      const hit = pub.limiter.hit(clientKey(req.headers['x-forwarded-for'], req.socket.remoteAddress, pub.trustProxy));
+      if (!hit.ok) return send(res, 429, { error: 'rate limit exceeded' }, { 'retry-after': String(hit.retryAfter) });
+    } else if (!originAllowed(req.headers.origin, o.allowOrigins)) return send(res, 403, { error: 'origin not allowed' });
+    if (!pub && !(await authorized(req, o)))
       return send(res, 401, { error: 'unauthorized' }, { 'www-authenticate': resourceMeta ? `Bearer resource_metadata="${resourceMeta}"` : 'Bearer' });
     if (req.method !== 'POST') return send(res, 405, { error: 'POST only (no server-initiated stream)' }, { allow: 'POST' });
-    const body = await readBody(req);
+    const body = await readBody(req, pub ? PUBLIC_MAX_BODY : MAX_BODY);
     if (body === null) return send(res, 413, { error: 'body too large' });
     let msg: unknown;
     try { msg = JSON.parse(body); } catch { return send(res, 400, { jsonrpc: '2.0', id: null, error: { code: -32700, message: 'Parse error' } }); }
     if (Array.isArray(msg) || typeof msg !== 'object' || msg === null) return send(res, 400, { jsonrpc: '2.0', id: null, error: { code: -32600, message: 'One JSON-RPC message per request' } });
     try {
-      const r = await answer(msg as Record<string, unknown>, o);
+      const r = pub ? await handle(msg as never, noRun, pub.surface) : await answer(msg as Record<string, unknown>, o);
       return r ? send(res, 200, r) : send(res, 202);
     } catch (e) { return send(res, 500, { jsonrpc: '2.0', id: (msg as { id?: unknown }).id ?? null, error: { code: -32603, message: String((e as Error).message) } }); }
   });
@@ -221,10 +244,20 @@ const home = (p: string) => (p.startsWith('~') ? join(homedir(), p.slice(1)) : p
 
 export interface HttpFlags { host?: string; port?: string; roots?: string; project?: string; allowOrigin?: string; auth?: string; tokenFile?: string;
   introspectUrl?: string; introspectKeyFile?: string; resource?: string; issuer?: string; allowRemoteToken?: boolean;
-  brokerProfiles?: string; readOnly?: boolean }
+  brokerProfiles?: string; readOnly?: boolean; public?: boolean; rate?: string; trustProxy?: boolean }
 
 export async function serveHttp(f: HttpFlags): Promise<void> {
   const host = f.host ?? '127.0.0.1';
+  if (f.public) {
+    const bad = (['auth', 'tokenFile', 'roots', 'project', 'brokerProfiles', 'allowOrigin', 'introspectUrl'] as const).filter(k => f[k] !== undefined);
+    if (bad.length || f.readOnly) throw new Error('--public takes no credentials or project: do not combine it with --auth, --token-file, --roots, --project, --broker-profiles, --allow-origin, --introspect-* or --read-only');
+    const rate = Number(f.rate ?? PUBLIC_DEFAULT_RATE);
+    if (!Number.isInteger(rate) || rate < 1) throw new Error('--rate: requests per minute per client, a whole number >= 1');
+    const port = Number(f.port ?? PUBLIC_PORT);
+    const s = await startHttp({ host, port, roots: [], project: null, allowOrigins: [], auth: { kind: 'none' }, public: { rate, trustProxy: !!f.trustProxy } });
+    console.error(`[storebound mcp] ${pkg.version} PUBLIC key-less server on http://${host}:${s.port}/mcp (MCP ${PROTOCOL}, legacy ${LEGACY.join(', ')}), read-only, ${rate} requests/min per client${f.trustProxy ? ', X-Forwarded-For trusted' : ''}`);
+    return;
+  }
   const port = Number(f.port ?? DEFAULT_PORT);
   const roots = (f.roots ?? homedir()).split(',').map(s => resolve(home(s.trim()))).filter(Boolean);
   const projectArg = f.project ?? process.env.STOREBOUND_PROJECT;
diff --git a/cli/mcp-public.ts b/cli/mcp-public.ts
new file mode 100644
index 0000000..81387b4
--- /dev/null
+++ b/cli/mcp-public.ts
@@ -0,0 +1,317 @@
+// The public, key-less MCP surface (`storebound mcp --http --public`): what anyone may call without signing in.
+// Everything is pure and in-process. This module never reads store credentials, project folders or the cwd, never
+// starts a child process (no runner, no CLI) and makes one kind of network call: the public iTunes Search API
+// (aso_search). The only files it reads are the skills/ folder of the storebound package itself.
+import { existsSync, readdirSync, readFileSync } from 'node:fs';
+import { dirname, join, resolve } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import type { Surface } from './mcp';
+import { APPLE_LIMITS, PLAY_LIMITS } from './lib/copy';
+import { parseFrontMatter } from './lib/frontmatter';
+import { appleLocaleIssues, playLangIssues } from './lib/listing-rules';
+import { IMAGE_SPECS, PREVIEW_RULES, VIDEO_TARGETS } from './shots/spec';
+
+export const PUBLIC_INSTRUCTIONS = [
+  'This is the public, key-less storebound server: anyone may use it, it needs no sign-in and it never touches store accounts, keys or project files.',
+  'It is read-only and offers store knowledge: the skills (skills_list, skill_get), known store pitfalls (pitfalls_search), listing and screenshot limits (store_limits), a text linter for App Store / Google Play listings (listing_lint) and a public App Store search (aso_search).',
+  'For real store work (builds, uploads, listings, releases) install the toolchain: `npx storebound` (see https://storebound.dev) and use its own MCP server, `npx storebound mcp`.',
+].join(' ');
+
+export interface PublicDeps {
+  /** The folder with <name>/SKILL.md files. Default: skills/ of the storebound package that contains this file. */
+  skillsDir?: string;
+  /** iTunes Search API endpoint (tests point it at a local fake). */
+  searchBase?: string;
+  fetch?: typeof fetch;
+}
+
+export interface PublicResult { text: string; data?: unknown; isError?: boolean }
+export interface PublicTool {
+  name: string; title: string; description: string;
+  inputSchema: { type: 'object'; properties: Record<string, Schema>; required?: string[]; additionalProperties: false };
+  network?: boolean;
+  run(input: Record<string, unknown>): Promise<PublicResult> | PublicResult;
+}
+export interface Schema { type: string; description?: string; enum?: string[]; pattern?: string; minLength?: number; maxLength?: number; minimum?: number; maximum?: number;
+  properties?: Record<string, Schema>; additionalProperties?: boolean }
+
+export const SEARCH_BASE = 'https://itunes.apple.com/search';
+const MAX_TEXT = 40_000;
+const SKILL_NAME = /^[a-z0-9-]+$/;
+
+// ---- input validation (JSON-Schema subset these tools use) ----
+
+export function validatePublic(schema: Schema, input: unknown, path = ''): string[] {
+  const e: string[] = [];
+  if (input === undefined || input === null) input = {};
+  if (typeof input !== 'object' || Array.isArray(input)) return [`${path || 'arguments'}: must be an object`];
+  const i = input as Record<string, unknown>;
+  const props = schema.properties ?? {};
+  for (const r of (schema as { required?: string[] }).required ?? []) if (i[r] === undefined) e.push(`${path}${r}: required`);
+  for (const [k, v] of Object.entries(i)) {
+    const p = props[k];
+    if (!p) { e.push(`${path}${k}: unknown argument`); continue; }
+    if (v === undefined) continue;
+    if (p.type === 'object') { e.push(...validatePublic(p, v, `${path}${k}.`)); continue; }
+    if (p.type === 'string') {
+      if (typeof v !== 'string') { e.push(`${path}${k}: must be a string`); continue; }
+      if (p.enum && !p.enum.includes(v)) e.push(`${path}${k}: one of ${p.enum.join(', ')}`);
+      if (p.pattern && !new RegExp(p.pattern).test(v)) e.push(`${path}${k}: does not match ${p.pattern}`);
+      if (p.minLength !== undefined && v.length < p.minLength) e.push(`${path}${k}: at least ${p.minLength} characters`);
+      if (p.maxLength !== undefined && v.length > p.maxLength) e.push(`${path}${k}: at most ${p.maxLength} characters`);
+    } else if (p.type === 'integer') {
+      if (typeof v !== 'number' || !Number.isInteger(v)) { e.push(`${path}${k}: must be an integer`); continue; }
+      if (p.minimum !== undefined && v < p.minimum) e.push(`${path}${k}: >= ${p.minimum}`);
+      if (p.maximum !== undefined && v > p.maximum) e.push(`${path}${k}: <= ${p.maximum}`);
+    }
+  }
+  return e;
+}
+
+const clipText = (s: string, max = MAX_TEXT): string => (s.length <= max ? s : `${s.slice(0, max)}\n[... ${s.length - max} characters cut]`);
+const oneLine = (s: string, max: number): string => { const t = s.replace(/\s+/g, ' ').trim(); return t.length <= max ? t : `${t.slice(0, max - 1)}…`; };
+
+// ---- skills (from the package) ----
+
+function packageSkillsDir(): string {
+  const start = dirname(fileURLToPath(import.meta.url));
+  for (let d = start; ; d = dirname(d)) {
+    try {
+      const pkg = JSON.parse(readFileSync(join(d, 'package.json'), 'utf8')) as { name?: string };
+      if (pkg.name === 'storebound') return join(d, 'skills');
+    } catch { /* keep looking */ }
+    if (dirname(d) === d) break;
+  }
+  return resolve(start, '..', 'skills');
+}
+
+export interface SkillInfo { name: string; description: string; text: string }
+
+export function loadSkills(dir: string): SkillInfo[] {
+  if (!existsSync(dir)) return [];
+  const out: SkillInfo[] = [];
+  for (const name of readdirSync(dir).filter(n => SKILL_NAME.test(n)).sort()) {
+    let text: string;
+    try { text = readFileSync(join(dir, name, 'SKILL.md'), 'utf8'); } catch { continue; }
+    const { data } = parseFrontMatter(text);
+    out.push({ name, description: oneLine(typeof data.description === 'string' ? data.description : '', 400), text });
+  }
+  return out;
+}
+
+// ---- pitfalls ----
+
+export interface Section { heading: string; body: string }
+export function sectionsOf(md: string): Section[] {
+  const parts = md.split(/^## /m).slice(1);
+  return parts.map(p => { const nl = p.indexOf('\n'); return { heading: (nl < 0 ? p : p.slice(0, nl)).trim(), body: nl < 0 ? '' : p.slice(nl + 1).trim() }; });
+}
+
+const APPLE_RE = /app store|apple|testflight|\bios\b|\basc\b|xcode|itunes/i;
+const PLAY_RE = /google play|\bplay\b|\bgradle\b|\baab\b|android/i;
+
+export function searchSections(sections: Section[], query: string, store?: 'apple' | 'play', max = 8): { heading: string; excerpt: string; score: number }[] {
+  const words = [...new Set(query.toLowerCase().split(/[^\p{L}\p{N}]+/u).filter(w => w.length > 1))].slice(0, 12);
+  if (!words.length) return [];
+  const scored = sections.map(s => {
+    const head = s.heading.toLowerCase(), body = s.body.toLowerCase();
+    let score = 0;
+    for (const w of words) { if (head.includes(w)) score += 5; const n = body.split(w).length - 1; score += Math.min(n, 5); }
+    return { s, score };
+  }).filter(x => x.score > 0);
+  const filtered = scored.filter(({ s }) => {
+    if (!store) return true;
+    const t = `${s.heading} ${s.body}`;
+    const a = APPLE_RE.test(t), p = PLAY_RE.test(t);
+    return store === 'apple' ? a || !p : p || !a;
+  });
+  return filtered.sort((a, b) => b.score - a.score).slice(0, max).map(({ s, score }) => {
+    // the excerpt starts at the first matching line
+    const lines = s.body.split('\n');
+    const at = Math.max(0, lines.findIndex(l => words.some(w => l.toLowerCase().includes(w))));
+    return { heading: s.heading, score, excerpt: clipText(lines.slice(at).join('\n'), 1200) };
+  });
+}
+
+// ---- limits ----
+
+export function limits(store?: 'apple' | 'play'): Record<string, unknown> {
+  const specs = (s: 'apple' | 'play') => Object.entries(IMAGE_SPECS).filter(([, v]) => v.store === s).map(([key, v]) => ({
+    key, type: v.type, label: v.label, acceptedPixelSizes: v.sizes.map(([w, h]) => `${w}x${h}`), perSet: `${v.min}-${v.max}`,
+    maxBytes: v.maxBytes, alpha: v.alpha, ...(v.landscapeOnly ? { landscapeOnly: true } : {}),
+  }));
+  const previews = (s: 'apple' | 'play') => Object.values(VIDEO_TARGETS).filter(v => v.store === s).map(v => ({ label: v.label, size: `${v.w}x${v.h}` }));
+  const apple = {
+    textLimitsCharacters: { ...APPLE_LIMITS },
+    keywordField: ['at most 100 characters (characters, not bytes)', 'comma-separated, no spaces around commas (they count)', 'fill at least 90 of the 100', 'no repeats of words already in the name or subtitle (they are indexed anyway)', 'no duplicates', 'single words combine on their own; multi-word phrases waste characters'],
+    screenshots: specs('apple'),
+    appPreviews: { targets: previews('apple'), ...PREVIEW_RULES },
+  };
+  const play = {
+    textLimitsCharacters: { ...PLAY_LIMITS },
+    screenshots: specs('play'),
+    images: { featureGraphic: '1024x500, JPEG or 24-bit PNG, no alpha', icon: '512x512 PNG (Play listing icon)' },
+    promoVideo: previews('play'),
+  };
+  return store === 'apple' ? { apple } : store === 'play' ? { play } : { apple, play };
+}
+
+// ---- listing lint ----
+
+const APPLE_FIELDS = ['name', 'subtitle', 'keywords', 'promotionalText', 'description', 'whatsNew'] as const;
+const PLAY_FIELDS = ['title', 'shortDescription', 'fullDescription', 'whatsNew'] as const;
+const FIELD_MAX = 5000;
+
+export function lintListing(store: 'apple' | 'play', fields: Record<string, unknown>, locale: string): { problems: { level: string; field: string; msg: string }[]; counts: Record<string, string> } {
+  const f = fields as Record<string, string | undefined>;
+  const counts: Record<string, string> = {};
+  let issues: { level: string; field: string; msg: string }[];
+  if (store === 'apple') {
+    const v = Object.fromEntries(APPLE_FIELDS.filter(k => f[k] !== undefined).map(k => [k, f[k]!]));
+    issues = appleLocaleIssues(locale, v, '');
+    // keywords with no name / subtitle given still get the stand-alone keyword rules
+    if (v.keywords === undefined) issues = issues.filter(i => i.field !== 'keywords');
+    for (const k of APPLE_FIELDS) if (v[k] !== undefined) counts[k] = `${[...v[k]!].length}/${APPLE_LIMITS[k]}`;
+  } else {
+    const v = { title: f.title, short: f.shortDescription, full: f.fullDescription, whatsNew: f.whatsNew };
+    issues = playLangIssues(locale, v, f.title ?? '');
+    for (const [k, lim] of [['title', 'title'], ['shortDescription', 'short'], ['fullDescription', 'full'], ['whatsNew', 'whatsNew']] as const)
+      if (f[k] !== undefined) counts[k] = `${[...f[k]!].length}/${PLAY_LIMITS[lim]}`;
+    const rename: Record<string, string> = { short: 'shortDescription', full: 'fullDescription' };
+    issues = issues.map(i => ({ ...i, field: rename[i.field] ?? i.field, msg: i.msg.replace(/^(short|full) is /, (_m, w: string) => `${rename[w]} is `) }));
+  }
+  // fields not given are not "missing": only the ones the caller sent are judged
+  const given = new Set(Object.keys(fields));
+  const problems = issues.filter(i => !/is required$|description is required$/.test(i.msg) || given.has(i.field));
+  return { problems: problems.map(i => ({ level: i.level, field: i.field, msg: i.msg })), counts };
+}
+
+// ---- iTunes search ----
+
+interface ItunesApp { trackId?: number; trackName?: string; sellerName?: string; averageUserRating?: number; userRatingCount?: number; primaryGenreName?: string }
+
+export async function searchApps(term: string, country: string, limit: number, base: string, f: typeof fetch): Promise<{ results: Record<string, unknown>[] }> {
+  const url = `${base}${base.includes('?') ? '&' : '?'}${new URLSearchParams({ term, country: country.toLowerCase(), media: 'software', entity: 'software', limit: String(limit) })}`;
+  const r = await f(url, { signal: AbortSignal.timeout(10_000), headers: { accept: 'application/json' } });
+  if (!r.ok) throw new Error(`the App Store search answered ${r.status}`);
+  const j = (await r.json()) as { results?: ItunesApp[] };
+  const results = (j.results ?? []).slice(0, limit).map((a, n) => ({
+    rank: n + 1, name: oneLine(a.trackName ?? '', 120), developer: oneLine(a.sellerName ?? '', 120), id: a.trackId ?? null,
+    rating: typeof a.averageUserRating === 'number' ? Math.round(a.averageUserRating * 100) / 100 : null,
+    ratingCount: a.userRatingCount ?? 0, genre: a.primaryGenreName ?? null,
+  }));
+  return { results };
+}
+
+// ---- the tools ----
+
+const store: Schema = { type: 'string', enum: ['apple', 'play'] };
+
+export function publicTools(deps: PublicDeps = {}): PublicTool[] {
+  let skills: SkillInfo[] | null = null;
+  const getSkills = () => (skills ??= loadSkills(deps.skillsDir ?? packageSkillsDir()));
+  const obj = (properties: Record<string, Schema>, required?: string[]): PublicTool['inputSchema'] => ({ type: 'object', properties, ...(required ? { required } : {}), additionalProperties: false });
+  const textField = (description: string, maxLength = FIELD_MAX): Schema => ({ type: 'string', description, maxLength });
+  const locale: Schema = { type: 'string', description: 'Locale or language id, e.g. en-US (default en-US)', pattern: '^[A-Za-z]{2,3}([-_][A-Za-z0-9]{2,8}){0,2}$', maxLength: 20 };
+
+  return [
+    { name: 'skills_list', title: 'List storebound skills', description: 'Name and one-line description of every storebound skill (step-by-step guides for store releases, listings, screenshots, IAP, privacy, ASO ...).',
+      inputSchema: obj({}),
+      run: () => { const list = getSkills().map(s => ({ name: s.name, description: s.description })); return { text: list.map(s => `${s.name}: ${s.description}`).join('\n'), data: { skills: list } }; } },
+    { name: 'skill_get', title: 'Read one skill', description: 'The full SKILL.md text of one skill (name from skills_list).',
+      inputSchema: obj({ name: { type: 'string', description: 'Skill name, e.g. aso-basics', pattern: SKILL_NAME.source, minLength: 1, maxLength: 80 } }, ['name']),
+      run: i => {
+        const s = getSkills().find(x => x.name === i.name);
+        if (!s) return { text: `Unknown skill: ${String(i.name)}. Call skills_list for the names.`, isError: true };
+        return { text: clipText(s.text, 120_000), data: { name: s.name } };
+      } },
+    { name: 'pitfalls_search', title: 'Search known store pitfalls', description: 'Sections of the store-pitfalls skill (mistakes made in real App Store and Google Play releases) that match the query words, best first (at most 8, each clipped).',
+      inputSchema: obj({ query: { type: 'string', description: 'Words to look for, e.g. "keywords rejected screenshots"', minLength: 2, maxLength: 200 }, store }, ['query']),
+      run: i => {
+        const sk = getSkills().find(x => x.name === 'store-pitfalls');
+        if (!sk) return { text: 'The store-pitfalls skill is not in this package.', isError: true };
+        const hits = searchSections(sectionsOf(sk.text), String(i.query), i.store as 'apple' | 'play' | undefined);
+        if (!hits.length) return { text: 'No pitfall matches those words. Try fewer or different words.', data: { matches: [] } };
+        return { text: clipText(hits.map(h => `## ${h.heading}\n${h.excerpt}`).join('\n\n---\n\n')), data: { matches: hits.map(h => ({ heading: h.heading, score: h.score })) } };
+      } },
+    { name: 'store_limits', title: 'Store listing and image limits', description: 'Listing field character limits, the App Store keyword field rules, screenshot and app preview sizes per device class and the Google Play feature graphic and icon sizes.',
+      inputSchema: obj({ store }),
+      run: i => { const d = limits(i.store as 'apple' | 'play' | undefined); return { text: JSON.stringify(d, null, 2), data: d }; } },
+    { name: 'listing_lint', title: 'Lint a store listing', description: 'Runs storebound\'s listing and ASO checks on the text you give (limits, keyword field rules, repeated name words, other platforms or apps named, placeholder text, keyword stuffing). Only the fields you send are judged. Nothing is stored.',
+      inputSchema: obj({
+        store, locale,
+        fields: { type: 'object', description: 'Apple: name, subtitle, keywords, promotionalText, description, whatsNew. Play: title, shortDescription, fullDescription, whatsNew.', additionalProperties: false,
+          properties: Object.fromEntries([...new Set([...APPLE_FIELDS, ...PLAY_FIELDS])].map(k => [k, textField(`The ${k} text`)])) },
+      }, ['store', 'fields']),
+      run: i => {
+        const st = i.store as 'apple' | 'play';
+        const fields = i.fields as Record<string, unknown>;
+        const allowed: readonly string[] = st === 'apple' ? APPLE_FIELDS : PLAY_FIELDS;
+        const bad = Object.keys(fields).filter(k => !allowed.includes(k));
+        if (bad.length) return { text: `Invalid arguments: fields: ${bad.join(', ')} not used for ${st}; use ${allowed.join(', ')}`, isError: true };
+        if (!Object.keys(fields).length) return { text: 'Invalid arguments: fields: send at least one field', isError: true };
+        const r = lintListing(st, fields, String(i.locale ?? 'en-US').replace('_', '-'));
+        const lines = r.problems.map(p => `${p.level.toUpperCase()} ${p.field}: ${p.msg}`);
+        return { text: `${Object.entries(r.counts).map(([k, v]) => `${k} ${v}`).join(', ')}\n${lines.length ? lines.join('\n') : 'No problems found.'}`, data: r };
+      } },
+    { name: 'aso_search', title: 'Search the App Store', description: 'The public iTunes Search API: the top apps for a search term in one storefront (name, developer, id, rating, rating count, genre). The order is close to, not the same as, App Store search.',
+      network: true,
+      inputSchema: obj({ term: { type: 'string', description: 'Search term', minLength: 1, maxLength: 100 }, country: { type: 'string', description: 'Two-letter storefront, default us', pattern: '^[A-Za-z]{2}$', minLength: 2, maxLength: 2 },
+        limit: { type: 'integer', description: 'Results, 1-25 (default 10)', minimum: 1, maximum: 25 } }, ['term']),
+      run: async i => {
+        try {
+          const r = await searchApps(String(i.term), String(i.country ?? 'us'), Number(i.limit ?? 10), deps.searchBase ?? SEARCH_BASE, deps.fetch ?? fetch);
+          return { text: r.results.map(a => `${a.rank}. ${String(a.name)} (${String(a.developer)}) id ${String(a.id)}, ${a.rating ?? 'no rating'} / ${String(a.ratingCount)} ratings, ${String(a.genre)}`).join('\n') || 'No results.', data: r };
+        } catch (e) { return { text: `Search failed: ${(e as Error).message}`, isError: true }; }
+      } },
+  ];
+}
+
+/** The surface handle() serves in public mode: only these tools exist (the type lives in mcp.ts). */
+
+export function publicSurface(deps: PublicDeps = {}): Surface {
+  const tools = publicTools(deps);
+  return {
+    instructions: PUBLIC_INSTRUCTIONS,
+    list: () => tools.map(t => ({ name: t.name, title: t.title, description: t.description, inputSchema: t.inputSchema,
+      annotations: { title: t.title, readOnlyHint: true, destructiveHint: false, idempotentHint: true, openWorldHint: !!t.network } })),
+    call: async (name, input) => {
+      const t = tools.find(x => x.name === name);
+      if (!t) return null;
+      const problems = validatePublic(t.inputSchema, input);
+      if (problems.length) return { text: `Invalid arguments: ${problems.join('; ')}`, isError: true };
+      const r = await t.run((input ?? {}) as Record<string, unknown>);
+      return { ...r, text: clipText(r.text) };
+    },
+  };
+}
+
+// ---- rate limit ----
+
+export interface Limiter { hit(key: string): { ok: boolean; retryAfter: number } }
+
+/** Fixed one-minute window per client key, kept in memory; expired windows are swept so the map stays small. */
+export function createLimiter(perMinute: number, now: () => number = Date.now): Limiter {
+  const win = new Map<string, { start: number; n: number }>();
+  let sweptAt = now();
+  return {
+    hit(key) {
+      const t = now();
+      if (t - sweptAt > 60_000 || win.size > 50_000) { for (const [k, w] of win) if (t - w.start >= 60_000) win.delete(k); sweptAt = t; }
+      let w = win.get(key);
+      if (!w || t - w.start >= 60_000) { w = { start: t, n: 0 }; win.set(key, w); }
+      w.n++;
+      return w.n <= perMinute ? { ok: true, retryAfter: 0 } : { ok: false, retryAfter: Math.max(1, Math.ceil((w.start + 60_000 - t) / 1000)) };
+    },
+  };
+}
+
+/** The client key: the first X-Forwarded-For entry only when the proxy is trusted, else the socket address. */
+export function clientKey(forwardedFor: string | string[] | undefined, remote: string | undefined, trustProxy: boolean): string {
+  if (trustProxy) {
+    const h = Array.isArray(forwardedFor) ? forwardedFor[0] : forwardedFor;
+    const first = h?.split(',')[0]?.trim();
+    if (first) return first.slice(0, 64);
+  }
+  return remote ?? 'unknown';
+}
diff --git a/cli/mcp.ts b/cli/mcp.ts
index 95405cc..6441871 100644
--- a/cli/mcp.ts
+++ b/cli/mcp.ts
@@ -56,6 +56,13 @@ export const INSTRUCTIONS = [
   'Run `check` (offline) and `validate` (read-only) before writes. Long uploads (images, screenshots) are better run in a terminal with a log.',
 ].join(' ');
 
+/** A replacement tool surface (the public key-less server, mcp-public.ts): its own instructions, tool list and calls. */
+export interface Surface {
+  instructions: string;
+  list(): Record<string, unknown>[];
+  call(name: string, input: unknown): Promise<{ text: string; data?: unknown; isError?: boolean } | null>;
+}
+
 type Id = string | number;
 interface Msg { jsonrpc: '2.0'; id?: Id; method?: string; params?: Record<string, unknown> }
 
@@ -71,7 +78,7 @@ export function eraOf(m: Msg): { era: 'modern' | 'legacy'; version: string | nul
 }
 
 /** Handles one message; returns the response object (or null for notifications). Exported for tests. */
-export async function handle(m: Msg, run: (argv: string[], id: Id) => Promise<{ code: number; out: string }> = runCli): Promise<Record<string, unknown> | null> {
+export async function handle(m: Msg, run: (argv: string[], id: Id) => Promise<{ code: number; out: string }> = runCli, surface?: Surface): Promise<Record<string, unknown> | null> {
   const err = (code: number, message: string, data?: unknown) => ({ jsonrpc: '2.0', id: m.id ?? null, error: { code, message, ...(data === undefined ? {} : { data }) } });
   if (m.id === undefined) {
     if (m.method === 'notifications/cancelled') cancel(m.params?.requestId as Id);
@@ -83,7 +90,7 @@ export async function handle(m: Msg, run: (argv: string[], id: Id) => Promise<{
       protocolVersion: LEGACY.includes(asked) ? asked : LEGACY_PROTOCOL,
       capabilities: { tools: { listChanged: false } },
       serverInfo: { ...serverInfo(), description: pkg.description },
-      instructions: INSTRUCTIONS,
+      instructions: surface?.instructions ?? INSTRUCTIONS,
     } };
   }
 
@@ -101,11 +108,17 @@ export async function handle(m: Msg, run: (argv: string[], id: Id) => Promise<{
 
   switch (m.method) {
     case 'server/discover':
-      return ok({ supportedVersions: SUPPORTED, capabilities: { tools: {} }, instructions: INSTRUCTIONS, ttlMs: TOOLS_TTL_MS, cacheScope: 'public' });
+      return ok({ supportedVersions: SUPPORTED, capabilities: { tools: {} }, instructions: surface?.instructions ?? INSTRUCTIONS, ttlMs: TOOLS_TTL_MS, cacheScope: 'public' });
     case 'ping': return ok({});
-    case 'tools/list': return ok({ tools: listTools(bypassOn()), ...(era === 'modern' ? { ttlMs: TOOLS_TTL_MS, cacheScope: 'public' } : {}) });
+    case 'tools/list': return ok({ tools: surface ? surface.list() : listTools(bypassOn()), ...(era === 'modern' ? { ttlMs: TOOLS_TTL_MS, cacheScope: 'public' } : {}) });
     case 'tools/call': {
       const name = String(m.params?.name ?? '');
+      if (surface) {
+        // public mode: only the surface's own tools exist; nothing below (the CLI tools, owner_step) is reachable
+        const r = await surface.call(name, m.params?.arguments ?? {});
+        if (!r) return err(-32602, `Unknown tool: ${name}`);
+        return ok({ content: [{ type: 'text', text: r.text }], ...(r.data === undefined ? {} : { structuredContent: { result: r.data } }), isError: !!r.isError });
+      }
       const tool = TOOLS.find(t => t.name === name) ?? (name === OWNER_STEP.name && bypassOn() ? OWNER_STEP : undefined);
       if (!tool) return err(-32602, `Unknown tool: ${name}`);
       const input = (m.params?.arguments ?? {}) as Record<string, unknown>;
diff --git a/docs/mcp.md b/docs/mcp.md
index dbbe6fd..e78393a 100644
--- a/docs/mcp.md
+++ b/docs/mcp.md
@@ -58,6 +58,44 @@ refused unless `--allow-origin` names it.
 - `project` may also be a folder name under the roots (a shared server keeps its checkouts there).
 - `/health` answers `{ ok, version }` without auth.
 
+
+## Public key-less server
+
+`storebound mcp --http --public [--port 7788] [--host 127.0.0.1] [--rate 60] [--trust-proxy]` is a separate mode for a
+server anyone may connect to (for example behind a public HTTPS address). No sign-in, no token, no project: it never
+reads store credentials, project folders or the working directory, never starts a child process and never runs the CLI.
+It is read-only and keeps no state. The only network call it makes is the public iTunes Search API (`aso_search`).
+It cannot be combined with `--auth`, `--token-file`, `--roots`, `--project`, `--broker-profiles`, `--allow-origin`
+or `--read-only`.
+
+Tools (and only these; the CLI tools of the normal server do not exist here, a call gets "Unknown tool"):
+
+- `skills_list`: name and one-line description of every skill in the package.
+- `skill_get {name}`: the full SKILL.md of one skill (`^[a-z0-9-]+$`, must be in the list).
+- `pitfalls_search {query, store?}`: the sections of the store-pitfalls skill that match the query words, best first (at
+  most 8, each clipped). `store` is `apple` or `play`.
+- `store_limits {store?}`: listing field character limits, the App Store keyword field rules, screenshot and app
+  preview sizes per device class, Play feature graphic and icon sizes.
+- `listing_lint {store, fields, locale?}`: storebound's listing and ASO checks on the text you send (limits, keyword
+  field rules, repeated name words, other platforms or apps named, placeholder text, keyword stuffing). Apple fields:
+  `name`, `subtitle`, `keywords`, `promotionalText`, `description`, `whatsNew`. Play fields: `title`,
+  `shortDescription`, `fullDescription`, `whatsNew`. Only the fields you send are judged; nothing is stored.
+- `aso_search {term, country?, limit?}`: top apps for a term in one storefront from the iTunes Search API (name,
+  developer, id, rating, rating count, genre; 1-25 results, 10 s timeout).
+
+Limits: `--rate N` requests per minute per client (default 60; over the limit the answer is 429 with `Retry-After`),
+bodies over 64 KB get 413, every tool input is validated against a closed schema, and output is bounded. Behind a
+reverse proxy add `--trust-proxy` so the first `X-Forwarded-For` entry is the client; without it that header is
+ignored. Any browser origin may call it (there is no ambient credential), and CORS preflight is answered. `/health`
+works as before. Request bodies are not logged.
+
+```bash
+storebound mcp --http --public --port 7788 --trust-proxy
+claude mcp add --transport http storebound-public https://mcp.example.com/mcp
+```
+
+For real store work (builds, uploads, listings, releases) use `npx storebound` and its own MCP server.
+
 ## Desktop machine interface
 
 `storebound serve --stdio` is what the desktop app (`apps/desktop`, in progress) runs as its sidecar: newline-delimited
diff --git a/tests/mcp-public.test.ts b/tests/mcp-public.test.ts
new file mode 100644
index 0000000..2846cb8
--- /dev/null
+++ b/tests/mcp-public.test.ts
@@ -0,0 +1,270 @@
+import { describe, expect, test } from 'bun:test';
+import { readFileSync } from 'node:fs';
+import { createServer } from 'node:http';
+import { handle } from '../cli/mcp';
+import { PUBLIC_MAX_BODY, startHttp } from '../cli/mcp-http';
+import { clientKey, createLimiter, publicSurface, searchSections, sectionsOf, validatePublic } from '../cli/mcp-public';
+
+const noRun = async (): Promise<{ code: number; out: string }> => { throw new Error('a child process must never start in public mode'); };
+
+async function fakeItunes(): Promise<{ url: string; close: () => void; queries: string[] }> {
+  const queries: string[] = [];
+  const srv = createServer((req, res) => {
+    queries.push(req.url ?? '');
+    res.setHeader('content-type', 'application/json');
+    res.end(JSON.stringify({ resultCount: 2, results: [
+      { trackId: 111, trackName: 'Example One', sellerName: 'Example Studio', averageUserRating: 4.56789, userRatingCount: 1234, primaryGenreName: 'Games', bundleId: 'com.example.one', description: 'x'.repeat(5000) },
+      { trackId: 222, trackName: 'Example Two', sellerName: 'Other Studio', primaryGenreName: 'Productivity' },
+    ] }));
+  });
+  await new Promise<void>(r => srv.listen(0, '127.0.0.1', () => r()));
+  return { url: `http://127.0.0.1:${(srv.address() as { port: number }).port}/search`, close: () => srv.close(), queries };
+}
+
+type Reply = { error?: { message: string }; result?: { isError: boolean; content: { text: string }[]; structuredContent?: { result: any } } };
+/** One tools/call through the real handler, as the HTTP server does it. */
+async function call(surface: ReturnType<typeof publicSurface>, name: string, args: unknown): Promise<Reply> {
+  return (await handle({ jsonrpc: '2.0', id: 1, method: 'tools/call', params: { name, arguments: args as Record<string, unknown> } }, noRun, surface)) as Reply;
+}
+const text = (r: Reply) => r.result!.content[0]!.text;
+
+describe('tool list', () => {
+  const surface = publicSurface();
+  test('only the public tools, all read-only, closed schemas', async () => {
+    const r = (await handle({ jsonrpc: '2.0', id: 1, method: 'tools/list' }, noRun, surface))!.result as { tools: any[] };
+    expect(r.tools.map(t => t.name).sort()).toEqual(['aso_search', 'listing_lint', 'pitfalls_search', 'skill_get', 'skills_list', 'store_limits']);
+    for (const t of r.tools) {
+      expect(t.inputSchema.additionalProperties).toBe(false);
+      expect(t.annotations.readOnlyHint).toBe(true);
+      expect(t.annotations.destructiveHint).toBe(false);
+    }
+    expect(r.tools.find(t => t.name === 'aso_search').annotations.openWorldHint).toBe(true);
+    expect(r.tools.find(t => t.name === 'store_limits').annotations.openWorldHint).toBe(false);
+  });
+  test('initialize and server/discover say it is the public key-less server', async () => {
+    const init = (await handle({ jsonrpc: '2.0', id: 1, method: 'initialize', params: { protocolVersion: '2025-06-18' } }, noRun, surface))!.result as { instructions: string };
+    expect(init.instructions).toContain('public, key-less');
+    expect(init.instructions).toContain('npx storebound');
+    const meta = { 'io.modelcontextprotocol/protocolVersion': '2026-07-28', 'io.modelcontextprotocol/clientCapabilities': {} };
+    const d = (await handle({ jsonrpc: '2.0', id: 2, method: 'server/discover', params: { _meta: meta } }, noRun, surface))!.result as { instructions: string };
+    expect(d.instructions).toContain('public, key-less');
+  });
+  test('CLI tools are not reachable', async () => {
+    for (const name of ['check', 'play_listing', 'owner_step', 'validate', 'api_get']) {
+      const r = await call(surface, name, {});
+      expect(r.error?.message).toContain('Unknown tool');
+    }
+  });
+});
+
+describe('skills', () => {
+  const surface = publicSurface();
+  test('skills_list names every skill of the package', async () => {
+    const r = await call(surface, 'skills_list', {});
+    const skills = r.result!.structuredContent!.result.skills as { name: string; description: string }[];
+    expect(skills.length).toBeGreaterThan(20);
+    expect(skills.find(s => s.name === 'store-pitfalls')!.description.length).toBeGreaterThan(20);
+    expect(skills.every(s => /^[a-z0-9-]+$/.test(s.name) && !s.description.includes('\n'))).toBe(true);
+  });
+  test('skill_get returns the file text; bad names are refused', async () => {
+    const r = await call(surface, 'skill_get', { name: 'aso-basics' });
+    expect(r.result!.isError).toBe(false);
+    expect(text(r)).toContain('name: aso-basics');
+    for (const bad of ['../package', 'ASO-basics', 'no-such-skill', 'a/b', '']) expect((await call(surface, 'skill_get', { name: bad })).result!.isError).toBe(true);
+    expect((await call(surface, 'skill_get', {})).result!.isError).toBe(true);
+    expect((await call(surface, 'skill_get', { name: 'aso-basics', extra: 1 })).result!.isError).toBe(true);
+  });
+});
+
+describe('pitfalls_search', () => {
+  const surface = publicSurface();
+  test('finds sections, best first, at most 8', async () => {
+    const r = await call(surface, 'pitfalls_search', { query: 'keyword field length' });
+    expect(r.result!.isError).toBe(false);
+    expect(text(r)).toMatch(/^## /);
+    expect(text(r).toLowerCase()).toContain('keyword');
+    const m = r.result!.structuredContent!.result.matches as { score: number }[];
+    expect(m.length).toBeLessThanOrEqual(8);
+    expect(m.map(x => x.score)).toEqual([...m.map(x => x.score)].sort((a, b) => b - a));
+    expect(text(r).length).toBeLessThan(40_100);
+  });
+  test('store filter, no match, bad input', async () => {
+    expect((await call(surface, 'pitfalls_search', { query: 'screenshots', store: 'play' })).result!.isError).toBe(false);
+    expect(text(await call(surface, 'pitfalls_search', { query: 'zzqqxxnotaword' }))).toContain('No pitfall');
+    expect((await call(surface, 'pitfalls_search', { query: 'x', store: 'steam' })).result!.isError).toBe(true);
+    expect((await call(surface, 'pitfalls_search', { query: 'a' })).result!.isError).toBe(true);
+    expect((await call(surface, 'pitfalls_search', {})).result!.isError).toBe(true);
+  });
+  test('pure parts', () => {
+    const md = '# T\n\n## One\nalpha beta\n\n## Two\nbeta beta beta google play\n';
+    const s = sectionsOf(md);
+    expect(s.map(x => x.heading)).toEqual(['One', 'Two']);
+    expect(searchSections(s, 'beta')[0]!.heading).toBe('Two');
+    expect(searchSections(s, 'beta', 'apple').map(x => x.heading)).toEqual(['One']);
+    expect(searchSections(s, '   ')).toEqual([]);
+  });
+});
+
+describe('store_limits', () => {
+  const surface = publicSurface();
+  test('numbers come from the code', async () => {
+    const all = (await call(surface, 'store_limits', {})).result!.structuredContent!.result;
+    expect(all.apple.textLimitsCharacters).toMatchObject({ name: 30, subtitle: 30, keywords: 100 });
+    expect(all.play.textLimitsCharacters).toMatchObject({ title: 30, short: 80, full: 4000 });
+    expect(JSON.stringify(all.apple.screenshots)).toContain('1290x2796');
+    expect(JSON.stringify(all.play.screenshots)).toContain('1024x500');
+    const apple = (await call(surface, 'store_limits', { store: 'apple' })).result!.structuredContent!.result;
+    expect(Object.keys(apple)).toEqual(['apple']);
+    expect((await call(surface, 'store_limits', { store: 'x' })).result!.isError).toBe(true);
+  });
+});
+
+describe('listing_lint', () => {
+  const surface = publicSurface();
+  test('apple: limits, repeats, spaces; only sent fields are judged', async () => {
+    const r = await call(surface, 'listing_lint', { store: 'apple', fields: { name: 'Pixel Garden', subtitle: 'Grow plants', keywords: 'garden, plants,tiny,pixel' } });
+    expect(r.result!.isError).toBe(false);
+    const t = text(r);
+    expect(t).toContain('spaces around commas');
+    expect(t).toContain('already indexed');
+    expect(t).not.toContain('is required');
+    const long = await call(surface, 'listing_lint', { store: 'apple', fields: { name: 'N'.repeat(31) } });
+    expect(text(long)).toContain('ERROR name');
+    expect(text(long)).toContain('31/30');
+  });
+  test('play: stuffing, claims, limits', async () => {
+    const full = Array(120).fill('puzzle').join(' ') + ' fun games to enjoy daily with friends';
+    const r = await call(surface, 'listing_lint', { store: 'play', fields: { title: 'Best Puzzle', shortDescription: 'S'.repeat(81), fullDescription: full } });
+    const t = text(r);
+    expect(t).toContain('shortDescription is 81 characters');
+    expect(t).toContain('keyword stuffing');
+    expect(t).toContain('"best"');
+  });
+  test('bad input', async () => {
+    expect((await call(surface, 'listing_lint', { store: 'apple', fields: {} })).result!.isError).toBe(true);
+    expect((await call(surface, 'listing_lint', { store: 'apple', fields: { title: 'x' } })).result!.isError).toBe(true);
+    expect((await call(surface, 'listing_lint', { store: 'apple', fields: { name: 5 } })).result!.isError).toBe(true);
+    expect((await call(surface, 'listing_lint', { store: 'apple', fields: { name: 'x'.repeat(5001) } })).result!.isError).toBe(true);
+    expect((await call(surface, 'listing_lint', { store: 'apple', fields: { name: 'x' }, locale: 'en US!' })).result!.isError).toBe(true);
+    expect((await call(surface, 'listing_lint', { fields: { name: 'x' } })).result!.isError).toBe(true);
+  });
+});
+
+describe('aso_search (fake server only)', () => {
+  test('trims results, passes term, country and limit', async () => {
+    const fake = await fakeItunes();
+    try {
+      const surface = publicSurface({ searchBase: fake.url });
+      const r = await call(surface, 'aso_search', { term: 'pixel garden', country: 'DE', limit: 5 });
+      expect(r.result!.isError).toBe(false);
+      const res = r.result!.structuredContent!.result.results as Record<string, unknown>[];
+      expect(res[0]).toEqual({ rank: 1, name: 'Example One', developer: 'Example Studio', id: 111, rating: 4.57, ratingCount: 1234, genre: 'Games' });
+      expect(res[1]).toMatchObject({ id: 222, rating: null, ratingCount: 0 });
+      expect(JSON.stringify(res)).not.toContain('com.example.one');
+      expect(fake.queries[0]).toContain('term=pixel+garden');
+      expect(fake.queries[0]).toContain('country=de');
+      expect(fake.queries[0]).toContain('limit=5');
+      expect(fake.queries[0]).toContain('entity=software');
+    } finally { fake.close(); }
+  });
+  test('bad input is refused before any request; a failing server is an error result', async () => {
+    const fake = await fakeItunes();
+    try {
+      const surface = publicSurface({ searchBase: fake.url });
+      for (const bad of [{}, { term: '' }, { term: 'x', country: 'usa' }, { term: 'x', limit: 0 }, { term: 'x', limit: 26 }, { term: 'x', limit: 1.5 }, { term: 'x', url: 'http://evil.example.com' }])
+        expect((await call(surface, 'aso_search', bad)).result!.isError).toBe(true);
+      expect(fake.queries.length).toBe(0);
+    } finally { fake.close(); }
+    const dead = publicSurface({ searchBase: 'http://127.0.0.1:1/search' });
+    const r = await call(dead, 'aso_search', { term: 'x' });
+    expect(r.result!.isError).toBe(true);
+    expect(text(r)).toContain('Search failed');
+  });
+});
+
+describe('module design', () => {
+  test('mcp-public.ts has no process, runner, credential or cwd access', () => {
+    const src = readFileSync(new URL('../cli/mcp-public.ts', import.meta.url), 'utf8');
+    expect(src).not.toMatch(/child_process|\.\/lib\/runner|\.\/lib\/rt'|\.\/lib\/credentials|\.\/lib\/broker|process\.cwd|process\.env|spawn|exec\(/);
+  });
+  test('validatePublic', () => {
+    expect(validatePublic({ type: 'object', properties: { a: { type: 'string', maxLength: 2 } } }, { a: 'abc' })).toEqual(['a: at most 2 characters']);
+    expect(validatePublic({ type: 'object', properties: {} }, [])).toEqual(['arguments: must be an object']);
+  });
+});
+
+describe('rate limit', () => {
+  test('window counts, retry-after, sweep', () => {
+    let t = 1_000_000;
+    const l = createLimiter(3, () => t);
+    expect([1, 2, 3].map(() => l.hit('a').ok)).toEqual([true, true, true]);
+    const over = l.hit('a');
+    expect(over.ok).toBe(false);
+    expect(over.retryAfter).toBeGreaterThan(0);
+    expect(over.retryAfter).toBeLessThanOrEqual(60);
+    expect(l.hit('b').ok).toBe(true);
+    t += 61_000;
+    expect(l.hit('a').ok).toBe(true);
+  });
+  test('client key: forwarded header only when the proxy is trusted', () => {
+    expect(clientKey('client-a, proxy-1', 'proxy-1', true)).toBe('client-a');
+    expect(clientKey('client-a', 'proxy-1', false)).toBe('proxy-1');
+    expect(clientKey(undefined, 'proxy-1', true)).toBe('proxy-1');
+  });
+});
+
+describe('http, public mode', () => {
+  const post = (port: number, body: unknown, headers: Record<string, string> = {}) =>
+    fetch(`http://127.0.0.1:${port}/mcp`, { method: 'POST', headers: { 'content-type': 'application/json', ...headers }, body: typeof body === 'string' ? body : JSON.stringify(body) });
+  const base = { host: '127.0.0.1', port: 0, roots: [], project: null, allowOrigins: [], auth: { kind: 'none' } as const };
+
+  test('no sign-in, any origin, CORS preflight, tools/list, /health, GET 405', async () => {
+    const s = await startHttp({ ...base, public: { rate: 100, trustProxy: false } });
+    try {
+      const r = await post(s.port, { jsonrpc: '2.0', id: 1, method: 'tools/list' }, { origin: 'https://claude.example.com' });
+      expect(r.status).toBe(200);
+      expect(r.headers.get('access-control-allow-origin')).toBe('*');
+      expect(((await r.json()) as { result: { tools: unknown[] } }).result.tools.length).toBe(6);
+      const pre = await fetch(`http://127.0.0.1:${s.port}/mcp`, { method: 'OPTIONS', headers: { origin: 'https://claude.example.com', 'access-control-request-method': 'POST' } });
+      expect(pre.status).toBe(204);
+      expect((await fetch(`http://127.0.0.1:${s.port}/health`)).status).toBe(200);
+      expect((await fetch(`http://127.0.0.1:${s.port}/mcp`)).status).toBe(405);
+      const c = await post(s.port, { jsonrpc: '2.0', id: 2, method: 'tools/call', params: { name: 'check', arguments: { project: '/' } } });
+      expect(((await c.json()) as { error: { message: string } }).error.message).toContain('Unknown tool');
+      expect((await post(s.port, { jsonrpc: '2.0', method: 'notifications/initialized' })).status).toBe(202);
+    } finally { s.close(); }
+  });
+
+  test('429 with Retry-After over the limit; X-Forwarded-For counts only with trustProxy', async () => {
+    const s = await startHttp({ ...base, public: { rate: 2, trustProxy: false } });
+    try {
+      const ping = (h: Record<string, string> = {}) => post(s.port, { jsonrpc: '2.0', id: 1, method: 'ping' }, h);
+      expect((await ping({ 'x-forwarded-for': 'client-a' })).status).toBe(200);
+      expect((await ping({ 'x-forwarded-for': 'client-b' })).status).toBe(200); // not trusted: same client
+      const over = await ping({ 'x-forwarded-for': 'client-c' });
+      expect(over.status).toBe(429);
+      expect(Number(over.headers.get('retry-after'))).toBeGreaterThan(0);
+      expect((await fetch(`http://127.0.0.1:${s.port}/health`)).status).toBe(200); // health is not limited
+    } finally { s.close(); }
+    const t = await startHttp({ ...base, public: { rate: 1, trustProxy: true } });
+    try {
+      const ping = (ip: string) => post(t.port, { jsonrpc: '2.0', id: 1, method: 'ping' }, { 'x-forwarded-for': `${ip}, proxy-1` });
+      expect((await ping('client-a')).status).toBe(200);
+      expect((await ping('client-b')).status).toBe(200);
+      expect((await ping('client-a')).status).toBe(429);
+    } finally { t.close(); }
+  });
+
+  test('body over 64 KB is refused; bad JSON is a parse error', async () => {
+    const s = await startHttp({ ...base, public: { rate: 100, trustProxy: false } });
+    try {
+      const big = JSON.stringify({ jsonrpc: '2.0', id: 1, method: 'ping', params: { pad: 'x'.repeat(PUBLIC_MAX_BODY) } });
+      expect((await post(s.port, big)).status).toBe(413);
+      expect((await post(s.port, '{nope')).status).toBe(400);
+    } finally { s.close(); }
+  });
+
+  test('auth none needs public mode', async () => {
+    expect(() => startHttp({ ...base })).toThrow('only for --public');
+  });
+});

From 96207688972b88b2fbee136370eeb7dff62171c8 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Thu, 29 Oct 2026 19:05:53 +0700
Subject: [PATCH 065/126] mcp --http: SSE keepalive for long tool calls; public
 App Store search shares one 20-a-minute budget

---
 CHANGELOG.md             |  1 +
 cli/mcp-http.ts          | 23 +++++++++++++++++++----
 cli/mcp-public.ts        | 12 ++++++++++++
 docs/mcp.md              |  3 +++
 tests/mcp-http.test.ts   | 21 +++++++++++++++++++++
 tests/mcp-public.test.ts |  9 +++++++++
 6 files changed, 65 insertions(+), 4 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 0102a95..7d04989 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,7 @@
 
 ## Unreleased
 
+- `mcp --http`: a `tools/call` that accepts `text/event-stream` gets SSE keepalive comments every 20 s and then its result, so long calls survive proxies that cut silent responses. The public server's App Store search keeps one budget of 20 calls a minute (Apple's limit).
 - `storebound mcp --http --public`: a public, key-less MCP server (no sign-in, no store credentials, no project folders, no child processes, read-only). Tools: `skills_list`, `skill_get`, `pitfalls_search`, `store_limits`, `listing_lint` and `aso_search` (the public iTunes Search API, the only network call). Rate limit per client (`--rate`, 429 with Retry-After; `--trust-proxy` for X-Forwarded-For), 64 KB request bodies, CORS preflight. docs/mcp.md.
 
 ## 0.8.58 · 2026-10-29
diff --git a/cli/mcp-http.ts b/cli/mcp-http.ts
index 124c3bc..3c74e13 100644
--- a/cli/mcp-http.ts
+++ b/cli/mcp-http.ts
@@ -37,6 +37,9 @@ import { runCommand } from './lib/runner';
 export const DEFAULT_PORT = 7787;
 export const PUBLIC_PORT = 7788;
 const MAX_BODY = 4 * 1024 * 1024;
+/** SSE comment line interval while a tool call runs (proxies cut silent responses). */
+export let SSE_KEEPALIVE_MS = 20_000;
+export const setKeepaliveMs = (ms: number): void => { SSE_KEEPALIVE_MS = ms; };
 /** Public mode: one JSON-RPC message of a read-only tool never needs more. */
 export const PUBLIC_MAX_BODY = 64 * 1024;
 export const PUBLIC_DEFAULT_RATE = 60;
@@ -213,10 +216,22 @@ export function startHttp(o: HttpOptions): Promise<{ close: () => void; port: nu
     let msg: unknown;
     try { msg = JSON.parse(body); } catch { return send(res, 400, { jsonrpc: '2.0', id: null, error: { code: -32700, message: 'Parse error' } }); }
     if (Array.isArray(msg) || typeof msg !== 'object' || msg === null) return send(res, 400, { jsonrpc: '2.0', id: null, error: { code: -32600, message: 'One JSON-RPC message per request' } });
-    try {
-      const r = pub ? await handle(msg as never, noRun, pub.surface) : await answer(msg as Record<string, unknown>, o);
-      return r ? send(res, 200, r) : send(res, 202);
-    } catch (e) { return send(res, 500, { jsonrpc: '2.0', id: (msg as { id?: unknown }).id ?? null, error: { code: -32603, message: String((e as Error).message) } }); }
+    const work = (async () => {
+      try { return pub ? await handle(msg as never, noRun, pub.surface) : await answer(msg as Record<string, unknown>, o); }
+      catch (e) { return { jsonrpc: '2.0', id: (msg as { id?: unknown }).id ?? null, error: { code: -32603, message: String((e as Error).message) } }; }
+    })();
+    // A tool call may run for minutes; a proxy (Cloudflare: 100 s) cuts a response that sends nothing. A client that
+    // accepts SSE gets the answer as one SSE event with a comment line every 20 s until then.
+    if ((msg as { method?: unknown }).method === 'tools/call' && /text\/event-stream/.test(String(req.headers.accept ?? ''))) {
+      res.writeHead(200, { 'content-type': 'text/event-stream', 'cache-control': 'no-store', 'x-accel-buffering': 'no' });
+      res.write(': started\n\n');
+      const beat = setInterval(() => res.write(': keepalive\n\n'), SSE_KEEPALIVE_MS);
+      const r = await work.finally(() => clearInterval(beat));
+      res.end(`event: message\ndata: ${JSON.stringify(r)}\n\n`);
+      return;
+    }
+    const r = await work;
+    return r ? send(res, 200, r) : send(res, 202);
   });
   // a tool call can run for many minutes (check on a big project, uploads): Node's 300 s request timeout would cut it
   server.requestTimeout = 0;
diff --git a/cli/mcp-public.ts b/cli/mcp-public.ts
index 81387b4..75853ba 100644
--- a/cli/mcp-public.ts
+++ b/cli/mcp-public.ts
@@ -190,7 +190,19 @@ export function lintListing(store: 'apple' | 'play', fields: Record<string, unkn
 
 interface ItunesApp { trackId?: number; trackName?: string; sellerName?: string; averageUserRating?: number; userRatingCount?: number; primaryGenreName?: string }
 
+// Apple allows about 20 search calls a minute per IP: one shared budget for the whole server, whoever asks
+const SEARCH_PER_MIN = 20;
+const searchTimes: number[] = [];
+export function searchBudget(now = Date.now()): { ok: true } | { ok: false; retryAfter: number } {
+  while (searchTimes.length && searchTimes[0]! <= now - 60_000) searchTimes.shift();
+  if (searchTimes.length >= SEARCH_PER_MIN) return { ok: false, retryAfter: Math.ceil((searchTimes[0]! + 60_000 - now) / 1000) };
+  searchTimes.push(now);
+  return { ok: true };
+}
+
 export async function searchApps(term: string, country: string, limit: number, base: string, f: typeof fetch): Promise<{ results: Record<string, unknown>[] }> {
+  const b = searchBudget();
+  if (!b.ok) throw new Error(`the App Store search is busy (Apple allows ${SEARCH_PER_MIN} calls a minute for this server): try again in ${b.retryAfter} s`);
   const url = `${base}${base.includes('?') ? '&' : '?'}${new URLSearchParams({ term, country: country.toLowerCase(), media: 'software', entity: 'software', limit: String(limit) })}`;
   const r = await f(url, { signal: AbortSignal.timeout(10_000), headers: { accept: 'application/json' } });
   if (!r.ok) throw new Error(`the App Store search answered ${r.status}`);
diff --git a/docs/mcp.md b/docs/mcp.md
index e78393a..142dd27 100644
--- a/docs/mcp.md
+++ b/docs/mcp.md
@@ -56,6 +56,9 @@ refused unless `--allow-origin` names it.
   scope; docs/credential-broker.md). They reach each tool call as `STOREBOUND_PROFILE_<NAME>_*` env, held in memory for
   10 minutes and never written. A project picks its profile as usual (the config's `account`).
 - `project` may also be a folder name under the roots (a shared server keeps its checkouts there).
+- Long calls: a `tools/call` whose request accepts `text/event-stream` is answered as SSE, with a comment line every
+  20 s until the result arrives as one `message` event, so a proxy that cuts silent responses (Cloudflare: 100 s)
+  keeps the connection. Other requests get plain JSON.
 - `/health` answers `{ ok, version }` without auth.
 
 
diff --git a/tests/mcp-http.test.ts b/tests/mcp-http.test.ts
index 7c11426..2fc8ed0 100644
--- a/tests/mcp-http.test.ts
+++ b/tests/mcp-http.test.ts
@@ -138,3 +138,24 @@ describe('read-only and broker profiles', () => {
     } finally { srv.close(); }
   });
 });
+
+describe('long calls over SSE', () => {
+  test('a tools/call that accepts text/event-stream gets keepalive comments, then the answer as one event', async () => {
+    const { setKeepaliveMs } = await import('../cli/mcp-http');
+    setKeepaliveMs(50);
+    const s = await startHttp({ host: '127.0.0.1', port: 0, roots: [root], project: app, allowOrigins: [], auth: { kind: 'token', token: 'b'.repeat(64) } });
+    try {
+      const r = await fetch(`http://127.0.0.1:${s.port}/mcp`, { method: 'POST',
+        headers: { authorization: `Bearer ${'b'.repeat(64)}`, 'content-type': 'application/json', accept: 'application/json, text/event-stream' },
+        body: JSON.stringify({ jsonrpc: '2.0', id: 9, method: 'tools/call', params: { name: 'check', arguments: { project: '/nope' } } }) });
+      expect(r.headers.get('content-type')).toBe('text/event-stream');
+      const text = await r.text();
+      expect(text.startsWith(': started')).toBe(true);
+      const data = /event: message\ndata: (.*)\n\n$/.exec(text)!;
+      expect(JSON.parse(data[1]!)).toMatchObject({ id: 9, result: { isError: true } });
+      // JSON for everything else
+      const p = await fetch(`http://127.0.0.1:${s.port}/mcp`, { method: 'POST', headers: { authorization: `Bearer ${'b'.repeat(64)}`, 'content-type': 'application/json', accept: 'application/json, text/event-stream' }, body: JSON.stringify({ jsonrpc: '2.0', id: 1, method: 'ping' }) });
+      expect(p.headers.get('content-type')).toBe('application/json');
+    } finally { s.close(); setKeepaliveMs(20_000); }
+  });
+});
diff --git a/tests/mcp-public.test.ts b/tests/mcp-public.test.ts
index 2846cb8..c0b141e 100644
--- a/tests/mcp-public.test.ts
+++ b/tests/mcp-public.test.ts
@@ -268,3 +268,12 @@ describe('http, public mode', () => {
     expect(() => startHttp({ ...base })).toThrow('only for --public');
   });
 });
+
+test('App Store search keeps one shared budget of 20 calls a minute', async () => {
+  const { searchBudget } = await import('../cli/mcp-public');
+  const t0 = Date.now() + 3_600_000; // after any real call earlier in this file
+  let last: ReturnType<typeof searchBudget> = { ok: true };
+  for (let i = 0; i < 25; i++) last = searchBudget(t0 + i);
+  expect(last.ok).toBe(false);
+  expect(searchBudget(t0 + 61_000).ok).toBe(true);
+});

From 3b1c6160b5f0cda15a9efebbdb78832ddb5fed11 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Thu, 29 Oct 2026 19:06:22 +0700
Subject: [PATCH 066/126] docs: SSE keepalive for long tool calls

---
 docs/mcp.md | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/docs/mcp.md b/docs/mcp.md
index 142dd27..08a17ff 100644
--- a/docs/mcp.md
+++ b/docs/mcp.md
@@ -56,6 +56,9 @@ refused unless `--allow-origin` names it.
   scope; docs/credential-broker.md). They reach each tool call as `STOREBOUND_PROFILE_<NAME>_*` env, held in memory for
   10 minutes and never written. A project picks its profile as usual (the config's `account`).
 - `project` may also be a folder name under the roots (a shared server keeps its checkouts there).
+- Long calls: a `tools/call` whose request accepts `text/event-stream` is answered as SSE, with a comment line every
+  20 s until the result arrives as one `message` event, so a proxy that cuts silent responses (Cloudflare: 100 s)
+  keeps the connection. Other requests get plain JSON.
 - Long calls: a `tools/call` whose request accepts `text/event-stream` is answered as SSE, with a comment line every
   20 s until the result arrives as one `message` event, so a proxy that cuts silent responses (Cloudflare: 100 s)
   keeps the connection. Other requests get plain JSON.

From 17f57c6fb6d2deae38aaadca6e7a7ce52bcb3ac8 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Thu, 29 Oct 2026 19:10:28 +0700
Subject: [PATCH 067/126] storebound 0.8.59: version in package.json and every
 copy, CHANGELOG 0.8.59 section

---
 .claude-plugin/marketplace.json        | 2 +-
 .claude-plugin/plugin.json             | 2 +-
 .codex-plugin/plugin.json              | 2 +-
 CHANGELOG.md                           | 2 ++
 apps/desktop/package.json              | 2 +-
 apps/desktop/src-tauri/Cargo.lock      | 2 +-
 apps/desktop/src-tauri/Cargo.toml      | 2 +-
 apps/desktop/src-tauri/tauri.conf.json | 2 +-
 gemini-extension.json                  | 2 +-
 package.json                           | 2 +-
 10 files changed, 11 insertions(+), 9 deletions(-)

diff --git a/.claude-plugin/marketplace.json b/.claude-plugin/marketplace.json
index 43b2bab..1403a3f 100644
--- a/.claude-plugin/marketplace.json
+++ b/.claude-plugin/marketplace.json
@@ -9,7 +9,7 @@
       "name": "storebound",
       "source": ".",
       "description": "Take a mobile app or game from nothing to Submit for review on both stores: skills for every store step and questionnaire plus the storebound CLI and MCP server.",
-      "version": "0.8.58",
+      "version": "0.8.59",
       "category": "development",
       "tags": [
         "mobile",
diff --git a/.claude-plugin/plugin.json b/.claude-plugin/plugin.json
index 51296bb..9ef75b7 100644
--- a/.claude-plugin/plugin.json
+++ b/.claude-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.58",
+  "version": "0.8.59",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/.codex-plugin/plugin.json b/.codex-plugin/plugin.json
index 00cc3f1..485e4df 100644
--- a/.codex-plugin/plugin.json
+++ b/.codex-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.58",
+  "version": "0.8.59",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 7d04989..2a82ef1 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,8 @@
 
 ## Unreleased
 
+## 0.8.59 · 2026-10-29
+
 - `mcp --http`: a `tools/call` that accepts `text/event-stream` gets SSE keepalive comments every 20 s and then its result, so long calls survive proxies that cut silent responses. The public server's App Store search keeps one budget of 20 calls a minute (Apple's limit).
 - `storebound mcp --http --public`: a public, key-less MCP server (no sign-in, no store credentials, no project folders, no child processes, read-only). Tools: `skills_list`, `skill_get`, `pitfalls_search`, `store_limits`, `listing_lint` and `aso_search` (the public iTunes Search API, the only network call). Rate limit per client (`--rate`, 429 with Retry-After; `--trust-proxy` for X-Forwarded-For), 64 KB request bodies, CORS preflight. docs/mcp.md.
 
diff --git a/apps/desktop/package.json b/apps/desktop/package.json
index 7b9f632..4c36fe4 100644
--- a/apps/desktop/package.json
+++ b/apps/desktop/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@storebound/desktop",
-  "version": "0.8.58",
+  "version": "0.8.59",
   "private": true,
   "license": "MIT",
   "type": "module",
diff --git a/apps/desktop/src-tauri/Cargo.lock b/apps/desktop/src-tauri/Cargo.lock
index 496304a..7a2ea0a 100644
--- a/apps/desktop/src-tauri/Cargo.lock
+++ b/apps/desktop/src-tauri/Cargo.lock
@@ -4096,7 +4096,7 @@ checksum = "a2eb9349b6444b326872e140eb1cf5e7c522154d69e7a0ffb0fb81c06b37543f"
 
 [[package]]
 name = "storebound-desktop"
-version = "0.8.58"
+version = "0.8.59"
 dependencies = [
  "base64 0.22.1",
  "getrandom 0.3.4",
diff --git a/apps/desktop/src-tauri/Cargo.toml b/apps/desktop/src-tauri/Cargo.toml
index 05e2417..4d8dd15 100644
--- a/apps/desktop/src-tauri/Cargo.toml
+++ b/apps/desktop/src-tauri/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "storebound-desktop"
-version = "0.8.58"
+version = "0.8.59"
 description = "storebound desktop: every game's releases on both stores in one window"
 license = "MIT"
 edition = "2021"
diff --git a/apps/desktop/src-tauri/tauri.conf.json b/apps/desktop/src-tauri/tauri.conf.json
index deaff30..8d3540d 100644
--- a/apps/desktop/src-tauri/tauri.conf.json
+++ b/apps/desktop/src-tauri/tauri.conf.json
@@ -2,7 +2,7 @@
   "$schema": "https://schema.tauri.app/config/2",
   "productName": "storebound",
   "mainBinaryName": "storebound-desktop",
-  "version": "0.8.58",
+  "version": "0.8.59",
   "identifier": "dev.storebound.desktop",
   "build": {
     "frontendDist": "../dist",
diff --git a/gemini-extension.json b/gemini-extension.json
index fface3f..1eb98a9 100644
--- a/gemini-extension.json
+++ b/gemini-extension.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.58",
+  "version": "0.8.59",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "contextFileName": "GEMINI.md",
   "mcpServers": {
diff --git a/package.json b/package.json
index 59d9754..9570442 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.58",
+  "version": "0.8.59",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every store questionnaire (incl. account deletion and App Review demo accounts), privacy, icons, screenshots and previews, TestFlight. After launch: crash vitals, review replies, price sheets, analytics and Product Page Optimization. One config, a CLI (Node 20+ or Bun), an MCP server and Agent Skills for your AI coding agent.",
   "license": "MIT",
   "author": "CRTkafa",

From 96ec7ba60f0c9abea5937ba6203f2614dc2419e4 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Thu, 29 Oct 2026 19:40:29 +0700
Subject: [PATCH 068/126] desktop-release: sign by key path only (a
 TAURI_SIGNING_PRIVATE_KEY in the env made the signer refuse both)

---
 tools/desktop-release.ts | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/tools/desktop-release.ts b/tools/desktop-release.ts
index 21de8e1..974fb6c 100644
--- a/tools/desktop-release.ts
+++ b/tools/desktop-release.ts
@@ -220,7 +220,11 @@ function updaterKey(): string {
 function signFile(file: string): string {
   const key = updaterKey();
   rmSync(`${file}.sig`, { force: true });
-  run(['bunx', 'tauri', 'signer', 'sign', '-f', key, '-p', '', file], { cwd: APP_DIR, env: { ...process.env, TAURI_SIGNING_PRIVATE_KEY_PASSWORD: '' } });
+  // the key goes by path only: a TAURI_SIGNING_PRIVATE_KEY left in the env (a bundle step, the shell) made the signer
+  // refuse "--private-key-path cannot be used with --private-key" (0.8.59)
+  const env = { ...process.env, TAURI_SIGNING_PRIVATE_KEY_PASSWORD: '' };
+  delete env.TAURI_SIGNING_PRIVATE_KEY; delete env.TAURI_SIGNING_PRIVATE_KEY_PATH;
+  run(['bunx', 'tauri', 'signer', 'sign', '-f', key, '-p', '', file], { cwd: APP_DIR, env });
   const sig = readFileSync(`${file}.sig`, 'utf8').trim();
   const v = verifySig(readFileSync(file), sig, confPubkey());
   if (!v.ok) fail(`${basename(file)}: fresh signature does not verify (${v.reason})`);

From 02435de9664f3635f4141252e34769bbd8ad0f7b Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Thu, 29 Oct 2026 19:40:56 +0700
Subject: [PATCH 069/126] desktop-release: sign by key path only (a
 TAURI_SIGNING_PRIVATE_KEY in the env made the signer refuse both)

---
 tools/desktop-release.ts | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tools/desktop-release.ts b/tools/desktop-release.ts
index 974fb6c..fb60ab3 100644
--- a/tools/desktop-release.ts
+++ b/tools/desktop-release.ts
@@ -222,7 +222,7 @@ function signFile(file: string): string {
   rmSync(`${file}.sig`, { force: true });
   // the key goes by path only: a TAURI_SIGNING_PRIVATE_KEY left in the env (a bundle step, the shell) made the signer
   // refuse "--private-key-path cannot be used with --private-key" (0.8.59)
-  const env = { ...process.env, TAURI_SIGNING_PRIVATE_KEY_PASSWORD: '' };
+  const env: Record<string, string | undefined> = { ...process.env, TAURI_SIGNING_PRIVATE_KEY_PASSWORD: '' };
   delete env.TAURI_SIGNING_PRIVATE_KEY; delete env.TAURI_SIGNING_PRIVATE_KEY_PATH;
   run(['bunx', 'tauri', 'signer', 'sign', '-f', key, '-p', '', file], { cwd: APP_DIR, env });
   const sig = readFileSync(`${file}.sig`, 'utf8').trim();

From 0ea7292164b74861b810c88349516a8a7c82569a Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Thu, 29 Oct 2026 19:41:40 +0700
Subject: [PATCH 070/126] release --resume: a fixed tools/desktop-release.ts
 may be uncommitted too

---
 tools/release.ts | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/tools/release.ts b/tools/release.ts
index 3caac77..016d91f 100644
--- a/tools/release.ts
+++ b/tools/release.ts
@@ -278,8 +278,8 @@ async function main(): Promise<void> {
   const remote = remoteSessionReason(process.env, sh(['launchctl', 'managername'], { allowFail: true }).trim());
   if (remote) fail(`${remote}: signing and notarization need the owner's logged-in macOS session`);
   if (!existsSync(join(KEYS, 'updater.key'))) fail(`no updater key in ${KEYS.replace(HOME, '~')}`);
-  // --resume may run with a fixed release tool (tools/release*.ts), which is not part of what ships
-  const dirty = sh(['git', 'status', '--porcelain']).split('\n').filter(l => l.trim() && !(resume && /^ M tools\/release(-candidate)?\.ts$/.test(l)));
+  // --resume may run with a fixed release tool (tools/release*.ts, tools/desktop-release.ts), which is not part of what ships
+  const dirty = sh(['git', 'status', '--porcelain']).split('\n').filter(l => l.trim() && !(resume && /^ M tools\/(desktop-)?release(-candidate)?\.ts$/.test(l)));
   if (dirty.length) fail('the checkout has uncommitted changes');
   sh(['git', 'fetch', '--quiet', 'origin', 'main', '--tags']);
   const head = sh(['git', 'rev-parse', 'HEAD']).trim();

From ab69ce020c29558ab484e83c49b88e6a52c28329 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Thu, 29 Oct 2026 19:45:18 +0700
Subject: [PATCH 071/126] play build: absolute --dir stays absolute; gradlew
 without exec bit is made executable

---
 CHANGELOG.md             |  2 ++
 cli/lib/gradle.ts        |  5 +++--
 cli/lib/web-assets.ts    |  4 ++--
 cli/play/build.ts        |  7 ++++++-
 tests/gradle-dir.test.ts | 16 ++++++++++++++++
 5 files changed, 29 insertions(+), 5 deletions(-)
 create mode 100644 tests/gradle-dir.test.ts

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 2a82ef1..9825741 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,8 @@
 
 ## Unreleased
 
+- `play build`: an absolute `--dir` / `play.build.dir` stays absolute (it was taken as a folder under the project and lost its leading slash); a `gradlew` without the exec bit (committed from Windows) is made executable with a note to commit the mode. The desktop release signs by key path only.
+
 ## 0.8.59 · 2026-10-29
 
 - `mcp --http`: a `tools/call` that accepts `text/event-stream` gets SSE keepalive comments every 20 s and then its result, so long calls survive proxies that cut silent responses. The public server's App Store search keeps one budget of 20 calls a minute (Apple's limit).
diff --git a/cli/lib/gradle.ts b/cli/lib/gradle.ts
index 9d868bc..8d14617 100644
--- a/cli/lib/gradle.ts
+++ b/cli/lib/gradle.ts
@@ -3,7 +3,7 @@
 // properties through ORG_GRADLE_PROJECT_* variables, so passwords never appear on a command line), and read
 // package / versionCode / versionName back from the built AAB (its manifest is protocol buffers, aapt2 format).
 import { existsSync, readdirSync, readFileSync, statSync } from 'node:fs';
-import { join, relative } from 'node:path';
+import { join, relative, resolve } from 'node:path';
 import type { AndroidSigning } from './credentials';
 import * as rt from './rt';
 import { zipEntries, zipRead } from './zip';
@@ -38,7 +38,8 @@ export function pickGradle(root: string, cfg: PlayBuildConfig = {}): GradleTarge
     : ['capacitor.config.ts', 'capacitor.config.json', 'capacitor.config.js'].some(f => existsSync(join(root, f))) ? 'capacitor'
     : (() => { try { const p = JSON.parse(readFileSync(join(root, 'package.json'), 'utf8')); return !!(p.dependencies?.['react-native'] ?? p.devDependencies?.['react-native']); } catch { return false; } })() ? 'react-native'
     : 'native';
-  const dirs = cfg.dir ? [join(root, cfg.dir)] : [join(root, 'android'), root];
+  // resolve, not join: an absolute play.build.dir / --dir stays absolute (join made /Users/... a folder under the root)
+  const dirs = cfg.dir ? [resolve(root, cfg.dir)] : [join(root, 'android'), root];
   let dir = dirs.find(isGradleDir);
   if (!dir) throw new Error(`no Gradle project (settings.gradle) in ${dirs.map(d => relative(root, d) || '.').join(' or ')}: set play.build.dir${framework === 'capacitor' ? ' (or npx cap add android)' : ''}`);
   const unity = existsSync(join(dir, 'launcher')) && existsSync(join(dir, 'unityLibrary'));
diff --git a/cli/lib/web-assets.ts b/cli/lib/web-assets.ts
index 638b669..83d0179 100644
--- a/cli/lib/web-assets.ts
+++ b/cli/lib/web-assets.ts
@@ -14,7 +14,7 @@
 // The comparison (webStaleness) and the capacitor config reading (webDirOf) are pure.
 import { createHash } from 'node:crypto';
 import { existsSync, readdirSync, readFileSync, statSync } from 'node:fs';
-import { dirname, join, relative, sep } from 'node:path';
+import { dirname, join, relative, resolve, sep } from 'node:path';
 import type { ShipConfig } from './config';
 import { log, warn } from './log';
 import { pump } from './runner';
@@ -89,7 +89,7 @@ export function capacitorCandidates(root: string): string[] {
  */
 export function capacitorProject(root: string, hint?: string): CapProject | null {
   if (hint) {
-    for (let d = join(root, hint); ; d = dirname(d)) {
+    for (let d = resolve(root, hint); ; d = dirname(d)) {
       const rel = relative(root, d);
       if (rel.startsWith('..')) break;
       const c = capAt(root, rel.split(sep).join('/'));
diff --git a/cli/play/build.ts b/cli/play/build.ts
index 01e9155..cf87d69 100644
--- a/cli/play/build.ts
+++ b/cli/play/build.ts
@@ -14,7 +14,7 @@
 // Before Gradle runs, the app module's build file must read -PversionCode / -PversionName in defaultConfig (a literal
 // or an env var keeps the AAB at that value; android.injected.version.* does not override it for bundleRelease): a
 // warning with the exact line to use. After the build, an AAB whose versionCode is not the planned one is a hard stop.
-import { copyFileSync, existsSync, mkdirSync, writeFileSync } from 'node:fs';
+import { chmodSync, copyFileSync, existsSync, mkdirSync, statSync, writeFileSync } from 'node:fs';
 import { join, relative } from 'node:path';
 import { androidSigning } from '../lib/credentials';
 import type { Ctx } from '../lib/ctx';
@@ -108,6 +108,11 @@ export async function run(ctx: Ctx): Promise<void> {
   shipPhase('build', `${plan.task}, versionCode ${code || '?'}`);
   const started = Date.now();
   mkdirSync(out, { recursive: true });
+  // a gradlew committed from Windows has no exec bit: macOS / Linux then say "Executable not found: ./gradlew"
+  if (hasWrapper && process.platform !== 'win32') {
+    const w = join(t.dir, 'gradlew');
+    if ((statSync(w).mode & 0o111) === 0) { chmodSync(w, statSync(w).mode | 0o755); log(TAG, `${relative(root, w)} had no exec bit (committed from Windows?): made it executable; commit it with git update-index --chmod=+x`); }
+  }
   const p = rt.spawn(argv, { cwd, stdout: 'pipe', stderr: 'pipe', env: { ...process.env, ...androidSdkEnv(sdk), ...signingEnv(signing) } });
   const lines: string[] = [];
   const each = (line: string): void => {
diff --git a/tests/gradle-dir.test.ts b/tests/gradle-dir.test.ts
new file mode 100644
index 0000000..ebb5836
--- /dev/null
+++ b/tests/gradle-dir.test.ts
@@ -0,0 +1,16 @@
+import { expect, test } from 'bun:test';
+import { mkdirSync, mkdtempSync, rmSync, writeFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join, resolve } from 'node:path';
+import { pickGradle } from '../cli/lib/gradle';
+
+test('an absolute play.build.dir / --dir stays absolute (it lost its leading slash under the root)', () => {
+  const base = mkdtempSync(join(tmpdir(), 'gdir-'));
+  try {
+    const root = join(base, 'store'), android = join(base, 'other', 'apps', 'native', 'android');
+    mkdirSync(root, { recursive: true }); mkdirSync(join(android, 'app'), { recursive: true });
+    writeFileSync(join(android, 'settings.gradle'), "include ':app'\n");
+    expect(resolve(pickGradle(root, { dir: android }).dir)).toBe(resolve(android));
+    expect(resolve(pickGradle(root, { dir: '../other/apps/native/android' }).dir)).toBe(resolve(android));
+  } finally { rmSync(base, { recursive: true, force: true }); }
+});

From f5296cc9e95c85657be2fa6b64c80260123a4df6 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Thu, 29 Oct 2026 19:54:05 +0700
Subject: [PATCH 072/126] play release --dry: no bundle upload into a discarded
 edit (a long upload outlived it: edit expired); shows the planned tracks

---
 CHANGELOG.md              | 1 +
 cli/play/release.ts       | 9 +++++++++
 tests/idempotency.test.ts | 7 +++++++
 3 files changed, 17 insertions(+)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 9825741..96fafa0 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,7 @@
 
 ## Unreleased
 
+- `play release <aab> --dry` uploads nothing: it names the versionCode it would upload and the track changes it would make (the bundle went into a discarded edit, and a long upload could outlive the edit: "This edit has expired").
 - `play build`: an absolute `--dir` / `play.build.dir` stays absolute (it was taken as a folder under the project and lost its leading slash); a `gradlew` without the exec bit (committed from Windows) is made executable with a note to commit the mode. The desktop release signs by key path only.
 
 ## 0.8.59 · 2026-10-29
diff --git a/cli/play/release.ts b/cli/play/release.ts
index b1715e2..7ba7c8a 100644
--- a/cli/play/release.ts
+++ b/cli/play/release.ts
@@ -82,12 +82,20 @@ export async function run(ctx: Ctx): Promise<void> {
       }
       let code = fixed ?? '';
       let uploaded = false;
+      // a dry run never uploads: the bundle would go into an edit that is thrown away (14 MB for nothing, and a long
+      // upload can outlive the edit: "This edit has expired"); its tracks are shown, not PUT (Play refuses a track
+      // with a versionCode the edit does not have)
+      let planOnly = false;
       if (aab) {
         // a versionCode Play already has (an earlier run uploaded it) is reused, never uploaded twice
         const info = aabInfo(aab);
         if ((await usedVersionCodes(play, id)).includes(info.versionCode)) {
           code = String(info.versionCode);
           log('play', `versionCode ${code} is on Play already: not uploaded again`);
+        } else if (a.has('dry')) {
+          code = String(info.versionCode);
+          planOnly = true;
+          log('play', `dry run: would upload ${aab} (${(statSync(aab).size / 1048576).toFixed(1)} MB, versionCode ${code}); not uploaded`);
         } else {
           shipPhase('upload', `uploading ${aab}`, 0);
           log('play', `uploading ${aab} (${(statSync(aab).size / 1048576).toFixed(1)} MB), this can take minutes`);
@@ -108,6 +116,7 @@ export async function run(ctx: Ctx): Promise<void> {
         if (t.status === 'inProgress') release.userFraction = Number(fraction ?? 0.1);
         const cur = (await play.call<{ releases?: PlayTrackRelease[] }>('GET', `${play.API}/edits/${id}/tracks/${t.track}`).catch(() => ({ releases: [] }))).releases ?? [];
         if (sameRelease(cur, release)) { log('play', `${t.track}: already ${t.status} ${code}, unchanged`); continue; }
+        if (planOnly) { log('play', `dry run: ${t.track} <- ${code} (${t.status}, notes in ${notes.length} languages)`); changed++; continue; }
         await play.call('PUT', `${play.API}/edits/${id}/tracks/${t.track}`, { track: t.track, releases: [release] });
         changed++;
         log('play', `${t.track} <- ${code} (${t.status}, notes in ${notes.length} languages)`);
diff --git a/tests/idempotency.test.ts b/tests/idempotency.test.ts
index 39d22af..49f3775 100644
--- a/tests/idempotency.test.ts
+++ b/tests/idempotency.test.ts
@@ -573,6 +573,13 @@ describe('listing, appinfo, data safety and the owner commands: a second run wri
     expect(s.play.committed).toHaveLength(1);
   });
 
+  test('play release <aab> --dry: no upload, no track PUT (the bundle went into a discarded edit; a long upload outlived it: "This edit has expired")', async () => {
+    const p = project(CONFIG, { 'store/listing.md': LISTING, 'build/android/app.aab': makeAab('com.example.notes', 43) });
+    const r = await twice(() => playRelease(p.ctx([join(p.root, 'build/android/app.aab'), '--internal', 'completed', '--dry'])));
+    expect(r.first.filter(x => x.includes('/bundles') || x.startsWith('PUT '))).toEqual([]);
+    expect(s.play.committed).toHaveLength(0);
+  });
+
   test('prices import (Play): changed regions written once, then the diff is empty', async () => {
     const p = project({ ...CONFIG, products: [CONFIG.products![0]!] }, { 'store/prices.csv': 'product,store,region,currency,price\ncom.example.notes.pro,play,DE,EUR,3.49\n' });
     await capture(() => playProducts(p.ctx([])));

From 6ebb6560183edee9a26e7d3906d2691c77ca8f59 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Thu, 29 Oct 2026 19:59:49 +0700
Subject: [PATCH 073/126] apple listing: a new version inherits the previous
 version's release type when apple.releaseType is unset; warn when the config
 differs

---
 CHANGELOG.md                       |  1 +
 cli/apple/listing.ts               |  1 +
 cli/lib/listing-plan.ts            | 14 ++++++++++++--
 tests/listing-plan.test.ts         |  2 +-
 tests/release-type-inherit.test.ts | 16 ++++++++++++++++
 5 files changed, 31 insertions(+), 3 deletions(-)
 create mode 100644 tests/release-type-inherit.test.ts

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 96fafa0..cce219c 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,7 @@
 
 ## Unreleased
 
+- `apple listing` creates a new version with the release type of the newest version before it (MANUAL or AFTER_APPROVAL) when `apple.releaseType` is not set; a first version stays MANUAL. The plan names where the type came from, and warns when `apple.releaseType` differs from the previous version's.
 - `play release <aab> --dry` uploads nothing: it names the versionCode it would upload and the track changes it would make (the bundle went into a discarded edit, and a long upload could outlive the edit: "This edit has expired").
 - `play build`: an absolute `--dir` / `play.build.dir` stays absolute (it was taken as a folder under the project and lost its leading slash); a `gradlew` without the exec bit (committed from Windows) is made executable with a note to commit the mode. The desktop release signs by key path only.
 
diff --git a/cli/apple/listing.ts b/cli/apple/listing.ts
index 698b799..9649aa9 100644
--- a/cli/apple/listing.ts
+++ b/cli/apple/listing.ts
@@ -157,6 +157,7 @@ export function listingPlanLines(p: AppleListingPlan): string[] {
   const v = p.versionPlan;
   const out = [`Version ${p.version} (${platformLabel(p.platform)}; App Store Connect has: ${v.existing.length ? v.existing.map(x => `${x.versionString} ${x.state} ${platformLabel(x.platform)}`).join(', ') : `no ${platformLabel(p.platform)} version yet`})`];
   out.push(`  ${v.action === 'refuse' ? 'REFUSE' : v.action.toUpperCase()}: ${v.reason}`);
+  if (v.warning) out.push(`  WARN: ${v.warning}`);
   for (const ch of v.changes) out.push(`    ${ch.field}: ${v.action === 'create' ? short(ch.to) : `${short(ch.from)} -> ${short(ch.to)}`}`);
   if (p.build) out.push(`Build: ${p.build.action === 'refuse' ? 'REFUSE: ' : ''}${p.build.reason}`);
   out.push(`App info ${p.appInfo.state ? `(${p.appInfo.state})` : ''}: name, subtitle, privacy policy URL per locale · ${counts(p.appInfo.locales)}`);
diff --git a/cli/lib/listing-plan.ts b/cli/lib/listing-plan.ts
index 40edf0c..d6bb289 100644
--- a/cli/lib/listing-plan.ts
+++ b/cli/lib/listing-plan.ts
@@ -38,6 +38,8 @@ export interface VersionPlan {
   /** The editable version that is kept or updated. */
   id?: string;
   reason: string;
+  /** Said in the dry run and the real run (e.g. a release type that differs from the previous version's). */
+  warning?: string;
   existing: VersionInfo[];
   changes: FieldDiff[];
   attributes: Record<string, string>;
@@ -103,9 +105,17 @@ export function planVersion(rows: { id: string; attributes: Record<string, unkno
   if (busy) return refuse(`version ${busy.versionString} is ${busy.state}; App Store Connect allows one version in progress (${busy.state === 'PENDING_DEVELOPER_RELEASE'
     ? `release it first: storebound apple release --manual-release --version ${busy.versionString} --dry, then without --dry`
     : busy.state === 'WAITING_FOR_REVIEW' || busy.state === 'IN_REVIEW' ? 'wait for the review, or remove it from review in App Store Connect' : 'wait for its release or remove it from review'})`);
-  const attributes: Record<string, string> = { platform, versionString: want, copyright: attrs.copyright, releaseType: attrs.releaseType ?? 'MANUAL' };
+  // without apple.releaseType a new version keeps the release type of the newest one before it (Acme 2026-10-29: an
+  // app the owner set to release after approval got a MANUAL 2.0.2 and would have sat unreleased); a first version is MANUAL
+  const prev = others.slice().sort((a, b) => compareVersions(b.versionString, a.versionString))[0];
+  const prevType = prev ? rows.find(r => r.id === prev.id)?.attributes.releaseType : undefined;
+  const inherited = !attrs.releaseType && typeof prevType === 'string' && ['MANUAL', 'AFTER_APPROVAL'].includes(prevType) ? prevType : undefined;
+  const attributes: Record<string, string> = { platform, versionString: want, copyright: attrs.copyright, releaseType: attrs.releaseType ?? inherited ?? 'MANUAL' };
   if (attributes.releaseType === 'SCHEDULED' && attrs.earliestReleaseDate) attributes.earliestReleaseDate = attrs.earliestReleaseDate;
-  return { ...base, action: 'create', reason: `create version ${want} (no editable ${PLATFORM_LABEL[platform] ?? platform} version)`, changes: Object.entries(attributes).map(([field, to]) => ({ field, from: null, to })), attributes };
+  const why = attrs.releaseType ? 'apple.releaseType' : inherited ? `as version ${prev!.versionString}` : prev ? `version ${prev.versionString} has ${String(prevType ?? 'no readable type')}` : 'first version';
+  return { ...base, action: 'create', reason: `create version ${want} (no editable ${PLATFORM_LABEL[platform] ?? platform} version), release type ${attributes.releaseType} (${why})`,
+    changes: Object.entries(attributes).map(([field, to]) => ({ field, from: null, to })), attributes,
+    ...(attrs.releaseType && typeof prevType === 'string' && prevType !== attrs.releaseType ? { warning: `release type ${attrs.releaseType} (apple.releaseType) differs from version ${prev!.versionString} (${prevType})` } : {}) };
 }
 
 // ---- translation drafts ----
diff --git a/tests/listing-plan.test.ts b/tests/listing-plan.test.ts
index 638b555..a3acfbf 100644
--- a/tests/listing-plan.test.ts
+++ b/tests/listing-plan.test.ts
@@ -101,7 +101,7 @@ describe('apple listing plan', () => {
     const p = project({ ...BASE, play: undefined }, { 'store/appstore.md': APPLE_MD });
     const calls = ascRoutes([v('v-0', '1.0.0', 'READY_FOR_DISTRIBUTION')]);
     const j = jsonOut((await capture(() => appleListing(p.ctx(['--version', '1.1.0', '--dry', '--json'])))).out) as any;
-    expect(j.versionPlan).toMatchObject({ action: 'create', reason: 'create version 1.1.0 (no editable iOS version)' });
+    expect(j.versionPlan).toMatchObject({ action: 'create', reason: expect.stringContaining('create version 1.1.0 (no editable iOS version), release type MANUAL') });
     expect(j.versionLocales).toBeNull();
     await capture(() => appleListing(p.ctx(['--version', '1.1.0'])));
     expect(methods(calls).filter(m => m.includes('appStoreVersion'))).toEqual(['POST /v1/appStoreVersions', 'POST /v1/appStoreVersionLocalizations']);
diff --git a/tests/release-type-inherit.test.ts b/tests/release-type-inherit.test.ts
new file mode 100644
index 0000000..f2a8f76
--- /dev/null
+++ b/tests/release-type-inherit.test.ts
@@ -0,0 +1,16 @@
+import { expect, test } from 'bun:test';
+import { planVersion } from '../cli/lib/listing-plan';
+
+const row = (id: string, versionString: string, state: string, releaseType: string) => ({ id, attributes: { versionString, appStoreState: state, appVersionState: state, platform: 'IOS', releaseType } });
+
+test('a new version keeps the release type of the newest version before it unless apple.releaseType is set', () => {
+  const rows = [row('v1', '2.0.0', 'READY_FOR_DISTRIBUTION', 'MANUAL'), row('v2', '2.0.1', 'READY_FOR_DISTRIBUTION', 'AFTER_APPROVAL')];
+  const p = planVersion(rows, '2.0.2', { copyright: 'c' }, 'IOS');
+  expect(p.action).toBe('create');
+  expect(p.attributes.releaseType).toBe('AFTER_APPROVAL');
+  expect(p.reason).toContain('as version 2.0.1');
+  const set = planVersion(rows, '2.0.2', { copyright: 'c', releaseType: 'MANUAL' }, 'IOS');
+  expect(set.attributes.releaseType).toBe('MANUAL');
+  expect(set.warning).toContain('differs from version 2.0.1 (AFTER_APPROVAL)');
+  expect(planVersion([], '1.0.0', { copyright: 'c' }, 'IOS').attributes.releaseType).toBe('MANUAL');
+});

From 1c64320b6564428b990b4acde4956d2ab0d16a91 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Thu, 29 Oct 2026 20:04:08 +0700
Subject: [PATCH 074/126] desktop-release: a fixed release tool left
 uncommitted for release --resume does not make the build dirty

---
 tools/desktop-release.ts | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/tools/desktop-release.ts b/tools/desktop-release.ts
index fb60ab3..0db4cb6 100644
--- a/tools/desktop-release.ts
+++ b/tools/desktop-release.ts
@@ -285,7 +285,8 @@ function writeVersionFiles(out: string, manifest: Manifest): void {
 
 function gitState(): { commit: string; dirty: boolean } {
   const commit = run(['git', 'rev-parse', 'HEAD'], { cwd: ROOT }).out.trim();
-  const dirty = run(['git', 'status', '--porcelain'], { cwd: ROOT }).out.trim().length > 0;
+  // a fixed release tool (release --resume after a tool bug) is not part of what ships: the build stays clean
+  const dirty = run(['git', 'status', '--porcelain'], { cwd: ROOT }).out.split('\n').some(l => l.trim() && !/^ M tools\/(desktop-)?release(-candidate)?\.ts$/.test(l));
   return { commit, dirty };
 }
 

From edbcdad15d72dd44fb6a22b6158813ea66342c31 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Thu, 29 Oct 2026 20:21:52 +0700
Subject: [PATCH 075/126] gradle: comment without a home path

---
 cli/lib/gradle.ts | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/cli/lib/gradle.ts b/cli/lib/gradle.ts
index 8d14617..be988b6 100644
--- a/cli/lib/gradle.ts
+++ b/cli/lib/gradle.ts
@@ -38,7 +38,7 @@ export function pickGradle(root: string, cfg: PlayBuildConfig = {}): GradleTarge
     : ['capacitor.config.ts', 'capacitor.config.json', 'capacitor.config.js'].some(f => existsSync(join(root, f))) ? 'capacitor'
     : (() => { try { const p = JSON.parse(readFileSync(join(root, 'package.json'), 'utf8')); return !!(p.dependencies?.['react-native'] ?? p.devDependencies?.['react-native']); } catch { return false; } })() ? 'react-native'
     : 'native';
-  // resolve, not join: an absolute play.build.dir / --dir stays absolute (join made /Users/... a folder under the root)
+  // resolve, not join: an absolute play.build.dir / --dir stays absolute (join made an absolute path a folder under the root)
   const dirs = cfg.dir ? [resolve(root, cfg.dir)] : [join(root, 'android'), root];
   let dir = dirs.find(isGradleDir);
   if (!dir) throw new Error(`no Gradle project (settings.gradle) in ${dirs.map(d => relative(root, d) || '.').join(' or ')}: set play.build.dir${framework === 'capacitor' ? ' (or npx cap add android)' : ''}`);

From e185b61c8eb72a0cbb5532b1fadcf819f7fd9bd7 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Thu, 29 Oct 2026 20:24:54 +0700
Subject: [PATCH 076/126] storebound 0.8.60: version in package.json and every
 copy, CHANGELOG 0.8.60 section

---
 .claude-plugin/marketplace.json        | 2 +-
 .claude-plugin/plugin.json             | 2 +-
 .codex-plugin/plugin.json              | 2 +-
 CHANGELOG.md                           | 2 ++
 apps/desktop/package.json              | 2 +-
 apps/desktop/src-tauri/Cargo.lock      | 2 +-
 apps/desktop/src-tauri/Cargo.toml      | 2 +-
 apps/desktop/src-tauri/tauri.conf.json | 2 +-
 gemini-extension.json                  | 2 +-
 package.json                           | 2 +-
 10 files changed, 11 insertions(+), 9 deletions(-)

diff --git a/.claude-plugin/marketplace.json b/.claude-plugin/marketplace.json
index 1403a3f..0737002 100644
--- a/.claude-plugin/marketplace.json
+++ b/.claude-plugin/marketplace.json
@@ -9,7 +9,7 @@
       "name": "storebound",
       "source": ".",
       "description": "Take a mobile app or game from nothing to Submit for review on both stores: skills for every store step and questionnaire plus the storebound CLI and MCP server.",
-      "version": "0.8.59",
+      "version": "0.8.60",
       "category": "development",
       "tags": [
         "mobile",
diff --git a/.claude-plugin/plugin.json b/.claude-plugin/plugin.json
index 9ef75b7..7f422c2 100644
--- a/.claude-plugin/plugin.json
+++ b/.claude-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.59",
+  "version": "0.8.60",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/.codex-plugin/plugin.json b/.codex-plugin/plugin.json
index 485e4df..129826f 100644
--- a/.codex-plugin/plugin.json
+++ b/.codex-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.59",
+  "version": "0.8.60",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/CHANGELOG.md b/CHANGELOG.md
index cce219c..7db9e73 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,8 @@
 
 ## Unreleased
 
+## 0.8.60 · 2026-10-29
+
 - `apple listing` creates a new version with the release type of the newest version before it (MANUAL or AFTER_APPROVAL) when `apple.releaseType` is not set; a first version stays MANUAL. The plan names where the type came from, and warns when `apple.releaseType` differs from the previous version's.
 - `play release <aab> --dry` uploads nothing: it names the versionCode it would upload and the track changes it would make (the bundle went into a discarded edit, and a long upload could outlive the edit: "This edit has expired").
 - `play build`: an absolute `--dir` / `play.build.dir` stays absolute (it was taken as a folder under the project and lost its leading slash); a `gradlew` without the exec bit (committed from Windows) is made executable with a note to commit the mode. The desktop release signs by key path only.
diff --git a/apps/desktop/package.json b/apps/desktop/package.json
index 4c36fe4..81ca07b 100644
--- a/apps/desktop/package.json
+++ b/apps/desktop/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@storebound/desktop",
-  "version": "0.8.59",
+  "version": "0.8.60",
   "private": true,
   "license": "MIT",
   "type": "module",
diff --git a/apps/desktop/src-tauri/Cargo.lock b/apps/desktop/src-tauri/Cargo.lock
index 7a2ea0a..2f3a701 100644
--- a/apps/desktop/src-tauri/Cargo.lock
+++ b/apps/desktop/src-tauri/Cargo.lock
@@ -4096,7 +4096,7 @@ checksum = "a2eb9349b6444b326872e140eb1cf5e7c522154d69e7a0ffb0fb81c06b37543f"
 
 [[package]]
 name = "storebound-desktop"
-version = "0.8.59"
+version = "0.8.60"
 dependencies = [
  "base64 0.22.1",
  "getrandom 0.3.4",
diff --git a/apps/desktop/src-tauri/Cargo.toml b/apps/desktop/src-tauri/Cargo.toml
index 4d8dd15..1ddfab9 100644
--- a/apps/desktop/src-tauri/Cargo.toml
+++ b/apps/desktop/src-tauri/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "storebound-desktop"
-version = "0.8.59"
+version = "0.8.60"
 description = "storebound desktop: every game's releases on both stores in one window"
 license = "MIT"
 edition = "2021"
diff --git a/apps/desktop/src-tauri/tauri.conf.json b/apps/desktop/src-tauri/tauri.conf.json
index 8d3540d..6f03b36 100644
--- a/apps/desktop/src-tauri/tauri.conf.json
+++ b/apps/desktop/src-tauri/tauri.conf.json
@@ -2,7 +2,7 @@
   "$schema": "https://schema.tauri.app/config/2",
   "productName": "storebound",
   "mainBinaryName": "storebound-desktop",
-  "version": "0.8.59",
+  "version": "0.8.60",
   "identifier": "dev.storebound.desktop",
   "build": {
     "frontendDist": "../dist",
diff --git a/gemini-extension.json b/gemini-extension.json
index 1eb98a9..01ee8b9 100644
--- a/gemini-extension.json
+++ b/gemini-extension.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.59",
+  "version": "0.8.60",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "contextFileName": "GEMINI.md",
   "mcpServers": {
diff --git a/package.json b/package.json
index 9570442..9667245 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.59",
+  "version": "0.8.60",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every store questionnaire (incl. account deletion and App Review demo accounts), privacy, icons, screenshots and previews, TestFlight. After launch: crash vitals, review replies, price sheets, analytics and Product Page Optimization. One config, a CLI (Node 20+ or Bun), an MCP server and Agent Skills for your AI coding agent.",
   "license": "MIT",
   "author": "CRTkafa",

From 1abd0936c3dbe2cc0bd2fe8bce1a6662492839f3 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Thu, 29 Oct 2026 22:33:59 +0700
Subject: [PATCH 077/126] testflight: description keys by language id or App
 Store locale, unknown keys are a config error, primary-locale check before
 Beta App Review

---
 CHANGELOG.md                        |  1 +
 cli/apple/testflight.ts             | 10 ++++++++++
 cli/lib/config.ts                   |  2 +-
 cli/lib/testflight.ts               | 10 ++++++++--
 tests/helpers/fake-stores.ts        |  1 +
 tests/tf-description-locale.test.ts | 14 ++++++++++++++
 6 files changed, 35 insertions(+), 3 deletions(-)
 create mode 100644 tests/tf-description-locale.test.ts

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 7db9e73..39ef0f6 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,7 @@
 
 ## Unreleased
 
+- TestFlight: `apple.testflight.description` takes a language id or its App Store locale (`en` or `en-US`; an `en-US` key was skipped silently), `check` names an unknown key, and `distribute --submit-review` stops (dry run: warns) when the app's primary locale has no beta localization (Beta App Review answers 422 MISSING_BETA_APP_LOCALIZATION).
 ## 0.8.60 · 2026-10-29
 
 - `apple listing` creates a new version with the release type of the newest version before it (MANUAL or AFTER_APPROVAL) when `apple.releaseType` is not set; a first version stays MANUAL. The plan names where the type came from, and warns when `apple.releaseType` differs from the previous version's.
diff --git a/cli/apple/testflight.ts b/cli/apple/testflight.ts
index 8f70951..24f35d4 100644
--- a/cli/apple/testflight.ts
+++ b/cli/apple/testflight.ts
@@ -319,6 +319,16 @@ export async function run(ctx: Ctx): Promise<void> {
     if (a.has('submit-review') && review) log(TAG, `beta review: already submitted (${review.attributes?.betaReviewState ?? '?'})`);
     if (external.length && !a.has('submit-review') && b.detail?.externalBuildState === 'READY_FOR_BETA_SUBMISSION')
       warn(TAG, 'external testers only get the build after Beta App Review: add --submit-review (asks first) or submit it in App Store Connect');
+    // Beta App Review refuses a build whose app has no beta localization in its primary locale (422
+    // MISSING_BETA_APP_LOCALIZATION): said before the submit, in the dry run too
+    if (wantsReview) {
+      const primary = String((await c.maybe(`/v1/apps/${appId}?fields[apps]=primaryLocale`))?.data?.attributes?.primaryLocale ?? '');
+      const have = (await c.all(`/v1/apps/${appId}/betaAppLocalizations?limit=200`)).map((l: J) => String(l.attributes.locale));
+      if (primary && !have.includes(primary)) {
+        const msg = `Beta App Review needs test information in the app's primary locale ${primary} (has: ${have.join(', ') || 'none'}): add it to apple.testflight.description (key ${primary} or its language id), then storebound apple testflight info`;
+        if (dry) warn(TAG, msg); else throw new Error(msg);
+      }
+    }
     if (dry) {
       await execute(c.asc, [...reqs, ...(wantsReview ? [betaReviewReq(b.id)] : [])], { dry, tag: TAG });
       done(TAG, 'distribute checked (dry run)');
diff --git a/cli/lib/config.ts b/cli/lib/config.ts
index cda074e..aea46a9 100644
--- a/cli/lib/config.ts
+++ b/cli/lib/config.ts
@@ -1210,7 +1210,7 @@ export function validateConfig(c: unknown): string[] {
     const enc = cfg.apple.usesNonExemptEncryption;
     if (enc !== undefined && typeof enc !== 'boolean') e.push('apple.usesNonExemptEncryption: true | false');
     if (cfg.apple.screenshotTypes && !cfg.apple.screenshotTypes.every(t => /^APP_[A-Z0-9_]+$/.test(t))) e.push('apple.screenshotTypes: display types like APP_IPHONE_67');
-    e.push(...validateTestflight(cfg.apple.testflight));
+    e.push(...validateTestflight(cfg.apple.testflight, cfg.languages ?? []));
     e.push(...validateSigning(cfg.apple.signing), ...validateAppleBuild(cfg.apple.build));
     const catalogIds = new Set([...(cfg.products ?? []).map(p => p.id), ...(cfg.subscriptions ?? []).flatMap(g => (g.subscriptions ?? []).map(x => x.id))]);
     e.push(...validatePromoted(cfg.apple.promoted, catalogIds));
diff --git a/cli/lib/testflight.ts b/cli/lib/testflight.ts
index 41c0639..b1bffc6 100644
--- a/cli/lib/testflight.ts
+++ b/cli/lib/testflight.ts
@@ -54,9 +54,14 @@ export const groupFromApi = (g: { id: string; attributes: Record<string, unknown
 });
 
 /** Problems with the testflight config. Pure. */
-export function validateTestflight(t: TfConfig | undefined): string[] {
+export function validateTestflight(t: TfConfig | undefined, langs: { id: string; apple?: string }[] = []): string[] {
   if (!t) return [];
   const e: string[] = [];
+  if (t.description && typeof t.description === 'object' && langs.length) {
+    const known = new Set(langs.flatMap(l => [l.id, ...(l.apple ? [l.apple] : [])]));
+    const bad = Object.keys(t.description).filter(k => !known.has(k));
+    if (bad.length) e.push(`apple.testflight.description: ${bad.map(k => `'${k}'`).join(', ')} is not a language of the config (use a language id or its App Store locale: ${langs.filter(l => l.apple).map(l => `${l.id} / ${l.apple}`).join(', ')})`);
+  }
   const names = new Set<string>();
   for (const [i, g] of (t.groups ?? []).entries()) {
     const at = `apple.testflight.groups[${i}]`;
@@ -315,7 +320,8 @@ export function betaDescriptions(t: TfConfig | undefined, langs: { id: string; a
   const out: Record<string, string> = {};
   for (const l of langs) {
     if (!l.apple) continue;
-    const d = typeof t.description === 'string' ? t.description : t.description[l.id];
+    // a language id ('en') or its App Store locale ('en-US'): an 'en-US' key was silently skipped (Acme 2026-10-29)
+    const d = typeof t.description === 'string' ? t.description : (t.description[l.id] ?? t.description[l.apple]);
     if (d) out[l.apple] = d;
   }
   return out;
diff --git a/tests/helpers/fake-stores.ts b/tests/helpers/fake-stores.ts
index 272ec93..f5497e9 100644
--- a/tests/helpers/fake-stores.ts
+++ b/tests/helpers/fake-stores.ts
@@ -15,6 +15,7 @@ const UPLOAD_HOST = 'https://upload.example.com/';
 
 /** list relationship -> resource type of its items (parent type / relationship name); `one` for to-one relationships. */
 const LISTS: Record<string, { type: string; one?: boolean }> = {
+  'apps/betaAppLocalizations': { type: 'betaAppLocalizations' },
   'apps/inAppPurchasesV2': { type: 'inAppPurchases' },
   'inAppPurchases/inAppPurchaseLocalizations': { type: 'inAppPurchaseLocalizations' },
   'inAppPurchases/iapPriceSchedule': { type: 'inAppPurchasePriceSchedules', one: true },
diff --git a/tests/tf-description-locale.test.ts b/tests/tf-description-locale.test.ts
new file mode 100644
index 0000000..0a52026
--- /dev/null
+++ b/tests/tf-description-locale.test.ts
@@ -0,0 +1,14 @@
+import { expect, test } from 'bun:test';
+import { betaDescriptions, validateTestflight } from '../cli/lib/testflight';
+
+const langs = [{ id: 'en', apple: 'en-US' }, { id: 'tr', apple: 'tr' }];
+
+test('beta descriptions take a language id or its App Store locale ("en-US" was skipped silently)', () => {
+  expect(betaDescriptions({ description: { 'en-US': 'Hello', tr: 'Merhaba' } }, langs)).toEqual({ 'en-US': 'Hello', tr: 'Merhaba' });
+  expect(betaDescriptions({ description: { en: 'Hello' } }, langs)).toEqual({ 'en-US': 'Hello' });
+});
+
+test('an unknown description key is a config error naming the accepted keys', () => {
+  expect(validateTestflight({ description: { 'en-US': 'x', de: 'y' } }, langs).join()).toContain("'de' is not a language of the config");
+  expect(validateTestflight({ description: { 'en-US': 'x', tr: 'y' } }, langs)).toEqual([]);
+});

From 9b0cc0bf108c006810fe1c5dccb022ceee4a3410 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Thu, 29 Oct 2026 22:37:03 +0700
Subject: [PATCH 078/126] regenerate the api coverage tables

---
 cli/api/wrapped.gen.ts | 2 +-
 docs/api-coverage.md   | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/cli/api/wrapped.gen.ts b/cli/api/wrapped.gen.ts
index e3836c5..87c30a2 100644
--- a/cli/api/wrapped.gen.ts
+++ b/cli/api/wrapped.gen.ts
@@ -96,7 +96,7 @@ export const WRAPPED: { apple: Record<string, string>; play: Record<string, stri
     'apps_customerReviews_getToManyRelated': 'reviews',
     'apps_gameCenterDetail_getToOneRelated': 'apple/game-center',
     'apps_getCollection': 'apple/asc apple/bundle apps console/app-id console/verify lib/store-apps',
-    'apps_getInstance': 'apple/appinfo apple/status apps onboard watch',
+    'apps_getInstance': 'apple/appinfo apple/status apple/testflight apps onboard watch',
     'apps_inAppPurchasesV2_getToManyRelated': 'apple/first-products apple/iap apple/iap-review apple/iap-submit apple/offer-codes apple/promoted apple/status catalog prices validate',
     'apps_perfPowerMetrics_getToManyRelated': 'health',
     'apps_promotedPurchases_getToManyRelated': 'apple/promoted',
diff --git a/docs/api-coverage.md b/docs/api-coverage.md
index f1ca57c..6ffd6c3 100644
--- a/docs/api-coverage.md
+++ b/docs/api-coverage.md
@@ -459,7 +459,7 @@ Specs: Apple [App Store Connect API 4.5.1](https://developer.apple.com/sample-co
 | `apps_gameCenterEnabledVersions_getToManyRelated` | GET | `/v1/apps/{id}/gameCenterEnabledVersions` | read |  |
 | `apps_gameCenterEnabledVersions_getToManyRelationship` | GET | `/v1/apps/{id}/relationships/gameCenterEnabledVersions` | read |  |
 | `apps_getCollection` | GET | `/v1/apps` | read | apple/asc, apple/bundle, apps, console/app-id, console/verify, lib/store-apps |
-| `apps_getInstance` | GET | `/v1/apps/{id}` | read | apple/appinfo, apple/status, apps, onboard, watch |
+| `apps_getInstance` | GET | `/v1/apps/{id}` | read | apple/appinfo, apple/status, apple/testflight, apps, onboard, watch |
 | `apps_inAppPurchasesV2_getToManyRelated` | GET | `/v1/apps/{id}/inAppPurchasesV2` | read | apple/first-products, apple/iap, apple/iap-review, apple/iap-submit, apple/offer-codes, apple/promoted, apple/status, catalog, prices, validate |
 | `apps_inAppPurchasesV2_getToManyRelationship` | GET | `/v1/apps/{id}/relationships/inAppPurchasesV2` | read |  |
 | `apps_inAppPurchases_getToManyRelated` | GET | `/v1/apps/{id}/inAppPurchases` | read |  |

From 064a708fdb08724c1710e1f812ccfeed280e5d2d Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Thu, 29 Oct 2026 22:40:00 +0700
Subject: [PATCH 079/126] storebound 0.8.61: version in package.json and every
 copy, CHANGELOG 0.8.61 section

---
 .claude-plugin/marketplace.json        | 2 +-
 .claude-plugin/plugin.json             | 2 +-
 .codex-plugin/plugin.json              | 2 +-
 CHANGELOG.md                           | 2 ++
 apps/desktop/package.json              | 2 +-
 apps/desktop/src-tauri/Cargo.lock      | 2 +-
 apps/desktop/src-tauri/Cargo.toml      | 2 +-
 apps/desktop/src-tauri/tauri.conf.json | 2 +-
 gemini-extension.json                  | 2 +-
 package.json                           | 2 +-
 10 files changed, 11 insertions(+), 9 deletions(-)

diff --git a/.claude-plugin/marketplace.json b/.claude-plugin/marketplace.json
index 0737002..eff0a86 100644
--- a/.claude-plugin/marketplace.json
+++ b/.claude-plugin/marketplace.json
@@ -9,7 +9,7 @@
       "name": "storebound",
       "source": ".",
       "description": "Take a mobile app or game from nothing to Submit for review on both stores: skills for every store step and questionnaire plus the storebound CLI and MCP server.",
-      "version": "0.8.60",
+      "version": "0.8.61",
       "category": "development",
       "tags": [
         "mobile",
diff --git a/.claude-plugin/plugin.json b/.claude-plugin/plugin.json
index 7f422c2..2b04ad5 100644
--- a/.claude-plugin/plugin.json
+++ b/.claude-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.60",
+  "version": "0.8.61",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/.codex-plugin/plugin.json b/.codex-plugin/plugin.json
index 129826f..75e64f5 100644
--- a/.codex-plugin/plugin.json
+++ b/.codex-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.60",
+  "version": "0.8.61",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 39ef0f6..e9f4aca 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,8 @@
 
 ## Unreleased
 
+## 0.8.61 · 2026-10-29
+
 - TestFlight: `apple.testflight.description` takes a language id or its App Store locale (`en` or `en-US`; an `en-US` key was skipped silently), `check` names an unknown key, and `distribute --submit-review` stops (dry run: warns) when the app's primary locale has no beta localization (Beta App Review answers 422 MISSING_BETA_APP_LOCALIZATION).
 ## 0.8.60 · 2026-10-29
 
diff --git a/apps/desktop/package.json b/apps/desktop/package.json
index 81ca07b..b39d7e5 100644
--- a/apps/desktop/package.json
+++ b/apps/desktop/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@storebound/desktop",
-  "version": "0.8.60",
+  "version": "0.8.61",
   "private": true,
   "license": "MIT",
   "type": "module",
diff --git a/apps/desktop/src-tauri/Cargo.lock b/apps/desktop/src-tauri/Cargo.lock
index 2f3a701..76ea477 100644
--- a/apps/desktop/src-tauri/Cargo.lock
+++ b/apps/desktop/src-tauri/Cargo.lock
@@ -4096,7 +4096,7 @@ checksum = "a2eb9349b6444b326872e140eb1cf5e7c522154d69e7a0ffb0fb81c06b37543f"
 
 [[package]]
 name = "storebound-desktop"
-version = "0.8.60"
+version = "0.8.61"
 dependencies = [
  "base64 0.22.1",
  "getrandom 0.3.4",
diff --git a/apps/desktop/src-tauri/Cargo.toml b/apps/desktop/src-tauri/Cargo.toml
index 1ddfab9..5429871 100644
--- a/apps/desktop/src-tauri/Cargo.toml
+++ b/apps/desktop/src-tauri/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "storebound-desktop"
-version = "0.8.60"
+version = "0.8.61"
 description = "storebound desktop: every game's releases on both stores in one window"
 license = "MIT"
 edition = "2021"
diff --git a/apps/desktop/src-tauri/tauri.conf.json b/apps/desktop/src-tauri/tauri.conf.json
index 6f03b36..2360261 100644
--- a/apps/desktop/src-tauri/tauri.conf.json
+++ b/apps/desktop/src-tauri/tauri.conf.json
@@ -2,7 +2,7 @@
   "$schema": "https://schema.tauri.app/config/2",
   "productName": "storebound",
   "mainBinaryName": "storebound-desktop",
-  "version": "0.8.60",
+  "version": "0.8.61",
   "identifier": "dev.storebound.desktop",
   "build": {
     "frontendDist": "../dist",
diff --git a/gemini-extension.json b/gemini-extension.json
index 01ee8b9..ac06fb9 100644
--- a/gemini-extension.json
+++ b/gemini-extension.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.60",
+  "version": "0.8.61",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "contextFileName": "GEMINI.md",
   "mcpServers": {
diff --git a/package.json b/package.json
index 9667245..b72b748 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.60",
+  "version": "0.8.61",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every store questionnaire (incl. account deletion and App Review demo accounts), privacy, icons, screenshots and previews, TestFlight. After launch: crash vitals, review replies, price sheets, analytics and Product Page Optimization. One config, a CLI (Node 20+ or Bun), an MCP server and Agent Skills for your AI coding agent.",
   "license": "MIT",
   "author": "CRTkafa",

From 724f5b976332c721a048182a5a20e5bc59f9951f Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Fri, 30 Oct 2026 00:16:11 +0700
Subject: [PATCH 080/126] apple build: a line before each slow step (App Store
 Connect reads, device families, web build)

---
 CHANGELOG.md       | 1 +
 cli/apple/build.ts | 4 ++++
 2 files changed, 5 insertions(+)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index e9f4aca..02edc77 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,7 @@
 
 ## Unreleased
 
+- `apple build` prints a line before each slow step (App Store Connect reads, device families, web build), so a run without a terminal that stalls shows where.
 ## 0.8.61 · 2026-10-29
 
 - TestFlight: `apple.testflight.description` takes a language id or its App Store locale (`en` or `en-US`; an `en-US` key was skipped silently), `check` names an unknown key, and `distribute --submit-review` stops (dry run: warns) when the app's primary locale has no beta localization (Beta App Review answers 422 MISSING_BETA_APP_LOCALIZATION).
diff --git a/cli/apple/build.ts b/cli/apple/build.ts
index d877447..caefc02 100644
--- a/cli/apple/build.ts
+++ b/cli/apple/build.ts
@@ -172,6 +172,8 @@ export async function run(ctx: Ctx): Promise<void> {
   let build = a.get('build-number');
   let teamId = signing.teamId ?? null;
   if (!build || !teamId) {
+    // a line before each slow step: a run without a terminal (launchd job, CI) that stalls shows where
+    log(TAG, `reading App Store Connect (${[!build ? 'next build number' : '', !teamId ? 'team id' : ''].filter(Boolean).join(', ')})`);
     try {
       const c = await ascClient(root, bundleId, config.apple?.appId);
       if (!build) {
@@ -191,6 +193,7 @@ export async function run(ctx: Ctx): Promise<void> {
   // device families: an upload that drops one the live version supports (iPad) is refused only AFTER the archive (ITMS-90101)
   // so compare first: stop before building with the exact fix (--allow-device-gap builds anyway)
   let deviceFamilies: FamilyVerdict[] = [];
+  log(TAG, 'reading the device families of the live version');
   try {
     const c = await ascClient(root, bundleId, config.apple?.appId);
     deviceFamilies = familyVerdicts({ live: await liveDeviceFamilies(c, await c.app()), project: projectFamilies(root, bundleId, target.project), ipad: config.apple?.ipad });
@@ -268,6 +271,7 @@ export async function run(ctx: Ctx): Promise<void> {
     else addToSearchList(keychain!);
   }
   shipPhase('prebuild', 'web build / prebuild');
+  log(TAG, 'web build / prebuild step');
   const web = await webStep({ ...webOpts, dry: false });
   for (const n of target.notes) log(TAG, n);
   const rsync = foreignRsync(process.env.PATH);

From 152e40fb8ab83a39da45c3fec3059cebbc083ed2 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Fri, 30 Oct 2026 00:26:07 +0700
Subject: [PATCH 081/126] doctor: warn when storebound runs from a folder macOS
 guards (a launchd job hangs opening it)

---
 CHANGELOG.md             |  1 +
 cli/doctor.ts            | 19 ++++++++++++++++++-
 tests/doctor-tcc.test.ts |  9 +++++++++
 3 files changed, 28 insertions(+), 1 deletion(-)
 create mode 100644 tests/doctor-tcc.test.ts

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 02edc77..baaae38 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,7 @@
 
 ## Unreleased
 
+- `doctor` warns when storebound runs from a folder macOS guards (~/Desktop, ~/Documents, ~/Downloads, iCloud Drive; e.g. a `bun link` to a checkout there): a launchd job or CI agent without access to it blocks in open() with no output.
 - `apple build` prints a line before each slow step (App Store Connect reads, device families, web build), so a run without a terminal that stalls shows where.
 ## 0.8.61 · 2026-10-29
 
diff --git a/cli/doctor.ts b/cli/doctor.ts
index cfd4830..4cf63f8 100644
--- a/cli/doctor.ts
+++ b/cli/doctor.ts
@@ -4,7 +4,8 @@
 //   storebound doctor [--dir .] [--json]
 //   storebound doctor --install <tool> [--yes]   runs this OS's install command for one tool (winget / brew / apt);
 //                                                without --yes only prints it. Never sudo, never an admin prompt.
-import { existsSync } from 'node:fs';
+import { existsSync, realpathSync } from 'node:fs';
+import { homedir } from 'node:os';
 import { join, resolve } from 'node:path';
 import pkg from '../package.json' with { type: 'json' };
 import type { Args } from './lib/args';
@@ -114,6 +115,8 @@ export async function run(args: Args): Promise<void> {
   const set = r.credentials.filter(c => c.status === 'set').map(c => c.key), ph = r.credentials.filter(c => c.status === 'placeholder').map(c => c.key);
   log('doctor', `credentials: ${set.length ? set.join(', ') : 'none set'}${ph.length ? ` · placeholders (treated as missing): ${ph.join(', ')}` : ''}`);
   log('doctor', playLine(r.play));
+  const tcc = protectedInstall(realScript(), homedir());
+  if (tcc) log('doctor', `WARN this storebound runs from ${tcc}: macOS guards that folder, so a launchd job, CI agent or anything started outside a terminal with access blocks forever when it opens the file (no output, no error). Install it from npm instead: bun add -g storebound@latest (or npm i -g storebound)`);
   if (r.foreignRsync) log('doctor', `rsync: ${r.foreignRsync} is first on PATH and breaks Xcode exportArchive ("Copy failed") outside storebound; storebound apple build puts /usr/bin first. Fix for everything else: brew unlink rsync, or put /usr/bin before it`);
   const missing = r.tools.filter(t => !t.found || t.status === 'outdated');
   if (!missing.length) { log('doctor', 'everything storebound can use is here'); return; }
@@ -125,3 +128,17 @@ export async function run(args: Args): Promise<void> {
   }
   log('doctor', `${missing.length} missing. Store work needs none of them; screenshots, previews, icons and captures do.`);
 }
+
+/** The real path of the running storebound (a bun link / npm link resolves into the checkout). */
+function realScript(): string { try { return realpathSync(process.argv[1] ?? ''); } catch { return process.argv[1] ?? ''; } }
+
+/** macOS only: the guarded home folder (Desktop, Documents, Downloads, iCloud Drive) a path lies in, or null. A process
+ *  without access to it (a launchd job, a CI agent) hangs in open() while macOS waits for a consent nobody can give. */
+export function protectedInstall(path: string, home: string, platform: string = process.platform): string | null {
+  if (platform !== 'darwin' || !path || !home) return null;
+  for (const d of ['Desktop', 'Documents', 'Downloads', 'Library/Mobile Documents']) {
+    const dir = `${home.endsWith('/') ? home.slice(0, -1) : home}/${d}`; // posix paths: the check is macOS-only
+    if (path === dir || path.startsWith(dir + '/')) return `~/${d}`;
+  }
+  return null;
+}
diff --git a/tests/doctor-tcc.test.ts b/tests/doctor-tcc.test.ts
new file mode 100644
index 0000000..00b78ec
--- /dev/null
+++ b/tests/doctor-tcc.test.ts
@@ -0,0 +1,9 @@
+import { expect, test } from 'bun:test';
+import { protectedInstall } from '../cli/doctor';
+
+test('a storebound running from ~/Desktop (a bun link to a checkout) is named; npm / bun global installs are fine', () => {
+  expect(protectedInstall('/Users/you/Desktop/storebound/dist/storebound.mjs', '/Users/you', 'darwin')).toBe('~/Desktop');
+  expect(protectedInstall('/Users/you/Documents/x/cli/index.ts', '/Users/you', 'darwin')).toBe('~/Documents');
+  expect(protectedInstall('/Users/you/.bun/install/global/node_modules/storebound/dist/storebound.mjs', '/Users/you', 'darwin')).toBeNull();
+  expect(protectedInstall('/Users/you/Desktop/x.mjs', '/Users/you', 'linux')).toBeNull();
+});

From a850ba66702cf2a0cb682ecbbbaa2932b305e761 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Fri, 30 Oct 2026 00:29:52 +0700
Subject: [PATCH 082/126] storebound 0.8.62: version in package.json and every
 copy, CHANGELOG 0.8.62 section

---
 .claude-plugin/marketplace.json        | 2 +-
 .claude-plugin/plugin.json             | 2 +-
 .codex-plugin/plugin.json              | 2 +-
 CHANGELOG.md                           | 2 ++
 apps/desktop/package.json              | 2 +-
 apps/desktop/src-tauri/Cargo.lock      | 2 +-
 apps/desktop/src-tauri/Cargo.toml      | 2 +-
 apps/desktop/src-tauri/tauri.conf.json | 2 +-
 gemini-extension.json                  | 2 +-
 package.json                           | 2 +-
 10 files changed, 11 insertions(+), 9 deletions(-)

diff --git a/.claude-plugin/marketplace.json b/.claude-plugin/marketplace.json
index eff0a86..8020731 100644
--- a/.claude-plugin/marketplace.json
+++ b/.claude-plugin/marketplace.json
@@ -9,7 +9,7 @@
       "name": "storebound",
       "source": ".",
       "description": "Take a mobile app or game from nothing to Submit for review on both stores: skills for every store step and questionnaire plus the storebound CLI and MCP server.",
-      "version": "0.8.61",
+      "version": "0.8.62",
       "category": "development",
       "tags": [
         "mobile",
diff --git a/.claude-plugin/plugin.json b/.claude-plugin/plugin.json
index 2b04ad5..08f4bef 100644
--- a/.claude-plugin/plugin.json
+++ b/.claude-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.61",
+  "version": "0.8.62",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/.codex-plugin/plugin.json b/.codex-plugin/plugin.json
index 75e64f5..96b405f 100644
--- a/.codex-plugin/plugin.json
+++ b/.codex-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.61",
+  "version": "0.8.62",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/CHANGELOG.md b/CHANGELOG.md
index baaae38..1211a24 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,8 @@
 
 ## Unreleased
 
+## 0.8.62 · 2026-10-29
+
 - `doctor` warns when storebound runs from a folder macOS guards (~/Desktop, ~/Documents, ~/Downloads, iCloud Drive; e.g. a `bun link` to a checkout there): a launchd job or CI agent without access to it blocks in open() with no output.
 - `apple build` prints a line before each slow step (App Store Connect reads, device families, web build), so a run without a terminal that stalls shows where.
 ## 0.8.61 · 2026-10-29
diff --git a/apps/desktop/package.json b/apps/desktop/package.json
index b39d7e5..98c0ae7 100644
--- a/apps/desktop/package.json
+++ b/apps/desktop/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@storebound/desktop",
-  "version": "0.8.61",
+  "version": "0.8.62",
   "private": true,
   "license": "MIT",
   "type": "module",
diff --git a/apps/desktop/src-tauri/Cargo.lock b/apps/desktop/src-tauri/Cargo.lock
index 76ea477..b2ca85b 100644
--- a/apps/desktop/src-tauri/Cargo.lock
+++ b/apps/desktop/src-tauri/Cargo.lock
@@ -4096,7 +4096,7 @@ checksum = "a2eb9349b6444b326872e140eb1cf5e7c522154d69e7a0ffb0fb81c06b37543f"
 
 [[package]]
 name = "storebound-desktop"
-version = "0.8.61"
+version = "0.8.62"
 dependencies = [
  "base64 0.22.1",
  "getrandom 0.3.4",
diff --git a/apps/desktop/src-tauri/Cargo.toml b/apps/desktop/src-tauri/Cargo.toml
index 5429871..347f85d 100644
--- a/apps/desktop/src-tauri/Cargo.toml
+++ b/apps/desktop/src-tauri/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "storebound-desktop"
-version = "0.8.61"
+version = "0.8.62"
 description = "storebound desktop: every game's releases on both stores in one window"
 license = "MIT"
 edition = "2021"
diff --git a/apps/desktop/src-tauri/tauri.conf.json b/apps/desktop/src-tauri/tauri.conf.json
index 2360261..b28aa2e 100644
--- a/apps/desktop/src-tauri/tauri.conf.json
+++ b/apps/desktop/src-tauri/tauri.conf.json
@@ -2,7 +2,7 @@
   "$schema": "https://schema.tauri.app/config/2",
   "productName": "storebound",
   "mainBinaryName": "storebound-desktop",
-  "version": "0.8.61",
+  "version": "0.8.62",
   "identifier": "dev.storebound.desktop",
   "build": {
     "frontendDist": "../dist",
diff --git a/gemini-extension.json b/gemini-extension.json
index ac06fb9..ed9b21e 100644
--- a/gemini-extension.json
+++ b/gemini-extension.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.61",
+  "version": "0.8.62",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "contextFileName": "GEMINI.md",
   "mcpServers": {
diff --git a/package.json b/package.json
index b72b748..0478e1d 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.61",
+  "version": "0.8.62",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every store questionnaire (incl. account deletion and App Review demo accounts), privacy, icons, screenshots and previews, TestFlight. After launch: crash vitals, review replies, price sheets, analytics and Product Page Optimization. One config, a CLI (Node 20+ or Bun), an MCP server and Agent Skills for your AI coding agent.",
   "license": "MIT",
   "author": "CRTkafa",

From 4b6c28aff2f09056dfc1940d6847771920faf69a Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Mon, 2 Nov 2026 16:39:15 +0700
Subject: [PATCH 083/126] desktop: a second --hidden start stays in the tray
 (single-instance no longer opens the window)

---
 CHANGELOG.md                      | 2 ++
 apps/desktop/src-tauri/src/lib.rs | 5 +++--
 2 files changed, 5 insertions(+), 2 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 1211a24..57ddf14 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,8 @@
 
 ## Unreleased
 
+- Desktop: a second start at logon (`--hidden`, e.g. a Startup folder shortcut next to the Run entry) keeps the app in the tray instead of opening its window.
+
 ## 0.8.62 · 2026-10-29
 
 - `doctor` warns when storebound runs from a folder macOS guards (~/Desktop, ~/Documents, ~/Downloads, iCloud Drive; e.g. a `bun link` to a checkout there): a launchd job or CI agent without access to it blocks in open() with no output.
diff --git a/apps/desktop/src-tauri/src/lib.rs b/apps/desktop/src-tauri/src/lib.rs
index 0e55f5c..17627f4 100644
--- a/apps/desktop/src-tauri/src/lib.rs
+++ b/apps/desktop/src-tauri/src/lib.rs
@@ -322,8 +322,9 @@ pub fn run() {
     early_trace();
     linux_webkit_env();
     let app = tauri::Builder::default()
-        // single-instance first: a second start (or a storebound:// link) focuses the running app instead
-        .plugin(tauri_plugin_single_instance::init(|app, _argv, _cwd| show_main(app)))
+        // single-instance first: a second start (or a storebound:// link) focuses the running app instead; a second
+        // logon start (--hidden: the Run entry plus a Startup folder shortcut) stays in the tray
+        .plugin(tauri_plugin_single_instance::init(|app, argv, _cwd| if !argv.iter().any(|a| a == "--hidden") { show_main(app) }))
         .plugin(tauri_plugin_deep_link::init())
         // never restore "visible": a --hidden start would otherwise pop the window up
         .plugin(tauri_plugin_window_state::Builder::new().with_filter(|label| !label.starts_with(menu_panel::LABEL_PREFIX)).with_state_flags(tauri_plugin_window_state::StateFlags::all() & !tauri_plugin_window_state::StateFlags::VISIBLE).build())

From b1f1b206d3118bda40393b89a5b5296db8e6a2e1 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Mon, 2 Nov 2026 16:43:58 +0700
Subject: [PATCH 084/126] storebound 0.8.63: version in package.json and every
 copy, CHANGELOG 0.8.63 section

---
 .claude-plugin/marketplace.json        | 2 +-
 .claude-plugin/plugin.json             | 2 +-
 .codex-plugin/plugin.json              | 2 +-
 CHANGELOG.md                           | 2 ++
 apps/desktop/package.json              | 2 +-
 apps/desktop/src-tauri/Cargo.lock      | 2 +-
 apps/desktop/src-tauri/Cargo.toml      | 2 +-
 apps/desktop/src-tauri/tauri.conf.json | 2 +-
 gemini-extension.json                  | 2 +-
 package.json                           | 2 +-
 10 files changed, 11 insertions(+), 9 deletions(-)

diff --git a/.claude-plugin/marketplace.json b/.claude-plugin/marketplace.json
index 8020731..b2fe8dc 100644
--- a/.claude-plugin/marketplace.json
+++ b/.claude-plugin/marketplace.json
@@ -9,7 +9,7 @@
       "name": "storebound",
       "source": ".",
       "description": "Take a mobile app or game from nothing to Submit for review on both stores: skills for every store step and questionnaire plus the storebound CLI and MCP server.",
-      "version": "0.8.62",
+      "version": "0.8.63",
       "category": "development",
       "tags": [
         "mobile",
diff --git a/.claude-plugin/plugin.json b/.claude-plugin/plugin.json
index 08f4bef..30a8d7e 100644
--- a/.claude-plugin/plugin.json
+++ b/.claude-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.62",
+  "version": "0.8.63",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/.codex-plugin/plugin.json b/.codex-plugin/plugin.json
index 96b405f..54e45ca 100644
--- a/.codex-plugin/plugin.json
+++ b/.codex-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.62",
+  "version": "0.8.63",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 57ddf14..267112c 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,8 @@
 
 ## Unreleased
 
+## 0.8.63 · 2026-11-02
+
 - Desktop: a second start at logon (`--hidden`, e.g. a Startup folder shortcut next to the Run entry) keeps the app in the tray instead of opening its window.
 
 ## 0.8.62 · 2026-10-29
diff --git a/apps/desktop/package.json b/apps/desktop/package.json
index 98c0ae7..b4aab53 100644
--- a/apps/desktop/package.json
+++ b/apps/desktop/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@storebound/desktop",
-  "version": "0.8.62",
+  "version": "0.8.63",
   "private": true,
   "license": "MIT",
   "type": "module",
diff --git a/apps/desktop/src-tauri/Cargo.lock b/apps/desktop/src-tauri/Cargo.lock
index b2ca85b..e3dbb76 100644
--- a/apps/desktop/src-tauri/Cargo.lock
+++ b/apps/desktop/src-tauri/Cargo.lock
@@ -4096,7 +4096,7 @@ checksum = "a2eb9349b6444b326872e140eb1cf5e7c522154d69e7a0ffb0fb81c06b37543f"
 
 [[package]]
 name = "storebound-desktop"
-version = "0.8.62"
+version = "0.8.63"
 dependencies = [
  "base64 0.22.1",
  "getrandom 0.3.4",
diff --git a/apps/desktop/src-tauri/Cargo.toml b/apps/desktop/src-tauri/Cargo.toml
index 347f85d..d3a2306 100644
--- a/apps/desktop/src-tauri/Cargo.toml
+++ b/apps/desktop/src-tauri/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "storebound-desktop"
-version = "0.8.62"
+version = "0.8.63"
 description = "storebound desktop: every game's releases on both stores in one window"
 license = "MIT"
 edition = "2021"
diff --git a/apps/desktop/src-tauri/tauri.conf.json b/apps/desktop/src-tauri/tauri.conf.json
index b28aa2e..febcc13 100644
--- a/apps/desktop/src-tauri/tauri.conf.json
+++ b/apps/desktop/src-tauri/tauri.conf.json
@@ -2,7 +2,7 @@
   "$schema": "https://schema.tauri.app/config/2",
   "productName": "storebound",
   "mainBinaryName": "storebound-desktop",
-  "version": "0.8.62",
+  "version": "0.8.63",
   "identifier": "dev.storebound.desktop",
   "build": {
     "frontendDist": "../dist",
diff --git a/gemini-extension.json b/gemini-extension.json
index ed9b21e..b2050da 100644
--- a/gemini-extension.json
+++ b/gemini-extension.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.62",
+  "version": "0.8.63",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "contextFileName": "GEMINI.md",
   "mcpServers": {
diff --git a/package.json b/package.json
index 0478e1d..462c182 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.62",
+  "version": "0.8.63",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every store questionnaire (incl. account deletion and App Review demo accounts), privacy, icons, screenshots and previews, TestFlight. After launch: crash vitals, review replies, price sheets, analytics and Product Page Optimization. One config, a CLI (Node 20+ or Bun), an MCP server and Agent Skills for your AI coding agent.",
   "license": "MIT",
   "author": "CRTkafa",

From f5da7c9f7a1207825d366185f725da1802fdb7c0 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Mon, 2 Nov 2026 18:16:25 +0700
Subject: [PATCH 085/126] validate: macOS versions need Mac screenshots, Play
 reads survive an ended edit; macOS build numbers across platforms; Mac build
 prebuild + apple.macAppCheck; signing wording off the Mac; dry flows plan
 uploads

---
 CHANGELOG.md                       |   6 ++
 cli/api/wrapped.gen.ts             |   6 +-
 cli/apple/build-mas.ts             |  52 ++++++++++++---
 cli/apple/build.ts                 |   8 +--
 cli/apple/next-build.ts            |  22 +++++--
 cli/apple/screenshots.ts           |   6 +-
 cli/apple/upload.ts                |   2 +-
 cli/flow.ts                        |  16 ++++-
 cli/lib/config.ts                  |   4 ++
 cli/lib/embedded.ts                |   4 +-
 cli/lib/flow.ts                    |  43 ++++++++++++-
 cli/lib/signing.ts                 |   6 +-
 cli/validate.ts                    |  36 ++++++-----
 docs/api-coverage.md               |   6 +-
 skills/release-flows/SKILL.md      |   9 ++-
 templates/workflows/beta.yml       |  14 +++-
 templates/workflows/release.yml    |  20 ++++--
 tests/flow-dry.test.ts             | 100 +++++++++++++++++++++++++++++
 tests/next-build-platforms.test.ts |  73 +++++++++++++++++++++
 tests/validate-macos.test.ts       |  52 +++++++++++++++
 tests/validate-play-edit.test.ts   |  91 ++++++++++++++++++++++++++
 21 files changed, 519 insertions(+), 57 deletions(-)
 create mode 100644 tests/flow-dry.test.ts
 create mode 100644 tests/next-build-platforms.test.ts
 create mode 100644 tests/validate-macos.test.ts
 create mode 100644 tests/validate-play-edit.test.ts

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 267112c..ab04470 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,12 @@
 
 ## Unreleased
 
+- `validate` / `release plan`: a macOS version is checked against Mac screenshots (APP_DESKTOP, with `apple.mac`), not the iPhone / iPad sets; with no editable version, iOS is picked over macOS.
+- `validate --play`: reads go through the locked read-only edit and retry once on a fresh edit when Play ends it ("This Edit has been deleted" was shown as a blocker; it is now a warning to re-run at most).
+- Build numbers for macOS (`apple build --platform macos`, `apple upload` of a .pkg) come from every build of the app, as `apple next-build` does (a macOS-only list proposed a number an iOS build already had).
+- `apple build --platform macos` runs `build.prebuild` / `apple.prebuild` before `tauri build` (`--no-prebuild` skips it), and the new `apple.macAppCheck` command on the built .app before productbuild ({file} = the .app; a nonzero exit stops the build).
+- `apple signing status` / the Mac build dry run on Windows or Linux say the keys live on the Mac that made the certificates (build there) instead of suggesting a new certificate.
+- Flows: a dry `flow run` plans the upload, TestFlight wait and distribute steps after a dry build instead of failing on the missing IPA; `beta` and `release` need VERSION (no silent 1.0.0); `beta` distributes to the config's internal TestFlight group when GROUP is empty; `release` has optional macOS steps (MAC_TAURI), PLAY_TRACK (e.g. beta = open testing) and a promote owner step.
 ## 0.8.63 · 2026-11-02
 
 - Desktop: a second start at logon (`--hidden`, e.g. a Startup folder shortcut next to the Run entry) keeps the app in the tray instead of opening its window.
diff --git a/cli/api/wrapped.gen.ts b/cli/api/wrapped.gen.ts
index 87c30a2..0fced3e 100644
--- a/cli/api/wrapped.gen.ts
+++ b/cli/api/wrapped.gen.ts
@@ -133,7 +133,7 @@ export const WRAPPED: { apple: Record<string, string>; play: Record<string, stri
     'builds_betaBuildLocalizations_getToManyRelated': 'apple/testflight',
     'builds_buildBetaDetail_getToOneRelated': 'apple/testflight',
     'builds_diagnosticSignatures_getToManyRelated': 'health',
-    'builds_getCollection': 'apple/build apple/build-mas apple/encryption apple/listing apple/next-build apple/resubmit apple/status apple/testflight apple/upload art health lib/store-apps triage',
+    'builds_getCollection': 'apple/encryption apple/listing apple/next-build apple/resubmit apple/status apple/testflight apple/upload art health lib/store-apps triage',
     'builds_getInstance': 'apple/device-families',
     'builds_updateInstance': 'apple/encryption lib/build-ops',
     'bundleIdCapabilities_createInstance': 'lib/signing',
@@ -245,13 +245,13 @@ export const WRAPPED: { apple: Record<string, string>; play: Record<string, stri
     'androidpublisher.edits.bundles.upload': 'play/release play/upload',
     'androidpublisher.edits.commit': 'play/client',
     'androidpublisher.edits.countryavailability.get': 'validate',
-    'androidpublisher.edits.delete': 'apps onboard play/client validate',
+    'androidpublisher.edits.delete': 'apps onboard play/client',
     'androidpublisher.edits.details.get': 'apps onboard play/listing play/status validate',
     'androidpublisher.edits.details.update': 'play/listing',
     'androidpublisher.edits.images.deleteall': 'play/images',
     'androidpublisher.edits.images.list': 'apps art play/images play/listing validate',
     'androidpublisher.edits.images.upload': 'play/images play/listing',
-    'androidpublisher.edits.insert': 'apps onboard play/client validate',
+    'androidpublisher.edits.insert': 'apps onboard play/client',
     'androidpublisher.edits.listings.get': 'onboard',
     'androidpublisher.edits.listings.list': 'art listing-store play/listing play/status validate',
     'androidpublisher.edits.listings.patch': 'listing-store',
diff --git a/cli/apple/build-mas.ts b/cli/apple/build-mas.ts
index 865b233..6440af6 100644
--- a/cli/apple/build-mas.ts
+++ b/cli/apple/build-mas.ts
@@ -1,7 +1,7 @@
 // Mac App Store build of a Tauri app: `tauri build --bundles app`, signed for the Mac App Store, then productbuild to a .pkg.
 //   storebound apple build --platform macos --tauri <src-tauri> [--path-free] [--target universal-apple-darwin]
 //       [--version x.y.z] [--build-number N] [--profile <file.provisionprofile>] [--out build/macos] [--unsigned] [--dry] [--json]
-// Steps: Tauri project -> version / build number (next free one on App Store Connect, platform MAC_OS) -> signing
+// Steps: Tauri project -> version / build number (next free one on App Store Connect, every platform) -> signing
 // identities from the keychain ("Apple Distribution" or "3rd Party Mac Developer Application"; "Mac Installer
 // Distribution" or "3rd Party Mac Developer Installer") -> Mac App Store provisioning profile (--profile, installed, or
 // from the API) -> entitlements (app sandbox + application / team identifier, the project's own keys kept) -> a
@@ -19,10 +19,13 @@ import type { Ctx } from '../lib/ctx';
 import { need } from '../lib/ctx';
 import { done, log, printJson, warn } from '../lib/log';
 import { parseMobileprovision, parsePlist, type PlistValue } from '../lib/plist';
-import { nextBuildNumber } from '../lib/release';
+import { appNextBuild } from './next-build';
 import { parseIdentities, profileDirs, readProfiles, type ApiProfile } from '../lib/signing';
 import { sshBuildRefusal } from '../lib/keychain';
 import { remoteBuildSession, showCmd } from '../lib/xcode';
+import { prebuildFor, prebuildsDone, runPrebuild } from '../lib/web-assets';
+import { preCheckCommand } from '../lib/pre-check';
+import { pump } from '../lib/runner';
 import {
   appProblems, entitlementKeysOf, entitlementsXml, findBuiltApp, findTauri, leakNeedles, masEntitlements, type MasProfile, masSteps, pathFreeEnv, pickMasIdentities,
   pickMasProfiles, pkgProblems, parsePkgSignature, readAppInfo, scanPathLeaks, tauriOverlay, categoryId,
@@ -41,6 +44,16 @@ const run1 = (argv: string[], timeout = 120_000): { ok: boolean; out: string } =
 };
 
 /** The Tauri CLI: the project's node_modules/.bin/tauri (walking up), `cargo tauri`, else bunx. */
+/** One sh -c command in root, its output streamed; the exit code and the last lines. */
+async function runCheck(cmd: string, root: string): Promise<{ ok: boolean; code: number; tail: string }> {
+  const p = rt.spawn(['sh', '-c', cmd], { cwd: root, stdin: 'ignore', stdout: 'pipe', stderr: 'pipe', env: process.env });
+  const tail: string[] = [];
+  const each = (line: string, kind: 'stdout' | 'stderr'): void => { tail.push(line); if (tail.length > 10) tail.shift(); (kind === 'stderr' ? console.error : console.log)(`  ${line}`); };
+  await Promise.all([pump(p.stdout, 'stdout', each), pump(p.stderr, 'stderr', each)]);
+  const code = await p.exited;
+  return { ok: code === 0, code, tail: tail.join('\n') };
+}
+
 export function tauriCommand(cwd: string, exists: (p: string) => boolean = existsSync, which: (c: string) => string | null = rt.which): string[] {
   for (let d = cwd, prev = ''; d !== prev; prev = d, d = dirname(d)) { const p = join(d, 'node_modules', '.bin', 'tauri'); if (exists(p)) return [p]; }
   if (which('cargo-tauri')) return ['cargo', 'tauri'];
@@ -72,7 +85,13 @@ async function fetchMasProfile(c: Asc, bundleId: string, dest: string): Promise<
   return dest;
 }
 
-export async function run(ctx: Ctx): Promise<void> {
+/** The dry-run line about signing identities: on a machine that is not a Mac, say so instead of "none found". */
+export function identityLine(o: { platform: string; appIdentity: string | null; installerIdentity: string | null; profile: string | null }): string {
+  if (o.platform !== 'darwin') return `this is not a build machine: Mac App Store builds run on a Mac (the signing identities live in its keychain), so none were looked up here; profile: ${o.profile ?? '(none)'}`;
+  return `app identity: ${o.appIdentity ?? '(none found)'}; installer identity: ${o.installerIdentity ?? '(none found)'}; profile: ${o.profile ?? '(none)'}`;
+}
+
+export async function run(ctx: Ctx, platform: string = process.platform): Promise<void> {
   const { config, root, resolve } = ctx.loaded;
   const a = ctx.args;
   const bundleId = need(config.apple?.bundleId, 'apple.bundleId');
@@ -92,9 +111,10 @@ export async function run(ctx: Ctx): Promise<void> {
     try {
       client = await ascClient(root, bundleId, config.apple?.appId);
       if (!build) {
-        const builds = await client.all(`/v1/builds?filter[app]=${await client.app()}&filter[preReleaseVersion.platform]=MAC_OS&limit=200&fields[builds]=version`);
-        build = nextBuildNumber(builds.map(b => String(b.attributes.version)));
-        log(TAG, `${builds.length} macOS builds on App Store Connect: next build number ${build} (CFBundleVersion must increase)`);
+        // every platform of the app record, not only macOS: CFBundleVersion must be unique across all its builds
+        const found = await appNextBuild(client);
+        build = found.next;
+        log(TAG, `${found.builds} builds (all platforms) on App Store Connect: next build number ${build} (CFBundleVersion must increase)`);
       }
       if (!teamId) teamId = (await findBundleId(client, bundleId))?.attributes?.seedId ?? null;
     } catch (e) {
@@ -107,7 +127,7 @@ export async function run(ctx: Ctx): Promise<void> {
   const team = teamId ?? '<TEAM_ID>';
 
   // identities and profile (a real signed run needs them; a dry run shows placeholders)
-  const mac = process.platform === 'darwin';
+  const mac = platform === 'darwin';
   let appIdentity: string | null = null, installerIdentity: string | null = null;
   if (!unsigned && mac) {
     const picked = pickMasIdentities(parseIdentities(run1(['security', 'find-identity', '-v']).out), teamId);
@@ -142,18 +162,26 @@ export async function run(ctx: Ctx): Promise<void> {
   const overlay = tauriOverlay({ appIdentity, entitlementsFile: entFile, profile, version, build: buildNo, unsigned, minOs: tauri.minOs, category });
   const input = { tauri, tauriCmd, target, out, configFile, entitlementsFile: entFile, profile, appIdentity, installerIdentity: installerIdentity ?? '<Mac Installer Distribution identity>', version, build: buildNo, unsigned, pathFree, pkg };
   const steps = masSteps(input);
+  // the same hooks as apple build: build.prebuild / apple.prebuild first (a project computes its build-time env there),
+  // apple.macAppCheck on the built .app before productbuild (e.g. a project's own check that a value was stamped in)
+  const prebuild = prebuildFor(config, 'apple') ?? null;
+  const prebuildSkip = !prebuild ? undefined : a.has('no-prebuild') ? '--no-prebuild' : prebuildsDone().has(prebuild) ? 'already ran in this flow run' : undefined;
+  const appCheck = config.apple?.macAppCheck?.trim() || null;
   const existingEnt = tauri.entitlements && existsSync(tauri.entitlements) ? (parsePlist(readFileSync(tauri.entitlements)) as Record<string, PlistValue>) : undefined;
   const ent = masEntitlements({ teamId: team, bundleId, existing: existingEnt });
   const plan = { platform: 'MAC_OS', tauri: relative(root, tauri.confPath), target, version, build: buildNo, teamId: teamId, unsigned, pathFree, appIdentity, installerIdentity,
     profile: profile ? basenameOf(profile) : null, entitlements: Object.keys(ent), tauriOverlay: overlay, env: Object.fromEntries(Object.entries(env).map(([k, v]) => [k, k === 'RUSTFLAGS' ? v.replaceAll(home, '~') : v])),
+    prebuild, ...(prebuildSkip ? { prebuildSkip } : {}), appCheck,
     steps: [showCmd(steps.tauri, null), showCmd(steps.codesignVerify, null), showCmd(steps.productbuild, null), showCmd(steps.pkgCheck, null)], out: relative(root, out) || '.', pkg: relative(root, pkg) };
   if (dry) {
     if (json) { printJson(plan); return; }
     log(TAG, `Tauri ${tauri.productName} (${bundleId}) ${version} (${buildNo}) for ${target}, ${unsigned ? 'UNSIGNED' : 'Mac App Store signing'}${pathFree ? ', path-free' : ''}`);
-    log(TAG, `app identity: ${appIdentity ?? '(none found)'}; installer identity: ${installerIdentity ?? '(none found)'}; profile: ${plan.profile ?? '(none)'}`);
+    log(TAG, identityLine({ platform, appIdentity, installerIdentity, profile: plan.profile }));
     log(TAG, `entitlements: ${plan.entitlements.join(', ')}`);
     if (pathFree) log(TAG, `RUSTFLAGS: ${plan.env.RUSTFLAGS}`);
+    if (prebuild) log(TAG, prebuildSkip ? `prebuild skipped (${prebuildSkip}): ${prebuild}` : `would run the prebuild: ${prebuild}`);
     for (const s of plan.steps) log(TAG, `would run: ${s}`);
+    if (appCheck) log(TAG, `would check the built .app: ${appCheck}`);
     done(TAG, 'macOS build planned (dry run)');
     return;
   }
@@ -164,6 +192,7 @@ export async function run(ctx: Ctx): Promise<void> {
   mkdirSync(out, { recursive: true });
   writeFileSync(entFile, entitlementsXml(ent));
   writeFileSync(configFile, `${JSON.stringify(overlay, null, 2)}\n`);
+  if (prebuild && !prebuildSkip) await runPrebuild(prebuild, root, TAG);
   shipPhase('build', `tauri build ${target}, build ${buildNo}`);
   await runLogged(steps.tauri, tauri.cwd, join(out, 'tauri-build.log'), showCmd(steps.tauri, null), env);
   const appDir = findBuiltApp(tauri.dir, root, target, tauri.productName);
@@ -179,6 +208,13 @@ export async function run(ctx: Ctx): Promise<void> {
     { bundleId, version, build: buildNo, signed: !unsigned, pathFree });
   for (const w of checks.warnings) warn(TAG, w);
   if (checks.errors.length) throw new Error(`${basenameOf(appDir)} was built, but the Mac App Store would refuse it:\n${checks.errors.map(x => `  ${x}`).join('\n')}`);
+  if (appCheck) {
+    const cmd = preCheckCommand(appCheck, appDir);
+    log(TAG, `apple.macAppCheck: $ ${cmd}`);
+    const r = await runCheck(cmd, root);
+    if (!r.ok) throw new Error(`apple.macAppCheck failed (exit ${r.code}) on ${basenameOf(appDir)}; nothing packaged:\n${r.tail}`);
+    log(TAG, 'apple.macAppCheck: ok');
+  }
   shipPhase('sign', 'productbuild');
   rmSync(exportPath, { recursive: true, force: true });
   mkdirSync(exportPath, { recursive: true });
diff --git a/cli/apple/build.ts b/cli/apple/build.ts
index caefc02..18093db 100644
--- a/cli/apple/build.ts
+++ b/cli/apple/build.ts
@@ -34,7 +34,7 @@ import { done, log, printJson, warn } from '../lib/log';
 import { derivedDataFor, archiveScanDirs, leakNeedles, leakProblem, outsideHome, pathFreeSettings, scanForPaths } from '../lib/path-free';
 import { pump } from '../lib/runner';
 import { parseMobileprovision, toXmlPlist } from '../lib/plist';
-import { nextBuildNumber } from '../lib/release';
+import { appNextBuild } from './next-build';
 import { exportOptions, profileDirs } from '../lib/signing';
 import { type FamilyVerdict, familyVerdicts, projectFamilies } from '../lib/device-families';
 import { liveDeviceFamilies } from './device-families';
@@ -177,9 +177,9 @@ export async function run(ctx: Ctx): Promise<void> {
     try {
       const c = await ascClient(root, bundleId, config.apple?.appId);
       if (!build) {
-        const builds = await c.all(`/v1/builds?filter[app]=${await c.app()}&limit=200&fields[builds]=version`);
-        build = nextBuildNumber(builds.map(b => String(b.attributes.version)));
-        log(TAG, `${builds.length} builds on App Store Connect: next build number ${build}`);
+        const found = await appNextBuild(c);
+        build = found.next;
+        log(TAG, `${found.builds} builds on App Store Connect: next build number ${build}`);
       }
       if (!teamId) teamId = (await findBundleId(c, bundleId))?.attributes?.seedId ?? null;
     } catch (e) {
diff --git a/cli/apple/next-build.ts b/cli/apple/next-build.ts
index 5c4a560..530b28f 100644
--- a/cli/apple/next-build.ts
+++ b/cli/apple/next-build.ts
@@ -7,15 +7,25 @@ import type { Ctx } from '../lib/ctx';
 import { need } from '../lib/ctx';
 import { printJson } from '../lib/log';
 import { nextBuildNumber } from '../lib/release';
-import { ascClient } from './asc';
+import { ascClient, type Asc } from './asc';
+
+/**
+ * The one place that computes the next CFBundleVersion: the highest build of the app over EVERY platform (iOS, macOS,
+ * tvOS, visionOS), every processing state and every page, plus one. CFBundleVersion must be unique across the app
+ * record's builds, so a platform filter (a macOS build once got a number an uploaded macOS build already had) or a
+ * missed page gives a number the store refuses. `apple next-build`, `apple build` and `apple build --platform macos`
+ * (also their dry runs) all call this, so they agree.
+ */
+export async function appNextBuild(c: Pick<Asc, 'all' | 'app'>): Promise<{ next: string; builds: number }> {
+  const builds = await c.all(`/v1/builds?filter[app]=${await c.app()}&limit=200&fields[builds]=version`);
+  return { next: nextBuildNumber(builds.map(b => String(b.attributes.version))), builds: builds.length };
+}
 
 export async function run(ctx: Ctx): Promise<void> {
   const { config, root } = ctx.loaded;
   const c = await ascClient(root, need(config.apple?.bundleId, 'apple.bundleId'), config.apple?.appId);
-  const appId = await c.app();
-  const builds = await c.all(`/v1/builds?filter[app]=${appId}&limit=200&fields[builds]=version`);
-  const next = nextBuildNumber(builds.map(b => String(b.attributes.version)));
-  if (ctx.args.has('json')) { printJson({ next, builds: builds.length }); return; }
-  console.error(`[apple] ${builds.length} builds on App Store Connect; next build number:`);
+  const { next, builds } = await appNextBuild(c);
+  if (ctx.args.has('json')) { printJson({ next, builds }); return; }
+  console.error(`[apple] ${builds} builds on App Store Connect; next build number:`);
   console.log(next);
 }
diff --git a/cli/apple/screenshots.ts b/cli/apple/screenshots.ts
index fbb353f..bc7bfce 100644
--- a/cli/apple/screenshots.ts
+++ b/cli/apple/screenshots.ts
@@ -52,8 +52,10 @@ export function skippedDuoSets(apple: { iphoneDuo?: boolean; appId?: string } |
 /** Display types `validate` requires on every locale: apple.screenshotTypes, else the classes App Store Connect's
  *  "App Previews and Screenshots" tab lists (October 2026): iPhone with Dynamic Island (medium display), filled by
  *  scaling a 6.9" or 6.5" set down (ACCEPTED_INSTEAD), plus iPad 13" display with ipad. iPhone Duo is optional. */
-export const requiredDisplayTypes = (apple: { ipad?: boolean; screenshotTypes?: string[] } | undefined): string[] =>
-  apple?.screenshotTypes ?? ['APP_IPHONE_61', ...(apple?.ipad ? ['APP_IPAD_PRO_3GEN_129'] : [])];
+export const requiredDisplayTypes = (apple: { ipad?: boolean; mac?: boolean; screenshotTypes?: string[] } | undefined, platform: string = 'IOS'): string[] =>
+  platform === 'MAC_OS' ? (apple?.mac ? Object.values(MAC_DISPLAY) : []) // a macOS version takes the Mac set only (apple.screenshotTypes is the iOS list)
+    : platform !== 'IOS' ? []
+    : apple?.screenshotTypes ?? ['APP_IPHONE_61', ...(apple?.ipad ? ['APP_IPAD_PRO_3GEN_129'] : [])];
 
 /** Makes one screenshot set (of a version localization, a custom product page localization or a Product Page
  *  Optimization treatment localization) hold exactly `files`, in order: left alone when the MD5s match, else the
diff --git a/cli/apple/upload.ts b/cli/apple/upload.ts
index 28ccd4a..a31574f 100644
--- a/cli/apple/upload.ts
+++ b/cli/apple/upload.ts
@@ -284,7 +284,7 @@ export async function run(ctx: Ctx): Promise<void> {
   const editable = await c.editableVersion(platform).catch(() => null);
   const trainWhy = ipaVersionProblem(info.version, editable?.attributes?.versionString as string | undefined, 'the editable App Store version');
   if (trainWhy) { if (a.has('allow-version-mismatch')) warn(TAG, trainWhy); else throw new Error(`${relative(root, ipa)}: not uploaded, ${trainWhy}`); }
-  const builds = await c.all(`/v1/builds?filter[app]=${appId}${isPkg ? '&filter[preReleaseVersion.platform]=MAC_OS' : ''}&limit=200&fields[builds]=version,processingState`);
+  const builds = await c.all(`/v1/builds?filter[app]=${appId}&limit=200&fields[builds]=version,processingState`);
   const numbers = builds.map(b => String(b.attributes.version));
   const next = nextBuildNumber(numbers);
   // the same IPA uploaded by an earlier run: nothing to send again, only the wait
diff --git a/cli/flow.ts b/cli/flow.ts
index 63387e1..11151b3 100644
--- a/cli/flow.ts
+++ b/cli/flow.ts
@@ -20,7 +20,7 @@ import { dirname, join, relative } from 'node:path';
 import type { Args } from './lib/args';
 import { CONFIG_NAMES, loadConfig, type ShipConfig } from './lib/config';
 import {
-  type CondCtx, expand, type Flow, flowsOfFile, kindOf, type Mode, parseParams, planStep, type PlannedStep, resumePoint, type RunState, startIndex,
+  type CondCtx, type DryPending, expand, type Flow, flowsOfFile, kindOf, missingParams, type Mode, noteDry, parseParams, planStep, plannedForDryInput, type PlannedStep, resumePoint, type RunState, startIndex,
   type StepResult, validateFlows,
 } from './lib/flow';
 import { DECLINED_MARK } from './lib/ctx';
@@ -170,6 +170,12 @@ async function runFlow(args: Args, root: string): Promise<void> {
   const subParams = expand(flow, all, 'steps').params;
   const vars: Record<string, string> = { ...subParams, ...flow.params, ...(from ? last?.vars ?? {} : {}), ...params };
   const c = await condCtx(root);
+  vars['config.testflight.internal'] = (c.config?.apple?.testflight?.groups ?? []).filter(g => g.internal).map(g => g.name).join(',');
+  if (!args.has('resume')) {
+    const missing = missingParams(vars);
+    if (missing.length) throw new Error(`${name} needs ${missing.map(k => `${k}=<value>`).join(' ')} (storebound flow run ${name} ${missing.map(k => `${k}=...`).join(' ')})`);
+  }
+  const pending: DryPending = { built: new Set(), uploaded: new Set() };
   const prebuilt = prebuildsDone();
   const state: RunState = { flow: name, mode, startedAt: new Date().toISOString(), vars, results: [], ok: true };
   const env = process.env as Record<string, string | undefined>;
@@ -196,12 +202,20 @@ async function runFlow(args: Args, root: string): Promise<void> {
         state.results.push(r); save();
         continue;
       }
+      const planned = plannedForDryInput(p, mode, pending);
+      if (planned) {
+        r.status = 'planned'; r.detail = planned;
+        if (!json) log(TAG, `${label}: ${describe(p)}  (${planned})`);
+        state.results.push(r); save();
+        continue;
+      }
       if (!json) log(TAG, `${label}: ${describe(p)}${p.dryAdded ? '  (dry run)' : ''}`);
       const t = Date.now();
       const x = await exec(p, root, json, prebuilt.size ? { [PREBUILD_DONE_ENV]: [...prebuilt].join('\n') } : {});
       r.exitCode = x.code; r.ms = Date.now() - t;
       if (x.code === 0) {
         r.status = 'ok';
+        noteDry(p, pending);
         const pre = p.argv ? prebuildRan(p.argv, c.config) : null;
         if (pre) prebuilt.add(pre);
         if (p.capture) {
diff --git a/cli/lib/config.ts b/cli/lib/config.ts
index aea46a9..446ee91 100644
--- a/cli/lib/config.ts
+++ b/cli/lib/config.ts
@@ -716,6 +716,9 @@ export interface ShipConfig {
     build?: AppleBuildConfig;
     /** Shell command `apple build` runs first in the project root; overrides build.prebuild for the App Store. */
     prebuild?: string;
+    /** `apple build --platform macos`: shell command run on the built .app before productbuild ({file} = the .app path);
+     *  a nonzero exit stops the build, nothing is packaged. E.g. a project's own check that a build-time value is in the binary. */
+    macAppCheck?: string;
     /** Promoted in-app purchases on the product page, in order (`storebound apple promoted`; at most 20). */
     promoted?: PromotedConfig;
     /** Custom product pages (`storebound apple cpp`; at most 70). */
@@ -1019,6 +1022,7 @@ export function validateExtras(cfg: Partial<ShipConfig>): string[] {
   if (cfg.build !== undefined && (typeof cfg.build !== 'object' || cfg.build === null)) e.push('build: { prebuild?: "<shell command>" }');
   if (badCmd(cfg.build?.prebuild)) e.push('build.prebuild: a shell command run in the project root before apple build / play build, e.g. "npm run build && npx cap sync"');
   if (badCmd(cfg.apple?.prebuild)) e.push('apple.prebuild: a shell command (overrides build.prebuild for apple build)');
+  if (badCmd(cfg.apple?.macAppCheck)) e.push('apple.macAppCheck: a shell command run on the built Mac .app ({file} = its path), e.g. "node tools/check-app.mjs {file}"');
   if (badCmd(cfg.play?.prebuild)) e.push('play.prebuild: a shell command (overrides build.prebuild for play build)');
   if (cfg.apple?.teamId !== undefined &&!/^[A-Z0-9]{10}$/.test(cfg.apple.teamId)) e.push('apple.teamId: the 10-character Team ID (Membership details)');
   if (cfg.play?.developerId !== undefined && !/^\d{1,25}$/.test(cfg.play.developerId)) e.push('play.developerId: the digits of play.google.com/console/u/0/developers/<id>');
diff --git a/cli/lib/embedded.ts b/cli/lib/embedded.ts
index 6429370..e11a6ba 100644
--- a/cli/lib/embedded.ts
+++ b/cli/lib/embedded.ts
@@ -31,8 +31,8 @@ export const TEMPLATE_TEXT: Record<string, string> = {
   "web/appstore.svg": "<svg role=\"img\" viewBox=\"0 0 24 24\" xmlns=\"http://www.w3.org/2000/svg\"><title>App Store</title><path d=\"M8.8086 14.9194l6.1107-11.0368c.0837-.1513.1682-.302.2437-.4584.0685-.142.1267-.2854.1646-.4403.0803-.3259.0588-.6656-.066-.9767-.1238-.3095-.3417-.5678-.6201-.7355a1.4175 1.4175 0 0 0-.921-.1924c-.3207.043-.6135.1935-.8443.4288-.1094.1118-.1996.2361-.2832.369-.092.1463-.175.2979-.259.4492l-.3864.6979-.3865-.6979c-.0837-.1515-.1667-.303-.2587-.4492-.0837-.1329-.1739-.2572-.2835-.369-.2305-.2353-.5233-.3857-.844-.429a1.4181 1.4181 0 0 0-.921.1926c-.2784.1677-.4964.426-.6203.7355-.1246.311-.1461.6508-.066.9767.038.155.0962.2984.1648.4403.0753.1564.1598.307.2437.4584l1.248 2.2543-4.8625 8.7825H2.0295c-.1676 0-.3351-.0007-.5026.0092-.1522.009-.3004.0284-.448.0714-.3108.0906-.5822.2798-.7783.548-.195.2665-.3006.5929-.3006.9279 0 .3352.1057.6612.3006.9277.196.2683.4675.4575.7782.548.1477.043.296.0623.4481.0715.1675.01.335.009.5026.009h13.0974c.0171-.0357.059-.1294.1-.2697.415-1.4151-.6156-2.843-2.0347-2.843zM3.113 18.5418l-.7922 1.5008c-.0818.1553-.1644.31-.2384.4705-.067.1458-.124.293-.1611.452-.0785.3346-.0576.6834.0645 1.0029.1212.3175.3346.583.607.7549.2727.172.5891.2416.9013.1975.3139-.044.6005-.1986.8263-.4402.1072-.1148.1954-.2424.2772-.3787.0902-.1503.1714-.3059.2535-.4612L6 19.4636c-.0896-.149-.9473-1.4704-2.887-.9218m20.5861-3.0056a1.4707 1.4707 0 0 0-.779-.5407c-.1476-.0425-.2961-.0616-.4483-.0705-.1678-.0099-.3352-.0091-.503-.0091H18.648l-4.3891-7.817c-.6655.7005-.9632 1.485-1.0773 2.1976-.1655 1.0333.0367 2.0934.546 3.0004l5.2741 9.3933c.084.1494.167.299.2591.4435.0837.131.1739.2537.2836.364.231.2323.5238.3809.8449.4232.3192.0424.643-.0244.9217-.1899.2784-.1653.4968-.4204.621-.7257.1246-.3072.146-.6425.0658-.9641-.0381-.1529-.0962-.2945-.165-.4346-.0753-.1543-.1598-.303-.2438-.4524l-1.216-2.1662h1.596c.1677 0 .3351.0009.5029-.009.1522-.009.3007-.028.4483-.0705a1.4707 1.4707 0 0 0 .779-.5407A1.5386 1.5386 0 0 0 24 16.452a1.539 1.539 0 0 0-.3009-.9158Z\"/></svg>",
   "web/googleplay.svg": "<svg role=\"img\" viewBox=\"0 0 24 24\" xmlns=\"http://www.w3.org/2000/svg\"><title>Google Play</title><path d=\"M22.018 13.298l-3.919 2.218-3.515-3.493 3.543-3.521 3.891 2.202a1.49 1.49 0 0 1 0 2.594zM1.337.924a1.486 1.486 0 0 0-.112.568v21.017c0 .217.045.419.124.6l11.155-11.087L1.337.924zm12.207 10.065l3.258-3.238L3.45.195a1.466 1.466 0 0 0-.946-.179l11.04 10.973zm0 2.067l-11 10.933c.298.036.612-.016.906-.183l13.324-7.54-3.23-3.21z\"/></svg>",
   "web/landing.html": "<!doctype html>\n<html lang=\"en\">\n<head>\n<meta charset=\"utf-8\">\n<meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">\n<title>{{APP_NAME}}</title>\n<!--{{SMART_BANNER}}-->\n<!--\n  Minimal landing page written by `storebound web init --landing` from templates/web/landing.html. Deploy the whole\n  output folder to the domain root: index.html, appstore.svg, googleplay.svg and .well-known/. No external requests.\n  The store marks are the simple-icons files (CC0 data), shown as a mask in the text colour; they only name the store.\n-->\n<style>\n  :root { color-scheme: light dark; --fg: #1b1c20; --bg: #ffffff; --muted: #5d6170; --line: #d5d8e0; --card: #f4f5f8; --accent: #1d4ed8; }\n  @media (prefers-color-scheme: dark) { :root { --fg: #eceef3; --bg: #15161a; --muted: #a3a8b6; --line: #343744; --card: #1f2127; --accent: #8fb0ff; } }\n  * { box-sizing: border-box; }\n  body { margin: 0; min-height: 100vh; display: flex; flex-direction: column; background: var(--bg); color: var(--fg); font: 16px/1.6 system-ui, -apple-system, \"Segoe UI\", Roboto, sans-serif; }\n  main { flex: 1; width: 100%; max-width: 640px; margin: 0 auto; padding: 64px 16px 32px; text-align: center; }\n  h1 { font-size: clamp(2rem, 7vw, 3rem); line-height: 1.15; margin: 0 0 32px; overflow-wrap: anywhere; }\n  .stores { display: flex; flex-wrap: wrap; gap: 12px; justify-content: center; margin: 0; padding: 0; list-style: none; }\n  .store { display: inline-flex; align-items: center; gap: 10px; min-height: 48px; padding: 10px 18px; border: 1px solid var(--line); border-radius: 12px; background: var(--card); color: var(--fg); font-weight: 600; text-decoration: none; }\n  .store:hover { border-color: var(--fg); }\n  .store:focus-visible, footer a:focus-visible { outline: 3px solid var(--accent); outline-offset: 2px; }\n  .mark { display: inline-block; flex: none; width: 22px; height: 22px; background-color: currentColor; -webkit-mask: none center / contain no-repeat; mask: none center / contain no-repeat; }\n  .mark-appstore { -webkit-mask-image: url(appstore.svg); mask-image: url(appstore.svg); }\n  .mark-googleplay { -webkit-mask-image: url(googleplay.svg); mask-image: url(googleplay.svg); }\n  footer { width: 100%; max-width: 640px; margin: 0 auto; padding: 24px 16px 32px; border-top: 1px solid var(--line); color: var(--muted); font-size: .875rem; text-align: center; }\n  footer nav { display: flex; flex-wrap: wrap; gap: 8px 20px; justify-content: center; margin-bottom: 12px; }\n  footer a { color: var(--accent); }\n  footer p { margin: 0; }\n</style>\n</head>\n<body>\n<main>\n  <h1>{{APP_NAME}}</h1>\n  <ul class=\"stores\" aria-label=\"Get the app\">\n    <!--apple--><li><a class=\"store\" href=\"{{APP_STORE_URL}}\"><span class=\"mark mark-appstore\" aria-hidden=\"true\"></span>App Store</a></li><!--/apple-->\n    <!--play--><li><a class=\"store\" href=\"{{PLAY_URL}}\"><span class=\"mark mark-googleplay\" aria-hidden=\"true\"></span>Google Play</a></li><!--/play-->\n  </ul>\n</main>\n<footer>\n  <nav aria-label=\"Legal and support\">\n    <a href=\"{{PRIVACY_URL}}\">Privacy Policy</a>\n    <!--terms--><a href=\"{{TERMS_URL}}\">Terms of Use</a><!--/terms-->\n    <a href=\"{{SUPPORT_URL}}\">Support</a>\n  </nav>\n  <p>App Store is a trademark of Apple Inc.; Google Play is a trademark of Google LLC.</p>\n</footer>\n</body>\n</html>\n",
-  "workflows/beta.yml": "# storebound flow \"beta\" for a game: a playtest build on TestFlight and Play internal testing.\n#   storebound flow run beta VERSION=1.2.0 [--apply]\ndescription: Next game build to TestFlight and Play internal testing\nparams:\n  VERSION: \"1.0.0\"\n  GROUP: \"Playtesters\"\nsteps:\n  - id: check\n    run: check\n  - id: ads\n    if: exists ios\n    run: ads scan --ios ios\n    continueOnError: true\n  - id: next-build\n    if: apple\n    run: apple next-build\n    capture: BUILD\n  - id: build\n    if: apple\n    run: apple build --version ${VERSION} --build-number ${BUILD}\n  - id: upload\n    if: apple\n    run: apple upload --no-wait --build ${BUILD} --allow-existing\n  - id: wait\n    if: apple\n    run: apple testflight wait --build ${BUILD} --version ${VERSION}\n  - id: distribute\n    if: apple\n    run: apple testflight distribute --build ${BUILD} --group ${GROUP}\n  - id: play-build\n    if: play\n    run: play build --version-name ${VERSION}\n  - id: play-upload\n    if: play\n    run: play upload --track internal\n  - id: external\n    owner: \"External playtesters: storebound apple testflight distribute --build ${BUILD} --group <external group> --submit-review (Beta App Review is your call)\"\n",
-  "workflows/release.yml": "# storebound flow \"release\" for a game: one version on both stores, up to your Submit click.\n#   storebound flow run release VERSION=1.2.0          reads run, writes run as dry runs (nothing changes)\n#   storebound flow run release VERSION=1.2.0 --apply  writes run for real; each command still asks you first\n#   storebound flow run release --resume --apply       continue after fixing a failed step\n# Steps are storebound commands (no \"storebound\" prefix). `if: apple` / `if: play` skip a store the config does not\n# have; `owner:` steps are never run, they list what you click. `sh:` runs your own build command (only with --apply).\ndescription: Build, upload and check one game version on both stores, then your Submit click\nparams:\n  VERSION: \"1.0.0\"\nsteps:\n  - id: shots\n    if: exists store/renders\n    run: shots check\n  - id: next-build\n    if: apple\n    run: apple next-build\n    capture: BUILD\n  - id: build\n    if: apple\n    run: apple build --version ${VERSION} --build-number ${BUILD}\n  - id: upload\n    if: apple\n    run: apple upload --no-wait --build ${BUILD} --allow-existing\n  - id: wait\n    if: apple\n    run: apple testflight wait --build ${BUILD} --version ${VERSION}\n  - id: play-build\n    if: play\n    run: play build --version-name ${VERSION}\n  - id: play-upload\n    if: play\n    run: play upload --track internal\n  - id: whats-new\n    if: exists store/whats-new\n    run: whats-new apply\n  - id: listing\n    if: apple\n    run: apple listing --version ${VERSION} --build ${BUILD}\n  - id: validate\n    run: validate\n  - id: scan\n    run: scan\n  - id: plan\n    run: release plan ${VERSION}\n  - id: submit\n    owner: \"App Store Connect: Submit for Review (version ${VERSION}, build ${BUILD}). Play Console: promote the internal release and Send changes for review\"\n",
+  "workflows/beta.yml": "# storebound flow \"beta\" for a game: a playtest build on TestFlight and Play internal testing.\n#   storebound flow run beta VERSION=1.2.0 [--apply]\n# VERSION is required (\"?\"). GROUP empty = the internal group of apple.testflight.groups (the group `internal: true`);\n# GROUP=<name> picks a TestFlight group that exists (or is listed in apple.testflight.groups).\ndescription: Next game build to TestFlight and Play internal testing\nparams:\n  VERSION: \"?\"\n  GROUP: \"\"\nsteps:\n  - id: check\n    run: check\n  - id: ads\n    if: exists ios\n    run: ads scan --ios ios\n    continueOnError: true\n  - id: next-build\n    if: apple\n    run: apple next-build\n    capture: BUILD\n  - id: build\n    if: apple\n    run: apple build --version ${VERSION} --build-number ${BUILD}\n  - id: upload\n    if: apple\n    run: apple upload --no-wait --build ${BUILD} --allow-existing\n  - id: wait\n    if: apple\n    run: apple testflight wait --build ${BUILD} --version ${VERSION}\n  - id: distribute\n    if: apple && ${GROUP}\n    run: apple testflight distribute --build ${BUILD} --group ${GROUP}\n  - id: distribute-internal\n    if: apple && !${GROUP} && ${config.testflight.internal}\n    run: apple testflight distribute --build ${BUILD} --group ${config.testflight.internal}\n  - id: no-group\n    if: apple && !${GROUP} && !${config.testflight.internal}\n    owner: \"No TestFlight group: pass GROUP=<name> or add a group with internal: true to apple.testflight.groups, then storebound apple testflight distribute --build ${BUILD} --group <name>\"\n  - id: play-build\n    if: play\n    run: play build --version-name ${VERSION}\n  - id: play-upload\n    if: play\n    run: play upload --track internal\n  - id: external\n    owner: \"External playtesters: storebound apple testflight distribute --build ${BUILD} --group <external group> --submit-review (Beta App Review is your call)\"\n",
+  "workflows/release.yml": "# storebound flow \"release\" for a game: one version on both stores, up to your Submit click.\n#   storebound flow run release VERSION=1.2.0          reads run, writes run as dry runs (nothing changes)\n#   storebound flow run release VERSION=1.2.0 --apply  writes run for real; each command still asks you first\n#   storebound flow run release --resume --apply       continue after fixing a failed step\n# Steps are storebound commands (no \"storebound\" prefix). `if: apple` / `if: play` skip a store the config does not\n# have; `if: ${PARAM}` turns an optional step on by a param (MAC_TAURI=<src-tauri> adds the macOS build, PLAY_TRACK=beta\n# uploads to Play open testing); VERSION is required; `owner:` steps are never run, they list what you click. `sh:` runs your own build command (only with --apply).\ndescription: Build, upload and check one game version on both stores, then your Submit click\nparams:\n  VERSION: \"?\"\n  MAC_TAURI: \"\"\n  PLAY_TRACK: \"internal\"\nsteps:\n  - id: shots\n    if: exists store/renders\n    run: shots check\n  - id: next-build\n    if: apple\n    run: apple next-build\n    capture: BUILD\n  - id: build\n    if: apple\n    run: apple build --version ${VERSION} --build-number ${BUILD}\n  - id: upload\n    if: apple\n    run: apple upload --no-wait --build ${BUILD} --allow-existing\n  - id: wait\n    if: apple\n    run: apple testflight wait --build ${BUILD} --version ${VERSION}\n  - id: mac-build\n    if: apple && ${MAC_TAURI}\n    run: apple build --platform macos --tauri ${MAC_TAURI} --version ${VERSION} --build-number ${BUILD}\n  - id: mac-upload\n    if: apple && ${MAC_TAURI}\n    run: apple upload --platform macos --no-wait --allow-existing\n  - id: play-build\n    if: play\n    run: play build --version-name ${VERSION}\n  - id: play-upload\n    if: play\n    run: play upload --track ${PLAY_TRACK}\n  - id: promote\n    if: play && ${PLAY_TRACK} != production\n    owner: \"Play Console: promote the ${PLAY_TRACK} release to production (storebound play release --version-code <code> --production completed once you agree)\"\n  - id: whats-new\n    if: exists store/whats-new\n    run: whats-new apply\n  - id: listing\n    if: apple\n    run: apple listing --version ${VERSION} --build ${BUILD}\n  - id: validate\n    run: validate\n  - id: scan\n    run: scan\n  - id: plan\n    run: release plan ${VERSION}\n  - id: submit\n    owner: \"App Store Connect: Submit for Review (version ${VERSION}, build ${BUILD}). Play Console: promote the ${PLAY_TRACK} release and Send changes for review\"\n",
 };
 
 /** The pages shots render / video load (cli/shots/*.html), by file name. */
diff --git a/cli/lib/flow.ts b/cli/lib/flow.ts
index 238ade6..1993cbd 100644
--- a/cli/lib/flow.ts
+++ b/cli/lib/flow.ts
@@ -205,7 +205,7 @@ export function validateFlows(flows: Flow[], o: { commands?: Set<string> } = {})
         if (ids.has(s.id)) e.push(`${at}: id used twice`);
         ids.add(s.id);
         for (const t of [s.run, s.sh, s.owner, s.if].filter((x): x is string => typeof x === 'string'))
-          for (const m of t.matchAll(/\$\{([^}]*)\}/g)) if (!vars.has(m[1]!) && !/^env\.[A-Z0-9_]+$/.test(m[1]!)) e.push(`${at}: \${${m[1]}} is not a param or an earlier capture`);
+          for (const m of t.matchAll(/\$\{([^}]*)\}/g)) if (!vars.has(m[1]!) && !/^env\.[A-Z0-9_]+$/.test(m[1]!) && !CONFIG_VARS.includes(m[1]!)) e.push(`${at}: \${${m[1]}} is not a param or an earlier capture`);
         if (s.capture) vars.add(s.capture);
         if (s.run !== undefined) {
           let argv: string[] = [];
@@ -230,6 +230,14 @@ export function validateFlows(flows: Flow[], o: { commands?: Set<string> } = {})
 
 // ---- variables, conditions ----
 
+/** Variables the runner fills from the config (empty when the config has none), usable in `run` and `if`. */
+export const CONFIG_VARS = ['config.testflight.internal'];
+
+/** The required-param marker: `VERSION: "?"` in params means the run needs VERSION=... (no silent default). */
+export const REQUIRED = '?';
+/** Params still at the required marker (not given on the command line). Pure. */
+export function missingParams(vars: Record<string, string>): string[] { return Object.keys(vars).filter(k => vars[k] === REQUIRED); }
+
 /** ${VAR} and ${env.NAME} substituted; unknown ones stay as written (the plan shows them). */
 export function substitute(text: string, vars: Record<string, string>, env: Record<string, string | undefined> = {}): string {
   return text.replace(/\$\{([^}]*)\}/g, (m, k: string) => (k.startsWith('env.') ? env[k.slice(4)] ?? m : vars[k] ?? m));
@@ -306,6 +314,39 @@ export function planStep(s: FlowStep, part: PlannedStep['part'], mode: Mode, var
   return { ...base, kind, argv: addDry ? [...argv, '--dry'] : addYes ? [...argv, '--yes'] : argv, dryAdded: addDry, ...(addYes ? { yesAdded: true } : {}), ...(mode === 'plan' ? { skip: 'plan only' } : {}) };
 }
 
+const PRODUCERS = ['apple build', 'play build'];
+const CONSUMERS = ['apple upload', 'play upload'];
+const AFTER_UPLOAD = ['apple testflight wait', 'apple testflight distribute'];
+
+/** Stores whose artifact (IPA / AAB / PKG) or uploaded build only exists after a real earlier step ("apple", "apple:mac", "play"). */
+export interface DryPending { built: Set<string>; uploaded: Set<string> }
+
+const storeKey = (argv: string[]): string => {
+  const i = argv.indexOf('--platform');
+  const mac = (i >= 0 && /^(macos|mac)$/i.test(argv[i + 1] ?? '')) || argv.includes('--tauri');
+  return `${argv[0]}${mac ? ':mac' : ''}`;
+};
+
+/** Records a step that ran as a dry run: a dry build leaves no IPA / AAB. Pure. */
+export function noteDry(p: PlannedStep, pending: DryPending): void {
+  if (!p.argv || !p.dryAdded || p.skip) return;
+  if (PRODUCERS.includes(words(p.argv).slice(0, 2).join(' '))) pending.built.add(storeKey(p.argv));
+}
+
+/** Why a step is only planned in a dry run: its input (the IPA / AAB, or the uploaded build) would come from an earlier
+ *  step that did not really run. null = run it (always null with --apply: a real upload with no IPA still fails). Pure. */
+export function plannedForDryInput(p: PlannedStep, mode: Mode, pending: DryPending): string | null {
+  if (mode === 'apply' || !p.argv || p.skip) return null;
+  const w = words(p.argv);
+  const k2 = w.slice(0, 2).join(' ');
+  if (CONSUMERS.includes(k2) && !p.argv.some(a => /\.(ipa|aab|pkg)$/.test(a)) && pending.built.has(storeKey(p.argv))) {
+    pending.uploaded.add(storeKey(p.argv));
+    return `planned: would upload the ${k2 === 'play upload' ? 'AAB' : storeKey(p.argv).endsWith(':mac') ? 'PKG' : 'IPA'} the ${w[0]} build step writes (dry run: nothing built)`;
+  }
+  if (AFTER_UPLOAD.includes(w.slice(0, 3).join(' ')) && pending.uploaded.has('apple')) return 'planned: the build is not on App Store Connect in a dry run';
+  return null;
+}
+
 /** Index of the step to start from: --from <id> (exact, or the first id under a sub-flow prefix). */
 export function startIndex(steps: FlowStep[], from: string | undefined): number {
   if (!from) return 0;
diff --git a/cli/lib/signing.ts b/cli/lib/signing.ts
index 9b28e45..55623be 100644
--- a/cli/lib/signing.ts
+++ b/cli/lib/signing.ts
@@ -113,7 +113,7 @@ export interface CertChoice { cert: ApiCert | null; why: string; usable: ApiCert
 
 /** A certificate is usable when it is of the wanted type, active, valid for 30 more days and this machine holds its
  *  private key (a key file in .storebound/signing or a code signing identity in the keychain). Newest first. */
-export function pickCertificate(certs: ApiCert[], type: CertType, hasKey: (c: ApiCert) => boolean, now = Date.now()): CertChoice {
+export function pickCertificate(certs: ApiCert[], type: CertType, hasKey: (c: ApiCert) => boolean, now = Date.now(), platform: string = process.platform): CertChoice {
   const ofType = certs.filter(c => c.attributes.certificateType === type && c.attributes.activated !== false);
   const valid = ofType.filter(c => Date.parse(c.attributes.expirationDate ?? '') > now);
   const expiring = valid.filter(c => Date.parse(c.attributes.expirationDate!) - now < 30 * 86_400_000);
@@ -121,7 +121,9 @@ export function pickCertificate(certs: ApiCert[], type: CertType, hasKey: (c: Ap
   const withoutKey = valid.filter(c => !hasKey(c));
   const cert = usable[0] ?? null;
   const why = cert ? `using ${cert.attributes.name ?? cert.attributes.displayName ?? type} (expires ${cert.attributes.expirationDate?.slice(0, 10)})`
-    : withoutKey.length ? `${withoutKey.length} ${type} certificate(s) on the team, but this machine has none of their private keys: a new one is needed (or import the .p12 from the Mac that made it)`
+    : withoutKey.length ? `${withoutKey.length} ${type} certificate(s) on the team, but this machine has none of their private keys: ${platform === 'darwin'
+      ? 'a new one is needed (or import the .p12 from the Mac that made it)'
+      : 'this machine cannot build or sign for Apple. The keys live on the Mac that made the certificates: build there (e.g. over ssh to that Mac). Do not create another certificate, Apple caps them per team'}`
     : `no valid ${type} certificate`;
   return { cert, why, usable, withoutKey, expiring };
 }
diff --git a/cli/validate.ts b/cli/validate.ts
index 539f453..b95f7a2 100644
--- a/cli/validate.ts
+++ b/cli/validate.ts
@@ -34,7 +34,7 @@ import { rendersCheck } from './shots/check';
 import { resolvedTablets } from './shots/report';
 import { runScan } from './lib/scan';
 import type { ScanFinding } from './lib/scan/rules';
-import { playClient } from './play/client';
+import { EDIT_GONE, playClient } from './play/client';
 import { listOneTimeProducts } from './play/products';
 import { creativeNote } from './shots/creative';
 import { creativeWaiting, localCreative } from './apple/creative-assets';
@@ -117,7 +117,7 @@ export async function collectApple(ctx: Ctx): Promise<AppleSnapshot> {
   const every = await allVersions(c, appId);
   const editableOf = (x: J) => APPLE_EDITABLE.has(stateOf(x));
   const withEditable = [...new Set(every.filter(editableOf).map(platformOf))];
-  const platform: AscPlatform = parsePlatform(ctx.args.get('platform')) ?? (withEditable.length === 1 ? withEditable[0]! : withEditable.includes('IOS') || !every.length ? 'IOS' : platformOf(every[0]));
+  const platform: AscPlatform = parsePlatform(ctx.args.get('platform')) ?? (withEditable.length === 1 ? withEditable[0]! : withEditable.includes('IOS') || !every.length || every.some(x => platformOf(x) === 'IOS') ? 'IOS' : platformOf(every[0]));
   const versions = await c.all(versionsPath(appId, platform, 10));
   const v: J = (await c.editableVersion(platform)) ?? versions[0] ?? null;
   const otherPlatformVersions = every.filter(x => platformOf(x) !== platform && editableOf(x)).map(x => ({ versionString: String(x.attributes.versionString), state: stateOf(x), platform: platformOf(x) }));
@@ -186,7 +186,7 @@ export async function collectApple(ctx: Ctx): Promise<AppleSnapshot> {
     deviceFamilies: platform === 'IOS' ? await deviceFamilyVerdicts(ctx, c, appId) : undefined,
     build, locales, reviewDetail, ageRating,
     expectedLocales: config.languages.map(l => l.apple).filter((x): x is string => !!x),
-    requiredDisplayTypes: requiredDisplayTypes(config.apple),
+    requiredDisplayTypes: requiredDisplayTypes(config.apple, platform),
     iphoneDuo: !!config.apple?.iphoneDuo, play: !!config.play,
     macVersion: every.some(x => platformOf(x) === 'MAC_OS'), mac: !!config.apple?.mac,
     priceSchedule: !!sched?.included?.some((x: J) => x.type === 'appPrices'),
@@ -202,23 +202,25 @@ export async function collectPlay(ctx: Ctx): Promise<PlaySnapshot> {
   const { config, root } = ctx.loaded;
   const play = await playClient(root, config.play!.packageName);
   const tablets = resolvedTablets(config, ctx.loaded.resolve(ctx.args.get('src') ?? config.renders ?? config.shots?.out ?? 'store/renders'));
-  const e = await play.call<{ id: string }>('POST', `${play.API}/edits`, {});
-  log('validate', `play: read-only edit ${e.id} (deleted afterwards)`);
-  try {
-    const details = await play.call<{ defaultLanguage?: string; contactWebsite?: string }>('GET', `${play.API}/edits/${e.id}/details`);
-    const raw = (await play.call<{ listings?: { language: string; title?: string; shortDescription?: string; fullDescription?: string }[] }>('GET', `${play.API}/edits/${e.id}/listings`)).listings ?? [];
+  // play.read: one edit under the machine lock, deleted only after every read inside has finished, and opened anew once
+  // when Play invalidates it meanwhile ("This Edit has been deleted"). A bare POST /edits here was neither locked nor
+  // retried, so another storebound process (or the Console) ending the edit failed the screenshot reads with a false blocker.
+  return play.read(async editId => {
+    log('validate', `play: read-only edit ${editId} (deleted afterwards)`);
+    const details = await play.call<{ defaultLanguage?: string; contactWebsite?: string }>('GET', `${play.API}/edits/${editId}/details`);
+    const raw = (await play.call<{ listings?: { language: string; title?: string; shortDescription?: string; fullDescription?: string }[] }>('GET', `${play.API}/edits/${editId}/listings`)).listings ?? [];
     const listings: PlaySnapshot['listings'] = [];
     for (const l of raw) {
       const images: Record<string, number> = {};
       for (const type of Object.keys(playRequiredImages(tablets)))
-        images[type] = ((await play.call<{ images?: unknown[] }>('GET', `${play.API}/edits/${e.id}/listings/${l.language}/${type}`)).images ?? []).length;
+        images[type] = ((await play.call<{ images?: unknown[] }>('GET', `${play.API}/edits/${editId}/listings/${l.language}/${type}`)).images ?? []).length;
       listings.push({ ...l, images });
     }
-    const tracks = ((await play.call<{ tracks?: { track: string; releases?: { status: string; versionCodes?: string[]; userFraction?: number }[] }[] }>('GET', `${play.API}/edits/${e.id}/tracks`)).tracks ?? [])
+    const tracks = ((await play.call<{ tracks?: { track: string; releases?: { status: string; versionCodes?: string[]; userFraction?: number }[] }[] }>('GET', `${play.API}/edits/${editId}/tracks`)).tracks ?? [])
       .map(t => ({ track: t.track, releases: (t.releases ?? []).map(r => ({ status: r.status, versionCodes: r.versionCodes ?? [], userFraction: r.userFraction })) }));
     const products = (await listOneTimeProducts(play)).map(p => ({ productId: p.productId, states: (p.purchaseOptions ?? []).map(o => o.state ?? '') }));
     // the production track's countries (read-only in the API: set in the console, `console plan play-production-countries`)
-    const productionCountries = await play.call<{ countries?: unknown[]; restOfWorld?: boolean }>('GET', `${play.API}/edits/${e.id}/countryAvailability/production`)
+    const productionCountries = await play.call<{ countries?: unknown[]; restOfWorld?: boolean }>('GET', `${play.API}/edits/${editId}/countryAvailability/production`)
       .then(r => (r.restOfWorld ? -1 : (r.countries ?? []).length)).catch(() => null);
     const website = details.contactWebsite ?? null;
     const appAdsLines = config.ads?.appAdsTxt ?? [];
@@ -245,9 +247,7 @@ export async function collectPlay(ctx: Ctx): Promise<PlaySnapshot> {
       expectedProducts: (config.products ?? []).filter(p => sellsOn(config, p, 'play')).map(p => p.id),
       privacyUrl: await checkUrl(config.app.privacyPolicyUrl), website, appAds, appAdsLines, adsLikely, category: playCategoryOf(config), productionCountries,
     };
-  } finally {
-    await play.call('DELETE', `${play.API}/edits/${e.id}`).catch(() => {});
-  }
+  });
 }
 
 /** Scan findings as validate findings: blocker stays blocker, high / medium become warnings; low and owner-accepted
@@ -279,7 +279,13 @@ export async function run(ctx: Ctx): Promise<void> {
     const access = await brokerFindings(ctx.loaded).catch(e => [{ store: 'play' as const, level: 'warn' as const, code: 'broker-unavailable', msg: (e as Error).message }]);
     findings.push(...access);
     try { findings.push(...playRules({ ...(await collectPlay(ctx)), renders: local?.play })); }
-    catch (e) { findings.push({ store: 'play', level: 'blocker', code: 'api', msg: (e as Error).message.slice(0, 600) }, ...rendersFindings('play', local?.play)); }
+    catch (e) {
+      // a Play edit that vanished under the reads is a tool problem (the retry inside play.read failed too), never a store blocker
+      const gone = EDIT_GONE.test((e as Error).message);
+      findings.push(gone
+        ? { store: 'play', level: 'warn', code: 'edit-gone', msg: `Play validate could not finish its read-only edit (${(e as Error).message.slice(0, 300)}): a tool problem, not a store finding`, fix: 'storebound validate --play (run it again; close other storebound runs and Console saves first)' }
+        : { store: 'play', level: 'blocker', code: 'api', msg: (e as Error).message.slice(0, 600) }, ...rendersFindings('play', local?.play));
+    }
   } else if (a.has('play')) warn('validate', 'no play section in the config');
   // Game Center / Play Games Services: entitlement, APP_ID resource, store state vs the config
   if (config.games || config.apple) {
diff --git a/docs/api-coverage.md b/docs/api-coverage.md
index 6ffd6c3..e5db8ff 100644
--- a/docs/api-coverage.md
+++ b/docs/api-coverage.md
@@ -651,7 +651,7 @@ Specs: Apple [App Store Connect API 4.5.1](https://developer.apple.com/sample-co
 | `builds_buildBetaDetail_getToOneRelationship` | GET | `/v1/builds/{id}/relationships/buildBetaDetail` | read |  |
 | `builds_diagnosticSignatures_getToManyRelated` | GET | `/v1/builds/{id}/diagnosticSignatures` | read | health |
 | `builds_diagnosticSignatures_getToManyRelationship` | GET | `/v1/builds/{id}/relationships/diagnosticSignatures` | read |  |
-| `builds_getCollection` | GET | `/v1/builds` | read | apple/build, apple/build-mas, apple/encryption, apple/listing, apple/next-build, apple/resubmit, apple/status, apple/testflight, apple/upload, art, health, lib/store-apps, triage |
+| `builds_getCollection` | GET | `/v1/builds` | read | apple/encryption, apple/listing, apple/next-build, apple/resubmit, apple/status, apple/testflight, apple/upload, art, health, lib/store-apps, triage |
 | `builds_getInstance` | GET | `/v1/builds/{id}` | read | apple/device-families |
 | `builds_icons_getToManyRelated` | GET | `/v1/builds/{id}/icons` | read |  |
 | `builds_icons_getToManyRelationship` | GET | `/v1/builds/{id}/relationships/icons` | read |  |
@@ -1565,9 +1565,9 @@ Specs: Apple [App Store Connect API 4.5.1](https://developer.apple.com/sample-co
 | `androidpublisher.appstorecatalog.recentupdateevents.list` | GET | `androidpublisher/v3/appstorecatalog/{appStorePackageName}/recentUpdateEvents` | read |  |
 | **androidpublisher.edits** (5) | | | | |
 | `androidpublisher.edits.commit` | POST | `androidpublisher/v3/applications/{packageName}/edits/{editId}:commit` | owner only (typed confirm) | play/client |
-| `androidpublisher.edits.delete` | DELETE | `androidpublisher/v3/applications/{packageName}/edits/{editId}` | owner only (typed confirm) | apps, onboard, play/client, validate |
+| `androidpublisher.edits.delete` | DELETE | `androidpublisher/v3/applications/{packageName}/edits/{editId}` | owner only (typed confirm) | apps, onboard, play/client |
 | `androidpublisher.edits.get` | GET | `androidpublisher/v3/applications/{packageName}/edits/{editId}` | read |  |
-| `androidpublisher.edits.insert` | POST | `androidpublisher/v3/applications/{packageName}/edits` | write (dry by default) | apps, onboard, play/client, validate |
+| `androidpublisher.edits.insert` | POST | `androidpublisher/v3/applications/{packageName}/edits` | write (dry by default) | apps, onboard, play/client |
 | `androidpublisher.edits.validate` | POST | `androidpublisher/v3/applications/{packageName}/edits/{editId}:validate` | write (dry by default) | play/client |
 | **androidpublisher.edits.apks** (3) | | | | |
 | `androidpublisher.edits.apks.addexternallyhosted` | POST | `androidpublisher/v3/applications/{packageName}/edits/{editId}/apks/externallyHosted` | write (dry by default) |  |
diff --git a/skills/release-flows/SKILL.md b/skills/release-flows/SKILL.md
index 266e326..b5dfb0a 100644
--- a/skills/release-flows/SKILL.md
+++ b/skills/release-flows/SKILL.md
@@ -18,7 +18,7 @@ shell after the dry run).
 ```yaml
 description: Build, upload and check one version on both stores
 params:
-  VERSION: "1.0.0"            # flow run release VERSION=1.2.0 overrides
+  VERSION: "?"                # "?" = required: flow run release VERSION=1.2.0 (no silent default; --resume reuses the last run's)
 steps:
   - id: next-build
     if: apple                 # apple | play | exists <path> | ${VAR} | !${VAR} | ${A} == x; && joins
@@ -36,6 +36,10 @@ before: []                    # hooks: before / after the steps, onError when a
 after: []
 onError: []
 ```
+`${config.testflight.internal}` is filled by the runner with the internal groups of `apple.testflight.groups` (empty when
+none); the beta template uses it when `GROUP` is empty. The release template has optional steps by param: `MAC_TAURI=<src-tauri>`
+adds the macOS build + upload, `PLAY_TRACK=beta` uploads to Play open testing (default `internal`); its `promote` step is an
+owner step listing the Play promotion.
 `continueOnError: true` lets a step fail without stopping the flow.
 A web build before the native builds (Capacitor: `npm run build && npx cap sync`) belongs in `build.prebuild` in the
 config rather than an `sh:` step: `apple build` and `play build` run it themselves, and within one `flow run` it runs
@@ -44,7 +48,8 @@ once (the second build step prints "prebuild skipped (already ran in this flow r
 ## Modes
 - `flow run release VERSION=1.2.0` (default): read steps (check, validate, scan, release plan, next-build, status ...)
   run for real; **every write step runs with `--dry`**; wait steps check once; shell steps are skipped. Nothing
-  changes. Show this output to the owner.
+  changes. Show this output to the owner. A dry `apple build` / `play build` writes no IPA / AAB, so the upload after it
+  (and `apple testflight wait` / `distribute` after that) is shown as "planned" instead of failing; a real run is unchanged.
 - `--dry`: the plan only, nothing runs.
 - `--apply`: writes and shell steps run for real; each write command still asks its own confirmation in the
   terminal. Never add `--yes` to a step (flow validate refuses it).
diff --git a/templates/workflows/beta.yml b/templates/workflows/beta.yml
index 6049b2e..2dfe6f1 100644
--- a/templates/workflows/beta.yml
+++ b/templates/workflows/beta.yml
@@ -1,9 +1,11 @@
 # storebound flow "beta" for a game: a playtest build on TestFlight and Play internal testing.
 #   storebound flow run beta VERSION=1.2.0 [--apply]
+# VERSION is required ("?"). GROUP empty = the internal group of apple.testflight.groups (the group `internal: true`);
+# GROUP=<name> picks a TestFlight group that exists (or is listed in apple.testflight.groups).
 description: Next game build to TestFlight and Play internal testing
 params:
-  VERSION: "1.0.0"
-  GROUP: "Playtesters"
+  VERSION: "?"
+  GROUP: ""
 steps:
   - id: check
     run: check
@@ -25,8 +27,14 @@ steps:
     if: apple
     run: apple testflight wait --build ${BUILD} --version ${VERSION}
   - id: distribute
-    if: apple
+    if: apple && ${GROUP}
     run: apple testflight distribute --build ${BUILD} --group ${GROUP}
+  - id: distribute-internal
+    if: apple && !${GROUP} && ${config.testflight.internal}
+    run: apple testflight distribute --build ${BUILD} --group ${config.testflight.internal}
+  - id: no-group
+    if: apple && !${GROUP} && !${config.testflight.internal}
+    owner: "No TestFlight group: pass GROUP=<name> or add a group with internal: true to apple.testflight.groups, then storebound apple testflight distribute --build ${BUILD} --group <name>"
   - id: play-build
     if: play
     run: play build --version-name ${VERSION}
diff --git a/templates/workflows/release.yml b/templates/workflows/release.yml
index f73ecca..13d9d79 100644
--- a/templates/workflows/release.yml
+++ b/templates/workflows/release.yml
@@ -3,10 +3,13 @@
 #   storebound flow run release VERSION=1.2.0 --apply  writes run for real; each command still asks you first
 #   storebound flow run release --resume --apply       continue after fixing a failed step
 # Steps are storebound commands (no "storebound" prefix). `if: apple` / `if: play` skip a store the config does not
-# have; `owner:` steps are never run, they list what you click. `sh:` runs your own build command (only with --apply).
+# have; `if: ${PARAM}` turns an optional step on by a param (MAC_TAURI=<src-tauri> adds the macOS build, PLAY_TRACK=beta
+# uploads to Play open testing); VERSION is required; `owner:` steps are never run, they list what you click. `sh:` runs your own build command (only with --apply).
 description: Build, upload and check one game version on both stores, then your Submit click
 params:
-  VERSION: "1.0.0"
+  VERSION: "?"
+  MAC_TAURI: ""
+  PLAY_TRACK: "internal"
 steps:
   - id: shots
     if: exists store/renders
@@ -24,12 +27,21 @@ steps:
   - id: wait
     if: apple
     run: apple testflight wait --build ${BUILD} --version ${VERSION}
+  - id: mac-build
+    if: apple && ${MAC_TAURI}
+    run: apple build --platform macos --tauri ${MAC_TAURI} --version ${VERSION} --build-number ${BUILD}
+  - id: mac-upload
+    if: apple && ${MAC_TAURI}
+    run: apple upload --platform macos --no-wait --allow-existing
   - id: play-build
     if: play
     run: play build --version-name ${VERSION}
   - id: play-upload
     if: play
-    run: play upload --track internal
+    run: play upload --track ${PLAY_TRACK}
+  - id: promote
+    if: play && ${PLAY_TRACK} != production
+    owner: "Play Console: promote the ${PLAY_TRACK} release to production (storebound play release --version-code <code> --production completed once you agree)"
   - id: whats-new
     if: exists store/whats-new
     run: whats-new apply
@@ -43,4 +55,4 @@ steps:
   - id: plan
     run: release plan ${VERSION}
   - id: submit
-    owner: "App Store Connect: Submit for Review (version ${VERSION}, build ${BUILD}). Play Console: promote the internal release and Send changes for review"
+    owner: "App Store Connect: Submit for Review (version ${VERSION}, build ${BUILD}). Play Console: promote the ${PLAY_TRACK} release and Send changes for review"
diff --git a/tests/flow-dry.test.ts b/tests/flow-dry.test.ts
new file mode 100644
index 0000000..7dd5ccc
--- /dev/null
+++ b/tests/flow-dry.test.ts
@@ -0,0 +1,100 @@
+// storebound flow, dry runs: a step whose input (the IPA / AAB, the uploaded build) only a real earlier step makes is
+// planned, not failed; a real run is untouched. The beta template: required VERSION, GROUP empty = the config's internal group.
+import { afterAll, describe, expect, test } from 'bun:test';
+import { mkdirSync, mkdtempSync, rmSync, writeFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import { type DryPending, evalIf, expand, flowsOfFile, missingParams, noteDry, planStep, plannedForDryInput, substitute, validateFlows } from '../cli/lib/flow';
+import { parseYaml } from '../cli/lib/yaml';
+import { readFileSync } from 'node:fs';
+
+const ROOT = join(import.meta.dir, '..');
+const CLI = join(ROOT, 'cli', 'index.ts');
+const tmp = mkdtempSync(join(tmpdir(), 'storebound-flow-dry-'));
+afterAll(() => rmSync(tmp, { recursive: true, force: true }));
+const sb = (cwd: string, ...args: string[]) => Bun.spawnSync([process.execPath, CLI, ...args], { cwd, stdout: 'pipe', stderr: 'pipe', stdin: 'ignore' });
+const C = { apple: true, play: true, exists: () => false };
+
+const load = (name: string) => flowsOfFile(`templates/workflows/${name}.yml`, parseYaml(readFileSync(join(ROOT, 'templates', 'workflows', `${name}.yml`), 'utf8')), name).flows[0]!;
+
+/** What the runner decides per step in a mode: 'ran' (storebound is called), 'planned' (dry input missing) or 'skipped'. */
+function simulate(name: string, mode: 'dry' | 'apply', vars: Record<string, string>) {
+  const f = load(name);
+  const pending: DryPending = { built: new Set(), uploaded: new Set() };
+  const out: Record<string, { how: string; argv?: string[]; owner?: string }> = {};
+  for (const s of expand(f, new Map([[f.name, f]]), 'steps').steps) {
+    const p = planStep(s, 'steps', mode, vars, C);
+    if (p.skip) { out[s.id] = { how: 'skipped', argv: p.argv, owner: p.owner }; continue; }
+    const why = plannedForDryInput(p, mode, pending);
+    if (why) { out[s.id] = { how: 'planned', argv: p.argv }; continue; }
+    noteDry(p, pending);
+    out[s.id] = { how: 'ran', argv: p.argv };
+  }
+  return out;
+}
+
+describe('dry flows plan what a dry earlier step cannot produce', () => {
+  test('beta: dry build then upload (and wait, distribute) are planned, reads and checks still run', () => {
+    const r = simulate('beta', 'dry', { VERSION: '1.2.0', GROUP: '', BUILD: '7', 'config.testflight.internal': 'Team' });
+    expect(r['build']).toMatchObject({ how: 'ran', argv: ['apple', 'build', '--version', '1.2.0', '--build-number', '7', '--dry'] });
+    expect(r['upload']!.how).toBe('planned');
+    expect(r['wait']!.how).toBe('planned');
+    expect(r['distribute-internal']!.how).toBe('planned');
+    expect(r['play-build']!.how).toBe('ran');
+    expect(r['play-upload']!.how).toBe('planned');
+    expect(r['check']!.how).toBe('ran');
+  });
+
+  test('a real run is untouched: upload with no IPA still runs (and fails inside the command)', () => {
+    const r = simulate('beta', 'apply', { VERSION: '1.2.0', GROUP: '', BUILD: '7', 'config.testflight.internal': 'Team' });
+    expect(r['upload']).toMatchObject({ how: 'ran', argv: ['apple', 'upload', '--no-wait', '--build', '7', '--allow-existing'] });
+    expect(r['play-upload']!.how).toBe('ran');
+  });
+
+  test('an upload of a named file, or without a dry build before it, is not planned away', () => {
+    const pending: DryPending = { built: new Set(['apple']), uploaded: new Set() };
+    const up = planStep({ id: 'u', run: 'apple upload build/App.ipa' }, 'steps', 'dry', {}, C);
+    expect(plannedForDryInput(up, 'dry', pending)).toBeNull();
+    const fresh: DryPending = { built: new Set(), uploaded: new Set() };
+    expect(plannedForDryInput(planStep({ id: 'u', run: 'apple upload --no-wait' }, 'steps', 'dry', {}, C), 'dry', fresh)).toBeNull();
+  });
+
+  test('release: the macOS pkg is tracked apart from the iOS IPA', () => {
+    const r = simulate('release', 'dry', { VERSION: '2.0.0', MAC_TAURI: 'src-tauri', PLAY_TRACK: 'beta', BUILD: '9' });
+    expect(r['build']!.how).toBe('ran');
+    expect(r['upload']!.how).toBe('planned');
+    expect(r['mac-build']!.argv).toContain('--dry');
+    expect(r['mac-upload']!.how).toBe('planned');
+    expect(r['play-upload']!.argv).toEqual(['play', 'upload', '--track', 'beta', '--dry']);
+    const off = simulate('release', 'dry', { VERSION: '2.0.0', MAC_TAURI: '', PLAY_TRACK: 'internal', BUILD: '9' });
+    expect(off['mac-build']!.how).toBe('skipped');
+    expect(off['mac-upload']!.how).toBe('skipped');
+    expect(off['promote']!.owner).toContain('internal');
+  });
+});
+
+describe('beta template defaults', () => {
+  test('VERSION is required, GROUP defaults to empty and falls to the internal group of the config', () => {
+    const f = load('beta');
+    expect(f.params['VERSION']).toBe('?');
+    expect(f.params['GROUP']).toBe('');
+    expect(missingParams({ ...f.params })).toEqual(['VERSION']);
+    expect(missingParams({ ...f.params, VERSION: '1.0.0' })).toEqual([]);
+    const steps = expand(f, new Map([[f.name, f]]), 'steps').steps;
+    const by = (v: Record<string, string>) => steps.filter(s => s.id.startsWith('distribute') || s.id === 'no-group')
+      .filter(s => evalIf(substitute(s.if ?? '', v), C)).map(s => s.id);
+    expect(by({ GROUP: '', 'config.testflight.internal': 'Team' })).toEqual(['distribute-internal']);
+    expect(by({ GROUP: 'QA', 'config.testflight.internal': 'Team' })).toEqual(['distribute']);
+    expect(by({ GROUP: '', 'config.testflight.internal': '' })).toEqual(['no-group']);
+    expect(validateFlows([f, load('release')])).toEqual([]);
+  });
+
+  test('flow run beta without VERSION fails early with a clear message', () => {
+    const dir = join(tmp, 'req');
+    mkdirSync(join(dir, 'store', 'workflows'), { recursive: true });
+    writeFileSync(join(dir, 'store', 'workflows', 'beta.yml'), readFileSync(join(ROOT, 'templates', 'workflows', 'beta.yml'), 'utf8'));
+    const p = sb(dir, 'flow', 'run', 'beta');
+    expect(p.exitCode).not.toBe(0);
+    expect(p.stderr.toString() + p.stdout.toString()).toContain('beta needs VERSION=<value>');
+  });
+});
diff --git a/tests/next-build-platforms.test.ts b/tests/next-build-platforms.test.ts
new file mode 100644
index 0000000..7b4fa28
--- /dev/null
+++ b/tests/next-build-platforms.test.ts
@@ -0,0 +1,73 @@
+// One app record, an iOS and a macOS App Store version (pitfall 79): CFBundleVersion must be unique across ALL the app's
+// builds, so `apple next-build`, `apple build` and `apple build --platform macos` (also --dry) share one computation.
+// Seen live: the macOS dry run proposed a build number an uploaded macOS build already had (it asked only for macOS
+// builds), while next-build said the right one. Against the fake App Store Connect.
+import { afterAll, afterEach, beforeAll, beforeEach, describe, expect, test } from 'bun:test';
+import type { ShipConfig } from '../cli/lib/config';
+import { appNextBuild, run as nextBuild } from '../cli/apple/next-build';
+import { identityLine, run as buildMas } from '../cli/apple/build-mas';
+import { ascEnv, BASE, capture, project, restore } from './helpers/store-mock';
+import { installStores, type Stores, uninstallStores } from './helpers/fake-stores';
+
+const APP = '6400000101';
+const CONFIG: ShipConfig = { ...BASE };
+const TAURI = JSON.stringify({ productName: 'Example Notes', identifier: 'com.example.notes', version: '1.2.0' });
+let s: Stores;
+beforeAll(ascEnv);
+afterAll(restore);
+beforeEach(() => { s = installStores(); });
+afterEach(uninstallStores);
+
+const build = (id: string, version: string, state = 'VALID') => s.asc.put({ type: 'builds', id, attributes: { version, processingState: state }, rels: { app: APP } });
+/** iOS builds 202610261700 / ...1730, a macOS build ...1731 and an expired one ...1734 in another state. */
+function seed(): void {
+  build('b-ios-1', '202610261700');
+  build('b-ios-2', '202610261730');
+  build('b-mac-1', '202610261731');
+  build('b-mac-2', '202610261734', 'PROCESSING');
+}
+
+describe('next build number over every platform', () => {
+  test('apple next-build and the macOS dry run agree and sit above the highest build', async () => {
+    seed();
+    const p = project(CONFIG, { 'src-tauri/tauri.conf.json': TAURI });
+    const nb = await capture(() => nextBuild(p.ctx(['--json'])));
+    expect(JSON.parse(nb.out)).toEqual({ next: '202610261735', builds: 4 });
+    const dry = await capture(() => buildMas(p.ctx(['--tauri', 'src-tauri', '--unsigned', '--dry', '--json']), 'linux'));
+    expect(JSON.parse(dry.out.slice(dry.out.indexOf('{')))).toMatchObject({ platform: 'MAC_OS', build: '202610261735' });
+  });
+  test('no request narrows the build list to one platform', async () => {
+    seed();
+    const p = project(CONFIG, { 'src-tauri/tauri.conf.json': TAURI });
+    await capture(() => buildMas(p.ctx(['--tauri', 'src-tauri', '--unsigned', '--dry', '--json']), 'linux'));
+    const reads = s.calls.filter(c => /\/v1\/builds/.test(c.path));
+    expect(reads.length).toBeGreaterThan(0);
+    for (const r of reads) expect(decodeURIComponent(r.path)).not.toMatch(/preReleaseVersion|platform|processingState/);
+  });
+  test('every page counts', async () => {
+    const pages: Record<string, unknown> = {
+      '/p1': { data: [{ attributes: { version: '5' } }], links: { next: '/p2' } },
+      '/p2': { data: [{ attributes: { version: '41' } }], links: { next: '/p3' } },
+      '/p3': { data: [{ attributes: { version: '9' } }], links: {} },
+    };
+    const seen: string[] = [];
+    const client = { app: async () => APP, all: async (path: string) => { seen.push(path); const out: unknown[] = []; for (let u: string | undefined = '/p1'; u; u = (pages[u] as { links: { next?: string } }).links.next) out.push(...(pages[u] as { data: unknown[] }).data); return out; } };
+    expect(await appNextBuild(client as never)).toEqual({ next: '42', builds: 3 });
+    expect(seen[0]).toContain(`filter[app]=${APP}`);
+  });
+  test('an app without builds starts at 1', async () => {
+    expect((await appNextBuild({ app: async () => APP, all: async () => [] } as never)).next).toBe('1');
+  });
+});
+
+describe('identity line off a Mac', () => {
+  test('a non-macOS machine is called a non-build machine, not "none found"', () => {
+    const line = identityLine({ platform: 'win32', appIdentity: null, installerIdentity: null, profile: null });
+    expect(line).toContain('not a build machine');
+    expect(line).toContain('Mac');
+    expect(line).not.toContain('none found');
+  });
+  test('on a Mac a missing identity is still reported as missing', () => {
+    expect(identityLine({ platform: 'darwin', appIdentity: null, installerIdentity: 'Mac Installer', profile: null })).toContain('app identity: (none found); installer identity: Mac Installer');
+  });
+});
diff --git a/tests/validate-macos.test.ts b/tests/validate-macos.test.ts
new file mode 100644
index 0000000..baae419
--- /dev/null
+++ b/tests/validate-macos.test.ts
@@ -0,0 +1,52 @@
+// A macOS App Store version is checked against the Mac screenshot set only (APP_DESKTOP), never the iPhone / iPad
+// sets: validate / release plan showed 2 false blockers per locale for an app whose editable version was macOS.
+// Also: a non-macOS machine without the certificates' keys must not be told to create another certificate.
+import { describe, expect, test } from 'bun:test';
+import { requiredDisplayTypes } from '../cli/apple/screenshots';
+import { pickCertificate, type ApiCert } from '../cli/lib/signing';
+import { appleRules, type AppleSnapshot } from '../cli/lib/validate-rules';
+
+const snap = (platform: string, apple: Parameters<typeof requiredDisplayTypes>[0], shots: Record<string, number>): AppleSnapshot => ({
+  version: { versionString: '1.0.0', state: 'PREPARE_FOR_SUBMISSION', platform }, build: null, expectedLocales: ['en-US', 'de-DE'],
+  locales: ['en-US', 'de-DE'].map(locale => ({ locale, name: 'n', subtitle: 's', description: 'd', keywords: 'k', screenshots: shots })),
+  requiredDisplayTypes: requiredDisplayTypes(apple, platform), mac: !!apple?.mac, macVersion: platform === 'MAC_OS',
+  reviewDetail: null, ageRating: null, priceSchedule: true, availability: true, iaps: [], expectedProducts: [], privacyUrl: { url: 'https://example.com/privacy', status: 200 },
+} as AppleSnapshot);
+const shotBlockers = (s: AppleSnapshot) => appleRules(s).filter(x => x.level === 'blocker' && x.code.startsWith('screenshots'));
+
+describe('required screenshot types per platform', () => {
+  test('macOS: the Mac set with apple.mac, nothing else; apple.screenshotTypes stays the iOS list', () => {
+    expect(requiredDisplayTypes({ ipad: true, mac: true }, 'MAC_OS')).toEqual(['APP_DESKTOP']);
+    expect(requiredDisplayTypes({ ipad: true, mac: true, screenshotTypes: ['APP_IPHONE_67'] }, 'MAC_OS')).toEqual(['APP_DESKTOP']);
+    expect(requiredDisplayTypes({ ipad: true }, 'MAC_OS')).toEqual([]);
+    expect(requiredDisplayTypes({ ipad: true, mac: true, screenshotTypes: ['APP_IPHONE_67'] })).toEqual(['APP_IPHONE_67']);
+    expect(requiredDisplayTypes({ ipad: true })).toEqual(['APP_IPHONE_61', 'APP_IPAD_PRO_3GEN_129']);
+    expect(requiredDisplayTypes({ ipad: true }, 'TV_OS')).toEqual([]);
+  });
+  test('a macOS version with Mac screenshots and no iPhone / iPad ones has no screenshot blocker', () => {
+    expect(shotBlockers(snap('MAC_OS', { ipad: true, mac: true }, { APP_DESKTOP: 3 }))).toEqual([]);
+  });
+  test('a macOS version without the Mac set is missing APP_DESKTOP only', () => {
+    const b = shotBlockers(snap('MAC_OS', { ipad: true, mac: true }, {}));
+    expect(b.map(x => x.msg)).toEqual(['en-US: no APP_DESKTOP screenshots', 'de-DE: no APP_DESKTOP screenshots']);
+  });
+  test('an iOS version still needs the iPhone and iPad sets', () => {
+    expect(shotBlockers(snap('IOS', { ipad: true, mac: true }, { APP_DESKTOP: 3 })).length).toBe(4);
+  });
+});
+
+describe('certificate without a local key', () => {
+  const c = (id: string): ApiCert => ({ id, attributes: { certificateType: 'DISTRIBUTION', activated: true, expirationDate: new Date(Date.now() + 400 * 864e5).toISOString() } });
+  test('macOS: a new one or the .p12 import', () => {
+    expect(pickCertificate([c('a')], 'DISTRIBUTION', () => false, Date.now(), 'darwin').why).toContain('a new one is needed');
+  });
+  test('Windows / Linux: build on the Mac, never a new certificate', () => {
+    for (const p of ['win32', 'linux']) {
+      const why = pickCertificate([c('a')], 'DISTRIBUTION', () => false, Date.now(), p).why;
+      expect(why).toContain('none of their private keys');
+      expect(why).toContain('cannot build or sign for Apple');
+      expect(why).toContain('Do not create another certificate');
+      expect(why).not.toContain('a new one is needed');
+    }
+  });
+});
diff --git a/tests/validate-play-edit.test.ts b/tests/validate-play-edit.test.ts
new file mode 100644
index 0000000..fb21da1
--- /dev/null
+++ b/tests/validate-play-edit.test.ts
@@ -0,0 +1,91 @@
+// `storebound validate --play` read its screenshots with a bare POST /edits and a DELETE in a finally: not under the
+// machine lock and never retried. When Play (or another storebound process) ended that edit meanwhile, the next read
+// answered 400 "This Edit has been deleted" and validate printed it as a store blocker ("GET .../phoneScreenshots 400").
+// Now the reads run in play.read (one locked edit, deleted only after all reads, redone once with a new edit), and a
+// vanished edit that stays gone is a tool warning, never a blocker.
+import { afterEach, beforeEach, describe, expect, test } from 'bun:test';
+import { generateKeyPairSync } from 'node:crypto';
+import { mkdtempSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import { parseArgs } from '../cli/lib/args';
+import type { Loaded, ShipConfig } from '../cli/lib/config';
+import { collectPlay, run } from '../cli/validate';
+import { installStores, type Stores, uninstallStores } from './helpers/fake-stores';
+
+const PKG = 'com.example.game';
+const GONE = { error: { code: 400, status: 'FAILED_PRECONDITION', message: 'This Edit has been deleted.' } };
+let s: Stores;
+let savedKey: string | undefined;
+
+beforeEach(() => {
+  savedKey = process.env.PLAY_SERVICE_ACCOUNT;
+  const { privateKey } = generateKeyPairSync('rsa', { modulusLength: 2048 });
+  process.env.PLAY_SERVICE_ACCOUNT = JSON.stringify({ client_email: 'sb@example.com', private_key: privateKey.export({ type: 'pkcs8', format: 'pem' }).toString(), token_uri: 'https://oauth2.googleapis.com/token' });
+  s = installStores();
+  // the fake has no countryAvailability route (the console owns it): a plain 404, which validate reads as "not readable"
+  s.faults.push({ method: 'GET', match: /countryAvailability/, status: 404, when: 'before', times: 99 });
+  s.play.live.listings['en-US'] = { language: 'en-US', title: 'Example Game', shortDescription: 'Short.', fullDescription: 'Full.' };
+});
+afterEach(() => {
+  uninstallStores();
+  if (savedKey === undefined) delete process.env.PLAY_SERVICE_ACCOUNT; else process.env.PLAY_SERVICE_ACCOUNT = savedKey;
+});
+
+function loaded(): Loaded {
+  const root = mkdtempSync(join(tmpdir(), 'sb-vpe-'));
+  const config = { app: { name: 'Example Game', privacyPolicyUrl: '' }, languages: [{ id: 'en', play: 'en-US' }], play: { packageName: PKG } } as unknown as ShipConfig;
+  return { config, root, path: join(root, 'storebound.config.ts'), resolve: p => join(root, p) };
+}
+
+/** Play ends the edit under the reader: the DELETE happens on the store, the read that follows answers 400. */
+function endEditOnImageRead(times: number): { hits: () => number } {
+  const inner = globalThis.fetch;
+  let left = times, hits = 0;
+  globalThis.fetch = (async (input: string | URL | Request, init?: RequestInit) => {
+    const url = String(input instanceof Request ? input.url : input);
+    const m = /\/edits\/([^/]+)\/listings\/[^/]+\/phoneScreenshots$/.exec(url);
+    if (m && (init?.method ?? 'GET').toUpperCase() === 'GET' && left > 0) {
+      left--; hits++;
+      s.play.edits.delete(m[1]!);
+      return new Response(JSON.stringify(GONE), { status: 400, headers: { 'content-type': 'application/json' } });
+    }
+    return inner(input, init);
+  }) as typeof fetch;
+  return { hits: () => hits };
+}
+
+describe('validate --play: the read-only edit', () => {
+  test('an edit ended during the screenshot reads is reopened once; the snapshot is complete and every edit is closed', async () => {
+    const fault = endEditOnImageRead(1);
+    const snap = await collectPlay({ loaded: loaded(), args: parseArgs(['--play']) });
+    expect(fault.hits()).toBe(1);
+    expect(snap.listings.map(l => l.language)).toEqual(['en-US']);
+    expect(Object.keys(snap.listings[0]!.images)).toContain('phoneScreenshots');
+    expect(s.play.edits.size).toBe(0);
+    const edits = s.calls.filter(c => c.method === 'POST' && /\/edits$/.test(c.path));
+    expect(edits.length).toBe(2);
+  });
+
+  test('no image read runs after the edit was deleted', async () => {
+    await collectPlay({ loaded: loaded(), args: parseArgs(['--play']) });
+    const del = s.calls.findIndex(c => c.method === 'DELETE' && /\/edits\/[^/]+$/.test(c.path));
+    expect(del).toBeGreaterThan(-1);
+    expect(s.calls.slice(del + 1).filter(c => /\/edits\/[^/]+\//.test(c.path))).toEqual([]);
+  });
+
+  test('an edit that stays gone is a tool warning, never a store blocker', async () => {
+    endEditOnImageRead(10);
+    const out: string[] = [];
+    const log = console.log;
+    console.log = (...a: unknown[]) => { out.push(a.join(' ')); };
+    const prev = process.exitCode;
+    try { await run({ loaded: loaded(), args: parseArgs(['--play', '--json', '--no-scan', '--no-health', '--no-local']) }); } finally { console.log = log; }
+    process.exitCode = prev;
+    const res = JSON.parse(out.join('\n').slice(out.join('\n').indexOf('{'))) as { blockers: number; findings: { level: string; code: string; msg: string }[] };
+    expect(res.findings.filter(f => f.level === 'blocker' && /Edit has been deleted|phoneScreenshots/.test(f.msg))).toEqual([]);
+    expect(res.findings).toContainEqual(expect.objectContaining({ level: 'warn', code: 'edit-gone' }));
+    // (the template-answers blocker of the example config is unrelated: only an api blocker would be the bug)
+    expect(res.findings.filter(f => f.level === 'blocker' && f.code === 'api')).toEqual([]);
+  });
+});

From 3a8d9d7551bfb5d56f3e9d2d2c9de7418c36e43c Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Mon, 2 Nov 2026 18:19:50 +0700
Subject: [PATCH 086/126] flags: regenerate for the new apple build / flow
 options

---
 cli/data/flags.json | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/cli/data/flags.json b/cli/data/flags.json
index 3ef2998..59e378c 100644
--- a/cli/data/flags.json
+++ b/cli/data/flags.json
@@ -76,6 +76,7 @@
    "configuration",
    "derived-data",
    "env-file",
+   "evidence",
    "keychain",
    "keychain-unlock",
    "locale-map",
@@ -84,6 +85,7 @@
    "out",
    "path-free",
    "platform",
+   "pre-check",
    "profile",
    "progress",
    "project",
@@ -590,6 +592,7 @@
    "since"
   ],
   "flow": [
+   "apple",
    "apply",
    "from",
    "resume"

From cdd9321794e874c4974cada44c4ce7d875587efc Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Mon, 2 Nov 2026 18:22:39 +0700
Subject: [PATCH 087/126] storebound 0.8.64: version in package.json and every
 copy, CHANGELOG 0.8.64 section

---
 .claude-plugin/marketplace.json        | 2 +-
 .claude-plugin/plugin.json             | 2 +-
 .codex-plugin/plugin.json              | 2 +-
 CHANGELOG.md                           | 2 ++
 apps/desktop/package.json              | 2 +-
 apps/desktop/src-tauri/Cargo.lock      | 2 +-
 apps/desktop/src-tauri/Cargo.toml      | 2 +-
 apps/desktop/src-tauri/tauri.conf.json | 2 +-
 gemini-extension.json                  | 2 +-
 package.json                           | 2 +-
 10 files changed, 11 insertions(+), 9 deletions(-)

diff --git a/.claude-plugin/marketplace.json b/.claude-plugin/marketplace.json
index b2fe8dc..2c2ec96 100644
--- a/.claude-plugin/marketplace.json
+++ b/.claude-plugin/marketplace.json
@@ -9,7 +9,7 @@
       "name": "storebound",
       "source": ".",
       "description": "Take a mobile app or game from nothing to Submit for review on both stores: skills for every store step and questionnaire plus the storebound CLI and MCP server.",
-      "version": "0.8.63",
+      "version": "0.8.64",
       "category": "development",
       "tags": [
         "mobile",
diff --git a/.claude-plugin/plugin.json b/.claude-plugin/plugin.json
index 30a8d7e..7adbb70 100644
--- a/.claude-plugin/plugin.json
+++ b/.claude-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.63",
+  "version": "0.8.64",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/.codex-plugin/plugin.json b/.codex-plugin/plugin.json
index 54e45ca..c3532d1 100644
--- a/.codex-plugin/plugin.json
+++ b/.codex-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.63",
+  "version": "0.8.64",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/CHANGELOG.md b/CHANGELOG.md
index ab04470..5404098 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,8 @@
 
 ## Unreleased
 
+## 0.8.64 · 2026-11-02
+
 - `validate` / `release plan`: a macOS version is checked against Mac screenshots (APP_DESKTOP, with `apple.mac`), not the iPhone / iPad sets; with no editable version, iOS is picked over macOS.
 - `validate --play`: reads go through the locked read-only edit and retry once on a fresh edit when Play ends it ("This Edit has been deleted" was shown as a blocker; it is now a warning to re-run at most).
 - Build numbers for macOS (`apple build --platform macos`, `apple upload` of a .pkg) come from every build of the app, as `apple next-build` does (a macOS-only list proposed a number an iOS build already had).
diff --git a/apps/desktop/package.json b/apps/desktop/package.json
index b4aab53..fe8ff48 100644
--- a/apps/desktop/package.json
+++ b/apps/desktop/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@storebound/desktop",
-  "version": "0.8.63",
+  "version": "0.8.64",
   "private": true,
   "license": "MIT",
   "type": "module",
diff --git a/apps/desktop/src-tauri/Cargo.lock b/apps/desktop/src-tauri/Cargo.lock
index e3dbb76..5bbd8d6 100644
--- a/apps/desktop/src-tauri/Cargo.lock
+++ b/apps/desktop/src-tauri/Cargo.lock
@@ -4096,7 +4096,7 @@ checksum = "a2eb9349b6444b326872e140eb1cf5e7c522154d69e7a0ffb0fb81c06b37543f"
 
 [[package]]
 name = "storebound-desktop"
-version = "0.8.63"
+version = "0.8.64"
 dependencies = [
  "base64 0.22.1",
  "getrandom 0.3.4",
diff --git a/apps/desktop/src-tauri/Cargo.toml b/apps/desktop/src-tauri/Cargo.toml
index d3a2306..92af0b2 100644
--- a/apps/desktop/src-tauri/Cargo.toml
+++ b/apps/desktop/src-tauri/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "storebound-desktop"
-version = "0.8.63"
+version = "0.8.64"
 description = "storebound desktop: every game's releases on both stores in one window"
 license = "MIT"
 edition = "2021"
diff --git a/apps/desktop/src-tauri/tauri.conf.json b/apps/desktop/src-tauri/tauri.conf.json
index febcc13..33ecd9c 100644
--- a/apps/desktop/src-tauri/tauri.conf.json
+++ b/apps/desktop/src-tauri/tauri.conf.json
@@ -2,7 +2,7 @@
   "$schema": "https://schema.tauri.app/config/2",
   "productName": "storebound",
   "mainBinaryName": "storebound-desktop",
-  "version": "0.8.63",
+  "version": "0.8.64",
   "identifier": "dev.storebound.desktop",
   "build": {
     "frontendDist": "../dist",
diff --git a/gemini-extension.json b/gemini-extension.json
index b2050da..ec54850 100644
--- a/gemini-extension.json
+++ b/gemini-extension.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.63",
+  "version": "0.8.64",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "contextFileName": "GEMINI.md",
   "mcpServers": {
diff --git a/package.json b/package.json
index 462c182..efb43c3 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.63",
+  "version": "0.8.64",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every store questionnaire (incl. account deletion and App Review demo accounts), privacy, icons, screenshots and previews, TestFlight. After launch: crash vitals, review replies, price sheets, analytics and Product Page Optimization. One config, a CLI (Node 20+ or Bun), an MCP server and Agent Skills for your AI coding agent.",
   "license": "MIT",
   "author": "CRTkafa",

From d0f568ebc2fc0ab9ee4b7b9beec33cc23d393b4c Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Tue, 3 Nov 2026 23:14:34 +0700
Subject: [PATCH 088/126] validate: removed-from-sale IAPs are no blockers;
 shots capture --device landscape (Mac / Chromebook frames from a web build);
 playwright lookup says why each place failed

---
 CHANGELOG.md                      |   4 ++
 cli/data/flags.json               |   2 +-
 cli/lib/config.ts                 |  11 +++-
 cli/lib/validate-rules.ts         |   8 ++-
 cli/shots/browser.ts              |  14 +++--
 cli/shots/capture-web.ts          |  32 +++++-----
 cli/shots/capture.ts              |  44 ++++++++-----
 cli/shots/devices.ts              |  19 ++++--
 cli/shots/lib.ts                  |  15 +++++
 cli/shots/selectors.ts            |  10 +--
 skills/store-screenshots/SKILL.md |   9 ++-
 tests/capture-landscape.test.ts   | 101 ++++++++++++++++++++++++++++++
 tests/wave1.test.ts               |   9 +++
 13 files changed, 230 insertions(+), 48 deletions(-)
 create mode 100644 tests/capture-landscape.test.ts

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 5404098..e2f056b 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,10 @@
 
 ## Unreleased
 
+- `validate`: in-app purchases removed from sale (DEVELOPER_REMOVED_FROM_SALE, REMOVED_FROM_SALE) are no blockers; a warning only when the config still sells one.
+- `shots capture --device landscape`: Mac App Store / Chromebook frames from a web build (desktop viewport at `shots.landscape.size`, default 1440x900 @2x) into `<lang>/landscape/`; on by default when the project renders a landscape size. The simulator and emulator sources skip it with a warning.
+- `shots render` / `capture`: "playwright not found" now lists each place looked at and why it failed (an import error was reported as not found).
+
 ## 0.8.64 · 2026-11-02
 
 - `validate` / `release plan`: a macOS version is checked against Mac screenshots (APP_DESKTOP, with `apple.mac`), not the iPhone / iPad sets; with no editable version, iOS is picked over macOS.
diff --git a/cli/data/flags.json b/cli/data/flags.json
index 59e378c..d8952e6 100644
--- a/cli/data/flags.json
+++ b/cli/data/flags.json
@@ -1810,7 +1810,7 @@
    "storebound settings bypass on | off | status   owner opt-in: the agent also presses the owner-only buttons"
   ],
   "shots capture": [
-   "storebound shots capture [--lang en,tr] [--only hero,shop] [--device phone|tablet] [--source web|ios-sim|android-emu|folder]"
+   "storebound shots capture [--lang en,tr] [--only hero,shop] [--device phone|tablet|landscape] [--source web|ios-sim|android-emu|folder]"
   ],
   "shots check": [
    "storebound shots check [--lang en,tr] [--variants] [--json]"
diff --git a/cli/lib/config.ts b/cli/lib/config.ts
index 446ee91..5e48f4c 100644
--- a/cli/lib/config.ts
+++ b/cli/lib/config.ts
@@ -202,7 +202,9 @@ export interface ShotsConfig {
   /** Tablet frames: default 1032 x 1352 @2x (13" iPad minus its 24 px bar) with apple.ipad, else 800 x 1240 @2x. */
   tablet?: { w: number; h: number; dpr?: number; bar?: number };
   /** Landscape layout (Mac, Chromebook, and the Play tablet slots with playTablets): copy on one side, the frame on the
-   *  other. Frames: <frames>/<lang>/landscape/<name>.png at `size` CSS px (default 1440 x 900 @2x). frame: 'window' (a
+   *  other. Frames: <frames>/<lang>/landscape/<name>.png at `size` CSS px (default 1440 x 900 @2x = 2880 x 1800), made by
+   *  `shots capture --device landscape` (web source: a desktop viewport, no touch, no status bar crop; ios-sim / android-emu
+   *  have no landscape device, use a web build or a folder). frame: 'window' (a
    *  Mac window around the game, the default for mac) or 'none' (the bare frame, the default for Play sizes). side:
    *  where the copy goes (default 'left'). playTablets: render tab7 / tab10 landscape (1920 x 1080 / 2560 x 1440). */
   landscape?: { frame?: 'window' | 'none'; side?: 'left' | 'right'; playTablets?: boolean; size?: { w: number; h: number; dpr?: number } };
@@ -217,7 +219,7 @@ export interface ShotsConfig {
 /** One raw frame. Web: `path` (+ query). Simulator / emulator: `url` deep link and / or `args` / `extras`. */
 /** Web capture: a selector, candidates tried in order, or per layout { phone, tablet, any } (own list first). Prefer data
  *  attributes (`[data-shot="shop-row"]`); `text=Shop` and `role=button[name="Shop"]` work as fallbacks. */
-export type ShotSelector = string | string[] | { phone?: string | string[]; tablet?: string | string[]; any?: string | string[] };
+export type ShotSelector = string | string[] | { phone?: string | string[]; tablet?: string | string[]; landscape?: string | string[]; any?: string | string[] };
 
 export interface ShotSpec {
   /** Web: wait (up to the waitFor timeout) until one of these matches, before waitFor; a miss names the selector and the size. */
@@ -235,7 +237,10 @@ export interface ShotSpec {
   delayMs?: number;
   /** Web: JS run in the page before the screenshot. */
   eval?: string[];
-  device?: 'phone' | 'tablet' | 'both';
+  /** Which frames this shot makes: phone (default), tablet, both (phone + tablet), landscape (<lang>/landscape/<name>.png at
+   *  shots.landscape.size, web source only). When the project renders a landscape size (apple.mac, play.chromebook,
+   *  shots.landscape.playTablets), shots without a device and 'both' shots also make a landscape frame. */
+  device?: 'phone' | 'tablet' | 'both' | 'landscape';
   /** Web, capture.session "per-language": how this shot is reached in the already booted page. "spa" (default):
    *  history.pushState to its path + a popstate event, then waitFor / eval (switch scenes from those); "reload":
    *  page.goto in the same page. A failing waitFor there falls back to a fresh page. */
diff --git a/cli/lib/validate-rules.ts b/cli/lib/validate-rules.ts
index 43d8906..c1e5491 100644
--- a/cli/lib/validate-rules.ts
+++ b/cli/lib/validate-rules.ts
@@ -163,6 +163,7 @@ export interface PlaySnapshot {
 const EDITABLE = ['PREPARE_FOR_SUBMISSION', 'DEVELOPER_REJECTED', 'REJECTED', 'METADATA_REJECTED', 'INVALID_BINARY'];
 const IN_FLIGHT = ['WAITING_FOR_REVIEW', 'IN_REVIEW', 'PENDING_DEVELOPER_RELEASE', 'PROCESSING_FOR_DISTRIBUTION', 'READY_FOR_DISTRIBUTION', 'READY_FOR_SALE', 'ACCEPTED'];
 const IAP_OK = ['READY_TO_SUBMIT', 'WAITING_FOR_REVIEW', 'IN_REVIEW', 'APPROVED'];
+const IAP_OFF_SALE = ['DEVELOPER_REMOVED_FROM_SALE', 'REMOVED_FROM_SALE'];
 /** Age rating questions whose null means "not answered" (kidsAgeBand null = not a kids app). */
 // Left null on apps App Review accepted: gracRatingClassificationNumber (a Korean GRAC rating number, for apps GRAC
 // rated), socialMediaAgeRestricted (asked only when socialMedia is true). socialMedia itself is a newer question that
@@ -281,12 +282,17 @@ export function appleRules(s: AppleSnapshot): Finding[] {
 
   const iaps = new Map(s.iaps.map(i => [i.productId, i] as const));
   for (const id of s.expectedProducts) if (!iaps.has(id)) add('blocker', 'iap', `${id}: not on App Store Connect`, 'storebound apple iap');
+  const expected = new Set(s.expectedProducts);
   for (const i of s.iaps) {
+    // a product the developer took off sale (old consumables, a retired unlock) does not block a submission; it matters
+    // only when the config still sells it
+    if (IAP_OFF_SALE.includes(i.state)) { if (expected.has(i.productId)) add('warn', 'iap', `${i.productId}: ${i.state}, but the config still sells it`, 'put it back on sale in App Store Connect, or drop it from products'); continue; }
     if (!IAP_OK.includes(i.state)) add('blocker', 'iap', `${i.productId}: ${i.state}`, i.state === 'MISSING_METADATA' ? 'storebound apple iap + apple iap-review' : 'see the review-rejections skill');
     else if (!i.reviewScreenshot && i.state !== 'APPROVED') add('blocker', 'iap', `${i.productId}: no review screenshot`, 'storebound apple iap-review');
   }
   for (const g of s.firstProductGaps ?? []) add(g.level === 'error' ? 'blocker' : 'warn', 'iap-first', g.msg, g.fix);
-  if (s.iaps.length && !f.some(x => x.code === 'iap')) add('ok', 'iap', `${s.iaps.length} in-app purchases ready`);
+  const onSale = s.iaps.filter(i => !IAP_OFF_SALE.includes(i.state)).length, offSale = s.iaps.length - onSale;
+  if (s.iaps.length && !f.some(x => x.code === 'iap')) add('ok', 'iap', `${onSale} in-app purchases ready${offSale ? ` (${offSale} removed from sale, not checked)` : ''}`);
 
   f.push(...appleSubscriptionRules(s));
   for (const m of s.capabilityMismatches ?? []) add('warn', 'capabilities', m.msg, m.fix);
diff --git a/cli/shots/browser.ts b/cli/shots/browser.ts
index e009c05..bd33563 100644
--- a/cli/shots/browser.ts
+++ b/cli/shots/browser.ts
@@ -30,24 +30,30 @@ import * as rt from '../lib/rt';
 class PlaywrightShapeError extends Error {}
 
 async function chromium(root: string): Promise<any> {
+  // why each place failed, for the error: a swallowed import error read as "not found" (a Mac run had it installed)
+  const tried: string[] = [];
   for (const base of [root, rt.packageRoot()]) {
+    let p = '';
     try {
-      const p = rt.resolveFrom('playwright', base);
+      p = rt.resolveFrom('playwright', base);
       // only an installed copy (node_modules): outside a project Bun auto-installs the newest playwright into its global
       // cache (~/.bun/install/cache), whose browser build was never downloaded ("headless shell: not installed" on
       // Linux CI, where no Google Chrome hides it); storebound's own copy is next
-      if (!isInstalledPackage(p)) continue;
+      if (!isInstalledPackage(p)) { tried.push(`${p}: not an installed copy (Bun's global cache)`); continue; }
       // playwright's entry is CommonJS: depending on the runtime and version the ESM import puts chromium on the
       // namespace or only under default (a project's playwright 1.57 under a global Bun install gave undefined)
       const m = await rt.importPath(p);
       const c = m?.chromium ?? m?.default?.chromium;
       if (!c || typeof c.launch !== 'function') throw new PlaywrightShapeError(`playwright at ${p} has no chromium.launch (exports: ${Object.keys(m ?? {}).slice(0, 8).join(', ') || 'none'}${m?.default ? `; default: ${Object.keys(m.default).slice(0, 8).join(', ')}` : ''})`);
       return c;
-    } catch (e) { if (e instanceof PlaywrightShapeError) throw e; /* next */ }
+    } catch (e) {
+      if (e instanceof PlaywrightShapeError) throw e;
+      tried.push(p ? `${p}: ${(e as Error).message.split('\n')[0]}` : `not resolvable from ${base}`);
+    }
   }
   // only reached in the compiled sidecar: the bundled playwright-core (not a runtime dependency of the npm package)
   if (compiled()) return (await import('playwright-core')).chromium;
-  throw new Error('playwright not found: in your project run `bun add -d playwright` (and `bunx playwright install chromium` if Google Chrome is not installed)');
+  throw new Error(`playwright not found: in your project run \`bun add -d playwright\` (and \`bunx playwright install chromium\` if Google Chrome is not installed)\n  ${tried.join('\n  ')}`);
 }
 
 /** A resolved module path inside a node_modules folder (not one of Bun's auto-installs from its global cache). */
diff --git a/cli/shots/capture-web.ts b/cli/shots/capture-web.ts
index 0229eeb..a2e4ff5 100644
--- a/cli/shots/capture-web.ts
+++ b/cli/shots/capture-web.ts
@@ -23,11 +23,15 @@ import { join } from 'node:path';
 import type { ShotSpec, ShotsCapture } from '../lib/config';
 import { log, warn } from '../lib/log';
 import { type AuthPlan, expiredHint, landedOnLogin, maskSecrets, safeUrl } from './auth';
-import { shotsFor } from './devices';
+import { type CaptureDevice, shotsFor } from './devices';
 import { applySelectors, candidates, probe } from './selectors';
-import type { FrameDims } from './lib';
+import { DEFAULT_LANDSCAPE, type FrameDims } from './lib';
 
-type Device = 'phone' | 'tablet';
+/** Viewport per device class; landscape defaults to shots.landscape.size's default when a caller passes only phone / tablet. */
+export type CaptureDims = Record<'phone' | 'tablet', FrameDims> & { landscape?: FrameDims };
+const dimsOf = (dims: CaptureDims, device: Device): FrameDims => dims[device] ?? DEFAULT_LANDSCAPE;
+
+type Device = CaptureDevice;
 export const STEPS = ['goto', 'waitFor', 'eval', 'delay', 'screenshot'] as const;
 export type Step = typeof STEPS[number];
 export type Timing = Record<Step | 'total', number>;
@@ -100,14 +104,14 @@ export async function hashServed(baseUrl: string): Promise<string> {
 }
 
 /** Every web frame to capture, in a fixed order (lang, device, shot), with its URL and its input hash. */
-export function planWeb(cap: ShotsCapture, o: { langs: string[]; devices: Device[]; only: string[]; dims: Record<Device, FrameDims>; framesDir: string;
-  build: string; copyText?: (lang: string) => string; fonts?: string }): WebJob[] {
+export function planWeb(cap: ShotsCapture, o: { langs: string[]; devices: Device[]; only: string[]; dims: CaptureDims; framesDir: string;
+  build: string; copyText?: (lang: string) => string; fonts?: string; allLandscape?: boolean }): WebJob[] {
   const jobs: WebJob[] = [];
-  for (const lang of o.langs) for (const device of o.devices) for (const [name, spec] of shotsFor(cap, device, o.only)) {
+  for (const lang of o.langs) for (const device of o.devices) for (const [name, spec] of shotsFor(cap, device, o.only, o.allLandscape)) {
     const q = (cap.query ?? '').replaceAll('{lang}', lang);
     const path = (spec.path ?? '/').replaceAll('{lang}', lang) + (q ? ((spec.path ?? '/').includes('?') ? '&' : '?') + q : '');
     const url = (cap.baseUrl ?? '').replace(/\/$/, '') + path;
-    const hash = sha(JSON.stringify({ spec, url, dims: o.dims[device], session: cap.session ?? 'per-shot', build: o.build, copy: o.copyText?.(lang) ?? '', fonts: o.fonts ?? '' }));
+    const hash = sha(JSON.stringify({ spec, url, dims: dimsOf(o.dims, device), session: cap.session ?? 'per-shot', build: o.build, copy: o.copyText?.(lang) ?? '', fonts: o.fonts ?? '' }));
     const frame = `${lang}/${device}/${name}.png`;
     jobs.push({ lang, device, name, spec, url, path, out: join(o.framesDir, frame), frame, hash });
   }
@@ -137,7 +141,7 @@ export interface CaptureReport {
 
 /* eslint-disable @typescript-eslint/no-explicit-any */
 /** Captures the jobs in a browser: per-shot contexts, or one page per language + device in per-language sessions. */
-export async function captureWeb(browser: any, cap: ShotsCapture, jobs: WebJob[], o: { concurrency: number; dims: Record<Device, FrameDims>; auth?: AuthPlan }): Promise<CaptureReport> {
+export async function captureWeb(browser: any, cap: ShotsCapture, jobs: WebJob[], o: { concurrency: number; dims: CaptureDims; auth?: AuthPlan }): Promise<CaptureReport> {
   const auth = o.auth;
   const mask = (t: string): string => (auth ? maskSecrets(t, auth.secrets) : t);
   const expired = new Set<string>();
@@ -147,8 +151,8 @@ export async function captureWeb(browser: any, cap: ShotsCapture, jobs: WebJob[]
   let finished = 0;
   const total = jobs.length;
   const newPage = async (j: WebJob): Promise<{ c: any; page: any; errs: string[] }> => {
-    const d = o.dims[j.device];
-    const c = await browser.newContext({ viewport: { width: d.w, height: d.h }, deviceScaleFactor: d.dpr, hasTouch: true, isMobile: true, serviceWorkers: 'block', locale: j.lang, ...(auth?.contextOptions ?? {}) });
+    const d = dimsOf(o.dims, j.device);
+    const c = await browser.newContext({ viewport: { width: d.w, height: d.h }, deviceScaleFactor: d.dpr, hasTouch: j.device !== 'landscape', isMobile: j.device !== 'landscape', serviceWorkers: 'block', locale: j.lang, ...(auth?.contextOptions ?? {}) }); // landscape = a desktop window: no touch, no mobile emulation
     // sign in once per context, cookies kept in it (request auth); a failed sign-in stops the whole capture
     if (auth) try { await auth.prepare(c); } catch (e) { await c.close(); throw Object.assign(new Error(mask((e as Error).message)), { authFailed: true }); }
     const page = await c.newPage();
@@ -167,7 +171,7 @@ export async function captureWeb(browser: any, cap: ShotsCapture, jobs: WebJob[]
       if (!expired.has(safeUrl(s.page.url()))) { expired.add(safeUrl(s.page.url())); warn('shots', `${j.lang}/${j.device}/${j.name}: ${mask(expiredHint(s.page.url()))}`); }
       throw new Error(`landed on the sign-in page ${safeUrl(s.page.url())}`);
     }
-    await applySelectors(s.page, j.spec, { device: j.device, w: o.dims[j.device].w, h: o.dims[j.device].h }, waitTimeout); // waitSelector, click: a miss names the selector and the size
+    await applySelectors(s.page, j.spec, { device: j.device, w: dimsOf(o.dims, j.device).w, h: dimsOf(o.dims, j.device).h }, waitTimeout); // waitSelector, click: a miss names the selector and the size
     if (j.spec.waitFor) await s.page.waitForFunction(j.spec.waitFor, null, { timeout: waitTimeout, polling: 50 });
     t.waitFor = Date.now() - t0; t0 = Date.now();
     for (const js of j.spec.eval ?? []) await s.page.evaluate(js);
@@ -251,14 +255,14 @@ export function writeCaptureState(root: string, report: CaptureReport, cache: Ca
 /* eslint-disable @typescript-eslint/no-explicit-any */
 /** `shots capture --dry --probe`: opens each page (no screenshot), runs the shot's waitFor, and reports per size which
  *  selector candidates match. Returns the log lines; `missed` counts shots where no candidate of a list matched. */
-export async function probeSelectors(browser: any, jobs: WebJob[], o: { dims: Record<Device, FrameDims>; auth?: AuthPlan; timeoutMs?: number }): Promise<{ lines: string[]; missed: number }> {
+export async function probeSelectors(browser: any, jobs: WebJob[], o: { dims: CaptureDims; auth?: AuthPlan; timeoutMs?: number }): Promise<{ lines: string[]; missed: number }> {
   const lines: string[] = []; let missed = 0;
   for (const j of jobs) {
     const lists = [['waitSelector', candidates(j.spec.waitSelector, j.device)], ...(Array.isArray(j.spec.click) && j.spec.click.some(c => typeof c !== 'string') ? j.spec.click : j.spec.click === undefined ? [] : [j.spec.click])
       .map((c, i) => [`click[${i}]`, candidates(c as any, j.device)] as const)].filter(([, l]) => l.length) as [string, string[]][];
     if (!lists.length) continue;
-    const d = o.dims[j.device];
-    const c = await browser.newContext({ viewport: { width: d.w, height: d.h }, deviceScaleFactor: 1, hasTouch: true, isMobile: true, serviceWorkers: 'block', locale: j.lang, ...(o.auth?.contextOptions ?? {}) });
+    const d = dimsOf(o.dims, j.device);
+    const c = await browser.newContext({ viewport: { width: d.w, height: d.h }, deviceScaleFactor: 1, hasTouch: j.device !== 'landscape', isMobile: j.device !== 'landscape', serviceWorkers: 'block', locale: j.lang, ...(o.auth?.contextOptions ?? {}) });
     try {
       if (o.auth) await o.auth.prepare(c);
       const page = await c.newPage();
diff --git a/cli/shots/capture.ts b/cli/shots/capture.ts
index c5b6d24..b0cedc4 100644
--- a/cli/shots/capture.ts
+++ b/cli/shots/capture.ts
@@ -1,9 +1,15 @@
 // Raw frames from a running build of your app or game, from any engine.
-//   storebound shots capture [--lang en,tr] [--only hero,shop] [--device phone|tablet] [--source web|ios-sim|android-emu|folder]
+//   storebound shots capture [--lang en,tr] [--only hero,shop] [--device phone|tablet|landscape] [--source web|ios-sim|android-emu|folder]
 //                            [--dry [--probe]] [--keep-booted] [--concurrency N] [--only-missing | --force]
 // Frames go to <shots.frames>/<lang>/<device>/<name>.png: the screen BELOW the status bar (the template draws one).
+// Devices: phone, tablet and landscape (<lang>/landscape/<name>.png, web source only: Mac App Store and Chromebook
+// screenshots; a desktop window, no status bar crop). The default device list adds landscape when the project renders a
+// landscape size (apple.mac, play.chromebook, shots.landscape.playTablets); then shots with no device (and 'both') are
+// captured for landscape too, since render needs a landscape frame per scene. A shot says device: 'landscape' to be
+// landscape only, 'phone' / 'tablet' to stay out of it. ios-sim / android-emu skip landscape with a warning.
 // shots.capture.source (default web):
-//   web          headless Chromium (playwright), mobile viewport + touch at phone / tablet size. Each shot:
+//   web          headless Chromium (playwright), mobile viewport + touch at phone / tablet size, or a desktop viewport (no touch)
+//                at shots.landscape.size (default 1440 x 900 @2x) for landscape. Each shot:
 //                { path, waitFor?: JS expression that turns true, eval?: [JS], delayMs?, device? }; URL = baseUrl + path +
 //                query, "{lang}" replaced. Parallel contexts, per-language page reuse, the input-hash cache and the
 //                per-frame timing (goto / waitFor / eval / delay / screenshot): capture-web.ts. Signed-in apps:
@@ -36,15 +42,16 @@ import { done, log, step, warn } from '../lib/log';
 import { closeBrowser, launch } from './browser';
 import { checkFrameFolder } from './check';
 import { adbAppLocaleArgs, adbDemoExitArgs, adbDemoModeArgs, adbForceStopArgs, adbInstallArgs, adbScreencapArgs, adbStartArgs, adbStateArgs, adbTarget,
-  cropArgs, cropTopFor, fill, pickSimulator, shotsFor, simBootArgs, simBootStatusArgs, simInstallArgs, simLaunchArgs, simOpenUrlArgs,
+  cropArgs, cropTopFor, fill, CAPTURE_DEVICES, type CaptureDevice, pickSimulator, shotsFor, simBootArgs, simBootStatusArgs, simInstallArgs, simLaunchArgs, simOpenUrlArgs,
   simScreenshotArgs, simShutdownArgs, simStatusBarArgs, simStatusBarClearArgs, simTarget, SOURCES, type Source, TOOL_HINTS, validateCapture } from './devices';
-import { type CopyFile, copyText, type FrameDims, frameDims } from './lib';
+import { type CopyFile, copyText, type FrameDims, frameDims, landscapeDims, rendersLandscape } from './lib';
 import { captureWeb, defaultConcurrency, probeSelectors, hashPaths, hashServed, planWeb, readCache, selectJobs, summaryLines, writeCaptureState } from './capture-web';
 import { imageInfo } from './spec';
 import { authPlan, safeUrl } from './auth';
 import * as rt from '../lib/rt';
 
-type Device = 'phone' | 'tablet';
+type Device = CaptureDevice;
+type PhoneTablet = 'phone' | 'tablet';
 
 export function sh(cmd: string, args: string[], o: { allowFail?: boolean; timeout?: number } = {}): { out: Buffer; err: string; code: number } {
   const r = spawnSync(cmd, args, { timeout: o.timeout ?? 120_000, maxBuffer: 256 * 1024 * 1024 });
@@ -75,7 +82,7 @@ export function localeOf(config: ShipConfig, lang: string, source: Source): stri
 }
 
 /** Crop the status bar off a full-screen capture and store it as a 24-bit RGB frame. */
-function storeFrame(tmp: string, out: string, cropTop: ShotsCapture['cropTop'], device: Device, dims: FrameDims): void {
+function storeFrame(tmp: string, out: string, cropTop: ShotsCapture['cropTop'], device: PhoneTablet, dims: FrameDims): void {
   const { w, h } = imageInfo(readFileSync(tmp));
   if (!h) throw new Error('screenshot is not a PNG');
   const top = cropTopFor(cropTop, device, h, dims);
@@ -98,13 +105,20 @@ export async function run(ctx: Ctx): Promise<void> {
   if (problems.length) throw new Error(`shots.capture:\n  ${problems.join('\n  ')}`);
   const langs = a.list('lang').length ? a.list('lang') : config.languages.map(l => l.id);
   const only = a.list('only');
-  const devices: Device[] = a.get('device') ? [a.get('device') as Device] : ['phone', 'tablet'];
-  if (devices.some(d => d !== 'phone' && d !== 'tablet')) throw new Error('--device: phone | tablet');
+  if (a.get('device') && !CAPTURE_DEVICES.includes(a.get('device') as Device)) throw new Error(`--device: ${CAPTURE_DEVICES.join(' | ')}`);
+  const landscapeOn = rendersLandscape(config);
+  let devices: Device[] = a.get('device') ? [a.get('device') as Device] : ['phone', 'tablet', ...(landscapeOn ? ['landscape' as const] : [])];
+  const allLandscape = landscapeOn || a.get('device') === 'landscape'; // shots with no device / 'both' also make a landscape frame
+  if (source !== 'web' && source !== 'folder' && devices.includes('landscape')) {
+    warn('shots', `landscape frames (Mac, Chromebook) are not supported from ${source}: skipped; capture them from a web build (--source web) or put them in <shots.frames>/<lang>/landscape/ (--source folder)`);
+    devices = devices.filter(d => d !== 'landscape');
+  }
+  const mobile = devices.filter((d): d is PhoneTablet => d !== 'landscape');
   const framesDir = resolve(shots.frames);
-  const dims = frameDims(config);
+  const dims = { ...frameDims(config), landscape: landscapeDims(config) };
   const tmpDir = join(root, '.storebound', 'tmp');
   const target = (lang: string, device: Device, name: string) => { const d = join(framesDir, lang, device); if (!dry) mkdirSync(d, { recursive: true }); return join(d, `${name}.png`); };
-  const total = langs.length * devices.reduce((t, d) => t + shotsFor(cap, d, only).length, 0);
+  const total = langs.length * devices.reduce((t, d) => t + shotsFor(cap, d, only, allLandscape).length, 0);
   let failed = 0, n = 0, i = 0;
   const progress = (what: string) => log('shots', step(++i, total, what));
   /** Runs a simctl / adb step, or prints it with --dry. */
@@ -125,7 +139,7 @@ export async function run(ctx: Ctx): Promise<void> {
 
   if (source === 'web') {
     if (dry) {
-      for (const lang of langs) for (const device of devices) for (const [name, s] of shotsFor(cap, device, only)) {
+      for (const lang of langs) for (const device of devices) for (const [name, s] of shotsFor(cap, device, only, allLandscape)) {
         progress(`${lang}/${device}/${name}.png <- ${cap.baseUrl}${(s.path ?? '/').replaceAll('{lang}', lang)}`);
         const sel: [string, string[]][] = [['waitSelector', candidates(s.waitSelector, device)], ...(Array.isArray(s.click) && s.click.some(c => typeof c !== 'string') ? s.click : s.click === undefined ? [] : [s.click]).map((c, k) => [`click[${k}]`, candidates(c as ShotSelector, device)] as [string, string[]])];
         for (const [what, list] of sel) if (list.length) log('shots', `  ${what} on ${device} ${dims[device].w}x${dims[device].h}: ${list.join(' | ')}`);
@@ -133,7 +147,7 @@ export async function run(ctx: Ctx): Promise<void> {
       if (a.has('probe')) { // open the pages and test every candidate on each size (needs the app running at baseUrl)
         need(cap.baseUrl, 'shots.capture.baseUrl');
         const auth = cap.auth ? authPlan(cap.auth, { root, baseUrl: cap.baseUrl! }) : undefined;
-        const jobs = planWeb(cap, { langs, devices, only, dims, framesDir, build: '', fonts: '' });
+        const jobs = planWeb(cap, { langs, devices, only, dims, framesDir, build: '', fonts: '', allLandscape });
         const browser = await launch(root, { headless: true, args: ['--mute-audio'] });
         let r;
         try { r = await probeSelectors(browser, jobs, { dims, ...(auth ? { auth } : {}) }); } finally { await closeBrowser(browser); }
@@ -152,7 +166,7 @@ export async function run(ctx: Ctx): Promise<void> {
     let copy: CopyFile = {};
     try { copy = JSON.parse(readFileSync(resolve(shots.copy), 'utf8')) as CopyFile; } catch { /* no copy yet */ }
     const fontsCss = join(root, '.storebound', 'fonts', 'fonts.css');
-    const jobs = planWeb(cap, { langs, devices, only, dims, framesDir, build, copyText: l => copyText(l, copy[l]),
+    const jobs = planWeb(cap, { langs, devices, only, dims, framesDir, build, allLandscape, copyText: l => copyText(l, copy[l]),
       fonts: existsSync(fontsCss) ? readFileSync(fontsCss, 'utf8') : '' });
     const cache = readCache(root);
     const { run: todo, skipped } = selectJobs(jobs, cache, a.has('force') ? 'force' : a.has('only-missing') ? 'only-missing' : 'changed');
@@ -174,7 +188,7 @@ export async function run(ctx: Ctx): Promise<void> {
     const ios = need(cap.ios, 'shots.capture.ios');
     if (!dry) { requireTool('xcrun'); requireTool('ffmpeg'); }
     const list = dry && !rt.which('xcrun') ? '{"devices":{}}' : sh('xcrun', ['simctl', 'list', 'devices', '-j']).out.toString();
-    for (const device of devices) {
+    for (const device of mobile) {
       const want = simTarget(ios, device);
       const todo = shotsFor(cap, device, only);
       if (!todo.length) continue;
@@ -222,7 +236,7 @@ export async function run(ctx: Ctx): Promise<void> {
     const and = need(cap.android, 'shots.capture.android');
     const adb = adbPath();
     if (!dry) { requireTool(adb, 'adb'); requireTool('ffmpeg'); }
-    for (const device of devices) {
+    for (const device of mobile) {
       const todo = shotsFor(cap, device, only);
       if (!todo.length) continue;
       const serial = adbTarget(and, device);
diff --git a/cli/shots/devices.ts b/cli/shots/devices.ts
index 1fa9f20..3691f22 100644
--- a/cli/shots/devices.ts
+++ b/cli/shots/devices.ts
@@ -43,7 +43,7 @@ export function validateCapture(c: ShotsCapture | undefined): string[] {
       if (s.click !== undefined) for (const [i, c] of (Array.isArray(s.click) && s.click.some(x => typeof x !== 'string') ? s.click : [s.click]).entries()) e.push(...validateSelector(`shots.capture.shots.${name}.click[${i}]`, c));
     } else if (s.waitSelector !== undefined || s.click !== undefined) e.push(`shots.capture.shots.${name}: waitSelector / click only apply to source web`);
     if (s.navigate && !['spa', 'reload'].includes(s.navigate)) e.push(`shots.capture.shots.${name}.navigate: spa | reload`);
-    if (s.device && !['phone', 'tablet', 'both'].includes(s.device)) e.push(`shots.capture.shots.${name}.device: phone | tablet | both`);
+    if (s.device && !['phone', 'tablet', 'both', 'landscape'].includes(s.device)) e.push(`shots.capture.shots.${name}.device: phone | tablet | both | landscape`);
     if (src === 'web' && s.path === undefined) e.push(`shots.capture.shots.${name}.path: URL path (source web)`);
     if ((src === 'web' || src === 'folder') && (s.args || s.extras)) e.push(`shots.capture.shots.${name}: args / extras only apply to ios-sim / android-emu`);
     for (const [k, v] of Object.entries(s.extras ?? {})) {
@@ -96,9 +96,20 @@ export function adbTarget(and: NonNullable<ShotsCapture['android']>, device: 'ph
   return device === 'tablet' ? and.serials?.tablet : and.serials?.phone ?? and.serial;
 }
 
-/** Which shots run on which device class. */
-export function shotsFor(c: ShotsCapture, device: 'phone' | 'tablet', only: string[] = []): [string, ShotSpec][] {
-  return Object.entries(c.shots ?? {}).filter(([name, s]) => (!only.length || only.includes(name)) && ((s.device ?? 'phone') === 'both' || (s.device ?? 'phone') === device));
+/** Capture device classes: phone / tablet frames (status bar cut) and desktop landscape frames (Mac, Chromebook). */
+export type CaptureDevice = 'phone' | 'tablet' | 'landscape';
+export const CAPTURE_DEVICES: readonly CaptureDevice[] = ['phone', 'tablet', 'landscape'];
+
+/** Which shots run on which device class. phone / tablet: device unset = phone, 'both' = phone + tablet (unchanged).
+ *  landscape: the shots with device 'landscape'; with `allLandscape` (the project renders a landscape size, or
+ *  --device landscape was asked for) also every shot with no device or 'both', because render needs a landscape frame
+ *  for each scene. A shot that says 'phone' or 'tablet' explicitly stays off the landscape list. */
+export function shotsFor(c: ShotsCapture, device: CaptureDevice, only: string[] = [], allLandscape = false): [string, ShotSpec][] {
+  return Object.entries(c.shots ?? {}).filter(([name, s]) => {
+    if (only.length && !only.includes(name)) return false;
+    if (device === 'landscape') return s.device === 'landscape' || (allLandscape && (s.device === undefined || s.device === 'both'));
+    return s.device !== 'landscape' && ((s.device ?? 'phone') === 'both' || (s.device ?? 'phone') === device);
+  });
 }
 
 // ---- iOS Simulator (xcrun simctl) ----
diff --git a/cli/shots/lib.ts b/cli/shots/lib.ts
index f20964c..3087424 100644
--- a/cli/shots/lib.ts
+++ b/cli/shots/lib.ts
@@ -175,6 +175,15 @@ export function frameDims(config: Pick<ShipConfig, 'apple' | 'shots'>): Record<'
   return { phone: { ...DEFAULT_PHONE, ...config.shots?.phone }, tablet: { ...tablet, ...config.shots?.tablet } };
 }
 
+/** Landscape capture viewport (shots.landscape.size): a desktop window, 1440 x 900 CSS px @2x = 2880 x 1800 (the Mac size). No status bar. */
+export const DEFAULT_LANDSCAPE: FrameDims = { w: 1440, h: 900, dpr: 2, bar: 0 };
+
+/** Viewport `shots capture` uses for landscape frames (<lang>/landscape/<name>.png): shots.landscape.size over the default. */
+export function landscapeDims(config: Pick<ShipConfig, 'shots'>): FrameDims {
+  const s = config.shots?.landscape?.size;
+  return { ...DEFAULT_LANDSCAPE, ...(s ? { w: s.w, h: s.h, ...(s.dpr ? { dpr: s.dpr } : {}) } : {}), bar: 0 };
+}
+
 /** Play tablet size keys (7" and 10"): optional on Play, switched by play.tablets. */
 export const PLAY_TABLET_SIZES: readonly string[] = ['tab7', 'tab10'];
 
@@ -193,6 +202,12 @@ export function defaultSizes(config: Pick<ShipConfig, 'apple' | 'play'>, tablets
     : k.startsWith('ios') ? apple : PLAY_TABLET_SIZES.includes(k) ? play && tabs : play));
 }
 
+/** True when `shots render` draws a landscape size for this project (apple.mac, play.chromebook, shots.landscape.playTablets):
+ *  it then needs <lang>/landscape/<name>.png frames, which `shots capture` makes with the landscape device. Same rules as render. */
+export function rendersLandscape(config: Pick<ShipConfig, 'apple' | 'play' | 'shots'>): boolean {
+  return defaultSizes(config).some(s => renderDims(s, config.shots).landscape);
+}
+
 /** Scenes of a variant (its order / subset, palette overrides), or the base scenes. */
 export function variantScenes(shots: ShotsConfig, variant?: string): ShotScene[] {
   if (!variant) return shots.scenes;
diff --git a/cli/shots/selectors.ts b/cli/shots/selectors.ts
index 1efb778..7c84b60 100644
--- a/cli/shots/selectors.ts
+++ b/cli/shots/selectors.ts
@@ -4,7 +4,7 @@
 // a list on the phone and a grid at 1180x820 needs different selectors; the miss message names the selector and the size.
 import type { ShotSelector } from '../lib/config';
 
-type Device = 'phone' | 'tablet';
+import type { CaptureDevice as Device } from './devices';
 
 /** Candidates for one device: its own list first, then the shared ones, without repeats. */
 export function candidates(sel: ShotSelector | undefined, device: Device): string[] {
@@ -19,12 +19,12 @@ export function validateSelector(where: string, sel: unknown): string[] {
   const okList = (v: unknown): boolean => ok(v) || (Array.isArray(v) && v.length > 0 && v.every(ok));
   if (okList(sel)) return [];
   if (sel && typeof sel === 'object' && !Array.isArray(sel)) {
-    const o = sel as Record<string, unknown>, bad = Object.keys(o).filter(k => !['phone', 'tablet', 'any'].includes(k));
-    if (bad.length) return [`${where}: unknown key ${bad.join(', ')} (phone | tablet | any)`];
-    if (!Object.keys(o).length) return [`${where}: at least one of phone | tablet | any`];
+    const o = sel as Record<string, unknown>, bad = Object.keys(o).filter(k => !['phone', 'tablet', 'landscape', 'any'].includes(k));
+    if (bad.length) return [`${where}: unknown key ${bad.join(', ')} (phone | tablet | landscape | any)`];
+    if (!Object.keys(o).length) return [`${where}: at least one of phone | tablet | landscape | any`];
     return Object.entries(o).filter(([, v]) => !okList(v)).map(([k]) => `${where}.${k}: a selector or a list of selectors`);
   }
-  return [`${where}: a selector, a list of selectors, or { phone, tablet, any }`];
+  return [`${where}: a selector, a list of selectors, or { phone, tablet, landscape, any }`];
 }
 
 /** Minimal Playwright surface used here, so tests can fake a page. */
diff --git a/skills/store-screenshots/SKILL.md b/skills/store-screenshots/SKILL.md
index c2bccb1..ad3d9f7 100644
--- a/skills/store-screenshots/SKILL.md
+++ b/skills/store-screenshots/SKILL.md
@@ -83,7 +83,12 @@ the enum has them). No Duo app preview sizes are published. Google Play has no f
 alpha) and requires the set, and `apple screenshots --platform macos` uploads it as `APP_DESKTOP` to the macOS
 version (versions are per platform, pitfall 79; the iOS run uploads the iOS sets only and says where the Mac set
 goes). `validate` prints an info note when the app has a macOS version but no Mac screenshots. Frames: landscape
-captures in `<frames>/<lang>/landscape/<name>.png`, `shots.landscape.size` CSS px (default 1440 x 900 @2x).
+captures in `<frames>/<lang>/landscape/<name>.png`, `shots.landscape.size` CSS px (default 1440 x 900 @2x). Make them with
+`storebound shots capture --device landscape` from a web build (a desktop viewport, no touch, no status bar crop); with
+`apple.mac`, `play.chromebook` or `shots.landscape.playTablets` the default `capture` run adds the landscape device and
+captures every shot with no `device` (and `both`) for it too, because render needs a landscape frame per scene; a shot
+with `device: 'landscape'` is landscape only, `'phone'` / `'tablet'` stays out. `ios-sim` / `android-emu` have no
+landscape device (skipped with a warning): use a web build or the folder source.
 
 **Landscape layout (Mac, Chromebook, Play tablets).** Copy in a column on one side (`shots.landscape.side`, default
 left), the scene's first frame on the other. `shots.landscape.frame`: `'window'` draws a Mac window (title bar with
@@ -119,6 +124,8 @@ the icon, feature graphic and phone screenshots and prints `tablet screenshots:
    `<shots.frames>/<lang>/<phone|tablet>/<shot>.png`, local, not committed.
    - `web` (default): `baseUrl`, `query` with `{lang}`, shots: `path` / `waitFor` / `eval` / `delayMs` / `device`.
      Phone 440 x 902 @3x and tablet 800 x 1240 @2x by default; the template draws the status bar above.
+     Landscape (Mac / Chromebook): `--device landscape` or `device: 'landscape'` per shot, a desktop viewport at
+     `shots.landscape.size` (default 1440 x 900 @2x), `waitSelector` / `click` take a `landscape` list too.
      Speed (many languages): frames run in parallel browser contexts (`--concurrency N`, `capture.concurrency`;
      default min(3, cores / 4) since game boots are GPU-heavy). `capture.session: 'per-language'` boots the app once
      per language and device and switches shots in that page (per shot `navigate: 'spa'` = pushState + popstate to its
diff --git a/tests/capture-landscape.test.ts b/tests/capture-landscape.test.ts
new file mode 100644
index 0000000..6768a76
--- /dev/null
+++ b/tests/capture-landscape.test.ts
@@ -0,0 +1,101 @@
+// `shots capture --device landscape`: desktop frames for Mac App Store / Chromebook screenshots from a web build.
+// Dry runs and pure planning only: no browser, no simulator.
+import { afterEach, describe, expect, test } from 'bun:test';
+import { rmSync } from 'node:fs';
+import type { ShipConfig } from '../cli/lib/config';
+import { planWeb } from '../cli/shots/capture-web';
+import { run as captureRun } from '../cli/shots/capture';
+import { shotsFor, validateCapture } from '../cli/shots/devices';
+import { frameDims, landscapeDims, rendersLandscape } from '../cli/shots/lib';
+import { BASE, capture, project, restore } from './helpers/store-mock';
+
+afterEach(restore);
+
+const cap = { source: 'web', baseUrl: 'http://127.0.0.1:5173', shots: {
+  hero: { path: '/?scene=hero' }, wide: { path: '/?scene=wide', device: 'landscape' }, pad: { path: '/pad', device: 'tablet' }, both: { path: '/both', device: 'both' }, ph: { path: '/ph', device: 'phone' },
+} } as const;
+const cfg = (over: Record<string, unknown> = {}, shots: Record<string, unknown> = {}): ShipConfig =>
+  ({ ...BASE, ...over, shots: { frames: 'frames', copy: 'copy.json', scenes: [], capture: cap, ...shots } }) as unknown as ShipConfig;
+const names = (c: Parameters<typeof shotsFor>[0], d: 'phone' | 'tablet' | 'landscape', all = false) => shotsFor(c, d, [], all).map(([n]) => n);
+
+describe('landscape device selection', () => {
+  test('phone / tablet unchanged; landscape only for explicit shots unless the project renders landscape', () => {
+    expect(names(cap, 'phone')).toEqual(['hero', 'both', 'ph']);
+    expect(names(cap, 'tablet')).toEqual(['pad', 'both']);
+    expect(names(cap, 'landscape')).toEqual(['wide']);
+    expect(names(cap, 'landscape', true)).toEqual(['hero', 'wide', 'both']); // not the explicit phone / tablet ones
+  });
+  test('validateCapture accepts landscape and names it in the error', () => {
+    expect(validateCapture({ ...cap, shots: { a: { path: '/', device: 'landscape' } } })).toEqual([]);
+    expect(validateCapture({ ...cap, shots: { a: { path: '/', device: 'desktop' as 'both' } } }).join()).toContain('phone | tablet | both | landscape');
+  });
+  test('rendersLandscape follows the render rules (mac, chromebook, playTablets)', () => {
+    expect(rendersLandscape(cfg())).toBe(false);
+    expect(rendersLandscape(cfg({ apple: { ...BASE.apple!, mac: true } }))).toBe(true);
+    expect(rendersLandscape(cfg({ apple: undefined, play: { ...BASE.play!, chromebook: true } }))).toBe(true);
+    expect(rendersLandscape(cfg({}, { landscape: { playTablets: true } }))).toBe(true);
+  });
+  test('landscapeDims: 1440 x 900 @2x default, shots.landscape.size overrides', () => {
+    expect(landscapeDims(cfg())).toEqual({ w: 1440, h: 900, dpr: 2, bar: 0 });
+    expect(landscapeDims(cfg({}, { landscape: { size: { w: 1280, h: 800 } } }))).toEqual({ w: 1280, h: 800, dpr: 2, bar: 0 });
+    expect(landscapeDims(cfg({}, { landscape: { size: { w: 1920, h: 1080, dpr: 1 } } }))).toEqual({ w: 1920, h: 1080, dpr: 1, bar: 0 });
+  });
+});
+
+describe('planWeb with landscape', () => {
+  test('jobs target <lang>/landscape/<name>.png and the hash tracks the landscape viewport', () => {
+    const c = cfg();
+    const base = { langs: ['en'], devices: ['landscape' as const], only: [], framesDir: '/f', build: 'b', allLandscape: true };
+    const a = planWeb(cap, { ...base, dims: { ...frameDims(c), landscape: landscapeDims(c) } });
+    expect(a.map(j => j.frame)).toEqual(['en/landscape/hero.png', 'en/landscape/wide.png', 'en/landscape/both.png']);
+    const b = planWeb(cap, { ...base, dims: { ...frameDims(c), landscape: { w: 1280, h: 800, dpr: 2, bar: 0 } } });
+    expect(b[0]!.hash).not.toBe(a[0]!.hash);
+  });
+});
+
+describe('capture --dry', () => {
+  const dry = async (config: ShipConfig, argv: string[]) => {
+    const p = project(config);
+    try { return await capture(() => captureRun(p.ctx(['--dry', ...argv], ['dry']))); } finally { rmSync(p.root, { recursive: true, force: true }); }
+  };
+  test('--device landscape lists landscape targets, no phone / tablet', async () => {
+    const r = await dry(cfg(), ['--device', 'landscape', '--lang', 'en']);
+    expect(r.out).toContain('en/landscape/wide.png <- http://127.0.0.1:5173/?scene=wide');
+    expect(r.out).toContain('en/landscape/hero.png'); // --device landscape captures every shot without a phone / tablet device
+    expect(r.out).not.toContain('en/phone/');
+    expect(r.out).not.toContain('en/tablet/');
+    expect(r.out).toContain('capture planned (dry run): 3 frames from web');
+  });
+  test('default devices add landscape only when the project renders a landscape size', async () => {
+    const plain = await dry(cfg(), ['--lang', 'en']);
+    expect(plain.out).not.toContain('en/landscape/hero.png');
+    expect(plain.out).toContain('en/phone/hero.png');
+    const mac = await dry(cfg({ apple: { ...BASE.apple!, mac: true } }), ['--lang', 'en']);
+    expect(mac.out).toContain('en/phone/hero.png');
+    expect(mac.out).toContain('en/tablet/pad.png');
+    for (const n of ['hero', 'wide', 'both']) expect(mac.out).toContain(`en/landscape/${n}.png`);
+    expect(mac.out).not.toContain('en/landscape/pad.png');
+    expect(mac.out).not.toContain('en/landscape/ph.png');
+  });
+  test('shot selectors accept a landscape key and print the landscape viewport', async () => {
+    const c = cfg({ apple: { ...BASE.apple!, mac: true } }, { capture: { ...cap, shots: { hero: { path: '/', waitSelector: { phone: '#m', landscape: '#desk' } } } } });
+    const r = await dry(c, ['--lang', 'en']);
+    expect(r.out).toContain('waitSelector on landscape 1440x900: #desk');
+    expect(r.out).toContain('waitSelector on phone 440x902: #m');
+  });
+  test('ios-sim / android-emu skip landscape with a warning', async () => {
+    const mac = { apple: { ...BASE.apple!, mac: true } };
+    const sim = await dry(cfg(mac, { capture: { source: 'ios-sim', ios: { bundleId: 'com.example.app', device: 'iPhone 17 Pro Max' }, shots: { hero: { path: '/', device: 'landscape' } } } }), ['--device', 'landscape', '--lang', 'en']);
+    expect(sim.err + sim.out).toContain('landscape frames (Mac, Chromebook) are not supported from ios-sim');
+    expect(sim.out).toContain('0 frames');
+    const and = await dry(cfg(mac, { capture: { source: 'android-emu', android: { package: 'com.example.app' }, shots: { hero: { path: '/' } } } }), ['--lang', 'en']);
+    expect(and.err + and.out).toContain('not supported from android-emu');
+    expect(and.out).not.toContain('landscape/hero');
+  });
+  test('an unknown device is refused', async () => {
+    const p = project(cfg());
+    try {
+      await expect(captureRun(p.ctx(['--dry', '--device', 'desktop'], ['dry']))).rejects.toThrow('--device: phone | tablet | landscape');
+    } finally { rmSync(p.root, { recursive: true, force: true }); }
+  });
+});
diff --git a/tests/wave1.test.ts b/tests/wave1.test.ts
index 894e88b..788ed78 100644
--- a/tests/wave1.test.ts
+++ b/tests/wave1.test.ts
@@ -290,6 +290,15 @@ describe('validate rules', () => {
     expect(f.find(x => x.code === 'availability')!.fix).toContain('Pricing and Availability');
     expect(f.findIndex(x => x.level === 'ok')).toBeGreaterThan(f.findLastIndex(x => x.level === 'blocker'));
   });
+  test('apple: products removed from sale are not blockers, unless the config still sells them', () => {
+    const s = appleOk();
+    s.iaps = [...s.iaps, { productId: 'old1', state: 'DEVELOPER_REMOVED_FROM_SALE', reviewScreenshot: false }, { productId: 'old2', state: 'REMOVED_FROM_SALE', reviewScreenshot: false }];
+    expect(appleRules(s).filter(f => f.level !== 'ok')).toEqual([]);
+    expect(appleRules(s).find(f => f.code === 'iap')!.msg).toBe('1 in-app purchases ready (2 removed from sale, not checked)');
+    s.expectedProducts = ['p1', 'old1'];
+    const f = appleRules(s).find(x => x.code === 'iap')!;
+    expect([f.level, f.msg]).toEqual(['warn', 'old1: DEVELOPER_REMOVED_FROM_SALE, but the config still sells it']);
+  });
   test('apple: non-exempt needs an approved declaration', () => {
     const s = appleOk();
     s.build = { ...s.build!, usesNonExemptEncryption: true, declarationState: 'IN_REVIEW' };

From 53d57544bf29d70dc2f2ccecf02a05697c4bbaa2 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Tue, 3 Nov 2026 23:17:34 +0700
Subject: [PATCH 089/126] storebound 0.8.65: version in package.json and every
 copy, CHANGELOG 0.8.65 section

---
 .claude-plugin/marketplace.json        | 2 +-
 .claude-plugin/plugin.json             | 2 +-
 .codex-plugin/plugin.json              | 2 +-
 CHANGELOG.md                           | 2 ++
 apps/desktop/package.json              | 2 +-
 apps/desktop/src-tauri/Cargo.lock      | 2 +-
 apps/desktop/src-tauri/Cargo.toml      | 2 +-
 apps/desktop/src-tauri/tauri.conf.json | 2 +-
 gemini-extension.json                  | 2 +-
 package.json                           | 2 +-
 10 files changed, 11 insertions(+), 9 deletions(-)

diff --git a/.claude-plugin/marketplace.json b/.claude-plugin/marketplace.json
index 2c2ec96..9376b20 100644
--- a/.claude-plugin/marketplace.json
+++ b/.claude-plugin/marketplace.json
@@ -9,7 +9,7 @@
       "name": "storebound",
       "source": ".",
       "description": "Take a mobile app or game from nothing to Submit for review on both stores: skills for every store step and questionnaire plus the storebound CLI and MCP server.",
-      "version": "0.8.64",
+      "version": "0.8.65",
       "category": "development",
       "tags": [
         "mobile",
diff --git a/.claude-plugin/plugin.json b/.claude-plugin/plugin.json
index 7adbb70..5450ba0 100644
--- a/.claude-plugin/plugin.json
+++ b/.claude-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.64",
+  "version": "0.8.65",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/.codex-plugin/plugin.json b/.codex-plugin/plugin.json
index c3532d1..9286507 100644
--- a/.codex-plugin/plugin.json
+++ b/.codex-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.64",
+  "version": "0.8.65",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/CHANGELOG.md b/CHANGELOG.md
index e2f056b..fe2219b 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,8 @@
 
 ## Unreleased
 
+## 0.8.65 · 2026-11-03
+
 - `validate`: in-app purchases removed from sale (DEVELOPER_REMOVED_FROM_SALE, REMOVED_FROM_SALE) are no blockers; a warning only when the config still sells one.
 - `shots capture --device landscape`: Mac App Store / Chromebook frames from a web build (desktop viewport at `shots.landscape.size`, default 1440x900 @2x) into `<lang>/landscape/`; on by default when the project renders a landscape size. The simulator and emulator sources skip it with a warning.
 - `shots render` / `capture`: "playwright not found" now lists each place looked at and why it failed (an import error was reported as not found).
diff --git a/apps/desktop/package.json b/apps/desktop/package.json
index fe8ff48..de640b0 100644
--- a/apps/desktop/package.json
+++ b/apps/desktop/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@storebound/desktop",
-  "version": "0.8.64",
+  "version": "0.8.65",
   "private": true,
   "license": "MIT",
   "type": "module",
diff --git a/apps/desktop/src-tauri/Cargo.lock b/apps/desktop/src-tauri/Cargo.lock
index 5bbd8d6..7b457f8 100644
--- a/apps/desktop/src-tauri/Cargo.lock
+++ b/apps/desktop/src-tauri/Cargo.lock
@@ -4096,7 +4096,7 @@ checksum = "a2eb9349b6444b326872e140eb1cf5e7c522154d69e7a0ffb0fb81c06b37543f"
 
 [[package]]
 name = "storebound-desktop"
-version = "0.8.64"
+version = "0.8.65"
 dependencies = [
  "base64 0.22.1",
  "getrandom 0.3.4",
diff --git a/apps/desktop/src-tauri/Cargo.toml b/apps/desktop/src-tauri/Cargo.toml
index 92af0b2..98aac6b 100644
--- a/apps/desktop/src-tauri/Cargo.toml
+++ b/apps/desktop/src-tauri/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "storebound-desktop"
-version = "0.8.64"
+version = "0.8.65"
 description = "storebound desktop: every game's releases on both stores in one window"
 license = "MIT"
 edition = "2021"
diff --git a/apps/desktop/src-tauri/tauri.conf.json b/apps/desktop/src-tauri/tauri.conf.json
index 33ecd9c..1e9d510 100644
--- a/apps/desktop/src-tauri/tauri.conf.json
+++ b/apps/desktop/src-tauri/tauri.conf.json
@@ -2,7 +2,7 @@
   "$schema": "https://schema.tauri.app/config/2",
   "productName": "storebound",
   "mainBinaryName": "storebound-desktop",
-  "version": "0.8.64",
+  "version": "0.8.65",
   "identifier": "dev.storebound.desktop",
   "build": {
     "frontendDist": "../dist",
diff --git a/gemini-extension.json b/gemini-extension.json
index ec54850..86875f3 100644
--- a/gemini-extension.json
+++ b/gemini-extension.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.64",
+  "version": "0.8.65",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "contextFileName": "GEMINI.md",
   "mcpServers": {
diff --git a/package.json b/package.json
index efb43c3..e9cabea 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.64",
+  "version": "0.8.65",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every store questionnaire (incl. account deletion and App Review demo accounts), privacy, icons, screenshots and previews, TestFlight. After launch: crash vitals, review replies, price sheets, analytics and Product Page Optimization. One config, a CLI (Node 20+ or Bun), an MCP server and Agent Skills for your AI coding agent.",
   "license": "MIT",
   "author": "CRTkafa",

From 1e47c2ee60ae66f1e5b64266e8c6385e2a76a022 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Tue, 3 Nov 2026 23:30:59 +0700
Subject: [PATCH 090/126] apple.macos listing / review notes per platform +
 iOS-only claim warnings; apple upload of a .pkg: bounded pkgutil, macOS
 processing wait, heartbeats; release 409 pattern

---
 CHANGELOG.md                           |   4 +
 cli/apple/listing.ts                   |  12 +--
 cli/apple/release.ts                   |   2 +-
 cli/apple/review-details.ts            |  16 ++--
 cli/apple/testflight.ts                |   8 +-
 cli/apple/upload.ts                    |  45 ++++++----
 cli/check.ts                           |   8 +-
 cli/commands.ts                        |   2 +-
 cli/data/flags.json                    |   5 +-
 cli/lib/config.ts                      |  34 ++++++++
 cli/lib/listing-mentions.ts            |   3 +-
 cli/lib/mas.ts                         |  56 ++++++++----
 cli/lib/review-details.ts              |  13 +--
 cli/lib/validate-rules.ts              |  35 +++++++-
 cli/validate.ts                        |   4 +-
 skills/appstore-first-release/SKILL.md |   7 +-
 tests/macos-overrides.test.ts          | 112 ++++++++++++++++++++++++
 tests/upload-pkg-hang.test.ts          | 114 +++++++++++++++++++++++++
 18 files changed, 417 insertions(+), 63 deletions(-)
 create mode 100644 tests/macos-overrides.test.ts
 create mode 100644 tests/upload-pkg-hang.test.ts

diff --git a/CHANGELOG.md b/CHANGELOG.md
index fe2219b..b444832 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,10 @@
 
 ## Unreleased
 
+- `apple.macos: { listing, reviewNotes, gameCenter, noIap }`: an app with iOS and macOS versions gets its own Mac listing file and review notes (`apple listing --platform macos`, `apple review-details --platform macos`, new there); `validate` warns about iOS-only claims in a macOS version's texts (Game Center, tap / swipe, iPhone / iPad, in-app purchases with `noIap`).
+- `apple upload <pkg>`: reading the package is bounded (pkgutil signature check 90 s, expand 5 min, then the `apple build` .json) and logged; the processing wait finds macOS builds (it looked only at iOS and sat silently until --timeout); every slow read prints a heartbeat; an SSH / non-GUI session is warned about up front.
+- `apple release`: a 409 on a release type change is recognized again (a stray control character had broken the pattern).
+
 ## 0.8.65 · 2026-11-03
 
 - `validate`: in-app purchases removed from sale (DEVELOPER_REMOVED_FROM_SALE, REMOVED_FROM_SALE) are no blockers; a warning only when the config still sells one.
diff --git a/cli/apple/listing.ts b/cli/apple/listing.ts
index 9649aa9..8ccb325 100644
--- a/cli/apple/listing.ts
+++ b/cli/apple/listing.ts
@@ -20,7 +20,7 @@ import { compactDiff } from '../lib/diff';
 import { mergeAppleListing, overLimits } from '../lib/listing-pull';
 import { counts, draftReason, draftSections, type ItemPlan, itemLines, planItem, planLocales, planVersion, short, type Skipped, type VersionPlan } from '../lib/listing-plan';
 import { createOnce, findOrCreate, getById } from '../lib/upsert';
-import { appleName } from '../lib/config';
+import { appleName, listingPathFor } from '../lib/config';
 import { wantedRelease } from '../lib/release-type';
 import type { Ctx } from '../lib/ctx';
 import { confirm, need } from '../lib/ctx';
@@ -29,10 +29,10 @@ import { ascClient, EDITABLE, type J, noAppInfo } from './asc';
 import { stdinIsTTY } from '../lib/tty';
 import { allVersions, type AscPlatform, parsePlatform, pickPlatform, platformLabel, versionsPath } from './platform';
 
-export function readAppleCopy(ctx: Ctx) {
+export function readAppleCopy(ctx: Ctx, platform?: string) {
   const { config, resolve } = ctx.loaded;
   const only = ctx.args.list('only');
-  const all = parseAppStoreListing(readFileSync(resolve(config.apple?.listing ?? 'store/appstore.md'), 'utf8'));
+  const all = parseAppStoreListing(readFileSync(resolve(listingPathFor(config, platform)), 'utf8'));
   return Object.fromEntries(Object.entries(all).filter(([l]) => !only.length || only.includes(l)));
 }
 
@@ -63,7 +63,7 @@ async function pull(ctx: Ctx): Promise<void> {
     const at = l.attributes;
     remote[at.locale] = { ...remote[at.locale], description: at.description ?? undefined, keywords: at.keywords ?? undefined, promotionalText: at.promotionalText ?? undefined, whatsNew: at.whatsNew ?? undefined };
   }
-  const file = resolve(config.apple?.listing ?? 'store/appstore.md');
+  const file = resolve(listingPathFor(config, platform));
   const before = existsSync(file) ? readFileSync(file, 'utf8') : '# App Store listing copy\n\nPulled from App Store Connect by `storebound apple listing pull`.\n';
   const r = mergeAppleListing(before, remote, appleName(config));
   const over = overLimits(r.changes, 'apple');
@@ -104,8 +104,8 @@ type Asc = Awaited<ReturnType<typeof ascClient>>;
 async function planListing(ctx: Ctx, c: Asc, appId: string, version: string, platform: AscPlatform): Promise<AppleListingPlan> {
   const { config, resolve } = ctx.loaded;
   const app = config.app;
-  const listing = readAppleCopy(ctx);
-  const md = readFileSync(resolve(config.apple?.listing ?? 'store/appstore.md'), 'utf8');
+  const listing = readAppleCopy(ctx, platform);
+  const md = readFileSync(resolve(listingPathFor(config, platform)), 'utf8');
   const drafts = draftSections(md, 'apple');
   const include = ctx.args.has('include-drafts');
   const skipped: Skipped[] = [];
diff --git a/cli/apple/release.ts b/cli/apple/release.ts
index aad0498..5913c62 100644
--- a/cli/apple/release.ts
+++ b/cli/apple/release.ts
@@ -150,7 +150,7 @@ async function setReleaseType(ctx: Ctx, c: Awaited<ReturnType<typeof ascClient>>
   try {
     await c.asc('PATCH', `/v1/appStoreVersions/${v.id}`, { data: { type: 'appStoreVersions', id: v.id, attributes: Object.fromEntries(changes.map(ch => [ch.field, ch.to])) } });
   } catch (e) {
-    if (/-> 409/.test((e as Error).message)) throw new Error(`${tag}: App Store Connect refuses the release type change now (409): ${(e as Error).message}
+    if (/-> 409\b/.test((e as Error).message)) throw new Error(`${tag}: App Store Connect refuses the release type change now (409): ${(e as Error).message}
 It is editable until App Review approves the version; after that use apple release --manual-release.`);
     throw e;
   }
diff --git a/cli/apple/review-details.ts b/cli/apple/review-details.ts
index 123cc50..8a0a566 100644
--- a/cli/apple/review-details.ts
+++ b/cli/apple/review-details.ts
@@ -1,10 +1,11 @@
 // App Review information on the editable version: contact, demo account, notes. Idempotent.
-//   storebound apple review-details [--contact-from <Apple ID of another app>] [--dry]
+//   storebound apple review-details [--platform ios|macos|tvos|visionos] [--contact-from <Apple ID of another app>] [--dry]
 // The contact (name, phone, email) is personal data, so it is never in the config: it comes from
 // .storebound/credentials.json "reviewContact", or is copied from another app of the same team with --contact-from.
 // Demo account (reviewAccess.signInRequired: true): "reviewDemoAccount" in .storebound/credentials.json or
 // REVIEW_DEMO_USER / REVIEW_DEMO_PASSWORD; masked in every log line. Notes: apple.info.reviewNotes plus
-// reviewAccess.instructions and accounts.inApp (lib/review-details.ts).
+// reviewAccess.instructions and accounts.inApp (lib/review-details.ts). --platform macos: apple.macos.reviewNotes
+// replaces apple.info.reviewNotes when set (a Mac app may have no Game Center, IAP or ads).
 import { refuseTemplate } from '../lib/template-answers';
 import type { Ctx } from '../lib/ctx';
 import { need } from '../lib/ctx';
@@ -12,7 +13,8 @@ import { findReviewContact, maskSecret, maskUser, noContactMessage, reviewDemoAc
 import { reviewDetailPlan } from '../lib/review-details';
 import { done, log } from '../lib/log';
 import { createOnce } from '../lib/upsert';
-import { ascClient } from './asc';
+import { ascClient, EDITABLE, type J } from './asc';
+import { allVersions, parsePlatform, pickPlatform, platformLabel } from './platform';
 
 type Attrs = Record<string, unknown>;
 const shown = (k: string, v: unknown): string => {
@@ -36,8 +38,10 @@ export async function run(ctx: Ctx): Promise<void> {
   const { config, root } = ctx.loaded;
   refuseTemplate(config, ['reviewNotes', 'reviewAccess', 'accounts'], 'apple review-details (App Review notes, demo account requirement)');
   const c = await ascClient(root, need(config.apple?.bundleId, 'apple.bundleId'), config.apple?.appId);
-  const version = await c.editableVersion();
-  if (!version) throw new Error('no editable App Store version (apple listing --version x.y.z creates it)');
+  const appId = await c.app();
+  const platform = parsePlatform(ctx.args.get('platform')) ?? pickPlatform(await allVersions(c, appId), (x: J) => EDITABLE.has(x.attributes.appVersionState ?? x.attributes.appStoreState), undefined, 'an editable version');
+  const version = await c.editableVersion(platform);
+  if (!version) throw new Error(`no editable ${platformLabel(platform)} App Store version (apple listing --version x.y.z creates it)`);
 
   let contact: Record<string, string> | null = null;
   const from = ctx.args.get('contact-from');
@@ -57,7 +61,7 @@ export async function run(ctx: Ctx): Promise<void> {
   }
   if (!contact) throw new Error(noContactMessage(root, checked));
 
-  const { attributes, summary } = reviewDetailPlan(config, contact, reviewDemoAccount(root));
+  const { attributes, summary } = reviewDetailPlan(config, contact, reviewDemoAccount(root), platform);
   const read = async () => (await c.maybe(`/v1/appStoreVersions/${version.id}/appStoreReviewDetail`))?.data ?? null;
   const cur = await read();
   if (ctx.args.has('dry')) {
diff --git a/cli/apple/testflight.ts b/cli/apple/testflight.ts
index 24f35d4..35c7628 100644
--- a/cli/apple/testflight.ts
+++ b/cli/apple/testflight.ts
@@ -37,8 +37,8 @@ const TAG = 'testflight';
 const USAGE = 'usage: storebound apple testflight status | groups [sync] | testers | what-to-test --build N | info | distribute --build N --group <names> | wait --build N | expire --keep N | --older-than D';
 
 /** The state of build `number` (of `marketing` version) right now; found: false while App Store Connect does not list it. */
-async function seeBuild(c: Asc, appId: string, number: string, marketing?: string): Promise<BuildSeen & { version?: string }> {
-  const q = new URLSearchParams({ 'filter[app]': appId, 'filter[version]': number, 'filter[preReleaseVersion.platform]': 'IOS', include: 'preReleaseVersion,buildBetaDetail', limit: '50' });
+async function seeBuild(c: Asc, appId: string, number: string, marketing?: string, platform = 'IOS'): Promise<BuildSeen & { version?: string }> {
+  const q = new URLSearchParams({ 'filter[app]': appId, 'filter[version]': number, 'filter[preReleaseVersion.platform]': platform, include: 'preReleaseVersion,buildBetaDetail', limit: '50' });
   if (marketing) q.set('filter[preReleaseVersion.version]', marketing);
   const resp = await c.asc('GET', `/v1/builds?${q}`);
   const hits = buildsWithVersion(resp).filter(b => b.attributes.version === number && (!marketing || b.marketing === marketing));
@@ -54,13 +54,13 @@ export interface BuildWait { outcome: WaitOutcome; timedOut: boolean; seen: Buil
  * Polls build `number` until processing ends (VALID, or FAILED / INVALID) or `timeoutMs` passes; logs each state change.
  * `once` reads the state a single time. Shared by `testflight wait` and `apple upload` (which waits after the upload).
  */
-export async function waitForBuild(c: Asc, appId: string, number: string, o: { marketing?: string; timeoutMs: number; once?: boolean; tag?: string } & HeartbeatOptions): Promise<BuildWait> {
+export async function waitForBuild(c: Asc, appId: string, number: string, o: { marketing?: string; platform?: 'IOS' | 'MAC_OS'; timeoutMs: number; once?: boolean; tag?: string } & HeartbeatOptions): Promise<BuildWait> {
   const started = Date.now();
   let delay: number | null = null, last = '';
   // polls are up to 2 minutes apart: a heartbeat in between says the wait is alive
   const beat = o.once ? null : heartbeat(ms => log(o.tag ?? TAG, `still waiting for build ${number}: ${last || 'first check'}, ${elapsed(ms)} of ${elapsed(o.timeoutMs)}`), o);
   try { for (;;) {
-    const seen = await seeBuild(c, appId, number, o.marketing);
+    const seen = await seeBuild(c, appId, number, o.marketing, o.platform);
     const outcome = waitOutcome(seen);
     const line = outcome === 'missing' ? 'not listed yet (App Store Connect lists it once processing starts)' : `${seen.processingState}${seen.internal ? `, internal ${seen.internal}` : ''}`;
     if (line !== last) { log(o.tag ?? TAG, `build ${number}${seen.version ? ` (${seen.version})` : ''}: ${line} [${Math.round((Date.now() - started) / 60_000)} min]`); last = line; }
diff --git a/cli/apple/upload.ts b/cli/apple/upload.ts
index a31574f..688bc56 100644
--- a/cli/apple/upload.ts
+++ b/cli/apple/upload.ts
@@ -28,7 +28,7 @@ import type { Ctx } from '../lib/ctx';
 import { confirm, need } from '../lib/ctx';
 import { done, log, printJson, warn } from '../lib/log';
 import { compareBuild, nextBuildNumber, nextPollDelay, parseDuration, WAIT_EXIT } from '../lib/release';
-import { altoolArgs, buildUploadReqs, exportedIpas, ipaInfo, ipaVersionProblem, readLastBuild, showCmd, UPLOAD_DONE, uploadProblems, uploadSearchDirs } from '../lib/xcode';
+import { altoolArgs, buildUploadReqs, exportedIpas, ipaInfo, ipaVersionProblem, readLastBuild, remoteBuildSession, showCmd, UPLOAD_DONE, uploadProblems, uploadSearchDirs } from '../lib/xcode';
 import { bundleTrackingIssues, ipaManifests } from '../lib/privacy-files';
 import { BUILD_WAIT_EXIT } from '../lib/build-ops';
 import { type Asc, ascClient, type J } from './asc';
@@ -51,6 +51,9 @@ function stop(legacy: number, message: string): never {
 
 const TAG = 'upload';
 
+/** Test hook: heartbeat options (short interval, manual ticker) for the reads, the upload and the processing wait. */
+export const hooks: { heartbeat?: HeartbeatOptions } = {};
+
 function md5File(path: string): string {
   const h = rt.hasher('md5');
   const fd = openSync(path, 'r');
@@ -257,9 +260,14 @@ export async function run(ctx: Ctx): Promise<void> {
   } else ipa = resolve(ipa);
   shipPhase('verify', `checking ${relative(root, ipa)}`);
   const isPkg = ipa.endsWith('.pkg');
+  log(TAG, `${relative(root, ipa)}: reading ${isPkg ? 'the package (pkgutil)' : 'the IPA'} (${mb(statSync(ipa).size)})`);
+  // over SSH (no GUI session) anything that touches the login keychain can wait for a prompt nobody sees: say so up front
+  const remote = process.platform === 'darwin' ? remoteBuildSession(process.env, rt.spawnSync(['launchctl', 'managername'], { timeout: 5000 }).stdout.toString().trim()) : null;
+  if (remote) warn(TAG, `${remote}: the upload itself uses the App Store Connect API key (no keychain, no prompt), but pkgutil / altool can stall on a keychain or GUI prompt nobody sees here; every step has a timeout. If it stalls, run it in the Mac's logged-in GUI session (see storebound apple build --help, --allow-ssh)`);
   const platform: 'IOS' | 'MAC_OS' = isPkg ? 'MAC_OS' : 'IOS';
   if (macos && !isPkg) throw new Error('--platform macos uploads a signed .pkg (storebound apple build --platform macos --tauri <src-tauri>), not an .ipa');
-  const info: ReturnType<typeof ipaInfo> = isPkg ? pkgInfo(ipa, bundleId) : ipaInfo(ipa);
+  const info: ReturnType<typeof ipaInfo> = isPkg ? pkgInfo(ipa, bundleId, { say: m => log(TAG, m) }) : ipaInfo(ipa);
+  log(TAG, `${relative(root, ipa)}: ${info.bundleId} ${info.version} (${info.build})`);
   shipReport({ version: info.version, build: info.build, url: consoleUrl('asc.testflight') });
   if (want && info.build !== want) throw new Error(`${relative(root, ipa)} is build ${info.build}, not ${want} (--build): did the last apple build fail?`);
   if (info.bundleId !== bundleId) throw new Error(`${relative(root, ipa)} is ${info.bundleId}, the config says ${bundleId}`);
@@ -277,18 +285,21 @@ export async function run(ctx: Ctx): Promise<void> {
   const wait = !a.has('no-wait');
   const timeout = parseDuration(a.str('timeout', '60m'));
 
+  log(TAG, `asking App Store Connect about ${bundleId}: the app, the editable version, the builds, earlier uploads of build ${info.build}`);
   const c = await ascClient(root, bundleId, config.apple?.appId);
-  const appId = await c.app();
-  // the IPA must belong to the version train being prepared (the editable App Store version): MARKETING_VERSION 1.0
-  // from a project that ignored the intended version otherwise lands in the wrong train
-  const editable = await c.editableVersion(platform).catch(() => null);
-  const trainWhy = ipaVersionProblem(info.version, editable?.attributes?.versionString as string | undefined, 'the editable App Store version');
-  if (trainWhy) { if (a.has('allow-version-mismatch')) warn(TAG, trainWhy); else throw new Error(`${relative(root, ipa)}: not uploaded, ${trainWhy}`); }
-  const builds = await c.all(`/v1/builds?filter[app]=${appId}&limit=200&fields[builds]=version,processingState`);
+  // every read has its own timeout and retries; the heartbeat says the run is alive while one of them waits
+  const { appId, editable, builds, already } = await withHeartbeat(ms => log(TAG, `still reading App Store Connect, ${elapsed(ms)}`), async () => {
+    const appId = await c.app();
+    // the IPA must belong to the version train being prepared (the editable App Store version): MARKETING_VERSION 1.0
+    // from a project that ignored the intended version otherwise lands in the wrong train
+    const editable = await c.editableVersion(platform).catch(() => null);
+    const builds = await c.all(`/v1/builds?filter[app]=${appId}&limit=200&fields[builds]=version,processingState`);
+    // the same IPA uploaded by an earlier run: nothing to send again, only the wait
+    const already = via === 'api' && !dry ? (await uploadsOf(c, appId, info, platform).catch(() => [])).find((u: J) => u.attributes?.state?.state === 'COMPLETE') : undefined;
+    return { appId, editable, builds, already };
+  }, hooks.heartbeat);
   const numbers = builds.map(b => String(b.attributes.version));
   const next = nextBuildNumber(numbers);
-  // the same IPA uploaded by an earlier run: nothing to send again, only the wait
-  const already = via === 'api' && !dry ? (await uploadsOf(c, appId, info, platform).catch(() => [])).find((u: J) => u.attributes?.state?.state === 'COMPLETE') : undefined;
   const onAsc = builds.find(b => String(b.attributes.version) === info.build);
   const decision = existingBuild({ ipa: relative(root, ipa), build: info.build, onAsc: !!onAsc, state: onAsc?.attributes?.processingState, uploadComplete: !!already, allowExisting: a.has('allow-existing'), next });
   // the ship-step contract: a build number App Store Connect has already is "nothing to do" (exit 7), never a second upload
@@ -300,14 +311,18 @@ export async function run(ctx: Ctx): Promise<void> {
     return;
   }
   if (decision instanceof Error) throw decision;
+  log(TAG, `build ${info.build} is not on App Store Connect (next free: ${next})`);
   if (decision === 'recheck') {
     log(TAG, `build ${info.version} (${info.build}) is on App Store Connect already${already ? ` (build upload ${already.id})` : ''}; --allow-existing: not sending it again`);
     if (!wait) { if (json) printJson({ ...{ ipa: relative(root, ipa), version: info.version, build: info.build }, uploaded: true, alreadyUploaded: true }); done(TAG, `build ${info.build} already uploaded`); return; }
-    const r = await waitForBuild(c, appId, info.build, { marketing: info.version, timeoutMs: timeout, tag: TAG });
+    const r = await waitForBuild(c, appId, info.build, { marketing: info.version, platform, timeoutMs: timeout, tag: TAG, ...hooks.heartbeat });
     if (json) printJson({ ipa: relative(root, ipa), version: info.version, build: info.build, uploaded: true, alreadyUploaded: true, processingState: r.seen.processingState ?? null });
     if (r.outcome === 'valid') { done(TAG, waitMessage(info.build, r)); return; }
     stop(r.outcome === 'failed' ? BUILD_WAIT_EXIT.failed : BUILD_WAIT_EXIT.timeout, waitMessage(info.build, r));
   }
+  // (a build number App Store Connect has already ends above, before this: the clearer message)
+  const trainWhy = ipaVersionProblem(info.version, editable?.attributes?.versionString as string | undefined, 'the editable App Store version');
+  if (trainWhy) { if (a.has('allow-version-mismatch')) warn(TAG, trainWhy); else throw new Error(`${relative(root, ipa)}: not uploaded, ${trainWhy}`); }
   if (numbers.length && compareBuild(info.build, next) < 0) warn(TAG, `build ${info.build} is lower than the highest uploaded one (next free: ${next}); Apple accepts it only if this version train has no higher build`);
   const reqs = buildUploadReqs(appId, info, basename(ipa), size, platform);
   const plan = via === 'api'
@@ -327,14 +342,14 @@ export async function run(ctx: Ctx): Promise<void> {
   shipPhase('upload', `uploading ${mb(size)} via ${via}`, 0);
   log(TAG, `${relative(root, ipa)}: ${info.bundleId} ${info.version} (${info.build}), ${mb(size)}, via ${via}, timeout ${a.str('timeout', '60m')}`);
   if (via === 'api') {
-    try { await apiUpload(c, appId, ipa, info, deadline, {}, platform); } catch (e) { if ((e as { exit?: number }).exit) { warn(TAG, (e as Error).message); stop((e as { exit: number }).exit, (e as Error).message); } throw e; }
+    try { await apiUpload(c, appId, ipa, info, deadline, hooks.heartbeat ?? {}, platform); } catch (e) { if ((e as { exit?: number }).exit) { warn(TAG, (e as Error).message); stop((e as { exit: number }).exit, (e as Error).message); } throw e; }
   } else {
-    try { await altoolUpload(root, ipa, deadline); } catch (e) { if ((e as { exit?: number }).exit) { warn(TAG, (e as Error).message); stop((e as { exit: number }).exit, (e as Error).message); } throw e; }
+    try { await altoolUpload(root, ipa, deadline, hooks.heartbeat); } catch (e) { if ((e as { exit?: number }).exit) { warn(TAG, (e as Error).message); stop((e as { exit: number }).exit, (e as Error).message); } throw e; }
   }
   if (!wait) { if (json) printJson({ ...summary, uploaded: true }); done(TAG, `build ${info.build} uploaded; storebound apple status shows when it is VALID`); return; }
   // the same poll as `storebound apple testflight wait`, within what is left of --timeout
   shipPhase('processing', `waiting for App Store Connect to process build ${info.build}`);
-  const r = await waitForBuild(c, appId, info.build, { marketing: info.version, timeoutMs: Math.max(0, deadline - Date.now()), tag: TAG });
+  const r = await waitForBuild(c, appId, info.build, { marketing: info.version, platform, timeoutMs: Math.max(0, deadline - Date.now()), tag: TAG, ...hooks.heartbeat });
   const state = r.timedOut || (r.outcome !== 'valid' && r.outcome !== 'failed') ? 'TIMEOUT' : r.seen.processingState ?? 'UNKNOWN';
   if (json) printJson({ ...summary, uploaded: true, processingState: state });
   if (r.outcome === 'valid') { done(TAG, `${waitMessage(info.build, r)}. Then: apple testflight distribute --build ${info.build} --group <name> --dry`); return; }
diff --git a/cli/check.ts b/cli/check.ts
index 692967e..5311034 100644
--- a/cli/check.ts
+++ b/cli/check.ts
@@ -16,7 +16,7 @@ import { type BundleManifest, bundleTrackingIssues, ipaManifests, projectSdkMani
 import { trackingIssue } from './lib/privacy-manifest';
 import { type AsoFinding, auditAso } from './lib/aso';
 import { draftLocales } from './lib/aso-intel';
-import { appleName, playCodes } from './lib/config';
+import { appleName, listingPathFor, playCodes } from './lib/config';
 import { fieldsMentions } from './lib/cross-store';
 import { appBuildFile, pickGradle, versionSourceIssues, versionSourceMessage } from './lib/gradle';
 import { playConsoleReminders } from './lib/console-plan';
@@ -107,6 +107,12 @@ export async function run(ctx: Ctx): Promise<void> {
   try { const tr = findFastlaneTraces(dirname(path)); if (tr.length) for (const t of tr) note(traceMessage(t)); } catch (e) { warn('check', `fastlane traces: ${(e as Error).message}`); }
   // other platforms named in a store's text: App Store 2.3.10 / Play Metadata, a blocker (pitfall 77)
   try { for (const h of listingFileMentions(ctx.loaded)) problems.push(`other platform in ${hitLine(h)}`); } catch (e) { warn('check', `platform mentions: ${(e as Error).message}`); }
+  if (config.apple?.macos?.listing) tryDo('appstore listing (macOS)', () => {
+    const copy = parseAppStoreListing(readFileSync(resolve(listingPathFor(config, 'macos')), 'utf8'));
+    const missing = config.languages.filter(l => l.apple && !copy[l.apple]).map(l => l.apple);
+    if (missing.length) note(`macOS appstore listing has no section for ${missing.join(', ')}`);
+    return `${Object.keys(copy).length} locales`;
+  });
   // listing translation drafts (storebound listing translate): fine to keep working on, not to push unreviewed
   for (const f of [config.apple ? resolve(config.apple.listing ?? 'store/appstore.md') : '', config.play ? resolve(config.play.listing ?? 'store/listing.md') : ''].filter(Boolean)) {
     if (!existsSync(f)) continue;
diff --git a/cli/commands.ts b/cli/commands.ts
index f644811..3cba163 100644
--- a/cli/commands.ts
+++ b/cli/commands.ts
@@ -85,7 +85,7 @@ export const COMMANDS: Record<string, [() => Promise<Mod>, string]> = {
   'apple listing': [() => import('./apple/listing'), 'version, build, name / subtitle / description / keywords per locale; pull [--write]: live texts back into the listing file (diff first); --platform ios|macos|tvos|visionos (default: the platform that has the version this needs; asks when several do)'],
   'apple screenshots': [() => import('./apple/screenshots'), '6.9" + 6.5" (+ 13" iPad) screenshots per locale; --variant <id>; --repair-stuck [--dry] (replace only screenshots not COMPLETE, at their positions); --platform ios|macos|tvos|visionos (default: the platform that has the version this needs; asks when several do)'],
   'apple appinfo': [() => import('./apple/appinfo'), 'categories, age rating, content rights, Free price, territories'],
-  'apple review-details': [() => import('./apple/review-details'), 'App Review contact, demo account (from .storebound/, masked) + notes'],
+  'apple review-details': [() => import('./apple/review-details'), 'App Review contact, demo account (from .storebound/, masked) + notes; --platform ios|macos|tvos|visionos (macos: apple.macos.reviewNotes when set)'],
   'apple status': [() => import('./apple/status'), 'versions, builds, IAPs, review submissions (--wait-review, --cancel-submission <id>); --platform ios|macos|tvos|visionos (default: the platform that has the version this needs; asks when several do)'],
   'apple creative-assets': [() => import('./apple/creative-assets'), 'Header and Search Results: product page header (21:9) and search results asset (3:2) per locale, or one universal 5244x2950 PNG; uploads to the Asset Library and places it once Apple approved it, reporting waiting ones per locale (MD5 upsert, safe to re-run); --add-for-review, --verify (read-only), --dry'],
   'apple previews': [() => import('./apple/previews'), 'app preview videos per locale (MD5-idempotent, poster frame time code); --dry'],
diff --git a/cli/data/flags.json b/cli/data/flags.json
index d8952e6..44ebcb1 100644
--- a/cli/data/flags.json
+++ b/cli/data/flags.json
@@ -264,7 +264,8 @@
    "with-version"
   ],
   "apple review-details": [
-   "contact-from"
+   "contact-from",
+   "platform"
   ],
   "apple screenshots": [
    "include-drafts",
@@ -1580,7 +1581,7 @@
    "storebound apple resubmit --build <n> [--version 1.0.0] [--platform ios|macos|tvos|visionos] [--resolve-iaps] [--first-release] [--dry] [--yes] [--json]"
   ],
   "apple review-details": [
-   "storebound apple review-details [--contact-from <Apple ID of another app>] [--dry]"
+   "storebound apple review-details [--platform ios|macos|tvos|visionos] [--contact-from <Apple ID of another app>] [--dry]"
   ],
   "apple screenshots": [
    "storebound apple screenshots [--src store/renders] [--only en-US,tr] [--jobs 4] [--variant b] [--dry]",
diff --git a/cli/lib/config.ts b/cli/lib/config.ts
index 5e48f4c..05b9fc0 100644
--- a/cli/lib/config.ts
+++ b/cli/lib/config.ts
@@ -707,6 +707,15 @@ export interface ShipConfig {
      *  2560 x 1600, 1440 x 900, 1280 x 800). Landscape layout from <frames>/<lang>/landscape/ (shots.landscape). Uploaded
      *  as APP_DESKTOP to the macOS version: `apple screenshots --platform macos`. */
     mac?: boolean;
+    /**
+     * macOS App Store overrides (not `mac`, which only switches Mac screenshots on). An app with an iOS and a macOS
+     * version often needs different version texts and review notes (the Mac app may have no Game Center, in-app
+     * purchases or ads). `listing`: an App Store listing file used instead of apple.listing for `apple listing
+     * --platform macos`; `reviewNotes`: used instead of apple.info.reviewNotes by `apple review-details --platform macos`.
+     * `gameCenter: true`: the Mac app has Game Center (silences the Game Center check of `validate --platform macos`).
+     * `noIap: true`: the Mac app sells nothing (validate then flags in-app purchase lines in the Mac texts).
+     */
+    macos?: { listing?: string; reviewNotes?: string; gameCenter?: boolean; noIap?: boolean };
     /** "Header and Search Results" creative assets (`storebound apple creative-assets`, iOS / iPadOS 27+). Files under
      *  <renders>/<lang>/creative/: header.{png,jpg,mov,m4v,mp4} (3840x1646, 21:9), search.{...} (3:2, 1920x1280 to
      *  3840x2560) or universal.png (5244x2950) for both. `header` / `search` false skip that slot; `universal` is a
@@ -1036,6 +1045,14 @@ export function validateExtras(cfg: Partial<ShipConfig>): string[] {
     e.push('play.developerAccount: the developer account name as Play Console shows it (1-100 characters)');
   if (cfg.play?.name !== undefined && !(typeof cfg.play.name === 'string' && cfg.play.name.trim() && [...cfg.play.name].length <= 30)) e.push('play.name: 1-30 characters (Play app name)');
   if (cfg.play?.free !== undefined && typeof cfg.play.free !== 'boolean') e.push('play.free: true (free) | false (paid)');
+  const mo = cfg.apple?.macos;
+  if (mo !== undefined) {
+    if (typeof mo !== 'object' || mo === null || Array.isArray(mo)) e.push('apple.macos: { listing?: "store/appstore-macos.md", reviewNotes?: "...", gameCenter?: true, noIap?: true }');
+    else {
+      for (const k of ['listing', 'reviewNotes'] as const) if (mo[k] !== undefined && (typeof mo[k] !== 'string' || !mo[k]!.trim())) e.push(`apple.macos.${k}: a non-empty string${k === 'listing' ? ' (path of the macOS App Store listing file)' : ''}`);
+      for (const k of ['gameCenter', 'noIap'] as const) if (mo[k] !== undefined && typeof mo[k] !== 'boolean') e.push(`apple.macos.${k}: true | false`);
+    }
+  }
   const ad = cfg.apple?.adhoc;
   if (ad?.method !== undefined && ad.method !== 'release-testing' && ad.method !== 'ad-hoc') e.push('apple.adhoc.method: release-testing | ad-hoc');
   const ppp = cfg.prices?.ppp;
@@ -1114,6 +1131,23 @@ function validateIarcDetails(d: IarcDetails | undefined): string[] {
 }
 
 /** Platforms of the app (app identity): app.platforms, else from the store sections. */
+/** True for the macOS platform in any spelling: "macos", "mac_os" (API name MAC_OS), "mac". Pure. */
+export const isMacosPlatform = (p: string | undefined | null): boolean => !!p && /^mac(_?os)?$/i.test(p.replace(/[\s-]/g, ''));
+
+/** The App Store listing file (as written in the config, relative) for a platform: apple.macos.listing for macOS when
+ *  set, else apple.listing, else store/appstore.md. Pure. */
+export function listingPathFor(config: Pick<ShipConfig, 'apple'>, platform?: string | null): string {
+  const mac = isMacosPlatform(platform) ? config.apple?.macos?.listing?.trim() : '';
+  return mac || config.apple?.listing || 'store/appstore.md';
+}
+
+/** The App Review notes text of the config for a platform: apple.macos.reviewNotes for macOS when set, else
+ *  apple.info.reviewNotes. Pure; reviewAccess and account deletion lines are added by reviewNotes() in lib/review-details. */
+export function reviewNotesFor(config: Pick<ShipConfig, 'apple'>, platform?: string | null): string | undefined {
+  const mac = isMacosPlatform(platform) ? config.apple?.macos?.reviewNotes : undefined;
+  return mac?.trim() ? mac : config.apple?.info?.reviewNotes;
+}
+
 /** App Store name limit (characters). */
 export const APPLE_NAME_MAX = 30;
 
diff --git a/cli/lib/listing-mentions.ts b/cli/lib/listing-mentions.ts
index f7f9fb5..b8aaac3 100644
--- a/cli/lib/listing-mentions.ts
+++ b/cli/lib/listing-mentions.ts
@@ -2,7 +2,7 @@
 // report. Reads store/appstore.md and store/listing.md (or the config's listing paths).
 import { existsSync, readFileSync } from 'node:fs';
 import { relative } from 'node:path';
-import type { Loaded } from './config';
+import { listingPathFor, type Loaded } from './config';
 import { fileMentions, type PlatformHit } from './cross-store';
 
 export function listingFileMentions(loaded: Pick<Loaded, 'config' | 'resolve' | 'root'>, stores: { apple: boolean; play: boolean } = { apple: true, play: true }): PlatformHit[] {
@@ -11,6 +11,7 @@ export function listingFileMentions(loaded: Pick<Loaded, 'config' | 'resolve' |
   const out: PlatformHit[] = [];
   const files: ['apple' | 'play', string | null][] = [
     ['apple', stores.apple && config.apple ? resolve(config.apple.listing ?? 'store/appstore.md') : null],
+    ['apple', stores.apple && config.apple?.macos?.listing ? resolve(listingPathFor(config, 'macos')) : null],
     ['play', stores.play && config.play ? resolve(config.play.listing ?? 'store/listing.md') : null],
   ];
   for (const [store, f] of files) if (f && existsSync(f)) out.push(...fileMentions(store, relative(root, f) || f, readFileSync(f, 'utf8'), allow));
diff --git a/cli/lib/mas.ts b/cli/lib/mas.ts
index 0a9d650..96346f6 100644
--- a/cli/lib/mas.ts
+++ b/cli/lib/mas.ts
@@ -271,29 +271,51 @@ export function readAppInfo(appDir: string): Record<string, PlistValue> {
   return parsePlist(readFileSync(p)) as Record<string, PlistValue>;
 }
 
+/** What bounds and reports the .pkg reading (tests inject a fake spawnSync and short limits). */
+export interface PkgInfoOptions { say?: (msg: string) => void; spawnSync?: typeof rt.spawnSync; checkMs?: number; expandMs?: number }
+/** pkgutil --check-signature evaluates the certificate chain (revocation lookups over the network): never unbounded. */
+export const PKG_CHECK_MS = 90_000;
+/** pkgutil --expand copies the whole archive to a temp folder: minutes for a big app, never unbounded. */
+export const PKG_EXPAND_MS = 5 * 60_000;
+
 /** bundle id, version and build of a .pkg: pkgutil --expand on a Mac (PackageInfo), else the <pkg>.json next to it that
- *  `apple build --platform macos` wrote. Refuses an unsigned or wrongly signed .pkg when pkgutil is there. */
-export function pkgInfo(pkg: string, expectBundleId?: string): { bundleId: string; version: string; build: string } {
-  if (rt.which('pkgutil')) {
-    const sig = parsePkgSignature(rt.spawnSync(['pkgutil', '--check-signature', pkg], { stdout: 'pipe', stderr: 'pipe' }).stdout.toString());
-    const bad = pkgProblems(sig);
-    if (bad.length) throw new Error(`${basename(pkg)}: not uploaded:\n${bad.map(x => `  ${x}`).join('\n')}`);
-    const tmp = join(process.env.TMPDIR ?? '/tmp', `sb-pkg-${process.pid}-${Date.now()}`);
-    try {
-      if (rt.spawnSync(['pkgutil', '--expand', pkg, tmp], { stdout: 'pipe', stderr: 'pipe' }).exitCode === 0) {
-        for (const d of readdirSync(tmp)) {
-          const p = join(tmp, d, 'PackageInfo');
-          const info = existsSync(p) ? parsePackageInfo(readFileSync(p, 'utf8')) : null;
-          if (info && (!expectBundleId || info.bundleId === expectBundleId)) return info;
-        }
-      }
-    } finally { try { rmSync(tmp, { recursive: true, force: true }); } catch { /* temp */ } }
-  }
+ *  `apple build --platform macos` wrote. Refuses an unsigned or wrongly signed .pkg when pkgutil is there. Both pkgutil
+ *  calls have a timeout (no stdin, so no prompt) and say what they do first; one that times out falls back to the
+ *  .json file, else it fails with the reason (a silent hang over SSH, 10 min, was this read). */
+export function pkgInfo(pkg: string, expectBundleId?: string, o: PkgInfoOptions = {}): { bundleId: string; version: string; build: string } {
+  const say = o.say ?? (() => {});
+  const spawnSync = o.spawnSync ?? rt.spawnSync;
   const side = `${pkg}.json`;
+  let timedOut = '';
+  if (rt.which('pkgutil') || o.spawnSync) {
+    const checkMs = o.checkMs ?? PKG_CHECK_MS, expandMs = o.expandMs ?? PKG_EXPAND_MS;
+    say(`checking the signature of ${basename(pkg)} (pkgutil --check-signature, up to ${Math.round(checkMs / 1000)} s)`);
+    const chk = spawnSync(['pkgutil', '--check-signature', pkg], { stdout: 'pipe', stderr: 'pipe', timeout: checkMs });
+    if (chk.exitCode === null && chk.signalCode) timedOut = `pkgutil --check-signature gave no answer in ${Math.round(checkMs / 1000)} s (it checks the certificate chain over the network)`;
+    else {
+      const bad = pkgProblems(parsePkgSignature(chk.stdout.toString()));
+      if (bad.length) throw new Error(`${basename(pkg)}: not uploaded:\n${bad.map(x => `  ${x}`).join('\n')}`);
+      const tmp = join(process.env.TMPDIR ?? '/tmp', `sb-pkg-${process.pid}-${Date.now()}`);
+      say(`reading bundle id, version and build (pkgutil --expand, up to ${Math.round(expandMs / 1000)} s; a big package takes a while)`);
+      try {
+        const ex = spawnSync(['pkgutil', '--expand', pkg, tmp], { stdout: 'pipe', stderr: 'pipe', timeout: expandMs });
+        if (ex.exitCode === null && ex.signalCode) timedOut = `pkgutil --expand gave no answer in ${Math.round(expandMs / 1000)} s`;
+        else if (ex.exitCode === 0) {
+          for (const d of readdirSync(tmp)) {
+            const p = join(tmp, d, 'PackageInfo');
+            const info = existsSync(p) ? parsePackageInfo(readFileSync(p, 'utf8')) : null;
+            if (info && (!expectBundleId || info.bundleId === expectBundleId)) return info;
+          }
+        }
+      } finally { try { rmSync(tmp, { recursive: true, force: true }); } catch { /* temp */ } }
+    }
+  }
+  if (timedOut) say(`${timedOut}: using ${basename(side)} (written by apple build) instead`);
   if (existsSync(side)) {
     const j = JSON.parse(readFileSync(side, 'utf8')) as { bundleId?: string; version?: string; build?: string; unsigned?: boolean };
     if (j.unsigned) throw new Error(`${basename(pkg)} was built with --unsigned: the Mac App Store refuses it`);
     if (j.bundleId && j.version && j.build) return { bundleId: j.bundleId, version: j.version, build: j.build };
   }
+  if (timedOut) throw new Error(`${basename(pkg)}: ${timedOut}, and there is no ${basename(side)} file from apple build to read instead: run it in the Mac's logged-in GUI session, or check the Mac's network`);
   throw new Error(`${basename(pkg)}: cannot read bundle id / version / build (needs pkgutil on a Mac, or the ${basename(side)} file apple build wrote)`);
 }
diff --git a/cli/lib/review-details.ts b/cli/lib/review-details.ts
index f397e3c..26153b8 100644
--- a/cli/lib/review-details.ts
+++ b/cli/lib/review-details.ts
@@ -3,14 +3,15 @@
 // field takes up to 4000 bytes; a demo account must keep working during the whole review (Guideline 2.1).
 // https://developer.apple.com/help/app-store-connect/reference/app-information/platform-version-information
 // https://developer.apple.com/documentation/appstoreconnectapi/appstorereviewdetail/attributes-data.dictionary
-import type { ShipConfig } from './config';
+import { reviewNotesFor, type ShipConfig } from './config';
 import { type DemoAccount, maskSecret, maskUser } from './credentials';
 
 export const NOTES_MAX_BYTES = 4000;
 
-/** Notes for the reviewer: apple.info.reviewNotes, then reviewAccess.instructions, then where account deletion is. */
-export function reviewNotes(config: Pick<ShipConfig, 'apple' | 'reviewAccess' | 'accounts'>): string {
-  const parts = [config.apple?.info?.reviewNotes?.trim() ?? ''];
+/** Notes for the reviewer: apple.info.reviewNotes (macOS: apple.macos.reviewNotes when set), then reviewAccess.instructions,
+ *  then where account deletion is. */
+export function reviewNotes(config: Pick<ShipConfig, 'apple' | 'reviewAccess' | 'accounts'>, platform?: string): string {
+  const parts = [reviewNotesFor(config, platform)?.trim() ?? ''];
   const ins = config.reviewAccess?.instructions?.trim();
   if (ins && !parts[0]!.includes(ins)) parts.push(`Sign-in: ${ins}`);
   const del = config.accounts?.enabled ? config.accounts.inApp?.trim() : '';
@@ -29,8 +30,8 @@ export interface ReviewDetailPlan {
  * (throws when it is missing, so a submission never goes out with "sign-in required" and no account); without it the
  * demo fields are cleared.
  */
-export function reviewDetailPlan(config: Pick<ShipConfig, 'apple' | 'reviewAccess' | 'accounts'>, contact: Record<string, string>, demo: DemoAccount | null): ReviewDetailPlan {
-  const notes = reviewNotes(config);
+export function reviewDetailPlan(config: Pick<ShipConfig, 'apple' | 'reviewAccess' | 'accounts'>, contact: Record<string, string>, demo: DemoAccount | null, platform?: string): ReviewDetailPlan {
+  const notes = reviewNotes(config, platform);
   const bytes = new TextEncoder().encode(notes).length;
   if (bytes > NOTES_MAX_BYTES) throw new Error(`review notes are ${bytes} bytes; App Store Connect takes ${NOTES_MAX_BYTES}`);
   const required = !!config.reviewAccess?.signInRequired;
diff --git a/cli/lib/validate-rules.ts b/cli/lib/validate-rules.ts
index c1e5491..ad3593b 100644
--- a/cli/lib/validate-rules.ts
+++ b/cli/lib/validate-rules.ts
@@ -72,7 +72,10 @@ export interface AppleSnapshot {
   build: { number: string; processingState: string; usesNonExemptEncryption: boolean | null; declarationState: string | null } | null;
   /** Locales the config expects (apple: entries of `languages`). */
   expectedLocales: string[];
-  locales: { locale: string; name?: string; subtitle?: string; description?: string; keywords?: string; screenshots: Record<string, number> }[];
+  locales: { locale: string; name?: string; subtitle?: string; description?: string; keywords?: string; promotionalText?: string; whatsNew?: string; screenshots: Record<string, number> }[];
+  /** apple.macos facts for the macOS claim check (validate fills it): the config's macOS review notes (what `apple review-details
+   *  --platform macos` would send) and the gameCenter / noIap switches. */
+  macos?: { notes?: string; gameCenter?: boolean; noIap?: boolean };
   requiredDisplayTypes: string[];
   /** apple.iphoneDuo (iPhone Duo renders on) and whether the project has a play section, for the Duo note. */
   iphoneDuo?: boolean;
@@ -208,6 +211,35 @@ export function copyrightRules(s: Pick<AppleSnapshot, 'version' | 'configCopyrig
 
 const PLATFORM_NAMES: Record<string, string> = { IOS: 'iOS', MAC_OS: 'macOS', TV_OS: 'tvOS', VISION_OS: 'visionOS' };
 
+const MACOS_CLAIMS: { kind: string; re: RegExp; needs?: 'noGameCenter' | 'noIap'; what: string }[] = [
+  { kind: 'game-center', re: /game\s*center/i, needs: 'noGameCenter', what: 'Game Center (set apple.macos.gameCenter: true when the Mac app has it)' },
+  { kind: 'touch', re: /\b(tap|taps|tapping|swipe|swipes|swiping|pinch|pinches)\b|touch[\s-]?screen/i, what: 'touch words (tap, swipe, pinch, touch screen)' },
+  { kind: 'ios-device', re: /\b(iphone|ipad)s?\b/i, what: 'an iPhone / iPad mention' },
+  { kind: 'iap', re: /in[\s-]app[\s-]purchases?|\biaps?\b|restore purchases/i, needs: 'noIap', what: 'an in-app purchase line (apple.macos.noIap is set)' },
+];
+
+/**
+ * A macOS version's texts (description, promotional text, what's new, keywords, subtitle) and review notes (live, and
+ * the config's apple.macos.reviewNotes / apple.info.reviewNotes) that carry iOS-only claims. Warnings only. Game Center
+ * is flagged unless apple.macos.gameCenter is true; in-app purchase lines only when apple.macos.noIap is set. Pure.
+ */
+export function macosClaimRules(s: Pick<AppleSnapshot, 'version' | 'locales' | 'reviewDetail' | 'macos'>): Finding[] {
+  if (s.version?.platform !== 'MAC_OS') return [];
+  const texts: { where: string; text: string }[] = [];
+  for (const l of s.locales) for (const k of ['subtitle', 'description', 'promotionalText', 'whatsNew', 'keywords'] as const) if (l[k]) texts.push({ where: `${l.locale} ${k}`, text: l[k]! });
+  if (s.reviewDetail?.notes) texts.push({ where: 'review notes (on the store)', text: s.reviewDetail.notes });
+  if (s.macos?.notes) texts.push({ where: 'review notes (config)', text: s.macos.notes });
+  const out: Finding[] = [];
+  for (const c of MACOS_CLAIMS) {
+    if (c.needs === 'noGameCenter' && s.macos?.gameCenter) continue;
+    if (c.needs === 'noIap' && !s.macos?.noIap) continue;
+    const hits = [...new Set(texts.filter(t => c.re.test(t.text)).map(t => t.where))];
+    if (hits.length) out.push({ store: 'apple', level: 'warn', code: 'macos-claims', msg: `macOS version ${s.version.versionString}: ${c.what} in ${hits.slice(0, 6).join(', ')}${hits.length > 6 ? ` (+${hits.length - 6} more)` : ''}`,
+      fix: 'a separate macOS listing file (apple.macos.listing, then storebound apple listing --platform macos) and apple.macos.reviewNotes (storebound apple review-details --platform macos)' });
+  }
+  return out;
+}
+
 export function appleRules(s: AppleSnapshot): Finding[] {
   const f: Finding[] = [];
   const add = (level: Level, code: string, msg: string, fix?: string, action?: FixAction, url?: string) => f.push({ store: 'apple', level, code, msg, fix, ...(action ? { action } : {}), ...(url ? { url } : {}) });
@@ -232,6 +264,7 @@ export function appleRules(s: AppleSnapshot): Finding[] {
     add('warn', 'version-platform', `version ${o.versionString} (${name}) is ${o.state} too: this report covers ${vl || 'iOS'} only`, `storebound validate --platform ${name.toLowerCase()}; storebound apple status lists every platform`);
   }
   f.push(...copyrightRules(s));
+  f.push(...macosClaimRules(s));
 
   if (!s.build) add('blocker', 'build', 'no build attached to the version', 'storebound apple listing --version x.y.z --build N (pick the build number you just uploaded)');
   else {
diff --git a/cli/validate.ts b/cli/validate.ts
index b95f7a2..773359b 100644
--- a/cli/validate.ts
+++ b/cli/validate.ts
@@ -22,6 +22,7 @@ import { firstProductReport } from './apple/first-products';
 import { requiredDisplayTypes } from './apple/screenshots';
 import { pendingScreenshots, setRows, type ShotRow, updateLedger } from './apple/screenshot-health';
 import { type Loaded, playCategoryOf, playCodes, profileOf, sellsOn } from './lib/config';
+import { reviewNotes } from './lib/review-details';
 import { reviewDemoAccount } from './lib/credentials';
 import { allSubscriptions, basePlanId } from './lib/subscriptions';
 import type { Ctx } from './lib/ctx';
@@ -143,7 +144,7 @@ export async function collectApple(ctx: Ctx): Promise<AppleSnapshot> {
         shotRows.push(...setRows(shots, l.attributes.locale, s.attributes.screenshotDisplayType));
       }
       const ia = infoLocs.get(l.attributes.locale) ?? {};
-      locales.push({ locale: l.attributes.locale, name: ia.name, subtitle: ia.subtitle, description: l.attributes.description, keywords: l.attributes.keywords, screenshots });
+      locales.push({ locale: l.attributes.locale, name: ia.name, subtitle: ia.subtitle, description: l.attributes.description, keywords: l.attributes.keywords, promotionalText: l.attributes.promotionalText ?? undefined, whatsNew: l.attributes.whatsNew ?? undefined, screenshots });
     }
     reviewDetail = (await c.maybe(`/v1/appStoreVersions/${v.id}/appStoreReviewDetail`))?.data?.attributes ?? null;
   }
@@ -188,6 +189,7 @@ export async function collectApple(ctx: Ctx): Promise<AppleSnapshot> {
     expectedLocales: config.languages.map(l => l.apple).filter((x): x is string => !!x),
     requiredDisplayTypes: requiredDisplayTypes(config.apple, platform),
     iphoneDuo: !!config.apple?.iphoneDuo, play: !!config.play,
+    macos: platform === 'MAC_OS' ? { notes: reviewNotes(config, 'macos'), gameCenter: config.apple?.macos?.gameCenter, noIap: config.apple?.macos?.noIap } : undefined,
     macVersion: every.some(x => platformOf(x) === 'MAC_OS'), mac: !!config.apple?.mac,
     priceSchedule: !!sched?.included?.some((x: J) => x.type === 'appPrices'),
     availability: !!avail?.data,
diff --git a/skills/appstore-first-release/SKILL.md b/skills/appstore-first-release/SKILL.md
index 4f90081..e41c8c5 100644
--- a/skills/appstore-first-release/SKILL.md
+++ b/skills/appstore-first-release/SKILL.md
@@ -63,7 +63,12 @@ answers the compliance facts no file proves, all in one batch at the start.
 10. **API · Review details.** `storebound apple review-details` (contact from `.storebound/credentials.json`
     `reviewContact`, or `--contact-from <Apple ID of another app of the team>`; notes from the config). Apps behind a
     sign-in: the demo account from `.storebound/` (`review-access` skill). Apps with accounts: in-app deletion
-    (`account-deletion` skill).
+    (`account-deletion` skill). An app with an iOS **and** a macOS version: `--platform macos` (`apple listing`, `apple
+    review-details`) uses `apple.macos.listing` (its own appstore file) and `apple.macos.reviewNotes` when set, else
+    the iOS ones; the Mac app often has no Game Center, IAP or ads, so say so there. `storebound validate --platform
+    macos` warns about iOS-only claims in the Mac texts and notes (Game Center unless `apple.macos.gameCenter: true`,
+    tap / swipe / pinch / touch screen, iPhone / iPad, and IAP lines when `apple.macos.noIap: true`). Not `apple.mac`
+    (that only turns Mac screenshots on).
 11. **API · In-app purchases and subscriptions.** `store-iap-setup` and `store-subscriptions` skills. First
     IAPs and subscriptions go to review **with** this version: `storebound apple iap-submit --with-version --dry`,
     then (after the owner's yes, since it submits) `storebound apple iap-submit --with-version --yes`. On a real first
diff --git a/tests/macos-overrides.test.ts b/tests/macos-overrides.test.ts
new file mode 100644
index 0000000..ac9c9f2
--- /dev/null
+++ b/tests/macos-overrides.test.ts
@@ -0,0 +1,112 @@
+// apple.macos: per-platform listing file and review notes for an app with an iOS and a macOS App Store version, the
+// config check, and the validate warning for iOS-only claims in a macOS version's texts.
+import { describe, expect, test } from 'bun:test';
+import { isMacosPlatform, listingPathFor, reviewNotesFor, validateExtras, type ShipConfig } from '../cli/lib/config';
+import { reviewDetailPlan, reviewNotes } from '../cli/lib/review-details';
+import { appleRules, macosClaimRules, type AppleSnapshot } from '../cli/lib/validate-rules';
+
+const cfg = (apple: Record<string, unknown>) => ({ apple: { bundleId: 'com.example.app', ...apple } }) as unknown as Pick<ShipConfig, 'apple' | 'reviewAccess' | 'accounts'>;
+const contact = { contactFirstName: 'A', contactLastName: 'B', contactPhone: '+10000000000', contactEmail: 'a@example.com' };
+
+describe('platform helpers', () => {
+  test('spellings of macOS', () => {
+    for (const p of ['macos', 'MAC_OS', 'macOS', 'mac']) expect(isMacosPlatform(p)).toBe(true);
+    for (const p of ['ios', 'IOS', 'tvos', '', undefined]) expect(isMacosPlatform(p)).toBe(false);
+  });
+  test('listingPathFor: macOS override, else apple.listing, else the default', () => {
+    const c = cfg({ listing: 'store/ios.md', macos: { listing: 'store/mac.md' } });
+    expect(listingPathFor(c, 'macos')).toBe('store/mac.md');
+    expect(listingPathFor(c, 'MAC_OS')).toBe('store/mac.md');
+    expect(listingPathFor(c, 'ios')).toBe('store/ios.md');
+    expect(listingPathFor(c)).toBe('store/ios.md');
+    expect(listingPathFor(cfg({ macos: {} }), 'macos')).toBe('store/appstore.md');
+    expect(listingPathFor(cfg({ listing: 'store/ios.md', macos: { reviewNotes: 'x' } }), 'macos')).toBe('store/ios.md');
+  });
+  test('reviewNotesFor: macOS override, else apple.info.reviewNotes', () => {
+    const c = cfg({ info: { reviewNotes: 'iOS notes' }, macos: { reviewNotes: 'Mac notes' } });
+    expect(reviewNotesFor(c, 'macos')).toBe('Mac notes');
+    expect(reviewNotesFor(c, 'ios')).toBe('iOS notes');
+    expect(reviewNotesFor(cfg({ info: { reviewNotes: 'iOS notes' }, macos: {} }), 'macos')).toBe('iOS notes');
+  });
+});
+
+describe('review details plan', () => {
+  const c = { ...cfg({ info: { reviewNotes: 'iOS notes: Game Center, IAP' }, macos: { reviewNotes: 'Mac notes: no purchases' } }), reviewAccess: { signInRequired: false, instructions: 'No sign-in.' } } as Pick<ShipConfig, 'apple' | 'reviewAccess' | 'accounts'>;
+  test('macos picks the Mac notes, ios and default keep the iOS notes; the shared sign-in line stays', () => {
+    expect(reviewDetailPlan(c, contact, null, 'macos').attributes.notes).toBe('Mac notes: no purchases\n\nSign-in: No sign-in.');
+    expect(reviewDetailPlan(c, contact, null, 'ios').attributes.notes).toBe('iOS notes: Game Center, IAP\n\nSign-in: No sign-in.');
+    expect(reviewDetailPlan(c, contact, null).attributes.notes).toBe(reviewNotes(c));
+  });
+});
+
+describe('config check', () => {
+  test('apple.macos shape', () => {
+    expect(validateExtras({ apple: { bundleId: 'com.example.app', macos: { listing: 'a.md', reviewNotes: 'x', gameCenter: true, noIap: true } } } as never)).toEqual([]);
+    const bad = validateExtras({ apple: { bundleId: 'com.example.app', macos: { listing: '', gameCenter: 'yes', noIap: 1 } } } as never);
+    expect(bad.some(m => m.startsWith('apple.macos.listing'))).toBe(true);
+    expect(bad.some(m => m.startsWith('apple.macos.gameCenter'))).toBe(true);
+    expect(bad.some(m => m.startsWith('apple.macos.noIap'))).toBe(true);
+    expect(validateExtras({ apple: { bundleId: 'com.example.app', macos: 'x' } } as never).some(m => m.startsWith('apple.macos:'))).toBe(true);
+  });
+});
+
+describe('validate: iOS-only claims on a macOS version', () => {
+  const loc = (o: Record<string, string>) => [{ locale: 'en-US', screenshots: {}, ...o }];
+  const snap = (over: Partial<AppleSnapshot>): Pick<AppleSnapshot, 'version' | 'locales' | 'reviewDetail' | 'macos'> =>
+    ({ version: { versionString: '1.0.0', state: 'PREPARE_FOR_SUBMISSION', platform: 'MAC_OS' }, locales: [], reviewDetail: null, ...over });
+  const codes = (f: { msg: string }[]) => f.map(x => x.msg);
+
+  test('Game Center, touch words and iPhone mentions warn; nothing blocks', () => {
+    const f = macosClaimRules(snap({ locales: loc({ description: 'Compete on Game Center. Tap and swipe to play on your iPhone.' }) }));
+    expect(f.length).toBe(3);
+    expect(f.every(x => x.level === 'warn' && x.code === 'macos-claims')).toBe(true);
+    expect(codes(f).join('\n')).toContain('en-US description');
+  });
+  test('promotional text, what\'s new, keywords and live review notes are read', () => {
+    const f = macosClaimRules(snap({ locales: loc({ promotionalText: 'Use the touch screen', whatsNew: 'Pinch to zoom', keywords: 'ipad' }), reviewDetail: { notes: 'Sign in with Game Center' } }));
+    const all = codes(f).join('\n');
+    expect(all).toContain('en-US promotionalText');
+    expect(all).toContain('en-US whatsNew');
+    expect(all).toContain('en-US keywords');
+    expect(all).toContain('review notes (on the store)');
+  });
+  test('the config review notes the Mac would use are checked too', () => {
+    expect(codes(macosClaimRules(snap({ macos: { notes: 'Game Center leaderboards are in the menu' } }))).join()).toContain('review notes (config)');
+  });
+  test('apple.macos.gameCenter silences Game Center; IAP lines only with noIap', () => {
+    const text = loc({ description: 'Game Center scores. Remove ads with an in-app purchase.' });
+    expect(macosClaimRules(snap({ locales: text, macos: { gameCenter: true } }))).toEqual([]);
+    const f = macosClaimRules(snap({ locales: text, macos: { gameCenter: true, noIap: true } }));
+    expect(f.length).toBe(1);
+    expect(f[0]!.msg).toContain('in-app purchase');
+  });
+  test('words that only look similar do not match; iOS versions are never checked', () => {
+    expect(macosClaimRules(snap({ locales: loc({ description: 'Contact the support team; a stapler, a tapestry, an iPhoneless desk.' }) }))).toEqual([]);
+    expect(macosClaimRules(snap({ version: { versionString: '1.0.0', state: 'PREPARE_FOR_SUBMISSION', platform: 'IOS' }, locales: loc({ description: 'Game Center, tap' }) }))).toEqual([]);
+  });
+  test('appleRules includes the warning', () => {
+    const base = { expectedLocales: [], requiredDisplayTypes: [], iaps: [], expectedProducts: [], ageRating: null, priceSchedule: false, availability: false, build: null, privacyUrl: { url: 'https://example.com', status: 200 } };
+    const f = appleRules({ ...base, ...snap({ locales: loc({ description: 'Tap here', screenshots: {} as never }) }) } as AppleSnapshot);
+    expect(f.some(x => x.code === 'macos-claims' && x.level === 'warn')).toBe(true);
+  });
+});
+
+describe('apple listing reads the platform file', () => {
+  test('readAppleCopy(ctx, "macos") reads apple.macos.listing, ios reads apple.listing', async () => {
+    const { mkdtempSync, writeFileSync } = await import('node:fs');
+    const { tmpdir } = await import('node:os');
+    const { join, resolve } = await import('node:path');
+    const { readAppleCopy } = await import('../cli/apple/listing');
+    const { parseArgs } = await import('../cli/lib/args');
+    const fence = '`'.repeat(3);
+    const sec = (d: string) => ['## en-US', '', '### subtitle', fence, 'Sub', fence, '', '### promotionalText', fence, 'Promo', fence, '', '### keywords', fence, 'run,time', fence, '', '### description', fence, d, fence, ''].join('\n');
+    const dir = mkdtempSync(join(tmpdir(), 'sb-macos-'));
+    writeFileSync(join(dir, 'ios.md'), sec('Play on iPhone with Game Center.'));
+    writeFileSync(join(dir, 'mac.md'), sec('Play on your Mac.'));
+    const loaded = { config: cfg({ listing: 'ios.md', macos: { listing: 'mac.md' } }), resolve: (p: string) => resolve(dir, p), root: dir };
+    const ctx = { loaded, args: parseArgs([]) } as never;
+    expect(readAppleCopy(ctx, 'macos')['en-US']?.description).toContain('Mac');
+    expect(readAppleCopy(ctx, 'ios')['en-US']?.description).toContain('iPhone');
+    expect(readAppleCopy(ctx)['en-US']?.description).toContain('iPhone');
+  });
+});
diff --git a/tests/upload-pkg-hang.test.ts b/tests/upload-pkg-hang.test.ts
new file mode 100644
index 0000000..f4e1890
--- /dev/null
+++ b/tests/upload-pkg-hang.test.ts
@@ -0,0 +1,114 @@
+// `apple upload <app.pkg> --platform macos` once printed nothing for 10 minutes over SSH although the build number was
+// VALID on App Store Connect. Causes: pkgutil --check-signature / --expand ran unbounded and silent, and the processing
+// wait polled the IOS platform only, so a Mac build was "not listed yet" for the whole --timeout. These tests keep
+// every slow step logged and bounded, and an already-VALID build number ends at once (no upload, no wait).
+import { afterAll, afterEach, beforeAll, beforeEach, describe, expect, setDefaultTimeout, test } from 'bun:test';
+import { mkdtempSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import { hooks, run as appleUpload } from '../cli/apple/upload';
+import { PKG_CHECK_MS, PKG_EXPAND_MS, pkgInfo } from '../cli/lib/mas';
+import { HEARTBEAT_MS } from '../cli/lib/progress';
+import type { SyncResult } from '../cli/lib/rt';
+import { ascEnv, BASE, project, restore } from './helpers/store-mock';
+import { installStores, type Stores, uninstallStores, writes } from './helpers/fake-stores';
+
+const SIDE = JSON.stringify({ bundleId: 'com.example.notes', version: '1.2.0', build: '7' });
+const files = (): Record<string, string> => ({ 'build/macos/Example.pkg': 'pkg', 'build/macos/Example.pkg.json': SIDE });
+const result = (o: Partial<SyncResult>): SyncResult => ({ exitCode: 0, signalCode: null, success: true, stdout: Buffer.alloc(0), stderr: Buffer.alloc(0), ...o });
+const timedOut = result({ exitCode: null, signalCode: 'SIGTERM', success: false });
+const SIGNED = 'Package "Bare.pkg":\n   Status: signed by a certificate trusted by macOS\n   Certificate Chain:\n    1. 3rd Party Mac Developer Installer: Example (ABCDE12345)\n       Expires: 2030-01-01\n    2. Apple Worldwide Developer Relations Certification Authority\n    3. Apple Root CA\n';
+
+type Seen = { argv: string[]; timeout?: number };
+const fake = (seen: Seen[], answer: (argv: string[]) => SyncResult) => ((argv: string[], o: { timeout?: number }) => { seen.push({ argv, timeout: o.timeout }); return answer(argv); }) as never;
+
+/** Runs fn with log output captured (log.ts writes through console). */
+async function logged(fn: () => Promise<void>): Promise<{ text: string; error: Error | null }> {
+  const out: string[] = [];
+  const log = console.log, err = console.error, warn = console.warn;
+  console.log = console.error = console.warn = (...a: unknown[]) => { out.push(a.map(String).join(' ')); };
+  let error: Error | null = null;
+  try { await fn(); } catch (e) { error = e as Error; } finally { console.log = log; console.error = err; console.warn = warn; }
+  return { text: out.join('\n'), error };
+}
+
+describe('pkgInfo: bounded and never silent', () => {
+  test('the signature check has a timeout and a log line; when it times out the .json apple build wrote is used', () => {
+    const p = project(BASE, files());
+    const said: string[] = [], seen: Seen[] = [];
+    const info = pkgInfo(join(p.root, 'build/macos/Example.pkg'), 'com.example.notes', { say: m => said.push(m), spawnSync: fake(seen, () => timedOut) });
+    expect(info).toEqual({ bundleId: 'com.example.notes', version: '1.2.0', build: '7' });
+    expect(seen).toHaveLength(1);
+    expect(seen[0]!.timeout).toBe(PKG_CHECK_MS);
+    expect(said[0]).toContain('pkgutil --check-signature');
+    expect(said.at(-1)).toContain('gave no answer');
+    expect(said.at(-1)).toContain('Example.pkg.json');
+  });
+
+  test('the expand is bounded too; a timeout without the .json file is an error that names the cause', () => {
+    const p = project(BASE, { 'build/macos/Bare.pkg': 'pkg' });
+    const said: string[] = [], seen: Seen[] = [];
+    const spawnSync = fake(seen, argv => (argv[1] === '--check-signature' ? result({ stdout: Buffer.from(SIGNED) }) : timedOut));
+    let error: Error | null = null;
+    try { pkgInfo(join(p.root, 'build/macos/Bare.pkg'), undefined, { say: m => said.push(m), spawnSync, expandMs: 5000 }); } catch (e) { error = e as Error; }
+    expect(error?.message).toContain('pkgutil --expand gave no answer');
+    expect(error?.message).toContain('Bare.pkg.json');
+    expect(seen.map(x => x.argv[1])).toEqual(['--check-signature', '--expand']);
+    expect(seen[1]!.timeout).toBe(5000);
+    expect(said.some(m => m.includes('pkgutil --expand'))).toBe(true);
+    expect(PKG_EXPAND_MS).toBeGreaterThan(PKG_CHECK_MS);
+  });
+});
+
+describe('apple upload of a .pkg (fake stores)', () => {
+  setDefaultTimeout(30_000);
+  let s: Stores;
+  const path = process.env.PATH;
+  beforeAll(() => { ascEnv(); });
+  afterAll(restore);
+  beforeEach(() => { s = installStores(); process.env.PATH = mkdtempSync(join(tmpdir(), 'sb-nopkgutil-')); }); // no pkgutil: the .json is read
+  afterEach(() => { uninstallStores(); process.env.PATH = path; hooks.heartbeat = undefined; });
+
+  test('an already VALID build number ends at once: clear message, no upload, no wait, every slow step logged first', async () => {
+    s.asc.put({ type: 'builds', id: 'b-7', attributes: { version: '7', processingState: 'VALID' }, rels: { app: '6400000101' } });
+    const p = project(BASE, files());
+    const started = Date.now();
+    const r = await logged(() => appleUpload(p.ctx(['build/macos/Example.pkg', '--platform', 'macos', '--yes'])));
+    expect(Date.now() - started).toBeLessThan(10_000);
+    expect(r.error?.message).toContain('already on App Store Connect (VALID)');
+    expect(writes(s.calls)).toEqual([]);
+    expect(s.calls.some(c => decodeURIComponent(c.path).includes('preReleaseVersion.platform'))).toBe(false); // no processing poll
+    expect(s.asc.parts).toEqual([]);
+    expect(r.text).toContain('reading the package');
+    expect(r.text).toContain('asking App Store Connect');
+    expect(r.text.indexOf('reading the package')).toBeLessThan(r.text.indexOf('asking App Store Connect'));
+  });
+
+  test('--allow-existing on a Mac build: the wait polls MAC_OS and prints a heartbeat while a poll is in flight', async () => {
+    s.asc.put({ type: 'builds', id: 'b-7', attributes: { version: '7', processingState: 'VALID' }, rels: { app: '6400000101' } });
+    const p = project(BASE, files());
+    let beat: (() => void) | null = null;
+    hooks.heartbeat = { everyMs: 1000, ticker: f => { beat = f; return () => { beat = null; }; } };
+    const inner = globalThis.fetch, polls: string[] = [];
+    globalThis.fetch = (async (input: string | URL | Request, init?: RequestInit) => {
+      if (decodeURIComponent(String(input)).includes('preReleaseVersion.platform')) {
+        (beat as (() => void) | null)?.(); // the poll is in flight: time passes
+        polls.push(decodeURIComponent(String(input)));
+        // the fake does not implement include=: answer the way App Store Connect does
+        return new Response(JSON.stringify({ data: [{ type: 'builds', id: 'b-7', attributes: { version: '7', processingState: 'VALID' }, relationships: { preReleaseVersion: { data: { type: 'preReleaseVersions', id: 'pv-1' } } } }], included: [{ type: 'preReleaseVersions', id: 'pv-1', attributes: { version: '1.2.0' } }] }), { status: 200 });
+      }
+      return inner(input as never, init);
+    }) as typeof fetch;
+    const r = await logged(() => appleUpload(p.ctx(['build/macos/Example.pkg', '--platform', 'macos', '--yes', '--allow-existing'])));
+    expect(r.error).toBeNull();
+    expect(r.text).toMatch(/still waiting for build 7: first check/);
+    expect(r.text).toContain('build 7 is VALID');
+    expect(polls).toHaveLength(1);
+    expect(polls[0]).toContain('filter[preReleaseVersion.platform]=MAC_OS');
+    expect(writes(s.calls)).toEqual([]);
+  });
+
+  test('the default heartbeat is at least once a minute', () => {
+    expect(HEARTBEAT_MS).toBeLessThanOrEqual(60_000);
+  });
+});

From d88ed3ec55c40f49c19bb4c3f440524c73331780 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Tue, 3 Nov 2026 23:32:38 +0700
Subject: [PATCH 091/126] mcp: apple_review_details takes platform (macOS
 version, apple.macos.reviewNotes)

---
 cli/mcp-tools.ts | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/cli/mcp-tools.ts b/cli/mcp-tools.ts
index 17c7cf5..da72820 100644
--- a/cli/mcp-tools.ts
+++ b/cli/mcp-tools.ts
@@ -219,7 +219,8 @@ export const TOOLS: ToolDef[] = [
   { name: 'apple_appinfo', title: 'App Store app info', command: ['apple', 'appinfo'], write: true, network: true, idempotent: true,
     description: 'Categories, age rating declaration, content rights, Free price and availability (when missing).' },
   { name: 'apple_review_details', title: 'App Review information', command: ['apple', 'review-details'], write: true, network: true, idempotent: true,
-    description: 'App Review contact and, when reviewAccess.signInRequired, the demo account (both from .storebound/credentials.json or env, masked in the output), plus the review notes (apple.info.reviewNotes, sign-in instructions, where account deletion is).' },
+    description: 'App Review contact and, when reviewAccess.signInRequired, the demo account (both from .storebound/credentials.json or env, masked in the output), plus the review notes (apple.info.reviewNotes, or apple.macos.reviewNotes for platform macos; sign-in instructions, where account deletion is). Written to the editable version of the platform.',
+    props: { platform }, args: i => opt('platform', i.platform) },
   { name: 'apple_encryption', title: 'Export compliance answer', command: ['apple', 'encryption'], write: true, network: true, idempotent: true,
     description: 'Answer export compliance for builds from apple.usesNonExemptEncryption in the config (never guesses).',
     props: { build: { type: 'string', description: 'Build number (default: every build without an answer)' } }, args: i => opt('build', i.build) },

From 68467ffe9b335e0de360cb23d1fba286d105e302 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Tue, 3 Nov 2026 23:40:06 +0700
Subject: [PATCH 092/126] apple build --platform macos: --tauri takes
 tauri.<name>.conf.json (tauri.appstore.conf.json found by itself),
 entitlements from --entitlements / apple.macos.entitlements / the merged
 config, Developer-ID-only keys refused or warned

---
 cli/apple/build-mas.ts         |  33 ++++--
 cli/apple/build.ts             |   2 +-
 cli/data/flags.json            |   6 +-
 cli/lib/config.ts              |   8 +-
 cli/lib/mas.ts                 |  95 +++++++++++++++--
 skills/build-and-sign/SKILL.md |   7 ++
 tests/mas-entitlements.test.ts | 182 +++++++++++++++++++++++++++++++++
 7 files changed, 312 insertions(+), 21 deletions(-)
 create mode 100644 tests/mas-entitlements.test.ts

diff --git a/cli/apple/build-mas.ts b/cli/apple/build-mas.ts
index 6440af6..85de5d6 100644
--- a/cli/apple/build-mas.ts
+++ b/cli/apple/build-mas.ts
@@ -1,6 +1,6 @@
 // Mac App Store build of a Tauri app: `tauri build --bundles app`, signed for the Mac App Store, then productbuild to a .pkg.
 //   storebound apple build --platform macos --tauri <src-tauri> [--path-free] [--target universal-apple-darwin]
-//       [--version x.y.z] [--build-number N] [--profile <file.provisionprofile>] [--out build/macos] [--unsigned] [--dry] [--json]
+//       [--entitlements <plist>] [--allow-entitlements] [--version x.y.z] [--build-number N] [--profile <file.provisionprofile>] [--out build/macos] [--unsigned] [--dry] [--json]
 // Steps: Tauri project -> version / build number (next free one on App Store Connect, every platform) -> signing
 // identities from the keychain ("Apple Distribution" or "3rd Party Mac Developer Application"; "Mac Installer
 // Distribution" or "3rd Party Mac Developer Installer") -> Mac App Store provisioning profile (--profile, installed, or
@@ -27,7 +27,7 @@ import { prebuildFor, prebuildsDone, runPrebuild } from '../lib/web-assets';
 import { preCheckCommand } from '../lib/pre-check';
 import { pump } from '../lib/runner';
 import {
-  appProblems, entitlementKeysOf, entitlementsXml, findBuiltApp, findTauri, leakNeedles, masEntitlements, type MasProfile, masSteps, pathFreeEnv, pickMasIdentities,
+  appProblems, entitlementKeysOf, entitlementsSource, entitlementsXml, findBuiltApp, findTauri, leakNeedles, masEntitlementProblems, masEntitlements, type MasProfile, masSteps, pathFreeEnv, pickMasIdentities,
   pickMasProfiles, pkgProblems, parsePkgSignature, readAppInfo, scanPathLeaks, tauriOverlay, categoryId,
 } from '../lib/mas';
 import { readdirSync } from 'node:fs';
@@ -167,17 +167,31 @@ export async function run(ctx: Ctx, platform: string = process.platform): Promis
   const prebuild = prebuildFor(config, 'apple') ?? null;
   const prebuildSkip = !prebuild ? undefined : a.has('no-prebuild') ? '--no-prebuild' : prebuildsDone().has(prebuild) ? 'already ran in this flow run' : undefined;
   const appCheck = config.apple?.macAppCheck?.trim() || null;
-  const existingEnt = tauri.entitlements && existsSync(tauri.entitlements) ? (parsePlist(readFileSync(tauri.entitlements)) as Record<string, PlistValue>) : undefined;
+  // entitlements: --entitlements, apple.macos.entitlements, the merged Tauri config (the first one that is set)
+  const entFlag = a.get('entitlements'), entCfg = config.apple?.macos?.entitlements;
+  const entSrc = entitlementsSource({ flag: entFlag ? resolve(entFlag) : undefined, config: entCfg ? resolve(entCfg) : undefined, tauri: tauri.entitlements });
+  let existingEnt: Record<string, PlistValue> | undefined;
+  if (entSrc) {
+    if (existsSync(entSrc.file)) existingEnt = parsePlist(readFileSync(entSrc.file)) as Record<string, PlistValue>;
+    else if (entSrc.source !== 'tauri config bundle.macOS.entitlements') throw new Error(`${entSrc.source}: ${entSrc.file} does not exist`);
+    else warn(TAG, `${entSrc.source}: ${relative(root, entSrc.file)} does not exist, using the sandbox defaults only`);
+  }
   const ent = masEntitlements({ teamId: team, bundleId, existing: existingEnt });
-  const plan = { platform: 'MAC_OS', tauri: relative(root, tauri.confPath), target, version, build: buildNo, teamId: teamId, unsigned, pathFree, appIdentity, installerIdentity,
-    profile: profile ? basenameOf(profile) : null, entitlements: Object.keys(ent), tauriOverlay: overlay, env: Object.fromEntries(Object.entries(env).map(([k, v]) => [k, k === 'RUSTFLAGS' ? v.replaceAll(home, '~') : v])),
+  const entCheck = masEntitlementProblems(ent);
+  const allowEnt = a.has('allow-entitlements');
+  const plan = { platform: 'MAC_OS', tauri: relative(root, tauri.confPath), tauriOverlayFile: tauri.overlayPath ? relative(root, tauri.overlayPath) : null, target, version, build: buildNo, teamId: teamId, unsigned, pathFree, appIdentity, installerIdentity,
+    profile: profile ? basenameOf(profile) : null, entitlements: Object.keys(ent), entitlementsSource: entSrc ? { source: entSrc.source, file: relative(root, entSrc.file) } : null,
+    entitlementProblems: entCheck, tauriOverlay: overlay, env: Object.fromEntries(Object.entries(env).map(([k, v]) => [k, k === 'RUSTFLAGS' ? v.replaceAll(home, '~') : v])),
     prebuild, ...(prebuildSkip ? { prebuildSkip } : {}), appCheck,
     steps: [showCmd(steps.tauri, null), showCmd(steps.codesignVerify, null), showCmd(steps.productbuild, null), showCmd(steps.pkgCheck, null)], out: relative(root, out) || '.', pkg: relative(root, pkg) };
   if (dry) {
     if (json) { printJson(plan); return; }
     log(TAG, `Tauri ${tauri.productName} (${bundleId}) ${version} (${buildNo}) for ${target}, ${unsigned ? 'UNSIGNED' : 'Mac App Store signing'}${pathFree ? ', path-free' : ''}`);
     log(TAG, identityLine({ platform, appIdentity, installerIdentity, profile: plan.profile }));
-    log(TAG, `entitlements: ${plan.entitlements.join(', ')}`);
+    if (tauri.overlayPath) log(TAG, `Tauri overlay ${plan.tauriOverlayFile}${tauri.overlayAuto ? ' (found next to tauri.conf.json)' : ''}: merged over tauri.conf.json, passed to tauri build --config`);
+    log(TAG, `entitlements from ${entSrc?.source ?? 'the sandbox defaults'}${entSrc ? ` (${plan.entitlementsSource!.file})` : ''}: ${plan.entitlements.join(', ')}`);
+    for (const e of entCheck.errors) warn(TAG, `entitlement ${e}${allowEnt ? '' : ' (the real build stops here; --allow-entitlements builds anyway)'}`);
+    for (const w of entCheck.warnings) warn(TAG, `entitlement ${w}`);
     if (pathFree) log(TAG, `RUSTFLAGS: ${plan.env.RUSTFLAGS}`);
     if (prebuild) log(TAG, prebuildSkip ? `prebuild skipped (${prebuildSkip}): ${prebuild}` : `would run the prebuild: ${prebuild}`);
     for (const s of plan.steps) log(TAG, `would run: ${s}`);
@@ -185,6 +199,11 @@ export async function run(ctx: Ctx, platform: string = process.platform): Promis
     done(TAG, 'macOS build planned (dry run)');
     return;
   }
+  if (tauri.overlayPath) log(TAG, `Tauri overlay ${plan.tauriOverlayFile}${tauri.overlayAuto ? ' (found next to tauri.conf.json)' : ''}: merged over tauri.conf.json, passed to tauri build --config`);
+  log(TAG, `entitlements from ${entSrc?.source ?? 'the sandbox defaults'}${entSrc ? ` (${plan.entitlementsSource!.file})` : ''}: ${plan.entitlements.join(', ')}`);
+  for (const w of entCheck.warnings) warn(TAG, `entitlement ${w}`);
+  for (const e of entCheck.errors) if (allowEnt) warn(TAG, `entitlement ${e} (--allow-entitlements)`);
+  if (entCheck.errors.length && !allowEnt) throw new Error(`the entitlements (from ${entSrc?.source ?? 'the sandbox defaults'}) do not belong in a Mac App Store build:\n${entCheck.errors.map(x => `  ${x}`).join('\n')}\n  Point the build at the App Store plist: --entitlements <plist>, apple.macos.entitlements, or a tauri.appstore.conf.json overlay next to tauri.conf.json (--allow-entitlements builds anyway).`);
   if (!mac) throw new Error('apple build --platform macos needs macOS (tauri build, codesign, productbuild)');
   const remote = remoteBuildSession(process.env, run1(['launchctl', 'managername'], 5000).out.trim());
   if (remote && !unsigned && !a.has('allow-ssh')) throw new Error(`${sshBuildRefusal(remote, { unlockFlag: false })}
@@ -205,7 +224,7 @@ export async function run(ctx: Ctx, platform: string = process.platform): Promis
   const entOut = unsigned ? null : entitlementKeysOf(run1(['codesign', '-d', '--entitlements', ':-', appDir]).out);
   const leaks = pathFree || a.has('scan-paths') ? scanPathLeaks(appDir, leakNeedles(home, user, root)) : [];
   const checks = appProblems({ info: readAppInfo(appDir), entitlements: entOut, hasProfile: existsSync(join(appDir, 'Contents', 'embedded.provisionprofile')), leaks },
-    { bundleId, version, build: buildNo, signed: !unsigned, pathFree });
+    { bundleId, version, build: buildNo, signed: !unsigned, pathFree, allowEntitlements: allowEnt });
   for (const w of checks.warnings) warn(TAG, w);
   if (checks.errors.length) throw new Error(`${basenameOf(appDir)} was built, but the Mac App Store would refuse it:\n${checks.errors.map(x => `  ${x}`).join('\n')}`);
   if (appCheck) {
diff --git a/cli/apple/build.ts b/cli/apple/build.ts
index 18093db..1655081 100644
--- a/cli/apple/build.ts
+++ b/cli/apple/build.ts
@@ -1,5 +1,5 @@
 // Archive and export an App Store IPA with xcodebuild, no Xcode UI.
-//   storebound apple build --platform macos --tauri <src-tauri> [--path-free] [--unsigned] [--target T] [--profile F] [--version x.y.z] [--build-number N] [--out D]
+//   storebound apple build --platform macos --tauri <src-tauri> [--path-free] [--unsigned] [--target T] [--profile F] [--entitlements <plist>] [--allow-entitlements] [--version x.y.z] [--build-number N] [--out D]
 //     (Mac App Store build of a Tauri app: cli/apple/build-mas.ts)
 //   storebound apple build [--version 1.2.0] [--build-number N] [--scheme S] [--workspace W | --project P]
 //                          [--configuration Release] [--out build/ios] [--no-prebuild] [--allow-stale-web] [--dry] [--json]
diff --git a/cli/data/flags.json b/cli/data/flags.json
index 44ebcb1..9e5aed1 100644
--- a/cli/data/flags.json
+++ b/cli/data/flags.json
@@ -69,12 +69,14 @@
   "apple build": [
    "allow-app-group-gap",
    "allow-device-gap",
+   "allow-entitlements",
    "allow-ssh",
    "allow-stale-web",
    "allow-version-mismatch",
    "build-number",
    "configuration",
    "derived-data",
+   "entitlements",
    "env-file",
    "evidence",
    "keychain",
@@ -1181,6 +1183,7 @@
    "allow-app-group-gap",
    "allow-availability-changes",
    "allow-device-gap",
+   "allow-entitlements",
    "allow-existing",
    "allow-origin",
    "allow-price-changes",
@@ -1243,6 +1246,7 @@
    "download",
    "enable",
    "end",
+   "entitlements",
    "env-file",
    "every",
    "evidence",
@@ -1506,7 +1510,7 @@
    "storebound apple appinfo [--dry] [--json] [--allow-price-changes] [--allow-availability-changes]"
   ],
   "apple build": [
-   "storebound apple build --platform macos --tauri <src-tauri> [--path-free] [--unsigned] [--target T] [--profile F] [--version x.y.z] [--build-number N] [--out D]",
+   "storebound apple build --platform macos --tauri <src-tauri> [--path-free] [--unsigned] [--target T] [--profile F] [--entitlements <plist>] [--allow-entitlements] [--version x.y.z] [--build-number N] [--out D]",
    "storebound apple build [--version 1.2.0] [--build-number N] [--scheme S] [--workspace W | --project P]"
   ],
   "apple bundle": [
diff --git a/cli/lib/config.ts b/cli/lib/config.ts
index 05b9fc0..01da2ed 100644
--- a/cli/lib/config.ts
+++ b/cli/lib/config.ts
@@ -714,8 +714,10 @@ export interface ShipConfig {
      * --platform macos`; `reviewNotes`: used instead of apple.info.reviewNotes by `apple review-details --platform macos`.
      * `gameCenter: true`: the Mac app has Game Center (silences the Game Center check of `validate --platform macos`).
      * `noIap: true`: the Mac app sells nothing (validate then flags in-app purchase lines in the Mac texts).
+     * `entitlements`: the Mac App Store entitlements plist of `apple build --platform macos --tauri` (e.g. "src-tauri/Entitlements.appstore.plist"),
+     * used instead of the Tauri config's bundle.macOS.entitlements (a project with a Developer ID channel keeps that one there); `--entitlements <plist>` wins over it.
      */
-    macos?: { listing?: string; reviewNotes?: string; gameCenter?: boolean; noIap?: boolean };
+    macos?: { listing?: string; reviewNotes?: string; gameCenter?: boolean; noIap?: boolean; entitlements?: string };
     /** "Header and Search Results" creative assets (`storebound apple creative-assets`, iOS / iPadOS 27+). Files under
      *  <renders>/<lang>/creative/: header.{png,jpg,mov,m4v,mp4} (3840x1646, 21:9), search.{...} (3:2, 1920x1280 to
      *  3840x2560) or universal.png (5244x2950) for both. `header` / `search` false skip that slot; `universal` is a
@@ -1047,9 +1049,9 @@ export function validateExtras(cfg: Partial<ShipConfig>): string[] {
   if (cfg.play?.free !== undefined && typeof cfg.play.free !== 'boolean') e.push('play.free: true (free) | false (paid)');
   const mo = cfg.apple?.macos;
   if (mo !== undefined) {
-    if (typeof mo !== 'object' || mo === null || Array.isArray(mo)) e.push('apple.macos: { listing?: "store/appstore-macos.md", reviewNotes?: "...", gameCenter?: true, noIap?: true }');
+    if (typeof mo !== 'object' || mo === null || Array.isArray(mo)) e.push('apple.macos: { listing?: "store/appstore-macos.md", reviewNotes?: "...", gameCenter?: true, noIap?: true, entitlements?: "src-tauri/Entitlements.appstore.plist" }');
     else {
-      for (const k of ['listing', 'reviewNotes'] as const) if (mo[k] !== undefined && (typeof mo[k] !== 'string' || !mo[k]!.trim())) e.push(`apple.macos.${k}: a non-empty string${k === 'listing' ? ' (path of the macOS App Store listing file)' : ''}`);
+      for (const k of ['listing', 'reviewNotes', 'entitlements'] as const) if (mo[k] !== undefined && (typeof mo[k] !== 'string' || !mo[k]!.trim())) e.push(`apple.macos.${k}: a non-empty string${k === 'listing' ? ' (path of the macOS App Store listing file)' : k === 'entitlements' ? ' (path of the Mac App Store entitlements plist)' : ''}`);
       for (const k of ['gameCenter', 'noIap'] as const) if (mo[k] !== undefined && typeof mo[k] !== 'boolean') e.push(`apple.macos.${k}: true | false`);
     }
   }
diff --git a/cli/lib/mas.ts b/cli/lib/mas.ts
index 96346f6..b080e57 100644
--- a/cli/lib/mas.ts
+++ b/cli/lib/mas.ts
@@ -18,20 +18,52 @@ export interface TauriProject {
   category?: string;
   minOs?: string;
   entitlements?: string;
+  /** The overlay file merged over the base config (tauri.<name>.conf.json), absolute; passed to `tauri build --config` too. */
+  overlayPath?: string;
+  /** True when the overlay was found next to tauri.conf.json without being named (tauri.appstore.conf.json / tauri.mas.conf.json). */
+  overlayAuto?: boolean;
   conf: Record<string, unknown>;
 }
 
+/** Overlay files that are picked up on their own for a Mac App Store build, in this order. */
+export const MAS_OVERLAY_NAMES = ['tauri.appstore.conf.json', 'tauri.mas.conf.json'] as const;
+
+/** JSON merge patch (RFC 7386, what Tauri's --config does): objects merge, null removes a key, anything else (arrays too) replaces. */
+export function mergePatch(base: unknown, patch: unknown): unknown {
+  if (patch === null || typeof patch !== 'object' || Array.isArray(patch)) return patch;
+  const out: Record<string, unknown> = base !== null && typeof base === 'object' && !Array.isArray(base) ? { ...(base as Record<string, unknown>) } : {};
+  for (const [k, v] of Object.entries(patch as Record<string, unknown>)) {
+    if (v === null) delete out[k];
+    else out[k] = mergePatch(out[k], v);
+  }
+  return out;
+}
+
+/** tauri.<name>.conf.json (an overlay), not tauri.conf.json itself. */
+export const isOverlayFile = (p: string): boolean => /(^|[\\/])tauri\.[^\\/]+\.conf\.json$/.test(p);
+
 const SKIP = new Set(['node_modules', 'target', '.git', 'dist', 'build', '.storebound', 'Pods']);
 
-/** The Tauri project: `hint` (a folder with tauri.conf.json, or the file itself) or the only tauri.conf.json found. */
+/** The Tauri project: `hint` (a folder with tauri.conf.json, or a tauri.conf.json / tauri.conf.json5 / tauri.<name>.conf.json
+ *  file) or the only tauri.conf.json found. An overlay file (tauri.<name>.conf.json) is merged over the base
+ *  tauri.conf.json of its folder; tauri.appstore.conf.json / tauri.mas.conf.json next to the base config is picked up on its own. */
 export function findTauri(root: string, hint?: string): TauriProject {
   const names = ['tauri.conf.json', 'tauri.conf.json5'];
-  let confPath: string | undefined;
+  let confPath: string | undefined, overlayPath: string | undefined, overlayAuto = false;
+  const autoOverlay = (): void => { const o = MAS_OVERLAY_NAMES.map(n => join(dirname(confPath!), n)).find(existsSync); if (o) { overlayPath = o; overlayAuto = true; } };
   if (hint && hint !== 'true') {
     const p = join(root, hint);
-    if (/tauri\.conf\.json5?$/.test(p) && existsSync(p)) confPath = p;
-    else confPath = names.map(n => join(p, n)).find(existsSync);
-    if (!confPath) throw new Error(`--tauri ${hint}: no tauri.conf.json in it`);
+    if (isOverlayFile(p)) {
+      if (!existsSync(p)) throw new Error(`--tauri ${hint}: no such file`);
+      overlayPath = p;
+      confPath = names.map(n => join(dirname(p), n)).find(existsSync);
+      if (!confPath) throw new Error(`--tauri ${hint}: no tauri.conf.json next to this overlay (the base config it is merged over)`);
+    } else {
+      if (/tauri\.conf\.json5?$/.test(p) && existsSync(p)) confPath = p;
+      else confPath = names.map(n => join(p, n)).find(existsSync);
+      if (!confPath) throw new Error(`--tauri ${hint}: no tauri.conf.json in it`);
+      autoOverlay();
+    }
   } else {
     const hits: string[] = [];
     const walk = (dir: string, d: number): void => {
@@ -43,16 +75,22 @@ export function findTauri(root: string, hint?: string): TauriProject {
     walk(root, 4);
     if (hits.length !== 1) throw new Error(hits.length ? `several Tauri projects (${hits.map(h => relative(root, h)).join(', ')}): pass --tauri <folder with tauri.conf.json>` : 'no tauri.conf.json found: pass --tauri <folder with tauri.conf.json>');
     confPath = hits[0]!;
+    autoOverlay();
   }
   let conf: Record<string, any>;
   try { conf = JSON.parse(readFileSync(confPath, 'utf8')); } catch (e) { throw new Error(`${confPath}: not valid JSON (${(e as Error).message}); tauri.conf.json5 / Tauri.toml are not read, use tauri.conf.json`); }
+  if (overlayPath) {
+    let patch: unknown;
+    try { patch = JSON.parse(readFileSync(overlayPath, 'utf8')); } catch (e) { throw new Error(`${overlayPath}: not valid JSON (${(e as Error).message})`); }
+    conf = mergePatch(conf, patch) as Record<string, any>;
+  }
   const mac = conf.bundle?.macOS ?? {};
   const productName = String(conf.productName ?? '');
   if (!productName) throw new Error(`${confPath}: productName is missing`);
   const dir = dirname(confPath);
   return { dir, confPath, cwd: dirname(dir), productName, identifier: String(conf.identifier ?? ''), version: typeof conf.version === 'string' ? conf.version : undefined,
     category: typeof conf.bundle?.category === 'string' ? conf.bundle.category : undefined, minOs: typeof mac.minimumSystemVersion === 'string' ? mac.minimumSystemVersion : undefined,
-    entitlements: typeof mac.entitlements === 'string' ? join(dir, mac.entitlements) : undefined, conf };
+    entitlements: typeof mac.entitlements === 'string' ? join(dir, mac.entitlements) : undefined, ...(overlayPath ? { overlayPath, overlayAuto } : {}), conf };
 }
 
 /** Tauri's category names (and Apple's public.app-category.* ids) -> the LSApplicationCategoryType Tauri writes; null when unknown. */
@@ -79,6 +117,43 @@ export function masEntitlements(o: { teamId: string; bundleId: string; existing?
   };
 }
 
+/** Where the entitlements of a Mac App Store build come from, first hit wins: `--entitlements <plist>`, the config's
+ *  `apple.macos.entitlements`, the merged Tauri config's `bundle.macOS.entitlements`. Paths are already absolute. Pure. */
+export function entitlementsSource(o: { flag?: string; config?: string; tauri?: string }): { file: string; source: string } | null {
+  if (o.flag) return { file: o.flag, source: '--entitlements' };
+  if (o.config) return { file: o.config, source: 'apple.macos.entitlements' };
+  if (o.tauri) return { file: o.tauri, source: 'tauri config bundle.macOS.entitlements' };
+  return null;
+}
+
+/** Entitlements that App Store Connect refuses in a Mac App Store build (a Developer ID / development leftover). */
+export const MAS_REFUSED_KEYS: Record<string, string> = {
+  'com.apple.security.get-task-allow': 'a development entitlement, App Store Connect refuses it',
+  'com.apple.security.cs.disable-library-validation': 'a Developer ID hardened-runtime exception, App Store Connect refuses it',
+};
+
+/** Hardened-runtime exceptions and Developer ID habits that do not belong in a Mac App Store build. App Review may
+ *  question them or the sandbox ignores them, but they are not an automatic upload refusal: a warning, not a stop. */
+export const MAS_SUSPECT_KEYS: Record<string, string> = {
+  'com.apple.security.cs.allow-jit': 'hardened-runtime exception for Developer ID builds; App Review asks why a sandboxed app needs it',
+  'com.apple.security.cs.allow-unsigned-executable-memory': 'hardened-runtime exception for Developer ID builds; App Review asks why',
+  'com.apple.security.cs.disable-executable-page-protection': 'hardened-runtime exception for Developer ID builds',
+  'com.apple.security.cs.allow-dyld-environment-variables': 'hardened-runtime exception for Developer ID builds',
+  'com.apple.security.cs.debugger': 'hardened-runtime exception for Developer ID builds (a debugger cannot be sandboxed)',
+  'com.apple.security.automation.apple-events': 'needs NSAppleEventsUsageDescription in Info.plist and a reason in the review notes; usually a Developer ID leftover',
+};
+
+/** The entitlements of a Mac App Store build against the two lists above (a key set to false is fine). Pure. */
+export function masEntitlementProblems(ent: Record<string, PlistValue> | null | undefined): { errors: string[]; warnings: string[] } {
+  const errors: string[] = [], warnings: string[] = [];
+  for (const [k, v] of Object.entries(ent ?? {})) {
+    if (v === false) continue;
+    if (MAS_REFUSED_KEYS[k]) errors.push(`${k} is set: ${MAS_REFUSED_KEYS[k]}`);
+    else if (MAS_SUSPECT_KEYS[k]) warnings.push(`${k} is set: ${MAS_SUSPECT_KEYS[k]}`);
+  }
+  return { errors, warnings };
+}
+
 export const entitlementsXml = (e: Record<string, PlistValue>): string => toXmlPlist(e);
 
 /** Keys of an entitlements plist (XML or what `codesign -d --entitlements :-` prints). */
@@ -170,7 +245,7 @@ export const leakNeedles = (home: string, user: string, root: string): string[]
 export interface AppFacts { info: Record<string, PlistValue>; entitlements: Record<string, PlistValue> | null; hasProfile: boolean; leaks: Leak[] }
 
 /** Problems (stop) and warnings of a built .app before it goes into a .pkg. Pure. */
-export function appProblems(f: AppFacts, o: { bundleId: string; version: string; build: string; signed: boolean; pathFree: boolean }): { errors: string[]; warnings: string[] } {
+export function appProblems(f: AppFacts, o: { bundleId: string; version: string; build: string; signed: boolean; pathFree: boolean; allowEntitlements?: boolean }): { errors: string[]; warnings: string[] } {
   const errors: string[] = [], warnings: string[] = [];
   const s = (k: string): string | undefined => (typeof f.info[k] === 'string' ? f.info[k] as string : undefined);
   if (s('CFBundleIdentifier') !== o.bundleId) errors.push(`CFBundleIdentifier is ${s('CFBundleIdentifier') ?? 'missing'}, not ${o.bundleId}`);
@@ -184,7 +259,9 @@ export function appProblems(f: AppFacts, o: { bundleId: string; version: string;
     else {
       for (const k of MAS_REQUIRED) if (f.entitlements[k] === undefined) errors.push(`entitlement ${k} is missing`);
       if (f.entitlements['com.apple.security.app-sandbox'] !== true) errors.push('com.apple.security.app-sandbox is not true');
-      if (f.entitlements['com.apple.security.get-task-allow'] === true) errors.push('com.apple.security.get-task-allow is true: a development entitlement, App Store Connect refuses it');
+      const ep = masEntitlementProblems(f.entitlements);
+      (o.allowEntitlements ? warnings : errors).push(...ep.errors);
+      warnings.push(...ep.warnings);
     }
     if (!f.hasProfile) errors.push('Contents/embedded.provisionprofile is missing: a Mac App Store app needs its provisioning profile inside (Tauri bundle.macOS.files)');
   }
@@ -230,7 +307,7 @@ export interface MasPlanInput {
 export function masSteps(i: MasPlanInput): { tauri: string[]; productbuild: string[]; codesignVerify: string[]; pkgCheck: string[] } {
   const appPath = join(i.tauri.dir, 'target', i.target, 'release', 'bundle', 'macos', `${i.tauri.productName}.app`);
   return {
-    tauri: [...i.tauriCmd, 'build', '--bundles', 'app', '--target', i.target, '--config', i.configFile],
+    tauri: [...i.tauriCmd, 'build', '--bundles', 'app', '--target', i.target, ...(i.tauri.overlayPath ? ['--config', i.tauri.overlayPath] : []), '--config', i.configFile],
     codesignVerify: ['codesign', '--verify', '--deep', '--strict', '--verbose=2', appPath],
     productbuild: ['productbuild', '--component', appPath, '/Applications', ...(i.unsigned || !i.installerIdentity ? [] : ['--sign', i.installerIdentity]), i.pkg],
     pkgCheck: ['pkgutil', '--check-signature', i.pkg],
diff --git a/skills/build-and-sign/SKILL.md b/skills/build-and-sign/SKILL.md
index 844e24a..b8f6d47 100644
--- a/skills/build-and-sign/SKILL.md
+++ b/skills/build-and-sign/SKILL.md
@@ -112,6 +112,13 @@ when the owner said so for this run). The MCP server offers only `apple_signing_
    the generated entitlements (app sandbox, application / team identifier, your own keys kept), the embedded profile,
    hardened runtime and `bundleVersion`. Set `bundle.category` and `bundle.macOS.minimumSystemVersion` in
    tauri.conf.json (the build stops without LSApplicationCategoryType / LSMinimumSystemVersion).
+   A project with a Developer ID and a Mac App Store channel keeps two plists: `--tauri` takes the folder or a
+   `tauri.<name>.conf.json` overlay (merged over tauri.conf.json like Tauri's `--config`, and passed to `tauri build`
+   too; `tauri.appstore.conf.json` / `tauri.mas.conf.json` next to tauri.conf.json is picked up on its own). The
+   entitlements plist comes from `--entitlements <plist>`, else `apple.macos.entitlements`, else the merged
+   `bundle.macOS.entitlements`; the plan shows the source and the final keys. `get-task-allow` and
+   `cs.disable-library-validation` stop the build (App Store Connect refuses them); other hardened-runtime exceptions
+   (`cs.allow-jit`, `cs.allow-unsigned-executable-memory`, `automation.apple-events`...) warn. `--allow-entitlements` builds anyway.
 5. Checks of the .app (sandbox, no get-task-allow, profile inside, version / build), `codesign --verify`, then
    `productbuild --component <app> /Applications --sign <installer identity>` and `pkgutil --check-signature`.
 6. `--path-free`: rustc remaps the checkout, CARGO_HOME, RUSTUP_HOME and the home folder, no debug info, symbols stripped;
diff --git a/tests/mas-entitlements.test.ts b/tests/mas-entitlements.test.ts
new file mode 100644
index 0000000..4e62c5d
--- /dev/null
+++ b/tests/mas-entitlements.test.ts
@@ -0,0 +1,182 @@
+// Mac App Store entitlements of a Tauri build (cli/lib/mas.ts, cli/apple/build-mas.ts): the overlay config
+// (tauri.<name>.conf.json) merged over tauri.conf.json, the source order of the entitlements plist, and the check of
+// Developer ID / development keys that do not belong in a Mac App Store build.
+import { afterAll, describe, expect, test } from 'bun:test';
+import { mkdirSync, mkdtempSync, rmSync, writeFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import { run as buildMas } from '../cli/apple/build-mas';
+import type { ShipConfig } from '../cli/lib/config';
+import { appProblems, entitlementsSource, entitlementsXml, findTauri, masEntitlementProblems, masSteps, mergePatch, tauriOverlay } from '../cli/lib/mas';
+import { BASE, capture, project } from './helpers/store-mock';
+
+const tmp = mkdtempSync(join(tmpdir(), 'sb-masent-'));
+afterAll(() => rmSync(tmp, { recursive: true, force: true }));
+
+const BASE_CONF = { productName: 'Demo App', identifier: 'com.example.notes', version: '1.2.3', bundle: { category: 'Utility', macOS: { entitlements: 'Entitlements.plist', minimumSystemVersion: '12.0' } } };
+const OVERLAY = { bundle: { macOS: { entitlements: 'Entitlements.appstore.plist' } } };
+const DEVID = { 'com.apple.security.cs.disable-library-validation': true, 'com.apple.security.cs.allow-jit': true, 'com.apple.security.network.client': true };
+const APPSTORE = { 'com.apple.security.files.user-selected.read-only': true, 'com.apple.security.network.client': true };
+
+function fixture(files: Record<string, unknown> = {}): { root: string; dir: string } {
+  const root = mkdtempSync(join(tmp, 'p-'));
+  const dir = join(root, 'src-tauri');
+  mkdirSync(dir, { recursive: true });
+  writeFileSync(join(dir, 'tauri.conf.json'), JSON.stringify(BASE_CONF));
+  for (const [n, v] of Object.entries(files)) writeFileSync(join(dir, n), typeof v === 'string' ? v : JSON.stringify(v));
+  return { root, dir };
+}
+
+describe('merge patch', () => {
+  test('objects merge, null removes, arrays and scalars replace', () => {
+    expect(mergePatch({ a: { b: 1, c: 2 }, d: [1, 2], e: 1 }, { a: { b: 9 }, d: [3], e: null })).toEqual({ a: { b: 9, c: 2 }, d: [3] });
+    expect(mergePatch({ a: 1 }, { a: { x: 1 } })).toEqual({ a: { x: 1 } });
+    expect(mergePatch('x', 5)).toBe(5);
+  });
+});
+
+describe('overlay config', () => {
+  test('an overlay file path is merged over the base config in its folder', () => {
+    const { root, dir } = fixture({ 'tauri.appstore.conf.json': OVERLAY });
+    const t = findTauri(root, 'src-tauri/tauri.appstore.conf.json');
+    expect(t.overlayPath).toBe(join(dir, 'tauri.appstore.conf.json'));
+    expect(t.overlayAuto).toBe(false);
+    expect(t.entitlements).toBe(join(dir, 'Entitlements.appstore.plist'));
+    expect(t.productName).toBe('Demo App');
+    expect(t.minOs).toBe('12.0');
+  });
+  test('a folder picks up tauri.appstore.conf.json, then tauri.mas.conf.json, on its own; a scan does too', () => {
+    const a = fixture({ 'tauri.appstore.conf.json': OVERLAY });
+    expect(findTauri(a.root, 'src-tauri')).toMatchObject({ overlayPath: join(a.dir, 'tauri.appstore.conf.json'), overlayAuto: true });
+    expect(findTauri(a.root).overlayAuto).toBe(true);
+    const m = fixture({ 'tauri.mas.conf.json': OVERLAY });
+    expect(findTauri(m.root, 'src-tauri').overlayPath).toBe(join(m.dir, 'tauri.mas.conf.json'));
+    const both = fixture({ 'tauri.appstore.conf.json': OVERLAY, 'tauri.mas.conf.json': { bundle: { macOS: { entitlements: 'other.plist' } } } });
+    expect(findTauri(both.root, 'src-tauri').entitlements).toBe(join(both.dir, 'Entitlements.appstore.plist'));
+  });
+  test('naming the base file directly still auto-detects; no overlay means none', () => {
+    const { root, dir } = fixture({ 'tauri.appstore.conf.json': OVERLAY });
+    expect(findTauri(root, 'src-tauri/tauri.conf.json').entitlements).toBe(join(dir, 'Entitlements.appstore.plist'));
+    const plain = fixture();
+    const t = findTauri(plain.root, 'src-tauri');
+    expect(t.overlayPath).toBeUndefined();
+    expect(t.entitlements).toBe(join(plain.dir, 'Entitlements.plist'));
+  });
+  test('an overlay without a base config, a missing file, bad JSON', () => {
+    const root = mkdtempSync(join(tmp, 'o-'));
+    mkdirSync(join(root, 'x'), { recursive: true });
+    writeFileSync(join(root, 'x/tauri.appstore.conf.json'), '{}');
+    expect(() => findTauri(root, 'x/tauri.appstore.conf.json')).toThrow('no tauri.conf.json next to this overlay');
+    const { root: r2 } = fixture();
+    expect(() => findTauri(r2, 'src-tauri/tauri.nope.conf.json')).toThrow('no such file');
+    const bad = fixture({ 'tauri.appstore.conf.json': '{ nope' });
+    expect(() => findTauri(bad.root, 'src-tauri')).toThrow('not valid JSON');
+  });
+  test('tauri build gets the overlay first and storebound\'s own overlay last', () => {
+    const { root, dir } = fixture({ 'tauri.appstore.conf.json': OVERLAY });
+    const tauri = findTauri(root, 'src-tauri');
+    const input = { tauri, tauriCmd: ['tauri'], target: 'universal-apple-darwin', out: join(root, 'out'), configFile: join(root, 'out/tauri.mas.conf.json'), entitlementsFile: 'e', profile: null,
+      appIdentity: null, installerIdentity: null, version: '1.0.0', build: '1', unsigned: true, pathFree: false, pkg: 'x.pkg' };
+    const argv = masSteps(input).tauri;
+    const cfgs = argv.flatMap((x, i) => (x === '--config' ? [argv[i + 1]] : []));
+    expect(cfgs).toEqual([join(dir, 'tauri.appstore.conf.json'), input.configFile]);
+    const plain = masSteps({ ...input, tauri: findTauri(fixture().root, 'src-tauri') }).tauri;
+    expect(plain.filter(x => x === '--config').length).toBe(1);
+    expect(tauriOverlay({ appIdentity: 'id', entitlementsFile: 'e', profile: null, version: '1', build: '1', unsigned: false })).toBeTruthy();
+  });
+});
+
+describe('entitlements source order', () => {
+  test('flag, then config, then the Tauri config', () => {
+    expect(entitlementsSource({ flag: '/f', config: '/c', tauri: '/t' })).toEqual({ file: '/f', source: '--entitlements' });
+    expect(entitlementsSource({ config: '/c', tauri: '/t' })).toEqual({ file: '/c', source: 'apple.macos.entitlements' });
+    expect(entitlementsSource({ tauri: '/t' })).toEqual({ file: '/t', source: 'tauri config bundle.macOS.entitlements' });
+    expect(entitlementsSource({})).toBeNull();
+  });
+});
+
+describe('entitlement key check', () => {
+  test('refused keys are errors, hardened-runtime exceptions warnings, false values and fine keys pass', () => {
+    const r = masEntitlementProblems({
+      ...DEVID, 'com.apple.security.get-task-allow': true, 'com.apple.security.cs.allow-unsigned-executable-memory': true,
+      'com.apple.security.cs.disable-executable-page-protection': true, 'com.apple.security.cs.allow-dyld-environment-variables': true,
+      'com.apple.security.automation.apple-events': true, 'com.apple.security.cs.debugger': false, 'com.apple.security.files.user-selected.read-only': true,
+    });
+    expect(r.errors.map(e => e.split(' ')[0])).toEqual(['com.apple.security.cs.disable-library-validation', 'com.apple.security.get-task-allow']);
+    expect(r.warnings.map(e => e.split(' ')[0]).sort()).toEqual([
+      'com.apple.security.automation.apple-events', 'com.apple.security.cs.allow-dyld-environment-variables', 'com.apple.security.cs.allow-jit',
+      'com.apple.security.cs.allow-unsigned-executable-memory', 'com.apple.security.cs.disable-executable-page-protection',
+    ]);
+    expect(masEntitlementProblems(APPSTORE)).toEqual({ errors: [], warnings: [] });
+    expect(masEntitlementProblems(null)).toEqual({ errors: [], warnings: [] });
+  });
+  test('the built app is checked too; --allow-entitlements turns the errors into warnings', () => {
+    const facts = {
+      info: { CFBundleIdentifier: 'com.example.notes', CFBundleShortVersionString: '1.0.0', CFBundleVersion: '5', LSApplicationCategoryType: 'public.app-category.utilities', LSMinimumSystemVersion: '12.0', ITSAppUsesNonExemptEncryption: false },
+      entitlements: { 'com.apple.security.app-sandbox': true, 'com.apple.application-identifier': 'T.com.example.notes', 'com.apple.developer.team-identifier': 'T', ...DEVID },
+      hasProfile: true, leaks: [],
+    };
+    const o = { bundleId: 'com.example.notes', version: '1.0.0', build: '5', signed: true, pathFree: false };
+    const r = appProblems(facts, o);
+    expect(r.errors.join()).toContain('disable-library-validation');
+    expect(r.warnings.join()).toContain('allow-jit');
+    const allowed = appProblems(facts, { ...o, allowEntitlements: true });
+    expect(allowed.errors).toEqual([]);
+    expect(allowed.warnings.join()).toContain('disable-library-validation');
+  });
+});
+
+// the whole command, as a dry run (no store, no Mac)
+describe('apple build --platform macos --dry', () => {
+  const CONFIG: ShipConfig = { ...BASE };
+  const files = (extra: Record<string, string> = {}): Record<string, string> => ({
+    'src-tauri/tauri.conf.json': JSON.stringify(BASE_CONF),
+    'src-tauri/tauri.appstore.conf.json': JSON.stringify(OVERLAY),
+    'src-tauri/Entitlements.plist': entitlementsXml(DEVID),
+    'src-tauri/Entitlements.appstore.plist': entitlementsXml(APPSTORE),
+    ...extra,
+  });
+  const dry = async (cfg: ShipConfig, f: Record<string, string>, argv: string[]): Promise<{ plan: any; err: string }> => {
+    const p = project(cfg, f);
+    const r = await capture(() => buildMas(p.ctx(['--tauri', 'src-tauri', '--unsigned', '--build-number', '7', '--dry', '--json', ...argv]), 'linux'));
+    return { plan: JSON.parse(r.out.slice(r.out.indexOf('{'))), err: r.err };
+  };
+  test('the App Store overlay is found and its plist used, not the Developer ID one', async () => {
+    const { plan } = await dry(CONFIG, files(), []);
+    expect(String(plan.tauriOverlayFile).replaceAll("\\", "/")).toBe('src-tauri/tauri.appstore.conf.json');
+    expect({ ...plan.entitlementsSource, file: plan.entitlementsSource.file.replaceAll("\\", "/") }).toEqual({ source: 'tauri config bundle.macOS.entitlements', file: 'src-tauri/Entitlements.appstore.plist' });
+    expect(plan.entitlements).toContain('com.apple.security.files.user-selected.read-only');
+    expect(plan.entitlements).not.toContain('com.apple.security.cs.disable-library-validation');
+    expect(plan.entitlementProblems).toEqual({ errors: [], warnings: [] });
+    expect(plan.steps[0]).toContain('tauri.appstore.conf.json');
+  });
+  test('the Developer ID plist is reported (error under a real build, a warning here)', async () => {
+    const f = files(); delete (f as Record<string, string | undefined>)['src-tauri/tauri.appstore.conf.json'];
+    const { plan, err } = await dry(CONFIG, f, []);
+    expect(plan.entitlementsSource.file.replaceAll("\\", "/")).toBe('src-tauri/Entitlements.plist');
+    expect(plan.entitlementProblems.errors.join()).toContain('disable-library-validation');
+    expect(plan.entitlementProblems.warnings.join()).toContain('allow-jit');
+    expect(err).toBe(''); // --json prints only the plan
+    const pj = project(CONFIG, f);
+    const text = await capture(() => buildMas(pj.ctx(['--tauri', 'src-tauri', '--unsigned', '--build-number', '7', '--dry']), 'linux'));
+    expect(text.err).toContain('disable-library-validation');
+    expect(text.err).toContain('--allow-entitlements');
+    expect(text.out).toContain('entitlements from tauri config');
+  });
+  test('--entitlements beats apple.macos.entitlements beats the Tauri config', async () => {
+    const f = files({ 'a.plist': entitlementsXml({ 'com.apple.security.files.downloads.read-only': true }), 'b.plist': entitlementsXml({ 'com.apple.security.files.user-selected.read-write': true }) });
+    delete (f as Record<string, string | undefined>)['src-tauri/tauri.appstore.conf.json'];
+    const cfg: ShipConfig = { ...CONFIG, apple: { ...CONFIG.apple!, macos: { entitlements: 'a.plist' } } };
+    const viaConfig = await dry(cfg, f, []);
+    expect(viaConfig.plan.entitlementsSource).toEqual({ source: 'apple.macos.entitlements', file: 'a.plist' });
+    expect(viaConfig.plan.entitlements).toContain('com.apple.security.files.downloads.read-only');
+    const viaFlag = await dry(cfg, f, ['--entitlements', 'b.plist']);
+    expect(viaFlag.plan.entitlementsSource).toEqual({ source: '--entitlements', file: 'b.plist' });
+    expect(viaFlag.plan.entitlements).toContain('com.apple.security.files.user-selected.read-write');
+    expect(viaFlag.plan.entitlements).not.toContain('com.apple.security.files.downloads.read-only');
+  });
+  test('a named plist that does not exist stops the run', async () => {
+    const p = project(CONFIG, files());
+    await expect(buildMas(p.ctx(['--tauri', 'src-tauri', '--unsigned', '--build-number', '7', '--dry', '--entitlements', 'nope.plist']), 'linux')).rejects.toThrow('does not exist');
+  });
+});

From f1a9229cf9bc92bc5ee3ca95fb5825141179fe4a Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Tue, 3 Nov 2026 23:40:51 +0700
Subject: [PATCH 093/126] changelog: macOS entitlements, MCP review-details
 platform

---
 CHANGELOG.md | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index b444832..d5370a1 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -5,6 +5,8 @@
 
 - `apple.macos: { listing, reviewNotes, gameCenter, noIap }`: an app with iOS and macOS versions gets its own Mac listing file and review notes (`apple listing --platform macos`, `apple review-details --platform macos`, new there); `validate` warns about iOS-only claims in a macOS version's texts (Game Center, tap / swipe, iPhone / iPad, in-app purchases with `noIap`).
 - `apple upload <pkg>`: reading the package is bounded (pkgutil signature check 90 s, expand 5 min, then the `apple build` .json) and logged; the processing wait finds macOS builds (it looked only at iOS and sat silently until --timeout); every slow read prints a heartbeat; an SSH / non-GUI session is warned about up front.
+- `apple build --platform macos`: `--tauri` takes a `tauri.<name>.conf.json` overlay (merged over tauri.conf.json and passed to `tauri build --config`; `tauri.appstore.conf.json` / `tauri.mas.conf.json` next to it are used by themselves); the Mac App Store entitlements come from `--entitlements`, `apple.macos.entitlements` or the merged config (a two-channel project signed the App Store app with its Developer ID plist); the plan lists the final keys, `get-task-allow` / `cs.disable-library-validation` stop the build (`--allow-entitlements`), other hardened-runtime exceptions warn.
+- MCP `apple_review_details` takes `platform`.
 - `apple release`: a 409 on a release type change is recognized again (a stray control character had broken the pattern).
 
 ## 0.8.65 · 2026-11-03

From 700fcc4d66ebbbd8910d0dee5bd3957321ee8f11 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Tue, 3 Nov 2026 23:43:46 +0700
Subject: [PATCH 094/126] storebound 0.8.66: version in package.json and every
 copy, CHANGELOG 0.8.66 section

---
 .claude-plugin/marketplace.json        | 2 +-
 .claude-plugin/plugin.json             | 2 +-
 .codex-plugin/plugin.json              | 2 +-
 CHANGELOG.md                           | 2 ++
 apps/desktop/package.json              | 2 +-
 apps/desktop/src-tauri/Cargo.lock      | 2 +-
 apps/desktop/src-tauri/Cargo.toml      | 2 +-
 apps/desktop/src-tauri/tauri.conf.json | 2 +-
 gemini-extension.json                  | 2 +-
 package.json                           | 2 +-
 10 files changed, 11 insertions(+), 9 deletions(-)

diff --git a/.claude-plugin/marketplace.json b/.claude-plugin/marketplace.json
index 9376b20..4f26e9f 100644
--- a/.claude-plugin/marketplace.json
+++ b/.claude-plugin/marketplace.json
@@ -9,7 +9,7 @@
       "name": "storebound",
       "source": ".",
       "description": "Take a mobile app or game from nothing to Submit for review on both stores: skills for every store step and questionnaire plus the storebound CLI and MCP server.",
-      "version": "0.8.65",
+      "version": "0.8.66",
       "category": "development",
       "tags": [
         "mobile",
diff --git a/.claude-plugin/plugin.json b/.claude-plugin/plugin.json
index 5450ba0..d39b3e1 100644
--- a/.claude-plugin/plugin.json
+++ b/.claude-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.65",
+  "version": "0.8.66",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/.codex-plugin/plugin.json b/.codex-plugin/plugin.json
index 9286507..590594e 100644
--- a/.codex-plugin/plugin.json
+++ b/.codex-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.65",
+  "version": "0.8.66",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/CHANGELOG.md b/CHANGELOG.md
index d5370a1..58e67bb 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,8 @@
 
 ## Unreleased
 
+## 0.8.66 · 2026-11-03
+
 - `apple.macos: { listing, reviewNotes, gameCenter, noIap }`: an app with iOS and macOS versions gets its own Mac listing file and review notes (`apple listing --platform macos`, `apple review-details --platform macos`, new there); `validate` warns about iOS-only claims in a macOS version's texts (Game Center, tap / swipe, iPhone / iPad, in-app purchases with `noIap`).
 - `apple upload <pkg>`: reading the package is bounded (pkgutil signature check 90 s, expand 5 min, then the `apple build` .json) and logged; the processing wait finds macOS builds (it looked only at iOS and sat silently until --timeout); every slow read prints a heartbeat; an SSH / non-GUI session is warned about up front.
 - `apple build --platform macos`: `--tauri` takes a `tauri.<name>.conf.json` overlay (merged over tauri.conf.json and passed to `tauri build --config`; `tauri.appstore.conf.json` / `tauri.mas.conf.json` next to it are used by themselves); the Mac App Store entitlements come from `--entitlements`, `apple.macos.entitlements` or the merged config (a two-channel project signed the App Store app with its Developer ID plist); the plan lists the final keys, `get-task-allow` / `cs.disable-library-validation` stop the build (`--allow-entitlements`), other hardened-runtime exceptions warn.
diff --git a/apps/desktop/package.json b/apps/desktop/package.json
index de640b0..99ef72b 100644
--- a/apps/desktop/package.json
+++ b/apps/desktop/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@storebound/desktop",
-  "version": "0.8.65",
+  "version": "0.8.66",
   "private": true,
   "license": "MIT",
   "type": "module",
diff --git a/apps/desktop/src-tauri/Cargo.lock b/apps/desktop/src-tauri/Cargo.lock
index 7b457f8..91828d7 100644
--- a/apps/desktop/src-tauri/Cargo.lock
+++ b/apps/desktop/src-tauri/Cargo.lock
@@ -4096,7 +4096,7 @@ checksum = "a2eb9349b6444b326872e140eb1cf5e7c522154d69e7a0ffb0fb81c06b37543f"
 
 [[package]]
 name = "storebound-desktop"
-version = "0.8.65"
+version = "0.8.66"
 dependencies = [
  "base64 0.22.1",
  "getrandom 0.3.4",
diff --git a/apps/desktop/src-tauri/Cargo.toml b/apps/desktop/src-tauri/Cargo.toml
index 98aac6b..6a96d05 100644
--- a/apps/desktop/src-tauri/Cargo.toml
+++ b/apps/desktop/src-tauri/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "storebound-desktop"
-version = "0.8.65"
+version = "0.8.66"
 description = "storebound desktop: every game's releases on both stores in one window"
 license = "MIT"
 edition = "2021"
diff --git a/apps/desktop/src-tauri/tauri.conf.json b/apps/desktop/src-tauri/tauri.conf.json
index 1e9d510..8198625 100644
--- a/apps/desktop/src-tauri/tauri.conf.json
+++ b/apps/desktop/src-tauri/tauri.conf.json
@@ -2,7 +2,7 @@
   "$schema": "https://schema.tauri.app/config/2",
   "productName": "storebound",
   "mainBinaryName": "storebound-desktop",
-  "version": "0.8.65",
+  "version": "0.8.66",
   "identifier": "dev.storebound.desktop",
   "build": {
     "frontendDist": "../dist",
diff --git a/gemini-extension.json b/gemini-extension.json
index 86875f3..71908e6 100644
--- a/gemini-extension.json
+++ b/gemini-extension.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.65",
+  "version": "0.8.66",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "contextFileName": "GEMINI.md",
   "mcpServers": {
diff --git a/package.json b/package.json
index e9cabea..5b460ab 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.65",
+  "version": "0.8.66",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every store questionnaire (incl. account deletion and App Review demo accounts), privacy, icons, screenshots and previews, TestFlight. After launch: crash vitals, review replies, price sheets, analytics and Product Page Optimization. One config, a CLI (Node 20+ or Bun), an MCP server and Agent Skills for your AI coding agent.",
   "license": "MIT",
   "author": "CRTkafa",

From 64cb16e337097b9db3a81fc207c0b47554eecbdf Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Wed, 4 Nov 2026 00:17:04 +0700
Subject: [PATCH 095/126] apple build --platform macos: apple.macos.prebuild,
 not the iOS project's build.prebuild

---
 CHANGELOG.md                   | 2 ++
 cli/apple/build-mas.ts         | 9 ++++++---
 cli/lib/config.ts              | 8 +++++---
 tests/mas-entitlements.test.ts | 9 +++++++++
 4 files changed, 22 insertions(+), 6 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 58e67bb..2559431 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,8 @@
 
 ## Unreleased
 
+- `apple build --platform macos`: runs `apple.macos.prebuild` (new) before `tauri build`, no longer `build.prebuild` / `apple.prebuild`, which belong to the iOS project (a Capacitor sync or OTA gate ran for a Tauri Mac build); the dry run names the skipped one.
+
 ## 0.8.66 · 2026-11-03
 
 - `apple.macos: { listing, reviewNotes, gameCenter, noIap }`: an app with iOS and macOS versions gets its own Mac listing file and review notes (`apple listing --platform macos`, `apple review-details --platform macos`, new there); `validate` warns about iOS-only claims in a macOS version's texts (Game Center, tap / swipe, iPhone / iPad, in-app purchases with `noIap`).
diff --git a/cli/apple/build-mas.ts b/cli/apple/build-mas.ts
index 85de5d6..6c16e59 100644
--- a/cli/apple/build-mas.ts
+++ b/cli/apple/build-mas.ts
@@ -162,9 +162,12 @@ export async function run(ctx: Ctx, platform: string = process.platform): Promis
   const overlay = tauriOverlay({ appIdentity, entitlementsFile: entFile, profile, version, build: buildNo, unsigned, minOs: tauri.minOs, category });
   const input = { tauri, tauriCmd, target, out, configFile, entitlementsFile: entFile, profile, appIdentity, installerIdentity: installerIdentity ?? '<Mac Installer Distribution identity>', version, build: buildNo, unsigned, pathFree, pkg };
   const steps = masSteps(input);
-  // the same hooks as apple build: build.prebuild / apple.prebuild first (a project computes its build-time env there),
-  // apple.macAppCheck on the built .app before productbuild (e.g. a project's own check that a value was stamped in)
-  const prebuild = prebuildFor(config, 'apple') ?? null;
+  // apple.macos.prebuild first (a project computes its build-time env there), apple.macAppCheck on the built .app before
+  // productbuild (e.g. a project's own check that a value was stamped in). build.prebuild / apple.prebuild belong to the
+  // iOS / Android project (a Capacitor sync, an OTA gate) and are not run for a Tauri Mac build
+  const prebuild = config.apple?.macos?.prebuild?.trim() || null;
+  const mobilePrebuild = prebuildFor(config, 'apple');
+  if (!prebuild && mobilePrebuild && !json) log(TAG, `not run for the Mac build: ${mobilePrebuild} (build.prebuild / apple.prebuild are for the iOS project; set apple.macos.prebuild for the Mac)`);
   const prebuildSkip = !prebuild ? undefined : a.has('no-prebuild') ? '--no-prebuild' : prebuildsDone().has(prebuild) ? 'already ran in this flow run' : undefined;
   const appCheck = config.apple?.macAppCheck?.trim() || null;
   // entitlements: --entitlements, apple.macos.entitlements, the merged Tauri config (the first one that is set)
diff --git a/cli/lib/config.ts b/cli/lib/config.ts
index 01da2ed..cd3acd1 100644
--- a/cli/lib/config.ts
+++ b/cli/lib/config.ts
@@ -716,8 +716,10 @@ export interface ShipConfig {
      * `noIap: true`: the Mac app sells nothing (validate then flags in-app purchase lines in the Mac texts).
      * `entitlements`: the Mac App Store entitlements plist of `apple build --platform macos --tauri` (e.g. "src-tauri/Entitlements.appstore.plist"),
      * used instead of the Tauri config's bundle.macOS.entitlements (a project with a Developer ID channel keeps that one there); `--entitlements <plist>` wins over it.
+     * `prebuild`: shell command `apple build --platform macos` runs first in the project root (build.prebuild /
+     * apple.prebuild are the iOS project's and are not run for the Mac build); `--no-prebuild` skips it.
      */
-    macos?: { listing?: string; reviewNotes?: string; gameCenter?: boolean; noIap?: boolean; entitlements?: string };
+    macos?: { listing?: string; reviewNotes?: string; gameCenter?: boolean; noIap?: boolean; entitlements?: string; prebuild?: string };
     /** "Header and Search Results" creative assets (`storebound apple creative-assets`, iOS / iPadOS 27+). Files under
      *  <renders>/<lang>/creative/: header.{png,jpg,mov,m4v,mp4} (3840x1646, 21:9), search.{...} (3:2, 1920x1280 to
      *  3840x2560) or universal.png (5244x2950) for both. `header` / `search` false skip that slot; `universal` is a
@@ -1049,9 +1051,9 @@ export function validateExtras(cfg: Partial<ShipConfig>): string[] {
   if (cfg.play?.free !== undefined && typeof cfg.play.free !== 'boolean') e.push('play.free: true (free) | false (paid)');
   const mo = cfg.apple?.macos;
   if (mo !== undefined) {
-    if (typeof mo !== 'object' || mo === null || Array.isArray(mo)) e.push('apple.macos: { listing?: "store/appstore-macos.md", reviewNotes?: "...", gameCenter?: true, noIap?: true, entitlements?: "src-tauri/Entitlements.appstore.plist" }');
+    if (typeof mo !== 'object' || mo === null || Array.isArray(mo)) e.push('apple.macos: { listing?: "store/appstore-macos.md", reviewNotes?: "...", gameCenter?: true, noIap?: true, entitlements?: "src-tauri/Entitlements.appstore.plist", prebuild?: "<shell command>" }');
     else {
-      for (const k of ['listing', 'reviewNotes', 'entitlements'] as const) if (mo[k] !== undefined && (typeof mo[k] !== 'string' || !mo[k]!.trim())) e.push(`apple.macos.${k}: a non-empty string${k === 'listing' ? ' (path of the macOS App Store listing file)' : k === 'entitlements' ? ' (path of the Mac App Store entitlements plist)' : ''}`);
+      for (const k of ['listing', 'reviewNotes', 'entitlements', 'prebuild'] as const) if (mo[k] !== undefined && (typeof mo[k] !== 'string' || !mo[k]!.trim())) e.push(`apple.macos.${k}: a non-empty string${k === 'listing' ? ' (path of the macOS App Store listing file)' : k === 'entitlements' ? ' (path of the Mac App Store entitlements plist)' : ''}`);
       for (const k of ['gameCenter', 'noIap'] as const) if (mo[k] !== undefined && typeof mo[k] !== 'boolean') e.push(`apple.macos.${k}: true | false`);
     }
   }
diff --git a/tests/mas-entitlements.test.ts b/tests/mas-entitlements.test.ts
index 4e62c5d..3de48d6 100644
--- a/tests/mas-entitlements.test.ts
+++ b/tests/mas-entitlements.test.ts
@@ -175,6 +175,15 @@ describe('apple build --platform macos --dry', () => {
     expect(viaFlag.plan.entitlements).toContain('com.apple.security.files.user-selected.read-write');
     expect(viaFlag.plan.entitlements).not.toContain('com.apple.security.files.downloads.read-only');
   });
+  test('only apple.macos.prebuild runs before the Mac build; the iOS project\'s build.prebuild is named, not run', async () => {
+    const mobile: ShipConfig = { ...CONFIG, build: { prebuild: 'npx cap sync' } };
+    expect((await dry(mobile, files(), [])).plan.prebuild).toBeNull();
+    const text = await capture(() => buildMas(project(mobile, files()).ctx(['--tauri', 'src-tauri', '--unsigned', '--build-number', '7', '--dry']), 'linux'));
+    expect(text.out).toContain('not run for the Mac build: npx cap sync');
+    const mac: ShipConfig = { ...mobile, apple: { ...CONFIG.apple!, macos: { prebuild: 'bun run desktop:env' } } };
+    expect((await dry(mac, files(), [])).plan.prebuild).toBe('bun run desktop:env');
+    expect((await dry(mac, files(), ['--no-prebuild'])).plan.prebuildSkip).toBe('--no-prebuild');
+  });
   test('a named plist that does not exist stops the run', async () => {
     const p = project(CONFIG, files());
     await expect(buildMas(p.ctx(['--tauri', 'src-tauri', '--unsigned', '--build-number', '7', '--dry', '--entitlements', 'nope.plist']), 'linux')).rejects.toThrow('does not exist');

From 31f863ed0614b919047729718c9742416ae6d466 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Wed, 4 Nov 2026 00:20:45 +0700
Subject: [PATCH 096/126] storebound 0.8.67: version in package.json and every
 copy, CHANGELOG 0.8.67 section

---
 .claude-plugin/marketplace.json        | 2 +-
 .claude-plugin/plugin.json             | 2 +-
 .codex-plugin/plugin.json              | 2 +-
 CHANGELOG.md                           | 2 ++
 apps/desktop/package.json              | 2 +-
 apps/desktop/src-tauri/Cargo.lock      | 2 +-
 apps/desktop/src-tauri/Cargo.toml      | 2 +-
 apps/desktop/src-tauri/tauri.conf.json | 2 +-
 gemini-extension.json                  | 2 +-
 package.json                           | 2 +-
 10 files changed, 11 insertions(+), 9 deletions(-)

diff --git a/.claude-plugin/marketplace.json b/.claude-plugin/marketplace.json
index 4f26e9f..d7c9e2f 100644
--- a/.claude-plugin/marketplace.json
+++ b/.claude-plugin/marketplace.json
@@ -9,7 +9,7 @@
       "name": "storebound",
       "source": ".",
       "description": "Take a mobile app or game from nothing to Submit for review on both stores: skills for every store step and questionnaire plus the storebound CLI and MCP server.",
-      "version": "0.8.66",
+      "version": "0.8.67",
       "category": "development",
       "tags": [
         "mobile",
diff --git a/.claude-plugin/plugin.json b/.claude-plugin/plugin.json
index d39b3e1..f107b02 100644
--- a/.claude-plugin/plugin.json
+++ b/.claude-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.66",
+  "version": "0.8.67",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/.codex-plugin/plugin.json b/.codex-plugin/plugin.json
index 590594e..c36badf 100644
--- a/.codex-plugin/plugin.json
+++ b/.codex-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.66",
+  "version": "0.8.67",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 2559431..70f4cf1 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,8 @@
 
 ## Unreleased
 
+## 0.8.67 · 2026-11-03
+
 - `apple build --platform macos`: runs `apple.macos.prebuild` (new) before `tauri build`, no longer `build.prebuild` / `apple.prebuild`, which belong to the iOS project (a Capacitor sync or OTA gate ran for a Tauri Mac build); the dry run names the skipped one.
 
 ## 0.8.66 · 2026-11-03
diff --git a/apps/desktop/package.json b/apps/desktop/package.json
index 99ef72b..cd3f783 100644
--- a/apps/desktop/package.json
+++ b/apps/desktop/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@storebound/desktop",
-  "version": "0.8.66",
+  "version": "0.8.67",
   "private": true,
   "license": "MIT",
   "type": "module",
diff --git a/apps/desktop/src-tauri/Cargo.lock b/apps/desktop/src-tauri/Cargo.lock
index 91828d7..b59f665 100644
--- a/apps/desktop/src-tauri/Cargo.lock
+++ b/apps/desktop/src-tauri/Cargo.lock
@@ -4096,7 +4096,7 @@ checksum = "a2eb9349b6444b326872e140eb1cf5e7c522154d69e7a0ffb0fb81c06b37543f"
 
 [[package]]
 name = "storebound-desktop"
-version = "0.8.66"
+version = "0.8.67"
 dependencies = [
  "base64 0.22.1",
  "getrandom 0.3.4",
diff --git a/apps/desktop/src-tauri/Cargo.toml b/apps/desktop/src-tauri/Cargo.toml
index 6a96d05..a0d6f88 100644
--- a/apps/desktop/src-tauri/Cargo.toml
+++ b/apps/desktop/src-tauri/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "storebound-desktop"
-version = "0.8.66"
+version = "0.8.67"
 description = "storebound desktop: every game's releases on both stores in one window"
 license = "MIT"
 edition = "2021"
diff --git a/apps/desktop/src-tauri/tauri.conf.json b/apps/desktop/src-tauri/tauri.conf.json
index 8198625..4f84fdb 100644
--- a/apps/desktop/src-tauri/tauri.conf.json
+++ b/apps/desktop/src-tauri/tauri.conf.json
@@ -2,7 +2,7 @@
   "$schema": "https://schema.tauri.app/config/2",
   "productName": "storebound",
   "mainBinaryName": "storebound-desktop",
-  "version": "0.8.66",
+  "version": "0.8.67",
   "identifier": "dev.storebound.desktop",
   "build": {
     "frontendDist": "../dist",
diff --git a/gemini-extension.json b/gemini-extension.json
index 71908e6..92aa54d 100644
--- a/gemini-extension.json
+++ b/gemini-extension.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.66",
+  "version": "0.8.67",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "contextFileName": "GEMINI.md",
   "mcpServers": {
diff --git a/package.json b/package.json
index 5b460ab..f5d0387 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.66",
+  "version": "0.8.67",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every store questionnaire (incl. account deletion and App Review demo accounts), privacy, icons, screenshots and previews, TestFlight. After launch: crash vitals, review replies, price sheets, analytics and Product Page Optimization. One config, a CLI (Node 20+ or Bun), an MCP server and Agent Skills for your AI coding agent.",
   "license": "MIT",
   "author": "CRTkafa",

From 0950ef2c99a84900208361e6c093fb01586169eb Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Fri, 6 Nov 2026 21:01:19 +0700
Subject: [PATCH 097/126] desktop: the app's own CLI on the terminal PATH
 (launcher rewritten on every start; npm installs stay first)

---
 CHANGELOG.md           |  2 ++
 cli/lib/cli-shim.ts    | 81 ++++++++++++++++++++++++++++++++++++++++++
 cli/serve.ts           |  3 ++
 tests/cli-shim.test.ts | 47 ++++++++++++++++++++++++
 4 files changed, 133 insertions(+)
 create mode 100644 cli/lib/cli-shim.ts
 create mode 100644 tests/cli-shim.test.ts

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 70f4cf1..38eb3e2 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,8 @@
 
 ## Unreleased
 
+- Desktop app: `storebound` works in a terminal with only the app installed. On every start the app puts a launcher for its own CLI on the PATH (Windows: `%LOCALAPPDATA%\storebound\bin`, added to the user PATH once; macOS / Linux: `~/.local/bin`, added to `~/.zprofile` / `~/.profile` when missing). An npm / bun install stays first, a file that is not the app's launcher is never overwritten, AppImage runs skip it, `STOREBOUND_NO_CLI_SHIM=1` turns it off.
+
 ## 0.8.67 · 2026-11-03
 
 - `apple build --platform macos`: runs `apple.macos.prebuild` (new) before `tauri build`, no longer `build.prebuild` / `apple.prebuild`, which belong to the iOS project (a Capacitor sync or OTA gate ran for a Tauri Mac build); the dry run names the skipped one.
diff --git a/cli/lib/cli-shim.ts b/cli/lib/cli-shim.ts
new file mode 100644
index 0000000..8ece9b1
--- /dev/null
+++ b/cli/lib/cli-shim.ts
@@ -0,0 +1,81 @@
+// The desktop app's own storebound on the terminal: the app ships the CLI as its sidecar, and on every start the sidecar
+// puts a small launcher on the person's PATH, so `storebound` works in a terminal without an npm install.
+//   Windows       %LOCALAPPDATA%\storebound\bin\storebound.cmd, that folder appended to the user PATH (once)
+//   macOS / Linux ~/.local/bin/storebound (a sh launcher), ~/.local/bin added to ~/.zprofile / ~/.profile when missing
+// An npm / bun install stays first: the folder is appended, and a launcher is never written over a file that is not
+// ours (the marker line). Rewritten on every start, so a moved or updated app fixes itself. Not from an AppImage (its
+// mount path changes per run) or a dev run. STOREBOUND_NO_CLI_SHIM=1 turns it off.
+import { existsSync, mkdirSync, readFileSync, writeFileSync, chmodSync, appendFileSync } from 'node:fs';
+import { homedir } from 'node:os';
+import { join } from 'node:path';
+import * as rt from './rt';
+
+export const SHIM_MARKER = 'storebound desktop launcher';
+
+export interface ShimPlan {
+  /** Why nothing is written (null: write). */
+  skip: string | null;
+  file: string;
+  content: string;
+  /** The folder to add to PATH when it is not on it (Windows: the user PATH; else a shell profile line). */
+  pathDir: string;
+  /** macOS / Linux: the shell profile that gets the PATH line. */
+  profile?: string;
+}
+
+/** What to write for the sidecar at `exe`. Pure. */
+export function shimPlan(o: { exe: string; platform: string; home: string; env: Record<string, string | undefined> }): ShimPlan {
+  const win = o.platform === 'win32';
+  const local = o.env.LOCALAPPDATA ?? join(o.home, 'AppData', 'Local');
+  const dir = win ? join(local, 'storebound', 'bin') : join(o.home, '.local', 'bin');
+  const file = join(dir, win ? 'storebound.cmd' : 'storebound');
+  const content = win
+    ? `@echo off\r\nrem ${SHIM_MARKER}\r\n"${o.exe}" %*\r\n`
+    : `#!/bin/sh\n# ${SHIM_MARKER}\nexec '${o.exe.replace(/'/g, `'\\''`)}' "$@"\n`;
+  const skip = o.env.STOREBOUND_NO_CLI_SHIM ? 'STOREBOUND_NO_CLI_SHIM is set'
+    : o.env.APPIMAGE || /^\/tmp\/\.mount_/.test(o.exe) ? 'an AppImage (its path changes per run)'
+    : null;
+  return { skip, file, content, pathDir: dir, ...(win ? {} : { profile: join(o.home, o.platform === 'darwin' ? '.zprofile' : '.profile') }) };
+}
+
+/** True when `dir` is one of the PATH entries (case-insensitive on Windows). Pure. */
+export function onPath(dir: string, path: string | undefined, platform: string): boolean {
+  const norm = (s: string) => { const t = s.replace(/[\\/]+$/, ''); return platform === 'win32' ? t.toLowerCase() : t; };
+  return (path ?? '').split(platform === 'win32' ? ';' : ':').some(p => p && norm(p) === norm(dir));
+}
+
+/** Writes the launcher and the PATH entry; returns what it did, one line each. Never throws. */
+export function ensureCliShim(exe: string = process.execPath, platform: string = process.platform, env: Record<string, string | undefined> = process.env, home: string = homedir()): string[] {
+  const done: string[] = [];
+  try {
+    const p = shimPlan({ exe, platform, home, env });
+    if (p.skip) return [`terminal launcher skipped: ${p.skip}`];
+    if (existsSync(p.file)) {
+      const cur = readFileSync(p.file, 'utf8');
+      if (!cur.includes(SHIM_MARKER)) return [`terminal launcher not written: ${p.file} exists and is not ours`];
+      if (cur === p.content) done.push(`terminal launcher up to date: ${p.file}`);
+    }
+    if (!done.length) {
+      mkdirSync(p.pathDir, { recursive: true });
+      writeFileSync(p.file, p.content);
+      if (platform !== 'win32') chmodSync(p.file, 0o755);
+      done.push(`terminal launcher written: ${p.file}`);
+    }
+    if (platform === 'win32') {
+      // the user PATH from the registry (not this process's, which a running app inherited before the change)
+      const q = rt.spawnSync(['reg', 'query', 'HKCU\\Environment', '/v', 'Path'], { stdout: 'pipe', stderr: 'pipe', timeout: 10_000 });
+      const userPath = /Path\s+REG_(?:EXPAND_)?SZ\s+(.*)/i.exec(new TextDecoder().decode(q.stdout ?? new Uint8Array()))?.[1]?.trim() ?? '';
+      if (!onPath(p.pathDir, userPath, platform)) {
+        // SetEnvironmentVariable keeps REG_EXPAND_SZ entries as typed and tells open Explorer windows (new terminals see it)
+        const ps = `$p=[Environment]::GetEnvironmentVariable('Path','User'); if(-not $p){$p=''}; if(($p -split ';') -notcontains '${p.pathDir}'){ [Environment]::SetEnvironmentVariable('Path', ($p.TrimEnd(';') + ';${p.pathDir}').TrimStart(';'), 'User') }`;
+        const r = rt.spawnSync(['powershell', '-NoProfile', '-NonInteractive', '-Command', ps], { stdout: 'pipe', stderr: 'pipe', timeout: 30_000 });
+        done.push(r.success ? `added to the user PATH: ${p.pathDir} (new terminals)` : `user PATH not changed (exit ${r.exitCode})`);
+      }
+    } else if (!onPath(p.pathDir, env.PATH, platform) && p.profile) {
+      const line = `export PATH="$PATH:$HOME/.local/bin" # ${SHIM_MARKER}`;
+      const cur = existsSync(p.profile) ? readFileSync(p.profile, 'utf8') : '';
+      if (!cur.includes(SHIM_MARKER)) { appendFileSync(p.profile, `${cur && !cur.endsWith('\n') ? '\n' : ''}${line}\n`); done.push(`added ~/.local/bin to PATH in ${p.profile} (new terminals)`); }
+    }
+  } catch (e) { done.push(`terminal launcher failed: ${(e as Error).message.split('\n')[0]}`); }
+  return done;
+}
diff --git a/cli/serve.ts b/cli/serve.ts
index f5f08c0..6407728 100644
--- a/cli/serve.ts
+++ b/cli/serve.ts
@@ -28,6 +28,7 @@ import { androidSdk, detectTools } from './lib/tools';
 import { compiled, pickCallEnv, runCommand, type RunOptions, type Running } from './lib/runner';
 import { inputSchema, notSentProp, type ToolDef, TOOLS, toArgv, validateInput } from './mcp-tools';
 import * as rt from './lib/rt';
+import { ensureCliShim } from './lib/cli-shim';
 
 type Id = string | number;
 interface Msg { jsonrpc?: string; id?: Id | null; method?: string; params?: unknown }
@@ -613,6 +614,8 @@ export async function serveStdio(): Promise<void> {
   const send: Send = o => { process.stdout.write(JSON.stringify(o) + '\n'); };
   const session = new Session(send);
   console.error(`[storebound serve] ${pkg.version} on stdio (${DESKTOP_PROTOCOL}), waiting for session.hello`);
+  // the app's own CLI on the terminal PATH (lib/cli-shim.ts); only the bundled sidecar, after the handshake had its turn
+  if (compiled()) setTimeout(() => { for (const l of ensureCliShim()) console.error(`[storebound serve] ${l}`); }, 2000);
   let buf = '';
   const decoder = new TextDecoder();
   const reader = rt.stdinStream().getReader();
diff --git a/tests/cli-shim.test.ts b/tests/cli-shim.test.ts
new file mode 100644
index 0000000..036e4c5
--- /dev/null
+++ b/tests/cli-shim.test.ts
@@ -0,0 +1,47 @@
+import { describe, expect, test } from 'bun:test';
+import { mkdtempSync, readFileSync, writeFileSync, mkdirSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import { ensureCliShim, onPath, SHIM_MARKER, shimPlan } from '../cli/lib/cli-shim';
+
+describe('desktop terminal launcher', () => {
+  test('per platform: file, content, PATH folder, profile', () => {
+    const w = shimPlan({ exe: 'C:\\Users\\a\\AppData\\Local\\storebound\\storebound.exe', platform: 'win32', home: 'C:\\Users\\a', env: { LOCALAPPDATA: 'C:\\Users\\a\\AppData\\Local' } });
+    expect(w.file.endsWith('storebound.cmd')).toBe(true);
+    expect(w.content).toContain('"C:\\Users\\a\\AppData\\Local\\storebound\\storebound.exe" %*');
+    expect(w.skip).toBeNull();
+    const m = shimPlan({ exe: "/Applications/store'bound.app/Contents/MacOS/storebound", platform: 'darwin', home: '/Users/a', env: {} });
+    expect(m.content).toContain(`exec '/Applications/store'\\''bound.app/Contents/MacOS/storebound' "$@"`);
+    expect(m.profile!.endsWith('.zprofile')).toBe(true);
+    expect(shimPlan({ exe: '/usr/bin/storebound', platform: 'linux', home: '/home/a', env: {} }).profile!.endsWith('.profile')).toBe(true);
+  });
+  test('skips AppImage runs and the opt-out', () => {
+    expect(shimPlan({ exe: '/tmp/.mount_sbX/usr/bin/storebound', platform: 'linux', home: '/h', env: {} }).skip).toContain('AppImage');
+    expect(shimPlan({ exe: '/usr/bin/storebound', platform: 'linux', home: '/h', env: { STOREBOUND_NO_CLI_SHIM: '1' } }).skip).toContain('STOREBOUND_NO_CLI_SHIM');
+  });
+  test('onPath: trailing slashes, case on Windows only', () => {
+    expect(onPath('C:\\A\\bin', 'c:\\a\\bin\\;D:\\x', 'win32')).toBe(true);
+    expect(onPath('/h/.local/bin', '/usr/bin:/h/.local/bin/', 'linux')).toBe(true);
+    expect(onPath('/h/.local/bin', '/usr/bin:/H/.local/bin', 'linux')).toBe(false);
+  });
+  test('writes once, rewrites a moved app, never touches a file that is not ours, adds the profile line once', () => {
+    const home = mkdtempSync(join(tmpdir(), 'sb-shim-'));
+    const env = { PATH: '/usr/bin' };
+    const first = ensureCliShim('/opt/a/storebound', 'linux', env, home);
+    expect(first.join('\n')).toContain('terminal launcher written');
+    expect(first.join('\n')).toContain('added ~/.local/bin to PATH');
+    const file = join(home, '.local', 'bin', 'storebound');
+    expect(readFileSync(file, 'utf8')).toContain(SHIM_MARKER);
+    expect(ensureCliShim('/opt/a/storebound', 'linux', env, home).join()).toContain('up to date');
+    expect(ensureCliShim('/opt/b/storebound', 'linux', env, home).join()).toContain('written');
+    expect(readFileSync(file, 'utf8')).toContain('/opt/b/storebound');
+    expect(readFileSync(join(home, '.profile'), 'utf8').split(SHIM_MARKER).length - 1).toBe(2 - 1);
+    writeFileSync(file, '#!/bin/sh\nexec npm-storebound "$@"\n');
+    expect(ensureCliShim('/opt/c/storebound', 'linux', env, home).join()).toContain('is not ours');
+    expect(readFileSync(file, 'utf8')).toContain('npm-storebound');
+    if (process.platform === 'win32') return; // a C:\ temp folder has a colon: no POSIX PATH can name it
+    const home2 = mkdtempSync(join(tmpdir(), 'sb-shim-'));
+    mkdirSync(join(home2, '.local', 'bin'), { recursive: true });
+    expect(ensureCliShim('/opt/a/storebound', 'linux', { PATH: `/usr/bin:${join(home2, '.local', 'bin')}` }, home2).join()).not.toContain('PATH');
+  });
+});

From 36ef9c2c5c199ea152e79bb0866551627342bab5 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Fri, 6 Nov 2026 21:04:14 +0700
Subject: [PATCH 098/126] tests: placeholder home folders in the launcher test
 (scrub)

---
 tests/cli-shim.test.ts | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/tests/cli-shim.test.ts b/tests/cli-shim.test.ts
index 036e4c5..c515923 100644
--- a/tests/cli-shim.test.ts
+++ b/tests/cli-shim.test.ts
@@ -6,14 +6,14 @@ import { ensureCliShim, onPath, SHIM_MARKER, shimPlan } from '../cli/lib/cli-shi
 
 describe('desktop terminal launcher', () => {
   test('per platform: file, content, PATH folder, profile', () => {
-    const w = shimPlan({ exe: 'C:\\Users\\a\\AppData\\Local\\storebound\\storebound.exe', platform: 'win32', home: 'C:\\Users\\a', env: { LOCALAPPDATA: 'C:\\Users\\a\\AppData\\Local' } });
+    const w = shimPlan({ exe: 'C:\\Users\\you\\AppData\\Local\\storebound\\storebound.exe', platform: 'win32', home: 'C:\\Users\\you', env: { LOCALAPPDATA: 'C:\\Users\\you\\AppData\\Local' } });
     expect(w.file.endsWith('storebound.cmd')).toBe(true);
-    expect(w.content).toContain('"C:\\Users\\a\\AppData\\Local\\storebound\\storebound.exe" %*');
+    expect(w.content).toContain('"C:\\Users\\you\\AppData\\Local\\storebound\\storebound.exe" %*');
     expect(w.skip).toBeNull();
-    const m = shimPlan({ exe: "/Applications/store'bound.app/Contents/MacOS/storebound", platform: 'darwin', home: '/Users/a', env: {} });
+    const m = shimPlan({ exe: "/Applications/store'bound.app/Contents/MacOS/storebound", platform: 'darwin', home: '/Users/you', env: {} });
     expect(m.content).toContain(`exec '/Applications/store'\\''bound.app/Contents/MacOS/storebound' "$@"`);
     expect(m.profile!.endsWith('.zprofile')).toBe(true);
-    expect(shimPlan({ exe: '/usr/bin/storebound', platform: 'linux', home: '/home/a', env: {} }).profile!.endsWith('.profile')).toBe(true);
+    expect(shimPlan({ exe: '/usr/bin/storebound', platform: 'linux', home: '/home/you', env: {} }).profile!.endsWith('.profile')).toBe(true);
   });
   test('skips AppImage runs and the opt-out', () => {
     expect(shimPlan({ exe: '/tmp/.mount_sbX/usr/bin/storebound', platform: 'linux', home: '/h', env: {} }).skip).toContain('AppImage');

From d05294ebcd94ccb0dd850c0198a3178551954196 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Fri, 6 Nov 2026 21:07:22 +0700
Subject: [PATCH 099/126] apple submit/resubmit --platform macos:
 apple.macos.noIap leaves IAPs out, no Game Center switch without
 apple.macos.gameCenter; pitfalls #128

---
 CHANGELOG.md                   |   1 +
 bun.lock                       | 830 +++++++++++++++++++++++++++++++++
 cli/apple/resubmit.ts          |   9 +-
 cli/lib/config.ts              |   8 +
 skills/store-pitfalls/SKILL.md |   9 +
 tests/resubmit.test.ts         |  20 +
 6 files changed, 875 insertions(+), 2 deletions(-)
 create mode 100644 bun.lock

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 38eb3e2..978d68e 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -4,6 +4,7 @@
 ## Unreleased
 
 - Desktop app: `storebound` works in a terminal with only the app installed. On every start the app puts a launcher for its own CLI on the PATH (Windows: `%LOCALAPPDATA%\storebound\bin`, added to the user PATH once; macOS / Linux: `~/.local/bin`, added to `~/.zprofile` / `~/.profile` when missing). An npm / bun install stays first, a file that is not the app's launcher is never overwritten, AppImage runs skip it, `STOREBOUND_NO_CLI_SHIM=1` turns it off.
+- `apple resubmit` / `apple submit --platform macos`: `apple.macos.noIap` leaves every in-app purchase out of the macOS submission and, without `apple.macos.gameCenter: true`, the Game Center switch is not touched (no `gameCenterAppVersions` call); the dry run names what it left out and why (pitfalls #128).
 
 ## 0.8.67 · 2026-11-03
 
diff --git a/bun.lock b/bun.lock
new file mode 100644
index 0000000..f43b978
--- /dev/null
+++ b/bun.lock
@@ -0,0 +1,830 @@
+{
+  "lockfileVersion": 2,
+  "configVersion": 1,
+  "workspaces": {
+    "": {
+      "name": "storebound",
+      "devDependencies": {
+        "@mermaid-js/mermaid-cli": "12.0.0",
+        "@phosphor-icons/core": "2.1.1",
+        "@types/bun": "1.3.0",
+        "playwright": "1.55.0",
+        "playwright-core": "1.55.0",
+        "simple-icons": "16.34.0",
+        "typescript": "5.9.3",
+      },
+      "peerDependencies": {
+        "playwright": ">=1.45",
+      },
+      "optionalPeers": [
+        "playwright",
+      ],
+    },
+    "apps/desktop": {
+      "name": "@storebound/desktop",
+      "version": "0.8.67",
+      "dependencies": {
+        "@phosphor-icons/react": "^2.1.10",
+        "@tauri-apps/api": "^2.12.0",
+        "@visx/axis": "^4.0.0",
+        "@visx/curve": "^4.0.0",
+        "@visx/event": "^4.0.0",
+        "@visx/gradient": "^4.0.0",
+        "@visx/group": "^4.0.0",
+        "@visx/responsive": "^4.0.0",
+        "@visx/scale": "^4.0.0",
+        "@visx/shape": "^4.0.0",
+        "@visx/tooltip": "^4.0.0",
+        "react": "^19.2.0",
+        "react-dom": "^19.2.0",
+      },
+      "devDependencies": {
+        "@tauri-apps/cli": "^2.12.1",
+        "@types/react": "^19.2.0",
+        "@types/react-dom": "^19.2.0",
+        "@vitejs/plugin-react": "^4.7.0",
+        "typescript": "5.9.3",
+        "vite": "^6.3.0",
+      },
+    },
+  },
+  "packages": {
+    "@antfu/install-pkg": ["@antfu/install-pkg@2.1.0", "", { "dependencies": { "package-manager-detector": "^1.8.0", "tinyexec": "^1.3.1" } }, "sha512-sdg9NxU3zR4Mnawfbc/x6GB5Wf17WYud5qOuEuxXjaKpYpMkISSJEjItGebXJ2bQ4DIcly4NYH23mtkGJjvKUw=="],
+
+    "@babel/code-frame": ["@babel/code-frame@7.29.7", "", { "dependencies": { "@babel/helper-validator-identifier": "^7.29.7", "js-tokens": "^4.0.0", "picocolors": "^1.1.1" } }, "sha512-Aup7aUOfpbAUg2ROOJN6Iw5f9DMBlzu0mIkm/malLQFN/YQgO48wCj0Kxa3sEHJvPVFg7siR+qRInwXd2qhQKw=="],
+
+    "@babel/compat-data": ["@babel/compat-data@7.29.7", "", {}, "sha512-locTkQyKvwIEgBzVrn8693ebc97F2U8ZHjbXwDXJ5Fn2TCpNwTlKcaKLkdHop5c/icOFE7qt7Q9JC5hnKNa6Gg=="],
+
+    "@babel/core": ["@babel/core@7.29.7", "", { "dependencies": { "@babel/code-frame": "^7.29.7", "@babel/generator": "^7.29.7", "@babel/helper-compilation-targets": "^7.29.7", "@babel/helper-module-transforms": "^7.29.7", "@babel/helpers": "^7.29.7", "@babel/parser": "^7.29.7", "@babel/template": "^7.29.7", "@babel/traverse": "^7.29.7", "@babel/types": "^7.29.7", "@jridgewell/remapping": "^2.3.5", "convert-source-map": "^2.0.0", "debug": "^4.1.0", "gensync": "^1.0.0-beta.2", "json5": "^2.2.3", "semver": "^6.3.1" } }, "sha512-RgHBCvtjbOK2gXSNBNIkNoEc9qoVEtau3hj8gEqKQuL3HZAibKarWFEI3Lfm6EYKkLalOh8eSrj9b+ch9H/VBA=="],
+
+    "@babel/generator": ["@babel/generator@7.29.8", "", { "dependencies": { "@babel/parser": "^7.29.8", "@babel/types": "^7.29.8", "@jridgewell/gen-mapping": "^0.3.12", "@jridgewell/trace-mapping": "^0.3.28", "jsesc": "^3.0.2" } }, "sha512-gZbepsdh3WDtgZKWL+vTPh71LSBrm/Y4/QDZBVCcYfmeTEEuoOYwlSy+G1StfJg+/Zy550u/3TATbm7qDbbMtg=="],
+
+    "@babel/helper-compilation-targets": ["@babel/helper-compilation-targets@7.29.7", "", { "dependencies": { "@babel/compat-data": "^7.29.7", "@babel/helper-validator-option": "^7.29.7", "browserslist": "^4.24.0", "lru-cache": "^5.1.1", "semver": "^6.3.1" } }, "sha512-wem6WaBj4NaVYVdNhLPPVacES6ZJ+KBBfSkTMD3YZxbP3rm3Di85tJU5ljaUNhaOynt+Aj0xruhYuzQBt8n71g=="],
+
+    "@babel/helper-globals": ["@babel/helper-globals@7.29.7", "", {}, "sha512-3nQVUAtvkKH9zahfWgw96Jc/uFOmjACE1kQz82E2lqWmHBgjzbNlsC22nuQTfahmWeQtTq5nQ/4Nnd2A1wj4zA=="],
+
+    "@babel/helper-module-imports": ["@babel/helper-module-imports@7.29.7", "", { "dependencies": { "@babel/traverse": "^7.29.7", "@babel/types": "^7.29.7" } }, "sha512-ejHwrQQYcm9xnTivShn2IDOlIzInN34AXskvq9QicvCtEzq1Vzclu/tKF8Jq1Cg8JG2GL6/EmjgsCT7lXepE3g=="],
+
+    "@babel/helper-module-transforms": ["@babel/helper-module-transforms@7.29.7", "", { "dependencies": { "@babel/helper-module-imports": "^7.29.7", "@babel/helper-validator-identifier": "^7.29.7", "@babel/traverse": "^7.29.7" }, "peerDependencies": { "@babel/core": "^7.0.0" } }, "sha512-UPUVSyXbOh627KiCIGQSgwWzGeBKLkaJ9PJEdrngIwMSzxLR4jS4+f1f1jb7VzBbg8nFLaYotvVPFCTqdrmTAg=="],
+
+    "@babel/helper-plugin-utils": ["@babel/helper-plugin-utils@7.29.7", "", {}, "sha512-G7sHYigPY17oO5SYWnfD/0MTBwVR781S/JI643e/JhUYgVgWE/61SoW3NH9KWUKyKq5LVh3npif99Wkt6j86Jw=="],
+
+    "@babel/helper-string-parser": ["@babel/helper-string-parser@7.29.11", "", {}, "sha512-snZbO7MEDOof+hvNa97EjEY7qD7h2kwvQr5AJC3ZhQudKW5dnej6k3kP9NQV88hJwaS8vDqRLFo9rivLEhle2g=="],
+
+    "@babel/helper-validator-identifier": ["@babel/helper-validator-identifier@7.29.7", "", {}, "sha512-qehxGkRj55h/ff8EMaJ+cYhyaKlHIxqYDn682wQD7RNp9UujOQsHog2uS0r2vzr4pW+sXf90NeeayjcNaX3fFg=="],
+
+    "@babel/helper-validator-option": ["@babel/helper-validator-option@7.29.7", "", {}, "sha512-N9ZErrD+yW5geCDtBqnOoxmR8+tNKiGuxKlDpuJxfsqpa2dFcexaziGAE/qoHLiDDreVNMupxGmSoNlyvsA3gw=="],
+
+    "@babel/helpers": ["@babel/helpers@7.29.10", "", { "dependencies": { "@babel/template": "^7.29.7", "@babel/types": "^7.29.8" } }, "sha512-EMCx3AGZ3WfAl6ht7AyQoPm2Lh+BGYEMdc4Q6Hf7uSCDOZFuLq44qNwL+iaim8VlyYhRAo4X43+weadK8ZB4Yg=="],
+
+    "@babel/parser": ["@babel/parser@7.29.11", "", { "dependencies": { "@babel/types": "^7.29.11" }, "bin": "./bin/babel-parser.js" }, "sha512-OZ6+oaK7GMyg3IfCpj8JOmn8n+w2rJbDT0LLfVDTLb1ZFeKDh3AiNELgCMUw175IJHSkLl74hG0M0VLsvx+gag=="],
+
+    "@babel/plugin-transform-react-jsx-self": ["@babel/plugin-transform-react-jsx-self@7.29.7", "", { "dependencies": { "@babel/helper-plugin-utils": "^7.29.7" }, "peerDependencies": { "@babel/core": "^7.0.0-0" } }, "sha512-TL0hMc9xzy86VD31nUiwzd5otRAcyEPcsegCxolO0PvcXuH1v0kECe/UIznYFihpkvU5wg/jk4v0TTEFfm53fw=="],
+
+    "@babel/plugin-transform-react-jsx-source": ["@babel/plugin-transform-react-jsx-source@7.29.7", "", { "dependencies": { "@babel/helper-plugin-utils": "^7.29.7" }, "peerDependencies": { "@babel/core": "^7.0.0-0" } }, "sha512-06IyK09H3wi4cGbhDBwp5gUGo0IKtnYa8tyTiephirPCK6fbobVGiXMMI5zLQ4aKEYP3wZ3ArU44o+8KMrSG/Q=="],
+
+    "@babel/template": ["@babel/template@7.29.7", "", { "dependencies": { "@babel/code-frame": "^7.29.7", "@babel/parser": "^7.29.7", "@babel/types": "^7.29.7" } }, "sha512-puq+Gf35oI24FeN11LkoUQFqv9uwNeWpxXZi/Ji3rRIoKAzKnxRaZ+Gkj0vKS9ZCiTESfng1N9LyOyXvo+m+Gg=="],
+
+    "@babel/traverse": ["@babel/traverse@7.29.10", "", { "dependencies": { "@babel/code-frame": "^7.29.7", "@babel/generator": "^7.29.8", "@babel/helper-globals": "^7.29.7", "@babel/parser": "^7.29.9", "@babel/template": "^7.29.7", "@babel/types": "^7.29.8", "debug": "^4.3.1" } }, "sha512-B3lYAs2nkKskbgQ1nfy8Ma9ao9Q1rntTAQHrzzyDuj+TSO+X3le6PfWwqDvodsb+OumE10eMFfuMCTQSQ5iuIQ=="],
+
+    "@babel/types": ["@babel/types@7.29.11", "", { "dependencies": { "@babel/helper-string-parser": "^7.29.11", "@babel/helper-validator-identifier": "^7.29.7" } }, "sha512-WCsemW40Cpc6gouC1SrY6PBaZ+oLRlEVY9XBvZBI7il/HyUrb2nJ505wE1MHEFyDZNnrWDEuy4jL50WVHfTTSQ=="],
+
+    "@braintree/sanitize-url": ["@braintree/sanitize-url@7.1.2", "", {}, "sha512-jigsZK+sMF/cuiB7sERuo9V7N9jx+dhmHHnQyDSVdpZwVutaBu7WvNYqMDLSgFgfB30n452TP3vjDAvFC973mA=="],
+
+    "@chevrotain/cst-dts-gen": ["@chevrotain/cst-dts-gen@13.2.0", "", { "dependencies": { "@chevrotain/gast": "13.2.0", "@chevrotain/types": "13.2.0" } }, "sha512-bA9dvWlhAUcHkNwU+8w9yiUxJPlj/Lm3VqS7MD+NbIR/7LmpNLuK/AWNFdCo/T3SK5ND0/UHf3IJvl/Jn/i6yg=="],
+
+    "@chevrotain/gast": ["@chevrotain/gast@13.2.0", "", { "dependencies": { "@chevrotain/types": "13.2.0" } }, "sha512-bCARdAsG+eEbOveSXcOAC7pVxA04I1ionzeMOwIYf5NX7SaS7zgn4Dgug2BSqoL+iyKeMNSorQjsFSHJHsCNwg=="],
+
+    "@chevrotain/regexp-to-ast": ["@chevrotain/regexp-to-ast@13.2.0", "", {}, "sha512-kxpUkLtiaK09ph+dib+Yvm+3sWSnuwlo25gqfKRgTPNmF6H7uW4gVkMjaRdtnN783S9sM6vUNWh9CsxYX4QwKw=="],
+
+    "@chevrotain/types": ["@chevrotain/types@13.2.0", "", {}, "sha512-7qrYHRlKfWf2AvBfJi5eVOrKAkbxvMFsy/iIHTGIiApNcEecCaVIdR+mIQhyCBsTDJxBz4JWXHMo6krbhR9hVg=="],
+
+    "@chevrotain/utils": ["@chevrotain/utils@13.2.0", "", {}, "sha512-SzKYY68rseOrb9KILVzPsl6SjkQtdWw01SRGB5aCVI5kFcHltQsOYV3JB0Ffst72DgkvHCyDQ0NLwxtmCCf97Q=="],
+
+    "@esbuild/aix-ppc64": ["@esbuild/aix-ppc64@0.25.12", "", { "os": "aix", "cpu": "ppc64" }, "sha512-Hhmwd6CInZ3dwpuGTF8fJG6yoWmsToE+vYgD4nytZVxcu1ulHpUQRAB1UJ8+N1Am3Mz4+xOByoQoSZf4D+CpkA=="],
+
+    "@esbuild/android-arm": ["@esbuild/android-arm@0.25.12", "", { "os": "android", "cpu": "arm" }, "sha512-VJ+sKvNA/GE7Ccacc9Cha7bpS8nyzVv0jdVgwNDaR4gDMC/2TTRc33Ip8qrNYUcpkOHUT5OZ0bUcNNVZQ9RLlg=="],
+
+    "@esbuild/android-arm64": ["@esbuild/android-arm64@0.25.12", "", { "os": "android", "cpu": "arm64" }, "sha512-6AAmLG7zwD1Z159jCKPvAxZd4y/VTO0VkprYy+3N2FtJ8+BQWFXU+OxARIwA46c5tdD9SsKGZ/1ocqBS/gAKHg=="],
+
+    "@esbuild/android-x64": ["@esbuild/android-x64@0.25.12", "", { "os": "android", "cpu": "x64" }, "sha512-5jbb+2hhDHx5phYR2By8GTWEzn6I9UqR11Kwf22iKbNpYrsmRB18aX/9ivc5cabcUiAT/wM+YIZ6SG9QO6a8kg=="],
+
+    "@esbuild/darwin-arm64": ["@esbuild/darwin-arm64@0.25.12", "", { "os": "darwin", "cpu": "arm64" }, "sha512-N3zl+lxHCifgIlcMUP5016ESkeQjLj/959RxxNYIthIg+CQHInujFuXeWbWMgnTo4cp5XVHqFPmpyu9J65C1Yg=="],
+
+    "@esbuild/darwin-x64": ["@esbuild/darwin-x64@0.25.12", "", { "os": "darwin", "cpu": "x64" }, "sha512-HQ9ka4Kx21qHXwtlTUVbKJOAnmG1ipXhdWTmNXiPzPfWKpXqASVcWdnf2bnL73wgjNrFXAa3yYvBSd9pzfEIpA=="],
+
+    "@esbuild/freebsd-arm64": ["@esbuild/freebsd-arm64@0.25.12", "", { "os": "freebsd", "cpu": "arm64" }, "sha512-gA0Bx759+7Jve03K1S0vkOu5Lg/85dou3EseOGUes8flVOGxbhDDh/iZaoek11Y8mtyKPGF3vP8XhnkDEAmzeg=="],
+
+    "@esbuild/freebsd-x64": ["@esbuild/freebsd-x64@0.25.12", "", { "os": "freebsd", "cpu": "x64" }, "sha512-TGbO26Yw2xsHzxtbVFGEXBFH0FRAP7gtcPE7P5yP7wGy7cXK2oO7RyOhL5NLiqTlBh47XhmIUXuGciXEqYFfBQ=="],
+
+    "@esbuild/linux-arm": ["@esbuild/linux-arm@0.25.12", "", { "os": "linux", "cpu": "arm" }, "sha512-lPDGyC1JPDou8kGcywY0YILzWlhhnRjdof3UlcoqYmS9El818LLfJJc3PXXgZHrHCAKs/Z2SeZtDJr5MrkxtOw=="],
+
+    "@esbuild/linux-arm64": ["@esbuild/linux-arm64@0.25.12", "", { "os": "linux", "cpu": "arm64" }, "sha512-8bwX7a8FghIgrupcxb4aUmYDLp8pX06rGh5HqDT7bB+8Rdells6mHvrFHHW2JAOPZUbnjUpKTLg6ECyzvas2AQ=="],
+
+    "@esbuild/linux-ia32": ["@esbuild/linux-ia32@0.25.12", "", { "os": "linux", "cpu": "ia32" }, "sha512-0y9KrdVnbMM2/vG8KfU0byhUN+EFCny9+8g202gYqSSVMonbsCfLjUO+rCci7pM0WBEtz+oK/PIwHkzxkyharA=="],
+
+    "@esbuild/linux-loong64": ["@esbuild/linux-loong64@0.25.12", "", { "os": "linux", "cpu": "none" }, "sha512-h///Lr5a9rib/v1GGqXVGzjL4TMvVTv+s1DPoxQdz7l/AYv6LDSxdIwzxkrPW438oUXiDtwM10o9PmwS/6Z0Ng=="],
+
+    "@esbuild/linux-mips64el": ["@esbuild/linux-mips64el@0.25.12", "", { "os": "linux", "cpu": "none" }, "sha512-iyRrM1Pzy9GFMDLsXn1iHUm18nhKnNMWscjmp4+hpafcZjrr2WbT//d20xaGljXDBYHqRcl8HnxbX6uaA/eGVw=="],
+
+    "@esbuild/linux-ppc64": ["@esbuild/linux-ppc64@0.25.12", "", { "os": "linux", "cpu": "ppc64" }, "sha512-9meM/lRXxMi5PSUqEXRCtVjEZBGwB7P/D4yT8UG/mwIdze2aV4Vo6U5gD3+RsoHXKkHCfSxZKzmDssVlRj1QQA=="],
+
+    "@esbuild/linux-riscv64": ["@esbuild/linux-riscv64@0.25.12", "", { "os": "linux", "cpu": "none" }, "sha512-Zr7KR4hgKUpWAwb1f3o5ygT04MzqVrGEGXGLnj15YQDJErYu/BGg+wmFlIDOdJp0PmB0lLvxFIOXZgFRrdjR0w=="],
+
+    "@esbuild/linux-s390x": ["@esbuild/linux-s390x@0.25.12", "", { "os": "linux", "cpu": "s390x" }, "sha512-MsKncOcgTNvdtiISc/jZs/Zf8d0cl/t3gYWX8J9ubBnVOwlk65UIEEvgBORTiljloIWnBzLs4qhzPkJcitIzIg=="],
+
+    "@esbuild/linux-x64": ["@esbuild/linux-x64@0.25.12", "", { "os": "linux", "cpu": "x64" }, "sha512-uqZMTLr/zR/ed4jIGnwSLkaHmPjOjJvnm6TVVitAa08SLS9Z0VM8wIRx7gWbJB5/J54YuIMInDquWyYvQLZkgw=="],
+
+    "@esbuild/netbsd-arm64": ["@esbuild/netbsd-arm64@0.25.12", "", { "os": "none", "cpu": "arm64" }, "sha512-xXwcTq4GhRM7J9A8Gv5boanHhRa/Q9KLVmcyXHCTaM4wKfIpWkdXiMog/KsnxzJ0A1+nD+zoecuzqPmCRyBGjg=="],
+
+    "@esbuild/netbsd-x64": ["@esbuild/netbsd-x64@0.25.12", "", { "os": "none", "cpu": "x64" }, "sha512-Ld5pTlzPy3YwGec4OuHh1aCVCRvOXdH8DgRjfDy/oumVovmuSzWfnSJg+VtakB9Cm0gxNO9BzWkj6mtO1FMXkQ=="],
+
+    "@esbuild/openbsd-arm64": ["@esbuild/openbsd-arm64@0.25.12", "", { "os": "openbsd", "cpu": "arm64" }, "sha512-fF96T6KsBo/pkQI950FARU9apGNTSlZGsv1jZBAlcLL1MLjLNIWPBkj5NlSz8aAzYKg+eNqknrUJ24QBybeR5A=="],
+
+    "@esbuild/openbsd-x64": ["@esbuild/openbsd-x64@0.25.12", "", { "os": "openbsd", "cpu": "x64" }, "sha512-MZyXUkZHjQxUvzK7rN8DJ3SRmrVrke8ZyRusHlP+kuwqTcfWLyqMOE3sScPPyeIXN/mDJIfGXvcMqCgYKekoQw=="],
+
+    "@esbuild/openharmony-arm64": ["@esbuild/openharmony-arm64@0.25.12", "", { "os": "none", "cpu": "arm64" }, "sha512-rm0YWsqUSRrjncSXGA7Zv78Nbnw4XL6/dzr20cyrQf7ZmRcsovpcRBdhD43Nuk3y7XIoW2OxMVvwuRvk9XdASg=="],
+
+    "@esbuild/sunos-x64": ["@esbuild/sunos-x64@0.25.12", "", { "os": "sunos", "cpu": "x64" }, "sha512-3wGSCDyuTHQUzt0nV7bocDy72r2lI33QL3gkDNGkod22EsYl04sMf0qLb8luNKTOmgF/eDEDP5BFNwoBKH441w=="],
+
+    "@esbuild/win32-arm64": ["@esbuild/win32-arm64@0.25.12", "", { "os": "win32", "cpu": "arm64" }, "sha512-rMmLrur64A7+DKlnSuwqUdRKyd3UE7oPJZmnljqEptesKM8wx9J8gx5u0+9Pq0fQQW8vqeKebwNXdfOyP+8Bsg=="],
+
+    "@esbuild/win32-ia32": ["@esbuild/win32-ia32@0.25.12", "", { "os": "win32", "cpu": "ia32" }, "sha512-HkqnmmBoCbCwxUKKNPBixiWDGCpQGVsrQfJoVGYLPT41XWF8lHuE5N6WhVia2n4o5QK5M4tYr21827fNhi4byQ=="],
+
+    "@esbuild/win32-x64": ["@esbuild/win32-x64@0.25.12", "", { "os": "win32", "cpu": "x64" }, "sha512-alJC0uCZpTFrSL0CCDjcgleBXPnCrEAhTBILpeAp7M/OFgoqtAetfBzX0xM00MUsVVPpVjlPuMbREqnZCXaTnA=="],
+
+    "@floating-ui/core": ["@floating-ui/core@1.8.0", "", { "dependencies": { "@floating-ui/utils": "^0.2.12" } }, "sha512-0CIZ5itps/8x7BG8dEIhs53BvCUH2PCoogtakwRTut+Arm58sJooJ0AuZhLw2HJYIR5cMLNPBSS728sPho2khQ=="],
+
+    "@floating-ui/dom": ["@floating-ui/dom@1.8.0", "", { "dependencies": { "@floating-ui/core": "^1.8.0", "@floating-ui/utils": "^0.2.12" } }, "sha512-yXSrzeHZBTZadLOlfyhCkJHNeLJnHRnRInwdZ40L7ZiaAtrBwoYlsDrX3v5zB1Utk7CLfzcOVnVVWoXEky7Ceg=="],
+
+    "@floating-ui/react": ["@floating-ui/react@0.27.20", "", { "dependencies": { "@floating-ui/react-dom": "^2.1.9", "@floating-ui/utils": "^0.2.12", "tabbable": "^6.0.0" }, "peerDependencies": { "react": ">=17.0.0", "react-dom": ">=17.0.0" } }, "sha512-CMqMy7OaXl9W0eq1Uy7L7i2Y/anPvHmFmESd2CEw0t5YvZhcVCeo4MBevAmswRllX7Y2dEidA4ozGPunLSTQpw=="],
+
+    "@floating-ui/react-dom": ["@floating-ui/react-dom@2.1.9", "", { "dependencies": { "@floating-ui/dom": "^1.8.0" }, "peerDependencies": { "react": ">=16.8.0", "react-dom": ">=16.8.0" } }, "sha512-JDjEFGCpImxDCA7JJKviA0M9+RtmJdj0m/NVU5IMgBK+AmZouAQQ7/+2GLH0GXXY0YMw9oXPB8hKdbPYg5QLYg=="],
+
+    "@floating-ui/utils": ["@floating-ui/utils@0.2.12", "", {}, "sha512-HpCo8tmWzLVad5s2d19EhAz5zqrrQ6s69qd6moPMQvkOuSwDT1YgRfWSVuc4ennqrgv3OHppiOGMQ7oC13yIww=="],
+
+    "@fontsource-variable/recursive": ["@fontsource-variable/recursive@5.3.0", "", {}, "sha512-4B4/lWCVeZgdbpJdIIU1sOVO/ECjjM673ohuxvyQ6uCK41TPlGzKRNokKY84noUgGYnpwc//MW4k2KrOMY19jQ=="],
+
+    "@fontsource/open-sans": ["@fontsource/open-sans@5.3.0", "", {}, "sha512-V1bdMlGNyZrJwzrdusshMOw2YR0aqYDL7kOo9dkxUEKl8dFv66A9HLckOOXl572sG/7ohhDQrCrTFGSn9LZcSw=="],
+
+    "@fortawesome/fontawesome-free": ["@fortawesome/fontawesome-free@7.3.1", "", {}, "sha512-wmglKKPDIkgV3aWlZzWECCPoGIkYCulzBwxG9+w7rc5BGapZ6cPMpoPOT8k36J0Ni7PPX6c/rsoMWfS4d1MUMg=="],
+
+    "@headlessui/react": ["@headlessui/react@2.2.10", "", { "dependencies": { "@floating-ui/react": "^0.26.16", "@react-aria/focus": "^3.20.2", "@react-aria/interactions": "^3.25.0", "@tanstack/react-virtual": "^3.13.9", "use-sync-external-store": "^1.5.0" }, "peerDependencies": { "react": "^18 || ^19 || ^19.0.0-rc", "react-dom": "^18 || ^19 || ^19.0.0-rc" } }, "sha512-5pVLNK9wlpxTUTy9GpgbX/SdcRh+HBnPktjM2wbiLTH4p+2EPHBO1aoSryUCuKUIItdDWO9ITlhUL8UnUN/oIA=="],
+
+    "@headlessui/tailwindcss": ["@headlessui/tailwindcss@0.2.2", "", { "peerDependencies": { "tailwindcss": "^3.0 || ^4.0" } }, "sha512-xNe42KjdyA4kfUKLLPGzME9zkH7Q3rOZ5huFihWNWOQFxnItxPB3/67yBI8/qBfY8nwBRx5GHn4VprsoluVMGw=="],
+
+    "@iconify/types": ["@iconify/types@2.0.0", "", {}, "sha512-+wluvCrRhXrhyOmRDJ3q8mux9JkKy5SJ/v8ol2tu4FVjyYvtEzkc/3pK15ET6RKg4b4w4BmTk1+gsCUhf21Ykg=="],
+
+    "@iconify/utils": ["@iconify/utils@3.1.7", "", { "dependencies": { "@antfu/install-pkg": "^2.0.1", "@iconify/types": "^2.0.0", "import-meta-resolve": "^4.2.0" } }, "sha512-JZHlwdID+dy+lTgbYC8NEC4zeugqeYsc6jewvzb4c58kHauJn+X7rNwQjxz5p2qSjqaEeQoLkCIQ9v/H4PK0/w=="],
+
+    "@internationalized/date": ["@internationalized/date@3.12.4", "", { "dependencies": { "@swc/helpers": "^0.5.0" } }, "sha512-M1dEn4c1U1HsSlaVR8upZtSqvXrTkHDfv18H01uCSJyjVLDxnBR38v/fMxecmlwXKR4i9HeZcmgQAPE6A+aGJQ=="],
+
+    "@internationalized/number": ["@internationalized/number@3.6.9", "", { "dependencies": { "@swc/helpers": "^0.5.0" } }, "sha512-GgWy2caO/+hV9sT/oCTWGHvbjmJMPT9kkXzoKRLnkEq7adghhR7UprhvY9sXrKfrp3NcDfhF6QQHXR1KfQbB8g=="],
+
+    "@internationalized/string": ["@internationalized/string@3.2.10", "", { "dependencies": { "@swc/helpers": "^0.5.0" } }, "sha512-PDx6//vHSpRnHfxqMqto11zQvhsaU74O3mKv2F/0eicGZcl9NLjQmGlbHz/LsJh5tLKp4A4L7ZVTzN1/MmMTvA=="],
+
+    "@jridgewell/gen-mapping": ["@jridgewell/gen-mapping@0.3.13", "", { "dependencies": { "@jridgewell/sourcemap-codec": "^1.5.0", "@jridgewell/trace-mapping": "^0.3.24" } }, "sha512-2kkt/7niJ6MgEPxF0bYdQ6etZaA+fQvDcLKckhy1yIQOzaoKjBBjSj63/aLVjYE3qhRt5dvM+uUyfCg6UKCBbA=="],
+
+    "@jridgewell/remapping": ["@jridgewell/remapping@2.3.5", "", { "dependencies": { "@jridgewell/gen-mapping": "^0.3.5", "@jridgewell/trace-mapping": "^0.3.24" } }, "sha512-LI9u/+laYG4Ds1TDKSJW2YPrIlcVYOwi2fUC6xB43lueCjgxV4lffOCZCtYFiH6TNOX+tQKXx97T4IKHbhyHEQ=="],
+
+    "@jridgewell/resolve-uri": ["@jridgewell/resolve-uri@3.1.2", "", {}, "sha512-bRISgCIjP20/tbWSPWMEi54QVPRZExkuD9lJL+UIxUKtwVJA8wW1Trb1jMs1RFXo1CBTNZ/5hpC9QvmKWdopKw=="],
+
+    "@jridgewell/sourcemap-codec": ["@jridgewell/sourcemap-codec@1.6.0", "", {}, "sha512-T7jf+5zgsZHwNJ4lvQ7/aezbyk0nNX+zJVWpmHA7VYsEx7a7qr5Rg5IbtJFqkgze5Y2sruq1RUY8Q837Od7iFw=="],
+
+    "@jridgewell/trace-mapping": ["@jridgewell/trace-mapping@0.3.31", "", { "dependencies": { "@jridgewell/resolve-uri": "^3.1.0", "@jridgewell/sourcemap-codec": "^1.4.14" } }, "sha512-zzNR+SdQSDJzc8joaeP8QQoCQr8NuYx2dIIytl1QeBEZHJ9uW6hebsrYgbz8hJwUQao3TWCMtmfV8Nu1twOLAw=="],
+
+    "@mermaid-js/layout-tidy-tree": ["@mermaid-js/layout-tidy-tree@1.0.1", "", { "dependencies": { "d3": "^7.9.0" }, "peerDependencies": { "mermaid": "^11.0.2 || ^12.0.0" } }, "sha512-suZgFgQQHYuAxiEiNVgPJwOoXi/keXV6DghCL3rT4K9DmX7xYQ2XZI2suiBVs/fj1gn/OoXIWB2DFSmeY7trvw=="],
+
+    "@mermaid-js/mermaid-cli": ["@mermaid-js/mermaid-cli@12.0.0", "", { "dependencies": { "@fontsource-variable/recursive": "^5.3.0", "@fontsource/open-sans": "^5.3.0", "@fortawesome/fontawesome-free": "^7.0.1", "@mermaid-js/mermaid-zenuml": "^1.0.1", "chalk": "^6.0.0", "commander": "^15.0.0", "import-meta-resolve": "^4.1.0", "katex": "^0.16.25", "mermaid": "^12.0.0", "p-limit": "^7.0.0" }, "optionalDependencies": { "@mermaid-js/layout-tidy-tree": "^1.0.1" }, "peerDependencies": { "puppeteer": "^25.0.0" }, "bin": { "mmdc": "src/cli.js" } }, "sha512-AA18uaJtWVlM5PX7RGBxrVrqTTesmEaWCmfV+l5RkD6A1CnpUAtPpL+wWhkQAZrDSfyAw5FZyj084MsnDIPY3g=="],
+
+    "@mermaid-js/mermaid-zenuml": ["@mermaid-js/mermaid-zenuml@1.0.1", "", { "dependencies": { "@zenuml/core": "^3.47.9" }, "peerDependencies": { "mermaid": "^10 || ^11 || ^12" } }, "sha512-O5DiRODoFVNgugOVloxcDXmd+bXe/sbGlDh3onnzuE4EWtgTWwaAlWuPPOXbU9QESsztnD4Gtnu7dr+tYLFE0A=="],
+
+    "@mermaid-js/parser": ["@mermaid-js/parser@2.0.1", "", { "dependencies": { "@chevrotain/types": "~13.2.0" } }, "sha512-j37dj/h6p6pots1L7pLPPNuABEEu9WP4OYg9pW1g+nYG331j0+3canE9OagtYdytYvdSAMG+2fKU5cxep6LgjA=="],
+
+    "@napi-rs/canvas": ["@napi-rs/canvas@0.1.100", "", { "optionalDependencies": { "@napi-rs/canvas-android-arm64": "0.1.100", "@napi-rs/canvas-darwin-arm64": "0.1.100", "@napi-rs/canvas-darwin-x64": "0.1.100", "@napi-rs/canvas-linux-arm-gnueabihf": "0.1.100", "@napi-rs/canvas-linux-arm64-gnu": "0.1.100", "@napi-rs/canvas-linux-arm64-musl": "0.1.100", "@napi-rs/canvas-linux-riscv64-gnu": "0.1.100", "@napi-rs/canvas-linux-x64-gnu": "0.1.100", "@napi-rs/canvas-linux-x64-musl": "0.1.100", "@napi-rs/canvas-win32-arm64-msvc": "0.1.100", "@napi-rs/canvas-win32-x64-msvc": "0.1.100" } }, "sha512-xglYA6q3XO5P3BNJYxVZ1IV7DLVjp1Py6nwag88YntrS+3vKHyYcMqXVS4ZztJmwz2uGvz1FWhI/4LgbR5uQDA=="],
+
+    "@napi-rs/canvas-android-arm64": ["@napi-rs/canvas-android-arm64@0.1.100", "", { "os": "android", "cpu": "arm64" }, "sha512-hjhCKhntPv9+t4ckHymdx0phYNcVW+GKQR6Lzw2zE+pOVjOplSmtx9nNNknTjbEDLcuLZqA1y8ufKg1XfgftzQ=="],
+
+    "@napi-rs/canvas-darwin-arm64": ["@napi-rs/canvas-darwin-arm64@0.1.100", "", { "os": "darwin", "cpu": "arm64" }, "sha512-2PcswRaC7Ly645DGt88///zuFDhJxJYdKAs1uU3mfk1atYkXufgcgLfBpk6Tm12nCQBaNt1wpybuPZ4qOhTo8A=="],
+
+    "@napi-rs/canvas-darwin-x64": ["@napi-rs/canvas-darwin-x64@0.1.100", "", { "os": "darwin", "cpu": "x64" }, "sha512-ePNZtj7pNIva/siZMg+HmbeozkIjqUIYdoymH8HaA3qK7LfzFN4WMBM8G6HQ9ZC+H3+Dnn5pqtiXpgLykaPOhw=="],
+
+    "@napi-rs/canvas-linux-arm-gnueabihf": ["@napi-rs/canvas-linux-arm-gnueabihf@0.1.100", "", { "os": "linux", "cpu": "arm" }, "sha512-d5cDB48oWFGU8/XPhUOFAlySgb/VAu7D+s8fi55K1Pcfg8aPplHWqMgibhVLU8ky7Pyg/fuiVLz4Nf3JrSTuUA=="],
+
+    "@napi-rs/canvas-linux-arm64-gnu": ["@napi-rs/canvas-linux-arm64-gnu@0.1.100", "", { "os": "linux", "cpu": "arm64" }, "sha512-rDxgxRu69RvDlX/bh9o22DxLsGr8EqsNgotL9+RwQE1S0b0cqeatqsw6aW45mukm0B42DIAaAacKaYQ8cqS1nw=="],
+
+    "@napi-rs/canvas-linux-arm64-musl": ["@napi-rs/canvas-linux-arm64-musl@0.1.100", "", { "os": "linux", "cpu": "arm64" }, "sha512-K3mDW66N+xT2/V439u1alFANiBUjdEx2gLiNYnCmUsva5jZMxWTjafBYwTzYK+EMFMHrUoabuU+T1BIP5CgbYQ=="],
+
+    "@napi-rs/canvas-linux-riscv64-gnu": ["@napi-rs/canvas-linux-riscv64-gnu@0.1.100", "", { "os": "linux", "cpu": "none" }, "sha512-mooqUBTIsccZpnoQC4NgrC1v6C1vof39etLNMnBwCY+p0gajWJvAHLGQ6g/gGyS5YrpDW+GefSN4+Cvcr08UWw=="],
+
+    "@napi-rs/canvas-linux-x64-gnu": ["@napi-rs/canvas-linux-x64-gnu@0.1.100", "", { "os": "linux", "cpu": "x64" }, "sha512-1eCvkDCazm7FFhsT7DfGOdSaHgZVK3bt/dSBl5EWHOWmnz+I7j8tPseJqqD81NF+MH21jKUK4wQSDjN0mdhnTg=="],
+
+    "@napi-rs/canvas-linux-x64-musl": ["@napi-rs/canvas-linux-x64-musl@0.1.100", "", { "os": "linux", "cpu": "x64" }, "sha512-20arT6lnI19S68qNlii73TSEDbECNgzMz2EpldC1V3mZFuRkeujXkcebRk0LRJe9SEUAooYiLokfMViY8IX7yA=="],
+
+    "@napi-rs/canvas-win32-arm64-msvc": ["@napi-rs/canvas-win32-arm64-msvc@0.1.100", "", { "os": "win32", "cpu": "arm64" }, "sha512-DZFFT1wIAg37LJw37yhMRFfjATd3vTQzjZ1Yki8u2vhO6Hi5VE6BVaGQ1aaDu7xb4iMErz+9EOwjpS7xcxFeBw=="],
+
+    "@napi-rs/canvas-win32-x64-msvc": ["@napi-rs/canvas-win32-x64-msvc@0.1.100", "", { "os": "win32", "cpu": "x64" }, "sha512-MyT1j3mHC2+Lu4pBi9mKyMJhtP6U7k7EldY7sj/uS5gJA65gTXt8MefJQXLJo5d/vZbuWmfxzkEUNc/urV3pHA=="],
+
+    "@napi-rs/lzma-linux-x64-gnu": ["@napi-rs/lzma-linux-x64-gnu@1.5.1", "", { "os": "linux", "cpu": "x64" }, "sha512-oTXEIha4SsuXdTA4Iyskj0kpdx2yVXdhd75c2v3xGrHFfVMsbhTPZU/nMPL4sWKo4pBHm3aucLaqGlF696dTyQ=="],
+
+    "@phosphor-icons/core": ["@phosphor-icons/core@2.1.1", "", {}, "sha512-v4ARvrip4qBCImOE5rmPUylOEK4iiED9ZyKjcvzuezqMaiRASCHKcRIuvvxL/twvLpkfnEODCOJp5dM4eZilxQ=="],
+
+    "@phosphor-icons/react": ["@phosphor-icons/react@2.1.10", "", { "peerDependencies": { "react": ">= 16.8", "react-dom": ">= 16.8" } }, "sha512-vt8Tvq8GLjheAZZYa+YG/pW7HDbov8El/MANW8pOAz4eGxrwhnbfrQZq0Cp4q8zBEu8NIhHdnr+r8thnfRSNYA=="],
+
+    "@puppeteer/browsers": ["@puppeteer/browsers@3.2.6", "", { "dependencies": { "modern-tar": "^0.8.6", "yargs": "^18.0.0" }, "peerDependencies": { "proxy-agent": ">=8.0.1", "yauzl": "^2.10.0 || ^3.4.0" }, "optionalPeers": ["proxy-agent", "yauzl"], "bin": { "browsers": "lib/main-cli.js" } }, "sha512-MJP29gVoHznmqmwhH1tlZqzfeQ3aylTpSSa6WKZXtkwYUH02i9imBmWGTyZrbnAou5paX78SE4jMAUqnEPf8ug=="],
+
+    "@react-aria/focus": ["@react-aria/focus@3.22.1", "", { "dependencies": { "@swc/helpers": "^0.5.0", "react-aria": "^3.48.0" }, "peerDependencies": { "react": "^16.8.0 || ^17.0.0-rc.1 || ^18.0.0 || ^19.0.0-rc.1", "react-dom": "^16.8.0 || ^17.0.0-rc.1 || ^18.0.0 || ^19.0.0-rc.1" } }, "sha512-CPxtkyrBi/HYY5P3lE/57sQ6qfa0lN8E55TOm89H0kNGv0lKt+/0zP7lWERzBjRr5IxBVrQX4gFEowBN52LPaA=="],
+
+    "@react-aria/interactions": ["@react-aria/interactions@3.28.1", "", { "dependencies": { "@react-types/shared": "^3.34.0", "@swc/helpers": "^0.5.0", "react-aria": "^3.48.0" }, "peerDependencies": { "react": "^16.8.0 || ^17.0.0-rc.1 || ^18.0.0 || ^19.0.0-rc.1", "react-dom": "^16.8.0 || ^17.0.0-rc.1 || ^18.0.0 || ^19.0.0-rc.1" } }, "sha512-Bqb+HrD5I5MHS2SKBhISYqo2SW8Y2dfzgF/Y1lIJq7xqLxheo9vzxPGEHhz+XzkgGfoqEJx8A6a3C7uiqS3HWA=="],
+
+    "@react-types/shared": ["@react-types/shared@3.37.0", "", { "peerDependencies": { "react": "^16.8.0 || ^17.0.0-rc.1 || ^18.0.0 || ^19.0.0-rc.1" } }, "sha512-VNlZuifu4tHdxWPfHvoMfKsHA9kVTCGkduv5vKVTdinm8wHFJNhyVB5RzIMiRFj0q3RKoCbP68u2zaoBSiFueg=="],
+
+    "@rolldown/pluginutils": ["@rolldown/pluginutils@1.0.0-beta.27", "", {}, "sha512-+d0F4MKMCbeVUJwG96uQ4SgAznZNSq93I3V+9NHA4OpvqG8mRCpGdKmK8l/dl02h2CCDHwW2FqilnTyDcAnqjA=="],
+
+    "@rollup/rollup-android-arm-eabi": ["@rollup/rollup-android-arm-eabi@4.66.0", "", { "os": "android", "cpu": "arm" }, "sha512-7y4XeoUHPecjfUDRmap8U0q6bjfLAPn7uOGT8BKyqy8uNDOjsGS8rlBhOx6sZLVwwjN6hapvGl2mW9/IS6UNww=="],
+
+    "@rollup/rollup-android-arm64": ["@rollup/rollup-android-arm64@4.66.0", "", { "os": "android", "cpu": "arm64" }, "sha512-e8WugYZXpgqrlMXLCudYVRAxAcK7AIY36JxRDwFRD38L9q62G1VsEUW6ijXxzjxYjNB8i1zo3B/ycIQ/qjLC/Q=="],
+
+    "@rollup/rollup-darwin-arm64": ["@rollup/rollup-darwin-arm64@4.66.0", "", { "os": "darwin", "cpu": "arm64" }, "sha512-6vkDCfyDjNLokh+Rt1D2KtNgFFMEPdkWha/mbtP4cSjh9xiN8T/JBS/A7nDYKjmMAXHrvR9J3AzUk2LtFbIBLg=="],
+
+    "@rollup/rollup-darwin-x64": ["@rollup/rollup-darwin-x64@4.66.0", "", { "os": "darwin", "cpu": "x64" }, "sha512-/mzZAX0+Q6eXxvkR0HB0RZCCrsbmFD8DpsvCQoMYABDfq/DjqkbfytuJ7GvZ4AhR/Mgis2fXbZrGqfbcK2Z5fA=="],
+
+    "@rollup/rollup-freebsd-arm64": ["@rollup/rollup-freebsd-arm64@4.66.0", "", { "os": "freebsd", "cpu": "arm64" }, "sha512-JQJx9E8tUjGqed1RevDmoHaS3V30ODdV8uyvGxlwd4K5se6bkPrMeltSybqAtpJ+ltDRfo7FORQaJG2Hd5nGog=="],
+
+    "@rollup/rollup-freebsd-x64": ["@rollup/rollup-freebsd-x64@4.66.0", "", { "os": "freebsd", "cpu": "x64" }, "sha512-GEaUQQjMaG7X1304qMgqLjzCKv6CdDirzJSS+UqUs3xhJ9X2Kjzu0JDbLoUU42FWxwmZqz+SsgU1SlQv9GNRVA=="],
+
+    "@rollup/rollup-linux-arm-gnueabihf": ["@rollup/rollup-linux-arm-gnueabihf@4.66.0", "", { "os": "linux", "cpu": "arm" }, "sha512-DgmAU9N0NhDQDzHgFUocDio7zRO8jR/nY/obDGvCR8zbJ6J77Fg6X49yPuExJUpYPbC82EOaRhG969pWzUSnHQ=="],
+
+    "@rollup/rollup-linux-arm-musleabihf": ["@rollup/rollup-linux-arm-musleabihf@4.66.0", "", { "os": "linux", "cpu": "arm" }, "sha512-zG09YZ+sk/HoHq+P9gYB0EseQ3M20RbDuKGWey6fbiMDV1LxfXvhgSW9jDaCcvFPMgfLXpimzXY+UYvA8R2mLQ=="],
+
+    "@rollup/rollup-linux-arm64-gnu": ["@rollup/rollup-linux-arm64-gnu@4.66.0", "", { "os": "linux", "cpu": "arm64" }, "sha512-vlArhgyXbcVc1D4WZPoiYuqJIaMiSHBj6etRXua0KlfjlZeuiQyVAPYi0/N49O4mSp3u1iGUBLEjNa8ec81XZg=="],
+
+    "@rollup/rollup-linux-arm64-musl": ["@rollup/rollup-linux-arm64-musl@4.66.0", "", { "os": "linux", "cpu": "arm64" }, "sha512-RxJZtk0G87YPotDaRDvRqStV8cbqLSC5TroHvQHHKsqBg0ok64RxKgtXeFsa7FBcy7mb4crBrG3xK8USWIqWNA=="],
+
+    "@rollup/rollup-linux-loong64-gnu": ["@rollup/rollup-linux-loong64-gnu@4.66.0", "", { "os": "linux", "cpu": "none" }, "sha512-qlGcw959PrLLkZhiBxF3OZ6SQvj+OKY85mCqGNgSRs4LZlDJ6ICqmz6UdxtINdhcXYwNIbZoapQVBAmZlD2hUQ=="],
+
+    "@rollup/rollup-linux-loong64-musl": ["@rollup/rollup-linux-loong64-musl@4.66.0", "", { "os": "linux", "cpu": "none" }, "sha512-TvTI/7Cy0WvRA1SXgwzu6bwXBnMpmeT/ln5q7WvSpqmXy1VbmEnY8HVIDQNBiaHJvoWqRr0M4FNo7qiqtyMaFw=="],
+
+    "@rollup/rollup-linux-ppc64-gnu": ["@rollup/rollup-linux-ppc64-gnu@4.66.0", "", { "os": "linux", "cpu": "ppc64" }, "sha512-UZEDkSoDRZ50NyLj70nO6mpIK3dvs2cPTTvQb1bA/PBDmr9fvn5KiESuGfh6srd7Zi6Lt9Sv2sVrFr1QoHLvPQ=="],
+
+    "@rollup/rollup-linux-ppc64-musl": ["@rollup/rollup-linux-ppc64-musl@4.66.0", "", { "os": "linux", "cpu": "ppc64" }, "sha512-VRbxTvagLh3HRcysx1CNq+HHcvJbSebNI6fCbk7jwmmWHkXjrSIV3igXBpRHUTFdg0pagWGu50xoSZXnrZHjVQ=="],
+
+    "@rollup/rollup-linux-riscv64-gnu": ["@rollup/rollup-linux-riscv64-gnu@4.66.0", "", { "os": "linux", "cpu": "none" }, "sha512-uWdJpvYqh0LE/i+YBL3sMX0a2kUkICENjmrPmyBmMOFc3jMrs6MSQH/pMD+VIpGEoUcr3XkHGLLfymzIqPSRRg=="],
+
+    "@rollup/rollup-linux-riscv64-musl": ["@rollup/rollup-linux-riscv64-musl@4.66.0", "", { "os": "linux", "cpu": "none" }, "sha512-3FUd88pxgWAjK60OgCrika1AcNG+u8zaCdWjg4TlcZTDkt5TGyci8ZU64l3OJ9ax0MEjw3P80B/3PoSQDCLwJQ=="],
+
+    "@rollup/rollup-linux-s390x-gnu": ["@rollup/rollup-linux-s390x-gnu@4.66.0", "", { "os": "linux", "cpu": "s390x" }, "sha512-qT2rMmgyej62g5AdwktK+Bt2lBu497pzWZe12TTQ5JmZjOYPnEwcPEAOSLTBxBV+6gIES75rXm219v/QkT397A=="],
+
+    "@rollup/rollup-linux-x64-gnu": ["@rollup/rollup-linux-x64-gnu@4.66.0", "", { "os": "linux", "cpu": "x64" }, "sha512-E46rnZgp7J84Qwe8RMlF+rgimnDo/9fuiGbUArGB0ZkMWf97O7yeSCfKls5x/YJOF0RcuSe9RctuKe1hlxICiA=="],
+
+    "@rollup/rollup-linux-x64-musl": ["@rollup/rollup-linux-x64-musl@4.66.0", "", { "os": "linux", "cpu": "x64" }, "sha512-Uz1HiZe+qBzqgdPsON+z0wRx3WdATuyzwvGT6cr2VZVrqqko0ZJVfkrQJtwDMuDcAfXYdo7XucaxJ7lTLjEcgg=="],
+
+    "@rollup/rollup-openbsd-x64": ["@rollup/rollup-openbsd-x64@4.66.0", "", { "os": "openbsd", "cpu": "x64" }, "sha512-Ph7TX3Ex5qdfcb7Tc6eEPugVkRfJ501eTovO4T5029YObfpZ7dzn3RiwpFvGp50nk2QUhvBMZ0PFGlEj6pOYTg=="],
+
+    "@rollup/rollup-openharmony-arm64": ["@rollup/rollup-openharmony-arm64@4.66.0", "", { "os": "none", "cpu": "arm64" }, "sha512-nZYPEya7ZkeNxUEiF7qmNZbyLTyRN3MK5cO22KqsaoneUzXJuzBIQRw+7BEQy9LGj2O5vrCE9V3EpK06FYo1tQ=="],
+
+    "@rollup/rollup-win32-arm64-msvc": ["@rollup/rollup-win32-arm64-msvc@4.66.0", "", { "os": "win32", "cpu": "arm64" }, "sha512-u7aTfS3R6C4hRsqXSzaO6qLZYLVuMkHMvcWlux4IM8IJif1VCl2cgPBSo5gSNoFoStQypQP+qwq8W1IyFBf1QQ=="],
+
+    "@rollup/rollup-win32-ia32-msvc": ["@rollup/rollup-win32-ia32-msvc@4.66.0", "", { "os": "win32", "cpu": "ia32" }, "sha512-e+i9ueHrH1Bafb0cf0woAIVJbYcoC8vRaD+vz+Xi8w6jz9cYJSV3vyKO6ELGSZ6g4W4MJOm2WPLN4/nQf77h7w=="],
+
+    "@rollup/rollup-win32-x64-gnu": ["@rollup/rollup-win32-x64-gnu@4.66.0", "", { "os": "win32", "cpu": "x64" }, "sha512-KfTCbrtr2zXTqH2E1F+uYlFTrYibxHKqPAHobpd8Kfg49cEHmuHebOidCTDRgqG1suaPFX7oejFQeGE71zWKfA=="],
+
+    "@rollup/rollup-win32-x64-msvc": ["@rollup/rollup-win32-x64-msvc@4.66.0", "", { "os": "win32", "cpu": "x64" }, "sha512-xA+neBh1bqkqaS3b48T2UHZnDsTIpb9B0h+TdBzynjF/ymCpYndhfY10RqW0qSKB1HqqQA83mINVhAdwA+mETg=="],
+
+    "@storebound/desktop": ["@storebound/desktop@workspace:apps/desktop"],
+
+    "@swc/helpers": ["@swc/helpers@0.5.23", "", { "dependencies": { "tslib": "^2.8.0" } }, "sha512-5lSsMOTXURePglDfvuAQUqkGek9Hg2kksOYay2m0+XR++b2NWYL/4sWyuvVBIs8oKnJaxkdi9whaL/sqN13afw=="],
+
+    "@tanstack/react-virtual": ["@tanstack/react-virtual@3.14.23", "", { "dependencies": { "@tanstack/virtual-core": "3.19.8" }, "peerDependencies": { "react": "^16.8.0 || ^17.0.0 || ^18.0.0 || ^19.0.0", "react-dom": "^16.8.0 || ^17.0.0 || ^18.0.0 || ^19.0.0" } }, "sha512-Oyy58qQwdaQieA+A4WUDtnh9D1rv5FZvGdw8og9Xeyh88V6HH94vMSyV5i9ATIbYNe9t5Ix0WXRo9NOTpHDkYw=="],
+
+    "@tanstack/virtual-core": ["@tanstack/virtual-core@3.19.8", "", {}, "sha512-Oz/SYBo/aVPyQkwtOw7Q23myITUgFIof2glQqydYJAPL6mH2SkJDkvDKZTklB+7gv5jGLZQhyTcd7SO1A1EODQ=="],
+
+    "@tauri-apps/api": ["@tauri-apps/api@2.12.4", "", {}, "sha512-pVmfis+4zT8H0Qhp3xPZx9Ju7kpzvA6rr/PSJPyuwfvucTQ8sVt61NYU9KMkK703UFlYadFmjKA4HhybOtN0gg=="],
+
+    "@tauri-apps/cli": ["@tauri-apps/cli@2.12.4", "", { "optionalDependencies": { "@tauri-apps/cli-darwin-arm64": "2.12.4", "@tauri-apps/cli-darwin-x64": "2.12.4", "@tauri-apps/cli-linux-arm-gnueabihf": "2.12.4", "@tauri-apps/cli-linux-arm64-gnu": "2.12.4", "@tauri-apps/cli-linux-arm64-musl": "2.12.4", "@tauri-apps/cli-linux-riscv64-gnu": "2.12.4", "@tauri-apps/cli-linux-x64-gnu": "2.12.4", "@tauri-apps/cli-linux-x64-musl": "2.12.4", "@tauri-apps/cli-win32-arm64-msvc": "2.12.4", "@tauri-apps/cli-win32-ia32-msvc": "2.12.4", "@tauri-apps/cli-win32-x64-msvc": "2.12.4" }, "bin": { "tauri": "tauri.js" } }, "sha512-JI9bHfudSRJikGOrjbXEm6RjzzvmKuLc+JixB1NE8hNzQkNlCCIC3pTES3uypkR9lxHrsbxzcnSwhI2IxBQphw=="],
+
+    "@tauri-apps/cli-darwin-arm64": ["@tauri-apps/cli-darwin-arm64@2.12.4", "", { "os": "darwin", "cpu": "arm64" }, "sha512-OxqKSckIkoJ6vX2AjifIJpTasFC0Hbdoo7gEiCmAjauABO3U8m2MRsLWe+QTiBwDx1mIrvgA+rvI7tvDnbnHVg=="],
+
+    "@tauri-apps/cli-darwin-x64": ["@tauri-apps/cli-darwin-x64@2.12.4", "", { "os": "darwin", "cpu": "x64" }, "sha512-fz76/77wMMJOaaUN6n3CybRG0P/MTEjjqYk81mGPyhi9m6Ue5T+LWBnJP/AkPooNatBPI2vtulGqomyMJ44lCQ=="],
+
+    "@tauri-apps/cli-linux-arm-gnueabihf": ["@tauri-apps/cli-linux-arm-gnueabihf@2.12.4", "", { "os": "linux", "cpu": "arm" }, "sha512-K0w8Bof6Lt8QKLAYhRy0yy36ZH5iA/35VuSOvnxyjvCUZ+A3JKsUTlALviH/sVgAlisaPzzmeJSH8XOn4Q2HBA=="],
+
+    "@tauri-apps/cli-linux-arm64-gnu": ["@tauri-apps/cli-linux-arm64-gnu@2.12.4", "", { "os": "linux", "cpu": "arm64" }, "sha512-j5rOnjmRUwWrm1oosf0zBYl4D+fqydgUROFCk0hvKZxvbTT8SOERes0QB7rBV/XWNy+kM6pCKzb3oSm2sRglzg=="],
+
+    "@tauri-apps/cli-linux-arm64-musl": ["@tauri-apps/cli-linux-arm64-musl@2.12.4", "", { "os": "linux", "cpu": "arm64" }, "sha512-aOue3Fy6Jb7+oWcfAVUsVHfeTybSCt2CZoU06aO4jv4d2Ks/KnaTPwMAK3CLEduGOvBLY1lbBBrIyomqLLH5Sg=="],
+
+    "@tauri-apps/cli-linux-riscv64-gnu": ["@tauri-apps/cli-linux-riscv64-gnu@2.12.4", "", { "os": "linux", "cpu": "none" }, "sha512-Fx6GShY/RvST+t6LMlTHAwd66+1tEaAAGrnU7cysVfaiRP1BKng5Vl6rVmO6rSLOA1Sp1dRzNYM4f0OWQGb7qA=="],
+
+    "@tauri-apps/cli-linux-x64-gnu": ["@tauri-apps/cli-linux-x64-gnu@2.12.4", "", { "os": "linux", "cpu": "x64" }, "sha512-tNzZSa79Z1nRpHxEpQ38lsAFpKlFlYvoXzjTV+lRRn/zSf3wrdUC3wnLcq2XEadchPu4ttK0zivhYzr+XGD19Q=="],
+
+    "@tauri-apps/cli-linux-x64-musl": ["@tauri-apps/cli-linux-x64-musl@2.12.4", "", { "os": "linux", "cpu": "x64" }, "sha512-jmZ1pr0xEqUhuEusWtt9Yt+GF6lCnGHUmIL+KIknpbjK/XQ2qkhDBhaxK/JMHM2A8dAacVXCxXJk2EXpwhQUfA=="],
+
+    "@tauri-apps/cli-win32-arm64-msvc": ["@tauri-apps/cli-win32-arm64-msvc@2.12.4", "", { "os": "win32", "cpu": "arm64" }, "sha512-fGo8pgEHZxdSYgZ/J98m1usJ7NHKmKbq7k6uT0x1rpOq6Bg2YVzzpaAblWk710f5LHYBJIL5QIFS5IrD+4gmTg=="],
+
+    "@tauri-apps/cli-win32-ia32-msvc": ["@tauri-apps/cli-win32-ia32-msvc@2.12.4", "", { "os": "win32", "cpu": "ia32" }, "sha512-ezl8sQIcjYsye3TUnTH5VcWmWzccZASlQm7hlZt0dYyj1XD0qpVW47u2xYVrIKui0F8uQv/7QGZixdWiClBsbg=="],
+
+    "@tauri-apps/cli-win32-x64-msvc": ["@tauri-apps/cli-win32-x64-msvc@2.12.4", "", { "os": "win32", "cpu": "x64" }, "sha512-DJhDeCqjLDNMWYFy7ZS8cfeAHX2RK0RbQMLiA3bMVVkXRDJ4NBYiHriGqsUhsr9iG41aTb+dJGkFPmPw1gWwVw=="],
+
+    "@types/babel__core": ["@types/babel__core@7.20.5", "", { "dependencies": { "@babel/parser": "^7.20.7", "@babel/types": "^7.20.7", "@types/babel__generator": "*", "@types/babel__template": "*", "@types/babel__traverse": "*" } }, "sha512-qoQprZvz5wQFJwMDqeseRXWv3rqMvhgpbXFfVyWhbx9X47POIA6i/+dXefEmZKoAgOaTdaIgNSMqMIU61yRyzA=="],
+
+    "@types/babel__generator": ["@types/babel__generator@7.27.0", "", { "dependencies": { "@babel/types": "^7.0.0" } }, "sha512-ufFd2Xi92OAVPYsy+P4n7/U7e68fex0+Ee8gSG9KX7eo084CWiQ4sdxktvdl0bOPupXtVJPY19zk6EwWqUQ8lg=="],
+
+    "@types/babel__template": ["@types/babel__template@7.4.4", "", { "dependencies": { "@babel/parser": "^7.1.0", "@babel/types": "^7.0.0" } }, "sha512-h/NUaSyG5EyxBIp8YRxo4RMe2/qQgvyowRwVMzhYhBCONbW8PUsg4lkFMrhgZhUe5z3L3MiLDuvyJ/CaPa2A8A=="],
+
+    "@types/babel__traverse": ["@types/babel__traverse@7.28.0", "", { "dependencies": { "@babel/types": "^7.28.2" } }, "sha512-8PvcXf70gTDZBgt9ptxJ8elBeBjcLOAcOtoO/mPJjtji1+CdGbHgm77om1GrsPxsiE+uXIpNSK64UYaIwQXd4Q=="],
+
+    "@types/bun": ["@types/bun@1.3.0", "", { "dependencies": { "bun-types": "1.3.0" } }, "sha512-+lAGCYjXjip2qY375xX/scJeVRmZ5cY0wyHYyCYxNcdEXrQ4AOe3gACgd4iQ8ksOslJtW4VNxBJ8llUwc3a6AA=="],
+
+    "@types/d3": ["@types/d3@7.4.3", "", { "dependencies": { "@types/d3-array": "*", "@types/d3-axis": "*", "@types/d3-brush": "*", "@types/d3-chord": "*", "@types/d3-color": "*", "@types/d3-contour": "*", "@types/d3-delaunay": "*", "@types/d3-dispatch": "*", "@types/d3-drag": "*", "@types/d3-dsv": "*", "@types/d3-ease": "*", "@types/d3-fetch": "*", "@types/d3-force": "*", "@types/d3-format": "*", "@types/d3-geo": "*", "@types/d3-hierarchy": "*", "@types/d3-interpolate": "*", "@types/d3-path": "*", "@types/d3-polygon": "*", "@types/d3-quadtree": "*", "@types/d3-random": "*", "@types/d3-scale": "*", "@types/d3-scale-chromatic": "*", "@types/d3-selection": "*", "@types/d3-shape": "*", "@types/d3-time": "*", "@types/d3-time-format": "*", "@types/d3-timer": "*", "@types/d3-transition": "*", "@types/d3-zoom": "*" } }, "sha512-lZXZ9ckh5R8uiFVt8ogUNf+pIrK4EsWrx2Np75WvF/eTpJ0FMHNhjXk8CKEx/+gpHbNQyJWehbFaTvqmHWB3ww=="],
+
+    "@types/d3-array": ["@types/d3-array@3.0.3", "", {}, "sha512-Reoy+pKnvsksN0lQUlcH6dOGjRZ/3WRwXR//m+/8lt1BXeI4xyaUZoqULNjyXXRuh0Mj4LNpkCvhUpQlY3X5xQ=="],
+
+    "@types/d3-axis": ["@types/d3-axis@3.0.6", "", { "dependencies": { "@types/d3-selection": "*" } }, "sha512-pYeijfZuBd87T0hGn0FO1vQ/cgLk6E1ALJjfkC0oJ8cbwkZl3TpgS8bVBLZN+2jjGgg38epgxb2zmoGtSfvgMw=="],
+
+    "@types/d3-brush": ["@types/d3-brush@3.0.6", "", { "dependencies": { "@types/d3-selection": "*" } }, "sha512-nH60IZNNxEcrh6L1ZSMNA28rj27ut/2ZmI3r96Zd+1jrZD++zD3LsMIjWlvg4AYrHn/Pqz4CF3veCxGjtbqt7A=="],
+
+    "@types/d3-chord": ["@types/d3-chord@3.0.6", "", {}, "sha512-LFYWWd8nwfwEmTZG9PfQxd17HbNPksHBiJHaKuY1XeqscXacsS2tyoo6OdRsjf+NQYeB6XrNL3a25E3gH69lcg=="],
+
+    "@types/d3-color": ["@types/d3-color@3.1.0", "", {}, "sha512-HKuicPHJuvPgCD+np6Se9MQvS6OCbJmOjGvylzMJRlDwUXjKTTXs6Pwgk79O09Vj/ho3u1ofXnhFOaEWWPrlwA=="],
+
+    "@types/d3-contour": ["@types/d3-contour@3.0.6", "", { "dependencies": { "@types/d3-array": "*", "@types/geojson": "*" } }, "sha512-BjzLgXGnCWjUSYGfH1cpdo41/hgdWETu4YxpezoztawmqsvCeep+8QGfiY6YbDvfgHz/DkjeIkkZVJavB4a3rg=="],
+
+    "@types/d3-delaunay": ["@types/d3-delaunay@6.0.1", "", {}, "sha512-tLxQ2sfT0p6sxdG75c6f/ekqxjyYR0+LwPrsO1mbC9YDBzPJhs2HbJJRrn8Ez1DBoHRo2yx7YEATI+8V1nGMnQ=="],
+
+    "@types/d3-dispatch": ["@types/d3-dispatch@3.0.7", "", {}, "sha512-5o9OIAdKkhN1QItV2oqaE5KMIiXAvDWBDPrD85e58Qlz1c1kI/J0NcqbEG88CoTwJrYe7ntUCVfeUl2UJKbWgA=="],
+
+    "@types/d3-drag": ["@types/d3-drag@3.0.7", "", { "dependencies": { "@types/d3-selection": "*" } }, "sha512-HE3jVKlzU9AaMazNufooRJ5ZpWmLIoc90A37WU2JMmeq28w1FQqCZswHZ3xR+SuxYftzHq6WU6KJHvqxKzTxxQ=="],
+
+    "@types/d3-dsv": ["@types/d3-dsv@3.0.7", "", {}, "sha512-n6QBF9/+XASqcKK6waudgL0pf/S5XHPPI8APyMLLUHd8NqouBGLsU8MgtO7NINGtPBtk9Kko/W4ea0oAspwh9g=="],
+
+    "@types/d3-ease": ["@types/d3-ease@3.0.2", "", {}, "sha512-NcV1JjO5oDzoK26oMzbILE6HW7uVXOHLQvHshBUW4UMdZGfiY6v5BeQwh9a9tCzv+CeefZQHJt5SRgK154RtiA=="],
+
+    "@types/d3-fetch": ["@types/d3-fetch@3.0.7", "", { "dependencies": { "@types/d3-dsv": "*" } }, "sha512-fTAfNmxSb9SOWNB9IoG5c8Hg6R+AzUHDRlsXsDZsNp6sxAEOP0tkP3gKkNSO/qmHPoBFTxNrjDprVHDQDvo5aA=="],
+
+    "@types/d3-force": ["@types/d3-force@3.0.10", "", {}, "sha512-ZYeSaCF3p73RdOKcjj+swRlZfnYpK1EbaDiYICEEp5Q6sUiqFaFQ9qgoshp5CzIyyb/yD09kD9o2zEltCexlgw=="],
+
+    "@types/d3-format": ["@types/d3-format@3.0.1", "", {}, "sha512-5KY70ifCCzorkLuIkDe0Z9YTf9RR2CjBX1iaJG+rgM/cPP+sO+q9YdQ9WdhQcgPj1EQiJ2/0+yUkkziTG6Lubg=="],
+
+    "@types/d3-geo": ["@types/d3-geo@3.1.0", "", { "dependencies": { "@types/geojson": "*" } }, "sha512-856sckF0oP/diXtS4jNsiQw/UuK5fQG8l/a9VVLeSouf1/PPbBE1i1W852zVwKwYCBkFJJB7nCFTbk6UMEXBOQ=="],
+
+    "@types/d3-hierarchy": ["@types/d3-hierarchy@3.1.7", "", {}, "sha512-tJFtNoYBtRtkNysX1Xq4sxtjK8YgoWUNpIiUee0/jHGRwqvzYxkq0hGVbbOGSz+JgFxxRu4K8nb3YpG3CMARtg=="],
+
+    "@types/d3-interpolate": ["@types/d3-interpolate@3.0.1", "", { "dependencies": { "@types/d3-color": "*" } }, "sha512-jx5leotSeac3jr0RePOH1KdR9rISG91QIE4Q2PYTu4OymLTZfA3SrnURSLzKH48HmXVUru50b8nje4E79oQSQw=="],
+
+    "@types/d3-path": ["@types/d3-path@3.1.1", "", {}, "sha512-VMZBYyQvbGmWyWVea0EHs/BwLgxc+MKi1zLDCONksozI4YJMcTt8ZEuIR4Sb1MMTE8MMW49v0IwI5+b7RmfWlg=="],
+
+    "@types/d3-polygon": ["@types/d3-polygon@3.0.2", "", {}, "sha512-ZuWOtMaHCkN9xoeEMr1ubW2nGWsp4nIql+OPQRstu4ypeZ+zk3YKqQT0CXVe/PYqrKpZAi+J9mTs05TKwjXSRA=="],
+
+    "@types/d3-quadtree": ["@types/d3-quadtree@3.0.6", "", {}, "sha512-oUzyO1/Zm6rsxKRHA1vH0NEDG58HrT5icx/azi9MF1TWdtttWl0UIUsjEQBBh+SIkrpd21ZjEv7ptxWys1ncsg=="],
+
+    "@types/d3-random": ["@types/d3-random@3.0.4", "", {}, "sha512-UHYId5WTCx4L4YNel7NU00XUXXgvgpgZOvp10PuvsQENjMDXhh2RyFc0KBjO7B45ne4Ha1yVH7ii0vnzKkuzWA=="],
+
+    "@types/d3-scale": ["@types/d3-scale@4.0.2", "", { "dependencies": { "@types/d3-time": "*" } }, "sha512-Yk4htunhPAwN0XGlIwArRomOjdoBFXC3+kCxK2Ubg7I9shQlVSJy/pG/Ht5ASN+gdMIalpk8TJ5xV74jFsetLA=="],
+
+    "@types/d3-scale-chromatic": ["@types/d3-scale-chromatic@3.1.0", "", {}, "sha512-iWMJgwkK7yTRmWqRB5plb1kadXyQ5Sj8V/zYlFGMUBbIPKQScw+Dku9cAAMgJG+z5GYDoMjWGLVOvjghDEFnKQ=="],
+
+    "@types/d3-selection": ["@types/d3-selection@3.0.12", "", {}, "sha512-Qe/KWYhEiIIxGs7HrAAjMfShxKldx19SJtr5zu53f3afPsdZNz7HHtdTLXo/kqeiWNXVycI24kSnfzBYkTzpgw=="],
+
+    "@types/d3-shape": ["@types/d3-shape@3.1.7", "", { "dependencies": { "@types/d3-path": "*" } }, "sha512-VLvUQ33C+3J+8p+Daf+nYSOsjB4GXp19/S/aGo60m9h1v6XaxjiT82lKVWJCfzhtuZ3yD7i/TPeC/fuKLLOSmg=="],
+
+    "@types/d3-time": ["@types/d3-time@3.0.0", "", {}, "sha512-sZLCdHvBUcNby1cB6Fd3ZBrABbjz3v1Vm90nysCQ6Vt7vd6e/h9Lt7SiJUoEX0l4Dzc7P5llKyhqSi1ycSf1Hg=="],
+
+    "@types/d3-time-format": ["@types/d3-time-format@2.1.0", "", {}, "sha512-/myT3I7EwlukNOX2xVdMzb8FRgNzRMpsZddwst9Ld/VFe6LyJyRp0s32l/V9XoUzk+Gqu56F/oGk6507+8BxrA=="],
+
+    "@types/d3-timer": ["@types/d3-timer@3.0.2", "", {}, "sha512-Ps3T8E8dZDam6fUyNiMkekK3XUsaUEik+idO9/YjPtfj2qruF8tFBXS7XhtE4iIXBLxhmLjP3SXpLhVf21I9Lw=="],
+
+    "@types/d3-transition": ["@types/d3-transition@3.0.9", "", { "dependencies": { "@types/d3-selection": "*" } }, "sha512-uZS5shfxzO3rGlu0cC3bjmMFKsXv+SmZZcgp0KD22ts4uGXp5EVYGzu/0YdwZeKmddhcAccYtREJKkPfXkZuCg=="],
+
+    "@types/d3-zoom": ["@types/d3-zoom@3.0.9", "", { "dependencies": { "@types/d3-interpolate": "*", "@types/d3-selection": "*" } }, "sha512-0sE1406XBYJGiqD3AusTl9ZqC//2mIXix51tbom25gDCA8ri4xnSZg28CaSE8Srl6FClqABUKfsn0qghgdepMA=="],
+
+    "@types/estree": ["@types/estree@1.0.9", "", {}, "sha512-GhdPgy1el4/ImP05X05Uw4cw2/M93BCUmnEvWZNStlCzEKME4Fkk+YpoA5OiHNQmoS7Cafb8Xa3Pya8m1Qrzeg=="],
+
+    "@types/geojson": ["@types/geojson@7946.0.16", "", {}, "sha512-6C8nqWur3j98U6+lXDfTUWIfgvZU+EumvpHKcYjujKH7woYyLj2sUmff0tRhrqM7BohUw7Pz3ZB1jj2gW9Fvmg=="],
+
+    "@types/node": ["@types/node@26.6.6", "", { "dependencies": { "undici-types": "~8.9.0" } }, "sha512-MzQj+8Kx3XI40OmUAE6Qoh58ZMNstNNMwn2nfd3qWsfe7nDNSqJNzes4njhz6AHwrSHOffSLwXU6yb474Q4aog=="],
+
+    "@types/react": ["@types/react@19.3.0", "", { "dependencies": { "csstype": "^3.2.2" } }, "sha512-N0rFCuH9YoxG9/m61l9MfpJKfmLOVU0em7ipIz6TRgSSkvReLB9vL85GB+yr8Bs5leqpvg96JSwF4ZS1s4viQg=="],
+
+    "@types/react-dom": ["@types/react-dom@19.3.0", "", { "peerDependencies": { "@types/react": "^19.3.0" } }, "sha512-ZI7bU42mZXXKHn/qNLEw2IrbiINU7X5+vfgdixBHkCNpYWXjKgfQ/P+uyGb5CjOLB9UcnTeg3rylQtV2hym44Q=="],
+
+    "@types/trusted-types": ["@types/trusted-types@2.0.7", "", {}, "sha512-ScaPdn1dQczgbl0QFTeTOmVHFULt394XJgOQNoyVhZ6r2vLnMLJfBPd53SB52T/3G36VI1/g2MZaX0cwDuXsfw=="],
+
+    "@upsetjs/venn.js": ["@upsetjs/venn.js@2.0.0", "", { "optionalDependencies": { "d3-selection": "^3.0.0", "d3-transition": "^3.0.1" } }, "sha512-WbBhLrooyePuQ1VZxrJjtLvTc4NVfpOyKx0sKqioq9bX1C1m7Jgykkn8gLrtwumBioXIqam8DLxp88Adbue6Hw=="],
+
+    "@visx/axis": ["@visx/axis@4.0.0", "", { "dependencies": { "@visx/group": "4.0.0", "@visx/point": "4.0.0", "@visx/scale": "4.0.0", "@visx/shape": "4.0.0", "@visx/text": "4.0.0", "classnames": "^2.3.1" }, "peerDependencies": { "@types/react": "^18.0.0 || ^19.0.0", "react": "^18.0.0 || ^19.0.0" }, "optionalPeers": ["@types/react"] }, "sha512-cSPNO9Aic2UX49AmIeJJ9TQrrAkvUHpHOGqimUAXhbg07VI3HoHDKcXZdrjvQz+g0LhubrUkjj8Gwju2WZ3dtg=="],
+
+    "@visx/bounds": ["@visx/bounds@4.0.0", "", { "peerDependencies": { "@types/react": "^18.0.0 || ^19.0.0", "@types/react-dom": "^18.0.0 || ^19.0.0", "react": "^18.0.0 || ^19.0.0", "react-dom": "^18.0.0 || ^19.0.0" }, "optionalPeers": ["@types/react", "@types/react-dom"] }, "sha512-3wAfN5fg2bxg/5f3MlKWzGDTKU2hdKkxq8bVWXpPZQV0UiVc0myuU1qa34c7tN3hg5SDe6MJi/bae2eTQDgEiQ=="],
+
+    "@visx/curve": ["@visx/curve@4.0.0", "", { "dependencies": { "@visx/vendor": "4.0.0" } }, "sha512-bXrOSd2BzVCxR7kBE7gPTSU4plxzYN75w7erdHYabwn3vzP+xFk1o0gg3NOHEPJzt5tXqf0Ecm5YqHACOnipTA=="],
+
+    "@visx/event": ["@visx/event@4.0.0", "", { "dependencies": { "@visx/point": "4.0.0" }, "peerDependencies": { "@types/react": "^18.0.0 || ^19.0.0", "react": "^18.0.0 || ^19.0.0" }, "optionalPeers": ["@types/react"] }, "sha512-sOcVVzOUxOefF8mQenRFtutoEO7P9icpTcSJM36Sv13sepQbPBuYLknX7RV+EzqyNLOze5cO5GmLIUNH82FOoA=="],
+
+    "@visx/gradient": ["@visx/gradient@4.0.0", "", { "peerDependencies": { "@types/react": "^18.0.0 || ^19.0.0", "react": "^18.0.0 || ^19.0.0" }, "optionalPeers": ["@types/react"] }, "sha512-AycKA/9Hhx9BXOdWACqYKGU+Dkq/gWzgaDAK/MkVDjXME+3Sl8oE6mn/ZO54gi6wg9qNHhWLnp8XKPJSp4/pzA=="],
+
+    "@visx/group": ["@visx/group@4.0.0", "", { "dependencies": { "classnames": "^2.3.1" }, "peerDependencies": { "@types/react": "^18.0.0 || ^19.0.0", "react": "^18.0.0 || ^19.0.0" }, "optionalPeers": ["@types/react"] }, "sha512-HGAq8BCqn5x0t94CJOLJeKtWss9LFpF3HY69HbuO1PlR+B9c4aVT9xbjfudmU8wGQZLT6JNt+PJvxbO2aJ+1aA=="],
+
+    "@visx/point": ["@visx/point@4.0.0", "", {}, "sha512-hwJ9UlIjg3iV4iiJ3RN5SNTXama+zGaNe57sXSrSvPiqhkDXypsYBdDSlAnHmKbMzHP0zFmgB1UJciB/QUyigw=="],
+
+    "@visx/responsive": ["@visx/responsive@4.0.0", "", { "peerDependencies": { "@types/react": "^18.0.0 || ^19.0.0", "react": "^18.0.0 || ^19.0.0" }, "optionalPeers": ["@types/react"] }, "sha512-MGPK8AeiBIhzz34o9TNJIyUDQIdWEj5mt+U/Je4qVRRXpXSMhor1IE7v71czAS5b90OrFxC9L3w27AV+szG25w=="],
+
+    "@visx/scale": ["@visx/scale@4.0.0", "", { "dependencies": { "@visx/vendor": "4.0.0" } }, "sha512-Q3VaSLKlsrxxSl9CwS2D3Mvz4/4kIp/6NMKRY8Im0Au1hrQh2egU806p0+JwN0ccuGGDe03jyAxX4BSRAH8Plg=="],
+
+    "@visx/shape": ["@visx/shape@4.0.0", "", { "dependencies": { "@visx/curve": "4.0.0", "@visx/group": "4.0.0", "@visx/scale": "4.0.0", "@visx/vendor": "4.0.0", "classnames": "^2.3.1" }, "peerDependencies": { "@types/react": "^18.0.0 || ^19.0.0", "react": "^18.0.0 || ^19.0.0" }, "optionalPeers": ["@types/react"] }, "sha512-X0FP3OFjQhc5/6Vj2aY7cK2JwKYI0H0hQM7cdNRWy/ZMMlrh5KpEdqx0HVo0KoTeTlkUvO+kydMLnAuuCRFIFw=="],
+
+    "@visx/text": ["@visx/text@4.0.0", "", { "dependencies": { "classnames": "^2.3.1", "reduce-css-calc": "^1.3.0" }, "peerDependencies": { "@types/react": "^18.0.0 || ^19.0.0", "react": "^18.0.0 || ^19.0.0" }, "optionalPeers": ["@types/react"] }, "sha512-39f2goSaKy5Mqn89lRDGSJ1IMr49wplkbIFHsFI8cPnAPbguiJxYZ+ulizd7Vcsq2z/hytuGv3Lmk165zUiUYQ=="],
+
+    "@visx/tooltip": ["@visx/tooltip@4.0.0", "", { "dependencies": { "@visx/bounds": "4.0.0", "classnames": "^2.3.1", "react-use-measure": "^2.0.4" }, "peerDependencies": { "@types/react": "^18.0.0 || ^19.0.0", "@types/react-dom": "^18.0.0 || ^19.0.0", "react": "^18.0.0 || ^19.0.0", "react-dom": "^18.0.0 || ^19.0.0" }, "optionalPeers": ["@types/react", "@types/react-dom"] }, "sha512-+6J2h5qPvniT0pQtxQrLYGErPRVHr3pRfcMkNqTxD/HgofDGsL6vEBkjMR535MF1hkWYQ9XzOiWP6ERN4TF+mg=="],
+
+    "@visx/vendor": ["@visx/vendor@4.0.0", "", { "dependencies": { "@types/d3-array": "3.0.3", "@types/d3-color": "3.1.0", "@types/d3-delaunay": "6.0.1", "@types/d3-format": "3.0.1", "@types/d3-geo": "3.1.0", "@types/d3-interpolate": "3.0.1", "@types/d3-path": "3.1.1", "@types/d3-scale": "4.0.2", "@types/d3-shape": "3.1.7", "@types/d3-time": "3.0.0", "@types/d3-time-format": "2.1.0", "d3-array": "3.2.1", "d3-color": "3.1.0", "d3-delaunay": "6.0.2", "d3-format": "3.1.0", "d3-geo": "3.1.0", "d3-interpolate": "3.0.1", "d3-path": "3.1.0", "d3-scale": "4.0.2", "d3-shape": "3.2.0", "d3-time": "3.1.0", "d3-time-format": "4.1.0", "internmap": "2.0.3" } }, "sha512-LoBNzWjTXzBfu095BQxB14IwZQHHOLs8ZMzM6t2FL4ZGORaACgLcmXRRLhFo0VmRR8L7iNTM4HHc1j6yFvzsAA=="],
+
+    "@vitejs/plugin-react": ["@vitejs/plugin-react@4.7.0", "", { "dependencies": { "@babel/core": "^7.28.0", "@babel/plugin-transform-react-jsx-self": "^7.27.1", "@babel/plugin-transform-react-jsx-source": "^7.27.1", "@rolldown/pluginutils": "1.0.0-beta.27", "@types/babel__core": "^7.20.5", "react-refresh": "^0.17.0" }, "peerDependencies": { "vite": "^4.2.0 || ^5.0.0 || ^6.0.0 || ^7.0.0" } }, "sha512-gUu9hwfWvvEDBBmgtAowQCojwZmJ5mcLn3aufeCsitijs3+f2NsrPtlAWIR6OPiqljl96GVCUbLe0HyqIpVaoA=="],
+
+    "@zenuml/core": ["@zenuml/core@3.50.1", "", { "dependencies": { "@floating-ui/react": "^0.27.16", "@headlessui/react": "^2.2.9", "@headlessui/tailwindcss": "^0.2.2", "antlr4": "~4.11.0", "class-variance-authority": "^0.7.1", "clsx": "^2.1.1", "color-string": "^2.1.4", "dompurify": "^3.3.1", "highlight.js": "^11.10.0", "html-to-image": "^1.11.13", "jotai": "^2.16.1", "marked": "^4.3.0", "react": "^19.2.3", "react-dom": "^19.2.3", "tailwind-merge": "^3.4.0" }, "optionalDependencies": { "@napi-rs/canvas": "^0.1.97" }, "peerDependencies": { "playwright-core": "1.57.0" }, "optionalPeers": ["playwright-core"], "bin": { "zenuml": "dist/cli/zenuml.mjs" } }, "sha512-Q18BXvIfhRuGw0JfO4e+pltG04Phhv2E7n35EWTNSZKKH/HEkyE4Sh7KERb9dqaOfjOdRdKvLG0YekjK3fcDXw=="],
+
+    "ansi-regex": ["ansi-regex@6.4.0", "", {}, "sha512-KzTVk2tCWAHtYrvvvaP8bJKJq2pVinhLcGEQdtLIYPbmNGNyYe8QwNaTUYQp2J7/vIsUKt5QCqAfUkYyG9DkOw=="],
+
+    "ansi-styles": ["ansi-styles@6.2.3", "", {}, "sha512-4Dj6M28JB+oAH8kFkTLUo+a2jwOFkuqb3yucU0CANcRRUbxS0cP0nZYCGjcc3BNXwRIsUVmDGgzawme7zvJHvg=="],
+
+    "antlr4": ["antlr4@4.11.0", "", {}, "sha512-GUGlpE2JUjAN+G8G5vY+nOoeyNhHsXoIJwP1XF1oRw89vifA1K46T6SEkwLwr7drihN7I/lf0DIjKc4OZvBX8w=="],
+
+    "aria-hidden": ["aria-hidden@1.2.6", "", { "dependencies": { "tslib": "^2.0.0" } }, "sha512-ik3ZgC9dY/lYVVM++OISsaYDeg1tb0VtP5uL3ouh1koGOaUMDPpbFIei4JkFimWUFPn90sbMNMXQAIVOlnYKJA=="],
+
+    "balanced-match": ["balanced-match@0.4.2", "", {}, "sha512-STw03mQKnGUYtoNjmowo4F2cRmIIxYEGiMsjjwla/u5P1lxadj/05WkNaFjNiKTgJkj8KiXbgAiRTmcQRwQNtg=="],
+
+    "baseline-browser-mapping": ["baseline-browser-mapping@2.11.34", "", { "bin": { "baseline-browser-mapping": "dist/cli.cjs" } }, "sha512-Aqr8mA1kIvyJ3UY5YAY7ib8LSo1DmDMbMnVqGPtsKW1LxaFQFwn9Eb3yvq2fUKJsRvaXjnAV7R5osqETapzNiA=="],
+
+    "browserslist": ["browserslist@4.29.5", "", { "dependencies": { "baseline-browser-mapping": "^2.11.33", "caniuse-lite": "^1.0.30001819", "electron-to-chromium": "^1.5.464", "node-releases": "^2.0.60", "update-browserslist-db": "^1.3.4" }, "bin": { "browserslist": "cli.js" } }, "sha512-khTmKu5NGYTotqcYo8Bew2k4RAE9PuXRSFRXG2lQBrCEQHyeQ/vX6gKMxfokwywBsLiXZMnHsmWMG1pnO8J7uQ=="],
+
+    "bun-types": ["bun-types@1.3.0", "", { "dependencies": { "@types/node": "*" }, "peerDependencies": { "@types/react": "^19" } }, "sha512-u8X0thhx+yJ0KmkxuEo9HAtdfgCBaM/aI9K90VQcQioAmkVp3SG3FkwWGibUFz3WdXAdcsqOcbU40lK7tbHdkQ=="],
+
+    "caniuse-lite": ["caniuse-lite@1.0.30001820", "", {}, "sha512-gfWD6MxqVCqAOwmODfZf7DchWvlrA+SRdNX7ceLfg3xRqe5ssjjpF7EgslC/0tiLiNTajdaNN/q8c/5u/7Gz8w=="],
+
+    "chalk": ["chalk@6.0.1", "", {}, "sha512-/Ce6KNm3vIbWdMlNna6RVIZ/ICQxnJxCicet5LBKK9ZffBkqzDw0xh9EiKSljdRtiIQ1S1z4YgcscUUGzNCWrA=="],
+
+    "chevrotain": ["chevrotain@13.2.0", "", { "dependencies": { "@chevrotain/cst-dts-gen": "13.2.0", "@chevrotain/gast": "13.2.0", "@chevrotain/regexp-to-ast": "13.2.0", "@chevrotain/types": "13.2.0", "@chevrotain/utils": "13.2.0" } }, "sha512-GTouk5YzgBxlTPCaDn5q0q2EJKkrYmnPF+HmF8v0Qo4r3iyPG7HJivkN1wthCXZcm3sIcZFpGTRovLPNdJNRCA=="],
+
+    "chromium-bidi": ["chromium-bidi@157.0.8090-0", "", { "dependencies": { "mitt": "^3.0.1", "zod": "^4.6.5" }, "peerDependencies": { "devtools-protocol": "*" } }, "sha512-KJw7IQgqXwxpJgJlEIPg5mr2ZoqA+jkTRtc5EABI7sUJ3bu3cpI7NuEBoj4Gn1AsF78CaT9So5WQWspK3/wYag=="],
+
+    "class-variance-authority": ["class-variance-authority@0.7.1", "", { "dependencies": { "clsx": "^2.1.1" } }, "sha512-Ka+9Trutv7G8M6WT6SeiRWz792K5qEqIGEGzXKhAE6xOWAY6pPH8U+9IY3oCMv6kqTmLsv7Xh/2w2RigkePMsg=="],
+
+    "classnames": ["classnames@2.5.1", "", {}, "sha512-saHYOzhIQs6wy2sVxTM6bUDsQO4F50V9RQ22qBpEdCW+I+/Wmke2HOl6lS6dTpdxVhb88/I6+Hs+438c3lfUow=="],
+
+    "cliui": ["cliui@9.0.1", "", { "dependencies": { "string-width": "^7.2.0", "strip-ansi": "^7.1.0", "wrap-ansi": "^9.0.0" } }, "sha512-k7ndgKhwoQveBL+/1tqGJYNz097I7WOvwbmmU2AR5+magtbjPWQTS1C5vzGkBC8Ym8UWRzfKUzUUqFLypY4Q+w=="],
+
+    "clsx": ["clsx@2.1.1", "", {}, "sha512-eYm0QWBtUrBWZWG0d386OGAw16Z995PiOVo2B7bjWSbHedGl5e0ZWaq65kOGgUSNesEIDkB9ISbTg/JK9dhCZA=="],
+
+    "color-name": ["color-name@2.1.1", "", {}, "sha512-p2FdgwVx1a9yWBHP2wI0VgShkDpgN4kZISkxdNipGBJWpa5G6b04OINlVWCyJj0JmfvcPrgqt95E9k8yvaOJFg=="],
+
+    "color-string": ["color-string@2.1.4", "", { "dependencies": { "color-name": "^2.0.0" } }, "sha512-Bb6Cq8oq0IjDOe8wJmi4JeNn763Xs9cfrBcaylK1tPypWzyoy2G3l90v9k64kjphl/ZJjPIShFztenRomi8WTg=="],
+
+    "commander": ["commander@15.0.0", "", {}, "sha512-z67u4ZhzCL/Tydu1lJARtEZYWbWaN7oYLHbsuzocr6y4N6WZAagG3RQ4FW61V1/0+jImpj293XfrcYnd1qxtPg=="],
+
+    "convert-source-map": ["convert-source-map@2.0.0", "", {}, "sha512-Kvp459HrV2FEJ1CAsi1Ku+MY3kasH19TFykTz2xWmMeq6bk2NU3XXvfJ+Q61m0xktWwt+1HSYf3JZsTms3aRJg=="],
+
+    "cose-base": ["cose-base@1.0.3", "", { "dependencies": { "layout-base": "^1.0.0" } }, "sha512-s9whTXInMSgAp/NVXVNuVxVKzGH2qck3aQlVHxDCdAEPgtMKwc4Wq6/QKhgdEdgbLSi9rBTAcPoRa6JpiG4ksg=="],
+
+    "csstype": ["csstype@3.2.3", "", {}, "sha512-z1HGKcYy2xA8AGQfwrn0PAy+PB7X/GSj3UVJW9qKyn43xWa+gl5nXmU4qqLMRzWVLFC8KusUX8T/0kCiOYpAIQ=="],
+
+    "cytoscape": ["cytoscape@3.34.4", "", {}, "sha512-msY99tMY8iWTg+sIPGfSqDcPNOt4xcj+v/K/7qUFaCUxxlqnMkUYLBjRUzn9W5CU/R2hrmtJa5+UtovrEM2ctg=="],
+
+    "cytoscape-cose-bilkent": ["cytoscape-cose-bilkent@4.1.0", "", { "dependencies": { "cose-base": "^1.0.0" }, "peerDependencies": { "cytoscape": "^3.2.0" } }, "sha512-wgQlVIUJF13Quxiv5e1gstZ08rnZj2XaLHGoFMYXz7SkNfCDOOteKBE6SYRfA9WxxI/iBc3ajfDoc6hb/MRAHQ=="],
+
+    "cytoscape-fcose": ["cytoscape-fcose@2.2.0", "", { "dependencies": { "cose-base": "^2.2.0" }, "peerDependencies": { "cytoscape": "^3.2.0" } }, "sha512-ki1/VuRIHFCzxWNrsshHYPs6L7TvLu3DL+TyIGEsRcvVERmxokbf5Gdk7mFxZnTdiGtnA4cfSmjZJMviqSuZrQ=="],
+
+    "d3": ["d3@7.9.0", "", { "dependencies": { "d3-array": "3", "d3-axis": "3", "d3-brush": "3", "d3-chord": "3", "d3-color": "3", "d3-contour": "4", "d3-delaunay": "6", "d3-dispatch": "3", "d3-drag": "3", "d3-dsv": "3", "d3-ease": "3", "d3-fetch": "3", "d3-force": "3", "d3-format": "3", "d3-geo": "3", "d3-hierarchy": "3", "d3-interpolate": "3", "d3-path": "3", "d3-polygon": "3", "d3-quadtree": "3", "d3-random": "3", "d3-scale": "4", "d3-scale-chromatic": "3", "d3-selection": "3", "d3-shape": "3", "d3-time": "3", "d3-time-format": "4", "d3-timer": "3", "d3-transition": "3", "d3-zoom": "3" } }, "sha512-e1U46jVP+w7Iut8Jt8ri1YsPOvFpg46k+K8TpCb0P+zjCkjkPnV7WzfDJzMHy1LnA+wj5pLT1wjO901gLXeEhA=="],
+
+    "d3-array": ["d3-array@3.2.1", "", { "dependencies": { "internmap": "1 - 2" } }, "sha512-gUY/qeHq/yNqqoCKNq4vtpFLdoCdvyNpWoC/KNjhGbhDuQpAM9sIQQKkXSNpXa9h5KySs/gzm7R88WkUutgwWQ=="],
+
+    "d3-axis": ["d3-axis@3.0.0", "", {}, "sha512-IH5tgjV4jE/GhHkRV0HiVYPDtvfjHQlQfJHs0usq7M30XcSBvOotpmH1IgkcXsO/5gEQZD43B//fc7SRT5S+xw=="],
+
+    "d3-brush": ["d3-brush@3.0.0", "", { "dependencies": { "d3-dispatch": "1 - 3", "d3-drag": "2 - 3", "d3-interpolate": "1 - 3", "d3-selection": "3", "d3-transition": "3" } }, "sha512-ALnjWlVYkXsVIGlOsuWH1+3udkYFI48Ljihfnh8FZPF2QS9o+PzGLBslO0PjzVoHLZ2KCVgAM8NVkXPJB2aNnQ=="],
+
+    "d3-chord": ["d3-chord@3.0.1", "", { "dependencies": { "d3-path": "1 - 3" } }, "sha512-VE5S6TNa+j8msksl7HwjxMHDM2yNK3XCkusIlpX5kwauBfXuyLAtNg9jCp/iHH61tgI4sb6R/EIMWCqEIdjT/g=="],
+
+    "d3-color": ["d3-color@3.1.0", "", {}, "sha512-zg/chbXyeBtMQ1LbD/WSoW2DpC3I0mpmPdW+ynRTj/x2DAWYrIY7qeZIHidozwV24m4iavr15lNwIwLxRmOxhA=="],
+
+    "d3-contour": ["d3-contour@4.0.2", "", { "dependencies": { "d3-array": "^3.2.0" } }, "sha512-4EzFTRIikzs47RGmdxbeUvLWtGedDUNkTcmzoeyg4sP/dvCexO47AaQL7VKy/gul85TOxw+IBgA8US2xwbToNA=="],
+
+    "d3-delaunay": ["d3-delaunay@6.0.2", "", { "dependencies": { "delaunator": "5" } }, "sha512-IMLNldruDQScrcfT+MWnazhHbDJhcRJyOEBAJfwQnHle1RPh6WDuLvxNArUju2VSMSUuKlY5BGHRJ2cYyoFLQQ=="],
+
+    "d3-dispatch": ["d3-dispatch@3.0.1", "", {}, "sha512-rzUyPU/S7rwUflMyLc1ETDeBj0NRuHKKAcvukozwhshr6g6c5d8zh4c2gQjY2bZ0dXeGLWc1PF174P2tVvKhfg=="],
+
+    "d3-drag": ["d3-drag@3.0.0", "", { "dependencies": { "d3-dispatch": "1 - 3", "d3-selection": "3" } }, "sha512-pWbUJLdETVA8lQNJecMxoXfH6x+mO2UQo8rSmZ+QqxcbyA3hfeprFgIT//HW2nlHChWeIIMwS2Fq+gEARkhTkg=="],
+
+    "d3-dsv": ["d3-dsv@3.0.1", "", { "dependencies": { "commander": "7", "iconv-lite": "0.6", "rw": "1" }, "bin": { "csv2json": "bin/dsv2json.js", "csv2tsv": "bin/dsv2dsv.js", "dsv2dsv": "bin/dsv2dsv.js", "dsv2json": "bin/dsv2json.js", "json2csv": "bin/json2dsv.js", "json2dsv": "bin/json2dsv.js", "json2tsv": "bin/json2dsv.js", "tsv2csv": "bin/dsv2dsv.js", "tsv2json": "bin/dsv2json.js" } }, "sha512-UG6OvdI5afDIFP9w4G0mNq50dSOsXHJaRE8arAS5o9ApWnIElp8GZw1Dun8vP8OyHOZ/QJUKUJwxiiCCnUwm+Q=="],
+
+    "d3-ease": ["d3-ease@3.0.1", "", {}, "sha512-wR/XK3D3XcLIZwpbvQwQ5fK+8Ykds1ip7A2Txe0yxncXSdq1L9skcG7blcedkOX+ZcgxGAmLX1FrRGbADwzi0w=="],
+
+    "d3-fetch": ["d3-fetch@3.0.1", "", { "dependencies": { "d3-dsv": "1 - 3" } }, "sha512-kpkQIM20n3oLVBKGg6oHrUchHM3xODkTzjMoj7aWQFq5QEM+R6E4WkzT5+tojDY7yjez8KgCBRoj4aEr99Fdqw=="],
+
+    "d3-force": ["d3-force@3.0.0", "", { "dependencies": { "d3-dispatch": "1 - 3", "d3-quadtree": "1 - 3", "d3-timer": "1 - 3" } }, "sha512-zxV/SsA+U4yte8051P4ECydjD/S+qeYtnaIyAs9tgHCqfguma/aAQDjo85A9Z6EKhBirHRJHXIgJUlffT4wdLg=="],
+
+    "d3-format": ["d3-format@3.1.0", "", {}, "sha512-YyUI6AEuY/Wpt8KWLgZHsIU86atmikuoOmCfommt0LYHiQSPjvX2AcFc38PX0CBpr2RCyZhjex+NS/LPOv6YqA=="],
+
+    "d3-geo": ["d3-geo@3.1.0", "", { "dependencies": { "d3-array": "2.5.0 - 3" } }, "sha512-JEo5HxXDdDYXCaWdwLRt79y7giK8SbhZJbFWXqbRTolCHFI5jRqteLzCsq51NKbUoX0PjBVSohxrx+NoOUujYA=="],
+
+    "d3-hierarchy": ["d3-hierarchy@3.1.2", "", {}, "sha512-FX/9frcub54beBdugHjDCdikxThEqjnR93Qt7PvQTOHxyiNCAlvMrHhclk3cD5VeAaq9fxmfRp+CnWw9rEMBuA=="],
+
+    "d3-interpolate": ["d3-interpolate@3.0.1", "", { "dependencies": { "d3-color": "1 - 3" } }, "sha512-3bYs1rOD33uo8aqJfKP3JWPAibgw8Zm2+L9vBKEHJ2Rg+viTR7o5Mmv5mZcieN+FRYaAOWX5SJATX6k1PWz72g=="],
+
+    "d3-path": ["d3-path@3.1.0", "", {}, "sha512-p3KP5HCf/bvjBSSKuXid6Zqijx7wIfNW+J/maPs+iwR35at5JCbLUT0LzF1cnjbCHWhqzQTIN2Jpe8pRebIEFQ=="],
+
+    "d3-polygon": ["d3-polygon@3.0.1", "", {}, "sha512-3vbA7vXYwfe1SYhED++fPUQlWSYTTGmFmQiany/gdbiWgU/iEyQzyymwL9SkJjFFuCS4902BSzewVGsHHmHtXg=="],
+
+    "d3-quadtree": ["d3-quadtree@3.0.1", "", {}, "sha512-04xDrxQTDTCFwP5H6hRhsRcb9xxv2RzkcsygFzmkSIOJy3PeRJP7sNk3VRIbKXcog561P9oU0/rVH6vDROAgUw=="],
+
+    "d3-random": ["d3-random@3.0.1", "", {}, "sha512-FXMe9GfxTxqd5D6jFsQ+DJ8BJS4E/fT5mqqdjovykEB2oFbTMDVdg1MGFxfQW+FBOGoB++k8swBrgwSHT1cUXQ=="],
+
+    "d3-sankey": ["d3-sankey@0.12.3", "", { "dependencies": { "d3-array": "1 - 2", "d3-shape": "^1.2.0" } }, "sha512-nQhsBRmM19Ax5xEIPLMY9ZmJ/cDvd1BG3UVvt5h3WRxKg5zGRbvnteTyWAbzeSvlh3tW7ZEmq4VwR5mB3tutmQ=="],
+
+    "d3-scale": ["d3-scale@4.0.2", "", { "dependencies": { "d3-array": "2.10.0 - 3", "d3-format": "1 - 3", "d3-interpolate": "1.2.0 - 3", "d3-time": "2.1.1 - 3", "d3-time-format": "2 - 4" } }, "sha512-GZW464g1SH7ag3Y7hXjf8RoUuAFIqklOAq3MRl4OaWabTFJY9PN/E1YklhXLh+OQ3fM9yS2nOkCoS+WLZ6kvxQ=="],
+
+    "d3-scale-chromatic": ["d3-scale-chromatic@3.1.0", "", { "dependencies": { "d3-color": "1 - 3", "d3-interpolate": "1 - 3" } }, "sha512-A3s5PWiZ9YCXFye1o246KoscMWqf8BsD9eRiJ3He7C9OBaxKhAd5TFCdEx/7VbKtxxTsu//1mMJFrEt572cEyQ=="],
+
+    "d3-selection": ["d3-selection@3.0.0", "", {}, "sha512-fmTRWbNMmsmWq6xJV8D19U/gw/bwrHfNXxrIN+HfZgnzqTHp9jOmKMhsTUjXOJnZOdZY9Q28y4yebKzqDKlxlQ=="],
+
+    "d3-shape": ["d3-shape@3.2.0", "", { "dependencies": { "d3-path": "^3.1.0" } }, "sha512-SaLBuwGm3MOViRq2ABk3eLoxwZELpH6zhl3FbAoJ7Vm1gofKx6El1Ib5z23NUEhF9AsGl7y+dzLe5Cw2AArGTA=="],
+
+    "d3-time": ["d3-time@3.1.0", "", { "dependencies": { "d3-array": "2 - 3" } }, "sha512-VqKjzBLejbSMT4IgbmVgDjpkYrNWUYJnbCGo874u7MMKIWsILRX+OpX/gTk8MqjpT1A/c6HY2dCA77ZN0lkQ2Q=="],
+
+    "d3-time-format": ["d3-time-format@4.1.0", "", { "dependencies": { "d3-time": "1 - 3" } }, "sha512-dJxPBlzC7NugB2PDLwo9Q8JiTR3M3e4/XANkreKSUxF8vvXKqm1Yfq4Q5dl8budlunRVlUUaDUgFt7eA8D6NLg=="],
+
+    "d3-timer": ["d3-timer@3.0.1", "", {}, "sha512-ndfJ/JxxMd3nw31uyKoY2naivF+r29V+Lc0svZxe1JvvIRmi8hUsrMvdOwgS1o6uBHmiz91geQ0ylPP0aj1VUA=="],
+
+    "d3-transition": ["d3-transition@3.0.1", "", { "dependencies": { "d3-color": "1 - 3", "d3-dispatch": "1 - 3", "d3-ease": "1 - 3", "d3-interpolate": "1 - 3", "d3-timer": "1 - 3" }, "peerDependencies": { "d3-selection": "2 - 3" } }, "sha512-ApKvfjsSR6tg06xrL434C0WydLr7JewBB3V+/39RMHsaXTOG0zmt/OAXeng5M5LBm0ojmxJrpomQVZ1aPvBL4w=="],
+
+    "d3-zoom": ["d3-zoom@3.0.0", "", { "dependencies": { "d3-dispatch": "1 - 3", "d3-drag": "2 - 3", "d3-interpolate": "1 - 3", "d3-selection": "2 - 3", "d3-transition": "2 - 3" } }, "sha512-b8AmV3kfQaqWAuacbPuNbL6vahnOJflOhexLzMMNLga62+/nh0JzvJ0aO/5a5MVgUFGS7Hu1P9P03o3fJkDCyw=="],
+
+    "dagre-d3-es": ["dagre-d3-es@7.0.14", "", { "dependencies": { "d3": "^7.9.0", "lodash-es": "^4.17.21" } }, "sha512-P4rFMVq9ESWqmOgK+dlXvOtLwYg0i7u0HBGJER0LZDJT2VHIPAMZ/riPxqJceWMStH5+E61QxFra9kIS3AqdMg=="],
+
+    "dayjs": ["dayjs@1.11.23", "", {}, "sha512-QDTCU0M0MxR3hQfnlDJfwekQiaanm1ubOD231u73WBckQ/fsamwRLiE2GBz6D3a/xF1NgfiDLJjXBa1hYOYTtQ=="],
+
+    "debug": ["debug@4.4.3", "", { "dependencies": { "ms": "^2.1.3" }, "peerDependencies": { "supports-color": "*" }, "optionalPeers": ["supports-color"] }, "sha512-RGwwWnwQvkVfavKVt22FGLw+xYSdzARwm0ru6DhTVA3umU5hZc28V3kO4stgYryrTlLpuvgI9GiijltAjNbcqA=="],
+
+    "delaunator": ["delaunator@5.1.0", "", { "dependencies": { "robust-predicates": "^3.0.2" } }, "sha512-AGrQ4QSgssa1NGmWmLPqN5NY2KajF5MqxetNEO+o0n3ZwZZeTmt7bBnvzHWrmkZFxGgr4HdyFgelzgi06otLuQ=="],
+
+    "devtools-protocol": ["devtools-protocol@0.0.1704951", "", {}, "sha512-GQhQOs9u/Mvm1zMtJIH872JS4AskuZdUSsPNPk4ChahtWAUqgz6atEtIsMt+nO7MqF1Ic4HxII/k8Cu36JivNg=="],
+
+    "dompurify": ["dompurify@3.4.17", "", { "optionalDependencies": { "@types/trusted-types": "^2.0.7" } }, "sha512-B/pSlYVHQ58kqISD/yDjuJ1yfzI34m1gF4lAod2bwSRhiN4K5Cl3H8Af7hqB2PmTL911tdEudnnXn5FnhRoz0w=="],
+
+    "electron-to-chromium": ["electron-to-chromium@1.5.467", "", {}, "sha512-Nw9X371rtZmYcBSnEijnCDONILjs93biCZO34juC7MBOmK8E+GFnyD4T/WvyrlJkppul7oxg6TwvtKst9SODTw=="],
+
+    "elkjs": ["elkjs@0.9.3", "", {}, "sha512-f/ZeWvW/BCXbhGEf1Ujp29EASo/lk1FDnETgNKwJrsVvGZhUWCZyg3xLJjAsxfOmt8KjswHmI5EwCQcPMpOYhQ=="],
+
+    "emoji-regex": ["emoji-regex@10.6.0", "", {}, "sha512-toUI84YS5YmxW219erniWD0CIVOo46xGKColeNQRgOzDorgBi1v4D71/OFzgD9GO2UGKIv1C3Sp8DAn0+j5w7A=="],
+
+    "es-toolkit": ["es-toolkit@1.53.0", "", {}, "sha512-3+AYXp9fmJ/UhHBMYj2/U+RaUouMD90SzoItyDOB2Za7W6dB7fQApFGnZPl2MF6K8/Tv1koh1JyirSx/kju6Pw=="],
+
+    "esbuild": ["esbuild@0.25.12", "", { "optionalDependencies": { "@esbuild/aix-ppc64": "0.25.12", "@esbuild/android-arm": "0.25.12", "@esbuild/android-arm64": "0.25.12", "@esbuild/android-x64": "0.25.12", "@esbuild/darwin-arm64": "0.25.12", "@esbuild/darwin-x64": "0.25.12", "@esbuild/freebsd-arm64": "0.25.12", "@esbuild/freebsd-x64": "0.25.12", "@esbuild/linux-arm": "0.25.12", "@esbuild/linux-arm64": "0.25.12", "@esbuild/linux-ia32": "0.25.12", "@esbuild/linux-loong64": "0.25.12", "@esbuild/linux-mips64el": "0.25.12", "@esbuild/linux-ppc64": "0.25.12", "@esbuild/linux-riscv64": "0.25.12", "@esbuild/linux-s390x": "0.25.12", "@esbuild/linux-x64": "0.25.12", "@esbuild/netbsd-arm64": "0.25.12", "@esbuild/netbsd-x64": "0.25.12", "@esbuild/openbsd-arm64": "0.25.12", "@esbuild/openbsd-x64": "0.25.12", "@esbuild/openharmony-arm64": "0.25.12", "@esbuild/sunos-x64": "0.25.12", "@esbuild/win32-arm64": "0.25.12", "@esbuild/win32-ia32": "0.25.12", "@esbuild/win32-x64": "0.25.12" }, "bin": { "esbuild": "bin/esbuild" } }, "sha512-bbPBYYrtZbkt6Os6FiTLCTFxvq4tt3JKall1vRwshA3fdVztsLAatFaZobhkBC8/BrPetoa0oksYoKXoG4ryJg=="],
+
+    "escalade": ["escalade@3.2.0", "", {}, "sha512-WUj2qlxaQtO4g6Pq5c29GTcWGDyd8itL8zTlipgECz3JesAiiOKotd8JU6otB3PACgG6xkJUyVhboMS+bje/jA=="],
+
+    "fdir": ["fdir@6.5.0", "", { "peerDependencies": { "picomatch": "^3 || ^4" }, "optionalPeers": ["picomatch"] }, "sha512-tIbYtZbucOs0BRGqPJkshJUYdL+SDH7dVM8gjy+ERp3WAUjLEFJE+02kanyHtwjWOnwrKYBiwAmM0p4kLJAnXg=="],
+
+    "fsevents": ["fsevents@2.3.2", "", { "os": "darwin" }, "sha512-xiqMQR4xAeHTuB9uWm+fFRcIOgKBMiOBP+eXiyT7jsgVCq1bkVygt00oASowB7EdtpOHaaPgKt812P9ab+DDKA=="],
+
+    "gensync": ["gensync@1.0.0-beta.2", "", {}, "sha512-3hN7NaskYvMDLQY55gnW3NQ+mesEAepTqlg+VEbj7zzqEMBVNhzcGYYeqFo/TlYz6eQiFcp1HcsCZO+nGgS8zg=="],
+
+    "get-caller-file": ["get-caller-file@2.0.5", "", {}, "sha512-DyFP3BM/3YHTQOCUL/w0OZHR0lpKeGrxotcHWcqNEdnltqFwXVfhEBQ94eIo34AfQpo0rGki4cyIiftY06h2Fg=="],
+
+    "get-east-asian-width": ["get-east-asian-width@1.7.0", "", {}, "sha512-XjH1AECxf0giL2V1aU8vKyRR2ppRUb5c0EvT7zuJTokQ74bNo52zOtghqdWIqrhUD79fo3x0WfKZdOqxF6LG1Q=="],
+
+    "hachure-fill": ["hachure-fill@0.5.2", "", {}, "sha512-3GKBOn+m2LX9iq+JC1064cSFprJY4jL1jCXTcpnfER5HYE2l/4EfWSGzkPa/ZDBmYI0ZOEj5VHV/eKnPGkHuOg=="],
+
+    "highlight.js": ["highlight.js@11.12.0", "", {}, "sha512-nbfWpyRMcMrPMmDwJB+dhX/eiaPKtc2RB+0QZskqJ3WjRA/FDS0e9hZrx8EC/lbEv8gXy98FcDbNa/dspAaJMg=="],
+
+    "html-to-image": ["html-to-image@1.11.13", "", {}, "sha512-cuOPoI7WApyhBElTTb9oqsawRvZ0rHhaHwghRLlTuffoD1B2aDemlCruLeZrUIIdvG7gs9xeELEPm6PhuASqrg=="],
+
+    "iconv-lite": ["iconv-lite@0.6.3", "", { "dependencies": { "safer-buffer": ">= 2.1.2 < 3.0.0" } }, "sha512-4fCk79wshMdzMp2rH06qWrJE4iolqLhCUH+OiuIgU++RB0+94NlDL81atO7GX55uUKueo0txHNtvEyI6D7WdMw=="],
+
+    "import-meta-resolve": ["import-meta-resolve@4.2.0", "", {}, "sha512-Iqv2fzaTQN28s/FwZAoFq0ZSs/7hMAHJVX+w8PZl3cY19Pxk6jFFalxQoIfW2826i/fDLXv8IiEZRIT0lDuWcg=="],
+
+    "internmap": ["internmap@2.0.3", "", {}, "sha512-5Hh7Y1wQbvY5ooGgPbDaL5iYLAPzMTUrjMulskHLH6wnv/A+1q5rgEaiuqEjB+oxGXIVZs1FF+R/KPN3ZSQYYg=="],
+
+    "jotai": ["jotai@2.20.3", "", { "peerDependencies": { "@babel/core": ">=7.0.0", "@babel/template": ">=7.0.0", "@types/react": ">=17.0.0", "react": ">=17.0.0" }, "optionalPeers": ["@babel/core", "@babel/template", "@types/react", "react"] }, "sha512-N8L9FUbeGDP+0qNJw1FebOxt+5hk+jTOwUA2LlRE4C081jUcY6F1T/FSETp4DT2/INMtiSRZyNm2D+yZdzrSgA=="],
+
+    "js-tokens": ["js-tokens@4.0.0", "", {}, "sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ=="],
+
+    "jsesc": ["jsesc@3.1.0", "", { "bin": { "jsesc": "bin/jsesc" } }, "sha512-/sM3dO2FOzXjKQhJuo0Q173wf2KOo8t4I8vHy6lF9poUp7bKT0/NHE8fPX23PwfhnykfqnC2xRxOnVw5XuGIaA=="],
+
+    "json5": ["json5@2.2.3", "", { "bin": { "json5": "lib/cli.js" } }, "sha512-XmOWe7eyHYH14cLdVPoyg+GOH3rYX++KpzrylJwSW98t3Nk+U8XOl8FWKOgwtzdb8lXGf6zYwDUzeHMWfxasyg=="],
+
+    "katex": ["katex@0.16.47", "", { "dependencies": { "commander": "^8.3.0" }, "bin": { "katex": "cli.js" } }, "sha512-Eeo8Ys1doU1z+x8AZsPpQu+p/QcZBI5PeOo7QGQdy2x2m0MU/hYagBbGOmXwr5KVbEfVuWv9LpnQWeehogurjg=="],
+
+    "khroma": ["khroma@2.1.0", "", {}, "sha512-Ls993zuzfayK269Svk9hzpeGUKob/sIgZzyHYdjQoAdQetRKpOLj+k/QQQ/6Qi0Yz65mlROrfd+Ev+1+7dz9Kw=="],
+
+    "layout-base": ["layout-base@1.0.2", "", {}, "sha512-8h2oVEZNktL4BH2JCOI90iD1yXwL6iNW7KcCKT2QZgQJR2vbqDsldCTPRU9NifTCqHZci57XvQQ15YTu+sTYPg=="],
+
+    "lilconfig": ["lilconfig@3.1.4", "", {}, "sha512-zJZyBmQhArDRefuWTypZxwDpFDIYmrj8ypSBvwGD5P13Y95s6DjzKgu4DVdGbeQa5PDEsAOCAPNk4X+QOR006w=="],
+
+    "lodash-es": ["lodash-es@4.18.1", "", {}, "sha512-J8xewKD/Gk22OZbhpOVSwcs60zhd95ESDwezOFuA3/099925PdHJ7OFHNTGtajL3AlZkykD32HykiMo+BIBI8A=="],
+
+    "lru-cache": ["lru-cache@5.1.1", "", { "dependencies": { "yallist": "^3.0.2" } }, "sha512-KpNARQA3Iwv+jTA0utUVVbrh+Jlrr1Fv0e56GGzAFOXN7dk/FviaDW8LHmK52DlcH4WP2n6gI8vN1aesBFgo9w=="],
+
+    "marked": ["marked@16.4.2", "", { "bin": { "marked": "bin/marked.js" } }, "sha512-TI3V8YYWvkVf3KJe1dRkpnjs68JUPyEa5vjKrp1XEEJUAOaQc+Qj+L1qWbPd0SJuAdQkFU0h73sXXqwDYxsiDA=="],
+
+    "math-expression-evaluator": ["math-expression-evaluator@1.4.0", "", {}, "sha512-4vRUvPyxdO8cWULGTh9dZWL2tZK6LDBvj+OGHBER7poH9Qdt7kXEoj20wiz4lQUbUXQZFjPbe5mVDo9nutizCw=="],
+
+    "mermaid": ["mermaid@12.2.0", "", { "dependencies": { "@braintree/sanitize-url": "^7.1.2", "@iconify/utils": "^3.0.2", "@mermaid-js/parser": "^2.0.1", "@types/d3": "^7.4.3", "@upsetjs/venn.js": "^2.0.0", "chevrotain": "~13.2.0", "cytoscape": "^3.34.0", "cytoscape-cose-bilkent": "^4.1.0", "cytoscape-fcose": "^2.2.0", "d3": "^7.9.0", "d3-sankey": "^0.12.3", "dagre-d3-es": "7.0.14", "dayjs": "^1.11.21", "dompurify": "^3.4.12", "elkjs": "^0.9.3", "es-toolkit": "^1.45.1", "katex": "^0.18.0", "khroma": "^2.1.0", "marked": "^16.3.0", "roughjs": "^4.6.6", "stylis": "^4.3.6", "ts-dedent": "^2.2.0", "uuid": "^11.1.0 || ^12 || ^13 || ^14.0.0" } }, "sha512-w7nr/SFrLO7BaVTs3dQTvYSV6nYSBj0Yy9DjBhsIJtAcHqRzXSq4Pg32ujHZ/AdWsAMNEvvhbm5dt9E2tOiHzw=="],
+
+    "mitt": ["mitt@3.0.1", "", {}, "sha512-vKivATfr97l2/QBCYAkXYDbrIWPM2IIKEl7YPhjCvKlG3kE2gm+uBo6nEXK3M5/Ffh/FLpKExzOQ3JJoJGFKBw=="],
+
+    "modern-tar": ["modern-tar@0.8.6", "", {}, "sha512-LYSks0tNVqbtez/9OB0YFP6qLRSqkdAxJWOQpVaR67lNTbj2zNLyYpowkRMia5lXLCZKzxwoxkxH2MbbBR2aEg=="],
+
+    "ms": ["ms@2.1.3", "", {}, "sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA=="],
+
+    "nanoid": ["nanoid@3.3.20", "", { "bin": { "nanoid": "bin/nanoid.cjs" } }, "sha512-uKdg2G3GNCKQn9byYOpxbGqrT2fGO5KRt5J/8b3pok8rT6qxGWF6hxMyJiEYtAf+FVyYuD9hRaDqX5uPFYJ4ZQ=="],
+
+    "node-releases": ["node-releases@2.0.60", "", {}, "sha512-OmO8+GM1JUZqXET720VrJCwkjUCXmCMQm0Z3UDDRbfNLHS4NEAvY60j5jiFv0tkKw2PNNlqOLhahVmwJIOLDIQ=="],
+
+    "p-limit": ["p-limit@7.3.3", "", { "dependencies": { "yocto-queue": "^1.2.1" } }, "sha512-SKgVvDU5TNIxQ4r30U75BNLC6a+6GOEjngrk/ysM5+Zu3oJuk1SC5ApzIzY/7PjCEjoVPMWJ0zho/4QUiEB7TQ=="],
+
+    "package-manager-detector": ["package-manager-detector@1.9.0", "", {}, "sha512-zAMfbta9nPA8AKkA4WdmNAT8R8s6Dk0/xwPsqNnRidMFcLo1YkLuPDTgs2f64XdzS8vbLNnoJ+uUIkgbz7oRHA=="],
+
+    "path-data-parser": ["path-data-parser@0.1.0", "", {}, "sha512-NOnmBpt5Y2RWbuv0LMzsayp3lVylAHLPUTut412ZA3l+C4uw4ZVkQbjShYCQ8TCpUMdPapr4YjUqLYD6v68j+w=="],
+
+    "picocolors": ["picocolors@1.1.1", "", {}, "sha512-xceH2snhtb5M9liqDsmEw56le376mTZkEX/jEb/RxNFyegNul7eNslCXP9FDj/Lcu0X8KEyMceP2ntpaHrDEVA=="],
+
+    "picomatch": ["picomatch@4.0.7", "", {}, "sha512-qcJu88Q2IWqJsDD529JKMdwGm/dvInW4HvQnRwiH9JtihJvzGOscDtHE3x1pBKeUOTysQ8kVmLnJ2kJu7yhcGA=="],
+
+    "playwright": ["playwright@1.55.0", "", { "dependencies": { "playwright-core": "1.55.0" }, "optionalDependencies": { "fsevents": "2.3.2" }, "bin": { "playwright": "cli.js" } }, "sha512-sdCWStblvV1YU909Xqx0DhOjPZE4/5lJsIS84IfN9dAZfcl/CIZ5O8l3o0j7hPMjDvqoTF8ZUcc+i/GL5erstA=="],
+
+    "playwright-core": ["playwright-core@1.55.0", "", { "bin": { "playwright-core": "cli.js" } }, "sha512-GvZs4vU3U5ro2nZpeiwyb0zuFaqb9sUiAJuyrWpcGouD8y9/HLgGbNRjIph7zU9D3hnPaisMl9zG9CgFi/biIg=="],
+
+    "points-on-curve": ["points-on-curve@0.2.0", "", {}, "sha512-0mYKnYYe9ZcqMCWhUjItv/oHjvgEsfKvnUTg8sAtnHr3GVy7rGkXCb6d5cSyqrWqL4k81b9CPg3urd+T7aop3A=="],
+
+    "points-on-path": ["points-on-path@0.2.1", "", { "dependencies": { "path-data-parser": "0.1.0", "points-on-curve": "0.2.0" } }, "sha512-25ClnWWuw7JbWZcgqY/gJ4FQWadKxGWk+3kR/7kD0tCaDtPPMj7oHu2ToLaVhfpnHrZzYby2w6tUA0eOIuUg8g=="],
+
+    "postcss": ["postcss@8.5.32", "", { "dependencies": { "nanoid": "^3.3.20", "picocolors": "^1.1.1", "source-map-js": "^1.2.2" } }, "sha512-LJlKCCAUFKOuZxipUdYw1NzIITEsPcgyOG9LkvRJvuKj/bRzbuRY0ARXvL0pWGpsZvn8jku+LMep2eU0seHp8g=="],
+
+    "puppeteer": ["puppeteer@25.16.0", "", { "dependencies": { "@puppeteer/browsers": "3.2.6", "chromium-bidi": "157.0.8090-0", "devtools-protocol": "0.0.1704951", "lilconfig": "^3.1.3", "puppeteer-core": "25.16.0", "typed-query-selector": "^2.12.3" }, "bin": { "puppeteer": "lib/puppeteer/node/cli.js" } }, "sha512-LOr3reYnxAYYfQkpopz1fQnL0LdvqhpR5U2Fu+QnwzTX2gpVTHsn91UETo5NNC1md2/oC54Zu1ChBXgZDNSP1A=="],
+
+    "puppeteer-core": ["puppeteer-core@25.16.0", "", { "dependencies": { "@puppeteer/browsers": "3.2.6", "chromium-bidi": "157.0.8090-0", "devtools-protocol": "0.0.1704951", "typed-query-selector": "^2.12.3", "webdriver-bidi-protocol": "1.0.1", "ws": "^8.22.0" } }, "sha512-VA5Pf54N8shfopNkZZXCdiiwfnnY8ZJYAMqFQRhlH5mGUhfwf53Ar770GPtdpTDLUqvQeYpIBtC9/G2Jij2IJw=="],
+
+    "react": ["react@19.3.1", "", {}, "sha512-QNhWdt7nrgVWWQG58QuGsAR3jv3Hbe4mb4vz7w2csnHavciZJgda1CPNaldF6eVxv90ud3jUXpKlHL69gO38yw=="],
+
+    "react-aria": ["react-aria@3.53.1", "", { "dependencies": { "@internationalized/date": "^3.12.4", "@internationalized/number": "^3.6.9", "@internationalized/string": "^3.2.10", "@react-types/shared": "^3.37.0", "@swc/helpers": "^0.5.0", "aria-hidden": "^1.2.3", "clsx": "^2.0.0", "react-stately": "3.51.0", "use-sync-external-store": "^1.6.0" }, "peerDependencies": { "react": "^16.8.0 || ^17.0.0-rc.1 || ^18.0.0 || ^19.0.0-rc.1", "react-dom": "^16.8.0 || ^17.0.0-rc.1 || ^18.0.0 || ^19.0.0-rc.1" } }, "sha512-dikisyOjJd3D2fFrIDWmVWzqiLz5B86GzZv1zxs7xI4dVc0JIz/1Wa52I20gYvVL2WXeFXlygYsle/QcOMhtcg=="],
+
+    "react-dom": ["react-dom@19.3.1", "", { "dependencies": { "scheduler": "^0.28.0" }, "peerDependencies": { "react": "^19.3.1" } }, "sha512-Y0bARz53lhEC1NMCASs0/j+faB/zqt3R8hpvg1e8+61ZVJ4UL0UdC4cBbXfZMcIuhrfgeILTLe+ZeBCavQPtKQ=="],
+
+    "react-refresh": ["react-refresh@0.17.0", "", {}, "sha512-z6F7K9bV85EfseRCp2bzrpyQ0Gkw1uLoCel9XBVWPg/TjRj94SkJzUTGfOa4bs7iJvBWtQG0Wq7wnI0syw3EBQ=="],
+
+    "react-stately": ["react-stately@3.51.0", "", { "dependencies": { "@internationalized/date": "^3.12.4", "@internationalized/number": "^3.6.9", "@internationalized/string": "^3.2.10", "@react-types/shared": "^3.37.0", "@swc/helpers": "^0.5.0", "use-sync-external-store": "^1.6.0" }, "peerDependencies": { "react": "^16.8.0 || ^17.0.0-rc.1 || ^18.0.0 || ^19.0.0-rc.1" } }, "sha512-YJcmkAXu2XOQP97hO/qz/cC3qv9kni3oVhwBlxWr358BHePJUpY15XwL3YSRMKxYt4EkslPqAz11JRirMfANGw=="],
+
+    "react-use-measure": ["react-use-measure@2.1.7", "", { "peerDependencies": { "react": ">=16.13", "react-dom": ">=16.13" }, "optionalPeers": ["react-dom"] }, "sha512-KrvcAo13I/60HpwGO5jpW7E9DfusKyLPLvuHlUyP5zqnmAPhNc6qTRjUQrdTADl0lpPpDVU2/Gg51UlOGHXbdg=="],
+
+    "reduce-css-calc": ["reduce-css-calc@1.3.0", "", { "dependencies": { "balanced-match": "^0.4.2", "math-expression-evaluator": "^1.2.14", "reduce-function-call": "^1.0.1" } }, "sha512-0dVfwYVOlf/LBA2ec4OwQ6p3X9mYxn/wOl2xTcLwjnPYrkgEfPx3VI4eGCH3rQLlPISG5v9I9bkZosKsNRTRKA=="],
+
+    "reduce-function-call": ["reduce-function-call@1.0.3", "", { "dependencies": { "balanced-match": "^1.0.0" } }, "sha512-Hl/tuV2VDgWgCSEeWMLwxLZqX7OK59eU1guxXsRKTAyeYimivsKdtcV4fu3r710tpG5GmDKDhQ0HSZLExnNmyQ=="],
+
+    "robust-predicates": ["robust-predicates@3.0.3", "", {}, "sha512-NS3levdsRIUOmiJ8FZWCP7LG3QpJyrs/TE0Zpf1yvZu8cAJJ6QMW92H1c7kWpdIHo8RvmLxN/o2JXTKHp74lUA=="],
+
+    "rollup": ["rollup@4.66.0", "", { "dependencies": { "@types/estree": "1.0.9" }, "optionalDependencies": { "@napi-rs/lzma-linux-x64-gnu": "1.5.1", "@rollup/rollup-android-arm-eabi": "4.66.0", "@rollup/rollup-android-arm64": "4.66.0", "@rollup/rollup-darwin-arm64": "4.66.0", "@rollup/rollup-darwin-x64": "4.66.0", "@rollup/rollup-freebsd-arm64": "4.66.0", "@rollup/rollup-freebsd-x64": "4.66.0", "@rollup/rollup-linux-arm-gnueabihf": "4.66.0", "@rollup/rollup-linux-arm-musleabihf": "4.66.0", "@rollup/rollup-linux-arm64-gnu": "4.66.0", "@rollup/rollup-linux-arm64-musl": "4.66.0", "@rollup/rollup-linux-loong64-gnu": "4.66.0", "@rollup/rollup-linux-loong64-musl": "4.66.0", "@rollup/rollup-linux-ppc64-gnu": "4.66.0", "@rollup/rollup-linux-ppc64-musl": "4.66.0", "@rollup/rollup-linux-riscv64-gnu": "4.66.0", "@rollup/rollup-linux-riscv64-musl": "4.66.0", "@rollup/rollup-linux-s390x-gnu": "4.66.0", "@rollup/rollup-linux-x64-gnu": "4.66.0", "@rollup/rollup-linux-x64-musl": "4.66.0", "@rollup/rollup-openbsd-x64": "4.66.0", "@rollup/rollup-openharmony-arm64": "4.66.0", "@rollup/rollup-win32-arm64-msvc": "4.66.0", "@rollup/rollup-win32-ia32-msvc": "4.66.0", "@rollup/rollup-win32-x64-gnu": "4.66.0", "@rollup/rollup-win32-x64-msvc": "4.66.0", "fsevents": "~2.3.2" }, "bin": { "rollup": "dist/bin/rollup" } }, "sha512-Onq6/qO4ARhxIs+jYiHE0pYehadLyMECAiGEqQ+0/aWND3+2PmifJIIqBLYtuBODqHTlOUEQFtIVPyCy0Lck7A=="],
+
+    "roughjs": ["roughjs@4.6.6", "", { "dependencies": { "hachure-fill": "^0.5.2", "path-data-parser": "^0.1.0", "points-on-curve": "^0.2.0", "points-on-path": "^0.2.1" } }, "sha512-ZUz/69+SYpFN/g/lUlo2FXcIjRkSu3nDarreVdGGndHEBJ6cXPdKguS8JGxwj5HA5xIbVKSmLgr5b3AWxtRfvQ=="],
+
+    "rw": ["rw@1.3.3", "", {}, "sha512-PdhdWy89SiZogBLaw42zdeqtRJ//zFd2PgQavcICDUgJT5oW10QCRKbJ6bg4r0/UY2M6BWd5tkxuGFRvCkgfHQ=="],
+
+    "safer-buffer": ["safer-buffer@2.1.2", "", {}, "sha512-YZo3K82SD7Riyi0E1EQPojLz7kpepnSQI9IyPbHHg1XXXevb5dJI7tpyN2ADxGcQbHG7vcyRHk0cbwqcQriUtg=="],
+
+    "scheduler": ["scheduler@0.28.0", "", {}, "sha512-juorfCmIkIw8tT+p5BXSm6PJjQF/ycEYmKyzURCIt/RaZIhL+PulbQ9Yu2z1HdOJDdqDTlxA1+xKBmHXJsczAw=="],
+
+    "semver": ["semver@6.3.1", "", { "bin": { "semver": "bin/semver.js" } }, "sha512-BR7VvDCVHO+q2xBEWskxS6DJE1qRnb7DxzUrogb71CWoSficBxYsiAGd+Kl0mmq/MprG9yArRkyrQxTO6XjMzA=="],
+
+    "simple-icons": ["simple-icons@16.34.0", "", {}, "sha512-UTxKn0PVspk84B2hHF3Dqiqht1yDjJmDc/t4cO7PyCQxCMk6OjEu95pnpGjhLaGeQ4qBrGASbefTIe/+czrX7g=="],
+
+    "source-map-js": ["source-map-js@1.2.2", "", {}, "sha512-KGj/8Y43x35aZVDtt+J4mK1hoLGHULMYfSkODJNQjNDC3oW1PqPoxMwo0pLUsWM/UEGzON/NxeHywEfNXNP3Vw=="],
+
+    "string-width": ["string-width@8.3.0", "", { "dependencies": { "get-east-asian-width": "^1.5.0", "strip-ansi": "^7.1.2" } }, "sha512-ZbmZM0JCihQN91dWnxoipT2KOEyHqEyfRXUyjuRhW8b/xnqPDoq4gWEVApTVa9db2wN8mmoikgFBbjh71+cGeQ=="],
+
+    "strip-ansi": ["strip-ansi@7.2.0", "", { "dependencies": { "ansi-regex": "^6.2.2" } }, "sha512-yDPMNjp4WyfYBkHnjIRLfca1i6KMyGCtsVgoKe/z1+6vukgaENdgGBZt+ZmKPc4gavvEZ5OgHfHdrazhgNyG7w=="],
+
+    "stylis": ["stylis@4.4.0", "", {}, "sha512-5Z9ZpRzfuH6l/UAvCPAPUo3665Nk2wLaZU3x+TLHKVzIz33+sbJqbtrYoC3KD4/uVOr2Zp+L0LySezP9OHV9yA=="],
+
+    "tabbable": ["tabbable@6.5.1", "", {}, "sha512-dMCuwDUY6Noz3zVKLefBC4wq+aJV20yc7vWmM7uTNGwtQSFF5kX7OUIUsxuVajz/bdt5Xqdah3/0NLjth+cM5A=="],
+
+    "tailwind-merge": ["tailwind-merge@3.7.0", "", {}, "sha512-XPPUyAc+cvspz3lHTcR/QgPfW2A0lv/xQNIjX3HGhLR+Nq2lHaLq5MtTesHn8GUr3W3DguT2KT5x3NVgRtYwmA=="],
+
+    "tailwindcss": ["tailwindcss@4.3.3", "", {}, "sha512-gOhV3P7ufE62QDGg1zVaTgCR+EtPv92k2nIhVcVKcLmxT1sUBsQGhnZj175j+MqRt4zLF7ic+sCYjfhxMxj7YQ=="],
+
+    "tinyexec": ["tinyexec@1.3.1", "", {}, "sha512-GCvB3aoys96IuDFBMcTB46JOR6mdMtAToqwiW8JlWhsoh1mhHi/xn9ss/Dg7N555GiJyEt2qzoG/NHCwM6h1EA=="],
+
+    "tinyglobby": ["tinyglobby@0.2.17", "", { "dependencies": { "fdir": "^6.5.0", "picomatch": "^4.0.4" } }, "sha512-wXR/dYpcqKmfWpEdZjiKJOwCNFndD0DMnrW/cYjVGttEkBfVgcLFHoNrlj47mjOVic9yyNu65alsgF4NQyTa2g=="],
+
+    "ts-dedent": ["ts-dedent@2.3.0", "", {}, "sha512-JfJeIHke7y2egdGGgRAvpCwYFUsHlM2gPcrVOxFkznt/4uzQ7HFmvE63iFHVLBJNDuyDOQgijDK/tXH/f6Msjg=="],
+
+    "tslib": ["tslib@2.8.1", "", {}, "sha512-oJFu94HQb+KVduSUQL7wnpmqnfmLsOA/nAh6b6EH0wCEoK0/mPeXU6c3wKDV83MkOuHPRHtSXKKU99IBazS/2w=="],
+
+    "typed-query-selector": ["typed-query-selector@2.12.3", "", {}, "sha512-/dtuMZyutHLlrxWhhC1uib00ELUr2dZ8C9B8YzZYsJmeE3V56OxRblrSM2UaF142pcMtak7ehZ6+poWGeehNIg=="],
+
+    "typescript": ["typescript@5.9.3", "", { "bin": { "tsc": "bin/tsc", "tsserver": "bin/tsserver" } }, "sha512-jl1vZzPDinLr9eUt3J/t7V6FgNEw9QjvBPdysz9KfQDD41fQrC2Y4vKQdiaUpFT4bXlb1RHhLpp8wtm6M5TgSw=="],
+
+    "undici-types": ["undici-types@8.9.0", "", {}, "sha512-KTDyRTYX8sWmKXAikPHHSyc63CRPETMctyjKFupcC6OBLXT3xsN0e9aF7m+mIXutFWpUXuedtowG7iLOzp0kQg=="],
+
+    "update-browserslist-db": ["update-browserslist-db@1.3.4", "", { "dependencies": { "escalade": "^3.2.0", "picocolors": "^1.1.1" }, "peerDependencies": { "browserslist": ">= 4.21.0" }, "bin": { "update-browserslist-db": "cli.js" } }, "sha512-t8wonIOdQyOjtPd2VktlBu6QjTVTks6v8bSi7kd0r2Vll8TK1JYDZtRRdbmCHOAMphkZgrzK+L+vXK4pyZ8t4A=="],
+
+    "use-sync-external-store": ["use-sync-external-store@1.7.0", "", { "peerDependencies": { "react": "^16.8.0 || ^17.0.0 || ^18.0.0 || ^19.0.0" } }, "sha512-6L+EeigHMQhdaIPNIFUKwfWJSwWFQ8gJbJ2DLOs5sDIegTwR9fRxvnM3uciHKjIZhFz+KAv2emhWMRvDmMcY8A=="],
+
+    "uuid": ["uuid@14.0.3", "", { "bin": { "uuid": "dist-node/bin/uuid" } }, "sha512-Sc5u1VVln93y1Xnz4R+CunOZc7R9LUcTmhj7Rc7Eg3HVcf7rVn2FOoa812fe0W8p3jD7xeoGSYbfqCGGH2B6xw=="],
+
+    "vite": ["vite@6.4.5", "", { "dependencies": { "esbuild": "^0.25.0", "fdir": "^6.4.4", "picomatch": "^4.0.2", "postcss": "^8.5.3", "rollup": "^4.34.9", "tinyglobby": "^0.2.13" }, "optionalDependencies": { "fsevents": "~2.3.3" }, "peerDependencies": { "@types/node": "^18.0.0 || ^20.0.0 || >=22.0.0", "jiti": ">=1.21.0", "less": "*", "lightningcss": "^1.21.0", "sass": "*", "sass-embedded": "*", "stylus": "*", "sugarss": "*", "terser": "^5.16.0", "tsx": "^4.8.1", "yaml": "^2.4.2" }, "optionalPeers": ["@types/node", "jiti", "less", "lightningcss", "sass", "sass-embedded", "stylus", "sugarss", "terser", "tsx", "yaml"], "bin": { "vite": "bin/vite.js" } }, "sha512-4enwjFfi4IwtEh0w+jPzpLVOFQiPHmmzPxcHXQOyEur47o6u0jE573DmGpjA+7irXoMLYRZD5ZaFUEneS3abPg=="],
+
+    "webdriver-bidi-protocol": ["webdriver-bidi-protocol@1.0.1", "", {}, "sha512-WXWs/aXF2a6Al1Z2/V/7Gp2oPZOAAmHjJOTmv4KCXRJ122IMj3tSSMc6a4q3K4QOmhQbse/Ahr+oTVJOU2dUiw=="],
+
+    "wrap-ansi": ["wrap-ansi@9.0.2", "", { "dependencies": { "ansi-styles": "^6.2.1", "string-width": "^7.0.0", "strip-ansi": "^7.1.0" } }, "sha512-42AtmgqjV+X1VpdOfyTGOYRi0/zsoLqtXQckTmqTeybT+BDIbM/Guxo7x3pE2vtpr1ok6xRqM9OpBe+Jyoqyww=="],
+
+    "ws": ["ws@8.22.0", "", { "peerDependencies": { "bufferutil": "^4.0.1", "utf-8-validate": ">=5.0.2" }, "optionalPeers": ["bufferutil", "utf-8-validate"] }, "sha512-Ydggc987+RO0AnWtZ/7Wq9FtNvcrL1b/RO0ud9mWjUPgDrsAAwQSF51sm2hm1XofbU/4jkpGEsLFsZZxU+1DOg=="],
+
+    "y18n": ["y18n@5.0.8", "", {}, "sha512-0pfFzegeDWJHJIAmTLRP2DwHjdF5s7jo9tuztdQxAhINCdvS+3nGINqPd00AphqJR/0LhANUS6/+7SCb98YOfA=="],
+
+    "yallist": ["yallist@3.1.1", "", {}, "sha512-a4UGQaWPH59mOXUYnAG2ewncQS4i4F43Tv3JoAM+s2VDAmS9NsK8GpDMLrCHPksFT7h3K6TOoUNn2pb7RoXx4g=="],
+
+    "yargs": ["yargs@18.2.0", "", { "dependencies": { "cliui": "^9.0.1", "escalade": "^3.1.1", "get-caller-file": "^2.0.5", "string-width": "^8.2.1", "y18n": "^5.0.5", "yargs-parser": "^22.0.0" } }, "sha512-9OpKOLeaoNFecEp7P6iYbzze/5CqWoH7N3SMs/6y1XF4nMvFMspEGZzJ6uFi9MmQwXhyzqYoSEKO3tvA3Z/o2w=="],
+
+    "yargs-parser": ["yargs-parser@22.0.0", "", {}, "sha512-rwu/ClNdSMpkSrUb+d6BRsSkLUq1fmfsY6TOpYzTwvwkg1/NRG85KBy3kq++A8LKQwX6lsu+aWad+2khvuXrqw=="],
+
+    "yocto-queue": ["yocto-queue@1.2.2", "", {}, "sha512-4LCcse/U2MHZ63HAJVE+v71o7yOdIe4cZ70Wpf8D/IyjDKYQLV5GD46B+hSTjJsvV5PztjvHoU580EftxjDZFQ=="],
+
+    "zod": ["zod@4.6.7", "", {}, "sha512-g8W2D2kU6a8untc053fX1uVBKzM7yqAxW/3zwk83+6RyF2+SKOuV+c0wBDhUwzV1PaGapmZH+rmcUzPf+3CGwg=="],
+
+    "@headlessui/react/@floating-ui/react": ["@floating-ui/react@0.26.28", "", { "dependencies": { "@floating-ui/react-dom": "^2.1.2", "@floating-ui/utils": "^0.2.8", "tabbable": "^6.0.0" }, "peerDependencies": { "react": ">=16.8.0", "react-dom": ">=16.8.0" } }, "sha512-yORQuuAtVpiRjpMhdc0wJj06b9JFjrYF4qp96j++v2NBpbi6SEGF7donUJ3TMieerQ6qVkAv1tgr7L4r5roTqw=="],
+
+    "@types/d3/@types/d3-array": ["@types/d3-array@3.2.2", "", {}, "sha512-hOLWVbm7uRza0BYXpIIW5pxfrKe0W+D5lrFiAEYR+pb6w3N2SwSMaJbXdUfSEv+dT4MfHBLtn5js0LAWaO6otw=="],
+
+    "@types/d3/@types/d3-color": ["@types/d3-color@3.1.3", "", {}, "sha512-iO90scth9WAbmgv7ogoq57O9YpKmFBbmoEoCHDB2xMBY0+/KVrqAaCDyCE16dUspeOvIxFFRI+0sEtqDqy2b4A=="],
+
+    "@types/d3/@types/d3-delaunay": ["@types/d3-delaunay@6.0.4", "", {}, "sha512-ZMaSKu4THYCU6sV64Lhg6qjf1orxBthaC161plr5KuPHo3CNm8DTHiLw/5Eq2b6TsNP0W0iJrUOFscY6Q450Hw=="],
+
+    "@types/d3/@types/d3-format": ["@types/d3-format@3.0.4", "", {}, "sha512-fALi2aI6shfg7vM5KiR1wNJnZ7r6UuggVqtDA+xiEdPZQwy/trcQaHnwShLuLdta2rTymCNpxYTiMZX/e09F4g=="],
+
+    "@types/d3/@types/d3-geo": ["@types/d3-geo@3.1.1", "", { "dependencies": { "@types/geojson": "*" } }, "sha512-65Emv9fQiQQqphLlRkuQ5ypPsOmWPhtBGCMv61JDPEPMvsx+gzhGf74yw1a78xFKPj6zw4AgQICJoQv0vK9M2w=="],
+
+    "@types/d3/@types/d3-interpolate": ["@types/d3-interpolate@3.0.4", "", { "dependencies": { "@types/d3-color": "*" } }, "sha512-mgLPETlrpVV1YRJIglr4Ez47g7Yxjl1lj7YKsiMCb27VJH9W8NVM6Bb9d8kkpG/uAQS5AmbA48q2IAolKKo1MA=="],
+
+    "@types/d3/@types/d3-scale": ["@types/d3-scale@4.0.9", "", { "dependencies": { "@types/d3-time": "*" } }, "sha512-dLmtwB8zkAeO/juAMfnV+sItKjlsw2lKdZVVy6LRr0cBmegxSABiLEpGVmSJJ8O08i4+sGR6qQtb6WtuwJdvVw=="],
+
+    "@types/d3/@types/d3-shape": ["@types/d3-shape@3.2.0", "", { "dependencies": { "@types/d3-path": "*" } }, "sha512-kVd74ta9eof3eJOvbNd1vGKS/XERRyQbT26Og63hIsvDO84cjD5gEOhsXf26w3FSoNlPVz84DOFcKv/oou+fMw=="],
+
+    "@types/d3/@types/d3-time": ["@types/d3-time@3.0.4", "", {}, "sha512-yuzZug1nkAAaBlBBikKZTgzCeA+k1uy4ZFwWANOfKw5z5LRhV0gNA7gNkKm7HoK+HRN0wX3EkxGk0fpbWhmB7g=="],
+
+    "@types/d3/@types/d3-time-format": ["@types/d3-time-format@4.0.3", "", {}, "sha512-5xg9rC+wWL8kdDj153qZcsJ0FWiFt0J5RB6LYUNZjwSnesfblqrI/bJ1wBdJ8OQfncgbJG5+2F+qfqnqyzYxyg=="],
+
+    "@types/d3-contour/@types/d3-array": ["@types/d3-array@3.2.2", "", {}, "sha512-hOLWVbm7uRza0BYXpIIW5pxfrKe0W+D5lrFiAEYR+pb6w3N2SwSMaJbXdUfSEv+dT4MfHBLtn5js0LAWaO6otw=="],
+
+    "@types/d3-interpolate/@types/d3-color": ["@types/d3-color@3.1.3", "", {}, "sha512-iO90scth9WAbmgv7ogoq57O9YpKmFBbmoEoCHDB2xMBY0+/KVrqAaCDyCE16dUspeOvIxFFRI+0sEtqDqy2b4A=="],
+
+    "@types/d3-scale/@types/d3-time": ["@types/d3-time@3.0.4", "", {}, "sha512-yuzZug1nkAAaBlBBikKZTgzCeA+k1uy4ZFwWANOfKw5z5LRhV0gNA7gNkKm7HoK+HRN0wX3EkxGk0fpbWhmB7g=="],
+
+    "@types/d3-zoom/@types/d3-interpolate": ["@types/d3-interpolate@3.0.4", "", { "dependencies": { "@types/d3-color": "*" } }, "sha512-mgLPETlrpVV1YRJIglr4Ez47g7Yxjl1lj7YKsiMCb27VJH9W8NVM6Bb9d8kkpG/uAQS5AmbA48q2IAolKKo1MA=="],
+
+    "@zenuml/core/marked": ["marked@4.3.0", "", { "bin": { "marked": "bin/marked.js" } }, "sha512-PRsaiG84bK+AMvxziE/lCFss8juXjNaWzVbN5tXAm4XjeaS9NAHhop+PjQxz2A9h8Q4M/xGmzP8vqNwy6JeK0A=="],
+
+    "cliui/string-width": ["string-width@7.2.0", "", { "dependencies": { "emoji-regex": "^10.3.0", "get-east-asian-width": "^1.0.0", "strip-ansi": "^7.1.0" } }, "sha512-tsaTIkKW9b4N+AEj+SVA+WhJzV7/zMhcSu78mLKWSk7cXMOSHsBKFWUs0fWwq8QyK3MgJBQRX6Gbi4kYbdvGkQ=="],
+
+    "cytoscape-fcose/cose-base": ["cose-base@2.2.0", "", { "dependencies": { "layout-base": "^2.0.0" } }, "sha512-AzlgcsCbUMymkADOJtQm3wO9S3ltPfYOFD5033keQn9NJzIbtnZj+UdBJe7DYml/8TdbtHJW3j58SOnKhWY/5g=="],
+
+    "d3/d3-array": ["d3-array@3.2.4", "", { "dependencies": { "internmap": "1 - 2" } }, "sha512-tdQAmyA18i4J7wprpYq8ClcxZy3SC31QMeByyCFyRt7BVHdREQZ5lpzoe5mFEYZUWe+oq8HBvk9JjpibyEV4Jg=="],
+
+    "d3/d3-delaunay": ["d3-delaunay@6.0.4", "", { "dependencies": { "delaunator": "5" } }, "sha512-mdjtIZ1XLAM8bm/hx3WwjfHt6Sggek7qH043O8KEjDXN40xi3vx/6pYSVTwLjEgiXQTbvaouWKynLBiUZ6SK6A=="],
+
+    "d3/d3-format": ["d3-format@3.1.2", "", {}, "sha512-AJDdYOdnyRDV5b6ArilzCPPwc1ejkHcoyFarqlPqT7zRYjhavcT3uSrqcMvsgh2CgoPbK3RCwyHaVyxYcP2Arg=="],
+
+    "d3/d3-geo": ["d3-geo@3.1.1", "", { "dependencies": { "d3-array": "2.5.0 - 3" } }, "sha512-637ln3gXKXOwhalDzinUgY83KzNWZRKbYubaG+fGVuc/dxO64RRljtCTnf5ecMyE1RIdtqpkVcq0IbtU2S8j2Q=="],
+
+    "d3-contour/d3-array": ["d3-array@3.2.4", "", { "dependencies": { "internmap": "1 - 2" } }, "sha512-tdQAmyA18i4J7wprpYq8ClcxZy3SC31QMeByyCFyRt7BVHdREQZ5lpzoe5mFEYZUWe+oq8HBvk9JjpibyEV4Jg=="],
+
+    "d3-dsv/commander": ["commander@7.2.0", "", {}, "sha512-QrWXB+ZQSVPmIWIhtEO9H+gwHaMGYiF5ChvoJ+K9ZGHG/sVsa6yiesAD1GC/x46sET00Xlwo1u49RVVVzvcSkw=="],
+
+    "d3-geo/d3-array": ["d3-array@3.2.4", "", { "dependencies": { "internmap": "1 - 2" } }, "sha512-tdQAmyA18i4J7wprpYq8ClcxZy3SC31QMeByyCFyRt7BVHdREQZ5lpzoe5mFEYZUWe+oq8HBvk9JjpibyEV4Jg=="],
+
+    "d3-sankey/d3-array": ["d3-array@2.12.1", "", { "dependencies": { "internmap": "^1.0.0" } }, "sha512-B0ErZK/66mHtEsR1TkPEEkwdy+WDesimkM5gpZr5Dsg54BiTA5RXtYW5qTLIAcekaS9xfZrzBLF/OAkB3Qn1YQ=="],
+
+    "d3-sankey/d3-shape": ["d3-shape@1.3.7", "", { "dependencies": { "d3-path": "1" } }, "sha512-EUkvKjqPFUAZyOlhY5gzCxCeI0Aep04LwIRpsZ/mLFelJiUfnK56jo5JMDSE7yyP2kLSb6LtF+S5chMk7uqPqw=="],
+
+    "d3-scale/d3-array": ["d3-array@3.2.4", "", { "dependencies": { "internmap": "1 - 2" } }, "sha512-tdQAmyA18i4J7wprpYq8ClcxZy3SC31QMeByyCFyRt7BVHdREQZ5lpzoe5mFEYZUWe+oq8HBvk9JjpibyEV4Jg=="],
+
+    "d3-scale/d3-format": ["d3-format@3.1.2", "", {}, "sha512-AJDdYOdnyRDV5b6ArilzCPPwc1ejkHcoyFarqlPqT7zRYjhavcT3uSrqcMvsgh2CgoPbK3RCwyHaVyxYcP2Arg=="],
+
+    "d3-time/d3-array": ["d3-array@3.2.4", "", { "dependencies": { "internmap": "1 - 2" } }, "sha512-tdQAmyA18i4J7wprpYq8ClcxZy3SC31QMeByyCFyRt7BVHdREQZ5lpzoe5mFEYZUWe+oq8HBvk9JjpibyEV4Jg=="],
+
+    "katex/commander": ["commander@8.3.0", "", {}, "sha512-OkTL9umf+He2DZkUq8f8J9of7yL6RJKI24dVITBmNfZBmri9zYZQrKkuXiKhyfPSu8tUhnVBB1iKXevvnlR4Ww=="],
+
+    "mermaid/katex": ["katex@0.18.11", "", { "dependencies": { "commander": "^15.0.0" }, "bin": { "katex": "cli.js" } }, "sha512-yvyz/2VMKqoho/35Hat5w37wIEdWJ5ElVMidTAlWrxr5uW4aBGsEpveTmKh18/zw08v/7lGswCPon4OhqmqrTA=="],
+
+    "reduce-function-call/balanced-match": ["balanced-match@1.0.2", "", {}, "sha512-3oSeUO0TMV67hN1AmbXsK4yaqU7tjiHlbxRDZOpH0KW9+CeX4bRAaX0Anxt0tx2MrpRpWwQaPwIlISEJhYU5Pw=="],
+
+    "rollup/fsevents": ["fsevents@2.3.3", "", { "os": "darwin" }, "sha512-5xoDfX+fL7faATnagmWPpbFtwh/R77WmMMqqHGS65C3vvB0YHrgF+B1YmZ3441tMj5n63k0212XNoJwzlhffQw=="],
+
+    "vite/fsevents": ["fsevents@2.3.3", "", { "os": "darwin" }, "sha512-5xoDfX+fL7faATnagmWPpbFtwh/R77WmMMqqHGS65C3vvB0YHrgF+B1YmZ3441tMj5n63k0212XNoJwzlhffQw=="],
+
+    "wrap-ansi/string-width": ["string-width@7.2.0", "", { "dependencies": { "emoji-regex": "^10.3.0", "get-east-asian-width": "^1.0.0", "strip-ansi": "^7.1.0" } }, "sha512-tsaTIkKW9b4N+AEj+SVA+WhJzV7/zMhcSu78mLKWSk7cXMOSHsBKFWUs0fWwq8QyK3MgJBQRX6Gbi4kYbdvGkQ=="],
+
+    "@types/d3-zoom/@types/d3-interpolate/@types/d3-color": ["@types/d3-color@3.1.3", "", {}, "sha512-iO90scth9WAbmgv7ogoq57O9YpKmFBbmoEoCHDB2xMBY0+/KVrqAaCDyCE16dUspeOvIxFFRI+0sEtqDqy2b4A=="],
+
+    "cytoscape-fcose/cose-base/layout-base": ["layout-base@2.0.1", "", {}, "sha512-dp3s92+uNI1hWIpPGH3jK2kxE2lMjdXdr+DH8ynZHpd6PUlH6x6cbuXnoMmiNumznqaNO31xu9e79F0uuZ0JFg=="],
+
+    "d3-sankey/d3-array/internmap": ["internmap@1.0.1", "", {}, "sha512-lDB5YccMydFBtasVtxnZ3MRBHuaoE8GKsppq+EchKL2U4nK/DmEpPHNH8MZe5HkMtpSiTSOZwfN0tzYjO/lJEw=="],
+
+    "d3-sankey/d3-shape/d3-path": ["d3-path@1.0.9", "", {}, "sha512-VLaYcn81dtHVTjEHd8B+pbe9yHWpXKZUC87PzoFmsFrJqgFwDe/qxfp5MlfsfM1V5E/iVt0MmEbWQ7FVIXh/bg=="],
+  }
+}
diff --git a/cli/apple/resubmit.ts b/cli/apple/resubmit.ts
index 66d1944..6bd2406 100644
--- a/cli/apple/resubmit.ts
+++ b/cli/apple/resubmit.ts
@@ -20,7 +20,7 @@
 // `storebound apple submit --build <n>` (cli/apple/submit.ts) runs the same steps for a first submission: the version
 // is --version, else the one an open submission holds, else the editable one (Prepare for Submission or rejected).
 // Under `serve` (the desktop's owner action) the plan table is printed next to the --json result.
-import { sellsOn } from '../lib/config';
+import { macosSubmitSkips, sellsOn } from '../lib/config';
 import { changeText, RELEASE_TYPE_EDITABLE, releaseTypeChanges, wantedRelease } from '../lib/release-type';
 import type { Ctx } from '../lib/ctx';
 import { need } from '../lib/ctx';
@@ -86,6 +86,10 @@ export async function submitVersion(ctx: Ctx, mode: 'submit' | 'resubmit'): Prom
       && ((mode === 'submit' ? SUBMITTABLE_APP : REJECTED_APP).has(stateOf(x)) || back.has(platformOf(x)));
     platform = pickPlatform(every, fits, undefined, mode === 'submit' ? `a version to submit${want ? ` (${want})` : ''}` : `a rejected version${want ? ` (${want})` : ''}`);
   }
+  // the Mac app of a two-platform record may sell nothing and have no Game Center (apple.macos): its submission then
+  // carries the version and build only
+  const macSkips = macosSubmitSkips(config, platform);
+  if (macSkips.iaps && ids.length) { log(TAG, `${ids.length} in-app purchase(s) left out: ${macSkips.iaps}`); ids.length = 0; }
   const versions = await c.all(versionsPath(appId, platform));
   const open = await openSubmissions(c, appId, undefined, platform);
   const held = new Set(open.filter(s => s.state === 'UNRESOLVED_ISSUES').flatMap(s => s.items.filter(i => i.kind === 'appStoreVersion').map(i => i.versionId)));
@@ -125,7 +129,8 @@ export async function submitVersion(ctx: Ctx, mode: 'submit' | 'resubmit'): Prom
   // Game Center: a build with the entitlement needs the app's Game Center detail and the version's switch, else the
   // submission answers 409 STATE_ERROR.BUILD_INDICATES_GAME_CENTER_ENABLED (seen live); the same upsert as apple game-center
   const gcUse = gameCenterInUse(config, root);
-  const gc = gcUse.inUse ? await readGcSwitch(c, appId, v) : null;
+  if (gcUse.inUse && macSkips.gameCenter) log(TAG, `Game Center switch left alone: ${macSkips.gameCenter}`);
+  const gc = gcUse.inUse && !macSkips.gameCenter ? await readGcSwitch(c, appId, v) : null;
   const gcPlan = gc ? gcSwitchPlan(gc) : [];
   if (a.has('json')) {
     printJson({ dryRun: dry, releaseKind: kind.kind, releaseType: relChanges.length ? { changes: relChanges } : null, gameCenter: gcPlan, version: { id: v.id, versionString, platform, state: stateOf(v) }, build, submission: state.choice ?? null, resolve: marks, rows, skipped: plan.skipped, blockers });
diff --git a/cli/lib/config.ts b/cli/lib/config.ts
index cd3acd1..0afa907 100644
--- a/cli/lib/config.ts
+++ b/cli/lib/config.ts
@@ -1161,6 +1161,14 @@ export const appleName = (c: Pick<ShipConfig, 'app' | 'apple'>): string => c.app
 export const platformsOf = (c: Pick<ShipConfig, 'app' | 'apple' | 'play'>): Platform[] =>
   c.app.platforms ?? [...(c.apple ? ['ios' as const] : []), ...(c.play ? ['android' as const] : [])];
 
+/** What a macOS submission leaves out per apple.macos (noIap: the in-app purchases; no gameCenter: the version's Game
+ *  Center switch), with why; nulls for every other platform. Pure. */
+export function macosSubmitSkips(c: Pick<ShipConfig, 'apple'>, platform: string): { iaps: string | null; gameCenter: string | null } {
+  if (platform !== 'MAC_OS') return { iaps: null, gameCenter: null };
+  return { iaps: c.apple?.macos?.noIap ? 'apple.macos.noIap (the Mac app sells nothing)' : null,
+    gameCenter: c.apple?.macos?.gameCenter ? null : 'the Mac app has no Game Center (apple.macos.gameCenter is not true)' };
+}
+
 /** Is a catalog item (product / subscription) sold on this store? Pure. */
 export const sellsOn = (c: Pick<ShipConfig, 'app' | 'apple' | 'play'>, item: { platforms?: Platform[] }, store: 'apple' | 'play'): boolean => {
   const p: Platform = store === 'apple' ? 'ios' : 'android';
diff --git a/skills/store-pitfalls/SKILL.md b/skills/store-pitfalls/SKILL.md
index 578902c..ec81a14 100644
--- a/skills/store-pitfalls/SKILL.md
+++ b/skills/store-pitfalls/SKILL.md
@@ -1585,3 +1585,12 @@ that fails without the fix (see CONTRIBUTING.md).
   409 itself is treated the same way. `apple testflight distribute --submit-review` prints the line for testers not invited yet.
 - **Never:** retry the invitation in a loop, or report the added tester as a failure.
 - **Guard:** `installableBuild` / `noInstallableBuildHint` in `cli/lib/testflight.ts`, `tests/apple-release-gaps.test.ts`.
+
+## 128. macOS submission of a two-platform app planned the iOS in-app purchases and Game Center
+
+- **Symptom:** `apple resubmit --platform macos` (and `apple submit`) planned every consumable of the config and a
+  `gameCenterAppVersions` write for a Mac app that sells nothing and has no Game Center.
+- **Do:** set `apple.macos.noIap: true` and leave `apple.macos.gameCenter` unset; a macOS submission then carries the
+  version and build only, and the dry run names what it left out and why.
+- **Never:** attach iOS-only products to the Mac submission or switch Game Center on for a Mac app without it.
+- **Guard:** `macosSubmitSkips` in `cli/lib/config.ts`, `tests/resubmit.test.ts`.
diff --git a/tests/resubmit.test.ts b/tests/resubmit.test.ts
index 54fe538..fa068e6 100644
--- a/tests/resubmit.test.ts
+++ b/tests/resubmit.test.ts
@@ -215,6 +215,26 @@ describe('apple submit --build <n> (a first submission, the desktop owner action
     expect(shown(a)).toEqual([]);
   });
 
+  test('macOS with apple.macos.noIap and no Mac Game Center: version and build only, the skips named', async () => {
+    fresh();
+    s.asc.put({ type: 'appStoreVersions', id: 'ver-m', attributes: { versionString: '2.0.0', appVersionState: 'PREPARE_FOR_SUBMISSION', platform: 'MAC_OS' }, rels: { app: APP } });
+    s.asc.put({ type: 'builds', id: 'b-13', attributes: { version: '13', processingState: 'VALID', usesNonExemptEncryption: false }, rels: { app: APP } });
+    const p = project({ ...ONE, apple: { ...ONE.apple!, macos: { noIap: true } } });
+    const a = s.calls.length;
+    const r = await capture(() => appleSubmit(p.ctx(['--build', '13', '--platform', 'macos'])));
+    expect(r.out).toContain('1 in-app purchase(s) left out: apple.macos.noIap');
+    expect(r.out).not.toContain('com.example.notes.gems');
+    expect(r.out).toMatch(/app version 2\.0\.0/);
+    expect(shown(a)).toEqual([]);
+    expect(s.calls.slice(a).some(c => /gameCenter/.test(c.path))).toBe(false);
+  });
+  test('macosSubmitSkips: only MAC_OS, gameCenter true keeps the switch', async () => {
+    const { macosSubmitSkips } = await import('../cli/lib/config');
+    expect(macosSubmitSkips({ apple: { ...ONE.apple!, macos: { noIap: true } } }, 'IOS')).toEqual({ iaps: null, gameCenter: null });
+    expect(macosSubmitSkips({ apple: { ...ONE.apple!, macos: { gameCenter: true } } }, 'MAC_OS')).toEqual({ iaps: null, gameCenter: null });
+    expect(macosSubmitSkips({ apple: ONE.apple! }, 'MAC_OS').gameCenter).toContain('no Game Center');
+  });
+
   test('--yes: build attached, one draft with the version and the IAP, submitted; a re-run sends nothing', async () => {
     fresh();
     const p = project(ONE);

From 83d351cf42b16b3e752d9325cd485b000ff92532 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Sun, 8 Nov 2026 02:01:11 +0700
Subject: [PATCH 100/126] storebound 0.8.68: version in package.json and every
 copy, CHANGELOG 0.8.68 section

---
 .claude-plugin/marketplace.json        | 2 +-
 .claude-plugin/plugin.json             | 2 +-
 .codex-plugin/plugin.json              | 2 +-
 CHANGELOG.md                           | 2 ++
 apps/desktop/package.json              | 2 +-
 apps/desktop/src-tauri/Cargo.lock      | 2 +-
 apps/desktop/src-tauri/Cargo.toml      | 2 +-
 apps/desktop/src-tauri/tauri.conf.json | 2 +-
 gemini-extension.json                  | 2 +-
 package.json                           | 2 +-
 10 files changed, 11 insertions(+), 9 deletions(-)

diff --git a/.claude-plugin/marketplace.json b/.claude-plugin/marketplace.json
index d7c9e2f..3462bd3 100644
--- a/.claude-plugin/marketplace.json
+++ b/.claude-plugin/marketplace.json
@@ -9,7 +9,7 @@
       "name": "storebound",
       "source": ".",
       "description": "Take a mobile app or game from nothing to Submit for review on both stores: skills for every store step and questionnaire plus the storebound CLI and MCP server.",
-      "version": "0.8.67",
+      "version": "0.8.68",
       "category": "development",
       "tags": [
         "mobile",
diff --git a/.claude-plugin/plugin.json b/.claude-plugin/plugin.json
index f107b02..fe9a02b 100644
--- a/.claude-plugin/plugin.json
+++ b/.claude-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.67",
+  "version": "0.8.68",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/.codex-plugin/plugin.json b/.codex-plugin/plugin.json
index c36badf..2af4967 100644
--- a/.codex-plugin/plugin.json
+++ b/.codex-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.67",
+  "version": "0.8.68",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 978d68e..4f32a40 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,8 @@
 
 ## Unreleased
 
+## 0.8.68 · 2026-11-07
+
 - Desktop app: `storebound` works in a terminal with only the app installed. On every start the app puts a launcher for its own CLI on the PATH (Windows: `%LOCALAPPDATA%\storebound\bin`, added to the user PATH once; macOS / Linux: `~/.local/bin`, added to `~/.zprofile` / `~/.profile` when missing). An npm / bun install stays first, a file that is not the app's launcher is never overwritten, AppImage runs skip it, `STOREBOUND_NO_CLI_SHIM=1` turns it off.
 - `apple resubmit` / `apple submit --platform macos`: `apple.macos.noIap` leaves every in-app purchase out of the macOS submission and, without `apple.macos.gameCenter: true`, the Game Center switch is not touched (no `gameCenterAppVersions` call); the dry run names what it left out and why (pitfalls #128).
 
diff --git a/apps/desktop/package.json b/apps/desktop/package.json
index cd3f783..5fd0f5f 100644
--- a/apps/desktop/package.json
+++ b/apps/desktop/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@storebound/desktop",
-  "version": "0.8.67",
+  "version": "0.8.68",
   "private": true,
   "license": "MIT",
   "type": "module",
diff --git a/apps/desktop/src-tauri/Cargo.lock b/apps/desktop/src-tauri/Cargo.lock
index b59f665..c93e9ad 100644
--- a/apps/desktop/src-tauri/Cargo.lock
+++ b/apps/desktop/src-tauri/Cargo.lock
@@ -4096,7 +4096,7 @@ checksum = "a2eb9349b6444b326872e140eb1cf5e7c522154d69e7a0ffb0fb81c06b37543f"
 
 [[package]]
 name = "storebound-desktop"
-version = "0.8.67"
+version = "0.8.68"
 dependencies = [
  "base64 0.22.1",
  "getrandom 0.3.4",
diff --git a/apps/desktop/src-tauri/Cargo.toml b/apps/desktop/src-tauri/Cargo.toml
index a0d6f88..994394c 100644
--- a/apps/desktop/src-tauri/Cargo.toml
+++ b/apps/desktop/src-tauri/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "storebound-desktop"
-version = "0.8.67"
+version = "0.8.68"
 description = "storebound desktop: every game's releases on both stores in one window"
 license = "MIT"
 edition = "2021"
diff --git a/apps/desktop/src-tauri/tauri.conf.json b/apps/desktop/src-tauri/tauri.conf.json
index 4f84fdb..dcb7aad 100644
--- a/apps/desktop/src-tauri/tauri.conf.json
+++ b/apps/desktop/src-tauri/tauri.conf.json
@@ -2,7 +2,7 @@
   "$schema": "https://schema.tauri.app/config/2",
   "productName": "storebound",
   "mainBinaryName": "storebound-desktop",
-  "version": "0.8.67",
+  "version": "0.8.68",
   "identifier": "dev.storebound.desktop",
   "build": {
     "frontendDist": "../dist",
diff --git a/gemini-extension.json b/gemini-extension.json
index 92aa54d..0f25eb6 100644
--- a/gemini-extension.json
+++ b/gemini-extension.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.67",
+  "version": "0.8.68",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "contextFileName": "GEMINI.md",
   "mcpServers": {
diff --git a/package.json b/package.json
index f5d0387..70d4818 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.67",
+  "version": "0.8.68",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every store questionnaire (incl. account deletion and App Review demo accounts), privacy, icons, screenshots and previews, TestFlight. After launch: crash vitals, review replies, price sheets, analytics and Product Page Optimization. One config, a CLI (Node 20+ or Bun), an MCP server and Agent Skills for your AI coding agent.",
   "license": "MIT",
   "author": "CRTkafa",

From 9c001d1ca9df1e0590c7a446429d6f5f027514e1 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Sun, 8 Nov 2026 02:18:24 +0700
Subject: [PATCH 101/126] play: old testing builds below production listed with
 their replace command (status, validate); 'Not live yet' instead of 'In
 review'; commit redone without changesNotSentForReview on the auto-send 400;
 pitfalls #129

---
 CHANGELOG.md                            |  2 ++
 apps/desktop/src/i18n/en.ts             |  3 +-
 apps/desktop/src/i18n/tr.ts             |  3 +-
 apps/desktop/src/ui/kit.tsx             |  2 +-
 cli/lib/portfolio.ts                    |  6 +++-
 cli/lib/validate-rules.ts               |  2 ++
 cli/play/client.ts                      | 14 ++++++---
 cli/play/old-builds.ts                  | 42 +++++++++++++++++++++++++
 cli/play/review-pending.ts              |  8 +++++
 cli/play/status.ts                      |  4 ++-
 skills/store-pitfalls/SKILL.md          | 16 ++++++++++
 tests/play-old-builds.test.ts           | 31 ++++++++++++++++++
 tests/play-public-version-match.test.ts | 12 +++----
 13 files changed, 130 insertions(+), 15 deletions(-)
 create mode 100644 cli/play/old-builds.ts
 create mode 100644 tests/play-old-builds.test.ts

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 4f32a40..92bb873 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,8 @@
 
 ## Unreleased
 
+- Play: `play status` and `validate` list every build still active on a testing track below the production build, with the `play release --version-code <n> --<track> completed` that replaces it (an old build with a policy issue, e.g. READ_MEDIA_IMAGES, blocks Send changes for review for the whole app). A completed production release the store page does not show yet reads "Not live yet: in review or blocked before review" instead of "In review" (CLI and desktop). A commit with `--not-sent-for-review` that Play answers with 400 "Changes are sent for review automatically" is redone without the parameter (pitfalls #129).
+
 ## 0.8.68 · 2026-11-07
 
 - Desktop app: `storebound` works in a terminal with only the app installed. On every start the app puts a launcher for its own CLI on the PATH (Windows: `%LOCALAPPDATA%\storebound\bin`, added to the user PATH once; macOS / Linux: `~/.local/bin`, added to `~/.zprofile` / `~/.profile` when missing). An npm / bun install stays first, a file that is not the app's launcher is never overwritten, AppImage runs skip it, `STOREBOUND_NO_CLI_SHIM=1` turns it off.
diff --git a/apps/desktop/src/i18n/en.ts b/apps/desktop/src/i18n/en.ts
index b34f6bb..181d7c2 100644
--- a/apps/desktop/src/i18n/en.ts
+++ b/apps/desktop/src/i18n/en.ts
@@ -153,7 +153,8 @@ export const en = {
   'phase.releasedUnknown': "Couldn't check the store page",
   'phase.pageUnknown': "Couldn't check the store page",
   'phase.pageStale': "couldn't check the store page, as of {when}",
-  'phase.reviewLive': 'In review (live: {version})',
+  'phase.reviewLive': 'Not live yet (live: {version}): in review or blocked before review',
+  'phase.playPending': 'Not live yet: in review or blocked before review',
   'roll.publishReady': 'If the release is approved, publish it in Publishing overview ("Publish N changes"). The agent prepares it with `{cmd}`; the final press is for the owner.',
   'roll.publishOpen': 'Open Publishing overview',
   'phase.reviewManaged': 'In review / ready to publish (managed publishing)',
diff --git a/apps/desktop/src/i18n/tr.ts b/apps/desktop/src/i18n/tr.ts
index 03dc74d..417f0dd 100644
--- a/apps/desktop/src/i18n/tr.ts
+++ b/apps/desktop/src/i18n/tr.ts
@@ -155,7 +155,8 @@ export const tr: Record<keyof typeof en, string> = {
   'phase.releasedUnknown': 'Mağaza sayfası kontrol edilemedi',
   'phase.pageUnknown': 'Mağaza sayfası kontrol edilemedi',
   'phase.pageStale': 'mağaza sayfası kontrol edilemedi, {when} itibarıyla',
-  'phase.reviewLive': 'İncelemede (yayında: {version})',
+  'phase.reviewLive': 'Henüz yayında değil (yayında: {version}): incelemede ya da incelemeden önce takıldı',
+  'phase.playPending': 'Henüz yayında değil: incelemede ya da incelemeden önce takıldı',
   'roll.publishReady': 'Sürüm onaylandıysa Yayınlama özetinde yayınlayın ("Publish N changes"). Ajan `{cmd}` ile hazırlar; son basış sahibine aittir.',
   'roll.publishOpen': 'Yayınlama özetini aç',
   'phase.reviewManaged': 'İncelemede / yayına hazır (yönetilen yayınlama)',
diff --git a/apps/desktop/src/ui/kit.tsx b/apps/desktop/src/ui/kit.tsx
index d118760..6e58bff 100644
--- a/apps/desktop/src/ui/kit.tsx
+++ b/apps/desktop/src/ui/kit.tsx
@@ -25,7 +25,7 @@ export function phaseLabel(r: StoreRelease | null | undefined): { text: string;
   const stale = r.pageStaleAt ? ` · ${t('phase.pageStale', { when: ago(r.pageStaleAt) })}` : '';
   if (r.store === 'android' && r.phase === 'released') return { text: t('phase.pageUnknown') + stale, tone: 'neutral' };
   if (r.store === 'android' && (r.phase === 'review' || r.phase === 'sent'))
-    return { text: (r.managed ? t('phase.reviewManaged') : r.liveVersion ? t('phase.reviewLive', { version: r.liveVersion }) : t('phase.review')) + stale, tone: 'warn' };
+    return { text: (r.managed ? t('phase.reviewManaged') : r.liveVersion ? t('phase.reviewLive', { version: r.liveVersion }) : t('phase.playPending')) + stale, tone: 'warn' };
   if (r.store === 'android' && r.phase === 'live' && stale) return { text: t('phase.live') + stale, tone: 'ok' };
   if (r.phase === 'testing' && r.track) return { text: `${t('phase.testing')} · ${r.track}`, tone: 'info' };
   return { text: t(`phase.${r.phase}`), tone: PHASE_TONE[r.phase] };
diff --git a/cli/lib/portfolio.ts b/cli/lib/portfolio.ts
index ae906e6..8448f5f 100644
--- a/cli/lib/portfolio.ts
+++ b/cli/lib/portfolio.ts
@@ -161,11 +161,15 @@ export function playReleases(data: unknown): StoreRelease[] {
   return out;
 }
 
+/** A completed Play production release the store page does not show yet. The API has no review state: it may be in
+ *  review, or blocked before review (an old build on another track with a policy issue, pitfall 129). Never "In review". */
+export const PLAY_NOT_LIVE = 'Not live yet: in review or blocked before review (the API cannot tell; see Publishing overview)';
+
 /** Plain words for a Play release's phase, decided from the store page (CLI text; the desktop has the same words in
  *  i18n, apps/desktop/src/ui/kit.tsx phaseLabel). */
 export function playReleaseLabel(r: StoreRelease): string {
   const base = ((): string => {
-    if (r.phase === 'review' || r.phase === 'sent') return r.managed ? 'In review / ready to publish (managed publishing)' : r.liveVersion ? `In review (live: ${r.liveVersion})` : 'In review';
+    if (r.phase === 'review' || r.phase === 'sent') return r.managed ? 'In review / ready to publish (managed publishing)' : r.liveVersion ? `${PLAY_NOT_LIVE} (live: ${r.liveVersion})` : PLAY_NOT_LIVE;
     if (r.phase === 'released') return "Couldn't check the store page";
     if (r.phase === 'live') return 'Live';
     if (r.phase === 'rollout') return `Rolling out ${Math.round((r.fraction ?? 0) * 1000) / 10}%`;
diff --git a/cli/lib/validate-rules.ts b/cli/lib/validate-rules.ts
index ad3593b..f7854e5 100644
--- a/cli/lib/validate-rules.ts
+++ b/cli/lib/validate-rules.ts
@@ -1,6 +1,7 @@
 // Store readiness rules for `storebound validate`. Pure: the command collects a snapshot from both APIs (read-only),
 // these functions turn it into an ordered list of findings. Order = the order you would fix things in.
 
+import { oldTrackBuilds } from '../play/old-builds';
 import { consoleLink, consoleUrl } from './console-links';
 import { describePending, type Pending, repairable } from '../apple/screenshot-health';
 import { type FixAction, fixAppleListing, fixPlayListing, fixReviewDetails } from './fix-actions';
@@ -409,6 +410,7 @@ export function playRules(s: PlaySnapshot): Finding[] {
     if (r.status === 'halted') add('warn', 'tracks', `${t.track}: release ${r.versionCodes.join(',')} is halted`, 'storebound play rollout --resume (owner)');
     if (r.status === 'inProgress') add('ok', 'tracks', `${t.track}: rollout ${Math.round((r.userFraction ?? 0) * 100)}% of ${r.versionCodes.join(',')}`);
   }
+  for (const o of oldTrackBuilds(s.tracks)) add('warn', 'old-builds', `${o.track}: old build ${o.versionCodes.join(',')} (${o.status}) is still active below production ${o.productionCode}; Play reviews it with every submission and a policy issue in it (e.g. READ_MEDIA_IMAGES / READ_MEDIA_VIDEO) blocks Send changes for review (pitfall 129)`, `storebound play release --version-code ${o.productionCode} ${['internal','alpha','beta'].includes(o.track) ? '--' + o.track : '--track ' + o.track} completed`);
   if (anyRelease && !f.some(x => x.code === 'tracks')) add('ok', 'tracks', s.tracks.filter(t => t.releases.length).map(t => `${t.track}: ${t.releases.map(r => r.status).join('/')}`).join(', '));
 
   const prods = new Map(s.products.map(p => [p.productId, p] as const));
diff --git a/cli/play/client.ts b/cli/play/client.ts
index 81239dd..290b2ea 100644
--- a/cli/play/client.ts
+++ b/cli/play/client.ts
@@ -7,7 +7,7 @@ import { noteGoogle } from '../lib/quota';
 import { AmbiguousWriteError, isAmbiguous, retrySafe } from '../lib/upsert';
 import * as rt from '../lib/rt';
 import { withMachineLock } from '../lib/lock';
-import { clearPending, isReviewRefused, notSentMessage, publishingUrl, recordPending, withNotSent } from './review-pending';
+import { clearPending, isAutoSendOnly, isReviewRefused, notSentMessage, publishingUrl, recordPending, withNotSent } from './review-pending';
 
 /** A read's edit is gone: replaced by a newer edit of the app, committed elsewhere or expired. */
 export const EDIT_GONE = /Edit has been deleted|editAlreadyCommitted|already been committed|edit.*(expired|not found)|outside of this Edit/i;
@@ -118,9 +118,15 @@ export async function playClient(root: string, packageName: string) {
           }
         };
         try { await commit(); } catch (err) {
-          if (notSent || !isReviewRefused(err)) throw err;
-          refused();
-          await commit();
+          if (notSent && isAutoSendOnly(err)) {
+            notSent = false;
+            log('play', 'Play answered "Changes are sent for review automatically" (managed publishing is off): committing again without changesNotSentForReview; Play sends the changes for review itself');
+            await commit();
+          } else {
+            if (notSent || !isReviewRefused(err)) throw err;
+            refused();
+            await commit();
+          }
         }
         openEdit = null;
         log('play', `edit ${id} committed${notSent ? ' with changesNotSentForReview=true' : ''}`);
diff --git a/cli/play/old-builds.ts b/cli/play/old-builds.ts
new file mode 100644
index 0000000..5b039ec
--- /dev/null
+++ b/cli/play/old-builds.ts
@@ -0,0 +1,42 @@
+// Builds still active on a testing track below the production build (pitfall 129). Play reviews every active build
+// with each submission: a policy issue in an old one (a media permission it asked for, "Use alternative system
+// pickers") blocks "Send changes for review" for the whole app, while the API still reads production as completed.
+// The Developer API cannot read a bundle's permissions, so each old build is named with the command that replaces it.
+// Pure.
+
+export interface TrackLike { track: string; releases?: { name?: string; versionCodes?: string[]; status: string }[] }
+export interface OldBuild { track: string; versionCodes: number[]; name: string | null; status: string; productionCode: number }
+
+/** Permissions Play reviews as policy-sensitive (Photo and video permissions, All files access). */
+export const SENSITIVE_PERMISSIONS = ['READ_MEDIA_IMAGES', 'READ_MEDIA_VIDEO', 'READ_EXTERNAL_STORAGE', 'MANAGE_EXTERNAL_STORAGE', 'WRITE_EXTERNAL_STORAGE'];
+
+const ACTIVE = new Set(['completed', 'inProgress', 'halted']);
+const codes = (r: { versionCodes?: string[] }): number[] => (r.versionCodes ?? []).map(Number).filter(Number.isFinite);
+
+export function oldTrackBuilds(tracks: TrackLike[]): OldBuild[] {
+  const prod = tracks.find(t => t.track === 'production');
+  const prodCodes = (prod?.releases ?? []).filter(r => ACTIVE.has(r.status)).flatMap(codes);
+  if (!prodCodes.length) return [];
+  const productionCode = Math.max(...prodCodes);
+  const out: OldBuild[] = [];
+  for (const t of tracks) {
+    if (t.track === 'production') continue;
+    for (const r of t.releases ?? []) {
+      const cs = codes(r);
+      if (!ACTIVE.has(r.status) || !cs.length || Math.max(...cs) >= productionCode) continue;
+      out.push({ track: t.track, versionCodes: cs, name: r.name ?? null, status: r.status, productionCode });
+    }
+  }
+  return out;
+}
+
+/** The track flag of `play release` for a track name (custom closed tracks go by --track). */
+const trackFlag = (track: string): string => (['internal', 'alpha', 'beta'].includes(track) ? `--${track}` : `--track ${track}`);
+
+export function oldBuildLines(old: OldBuild[]): string[] {
+  if (!old.length) return [];
+  return [
+    `  old builds still active (${old.length}): Play reviews them with every submission; a policy issue in one (e.g. ${SENSITIVE_PERMISSIONS.slice(0, 2).join(' / ')}) blocks Send changes for review. The API cannot read their permissions:`,
+    ...old.map(o => `    ${o.track} [${o.versionCodes.join(',')}] ${o.name ?? ''} ${o.status} -> replace: storebound play release --version-code ${o.productionCode} ${trackFlag(o.track)} completed`),
+  ];
+}
diff --git a/cli/play/review-pending.ts b/cli/play/review-pending.ts
index 2bb927d..a7fc809 100644
--- a/cli/play/review-pending.ts
+++ b/cli/play/review-pending.ts
@@ -25,6 +25,14 @@ export function isReviewRefused(err: unknown): boolean {
   return reasons.every(r => /badRequest|invalid|failedPrecondition|precondition/i.test(r));
 }
 
+/** The opposite 400: with managed publishing off Play refuses changesNotSentForReview=true (live: "Changes are sent for
+ *  review automatically"); the commit is redone without it. "cannot be sent ... automatically" is the other refusal. */
+export function isAutoSendOnly(err: unknown): boolean {
+  const s = String(err instanceof Error ? err.message : err);
+  const m = /-> 400 (.*)$/s.exec(s);
+  return !!m && /are sent for review automatically/i.test(m[1]!);
+}
+
 /** The query string with changesNotSentForReview=true added to `base` ("?a=1" or ''). */
 export function withNotSent(base: string | undefined, on: boolean): string {
   const parts = [(base ?? '').replace(/^\?/, ''), on ? 'changesNotSentForReview=true' : ''].filter(Boolean);
diff --git a/cli/play/status.ts b/cli/play/status.ts
index 74214cc..86b292a 100644
--- a/cli/play/status.ts
+++ b/cli/play/status.ts
@@ -11,6 +11,7 @@ import { playReleases, playReleaseLabel } from '../lib/portfolio';
 import { playClient } from './client';
 import { listOneTimeProducts } from './products';
 import { readyLines, readyToPublish } from '../lib/play-publish';
+import { oldBuildLines, oldTrackBuilds } from './old-builds';
 import { clearPending, pendingLine, publishingUrl, readPending } from './review-pending';
 
 interface Track { track: string; releases?: { name?: string; versionCodes?: string[]; status: string; userFraction?: number }[] }
@@ -33,7 +34,7 @@ export async function run(ctx: Ctx): Promise<void> {
     // the App category is not in the API (edits.details has no category field): a console step
     const cat = playCategoryOf(config);
     const category = { config: cat?.category ?? null, source: cat?.source ?? null, api: false, plan: 'storebound console plan play-store-settings' };
-    if (ctx.args.has('json')) { printJson({ details, category, tracks, listings, products, publicPage, managedPublishing: config.play?.managedPublishing ?? null, reviewPending, readyToPublish: readyToPublish({ tracks, publicPage, managedPublishing: config.play?.managedPublishing ?? null }) }); return; }
+    if (ctx.args.has('json')) { printJson({ details, category, tracks, listings, products, publicPage, managedPublishing: config.play?.managedPublishing ?? null, reviewPending, oldBuilds: oldTrackBuilds(tracks), readyToPublish: readyToPublish({ tracks, publicPage, managedPublishing: config.play?.managedPublishing ?? null }) }); return; }
     console.log(`${play.packageName}\n  details: ${details.defaultLanguage} · ${details.contactEmail ?? '-'} · ${details.contactWebsite ?? '-'}`);
     console.log(`  category: ${cat ? `${cat.category} (${cat.source})` : 'not in the config (play.category)'} · not readable by the API: Store settings is a console step (${category.plan})`);
     console.log(`  listings (${listings.length}): ${listings.map(l => l.language).join(', ') || '-'}`);
@@ -44,6 +45,7 @@ export async function run(ctx: Ctx): Promise<void> {
     console.log(`  public store page: ${publicPage.state === 'public' ? `published (200), live version ${publicPage.versionName ?? (publicPage.varies ? 'varies with device' : 'not shown')}` : publicPage.state === 'notPublic' ? 'not public yet (404)' : `couldn't check it (${publicPage.error ?? 'not read'})`}${publicPage.stale ? ` (last known, ${publicPage.checkedAt.slice(0, 16).replace('T', ' ')} UTC)` : ''}`);
     for (const r of playReleases({ tracks, publicPage, managedPublishing: config.play?.managedPublishing ?? null }).filter(x => x.track === 'production')) console.log(`  production ${r.version ?? '?'} (${r.build ?? '?'}): ${playReleaseLabel(r)}`);
     for (const l of readyLines(readyToPublish({ tracks, publicPage, managedPublishing: config.play?.managedPublishing ?? null }))) console.log(l);
+    for (const l of oldBuildLines(oldTrackBuilds(tracks))) console.log(l);
     if (pending) console.log(`  review: ${pendingLine(pending)}`);
     console.log(`  products (${products.length}):`);
     for (const p of products) console.log(`    ${p.productId.padEnd(40)} ${(p.purchaseOptions ?? []).map(o => `${o.purchaseOptionId}:${o.state ?? '?'}`).join(' ')}`);
diff --git a/skills/store-pitfalls/SKILL.md b/skills/store-pitfalls/SKILL.md
index ec81a14..5110489 100644
--- a/skills/store-pitfalls/SKILL.md
+++ b/skills/store-pitfalls/SKILL.md
@@ -1594,3 +1594,19 @@ that fails without the fix (see CONTRIBUTING.md).
   version and build only, and the dry run names what it left out and why.
 - **Never:** attach iOS-only products to the Mac submission or switch Game Center on for a Mac app without it.
 - **Guard:** `macosSubmitSkips` in `cli/lib/config.ts`, `tests/resubmit.test.ts`.
+
+## 129. Play said "In review" while an old testing build blocked Send changes for review
+
+- **Symptom:** `play status` showed production as "In review" for days; Publishing overview had "Send changes for
+  review" greyed out. An old build still active on a testing track (alpha) asked for READ_MEDIA_IMAGES /
+  READ_MEDIA_VIDEO ("Use alternative system pickers"); the current production build did not. Play reviews every active
+  build, so the policy issue of the old one held the whole app back. A later commit with `--not-sent-for-review`
+  answered 400 "Changes are sent for review automatically" (managed publishing off).
+- **Do:** replace each old build: `storebound play release --version-code <production code> --alpha completed` (or
+  `--beta`, `--internal`, `--track <name>`); the changes then go into review by themselves. `play status` and
+  `validate` list every active build below production with that command.
+- **Never:** read a completed production release that the store page does not show as "In review": the API has no
+  review state, so storebound says "Not live yet: in review or blocked before review".
+- **Guard:** `cli/play/old-builds.ts` (play status, validate `old-builds`), `PLAY_NOT_LIVE` in `cli/lib/portfolio.ts`,
+  `isAutoSendOnly` in `cli/play/review-pending.ts` (the commit is redone without changesNotSentForReview),
+  `tests/play-old-builds.test.ts`.
diff --git a/tests/play-old-builds.test.ts b/tests/play-old-builds.test.ts
new file mode 100644
index 0000000..e654d97
--- /dev/null
+++ b/tests/play-old-builds.test.ts
@@ -0,0 +1,31 @@
+import { describe, expect, test } from 'bun:test';
+import { oldBuildLines, oldTrackBuilds } from '../cli/play/old-builds';
+import { isAutoSendOnly, isReviewRefused } from '../cli/play/review-pending';
+
+const tracks = [
+  { track: 'production', releases: [{ name: '2.0.0 (10)', versionCodes: ['10'], status: 'completed' }] },
+  { track: 'alpha', releases: [{ name: '1.0 (2)', versionCodes: ['2'], status: 'completed' }] },
+  { track: 'beta', releases: [{ versionCodes: ['10'], status: 'completed' }] },
+  { track: 'internal', releases: [{ versionCodes: ['3'], status: 'draft' }] },
+  { track: 'qa-closed', releases: [{ versionCodes: ['4'], status: 'completed' }] },
+];
+
+describe('old builds on testing tracks (pitfall 129)', () => {
+  test('active builds below production are listed with the command that replaces them; drafts and current ones are not', () => {
+    const old = oldTrackBuilds(tracks);
+    expect(old.map(o => `${o.track}:${o.versionCodes.join(',')}`)).toEqual(['alpha:2', 'qa-closed:4']);
+    const text = oldBuildLines(old).join('\n');
+    expect(text).toContain('storebound play release --version-code 10 --alpha completed');
+    expect(text).toContain('--track qa-closed completed');
+  });
+  test('no production release: nothing to compare', () => {
+    expect(oldTrackBuilds(tracks.filter(t => t.track !== 'production'))).toEqual([]);
+  });
+  test('the "are sent for review automatically" 400 is told apart from the "cannot be sent" one', () => {
+    const auto = new Error('POST commit -> 400 {"error":{"message":"Changes are sent for review automatically.","errors":[{"reason":"badRequest"}]}}');
+    const refused = new Error('POST commit -> 400 {"error":{"message":"Changes cannot be sent for review automatically.","errors":[{"reason":"badRequest"}]}}');
+    expect(isAutoSendOnly(auto)).toBe(true);
+    expect(isAutoSendOnly(refused)).toBe(false);
+    expect(isReviewRefused(refused)).toBe(true);
+  });
+});
diff --git a/tests/play-public-version-match.test.ts b/tests/play-public-version-match.test.ts
index 647850e..f756b8b 100644
--- a/tests/play-public-version-match.test.ts
+++ b/tests/play-public-version-match.test.ts
@@ -7,7 +7,7 @@ import { trainsOf } from '../cli/release';
 import { readFileSync } from 'node:fs';
 import { join } from 'node:path';
 import { clearPlayPublicCache, pageVersion, pageVersionInfo, playPublicPage } from '../cli/lib/play-public';
-import { appleReleases, playReleaseLabel, playReleases, releaseTrains, sameVersion, versionKey } from '../cli/lib/portfolio';
+import { appleReleases, PLAY_NOT_LIVE, playReleaseLabel, playReleases, releaseTrains, sameVersion, versionKey } from '../cli/lib/portfolio';
 import { laneOf, laneText, releasePlan, storeNow, versionHistory } from '../cli/lib/train';
 
 const realFetch = globalThis.fetch;
@@ -45,7 +45,7 @@ describe('version matching across the stores', () => {
     expect(p.ios?.release?.version).toBe('1.0');
     expect(p.android?.release?.version).toBe('1.0.0');
     expect(p.done).toBe(false);
-    expect(p.android!.steps.map(x => x.text).join(' ')).toContain('1.0: In review');
+    expect(p.android!.steps.map(x => x.text).join(' ')).toContain('1.0: Not live yet');
   });
 });
 
@@ -53,7 +53,7 @@ describe('Google Play "Live" needs the public store page', () => {
   test('completed production + page 404 = in review, never live', () => {
     const [prod] = playReleases(PLAY_STATUS_FIRST_404);
     expect(prod).toMatchObject({ phase: 'review', state: 'completed', publicPage: 'notPublic', fraction: 1 });
-    expect(playReleaseLabel(prod!)).toBe('In review');
+    expect(playReleaseLabel(prod!)).toBe(PLAY_NOT_LIVE);
     const lane = laneOf('android', prod!);
     expect(lane.at).toBe(2); // the review stage, not live / rollout
     expect(lane.share).toBeNull();
@@ -77,14 +77,14 @@ describe('Google Play "Live" needs the public store page', () => {
     expect(playReleaseLabel(r)).toBe('Live');
   });
   test('rule: page 404, managed publishing off: In review; on: In review / ready to publish', () => {
-    expect(playReleaseLabel(prodRel({ state: 'notPublic', versionName: null }))).toBe('In review');
+    expect(playReleaseLabel(prodRel({ state: 'notPublic', versionName: null }))).toBe(PLAY_NOT_LIVE);
     expect(playReleaseLabel(prodRel({ state: 'notPublic', versionName: null }, '1.1.0', 'completed', { managedPublishing: true }))).toBe('In review / ready to publish (managed publishing)');
   });
   test('rule: page live with an older version: In review (live: <older>)', () => {
     const r = prodRel({ state: 'public', versionName: '1.0.0' });
     expect(r).toMatchObject({ phase: 'review', liveVersion: '1.0.0' });
-    expect(playReleaseLabel(r)).toBe('In review (live: 1.0.0)');
-    expect(laneText(laneOf('android', r))).toBe('in review (live: 1.0.0)');
+    expect(playReleaseLabel(r)).toBe(`${PLAY_NOT_LIVE} (live: 1.0.0)`);
+    expect(laneText(laneOf('android', r))).toBe(`not live yet: in review or blocked before review (the API cannot tell; see Publishing overview) (live: 1.0.0)`);
     expect(storeNow([r], 'android').now).toBeNull();
   });
   test('rule: rollout, halted, draft', () => {

From 9081ac921d26df004d2ec6b0a26ae1124423df46 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Sun, 8 Nov 2026 02:24:27 +0700
Subject: [PATCH 102/126] storebound 0.8.69: version in package.json and every
 copy, CHANGELOG 0.8.69 section

---
 .claude-plugin/marketplace.json        | 2 +-
 .claude-plugin/plugin.json             | 2 +-
 .codex-plugin/plugin.json              | 2 +-
 CHANGELOG.md                           | 2 ++
 apps/desktop/package.json              | 2 +-
 apps/desktop/src-tauri/Cargo.lock      | 2 +-
 apps/desktop/src-tauri/Cargo.toml      | 2 +-
 apps/desktop/src-tauri/tauri.conf.json | 2 +-
 gemini-extension.json                  | 2 +-
 package.json                           | 2 +-
 10 files changed, 11 insertions(+), 9 deletions(-)

diff --git a/.claude-plugin/marketplace.json b/.claude-plugin/marketplace.json
index 3462bd3..481b325 100644
--- a/.claude-plugin/marketplace.json
+++ b/.claude-plugin/marketplace.json
@@ -9,7 +9,7 @@
       "name": "storebound",
       "source": ".",
       "description": "Take a mobile app or game from nothing to Submit for review on both stores: skills for every store step and questionnaire plus the storebound CLI and MCP server.",
-      "version": "0.8.68",
+      "version": "0.8.69",
       "category": "development",
       "tags": [
         "mobile",
diff --git a/.claude-plugin/plugin.json b/.claude-plugin/plugin.json
index fe9a02b..b37ad5c 100644
--- a/.claude-plugin/plugin.json
+++ b/.claude-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.68",
+  "version": "0.8.69",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/.codex-plugin/plugin.json b/.codex-plugin/plugin.json
index 2af4967..f1acf41 100644
--- a/.codex-plugin/plugin.json
+++ b/.codex-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.68",
+  "version": "0.8.69",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 92bb873..4bdd9eb 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,8 @@
 
 ## Unreleased
 
+## 0.8.69 · 2026-11-07
+
 - Play: `play status` and `validate` list every build still active on a testing track below the production build, with the `play release --version-code <n> --<track> completed` that replaces it (an old build with a policy issue, e.g. READ_MEDIA_IMAGES, blocks Send changes for review for the whole app). A completed production release the store page does not show yet reads "Not live yet: in review or blocked before review" instead of "In review" (CLI and desktop). A commit with `--not-sent-for-review` that Play answers with 400 "Changes are sent for review automatically" is redone without the parameter (pitfalls #129).
 
 ## 0.8.68 · 2026-11-07
diff --git a/apps/desktop/package.json b/apps/desktop/package.json
index 5fd0f5f..59f7f3a 100644
--- a/apps/desktop/package.json
+++ b/apps/desktop/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@storebound/desktop",
-  "version": "0.8.68",
+  "version": "0.8.69",
   "private": true,
   "license": "MIT",
   "type": "module",
diff --git a/apps/desktop/src-tauri/Cargo.lock b/apps/desktop/src-tauri/Cargo.lock
index c93e9ad..3b659bc 100644
--- a/apps/desktop/src-tauri/Cargo.lock
+++ b/apps/desktop/src-tauri/Cargo.lock
@@ -4096,7 +4096,7 @@ checksum = "a2eb9349b6444b326872e140eb1cf5e7c522154d69e7a0ffb0fb81c06b37543f"
 
 [[package]]
 name = "storebound-desktop"
-version = "0.8.68"
+version = "0.8.69"
 dependencies = [
  "base64 0.22.1",
  "getrandom 0.3.4",
diff --git a/apps/desktop/src-tauri/Cargo.toml b/apps/desktop/src-tauri/Cargo.toml
index 994394c..be0124e 100644
--- a/apps/desktop/src-tauri/Cargo.toml
+++ b/apps/desktop/src-tauri/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "storebound-desktop"
-version = "0.8.68"
+version = "0.8.69"
 description = "storebound desktop: every game's releases on both stores in one window"
 license = "MIT"
 edition = "2021"
diff --git a/apps/desktop/src-tauri/tauri.conf.json b/apps/desktop/src-tauri/tauri.conf.json
index dcb7aad..f9c9d83 100644
--- a/apps/desktop/src-tauri/tauri.conf.json
+++ b/apps/desktop/src-tauri/tauri.conf.json
@@ -2,7 +2,7 @@
   "$schema": "https://schema.tauri.app/config/2",
   "productName": "storebound",
   "mainBinaryName": "storebound-desktop",
-  "version": "0.8.68",
+  "version": "0.8.69",
   "identifier": "dev.storebound.desktop",
   "build": {
     "frontendDist": "../dist",
diff --git a/gemini-extension.json b/gemini-extension.json
index 0f25eb6..cc4fa98 100644
--- a/gemini-extension.json
+++ b/gemini-extension.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.68",
+  "version": "0.8.69",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "contextFileName": "GEMINI.md",
   "mcpServers": {
diff --git a/package.json b/package.json
index 70d4818..4951ad7 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.68",
+  "version": "0.8.69",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every store questionnaire (incl. account deletion and App Review demo accounts), privacy, icons, screenshots and previews, TestFlight. After launch: crash vitals, review replies, price sheets, analytics and Product Page Optimization. One config, a CLI (Node 20+ or Bun), an MCP server and Agent Skills for your AI coding agent.",
   "license": "MIT",
   "author": "CRTkafa",

From b82becf7fb3bf61be4c72bdfabe83e7cb67d44be Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Sun, 8 Nov 2026 02:26:11 +0700
Subject: [PATCH 103/126] public MCP: the bare host answers MCP (POST /) and
 names the connect URL (GET /)

---
 CHANGELOG.md                |  2 ++
 cli/mcp-http.ts             |  8 +++++++-
 tests/mcp-public.test.ts    | 18 ++++++++++++++++++
 tools/desktop-boot-check.ts |  2 +-
 4 files changed, 28 insertions(+), 2 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 4bdd9eb..2383639 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,8 @@
 
 ## Unreleased
 
+- Public MCP server: the bare host is the endpoint too. `POST /` answers MCP like `/mcp` (someone who pastes `https://mcp.example.com` into a connector gets connected), `GET /` names the connect URL. A signed-in server keeps `/` closed.
+
 ## 0.8.69 · 2026-11-07
 
 - Play: `play status` and `validate` list every build still active on a testing track below the production build, with the `play release --version-code <n> --<track> completed` that replaces it (an old build with a policy issue, e.g. READ_MEDIA_IMAGES, blocks Send changes for review for the whole app). A completed production release the store page does not show yet reads "Not live yet: in review or blocked before review" instead of "In review" (CLI and desktop). A commit with `--not-sent-for-review` that Play answers with 400 "Changes are sent for review automatically" is redone without the parameter (pitfalls #129).
diff --git a/cli/mcp-http.ts b/cli/mcp-http.ts
index 3c74e13..d20b184 100644
--- a/cli/mcp-http.ts
+++ b/cli/mcp-http.ts
@@ -202,7 +202,13 @@ export function startHttp(o: HttpOptions): Promise<{ close: () => void; port: nu
     if (resourceMeta && o.auth.kind === 'introspect' && req.method === 'GET' && path === new URL(resourceMeta).pathname)
       return send(res, 200, { resource: o.auth.resource, authorization_servers: [o.auth.issuer], bearer_methods_supported: ['header'], scopes_supported: ['mcp'], resource_name: 'storebound' });
     if (path === '/health' && req.method === 'GET') return send(res, 200, { ok: true, version: pkg.version });
-    if (path !== '/mcp') return send(res, 404, { error: 'not found' });
+    // public: the bare host is the MCP endpoint too (people paste "mcp.example.com" into a connector), and a browser
+    // opening it gets the connect line instead of a 404
+    if (pub && path === '/' && req.method === 'GET') {
+      res.writeHead(200, { ...cors, 'content-type': 'text/plain; charset=utf-8' });
+      return res.end(`storebound MCP server ${pkg.version} (read-only, no key)\nAdd it as a remote MCP server / custom connector with this URL. Claude Code: claude mcp add --transport http storebound <this URL>\n`);
+    }
+    if (path !== '/mcp' && !(pub && path === '/')) return send(res, 404, { error: 'not found' });
     if (pub) {
       if (req.method === 'OPTIONS') return send(res, 204);
       const hit = pub.limiter.hit(clientKey(req.headers['x-forwarded-for'], req.socket.remoteAddress, pub.trustProxy));
diff --git a/tests/mcp-public.test.ts b/tests/mcp-public.test.ts
index c0b141e..26473b2 100644
--- a/tests/mcp-public.test.ts
+++ b/tests/mcp-public.test.ts
@@ -235,6 +235,24 @@ describe('http, public mode', () => {
     } finally { s.close(); }
   });
 
+  test('the bare host is the endpoint too: POST / answers MCP, GET / names the connect URL', async () => {
+    const s = await startHttp({ ...base, public: { rate: 100, trustProxy: false } });
+    try {
+      const r = await fetch(`http://127.0.0.1:${s.port}/`, { method: 'POST', headers: { 'content-type': 'application/json' }, body: JSON.stringify({ jsonrpc: '2.0', id: 1, method: 'tools/list' }) });
+      expect(r.status).toBe(200);
+      expect(((await r.json()) as { result: { tools: unknown[] } }).result.tools.length).toBe(6);
+      const g = await fetch(`http://127.0.0.1:${s.port}/`);
+      expect(g.status).toBe(200);
+      expect(await g.text()).toContain('claude mcp add --transport http storebound');
+      expect((await fetch(`http://127.0.0.1:${s.port}/other`)).status).toBe(404);
+    } finally { s.close(); }
+  });
+
+  test('a signed-in server keeps / closed', async () => {
+    const s = await startHttp({ ...base, auth: { kind: 'token', token: 't' } as const });
+    try { expect((await fetch(`http://127.0.0.1:${s.port}/`)).status).toBe(404); } finally { s.close(); }
+  });
+
   test('429 with Retry-After over the limit; X-Forwarded-For counts only with trustProxy', async () => {
     const s = await startHttp({ ...base, public: { rate: 2, trustProxy: false } });
     try {
diff --git a/tools/desktop-boot-check.ts b/tools/desktop-boot-check.ts
index cc4d1e4..f239fc4 100644
--- a/tools/desktop-boot-check.ts
+++ b/tools/desktop-boot-check.ts
@@ -614,7 +614,7 @@ async function runReleaseStateCase(browser: Browser, sidecar: Sidecar, page404:
   let visited = 0;
   const text = async (sel = '#content') => (await page.locator(sel).first().innerText().catch(() => '')).replace(/\s+/g, ' ');
   const crashCheck = async (where: string) => { for (const c of (await state(page)).crash) problems.push(`${where}: error panel ${c}`); };
-  const SENT = 'In review'; // decided from the store page: 404 = in review (no uncertain wording)
+  const SENT = 'Not live yet: in review or blocked before review'; // store page 404: the API has no review state (pitfall 129)
   try {
     await page.goto(`http://127.0.0.1:${server.port}/`, { waitUntil: 'load' });
     await page.waitForFunction(() => document.documentElement.dataset.booted === '1', null, { timeout: WAIT_MS }).catch(() => problems.push('React never drew the window (no data-booted)'));

From 07052cffd2b7293e3d8ba7dec43e172a4446bf7f Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Sun, 8 Nov 2026 02:27:53 +0700
Subject: [PATCH 104/126] public MCP: a browser on the bare host goes to the
 landing page

---
 CHANGELOG.md             | 2 +-
 cli/mcp-http.ts          | 2 ++
 tests/mcp-public.test.ts | 3 +++
 3 files changed, 6 insertions(+), 1 deletion(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 2383639..057338a 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,7 +3,7 @@
 
 ## Unreleased
 
-- Public MCP server: the bare host is the endpoint too. `POST /` answers MCP like `/mcp` (someone who pastes `https://mcp.example.com` into a connector gets connected), `GET /` names the connect URL. A signed-in server keeps `/` closed.
+- Public MCP server: the bare host is the endpoint too. `POST /` answers MCP like `/mcp` (someone who pastes `https://mcp.example.com` into a connector gets connected), `GET /` sends a browser to the landing page and names the connect URL to any other client. A signed-in server keeps `/` closed.
 
 ## 0.8.69 · 2026-11-07
 
diff --git a/cli/mcp-http.ts b/cli/mcp-http.ts
index d20b184..8b24a3f 100644
--- a/cli/mcp-http.ts
+++ b/cli/mcp-http.ts
@@ -205,6 +205,8 @@ export function startHttp(o: HttpOptions): Promise<{ close: () => void; port: nu
     // public: the bare host is the MCP endpoint too (people paste "mcp.example.com" into a connector), and a browser
     // opening it gets the connect line instead of a 404
     if (pub && path === '/' && req.method === 'GET') {
+      // a person in a browser goes to the landing page; any other client gets the connect line
+      if (/text\/html/.test(String(req.headers.accept ?? ''))) { res.writeHead(302, { ...cors, location: 'https://storebound.dev/' }); return res.end(); }
       res.writeHead(200, { ...cors, 'content-type': 'text/plain; charset=utf-8' });
       return res.end(`storebound MCP server ${pkg.version} (read-only, no key)\nAdd it as a remote MCP server / custom connector with this URL. Claude Code: claude mcp add --transport http storebound <this URL>\n`);
     }
diff --git a/tests/mcp-public.test.ts b/tests/mcp-public.test.ts
index 26473b2..aab684e 100644
--- a/tests/mcp-public.test.ts
+++ b/tests/mcp-public.test.ts
@@ -244,6 +244,9 @@ describe('http, public mode', () => {
       const g = await fetch(`http://127.0.0.1:${s.port}/`);
       expect(g.status).toBe(200);
       expect(await g.text()).toContain('claude mcp add --transport http storebound');
+      const b = await fetch(`http://127.0.0.1:${s.port}/`, { headers: { accept: 'text/html,application/xhtml+xml' }, redirect: 'manual' });
+      expect(b.status).toBe(302);
+      expect(b.headers.get('location')).toBe('https://storebound.dev/');
       expect((await fetch(`http://127.0.0.1:${s.port}/other`)).status).toBe(404);
     } finally { s.close(); }
   });

From d71368e886264a37da679a4a58299d207d0d64a8 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Sun, 8 Nov 2026 03:17:41 +0700
Subject: [PATCH 105/126] storebound 0.8.70: version in package.json and every
 copy, CHANGELOG 0.8.70 section

---
 .claude-plugin/marketplace.json        | 2 +-
 .claude-plugin/plugin.json             | 2 +-
 .codex-plugin/plugin.json              | 2 +-
 CHANGELOG.md                           | 2 ++
 apps/desktop/package.json              | 2 +-
 apps/desktop/src-tauri/Cargo.lock      | 2 +-
 apps/desktop/src-tauri/Cargo.toml      | 2 +-
 apps/desktop/src-tauri/tauri.conf.json | 2 +-
 gemini-extension.json                  | 2 +-
 package.json                           | 2 +-
 10 files changed, 11 insertions(+), 9 deletions(-)

diff --git a/.claude-plugin/marketplace.json b/.claude-plugin/marketplace.json
index 481b325..954d710 100644
--- a/.claude-plugin/marketplace.json
+++ b/.claude-plugin/marketplace.json
@@ -9,7 +9,7 @@
       "name": "storebound",
       "source": ".",
       "description": "Take a mobile app or game from nothing to Submit for review on both stores: skills for every store step and questionnaire plus the storebound CLI and MCP server.",
-      "version": "0.8.69",
+      "version": "0.8.70",
       "category": "development",
       "tags": [
         "mobile",
diff --git a/.claude-plugin/plugin.json b/.claude-plugin/plugin.json
index b37ad5c..5792d93 100644
--- a/.claude-plugin/plugin.json
+++ b/.claude-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.69",
+  "version": "0.8.70",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/.codex-plugin/plugin.json b/.codex-plugin/plugin.json
index f1acf41..80468ac 100644
--- a/.codex-plugin/plugin.json
+++ b/.codex-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.69",
+  "version": "0.8.70",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 057338a..13f5c0a 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,8 @@
 
 ## Unreleased
 
+## 0.8.70 · 2026-11-07
+
 - Public MCP server: the bare host is the endpoint too. `POST /` answers MCP like `/mcp` (someone who pastes `https://mcp.example.com` into a connector gets connected), `GET /` sends a browser to the landing page and names the connect URL to any other client. A signed-in server keeps `/` closed.
 
 ## 0.8.69 · 2026-11-07
diff --git a/apps/desktop/package.json b/apps/desktop/package.json
index 59f7f3a..45bcf24 100644
--- a/apps/desktop/package.json
+++ b/apps/desktop/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@storebound/desktop",
-  "version": "0.8.69",
+  "version": "0.8.70",
   "private": true,
   "license": "MIT",
   "type": "module",
diff --git a/apps/desktop/src-tauri/Cargo.lock b/apps/desktop/src-tauri/Cargo.lock
index 3b659bc..25dcdad 100644
--- a/apps/desktop/src-tauri/Cargo.lock
+++ b/apps/desktop/src-tauri/Cargo.lock
@@ -4096,7 +4096,7 @@ checksum = "a2eb9349b6444b326872e140eb1cf5e7c522154d69e7a0ffb0fb81c06b37543f"
 
 [[package]]
 name = "storebound-desktop"
-version = "0.8.69"
+version = "0.8.70"
 dependencies = [
  "base64 0.22.1",
  "getrandom 0.3.4",
diff --git a/apps/desktop/src-tauri/Cargo.toml b/apps/desktop/src-tauri/Cargo.toml
index be0124e..2a2b4dd 100644
--- a/apps/desktop/src-tauri/Cargo.toml
+++ b/apps/desktop/src-tauri/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "storebound-desktop"
-version = "0.8.69"
+version = "0.8.70"
 description = "storebound desktop: every game's releases on both stores in one window"
 license = "MIT"
 edition = "2021"
diff --git a/apps/desktop/src-tauri/tauri.conf.json b/apps/desktop/src-tauri/tauri.conf.json
index f9c9d83..94ddc56 100644
--- a/apps/desktop/src-tauri/tauri.conf.json
+++ b/apps/desktop/src-tauri/tauri.conf.json
@@ -2,7 +2,7 @@
   "$schema": "https://schema.tauri.app/config/2",
   "productName": "storebound",
   "mainBinaryName": "storebound-desktop",
-  "version": "0.8.69",
+  "version": "0.8.70",
   "identifier": "dev.storebound.desktop",
   "build": {
     "frontendDist": "../dist",
diff --git a/gemini-extension.json b/gemini-extension.json
index cc4fa98..5bafc60 100644
--- a/gemini-extension.json
+++ b/gemini-extension.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.69",
+  "version": "0.8.70",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "contextFileName": "GEMINI.md",
   "mcpServers": {
diff --git a/package.json b/package.json
index 4951ad7..e2a3e5b 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.69",
+  "version": "0.8.70",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every store questionnaire (incl. account deletion and App Review demo accounts), privacy, icons, screenshots and previews, TestFlight. After launch: crash vitals, review replies, price sheets, analytics and Product Page Optimization. One config, a CLI (Node 20+ or Bun), an MCP server and Agent Skills for your AI coding agent.",
   "license": "MIT",
   "author": "CRTkafa",

From f34192b5461d71d8db44886fde823b3f8e7ca55a Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Sun, 8 Nov 2026 03:24:03 +0700
Subject: [PATCH 106/126] desktop Portfolio: the Play phase uses the same label
 as Releases (Not live yet ...)

---
 apps/desktop/src/screens/Portfolio.tsx | 4 ++--
 bun.lock                               | 2 +-
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/apps/desktop/src/screens/Portfolio.tsx b/apps/desktop/src/screens/Portfolio.tsx
index 27eb5b0..2a0b7c0 100644
--- a/apps/desktop/src/screens/Portfolio.tsx
+++ b/apps/desktop/src/screens/Portfolio.tsx
@@ -24,7 +24,7 @@ import { useExports } from '../ui/Exports';
 import { Icon, StoreGlyph } from '../ui/icons';
 import { nextStep, Pipeline, tintStyle, useShots, useTint } from '../ui/ds';
 export { nextStep } from '../ui/ds';
-import { AppIcon, Card, Chip, Empty, Kpi, Notice, PhaseChip, Seg, Skeleton, Sparkline, StudioMark } from '../ui/kit';
+import { AppIcon, Card, Chip, Empty, Kpi, Notice, PhaseChip, phaseLabel, Seg, Skeleton, Sparkline, StudioMark } from '../ui/kit';
 
 /** Tag of one app's offline config check. */
 export function checkState(e: Pick<AppStatus, 'errors' | 'check'> | undefined): { text: string; tone: Tone } {
@@ -72,7 +72,7 @@ function NextCell({ e }: { e: AppStatus | undefined }) {
       <span className="strong num">{n.version}</span>
       <div className="row small muted" style={{ gap: 10 }}>
         {n.ios && <span className="row" style={{ gap: 4 }}><StoreGlyph store="ios" className="ic13" />{t(`phase.${n.ios.phase}`)}</span>}
-        {n.android && <span className="row" style={{ gap: 4 }}><StoreGlyph store="android" className="ic13" />{t(`phase.${n.android.phase}`)}</span>}
+        {n.android && <span className="row" style={{ gap: 4 }}><StoreGlyph store="android" className="ic13" />{phaseLabel(n.android).text}</span>}
       </div>
     </div>
   );
diff --git a/bun.lock b/bun.lock
index f43b978..8f47990 100644
--- a/bun.lock
+++ b/bun.lock
@@ -22,7 +22,7 @@
     },
     "apps/desktop": {
       "name": "@storebound/desktop",
-      "version": "0.8.67",
+      "version": "0.8.69",
       "dependencies": {
         "@phosphor-icons/react": "^2.1.10",
         "@tauri-apps/api": "^2.12.0",

From ec381e86641bc0273cd85cf4c8e1a3c3a398084d Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Sun, 8 Nov 2026 03:25:13 +0700
Subject: [PATCH 107/126] boot check: the portfolio with a Play page 404 counts
 no live version

---
 tools/desktop-boot-check.ts | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/tools/desktop-boot-check.ts b/tools/desktop-boot-check.ts
index f239fc4..4c86acf 100644
--- a/tools/desktop-boot-check.ts
+++ b/tools/desktop-boot-check.ts
@@ -622,9 +622,10 @@ async function runReleaseStateCase(browser: Browser, sidecar: Sidecar, page404:
     const wizard = page.locator('.wizard[role="dialog"]');
     if (await wizard.count()) { await wizard.press('Escape').catch(() => {}); await gone(page, '.wizard[role="dialog"]'); }
     // the portfolio: Play's cell names the state, never "Live" while the page is 404
-    await shows(page, '#content', page404 ? SENT : '1.0.0');
+    // (the overview counts it with the reviews; its own words are on Releases, checked below)
+    await shows(page, '#content', '1.0.0');
     const pf = await text();
-    if (page404 && !pf.includes(SENT)) problems.push(`Portfolio: no "${SENT}"`);
+    if (page404 && !pf.includes('Live versions 0')) problems.push('Portfolio: Play counted as live while its store page is 404');
     await crashCheck('Portfolio');
     visited++;
     const item = page.locator('nav.side .nav-app').filter({ hasText: /Prism Puddle|demo-game/ }).first();

From 01ea264a21d7ccf27b3dbbbde9d7bcd28f6c33e8 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Sun, 8 Nov 2026 03:30:40 +0700
Subject: [PATCH 108/126] CHANGELOG: 0.8.71 summary (0.8.69 and 0.8.70 were not
 published)

---
 CHANGELOG.md | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 13f5c0a..c13ec4a 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,8 @@
 
 ## Unreleased
 
+- 0.8.69 and 0.8.70 were tagged but not published (the desktop release check stopped them); 0.8.71 ships both sections below. Desktop Portfolio: the Play state of an app uses the same words as Releases ("Not live yet: in review or blocked before review").
+
 ## 0.8.70 · 2026-11-07
 
 - Public MCP server: the bare host is the endpoint too. `POST /` answers MCP like `/mcp` (someone who pastes `https://mcp.example.com` into a connector gets connected), `GET /` sends a browser to the landing page and names the connect URL to any other client. A signed-in server keeps `/` closed.

From b1043f5d79f916262c25afad238a1738d29bfc20 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Sun, 8 Nov 2026 03:33:21 +0700
Subject: [PATCH 109/126] storebound 0.8.71: version in package.json and every
 copy, CHANGELOG 0.8.71 section

---
 .claude-plugin/marketplace.json        | 2 +-
 .claude-plugin/plugin.json             | 2 +-
 .codex-plugin/plugin.json              | 2 +-
 CHANGELOG.md                           | 2 ++
 apps/desktop/package.json              | 2 +-
 apps/desktop/src-tauri/Cargo.lock      | 2 +-
 apps/desktop/src-tauri/Cargo.toml      | 2 +-
 apps/desktop/src-tauri/tauri.conf.json | 2 +-
 gemini-extension.json                  | 2 +-
 package.json                           | 2 +-
 10 files changed, 11 insertions(+), 9 deletions(-)

diff --git a/.claude-plugin/marketplace.json b/.claude-plugin/marketplace.json
index 954d710..d043258 100644
--- a/.claude-plugin/marketplace.json
+++ b/.claude-plugin/marketplace.json
@@ -9,7 +9,7 @@
       "name": "storebound",
       "source": ".",
       "description": "Take a mobile app or game from nothing to Submit for review on both stores: skills for every store step and questionnaire plus the storebound CLI and MCP server.",
-      "version": "0.8.70",
+      "version": "0.8.71",
       "category": "development",
       "tags": [
         "mobile",
diff --git a/.claude-plugin/plugin.json b/.claude-plugin/plugin.json
index 5792d93..500cd9c 100644
--- a/.claude-plugin/plugin.json
+++ b/.claude-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.70",
+  "version": "0.8.71",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/.codex-plugin/plugin.json b/.codex-plugin/plugin.json
index 80468ac..de2766c 100644
--- a/.codex-plugin/plugin.json
+++ b/.codex-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.70",
+  "version": "0.8.71",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/CHANGELOG.md b/CHANGELOG.md
index c13ec4a..2651ed5 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,8 @@
 
 ## Unreleased
 
+## 0.8.71 · 2026-11-07
+
 - 0.8.69 and 0.8.70 were tagged but not published (the desktop release check stopped them); 0.8.71 ships both sections below. Desktop Portfolio: the Play state of an app uses the same words as Releases ("Not live yet: in review or blocked before review").
 
 ## 0.8.70 · 2026-11-07
diff --git a/apps/desktop/package.json b/apps/desktop/package.json
index 45bcf24..f751247 100644
--- a/apps/desktop/package.json
+++ b/apps/desktop/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@storebound/desktop",
-  "version": "0.8.70",
+  "version": "0.8.71",
   "private": true,
   "license": "MIT",
   "type": "module",
diff --git a/apps/desktop/src-tauri/Cargo.lock b/apps/desktop/src-tauri/Cargo.lock
index 25dcdad..0e0a53d 100644
--- a/apps/desktop/src-tauri/Cargo.lock
+++ b/apps/desktop/src-tauri/Cargo.lock
@@ -4096,7 +4096,7 @@ checksum = "a2eb9349b6444b326872e140eb1cf5e7c522154d69e7a0ffb0fb81c06b37543f"
 
 [[package]]
 name = "storebound-desktop"
-version = "0.8.70"
+version = "0.8.71"
 dependencies = [
  "base64 0.22.1",
  "getrandom 0.3.4",
diff --git a/apps/desktop/src-tauri/Cargo.toml b/apps/desktop/src-tauri/Cargo.toml
index 2a2b4dd..63d4b68 100644
--- a/apps/desktop/src-tauri/Cargo.toml
+++ b/apps/desktop/src-tauri/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "storebound-desktop"
-version = "0.8.70"
+version = "0.8.71"
 description = "storebound desktop: every game's releases on both stores in one window"
 license = "MIT"
 edition = "2021"
diff --git a/apps/desktop/src-tauri/tauri.conf.json b/apps/desktop/src-tauri/tauri.conf.json
index 94ddc56..71b964e 100644
--- a/apps/desktop/src-tauri/tauri.conf.json
+++ b/apps/desktop/src-tauri/tauri.conf.json
@@ -2,7 +2,7 @@
   "$schema": "https://schema.tauri.app/config/2",
   "productName": "storebound",
   "mainBinaryName": "storebound-desktop",
-  "version": "0.8.70",
+  "version": "0.8.71",
   "identifier": "dev.storebound.desktop",
   "build": {
     "frontendDist": "../dist",
diff --git a/gemini-extension.json b/gemini-extension.json
index 5bafc60..f425eaf 100644
--- a/gemini-extension.json
+++ b/gemini-extension.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.70",
+  "version": "0.8.71",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "contextFileName": "GEMINI.md",
   "mcpServers": {
diff --git a/package.json b/package.json
index e2a3e5b..0593b88 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.70",
+  "version": "0.8.71",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every store questionnaire (incl. account deletion and App Review demo accounts), privacy, icons, screenshots and previews, TestFlight. After launch: crash vitals, review replies, price sheets, analytics and Product Page Optimization. One config, a CLI (Node 20+ or Bun), an MCP server and Agent Skills for your AI coding agent.",
   "license": "MIT",
   "author": "CRTkafa",

From 73a962fbdc2ec576052290d3583f90a2d9ac2975 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Sun, 8 Nov 2026 14:19:12 +0700
Subject: [PATCH 110/126] apple screenshots: iPhone Duo through the App Asset
 Library (IPHONE_DUO placement group, APP_SCREENSHOT), pitfall 130

---
 CHANGELOG.md                      |   3 +
 cli/apple/duo-library.ts          | 113 ++++++++++++++++++++++++++++++
 cli/apple/screenshots.ts          |  24 ++++---
 cli/lib/config.ts                 |   4 +-
 cli/shots/spec.ts                 |   9 ++-
 docs/HANDOFF.md                   |   3 +-
 docs/store-art.md                 |   3 +-
 skills/store-pitfalls/SKILL.md    |  16 +++++
 skills/store-screenshots/SKILL.md |   7 +-
 tests/ppo.test.ts                 |  24 +++++--
 10 files changed, 174 insertions(+), 32 deletions(-)
 create mode 100644 cli/apple/duo-library.ts

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 2651ed5..8c13b66 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,9 @@
 
 ## Unreleased
 
+- **iPhone Duo screenshots upload.** `apple screenshots` now sends them through the App Asset Library (display class
+  IPHONE_DUO, placement APP_SCREENSHOT) instead of skipping them as "not in the API" (pitfall 130).
+
 ## 0.8.71 · 2026-11-07
 
 - 0.8.69 and 0.8.70 were tagged but not published (the desktop release check stopped them); 0.8.71 ships both sections below. Desktop Portfolio: the Play state of an app uses the same words as Releases ("Not live yet: in review or blocked before review").
diff --git a/cli/apple/duo-library.ts b/cli/apple/duo-library.ts
new file mode 100644
index 0000000..86c620e
--- /dev/null
+++ b/cli/apple/duo-library.ts
@@ -0,0 +1,113 @@
+// iPhone Duo screenshots through the App Asset Library (App Store Connect API 4.5.1, pitfall 130). ScreenshotDisplayType
+// has no Duo value and never will: Apple added the display class IPHONE_DUO only to AppAssetLibraryDisplayClass and
+// deprecated appScreenshotSets / appScreenshots in the same release. Flow:
+//   1. GET /v1/appAssetLibraryRefData?filter[placementTypes]=APP_SCREENSHOT -> the iOS placementProfileGroup whose
+//      displayClassId is IPHONE_DUO (its id is the placementGroup of every Duo screenshot);
+//   2. each file is uploaded once to the app's library (POST appAssetLibraryImages, category
+//      APP_SCREENSHOTS_AND_PREVIEWS, referenceName "storebound <md5>", the same MD5 reuse as creative assets);
+//   3. POST appAssetLibraryPlacements (placementType APP_SCREENSHOT, placementGroup, the version localization).
+//      Screenshots are reviewed with the version, so a processed asset is placed at once (no approval wait).
+// Upsert: a group whose placements already show the local files in order is left alone; otherwise its placements are
+// removed and the files placed in order (outer display files first, then inner; at most 10). Read back at the end.
+import { readFileSync } from 'node:fs';
+import { basename } from 'node:path';
+import { log, warn } from '../lib/log';
+import { elapsed } from '../lib/progress';
+import { classify, pickAsset, processingTiming, REF, selectable } from './creative-assets';
+import { type Asc, md5, type J } from './asc';
+import { partHeaders } from './screenshot-health';
+
+const TAG = 'apple';
+export const DUO_CATEGORY = 'APP_SCREENSHOTS_AND_PREVIEWS';
+export const DUO_MAX = 10;
+const sumOf = (a: J | undefined): string | undefined => /^storebound ([0-9a-f]{32})$/.exec(String(a?.attributes?.referenceName ?? ''))?.[1];
+
+/** iOS placement profile group ids of the IPHONE_DUO display class in an appAssetLibraryRefData response. Pure. */
+export function duoGroups(refData: J[]): string[] {
+  const ids = new Set<string>();
+  for (const r of refData) for (const g of (r?.attributes?.placementProfileGroups ?? []) as J[])
+    if (g?.displayClassId === 'IPHONE_DUO' && (!g.platform || g.platform === 'IOS') && g.placementProfileGroupId) ids.add(String(g.placementProfileGroupId));
+  return [...ids];
+}
+
+/** Whether a group's current placements (asset MD5s in order) already show `want`. Pure. */
+export const duoUpToDate = (shown: (string | undefined)[], want: string[]): boolean => shown.length === want.length && shown.every((s, i) => s === want[i]);
+
+export interface DuoResult { locale: string; action: 'keep' | 'place' | 'wait' | 'refuse' | 'plan'; files: number }
+
+/** Resolves the Duo placement group once per run; throws with the guardrail text when the API lists none. */
+export async function duoGroup(c: Asc): Promise<string> {
+  const ref = await c.all('/v1/appAssetLibraryRefData?filter[placementTypes]=APP_SCREENSHOT');
+  const g = duoGroups(ref);
+  if (!g.length) throw new Error('appAssetLibraryRefData lists no iOS IPHONE_DUO placement group for APP_SCREENSHOT: report it (pitfall 130); the console version page > App Previews and Screenshots > iPhone Duo takes them meanwhile');
+  if (g.length > 1) log(TAG, `iPhone Duo: ${g.length} placement groups (${g.join(', ')}), using ${g[0]}`);
+  return g[0]!;
+}
+
+/** Makes the iPhone Duo screenshots of one version localization show `files` in order. */
+export async function syncDuo(c: Asc, o: { appId: string; group: string; loc: J; files: string[]; dry: boolean }): Promise<DuoResult> {
+  const locale: string = o.loc.attributes.locale;
+  const tag = `${locale} IPHONE_DUO`;
+  const files = o.files.slice(0, DUO_MAX);
+  if (o.files.length > DUO_MAX) warn(TAG, `${tag}: ${o.files.length} files, only the first ${DUO_MAX} are used`);
+  const lib = (await c.asc('GET', `/v1/apps/${o.appId}/assetLibrary`)).data as J;
+  const library = () => c.all(`/v1/appAssetLibraries/${lib.id}/images?filter[category]=${DUO_CATEGORY}&limit=200`);
+  let assets = await library();
+  const want = files.map(f => md5(readFileSync(f)));
+  const placedAll = await c.all(`/v1/appStoreVersionLocalizations/${o.loc.id}/placements?filter[placementType]=APP_SCREENSHOT&include=image`);
+  const placed = placedAll.filter(p => p.attributes?.placementGroup === o.group);
+  const shown = placed.map(p => sumOf(assets.find(a => a.id === p.relationships?.image?.data?.id)));
+  if (duoUpToDate(shown, want)) { log(TAG, `${tag}: ${files.length} up to date`); return { locale, action: 'keep', files: files.length }; }
+  if (o.dry) {
+    const up = want.filter(s => !pickAsset(assets, s).asset).length;
+    log(TAG, `${tag}: would ${placed.length ? `replace ${placed.length} placed` : 'place'} ${files.length} screenshot(s) through the Asset Library (${up} to upload)`);
+    return { locale, action: 'plan', files: files.length };
+  }
+  const chosen: J[] = [];
+  for (let i = 0; i < files.length; i++) {
+    const f = files[i]!, sum = want[i]!;
+    const pick = pickAsset(assets, sum);
+    if (pick.refuse) { warn(TAG, `${tag} ${basename(f)}: ${pick.refuse}`); return { locale, action: 'refuse', files: files.length }; }
+    let a = pick.asset;
+    if (!a) { log(TAG, `${tag}: uploading ${basename(f)} to the Asset Library`); a = await uploadImage(c, lib.id, f, sum); assets = await library(); a = pickAsset(assets, sum).asset ?? a; }
+    else if (pick.unarchive) a = (await c.asc('PATCH', `/v1/${a.type}/${a.id}`, { data: { type: a.type, id: a.id, attributes: { archived: false } } })).data as J;
+    a = await processed(c, a, `${tag} ${basename(f)}`);
+    const cls = classify(a.attributes?.state);
+    if (cls === 'processing') return { locale, action: 'wait', files: files.length };
+    if (!selectable(cls)) { warn(TAG, `${tag} ${basename(f)}: ${a.attributes?.state}; nothing changed`); return { locale, action: 'refuse', files: files.length }; }
+    chosen.push(a);
+  }
+  // every file is ready before the old placements go, so a failed upload leaves the page as it was
+  for (const p of placed) await c.asc('DELETE', `/v1/appAssetLibraryPlacements/${p.id}`);
+  for (const a of chosen) await c.asc('POST', '/v1/appAssetLibraryPlacements', { data: { type: 'appAssetLibraryPlacements', attributes: { placementType: 'APP_SCREENSHOT', placementGroup: o.group },
+    relationships: { image: { data: { type: 'appAssetLibraryImages', id: a.id } }, appStoreVersionLocalization: { data: { type: 'appStoreVersionLocalizations', id: o.loc.id } } } } });
+  const now = (await c.all(`/v1/appStoreVersionLocalizations/${o.loc.id}/placements?filter[placementType]=APP_SCREENSHOT&include=image`)).filter(p => p.attributes?.placementGroup === o.group);
+  const ids = now.map(p => p.relationships?.image?.data?.id);
+  if (ids.length !== chosen.length || chosen.some(a => !ids.includes(a.id))) { warn(TAG, `${tag}: read back ${ids.length} placements, wanted ${chosen.length}`); process.exitCode = 1; }
+  else log(TAG, `${tag}: placed ${chosen.length} (removed ${placed.length})`);
+  return { locale, action: 'place', files: chosen.length };
+}
+
+async function uploadImage(c: Asc, libId: string, file: string, sum: string): Promise<J> {
+  const buf = readFileSync(file);
+  const type = 'appAssetLibraryImages';
+  const res = (await c.asc('POST', `/v1/${type}`, { data: { type, attributes: { fileName: basename(file), fileSize: buf.length, category: DUO_CATEGORY, referenceName: REF(sum) },
+    relationships: { assetLibrary: { data: { type: 'appAssetLibraries', id: libId } } } } })).data as J;
+  for (const op of (res.attributes.uploadOperations ?? []) as J[]) {
+    const r = await fetch(op.url, { method: op.method, headers: partHeaders(op), body: buf.subarray(op.offset, op.offset + op.length), signal: AbortSignal.timeout(300_000) });
+    if (r.status < 200 || r.status > 299) { await c.asc('DELETE', `/v1/${type}/${res.id}`).catch(() => {}); throw new Error(`upload ${basename(file)} part ${op.offset} -> ${r.status} (reservation deleted, nothing committed)`); }
+  }
+  return (await c.asc('PATCH', `/v1/${type}/${res.id}`, { data: { type, id: res.id, attributes: { uploaded: true } } })).data as J;
+}
+
+async function processed(c: Asc, a: J, label: string): Promise<J> {
+  const t0 = Date.now();
+  let beat = t0, cur = a;
+  while (classify(cur.attributes?.state) === 'processing') {
+    if (Date.now() - t0 >= processingTiming.timeoutMs) { warn(TAG, `${label}: still ${cur.attributes?.state ?? 'processing'} after ${elapsed(Date.now() - t0)}; re-run later to place it`); return cur; }
+    await processingTiming.sleep(processingTiming.pollMs);
+    cur = ((await c.maybe(`/v1/${cur.type}/${cur.id}`))?.data as J) ?? cur;
+    if (Date.now() - beat >= processingTiming.heartbeatMs) { beat = Date.now(); log(TAG, `${label}: processing (${cur.attributes?.state}, ${elapsed(Date.now() - t0)})`); }
+  }
+  return cur;
+}
diff --git a/cli/apple/screenshots.ts b/cli/apple/screenshots.ts
index bc7bfce..fc2adb6 100644
--- a/cli/apple/screenshots.ts
+++ b/cli/apple/screenshots.ts
@@ -6,7 +6,7 @@
 // ios65/NN.png (6.5", 1284 x 2778 -> APP_IPHONE_65) and, only with apple.ipad, ipad13/NN.png (13" iPad, 2064 x 2752 ->
 // APP_IPAD_PRO_3GEN_129: the API has no "13 inch" value, the 13" display set keeps the 3rd gen 12.9" name). With
 // --platform macos (or when only the macOS version is editable) and apple.mac: mac/NN.png (2880 x 1800 -> APP_DESKTOP)
-// to the macOS version. iPhone Duo sets are skipped with the console deep link (no API display type yet). Up to 10
+// to the macOS version. iPhone Duo (apple.iphoneDuo: iphone-duo-outer/ then iphone-duo-inner/) goes through the App Asset Library. Up to 10
 // per set. --variant <id> uploads <renders>/<id>/<lang>/... instead (an A/B variant from shots.variants, e.g. for a
 // Product Page Optimization treatment you then set up in App Store Connect). Apple processes uploads asynchronously; failed
 // ones are reported at the end. Long: run in the background with a log file.
@@ -20,7 +20,8 @@ import { variantRoot } from '../shots/lib';
 import { findOrCreate } from '../lib/upsert';
 import { pulledChecksum } from '../lib/art-pull';
 import { consoleLink } from '../lib/console-links';
-import { IPHONE_DUO_DISPLAY, IPHONE_DUO_NOT_IN_API } from '../shots/spec';
+import { IPHONE_DUO_DISPLAY } from '../shots/spec';
+import { duoGroup, syncDuo } from './duo-library';
 import { type Asc, ascClient, EDITABLE, keptPrefix, md5, setUpToDate, type J } from './asc';
 import { pendingScreenshots, repairPlan, repairSet, setRows, updateLedger } from './screenshot-health';
 import { allVersions, parsePlatform, pickPlatform, platformLabel, stateOf, versionLabel } from './platform';
@@ -42,12 +43,9 @@ export const displaySets = (apple: { ipad?: boolean; iphoneMedium?: boolean; iph
   platform === 'MAC_OS' ? (apple?.mac ? MAC_DISPLAY : {}) : ({ ...DISPLAY, ...(apple?.iphoneMedium ? MEDIUM_DISPLAY : {}), ...(apple?.ipad ? IPAD_DISPLAY : {}),
     ...(apple?.iphoneDuo ? Object.fromEntries(Object.entries(IPHONE_DUO_DISPLAY).filter((e): e is [string, string] => !!e[1])) : {}) });
 
-/** iPhone Duo size keys `apple screenshots` skips (apple.iphoneDuo on, no API display type yet), with the message. */
-export function skippedDuoSets(apple: { iphoneDuo?: boolean; appId?: string } | undefined): { dirs: string[]; msg: string } | null {
-  const dirs = apple?.iphoneDuo ? Object.entries(IPHONE_DUO_DISPLAY).filter(([, t]) => !t).map(([k]) => k) : [];
-  // the console takes them (its own "iPhone Duo" tab): send the owner straight to the version page
-  return dirs.length ? { dirs, msg: `${dirs.join(', ')}: ${IPHONE_DUO_NOT_IN_API}. Add them in ${consoleLink('asc.version', '> App Previews and Screenshots > iPhone Duo', { appleAppId: apple?.appId })}` } : null;
-}
+/** iPhone Duo size keys (render folders) `apple screenshots` uploads through the App Asset Library (no
+ *  ScreenshotDisplayType exists for Duo: cli/apple/duo-library.ts, pitfall 130), outer display first. */
+export const duoDirs = (apple: { iphoneDuo?: boolean } | undefined): string[] => (apple?.iphoneDuo ? Object.keys(IPHONE_DUO_DISPLAY) : []);
 
 /** Display types `validate` requires on every locale: apple.screenshotTypes, else the classes App Store Connect's
  *  "App Previews and Screenshots" tab lists (October 2026): iPhone with Dynamic Island (medium display), filled by
@@ -98,8 +96,9 @@ export async function run(ctx: Ctx): Promise<void> {
   const version = await c.editableVersion(platform);
   if (!version) throw new Error(`no editable ${platformLabel(platform)} App Store version (run apple listing --version x.y.z first)`);
   log('apple', `screenshots for version ${versionLabel(version)}`);
-  const duoSkip = platform === 'MAC_OS' ? null : skippedDuoSets(config.apple);
-  if (duoSkip) warn('apple', duoSkip.msg);
+  const duo = platform === 'MAC_OS' ? [] : duoDirs(config.apple);
+  const duoGroupId = duo.length ? await duoGroup(c) : '';
+  const appId = duo.length ? await c.app() : '';
   if (platform === 'MAC_OS' && !config.apple?.mac) throw new Error('macOS version: set apple.mac: true and render the mac size (storebound shots render --size mac) first');
   if (platform !== 'MAC_OS' && config.apple?.mac) log('apple', 'Mac screenshots (mac/, APP_DESKTOP) go to the macOS version: run apple screenshots --platform macos');
   const langOf = byAppleLocale(config.languages);
@@ -127,6 +126,11 @@ export async function run(ctx: Ctx): Promise<void> {
         if (!existsSync(d) || !files.length) { warn('apple', `${locale}: nothing in ${d}, skipped`); continue; }
         await syncSet(loc.id, sets, type, files, `${locale} ${type}`);
       }
+      if (duo.length) {
+        const files = duo.flatMap(dir => numberedImages(join(src, lang.id, dir)).filter(f => f.endsWith('.png')));
+        if (!files.length) warn('apple', `${locale}: nothing in ${duo.map(d => join(src, lang.id, d)).join(' or ')}, iPhone Duo skipped`);
+        else await syncDuo(c, { appId, group: duoGroupId, loc, files, dry: ctx.args.has('dry') });
+      }
     });
   }
   log('apple', `${tasks.length} locales, ${jobs} in parallel`);
diff --git a/cli/lib/config.ts b/cli/lib/config.ts
index 0afa907..74313a6 100644
--- a/cli/lib/config.ts
+++ b/cli/lib/config.ts
@@ -700,8 +700,8 @@ export interface ShipConfig {
      */
     iphoneMedium?: boolean;
     /** Also render and check iPhone Duo (foldable) screenshots: outer 1398 x 2034 and inner 2007 x 2853 (landscape too).
-     *  Optional now, reportedly required from April 2027 for iOS 27.1 SDK builds. Not uploaded while the API has no
-     *  display type for them (cli/shots/spec.ts IPHONE_DUO_DISPLAY). */
+     *  Optional now, reportedly required from April 2027 for iOS 27.1 SDK builds. `apple screenshots` uploads them through
+     *  the App Asset Library (display class IPHONE_DUO; there is no Duo ScreenshotDisplayType). */
     iphoneDuo?: boolean;
     /** Also render, check and upload Mac App Store screenshots (size key `mac`, 2880 x 1800, 16:10; Apple also takes
      *  2560 x 1600, 1440 x 900, 1280 x 800). Landscape layout from <frames>/<lang>/landscape/ (shots.landscape). Uploaded
diff --git a/cli/shots/spec.ts b/cli/shots/spec.ts
index 40ae395..bd67387 100644
--- a/cli/shots/spec.ts
+++ b/cli/shots/spec.ts
@@ -61,11 +61,10 @@ export const IMAGE_SPECS: Record<string, ImageSpec> = {
   feature: { store: 'play', type: 'featureGraphic', label: 'Play feature graphic', sizes: [[1024, 500]], min: 1, max: 1, maxBytes: 15 * MB, alpha: false },
 };
 
-/** ASC screenshotDisplayType per iPhone Duo size key. null = NOT IN THE API YET: ScreenshotDisplayType in App Store
- *  Connect API 4.5.1 (spec re-checked 2026-10-20: the published zip is still the 2026-10-06 one, same sha256) has no Duo value (only AppAssetLibraryDisplayClass lists IPHONE_DUO).
- *  When Apple adds it: regenerate (bun tools/gen-api.ts) and put the exact enum names here; uploads then include them. */
+/** iPhone Duo size keys. Values stay null: ScreenshotDisplayType has no Duo value and never will (API 4.5.1 put the
+ *  display class IPHONE_DUO into the App Asset Library only and deprecated screenshot sets); apple screenshots
+ *  uploads Duo through the library (cli/apple/duo-library.ts, pitfall 130). */
 export const IPHONE_DUO_DISPLAY: Record<string, string | null> = { 'iphone-duo-outer': null, 'iphone-duo-inner': null };
-export const IPHONE_DUO_NOT_IN_API = 'not uploaded: the App Store Connect API has no iPhone Duo display type yet (the console takes them); the renders stay in store/renders';
 /** Reportedly required from this date for apps built with the iOS 27.1 SDK or later. */
 export const IPHONE_DUO_REQUIRED_FROM = '2027-04-01';
 const PLAY_FOLDABLE = 'Google Play has no foldable slot: foldables show the 7" / 10" tablet screenshots (tab7, tab10, play.tablets)';
@@ -75,7 +74,7 @@ const PLAY_FOLDABLE = 'Google Play has no foldable slot: foldables show the 7" /
 export function iphoneDuoNote(o: { apple: boolean; duo: boolean; play?: boolean; today?: Date }): { level: 'info' | 'warn'; msg: string } | null {
   if (!o.apple || o.duo) return null;
   const late = (o.today ?? new Date()).toISOString().slice(0, 10) >= IPHONE_DUO_REQUIRED_FROM;
-  return { level: late ? 'warn' : 'info', msg: `no iPhone Duo screenshots (outer 1398x2034, inner 2007x2853; apple.iphoneDuo): optional now, required from April 2027 for iOS 27.1 SDK builds; the App Store Connect console takes Duo screenshots and previews, the API does not yet (apple screenshots skips them with the console link)${o.play ? `. ${PLAY_FOLDABLE}` : ''}` };
+  return { level: late ? 'warn' : 'info', msg: `no iPhone Duo screenshots (outer 1398x2034, inner 2007x2853; apple.iphoneDuo): optional now, required from April 2027 for iOS 27.1 SDK builds; apple screenshots uploads them through the App Asset Library (display class IPHONE_DUO)${o.play ? `. ${PLAY_FOLDABLE}` : ''}` };
 }
 
 /** validate / check note for an app with a macOS version but no Mac screenshots (apple.mac off or no mac renders). */
diff --git a/docs/HANDOFF.md b/docs/HANDOFF.md
index a4a4abd..e3dbda5 100644
--- a/docs/HANDOFF.md
+++ b/docs/HANDOFF.md
@@ -27,8 +27,7 @@ State of storebound for whoever picks it up next. Public-safe: no project, app o
   - The Play Games Services console page paths.
   - The Games Configuration API bodies (no pinned spec).
   - Placing a Header and Search Results asset on a live App Store version.
-- **iPhone Duo:** App Store Connect's API has no Duo screenshot type yet. Uploads skip with a console link; wire it
-  when the spec gains the type (`IPHONE_DUO_DISPLAY` in `cli/shots/spec.ts`).
+- **iPhone Duo:** uploaded through the App Asset Library (`cli/apple/duo-library.ts`); previews still use the deprecated sets.
 
 ## Rules that matter here
 
diff --git a/docs/store-art.md b/docs/store-art.md
index 3ed9fba..35a7a05 100644
--- a/docs/store-art.md
+++ b/docs/store-art.md
@@ -82,8 +82,7 @@ languages, every store size, a review gallery and an app preview video. No store
    Play takes a YouTube URL in `play.video`.
 7. **iPhone Duo (foldable).** `apple.iphoneDuo: true` renders and checks the outer (1398 x 2034) and inner
    (2007 x 2853) sets. Optional now, reportedly required from April 2027 for iOS 27.1 SDK builds (`check` / `validate`
-   note it). The API has no Duo display type yet, so `apple screenshots` skips them with a link to the console's
-   iPhone Duo tab. Play has no foldable slot: foldables use the 7" / 10" tablet sets.
+   note it). `apple screenshots` uploads them through the App Asset Library (display class IPHONE_DUO). Play has no foldable slot: foldables use the 7" / 10" tablet sets.
 
 Details: the [store-screenshots](../skills/store-screenshots/SKILL.md) and [app-previews](../skills/app-previews/SKILL.md)
 skills.
diff --git a/skills/store-pitfalls/SKILL.md b/skills/store-pitfalls/SKILL.md
index 5110489..956e371 100644
--- a/skills/store-pitfalls/SKILL.md
+++ b/skills/store-pitfalls/SKILL.md
@@ -1610,3 +1610,19 @@ that fails without the fix (see CONTRIBUTING.md).
 - **Guard:** `cli/play/old-builds.ts` (play status, validate `old-builds`), `PLAY_NOT_LIVE` in `cli/lib/portfolio.ts`,
   `isAutoSendOnly` in `cli/play/review-pending.ts` (the commit is redone without changesNotSentForReview),
   `tests/play-old-builds.test.ts`.
+
+## 130. iPhone Duo screenshots were skipped as "not in the API"
+
+- **Symptom:** `apple screenshots` skipped the iPhone Duo sets with "the API has no iPhone Duo display type yet".
+  Wrong: ScreenshotDisplayType never gets a Duo value. API 4.5.1 put the display class `IPHONE_DUO` into the App Asset
+  Library (AppAssetLibraryDisplayClass) and deprecated appScreenshotSets / appScreenshots / appPreviewSets /
+  appPreviews in the same release.
+- **Do:** `storebound apple screenshots` uploads Duo (apple.iphoneDuo, renders iphone-duo-outer/ then
+  iphone-duo-inner/) through the library: `appAssetLibraryRefData` (filter placementTypes APP_SCREENSHOT) gives the
+  iOS placementProfileGroup of IPHONE_DUO, files go up as appAssetLibraryImages (category
+  APP_SCREENSHOTS_AND_PREVIEWS), then appAssetLibraryPlacements (APP_SCREENSHOT, that placementGroup, the version
+  localization). Same MD5 reuse as creative assets; read back.
+- **Never:** say an API lacks a store feature after checking one enum: search the whole spec (every schema with the
+  feature's name) first.
+- **Guard:** `cli/apple/duo-library.ts` (duoGroups, syncDuo), `duoDirs` in `cli/apple/screenshots.ts`,
+  `tests/ppo.test.ts`. Previews and the other display classes still use the deprecated sets until they move too.
diff --git a/skills/store-screenshots/SKILL.md b/skills/store-screenshots/SKILL.md
index ad3d9f7..f0d9a5d 100644
--- a/skills/store-screenshots/SKILL.md
+++ b/skills/store-screenshots/SKILL.md
@@ -71,10 +71,9 @@ in a plain Android tablet body instead of the iPad one.
 outer (1398 x 2034) and an inner (2007 x 2853) set, portrait or landscape, PNG / JPEG without alpha, 1-10 each. It is
 optional now and reportedly required from April 2027 for builds with the iOS 27.1 SDK or later; `check` / `validate`
 print an info note until then (a warning after, never a blocker). `apple.iphoneDuo: true` adds both sizes to
-`shots render` / `shots check` / the gallery. The API (4.5.1) has no Duo `ScreenshotDisplayType` yet, so
-`apple screenshots` skips the Duo folders with a message and the deep link to the version page; add them in the
-console's iPhone Duo tab until then (one constant, `IPHONE_DUO_DISPLAY` in `cli/shots/spec.ts`, takes the names once
-the enum has them). No Duo app preview sizes are published. Google Play has no foldable slot: foldables show the
+`shots render` / `shots check` / the gallery. ScreenshotDisplayType has no Duo value (and won't get one), so
+`apple screenshots` uploads the Duo folders through the App Asset Library (display class IPHONE_DUO, placement
+APP_SCREENSHOT; pitfall 130). No Duo app preview sizes are published. Google Play has no foldable slot: foldables show the
 7" / 10" tablet sets below.
 
 **Mac App Store.** Apple's Screenshot specifications (checked 2026-10-20) list four 16:10 Mac sizes: 1280 x 800,
diff --git a/tests/ppo.test.ts b/tests/ppo.test.ts
index f4c22c2..3770a30 100644
--- a/tests/ppo.test.ts
+++ b/tests/ppo.test.ts
@@ -1,12 +1,13 @@
 import { describe, expect, test } from 'bun:test';
-import { displaySets, skippedDuoSets } from '../cli/apple/screenshots';
+import { displaySets, duoDirs } from '../cli/apple/screenshots';
+import { duoGroups, duoUpToDate } from '../cli/apple/duo-library';
 import { appleRules } from '../cli/lib/validate-rules';
 import { checkCreate, createExperimentReq, defaultName, experimentFromApi, pickExperiment, planTreatmentLocales, planTreatments, startStopReq } from '../cli/lib/ppo';
 import { validateConfig } from '../cli/lib/config';
 import { FORBIDDEN_ARGS, TOOLS, toArgv, validateInput } from '../cli/mcp-tools';
 import { requiredSets } from '../cli/shots/report';
 import { defaultSizes, SIZES } from '../cli/shots/lib';
-import { checkImage, IMAGE_SPECS, imageInfo, IPHONE_DUO_DISPLAY, IPHONE_DUO_NOT_IN_API, iphoneDuoNote } from '../cli/shots/spec';
+import { checkImage, IMAGE_SPECS, imageInfo, IPHONE_DUO_DISPLAY, iphoneDuoNote } from '../cli/shots/spec';
 import { png } from './fixtures';
 
 describe('product page optimization', () => {
@@ -91,12 +92,21 @@ describe('iPhone Duo (foldable) sizes', () => {
     expect(checkImage(imageInfo(png(2007, 2853)), 'iphone-duo-outer').map(i => i.code)).toEqual(['size']);
     expect(checkImage(imageInfo(png(2007, 2853, { colorType: 6 })), 'iphone-duo-inner').map(i => i.code)).toEqual(['alpha']);
   });
-  test('upload: no API display type yet, so the sets are skipped with the message', () => {
+  test('upload: no ScreenshotDisplayType; Duo goes through the App Asset Library (IPHONE_DUO group)', () => {
     expect(Object.values(IPHONE_DUO_DISPLAY).every(t => t === null)).toBe(true);
     expect(Object.keys(displaySets({ iphoneDuo: true }))).not.toContain('iphone-duo-outer');
-    expect(skippedDuoSets({})).toBeNull();
-    expect(skippedDuoSets({ iphoneDuo: true })).toEqual({ dirs: ['iphone-duo-outer', 'iphone-duo-inner'], msg: expect.stringContaining(`iphone-duo-outer, iphone-duo-inner: ${IPHONE_DUO_NOT_IN_API}. Add them in App Store Connect > the iOS version page > App Previews and Screenshots > iPhone Duo: https://`) });
-    expect(skippedDuoSets({ iphoneDuo: true, appId: '1234567890' })!.msg).toContain('/apps/1234567890/distribution/ios/version/inflight');
+    expect(duoDirs({})).toEqual([]);
+    expect(duoDirs({ iphoneDuo: true })).toEqual(['iphone-duo-outer', 'iphone-duo-inner']);
+    const ref = [{ attributes: { placementProfileGroups: [
+      { placementProfileGroupId: 'g-67', platform: 'IOS', displayClassId: 'IPHONE_DYNAMIC_ISLAND_LARGE_DISPLAY' },
+      { placementProfileGroupId: 'g-duo', platform: 'IOS', displayClassId: 'IPHONE_DUO' },
+      { placementProfileGroupId: 'g-duo', platform: 'IOS', displayClassId: 'IPHONE_DUO' },
+      { placementProfileGroupId: 'g-mac', platform: 'MAC_OS', displayClassId: 'IPHONE_DUO' }] } }];
+    expect(duoGroups(ref)).toEqual(['g-duo']);
+    expect(duoGroups([])).toEqual([]);
+    expect(duoUpToDate(['a', 'b'], ['a', 'b'])).toBe(true);
+    expect(duoUpToDate(['b', 'a'], ['a', 'b'])).toBe(false);
+    expect(duoUpToDate(['a', undefined], ['a', 'b'])).toBe(false);
   });
   test('check / validate note: info before April 2027, never a blocker; points Play to the tablet sets', () => {
     const before = new Date('2026-10-18'), after = new Date('2027-04-02');
@@ -106,7 +116,7 @@ describe('iPhone Duo (foldable) sizes', () => {
     expect(n.level).toBe('info');
     expect(n.msg).toContain('optional now, required from April 2027 for iOS 27.1 SDK builds');
     expect(n.msg).toContain('tablet screenshots');
-    expect(n.msg).toContain('the App Store Connect console takes Duo screenshots and previews, the API does not yet');
+    expect(n.msg).toContain('apple screenshots uploads them through the App Asset Library');
     expect(iphoneDuoNote({ apple: true, duo: false, today: after })!.level).toBe('warn');
     const base = { version: null, build: null, locales: [], expectedLocales: [], requiredDisplayTypes: [], reviewDetail: null, ageRating: null, priceSchedule: true, availability: true, iaps: [], expectedProducts: [], privacyUrl: { url: 'https://example.com/privacy', status: 200 } };
     const f = appleRules({ ...base, today: before } as unknown as Parameters<typeof appleRules>[0]).find(x => x.code === 'screenshots-duo')!;

From 1ce4f026e9185610d62db0d6d20b351f10c24867 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Sun, 8 Nov 2026 15:15:57 +0700
Subject: [PATCH 111/126] api tables: refData and asset library images now
 wrapped by apple screenshots

---
 cli/api/wrapped.gen.ts | 11 ++++++-----
 docs/api-coverage.md   | 14 +++++++-------
 2 files changed, 13 insertions(+), 12 deletions(-)

diff --git a/cli/api/wrapped.gen.ts b/cli/api/wrapped.gen.ts
index 0fced3e..930482c 100644
--- a/cli/api/wrapped.gen.ts
+++ b/cli/api/wrapped.gen.ts
@@ -7,10 +7,11 @@ export const WRAPPED: { apple: Record<string, string>; play: Record<string, stri
     'analyticsReportRequests_createInstance': 'analytics',
     'analyticsReportRequests_reports_getToManyRelated': 'analytics',
     'analyticsReports_instances_getToManyRelated': 'analytics',
-    'appAssetLibraries_images_getToManyRelated': 'apple/creative-assets',
+    'appAssetLibraries_images_getToManyRelated': 'apple/creative-assets apple/duo-library',
     'appAssetLibraries_videos_getToManyRelated': 'apple/creative-assets',
-    'appAssetLibraryPlacements_createInstance': 'apple/creative-assets',
-    'appAssetLibraryPlacements_deleteInstance': 'apple/creative-assets',
+    'appAssetLibraryPlacements_createInstance': 'apple/creative-assets apple/duo-library',
+    'appAssetLibraryPlacements_deleteInstance': 'apple/creative-assets apple/duo-library',
+    'appAssetLibraryRefData_getCollection': 'apple/duo-library',
     'appAvailabilitiesV2_createInstance': 'apple/appinfo',
     'appAvailabilitiesV2_territoryAvailabilities_getToManyRelated': 'apple/appinfo apple/preorder',
     'appCustomProductPageLocalizations_appScreenshotSets_getToManyRelated': 'apple/cpp',
@@ -64,7 +65,7 @@ export const WRAPPED: { apple: Record<string, string>; play: Record<string, stri
     'appStoreVersionLocalizations_appPreviewSets_getToManyRelated': 'apple/previews art',
     'appStoreVersionLocalizations_appScreenshotSets_getToManyRelated': 'apple/device-families apple/screenshot-health apple/screenshots art validate',
     'appStoreVersionLocalizations_createInstance': 'listing-store',
-    'appStoreVersionLocalizations_placements_getToManyRelated': 'apple/creative-assets',
+    'appStoreVersionLocalizations_placements_getToManyRelated': 'apple/creative-assets apple/duo-library',
     'appStoreVersionLocalizations_updateInstance': 'listing-store',
     'appStoreVersionPhasedReleases_createInstance': 'apple/release',
     'appStoreVersionPhasedReleases_updateInstance': 'apple/release',
@@ -87,7 +88,7 @@ export const WRAPPED: { apple: Record<string, string>; play: Record<string, stri
     'apps_appPriceSchedule_getToOneRelated': 'apple/appinfo validate',
     'apps_appStoreVersionExperimentsV2_getToManyRelated': 'apple/ppo',
     'apps_appStoreVersions_getToManyRelated': 'apple/asc apple/creative-assets apple/iap-submit apple/platform apple/review-details apple/status art lib/store-apps listing-store onboard',
-    'apps_assetLibrary_getToOneRelated': 'apple/creative-assets',
+    'apps_assetLibrary_getToOneRelated': 'apple/creative-assets apple/duo-library',
     'apps_betaAppLocalizations_getToManyRelated': 'apple/testflight',
     'apps_betaAppReviewDetail_getToOneRelated': 'apple/testflight',
     'apps_betaFeedbackCrashSubmissions_getToManyRelated': 'health',
diff --git a/docs/api-coverage.md b/docs/api-coverage.md
index e5db8ff..217466b 100644
--- a/docs/api-coverage.md
+++ b/docs/api-coverage.md
@@ -12,7 +12,7 @@ Specs: Apple [App Store Connect API 4.5.1](https://developer.apple.com/sample-co
 
 | API | operations | GET | other | wrapped by a command | owner only |
 |---|---:|---:|---:|---:|---:|
-| App Store Connect API 4.5.1 | 1303 | 826 | 477 | 235 | 166 |
+| App Store Connect API 4.5.1 | 1303 | 826 | 477 | 236 | 166 |
 | Google Play Android Developer API v3 (revision 20261008) | 145 | 45 | 100 | 35 | 49 |
 | Google Play Developer Reporting API v1beta1 (revision 20261008) | 25 | 15 | 10 | 6 | 0 |
 
@@ -80,7 +80,7 @@ Specs: Apple [App Store Connect API 4.5.1](https://developer.apple.com/sample-co
 | `androidToIosAppMappingDetails_updateInstance` | PATCH | `/v1/androidToIosAppMappingDetails/{id}` | write (dry by default) |  |
 | **appAssetLibraries** (5) | | | | |
 | `appAssetLibraries_getInstance` | GET | `/v1/appAssetLibraries/{id}` | read |  |
-| `appAssetLibraries_images_getToManyRelated` | GET | `/v1/appAssetLibraries/{id}/images` | read | apple/creative-assets |
+| `appAssetLibraries_images_getToManyRelated` | GET | `/v1/appAssetLibraries/{id}/images` | read | apple/creative-assets, apple/duo-library |
 | `appAssetLibraries_images_getToManyRelationship` | GET | `/v1/appAssetLibraries/{id}/relationships/images` | read |  |
 | `appAssetLibraries_videos_getToManyRelated` | GET | `/v1/appAssetLibraries/{id}/videos` | read | apple/creative-assets |
 | `appAssetLibraries_videos_getToManyRelationship` | GET | `/v1/appAssetLibraries/{id}/relationships/videos` | read |  |
@@ -94,11 +94,11 @@ Specs: Apple [App Store Connect API 4.5.1](https://developer.apple.com/sample-co
 | **appAssetLibraryPlacementOrderingRequests** (1) | | | | |
 | `appAssetLibraryPlacementOrderingRequests_createInstance` | POST | `/v1/appAssetLibraryPlacementOrderingRequests` | write (dry by default) |  |
 | **appAssetLibraryPlacements** (3) | | | | |
-| `appAssetLibraryPlacements_createInstance` | POST | `/v1/appAssetLibraryPlacements` | write (dry by default) | apple/creative-assets |
-| `appAssetLibraryPlacements_deleteInstance` | DELETE | `/v1/appAssetLibraryPlacements/{id}` | owner only (typed confirm) | apple/creative-assets |
+| `appAssetLibraryPlacements_createInstance` | POST | `/v1/appAssetLibraryPlacements` | write (dry by default) | apple/creative-assets, apple/duo-library |
+| `appAssetLibraryPlacements_deleteInstance` | DELETE | `/v1/appAssetLibraryPlacements/{id}` | owner only (typed confirm) | apple/creative-assets, apple/duo-library |
 | `appAssetLibraryPlacements_getInstance` | GET | `/v1/appAssetLibraryPlacements/{id}` | read |  |
 | **appAssetLibraryRefData** (2) | | | | |
-| `appAssetLibraryRefData_getCollection` | GET | `/v1/appAssetLibraryRefData` | read |  |
+| `appAssetLibraryRefData_getCollection` | GET | `/v1/appAssetLibraryRefData` | read | apple/duo-library |
 | `appAssetLibraryRefData_getInstance` | GET | `/v1/appAssetLibraryRefData/{id}` | read |  |
 | **appAssetLibraryVideos** (6) | | | | |
 | `appAssetLibraryVideos_createInstance` | POST | `/v1/appAssetLibraryVideos` | write (dry by default) |  |
@@ -342,7 +342,7 @@ Specs: Apple [App Store Connect API 4.5.1](https://developer.apple.com/sample-co
 | `appStoreVersionLocalizations_createInstance` | POST | `/v1/appStoreVersionLocalizations` | write (dry by default) | listing-store |
 | `appStoreVersionLocalizations_deleteInstance` | DELETE | `/v1/appStoreVersionLocalizations/{id}` | owner only (typed confirm) |  |
 | `appStoreVersionLocalizations_getInstance` | GET | `/v1/appStoreVersionLocalizations/{id}` | read |  |
-| `appStoreVersionLocalizations_placements_getToManyRelated` | GET | `/v1/appStoreVersionLocalizations/{id}/placements` | read | apple/creative-assets |
+| `appStoreVersionLocalizations_placements_getToManyRelated` | GET | `/v1/appStoreVersionLocalizations/{id}/placements` | read | apple/creative-assets, apple/duo-library |
 | `appStoreVersionLocalizations_placements_getToManyRelationship` | GET | `/v1/appStoreVersionLocalizations/{id}/relationships/placements` | read |  |
 | `appStoreVersionLocalizations_searchKeywords_createToManyRelationship` | POST | `/v1/appStoreVersionLocalizations/{id}/relationships/searchKeywords` | write (dry by default) |  |
 | `appStoreVersionLocalizations_searchKeywords_deleteToManyRelationship` | DELETE | `/v1/appStoreVersionLocalizations/{id}/relationships/searchKeywords` | owner only (typed confirm) |  |
@@ -425,7 +425,7 @@ Specs: Apple [App Store Connect API 4.5.1](https://developer.apple.com/sample-co
 | `apps_appStoreVersions_getToManyRelationship` | GET | `/v1/apps/{id}/relationships/appStoreVersions` | read |  |
 | `apps_appTags_getToManyRelated` | GET | `/v1/apps/{id}/appTags` | read |  |
 | `apps_appTags_getToManyRelationship` | GET | `/v1/apps/{id}/relationships/appTags` | read |  |
-| `apps_assetLibrary_getToOneRelated` | GET | `/v1/apps/{id}/assetLibrary` | read | apple/creative-assets |
+| `apps_assetLibrary_getToOneRelated` | GET | `/v1/apps/{id}/assetLibrary` | read | apple/creative-assets, apple/duo-library |
 | `apps_assetLibrary_getToOneRelationship` | GET | `/v1/apps/{id}/relationships/assetLibrary` | read |  |
 | `apps_backgroundAssets_getToManyRelated` | GET | `/v1/apps/{id}/backgroundAssets` | read |  |
 | `apps_backgroundAssets_getToManyRelationship` | GET | `/v1/apps/{id}/relationships/backgroundAssets` | read |  |

From 8573c9f6ae06deb7f79fe88c417ca75630dd73cc Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Sun, 8 Nov 2026 15:18:12 +0700
Subject: [PATCH 112/126] flags.json: regenerated

---
 cli/data/flags.json | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/cli/data/flags.json b/cli/data/flags.json
index 9e5aed1..b8058b6 100644
--- a/cli/data/flags.json
+++ b/cli/data/flags.json
@@ -106,6 +106,7 @@
    "name"
   ],
   "apple cpp": [
+   "add-for-review",
    "include-drafts",
    "jobs",
    "name",
@@ -116,6 +117,7 @@
    "repair-stuck",
    "src",
    "variant",
+   "verify",
    "write"
   ],
   "apple creative-assets": [
@@ -204,6 +206,7 @@
    "write"
   ],
   "apple ppo": [
+   "add-for-review",
    "experiment",
    "include-drafts",
    "jobs",
@@ -215,6 +218,7 @@
    "src",
    "traffic",
    "variant",
+   "verify",
    "write"
   ],
   "apple preorder": [
@@ -270,6 +274,7 @@
    "platform"
   ],
   "apple screenshots": [
+   "add-for-review",
    "include-drafts",
    "jobs",
    "not-sent-for-review",
@@ -278,6 +283,7 @@
    "repair-stuck",
    "src",
    "variant",
+   "verify",
    "write"
   ],
   "apple signing": [

From f6f9fc3c41f8c2edba1a02319c69b507a963c413 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Sun, 8 Nov 2026 15:20:10 +0700
Subject: [PATCH 113/126] storebound 0.8.72: version in package.json and every
 copy, CHANGELOG 0.8.72 section

---
 .claude-plugin/marketplace.json        | 2 +-
 .claude-plugin/plugin.json             | 2 +-
 .codex-plugin/plugin.json              | 2 +-
 CHANGELOG.md                           | 2 ++
 apps/desktop/package.json              | 2 +-
 apps/desktop/src-tauri/Cargo.lock      | 2 +-
 apps/desktop/src-tauri/Cargo.toml      | 2 +-
 apps/desktop/src-tauri/tauri.conf.json | 2 +-
 gemini-extension.json                  | 2 +-
 package.json                           | 2 +-
 10 files changed, 11 insertions(+), 9 deletions(-)

diff --git a/.claude-plugin/marketplace.json b/.claude-plugin/marketplace.json
index d043258..f60726c 100644
--- a/.claude-plugin/marketplace.json
+++ b/.claude-plugin/marketplace.json
@@ -9,7 +9,7 @@
       "name": "storebound",
       "source": ".",
       "description": "Take a mobile app or game from nothing to Submit for review on both stores: skills for every store step and questionnaire plus the storebound CLI and MCP server.",
-      "version": "0.8.71",
+      "version": "0.8.72",
       "category": "development",
       "tags": [
         "mobile",
diff --git a/.claude-plugin/plugin.json b/.claude-plugin/plugin.json
index 500cd9c..1c86081 100644
--- a/.claude-plugin/plugin.json
+++ b/.claude-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.71",
+  "version": "0.8.72",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/.codex-plugin/plugin.json b/.codex-plugin/plugin.json
index de2766c..a2817a3 100644
--- a/.codex-plugin/plugin.json
+++ b/.codex-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.71",
+  "version": "0.8.72",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 8c13b66..3362120 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,8 @@
 
 ## Unreleased
 
+## 0.8.72 · 2026-11-08
+
 - **iPhone Duo screenshots upload.** `apple screenshots` now sends them through the App Asset Library (display class
   IPHONE_DUO, placement APP_SCREENSHOT) instead of skipping them as "not in the API" (pitfall 130).
 
diff --git a/apps/desktop/package.json b/apps/desktop/package.json
index f751247..ff6c949 100644
--- a/apps/desktop/package.json
+++ b/apps/desktop/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@storebound/desktop",
-  "version": "0.8.71",
+  "version": "0.8.72",
   "private": true,
   "license": "MIT",
   "type": "module",
diff --git a/apps/desktop/src-tauri/Cargo.lock b/apps/desktop/src-tauri/Cargo.lock
index 0e0a53d..01c201b 100644
--- a/apps/desktop/src-tauri/Cargo.lock
+++ b/apps/desktop/src-tauri/Cargo.lock
@@ -4096,7 +4096,7 @@ checksum = "a2eb9349b6444b326872e140eb1cf5e7c522154d69e7a0ffb0fb81c06b37543f"
 
 [[package]]
 name = "storebound-desktop"
-version = "0.8.71"
+version = "0.8.72"
 dependencies = [
  "base64 0.22.1",
  "getrandom 0.3.4",
diff --git a/apps/desktop/src-tauri/Cargo.toml b/apps/desktop/src-tauri/Cargo.toml
index 63d4b68..ea83d16 100644
--- a/apps/desktop/src-tauri/Cargo.toml
+++ b/apps/desktop/src-tauri/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "storebound-desktop"
-version = "0.8.71"
+version = "0.8.72"
 description = "storebound desktop: every game's releases on both stores in one window"
 license = "MIT"
 edition = "2021"
diff --git a/apps/desktop/src-tauri/tauri.conf.json b/apps/desktop/src-tauri/tauri.conf.json
index 71b964e..fcc5157 100644
--- a/apps/desktop/src-tauri/tauri.conf.json
+++ b/apps/desktop/src-tauri/tauri.conf.json
@@ -2,7 +2,7 @@
   "$schema": "https://schema.tauri.app/config/2",
   "productName": "storebound",
   "mainBinaryName": "storebound-desktop",
-  "version": "0.8.71",
+  "version": "0.8.72",
   "identifier": "dev.storebound.desktop",
   "build": {
     "frontendDist": "../dist",
diff --git a/gemini-extension.json b/gemini-extension.json
index f425eaf..b971bd0 100644
--- a/gemini-extension.json
+++ b/gemini-extension.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.71",
+  "version": "0.8.72",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "contextFileName": "GEMINI.md",
   "mcpServers": {
diff --git a/package.json b/package.json
index 0593b88..1da9c55 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.71",
+  "version": "0.8.72",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every store questionnaire (incl. account deletion and App Review demo accounts), privacy, icons, screenshots and previews, TestFlight. After launch: crash vitals, review replies, price sheets, analytics and Product Page Optimization. One config, a CLI (Node 20+ or Bun), an MCP server and Agent Skills for your AI coding agent.",
   "license": "MIT",
   "author": "CRTkafa",

From b18d480d6552945aa4ee8a512aa77d806b43a497 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Sun, 8 Nov 2026 15:48:58 +0700
Subject: [PATCH 114/126] iPhone Duo: accept platform IPHONE_APP_STORE from
 appAssetLibraryRefData; a Duo failure warns, other sets continue

---
 CHANGELOG.md             | 2 ++
 cli/apple/duo-library.ts | 4 ++--
 cli/apple/screenshots.ts | 7 ++++---
 tests/ppo.test.ts        | 1 +
 4 files changed, 9 insertions(+), 5 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 3362120..e3ef69b 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,8 @@
 
 ## Unreleased
 
+- **iPhone Duo:** the live API names the platform IPHONE_APP_STORE (not IOS); accepted. A Duo problem now warns and the other screenshot sets still upload.
+
 ## 0.8.72 · 2026-11-08
 
 - **iPhone Duo screenshots upload.** `apple screenshots` now sends them through the App Asset Library (display class
diff --git a/cli/apple/duo-library.ts b/cli/apple/duo-library.ts
index 86c620e..8e090fc 100644
--- a/cli/apple/duo-library.ts
+++ b/cli/apple/duo-library.ts
@@ -22,11 +22,11 @@ export const DUO_CATEGORY = 'APP_SCREENSHOTS_AND_PREVIEWS';
 export const DUO_MAX = 10;
 const sumOf = (a: J | undefined): string | undefined => /^storebound ([0-9a-f]{32})$/.exec(String(a?.attributes?.referenceName ?? ''))?.[1];
 
-/** iOS placement profile group ids of the IPHONE_DUO display class in an appAssetLibraryRefData response. Pure. */
+/** iPhone placement profile group ids (platform IOS or IPHONE_APP_STORE, as the live API answers) of the IPHONE_DUO display class in an appAssetLibraryRefData response. Pure. */
 export function duoGroups(refData: J[]): string[] {
   const ids = new Set<string>();
   for (const r of refData) for (const g of (r?.attributes?.placementProfileGroups ?? []) as J[])
-    if (g?.displayClassId === 'IPHONE_DUO' && (!g.platform || g.platform === 'IOS') && g.placementProfileGroupId) ids.add(String(g.placementProfileGroupId));
+    if (g?.displayClassId === 'IPHONE_DUO' && (!g.platform || /IOS|IPHONE/.test(String(g.platform))) && g.placementProfileGroupId) ids.add(String(g.placementProfileGroupId));
   return [...ids];
 }
 
diff --git a/cli/apple/screenshots.ts b/cli/apple/screenshots.ts
index fc2adb6..de2f3fe 100644
--- a/cli/apple/screenshots.ts
+++ b/cli/apple/screenshots.ts
@@ -96,8 +96,9 @@ export async function run(ctx: Ctx): Promise<void> {
   const version = await c.editableVersion(platform);
   if (!version) throw new Error(`no editable ${platformLabel(platform)} App Store version (run apple listing --version x.y.z first)`);
   log('apple', `screenshots for version ${versionLabel(version)}`);
-  const duo = platform === 'MAC_OS' ? [] : duoDirs(config.apple);
-  const duoGroupId = duo.length ? await duoGroup(c) : '';
+  let duo = platform === 'MAC_OS' ? [] : duoDirs(config.apple);
+  // a Duo problem never stops the other sets
+  const duoGroupId = duo.length ? await duoGroup(c).catch((e: Error) => { warn('apple', `iPhone Duo skipped: ${e.message}`); duo = []; return ''; }) : '';
   const appId = duo.length ? await c.app() : '';
   if (platform === 'MAC_OS' && !config.apple?.mac) throw new Error('macOS version: set apple.mac: true and render the mac size (storebound shots render --size mac) first');
   if (platform !== 'MAC_OS' && config.apple?.mac) log('apple', 'Mac screenshots (mac/, APP_DESKTOP) go to the macOS version: run apple screenshots --platform macos');
@@ -129,7 +130,7 @@ export async function run(ctx: Ctx): Promise<void> {
       if (duo.length) {
         const files = duo.flatMap(dir => numberedImages(join(src, lang.id, dir)).filter(f => f.endsWith('.png')));
         if (!files.length) warn('apple', `${locale}: nothing in ${duo.map(d => join(src, lang.id, d)).join(' or ')}, iPhone Duo skipped`);
-        else await syncDuo(c, { appId, group: duoGroupId, loc, files, dry: ctx.args.has('dry') });
+        else await syncDuo(c, { appId, group: duoGroupId, loc, files, dry: ctx.args.has('dry') }).catch((e: Error) => { warn('apple', `${locale} iPhone Duo: ${e.message}`); process.exitCode = 1; });
       }
     });
   }
diff --git a/tests/ppo.test.ts b/tests/ppo.test.ts
index 3770a30..0d147fa 100644
--- a/tests/ppo.test.ts
+++ b/tests/ppo.test.ts
@@ -104,6 +104,7 @@ describe('iPhone Duo (foldable) sizes', () => {
       { placementProfileGroupId: 'g-mac', platform: 'MAC_OS', displayClassId: 'IPHONE_DUO' }] } }];
     expect(duoGroups(ref)).toEqual(['g-duo']);
     expect(duoGroups([])).toEqual([]);
+    expect(duoGroups([{ attributes: { placementProfileGroups: [{ placementProfileGroupId: 'IPHONE_DUO_PROFILE', platform: 'IPHONE_APP_STORE', displayClassId: 'IPHONE_DUO' }] } }])).toEqual(['IPHONE_DUO_PROFILE']);
     expect(duoUpToDate(['a', 'b'], ['a', 'b'])).toBe(true);
     expect(duoUpToDate(['b', 'a'], ['a', 'b'])).toBe(false);
     expect(duoUpToDate(['a', undefined], ['a', 'b'])).toBe(false);

From b361e226310774a58b31f7c40f8e599cfc7f07c9 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Sun, 8 Nov 2026 15:50:43 +0700
Subject: [PATCH 115/126] ci: re-run (bun download 504)


From 96458bba5cb3d37749c615984f1c5d3c79ecb2da Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Sun, 8 Nov 2026 16:17:34 +0700
Subject: [PATCH 116/126] ci: re-run (GitHub download outage)


From 3a22d7f4550af417a3a743069118cb3d47e72941 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Sun, 8 Nov 2026 16:23:15 +0700
Subject: [PATCH 117/126] ci: install bun from the npm registry (GitHub release
 assets answer 504 now and then), bun.sh with retries as fallback

---
 .forgejo/actions/linux-setup/action.yml |  2 +-
 .forgejo/workflows/acceptance.yml       |  4 ++--
 .forgejo/workflows/ci.yml               |  6 +++---
 .forgejo/workflows/release.yml          |  2 +-
 tools/ci-install-bun.sh                 | 14 ++++++++++++++
 5 files changed, 21 insertions(+), 7 deletions(-)
 create mode 100644 tools/ci-install-bun.sh

diff --git a/.forgejo/actions/linux-setup/action.yml b/.forgejo/actions/linux-setup/action.yml
index a16be63..ec2f37f 100644
--- a/.forgejo/actions/linux-setup/action.yml
+++ b/.forgejo/actions/linux-setup/action.yml
@@ -35,7 +35,7 @@ runs:
       shell: bash
       run: |
         P="${FORGEJO_PATH:-$GITHUB_PATH}"
-        curl -fsSL https://bun.sh/install | bash -s "bun-v${BUN_VERSION}" >/dev/null
+        bash tools/ci-install-bun.sh
         echo "$HOME/.bun/bin" >> "$P"
         command -v rustup || curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh -s -- -y --profile minimal
         echo "$HOME/.cargo/bin" >> "$P"
diff --git a/.forgejo/workflows/acceptance.yml b/.forgejo/workflows/acceptance.yml
index cc5cbb2..e6a4b22 100644
--- a/.forgejo/workflows/acceptance.yml
+++ b/.forgejo/workflows/acceptance.yml
@@ -33,7 +33,7 @@ jobs:
         if: ${{ matrix.platform == 'Linux' }}
         shell: bash
         run: |
-          curl -fsSL https://bun.sh/install | bash -s "bun-v${BUN_VERSION}" >/dev/null
+          bash tools/ci-install-bun.sh
           echo "$HOME/.bun/bin" >> "${FORGEJO_PATH:-$GITHUB_PATH}"
       - name: Acceptance matrix (Linux)
         if: ${{ matrix.platform == 'Linux' }}
@@ -97,7 +97,7 @@ jobs:
           path: acceptance-runs/Windows-bun
       - name: Matrix (markdown), red cells fail the job
         run: |
-          curl -fsSL https://bun.sh/install | bash -s "bun-v${BUN_VERSION}" >/dev/null
+          bash tools/ci-install-bun.sh
           export PATH="$HOME/.bun/bin:$PATH"
           V=$(bun tools/desktop-version.ts --print)
           mkdir -p out
diff --git a/.forgejo/workflows/ci.yml b/.forgejo/workflows/ci.yml
index d0d95da..ff134a6 100644
--- a/.forgejo/workflows/ci.yml
+++ b/.forgejo/workflows/ci.yml
@@ -102,7 +102,7 @@ jobs:
         if: ${{ matrix.platform == 'Linux' }}
         shell: bash
         run: |
-          curl -fsSL https://bun.sh/install | bash -s "bun-v${BUN_VERSION}" >/dev/null
+          bash tools/ci-install-bun.sh
           echo "$HOME/.bun/bin" >> "${FORGEJO_PATH:-$GITHUB_PATH}"
       - name: Acceptance matrix (Linux)
         if: ${{ matrix.platform == 'Linux' }}
@@ -371,7 +371,7 @@ jobs:
       - uses: actions/checkout@v4
       - name: Tools
         run: |
-          curl -fsSL https://bun.sh/install | bash -s "bun-v${BUN_VERSION}" >/dev/null
+          bash tools/ci-install-bun.sh
           echo "$HOME/.bun/bin" >> "${FORGEJO_PATH:-$GITHUB_PATH}"
       - uses: actions/download-artifact@v3
         with:
@@ -406,7 +406,7 @@ jobs:
       # no apt: the installers were scanned with the private terms in their own jobs; this job only records
       - name: Tools
         run: |
-          curl -fsSL https://bun.sh/install | bash -s "bun-v${BUN_VERSION}" >/dev/null
+          bash tools/ci-install-bun.sh
           echo "$HOME/.bun/bin" >> "${FORGEJO_PATH:-$GITHUB_PATH}"
           [ -n "$FORGEJO_TOKEN" ] || { echo "secret RELEASE_TOKEN is missing (repo Settings > Actions > Secrets)" >&2; exit 1; }
       - uses: actions/download-artifact@v3
diff --git a/.forgejo/workflows/release.yml b/.forgejo/workflows/release.yml
index ee88ef0..e77a9fd 100644
--- a/.forgejo/workflows/release.yml
+++ b/.forgejo/workflows/release.yml
@@ -61,7 +61,7 @@ jobs:
       - name: Tag, package.json version, every version copy and the CHANGELOG agree
         id: check
         run: |
-          curl -fsSL https://bun.sh/install | bash -s "bun-v${BUN_VERSION}" >/dev/null
+          bash tools/ci-install-bun.sh
           echo "$HOME/.bun/bin" >> "${FORGEJO_PATH:-$GITHUB_PATH}"
           export PATH="$HOME/.bun/bin:$PATH"
           bun tools/desktop-version.ts
diff --git a/tools/ci-install-bun.sh b/tools/ci-install-bun.sh
new file mode 100644
index 0000000..8071050
--- /dev/null
+++ b/tools/ci-install-bun.sh
@@ -0,0 +1,14 @@
+#!/usr/bin/env bash
+# Installs bun $1 (or $BUN_VERSION) into ~/.bun/bin on a Linux CI runner from the npm registry (@oven/bun-linux-<arch>),
+# because GitHub's oven-sh/bun release assets answer 504 now and then; bun.sh/install with retries is the fallback.
+set -u
+V="${1:-${BUN_VERSION:?BUN_VERSION}}"
+case "$(uname -m)" in aarch64|arm64) A=aarch64 ;; *) A=x64 ;; esac
+D="$HOME/.bun/bin"; mkdir -p "$D"; T=$(mktemp -d)
+for i in 1 2 3; do
+  if curl -fsSL --max-time 120 "https://registry.npmjs.org/@oven/bun-linux-$A/-/bun-linux-$A-$V.tgz" | tar -xz -C "$T" \
+    && install -m 755 "$T/package/bin/bun" "$D/bun"; then ln -sf bun "$D/bunx"; "$D/bun" --version; exit 0; fi
+  sleep 10
+done
+for i in 1 2 3; do curl -fsSL https://bun.sh/install | bash -s "bun-v$V" >/dev/null && { "$D/bun" --version; exit 0; }; sleep 20; done
+echo "bun $V: npm registry and GitHub both failed" >&2; exit 1

From f637c5e4e7f3fdd02e8fd8228b6b8f491a06f3cc Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Sun, 8 Nov 2026 16:26:03 +0700
Subject: [PATCH 118/126] storebound 0.8.73: version in package.json and every
 copy, CHANGELOG 0.8.73 section

---
 .claude-plugin/marketplace.json        | 2 +-
 .claude-plugin/plugin.json             | 2 +-
 .codex-plugin/plugin.json              | 2 +-
 CHANGELOG.md                           | 2 ++
 apps/desktop/package.json              | 2 +-
 apps/desktop/src-tauri/Cargo.lock      | 2 +-
 apps/desktop/src-tauri/Cargo.toml      | 2 +-
 apps/desktop/src-tauri/tauri.conf.json | 2 +-
 gemini-extension.json                  | 2 +-
 package.json                           | 2 +-
 10 files changed, 11 insertions(+), 9 deletions(-)

diff --git a/.claude-plugin/marketplace.json b/.claude-plugin/marketplace.json
index f60726c..62a1df1 100644
--- a/.claude-plugin/marketplace.json
+++ b/.claude-plugin/marketplace.json
@@ -9,7 +9,7 @@
       "name": "storebound",
       "source": ".",
       "description": "Take a mobile app or game from nothing to Submit for review on both stores: skills for every store step and questionnaire plus the storebound CLI and MCP server.",
-      "version": "0.8.72",
+      "version": "0.8.73",
       "category": "development",
       "tags": [
         "mobile",
diff --git a/.claude-plugin/plugin.json b/.claude-plugin/plugin.json
index 1c86081..11502d2 100644
--- a/.claude-plugin/plugin.json
+++ b/.claude-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.72",
+  "version": "0.8.73",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/.codex-plugin/plugin.json b/.codex-plugin/plugin.json
index a2817a3..ae6a14b 100644
--- a/.codex-plugin/plugin.json
+++ b/.codex-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.72",
+  "version": "0.8.73",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/CHANGELOG.md b/CHANGELOG.md
index e3ef69b..99b9fd8 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,8 @@
 
 ## Unreleased
 
+## 0.8.73 · 2026-11-08
+
 - **iPhone Duo:** the live API names the platform IPHONE_APP_STORE (not IOS); accepted. A Duo problem now warns and the other screenshot sets still upload.
 
 ## 0.8.72 · 2026-11-08
diff --git a/apps/desktop/package.json b/apps/desktop/package.json
index ff6c949..c410b0b 100644
--- a/apps/desktop/package.json
+++ b/apps/desktop/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@storebound/desktop",
-  "version": "0.8.72",
+  "version": "0.8.73",
   "private": true,
   "license": "MIT",
   "type": "module",
diff --git a/apps/desktop/src-tauri/Cargo.lock b/apps/desktop/src-tauri/Cargo.lock
index 01c201b..dd4cc4a 100644
--- a/apps/desktop/src-tauri/Cargo.lock
+++ b/apps/desktop/src-tauri/Cargo.lock
@@ -4096,7 +4096,7 @@ checksum = "a2eb9349b6444b326872e140eb1cf5e7c522154d69e7a0ffb0fb81c06b37543f"
 
 [[package]]
 name = "storebound-desktop"
-version = "0.8.72"
+version = "0.8.73"
 dependencies = [
  "base64 0.22.1",
  "getrandom 0.3.4",
diff --git a/apps/desktop/src-tauri/Cargo.toml b/apps/desktop/src-tauri/Cargo.toml
index ea83d16..349c6f1 100644
--- a/apps/desktop/src-tauri/Cargo.toml
+++ b/apps/desktop/src-tauri/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "storebound-desktop"
-version = "0.8.72"
+version = "0.8.73"
 description = "storebound desktop: every game's releases on both stores in one window"
 license = "MIT"
 edition = "2021"
diff --git a/apps/desktop/src-tauri/tauri.conf.json b/apps/desktop/src-tauri/tauri.conf.json
index fcc5157..d4e2779 100644
--- a/apps/desktop/src-tauri/tauri.conf.json
+++ b/apps/desktop/src-tauri/tauri.conf.json
@@ -2,7 +2,7 @@
   "$schema": "https://schema.tauri.app/config/2",
   "productName": "storebound",
   "mainBinaryName": "storebound-desktop",
-  "version": "0.8.72",
+  "version": "0.8.73",
   "identifier": "dev.storebound.desktop",
   "build": {
     "frontendDist": "../dist",
diff --git a/gemini-extension.json b/gemini-extension.json
index b971bd0..40ed0e8 100644
--- a/gemini-extension.json
+++ b/gemini-extension.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.72",
+  "version": "0.8.73",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "contextFileName": "GEMINI.md",
   "mcpServers": {
diff --git a/package.json b/package.json
index 1da9c55..c63e1d6 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.72",
+  "version": "0.8.73",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every store questionnaire (incl. account deletion and App Review demo accounts), privacy, icons, screenshots and previews, TestFlight. After launch: crash vitals, review replies, price sheets, analytics and Product Page Optimization. One config, a CLI (Node 20+ or Bun), an MCP server and Agent Skills for your AI coding agent.",
   "license": "MIT",
   "author": "CRTkafa",

From c5173e4caee3d1aa178817b36b9a0e1f01ae079f Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Sun, 8 Nov 2026 16:55:29 +0700
Subject: [PATCH 119/126] ci: cache ~/.cache/tauri and retry the Linux bundle
 (GitHub release 504s); CHANGELOG note for 0.8.73

---
 .forgejo/actions/linux-setup/action.yml | 1 +
 .forgejo/workflows/ci.yml               | 5 +++--
 CHANGELOG.md                            | 2 ++
 3 files changed, 6 insertions(+), 2 deletions(-)

diff --git a/.forgejo/actions/linux-setup/action.yml b/.forgejo/actions/linux-setup/action.yml
index ec2f37f..2f0d06c 100644
--- a/.forgejo/actions/linux-setup/action.yml
+++ b/.forgejo/actions/linux-setup/action.yml
@@ -26,6 +26,7 @@ runs:
       with:
         path: |
           ~/.bun/install/cache
+          ~/.cache/tauri
           ~/.cargo/registry/index
           ~/.cargo/registry/cache
           ~/.cargo/git/db
diff --git a/.forgejo/workflows/ci.yml b/.forgejo/workflows/ci.yml
index ff134a6..b411154 100644
--- a/.forgejo/workflows/ci.yml
+++ b/.forgejo/workflows/ci.yml
@@ -173,7 +173,8 @@ jobs:
         working-directory: apps/desktop
         run: |
           rm -rf "$CARGO_TARGET_DIR/release/bundle"
-          bun ../../tools/desktop-release.ts exec -- bunx tauri build --bundles appimage,deb --ci
+          # the AppImage tools come from GitHub releases, which answer 504 now and then (cached in ~/.cache/tauri)
+          for i in 1 2 3; do bun ../../tools/desktop-release.ts exec -- bunx tauri build --bundles appimage,deb --ci && break; [ $i = 3 ] && exit 1; sleep 30; done
       - name: Self-test the exact artifacts
         run: |
           V=$(bun tools/desktop-version.ts --print)
@@ -237,7 +238,7 @@ jobs:
           bun tools/build-sidecars.ts --target bun-linux-x64
           patchelf --set-rpath '$ORIGIN/../lib' apps/desktop/src-tauri/binaries/storebound-x86_64-unknown-linux-gnu
           B="$CARGO_TARGET_DIR/release/bundle"; rm -rf "$B"
-          (cd apps/desktop && bun ../../tools/desktop-release.ts exec -- bunx tauri build --bundles appimage,deb --ci)
+          for i in 1 2 3; do (cd apps/desktop && bun ../../tools/desktop-release.ts exec -- bunx tauri build --bundles appimage,deb --ci) && break; [ $i = 3 ] && exit 1; sleep 30; done
           mkdir -p dev && cp "$B/appimage/storebound_${V}_amd64.AppImage" "$B/deb/storebound_${V}_amd64.deb" dev/
           chmod +x dev/*.AppImage
           (cd /tmp && rm -rf squashfs-root && "$GITHUB_WORKSPACE/dev/storebound_${V}_amd64.AppImage" --appimage-extract >/dev/null && squashfs-root/usr/bin/storebound-desktop --self-test)
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 99b9fd8..efab712 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,8 @@
 
 ## Unreleased
 
+- 0.8.73 was tagged but not published (a GitHub 504 in the Linux AppImage bundling); 0.8.74 ships its section below. CI caches the AppImage tools and retries the Linux bundle.
+
 ## 0.8.73 · 2026-11-08
 
 - **iPhone Duo:** the live API names the platform IPHONE_APP_STORE (not IOS); accepted. A Duo problem now warns and the other screenshot sets still upload.

From ab97d6d72f80a151404401c58b43c34dc1094c60 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Sun, 8 Nov 2026 16:58:18 +0700
Subject: [PATCH 120/126] storebound 0.8.74: version in package.json and every
 copy, CHANGELOG 0.8.74 section

---
 .claude-plugin/marketplace.json        | 2 +-
 .claude-plugin/plugin.json             | 2 +-
 .codex-plugin/plugin.json              | 2 +-
 CHANGELOG.md                           | 2 ++
 apps/desktop/package.json              | 2 +-
 apps/desktop/src-tauri/Cargo.lock      | 2 +-
 apps/desktop/src-tauri/Cargo.toml      | 2 +-
 apps/desktop/src-tauri/tauri.conf.json | 2 +-
 gemini-extension.json                  | 2 +-
 package.json                           | 2 +-
 10 files changed, 11 insertions(+), 9 deletions(-)

diff --git a/.claude-plugin/marketplace.json b/.claude-plugin/marketplace.json
index 62a1df1..826be18 100644
--- a/.claude-plugin/marketplace.json
+++ b/.claude-plugin/marketplace.json
@@ -9,7 +9,7 @@
       "name": "storebound",
       "source": ".",
       "description": "Take a mobile app or game from nothing to Submit for review on both stores: skills for every store step and questionnaire plus the storebound CLI and MCP server.",
-      "version": "0.8.73",
+      "version": "0.8.74",
       "category": "development",
       "tags": [
         "mobile",
diff --git a/.claude-plugin/plugin.json b/.claude-plugin/plugin.json
index 11502d2..1437a74 100644
--- a/.claude-plugin/plugin.json
+++ b/.claude-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.73",
+  "version": "0.8.74",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/.codex-plugin/plugin.json b/.codex-plugin/plugin.json
index ae6a14b..34ffbd3 100644
--- a/.codex-plugin/plugin.json
+++ b/.codex-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.73",
+  "version": "0.8.74",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/CHANGELOG.md b/CHANGELOG.md
index efab712..cdc352a 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,8 @@
 
 ## Unreleased
 
+## 0.8.74 · 2026-11-08
+
 - 0.8.73 was tagged but not published (a GitHub 504 in the Linux AppImage bundling); 0.8.74 ships its section below. CI caches the AppImage tools and retries the Linux bundle.
 
 ## 0.8.73 · 2026-11-08
diff --git a/apps/desktop/package.json b/apps/desktop/package.json
index c410b0b..d06554f 100644
--- a/apps/desktop/package.json
+++ b/apps/desktop/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@storebound/desktop",
-  "version": "0.8.73",
+  "version": "0.8.74",
   "private": true,
   "license": "MIT",
   "type": "module",
diff --git a/apps/desktop/src-tauri/Cargo.lock b/apps/desktop/src-tauri/Cargo.lock
index dd4cc4a..ac3365e 100644
--- a/apps/desktop/src-tauri/Cargo.lock
+++ b/apps/desktop/src-tauri/Cargo.lock
@@ -4096,7 +4096,7 @@ checksum = "a2eb9349b6444b326872e140eb1cf5e7c522154d69e7a0ffb0fb81c06b37543f"
 
 [[package]]
 name = "storebound-desktop"
-version = "0.8.73"
+version = "0.8.74"
 dependencies = [
  "base64 0.22.1",
  "getrandom 0.3.4",
diff --git a/apps/desktop/src-tauri/Cargo.toml b/apps/desktop/src-tauri/Cargo.toml
index 349c6f1..e88f770 100644
--- a/apps/desktop/src-tauri/Cargo.toml
+++ b/apps/desktop/src-tauri/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "storebound-desktop"
-version = "0.8.73"
+version = "0.8.74"
 description = "storebound desktop: every game's releases on both stores in one window"
 license = "MIT"
 edition = "2021"
diff --git a/apps/desktop/src-tauri/tauri.conf.json b/apps/desktop/src-tauri/tauri.conf.json
index d4e2779..3f984da 100644
--- a/apps/desktop/src-tauri/tauri.conf.json
+++ b/apps/desktop/src-tauri/tauri.conf.json
@@ -2,7 +2,7 @@
   "$schema": "https://schema.tauri.app/config/2",
   "productName": "storebound",
   "mainBinaryName": "storebound-desktop",
-  "version": "0.8.73",
+  "version": "0.8.74",
   "identifier": "dev.storebound.desktop",
   "build": {
     "frontendDist": "../dist",
diff --git a/gemini-extension.json b/gemini-extension.json
index 40ed0e8..73e5d42 100644
--- a/gemini-extension.json
+++ b/gemini-extension.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.73",
+  "version": "0.8.74",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "contextFileName": "GEMINI.md",
   "mcpServers": {
diff --git a/package.json b/package.json
index c63e1d6..d782149 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.73",
+  "version": "0.8.74",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every store questionnaire (incl. account deletion and App Review demo accounts), privacy, icons, screenshots and previews, TestFlight. After launch: crash vitals, review replies, price sheets, analytics and Product Page Optimization. One config, a CLI (Node 20+ or Bun), an MCP server and Agent Skills for your AI coding agent.",
   "license": "MIT",
   "author": "CRTkafa",

From 793c322f99062e5e296bedba01832404ece84ac8 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Sun, 8 Nov 2026 17:37:34 +0700
Subject: [PATCH 121/126] CHANGELOG: 0.8.74 was not published (GitHub 504)

---
 CHANGELOG.md | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index cdc352a..4a2b9ee 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,8 @@
 
 ## Unreleased
 
+- 0.8.74 was tagged but not published (GitHub release downloads answered 504 during the Linux AppImage bundling); 0.8.75 ships its section.
+
 ## 0.8.74 · 2026-11-08
 
 - 0.8.73 was tagged but not published (a GitHub 504 in the Linux AppImage bundling); 0.8.74 ships its section below. CI caches the AppImage tools and retries the Linux bundle.

From c1bed9440e616a3b1bd65e43168cf00363cbc424 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Sun, 8 Nov 2026 17:40:26 +0700
Subject: [PATCH 122/126] storebound 0.8.75: version in package.json and every
 copy, CHANGELOG 0.8.75 section

---
 .claude-plugin/marketplace.json        | 2 +-
 .claude-plugin/plugin.json             | 2 +-
 .codex-plugin/plugin.json              | 2 +-
 CHANGELOG.md                           | 2 ++
 apps/desktop/package.json              | 2 +-
 apps/desktop/src-tauri/Cargo.lock      | 2 +-
 apps/desktop/src-tauri/Cargo.toml      | 2 +-
 apps/desktop/src-tauri/tauri.conf.json | 2 +-
 gemini-extension.json                  | 2 +-
 package.json                           | 2 +-
 10 files changed, 11 insertions(+), 9 deletions(-)

diff --git a/.claude-plugin/marketplace.json b/.claude-plugin/marketplace.json
index 826be18..e532be7 100644
--- a/.claude-plugin/marketplace.json
+++ b/.claude-plugin/marketplace.json
@@ -9,7 +9,7 @@
       "name": "storebound",
       "source": ".",
       "description": "Take a mobile app or game from nothing to Submit for review on both stores: skills for every store step and questionnaire plus the storebound CLI and MCP server.",
-      "version": "0.8.74",
+      "version": "0.8.75",
       "category": "development",
       "tags": [
         "mobile",
diff --git a/.claude-plugin/plugin.json b/.claude-plugin/plugin.json
index 1437a74..3dea39a 100644
--- a/.claude-plugin/plugin.json
+++ b/.claude-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.74",
+  "version": "0.8.75",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/.codex-plugin/plugin.json b/.codex-plugin/plugin.json
index 34ffbd3..0c0927e 100644
--- a/.codex-plugin/plugin.json
+++ b/.codex-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.74",
+  "version": "0.8.75",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 4a2b9ee..37bd801 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,8 @@
 
 ## Unreleased
 
+## 0.8.75 · 2026-11-08
+
 - 0.8.74 was tagged but not published (GitHub release downloads answered 504 during the Linux AppImage bundling); 0.8.75 ships its section.
 
 ## 0.8.74 · 2026-11-08
diff --git a/apps/desktop/package.json b/apps/desktop/package.json
index d06554f..2131b76 100644
--- a/apps/desktop/package.json
+++ b/apps/desktop/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@storebound/desktop",
-  "version": "0.8.74",
+  "version": "0.8.75",
   "private": true,
   "license": "MIT",
   "type": "module",
diff --git a/apps/desktop/src-tauri/Cargo.lock b/apps/desktop/src-tauri/Cargo.lock
index ac3365e..ce49174 100644
--- a/apps/desktop/src-tauri/Cargo.lock
+++ b/apps/desktop/src-tauri/Cargo.lock
@@ -4096,7 +4096,7 @@ checksum = "a2eb9349b6444b326872e140eb1cf5e7c522154d69e7a0ffb0fb81c06b37543f"
 
 [[package]]
 name = "storebound-desktop"
-version = "0.8.74"
+version = "0.8.75"
 dependencies = [
  "base64 0.22.1",
  "getrandom 0.3.4",
diff --git a/apps/desktop/src-tauri/Cargo.toml b/apps/desktop/src-tauri/Cargo.toml
index e88f770..e147fe4 100644
--- a/apps/desktop/src-tauri/Cargo.toml
+++ b/apps/desktop/src-tauri/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "storebound-desktop"
-version = "0.8.74"
+version = "0.8.75"
 description = "storebound desktop: every game's releases on both stores in one window"
 license = "MIT"
 edition = "2021"
diff --git a/apps/desktop/src-tauri/tauri.conf.json b/apps/desktop/src-tauri/tauri.conf.json
index 3f984da..b510d03 100644
--- a/apps/desktop/src-tauri/tauri.conf.json
+++ b/apps/desktop/src-tauri/tauri.conf.json
@@ -2,7 +2,7 @@
   "$schema": "https://schema.tauri.app/config/2",
   "productName": "storebound",
   "mainBinaryName": "storebound-desktop",
-  "version": "0.8.74",
+  "version": "0.8.75",
   "identifier": "dev.storebound.desktop",
   "build": {
     "frontendDist": "../dist",
diff --git a/gemini-extension.json b/gemini-extension.json
index 73e5d42..a269708 100644
--- a/gemini-extension.json
+++ b/gemini-extension.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.74",
+  "version": "0.8.75",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "contextFileName": "GEMINI.md",
   "mcpServers": {
diff --git a/package.json b/package.json
index d782149..586da92 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.74",
+  "version": "0.8.75",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every store questionnaire (incl. account deletion and App Review demo accounts), privacy, icons, screenshots and previews, TestFlight. After launch: crash vitals, review replies, price sheets, analytics and Product Page Optimization. One config, a CLI (Node 20+ or Bun), an MCP server and Agent Skills for your AI coding agent.",
   "license": "MIT",
   "author": "CRTkafa",

From 7e362ef962880afa6ecda72d7ff6624363374f0e Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Sun, 8 Nov 2026 18:20:36 +0700
Subject: [PATCH 123/126] ci: AppImage tools from the Forgejo mirror
 (sha256-checked) into ~/.cache/tauri; GitHub release assets fail too often

---
 .forgejo/workflows/ci.yml |  2 ++
 CHANGELOG.md              |  2 ++
 tools/ci-tauri-tools.sh   | 13 +++++++++++++
 3 files changed, 17 insertions(+)
 create mode 100755 tools/ci-tauri-tools.sh

diff --git a/.forgejo/workflows/ci.yml b/.forgejo/workflows/ci.yml
index b411154..656ac95 100644
--- a/.forgejo/workflows/ci.yml
+++ b/.forgejo/workflows/ci.yml
@@ -174,6 +174,7 @@ jobs:
         run: |
           rm -rf "$CARGO_TARGET_DIR/release/bundle"
           # the AppImage tools come from GitHub releases, which answer 504 now and then (cached in ~/.cache/tauri)
+          bash ../../tools/ci-tauri-tools.sh
           for i in 1 2 3; do bun ../../tools/desktop-release.ts exec -- bunx tauri build --bundles appimage,deb --ci && break; [ $i = 3 ] && exit 1; sleep 30; done
       - name: Self-test the exact artifacts
         run: |
@@ -238,6 +239,7 @@ jobs:
           bun tools/build-sidecars.ts --target bun-linux-x64
           patchelf --set-rpath '$ORIGIN/../lib' apps/desktop/src-tauri/binaries/storebound-x86_64-unknown-linux-gnu
           B="$CARGO_TARGET_DIR/release/bundle"; rm -rf "$B"
+          bash tools/ci-tauri-tools.sh
           for i in 1 2 3; do (cd apps/desktop && bun ../../tools/desktop-release.ts exec -- bunx tauri build --bundles appimage,deb --ci) && break; [ $i = 3 ] && exit 1; sleep 30; done
           mkdir -p dev && cp "$B/appimage/storebound_${V}_amd64.AppImage" "$B/deb/storebound_${V}_amd64.deb" dev/
           chmod +x dev/*.AppImage
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 37bd801..695db9b 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,8 @@
 
 ## Unreleased
 
+- 0.8.75 was tagged but not published (GitHub 502/504 in the Linux AppImage bundling). CI now takes the AppImage tools from a checked mirror instead of GitHub.
+
 ## 0.8.75 · 2026-11-08
 
 - 0.8.74 was tagged but not published (GitHub release downloads answered 504 during the Linux AppImage bundling); 0.8.75 ships its section.
diff --git a/tools/ci-tauri-tools.sh b/tools/ci-tauri-tools.sh
new file mode 100755
index 0000000..63f6841
--- /dev/null
+++ b/tools/ci-tauri-tools.sh
@@ -0,0 +1,13 @@
+#!/usr/bin/env bash
+# Puts the AppImage tools Tauri's bundler would download from GitHub releases (which answer 502/504 now and then) into
+# ~/.cache/tauri from our Forgejo package mirror, checked against its SHA256SUMS. Tauri skips the download when they exist.
+set -eu
+B="${TAURI_TOOLS_MIRROR:-https://git.crt.fyi/api/packages/CRT/generic/tauri-linux-tools/2026.11.08}"
+D="$HOME/.cache/tauri"; mkdir -p "$D"; cd "$D"
+curl -fsSL --retry 3 --max-time 60 -o SHA256SUMS "$B/SHA256SUMS"
+while read -r sum f; do
+  f="${f#\*}"
+  if ! echo "$sum  $f" | sha256sum -c --status 2>/dev/null; then curl -fsSL --retry 3 --max-time 300 -o "$f" "$B/$f"; echo "$sum  $f" | sha256sum -c --status; fi
+  chmod +x "$f"
+done < SHA256SUMS
+rm -f SHA256SUMS; ls "$D"

From 5cc3da486da95ff84d6317fe2c1007f63d2080a7 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Sun, 8 Nov 2026 18:24:15 +0700
Subject: [PATCH 124/126] storebound 0.8.76: version in package.json and every
 copy, CHANGELOG 0.8.76 section

---
 .claude-plugin/marketplace.json        | 2 +-
 .claude-plugin/plugin.json             | 2 +-
 .codex-plugin/plugin.json              | 2 +-
 CHANGELOG.md                           | 2 ++
 apps/desktop/package.json              | 2 +-
 apps/desktop/src-tauri/Cargo.lock      | 2 +-
 apps/desktop/src-tauri/Cargo.toml      | 2 +-
 apps/desktop/src-tauri/tauri.conf.json | 2 +-
 gemini-extension.json                  | 2 +-
 package.json                           | 2 +-
 10 files changed, 11 insertions(+), 9 deletions(-)

diff --git a/.claude-plugin/marketplace.json b/.claude-plugin/marketplace.json
index e532be7..05ef60d 100644
--- a/.claude-plugin/marketplace.json
+++ b/.claude-plugin/marketplace.json
@@ -9,7 +9,7 @@
       "name": "storebound",
       "source": ".",
       "description": "Take a mobile app or game from nothing to Submit for review on both stores: skills for every store step and questionnaire plus the storebound CLI and MCP server.",
-      "version": "0.8.75",
+      "version": "0.8.76",
       "category": "development",
       "tags": [
         "mobile",
diff --git a/.claude-plugin/plugin.json b/.claude-plugin/plugin.json
index 3dea39a..9d027bf 100644
--- a/.claude-plugin/plugin.json
+++ b/.claude-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.75",
+  "version": "0.8.76",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/.codex-plugin/plugin.json b/.codex-plugin/plugin.json
index 0c0927e..654fc45 100644
--- a/.codex-plugin/plugin.json
+++ b/.codex-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.75",
+  "version": "0.8.76",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 695db9b..d9b4dab 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,8 @@
 
 ## Unreleased
 
+## 0.8.76 · 2026-11-08
+
 - 0.8.75 was tagged but not published (GitHub 502/504 in the Linux AppImage bundling). CI now takes the AppImage tools from a checked mirror instead of GitHub.
 
 ## 0.8.75 · 2026-11-08
diff --git a/apps/desktop/package.json b/apps/desktop/package.json
index 2131b76..fe04e9d 100644
--- a/apps/desktop/package.json
+++ b/apps/desktop/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@storebound/desktop",
-  "version": "0.8.75",
+  "version": "0.8.76",
   "private": true,
   "license": "MIT",
   "type": "module",
diff --git a/apps/desktop/src-tauri/Cargo.lock b/apps/desktop/src-tauri/Cargo.lock
index ce49174..5c1bdec 100644
--- a/apps/desktop/src-tauri/Cargo.lock
+++ b/apps/desktop/src-tauri/Cargo.lock
@@ -4096,7 +4096,7 @@ checksum = "a2eb9349b6444b326872e140eb1cf5e7c522154d69e7a0ffb0fb81c06b37543f"
 
 [[package]]
 name = "storebound-desktop"
-version = "0.8.75"
+version = "0.8.76"
 dependencies = [
  "base64 0.22.1",
  "getrandom 0.3.4",
diff --git a/apps/desktop/src-tauri/Cargo.toml b/apps/desktop/src-tauri/Cargo.toml
index e147fe4..4d0f9db 100644
--- a/apps/desktop/src-tauri/Cargo.toml
+++ b/apps/desktop/src-tauri/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "storebound-desktop"
-version = "0.8.75"
+version = "0.8.76"
 description = "storebound desktop: every game's releases on both stores in one window"
 license = "MIT"
 edition = "2021"
diff --git a/apps/desktop/src-tauri/tauri.conf.json b/apps/desktop/src-tauri/tauri.conf.json
index b510d03..cee5333 100644
--- a/apps/desktop/src-tauri/tauri.conf.json
+++ b/apps/desktop/src-tauri/tauri.conf.json
@@ -2,7 +2,7 @@
   "$schema": "https://schema.tauri.app/config/2",
   "productName": "storebound",
   "mainBinaryName": "storebound-desktop",
-  "version": "0.8.75",
+  "version": "0.8.76",
   "identifier": "dev.storebound.desktop",
   "build": {
     "frontendDist": "../dist",
diff --git a/gemini-extension.json b/gemini-extension.json
index a269708..451ed18 100644
--- a/gemini-extension.json
+++ b/gemini-extension.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.75",
+  "version": "0.8.76",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "contextFileName": "GEMINI.md",
   "mcpServers": {
diff --git a/package.json b/package.json
index 586da92..b78b422 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.75",
+  "version": "0.8.76",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every store questionnaire (incl. account deletion and App Review demo accounts), privacy, icons, screenshots and previews, TestFlight. After launch: crash vitals, review replies, price sheets, analytics and Product Page Optimization. One config, a CLI (Node 20+ or Bun), an MCP server and Agent Skills for your AI coding agent.",
   "license": "MIT",
   "author": "CRTkafa",

From 108b362cd9efa78f18aca46f8e0e3f88210935b4 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Mon, 9 Nov 2026 06:35:00 +0700
Subject: [PATCH 125/126] iPhone Duo: limit from Apple's reference data instead
 of a cut to 10, --duo-only; shared asset library helpers in their own module

---
 CHANGELOG.md                 |  2 ++
 cli/apple/asset-library.ts   | 57 ++++++++++++++++++++++++++++++++++++
 cli/apple/creative-assets.ts | 56 ++---------------------------------
 cli/apple/duo-library.ts     | 34 ++++++++++++++++-----
 cli/apple/screenshots.ts     | 10 +++----
 cli/data/flags.json          | 13 ++++----
 tests/ppo.test.ts            |  5 +++-
 7 files changed, 102 insertions(+), 75 deletions(-)
 create mode 100644 cli/apple/asset-library.ts

diff --git a/CHANGELOG.md b/CHANGELOG.md
index d9b4dab..5d1e2ed 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,8 @@
 
 ## Unreleased
 
+- **iPhone Duo:** outer and inner files are no longer cut to the first 10: the limit comes from Apple's reference data, and over it nothing changes and nothing is dropped. `apple screenshots --duo-only` writes only the Duo set. `apple cpp` no longer lists creative-assets flags.
+
 ## 0.8.76 · 2026-11-08
 
 - 0.8.75 was tagged but not published (GitHub 502/504 in the Linux AppImage bundling). CI now takes the AppImage tools from a checked mirror instead of GitHub.
diff --git a/cli/apple/asset-library.ts b/cli/apple/asset-library.ts
new file mode 100644
index 0000000..a484865
--- /dev/null
+++ b/cli/apple/asset-library.ts
@@ -0,0 +1,57 @@
+// App Asset Library states and upsert rules shared by creative assets and iPhone Duo screenshots. No command flags here.
+import * as rt from '../lib/rt';
+import type { J } from './asc';
+
+export const REF = (sum: string): string => `storebound ${sum}`;
+export const sumOf = (a: J): string | undefined => /^storebound ([0-9a-f]{32})$/.exec(String(a?.attributes?.referenceName ?? ''))?.[1];
+
+/** Asset states (AppAssetLibraryAssetState, API 4.5.1) by what storebound may do with them. */
+export const ASSET_STATES = {
+  /** still uploading / processing: wait (bounded), then select */
+  processing: ['AWAITING_UPLOAD', 'UPLOAD_COMPLETE'],
+  /** processed and usable in a slot; not reviewed yet: goes into a review submission */
+  unreviewed: ['COMPLETE', 'PREPARE_FOR_SUBMISSION'],
+  /** in a submission or reviewed: usable in a slot, nothing to add */
+  reviewing: ['READY_FOR_REVIEW', 'WAITING_FOR_REVIEW', 'IN_REVIEW', 'ACCEPTED', 'APPROVED'],
+} as const;
+export type AssetClass = 'processing' | 'unreviewed' | 'reviewing' | 'failed' | 'rejected' | 'archived' | 'unknown';
+
+/** What a library asset's state means for storebound. Pure. */
+export function classify(state: string | undefined): AssetClass {
+  const s = String(state ?? '');
+  for (const [k, v] of Object.entries(ASSET_STATES)) if ((v as readonly string[]).includes(s)) return k as AssetClass;
+  if (s === 'FAILED') return 'failed';
+  if (s === 'REJECTED') return 'rejected';
+  if (s === 'ARCHIVED') return 'archived';
+  return s ? 'unknown' : 'processing';
+}
+
+/** Selectable for a slot: processed and not failed / rejected / archived (Prepare for Submission is enough). */
+export const selectable = (c: AssetClass): boolean => c === 'unreviewed' || c === 'reviewing';
+
+/** Stop re-uploading a file whose earlier uploads failed processing this many times. */
+export const MAX_FAILED = 2;
+
+/** The library asset to use for one MD5: a live one first (newest state wins: reviewing > unreviewed > processing),
+ *  else an archived one (unarchive it), else none; plus why not to upload (a rejected file, repeated failures). Pure. */
+export function pickAsset(assets: J[], sum: string): { asset?: J; unarchive?: boolean; refuse?: string } {
+  const mine = assets.filter(x => sumOf(x) === sum);
+  const rank: Record<AssetClass, number> = { reviewing: 0, unreviewed: 1, processing: 2, unknown: 3, archived: 4, rejected: 5, failed: 6 };
+  const by = (c: AssetClass) => mine.filter(x => classify(x.attributes?.state) === c);
+  const live = mine.filter(x => rank[classify(x.attributes?.state)] <= 3).sort((a, b) => rank[classify(a.attributes?.state)] - rank[classify(b.attributes?.state)]);
+  if (live[0]) return { asset: live[0] };
+  if (by('archived')[0]) return { asset: by('archived')[0], unarchive: true };
+  const rej = by('rejected')[0];
+  if (rej) return { refuse: `rejected by App Review${reason(rej)}: uploading the same file again changes nothing; change the file` };
+  if (by('failed').length >= MAX_FAILED) return { refuse: `${by('failed').length} earlier uploads of this file failed processing${reason(by('failed')[0]!)}: check the file (format, size) before trying again` };
+  return {};
+}
+
+export const reason = (a: J): string => {
+  const d = ((a.attributes?.stateDetails ?? []) as J[]).map(x => x?.code ?? x?.message ?? x?.description).filter(Boolean);
+  return d.length ? ` (${d.join(', ')})` : '';
+};
+
+/** Bounded wait for processing (every wait has a timeout and a heartbeat); tests set waitMs 0 / timeoutMs 0. */
+export const processingTiming = { pollMs: 3000, timeoutMs: 120_000, heartbeatMs: 20_000, sleep: (ms: number): Promise<void> => (ms > 0 ? rt.sleep(ms) : Promise.resolve()) };
+
diff --git a/cli/apple/creative-assets.ts b/cli/apple/creative-assets.ts
index 7539022..78866a3 100644
--- a/cli/apple/creative-assets.ts
+++ b/cli/apple/creative-assets.ts
@@ -29,61 +29,17 @@ import { need } from '../lib/ctx';
 import { consoleLink } from '../lib/console-links';
 import { done, log, warn } from '../lib/log';
 import { elapsed } from '../lib/progress';
-import * as rt from '../lib/rt';
 import { ffprobe } from '../shots/report';
 import { imageInfo } from '../shots/spec';
 import { checkCreativeImage, checkCreativeVideo, type CreativeFile, creativeFiles, PLACEMENT_TYPE, type Placement } from '../shots/creative';
 import { type Asc, ascClient, md5, type J } from './asc';
+import { type AssetClass, ASSET_STATES, classify, MAX_FAILED, pickAsset, processingTiming, reason, REF, selectable, sumOf } from './asset-library';
+export { type AssetClass, ASSET_STATES, classify, MAX_FAILED, pickAsset, processingTiming, REF, selectable };
 import { partHeaders } from './screenshot-health';
 import { AmbiguousWriteError } from '../lib/upsert';
 import { addItem, ensureDraft, OtherSubmissionError } from './submission';
 
 const TAG = 'apple';
-export const REF = (sum: string): string => `storebound ${sum}`;
-const sumOf = (a: J): string | undefined => /^storebound ([0-9a-f]{32})$/.exec(String(a?.attributes?.referenceName ?? ''))?.[1];
-
-/** Asset states (AppAssetLibraryAssetState, API 4.5.1) by what storebound may do with them. */
-export const ASSET_STATES = {
-  /** still uploading / processing: wait (bounded), then select */
-  processing: ['AWAITING_UPLOAD', 'UPLOAD_COMPLETE'],
-  /** processed and usable in a slot; not reviewed yet: goes into a review submission */
-  unreviewed: ['COMPLETE', 'PREPARE_FOR_SUBMISSION'],
-  /** in a submission or reviewed: usable in a slot, nothing to add */
-  reviewing: ['READY_FOR_REVIEW', 'WAITING_FOR_REVIEW', 'IN_REVIEW', 'ACCEPTED', 'APPROVED'],
-} as const;
-export type AssetClass = 'processing' | 'unreviewed' | 'reviewing' | 'failed' | 'rejected' | 'archived' | 'unknown';
-
-/** What a library asset's state means for storebound. Pure. */
-export function classify(state: string | undefined): AssetClass {
-  const s = String(state ?? '');
-  for (const [k, v] of Object.entries(ASSET_STATES)) if ((v as readonly string[]).includes(s)) return k as AssetClass;
-  if (s === 'FAILED') return 'failed';
-  if (s === 'REJECTED') return 'rejected';
-  if (s === 'ARCHIVED') return 'archived';
-  return s ? 'unknown' : 'processing';
-}
-
-/** Selectable for a slot: processed and not failed / rejected / archived (Prepare for Submission is enough). */
-export const selectable = (c: AssetClass): boolean => c === 'unreviewed' || c === 'reviewing';
-
-/** Stop re-uploading a file whose earlier uploads failed processing this many times. */
-export const MAX_FAILED = 2;
-
-/** The library asset to use for one MD5: a live one first (newest state wins: reviewing > unreviewed > processing),
- *  else an archived one (unarchive it), else none; plus why not to upload (a rejected file, repeated failures). Pure. */
-export function pickAsset(assets: J[], sum: string): { asset?: J; unarchive?: boolean; refuse?: string } {
-  const mine = assets.filter(x => sumOf(x) === sum);
-  const rank: Record<AssetClass, number> = { reviewing: 0, unreviewed: 1, processing: 2, unknown: 3, archived: 4, rejected: 5, failed: 6 };
-  const by = (c: AssetClass) => mine.filter(x => classify(x.attributes?.state) === c);
-  const live = mine.filter(x => rank[classify(x.attributes?.state)] <= 3).sort((a, b) => rank[classify(a.attributes?.state)] - rank[classify(b.attributes?.state)]);
-  if (live[0]) return { asset: live[0] };
-  if (by('archived')[0]) return { asset: by('archived')[0], unarchive: true };
-  const rej = by('rejected')[0];
-  if (rej) return { refuse: `rejected by App Review${reason(rej)}: uploading the same file again changes nothing; change the file` };
-  if (by('failed').length >= MAX_FAILED) return { refuse: `${by('failed').length} earlier uploads of this file failed processing${reason(by('failed')[0]!)}: check the file (format, size) before trying again` };
-  return {};
-}
-
 /** "uploaded 2026-10-19, waiting for Apple's approval (IN_REVIEW); run `storebound apple creative-assets` again later".
  *  The version page's header / search slots offer only approved assets ("Browse approved assets"), so an asset that
  *  is not APPROVED waits; a later run places it. Pure. */
@@ -107,14 +63,6 @@ export async function creativeWaiting(c: Asc, appId: string, local: Map<string,
   return out;
 }
 
-const reason = (a: J): string => {
-  const d = ((a.attributes?.stateDetails ?? []) as J[]).map(x => x?.code ?? x?.message ?? x?.description).filter(Boolean);
-  return d.length ? ` (${d.join(', ')})` : '';
-};
-
-/** Bounded wait for processing (every wait has a timeout and a heartbeat); tests set waitMs 0 / timeoutMs 0. */
-export const processingTiming = { pollMs: 3000, timeoutMs: 120_000, heartbeatMs: 20_000, sleep: (ms: number): Promise<void> => (ms > 0 ? rt.sleep(ms) : Promise.resolve()) };
-
 export interface Row { locale: string; placement: Placement; file: string; action: 'keep' | 'upload' | 'reuse' | 'wait' | 'select' | 'replace' | 'approve' | 'refuse'; state?: string; asset?: J }
 
 /** Local files per App Store locale, checked; throws on any error before a network call. */
diff --git a/cli/apple/duo-library.ts b/cli/apple/duo-library.ts
index 8e090fc..76c2383 100644
--- a/cli/apple/duo-library.ts
+++ b/cli/apple/duo-library.ts
@@ -8,18 +8,18 @@
 //   3. POST appAssetLibraryPlacements (placementType APP_SCREENSHOT, placementGroup, the version localization).
 //      Screenshots are reviewed with the version, so a processed asset is placed at once (no approval wait).
 // Upsert: a group whose placements already show the local files in order is left alone; otherwise its placements are
-// removed and the files placed in order (outer display files first, then inner; at most 10). Read back at the end.
+// removed and the files placed in order (outer display files first, then inner). Never truncated: more files than
+// the limit Apple publishes for the group (refData groupLimits) changes nothing and says so. Read back at the end.
 import { readFileSync } from 'node:fs';
 import { basename } from 'node:path';
 import { log, warn } from '../lib/log';
 import { elapsed } from '../lib/progress';
-import { classify, pickAsset, processingTiming, REF, selectable } from './creative-assets';
+import { classify, pickAsset, processingTiming, REF, selectable } from './asset-library';
 import { type Asc, md5, type J } from './asc';
 import { partHeaders } from './screenshot-health';
 
 const TAG = 'apple';
 export const DUO_CATEGORY = 'APP_SCREENSHOTS_AND_PREVIEWS';
-export const DUO_MAX = 10;
 const sumOf = (a: J | undefined): string | undefined => /^storebound ([0-9a-f]{32})$/.exec(String(a?.attributes?.referenceName ?? ''))?.[1];
 
 /** iPhone placement profile group ids (platform IOS or IPHONE_APP_STORE, as the live API answers) of the IPHONE_DUO display class in an appAssetLibraryRefData response. Pure. */
@@ -30,26 +30,44 @@ export function duoGroups(refData: J[]): string[] {
   return [...ids];
 }
 
+/** Apple's screenshot limit for a placement group on a version page, or null when refData publishes none. Pure. */
+export function duoLimit(refData: J[], group: string): number | null {
+  for (const r of refData) for (const f of (r?.attributes?.features ?? []) as J[]) {
+    if (f?.featureId !== 'APP_STORE_VERSIONS') continue;
+    for (const p of (f.placementPolicies ?? []) as J[]) {
+      if (p?.placementType !== 'APP_SCREENSHOT') continue;
+      for (const l of (p.groupLimits ?? []) as J[]) if ((l?.groupIds ?? []).includes(group) && typeof l.maxCount === 'number') return l.maxCount;
+    }
+  }
+  return null;
+}
+
 /** Whether a group's current placements (asset MD5s in order) already show `want`. Pure. */
 export const duoUpToDate = (shown: (string | undefined)[], want: string[]): boolean => shown.length === want.length && shown.every((s, i) => s === want[i]);
 
 export interface DuoResult { locale: string; action: 'keep' | 'place' | 'wait' | 'refuse' | 'plan'; files: number }
 
 /** Resolves the Duo placement group once per run; throws with the guardrail text when the API lists none. */
-export async function duoGroup(c: Asc): Promise<string> {
+export async function duoGroup(c: Asc): Promise<{ id: string; limit: number | null }> {
   const ref = await c.all('/v1/appAssetLibraryRefData?filter[placementTypes]=APP_SCREENSHOT');
   const g = duoGroups(ref);
   if (!g.length) throw new Error('appAssetLibraryRefData lists no iOS IPHONE_DUO placement group for APP_SCREENSHOT: report it (pitfall 130); the console version page > App Previews and Screenshots > iPhone Duo takes them meanwhile');
   if (g.length > 1) log(TAG, `iPhone Duo: ${g.length} placement groups (${g.join(', ')}), using ${g[0]}`);
-  return g[0]!;
+  const limit = duoLimit(ref, g[0]!);
+  log(TAG, `iPhone Duo: placement group ${g[0]}, limit ${limit ?? 'not published'}`);
+  return { id: g[0]!, limit };
 }
 
 /** Makes the iPhone Duo screenshots of one version localization show `files` in order. */
-export async function syncDuo(c: Asc, o: { appId: string; group: string; loc: J; files: string[]; dry: boolean }): Promise<DuoResult> {
+export async function syncDuo(c: Asc, o: { appId: string; group: string; limit: number | null; loc: J; files: string[]; dry: boolean }): Promise<DuoResult> {
   const locale: string = o.loc.attributes.locale;
   const tag = `${locale} IPHONE_DUO`;
-  const files = o.files.slice(0, DUO_MAX);
-  if (o.files.length > DUO_MAX) warn(TAG, `${tag}: ${o.files.length} files, only the first ${DUO_MAX} are used`);
+  const files = o.files;
+  if (o.limit !== null && files.length > o.limit) {
+    warn(TAG, `${tag}: ${files.length} files (outer + inner) but Apple allows ${o.limit} in this group: nothing changed, none dropped. Keep at most ${o.limit} across iphone-duo-outer/ and iphone-duo-inner/`);
+    process.exitCode = 1;
+    return { locale, action: 'refuse', files: files.length };
+  }
   const lib = (await c.asc('GET', `/v1/apps/${o.appId}/assetLibrary`)).data as J;
   const library = () => c.all(`/v1/appAssetLibraries/${lib.id}/images?filter[category]=${DUO_CATEGORY}&limit=200`);
   let assets = await library();
diff --git a/cli/apple/screenshots.ts b/cli/apple/screenshots.ts
index de2f3fe..f2439fd 100644
--- a/cli/apple/screenshots.ts
+++ b/cli/apple/screenshots.ts
@@ -1,6 +1,6 @@
 // Store screenshots of every locale on the editable App Store version (idempotent: a set whose files already match
 // by MD5 and order is left alone, otherwise it is emptied and re-uploaded).
-//   storebound apple screenshots [--src store/renders] [--only en-US,tr] [--jobs 4] [--variant b] [--dry]
+//   storebound apple screenshots [--src store/renders] [--only en-US,tr] [--jobs 4] [--variant b] [--duo-only] [--dry]
 //   storebound apple screenshots --repair-stuck [--dry]   (only the screenshots stuck outside COMPLETE, in place)
 // Source per language: <renders>/<language id>/ios69/NN.png (6.9", 1320 x 2868 -> APP_IPHONE_67),
 // ios65/NN.png (6.5", 1284 x 2778 -> APP_IPHONE_65) and, only with apple.ipad, ipad13/NN.png (13" iPad, 2064 x 2752 ->
@@ -98,7 +98,7 @@ export async function run(ctx: Ctx): Promise<void> {
   log('apple', `screenshots for version ${versionLabel(version)}`);
   let duo = platform === 'MAC_OS' ? [] : duoDirs(config.apple);
   // a Duo problem never stops the other sets
-  const duoGroupId = duo.length ? await duoGroup(c).catch((e: Error) => { warn('apple', `iPhone Duo skipped: ${e.message}`); duo = []; return ''; }) : '';
+  const duoGroupId = duo.length ? await duoGroup(c).catch((e: Error) => { warn('apple', `iPhone Duo skipped: ${e.message}`); duo = []; return null; }) : null;
   const appId = duo.length ? await c.app() : '';
   if (platform === 'MAC_OS' && !config.apple?.mac) throw new Error('macOS version: set apple.mac: true and render the mac size (storebound shots render --size mac) first');
   if (platform !== 'MAC_OS' && config.apple?.mac) log('apple', 'Mac screenshots (mac/, APP_DESKTOP) go to the macOS version: run apple screenshots --platform macos');
@@ -121,16 +121,16 @@ export async function run(ctx: Ctx): Promise<void> {
     if (!lang) { warn('apple', `${locale}: no language with apple: "${locale}", skipped`); continue; }
     tasks.push(async () => {
       const sets = await c.all(`/v1/appStoreVersionLocalizations/${loc.id}/appScreenshotSets`);
-      for (const [dir, type] of Object.entries(displaySets(config.apple, platform))) {
+      for (const [dir, type] of Object.entries(ctx.args.has('duo-only') ? {} : displaySets(config.apple, platform))) {
         const d = join(src, lang.id, dir);
         const files = numberedImages(d).filter(f => f.endsWith('.png')).slice(0, 10);
         if (!existsSync(d) || !files.length) { warn('apple', `${locale}: nothing in ${d}, skipped`); continue; }
         await syncSet(loc.id, sets, type, files, `${locale} ${type}`);
       }
-      if (duo.length) {
+      if (duo.length && duoGroupId) {
         const files = duo.flatMap(dir => numberedImages(join(src, lang.id, dir)).filter(f => f.endsWith('.png')));
         if (!files.length) warn('apple', `${locale}: nothing in ${duo.map(d => join(src, lang.id, d)).join(' or ')}, iPhone Duo skipped`);
-        else await syncDuo(c, { appId, group: duoGroupId, loc, files, dry: ctx.args.has('dry') }).catch((e: Error) => { warn('apple', `${locale} iPhone Duo: ${e.message}`); process.exitCode = 1; });
+        else await syncDuo(c, { appId, group: duoGroupId.id, limit: duoGroupId.limit, loc, files, dry: ctx.args.has('dry') }).catch((e: Error) => { warn('apple', `${locale} iPhone Duo: ${e.message}`); process.exitCode = 1; });
       }
     });
   }
diff --git a/cli/data/flags.json b/cli/data/flags.json
index b8058b6..fcb31d3 100644
--- a/cli/data/flags.json
+++ b/cli/data/flags.json
@@ -106,7 +106,7 @@
    "name"
   ],
   "apple cpp": [
-   "add-for-review",
+   "duo-only",
    "include-drafts",
    "jobs",
    "name",
@@ -117,7 +117,6 @@
    "repair-stuck",
    "src",
    "variant",
-   "verify",
    "write"
   ],
   "apple creative-assets": [
@@ -206,7 +205,7 @@
    "write"
   ],
   "apple ppo": [
-   "add-for-review",
+   "duo-only",
    "experiment",
    "include-drafts",
    "jobs",
@@ -218,7 +217,6 @@
    "src",
    "traffic",
    "variant",
-   "verify",
    "write"
   ],
   "apple preorder": [
@@ -274,7 +272,7 @@
    "platform"
   ],
   "apple screenshots": [
-   "add-for-review",
+   "duo-only",
    "include-drafts",
    "jobs",
    "not-sent-for-review",
@@ -283,7 +281,6 @@
    "repair-stuck",
    "src",
    "variant",
-   "verify",
    "write"
   ],
   "apple signing": [
@@ -1119,6 +1116,7 @@
    "cordova-android",
    "cordova-ios",
    "days",
+   "duo-only",
    "expo",
    "flutter",
    "godot",
@@ -1250,6 +1248,7 @@
    "device",
    "dir",
    "download",
+   "duo-only",
    "enable",
    "end",
    "entitlements",
@@ -1594,7 +1593,7 @@
    "storebound apple review-details [--platform ios|macos|tvos|visionos] [--contact-from <Apple ID of another app>] [--dry]"
   ],
   "apple screenshots": [
-   "storebound apple screenshots [--src store/renders] [--only en-US,tr] [--jobs 4] [--variant b] [--dry]",
+   "storebound apple screenshots [--src store/renders] [--only en-US,tr] [--jobs 4] [--variant b] [--duo-only] [--dry]",
    "storebound apple screenshots --repair-stuck [--dry]   (only the screenshots stuck outside COMPLETE, in place)"
   ],
   "apple signing": [
diff --git a/tests/ppo.test.ts b/tests/ppo.test.ts
index 0d147fa..b63e096 100644
--- a/tests/ppo.test.ts
+++ b/tests/ppo.test.ts
@@ -1,6 +1,6 @@
 import { describe, expect, test } from 'bun:test';
 import { displaySets, duoDirs } from '../cli/apple/screenshots';
-import { duoGroups, duoUpToDate } from '../cli/apple/duo-library';
+import { duoGroups, duoLimit, duoUpToDate } from '../cli/apple/duo-library';
 import { appleRules } from '../cli/lib/validate-rules';
 import { checkCreate, createExperimentReq, defaultName, experimentFromApi, pickExperiment, planTreatmentLocales, planTreatments, startStopReq } from '../cli/lib/ppo';
 import { validateConfig } from '../cli/lib/config';
@@ -105,6 +105,9 @@ describe('iPhone Duo (foldable) sizes', () => {
     expect(duoGroups(ref)).toEqual(['g-duo']);
     expect(duoGroups([])).toEqual([]);
     expect(duoGroups([{ attributes: { placementProfileGroups: [{ placementProfileGroupId: 'IPHONE_DUO_PROFILE', platform: 'IPHONE_APP_STORE', displayClassId: 'IPHONE_DUO' }] } }])).toEqual(['IPHONE_DUO_PROFILE']);
+    const lim = [{ attributes: { features: [{ featureId: 'IN_APP_EVENTS', placementPolicies: [{ placementType: 'APP_SCREENSHOT', groupLimits: [{ groupIds: ['g'], maxCount: 1 }] }] }, { featureId: 'APP_STORE_VERSIONS', placementPolicies: [{ placementType: 'APP_SCREENSHOT', groupLimits: [{ groupIds: ['g'], maxCount: 20 }] }] }] } }];
+    expect(duoLimit(lim, 'g')).toBe(20);
+    expect(duoLimit(lim, 'other')).toBeNull();
     expect(duoUpToDate(['a', 'b'], ['a', 'b'])).toBe(true);
     expect(duoUpToDate(['b', 'a'], ['a', 'b'])).toBe(false);
     expect(duoUpToDate(['a', undefined], ['a', 'b'])).toBe(false);

From 73e4614b34b7349f58f1fdd77cafa232a00da599 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Mon, 9 Nov 2026 06:37:51 +0700
Subject: [PATCH 126/126] storebound 0.8.77: version in package.json and every
 copy, CHANGELOG 0.8.77 section

---
 .claude-plugin/marketplace.json        | 2 +-
 .claude-plugin/plugin.json             | 2 +-
 .codex-plugin/plugin.json              | 2 +-
 CHANGELOG.md                           | 2 ++
 apps/desktop/package.json              | 2 +-
 apps/desktop/src-tauri/Cargo.lock      | 2 +-
 apps/desktop/src-tauri/Cargo.toml      | 2 +-
 apps/desktop/src-tauri/tauri.conf.json | 2 +-
 gemini-extension.json                  | 2 +-
 package.json                           | 2 +-
 10 files changed, 11 insertions(+), 9 deletions(-)

diff --git a/.claude-plugin/marketplace.json b/.claude-plugin/marketplace.json
index 05ef60d..fcc4c0d 100644
--- a/.claude-plugin/marketplace.json
+++ b/.claude-plugin/marketplace.json
@@ -9,7 +9,7 @@
       "name": "storebound",
       "source": ".",
       "description": "Take a mobile app or game from nothing to Submit for review on both stores: skills for every store step and questionnaire plus the storebound CLI and MCP server.",
-      "version": "0.8.76",
+      "version": "0.8.77",
       "category": "development",
       "tags": [
         "mobile",
diff --git a/.claude-plugin/plugin.json b/.claude-plugin/plugin.json
index 9d027bf..4b980c5 100644
--- a/.claude-plugin/plugin.json
+++ b/.claude-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.76",
+  "version": "0.8.77",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/.codex-plugin/plugin.json b/.codex-plugin/plugin.json
index 654fc45..397705c 100644
--- a/.codex-plugin/plugin.json
+++ b/.codex-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.76",
+  "version": "0.8.77",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 5d1e2ed..a0bcd5e 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,8 @@
 
 ## Unreleased
 
+## 0.8.77 · 2026-11-08
+
 - **iPhone Duo:** outer and inner files are no longer cut to the first 10: the limit comes from Apple's reference data, and over it nothing changes and nothing is dropped. `apple screenshots --duo-only` writes only the Duo set. `apple cpp` no longer lists creative-assets flags.
 
 ## 0.8.76 · 2026-11-08
diff --git a/apps/desktop/package.json b/apps/desktop/package.json
index fe04e9d..395fdfd 100644
--- a/apps/desktop/package.json
+++ b/apps/desktop/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@storebound/desktop",
-  "version": "0.8.76",
+  "version": "0.8.77",
   "private": true,
   "license": "MIT",
   "type": "module",
diff --git a/apps/desktop/src-tauri/Cargo.lock b/apps/desktop/src-tauri/Cargo.lock
index 5c1bdec..be06ab9 100644
--- a/apps/desktop/src-tauri/Cargo.lock
+++ b/apps/desktop/src-tauri/Cargo.lock
@@ -4096,7 +4096,7 @@ checksum = "a2eb9349b6444b326872e140eb1cf5e7c522154d69e7a0ffb0fb81c06b37543f"
 
 [[package]]
 name = "storebound-desktop"
-version = "0.8.76"
+version = "0.8.77"
 dependencies = [
  "base64 0.22.1",
  "getrandom 0.3.4",
diff --git a/apps/desktop/src-tauri/Cargo.toml b/apps/desktop/src-tauri/Cargo.toml
index 4d0f9db..95dca43 100644
--- a/apps/desktop/src-tauri/Cargo.toml
+++ b/apps/desktop/src-tauri/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "storebound-desktop"
-version = "0.8.76"
+version = "0.8.77"
 description = "storebound desktop: every game's releases on both stores in one window"
 license = "MIT"
 edition = "2021"
diff --git a/apps/desktop/src-tauri/tauri.conf.json b/apps/desktop/src-tauri/tauri.conf.json
index cee5333..ab2239f 100644
--- a/apps/desktop/src-tauri/tauri.conf.json
+++ b/apps/desktop/src-tauri/tauri.conf.json
@@ -2,7 +2,7 @@
   "$schema": "https://schema.tauri.app/config/2",
   "productName": "storebound",
   "mainBinaryName": "storebound-desktop",
-  "version": "0.8.76",
+  "version": "0.8.77",
   "identifier": "dev.storebound.desktop",
   "build": {
     "frontendDist": "../dist",
diff --git a/gemini-extension.json b/gemini-extension.json
index 451ed18..112ed09 100644
--- a/gemini-extension.json
+++ b/gemini-extension.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.76",
+  "version": "0.8.77",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "contextFileName": "GEMINI.md",
   "mcpServers": {
diff --git a/package.json b/package.json
index b78b422..a62d97e 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.76",
+  "version": "0.8.77",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every store questionnaire (incl. account deletion and App Review demo accounts), privacy, icons, screenshots and previews, TestFlight. After launch: crash vitals, review replies, price sheets, analytics and Product Page Optimization. One config, a CLI (Node 20+ or Bun), an MCP server and Agent Skills for your AI coding agent.",
   "license": "MIT",
   "author": "CRTkafa",